samba-client-libs-4.19.8+git.404.38b26805d4-150600.3.12.2<>, g/lp9| kMa ꂘ͊ VNݯ/]wXɼ:U2 iWC6ɦBkoAB+LhӮ$ͯU2 6C*_1ɛgȃDsl꾷ۭaCxKpm9ǶKG]^Ӄ`iNkU񸋏`ix}MgE狍lkODVbwJsmдOn&X!}#u;vQ`>Cp?`d. < S =TZdv<v (v v v v !v#v&"v(p(v*`XdpX(v8%9%:%>KI@KXBKgFLGLvHNvIPlvXPYTZX[X\\Zv]\pv^fbfcgdhehfhlhuh0vvjdw|vxTvy, z\Csamba-client-libs4.19.8+git.404.38b26805d4150600.3.12.2Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.g/libs-power9-20SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxppc64le Hp y X ( H 0 H! px +`0 8!` % `Ag/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/g/8g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/:g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/9g/:g/:g/9g/9958c66f78eaa935ba393c66e85234810c9445da85543ad384014343db80bcf328569012d100254f257c63ca8d8cbf817fd7ecafd4edbe4d15278d878cfde668f214d2c28c40ce5820147e2ba889cff0b6691c39ce999a234d38e5fa2ac1eb0453883e54f3e2967d8e1ca4aef0b5068c81ddce81590107025b98071df78b3165be8b49d3072f6a9e96da3a4aec1261a80c36bd52781e9d99d26cd7582ddd6da4209ce2784b044c0bf3525ba304667ec224a09a3135edac3f1026d8764dcb44e5b02036e1d0fd64ba38835d1f930204f27b33f07dcff9bd0ee2b037d1cfc6f4186a2d8eaa175a33182ec23f311c07f37d83feb21605637d9fe31ff93aa3dcfa222ec0b4d55cb0ced269bb8393eb604613d99df4029773e7236466018259aed804b2aa1740004468ae785f10bee3aef0d59bea833c25ff73aca7c03572914e73b7c298c8f4725397c4bff67b014e5ea7ff8a8597157cd5903eda96c8cd9dffa9270436b7bf549cedfc372274ee015015cd160363d49b0952d12d4670b5dfb1a50e3fc53cd9010bb6928393e3114e5584899e34aaceb1c9d9829104d6acc5c8316939f984f556e1ddde9fd46f76723618fef4074b10e6332305b0a2f84fec0e7fc210f5e6c361330a4edfa4b7ec7825234bf951db6dae1df2828c7ee04ae02a522cfad7757728274b4238df35dbe3f4e1604a75c3babfc93b27dc30ac571f1d6513380b697003e98c878de42b71797e8ca922e5b62368e12aeeb63020a443468881cef286da7ea87ac94761685fb0f59a3b135337b67b2f987e988a4b7ee612ca7906e9bc0e6d1a6d1b288b10090525cfd5f5cdd06597afe843cd1144e302986f929e74f735acd7d7462eedbc1f5cb0e00d37e00836fe9050ce5abf36ea4d60ac88a51d041fda5cb683982b487ce3ad382245413ca79a229095e8f29e9495d84235eb783d25120ea2030b60ac8e034007ec111b24733f73391136a3a4c3edb7fd822ee79a13e3788e26dffd94bd2ed0fc6d12ac52c1495291741a6f2b8d40291f6055f01a6a5e73bbf92ad3b2f722958ff28e7ab6a7af90549e2512e28ab349b0b14f18a0eae2e55d49529163237b447cd8fcb8bd7f36836c9028b68cf3f046e5c5a3bf964ed72aca3a874bb73cff42f8d37864e16699e7bec20d6a2262c426069fc3629ff59942fcb1c2f0c207bb7c14230907f5b3fe8d537946b9b22d39c4fdfa91987b0dfa6e9b2145a73a222433503325d7aca1f34e78e12dd6fc1c65c3c5b8bb9efd2876d79fd6ba089da6f6b6e40f687af3c48f793963e45ede26ba1d051d23b2fe325c79b52f255e30c6671e24b7220e4d897130a8fd38cb937fa6315488829e8af73f6d43e5da78e239fe88b0f3fd2fad8c464a56c1d3614d238df409f011cb76912dff10afc14469e676e0ab57a2c1ed94f9330f502d1e85d4814b30afa80a395b1f910b2fbc69895094165e58e0c0a89d3e2e1e8e5b953b0814dbdd493d037d13cec46c66c12b53306a40b36d88fc9e961ca9c38bedb5b488a4079bce1a28a4ff35bfa398db2fbf85d851f9dd702296153aac03a89056069d042140a8a0493e4cf9b14b17160ea66a8954292b6a182c62a032a8d486643ebe873b572fd60df09b8e295ae1c3eadd276eb0a856929e0a8bbec9eb4a2ba5dae7cad6517a245396ab3ddddb8df78459d60773de731d50888a8e75b2f3b2ed31f9d6cfcac51045790c5f39119591d0edde5250d8c6528739193836e3219c4c38b0dc64a400b39c1572f6330b16a6a2aa415c8de581ef5f37c9d03c48820721d7da0aa1d473b18a4cd8c1cefc7d6aa27be360e37f44db2240388d18338e43c38f349e67d0fdc24fc18ada84f126e31e29c3eed061ce1048c4f8c7f013f48a20e16fa3bc363fb7c77245aac608c25d42f278e9b5ea5c49f498f20a9c94549a92987936f377afa1dcaa6921f0545ecd4ed69bfac34dc9ba4ff218d8848cf53d7b1b743d82ad9aabeff66cd48d442a477875dd9cd3ed22fcda31cba9636b41cc39f7bde4968db2409b19149b74aba9574efc0cab1f39e475ec16ff4f670ef274560e189e1419c2bfd8264643e2c9da1c601369195c8941a9b5beee4a163b32b8c9ffd3ad435005a631e1b60beedad2a401237fb40a9acf5eeebc0b528ebd49ae3d8e29a4f137cb22dd22550158a741f4ceefc573937a4325a7b9a43b46789a748287f2521de780c7d85ed8b6b8c7343cb6d5176545af8e43fb9840424d1410ca6491f687839cf7541595beaa5ecdab5990d90c67695d199a18620e495ce4d763f9c6ee24f62f08b999ffeb0d30079a1d2c473df0394193363e1974148db771b1efac2ff546cf80594ea394fafe8719ba7b1c939e92168e2b48b7baf50eafca1f28bbca88386d1c377b3f04dd5ffca8f156fc95db494799fa0a1769dddafc3103dd2c9f90d9aef1adf7494bc51461d02c01b3480420790fe5ca15af95bb571ec1ffe265c23e6b8e0f20840fc8e33f1e62bef7007d46b7a31ca50f27403435f32cce9d72488aa51d8a32e95e7bbd21b6cf5b82538936c8f7b947a57ce7e52468bad67fa1b074e7814465c8250fc0bf9faa6dd064ab6ef0362e3ff6ce82a12b925700f3bd9f481b6b02db1c3cdc89baf6cc9b9cc55d34961dd998a9c40fe32753a16a5fb12b992ffbbf58eb201ef05e633ce82fc1ed01b53ac920cfb5943eb3ddd39782be659e89175725d300436152fc19777eca7a72bc333bc2a0103409b087068a7f5eac3786ffcb91f4a5300c6632823f976349d7b8dcd87a6462ee13bd46b3c0d8c83b9162e8de13df6e8ad6f36a3ee8c1a4bbc9aff308bb851698f78ab585d6db495e72f817ae35ee14449069810515d13d515119173de0a7698dd17857b00eab9e91610afa080f91b05554d77d30cb7a767c7b7715195ee9625216bcea87044851a5d8ba87d5da0dc46505dc0d5a0051f4eb5c5ea07b0abb3db5ad2c5223235b3c9c533e9e4aba3884116ebcd35056ed46d617c5aecedeea63a3cc37fce2d853c9e439eec598b801babf5d6f44e21dd483871d19e91a70a27af6010f1cb4be4c7c7d5b91103e4d5f172c5eb10983287956b5c78e13d988680d0ec5e097535a32ff7173a2ca1495b3e520359f0672f1cc56f8122704faad4c854cc35e02d2588844c9e8f8a86096a2bbd85373bcb5b75690190372e3797b8f37ef356b45a6941066f3a2d183e68fa4aefe643d28503747918ff4d71f93be942a07a45a4a41c51196caf43fa658b670c3dca5b7bfcc0f6effeb4ac2a8e7f4f4840bae159a6836ba70a930b5f2856e0153f31e69b715b2c6f057c00f2a54009d166d4bef03bb5c9860b439b09fe0f04e921d90f0a75b0c391bf9332c103dbe28f8bf4cb8a784f1987b053ebf1b6b000c006adf249a225d29d7018c9ca0cbb46225c03c5c1896cd63c254e7bdab45a9089c3d32f8c186c353f89dedd8577a7692b16fcbb67b4c576a0bdf20fc9e613f995452cb06849062468f535d59ccb3dd014a396d30d30d522bcf89f2c26d1d4e4df57e62b3459d6959226065d3fd1bcd8a19c492ced26e623e76930bb62adbcb010f588988828969f51e409e46a6fef50bad91c72e5e3e684cdbc24330f30ecace9af9ff7c088c35b1fbc988e590c13d428c223e9f666a76bd0b280c844beb36218ccb3e5ddcb948fa073dc11eac92f4d64f2e0e8be48ff63c7e7ae056dd78e759686a281ee1b0bb24606394d42a0f36378fd64b6d5e2299ba65f525bc6d1998562502eaf31a32f995c1db5b24e3050b6662f64c9e9057f04ba17c72d5e7d220adf28b1bd1b2bc17c20d5280954fdacfed806e5d76dfdd92053431fc9ff729b3181026941101a6cbf049c7e27184cd9752c4bb52357a161223b5f2aca3e8e17c89a3b33e7c533ab4fd7e8b8acc156d746bdae9121447519a1c0ebe991d593927f6e3ae7cc942ee41e933bbef3fe715f772fee24e1f327d85fd085a0d2dbe16da0f910585c83421206ef073a01d9a11baa762ff4f242c3ff12bf5baa9a79acff737dadbda0df4f5fc7be04568236b45a37e13538a375a710202b57ea577bfc346e976a7b702526ea2d08dc38a54387f2c0f6ffd4ece633916beb4342fd9717f7ba2f7dbc96c30a2a08e6a5aa09aba4b6914fbd046b85b3338100c90d0817cd968f979eb36335000294c745aea74ab69d3560e329f35290238d1d09e9f395fdf20a2d1c951a28855557f1b023e2768f0f2886d671706127feb1aef90c59204aa2db54cb69a7d5530c768b5c32b14ff86b16d1dfaaefb0567ddef47ed05dab6289babf35b25a45df60b4fd30b8063b69a885c604f53ca1ffe221b34a79f8a48e15225c64bc78234c6fb746787bfae5579af13b0e1edc7678ad3493a781b7a0f571e56d466bcd7b2a63ec7758b3b9a4a92c521b7cf8c1ed86c72ea0648a36704flibdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.1libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.16rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.8+git.404.38b26805d4-150600.3.12.2.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.16)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld64.so.2()(64bit)ld64.so.2(GLIBC_2.22)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.8.0)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtalloc.so.2(TALLOC_2.3.5)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3gRgR@gMgp@fٝ@fxfteԔ@ee5@ede6`@e-%e'e%ascabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comddiss@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Fix crossing automounter mount points; (bsc#1215212); (bsc#1236803);- Update shipped /etc/samba/smb.conf to point to smb.conf man page;(bsc#1233880).- Update to 4.19.9 * libldb: performance issue with indexes (ldb 2.8.2 is already released); (bso#15590). * DH reconnect error handling can lead to stale sharemode entries; (bso#15624). * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699). * irpc_destructor may crash during shutdown; (bso#15280). * Compound SMB2 requests don't return NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses MacOSX clients; (bso#15696). * Crash when readlinkat fails; (bso#15700).- Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414).- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684). - Update to 4.19.8 * Invalid client warning about command line passwords; (bso#15671); * Version string is truncated in manpages; (bso#15672); * --version-* options are still not ergonomic, and they reject tilde characters; (bso#15673); * cmdline_burn does not always burn secrets; (bso#15674); * Samba doesn't parse SDDL found in defaultSecurityDescriptor in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685); * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious; (bso#15654); * When claims enabled with heimdal kerberos, unable to log on to a Windows computer when user account need to change their own password; (bso#15655); * Fix clock skew error message and memory cache clock skew recovery; (bso#15676); * CTDB RADOS mutex helper misses namespace support; (bso#15665); * The images don't build after the git security release and CentOS 8 Stream is EOL; (bso#15660); * Fix unnecessary delays in CTDB while processing requests under high load; (bso#15678); * Dynamic DNS updates with the internal DNS are not working; (bso#13019); * s4:nbt_server: does not provide unexpected handling, so winbindd can't use nmb requests instead cldap; (bso#15620); * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664); * "client use kerberos" and --use-kerberos is ignored for the machine account; (bso#15666); * Regression DFS not working with widelinks = true; (bso#15435); * ntlm_auth make logs more consistent with length check; (bso#15677);- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0ibs-power9-20 1738944364  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuv4.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d4-150600.3.12.24.19.8+git.404.38b26805d4-150600.3.12.24.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d44.19.8+git.404.38b26805d4libdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.1libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.16libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibstable-sort-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:37359/SUSE_SLE-15-SP6_Update/b6fb6fd06a0afae1f83ba160476a0246-samba.SUSE_SLE-15-SP6_Updatedrpmxz5ppc64le-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=609d451ab8fe51b5423246949ad119a4aab71990, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c570e3966ea351a94ce4eb2a16bed113b16c1236, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bee23bf4e346e5d1866b88c392c7308340f3aa52, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=65a4494efd19f6f453386ac5c397f1c65ec10b42, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c396404708939381707dd064c3437a90009ccead, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c831026d2ae5a59c1479b9a115bcccb4944359ce, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6db05a74e2628b7ac21e070f85edd0e34e679f84, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1fc1c769c0f7152d3cd0318648d7ee360bc5e997, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=83aadbd26246ebe21f9959cd3fb2e0e6a25599c7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5371784df387cae68eee31992258cf2809b7a348, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a7b5f0a3d524f21288097f9b77727f889e29e9d1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b298a445844dfd89bc0ce951c300d0a64d996a50, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=79920f501bd6a3e5abe6de8bc4137cffb23d2996, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a2dea3a3053e75552a967cd5c3087b63c7f8163, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cbaa841b7ee43c5bfe96f0e667c8ec33c0e84013, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4c43e11dbb3faba067c1d5731d0a7a6be35a7168, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ba3b90f3eb04f070e7017b85b44d739f985b3ced, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0718d0de2b9ae4851653ff4b0d33c07262be8253, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ccaade83c0ce738cc0648440b6468ae3ecd677b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a4d4181106e6c72a6e414c24d6ccbdc910561835, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=302746b933457defbec401d778c7e0bfa82660aa, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a3eae1df411ccbda5ccaaa0d5ef69b80624836a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1fee1741956f2b3558d6cb97379a7ab2ff6bd205, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2518f2272c5629aa7721884e17841eff24378a4a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ce557eb2d0dc3daac3c07c23fd8fa55ba70a13f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=57411ae67779aee84b1da735bf0b25d6ef607f3b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3e64af3e5bd4084f340fdfdfbc6ec930a21005ce, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=aff4cf9acef53098bc7c899b7b8feabeeabea45c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=093eca2ed781ddb859c4797b5ef33832b78599d5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=40c670138b0e1951332bc41ec1725ebf3e102d21, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=854b887a03ec786f4d9f60a976f5a743d386dfb7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b3b1c63b273bf1cd7099885f3191f3a85f436756, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=42f932f65d2b708eca9234ff3828ecef0a504081, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9267249e30a0d156a3c13eea4bfa157d553e04c5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5a27ccb818aefc7ec75c43b51493e7806c3325d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2279347fca36452777fa8dfed789058c9c4af902, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c2ebd854cd08e310aaff73320521d12d53d05140, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=592bc01b0c4267bcdbbba898c131064b2ced9653, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c63935d4f1d0ba72f4212d8e5b1f85657433f49c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c405792b83791e39ffa92f42d0aaee4317aa182a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3446a19926c43c850b1fde5bcc18969b37ea2fcc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=738c21d70eede10f56e56b5d599c1b6c67c9564a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a1e511a29dfa9b635a1c0d2eddd704a338482ea2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1561970641f14a4f0d2057e2a594fb6c273cf07c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc3fa3867df2a1f7e6b6f416cc896d3aba2d24b9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0accd734ddedd299f2ff0e74b39497b51213325f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e71bcd2fc15485d348b192fc16852e90f8c0b95, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ac52b6d91d5b81a3f1468e992b6b7d1bd9b7b4c5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d8f4ccf274013c5b579b210cd7d50fde499f64c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4be13f394b6e9a78f0e8d069cb9892ca65e7597, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=76253035e3c304db836bf1d5f19d7fc398602310, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=37157344749e564ffeec9a9a638f0ba4ea1c8604, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b06ef58483ac029fdc15a25b85f9853fac89e40c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7a8927851602fd9f5312373116d2fa146f091fd2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=453f331213ef55b2a847c6d48e73e2ec9a9a4e4e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7c0a7397e449686ab3e6df8afa98609b15326102, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa04d4df3d0f4c959aa15d9cf749e026e4d42bf5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c548dbd8606a0f37c552895babca7fdeae0ec345, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9eded112ef7cd259540139bdb8ce7a88341d4beb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3bbc966a823a426b6e6668f3185f8187f3d92ff5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=16faf5b7339efb0702059dc314252dae2d6d7e7a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=42a3fbe286e93839132c8ee30bfe3b396935d6e5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3cbe9851b8047babf0542dc9a9ad9658961bf3c0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=954cca364c732af5acdd8584938f47377b4e1daa, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f72b1cc1c2ef4345cf0ab15f03fd53a60ae29cc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e76fa83226ab8117dc7343afc47fea7f7d896d8f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1be53b36a6b30fec616662864c1757025a071a76, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=53199216fbee34be7d4e2b46be307448e5a62109, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3ef163927bb736990ec78a5eda8abf1577ef8dfb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=591c91488c56fe0815ce5572977dbe7983e6210f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=81580d6d66a2111b10c78a89115b365ff361726b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3895b8c6ccdfe1071a1ddb82e2feb7274777dd76, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=deda50afa3a354828891394b4ffc2a83cc429df2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d15b4377aa8c504d79f726f70cf22ba42da9743a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0cc147a648a0c25476b907b5bcf87a475fdba73a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0fa5a85a8aac89cbdc055aa4f64bc9825ddb815, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7facd4e5b375329a6df85cb15df5c4acbec332b6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d8086c8b7d2e98f236f9cc0b0ee37bd648a0690, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d9d12685b1b503205692b39a657911b80c98a3f7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3adae8bda6f162f1685376629a6a8cb6f4d55bb7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=219e93c90d46a996aa6acb2d7a3df28dd66bc1a2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e0d1e89f09a1725cc94b5546a10bfc65320c7b9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e51f8c52ffb84b248647ea2d0082b3f8ae4f69c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4318d51f0e1110013a4eccc8b0ed30da0526ad77, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=55fcdad1509af25751accaf0f50670e3698dfea5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b74a6305905a73949bc6b815d3435561f52bdcff, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cac0208f777362301ca347cdc226a4ea270c4483, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9486785191856907f72bfa78a3ca340d21fbc135, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c3ab7cd9a42842b847f83829a9c42f7834616ee, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee340ae2758e16182f742d5279b4d44434eb4d7e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4f2345545ec591e0851c91413417e8b320366238, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1002543afad2a70bde7fa941af3db5f25a246922, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b03e3728d82451308fdd8377a847d8bba5e9d84, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b76983cab0002630215077df977c0995d51606bd, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b6927a9b308e541439490206440aebf6cd7710f8, strippeddirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b42117cbfedca576b0442f8aa97e34dc3151b018, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=96f93737a1b0843a67940ea318a2b6ad7fd3d8ce, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b9dd28003161e1e69f31e98e04bea499797b985f, stripped G=ks j$Li#G^)5=Tl5oIfl{(Cc  5 ] k q + / G K Q W ^ j n '@5B.E1J[ (=G($1)#  9&: , 9E  % 1(-} "P+P*RARRRRRRRRRRRRRRRRRRRRRRRRRR@RRRP4P3RRRRARRRRRRRRRR7RRR{RCR9RRRR8R6RRRRBRRR@RRzRRRRP6P5RARRR{R9RR,R(RRRRRRRCRNRRR$RR;RRRRRR RyRRRRRR7RR8R6RRRzRR'RRRR+RRxRRMRBR:RRRR~RR@R#RRRP_P^RRRRRRRRRRRRRRR~RRRRRRRRPbPaRRRRRRRRRRRRRRPiPhRRRRRRyRRRRRRRRRRRxRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~P~PPkRRRARRRRRRRRR@RRPPR(RRARERGR,RRRmRuRRRiRRRR?RRkR}RRJR;RRRRRRRRRRRRRjRRRRRRtRR:RRRR+RhRR>RRlRRRIR~R|R@RR'RRDRPPRRERRARRRR5RRRRRR,RLR\RgRXRRRRVRRRfR4RRRRWRRRRR+RR@RUR1RRKRDR[RPPRRRRRRPPRRRRRRRRRRARERRRRRRR@RRRDRPPPPPPPPPPPPPPPPPR,RARRRRRR{RR}RRRRRRRR5RRRRRRRRRRRRRRR+RRRR4RRR|RRRRzR@RRRRRRRPPRRRRRRRRARRRRRERRRRRR@RRRRRRDRRRRPPR0RR,RARLRR"RRRRRRXR\RRRRR5RgRRVRRRRRfRRRWRRRRRR!R+R4RR@R/RURRKR[RRPPPPPPPPPPPPPPPPPPPPPPPPPR;RRARRJRRR(RRRRRuRRRiRRRRRRRRRRmRRlRhRRtRRRRRIR'R:RRRR~RRR@RRRRPPRRRRRRRRRRqRRRRRRRPRRRRRRRRRRRRRRRRRRR5RRRoRRRRRRRRARRRRRRRRRRpRRR4RRRRRRRQRRnRORRRRRRRRRRR@RRRZRRRRYRRPPPPPPPRRARRRRRRRRRRR@RRRRRZRYRRRPPRRRRRRRRRRRRPPPPPPPPPPPPPPPRRRRRRRPPRRRARRRRR@RRPPRRoRqRRRRARRnRpRR@RRRRPPRqRRRARRR7RRRRoR}RRRRRRRRRRpRR|RRRRR6RRRR@RRnRRRPPRARLRRRRR.RRRRRRRRRRR-RRR@RRRRRKRP PR"R RRRRARRRRVRyRR RRR}RRJRXRRRmRRRCRRRRRRRlRxRRRRRWR RRRR!RRIRBRR~R|RRR@RRZRUR1RRYRP P RRRARRRRRR@RRRP P RRRRkR RRARRRRR,R3RRRRRRJRwRRCRRRRRRRRiRRRRRRRRjRR2R+RhRRRRRRRRRRRBRRRRRRIRRR@RRvRRRRRPPRTRRRXRARRwRRRR3RRRLRRRVRERRR2RRWRRRRvRRR@RURSR1RRRKRDRPPRR\RRRRRRRRRRRyR"RRRRRRRxRRRRRRRR!RR[RRRPPRRR\RRRRRRRRRRRRRRRRR[RPPR\RyRRRRRR"RRRR&R RRRRRRRRRRRRCRRR RR%RRBRR!RRRRRxRRRRRRR[RPPRRRRRRyRRRRRRRRRxRRRRRRRPPRRRRRRCRRRRARRFRERRRRRRRRRRRRRRRBRRQRRRR@RRRRRDRPPRRRRRCRRRRRRR;RRRRRBR:RRRRRRRRR~RRPPRRRRRRARRER5RRRRRRRR{RRRR4RRzRRRRRR@RRRDRPPRyRARRRRRRRRRRRRxRRRR@RRRP!P RRRRR5RRR4RRP#P"RRRRRRP%P$RRRRRRRRRRARRRRRRRR@RRRP'P&RRR{RRRRRRRRRRRRRzRRRRRRP)P(RRRRRRARRRRRRRRRRRRRRRRR@RRRRRP.P-RRR7RRCRRBR6RRRRP0P/RR{RRRRRR7RRRR6R~RzRRRRP2P1RRRRR}RRR7R|RR6RRRRP9P8RRRRRRP;P:RRRRP=PR3RARRXRRRRRRRLR,RRRRRRRRRERRRRR{RRRRRRRRRzRRRRRRR+RR2RWRRR@R1RRRKRDRRPAP@RRJRRRRRmRRRRRRRRRRRRRRRRRRRRRRRlRRIRRRRPCPBRyRRRRRARRRRR RRRCR RRLRRRXRRR&RRRRRVRRxRRRWR RRRRBRRRRRRRRRR@R%RZRUR1RRRKRPEPDRRR.RRRRRRRRRRRRCRBR-RRRRRRRRRRPGPFRRRRRRRRRPIPHRRRRPKPJRARRRRRRTRVRLRRR@RRRKRURSR1RPMPLRyRRRRARRRRRRRRRRR{RaR`RcReR]RbR\RRRRRRRRzRRRR@RRRxRRR[RPOPNRRR;RRRRRRR:RRRRRRPQPPRARR(RRRRRRRRuR,RRRRRRtRR+RRRRR~RR@R'RRPSPRRARERRXRRRR,RRRRRRCRRRJRRRR(RRRR}RRRRRRRRIRWRR'RRRBRR+RRRRRRR@RR|R1RRRDRPUPTRRRRRRARsRRRRRRRRRRRR@RrRRRRQRRRRPWPVRRRRPYPXRRRRRERRRRRRRDRP[PZRRRRQRP]P\RRAR3RRJRRRR(RRRRRRRRRRRRRRRR,R;R7RCRmRR5RRRR{RRR6RlR4RRRIRzRRRR+RRRR~RBR:RRRR'RRR@RRR2RRRPePdRRRRwRRRRyRRRRRRRRRR~RxRvRRRRPgPfRRRRwRRR{RRRyRRRRRRRRRRR~RRxRvRRzRRRRPPRRJRRXRRARRRRVRWRRRIRR@RRRUR1RPPRRRRRRPRRRORRRRRRPPRRRRARRRRR{RRRRRRzRRRRRRR@RRRPPRRRRRRRR;R{RRRRRR*R)RR:RzRRRRRRRRR~RRPPR=RARRRRRgRRRRRRR\RRRR;RRfRRRRzRR!RRRRRRRRR@RRR[RRPPRRRRARXRRR}RRRRVRR5RRRRRRR4RRRWRR|RRRRRRR@RRRUR1RPPRRRRRRRRRRRRPPRRRRPPRRRRRRRRRRRRQRRRPPRRRRRERARRRRRRR,RRRRyRRR(RRRCRRRxRRRRR'RRRBRRR+RR@RRDRRPPR3RR,RRRRRuR*RmRRRRARXRRRRRRRoRR}RHRERRRRRRRqRRRRRRRRRRiRRRRRR RRJR;RRRRRRRRRRRR{RRRR(RCR5RRpR)RlRR4RRRzRWRRnRRRRRRRRRQRtRRRRRBR:RRIR'R+RRR~R@RRRRR|RRR2RhRR R1RRRDRRRPPRRPPRRRRRRRRRRRRRRRRRRRRRZRPPRRPPRRRRPPRRRRQRPPRRRRRPPRRRRRRRRRRPPRRPPRRRRRRRARRR7RRuRRRtRRRRR6RRRR@RRPPRRRRRRPPRRPPRRRRRRR,RRRRARRRRRRRRRRRRRRRR+RRRRRRR@RRRRZRYRRARRRRRRRRRRRRRRRRR@RRRRRRRRARRRRRRRRRRRRR5RR4RRRRRRR@RRRRR69]WButf-872d4296da80aa3582452191989b35503d58effc9078594d63153e04af0a79f07?7zXZ !t/]"k%DM2_e#Ȅj((KyŻE'WxBPcVVJl͌gBcs(B1dbQԪ]࠺CzN 8 3yN"IXnOŽ5V]E5<>A:AHz,XȆ+_fJ`8޸SCr#:T!zWɊk*$7F#E<fUZVseg)&'c% }aG\v(A;9iG:/.O DuYE^z]l=aW9D`m1A@? =z\`Q'4!ˑ>&ХۇϪ+ޛ'Ire`=)2Y@bEPX:Kx[E/Guoܹ5;ws,^Ls>2~@˵ r̃dX% sH"˽$%3Fb"ԋEm$Gn!Gܔyl]n7szY$]$P4,mT$AX@ OJ2Ut ? co}7EשAL -Zޔ>V 0]o]dPOTM%&͵u9..1fb<ʎ[C@7\`d|(̯m"#CA3%Iv*pq$ EݑO0(PoGA)il% %FwaE 5Ddy ӒaPta?44ځD=Eh~O/]2w/>GbjVWw." 8$[4*-0 &G |V@ iZ,q(OHW[Y2ʕeTU!NAy)l֑kXا6!lu<]S0IȫסiDpB*J:UVus2ٻ4?LOW N0@.]Mqt<1Zے tR}_v<{-!C㈤z.dsg|)OS&Vkb<KڂJA׳*ïG$^G%gsQś^` R! ~ }ݮ8ЙcKNk0El?iU=(^ l=^6q(@?+d\,?1g@OTL1tV<&Cڡ^dr84Sk\P eVNogbXАdש̰}(kkI9/~jWMwÓ" 8U iW.5&31ׯՅ ozX9E8^cU\[Q0*⿂&ToG4S.=?-^?mel?d,#,_YBph5<81E˳5ǵ.pV?@k~/:N>xN_{NI1h;T/Ο(]3fm0te&FΗRVai~|}5RYi zxz F4C5ef Rpj_yK [R߿>ĀAAga؀!XQ ˑ=~`K.-|Y| p;f S[ʿ7!:[EN^Pz4rS01Mpf!.IGEmVz.W'5\~Un?V\CU+C;O_AAEoP:g&_x9z KhCY̝+ϴW{vN<B)СpZ1 $5Wk[h ! 8uq͂*ï=4`SvCYF=,i\~n5!cI_V 5Ifm''jnx0f2ISyērϨܘE|o1QIȦ7$HXEKm-'@`)ϝ[q s`S_ML `JV26:phYB| -f7T;"BM ajP#:1\MܲCg}諗6f[}rM` ԧ%hRe[:NciJwg4XC u$V {Ԃq'|Hأ.{6V ^G{IRb^L69𬏟ϛY9Y7|?#f;𫄯x d[\"Ά&%A'@T_piRfu k#"6u q˲߅~XK(ϟcy=$Q!Bg1>#ki1] w8;Tԋ.mv D?R#(ΠN/O Ymj3Rbk, *5z9HF_xcI0ڔBa'G|)ٟa+K/[ j&e^CɅOJeyȏ@AsZ{tR<{Bbï{")~"w働. ,mP6724RF ^C!v I0L"8LIm[J8۩v UD# Wl(뵇]?n4$bHD"e?+՚TX,z'RhƳ@,#w t0=˟-7] E6|~Ӌc "KGƟ9tt: FF. qiYiv76O`8y/rnL$J6Aڦb$ pOx,|\CJN:fbM.1'1CNLۡC}J 1By6MUDpUQ ɸ;[ TʏPG/5]Jؼd"d.vΒ~ 8 dv+O5OSqsWFD_|J X?gu(Mf냢ͤր"n+* Rr\^/Q5#b|~TYeiJ\w q6 ) w4 E1 P-eH=YpE\澧aGg=$>4Ϯv`[Yq}x([ЦCͅ@DZE,E7'qD:P2l ? MxIْ5ćfmO \s)r[LBVp+mmy=U 0o|Kp/ th,p" n "f%gd0{ҹOM9,QL5 Ǻ <28:?V2~;p>:]ݯ+r,'Ty' i|4ff"8z Dkb,_m3-84FXcX`6NװIaD&gʥLgj94D-Y_]HX:2Fk]SZ @>:IR 1vಙALUtS8OU.8=4 K#=NQ , O~q>~ê&j76(?υMG"zCz]P Oh(w4_o##N-tVE*XV,,}0d+ɛ@0'..G!Їm6D߃j߭er4 SS\ X]ⰧxݣUȌp̔|kD!..PDu 3LB7]km7Þ xsxߛ@c V6i,p /DQ"SY{v)oܩ)PaO6"XRQ;- "z?@V]-GvMx^gǴJ!2«;ף3㨀(Je ߐ3{wz:5^E,B{RZF ?΂-o XGŤ; uC*  O0t396p>Kqܨ&IK$ezS ]-I4+W]O:dF@*W6 Rs>rqh |18~x~08b\Oq}S<SfB`gf0j%L>>%2XÈ$r#'mN?x.`ck}{4dP7O)@jwB(O:fQwك0v'=.(,yG>o{eY̬F"t.P1NZ,b:*zRX59Xb)T.`LYB:yߞDҘ6v5!Rj!bI[o유㲿b2oQši:3BZ:f"06PP$kU\J#<{ buw.kB75f>;U89dڼT 96ev 7m H4I27er^+ڤ￨Qt"F\ժ=0Y$FE,l} zt=g7i_%FS5WyrGHC|Ƈ B1vqd^wogy솔) R8`c1.B[QYi/ɱxD9lC07loh S*<#6yXx  vƳJ_Ÿ'V5W:#Nr".Axt+b/s  *ghP )`J5`0 :=s/f{L _dLJun.hKzj>W3{c~ )nbY>>f/WPAiaLAYxaT7;73RQuD[V6C.$A~0 ,`_e <%pЇਈX HRk[nsF)d,wpе f{lmϒOJpu>BNCtY/?$$9!P_X߲~+ 8?'xoʐAWW|(}c:_=X9sY1ۉACL[p j/lB$za]Jn/pzQs"/K8VK;Рԇ]2 !F5yf&)M7Bm]qOiB Gc;E-q,d?",A3ؽ*AJiF^ Rɢ,ck @(j}y T&P(BtVNɟjƅs[қU&VsA@¦R"yΖ8T u !eO͵o EdD֣њveCw8 :1[Mc֘N{#r a> S9L_"=^4>Ǯx7LCEVH'@hkQKw (MyŠ/0$x0ǩ6025ir&u> x 7j?2g[GB&;4kvXl2e.CU%u?j9lhf?Zn9zw"PZ//SEhNCE ]4GiSD98+=\ S̠ r 5H1)teG,/gKIZ C~01"q ҾEcŦRa-F mAOZ{_\A\,; 0Z 2fJ%L>APq/ڠx@[ۧm$ZzI'g1_,裧EfC~큨 ,ltOg5Yb'%4,yo]zLm^6K,!m!g?#$ @xeɐSAQ)lՀ(4'jAA IS>-O@' 2JJ \iT%N 8K*j%r;˽5\nLu; mmkZ, D&Urw65ƥІVlQ4wVd}\я2Tx.Xojo؏%r.{" 7ˉ4 5𰙸gn6]o[tHz}u/\yjՋ0?Ѯ7E?#GZ:VKP?3e\x;1C+Wcy㹺OM ml # ΀nB+| ,#obntst:F孻#:%A9ZG}re SHMi~0ayc ; J+|~p^w\ 3ʖZ?e&+mӓzo=X!yQWn>|`\&6ǹԌ;F[5b]|%}ֹ s+eF)0 R<; +N?%2C\pJ@vB.r\B3MǎzVwk6uӣ:}0A/^̽P /YgcX$z+>*p |TkSUݵ!Df(Utyk$JaqmƤl(܆!s]Qa1O.,S `&' eqP4D7 bkLs(5(]hm^q,-"_Fw"FA|f|9YuE'.zZV%F@ ބ€8 ٞh&KQXЁf3 I8w皪 /9oI >ŋ;sw]Ł[>!#Î4&fKcc脜βZAq;}d{/^{| ӗKF7vzM xxT sd7$h^~+ +>o↖j+omV<.)Mݡp\X<Sz0Sw7}!˴0NP^ʦ*!xj2JCFpԦ*C3$Ӣ\|  ÄJ ol1p$^^=ަv-dFq4,qhX //Ɨ6h%5?Tn?h5JGi@j)ŤW?[3~vQleajSܡMu k^>hݓvBGvi;|L֨GJ~,!,ܽtVܮ8^>%vw>tsAT19qD C掯ց:7 de;/#4QyDTj|[7=*T[u!,9ܑ>!^>dD&  g;B}ה '4Byi/O跰@%ֈB-kB> A0ks5 [ܠ|†J 6o%zo`DSZ9!~灬(-"/1b#}+ _M0 $ht)#Yp5)R`P8ҽ'~N۲v>)&}auRa}!c#}$z[CRă^|K#1R =r͘%D+ g2 ,upĥ䭕cǤ5w|6ea{='P{զa+{X$ݸ @{ɤ&"UmdNo1S\iڻ䦡UT!bvio!p&!n0B4\m$Ʈ]{82Y>NG;I_DlȚF^Dr10+*oGx$ ]3(}I<9n|.f; :-{HT365$m5/2IP꿩ܛ$Hxx8rT]w33Qއz+ǝm`mON3Ur5chO\OV>2.M (+)6*}ГH'B3 ~l'D2PQ W]+P~LA}Mm12V*^Go5W=WbK₊ͼxXE V5PLtLie\KOnr#uG%x|-wKcQ\߼Z-)j|A]^JV2*?.!@6!><Z'A-іz)3#f<Ŭ O$3$'Ob4wJ..%)JJH5*il3C(A\ Tؕ ="[Kݽ L!-K8[V7 t6ѠN&u|hsN0 ˣ&?[Ph:@\^`v8#6cBC ɶSmG}[gGZK3PU7 Mr\], /.ZeFʽ嬤Ռۋ& iROشuΎ"@o%6a+p\π g/Y8IbMgkpynfn/TS\x|Abo3HDټPL4$KՃd .V9R9S*&AdeW>iD's3r' EeV9>KitC܍.Rp9{^x{ܰPRJWOLUF39:SQ~AeRjM,jrrzϫ2>ncr,ȫr (?dg;K/|XǀIͿش:DrOD#J4=l3q1$h;fQRMFҾv`7MJ~[X?VNuh+zEX͘_ް;)DCd2ҙ}N〠%UcpR5~[_x23" u? V6ba]À-7{au|:XڎF}LGtu71lwz _bK  $4 xgh O[ |ѬV#G>`agpEX"QhV;͙:Jj%ax Il||K#7&Kꌋ+&U#c\oƲP6;}g_dN:\9n:n*irJ@xMOb\S] _5¯L6LZ.KGィEcS$1ޖJ>fIТ^yL!7-L 6^pƛ4q7qYuki-D- T{wf O o񡎦  ӓ@[,#p{WbbfdV);řSa&!x{^$a4Ҩ^AI`.D:i[vR<]neɍYTEhD fK$U}'ż)Ґ&TDr`GE'1 < @c2*ē,:wc$2dW4$3.N;-K8 +-^t!TAúNyt|MD<\}>I GϺSmݎ;9F0 aTqx ;,JcB &ZN6`h 3X\|78e0JApB+/fY;'-MQm;{f% n~ -t҇7-·[vUwWS 61?MB *:꜌oJK JNv˛RLg#җy/{nNX=kU(rbQ丕+va"--2NMG|_V/Y@E^ǝ# <">.FcN{z\ ٌ`G$Mɟr"c,?4'7(dUCJZ@l{RT#0ЇZ' 5>v' 4>yLj75Zây;kMjJms{1>+YaH @d俉m%J.E,LF82T 7 گG' zY6ވYS#uo wR 9@Y\b E7򗂒 H퀶j5YQdtfrBsE#Թ; gb3JFk{¬6O) kf2C68Do[^$97}`W{+3ġ. b Ã]+L(T7e- Vg|7,U?qgfzbd;cN?CzO!ch)/&$$zHV|6t*%JF\n6[Ѫӏ0',% UEК+=<ck뛧q]{Wv 5y個qk%dTmcM{洹9xұ-aWENUkz79Z8sI\h>br| f iT*Wx3۹:cu vrBÄ 0Tk1_0"\ܓ*!`O0fց<XURnNaP;J7d~ 77)qǙ1BDsZ61f].N|ti¸M׭Nu7R LhErZb蓷:!i!zB"?h c!d;vv: ]G'畑flLR}PFiBO pt:Fg#84hji/-r. PQrRa9\!%pJD@KQ9qExsl olvkyOa&|@-FҰ,By{#3+B!sa9Df^)^9"cL#yԕ[} 9MV<Q% nFO3e:6[xB$\Y|@V{ 'Jb&jP'`AwL0| *̀V#5̭%!x҇&ϰtʞ`iɃ[:#qt`@?$ 9y5nk:Whla5ns8=/V0ϫ#᧒X^`t C#'mX[ [R,}qY΢Y.6.IHVFd%џ%UH֧r!=_8 @l\gqPYrX, Ӓ@q+L3,4)1}}מɩF;ܦ@1c8[L>ֺމ.Jdej/ oo?d)kۜH]|`4Zom#n1{?wE5AP6k \'`h)^y~QLrp Xզ YgAWhԇ{ukbZʷm7fpoo:5;^5Zİ7j@T`H{af\7Q>#c*9?h;Cr.7Α#+F=zIlBo+R.b`WUY`혋+r SLc)V`.Ě( (>D%hʝjôWXf3a`'=Z0{~X) N:CME|0sɢ:u:6k2R? v8mYM28I&,p3r є> ]vo]WT9Y6(:19SbAVDy_t&s֑FXFBx^=6r(lh)ݛ9%LIl)ſng[?%;#іA\243AixNB4r )$Zw0IKuIo{nxim9=ՅCNA)FGpʽIM`Y'uI,b*PS$}m,|Pۮb1SW !)qje=yG\bX(UJI z%׾{nmEWJ :p_OMK [64eqs VYWI0쀜Pq:H%ME}:6qwf:_m;@F`{8*),_{E'@ߴ;tIs:eE:/4h9afJ \E~Z:NtļV47j,7[n\<a Jk᪚Bȷ(붛ة+t->N cp|['?F49#?b5TwY PF-[Es(>M1Uث0xhyI1޽O°L2(=kN{Ay\Z݀ݶ3>qVDkK[6m'Y/.T\ pD*朋dP Ĭ7 _ r^x]g$G}蟼=ڽ^Xi\4+D(i$P(RsC` ͺ& jujΪ< \jG88XP:}8yr5%aե oa';[>4*bc|%$0R!%fH7(Cyw>m E(&ާ*͡+V;KC4wS˒JݱLiwԃ3#UU_yRr\2my'!(g3aD r@AYםs\a8_|^x7\/ushԵI? eFd2׼r4jOb*w/ 㯧A,((RWz&&}e*^9MxLtsrR϶4rv|n! $OU,7%29DZl*@>e5#ME}sF ҳ֥.D2 ?ݭs6*ƁUC X IL>k}z*+LXٹYkt"v;4ORh*4'Ȣ $'Nvexe0^Ā?ZJU͹nLe)$}iE"RHykWۄDKGQ)p90ϛf87Ux_MG1DRj^:]f9J48F; 8Mo"5c(k78o3peK,c0:Jeӊ1h 8FN=:6 AвmDZH0-5T3Zh TLk+!ޛgAQDD9/w9G}G-QG;`RinG;t #DR]0z]cR]ΠqAYeI4]5y(;kYʔ.d78*Hg2;;).a|S; :Iky"d|mG9$`ww+g^^l)'٬hr@ysiHZ"3U6OUGislND8W:J(;c }AQ?\">G^i@C-:)fÙO&3J67B˞v&_X` 5ZI2T͵3h6E/˲:rG^8CrA?~l`&6 dyHnVӢ읲oG$j7iD(V[y`QX;6nb:-2seUi9}|КfyR{~"4-<CbvQtiªąTȆHOn%e xJ_ /9[|0oIT켩JdWnon &Vlr M\C~g#? s[Hpo|5⍚d>˭/&*CR̯o5ct ZdGa 47r- o6o7IElz5K"`˻U7/ul2z>onGH=I5r.8o`:|W4@}zQpŢV )J[GHm h =#&XF$:?"`islpe<[6~]=nQ""dj>DlA5$wVeIk7p+8\QV",z~#] M<5q1< } "Y$)|?GÉ5BUc ѭh!/ rbHH:OtK5aaH0idqD#u]zuJ l'F~ cݎ A>q)0N;Ҡ 3wilӃ{T2tNP*zTFe Wϒ`$pi EeD>C| unBL!l5[9VIP(' #_W% B%IZm'15̃g,-c%Q@  W4+X<5fsT<λP$/.P(]7Pd"G̾O ImkgX9vWO@C@iJ,/1[+,3(L@/җ/E ڡS}lh6Ꮆ<0'M9VeT{y/ئK;Цq,Pz[ ,ALL1J3K@@:iaDRngI+xy!Wipw/5 jI?'L:W~~#+*%0(sg_*٭uۄ~;m%)hj' ėr\]W?d50xsܱĠQipP|tt^xcbv3o}4񬖀 LxS3M˄MM!(YKӬ黨ɛmZni,5g˵.+N;2]¯ARS94AWė;$({'#t7p\T'HT/)YASГ-Agb7G;q7 PQ_- aHʚliI]\h$FbaW{ʹ/dki=9 )@Tҩ}WųN4*r3kt?H1ʪi;$ _]nlܲfD?Pdc&2Fd6~y$>U}+*jg:# ̊ uBh[<\|dj]p"3TIiw0GȦjl/ 4bܨ~P uq%ykgh2`)%NE\ Ť][OW\dS.ƚҝ3~Z^r;32fYN~=F/ mЇ*\$M'C=BbŞBLu3ZIIj8%DG_ZJCkwYZ\F:TE︇P/0:AO24奘<.(UȖ)H:VQgxn{is沨}Pqk/V2$  Ng/^e.kt1j~M!bO!=z ,mVry=xgӾMn28'pdn/[%?.-ws sF. ]tAvnVQ1KHkr"XԻya PM,L@ak蘚h͜Q,4aFvҡ\|IBTņ<>yZ$F]oˊ*Bm51+c UM:˷MŐ{:jq7)tžXo9J| /^x]%б W=|GhL>̡: g -JuHN' +@in#;)PUۤ!@e}59X~%/ɒaRUS,X8*oQo4ܭDBw &8h̖$~^T BjiLҜg hKhO;q+ A/nvAUnhqAc}%2̹h}dPARȳo^56d<#>RBL,:31v: "rJ\; qy'4m&]O=|@<{>jtd$݀J0xy[,wa'~>YGF]taoC“cl;KfᡮMSSO}W}\@Dj8? 311rٳ#Z\$0|Ҕ٠x<:B\7ިo/hF6P]llO/`Z|k~Tڞz&#.e we~"Qvb@A;Pytk|fǣT' D:U~1( D5:py:}d/ ,3Y.!#5L}4[H)mٱ_jsɉ=k#Ck,EJkAb9"1p+q*c WNmW Q!wA);$x5$ -K|-RȂ7ƱLBU,b )*3M_{%|I`VQ{Esұf*4e!UJ wҥ|~8 >ӡM V27)T9WL6*3Ӆ5+X&y‘Pu&fYaU[Z>يySgzPy"zB%kL!<,|k(Q7L2 Y^ge"?^W3-'G bC4)/%kdx~ lӣE?oy21 #Ha {%OpfNL\HĪ?=GglP%ene|cKYLG)"zkmsL3s}$]O`{|LW"m؂)%ke; hmz Vɠ'.<|SDl wwXɑK7$` }O:>?;BH?D{ʀ~'#2BBqDQPlzDme@.B>P}EK KYAqyA%V\[2ě)*>HpAxfkqzAn]EjWٸ&OMY je"‰*zR"DkDBI`adx6A6:2|YJ-r OKMMdOtPBKƘ4KX^CrqtȥxGywC=A=t/u`y5s(;Z:MB 3Ӿ A%{oxLs4i"h\l-V߉^D=͡n"NvC)`%"ڍp#^ FIIaՎ;r]uN[ІHs5)Սzs4*VcqtEѵިFKp  &nl2 d'ս{tpr"ځO10wut~ X" Ro n,5o[5ihV-\&/R03"[Fs2\? YX]"zgUv#Nʔҭ/,ihhQ{F!qTl-`X;[k ;n`@7d['*惈JδOH*>iNά9D[CzҪ' kjq~b&`4L6|˖(1z AVYP FNdCȫjkH .7.{וT_Np}zmH jY~[V8_tWG0@TabOhÙjyGl ՝v ]аU*ӿ\qU9 FFS܏F =ڡs/T:fzI2ebK:'=O젫, kAuʣuT5Rs\`6 bv8pmr"4̧I[I$˶Qw{̑/ ~^KArSfBƲf肤m|]^LɿߪMBލU͠N_`*}' y oFsx<#(5 EP.!}Єos$$O}Z٬j.$I RgV&GQX ˷U} G/{~^ʧnߵl7:BSHI ,"t3UA N)a(Ȁ=s}Lv=ʚC y7=Q?a\< ߷!m8J )JH^ӒPeԼM>6$]9&fJmyVQ#JANb|Ev8׷O1,rLI&؋xUx>OoA?6e)`MXI<Nqn6=q>$ORnm ]jsѽgP\Ҟ, רV KȌ_$ tR _[= 䂟%_%& Xfޅ\~z@q=\| ߸h+>oq!`P0ݘOq4iܶk:)DM&aRh]|@z9xGB.~<W2XFYISNZ/mv4g]IH[[{XaDs X+DAELUR5jϹ|7 ӆ1rRy2c# pw$> R'x0 f})T`4diR i;n'*(tR\Jn v)ȗ)u}qFTZ2Muzv=Jg0 ?]1n&AgҼѢXs`M9>7[~{.o0NzX!吇yW Q'S]gM |9F+Wf O X<}Y]X5^cJ|AA(J)&"Q1Z97,$t݇U^s.㽭e(A }59qlY:}fkA&AN7KXwx- a xD,ٷV>ҏ73!l&~3ůtPF\(Uhzm„H`Ӕ_"veh9s, Ug;w"e"J¹jq_C<&%w C?P 3Q|\ǚ!T䩺; 6<\R֒a!SnBֿ@zj^֫4`ffs3? 8@9L "&‘TƐFf%4-K>qV,aú8Fڇ 䣚^`'k""OaYde:ܡv['}Ñt74:l{hlCL"WuHެו[KgFfҫآf{?p )kG D!Q܇غeU ـ$ea;wJhBq,x +#çL7x} f2Lb{PyuaϭS߷OlHh7#/L%xngQsso"rV7zRv*]u+lɖwQUTRM+Kb)_/ I'[gP*@ݨ.ՔRt[QuVIO#@Gf~cS?ߝ )ɬi$m59vO7J*Պ)F ]R%AZFԼ{c3YB9o"4a",]í^\4{;[u9[S"''Kljy+&A@FѥTgX(2YC2* -#a}ZYvHj0+vKCID( c:Pa#!kw+BO 3j Ԟi-T1$Qe"'Zh+ur?xj /~<7gUGxa[^+KA!6t}a;0dܱW <͢{@8أwos_oP އ&aC)%@ )Hּd72[m+L1PebxiJ1A MIƳ  e78e-~”h$JfPBİŶjAyp2g P$DVcT4q}rȘJ1 ?gⷾ/G]?aɯQp%Pť1$cL% MF<@ȁV,د( r|:vHF]Ext8BuDxD[\ũRTĄ0alzU?f[$yT7c nrZbl*}n,@HPv> aAg\WX_ɣ7/Ƿ6WS K6Ğ@S6$7Z4]|t -0{w}OpZXMnaJKDF#IRT*GqH&R}@mg8YMX6K 7޿Ի`Vp i7*d(|YT}f3l(5q>]*)V(Ǐ|f[yk#f)mx Ap jձ_r@4.SU3d/!)J9(ԑ`q==D`x \Kr GF^XWb9lץ=ak@IKkB`H8/fh%X|7v_1țkGU L0%BY0EZU˴Zi'[jB}&㑓 rLF͏5'S BY 瀴vܡg DO87yB娈$Ğ,SG)`6h0֊8#Dt,[y/fsZ殭V`yӃdF?| ȾXS3u= %RqIwf\o|0: EX]0r[ Լq8]/֎k9Z eArDvݪ' zc:Q'Y1b U\,ЭԼ8[6WՋZs܉d;)wr- O3~Ɵ;r^} 7?:^J 5xDbn)ǔ2E`d4x :)@=ϑm:ciA0)i\KKώjɣdY?ѻ=߇nM/8Eוe6F}ƘFqzhN1Q40Vo7XEDU( CGs5ֆ>Hd~1Gu3Kb]I#$_;1G*M4. Rb/Uh`xbeb>i=d)# x>}-R*܏RL8ȿMEimOcx׾- L L^Gbq+AHR}-2_QI7׷\ڹ[FkAtUϓS!.QWEgځDO4MSdd qϋeb/A9 k\3_[wQWtd}=jcD3P}Bci>(`[: %_SE8|>3:l⼆04WļD2hU`Žh+ți)gE[23Ϳ6DOR7㾋XDv5*ԏY^9ªmR?>ȃFN5~<} :ms, ,/i7nIk&1q@Tz͕ ~ ~Z Oх蒕Mmv<<)*܎&j\c`Jw%/vb^2ri@)[% 3=L3 cPpsZmyN6^@QY]LݪME!btq]2_M ,*H!vԉ D̽Bta.2*  Fn +I]֮F?0f#&ȣXڏkR>?%8J?]Z$^UVºP}D0 Dw>'1JWF\I?șGty@Fe#'ޯNODVi%ʢUx\@QsXNxF<,䲾.w> Z-& !-X6`[Rq/es-Ldj3d d~o~\'mI %"AjC<:1Z$zّ[9?!ݱUC]V͛W@h?m(Z_1-~(|F懲(CƋvp\n4^D8}ax_%e`f)z}Yx}|8å@fwS'}bܛLjPQbZp-G|KE/V✴ gh"Gh#K2wvDAپY MSѻaƃ",k g3L|3B-^) QmDkҭ es[X00Q̐CyiFE!B_7L\V9:өbFnÞԫ gXا_NMtOGohޚz^! z2$ ,Ůp wG i}P!.G<OwӠܜH2jÄ~=צX )"S!.%I.ԅRR j-#aH!c%^#mlVW u'{UXtMI9kS,SLsZN: $I]@,,ۅjWeA T) /yP'Vzt'g~n8K,[ʍOxO:WpfY衇_8QDX&)OD/ΰR.մ;\d [ۨ07+q1`/X*5&ȽKn87'G) RҷM2<0JeP)$ nvj,լ{T~[yP|jO/ZnT!ōLɢc)M(½O.Nv9{8Y`\SFird4"̌-@_0|7)K[o(oa-_S\ϸyB_ҭ7{ "/b}!I4/iQ\;|bOZ_eۜ j^~dW-Vk@38?V6f>qri_le^ڪc{8^rȪE1a償_AJ[~rpw,ڙV\}hZƞ9hG'XK<rً %ȶ%r2^M tʔ z~$|mp: Çe k HGKiO y sI,< YHdU봠%3L]*֡T& Q|_6Cu:6.a;D;TEg Z'M0SmIZ bhkНa"17>@H; X]P ݺ®Xh,d[ja͌pǕc8 ~kOk;>_ce$/<Tf}~^I/{P J bbOSNXQPڿ^V:1 hPHy`a@~TGR(ջ O|.{fɊnśZV=t{_F"υ&*+ beb]3ʉ V2A4<Hsl 0XDe FƕpU_b&WrP)2] |TfcQe[Mlod2IrcS풖bv_l1]QH ੇn~x"zS6'c31rd*k_ h]34F\zyZГ+kMfs[>$Cow|2P`7ઙJ8#Hndރa]CT^8e Qp3ڲ;[apauu=+<{ Hҟ <;bppZ6q];W4ojipGrfjVr,8@H2NP.kk%):9J )0W=2qf3n /wY :vȖ)@`?Ǩ2G6]:Sns鉜@^So)6T?J|l:Ys[q^zy%{#mli u5CN`7ha7mZ:ڊ[ YzmI~] pK[.]CM H_6(ӭ1=Ёv\jU>륷c7|YSM |eV 6IV&ʲ,Һ1xRM'[7_z*BT:UzX(@&[W;sW ^=τr@Eb_g6-`,( F9$ŀ^$W{w`~y9"u}s Q l 8LQ{Knj{1 ?G臜fU?b4~ VN(`ٴZ\Ae| aV4W]})4c8i ?6g$)d5^_jQfI_R% 7Th032RW{ά8-%v^đDp9|(s`NB-m[^BR^&OD`*@?' !/ b6ט;wH7TO+cCt0B/ tsM؆>sq p <O j(KBʿW$)ܭi&(͔|I_f:ߘ30|6;˨E-(:S8T\O]]%ӴfHio\WkDEWNt!NsBWW _, ]cLo[ H| >osY$Ry!p2If64ͯ|#ހ:#3;; &{B>#U,6P7M[gv71+dG6oyANoYԚ|;2.1F.9uhNd:v 5vl$iˮd|4ԍePG +RނWw׊ ]]Mv(*'9YM7ZN`*Π9`9G^o6A߀r?Wo<&WK]Zچudtn@ԅl9v2Q?ᦪ_7͙^Zd`ߛ<>֜s{TZkZb[+jH)i﷗[[*Dqj:.ETJXI['[Y\;>`#/(Tb'[JRQ onfRW> Sq[ȸLTX:;+8װǾ8$287l+fv[=>ZG0T~bY(_Z|&0e!'PJzG gkhh:Ȟ֕#LM=wZʟ8؛7T))nXs֨mXߧHBcp(Oy)AǛkkt&F>Zoʾɡe$Ͽf&) %'CdL$/ ӮY\.seA\C򀆻Ñf_mmڝes:0b y0&^k&" ^,\wK ^X-O:&QrZRԇ.T#JĈ}Abm'lOk "!W0z4E= r0^rUrh _L_3/>lh P:7!:]9F?\u3§),ځ H*ضK.T+5g4?&QPz8q'_nSB'8}ٗeIiSU786eACDY؈VjmB.4Uz$zkIݧdM203Jy]͹C]b)8Z:NwZ؆>W!Cp7lS7lx SPC84 P$SFS4q?Gl0@QaT!Xxc^(O` '֣ot,pr>i9kcmpU:im6y߬xTT>rK4jiņo8C] e+Cc*yG>ThF]ťbL?*T&Ԭ cXΫÄ5w^'&krGC()R4NՁ?{猉O =),i-ƴ 'IҨ&؊C*9PMX;ЃVmbեS=oorJ[W7y)yB82%>gX.[E^SV7Rd&0wېTC-I;w6 N轱 ]Л eּ 6!|= ~"S+#[pHg1pX.!(\࢒$k~k@HIVi3H1& Nei:J 4N:h3CHNUk #lҙͤW<.!KxnFSf3שRRkt$ yDW N6s3I.?~Nq:0QEwb vyJSˢܔe:smbl*'.\#kK%jEܻG>Y ͔ ]]Eya_gw ƨPg6[Rnѯ5ʾ9%Y\e#]~ZAcѶ*'hU$ĤJJ  Px~{HQRNaRG{߳-}袝frErnIM\bI&\ѽW}֥!ҔCytrMՕYwUJPEWD+|1N|%/ mXrҦƴ ]VM" X@n/"},zF( =Fw+s4 3B+кɗlAFR״y*vڕ>*8w@2ujZ~sxgZ&«O.ˤG:?;j w>]ckqc}܃ N>l>g}LhZ]ܝ47HE*Cx&ԅ-Q?ns>Crw(c|~@߮D3WRmG9pv#GB2qOѽ'$0d;6i]/07F0,`煹 OcNx(\H|}DJMW吉yp:c|g2Q*~fŹP },鳇aqs=ש>IeX&ZL'6w=:ZWFaglX؃xMe+㝡W%+>#lO)oTb-l?< Fą"QVZM#tzsNuYm;&'UsWtBG*,\3fy~mGEX3!B6>jqOziܝhbs YWW e4 V vnʭpmjuFdGS=p9>[ 2 4; ? >AS@ K<7T$uE{rc#`Lљ!&ά=ǹ%P 8 j9 @6F?Vs=L\( 3@æk5RPvMR::ЂAъц~GVX4?ToyH&4kZ缧6W7N2usT˷m<3u%E $+ks}y5GoY<:m .on8;-?DSb y2p&iH$cq;+ߖ8;1) XٺL( AXTxh`Rz8H?ySj+D%Zbq4xrStyNɶw2}Waߑk+򿑷p!dim]ALI`ilWI\REܶDwGG06}1~5"# {/,& DOP^k4R5^:lhvkW򽅼 ^`Kh4-rr,.p "S!\ ¬ v`b H; f|F~z<)'FgFHgϚ>$@l>4i^[Q$P | _.:=C\(MzgB1'9+|^n/rjpFq>~_亦m┘^eoW`]}}!ApSleh[*4\|uwҎT B{s܁D==-* ɣ0ȃdTMg{JDZ )=~!;IM?%36RWfUjcNv`!";׀)xrX *{lwuEs}qXdGuȷ.ye3\YasԶcfԳqJD=eJjKnC%ꉱB0ij(ToܚwE4?K+ Z7^%.~&D:.NABJTPIt||vĎT H@L4mԏ:MZ[))Q<]TKjw/W}{6Uiy<<9 L>\q.^ *_v[QPQC"M~nE0r[ ~ WړexVK\4]Aż shu1W@ui#+AuY Z"+-Pɥt|3'4AY oj!RmIbK[}YFڶ ˚^2< GaONT aHik}%4CIK:ײ~s]jJ6_W-XMIzO_0+(m2&Bɾ񅞠1 ) qc-]pU&@\+(QJ 2IȗPLx-bf ӈm@f6V2 {2~ͷ[>_0*Mt*+C!uCHZ߬wu1b,ή#oRTqL qF1&3M*~9ef!nP{F4>e_97ѵ+z<-Q) CI75bn`bc#$~b59ٳᛟ @E͸I4&yF_| < poOEݢ G^0:>z;ؕd1xY lZR/]qm |P84J?vl:g{M^Qޡo8[ODZq3#;}Xz$yllx,$-lJGH#vR'fc upqaȈfN~MBj+cfK aNTB9L, 7 9H}47V7Zg5~W]乬kH%QOyYL:*qotځd7׫]Z6y aYṛ1iF\~ܮ)l!lIOiaŵX5T. Za_b^@Ɨ ]dʅE$BYQqws4xIڹŶ^OgJR44B`-ѽا;L : RDVGwgm)ַGz8Sq7yϪ0E%$ՅhwA}AՑЏ&~TXJ7W*!_Qd紑ث)Ǧz]hAjvI(S]P^vk岎 kOޢȣP-KN#X黦˅*ؚ+ X;'O";e0w;΄kjHN- l;(ܲknK+|pvTR])i);+sCek 0N䰉 ׺ogZпl רf܎Un9z`;qu1oR"ԭ*"}&p4-}fa_L2ۉ ae 86]T1AJ. R(elf̺ 9ܘ젃EoaR&cVDoX˕(7]2eS.J:AauJc% $٤Y1S :g`S7aXC2=lKOwQS)۲lה傤y ^#n#g#:^)VBNgᅰvhcp0Ee>:%1ǽhjN .)eԘc!&fab6"Ggѧ FD jUCS;@} 0Tl025E;J+|}sZ@FڝY*X:$ &3vAl2Q!S-j k1$?3%INJd#~!H;Jsdğ|lXtߢ ^`̃8#_;K5Cx7hQ3ڡM-0 q&3j#V) U#" |=,sL'ZbF/Yx [a9,'mETyQkD:[LI.C6)H:HVxPjnstI=6Qr+o*V~h7aS}bjճ#0퉖RFx@6,<#K1_UIn]]b;@OiCQ/&a7` eE1i("viةX2e⩄';$;c; nH#g4q~fYAcM䓘)b׏jɤrGL X2_)eH=i0Ÿ Įr"oЊꦽ%|H(DЅ|v/3|䱡LqMt?PlY+b1Gp 2oM_o".kRM)_0U2)xD[Fk Gp{eLB4X#m8Ih`ޥ`KߤEԪDe@E}1YeP3Wm"VCbEF +/I!RSVКӭ+HERWPP\=NjWhSNY! #ojSC2yH|Z4NvD{-]ڲ2C_:u2}YR-٨o2:$3TXr@̫ !J.urPeMbov>qSo(NS.X݇F܌JC|7lassֻyQz[ KHGhRy~áGۜ yDjC^HBG7(Lxi4DDY=ߙ_惃E0 s!U"9c=c|,K8rW.`< qU /֚*2P0P*}.*,49hgaMNmlrl?n-TY x)yC#"}GVw̏i@2qlA$e;|dC]6- ;Iˇ5WEl='- EBV]Ih3OQ0r>@ XpБb >!$Bc (7+;'?`1< n^u%귰4dr-PiB昚z_([ N8n*G=KrDka& 'fskZ{!JQ<rbС[ymp+1cV)9rxL2ł.9D~ 4Y2 cvL 56[A ;|Q oa!>,VםG{ҟk rg}{]ٌ^[en {?e0+Hz $߇@J(< ΗOс!_NRvQ \@j/FвϬ9Jc@/(E./"Zȟ%7]pḦ}OXy>BSqS9&pt2>'ٳ E0R❗ I'vT0\lbe[EVs[h X^9%:z|)R~Hv duN#Yim*5! Zh%pU&{݊ s@/T翓~}@ >QlTJb4Ta4h]!KYO'@CB/8&Y`B_yNG)+dbg| d4{:Wk:yh0ixu$W$L%(i$j" )2Κ=Q=JHOm&5QlP+ѯ5QK99uM]M߷JZo#(]X]$,@w{:B[|G:;GJzAPQ z'_s.)7y/Io)CФsȕY E85[:h\j!%O˓`۪+g9'& ׅQ[+ZhpN~ooaÊ^O:<0gFld~~.QTRO=&Ō x>6RZ@ۚ>#[).(γbL 1W 1hͥq>͟}s[f 97},k" _Y=M)ɸ%ƃR[ Ss"QKD`(8tЭ=\K4pbDoM I#wh]y:7 `OR֌z8!{y SJ 3Q}t09O~jtySZL7cz…\Ч1ksʾi4: xmuGN@]#_foOL[N}yD}q s|HuZf.x $|IqH~C$<oYUX-.9L,Ӎ ! 2H e¿>W $ReiҘXTvMܻqq~U˼0t#1A&n>$z(4sM뱺qqM oQcs]-}sK>TTPQ竼|٭g']DJ.#i!N覉APjKj^6{y. _ɝ [#dЭͺG,1fHeR';XED&4?} ha{v$}S7!JՆ3@@Pf`H󰵹[a>,~Y-)V짲9וDaiGmPҠm2zz[XdNT&NzA=¸/}8p8ZĆlX0VQ@ eؾ?u?;!liK\յ3l l)(J$iz )|b82(7ǚCSz QuAbRЮTc-QFvt;u\fjkbKOLm@(&{Jhv lǟ{gh+G]]l h6R 1nu䰢4#w~ ]i}{>(3j"hw-&'5{ܪc,ѡ+1WWo笾woB ActRR:p*榓3*4 . |k"Z~*YJ>-])Z?gWs8WAeNqRlfe|JJ%J4İKة$%DnORA \C{r[$?4 )Ӎ;Cޚ{!?3#/-hϲyGXze񇛣T^Ҝ_PhGE؂`[n<+.Ol4gm>ٔ1##+@}nT#TI;4 FEt#>{z6R/7߬(Q@M+rɋ&PPv ^BK әsG7t}=UH+ϑt#56(ȷZȦ7SkTXΉüf,`/w1,Wi^b;p?>=/yEYmjvG'`PѲ bcrK 3]Ϩz&Z Pq5Gd(jnvk5KcAб|gtf 7?SVs52e?ן1n Gj\mZ㓵^ AϙU6DŽPJۊ~]gތ2P- `vS`0-ڡֳ2 ҹ ):n#U >hN:")(8F }rmB;ۨh ZSZ$ ؑ~DgAMq5ץUQ^>C<]cn kȥ?ibb)Rv[􁊜F/&A"{UWVGI>A\Y6F?HKW pWm4wjC{i@&ld)(夂b .;jTD<xze2pSڴJXKߕɯ\CmK#Vv_B0R]N~bԟ1z?f-smr>h~q;Q]Ӳe*H3HEy8x\ÔjѥXF9H?a> 1\ӎ0Cȴkה, #ЄW[7jle^IBX*(@Пx-5o>  п^$7,eWr,>W__ȠT7|V6P,| lkQLzb׺,{Ž+l$xH0HjY.2ѦxУܿ.nxՅ=AMJ-J^݀pO J8}שTN ZE}?/o)f#aOjz)C. _o<rgd6F]džQFcZ>ziчJ}9wR>SH&qe)ԄgӱST,:VO;J Pt]7Uevb v']>lRZR3\yZv6D>COܙtDC]G"M$sc}xn;5e_e1x!K0ݼYίRЙfѓز=6\.=9x/)'5}?}ObW J₻ȥֵBW'l8%I =F1E%,5~A|W4M4G=nu ڻ {&c, s ·M+Bg7)bz%MzQ$I )>1F脜0 :PAOTXEBBڞ]bا,=*ryLmu!; RN{6sg)ȈFZQ*̱ydw.v4:]!|@Z"Z6ʾ9pNR8P:)&ZgV#DE3 ?/o>(qo%RUN4tU湬OVU?yxдyX1LnH:bʦ 4BW)B@ŕw[$ҟ4w&yIr[WC/. IRd:@$c3+1&2Iñt-w 5^ڌX(EھwX# sfWiBF5jKv WWw=-mkqmd햆uf7:f ))β]=h)@ 7X@g2W+p֢Ƞ&U ?&#/ `yLY/:0FT7B*p{s?*YMR)ҚG]:b~v_PjL2[+7BxGY=>K{:G>nb ^:& Ukm rOڅu+,rfZ2zxD Op&:cH}E]SZ~qӢOi?bxBbO_w*ʏa$ ;ﮪrYR~{ "SbxHb kЀ˷#q44ڵ7S,7HA>_L6.]jMl wC_&4 ψ4H,{% \&XnxyE5_"17=KNY݆}g%[Crg-U`d3TNLX y('J^qZBֆ/͊~j _!/Ow_풽T@|5SA;+G{iY< U7{2KiP؁)Y*nS h1h6iXexʃtgtf+nǚjMM;'H .'a\ՙ0%r}oTPhSԅ³@6@$!Rat^H[$m=z.U-('E |N@::9nU}K2TM]p.u꨿E,x}?椀zlS\Gb T73^ ]rsK^5>Z4of i"i”S,DI~,n̻z D$]|.(le7' ) }8a|"RL49F]HfVI'h`L;R"( Zn=J|*W'eh s!GʲkʨNpQ+BF>xMB;y%%єԶ!8J㷕"0$-ْN1m 9 H0V(KBT{rE,hƂs#݀4gWB)ץiyۑ @\~ rZVultge7{SX0a6F@﫞$3W=oݬ[*UU.Pa>ύQ62W1mdaaGz2Չ@ȃ%;(Mf%/@m$2WWXا 9v FXd q5Qڎ:͢OY&U uҢXW%;OneͫCծ"E~Pn-WɏFv=T'xIq87[8q_` q`:ZM4T{vφ\{ڡN6V]$R`t&[:n:`+&~v f.#@σgZQFeο PZ赇Ɓ.95͌g*V:-P+(|&aX]/~>n I617q(]x~)`R(,ʺs)C?jAe)0 C3'"& cEU%Yo($@xD&K.Vuu>d1Q|K(O۱9YG?Sr؉GXEDj$oeQ="Dd;fu|rޔ#9`v=l R bbuk$܌9ZﭓfFmfA.;:ԉg9Z@KB9tb~PR&0"H7)Cr"^ϥT^0ٞQnaˡʃ4?7,!w/jt7V4F ]yI8kOhRcGЙ:鳩ZS֍uͽ$#y*mf,fo.1U*bkY_] oy Cϐ,j}[趼|yŐ`7e A Vk; P#q['x<ͽ坻"Sȟ'!I6!Y5VW~ې j q/SnA\9D|ki9-Xlbf&bMUa}?lMц:ȝ^fG/i%hbVXA.?z.3Uhr~0L+H$Wh >v`!7Iòa Q}shBa~2ګŝ' 'GQ?:.}jH-ݵ!YD,XyfFaQ=2W>< (\EjS$+wĄc ~`oa]7&(;*3A]a%ljV\Ԧ!)8Țe.B3SQ%E8aNNNU2Ͽghd=?0֪}?LbĢz/u["Zc.Oq7tzݸ+lD7XδiMְt\dz+K*>@uxx#= mm!Ȫt߻E.:PG-];/ 1jHx:3K?gUJpJ#}م'?J)tH( 0kA:"2 դAg3Io t#S4}^._QP =1k$íӄp0{.L pNʮ46dczd_#Iky Ө%?NqmиSC9CY6ނ%xï҇Ֆ"8|S^ ಹmB?CBKnsP4+nb}`Pc3XgA<;"L"cb]kDPT^\@ p{ܤXzS"/}~si>:2'њk nЌ۲p7 xe"QkQ Di2J=r(uj3$l,c&EVz>e" >[(V\:#=jw,^~C%Rʲ7)Ѐ=X=7_{MģCU@s@QqF"sЫ 7%, Ƈ O+PYZ2&',zy2q\rNA[21TNgm9iF|k$N3=|cfs&5'n[$'A3?( ->-;[/@{f%^P-U5#ul{;o^ rQ_3Nf6b)*4Iwd? d= Uyӈ?@xiL(Ώ xɜhTdxw}3pwdAws66Lj-b 凗vR QC$Lᓖ ]%wΞv #49jhɩE^0$mQX7}$#`8u5yj/;k)u,Ka 瘤ӘReUa^a \9V^i\232 T@ʇ *G2yU4 "1kX (YwUKiRA 4Kc{XEFz YɆGԕgioT2c2 {]}\OAuL! 5@&$[!'/}JI$Ezscb,Ҳҩgӳ>Z0\Kw{l"ӹ>KRk~^v莭e_qW V'RTHk.u}j?D%=,WJoT֖j۸߈p="-0F 'Sn|]5X|2_6&"A Tj21:O#xZМo.(4%Tb2[lf7w-w=vC?kq5|i{k5Otrf/x!~l2oH6s!|Fe O_fk|}{щEy}nڡpg0[7 y$9z:8<KKo}_%I9b6/lkgٻwC{3(ȞW66Ţ#IB{6gH"|.~f *\b"j? wI.Hi9UEߋCj(𶴝 HK1\KףՈ Ɠ?ju+YJ,T^@}o U3F@ YS&P1 5Lj&DLy eU-*j~nnTu8oS;MLg_l$ I0{poهKk."SPI||6}`),c1V`?4'"qyNzZӎL$57eỞme9F'?wϨO%o6ւ 6%rzojd+0FW1%Yo\WT⎇#&G%Te*KZ n+8 LTyY>|N=0f|pqǥƾܰ{F#x|&ӿQr{vج|Khת|:6&<_*.s'uL:|9y•daǻ/#i0%ne|} ^m+Mf7=~'>9K nc^Q9릯ɴZ[A # wiff~]=F_!뀁sRV;Fog2Y8ǗZs'zEsYﻲΣYjU*N5[7ΰ"zZX_ТA2kƆڦ\zwɸ>OT`\}o 'g7>m]w2j)H*~SbX*,qstS2%+ʊ*,UcV*#EDDQR"UUUF+׾]U{7&KnP2 w'\8C {}wqyguluGy]rMKpT AQTzg$bŠ4XR&I䩖LS)38eSDRYUI7+tJme媣:OmIkբTG*f̨? n 뱇)tʒ˒F],~?MeݭDnZ R7mB[hUyr뇞vT"jRI=xPBSRcƻMu(= W)bIJ,} j(\ RܲOnKvM9i0p U=]ނ⎕ʿ2nm?$4R䕙[=6A Z!zזܸ!CUrpMj2t0_oN1GwO~g۹aDSBe2.ԅÇ?8P-f PjVO͡:UBJTPb99ܯxbY]Z\lsgzzrƈYH̪wMZwxlw1?YOgo~K5efJ}mjZLhe`j# T'VVi>MZsR:oBߨWaBۖ9nOp6әuN}}" DF<+Tjʭer 0A3!X" QE j5;6bK+R,Xqa8Zğg~+&yfrH w/J{yoZX|-Ecsɶz:}ӳQlCwҙYv:'FBX-/7M<H!)CyݹI )$&Hv>;u׼)oaD$ ?*bb?uT#HIi= $2HO~Hh =p%!e*芖,ԝ}[ڥ5|?ao~#c2O!qF-QR &cՆzjU'ʷϒzҷ "12kAA!J"{**+aj:-U'`ijXJ%XN{&s}7DN/8x_A:Z$+97?7ϕdb=noq/""">\0~qmԩW}:ɧG@ cSv0ר/=5ˣm^ri~@s@?w[客ɩ@~u@1\Ѐ^/( ?%V5|5og?]˸"R#(q8;NVzl k=4'ixw 筹zSy]Uf/?ŷg᎑;g5lKUsk;ߧS?C~3,jnM͒*EG[NW˯Qe)BX*1TX*bg"TA"("*~ТŎ:=(6٨ JǐV%m6 cr6+b~IN>=&^O KX5+vj+b OP<䈩^, ;o}]|\tyWobĴ2 t$}ARlQV ZfӟZi2]ϲ&]gOX]]+UPV(*\GBW(OܲݒSd}?Lݷ캙[۠4U  d(< T]UrwqF9+rħ[ _ 5ܚj? ߾& 'v~d" ]De.jܖjv_=b9~pk.E^?\==>c* =ڍCTvwwpĪ_7;T FOG&wAە@}{:jlz4%)޵?VxsS4d  *HvI& Yt3_CLTToXv)z׬n2{^~œ^б@ߗ$NzTIQO$9Ηmyغvw13<5{2mFߋ)Y.{L}wVN~+[;YGVYϯZʪьޯ!_+Po9r)r2L^OޣV{6Z[ї Ocw}#x1H<S@ Z=t5 =2ٕ-Lzh97k]K,h:2Q=}|0k-Yk?j%҆:պ< @ @>2'@/աʴ\P(Vh pD }`Bv$%2@!L&kVq=0^ p;_ƣn~3>Y@Ʊw J 9Hew;y(/{7n6|gs7Ooy: ~WPaiw]8tOi4. g׸G}zD =HAo^ir|AYJV%⻐nat"7Нv*F?51%l}Rtԭ;"Xv~xSo]UB$$vS-XΚvmIw:)-Md܆>ܵ9r" ȭd^vfni1w.5|{Pd(!fm`B0ğ}@ 9wRH?60}6]~=[XbB/Vb1?bx^`Kpy e :Wʟ9 LV@`I"=h=Ȓ0RH d/$!$@2Bbd &SB(} D&?\ E%7Yk}i GݞwB88?âpgCO3ohߖHvsO28e:~s.ٞy}8IꏇoymD/޻uDcWG٥Uʨ!,t[ CLQ aX{q@` nG xSri37Pxu!*]IzjK?Ӆ2[*rXiX+hj(}kkcZ,gMT}Kc}FAW)8c`b\DU.K=׏ łpn[pPAKR7iSûߥL鶏ODJR KWjۦ8ڝ%NX/V3oHj{O?o$6:<4S?IeC)1ijI\`u;LJn\"#4=D gR)Y.D):擌'\A7 aY?Xa.u;AҕqS"o'Mv],)opjp]V[.,~{ K7X\ <  7^3lڟۓhPOG`i}X ` ?& u, v ̥ %~ @ aȨĚ$pavx"QLT>4BY!itMYj-[?} "աc1"g0 U8lڢJ~0mC7*ʣ81:` ƈeiaur@,)]ʡ,RؓSq|xX$LP^7/lK[tVHm?q!>oX7o{^C_ݠH&b T:"$}_$ H uNy"y{;T`fg1\ƓCM2 bnD6'oV~;1 L b1U='RC5 , w&F$aG! 2^D427 O$ĞIԆI CD!*P.H `AڑU($P(ISv?*!I,f3tvTXm)R =`{ zT$! Ip*HHg?mF3?wmsb>#mWk|[+s7XW]C\#|N';\3 gtƄK Ԁ>*#m{']ȨnB}}=LQ/98Yh=jEI3 3X DҌɟeg_i H ?;q@YTJb[Y֦BtCY&xd&  CYd$~  &!y2ݺ(~  Q0j0 ~I5]D*L.`ăOˑQN#S~$@x?>h.&L2 [Dͬ-A=4RYMN Azx ^ꚲed9b)w$X ;YOV}6::RRhޡzajɴGQb[GA3~,#_2RxM!^ x=Fewo(A\c*Ra=:Idm*B)'fGu־Ī CJo)5$`fGl?cs}.Now^s[P!?ﯱw:..%xvS+)P44`?]߻cX;u~ a pO9]`qslHAE*'b&veT"ce_^/>ߺ@*HlkmkroRaal}+rw#@V(ԓSP~K`)H ܕ "Dt9y/C9.b{[S+ϔϵ36BB2G* %I0JIҚh`ZdAZ40 TIC_H~F@?҂YY!i HoRyTNP!Y d})@IHwddIs)!n0r<ҏVKrU_F`[L61c="=<4 kVUs7b# !tXWS5{+]ǡͣS 0oQ9I<|c{pB8ZOqoXMNA݅ 5d3 ~)9ְ}K*LG.,ܒ̔!j"ڨluWUuJa,ls2%)]*Rg} ?fQE ~þyRacۺp:w]yE$0}{h6D;=Ҟʊ' z,:62ȴ/3ed \sddd5(}sK{:O%@i3qCJ뛇ʴ:s2vi;'~? c]Ib4 3-Sg8YGxʴO'MzuxٹhV2v)XMJdTULnIG5Y_E6N,ly<* A&+ vM2@d!$'y` }@$$HI H,ڀ J!wց$7|>E~֮Q+du|> &*zA+À1wKW#p}:/0\m{s9 Au;;\NXҜdn/  $' F2E!OP(I )Ē@ @BNh@h$=S1$ 0;@$`N0 XЀIa+ @!  FVf]pq N \ynzx,x["N*S(ʙTK,#*0PlHaJ5绵vtxCi%E E Q)Pj8aϰDhd0"yEe~QGXP> BBh\UJc$x]>s<}V;&ۊP<-BЫ0,K)S[m} PbZQjr z&C=ߝJ(7Cn֑dIzR~yDEH31ZQBS}=ߕ-Wǯdxw4J3s0'V2[y_忙_;^0dwT+ +x}\7R) $aBrٕ;,@?UB|f5Ŵ =?Wл4b^k$&"6P6B'y(YA$"E*Rt?V.l|++*WGWj? $0dZzP=}DPY @T/"H#g]\gT2V @&'xӗy+~<(EmbA$F#VSK""ϟc9PB I 2 * an1->V|(fHR !\CND /;W($K(`Mz D(Weuy;|/Q|OK4&W4:n,2DSciH!ipt1ֆs^;s)Bb3.X824ёQ!%jߣ"̭'?AZZi|u+8WlЫ;^pR . }P98О{)XMk3|~4 " vСUV9PoOb,W)<%wQD@6 Uv9o)GΧ~Eۙ_j~W+>}z`xH A#Mo,Q%E`l0KȣkcM1LQnV`s{\ dgH(0 *\8 Toay@H03I$B3Aw@ȾvW{ېJ66TzU.s׏p柅bbwLۢgR)F557{;-&౗3)ݯ۷zv o\ a>'CF#g]*m/Ӂ]nջ;{ y'y< mE_,}Tx[iҀ:+,"F:3˷jOFM"8 ]q%”Xc:KΕ>r_m=O+W'``zH GwÅzN`D@6GZGeAo$TT C;᲋uT< \3&{zSN" 0Z?u%ϞA}zowh~;ZǐxNx֚[-qœ $8.4d3Lޛ.c^/^eEp'Pb\xS2 X+)+tKZSFWu4d]Yd$1UQ%jY8JjÀm$Nwn퍣aNnھ:7׵cm=S( !sc <NЂACrۆɀY`)"Sn/dQ*$*t!7ߌ0 W@R0X`W"Ϋ;3NDF6pWncٽ3wZ'\ zNr/9/\W&hhZiB{yDUJ}-o[<ŖCn#3+4Ek}݁}b=Z~Dk1~;62 =k,uVG۽ ts8 t`N[*f$ﭢ.8z޴ßŊY+/gw [ۚ]"ץ 4{_f9x=ꈤ X:B;>Xm PE^@]K{]jU@]pNy]<; mh/kΎ;Wv}=G3"8B,+ġ{oR=/,U%=fs_dsaAͧՀz1BlHI)mEl,Z^:Ckomn6%wͶ?c]i8[T^<{N^|/Z"!Ʃ89)lrH9AA`/qΞ޽ѵ΍a,».֫5韨,gsG*%@!)Bą/0n'uc&j{Y?(7B HOy:t,7O5&K@$"Mŗˌ"7j{3p#Wӳ4l,.iZީ̒!QhQ@|u P(D 9v-s f]ꗰW z܌M{ߥb"} ISib)BqϹK./qHg+d$$suX#hgqTE9g_\G/;=xbJ@]eEI}WqA͍>|ڍ[9 f# ~ !^zg4!O14qZ!&+Xڋ/9mSwSG?m1E u{dauK qj#cFOm>e}7yC] ${HCd\(>[r'D콠=Yۡ;8ѳ" *i+u5jI3u𖬭W3}F گU3PC- h2KG|b?.;h9Nj,kZi4R/6@HC2iƒ{:y*muk$Ö4`i &r݀w7SOY/wna,U#< 6? ˗1TI1.QJDFQZr.*)i36FЮ`k:yR.&9ݮ.]֭a|.442uFge)7!9kſ߿dçv DSGuvڦ\`D@–M; 絢^Vt)&fJ⽪ӑ}Mssugqvk/)AZĝ>E#e|ޔL`WADU>V˒vxg7IC GU{ ʦA~|f^ iE:vGGK}Sk=U>O7ڨ/&0FgKS2B]oS5{ӦUh%Q] |#K@ 3S!wސ;#< >Y(H0A5""@r֓{p-֩;l I$][0:0牪}g⺇wtT;f?R2AF]b@!k!ovU!0JaQa1qk2A$B  O&JrsqGcr>|]3{MPNRT 7b5͇2"MsE sT1$ 4*\VK?^ݿBؔT<)FO}^(Z5$N+6_E]4ڹC?݅Wo,5\65$ܞwo<]dHU+, l"Kɰ\p>Vl>}.mwIהOhO-Ejnn8b3v>ڿBNOC3%sRntX4M}Yb >ǜR%;;WU"fE GD UOgNoF"I$$HBI}h)! ޲NB8Hoڻy>xNu^.ޖi߬mwW@ *F(?[yaA,4> &$M)PLO-e@`'B TX(eʟ}}?7/u_e?f. ?`S )(p׭1@Ǣ .E^` ގ( =q!ӅZ}x}&FK$0%~3L\T{td^pC2vW}*0l4P8_ާ<_l%IO=e(8X'A>´KGPI1 d2lqZBM$̐VLuUa(t=|_ksO;1њ,(RHRI!:f@HNC.Ud*?l3W|-I7}W=޺[}҂ .Xa|YנGgX# IY&Y1X^bN,XRF8};}y$ S4.m=%̋&Xi$0-q pᆰ}_sG^"HluE/L|iԉ@ %0(ʪ QO {x:t5_>>5bsVp[$$Y R,mTPI}RH$ R $0׬lB7ZDm5[@<87r͓* }ŋ"$Y6\)Ixy4(€Ͼiu AA[>x)G8}Ws (;"-J [EԌUQL=5@1]?udž Z)LZShFII?]?Swk EװA`l$?຤}v+{ /= <}X(wgK}=HI> qt|ʼn @k(1&vX?kyi^W/us)X6eVz*, +Y=/~cR"0Oazy2lZ6li/4?oW~_a2L V % $>{ !!"滋N .&nS>{^m%9~."Io#DYK ,S*ƚ=#!^>2@ I$w}t\KgnnhUZUh%)Y W%gB'aŊ#e)* J7ym`.Q X.T- _w 7TkNw|Oń%:IrWuǫQ5JƤj"$$ Ր&!ou_rOիqf^kRrY N_d{'@12B%P4l)^?_OT/\nA29[8^5 ,t7}L7\+[^pӮZX_7O߀+~`TݴDOew9. ÑM 6؟5CTkʫSy-Р$2W &SPݪhe"ȏke@4l,LP4تFŮ^eWJZQ£N: Gk0fVN YWyP F\vvކ9dΐ~,sŒ>)^E^EE@q?=rgQm^\un.ֶ d"Lef?ŘǛN_K'͈ːDg˒k]Ӊb^>C#C&-u>gLXXas @H"yd$RGkZOޠՑ#;J`-MlM-_Nެw cY?ʀ?/-οo7uvugNXD]sFfW[mxO1"!V^-/9../|t\эeWk?ۏƷfۄUQDV U@D*,R "DQc?A$z>D @;[*vʧTU9;f@ѥxKv7EBCI=o"FF$(ɭֹOez}\ԴUR-&C#lme7ss8 J҄k`izwAf w}# vElى$ L"aJ;( s&05fEŠF^".%(DF9P 蝲LikqK+nl!"1MEPCϫZ uD.gI^tQtǦ.FNE;v0GQх5""8\ -a6ҭ 蔣J EN1hMTgl}H< (j yS:;?e+,IisJ~ixth+5|z<2vP|Q]]QFUm[VPLz$Z izKp(:u:6ҍf0|G(^&9m˭m$*5n@!ǒLxs7QYsNQ`9lv!X4;5|j$_]+w&mlSl3k}ٚu48ӱ_࿑ףM#t{5.# vvν#W#fV7w zr} {uQu`oO?ywAG}O#v MQ]bcmDznV>ϑcDί̂\kD|6>%͌ӊ*aXG9J|]H0t<ӞՐ@+q҅F1o=4mݮ|i;$ l6ߝT|Â{Xُ?4]U"ay-@&sӌ3vF/eau ^yׂZH20leY5Bg& :hWtzKD'H֨#\ W[eI֫YFӱݬ@zRjd՜Z:D+M^{mZ j>MV_>dڏ\)kFcB#=S=:**Qw۱HҔVQzKLw.\-s2(<@ \Y5Q`Sz!:LdR|Wj(Y_ZFqj<Ʈ<2uV~t%[$b|j:뺪 #KPzV)CCR.KjE-;N_m=)sV3ps|@&9EQi?o= jLC{$o՟:JkDczZS 1ɣO̝HڹQi QʣQs',t̀?t^ZV&ι)S DHaɰ+xZX=͞vQ?*N϶@k< ѵfmn("Fկ{2?I/oa)hoMŕ=5]>[/~`H7i} 1/gI,^'%.][Ujl`nl|N7_fo^|l2<5Yh\p!!;qŻU&X/l!ɉc1 $2b%9Z`;EqIːaAp mimofKHقX$!OXu% z <,+AH٤5isa~- CqUɲ!|ڻP񞯉J(b8Jbrxo=PKL"hÙ fuTjX{̫D-U8V@#Kί^҄ k}bfyw0M-BWƮ{̷-BJyV_Hg4sr:JU3º[l!cxK# ;E m[KZ wה*x]^;+U|{ 9΁d".v"l7:/C )ڸ8Y #(*jxӚZz[s/:^O>WcNwm"kʖܳ:LS _՛Oa6=>hnHfm *TA^RCiMG:Zҹa}E#ϐgz}Ϫl'v3R-\~EOgŕ NZl~UO=׆{ {(46rfrM0u 'տKV|cjRWeޒbʒ[Fj޲Etjش.2Xb47{7 ! D1u/I$IdI"١HԤyuWIM7W*Z)ޯr "~ϖ GG T:{# &[׫|}/ۙ1qn| 򟭚u Zn C tCs5=QpmtE&_ױ:J9j'd$@>J5+qugo^*fILy},-X#%@֓R+ XF 1'I+1kzt5ǦIєt/`:?'-tً31U.,(]v֦OBW|+CwϪLJ ~J`9]|} #vp!Zawj5('$zI Lx ⠱mf:w s,sŻ 3_{$& ! dԄ3$0z!͓fXP!s(;KF 0,I$ * ^&F?N|S⿢_Ҹ 2I=HHF)d ;iby]@dD{zvų_&kɉvɲߠ\xxaݼP5nPcJZ4HnԨ QPX[q^1}j)Oy-ꪰRxײv9-.Y$Y ~O`I%MD_nh "e<`IF!I VDfdAȢNqXWT+zV_0T=C@)D:8oP{\*W`\isF<9Kw1T!d ֦+nqub^H(*[~κ,F;s$M()f { C'NS?S@N2QU 0^K0[@-Shhg}F(E+kFV#{@!,_giPS$E@7쓼0 E$GʑB[M K5R*NECa $:kXR(ƣ&Lt2dG7> =F̱ J*k d}kAfKŘQIGs.Ѫ-޺S hԵ1I7SbG |h_w1+_[OwQWZ/E=*%T.s8co+U_OuU_QG6d+oE'Y&v~?6y܀G/W]UW&Hl)ъ"0@AL@̢ lURJ XiUkJ(*ib(mJcl+JQXZVdQ"[XEBg+'XhN4_a߬|dW40ceϖgV<DMq wuxȊJcMp dvw8)?]q3á?2۪ f9b+p8A_OԲ4 D{Gy{{S0\YgtqY)EX3#V?4M@%յ ֆz$ݭ#j$=->ͽ}Q3^TcƱ_8Jq!+іׂkaDڮӭn݋:, .rW_1;aM4]J9 Eb8b_#ڼc5OPAD22Gd&H+ fɡ){NՕkiz^zρ) M չfL>L:*YG3U9LhLzSJH3oj7}hR=VDWv;:#]fj ZRGW{VB #_+MYyRd se[?!5u[XmƇ2ǏfDAx /7;)RyzYm~z>o*FX[7pu9^ %KHYyp(&HnR2{ȿdԿYUd!b1Zy;:J 48Tĵz{wǫ[>_Wn);v0: F쿚m?Y8`2!2F.mP}[T5t8P}77*rgHgn[>=wN([e|Vu<^NsSЏY!&W;QFD).H 0m M6l 7zG "*:ā޻ 4Y .Ej:"1gS/fL=(]+f5F NH;?\Pz{^`TGzpB~8 ùmHVgjtemB٠6Sg@R:khȔ.%t}VpaK_b?W%vgǯ37#`]X6(TOf*O|0ZsXƀ4 s=eòn1WUz8-D:žo}%(%\^ynhHAWw .#` L4)1,:y0QYÊ+9oȔl2Q}dEK &SǪ`.lK(6!mo;- L2Zo&Puh|y@>2jpj'{;}vqǵ|qjуFA7^="sywVHK:t sHgtrb"QyFGlgD~a(o['Ej=_Es?C(d_X^9RV.5ۡûTDDJW a}\4P SOM;x~ b1siwK5>&<,š xSٶYYͯ-Ⱦ{rlvtYqNIFj D:rBjTZ`6:(u1Gj72js\k;ŚxLH$(&lL8'$A(mP#cBÁn=fuimpUb⠠NKrVdY`3(t\XPc`IxyX'm!Q9L~vLDlOl%kL2HK5xI~tnyA~ Iζ:ZQg} YU;YۂneKM$Niܷo# cIhq~ޅ^eG(K62ڶE9Zg>$ 7[ i8:ADs$ _{$cm7}Ly+cPg17:t^#`bXbaτ@zyK Ǜ ېr:\P?2afgS t9Z"(gjK9kg=QɵΉziq5h" =̓Dё)i}Ld."Kٽ' Q)b5U*RtGƍL4U`ƫ<+hho5ve6ߢ^6Q3 w'+ꞷH"E^ioԍ /M8`6SyV17zES6?޷7$oB ke(=2awͬ c~CB<Ժv_7^`IC XTcjh T@ʐGJdLOT0ֺRG5l{v O"I}8%bwȲ.i!MWL[yfNf0Ƅ\e(X2Myg͖ !!]AxacOq3L¤,K`+w@) ="Hd$zDBCO}C%h( *!Ir|60}mx$NRP:?vGQ5WʿÝeivj4Hg5UW}{q.5 KYSRI億ђ׻ʗ6x屈?KqX-mjdx]uD 0d/aˍg tT&>i8}ѓlj*2E\@$"^qDV V}! 7olx7,m{t[wIBI:$Jo~Cn*5MRVI7Od=-$izJ4?nS.u~N <c?4@*`Õ-7s)m‚"B:A(STk/۵w`$O1~=<'SSBQ޼ I!Ј~O\7U!]PLD H_m SS  A;}^ZB~lr7> a?&!_~1ė4nYC h~^emqg`cT_nVǰ/HUO ORJQey$8+ɧ́"e/|ͧt%t(uq0˴ }w26w ~^rh!P`ݔ[%8pM SwAͥEi횜.Wb}C@g]c; fjyPZTZەsl&z>w[NIͧ6u"IQш|'̀Zkwp*&aqASKTA } 6lq7rH޲M1$(;#锃x]Xe a1Z6N53yF _n\^G\r`OA4tGhAmNihr,!A$?Vl8S˭srJuK87Ф2#jo%9'/y[t4j`a]}T@! * wL6[Bj0Uɒ*2ｎç4@qPȨp<)Y`H(Q0"w050.Cr#Ek 0PQjy 5&P܀nus4^H>:ZzB[Fy<[ʦ]b+ǹҤR(A@QT0O6Bt?⃎0# —W|&u 68H{g xm9>7IeX?oߗ~e&n/1-N[닝5z7|bJEVel%DF2vb;$ 's)AFcA:OʇwZق\Yh]=kKsqݕN]>=xHJuu z,4&ic /Bw㦅MOn'/L7~J!(DiiLC@҂.ixo뭇'4lSɉ!Il(?]S9Z} JIQ5RFi$Xu,fLr@O_{)q&t܀ܦ4aj14,\ ًP;90ٮ/r6,B[/20RJJG0̧_ rS21UUȍO7L[sg諧-~|Yz:$7o#Jmoq{ՏAZd% 'Kd[xl]j?ܑ({1[[u׿ KVu%3L(L [Ңi_^yRٰy|ZNXfQ8Hk58djӌڔ5+:]x^Xs((8~0敡ܑNe[WCڧAb&}YG;w|z.5_>'[5&87S5L֑9Ĵ͐u6;Ϲ .I]6^O9J8.U*/mR津蓼/$RrEW2j1ش_qm̋m~?kwN djdt:HƦA AoJbļ䤤 Gu5묺JE(K6*dBU(=e  ʢ'aE<{S{XE~z|>MkE[[IJpήHtAҚvmB"glLh^WI8zsq'Z2ݎ[kP0\M*%}ƻbXh_Ӏ*Q|Tu #e$b%(') WUX[ "t(܄p@ٌ+_4Y{8k NuL ~[K,Znn%4ihis~!p(F3-JMs@DaکP^56~Ec dV#(h*s!u.WU"vY.>Lގ*ZؼIhv5!׶۹ԇڇN6ǩs}ISj?8z"Kyy~7z巳cӐr vwW}EyGq7CeƄV DHzLj 5mǩQ9]M(^AډPv[cO# !T!] IZ#[gPYKw]N_wEb.hK#1CIjU8eHj0^ 5(R3)[82>F2yd]}dZv h֤_iHh /ߞr,z[y- rvz_oȻw4R %s-C6Qp4H=H5@QvJ P>-ĩu*-',#UHBKeS&6X_mS8eaaE/78u:zla/~F6Euˏ7$:# 0 p{kikR$--ѿNղ?pbEkF̹m<wt"I$LZ[8-v67&}bEDYV9$)湟ګv` |7Y͒pmHw]Y![nf{?wFf5{Drdg>NO16,_w ^ه qJM^dQXXS" eqZ0"ybl"]ogVN-CPaAͺMbr[$_AHro[KWu^:RMcR{'NYh&跭6lͺqY#Q`RAoYJ3鯥H*YuLXΒjXE3yC?qܺ%GeH@$C*m)S/K 0ϋQDEJX3W& P&,x߸<REKArɥt)R4ozL)W%6/F|w߈Mx:T8:~}]Tmr9]͎3 uR %a6(Q߼Ɠhp =&zpXd Ju0I$w;jMsV8#N3Ԓz;`۴V?m0/? uT lN>qʣid0TS.¡5[\+XUj@Үkcw-(,hn9ʭwK12nBYϩ[7f:RoU6qAviB3{+ĢItSjb)ICJHpGqkIa;hy^c!:(Z` Wb_{MX$WRj(2EW˹۞;9CatwUH㟏T=D8Ѷs_wŭ幀^qâdf[0! ̒?fB< NjjӧWG*Еx+JuQ!y?އ㍿Dp8OK>:D듋1ІtKUhcZfL_&e@0)$oo<܂%(49sŋ8ICҔ$0#% ܦ$ebNUud:lգC;M1Ή٩$Ne@nƞLL42R0_S̶VIwzTv'"sպG^O[Y>,w47sJ-M.7SsH nvgAYYLDPReUm]q:K]dzD_tSȂn*|l)9}=(Fr},vK7Xj~^D RpQcDnk\% K7ڕI E3Zt{q}O>}.p]m]^ g0S)hFť<*?+ ֻ$!&u{^^KS̊ZSz5R`D~D펞HjșNNܴ:De棡oJ Ty^JQi׺s8u>2\+q [ \]WE~Dѯ\qq]{R* IRܻ~r9W$$yͻT30Q'Znޗ,0rsQ-?NH]d|W;X&fF/z87`o潿&}*Yۻ$ c?3+:8yķW'B+K5h%)#/k/W^$PUp#`l`OvW7_٨\jOvRmeɠAY;vt>5(etZIU#&$=$-l-$̵-8:ێZ؎YTElykECFaG˜~={h?xw8\./1KhZ 2#A?u)?}' لмA 'ͰP, dݵTlVWwwŃ߭a`2e2<paR,9c82N3؁ol?1м2`d&)00CKto C떂p7wjcARp\V=3gs˼ h~a,@!VbHaR磣'Yrh"0yD_!+J⺴ ¶` ^Ɠ'YH F'GdWaz4 %R7|N4rHD5ȸsap*UQ= /adg$ Bf,qjQC#F8Vo}FHTPVRSk=u[Rݎ g'D5 Z kߧ[.Ym4Ε|vT=ulC7O9ShkC9XKT->HQ&9䮓˛#I.Q:~/ ZqaҚK @Ȅ@$ھnu]\ /nDωч,<(GM_]jI4Ti``N̿.y'ֵWAd!vHgWu;n>+/V@HL /mۙng?4$Hh Ih0)T53>P0) &kHxʳ1 ]ذ 4FLW=lÆX@l>fl J`]T?B$zfhiZ_s: MVb R:l۫gr(T8`T}Z߼v/VuB~&P/Y~v)'DU.a*m$IP=+ NZEjMVM`<6?ꋴ:U%%URzi(h`H#ݰяVhd 2*7%@ "H@z(6rMֲߘX\BY X3N4Ы ȶ$.TZWC4)o]s'GָwO->@i`ʣjmR:Z_!˶8s4?FxJW;]m>Q<>e$&ljBg!MzhFH' }ҘQIЃʲ^3o~{/K%2uhM6Yg4-iVoy>:ɠ.VY&P/⾴%BRQe QA- j+hJ%FZPj bJ eTDPjAl,kd,j4W};~f"~s~2?<8kz[ȕEߊ;_V! LI5^۝Ys^+m•};F3C<-~\KK,#bEbUS5OS=s׭Wdzv.ˎm-s SAi|&}S_:/eP9% (Y139'{:4ڥ>Y|Hq9a;[yHD~ y7Sh01j:K eAء7B8K4x%T PRʬbsmǣ;x(ŠybFˑAD*MzTZNiah:Y Bo¸BM7ƑAB??o>BaĹJ&lbg֪ ٟwrk[PfIwv𕒥jVTd/] :">2<;6,Y L|+Beyd r͟)B R*,щ{v"eiqcN =*;nvM;e%okn~4%&֮:4R( VK, }{_+`i=Aqk䉔,n=6#;RH !G]. wDBb,\6AW}N;Sc؛ۋO ښ;<ئRI5 `Frzmm }-@Woן{ľs{^Ϗkз?tʬ\X_+;c5ƏpZT1XLdN0BRqLGREuCժ6{z)z,9Yzřׇȸ F*6\ S 0)ɝG;/hrkP)FT0uW])TI5ڭu} =h qze3輼xDSg컹f+Њ M g$_Ws}:)zO_ncw5|-!Wc5$!A UQ0V? L8z!螛('nOض)"rLMw3x1c P7Csmca5ci0k31 U|9TPqnק_Z -&F`rQ6{}?.yӴ@Bj +JEȵcԅqSNcl4 &c,{̏<O))Lݰِ-%]ضtnRB\;:MN4seMTB P@o(;if^uq mUsv=ZKUfM/~uAnq;]AĝX G(I1nDk%ގY8+B:ǝ մm8qG>)$Y}!P#΀RP6ݜu:Qhe DHE Ȳ*Hds qmMKMVKҾS}d2JoV*h4Fk8¿~EUW;Fq7=ns z.y$W&4$4F =JY';E4OhFU3*.,Ecy嗵[.qz!ȱjoĀB@2 , H(Sa EY(-KFbҕ{BE~w4p3,ZYdjȵc7Ƶ-r- zo|?1im2(4J/WYI7NN6ĩRF>טھ\17 PQdeipOQ)D6s65TMxSQN׌+cpj=R:E~Sl<Փ;\sf]DVg-/S]CL+ 99& Tܝ(֟9i 0ZR6ݐraE]oxK49u_i{඀mhrf8{yqzd0*OY`F".6b0!V sz^/5ZR8q7M|s+" #!|YkYioAtt们N;hت3R>ZFm="Q`;ӣC"3i D&VHQYd@-Qχ4;x|'k/ӑ#&>4cPӬs7{Dt<ݘ* _]z, d]cfgLxc>kh+PC( ::j֪w\^{a`I (  (K* #cl/2(\rWNT!(.nH8atF1/\ 9ѱL'E^eg»n+r` DчF1f].-8S?-ZY A1/"of mv3߁jz ø}V$#ap@"@{Q.Kׇ9w;?>&tLƁ\ƃQ0g,mEDIR`em[¦2^{لos 2_n+p7\])6H9^*pGI7~4+ju=B?B`Ƨ:6HSdG`Ia} f)gﴵklB'L79ȕUw*]-:B^륭x+Kt~Wp%74Bm>M;N_n'.]^_;]v_9k\D :]݅OvǻU X75fuŘ8}Kb),Fum2\7wF~ڪF]ys1wm5O>Mεt,YRvYlMIl*ۙz%$8%PHnתfM#P`?Bd@)=3C-RfعGĄW?EyHW>}O֏ ۝kͼa\sL2+pɢ$TRHV'caױ-7) #䶀YgCx~z&tV[8oW6#ً׶BQ+ jB @ FSϡh Eɱ{.-ʛ4ns'*_:$'PxD*"'"z;#R*skU%uە{]}e'ɒn7f-c/}˼c;EE9|s"\X5 ja08#mk{?R\?ҧVpECAq>޵EhmE{~7,{f֒*\{6kX~Fe]e (lOVmg{O[+:;(  2LoI͑F#p2j}(8+>hwVesA$ ฒi<8 ^ީ}< xh/WoQd;%Tx*QA>p{mb}]an-Xv ;M@^+4(un[͋oʘ>Vi,=_n&|r"]W 0zۓ7wL3*_K>6!y%AkX\k`pr:׸ܖ۹~Vq9.E0d_!dsB#R;szؗ}!6d~qCRxiHyg˂ K^)j!FٝۼF8ӭ׷<5n7ZgVNܲWE[WqTeoiTw廭}[0&kdzN9RҮ&rwX ]t5^m$p!%!oVl|_-ukj֧P?_ak_*h w7-Dz.|q뱗.jֿ1Wn?3=wzvT>2$Y2'AL[3J>ޔLTȯ%8vV։do Yf}lym{6t=&a?RM6>ۆI@iRx|nJ>1ORito[;1"g==3V}܆=O+9h!?7RItgny:_N9fN0i|i+ Gmth':!G!s{X .Mq;-AA0{Myus""TBާD3yQ_oH&ާ7.I*)Z:9^Zs&MlqC5W~púsUV[$ CxO&gP3uYGÅ|Eu]hJ G}^}|TN 1?y3 Lz QChq=ƦS <=`XH/B0A#.7q}cBX$>z]g/x";Nr'Jbz}}՟)v4](B@A`{pVLŋdyaESLP(1*XG˟&?= d@tONW0-{\4uFEY|w]aLd.h_X\;c%12-h~;h 5-Xп.fTI՗:!DzzQFZөDS)>Nl(MF/ /+ey;kCđ&pPKUHbe`lU9}o5m,7ml{S ]>VԺiPwșwvG^ۯ}˲>> z-͂n;V^V9=(b+k9 &DX@ب`1Dɿ:4M)Y۰ը^*iCRM땴^vm&9*pڨ:-tjk?֖#>okHzQDwqSS8ӳr&7tIvjK}'N8\>\ dYW(:kξhZ+M뎸<1ټGj=*0+nR~0}\؎eyJ4_NT;9}SZ9f˓n&t7-YJ)]>A| >^vڱ .vYx.F_:xF-:ZV3hDH~ʮi=͕Qx5 E56+KJ-v2 ^4wz)Bרz2lݏZtzo!.xuU "sc+jrZ畳dD4 2q/(8ɹt/IͣaHV0Q6;J&ɎYҷmaɬkxp7Igs&W4: /"LkEu(@q+/JٯV{Gvo;$<H;k tZ&>Sztإ7z; Әpg% ֫R(]J=?F8>&e9$JMע9KE{ȞPr?!X3Bc/Qyw};/3ͣwA 2Hoo/:Ab|V"i7Ún < ܌}N tCmv I c鶬 m[D^?zӤܚ4ߙٍ֝ƔC6+YHn>'-~cN/4rD79Cb(R)|ףp^m2'.r_rj=ͺ<zH#5'srеm5)>CV1f%&Ƽ1Ǧ-Wt|Sg!(DK*Z@ʬYe<+b.ɇCQW)ȪB7q)&l"mHSKVFhYG F+룋^bxҾPV7z\ќ{pe""N(3WXE"TA5 x)TU0l4k"$[+ SlknOmZ301( z?F>F ecח@rUşUlJs~y?F#EєCΫᭊ/ʢ0EA`QEYJ]kY+\yqwsw3.#R}.#6T$cXD^UWDB ^'qa)ZSg {m`bB&(ȰI$X0I #gvlD:}p"Cܘ&$M*Ň%SR)^1](\zi8Bvm;#ApT=(_ISqL~7N!dՎ|<^*opn"MKx/z0ԊnlDrO9hh8T9"#jtnnDM ݞ31"U2 DT<|I"]:<"lRC!~6T z;Rv*BVCEr9x}wtl1Y7 􅾃C>ods0qd*Z5¥RiŒ#Oz/ ^l:eox #aJA{4к- ^'^7$x&:vzթпWJƕĩE]ꌁr)獠1 %yNXT,ZVkXvWs;H":̓˗2A%d92fz]g<(3tvjMZnAӮG'G[+cN`Ѳ ,ѯ9V S߷~@bnzZ@q + ! }d^[X{'n-/S5VZbvٲ@(m#a8 ?TmaOlcr/uMm[D,*Ҕ bIX /eP*{g(N0+ `BC;G)t(ivkϑk>&lR٨C71c>Z@aMο,u ڜvt3}eS%/z+]F.v_9-&COVLV޳G dw8r^72k[)n,J,P!99 9YP89tD }sD1T[ [hyS&Bt_WwՀGmo@>u; 6:{қ%MbCpFp iW{j^i B"vt6|BȰD?y:j`FTx\i԰ݏh9ݹZk껝K79ﱎqY ZBAvnۤH*գy@ ɠ%^)‡[n2y~UM udyD;)%B}'Gr{e}Ms7Qub JPJ y!ZPs {W\wmSD4M /H kQlhc:@3JHX[̟w?"scNۚך*Û4 ,ePҰS!+ M[=ğ7^[F0Vʻչq;qȥ*zg ;#ہ}6s`=_=(`.W1bװOkhyӜtN2cxt?'_54z=$g=G'F"ҽ(yd3z o꽑Вd9p f2 $}E}\ c]}i5z{eL gQpI5p~ 3 8ɻc45"g=Q_ݡx/V/4n>gɸ'e82\,o60gntEONy5_{GBxXM9L^=ݺW^}p~~Ҵi7X㟝fm{ߛ-_va&lk&r}ܗM- !FfδL;gUnzݿ^* ;?9Ɩb=o)ʕܰ3u`q|,5v7nQiM~=r[NxXv kS1MGº2v*'{7CSދѸң#s',C~.r +*KP~|/9dpaf^Ө+ohG O=ǠcYu)v<^*-O{u@#O2II?0 Ef⇮Yo<. L(~ƒO»d`A[T`0 8 d$'ǂN%>2{<սmNTĭρMuUqTsݤ:EvT/`.IT?"^%hճT雗OxhO:O:fCtp(@GQ9Y r3#͑ts 4nQX?s vKK!R):=ڼ~끊H*PO˨N5ֶ݊wΓ4AnO_Wh$i z$UMy0Y\:s.ikb_ _vQtVA*Y|. =3] U1 {i~(!@ИTue71 6_˅iQ HT !1w(9UYszQO x  G\B"O^񵭊"*2C !u6Wߋ]oO|_DJ?~6V?-x]EVU#5@/f_8Y!(jEɌ:KAL CD _Pֽ٨RR4UՕ4eAx_pdXĞ}lȈ \8[٭G^̳_Cb 6)&b$y1bBIkO߳]3+?fZmh?6ߓ|ZI@?{/XCH`#>C07*j}%ZIR>/}jxaӜYTaQi/~ 9?"!+F$kbf_qar@9dUj}n.R\NTX DQL]t!c ~ö)I$kNo_ BnԜ@O{/U_;SOӦH?/$9h ʱN_T-:~7ޭyj(K2s?;/b!k1d; xkwBe;m(+S.l?(~D@9" Ӣˇ/nHo;EB~=* wC:c2"yѽm-̪a\vΎ/ XvS@R Է0Ke| {{BǕf-a(-8.IɃN_-=TFq6f+K1$d#6قNsoTsZhE88 }" 2zg;fx!vKޏ [,6;I"|C`&X%_sGII)@$D dީq37@[GL"wZ՝_)Nu;iEu{d&SvTh_zqk9µgzk6.YfHۅ%t ySyϛ\ЋahUxHg'SmwC:,0\y:,M]C洀,9/>Urt5f K)%Dig+*87@mBjduY ΓCwUfgW\^STQw4^_ _K) @>9U-"!(`}ґ L?>'ǓLNBK` jKL 2GmQN2Vzh87k?]^K`Dpbl{^Gs*5Z쌷 _+G7l٤l<|KDt7kPPK^Q# {e'hk)Qpd_m͢xNb FBUmOl:*@u%ß^PC6201z~cQ^$Vİ+ J+{6>x=E$Aꘀy>Q|u xbJ,+kpP|=9 +Ph!s7%jkfyil- >U˖ fqHL9rpUm_>F  ]wuo彉  @B $bmOBST$)+*VW,[غmRRQ a_]ef0t߽-GPt4'zCA?Y^p|{GFeMk7~Jb2"gl(&2d3q8EQ ?+8$k9IYr_~Ig,HAT򘥾0{:8VJcҕtʧ @*(Ƣ5@]%2* 2lF3 ii.eeFZUF"74lJbNoMp2}R^&R*]ƞfFz#: Z3SQ~<֐9L+PTY1~8,9jBp.XW)@ RuM QmcJk>tfахN̵lZ*ѝG .1xPMjpa STD`R@dTHDAL\@@Ϛ4_WNW|T&`n& +*Nm+|O~h_Kcݢ"I(B@3 ;+|@gcoHK6f6 XPA@t{]`W_N]RzĠ8 NK 6MSw.?bDN,K8{6MDkNH"o{>҃l8hGyN[˶):q9ȸ>Sa>1G8!g kbөnGvϾJ(ep}+7y17T}}Yf6yòj~c%/j(,ސ_@1eƢ}gg_ F܂6Bi-҉"b6]l" P!N![Ԯ8炭{  7?!RM&Q%8 `P&΀ߟD{iYw8.l,#8.q񂎽VPfwP=σW6,l$hF U/لj"\'W bq/DUB  vQtn#V/e!?\&a]_W6k&ʭ?=a/kּ|#z)W36|Tda`]L0Nq%2Π2hq r,H`jpW0}ֹ\ yqmH5x-EYƵ&&2F鵏b+øc-,;I]{=>_5-% ޼*1z݃\i|) k !֟ۜܒq)ߦ%rD uNP (J,Y8}2"L>e<{mؗ|QF=׽I0g[d?}7SZNIl 9N]r0̙`WiPQwoջ)}!yͿ.bO`1%p*)BQRq. +8"eJᷴפi&&AZ(mSĬSzԱ:QcJ-) 1Ec/ öI>kcU$B P ˕*ʋZ`^.QP*е7)>(cVj;8CA-K5»QӿF(#ʣoxޮ.)/xo)`:A\B#[w'VͱTL[?2Ѕ尨BˆΔE5:fxwdKjZIpZ͆w-.ԗ& ]p@?~ kdtY&4C.G-O8"Aǹ'']h4ͳ:s&z293c P"Co?.aDYviNrSxcq]Rmsd;c3<:8CRD˥B#e|99(EP2x$g Q"s ֠8 W^NS<] o:2dypP2gKC)AK'0Fĺܵٺ]d J$u%`"Q̒TCy1'-}6U䃠a!bbww`6bbA+ʭ/?D 3?59"! J5%X\QTtNb TRX?CXr7ZN!AppMܭfp};֛césVF& lb(ZhSWJU'Z`؎NTthedK\DJL' cs7N7Y|EUCDTQ"ʨ-[K&6ںxk}$í{N\E*yj"eR35sS%, (ҫ`#=>$v)vaW*wU 6]/V֕ry}z,Q% a>AF7Ӈgm6?)j2#f7خtHj}"Bjo#G D׻M}kw9ɠϡhbF%짋R19#:o[f՚whTG Kf#H\~t,HqF.. aAXm`>r*ǁ<#ЅezC;'wfyչx Z /|f!K=oInBI!Tp_m ii[+] &kb54? wIS?g>*Kk}z:aå-G8[qNƑS١~EsF67nv 0~lۗsEv.'NLٽ͆\S~n>-N/nZp9gf=gC"mDbY3dJ71it9 RKNuOS6?4HiCcqk],Z@aa_]:^ G9\BˀŲ|7N໵̖xƈ }1d?γZ=8cT:>|Cˈ@B Yw7l#` jDtAngv!)|'ӿݼN4(ԻVXvޟr%__~8jCPmBotgOo5TPQ'DZ;# `]8v@7rDL rJDbJ`zR'NZcd}BfI ŭ4rݸۊ,IVc ,;i;mEj6׍f9L2qoj}-|Zs)ͯFo~t_ŸF wnEqcUkiMN佸kaj }Ż:"RUo8 o}}W?XW(J m~OKKҩ8ta9)FaԠe.EW5ǧ9 k#~焼ݫIZęMsw̝"۽h9Ll3q :ՑeYKyLJ%"R-÷_YhLYjK|uyfFp"!2hQE+U1`DG˱"j'U 9Xu4p |+Q6B("%5bI3qVKw!!v ǽ*+KB;Jyis ~x9x9NV[+P-۫ǟVƠC\Yظvo7Q#`Rҝ|Q>h $8sOa iף1$9+iKٸ7[v{Z Fo5s?]Ao 8>;:=ꪯt3㣢Ƨ,/zD\xj<$#!$ev$dPg5Z0c볮Wy淣@ѨqiŽn?q"%t&9ȉZc#hW #bz#Y՟G-r":|:agg;T FdyX:\lmDYBlq1mjjW N.r$Ыl6T-"jSiAǍζMyyOڙF_r=eD)J~>^ Ib/ӭUj!VǸĨ5y8yXx9zZ6bV-hJTSC`T S8Yﭵe&O`[QϾ'{:uXi#ǸjfU"" D IKo3ki 'E%j^=o #bhrKƦV|w&)ptYk`6̳Ii*/ըz%+W3MgW߶R-l(˜QLKCݜr^j'vrKaA@էaCޟݯ ^糓S](#UAYb(+jtAVbřIZXdipuR`?Ғ?Q)Sw҃ܲ2=[и_ݮ/F ]Ê7BRZ~bQ8)X)T%{ ulzVC\1t1,vKj{+;5Z+a* ̋@-]]`w/s:~M1Mx0ISf,mtN̹_Upc~UaOW@fHݍܝNǖ|;[/G_LP o*V9b'WaOmqP2uQ*.n:<>tA<\:'?l')(U'$؉.&+dMhQjiJ|Bp.> dIrRKe4]6յW'=>-dG844[Q Vȥ{:1Kq8KUm5`H,WT=.QR$fJ()u N,`u H2͓,DH yXWzGbݧ]GSp\3*!'B2tA37x o] 7ȼI2 85N*κ w0to ;?)6Y; UXlr$CLxvL֌(|jpVP( Zw=n|CFX)wɔrj> \:r^RoQ"Zׂ )`{X(AY[ѻ'Ss4^iQ8ٜsqu1tܩ3'l꺖Y/S]F<c^(&܎'wծ%>y,mZ1xb.ӕ2LF9a:6iVFr\Kj*;4N91EwbñS@-Tj3%f e@NK%XO =mI ,ТIE`^M05Ō+WgnVLHJ6/gк~ExNWE160DYq te6 Cni܈R(?D+6q'YIyZcv*snkS.H dE u+u t 859;KN!o5K?} ՍO[g:}m U-Kܬ|@p/sj߼xF_^xR و 1:1K>D!/?4ğ\a0Eɂd)k/( :{z#xuknEPň Am6p 1h~6ztPopMr5WOo wX*EyAG{;1rk/?.y~-K̾x T4P. qKFs2wg[N榖¼ Rs5;$1htck"նn͘"\6O3F65t0fo)r4]hIL]h+\u*{Uů2^lV4UQ]P>)]"Pdh{T02+ ag&Xg)Њ_0q_ɐ0Ն4k^y^E>>[՜Byt?n]\ӑĥToM3*6fFηNxhNu`;(VvݪC-Tz"_@1R+Vb1c|'Gi|'ͤ*!yT$;E=U"D=o[|xR%Oac}s5T|I5 9o.Byc?bAc=+!`U{Cz1R)U%evD mG^S)['n3BPѫ̙JBxy S h%T+ZĪK?6#$7Uf0R)*%YF0;:&M oϽ/we&k|];m[]sVhz V:S=~oY՝eT"RRo<˵I>N(zt<<YC1E&RP 6N/kOor:tL cVLZ@maZh׋#jf7~hk%> *l7:X2q 3bD=U]ꗆ+[vTMUq^A<O@Q`Qն=^,Z\\Qej E2g2חtɄb 8:ib2}Јʷ} (j$7(37qq x7^o::]׫"0_w!$V,e +~Wt|c&ubbxr^>=^aBȇ g3aYOk7Β{jͷplsb=;UHfQIx*SCHh D$eS0W]V/ŭ'eIBpnR{9JFlG?gӨ*5Q0bڄD|! B2a_pzhuH?n$- 5ל{0AW nŹkR6N;{>F"""0/&uaam+r@m #TY(A]//㞆~LXe'Ws~ê(x1wh}okmrLXy1NI(Dt +x=m/K.)@v x8Q S\᤯<2Dҏ6y$>K湫F泏r6rmj}B:D4۫8lm(z8m-3zޅj{Fpg6p>1 Pe=9HTlhgnv QpXh}\R+􅧾*əZ-1iH"TqHOGZ>/b6O;F̯w]) DqW7GM9Ei1KMcqێM_qwS$v^כ'w˺%׫ѢZiXfzu7_i r4Uh"(.݅ 7+վ"wf_on M} SE$@K;Rmk\WE{PJ@\T `X5Mg>s㹰k( (?8?VAO"f}v֝^;l PE4lŕX:prs<~u˻tu _{~޵ZcAΰs!f3l"4>4H3_cx96Vp"4QyE,X4%']O+%>|0hWYB0 ?&!=9OuyXιRA(x9zNf2B!;^&ws'ƁPb6Ń(6` om @]r~E7ɨ~H^kuGY*fK}\57|FQlE/F!6Y=XIF0 (&&tWL=j\;bJ"mt6OTx\nwniQC]#L埤tRG|fsoVF>z39̑8:8RiY9StWh1/ֺA 2:JNBj.jZg,#wcxa6q#˯qmY`]B,/pm$"߹xEjl8=l:`&'D5哜^9(a::]^㈶a#_u_ >>9"(ɢ~kǕ Y:zs٩waOY+A!^ luÍpL8x(ֆdL5/q*Q a`!Id0$2Q 1U@ uE+v l{8QCSW ߹-@ nj^Iש+pe b፥hF=K4xyjIGN/ZwBnƇ& h^uіIF-QѦ['C.Y ѻm"NVx-QIˣV?Zu,҇1z4az;w\E^*||gׯUxwPW܄-%'3tXU#BH2b:w*%w[ =ȲbKc=d@:S&(lsh+mZ2xՂ;mJO_::|o5?*TI[S +̧j)eݯnh0o|Y>y7K^VTh݇wξi | R1zbᯫSrY2'‹]~1ާ4`=_6hovrӭtoțF]+up84[vWO7bsqk?Xun#X wx9ks(Mr/Y9w׋0O-4"t֜vvkE8J.|">w$Cg|Wp]gfM_B3uHVa,aRJI»3[1^: &jnV1Go'CXsSDSG`D%o KD `RH&NP^d{ԑ{C@^qC ^nΊc*PE:Gd'ORxT37 BL28Gwߕ6idb*V\uS'@I-V21kW7&^ ) 0O殳5 #_غBD(1H_)iL&#ZvKCZ3*?.'u~|#4Lت. sd3pؒ> nHUƹ8wL/w}Rn*gMPDˈ** VH)/yg絬(jRKhZ]36/zދZn4R>U,_Y@ …VJ<8 I?l$IQ!fKݕ$fj+-_1ܷsVMz0@ `Am} . p Pjp'hI~_oSΪV$r@ZX{n8 0=uC0d w\UUVkN˖;e)îzb+AHQIOhDnӒ@4 toIRI lv7}sҖ'oBr@DW̟BGȖu~Q ?6sw>+ԏwpP@"!KZb%)T?K"_ӓܺ}pjH]6mkaGw=v7,z[ (tGoU](Q=kE9RieAI(rT}N=NHbyə]ZٔoVm_vU?F>=T_e"i K^K~H@gfR >48ň!X{wE!й413"cfrOqRm x2:0ÛJٍ !b( Ő9Aؓ06oǬ`ށ}jo=ڍStxl_nMkX?:ǮKRL1MIefEj|7'~y*+W =?%w"BHWN.o]?STCy?g[J:IY&Q%]7SHv_W~1H`OAk>nװʟO( Ft bq)bxDiT$7͹C Ϯ @>bG 'l6-meUR )PxPoG0bZf[``![2s>ӓO_.V >_JpQHID4.=ᛂY 𛮾kds\_-7%꼛NXY⅛*.i6Uz 8o4dǟ{C]ݰ¤OخW.}4-YL.!#*I-,-{}fovWA''p@xfnޚ0.+l.Pp X9@b =TovsZ7\oxP-'10(TM)LϚ)_%tĻ(}=['оܰ;]> C5$B!gboI*FrCIqtunv?nA Mթחv5Bu0F# ò_z$ZbqQi$w/yCZowzsVݷxOJaVkK/0EՊYj"6XK6ry. M 28@W*zJuDQbA\C-Z*"U]e"\Ci-È<mSk!kъd]t4x=1U_]A nq0wIU`*\VEB^`@D٥=>~UUeRj>ot\I;FKri;9("E@ߖ`#vNJgG]l_}^IJ˜mN`AISQ0q+XIM+x2_u^Źz$?f"҈Nxw(<ϥX䣄y,5Y,DFt/9aHhO_ǿ]@H)ZhJHSE ARR+ȓ*Y*#7sH`:”vS@1,GJ6Ai"A5U UlR6(QpjaC?6_W Q:vNl-5>$mN"2g\w+ \|/B=[:`@~}/7*>ű:*fQ>/#npD.<84UEʅ,u9,C AA̳T^xn838 ̝ѴVҤ"}j+mrlO9W'I잂SlP:uOXO{|6E:WrpwqC㮫B!Hwu(TR͸0ntpfԂTkŎ|nct2!d`k*Jwai@@( Shl2QV0AhCv3ш?۷؆2P*:ޔ9|?7=s38>o1x,։wn \GCp@o?b>}uKUߡL2zx^ $0Yz\Aw{a@30 kV.ɋ%<Co}fAab`cO:2I`@ ĂD  ruUz\.e=[C 7OҎbÙ] 4DCLιkNǩIyf6V1H&yZSfqe۰(*w0.wr|9 }AjW[Z1z铢ݤ<=NKᨺ&D ~TDTo Sİpl#֐OGK+H3fyPBztph~cRw6j1CR+H9 A)Ad* <gf{m먟9"t $V@ww CNys:FGď> yD)p ShPv*e5#,t+KkZ:u 73 dQ2Z*3Bb3QhEG[EQ-#*l d~}/qz.@k<4DdċXL>OsN}9eԼU*rL2S^,~-IX'b"ыPlH@92`2xQ~FhȺu qy?AVJWR0+0r.#2n%# I2 '|9ܟP;%VD@zpZsh\YPo ѭ\.C˚eŭG 1$* #N~в>Q1!ʸcQy,t, l6jH$bn\zڻ![ (ȭ@3H-ּ"Тm$H_f1΁JRwYB{j6QZp-5Q(ȡՑWbAR1m6EE?OG-DT4^)ڽ߫HD#D>I#>_nt{3ymI}wG>Y?Z玝]o Z^OL~bcJb%"  mtί_{oV*yH4[&=jkY> LWNW=R_Q]dU"?*EhȈƼ@$$HWLi3K*gIJve::ŸL7XF[M(QT}ײɏyW[nds2E5<^D~=n6؈>OKyy;|f?z SdXBRFbqQbSf~"0d"srjF$$ hGVx-W ~$?Z|~ؔ'8SzD7ͪ DCk:w}YsK<t=f_NbK~1k[LԬb0c b0X߸YzUhZ /`oqXx<+^ 9XxJ=oIډ@HQ< +&0WQ2K~ RRWB|с;C%2F<soRlã, å)-*}C.lTygGeL1*|[=^c4u Xj4v&u@{Wed gmCf PH|X>֢;-U%oo\&hJ@ :*@& G^gd<\qLRHԘ7xA}CS [Z={5J粎8iy1HY}?5cG2gc0-;ay|!!EĐ@` `Bd2dlD= ݊3 Zzr: wsMNu*ݚ$[9pos|t`b|ͷϠ.:o[{Z{`\mz}g {1.)}gKMlA5 nSa[#̒*]%fFma0uÜ2#CwXnvj5: x.D1=gOXot B>-xFYnxk 7DlzkzT[YRbwUϱ+P;*X%de%2VJSINc@֯Wɧ9V-2א#WLj 0saHhNڿH CٜWeG;t~S^S'<=\D6ju]>jk}ϋsc1 x>1z %݂W^e_wS.m&C4rz119ѽ`b\_x(12&H(uRg/GL}-A::~xq6 ?`le雚vIͱZK \WG AuĢ'C'F.wᏯ_WH4-\Eg0Ծ&_dy'fwo=M= S ByH["tP=53zҙ&P'<˸: SK_o %c{(5Y(:v28h1>aiG^p71>h GL$>a @CKM;֖1kud~Idu8r"VI"9twlgv!b:P_wEmÅe]ɟ 5*0uכx_TV#3G0:ߤELItڌw`q,00pkUG&5[{y&Z<9̧p{`E,M:MwHtV6ltZ4f)Ŋ)ɂk,x2Aup+؋J JdCE_*f'!@etםscQڼ5lb$DЙ>~T}YU ̄*B)C7wѮcxC?q %>B[F $h Œ٧b| }a+avHb#7@ZOק¢٫ᏥoֺPLC6~'OZF/-ާEKkƭbmc3~崇fe2H;G%+AKV>YC4gQjOÂ:'oYxxo{ȱ)eASᑫGjGZ50\v֗'OؓbƬ%5psKd-AU`LR: :u}Ch5d`ر3Pv5(XmĽ{/F^6>Dn@bBQw;m|iග|<w; 0#5'<\A`GtJ76%}, [%.-'>lyk8/+bׇR0|@D2( 8oZG)Trq\ٺ*GeU jŭ O7F{8pP847 O{zn:Uamp 9>RI E򧓩yì5*`L PA6[I֤]ö(*0,!]׶蓿z9|WhKWT$ eC6-[AdTk%#Yy [ am >\(bB3Ȝ?ˎ_ @j ʏFqy;#U35UcuϔP'ؑ"b!AR({揑@wluF_uȽ^KrOK?.l=S&nnܹ[^Az*ȻÚt~9go{Y_7iPXhe.Rx<[ޏKiTF#l^5-&[ؗy^]B{ɡl!ЩPƵ F(>>EG ďl+ibg Xz' sm|:-9`F])QXf߽2n6P>i̓Ze뙗_3bZSt9fKQ!B3!!Z.l{O7u;+ާ6GPFozH`qQx,#]r[lƉ T-\8prW]Ӹ-P\xqs'p;_ b::sTa54hkҤG%KJ m]|G\Rp#VTgpU}.#;٧Ό:;.-ahۚejXG/QE{Dr1d=(rB mOj>sՇ` kk~ՈN5sl ׅQaz 422H|%n`wddiA@k,,om /_JԹ`|B*VPU`*>&ܗq[iD%)8Hsԉ/FO%@rx#>su48@n+#FMӓ#*u\9?T+%n#wn:9Y"1ǩ̐oR'MBb" SLPWXEϊSMZ/Az D5JMCt۶O96@6 fGNdmE>Mٚ)-K3m]jˏY"'-zB%JDڎu4yKyͨ}vWMBZ (iJw7˚-b0xG>4J*fʔ48ӜHTq ֒SO$&!" j0ע/'Im9oR:V"1}/7xj79Ն%w:76\sMHjocg'RQ)5lǖmM]A ˚˖7<_edʾ[h/(DJ1R# a-n:BG\z?'G Qچ5:s|>s 6Ӧ]; }f7Ջ@#Bwz[p|x{ƒ-奤/>6mMGQ"=21F/Do^*5]Zƴh{Oa mgzw[eCky p6gρMͻ:lգpZ]3zB̓g:L,~$lZQRsx]3mܔ]"'g_>Âg4+1 :E(jЇ9P#!f.L,ۗOD0.'Eks7BL;)ۃ߂jo͂d|McQ=^0u,{Kٛ?f]= 7nVk F9,!`QtzaP#T |]ufr[nw]<`XSNu;0Pa>Em*a!&UZpn\ 'ѻ274΍'8m'ZQϻtw"]9!% ?I:elioBmQy7ga Q&4-~kxz= u\0G]# j,q8me3/*E2ГSC>G[]^X/x;ݨ7zCJǿwT2ml -N84:!(:68Wrh'EdJW]Lfd6mZ+q.t]ea.圦(QҚU\+SE:=/,''gGKT`M6yt,7dkiK>S;V~#3|?$)qJ]ci BrKғ%f9syB<.Xk'o^dh[wW8EfNKUkοBI2ԯ.qՅrG#Q:ܽV?(Tvv5La#'~CU>^}Ԍ?>X;} H wu_o5(8_&A7 n,̏E|~sw_͇80)D dJ z~C}WI8h3ƀ!a7AA jTiK/y 1 {n1Ѵ k (qۛjAfT a7V};oj*ndߖS;V"\C~3rS i*Fc0LؗMB W)ݟ=[NIXI s^U }^_zxv< tI@o[fY=;>W/`mI/yZIWR81l_똲Qb# Z6uZ+T4ٱ2դǻ*zS-@ oi4LC%G#O+cG`D阀,^,a;cT]5׾ӂ[*c>_; ?T@ge.۷bl p?;2=K9̟Ns#tۇBk#uO5/&T] ؿ^{=~ѲVY`6)$@x7W("75nS؛Ń3ëzkD*<[WOe ALDT1i!.N՝Y&A*>Sr =[FvXC* @qߣY48"*+[-2TaÎY.4Іvo "6Z#JG ;EϋVCϳc2m򂁴Db7OB5ЍX-f<[LB<5pE+{w><^G |6(fiß/<(OljvU^ɪaxtrt$ڭ⮻5ΫsFm-]NHtruUO3_3ۊqOg_k'7\3r!rbtG"|mxrs l.Gwå8Hv}vf<urϾ᜶NAK,/jbQцcF-e2K`_[B'6uiĽֶ{*یe 9sݕBLHFӓ'Oo~'V[x<{%g} <,6W8jcHPmX^]%ЉTǿbQcXqrڏu֊_ɨCZ8,8ū ַO)ٸP [(ybh"ex=Ի,2q\'W8={gr(IP!"H׼tLB[&LGxw;=s^{ȇ!ѧku<H`aH*%3X)F(PÎ84i XܲCUPz/&6񻺒ʔ@kw:!G8,50Џ+Wf,v + l'\{;ekh8[vu Aa7Qc{jDRWiͶ>lL PtxxrQr'KOxi'疺q0AdswV*`b:KQdD׼e;?:)o=$ʙ @#2aRn' UgTfٯP+#nlAIiksF^lw^% $ lRF!m,.ADzr頞VGw\}5kuwƳu+2mpdhf@@yS< tx* uNnʎQ b1S3M\kRt>?~籹9uG٘Ă"q>lp?@ZnQ;6HV^o{d \CDDS| V}^EU<\2U~|sy2zBb5NjUU*a_tw=l9>HU:X3qUFu%KƭAReɈ?b,O E]xQ]n1H;aSi;pmnzz/At"-D2ϦX}IQNx>cV^F7,NmN?O\^gwEMuu.J1[>gn'q=XV:ʺE!PzٶkD鋾ըnk@ rf:hqo,p8Z.PpgB=t #;E9D1FPXl﷒Ppsŵf}Ro=ں -C 82JB-5uƅ,EU=zqtp JQ%7I<1#VaeYe  |)ACZĻdcA"d/2t- F]@q_ȏ0P Lw^ =`};h#Bt8P zKXqaL&/ D7aV8WE έg zR*6gOMO_GͷuP~t;K;s+)`lgޗ &<1"<7)ݷD)#NsHf/5á[P4@ɴŒ}OnAenJ]3K} 9V cdy{ad7]?n9-6QXOj8"\w*4LWKʐNdn E`'-K>`bC_q.eZF *FԤ! +ƛ-Nл dԥ@I ; 5H@vTED-O)y#YȻh8A}إԷ~ v3w{|j|v 1C NDRN\n&nM] :AŨX- {_О3uz-nUS A7D`mZQ?98nF2}e;%?GB9SqL b :It.mo߉(uwܯғ>?Za"nTr5d<8pն.`Ɗ#P8e f?jfQ:z7&yӧƵN'jQ;6ã"}kx7SJaP~\9mI9l7.ѫ^۾;Xv:_M'w'Sqܵnۗ)Ybty!3:益[~bgO`={X1eRJz]-2=JÊћVk]kӖK;Qz"Ʈodj\~h* Sj'v)Pux6/`1H0t?>񁆰 W1cNhujD(S\?qؚcev$7k'^IzQL vV葦!ĖZ\pkVhay6+i<@Mw  ԗZ??Fr549{u~6on콨nduX` E0 #tc}g>g[p< %uQٱ/$ !FHRBj#w:!*. LHo~y5/_<>avJ#kL!-"ޱdD7b$q`@D+J@}Q@ RxIU NKNlZt7~%R>[?_~>~mc=/yͤOG(0hޤk7gUä]w'TEȩkLA*1zӖ*Ghʻ?TJ^Y,Ϯr(V%Fyi (mV[RSr~P*㹨kXF5bl a?'5vyF=tPj >H#A!j'L pW -6ۅ ._o[xSJ$TXerR r2YAlwgZQ>˿xzjY. xR&DbbDX+p}+0E:G:O=nSwg߷F\3!*\5G3ex4g;Ku\izOϵk9iF+(Mۇ/ |x@asArM&m_#nt3pv"Vw]hb 3w1mLE` B Q'ɿzl q.g_];I=ŏ!&'Ԭ٠ge$apܤen"=49F<"SYj)8,Oڢ&Sس)?`5 ꒉT ºbXӪ(:ѯ@8 bGKwekj&/^ZCm(tEN@A !@kepljW~Y2YUW}^&uۉ @D5nf(M(u[/}*yns`ԽSQB WdIr>m=_U1EM2#EB3O[P*YblU{4|< ;НOg]PX?QSY81{O/n)0Hw7"{vɏódR [^y0b "3OK| v8?AW'3@JĴ'Ϧfkg<ى[l8$(B0A1@-2_°pY!߅C`12N1G:Eb/$@[Xcq dϯ*"(D?AO\r*G'8e˵L͝m.D`BgOJb Y/[,vZ/VGJJ^Խx8 Ś  Y'.׀`]ov&ۍ5!Wcݚn|05 U3'+?wtyٯ=ns3yǣ.f)>t78:5CN߮ Gk{jvD_#= F㎊ge~KXo@?>4J1VZZHuK g'P{*KNkKxEkkՉY"LRWDP(af,$ ekvPpP!$Fd' 6, 6\-5<@zi_^^u,m9M pa`Z:x}4|UGa%zӔB }#O/guT m3x T+ ^EgrȚTŀgP"" CKk7\yfBv\mS>_iFk[sࠁiFz;[۷&K-PNROTt%?'ߋk\c;Nr鍴ǐυ_W?goE\#X`δ(hH0.ԴQ@eHeϞr1)c2?%삻۫1CJj{ؑ@@!L뮵ڗ~^/s$bwؾse KػT@ ! " %>i5p[QdQ"≔"bvjTdz bX*q ,h0 uJ垪xʼn:^i茳HTA0ejI Bg)(Ե5i9 ck"~ʂrEDj*.i/6I&y_>+=?!=y,Mj|4|#K} eo!1~>9 ǯ=?2C8'1GP=mNBe Xٿw iWpVo{_~IpN=gav1m~WXW!`DD Θ+J`06/V,%]64_tIEU}9m҂[Z>/ڡS`Ϧ\dʁ+YʉEWN.\=#JGuk&|F~~ŻVT:N}!C0^޼t p3y7W4U{WYVOtZWtyLC ccXRC)%OSDTӅPO$ ~}z>P!lDF!O-3pv:m(HL w"l]i&<7r@8n5\?׾&*a뼮K}Hh4ʣx4K*Uʵwy knO_,G&WقϝB^>qRk"&\F#︯?_8[5-l>{CO׳800a1OJkG2~e^ ^nu'\~Aes>BW`VXnWqgv-e.MI;uԕB.˼.A5XrpfEJ*YH V)֎Y&9t02JC,D #L*o X n&== ʄ6pڲgOCtI\QTؗK`L/DGM,C|B^E{2'$M&DhF> 5dYՌ<9=_c8i@{~9*p! Ք':6/Ѧ<~}m|VI;m$/H|B3PߖP_7HB|Iҍݟ]pN; 1 9sWe< @+歍T:'HPgYL%}aLR(D"B)TR QS)L`fB @Os^%֮y--9B}nJi;':m9$I@y4V^~ۜ7~aKUCX# :ഇ >_u읍yO"qTAhmRX*uV. 5⩇+ NAnK udJBJSV-$Fb_˻n9"Ǐ*LՍUvt?%M<=,RIKkwvaS.+A3%K[B/ܶhyDMY;\~,7Fc\ >^, "| ^tYLF+望K0*x u{ dv$ _pb|$ִ r&n~LjI%"8 `e`O&^0 dR$.Id$BH|,3 C͒Bc I l N$$I!ӠR,lWoP~WGV R8InK|ڥo;HLZp8wc gAyX..Gb)sVB\)dM>~Ϟ?߹9{] U%F3N a@!gJ%ΐ0 6pm(qI<#c+_IYoإqˎfjvWXER /lʕ9NӔ~mr^DRQ}[*L)hNs$B4k¥U%ԓiH4 (UdžHfW$riMV+Y2 5Sd*:gm2{u fq~8 $Mfч˵|g3k B8v,{%a<^7Wy̹yayXx&ŦǷQsM^\[4cI;5w`ޜ9o\-7o_reΡ>q`28ߝ]2߯ O0b˽?_ vx׾_g Fca=uiqr{9CAm3-u}OǡDc*+5h~wB(6/~U6^unUu9]BNtt[fDCfæµ4D=QZ,t2v5*̖m &QridM -ܵ;&% \ܖ'R-6Sd-p2l\Xz<k݌rmJtnڛu7ګpVyw;W&Uc6rN^\NΙ伺tϪR$dnZx7bW\9RUQXu%=21v*8G#2d̈́y24F60$i[>Gxܺ2רD)Z-6Yr&c5. ;AEqI JR-|Pg( e0~fxg=BSQ~׍.ѻz|+Meiy ~}͝,?!5;SId}d o.70{_vu_\I+ځXN%Yi8 ;ibl@?ń% po.1jN($JRDt bao9ΐzK~{Q)}P.:oUkgraa;G1 N~|V3m4zb-EFߑ%Xs4'o~]lYL,F}$C- "8?GA^?#y~wNFғt?$*$ nT!۸\}yw^\5qhuoyq$X ]gs/.\o-m]\#y{ke qb9W)96 @c()tĚהk[A-15QzPҀ{П:mOv|.wnkś I/ɻPv[ DctK!1 GI[[~xo1oC iC\s.7)uJ5 ˷[ᇢYoN}Z׎d]>/Srm 1SI0Xb4?37}‘F "TAOst}Z2 ېQcբ?:aKSy:AehyѭoOMN9idԵJNOr'VZ[k tS3.4n1\2SBd~8իM9Ur]pJlS@*+#qt4Uj[v/OqlXyzmL[wsY~p ߰HNCem?!F*ոc֩\v4òk&݅~\u-j'LO^ʘrԋg(ȫı]7~9\52 F.yV'hض;vjQwpXM_=NAݰ]_ؓ"h$|@=%Kɽ%̐ ?!1OI-y2u˦w]? vtŖ<a-!`P@?{n~q;UZ\LuOuS:sމ!38!DK⇎M@ɛCDK3yyX K0ٍeh^=e P G`Tn\upٶFHCQ(  q]8\ yVNm^ @%I?:A %'4r) (TV-2Ïc9?ܰ^֮]_)(c<hXR;mz7G 7 z$n:O;SAA̮ma D  #ӛ|TF<1>ԅoEC^~''@$`~%R~$uChѠ"D%9p~)Eu}3֘;;TOj \k|u0ݻk/9-kN#Z(G% /x|ŤYD">|1_R5?ףbս#x[,(ǛrwYrwT݃cXs?i^ì8y$UE #. ݗe_ ll*mm\X*.YLN(ٝߢ+)`!8VBޮK|L|q2]7qmٍu*b%0 No37Zβ]q5 JSG2gL0sD_}O(FNJ b("J[EС8iQ]>lAw;E=os%xpv؟=[^xѤZռG|Zhz'rc\?5¢Jcނ{feBey~pEt^Ų oЙs>퀿UBi*VEmiQ[[+!|^rS^2a1HRRDDq.( JYXۃ0b""#M˩elPqZT?#Ӿz{px2eoz_VyU{+`pOsjg퀸< nY(0zWx/uX> ufΦHU8[͙=okexK0ƄZ,H(RAa,jaX ` I5`(,0QPTwk=XEHid$CY+7'(}F">,ǭ2:6ٳ9 N(g-ο'/__~X,6 (M"ǓGhU2S $ؤ qT«aPX*_)4@۷HAY`qhkѥٔ!ca0'5?ߝ3/>;['}X5>{;ux6|*U.giVp=^>|XiN)憆tm߷]NWWl$4S7]k]wۮetW `ȓ+^ח)/r@É}t|;RޢY[{ٹ'|)M~;e mb~s %_v> eJ*cH"|A+b33yшJ_PFjVIdT.ի(T?&EÈUFIIH(,)͓2:ƔhֻP7.r_볔{򇵴~A>ؾ7Y?|'*>)wr_W{j&a8u2A(BٽZk^ӮYGn ¦e)nΓe\$Q`EYQJŒUA]( Eƨr Hŋ$BY% $d&!Ȳ  (+ `QCbJIXT2l"F"Lѝ3Zd),^Y --Uk ˃"ʷrHdU$52D0e.e*^/)T'd G);HcI HbRV@dJV'w9Z2[(jI(FZIBґAV[dCo6u )-P*ZjnQ6]CpEu.̴řS-Tq4nRH UT6|㼽x8T-J*a~XmR@;8F(.*Ma+s H%ۦP1(ԅ2TLIX㙘b.`H-5Ocg3 2ێLd GMѺsv& [²LY{Zi$Q@ LM{)ЉɀL$4WezE.r_?$s2&W.3 p>[;57z{2$|j)Y anIF -(L&2ҥ,jb@D5wfݺE6;aO~.4iaViWKʩ\vޅ6+fnΚ}o۔"t$N "D7L*[H }N$[*iuDcלӹS7)H֑D+H\y4Sd9: Y*uR%rܺZgюX3$y{i7m NFQSUxʃR\8eO/3J5n UCg]F. -  1E*r].6$Ry\[-L"/ڶ\TcVkpb7[qFnk@̔a)E5L8)WXAI6feM5$UsiaQ$1 abYcL10)A]@K\ C/=o/"(70j/ 9N>쒔/%BJ֐c*nYмu.rtt}퀈k[E p? <0;a8g`N/02RRuZ)~uź9_$&8 d(SfُiY˘E 0g)[m1[pU*e(z +K u3]׉j9.l l JVK+fsqPs-hWA-ZEP+^aMo, Řj Qk 9QE fY!J[ U]#DUC"3h&&rDE|NJ-9URNQb^ V<V& QQߣqwd5oO%.iB=ީ$x'cB KJcdlx8iL\({̦*DIa{F2g6bJXEP 1LB+H!* F #~tQ`ijhQK3cii `WS 8.e2(n%mǺ$(]Rҩ'藩2hgz^Ko]W{m$Q_+I-P3Q*m Aw5{:86Zfo+NU,"ڦ4\x*QA@F,/- E˨ίG<F;`6+DɄĐmwLBYE Q:eZev8׆d$ơAV$”m0CLž^(\=2r4=wirHz+d(0nKGhΔ3Hu\)![>$Tt]̧K'oYM\@}6=:;;q ea]e"L-X;VF*BoG{RV2T*%VC-yWrobUs Jkw),AX h ,2Kq*#sK'9-=Ujk(6j(3c~Ru8shDR0Hdx`ٯ.⻼I UYN(a#Wf !>{gYSȻc vUdcqdd–".$V4R|,lbbr8e\ u DFr4qDIW-BPT Ȍ\f̤w3zۛ@ʤa)^?LxzcHMfBBZTlvSYiGY26zk-WQMEЪ@Y_+,CY-[PJ.PIʛlQV\-Q 4 ,AbHˉ !DFH夐R(@,UC-V ( .S|ό́(Q֯m jb b|Kg:J剮W⭨֏b%XTbY5q L RY;YvuT27CxUs,HAb52c!FY, [3$>L9 4&9nEBcfW%%ıTW h<@߃E" 5k~f,J7u1v^qKCWYps3ZA&5(ar#j%dL:uPw}ϽeJַã|8Oym¦)m4- JF x  ۄGrpf4aSGbMP&tQE8n-/kaA:aO,陶 cVSX6:Q|VCtĂcĝVe9fm\ljbQ#A-fn INq)hhcdv%pja?Cg=:?7Z\:ݦhOk}kzZZ_ZCRI:LH >xZ G&g&3 .95y>^3S[^DЛU+s @Ԛ<.h ,S(eX fIMgRL`R. 1U"]-WM4Kfk~+9)\<]m_[́6mPd,p}- QVR4n=׏Y|Z6W3Ӛ҈mUU7ds9 f`wJSgvbYg)[VxW c+k ܾVfdf\[+$bzBvuf7q햡2"`BVliڛK? ]-m'DGi6\gϻ3.PύkmQ((ٵ8ooծ]~2ˉa()rS7|<ҽ%B#|BT զﵛڒXM9.Tf&872STZFKQEnj[Hq2PIu;Mz^/ iȖ~cƮץ!J'ER#\ebv*d Mv_;IAP`ZլAz&ӤR]F N6eI,U4\̊e.y 4HƓswc %#{JbX[vȚF5;M,Xk+skV1ЦY*V׈Y.Z8Σ.$V_JQ[$v.N8 mi % =͂D7]Dy ˨3a<6_/x~Z?Qbk$?+՗:Fk&EdVGv\xP}7BtE)`AZ<1)#!HF,L&Qj4-^b쟋ʢ+ &X0:@lF0aAEsLoc*]9(tU)ج1;{)g)O'Ӡ QiVvmU6Ҷj{;>}|xQo8= -4`2ru{sIRP^(>oGS`C]>Mޞ]&elHw5A)kDch44ՙ}t+L|{1)P."z1@|0%q hzO]TyRMnFcJP΃wհ^U(jhO: 49:-0R`J@@7j+ݱwZz{{{dn>{Bz3L>cZž}<'w0Os72ۀ[4vM2;cQ9;ۧmۻE ǮY\{ڮzѽf雽wBn&u3Nfs FJݎijUD#!pw #@ 2bdѐ4h h)&S  & &`2SOM&3!#FS & F2 40Li4 bi6ԞL*~&&'FL0!6A?TJ 0 @dѦ C&)Y伋|Ls-N,Ӧ f*Cx\ȈL`&ex}ڟS9iͫ;V]{Rqvی7N 5pf EI:GHn ktÛ|rp7:9|{҂VqAj&!.6{vW*Ѷ_b3vΝxtia++ܲ([fsagja3):k ΕKfߋ{%=\X5# I{j:PB fPh^l|ϰȷU,PHCK6ToZ>e,HNKw ,vt!hٜʆ?Ofw9ԍf{ٲX-ay#]2mX ҶP?QC]Enz ='H96*?xmRSq1YMK[&~oh-?%Npu K갎QT87@܎٨-=W]?e 30@źY&֗FRTvc/C9`˛M٭s0%5IViKwD'곎@iG?[*B^@ٳ]%E_ Pr+%O[+"Z$o"0SQL'กp/Bi*D.%Rm(ʓ'6 [EI-olnXV*wV&b3VQoU 蟰CoLyPq.wL:ihh5OvdBZT%V/_kǡsO&riqnjz/NںG1JssX5anXke&>)]~eVW1܎A~1ez+-hLwעDr!Fn}J:v˾'L -q} ֔q_i]z*O,و'3>{-<02p=~6{/bQ™/_`x P?!FGϛ\MmCbz<-Z"qbۄmF`ヱAhhjںu<-,Q-Ax媯q]X2r#W˄Wuhwdj N5OL^os+7OkeO6B}?K'X&}o_̚ԛFӆNzWxM/_t.[ٻZ T6z_DENt;בB[WoF0E!ڊC9^c5:: 9d}w~⣻Xd6N8X ו-<؏-JոT~=?$X&f &)-2#=yw.{1JzxdíwE=2B~X;ӓ3ZF:w~}߯`}tB=6 i,/iQ`S( mJ3zցX\Bd6_FtK?nn9 +kKVqGE֜wdNlEl힌_ q38.v!Wh럸&\3uڅu7? ow?] T`kRfy9o|}I?[1]E2?ÄRS$rߧwx!!O5ٲX'm ;\[P+SW6SvJmE2"Qpg=X,N!DsK~!HeO/usz@J#TtVQm/7՜^Hyrj墯B~.}f VT?MEϹÎ,?IڷS2䫧Żݿ[M4$w4:bP0Hb`밳wg+SBNL.m3KRɗ>{ѵ/5mgG۶hlI7hr{k{ѹklbkV1=;&[$̎DY;nKݮqÖK-2jv+^2JmZ҃^ө|}`|tet*I& %_qDӅ_pޙ˩wz|Gj`4hJȦ8|t\۵~ RӞW7x lY0XϗGYa2)kΈD &)D@ V&1"S [ʪp`ݤ.5~iފD;L"or l  sCΫ3iZj#] Iʟ] iABѪ(`bVϯX@0!D4Fa ѽ;p߷ֺ\nڗџXsv*95*k25R a$RNB)3,>ud '3t~*M5_.g-ܯLeo^0ϩQ|ԉ uEBUI~y =# Ym: 2C?Xi5s31>ҙk;~_ɛ&!fO@u{ߏwq{{wp|9Y~oKEmM/Cd:{Pr; #鶧zs{*7@X#} ~aKՆu*"{ip[_jgPR rd1v6㫿٤~F@7GW &-cD^/?#Έ-- < ע| Q"o#{ Oj]{P֪o=';ϯ; LwG=sz$Tt^v%=m?dqۖ.'BA>s$׫1F&_jQ(kc7;-|9.nGM&^]ב*_i1ihӵaQS|ϻ3.Ŝd|RTm,;z:q6L}z4j!4:,<*́r5npn6X]خĤ*⻖}/W}WwWcz4'䷤3(>~R֤^ACʷ Z=+~k} FoIrCƹ>?"> GÈTUGnh>)rT1L J(*RUXT~rӧ{WTX Wջ/ 'sǯאjw&Ċ 2AXA ɈAv0M^5)nH^2"N?~k//mE\Ȁ]qRAf^KG.?9u*c HPU /67s:0J Vxh s/y-Wm*C<NR#48B^^-k=+  &Y`#/Iχ3|辎)ô+X 7$Pt:sX'//({%_~wqN _XDDa[6Һ"]1Gü}]CF ıDPGuѰ}PĸB{ 3&6#f ,يT@˝rcz2y&Oe{89?s67f3YDd Ltcj ȏM! HR_,7 Veױub[e*b"EF1DUDVDQĢ E:bmx V'}q27ٙcMTUɥY$p"ÝnGTJ_[!"sR@1Ȅ"CiEt0S@Q(YfA=J-ԣ:`Z/{0Be x;E4HńIi3)*TπA*wcc^QAEcl!l]%Dzqt=Rݹ߻gi*thOpVdHeUU(>jt`  zH0Pc,+IE O)D[6Mr~/tLpO}c9؞מq-虇Y=p'RC|5d&񔘥+5kґ*#-EX:5Sv*/F2'3" -+ճ +nS d0&]<=l@0PBy3:ה2m5$!iSΓ: DAX(,` Wa7=Clj[&SfҞ $^S5<ϑ<ĝMw2+fnbJj VSΣgQvSޣb\ ^Y r'31A1w;DD*1E#WgPF#EXqwn P5ֻŎTJ)gC{J#,uH>"97fHAle>?5NB3ܣ4 &ungxϔ-߻;*k`KER*6ԌAPQb**1/vfztн$({8]+84]0lSʋœD J$&kla~L$!+(;Eӫ;hH@{RӜkkީ#$z(AGcZpqL!-{YMDl3[-C_-JDE*,I#%Zʩt̘mXCɐ$ݰч5rn>N76#93f]b1=5xSg. h`p&2:85&1ai9\uQ iPdbH+Iq $+YM̻ٲ,E%Ppe&]O*%>)n_B*)'-o'岼A`_U^\&&fa)?Sd}Ny/h;;!d$Zv֨KX>8{P&[k>cq;OuڍYFF+Kj$ξt>tcR1,K70ΗRqVoczrŢ'ӣC:mmNQ"RQbhEڈ>{ADݗt ̽:W8$ slEqŗ(VʵfD{>YQ Wm1ڴx u.BH$WPP8%:/ֻHlJxYbmExv_ncj:/0`xJ !%=E"!k  /"c!̲үHfTʌ+*؏>2;TabeѲwN|JgW*ƯسOZw&mY ٪ōFt9mxk,m5*ܦ]CJA?#ñhmK5,PFS5|oJW{χS{z_s`rbvxܔ{XU hu\c-."0uPD„>J@03^]H+09i+řŴHĝOayPdRkGZ'ur &c&w\"9u艶@H/?ɠdTCe4K2 `L@yc:м9(2;6/rYtY+ ,$D[O޷X̘VJuqL>>QMpDG [Xg U(_ kKׁz;f ʒ()*{7!O/jPDxf$%s^Ի ʖ>!ERhޗ{y'Y%mE8Im9 Pf?ej4"ʍa&t95rԼ B +&DY4f6@iPB!8<$m ! ΤUx(Ŀ5Էyj.q9':;D6;O -s0k . dLE-B 2UuT£inzrKHjQ0vG`3/\E !IozS`? (9^Pd 0$!M@'FNc  0Q"B0YnBW7w_rh0 (˥:@>fGV0o:TFYHS^{ $@d0ҊK `'Kb  E^(ې+$h*xTcqz?w6R8U~#Mvd8vJV(P>)>޲wdms3 pܽ[[NDcIaUlCoܦQyy+ڭD.v ^~)L 4F. ra4XV 6# 3x k! 7@{rIlZaQT%S,S>kxhF&2iP␮RP=M6"'t$7E\"" F yjRI2]f '"5ZlL 񔃯T0XyVLGai 4UYsirURw׬w{8&(Lp?r*d34l_3eM PP $a?F@, 3D9FIgj=+9.%$'JivZX;:|xʥ0eBbǗ3 R2 f20ߤ4qp$16ׁ F))&ꥦ+oE)F>ٛ^nB˾*O7iq.1álK"0=o&g&NQS62d?g}~!m !L 2Q8EG'_6Zu;}_6з IMXhF=ϗ \rщ oYq/)u8BC-kf^a|` ߛžft [1) \"Vصײ)cX{&O&o.ߟ6ݿ |AvZ=|*Q]·=3Sj9>@0iP@nּX#,Ow߾W1LTtTnhߺnSAI0hh>Fg6 bHQ'›3Qqf`Rf6mKezmE&kBIIO`aQ2!TaQ*>ŝ;D3/ͫ:"1W\W*| i˽=H#MKB(@M[a1Bi9^ŐQ׭|M`g 0h0/Fw?Q0DV%_Խ$*e_pnla*[gJcg[ș$QKj_Ocq kõ/kgvZs3\Y_KNz7N-u^N,8:\{Wcmǽl.剆=v(bo/+M&|e0wEEfZLiJ ۫WrF׫͚ϭYn*C_KW'K*K'4Ge#m\e6OI{ת^*s޽vzk-܌c3Þ,[E`z{De1p9>ƧtMqX^ie\Hڡ1MtX ?=+ uHֶ}HhLSdC;;#^Қx7lKZֹ[W>{t+lS:g3}*T{վ72k bL6Ƕ`dsulHAN5$B1+l+aN??hn5{#gK9\]uG&]X' @!$'>oYEW㻹6θӃ+ٌ3&ɋF 32d < ޢ+-f.Cv36KSmo.fU k[~ܭ;}R3"ѿ 'WVL*eq$,6F[bͮ"KǭJϾŢl*-7thO}?v n-6_ 2Pć8;sHq4B<-.RHlc ޤ?˭v NmX18C+7?m{_VYb_jB pۨae87|DNP&_mus,iGO^vTx(>ʃt^kor*/ez,M/v̂eKEt-TF.l z9AVBgh $$v[cm|#;Qu.CAU6]j즅Hs9Z'EM6#0BlHu{T̛j'5O?XDZ!鉿=^8ܱEʁ>්`],̛6`5t!`$SoGb+ldkusAHS>W%d)ޕ1V_/s WJcgg47 4]uAS/|bFJA!Z@G\g䗧:B5M %+H3 xnjkאK&)X"Z_oiѮDh=GTYa~պd_pvW ]暑bQ:o|6lVb  _/>Oΰ@'h/k]ϧV! k//=Sᶴ'fޔ 4dS?dbkLRm]yFω;o7T+:JxQV@"4S,FP^/Zx,56>\ ~#Gr: 1`;֙\%êKɿ,"LIdغæ{T6/''8C'FBUd& g Rp`c!\#!5 $ eaLV#z%ež "M[v"`~\U,6h( AVXɡP˒ږUU=O_< hI%as>U A}=k'ֵ00:Dn{%h R?;d%;.DXk aLN`jZn)i"uZv_ZVvex`lߞRvF-~֎~Ft:&ֺ__YYn /8IՁ˃kտ[X.*E>8;@Jʲ~7+I-e.ҤFAtϰEd̝R˰ΫikA$\<8 f߃Wrr ߿zudE%381`ITÛV_M -k rez庺( ?#ַt[/ ?OѺ农ZyC DQN<?|egx-D F\PI^oCkC!NG'O@?I AAPk d`?ăbݧO2b PdES2x*~y=KtUyW&Py} :D_{kX?XwFb?7eOWqX=n6z;'vɅM 9 l*| "$cOl-hj a=.=t/2}J_ R/w+G<+V斁:{qXXeʯ;c`fv2K&CAo_iw-v:_/٩X);98>lb1 7`AƋ"μ8-ןN fxfIz= Q׸ŝT1K/[:Vı%|B@!- ӪjO:xz$,!RVjK(L Dm,wa rFJM0Tp6H5 SPlLӣΩtTķW 傷s3[8L<pUe6IPInIJY83Z_[d0 R6c1rK"!hTR7**y@`< x 狷X'~a"]9U\=A+Y@Ob?EW똋S4h)QuegG Uv83C}4ۿ,;uKѺ72] ]miԉ핈&23x?aMJy5z}ȼ>؆m&*Â,(}p8,l]Q˴8GVL1v pi^[C } ~R~_zl?dIUC)]S_YCVٴ5s\sI$,᜷\+8p2V9aYLMxioJS1X-DdASfkX\-a&]KV 6mPxZwicr$oqnPe`,IDX6`daP1Om~-VfB8k@@BH q 1j-:q4tM XU*!iMN(V)ĦBJonW# aety3©CBl; |[鉝/OGEV?ʲ^[W'vd_C6o.[RG@?縔Y87{r>[!Sm;sqL91fFw,?(,) 6NEnSrHUo=jlyv?x)w U l^&Tw6Ac&5f0d0`ꆙ ipN3 mIi/9k?U X DnjUH"Y:,("ϥx0rzݖky*_PΝg`UYSK-snY[c$*ھ9- ӹjh3TfV q)S|9ӽ=T., ({?j:xӴx~d?tSN4[*6T8}Yn1~>K.Ӯ!|gt蛾kѬmrںqa9U%!)\f`I\x rbypX &d1C ˊTx.P4""ưH.û yqAQ.|&͜P+zݹ5\2Ͱ+6Wdl Ee dE,n[Td8PBNy`N^CXDN*qʷ_ޙ_Mfj5 ਞy~#aլFDn8nMeӞ&1OBDf ^mKѧWm<]:x{Y߆`yXk%]1L>e e&|Kh[iqiyyyq-|n^SWli`PT w;AL%JLg_ os D$+=HJ ) .g TA:>?zD׿cEdӝe~F `s+[~}[ ~5}%]r1xC(|\#bplk 49 rGIC1cK]`[Jܮ畐^'{$ž2'c(յqIDp핱mutB ./(%h$uFmOYq yD!(D$[nt0HIiM+2]oh4t ˀ.f rnj6ݚ h7KI& VXtjv!Lv L6&jP@[PUd:6w Cһ [kc5B}T)l@(H'!DT[ή±O#{h]BG4~z>?d;ť^AErʦ{{/ V},rZ)=nW5FJGk/aE#hCcYSp6Up$IJJbR[<$q' @&@8% =?;.8XASu1:EȲↈCtTy(cb<`:0.B /NwdA(a>=>goӜ6` @42z.|ݺVzm?Szn"Cӡ$<"ϵ !XOr v@ާ2r.o?$ !5@`]&^ @.YQmz i^~~?OTQ!%{[/0Pdnl.ՏYH!1I0 JؕDiAZ"I!L0V&ڋF'ͧȆDCCa ;sz_yVY PA$AN" AbT0M4SH)zJwd@b$CxwYEΡiԧ٬ ` PdP01ՂT>K*|]2T`p3#tւ#%4RS֕,DSv,DTxV}zYVB*e "i_,SIEN޻endq6 6Z|d:|n&Gi)&t}IzM*H41=,136vMw׆z4PiOi'uHqʖCL hrbׅguodR ̘FHp*2S^zĩI/3tϓVen71g9Lq?@.HԀQ4< nܹ4Ij5EZ[Ķ>afkQRd@upҺ JL5L۷0=}aWiZwQb,kL<ȷݬ!ݻjiS8g*obtpD٧I8Oj@zAIٝ,5 ʠ"LGQkqJ FE+FqoiCy鏜{&Y{ SGzR&$"q2@}!GSbZ/ZUEfZ5X2Ă@3P?<%΃H7oF^o瀾yUU+9jdL4y$!feJ낷0lmF\Y <9؎iӚ3h PK XHM)hLzK† a5VEf?G!m d4*آ:I8oxoFSuFdLw-M{|?z7)AJ$|_@@oK9c778+1ײtmsa_f[F*?mj  3NeC%K˻dQC@bWeaTw;f)4Ͼs p nxMa؁Y+.--%$ 8UbrӅJQC5i sId=)ڸ[Dm470S9yN2}m(xZU?zHWp!3Ŏ{*u<F9 %aEmñ0?h%bˑMTcRɲu`Su}hHpɦ93t+@2\KA,V[KjD\WJۛgʢU # \aJ6iR۬ܲ~8lֻm c< jesD氘+lƼ:1PQ=Z%br˴U2UTb+h_"`C?T<I6Ri$j.]'Φ"fIoUޗ CN3`G'дSإgwu5V=<)ʹkR[^Ƽs "z`> I܄ )82'뵺d= qae!ti0q9*4Ŷ)gN% 5 Ȥ$䭃W]s+ؕW]mxضKnTCa}-1"Q4ORMW'5wf<6ulbDgCi40X jhDKm,f]3d㟉Y㭎9f֦![ $4I@+!eO^w7t$Ї`N׳;LJkH d{vGsv"׶agAJ\2 Z`xsayF%=Pf1U3ū9H`*aw*$Y|,5ZCMG=@)r !E a;e]=JGd{3.oԽLݴClR qdWZ^6mxmL̋yjxvr.[)"+BQJB%hh,΢f^ 0F k(,vhَ .pꊩLa(RΐKQ51lEw8^"1D@J"䐈1e@( #Bama6( "*m8|EN$[gcD^,nEuCZ{-86rXYv6}7T湉է=F6urt<2OUVz5g#]'1%ER[iunUUDen?ۊuӺPCErm&$'80TYjP9z]i䘦t\$U3)p#oNDvńY,lHi>))FbqxRV,]+dlS7%"eY+;9Nm4xP7T, bWENƻ/pA,EAiiM&s6?"믽]nUd昤 E.G/DV nwlDmAn7⫞7m")8,^~̦;:Rh|G@.Ը~ٿ^pbWɅ' aCR6ha\!604/ fu+6 .Vf&qG~N/jߊhLI&&@Պt&EL-m-8'5q&TX Tv5u/e-ҸL: =UiV$G*_TA@#`R 1^x8|+Nremm5o*)sZ E-9gttP1&P.&QwP\ RJp{]4LK=t/6kOj[o&j3)ZtUTjC"gլ.fhuEJF;).:@,G9Tfx Torș o\5Iuo̲d .];%|$ZIfw?o7~;XV尌D2cBc$ý7;s`HJ;"C [K3u[r@n\ hD,n-xiXRl8\W\wm!Y"%kBڲ-ovueٿVH:aV=G18eo4hmBVopH /aZ@|YzTFHػe[evWxB HIR"@0-6]bާ9`HʿtuixbF[f= s61km]OV ^GXR2P \؅v_gpӶeXi ]BG0p)nkJSM fۿBCHkN@5nvlzP1R5RbР^ /nlYYU VG* 8@qUK:phB ֆXrPe"[ cS&CjeO?w R oqnm ]cܶ7ڴV;SYIEva9Xf.hSѶ5بSB ܜZF*\hiu J_iB ;ܖhcN+j,O :-U|#VQXP[)ڭ,s32Y17(PF"SNo, bٝZguσ@A@cMa" 'rKL̑bq3;Xl%"&,Ҥ)By$a$/Q=TJ7r,2>{s5F\3o=/ hlymThZt($7^$hړ[[/iSgi ] T̷ 8QS0ۮV($mHjEvYRID.f2L$9:2H͌ΘpʦDXq*y Z]#+H)^A LBU "Nz%N 춊E\Q! ѯ7pUCZ](:4 !: >wrijݲ.Y5W9-+`*VgsN'5S4& ̪I U6`]A[*j GDvPVƴhK,:䅰>xfd<2TG[L1Eg`nIJdwpw;MWYY5|okv J-f0}}Dmwgҳڸkd\h8Ngyr0R"70!Y;Ba~Q˧E"xK8Mw=1=dbRBx_? ڧSu5{<ӽOIV4*( A$s쪕lj@Nz! `jrLɹt/YShcάWM]@[ʒj)> &Z%BY&/R_&2yAmU4;ɕ%Tő]sr4clwEkfVزsSZwKKu8-' =RF4T S0!Ձ~*Z@M$ 0 `ey| ۵Q|jMHaEQ44sÄA}QԄj^_@Κ drݵ[jjѻIhC)L3S/y33Z {wsZ&zzp>gUn 4JJIl- uJ{)sv'}}˽= 2AK5pP>.y(}W{ Hd< ):߫tA-WCutL@:8iv BҡS̻yqkN@YS6Z>WS-F(k2xn\RXh#mE5,.Y"+x9#cxfĆBURm=lXd nrۭadИܢw6epn X+GÏ tإ[QJ5}|_FbzۯOPЬh^X|N~'c|H`XneQQϹCiC8<݌]@cURl  (`~1`vM D7qN9pq~wodHĸhْL *w &) BTQY[JH+}I:|te.tڧuU QYOtuc/vסO-*ATBbM@P)=lߍ:atZ?Y\ M^Z5ACFAzmf14Ihw<ރڡ)6*O;yo!ڨ"GXS(vAhK,l8p]76) 䯊ȌuZKOv>x(Pe!8$ ƪ` "R{̨V-]otA]O{J,ŔbŎ-:78gndSͺY(".q1 $(f¦ 4]Xa}sF azl:'OƋhJ*yD#t6Aad9OXys:Jl Ѐi`T# eB0a HI$R; eao9f -fx怅1 9!9NÃ.XanJacD-M[ӬN8Υ/37Lr7:s6EHIFLD`F"̤ɈX"`If~yL6qPftQ hY ALeY庌b`pd&DeL0D^a% 5]xǛGoGEݓ y+^NrIH.7(.b @\ ,Q2g#:^âi\AV2@ .qC)eI5vwJT˰)$[{cmvw{6uH 3$"AK H(($ fC;tn7L_v xfĒIC 3&kZK'8Z6([fv!F A|T~gՇ^9lǩ8XÁ.]3!}P$nf $TI6]zڰS" NA8dnbcO]f})^{`V X[_g9YuRgk>!=L6mZ~ tϵ֦D2sv<<xn>0WʵF*Ώ*|+i$+!Oq^]gVT<>f²; / SE>miӿlUa@<_՞ /=);J3jN ;i| A'Pω$ }V0q/8Yd"C$v.k`%ٗRLPiۄ87)MD;=l&`ob 1E1>4OI*9ϙ$^C9=o;|3I6s_k;HkLhbn{gt ~/ZkePb@KI3]QBPtIw9YzMN|7JN[?AҜkWϜ XVi껿UI'/sV7yډBǗ߳&so{Y{T bmνZ_QOKQq6T;<24}oߗBUaHy xFAwysw.pR Z̶hkszyMr4pĠ哚vܝe6VA!J + a`0Tb d"R_hϯr5* `TlJR0u?)T{6l  Ur㊾=唭 @.h+ 0/CDȊ2*>/w,~z1(`v齽(2H HbhCVc (H;( /I)4'kicshhurws6;y?{g>U2=j3J2H6NZ(Tۚٓ.J0tŭ|wUN6f %uf$zmCU Jl3aL݈HHsSx;O{zs&,ѦALu+Ve7fqWjʉeq?z3`Q7-X@so(L&[g?V-@B1T@c 2wk˽oXy]@tM#VIx0e Q pd@y_wUzR쨉ݺ-уhPc" x ab}=n}08 0VAd&l(mib`pi 7,hTCiF[yQiP^^ p]eGDj(UR`6|nv''ju S.nL׫UD zD1BCH@>BtK0q8!(P 1Ue +.\-eLK)K<ݲh+Q9x97ѣ9 bdJUɑΓ+ 4!k#wmML# U 1U2bV0mPV^`{)́=#5IzK 4MD!ϞR#;;hQ(q+wvJN(fR{!a\'79AJp{4ark,؊M0ݤj!]Nw:/9,|ZlHzY bCΐ)!Oʲm04ƎK_a RHWbr .jeFf+ϺWfskQ5oSs.ovf ՔQ]+4yR[ @{Pµe@u`KaeV[/ ']4!|??gZUP >*1JBQG!aنDrQւVɤn.ܰ*`MY"H]qcFhjұ؅ݐ$FYa83PRQn7yjb3h",Ȗ\;7[^v\AV^a:V5x&Ҧ$H`LuL@zV Wc0edQ`^X ږL:ɊE-dhK1BccFkuԶjhlhIHM$UCC1V\WgW̫֦%4lCɈ*CEC73DHE!?6cHb`(#SWF1tjh&!tXEXI_l|TA%ڿ; 'p %J'Hڢ Nud=ho3CT/ݠ{O =NS!3>c{Ruq 9I.DDտ 'ّNE }Sy;jA@A-C 9#>}LJh.b"ZWbL@m0(K'phڳ, c췒$6#.N @rX 8xZsa(YWH3!DȆ7Yd)rCW.(p>yT3֓T,F "("pap7$1WY$N8ӣlC74¨g67F$FƢN(K<"c@CqCvHR5.= V)SB%Y*堌#ՌE@9,޲G*ގ b1r~v>OT8x2õ }}`lbod&0B#ھ~83)r˚⠈z _EC2g|k(*Ml"%K8L -e~vNJRLd$e78XEdykuP1treUɴ1,R'O65=07gڣɮE.*B sAPQEPA;0Ж)Z}?h]$XZޡTlQ9:3XMV_[shs Uw%8$5")"ך%$ j 镬 dž<U J*]Վ"Oc3oڻoqX 5D%U0_$G3AC aG j"!d"߆} '$j#a~u#>ٝ[SBClW\]y@NU 3PqD^#:yvx07Md(dF-/ j{_IvJjCv[v[77{r޴V3N \~b({aM A`l0U2A\~n{(fk%68Q԰N(b(~|[4]kP@V\ XJtLZcfi+~'vꝺ@X3m 六 ju;]+A,NBRCq%b)5Qaw(bPpHWoK)v$!ZClaMlЧi\`1P[}ϞhtCCd`FRrHn4} V_j]F_37|0>?4?t%H`(+C cXv?Wo:㥄PBI%dYmN`VJ#B-tѼ jd}&i-ٮaC47.7`.0oP} be1.FQYDbADs[u[]RaI'ywW>2iWp@]L(2 bThJclF3B#C"``b2 cuBt,2;Ӌ )2xtg'iQwdE6:#%"XF7WA5Chq0^;èXV;N kfXD]`*٫YgHZ,EI3\faydʘB)+kp:yʤ u'[5+ڥZ*0Dut!j&Ao 9h>k@FH H(N:8Hi! FE ,vGIݬ rDQJ&I;)("i+~}>b =S^o}N&I%9*MnLˁڱLg\0= UF (6m{L8>/䨏`tk3f22nbrc($/@ɘpo#bCbaWy5D^e+o,\A+1ٳr 0Vo$xTlK [01VhAk pb'ƆF+h BlW|9ł8&&+489Ic38CSh Lv2);mn!?̃x2 LiVxe5i2]i{2_GG;OV@ ` i6L(GU 9䓆)YHvd*E!*x[O8eGTd% Hr5"~e\{$ahx9YU d }Tdb|VCU@ԠdR>edF<Ñ9G/*VbyCr m8(AGzhK6v,<dfKvEP1 wvi2 *h0g-3#bEmEƑ7iA5wDZ 5daq(SA!dGtA] n(ظQ@fD[eFZ"i@dYN¬8S8!փ#G0 \# xr]EYFصCL0ݕ,qL;ճzO imMp6&ɳUq"vhB;im^姯uP eg߽x߯nv`THТv0ݫKmƟ1d(CHB/~A7pPRfFFhQ{/ZWiY Wg_wD M &'&S b{'Xm!N{lrzz{~jۇJ3 HǛwްJjcFE2(h\&]yT!p6ئ$+)HbWV X4Zr'H áe (PL؁cmVF6 ZHcQd2kr98"ChX5ήlCM6lZd3eȈ Q8XA ִ ,iPiGEǩ(_Ӛ|rt*4x"8dD_MoNJNڰJ'skJ(S19˵vKҖ`:" Nw*Bnt OјBϫf@h"TхUek""_+1V$$lJRӍNmEaƦkn< ,Ry9llKl d11NDk&@v gQ9(LlXtH DD Q aZhjm32( U+NTy'w}[rEHD)KhjiV /W}KJ¦W45伄t%$TUC.j+X'~^kb3T,d7iY_W;I(\>\߷&HC+i1`nM`dX+KdcxRbO :CyHdD څY҇yg#? 0! Df(R=AQfYD =}٥ Yb3SB+1\YGF̅PpB3!?ߠuak/$q.X$0Ig 2d\Z}l mfM3NERh~KMn[+4a~soNSm0Zz}7lt) \-I-m LzFBtϞz`"N%/pr&!!,Mzn B%amGsH%>g1mMl)EB܅Rږ:HS=76Ow:ሗll:Gr0x-0ab,^:St% J̄c] P"–D#4"eVGEĥE Z4z9tML Z2BU@ IO!x_z֒m;(F,RR&44jP$2%a-0 X"s G=_S pCF^=Yߪ8ό}+ m ' PHCM8,;06J, Yc ]D{bpvԟ!:h|O*OU%[\q~/.H<-,bZB7 Tl+6mț4 7Hlhp%oLU)T7( zqȊ `&%`Uj hXfAsP^0ڢmEj֋գ<CDRmS☮2n#\)8Df-(*D" OoY dT2cTv-h DX)vgd/Ou_ϔCa2/B`^_(kgbPȚ)hm* R8 $6l"8aĤ&ݳiPFAaѐBrS຀CBTPX 4 6 ـ< {?P+!M7!aO-`*TϽ P̍vՐmHsx8r1@ycXݓNb˱Lŭ IU+˘(UrJb%*i0P5T!M YU QѠT+ 7aXA!ǘD@ Դqjąqh)s&)o:PY'keQ'C=I1W>o`~N<|l/Np9;yď1ǺM3UWqP$#50}fVcdQ):H3i eR11pf#Lr ^0,+İ"Fѓ.0EĆ ˌ]ִb tqP ]e7F۴$PZ 7O7w!蹛f3g O7`c;PKpAOyndIf0vR3Bt'bJqh{S-m Ut/ {22Oo#w..͋)Z8" zy=P _b@-6q x̀N\ѫƠ+?cj B Y)ǃ 4+_kR UhDtDHjՅ[Ǧ|?e'(JgkuukɗFp'ZwTޤ-62bbJH$D:tD`wɃ :$ ޮݴ@DP֤A=Vg0bgWk)YF{Fͫ÷&H!v \ݹ1_H@UNQe~W $Y^W 寗 ta<`~d1%6PH)a"~b6 HMN$AƏP/c6dDC0U((egkWd,fFˠe!Rh/ 6Vͷ6@a[a[B C MuwLS 1uE#3 ((0,=*g˒Hw=M꜉XSc\7P&DUfo!R=H19`9b h]B9aT0iޜR&Y B9漈d5^옌RQ`y7 y|GO!F5I4n=r$֥W5q?`裎l7,YDkKT<`V(hzf[$fM9.ޠ]H7q1l7tRn(*X&c0kV(4@U. PEpXtچA;UÀy։ a`SrII"mVXUV Q PQwp^lvYS,0`VgC5ѧ) ̕[Z7tɧIaӖtãX%x>~9'M!Y7 $^3k$g `,y<Ǧ.xSCF 4D]e7"6tuh26Ѥ IBUʳ-N,a+i>CVGذ ̳#s [-zML$*8rD$QJw! )es(1ˌƬGAsx'wwŝ|*sk'ia' g9wSsZ2ZMdKM D"hu HÔ3 LPфaAXUIsZ ~ *)I ̓זC * )F٫?XYMdHuՌP!`;1ɶPc؜-3.$Wk RJUMCO&̺4MݓFSi,`(R ]C.mq-FYb[ "9ej @i3c*\6i ?;%5S O|^Z3I-i#AD'dGLddaLIҁV O.|K\%ZMa"k(t)5?uwOSAqPՌh.2(n`2m0`T"Q-[]ɨ]G24FITcb6*3z3eI$dT +Fn;zIӵ hi:dB"A*5V&`sgtW:Zh} ɎC .Бm*¤j\K2;tz; _=OI3dHEXDJZ]5Pl>س' oe`ddGp quO_YS_n-4I{_Jչ3j&@Cvn qPcƠ ~cg`SҚby:  bi]Y#F+ Yfނz8>GTgNT* pPc29js×VBp>zb0;SчG)/< XU=;OD{|iErLb `yƹBAhYF,!Vx8eŗ6wS<5UpKo*!:Á5RI!i4.}9ŗMlthbAi1HʍT!R5ɠhΠddaS+#fK(бENt~//u:XQ;$&6A: @r rpnT;]M,0)'\aQK Cؘ%Z1TKdѷV3;2ZKTJJ5JTAp=X k yBCRJ&c)!#dĊUV@;^7*R?92vSQS) Aq]%iu 0"JAf࠰'ݙT5^M\H k#YUum(>hk(o`NAuZH!tBjDVe3VfpՎQZCˍC|9s)iQHd,0dDAQE([~K\*jyl ͚onUnBJ z.3ަFɸOZ%٥U$ft_Ll3i-_7?&MY,޵6}p.*92i"k=a BTaI 5zXj3~c,Wi_o{h1w@+&e%%]I n;K1ftCM,1a!2ёL$+$'ft0 Bvg?2wo첛ķSw @y Qz?$/3΂Ц tHN&哻t$ 7i$ΒHvI H' $r0 LCd 7!=jw* Lr@i!41 ,PdRH]ІFP ,$%!bB6B)HpIY$r~ Vhd!$ j$$qY;/Cn(RsҭM>dp<Lgrvw2r)cj'uB,:CZ䅙5j $x3ҩ/k<> :k|WC|:~Һ/P7}$*U;۰WfXԿqv7RLt~ ҡMˏr^'7\p9Sq6ԥ$_\utXMukSNVi ,6b1L[˩~@j|Mz zQGJһj 7f B.nj7)8l1fLR] L(gNB3 {ʭ!dV@auj=$1d& w͌i"BDB6"(v!6XnF9B{XsVɺl;/2Y?׃P$*'h=CX6Xbw{$ًZ:^(2|B]Z?+]h'3oNs |EHHu@ %Y'&w;H~VօyԚuۇ s+ کHB129cUߧ *PmtIVmFf>7υ%DXz>| 5<b+j0b抔C=-DXNB+eݦXƒuuFQ{E<Ā@.&Zsf ފ(:u @9y]b̦$kCL >ô|Ӹx{ {Kf@=ã; qN޻Q\l$ '{ԭ{oY_ v8hpcw[ػ%#ѭu.D"!BT 3ǜGI;gO\a9|e .T"׏mBB@儒>'#\~#{us$p ԩH2|nrՊ5b丄P@@@ Z&ړo$_0̱[B/{ rˊ%V{ǂk'BAti @gC+lq H@'@!@\JEr섁+-I(;o?^ #0!!O}/$Hv{Ar{/}9P #r5͟;ϫζuKW>>~|xo HI>㙼@!@ U?S g/TB BK1]%4!x4{; [B}$!P8@H/57I0 ^s V8}@0;GC}߰II !MW9cq&* PT@ +#@Bv|:Ly! BC~t 7UZ $S:䶸dh>)_'SkMɦM!I l}^w~.wg Ӥ$ |rc5'H5Cq =Z/8TB'fKUQyI$Z$BM= ?!:<ww1qC|@@@5!q vtUض@ [;n{ ]HI?:\_)pNS2vI40D@'2p쳬W#t^KS@ B`x=^O$u$ _/ wIWyO™s:~x_9d;=v CZ=&wo53CKo*ޣn״cwJ!>#ak!! $1x=rޘ!:CVin(u;!@7-kv @ ?Gr6<@}OB|QHHkB?9\B!gs>t@H :&7 d(Y' xEk&l G}?!s Mk^$&~QŽi/37xIR:]rxNm`w:C2 g3M n嚾qUWsEJ9/L7XS+).(uZSt3`m{?Oءɽhcb UEV a @ow[DU'R!q˔0v!nCrMtjmOˌ R$  Ci:Zt ,Y{z!: @Evxޡs0$X2>cWKs;rzN-Ϣ`I }T;!>;Xp=u@$ϓ/ pw's.g?7٠@ͼz`Hu,ܠK$'&HV- "M^[@F>@?cP@{yL~@'zN褈B`,LuB ?H.!O)7& OĖ/W?BDe.M"vT:s+_$1./}A퇯*:m!Qfe}⅓>sM/6/֚<*hӊozHͰP?iabI_,v׵cs7;slghJӰ"=əy\?/CF-T/*jNR!N+̩hm~̒+; }?s_[*umpi"B0LP&_9ޅ'! MV^F,H@8mZmR$! KλtfȐD8vhP|\RBwF4Q N%7^gWۘh:njתDB<)h!U@޳1:Z& g/݃DBLA =$@<6mX*jE"9@>Axi9r!n%Bj$[g"`@-ftX⪵ Bo{$:6nWOD6qwrxxt _,e>ٙN)Es@$ %a/D/aSH_v*!&~ 0""\u>u=.FM k[U)5.7)t2k@vM $4yuf9]\Xͺ&E0_FV?k昁Ӭ Z%Fƻ'"2z%ot@CLnY4Huox/oVs(XD OM^mujEĀ "&FY۩,Wntr:-4вS0hQy}yC& #U$3{9Qm?1ѽSvyKh1ԟ=J0\!@1c\N$·b1:&U6P"1s .a[uQq`B4kjstHĀ{ɣA3@If6CV\_b59$ js⋷m6YA0MkG#/nmZl\"- dVX*u#srz&#[{9] D*<{.V@@ yy֠؄ D#%ɚ{xKԱ4pqjE§RĠz5 ֫G{]q[/_|McU kRK/?#b)GHrtO\vĄ'Pg(g͉1<'RkZ1a{g|*lY㳧]i((bl~Ki>s˕^n^UƳG[U,9ks!bM&yն}a+%~sfN8ԭe0P]/8Cn[ xc3}]Kcm x{@JYE +Τ-&| ڐϦ`V7@!eQT>uQЉ]նdR PC.X8z*:Zs=8ʁ{DAw پ/ܚ$ fHNY*j @d@$ˇ_̳ =n{Fϣ&5'PV2iѕDј;8a& &_ BjH63O݅?}x/< (ʹ֋,Fv+ٴ(^wuauF^2?휁+X4Z}_CDE-/g@ J "9U/-Bߔn:{VS[{Ž >Щ}gŔ{i*lUT;=.͍2 F]~ @7pw4VnհIG_ܤgn7HJ{׀s聏 ʀU$)P8l,8];;¤ScXb`Zm3ϑe,?SІN(h(TY[0((0c>Y,:tDH7/j$;!=BzncJІiS {C"uY|SCppJKܐY10E CH@z4=sӞό XM+; @ !BoY XLxU(P6~˪;_7fVA%v=y＿iki써$  ɤ6P ) }}צH&' $8 ]ΒHI!8alVTHC]^DB$ mBL@uN`C @*B!/6bAY:9ٲ @:!$H=TӶ$B/(VN9M0 i!H *VtBb@1=R:uyd٤I0ycx)DLd-v!5R@i2I &eHu:yⓗ SywY$!1]٠;0i"g6v:j0 ^WHK͜,9EĒ3KxjHB׿%P' )XNִwm'n!2^֓bڤp,  AezD)'yam܍RxΌaX\.)DڢSqqSb9G2O DDJ+iܦ:64Ye94XP@ Q(gx8#_.pZAQY]v|>[RD@6ڀw/ޥ5ͤQ@ M t}|M"&@M !crV}2I jdǐҬ$' \~sgSBHI w&$z4 I}l3hL $ɓ\@5PdTYߤ˰ rHBu`BI! IiBx '!Ёˌ@HԐ%`B@)$! !!g@ 6Y, Bb!UY6BB6$$? BfHdR@iC v@xH@!$!3 J@ bz !`l$А $`M n;$8 3oBj$$0$ fB@ f32㐒B!0B’BT's$F@$! Ȧ! $I4А IH[A$H@ $Ȑa7 $ '!@`%'jd$9cRB@ߤ BI͡RC̳ (ҵ$RrLHNa HI$B@9'&@2Y !d m[ \ ,$BI:M, d\s5u<}$`JRH:4 kCYXX"Ǜp[Y &KqWlX N͈!=a`VXD$4l$ht_7qm-y`tDkSQ̦l (@5X(OM[Ͼ36yR [I +Hȼ4x:Drj̓a.g}ehDY#8+,@h^}i;) \+[5!.7LM ݪV7 @ r-FgWIiضyؾycV۾X)+.D(lt =jv'b;1׾k=cNg\>}虊)nQ}5P%)BO{.<ګЗoѰf%Bivq^|^(ɋw:.W>t2HZ& K2"qmͫyَ(&2Rp܃hBXoCrZ+K#:1ߠ @e gg@)P !ȗw$D|-{{6adNRu1>Oĭ!&MZX a1#mIĮ)q,*9C5^h 2(cqXfl)e9$Vq$(, ݤgj|>/}.mW|';o=_I/H2).zHXN+Ɠs|vX V3q;;_]|dK)Wĺn $8T݆հҫ1DxSb4O~c*l a@-BZӆdL1F0Ģ 9t.5VLֵCHF1SY``AX JÙTUÝ+<aỹyRt*{ApE $ȑUE Y+R6?ۧCZmtٜ=iD7f;g̿@D9z|G;?|Reqa=t  ;oo'YCSWgiT0S8Bh!E=9Hz?UzEr(TSy b_yeS/Z\faA!i%ĭ`yp wB44O\[KÌbt:ɹ4=Zĸ^Ņ7";'h׶OŹlm,XP8Z5zrrq9#^%P:ŠM)/H}F-h^*@ @Dwh+Rw1ݿS`_K40Gw8Qz7b&ܒGݦip] Oٞ3(?{(:SE V:a𜚻CG60:k}YDvfz0uP^qV*PLF]mrZ[qs~sTS(v|##?'+ ~^w`^]0DExΙTJ:Hr1d( ڶ5t*P3[6H"GhӯЧ?a/Sz^vhfZ;`HA$ $ru8ET;3YL0:_ixmnvj WΩ;{yM'"P|+ q!9/;tvNB덅Фxal3;й)x:˞z:=n=wP?{ D%+d׼ ȪD4$Ms[Ooi#m*LdiC}vQ4>8fEg8f1wE?w*o[6P`)^uc2>܇jR!"D2 ?lLDM|5V}ςA8BnSu+]ص}w*WWsu/- CQy˥umX;KaDI '߿ql>\7+WqfFRS 9dX`onQt(P)v%G|}} VκNI/6"ɸx7OZ߭Upy"Gc.vMޓZjTӎ%IAYF?r2􏻜 t;<|]]W_W\nc|.badOdHHiDzY_?"Ńgr?N&68]mtKMow?2{ьjgQ1 ($'HȀ&00Q@(Q8>ǀ; .rk^0u$w|ٍNwiΟ~b7~.٫gMoeȥؾ|Cv8 EaX"8<]%P_~im>ӟh2O[j+-wtUt< (7T meklD0MM!Dd,>݁mHժjVif\YF6Jn¡Y5sA l9`pZ؋\j, Bc5O)87z6жKw7,⒦YZhWS:un:6iPYTdPXNrwG7\:EAcT=_6+{g (#IQD8Xb^E(^g)u:sftb;f[?#P4z`8~U)Uby}~؏aҝ lq(ܦdR(H?xz=2( haֵomMnb. z_!ǧRjkURv~Zt`-`)φ3l4ïO=8 CPVX7Di[gl[ ޤeB@[!J (K Oh֔7^m8ʖk-rΥ J4aJ%Ǯ/!zhrK xE&CxҝL_mYR zi&b3Zvfզh 1`HCmjrֈ TMi#R]b&oWu8 *'XTjv:`To }5>kl^茈xYd, Ei3JUHOj+I?a-/4yP&/L,U )$RDY$5NK3Bj\zOفf3Ɛf) B1]hW5@B@fR…JzA$/6"go!\%}=y^rux -g>_6CR븁A DQ(VG`];ٖ0~E`PV9M,n|Z`xHt*`0EKS1=qJ-MKt狚Ӑ;[`Ā *m8-F;onrI v!t+/zU"S%O$y'$jmBZ$җ&GX+P7mv3(j_mt/sq27*$LOS2Sv $r\t!Z' ~<,˹>ijaYCˡ$JCR{P)~PoPtj؁6L6JWDcrQ5vig7OϺ[ie$6Yoldud{/oZT)e~wY.e7X%U$ DI谳M+,0UHΎZ|o;ԕO~.5edX~ebX#18ty2iۙd7m~*~cPGI՜%KݱLUeWٚ]{*]GkcIܱg,"(4H Dz̊*$@tAt$,X՜="0c5򮗕U}_Cֹx9y3OB%:BL%aV]jxj3~GI`ʁ/0jnu&z[mɤj&H9]B DtU_ D;gRqdZC^Qw}N6{JsΆ;TYvQ8Eji˕Z"CP{kQu^/Qs1@Dă?v|{=4܄A,Y ,Jͣ f/$D Iz՗g_8߲R CIp)w/6DP JkvkSWhjR3G!EI1 QH3w=PfDҜoK.ԣ%lṚq߭duJ$J,&ֳ%/9U6$Do_H#T] "w˲HF|([#'L󜑙Hzo5pƊn 0|5a c~t`IJ=2`.uh 7wH/lzko:WnƋ 4:␶4٤c{ޯ!o ";Y?.. F,A*BX%|~ɪ-?OP}`' e&Vmq rEM- Wm LְXeo -G:?Ꙙ%&2k_QeI1y|?e:;/ŋB}dzD pzXA!o `Is:N 2g#09Wn;qn{z~JPVfX--ek"0+$QATFDhB,ӈ dl@4 M;aO o [EQ՗SmбCM)j ";Z6W)_׌7*)6:cI˧H,m4нwb 2\hE`*4?K1.CiQۈ sؙT 1.\&LjZj2,R*m>JAQeTUP YkEP+X (QXympXQC hi4E+ *dR )9!5uMeG+r}6 i`h̛3- -\OUb'Tn,xm=W|ʇ$,@ݒ7Z {]M5^G蕵]H  }wW`\LZJPqf']_vUBߋ )̭ڹKL5:n~F[D1|KxZ_RD#8[oyuM T_5g/xqsGI^S .l3<9>mKQn{h;m~7k} OkVwO6{Wc;d>Mwڬ}M㯲t86=\SfG^zT7:ݛ]jS57|ߞ#F'Am~$_S:]V~]>l?o]t)\7ܗ_YiɎ~Gs9܎,ʶ\tV nq]t؎ wY|Y ǟc!iz\GzK2vä>fwzJx-}P 4',ùUd巳woW!޵>>ױ N! mfg(ˆ's Ǘ1uHnRs[EO;nxR֏);1,7=\2=+D65y%_\?IWg<15=wB lD C @ ?i @$ Wl6^_b\BlvlT7:͗n_ksZ6Tk,*QBDax)LQlk)o8Pa|P,%rh.'9wNbE9/Aun?/GA4۝bet|}} hpZk3[Nomn}[>Ao{+28N3|Í 8f88-W7]a-O-!uB[r쎺(.'ݷ>iq6~G#j:i3Ї+: ^ԧwXj;j;QZ -_`|.rx ?l5PS3x whOV懙y^6r?9ݷ'S|?uިII? GN8x i/h\14 v4FK(:q@~Τ@eQhV`R)"LC!SPSŒ\ (SEOxyM0?Z}OQ{H.-p)y $1r=OkÞwY es|:~ 7+A[Ƣy Rn6ۅZbJ9襡Pڲp SS .3ͼJMK/(XR^5҅^tinYz{:SstM5ךu}S̏׼ǣZ/ \A|xE4lN /|:^.wW֩" yЄvƳqar\"#Gln^nNe}[q:@OG\ه樄XbU ((*YPb((,Y1b QN᫚ԇ0̼/x|_c&RLIl%/ZROj臩,i̊ Jڧ(c^c.0Tm[+X|#le gbb0<FlJVXFBh)0YqL(=g Gx8,!xDԍRO=jhMh]Yb5bZ$.H*8*j^4Nd%jҩVu%PYt2"kVrgO碼$;ʸ[[,W~! ZP,[ ,9fSYFbR<`-p-Gf'ڑ2HD:*.gjA6OBpX5@kE}ߵ[m'|b}tE-F wDnBʸa.@Y+|RhN0[,aq2Eq34ݮk&L뫩Rkc5D/܂LnτF͂A4y <-?4s'sti8~k￯9_un* uJh/jmT6X.ĹQ5Mi;צ7G( XSRD[D&0Rv_+am׊Yl3k~$W{w!, {ZcBkld4˹n3۳sU9 2/]&֘N8Mlr5u拆.W[PN IJ0[ѧvߍ4RX((beYq| /5}Y|pz/CN|kG1RѣwKA}57;U&S6ظ3D9R~}%r^4G_71!+?X;x62b j}x;I4~w!-^|x=[wقGd)Se`)HK6gq޽o9hH(3ʿbzIIFqu`j3&| `(C-kw~JPm*95KD T7!Tr=G+lg"'@Lqo> ,Z [ź[1MPO?r( 0AerS$+-{(m2)*/JV'*@'+xji6QM(OZKo S[4FI^r`X+1KhztCUeˏ+\e٬[J};sk4NX,trv lHO29"ȰGU}X'n׵j~.TQ^R&eWCwwXp_oYc\?W?OzShLD !VRٙE/O'v}/_fjs3 [d4k㾫Q[wOҮ?']ua Cyy={k'Hiy鸘/5g%@1 y(VCqZ/"m=Zrܢ 9ZhFU%S.S\(yJd-L[)(CБrJӄq_8< ʙNZfM553CKE*jWfZCnUr \~tV֫0VKZnPf#2^pGw-R Mn]<Z^T^ޡq57AmWCcڥ:A%*{.xNUј, QU+aejr׃Y:z2q(')&8%,: ~FlV $!nb^mo(L>۴˴0g[g| qT&upo7-Q߰/b Dz޳G/: 横3d{ vϨ>RQ{ >KN"pʯuSp.WkN˗#+'f6e Qm~}H#M=aI8H`d<>ɏUV*_R;^>|qAC l^@BSqվ^/ͼj.u-1[#B.wag:M ˷c1N@$B3ǠԵnƣ)^T2g.%cŹ0(B{0[j\M;_lhI@y:Cvf6Bcl?1 k?|姡DaBbx2ۿ,z$2|BuOPV@MHS!2O# 68 $7S_>Ui] "!E"yD>y-3]"xΔ @)͉R;9wg @B+&ޱW}}{n[h&x/Ɣ@:UYqT]H<,_ $vGӾX_~ݳwKc!}^ea6X ؛Ɖ'1|8V0Ngz5'5> KGka }_Y* DK ; @J9+!|GCu ³- ~3@ѝj;wSXx+}zw&@d߱!AG 8;jQo*UEXT \'z2CD~" aCsg@D&(3Ew$/}M5K P(;rO'9ܦ[d}햝g 9䰝(7h,j-;̼, Pr!EكJł9~_Ɇ"*OFXPYg 4V>7¡ {}çS~mHdϏA+B04$9-"CհE\jaHv܎I7cyV{?Ο%ưALg !ձxw>.;6`@b $850:KX(P^OO$w AA{ .8ݻQƣQ3/F;yKV,O%/Ql_IHe}r6Ȅ-${l8xfN=崡RO߽O~ʦJ2[܎RU5.>D4Mnƀn!Uu~_c՜]<7KmB{oIfjqBZDB4-aN2NM6c' r]fT;& Mev2MMu0(7#O TD*roI{ZUH2d S4:wߧ<^@[`IaCM 0;&CC6[WR2HY쟩b 9XHO $ty)U♳n9ngb9iuI35#M]6HE]%]ntVڃ5sΎçR-"]CdzeYXO ir dOʸ@)QP$(d RB)QPBw`%jOz8y(MɀVd6Jn>:!X*M4o)BA7NCxѥg*{<$b|CmgFjhkD溡M%U2`V  %+v%PC0(As(Pa11'sd 2; zƐ YX@rNn7_hLխ6AJ~Soh4pHC90ygjn2^ܜL,D>SFIȐ*~=Iڐy)畼@v<E Nf{[B@êE^qj")%$sn$RL%e9s._ (z՞0|†Z$n?;!" "L__$m8ilgx4\-PZwvK0@ $>`I K!!'`AHzdӲSOBtICeJ8fJa ?Ӗp={jr[XXMyAS1//uu-5jBLf^}^b 1{ٻ9KIr<C@.XED!&OBJHI OhHB@>>8lh`$)Y! A%B]N҅Y;zpxIپϥ_k}CSܮݗ6RDgP '󎙙m\LV%K{ޭ>n _-eOB:&(VvG-6&v>6r3%nhlS[/G{ 2b_TNRAzT IkTQ-TU߰'@:Uu;͡ %IR@eH cEKC3}ȬqJmNpOrvlJRt}Lc%P^IBlց"2th.&j#T&ObBEV&?N9"sdj n|{~7IkP 5aZfJ@@}P DJH(><>v+QZ־?W<9QCE$3zI 9?Ԗg~ I2q-˽ jI40NzUtxQFR WY)/zN#P mt~ۼwRf^[#D@ @ $8U%#v[qBxpi@annԆa?S8Ivz]$LH@X $  BqBCH9'@ `$ I8ZBrd[apO+<Ϯ\6 kǕ#m^Y'Mٲp5;[ dm{>ǒߓndxKKx-]P.0! wAa)? $$@U C!!KTȒBa2j)BH`XK$ t, $Y$:&Kޠ),G!\Ĕ= w1N=&/ 1m |7>Fߔ{¹Ù\\,5žv?'0@@F'g4zVv{EF >jS{çc@F}CUHFcu@o?PvL CK$ ?jfbǑi}~NW'4Ww0[Af'WDn\-y;'hxq8G|u!)E"$I!'e&\oӦ$_LBIDh@@@7 ?= BœdthIm2KܨPL/A о*98O9֡s9s2~~6MmQJ$(*""Z9c\_Bv?.\xt?7}WlVI0nh54LPYQ5`T*F TAB!!v#z.C3H`ːIPQH+);41 y"op.)dI1̥)AQ"$!HaF5dEkd"Pj#9~\!bцKBWeA%X \'y/ v`< ՔjC}v~rp2rT_*nˆʞƭ#A E'zH)x0wr QLb,g&V H '$  I$;; @$!!HHB@3NO }g 2E-O|v~ݷVU*P(BB_h&A1 D72/x Ǐ,3+I!ê 2Jd d tDII$2$I"IHNBe! 0!$CXEsY,Fڲ~O׸ߔ]0(70GPy<[Z - oS%|-jއeH! ,aHE2 AAE'P!=_Ty[ڵa{s6Ek@d!kvSZQڣ*x7e>?O\e%8c2$mɘs[ѨEAnyA<m>ŭ"Txlx{[by(lJƥ‘3#!lϬG3lۄohfU}51ã8]'Wo$(享FBnF+n 6./iɣaE λ" 4f)!ȧܝmuQ> ֿhC{]nGbK-Ή_9\ 6?5w%*R!&AW+lN?-͠?<cB 0SsZ6tHOH=_x7;Wu< ,-B N+"?w]Md̺ԏ8- aW;n} ]@?m7ur+," @D\%?9EW|PXKbR JͿ1$MKt9nON6Cy[VV;S` 0{]ぺ??0}ҘvBmT^1EDHG:,롚]g_;VxkMRh;l.g,P捥T3Dw#'ПV*Ihl*J'W}zH3]c|Vv=J jfThT)X*S/txg|8}?m2C˵ 5XB֡q9Ml X_}a֨6DAFEA ( (("EUb+ UF:\A0'WMϗ=;cغBGfڔ+Թ 1 aU%%h^KG~ﶺK\:;+l.MUV%_!IO^ή!`OԪ5j˭RNL'$\x,vwa$L\]3E:><-?7;/Z+g (Jo*VHECx5 0K0 ̐ ͋&"eKcaR%/ַަ\"\ԑ9֮c lAdӅMnj,{(&t3!0 )W#e%hb,eVs ]kxs0x:_:h=_?9?OgXU/3ȇ#}tk+V]:ہ(`1Yv]q]*ċLH\ h&]Rrd]!"x.km C<9n]Ͼu뫗AfQ}F8GPE9Z: }R2+Qٳ_Ϫ ȴQ/;o3a/y{gCbk&,`Q8 \^οKS9Gn=$ BCSFfBZ[ZbM2w֪6t8(%8hOjӌ,P gBr#qm;SϔWgK7yc4ŨMfX'q|UNkeFϲ)p9cBސ*( Y4VY2 e hr^6vݞqb@(KCgZm &|"!:[ 7_=|ǣ?C&umoOsA Եӄo-홝g =kY2)hrw]"o%CTTQ)F60M]uts=z ^EFYBnW_oXmaՒIO qAJqb^E[ \j02uZzͻ١uڲotGXմCQ>ɶ{3uhr[bȜVcP O"qZUϮƜqL:ɒ{ vNkl~6N8bý;A達Tg?O{ g[Y^y]866顯ћ++p O~Vѵχ>Ҩ@yU1[XITI!WgdUdqqe\MʖL:]4){Cǚ.،3zߎL$j"u‘}V3-ۦ;&&нe6'mа!v~XZ(.`mpWeEɚtS&k烟q= ؼ/&*i쳣a7pJ5jmu\/?vz[?Bӕs.ܪAN ^G:ZMƏccDSg\Z5rfy>hy0vZ=<8yplcLޜ0RKzCZVR~ޮvON|5X#x,0CΌպ ɎI;`}KY8~.^Wt>A,lM`A~{(7me*ve1r7G{v+|nhRNřR[ȸP\B3EeS) e^j2mKh]1lۜl$\&iR|u]d[B Mr:fSnm &m¢Lƕ\_l0q@C-[_J Hb_WrexAV wu=?{ a#q|o4y^1XPPGa| kܷDLc&]uv]R Bâfm)z-@@z6G+l<{44ܩ_cMy Ԧ`W{WfW #^̤"&xT;fׂ 5p~Fõ=1 4+kIV3aVtVnC ~ dƞrg!W2d]FF0X!-ެ}pY}طGZu]ل$'ᯥǘ˂ xyD4T!B@8[߸ܗE@撆GE&7"()1zDplQ` ˘LQ&i`@B>ſtRdfsl5 DL'm/f*g{K??LXX VSVE➇AՖlfu>\kFhbKc3ST},_n{SYV#{4 qR;jh !v^h?y>mKA`SZ;ڷQQč!BO@vĬ%Z8ňx=+",jnxJVrEKW';y7ewwV^™pC֊lύ [ jkAKyy.=7tzw‰@/Qm&*)̪.6t`p1I=Ժˆ)\Gj7jirˇk3ٴpɰҷVWܠY|&lbE,Pk)*i+]YS#D29%X#kqsmTJym6(r l"";RȰIWj3&g," ZCñou `hL4E5Nkkңr@9۝ߕo}gVn;1^d Dc ԕ`_ $?~k ;=)-d*uimX1 VTSJ޴e3<.?Ct1-x14&j5ݺ*ĕ&b;'\V %whNzO aJ!ԏrƆXO7nBimPn:PqXrT6n>-F`ƿ7@  ÊYX2 }^uD8%a4k|>[ڠYh%o^.O[DqJC+򌷫@!Ƹ2h:c%qkF}sB?q{> Ob jFd`iIfݔۈ\iJ Xzl.0Dzkjd%6]@о0wG)%p?8? 6u`f(u'7/C# ]O-* ؓ"\"]ֽaMQs!JHWJ~9!\=}e^Xb"`;r`:oP\$c n#Ŷ/Z3Z0! M~EXt$[ك֐ahb!v ) ۥ";9/G$s @pgYEX[jw%y BkӑTЪzM..,pLx?iܜdR$E7?i/x>?[nr1gԞ#lu 6ƑAjDC;;b;4wG,Hql∠%6L7`E'SLyNop-~W oiQ(gHqa_ZYJ췵Rڧؼk$Yx.r;;zllx;raW$V'B_,ePy5',5乤BJr ٖ;6ںqZ s㲹9SD @{9 ky4_wGwvy `>*Cq}Źqv\%V^@$ U60f=R@).S6;sb2g)KC""@Gm6,ӗw}maGSy2=Kn9ӿ8l!8ܽUn[~0- P*l"ROk»,;jY-/ɝB!F],!9&cI@]VŌ(։;g7Ee}Bu2UG+o $Fm۠ǘ[M41ǫ?Ҷװj,7;=rzˆ×6OY4t`{ύ{{<ˠs< KaØT2{6WÏ[Ӷ6uchxSg^r{PSrzXBp0ѵ=Vf';ْ2 ZR.,1 yZszQYYoYLʷ-f̱3(ǕHD7ɨ2i}:?l5hqk,ɳqGp ")g `(kXxKxPȴE!z;72& h.Ce1RUv5xFkl` qY6q]J1F *Ͽx3#4Cg퉸W->.Fu)x:xpF1V_|O]z;aOf Fz̐ G i yGn[$^ftI[Yu =Ca&ǛyĄ ]}Y"l!Ír4AY Cj\69*v\Mlz::m{G뿧C[1[݌##jߝ3gkf)34JwPU6%T)@S8i훪>;hY,SU`aCu~\,O0jLzunw@[Gxu~?^_!'G;{6Cwx"UHO ?ABrFT! yAwF3#b\aCJSc[[ [-z^ͭzHfA2Ēv) <FBi$UQ Eu+d @ n {MnϢ7RɺiCuln[iw,Qج0H{4 K$vJ=&g)D>jr!]jO@$gĘa p %Tck0!\=kRH'k`_6jp?~>.Ҳ D 9O1Ppd =9>Fx}wJeܿ0NsX!d" ].+I!j(:;22O={/tn:_>ԇ|ཥ"⨥O6)Ь~/Ϲ&s"UU-U[]!zTa{*MI DzQA'̳#-rf(mj"%馂ש1{.;rr֪iu+nSW:;rv}}ks]Oxi?y1C2{O:]9(Sb?F %]XNWm'઀I`N2I$! y?a~j'@ ;SM7@[ar"Tt<%c9/x|Sd]0;ot@37eWa8)d LXI$>$$Qjp$$ [j_ coQ\$Uϡv3D8X75ShP>wNrLA|sP1[j3%gy|Zn{C< m7Y;}KG+9Vtz[W~&rKƋX J$ 'h5 Bq*(,CF"I髆C6`]B*$Y$>@B~{~@1d$Mcob#Z|+sQ_fz.baO晳Ӳj1`yQiZ̲Xic$`aogi'p)w6`j =WY`T]`Rcg}=]6:1Q" x3vo[\2[Gؼ-ZĄ;w]$?7_xPj<~V3^4P>V@QL@ʤCŰ! I sGGMɸBV ;k3~koO{4ڱ j޵\X6 N`um@'"{HHPX AC hiI4WuvUY+}o4[uLdتm}>br5|(Hu 1(,@}֩uXNM(ЌUg%ĨaU )%n ɂ3hdŦgg=}Mآjغj9$%-o7k\I!'a'H-k xO|7F[Աw7-E/?7֐!HHzBp?YI 7VjZ֪@U|>>DDQ0]/UZgl3 b"5ɽ^SՓg\&$T>L˦~/?lOݩ'{ՠҜ5)`APH`iMVE<𰇡~x|.uddCڈy(<=bdj*9%rd:-!x̀MIѺd$ K!>s!$i( ́O0'!& 3D$蔒IRI!$R6X!զ2~}UksH@{%3e rU@q5ّ1@ʷEG%ej&71VM~N(&W@艥BG,[TAc<-UT$$=WDC~'&IklѧoIhz+m+R@(d 6lBB~[$$ösOR+4aϏ)}`y{_kAv'ݒ]Id3ORTʶ 8c̺] V|gqֽ n/mv(Hg=itxt힗B7>kMl @PdDҺ~kkxTjЁl7y_ô3;' 0T~.G6@7n p+E`\C@?aÖPtۼޱ^7lsU|}o{R H͎8!Nl2 kx*n¿/y~{W$+3Q`U"GozBYv,ꨳXGxM`-+]E}+<š^F~dJ l ĂXxU`,dkN܍ۙB1 D )&bdҁA^SF([.a?[/ƦQ;]h3[ol^aҦʃY^M Uv@smv-qY\&T۫NyqifOabX2WVWŋ,ɤ.M&XL<^7%nqr-ͲFE"1AbłDQQTCe[gUBף_Iv_=!*r;6'GF13WW8*XDEo"7,u+YHӁA'H*R{KڛL@WS3 !0tOS@t($|ӛ;F{zXs4f/j,>[=V9 ud< <W9 m]Jtt_Ɛ"7,&[,h<.la#o%UM=̽߸+ӿYױٻ 13Ilj+:}΁ J45ɐP]ΌMX%ҽ!A  ;" |͎me]Zs{ 3}Oj@%n8|_[X7pM^jL nߖO@#p'F?AjD(uyu髸Rpd:u28t-q6g`?yԩշ.n` C{^>:"J]ѩ*.;N;FhOoJ?]>Q+evtھ[r # W8şVt,;m ֱ0o.C'a??v2aG&}RM|8%T"5mDr#Ek9S9ck҂?|?)n-1m|V|wXEe" (X$EeaDEj MT^{tW&Gi!ʤ:c ut Mǫ1Bݫٹ]hPȐ) O87/796YcY/ʡ BB n[ίtrܳz~s>mIκ^ݘti 5hD`88l+9uP%c0pOE ,j4hc 2N my_#\z?ٛBetiQb3s):l@2)+ߢU&|ʀͲF'UvNKp{pC^^7[/cBA7`uڼ 9\ D , 1Z5{g_{mW 垍t}ח_N pd@cjg!cXޯglҳGU(g^R/Ǭ5b&o* ~^Pfגt9k|egjI~c#'{lL^P]N9#0CA*(ߴ*ی젺x](gON&摻}cqMe)G<r%!x)@D.72 #66OcSuߖľN Sxw'ci۽G:=?;R&W-9Dj"( z(n_ПhC`[IaxzWCͯHkmʲMΓʟ!8g@aARCFXVk~Bj`JrO_㭌CgF4l-+,B-&;PA6Fc\8/wsͥg{mڐtx_zt[*{ohY Q[KUL/KI~ qb( fkC ѵ_זbs wkncvXܕ1W hoo>J">ޗl/.wοN}c}_ҡ]سK\R%/rVWG7rޛhOJJ1~O1.T $BP ⭮PJۨXĒ- 3GGK`I;ՅX, -4|Z*(h|n j0cl Ɏc׶W.fc?ZN@F^.7=:{h8oPV.W*t}dKuOt970 ¹9TEPEZ`L @$,/[m3UF qpo[駹+]Cb6xYt\ʳmS y_A.u-\7oyYeK74+kA vO9S^fnx:Ou݃6 0FƷxR\2)\%\djNn`PMR+/lw + >,.ߗH|ȣl< -5Z1mVY O`؆~U=rv \rS{an[ٯk|*z)/vD~T~:5Fwyn~5G+ M(gB kU1vutv?eڽO׫`<`Y0o5j js\" O%eѩYaOqt zy"-Ƞi+CE]S@͕Hcy]+E05[ J[S0LۍG5w%i xl~y cu'bڐqi!.^rzf2J=FpdA,Wbץ QED`\9nT w^ZvWo{f%rg!8Y 7C ]mL HPU%FgK۪m]]#de&A+,gfyMrUn tcP MiM6VH%6Y{=6bG&zB(vC8I.ؗ:J{E1FJzM@.S3F6㑲VWG8tM$4X$ϝzu5]e`wxT$EqyǨ+Xc_ﶰbA/.5C[ٝϦ̦yD)v tYz%3n.6MLA_w=Yґ`"a%WFG`w_6"C.cjΖ_6JrߖZ޸?7 i}C,CYbfJ !3 i@a,.4s@w˸t/!] &,7xvxnl5LY iƾHMR?={ib y|Tzw7ml5.[E>f#rN+Z7 A,~ )-1AH!PZ;#]1&C_tk"`az3Ǿr){鑻 WPGP0XϮPxvweeP7oV&dP}mIVQ ! >4#ԥX~V{y7 ^J\N\~,-ʱ?O-c%U2?h>*K觎 `oןާ؝{: GKw<C qIe`jw\4_}/SrdxO%d+o(T2ia(x[]ypPn?FƎZo: +g~4Qb _e N`$1p4^Mw葀d7 [4-h~vC򚓜xWMtC/(^$ɭ[434?@LVqaw.6c{NEv$X($bqK $'IOc_-LhꗇVd!*@A1 $/:μW4ۨ4dzt=q{"+F!;:L4k5Ův,TQ,_YپZ:]M 陇EF{Y<]x|W?=WlP@e΢߇p񽗭I(#RB =.UFmzoyݯ8Pe-\ $::_Gɕe3$YD`H)rHmNuaD&V*+Z@HP S J}1N"=NB=Qj&'bS+6 {r=k"?!Wh `Y/Rr#1S%BY7I*]GO#+Rv푍Vڼ3kLH < !7HqUmmHTz rD8E+y jL"dLd=L*#G 0'97|[Auwe z21n@I* dlRe/ju\ɩidFmFJ錀Sa9Qd2UAedFЬ~gdnǍFJ-4_!Lmy[IF9Z=:0[.R8{UF|U3Wߥ9Jo/̏-Tz B]zX_dg_\̡cV+[6w^h˧ۜ.ichű>tuOiqrP&Q.Wiup׉2$/.N;ϟ!0e0ZK뎴.B!2s.⯥,՝\fiA܈gVaͧX=x:PB[]zlPrIy|iI+ }\܌5m D.x^>j'.C8('7rG/d s,A3 &מ~Vocķ$?Nm'jÄEu@>Ώ캹3'>R[$hgir`<##ǵb p;2 c(&& ί*tl- 0e!QQD1k_W9p.hpST`;\ɤ4,MHzsDB+NJYS̰*..?)a3O[]W-wmbr'IΛ[S 1e8Pl* zS-LOl049pW%8V޴֩M[1D0Զ X? ^QokÈeUf1& 7c;:[@@B&Ia,6!^t)QmEHMFopC4RZ>\O~bD[>]r$=2@2MH+@l(N ue-۳7PB⟈A%@^[Z @P>Rgfa╯o]xґ/ B~Y&*߇nׂ׎ w`O} yǍa.q fE“:/US!+qRfº `80v@A"–x&l8 D[;ZG5dLxd7WLa6hV6EQVo7._iiii,![B].N;?o0E.8eo]8}m~n0]}pi&V Bw%ghX  "{PДj?Joekz9m[6չԙ@װyy>ۻjZt>k49ke } DdnkM?oý\/C8ۡ׬X^Ui`4nOz~u& U܇ A^)0Ìol(2)۸]3`)@𬳛)~!Bkhw..uu CS${b~\2ɰ؆5ߔh"o ɿR cIyX}M2/W։=dwQ| h}.lŻ&L}n3x%z'Bݼ.6޶{dZNjjzy_qU\4Mt7(~vOIoʛ/ 4OeE B]i,j0AY*ˊwyL<%TpvpS F7mfҳ8ˢ9 QfmRW e1$XgkI,Z[,Nܫ&G=1xV9̹^ܯr26pC8dɋ Xګy8+`쵷?^{],g}$Ki, fz^ ^l+#o,,Pdt UEG p:u8{yٳ'1o{zam,.Aﶽsӗ_/GoܱVko}p3Orsyik{=`٪7%A눬-Y+@OL@eTT̠^Bb&Zldl D=,B}X[gCCKkˋ{O=d:MT7]?J@nev~?N8{>9Ӯ|[-rvCQD1Msp^Y/+)`rjdq7IdH],}=EeΎ a0ޅj{&+,s3+,u |* :9ϡǿUoT ş}k-A=WQxtCaCٱn\aI% V.sY!tۨ]ΧOj͞o-εylgn\ ׫ok3fk,"- #@,Xa" Fa$z.l6֨7E c۵ ANNygva¥3' fR) -(NK`"W(N{KSj /꾺9ѹ՚@ Rq $ J}_/ś~eH6 ܞYU@I$)rW|jqh,t]vѭ=Ͼ#[J_ #M=wĄ }c$@'oWI>eIʪkqm c^^hwp(]!˜J16}37yC2%xFȘgUCɩ @dG:tTG'`!'H Ol2,?-g@8+y<*)mC8p_ ! $'B~Q-E,:A)HB-d< ;7q!ȦƤ^XdPCt{԰_m;]y'(æwC`i)h6ŒZd?žtbYjZ"`ɑHtÿhc:$&F$7}ڷ#vQڣXvnPQ% _x*Փ9S gֳ`h{F!$?AkLPXF>s|S4CgƂSðzaE$yBI !IeҖ"ľ͛7{U}t<_yj0S8ѥk1 v,=G 02@9Nl[$v]! $*G(@Ng+U 1s@L7L apeͪRvk@2'$'h1I>Q^nQ6P"9FP?XZ1: ͱBSlϐ )gcd OeC2'pnq2gQ&= $dU @ȲȤ'$!3L$ 9 K԰Y!![.~faVnyl@e)5>U5| ~ V" ]I^!EZH@d@|Y_ը_^?aû}RZyf:tE"2 |Z;kMg?Yl57I]C T CMj-(VV,[J`VڅJh(T5Ҡ*,F#.Z2ұj(dj%b?unYbWPm+DhJAu<1BVq1@WIhbw\Ñ}oiܶy(3!8t]Cc.oq!QH),`1 l@jE%ڿAFF)^M z HrQѻX% ?BS>$>ֵlc= R ' "@1!eS[q[ـA}A 隇^Q8o#aGtElzxnBn6@/Q:b| sVp zD_j9AFk2LS^{|x /K+ q=[(АXpTf$:{̰Ũ'8\`k6.P6HaDh4m m;~:ݣ:@TR~N G`̥J0Cc{mjIS~GM`Nimf Tvh/|z,5&ٶi $1blp oD'~'`<iIX5m{/h3etsLo77y%V{2.HtiiG sa}w|B?|w0}8Ѧb=A܃ {ed_i{KCO ~sWwŭ;؟Tݹ첲ܸXV5mйU+GBm1l,b(*k`O̭Edqnϧj6>eWK&-kF킨_cW mC2/] >\k,A1{Ɔ$,XZAZ :']#EaDf3UB88zȱs-24Z\_hz.|2@i$t '( |ݥ9;|apmX(sf$Ӵhu+=Gm ejUB|4Sue][ϟwwvF.khX[fr.A+SƸ"` iJyMAq¯&]ox0w}z0z7/Mv#7$'F)T8x:^4߻ha@ȓh(fkel<b޸N 9ה%CLO*ʷ;9;T#t[dǹN| Af:MM۽=1Bdul|ޜvnڣעvz=]~ZS6>gqWzʰ:C/Zl%,>Fd6}o6 JA[L "&!. 0Q~{*p7HU,}ZHaO,=|:0ޓKgm:T[nSkzfZgx s޴ i۠$okǥ54E<t/X_6>ɬ?9sqrY\ؑ] )DjJ5:kW53 ςW˯!0oFF6M8bIy1qz,д>;e̷]Z ]miu(kOGq;m9Hyp/J lF[a@ EٛWLQ0d5m>c[~A DQ lwչGo8kl|#9jyZ0Z =UŚ Z&_i2hje01( !|. q6ud:#:l }r8Kg͈)+nzTx2}99~(RaD0;6=J y|g׭j0F{ yj*L||PB"G@% KgZy=\6t3^h.ڤ+(؏9mz! %hBd`aȵL!&[8:V4@Yfć訋vW~d(e06'8xHШK+TPTR{I8_MAjH $\k3DzemiTnoklF/#gRhu0Fp=2zo'{0iXlU`Q Iq˨z 8ڵnoVHR_lQb"_&$s`&oig[g]usfmv^nwC"ή.>ۏrx]{jc$zaL [[_BS?z>ϡ'|bpZ,dYah"""ܷVդsEjX50/dN1C=HO[̺ӎ nw'\86JpgR$9ArWG3UY,i_a\9Ŋh:ٛ`}lgIͬ44$JLi0(Xr'ϭp8vؐ92C+CP]nr D@Cm$5UIc73%Ʈ7vgOlKE%Ȓ=ר?i B+BZ+,ahlN n wUQAH`̩ H ::1AwΒ6 :YU(GO=Xrt6`YvB>|C]h8nmݥPfV%Qi}jFAK"7޻q#wEvprܣXKUTzӲ; ][}#w]dF Xnwtv>!DZT[sgm6qW/jw>{5N·Oi: wnV|Rj{X|n^HҤ?$[/џIxD6͹I+cJ. \yzv 03m̺2g&3xП9l @Q@;t>Jd.P@{l w*لS Gxf v*e13{X!?Wy"i-Nىsރ}@X$ȮJIhJS04?![' =e5|$%tDZ];œZ_*Akqk^-(:W2Ng?ϵ~Jxr _E췶@=Y8UƵrwz&wti9okkиp j-]jg:se 08{fJ)k; }j-KKzғ}\iz {rpI:S=b8ӏ7cB^?,a23u8JKGcdT?3|"Aǃ>]3DH+ëE{٨ˆ3_B}ra]U;"LFJMmu~}# J{MkZ]N$/~f#:)W!k^E\۟6/8߁,eޏbTfivŻHg[P : `C"+#zbtV[[(CDB9; {U 1gܵsEWۄ$ I%UJD RY&80೻5E~ߧ(xo}gG9{" Iq!ޛgĆh[Zl[ Y"tHp}iﱍov!1D[ imb2INV}3ɭy)c(^ n˳s0Y<5Zh`2pgDX'j-Klqjۅ2QqѸ:+h; =Η IIl[\ .E)riYlj=`3P-WcpQ bEOQN]0BѳPFJcﶥW?$Q4.$BBw쾞^[3` g.÷tTw"v`ldWz((ֻ7NEb,(x3 W#$Fn.vץ5HqgaPqu[S}WeaJRQTǂ̱S̈ZlR&ʙi~L ;(%yY Bis F|uC6V~0gDRV~=Cګ<{ {^W=M:Y纞疠7$l y 5=Ú3a2`~}" #%|-{&"ǥiVmkoؖ6b~a/EnM/зydsCgUɃ c*~6$h؁V(^ KAQj8 PYwgn6Eԏ1!߽dh8X~Xh .=9z(u01Qhҹۋ'sPi5e<Hy~KnH9| @s Wֺ NcxXo&vZUxD v'1j"6PgO!b 6 Y>` fTU0P<˂f_C0 ~#}6uz. \{d8O `qgL B'G-H2 ^{gP(xHĮ=)@.;'s5U{"+,#N-k s,|gݭXNS/K/Clks$Xܞg:CTdׄx)th3w{'ttsWS6p3I;fC!GcZꊯ~Ωsa$˯CO(:y+"W,W/ӥhʋ'][Te|>J|#zŞ5 `Öu `Y]+>WW K`;2_B=LE6lfxp0LP79鯩d\( V=!ggl]FmKl MWǜԺ$X϶odh$?-rcndk^8%vv '1 ];搼<2R􁠻ld =q<ŰXx+Q׌ܭ6zm V \9pY;Z`.:#qv.uZJ HnD@QBcNHsFgE./_ghnfMǜeI./"*\ZhxU[/k RX9^z"!::J'7LE2~K]ϤHPA=,6Mfiqӈ+ E'zY;iuY[ksm[{y+eVUpA+[۹hum}.o(ĖPW͐<4nYo+E 8`43nag.؍rl[ _i-Di(syCWvpQcZ_ V!JH:7PBcR mOȩg=Yz9]V봵L{v>jhN9 n}v>ltMl"V6fg .Cv)m m$mBG[U$#9` iĂLVzj")e]:]өs[܊&_˩?GYp`jF8c}^ƗFy`&ʂ,E⭤2<LJ @EcYC^K(B6ٴÎ~3{y?t^7;,slt6 1F e m>1{+J[IW!WDjF4VKZ] @y_@V2v8 Kn:/z\MQoO㝍O՞z=L=`FNlX=R\qK_`}A;+ߗ,&΂l9Q~mkWpo+1KF%QDf9ڰ!0\&Qh԰e9]/^]?P`h 褕qIʠ/#&5\"&f0^&.92wZXqC!h@D,߰ )_-'μ7>~ zh~: G66! Y!)FK襔ܵxb,딷ޒ~Bd:c /sM~K[),_.[\á VHxwR;.? uGZ[Jf}}vX~1ذ-xt|8).O{2ğ672 ltg-N j)RC}*bx\Oǥ˄4.9*U+T$A`!? K!&F}>>[a;/K;w`N/8NAU}m:,W^5LVv@v2w]o  O1l\U*|PUGGsذXR (SԳ, u{CSʙ $ Yfi5ʞC!X?ak(EϽfy/ּ9VRk' ;e$iHB֍~@:v (I'$!X@ЄUFZg7v|L0S?2K, |lBxZ,v<jkF~HGDR+4=d̴[oA3R }C #v]:oйzyLsg,dD|untxC384_`'o_%(Y+hK`97)VDem,\\sI2DQ͍Cx4-T,{MtIj۩WqTT$cX)."0bQ3iS /?Ҷ?iy*}g]ZE\PP7=Oï B(#WGg[l}W,=xe[ bJqSyK&(d‰N֪+3x; d@ HL4Ӵ0]go-Ԓ/n7,w(bI„C XH$}- j~O!vˣEDR?-}c16n)oXs9fYs_-'5!n?:G&nҰeMozD"DƻlNy!/j: 0}+5ѵ]yj͆H{zHx9{I6&'?5(ߩ^)Ɲ*b8))_ɍ[s wlAݡRU"OoIX+a ˅ffT̓a,pT_-}KOz xPq- j8$Ge?z?N/_jf:~`*W~ U 5B3={E}⺕;: qU N5+M}'dI`Q]ZK3 ȚٴjeLjwߜJІvN o<@PղYGyuR)qv@V?阧'pA>d%c{I#,yN%%i?A dr?h! `bǡX~c!&Ck` GF@!>K Gj8+w<%lm\+#WlRs7qNpWP~J J>5Ƹfs&&:}0RD]k Q!"#nEi$sC\w be)! (;7BqiaGG'AoR+{cSS82B躔O(oS"TGBl~ԱO<儽HnVةV#s(>^b"@H UUEdmKzu:|_msѻ:l MCjlBw̗{ m6[>m^6 덾rs 6c(^E;؎Xvnfա!jEt:'8"٩%cp5& 'W[»srWvHz Sd7 ?όOgQax}GgGu7d儕Rb",S3;~6TAT8tke+5GBYv`c;e`[vU9&8N`Pf2 PEEV"WE"sO%75 b1:L [ˊ8Ĭ7Z|kuhl-;ͧQ.mpkO켥co,l+.bun }:T Uˤ4h{Aqeh.NW{l=`BwRڰg)Vp 褀Iv,ڹ-QBRjYڛ&s#7yHD#/w[@y_!?_@@xz {"(J|BUTi/p/˼Ġ,A! Z,:]@;En|ȟ$wdM]rƠ@_"~C¬3%]EU;yؼ F//`iȹL)Ԍf;ٻHÎk۠! kD$[t f&Äyi0(crQ.0<'AhDŶɋPnG{ރ-#g"*"E(zS):7㵺=7v?]1Mhk4y&R7a3 (QD=(B-1 rS85EbSh.dĥ ͇u@`TDJˤZ= rkloVHzkf Zs +[u8ek ҦY8Ճs̅9OgI!`ߙ9IJ[#;- "]H"kAcM74OݒD`H:68Mbj[ZweˊA5WR]uVDztsUBXà 95PA'AMo I`QPZ]f<^ev}`8X%cV$K!@VY(wgH ZoWda4\zنѱ|6+)&_p%6;?*kz.Z^&m:Hu:wL)_Vk<#}UM+DP;q-c}/7e h[`an"s{xNdaķE蜗6L0ʭs.TEF!DW;ٶ|=59{k>RdX6|um^+w6[@݄10oAɿvbN;3Ýy l6xb/ەʲ9YܤRXVPΞnBxJM0 [xI{H]l7у|_R5j'Hvҷu8pysVe8= 2h*ɮwQѹⴢ{55u:=ǯd "Ww9ίR@]l^( \J)j_$YKg^1Y"QA#-%QmKz#BǞR3N X|=rt׺u$[L=Uygk<~(J3 PvtS_ꪂ;2(<R`&UH.pI ]db(̗|c+I)_쉛l|yT`0@ ZƔE8fɱ^)bmB2:#B#7:4,z!0(BW2##w \CJmĴי|~󺸬M,V?a8~)"h >"ޮSC"x)}?ݷ')5j؂f k-:nH@mhcnxt5>&Y2$0r1*+cpbq _1L~UvD@g5yc$𺮈 <˙`I9dgr@yQYDF!{pL[~'WDkhp"7(@G[wUPGcfH2|UZHzY4tS0>Lx$i09\fIL[de](096O aitxBl$~mw'UiXz@P0te#MާKbZzVZrS7־'AS1 %Fv/ǝ9sތ|ޒOU?$:-^B́tavA#6q5cr\`/À@eK>)V1Cb8!DŽ@boӷρ#p|a9܂*G_bSJZݓݝN%J-~ʿ/+csB#n5x5re)iya>mq,4o0N纐[E<mʟwo۞km}ߧqver"VyFƟz@8+l׽Ӡ6=̛b$-|O_{W&h$Z)c-r٫?Tml,d 淋ªuWt~es,Z5 -ƣ]_0-,ɹgM%$@;5 =jY5@ A`Z]I7;kЁT 4;BV:)Cz6ڬdcԾ!7d"6!R)3B]jwnkfVr\,rR;qdڠV(bv:[E."(c;a;:]V8Z9u; t7ptɑEqϣ $`tH@B/TF oWSAڝk}~cKAݱe>4AU{w#5j&~$A"K@ #sAa #n*t52jY B ímc;,[+8`x+:-L\@M fg[pcjv AdEA΅N9ι)=Z֖fFľ󱠤TQU㴺J-N6~;v><ȚUShQG(t0e:WkopP=n!C`| l-2|CqfnS^`a}]k^;akyVH!aLrGl1"o :_p:;%[mx~UN:N&b~kҌrJ]a:Tk0nov°t[FZřФ{'LZacE}巻Xytz,y@ K@&0 r+2^/h+A!nZN^Jޥ/yu)A5;ޗm7)t)kTr=q'/Cɲ-^^{db|=g0,B gK&a̲uqzpD8tcpJ)'0! m`QZԔe A@Y}z Y?"r{g3G-:jXt@8WHyx?(,qXb !l(Y*\a4;V c ŀ>Q$`[y?r_,0XE$,pWt@nRtxgFi͡D8u9܃4N_JU==FOYT ӈ () P:މ3oScĺeEOiY2.J3iyˌDbB}ߓA ùwդq="U$3  \14Bʨ eR_Ptd4<of B.9dGff˷|+}IB |i~n9+fb&-ū?S4J^ꐇbkOv狱<9w~>g⟭UCa'$o hT3GJmpm}JZb楘EP;6Hn0 A:[Xlf,/+;Q7G"1OeX)J6R偦T &g5 I0)/|L$,PI Mw5osShy3N?>n¢>_aPw09 򐀡@FF|"Hl~;|BJ@I: ̰&_w/߰Jd/Vp69z.NvKi3pBO@]j< Rj;jv2IiA۵eҥc= VkvBy8qI9!>+|яG˓ h_80v>4B?5yW׹!?/:Ҭ4Ĩ{ Kovj_ ڔu8@=w۱z yO Y1rIqsv>K1,5^dۏ,(b˄$>3v!3_g*{tGv*_yYj1YiUiMW/77dԡJ[Jڃ^ݾ-F6 $TH2B!e3|7N-vNU{v"&\M("fA<# {۴||~s8"_f㌩dd]ǚITMgܛOֆ]voU߷Y;et{7 SmzetLٟ{26Ą b;-پ< &J!P~r4UtST(#!!;[$P  شҭbjU)^77 0}(ݳڟ֗hJe1E"Ohh$imk",FbQ*QPDmZ%mQjDcDJ Z`E (VV,5hbQQkV[EkUZR,jbU* !*HPTsbc~ۻ#|XUEX :#'*DY)&5Eqzhi'P+#;;QF$֝qP%l-fL H: suQy%]EvfrYĖxq8,zW d@:9@BQ?kwa!.n27o6ovg%0j4z^Lbأc dnf^0fB۲ LH0a C=E Z FyZ!09U@ۣ~ԱѰ*tqyZ#d' 窤DO3ru{w|q aܬ_Oa'{\C;6[dzMΆ*Ǻqk70)<F5K>gPw5FZ7xg)'Mw"~S4Ǎp)۟~xgyuI~i=7JOrFS+.2c{h$77j%pR$~>".=ʟ3`3p. YB46uwYL=+k-MoY~uÿSʙf[2;\3.kh80j&*HoUrnSfsv='[\8QZa lgbu߭y0N\5m#ݭ)swnXA&"ؔ,E'I씀= i9,Oj!jmlCdMKkO2.JxrA J." ,Apyg`5S Z @Ef-\1(lmA" pUݙ2S)^ ^S0]}>:; PL̚k`@RK>]):c|T:&[L+yfog, f.kFNfl +_m꣢˼>E, #W{D9=n[?)Bazp9jVudQ(,/!Hq FLouWgr~=R OO9C`|{I*8LH*C+O&$ [LJQ#}oy6s+!x"Tr0Ǎlv]{]G%l -凚$[ِnVOt@;!yLR-`iZ{\B:+R cnU/Xs. j'ə!%er%WF t6p: 9HUq}>>a (A tvm>uEu,FʃhUֱ}!EkZ\玿^N u;ˀ#(F;7P^(DeXA^$XTe SʚI:A[5G`>s{@wt <`KEJx4:Ֆ̐:fG:kоev{ФPA]~{ x ,+ P;W3vEñ}][cw! WW،1xH,Cw ]9VUмa4D;R/FVx[g !dVܔivR|qHNʾקP4CMU@1!H[,SE]^(&aC@<#SVPXd pƞsBB-Rvy_]\~ꁞ/}t.Ԧz:u+]Fj[@ޡ  8,].&ּQ],2M/ J͐K5z:CΝauʬuY^q,/I,Luhy@8㠱Dx` inz[~l?s<s1@6at`ڛasAϠZrQ,5-64=eB?xgK@K|%/*)ۻ瓮O۰z\=ϬM=4~qU` Jm{3p҇˺ǚ=bv1 *sb^&-IOzG6~Bu$be.[:{P9~jl,^i6]:s3ZkP_M.{GhvE/+X*PSSME;*wnǮy bbd}9+Rx}[u޿_nR}Kt2%+B< #еuִue9Y9dlފtqIލg $4FTfyB iv@Dsytdp&ΘJ`%+S ~i|.kWEvbNb|%mfwAog<>)pmatPm`9׼{&Q-lWI{Pp+r8L7[e鋼 ]v*IlnvCvFߒ|F hYF ͗5f` !G"汽%ͽZ&2-[0ەy̰W6~;x̐Iu[ z{P/͊k+[O{V!uEd7:6|τEpu`QfN˘=l]MAMNcj=,GOꚙ; H^2%)"U͏כa'-IgC۳ r9QdE,, E'LQlzVt}ndX_avb.5kKӷIݫ-8s:,*;:β$ĒskE/xow[6[CKeؒogkCQܾ&E; :jRȘگB5Uu I;tPɕ>-sJX >Wj__O_CGJ?dV ~Βo@)Ϋ|>MrQۅp6 ?-j`9jfkG}b@|wtG: ?dk+Wjszd7s[(.C7JL1cWnl&Dtzs(p>!H. `Xx#0/>JKYn-#fFXoQd26 ~uؘ0߯]Depa*?%} +YH\4q>߃M.`4BoU=CTk.U_Y7lTwm\iF6O_?黓gxy]o/gV #r,Y$ L慿{ NQxIHh·cӝǤ-tm.l#|(ՅV0=@ IfO(A؞}oX 3`'- [b9v V,{b{k XkITXH$Vs{逮~ySII?`TXTKwF9󤖔g欳MPں.mGg~%IVc߮#]T$ iEJUgtQ;3C>T(ڻx-!f.+Gz%r&;A;\@ Rs<.K).Z]iY/3s1!!*$F #Rf0Q/M :mcX!@$rI,{vxPnO'LԻPWtȨݱfkJ T1(jXep~soWBϮ Iho5((6tkܓvwlFR*90D,Kb{ˬqnݬ̵9= m=& v{)VҲ==4BsA P foVnzr(7TxmL|INC6 h% 퉯,7@ˣ26>߼ cRLej6Z Z`8pE9:R3h? S0׈@F r;-Lpۉ1"!$$埦ȥR}^Avdlf3 i;Mwv\u|-]K%˃EE 9Wk/D;ަز`-?u쬙7z:H57~o!quZ-PpY;f_=F%UQOr:(@mJ[wI5Y*pW> $~ph'XdSJjWMZ^?ԙr'/]rm.z?ҭfp))3{xY~gñc0)} 3}_H j9-UZha;'HrLl ڮMK_6&DcD^ᒬ^6o+{Z npFCoj"}_uwǻØ*R`fkiiw4,K9yqgwقM%tʢ/PJ@3$Xd1/5fU ӻ]O]^C9{Gj] / "+wX=:ũ(1E!¬rS_h3X\@tXqk5XNeLQ$$*\aV^ڶ֪_𢡄<~[2A<~b"{x[2'I3&p2T_U U+m&ʟ;.uow7C?8pz8GA{ݿx@m&Sa"S hu,aV%+GLn|eKHz[cK9~C:u+Bv|Id)ۭhKTYNo=S;9}EbH TPyZ&!HO"Fv^f"\^u J ڠ8^OXӛJz*()>~fff!oeKYf[%0'lr*,FFkkm&7 wLCjYk ^z(ȕPPw_ow$]L0h)-T= c~M5Vo˴3Pu1K@,EX4C23Z)-3)4CFrYaFG /rY _})n l19KwLXfZ1/ /ëZLjN }Ge,[Y?ʱD{(Opk20y,d@ClwZSުrjsQ7gM H#΁f5f~*jUDj ı8&>7wӔHZw{-;'$Y;w<nEBmqR9״n k5jfW0QmϿ c N@nRoIj/ sI^z]5RG4w^^TZ{,: !CP0Jk kl z?yߺ o3Ni3TY=Ps@|#[#}:eV?nvKm+lٮRΎgylAŇ7~uPdX"#7\Xe#`Bc錞 nBnp,Q*"BAH{RD= \ׇT5WFr>X\1fՈ=I$SG(A=x7GT/ѺȮP\tb9/~eB"KyQEu)^RAūJzxKzn%Fow}s`ᑶ//Wym?M5$,iUyP!cVb6Y+X7 F؆#Qu>"3slc/ovq־s]fNJdzdkP%qYSPBBBl1K# 7 mu܊1`0E 'ۄh.-h$奛~wRk> hw饝>է~yte8ɘtɮ$O (V""(MwP1^}ͽptY啨) XQ"b0Qb,`(g~`dmq*)L,݅J *G!qvSC,.n`U僜w;#.w&?̣ۺF$9ɧ`` sic;=(n{LyC١=v\WшUƯ$Xqݬ,|NJOrӖf=A {{'A]c~W{?s_H]҂exAHڜ|s$8.[ _H>W@]N]c//vG+͂8 +wP! DDgyuus]g.0bg2 G9#T-_8a,>9rbhh}XV^oNY7z^5o%҅zCooxnz|;A־fY)֧'f1=ƀ`fAb'l텀ƹc: HYa%B hǙT37]KRw۬,I ڬǰ7)quh-ڢ84'鳫q*ƾstjJD{1wo0qVZ бgfm^.z(wT.abU!pI9 h K[]^.MCkCK}\ˆW 7Z%Q#ѥ,EGFyt׭Ai:O<@Q|~ӿk*QL Q C[^y<rht<[K炋a^X6 պE vF^b;nhAqi.,c)B .q~ |Y@] utg! @cq=lWD#ܻ& 5(Ф^dN8@k*_G\;j^NnL ZLSjidk4΅wrZ<%X\a^ƽ9 l}9޵ y}5[sFoۇ]省thm5ϻF56ᯧMNnr{F+\ْ_J߻;r,<2ṽ]÷ j$\sF̴;$sGzO yS /3h^~FPm e~:|[p`nwvuIwe8l},K7h~:YؼIu^6<^Cs B!k!vdwGQr5,7. 0SyyTX:$+x #=PJ>ǀ׬>0M]?(s|WڽoavoC̭jfS0kߝ~i;e]<Q^ە%A]ruuzorI:U݈F!DR:N}(2} oٿ;dsb,BN1"S c={<|:v b$[]~U̠")@BDj\],0h5kbڍI![?\Ydg:W'8y:i'6Xz6 .pk~mou7[Ѕ.r ޽Ⴖ+p/u&mZW YA)"?MǞxCJu{&#@k*TTL0/<_55$+G.l2%Gy4/k}e~ 9&>Q$sQ$_K2Dν[i/ +J˰M`aυZ ee݄=sg2Q=ze8=c^/h `Rt=;($=-68u"ܾOyҙv]`@u2~V|x^X'zX~>HZ)>V\k68˷ӷ#'C0[S8kS.pgM+]Zm iBD Q%cqaU6gOK'27ףSͭX!oenynDf:-N;78hS)$e Aث&r,spY5v6oy>(:mgfTW`Qw:֧4`-88`(^8'~ֲϊ/UłKNAxVbCI,MhɺFlURwVԲ\XuԆpB )UEmXʋ` ^.iئ^~_k)T=@_E7'=DA[3Vѡ]ӸP/dVUu.Ļ_FdYh= zަ%$gkK{ɲ6)?ze}eDβk+:]&BF+$#1!j=|yE}f?Lk!F̱E*`+NHF>d,8_JƟhi}T|dDkmJ)mxOtBV#%e髗rcSޕ8WW3DZz{ˈd_))H_7PX1?'Ԧ_vFM헮 (A{uF3.qt+^JKnE.@]ݪw<,El°Eaw IgQwn0;wHyx* (HX@[t$3LnKKF}U#UMOyd<7\&h'oZAɴP1x(Qmτuh-68uUWH]FPL>ԭ \D}p72*PzaN`4'B+eY28}/O.yF簧 o~I˸1 s ^v lR( e4j|YFx2^epm@#m:MG"hDd4j8h~˰K/EA-kLpSz@q>o[U.)B3\HLVk _L1Ӻ5Fxd؞ccgf9/BՑM:;z ĕF  5xh_ik@\H7inO<^*ZJ0MML,kk~U' V檾5Yg$PƐu>v;/E;=97:P9JVjco5eQX@M|E?0J<57F׷ C>E$s;J[UG~ha6/@C3lx촻uW.(a|?.Kᣇܑ5w:Le͓n#i'5ILg5C wnATa)9Ѫ R7|fHml>u+2 H IY$׃DxCU.^faVo-9'{VgCQa-j~8fmvҫPc6a=_Å1UfV2UW>Xyc3ztk^3O_L[ EYw1Ǘ\ X Vl V/Ou7@-BW0|rD)@9".lHLUՋ;zѽ?F26Lfq˿B'U{[>=b/zSw|^wCkⰓG͆2_ш]~o>pQhU6.akE杜EoַwbW6\Ǭܘ7]A SqC\m|K<։%']q 5be)^MkgS|9̴/҂YA_a< QqڸixM" Ms{YoFdܳ6j [-fBFo.:0NX7Eyw|װ#%VNsEIIt؁L<5v~xj]WmRj!V%U |Iw2z=rwm: h>&2lܒ(6/o"v XQlYz{8U#;chωR~k'́~8AEjnW]sqSQi`B*3topjZG=>LUb5G7V9PcЗ5X(B{,8eMTo餅x:9!DCR] 5g~ir{gs0?70CIl')ـk-gp_sf!e*93%@@:võqՃ&rJn~K.tSS쥡ڡT7ctIqLa-ҷG\VCZUóLPACQ:}ƕuNFvKX{9c_P?\qnĤ42]kaV8owr(Gcm}YlVT~I,xow^o1TUVZ/ZKw+.O|=zjiL[k 2Dz@&%g IqkwCuG=IJREX˕%Zm@ _z=Taۤ_V״)zo'~ڗ &C+KSk1|g_/ϣ<$cL7?XNHD?MIsI?&浣[*x3woCZUVG)^8tag5ɏް'XqA@UΒ;E۝Ww^ݓ蔮u? EJQf dEpVѹ ՚3"i2a9٠1 78ʲ G>ɿ_ۿ}cF.fM&jUy37A!'1DS+'\04`B ǁ@ JAJnN J*qM3瞟th5i#I,NbC` _ᵬeKq7 OQ_P4j@eqAz!Xf`M-; ptjչ]и˨pkA2/6X@=9`ܲN]'h Ԥ*t;&-iїD,V hܣYPVMdz(1Be_G?򹟣s9Ec7Lg` ʩ!y)l-_iOeI0ƣ4U4ѓbO~7TH"-`/^kv[ލ{r5K#{+z/EP{&#m3ΞL#֚2f|ra=_j`&2Iw W!:GER@#Tg3O]V"z1:n+U2K'HAjQ(/%;E`V-oƎ_.X̤ S9`ok hWPxǺmer!o'2.dl s(0ĂR Ha2d:m6ld0] Gɩ罹{Bh4%!  Eׂ= J8jAj:aQ(WKd]ΆYF%+D$Ye2 Xēt=NhE"u&``(̌gmaJ4|Bٳ ?,dWf{[Tl-D&9 ,}a5Fi+Zf_;QsS:YHWD9nP>Q+Ki9 sӸEmm&PJЯz"u+Msvj f|og6o?h }eiLlnz[s+W:7yz]z["*1bs7Ο,PCOTq[w(aUF\!cM:'aLZF02߬(^X6|w[EoX]Zqa7xn" ;R/l\Hq~$,ogu/W!\@X5e>&#h=𗮻8 w㍧;hpL|>}1*Ӡ= j |g-tIqO{4w\ێ 9:cBJMe|NVە׃rؑv4 3հrA*3PCvN4(b)Aty.?(A'QZ*ݚ&_TedXCAb7|~Ee ?4,Tv;Bӓuٕ( ^!Z&2୮ٺsxr!T,Qqf o+sɆ^] gY鄁½ͬ+pnC &+.^Ql6ouOfE'Cq (xgK0H)wsL׍:Jip*fA:N_xv/_nm>:HwS9{M-=<+lX(>@m_=X/h1OP-PVKmA Pt`fdvHKOnRDKj V[(?-\|$yxz Q8 >dua.au\RaĮ[c9}[y-0ݣbҐW\8q1:()ma(B l:ͰԽhKm Ҡ,] !`'vK Ieka,BrA[wXdxa(2#/t E_syeYCΫ)z m9 ZTT=z3RĨU5XHR$ndyb Fİ^w F0Qnxdui` Fχ:!mwY0€)R_{wZZʹ9ĠMu:):K1 ב Nv8S4sa.ٍ$>N4mXrl>%&L:"wN,o+݄%u׫VX^}R|Zv ޺Klhҟӎuدa\SIЍ; _,&y?<~w&+.5B9V/d:o5/2ȓ"mτ[sfsRx^#[IC8+L`WdpO.][c`IHլ{43|C4ߩ[a.2 lbb49K!" *z{J`. Cs24bS{ m ?:{jOc:U/{=TϱwKdAe;Ū,#LeqPH2j*1vut20' ]_ޙz),RooM9GoLWk]YSƒ3rFgq:T ݴ{W%XoN $=UP8"Ikqaj[b٨WVPCrf7t7zzҾg|Zkb6s8 o}%ܪO+5lOJPrRn0pY-@GK GhB@IWj*U$6+Ʌ&њYeAaOL8q/]ݲ4h|T_\LHI+qz/OYX A3hyHa#@u70(R!Ͻ 6eЖ'SABVꃸԹא] ϋMkrO'/~AAȴ6w\{=47mA#[Rk\HRT{},;ƙvI8lٓ ݾmvkxKOZ>ҵS*hwvaz:XԹL\SP}}Lб}jffoEЇBtkNg(:/a" ۵lAPK'm];ٖOJn6]͋l6WK6}_Z=aȿQ[IE=@vM⯴?Oo!#Xzj<K5ŽN,4P ;$YyT}kQtB ,sXJ^.]k ֤1ĕis]yY&E m"f}XoDn~L5m{hrC#jƺeXZq+bBis\XV$lX\dVb©Jn-#mW M%KslAᙴc=2C6x/"M}bfԜ'UWr|`؍<>*< Fm7=QhϏ{M9~CksboU:tZB-tVtxxK]aڲ}jZ ̘v9<8,oQ3h%͡,9f 'RHNJiu(q74_ŝc"`w_QO  V.`_RG%o""/"nLkq`h9Kp rq7غ>_ms~ͬ`ۼnkktQ1a Je۷Yg mgI)2 Fx{eHƓ3[:E%-S1Λ2E}j?/S Gʬy"]YW_?:b5 cxk tJlO/{Vؗ=͍"3ڽX'T5ՃI3ޱgcimX ܥ=wGz6{!^;-FaVGOg?ga*͏CQͿ6S7t8<\qVWWCwnGz3u^ ƏˀiHB|mOpqORལZ|(s >N2f;hë|W5dtpPgw)g/g[av?kl 6.g;mɃFڊҼW|}eP'H8s6#b`a&xp/$4zv[E?}fi|K.=+fcۍ+ gzt`kc|MLYw.s bGLъچpeC%saTqa`"{C9%Փܣ_m _-B SQ,\ ^qܢXqk3k)[LzRׇFTWOLv`qb?_D>)'|X~ R",+x* "K)1 .9g,u !MȽ5*m̭m,OJ"IàOa:w2$ZQSFkFLY^?εfPl06Ƹh@S(`Z Rj֦/ xuyyAq`%% k8MN񁅁vKqHyu. ffF,ўJA`*gY $S(5:xCb`РC@x'͔J%D 0q ?#^[Cth5œQ\dzcno1l}zm_u>﬈6nmm 4bUPEaX@6>oPxʙ4Ȑ:U ~Q9_=j,uƯF'5N!C4Ic1XAmi$ T)klYe+zAetvy; R6#a0i{yW1,:|aǼe k.X|*Q# @Bwb |dl`LCCWGkteyZTrgd2_f}/E8ycg$j j"H>N𺅪u\̑Y\O-u2zTxQbYPޅ#l%vl3Ϯ ϡCPɱ Ċ]s&4b ry D*wyU(0oFgƠ'~?=' .~a2yo6nC%CW:x@j<"^9둢}EL3DʫѰ:n}b8) 0F(arŇd+۠+F6H!}g|X[Xt2*F٭ih Ӱ 6Ejއ3kAХ9 ܿX`Añ\=ieլ_=ἢ; \cN%Ǒw"5BeąK]~`69\> C[A=s1>\脶`@N(%a>z'8Vpk]Q)>ACtA]zo5+X<Kp7gQn~!hG>wؓI=Yxce0xHv"9|fK !7mCI[t8W8{oWֻXǒš ;~xu56q|'cU>0 a𖗑{6|~6pl>N\mWQNڙ]j r,n-vj^1Vň|[-1X͝#߱Iî m)J]/: F_y}^fK1ƁtaK}TQ=v n`CjsCLfNk} h$.>8~?h[@>lvmM:~K֪fI걇x P}Z+~|Upo9TE-mĽi=; sz}BHf}+~ԻK[UH'34/^O+XOp\GS}ᬺKօ}>mMcM'60.nu?Siuv}q2f0=Jw<sF,,`tBO hYT$CWKQG[/u`r8 "阇kF;o+ _יb#srgx?#t{1\ssJMAfiIZF  zoe+oBK\U_sVE|!i(rGk.}Ƞ.P%fvNxg襛_GMn sxSF~Gk#OZ Jڭyu}Qn.봜 -ֲ\ k7ͳȼt[W x+ 8`)ϓbo?FNz{tP.w=8roM:jWB| Z3)-[ݣ 9`ioO1>syQ,5|,Id}1e8>,`ZRwqM^{t7=7R}Gs>-+ݛ ͘.:NPYJP"#]LiJh'Fi3 QSqDʸz}lFhHngVN00 1^1-^JA1;!f 3j+ ܀Jf„W1 *-ǥ۱)z{5$@ W(h@;7@"EQ.^ zMpÄ?:#Y2lwS"R)K-|?~~دSVș2hA S`(BEH0j$~_¼, V=+BJH-,N?k{,c-u}f^~力}>Ys z])~9԰97> ;Bke2(?SH/% ,ygW.Åe[Yx&˄3N5 JQ) " DB%>"~to=(n{7'ӁWS^SQsNQ fPϞujE !ތ>;4 ,q V1xM$R,mY{758ba!㺍ߏ.^>o!gLCiI=yA2Rp5T|"Y,rִ$Pޥ1g[^EKm|krEYymhN`7'BC fR56BGuS%j`xuf! n=t)!eAH#0+uNmZ+5͍SݬPpQ^tiRސѮ߁mB,?ͅ ޷F|8X/#N1̛^+_ 8R`h"8]"%%n)[,?RJnҍ7Apxo\^ \ Rj""t}Nڨ@42*$(S&xPp wZdq\ VЈ8')9OM'4|%C>M 2!n?n["d,BBOao+<]if/F>n; DH [Ru<$-^D%ϸ 4."=wÕ`\Xx,>I;Vp!oof|+TԂ{SV\8w%TEx]ĵVM[lzU''3Ǹᜫs0YY/s^g@f}8FkީPG_ S@DAZ Yl|&fMQٙHӣ-^ZIZG_},Q=[`Oc :ETzj-* }DrʃD(~&SOYGi5|-V:RtQe 沞u=Ws8'9tr]'o'JgiEGo?SVPwo=N06rZ]x &W( ;m.ztގ^m xaDhnnKuTdLesuJc]h+7K=fSz̵_<_Abmt[}.}1拻I/}j2'9O8-AmFGhC-Ϋ@x\4RH?-$K"|;O9kvg\H.c,_cpvlnpxgq?;%)_#~9EN,4JG|Oi_` z^/=M6LïzLjIϕߍYŖ-}H]x?#5~_W*lvJW7m2AB[=c_U’CD˿'O̳u۸ͧ؅^aISP.r}=u^Gg#i>*"Gora_3e{(u?\$~ƒ$;̊nT x/i\hYgn(I= J7BPijwsB$YN*#]PW3QItaO qg DZ V<Ř9ckP~7K63eqi!CZ9_T-|m_kPt죶t»E>kH(DJ A"_T]ZU= tֱ@ӡ=‡QtF! (?R.H;.ᷞ+ O,s6m*?dX(kTXŊӂ*[Ub&kwWtՅ!rȵO oBWA pX!JK?~sL_d|)EU:,@}g.1.vOIf@=}C$x^x’r-aT v:n"'/*D`ld?͢C8֋EDmVܷOިydJt9<ʨ+lWf2D HRSJʔJS P(!ZLPYY>6\:aW*t1zpK=53W@Z]*Olغεe{β [I2 p^OHt:ޣ(w+j;R; 9VM G%%ШAAtVչ7uy5غ8W_Lcnw\"yL~߬vdrDȄθrQE=!bp!Kmu1 I p2ܞlp=}7ś=ʁ+EPHDV2AK !  "R&#MZTDDz(fCY49cYBZaЩR^543eAmi/D^ $܈V7SVL%~vy;2 yO|3ZH3{Oa۹(m~m@@!"`ul5G#u='!|ݎ@.e*eEDDBqʪWLWb@16qAvy#:W F'h^|"e9;Vj}Rh& Ja9bďjX`< ֦PCF=֣݉k.$Xܭu2,+YSKrˆp7' 60)[Vzˉ;Dj^|DwZ|:ejFvKJ&P±oۆ`|ҶOa~jyT#"2V jZ7NE>dU%>(_ !x~E?yt_0+t(rUV?.N1 o>;R V`$%bSZuP}g.W?5/_^r6 ޿/-V=t׼{S] zv-%H;:Aj|Oyd?y:ϾE|(,fM%yJn{4BEPn4Ԡݞ"y4xGp; m'{<WGDh!@1p@HKx >_R+xi lL%H gV5j4o$ּk dLgJr-׮,8]/SxvisSo]tU_g8-F35ȥw?gϲQCiIJ$z ـ1HC Gg2{kIJ% eߧPyG%$ؙ9t$si/REg %-)SmLӃiShTICK5)+zj5T 0}MNt2[``+Vd^b6uJ䢱r2Ia"󡙥1؎8j],ZK,4Pń؞!L0:d&`F!Lfk-0A#ӠXjcܡq2 (QUeH ȞUtmkItg&pkXr 9e &XlY;5&ei|cO9fOC}EQ~u'?;=o^1afPlj(Pb.x&7cbKgF3+#rg2Fm%Cr"+ee\nrgUEFZv< m\L]eU#,;ݻ߁!$0½U@$|wq>/̿;fokOƫY k*u Ok |R ?.V G.iXEJ@Gϯ_SܷkU! ^x|a4}P{hǀ7oYr ;]vaٯ8EB+w;Dptc3M_ɔ^B5şAg_WĬ;7iA2f C%[qjߴ97u_uwwVC-7CB1@W*ja|6ʅPٸz׹c(k":.ͿY ?8ԖtF1$%$[(n<_uz盬4^I~߬xb;ǃxj,p[}7A ((V0/wCATK̶9\W=9a?wU*%eiHp}%'K?QL4d"S:F's*n:  ۚ%~kUE%AlL΂hIe!I;՚R\x(^cO.eOK+.HOhs QM5$*R QPQ+ʬӶ\e`0 dA425$6rT.R6NN9cut?}q\.*8y1}(K"?Rlό_GE6IcӵgUrg[mni1iȥ{G?E7#o GL)87a olr@Lc1LV @D@1~Cv5?o=r$$ͯ8⦿SRըq8}[{ ~~xy,tsXu1I7@c -3xNs|3j3~n3Nq.Ʒ獵F~τ*ߠ|mk}'T$iջmxu/ 3Y~I5!f}.˫-z!ݾ=qLªMa=2ĩqz4-RCjl}=}-ˌ:".dk{Ԕy_\%]K{\k ˃kSj7sgv2n>n6KQBW/$5$_rdyԓ6@&ds|E 07(C:C3!@PXEI@X2T|S~#^[?gb~>̇ձﰭu1n;var I 3" Zjs.&>)Wu^^mժn{ gSIs-or`gջ9?5'C$ܶ(AQsv&j\quºg"s1U@4ɞ1]Ziآŝ-<Ŷ)Yc.<.J' JeAfvʒmwa2(zF(@y-c~=w^{C| K9[|:p\AD RJ -^CR4+^sT3km`RkKJ ӂBqL%j6~K%e'%d7!Wt1ޣ;~vyx# sn}ˬZ U1Bb0)(i٠;# c) CP)-q+5i:L?kâWܭ ) >5kZ? hsZZܡkszb೚nIE/[gY2֦.ᗷunJaZ4Bu'TUL25BMy+^syr?gNܙX V]XrmևCAйVoߟw_&DZ"蒂s$#TA#(\XBCv$3.@#AUCL#Kl6%XQ4@  ɡ(l$ l(\'KtNY+#A`Z0o9ߚkzNbFHt+牫\'|{{Wּ >G7ɚY+:7D3l h$YZQw]$~rާKOܵ\x9^[(7 xqH<OEO& J]m0d5ۛ:W[˥PTU#g<ꘓNJƖB cT) jӢk}.L+> N 3y:v# B2S+/?;!$0urW[民.B1$R3viNY%?9l[`ߓ+yHBH@i1͙=JN ;C)2@Pm'ixC DTMj$ϧgMSL:q Čk ]QAe\[{}:g_#@Z YH|gm b:ibTgpu*MzV^)]bJ2g&gų=ܰ $H*Ρ`|aҕ֗SA:`r7~K؟)F?P\ *ˠcun eM3.|4]v̇c!yVsuCPgt=o;^38=cnו@oܹm1Nj2bo׭'m:ՊV5Xjѩz,GXcIL". 5 m1).tbg;\넁fUd4>7QF"͜oZfGM 3y0fPQ)֙MCDFE~VIJ³ 4,45CX@z8GS޾,D)ٝm;ӯPs`cb}LM0j`z_juJ\K]>O][x8ۖogc۹[};{ܼv~q=<57zvpŃ'yjCvD N:G8Y!pD^5LiOؐ86$A&&AkE{2t]ܟ9YN̅+U`]Ou|P {ܝ*,R* )"!A w妘$ӶVqxHhtӎ@m (b)~\{%FE^8grr!uI 1R`R" B@@ )2j\lmCglrkT/o]0lv;At:.{T'Y>hA?b~ Y0Xdܳb_w0śJJF "kPgTSc jÒ>οѾ5ŧ ZS Cm" TJE4YR)!NR!3Yb+REV[]RB[fx8^2дZrm-phCV>7S8j){hkoYtޟ_42S/#_>wD'vd&l-o!o|oh<~;?S Rݨvy\>wBCs|0mC"эHc81)55` Ci$ Ć"EFej7D'FSVw~RGcH=KV5x 0\$QL q'Qgg"D$/EceO/9HLqwiŵßٰ[,I`^&I煼yxq;u;btO%2 *(y DaHY?uOT1冕Xtu2ͳ~peH~C.əm T*_40 4j0>҆,BIE!Ob]ztCjP#B9-/ʭ9/ _#:3oiZkmfștU\bدk '$e`0k;L1:#tK.{礯ɯ˽s=x b:+u@y)*=RC("umo!?!Zzu8`f;;o@Eިc*LqmfUZa$ԝ/htA4q.kHNaMʅ$XbTF ̮Sl jF37qm-1.B啘Lm>Kjs\8W)\‚ &ݎLfa16XnCTHRCBbClHI@P6R X V9@* n`$]<&dMZU2`EYRXVbqd1`SJ%WZ%d`([cE6dDT\RWg"Z\oIW)VuL0O w=Mmfɒ E2A!VET j՘riEd(n@Xip,P 0E*UCQF&U!QIUP+ ²( рXCLdj0FHZY*ZS2JeJeV娡RDSDT ŋ6TXj"4FTs0',NJiV &cn7M[FAEb+źd0U*044Û5# ܴ lY r&mJQLJ尹%\BTEUDHP5U^aЉ×0&ڪ&.P̩̲֘m)MIJ sx7cÜNS:%s\dRj`BSjUd!r}16h:ͷݺ|X`=*sdihY!K$TmWi#Oh]|ę-Xv ˩ǥZWӔ>[maުⱆZu3k9ACD@8D h.P6N7ں4^5m@62m]R$Ma6 _)=6Jk4mͥ՛AUFI3ZR@(.ZQ.m#p-+n|-ղwC`PMC%Yv]) 3V Ҟzƣ ZvŶf-تZvW]2٥m)T8IvESlF !|֜Tq"6-0ېSzԣ*%TPrE].qMjnc1) Jl ŨN C 9LAjӅ2#idͰ%b ]˴ 0_~w͞ՙ8m!S$%֜ ӕ> hYdl1w7ahC.ޥ"AU80,^2-+<;Y=4`VBBf,bW.mowZlh`'̷cEmXR垄Re*g3MY@ܕjN?^7Gjxr$Jۖ-XKT9Zpq t ^} ö'\V3ywr ]6p~Ɯ8.atD5 3X`8`8SEvcYn'׭eb3Ɋ +VXhxt*ʊiĘE4eD|uY Yhύnǭ\ 5@ۓd$n+5ulq'iJ͗Gx`p6tPg֞Aז29Z"2Ipf9ugM2]#!׃-TksdH cPf~W|,|-l5AP$`=myeB"TjJ{88R:`c3E& Fؓ͘8rVsAYVLhXLh>b&yR^Ff")uhxDA(&9?Fa䕀lI e!Lۗ ua8*~z o6բSM3o;J=&t.;ij׶PhEB>!TUhr 7"bi4o(7bTqstaiLr6Jɉs.Hwi* SvPŐK4UcB0iIXA'+#,a">Gt 9˼x[wIaZGau`E(ncM&v{k4MӐkYch"+m̅(q)m7ˢLd0R&֩ BW+JMq [uw@.faA!Rh@\quQ2h[jۗK7s 5B.7MFOqCl9T r`0d[5s ,#奐4ra"0E=BK[z(HPTQֲeU*^X\a~;?Kf~A2{$@%4V:OiW$Z=F'r 2ۨ!͜#x[!#G#}:vwԅ=Bҳ )-V,t騲1ЄHc&eo%Nu-I"E!)Xt1 ReeHoGkd3 @8kS%ƅŒPޝ?ȃI~O4$ΈW~ǁ.˭*%J2MNd|uBC;=_sUBaFS 'W*I3M@W),Q̸Ie=Z0xΙd3 wӝh%Pnl͹l"rF#3LS@E+x)bksxz] Pחy D1);Sbҫw+U.| *Q$i6|$=ORgôcC^^=|ԬYPpw^"="LUUFb<ݮ^/]oV[:j3=,)#3C:~wixbpK/L蹠Tm uO}w.y/d?`1qm'覧8*j()H??e`Ztd3e!s5өR8LaX-vk/73>l8k`>OAԠ"aV׀<NP6K pTa,=ͣ!ȘʺDy8;S^ӥϊXY;DA-]XPs1tR٫0.+fteQ3Agzˮl Gaښd*r'ڲhOc|f+#GtX\TXP ۻvaPu],I@2 ( 1Lx.oyJv9Ÿ~O<ȼӫA[Z~‘fC-Ymk.E뭛ى7yNe?B ~@);$eBY8K4#z?,.?I@Dƣ7L\{ ɰ \ *SW sU:+G$TPpV (SaG1}ۿPfUkYWolܚqg +(B?ZpGNm6ù&$*'dkƸoO<60]tV뜂W[H !cih|h Yw"@lP()a©Lr5%4>ā GhVW@-3/\kMEtnV+vub$DVcfVoyMicWSS"قm.olEhdL1mM^eD5?xt6bk³I^N|pjW0=0]c8.Y=6!t7+Y݁~]N6d:K) wNG kS<:cn*pD&'YR 3.4*`#@Pe$ċ1V8˖cőTZ3%R`jf" Vw:!Űsi7&+nws F$XDr ɓ?3 t`]w"hמPi 6"P1aX֭ۢXKFu9BmBF 9+z,LUry9T |`ڷ+=#Y'DYY5D`Qu*͌AF=|Gd}sDyN_f`"D28n#HYDRvF5eUfff [ldUgXJFhr4iR&2M>Cۭ圼5uQ #lg}?t\+PK*Gb +:g/CҕaLF푷Tɐ@+j1{^璽o|N$BӯzсzD6%+3x۞߭_6o 'wٽ??5Zр(Eʊ#^ӵtXND\ֆ:341^FI淝tu1e$ YrJE+Fʆq|z99NoC`f TFlm&c ;;ᬼ{DpYUd+ɶ o=Lt0z CT%z͙}g{F"TRK+ó/@c穪'=Ε0avWA>U`KN2y-Z-pBγ8T9>D{9ѧsq/,K*=ƌΌMz2M2#,J-9`}@l"|REA bx,SpЁ7\Mc6CHi:/h2ĺv\HRn:i݁j 9)`Vv+,p'"hƇ|wspcJIنu 0 Za鲐Xɞkv[Md"A 2`+A,yMTȄ.E7K* 6kqM@P\[ÓḱJf$Ny>u+mۦ!DCMr] 2dU%H6X vo,Vt[0\-^k=Kit.z^;18V\H떭P՟Eݗƃoϔ̏Wfq 6spof9̰[*O"Cf[[_%%a"̡rvCb?qO&Ι-Imump5 SaaKcW)eC=(M%jUP3# ѕ|0{2݃@a[d ,J ~3j䉨/AK 6z'G_75lTf@g|Hv( JHfkNjˡ("oS )zם!@Z Ԫ+rѧQX(H#=11B(` yVi];?/UWc{ og HԈ1O~vӓ4WJ~3Ρ˶j|6$@1UBI|!g Vk(p#8udO$+m!0qW7a(đ7׌B[M|$& .Or{.}>w:s5Ce}z$+/򫫺̵J/?!vn (T[L쒢X9|-AP\* M>O">"},fia+& l2cm ?g) Zjb$u[%] nau,#L+rA{?yl6v|I?DSP02f;*'i/|lWAOyw!x`TݔJSd6ͻ؜ *ٸ DEL޳uXօ lnVCtxQU]Z7%)M;^GJwS[gdymhx곪 hDlx=8:V8EV :{k 0!gխ́Anp1^Ȁ 3vwUC+FF, 0_m0(MT:80sx-a(0Ov#ټRY L,jwYsY!^]?8J)D?k߇(wV5Z!sbD`i!(Р#5z+9@Y(y?Shz?ZӻC ͭ"PQ(_ "M1dtt p*Y6?\ʷǍKH) &K\D3 yŧJBSyQf[^$l+E5(qV) J!P[|n6,@`323ltc(nHĄ|\ǟO¸pY\{jOXĆ;XWQB4] D 4G:uJխ,Mpg(s^*:Ȭٵc,Jaɚٍ8Q 96bN@XtیD=h AwOLED-K:Ļ[WUA h@m5TeP%2wl֋TMBp&bqR[?;ҧEQA/ugp$c0G+yJ-"(:x@DN t su/ UJ FG@gdƑesd {){>i 8Ƴurބ$W!p+N%3"G5U׎Ww1R QJ I*@gw澇zFޙc= 0뺀XHY}LޢF0'Ɏ!TJCЎɈ 9#$l1D#Ę@Ō8d 1o7oy]A[ tdu {Y{-ln^ #+ W8yq 1DvZjy7Ypc\."e>aDH)-UrXk' %@v6(Fq*&irA8:M.%(lB0 A ӁW3q eͷ}-+賫 kYhw꘍}!df9k `[ fK2 fz1k&"l.]~kx%P3)''`ؑ63 $X<θgIO&p8N|0EufwQ̢צ7P* a$ffZ"Ɛ=ݲ*HE+!]RMQ==i!QYoe&j-PQ$Yq19(vzjت?'lp P@GB 7Rb-0dv 7_'Ӫy}eaBsA% Xdt[z޴[JrXBiWpP3CʸUcJwVn~3̀RPKM 3|s=׵}T*U;qkm5فF!P:e;u;o0Ҽ nI%C ~SIR}dkd—Gf!iqV 'ضU{aPAMK(Unz|4TZu";#FL#GGSyN! "n85 O ^stpܓ՜͂3Wb E?JZ W(o&-NKV`UU FQ.qWxZ2vF_O7qUJd^^JR9St{[ s5DpRQC4=7ug۴"/HhgJ[5`N~>Ӈt?v.!VG=_]PA =!'@j몸Ph  گq&y4H@gx&1}B<~$00HO(eXֺUp6O_/p55v:zZ*ŭjU;WnCW)UXtjU;$-՚]]BTDwT,v O<3~ű,jE&L3o̪pXi*!mjtuyNFJ܎F2JjyTQ(w <i.r0uu qIBKmr?m [CVߒrd4$eh3unmOCC6ܢt)FJjzj`;oDW_oCI !ӭ ,ׅŀB#tHCI!B6Q-Pt?9QU @viㄮv GA ($SY)QR  -B6UT z EVHsVޔ}y5G&cLo{ݞB H _`Ҁ XOoڍ_e)((+ϸ`M[{Lgw{{NJ=, <lPҹd6@tS W pD^4ݹA{ tk4=}G(}R^u$郎BY^w!{^ѷ:†R!@N@E{맻_on {qx^{=ͦO]z@RETAJA>`oG $`9s`H\wB>#y1Z@854 M4b24i4Hzhd4 &0&Lm&MA @ hCLČMh0S141 m2b43&M4ƒLB!2h0@ C*o)`hFL'J~M G56=4d =O)6Q=OIA4 hziAz&&jSO$OU'z 9y?wtF"qׄi``wgC݃k%޵B̼ݧ2u`  5Et?O=uv-C5NMD4T' U͢0o I BWm+rt\eNK$;oK.X yї #YbVs<PWK_~].7>kHa:(QCV|<20?~FW Ԁy{Ej`D2~R F*rfk61U|yat'Iİ6mg$ĪFp(Ƃ2Dx&{,sm3L]P>1Y^^Mx6 @)ΟOř˿/O˧GnRYGN3GMiZD uQ7ځ*I]zS=`N_tfs)0IU3Y=~5wl]J `2:4*,}LuQR%nd8ü%W8ƏF@Ֆ{d#^#iO W4 Hu ԉRv$j$ NhI7Z{ .}pRjRC|YlCzFq(9`%G{si۪^o>-me8Ӧ|JNs[;n<(pw#zOm%QmŻe D/k~ߕt$lM3O\GPښ#mmLfrАrBa#@ <~dɰ%Chs8|}Wo|vmV6ut.bûN@(Yk|mKE"o9Q$ĩ(r#!.)?N,ZTt`c]W==]7=Ot}K7&aGaC\x*b(LIᨌbEDR 1D:SJҡ>[ $ 9n6$,ltɴQR(*+5VsWinaʘڅg{ˇ^nf0@ o袇.JU-A5 a-6"+J#Jb 5Vҵ XN`z9j 䒒-Oҵ^"$DUTDV*"ekW_a ,Q)RTXTFM$b/G\S0ݔU@*(Kj;2 :?wERr~pU\AkUm`YQraPmE a7~V,*"H'TU_ub DbCi_m{<%VxA#o6¡Stv7v9q!ԉUJ7W?i~` ]GɌX Y<dOc 0µZ5]3{[hCpnvg2l-ʁ$:X(ZܡA-TɫiL:,{&=ǀ` qO)(-g<i;Kt~>I%2(9'tQ̂&":Wg'ǣlܸu0)WoFGǚ -TV{Ը4JQȫUv:qf!E[KEm!$w:@)% ãI2ǡ}o!+5f]NAvXnYw59*T%W'fOsmhdZ80cں%Sf-kUL& I "1 }^7Uv)U 3,FWDILiodȷYMdM# }aidDo^'uSY1 1g@$`LF̽ "ű(!  M!T@$ #3b3.[$aH"2"U^6"ǵ!ϑM545U.: 9q[.^`3@$VFKQ2ZY) ;uR^b\r9$$"kf q4ѳg`бF(Ȩ,P@XE(AdF# ĂYAA, )D!*E1EYKEH,F1F2N4whH4J<4U=oiV]"MC$X","d1H`Ee 0R"&WEi#2$}a` "7 ԇ@& $BޗDUDVwg[k6WK߸'8Ebb2"S0*C<9D~˵S81`'~!)26 $mY(mq1pl9M!~[f幋v4fce4mtfmsR[[q2`M LYR$ a$ e!ZLګ[r 2 HtY 1!(rLq,0J |a̢$ F\fUτ.S*f2Idm0h#‚6¨26j5Y]Ëjt B1)Z ;FrqFhDw m Eֽ,9:mv='@ R̺X烺1(0h J %&TQX1kɳ'Fcc1pM`HԴ<3eT ?"(6eSF"9 CG2Mdr9H˹߇tmo5i13( Fmd#^G˶.w{3fcy'V:HRMXUY8^1kS%&p3xϬи&,WE*bp`/)x=8Q9qTDX'yٙuVwʌj T+u? Ġ:t?|s9vRКk ea@ 5fc#9bQq$|'_yo (1Pc7oֱy}'A퐉$ ZfBṬflp[r>,]IB=~eX<'{7[6JD'Ue;2d2U5,P[mtkĜ(1U$䄢"^UE%:HI LXek̹LXCTYv6ZmJ`.f DMe!C198nݶ٥s!uu,٠S{?v *;TB $~sioIqILZbzLK![.7Fw>QCuF S&&"!9mv|p62"!G6<<s ^oٳBNL6"CH`їF*ߑ9%WئaQI.xHӣ``Hɓw~R)eV,(2uhʌ73. 6jrgV& b c0oz;q)JB|jK)4MHzm4}u|1 ?fwaz9){Gۦ}0ŌDY"+0(6I 4IяE]K[scoyuMVГ-hiA7f[t:u_ycM*Ѭ@S $b}LI6fن$"f 0gNyJ7cjF$)l3L*ikM2SI5 DuO~mC*a%Qv)مnhX0.X"ܰE {Y ULq$1&"$>a녶gF٤ Jֶꄂdn۾Ah5:$Ү X Mt Mɩ@JC 8*1yNC(BuHukaNLvcqD3dh, #W &E&AĒ ~[tW[R~ԘCE;%;fLn'S`DH U1 )dUD *X "11VAH@X"Ad$Q1T\pcuc'-ԗ W3A%R$nI1F:V-t^c DZ\y (ç$HLLp{ZpjLmu-5?◆/]ni8g]w-7 ->Q$$RD(T9^RFqT\o@uf:#E)QSPSj`eq$ZGodlGJh5ȕ*y=?i+xN0o(n.?{_d'NHd ǿwhu{mm<.SKt>w7ֺnv3}BRrUuT{ɓ޵?~:͇ٺƽf.Gnb?s̄=$'s=|d*iv9+luK4~mWOk! I&AE徍 lq,$XX*4QYrK2 ،sg ˘tҬ\Gٝ3{O,P !u1 Q@D!s!+ 0GU S7h!4ъVM=& fYXj 0~{rN:zX"mD72`U=,E:50֦"_XLH8t: B[lQh*+ &ڼIDn;Mޣg6UDE^[x0A^# Cι'7kmSW~8.dV=/{~Y!"2"aHrv͜OjQU 8BTU9Y3y*=p8X5;fR{_OaM>ߑQFD2>N/ȹTLwGe&oG)@-m GU_yp<^k-4Xv%iyϳNS q3$7W|Xx(FI[.%s{;^WqZ.h2~ a[4 wުQ#8 $DďGES&S5ZEg@ g> 9C?6" e;t1s֕W~6+*v*zDsX`>}v+'Uc-)Q4q?Zutn<7mcKS!HWrKtݣ n"DnU<W*Av]f0 ۊ}9&qc-vw{Tu5|*Q9cG?NbE e[M5 RuQEPzZK@?𿋺> PH{_d3z_0/\[UMo_+ '%@C TO~P.+ٵVzBjړd̽j8$>8mx\S7}f~oV"w礵7n6%7 Lk+-y?bȊ}Jx=09;o߷rZQ6uoĪqJ˭0sRبhz nRG^G^r B(u8u%|Y* DLL{Z>v3r+W Z$H44]gX< UlZD?__A+g^1Yj0Q>9sJ?}Us(=B;f1sbgbnhԻea57bk{ ̕1uNtE=^f&ױr^ZyC':.kwKM&\n#Spt JnQ$""V@Ɂ?pSF~Tp.H^G6ۓ?iVX9;/o@ŅmYz,6oZj6{IFV_w%kN޻})ТY`$lW:w_#Vc(mо×72 35c{8"1&I0Qt.b(-%hH݄MA7a "xl\;G~[d-I$3aHMX" V `5}xav#Qq:jU럲 KØ5oAL%[9Ԩ}s'8IQ :eP=k)9k * :{I_:h^t7DZM}١#ɼ{//$r:@ ZP=8|L}JgS N`ӿIl?(.8ErxOL,PA(GQ b,̈5BљWba5ug&3'Jtlj8bRҤ)]Dޙu9ion~n+9;FݻV3'x =3xʢ %+N}90 i MVɘR@!Xq1AJ*3IV4(ptOE>MP0dB G?~bu=-MS0AF` MJB [R4W72 &E \ۭk|V =foTkWVRj<)e5%ɥ?9r}6gbr);Jɣeh΅H&p.T+6wfI tto+v$^RJv(2S8ПC>mnݐEgCIhSxe.8S(>y:ۖoKzdnC- jnI0܅x=OV01-XI)90&Ya~l40І9f_Ǜ(g;G7`hf$:M/ʙ@!Cv63"f`̃Xe4`@ 4 h I$0o2Q J'WSg~ +o J ,J #1twN2--Szh:t֬3 l3^oO'8kjwR,yߤ0E:D|*[ EA,b" Ȩ) ""bR0E* F,bDb1(# N0EYI$n $C^~,W&'dx:|ٹv/%FzK3y}LTkKCFmg24s)TCA\ QYƁ6Vo.M^/&-<8}1iQPHR4J,⮇.渳? {W2HEn:k[v^xz[nE`'03rQPi*HJ$ !9d a~:f!'9Wky,'[I&nV D8a%&$^<,\nm/[3u)ł3mS[GI :PlQHf3^3k,+YDZ,eFna8¨w5m ,J!(lȰ4صZٛkM869dYJ5N% th9C8ٶv $Pab(P#=lVLt՛ UdR 77|t(w[SQ2Vb\ֱS)Kn 9jeA&㬪 ٭қfG,֩ӨTXqzo6Ta ~F̓.Y<$]ϥ^mQk*3hVT>BKJQ_qUS%1 !A iβVU$Pi.jbVds"Aix]{^AEqHX7kES2 P&t#5?zaرɞSTj$DIJ2N.GRf#sUUdQ,+2p*-^G[4ʘN]UMFcp.t@}@bص^ƯvuNkpk_U46uL,|sAg|Ŗ`L5ZiړNF<oMGAb1yN~eZGTOJH4mf+O/g̷o)7S\2S_@$GCVtOmG(6XR$3b"_wHK`!-~G5'AkU`@%4{P)+,O =~^ogsgSn]&+(4ʩVn&ˎygі "йdsHPk8f'5sVKg#JLlU ic \-U^C!k1'RߺUS*RFL[&Nfx]EtvvMiTZ0sF zqJFau1\~9Vl9qQrU jl8BZ]ZJy-v33{_C,uQ~5;d*l$Sl$*?Y gSTwLY>>ׅ2/,6n,N~Wov""Et!L302Û'Oo@;>M+ǝ75:NC:1DWEDJf %D=1[\cx]cNp?վL^žhjZ >>֙2ڷQ2jI1G k͜'KnvER2^˸IjyWnQNۿP =Š1SiZ &,[y}Sj-\Cw Z*(ͮ>V|7`ߛI}aGh0Axa0-K.sSrB@0^_XZI~ yXfC0 Xeo^*b?͗F[ыHEd@4b Ui%ӿXlv萱ؒ8TNJCK}.B !mF*bC]=I1\xGs% 5 %$R%1 d96z'EW}D(d̺Ԓ 3BHR@LFh]5Eo,#MvݹB9$H H8ʬB0)h4AUςjf-,+\=۶,]mkyrK #FA]2B_usђ߻Vq[Nu@sHEbV6[aP.J,< z7`fnTNSfn/.73y[S%(@ G#J@NFV>Ý6c aMyO;!ҽLgbF#BX,X"*TDUE`,`,($T>wp[/(EKO˵K.^MUbXi bjs쟕gm5zs̰SĪdZPp@Ts+4nd R# Du!z;b *D'S,4 H* XH$l -iW(LxC- j#^dY77cb@I! (Zb8-7d~a!ʊBBCq)*TƵaaef[TR(,NTN<'j0$4"wTGK(OW "K6|#SOaRm.BK8l4,Ҡ줙|> }bWm]l 2_^b[P@xo=WLw=D 8"L9@aI !1; [7z^.پQ#܂wcw}Ռcvdk?i3ɵȓTLIX&6UIBf5a;t6*&|4q!PDBEZ 5{F ݦE ~bYwH[QT *t,b *ܣ2$#)LF6+  Q:"h֩)&bXg! z>O?1zzfCHDr*T*CX?hKΛ8n?LJG@=^ LDIg蟓g@o(O"w嬻&3Qs^4$#vA:AZUI>UGDvfq?YD<$s@ܑo܉"q*L4ab RWFĨG#^lL2PAL eXFhۭhD\͙YޒPuu, j% >н4[ ,5 (L9arW%ۭ7KXD0D$Q0"><8f"R Z|'©`Dm[=˄e i ͥݡÑL9 }9y2?١(-T΂zc 7cuX~L1x>([nh!)R"3ѹEP!zj #Ȅ$hl3T-SsX"g#URy),趓ܪQѢdWT[:߉*+mBܴ#Vp@gAy|O7rBb1]4ͤxI >D9]j']K, )1VRoYGFWވnsc?pt1b $VcvsVV*SpxAx "ʡSa1x, # QO$ E^R 2j²v0++86LIOx\$+<ȣA'*?NjQقDX%y^i[拯 >G༟ֆRNV f$!yrhUe=Jx,0IX }'+Lg\19²3+C٧7DWȪh<YH58u+`By-tf:pL +XaMZnC,`DC&ˡ^zZ9olՎ6]A#MɚXܠdB4GG2ÙG)A퍲7?)T(SGDg|lj}kRɞF0F- 7'_Of.ʂ҅].DP&1[Ωh Fۊ,X DDL<ylNOx;Q0J +A`r-`G@y#{[̪#ƙ 14aڎ|üI0QOŏ#Y }vFH _OmnCC.Zͳ^rcC/$NO;LVP M&{7FLXm[r98f}&͌^y>@$)y)C}Ⱥ70Lj*ߋ6M{_F[tlG:$H 'D&2Ek~? ep肈1F(w?SFe.%|^qz?_w(>lyIl{r1@g똹 0?g ϱ~38=_c#ȯc@A3!꿍Ʒ+ WHQspŷww|ݡNz8Z@nAweYW!uU P5rN==ݸD*VJ- 3{MKk8k;ɾfg:yXXas`Gqq`$E>,(Nnoo-' bq8L_Mv^ejnl,1BF;^s99 Y?{ɿAn{v7U;EUd< "LM,)O3RI-!jrQ gm^se|P@w{*$- "ѽAj57e9 ![}#n/<:._ H"D+xkByUEA'gήl1(ٙ;dvgv*J,Jt !7XnM.͹i:jX Cܣ c;Xn :H„o~3iߥwP2uX ,?}g>Ly(&}v`DAY&Qߝ5tk&b9"\vrVY誢?ےxydk-*T5j'4IО$͊;@'z#p# ~q,[IsL{y>_:}scR_Y X`yN҇ƉԸ:PQW{ϡto55]iTDbaD+Y +x(РI <*RP˙.DEAyUڢqJȇ"Gvr Õ=&R!O뺧Mm{D zkȫ+jS\ɰgv09t.(@! @d]', Oe ~'x| 1v:6FgU8Jڝri~㤒$c"&=՜ }^+= ȩ!䭲r!= /Ha5V$ jt;Id1rbi' K>`i۩ImPsX@"CSy1Ә+I#]tsE0lk@X-$͋M=chV"Nn+E<3Qg&'aD9e#~?i67ݰLclS+rI8Gc `i]4*Xq'aG~!DŽBeC` ҀfcM5Ŏo:"jBJ,R{3~ W_$-5wMd^EYRL?d _ўxyOj|<.JqU&QXkֻ8ڈosIG#\Lnxa}T' i|d?G1KM`n"jM((B~O ]JT̻aZvs^4NyꟜ#㦎z4Z êAXQD  =._lr2!Ul&L[>'7!h2SܾsW ^;Mn+DBfWǚ t0*Tf#pb^{pˈsjG>nm0'gMZ`dc2×S~pH]>?^Q&:%/ Q4e$xo[jY׾ȗEVJUQ>H& MBfқ'I2lE|yCBQE^}pDGZfa8QBΖm5Xk&c "Ы9H`ޝŽSA#K!#.]Ŵ=#ۡ} TkV1aNm&쏼]bV(Qduˇ%ED3X+5jA@E6AKj-+EHn[UI fR%#f/w>/g-y]-8 vsx9 @<7UB+dH>tc*)aY˶;'fJ,CBcP]~wMU|օ Q{{(0Er&,G)GR(V #lU1p`ursѫ*/ [8D<x%lP1N T ʃ߯xOpG-q|;;}xITG^*Ot-X#d]nX%[r}{uQLyql^\u*E}JRLz'~cv̈́eH ɣ 0:r4Iwe&31+0yH)isQ("CQ4cxP㿘I {nkU WҦROQ 75c#(m{lwGD't\WbĠҁ' &gH,2?zb|àCBIQW5PbE<fi {;}ܞEfqojm:ؔH@ѻaADn[2׌J0HPޯFlgo\!`1^oq;F_XG[%)"a18@; 4RP &2{oeE-+巹/>->J6*9x>?:`yӆDLCEg]䦅Ꙝk8U5*#\{=H?ͶʱIK FjrǼ3fYmۃCR/SAFbRb|i)`&JNYw:7F_ HܑUړx@ׇvN̑./tvvvF:Owl#̤{P3S=(r!A+M$ 衐yK>EUvǹ%躄CS+| SmC12Owbx_$[(9)0,Sh(1 f7ܐ5=,qvˈ$/99 V~c߶ZNGϪōS!ĺ|t3`4*b:aq}`_ _Lcw}nDlCvz ;v;SgE"|ҜI4OM<9IUR4^\؎6" $BHbZ}X1MKy\d<>*{Hp@D> )Ί* @\ $h" EA-P࠵@'BCVEyR) ,<^Dm?N2`tIiZoEW+!yXa4Nn|]X9UQ䔧2@(Eڛ:wc~d~l\."rm"CCdӉM$ X$b'c[u~*oN~ֺ΂/b+g3ί̮o+ʨ%U.8;7o:8( *ZdVi`!<`5z 8m1QS[A%d^QTsX;Æ^K;w7fШw2D[oWy;&0ճg8fܛ U4]it '<j1d.uXD@PǮ3oֹ'RmdZ4;]: |<}C }U_'yEO]{}.v ߮7M?[{" Q; Р" A9 "5Ҩ@e;x^(A~%"9.gXD\q<€("| [rɈ}o (Rg 0!QTU N.(#M"~lݐXF0U (, &CdbdV1"=u"O"nEj쩜j"AQCm\DU8'謂(nPE@  @@Y" "D:'o]" <~@ Cllr@_d҈y0ࠊ#u ; yJT8kЎ;JcDd$&xR6籖qn898(/Џ;ACuz62 vPN2 tQE ۅ".IsUiO v~^[E;(!@ s:?=O!8nڃ6~5/W3| f]%Bj7nhܦ=3w(9۔=<.O};gc _oG"#BC*-D/㊏9<DqN .xJ3:D="{=˽P` tQ<к*')bY Ȋ pnxD;x{( S͊>|#o\h^J2h(|bb@ $h 4o:ˊu jTE6&??xz>wp,c'xtȓQ6L:$W#gQoq}p8M xqp'P</; s{߮tqx|nb?<!0 J~//7.NN8hDR[pԟ;W0Veu/GV7Cs1֐Pp96D+Sl}eK[L c&z=*P cWtʊ5E WuR%rqYG^FPz@# mc4K@wqaҒG/?fO"~UlIDcR8Z%G{qzA|Gt'[UX#$!#{3@HlR a9u^iz{r90:i#8M_4 ²$dBBD E!?YY"őH," UX)"$ ""H"$H1,,UREU,P"EX"bYYXEbA@U B,YTAd"b B "DAA`" `dTVEX,b(X"@Q@dXFMu(hJ(fϗ`@Qf qJI:T1`EuP{lݦ2{u3C.. ׏T ޝ5kxNE'݄`AdccxcY"$D"Ȉ,) ) @XAB(ĄR1dPXudD"Qd" $X@U()` ȈE"( "AbTbdQI,V,U/gu좁U;<7tM3$0Idǘ~x3 yZOy@7NP#p1%s_fpGuܿ?#NGzLݐB,HX("b@XE,,Y,EVA@PP (H,(F `E $NL< c P3oVICwcɹ˻9c9RyR &̞d+wvL*pû/NL\_59`hN `g$c5Kp檕qouzlf^N06JvEMƤG!EF>&l_]Qd xkId]֮]цpvN㼖Ŧ_%*)!$9'lHt);7%r 94$szjJ fRdLJ@B@F {ݿԪ\sVX[ʹg;W3anz3bҕ`~Wmҩ0a5KՏnA9突F(AsYt鱎a4v4uU;+2[s:6 Ij^z_O~̝&\{QWݍC JгOi٧SXjv0-w\'ZCri'z,~L2 a @7ۭPgMLuE}tRཅ-.:v17 RHv ]7 ''YW/A "3v9Wњvf+=>{FC^n0"κ)k'S] QMCgcɆ 8D@h%P 095M+4]LL7e-|SiY|ΥBB9 d8[R&i:x0~bVBxsXf=ux.գ,\:y6<LhAVΟu99ר*|῟4zoUA!-A~jB52cDBW`6]ۅ1wdĢk%Ix(ȂxV}wܔlX7! QEN;p@@O&.w IeWA7˳4x_Ch{P)DD߂"‘Nwe6* h5v *ΞyIg1UU׷@* (N~ "KE9{*a Axy↦<4h"/UQñADd6b @8 Ay {|D (:}K>; 2!Y9p%z `A+gN;y#΀ {ZZKG Q$=^ uUbiղugI|vuC$ᢿAx_m!,Ш~,Qa3W/g{g62@.)}y^\.Uo$).u M@#\!p[MK DYo @ ᙭Y=߁(Q^X׎G׍Y۹G uO xkĀRG!!`"V2n)n}mI[&jl|@dCRU]4&۶sI C,Pjtv_G5m|NY̩6AHEX,U!5RGKU8c| 7N/Ư`cx-،S_o:mjnvŰs} }IɁC<ͿF;5݈WґQ?ˏ' 1VlM2bLh={]oDv ̍~.cnN#ͳȫx/;3(.fY=|;AO?05qLBT *{3?%wˤtT%| ,=X32nOUW/}yu*aZ\J2]ju{kӾ2_ !G;<"活Zw@1$ϛ'o1ϽŁ4-4U|mג!na)7- DA@%dsOԒi$ 9|pb4->TIEY)iK4ʡP  oܼ"vRCۘj"7ͱulӱEBلe&fǹ=?=?;:^8uJֹ3Da5hH(%j _!ȚGO_հw;XI#cWr;r}l">Spҟɘ.IUTUb3663_uޑZF\r-DCf]T"{~GpEbOR+b0c 3#:*ĤYc33KF#Cc?V$>Fa#h^)u)*edJ$›ZqӃ٦H2 @[@%Ѻwf9Ƙ}=op^?7XQcWH J Xcy+$  H0A$^#γ*6b˪nU?Y{SE^@=!R@i`aDsBA%^=6pw ?/U:Y=_v|h{>+D|W< >}4HD(Pce9_nOZ_G,,i^2P0:D$a\3'%(TQ@rQ~/ub>yǵ?x`G 9߄sC,q^x=O-D D~>^_W6+G@@RF且햬0¿o}=.NxM{6GGv K}:H,[YEݞK-QxھJ[= {TGz1 8tD"IN)D(ߛ=(s L'x]zzAEzZO!@Ķ"%UD;7wOEg[HxܝTZC+\_Goby}wv&]Yo7IPK>.W|D '[4uD651FƶqCݵQ 7=ٌ>Htc}^9{sxn;qSmo.YMd"HJL3%RپL* R[ɗ*dk7'j-_|satn"ȝ-0d/XebCujQ`6:ъ ‡"ZNw/^(LŽRE9D2tG~I)"㍺nVf0UU1)&$ ^Y"i7TAojC0)mh>֙rB;#؈: xS{tJϟ2@ܪ i] M d6Za iI9~ZLħa4rt/-QAy}鸫cydt۹x$v{v^cX'6Z-ui´zu$H0NcfD?xӧͬI e-(7J '8(1\/~؀e DN+٨7""~ &Ȥ7HxIwlJQ#b{r<"@T '*D^/f#&w4(׽x ӛ>) -ѮɶsތUQU(" ZH(*IrRy//XՊR;V!.,z*7cv7Nwnw_"7(7̐z<3 cAL9y"8XΟtџ`v;k0wyj0o"Ow<;iO:|9FUE96Q4Ðl=B Rȓ}a_{|A[XǝcbE rI$X;mqTGQ@̨ tx UL >vZڵ5Am^_|ca=}K^ ܷ?I"Kb<ĕ>yʚk` n j%[m_OAaig)<`jYfW˩hPu'^򵗼VKR'XМ_ggvcb"o#.NN,խヽ)Ȥ>/6E!UJI%iNk^֙ 'f)7)f.81#3ugjސbdIUZΟ%5m*+Y0W:'l>?D48wVz6 /Oi'Ek=Vֵ}zT6mVXKnͧMHiKfJ -Qba\@Q[0As, ܴVVܹ*W1 ]mvE+] sB3__Ƨ]}d<B(oz~r/]`Edmi$P;߯o}.3? '6Z9r!u*)P~~ ;~at ~X#VjsVCʒ}V5DѪ3.yP#!8ΧDk BmuQH8##_v]Nr)?>plq Й?jLգo"P._?-{O#\YWP;n})=R6ޝ:2Hv[6T b;=ZM$ ֐%N,G:e_Qc7ĬK@(! 0̰)yje~=>vo즈D0!JA`8x<#cԕ^ rGFo H2YhiϷkP@ A5-v~EKE0EQG?]PO\\轾efwX,"HĖuAwHWY&toHb%`kygDcCD֍Wi2Fr"@Z8.&@*:j\Oǯ(FNHS" 2HRb[[kC> $S+{#Ct !O+ze9VYBԟcsD3:cTYBw}|P˝ݠs@㥝rnj'RLDّL_mDr 4F1\f"E8Zd/E;f)`=P Soy+8'JJ) qVatnG1!D{^5.w/;>nG΁ó05` u{(|2mVlYI/ Z8k#Q$N8ˈz$IZS5),xny;$ @,4p!M@BBِGO'pw,@@ ®Q'dA0l!6Qj `d:W%r__v>3}z񛘈%hp AWgߕ}ONw[?PHO3n)Ũ#b<G.]I3i6Zov/=Aߧ*Q* +yǗ@<ϓ_ |^H$s}+j &5Jl!4 *r899l7Il{@z Co~Br2sma;f$Tiy~_.DG$>R+1E嫷ix&aّ`-EV~7gO]|N{jM,P k4Q1bׂcDHw e ׾;|tPHP?[th 6)ggozڡٲ hH-Hj:G~v"pա)fJp`(ޟ!<~?Vnƹ_F(tɵErLY7;vKC\j3P=qpLH] x}ssp +Qa$)Deb"ҿmehS[ =@M}ǖq"d~vkxψa޺KW}_ci^4?cH Vj&GHq.nw&TI]OLi>\MÆK9L[hc<KS>~o8)|"kl˷#q#]us Xї't cP",nYY$ȠP ˑF(Ȉֈ#gS|$?-bB;;9eXIz~WX/iV3C#6wQ(_$W[7rL v┆&=r`YBK!U=qC$>~?c>Aƨ%Tͦaچm㯶}y{TZiHT=Ҽ* -v֤%.Qt&Z<fh7H#jͮhK IZJVZ HI=,盜–[u&qO[,m$Z>C)W =6p*xVZ^XR߆LxIn>axW@o0y/[塘8utdfͩZP {C֫4OQPd=ۿxv!tH]qfuE_gBY %4S2)Bgbf&P|AWKvh6B{.oh<9I4>۰Nj, ]Jv6.[]M,t~/iweƻ1!1mocB-1P_3"~qޝ~fyv[9r Xn \ϵ7JL}H)EJẽgsk!;ބ lh 3q0(1!vIm9U⹎Gaq =jV2wWºT7v,x1MH$|yn.'tkj [HDE%^:%rcy 8 &LM2'”q1s:2ŻU@MMh+o΍$k_P0GMt1PFL BvPՌ>R E%a!8OMo_ǎΪQ'8U9@4oY?v!R?^'<7v'Y<CjJk2?=yh=^']Ы0Ӵh@s h}ucIHAqv7 6*Fu'`y=䊰[Mӫ8)m\~'7fz`g;|L&m6FcMH2ӱ~D+nr}N͓yܗ:ge+pAS!E/v}GEM?ܹ8š,$vhX;_}4y`xn9 ҥ\=M9_ؚGNTn'_ 7o\v^qP2QVfc8aU@5_W1h[9l9Lf(0FWr`l[%y"^Jo- BdI:<&AݑV*B&AQ]䇉!S>ۆlM UJ,%8*Efi$cK ^"h(:۫;Ir7Ώ4Cs GaD)N> $4Ж's($vڬrH  }~=cXݎOEV\9`lrڸ=Ӎƺ Cm`t[NwlwOqoC(FȌ=T(y3 &!"ߵXR*vbprD%#QEV*E &y" QCIT)[&LɝF_w?C.^Y +qWxQNvlER?ҧ,KSQh\L jPuUin۷ raDEn^slquG*gƁ=n[Yn/;j-_YȏA}y&pMןӽ>7l?JrEFHI$$da!WAAb(xZ& h 4P5?#_tN(qFquԒ#Ji沦 ~Яڅ@L,@iF )K[$jxvݳVEj3KZ\kEϵ]_8d/8ūH7믬{lnq/US^u~ Nȗ;xE=\crP` orʍna|G;rO/n#l *GJiv-{~ -ӟ9vqw^a/[L7-{u{5i_e9jo}LK Q,T,EE!#c tޗx}l/]nf!.[:wt:fh- vdGR9Ϧ~֯,M: Gwy ^oŮ`*zh! /΢A@$⨽-hjW{.bݝ鷅RA?_ix5t۸>_'6j]W~u a `ao{?ON#k2=ރx[S\/k.?MeL2`D F%Q"*g}YO0>#vYGy +9}S&S8!$L<?"XFx}a|^6KN:*.yλ)l#KmwS Fa Uʖ5WGO>DB쎓(`m*ǀUswo1?V'؎hrr;t$*6KG|GnCtkyLLXaVc":Rr.Z>ϸ~̡e @4PX8ZYoھȱ[p&ڵmYo>_וۅgz+_h%($ʩozՋpN?;kW=sO^/HWY9|ukl:GI4!]H·{]Ȁj!)Q D@BEx*`y|hT dBNׯkܳ}S\_Uj]5c pp;ȿbmeNqhZ 4im*z5[?͗˨!qZBtuB\u?)33叔$%Y ^!+ P@F@gqXd]'\-i@a1uJlN؃dP<2eb4bZ)u^_1eCKZ&}l)lr(FS$OyV&2'kW3cr¿Vn;׼U/G6ڠkc[^'dw*:vqvZj'GX(;5fb.Yy{<5Vw}) ,'v]\b Q|If|O;r'{ƴ::Q]]7lj2VmӲ )/u΁QԭqqW!QbK:NjC ̞d |v2&9:|Eo7f`;s? ݵ,*9ՊK7lNGhRΦ4nT"f&X{}LK2CRkTd|OBߟ>2sg7|L#nz[oOn9(HH sP陮JNDRMq>%? nWedYrS8[/ B1QF |[hgrt/#\")LU--/[+y{2T{RDba6&cgx>vׯhoq}訷\ wGc]"6aj4M4IhR/q/ZPRH;7W7[-_'EZmA79+X|ќcO*pcS"mBYAUA4BӤi[v}]1>{loss;6^ 6,HP @ E|N @eD@vY.wVnnl29/ ?NF򸴙"6{Sar `aWZf(q2 _r#->o@}yB%$U~?/)Ue=ʜ:]J.=?)l1YښUZ Gmf^&c@!R ![ouo[|g5h$8s|Eaorm*z1{ `,H9;Jqoрt}Dd83@*87!@ a!@ (ɇ xty4V*s!ǽHh)h" b'@¢ *`dcA74SiQ*0"%b_f 8gJ|)U# p0 џʝ-`%y;;vSqY{mU.KJ:hH) , P1""*:w‘3"PFWHc@ 0AsY;GzHiR=4)[7OET* P-"Fwmrӭ$Q>R8n>IOO̿KAy"bKx d D.4wdݟחj琭\8cӶJҭ( n>2(F@sͽV h.~R8E($IBI&kY/-tU P F(1TБID{'k~;/Cg}b*ZQROF8F}fBT叮R'0*}_Wm13lUJj E~A zDX̟ ]=+C5]͕w~g5m"PYJ 퀡Qu$v_y"e 3˲16 "8!T_CVIku=oL!W9s?Ż `@dI!RATd`"zvNP_f!G3sy\=+EO5;i2.9Gz0e &3ҿ&Pc&i 8S(u@.dFr9օeAħ~*397K݉fUa|Wy5 cF2Bdorgg+@ZH.qw-;3)F؉r^H24BE15F&#6p9!M "E 0uTbЉjJ} ʻ0]`ʺ^ lR&ҿ3UĴUmJRsq`ˣۧN 骒e5Yf-%AjyY,M+Ft+Jp[yrrqUo&K\ڵ?MJBIiO+,Ǫo;H:ʁuP 3-Y*E MĕgeJx” wJR ^"tvFŕ93ZN"Bx=蓶7'\M4!JWrݓ*3urbJKh<{ Vd!v,=Zn V+fԴPu\"Yu  > I}4ý9XS=FmM̗Q]k x^]smJZE`IDx8T+O6zXJmnɌ@*DTۂA)|OÂ`m_>>]j"έoەًN&?ʐ4墥K#:oU,S(IBH {L*=]hMݲםڗ[rrkrHG$F:'-QZĶZ,ny{tbfyNf&N%]6Т >;7)3͉̇MQM_y;)\%W1ǥѸ@zgC 2q IoWx̡wz?Dc}x|տKdsw8#PdwXԝ(ɜ?&1R.ޥۍ9kX $_`1Ad(M#5ߎΉTbMQ6jcK]HnN|Wr \^ ݬ;F^3Xగ\BO64_ eA@r0@ߎ11=Jї=$lXi\c7j"+#{+/$ּt- B$.7 ۪P=hZ yO/i۶=<O*V:\ڐdگ%l9J-WtNGwW+ DI @E*(*b UQH)EF)"0DEEATb $ y8f:8}52@!L2q;)=du]M!$mTnޤ"6-bЭuZxB؏ ; yxqЗ8K;tmF׽Z 'CTA-DN>"D_uZFQW2Ǧ2ٚGHkQCР@JQM䤐ү[t+bG7pPx^ u,sL]2P1iV;& ǒW K䧾P c ε^$znY;CY>^ s|)؊G7Y=3l~::bf6oW*]fB 'he`5I+B|ӧ*"B)(ׅX2N$, d8wS]M%߫?U|<.6x\ԟ;Q<)=e+L% 0(Cz5O;{-D,:.*.nm+cЖ(JGz,dGER*PP{6Jԟ1kMYEJNc~J#ѿmB8JT#J>?9n$(Ue5 $_SV^[Oupፄ`f' )U ZP$A)JTZL \;XT4 A\>aUZ`z@z̈V@`c|l8s"4D_ h6yqe}ϝ"Kiq62qLD(C *i^{<&9 |BJC*TK#ȋYCt.)\"Ӥ~<,=OrkR2O!Qٛзx=ʶb,Xw+E6){'L@X38 Y]S$)tɮBI}Eh؍!5JI*w0,2MTe[4p@|w֖Bou̕mS0vChy WHŏNrߏ?ڛË"ӻ.ÏOiZBѰRPO;.tUK2-`G>z, "hD #㟶៩n -y꩓IɠZ4[Wz^oKTuk;ʽX ɆΤhK [N2Юaf޿̎3(rcϥm˕9H^L@ cP #~ 5#ڻ&_87o6WK@iik]R/R<|}OWtͭWa7}io !{Go)`l R|ϡ,n5dt5Y,>ֽǎ,wk-Wgrhi}Sqixط:8dѐ\K[mƵ+/kZִLeJԦ}޸$`ƥHDw}\]T z-"6IVHb R4"ƽ+hwrϷ{{a(O?mIl1祝շӥKBnG`zY㉾G' DD x3!//aPf;'ZTp̯~246Nɛr1`]ݣof:fIhuKokTw\xR`R#$cU.@"E̡9'&FDBB2JanM"Y[" 'RB+.zs(|vʦsďܲױ-||hgګ#e8N6ռ2/:廧9WUXIuIK{˷U`SU|O&o͠d{8 :qXmԢ)s1Hůx$: $ZϿ)~wwc $p Nq4yL]ġa(qpatEiE"Tԓv;A:ayG)'NVL/(FR=/\e j"5-R1-ύ'w9ۭS={Ggɀ@raɌ*P|S\eD"B ?.3GѢN$ՈyrV! r U:I&) hƚuȓí(!I.HMRpHD?=&9B6CT~~ˏqfn),|oSnܺe!U@<JRWquD—Mq`*21Tu8`QpWֹ!ڔ,%lO/Jt(jOj͛ƠE[ &gu[_Zf-تГ'5.ϙE mL0o $)S.l 9%gީm:qh+; gO]EUOuY{3n&r2#Z6*o #4O;O7OunjKhgX|B:^W7 "ЀV7sC&_C0%!c{~d{~!eKA/= / ;jFsNLSi[COC aBJ#(l[ᅒ;EQiXq+ak[6& ImF`dDjD}k XW~=~lTIRDRi <5ͧ& p @< $#ipWc>%~h8jc|m@-TuN>ԲBRt&2Fx. ޿גo|mPVOgdvmOYU~,'PewRnGw{'`JLmd@g>F&ΰR37n9P/)h%3YvKiJ))I,QH1Jv'xKB<-(q^Dī.GEx!o)=+-2ҥVd}؋G0yM\TX8۞[$Yh`z#Wq ەJG[6pzcǯ(a3ԉVr6mg jНjvbc3YA=p>oL|BtH 'sORRs:U">2.jG[IX&) (/`79ȌI^;Gyٗ/8O yn-wn,u6s"sfo`~*9j9"B. `yj7VPud#CnXjΘa~&Fq!M둔a% :LebtR/= l^m[3OC\[?HC uUo&hk\XZ'EivcYt0孆jė6?z1ۗN- HY@U_SV=҇U¾O{tkk_w%Ǎ9@B {lvdNH% Uަry+57@|sTR~W,Yorҵl;ttk6[źRDqrrRb _E-HE9!e?a7MCO}B 4d%`C hZدRt .- H, >uDhsOxٳY7iӏ6d!Dj;󲑊ȩ,`$1`-J /0\ "zOOӿw| tD (oApb[ Q"2I䀁NqO{_yz|emk~V;c䉗HlH#6utZ$Æ~KH+fl0-fed7uɊSm4$]Vh2V/8NW=N> [R|b,iR'-ОmHDWXqoFJؽU< {onUoU0ZYciH %MD) $V6ipftID@H"( UAb2*AHoՕ8A"ERnoH&Jvtbuz5?o*PFo` MRp0i4iޚyK :=/н"lb BY},~\)}ك D˜П\͜Q'qm?v#{;kA0L}%\i1-}-C_BvM\jc)͒„Yiɕ_R! Wx]͌1O;iqepKFɽ9SԹzTE}n%GEUi孙5c :Y6x`9<= =Kx巛Bd1RhEV!=TٙN/Lc;&V3W-L$LKV£ gn>_#k2.pe]E~3E~lȡO ҽ3aTe+rƬkyD6y9% +U#lҒ⬠=8Bt\r;z{rj&ʼn0+<%3OS7=ėRh+&/^yg 5F89]2w$I>)/gP]K9#ˣ]#X8(z}g͉I%cC $SZy3:|Nk@J i2He Hn{:!'Cz[k q(-6ż[i'zLUYQWh}bg7= C 0s="=hA% C|XUT{c I<yG'}׵]>^Go-sXdZ%\٘&:(s i¯WSE~ &4ZHQL*";|-1{xyӞ=˖;c'JB ա=6![+4#^l#Xyѥxu#r1GTWE;>To<3A$,u8Đ60 NǪ"Ct:<μ0H̲ʁes%%UgȘVfPbYϓͽ4 V,˿nsO[(Q H8⮨wiB@NWb2toķ3E}eRċ fp:^w3U^7%o6mYu7S9b9l+{O}!sk}:# Zw7N9~-ɲ#ـau#/k-FGmCq Ko/.MSÏL$#l&:hTDW늫w0#ݾ7 mzz$iґ p%W]TpMRյy&c/"&K(&՟I'ⷝƜiJ[˕u)xZMi*;%#ͤ#œoܙ/0Vz*kNx(Iph+R%G_1~g;Y{U:FY_k:Ձ4hv)6%/_I] h3sQSwj [zS]#P0 EMEฮGI.h˟\uHP0]k){քPt@9d<Û^1Jh!_C,G)$sKH̙'á&d/=PSi/oC5NUGeML٤oB$-QZ|F6䊂/OnW<+Q,o=i˧ΉS6=oRu2U;]G sZd<>;Rh}AjXSǵk>{gs{w‰xE 7A 4}ET\@5'g!#c2GF1 kXm`f!d` xXP;[Ȋ /{y8If<0,}ػ|/\tu4D9Esli72ִvڬ"Etjvҷ1fw Ei!2uDŽ$쯣g&z H$ |ol%nXPKb")PKd@i{N>olRT F Ygpo\^s iB":rXH(F מk{ЛpܼF)q1pr* QxG/WyT(ϓfE0`v9 _#GםO8p)`0I*ˋZVYfl9TO*i(̜1j=tꐲjJ L}5Rt+=T]Uv ^FLu g؋D]vl_*=vQͳlvͽ교 '8"ZE*^jw^d=wZHa;L??4e"'C}ΘzO{P@^›RO=hcc Βx!K |++}'d?Fb:~G;B]&EQ[KDaĪ~Gd5{P]_u}E:?=ıkO~3MLCiED۽*܅:o/DxȇL@15muT$(&8m 6@rXm2<8^Chg| ×?g(}8>Zv4b麋 )I"{ FAx(Td'wǧ!j钴ttBҖG1$ռ/41ܸtLTSQDCؓzI!Ui`Q&qWbXd*UZ-Ml(% 6Y=גsukpM *[w);Vvە-L܄z߭0>鉚]&uus8ݷR컡QkD5\cŌ 0*|WGwQ6vFh4iP ԡNvS:MbDL9V5ZN*[.8]+=VFnwNa[t}D88vpBsϚ-e j6 gUi2Dt &8rlQMKVTtjݖwU2%B3y-srmW yQQb|'`QL;^k!JSP-= #.hZLC=]cm?${|,j#0b D4|;ӻ2O*\6! Tn+=/^$m0wɇxWى9j^8<>/i}#ʼw|͡l` 8\vwι‰]Rz{mbakLǮ66p> <%'Dx o+kDx9c "%# @ Uv5oILqoy1.DSBXFQ40Ґ9o!2㻪c(֞MWF.JT!iL*[q&@Y)BٴrqMʍ Y<)%>"׹ڱ~ǜMĦv&j cnhtH4, ߢuy]>=2! jI Y<$1ԊHشB^:xMrlR4JDdY  IS)cq(P]ibX-nuw vch :жZZuz+D^jE")t8h>O‡?=}vBx߾Tnaoҧj#IpsD AW}zqw 7;s;wJ 0&wz\?JYůhw[E"=L'&*]Z(H@="01 d{XEt6^gTܼYs8no7so&I @xA@LV ;;]`*zײZuk~bt5UEQj,2" BvwU_HѢ<ǔSbӋ|b%DpY$tұlq6赨`&^?1RgLA 8Un}?}t#E2"P#nG\B짙z^ MoSVl(*úUآ"uXW#:8,;؍Tut ofTxyK/.#Ex.4kFH*+ܫR)խ+?>1G]Kyk q,T>s e!*1IK=Iҋ/ daGc niw-PZ͓LߑŦ_vTtLSvY0΃+,Z"'Hn%l~)pۗVmy`CT`(EWɲw{R$,4\/i-os.^44 EBA!ϡQ!.!db|ԧp<> DO)ܹ6P[ġx1kCuw^,:1s8kW5Q]:C+;2ʋZ.%Nxi\à}eR$h a!%^d8^$[l`R\fc!"}"_JxϽItb(<"-WZ#WWr͕m+TD %]-B8+[-qP핐m)RK3CGAWr1qDlւ.1|}[BR|kb0Q>"{365Gn\VuU1 t5m;D>1 *mWx,C= Cy6!;Y ;=]Ljlӎq@3ēIC)ܤdd6k0ɌHH oT $RW5KڢjҦ#36$-t)1lﲕ˵Z]Qqڱm-['k>6d;`zJ=#h1 CH|/r`B|Jـ؂@[{2\xlvS; 8ggenHQUB>, H E\KV_޿q=)X$"4Op8\azdGb⸴dЖ_sYrx'1*\_鈝 p:WF;8?R(Z)Rh}0úws.gϟ&GGu:PRQ-2ŽAF *V{vt lbsѡr>*ӡ' y0].袭#fAupn#AXçdcA"7@jIk#vp{2H~;wڭB TJ7̺v Q !XZ>W_o:{y 8L`>!R^N̿ksz⼾&%I3Őh>]|%w$vf谢(F<} KK+ PTzh^oTP$Ghz-"J2]|OY@3W5HZ,!dI(PA5ŀ20;{+yL@ #e* (PA'LPX " KD(K$V(FАAEdiJ`DZX Rň"ň^+چ ]77 3X2ATAclI-)B*$bPFDBb5,R2)c-$HFH`!"0BXcPEDTV$hR+l,+@A 0Y$AXE" QKF*F#!F  KdˀTb-jT `hQb UE0Sf)ۃ@ (,U(R-!aP(b* ' ֞tt(Ja@bD"AJ2(KY%dPi@BAFdb #r P)%bęIF(llA1mdV(`ت]1ʯed12 "0Q٨[DQ_kt2s{f?/ŁDD݊5#}ѠIAQ,RaD R@D ddX)!* *H$"$ `,% P 1@bF5DQRd$X"J2Yb( DdBPH+eIHň"0F ;+X*ƨ"1* h*dYvcgnv?e(K'ATUI{;Z޳Ms:n:! "7=l̾TIe($PDZw-H4>xu3ЏXX[w[:[ HF>v5A5CkhFqoִzM uK$ "P>cu|V ?҄#Tdf:/>t2HFJ |j6#BR;H?\?>uYJB)w^{C/iʂB$!o:.~FYZoOe_ЛNAUې3AQEU'CxP{AHU CM*$'!1J ES~1/jrE' m503vJm $N攠GU)ŧw6>~uJ ZC]'+önЮzޢ&HRXGYEү#ꆴ vö;?gykqJdoݒ^6j$wV豻vˏ(̔QLWIjUɸ&up$DDE C/u2׻^-?eTC.;%"R\svHk5)5=$;hfTYa?Njx,KulŲ G_P1vvj.}rxh+տtQ0)XZ|V]gT[|~J݀,aXgIJl]HF7H<넿UJgW:F#u>O+3W2M&XvIWotz?-{S8M{UHTZ[;bH3ޔw^+;:**mhL$[ ս4ab:̽1et*Ei~Qdcc]M7]dLzYoͻЗG˫ ԇhZEI:BRa$I.SZz) +TmPL3QS1|ϸt@{* Zo| 7_ɣGqdr#6B/R tAp@C dvgu&":Ȱ}Rz)ETȗ>W׏؈ĨjDGiwKuٚ-_!ǒpS cԊLkHKړH4A0OGVcJ ' @2]}o=2ɘJ@dE wBd\Q}[aoߐ6:pd$?jB!#;. @#8 ^'^7gfM~uZ:BJ&+SEuC33?q$(5H^im ~z.ոS>~ &]4Oy;ؿ·ؘ t93l@9Auo6+3DD*/ERY~!P̕[iwm369;%]J|8-5'Ow=/ƙLW6@[2if{ɝu{ $ewaͺ7;_&T_綼ŋ˙S,A (ާxUK(9HzA a~DVOHS9r~G?|mf̡՚dPvHYsj(2nd, B@`G=d+eq5ƀIX=:M(W'YR"nf 1%+JҚR`>]̮}o ʸjl_ݪJSN۾N%o[/R%XYZ׷O` 丕0WezI0=d{iL^q6}E GŦt(j7u ^ٰ|j#.RCCG+KPX&T˲ddx-exIm.*Jo{t[1\Mز3acQ)22ȋ˼җD]b~*;,׎ uI(>"7㕪NYҋ"ô*.Td`P",du14/5Վ''n!{ieI8kŅ_.гze̖.5x'w#@%QtMa- =.H؋#;k28r=D{52w;-c&PΕ\zUM˒Fݧgq{Wwy ʡKV'!NKmM@I57gҵCd!PmN*Tɰ=5SdK٧vMv^ ?Mk\wlO' ~Zsteĩ9ۭ)w ="2 @ nsL_~eÛzR_v.Ź,y[A mtZ tmr!PREBN\Sk=#~y\LR i@B @ lI"zd\E+b,sa !P!7If @4&BlM0H0T8 +QU %d7Bl9(i#&S777a\*wdᢒ DDbE|U#hI- ~9<ӘAEm'AjNq7ׯClgxiP/%4yHRr#3$"q ^,9"t_.Գƽwitca!2*H?~?(~/Lh"xz>l0K?P-G*Hʩr~x|HlMz_K=2re2 30r"0`7o*ly@!ӤgjDr; *S  1ca{LV>DnਭAjè~s3*# 9Lb@G|2 ,,HjJ$M/Ɓ FNNHe&ءnY(”d;)Gn_ ϶n`hV rnGܬTi:9FP%;Xd"(HdӾJi+)npף6w\ΥO1w*RtuLoD`Ih4Ν'otG f`HB2HB8"xbW1d~u!9 pWǰdt{SuC4C @cF(ְ֧WN*3Z~m]w|6! \d C}N> uV LkW|*^岦¶9BD #:I?!i+]񡜟_VvIOgZ2J1-n'e$d8i㜾U@~L""T\"tmX?ˬI} A>f[r3N;X m9(D6DT$ylG])V^hd RwVIVJo'L&?6 %c*6QSh´jDJ SCU~_-:D|/".fmt?w Q Šk4RWq;ߥP*%3]Bss׍;֏vIFJ/e/$s?qC @`͹sUE.3GO_*fL>`OfP3v:eh2OqZ 9LHb9x\MN( 3^2e9bhbGzB֛#i(UNᷫ\SOȓWDwe 9T<8M̀hnztB= :ay@KjT궵Hߙ?sOG_OiN}+,qBe׋Z: E0ٞ6&[g(@qL!InyB+iW;Hsʽz0`GA24闤+3%H2&~ՠty{K\XS;LBr@ H0[Ye16(b2f,{Gf! X\S׷Ԙ4".HrAg)j}V+mlސ4AbDwy,ZǜBy̤LGT%ܺoaHٹJqƵ~٫Տ>դںMۛY5f={v@_gldyw dEG/s.^-ȫ3>=zoQh?jM y'XOlF#̭*wsnkbl`EJdVOBm{jBN'3" G5}/sUrBYr;t}By&"j>0V=ʱk?*#ཡʻqi.kvhޱB>93q __G40,Ƌݗu.&xĆE`&XLJ T klD|C|%cWZc+5P8\ZjyCK~Gz2u&]U ](TK P_Mxvt1T> bE$*`,`O{Ҡ`BmEoԝޟO1\"bU0uyXdZ?eK%٭)gj:-(Qc[aZsC'f>zn3G}K hRtsKl?U L24G/|W8$Uvy+uhO47 &3Ogbbr3=.ŴoȐ`ͰVviT.QQK\KŞBu'H@/Lw SK?.#ixa=Ξi<1-tw'{Y(RAsmXC 8ړ'웚N\Jd<2mqn捪4\'(.y<O@BJkb-Nw8X1]޵7͏(|Ip]nvJx|iŪ]1~z h1Sw/jJ9A[xaҲ>M'> ]bSwnu^VlEl⩎˱͌ \7b, `ð_~MǖmlC֥By:[Nvpky|OsgW]AZVny^*)ۯk=u%^^>c2ϺU63 7㾛m*it!FEmIh{7WqN{Ht+FY-;XY槽^ö>XdlIjEf[kGc9,W7+K^1&ꊱMH"x($aXjdـk/t,{'5"7Rrb(86X˚Wv.4iå\X2XT(ڜ'0=L}zHe4坩I<55e ]o?op[Nw =M]y6}]%,϶b/vz=_Ӿ՛J\7Upk^>j jS%rދ̗YiƖHĊ /G߫^}Ǘg8oi+^>n HH&}x7Hd QOs%,o1WslzntV|roU&4g\ OctT#rⶵ"F]̯kj{4=|px,N^5¶vS󸨎 l$v羖CIwo6*4gŷOso~ͻMu~7byzCs8!,S9r QsŢ]U-/uzlۊƘ'0se[>/ӱ0H7(p/Q\3o;0 #LwDD޺F>{tscvh֟'h忈?2{+g;k6zl6nnomn]\E OGdKᤖ!(21bE%mk:IS hVDXNGZϋJWXXDHGLF(veI˝fQ(ʓ;r n!C9#'@!RH('k !Y8XhVbk Q`UcE HU dUk ,AJFF ,V* D10d*eeRF"QYeUPP÷x8w$5DL# ȱY=,+I6㯽7Nl9$UDcT]\`gKz_0 1\}g392,`-z'uw@niT7(6H 6iFkJn5tNe +$_Xŷ#Id+bn+sDchXMQܲM>|uE:X#HLy߾NW S:z.څ~3#LxSnM Yv']OۢwJK-QɴDmz.EZrgW2m}{lza8& F UP4vݽ_WwtwҦϐ~\ÏEtd׏xy}eÙ>U/^-Y2tzvN%XN`)B.MWۏ,TH9RD> q@C[9# s.Z"Bgyߞn?CpX~MU}=>sGp0iIw[c!M'kQU;b|{'4W @}=O߾qZA "]'d@lÿ/C2%Ri$,Y —%]þ`qh6sA  SQwZÆ0s><88Ni?[l=Γ*eC1 !8;ކjcQՎ<~ދ3#ylJ"2mH%@o8vFx G;ѥ䟹XEvN a$ ,@Ǖ~O#c$=qőr%{6%š4fVMm6klM/I6_9) UY#r1=/_!ʭrAUO= ޑ+?Ǚ}ԑe"sRYև< 9nd(p ɊmXQ@4!umA !(BoG|^~[wWp,f!w5s'!("xNZ)aV'7k|G| $JЅLe^g^76yw(I!P_'hnˁ{(ÀXiG^@- 6~:<soċP&ȁB#DnGDZYϋH] @3AZj$S#Bnuna'CH$|WqFc$nR#ϜVT!r-bP Rb%NC.d?\V{8e]VoCNl4K':KջG69zl1[R^L* I~Yf!*n բ^nW?f?7i+^jw70vrIV'Olխ\NK W>^*;h;ҊeKȱaLm9;k{BVOWiOr&ԝΧʟWKV;p*⺩᳅qɻص1 ŝSpϝW\vU]f;^ %>1zXo䅷rb۴;o֍&l7jxoCz2>2ͤùibs.{<> 8v-~Wlrڮ>9:Vqs6_/ҏ8͗Gz[YWi'b6r}c+ žYyҎ͌| u6R$GE3k7ŋz '{y>fms"nϛܜZ0`Pvb+j GC<uؒ/4P B%#T$&{%'VW0z󷳲0[(njcOƶ7YS` ]O;bY.i2#_oɻ)y^ SԢ.VZDiEXz+U"5︀b`$ِR zo(Kn +%X$ 0P+"ʕ`ЬJR* PтzW$X Ls-jIbSizr~bjKӈ@NֈY\kht7z,Tr_bغ$!R"EVB+ǃj>Xfxx8Sb"@~otDofW5z(IW%{FvkۯYGc?A.-%&b]%IDH+~=%h;Hޙh;R"2T4bk{IˌF2hѲR.UKu(MÑSZs*[>tQߠ;5(ka|&Xt@f{Sv9>|, ," 7tkk^s6ou:TQW~M~;?z<ܪ -_e~.boUdžH!L?~Vk0:K21bƟy7#mNmY2#vyq&SP7~(ain}Yx1?&&].pzӄS8%4Ω]ϯ6E}Yn||5>}:z=wjˊ[ݿr6sƓ+OQZUiEC{b[&pU]8)69L<+YZ*pn=n>_F@B0HU* F 'ڈmg+ Ē׭Dz@xS$gowm{}|cwLڛ)*Ab:Dk_㾚}Ůs捂#eA`[@V(@"XR%" AN(S$@T!Z<*i\*@e҈Db%Ha" hOJ$FR7s~ku/ 6+ ~=N7%Y (B ,֠EEo˄gyg6N_XZtta*+JJR"4)bȐH">{Ҍғ%D:T֔p:EdH"$T ~5 T:d'bIF?4crp]Y}^& [15+PѢEņv*xq6vJ4@N?' ¡j<b=OjHk"W NsqRz GYVR"M0Ň ,fW dă-R>^?p!Xx=ǻ*e,:<*)lSLOYVoyqM F#8BJ^t"粌Ӗ,煉r!9͘/vͽeǦ}Zg%SJ5*~҉UIu ɠ3 q΀ (b"%^ !l-U]uZM0G7)mE94\֏h~2>)a吺X됻# )R1H5Lw%{.['NpH.㲑 Maw6v7#z{6߉}ɐ BPBئ6-'KߺǏy-R;6ssca_qgoR+aƊ:oL|P.|3NA4_$,$hUv}Yu`;93䄮p_E"8@LW9#&`bAlnFKO뽨e=]5C`NX^cddVRW%eA0t$ po{͗*vm,5LU7Çi꾛˗OBF1$ʔzs㨱f9'!nU^ŰQY^NP F#F*^(>g 2Py~2iTuKG{],NNO̲U/'(xT4idcP 5#3u "KU2=S6g"{3ޏ4ZȵQ_%aKzfl[;znLr4>% ?[Kj.Z;Fq\RⳎ':D:1\ " DDD `h]uG^^F[3=ّs^g>w/l^_Mm:AE6My1/E |a f:~~OxoÍ1{9?yz>w]_wכZ|N`ɨ:o ~Waz>bRlNi0h(nwIjې$vDdÀTqgyE_G,lOkyx?}OzK`~=ߣ@`j.balOmną uKʳvs:%hӢwݭK yvUK-~}x溟o߼UJSE_Ww_/}b~dUPq+w?koKiuU m!޽[3>;uBy_'Dؿ]f3}[w:N_EmW^Ok?r3[ۜ7> c r17Lx?(T8nimn]V%@m?2}2EPQq7(M_||oO|ouLWp/>ۍz>d6Ӆ}?M^>—bFXéj7tΊWiM˽ook1_j)t` @9:8M. c 58:MاɶWU{$5a۱X! H,`)7TjnF>8cN*š6Dr13A<5d f^t,mHRkWѯmlg;a_^OSq~N= j*/w_Zw>|5^txnN~+wpgy?[x՚-g6u>5W}w?#+w~Z6{b89 `F,笨˩fz>W.H5UI-gIª(rvy?pXXS mf9 5`o4[267YM.~Ww]zZ-7׺w<&o7u5CV]?ݻiמFNi$H6Z'k}f "]K_q?菋^rH];ͮz˳]pϟnc{NU{!י+= y*N:mGd=OZ?.635?zM'j08@ # Iȕ2?;Lq?Ɗ c3a\g#cJh΢}&&W"UDUE6T_O+ *" 1"3GxQlJ!$U('gv.4]a~\ ۽A|KlCꛡU2>&!ɊޮN}?Gr/"ώH{FzAq?ʋE 2V1/KZ`?k>Csrћel?#P'.Ϯ-uyjMɥC]tZ\}Zjd\忈 KEmSakrsvu\wgX~Kţs2K(Yގ0!nTݢָ rQN]쮓DA-iR+h6PTjmKn)*قؿ`X%K:ZHU2-˜qV0_ٿ(vƴCzƾ H~=N% E&g (((a׊S4zk#PQ2N @#&1*W o}v6"EYXz/捄Z S""cqpmqf!m+E[U Y59 4iB)-(f}}6YZ*Z >mum^_d@m7,QX?QmeU FQ}J Ō υE U O`wn>܏S}o5=~>|3dyGۢg*òFN䜮Aus9(aN5qkkD4Ze"īn=o鏿?#tRދi:ZL'/Y{sA|Sцo{=oOߚ| eV?gqiN55 L A\CfB?١?/\~/92F "AX>S$)UF*~űQbYEb(QcX"t9+jZ≮ZdXTDH1bQ/ ?ق'ڿ-*gb~CEQ|l {*Z?1"ʈO!=@{֖$2\yKLjgQ fK5w iɌJWCz =#)ETW!#4Q ֈcjJ%Q\,Q]~Z6Je4_~Yce}'zH ,Y$HQ3>w-]#L8<)zi-$%yE΅wQ3yNݽxhv˲Rޯ$w'zTҬT^I_̻q.;ɰOzQ(9ʶ4r~tFKrRBbǒ7g}^V5u'k~MN8ʊT*jԧOμ0XU,~ѩ((Z Ch{;L(LDž#/@{1џ\uϫ0?o cyZ**Fzi"l?[MF,,U_6J?vWKHy<ѯOZ:G76A݄#I.@ ;_nqb4e0c0DRd: s+- H_YGjG)L/AK(tS8Y9~ItvGO^ZfbFWLdCLW\rڠ=$~ sP2",d# 9szPm+%G }:yȆ |4˜!65UZıC ANVXxȇߟI"tZcM M&Um9:klO8!6ޮǪs|qerfl3nxaS̉8k_$X"eQQ`$Yb~]䆸ğJ1`! "HQ"XB/c()&)U@/ @/A9KAx|xKAxpHPX|KB`pP|Kp`<c`PX|KB`x-KA/@xxKA`8KB`X?<8`8y; s8xa KA/ @X|Kb