samba-client-libs-4.19.8+git.399.71536ca297e-150600.3.9.6<>, zg,Kp9|t 0]+DȻEr~S"NCEG7 bxjs(詵>d;xFvdT#$JjLyO>ڌ4?Gw`=`lKDh3uvD `ĭ=4s>Ͻ _,^z4Mk@ޒnq帣pRO9~5*a)hI# /{rOԗ<|Ԏ9}0Rg!slsԚ򆾫"pEj>CD?4d/ < S 9PV\v4v  v  v v v !v#v&v(h(v*x_d(8#9|#:#>J@KBKFLIGL`vHN8vIPvXPYTZW[X\Zhv]\@v^fbfcg`dgegfglgugvvidwvxvy z0Csamba-client-libs4.19.8+git.399.71536ca297e150600.3.9.6Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.g,Ks390zp38GSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxs390xH(8XXIې G(H7'gx0X wW''H7WG'GHKpx7)GW'!`GG0'W7XXy77(W`]X'7''g('7HAg,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.1libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.16rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.8+git.399.71536ca297e-150600.3.9.6.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.16)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.2.4)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.8.0)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtalloc.so.2(TALLOC_2.3.5)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_S390X_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3gMgp@fٝ@fxfteԔ@ee5@ede6`@e-%e'e%anopower@suse.comnopower@suse.comddiss@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Update to 4.19.9 * libldb: performance issue with indexes (ldb 2.8.2 is already released); (bso#15590). * DH reconnect error handling can lead to stale sharemode entries; (bso#15624). * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699). * irpc_destructor may crash during shutdown; (bso#15280). * Compound SMB2 requests don't return NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses MacOSX clients; (bso#15696). * Crash when readlinkat fails; (bso#15700).- Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414).- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684). - Update to 4.19.8 * Invalid client warning about command line passwords; (bso#15671); * Version string is truncated in manpages; (bso#15672); * --version-* options are still not ergonomic, and they reject tilde characters; (bso#15673); * cmdline_burn does not always burn secrets; (bso#15674); * Samba doesn't parse SDDL found in defaultSecurityDescriptor in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685); * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious; (bso#15654); * When claims enabled with heimdal kerberos, unable to log on to a Windows computer when user account need to change their own password; (bso#15655); * Fix clock skew error message and memory cache clock skew recovery; (bso#15676); * CTDB RADOS mutex helper misses namespace support; (bso#15665); * The images don't build after the git security release and CentOS 8 Stream is EOL; (bso#15660); * Fix unnecessary delays in CTDB while processing requests under high load; (bso#15678); * Dynamic DNS updates with the internal DNS are not working; (bso#13019); * s4:nbt_server: does not provide unexpected handling, so winbindd can't use nmb requests instead cldap; (bso#15620); * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664); * "client use kerberos" and --use-kerberos is ignored for the machine account; (bso#15666); * Regression DFS not working with widelinks = true; (bso#15435); * ntlm_auth make logs more consistent with length check; (bso#15677);- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0s390zp38 1730976331  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuv4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e-150600.3.9.64.19.8+git.399.71536ca297e-150600.3.9.64.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297elibdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.1libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.16libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibstable-sort-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36149/SUSE_SLE-15-SP6_Update/7eb845f5822678f14fa60c6db38aa9c0-samba.SUSE_SLE-15-SP6_Updatedrpmxz5s390x-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9748d3e0f11443611a72c2806ec5ae45673ec5ae, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=186fc81a2a6725e50d9724b72a90d55e6bbe8a42, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=78030ae1eb043b583a4721acc0617ffa733ee1b6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c5e96570803ac487893a432563cfbe28240e77f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=70743705a1710eed065a83999aad14f93703404c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=580f0a0e18cc8256e37e1635b2847f228aaf8f2e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e7d8916ae508e7cb4b482226bf7be829a411f575, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f47d94d24a51952a2af22e37369bb90d30ab73d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5c56af64b0b54b027005e9e78cc11d0340dfa18, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=36d36d95e87acb13883866e73d2ae641c4a6558b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b56a442d73c71234ccf2c34672b7fccc03ce2feb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7579da18ca19f378cda86554e3c1519c59a39054, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=347c3867f566c58f3bf72cadd1a62f3c1ef61279, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=71043b1da8ef44e44bad3211ba445dd2da2d9314, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=11f3d8f08894c9547e85a250d489e106f12b7d82, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=704bb67b584ab13b088a976029300d9d4c7a7512, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1884be352cabca77248a084e076639e69342ee9f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9522d67b8645aeab1166e7091b3107f95b3a69b1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=adc0de9329454981f6472bc2abdc8f7951ed4aa5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a607802d4e7fd55fcc892d65cfa4ac6c9b925b9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ce5abaa1fce8cdf582d6e7c63048dd19f8eb810, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0eb17eccb8c67b546cab1e8b43d9efac44562edc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a3601507c0217bd6948e4a271d2a5ca63ad8b10, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6967d2b029f9505676039fae6ebe6a46f66ec630, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1cd09ea3105111ac6575088174a4735c69cf6031, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0f01217622acd566c991223b4b5e479fb5d91c71, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c608a17f0e49b604212a7ed9565564b704dfab8f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=696873e0d29d535cecd1fb1295a46fae08afc9fc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4779453627ae1d97b14cb3f34406b4003fa5548b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=47dffa30cbf2c0b6f99d0471a696cc9a0c1b22b7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=78d8aa9665feecac6ed83cf367f0e6874b8690c4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ecc98b44b5f269e205f4917943b7a318c4df72ff, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0ff744db2b571328d4d52c97106e0b7306c2ead, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=979cc760ebeb99cba54878b4e4eb76f386128a36, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=518adef3115b5fc44d95dffa4bef9e829e69a426, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b00f7f67bc8e348a9572ecfb93d023c596e92dd1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b0c34d7c6bc40a5373fa8e2abe9886fc5c12c3c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=50b9867fdf6f3273097855e06aebcafcb831b528, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=300b20e2345d63b328a379407e38543fa188cd31, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=17071ac49e981463ceda0730aaa683400b4c7733, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=56f9a0b356196504eb8dcfdf8f9a5da52d601c08, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f2225e1bb28913b0a6ba8f5f1a2dcb10a950565d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=224f9cc679d92bbd58e1906ba65ce2829f04bfe4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0874b049c2bde817b35f9be2720df718faa214c3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7fa57f8650ade2e9e0c950f145d5bbc42ee896e4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cb630eef8a79d42705f03b1027759888ce3b8fa7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0e4817f3e3f77b354a9934ead5ef6a44ff9eae1b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=337e08cd0cda9dc919e33545aecd47ed7ab5e8c2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a0d4f20d5727a26afc083237de68f422876ed05, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7e48584c6f3f5672c116516d05d14df284336b8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e0ac23e82c39867d62c3caa8093ae0bb39ee12e5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d19524b7ba01a9b70467ee21ba6fa2e8f13898e6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6df6d037731f2d01d19af3aead26f1f656f37854, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=645551ed9230532a3170694aaaf44cd8035b120a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=287af960fd201efddae8731a76183b037e300bfc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca2b3ae2f9bf5256de0b10c032a4218b03fa735d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7a914fabdf7fb097a5ec276c7a8f4cc412c6f932, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9afea11ded08bf44a8758ad864baefc7d1a2ef2e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=12241a7e9f8312f22b4509da30d2f06d2a611e57, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6502a889905bcf6ee2cf26a2cac59178159a99a1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a64dddd0afb529436ddad52fd5c4b0bb1a45f3c6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=51715475d00fb2e8dd96c287afdb38100dc95cb9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=06922d87e7a809bb7e59d023a87f71e9d7a39963, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=01f58f5c825515f9c1411e63f9c315a1967fe86b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b97ffbeeddc4c6af9708a5b22eb7b9447aa007d8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=953932d55df1653a389d60ed11104bd46f697755, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8fc0174d2d8baf8f07d843d3e56e1eaceca19fba, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca44d0c49cd9ea97e638dff31b91dd075875fd45, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=704c3a28ec7154b5dc8fcca5310efc688edf9736, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f9c9e13d0da947497fc1f99e5e2558c1bcb5da9c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff44541bfbc6011f8204480f09006a0228718a6a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb6603e367678f199ce2a21ad88d3a97caebef70, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a519a0252eeeab6431fb8f1bd1dfdc45b3bb03a3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2233a215728a4fcdcfcf19bbc6563f686102bbfb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f0c85e7f9ac2133d9455cda6fa884a55cfbf16b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=34ce675c4d877428ee9aa2a190ce8d0d7d7cebca, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=36ee47522c4e8695d420678151ee0a7382b50353, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=92f48d5f85ab86972764be114d3dcc823e19ce45, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=be3fbc56fb7f249df6dd8cf90cab97f3cb4b7c91, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c30ee5307a3627236ee6a349f693b4a31e46066c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9af1a8bc4544e663ef0a862305d07a8f1a4b5b6f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dfa2b30f696d3a8fc92ceb813e6bce0055f8b3cd, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=36ef64788301559217ed35cd6a1d278c0f20971e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0023bfbd47c3936e8e0e2f045ce8d468074fde2e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b68d1ce5d23be373e81577aa66dba330d7a58027, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=230fdf6cf718a3b5f80f7ff47354ca27dd53d638, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=13477241decf5a620764ffbe4482a5be3ffd55b1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a04472df41d2b6c76daad87384b25c88f8bbb827, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3fe157542bfae691e1345743056b9a921cf7851a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ed12c5ca885c409d27986f029c1b187989b33f7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=033a25143d2000386518b33d2b0aa3cf2ae7dd69, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=652bfedf532973f010d262def36fb5deedaad8ea, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d2cf7b18f862a70b70931bbbbcf30253b98fb87, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fff558c37c0b8f6a9830c264a9099f6715f5f1cc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7db9ad90ddcf832ad5cd8c4c2c1e8d8a33784d80, strippeddirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb7256b79c4b536c4d08f54fb9743dc0d10bc30f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3cd3094139cce143b0cf83a1c314f9abc411145, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b2afc0b5cc9ffd0910bf874f887792aa895b361, stripped"JIy:/<Ox/X} +Ogt| W~3Fg%Abz . F d z +   " + O j"(B7C0 G%2Lc )?I)%2+ $  ;'= 0!:!G!"(3*.  $P+P*RMRRRRRRRRRR'R&R*RRRRRRRRRRRRRRRRLRRRP4P3RRMRRRRRERRRRRR%R'RRCRRRORRRRRDRBRRRRNRRRLRRRRRRP6P5R0RRRRRRGR,RRRRMR4RRRR&R*R'RR8RRRRERRRRRRZRRORRRCRRDRBRRRRR3RRRR7RRRRYRNRFRR+RRRRLR/RRRP_P^RRRRRR'RRRRRRRRRRRRRRRRR RPbPaRRRR R'RRRRRRRRRRRPiPhRRR'RRRRRRRRRRRRRRRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~P~PPkRMRRRR*R'RRRRRRRRLRRPPRRRMRuRR4RKRRVRQRSRR8RRRR&R'RRRRRRRyRRwRRRRRRRRGRRvRRRRRRRRFRRRR7RtRRJRRxRRRURRRLRR3RRPRPPRRQRRMRRRRRdRR RRsRXRhRR8RRAR&R'R"RRbRRRrR@RRRRcRRRRR7RRLRaR=RRWRPRgRPPRRR'RRRRPPRMRRRRRR'R&R RRRRQRRRRRRRLRRRPRPPPPPPPPPPPPPPPPPRRMRRR8RRRRRRRRR*R&R'RR R RRRRRARRR RRRR RRRR7RRRR@RRRRRRRRLRRRRRRRPPRRRRRRRRRMRRR$R'R&R R*R!RR%R"R#RRRQRLRRRRRRPRRRRPPR8RdRR7RtRRRRRRRRRRRNRRR RRRURRRLRRRRRRRPPR?R`RMRRRRRdRRR'RRRRRXRRRbRQRR>RRcRRRRRRRLRaR_R=RRRWRPRPPRhRRRRRRRRRRRRRRR'RR.RRRRRRRRRRRR-RRgRRRPPRRR'RRRRhRRRRRRRRRRRRRRgRPPRRhRRRRRRRRRR.R2RRR R'R&R%RRRORRRRRRR RR1RRNRR-RRRRRRRRRRRRgRPPRRRRRRRRRR&R'RRRRRRRRRRRRPPRRRRRRRRRRRQR'R"RRMRORRRRRRR^RRRRRRRNRR]RRRRLRRRRRPRPPRRRRRRRRORR'RR&RRRRGRRNRFRRRRRRRRRRRPPRRMRRRRRR RQRR&R'RRRRRRARRRR@RRRRRRRRLRRRPRPPRRMRRRRRRR'RRRRRRRRRRLRRRP!P RRARRR'RRRR@RRP#P"RRRRRRP%P$RRMRRRR%R'RRRRRRRRRRRRLRRRP'P&RRRRRRR'RRRRRRRRRRRRRRRRP)P(RRRRRRMRR RRRR$R'RRRRRRRRRRRLRRRRRP.P-R'RRRCRRORRNRBRRRRP0P/RR'RRRRRRRCRRRRBRRRRRRP2P1RRR'RRRRRRCRRRBRRRRP9P8RRRRRRP;P:RRRRP=PRRRR8RR R?RRRRRMRXRdR"R'RRRRRRRRQRRRRRRRRRRRRRRRR RRRR7RR>RcRRRLR=RRRWRPR RPAP@RRRRRRRR$R&R'RRyRRRRRRRVRRRRRRRRRRRRxRRURRRRPCPBRRRRMRRRRR2RRRRR RdRR,ROR'R&R*R"RRXRRRRRRRbRRRRRcR RRRRNRR+RRRRRRRRLR1RfRaR=RRRWRPEPDRRRRRRRRR:RR'R&RRRORRNR9RRRRRRRRRRPGPFRRRR&R R'RRRRRPIPHRRRRPKPJRMRRR'R"RRRR`RbRXRRRLRRRWRaR_R=RPMPLRMRRRRRRRR*R'R&R RR"RRRRRRmRlRoRqRiRnRhRRRRRRRRRRRRRLRRRRRRgRPOPNRRRR'RRRRGRRRFRRRRRRPQPPRRR4RRRR8R'RRRMRRRRRRRRRR7RRRRRRRLR3RRPSPRRRMRRdRQRRRRRR8R&R'RRRRRRVRORRRRR4RRRRRRRRRURcRR3RRRNRR7RRRRRRRLRRR=RRRPRPUPTRRMRRRRR^RRRRRRR%R#R&R"R'RR!RRLR~RRRR]RRRRPWPVRRRRPYPXRRR'RR$RRQRRRRRRPRP[PZR^RR]RP]P\RMRR?RVRRRRyR RRRRRRR4RR8R&R'RRRRRRRRRRRRARCRORRRRGRRBRxR@RRRURRRRR7RRRRRNRFRRRR3RRRLRRR>RRRPePdRR'R&RR*RRRRRRRRRRRRRRRRRRRRRPgPfRRRRRR'RRRRRRRRRRRRRRRRRRRRRRRRRPPRVRRMRR'RRRRdRRbRcRRRURRLRRRaR=RPPRRR&R'RRRR\RR[RRRRRRPPRMRRRRRR'RRRRRRRRRRRRRRRRLRRRPPRRRRRRRR6RR'R RRGRRRRR5RRFRRRRRRRRRRRRPPRIRMRsRRRRRRRRR*R'R&RR RRRhRRGRRrRRHRFRRRRRRLRRRRgRRPPR&R'RRPPRRRRRRRR&R'RRRRRRRRRRPPRRRRRR R*R$R%R'R&RRRRRRPPRRRRR'RR%RRRRRPPRRRRMR R&R'RRRRRRRRRRRRRLRRPPRR\RRRRRMRRRRR^R R&R'RRRR[RRRR]RRLRRRPPRRRRMRRR R%R'R&RRRRRRLRRRRPPRRKRMRRRRRRRRRRR&R'R RR.RjRkRpRiRhRRRRRRRRJRRRR-RRRRRRRRRLRRRgRRPPRRMRRdRRRRR R&R'R*RRRbRRRRRARRR@RRRcRRRRRRRRRLRRRaR=RPPRRR RR'RRRRRRRRPPRRRRPPRRRRRRR'RR^RRR]RRRPPRRMRRR8RRRQRRRR&R'RRRRRRRROR4RRRRRRRRRR3RRRNRRR7RRLRRPRRPPRR}RyR8RRRRR?RRRRR{RuR^RR6RRRRRMRVRTRQRGR RRRRRRORRRdRRRRRRRRARRRRRR RRR4RRRRRRRRRRRRR*R"RR)R R'R%R&RRR|R5RxRR@RRRRcRRzRRRRRRRRR]RRRRRRNRFRRUR3R7RRRRLRRRRRRRR>RtRR R=RRRPRRRPPRRPPRRR'RR*RRRRRRRRRRRRRRRRRRfRPPRRPPRRRRPPR'RR^R]RPPRR'RR$RRPPRRRR*R'RRRRRRRPPR'RRPPRRMRRR'RRRRR RRRCRRRRRRRRBRRRRLRRPPRR'RRRRRPPRRPPRR'RRRRRRRMRRRRR&R'R*RRRRRRRR8RRRRRR7RRRRRRRLRRRRfReRRRRRRMRRRRR&R'R R$R"RRRRRRRLRRRRRRRMRRRRRR R&R'R*RRRRRRRARR@RRRRRRRLRRRRR8da?sĜutf-862f68d906f004ce4bbddc5db72305f0690ad5a14635e2dbb1dcaa81143e5b81c?7zXZ !t/]"k%DM2_e#Ȅj((KZo-MP_%H儍?L#MorĉcMhSc1uSKMsut[B 3bb$rWK.T.d|m}\F>R8lY b"vJX 7?R;!tkqX01Lɜ/WSHEӮ15^91X4emhs$VQg_2ϏR ʗԡؤBRn\>9uS=8 I;j[ w{+Q[)r,)&BtG9GHbi Es+ /_4,#*Z)b-?F HKRn!칩FL3Ǣ'02[\c6[]'\y}E |^8{V%JH6?D*WfycWaM@l/FtgC;n .p~ʰ<օablj}ue&]X) "߀~ q]G dszUBjpMei^"Cڿ6%kmMs ܴ,вw#xy/ ؏[.â^=}1%Y:GaoOQ83]&Pn(DĈt!U )\/630O]"B {q+_zurpLfo]+|,= k )9AEX a*tRfTUu{ #N!VE:~H/Xʌ RJ̉P/7WC뙖LV/-~ ~ti͠T&ˮ0%8ptTxx2 N˘!PR _:wpgI&hQ''g9u5{X.ypTIXk02~ COLaZ1"3?`Q0( li#WA;"m~twPbTA&YTrKCo1zVIlmv9[yW|}ǼZQDɉ0f>iGy9-MuWFF7L(GxJNy`F]#4>P"iIÙM}}(.d{O Ekq1p ~9\Uj]:ǝq8Oo0E ڲ:\@,KO99$xE b UJ8QVetńR(?i\/4ڑsM!5L4}U PEu& ~^4a8_91F/OfZ!&G JT VaE?_%y*r(O&-0 vNF.]IԊy# GEq-H,VRae2ؼGbUv51N~ԣpRmAd+VL~ʁ8!@iӋ1~%=)V4XQ}-E52CA ưvvӆTuVC!T.0fDi \]7Myygv& E w:3Zֶ~oH,v 񊮨xoJaP>F2HlJY{/S"%< "nhXtfW7&}0S.铫d.'Y֤m` шt;KU_f xYLq bډR/U8E1'`gk /Ty9,mrR$L4"?n'S:S.N[d7wxX1b"\k Ϊ A!MЧ3F5m@'ݓHҋ 5if26ɺCKruymo/'i"fϱ$DK[,۝LT o"PXD. ۪&sLۃ| ZbÀ a. dSڠ7qKǰ(5t5a顈#z6JF:æ3*KAHfgmR{yč#OBnT{ rs3]MHY`XyJ&5m+dYgTO й>ss!{W0mf+J$ӅU9犥=')jmfuJ|2V&ijUM-؝ۚeR~ {PX=O @Hɒ V/ڶ,Z{wM^-2RETkoRt0|2ɵK%IÍܑaeU$Ozeችrn[U N`(7Va->YBo8[JE$4OԋJ`{_3#49XՌ'hA2 $8%%8/ M5$i@6קr[ Q䯇;8z'8Vg~ wi}|Uar|Oۡch߭C>+t?-Qh΍]|!=- k6u Sİؔc~xg |ezߋ1FPd*kҴIpʹJ`yl'_mI2"#^\T>*YmV8稚X'SPwf&( _ECz'nC6f7!i07*{iBۇH#qO-޷zH Kb4}'>HR+Ĭ"@a^Զ4#~ qcs ӆ@m{(E2ل6wiɎ ǧNSh~s)FN :15xMO`{'?c\AvGp_y:jcP; zjrBK[ ->)F)Ik>_3%j ]=ƹ~f h 5MtHIc?%apG.Pug="GJ4.O&":aߧxXZByf;0+`Z0Z̺Cpi 4GSFQg$yx0"JNpɀHdHi Was#iryԡ`V$3 &XeYrc21D(e+<9PxODi\* blw.!̼ݺ ut:E;dK9o!^y:f }߆:`E}nb!KòMB_L9k(a٪cevs12 >2]n ƚ|`-xB?yaX8Jh^" &#)A[J)-<9D;BVC2\R0ǸCy&sFBA*V?5b;~$MTgHn@6KEӋ{$dΘ)ܼq$&nWֿM k\Q =V['֣ˮ9?^p}Z|T%Uz D\C1pZ;axQŸ9]~])7k[%3w 2nf ϛxiOq(}.Gh!+_(=[JW3&!VRE}2Gn<8YB%T Y!fQ$Քl&6ڛc t'Â*p$m~vJ\[A5#XדWD#??L#AD{8>_ XD"┻H/V*s \%tq ;pߜʀxJPrVasKđ '2oJ. lwOyc0Y }JL? GiԃoǒGgNt;T Sq&p~TU|[OHscA\4`vR-nؿo<[Rp V 6 ]v-Jh>MUp;oY~)|=! 2j=5a;@HrK%<1v3U+-(Exǎ}R cuƏ.SMϽ౫fyU'=QcތlkN nՠDǏ!`WtW0X`_gss1$0a͚ZVPH3Ooti[g3{bzJ3Kb:+ ֻWʬ&޺Wb'li\T'ʮP5Kl~a-kç~)$>m HҺ=\ND95I`NS|09xT/Ai+jFJZ̤ rӰC.W^eݞm}lǸkSR ]*H I ~\e!gM]hk1.cB-}B`&=.Q%02Xq4ƅFOn&/5zcE&yl rh(l&xZ'Fc^he'pUwF@n$H/ԭ"g"9 mwŗXR/(x 9- U\:ڷn3m$RcZ;l :\2GgJl /Op#[_;zWJp|~D٪Qr)3Vb"A< 0S9Fx6YOS9RX=nzUk)WR f(4c' S8< “9Bt,4r!nFRx\S :J!\774bE#W(mxy-w:Zpg\s+^Vw Mwo4iGM)ꏺ͖߹3^_3oܽ5|'^Wq(eEI~̋9w4t} K%g9PivY>zl*hF=1`tD熠ĺ'Ř>沴U[3N m.t#9"%usq)uNYShh't7hŃ?rGg0~1NcܪMbA INej$FV׮o5]1]Sɼ;Fvjjz'h d(fL*1%+4*5b7p~pdǒAZ WAA& >* 5ʮ >QpU\S w1 *v?F +J2ʖFVu60-+xtff!v^礼<O1|vFf  y0i?H%ȹ : <2p;Rp2iNpQBED6@#2D [跬oŎ ~P);=U8Iِ[-"a*nNIu|Ε$'?PLǘҬfdQ[T9%å}5@ko`Gg<|& 'bQ?~*+蒸f&YThI">`>A,_" [BڊI /n|^n(b`c~+=S=䮭}9-E(VjbԥF8WFbJ38ge(1ܒ -ʓ+%۴rV>p bB/)Y>gL#HMA#6ɩ\QJ 4#(>[3Lzr\ 7AS2Z"i8# tӜ"1Ѡ%-fJ1T9!V&-cu-@H 9?|l̠.!k)!XT7oWF_c&)DF )(/{ k};SJ` QL*Hl]>q ɖr$!hp~7~&g#{' C`ZS0!}O5q?*Q38uq8Yi04RrbUިmgiP<ң%%M~.QP:upL6Y.^}-Bjs>"_Ujmd%HdRUMRgO+I~zvyU!'ÔnTtNzAcEqdAu\Ч<ݾ" \ &.Q!F4Z{Y,HSPcTLB!)qCz=TNˤi֜ҹVbړ|>?F;3_#uC իY-鉭b烟Csj:r^yt,(\id꘏MbaOaz6:u:-bƼD -@%#\XwiGUXTF|AQ,{fR2yc~U|z"% YKmv֨"Wj{Tm!]N7]_&{g q06owEO(]ʎXʖS*mS:`t.7^gd'Fqz#Ůbrgc{B"Dgj ;SxHjo:&Rn!n##˕.{KSfzjA#UQX9`ii`cHѱ0+ |-ڎ۪5?j"٥LX^@Kb;s4Nt ‡)r !^[\Ło<ڦ\M:L/mJ.&A%1Jl,># 3ui>a9Rx8'3W i"m"E&liC̰9;hc8s2\3hN̺̙ؑ@6Lq878΄v&S1==G% fATkV.$>.&R?M'a5%r:n|4;nj$ = If㴑 6~&YVx#'WOfk"݃S -ڒ_`;VUg>f a*':mL\b8 W`gQ?vj4'1-EST3$, ]0 R^̿*(t{K@ƹ dU (%VHrp,P:X<=IF$Qxw)n3TE{8ŜP jpaF׿x{B <' )~ ] NNKoTȲ3y,\J8;V)O~%t;v-( *tm+Ͻ8QJwmgΜw?#"T)\'M06]A){s 9~_W,k5 +uÁ/*+$D7p^UG4v6I:ca҄ecncob=9!2B,@9V0&yE2l]AGIQ;6 lm)Dz:@rL r.:NMqhIQJbxNC7"NN2ɀd5\2Չf 5im7j.榛f02,=]׷¬tLe~^;=h;+JQ1>Z8)+M15tN[cD,u@u9<}󩋁?tS> $GJAL͞5@5W.b?1oK:u'~t; w򝻊fomL'BhEǣ:,$T-mX%\ZL\¯oC\}́9 tjM`VLkT '!P$MӘ Wh8!d졃hP a\hzFI+ׯ;?ob%|L#CxY#.$g u+GV*A ^8G0 bˡ/4hvxXN=G37d $2@3j2+#hM̍Le֊qwh9 q&R'󺌆ݎ@x/y=&̭!r-: ϞcZoOyi?] <_&XvѧF-+zClj#?#(Ir=-iת61\ wNG_2J̾k7ld%;VhLn\qHfs;t 0L0]TVBƺBC Fe:W$|%/}?pZJB]q9]ߐL\JxQǽY3흎APKm6SLSqWy~dĨe%K" 7. |Ў3{< alc#ᜦ^%w6gE!>h/iݑ L~أ Wk`W Wust1Ă+PV'xj 41E+1 ^d3GUtb|$<+pMӿn]0}ݵs!1a QyN(٭L̮ffh8C]h-UWcFt Dg现!ww$;ǧj3#},qqx~Uc]ҼhY9m=5Ձp*iZ8td|av[vQSN|ܪn?nLVC__oޱ ?lO]t\l*5,QM7M숚Z۱hRT>uRDdуFw~(6;Vˍ,Q@϶Ps@F{VH<%QC8EBQ;\\J|roPqg!|H 4Bfdq+`IWLhj'8˟3 S1wg*.@,|HnV+MlIQ]= ?xZY+ #I V̬ӹ=1KA%dpt*>+`m,`}+V L4ƨ骂Äd`)Wjtl8h5''dg=#QV# Yh,·.ZלW%V)$ӛvxD{*,.eT3wWۤ_rֿj%Q* g F@PԞ :1[qOQ.qǵ3/HOU'.uAK?d4|TY8~|Rae*Dy̓1SgzMp5=Sx6hTy"$'v!`ͼ$)" mGff3DMJ4bBrXW9Tv(T?)OY(]ƜqgTH{8:Fr FGf\ыMY&pĢ hw.3$Cd)̓uͥ:3ցVg`ÈHsDr (⎹, tpaIs,<̓ YM?+ aod:hOLFӵSZjN]ܥ`A\$ țeק)(;<2+!.B-==z<Ő ^t|geU* S BAa1FX=h 7A$hxըL"]T;ӝ# }(IJu+-Xo"K_ӈ`c:v1AΝOTrvZx^iy+H_G@ݤcv!4U!VM*ˈûK3OV5j=y4X$uA6 [w #a#aЀeN(k8vU{Ol1rbk'м 1XUΒ ),m?k4m )Fc KE,ҊJ1H<!;5?4)p om-ꃿ[NZ;BRna* ո,ɒ7Jk#o# ):6d*)5}`|Goؽifo}[Րv>;H`_t<*'!r)KY[XUKjq;%;Y%' 9Zd U0;?fSvY'MVLGRkO66˱s@^sR+r.#HLdR߫u'_@[nj۞Do.n\Vb5IȜf w(`u7@" Dd2E&%,MhCbi7Cv!/R0}%O sI?ʾr"nw.%7/]K]#vsW-=KC] 7~LP[> ]8$a^B^LM"&[e *`yd3#ժsy} EΡbFZ3sc1ɪwg7F B̃̄\ ZFbcn؂̡@w?rGH0w&9X Mx() ܎Gu>nlZPy,uLMR deXNQ mԨ}(#jS]c!9U39xl3@ZghZ-ှg̒,„<,_mFɈFu0nEt1mFyZe 2>։$"h3 ڎ>tXv<#p'`8j9"l=h2YlAH}F8ztUcJzl!flAGxVIu~Qt>% W-{6"JB2mla SÕ~L"86݌/j[H"["?ƥ*7f JQ(ėտ{QMK<ϼIϯbZˋ> p;)Bxq '܅'cYrzڼTx|!*[}F-FD=| ~QymCɒ\z+:CgaʷV$N'EQd6pvX@55pA18Oꚞ+B4fי]4e `Tq(s>^.G<\OoƟv!|szC@"|_3=eNaI43Z_@=}Q* @VE sGWgҹ싘)S?iơd]PSn/'Lkֶb,ݳ@sqE3 ՒTD!);IE9s.P$"&qEZq?UHJ,rVUO+ftwThOW_3SUv_$!i.?x?3ik,\}'cAB~wy!@#z(F9 k-FqnY{]}O~iŠ{t4WMHlT{ {%-L wp(,h"H͜?jdkkC<1Bn~0Ɓ-*T2I[ nD8=8`L]f𣼱57&틍qAr?k63kqTlQfQ Y8}Hd&/f!+> V6ѨM$Hנ5Kл` `&LZ:FwުM6r_!+@2 =Qz7+E!Njft?-/B(-d\]Ȟa`Dφ S>/t; Ŧp3& XqOz3FN$֨WDE*qYK~}:bNC;FdI|BWS|ȄҖ vpeMk%/a@BK`99-g`}_n.3ѓїNw*mhhes h,z~[K'tBZ4?2%-SUc6CɎkB+`k)wSlzZ؆ǀ RO ,$U&s3g_fr{}Ӧ[P#Fz=|D_W}iHֽ8L`ME^,& %cn;V, eRsPCVS#',®2f`z;ڲ8(0~}`ΙxhkYJ8C ox#N@54@JBa}}F%KLŠ4+ْ u0g+٘LA"b .I M"dTՅ5PC*i{ZI^*17䁙::+(+K>XKDLgE0U)E"\Xto3r7?5*h'Ah?/T_TS_$ q08`'3FD*!ԚwIɋs$n0/=hnNC72 hB%1 Sh~ݯ9tʼk${# yV;Z#+*:y c%swsRwSCT2UPoijz˕پLc,OhDd9I"97Mڢ৊'5HXZKUhNdd)-g|952,ѫ O[}Tٟ?]ǨNwbo9M^|\V8i8q# +x-VmmyeϪR4tatڏ'iDFU^Qhv?çCaV7<.5^v= fHkgOS)[-݈|ץ)`OxaAJ//ŧJJg+QH+o^MT+aE~rBf;)۩<^Js;FҖr_|*e $e. d~v@6EhŅ{p-: ɉ0ݛ;'6巨vh g /^3S؝I@7u չʲI,۸AO >tj4С(\S nQ74x,~j)m^-ԯľhc U pвBg;mCW}ׯ-Y.PU0< <1xx`tzG'Zz e(lX V%so/AD)ʧo `v(VSTڱ_]T%WM+x7!VN[Eл?h`οp/) ~w,%l#a+]EZg ۯP@Qh(1"](ZѾWےk>Ɓ}7wK]鑐"ILm壊 n$TvH|7kg X%xǧhsP4ʹy5oeJ {G?4#By3q C .̆VӀKCKU= w&c PӶW ziT ;816E}ңyav6̠\<.GqitE  Xy"wcp½&y@̞m lhU)COFk q ~JӐ9 C3dG-{SeqrtۺY$o(3VĴRbVhyOPrdY㷜?AXن)a3픂.x^ul54KJcj&%uTȑ9boԺٚt^_: 7$+R,m9e[h͙;R-cd3v6rr8^$P][l+NByn@j!苵RN.C*$4_nMYYqF"'|71L)k$7!)@dop7qbySvnu.e@N/>/{qA~cfUo~N?sӢ/=%[sA ݵoQZV (kzt=4`=suV6`Lb{U׮ET4^Q+9R֫=hr6&*hSڳ\-44BJR$$v*D hLn w )lo<)Xqf^Ńfϗi8^T9* msW!Vþ]& @+8ٽFGEUMd<{C|vCæphBy,v*q]gڀ_R39 f g39A 7$/&E2[6h0`\LfK!Gy8̸^Iq`89@C:7;JpjŀX݆t25#; e8nXgkcN+H.qtOpbp^]]:/N e֟%M׍zYx2Z| :N"AP'o@{Ņ c7t 9ޏ9Q[˻w-M}8zlA//YvmG>L}.v ܼ|ŗow6MYhtEzˤ O? S=2>>|Jm{o]"U%*8`+xI*0eB{z:z^$)HWp.OQr?.-Uw=2n,Xe ';n^,~5} )SLnaB[@ku0R^ǍՇޕxݟvH&^$u\tv9,1_#5L5B0kӃ.~Z0ٟh`@r*t3^zBaflG J}+QZҶܣ68ص^jiGDKZ7qLu6q1dN#MggȑD/}i]HHF̶q#LDT:2ᗞ<=̏`f,&x sZ6àpWy7yC&n"3+HQpɨfeLOIĿ&TW|U3 Mץ~ja_] VZ 0O̮]h'nڧ?ʿj6sv+d&mܙ I <UVưȑanZV-=DהHGqɰіtSOԎ6%3FAzr/ ڨ8TOh&FM@.cDr#+C%Gc:=zJ Y/Oo\%KR-0Ϟo>e6bR9Xw}0]ݤ%voE@eٔX<)tƠ=$uǴ:.j2$X'{ߤ$K /UeĿ1 +' 3J'f WGj:KU*dDCMMXi=D}$HRnAa߿ɯ_ ^QZ$Yv=L)W:l'~A ]6f$KHߴsI@g'OOmKibp9t[k &.DuE*Nzp ܙy^w=x? Xu '܆)w0Y ހF 9gAK8H E$(s{;1z:4,OHcY3Oczx"qV0vZ0 ,#4X3'37h_;W:O?ƕ=dKwF~jS,ͳl2 qCpN\KZ[ 2rvJzҠ}OD_xP WYr><@Wܒm.SΧBF)z ,LulRy(BRW7?LeH7+LK- QW%ׄ^6x :D 㿻;T@xZ̥ =i)YN$DY'v!%PdzC']fd de+ oڹQL/_%MF-*up;&E8"z3 bu@8"fqE K;=-7(X+QP YpO$}}aXt. (ٳ4 ", :/ O{P;/VY1٪ah@YX$"Ѽ-Kv%k/E)5rT|\TC~2`edP(JEE+Ϳ1|BEf0'A ꓧy\ (8BG4FO\}ٸ;uK$InR@LZ-߶ 'GF]*qxBed' rhSKDZD!A$V*l&Gc+>Dy/㌵2ȑәKP-[U wuv;b+,RM,:w3TSH)MބK%Y"s22~U J ?Eg=ZĪP -Nv`.ߌ6W!аԬLT~Lz ~=AD lcQ.n06ABf^m 5Tz')%m(qkN'* G,,,mKUM gǑRS +y,,w !k v}YBӛtp]\u{CPpdmIY&j,I|&QBvϗIh* D$ .XMbCc3!݉8v;5ylROӷwXG'GQ6X0J -ɩBsǡeJ9-Mx2+ և8d =-;fvցs7v^Ji%H&RhoeCs1c+aUQ7kAm;߬j7#7utKrs)o^Q g;3w8Q!B1Lebb1_niwb_ ܰPvuKϮMԥf avw{o/-oҰG|0uRb0F?ɟ_H뽦>NHWf@8a:q qVß^] BH(wib X>*qՕaj1}R1/4w?E&i'y+k-yWLIgs&GaO`Q ⃲_B ] d&?ji388 i2ά39bxߴRY 5G| /;3ڇ0喷uTS(@>]A9d5R3߀ϳ& {8A0Ñ}6lPb܏"x6K溒[~a /K?%q}? zĞV/W܋^R]VW7O:o(=l.d76|8_OŧD}ne!\M><[V+ F)Jr8[;$ I? .}LZaI17HS}$ϫn׻EV]=EiFʤ;hPp/ʴYT5C5B,z"s]}!ک:{m"3V&gS9tNbPHAg\m=0Ue]+"gW řvgҀatJ[(U_[}<߾sŪu#u 2kL-]Mi}ڐvHKQM0lc ?I@3uu@PI@xΑY++k WOSS),j̈t?YS3 ~~L"0`M)G/>e7/>X[2-O ;!̨Z_ɳ IӌEj(wJ$|V4ziE\R?x Yr@V(yH !Fn?ܻ`1{M6t)D]ˆA_k$d*%eKo.ݺ}t{Ckʺҗޙsh .Xp:l dDb~S式ވ~\ȓլ);g3jLO{6|Oa`K/(l`Eߪn㙀hCT` GUPgY!QS$B]{T@0at iO 9jd;ЦD06`IHBslbB8'e[ A/|OTl9^/cv\bk&X$ПQmZr(sV<1m;7?!`αRݓ(.[+tvU \ʍ/aLnz5qYs ^Iq}5PwGC$y/;;]x+ȦS[Y#&k/i{!qDJjҏxňUHkk&޲?ryB*7CU0WbxlaWTs~VB}|QVD_) m5V6g*q@M_i' ,4'IA%@砦í1=i|!I,߄I%Jf&VOzD<.[ʳ6k Or?HqkMZ.,ǹOqͬm;0=. v3+"5_&3fiz>a"|cvAΫfP٨jgzٸ۔,oIR"Dm?%+(), $ku7-#Yhכ%3y:b p;lN^YS* JS{J }>i+2i߭{0,?Y58#]hImK,' xsӚ2c"R9d \=}'".]{7Zg;L7(YJБkhMX~dޫˉ1 ̂`Ãam%ٛPhȹqG$ qm}D-jț4BKiN١\><$]}DC%g 5хk1מ.7boTwAtEVtB/#` ON錐vynZӄbF#e15 mR&؜^IMiv[JRn3hHźcH.~/Jom W@rtp~Ot,ЁSDR0V#hJ*ɯp^o\B fB:=n! 6Z\eqSкhQ&%Zn$H:mR*l*igOU HF¤ ɹi]¥pYXK\.؛G 2Σ*Aϓݢ7:3>V $dk:Xbڸ5m Woc:- ?|ij3E%I!Bs?G>4tZ0lҩ|7tXqc$~0㮈`S#2IDyb3Jދ0Tzrgp(q_qAl_x(V,ApDT f¹#YM(S!;&>pD;qfA;`K/ziz{_0wHЊ-Jf<KW'm1DՑзTh;7Z9H*] ,;|}SA_^;XQӢM͠dr0zZ(X"Hj_ WmV''̅-!bRKH9+6YὋ-5[O5>U|Ki@k e?Гf!02fjjD+zJ/s#qfvu/ yX5B2B_J6fo~n?=wp(*=T NFoFt0*Y'B%w;$jg dim0LڤߔxwՠAMФ9cR}6!+9 ]1]VR#v]ZkudB(, Q!(ݦQMVx|pޠ S8uܜ.Ѵ7G'<>p2O:fKh\|r0(Q. j] ؔ3-*-,C)*X/dn JߙHKqӸWP+3,튛M#g; W-ח/Ô/C5hЧy%ծn\r۝01 ~DjTᝁ쉩Տ'V~jƀ>ǯPpy~ f5dɛ3|H,ֹL#8AueS%лP܃vNsz*Z>{A9:*fL*9UD/HM7]c"ئ_⠰+⇶[!|ð^+\mؑdm>zP7Azo)ϖsS^XQyhstXmъ6i gN8lΗRRۋ#cXQ)]۬q rǵbM}70ƤUd Lɚt磺 rakrp7 18\3z:2YԪL tR!qqkpãz RL͙`ߩ*\yTWP1,\/*F{o* h>cmƵd:!A-7rhiuHR_J9Nqh ^ PK4rHD]L!fblv#hQaȬ%L af/#wp-$;6**2n-a]}NoTICn5 _w+Q32O<Gם=P$ubd5ʑ|2MSAM-iYɅk݅2e6/`c,mGrYfͦ}Q})JG3Y1yL`xNlz.Ko^5 Lcʂwwta[ ]Hl#ȈQ&]m'MybJ゜ aIp?϶}/S[2;G j}G ʳK+L?uAB?*> H>f0G^%FcI7\3({fJ_ܙ62N:.L) |WBjX*Qw-:{iZUb`b:*Щۙ0 !@l旽d%'#j;".tᬄ(g㷀NʏS 5Nej)hەyoE<()am @~s#),aj@KT'E_K3s=+]kM%.t^NQiYgkFQ~'Gzivܱ*9%C6W@oَ .!k4[]lf~dE2YQGI#< pRV\ِ_ͨ /iaN!m{WdÞhWCڅfYTKs6;pEMϴ;q_яU4Z-S^g$K]6UwN<,uu`g $I _cȰHGh2w $ݮsM#'*/(JȰu+xω֩ʛw˜!GN/Ru(szQZat D-dJejb[o/~A8*@h7_jE!L_)k85s%OfǷU~+FM vkѓ|=mG,:l8☌Q,~@dzk_VECᙴ4u /E_Xֽ;1n]_z4kHF=㜰)?ӥ{9*%BE"&8!_ 2u>mcҊn#R!h fyW/>N!PU'v3X^EXݰ~ȸP"#H;n c+ah Bx梗\3 g4|wHrZ[<,W-.NoF${N 2\t`ev}oVҸ:L$Ib<6%)%A4ժv~lw(M– @u5Gf#v'eg9VЦ+PO7 8s,#5MNt_0G\IWjz(YTi:Sעz?яwREI [ ݚţ @wIn DY@W'wJT@GVf"JBá1?w 5+IqCrCRְu_t.}C M˝B ݾ&:jܩ+.\XV-OE:o*%5JַL?^?ӮocʀZ9~Fh݊O=Go,#)0G^agDTQJi ey\pɱ{=K :zίJ{ A]۝oNn|@M&ϡSjf]!슀޲kQ"2C ,Os+ .@v[(XV6 yV;m !\]_a!0ot,@iX ^V*`ů.va#F?7Lms/3“ fZy3ЯY;T6bkFrR9N#d 鬺e$A蔰pabN~2-IϚ|D/j,)bMKJa- ,vG0UikC;Ajbwy")j}[p:O-+۳8v.T(cЇK$%r#;7ӧK![41DiI bm(Loэ9^`$o{%Ю¡Qrȵݺ1 -_1ݢ7:؎3K>?\h  Y9]$i/;V!|U|Xؠ\ m̲m yeúd IJ5\ּ)8_̟¿J]QΒ1T %Aʆ\^WEC:RL8hVEtͧ Vmgsnֽhz(ð˜P=2 } ’Ves.Ƚ=ZoL9Y )U K7wKuCB,Z?e[ 3ղi'$yJ$S3@9\զ-pc=Ii0!FbbZ/$Oc(|Εx AfW<6/1L2(%> *{ĜbkL󘽭^[\lB Qq0c2-2dqby)QЮc!c!A昐T " tyV[ &$UX9{qH92X~`Ku,Fsor Nu ;Ksx%۾dj3+;B^9X,ɀ~\6yhN]*W1yM˳OPz@1Ҵ㮫!3.PQȆ]taaA "+;hfY>aj£͐/C~ri*/%Yfڟ ~lԇ!#o\KbV87 Ȋ+cR%o+40f'5TM.?2%\1 ̙)w/USkێ.NQ9+ I4ZLXb[>W,d0yl!wXОO#ĊpmC:q7 kt)m"DgX>SQwt>2up ӧ coL̴%Q^k0J>BP;ӷmÃ*WɿiOIzhW=>]H(O/aߨD|HXyz4Ч%zC^pq@&YtvѦvRcqX?3_#DjUD' ?!z4e04<\$54vUިc0Ϟ_D]vPO+5Tc:rvD>S=itc}cjdwkLib rd&L]˾ vb8zMDbwk]f.@ߓzUo5#/*ݯ{Ąmr *7A>uPj,;7NҸPok ʀh j,H/F-Z.Sᥳl:r})Go_ TaBmJ@gҝvI) HL/]y w[i3#c@O %-7F8Q#=ze7Y3l| ^0,+*kFB=^!m:8,k_}De5-Bi5t_Z4{/֧W/CҦ}`;lSq$:g%}?PRɭD`ؠ[KxƽϼUˡF!rCoe,ҝEw1*UTG\Ue.ƣP"qLLsl@QFkWF>)xMuI:-RMb =>,FJpx;0L?RPbe|`Xhxs16s` rud"EYmLܹ =rdV\Us217(~L\< Yw1u6.0BąFu6E:п~o7M3 }Zx5/R!uYyk~޸eiqܥHϐ3L\3-jN\j2BMr&0[@({.Y x}4sB4#nAy=9_{݁+( )!2oQNJ@%ͰoeSRfqG"u;wz| 7XD%5 :?k'"xD%F {7FWxf'uhDS2L%9̠mP]w*Ĭ,yYh_)_$h̝P=݊{|=5Z85x4;$I&H$~i< ְC ' % XG9ǃ϶_4z{5J[P\h{[@]L'j!m,ˉf6<+@v.teccY5#g6Bf8t?r#ۄ=ty6 ݙc[c}sH<fFzVRA9A!}Xf14WS9bʏ!0mo3vL{ONcB 4bQr/H`jؗک )6!MGx!<10qD=!q9$v^7̘5iGdvF#]ue誌=Dԏ#^K`0#_i "BbVb'$cfaW[AcO<3@fjQh!Մ?[xO~>"baJH{xb”<|iP旂SǾRE5LʹirB3†{m@=lϿ>n_4?Jy쮩6]k57~~İRt'IJ)eE0C=`MD.7_ws\Pñe8{k-.#cQݻTjg*Q$ Cۜ>Q(ikMbfN2mfϓ/4röwG3|1Yx1ei ue+Kh6vgD\t wʅ*K1]^4']{ ~7(: a7C-0;P!DK\ͯo`m^G+|*~@Qoh %_ RI9Gsn9Νwrm~\ïvW_ :xU4C-m HΏt(kLETA^Ro!wW@^"$Dۦ]& um*y%,}wyB3'[4S{+ʷ?ڎgq~!v`!8[mk|Ee^ۊ=*iie|Zx";`×n5OLhtc9$]A\J5Of)6:.\'ͤg⍘J5t2sJ2VP!ZSvW%`k1QeI{_Yl:h>wtUE/efT =X eJCPEt"XnMwPgEԸodim/ lxmơ Q*g|Ɔ#C[PRݚH9:eBs?<}K#z$sj{тp&eQEi3i3>6 `D#UĶJl;W"\='np^μjMUz77d{ws2G?6sERu`3F!BQh㪥͎Pڢ:?k_o_s{)m~IZQ+O>lbL5Zvg^@%"al,q*-D2kD6f,ئ %Oނ+aJtS `>j}mq-SSEsq@'Aڒ̂kJs8RA| :2X|gѲ^ZᄅAY,W0K3PﰔY~ߝYMrX9\-nbL 9OA* l yR\h5t^EHs0,/;zvRo:ykƣ:"uc֮, +- o/fnCaL'@f*>wY|ҠS5LW6 FXcG;_=s־ёt7"A-)+A_P7ꌎ[ .V@TS0pVj0+@]EnLIrv2gK%b|ܱAzDk>yy.GGX6,ں0r#zMKd/x D/y,H'g o -(>0X:Pv^LنgV)V@,wa;H1ýTޗ!˰GiNy^l̖0HLynEqQ>,jIa%}\Pc*-,D8xൿ_ sf\Uk%FI-vӥ%eW[O[hR8˾_ uf%`-2a, ͨU(AM'v㜝g'&E_*"yb"!:}nC+g `^淄^>9p br+y`=8-y4Q|M0J e˱fͭ N'觝#Kw6$>3qt[lCͮ+r x|Filҕɟا5Y2K+S~í#M0 h`zVZ ,|Àda)3e66 < (9@wsk^i/<ͯRjWj@ !Hz-Ӟd~19}HV$^ K2DEߦelE徸u/>#Y(<˄M<7[RT~p<'N-LEʽWhGP~:ݒ s?i䞉 Ub@}4kZ aLM |F|ŝgnҶN *3A>>M-c0%H**w}6׭rBofI2L=f&jobtA尃jQnF j:4j 76$/?@3KZnPw"jZGe3UĹBh ل&npVPR^~ !]mC4Ym$W?[8,D(U+?PDs(ϔAn,Ӓ(2ln+"-<)Hq7UCmR}$p>RtY&c""c<8~&6Jь'l{zéڥM҇dCĄt7G+5tU~ux<ՇǘZZؐ %9cٜ$ND3?_Ǵ*Ί {#LС&awJ{-o3/ߣ3xL$NdX Є'&|j]1,nn͎G#6R ?hWYLM/j315֠ t\LCXw,D0 8sVIފ fcrUg,|ΩZ) 5EWȽJTC"+?l mp5)$\fNiT}7r}P=T$5qYLڵ6xx#:(U.ߝA}#;ܮM.G,\w V7FVA &5]:Em i]XY@kBR&SěG6Jq<}EJc~Ni\zA4k4nuśް7(5T _m{^:};6woi]l/̕)(zD aP![rk5-$/-_rz]9?j61!PKJ|x g*! :Ar&rPځ9""=5+L!>3QTڪd* =b^8 ΀}(;~ p-zݔ(:N.pٞsEF*d74|!>b!fF1Dhyg.0/>B!]85¾a8 0AG xXT9JiA6웝r)l?pv,P'Jn5W}š2[nx#JM"IBsWo*-F2 nP!,Ta0'{iٽՈ d=XPFӶ:W CZ0CsMoCJrEK{[rb2mZ; $Q$ G$ Jg TR|k5?fqJGjEkꙭҎՆU;x!e$L'$ΏkmKA>y["4>of-=].6s;ܚmկfÜd)IBgX$硯&`#Z8%F\MI{pf!le R<4&>N-C]K"8G9sbZ"1zZ.A'@iyB ^ A/Ka03X@`ޕ.!FQv (rek'@BؙRaS9MgoXX1'>z QLQ#+dU}Q^bKBr|IIp.“ubO(A%98.d+OmP NMKo괯H( Y؛SҒ S5"AO3\v a<>e@>TΰpFxo:\ @VރZ?}-\4c!JQ TCG| +v:F~3VeS/ѐ ۥ-ʔlY|tDaaʙSQz-ko LQ _#Bu}]OpW^ JR5i6R5)jV/b]\3^s+ VL/}EXޜf X[@s)\TowYzgHEDw>^BaxEv. EquP.wf]m@t]Y;Y^j) t}n|ML`5-.Rq`O[fD ^n;=պ޹A4a'A*ʞ jG~NU>Ts(weKju[%O(w[tʔ܄S!xk2@}#Mf7S+kgn3lC=HxR=2!hyؙBF,qk" rmN]>Wr9?oOd M}YU׮ǐrp0ȠE$HHj| txm̬’*GZ5bIl  󚪬Ff:uTtEFC=Q%?2"7[Q%%eہԯ )L똷VkdJ"lşU,°@0t|Qhw'6Ὥ0S/pyٺwd85:`g6t*^`4*Ffds%]cn@;Š *~/aqr@η-{Ebߪos>m_8jw n%D@#^G""o*=N2n&O˺#i*FXH-ۂ[J.j0ad bg=3XתTܨ/]E{]=r74HH`8|uأ9-@JY} D^(?,if5꿋E[P|@dZܷCp7:ʻaϐ }FIKsAqq>0'h1atXg܈meDbR\}WT=EaWA\D~hp#G-[-aAA@t}851j1jdmqvzQM8J%sL c`]?^ df2+@aى|kE#V[s# լ Nx+Kؤ!ҮY/P$A:r@߿g\\R17U?fR(jb/G9`s!NjmᎹt|g˒l||y4s} ?.SC2^B7SjǕq?3./Ն=kwITe_fY"-P#8bVy.91#6E[O˖tN>,A h"NI,ߥ8n{qWBTWO4Cp3 \?K/1MQ;12Lѥ9 p l_UȠk?FïeWh[Gi\\jM kྑoxlOA'ƣ™ Io쐝| N${ל&.M`XkrABk-*A+G"m9Cw9NX1B5- 6 sMբ@RJm& uه]M'̒BMOm0;ύ 6~ҷעLzlRlwUԦOƒ0?T(mr[9JǪ!5E;6*iCcbk‡ 9i ~fZ LC#>2ȡOJVodEsL-(4r|@$G2:ɋ/ >?{O"J}d͙,LXy5=633'=lQ >ꄽm#XϷ saϰ7J sr'N+,8|—墦8 =bt+>/X]X4yyQ*j@ M2Xǧ\<3t\3QwKm3ul ^bE8g#8)%myHV."MOufJE0x̤;78^יxE8>ĵ+dn@KW[ԍeZ}=LUi&@z LR%jZAP` *D[vhI }9JV`HjP{~t],]_r/)Q!`]W畢Zo2iLc䚱YWy Zi#rP'+lL_>j*>V! 3 *|]Rs׍7S{8hG{Ƽ{lYȌ׶es3TI07 X@yCNՎ}TW"&ЉdFl+Y~&@;Y[r>U%62v4H)RQt呭9H0@\3EI3}c?_OލJ6:Rtigǃ<AZ!6(1qymL#d#tOUHs Y ]ꨉ%L ~W},+#x}/7 3&>¼wi"vs~+:Ne>^"Yz[h0Nk?'X 9'€k]81 2MMc }ޏU*,Ȭn ^^㨃E/0G7%+Q)h j\(dV,NFGyc.duVCmIl7v^HM?}sՔ{lgSPoF*Jmgx 6c,!!/im2!z#Ndx/꾫&`| Mj-@=$y2Ww*wjs(*{_qin-stN-$u3$mT073V,#T` tƱW:v%0E7.JQFݟ,20}9(.,?+>弋ݕ@XZw?Y\9 z{p-")ybxTƺyۗ\!lp(G{rsCK' iS1sR@U _Izʎc#Sm'G2X\4{dK¤ӂ/}-BŽpF@6e4MK">= 3LWcy>\BkOj<j\ _t](Yi0ztWXNQhvavD{Tl\ll,ءJX..]:N @\yމwdL}sgI2U\e9Y;| $DFzCc3 2/U `_*P>lD[{>]ocM ": i@ fYzR5t1.8e jIl)*5,-/p?Ri)& D1hUkMwYY:BŦD/Ʈu˿mD( ͒It~cBcꅳ S!ƿ lw;<4'Y&ֺ\*(epHem^j@/:ihQu%yY QY~dG y=gco Řu}N0GF@(pBX]Q~b}:iX0-f]t,LB6p*Lc\l$NT* viLkäQecY~mW|XTXm')+?*4n䰣`h{.e5)v:M9Ɯp"*% GB}X^'^$6G#޼Թx{;@͏f}4`؋sdflFgJL9ʛA@ ҃4quL[z5:@yUwڴl `NxaGϵo~g۽H. D/C IFu&ÜE/X˓yͫEg6 Ύq!ӧzXةo^MuʙiD$G CaoQ,;127Po H'-z½.7ߜdeVyAyS}b==q?/Ȫܑ;@uk  Nkȝ-0K4| \kh"$1>;QTǡz>X9~/rVttܞ: >u a<+<^Lj=ןOJY[(ȃ)Dzvtc{aWJ@[?ViOķ lMD̒?k8P xp*nPP\xz׈u((Š;..ğSω&Tê(M i!5g7CxL{x]F؍>뭯T5pWVTtNS]3'aB3^s=qBpȉR\*2w:FΒc"36{{b9u b#rx'[?ai&Ů*3s+xui,aBSZ% v4ZIt"/NEdDFsj7ɇ,gi|*{^: Ǒ߯<*aҲXOwģBs٣hRZS39˨(:L ƥNQ߼,AF*EbIJX6VCH\8i 7ۆ#.*I! wDTLL@e\WFUt$z8|-pW7(B kT47Kٙd;hM һ rqԖ&-@@ErbA4""F];Hk‰mxW7`ftSuBԠ ņڴרE3Ca,5_& @V-?!et`j8.&Aד\MعS`EЏ!S>Xb.>XҐTh̔IF*u'}\gcFujv'|noR[ɵ`hUo&t3-2f>22j21$R`3(K="Y[ çjAKn-=p:VȤwH˸cXv6Mh4*K<fjk( pCW>g"V'._u/(csI {^֟nk ;3-5| oCm3:`\KJ: P2{a ^ohg,2vi1tC[kǃS= "T|W*li٪g{VҥJX-vB+[!]NLI꫻8su kǘέ'+Dy($1ErgSk&YVOBl7LN5M ]2D&ת cuʊS$Q@&e0.Du .h\>rmnHu)wz\q.x,#Hʴ*Α-=6waS,@%*ϑj> Wr}~Kgdin`{Upv+/f%|M 03S[$jQh<|NI]]0"[X=ްkNqkI n y\v߄9zJy3Ŀ> jwT{j:qt;L˄VFɪ̄)t@0(߫6̃ëvO"(x|t>PѹJw漛ԕ2<彥 ق;\(G9(H-*(& %+.,}QYf˰jU8&A.dx/\(J'1N;2яt)FznR$Nnml}XERc4r3p.p'qZG: 64ؾ`T3ME^aOrBE ZL.Ol޽+BCnʏ1yJ4Kc#vo8g:#E_BcS\HiD{rN11w񓟀;!F9aByxcu`7 h#-,)?pi@LizѰ'M7i-!{T|6 HzN!vI=ܻ++ܧԑ\'c +O0;[1^2{Qdjc.F{1x]&2䳾 J+EOej75QyK6pw]4ZL+$ 2Ui2d8o*)sP܋4YE&DϏ2 )fg&󋏹SE00Bff=sTU)\垽NvLbFJ6Jao:.Ѐr r;iű%ޜǃɊbi"~-s8Ӄǀ4=\VR1ߤ*.f2M+V0βʹѧ<}Xãp(m+QH:X!iTz/%c=s8{FDE Bs.<ٔ?Lt; 0 ڽB(!rJ [ xz L3|tO (`OɁV0<sI5q(fB29VW yf|}PYw,_'\QE9±K>_@֎=4~꩹0-0x ʎ&=<q' la?xkޔ, R uƆO4u0v[K ?S9w~4NG)և d ñ{amlQno5V&}z1 ~*%pHT)XFJƆo|* B Me\T^VniV*Bu1 8CZGşS/i8C{If<+54[F3{B"u =}rj\LJ bSfv>QޤHRئXf Pqr|4:i8'F3+ݛw(dZ p%l8Iۼ}ywAz?uiҢ^`1ImlR>.w}kTEhDЪ`ߨBHAj*^)|Q\KC'JARJ)G§fC<4VC ah.Z:OHлK[Nr3 qUT2)\NHuC}94w۬-QS0HDx̤ࡼq\(^aŖZ[aW"MkN)2QZ85翖5%+z7uͯsy?b:7UEj/QZ?-~-Vpb)X|HԉOk::R5%(Qb 1LL.^U0Km45sv2ÃE7-@=aPZEX{ο)Wb'e f]m=xI厂 T|5yG)ۓ&\z;~t~5E$LZ y%':)&|e1)HBH 擣-_#j|~AH 5гW[Y<Ȇ+fY?Ln8 _ޕ?;!J,Эli{ 3j>pS0/0pu*`2A6a ~,ۭ #ۻh Fͻ>oӳ]IG?#ןe#Lμbz4RzpD.1h+UN = qt{4¿}}$d:S!`J촪yp@f]Nυʀ1}r wL*;J>4eъgR0+<Fº05W-UC#mqbK7@5\m/kLRb0s-DW _G' w)yL1 8 7$GFY X(y 8U{iͩX}c-5ZZ]-jP?`k%o|28I D5D}8}G=JIfޔA&ϑd7es% ˮCQ{?u={AltnTD=!Y1;IAE.'2Q>iy&5[ UuDo2l._KL_~lտ*enVw>OՐ\wa)wO,9aipLNTA&[K(F]LHTg CnM{N֨w#7X rI n ]i<ۃwgiFSpn a[(u$u~ =uk<#2a|H6^rmFf @ MFOТ•!CDƐ7N%B (T۷Jޭ7o %o@ASV{QbU&ٟo١n{w D1h^P85۵%c{ݓYDmf sȉ!xk-UIQA,#bܖTcP5:}bh@u-rjCC bk KDٞ|$ټfB" 6{ ݿPđ֑?yZ=B`ӟ^][LYPݏ9hۓv JXN r{eQ,yΡ;XM /k6_'h OKj ٣c]:h.oy:r:8 raJ|MG0W|蠹,V;@|%H#MG!/3᮸1w%.V3*s>t['3[9 C>[_@'Z RC k x̐ yDb$W c]X>E]'eJxU/JLm`78&*]O;FJB fBT䁰俓Lt'b]37GIC̀滋5WR&vFx6D<ųȦiaJ#q*mW )4=*xLnQdVk D@l;Nk2>DU7`-}^ԗ_ce칳NZt"" @ ʳu͌7ETCkAŜmM]m~W(i==MKS@ïc;b4PuƞN7~((غnjc ǟ|k/u* Pa\AkH;zʿ\sEW *g"@U3eA݈@90TGLKYT$QUDQCN t/do)v*+#)YSCN EQ_ql3B_վL$w.q6ޏB0 w SN<:v?ԃs@֮c涰@ <3(26b<+vbP0eQ{ ]~<{.K}mlc `bխ+p",A"l^=Ŗz^uv4̫az{5aD͙I[vsDeMj[%MT[y/ 0(VjV1j]2rMj*Næt˵ʶ֖X1wd@DxL5YݮhJ BkcƋFqqKPR&li.NK+q?JڧGUЩD :+moL{W#W_M)j`8cb_=]`iMdUP8ya\Fҫiw5 62_^NZ %8eśH&XZjI .9C.P@qMԤ檊3[W"t/xeJ> Cvd0&z6EILGn*ۢ6ݎ [F ]!/S9|X2 ~HM ڒ]xE%+jմN҇a\|bp⺬3G68@peYrxԬӢIN@S"4N0֮ DJ)j%rST%ytKig=OUɍ!85]X 誔X]>o6^^84PDTAQ>h{3kZT؃4kpWEgo4vo*sMd|xКE`E]-+h ijC{ꕹn-dODܵK AZ)F@i"(V˩< zϒ:ʑD%}F2εc I@BDD+o"PJ&el,(t%Ll*g`z<UI- Uղ' Aw*J( uk gؖk ʫAJ `W+2M0RH-{ч?),Ue>No_:WںQifϏx$4#ԑ%Q :Ogku[}>M@awHk0:vet$dUGdƬT!ȯӉ<3]JjBݩ| ߘVr7F9O*PH Ȉ.( d$! X$*k[@$Ȩ` B{6\5Ϯt)i .:;#E@aP D.yR?s1Fء_5mĿAzzɤRj󠻹Қ{SN+) n'jUa0J<].iӏGZ'; +E`,Əv<鯭U&N|}o!'KU5W>К K4ϓgd2Ʈ>:s'2ާh+ܩGo[lG˾Iqk^Vp0Ȗo[!_#*)AɄ#liWr.l[( s[)5-Bfyp0a=}_~#Dukߔ^+QFg-sOg`A-X٢UڐNu\ /KΆU>%, )e0ںGWGm_xܑ>m91&7/p~ $\xzq7l#%qqVop]9֏`W8]Jst)9lxޗW'uT 2ћ˺z/3w[ PʟL4MBZDghJD(kIVa(M~i'O%{w8w> ̀/ZdTObI Ԑ>a?fhh%[-CFghy*b2Bx30\uԤZ5Ok 5H]3Ce޻:HoN؋![۟Ȇ&S{/E G/́C%H,y|x ,&M)%ۦh>(\*_hKy2pf˂ wd?_o5۞M0a@؏4.W0ޯ1E Ї\'Ou~g.œ ?JUC)e /ѡF!. 6@P4nE3`(Z jvlio-z/*{bCv__z:d:k5N-赡2":[T+DS͑?u%? E(-bohuVh9Pa%&fe@wȑJ@49 ?)d{dEskX`# AϚ RK lt7O{kaY;pjNYw6yxT8~+nTR(eVs6t8X4VcJ/LOنoG:[1+"Q+ uK˒~]>,ē/HreAQ A5s-(vKT~GYn'k7ĺMCM^ܱW9TSqE ]Ьt-1F/gݍ.i :K9"֍:XDS^˂Ѯ`e"c$)I_0`]4@\EY 2 At׏;w?N,ABC%sϛPaш/Լdޖs׭NC{&̼;m#;rE˟ƒ!JdAdQg]wqe2*p gAÖ/ҍYqdؽ{,@ nQ p!_FhCpÆ'{(Nl!슗{ =+^٠i]Kx= Y/5 @,?y~1Y EAչ`=!\ BL Mfm2>ZPbDqּvL*\M.* L4;L}tw+1E)!*V4(1 {&%pb}%Jb$E7J 1A~jA,8sIb zث:^D^)&G_#ҝX#L֬@H0Jv;(Ub3 )P?4`Isįi+l.;'+hhⷡDNk֦6ܺ5ڨAj ФGe[%Z/>&)m\}NY^؜ȥS&r@( 'y¨,R?N8 6R&j1$lﵿ47~:p?J$ʊQh6 KO mTJ) ,Kajw@"I aX[meх/>A++AqRI!嬨ua&-kH2v́b_$GGf5Ƙa}?UFMKyYۆ-M.630F޵F}F7C}6֭k/E;xºK2ݷ.ONuWN=( 8;/>$9m٦hm&4p ͬKqߪZ/ -NyT9{eaVdjVbrB 6;xenîG9B`^Jծw?/iz9Z,l en8) KW1ѠQd} ҃ײ'e\?ϲTǤq0&!s?lcqLUŋ@6Vs!s]9E  ;QAڧ>ꀵCO^OOԑWN4X_֠Frmt˶p#Zlڊ)Je!9͐^Gi|%glYD.G95ہø o9oƋN*!2 Rg@RI-5|JiRFo2KE|闺940(MA=i|Ldҁ kb7F̜v[l&k^6D`(hTڍKriL9 \`C 3DC?K):EX|=M⇌6l0sѽz:w^҄n}"`}D4Qt\\.\Y}ֻ&%&%3iE]MMG).=ʬ ZN59V؊9N 9cv-d圇A'7N>>c-qAR:@}l@48 b+qy LDrWϏ8q:9a5M}abݵ#aH3<( ',վS‚1S{P9akLrzϞ-<˜h-ICDۋ51<*^>EmHA!;z[Cu6Bޫ5'V X\ u?pEP({ ҁ"Aj" ¦.KoLlqpxTXΛS15kxڕ$_I,q&.|p9E"Uꇣ2؊>߳@P\uzޮBbTRx}/iqK147_-(] AԊ OkY, {|WI/غ8&Ј,*+ϻR;6?6:ZIz>u񼒡mAƏX ]xO`]ȋ~ǣ(֍O]`Aer҂T+}U٫^)dFJ|c^Miow,?[ϽmAQ_!ħp~B$dJ"Ŭ9.8KRMz5֕,ތx!WAѦn('qEcYP@; Ɠ|!y7 !Bf}"J `t|^EBy>Μ4xjvk0fj RiQb[lCZRaZh*yf4ءRl`9<>X@I2HPxmɦhi]#2ER <)OJ~TQ( ڱ`* ( QJ# b"PX(zwoNΝ;b9*AEd,( gAIPX,X)R*+""PwfX" EEx,DTTRa&0߽wW=3K|ȹPWL8ύp=]&Óg䑸1.{J,಩tr(<VzFU_fmO#yЍu6gN3htWL%,:h0\ډrrmBfʰ2{hHbҽ"էxne67\cRjKȐQ'Ѻ學rd3,3KdrblL :snؽH!]OFE<.t.L%]B 0 xXcٵU%)&۸x 6NV(7ҁ-:ǜ(4Xфhu>ף&miG*3m| u*8p_㣈Ip@0< x1BԢHxgQG!8diZBHP%9d0jAI"X Ñ1iP9_M>wKtrB=)5,ƉgL*˶޻Km<<'iR;)s5j#1~ց 5ڃ2r6c:kPĂ /aRgFhGḋe1pgBI>)eEm$ i*eXaAchsʍx[)ۀ ۵U0U.ʋ`jnrWff[.pf46F.ז r!ф9Jp2H4r Q/HwZVD;k_ n?"U>נj HF]/.D e9W6ٽ`wNUx)ݪw|j`M9pogu,P ߢ<}}Nh8D`YRwVyFwmj)i47qhiz?wxxH hb!?, O2Ԑkz&#.XЋna~y m{avm=dGp fuDw#4`gQǹZ{죕VThd0p*\+̟pxYZ'',"_>$f' Y FD=/W+bxZޓWͫ Jzf,yjAS:oTeGQtj]#8@]4dfI *DP^‚大@AG?ع3"ۦ U'֟}Gq?Q:Ŝz 7 R9~'tZBE5‚b*TK+iU51n )f FKg@h_ZR9MT +c]}Z~.tٟg3hfOW}3>'P.~|Qef)Q}WR_9^1PAf+|Qx=x0R>{^!f)2" b|v;N;]M<ޅ;^>BHKN'.v&'2\g32mc1CB!Q"̗+k?_l) X5 `rr M$P?F=yG˭o!4Rv'0/%YVhI/PrS]qz9p 8u%H*b8xJ[ɇtSu `;U:vLqPUHH9b!hhH"1H Y *(}-Ra0AET(pm0{dZv/qgwIbX"$D!H ~>Jۤ*B1H+Eb d?A W043%fR,Uݭ\LES9ha"0 cȰ1:79AFI*,b"<'[%CB;pqV . ^1 QvSisDd6ڠ*UAjNC6d[ EaV"ۖf嵐'{ kٖ黓^-/$̀Y$M"A7J|PU{)?|avL=)$nOaғ;(`{D 0ǥ;rZ7,;ZUixDWljmú.TӫM5"3j"l$;:zXӠx37⑁\pO% S醒Ms{MBt>c.64i|彉˛s7COƺ,37yª!]NA$ϯʭj"D?2%FR( T+Z[EƵ7f*KJ-%kłt*(*ʐTG,jSc2uBf+U`bQl1tEQJ YiQ啘ɈCDaD Ȱ9hIӂ2ol[˫|ftu7V1\TӧpᵎQ kDҩOtO#+|;?ؔf`+K&F0>ܛK1!mBd5L8|[&nHHX3)j1 TQk L{mZ# 9vrE os$n.}pC>%WIz> 1́nZTQ4Z@Oɼ_L.POT T?dӞP*tȀ;_s16~L"ACd;C yi7i\-%(͚fg peղF^;iT*y/ژ Ytv.#eO_t3ZDm~ z~do|*wrʐ.A8!bTW0L8CUiꬴIʚscUY%I%\, sUs&)c`J72'32P0(BlŦ;{Gk[kv_ߦCvCU`I47Ŷ̀I@!"6B -Tm<C8Hilown+WrvmmNL1/pwt;&͟+coW |A j6z H(qO}Gg5_:|{Mj3i?z5O:^1q?]3(jz@3"ܗOL2OpPb!("#*ltX5Ԥ@qشKW{%2&]!vԢ8 N)?;TòfU:8s1W]bdSȚ[!kWsG6G逗 }s@-T/j܍Fr_O.h۹n,wEP\6R7~B)Hg# HSD%D}fx -i YX ɣHdP02a{hgq-U I^3xqp}zG'/۾u'#`}MY9;7cz/Jg~a4A CPQG)&d@'_,ђ~DA:PEWJOrt~004;$wDI$P<ܻm/=ǾgϺg~o;ͥ$d 0d3`'5]u xR\po~=UgrۣxkU_n; M-{QFK\%wTel__=N``8Ɇ&ۢчaAm {Y/V΍glŃ#^Ðzl%_nI&5Ca2&7gܰt=B*$Zpׄ1DYHjN.Ă`HQ"F'VRHVqLO2&r}fh`G{`ٌYĤ 4f;uqrJ+Zy+{Z"T" e{̕7 (&=N=>[gWoz&:Ϊd fv?@!Ĉg* mZ"U K<^8b{Wq;Zz9?'?FiORZH-n)d%w&LZNi@fU&\Ha:FC| Pz~k91nn:X ҆PRv6rr{,-rB&nUw..EA4@-J& !o[0,.N1YSNHR /WX/}NـO-ۛI[ܭ.cn&{- 4_*, ˈb:؊(ûe҉I h$L$; էӈaŘYy? 6<̝Pē; @$@ |z[x~;^Oc Iq ##"7nEoB'3 Y]69j-[-~DϹvd\}/XDNhкx8>y E 8QPlq~Bkm3s)c&BR{yض;{J:9{A3SB& BVL$Z`b9%gs]`I"q DףnZLߑvwW duN"%D7bH @N 8 Fŕ,!mc?)+/f82.0o!2l*`˧D,-ICƐ7TLz 38nAEuejM!_&8`3;obu%J~B D?#ѯR/vLLRWHX"(s:p) <{ XI kXɱɵ;)վsGZ`>T=_:"E2_"9>%pa:d ˼~.rl?/ئ٠3 O_S&<뭩t)'MC- o5YSa#K)ɗ(쟃qJB/Ҷ| W+o}ijElns 2zz2< Z"#!Xԃ>6iO+ Qa+_GhRMNP *(HVHTYO6"y&}(]*I&9+àOb=|]d~ vk`ƯKE&#_%7d $4:OweJ BT2'Y⿻;ŘpSÅ*Y7t*g|4n{t-"~:LT:su@zNi] "" GVPՀZWص5vE eo[;_#FMIy+A4ރt>|z>OOkt' -O WЀ.WËKy]]tݗUYy|t@kjf3v3|x w?2b& eREObNOUqo~m'-#*;ԂOh\yJdF4WP@o"bc)p>:4L'aWzr"C~5ayhP#mx6/B_}>m6kOE} v6SNV롖<׭@aiiu>5DfG-P<T~jPeR% !`آ8 pezҢv~ gWMe/I[^("C79z ޖK#JKRwV+Hj oP[O+.6/vDŽe Kxˋ66]+{<` >:gƸ>OKZ{sk>^O@vࡩUTD̑/b,GltiTe bC꾑}^CK%ې9&6 z=*};Jy(<Q P^.^" Fw^J!nvW7@N=3UtUR\wǹ,7?kחY%9CnN%&fo}TE"SPmD$BE^W !q'(4q1$}4>^ꔑjdƩr[R-%(+ E/`A<7K4 4 URٲx.Xn]1&+1 LKs3XF0+ݔV `X`sw1cZF~" Xߺ?馺?<\C?ZoEv4%,0_NJkr? !?1sK_gRD>nٜ˩Ty~=@*y :DE(fiEb:dj) $ȀVbP"xoDl [2{]huE|xq6;Vc`v`N;@E/B #Q_n. s0TX́ܿ$}htq/@lP "[\ty}z#V[(ۦj0G?bR|;ךbԺ{Ylh0 ('=-ڹ p9Euh\~V侎 ]1y9s:=Tu UHxZ:qLa@e $|(rCBnZ,?|ը@3ĐYA,$PRď5rAEbOmK&1X}ڹإ+cʶ;qݣ补ZLQ$]3'Ϧ9p u!UA"F_Oȴ!>!yjcSįoSUu+s`djFw# h2BH!3uMoj=\|NwɡtpܣZW|u6LC/P[n;c6bR*ߖVmjހweb 0Ipd<|HCd;B\Yu4@ qa r~0ʥ(wIcdWYXGl4kRJQ(Z2vOT3qZRdf6>$!y-Y6M 6_$(pb[ry$A_PsYGlxP,H7NѺ@R}'CQH5bؙmB~ZRrD&Hg2p{T_ܠ[AkrQ0D(fXWX\,ݣ꿢3٩V~0{H ERJߏ8D~4"H[U 8:>:e&^&m`W|jzB1iI5Bq/P1 `I9QZyVk-2.MY _2ë)M$b;f2ى48f<*MN>*w#.fq|8~rv;бE>awWH JQ|mjVJ.+~<'O!65/Z'3YɱߧAW \}E ;6fܑ(#; 9(bj&ar^QUՁT+ֲX?.vJ6sS%40l}~O|Szjm6 @r<=9WhBN0ȁTtؼ8Q՘[IB߽~Nr1\WɳMqe2>ȋٜP qa=xgI.UL| _@EM#ъ2W۠e;.^S//{J\s^klYoī\: JKZ`gѰ l'Y(Li#3]2 ~ZtP@(`0IA_mj3S>XimrLUqcw{SQ+gK>^ `T!aA s"% @ 4o ,{ qJq o0Q ;N3Rl5qH* 7#P-~uqQcLrU|;\jW4 bWn͍y#BG>0ziXBDC![W̋.#'aOúrUƣo#b,˗3npJ 0Ԋ՛?z(4)@s@^'ˊ5N*uD \_0@׀#"QN(*>f!"[}Js89? -&sIm%"߸FV*}%s8Df/0K z UJEKUJee56%\}M]vy[O@%kDXEDyT &*6aֹ $&!\= #CZ{,>ИwV]ef/tE5ŹXeyU8ԼLgu5;vc_|ntHqo2 !H{4/J vהI'/O$EK" z? p .xvN, KԈ;SJZ!  "#8vw|#H$4pShz4+=>K~TMCf( z"2VHVB|4O@>T7JŗUj. T:)Mח0Pq2CAK^t֟d[2?cmv6:.oh(`GAA  ‚ ATMgIZ+i4d'b~>JmliFվέ[Vh^ڙz~'"< QaA@l-R'P'aM9 }OMФ h"؊*?VHOw7ac9&=}?KVH$2BB(*~isY_҂o8ou/ҮyxUD=ܩq){yU  QEUB]E>]j5<=/$fm]uQ"$|1Z:].<׿ ct^ʖE^/nE$TH@~kii|JEBV(:..~m+[{D"HHUR%@; 9POZQdb _#žtq4B4:i_aivhY@(ңktvƮڝDQD܂(BD^eY&Q`ZAMI0gI")孶=^Cδ!`ibI1degJ x~6] h(}H z9  H_IK8QL`"v9!%t&?՚ߧpW7t06\YAUQH?#5EEiF'4"'siLD0qݭSx3ўyt:MѮ 0dLq @Hm4uVsUBiF}&J~mt*B]e *$c_֜=USd/<-*ψg2nhT&1q.kLnGw5AE+! @mڽ?SM_[ߋ/̎||⇎)İȈ8F, -c֣T=MzL}I$ZSB ȁQʻ!CN*)U-lT̥BYPIF@$E`"=.lsn6X3~ 9.(Xߊfgd*>vNE 7Fu=QnR>#2Ngk&Y Hw 3Y} pgbsv5%)Hg߷ɫ(fʕy03v2V*6=J0#.BԾ_\q6ySVTAyn8"4"3XznZ30\9=9',W)&fE~DCQK˼I# בrQdxK^TVs0(*, |{7Q P%wbO•3WZO MG7ܛ-E R,kja1;b"1B|(3),Ťs[YFl%DxG?/bk9x4+Vu\wi) b>|CN}A?Q!aJa{Ju[tcթh^ц X/W oBƧZ,FXC-[<sUdPlDgG0j kG/T#)B6''BbW  2tuEƢO)T:|N. 1Tn\K%\rsuz z)׶a +d#c۟l#=fS^Ku6m)D;=c#L2D5H2Dna$鋠슬QJZU`s jLDAAY$+N74إ˫1fr33^:{5}.cMN'nx\j%yu\ʪiKQA LF[!e <+.ۓMN}ehRhfI[4ü \{)ֵoۧDE0fjgة xyy^*f4Eֵ`4h'?^pZ6ksjPnJ ˋv3?lI֡MW_S}V'e"`%pvPd9r_lM^h}O ȭoj.1>{~k"Ź景Z l2[ iO}wO^-;ճsӡ"fw%,L(3LEp04ZhԞKPDb4W]f&I8Gv5{Hؐ.x^96D3RHH&o)AfJ<'ǻNe-Y&,Y.+ ai3uX5sۧ9ұ*pG^>F1=LR ns.-z1\ +z@#y$'Ovy.w+"ުz=O ԃZ.U"O?Ep8dɦ~2V+{1lǏ l-|RN9#*xjS9KrsmoœXGphki8:my+ Ki1?BRXwjX*hŨWږLV9ybEɃǁVów{u}O1RtrD3G7c2b_Y7y $TPxoE?'{FȊ{h/Cʗ>EhGt!VPbc:(cݦS?gl F,x癓꾇ޡAxI'Ġ'7` '_Q*'H`̄tלeWܬ!1RP]|q*H x(C;/*̃y#@'mtaE|X-THnpm2<.5f>NOu͞VSG=Wn8w iۀƈq7!S2Te_ F QxXvb }M^b 2qz- H:-SNۃnFNş>l91.R5JWZ류B"HU@W̅>cqDOGn""L0=*읺2-[mW×O/rr}:llc5\Vs~4C^kITӱ5N(."OB%5)'5*ݕZMW&])HȊ Ew<|_6zkD~T< WW?;TT$ɭZ]kV7JWst "k.If_Cl`/D z؝ ?PZ;Ȫ s"3,aNBE2\`9:) +S`uDf5FT05mN-ZfsYv2~?/ڜ{g֪)M-$@ZR PVb(Ӏd})gV_?ӻ1~lEPX벤ZxzsFH,sRW<=o_=UOwf'<+њO6 VMjy&TL! ]],"8=^rB*lmө*Jt[=<|3yMt$3psSt3*"@*"HI v8`@drA N%6" jÉxeԻs<~_>*ZLbtA8>"Ex6{YawPT@#4u9-B}RLLj.';""<|[twE8m ۮH\ZsMݬ k776;ﲩqVϞ g2AoVߧxr(#gsETUj {@=t  ¼g@g{SL-h߅}ptC̈́>W{]mʁ"2" "y=o{zOx<*@ScYRpHkR_,s B%xaў?%a{=3~\CR%X7)wOB' (e=tWبbFe4NsPE!| Vٕh ? H)GL@ȚƋZfswYWU+4CxQAg U3v`;Rh~g Y`?&A ?!1dn/}Ga}f6 aH⤰#Sښ899@/uKB@ӯUN~N?sv3Hft1B5 nY v,+?7Yͥ31h :N_ľp{w@Y%Cc>VCm"*Zr T;mSci35~T۱Oz-8G.หnX&w>QjQU+1*ȲҐbA(LwU'I!Ҋ  L`ywz0BuAb!/(vX,Uk=v 1EEE>\=YYȠ_l.C^&D)P6Ja*#30;!`Wv6&CR'p[W]u=i >Gy/껎>1Ÿk_#'9 @0~.&^0S UoIbȍx3OӐlra>4\eCB`0%0H:5g/'bIaύܾ5[V! 4{75*ޥՆ8]ⓘ4n^;%|eIzDHa4sj -}.,`4Hn,NOqnZc>~|V߽;;y1AvU+ʚ;}ew#M3iU7IϥT)xŶ_{H\;ҵ;j^y&~4!'t{6ܜN*Ja|vpkTD=^ps;G=4GĿ`0ǧ&./!ŠY앭]?hEY˸cT8!wJ[w᧼])wH}gV g.['T7"m_ ` TN t⼈qY#n9` ^0 >?w_܈QC@ \nOŇLD$ukx*]hk]XB#2"Joh^D)ho;wZ~g%?ua̲~~wd:IDE88&285D|]Lw|J`r>Ы̢;!Q>>=ε| ؉Ɗ}d֪UQuH|{P  !DDf O2q]9t]%ލ} x:Kn̷6${#ll_ءP6ePCa0`EUzVׇ)p!j gkCC1O"_*nA =Oǝ'.j U$mmA GɣΟFluqꞇHiԁvՋEG &*{}I֎0 %q̶iV[@"*Fֽj9xq-cK۵p[1a66tc0ǥB"|(zT* STCkFCSϏݫ.՜L*AnHT&~4R-na["HpT5C 2̈́i'SPy| 6~&Zp 'Ii~^dxχuV \5HtCԨH##"!` V*X( ,@UU QEXUTX*QETV# "[&EUAV`UH(B? 2|-޳?{lHHN>F^&R2HFjq>q yQRLBMhiG|[svR1"(\Lj.!ABnf4|eAx0a]&W 톱UESZ j|q_D7rS%AXrw[A;l&űʴ Zhe*_ֳU-@L)A"0lAf0[-*ZK5w+~`1&:6_l)1}0ߌ5Pf"Cy%'I:*fejCW,%XCbfZ ʉ5 !¹ =h:5p ޤAYaa@{mT踆Eקh>iWQC*RYttK tmJӎLvVˆ Iy-?qY?{mAS$[r'Ys#OAƺ G哊;GclZa۫̉>:4V¦Iy8yL5o?~W˘#R]\jTT=}X=?zí]bRsE?il3pw m i&0ϨZ(㕷Fp:v,FjRy^d˯D .2V`N!$wy/}9n!|.7oqijc}ml׽=w7ExGjy֐_o2( āgigH #jW jӵ:3n׃M {,ʆhxp xV0@NO!7"׀аA﾿>uJ0>_̈:Q$Q  3!*劼!Ê(s~yv6P7vu뽍@|袜R]ZDq0DR/A;>c5!!Ȉ(3v{ |Q}2\8_;o[_jLN\$#  *"UbU EEX+6J?'7X,DUAȪ ֜0(=p(1X(V1 `HbRǏc|3O>&%?xUaյl6X;e#:!~=P ?BiW\[4 -GU& XH=N'i -dã6.jo҂76v'[ɷnJn5֐&(N"*|Hba(bYURAc1P*QV"łPTETQFF"0V)X((E",P1HDQb1F b(R ,T^R \&8,K?@bb[nbI5!8JQ#*$$%JWʷLNp.pԹ}M%R"c$Ӗн3^/K5ޏg9+v.MЩG4f!=vhb!ԊQ!B%@)$51y?ӛŴVBߞ.h8u?+ UM|M;_InivR[)q/E{d?yVgP(38?8R=ȃ Q]j婣5z {ԏv ҍoryU`0>hϜ~f_&cMnS`Hy<|JFџ0ϻ)"H2 ," *"`*Ȥ@DE"$H"(H)QH dD"E#A2*R HQV"X*Ȱx;v^,qcXao?hu$$YQ`TPuy}LTIܕ+~ 7 dX$8h $PDG *W䞟qx?.Bnp[D<+3佶(6ܬ;DHW6Z/NfD`AÁ9GQ[dhxם GTB"Զ<,ko(U]/{j9X2뿂`?S2V[^.֐4)iETRjQeݞ^\rn#uX*3#Zȗ|eNDRzij􏈨X2Խ. {RDDBAɏ}D{] žB_{T*~a]DV)Eb "?6Sp 㽛\ҧws'o@ Ez}]fe"goGc' E;v2lw֝ [ɭ $IA@kɞe۾znQUc** HPU9Ӹn^bȰUUi){?UTQf/5v敜2&Ml b"H߿o:_e9f̂Axt\$;ÏJi,k@!dÀw208( N_ܞ@re?uiq, ,jJt]E*S*7Bё0@{~/\l:V  ì@xPYkWw^3}z8y86^yLXzB֥S@//ld"4N{r@X۔>k<$k M^(+T`#ɚ$S67̹mmo|oG^M<ћ/_b'tȇ@ԊdD@D}=4j%]R~Of_`<'m|mrGt9U! E9_{oɦ0߃N.͍?em@ =gG7%?: r Y~mن5oվ{ ׶ɠV2)yٷvՕ UL'ȆqHhS@{jH*AEXUU`QHHE ߑ{>gx| \*f;II}ϳǴ肿jεAb($X(X,EcbQHHQ`*1"0DX(#" ,AE{0AEQȑLJ??jv8zz/yupΦƻ qZkNVMPD ?I?d/x!D>DC.˴o.)그/ù{[GŕZ IHAtU2+Z( b{WӵnSDܼ910~zjv?J*6 ?q!9DGBf=o=zP4gu sfDQPoLADBu<:Ə!y?J#VbIaInR}gsm0XB}q$c5'~qhMSPtc8@# \Bԙ] ֊a\ _d; :\:hһ-+b7̇=}fD_B=Muyf@i ]L{aWټ[zEp:R F;i#pe`0ȁ@! BYŀkst8}z~&=nha>`YU<Ċ  XR~?oجNIPl"*(sPC8AU >U|6n$p_>-wSG%?{ @p4כ6oӑ5GH2 qr\,}9U0k`ә/W]G<M[\ֆe2wgG0_WhxdY¶j||># @:W_>~GZp} 4~{wx>d>o?FCӜ=jCOT̗ÂkX(g9/d7ٮڈ kcHP5<qDeŝ޽m5 hPh$X5߾BkV]'DZR"c8Bus֔MF&L9_̭ЯE:a';s#"~LO87-DB8'/ a0iŰqwh Jf1UӘ`uff%Jdy:U?J"o %60ɳr]4ښ;?c/v[eO$,K/~C F.|c_˵{Q,#SWL׊T$EO6W^p"X)bXDQO}(#0` afv; n;M#NjoĶDPl=p Z? ?'b.nnE (=͉QU9"[{'`AAC/Q^<;GSOIs\ ;4\; gIgIn×owPF 101wt֯˄[Ud^$K^tޜp~rү{K*'tmgÅs22$B/eQA/q+DV._w7-(l]!mQM"BEumTTCQ8w.={P#_v;%u㥭S: Br-]?K}gq{y3Y;-i[J,ηFLSw72^55ͷZf54Mc`R(eItw{=A*ֲj`SLEڰlMjL*sF+_|6 .cXd<d?Z{K@wwkM ]V7yw`0WuW]^1Wn8`%,x3 qIQt:,Oj烵Аۻk\GBV%`s2 >(XJOg{oa`gn5s0C Ń}X4FQVm-т;ɡ[";{K43mcJ.[}sW~ŷkAL>tB MET_֫qNCO_pa@$KCLs* I%A +!96Pgny>^`͋?{΁lj{6Ux5!E$q,~kI!4qf U5eh1Y69|V'!,Gfen9,>Λzsӕߩ`l#K ,dKW#jM=l|h4᪄f ۮ[`32 Ϗ||5ioZ?RB(*t?6׿EEF+Dkus5Sڿ_Tj,PfM@6ij31:hpp ?+u"QE|('mlav-l| P$/ΗƊ.lP ɕy&cc͹n^-QN g9fX+^MU2yQgNUN UV~՟#i9r&K߅AL~=2]3Ҿ{),?;2Jsis&h~vvoڧ>lGb}7 ZcaĐ:{rk0Ȍj; ;.U+ONy1r!TjDP_cq(A'G3hBSQ+<2]ʅ^"|XY}i}̀WS=esB"B!Ih-ՒE+CɣC&AWtH9Mz\II>r4?êpQ (p2uEo̻Db]U l0ԹqGa.qD//!ߟ|X&mndZd)JM"!!KNinDt/pnJdX`0 RSAnúfߗ-?F{ˀ+HcA O51QU"DyJ+Qc`PAUb"ĈR (h_$Ȑ,2°@STA ԡVl"6NFm`g;=5m}Ən_< IRؗUA"W4v9Z]$$!!#HIa{y<)R撿J_0&~|C!QfD C ~DRަ֊wAϒ IyrefU0@L|#@-N~; UV2K.sA9MDlMoޢrx^!ժDė.ףpxrGŚ8yI9Wހǥl!xpO޻S\zwAδ_9RǞa`F|\@jwF\^!77|;LGnΪz\ZH"fF"7a1(j;dĭ6ҋVZZن gA2~ 2B0YTaIGb 7VQE КUsm&'?h#.zxihךAH h_q |~2r_*1"*,uJfax圎FIN$ܽ>y`#~ҤhL$aGDfdf{BQę4veQc?,9Ԃ UTb+b1Qyb,bHUb**Tn%ٯ{~'#{9!"#X 3Ky5nPIN ZW EٻɍS6MyAysq^X҇fմ q`iB˦9êTsņ=sR$Ė,2QעtPiM Ę&Hƺ9duhbO_hq94>lj +r*{p_^iꆡ[8IBiFMQ';= 5F"zAZ/%3.=%O:9F8!s!Heu:FB㘡{,̌C{ Nu.aV6ҟ$~P|wIc5crQޥh:U 2z( ~4F~sr?[Pto{-7=X?]Nʠ#,=p[z#)>_GXmvd;Nj"{53\ycBOώ+~qU т#bwTd5t|BbX/$}C_Vٛb&y#b~i=o džǐ"$Ub#""`Ō #EDVłU#EATVF" "1(*PTcE"QQADV P)X1HDb,X E 21ATTUU((PF*"""*,UEUbT"QQ#bQbDTQ1AX1Q*ȊF"UQXљ 3TP"**1T@EUTDb 1(Yc#`EF"AXbDAb 2F(ȱXb**(""AH(DbTX HAUV TTX(bV F21"d (R ,D#UAbXUc* AUPDcUQDF0Rb PH" F"цj|ѷO$ҡbUQàb1Ff DE_QEEq+gT`G傺"+(0IGFYGOE+rnL?{H|(0DKG#UW֪-Y`X|?^.$bTҡ3ުs\߫ s fVL6q gNu3+Sn =>M􊏫fH~BK35ϴk{ݹi8}F3_? X+,GJk}WhXE0~Ȋ8PV֞G= 97h$*HКJSɸ=8$~-2Ͻ]^fw}VYR܊.;1x#%!?U.K B,.j婜i> Km\SExhql{{y:"Dv"Dʌ!:Â׀[<<E6BYrS#CԍI" tֽZu{srO$`L*~u(z Ar^=3ҋT+(̺j՚r)[A -T6Ėﵲs'C+E!ymwqWv90>Ґ#P mT ^=/I4esnT?}&k]!:|̿=T0ֱ~$g9&ҥ24:?yp f(zrFpn}IxoW-Y?<% K;WT\2.̿  az#InFhB3 Ǝ"~:xj:Q?BoϭD2MHﭽm)dG)յmrhX̀!-mB$ JL5GAaT3kiAA*@8"x"gK&Wʤ9'ߩ ~TĵT*at5ܷ?x=R.y{z bI@e8dn1j8@xjW2XØ5MN3  =+Wj,M f>`?uPˇ:6?cl˸;oKR&\-${{޷Hizޝrc찿Tp*@utCFlo҃Vb"8B, ¯@S4XaiJ4Sίﴧ&|:co2u <U/b7k_OdAםN&{jI dF Pk!;iPB~@V(gyy'$s0_u{+twHYgW*,UČ#D(F'W=G 2sy פK}Q|Ʒ\֡&}/3ԅ q5e)<`i7wǢ3{bm~'@*ƏzхKO`2 فYD,7lL@ҳLώEȈD,XGދ_um$AO̊!8}g*1h`p<>|ؾǟtXIt85G=y 8V~'7h{j#]s&9_.t}O_SM G{^^Ű<6B,饸G8j '{`[$A-Ak׷nBRfF#R>Ios9YvO%Y"@ TXGS/ө`j<"EdEg-! NߔEO*!ffde7&.4/2q.˨ ]p !Ϯ*r^rX$aݑaƘ@6̲p'<*kRE{|8"ės {hK%m+:hQoaz9jHT қ!CO7~oY~g>,epD;K2$GC'pY4eQ0{^[qg<"HPqXFJSMM㰜inȊ#:%'eLq~E,;)(DD_0HXC1!__vU*+f =c:*[ Ɲ Y\eu]VmI fB=P&jҝ4e ]f68Ov*TG[ﱹl>O[6x{ߺmuX #$`ao Q]q:f PN AI 9%Pq (I';D7KO:~A{UVC :L4Ե"a/k oOK.Z8/v.CP6Eޭ]ph_v ~j)T鮜؇7g?}mIePm~-\yAd@Dy&79230f@o:v 8"Iy)ֿk+!~ 5 p M0T]s\zم\=X9ީ~4u3h߇l Gh#䦙y97!GƳ-" &ʪ%B>OR7ܾe$V3xgSm%MD#$7)6n't-gBeq1YZR̗ a+s (EM%j3zpOz{>!()T7*;Ph%')D6V4,Z&]2-$cu gDCTH?K2 |?u^B- ~'1kT"-'xU#5D7n#4ay>y\w转StRu6U3a-_zW:#D3Ƶׯ`m}M&6lfN6_^?op!\]IGrČHm+F [5yR)J[yTKB{=%DK".VڥeT30b$F0Qv"=Jd1ΡU TEpeUGK(E0嵫VM$G!R%(AFTFc әḡ>?{!+ g &]Fp>AIИ-=j&pQy;.SYûiD$ .?͜i}3yzq^'LJsuOs'sO\!3-AW=]f%h`$ze:-G5" s=qJ+YbQbVɭk3^*̹[Q*%QC83A7ޞc)C fF. fTX@_X|Z%"^A{->MPOqgCE[< !}=-lc;-2M4OkknsEv|z!eI=F.E D PUD ęi=/m_K6.0gFTUhrDv2b!#(D978C׉ "$>I[G2%*ڸ\"¡@(VNQAxK6Tb6hgP?}M~θR%@77M6"Ɠ*'er3݀"NsuWCCjzA=)YeC!Rm(}82tF/ΘVf)88M S{_M">>`2!DH!/u|2ܣt0uQ҆UMjHAmKlh R;MYXƽ=洰nޜ7Ba^=hј#<*{>E+$e_gEz:fjoGƛfW6.%+UҲ8MZMbZfwң5E!ɪ AU ų*SYU<ޱ_g0IN~K|};OV`{Wo؟p~EF`EG_ӐD|G@H0};{MUEǟC?JBtyd2(ZG = S3y[:rvDYX@EQ ̼_]fZr[^v+>_@.CY(D.vV*>Jymw݃Ǜ}_GHY8ONgoL;guyC DXAfspQSo㲞ͫ|o*{O]jmz'{7 " F0OGw]W5V AV$F(DPdXEF ARThY{PYSjaNk'j#.lVo A VALr/_s})DrВ<޳IpCjBbK/EpY>O_7F]uaaDc7PI`|3t2 D{ay8At{ Gth+(>I- nPƾϓdNŊZ0ڏoSɟ{m鐎dAȁVpn5@'TaaCS{4^7_Ok Sc[.gq[]My7«I$[2"(*",EU`EI 낆ڋ'?;>U@h AWTb"bD*"" <RDEHj=$t=/wz̤\  h 7ߩpkb|( D ?w =5 ?M=7㻓ƔG$Wv j=ܸE B?<j@=uAAR?y+"j YH&il&#Qd0rgzĖ#vFfL(a@8'spb?8`hN90(}O?@KF̰rW05E0_<&N_7S?UUG:\h~@j?`(fǂAR+FF G?Qw>lEU?>?Rϟ/txo8!'ۣ hoѥBBFHHDX9^]f; OF m+~z{EyգV,b=RFQGʙ $C N Dwq*H2hD&v!HlY7ȀN`Ma'Yi] I&VYRlXG5X}^ş׶(*Яe$a`働g'`ID:f[_ye53{n|(wj~o3@yMr1 =ֻC ' j).AAQPB( F1ADdUDT ! DO޽8Y "F0U"$P"*Ej1I"$Q@QB,d!D8[rώ.579Zpc9; ˴}x_+JU L,SB#@Rݯ+F%@h/¡CixDۼl 05Q#PFz|=:SXkGi{F"ޗE:s/Gz8k=<>'3Okj'OCƣ5`$GOz 4i`g)2bL5lg\w.ԼD(W4룞Q*1~Q23#)jK{w|5`p(xdtξYHI"iq>Rclio:bpAah>: Hu<:O&"YӾoslL5~Jпdڄ8γ0-C`ѿ5Hp#M-7^Á|ER,vL!9{5t']a ("\qv#y7 CmDqZ!:J>1mu3FOS |=aA`iBv(Vf o9 BS"ǽQG TR$ "M1P3&]_]#fH  {v=h;? 7) yvV=^RGak;&^>aNf`gƀ,ǧ5|9[$03soA7}K܁As߶;)Q mżu:j'I NJr.HGsv/jL'y/Y؉'rŨ;{Xe^\K {DHh V./}Tqq=]/pzwMB\3}j.wkkð:=:SYrjxA`aZ&_;trKU ""w[AU>F+Z @ mj%O"FК \2܂k8XUD|rT/7}\M5 dBfB_j{?bH1Sؘ N30fͯ !  ~G2Flu.>'ɞMJ+-&O7Y-JRO+;IMVP@h3%YbELAKe~rɻ?wO C ?ksn-DJԊCc~6mNFRUY( ~q=DgTxԳ:k ^ۆe[0ׇ̧W !`w5I0q#*%~qGo[Ca!@",@p3O5JR N#旡[_u r\!tq 'ɹF+U!1HwG?9k?B8N1\I$>{~, ?('g:2, Ld0C/m)>硟.;p;g*ݑa caJ5UWp ;^@tTKUopwyG!1BCc.w{wCz_uF\j"O̵Ϊ?Y5rdAD0~8bj1az3jӲT|~.‚Vd#sCb&-q1j忖l JjiPxt#( ! +trHWivaM^Jw騘SyjOz3|G+墹`n.BB6+42MBi^R\3#0F_w63jAF߃iZ:uTRK{gAEfco(@iP{ 29k2XHug,3J/*paSщx,?C@s v'q,x#IDj\v"8WNvU[B{f0Uxw#> UE%?ZXD.ACqP?Vx{\ +\úycc04**!}O_^vX cE 244,OZъHN&[@]$"H1Y YǏ5u8@ۖ)I I:u$k"rJF:9d d&42kWhT1,fms=0 Ίgr476XVҌ!rrB?IGsGyi2n/+wzl$ٖ+{GϺP 5<3 -}rJϜ1;5DD+}ރpxxꆌKKEOo.x,8ICCz<~U~fj;_kG#$#ZJ bqnۏF'io3찺i(h ІbcZ6_U\ [Cv4 5#-L!fn\'Xev͵i|t{)ũYq.i\XW񙁫cd\чuKr][cbi+aloLDI2a% qXhUE hѣq@2 >rNsۆ4A/Ƨ*]!qRli3GW.OCS/ #!v6^Un**^fߛgTX"GLy;=<~x6jM(q_ Q3UUsa&sG富(aʚ/ABD,RXLjKi85d'/$fl5 P֨~&QxS.j~p3"E(agۣ0Cw7MX,Ĕeal[E@1$ M]Iy 9(z ?q`ե3cb䙘:<€X`TTb$(*  UVDDQXDY,bbQAĂDb #bF.L" '!TQch: [x8v=h7FHHVETE(1dX Hk4>J*@~糣G7URU?fGLH'LxY$Ocļ@E,XAs_[y~G_3AsA]L{a6?=[hR{zm`J,VVPF* >{bb't"":t.6]vc`췍Oxh^PGdbh[ DV(sO{)X`d$S>y DFN-bM;?vaK|츯!RFڌ~m$*8s! n0w^" 5#?(0k>̷$jHkF'Ji5omc 6ul0YFkqM0=)/\OAoo|WԽN/b7í `")Âe]@ jfa{1>kρL4y5L:Q:iP7+Gk4w=ǏPC>dn$nBZY $<0Р)'EuÕI 8(C=ቤ   <ӽLMT&\.fV>ݢKB8ɘ dqFk֍SnucZBZ*FBZFM`ų,B/Uu6~`Ο3.Q=l^0͞?{e⭚#R L!{l!@MYλ'_/E&.ʳ 'Fl:ƺ>o[ucoLIәi]`?Nq=bj:=ϝ-e`z|K"xC`+!oIbzk2 Z ZVf:YrZ d T0`ܑ/`UXy;_18gm6V2Я>\M s^8Lj̣?;GS2HzY$X SI o{Y cdwWۦ 0D<3rՂYKD9::{L/GC9P# f@ NtqSj J*^@VѰ\/_gB +!ٓe0 * Lu6aa _F VH0my,*m˕A\.jXḱuLHz{`RGA@m4CcmR*Oe¢93-#N]Cy<" wJt?#^$UR/u+oҦ~/d0f-J UW"H)P CImN^< iF?{ U}dFZwï9'$ r陜^C,7t۽$<^*z֋N_/N@S/5ƴtGWM{i!kWemFߤ,W"v+6y4#3ijkh9?d2@ 'WQ/@<:x}4d3 cD-n!Ei|E3\Jĩxca[=䭹a0D%Rpvl[\y~BK}םy sV%Qm]HWvOۍcăU@6Fli6J> ]d ]NъN%^c^/Do6MFn`:u~WXO N1F}w+aTfF^S4k9ΔLq]HJ:/@9=dbL=0/a_M.ҚD4# njO;݆-;٥WE~p8@.„+qB1h^?+ziIj8"'U:B٦B~GT`?"JjƕYKZz4?'ꬅgR0T=E #XV~l_/CC }jgbjU4(7oh@C @ C/靖Z7ZU)C}}6A- B_w7+2#$]kj%S EcCqH{5إ|KˀyXF>D C| H+u<  1)?1AaFKTw+\m h?ӗ:S uc|r /L :$?UXԲh6oqضhqi&^Zfb|mI>iݤ+󚮓d9Q 8[||յrC jI0l`gPVJY8N7h4 ]q$EFRq"RXi`[DRŇov\pKC!acϔֆMpd=ƓFaoߥ'>';zi(UTme҇siSOV3ɗy7>?IնM U LtkuwjmBU kkAay&#v'kV33nuÕ-pcD ?]j=xaܑ,>@  [ g^31C#a-/GQMEgNkֆݮ m%H1`D %xwx`K^<.woւ3&~7y8I5E`ss+;qWPbQ''N?'}}{)YG@It _P%ә$,|U.F Ɋ$3XX` pd4mZ bunݎD wM |[t{[B!I0Bc>ۀ|J=׈s;4phJr(HIQ&ewVo7>e1pNv1LGDM cp&2OmSЕ/< Fh/*'# 4ݍ&z7DH WMJwqv,*veo2FtІ)D z^Cd! <7}3Vi-c]}~yHQ43r5fY̖L6- ԚP Ɖf)*;=} {jF ]}n"NM+V5z``x?X'J7*n{ 8qQ$<VxzbeBٔpa íȡWy4<> %Hy XP' Cy¡lAD4 lOҶ{~p0Exjmq1U?kma_O?TDP5oNÊa9*o{=okG/vFi1w, 4X BI(ڸ᤾u?lzz\bV&Bδz3ӸGS~<Ou}4#U–Q۴%Vvs&0}_ik>獫\A[S=(n!޻}ykp.-\f,py >6y=7WIw;,P#PX\IL90k&rr•.824&q"q{ @*GBh}(g[|SbteLDNa6 b1zl똊/eVCu>];-@1#cFm}Z8ն(E:eS.\%% w)?!w6CB:̋F P!`QՇ, h, n҂ORv): ~Y^^o_N.ز>RQsPD ,CV~IWSZ34M\IP0@ȂA 4wM'+9Oj}7cۨeļ/ʈl[@A^)l c!R ^ͯvX\2d OfŸG" DòQ C2S(ŷѢJZ{-؅"Bи\8T~C0^'ˀ 8Qq5ʈliYnw+_F$ \&?ւ l _'v3.{e x SpZk#r40-ތXtѽ R[Jm `(n83Vs6:W<7myMb kHCNrI=(= 9D?SHGt3 (;{Ț؂ GS3ה!U*aˆ 2$cxHr,zwDǨc4BjєWmՑHym&lWpzVymz6&5p+lyη4,{ Cqsnǵl%`U+3i"03C0*1U]u߹~^mv}omz]Lt5`YJ)*@Ff!10C-3 fy'b*qyIjϱkBՇOsׂɹЦSR9JGMПsv=+;vE)ʖl:51(6}mˮruw2q-"8js1ׅ(O|Hf8A{;J:'ǣ{'\j 5k,l ST[&5X18L 3ݲlǹx>;j4S}BzlʨUHۙt}iƄ$B)\0.[}5eb\W\|W5) 㮝b*wxuGYe6k9%үIEM[aryx=Ѭ?Y1,_VNaKy}sc09JEȬm|d`@Abc~\5oT̽3>UƹvI%~ ~⇽/i70Guj/qa* !^+=DuLJcb0>v^B'-wJGׅye(8=r U?+0Wy`3J"L/Nƪ{[=˺_D|FS{=LQ\;X:9fl?Ei̡ߛF:^9Qؕv9SMb"s/;[DʱS36=_[1䠑ޢB[EBE~ܕjkBP4t?6O z]r^G?dUG`]^P8M2$Asn`b]hcڨQoqtNO6sɞT5O,Sb)_ Uw.ƃ4|ȩAQ70G5Hur% m` ۪sT\O R$}G~Ab]D,wK{Pv5eXy}`{(aV;@P92zKxBoS&LrAɑ4/OnN 8e֨Eĕԇ>y? Ӭz4i˹~p^:D‚8/1ݧ%b?Lb AԚNQa*=J4@G( k3t#Ywh̳`%%JLQ0^ nfP:7oΚ;d+: bgW 36P2 t2BTPP$g~=c_;1sGy-q_7`0dd 4& Ia8&!⤯PWPwA`@pxǧi3>dt{}QE_c'8js ҷ?Adԟa&L $R;s9`^-`s GyX}5 :(\-F{hMcabi4vTz#+NA"GdKˣ#5]͚н̲ͤ7BJaW ΟkghRB D6p+㩸þBR2R M8aQ|2Fa_i^}F U_a׳jaLBf 0%jiK/-)gFź`NebTY 01cRW4ymTʥSz>v59c궺6ffJVi~sbLHLī19G3HlNB!$DQMۮsK:XB= ~3*kؿ/)"k5d@C<ڄwSbAHg3ѳn&!ia ,taʱ #ѝN ]LlHifb  kJH'!oުۑj!Xse Cϥ6HaJAYc1lBBbE? - N53e,P(;U Nf΃b琒g1#rژ@  p<`$vutqa+*zah_"|`t/k1V (t0\' ] A)@Z%$):ct؜l^'݌]T"$|:Jv3E0fBIevl_?SSVG,ъagՒ7 9ȸOc0?.qͅ?7gv¬Yu4_Y"ZG.o[U?PڦjagathlWkiMzHnY ;v}şI)a=}x^ }Ņr<}{kh"~rzPɅtq q5XVgv޳MiPܙ2w5 {shj';y O~\BHȲwA`ňH,UQUV"AEDb AEQH*,DATTAb"H( XUEO>-sϓ#<8$K$Z"UUQEb "1dX*X((UAF($XHE` $Y# 1"adQ`+EDC-)|; AfZn}j\~ y|z&[Оw^UAQDYF0R@=Fo 83$xafr4{/)(!4j0G݋m^^z[5J^"˽@]H ZF*ӵ>g仟{pyn=&R3`eL;8 ]Ɏd\_=XZo˿Ɂ}zFO>uN_|\݋l_=x`ɴ73j l|{tQ~iG"c0 +S nn?LـIH#Z1j }E  b̠E8n$h4F(H{9\>cOР`v:byw=%<>fD/z0:{?|NS<ɭ $$H5q˺ƨ=`pMG\"|40 Q[|bUG 'pA&p(:sYlTfk|1X1Gų r5{7SevxvؽD˦q|U3:i fCApꁟۺ}q5ѪvueN0dv$n"K~YicцdbfG!wo`ÿdXEb|6~׷_A`,R*(?N͓;|6d'=G.5&x\!@~2UԴW>  j;_)O&F(F ,(fpCnV/؂FGhY!]ݶu`g⺶֭[890$! @ F 4[ءLKsj^V}@ dž 25e*ջperY0%|w0 v4f"5NVDo-.[1 Ɖ귘u\ٺvi"⊘bQ"3!2ԓj/[r79A.Pqƥ,9C^ۋ&3vfaK5꽿6bK si25V=fZ`f:{5ya~x︹>3n/5 1$0ČZ0Kw!\u׍z2׃Y& fE^4~~k~sb1XVg.鈱|p=nNp̶2;<ݲd5nvhACYjE=|qR(N>Kʦ0F?UD j~n}1@pS.-*# A FFg" RvZ^IcnMLF<8k Pٝ[* nAu"mćv.ޫ^Y̑cRći1VpHkkc38סϟRA@$ +HJLNN-5^PԨrfh])j\*Xl|'Y@CF|p u$Y@ &0R/@|^Piԭ8X*_-zݫ%[=uX;ۂ-us#'6 e(Vds;+tr㽖U6g!ńXBDh)-i]>N-9^Η^xFj UfkSg`pz)%3hTĠ*XV՞!9xh(!p a4͐;zʔ_i+yTQ0f18>d @MiHO|j`5)[)e_wu' vnζF#ë66,5VFH9S 0mw>c9 XcVg%B=kQArF6jUV(>2c1B1á4`!Ack5TAFO;8: :s8gvs[`z;}ق#:^1ٵxm^ $5 ҋ'ԡ4< C:AFj7|huo~d02zU,I t6fEr5N\<)yspi0D C5}'F:0ql vG%vwa}X+`0n o[ŔHwF,nwWU4$̖hjZYe a8.N *2.f콜DG ;ffY7x<{ЖY>kwofLGg pu-Pm2wSg?:?k޴x3G{^-屼Ij=sSݵWS~?g5=f n^Mh2>y aM\0m&gu-nz5KcFٚ9P[v>qR"ib<`!'TV*G&HjWiǥ2#fԯ9z{h<@G~xBz}cp$ϻbM=b>GޥY?SYt8Fb=+|*nH GPPKʱ`ֆ0pbQ2Gnt\eS^?Yʭq>! 篤:|f 9{Vd}J3߮[^.wYx,}(XXu^O]8?[s5n_,BjQڀ3sJ#1wb6!Y^5p.@$HBhErn&[~^<Vt2X+ W7r=5}>]ɧYCqP1 MP-\W+RpC$2 f50]>}rOGua3JN󢀮s2U{#ATER+AL3/G-}N磾Q'U E龓'Q7N 񥙗IE2^F3m7 + qձ9i7fQ&c{aQp~_1bLR^aB`rۘqan֙3qXQbAi[=&@NoO! BuB4?*bʛ Pz?ai0/uy_k0˒)Hh]uVd6.5 _Kl+uTQ? #!N`%&vDf^3j@Y[n5Ge.x :IZ)S2ı'@R^9*]($ZA-bAgvZ )\ |^$UC2p!|?A7o'{SmEC'`i ш`˺K߷ۄtObgXt1PU.<곌HKRҒH[ 3`[kHI~C~RE:e֦ZkdǓTE@#&ubV@{4 =P4JM]'rkX@m a R( Sո ^LĦ^_/#֣-~\7{uv.ı"萄;H'wiA0 B!Ö3i.9#hw|v#?u;a`k?X9-CTBf;{Z]+qHթJÊ W !,(RC@l~juv!j'*CUP]ʣ_U팛=䛉z91ǻ<=!'ou׭CS!pdzVQ'h[>DZ- Q%UɇyoЩ;b{gDK?"BEv/A8} ڻ Tٗ"iSĂsy؃T1q=MuB-[&?CL/c`Z0 2 H -_/.s+ώvczn%59fe{)ѪsEqu֢]a` S'gDp/_0B`",EPYȡK!mDPSkY輪DFe COf44gg=,L_]T!Y* [ )L8LA}bz4SRkKN^bF9#) ]IJ1W1FyY؁ʬYgW?^`Ndŭb= (yoC--UG˽>( 3Lܲ<(3 fʁ[[yq y)L3pTWFf]]26 `>-i=Zݫ4T-{ijAQ&Q!UyCk_j6KS`rR)y @r Xg~~G/'w:2/sRiT5t Zi|Lg,CR5%faK`73`9('GH#@#^G?ƧX,*4-!'bs >!]7]},k mzkR0x&=q~R?[ A`kTÁ{8m =,O@iS1̢>cPhdlWiJS+3ijU.I%ۖ4(h|-+ڵ.ڿo+~5ΆVP2#7 Ddk[n"0sx;Y$iI$EPA(b1QEV10bUAU{?Cٿ'IUbH qȰ I@XP%0t# 8 qsv+ר.;E Q rl|}vVI7!Z%O?tmh5֠ȈWBYfSsp5f.[s RZ5ef)եhPJރ[:/ְ(62\6`}=_gߧð8Vt-{G |?_#A<|{gUPLQQ>B(ŇØHDj%Jmo ZXXYEAĪ%̰ĕuܫuKl,XLG+U*6-fd22ˁ 4=t4TJ+)'a\^RhbI" .7װ|Wb aorqö#X$rZMCDTTPwyF.1*Q 2E҅u$L(rḾ/{NiATQE<7 >$_/S%Fׇzk̹[!qUB'c9Dg8F} {k\4+7BjR{WZ=[ІH2#NGQڌ5m, ▬яOKXv<$""n] WQkm*@s"LGؽsiiG77qÝ3-F@d2U Q&>u$Y sC<"}_5.4/)`,2?p |Ljp SRNjU~5e2$ӊ]w &t`43*ڥ-yrF)y$me[/0jHDovu rxC6!&sʤͫae'bѨ*7{/Y/8 bl=__k`nZ4ߎ$ִ0(†һ`%T|%`S5T1[_7Wa@!5{ q?Y3h5"lZV?`ph[U[_Y ӿw_$W{ )e27J HuM~ebXqc[Cf1<ϸOtfSH3/ԋ:N.alP%62U#ŀ1wvr# OlP4:weЇ՗vIvq <u=ƷSkN:,ټEj!13`]MF@DH* "PH,F T` " XxgχZY\!=b?h^4>YNQ &Ђ bخHp/Kү LQeZrZsܜl3TUۭK -2%,TY"<2bL{phDk0n5J團;,a̜DmW˞}6yH;g{$_47T*#"#}G%lkL`h~aF :cPK-}}OU96Xu5nsBͿZ翵Be[{K>D~,> 7[_/}ɖ!ОseB-Sҿ|c/Zz|,~8Xԉ@.JFSNn/|Js}hZ|`rEvU4Nzph{43QߚøǻR!;ՙ]`cOѤ%ز3sbioyZ (af;Q.y=XS< Hn4%*eyb9+i+?gϊ\UY^aR>Ue݅,4dZ]aOS w{ZrB~u2ui^DIJz:h/~ר!  _lޛRQ) 'S1dDfT`u*?O ^DOHq &3PefE=3 ^5 d5NN8hwY}>]LE0^Cx $@z;?u/YU!f0œ[y{嵩"A Zz㸆0!+X}MH̕¨$Uʶ~ y7]\K GC7/y=bq2g_YX88XiL,=?դ}kyfyPš ;C m:sm>mTx=YG6[?)ZcP$16"UhL@cLZ5jom /z>?߃?"n|X>A}0ĆpKh lŒ5dK$b/׾򴣆aH5eiG908~*=kو٣v,*⛔)^¹Y<'̽c|}9 046U,?V?הDyУfd4DqeQ7ہ+<}昈ïʾl~) D}wla,5_~wHU#;WM;Ty62U|d@I f+<&O~C.)4.C2҈R^cV MϒԊ iK{(~sl7je[#CQx?wlM1]W':w2_ Bw/0R8FC}Gh]T1QJ{@Q>QCkMj+_~|_ W'?ST8j|E;5 $W$Ydu ۻޛLqW]wɽuWYo9Eje$$D$B2nxyIXb61fo<ڌWJOG$С hJ8D&Kļ+Ϸy%V5d^ ωPpAAgk)b72NoQosW'Tc0'.fCk6/[d1ᮼ'g{ A2_EmHxY ^7~}J`j*Y:6ȡR^:oEt$+c6g=0iowC*N| -T D&5eO_{׽$N8>@h?ݞzz:)R!|j3'ZJ= ߼)bxLBle:|zPߎ)sN$.vC.{zLpB վ/(8XgYBh#69Uá7J Q^oW5v+ 9ڗ,3S>*ٚ$Qe(cݣ|e 곞410v IaEnڣDN _˒inxO)`imb&a!KE;ou!7+Ck/4BA/"00dߺ:9y:hR1Mif y2 !M?[#$WUr (C%̉jщCx!e2܅jk)YS:Lݰٴv]hO]R#n*BtRWB =6h*|=]{(G!tKF`2ެ W7/99gQ]LC'*D.,8sG/W h}r6}0U ɳ?R-}/qw?C {2l޴$8A"E!Uȥgr=O[K(,pgooGTVG :֢22bAB%W. nYQzr;$vPw"HzpK?k%.-{ O\03 |-Rt42cL#?#Su\iwNg?fqCa P(. >C\=~{fƜFABFD$#$X,`TRE(:Q+ YY"IbP0XYZbLd1TV`j$ 4'iܬË{T1 an!o7?4bۈ+ˊ%4$`%Ic]pi`2䵜}zZTb"Y̿"H'9=OCf7@\RnUss8ah1qt`3's};] j/RRo& L0C!Ŷ_7P$̨w73U_%H ff3&q>~RϖM|+8 W+ k 2!_s( Bآyn nDӹu8+O+rgn;p{ri}znot1!D N=r]㩿|z(tZl!#0V?I|]W3F F@?[8d&0E ItHmŞzaRIҊ,  hy!!m>ݵ2tb#Q"غiPд dgoS93O^d-;ب 3Q|>0P|['дP3Z1q3q5"&=Pior'`u jx־賅01^%ûq%1R-e0ځD; ;/Do2[ham;g`>Dg"P=փ@WOXms3uDzj 'ПGNN;=f|SB|2lzPn>O:?o >2]u;y-QT*Vy3v?`>[ Yvf{2e'6d0cڬY&NLY7pdCm)IؕЫ{e>\Z13{@nZ{IPa8hqt5[u"ulS!*Qw3VmB՛A/Juq`i1Yxt29<5GTsl,:2y1u䤩XQ'L?زcUE)CLU\o F^@I( E(5њAv3kjq\ -/\ӊafg/0L?'dv4B0AD3%rs3kL<_Yd 4fh3"3%H!w=t7v@h, Y$" !X*PQA@Y ,  SSxQCm`8l1˅v5Bp_5&39ͪ3g&-!k657*05sG$쯵ƹj;o5^|\>=\W/5cj_ׇIFbQ8PˡMlkS\= zKC$N0 q óraj:wL&JgCMҧRS'DuؗE63DCSF!ae0/@:CYUA8)#% Yiؖŗ}|0;"`3|h@77'nh,҅v"&q.X$<$D!Y]A/t3Z]4LbsõzF{yv~zSZjdmc 5Ww8 Su?;rUFT= g NτL-33q4I8IkQPm8]3'hgte b  0pƙƷ{w3_d=pU"ƹ=VuRŘԜ$bXh# DHK[-vWoʼ[h0!?ūa b520(@!*{U"l{~z +fZfh2 C& oĽ9"⎱>W {{?6ZfRЀa0/Vzw:͵mOys* $nݴ&O0YK|rqܻ7?*y7L==gC^Z:iW!)h2>Y^.J Ai]?]Yu%)0<J!JokሂR `5wqIZm/b<l=A:u,e-8n ,S$eieEU~;g$=8wQJ z8 ZZ4K;Q#?D؆h|GJi}(XX=n-ǘv1h7eo3ww8Rcկ2)ҶTnr]_bɋ9 M=Q?d>9iϒ"̭;JB9(e /2]v~ly 1/{y]m'y:jK`%Օ",0=8:O* ;6 QMʰZI81lcޅ.)ex}\/+Nnmk@ Q_Vx`,?sG[8FTt<[StZƓ46.G`A8UAXr#2A^5%̊*d1S#|/slBFl؏Pn<(2@xr %GD PA)L6q≘uO Tb>ϕRseovЃ ՝3=ǂMvmLF\{0 i{j#[c\!PoxdvE'=aTmAɑИQ C0ۚ {\$Q_bv#C(S"N'>3ܮG[W҈\>mT M^Q}R>v& *=d/1yŜpeu:Dlױ={|6J]{SO7?:~mfg'YRN/7Rjwc} [\CQsGAF8U\J~ߎSr;_NNN2p _S2T }iOrkCxW APzi4W{o q]od܎/6f]/L&l_0M{\hgl|Z.FAXn8ޯ[уYDlMl{br0J2wƗZH.( VW$>א\-M( aB1®zl1  I:hmQ;=Ā_4}]PP]fb vF Ez㪋K@a]fg"^?`'EN+ePnbHD:~mz K[݇ã'&[a C$T$1Xs9N}H٫g#gRzU.4ѺK_+p4NA!u Y0g|'o}ާǔ SJ ՅwngavBcW~µb٠$K%B2ƑY| $Ŗ,& PўS ̙wQno]7՝SqiW1+'pJB^p*@f1h̳fNВV^!ܜir[ƌ1sV/w0T&*ہ#Jw|hXL|J;"hEAXzz2bņ ¼$b rq[i"1t3<-8~Uz\*DuB62Am)>>502%l$aYH`DNH~ z6Fa- V=Ʋ6 lC%)"G4z@(_ _lmL1W^AXH$uvq@e|.QGN7һެ$X ]ˍ7)LUX^]B;fvWWP{gS,i._"pn#}6?L3߳eл, 0'qL,ڥ;Rzw=զ#WA}Yn9;Q9W~x{ZxtplI໦&rW::\uP/H 3ETb[bPTͣ DmĂLS ^^l(5Cэ}n[&o1wmz 'ETXȹcX6 S> yikp40FlǼnѐy3P /'@ Gh\ڨK/B!/qъS$}vwQ޵4zZLӎ=]f(@*fu-"iw@@*5I Foz0󒽾 Q#;oZn?= 8!B_r4j,ͪ~oD#r2Q%ju=I語Oj>q-j<.‡@/I D]"K}.0o7mǟElO3.#bIaVD\as2weZ J=򶕵l=2!.S݉|Ig4ݢRx̚1X?v٭ RvY>  %zgZ-Ɇ9$™ 8#8k, 9S_Ba{rG/# ŲXb4xOu\Z^ .;27x+8޽_Nlw%H )9+0y*MdFF[sԞNۂg嵊F VƯ:< ǘ'*g4,hRFҊt8= H6׎7kK1͂0-8'stdkMGoo—ҭ,dj82_$<;_tl`Z2&* ?/ Z"=B`WH#R|s8d!h7.iW_-bup @mn8SNl"#S aw@C " E?q SKu/Xc?C{h;ݯk6z;9ʵRhL gv_& {Q+եDeOK.+DQYF`Iɇ2b!ɓ[-~qWl}2${rtYO*׀E5N^D@< T¸*#1xhs^S ]609> 5P2;̢Jww /F/Dw&H{)8 pEQc `a.WmmZwLL&uE_UwWsßq}V?K?}Mf-0D:AOg$=( p3vq>A0ESZmTW{܈_'?8^q'N sn\5mɷFgpE+Cynɉ!=d׆ϕ|-|T(a!7Ղr8MǾ/GwWix(,ûz_*\+M#a5-I͡¿ZA? Ȉ \nO_V1\4v`?G? /OyԕX,lB^ p>1BzAÄ1H".lv!ܪlW:%4Uh ~lb`q;lD?b3I&B囚CK0dEb fر{obD͠=ȿo.uJ>4ɢbj%(1RIpʰ-5LT$K`cK1ܡ!k~k4H@c:Y-t@U(iԛw#s<sXԁft>rk+n@پ[DQ>3 :e6.~d*zme{_G,'dLĖL=NWWY{~&'4CfS0K#׉8` zxAVDDқ LM9|/T&ݗL5FX_?\rli0mŭpk]$(8kzڨpR3'Nk>338={uRVf4ʱʑ,/V*tҪbM~/JܮY.Hn/2mLpq9wo5c~9?_}8T/x?xZxB}>!"0>hBKF?;,uz +ĤrLGǏW;jwʼn۽7HlUA<'zp:y$g|> L2cgR" },YS+@_HTd66rYa؂ZBY-F'0{`҈mʥlGl}O{_COﺜM@!@rTxnޛwFB (y xS9, 0 SNW%k{<9Xͪ<1Er0w"SCvP)< (ZS]i#;c"g(NQg[=ԐDMs~QG(z=?FaLzJCrL -? &] o֝F;'UhO_,]jЋGXaOk?/'W +,@K<Rc ފ(%cD8G+^ڒn>602(? 쳕Q(;r:^v$@9)3|}S1?*-H w=כ`\8?{*-d k"%ݏr{M:\BHxՋ οcF's2>ƬNaD?fO7O[u쟍jpvv ul{Z?"s~‚G|׆F>^hX gpz9ͅC-$Τ<]jvql͟á565WQ7`x.hU`wg w)fv'ѨVus3/8>@!0!9"՚N2g.ITIAGiwwg;}$Q'H cFǰq@a~{&7B e_;7BYԢ1lx;Zxw& lQzQ 2XȷȜVnfjKi3~/U˘gW_M)KZjhDMl_xsZ'uK0 \ąH> cDcAb DψZfC}<-+i2J>Ee0rHﷴA\p^k"kUPGD|*nj|[3ɥSArI[W.m-"Z 0PMUU[QWAo4$$޸/6B2|00 LO?לӵ) M͸6bw6ӶƠ%{]o l,7ͩbVOKoQGQcî?[Gٳc#){_atKm, 7cՒ|gDX6w]A) C?r\fHu`P(iMUohwJU2TS$bm9!LV"hakCŹJf12!hkr@KB|&C4sDTBF&RȷO_ٔ],0̆˾μHqU39|+ns\Nggia`] BJҍ07*΍RPu]Tg(d0Bbu3=n٘3EzDyH=dP~E<]`_r'~Hd 5n=I]pla8^[-߃B|lX2ڣZ>$V)#Y>:*-T{\<@" 0 <8 QD\l.*i_~h:Y'-*Ű-邔^Բ9"Ҿ$nE4Lk'j5!*͆*޸Zk"f|IX!M20+A(roib$81۔1ͧjqM 19fP^7ɟZV 2/ ȉ")d*iFQ&~4`bZ*/;\@+D _m -'Ê:^+3v3fpf [8oxu j`+)jzK;7W{V>3$2)&(-+.˨ƃwJM1 H{P`z`F~WCH (2gbi' p~t̫yS@@'* ӾK\/zZkO絁?F*(0IDiH~ې3҉YÀSɭTU-}e8/<] Mx zFs]AbD $NhcP)~8aC)UK&cJԎ񣛱k-M-'Rߣ$dNCfE[P&X@f_Ȗ-ZL X@F*ԯxZ A{l Z10  *؁ &L"`f,K 8QNp2`/MWa1t:|~S* O4ƾ Ȧ0$ <6S [btcc_,<&)boeL,f+EVZ2etf[GEQƣç4V00fr@%'wAm䑪AaNl8&,8י_?9d4FHd`5d\kYrwwҊKƮޙϫU[w]qړ+i8F`?!h8h,L 2(/vdè?a j,R^5(45Vm %A'{$ǚ*fF#[7NxDc?7A=oYM`u'qpP]#p8 IS-d*;"#<[ܭЋ& kMI"ȷJv-[ |yy0Dn V2޾X̀ hQvk4$YpHGC7ympq=O=Qߔ7 LE\ι* aCeo.H$JԘ͵?^;С;o2 f%.P{O'\{X0v`NEV9!"_/95ځHB 7t??zz;We/QxRx o_YOO{NYTо:{qU?omvOɏ^L^N-sOߺ3 Qֈ^Ku &6 JѺ!_އoә1OOU8&^rwD/@jxto|ӛ3$Y"D+UHz?D{?Ԇ#M~绩"E:_յnH~~a|Kt9o5Zdžd;Rv=Յ WF Kt|*\qW5X74 Ss tێC/8GjӤ,`M~6n<'"M7rU2D[[?+K /㤛Ff1jnΡK@fI8_\E$?S "a ~LxNo.o@QI>a2y(ӑ,/kG D| EY/y 왰^Yŝ251rC=xGEmZnэYf`&,CTB I-!3ϣLLyP|I3aB dצn$T,"EXxwr(H,'CxsUz7|ha$nt $5uo~;}X8C"fTlXokۃxֹւ*\$LJ;Y҇ nxMeIt9TKLUݡ$Xy\.L`h&Arw!`M*tinhp^Ԓ'WѶSYuԇ^ÿ>1cp(y@IXbZׅV6MLaPH/ n0Z4:dc&4p2% ÆB@Nl `p9\~_+NJý}wc$ٓXC h)z֎[CА=ǻּ]I]6Ӟt>99^o&R$& q#Ou/ECœh3 >aQ]8v?+jDB#04;wtJzPǶ,vQsp8D}2!BI@t F~g,~#4!ѧSklm>VhH2ZpZ离Ⱥ/'\ۭh\M۲Twu{5q7Bŋ%C`qٹΚ!PfDϲ  aƆ>>ڡğ6cc"F2A$_ITZFXjs,a'6TR୒ ھL Po p7ئ޻ȵ j1k藣3(bml4|;4N<bɖ*cqGEl,p'F9OsK"& ~F"Î(o_ejk -v -Uﴸy&# g+n/n֓#1>^^,̌ڷ2xyD.?o4ndD"0Q_QcKhE}+K)._Įs I,3p-8J܄f<.F7#'I @q*k|l}x_q\pFww,0jVEc#^Lb#BGӪv]jvj+QQ8tzhTAK@IXU}H#RX i2O:fjzij?!?&{j :@YrH/DYwYJ|=hmߴW"`j0ꌲ+DHF,H`?֨L;a'jB|I `M1IeDN XMĝ>9Cg?/ 2rR0I~}iP:97Jͦ/eL+*+h_u>[ՆgOy{'>Kʓg_UhT;ӫ>~58nEdYl*#1ɚ^¨gA B|Z3t4R~ o} fBte"g˄h%+qJ0.8c !1 wL2tfdPV@ӊ6 Q@`;I<\]Hucqe/Y;aг-E7DÀ?qC z=hX-ڏDDS`D2DwfrfyDg1, X+f|t-`4Ê m \^A-w$]r!֤Qވwbd2E^x^(B"Z7hD^]&ݗo@dD6-zq{С*ǘ5mNtA1V7/KBPԋt'd {7O%`=s8_;?t ۔L IYe2W/'"~oNt%L SCsbWkN<2YppX4d3}4KK#iovRC˭iY@w[^\T;66ĽmZ ,4< CeI2ii% @Jqn!3`s" ܙ)&l"Nfg $!u\}׎9:tCt`A?  o~XWT?DJhh+ADZw_ѣPʝ2WH$BQk[<.Dxqh }{[޽3O[%iЁt(ŲvN>  7u+b Gqigf;v=V] cڛpQ97ǘ-'ȧ4q>4-F29гyeg 41{=݇iZ A)b0h¨$mϷEphQ uZhAZư`E'^ b+o 2@64LL $ZefILw(7=jj7tXĂ@$gFPek{෪c'-HXCv1`sd6xYt4]I@ jv%^;+BЄrD"+O Ɛ3bT$3BJw|&Ib?c_ct\9&/=5]uPώ.#ttc`}Ws:- u*2-vZh&X.qjR &QC[` ٖ\ߦ,#`>`!9!sd s۵gk,1 Q]^1nd6'nh!C/ž?1t/7Qu r}A Q{Q@K#6G'B7&%wfSEfʕl޵zs!敵#-#<1 X_ ؎q f/Aܪ.P.ďE;QZ]]èh`.˰jz}a݌cEىAW)SK)S"$~ڈ'kڬs"kAdU!0mtf l~Am+EgB>Gr` }O``N$?%ĢS=(JB(+($m7Aߜ92\Mqt [r'ꐎPCi+ڣX^D'J /qZ|*ourk^,6 `,B#w/x,<;H (l>u\)CTVt0N;>S40ߺRHl;5sS;W%E[ubUNB@MFPE!18>ondãC! :>́JObCtIU@LjSgГSҹwe l~Osi*>ƒߟ؋6L;6[o.W ZpZd%ON`ijSj.*jJ^K[]A@%{mk_pe^Ϸ%ڒS4/"DK,g}C>$)v!b!Lo>ad D R@!isC̲Cͥj`$fIc\iK%j@8*^4N=B;v@LaB1~1[*G | mCbCPy, U4꩎Gˬ:Z_,^QJCUsE>-:|2랫>K\:$% F` .-m:>¯5ENkNOlך)'gk=/W InL¢+R֨.feGOU~X}y&_tffr^nxK/V

ʮf̀7!4 l'mkaqll))B<.jcY ¯1=% E'u)EƱ{m_y(afL~%@\.H/?c,7WE U6../;|F-dc+\KYrՈYUdWAe'nPEDjPW2GdYWgUOw ZCQD!FSgQ(iPkx㝵kMC{4 4SV^1vy/ '2iٵp0 :XsBϙt=3n/ 46 mp; ~3 /uCuUUxiΦ>>РofAԟ:j97\0 %DsXok5YkdLRdT@cL!vz vvhrůTWo1WN _ƿNk;=Ը$71%==tE4 Xlt0K6їQnvڋo6-7~oB^GKZ6[;Up$g9@4NXCD૭8b{Ȼc+lz3ȡV݋E(.>FX7+Z~T*a{+KTZ||=,fy_/ٺvUoQn7!ɏAjys,ݬ+W?C춘5ߎ]|<_~ 'Q ~mː+Lz:=>A=~b`7)K"0%/戤` pm&j )U:d߲0rD ne0@gGpf]b6?[҆4oSDCai?;e5 dVI+z:ٺ18(@Dovy;osnyZǯwR {v XuIjz;PW3i@P ˡ@G6Ehȁ<|PHgE:)lz=hLC001v[:Ԓ榶QgSCZBkI=@()J8Fck|7sxs0R﹮leuípzj!xVY}utsHohw i TUsg֥vH5b`H`d מ:hv>F{tȭ( Z564C `ڨwd==5hQ֪9D@\a P \j,U64 -O@C-ꢤ}z0 1Owmt`Ƴ6ͷww:ؒ=(%^niMZ"=B֎+'wxE'[Z$d}v!b`HI:meoO=8C=z ciL9/OtzSs2(()հt > ݃D4h{pCWw6;YӺ@46UhA!E/AµuIz :+@ eSEBRq)ʾEM>o};\˩>%FI+ۻlE>@.g8޸۱J+lniT٤ /l51V-"m4W^O[9n4m.Umwl8({cKL,fUv;׮v[nM1xmR;uvՖڱzkK(YV[Cc[ mRZB Gk*R*ūflOR6yr4kl)a{^ uƔ t^( PֶT.JIn/i݁rA@<|eFն"GT5h@ٍ˾f1( @>m3/cPi*5Y`Ȣzcyr*RV2 ֥ck Ve[}Ml}9A{ԍ`$ظ#UBwkxǻ.c}go/\# w@Ck*n"wvlـ @!@& 0d0 i4 @ @#@&`LLLž@M4h j 4&4`M$="oQ<&M=CSGzm&mcT`2j7qYᒎ^g[ >q{:=5xESQJK(@@Asx>"Mb."SGLT3|S38u2Gy*O6KkM,2[*Yߕ1` ΞZ 4-ƞ .٩oˬyL WS6f!YCµRBٰZ8id,3&o=6̵jq ObHvIKϱU>Q& P!YUr`;VГb5/ )c%+}{lbqpY(@H H2xK9%%0_=1w0{̳ӽط(Xn<cAlXm@A D_jK(aN[=sy`Vn C@M1}N d}&k>t87:x{( 'FPDYjA> DTp!}GOs?=ϸ z2"Tvhhnz `VHlzR՛0.̮/[X~yqU.=t.3|ԭw~QDE<˅DIpA,(~:IE+di UBdacLU:& %3ŦwY}Q[/v Sz mr> zp=cA]yPҗQ`3UN\lP~s_;[֋yM"-B@Soُ3O#hsTZy.yW4bWۑ62nL̜D;kO[Ifeƿ?^EC:Z+ӑ`]Ihг=͹A䲸R}ysbcf<55=fXTR #aTfxj7Zt> :$mi +y|<ݙ]c]Kը}o {1Hx|~p#ߗ6W޿MBs=׮b k$h/LسHJǸ.6AW%uU˼wgaXmXm}´]G﬑"Fq˥q~ȂZ薙^׏mv]~Fߟ*6*H5uy/x.w+.BkWSoXXS4B«UI?8>+yNf[RnSyX@{-\] _2+s<@Tci 6=L423)g9-'wՅh"j"I Tx0e x ?{wn@uvC߁J Za=9ʹTnmo1x纔mpf?ܠqte =q=3 csjյtot+coX AyAѫźg~'tl>g "k'"`*b08o5X؈m d"ȠAU@|ңغu+L9 -7ʱԗY/-;[Vg,nZZ+yMug\䬿%~%G8  DG\չˆ7VWq^>KYWc=ayzt{Z8ؗ>r滹c#Wof/g} 5x0|Ib_ybpѱ"VT= >T)Ld4' *:+~*ōR#9O\;dY#v]|'_t%C_[ø`ʚVxsr'-q6`žNt&,t}n33קc:=>M;?хYj{l>.;sPoR9+,zRej6Oja;_ͲIsu8. `~z\Nѐز;/'Muxg+PVNj}@.#5Ϫlz<{M.'#x׻dK;vW目ExAyqV U=Sqy,>髱A;[7|ݛq|-ظzw#k2-rF/~U͡:~;- ޏJYkxoGQ\^eo3V{ ƽi)sq{cؙSﵠ]e#, jf~\Ⱦ>C8I3lq:RcwI]gVn\~݄f3L3T 'b,m#ɮԼ.aS~錟40Wgg|ڪx'fC7~W4) bzwĊ,|,-S](]Yj]~_UӿJ;WکcW3Zm.9Ykӝ3<~CӔ鳏ܷυwss뎚 C|Վjz1-0&IY{m0=ؗwU )3}cou+9?^"MΕY,mVY8yێ9h2MFН Ƈc_j_c4stU^&Az"P;,R%V}QzCe;2gۻ{w\Fn?Tو~6 q=WFӳ~tuz6j%^3v15N6|Npsӷ20U>^-tZmOЇA/h!}׹r,6kV)<.~'UmSҝL&ͼGyrCɼԅž'z^W:ףv.v6?Jc(`T`uctk,*18Մ ;_;la;ls35z^zYz~Lw5 )dۄi4>򾣹G˟~&-0w^+{w݁mS֪Zanͣ9}^ bJAohyY8VtE$mf)QUvbao/e3fߓg$̍9v*?;h0W5H;qlLχ&ҭfo것 m 2viϿ]{GChMս >>qZu{52ƎV+nLWj7In9v=|+b}I+ wtA%V?wq#5iN$ciO\~X&+]pcYTլ%SZE >ף͏H]_ҫC/ 5Cٚ>jNٞ%鏟Sik\tQ+jtK |uGͦ:jֆ8=f qe6ڝQK$4߫_p"H܁Y̾aޓIu>7{*2nOI[UsGwjtb̶E85d:jm<jsg"n\:ce}GIocWcLĢ6͓.(tvƛXgQ1Rx7dTFldڈB5'z4ݸ*Z~ܷvJvk+і}gfh1K+]MׄCt{ioz{e WHMƉb=E.H%0 &Ph\uJy&$}᪣#),^Tfp\a`eA;  !@gfƄRIj1$m@3EM#bƞK\>_~r-yWiuvK-fe*ŬTj?co" ,4GnXC7S30ޭ{-@ZXimRaa35?wOˑ|0 pr Dzu&NS~օشbK/k`' $8XU6q oU qR3 T/g (G*`l"H.M+ROx<,s WqA^Y;kS4bF|iϊQ~\qV_XR{}u))HB՞d?>=xsΙd7z+^ 7 b6DJҌ >Q@ 3SXPVx [W[kt$N J FJH?c %1 OĜW%gg\QŸ,}$}L,oadѻkRA&g$wiQ30r %p`^6`Egm(5UHPm2':<mipze:,YBiI0Q֨.{ Ft5MOfJ*]}֎.aW^TfiXTFV Do:wz]"oOxd 171[Q0p>QӼ3Hj=U{؊* +9e[ÖUݽٲu(D$Hm mM6S׭z{sv]T{oⴺH\g1K7[=mviv 3f֫j==5[,'ƫ?TK9RruV,BWk]*v7nC0E:i-/(xԖ_ zɪ>K,dּ~q5]iv"纫 vd)1AmbǢ|ɡ]1bY y Z> ܲ]KDl<ͧ{ooP;޷%q);Џ)?pyo叁r?=qA9H{p<,W+Z >q>t aQ.ީí4і@w*\QVQ#;T3ڮ_tyac\dYA`PR㟎,d, ZeOnew5Ls񢡁5FKM/{ge>L,ezEtWmBFkXWimslc:S6iE|720>L9&=W':?TWè`l oʣTɸ<g;\?i>pQwN7r}3 9yCֈ^39i6x퉓x=h |r.6׵3=eFONmƌ‘cp|FMc}pw8YɷndE3n<,Rяa8cT@D覙N-H{~S>^Vw|a-izC a5OVSsOQhP[`$b CeЫ̓maRAIn_m9l^kiΪB̓J]~Og?Ui*Klf5вQQc9T9Eo]ƈehƻ`DK 5Ԍ{>|=:?Hk¼!RH?QΘ~-)_'Mtcw9s޷!+ByU< ҹIƊ9~ `t\IJWЂ 'ZGb` T@Aq;Kh<9n\m&7)'+q2nGu݊vmo :ҮNˣ11`%5]{ScMNYSdbs2^δ大׫ H&~Ph?:Zⱒ]n9-|< wN_dZ7nkkEtrcX?j)Ρ\)Awj ;{~wS 9%đ Qoµu#WOuw =5r5ߎ-o*ٴndטXVn}mZvhn[׶'ٳU~Fwڳ?9Q0b~?9t-Wv?@/wSX:eeM9uۈ~paKd h5&lN[zuKM՚ 7bdt69l|_nms%FNG<+j~{}Ay8`Xe~/6nQ,9dwplpr] 6"xh7B$RqyJܮٗv9fZi4}sy;/UAߴۘH1L/cWv_&ķo39 x,nLCGYg]= B6VLoc-TY7M{KHJ V.sM274nz9T78?xɍBͤm<;+-MUн%m1\uVaoٵѵzKY v+V>62!N1ְ9U!nwL*ix}SnЮ~^ښ5#{(TB͇ -؋"'vӼG7kB;-&ceF/K;0}l]harWs|#V+긞is^B[hx./w_?u- LoRuL(Z@FS%~tƊ;3| 9a2r VEPnY{Q(C-56z4.: ^$~2ی22$ZcK,[+4 BLE۶}`d 1iN{4iJaw@VQaZ-< 2L$Pt2\:(˅.t򬬮+]$ū[CEpەCS]w% :pb%yI r^2S8f慳*(T?// jVlvzA Sm`p^b7:K!f۷l^Dn @FѷF~QHC&q 8)U A(YM58y5d‘\>*e+~Ok|?@nd7{7?Oɟ եxmot[8'{7f+_ )`]Te0+ȦQȪ\otkC963i"A6Jyf!B.&_7Q@tɴ7%!@:)~y )]od$y70Hy=R{gb|~Y̎ON}WgS(x$gG=̓'hTɃ%ޤӄsy>"ʌGVT@gdL26reD8{F{W;M֖`ɣUCrJis/*N'+!4o,.!@MZd%% pnXf,Y|T,sHrU俠hR)#s 8~#_MNS9҂W?%k;ʳM/X?8X3Kt@'ȼgqQ8[u,_-O *ڱG.{ v ܝ7ul_c?("ɑ~ux1;='hJQ{\n DZ|u1"X숐[e?ЗEBAHH$"AJڶ]^+ uagL·lOvt1#HB6濇֧r!^a'i SSPR`™jpfaCG'] A&( :׎tm9ڟԘXs*tHG~p>URs_!VGaOG f|)? 40+foysC -efEI附QQi#K1[c+)jl>Fŵ pNTv2hoj~akظք؃Ls|/woT=΋f&pʟءgFгT(]3A/{oIGm~ix Bv;-ƝίvǮ͇&v[gy+&g,|[\q-v_>2`:V+}quF\#K#k!6ԜVȟ=Ǜc`8(n1yA5_osQk1l>>;#3?Ol9W]O*Jʞ W\ͧSc\>I"غ^Nͥ{6GSɗi*,W]~7'$ىʰ:l^|^QtwqY㪹u *{Mylco'*U^ZW1?ٞdmNc{Rt9Dxٍol4Nai3і1vV0'ow v+)QE={+U_eVboZ=Tͧc[+W-`=Fڽ{JIV-m "F;"I@ 1?l& 2@$R(beCrUB":W8 Z~K2+,KT[[ ׶,P4H0H @AѡV!ƭ iF'mw*.ږ zͨU2vd1& $J1e$osjʩQ ̀,}/7R?Mj1⸱/5ImU|w_#oew٫v+} *_t;/`LZMdm rwNŝvM% u"PP7ĊݙhS,pfnBNBlz YP!{sM4_;+K)ri,E\" D#8\~-&&$pLizi UΪ)Fq; _U jU @[6wx!(ԗ*U VʯFR)jKbnGl[xxsQfF0p)˜@֡@HtaI 5 oɽ{my(RwW1\ =*@JjuM\1~ËVX!(E 0S'9{G:?/*Rk]6z3~r2Uz[{d/h!D@M]g &K3U}'N=/{6g])Hأ}iN@h8t&6b`h>4@|TyjiI wS[~  Z~(ѽ[g} f}_FWF;N9シ7 H">HB~@S}p++ ah1܀<A J+mou弸inWRz!Ϣ~| jb36_Qgz5{;%BvlX>o}m]bWZHP]ŭkM-CC W̓(^Fے<@/B5dYILB9cQY#m?RKp+[nt^IO _l;*LH`U"Jk&DѰcwtγ ÐDB?s;S9fB3 q_-ws)x%4?bpi[kpfrܳŴ6|nl@ƙJADh1ᰤ6ana)vFpnzq] yXIHȰw-zy:,2MbXM+ p ;.iXҮ k/>KE#<.z%"Fͩ#aI8 92lwTXO7* pK5xQtT0(Œ4k*D!.b ްl PvQ]C3cءV41FG7' }^0:  G$\pb͢B,@,XK&n8 1,-i֊CQ"-4@HST- 3[`̑5 bm\!+G KZdcKr28BYʶ;l Y<(DA ox#9 |(Ċ-[Nȵ5OjOZ(uZ(Ue2 <đRѩ MQJۡCo7@țxn]B^h3MeZNaKbک׏Ǒ8@7@T3A%~nهvm*.^ (%T-DɓRjAxW@ցrl,A( pE\tWWQY)|ysR1ݰXK*3 16,s/(PڠMz~Cwzyz"R"%)9 gG蛒7VA=)y7-v'vkZeFSuQ ꥽_#[zOv*%@`AD$I Ák"U"\ۦ )qD%ťմIv}"0K¥k4 !BS  ghJCMHֶD+R.@L4Kx ÕQsۜ>v85Pj:6mꂢc*Y'f kEPo(@gyyl Jd[473Z{"p ;ϧ@ PS j#CA G ̣ 1K  />P;τ>ʝg#A"0-O,_z[Z"/pd2R(tm&e?y:6y^_,_>/="TW>ԟkXzK ꂥowv|֩$c1"I"g~DGFpA >.҂Q }fd!}0v,ХMCs{;^ê`0FGN>>li8@:} NξF%" c2BW^co^ z7zm4#?j.[7fTҹ U:*5 m{_%B~m8$A"u|udM08USM7!>鏶,)4GaճI3{oB0CSf S͑A辏> @3EAy|ޙ!fC kS'2 q嬯%77O12т,€$ҕ UDQ o؀?XC">nQH9jj)Y_-nw时)eWJO{'7Im9zsXי›2ݑM~u Έ;"XW}+t<G6By'@! WFZ+au?R;@&l<ʖǬ(mX`Z Z]߾fA5a;?g]+b$εYd{ab idę'Zoe߻_ :+&GTsjG ɀ |H83Kfg5/T{Gוfs@` H2}<&an!IՂ>?ѕNUR-ezҀi:xh/s1^b?sy ?S:FArfuokHv{4jʑI2 (S|/S0̉6d|D`?/uzȹ7kr̥=TS_-B7I,P \K3Y*8PhE+kK=3Ή|j0k)9tbJ\dusO0gfr r7y)Ԝز'@Z ĈR0(lAyJ)Q5P\͚jYxak'Z6=j~ݓL\Ju-͑V~p]︽fwl +\;AlDCޒz]9ړ4I hֲ%Ϲ?~*t-Pcd?9n%JнPJ쮦ڷ: mkzɮr!^h/Ƨp|mWUgc}2qVy;J}ym0Khs6Û_,ymz j^v4:M#-q9:&hXlj2~)C:A2-arDCszՇt %'#r V0CљA|A0DB%;S)V: )lCmכYA,CRK(fsb0QehOHU|)# `.01vLC1 L$f8 I2HT %%T%`VHQ  |D "5B d9hu*-I -h L-!_u!`rI;]|uWj&hȳE5Ũtv[xf>5h3B+ 2;knneum _Ih$TM K͌qLppCXyJH_+0XɹGZ %z&HAT.Tr5EqGPK/6ُ)XQmn`f}۳R.] A¢8eD J@k ^s(h<Lp?4ddZH,`G5<@/-F CԱRwZvlueUabӕW%6Sjt̏pX~?e8( %vʬr\&+gyQjy CŠLH-%K7 ^M 5zЭ8k K"k)4.m(QjԩdR D5f}&iQmECm^|5 rҫ{^.`uqJQxRX HUQYIX__Gn38 d6XmB 0@$ <UfQWlRlTH9 17PiE+},q{.RLPOȃ>VįDZg_4aUyv-XӞ/G[2J2Z^A(<%){TVTcWagj! ή@ dqDMJ,BVP@4 H9ѹ}Q3}nXTDQwAaW:e: "حpݦ.4U@UTQuRZ-Xu,CCjMTq[G_զNd&e &$ 3MZۋ7Z%950}},XF2Ǐ-8XJJQf@,ɅB']A(vv(,@026r Bi)JY 3OSiΣĄ dw`TZA aZ3%e8,yKa'2 #`5=Oɭt1~ no!GM PF5}((z1T^C(e-[&f 0\z9n>aћE;[Hg$1cp JāxRR N%bcMI&9NVVvK S% Scc}:΅ Ni/B݀LQ1\AMB(xJ ARCmp*Jp"srnH >AB .PgT`|BlDm"KJMAr`PM #,.4Klm:Z+Le@Kg}0IŘzWBK՚]q˫V-6WuV¾ 9 y^xi^(i~&N.cV1g b(GJ4Ef4< (hVl҈i:2yXpI( 4nX;uHDdyUJd1+ll@H}! nb",,C @#` *8 ( 57tو E%R#+A!N Y Z9+b*e 3yXv,SF)!\C#ûzl!PמDa`ĵ@0LQȢMׁߧ8ƽ,Z4Y\,Z qK[y57hH%\S,)#MD#0,FSSPTҕ@+dv = IU)*s>;*z  pS/fIUP*!J'*C"U&H$C4-iĹВ8E# W`L",, HoE pT oP{zY*HmQ*HSVJ12ɰ.E1gd҈-zv|4Ak\1)k RbwՂ]yަtq40Xcdf4pqD PA8 ]OձZ"IJe"I4flc7]6yNg!ϐHI?_G)?蟎hs(_QH*pT1>mBLx׃q2R{1'e" 1@ 0$ `!W٦ob+ȿsjkS+ue:B>mB}qhlQgѸ(k=7t~~ +a)~ZB|@=k:4rwq7Wihm)릻uZ}^"05D=axk$>;vUtvyV>a= FV6;|5$N 47q6b >Q M|,&0$G)<߯sp\o~9d]w1n+:K:q 5S&|ߘ+*l޺σ6>'{?[On [WUoc>8{}F - -BG9v~_ң>wۓ2ɝÅnj.3j7c4Eft\1N7 =?ъ_rQaheXL-frS\[4d(_xf^^ ."] @}Aefw~+&{;˨Ӳ1|'Y'lZTyopuq0 M.>1 T?Agݜlkt[ FӞPs7c;7 s-V+OauskԀ@D'%bNP_U9dl'<C4.a1|S\BqY*m7"dnqmXocLNkdi}w\ޠ6C׀O3zWN:EBX(Ժ|wW+@Mj򝭕GBq+] {Vհ3W{1*rϟ]BSc""^H*$y?å1r~bת* (#H %mOBr /['Qut?ִ fӲGݚPO5!d}<u\޺6ELjϒ{b™yt JEvYsr>*c-f=GR`}m A2=n%E?6`f DA~2H,X8Yb% @faL!1zRn{5XEEP͒h =Xfv*g+7\$gLTDǏRcxG/~m!~%[EvGCx{Tw yC5oEU,$Ŀ@楒:[C3ɟeb|7sdWJu"oe-3J~]$+{KBo[sM2L-ҋ:>Yh5‹WȤ؞N窫;OV@B]̺(b9PM7)nnpT56t ua{袴m ~Ndž7:FݯzT(\:E6}VIPLg]IejW߷~X}*G* _撗ҟ.{uxoBRBS]y?^yۥ┺Y?kt ,SOc㨕Jle;8x{n:O7k1C\<`☇VZ]Mƺ/, Tn^sWY" ,KQ7u^qǟsyQ5[?kP|i"Cȿ0>+ir WBNeKJح4ңTQ߳bRߧ&%Vaq7'ZGǙQOgma @e ս͗OgU'iRS^=i46}U;z؅<ōB|rf\h:PrNk!@Ym:\jVn030zMw}F/`0L," 2bk-}$tc)3Eb/-.YVC#-Bѵ + "wy^|u:c-?NVc"v%3V6jAܧun75m3Դ=<鿪xvc{q2zb&~S}wcoM2쾜,/®O`TwxEƌַx]-Eӫ<[﷛ݰasP/myvfοg͇FG:q~dS~!nk`*!~1eވ'uoC`qY^Cm]>⹮wP5-{h)V n>Yg'LGWe!爊tu~ٝD<9¡kхZܭ6wGouKN7W*/bFK_uVwRptq7V'Ԃw'Mox*s9j}So>w;u5.3yMwCwTbxf?x/ݿcgLiFp:{FmȧOr}v#{DNu.qqu(RmSux;.2;+m"p#?3Q3J>*ztKK%@m/Xv?(]Qx"|be'8I2w/ƣGEznd5xݠڴ#dtR9ZH>u?_uzlfc[,Ŝ+Y͟nvLQ0y .5b A*./ضurz_{f\s>щd;|Gcyy6\p3˞L (6JuA)mg9U3>\V+uͱt$ ː[c켚g2 ؇ [.ftunYki~tJ2 ol;MTOj>CDp-fXCqMGl2o˟Wbqi*Jt^ݲ73+Yfq\~{᭑,C*kz"8nGUNγ\ORx]렲a'6-.}cUa/Z;x;ۃجoZfF$̘ۋ%>z~ҎdZaOn~ !l4iUUm\ ?bJwMlGz%gT^.{=Ff{kye8{ JLdMy6 U'H[s rk^ |8oB1E>AKHƿtnu_tS-laPJ{¤ZT[O1Vx݅vl:O2~1}`uzt :*~螙~&]=^`)oFf-ԆUݕ9rc厱vl7xv[[O?xy('j2ޣV;4sLĶ3smY?'dt_uC6g~u.9)t{4}w*xx]g :F;$vCCD7]*q\ݿاq-,TGKߢK|gwWS#m'ioTspJsr<+꛽| ww=w- nY^R?M4k}OpTQ{g"56+]^H|1l_֯R{ڦǠ"Y&[mӇw_Dž9@XCm?r\%.{bJ6}c=p'+\iq^m-aYl?bPMeujx:o-Q\m`ɽK7ٗ+y'K>]|{qL˝ऱ l:)%<~}"Lz?߿|l4^SMu.'xz1ޕl&!xD6"yE)7[epn2P@z0;wfJpvj}Wߨm}6TͲSLPWV9,2 OyfJxLzȝ.zSn}/TYbgϻQ^k:i+ޔWnGiM}lZ,kt:߿R8*O!x =*EvkHɦα׿|l7V"XWH(鬿qUW!.1ӟ?/MsLJ#:MW$^{=q?IFoӶ?eRtn|97䐛?W<FWS\x=M׿{ykusDYg`v+APFV7)o~ٟ)]n_"3瘍rKa\Gb5dK9Baf3vp)G O}12Hf*OC\w625%|ڹLb˃®[< 9=O}Qa6Ã0Ԕm bU:gzԫ&l\@_.'V+!3{yX.w]mCb(9LckYbyobZ5Qz$Y)sN#uR8ʘ/o mn6<1tί Cc6!WnuKX+׾kNw~;έok{MZ~ 4Ɍe0ZnX]7NTsy6gӵ+gO%zo*qGWtU2yPN<WG~JE:AsGKǠ{#j~2D];|d)O+.rWW^fV/ؿfqo9 qlT01`pHuɘ_cDŽIr5c[}W(vIogNw RY lrHaS+[8Ȉbk R.7(|/>&Ze?+fXT$T)$i`um7e\s[ 9 Mj`DUulޥmdۗo8-kgXгfĚxܩEAKM2ԡ&^&hGe/aCce 8t26n^Cbu6ݷ%G]WAe2`"!@i{A޴ֵ}6ֺ`>N陑ڼ{6}q_t< dv&F[8U?$I(BKl5M5;^< _јKI 9kb&pZ#_Q/4ƒ#h Qz}X cXgP*M>#V;_u(qǸayH}?'h ` %Z?02 \D{zhR"s/x;DFI/]p|Q+udĚ8HxxcPOc[HЗd -%Gmd.񛦑}~d@@ZS$xGKXI ZWF+~蜞#VM %Yl'_=UԻF~/s-9iUZ[&5qGҕD7|(bL- jYIh<֛HmOCM/!Ӧssp8#-W]A<f4MSxP&m·]sXIt Gi !Wrj򾪻vpJ1KZ,P5AرF,8) [-+0uɭs-.nسCZy+[^~awHtEcI6`k;{ȫ1؁b a@;hHuF?z('#lu0wݧ>sW)&Q=7< 3}c;xi骅_V50$ $DY`PF Qelֳﻀe_ A1<}BNsW1 zvxLCpCA1)x.B/Ϫ~[ ,pvu/`##%Nǵm~F$ED(PHE\N$-J?8;{֚siiB@KH~?<")Fİ-Yp/탏,:ncer}]zy} #p[Nr_~s?=ogLBã<9'N`/jsmPz|;N@$dF 7$ I$b%Zf ӦkDo13|8Swx*a`UR߇{e\cy*ƌ|곌hq{Hkiz Ƹ T@,q 8ϙmb]FZL#HT}j;>sd[O >}pz%GV |E*0 eh\f+MT":qm? Ms=!w~N_]>%佽z`v$أԔrxcАd Vf(T֦fTJMY3tU:P#e. rE#4F:UteXaUF CebR1$bAmt luBWү1y8$Q܎{483'=TR U t8 I8IbX V4U4S T-LCvzbƙ$0D(P0Q%iyd!D\AiQ $@X" $ePmjtj*!]M܉0Uy7@;*E&s e٢byds|բ8c[i*hy_~j}Ki|+{x<ɱGFiҽ)5уoN<#G?Qe+I޶LVh rE u1p~~G>kmxnR% m6.ރo;(#hx|N"g8S5БI sc_=Gla_W||PJ$쪤"(`vJRaxX8!DZ~BH^IB\T;qwNn;`hœ+w{)B^n=؀($B|'L <ºK9H b T@e5{Gކ9G  Di*V".cq 9p FF$6!"Klq^j.ϧaZ4/B>oI:l:[]fO@M*xh[oi|kDK, f BMEZqbv`ޗ H,߼,1P@89 `,O8jT~tȱ)켉Cp:#ֆP9G|79abV|'{&wkZ!vի۶'T-roL1ޒY[ yz#c^=^]O@}spӘS^yO9lm/U{ܡO-+d SYE$Bˈ)K@#8IDK۠UpↃ6^Fڮp)@ozonՅdLĚgmUL=! [{6}{i\hfqǏe}gN\ڗV*F]1ϴ߀3I]QP0g&Wx!qø.|E`>O>a4 / m AH fLh@%W$'/k;%\" UqCI! uWF 0q/z"HD:֚P XL0$dB $"edH@3Q!%RFb۪b í,Yb$U1:G)W C0D:@P,Tm3 ȴ{8L\ցP,$ y i$JS) HP+aJ1F n6A m؆bP!A#_4  IBI N!BԉS ! zΐuѫf+aFA-juM$ ( %LEH̒!iY,,!A/ȱ)ݶaη!e2HyzP̋ưiW$, *+ʂT RȮSvVxW$= X$KsQtc@T{293qyº@asj@"Eʻ0+&7@!YD<@H/ "S Qr @VX239 n,@0@y8K-oS[.  ^d.^Ck;- " 03p1EJa RƂtS;SӷW=^Ko9 7a .× d)paDj0d hXl,wBƨ7BL%âƗb+NC*imk`Ɛjh3 T/Bk^Y|`XELZû P͞ب\";ue=^ f 3fRŰ, P@IA0ŋ5+qD6#Gp9iJ"ZV8w0]1 ĀYns,Cë bW?@@<0B2N ѤZVq<3Oc? EndiYX: ? \7hKsN=\HV+sxwe_-- ms0 i3-Ee1rJ:Ni[6OH[(S''zp$Ὥt"bSЭO~dʁؑ!7vGz!XaNPF]TZGeWĴ C2DKV0;ޘ%rKeUwBuټ޿oV$64"=81~+wQw^ Fo{+|n+͢Z]rSIs) Ƅ+W H `P1r b$Tܯ"1A"p;"0m2 M2fF^N^ VRi cBE45RHTE3tk4-fM˥"$0F\R›FG|.$3oDq9-YKYRũpҀɈ@& P jt!m- Xө m8Oa^Vc#@,-^cC%KdTłY HAXHssKBe F&^_I]H;p0V:C>5Wa_}χ04 F@-~~#߲"S=恸 Q9J1 f{*o?Nv݊^WG|{B *@-{85NUrIyFVJB"!Y kj7Wn]FM×ʤUJb$N!Ŷ8S_?le,#c hq6D`%AIb1t&DT7{?5\y^((L]][Zk0=Z=>PZBޕT (Ȇ^H!D5FB( 9#nRbΤ@ 5`bA P0y6\ͨuCFehBITzm eeDzK}ʄNhFP+3O wHk*gfs%2~{^12/$ϲRԤuH+-?prc~6pn0rD>P0!T>CH*H8Y\*b< Ang08" ׀6u}{PA$!xƳf# JJq(aŀFB8wЀC]4G6tqgܕGkZDDb+4dIElb1JTk(`I ,IP%0!(D4J/ j! upSe5E47k"piPH)w9;<Є bv$ XpPʭkF0Axk C89d2%(̴tP3 k%"::3۱_W2QՓ}9CFE77$yAQLY'$lfZ^F],bF@X`H'B@)! A$ň@b"VU7Hwxv5EAą/7W+љ~^wf4{&ನnKt Z7}唹()Ks @3/[s;fw jr$r?7u֭7 a^A2$D날yA2ekF1hQ_?CԸR94%/uQ)g WVT&Mfc1b[/ZJ t\|^0EY9]=UQh>6AZ>[!7| _6]L^.53! J? 8Ȧ#Vg#1: GW]LH{jm9X6F^ WaD0<.ğY~#Pc) 6/i6]SG2'6o fMqg}n}K%7Q6J䨼Bl+!1Z-JD`H/~G zN&$o(b*TNV1Tb [x&gchK(n+Xt\z[u7cTǃ,L@xS=gN`0y6*B<_qu 3뷖^ٵY+OQ_zV%QI5Hg,J +3s}?BmE QVXV0K6KV8K yYw.XD!+_!B|HAU~iW%dcv/Ze'd1p =< bE JA@o8]&tLCw <'P^0U@ !+G9uP)(2 `@DMb seU[ L*DII@7V4chn tH$E~5>?ΧԩdVuLwVR!2+ sUZ:\`޿Y&2=9G!L+ "- |[-'>r9 !9U0Ѫ!HDr.QJbJꑷ[U_TV07kگץkzyZs[j֬@a"1 D mtRBo9vkM*w(]∔ILFL*qt[BM""jj4ڱZ2k3pDK +VC fɖ='ů}SW n`Aø\.!g.ȌB*rܽwjwxKHV4 mz9ͭޞ] .W%u߽Z^8\W|Vi<hP؎WV$"dXH'ME@lyWG \{[uB% bZ_7oJz_"cwg1ZaqZjFjVkK<2&B\dEh7.z*Κ+s]LcG0$vLWqoWwG4 *-F\Z+&Y 3Eˑ5vڵh,šT >ƍKZr-!2 mVj'5y ʎDr*RìZ9æD`F Qydp2f9b(^kI$YH6R䊇E*hXGG2B1ALYJ.3S1( z+Wft^oy tqS&FZ4Ӿn߀/ ),@U ֹfx{p04JL+îfJ4pC^:"7QSa8i03eҠ M%8fD* &AYDr (B@gS*/*Aр Sh399kw?:Ǘ^I<8]ܕs#6?ig(2˜:Z @Q BCn]/?FdD*Gnm^ʽS[f4y`,X":s_wx3\#QpeΡF:¼8Wx n*"^z(Y}WAܧF )G?E R66UplO5*Ugvg~Oa3Є d0<,@fi8A\bQT)A!PbR8)h5D"5?7k٦1%E7UeF?KTxzWW찵* MuF)m6m <[2+P_M;x}t֣NѮ}0_7F%-v5}g,j?UK9]/c.&6저Q?_kHRԾ_j>gq:O'Z#k?7;o&s0TOg%>H3n'/'5g aO,j?g gX CA{̶ ~fpi0ݛG=o/1 Ɏ^L{(YJt"iS+LW>8@mJh{濖R 'UG L޽%h@\iRʬ}YŬ\H)$2';-aZ 1E`Rۮd&\MgUbBװ3NqSHDg'akʜ߱`ckjG %g,I\ W17n}5D ":-&a^<j!XQiz5!ePȌ€Fm364vBL(Rϫjo3|q5sly7\s] Ybӗ&I@$Ts,!y%"Ûń{)i&j_KS9pk6'PuB^-\D*>XޅF ZJ^(lP$h E-M "57K~<{o2ׇi wdT,CޭeF!Kb3yu9c4D|.^['bA 0em'c}#FU4ƇfՃsV=Ȯ"Y~x` )a9̒G9`+IW&|p/1֗JTM+\٠C'X\Dgen dj$IiE}H TЪlbPj! JJL S TǧOˍYy6a1`r Fezh DA@FJ J0ݚQYU K#LN[M5F fX4ԨPMB;1$  B * 3 tVUde/Aw#kB]5~Wm3ۃB${\u˚:onؘF h@fEF% Drd$6*U%<,5%_}_ 8(uZ-=KdzB)ik[/:/_Tm;(Rpvќ-X/vNōDHWz?XxLd- nK>KHgo敧N{gw˾޷G_T:mxzB $04)RْPbgj-Ψ7lueQrRY BLm]Eqˈqs+N2eZl1}9}d)-H켯l']-v~$+>:ԥ|a[qKڶϜ~l/h^ziE!_vo؎x2"/e5Ta./ŭvc-Z7*PAo'-Ň]W˶µe+W; M&FR-dq ,dQQ$ YТ-4x$ )# @[TMݾfZ5n.&V8@nZ!%+S!vTFUg%; =XIJ.('+hUu,>Ɣ BvDS9Q b/s@Q  @$J٥(QplV#'M0]A"1(,y-Wf"{U(AW tAZ7URt3َ¡BUZM<4XWK6n^W{˅z}p; E 9@ T6;u8̊ҲnX)UZB lp.5*PSW櫫X[r5P[u R4H޳,# b0K iU ݥD# pɻ:FHD%$T*Tb%UL(K 5 %*L*#+uz`sA$dڃ9vΪPV[PQ c] "6\!gYj܊p\AyhH t 5ZT"i H!!bPTH,`E(PDݒH$Kb$$ H #A+RQ;d m7^xF]%x(-LQ@cLɦOdcqZ%+X4򚶩2=Z/DS^:񞡖fuF"ao\NNh ],aCJneBr1J[q;Fj, qԺ2A!0fQP0q)4&Bkr-ceĆiFNo+JRNi{]"] RAòl^v&ǻZʨ,veLD nn`*8 2KPkja 5(&5Na}t T*i+ѐ(*3fiḃ@ PB?{kOnֹAo\5梽[=+˿ rȠRY<5+I ^:mSHfI5&T[Zm9I5I(X"p"m|/lٗA͍R|AuB=u$ eN>ۉ:L޷!Hj0r')|t4w37c>t@2m1f d!`T5vA ).K}#Yh %^ V1/quow}s)an}=R p@W0n[` 0EKK\ +iN),L2)B)mJ/A:;~Mf=Zy \(πjO^uXl+}V,'<Ύ0ޖjbkD{ 5F@"ei%qz/6K+Ê\S,]m0cܔdSďmK:nI8 Pr D1jY48;}*O\N@N+J"4$*d7%lgb+ewvnXQR4 IDHW[.s@u_3ߒm!syDӮ4.wͻc︶[Ok0{<&>bE*K!8~xPfAƕgJ(I&9A6ZV9ni#TiV2&Y)YREz il W#.uTGa@' ȉRk4k3g1,@H69D2  d-RHӞ{L2PDi;j#+ooFϫ]KiGHJ<&~'n"/K;,Hn.y>_No=`%?<ե $doXhjF_xGE\p d6Xɍ!0h MIVV /2ZoME1-$` UA 8G_촯>ylar߇ 4 7VaR$aO<?]Qeީ%&Å!=S&~G&JO?m*]39IA" 7h;ηI FZ(s@V,2illfOOkzYĀBȋd̰K_0B!n)1^0_]l- 3Y!D7$tAym"#Zn_eA+#.U䅊jS=r*_5 w VͭȻhљi.ƱRqeiZ]DmT6+FAr*I {VhscUYzlaR2)0X2#5wmжUɒjs>SA+$ 6PWe֎lG Z 5eaeRcNj\iBUNݿ~ 0{٨Qyz;]b?a2OKpV"œ g`Cpx˕v`'TTU / 46n옰b$xmoI1z,"0p7RʪAUQEϥFZ"x@dG(zQcKY,yM3V58c?U@ fғT)h:l-VzG3+PEv**R$ u9 Qzg#}/LE?@qEb䠦P\ojJKj CƳ.^_L֖Uto}/?nT+uPtWƒnRFK zܜ3kZH+X e*d:ur)K7X y'/7?[*Uhk3~ d (y4i{;&wdI UKCJK ¿wInzz8(&W}^WFN!Xf1|dP@j#pAbXXg `SMA rPx [f"@4FKb. e0ThiL<+jm/zרF,k*3V4UéXcؤ*!ͲJU%M u1,iX؎H)@ak PJW7ZD]5ebE 40gjk5fC(qQ$YdPPe#* ٮaa0:0nE@,@T l]CT޳}4wӔдp<ۚ-u||C:힟]7c [ D㳣0%+Hmw6 _1@I ,QRJ RۤJUe,QiT, aRײiQ&p}lWEji @Ѡ2\CHI5uQ tU ) !+)Bh.| V-sNWn9Qsi<~ 3oE;3 d`=b< /aUEƌgZ~N&[I%t宬(0'60440iW :HT`*Ҋё'6T{Czqze[KI$C,NfYz)@e2V%ݺUD?fmD, Y_X[Qlns5?i{@ަpSC9T S*Rq l : @cV̅ǯoҐ'RB(^37ƢRr@Y\ *.vyT#xQ%Mnm+7U4K٭I3CcBhдC G" ZUN$LJ bHwF x#BmceabIy^yH(9 !7h( $D3P]t!@ʩʄ@AZ2!쪬1(ֵ r",p5ٕccT@'rL-5X)Qis䨼6@:sb?ҵ٨\Uy^" SaH'.+EB@yE_橵L* ! ܬVE)=MEh(W5#%F:!Eho[gA6YLd3 /++E%( 6& l"A@uBʉ{CY4 r7wweOJr.'kC/]6.-&~){L )+JS"a!+ËnP,J\bȰa78;Ux#q"GI]I$2Cʹ)9Ɂ !J@}?c>5_%s+;5+XRk!J+CimZLbTTettOqpec^Q$A!$o* " ڬ%+;abD_JzM[@PM\IJ`Saj+$Vc?#'NFzhO*"Pu$DJ+>  2iHrYT$K؁Q Y@`|e mj2!1v\hE`5Gƍk4$`PHĚ4߄IUR*J#-K()R}JQl ń 9d %CҒK ԬEa͉V[xvXFdJTfp:)*yBs' zA'2\''tùJ QVI!$1z=`˩粰6 h&_s8f5 o_渷߿IWnoGFPC]ſAikUieu D(OO#IF(*eP2 CFQ5;ތv)9e0tcs2M)'\e3XD1~ĊQF^J4Yֻ+.1)Xk⺊ѵg[+YۍdEt`b.|f6̋XM@ˣe M쳒 ҂5A$mD轟c5Wyh[¢Т{x\5~N 2,<e‚@ݹOMv+l}pLa_BVTV<׻u¢s텳(݅[ T p$ Vyv=R5k^ykl7$uCџ}ӢUAeR^䁤^8@d@U j*Ӆ3CI2/Tm 5UL$qؖ4 BI Y.zt5%juO&Ly 3[AbaUd@|orFzmm/. +Q)Ng͘xq>kg#£qe5ԽiҠ"euqqJNp@==3bYӬrg2Ss/[njE ,$ g0E2mX-è68l:)Wԑb;|,q<ǻmY*WjbJN;ym&\Á0|l0O*2 e\qV9uIT^<_v7`48~\WX[TZ+lZ\3^PC FMصoӷF{Po"?[Cw!QbiSspXf1 ߁R" $JB ey#bOC%] @+kN2Z >#soi&~f}-,o6ZcE`UA7Rؼ8!Rlئh|e_#>˳lХ g'9tNA_9TWSL sPH fō<ω[Z 7+Y^+ ^̄А&.#|qM3Uq䋈gzBÆŒ#^.z':θ_nF֐T^,BaDٖT­fuh- Уk+jP1J3h9_ twq+Tq#P2Purj;zcL2!@1 D[ 3o`(og{pePۜmڮ]w[fG ±K-@6CU f43?J?xfr̤m5S\aAX<:;,@^W~wRW]}HB94 u%E%~XqDUK,S1ߚ'5:Kr#]fg‘imƃ}{dr7lLcTc4xPJ}Mas}w%DS14}P gSKƜVkO9P PcՓ#_#~k823 [KՙV tmSmy(q O@!M{:cCW`qZB&%)]T-kAI wp㸯+[T}ƨj|G3UF!~yEeGZ{ʛBKʂ+wĈ Sƅڷ(uUU Cf4A~9NKmTZըY&BV^-w"" IgL76P4@ yϢ oB[0ߕég;W^:IJfHe-I CTK0 ƵiB#J%!@R T@5A' {PFYu8sjQ 9,2+a9t[`a3 d7QtST.'嘁X"nz =Ցang@Xb0m Vf2V>VW'.#2p<ͯKD>gKQ;YtLsa'T A6@me(mtvzC4TU>#gNEU!N\) .K@(.@>Re1$ԔD5f>j7J %cP4{H*8:\W tH\S"eo1YOeLѻYnbW#"X.?(5@JJ8"Sܠ oǬ@yF)YQbBC;LVɤTm!*O UDjDW W6MYQu| 5?! jXS VBh܀lAmetRա,Tx% mcEu)$hf#2*ZPJ:n= )>яo}f℅-hDY Y0AcBB 4 -w褼'!ң['BhƤd#'=^7i B(v߲"t W-n4Z/ )j!~+X$i (yC  +* %!T{hJө7Ua[HhGЕ' , RB@+m6-\hTy`Zr& 4$o.+yUbJ S*T]i[hԮV3(Ћ"JAvlH%SR-Jj۾ #`X4ۛJabV%uuX%!} 6!LJCVYIRji$Db(&!(+AZډZ֢SJI`e4RPH㺷])Zm|uŮ̹t&3(RHVhPDIDdI ZiQפD rL2X#J0@;3JJuus'nVn\T8B H! ӊ F j%&rX8 C%*!fUJ eQHB^Ra1ʀeRT@{BLT"8[!ơ—, E[-KzMlk]6ρF@za m -uW( Y;%Qqڏ~ 5~K,`#L׮^dnΐ ADpříd n5>/nU7BL1@7 A G #z4#԰L_пVG/h031s,L,i昑aڸ_kɭ}k m1ؐsm FCd1D3H% _#ibh}|V$ey@X현KB:$CI*HWZBU0>;` 묁!c"1%m[bH4ABڴ Ka`-Hah`$zvj0G`#) Hd@gE6,JFɂ2+hm^}hM6?}If_%U[QWVjе2tU{ZmQĒ&$ L[n*~Zָ֪׺j6VU{W knfֶk mVj9$x!$Q~ @/f#AGbWXqK*,3QQd'%R$kA &4 >;Sm1AF}ecBQ뷞J;'y#8`%Gh_6zKzZ>N5uK#6E $1Vj5mVh{ښ/(]?2ύ 0|Exj2A$[Vy|ڸISM}ºЁ/L,͏y^c7ee`ÒI%ݰIU{jۍjTmVXֱjmU&Q[FűkXbZ5VŢhտlk+V6,[ZesѨ֪ՍVXlkUUUj6ѶZߨ[ZڬmFMВpB?[ۺN{ɝ!$4Ą&&FC$41 )`0?E-J6M d-$آF-Q-LM-m_پ}/mVޖ[Ui-Em2m~!͵)m&h6EV+ZW|_ijzŌFP mcmE`ĆM n,̜[%@(+F*J66Mh `J5؆MlK ̞vrk;7ZڍHM cƁ3Wur+3$+B;K}_)?~o35p8.OfUQs3-^tZ>Z2gQ?.ɽ򸼝L?frGo&<ԦG_&@{gfc^q=kR|gw|5;s~OeکH,'uT ~5}֛Q|*;쑇Ұ@Ar"#D$%Ա/HB4# LbCAa,5-5I^4BH.96 m-wLB{|ާI!.kT$J@$%B@S!!$.K@ɡ@ 4Eߨ~HG ܻۧ;D9lĥGCu)X઱ f_i[|O@@}AmA #h KB@:$Y-$G$%tI ?jRHҰ$S~2B-!g oA$~ВBBoWA uw&%4 m #0m4$$q !<A۰@ Ѐ_H?;B   HHG B xHHItZϻT*s! H%T >BB~$}\B@Ƒ%pB$.R^тI#]0=gIj@ BK`7">צ~KnZtAm xI_Ƒ BHkI/NВ^3"@#(H @V@{BH-k`HH#7k6,HB'$V! q@Za$*`?*$B%!.:a$@srahe 0qK$!c$S^ B,0!Hf?hJHI$@.Kb!L*hiBBҐ.!`3BHj똄S@xP5X 5X17$v!|$HZEY ` 7 _#6@i0I6DgBI@ B5M6۱f#a..JZ@+m  U 0݉+3$gP/D-fL$lغF-HÈK%K91B8@@Dj0?w~g~i.кKgB@q?ܠ1-Ir ]H"Zs\K_+>.K  hA`ř+Kf|@(a {@߅A$t_@@%zN36 S@AhIi,qt& qP" bd@LB)uhdbg݉H` Si4r̓s'+cM<>WYoz$|` | G[hdy(藱 SynU,Dj$T/Qr ӟbdT 3`A%aǕ'ųFzH X=mxr 9MG-]U|I6`HAc00Z$hKs\N%eWX71e5|m龯ن.zdjyY\7b;C :EVܩ8MWkѰ>0ͳk HO{%n=wvFv={lG7#G=\~ҼcYce,twv<~v͋ebf<]ocx1[Mտifm6S:XT?~ŸP9{whM|=zOY&uy+oq&Hibt)|tE/tH$1Ǯ=wԒ:z#B@W5ƫU%^MhUܶVߦW떤~烳Q Lc=5Y36!Zq $v_>%I\jI#,gg|g4$4.qX#.Xp7PainvtOnܿ|H@#֏ϿGon7A:U𲸼}[|?OoQm?k~\f.E?B]HBKx&\V$yf#4>II q KhBM&Ѐް @fY J^Ghc) B9Fb1!lM74m#1g0LKiGi[@&.Iqpk`>\ E6\BִeL-!2B`Vb^f4ƃ1,#!BZm-& M`K1h9&IMi3Y|fm~Ek-m65|d~h44 xѠ%Q[_DѬm}2F\@(`k ,H(H3؄p/"Ic1*1fZEvtEAG`dB@%b]ނAo#أ/I#}N5'9 4`pÍ Y&oF=w0JyˎhG #3BHH^IYBKIB*4"B9!!mHsBpְذ'_d.:X,a|;m<64|7A Wmֱ, 1v]{YbGLֽiRЗHOck%ooq]@-r8a#\NKӖL!^> h? Zk}:F7 !nZ?_4 k!0[vع6$h8p .Ѱݤr B7Zf_'a2_N+xcGnѲ~ 3v<*t0^N+BLIc:gLBGhZH?C@hVIvG.Ih[I} $,HqBKiVtLHhI HI}搗b}/5 >9.R@BD$4 c1 H4AvxƃB EhK䴐. pI!x7 HB t#i$4xĄo%bz&[0|F$yVhvi$A$-I! B4`BHHf `#XHK͉! hIZa  ,UK /Mٴ̴ @/; !r-  =hBi `!$4$шH$@%Gi !/й}֐$hBKbtiBX$δ@tL725<w}|!u,-BH`B H8P4ɰ=bBKi}.p;BBD"ZqX? b@rВǁ婷g`!$ ݴ@$r#U $ro ~;Ɓ$~Ĥ\˱ BI;$08lOsvFB/@g .VHH^Atf4 FقIs ! v^PF`juHH H0BbH@6K1@%α _O@ ^݉$g@$oG(Vjڷ[m jkV嘐ݴ@- lgBI4 =Bщ$B"X <+fq,I@ XBb<>%+<@hZu{?!%chBKZt $d3b}阳XI.łGe0 {< ggR؀7lIe3iM[v!;\Z1iyJ5m$n@b1.uy\R{>êGBB۴"u9V!c< /ٰB ^YHZ-.͡_`5Ѯ!$E}9(<~( Is ؃`bHX`m L@>"%Ӵ*08lb̴ X b:^^=9nA읦<;'Y 3@3@ybJjwٰ!B]kh-opxx9V %:v$5ߴZ36: `Kbذ@t'tkX6F%AhGf@]η B:zZoΰY#*$u,Ioyd:|펽m,C)-#ɺVCH^ݣb㬄Z A& :5iq4f4eX-+Yp:"Diw/IqlkظMq|^`l߳.bU:wK5i,|lYfPq 3!t@Fh@#Ɏ_qiK NìuonKvޚu^g{#0i0մx;F3H|Ay1t4^ .o}//)/TĻ,\)h2eZHЎCύ1Xk˱%qa yB= t#hF|mh^5@4o_C(rPfz/ 4 _W_n<ϧ G\-oXw+34rxz<>w)=Qf]շ9"tA(GD- ʊO?$a$|7ʼ%b^sqj7vӅoJw];@ygu=qoR ]I.gx2*'5 0:OCMѴ6s鴯sPF09Ky |mgg`4׫wԒKhGhG#lݬ@{Ζ%0IԴw6]z&xd :o8ѷif8_fL4ƒ\_ɢ v^bn?ڒ ѝ.9x QC@S!tEvtsv@ #-ֺCRHHu 'W/-81"4tvW<4Ѕx.wg6/KVG$ A#ϜˏcmvpD_SR}ȳo@q֨1c4$"Ao쾛R,01$kI]fݧR=p-4׊hE-yllA,f[U,wҫU&\*d &ɧ>L(BT:Nݍ>w?G&m"AOA㝋|oۅ6q!˒|v9_'x߰˵ zkO!ױӶN !|.?+5[{vIuyʂNݙDG `7@/`*!/|ܐH]&->׾r>|N@vmW@U|Ҏf[: Ҩ1<Ȇ̻a1r:RU;CW?e 6pӦ[@ lt|ؕǦy>{FnCQ*B8Jqaa'Ba\K^=IU+ؐ,7/u,HS3*g0%gCp׉MN$j"I-1JRLI!m!BB,I-׆$wsgͫ"KR #Z޴Fd{R˧?8MupKi48¹yX~ J\]$efa 2$2] ¿z^v-go}=8ƫ<1~=mNIo[>>|kE~A3ưtCyE?d8-2pZYqٴgUxh$Z̽ B{@BPB2ҪU% 본4)^ P!ʶ1,E1Cwѧ$vGce*rj`B *|H9NS0qQRN%0U\mV[lUf$ hHV]k?(<ѐ;R:\%'d_Ș*B@@@C#t;YyvU+*mK6|¦&e CoǽrW[]bHАkBv(y~;/ƾ'y<~>\s vYу2VփAi麄J!%Cn{cj0ZX Ȯ\Iĺʹ!@vWzJQ)b@Kn#:ϔsK{M=.c/iZi BHH̬wۻ^evݜ׹Ы2敀4ݼ`@.1+$!$hAoKlm(LUHԛk,@&nUy6II Bk'R$ks5x$P$ !$'i(\֮ ꅒ@ R[nx[һ-uHAήBk8mdgE[#%_S-}=|GMbV]Fcw7RGȓa=kq;U=79/k:!Om㚢q:V[̙V+?:ftW7Ɓb`/L1֍Gw)/m?W.z` khE3ڟ6W~hO&r2'=Qh1xffgzˣywǟ>wz8okx7e;-</ǩ^զgz#=\zq-!ziĶgYB5x:ߟ\LO.wuo a?ΧP /dтBݱ@u@GhI! GbI? /Ą%U6_emJ֭VSI /T $%@ GpH|ؔ/$,L8M`_&@IBG`Ɛ4%>ѡ@-H][B%:.CBkZ3j@%I#)652A&̼|_3Z9.4* F a@r@''fqȻX7Tn/GS}nkєZ!a72@NĘn_2) 5KN 6H|TDH@$ JK"-jϤgkփO6dam.*O֯+~x)Y 3*xJ(R@'ݦ֖gN1N(t=bU740ҟ* @%p? \)r㑚D6jbM(H/%P-2V"eH_3`~ nHR'[հ٨P!vᯪF'k܅kD=n[Tt*ХR .ct+YĤO+aWF JnzsǑ=mY횙>~| 2 5Ԧ.ƀ36d |u=2*Id KfW暕XYoGI@yVTW\7)3J@B|@%MV+4O1ґ8rOTqزu-l!1OWrC?{V;X@jty;"|^c2/*2~Y+^w[h׵f;?~/}Wmn{HQ(RT\S$+5&*XT.B[\Dͥ)N,p=ѠJ) ^Bd\Ixwi)K Q+z`<+RR (dޞDžOaٝ[J"V{BB:p8٩)gI &n F"8Z" "멺\nLcn FY.I-leٿa)SJ;ux N^J|seێJ2xU=ѭշ]8a;^~5[Mw|[ QBE"%4!ldu\#\z}\Mv$md,ܣ&M ֨$AB ĥd bx8Y 5$ 2?RD̤E"LP jfPp̠Ѽr[L&T6dL,IFHF l^]rc ;.7ȺN\qκףr褊 [R$HU K)K.&ƶtLlHSwZTU]llW7.`~5DdKPD,MprG0u9D%J)ӕ鮟I渱cWQ(>5qVuЙ4F7U}DJBJ7. DP2|mBD @]э1d؛=M1U@%ylq$N$ȄI2@m"`]%7s*ۑWkVdD!C_!5M$?#ZXi"pNr ^ s!-I]5s`]MI8DUdDłHѰ@щ0H2$qH4&dqhT0%|'$Ha!D"H$H=E4H`Q i#)Cl5{$DM(X*c2dD8 $p0sE1r0,hK(ا-n42 (!" (7 U$ AQ" ̛P Z޺6<j $|" bbp΀ s4l?.-jrP0aǚS)Z˞ L][g6Vk/gh{贻7s raO#)*yŚ_hWGȁ :Cc$|y mP:uq.]k˾κ1q\ksKoE[oμݨrd(ۋtLs6ث5qʼn d9E4WMu.5Ů~k!`s[l[I[DhEE^yuc56^M\p4CEHrˋ-}Qvv%^9-szz(ȴ0;ajƇft_v{umcR71C.:2/,eYREH5)k\BIf4vOP c|:ЃB^kVbHnuR0׋0:|£:~XUZإ#tBA)f1…CKِ]2QbW[n 2{b2U%SXAT.-4PJJk-̺ dU=F2J(!HB/c#Xvə!֕C]Q-e.=-xmײ?_L1^7V`Lrt[k-״|t_Ra2 Ysx6 u%"4߃7T%7ȹ˖:"|۷4q8SN͘m5oZuY1Q4D1CAܟnRFCI ɮ6qds;\ BW'bmqQߩ\s<_eʺ_kdF0lWms\lq˜%%s}yuƸ8 _k:n'9s\h\qY>Y&Rnۜō+r7\n5ŸoCy\n1]7ClAӮ#-um ]db9ȍ(q j(fZsFn7Q\;\b*F4EۜޞsAF34\i~?-:ڈlE 5lumfZufϽ{pv\\!-*Bb%lKz.rvo03 Z[Ƶеڵmmv/zs\F\ęƮiy,|st–f Q4C:uE4ԃfQЙsF~B9TRa(wjVm\o!jH,H*d) {'\h]`V))8jc\kEJ,<җiOP XYD :fݚv|}fLncTVcoB5R}U|,?OUϿ"Uѣqïͪj}5G$nv5bGyԤ I! ]QCZ/ٷ#}Hs%`{NDR vu?-=`K'zl7|i-b_'<\eblYtyI J-_a5EGn$/:9/n:=DcHHug__?H5jY瞿>;'1 If! Baݭ6meҝ"I[k[k`dCJ՛*xDȞE/v7]&*Ϳ{QUxhfDNbn*-p$Fe}h;3Ii6kKSIO5pju.K] GSCdɺ(Mr"ti qA$΢ZP!:l|*+x(1d*RU_ye⣄:mα;Hwv|Z=$,LKrIddE**|)ܮh湎<~@xBWa!:1&KʼJ9 #H|TE'hC *8y? TSw0ԅzWO1ײgy*U-c]" s,[sIWcL^SWݖ̬FsfڮTE x= qbQci]^ ksw$p1X"sW mf?&EI3=>v0GH$QN__*#-qJﵔ(.LsieU׭TڗfXKrGsLPZuޯ[&WtjZL=|3͙44n+8y{&=n6KKTk𵔶K_욶vTs'|,`d]K"`~!ƬMs=ݲ|LnA䑇 )HD 4qkr;!n @b,Ev[+Ո$;n^CLۼ@ߋXn5طLި9vږ٠V帜)KJ >Cw3kFuL9R7^yP1&ND;R"-~ǺkQ>~<(O}qo=lG๣:4"{F>J(x7cxRq ?鮙JVQUz9J=U 5JeT>ED̝CGJ^Xyuwz$u W: tyl"I; wDN>Odv,J|琕<)AyZNy9PL4 Ҩ[+ԩUjY;R 8&X $) 4@ Z<WUʁπ7S`$ *Q(z-Gd^Ë'f9B]jm~]z|okrGAXP?|"hO%`((#\j=Opy |Z\x\0QPA^TSicl˂Y6v& `|/E30Hcdy> XpQ + J A1Wě}bMlg+{)ԠpzBa*O1k'\QFj3Dhm Ž@h}]u68:2 ZSD0 ojeJsֶ\uX.u j29" ?kP~kO$֠p{MdPJN(@Ȉ& Fz*/(JPFR -Zr:! P  )bSrmQ"}mlNm$0bZ(h2 Re"{._ ő́ZSr j\_0i/5h%;TRK[Vphq$ |Y˲_VEPeةsd>BT9@Xށ[23~)s*p+ s~}ZBH; ں '+Eґ"@xw8r~ojBLsg&o`Fݷ{W-@= LIӇzw툑єk̴SF{|,J"#/E5:J:M$Y@f3V R me]]}oyXj~#ghբAH )Ӏ #+~vx{< |Lj<&cw*OpѾ7H@dpfAZ=Ѱ蚃&BFLq1; p% mGKIt3YUC4yR6xoIxx⾭.YTh3϶4ǸAvu/d!`E ~gU^P+iAΡb+?O *۩oU "V f%Zb34 ޑ'X·jx^g.}s+,`u$=s _a읔rUÆّwBvϓ ,{L LPشH.HiJ6#$ S ȔM*EmCD&6C$ !"끤$L(HHOCmАH$$cbiKrm;S:/5[ij뜞quG@HBJ2AH9 J(jɖ2HV oQY?}@ɰ4 ! /mźsWٶVڋxZv-UsۥVۢA-4hTUד~MΝ*WKMtۮS9qmݭxV]m~ʮג6cVJܡͷ3f]5lq\Sa19nw,F*ٿ=|G_-<%/HBZD3%: E¨t\l]>ݫ!AHF,%<go%l @Ca&!bW;M֮<5} U?cln]O+ڗkKw[&f8HDBjd# $B!JJ\kNn(\WMyϧ:iȉ L~TrS-= `lBF8Rw %v4V/O)Lz6]4˶*.MnuŮ5Ƥ[Q5N4'NNs§"+2L3[9>^-13S0Hkv)a%2 eՑ}[b4u(VxwJ!h0co[ i@- \m|-qׯWS[T">kenZ.Y`2^tf*[F Cm%q7Ŧ;Wrh{ IիdF5|,eK)O>;<8s Ԕn̬3+`BV}ݦ4I%blߔ05# 9(4EKxX@ڸ<$B!fqH@%$рȃĹp|p sj2bz2IYVkvI]YUZbC&J_>MT*!y^QdA;7Ԧ7&ιS-e!<"'mW`HrCL8aieɆx,m"QYjw9'vs!@.T>?؅}JDfSjD&@D m-V" r.os?~d 4}|4DՁXJ 'Khjqnx)uFQ~M֨k $4QbLK <]֋-:K[sk.zty-6 bbG9GS\Wr-ﯘ0Ib#<Oj>c&^4%Iaf7\Ww>T16Rd]bƅHB]"sy,wKfҚCQiB=?Ƴ7J*6%/ "+%jTT I>p5jO]L,@\>zqS# Bj07M8`KqTI P0sT/rNoE%FEOBdn^ai ~e/p0:Z!bUpbŒ4&ñJe^EU螖q| 72k~*4)ѵ& j-zXd@CJCH[諄YÂ2ysUo7N>FT `L(i:tݫFżun-= uV.lvē9]Aa%ǿWkq>#\\$m(b"H[fzv_nfyKrU9ܝLpP<|bo׶&?Thx[2&Ydf\_Kwq4oFaqlZ bͺqi.neŷ:;h1Xqp9zXm%F$ۊq͵Ү3q~Uu D bMm qds|[ÜNjEE}g+qj[\]5F\%kD0Em ".19KRVnm( 'ͽ)+˹7]Qc imYV]-ƭi֫qmn6!  [M ۯûZ_Dy]wfF&c <ࢡ捸r!M)"A0CH4(`TO~`uxBk@^xpƠHӤ!. 5!1zffwd wNTlm 8gQ!QGY+  ~.2:q{;X)ڽk,8pvX"/~rHߍw+5@-i-'W_3)ٟ2!Ѝg-,6#ہ,뉕޺;YԻ j)G3Z#2p ͉>P>h,: AUSOy}Zyÿ=n0>ޅn6t}%R$(;ubgbI$/^I"ƂƁR-$}-HZ42bA>´s=M$x.6$"fQ/Ęn}&LI!}s ٴgSQJr (bPS%}ϓC02%lQr^?km'BTT]AqKLyH\(}r6U(?r bQt#+3'6R /x#gUyGK< L,ճ3 1/v6\qtp .]Ŷ?aN7*U'Z  קK Bi" WѸ7}-Hz4V: Bӂ}fou ~5X0$"/{ *# 6^Rt.g[C337͒?g9axz9ZOSqYY֪{2 Z?^|| 3.RTZCJEWHI B3XȽ/[w ;Xdlqa, O+֩ \0XIܤcNO~헢mm">дE!,xHHĊ4 snKQelfw^s~!19Ȗ6hכ¬<9?粌"/F326+.k|_ֽm(6V`A'YĒU(Vm;q3!Z#g2a0u ]H-\iX& ʁ a>A$o$U\ SZD0!CBY ZSBc"b:Xl}"46WR=.>#Amb-1&4`dnS FD8Gh]4vs M !fa1H3`CRhmxbEّ\}0-zhx#"w Vz(`M? ~|KKq =TRuA=ck:bK^:{<z]ɫlxcJV!m&R4F  E;]lYm3WvgQe#o~y{gH|>d[& |H w./pPF7(J%$L5$KB?|~J'QHmH):ɯNm@7b. 3ѕCBW)a|-3#7ȒaCP$ѭs5XՃ![H"`%A\ê mv|ITeLCg8Mt$?Q}')c3'~oC?j~!G"rΤQd٭3zϽ҉(WI3|pb's(c[~z5x_#\`1 BXlI!  ȴf)6uX  /cCK9ƻ@_'!&"G*#07Yd-PG"$A5 #u8^Y=nxwQ笄Nwe%zد&ف!3>{KMZl˫j՛9CW[ >.;Uuٴ@~d/< (jz!zKAZ8޽U)pIәjQ6%KPVu^F2*LQ5~8㻌ek] D6[+I l ofFיkfbf+Υo8DrmF_G,C&*c',.L _2ǿbWdo6t1ar}^!_%J}PV7u1믔@cDw\$ j?|ʪAq`2㾁c@lbpYW6%xgv7!3j,J\qK{ ȱ AAZ/k(+\P$ tքbJRDx$Eh$BJd(@@&N,' nk$%MK55)q(שG"O5FӻGȜuQl3~sc׹-B!`A(CYa"|?>L"KOo)CP)#8bTFk 23d N."a]0a:cT( ).@%1 %mv>oyI/BHR/e.hk1={BH B ! Ka0 XR]BSiM,MdDʙWw-;K53#Gyo{wD1lrk}GT0[u~kOBGj pBG|'h]PJ7|;VƑ! UVB`Ӂkr` vOղ7ЦTwWah-r9jg|Bz;\wDQ]I:_QvNdkȨѹRY~)@efCPdek3FfEݷ}]'0v_TyVyԡJCOv]xYd [z6isҡ>2Zؔ`!h(.{Y5Є,f jVЛJ򨶽ƶҗ\6+W"Kਥ3WGW-D!YyG.BADR͎4/xUhmi`Yl=.ƽ(d$$ ߷'|pB]ͯqjŜ č};o'Q&+ord_!d`@@a!snH oC$W2 hZVZ=?kl/,4 *śʜ:ٽQ?N+Nw^,Xh]HlBKEB I4Vd$".П`vkzzw#-rzމsw~'їXZjʝUkҲ.d}/Y)%SWWS'Ճfhw91j6O˶ՔHHDHi:ۋ[&RPPSO+oSY)p&WO>hBiYW%ӷmobFI_E*`[z\UrTq.`WDY?}GwVk߇Uт yQq{SοGu;Koo?Wfm_eO\Դ[BM9f bHFFtlTbG[H5}t5q;WHWm}36KZ𨼚mr[to[.אגEMFWBmH`؍KYC@lph9ֿM&{MUV C_KV#2YI]a=FfFGkr&KR1BDbG.ļu!3$gƢ#tKg5_3-S+m?Mr>U\"+;'"l1&Q;}7{wN6~8zN4BI P tU7+)9w QAzϸz&&=D#D&ld^/H~^juwaݸ|rO#WhxI$HJ }2O~1qs uEPQ=_X/`/dtqV_5YWεp6̆KtW-*4bIvD !d%0epae68@۾w {hP$}Y?ھ}Ľ4_ZJuP?o(/4 $ n bBEi$BH|(I la,*ÓHh3t+nּ`7߫[;j/6& h%uK?+Bܡ:w5/Q4!2W[AQf9lA|esr!Ƚ+yjD\0]Ɉhj)ĝI`E}JZ4$|iD 1%2+PQi `bux5ĒZotwC<@! AA b -S>>i.LU#nǭ}]A d.mAtVbbԙ q$Y\!(E>^ ׃+M%[ce{)",:=ݐJWXܴ؄D([ >]&IR[v%qr^`M?ƈ`EC>s %KKkk9sdq$zOI{rV)INk+uVY6Jcz!C J6h=! $#E_˫Iv\,Q= ,` }UW sxŬ/ē~= g!$F6Lh]=5$&J\n̈ERKv$߫sӶ>3m`y]umh">356Y)ؙ֕m4+&()d9˟OJ*h],;UU$\RHi+wYQ0ӌa^\WU(nfHKKV6:XgjKM+z "/xpcjjDNυEIѡodPޠfN+{_R~&] <>L[i/ LQs ]ω=O T&he7XݯiԄhw;ң(p;5$"%]ARp(vUE%G"$ .ԯ@i/QU\sQ=,F*U>o@&1O\i!.2$m[WvLQ3*ؼ pV,5H֥ۢ v跜?Kwhg ٷv.'18]y%ZD ŔuNWӂ)K6BhK t\4 R]ڢ$_A#A Iǝ'f3R{/m]s2?zg;?Tf(:iACm1Tljr;.5KƧ mɮx)6dw3+U9 ^>jHSIu='dynxumd I Wa$4@P'y$݆`BTwEhL)+! !] QbǕRbFw)?t(tWqXZ-jxUI1*f/""@J #V"އsz#9$p H#6PD4qc\>ZPLQF$]j{,Mru]Cmw] 0tZœ?Ob H뻉mOД0qou;=p;]߬jsZEۆXp<꫹kIrkeL09j{fF %m3%RfPWy3iݲǝ٧]J9κ4=_PdK'_N|y28C$3Xzr}`owk/0p~>[ x jJ^4 &Eo8Tmd{z:Ӽ]fѾ )޲GwKwԤU-UrX ).:!-2CF@Ȁ$zÁ៼\ jy8M3= !.@Y /phɿߴtu\̽3):.S[UfZRlaF1T˜DI$Uy @>s=˚ SrSO[;>ݩJT.E:rok-6(>=}\y[:b <*i By넂J"VX;Lb|Ўr"xBipGב̤l7frHm. W÷_\GAU~w^wA9[/ܤ#vrdVrדq58%ʍ+wK7.)G`EB}"@Q]ޥ6QD>@$Q dƵ#ݸ^Ц &2ƌQ $ }U+[sWٓ5UA%FXzHޑþuu8;~עy@D[> opp' 5`b7$ !R;r҉qܭ SgA󻓷P]^wzZd;LiR`^b V%fƒd;bC}e:Lpj7'Qk R.Lac*nk2vgHkHJ(-2d 4%~;%.}!D5u|GbUjb۠\@I0&عs2NJnòS!kso=54L'zc{n-s34Db-.kmO;NVpitt۠=;)oU(M )\z4b`DJ@50!*%43'#[jTg{hWrbdfɫf{~,T.w~OaQQU"j'Y' .}|Y$h=6*{SbGQ0$CJpޡdټony4 Ć켼-Xm\Yy1eD%6g }HN/E$nkw+^XgwMO(S L%0aLeZF 9QwxAYRՔ׳z,YROX O3b#I7D",E$b/Jߋo}_SCzErbR~-hlĮ!H$_$dE$Qk&Mm6 lm6~.2jv9;^󸷷}S3`R@JuN"r@^;u`ɢ{ Iù2ZapcjNHE@"J0Bժz;;YؾSownj\9x_I^ ]LuU ZTI+= GF$\ʛ" 3V0V8]ϋ>}e3*=]CƱ]C*i|hIZ¥צ %TVtR,\hohma]3Qb_9^NjFQ>7>w~ӹ`O'L"_Za罌`}Qη&iCw̋P{3/ͱԂGȰ$N2rKaé+$\N`#u D gMgf(ű ϫZ#ߞ,`'F)-Z!S_w^)86'*MZzȕhXUtkӤ Cć R(JPO2BR H fqpV 84;^2pN:Ӌ$)mlIcuyzBs0v B uIXfѿUi-MRÓKKkwK9=Zm k竆mӎ*_cW*c>XiVx_SVB[ UɋXrUjqCn]M8dP+ֺîVmtÃ06u~gs[mJt_ Vgr` r1_}1t2T}5C{*ںXV{ahp]ynS oawyQ0fQWҦύE&tvV籹uܙ,b`vnkjX%);mr}EEpUcwG1u7x]|/΃;Gkضk)Pּj@@a{"_[]LәwB7kN*"f4ΡtBESLΘFf|܍sfsK?~^ni\eBS~YB6{>V;<γ{Gpw1JĹh`|MZپl2t=gy{nGs|;?1{kNt5$^k󺬏<Ik +zn9ΟD5}"i@@9*iõz>Fv,4O~ ::8tsb H%y-(zNZdorhufۛVxټ >xW -ϓpi+O!];)\2|yaꮾ3 gos=Jcr1d5.vU%֨qW-O=DS0sJ1IrvKջsn7R^WhNJ5lg.ݠ<;{ y~y\3R,8k b0/bN5&.k oҝ++LjʢRHUpM,2.3)N<퓌{_:rH8i r;R8Ta(">bjgWFm¡ 8z3 =N?X9cӋH&.xB8?{k;? E HEQ^կj".ݾ[tK^4g{ _b)w%u8xϩ#Z'&t?)6߽7KIi"z}Vu*!DN[I{!A[ D1`0Iݧ5\^ZK0b[qi{oj\+j&/Ѱ]Wq?BaE'( -3"t0 ocM[nmq֭Ā0%F!.]g*Ttc7Ѐc F+pzg I/0<-G4Z !ff$~`E [$+~ԡBKd; $dlb?W1>^()GE妵?shy[`(PB2FUF_WMV5B%WZ(`"5(bd1%M~(ЁC3$JUj*Wbm~UW_jn-j-%-ZVXXFFSHBJX! h@v;ld0['{<ߑߩy0C꟞?}Ӓ-u,̫?yfh #ؒHT$}&ڋ[[jWګV6ʯ&mFձ[EkXYX#c ңHb,H>FݡpH`RJ^mKI\kcj+[ETm5-Fmn*ֿt1IeF__m\H- GHۿoK$ݜ룷,AJ}1 f=&VGi" EkXkoλ(\I^gt֏G lx ʥpE MPhD0V /oBBEV:7]Wg]f?O5 g--gwwFOG)m;.Zl-o\|߹߫$,v1؄$|(yv%F#rɀH)jت5i}8ѯj9$` 9^R$ʼneҬjm$$Flk==Bkwy]_?Ҡo62R(lsTH6#O_!$G̮"b-H=B[>wUYvklؐ$tM-kHl`B)#EkIowSυtw5 z8gJhup!$#BZ[w.MC3:O=unҿ+'vkYͻ#HYV@hT?7Z[x&+~f?4ąK;0IHLkzi!ݡ$sz d2 46lA  N(<5pK t6/x߰, qCw`, {o+[X fiJ h#ƴ >G%s_M12&rW茄஡F7&2E lϜC\)9IYuvhHR 0FA hCf1Җ%eTnkb 7>PXŒ-0 $! =ŦE䱷rEG7ƚ8DRF{v;j[.XNI];h bH5I&ВjėՒ݈V$@ 3۔^@k*B; bIjlIU0@liVFEZ}>L,#C}OC+@ j-AnUp@IKL&ҍl8w]U;>CZItɀI%В ,nj>+R66Fy ^kҀIKUTeP =2!]FhBZW6)/K8=\$PAUlk\bHVfrl1P _`b|A!pF`.A1 $"n",`I#6Bߒ՝ua^&Vn{WOZɽ{Yԛ3m2& lf6 #B><8Pc,:>3B}!LHۃ(h°!c䌒chCY"3ӍA-%.D *SpT_wJrRuBϴb<>띻 &4]]+/OYYMYwU,Kj 4q2ϻ", 7dSo*<N{oUߚ_Zf&b?{ͽtz~2C xinSK`ϞtU9X,n\_ ޣ \H/jIYPFGuY:6Sǫ^!dT^| 51>%J,F02tn#Tsln.*<®k5/S a<Ie-| 4<"qC_?B=7-g&~(f{WeW9=_R>ѪW1zX2ﳩ=&fĺeuZK@֝s( dA堆LSZ=6KY$i#G Ȉ #O7j+oF6nEx˓}K]vg0+ S[]V-d)9(cmc1,@k *n+ehB08xLd;*1d})_񎢾I.`lHN 4KR!aZȌ!荜:Jװxzߏ |6q˧UR7&tR7*XyŇiB>㺎c"oqOJ$AuQLH:$U*GPD D܂ 3.C/I1> F-YXc ,X7Чys0:*&cpU޽^3q`d!@4'c+g7eZqpauwՈ?HsKHE"o*&j@奔,f4M{~xrAYI[)ƉKӿǻ{wrz\UgR-J"ILqөm%" c+:k̈́ID !F"EwWpSv`1.eٲڵږZ섉i ifu} ֍pL}, !Rq Ea"I.g 'yˊe|56 ƺ}Qx;U5•'x+LJ1\ [RegGBjZS |dDһx^ۥJL 47tyms`B))ИD#sggO.؄Ȓʼn#x_;l{/7lfj %F5^n1hAi Bifg_qniYM%;Qϱq&y}q߯N4Y喗ǫ"nGn IlԌ~Bal8\y!}b7N,Fϩmv_;Y\9Q1H7Z4@ Ӻ5+fZ]W }Z/FB"qq*2XuǼKQ}p9&GһL],RfRK,p9\s8p#4&Xbkoos) U4ѕRQ;: f[>ӏN8#[ y #H§FÔI$Enx V2-̺^Vؓ44c;彭[L66a35zn{~E5̨\ j;[浖|W>N{eZفw֜itE=pj%{.N ZJ ^މy,n % 6OfTї}%d뽟 Ow{}Ρ ng!6yW3e\e5Ȓbf^cejZnRa=*W@cݘb bp]^,AQ$ Yu*kjIq*}Ilcr #eٰ4Ţ{DqG%rQ֫E[^b.){ˏAPt=]ƢZ6DGr^A"'&s;gjR5zz&LoWMU6qU1_Ƴ8o5,]dhqwgQ/lM̈z8N?mRj#7" v%Aоs_ͽUӀ $ zzyqwݏ~} EZ:-z*2;SooKrx4eDb2vJGkZ٣GSBk:73z`vNA2 9>2ߴ1S꽦0_Ut|nwOk&uV2;,ut\/,48(~=Fp7}GViؚm՚ݫl*Ńi),X<0v~|Js>].qj߄?s%6 WڒZ.~: ŒR e8aYAj`'T$ 9 f'[6Pͳdv IdYw\R7VPE Zll" {0w,K6hEn^sQ,,;o_'ҢcVe[[gay:G觜&~}zXb^)L>fSXG?SDHHBI<@,ȃ14 v8Nʔ"? 8I I p#A)L-KPk-]jՍmuKqmtw%%I~?'ED\5E :G*2BA  5ٸced2ǒa D_/b{-u,mt,% 'Bs)h=Tm>+xq5Y?*f;& MЀX }AV!l[i$ J/z>2 cɿܧ@nn~ؽ`S :W.i@0!)v :hɕ6'Kuk"sn%~H]r ڿJ*Kۍ4(PS[8n-z{/:ׁry_]wv:vuYlq ֑Ũ13SV6q4d6cTv ?Y`?tyq+L7s]4%PLmU59~y?:fqa^";~u~Ui`(:'yLWI y%m= $#LĐ5Z'r>"#`@=6&ngA4 u5,[')Ǥ&dquKfP¢uIm1nM 8ud1#8jw*uFWx$f q*&7/?/aÕ+K?nsGO].QZa yfaq7Eel) HY¡%l M0(U"19$N26^@O y=2$TRUGV-n΂-GI@ 0Kbe h][H[$.BYp@.܌8ov"v>?<Ҥট_ASErl=YA ~=@ch9Pq[|6*j7i $<=gZt 3iKz-=w71NVC Xi4I{UF69ꮥonh4H?@ji_){F034Io~e^v>d`H&!UtF P&,XTjRҕbD6f~`l>cԐ ]I _ ot|3ǒk-h3wb /1KvP@ ҴR ! D@!;i⫮ߜ9OEHǹ :PE8=gSu>WƃG;3^mۢջq:#cbhRoepLhǪh[@Fut v*U*s;v=J}Mw;9I?ؐa+ JRB]NI%On% &4!m" LI{BHjM }l<@j%%Tݐy m,9?x>Ѵn,F;WA;N;_e9"|lJZKջ~A>![ɏ؛䆣O3};AH{f g[l?Ǘc2Q!a祿Ru?tY~7^$GT!rX"P{Z!vfM4o _ĖxdFh VJAiz:|cY^٭c`WJ;lWWpvU"ҵvd(6HQ1: a@`Q]D)"&8~MN׬b==bI)*&$Z Ve}"p|k{wt~)QWQOnP%ء8x+0[.Bg'3߭NJ3"!O,<7Pnhflb2cp@ B6h>s,ߴLڌiSF(0P#sRDWsYL(|AH@#[75N|;c\wUpwS.™עdJU>D^T$ ^g8Az|9.ąY44WO4];1 mrwbT\=vUh\s[OD7k69G5qpu `*TЋO!+#fgnNԞ((lT][UVO"VADYi+֮>Ҝ?fڠKq[eZZk7m-lՊ@ڐA9`ˬhQBC;Y>἗5݇3"F M|=3v'-uUn7RQ~Q'c^T\qОԦIaK,)}]~3=E8J&:{|9:Go Zzˋ`V~@ lаY_ =&nw e"ڏ<~_'.4#iCCm<مS.JkenF2Ua*D7y$3L+~HCKoUN9ڥ8ᢘ )*&C82?6."ˑ0.wH7Z<ؠ9%]ѮY /M&%Y }3lO>L t`I!^A}F\qH D n\$F$U<  *LXUYŔ!Že\  :K i E=SgSc8V_AgW؛C7msS`4qAigzkI>׀8]Lq'\rj*`ו&究xVpH[ϲdCmr*մ.a 4 N_J.O%9W @gi*vBJ&*̒H ːtw|և,ř/'`+:Ӯpo8ĐBJYjQ㝰q ,]RV'WA2#8afF0~*Gw5. P0ҀW(Vᅢ ![|L,_VWfE[y|.e?kR{eNC4yz\[thPFAȚvOTza/Y" #! OW%CcU8ߔK̗nuĉ)pHo{tS\+"嬼GnGHk_>ojR(x'B<7 x EJDnv+xx}N퇸ddi;6-vx\$3^*R@naTp5-qXHe1e8ydtJκCo gN]$@$36 e:DxA[ּT~A1ntB;?H 1oz@Iӟ|~_r^ 4i@$/ZBx 73|-a,/gi Y vmTV8ɟH83ߪM*hλb9$IVפhw $4 +) [73Q"1:so AA<;GA" =W~QR$}ѷf=Tf>`6ulx3qE(o)0H"4 jLJɬ AR`H&bO%q,ȸ0UA!iS A!j5s`7/b&l.gPWE%/i `DkU=A@Oǥ%s ^vc֡HR19*FEA` .co+>\ZzeڴBȓ^^<p'35OQ;9!n4a444ᷠs;^Uk Y&PMK PńN^v9>&f?1V?#Wqs4kJC*VR4)7ܽ iᏕ=--Ąw Jݭc]5DExƯ9"J RGv>ߥhf緶q+دPiɼ~nth>O9f*,o[uКɝ<*ybQ$l/ónAM{|p ?IA9+Y'I80&gkW[0,hc*wۤcP M+m'ܱF) MJʻ6^8\;.w' (\f^VQy'_gk:T6LapS;eJWZz̧fh,L?tfSST8EU ɠ A)*Wh=GWɑc4w$@4;VI~s%Ra2,v/kBke{Yߐ$d8T VyڦH~%|8>p(.IտAj{C^&WoF pm$H{LUbX! dQ(@=Ԓ$}Ti4B 0,=QLCXo1I$^oޡE&H|/RD=UT1K2dYqUncI%mmA$>D&ƼLjp?D̡D)`7NSf;7jF[fL_WVe2I?JV3}Nɴֱ1`hjX5ԃ[*(\3 E #ѱ "|r,jBD0P!| ;_]jB}Rn,رW疋avp<{T 6 ''>o-wk' B P Fǹgğ0۩s%gu  ^1I\+M>>÷V8[ 4T^DV.7~( Dx!73 ?s^dmX~K.9]S@[)W>PF}"Gtda @,/T[6W+͵[ WvKj>Y8/y2rByfKQ_z']Qv{H4d|"ɿ'/;>g ASMHWV~Rphѿ,$)uR%zޕz.N~CƲ4պǃ=ֈMi9F ~cA!Ȱ @" 7Տ9o_ ^V鯳=EkpX'vA\Mn#5Ɩۗ~kR0 KޞN?6hYXHE ~NMuJIf7xE@D\ױs[6hJ_gic:9)?&@d޷OT龇ĵgnN }Vb}Rjo{7ivT'd(j΃V@d2gܫ izPՋ>BEM ]binpyՅIY[F_ ͽh46]o+nwRR~lz?AtzEE"s) ~!# +>[KaOQأ-D#4k  Y8p Bhۤet-SLy~{fkҫD3sAcH٬hY2~ն߿5o[[ܫjmK?*S{eS gxMi $WM~̬~* BfmgrY_Z@}&_ϗT=kG11mkƚ0.JPf0$*QIroi,g$>u?c{K>=U߫)oZ.EX!βWu}Xݠ1yxhKJChI~f@?}!vL@.y{:V 7ڜޭ 6m~'7ng4Sv˼=R✗* ErZ)6q}Hep#Qt]VRss @,)0L$*X""q\ پCG6$;ZsMjaE(e&T'`5!]DJ}sV<+tUkp%]#D$yѡio6cc4u޻,ާwV)mc]'%6p 37)$m􌖉}jr+$}Oyڐ("7c\jHlo+=h e=2?wpncXtY&O~gw+%SZmژڐB4Uf "HD@6Z 6h"M6- +my/ӗƕal{GH-VUy^҆"{@H6M h1ZWTielm .gpK!K9)kTXyD7؆ ڎ#^9)zg`7OSիKپWD6=ШpoeNiU4!*sm64@ccum5W kbIp\q5iښ5𡪚3u&kQ^zgԷ0J y'?jfh(aaFݹI`+mdƥ" ndQ)6†Zowe~U=MtM"r m,T`r Mk!Mۆ~xdϖl)r xTtae b,WFt{IÌ.&5ڱ引LTq.O'-ԄkZM ڧj)V6zF#1t./3\g\+pה!lfS \9(W.Z}~ @h]"cHj>zۗkwTw^k."paa4$eтFdHA"lH6€ղ7N9[:֫~=ץ5k~9m~5nVB/<\eU%/0xPy9L{3Yua@@"{^:NGZ ]F85y16~?؎_d 7X9GTA"j2"͹I*z |/깰,?/fi2>2dA3Z2h6 g: ħ, FRipM@~Q(dk[[7d,vRni<\Wt]5Vڭ(G)K,^RG߮jvjY:ƼZz+BRJM@oe7R啺(eZ?3͠voN<"{MAѶ,H)PWȳaAVs>zXwޤpɾO^HZʐ$Aw Ľ,GM:)B⵳*)E"^.HA"b|פYVϛ8D#FʖiDH.s-u4%87<ߙ,!rTz3_U,).1$}_K %^ 1P"kaC,>i"BM_p!4Qݐ3}N5ЗܸdNj*Hy6d$ 0NҤТ ~bI~ wI2#+v}wx\NϤ _Am8-Ü|dZB"`BFϓВm /qءc?c̽hZ=fG֬ŶdRA ]EkfX,JZu`aQ p9IGNL! iqx+ͭ+,hQ4F $F4%*G 8߳yl >l4!6$sbLKo+fNHݠu1M7{ׇ]ͽ]k$w?ganW^~?50 $\́)ƛm&Qǁ @>6tIuB;!A/B>x`?KuKt_?" ?%Z/kMkJ*QyhνgNX}l lm;7_<`4ܴ򍜃ڎ-s !%`Wo@};9P?~qqφ#J! yc}!odb)r՞%5T!RȜ-gvv|!PH;B$%A" N QٙpJr~\$CⴐCBBKฮQN?<]t?>oz g0ZگoK{<>^DwML}cª~oygL@Bi"H n:4#{W(-z nҺB`iIoQN&vl"dV:(HOW44xߕR\iΟM5XJH@=Mq ~btPrB9ƒ 6}sexse 6쩶 0`(8 <6bX bCj,Z~|b#dg:ʻNs:h~n>uXcl 題U&/:6/rԀ'~}=5$i{1وHwi(fX:" B~ǻ #MʋG*'|\<* x=QZ>7Tw?udK3eBWb ɲ_u4 ; 41kG3Q3kxw zRw7#vn^"q%# )@ A Cf{ jf(C۵E qlI 1B<^ԉʡrږ]hMP$lc+$kSɹfyi@3T<"y,%xA!"oCNz ~X=OyG&-%xzxbC:RLoc+_u7\$0Qp!!I :rDx4@)i$/j%[+UA4~/~(hKԙq{˗s\tUAč1h !7 3MǨKN qS᳂ ETUHh};_ѼϾ rDW C s*uqkFK,;MU 4(@٭meu?4'(Im$6{6uܧ=y&zRSa۬CnsɄ'u󬍿O{7Z{άryWG9]vU ()L[1?:lYTR|k7e)  (rREUX`3.aB2x5)M}iȿ,² dĒ;K.T~ =GCd* ([_{Zү"ҋ9%3;L,#3^\OP [(V8;('[:5f-uC8|}ؾzEݘy4'pԻ*FbBD*Bo9?^?߃UV s[OV-8]%\/ Ku(k#U)$e[ϛI4jPs}/q5eA :+K_r~-bZ֒;f8Ē> _eky8k$|[WdȎ]%j˷ns{y9x8ȿCE2ohBZ !-%@ÀPε>,cL4ZE^W!$Cu]!~m_.#9wi{vfw=vVax}Oȉi&KPQZ)@ǦX~ QIǞaYg{^E krCoz{T_vsv߉6S%{/k?kƐ,1LjI\[-+ sT H9gLoi*w.xh!!.R4}X4_7n/Z"8x^K`;GI0.!E flu_yS/?/ ΙL@ȫ׸#) @/wGeFŕE_UXa~,sfҬ}W<\~RVNH/q1jO+$5aHʱzN3$TiXA^݉C b>߁%Z1{a?F'ʷy]kcvZTϠԻ+IW|IǛS'~8ՙA:WUc6lMv~|mur9SyIS}oUuNIu;?IՔ +]QD&hUY{oC+ :maHO8;B"1)i@HUnPC52~ꮔ"cNٴ!AM@Rm.9eR~VۨvKnsa O[e{)6/\CFtxfc5Zx>.nz/sD{w+I"cԴfk̳oe;'Wyѽ EurC\C/ZB($!@,lh4 &p-F4N7)ȚZ d_ ߚU >F>uhDovDD vQfsQ;̗yJf :V1ai2i6iӖ"e%ms (LhaFR[g곰9k_Lod}3ZC4 mm&`WOӁv"\䡍]F]fQr(c7"cx.emZ hb?vJv))2̥~[Rn鮣D7&*Z(Ioweky{|Q[Ik6ɦEYW>銠Li Ll4r6sNSqWԔsA50Wd)MA}'9sse10yա/,DY%cpkJc}JE[v7.8J z}vب&C=(_$6" Y &9G^DA xHˋ`rHad@@*:='~R$sFCfD \:9rg~?7?>kidN:= koc@-7D Àqm#8^A.E#ooQ^ tFVW`;R;utݜj=@VCMf8*V)L#Nv?f$aHQ1sLxB?G|GW$I - &FwN}og;~c71hj-_^ak 8ZSۖkTwl =oΫjuöxuG[; 3D~!KK:N;MwGm<'&`ڜ'De-l 9xe=A^͋} e;r~ J>c?a+'HE!!Sܞu!S+q44V1{E۽ .tD=gq IEA_!ڶ`?0 STЏTzZc_O(Gb IH0   5^G67 NtWɬof<Y0prl,}ms1jq`l~(=ΫJ c&+dnP3uTb`I|Ѳ@tRx=w؏W_kD$:$=s5;ET3rb9]]x.;V,Oi{#;O1 T)a˴%5][P@~YmtX%h4&Gu]%{^aʆ (:T0Slgӓ$ R}FJk'xI*v<2B=;w[Cn6>O9<1ԡtMB=zoà!2}:F2䛋uZ*w5hYHi#wrR(yzλ_WقhK ~&!t"@MuV } RsݜGYԫ°RhtXWt~SNYv6R[8529L/{"6b]̝g~ "!Xq>1Nl.e]#4o}ܬ -:2#ƴr9{C>-IXImmvЏAp_b  I,X>F<詻Z_z_Y՝9 m;F<;**dPҕ5umPZAuAg:f.`Ê58$"n?$iY,Ί #:+ 5Қˎ0LƜ\|q`I{hJ*Q4t-F6sd "!-ѓ᫔*[.zam/C f0.+Ff㷢ϕ9džlHG~mgԳVէsV}y׷Z,lIu_eԎǤ78Z6Lț1DD ޸ÍB$ Ҧ:v~8`k.qLDU8#@D粱u/ +y [ҏ*YtDk'O0,14NbSL%[1L3>ǻmXif^QSGcdZ?qZPgqGj/X~ǹ}Z+a$UV_b?|ʣ.gZTL3tu"}`F!ɏCy ĥV, :&D|3HǀF:_oWaW-^ΠG59C5]?ŀbN-6$?X'o39^~I 0H$uY]^zHbT}!H"8Ylk} ob79# )D4FIB Wܾ#+_{1d ojZ/`9^Z6۹ KpHئ{ꆄUnC]Prΰ!B6A%395%D,n'^]fUе^!TjjB:I!"8wȴ1Y -P|uևmU#eN=XS׮ԞwhFg@E⃻41[6-ڬ>l S1U0 BrZb&QɠrPڼ?]mWWaYSZuڿ|5gt; b94ϑ1()| >{UԱa[SO>ck^|$XMEugK㚜dZOf$`*%3$e] T҈#qbHrRY(CȞtDnw}-wĥqL~> _)1e]nn&n*Zh;gK))I??߲{ U|iv#WW M`pͲ6.6l `T%ÿ:8h q&JZKԝ,%Re]F&xo8og5<ǯǿEɾ^.S‘{Z5̫t~/ xH瑑%R'QɘĨ&,󈈇}::}H.}Oq!Gn xU>_VyS;^OYï/{o $;LA 8C{,SYADzYOz8Xt7!"ŦM$"^tf*W2 @ 'W+'$% v (ֶl-%{fј7q+h?G^w@ Be{QWgLhD6It|/M&|҆}2I,n*')eA G(H ^ 5s&?zBtɽ?}iV,?gu][{ᖆy>! HAsYU3._5D%gR21g1:`A%tznIGtx$DN `1nA+Qf8:CF_e~h+))֒BnI$0g _I#h.H}/2:Tj > ] ޤ#%i2tDuח~^'{ܩMGG G2(+ DP ~dL3h yؑ"  "$o K3<'vmڕw?:fV,c>#ebw3GgܔanoeҶDR72P#xQgaB(H!DchZS%3=7B/`!^ H͉۵D)cbs_X$AI(SY<(rRE 7sqD2SUF2!_UY{b1͈! '&T4' i.Q^B\Ӓ(}X*j)YA?-/#_) \ҥBHZHw˓U{.*BAAܼz|uq=Z#Ԃ}0f !JP :;A.넄6(ŀcr)4 I]aX#grlg0KlKR[Ͽ AHH&1ьSF Y`#4PāSFY!J%34e4̚B" 2PXfB 0b)  EH!4YI$%M!! 1)FHPF12HBLJ)X-2B F@%i)L0 $S0SIH # e dE(0afD"&D1H2b` ,D`os9. _$䉦(&fA#E$24 #] Ɍi"A Y11M(Q̚U+QMQh 1LH$%ddb2&6Xd1K1%Ih1 YXf 3cHHSD!0LYi#RbhcI F) RA%>*HF!,RoUgw珓v&0/k$/}/:/yr$ BcB&Dyu/|c %MPͧڸ[ '#YY+HL,8`6|_PC#*?U# ʞaU]]ݎߓ~NnC#$#h&qO`dKI4Z̳WմӀڽeL7Pg2gR($/Hh5d JmcZgoaj;SL;~Qr|FA |^{1LU\,В@DCi$4檜֑w4E,#Q̒%-2 ?i`KlSiR}f~!Ay>_ bdFMi67 ΃kh{2(rK0)..SSsd!3ܻ[?4aDU%1$ee!iQ2u;ڶm[9 \֤Btɼy-VdX? "\Dl}MB\D";Z6Z8\O$DInDXI߁.?=;t<+ٞ,IS-󮌁P GIǢ5'W?mh`ޢatak*\JZ+\-P[^y4NTTαefͰ鿸AOldcYmxsE^ZsNe\tg VK̻O+h%ơ2 #"b)J&(V^?:_OMzܜ/qU_h8's/ ^IT (~ǏH1ܾDw%~ōmZafP8"QopR>XIٻy 2gx^Yh@,Re*W"ab6 o]Т9aȎM}(s[Vm&b y'p1۔u n~oz9c} cCX7$ F(#1CzTd2;c܏6wM~"ƼT+E`U?6>6Z׳_Q~ٶN;vcWe#oQ{HFaKP6K?~H@! E"eߘH` h2UK>OYOs~A$m߽?#"+el:4y)WbYShO'34VAc/0K>MZc䴮J<`uZ6 a1~]:Qf>RB*n6*3Ʈ$B&CIå\:@=I)G3nl e@A $(D "0H2 ;ۨ0xf1ee][NbSgG1ʰU`_u{fa~R hюAf';i}10%U``%%2%7?͍5M);6PR")3?vw.zcA6&r'zT ʜg՟*uN>HBtTqm]_e^ZL;]_JʊfoMִ*v*?¦6#Jm:jJ#@"Gs@ATE1xx&?}n?/z GW%8H މ~r>]' 1Jj۵.>7s@"{)eURaJW0&ڧ|NjWz{n{k޷|M_婍4n,"AfѼ%y+V%^fgb- );I@L4Nn(&0\x̺ȁΉMp"aYpj-\)dY8o%fu_Mmg|LRcJ#Hm661J-? הbW#c7PuKlY^`p0?GVՙu5LR=o'ƶlz T #+( bSOhS3k0^q.)glt!?\kOiWP>Y(?k}cFP`̉m@H5#䵕^ DJ v2'$Q棃o<[sNȥ u>B*`jaM|op+Q؄[֜|ijW3Gmw"Z\ WSm 8Sl aRͷحGJqTj i6mbtr*' (SE!_]'弖nźXkk\_^M\WryRqR]Dd27ŷSFb"aIPAxcޕOC؝iprcSwH8"IUVKJӕgf;) D +I{v8G 9 $U]!W z=U ٕ=Ӥ,I+Y@A$0>R@$?$d'(d;1| [!v~GfC@ֿHy[1câ @% " E"f'LX\fM3 "e%VHVW|hel9jLqɷvG.$~"|Cg#.TNQ\p0NLEUq tc¡ٓ` 3,k hhhqyi>. 6ȫӐ o{kX%=o }R#:~ErmhTdINƐy kjsS[+.IK-@Du+BR$/<>6u0a;L " /<ٵgϧFW`z4_}k1HI} BBy a--5u)Icdka^iF]w`b5:oʼni;yy!&&1FnDQrJ|g_fBљeI__ek9b״h֕ie9-/dTR2H )3#M!I"iE&6*F)"HJѓk2Ũ&&IfKRR"B1h2aI ̅$e%Md!4(c2J"$P-FѨJ (bMF"Ƌo}_oooz_ 2kIVT+uȐ4$:Kդ}睟ƭ>_sX`FYr!&2M@[oUOύͧ LVTܕj|h [ qo|OLec2_,#!YuvU4u$HJ2M " $ـ߇(F3W_gqEڑ=]Y*^׾`m_b_Cz\~qf; p?{|M<:4uRaϽ/8=-Ev}|{/dЉsiG5W!ybyQ3a507l@jKW~gNLB`ȵeX֭R6ݹ! r7z=q5ظLAq%0Cr=4vL?# ){בP*~ :;nƓ"Ũ@ؼ4e$3,w OolЈ>*[Z-,qHX/bYPPeR359Hh[M罼:!`P]_ng,HZ y1 r@ ueoPx=?=]5noOd|kZcPK~NˇɸRND-|),p;㎨>HB> lA?t7r?Zkn'|VKu/[f48T+6jzYJ6H,x 4Qsz#^|WytW bˏs\<0 8C臈ƪřw}1@C4u:sdŚ|ZVqT&.`G >F/v';A(:?j2t%51VFlfG–.IGmxk<b{<3՘saxv`@X4 s5Fku+ym;4VU gMGpBB;PXD V{L'a+?}ѷ$Cոd9q%Fm|}AC9MlɈ}o ++pQ%U^Hd&JA%2 6138@/ g&=@(c$HWՏwp:)>UKDjxr>m.!FC5no n0lcf4 m ( iZSapbWgZ}n:ޜ} P`M@ 8 >7]]ŚS__esߔ;.ERVAi)Y6ԯ2Qi@h Z!*c԰Ғ2Bh6N 넓.3}qI7Y; 'L_;)˜<DWtPk-_qǷǐlA =̳sVtj T512@}Ux#-2$]i=ŀپy]HHmd@K/;|~[v,zsg*b0Xkb |5vH6[λmIUO_%H|ېޒIzǍqYڥY4> fhhFdr{<~Zù&K=i iOE; og>|Si3JS6DJD!@؍{S_mi`hg @ &lX"b壐Au4.lswlfYx?:]fZ WM#t$t#v=B*:}Ryq,j,DI3YsZԛR+rjkr14uɄ:@ZP}Ad&&P fmJ< 33ʈ7Ts }5ËVуxd["M BGDDVѵt h3 [d %tV1i3Og^ȅr~i*c#1#Sl Pn "}(@bfZm Y& 9G$-",S1z:pYǁ a,הi} ZTQ FE[Uf׆G|M!$>_+ͧOt)*6B`cFF|;6h묣oq۱OF4 IG8Xp4&Qfdd1h\gZͽ1βfy,2n+9*riu+ @D`)7s̾bk'('Y64ďϛs775ٺ6B "'6LIAT$7tĉ<}  d2GA,$W8RM`_.+l6Ú력Pn!8)h%xOZ=Bӷ4n y5O)S)'2QoR^4lӰusWc]\ҊFY$Ч"BXG}j M<=CչMŏ!CuLRMx r`aG#bÀ>Wqs4yOn1"U@O_!L\^Nr"XYVp0]:ŧ]PҌ&i=s` X@ Cc`1V/1Zc Yz%Y[eJ92]PjH$7JOq)C1U'IM$;*\Z%HwX享ԏzsJR !\:w2b7吆qmKjm93on\Sp7ԬbmFɁ]TClM]Eۛku'xsf:AY*52ɼ-/c{/:!pKC uԊj5oNx,Ѹp>yijP i.1qp2.;!Db"lxVze m/Hu6 μGLZ3|nzP+_H4$˛7w*~ёg@@-¸˭#I˦X{Fo͛4$(Y"ШcAmR.O9;넂*"/~U\Rf0{bq7htSkU] @ZXD- EgFdA%i"g>ߕ.9B4M&9WwuC)Vju!d7i&I:AlV! gVvE*F*C`|ZERՄ>&(!4 %""F%[1N79:ÚQsIłuZtg^S,(Ǔz\P(y٭j̨#"SRVHBޓهf;L;JD|Μ%[Eֈ_AZmy3OplY>C*<צųʏ73=KKET9"i-oB~M.;\ BQ%$$O 'v?[~Pv6 󮮟%e>< H q4*찵nkSoܣ}]ۓ-S,\ԐS B9WJ7|,T+;fH5/K*m q4bVz3;Ӡ<Tb,.[̱H`0["ZOӘ}*K F#/lTa~渊ݤ IՈp%$;cn5,{׃u7ԫfz(ߢ4GϭucRҲ xbVo3ڳ{V@ƃ Į" ݇wX 6/+HB ];r $^(BCDymeҹyw/0!x)'~hMj揄ѰS>]3@lpRKOSO/QFG6 @ZW/=Sd hc@p ;{AmMEIMZZ %=3BlV- Od&sbKW9x)U4HF"b#&vapT}&䢱1ggd^0h#TBv"|L_uq:L`)řVƯw>߃o& 7pkaAT |&xKNMd `w0H@@BzӇ2 =}]Zl߭}>x1.U*P-,{y/7XL&ی$ հ~y%ԘmCY]x9k{7.& Mm{yN"Y+NwhA}>ߛzL;~_]oT%]܌gDyQHk0z?QlV7Urɕ~]Y7j3Vɍ""f 16I$GH`FpyAOB1&.ᾝptR{B$u ŽzGo~Cͬ|]m,B.h>RJ7`@ɲKI%.ނ[7=%˴{b^z\j·_8}j*JA'x BA\+ĜMI$  dԹQOˠ%gL%Uăki ݋) ,!9fFp`av>Qg0᫋EPǪsewAD%DẶ6?Xkb< 7XR~ED⇔ =58I ȄwĄH;vYx"2IJ!!S,Pu9,^q ڵUu "Q C,`(.ym.sre4#y\v $px7+fZM+,UU6e\mv8Q3QDw=-y~)5q7Wc"c|\3i4˂ l}ԏ˸Y%gOx7>yWiurd!†dd`yw,aX_RՎZiLMMYN+o+ `h 6DuxH{P02+E#MyFZg> "!26<[NJyq6#|k^rW 7L[wn*Cc YZ5dLA$5E0ϟR>3RBiB zxCs*ZPA.beU:i"@:% W(ZaKObDtyo1#M L5CP@.ϣԂzXVc?8 3ݗ|AdEE}۔0e50.%Z:7-LVGu@rM)1oKlBRS&P!wkӮL(HbUn`_f b.1߽W+ n {D%F!ڊegH(%}s矈8WZbӍ!|`Ix-إwa3*:k[dBpȤ#Wam;>AE% Vmo_\%Dm,u6J]C^+*qIנI" N֔A$a+L 83Jf0y47}ء}ЗOi{BR)ٞ5cH4*SK_Տ@Vzh IC;u  @D%a IN۸sLt,8I RqְfXJVPN@f8\%A(E@۝C)5NIT^bA*eŅs5]bک8I j3 f~0v9V4>\s}*M !Y+wm4PѤ.α]yXYE"N{ZfP̂!׈:Wǁ( £P|©ʰ8I#Gj !եL^p^Ջ|4$8W(У:H&bARX"'F"Xc/$綕U_vg qY#M"#9}F}4{"3L +R^fd JĂ9)ҮR峛v9[atD=nu 6-Ƞb<".'{l+Lp x|%k!vYRRRFmdcҒ@JP1J(L~lmxbW?o?vgg^ņ1W!#'bajBMhgZEL: C~'t~g~oŎ9mZ16+ޓ |Nh,Y)({=&/]y)Q)Bm=ri.'oOٰZNI[i_귲7OT,:ߡDf_?_7 U[V꨷;5˲b m~rGWӃt??[,I{8^^+zN]lZ恶 }'i_+ͩ#P?.!ћoK"0g> MNBԸM{J#G*[[*"MrcefX&ʏ783酫qS@Au/&L_KStT G|虭"drrܞo{~1Sy-T5(H`Cӗ+ &uWOXy '/$6mPYN%r@ȍ | o:"D ||f8MGh>$j NWa86zL_ȟn/e.S\m9tZL1b'NUk@_S$HHg |*K>lڕ2Oƒت2Xi//hV_3${('"_1 &W1+Og۸.2=|=O=4BkO[o4ew}yM6ږZhim$ IjM;Adјے !fJ̫eu~,9Ur$4uh$fV'`l:S\.TI!N ~lBQ_Bi0v9uʦw $\և.#y+Ÿ): ̑w.;t6Wկ=qN#4׉%0tyu`{خ>[r .\V  8kC} @:F1!OSx+!C5cy: 7q>5FfT'Y$wtFCh&C`ol%H)O*Q'ç6~\ޔԜ{P[RR&Ag:akb"4ppoH@ڻ/1k alOvUcVhc;Fi^ͣ|] K)+s<,fHHv DJ2DT5BU98*YhjTzA٧zŧ՘0 ,$^[ QqqHֳD,+7iu6Wd3i1cΦDࢾt;1l $v:<%4&kqѷ~V`Y8DDFwEGpE7j~z<@N8= Uoa[(>??: G:W1G2?EI@AVLp|u 6Z%@ zx?~|0ڋ=K6㙞>֝FG'8f:fg!W[ h6#E[8N`(iI2'Ʌ"XR.`3! @Uan*눕 tZ̅u >c`/+eiJ.BJ}d{G@cak&;<dQ5g &/Ml%=K 9D!W2 >򿦔;h[%@S.BQpAKж4ic:~kY@.iT0deSy9d=qY[ul@.XZ/@y(my(nC@N⬫,i2777I3z\^EpT2EIr3{ VJ3+:]HJƾ(^q{U4/$ϻ/zJ#Y~u'$1+7!|y7r u ӗ:z1dHQVy] )E [/֥ڶʧzል\k17HnRqY{ eKK64((*7 t8c"B@G4I쎶 $Gi5Q7i49gzrr ە_r(J9?r?=G̿p:k  {N]J1:jMUI_ܹsuDw{= m6,QEbM`7V|[,5`ipEܿMۄРCW$':yԤy HPMzu aFwR E%K4$`MB .IfK!^މD <EVQPvH~%|Ђz^a,1H66l2斔U0`} ΡԬYzt\C铚E5U̪]gtvmuP(HJiEfҬ\|Z95 4}In4ͮ[ 03Z~ubb%`@ױ浣""RȻue_zE#5RN"ɬF*H@#|B &E]n>`Yfa"QzuMlcP>|T^߅gƩyH ~]r+POrTH{Hl9Bx=Ua!2>mŀ|!Vv{ysyIUf!qt*6U$DB6>k).8(TAId^y<-^t^y`B)kkgy;kK1f|UA6lCcio%&-E5Oc욮HN )2w WYl%xTJ0DƒeajZ 2ˁ.X$$ (A A#;_'YYgd2H'aI̭n\y_On}|`kj`J&B* $  j 4xgP@w"^ !m$+vC5["A 1A%hǤF!˨>h3Ҵa25ICe$9ՂrZfX7uLR!lz()GĄ!ECZĹ\0IJI1P-l"ޭe+l;˯/r Q:r!(4=}h״'nJ'bbM!{$ eAWU1=$=JNZ,ezrQsY ̃Q<5 0Rxwu 0nwj"Ѐ2@Voպ4Hj %[_(7zT<[D$pdsd#Zs_lj#Z n(C0dm7?.>B0nz::]z=Xff]x#5S:|"E'` 8yJ\pԓ55u?C1(ʶHZPitB .Fm?OH宑 !B3!PgL{ pEjx}:@U_|&9E]lR, +!A?=U X.YkևNk;kkbN]1B `PU)R U] KPW8`fe*kd9 pɬ.~ξpqnTƴbLʯc]q_it Z&6m<:ei[DNbjg{pRMu|>DF"G= +#//g@:]LdzVWT{ Su;Ю<\{/F ~OuU^1NW#@EzgABN :[zx Ww3qDqw fZ\˓1]¾+s'u_fG xN١a-a> ޾] |d`N,u[ fT?3ce}E:)X GV-i.yLt .RBTJ_u0L@G.i$w"EBNl!DygfpCԐ;{29?w>gSdor U,N}ᖻ7< WCHe,JDҘ⛮?aIx4M sI듵:i@wډꏧ'{>9|߷wezUKlf(#L09FtsW߮ 皆@E`͸k*d8d )$:S(x1ѕ$a$0Ē")"W宰j?CzXN#a}/s ?AQyMSJQrW_eG|'Z f{4JJšYW7A: cK7׽{ p<z#Nd-*j3$Dآ.n]̐K/E71$'v~_SV!`E6o3&UaNӍ_{ð*-i 1t[{'Mwa` hXN/V++a+qI=#F`/EG!=OŧdQ-7'29%'Œʼn$ ɹ=:*C \O|Ԑ Da^t_Tsχ:%~eO E4I+``Ms!)$zk/O"-Pi?1_Z+HE٘B9y*}9FzE^YL]['U_ȵԪYڟ_ !cl=zu0c믩%XS f&`]O/=N>3ǺgkZKOeihV J y$dgD b1nJ͕uor:@^M?W%ʴv7 \ˋ7z{cѺ AՑ*fX*6"#$fmYBFYa28@8&QQ;#`NT)?KYa."XmegK66{疞RoX]V|%( 30ߘ3`Ϗ 6i{Z=)MSH Xg[Ynn\_\',6aXӿyϞ2|)vgkX'FʮD,MSH&(sFg?Z?r α\ ޙǼ1hu܉iaa>Y \rG 7C덊K'-YLa<~\WkD?2'L0կɚh'HF^7~wϯ|gIz|h,WlJ˛R،>t({&nյG^"NkK؃ \K7 ݘƝn.oa1TUr0oMkp,ˍjd){?;{h~~KȚkRT?'ZǦ=TlcQD }_Q!1FS1pWK&᥌RL&rtQaGS|:QaHdf* ~K><;mgwLЖ]Ѣ+[Q: 2ʀ *IGP%(q+NǡG7.mGA1 3?+?1@" ~jbir5v!,@1azYZO۸ml7,ZqSkGzC u#. B̠ubNx58"s ?EƱƤzƅgqtLOhK!Nvx:#z`byiH@Ȅ"S Tmu1+ؔsؽC׈rR>MR'T/H"b@:Ft|2'NQ?ǁ6dʀ>v*i@lb.d$zm0FSj}rc[[7h뱬v)oDyOlyO*9? YV.,ǒZz (XN^frP-4@'zo=]GV#x94۩'z12H $3zQ KƷa] gUώ\ۣa@L'~ꞡ{7l`~34D.p4Hq JL$2ڂį^K^*u @q%C ,qI.F pj$qJ%~8u!.ڊHG!¥<=+&e) '>۪S( ( 3f1v|McBG2g*Vq0Ī}I%$4,`hk56vUA ƌ\grd#JTBۚ仺ǰ29q75Zcm 464 k 4/<̢݉}/KYF 4y +M !D\UoY^}KD4(@$6lg@uJ>8B8̈@/QSĂ.\ eV2?2|-tWY$x"4֔(H?_Ua-QExAHOb3яLBg{0KMuCY$\@7L ;iǣ_~ף[fp  DDZ*gR!6Bf|RT7dwBBuLQ%Dۖ8XG-ⶪ淙Yx9n5 h-D@ Ax  ^0b `jQ0T2!l.sh]{pY%DBsFT`+Oˏq`?!yMNyrl['Y@i't/|!A8#dUB:m Jtv.m )%oT,X< .'JM YPsVЭ ڎ(ez+IW[v2[c;&ᦅE޷[QHתC[C<7`tY\: v9&\/[jBz7RdD-4Of$8bwhBJPw!O,B%Lr ^Rg]JndJu75+]C сLٲADЎZ/\LGm/?Ɗ ''.6|WL{}R$;L&W3sUz ym>l~]$R.ffIFM7s﹜] P:P$<^9kAwh/\>N&MAeKqhZAK+53/so*^ʹq[ښ z}Iᶤ ǟoaU(X;w5]J%*T9Dvp6<-/7pelo:}ۻMvcMl^܂% 2@2w|wUƏ[GO<)d*S I޾.<)!'AOTN'$3:豰ku/8?OdDRP=DC<}M˿i˅3\ dNl.QWgk{0CB$zCjuvD ;/&ݭBs;{MCD6:&)b+%h#$48SXWq[xfA!']__Ʌ.Yn.֑q!o&WdLP䯀3hDTkR B+ hkgш!Hvn_]_<>$I5&3[vJFuaiJ08IxHȇʀUAF~/y ڽ{yTDRtROo_nhе\#/sV6hRQHV00".Y| nyj׉d5yv56_ ߼B^_R>t~ZҊ& l԰u{%1g `?SwQO MYd:VV*H$L]A#GsZLᏽˏ :uRfg^L߻=(R @5'}SH/55>Hc$fF8ukvgs v#rcoK-8٭חҁ.)QU,3|5P#q| C,Ħ`H;Y4ù.7jY Ԫzuf]/T꒔c:UMp+񬋖W4;zծ1qܴ::5;KcfYd |` Nl:"[Bלhi@0~m߭ yd7 3VВ@ dIGwE]r_& w:빼!8 ҠJK۬ulؒDbH^7ܬQLjsEHJmx! S!S+/8LP/(-jچI$hMVIǢ]YI6)+O+10&5DkN2C ;+a*<H i.Cr5s2)$K8*=6]4(uѣ,HɆ/ROVEKS]2}(~OA^E "$/JcETaסjF1,20F4F4TXFM FDi6SRhk\qqqXG;й=S|L+ NrIaB -ۿq&h<>y/%<>ֽ^$[Qc4瘁4fz-_OC9- FM6,b[<;o|_߭T|-᧴:MVj"gk? 轡k5W 9Jy.'ZJga/].NV,-pI6WӼ@SZ .IN]a\\'9)jv>U76u[^WW1p}I8Rhp _xNKsJ"+4TQF"}tTUp6hLŕb&>3O"~g + ?:xmCHKLĜ/>v8wV=՘BI%!kI/Lvzo_`{WQ{Y$O|ejs֖\Bqs%,#=L0eu.m)Ʒ1v:瞩bR,\I~II ߦ򤈄i` ^#qI O; ύ-1I!YX@a-@|}\Ұ7HJ7#ȌV,Xs7\$v"#/=_g6+-Bq [1Tvt$DKӉ\:\f$؀[B9Tglo$0cP~+2|U7>JBA!N{}rS7` Wnǧ1snӰRꐒtp)ExF,֤uժ"hD1qMX"RҜ)@%7,^w"iӮaiD\2~a@ۢIv3;r5Fud¾`xb;@"CAH5ZA4~WO-;k4 qRx-l0*X ʱi JsJN$a$TI"{ފ/g;@b }HϗkQ-׃lIssS7|/r*9!qդHZAZiERDTnm,7 nB~NlHq  0G({xgd'λ'T}c2>_@L{ i6u`h#6eVi2|h\=e_Y Glc\Q@}$$$hm]7HjEm 84h\%hr*5B2P"q@ob{sl/2լe} FеX؛m X0H?ğu\0\`ޚI5dv=lg]׮ +VNm D$h LLcjEe/n'j wRYϡMkDS h:."iL*&yx;+',9-PXů3y>aD'H H @g>uRUE1As;Fh^ѳ!OjJHf@̈9TtZ?R>y) ~tpi@muN|xYPȟaR5\wS}>p5ұUI%OXBGxDI -h] Z4?{FZiI}"HV!].ff&2屣ATkΗHɉ-RNד~'UZu \?W {GV'y̋ ΝDiY.T5g~nS{e<#̘ʒ2ڀ߹L5D 6)!BA! 0߹k~m"wVZ+շlԱy:o^aͅQᚵ{~TxPU,k1ƼH"!H'$$=%~V 61AͿOʷĵarjKQ2E^%nf 3-T<9fk P :xvD8oL8L#% >F8+"-y^(DѫO=/WR^6m8e1cb xU@MHlxbVVGtߕ!h'zhՎ,yb\): <@"v\N%Tz5 ȴ&(M&ifz|T~A Qۭi8)qqTlB}o$i%ed)KvV٣Ra91fzXG5XW; Wh8$ WRB:G]wj:]Z ]nNУCi+*s?AOlҎ'ZoJ wŖ8kgṏ~W͟5JW.]jJbrw_CM㮇,lɇvUn>Qu|N,yX$.*6 PUdŏShަ4ޗT.WxwCQI<CVOq-sg͗sK9&?êwwgXW7tqOAD/d\}Ѫ/Cy1FMhUHºCIBv'zDz-Mz=E3y){,"C}V׻OjUif׼\Levw}C3݂!!rDYI+wV#$!fNwxIυ!O܆!}ߧڶ b{ ?4U3WG*\ VFDDeHQZ)`Ҿd1>Yu'_8a Yq hHR aTC"9({kEwN[B͍o>6YMS;0JF %I)N63;.3Yݣnɖ7g&?稴l5JO(ג&|{p3oOsDSW 1L7>gz0Ԍ&'{"Hxe&z$޼WyJ}%S*݃1K_H?kSw1o* .%\a52ٯb%2cyx¢&[ԱEӏF8[Jfݪz~zE,|)|8G"EiC-?1^c?TPb=# 5|Wܮ6qw?c7VV:6!s$v=ƾ,S;- 9\DMءXU C0TO]C|$Flč91[pXv(y5mb |R#ƫ}?I?~ZϤkwKlPGPF~Bؖ hlo{:m&219>ns^x\qXUtDjнy'VNR;Lp@W?:(ː=LVf Hvf{}fOX|7╫mcWuƽbıRCE^̙h̸5$<konߖoqj7c!}r0"s@ ջ4 ${CjL"x۞&nO Eُe{:TS+U߅5QHX2ޕ<쐔<"{Yhl=.$԰I8aā[+_}A}Z.77Nbl6-DD D% (y3, |oǯ?!ܙ} vͅ iC[NB4Wd8M.[cLih;qX6¶C mt )YQz%$+Zrh$48ye*]6&Ɉ8}V~H@AH8.-s@יdup%@h١%Fh&wwN/OZƖQeo;(^"]0\0R i#L!_?eώi5RZW`@Ln>(VB*dj*-eUƳwyuH$(2Q;Xa6`+!tZLpxG*;5 B|ktoUU;K@YZpZCs%}|\rX~uSo%Pٸ8 z3^" ? ~uM%DZ뽥[73!J $(ɻAC/䦼ӆUI-09aN)aSQrh"DʴF1w$a_#;s8#yzFX5ZkY01LeMoOg2#W`  kLa ^חLu?)pS?H&-eց'1+qj ]ןg .&#n"hLÁtbw_٫r2mFf+T߶Gvd glH̃opȄ_15{?f'ǎ[;~adѬc%a9oǰ DP0Pְ$2QLDّBe64n.ō> X Stu&0Bo4)o,\ckoHHڨϋ~9ȥX C ?S*wRHߞm7!rr}g5\oV8W186b|8V۲wwsrn {lS=BXXjM3 twpS]i'!,wodw7>-فʭ^bdQ0Vڹ4#o+;ѝH6ْ+OCPu9Ɣ4݇\6Geem %s,S*$̂lǝrgVVi0hl2ޮe}C W1,$_.>#?O_h# H$$AWFBgOzHy:&'j,'^~["2"!RX) iD zoջy']墓j"RWfƫ RcD&UjsHlC:Dˤp,WֶQ?̺j~C@k=7Ch  JSizqNaτL$$>\wfI̾ʳveYaB, -ma^s4ZI! 46ӿ8&~{/5w~P9Hİ߄Cl$"@,}wts_ɛd:jFy[rCo=U)ȔaΙui'o5SM .H!BLpɮ P |n"7^ cI6$ H&217RNȸWNz+Gᛞ:;MHY^}%m IH""z<-~U9cQFzkJ3J+oĊCb\Cw5AFZcrsk;>W 봯u.E#K*n@w&EԶn%zO[}3G?|Z T_lҤp4mmM < :le HfcYz8i6&H=S.0 %.::)G!7ʍ`ggu,ЛgF wH㘨D軾Jb3a *J?UœNJG'&&j !i9_3PzNU@#_lp拯`'%}E]@!W_lgoРi=F8%Mak,ӞSLH47\^ p.߳zx.?뽈Ƃ[@4XnCT-3+Ӻfdؕ1) $k-*ڔc)m?6De擷h=0ԝJe;"%żR<}P6+w5QZJ5J Aߖt.,HXqǤۏQ]oTB[9>Tݾ7 R%duvO+E^Du^oL]0M:4b2I!PBR Æ@nV⵬e-2t2hRHUB[d];뎮]R @AAFGIӦ4 5ٛBuʵNȟLhYtJ$+ӮM=͚Ҵ3o# BTZ)ʡ$̦mYIʝu4t?G1Me~&pIU맴1]o"{'OoA8}G"io493ؠ"tQGԌ.g֤xښo{7kEM31a sF61d ˆLm"f3Sf*.d Г\ǢHMD{ٜ@Aj0 ]@86G6PzLH )!&gY똂aO^|gzjSwAfڜt$xͣeHOCgS;rjnoo'-'$e#qܗ!ͱNe~ʍV} >=/&`!DV 2‡,dKe;nc٩C8IVyzSQKYV1$ V /{;:7!>$#^c?1>W-י[yh׽g&#l3  `%B6 [ۢ6qg5.3@,!aDH BbTpoAe$Hozp<=terh7=~g3ή"1 >yKb@ BPFSʍ*WX+ec*vUKH;N+m5ц靪߉,x=I:3j~ uk 9BEv‚VEaޞe:&^?w]H8lS mL5HhQZS3jN}㟨7]ja̤6&жo1ǘXKv;|?b}(a xID hh05΋6Ȳ4A=ڪ.Q$ Di}YWC%l[f';U9Ė,Mة'Y˦3RmtB7@,*uoُJ4!!B6쾋 ծAD hfm0p3!Tin$9R./K: >Zj0nvN+9Y>9Z=li9-lQE_3D"Q.kxFE4',i3l 2F$cuSArLfWB;0$M%r]}ue% wt,U΋: h;"IC (i6V *5. 9l11ꪺI[viHlOp6s.! sUe` ij}=%HѼ- Qנ<$L*"rR2M<,}$5%% ڳajYbenKĀ2f,`:ط;M9FmWP(=R(k^ʸ=A>gm\KҐ`Q TP^fGͳ෱(28x+>=]{"@%$F7=,)R VpIH^KzkAbGH~M vz:O;ff6 M\Rwv;IPiO$s0-U7vD#HfuW_+W}[[17}AO& 7ZV LU^_">fSkӠҁ4Ts89Ge?X oZAг&O˯ËOJjROPd"up'!@\)q=Zj0z"r'OBz蠞 . Е*\f(h]ϴVFm馟IO t㪡o*R6D×MXml{x'a+ M;ܚ+TQ X`q;ZEV5/N(ƫlC-؟S}R,*^y[c.DD\ 4DXhmS{ ܽð{'>'!gDž*ٽz!q@ZpdIWpnr"7s7ڏߚrnǓJz"!':|>|h>OT[J{P5(% λ7;+9x6g?1Wљ.K^-IN\# p /^T3z|\r;禃 m,؂m SZϮyJ7&5jhZ0Q2<WV$ kdM'1EQ] ge0i:U(H%o'sc3k 0'L2gHԴ `O'\!ePտFK&EJdeI拵uX1VpzE~C[#ߤNxVGj/9dFMs| . F w$ R5qp`٥qv oa߄u?2:cj7{TKwU‡oǝϽ9FTZ@Zcl 0p{+Z@m樀JԹdEy \j[Gz׃8~HbRVRb~9pnͷu/%G@ cC>Sb/h!4X\N!;4y֦J#ū٩#"!ޭ:^{v?jRrf϶'5|ZtWZo{@ݨZFP&&aвH:"UcMuZLW{iE_OK-#Iy5Qtq}͟+r0)I,?^|a/y:O7[bWt7;6F 9ΤLrESFI=7;2Kioq|OTĠOL` [>$T_ T`;+ED )bþBHE,f_e 5p o,XDUs AQ GaN#…?o}/k#gm+E,)X(Kѯ`ǜu}Pd _` D5MO*"W$fy^u;/+ YD¦) uvnv'0 ?w2HQuS ソqUmmͪvG;\3n8q9xV:7YNfHf|os{ {]M)E)%G=Nwpу,>J'#g/ ue8&º=O_|Ƅtӓ$t0cRNy|n-V̪UV{UTG> tF)S\1ƚ|fю S-] Ez; 0r] ݽRx4[F-񺂌%65jdC=3OU<;ge$N:K_L3I$Qԧ3F3)P`5!x~@Cl+R|n!o<"~ Qȹqz\M:XC!AS|P:xyF_a K bo<4wTkKyfy'$k꧂@NCȖ-!(h y5jOjwygQ *jNdMNq?OYF/y)R”{ŇDïqǽshνm)m4G1^\CbJA6Jal*w4mcG3pctQ,o$͍Ztkr<'_aƼMIޒQyR.iz؂Ϊ(dNI_Wg69Y~m}j-? r%%HU*)u׉"$rz~G>R_l %q pt~o_,!3Vۦ֒O#NG6$p~3Yƪ.Z{^}VዬƇb Q3VüԫeͿ̕Jdrj,U6Ai_g6>['gjLqR,1gdH`Qek  9֕>lk?A"@ze {/q=N ${$EzcJ}}U<ٿ3Ypۦ!*<;rCˌF!`HK\ćA;xKwy90ĢD3f  W tA4IvoG<^q48DzWJd`Q9efrd,W8ty8b`dq`iN/ Q'A?9UDH 0]\ orn&iP#GDqN? -ACcβi;ovTweUq=!N {4Gon9ۉyhQnyاO@-F\@ _&Osb'U`w~r!%O2_АBVԃ D%)RjUKλ&M's$Z=_LXi%jJGJPfU~:^Ꞃ[։NGνF+S{R? vh ߳5Ҷ0mk;Jg: Uu1G;k2}: yJB$`-JU;jϣK"w#ӺFaA8Մ+yI$Cu fHl"bVᣍyDR"7r2A_) }gC tYQTW v!ER%Weəl;X1eѨSP{*eC_wHǪF?䉀LH ezujRTD,I6V/_uvm@DA}/N $ ˬB6m%pL"'D `rRBkV5j+kmkU@"݉ H4g1fC3؈}hաI#E ~>ϵA{o9D)xn ( Az BYMԦMVn5j]xZn1D3ߚ ;PT|]]C63T$%#)|K4FO't2aM~g u/#3@ YT Cw&԰4:_ƽiLM[y}.xPGƩB~1BP!.7:.B$e d2UKu @wvj]fD`YdڕI)>P}IR HR$܅Vsak~J dt3?w.C3|H՟|ɬrš'b ?KjNz".\0@nHci]f>qK5F&~꒩qL!;!33cIƄ/7dN>߁q=㭢7*0F-8VlM|uJ?{C_$:_'bv!DE(\[ʑ{Zw|bc+V#X,Oӏ?~r骢&`]gFxI[mP>[o[XY\^KPc1ISQY6uNH'M{|fPyBPDyR :X_哠^+=+hἁ_ίGPp*%i!0c*L{xIPFQ&`yesh8R-˲Zz䗣 aVsuTI )>Bы?#IrGiҙy0_y17GQW򨫄OU5q_@  4Z%A-@0! 49;\2n~ϻ]5xph?6g/F(Z,Q.Ӱ&7*d i5_ÊyVy*U>S<[z9rC,} Oz_ kJ)hGh+oӭ!qHuWnܓd61OoƄ؎J=å=Ju{mn o'U  SzOtɖD \2HB _'+@FാwG4W4oѕ&u01dcΛhS82P?4X5H$ZF?P#iC#^zF8kϵ4,gJI(zH̢HIF jl˧#S AӞw14{+jJ)8w[c-lc>jw?+c5*ӊ?rT0`H&)tl$2+Ȃ_¤6M)?'BN]Kr0:66ycv5֊ah2A# RDرuיuA[" CjS`#6]oY!b'D%JjǮȯgJ ñkm*rP>.ZHnjSj~D;I(+;%\Ob-CFY#s΋x8Gx/>l>cz $&>KFKʴSHzh6ǚ.< Lq(DM/q2HmnbmB,p6v 4}$w=Hk#~fg`D%5̔y&gW|gcMfYd0:}]7:.DOc`,̬~_|$0NGW)p%nVCCv;#Q ˻I!aĭw`y ^x.3iDe4|b uj|NxOa}cNENg_98*<, {Re#G\Ōu I4q\o|WsKe$oJ.vGڴza_^c8e+Q_5gԁ [#j=Ý'!VnnŸPNh K@,lPĴ1 2B&B63/mmo,?g!"YĒ]D1Ue(d2[t?(C?u.OrG!HQ!|> {w/Z^p<c* j, {(ko}:9ɠ@r=TFǑ=/' ri7u{j j "a " $ D[@wvG_(@F4LΙFdIQ)$+7Qeei[D`m$I.!!zv) [tVD[f!'q"&j%_˲Y] y $AFZG`(13ֲuNAbX ^?^? cLc|$B/GdH#@Uмd`1*PiC o|\=Y|_X.ޟ5J H@A`3@@fwN!*9, +ߒWݐ2'|Iq6B23 21DAA NcCIӐ*v*߯VdRٙHQ!ڞwZ/ҷ D--nZD@#™@$5,۩R=ڽ}{c82zS?k$fZ1+FQ\9cO-}Sf_`_btprR5%/ܬRbuqKڔYF> c07lYOk|k_+ a.Wu<([},Bc\ǧӓc1v;ְ;΍_. 4*=s#"Uʻ?";_vHJX&ҶU0T L>3 5hŶm׆k.2Z%'-+Vo3'{ǘ!x~>Kg thc:R-R;jKy-te >ml%NbWtA. :Vʐqꚧ|bVyI )@{j:MNt ]_0it̩YL\,δy{[-,w_=?hiK4a0TВsP!*0-z}gm8KUOy38Vu;U\g$,4l`I$@@2 ^1А#>r+ma7R {zTvV}EW{^*G-*e13HRMφl2BA?΁y+,.NN ~'=6MaERR_Ԡ$B;cZZKNBi3BTP u^Oc3(` Pm3a&- 8P@ԑ#Lme(clnS2ɯhN!_3ո:SfW0$59)PJFlU SUV?J@ј. Yᆳ~NWɛ@9UP QLϋu#Lclcs] pܴLJHr, MED*Q\fUͤ$-rbh@5-1=FCVn` ˭\X4&,y`bػ DJ3u " !߰R$CT_dXЀD)[C0"B eDZu%k%QHɄQn;BnlЕcYvv-$<)_-h9X6>ORGn4_W?IAJ$HH#a(y/`vEb̪Zz uAd"`e]״Q/"*Z=^m'(3=uÒ ιsE{E.{ylF6"놋n, On84hXw$7bᇪZ1`Ȧ&]%/czm wB ҶG8; P-bz$9N+'ԀY0Gm\mlĂ!Iw'zDŽCɪ"Zܒȏ F@uw yao` a͚6BmtBmiƒ>jtkg n7aU,Yu!n YV'0Ys &S]CJ S0љԒ^M; N(}r`>- Cė;}#>dk2^'ߩrbi*iU_, /v hՍ)Hc [&u;+r(1EJ- y۹7']2}JSfE\6_ ps0gtT}g ]wR7CarQgɈ, i~͎*FP oΣ fBu0s9إ  U)IܪゕUʼn c܆4"z coҥTJ+bJ@0VM ڤ{*j玦Q_pr;Ѯ9\ cG*E3z@U*3+R invO1)ovy==jxU96P4 bh1&3R#ʹ`1Q ܢ#Q +^ޘT=ƞeѮQbݭs*#$D;*?YV&Db u:a&M!\MAQ]ì;=N)Hњs=tXFbh|s'aps=*{c*iz-x0bAq5 xA}#nLL,K1cL7!4M1ڂ+{YǔʍpDI L)J냑2 VZ)sߒ_BjVrQ HsN Ol +[ǽȘygZtwCDD?ny{%#y uF֨qFUT ;#J0(KĄ!MR3`fT0{djgTÊOIi89<65oRz@_C*->`H @ze}F.>XJq $(Wl#à*WxWzCb$8J,3rED:ݓGi+渒}ꑬuF‰Uha'PoQdmZ޹o_5iq[Dߝ$&,ѡ[ ^w[eD3gA,W\|+SεRqIKEuX:^ɒg7̱0.TPFe9L]Tr@T brV4mL#2kl$ҺZ? Wlԯ΄߲{oȇΏѰ"H Ggw_nٛ}ح;AIXkFn jb1?7ϟex߇K>9P$ͱXt:rc+JY:FfWȃHv-]()!/U士mU?A oRУK례eϡ_3'ZO EWPBvp3gPrc̮{k&R3F )<u!ߐGpmvV"w|WvUz"ꧥ ikc*}Hye객W0پ}}H⑁Jha>($@!A$b@ h!SDreuRMѱ2C p ` ϲA (B]?U8gahG+<B2ݳ+6 E7vQvBM{gjD.PLWGZU6S.`8#a%(\g=WHRFA>W ֧Z4vU|be1nԹZ kdZtK izyPhfz'%D!XȸZi=xѩѵV[h")7vc3i !6&AoF"]kӕ >t y,U G3n01H qY.4?/ 8PG]QhUdX[*G㮩ISjC5fĒXb<5L xvSkm$;7\Cf%Bc-tma#z—f?^Tf0ZϡRT%eU]ѷm]R[r-fd~hi|9#KӚ);:ڝ9AeH+fsZ5ϥʑ*Fzn3^=F!. źyΝJ xYli_G3šYzz\~Os2/=KRm7]"T@B$RRA$5=U"sh ja10&)!2@VT cPCoe&Bl"_u]ZkTog\F0: B/q0eIk$PpѯΒ!uwr& ""Eػb7\ZKhFK8(C:haMYGJ :9X֤`1t</&<tR`J(Pf;\ m\!6A+r"7[QU"kƯ )ѧ)T=Ao2Z6ˮU)fu٩9$0ul]iimnGg(4 lr.}m!\(Me3i7Y1oE [%'ԡ4k]HD`Z Ö{]vyY)<"&qU"lz O)mYO BLm!{WQvq .YVAiSҕR^Zoqf)`"ARVj+w\{1aVSFv޹ {Xb=ݿx|n䠬Vz-1.}:"^}Rܱph}yxV>(IU"(5:SGk +(@Jck< Mwɶ3wnUr(8A[$YpCwRaf71| -kS;> TӏW DqV8!d<2vŪU ^5}m J_:G|O9CՑcJ8F$,s4yU*A҇x[fH:'J]--C6nNqzGmsMF JJcvďik/]LEOC%y'ty`IVᡐ-IRz$ÆY yc-2K]kL :>3fBJ|JRs,o^nʕ\2Ԉˑ([4[ %)m)pŁ*rذs=nY;J+cA<8W4R?J|.0d=ft2}smݎi#xRLpLĩ ZhT AKbdK a ?jPj8&@hR@Vy@2%;45h T`2JfbtC4B=%9(GRSQتg]DZ2N}:/QWp Ft*}IeZ/htJx2gɄ+&rXLSrȔ \5sl,/sOqɨy,(0ZrUƼy7!8Ƣ`uWf<7|L "}L.\3ϙQ-J{eC~>N@;ƽ5Eu=SiYW̤PTDtf*:|=ýp1)e+M~v &4ٍnR2خqYnp úZ !s8]6-]Ů+xx4QlpBvFRPNh35-, c\xd<2*wU #X Ttk%̥ f5a ?x+ oǪS^DCE`IiZ4+Lmh0r*LK,hn&sŧL;#E("A4榑nE] uŘ皂06gOb=ܜ#D;'fۮJ_nLliClٯObWPm}a]K@Y/c\>j-Na6hm8ccdK9,me *o 7'Ä=RZcă_kX\Ͽ^+OO$A91DrﭵG'q*^ZÊ:c w]#vDƯ! (s\8qlRh` N1zp3g乹*'RtcdZ89j:.L'&@2R#5 98خaN~1 k.*oFr]CvxWVO!Tx g#N{W&Ť2{W޽>]`Qe]2tc.^EuRftYz\j~Eak:1qH˒I'ϛ`( trUx}z #jk?/!6 ,#=Zf8h=Nש*F \jW{YgE@g}vGIޫdJ^w@s6Tj?4qTK oNA#IuV~ﻱ@Xɽfu|G(V4b(~AOM/l6\r%<^ py?<[:2DΣ)-Q]NI4T %6&LSfvkD;\2w@q7LC)f.8M-7KrJkc1AV~֎gD60+ k縙V C68m7k}VHkц%1y<Üor;ˮl_֛jrCRz;5`yt;hԝp84W`guJc(ONdCު$фR3QFx& ˅Iu utpiDL11u![sդe);6DtY[G޵.]C{cN~*N~2m2dEѳþ~sDMö$7b#͉kOY0mi@ޮ-lTZӦWl\5уzIopK+yppұb8aUews3\^ꝛr16]]K9\1co9AEt:+3G0gv 0UA \ /=J/1$U9'u[N+5Džژi10TJu[YaxNOAb/x>ߣ CfRxC1ic ~jwp;+kWկ!rʢz Im(N/Sq8+i t4>H"Dnn PBV2C9P *` nA<Ɛ=3 99lr|{EByn#I-O;>OQBњD8O}Չn…*wA%h#8\`"!K"Hr9;bCl9 kJJrJA> +ꌃ ]US^%>` &U_%Ywo .K]fE0ὥS"RA17d$,>$Z&Hӱ獫ls*aAH9tW}^<oX$(M猎7hT= NF̏cQKh*)Yiܳ3~l۵ț|`|jzk7PO4Pi 1Te:~oyߧoڶZE޲uĦuLKDBO}?a}:1% 햑UguڀaO>zE0pDs)W0sQޟ0Vbf a>j.4<Uc(+$k4J#_*> )w-}϶ ^}{-]}Umkի{w}K}۾}*gs3WR{:woH,oG={1{9uoM˼Ziuڵtk*+BBǺH %QvВ*QA"E$@PU!D($gs<"KhJǃH  -R>|%IkレHk]ݜ^a=`fv1lqXoJS|fuyq.yޕHՅ[eJƉޟE:X}kE[v;!uc Bj`uuC̽a`]^vBW{A@f{cpڔ\BH)6 d)PP}cf^@b4X;Is>@z%K}m޾|,>^+D3j$C5JD,3@s4t;&jvѠcb*%}ǣ'P+hM4&b Bc%U 82Hʺweo):)OJUJVXpa'WvЛcj¥unJE1@dI}Ne[hY7 2"Y|3:n+WNzE@>a'Lپ) Hf zX`xpE@Vյj!wHxr@0[R)"]` ",Y%*c ]ƼnpaIs$jewxf}f5* R4IKnڈ lDdB觫Ðn\@gq^!FY8OT<, 0HLНwh[vOs&,($j쮗lH|M?ы߻E\Xz?\E!*FD ŀdE!,AF QȲ1**`=f0X@P^vm$A2 (@D,,Q1A` $UUam*8uyֲI dO!+!4Ξɑ`(@" *C$E8T ËPL L!Y =`_x~ 1+̕djC2aPP@P$P?A*H`TVE( R?z*wRXJ_s}L2v!IH` ypKIk:G|coϴk"^óS0 ,רq(HBM)TQ}jͱ`Ahke6(B(N/N֭ud,D #JR{/l9Z[; X}T4s-k 0 Ў*28gK:r`_$µyܥa s89n*<^w{f&Ů_#_ݩ̕r. o}D9yC'2T9 "yr kFփTU_$\LAB) E()`DUbQE(H())"D a` E( H (H$XEH#z#68| c0,o8'գYF pT9 n# #UV?[9ë:M~mFקu7cgj{u5ЏE9ΎI?:N'N dWd1#ʴH"A`#bLeA?n3T?z(?T-h֧^趏n#`$I" :"HAH%B,>s,*E~G5{Y,ÈS4 :?{b6>)= 6yD > o 1!x!dž{hom!*|A>Q*/ sԧn{I _ 2R1FiØQr2\L,b,VN ]F5<{%.XA`1O_Aq+9ɝo 6sO{<+[o8dQ0Pt2z6Â_=]e.KvV0w`x n/sZBR؇gG?;_{/{ݙk9x>{{y]~w=~>/}/9͍6Oj/-LѢlσ^73_?}guv~뙏k{?7}FStoY vW u;/,֋gp;g@Qf`{/ك1Z;.&q.A` BgS/`%nm<:b.d9'd!&K8:>MA'Nt|S_V?_̣yw&ᝌl4-m?mNC8m3+w/̛uz6ݧ?hr*Gk۠acP#CH'9N7%Wl{[9 }ems`GztL~̏c~Qy:[v~E1>v[}̯;#o}=Nq3c憾nTj߳`?_sG>x/ʟCh;3`~۶u^-*?c*6$k7ӴDU?I}s5G /uG_<Ŝ |ZSk+۞s?{=O=ݿ;ϯom9l3{z>?/m'OVC-*4<;=^lL؍LwU>#Ҷ\E# Cj5vTf}d|R׶T֫Z }%K8C 7ğ5)ۡϖJ"{.{o/8~H}A?"RcFEϚj18vZ;ߛtCvx9)HBBMYBe^YQc+1@\k*in(bk QAES~Wf݈wAc[|dҊ@I9I4z4)5/f|aܛq+\.ߥܷuP:gH SȖaT=ד˃PKO?]KCϑ=_^lsOK>pDZ9$Ee,`ʩQFZV,R*@|)=>9:2h?Т1R2,qz9A \Q g: Ja6_x Jqt%5rỿ EO__ۄ8cGEs{em|b`쒀>c]d_fy<9;ҔK+HF$'&њe*mCT*2C2lzi +"y]I\'>U.bu D1`1 aFE-%-u)nC_|,ej >b-}oFJէ%M*gZ;}Y&eCSi ַ`/%$_4)c<2@2@ER @-DV:w8{`eӨaR^'k٥}T*%_td[*Bw)aىVI$\gj-SoH: &zԼ_x;,YlU«_ov%-7W'cwD:92(h'1H.2"H/ [ cy8mH@Ug.cŐ j_z "  >v P̦%'=ǭύ} aվ9z1)O"G{jQΟeBBW[4v4g"1 "wyɁ$X H)!:*j}ya{EE͑dfýC}ik}bQ6FL66'G׸_BT}1bxgqX◹Bva1Os?- A&?Xމ)FƙU)0]ҙ0B!Ye; `=xYց[ujc泡M}"e{]!i 3g5lbr hl31Q ְJ>kRt!c^7@ "gQӠbz&oH9Xyw|;0K@9#amcA  D& qw.o'L }ś=K&g`Q [w3y#0'O1z>Iھ(࢞VگAzLʴ[* xB)##$>Ą̕ȸ+0ȿHD{гc2-Nʚ'nT,Db@E`$ܪ$Sy]10ުŃ180Ot6!,6\8w/("u l )vVB@Wo;G'Z,=!+A5ۭL" ,;ux?Mõw\C,Bpyh]|OzCބݖVU[hD,hHWO=Gp&C zrfrƌ}+DW Fs"vlyF֋U6pyu$Fcd#y+JX"I UE`ָVH=Glo3Um(SǓ9C.r Prv -" :/Fpl0  9폓ϻ03XShpoUV,ټ`bpZM@+v]3:yϫ o=QDzSd=r"*ִn {:$/)Orc9{vpyS5TQLҤ6'HT=7Z,NAw&,דbE'0n gXRW@dהhKVe6a_Ւ^vOga~ FبtqZ`zѰy"lX1dY!X   2F$ H%%VRтdې犽cF[Zϟy=(@I:, @3T}JѐSlƹKZw:^M$^bZ_"bHX{xc]:x9^HyPdl3H&mV澸%3F˱@kw*sn@װD7{ES# R!h;b3̕5Xb)믱[Kh f CKZZ*-2_ !!/!7vChUKz֫:;~uVO^>xw:OU?_v4Zv WUXoƺHlcyv.:\`I "";oh=R=vwW(Y.mKX`M6!U G]:k#2C /m]Ű.*"lKu,L$&Q|lDl6\@hʲVs(BB `ZEѓ2!-hP7tױ{62myA0AaF g!C|ҀVLaR*筺z'u\Gx'^$CCL\(2,BF Kŷ`UWb%L1QԶ<.8ԠR5ρȍ;~Vg!J"#=giN@^:,>bJ j!9ۜ%tCPRԦ@JP+znC˭"/GPl,ķdliQ,=b?i," "XKvޕ>M&]RP0v!l2TbJXIAr1AmapD8 .8$Gca'#13Eȼ3m5bhՠBPDSA]bδ1LLB BdݏC^Ε2;-oSw^x `5SH\!!cxbg嶜swOm杂"մAP] j,_~*tbA#V<"jZKyB߉ۜT6`[u#{p@YN20$;^O;?7XS4cN j4°jZ8QF#=;~|O7q[[a^$qY2lᵕ ^c{4>.* zn~5)BHI1&`)fR)mnXCW㼆cL<%L "zC/o늢K *.SeSL`0`,gswۺ2Mu1E ZQ KS2BFZ cij24N[|Cwen/{G;:0I@k6:83؀D7aH 2Hd ˁCuݞJm:.ld ufK;a'֐rXq㶡Y,1#R/%]<* 3Ld2q3#0e{FG]T J#@ 8(A\~[onx :g"!S?[WZbK$\5,41ȃ{4@Ufg Z` /![^{Þ$)%2,IVi@C&d9L9!e ݭJ-xZAdjMe8;NPC$ <|w\Ҥ:TCVHjyy[Z)Bנ;e'o%Vt=ih @r 9ML  (@p*ttz{]/Gt^T)$kq 0DR̛ԛg3x5$BHJ@9@ȹˡՄqMlH|NkI|D q95`8I}ZllW4`<Z hNsfp-b3<>_=[[~2(1CoȦ\:_Fsiϓ #fޡ9M9Xo_5O.1`k;ڬhu}_nfT-Bq^'8^/0҄ƦeML,htcPL : (TQS0x'y;nE ׯP߰O\wPs@CCpƓ 6a -޿ 4eh7N,[qk rrKKu;)ii[ѱ$[o{#,$)ZLEdǖWi3vw&IYPm9{W)6- `uSS+hbZ4qRhaԒ:!bN?h`n=h^E/PCG2"9>`60fA{YCNxno+g])t0#^-uwo2FFw㈇ KFzFAae,Œef"&)V7R\u'X!`32 |C *0HHW[ T}-m?*P[eQ^Ɯ^D0lLvY |ƈx1}|<]ރ~892f 814X3xXcġ(ȌrV({fyp4 PڂoK -fP.@C;#I-a\7\L^֎rsPٔP3 ,]fC@Xp4%6_se3mqe𑈤 YQrW[ҘXՆ& O[$;msN'p ܛ*;JAAj Fq0 4X@&>MY ~Fw@ X2&yB"ȴSNzvZ込,_yD#РjW݀yeW˧RZ5Һ9QdYd^nvPK͍K }.=;XM*` '^4|gP;j>6g@z;WKW {v&]4ZL,$؃浆&V359VF|pӡbB. r)d\ۑ =Y<񧏎RmN^lR+5&Wk<(HGnI-M,E5({^zY` Pvv.)̄YAh6)u ;Ύ >u :bk usU W`(T \a HS*I_JUjN)Go+˒gef-1YQ+9)Zvᡳ9E&N' #B,%5e>mK+7ZVO@Ӯ'c1mwsmɊ?F,֟FO$. '_jD^@-r}bQky2"^HG.T<;b`PC0wݝk!jhv)+MjCG†?N!|,-Q`?);?hb&$ ww/j ߜ ܭ8#ܻ `BF-h)\.l9{0ã^Б=:_aM>E(a$SċAVq>IH2`G~w=~6č3dxk\VS3QIy̖.tǬ&?W7~LB@0#@tÈ4}JkKKtXlp=u)/'"=' _GNC=}/GQ'I}}Dsix>Gu8^+o iB(wj4)ޒˑURHF[V'D]KmCmsfY DsU{m1t>'7nEl]X rm6߶|?OGz}-iֺ lɼhn}&vHvC- >dm߇3harC0!1/]9/4(;a?;jtZ.Ƈrt=EXh'Fk͈ɰol{j%':hk1pznd!:w=߯π"  "d+]сJxYt5YrICr2[ۖdfNJ5Y(=r"=RO{cgA*> Tjڹi~}ϛps[.6yݷ{]_>MW;#yqws4EzT{k~ߖ,ǽ.G?ϏsW0{[nǏ~_~x~g&6rGv EI~s}?75pɨ+@aHL]&nANzxiMx[.Jx{>۵6EL㢐Ъ8Ǭ, JiIE IeҔ_gij i,s򊇚E} ~{7Zf@o<oh./NMŸ`e/c@&+,xhs֋.̦\u NeU9UB?B 2!; YqIl} TJYL8?\tGh?{29/ŦT "W'?9iv/{}!y7;o1\mB |\ FOlk:0&+RޢUr@Teרv{Q%t&\jc9,9Ј&Q`9p%Q&D2 Oij. $\l<,kYDFtQx*ui.I=jz!`"45^b65HH !:.,si^{9/ 9c I>u*Ȗ;h,vF,]fȲW@CB unYEM72Z=!#nQw=##.ƣ qҢw 8͟]S+ 09+RݟR[Tfj)gϱ5;5AWqaΰ蕷)0㎺ m7 )ٕM=MBv=5!FV*soWfs)*֐hD\U7BA:Qv9Ti]C-ar^[Y.Gr]I a|jBagfIuMZYx%tד!fafbh gTA1iZ5\.d"Yt5gMN"1`c%ܝ0R$S0@K&AAf $N3L3e3&n/gmy_{JTwBĹ}3h4u\(t[A'5%R-֠f'18wqXs<nd5Ś;V *SPM29ZYE7sM⨲r v[G|̆8-cJEATxwEMv6NLˈw'u(􆣆g u>5ˇ+ qg⣫rĶ]l;P(,a6pt7 {6L#a CXݔW]8;nu֝{B= 2)FAxE*Е2#L[S<"'20!)2j󊻫v¦3whZ1g,rp!EDd $JJi0M _NsۉN 8W4mD4}1d?[)Ќ; \a")̐ReKrxGec4 I,ee֒RR"B4Nf4"/$qJgDܬ3KwCdFleI[U8Ǣ["kvrfpCЙ̊(d5\(8eS#:UDi禕r͢U|aW_iՃ?&/ȉv@7#w0hSr\=ׅ- U'k@\ֽS//Շ `4;޶Փƞp`;pU;xZ[4XPiȇ lbH"2d0QN=SwzsL=[`͠ȚJ ůuxԕȏ_l ;mna]=ea6pS up- -$7N'4l$< -.ɒ-]ALtLkըV"Ș>p>9<)6FOJAuWan|͔gAScFԑbt+)W$@ȚV]`)Fv1ndש'WnKX"bzb tԀ-P')(b! {h ɡ8T/DMX't']=(Da>|iXygXT`ɆEzQS\^2֧1ͳƶfzbb]w+%f'9"\aJbîw{8dkˆi0nGs~YD?o!:juom5͆b~>q 3s퉞;gڢuH[?U\fXxЋN6B͆39Fz؝lbfy`~j|CgYi'o #Q 9xt%cmUJf〮T=4[ *ː/c4vbx0Kƙ_i%MԳsmaTm &+VMSD&_d@k[*ar6W Qh önZ= ga0.K mit5#IZRu-J3+S'nOgO&S*[j{0DDFgV>BF?v2jk.\my0Y@AYJ0TTwc> X2L2">W[ H e&ZPB${\h[BҚtW&55P59]Ք^N1UR7zVG(a6u89;I=>u4䲜j3U}`7V!nիw޳  c@vl,<L>)H!"]z.ؐd$9r:uui:F#_ :Ќm3!jQʠCʠM(YU"L b,5as7D5>EF̙z΂O LayNk֓~OO|hs|-#>˪ ?qæe1)_Q8ze}nzeJ> 67gJwm鎁ƿIgېCwnZu^M= yF<ɋmۻFĺOmwQi Մ& ؍_z1Qͥ\ ~3fq[daܷD:2awW]h("3n\wZ9ݢN աm/ӣbl| jt*֞Z|C`ZS7 eX4W]n~U*G%q^cсےuQ8' ''>k!^+.IGm CL:ٚnQ#?z{LV+Daf1OnQbvy]gkw_Yg*ѡd$T5dAtL遨4餅hL9Y3{g6.=HՂSQ1ZӝNN8 8q۲Zgh+yv7֍s5ܾdmwߣTe#W\ok0Wڍo( @ 7QID9Ǣ*zX,ț^EW+ tY=~~>5+Jmg? 㻺2`0$d`Va6L1)U#!xspɚWʎ=2[owkӳF޾t1۴T):912=3O߫]}F~&Ya"隺zy^NT $zU-VrFfm=ٺ4[Kd96?#UjQW=-H8ݝkd/6 eB \!t2rʂÅ<4B2y|ڵAU^JӘ˞gU8y6ҽuۺB|EHKOGRfE)pe* oViCה~ǤLz;`{6iR b>q=B0'&4yGzkJo)ۏV P٫[4>hjO;1eLA՛i4i `%Sj)q>>hkuw]C3yNvfk@}zlP웏UgY6p,@Pe0YDƒ9rC8YWSBXDu wj `"ʣŸ UOf7%J"H|gcQ  ~(oO8$Z13}DT.1[Cb!.ҧ#;VDWm^B?]+( Tjeo4OUb{%K)AɼlqH) !)5(3u:C5XcBř_R@m2 obǵx~8_'O`LYG N }v{W역:Bbݗd;م;`'շN<&b߅U; Y#W]}sGnT͗)T6Uo\15p'LnJҨ|՛*0vP)q頸:'7}'aVz7,C]+430@SQ{>} TXūt嵮1)|؟KMX1Wcr͹Z_nc߶/]')ox)loE9ǘ64b~mJDŽ%RU<`K/ aE; i|=,m5}exwWb4)xEK$\P6/,uó]SWn8B鉝ܗ{!DHn"+JsK U8D\sk#ҵixcGtj>~%,i./s0"S/K FalxsQї)N:o^xg{r>xI!B95I ҃)oG*ԧ,uxܳ޾Myɽ͜q>2DYdʡ-1əvJz VLC}7Ymʢ zbv+%<wݕ9mX\ӛz"SOU Q%\@mC6)&UaL1r`f@:, ֲjDmH$n5g b Y>2KOa1w#6)ɉZHxtمKV1VbM-K~#b4 ~Ґ ;߮S7NNJ tt5yNJ#dr[۱Gѿƚ`_HYmS-Q1Jߪ*dy‰!uQ$/A=-TWfeS: sb+P|p?u45pQ,sqeNeL8ChBD(F:@jK_RUa`2d6M <( q+ۣQ/Y"ذ$_FJW, 6ZRݤZ `Ц-i%#s6]6:#>3'fsŕBd :ՎD\9Fq 21ek;BFr} (xp3$0C$Eol3; CycN .}7\3BY%ڍ(,TSe9_H>(֙'Itd\!?E;9L/o )~\Ik6 n&1X]c8B \O' wrǢIm5CMNIX9O3㋁BΆiɵ5kV'Iۥrs m&BTl֐~dElfٿv5t2quTk@K|@a.? W{ZVLGe#g%bz>=Á+NTA KVJk 55ѿ5@ {QI[U㍂ xW+ _0*Y|ԧc?{:S@*!4w0S#9qWSXS`z/tJ-%±unvgS<:S `V?D¸1Ϗѡ1q N!\NHt7b mm8J=vDOzd9FPLP3W1[$pqOLfB^۽}@A Cb @v-֗bg U؍WiR ,lNR<6qө|z`9W?.*]I;){Ll2uCC[8^5_f$t8f{|-1?JJx>!sz7uuzYέ#~CEh;@=oUI7ݛQ(P1p&WhLX5)K$k/PTnNE W"#YF ]~d9 a$FBO}Q{b>;Wɉmw 䳦@mꖰ$sL <;vMz-fR}= DBx.,Tvٟd"eS\]X:Jnf(mB*\n`:Bg* x2*3P!g8v s3O S2MGW eImb$bϧK0`^ճ4"rHU,5>b}{<~I)1*M1C=DJ'7hS 890K_Mu)g=7 S_Rlk!"Leʲ4-%K?)md(PB5ւϩ*5vTǁ?e;#j_2vT:qHd4 $d92YҤ NtUI"M8y{EKp%ChO |_' KakċBp)ƚ̈].,p#Yۗ>Uc\{IJ2)їWwO ۅ?:9˃}Lj}sOmZoVaQi?ꙑypb<~qQO$ tB9ë<‹ V:6q ?pf$WyZ2 1QԤ aq}/ 40Li:f 7 ˑ}HOm%[n+(es]˭`i i~MoMZH{8t ٌewb7H:x+](#tz'Mkt96{,:b=VG<%5L*8r;<5o4E ԉB52mh~&/ptq>N񽺫+VҔi v&'&R3i5@FvH ԃ#َ<bχxʰW ªn,Z w&} 0Α yAc̰Z<ŒY;>ym/.L D:zF >̣= ЃOOEAu>cZdK6:[c;H {&kNBe#* x21 ->_8$CP Gq7j~8/o)!0ۚ:ʀ~*AzBGSI3jvi ҖgDS7DW.2lI_HdI@[rb4y6 $j=MRc ҬRd?PQ?azM[$e5kq۫XF#мᩇL2؄&*V"'W"ka.rKp܏@#pKjJ=p#L5RUgG7J}wAw1A{ /K?6|g` .ηڙs`CIJ11+'HWf|?jC: 6л}} keu+3Eѱ80Ȣv= D:2ޓL,.5ޕ Yp]$QXeocϺ59~7$fzdSDY-Oo *WP ooT+G]'$co"K:Ⱦ!KvI?ga`H]jX;=<U[]85jQD95$ͽ"+A0qB4Wwɬ;>ܺ,z) AynLz%yՍZ -&0y)wjr4y\Cí V<{p&4Gm>67߀n|5F,%$]`n75@urli Zw[,aʽ|an+3k ?ϲq+-WT~M}_]pE&aN `+Ģ")Ӑ$i &QAM@ͅaoBX-O8ejɡzzM?;$Է8Bnҽ !o}K!o2Q$Єr0k?uD.@6?cwJGM}gg@sR.]\g5QOu).&8.\tR v.s w]~tXG>dP#KޢHeQFHC{*?ǖm4yGm׆9&%Ejĩ*P$wt@M >ށ,ʗV? a5FINW 1?2gdx{qI~b 'h`pL& 3 K^iO 6gnk}+} Ǡ'y?+)r R#v.O&rNrm0q&tI RG5_*ō ɲraBdbcVPuIw8õ#W #a:yU t)4nOD`˫z)FDِ(v< 2s>ވ[T:{x5' PPO%Diɸs*wXYTe)T\SEVFxmvd/UJ:ܦ9;vC;2ұ^#)2" (u<>N+6\_+XԾ}~ޫN'v<d,t!1gF؎p[+5k%'BR[̇&u;m[=):ϯSѨ}s(HWndU?n^Rh3ky!Qգ1X.h6 Ok + F*}r󨺺 @rrE2=T}2'|P+) -gUOKVdsK힙 {e $'U{,E%P\IT6t#W!t }(\eˎQiدYyXq΃ ċ9籂=DR@!oycE zx(921 WhwÔ]%-t<R<(b:.ϾߣXMa) M%X%`. Deh% |SdBcD4`#6OK>xrޥ [7!ƝtV"lH^k +E箅O4F"D{eM{kfeGuwM C5-'[ aϲ9. J޿7|-d)ddsN|i$ 7+CΏNmJmqp SGz'sMtL;e硿yI?˯6:\cη%Ba!Oa{TBzқ)ͱL+ 4DiJsB^X[f%Ml,iH`\c&*9E %e^cg#2R] bmeUMWqS1(x꫐*cgڪ xrĵZyapF64DYc+ѻS\O&NT]q}R˿]N/'hc[.p^Nd+A5:ᦎf{޷F)V6bsO>uZͤբpܱ̓9Y!̬k<`#i A96{P:7vɝyۅ"WeyOYFbb%r؂uC􄄃#5+5,n;Zs~ޏ\ET/ih2ZjMC2)y|Qlkޝ:}JT_6bFÙ֕\ z1%.ٕwdT1&gs%|aF%a\;#z֓E/Tk΢s S/J#/YQD~~KoϨn-}B'm5TR*$Ϙae+0t2kp.Y}5Z[~gUD/(e[=AQEmhɳ+G.Ԕ223YA==pGd,'Pۀ@ZeQ['ESڎN5sf4(OHVX'A#|br9٤XTgAC^%S2HZXO>Jn~ 1l߫TS@=ǚ/jɩj;vᨁ{\FHGwsZ=}K1QR:y$L ~md+!E[ V/kݛZVF(0Yif[ .PL 1sVPĖgke~dXjc:Z8L H$x!h-ds]Yz+Jm,4a/tV 2^dytj;K-,xT DSKΏ>0o Ҷl2؅Z-9Frw4A3m3&Ɓثm|*|-0`$2)Awf-ネ䅐w~f>No``xܷUIaYͱd6O?qzUx8- >}8U5z {T9[,*xY_0 4arrN8gs󺊎X"x`8] N!z b%&pi/n=#1/j@aG2_pj/f!W`sr,\sJFQG_37} Sں5!x3 }Z]H Cu eM8 !( Fң֊;ӄBe0lF聦jF֧ _GA#?uu~TEN"0*# A$Q{eG=l,ͫAT4̡dsrju~Es޼vkdsC4Zg hUYG'J'#hk6ݹ< ^H*8'1tby! O))z-x|`5 &濂nꎶ`$G.6CҎ K4uÎ}5޿Pm>#ٻ] n˄r/>ƥߛnX$e.ݴ)$\ʲ􍅡FMP=pfeg"MC2Malc*aNӽ2,i g&$ G>fk@ApsfZawB=ilo`!dwGް$ [!#s*32Vo߲_K2#]X&6Yb{ `eDӷTLpox'%ڨQ9ో&ոw m s'OBe*e(tE!4Lc,,y:uٮR aﺝmwgt,S'F- 'P['}&IJ빡ϝ#8:Q{{>6U/Me6ُYHxe+ҵ Yr~cvtNh UfpJC,v.zZ<- դ]þG^/2/שMQF+$a %s葦vrr[j͂B|kg4ÏcM7鎎QݺK4:S%-wǐ{DM_4ގv h;([V9; 1g7)Iڛ5oq~gM$ZƵxiW8Du )>mc-0wةZ쯸P0(BV {O=?ǡ^ݏGv_Z*J,HQ gE,9iSR,Tqxm]Sz.e5.Uu {XA(64 EMda-5 KgzH֏z~7gy|20~#D)+ y:=&OCdz"Hy\|܄2$J9\B& eSaբT{+yzj6VX^ŝqG(X hUXdavJhrDt#LBØϛ#Tza9Ց5Aa,iSYYEZ!byM^!q*̉T5!A)#M>%鏹s+NY%NrmSQiw[QZ!sRȘူaX;y{fӧNiJ4T,ɭLcmظJMCܻރ~ Yuξ>ld9x%UGw]p~Dm*v(bmRa]223x 7V~'^e9 M;4jTDe]-C4'^W_ƒdy2 bڻGa+ %ndTj`Rn8a!E'mOKtZ>p#(.Wd#m(*65;8T*Y!fpJ{P1A nM ZP ("d'T) j60ZA^>C007^|SqPx;rh8 a ] Zi5ZKڇ9hX/Qҝ G[U7WA|Ye =2crUla&]^s`y4FĹ;SW #<4K4MR4=N iP:|!Ŗ]#l_Iߡ+k{7?}ߚfjM&|, sE&Y jB0"=,:W>€$*b\An ׳-ork^/_zthn3\-?Q̍Mח9rAƻl~zZk2AjcjSw&/XnewΪS'UZW 819W zQ w28^ik-̀j=qIbweJ[tǎm㬸=-({ 9%'s^-Qt9Bf"Zh ,Kđݹ惓!{+wEE\(ce2{<`*r6`|2(෰{?l!ej$̜!RsЇb-d7eap|\ޔE;G<':FU{}z']cu2.V [uܥt%bd`\>IdʛE O1gG#-l"()թwrPNn`An>w(}Cb3?0($Hexh;{B>9] 5v?dHWPW5scP#w`j/ӌX-LiqrWg*KE}ՙ,{dӧVM=u mxo?{=B nfmL޸w:aġVߛRgu&T2|PsmA-"kQbݩ'W4:%71scXmA1'@eN;PP2|` +wDP95JR.юJ ՝28.0%`ٞ9ķ jVLѻP2{)d*8)UQ<W2$?h|Qp(6k.VzjTteIaxZsM[]N@ aܤscxEޠGFd#7`V7=^hOMvn뉳pcUz($\ݨ\KsSi7nwԒcK8XoM.VkkFڍF]q**pIҚ䀅3 ni.| _Dtxx60Ji(¸ICBTgk,OTS'znۍJE~r}v9JY^(bO2*²$>q(/':]f0؈YƩR_wxK BFq ᑝeAVIH#0dWҗsXkޮ=,nfj! `0!|86o f V'.KR`ĂΕ~>,dnoiĝ͙$I-X}pPU=6\p`Q,nұp=Y WSEğ 0 /7d#u=fdHEՙ`DAs5-I>UԢpaW 両3~5ÂekӺٷ1xc=fQwY6 L9ytC;>&C[抩Rok&Dݥ^ <;S͍'Dm,P,WT]lo">,g&xpמv{a ڗ誂W_HF/0N~t9 ɪtt$i4rǺ঍!\Qq߫G<@otFg4=@i|J͕eE0!9`~. YfF;L<=۴D׌4_ہw:Ӟ b ىqxEQ FR+:' 1>ܤ-XWg/C*qIߕG2v~gb1P9\X9$,  iOߜܹquqj}#cDd'7,z#M}uQruK";^v 0' _ȇ2eGRv!& lh"Ûvu (.'ab]V}%v )%wE -6%>P 3F'0wJG&h u@ף+[S"QoFO0Ѳv*WqGgK=Ѹ]У" e[OY A0@t>bfoג[(C< U"~"Zco$#Es27\MSmQMg{k~]5)LKayAP򘎱P [ʨMprGl_BFiA*ِ) l 5e۰YPv` yIc.kM@ q95}(_ X_ >G0AyެgU Q4Ww=dMژkh~4ɘ2J =q4gLїM$rܬaik)]7 ņK^Іƍ*q[$iTDK蛰Q}j"2VI/ 7ŧW_nɏ?C\]C ʵL6ű`-iewdGϴD|xeSʩ}@4;up%@IዼfҦ8AdF=L1bÊE{l{+ \]\(r/ξK8|<<0l<&]뼆H2edp !h @byK-`wُb=+T|cOp67c:G3ΐi-;iv#]|az)ɻOu"M]GH%_aCVtq:* ݧ!= %w}gza'b!sj>3'Msb5䩱*SVF(?ߓ-\)VPq{2U 2geTiLSTם`N7KwhzT}:UzoD S70RIdV֥ |=_,bZ$N;Y1Lc[K?$3DžJ%b~WyE?eOC`wpjIuJ2 ZZ)$xqX !>dXI'10Cʣ˿[#]0HubTx~UX+=_3n)~"|h,1$u6cxR7o`.hćK5VX"v?q쏱iһ^C!V)l^#m.--)sa5'Ov2DTjۧwBU\48枰;2x|niDIXŅu-CGK9Bx8l4('EMƒUrh,!24EdϩI ud7 ն^ܪ^"RեIlY.Z`)3VtÞsaDS߯0D@!Yr 4oӘ`6t~'LW5[)(I@MaxSɯTA*R6 #M&Q%6%aJI03Wa#Cr!R+>8)NB+ݣ8<  +KH^rAvWy2yu#"stэ4 KZ&\-4w{bkHHOB}QC9x,{0}w-,BeBz"} .X+`t<0y?Y젟G.G\jAŁUSvJ8ΌXx:8eh/yARa>c#EFJ;VDaڕb^)i^ݖ*K,@Z[ 3k:ĤFt\= 8N,9!5.sxa* 7x~ 7 Iew.u0݉K,pKY[&QQd?iTm ru0ho ͹qHocْzTSR)1$ ל$<:P8}n9C d}W}/J3RUG❊ӗ쥙c-~β`{Ip:}Ŷp>Q>0tF>ԗĢu%,[`̬aok 62eЦ_@T0|dBDs-(2gU`G*'2 ]HĚ-3Bmwb7c߫7nQl1ӿePef83> =F ss c9Ig~pxSPW bBΩLC$^ewg16CHD7*Hr\KGb)`WIz}%O}9KR9bnt!/(/% lwP|g><U^;6Oopvy2u{{rGfM֥&|Й`D822UӜ}ЌO7 Jp@+1aюE H>̩|o^VIubMVׇ#tl.8qMW&jd0'9?}¯xX+()?U@zHeڵnI(tcZ]_1Z=n@ X1 Q+B&.qBUBZQ+)sQ o&i!9Txl0A+^6;7㉼وФބC.[Q_'xO4 6FKJ1t@?!h.̐,g #vW:6Yտ-NG1@qԊ-T1JwDsFrfqDc8"VOiVmrb̸OK.7pɑBǵދ_#G`DnB-_>*H|ٴ<ΆV,.(s+ԢL׫j s sI2@BNfR "u^uem}4Ƴ@|0VC.w4{ ڛuTD ׿nًfoCEDezR5#"\-ż߅c+p |yM!UZte>52yx5Fl`{m;mfAo׮I`v/Aě=Oـ|̷L\i~l!],K; z3P@2X+"Ɵ̨`օysj6M>{'/^4MU:f*W| 񄰉 %Y6tQ_{ +2hW0#,q>4O3|qv0m=YLAhk^-%KGP)}[mMyE#)Aꓪ X bd6&"ۡt1R>R aiUѢ`~ 0bސ( 9SױXQlCƈ N$ȧluU4d),qqz>/?Fv[}kfi!B#QUuO5{,}ǧvp0s1=:&?Ntk018=!pK,/5{s<@1%2L6{ϒ XGsZlB<[S q!B"xoU7~{\K q 2$^웝ќY2Rl 6Dh&84PO=b͇P4rK?wBaDOt8b4!Afˉį7`D}% |iR دOP<:T)0G;Em(݌$&8ߓ]Um<[߁?&ٖ?[k! !4Ɛ,d(\r,!:iZsZ\L6xW&Vv2 >{ ĝ@%#(b~IyTvF-W̛zCn┢ W&[ƄzO-q&uUkO8 Cgb_6>+ڍ^ݭhz,*̘f]&y/$#&N,kIӄUwT&/΂]9[ +&T0Dbw.7x ;̟ 2AFgɌ$'7La^_`aDx. 3Noj2i~"ZߑTĄ]^|c%XHrnv7ol ]—1z]rg*~{~퓡*s16f2VMYb(is%O@\{Szĩ T~"6 iWHv[ >j ?F 9(zFF!2b(?%tj#<"7H\af! ,+9y'xR_Ɔ/$A9{Ko 2 BMC>X1{wJf_gBZt%."`UHR7THF 'iBdAu'Ä́#Z_^LaůO7{e9μ/[dĭ&8-}.f&Ld4%_F/(.}6åGjτ63· gv?E bJoP4jM&q5OS߁3-Q\2tRc gTVLz> 4wQW=j&4GKo+ w!WLOF$[@>pZI6>Q%]s5[nqO|yG`ė9.& KjM =Wщ^{;363zP3V/~7M8*1`;/)_Oת=W0,:u%;I'Bdhո'`r3 &_cI _C<&n^AvJ DH.0JfR9JG7wU"XU= l 6~Ht-M|P+;- K  JIiRZWäBwpFH%o1 1fm{=*iwp1-nQZ0qMb cɐϟ*ߛ ,jc$^ %HA[|.266~98`d@ EڑH {f1LH-1*\'l&&M)-aqZ&@GOCO^u{z@ˆ:e#z"7=A$Fdֽ7\U6x%3g!IU=+wM@/H1@$M4#d/yekh:K!y{ f)7^:]=chɪTia(W<*mU)cJAA5̉q,sYf%'Hg\?́skox+*lͨzdf#2ۃ|~R!Ù@,=@5ȡ^ԌxBa4\O0cr0'k57j'NF0PubZ-QiXÔ#IS'!v>@kw̳?XB"=X 6 }bs4TR(XK:G@aNI\V;f LQڣFw43^wHh{z_ WD#^bʃU:WHx'Ż)xxs{7cp]"חye[rt9;!RFBG*Cfbw++=Q&ʡ^WCYX O)]TfkꚟoaןB\{Pe  &d/7ŲRK?h'2a4O|@ #Q\m:0//6.w1OK$z ]`H߲oAfe ׸73o Ʋo"SW0_MyXQ[θkPҕ ycVJhd(!|)xGhsm\F 5ᩲmM[8Y-h<"f aV=?A>e*.|#B%U59ً$4ge 7ҡٖ$XE@ԖCDr5&GC+ 5j'ڄʬS7l3cE'X/g ygnʠpNߋe9Ѳfkĺ2)q_֦ÁKB#1ouY*#OziooV[+aD͙3bԏu/V[la]"YEY^٬a3*a-{~ Q,/]}eK"F~7(-A߯ꕼcv'L@F4P^DRdL[n4-[}UTIͧ:_̝׆񎌍nR% {>^ ["#GBa?H{{b5u:1SAO\^X >7]2=Bv-61'[z^{a+EhטGݵJý/ -wtD1%lJb΂l0ÃDO{fX.ںl~¾C&@]90ވuHϴ'+fIH!5>z4^eÅjT!9cG bc7ǫx0ǙTuq|!Of kXgMN9}X_n )3ȍ]i;~dE\ f %D~˗Ͷ ƿtuj?e{;GƩS\'fJ3&4YxAIJjqV8g6cCQ{W=Mb,B*5KW5 ^l7TNA ⇮U=ExLSޓN9]aI}:(tr P̆9Tm!%s]*UAfԇr8odǓS5~1i61R7|fo ,I "ib(\[ڀ07f"9|iWY2&_xmV"PKmPxI[[Pdl`(wއ'w_RWf,fCq&6k-U!c]T iht7 h<oђeNS R`o.XTX0W " }kB&234rilNf 4ocs586&!#Er~9O% l)F%8?40a,fOHXOԡ,Ee(Q^OO]_j~;#F&bN /lļ*S̩<{l1 O,5;8Syv.D@3x.R&"Yzko;PhU'YLJ5NA(K *FtyO3]17 \ԦTηTnx#DYm J{Q=?f!rݳS1k3zwwbFf5]3/!@Bl?- H|=14-nnC C~tXՅ#Qqz)5tSHWHl܂ ߶ᴋ맴~N]y~8r] kFr㆏Dny'[_ݴƏo̧uY5?_%P[!rcu=7p e|@U`J/&IS!qYYce1y#"@dGՈe6HML8K`DhW扱o_MUwW~\K[٨d *gmD)ߕ\ٚj|yL ^:;j=}IU: d5t8PJu!\pZ!tұ`Q?~ ArDYZҐHBB3h-ZSS`F+J>(.6+,l ¤!_ pzVl9mPU4A}c'i<<䗎d@a҂Ch{0\df+s[QU?I^\ *HȾ0UX]|e5N2PtYsE)j^,C!;q- IAlXE %M`ߪmP@ix"K c7b<"_aWʗ:.m/ƫaȽ0%4[f\sCv΋gȇ68 @Z$G,3A4P,W I(^<Um+i(ygÊ*Pi[|pfY[k" (3I\uLI&dnM0uW7DYN !~kftyqQ/a.=D1½83(w"bk9ݒeo*pZV IQ4Z&/s^DƸ\1'&/,c ?fIi aq wW!;ZF(5P}W >=a:lz/tWSԯbyAN8Y3uz@ͅ{0"L1,>^  7|hZˆrB x?ɎFHy'jQrg\فzj j 6?L[q VyLbBQuPYCɝxFoZ1n~0a6 lh+ѽ߈PM@?K!b :R*eW>D4xL,\xY<Ԭ"R␌ ^^D:/c# plu  wMo)oZ vV9qi,c󰅮 Wot۲FP=ofe3rvw=6u A_Bѭ;/WZc~!)8fJa0R,WݬƏG*d4IU;)ESü?JnsI&*/[KJ&í[}^6?ke9H/mO>J*"BG ``[%ӸؿYBxrD}9Z nزsD{)s Ki]W5AH330aZ?']!)FZ=Gs!9ǨsWp7Kh|C&gT8,!}H )`S3uo2cCt/ 4ZVt$= ,i9#;j\qS Z)~̈D ,*7z$6rT[Q"00n )Ϳ/~&a;‰y̮Cq(ʠ:z *t|z8qs{@aD5Cw|{ߟ|f[Q7 ѐfAl>m51]΍ 1ߡdQP_+|3Eؚ#J &&)=흄;p޺ŅE%Yٹ\2 AfD]l!܃~Z+8uooc?kw3M/7Fq $iЉ8P/v9mͅr"jglNDb5:$V%/RsXdiƸb)qE.&BLؑLF9uVg]ƦH2΀\+XGGkNh {S%AmM+iyK"F_kےQwހq @J6>jy73&rCReKMhQzAޫ'4LA~>"TR rTFaz 6b4 %jdzЛ5XuCZOy;I$N88j uN/)N < +RH,_ 31mS=3RԫtW>Գ5 {.DzfrW#T1s}qD: 8C;=8\>hoLƳ i2սV2JS~&_RI^j(?7Gi_Uƿ_^Bk Op) ʂRy"\n5u~bn.B$TOnah-3}PЙLfz C0棂Ǩ]ﭻ GDؠTF /? i@&. ^1xn쎻!we-R%S:Q]U|nǺT[P\<4}M^sKi1 <6H-)E{N ;('H*\xPKX#F_t}ƋTOkfY+E2>*~nyhW h_~9"0hZ= #jVCCY2Aڄhg0 _L3߉ݲGȀ̛m\n?gMw ٗzP#̟o h/^tN|IL&Mh9lC_). $u10AoEz4(zSXqkA)q/Uأa;fyֺ&[nj>ڮ[}rYƳwjؓ"2%K"@9}2=Dwu.P 8:m|5pu<4ˁMcG]CWr.0t2m>HC8S+|iJ2w;d'zYϫUt/RMzāZE S#,v<5G["sN퐭[Z7te@,5dk1XO6[.D]N[sxRDt`)ͦqH޻OD!Kޠ /˽,.kK:f:~Hvg*+=ux\"4Da/.FNK*4B1SǨq4l^˶Ӽtc/Y`Ըr2G;h2ȗr!m:khd]LDr~JAg%ـ|ܭ7Oniՠ6o.("~4Vt:>h_[]}!풧ϸa!^KЈ/_P0~y 9/k.]/fB'ָ/u}ȯr\=?O8z8gN<'T K^ 90lWX1Cdd h":"㑎sy6,3Gl 7نPvLF*Z'Уf:;{R>'z._ETXk1dca$6,I Xlm3pu-*rS-1aOVMXPB.-I}x۬v͓[}J޴/sy[ +Qǒ%2&z.7 1_2.3_S8?o) ۩~> ]N `Y>sѻ<8կYdB&֓ˌzlgS+s`U]uavSsI$^BStE;fbUxP>"/pk!]`yK6|MF+G+ Ҙ3375Q(\8eDt+ǰ7lyL|Tb0 ˅ʖ,NztLZ'g>ю2%`W^:Wʐvͧ{9 [rQdL6OG$: 3Ɔ/0#!uao]>Vs) v^eGa#X榫*ᗒDH+%`P,:d S 3?) %bE b.Mz,!;'*jΝygOo)Gi0Rsqt3Ѳ=˥B-I?`Q|;SYZv +, L 5jf1_h`9֏( HJhᩖ "Bx<!oxK>]K Sˈ*/>GWn4-qQ彼x`۵yDCC~< X㩇͉h6\G={mFB1qn ]W9@4ӈ鎪uw;mR8V%q,t2Z5ΈPKϪU=)bm,z:'ݤ쏯2r^A%\twvNAl6ps8"|cm-d.c~s^avzAjʋcA*)Iffh$ݑ٘N|PzDk$2<c^?^egWU>Q꿱?_dMսY[Q+*q*UB]>DV}\aiM'J'\dzGIDkC~cs>#_ / {1GZ3% cgYVGR/|9,a2m( .Z`^f*:i~v kz E @Ig??{B:Uf(T]_zi+>c$͟ƀ/*CPRƋPrl23]%QˤV햲̷ӸG pl#nAgo7~|SZ#xˮt`kFL҉Ш?$!@xbUFcJCIُ|t97r|^ݚ8kDe4~Z˒+pװ mج,&&͓ʯtbPUU/cPjTz7Ϊe%Nu۞׊FDKP(*ne~g 5ٓ-d;xe{g6 9!kG ȧoJP4EQ<}Wy1d oB*{D Sr[2^R^_DOD=A+L9fi;kTIddHb^ 2̚mQkքph ԩڙ>#AkP |P==@E0bM9k1BNxS{_"fx3>k.SjV+~<]կF_7x檞^YԸ'n4}GLy"mYPcGq &8)/cFͥLZ SSnL?yM`YAmmi̲y\&ivNEb+óv$%X3DLξIġxH8X V\u)S0ˤI_{2VEHO@6 1TV-W}KEHLN&>#N @eP+> ;j %a޵꒎0Y'0n(8ͺrCfNA]YpX_rwAw`ɴ7>Z>M.T+đt2y&߇ 45 uE 8ܕH\0PԊ:41IN5J#WC;&!0]49aj)Z%'L{g|\jduPe2 63 ?˶ͧ*OZEU0AP NKJ `ةy@"O"v fN(qp̚bE*W @ٛ|Q MEqAڞ>ą?D]:{-"H ƾ1!w>,p۱:9h5P=m+6$ ^jy4n<&*cqku^ue۠@9_ ZSto: l'*:И3$GW]ѥ v*Sylw<@7752c!I]@Ihjڲv xu]3eV?$vՑpUw9`T柴=t,b2E,}+t\k}Si|vl*z5Yۢ#I G3x\jZ|)o<.LyxB 45/]/Xi֎G#+%72 TTN ZS^!&thy+ݨlC:*)E<~H&S|沮 k  y3T#.Zfz9]}BoJ^{ۘ{Gt~L@OSN26+ldKIǺOFQDֳčf3&*x*d~sO>޶LH&SYPu.b.,!YS4Be%0D:1Y8|<*rk˸ӵvP()4CS=X1prWiyPzkKtB>~yAǻNLw ]2A7,Aν!y|(^S,?ċÆtSq`Ru/$IקUu itv0!_#qPO~Q\37Σ\ -WJ\]@AKpaށ:a^R8-aL:}0LM>./f^O!_ ğdTokҧh1ePo0S\ MM}o5npMDJSnJnjtov*GYn[(}ƎZD]@8iI(^jI!%DvZ:fEfs_Ltfs"7-HC<2zĉ pfY߂2[&\v.W3!ΥN^-KdVEզM"0Aѹe20@ ǔnUNcc+œ_KkǷE:GqпMVí6hdAIRs͊nEcdכa=|(y)=^; KO_zKGJy[D'&'|<0l`ȺO]|EI8{EI>:Ϛ*UѾҫYi.R9&gXi7ױ=:-dr3[fKEu240(Qfy[Lngx! Pm5.}L/(Q)m?i5ȻIN8x  M^*UdWȈ D*_u@ WAQ79U$~gu#aEvMձ9ݱi@qNΞ,'fcftv6,;Yʔc DG86{z9;iQ\MC'F{c jWeƵE.sNLxOg ?\eli,ׇұ+~IbE?jn9aWB[`- _5TcO'fϞ$`p!bTƱxbJkXB^WvW(OoOMx%֑+J댛y dU[!<4En+FXAŒfiO-Y 4FuE) dU97|a5\oi:CM\LPv v1ÞgT }m2A x(_s|V\@ѵ,Vv}aMq!$ρW:q+=U˂s=0Z~Mf_O[ThYΊ$ H\KX=Ȇ1+gݭN1?tl,ZaՏ~r.Ű@ 6}yB>PmjkW/^e~A`Ӊz59Qz)xs`I~ovIj<"793g' eʫ~id<e3,#fAv ]4+[ՍU> Й0rV/Vb9"=F8TCLj'> |Ty6C,]S.\ҡ6zF) JvL{hʼ_;=!,yGڻϏ9[]L*ygB٬n+s¦ӫ(8=\ՏU NW7F*mP%=<_ 3@tXe"K~+{zj1 zDw]8xmxnTH iI<[kճL9bAJ/5R>}pdt,:4~NV*#3u ˙OJ}hGnsX=s. gqy|!;X6%_q}K-ȦgCvK3@^[43AĂO˟˥? Egy+R&t$@FgSx< `wdؖ!?QPwCXO`>qCA\WLlzåIdB&y[[a K|Sدs_r#kUj2bǝß:'4[S#̑pgl$jD㚖?] B5J P6sm!OܾÐ6<p@ `V?o}=ax$P Z+ݝIRS=%aE=/wDu致[N0k`njGFñQud7DE/iE-WyDRb{ \I@*Ɗ66H($ u3t2hR%c8mO2n(lSaFNxaS!yg*^ 'WlhaUXt-G@a0A}&˩O_Mh%=Hg}IKYHϜ" JlU)456{s̷P6]ٚ`EJņ}v!U ZMj0ھNkn'GEO$QrɫKЯ,Q+w.6f :vkF:VkqNjP -7Zs?'mf, `~Or'rskb +C;#:Z>y )qD\d;2;؎ri-SB*D)[+$88s$Q V2"?$[æM, ΐIvgAq煜#T_¿ߺ.(lm M> M;4\W}udcwQqA΀Plq K⎧?/>/SH[rdQӎa?R9C;`u4իm_E7w(uZc x?}X7MKo#`"@[ #J%MYUe24eQ5>$!^vfzlNHR "޷B [\(,<ךrnˏTϊr^YE{8@6k!P"I+DYGm|q~+[蓫F:ݟN_UĒ1Sb9Ed{q?[$LSܞ)m}le/ꁰأONKp{p!ԵcNM!1L5J7EcxuvH~Gz:d(R%>|QZM$uNUQ[ ^ԪX9wN~^g6ub EN\ުu{A;#yt%AnK1'/P`A4煨`=;zYŲ(]a^fwp8ӏ O M賽NA]Z6)l\qc49VJ4deh2B"j䘴8AQ,kJ_-gMVޯ@d0I: uT6g̐Ɖq;vF?RM^x"9 ,Ed WtQ"lӊ~&+?)]1X#v[_e"'Bz77Dպ/9_1zY,n #D,o yT @n{ΰsfx?ѵȐW&(kqNex<.ٜyQOUL(5C2m5iy,hkwF]Tp`m pQނԐoRn^C2.js]bN/uO_1`wykJ?jS"a,Q^șX j\ AG hc[4NװdQ=¡bvjPKYzGryx3fՠIlS׸Y?H#zlֲx!|t"-yF62P.Bh %8v%)h%"eJ@ɗ ̊#:@Km!`^{^3`gډ?Yl;n7oX ߗ.H^!9Ǎ9N#MڡY٣ҜCv,evRPPrl LuW Xݔ W(e6"[:繑Jpؖ}z9N/ )GCMuCgαqю&UKZX rA?V<(՘BB45 B|Q_v'>i:r8GIN?[D`?=Ur/ȸGgxL o>գXv6G~ۭz:e­22цR|"uB]U߰qMH3ID3Nm;r'Xl a.C9 9g$yyKV/bAi t@6lx?6DH#,7q>0W{=FZ{*Rob8Kʁwn!%9? $,&m15c0[SUht,"mߒNjHe[A;4~g Le2mL-vYE1&?l~U ˥ǀAK~Mk?+:MzEھۇ׉(ydj]];k(VhRo ͧWb7&H2#'rdj۾țMX| VZ}쵌BpWq aZ%j!y|S\g e~>,zE倪 9 Ot'YǩJm@k2o!zb΅P{q߉k@lRD]IMKS1oz) AdZHQ˗Hz11>=<`nI(8^Z EPlO73ל';yr_zb&>Ծ&ՆH 6r%t0k:Ikk!)eX ΝvC2 ,fPeo0:r`Ny)?}xj4k <>Y׎Z;S<[hL|1 㫍 f_zBN`NCÙcñ2 ^ˣŦsFq{bm^ a9+A2 y| 7h4Z+>nDZ2M6x,A9g%8 ɴf[2dkݑ؇-4n*<7e[Szza^?KLTF+5R!!7lM|w>y&}َ|ݱ&mZcN P8Q읃[zσ$AWmUA[ ٴt)ibw=ը6n.m[ &и\+;KŐWsHza3tD( b6/ 9"My[MΦF=Ds~Y;u??\&:HC[i˾+MUh:v:TE17Ci VЃUzszPp@dYN!RYXfd)XG\(ظT)j}:Pw":exBO^S؅<8M < T27ڷ(#E?Cw axjw'h`4}lC츆_ j[Zz "m|d h@nGJ&_~ 1Y8F2+/1r <&TFGvB(hb[a k|wh0 :> '?bmšq%=N~hlD;㎿;}jqz&[ꑴ9x".ŷ0r6d8<؝7Aw%T`Jsp24Eb9dףP!9ȓU3WM`.!c9D7)=2^@Y; ClPq|WKt_7Ay|=0@}gu; ^H3*J%>(n^#GI!_Wp NZ~UԻo/.'<,4,ܤͩ덝kIGF.ibqpz@X:NTK.4'% 0t4)1TvĵglO>6:e ٪?! 9@%ϡ: $񩶬2bq _l3nJsަ4o3(m2WרLAk 7)yީuOHJjHH턩9 7{vH3IY&Ht& D4bTl6XL Rrry1|Hb)8w 5VPOy1E#'a] 8,pBqy/1~y1I_6Ѽyb=5Bb ղ'SHu,w!}6䉗FtXڜ?חNS .mo#aLϺ!>F]=#s5B#3rApIģ>g# wk 3÷("Xt^q7(W /l]*%pv6あt`9*c_N+K `Alx6UhjtO!_P˻[]΄v:3Sy"Ly9+˸c}!,Y'o̠#>gw@7%P[Av;FfpYJrm ?hKw0H"#a,e$CPVjNCm:.;{kGGIjuj%^ZC]ⰿwO~{-Dk[271cHSDwMd9NٛGS-ejJ^L_2YHhM:G-]lPl#،Yeтš>{8Oln6x:ں 'e0;4|h!!ʞt A|V֮ňz/AAu|%!IJk310ܚU4#Toؾ. 0ע?+#aWUoiOvrW{Dlyuz?Tlu:ځÆZ!H7N^(;eJ.v¹9@`t?\&q+c2!M\np7 G$bPmէuO.y5H'@cOlmpY,j գZ#*2g7pe¦Xvl8NY"Ƶ@d&͏S# Fퟚ?qQaU<+)!QK 7Wz4Xo1V5jh/(͝ ) kutj.~L(iDr۴dv4@/Gd4p%OoM3cWe柃o4WFȓVo)lnM!BT?N hX3RO^ N P7)7>kv /nRCo]Ik 09 UYrM-*6R*ֲPhgԦ.&jQ{YZ^ '6R`hO|?G4-ެyE+ݞJˋ`8%q-p&b%y?Y7=g%9Gc@#'W J>f(3OQj-~̒s@uH^q]`p(t!~@n_WcĖ-K{fW:1#%xF(A*58FJLV 55"'Ӣ<ŗUs%PCg҂x/~6ͧu@؋pAs\׶54`PѲ#P ۡEf-Š);V$6feO0(G1YBmL:YsXɮgD?%j{\3e{ SV a$2LkbcB?l wǼDrheƾ׵|jjnW VBuf]I E`wife_rBq%>X珱!v܈6 *3$50V ˥Uv6c)I/~ڻ>vOLNZxe.*J-mjҴH;4:>.'@wax`;`Yepmu6]!j<ϭ&ѩ,8ٕ_{z[&(KpOASw.uJG/tӮzT'GM=c`續Ld(?FV|6(z^"C6%3J-E]e3=6B4@ ji~ b rĞz97 gWUbۨl6Ѥ؞4t|"UtE_RWvd؀Bl'z@%Z3|79RXm,\K|>ttV$u H\_N7,P@;194}I2NT'O47ĎF8XH`\ؐɂV`{(A\K ⃇({IHS B|̱65l٢q}fG}؂ HU|%h&_շ r9O\ 9LҞzy,(ɉ\s4m=~ ܗDrU@XTa.ǃi- 1:sa* gW?;VaBYBa*:hQmݜ6m"(1ZK'D߰ڈlײi#rYlWS+['99^a:W6\|'\-f(Y,,N+P3]Qtu+tc8f(`X5+u5tMV%)KKhzFl8ES0AN齪P4Z<80? +BV5r7:x 'K^1lmz!rVJC sb OKo[=QAơwأ PӎZ"BL"g-ud@ʦmů[GV@d"2n{!#XgpitAENR+5ۆ-T,!?q<|_ocBd)֨!kRa̸+'NUBJJx9(@)f!"/yeȚTzꌨȒe0Tb<3N? BS>igC,l4I"%2婍Ce0Ojy+.VңX|ޭ}lG:+L~-6eV4 A[ \#T5Bz{HG,rZtch5wB02j$p0aX _ HVR6$VOD9(`=?!,:=ɡ:dCc2 5(!1䦳! җGf"ss} =VP0rZ+kÎ\hY΢{PkԃвU5ii#\ZVJ|( >RO_bp,33h4 IN~Yy7/^/Zѩ==f}obj qMJ42,MQZOs?<{Ҩcb aR$ӱ:a Q =¯ѠpTQ^}В!SP-nGlR0UAY)Jw(Qxض]xӼUܚ b)enBF1Ɩy_BLsj( > ^vSL4haEBg8?KR䉗45 ۰_Ǣ-},?2:'r= 7< 5^Q5kmZ2쿅$HP}2wƢoV5wCEG-t8fLӒw)uhoɞ2Y]j#)o*HDLĀQt^lWTfc8y͖2!O_RN=~3(!X?/%HTf1^-1`UO^+yX`hYsM< b $׹3c02k p!iXVzK^."Xoo fc^k|Z VCSv:oCCYE629MiƯϏ V[B+7L?0Fcf <(,}Fu[ҫ%lhPW쐲/Kx.f27+MxC'ۖsSЪb\:Q04*M4SO!OYĤ8OL;]tI]V1\ZXN;PɯS0xC kا`Aoz:`X'=}q@pȬ9) OQH1 d [tؠ%L9lIGk923a$1J<n6B8[ Ob᮰}Og\h5I]U8Kh[GJFv$XzVrso7=VP9 B^<Ǜgt1x8/"oW1C2 ۔.;ᡡSЌBbMbEMj``N >~rNthˍ-w"y0Pͮ b֒v&GXR)h c=aI3=1sFcVݯ*&[E0`2kտm~3Lb)lGN@q{؜`Q0 &~JO'6Ig蓕2^E>bLɉ Yu7+s9TCy bfHبD* |F@\K.Χ6)>"dC2)I1:RcL-:yR*׍Fޑ;2b)3]DtL?T ]5X~V aɴΌ"za.NKW8_bKCsq= e\9\ġm;L){߼P:X x>ozLmՋCAj#Mм+o" ڄxG"ĸTy#:s'uGiW'_d&REBgm0Eq7MNFh]tFCңxܙlR9lC\A* .YiVBUS20p۫کn3Z%}gW Le:iz/fL"LLh8F O #wz&4u#G6MHs7Sl=_l)╱3"jvψitK*,QϫjmKuPܾ;30m# ,d>{c2vr-&E,̼ǻQPMt ^Zr[1{D0u]DT|Re h 0T낳N1NH^ǾTbx:w%[#GΗ@i|EwʜGWp\<}r>;ҏUR2:e\ 8f2yyoW*VӞ$q$8aa@7P>hUvj6HM'98%ꁍI͡닼;iWtZA"|~?+(FɨG{cT[.ӿK66ܴ'8fw9 _թ,5 BN!#l8 Z(AN'lE_ -/!.uruD-ɴD%>•ޫOm [O s^tZcƆ8XkE~D).6Y3Ρ(!†uߠXk|"gLJPX,~! /A;;?9;ݵP3O(k24Qۚ2~ Rf93?|U Re^ft#Ae ы; aړѪ8㇄Brp+- wu+8jx<٥Rzn~3eV =BRH'AOpe/ܬl>E!!b]![ &FhRdqΚ?^*)0:]aePl<^q1_4W9 o>7P{'u!scPJ߯ GRj &:C9MXSFV)я8E:Kۧ`kFɏ w6*},ʨ f=҈m4+p8)Us@U>V ׾w^5S`}. vRRzNϲeb~ӨGi^#.' ݺJvΊu+Wg L|?QQO lJK/k[HcjʱaCd-R@##ӴBN(qXrNg̺jBܛ]1J.!okkB1K˜', 4~V" ]hF,> 2xcOEѰh(Zk3#jLg\vגLK:uoGNM=Bf8/tqV_@.Ϻ\ PE~C3i[Etb'eGNeMv_:u0M ^~/#Z\Dᛤ8 aNUu19j5ȉ?0'G[bSPZutX*?PpS,ye:U8X9#CH`YE\i~^zilw9w,Jv*ZZ1lK {9X&/gOȄ@B ;5VA0)V^wƸ7˘O*ܩ5+s)Ag:Q(7)(ӊ`z֖HZB,3G8"Cl) g > wNQLqtSګnCC^ۍ|T,ivT@B[ 6d#.$UCL!J Ϊ;C bHa?V0P~ց ѩ'k N{Xpz3׍2}1G:QԹ薱-jBtW '=L/nUqsRu*_.: azywD1Ua,AFMx+W)7nLd5w4Q':=Tyg _BO<=bqs"69,Jr8@eNd>824jiZkt_^A{rD\E†0T޳w̅-裹O Pԉ-, +\u|l ҟ:p&Gh5H;rp2*xRPح9f!=88*ċo;Vc]$JyIDiMdzdtJdyt+\YaнtR*okf@^B%-ØfCc1!% "pSy%J+[` 4|±Jӆ0K&D%Bt|Lx:=`l'l}nb ~%9SѥVʯkӚ5yx:+L9&(R2 zHV1f 'ۑ=hD`Tt6d}chR< 0 ,n"Ơ>J 4;7e?Pb[a?4G2;?OdT̙mqO<m+ ~]#,Eտҟ~EMK-ǖw]$V6b UBxEh-KQXY,ͷ{LPdEI.4Nzk/8|E1[Hq8yYhTg }W5l546T6,mN!e#$l\V6d ;+ȇ;r鬕2:(n;5&l-/?Dl* 4OO%~)eKlдT@:9b }#: _0;3;pjƒ ?K?XjBz6ydhqQ85c|-2-\@yj޴DxVOt$^uKrʫqNBRBcɜRNqR9)WY0EWI=zRGa~L.*H1CErSjCJݕa>(kE8 -Ɏi@liՙujRdsrl Owyx_4+*feTn @2҃y,?Sg!&-o,#wsap>yZY">ĚZ8ehR ri4soBS5θ>BF#s(ZAAFDU)B3e"Qv %1M9?a ouuMSV>cT 5y r>,WUUjQ爏yAHj$K;'8OrBn}MlnF37*K8^yo>'FJ$m°/"EM4s+s^҈W%w~o{iVt q.{%$_S6D;KM4Muv_W4 e`p0CVݗܺ;}=W) Sp[lBB'ҲAR܎+)x7;pʵA柕5GK9WE2c 0GmgXÝ>Hd/k 7;{' }Hb 7lY H-o9mrB468!H-dXBr4uɌYASNڀ.&E>3!ep<+f6wKqyͦEtݱRM%ZϾp sѵz"?_)'NyphMh\͠Q@9-1B't\s/Cn֌N~ȼyIcZcR5yU :c, NOBǽreY>GP&!*Y%:}=bdΩP3 8/LE2.P͝3/F Q "f-?l(d4+Fh@hٕ,>lRh:PoIR.OxTG'`ٿaJWyTJq+A<Oxn[yyx-tE1=l~ɞtVߨxu=XDT| =酯cGG c.Ƴdk0p"'˫`C!^ҳ.fw)a16NRz<6ޭ#^D/oE&mM ˦̩CA(0Qm {$m*T3ʘ2W<.mZd!~N./&쒜)3|@\3=D5%dG!wS#ӶЏ*)sҗID`p `N Ň R;SŌnW­3(q6𢒋G"ۑO|Kred1W-N*{N5}FB4~(a1dCF Of6|_5C!!/>&@ΧsPkaetD>tm#tV;2d:B֔R:;,3f-@80EuC# /QoZ-Ya^Oc#0@.?ձc#a%r1?c%1RQJ !һy,S]b`xMp9MHh8GwiPm_Lm< jE:.co?($Xs׏2tEn=80q6;Gn@TN+}Qҿ7WLj;z޵WũU?]]|iVkD{>-aO xuh݃?6E#QW`` ~ۿ9 I]4[1tl#iMU^YoT#I9D.&lp`VT6UxFY kõ5q7g6ʐ|PiyQ[ 9 [%Ps@&x"Ԍ$1jÙMN\ K0,HtCާ?=vILA90fr5hNl{ê-EX_BN}lirF簺v͡RX܇7$hj٨U̓\dǻZ(;r(< .xy.~2E/~nUJ|1IA@]Xqh[P<^}q]K!Mͷ]=q% ̦ |pfc20f76d8,+pY3\uzNpq3ԵkH(\+U_Di|j.SFTv<╋ f:jzQCEz4?cPsЅC;~HjhS%)%Z$Tm凥T}] ۇ D<qD؋GfSXC94m|BDz 2?R'qul/ "_Iu1S7+P*gǻ m>12-=HXPRSy#ٹq_|5yA l(~0/{ l5j0xUqxS~ti%I(]tQ`?۬_/QjKUjQ<Є3/!" K%CǗ! sڠp4# "''sL i 8Ǧ4a m}B\fkÎz GQ9]CRr20|mg,WSi$t3V19I;G-#9v,*]<d}=Qq@g*410S6k?G~rȻbw@M1EXz>ƭšZHx}NN4&%%͆7kTrqIXA޿n䄊5eA鹙^7=Agaq4pl"LPOKk)Pu¢;@eBg~۽g\_Z1{RE#¦~&S Wi_t&`-(n+e3!)KFO.',+!S%v'" TYQ!!R8.3 Yaw^Q`QՃ"F]2mU\>dc&Ǩ5$:{T FC ӂ>Q:ӔRJUtS{ +c&ԥQ: w~@vqeE [І/xoj%39B+2o9X{˙ yu6F>hWh:=&,vفmBl^NEfs *cM~2Ñ2:Mn15qnRt|Ds$}(j3hcˎK":qMJÿw'"կFO; ٲdm+/'Q/Bc&;ufC_]D=`̺aZt. )Kуbo8BN`OǓ ~pHxn~ҸަLuVF{vd % eIVc{(t{4TG'")[T쀉OyC҈Mc82\܉.Y|Ɇ&B،Θtz \H@򙸕bZ~L7AedFn*H;F3rmd)! l8-tZZjS%G&dC+zO.w=*8-# 9Ab W-Om Q`;6W/{2PI%a |3]b]7K63JJlWDq:F9fD)_|On.+rIW4Q'P^^E9bC"MlZY0cDJavC$OU**o!mk#r4)TM'i6 [w<"tW \@} ,d-<(==~s1ˇQ^=xqgnD<;ٸJc!ȵݽrEiak*;uB{p4\GPG;̳`}uf@9 5}siN{I/I= \YOj Uv۷ǟ0{ǷnS:'I.X'0.Gn-فeҗU ]c n1lKZ.kR6)H#֞(k.xS;x&Bŧ|yR+EU=ʘ s(6Jo#]G u%{ "ՠ#+ +]gy=t{)Vp.syN݇t^9n ':̃5=|q Cz?jtmvy$^ΰڏt;uT\N-E=d!䤽XUsڪhTp9Y~6 ݺ(# *.ꖧ & (C>T3'Ly)7G>[a GȘh*K¦ch@v,%c׀Wok}a摓brloq1ȨgQ5LTd7ܡ ǂtdgeaZFo'G .4 ^[rhkce` J(naPiNfjL;c$v&?$R|6@;1Xix%a)>HEЛL1l!*EDӬ4->GRA0oofFA% sWT05R>.fC/ECӉ$1j&g!tjqWBKp }o7LFU[,Sf?麏UȘ'Ηs3o )Utء4-UhMZK?D7ٟu#H?8߽F9]O܆\ȏmn(/IB!3e0,.5+#!YIt=6# @۳LZ]>dt/}dfa2ʴ!H^,8 ⚊5p6f0 ܷr" &VYUL젍L_np䅂;vB0nK(Q[~t7N;pgbNMzP}e[#74կۮ_]ŗ\=n[ٻLJNQ~ u@+3M.?1\}[[T)cTWKtJ\̬ 6{cnnibȎ˝.  ; % ۷9;aBM8cbIDM+D՘XIH[T0aJ o 5@iVj^|/=q۳i m 16 .9qavO^`%p Z2yyE)\PVu3>qX`#FY%,^̵]RJW'<>uK)PA C.|?]:g`B8A21K(+IMQWWfvz`b_rP^i 8+ 2Di{Lv'nK TD^8zZߏL22d뤨.6g'jw?f.iOU-ؾ ;ŝ-6@4~gƁU߯nb),ጯM[2ڥ秺mm]/TZ zҾMtE(!b>eHGZݯ/ѸѮ{(YO@G p*^T QO!PԻbU"pZ% WW,OMyGEyl%&b{2E:p/ v|YQpg^(8`nc|؍_Ҍm6'eLk(p.W Jɵ)Nm9=ǂ7bf/` ٙOx{TA%RЂ oYwJL (YZw |]DK8~8dˬr}2lߕbx'C.>oK㚆&xU.r5uыBҊ}^t97$, DI/mֿOQ)Ke0v6^IQtdtl/b[ }we8m)ka q67D{7G25L1 "ۚ4_n v]}%I+hŅh7ɂkX%zE(hrzcXz^#Xdwe}`g3DE!N$=CC_].Wb2-%}U0iKճ5ݹj[lsJjøלmP!m;ds<3W{Fݏcǁz^\V`BRg&jZ92:Sn *r MoWN @/Ag A%6CmQӃ:Ws俶6vG*^$ ù[I]2sbe49 =O҄⊏-'i{R\Gs $]O(ﺓZ9e~Ù֐0b$` bs{lN DD)41HYov X9=wHa#Wa>Dϓ0ou";G"2sKJ>-C]@w r??PJ"!_L܇Jˤ_S\@{;23#IG+.N V'3I: [ޠ%Oh{M/>CPɍ\B(o[xyhٱ!%䛌k>)bRr:<4uo?ϷbXB5 &k4 EgT`t րt qj!I:I8qb3ߚ顗U?,xt'W޶^:i X_C8{(vK*:VJi<;i'1qRɾtuwXx2+zݜ4w=>!z"ucmg)39{LuNJB5Q e)N#ߋ|xx(,=iܨy*G_:'fwhI6K*;0 T[=>VԕC'D `l~m j4c1\azBʠ& '>W mz3 r`萜5Ag}jo8( H69Y{kb(wA$ G+lК}jGS`r'šIIİzJ]dZ#iK8º < g䜨ؚ*|Jl1?^7fi9Y+uyN)]up$Y:ߎҴKH梋̜k_a<&3nA*7 Cx)A:|Mm&GsP퀰WaLC|к9vc?'']F"")2J XLS\ٔ>#IŃm\l!O.t3vDӖNy"E%BH6tBAn2HL.73ȏY庐aJ':zHa a\s!ebN㯂 TiF!n""_: a {UoA# ێ> xHΥטVSuM.{0bw :PRWHv-q<~յ_Z j3Sn )"~UJ(ҿ=!V9yɎe u)/~d 6*|,/pGPnUO{qt7a4 D.3Dz#SeטӎuPKlrԿ'of@$V9fZ:XmSojs1^ Rv5`J Ƚcav?;aÚՇ˶9W7N:&l9k-TmC.coFݤJZr %lwpRA Ai(+8P]v0 ƷBzT9wJjhaRh>Jڦ~*LfQ#RLn3TP#7/-jEv+Z wlE9'gvbW4VYJUkrmFf&7@ O bU!tX^zв>ԛK/?Xq2x3__ȼ)><Uh~y o3ޡQW|0oz* eW >^2 'ID;ț! "[r/*pKGɕIױ~5>Nm1 s~#dٖ1ǹ l]#۟uz2GߧsfHX8`+c S^A\Gv1t ф&XLlFŞQ^X,~3f`RS:N7؀ O! YZ