samba-client-libs-4.17.12+git.455.b299ac1e60-150500.3.20.1 < > , ep9|VR,Sz[>k-% Ru~K0c] /"l3,J+Sl GPL-3.0-or-later https://www.suse.com/ Development/Libraries/C and C++ https://www.samba.org/ linux s390x H 8 X 8 I ( G 7 ' g x0 X w W ' ' w 7 ' ) 7 H Kp x 7 G ' $xh G G 0 ' W x 7 H` Y@ 7 ( W ]X 7 ' ' g ( ' 7 H A e)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)eheieieieieieieieieieieieieieieieieieieieieieiejeieieieiejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejejej 1c26bed9f6ec6db894b47767b14e85611663d944be86d2acfae8fc328f10bbd6 5c02acb324655b4bd4359a2478a41d3597bc764a8658c9262e93d217fa070701 2cc6e7342c5becc38762c32a7dc6189a7ef49d8f4d10fd28f2e12d5a1897cbe6 857bd5a68386aeb9df1cc942477186837981e1cc5372af735efd33c0348908ca 96cd3d934d8a1f0c7608d7c5e1fe20bccbd8b8c2a57d8ed24315cde5627a6f11 cfac2e445b895539c663211396f1ec8d0a4a53052c4d61e0b1a81313086f3e2d 93a36b376eef6ade6a8ec1907550e3619656cedaff20e650f23b774b06155f51 225e3923e56d8d8c8729bb1171b820dfe96c53b48ff8ef31acbd4155c54425c9 1828d482db9e9e2783710cd71e854e9b339202555fd266079da54523813acd19 17b806e517ca12adc5295f31bea4d5000cb22e12ab535908710fb84bc43aaaf2 4a077651fcd927c737ddd6f0a266d40e27db30a0fa9380027cd90bcdb6cecc85 a765f862354497d0a553b71a211e1c6db46c36615b0e42287991f0e04bdfba4f f4160f94c084b2ecc486bbf06e4057bb509950ebe7d91e829994fbdb934857d7 54140517709860e91b1fa6032014f19f07be75907eb6bcc455bdfbc3f2d9e96b d35cfd21d0dac2c237caeaa874ba6827f9663c714a6e5bc14a5c1e02390392bf 0442fc592a0a27d1a30227901ee065fc226cbd2d60f6b9583c8cbb0b6ab3aaeb c1ab659c3fbbd2d22a6619809bd10099c8da532e1060a2cc256ae28ae210ee77 30fe7469893c770f4267ab31c426dbed53cef207f395f430dd56543b18e2faa5 ce928a087a2510a51a5f84b09ce85fa1dc66d9817ff8d90b34faea6503963bc3 f1b71b8884d42427029bded4efafec0d0dfbaf60b457397d068953215fc4564c 46813351d55a165deb871063869c695674db6ed258946daa7b04709142328f94 8e3c7bb75bf8f207c76ec1f17dbd2ce7b12275e9bcad3ece2cfa151dcc2210d0 33fb94a4897a7908d4586ce5974a7c7b760f849cf90f41f483d74b5a318e0113 d9668ac0196e97c91e64fa3c2aff0ed306ef6f3bf2839e78d9fb3f2a7ea63d80 5d43b5e3591e7d6deb1863f763a37ac040ebe00eacb12ba94eb71cb39a6a18f9 5804f5696997442e1fbe36e3366be0bd868a21d946a04c37d98976a15e513c55 61e23c133a9ae8f2d6252dfddb56d041cb7a1bf77ceec6f2302866b26ba63877 b79a08aba0c46a01499124db8fdea83104dc65fdb841ee04108fe4ec267de813 1c42fdf82729c83c3be0c97a74dd8ae141c02bb50f1f9e879cc86c8d48c0241c deff1ec13f1f7541be32c84ae7bf12fdd9caf4f6ed45ca6031d4ac6f137def64 fd198690119d081797dcb0db490701154cc5ccdb764194731d6a0925ea0ab59c ea1db1f1d9658396607bab5c4b1a73de6e417410e2ad37605ffa59e8c06a6b59 25686747e4cf0c58661a6206d30b93d564461e10fb8e817e55c5d6b3abd2ca4a b9b5f7e7c4cf1530db64b78beb4f5ac0a9281857c98ec449a05e4de91189fe46 a9290956c6e6f126ad46839841cecc92915fa28867842b7cffe87206322e3415 b2b5c3de85db82819ca7d6a57be343ac7a74be4fb0806142cba54d464e22c89e c470a22a38cb02c38c0ec12cb71d4cad58607bea469a956f6a0a7468f87e37e1 b2df320d8c37bcf091685715062ca585e370cb52fb4d70f03511ba19c50f1a66 b83e8dd6d40378d0a254869213ac4767af3351a6a0452ccd638ce3095a5602f5 45a850def988cf650d87d92dd9efe500797fe564a99a0f8bcfe9a7721eb898bd 2ca91eca9b6a54977870703b1ed05dcebdf064bd69459fcbe5fddd473c068466 fc7624300e4dff93a9e0cec212f2fff804807df78483cd89ce68e8bb31b27ff3 8566800974ec49c5b2e8ca738c4152a32078a9156fa8f74925a0ba110a808fd2 5dfcce3a05d1adaa8bce5d0d5f7b34b047ce2469955114169a55cef3bfd1ed89 a21b5170de01caf1a18dfa6145357dfa7de508975d81c63e18e64f1c58538d79 d546cc5681b817246f9413ab16d3c50ad59377a829ced8e3f422c4c91a133a37 c49ca6ab12c4270147d733aaebcda85c000e499aa3c7ab792417446da26a8693 3a1411a6d1b4eaa4161b86a11c0a3c9a3b05f0b52873917f2747b506ccd5e94c 8cc3bf077ac08439be083d771a004158d9bb6c0ab9b49aed94c760a6d7ab71a2 38b537aed126a53a2268d33a16d207bfd4c41c16a6df7530f73d9c4f91ff5d8e de26cee7dbc1eb49d5b1388d514e191c04134365942df8436be28d777b1cbc4f 549e2c6b3a47927991eb7ae6cbabe5336de0068dc0df735c93c3871d820d5b32 407f5c8dd36e3021a57810e5de5754f89414ca365a0e6ce665a7865687c9face 992d593a394b6cbd8f88cf784b1c84b40b6dcf956ebfca6f074e684902ab113b bf6065aa509ed7ba16b012718b3dd7afe8fd5620cb4e9f0a75b0a6bd989278a8 6114498e3b44099667c201fd48c196f4825a99cd51e41ca9c653dd4e67ad8e48 b4f051c646c81afa93603a5367fd290b86f191d4cd881db26bcaf90e2c9df04d 347fe2be3537372c6a32b31af36d3feb6b52909937fe66d015d2840388bd7ac6 aed4d705459e62214e121e40b9b9a0df41e11acebecce83d8d7dd159f0b32757 3c437582f672862385c2452c5b9ba2c864be1d0919be8e97ad5839f79e2fd9e4 e6532c69ba461426d3f88f6cb2d0cca6499b18ccd30132c3d06d0f934016b8b5 50df2fe19949ca73fd9197a7956d54f4acf824140ddcd841849ea93bbed83b46 d782b528063605623c092a8f2fcc14004a12d35e3cbe55d06915d3386e543efa 714999c0aaaca9c103c867926fe88013962bade304a24491789f36ba5fcdc9e3 eb34b186bd5969aa70dc2d29195e7319cf2ea7ca6e07294fbb7eb81efbd4e3b3 dfd739986bc44844ba977ea11348bb5e1f4e98cbc000c6a524111c207c708c79 1288d561eb663830feda08381fed1d7150dab1989ed21c34ae5fd0649fb2ab1c fadafcfe247b26c4d975a4cd66c8c838da6d4d6bc684c15f92a1d7d80ea722cd ad554e8e5a08b41a3e73ca4a8d4eb113ccee44aba27875a07e09376a86909d2b fe925e4f9e3fee5cf013fbff69a8b25e67b6dac9be8fcd2d76affbeebee18d81 cc6b6006f117e702e3dfb7574e1246f7d60328b375f4c71ff0f55630b2af442a c3a9bed4c5ab9d96a6034c872a4dd6b8fcfd2ccf28d19355a0b467baa6e26300 eee4b0d4e6fca00337d5924b63198305ece1239dc8432d414fa58b395081b794 3de1a41bf534e1f28502697d1db6a66fe5f2c3339c1dc31bc28506be592e0dad 43b306bf583cc0bd89c6bc2359f11c7c126488e6e8b9fc0571c3e6ae0cfabc43 bcffc581096a0e78b0b40e3707a3de16595c796aad4f0f69dfd11af6b779fa05 d524c50014e7f81bb0cca9880eb7f09e8fbe5e921373f8caf4ee0dc0bbafe7a5 a4d41286313848010d903b57231e4df9dd3b60304b6c20ec6daee0f57e49b15b f3b6677693418749411d0308928ce5c31686e332324df4a68bcb3f9773f1aff8 44f12d918b6ee2f61fbc3fd86d4d3e143a28c62537f37db2401a620d9ac54f0e 797228830f4c78d7c4775c538ef0734ce0b9c6f2a82d0049babf6a90bfa3ed26 d00eb0e5c3bf8c25cd65450a17ff20826f30a8e610cbdf295481a3c2e4835cb3 01687c39bd5f27515d5298889a03724f9419a335dab49f5a02743367424dbfe3 6b14eb209605f2a4d2240f7d4ef48f2efbdd78183d46720a6ded6e6af030a5f9 fe68268a3c22bbb2eafe1e63a28022280be96f0ae8abe52e1513f7383e9ba1e9 a2ca1a7b802ad08e5a3ffe1a38e5dca1ca9c96a47328ff4b69fb2725203d81eb 53f74ad0b707109eade3af4a5d6cbff8f2fd8243e50c0669cb161f41fbf22541 8b914570c7a7b954140f17b5bcd2e55bc392e0f1688e5af30f923a978160b8b4 09920546e589d32814ac5e2a60ed9a2eb443d9c05a6f693c3f054cd83ce2c226 b4a1b1b93f869d5d0f89adb22fe8775b1ca101bfcba29eb5190c61127055ef5c 348725dae8448498e9a7b18d05f1329fae1e8832d37a6934b3cb7d9c8f390d06 1e9d8f65aeb952fbafc976a010287bf648fbeca38839c56c7cc462b9c914fa4b 72042811426c340d737a2fc2132d8e3e847801b7c645f665be56e471c226643d 736ac01af6801d222445b46add6c2f8d306cfb2e3ee690929cee97fc151bb758 8ea4cc348686b5a6c71ff084cefa4cc5020996c29490818685034a7fdd910a43 ae1a853f0c4ce42826e562fbf272bf049c986f9b24f504d05af2fc5e3f2ba660 163dd8447a83b9de756258d92f0eeed742fff99280679d3e606dd61576e08fef libdcerpc-binding.so.0.0.1 libdcerpc-server-core.so.0.0.1 libdcerpc.so.0.0.1 libndr-krb5pac.so.0.0.1 libndr-nbt.so.0.0.1 libndr-standard.so.0.0.1 libndr.so.3.0.0 libnetapi.so.1.0.0 libsamba-credentials.so.1.0.0 libsamba-errors.so.1.0.0 libsamba-hostconfig.so.0.0.1 libsamba-passdb.so.0.28.0 libsamba-util.so.0.0.1 libsamdb.so.0.0.1 libsmbclient.so.0.7.0 libsmbconf.so.0.0.1 libsmbldap.so.2.1.0 libtevent-util.so.0.0.1 libwbclient.so.0.15 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root samba-4.17.12+git.455.b299ac1e60-150500.3.20.1.src.rpm libCHARSET3-samba4.so()(64bit) libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libMESSAGING-SEND-samba4.so()(64bit) libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libMESSAGING-samba4.so()(64bit) libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libaddns-samba4.so()(64bit) libaddns-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libads-samba4.so()(64bit) libads-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libasn1util-samba4.so()(64bit) libasn1util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libauth-samba4.so()(64bit) libauth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libauthkrb5-samba4.so()(64bit) libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-cldap-samba4.so()(64bit) libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-ldap-common-samba4.so()(64bit) libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-ldap-samba4.so()(64bit) libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-nbt-samba4.so()(64bit) libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-smb-common-samba4.so()(64bit) libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-spoolss-samba4.so()(64bit) libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcliauth-samba4.so()(64bit) libcliauth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libclidns-samba4.so()(64bit) libclidns-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcluster-samba4.so()(64bit) libcluster-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcmdline-contexts-samba4.so()(64bit) libcmdline-contexts-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcmdline-samba4.so()(64bit) libcmdline-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcommon-auth-samba4.so()(64bit) libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libdbwrap-samba4.so()(64bit) libdbwrap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libdcerpc-binding.so.0()(64bit) libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit) libdcerpc-binding0 libdcerpc-pkt-auth-samba4.so()(64bit) libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libdcerpc-samba-samba4.so()(64bit) libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libdcerpc-samba4.so()(64bit) libdcerpc-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libdcerpc-server-core.so.0()(64bit) libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit) libdcerpc.so.0()(64bit) libdcerpc.so.0(DCERPC_0.0.1)(64bit) libdcerpc0 libevents-samba4.so()(64bit) libevents-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libflag-mapping-samba4.so()(64bit) libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libgenrand-samba4.so()(64bit) libgenrand-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libgensec-samba4.so()(64bit) libgensec-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libgpo-samba4.so()(64bit) libgpo-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libgse-samba4.so()(64bit) libgse-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libhttp-samba4.so()(64bit) libhttp-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libinterfaces-samba4.so()(64bit) libinterfaces-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libiov-buf-samba4.so()(64bit) libiov-buf-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libkrb5samba-samba4.so()(64bit) libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libldbsamba-samba4.so()(64bit) libldbsamba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) liblibcli-lsa3-samba4.so()(64bit) liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) liblibcli-netlogon3-samba4.so()(64bit) liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) liblibsmb-samba4.so()(64bit) liblibsmb-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libmessages-dgm-samba4.so()(64bit) libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libmessages-util-samba4.so()(64bit) libmessages-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libmscat-samba4.so()(64bit) libmscat-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libmsghdr-samba4.so()(64bit) libmsghdr-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libmsrpc3-samba4.so()(64bit) libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libndr-krb5pac.so.0()(64bit) libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit) libndr-krb5pac0 libndr-nbt.so.0()(64bit) libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit) libndr-nbt0 libndr-samba-samba4.so()(64bit) libndr-samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libndr-samba4.so()(64bit) libndr-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libndr-standard.so.0()(64bit) libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit) libndr-standard0 libndr.so.3()(64bit) libndr.so.3(NDR_0.0.1)(64bit) libndr.so.3(NDR_0.0.2)(64bit) libndr.so.3(NDR_0.0.3)(64bit) libndr.so.3(NDR_0.0.4)(64bit) libndr.so.3(NDR_0.0.5)(64bit) libndr.so.3(NDR_0.0.6)(64bit) libndr.so.3(NDR_0.0.7)(64bit) libndr.so.3(NDR_0.0.8)(64bit) libndr.so.3(NDR_0.0.9)(64bit) libndr.so.3(NDR_0.1.0)(64bit) libndr.so.3(NDR_0.1.1)(64bit) libndr.so.3(NDR_0.1.2)(64bit) libndr.so.3(NDR_0.2.0)(64bit) libndr.so.3(NDR_0.2.1)(64bit) libndr.so.3(NDR_1.0.0)(64bit) libndr.so.3(NDR_1.0.1)(64bit) libndr.so.3(NDR_1.0.2)(64bit) libndr.so.3(NDR_2.0.0)(64bit) libndr.so.3(NDR_3.0.0)(64bit) libndr2 libnet-keytab-samba4.so()(64bit) libnet-keytab-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libnetapi.so.1()(64bit) libnetapi.so.1(NETAPI_1.0.0)(64bit) libnetapi0 libnetif-samba4.so()(64bit) libnetif-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libnpa-tstream-samba4.so()(64bit) libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libprinting-migrate-samba4.so()(64bit) libprinting-migrate-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libregistry-samba4.so()(64bit) libregistry-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libreplace-samba4.so()(64bit) libreplace-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-cluster-support-samba4.so()(64bit) libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-credentials.so.1()(64bit) libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit) libsamba-credentials1 libsamba-debug-samba4.so()(64bit) libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-errors.so.1()(64bit) libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit) libsamba-errors0 libsamba-hostconfig.so.0()(64bit) libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit) libsamba-hostconfig0 libsamba-modules-samba4.so()(64bit) libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-passdb.so.0()(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit) libsamba-passdb0 libsamba-security-samba4.so()(64bit) libsamba-security-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-sockets-samba4.so()(64bit) libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-util.so.0()(64bit) libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit) libsamba-util0 libsamba3-util-samba4.so()(64bit) libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamdb-common-samba4.so()(64bit) libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamdb.so.0()(64bit) libsamdb.so.0(SAMDB_0.0.1)(64bit) libsamdb0 libsecrets3-samba4.so()(64bit) libsecrets3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libserver-id-db-samba4.so()(64bit) libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libserver-role-samba4.so()(64bit) libserver-role-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsmb-transport-samba4.so()(64bit) libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsmbclient-raw-samba4.so()(64bit) libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsmbclient.so.0()(64bit) libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit) libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit) libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit) libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit) libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit) libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit) libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit) libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit) libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit) libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit) libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit) libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit) libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit) libsmbclient0 libsmbconf.so.0()(64bit) libsmbconf.so.0(SMBCONF_0.0.1)(64bit) libsmbconf0 libsmbd-base-samba4.so()(64bit) libsmbd-base-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsmbd-shim-samba4.so()(64bit) libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsmbldap.so.2()(64bit) libsmbldap.so.2(SMBLDAP_0)(64bit) libsmbldap.so.2(SMBLDAP_1)(64bit) libsmbldap.so.2(SMBLDAP_2)(64bit) libsmbldap.so.2(SMBLDAP_2.1.0)(64bit) libsmbldap2 libsmbldaphelper-samba4.so()(64bit) libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsocket-blocking-samba4.so()(64bit) libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsys-rw-samba4.so()(64bit) libsys-rw-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libtalloc-report-printf-samba4.so()(64bit) libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libtdb-wrap-samba4.so()(64bit) libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libtevent-util.so.0()(64bit) libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit) libtevent-util0 libtime-basic-samba4.so()(64bit) libtime-basic-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libtrusts-util-samba4.so()(64bit) libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libutil-reg-samba4.so()(64bit) libutil-reg-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libutil-setid-samba4.so()(64bit) libutil-setid-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libutil-tdb-samba4.so()(64bit) libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libwbclient.so.0()(64bit) libwbclient.so.0(WBCLIENT_0.10)(64bit) libwbclient.so.0(WBCLIENT_0.11)(64bit) libwbclient.so.0(WBCLIENT_0.12)(64bit) libwbclient.so.0(WBCLIENT_0.13)(64bit) libwbclient.so.0(WBCLIENT_0.14)(64bit) libwbclient.so.0(WBCLIENT_0.15)(64bit) libwbclient.so.0(WBCLIENT_0.9)(64bit) libwbclient0 samba-client-libs samba-client-libs(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld64.so.1()(64bit) ld64.so.1(GLIBC_2.3)(64bit) libCHARSET3-samba4.so()(64bit) libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libMESSAGING-SEND-samba4.so()(64bit) libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libMESSAGING-samba4.so()(64bit) libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libacl.so.1()(64bit) libacl.so.1(ACL_1.0)(64bit) libaddns-samba4.so()(64bit) libaddns-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libads-samba4.so()(64bit) libads-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libasn1util-samba4.so()(64bit) libasn1util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libauth-samba4.so()(64bit) libauth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libauthkrb5-samba4.so()(64bit) libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libavahi-client.so.3()(64bit) libavahi-common.so.3()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.10)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.2.3)(64bit) libc.so.6(GLIBC_2.2.4)(64bit) libc.so.6(GLIBC_2.27)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.5)(64bit) libc.so.6(GLIBC_2.6)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcli-cldap-samba4.so()(64bit) libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-ldap-common-samba4.so()(64bit) libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-ldap-samba4.so()(64bit) libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-nbt-samba4.so()(64bit) libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-smb-common-samba4.so()(64bit) libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcli-spoolss-samba4.so()(64bit) libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcliauth-samba4.so()(64bit) libcliauth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libclidns-samba4.so()(64bit) libclidns-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcluster-samba4.so()(64bit) libcluster-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libcom_err.so.2()(64bit) libcommon-auth-samba4.so()(64bit) libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libdbwrap-samba4.so()(64bit) libdbwrap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libdcerpc-binding.so.0()(64bit) libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit) libdcerpc-pkt-auth-samba4.so()(64bit) libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libdcerpc-samba-samba4.so()(64bit) libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libdcerpc.so.0()(64bit) libdcerpc.so.0(DCERPC_0.0.1)(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.2)(64bit) libflag-mapping-samba4.so()(64bit) libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libgenrand-samba4.so()(64bit) libgenrand-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libgensec-samba4.so()(64bit) libgensec-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libgnutls.so.30()(64bit) libgnutls.so.30(GNUTLS_3_4)(64bit) libgnutls.so.30(GNUTLS_3_6_10)(64bit) libgnutls.so.30(GNUTLS_3_6_13)(64bit) libgnutls.so.30(GNUTLS_3_6_3)(64bit) libgse-samba4.so()(64bit) libgse-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libgssapi_krb5.so.2()(64bit) libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit) libhttp-samba4.so()(64bit) libhttp-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libinterfaces-samba4.so()(64bit) libinterfaces-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libiov-buf-samba4.so()(64bit) libiov-buf-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libk5crypto.so.3()(64bit) libk5crypto.so.3(k5crypto_3_MIT)(64bit) libkrb5.so.3()(64bit) libkrb5.so.3(krb5_3_MIT)(64bit) libkrb5samba-samba4.so()(64bit) libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libldb.so.2()(64bit) libldb.so.2(LDB_0.9.10)(64bit) libldb.so.2(LDB_0.9.15)(64bit) libldb.so.2(LDB_0.9.16)(64bit) libldb.so.2(LDB_0.9.23)(64bit) libldb.so.2(LDB_1.1.1)(64bit) libldb.so.2(LDB_1.1.19)(64bit) libldb.so.2(LDB_1.1.30)(64bit) libldb.so.2(LDB_1.3.0)(64bit) libldb.so.2(LDB_2.6.1)(64bit) libldb.so.2(LDB_2.6.2)(64bit) libldbsamba-samba4.so()(64bit) libldbsamba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) liblibcli-lsa3-samba4.so()(64bit) liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) liblibcli-netlogon3-samba4.so()(64bit) liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) liblibsmb-samba4.so()(64bit) liblibsmb-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libmessages-dgm-samba4.so()(64bit) libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libmessages-util-samba4.so()(64bit) libmessages-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libmsghdr-samba4.so()(64bit) libmsghdr-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libmsrpc3-samba4.so()(64bit) libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libndr-krb5pac.so.0()(64bit) libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit) libndr-nbt.so.0()(64bit) libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit) libndr-samba-samba4.so()(64bit) libndr-samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libndr-samba4.so()(64bit) libndr-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libndr-standard.so.0()(64bit) libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit) libndr.so.3()(64bit) libndr.so.3(NDR_0.0.1)(64bit) libndr.so.3(NDR_0.0.3)(64bit) libndr.so.3(NDR_0.0.4)(64bit) libndr.so.3(NDR_0.0.5)(64bit) libndr.so.3(NDR_0.0.6)(64bit) libndr.so.3(NDR_0.0.7)(64bit) libndr.so.3(NDR_0.0.8)(64bit) libndr.so.3(NDR_0.0.9)(64bit) libndr.so.3(NDR_0.1.1)(64bit) libndr.so.3(NDR_0.1.2)(64bit) libndr.so.3(NDR_0.2.0)(64bit) libndr.so.3(NDR_0.2.1)(64bit) libndr.so.3(NDR_1.0.0)(64bit) libndr.so.3(NDR_1.0.1)(64bit) libndr.so.3(NDR_1.0.2)(64bit) libndr.so.3(NDR_2.0.0)(64bit) libnetif-samba4.so()(64bit) libnetif-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libnpa-tstream-samba4.so()(64bit) libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libnscd.so.1()(64bit) libnscd.so.1(LIBNSCD_1.0)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpopt.so.0()(64bit) libpopt.so.0(LIBPOPT_0)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.12)(64bit) libpthread.so.0(GLIBC_2.2)(64bit) libpthread.so.0(GLIBC_2.3.2)(64bit) libreplace-samba4.so()(64bit) libreplace-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libresolv.so.2()(64bit) libresolv.so.2(GLIBC_2.2)(64bit) libsamba-cluster-support-samba4.so()(64bit) libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-credentials.so.1()(64bit) libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit) libsamba-debug-samba4.so()(64bit) libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-errors.so.1()(64bit) libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit) libsamba-hostconfig.so.0()(64bit) libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit) libsamba-modules-samba4.so()(64bit) libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-passdb.so.0()(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit) libsamba-security-samba4.so()(64bit) libsamba-security-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-sockets-samba4.so()(64bit) libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamba-util.so.0()(64bit) libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit) libsamba3-util-samba4.so()(64bit) libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamdb-common-samba4.so()(64bit) libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsamdb.so.0()(64bit) libsamdb.so.0(SAMDB_0.0.1)(64bit) libsecrets3-samba4.so()(64bit) libsecrets3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libserver-id-db-samba4.so()(64bit) libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libserver-role-samba4.so()(64bit) libserver-role-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsmb-transport-samba4.so()(64bit) libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsmbclient-raw-samba4.so()(64bit) libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsmbconf.so.0()(64bit) libsmbconf.so.0(SMBCONF_0.0.1)(64bit) libsmbd-shim-samba4.so()(64bit) libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsmbldap.so.2()(64bit) libsmbldap.so.2(SMBLDAP_0)(64bit) libsmbldap.so.2(SMBLDAP_1)(64bit) libsmbldaphelper-samba4.so()(64bit) libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsocket-blocking-samba4.so()(64bit) libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsys-rw-samba4.so()(64bit) libsys-rw-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libtalloc-report-printf-samba4.so()(64bit) libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libtalloc.so.2()(64bit) libtalloc.so.2(TALLOC_2.0.2)(64bit) libtalloc.so.2(TALLOC_2.1.0)(64bit) libtasn1.so.6()(64bit) libtasn1.so.6(LIBTASN1_0_3)(64bit) libtdb-wrap-samba4.so()(64bit) libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libtdb.so.1()(64bit) libtdb.so.1(TDB_1.2.1)(64bit) libtdb.so.1(TDB_1.2.2)(64bit) libtdb.so.1(TDB_1.2.5)(64bit) libtdb.so.1(TDB_1.3.0)(64bit) libtdb.so.1(TDB_1.3.11)(64bit) libtdb.so.1(TDB_1.3.17)(64bit) libtevent-util.so.0()(64bit) libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit) libtevent.so.0()(64bit) libtevent.so.0(TEVENT_0.11.0)(64bit) libtevent.so.0(TEVENT_0.12.0)(64bit) libtevent.so.0(TEVENT_0.13.0)(64bit) libtevent.so.0(TEVENT_0.9.12)(64bit) libtevent.so.0(TEVENT_0.9.13)(64bit) libtevent.so.0(TEVENT_0.9.14)(64bit) libtevent.so.0(TEVENT_0.9.16)(64bit) libtevent.so.0(TEVENT_0.9.20)(64bit) libtevent.so.0(TEVENT_0.9.21)(64bit) libtevent.so.0(TEVENT_0.9.30)(64bit) libtevent.so.0(TEVENT_0.9.31)(64bit) libtevent.so.0(TEVENT_0.9.37)(64bit) libtevent.so.0(TEVENT_0.9.9)(64bit) libtime-basic-samba4.so()(64bit) libtime-basic-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libtrusts-util-samba4.so()(64bit) libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libutil-reg-samba4.so()(64bit) libutil-reg-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libutil-setid-samba4.so()(64bit) libutil-setid-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libutil-tdb-samba4.so()(64bit) libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit) libwbclient.so.0()(64bit) libwbclient.so.0(WBCLIENT_0.13)(64bit) libwbclient.so.0(WBCLIENT_0.9)(64bit) libz.so.1()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 ez@e[J@e6`@e Sd@d.@dd-@d@dd@d6@d @d @cvcvc@c@c @c@cctc5cM@b@b@b @ba@bascabrero@suse.de scabrero@suse.de scabrero@suse.de nopower@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com scabrero@suse.de dmulder@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com ddiss@suse.com nopower@suse.com dmulder@suse.com dmulder@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de dimstar@opensuse.org scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com nopower@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de nopower@suse.com scabrero@suse.de ddiss@suse.com ddiss@suse.com ddiss@suse.com scabrero@suse.de scabrero@suse.de dmulder@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de dmulder@suse.com scabrero@suse.de scabrero@suse.de nopower@suse.com nopower@suse.com nopower@suse.com dmulder@suse.com scabrero@suse.de nopower@suse.com ddiss@suse.com nopower@suse.com nopower@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com jmcdonough@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com ddiss@suse.com ddiss@suse.com nopower@suse.com nopower@suse.com ddiss@suse.com nopower@suse.com dmulder@suse.com dmulder@suse.com ddiss@suse.com scabrero@suse.de dmulder@suse.com ddiss@suse.com nopower@suse.com jengelh@inai.de dmulder@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com dmulder@suse.com dmulder@suse.com jmcdonough@suse.com dmulder@suse.com scabrero@suse.de dmulder@suse.com scabrero@suse.de dmulder@suse.com dmulder@suse.com vcizek@suse.com dmulder@suse.com dmulder@suse.com nopower@suse.com scabrero@suse.de jmcdonough@suse.com scabrero@suse.de aaptel@suse.com jengelh@inai.de dimstar@opensuse.org dmulder@suse.com jmcdonough@suse.com david.mulder@suse.com jmcdonough@suse.com aaptel@suse.com dmulder@suse.com scabrero@suse.com scabrero@suse.com kukuk@suse.de david.mulder@suse.com scabrero@suse.com rbrown@suse.com dmulder@suse.com scabrero@suse.com dimstar@opensuse.org scabrero@suse.com aaptel@suse.com nopower@suse.com nopower@suse.com aaptel@suse.com ddiss@suse.com dmulder@suse.com ddiss@suse.com dmulder@suse.com ddiss@suse.com ddiss@suse.com nopower@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com dmulder@suse.com nopower@suse.com jmcdonough@suse.com aaptel@suse.com kukuk@suse.com kukuk@suse.de nopower@suse.com aaptel@suse.com dmulder@suse.com ddiss@suse.com dmulder@suse.com ddiss@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com jmcdonough@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com ddiss@suse.com jmcdonough@suse.com ddiss@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com nopower@suse.com lmuelle@suse.com lmuelle@suse.com jmcdonough@suse.com nopower@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com nopower@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com tchvatal@suse.com lmuelle@suse.com nopower@suse.com crrodriguez@opensuse.org lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com noel.power@suse.com ddiss@suse.com ddiss@suse.com lmuelle@suse.com ddiss@suse.com lmuelle@suse.com lmuelle@suse.com nopower@suse.com ddiss@suse.com ddiss@suse.com lmuelle@suse.com lmuelle@suse.com ddiss@suse.com lmuelle@suse.com mpluskal@suse.com lmuelle@suse.com nopower@suse.de ddiss@suse.com ddiss@suse.com ddiss@suse.com lmuelle@suse.de nopower@suse.de lmuelle@suse.com nopower@suse.de ddiss@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com - Add new idmap_nss option 'use_upn' for those NSS modules able to
handle UPNs or DOMAIN/user name format; (bsc#1215369);
- Avoid unnecessary locking in idmap parent setup; (bsc#1215369); - Add "net offlinejoin composeodj" command; (bsc#1214076); - Update to samba 4.17.12
* Weird filename can cause assert to fail in
openat_pathref_fsp_nosymlink(); (bso#15419);
* reply_sesssetup_and_X() can dereference uninitialized tmp
pointer; (bso#15420);
* Missing return in reply_exit_done(); (bso#15430);
* TREE_CONNECT without SETUP causes smbd to use uninitialized
pointer; (bso#15432);
* Improve GetNChanges to address some (but not all "Azure AD
Connect") syncronisation tool looping during the initial user
sync phase; (bso#15401);
* Samba replication logs show (null) DN; (bso#15407);
* Spotlight sometimes returns no results on latest macOS;
(bso#15342);
* Renaming results in NT_STATUS_SHARING_VIOLATION if previously
attempted to remove the destination; (bso#15417);
* Spotlight results return wrong date in result list; (bso#15427);
* macOS mdfind returns only 50 results; (bso#15463);
* 2-3min delays at reconnect with smb2_validate_sequence_number:
bad message_id 2; (bso#15346);
* samba-tool ntacl get segfault if aio_pthread appended;
(bso#15441);
* DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
(bso#15446);
* File doesn't show when user doesn't have permission if
aio_pthread is loaded; (bso#15453);
* net ads lookup (with unspecified realm) fails; (bso#15384);
(bsc#1213826);
* Regression DFS not working with widelinks = true; (bso#15435);
(bsc#1213607);
* ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1;
(bso#15451);
* mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
* Windows client join fails if a second container CN=System exists
somewhere; (bso#9959);
- Fix crossing automounter mount points; (bsc#1215212); - CVE-2023-4091: samba: Client can truncate file with read-only
permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba: The procedure number is out of range
when starting Active Directory Users and Computers;
(bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
"GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
(bsc#1215908); (bso#15424). - Fix DFS not working with widelinks enabled; (bsc#1213607);
(bso#15435); - Move libcluster-samba4.so from samba-libs to samba-client-libs;
(bsc#1213940); - net ads lookup with unspecified realm fails; (bso#15384);
(bsc#1213826); - secure channel faulty since Windows 10/11 update 07/2023;
(bso#15418); (bsc#1213384). - CVE-2022-2127: lm_resp_len not checked properly in
winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
(bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
`server signing = mandatory` is set; (bso#15397); (bsc#1213170). - Update to 4.17.9
* Backport --pidl-developer fixes; (bso#15404).
* smbd_scavenger crashes when service smbd is stopped;
(bso#15275).
* vfs_fruit might cause a failing open for delete; (bso#15378).
* named crashes on DLZ zone update; (bso#14030).
* winbind recurses into itself via rpcd_lsad; (bso#15361).
* cli_list loops 100% CPU against pre-lanman2 servers;
(bso#15382).
* smbclient leaks fds with showacls; (bso#15391).
* aes256 smb3 encryption algorithms are not allowed in
smb3_sid_parse(); (bso#15374).
* winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
(bso#15413).
* smbget memory leak if failed to download files recursively;
(bso#15403). - Update to 4.17.8
* log flood: smbd_calculate_access_mask_fsp: Access denied:
message level should be lower; (bso#15302).
* Floating point exception (FPE) via cli_pull_send at
source3/libsmb/clireadwrite.c; (bso#15306).
* test_tstream_more_tcp_user_timeout_spin fails intermittently
on Rackspace GitLab runners; (bso#15328).
* Reduce flapping of ridalloc test; (bso#15329).
* large_ldap test is unreliable; (bso#15351).
* New filename parser doesn't check veto files smb.conf
parameter; (bso#15143).
* mdssvc may crash when initializing; (bso#15354).
* Large directory optimization broken for non-lcomp path
elements; (bso#15313).
* streams_depot fails to create streams; (bso#15357).
* shadow_copy2 and streams_depot don't play well together;
(bso#15358).
* wbinfo -u fails on ad dc with >1000 users; (bso#15366).
* winbindd idmap child contacts the domain controller without a
need; (bso#15317).
* idmap_autorid may fail to map sids of trusted domains for the
first time; (bso#15318).
* idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
(bso#15319).
* net ads search -P doesn't work against servers in other
domains; (bso#15323).
* DS ACEs might be inherited to unrelated object classes;
(bso#15338).
* Temporary smbXsrv_tcon_global.tdb can't be parsed;
(bso#15353).
* Setting veto files = /.*/ break listing directories;
(bso#15360); (bsc#1212375).
* CVE-2020-25720 [SECURITY] Create Child permission should not
allow full write to all attributes (additional changes);
(bso#14810).
* dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.17.7
* CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
in cleartext; (bso#15315); (bsc#1209481).
* CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
deleted by unprivileged authenticated users; (bso#15276);
(bsc#1209483).
* CVE-2023-0614: samba: Access controlled AD LDAP attributes can
be discovered; (bso#15270); (bsc#1209485).
* large_ldap test is inefficient; (bso#15332).
* CVE-2020-25720 [SECURITY] Create Child permission should not
allow full write to all attributes (additional changes);
(bso#14810).
- Update to 4.17.6
* streams_xattr is creating unexpected locks on folders;
(bso#15314).
* Use of the Azure AD Connect cloud sync tool is now supported
for password hash synchronisation, allowing Samba AD Domains
to synchronise passwords with this popular cloud environment;
(bso#10635).
* Spotlight doesn't work with latest macOS Ventura;
(bso#15299).
* New samba-dcerpc architecture does not scale gracefully;
(bso#15310).
* vfs_ceph incorrectly uses fsp_get_io_fd() instead of
fsp_get_pathref_fd() in close and fstat; (bso#15307).
* With clustering enabled samba-bgqd can core dump due to use
after free; (bso#15293).
* fd_load() function implicitly closes the fd where it should
not; (bso#15311).
- Update to 4.17.5
* smbc_getxattr() return value is incorrect; (bso#14808).
* Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
handled correctly; (bso#15172).
* synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
* samba-tool gpo listall fails IPv6 only - finddcs() fails to
find DC when there is only an AAAA record for the DC in DNS;
(bso#15226).
* smbd crashes if an FSCTL request is done on a stream handle;
(bso#15236).
* DFS links don't work anymore on Mac clients since 4.17;
(bso#15277).
* vfs_virusfilter segfault on access, directory edgecase
(accessing NULL value); (bso#15283).
* CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
based SChannel on NETLOGON (additional changes); (bso#15240).
* %U for include directive doesn't work for share listing
(netshareenum); (bso#15243).
* Shares missing from netshareenum response in samba 4.17.4;
(bso#15266).
* ctdb: use-after-free in run_proc; (bso#15269).
* irpc_destructor may crash during shutdown; (bso#15280).
* auth3_generate_session_info_pac leaks wbcAuthUserInfo;
(bso#15286).
* smbclient segfaults with use after free on an optimized
build; (bso#15268).
* smbstatus leaking files in msg.sock and msg.lock;
(bso#15282).
* Leak in wbcCtxPingDc2; (bso#15164).
* Access based share enum does not work in Samba 4.16+;
(bso#15265).
* Crash during share enumeration; (bso#15267).
* rep_listxattr on FreeBSD does not properly check for reads
off end of returned buffer; (bso#15271).
* Avoid relying on C89 features in a few places; (bso#15281). - Make (32bit) samba-libs conflict with old samba-ad-dc-libs
package to satisfy installcheck. - Make samba-libs conflict with old samba-ad-dc-libs package
to satisfy installcheck. - Remove non functioning ifup/ifdown samba-winbindd scripts;
(bsc#1207414). - libdsdb-module-samba4 should be packaged as part of samba-libs and
not samba-ad-dc-libs. Additionally no need for it to be
removed conditionally. - Clean up logic for PAM migration settings in spec file. - Change with_dc default to 0 (for non TW builds), ADDC feature is
deprecated and will no longer be included in >= SLE15-SP5;
(jsc#PED-1122). - Update to 4.17.4
* CVE-2022-44640 Upstream Heimdal free of user-controlled
pointer in FAST; (bsc#14929);
* CVE-2021-20251 Bad password count not incremented atomically;
(bsc#14611);
* CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
(bsc#15203);
* CVE-2022-37966 rc4-hmac Kerberos session keys issued to
modern servers; (bso#15237);
* CVE-2022-37967 Kerberos constrained delegation ticket forgery
possible against Samba AD DC; (bso#15231);
* CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
and should be avoided; (bso#15240);
* pam_winbind uses time_t and pointers assuming they are of the
same size; (bso#15224);
* Heimdal session key selection in AS-REQ examines wrong entry;
(bso#15219);
* filter-subunit is inefficient with large numbers of
knownfails; (bso#15258);
* smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
(bso#15252);
* The KDC logic arround msDs-supportedEncryptionTypes differs
from Windows; (bso#13135);
* libnet: change_password() doesn't work with
dcerpc_samr_ChangePasswordUser4(); (bso#15206);
* Heimdal session key selection in AS-REQ examines wrong entry;
(bso#15219);
* Memory leak in snprintf replacement functions; (bso#15230);
* RODC doesn't reset badPwdCount reliable via an RWDC
(CVE-2021-20251 regression); (bso#15253);
* Prevent EBADF errors with vfs_glusterfs; (bso#15198);
* %U for include directive doesn't work for share listing
(netshareenum); (bso#15243);
* Stack smashing in net offlinejoin requestodj; (bso#15257);
* Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
(bso#15197);
* Heimdal session key selection in AS-REQ examines wrong entry;
(bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
* Paths are additive so do not repeat paths from named.service
* Prefix the samba DLZ directory with "-" to ignore this path
if it does not exists - Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
* CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
* Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
* CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
(bso#15207); (bsc#1204499).
* CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
* CVE-2021-20251 [SECURITY] Bad password count not incremented
atomically; (bso#14611).
* smbXsrv_connection_shutdown_send result leaked; (bso#15174).
* Flush on a named stream never completes; (bso#15182).
* Permission denied calling SMBC_getatr when file not exists;
(bso#15195).
* Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
(bso#15189).
* pytest: add file removal helpers for TestCaseInTempDir;
(bso#15191).
* CVE-2021-20251 [SECURITY] Bad password count not incremented
atomically; (bso#14611).
* Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
(bso#15189).
* Flush on a named stream never completes; (bso#15182).
* vfs_gpfs silently garbles timestamps > year 2106;
(bso#15151).
* CVE-2021-20251 [SECURITY] Bad password count not incremented
atomically; (bso#14611).
* multi-channel socket passing may hit a race if one of the
involved processes already existed; (bso#15200).
* memory leak on temporary of struct imessaging_post_state and
struct tevent_immediate on struct imessaging_context (in
rpcd_spoolss and maybe others); (bso#15201).
* Since popt1.19 various use after free errors using result of
poptGetArg are now exposed; (bso#15205); (boo#1204279).
* Remove special case for O_CREAT in SMB_VFS_OPENAT from
vfs_glusterfs; (bso#15192).
* GETPWSID in memory cache grows indefinetly with each NTLM
auth; (bso#15169).
* CVE-2021-20251 [SECURITY] Bad password count not incremented
atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
* acl_xattr VFS module may unintentionally use filesystem
permissions instead of ACL from xattr; (bso#15126).
* Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
(bso#15153).
* assert failed: !is_named_stream(smb_fname)") at
../../lib/util/fault.c:197; (bso#15161).
* acl_xattr VFS module may unintentionally use filesystem
permissions instead of ACL from xattr; (bso#15126).
* assert failed: !is_named_stream(smb_fname)") at
../../lib/util/fault.c:197; (bso#15161).
* Cross-node multi-channel reconnects result in SMB2 Negotiate
returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
* winbind at info level debug can coredump when processing
wb_lookupusergroups; (bso#15160).
* Make use of glfs_*at() API calls in vfs_glusterfs;
(bso#15157).
* Possible use after free of connection_struct when iterating
smbd_server_connection->connections; (bso#15128).
* `net usershare add` fails with flag works with --long but
fails with -l; (bso#15145).
* acl_xattr VFS module may unintentionally use filesystem
permissions instead of ACL from xattr; (bso#15126).
* Performance regression on contended path based operations;
(bso#15125).
* Missing READ_LEASE break could cause data corruption;
(bso#15148).
* libsamba-errors uses a wrong version number; (bso#15141).
* SMB1 negotiation can fail to handle connection errors;
(bso#15152).
* New filename parser doesn't check veto files smb.conf
parameter; (bso#15143).
* 4.17.rc1 still uses symlink-race prone unix_convert();
(bso#15144).
* Backport fileserver related changed to 4.17.0rc2;
(bso#15146).
* Manpage for smbstatus json is missing; (bso#15147).
* Backport fileserver related changed to 4.17.0rc2;
(bso#15146).
* Performance regression on contended path based operations;
(bso#15125).
* Backport fileserver related changed to 4.17.0rc2;
(bso#15146).
* Fix issues found by coverity in smbstatus json code;
(bso#15140).
* Backport fileserver related changed to 4.17.0rc2;
(bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
in /etc and restoring them while an RPM update.
- Update to 4.16.4
* CVE-2022-2031: Samba AD users can bypass certain restrictions
associated with changing passwords; (bsc#1201495); (bso#15047);
* CVE-2022-32744: Samba AD users can forge password change
requests for any user; (bsc#1201493); (bso#15074);
* CVE-2022-32745: Samba AD users can crash the server process
with an LDAP add or modify request; (bsc#1201492); (bso#15008);
* CVE-2022-32746: Samba AD users can induce a use-after-free in
the server process with an LDAP add or modify request;
(bsc#1201490); (bso#15009);
* CVE-2022-32742: Server memory information leak via SMB1;
(bsc#1201496); (bso#15085);
- Update to 4.16.3
* Using vfs_streams_xattr and deleting a file causes a panic;
(bso#15099);
* Add support for bind 9.18; (bso#14986);
* logging dsdb audit to specific files does not work;
(bso#15076);
* Problem when winbind renews Kerberos; (bso#14979);
(bsc#1196224);
* Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
developer mode; (bso#15095);
* Crash in streams_xattr because fsp->base_fsp->fsp_name is
NULL; (bso#15105);
* Crash in rpcd_classic - NULL pointer deference in
mangle_is_mangled(); (bso#15118);
* smbclient commands del & deltree fail with
NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
(bsc#1200556);
* Fix check for chown when processing NFSv4 ACL; (bso#15120);
* The pcap background queue process should not be stopped;
(bso#15082);
* testparm: Fix typo in idmap rangesize check; (bso#15097);
* net ads info returns LDAP server and LDAP server name as
null; (bso#15106);
* ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
(bso#15108);
* CTDB child process logging does not work as expected;
(bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
(bsc#1198255);
- Move pdb backends from package samba-libs to package
samba-client-libs and remove samba-libs requirement from
samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
(bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
* Use pathref fd instead of io fd in vfs_default_durable_cookie;
(bso#15042);
* vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
file had been deleted; (bso#15069);
* Reintroduce netgroups support; (bso#15087);
* net ads info shows LDAP Server: 0.0.0.0 depending on contacted
server; (bso#14674);
* Update from 4.15 to 4.16 breaks discovery of [homes] on
standalone server from Win and IOS; (bso#15062);
* waf produces incorrect names for python extensions with Python
3.11; (bso#15071);
* smbclient -E doesn't work as advertised; (bso#15075);
* The samba background daemon doesn't refresh the printcap cache
on startup; (bso#15081);
* Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
(CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
* Share and server swapped in smbget password prompt; (bso#14831);
* Durable handles won't reconnect if the leased file is written to;
(bso#15022);
* rmdir silently fails if directory contains unreadable files and
hide unreadable is yes; (bso#15023);
* SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
on renamed file handle; (bso#15038);
* Need to describe --builtin-libraries= better (compare with
- -bundled-libraries); (bso#8731);
* vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
(bso#14957);
* shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
(bso#15035);
* PAM Kerberos authentication incorrectly fails with a clock skew
error; (bso#15046);
* Username map - samba erroneously applies unix group memberships
to user account entries; (bso#15041);
* KVNO off by 100000; (bso#14951);
* Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
* vfs_gpfs recalls=no option prevents listing files; (bso#15055);
* smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
non-printable delimiter with more human readable separator as
sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
multibyte separators; (bsc#1198309).
- Update to 4.16.0
* New samba-dcerpcd binary to provide DCERPC in the member server
setup
* Certificate Auto Enrollment
* Ability to add ports to dns forwarder addresses in internal DNS
backend
* No longer using Linux mandatory locks for sharemodes
* SMB1 protocol has been deprecated, particularly older dialects
* SMB1 protocol SMBCopy command removed
* SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847); - Install a systemd drop-in file for named service to allow
read/write access to the DLZ directory; (bsc#1201689); - Update to 4.15.12
* CVE-2022-42898: samba: heimdal: Samba buffer overflow
vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
* Allow rebuild of Centos 8 images after move to vault for
Samba 4.15; (bso#15193).
* CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
(bso#15134); (bsc#1204254) - Update to 4.15.10
* Possible use after free of connection_struct when iterating
smbd_server_connection->connections; (bso#15128);
(bsc#1200102).
* smbXsrv_connection_shutdown_send result leaked; (bso#15174).
* Spotlight RPC service returns wrong response when Spotlight
is disabled on a share; (bso#15086).
* acl_xattr VFS module may unintentionally use filesystem
permissions instead of ACL from xattr; (bso#15126).
* Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
(bso#15153).
* assert failed: !is_named_stream(smb_fname)") at
../../lib/util/fault.c:197; (bso#15161).
* Missing READ_LEASE break could cause data corruption;
(bso#15148).
* rpcclient can crash using setuserinfo(2); (bso#15124).
* Samba fails to build with glibc 2.36 caused by including
in libreplace; (bso#15132).
* SMB1 negotiation can fail to handle connection errors;
(bso#15152).
* samba-tool domain join segfault when joining a samba ad
domain; (bso#15078).
- Update to 4.15.9
* CVE-2022-32742:SMB1 code does not correct verify SMB1write,
SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
(bsc#1201496).
* CVE-2022-32746: samba: Use-after-free occurring in database
audit logging; (bso#15009); (bso#15096); (bsc#1201490).
* CVE-2022-2031: samba, ldb: AD users can bypass certain
restrictions associated with changing passwords; (bso#15047);
(bsc#1201495);
* CVE-2022-32745: samba: ldb: AD users can crash the server
process with an LDAP add or modify request; (bso#15008);
(bso#15096); (bsc#1201492).
* CVE-2022-2031: samba, ldb: AD users can bypass certain
restrictions associated with changing passwords; (bso#15047);
(bsc#1201495);
* CVE-2022-32744: samba, ldb: AD users can forge password change
requests for any user; (bso#15074); (bso#15047); (bsc#1201493). - CVE-2022-1615: Do not ignore errors in random number generation;
(bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
(bso#14833); (bsc#1202803); - Fix Use after free when iterating
smbd_server_connection->connections after tree disconnect
failure; (bso#15128); (bsc#1200102). - CVE-2022-32746: samba: Use-after-free occurring in database
audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
process with an LDAP add or modify request; (bso#15008);
(bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
restrictions associated with changing passwords; (bso#15047);
(bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
(bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
requests for any user; (bso#15074); (bso#15047); (bsc#1201493). - Update to 4.15.8
* Use pathref fd instead of io fd in vfs_default_durable_cookie;
(bso#15042);
* Setting fruit:resource = stream in vfs_fruit causes a panic;
(bso#15099);
* Add support for bind 9.18; (bso#14986);
* logging dsdb audit to specific files does not work; (bso#15076);
* vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
file had been deleted; (bso#15069);
* netgroups support removed; (bso#15087); (bsc#1199247);
* net ads info shows LDAP Server: 0.0.0.0 depending on contacted
server; (bso#14674); (bsc#1199734);
* waf produces incorrect names for python extensions with Python
3.11; (bso#15071);
* smbclient commands del & deltree fail with
NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
(bsc#1200556);
* vfs_gpfs recalls=no option prevents listing files; (bso#15055);
* waf produces incorrect names for python extensions with Python
3.11; (bso#15071);
* Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
* ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
(bso#15108);
* smbd doesn't handle UPNs for looking up names; (bso#15054);
* Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
samba-client-libs and remove samba-libs requirement from
samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
(bsc#1196224); (bso#14979); - Fix smbclient commands del & deltree failing with
NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
(bsc#1200556). - Revert NIS support removal; (bsc#1199247); - Use requires_eq macro to require the libldb2 version available at
samba-dsdb-modules build time; (bsc#1199362); - Add missing samba-client requirement to samba-winbind package;
(bsc#1198255); - Update to 4.15.7
* Share and server swapped in smbget password prompt; (bso#14831);
* Durable handles won't reconnect if the leased file is written
to; (bso#15022);
* rmdir silently fails if directory contains unreadable files and
hide unreadable is yes; (bso#15023);
* SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
on renamed file handle; (bso#15038);
* vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
(bso#14957);
* shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
(bso#15035);
* PAM Kerberos authentication incorrectly fails with a clock skew
error; (bso#15046);
* username map - samba erroneously applies unix group memberships
to user account entries; (bso#15041);
* NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES
in SMBC_server_internal; (bso#14983);
* Simple bind doesn't work against an RODC (with non-preloaded users);
(bso#13879);
* Crash of winbind on RODC; (bso#14641);
* uncached logon on RODC always fails once; (bso#14865);
* KVNO off by 100000; (bso#14951);
* LDAP simple binds should honour "old password allowed period";
(bso#15001);
* wbinfo -a doesn't work reliable with upn names; (bso#15003);
* Simple bind doesn't work against an RODC (with non-preloaded
users); (bso#13879);
* Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
* Regression: create krb5 conf = yes doesn't work with a single KDC;
(bso#15016); - Add provides to samba-client-libs package to fix upgrades from
previous versions; (bsc#1197995); - Add missing samba-libs requirement to samba-winbind package;
(bsc#1198255); - Update to 4.15.6
* Renaming file on DFS root fails with
NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169);
* Samba does not response STATUS_INVALID_PARAMETER when opening 2
objects with same lease key; (bso#14737);
* NT error code is not set when overwriting a file during rename
in libsmbclient; (bso#14938);
* Fix ldap simple bind with TLS auditing; (bso#14996);
* net ads info shows LDAP Server: 0.0.0.0 depending on contacted
server; (bso#14674);
* Problem when winbind renews Kerberos; (bso#14979);
(bsc#1196224);
* pam_winbind will not allow gdm login if password about to
expire; (bso#8691);
* virusfilter_vfs_openat: Not scanned: Directory or special file;
(bso#14971);
* DFS fix for AIX broken; (bso#13631);
* Solaris and AIX acl modules: wrong function arguments;
(bso#14974);
* Function aixacl_sys_acl_get_file not declared / coredump;
(bso#7239);
* Regression: Samba 4.15.2 on macOS segfaults intermittently
during strcpy in tdbsam_getsampwnam; (bso#14900);
* Fix a use-after-free in SMB1 server; (bso#14989);
* smb2_signing_decrypt_pdu() may not decrypt with
gnutls_aead_cipher_decrypt() from gnutls before 3.5.2;
(bso#14968);
* Changing the machine password against an RODC likely destroys
the domain join; (bso#14984);
* authsam_make_user_info_dc() steals memory from its struct
ldb_message *msg argument; (bso#14993);
* Use Heimdal 8.0 (pre) rather than an earlier snapshot;
(bso#14995);
* Samba autorid fails to map AD users if id rangesize fits in the
id range only once; (bso#14967); - Fix mismatched version of libldb2; (bsc#1196788).
- Drop obsolete SuSEfirewall2 service files. - Drop obsolete Samba fsrvp v0->v1 state upgrade functionality;
(bsc#1080338). - Fix ntlm authentications with "winbind use default domain = yes";
(bso#13126); (bsc#1173429); (bsc#1196308). - Fix samba-ad-dc status warning notification message by disabling
systemd notifications in bgqd; (bsc#1195896); (bso#14947). - libldb version mismatch in Samba dsdb component; (bsc#1118508); - Update to 4.15.5
* CVE-2021-44141: UNIX extensions in SMB1 disclose whether the
outside target of a symlink exists; (bso#14911);
(bsc#1193690).
* CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
module; (bso#14914); (bsc#1194859).
* CVE-2022-0336: Re-adding an SPN skips subsequent SPN
conflict checks; bso#14950); (bsc#1195048). - CVE-2021-44141: Information leak via symlinks of existance of
files or directories outside of the exported share; (bso#14911);
(bsc#1193690);
- CVE-2021-44142: Out-of-bounds heap read/write vulnerability
in VFS module vfs_fruit allows code execution; (bso#14914);
(bsc#1194859);
- CVE-2022-0336: Samba AD users with permission to write to an
account can impersonate arbitrary services; (bso#14950);
(bsc#1195048); - Update to 4.15.4
* Duplicate SMB file_ids leading to Windows client cache
poisoning; (bso#14928);
* Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error -
NT_STATUS_BUFFER_TOO_SMALL; (bso#14932);
* kill_tcp_connections does not work; (bso#14934);
* Can't connect to Windows shares not requiring authentication
using KDE/Gnome; (bso#14935);
* smbclient -L doesn't set "client max protocol" to NT1 before
calling the "Reconnecting with SMB1 for workgroup listing"
path; (bso#14939);
* Cross device copy of the crossrename module always fails;
(bso#14940);
* symlinkat function from VFS cap module always fails with an
error; (bso#14941);
* Fix possible fsp pointer deference; (bso#14942);
* Missing pop_sec_ctx() in error path inside close_directory();
(bso#14944);
* "smbd --build-options" no longer works without an smb.conf file;
(bso#14945); - Use pkgconfig(krb5) as dependency for the -devel package: allow
OBS to pick the right flavor of krb5-devel (full vs mini).
- Do not require the 'krb5' symbol by samba-client-libs: this
package has an automatic dependency due to linkage on
libgssapi_krb5.so.2. Automatic deps are always better.
- Do not require the 'krb5' symbol from samba-libs: samba-libs
requires samba-client-libs, which in turn requires krb5
libraries. Samba-libs itself has no need for krb5 (but get it
indirectly anyway). - Reorganize libs packages. Split samba-libs into samba-client-libs,
samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba
public libraries depending on internal samba libraries into these
packages as there were dependency problems everytime one of these
public libraries changed its version (bsc#1192684). The devel
packages are merged into samba-devel.
- Rename package samba-core-devel to samba-devel
- Add python-rpm-macros to build requirements
- Update the symlink create by samba-dsdb-modules to private samba
ldb modules following libldb2 changes from /usr/lib64/ldb/samba to
/usr/lib64/ldb2/modules/ldb/samba - Update to 4.15.3
* Recursive directory delete with veto files is broken in 4.15.0;
(bso#14878);
* A directory containing dangling symlinks cannot be deleted by
SMB2 alone when they are the only entry in the directory;
(bso#14879);
* SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used
uninitialized in rmdir_internals(); (bso#14892);
* MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694);
* The CVE-2020-25717 username map [script] advice has undesired
side effects for the local nt token; (bso#14901); (bsc#1192849);
* User with multiple spaces (eg FredNurk) become
un-deletable; (bso#14902);
* Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127);
* smbXsrv_client_global record validation leads to crash if existing
record points at non-existing process; (bso#14882);
* Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call;
(bso#14890);
* Samba process doesn't log to logfile; (bso#14897);
* set_ea_dos_attribute() fallback calling get_file_handle_for_metadata()
triggers locking.tdb assert; (bso#14907);
* Kerberos authentication on standalone server in MIT realm broken;
(bso#14922);
* Segmentation fault when joining the domain; (bso#14923);
* Support for ROLE_IPA_DC is incomplete; (bso#14903);
* rpcclient cannot connect to ncacn_ip_tcp services anymore;
(bso#14767);
* winexe crashes since 4.15.0 after popt parsing; (bso#14893);
* net ads status -P broken in a clustered environment; (bso#14908);
* Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before
smbd_smb2_ioctl_send; (bso#14788);
* winbindd doesn't start when "allow trusted domains" is off;
(bso#14899);
* smbclient login without password using '-N' fails with
NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883);
* A schannel client incorrectly detects a downgrade connecting to
an AES only server; (bso#14912);
* Possible null pointer dereference in winbind; (bso#14921);
* Fix -k legacy option for client tools like smbclient, rpcclient,
net, etc.; (bso#14846);
* Add Debian 11 CI bootstrap support; (bso#14872);
* Crash in recycle_unlink_internal(); (bso#14888); - Fix dependency problem upgrading from libndr0 to libndr2 and
from libsamba-credentials0 to libsamba-credentials1;
(bsc#1192684); - Fix regression introduced by CVE-2020-25717 patches, winbindd
does not start when 'allow trusted domains' is off; (bso#14899);
- Update to 4.15.2
* CVE-2016-2124: SMB1 client connections can be downgraded to
plaintext authentication; (bso#12444); (bsc#1014440);
* CVE-2020-25717: A user on the domain can become root on domain
members; (bso#14556); (bsc#1192284);
* CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos
tickets issued by an RODC; (bso#14558); (bsc#1192246);
* CVE-2020-25719: Samba AD DC did not always rely on the SID and
PAC in Kerberos tickets; (bso#14561); (bsc#1192247);
* CVE-2020-25721: Kerberos acceptors need easy access to stable
AD identifiers (eg objectSid); (bso#14557); (bsc#1192505);
* CVE-2020-25722: Samba AD DC did not do suffienct access and
conformance checking of data stored; (bso#14564);
(bsc#1192283);
* CVE-2021-3738: Use after free in Samba AD DC RPC server;
(bso#14468); (bsc#1192215);
* CVE-2021-23192: Subsequent DCE/RPC fragment injection
vulnerability; (bso#14875); (bsc#1192214);
- Update to 4.15.1
* vfs_shadow_copy2: core dump in make_relative_path; (bso#14682);
* Log clutter from filename_convert_internal; (bso#14685);
* MacOSX compilation fixes; (bso#14862);
* rodc_rwdc test flaps; (bso#14868);
* Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
bit' S4U2Proxy Constrained Delegation bypass in Samba with
embedded Heimdal; (bso#14642);
* Python ldb.msg_diff() memory handling failure; (bso#14836);
* "in" operator on ldb.Message is case sensitive; (bso#14845);
* Release LDB 2.4.1 for Samba 4.15.1; (bso#14848);
* samldb_krbtgtnumber_available() looks for incorrect string;
(bso#14854);
* Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871);
* Allow special chars like "@" in samAccountName when generating
the salt; (bso#14874);
* Correctly ignore comments in CTDB public addresses file;
(bso#14826);
* Fix transit path validation; (bso#12998);
* Fix that child winbindd logs to log.winbindd instead of
log.wb-; (bso#14852);
* SMB3 cancel requests should only include the MID together with
AsyncID when AES-128-GMAC is used; (bso#14855);
* Prepare to operate with MIT krb5 >= 1.20; (bso#14870);
* Heimdal prefers RC4 over AES for machine accounts; (bso#14864); - Enable samba-tool without ad dc. - Adjust spec to use pam macros; (bsc#1191046). - Adjust spec for size
* allow some Recommends instead Requires to be configured
for cifs-utils, samba-libs-python3 & samba-gpupdate;
(bsc#1182847).
* remove fam, undocumented and unneeded. - Add missing build dependency on bison when building with the
embedded Heimdal Kerberos - Update to 4.15.0
* Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10
* VFS layer modernized.
* Add the ability to set allow/deny lists for zone transfer clients
in Bind DLZ plugin
* Server multi-channel support no longer experimental
* Improved command line user experience, unifying the options in
different commands
* Winbindd no longer scans trusted domains on startup and will use
enterprise principals by default.
* The net utility is now able to support the offline domain join feature
* New options for 'samba-tool dns zoneoptions' for aging control
and to mark old records as static or dynamic
* DNS tombstones are now deleted as appropriate and use a consistent
timestamp format
* The 'samba-tool dns update' command validates and rejects now malformed
IPv4 and IPv6 addresses
* The 'samba-tool domain backup' command correctly takes out locks
against concurrent modification during backup when using the LMDB
backend
* TruACL support has been removed
* NIS support has been removed - Fix 'net rpc' authentication when using the machine account;
(bsc#1189017); (bso#14796); - Fix dependency problem upgrading from libndr0 to libndr1;
(bsc#1189875);
- Fix dependency problem upgrading from libsmbldap0 to libsmbldap2;
(bsc#1189875);
- Fix wrong kvno exported to keytab after net ads changetrustpw due
to replication delay; (bsc#1188727);
- Add Certificate Auto Enrollment Policy; (jsc#SLE-18456).
- Update to 4.13.10
* s3: smbd: Ensure POSIX default ACL is mapped into returned
Windows ACL for directory handles; (bso#14708);
* Take a copy to make sure we don't reference free'd memory; (bso#14721);
* s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722);
* s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
change_file_owner_to_parent() error path; (bso#14736);
* samba-tool: Give better error information when the
'domain backup restore' fails with a duplicate SID; (bso#14575);
* smbd: Correctly initialize close timestamp fields; (bso#14714);
* Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740);
* ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475);
* gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750);
* smbXsrv_{open,session,tcon}: Protect
smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752);
* samba-tool domain backup offline doesn't work against bind DLZ
backend; (bso#14027);
* netcmd: Use next_free_rid() function to calculate a SID for
restoring a backup; (bso#14669);
- Update to 4.13.9
* s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696);
* Add documentation for dsdb_group_audit and dsdb_group_json_audit
to "log level", synchronise "log level" in smb.conf with the code; (bso#14689);
* Fix smbd panic when two clients open same file; (bso#14672);
* Fix memory leak in the RPC server; (bso#14675);
* s3: smbd: Fix deferred renames; (bso#14679);
* s3-iremotewinspool: Set the per-request memory context; (bso#14675);
* rpc_server3: Fix a memleak for internal pipes; (bso#14675);
* third_party: Update socket_wrapper to version 1.3.2; (bso#11899);
* third_party: Update socket_wrapper to version 1.3.3; (bso#14639);
* idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid
conflict; (bso#14663);
* Fix the build on OmniOS; (bso#14288);
- Update to 4.13.8
* CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571
- Update to 4.13.7
* Release with dependency on ldb version 2.2.1. - CVE-2021-20254 Buffer overrun in sids_to_unixids();
(bnc#14571); (bsc#1184677). - Fix offline domain backup not possible using lmdb version >= 0.9.26;
(bso#14676);
- Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574);
- Update to 4.13.6
* CVE-2020-27840: samba: Unauthenticated remote heap corruption
via bad DNs; (bso#14595); (bsc#1183572).
* CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
(bso#14655); (bsc#1183574).
- Update to 4.13.5
* s3:modules:vfs_virusfilter: Recent talloc changes cause infinite
start-up failure; (bso#14634);
* s3: libsmb: Add missing cli_tdis() in error path if encryption setup
failed on temp proxy connection; (bso#13992);
* smbd: In conn_force_tdis_done() when forcing a connection closed force
a full reload of services; (bso#14604);
* dbcheck: Check Deleted Objects and reduce noise in reports about
expired tombstones (bso#14593);
* s3: Fix fcntl waf configure check; (bso#14503);
* s3/auth: Implement "winbind:ignore domains"; (bso#14602);
* smbd: Use fsp->conn->session_info for the initial delete-on-close
token; (bso#14617);
* s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path;
(bso#14648);
* classicupgrade: Treat old never expires value right; (bso#14624);
* g_lock: Fix uninitalized variable reads; (bso#14636);
* s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898);
* lib:util: Avoid free'ing our own pointer; (bso#14625);
* HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505); - Spec file fixes around systemd and requires; (bsc#1182830);
- Align systemd service unit files with upstream provided ones. - Update to 4.13.4
* Work around special SMB2 IOCTL response behavior of NetApp Ontap
7.3.7; (bso#14607);
* Temporary DFS share setup doesn't set case parameters in the same
way as a regular share definition does; (bso#14612);
* lib: Avoid declaring zero-length VLAs in various messaging functions;
(bso#14605);
* Do not create an empty DB when accessing a sam.ldb; (bso#14579);
* vfs_fruit may close wrong backend fd; (bso#14596);
* Temporary DFS share setup doesn't set case parameters in the same way
as a regular share definition does; (bso#14612);
* vfs_virusfilter: Allocate separate memory for config char*; (bso#14606);
* vfs_fruit may close wrong backend fd; (bso#14596);
* Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7;
(bso#14607);
* The cache directory for the user gencache should be created recursively;
(bso#14601);
* Be more flexible with repository names in CentOS 8 test environments;
(bso#14594); - Uninstalling samba-client: Failed to disable unit, cifs.service
does not exists; (bsc#1180388); - Update to 4.13.3
+ libcli: smb2: Never print length if smb2_signing_key_valid() fails for
crypto blob; (bso#14210);
+ s3: modules: gluster. Fix the error I made in preventing talloc leaks
from a function; (bso#14486);
+ s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL
via TALLOC_FREE(); (bso#14515);
+ s3: spoolss: Make parameters in call to user_ok_token() match all other
uses; (bso#14568);
+ s3: smbd: Quiet log messages from usershares for an unknown share;
(bso#14590);
+ samba process does not honor max log size; (bso#14248);
+ vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE;
(bso#14587);
+ s3-libads: Pass timeout to open_socket_out in ms; (bso#13124);
+ s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486);
+ smbclient: Fix recursive mget; (bso#14517);
+ clitar: Use do_list()'s recursion in clitar.c; (bso#14581);
+ manpages/vfs_glusterfs: Mention silent skipping of write-behind
translator; (bso#14486);
+ vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573);
+ interface: Fix if_index is not parsed correctly; (bso#14514); - Update to 4.13.2
+ s3: modules: vfs_glusterfs: Fix leak of char **lines onto
mem_ctx on return; (bso#14486);
+ RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
(bso#14471);
+ smb.conf.5: Add clarification how configuration changes reflected
by Samba; (bso#14538);
+ daemons: Report status to systemd even when running in foreground;
(bso#14552);
+ DNS Resolver: Support both dnspython before and after 2.0.0;
(bso#14553);
+ s3-vfs_glusterfs: Refuse connection when write-behind xlator is
present; (bso#14486);
+ provision: Add support for BIND 9.16.x; (bso#14487);
+ ctdb-common: Avoid aliasing errors during code optimization;
(bso#14537);
+ libndr: Avoid assigning duplicate versions to symbols; (bso#14541);
+ docs: Fix default value of spoolss:architecture; (bso#14522);
+ winbind: Fix a memleak; (bso#14388);
+ s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531);
+ docs-xml/manpages: Add warning about write-behind translator for
vfs_glusterfs; (bso#14486);
+ nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h.
+ vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530);
+ third_party: Update resolv_wrapper to version 1.1.7; (bso#14547);
+ examples:auth: Do not install example plugin; (bso#14550);
+ ctdb-recoverd: Drop unnecessary and broken code; (bso#14513);
+ RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
(bso#14471); - Adjust smbcacls '--propagate-inheritance' feature to align with
upstream; (bsc#1178469). - Update to samba 4.13.1
+ CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
easily crafted records; (bsc#1177613); (bso#14472);
+ CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
(bso#14436);
+ CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
(bsc#1173902); (bso#14434);
- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
/var/run/samba; (bsc#1177355); - Fix vfs_ceph query_directory regression; (bso#14519)
- Drop liburing-devel for SLE15-SP2; (bsc#1177245) - Register CTDB recovery lock holder with ceph-mgr
- Add liburing-devel dependency - Update to samba 4.13.0
+ Require Python 3.6
+ Move wide links functionality into VFS module
+ Deprecate NT4-like 'classic' Samba domain controllers
+ Deprecate SMBv1 only protocol options
+ Remove deprecated "ldap ssl ads" option
+ Unify asynchronous DCE-RPC server; (jsc#SES-645)
+ Replay multichannel lease break requests; (bso#11897); (jsc#SES-655)
+ Drop internal byteorder.h header from util-devel package
+ Remove final code for the AD DC LDAP backend
+ Add AD DC Group Policy Scripts
+ Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399)
+ Fix %U substitutions if it contains a domain name; (bso#14467)
+ Fix krb5.conf creation for 'net ads join'; (bso#14479)
+ Fix build problem if libbsd-dev is not installed; (bso#14482)
+ Toggle vfs_snapper using "--with-shared-modules"; (bso#14437)
+ Fix idmap_ad RFC4511 response handling; (bso#14465)
+ Fix panic in get_lease_type(); (bso#14428) - Update to samba 4.11.13
+ CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
(bso#14497);
+ CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
"server require schannel:WORKSTATION$ = no" about unsecure configurations;
(bsc#1176579); (bso#14497);
+ CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
challenge; (bsc#1176579); (bso#14497);
+ CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
(bsc#1176579); (bso#14497);
- Update to samba 4.11.12
+ s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
+ dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
on RHEL7; (bso#14424);
+ dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
+ lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
(bso#14426);
+ s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
+ lib/util: do not install "test_util_paths"; (bso#14370);
+ lib:util: Fix smbclient -l basename dir; (bso#14345);
+ s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
+ util: Allow symlinks in directory_create_or_exist; (bso#14166);
+ docs: Fix documentation for require_membership_of of pam_winbind;
(bso#14358);
+ s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
(bso#14425); - Add obsoletes to libsmbldap2 package to fix upgrades from previous
versions; (bsc#1172810); - Fix net command unable to negotiate SMB2; (bsc#1174120); - Update to samba 4.11.11
+ CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
and VLV combined; (bso#14364); (bsc#1173159]
+ CVE-2020-10745: invalid DNS or NBT queries containing dots use
several seconds of CPU each; (bso#14378); (bsc#1173160).
+ CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
server with paged_result or VLV; (bso#14402); (bsc#1173161)
+ CVE-2020-14303: Endless loop from empty UDP packet sent to
AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
+ Fix segfault when using SMBC_opendir_ctx() routine for share
folder that contains incorrect symbols in any file name;
(bso#14374).
+ vfs_shadow_copy2 doesn't fail case looking in
snapdirseverywhere mode; (bso#14350)
+ ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
(bso#14413).
+ Malicous SMB1 server can crash libsmbclient; (bso#14366)
+ winbindd: Fix a use-after-free when winbind clients exit;
(bso#14382)
+ ldb: Bump version to 2.0.11, LMDB databases can grow without
bounds. (bso#14330)
- Update to samba 4.11.9
+ nmblib: Avoid undefined behaviour in handle_name_ptrs();
(bso#14242).
+ 'samba-tool group' commands do not handle group names with
special chars correctly; (bso#14296).
+ smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
is not valid; (bso#14237).
+ Missing check for DMAPI offline status in async DOS
attributes; (bso#14293).
+ smbd: Ignore set NTACL requests which contain
S-1-5-88 NFS ACEs; (bso#14307).
+ vfs_recycle: Prevent flooding the log if we're called on
non-existant paths; (bso#14316)
+ smbd mistakenly updates a file's write-time on close;
(bso#14320).
+ RPC handles cannot be differentiated in source3 RPC server;
(bso#14359).
+ librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
+ nsswitch: Fix use-after-free causing segfault in
_pam_delete_cred; (bso#14327).
+ Fix fruit:time machine max size on arm; (bso#13622)
+ CTDB recovery corner cases can cause record resurrection
and node banning; (bso#14294).
+ ctdb: Fix a memleak; (bso#14348).
+ libsmb: Don't try to find posix stat info in SMBC_getatr().
+ ctdb-tcp: Move free of inbound queue to TCP restart;
(bso#14295); (bsc#1162680).
+ s3/librpc/crypto: Fix double free with unresolved
credential cache; (bso#14344); (bsc#1169095)
+ s3:libads: Fix ads_get_upn(); (bso#14336).
+ CTDB recovery corner cases can cause record resurrection
and node banning; (bso#14294)
+ Starting ctdb node that was powered off hard before
results in recovery loop; (bso#14295); (bsc#1162680).
+ ctdb-recoverd: Avoid dereferencing NULL rec->nodemap;
(bso#14324)
- Update to samba 4.11.8
+ CVE-2020-10700: Use-after-free in Samba AD DC LDAP
Server with ASQ; (bso#14331); (bsc#1169850);
+ CVE-2020-10704: LDAP Denial of Service (stack overflow)
in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
+ s3: lib: nmblib. Clean up and harden nmb packet
processing; (bso#14239).
+ s3: VFS: full_audit. Use system session_info if called
from a temporary share definition; (bso#14283)
+ dsdb: Correctly handle memory in objectclass_attrs;
(bso#14258).
+ ldb: version 2.0.9, Samba 4.11 and later give incorrect
results for SCOPE_ONE searches; (bso#14270)
+ auth: Fix CIDs 1458418 and 1458420 Null pointer
dereferences; (bso#14247).
+ smbd: Handle EINTR from open(2) properly; (bso#14285)
+ winbind member (source3) fails local SAM auth with empty
domain name; (bso#14247)
+ winbindd: Handling missing idmap in getgrgid(); (bso#14265).
+ lib:util: Log mkdir error on correct debug levels;
(bso#14253).
+ wafsamba: Do not use 'rU' as the 'U' is deprecated in
Python 3.9; (bso#14266).
+ ctdb-tcp: Make error handling for outbound connection
consistent; (bso#14274).
- Update to samba 4.11.6
+ pygpo: Use correct method flags; (bso#14209).
+ vfs_ceph_snapshots: Fix root relative path handling;
(bso#14216); (bsc#1141320).
+ Avoiding bad call flags with python 3.8, using METH_NOARGS
instead of zero; (bso#14209).
+ source4/utils/oLschema2ldif: Include stdint.h before
cmocka.h; (bso#14218).
+ docs-xml/winbindnssinfo: Clarify interaction with
idmap_ad etc; (bso#14122).
+ smbd: Fix the build with clang; (bso#14251).
+ upgradedns: Ensure lmdb lock files linked; (bso#14199).
+ s3: VFS: glusterfs: Reset nlinks for symlink entries during
readdir; (bso#14182).
+ smbc_stat() doesn't return the correct st_mode and also
the uid/gid is not filled (SMBv1) file; (bso#14101).
+ librpc: Fix string length checking in
ndr_pull_charset_to_null(); (bso#14219).
+ ctdb-scripts: Strip square brackets when gathering
connection info; (bso#14227). - Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307); - Installing: samba - samba-ad-dc.service does not exist and unit
not found; (bsc#1171437); - Fix samba_winbind package is installing python3-base without
python3 package; (bsc#1169521); - Require libldb2 >= 2.0.10 after security release. - CVE-2020-10704: LDAP Denial of Service (stack overflow) in
Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
ASQ; (bso#14331); (bsc#1169850); - Fix smbclient crash with double free (with unresolved krb5
credential cache); (bso#14344); (bsc#1169095). - Starting ctdb node that was powered off hard before results
in recovery loop; (bso#14295); (bsc#1162680). - CTDB doesn't retry outgoing connections on bind (and some other)
failures; (bso#14274); (bsc#1162680). - Revert: Allow idmap_rid to have primary group other than
"Domain Users"; (bsc#1087931). - Fix nmbstatus not reporting detailed information about workgroups;
(bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927); - Update to samab 4.11.5
+ CVE-2019-14902: Replication of ACLs down subtree on
AD Directory is not automatic; (bso#12497); (bsc#1160850).
+ CVE-2019-19344: Fix server crash with
dns zone scavenging = yes; (bso#14050); (bsc#1160852).
+ CVE-2019-14907: server-side crash after charset conversion
failure (eg during NTLMSSP processing); (bso#14208);
(bsc#1160888).
- Update to samba 4.11.4
+ Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
(bso#14161).
+ Ensure we don't call cli_RNetShareEnum() on an SMB1
connection; (bso#14174).
+ NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
SMBC_opendir_ctx; (bso#14176).
+ SMB2 - Ensure we use the correct session_id if encrypting
an interim response; (bso#14189).
+ Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
+ printing: Fix %J substition; (bso#13745).
+ Remove now unneeded call to cmdline_messaging_context();
(bso#13925).
+ Fix incomplete conversion of former parametric options;
(bso#14069).
+ Fix sync dosmode fallback in async dosmode codepath;
(bso#14070).
+ vfs_fruit returns capped resource fork length; (bso#14171).
+ libnet_join: Add SPNs for additional-dns-hostnames entries;
(bso#14116).
+ smbd: Increase a debug level; (bso#14211).
+ Prevent azure ad connect from reporting discovery errors
reference-value-not-ldap-conformant; (bso#14153).
+ krb5_plugin: Fix developer build with newer heimdal system
library; (bso#14179).
+ replace: Only link libnsl and libsocket if required;
(bso#14168);
+ ctdb: Incoming queue can be orphaned causing communication;
breakdown; (bso#14175).
+ ldb: Release ldb 2.0.8. Cross-compile will not take
cross-answers or cross-execute; (bso#13846).
+ heimdal-build: Avoid hard-coded /usr/include/heimdal in
asn1_compile-generated code; (bso#13856). - Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320). - Update to samba 4.11.3
+ CVE-2019-14861: DNSServer RPC server crash, an authenticated user
can crash the DCE/RPC DNS management server by creating records
with matching the zone name; (bso#14138); (bsc#1158108).
+ CVE-2019-14870: DelegationNotAllowed not being enforced, the
DelegationNotAllowed Kerberos feature restriction was not being
applied when processing protocol transition requests (S4U2Self),
in the AD DC KDC; (bso#14187); (bsc#1158109). - CVE-2019-14861: DNSServer RPC server crash, an authenticated user
can crash the DCE/RPC DNS management server by creating records
with matching the zone name; (bso#14138); (bsc#1158108).
- CVE-2019-14870: DelegationNotAllowed not being enforced, the
DelegationNotAllowed Kerberos feature restriction was not being
applied when processing protocol transition requests (S4U2Self),
in the AD DC KDC; (bso#14187); (bsc#1158109). - Update to samba 4.11.2
+ CVE-2019-10218: Client code can return filenames containing
path separators; (bsc#1144902); (bso#14071).
+ CVE-2019-14833: Samba AD DC check password script does not
receive the full password; (bso#12438).
+ CVE-2019-14847: User with "get changes" permission can crash
AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
+ Overlinking libreplace against librt and pthread against every
binary or library causes issues; (bso#14140);
+ kpasswd fails when built with MIT Kerberos; (bso#14155);
+ Fix spnego fallback from kerberos to ntlmssp in smbd server;
(bso#14106);
+ Stale file handle error when using mkstemp on a share; (bso#14137);
+ non-AES schannel broken; (bso#14134);
+ Joining Active Directory should not use SAMR to set the password;
(bso#13884);
+ smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
call on an SMB2 connection; (bso#14152);
+ Deleted records can be resurrected during recovery; (bso#14147);
+ getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
(bso#14141);
+ winbind does not list forest trusts with additional trust
attributes; (bso#14130);
+ fault report points to outdated documentation; (bso#14139);
+ pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
trusted domains/forests; (bso#14124);
+ classicupgrade results in uncaught exception - a bytes-like object
is required, not 'str'; (bso#14136);
+ pod2man is not longer required, stop checking at build time;
(bso#14131);
+ Exit code of ctdb nodestatus should not be influenced by deleted
nodes; (bso#14129);
+ username/password authentication doesn't work with CUPS and
smbspool; (bso#14128);
+ smbc_readdirplus() is incompatible with smbc_telldir() and
smbc_lseekdir(); (bso#14094); - CVE-2019-14847: User with "get changes" permission can
crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
separators; (bso#14071); (bsc#1144902); - CVE-2019-14833: samba: Accent with "check script password"
Samba AD DC check password script does not receive the full
password; (bso#12438); (bsc#1154289). - Update to samba 4.11.0
+ For details on all items see WHATSNEW.txt in samba-doc
package
+ Python2 runtime support removed; python 3.4 or later required
+ Security improvements:
- SMB1 disabled by default
- lanman and plaintext authentication deprecated
- winbind: PAM_AUTH and NTLM_AUTH events logged
- GnuTLS 3.2 required; system FIPS mode setting honored
+ CephFS Snapshot integration, exposed as previous file
versions
+ ctdb changes:
- onnode -o option removed
- ctdbd logs when using more than 90% of a CPU thread
- CTDB_MONITOR_SWAP_USAGE variable removed
+ AD Domain controller improvements:
- Upgrade AD databse format
- BIND9_FLATFILE deprecated
- default process model chagned to prefork
- bind9 dns operation duration logging
- Default schema updated to 2012_R2; function level is
unchanged
- many performance improvements
+ Configuration webserver support removed - Fix broken username/password authentication with CUPS and
smbspool; (bsc#1152143); (bso#14128). - Fix auth problems when printing via smbspool backend with kerberos;
(bnc#1148539); (bso#13832). - Update to samba 4.10.8
+ CVE-2019-10197: user escape from share path definition;
(bso#14035); (bsc#1141267); - Fix build on newer systems by modifying samba.spec to use
consistent non-relative paths for pammodules in configure line
and specification of pam_winbind.so library to package. - Update to samba 4.10.7
+ Unable to create or rename file/directory inside shares
configured with vfs_glusterfs_fuse module; (bso#14010).
+ build: Allow build when '--disable-gnutls' is set; (bso#13844)
+ samba-tool: Add 'import samba.drs_utils' to fsmo.py;
(bso#13973).
+ Fix 'Error 32 determining PSOs in system' message on old DB
with FL upgrade; (bso#14008).
+ s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021)
+ join: Use a specific attribute order for the DsAddEntry
nTDSDSA object; (bso#14046).
+ vfs_catia: Pass stat info to synthetic_smb_fname();
(bso#14015).
+ lookup_name: Allow own domain lookup when flags == 0;
(bso#14091).
+ s4 librpc rpc pyrpc: Ensure tevent_context deleted last;
(bso#13932).
+ DEBUGC and DEBUGADDC doesn't print into a class specific log
file; (bso#13915).
+ Request to keep deprecated option "server schannel",
VMWare Quickprep requires "auto"; (bso#13949).
+ dbcheck: Fallback to the default tombstoneLifetime of 180 days;
(bso#13967).
+ dnsProperty fails to decode values from older Windows versions;
(bso#13969).
+ samba-tool: Use only one LDAP modify for dns partition fsmo
role transfer; (bso#13973).
+ third_party: Update waf to version 2.0.17; (bso#13960).
+ netcmd: Allow 'drs replicate --local' to create partitions;
(bso#14051).
+ ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017). - CVE-2019-10197: user escape from share path definition;
(bso#14035); (bsc#1141267). - Prepare for use future use of kernel keyrings, modify
/etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059). - Update samba-winbind script to work with systemd; (bsc#1132739);
- Drop samba dhcpcd hook scripts
- Update to samba 4.10.6
+ s3: winbind: Fix crash when invoking winbind idmap scripts;
(bso#13956).
+ smbd does not correctly parse arguments passed to dfree and quota
scripts; (bso#13964).
+ samba-tool dns: use bytes for inet_ntop; (bso#13965).
+ samba-tool domain provision: Fix --interactive module in python3;
(bso#13828).
+ ldb_kv: Skip @ records early in a search full scan; (bso#13893).
+ docs: Improve documentation of "lanman auth" and "ntlm auth"
connection; (bso#13981).
+ python/ntacls: Use correct "state directory" smb.conf option instead
of "state dir"; (bso#14002).
+ registry: Add a missing include; (bso#13840).
+ Fix SMB guest authentication; (bso#13944).
+ AppleDouble conversion breaks Resourceforks; (bso#13958).
+ vfs_fruit makes direct use of syscalls like mmap() and pread();
(bso#13968).
+ s3:mdssvc: Fix flex compilation error; (bso#13987).
+ s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872).
+ dsdb:samdb: schemainfo update with relax control; (bso#13799).
+ s3:util: Move static file_pload() function to lib/util; (bso#13964).
+ smbd: Fix a panic; (bso#13957).
+ ldap server: Generate correct referral schemes; (bso#12478).
+ s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value;
(bso#13941).
+ s4 dsdb: Fix use after free in samldb_rename_search_base_callback;
(bso#13942).
+ dsdb/repl: we need to replicate the whole schema before we can apply it;
(bso#12204).
+ ldb: Release ldb 1.5.5; (bso#12478).
+ Schema replication fails if link crosses chunk boundary backwards;
(bso#13713).
+ 'samba-tool domain schemaupgrade' uses relax control and skips the
schemaInfo update provision; (bso#13799).
+ dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)]
..."; (bso#13916).
+ python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to
get the ACL; (bso#13917).
+ s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary;
(bso#13947).
+ Using Kerberos credentials to print using spoolss doesn't work;
(bso#13939).
+ wafsamba: Use native waf timer; (bso#13998).
+ ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984). - Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3)
+ CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found
in DnssrvOperation2; (bso#13922); (bsc#1137815).
+ CVE-2019-12436 dsdb/paged_results: Ignore successful results
without messages; (bso#13951); (bsc#1137816).
- Update to samba-4.10.4
+ s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938).
+ py/provision: Fix for Python 2.6; (bso#13882).
+ netcmd: Fix 'passwordsettings --max-pwd-age' command;
(bso#13873).
+ s3-libnet_join: 'net ads join' to child domain fails when
using "-U admin@forestroot"; (bso#13861).
+ vfs_ceph: Explicitly enable libcephfs POSIX ACL support;
(bso#13896); (bsc#1130245).
+ vfs_ceph: Fix cephwrap_flistxattr() debug message;
(bso#13940); (bsc#1134697).
+ ctdb-common: Avoid race between fd and signal events;
(bso#13895).
+ ctdb-common: Fix memory leak in run_proc; (bso#13943).
+ lib: Initialize getline() arguments; (bso#13892).
+ winbind: Fix overlapping id ranges; (bco#13903).
+ lib util debug: Increase format buffer to 4KiB; (bso#13902).
+ nsswitch pam_winbind: Fix Asan use after free; (bso#13927).
+ s4 lib socket: Ensure address string owned by parent struct;
(bso#13929).
+ s3 rpc_client: Fix Asan stack use after scope; (bso#13936).
+ s3:smbd: Handle IO_REPARSE_TAG_DFS in
SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097).
+ smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344).
+ smb2_sesssetup: avoid STATUS_PENDING responses for session setup;
(bso#12845).
+ smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698).
+ smb2_sesssetup: avoid STATUS_PENDING responses for session
setup; (bso#13796).
+ dbcheck: Fix the err_empty_attribute() check; (bso#13843).
+ vfs_snapper: Drop unneeded fstat handler; (bso#13858).
+ vfs_default: Fix vfswrap_offload_write_send()
NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862).
+ smb2_server: Grant all 8192 credits to clients; (bso#13863).
+ smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling;
(bso#13919).
+ s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872).
+ s3: modules: ceph: Use current working directory instead of
share path; (bso#13918); (bsc#1134452).
+ winbind: Use domain name from lsa query for sid_to_name cache
entry; (bso#13831).
+ memcache: Increase size of default memcache to 512k;
(bso#13865).
+ docs: Update smbclient manpage for "--max-protocol";
(bso#13857).
+ s3:utils: If share is NULL in smbcacls, don't print it;
(bso#13937).
+ s3:smbspool: Fix regression printing with Kerberos credentials;
(bso#13939).
+ ctdb-scripts: CTDB restarts failed NFS RPC services by hand,
which is incompatible with systemd; (bso#13860).
+ ctdb-daemon: Revert "We can not assume that just because we
could complete a TCP handshake"; (bso#13888).
+ ctdb-daemon: Never use 0 as a client ID; (bso#13930).
+ ctdb-common: Fix memory leak; (bso#13943).
+ s3:debug: Enable logging for early startup failures;
(bso#13904)
- Update to samba-4.10.3
+ CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed
checksum; (bso#13685); (bsc#1134024). - CVE-2019-12435: zone operations can crash rpc server;
(bso#13922); (bsc#1137815). - Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183). - Fix vfs_ceph realpath; (bso#13918); (bsc#1134452). - Update to samba-4.10.2:
+ CVE-2019-3870 (World writable files in
Samba AD DC private/ dir); (bso#13834).
+ CVE-2019-3880 (Save registry file outside share as
unprivileged user); (bso#13851).
+ py/kcc_utils: py2.6 compatibility; (bso#13837).
+ libcli: permit larger values of DataLength in
SMB2_ENCRYPTION_CAPABILITIES of negotiate response;
(bso#13869).
+ regfio: Improve handling of malformed registry hive files;
(bso#13840).
+ ctdb-version: Simplify version string usage; (bso#13789).
+ lib: Make fd_load work for non-regular files; (bso#13859).
+ dbcheck: in the middle of the tombstone garbage collection
causes replication failures,
dbcheck: add --selftest-check-expired-tombstones cmdline
option; (bso#13816).
+ ndr_spoolss_buf: Fix out of scope use of stack variable in
NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818).
+ s4/messaging: Fix undefined reference in linking
libMESSAGING-samba4.so; (bso#13854).
+ acl_read: Fix regression for empty lists; (bso#13836).
+ s4:dlz make b9_has_soa check dc=@ node; (bso#13841).
+ s3:client: Fix printing via smbspool backend with kerberos
auth; (bso#13832).
+ s4:librpc: Fix installation of Samba; (bso#13847).
+ s3:lib: Fix the debug message for adding cache entries;
(bso#13848).
+ s3:utils: Add 'smbstatus -L --resolve-uids' to show username;
(bso#13793).
+ s3:lib: Fix the debug message for adding cache entries;
(bso#13848).
+ s3:waf: Fix the detection of makdev() macro on Linux;
(bso#13853).
* ctdb-build: Drop creation of .distversion in tarball;
(bso#13789).
* ctdb-packaging: Test package requires tcpdump, ctdb package
should not own system library directory; (bso#13838).
- Update to samba-4.10.1:
+ py/kcc_utils: py2.6 compatibility; (bso#13837);
+ libcli: permit larger values of DataLength in
SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869);
+ regfio: Improve handling of malformed registry hive files; (bso#13840);
+ ctdb-version: Simplify version string usage; (bso#13789);
+ lib: Make fd_load work for non-regular files; (bso#13859);
+ dbcheck in the middle of the tombstone garbage collection causes
replication failures, dbcheck: add --selftest-check-expired-tombstones
cmdline option; (bso#13816);
+ ndr_spoolss_buf: Fix out of scope use of stack variable in
NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818);
+ s4/messaging: Fix undefined reference in linking
libMESSAGING-samba4.so; (bso#13854);
+ acl_read: Fix regression for empty lists; (bso#13836);
+ s4:dlz make b9_has_soa check dc=@ node; (bso#13841);
+ s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832);
+ s4:librpc: Fix installation of Samba; (bso#13847);
+ s3:lib: Fix the debug message for adding cache entries; (bso#13848);
+ s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793);
+ s3:lib: Fix the debug message for adding cache entries; (bso#13848);
+ s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853);
+ ctdb-build: Drop creation of .distversion in tarball; (bso#13789);
+ ctdb-packaging: Test package requires tcpdump, ctdb package
should not own system library directory; (bso#13838);
- Update to samba-4.10.0:
+ s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760);
+ access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
+ s4/scripting/bin: Open unicode files with utf8 encoding and write
+ unicode string.
+ sambaundoguididx: Use the right escaped oder unescaped sam ldb
files; (bso#13759);
+ Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813);
+ passdb: Update ABI to 0.27.2.
+ lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813);
+ lib:util: Move debug message for mkdir failing to log level 1; (bso#13823); - MacOS credit accounting breaks with async SESSION SETUP;
(bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
temporarily unavailable and drops connection; (bso#13698) - Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). - CVE-2019-3880: Save registry file outside share as unprivileged
user; (bso#13851); (bsc#1131060 ). - CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
(bso#13834); (bsc#1130703); - Update to samba-4.9.5
+ audit_logging: Remove debug log header and JSON Authentication:
prefix; (bso#13714);
+ Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
+ s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
CID: 1433607; (bso#11495);
+ smbd: uid: Don't crash if 'force group' is added to an existing
share connection; (bso#13690);
+ s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
code; (bso#13770);
+ s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
+ s3:utils/smbget fix recursive download with empty source
directories; (bso#13199);
+ samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
+ s3:libsmb: cli_smb2_list() can sometimes fail initially on a
connection; (bso#13736);
+ join: Throw CommandError instead of Exception for simple errors; (bso#13747);
+ ldb: Avoid inefficient one-level searches; (bso#13762);
+ s3: libsmb: use smb2cli_conn_max_trans_size() in
cli_smb2_list(); (bso#13736);
+ tldap: Avoid use after free errors; (bso#13776);
+ Fix idmap xid2sid cache churn; (bso#13802);
+ access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
+ s3-smbd: Avoid assuming fsp is always intact after close_file
call; (bso#13720);
+ s3-vfs-fruit: Add close call; (bso#13725);
+ s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
+ s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
+ printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
+ vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
ftruncate and fallocate; (bso#13807);
+ lib/audit_logging: Actually create talloc; (bso#13737);
+ netcmd/user: python[3]-gpgme unsupported and replaced by
python[3]-gpg; (bso#13728);
+ dns: Changing onelevel search for wildcard to subtree; (bso#13738);
+ samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
+ sambaundoguididx: Use the right escaped oder unescaped sam ldb
files; (bso#13759);
+ ctdb: Print locks latency in machinereadable stats; (bso#13742);
+ messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
+ audit_logging: auth_json_audit required auth_json; (bso#13715);
+ man pages: Document prefork process model; (bso#13765);
+ CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
+ s3:auth: ignore create_builtin_guests() failing without a valid
idmap configuration; (bso#13697);
+ s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
without trusts; (bso#13722);
+ s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
is not available; (bso#13723);
+ s4:server: Add support for 'smbcontrol samba shutdown' and
'smbcontrol debug/debuglevel'; (bso#13752);
+ Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
+ vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
+ s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
+ notifyd: Fix SIGBUS on sparc; (bso#13704);
+ waf: Check for libnscd; (bso#13787);
+ s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
+ lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
+ Recovery lock bug fixes; (bso#13800);
+ s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
+ s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
+ vfs_fileid: Fix get_connectpath_ino; (bso#13741);
+ vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744); - Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153). - Fix update-apparmor-samba-profile script after apparmor switched
to using named profiles. The change is backwards compatible;
(bsc#1126377); - LoadParm().load_default() fails with "Unable to load default file";
(bsc#1089758); - Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223); - Update to samba-4.9.4
+ libcli/smb: Don't overwrite status code; (bso#9175).
+ wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
+ Session setup reauth fails to sign response; (bso#13661).
+ vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
+ vfs_shadow_copy2: Nicely deal with attempts to open previous
version for writing; (bso#13688).
+ Restoring previous version of stream with vfs_shadow_copy2 fails
with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455).
+ CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
+ s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
+ PEP8: fix E231: missing whitespace after ','.
+ winbindd: Fix crash when taking profiles;(bso#13629)
+ CVE-2018-14629 dns: Fix CNAME loop prevention using counter
regression; (bso#13600)
+ 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
+ CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
+ lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
+ ctdb-daemon: Exit with error if a database directory does not
exist; (bso#13696).
+ s3:libads: Add net ads leave keep-account option; (bso#13498). - Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd. - Remove python2 build dependency from samba-libs; (bsc#1116900); - Update update-apparmor-samba-profile script to ignore the shares's
paths containing substitution variables in any place, not only at the
beginning of the path. - Update to samba-4.9.3
+ CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
Internal DNS server; (bso#13600); (bsc#1116319);
+ CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
(bsc#1116320);
+ CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
(bso#13674); (bsc#1116322);
+ CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
(bso#13669); (bsc#1116321);
+ CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
configuration (unsupported); (bso#13678); (bsc#1116324);
+ CVE-2018-16857: Bad password count in AD DC not always effective;
window; (bso#13683); (bsc#1116323); - Update to samba-4.9.2
+ dsdb: Add comments explaining the limitations of our current backlink
behaviour; (bso#13418);
+ Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
+ testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
(bso#13465);
+ Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
+ File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646);
+ Enabling vfs_fruit looses FinderInfo; (bso#13649);
+ Cancelling of SMB2 aio reads and writes returns wrong error
NT_STATUS_INTERNAL_ERROR; (bso#13667);
+ Fix CTDB recovery record resurrection from inactive nodes and simplify
vacuuming; (bso#13641);
+ examples: Fix the smb2mount build; (bso#13465);
+ libtevent: Fix build due to missing open_memstream on Illiumos;
(bso#13629);
+ winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662);
+ dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
(bso#13653);
+ Extended DN SID component missing for member after switching group
membership; (bso#13418);
+ Return STATUS_SESSION_EXPIRED error encrypted, if the request was
encrypted; (bso#13624);
+ python: Allow forced signing via smb.SMB(); (bso#13621);
+ lib:socket: If returning early, set ifaces; (bso#13665);
+ ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
encoded unicode; (bso#13616);
+ smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
(bso#13673);
+ waf: Add -fstack-clash-protection; (bso#13601);
+ winbind: Fix segfault if an invalid passdb backend is configured;
(bso#13668);
+ Fix bugs in CTDB event handling; (bso#13659);
+ Misbehaving nodes are sometimes not banned; (bso#13670); - lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373); - winbind requires latest version of libtevent-util0 to start - Backport latest gpo code from master
+ Read policy from local gpt cache
+ Offline policy application
+ Make group policy extensible via register/unregister gpext
+ gpext's run via a process_group_policy method - Enable profiling data collection - Change samba-kdc package name to samba-ad-dc
- Move samba-ad-dc.service to the samba-ad-dc package - Update to samba-4.9.1
+ s3: nmbd: Stop nmbd network announce storm; (bso#13620);
+ s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds;
(bso#13597);
+ CTDB recovery lock has some race conditions; (bso#13617);
+ s3-rpc_client: Advertise Windows 7 client info; (bso#13597);
+ ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610); - Tumbleweed doesn't define the sle_version macro, so we must
include a check for suse_version also. Otherwise python3 is
disabled on Tumbleweed. - Update to samba-4.9.0
+ samba_dnsupdate: Honor 'dns zone scavenging' option, only update if
needed; (bso#13605);
+ wafsamba: Fix 'make -j'; (bso#13606); - Update to samba-4.9.0rc5
+ s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only
returns absolute pathnames; (bso#13565);
+ s3: util: Do not take over stderr when there is no log file; (bso#13578);
+ Durable Reconnect fails because cookie.allow_reconnect is not
set; (bso#13549);
+ krb5-samba: Interdomain trust uses different salt principal; (bso#13539);
+ vfs_fruit: Don't unlink the main file; (bso#13441);
+ smbd: Fix a memleak in async search ask sharemode; (bso#13602);
+ Fix Samba GPO issue when Trust is enabled; (bso#11517);
+ samba-tool: Add "virtualKerberosSalt" attribute to
'user getpassword/syncpasswords'; (bso#13539);
+ Fix CTDB configuration issues; (bso#13589);
+ ctdbd logs an error until it can successfully connect to
eventd; (bso#13592); - Update to samba-4.9.0rc4
+ s3: smbd: Ensure get_real_filename() copes with empty
pathnames; (bso#13585);
+ samba domain backup online/rename commands force user to specify
password on CLI; (bso#13566);
+ wafsamba/samba_abi: Always hide ABI symbols which must be
local; (bso#13579);
+ Fix a panic if fruit_access_check detects a locking conflict; (bso#13584);
+ Fix memory and resource leaks; (bso#13567);
+ python: Fix print in dns_invalid.py; (bso#13580);
+ Aliasing issue causes incorrect IPv6 checksum; (bso#13588);
+ Fix CTDB configuration issues; (bso#13589);
+ s3: vfs: time_audit: fix handling of token_blob in
smb_time_audit_offload_read_recv(); (bso#13568); - Add missing zlib-devel dependency which was previously pulled in
by libopenssl-devel - Update to samba-4.9.0rc3+git.22.3fff23ae36e
+ CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against
returns from malicious servers; (bso#13453);
+ CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query
with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374);
+ CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when
not servicePrincipalName is set on a user; (bso#13552);
+ CVE-2018-10919: acl_read: Fix unauthorized attribute access via
searches; (bso#13434);
+ ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540);
+ CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it
is disabled via "ntlm auth"; (bso#13360);
+ s3-tldap: do not install test_tldap; (bso#13529);
+ ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540);
+ CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in
ltdb_index_dn_attr(); (bso#13374);
+ ctdb-eventd: Fix CID 1438155; (bso#13554);
+ Fix CIDs 1438243, (Unchecked return value) 1438244
(Unsigned compared against 0), 1438245 (Dereference before null check) and
1438246 (Unchecked return value); (bso#13553);
+ ctdb: Fix a cut&paste error; (bso#13554);
+ systemd: Only start smb when network interfaces are up; (bso#13559);
+ Fix quotas don't work with SMB2; (bso#13553);
+ s3/smbd: Ensure quota code is only called when quota support
detected; (bso#13563);
+ s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204);
+ s3:waf: Install eventlogadm to /usr/sbin; (bso#13561);
+ Shorten description in vfs_linux_xfs_sgid manual; (bso#13562); - Update to samba-4.9.0rc2+git.21.a1069afb007
+ s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537);
+ s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check();
(bso#13535);
+ samba-tool trust: Support discovery via netr_GetDcName; (bso#13538);
+ s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542);
+ Fix portability issues on freebsd; (bso#13520);
+ DNS wildcard search does not handle multiple labels correctly; (bso#13536);
+ samba-tool domain trust: Fix trust compatibility to Windows
Server 1709 and FreeIPA; (bso#13308);
+ Fix portability issues on freebsd; (bso#13520);
+ ctdb-protocol: Fix CTDB compilation issues; (bso#13545);
+ ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT
option; (bso#13546);
+ ctdb-doc: Provide an example script for migrating old
configuration; (bso#13550);
+ ctdb-event: Implement event tool "script list" command; (bso#13551); - Update to samba-4.8.4+git.37.a7a861d7982;
+ CVE-2018-1139: Weak authentication protocol allowed;
(bsc#1095048); (bsc#13360);
+ CVE-2018-1140: Denial of Service Attack on DNS and LDAP server;
(bsc#1095056); (bso#13466); (bso#13374);
+ CVE-2018-10858: Insufficient input validation on client directory
listing in libsmbclient; (bsc#1103411); (bso#13453);
+ CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server;
(bsc#1103414); (bso#13552);
+ CVE-2018-10919: Confidential attribute disclosure from the AD
LDAP server; (bsc#1095057); (bso#13434);
+ s3:winbind: winbind normalize names' doesn't work for users;
(bso#12851);
+ winbind: Fix UPN handling in canonicalize_username(); (bso#13369);
+ s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
+ samdb: Fix building Samba with gcc 8.1; (bso#13437);
+ s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
+ smbd: Flush dfree memcache on service reload; (bso#13446);
+ ldb: Save a copy of the index result before calling the
+ lib/util: No Backtrace given by Samba's AD DC by default;
(bso#13454).
+ s3: smbd: printing: Re-implement delete-on-close semantics for
print files missing since 3.5.x; (bso#13457).
+ python: Fix talloc frame use in make_simple_acl(); (bso#13474).
+ krb5_wrap: Fix keep_old_entries logic for older Kerberos
libraries;(bso#13478).
+ krb5_plugin: Add winbind localauth plugin for MIT Kerberos;
(bso#13480). - Add missing package descriptions; (bsc#1093864);
- Fix dependency issue between samba-python and samba-kdc; (bsc#1062876);
- Call update-apparmor-samba-profile when running samba-ad-dc;
(bsc#1092099); - Update to 4.8.2
+ After update to 4.8.0 DC failed with "Failed to find our own
NTDS Settings objectGUID" (bso#13335).
+ fix incorrect reporting of stream dos attributes on a
directory (bso#13380).
+ vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412).
+ vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425)
+ vfs_ceph: Fix memory leak; (bso#13424).
+ libsmbclient: Fix hard-coded connection error return of
ETIMEDOUT; (bso#13419).
+ s4-lsa: Fix use-after-free in LSA server; (bso#13420).
+ winbindd: Do re-connect if the RPC call fails in the passdb
case; (bso#13430).
+ cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416).
+ cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd
unclean process shutdown; (bso#13414).
+ ctdb-client: Remove ununsed functions from old client code;
(bso#13411).
+ printing: Return the same error code as windows does on upload
failures; (bso#13395).
+ nsswitch: Fix memory leak in winbind_open_pipe_sock() when the
privileged pipe is not accessable; (bso#13400).
+ s4:lsa_lookup: remove TALLOC_FREE(state) after all
dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420).
+ rpc_server: Fix NetSessEnum with stale sessions; (bso#13407).
+ s3:smbspool: Fix cmdline argument handling; (bso#13417). - Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is
required by some client libs; (bsc#1074135);
- Update to 4.8.1; (bsc#1091179);
+ s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
we don't own it here; (bso#13244);
+ s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
support fdopendir(); (bso#13270);
+ Round-tripping ACL get/set through vfs_fruit will increase the number of
ACE entries without limit; (bso#13319);
+ s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
issues; (bso#13347);
+ s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
delete access; (bso#13358);
+ s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
+ s3: smbd: Unix extensions attempts to change wrong field in fchown call;
(bso#13375);
+ ms_schema/samba-tool visualize: Fix python2.6 incompatibility;
(bso#13337);
+ Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352);
+ Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
+ winbindd: Recover loss of netlogon secure channel in case the peer DC is
rebooted; (bso#13332);
+ s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
+ ctdb-client: Fix bugs in client code; (bso#13356);
+ ctdb-scripts: Drop "net serverid wipe" from 50.samba event script;
(bso#13359);
+ s3: lib: messages: Don't use the result of sec_init() before calling
sec_init(); (bso#13368);
+ libads: Fix the build '--without-ads'; (bso#13273);
+ winbind: Keep "force_reauth" in invalidate_cm_connection, add
'smbcontrol disconnect-dc'; (bso#13332);
+ vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343);
+ dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
+ rpc_server: Fix core dump in dfsgetinfo; (bso#13370);
+ smbclient: Fix notify; (bso#13382);
+ Fix smbd panic if the client-supplied channel sequence number wraps;
(bso#13215);
+ Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
+ lib/util: Remove unused '#include ' from tests/tfork.c;
(bso#13342);
+ Fix build errors with cc from developerstudio 12.5 on Solaris;
(bso#13343);
+ Fix the picky-developer build on FreeBSD 11; (bso#13344);
+ s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345);
+ s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
+ lib:replace: Fix linking when libtirpc-devel overwrites system headers;
(bso#13341);
+ winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid
query; (bso#13312);
+ s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376);
+ Allow AESNI to be used on all processor supporting AESNI; (bso#13302); - Use new foreground execution flags for systemd samba daemons;
(bsc#1088574); (bsc#1071090); (bsc#1065551);
+ Add %post scriptlet to clear old sysconfig flags
- Update vendor-files to commit 880b3e7.
+ Set samba sysconfig template variables to ""
+ Add required daemon flags directly to systemd unit - Specfile cleanup
+ Remove %if..%endif guards which don't affect the build
+ Remove redundant %clean section
+ Replace old $RPM_* shell vars with macros - BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in
place of systemd and systemd-devel: Allow OBS to optimize the
workload by allowing the usage of the 'build-optimized' systemd
packages. - Enable building samba with python3, and create a samba-python3 package. - Update to 4.8
+ New GUID Index mode in sam.ldb for the AD DC
+ GPO support for samba KDC
+ Time machine support with vfs_fruit
+ Encrypted secrets
+ AD Replication visualization
+ Improved trust support
- ability to not scan global trust list
- AD external trusts have limited support
- verbose trusted domain listing
+ VirusFilter VFS module
+ NT4-style replication removed
+ vfs_aio_linux removed - Disable samba-pidl package, due to the removal of dependency
perl-Parse-Yapp; (bsc#1085150); - Update to 4.7.6;
+ CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
(bso#11343); (bsc#1081741);
+ CVE-2018-1057: Authenticated users can change other users' password;
(bso#13272); (bsc#1081024). - Disable python until full python3 port is done; (bsc#1082139);
+ Remove contents of package samba-python
+ Remove contents of package libsamba-policy0
+ Remove contents of package libsamba-policy-devel
+ Remove library libsamba-python-samba4.so from samba-libs package
+ Remove library libsamba-net-samba4.so from samba-libs package
+ Remove smbtorture binary and manpage from samba-test - samba fails to build with glibc2.27; (bsc#1081042); - Update to 4.7.5; (bsc#1080545);
+ smbd tries to release not leased oplock during oplock II downgrade;
(bso#13193);
+ Fix copying file with empty FinderInfo from Windows client to Samba share
with fruit; (bso#13181);
+ build: Deal with recent glibc sunrpc header removal; (bso#10976);
+ Make Samba work with tirpc and libnsl2; (bso#13238);
+ vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
(bsc#1075206);
+ Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
(bso#12986);
+ ctdb-recovery-helper: Deregister message handler in error paths;
(bso#13188);
+ samba: Only use async signal-safe functions in signal handler; (bso#13240);
+ Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
(bso#12986);
+ repl_meta_data: Fix linked attribute corruption on databases
with unsorted links on expunge. dbcheck: Add functionality to fix the
corrupt database; (bso#13228);
+ Fix smbd panic when chdir returns error during exit; (bso#13189);
+ Make Samba work with tirpc and libnsl2; (bso#13238);
+ Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
(bso#13176); - Update to 4.7.4; (bsc#1080545);
+ s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
+ s3: libsmb: Fix valgrind read-after-free error in
cli_smb2_close_fnum_recv(); (bso#13171);
+ s3: libsmb: Fix reversing of oldname/newname paths when creating a
reparse point symlink on Windows from smbclient; (bso#13172);
+ Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
+ repl_meta_data: Allow delete of an object with dangling backlinks;
(bso#13095);
+ s4:samba: Fix default to be running samba as a deamon; (bso#13129);
+ Performance regression in DNS server with introduction of DNS wildcard,
ldb: Release 1.2.3; (bso#13191);
+ vfs_zfsacl: Fix compilation error; (bso#6133);
+ "smb encrypt" setting changes are not fully applied until full smbd
restart; (bso#13051);
+ winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
+ vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
+ winbindd: Dependency on trusted-domain list in winbindd in critical auth
codepath; (bso#13173);
+ repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
+ ctdb: sock_daemon leaks memory; (bso#13153);
+ TCP tickles not getting synchronised on CTDB restart; (bso#13154);
+ winbindd: winbind parent and child share a ctdb connection; (bso#13150);
+ pthreadpool: Fix deadlock; (bso#13170);
+ pthreadpool: Fix starvation after fork; (bso#13179);
+ messaging: Always register the unique id; (bso#13180);
+ s4/smbd: set the process group; (bso#13129);
+ Fix broken linked attribute handling; (bso#13095);
+ The KDC on an RWDC doesn't send error replies in some situations;
(bso#13132);
+ libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
+ g_lock conflict detection broken when processing stale entries;
(bso#13195);
+ s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
sessions; (bso#13197);
+ s3:libads: net ads keytab list fails with "Key table name malformed";
(bso#13166); (bsc#1067700);
+ Fix crash in pthreadpool thread after failure from pthread_create;
(bso#13170);
+ s4:samba: Allow samba daemon to run in foreground; (bso#13129);
(bsc#1065551);
+ third_party: Link the aesni-intel library with "-z noexecstack";
(bso#13174);
+ vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
options; (bso#13125); - Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
glibc) - smbc_opendir should not return EEXIST with invalid login credentials;
(bnc#1065868). - Update to 4.7.3; (bsc#1069666);
+ Non-smbd processes using kernel oplocks can hang smbd;
(bso#13121);
+ python: use communicate to fix Popen deadlock; (bso#13127);
+ smbd on disk file corruption bug under heavy threaded load;
(bso#13130);
+ tevent: version 0.9.34; (bso#13130);
+ s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
+ CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
(bsc#1060427);(bso#13041);
+ CVE-2017-15275: s3: smbd: Chain code can return uninitialized
memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE. - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - samba-tool requires samba-python; (bnc#1067771). - Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
+ Fix exporting subdirs with shadow_copy2; (bso#13091);
+ Currently if getwd() fails after a chdir(), we panic; (bso#13027);
+ Ensure default SMB_VFS_GETWD() call can't return a partially completed
struct smb_filename; (bso#13068);
+ sys_getwd() can leak memory or possibly return the wrong errno on older
systems; (bso#13069);
+ smbclient doesn't correctly canonicalize all local names before use;
(bso#13093);
+ Fix broken linked attribute handling; (bso#13095);
+ Missing LDAP query escapes in DNS rpc server; (bso#12994);
+ Link to -lbsd when building replace.c by hand; (bso#13087);
+ Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
(bso#6133);
+ Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
(bso#7909);
+ Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
(bso#7933);
+ Missing assignment in sl_pack_float; (bso#12991);
+ Wrong Samba access checks when changing DOS attributes; (bso#12995);
+ samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
+ groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
+ Enabling vfs_fruit results in loss of Finder tags and other xattrs;
(bso#13076);
+ man pages: Properly ident lists; (bso#9613);
+ smb.conf.5: Sort parameters alphabetically; (bso#13081);
+ Fix GUID string format on GetPrinter info; (bso#12993);
+ Remote serverid check doesn't check for the unique id; (bso#13042);
+ CTDB starts consuming memory if there are dead nodes in the cluster;
(bso#13056);
+ ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
+ libgpo doesn't sort the GPOs in the correct order; (bso#13046);
+ Remote serverid check doesn't check for the unique id; (bso#13042);
+ vfs_catia: Fix a potential memleak; (bso#13090);
+ Fix file change notification for renames; (bso#12903);
+ Samba DNS server does not honour wildcards; (bso#12952);
+ Can't change password in samba from a Windows client if Samba runs on
IPv6 only interface; (bso#13079);
+ vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
+ Apple client can't cope with SMB2 async replies when creating symlinks;
(bso#13047);
+ s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
+ Fix ntstatus_gen.h generation on 32bit; (bso#13099);
+ Fix a double free in vfs_gluster_getwd(); (bso#13100);
+ Fix resouce leaks and pointer issues; (bso#13101);
+ vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049); - Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
package won't be generated simply based on the fact that there is
no files section for the package. Allows the source validator to
ensure samba-kdc is a built package. - Update to 4.7.0;
+ Whole DB read locks: Improved LDAP and replication consistency;
(bso#12858).
+ Samba AD with MIT Kerberos
+ Dynamic RPC port range: Default range changed from "1024-1300" to
"49152-65535".
+ Authentication and Authorization audit support: New auth_audit debug
class.
+ Multi-process LDAP Server: The LDAP server in the AD DC now honours
the process model used for the rest of the 'samba' process.
+ Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
+ Additional password hashes stored in supplementalCredentials.
+ Improvements to DNS during Active Directory domain join.
+ Significant AD performance and replication improvements.
+ Query record for open file or directory.
+ Removal of lpcfg_register_defaults_hook().
+ Change of loadable module interface.
+ SHA256 LDAPS Certificates: The self-signed certificate generated for use
on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
self-signature.
+ CTDB no longer allows mixed minor versions in a cluster.
+ CTDB now ignores hints from Samba about TDB flags when attaching to
databases.
+ New configuration variable CTDB_NFS_CHECKS_DIR.
+ The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
+ The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
+ The example NFS Ganesha call-out has been improved.
+ A new "replicated" database type is available. - CVE-2017-12163: Prevent client short SMB1 write from
writing server memory to file; (bso#13020); (bsc#1058624). - CVE-2017-12150: Some code path don't enforce smb signing,
when they should; (bso#12997); (bsc#1058622). - CVE-2017-12151: Keep required encryption across SMB3 dfs
redirects; (bso#12996); (bsc#1058565). - Clean specfile assuming SUSE-only system and product >=SLE11
+ %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version}
are always undefined
+ %{_vendor} is "suse" and %{suse_version} is at least 1100 - Update to 4.6.7; (bsc#1054017)
+ Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
+ smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
+ vfs_ceph provides inconsistent directory listings; (bso#12911).
+ Misused talloc context can cause a user to crash their smbd by chaining
SMB1 commands.; (bso#12836).
+ Use-after free can crash libsmbclient code.; (bso#12927).
+ Server exit with active AIO can crash.; (bso#12925).
+ Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
+ fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
(bso#12898).
+ vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
+ smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
authentication; (bso#12886).
+ finder sidebar showing question mark instead of icon when using ip to
connect with vfs_fruit; (bso#12840).
+ Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes
from AD.; (bso#12720).
+ KCC run at selftest startup can fail spuriously due to a race;
(bso#12869).
+ winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
the remote change; (bso#12782).
+ rpc_pipe_client memory leaks due to long term memory context passed to
rpc_pipe_open_interface(); (bso#12890).
+ CVE-2017-2619 breaks accessing previous versions of directories with
snapshots in subdirectories of the share; (bso#12885).
+ dns_name_equal doing OOB read; (bso#12813).
+ replica_sync tests flap; (bso#12753).
+ Selftest should not call 'net cache flush' and wipe important winbind
entries; (bso#12868).
+ Old Samba versions don't support using recent ldb versions (>=1.1.30);
(bso#12859).
+ pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
+ race starting winbindd against posixacl test; (bso#12843).
+ Crash in the reentrant smbd_smb2_create_send() if the something fails in
the subsequent try; (bso#12832).
+ spnego.c passes the wrong argument order to gensec_update_ev() for the
FALLBACK case; (bso#12788).
+ Clients with SMB3 support can't connect with
"server max protocol = SMB2_02"; (bso#12772).
+ A log message of samb-tool user syncpasswords reverses string arguments in
a debug message "Call Popen[...".; (bso#12768).
+ The smb tarmode tests kills the share dir contents; (bso#12867).
+ Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
+ CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
+ manpage/index.html lists links not in alphabetical order; (bso#12854).
+ smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
+ If a record is locked in a database, then recovery does not complete;
(bso#12857).
+ debug_locks.sh script does not log any information; (bso#12856).
+ SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport
after error; (bso#12852).
+ smbclient can't parse DOMAIN+username if a different winbind separator is
used; (bso#12849).
+ Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
+ Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
(bso#12844).
+ cli->server_os not filled correctly; (bso#12779).
+ REGRESSION: smbclient doesn't print the session setup anymore;
(bso#12824).
+ smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
+ CTDB NFS call-out failures do not cause event failures; (bso#12837).
+ net command fails due to incorrectly return code; (bso#12828).
+ Fix building Samba with GCC 7.1; (bso#12827). - Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
(bsc#1048339). - fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
+ CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
(bsc#1048278). - Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339). - Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387). - Update to 4.6.5; (bsc#1040157)
+ Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
startup; (bso#12814).
+ vfs_expand_msdfs tries to open the remote address as a file path;
(bso#12687).
+ PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
(bso#12798).
+ With clustering get update_num_read_oplocks failed and PANIC:
num_share_modes == 1 assertion failure; (bso#11844).
+ contend_level2_oplocks_begin_default oplock optimisation doesn't carry
over to leases; (bso#12766).
+ `ctdb nodestatus` incorrectly displays status for all nodes with wrong
exit code; (bso#12802).
+ CTDB can spin hard on revoking readonly delegations if a node becomes
disconnected; (bso#12697).
+ Printing a share mode entry with leases can crash in the ndr code;
(bso#12793).
+ Fix flakey unit tests for eventd; (bso#12792).
+ CTDB daemon crashes if built with clang; (bso#12770).
+ smbcacls fails if no password is specified; (bso#12765).
+ idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
+ samba-tool user syncpasswords doesn't trigger the script when a user gets
removed; (bso#12767).
+ systemd: fix detection of libsystemd; (bso#12764).
+ Notify subsystem only maps first inotify mask to Windows notify filter;
(bso#12760).
+ Allow passing trusted domain password as plain-text to PASSDB layer;
(bso#12751).
+ Can't case-rename files with vfs_fruit; (bso#12749).
+ wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702).
+ vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
+ Ordering of notify responses broken; (bso#12756). - s3: libsmb: Fix error where short name length was read as 2
bytes, should be 1; (bso#11822); (bsc#1042419). - Revert explicit winbind %{version}-%{release} dependency.
+ The ABI has stabilized since (bsc#936909), so remove to fix cross-media
dependencies; (bsc#1037899). - Fix CVE-2017-7494 remote code execution from a writable share;
(bso#12780); (bsc#1038231). - Update to 4.6.3; (bsc#1036011)
+ s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
from shares with GlusterFS backend; (bso#12743).
+ Fix for Solaris C compiler; (bso#12559).
+ s3: locking: Update oplock optimization for the leases era; (bso#12628).
+ Make the Solaris C compiler happy; (bso#12693).
+ s3: libgpo: Allow skipping GPO objects that don't have the
expected LDAP attributes; (bso#12695).
+ Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
+ lib: debug: Avoid negative array access; (bso#12746).
+ cleanupdb: Fix a memory read error; (bso#12748).
+ streams_xattr and kernel oplocks results in
NT_STATUS_NETWORK_BUSY; (bso#7537).
+ winbindd: idmap_autorid allocates ids for unknown SIDs from other
backends; (bso#11961).
+ vfs_fruit: Resource fork open request with
flags=O_CREAT|O_RDONLY; (bso#12565).
+ manpages/vfs_fruit: Document global options; (bso#12615).
+ lib/pthreadpool: Fix a memory leak; (bso#12624).
+ Lookup-domain for well-known SIDs on a DC; (bso#12727).
+ winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
+ winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
+ credentials_krb5: use gss_acquire_cred for client-side GSSAPI
use case; (bso#12611).
+ lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
+ ctdb-readonly: Avoid a tight loop waiting for revoke to
complete; (bso#12697).
+ ctdb_event monitor command crashes if event is not specified;
(bso#12723).
+ ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
+ smbd: Fix smb1 findfirst with DFS; (bso#12558).
+ smbd: Do an early exit on negprot failure; (bso#12610).
+ winbindd: Fix substitution for 'template homedir'; (bso#12699).
+ s4:kdc: Disable principal based autodetected referral detection;
(bso#12554).
+ idmap_autorid: Allocate new domain range if the callers knows
the sid is valid; (bso#12613).
+ LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
+ PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
trusted domain; (bso#12725).
+ rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
+ winbindd: Fix password policy for pam authentication; (bso#12725).
+ s3:gse: Correctly handle external trusts with MIT; (bso#12554).
+ auth/credentials: Always set the realm if we set the principal
from the ccache; (bso#12611).
+ replace: Include sysmacros.h; (bso#12686).
+ s3:vfs_expand_msdfs: Do not open the remote address as a file;
(bso#12687).
+ s3:libsmb: Only print error message if kerberos use is forced;
(bso#12704).
+ winbindd: Child process crashes when kerberos-authenticating
a user with wrong password; (bso#12708).
+ vfs_fruit: Office document opens as read-only on macOS due to
CNID semantics; (bso#12715).
+ vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
fragmented; (bso#12737). - Generate and update vendor-files tarball from Git
+ SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416). - Generate source tarball directly from Git using OBS tar_scm
+ use version string derived from parent Git tag and commit hash
- remove obsolete vendor-files/tools/package-data version ID
+ explicitly generate ctdb manpages, needed without "make dist" - Update to 4.6.2
+ remove bso#12721 patches now upstream - Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
+ x86-64 and aarch64 - Enable librados CTDB lock helper for samba-ceph package; (fate#321622). - Build and install the html man pages (bsc#1021907). - Fix CVE-2017-2619 regression with "follow symlinks = no";
(bso#12721). - Update to 4.6.1
+ symlink race permits opening files outside share directory;
CVE-2017-2619; (bso#12496); (bsc#1027147)
+ testparm checks for valid idmap parameters
+ add new krb client encryption types
+ support for printer driver upload from windows 10
+ inherit owner = 'unix only' for improved quota support
+ improved CTDB event support
+ new primary group support for idmap_ad
+ idmap_hash deprecated
+ mvxattr added to recursively rename extended attributes - Remove chkconfig requirements for systemd systems - Don't call insserv if systemd is used - Fix check if we need to require insserv - async_req: make async_connect_send() "reentrant";
(bso#12105); (bsc#1024416). - Force usage of ncurses6-config thru NCURSES_CONFIG env var;
(bsc#1023847). - add missing patch for libnss_wins segfault; (bsc#995730). - Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933). - Document "winbind: ignore domains" parameter; (bsc#1019416). - Add base Samba dependency to samba-ceph package. - Update to 4.5.3
+ Heap-based Buffer Overflow Remote Code Execution Vulnerability;
CVE-2016-2123; (bso#12409); (bsc#1014437).
+ Don't send delegated credentials to all servers; CVE-2016-2125;
(bso#12445); (bsc#1014441).
+ denial of service due to a client triggered crash in the winbindd
parent process; CVE-2016-2126; (bso#12446); (bsc#1014442).
- 4.5.1 and 4.5.2 updates
+ various streams vfs fixes
+ various printing fixes
+ ntlm_auth: do not map explicitly empty domain
+ various stability fixes in smbd
+ match file compression ReFS behavior - Add missing ldb module directory; (bnc#1012092). - s3/client: obey 'disable netbios' smb.conf param, don't
connect via NBT port; (bsc#1009085); (bso#12418). - Include vfstest in samba-test; (bsc#1001203). - s3/winbindd: using default domain with user@domain.com format
fails; (bsc#997833). - Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730). - Update to 4.5.0
+ NTLM1 Authentication disabled by default
+ SMB2.1 leases enabled by default
+ Support for OFD locks
+ ctdb tool rewritten
+ Added shadow copy snapshot prefix parameter - Fix illegal memory access after memory has been deleted;
(bso#11836); (bsc#975299). - Prevent core, make sure response->extra_data.data is always
cleared out; (bsc#993692). - Don't package man pages for VFS modules that aren't built;
(boo#993707). - Fix population of ctdb sysconfig after source merge; (bsc#981566). - Enable vfs_ceph builds for Factory (x86-64)
+ Package as samba-ceph to avoid Ceph dependency in base package. - Update to 4.4.5
+ Prevent client-side SMB2 signing downgrade; CVE-2016-2119;
(bso#11860); (bsc#986869). - Remove obsolete syslog.target; (bsc#983938). - Honor smb.conf socket options in winbind; (bsc#975131). - Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522). - Update to 4.4.4
+ SMB3 multichannel: Add implementation of missing channel sequence
number verification; (bso#11809).
+ smbd:close: Only remove kernel share modes if they had been
taken at open; (bso#11919).
+ notifyd: Prevent NULL deref segfault in notifyd_peer_destructor;
(bso#11930).
+ s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796).
+ Fix case sensitivity issues over SMB2 or above; (bso#11438).
+ s3:smbd: Fix anonymous authentication if signing is mandatory.
(bso#11910)
+ Fix NTLM Authentication issue with squid; (bso#11914).
+ pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530).
+ Fix memory leak in share mode locking; (bso#11934). - Update to 4.4.3
+ Various post-badlock regressions; (bso#11841); (bso#11850);
(bso#11858); (bso#11870); (bso#11872).
+ Only allow idmap_hash for default idmap config (bso#11786).
+ smbd: Avoid large reads beyond EOF; (bso#11878).
+ vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls"
is set; (bso#11806).
+ libads: Record session expiry for spnego sasl binds; (bso#11852). - Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849);
(bsc#975962); (bsc#979268), (bsc#977669). - Revert shared library packaging to comply with SLPP - Update to 4.4.2
+ A man-in-the-middle can downgrade NTLMSSP authentication;
CVE-2016-2110; (bso#11688); (bsc#973031).
+ Domain controller netlogon member computer can be spoofed;
CVE-2016-2111; (bso#11749); (bsc#973032).
+ LDAP conenctions vulnerable to downgrade and MITM attack;
CVE-2016-2112; (bso#11644); (bsc#973033).
+ TLS certificate validation missing; CVE-2016-2113; (bso#11752);
(bsc#973034).
+ Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
(bso#11756); (bsc#973036).
+ "Badlock" DCERPC impersonation of authenticated account possible;
CVE-2016-2118; (bso#11804); (bsc#971965).
+ DCERPC server and client vulnerable to DOS and MITM attacks;
CVE-2015-5370; (bso#11344); (bsc#936862). - Fix samba.tests.messaging test and prevent potential tdb corruption
by removing obsolete now invalid tdb_close call; (bsc#974629). - Obsolete libsmbclient from libsmbclient0 while not providing it;
(bsc#972197). - Update to 4.4.0.
+ Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686);
CVE-2016-0771.
+ Getting and setting Windows ACLs on symlinks can change permissions on link
target; (bso#11648); CVE-2015-7560.
+ Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543.
+ s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem
with no ACL support; (bso#10489).
+ docs: Add example for domain logins to smbspool man page; (bso#11643).
+ smbd: Show correct disk size for different quota and dfree block sizes;
(bso#11681).
+ docs: Add smbspool_krb5_wrapper manpage; (bso#11690).
+ winbindd: Return trust parameters when listing trusts; (bso#11691).
+ ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696).
+ Crypto.Cipher.ARC4 is not available on some platforms, fallback to
M2Crypto.RC4.RC4 then; (bso#11699).
+ s3:utils/smbget: Set default blocksize; (bso#11700).
+ Streamline 'smbget' options with the rest of the Samba utils; (bso#11700).
+ s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702).
+ s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703).
+ loadparm: Fix memory leak issue; (bso#11708).
+ lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714).
+ s3:vfs:glusterfs: Fix build after quota changes; (bso#11715).
+ ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719).
+ lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723).
+ smbd: Fix CID 1351215 Improper use of negative value; (bso#11724).
+ smbd: Fix CID 1351216 Dereference null return value; (bso#11725).
+ s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new
file; (bso#11727).
+ docs: Add manpage for cifsdd; (bso#11730).
+ param: Fix str_list_v3 to accept ; again; (bso#11732).
+ lib/socket: Fix improper use of default interface speed; (bso#11734).
+ lib:socket: Fix CID 1350009: Fix illegal memory accesses
(BUFFER_SIZE_WARNING); (bso#11735).
+ libcli: Fix debug message, print sid string for new_ace trustee;
(bso#11738).
+ Fix installation path of Samba helper binaries; (bso#11739).
+ Fix memory leak in loadparm; (bso#11740).
+ tevent: version 0.9.28: Fix memory leak when old signal action restored;
(bso#11742).
+ smbd: Ignore SVHDX create context; (bso#11753).
+ Fix net join; (bso#11755).
+ s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add;
(bso#11755).
+ passdb: Add linefeed to debug message; (bso#11763).
+ s3:utils/smbget: Fix option parsing; (bso#11767).
+ libnet: Make Kerberos domain join site-aware; (bso#11769).
+ Reset TCP Connections during IP failover; (bso#11770).
+ ldb: Version 1.1.26; (bso#11772).
+ s3:smbd: Add negprot remote arch detection for OSX; (bso#11773).
+ vfs_glusterfs: Fix use after free in AIO callback; (bso#11774).
+ mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780).
+ "trustdom_list_done: Got invalid trustdom response" message should be
avoided; (bso#11782).
+ Mismatch between local and remote attribute ids lets replication fail with
custom schema; (bso#11783).
+ Quota is not supported on Solaris 10; (bso#11788).
+ Talloc: Version 2.1.6; (bso#11789).
+ smbd: Enable multi-channel if 'server multi channel support = yes' in the
config; (bso#11796).
+ build: Fix build when '--without-quota' specified; (bso#11798).
+ lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802).
+ Access based share enum: handle permission set in configuration files;
(bso#8093).
+ See also WHATSNEW.txt from the samba-doc package. - Update to 4.3.6.
+ Getting and setting Windows ACLs on symlinks can change permissions on link
target; CVE-2015-7560; (bso#11648); (bsc#968222).
+ Fix Out-of-bounds read in internal DNS server; CVE-2016-0771;
(bso#11128); (bso#11686); (bsc#968223). - Upgrade on-disk FSRVP server state to new version; (bsc#924519). - Only obsolete but do not provide gplv2/3 package names; (bsc#968973). - Relocate existing lock files to /var/lib/samba/lock; (bsc#968963). - Obsolete no longer existing samba-32bit package; (bsc#967625). - Update to 4.3.5.
+ s3:utils/smbget: Fix recursive download; (bso#6482).
+ s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi
with no ACL support; (bso#10489).
+ s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks;
(bso#11400).
+ vfs_shadow_copy2: Fix case where snapshots are outside the share;
(bso#11580).
+ smbclient: Query disk usage relative to current directory; (bso#11662).
+ winbindd: Handle expired sessions correctly; (bso#11670).
+ smbd: Show correct disk size for different quota and dfree block sizes;
(bso#11681).
+ smbcacls: Fix uninitialized variable; (bso#11682).
+ s3:smbd: Ignore initial allocation size for directory creation;
(bso#11684).
+ s3-client: Add a KRB5 wrapper for smbspool; (bso#11690).
+ s3-parm: Clean up defaults when removing global parameters; (bso#11693).
+ Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699).
+ s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703).
+ ctdb: Remove error messages after kernel security update; CVE-2015-8543;
(bso#11705).
+ loadparm: Fix memory leak issue; (bso#11708).
+ lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714).
+ ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ...";
(bso#11719).
+ s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new
file; (bso#11727).
+ param: Fix str_list_v3 to accept ";" again; (bso#11732). - Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361). - Simplify shared library packaging; (bsc#966956). - Enable clustering (CTDB) support; (bsc#966271). - s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703);
(bsc#964023). - Add quotes around path of update-apparmor-samba-profile; (bnc#962177). - Remove autoconf build-time requirement. - Update to 4.3.4.
+ vfs_fruit: Enable POSIX directory rename semantics; (bso#11065).
+ Crash: Bad talloc magic value - access after free; (bso#11394).
+ Copying files with vfs_fruit fails when using vfs_streams_xattr without
stream prefix and type suffix; (bso#11466).
+ samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given;
(bso#11613).
+ Fix a typo in the smb.conf manpage, explanation of idmap config;
(bso#11619).
+ Correctly initialize the list head when keeping a list of primary followed
by DFS connections; (bso#11624).
+ Reduce the memory footprint of empty string options; (bso#11625).
+ lib/async_req: Do not install async_connect_send_test; (bso#11639).
+ Fix typos in man vfs_gpfs; (bso#11641).
+ Make "hide dot files" option work with "store dos attributes = yes";
(bso#11645).
+ Fix a corner case of the symlink verification; (bso#11647); (bnc#960249).
+ Do not disable "store dos attributes" on-the-fly; (bso#11649).
+ Update lastLogon and lastLogonTimestamp; (bso#11659). - Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249). - Update to 4.3.3.
+ Malicious request can cause Samba LDAP server to hang, spinning using CPU;
CVE-2015-3223; (bso#11325); (bnc#958581).
+ Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
(bnc#958586).
+ Insufficient symlink verification (file access outside the share);
CVE-2015-5252; (bso#11395); (bnc#958582).
+ No man in the middle protection when forcing smb encryption on the client
side; CVE-2015-5296; (bso#11536); (bnc#958584).
+ Currently the snapshot browsing is not secure thru windows previous version
(shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
+ Fix Microsoft MS15-096 to prevent machine accounts from being changed into
user accounts; CVE-2015-8467; (bso#11552); (bnc#958585). - Update to 4.3.2.
+ vfs_gpfs: Re-enable share modes; (bso#11243).
+ dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327).
+ s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute
type of zero; (bso#11452).
+ Add libreplace dependency to texpect, fixes a linking error on Solaris;
(bso#11511).
+ s4: Fix linking of 'smbtorture' on Solaris; (bso#11512).
+ s4:lib/messaging: Use correct path for names.tdb; (bso#11562).
+ Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins;
(bso#11563).
+ async_req: Fix non-blocking connect(); (bso#11564).
+ auth: gensec: Fix a memory leak; (bso#11565).
+ lib: util: Make non-critical message a warning; (bso#11566).
+ Fix winbindd crashes with samlogon for trusted domain user; (bso#11569);
(bnc#949022).
+ smbd: Send SMB2 oplock breaks unencrypted; (bso#11570).
+ ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577).
+ s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer;
(bso#11581).
+ s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581).
+ manpage: Correct small typo error; (bso#11584).
+ s3: smbd: If EAs are turned off on a share don't allow an SMB2 create
containing them; (bso#11589).
+ Backport some valgrind fixes from upstream master; (bso#11597).
+ auth: Consistent handling of well-known alias as primary gid; (bso#11608).
+ winbind: Fix crash on invalid idmap configs; (bso#11612).
+ s3: smbd: have_file_open_below() fails to enumerate open files below an
open directory handle; (bso#11615).
+ Changing log level of two entries to DBG_NOTICE; (bso#9912). - Ensure samlogon fallback requests are rerouted after kerberos failure;
(bnc#953382); (bnc#953972). - Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0.
- Always use the default optimization even on pre-9.2 systems. - Remove redundant configure options while adding with-relro. - Relocate the lockdir to the /var/lib/samba/lock directory. - Cleanup and enhance the pidl sub package. - Require renamed python-ldb-devel and python-talloc-devel at build-time.
- Requires python-ldb and python-talloc from the python subpackage. - Update to 4.3.1.
+ s3: smbd: Fix our access-based enumeration on "hide unreadable" to match
Windows; (bso#10252).
+ nss_winbind: Fix hang on Solaris on big groups; (bso#10365).
+ smbd: Fix file name buflen and padding in notify repsonse; (bso#10634).
+ kerberos: Make sure we only use prompter type when available;
winbind: Fix 100% loop; (bso#11038).
+ source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053).
+ s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket;
(bso#11316).
+ s3: smbd: Fix mkdir race condition; (bso#11486).
+ pam_winbind: Fix a segfault if initialization fails; (bso#11502).
+ s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509).
+ s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related
subdirs; (bso#11515).
+ s3: smbd: Fix opening/creating :stream files on the root share directory;
(bso#11522).
+ lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526).
+ net: Fix a crash with 'net ads keytab create'; (bso#11528).
+ s3: smbd: Fix a crash in unix_convert(); (bso#11535).
+ s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix
(bso#11522); (bso#11535).
+ vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543).
+ vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547).
+ s3:locking: Initialize lease pointer in share_mode_traverse_fn();
(bso#11549).
+ s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550).
+ s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555).
+ s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names
is incorrect; (bso#11555). - Fix 100% CPU in winbindd when logging in with "user must change password on
next logon"; (bso#11038). - Relocate the tmpfiles.d directory to the client package; (bnc#947552). - Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
instead; (bnc#942716). - Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051). - Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502). - Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15
systems; (bnc#945013). - Update to 4.3.0.
+ Samba "map to guest = Bad uid" doesn't work; (bso#9862).
+ revert LDAP extended rule 1.2.840.113556.1.4.1941
LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493).
+ No objectClass found in replPropertyMetaData on ordinary objects
(non-deleted); (bso#10973).
+ Stream names with colon don't work with fruit:encoding = native;
(bso#11278).
+ NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291).
+ tevent_fd needs to be destroyed before closing the fd; (bso#11316).
+ "force group" with local group not working; (bso#11320).
+ strsep is not available on Solaris; (bso#11359).
+ smbtorture does not build when configured --with-system-mitkrb5;
(bso#11411).
+ Build with GPFS support is broken; (bso#11421).
+ Build broken with --disable-python; (bso#11424).
+ net share allowedusers crashes; (bso#11426).
+ nmbd incorrectly matches netbios names as own name; (bso#11427).
+ Python bindings don't check integer types; (bso#11429).
+ Python bindings don't check array sizes; (bso#11430).
+ CTDB's eventscript error handling is broken; (bso#11431).
+ Fix crash in nested ctdb banning; (bso#11432).
+ Cannot build ctdbpmda; (bso#11434).
+ samba-tool uncaught exception error; (bso#11436).
+ Crash in notify_remove caused by change notify = no; (bso#11444).
+ Poor SMB3 encryption performance with AES-GCM; (bso#11451).
+ Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451).
+ fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455).
+ --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and
install; (bso#11458).
+ xid2sid gives inconsistent results; (bso#11464).
+ ctdb: Fix the build on FreeBSD 10.1; (bso#11465).
+ Handling of 0 byte resource fork stream; (bso#11467).
+ AD samr GetGroupsForUser fails for users with "()" in their name;
(bso#11488). - Configure with --bundled-libraries=NONE; (bso#11458). - Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284). - Remove libiniparser-devel build-time requirement. - Update to 4.2.3.
+ s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
+ s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
+ winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
+ Logon via MS Remote Desktop hangs; (bso#11061).
+ s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
+ tevent: Add a note to tevent_add_fd(); (bso#11141).
+ s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
+ s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
+ smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
+ s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
(bso#11245).
+ s3:smb2: Add padding to last command in compound requests; (bso#11277).
+ Add IPv6 support to ADS client side LDAP connects; (bso#11281).
+ Add IPv6 support for determining FQDN during ADS join; (bso#11282).
+ s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
+ Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
+ Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
+ vfs_fruit: Add option "veto_appledouble"; (bso#11305).
+ tstream: Make socketpair nonblocking; (bso#11312).
+ idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
+ Group creation: Add msSFU30Name only when --nis-domain was given;
(bso#11315).
+ tevent_fd needs to be destroyed before closing the fd; (bso#11316).
+ Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
(bso#11319).
+ smbd/trans2: Add a useful diagnostic for files with bad encoding;
(bso#11323).
+ Change sharesec output back to previous format; (bso#11324).
+ Robust mutex support broken in 1.3.5; (bso#11326).
+ Kerberos auth info3 should contain resource group ids available from
pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
exists in PAC; (bso#11328); (bnc#912457).
+ s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
+ tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
+ tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
+ s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
(bso#11339).
+ s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
+ pidl: Make the compilation of PIDL producing the same results if the
content hasn't change; (bso#11356).
+ winbindd: Disconnect child process if request is cancelled at main
process; (bso#11358).
+ vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
(bso#11363).
+ docs: Overhaul the description of "smb encrypt" to include SMB3
encryption; (bso#11366).
+ s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
(bso#11367).
+ ncacn_http: Fix GNUism; (bso#11371). - Disable rpath usage; (bnc#902421). - Make the winbind package depend on the matching libwbclient version and
vice versa; (bnc#936909). - Backport changes to use resource group sids obtained from pac logon_info;
(bso#11328); (bnc#912457). - Order winbind.service Before and Want nss-user-lookup target. - Remove fam-devel build-time dependency for post-6 RHEL systems. - Update to 4.2.2.
+ s3:smbXsrv: refactor duplicate code into
smbXsrv_session_clear_and_logoff(); (bso#11182).
+ gencache: don't fail gencache_stabilize if there were records to delete;
(bso#11260).
+ s3: libsmbclient: After getting attribute server, ensure main srv pointer
is still valid; (bso#11186).
+ s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
(bso#11236).
+ s3: smbd: Incorrect file size returned in the response of
"FILE_SUPERSEDE Create"; (bso#11240).
+ Mangled names do not work with acl_xattr; (bso#11249).
+ nmbd rewrites browse.dat when not required; (bso#11254).
+ vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
(bso#11213).
+ s3:smbd: Add missing tevent_req_nterror; (bso#11224).
+ vfs: kernel_flock and named streams; (bso#11243).
+ vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
+ s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
are used; (bso#11284).
+ ctdb: check for talloc_asprintf() failure; (bso#11201).
+ spoolss: purge the printer name cache on name change; (bso#11210);
(bnc#901813).
+ CTDB statd-callout does not scale; (bso#11204).
+ vfs_fruit: also map characters below 0x20; (bso#11221).
+ ctdb: Coverity fix for CID 1291643; (bso#11201).
+ Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
+ Fix terminate connection behavior for asynchronous endpoint with PUSH
notification flavors; (bso#11226).
+ ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
+ ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
+ SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
directory is deleted; (bso#11257).
+ s3:winbindd: make sure we remove pending io requests before closing client
sockets; (bso#11141); (bnc#931854).
+ Fix panic triggered by smbd_smb2_request_notify_done() ->
smbXsrv_session_find_channel() in smbd; (bso#11182).
+ 'sharesec' output no longer matches input format; (bso#11237).
+ waf: Fix systemd detection; (bso#11200).
+ CTDB: Fix portability issues; (bso#11202).
+ CTDB: Fix some IPv6-related issues; (bso#11203).
+ CTDB statd-callout does not scale; (bso#11204).
+ 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
enter invalid values; (bso#11234).
+ libads: record service ticket endtime for sealed ldap connections;
(bso#11267).
+ lib/util: Include DEBUG macro in internal header files before samba_util.h;
(bso#11033). - Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854). - Remove the independently built libraries ldb, talloc, tdn, and tevent and
the post-10.3 renamed libsmbclient from baselibs.conf. - Drop redundant doc attribute from man pages. - Update to 4.2.1.
+ s3:winbind:grent: Don't stop group enumeration when a group has no gid;
(bso#8905).
+ Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
+ s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
servers that don't send the 2 unused fields; (bso#10016).
+ build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
+ waf: Fix the build on openbsd; (bso#10476).
+ s3: client: "client use spnego principal = yes" code checks wrong name;
(bso#10888).
+ spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
+ s3: lib: libsmbclient: If reusing a server struct, check every cli->timout
miliseconds if it's still valid before use; (bso#11079).
+ vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
+ backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
+ replace: Remove superfluous check for gcrypt header; (bso#11135).
+ Backport subunit changes; (bso#11137).
+ libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
implementation; (bso#11140).
+ s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
+ talloc: Version 2.1.2; (bso#11144).
+ Update libwbclient version to 0.12; (bso#11149).
+ brlock: Use 0 instead of empty initializer list; (bso#11153).
+ s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
+ docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
(bnc#913304).
+ s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
fails in the SMB1 case; (bso#11173).
+ backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
+ Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
+ s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
+ s4-process_model: Do not close random fds while forking; (bso#11180).
+ s3-passdb: Fix 'force user' with winbind default domain; (bso#11185). - Prevent samba package updates from disabling samba kerberos printing. - Add sparse file support for samba; (fate#318424). - Purge printer name cache on spoolss SetPrinter change; (bso#11210);
(bnc#901813). - Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374). - Simplify libxslt build requirement and README.SUSE install.
- Remove no longer required cleanup steps while populating the build root. - Remove deprecated base_rid example from idmap_rid manpage; (bso#11169);
(bnc#913304). - Update to 4.2.0.
+ smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115).
+ pam_winbind: fix warn_pwd_expire implementation; (bso#9056).
+ nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299).
+ Make 'profiles' work again; (bso#9629).
+ s3:smb2_server: protect against integer wrap with
"smb2 max credits = 65535"; (bso#9702).
+ Make validate_ldb of String(Generalized-Time) accept millisecond format
".000Z"; (bso#9810).
+ Use -R linker flag on Solaris, not -rpath; (bso#10112).
+ vfs: Add glusterfs manpage; (bso#10240).
+ Make 'smbclient' use cached creds; (bso#10279).
+ pdb: Fix build issues with shared modules; (bso#10355).
+ s4-dns: Add support for BIND 9.10; (bso#10620).
+ idmap: Return the correct id type to *id_to_sid methods; (bso#10720).
+ printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808).
+ Don't build vfs_snapper on FreeBSD; (bso#10834).
+ nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835).
+ idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837).
+ s3: smb2cli: query info return length check was reversed; (bso#10848).
+ s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849).
+ lib: uid_wrapper: Fix setgroups and syscall detection on a system without
native uid_wrapper library; (bso#10851).
+ winbind3: Fix pwent variable substitution; (bso#10852).
+ Improve samba-regedit; (bso#10859).
+ registry: Don't leave dangling transactions; (bso#10860).
+ Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861).
+ build: Do not install 'texpect' binary anymore; (bso#10862).
+ Fix testparm to show hidden share defaults; (bso#10864).
+ libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1
max=PROTOCOL_SMB2_02; (bso#10866).
+ Integrate CTDB into top-level Samba build; (bso#10892).
+ samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895).
+ s3-nmbd: Fix netbios name truncation; (bso#10896).
+ spoolss: Fix handling of bad EnumJobs levels; (bso#10898).
+ Fix smbclient loops doing a directory listing against Mac OS X 10 server
with a non-wildcard path; (bso#10904).
+ Fix print job enumeration; (bso#10905); (bnc#898031).
+ samba-tool: Create NIS enabled users and unixHomeDirectory attribute;
(bso#10909).
+ Add support for SMB2 leases; (bso#10911).
+ btrfs: Don't leak opened directory handle; (bso#10918).
+ s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920).
+ s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921).
+ pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932).
+ s3-keytab: fix keytab array NULL termination; (bso#10933).
+ s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940).
+ Cleanup add_string_to_array and usage; (bso#10942).
+ dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942).
+ Fix RootDSE search with extended dn control; (bso#10949).
+ Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952).
+ libcli/smb: only force signing of smb2 session setups when binding a new
session; (bso#10958).
+ s3-smbclient: Return success if we listed the shares; (bso#10960).
+ s3-smbstatus: Fix exit code of profile output; (bso#10961).
+ socket_wrapper: Add missing prototype check for eventfd; (bso#10965).
+ libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows
client does; (bso#10966).
+ vfs_streams_xattr: Check stream type; (bso#10971).
+ s3: smbd: Fix *allocate* calls to follow POSIX error return convention;
(bso#10982).
+ vfs_fruit: Add support for AAPL; (bso#10983).
+ Fix spoolss IDL response marshalling when returning error without clearing
info; (bso#10984).
+ dsdb-samldb: Check for extended access rights before we allow changes to
userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).
+ Fix IPv6 support in CTDB; (bso#10996).
+ ctdb-daemon: Use correct tdb flags when enabling robust mutex support;
(bso#11000).
+ vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005).
+ s3-util: Fix authentication with long hostnames; (bso#11008).
+ ctdb-build: Fix build without xsltproc; (bso#11014).
+ packaging: Include CTDB man pages in the tarball; (bso#11014).
+ pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords;
(bso#11016).
+ Make Sharepoint search show user documents; (bso#11022).
+ nss_wrapper: check for nss.h; (bso#11026).
+ Enable mutexes in gencache_notrans.tdb; (bso#11032).
+ tdb_wrap: Make mutexes easier to use; (bso#11032).
+ lib/util: Avoid collision which alread defined consumer DEBUG macro;
(bso#11033).
+ winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034).
+ s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037).
+ vfs_fruit: Fix base_fsp name conversion; (bso#11039).
+ vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040).
+ Fix authentication using Kerberos (not AD); (bso#11044).
+ net: Fix sam addgroupmem; (bso#11051).
+ vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055);
(bnc#913238).
+ cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058).
+ utils: Fix 'net time' segfault; (bso#11058).
+ libsmb: Provide authinfo domain for encrypted session referrals;
(bso#11059).
+ s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066).
+ vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069).
+ vfs/glusterfs: Change xattr key to match gluster key; (bso#11069).
+ vfs_glusterfs: Implement AIO support; (bso#11069).
+ s3-vfs: Fix developer build of vfs_ceph module; (bso#11070).
+ s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer;
(bso#11077); CVE-2015-0240; (bnc#917376).
+ vfs: Add a brief vfs_ceph manpage; (bso#11088).
+ s3: smbclient: Allinfo leaves the file handle open; (bso#11094).
+ Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain;
(bso#11097).
+ debug: Set close-on-exec for the main log file FD; (bso#11100).
+ s3: smbd: leases - losen paranoia check. Stat opens can grant leases;
(bso#11102).
+ s3: smbd: SMB2 close. If a file has delete on close, store the return info
before deleting; (bso#11104).
+ doc:man:vfs_glusterfs: improve the configuration section; (bso#11117).
+ snprintf: Try to support %j; (bso#11119).
+ ctdb-io: Do not use sys_write to write to client sockets; (bso#11124).
+ doc-xml: Add 'sharesec' reference to 'access based share enum';
(bso#11127). - Update to 4.2.0rc5.
+ Ensure we don't call talloc_free on an uninitialized pointer;
CVE-2015-0240; (bso#11077); (bnc#917376). - Fix usage of freed memory on server exit; (bso#11218); (bnc#919309). - Fix tdb_store_flag_to_ntdb() gcc5 build failure. - Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238). - Update to 4.1.16.
+ dsdb-samldb: Check for extended access rights before we allow changes to
userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). - Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0. - Fix libsmbclient DFS referral handling.
+ Reuse connections derived from DFS referrals; (bso#10123); (fate#316512).
+ Set domain/workgroup based on authentication callback value; (bso#11059). - Update to 4.2.0rc4.
- Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and
libhttp to the libs package; (boo#913547).
- Rename libpdb packages to libsamba-passdb.
- Drop libsmbsharemodes packages. - Enable avahi support on post-12.2 systems. - Update to 4.1.15.
+ pam_winbind: Fix warn_pwd_expire implementation; (bso#9056).
+ nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299).
+ Fix profiles tool; (bso#9629).
+ s3-lib: Do not require a password with --use-ccache; (bso#10279).
+ s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control;
(bso#10949).
+ s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952).
+ s3:smb2_server: Allow reauthentication without signing; (bso#10958).
+ s3-smbclient: Return success if we listed the shares; (bso#10960).
+ s3-smbstatus: Fix exit code of profile output; (bso#10961).
+ libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows
client does; (bso#10966).
+ s3: smbd/modules: Fix *allocate* calls to follow POSIX error return
convention; (bso#10982).
+ Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute
'supported_extensions'; (bso#11006).
+ idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo;
(bso#11006).
+ winbind: Retry LogonControl RPC in ping-dc after session expiration;
(bso#11034). - yast2-samba-client should be able to specify osName and osVer on
AD domain join; (bnc#873922). - Lookup FSRVP share snums at runtime rather than storing them persistently;
(bnc#908627). - Specify soft dependency for network-online.target in Winbind systemd service
file; (bnc#889175). - Fix spoolss error response marshalling; (bso#10984). - Update to 4.1.14.
+ pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/
Tools/perl.py back to upstream state; (bso#10472).
+ s4-dns: Add support for BIND 9.10; (bso#10620).
+ nmbd fails to accept "--piddir" option; (bso#10711).
+ nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835).
+ S3: source3/smbd/process.c::srv_send_smb() returns true on the error path;
(bso#10880).
+ vfs_glusterfs: Remove "integer fd" code and store the glfs pointers;
(bso#10889).
+ s3-nmbd: Fix netbios name truncation; (bso#10896).
+ spoolss: Fix handling of bad EnumJobs levels; (bso#10898).
+ s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set
STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904).
+ spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905).
+ s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920).
+ s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921).
+ pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932).
+ s3-keytab: Fix keytab array NULL termination; (bso#10933).
+ Cleanup add_string_to_array and usage; (bso#10942). - Remove and cleanup shares and registry state associated with
externally deleted snaphots exposed as shadow copies; (bnc#876312). - Use the upstream tar ball, as signature verification is now able to handle
compressed archives. - Fix leak when closing file descriptor returned from dirfd; (bso#10918). - Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031).
+ Fix handling of bad EnumJobs levels; (bso#10898). - Remove dependency on gpg-offline as signature checking is implemented in the
source validator. - Update to 4.1.13.
+ s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984).
+ s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984).
+ s3-libads: Add all machine account principals to the keytab; (bso#9985).
+ s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to
be NULL. Ensure this is safe with modern AD-DCs; (bso#10717).
+ Fix unstrcpy; (bso#10735).
+ pthreadpool: Slightly serialize jobs; (bso#10779).
+ s3: smbd: streams - Ensure share mode validation ignores internal opens
(op_mid == 0); (bso#10797).
+ s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809).
+ vfs_media_harmony: Fix a crash bug; (bso#10813).
+ docs: Mention incompatibility between kernel oplocks and streams_xattr;
(bso#10814).
+ nmbd: Send waiting status to systemd; (bso#10816).
+ libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL;
(bso#10817).
+ nsswitch: Skip groups we were not able to map; (bso#10824).
+ s3-winbindd: Use correct realm for trusted domains in idmap child;
(bso#10826).
+ s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830).
+ s3: lib: Signal handling - ensure smbrun and change password code save and
restore existing SIGCHLD handlers; (bso#10831).
+ idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837).
+ s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call;
(bso#10838).
+ s3: smb2cli: Query info return length check was reversed; (bso#10848).
+ registry: Don't leave dangling transactions; (bso#10860). - Update to 4.2.0rc2. /sbin/ldconfig /sbin/ldconfig libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr0 libndr1 libndr2 libnetapi0 libsamba-credentials0 libsamba-credentials1 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap0 libsmbldap2 libtevent-util0 libwbclient0 s390zl3a 1704181926
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60-150500.3.20.1 4.17.12+git.455.b299ac1e60-150500.3.20.1 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 4.17.12+git.455.b299ac1e60 libdcerpc-binding.so.0 libdcerpc-binding.so.0.0.1 libdcerpc-server-core.so.0 libdcerpc-server-core.so.0.0.1 libdcerpc.so.0 libdcerpc.so.0.0.1 libndr-krb5pac.so.0 libndr-krb5pac.so.0.0.1 libndr-nbt.so.0 libndr-nbt.so.0.0.1 libndr-standard.so.0 libndr-standard.so.0.0.1 libndr.so.3 libndr.so.3.0.0 libnetapi.so.1 libnetapi.so.1.0.0 libsamba-credentials.so.1 libsamba-credentials.so.1.0.0 libsamba-errors.so.1 libsamba-errors.so.1.0.0 libsamba-hostconfig.so.0 libsamba-hostconfig.so.0.0.1 libsamba-passdb.so.0 libsamba-passdb.so.0.28.0 libsamba-util.so.0 libsamba-util.so.0.0.1 libsamdb.so.0 libsamdb.so.0.0.1 libsmbclient.so.0 libsmbclient.so.0.7.0 libsmbconf.so.0 libsmbconf.so.0.0.1 libsmbldap.so.2 libsmbldap.so.2.1.0 libtevent-util.so.0 libtevent-util.so.0.0.1 libwbclient.so.0 libwbclient.so.0.15 libCHARSET3-samba4.so libMESSAGING-SEND-samba4.so libMESSAGING-samba4.so libaddns-samba4.so libads-samba4.so libasn1util-samba4.so libauth-samba4.so libauthkrb5-samba4.so libcli-cldap-samba4.so libcli-ldap-common-samba4.so libcli-ldap-samba4.so libcli-nbt-samba4.so libcli-smb-common-samba4.so libcli-spoolss-samba4.so libcliauth-samba4.so libclidns-samba4.so libcluster-samba4.so libcmdline-contexts-samba4.so libcmdline-samba4.so libcommon-auth-samba4.so libdbwrap-samba4.so libdcerpc-pkt-auth-samba4.so libdcerpc-samba-samba4.so libdcerpc-samba4.so libevents-samba4.so libflag-mapping-samba4.so libgenrand-samba4.so libgensec-samba4.so libgpo-samba4.so libgse-samba4.so libhttp-samba4.so libinterfaces-samba4.so libiov-buf-samba4.so libkrb5samba-samba4.so libldbsamba-samba4.so liblibcli-lsa3-samba4.so liblibcli-netlogon3-samba4.so liblibsmb-samba4.so libmessages-dgm-samba4.so libmessages-util-samba4.so libmscat-samba4.so libmsghdr-samba4.so libmsrpc3-samba4.so libndr-samba-samba4.so libndr-samba4.so libnet-keytab-samba4.so libnetif-samba4.so libnpa-tstream-samba4.so libprinting-migrate-samba4.so libregistry-samba4.so libreplace-samba4.so libsamba-cluster-support-samba4.so libsamba-debug-samba4.so libsamba-modules-samba4.so libsamba-security-samba4.so libsamba-sockets-samba4.so libsamba3-util-samba4.so libsamdb-common-samba4.so libsecrets3-samba4.so libserver-id-db-samba4.so libserver-role-samba4.so libsmb-transport-samba4.so libsmbclient-raw-samba4.so libsmbd-base-samba4.so libsmbd-shim-samba4.so libsmbldaphelper-samba4.so libsocket-blocking-samba4.so libsys-rw-samba4.so libtalloc-report-printf-samba4.so libtdb-wrap-samba4.so libtime-basic-samba4.so libtrusts-util-samba4.so libutil-reg-samba4.so libutil-setid-samba4.so libutil-tdb-samba4.so pdb ldapsam.so smbpasswd.so tdbsam.so /usr/lib64/ /usr/lib64/samba/ /usr/lib64/samba/pdb/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31987/SUSE_SLE-15-SP5_Update/5d6206584aa08ed2ed19252942a3645f-samba.SUSE_SLE-15-SP5_Update drpm xz 5 s390x-suse-linux
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=92035046c608e944443ed50c224e625cc3b6ea2a, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d335962fb349b347999e1aaec6f034369ff0ef8, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ae72d37a46e76b520984fb9ad809cc782579bae, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0bf1f8becab3f80975df377f67452b359149ed8, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=faef1ec650c55f244583a8e53fcf56a2a1fdf3c2, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=55412fd181ec099f17b864dc80152259b0911daf, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b97a2d356caed73b91d3690805219f76dbb5bb6, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5bd37274fd1e624c763a0c7502e60f8fab2fcf8c, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=41948bd0362269aa4c0050d539f5ba1ddfb03399, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0b24b32ba2425abcf0a0709578ec06d058d2af34, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=63cef2a1ec5dab777e4e026c7462938c9d5ce840, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=03419c3235965f272e98fa650233295401fd1c0b, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ed3928f455c1061bcb89db14b1158e6c792308d, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=04dfc976a6c92a14388c395304313caa25b7f4f0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1676cd259f9b2334a708a43774f8fb5f9d07fc3, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9b130bbc5144bf824f98ee0ab131cf5025c33388, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=deafb4c5d4092df64abf44bef712d2a1e2f01f29, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=263856c48c9807977e2e602f65dfd38af085232d, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=14cae181e4b7189510a08366f8f3cf2f2038e3cf, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3ad93415d40745f2f10822388f6c682ac0d67ed, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=14ae78ec35b3831f27a5241bb459512285d918f6, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d2333facc59f8ade1457ee49b0b1f9d119953e9d, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4719c5faf5e4b523bf87daed6fb4dde0bf588675, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=241ab489e059da10290a0de985fbe2bb029d5c88, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=648bf989542fb12be87d83d62bf53e0b6cf3f550, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4001a5330dd0cd53f93e0953e7f307c76c33a4fb, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=91cacf32516685c857f537cfdbde90c7cb5b69df, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=540ffa7b3d351a5f32e47abd166b32859985c4eb, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c46a9a3b78297e9dea382549cb34351157676bf3, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e01b7601ac790c699c6e91ea27414eb38204489, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=974f1f1a8579f8ee9efffc38dae4ff2ca16d712b, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a16978c6459dab6b98a96b5559f9f63912991797, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6bbbf84dab0ad45afbc250ea4e5368b990510a6e, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ab47308bf6f6656d395fa54912cc0f1ddc3e05b, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2cee255a4848f4b55e96017f0d2f1acbd217ebb8, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e3c4975e237c13072000eba2eb6ca132e2421ff, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6a22e689741215e78d960e55ea035cbc4293acb, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f77e91f199a40954b6209fbd3b6246f8771d7baf, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7c62debf31214cbd8d81356bb43cedf2df5fbb6b, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=18faf61f0ca6a9f84d33f28c531f5f7ccd41b4cc, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=73ed248c34db3d8dec5703312cc5c48aed9d234e, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9933855ad4291b69211bf95d4a1576cce42c4222, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=82f3e2218cd2b0ea6ef1b5666d715dd70a18f2b8, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c88a6e4a43a25e7265fecb899df2287edd6befc5, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4051a4859b6aa803887ca32b1bbf052a3f3f1f8, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=32d1965916e6d89f1e47235094a8d8f89033d3d1, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5a293ab0836fac4e0e75e9ae8f279b39ceaa6e2, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=304621785d81b657cd494bf4ab36fb3d6cd6eb03, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e323a61545aaa2020635f44fef7a45040c918360, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c14dbf5a202a8032bfe58578891bac2c77f7298, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=25cc9fcc22c895336438aad2b070e52946c68d85, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b85c3626e19310ea6408afd93c489e329c4b33a7, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=50fffe8ece6931b865292e4b6ed1398e2edacf24, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fcada65207d9b47aadbcf58f830ec5487af9a81c, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3ca2d15726eb13d4d54843144d2eda9d2882f13, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1896090a577a7344a8cae34a9540210ddd033b9, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=25193873dc0a1f29598d4f27136b4af17bdf5503, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb5ca180b43a9a4256252771878b074c9abd0b4f, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=66ad35a70af5be53e4fbfad30748e141e572e8e6, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ecfb41e347d099975c14ee6fea63cbfd38f6b52, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c233c59b522eea75ac7ab3a100c0ad9b347ef91a, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7ec36ea4101662139f3e885324ba06893287b62c, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0f498067b3c99b52c840d2303431ea18b8c8a0c, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b5cb7a37707d1049cf75cec8ece96c340852ee7, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d253b83af39fcd64aa4dd4fb51071c1189e3cebc, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c59c64f67caa5152f7b951e79ba70db98e27ca8, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d8639d5d4c25ce34f2f195a0f78a3f13367e3c8, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=62a93651ffae5b0de6dd00461e1e4a7f170f1e3f, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8318f4dd81dc2013f8c974f90c6c47264f0c2e1a, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e3f0e9dddea8f89f7dc1d0847fa1e016d61ed9ee, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=029fcfc4f10e598f16d8d90e1ff466b7e9c244cd, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad300d6989df0f842aaa80055bb022aa119cb80d, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff0805b8e94c2f55851ab636afba95970278b4ae, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=476e0170207e22e3942186215cce25d36deaef3b, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c152042708d0187527aaa8071cc5dfe7ec89d42c, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ccd41df0bf43b5253f1c71ddb1fa8078fb74172, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5542b1ce7a41149fc204bf1f7ae6016c04dc155, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6758aa8f5c9b59ac8874fa2518eb692a6d564f6f, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=90dd6b4d0f93aeae4df280d0765cabca7409af93, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=751cf1a664fdb8506d97369abc4a970d927d8007, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0197969a30b056d30f447842542242661f16d6ac, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=beacb68edc9296d2ad15fc055f4fca523a9a94fc, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=88cfbde936a663c61992a88ae45259535baf136b, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5d701ebe49fec46b2a3e9d80af3a6a31cd945695, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=82dd08ddea911dc66d68d36d2dc135f26bfdb28b, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=98a94f64247b4c369fc205dff717e4537dafb3e4, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d858a9f8705c569886110b546a9d46bd4a4527b1, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad6ab37755bc4e8490253d5a94dded6c83dd2cb6, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f2b9991fd73ab324dd6d9e913fd3225c5b4158e, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=428b6d4a21962a54c75393cf71adc3393c043065, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=bad212a9740089baee4495cda15289da7bf49b08, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e7446f69c0702ef9b6ea843ee9ebe47b21c134b8, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4cc687f237ce202a3f6e14fbaad5ab046898e6a0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3eb9f7be664e1dfc0b80c72a1638eda1d5f6acd9, stripped directory ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=093adae1d35db9ed34b0a9ee681736a5b3f8c3de, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=81b3610974d61fdf078b6aa8d2c1ed8ab7301059, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0e0cb9b3f5b5d04e93603145c2824bbd658bee3, stripped " J > o x 0 } " / B l ! K p " G ` m u
R y 2 E f ) H i ) 8 N m
@
& / 3 < a | " ( B 5 D 1 F % 1 M e
* < I * % 4 - %
= ' > 1 ! ; # H ! $ * 4 0 / % "P +P *R R R LR R R R R R R R &R 'R #R R R R R R R R R R R R R R R KR R R R P 4P 3R LR R HR R R R R R R BR #R R NR R R @R R R R R R R AR ?R R R R MR R R KR R R R R GR R P 6P 5R R R DR R R -R 5R BR R 'R #R R R NR R R R R R R )R 1R R R LR R R R R R R R R YR @R R AR ?R R R R R 0R R R R 4R R R R XR MR CR R (R R R R KR ,R R R R P _P ^R R #R R R R R R R R R R R R R R P bP aR R R R R #R R R R R R R R R R R P iP hR R #R R R R R R R R R R R R R R R R R P lP mP mP nP nP oP oP pP pP qP qP rP rP sP sP tP tP uP uP vP vP wP wP xP xP yP yP zP zP {P {P |P |P }P }P ~P kR LR R R 'R #R R R R R R R R R KR R P P R R tR R 1R R PR RR R xR R R R R JR #R R R R R R LR R UR R R vR R DR R R R R R R 5R R uR R R R R R R R CR R R R 4R sR R IR R wR R R TR R R KR R 0R R R OR P P R R PR R R R >R rR R R LR R R R R WR gR cR R R 5R #R "R R aR R R qR =R R R R bR R R R
R 4R R KR R `R :R R VR OR fR P P R R R #R R R R P P R R LR R R R R R #R R &R R R R PR R R R R R R KR R R R OR P P P P P P P P P P P P P P P P P R LR R R R R R R R R R R R R R
R 5R R R R R R R >R #R 'R R R R R R R R R 4R R R R =R R R
R R R R KR R R R R R R R P P R R R HR R R R R R R #R R 'R !R &R R "R R R R R LR PR KR R R R R R R R R GR OR R P P R WR cR >R 5R R 9R R R LR R R R R R #R R R gR rR R R aR R +R R R qR R R bR R R R R R *R 4R =R R KR 8R `R R VR fR R P P P P P P P P P P P P P P P P P P P P P P P P P R R R R DR R R R R R UR R 'R &R #R R R R tR R LR 1R R R R R xR R R R wR sR R R R R R R TR 0R CR R R R R R R KR R R R R P P R R R R R LR |R HR R R [R R ]R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R >R R R 'R R "R R #R $R &R R R R R zR R R R R R R {R R R =R R R R R R R \R R yR ZR R R R R R R
R R R R KR R R eR R R R R dR GR R P P P P P P P R LR R R R R R R R R #R R R R KR R R R R eR dR R R P P R R R R R #R R R R R R R P P P P P P P P P P P P P R HR &R "R #R R GR P P R R R LR #R R R R R KR R P P R zR R R R LR R #R R |R yR {R R KR R R R P P R |R LR zR R R R R R R @R R R #R R R R R R R R R R {R R R R R R R ?R R R KR R R yR R R R P P R R R R LR 7R R R R R R R R R WR #R R R R R 6R R R KR R R R R R VR P P R R +R )R R R R R xR LR cR R R 'R #R &R R aR R R R
R UR R NR R R R R R R (R wR R R R R R bR R R R *R R TR MR R R R R KR R eR R `R :R R dR P P
R LR R R R R #R R R R R KR R R P
P R R R R R UR tR R R vR R LR R R R R NR R R R R R R R R R R 5R R R R
R R =R R R R R R R R KR R R R OR P P R R LR R R R R R R R R #R R R R R R R R KR R R R P !P R R >R R R #R R R R =R R P #P "R R R R R R P %P $R R R LR R R R R R R #R R R R R R R R R KR R R R P 'P &R R R R R R #R R R R R R R R R R R R R R R R R R R P )P (R R R R LR R R R R R R #R R R R R R R R R R
R R KR R R R R R P .P -R R R R NR #R R @R MR ?R R R R P 0P /R R #R R R R R R @R R R R ?R R R R R R P 2P 1R R R #R R R R R @R R R ?R R R R P 9P 8R R R R R R P ;P :R R R R P =P R cR R R R ?R wR =R R R TR R R R R 4R R R R R MR CR
R R 0R R R KR R R ;R R R R R P eP dR R R #R R 'R &R R R R R R R R R R R R R R R R R R R R R R R P gP fR R R R R R #R R R R R R R R R R R R R R R R R R R R R R R R R P P R UR R LR R R R R #R R aR cR bR R R TR R KR R R `R :R P P R R R R R [R #R R R ZR R R R R R P P R LR R R R R #R R R R R R R R R R R R R R R R R KR R R R P P R R R R R R #R R R R R R 3R R R R R R DR 2R R CR R R R R R R R R R R R R P P R FR R R R R R rR R R R R LR 'R #R &R R R DR R R gR R R qR R ER CR R R R R R KR R R R R R fR P P R #R R P P R R R R R R R R #R R R R R R R R R R P P R R R R R HR R R 'R #R R R R R GR R R P P R R HR R R R #R R R R R GR R P P R LR R R R #R R R R R R R R R R R R R KR R P P R ]R R R [R LR R R R R R R R R R #R R R R ZR R R R \R R KR R R R P P R HR R R LR R R R R R &R #R R R R R R KR R R R GR R P P R LR R R R R R R R JR R R R R R R #R R R iR jR oR hR gR R R R R R R +R IR R R R *R R R R R R R R KR R R R R fR R P P R 5R R R aR R R R R 'R #R R cR R R LR R R R R >R R R R R R R =R R R bR R R
R 4R R R R R KR R R R R `R :R P P R R R R R #R R R R R
R R R P P R R R R P P R ]R R R R R R R R #R R R R \R R R P P R R LR R R PR R 5R R #R R R R R R R NR R 1R R R R R R R R R R R R R R 0R R R MR R R 4R R KR R R OR R P P R R R R R R R R DR R R R R 'R "R R %R R #R &R R R R {R 2R wR R =R R R R bR R yR R R R R R R R R \R R R R R
R MR CR R TR 0R 4R R R R KR R R R R R R R ;R sR R :R R R R
R R OR R P P R R P P R R R R R #R R 'R R R R R R R R R R R R R R R R eR P P R R P P R ]R #R R \R P P R #R R R R P P R R R R 'R #R R R R R R R P P R #R R P P R R LR R R R #R R R R R R R @R R R R R R R R
R ?R R R R KR R R P P R R #R R R R R P P R R P P R R #R R R R R R LR R R R 5R R R #R 'R R R R R R R R R R R R R R 4R R R R R R R KR R R R R eR dR R LR R R R R R R R R R #R R "R R R R R R R KR R R R R R R R LR R R R R #R 'R R R R R R R R R R R >R R =R R R R R
R R R KR R R R R R 2.Ia ) utf-8 1ebf98a7a392e0991a9d6619422656cf5b2b346b0454a6bc30cfd054ed9ea3fe ? 7zXZ
! t/] "k%~2_e#ȄjaNchۏ5:#վ?#=D=Eo&cà ¢yaרO͊HK 7N>ZXD* 8ɳU圽j rv)V$
ee';t4)H3lGb Oo
=x;1myE.0T 7;َ9vbn )YӖh}V&ľ:iNͽBPS,iînOrx'lP5F aZ릀]d&ЙZ2yF@_NATe#
ˤHbE G!,VJM8U`c5ns_/3 &P|!WxW-7_5ͪD7Y©Pdƍֹ, lYm:'slܓ|!"YpSP\"F|}{ZxvZ{> \xߖSvs l Ŵ/v5VtE0Zg#j^+*JnE KѳҜS )R*
AƕAS!6؞, 0u |G F 5M$4HMv
` r
.!MzH<>%d\DƹA
>- ,^){,'YR&R(e!n-a;;ޓ=#`SDڢ 该ZLAni(h&6[T>RǮߝ)apOGmjD._}ش' ՊȪ7cwqS 6TnNCQC B|y{d?*@ z( k>J5J$ J2i|NHf83Z
V/ÐP3&L1Bqur@0Z1ؼPܔo6Xsۑw_zdh`q
,zi(7 !`rht++ _u(6E9ZO#m8 tY8 5- K=; W=9Q"z{I_$(QDƈ
dz,$|}A't!\6 N/]di ~/ĸY *5ėu&y/sj Wi%mT3}iJ\cJiۇLSfMlQ/GY \7*DNQ){=O'
<Dl~qC$WVVUki!ѵ-(3N@F?P8~rGn-I G< tt˳оͻ99#g;v8eR)ZНW 7{\ Iy]V!=@dP9]h .7 mv-}&p`kd¯CS@h/W st c}YKKȞ[?Kik ʁ*ku}҃ `5I$:V6lrpCf%m_ɋoFPR
(خQi}džȩ0V_|d#1\.kO]0A'u Nm#v./xƚpiFE2jLxf/KWRvL꠨h;OT6oM{0^qV\xdx9HJfmjI=}P ,aPR% _pv}|b*ֻŲKOOj#SB;@wRzhp>
XI)d V |8 ({^:Fzr1BۓQԦƲtoo e5 x2@B Z0?X/*:f %=/w$.d9G(}`<Ɓ늉 QԷ^ٶ
N!igveښZ9jĀ#4P OưK4W- Tӽ iޠUI5:ް-Z\NK J/ӄ=JbXUZu*{Dt}'o{ WOk :/)ލz{`)˔/||lciMޡoZ0/m5e}z̏Ajg(y6[+a8cZLjj=
{_._2]ޔ䗎͡ |qNPH Q_= @Vb /̢5no"8%v͋L_d@
l)BӃ&4V49!-8k^*0&FegP)ȆqX3to
eutG;ON^J'UJb4
=é'Ct#LKe vs~ZKX֜)
Xgf.@H촳Wt ږ
_-+hM&]_d a (
O~:eA9Z1%Q^GOV `: | _ t a`jKQH i m+3au椎hD]c|72 ]Cv+z9f,#j4ۨNCJUT[=: kz܂7gUtuMO"y4lE0|jVȉՙɶ)p M]7jc?Ϸ
DtYa9f#%"%R9p(p ];OsEi9:ldRqSr .@bt YX
~~Wzٽ
F R n^!h"x luL`3 BvSIjKYd UL. _6*iG. (z~g] F'ńٚACrlJw;cw55fR Blo 9a}!Ei(QOZ^.F?DLv,e
y.,ݝ*NܨV*hv -M,_*r3f*xəF#r\c MPCV&1<י !^_|DְġLѲAh$sA:%Z\* cp@@ ＲYu?SU2 믴h "[זPXlpe >DUKu:6nT.J-Ȩ|>f3>&ݗQq;skז 8uPڭdž `)!O
bjߺe1]
]<% o.`o+od"F)<\2 Y@os.@\9M []*ς3r ._
ɗ7Պ~Z|-Ŝz{242w6WWVY 4f3
MQ/~;zEg@ 4Cx|w%ե
O- bwfȤ;7$QMPk
sL*qCdR6V\iR֬Ӳ2 :W$pq( DNhlCQ5HMTwh'u+3Xl
kk<{ᎬV~6s>.O7NgʄOzfU:#`A罎 ([ *h`AȨ{ԉ%-5W7ͤV.`* r>;?7 pީ?em{D׀Kt^#랦l.DTWpෞJևx*IL<6gFW gg)¢ˎگ@~ms
qXшS.e_y3.LjSpFco/NqI xL¨ l;3ߑL[x_XK+'i# yI^w RvbzaJRPeM "<
cS
kyB2V7NQ]$YT]+]
^}
>m*oY,]<
I%vTY:,hRqz< .' rB%hX އD儳f[Z@zpJ{MlkfU5Nq4nX+ ]- Ax|9;;R\\> s \ K+n7)_FF|!e
RI[z'
0 lTFY|)0]ZVQi͍4e^EZ`w&꾄nr@`*JAwrz)6F O{pvԑoWMŌ(7BZ _tR,2*s,U'RLXVhTY}HjɃRQg96hOwqyK=|m\Z\p wNFi
f̥ct
l% R6D3|+=/oF1_ö''oue РI9w+)hQ %" {T_ T4S)ۨ'qA #"L3S6:cBi)ViR%nj:A=Xm|
Vг_PI?ww ehϮ ; #FڂQC ]4:S9|- gJXfX;OxjQM?ǔဈωD~8m!YHY6.h/0s |\/6}eD?˷dum<.mlckl)uTEgץ%ih5yOkIs αnpLKbWQ>#L\
A ~ tT=)8-="9!WDc| y.3; R{2~B&uy QC]2ce< 0j+P.hB6` Y|0!Drk Cw4QUdP[TEa5龡Q\`;9lZF,d8F~3t?ڛ:3I>>:O(UG~Uȁ&^.KSn ll iimבY 2+"
g gwz/v4lnͶhȩL@WRa#RQ7&%TbxV%db
+dw<"
]]kF,jTaeJ6oJHu]^-JIx*PUXH FcB^]yVѴZ`jUpQ [+g Omb¿<^I} Xj5Ng_ {^{@
Pyvk3PT g>R'i{,@`(u}e띨H@,~~4ZAk^aY;rض)l\[_\]jZYhdld4Whj\YUA#k%Fx8jKlxC }QEg֫X` iÙd.ol!!К;Rr :Y!Pq*'(͵2:)
Aҷ(Pz!=ωzL ڏ(8̓j@ibRSbZ{uۃ^"z6NAM:%$Q?+Q| rmm|-RpG}Ut7 w;*~Ҩ?C)OtQA:#
WqE\RQ#:}L5@ 8هmn
$%Z #si5
^( {sO_ 3f B9ijN`Xp#h v7sv'hT%S=( `X;QZDvx,1 ALhAZ Ur
&ȸȳ@FxZ.[_3k'ˑl~eDe9!|ݦESM$f^&f9|dEe6\AF#fK->( Ud(,Zs# ɵI1 ȳ j |ro5昵Z`NJOX[/g b3Ƕydʆ2D 201%m`8_? ovS<:[ƹ`G6령\?pݜ*D8PuҀɊL48BPwMˑ[RrJU< Ǧ
DFm7%7B$O9 P|sUpAV7lj .^A\F9o M
4NLbr1G/@Ӂ۩y'Jzh5Iw`#fK#8XC:F_fQU'(eTҧD}K si{!?H lxz0-9(9DV 0u ePCy> _C-ֺO !϶P#т 6_]m1iKR9ȴlJ|M:p9,yBpѵek*6T[!|)Gǁz>n`ura\S7wbm?>'K~D. ɋFnpc{0K,g"FdbWC
oNWӲ7W _1 yy|{ MaΩ}e/f$zen9>W &P]r}bɫ;Cͣ5ҩ4?Ӽ G ^@ 0STv#[~!Y3{.mYl=.
L1?
_^e|fK{$LQ0 Vr 1F|UH+]u昬9%NUX*$r
^hO5t/܀ %}
y|}JowB[|ƄVҠW46'3Iv+xӁmE⏣9 #֘-m/q[._ Afk߅Of 'mQGa -0?E\N;MASx7MakCuA }/I)Ӊ^;`M RΪ KK|yO+?qRTЪp}_ go#
kp?HX춈.~QZ҆^T4HI%Z~o3 Ur[CPξ}<}h%V "؟5XAxO5rZ/$e,m$-NsWeDK1
F 6h;9_OP-X+39aB~xQDwhNᏢi Rn4'p
CP>7j.`k`~mÜK *PHilxZ,pQ?VKFsHh** &6&:C5Br_G} wlZ2^u닶9Z_c[ -n )"mje8`L. $\3b%[Xьl,uFN#QLFy `, CӄAGgq\s@8Ur LL|̮54ՏH9'bƟdgF|Ov3-cOhm_
8߆Nu8'Q ^R/Q`^3燒Ze yx
TۈN%Б>~һQܗ(3WOhIA5ݸ iPY]`(o/[7|tVnMhXWJrcLo2#7B뜑fxw+DpM:):t|Y6 rt
Y ]S h'U[b R@'R'ɱ_
#0ESة̓;NDvM$/s8I c=*'JR < cc[^2;Y/:kςOMnV\yP}5q40d=K{-
`ж DnUR uփAR2˃ 'u0vc_ Sr2El DS;EM?nW[ eᴎDJē +2@K7UX#8H1o_agޚ(SO2OIϞ} Dkx'a9
d˖-+a8w(D ƿ ?=Oj 9}xE }y_5aNus06u }Hwbx*?]@D`0h[QB\?A,G{P$rᘤpIF=A
'5 /|PfV%]( ̀M#'IuFV)Փs0
|
!I"h 8q/a@!K< .:Eٖ"? [tJL8[uN1^& +<H o";ca1-KɊb~_
x)m[pƨ(j82LZ\DO9 DD⣐>:9Ԅm":nN!(Q~P$!ʺ*)GϰWr6r M\ɛ{@_ sUh4=C B3"Zcsm
w '̎f{!ڰ
<ړ h*P~SLB-2Ϥc|Xz>ɥ!
jf63*ԦX0j~ɿhB!7t`-g?$tiM]l#G|XSt%rWN"-jh*8 ^λfx~=L@.7Z 9@??8kK穄( FfAD{- Q%ysG}R@Q]?ӬPʥ-Fu yzP
2zܶ[qS/8bm B(&SC)Pvp3IznyWT Z;dyqޢ0iꢙԐaBӅ Rv
ģSgZ6ZnRJ 6|t̑IeJ5Qai\sB\4{7߁;rwg\ *0F@U_J]jEdUz{r;
.="S zn u]8[z)i2'Rf] /b/rv8O7_bKmÔ+;+P2/ uͿ6,\Zgpm@LGc>#dŐ2a]8]C\=";vm]RSٜ-VS}?ZH4oͼ`9'ܷ;,=M˳65`167?m_ꏝW6h䅬 d2-I7V{?^챡nk$ч_$MYO2jb58MNK~s U q(tZ=+%hImEy<,&x+\nZRkv= FQ
@tZOkPiāESӴ*}S[6HrYt.YׇݹhΎY-I+YGi!
fE{74 3O ji<3l^ʉn wJ4ci |Y
_gI0wΔKe U`} $focr$_zm2'( .()&
_)H`DXjOE]QƅnVt8Y埏_P~k'E&? F c ? c[$hӔDTi5\9M$KJBK:t"*yZӘ<X =}( +GeVȪ_6lnu TtN,93 kF\Π?=[K:!!))| 8~9#Z# Tn]z]uG*[t+P,;!,s0r(dg}[ ˖7栗(ߤx]Y 6L5' ]x0
ܞ<9u/ QxC>/ q W]GE= n2)P+il #N.ËGǏS8ZȘɮsTϼc]ʼn
G2=d+GǓUOAY`vK _ ?|-OTƥkxW X,T7}kl cqIٜCfYTpP ®Sps1Mpݘߎ6krϣNqHL)dqZ$Jl j0 GѬ#Dw:9J=}C=/FG k:}
(z Z?b,be\t b ! ڱ@.>R
ԍ훷STޙ?˧ثG;NIeiI> O_Cbh"jN_ve:ۨPX1j}< vzH]z1tynj$ibmF<^,T=._OZU[R
h%8V4$~ 0egjn`䵅A;hҳ+ nK&[_StS_Rvﭮ.0itt+3^ PW:.8 =(+dVݟD rV %boXڊW
)x*Pj#&SX,bV!} enmVa*o)m:^Wt^A_Of;d6 s%VT/L%N 0GV&l1($keNz{k\ã
&\JpqiPRW`ZV/}+RzSגZz!>/Z=A#08`ɟ('_H` J=Fc }thF\|Z
C:{; r%`'d3CSz@@zm}s:<.z>bk 6K&nN_~Ղ4 P{
{wT%ࠊ+u}gE* go2qt6Xj4M#.y
IFT" qpx3Uq$.61@xBw
l
;Mc _^D"yZ8E㏿g9.6/Y/21$}s"hBXXJvOJQgѥd߃2Im Zc X\kV`s%W|zfp)ZgZd# 5z-pj{ql wIPIU%-) lZ7}k2[i[+{fgS
1< MH+*}+O-SC"nO6g sy= Rټd#-+TS C=L0ȶ5mmIUHj
G YOd\*nR$A<' W0`!~v!6&|*˚
zf0ϴjk`h ^7 kH/ͻc>]?U*s2ΌR)ayF s}Cw [Ɠ2b/dĀ9#@6QCpO96g2$u,_ slUMGne˺hK9?ؕOf|Pt3%A(l(0U%]){^5ZU@G;Ի3wWNm4epfI|1?۫c ?uuIQ4pM2zoP)=
uU5 *#AlaCch/vMQ[[ **Y ٩z}AJpEH}4,?Z(ߦnpm.pJL16nA^ P<
kZK SHI@yg:d6`S:ZXmfWb K>g$ĿH2˃S KZ/ dE(#EQm[*k;V:MGcO3
AOnV@K&i/S Ycj$(_ Z'AGC ʪ I^!kd,j.ѐs9IQ!ur s~N#Hn|ؗ1܂/NwZc鰥 63,X1抮\Ix%Fom%Rq8rYA ȯ"4mKP$CrJ+Q!$tKJQ[&xAvK\BxtR-ak5˝v^2uM4CvQV;f p/ogVFAPޗzUf"3!f!2E$(l>y0@nmV߿F|!:^ ,Y㌒_\#uCH o䟔 hi3&9o=C5QHQilʨLVThl- Oyg@ *z\/-ݛu%sc
+a(.c3RF8plk>J5w7ľ'Lr? q9y_u瘩Ds0zIB' }3Aۅ
s -tq
qSbeB FH__%Q %iMfs4wX[DE 9pWoahl% +XfdPE Bw WäiFT.^%
z")R)yCGZN
JO"0+tuoX mGkQ8RЃC !u!"i1<#ۿnY>- Sm}}bx".>
z3Y]k흮ʓ8mK| /CGS ,=x +ۅ!z,a_
lR}zK49jB{H{Ԣc[N*+@B -],] ˫3g)8 l {Y>-D umy~ ' CDU{]"*Qf<ӈf eۘ#Y$N8AcuJ/%m6pRk^Pb>;J:*f!AVK$ E%M-0{ٸ=0.HQh]exh doo[Gi*V,olGxLOnǻm"8]aT f=*qy##a6:'*E
%j2bT{ %aéݧWXto >t ,43NP9VJvb-[xRCƷxc 0z;vdn*e-@o`"x$A v<`x )EDڌkw?b#J, +2_Z9a=wG[!信W #k|Ks0%͚f
n،M#b3 GUps"0y't@u} ;dĸnF^fI&xFI4z ڄm F~TUgI:ĥ}a¤H7h1l*ga瑖d`ksu/i38ZEm!z~K@J;
V`~P1&xV
[z~5&jnz n7[Uqhc
ikxˤꏛyHþn6.2- pѺ#?6$8U8w< aTJ{ g ZwP EjN:ԟG{&L_|B`X\!Z$AoFUͻM>=/6 ?^6FI1C#[݀ͽVlVثyہڝõ!/YU}#7u蕸Wk1><#H!<8>`x] 3Q. T?G8 |ϱ4 }vcC
f%,{E4خ r]`t ) N}OyG 7K'LTJ
FeK.@1aTNԘ5y*t[! )A ̼֏c{/ɩXDUIO ߺonh!%4=U ć#Net{^~c֙Ь >L e_wdxjV&%hz"nE e=jzBdm pAꧩ$+vh
dѨh.,@x
r+MSƀni;ٌ$^
d +j$BQKFy3kn98'W^j{ ECG"+ {M[b gE/䦴gݧg/GNFVN\Xe_32 tbYa+i/{ğ3}
M?ϳeӺe/h6M m8o۩O(s̳ު--\I`RXJ3
KՏ/Ӳ? tR L=#M-pS+`y9O
Й /\E1Wlq2T
BH>]ŗA .xͪwvHx
u3Y{V=/W8ritVjSQZ p3/
نc2) mه1E^}\TX2} z8 `\: ?o[k._ѳbͳ+"jY,NxC(B:nӀ"\
;j],Vfuxyũ:c$p`.2||YKǚuK۳v/=(-Wh~O廀=劔-9'[ 2 i
b|Y;bXmRLm>a &hE9S@ɢ~
wp ÿ+ŏe[LYO+~[6+Tu_9:#|s\Jeb=[]JN[#OTUV Kv*cG@GKBA1Tn? #h/Rۄ c K f0,H[ 7A/'0)1Axb̻ 7x yRZ͜CQFfC\} #_'^ePG H{t~jF[VF DGcU
2Kykp3j Y1 $(1>L7m dR3aDAPWusa7**̱k]T;H(tCB*˴t84]kJYLn\E^
ˁTc0~G0'SBB\_| VqNԬb'dOƼ⡸DbM8TSTe\^
x>6Y2e]C~Rr@!ұR]dZjac6% >xaYјD JBv EJbգG`LjG($w_t%2T$.]!6bֱ`OBBb\
t>QR\;"(Fwp ߲˨mn̓C&->AȨ
u yd >Uޤ0? x ,heP vJ9IJǁ6?x!d + /ka])*FKCjSRү~y.p>
' uD`@l#6IY˄W;F*qGc
Xs<-')St%`Eٰ~ hnd)bPxпG T)|iK߸[t5/qZ֙h瑰jsbT& IzЂ9leؤoL9mwF` l!xrc0/%AE&Պ?)%Suݟ}cY-G v]0Yd%[O4ʼn [ UIl_As+3d3[sz.[iO$\@ #@RϺ%|@H¯2㋯4| `.P Vuvϣ& U1}/VQ^!¿ę:Rpm> (*
œ4 4tL 5E(fR!} z :vgg$wkQ:hf|kNۣz7#OnR֡$-k2[\e M#T: _8Mȧɬ
kS<(H0 :| }4ȃpg'V!yV?4l "n.Sc
ZWЁ1K-xGz jI`TJu NZn>a &:rhjױ,,ANҙ$Igz
L 7a hYQx2TgѤfeT ;^<sG+'BgPq4O;<*9kF:@-TȒoʨ}]yi[KUJ22cQ/yO
UE-H gum쵿 ;gt 9"Σ3 l#t G(4; |ܨm
Y чD;!~ lp ^] Vw>A87~&lK >FD6 p;NLAszJU12c ],JJq 2fKv 0B /]ɓxcgwt]PBl I$'! co++5.ǂ0^
ԇ H: MFUC Phb9Ǟ5c
5dЉEks|&5zZؚ FAwQ"}i|ӕ hRwD(e] +}[{HP@'.m]
ٷedx0M0Y"LJ|L?y Bp-Q;Wʻ 聏uctTZB x+U xQճZ"6Ơ*EI͢~ґ(o'~?>_D2{GV/;5V{ze?{9[82ܖA3}8Oך#YjFx}],DZ?Áh[#EfnrP6#;yuaz$6yKI ԽxMR*D"~*$ ^7x;> {䑐[[l W5űjF*s@y )ȄuO6AtjVI?fbb ^ 42 =WO^Wx] p35'{^rjњ [+s8.gA9 :s_^%']rT$-xSqH"g bt0If M*T~p:bAXTf{؝S
bSj{gQ o]7.I;OJ:D
7/8tL\F'EkFb
jh MoLSYYLv#C$w- _\OjR|1>uCl /4Nӈ>ďfbGװʰ2.!Dm6
Lx<-OhK G:Y1
^|bO{?zE`%.p+ 0 ^GcKѨ I^*\s%W;ct W[
ZHjTIګ>QO,/Y}XFbpKCέңC)9R8 v;A'ReIЪXMm}XŰЎS[/
4+
.h,[TOOj Sdi~TQ3&\i;^[n;5IN\P Jp-˃t(T;Ox`5i8'龇pYhQh{^Vl 0"H,NfQFX _Hx pM?
j|?2
` [&<Ὴ
/Cn|nIEfӂK" 8l6,UA\ OI0dojC 5zߑX<h?D$ #W{Z\`/#`7:qY8"/gɛ ;{LTإ(x72a[6I3Tdž`pI~,7QV@ã~!;a
C-[4# צ
P$")?xr߸*<"D1iÜmuxTDb#é`]-/U$o/O&bTp)L_"mmRcމ'1{' Ma|.kH ADHAt{=5hJ,Ey PxfQN/(Iۃ'J* &mC` }Uԧ5ÒyCN2÷/ :z,M.*7*JT u+ Nv:ұ~YDZ";
(Xc3QJ q v}Z%]% =
BMMXb&W5 8Ćb$>,vde3pѨl<Rov@l#3-V&uaZiΐ`|sדH+nѮd;Mu$+_м=y0汉8C!F 0yKW6wVp0Hٞ-Kfa=Rc2!f*-ZĖmg8
xp4},i m& 1^Τs?~}{Ʃ
cTΫ=[DNച*u&c=_rz%J%ۼ2: 0B;n}rd%(V:^_h) [ߣJZvI\emz~:v!ziNQQ Sq:s6
2PU. 禛5~H0OT_^+^w3oXa& Wڎ:f eD 6[ր5'atP0ɹĞQ-Pz jQ&MlɋMwSF2P]r Ëh +LCD[&D*|[NpM*\ 6XG/ҫ9VNٶ[7%T~HѸ!L|:֣uAx,=?~.*Ƞ}̾5Vs6סщmrGY$fޱ-փ4-8 3PCҪV,aip/O;Raý4Z0', X!C$y ّрt1TևD}cM$*u""& yO:jɭAGl=m+Y.S)Gҕ8 Cy"iZRw@k4ǎ [O౺{vٷG
b]U*^xdAmE_F+ jd67Xr|oB KC]T
d4| r~BTJ μGfRۈVUHr}+L+lmчxj>0&A~&/.O& ԕ>PFe\P"8r.
zXTdGFYgRd5 R A=,iyXn8PMC3
"O7|apsaDi0DKE\^D ]eXdL)Q x䇁q|x1|(4WyXUN[ "
A͍1y9[pM!dh"!b. UޓdWaJ7ίEk(P@lfgO|h#-\WBC}õ!,g=\mEF2ưyC'P3 i]B:5+>wD 0;MfÀmZҟ/i7"NȞX gfpEvr
G
س( !@=EC߲/B a]E'P@}BkǟM |Pv*#:۹CF ,gEGh2&Se-b(Ep({ibMC![K)yO )$(nIi%L{&\%qo1~ gm8-D$_amMDže0vv r|mVNּڣ 2Dק7 < . ogNH7z;Cgڊ
FȈVUw-_og>R&R]Ϗ{A+2NJ}_żICVJ Qx·A5TZ3c?5J 7#4 ּR/W>!" ϋ~ba҃QRжy+`=fo.@e98xn"l S[J3y qIω{32,ieAE6ObLs98_6WZ:k1)QN BJ]U rZ5 .DjtY㸘ql\ANbFA4 ɸ ~rN;t}eNOLJpbm[4ZMcKu wL$I[NOO P7X 8^t Ǘ ADJ7{ 3mm'_f
G)&$y\ =dWA=|Y;6`hhal$F:ft/︁ڂ
WWעW#0ǜ 2ͅH\'0af"Ț϶qw_!s> F:͑^B/OIATH| GYy%6o} 8+$p 0B ;Z
YiRCFFM(ф iTf"Ը{ɤ wpU ڛt8vnj]P~x:kXKjNƴI\U-|
_3@ՍӑV=
gM) gp @]EUPgnӚ
-يhZ
\ztSXe?ȏsuNm_,U~xƸ]'avn -e19nWiŠwϘ/%LB Oo;֟ ovr%o{0-t`Q/a5F$O`y2e14הbO]'ߑI
ܙk"f<܀efQl Ý ̈?B d] ZƮ=ʐ2u(} CG~P~ʀld5{0& D='dS0wpG q,ζVʹ
U+jM}իo 7qU,4tȖw!22qVS!PpkOf"@ܷmw=
G萠G OڔeJޚfFw+RvTIw-a~J:cW˷Ĺ DY&Oh(.TO6T3J^"|W3je&Fַ>X)D g\jZlЗ =8!۳9B'-,L&Ob
,v[8lQ
f}^`IUR=@ iRv]rf=JtKDF 0 Z5$Ӎ AaA"4w1ͽnhQ,Vp;xw R*4+FbXTFy
YO8gGPRO u# }9bGF%A|qBH\f: ` ex]S݇_mQrbDjԦq1X363?PIȟ(5)woukEn8#'{~ζ<#v)eԘrM:C>!m^ =]m#+
ZA4k(#vN^N
77([ [>r,̥Pв@)Jbg՜d
+)AG
Lt `*zC/_0.Q'ʢj'9T+|bW]&~&)] ^@jfr:IL'9J$NB30m"Ւ+Pvgݼ5bmFКٚ^psn\Oh2x
*ia3X_i 9yleP0&5[4FsHӖ$ $͆] _XZ~M#I]0Y5B+{ Bx2 eR
Xһx/؟1s| ɦ0MR6%{0`줠mo\[ݸo'm 5* 坖 K.J[lB]c/wA9n~!!4
[>>tINÅ>`4yg MZ徃89\ RPU>@6Ãȟ mV春~RJS
$խ//o~c-'D1gﮙi\oD0FpfPl##Bmgh?kggY4%YA '4Ohkg7\}UU'52U^>XpmW恍zB˽~k &)Q9GA?Uu[4jZb29ڟ40v_?KjH_{> GEzVhu/p]ږSfb>XUN( qr&[]r&mRjU#KbNTAAJ:voL'%PғAjy- r13z(9Q{nQB3D6QgEc\|B7duIrRG8 uZtQi!7-0@΅^[tY V]xg0|Šw[Yi],Eܪ
%}4.+@|9?hq ("$c`"Fu I<6tJ62pg0cevf= N@o- G FBwٕ\ nlV|q:xjQ,m
Ev}OKC {3$p@o*OK&-k٬'V-Sb=E1C\$Q, (,faM ՛zޫ6:ul%Ck{h M巻wic\ow^E&׃o*y=X]TQB3lxh:?U-] T |DT5+.aElq5X/3-)$}:"{{zm"or S7us(7d 1+xo1UUR|)e:6l{GK]0Tbwohf4>OR^ HXU ({jvE5
g2D|\qDWw (` v, "9 W7Q GIf/ z}u)h2jy>lbtrAx5*q2o6DfX6dAz*[S4㕙0Azz(yA+zah7@X/LzԑqU_od k'I_
As\ѣq5VCO`U3((@[l*tdyzMYU2*<[KA60Vga @|qb[i6|(GHL1 ;0e}8pa ɴ .]vAC
0NL
Twf'8L'.>0hR-B 5`O}!qy;p^* ;l`c1}7
GϮc -# )Е;~A/p\Sz* a+uJT"Sk" էÒZ,k;1,A}:e#
Y
t]U҉@9椭i$9? b,G 0YX 93E۱X70(G C]HNP3!H;nT/*P,v"+Y2vu/O=Y0`5e?!lQW}",dWτ ˝~,ⶏ_.}BW#]sC.1`^;Q k$tAcWkau '}x-+2drS3)0uȼd8FV竱!rT卶kdJ˽`R[ ]= ?
$
Y
l -[tNg- TB&_:4NBkg (=|
HQ
#fq߹a Bt"SN#hQ:r?ޠ_qA%OMǷufsam1➘bx|̎v(-Jn&F;'wRgP;
2.LۗB姲"dQ6ѫ6PGO$4$
՚7)9l`FEYo)?SxO |$~u1 l{$/p|C$#zֆm2A.r[Dӊw$
gJaO aAtS[(؝;rg=oD->BRQ63fcR&
s˒t{rw EsނodR- .Z+Xf˳=BKo [~,pk`I!T|/$V~yh ]u nW>7$ڢ HUK.7W>.}b 6S'`.T02(M\㍉ 8uͷ]XK{tMX~.wuc Q]t N>;LM(2$tyj>
%<|/Olϲ ^Kq=V$F~?Ji˹-bܝؙ0 "5ԛT{p q ]M5}qXbƪ1]ޕG_~͐ YH#ZЩ.MoEx2x y 4APKS7tڌlUC - P~7>㮺v {ntkCY2Zxآ,{MgQ|Cm>J}""ggNfb>HB@L SswF&8hkiHN
y7rYug%Ӆ>swX>6+2
?F4Kővǁ(-o@Oc ~3[F{D9qit)̒*rr:dPՖLTDv ze}(trFdvKA%@_soxfv7s2jHO7~&SN1Yi4ގqK}i
ɭqM$ UubQ *\"RS~5<9N]3
(a%
PoT#KX[8G jbhy%
51~[uWDS]=L'oȖ1#ٯáRd 0 4)l=Qb úuO*2ɢkz4wߪp?ڋ&2=84i YGSI
hAb3oޱ ;կ*BG (y+| q~xKӈ3B{ MgS«!O֢{Ӫ:975v3^7,s/dE=ʏ B[b)>a B4.{2~֧`j % gEdZˣɽZ||[xhM &D 0>F o*Ι{eE}k.);U&}yvP ǭ^I A4K<\ 1
cL[^ $k =3i 1G(^اiO7hhrx =oB&f, `Pp\,J얱@aΧ3XkTyp[ tc*6|`] 3bRH<( 9; @\ BҧQ+M]a
"/(dYu "ŕDhq3q 7
p9QJUှM`gyt#MA se$I26nU3.w @{ݤ9 KNq跲^id +I
f,nwKVpW;_ kEE=]v1' yiAD RLD*o3Iur,Ѩ:%<+ V3Pf_#չ>Ɠ/$B9J}c,!M7V@9 ? o ̈́8p")4
ܻl˘o J JFdcw^)-|/%3ZFNeIx-@)Wwձ\ؓğ`|;-D|/H{:
tLeI^|Ue0ϾI8\yx%]pfN>w̙tE[[mBv'
gg
W玄em͢ %PR\_gDǣ b ] I]q{lTVGYvPgҁJǓFLP G]uj hDH|_ kc)\D?t6f2h od_XK:F WC0W2Ӓ${!in{v|$5Sn 67z=;e#s5=U>oF}go@qОG
+0 3N^ZY[2qyWL|h)^| x6YQofnӷHƾZPlc@0!˰`o a֭Z;i*gB\ʧvZ-ӴR`IL9=P?´]{8W[c3t#ś/^r'PMj_+ō(r0b^WMs-ASB 3qۘӓ?Fh\9oۺpxhB_C';8q&kP%=jܰ<-BYk+3^mv #tZv,B~Ȋ٬)Xݖ=5 Ôܾ
{Oeʮpi51/$]#yo7`\z=k#[#
i[wMV` oN&O!X@O{o^S:n ,$W#1V-`Gm;屖)C|*Sq
?eIq?48rXiYiC.҅ ɳh9OV:Z'?.4i`[u;iK0B?WKF L&g3i,)/ap x66@Zh=JB[ǧ_FwOBkvMhV8 PexbV5DrƲWʴ|kYtBH U
/{k{}_|9.l";SlnDHr3͇ > R|un*ɲpτ;i~6Mz/+(ss*mnĚj35
_GLEުʦm:$ _Ol*EN4G>k^Y _t(kX>t)p@Tg) Ύotr*2&%y`2}v~"\(ܲ"8:N bG;Kˠʇ?V8oJ~ve}=TlM| |pFP*R:ZB{EL[XWUe m|sb)dl;zC]Y= c*U9al7!jyV* I ntn` s`ܝa jdž+d
J;C&ʆ'U.CJ[_7\R*y-ez:78N4Kw4LMX+"qKm*Sdw )ɼ2凩_wyq"e/Eu X TV05*WNн @a{E4 \MC ?I@K1=< xa`!9?9E &5{"tPT{GJ # Y
bdV2c|i>岉GRDUj߷*._
, x I}L/
] .Z218`Ǡ7CԷ.~0T}ykmKyG
ߙIhV߅UZ3F R2C?# Ws$u.:FO|"{lu0bc>C6\ڏЬ ϴ b vx: ] OO(͞RO;Tj=kr0 yc}ml$Ze? bI) % W?bD (ܕ ~lq@ rػ1ZnC?YZJO'_ڷqwQPDu Nw.>zzp | 8/zog8qN <#tKE9^rQ'dQxQ&פ W0$k/l^%`6a7w͖z ҋS08w7SjFp$U CSe-Q CsP2eR\m-Sg͑L=0xSWrd,~16egpאn^}gUs
>^1qT:QAۄ8R|ElJw yE_.1>6YAM"wâާd@1զYS _] Q?.Xw yOo7 tŚp!bl)e8*οwr cE>y;a*!-Fvg,rco/ß ~]"Wq4< 3tQ? boSၯf^PTRn\n+:A_$ ]`!.XȲ)=?xL :c[KGR$ipON&NjT};MAvQ~Dnh.1 B7 120OAi*aA EpΆyQ)B>:WQ(-\Թȝ{ơ(-/vCN)&Aݔ_8N?S/56ŒC4pQ
K(*rH(-4,d/ o1A,4kMٟ$< (vх>NKUZ.u@M{5;^}*YX\$-
}NR+\p p{Ѹ2A+^FG"z2Np^enksc/ob`?L7?f+#|]FRp}?3 Xo̸CZCs]7ߡ"# y6I\t.7(s؆и66q6pN `u[m㟱8{OzE<}9wp*MdHʭh" M@.r>1R.l I; [lA}9cZ3PL4w-;D*cF?GtֹISm oBjcxLz];Z\@)ъQ yUM`ͥCi{#iйI3GϨ!`M3X
1㚑AmaA/Ya}슰O}fl/ӜΙ` g^\L6& =3ǘ'Ǿy)F9 xlpH w5
@Ige?e8D*HU(I,;%3+YLB @(PVb0 )o8ջ2J2b*_3k?hTwYop=2[2Twq7H-I#JVK^/osL}*G@
iD] 0JuEZ%/UJ0 1 b;^zΧ߿f.>ٶM3*ղ${=NA lsӚbؔ9:$V }55F?"u pfF
>{~k+&%؊`8z3 E%O[ADitre հ+8x~Hpě <ӱlBAq8"#&FERXlN")4-.33fäWK@.Aǚپ$\',G)^, ȞE^xjɲW2L NrԞOQ [7:WcA4.@ 9
&t=\߁N{ xfAlI,%" ;*? A3]xNFģc[R7sh
]H*#MvdeLXw:9Q^O[_`$h[>/n w^k+ 6"KǙ YR^Y &Sbkmd[Śq(WI}DQ,eh9hR0"0z]s />8ܽ}ɱɇ>|Q)_ j*n
'~ zrlm,hr^cnmԘk>J"I4PC<[@iJN4m iOOQ_-"4ZoI<ΎHm/Nmh2-(/"z~=zd,n`fͥB9;٥־&OkE☚z-QF,xŬ?%EʩX¹Y>JS-نQ*w[!8=WFG@VK K$mxy$\,mڲ` ,ev4@gi)8VQ>eS;`'93>K/>@ByaO9Z<! 2+SVsnb;r4 "Os/ 6 -TK
{c@mɟJ58{T xh*7 Rh_9RU3Jl ]Z cC بXf}bAkh`{xjY '}()ɎZ n3?Kl@
B*7$g~Vkoy Zjˤ \cpsp1Ms
vF,/WQb[} l4HAΉy7nƊQs0,C'\^BZwqڐϣr@r(< j>H99,;`R*gYjR7?f: Kjԫ վm*B -û8 E~O9;?nAW B`PBԺ,z
P̶]AFЬř ^>NoْIu{6yWY< l54$W7|rݣg\9|XC]*ƚv `٬X 3f]dФvUl <s3%1
w(cع>ʝdֻo0#
+x1B -Րq$Oň:f[%D3ӭcy\lW }miw; C
TF l#輙 | y79nWÏHVtL&D/ւ 0o){65W]5WwC]'q5uY Ӂ$F,{32+)bGc u J[RUI$d UV5-4:grKZ(\IK1jޚ9G)R 0 y[;v `48")$pl'͎|7&^cWR{cЩP^`c\lCE!7pu$duX6F EOj d*GP@ue+.p-HNS>
L=O sP5cIn1|rz'ן[p?:"u] 1 1 0vxiJ߫s(9]s2G\
D ?9f$V{j NÆ=g`SPǔi?#KJ`TMqBKΩRR$f(WkqgL\CؿQaX ʏD4v?D_ )}i£i+4\0
\
8z1_\
wa;뒷&uD&VE,\+'}x8uKx1O< 4Q~46u
_P<Ѥ
.` k=:\ aշ~nR :3Vn%{f۞xsi6tdsC
lnnݡEJjg_:^e@ꅠ
tYQJS(]TK¢
`c"I]oTkhe@pq9{wKD<^'\V
13y0EtF
{|Ei
EҠh"
#,w?w%U
*/0+u9 m"Y)8p-m{Q:I Zy R بn6ˌ)! 5ROo)tp>ƈ_M.%&wI˫/RUìrֆSߪM"5]Ŷ8~D'襗3Cb3c!mz[ރb
NB|;Kە%t䣊D`uN u? M7sݺύ,9/XwC@
bQ,g>"cҽ~qhQaMNػL{j6pRi m|w"
:q +LdviH5qlCCYVmd%hI>-p:od.pۀW<%7t:9P ,17Kq Dz?WUOH_ 8sl7ႛ" %H萍яzGdϖJOnc KV2 ;eFjg^ HM3WfC\TiKpK@ >ۄL 1V ."tj !DU()jэ<">\/7[
;tXFMG ]h
$A_ Wk2|FCF2fLե7}v+MI#O=i|0z9^bJg bF{c4d D3M|D ʠZ 0c
+Iԕtsj
sCav |hZ[qOk8uݰ"s0SSxY &V啎TA܊ 1;Ц=]
jїNȣouhPnBύ@Q;zlD=l%3ئ~1b WN FȪj` >^MN' 1&G
ݠ ;@NXqUnLHb)Jj]c_Än % 4d%S(a3HnO~95dp3}urf~C>\cr?;k܇H_WYiv3Rv[h
ZJ7!fN܇`sE'
$CmG Пd $K `Y Fg _W> rJèT[:T(Q1 d$0!4"R
]=b=?%BgH
IC%mJ[%YP< ]\҆5t0GNov뽫y% 5S` x2xR{!KmRA ܶK3x!t*CK9е#LZ?}z饵e"SuF
^u겍Gٴ +֩^ȷ=0dfv
I#n]UH6Q!+CΛ8|16©Yx0onXQ|\2 yM lAm\w͏YCEd
q,b5̃/< PwI?:3ky ן̙wJA/xeN+țYX{ "1Owg>(Z {v0bUZ[EN'dtNq.7M^^5##8dh|']H7
C;Az}Q y:y~&xɁ
WڻFzBh"Vy; re OwHAR0 Wwd H^*8bo0OHp# n?Xp@짾"EE#}/ о(0h5s)f[ټPiB @B RT% hgDNmmŞ!.3C@wp\"o{)g2َ- %2|eӿ0]v@*PZwmȰNo $ 5EG[l;UY FnvŜYC !vaϊRˢl>wz"L(1bǸ0 8'´I =˺M_̬0'`3%[!ͪژt iW!fEp-Zi 1f< Mʲ
}:8oѝJk2?+ EUˎ'1nMSJ݄[x;Q'9G3&P%_vdefFBO8T.͙Yee+s_J˝TMF4XEOǩV>' zF[뤅В:E
u~\MR^3olUն(OZIץ&E?h.q8zmote1O lFO'>|RH<3`5jԲ>OgI']vI!, J@xGqzcV@F1_~P\bx^
B8KѾ&P`]@̣P5'-\~ NM'Quw^3P{=)y{]4F<'sE PLW ]U<p
G$Zy c *ܦf#AS®"v@ћ NA{>fNSJQ|2GKEL҃+:6l4Y#sYВh;ܯƀ^ 'Xv*rw /KٕȽX-hU<$dʸs0l3D< V8plf;R@Qѣ]a c,w+ AW9 WiE8rӠcoq ͇c>x%u#C}PY;GxIu(' u Tve2|? '%}6' @ g@az4W
v
];TDĕ4ulo&# ^p HJ,vXׅ[dli Mme ; ěw_
az g w"$`j3LYj@ĵY!%pPz2\ybP'T5 FIٜJ ]Qb8|^#k8hx:flu1Qf=mݩW&?VcȲ1 /h(ZaMD #zM
זooeԉwy! Cg֘Nң}ve15t,D2Hݱx]6 AQvhX0AIvgf~6.
q e:~*!V*&"[I5٨JXuvAvv UC* &O}iF= _em_Tԅ [Uy;: QN-d!<cs@!M*#LHVG' n7ye+
FT
3pՙtAcgd
.S`Z0=-#腯/&td9 lD-}RKKv!L?)! |^GDVeH%
Uj dEfb9 EMRyG?M>Q-<`]t TI+MF 9z)96CWf)_jRHU \Hd-W{TU 笆zWRMAY4@ d;siqKFAjAu^w٫7>υ#X ;aR_0
-vQJK,&,۞F
-1f4d"znU ݻ(GUO Rƥ#MG5h,C* P{hD
u]UIweSBϭ/@{1Y- J8fr` hC&Sg{!J}I,89ˠ bQ ԥ^6J +Q8d =hig fhVޑq=ߚ|[(u~S]BtԀY./9Pw/ %g]x!˻ZPf۴ |ƹsf
! 4Lt'ކoʞbCf%4?T #"=4{^nXг ?Cg 'aQz)7^ cbAV1 H[aL=G`l Zq)4SPF^{6ɸR^LώTϾ:D9m;m2e{`hz+6)zWB6JASޅ{` ?T\AZgq~mzPnlW3J3jN˰i- -Ề)?D:}졻O
e}kTK^ھb[Xv!ۖf Ǐ#H?>VDKSv,8{ Yz&nCTw4x%Gf{YIO ,[ޟ5FzMQ25=<hãFQ yQF-YI 1gGNb(y
bif.Ta)5WoDH&%]G+ʼnKݱ ķ
< VEQN&,)X)ŧ{(:^,ഴP44՛x{f_v k 6:6e@Z ڦNqw[) (r~m|$8{ ܜ ko"u(!OU0 /3pŎ!ͨ7ʺFW.AYՓ|0 |
8;Db^!Y2l`Ctd'6 cGQ!x:R`LknM0d/0 A-ܽ$p@hf:EzN/.D;bhz:aw2 ҤJbTB"+ꖱ&)I@ 'lWb=no!\XEYQЕh u`NYFb0aS]oяN8aN
1]#?*& G.RO=?)V!l0+Ru!ھ1JF ^|+2п
!*$H@!FQ9= H51PThGywk4pD~B^8~HS *6hNtL g( ?TV& @;Av(;*~|WBEn4"eb $qFPZrjG8 YWÃ{(8^-F6Ph> &{SlH(5.tF\wTtgf>hɁL$Bmz4 b[;ࡿZ-Դp ŋOsHV:" A`e;PgDW\Ѯ>9$L|ѵTY)C\l[4 ,Hˢbnz-bjs^ ?lBig}zQ"4'?qf'yiܤ,e| M-Y5H
I9
Էd*pnEUG"
p֬^oGݟ F !Eٳ,-T,S'${ rROn|S] 5ZTuv)/B Pu\R N utA7]]=_q R/86'U!k-]YvVsq2"1ܨOz\p^<ĺ9 пW<9=Hi
ZNBY>k 0m5&Ʈ 't?T cKI[C[ W\JgGA>C]ÕOmFX1GIlUh]%3wExjB`i_pْ߿;ǭ72o`(Q=NE
` SӶQ/.D 0& 0lK*j=ϸl ]ڏXj>Mh7V\Y]0AAd,y~ETyتP4!ģY~*3^5 ScH%6iE}|0lԥPxX4:J 6WHXCRc2 3!-ddH:#b0gIi)
2d54;4 |yu%2i}c&-sXʗcHE DA|f>.惚PE!|Ftܞ: '` ӏ2 .;}2햫_DZnC]hgDƢ6o}jȭ(
][Q/쿋")TGzX$sz ^ Q6`JIKRVg-; kOs $-uŔj
ShCl 9EwYUH7.đ%sI#=EY4 Z ToB~..֎NCGކ /& |e \ "h@@d_ Nam */nb6aZ>i 7WIWm 1c7+ !.w VPӦi #n!љzX :Ҵ ?![<] Ͳ _QL6rBD~CVMx=c +9
pӫ-
ԙyTT펼Y1 XX/ F$k&SPb}ބ6PTg4^gpUj孅rJj^FCnH5k^oݫi%'2R>'e☼M >OeMҧ b>=A8[z?)،[(m rF
c(E^R= 01ϟ;Q%; fV: 5zWa: Hޫl0w6m-d 0s̑}JyDp!EE-A6I^@UtL(7}@=I㰄iZm*YK-\a
t3u l u7bZW k(3BG~ ")ɝf2]CV
io ELN0U|4lUǩo(y$;Ê(K#>4ӝTR6<
ug]à_
璵A4i-
, *LaUy\HP }
Q3*<Ϣ!# _3AKtVZʁFM2;Y6[fH^4;6tiR D*
?T<,َ֟mw澥Vx naPCy|,~5[Q_ ĮGӑBbZL+l`ʐ岊mk]jc'.grH\݈-cMitb{KTP1(Aiލ
Gtʈ {ǧd*j})k}[hw
eq_ Hv:Z[W$Z2^SJD_Qm|y+nw`#0f 8 lkD΄nvOZ8'%l11V.%@Y[,5P;q3`%ddmt"e"dcAFİv/ J!FURMq 'Kg MεPJf*1_#ƸHYQh,9G.F*0Pg<'nZ=lՀZ]k#Et-:P̺BY˦QSh` c;\A/F #ǽu{j;f դ
Qwh}vd6/|0 i2qkF tAY;kŰKc?o[ee#/1@1@);MN V$fݾ1g1OڄeVYòs}PnA!BdҊpL ++ Лpkgi {FƑ@ (EHecuXw!ޤYk΅67"(, T4S[ns0altkGQAaWVWnZ`GF@%{^}dt,pRZ彰J ܤ䠯O ڃ M)v\P")lmD }UEM|D,?9.Cƫ&s]2-&Uɨ"ݎ78;ջ7&z紒Aj[ %ňPb K/PX>V\nDq߿(g~(K4eZlXr?LbYi
\| ys)CiJ\YkjC[lR f}|/el%_b=%S7 0QwRC!amE6KUsyڷOc"m|o[^ 4bu籧
6Y}:)q($=,aE:qϟ/|J]qgv" ˎu
~=1eOj% &-L^O-ξTm!Ti>(u V)ARӥV EҸ.0u+N'}mL8PǛ9ovGK.?3 d$g]ll9
s8SsPF& %$s~'5]gpN bwY7ESZ&=[ ^@L/塲hXml9`.K!vĵv' g{ ߎRv!rAp"'|Q1mW7}!q؋G7wuns5*7Jv kIⅵ(,v)D:w[ {h\Z'
`DtJ i&i ] ڳኅ@ Ra 4h c("a9OC*!!6m[<&^c;G$ c9WS (&~5#xwV:< $3?;8H3qzV/Y{O< 8la鰇,/~[%F!v1o)μ2U(P^W2TY9r-A Sa'.Wl '5jm>@= ;Dr/\.ΩiXeGgxoaR!r5 ma R0@ôD,KzܨwQcr- hh/NU
v#
#~ ;X&x
[?,0 8VS_dO ,| H2tHVI;WG@'xt fImIşYAHKkhB>C, J uhD@Nmm\饱P _nOgI\t\y(Ģe>cKhziFlaŶ# BDZ
y~OC8ubx 0IuY=gD*h f+<.ڦ C(%
`ٖN%s -LR{Vzf~0C*T7IgB_;lRr}}OXZnf)/b0a IwjG E d}#
%J@).u?4/p ftN@![)
3P`[1P
+ۀGQ96æiz+{7fÔ gao%,JBx0
m"^%1~)xKi{ F!8}e`sR4A$3({kYK3c2B)v3h% WFZy5L]ǝ瘟~aip) S]} _t5lM-% VJrx { C^I`#H}3P!ǮXжܺg<5~12`\~>hfS[x[ LR.fk1E-Y/Sj*rH"~%{{s.B
0M BI%Dx.ro}U*5])@ʇxH*}':)h:#ᨬ] س6o롻^Ιz+W߆*ߠ7gn~+{ՈKDJ#m5_㛹
%vC2 ԐfҴG>@aIKVߚ}^ɤvFԦwG})WL(yV7X
v)6~.^I"侶lK
HKk +sک^ԧN s$6Rzxݤ
1"qڼu\5ϫQߢٞZs .;_,ewm Rª,n$!JMN|P) 8/;9%>4#zno:/.ʍRb@PWg*/e#ù RZ'p̲
ˀ"LVaFz7^ rlB8LU"GC-Zg. ;澿o <ڴl5lw3~]bj=ARI n3Hh1*-~@_ZNfp2y.]Az< ?i3@RųJ]}Y5=煸?a}ÅyMv[C? I0KP7ƚBq:;½@]tj6rVo,r#YwH1-CT?e\
|Dl g1wW 0HšcdMқj4p7č=N[[y; >*,̌SL[1hrM*n"A֛.d~U0J%P,Ra&oEU3.`iDcX 8dl=J)m ?xT뇣
4__&cqP.Su h@uxLӝ'Jcz壈@
_2l$'ċDlI01 D"2=DJd a1o'sT{9wWXUA-O'#?pۄ85 ݅7P2:7FӔa*V
߶2 :KMŪdksjQchGD4syalyp3dvhTXcfnѺ&+c
/I#FʢIpH/Ϙ^Uggr Kn8F Y BʙF<}v ;W+\ژgwvV_9|rbZC_"XgEW8`ʘŁ?C9@|yR8DA h=jma1ЏgS8naѶ--O:i
:e'Bbjh0}q3Tg@zFy\rwWC0$yK'vB4ZH&=(2oSig)25c :Dd~(eJ^4B+l黀AkN|+lz#GхD xz5JIڥ {g k#F(L,ks?)D ,X4"$I, U2@NVGnh` h!07& DsF{g/;q6 r?d1c{&H|dzip&08&6NM5+0愧/P#isӧ4xF V!Cvqud;F
4SrzA>Miv{z-ҹ tv/ a@A㬡Pp48nP;Cc,0\Q. DaHlPW[S@ulVؤB\BCHӤG]!Fha9BB; vSP6>Bk:"ŌU` & e4.͢Zq^,SFnS8kߛ9(
1h"~e/Bny s C'k3P6P3'LZoMQAPMK YK a (e
(
R@PP(
$@Y!'<4XϿh8
`ũt)v/zJ6kpM!;/n$fHIaPo\Y;0i4auzvýgA2ѯ@ +zZ7suu m-)4Y !z.e-Y6wWpݨ ,Edck>Xͫ2ʐ-"e$Qfjn.k[WWUլ9r،\qTn*ErsqS!pBx ٲ0\ .k , 坬iO\9kG#NoKrHvX(Ԣ#fKquI W(IJg`F&ćq2,,(NNDInYoq)Xb,_0QD
l_/>
\yo03@[ oB }[RoU)FeowB{/vp ;A-q ̰%ıJbãɦ,IC1Kv2E%=VhnihksɱS#AN]Ժ!.4mVf1#iI &2jUEV2pAe=}>Wl 7E#s5 `H m跹ce. -$MۤAE05 \@w2CwthH+Z9eEFϗ q w$5j{K XdO7Wnw̌p돫
χ `5,ݦx f 3l5Ed
@I!f;2̎ci t{LxKؤ! y 1CÏڽz/Go~*O{}~l@6lڨTeu}uJZ9p5qc h7-UR 1-@9 6
%SVv;I^v!)Fa 04OebZф`J3 \jٛ FqX G$LxhTKƯ9 T7QK!Es= SH3e Jdw&Ҝݮ-3~gdN`K:쩨DqU$ 5iόyi_q_,<%$)@H!%z XX S Z]Xcco9p NMML MrtsZB ɰ%3!yG%{p272CX:s=85WOiZ@T (Kb+#cӐ& ҀTJ29"Du [!]?zyZush^,^
вdļ5KIt1; A氂zM yӽ(VB̓ЌjH!pUHjpȸ6^YLǖ] <'"&1vH'YXҍ D#nzg[s$҈ӆz_ ZH$Hqa#ku] O'glŧݯO fGfa5 6>ѭ"zkؠJ
QT
< N<̒:M qFlt{% ˺{ʖ
ȐF k2iCr mTF`"Y86:]M0Yy= f} a倉tGZ %42=Qé}nxyuy3.a[2ұϊzUglqzhw` o@
^VFWYN0v;o!|ǭ> [=.Y k(lFs<4@E\D-v t &ѣz| AaQ]rATFlq Qb}7(M+/x|@H'Ur
Zs1=G3~u /%t3 F!;qfƮ~2{1PBrY1;>bH0hT15\sskX( 2Z ox*~y}+# _z> PϿʳXj(EEE3 <9L8D^MOw2Z@MKG- pkryGv$!h`|n L
FB⨖'3o=9ƽ#s `CV4Y_Cﭙʋ='MV 1&j c D9
/n*h) -N00հȨ`nYKsgjWSއ@MۭQ;' ~E_.GU3svy1 K@Y-*(٫Q r
mϻs??==CFjtuCe@p G_vt7?'k+(kzw=] #IQ~O1fbS\/A;#!@B6,h)РNH{Mnc&-R52UkO?_W" ˿vwuw<6jw};xHoPFW6>c{K+I Uao
3)x={2w'9Y＂5I:L/To/P'(vT1:;OkgBiZԤ), "\| 37b`% Y!Nߩ`Gժ`tmX1Ms( D DM
6qm*vY[J*jM)O% * M̟Y%A:A j 鄒;'h+qiV5;)UxXW*H-T01)|]>ߟ\&!EZ%!# CXW0wct ôH ..%a v |nI(4SfCm!ƚ2dZZBRbJ6G^ 凣j(K
&(-14IIo/z'k;f+jcavFp m jVN0*w{b6Xuc^R$Ф *$EqMTDCED1 "K/lMmF6Nt"
(lMr!nq]sR?u!3ɉ+ АdaTQE\3tqQR∝l4 Q=!i7Y;0=y\16y}RYX/O[+p FZAV uu'Yi&PdRR
LKZ_WWą3sk|:j6Yq/ݙЀ7p5xP{0l .
A )}LPQ܂B . JsWX
{;=5A=iHRf显Y_( @y3'a7
8x^
r(PxbҪ
dД`Ϛ LlE((JIEIkix'A&[ XTrc9Pc7Zڰ8۠^W" !6]z,O;JjBQ-!Ln Y4,ҽXk0 7ۣr68UzB18
8ܺdu, mpwݯ8'Y
CO>zB~ِՁiO}/Ll[&bn757a& nRY , 5"O5Gt3{'gN("(5 0bjޅjoˮ4RJR"9 F3T&gfn-MYB6 R) |.3O̻]>$ n '^x|W\N2=jqXN!h:e I5 -s)u]8aScnヮ(I$FۑSZHr|?&|X p^nRAMz_3}_DUno+ݜGPG<{ lghurai ӫH9XNnV 4p_~@.# iglM:0"0P(; ,F%*)!I~*JO8P8/q59
vVl]:u9#EYϋ֧m,^C-`nb"lsGm~'|~{u6< 14@nݣ"v{,J@=q5ds@ 88xa>>#7ϿA}{dC|39@4Emd+bm G?[ A ɚ7 Me̔Yh(B N<< 76Ϣ _
XFv60.[$ ,m ^VĭDVL ["{r<|2e'U>>ӛsՇlyyXHG Oz:TM-y\w1ÄJdm&VZ-GJgY©%\`^Z[TApD H2421-X˽0,<]! B G7sA`a%ׯy*a<`v^Ng3]8)vΉE !N&h*$U$ɘ^cB#zL*%x?41fz>c {4QP <컜eneIf qc4M73V~ Dc)F0&~^I uu%
Kgo F8orft0¥\C4mU Ȁ'G
b 1 7Iѥ 7/) ɧ4+ udѲ6e QikGS'+>%bZ6$FA8aqlt|_?/g!O ~Zq%]VmmZ9|.g(5xeoD0>6IJ nzդ߰ @&I)E &A3
9`Vٖ{d%6CMF/e Qyl16@;v
̇y D1F?,L #u@ys|ȾCpҐ}-.~\c0S^w$jV1sQh5 O%LI)VMGW{91ăh <龋" !#}%uB qe, E)t T'Of_2Xʊ`y+p[a
a -]):ā] { )@d
gUM@"L'
aqW* plmj$BFZ}鰎hޕbUL'(P/Dv?My02,neւk6.xǾ
c&= y;IQV3}/寔P )aWU a O?: 5Ab (
f^e[^Ԗ- ndK d۷S} 7sN:ձXS"[dž;_"`6&pȐp8}6$^zQcN%ް"vm :Mp(aۂ\-S*U>; 0- t=8y\&DC_ShŮ~דqs6lD) F>,,uRZM GI؍I=:\QR ԀfxT5~M̭\1 Je?7^2U8Hie@lA7YkYS<{aq!?݇cSuNbQbz9^FsT* B@Înn7lIUL7; V:jД]5{UI|
`E"
2? CBY+0xdY32"vpKi}B ȝ֨:. $^ 8z*ʂtDACt ̌$}P5rZ7I/H(VzFw"ܖ°TCU!#VUS
; ]zy<l
&zN]ަ Q:^`a U9n#*s.2= `46b D1 ,S,>%g(٤|GF<-(WA8+Idɽs;l S#j^D !>1m
g^MavQcEOD :
-^ɂnD
[,ELt,.R`IK!"QΣX,lk*\F1 cF9NfJ^cʊuT2aW@7U fB Ph%b'Tz%vQ .Ԕڰp _2oSgQ"gSRYh3 Av I5ۤ瘾9B? \Q>
"#UG[0ZD]^s93$L[URH?glR2O " CkN' \B:J: =v9|pY5]&mkr!4)
9_N3E6ѸtƖ7"e9>#D2?4͊h>S m?
Sg%
wy2p!`( D^Bj[?Dto- 69<ܸoܭHsHlv4'cCHnGxL߇5D!S 'lm1aSBU0u: .w}I a,dcg@y$ҟë/_f[ä0eFW29Q|T!twú mɅH̊Ȩ*D0 )2X2ĒA5 s1] Rh
Q
1LkX?\; Gi?7JJRRN> mȘ :ΝYw;2.qTy^H7i3@0 _YN D +2 W<uSNjw'ҙWDՋ7
L 4 J) vN4H)98 &7*- wj"U(HD
J U^N[mvb 5ԟdxWsQh#F#"cJ2(NOJ"r_2E{džk=&GqCC Q܃
lQE1D3G %Hm\_ھC
# ";JX6@te9TP .;Rj$kqgx( C8+K`SCӻM(ؼ;h ^o{!2 Bsn[m=Bhn_wd7
F V]dGJc!iEpt [W>Xsݪ;9g 7lb*r[ Oc ,lo=FAu
c'?ZsέJ
쨻'LT
wK d`_ .<]vߧDu& a^!mr ZV֔7 l88 DNYN-\=L <&3 LR8k<;ϊ҃֘&2Nx?6P ߍ
$P=ޚYVF;mBT@M
fVسk}^o;.A|L1˂?0w#ˡ0qjOHG'e!_@ƙDK؝ 8I*t]b L}?Hry[ݽm]D&sAtɵCQ5
]_'gƹ7<7VrbuIML=pJ 8"F_"P/C#]s[E$.4w*RYT. EE Ql*|6% mqAѠ> ~ *ڄ.h7 vs>| H3fm;.TRS}u0wP,ٽ^jX M`ٯ&Ǎ1qP ;aE =;Hz{ȩ@7P kk>;ֻ{+
p߳46?λ \{pe·6vLK:%~#9z7{g~U`c)Kww ̋znwY*ԆF?JOO$ 1oCab ]S弼 x4( K0f`"jsne^ٷGF;#Luß%fSWMA**!۔c'TEBєA2. 2#U$b^|KE
aU_ a:%GyC}
% NM44v hDMg ɜtvCHGvݢb)7}ݜMz U}s6WpM97#pAr?_ԧҔ
_D bp#/ )3ܞ[%w> }!`Ȥg2+k 1=1K6|ԃy-={ & F~Ő8ϣdc\uqӓJ cڪ \2]䔾f(xʚϙ$\_ a{q_W&@uH5uBlqfWև'^l~
Ϯ
ݼ5 .- W\X5#7 Fl#x Р'`ɛR}NP7_j8` =G,dOO qL$Q\s;fr< 6|HolM^D'2;93qLx[Pw]N;Otf;E!]#Z@ ]0*
NeCS Iݹr¤@4mWNMpANE)N_rXxLϞ^mQnj3N:zYR3o
cVԟZGzYN$E6̶ֽSsL8U
##þpZK: 8x#=71Ak-yu !yY~v.U7=5obI >/SZ93\:~EC)#aI )pCt_ N]=\KHS8(Y:`i!/v\P4<{2U v2ӯ I:./NX(6־T$+7a!1~P \>"a ]n#~M daɩe}<9t9ݎv;q|B v:Ssޭ?:.
;]7vf8@gtC*5_qGGb6& e*lI
pZP" T 0U6**!v L5'ک<EA0&~# RY(>HL'hx]::ifN&d`kgVKnD }N-ny>tLxk!i:HECY JEDa*J@0:wn0 :b"( 2H*x %) X( y%DG"S#I ZZ-B TvqP_ '.)0z
)?Bx . TU>aӫebDHDКx?DAE?_`yǂE=?]!r
*WQ>1*|=o
Ӽ@ ~IJpbQGw:.?gۼ?>fCsP 6 { Btx,܁f# woO7; Pfy%j]oԷ2*/ݐEE:107dU=~`*"?UD
Yο @!ZP @b0DK#D`mkOfzD@ Ȉ l/Vo>A953DH bף!j5ҹbmf376o+-<ޚ:x?ճp7(3}1[?Qbyl) s[?|E%sl1j{O߹7D s" ";,Go1Phτ|Q{mz: cO~?E 1?[]sKxly aPπRWmޡ-h7[g^XtjNr810eε(lY
Υ1cOs<*m)
K!ɡ{ q A 8
.6 x &k y7 Q ,|^K`yZ>/W=q@P(olj`RL RQY,T4ä}]
PIdSd},Nw2"~FJy/ժ1WajXfU0$Ɗ ;HVv&Aj%5rq M3Tsr`7tq3li͇?׳uwfӖEs9߬ c i-7ߐ}~߲-t^;=.Rui꾼WMՂl1ejH 9\ D?*-@ I 6ANwPi ?@1&@|( Ox A am6ZTiAF G<8'{]vgCh0z++g>?Y:]IGo FH W!HdE0:)miC RѴ\{yC=d?2BD6=O* j$ ]k lEAՏqUN_=ORХQ?uD
8e*
YuŅIC$$1z\ O Z ̀@ .9|JLoQU5~'z"~
QWy"{ 5}+rX,4 =C;UJT(l,w{RU%db3ͭH`(mP)L91!>8tmItl&Rp 5OOـ@U~
P (3^7hFh24 u_1$XC[
](<|̱>SBUZ`9y/ta%LK鲐R .R4DDKmc!(\JPjb NPSJDR>v+K(h`:Q"(B?/o` w!,E 4Bȇݻ<Ic,$*oeƿZaZY3Qs4jH "0I %hHGy؊b :B
h Ra/? 0JEJ%t{W~_KnGg٩쵭8Ջj
e~v0 L4H"ǂ # ₩u -mEֈ ."AGK
EѥPvU ,ssj
-R@ke}ߟ@B0鈌H]h5#"(ՠ.!ǃс|Oh + T#HJ4}̵lʀ2I(L- Aj ^)wQg
_xzK# Ԛ Fǂh :^bdGؤ-D@A@@RuА2rcRgy E.s`wPJųtCbCj/ИZ0!&L۞e
vVIwj cz *Tt@ W7f
Ȉ(o0 `YҔz@>?x4@>]^31cq";ˋk(\/c'o]NSܙ $%kCegO?&4@h{ :}lڠVK2U@8QDD*BjA "T` (Tb"(a
zEtfQLP Q[v|{/ua $K
,T^]-LT!Ǎ@AP%!#1y:x0C`4$U~?q@k#2/E{8PB}pj<*mRh* n-*h
@Nw@*ZL (`HU
U *jڄJu6 0EE
J G-օAj\ZSH)" ]4{jJQ4lbahT]
^\SB&"N̏9*A=
z
oGL1 't}DA#D
y16T젢 *8 t`z<5FUA_
(蠽A qPe UW{>QJ` !E߇]҈vz(E;z;}Q}\5
hIz@A%TnI1@3 ET
E O[?k WSA@Ոʂq(&OK u;^OE}; J=oHuDPcP 0zvyQ1Su+ @}q?g^FDN~ OCV"?*!gÙʏWMʪ
(m""65ҁ6 QV|J~&wp 7^"U{ ;ROÈ l 61>^}* )ST (h ,ao
u @:U:Q}\UF{s`mC?BRϗ=4UP= (9":X*P"_|?x,Q
dw/tl C2 &Rkhr2Fl -MA_P^Pޏ 0Ap>lw_ W]= D6"PGʂvם^wPQ_Iɀ-Q YĠN*'Ay=-; ~Q}Cg \QTO] =\WE͉zpnUgCbV;/3XD ѠC]}MKQӊʈEvɗQldO`W͘'Ou6
|> sޢ
Q7Ԩ) a> Ňc̃Ȇ*=^ҹvSĉx.t
OqAʣgCnok`tQ ;y{!=@l!OU=l@!M%tQDO}6Gz=zXѧPcgX9qMϤYS =eu<&8:X> #E7^E=Lz.gx8=/Ϸ좽+80>Dsv}xٵz%v[cPtu z=ǯ$Jl;|(Go]; XksԏNwlb .4,&䏉 a5y:}<|mIÑa)È;/gp`G쫦 __;_5<<P[rxdȃL2R +qH& tg^$^ljc,WESyU>,NheNc 0, L^nzK\$ VLRyZŧ<dABd
]Af2/ ^ҥ"AE@AI@8HXk!|\I?ʦ$z`8Ԉd3Y:MEVU XE/iH;
_'A4aX;U Bd(d ^vKbѠ豍0m>蜅jE"b1%ݔ0 FB!zYZԁ:1ZT *`Ԕө|0TlULCsa; 4^Y+OT %z,c)2t_ SDyW4skuJ!|8{k[&
[ee&E=-QUՃsV^ OeD=ec/?F+g |ZUق6sq-e a(C u!:J,&BKm^`2Rhr2XI(q7 |Tjbc0x8r̳סqH 0b sgMeMQsOuuNiX}> X .?B&=$CeW?m][AOaʈrtw ێN ī44\D;n*-$ )̳<-Yvw1Ex, ,`aH
tW䱇'8Y7m.B}V0xPe, qKgjD
F6)
UH 9H5*;\!ޭR3a W ˡ۬y> $gaH}?=Kِb:<Á=dwώhkZdL3PҐP,sLe"=E% Qx!'GhʎvUI^
8~}?U '{mqvOM0Fe uEFLp"\ VwCb(E
&WBHo+i]iX#/ A3)%4MT9H;;#ՙREv{TU;c[_6M&\&֝52`[
k eu
n\Ệ `0u/* (B1Y⽈ҒjU
F xV^l|K j=,}\3a]vZp)3D5mҕ1}AB]˶=%D M/֎8wjzY P#M+vEC!
Uvy::u[oar:2VQn Z IDCY X) ;GFG/L U#;{
s@t8rbM5 !Cu
-8$*(PD h``: 9]N.iREz9lpUjШzQ>vz T"zMI *"vYZq³Y3@9{坵R=%QQB PTk;`@y/Z-
* Kt %N4 ]=;1I)ㆂ펊)^ͣP@ .7ps5WMpE|[{[#ݿ .3{7I[S7q jCCO
fnki5I sOx+Yr}^8eeʔBYjhP WO!0cW_Cc[ߏwmŌH77s 0֠
7;.p cGe0(jUYƮBf496+nE. k
`|.-k+ R::9GD 4DA a /o'i : l uΈz۞4b{ U$;ƇR ZWI>z &uo$$YkƀԾ$DAlPM@ 6yS
ӲsO^Ƅb@ t~.}J ZQ | o'K"ʏ*OO u ."gq= 좧]yBd∏{;H.}H j뼞ގ畓X QEd@A@>* (H *x1DQM˛oåLSNDDD2qXT}{oi"܂ N'/E^fCgW fgRd.{hA]l{pH-e~Bۜtֹz| {OkvROG^ X_^4e=! YNȀf3P`0vI=m* !`n}?+>n" byxv6nЈgZvz a @P4`(( d8 LdŃ6ǙT(Ѻ
,hhfݓe H{x
((̻Sakzj b| TRп;:ma~GnmUGk
:ES">e~
(Ҹ3`
:M8M_WG( iQ_J! ~tRe[**T U3bGQQ 8FC"(9A}mTb"* R"()Ò( *"sUE5 ኈ. PEQ
TE|x- EUnx}k(TTU,dPNTU\_2EP @T1EPDҀPX"(p F D
8"&
y1PAA_ 8 @^EM = edPN{/π@GkSy*N bE+wtWA b|TB @(d* ƉQj y:A[X?scc w)ˈPy؉$]UT
$@WD ]M SWeEݧxB }B]
<~(y-d<9胲u~u"&l> ! M;m >۽ :{uW/l:WyOﱲϺ G2 &Oeus~ف"k]VCGZ U1EU.rw;m ۹(.l 02Ë5ɡ+aw <2 9Sww{_v>w4lnJ.Hk4|} .7 ^ᥒj7 kU:\E6rOo
ß #>w_iu-I
07ݵvՌU88(^RB,Ci @u8p_{Z0ɟF<8_,o
FчK> 7L s߿ n˚m! CJE~+|=$'H'c^1fM`qW(ծ lgؓU^ެ2 tFCPlOAOş:VGOm\& _
O+i' ^
l*
C~p 7"\ǒo3˳'tӢ߷ޝ%}=Fi3[t[Zm`r.H{Y',1Qb^DI38:z/D%ҵ">O0#!?ԗY͋/˨S0g҈$@SO$")YyKk{(k6Oc?5}sPu$Pδ, ,qD!~nQ`@bC*8mxﺇuMCi Œ mb$)"h5(_)oopqDbA"!u36P"wRL97$Yg6Q ٔ :h"Kɤh "Pq$23 ƙ` M1M ey8"dKiNݵ$DDt }MRc:^'=4
`3L ڋO]SJ 8+FIHVհP5\o5c[ޠΞfB2׳m9/e&LGE--fSR}'jv& B,Um7?l074C1(66@Hbg_gg@,J(=oxv ®a^X|DnZR0̱UuwaW?=>!Cw5U4eUC YV{p)
[T ;Jq>PQ?Wpu|ϔ{_'cZ $
=/
f;w`i)Ϟ*n em
u0Sݨs , , 2-v s-ihau*_*r jaj3JIUo9?hW 2q5G ejw{#f<;nCPG . !SBm6WmvQ6)H6s ^\O濝n7:\ؗz{|3OHPUZ@F9P3Dtu*vi%n*=v!.g¶P14@4(kU)Vώ$DP ozd .8NF[߇Р,m:4](!`w}:c߸FlSt=2C@0Erehw /|GF"yS@MSҦl\NkpVZ*!>.}yw*%@nPAfPuam}C [r0'.ŹQ,
S]-xGg]nRW2 IMc@$Ʃ`<7&]wE< 0CZ
`pXl\N
T\g#7j`HhL Χ
y)RZr^_̇;W
Tf@]o4Q}{¯Kyv 'g` [ɡqCeoM
I815rBtLG ZFb]*Vކ`e25AJÓ \`ܠ觘t:3 QUQ۪-J-
[N" EnQ싩d7/߃b$0Ǝ #xsPPx7L Q) MoGN~ُg>-`M?& :?5!KX}k*;X #ƻRQhgZ /:R'ݵ-֕2 hDx VS.CP80@\ .ҙ 3)912x~FpRR14=lC4WGpf
S QF ;*x`*r4=sekAvlAd ]9 !6vw\pl܍%'h>B,* (> jΖΞ ?!~9װD1).-ݷ^Y,E9\n}=klQ-:jBcahu6UY߷茦nhTF g1~sc[Kaq}4s]шm
z
3Wr$u :r\\]>*>ĺq˄O˧|CMnFJ]m#Z֞ג zȼJ Klh
`Ô5yB
b C D8`ɳS:\# =uX,:L5+3 2:0}oa|w7 aHL< jmi]l%0dtYM rBh]7 Z% eT:^ ǔ&8"lj:qwd Wͼw2^i[mMC*JbmETdKi: 9Ǜ24q4eBlUe8*isA Az屲_ſׄhFƖhKkF֛oV_bumkq~ɷ;>_ cUP6%4@m >*u[)jٚ]@
æʀ1[?2dJqU.5f7GqKE"M ➼Cl>s>.gB42]&|/scD
cdS A4s4;{{OW@l`W^oP
\1QӀf3{3;F̣XN_Yٍd6p2mdj-CF[260ge3VY-w2 ! dv_u.PaYDD.ܔ8՜>Ӱȧ)_+W.AU j@
*
*{X 4~?O?\Ƴ9J3v
Y)H@j+zFɦ.ު kLQe!IH2(|UWFP݊fɌS)TҕR*F[xn3pst M V~cČюsg}BcG1յawV\w)X}LBfK%2ynñGpcPYvY GE6~.sbs1:6*Z \~]U:{RI
``
E>[\8HE;(6"!toHU@@F$_ѴA^|mKA!i"TF`B eLmROB0k̷4hط3WkFtڨMh[fhhAvhVJd iŚ"f2bI=KmR)-Vb)RքR+UqoE\ZŮ)W[Л C{g 0mX--TK:h u
+Lѳ{ "w\;zz$l:+o$mjれ٦\6q83Y)^ _PiUl7ߕ. o(m!@QE
.9ٚ0طyt]jhiNfEٞF[ ƺnë,n* (p;0胪#nS>.fMl j_eXTE,0o{;:n
~<*K-]e%b]v9A"@熳f͍ 2R 6w՚;;͕̥ច9 Ԝ5 rJ K#z ~; .os
FS(I28]zU.YW8-f9>Zō@F<\5 JG Yїxk9HЧ 9
'I%tmh w
wDAџYroiaC* ļ(B.0 lad q߂()!3wnV+ x)MdI``4v1b )0B!aI6Fkh3# 2##"oܛ$>Źۣ*%qG\Vͭ,`÷%7a/KEbk^WSɼ/Dܨ7D MX3:(# 4PiP@] ;
pILNH&Y`iO#ތ %4HU,*BJ
ж⽌g2Bz#Q uס7F +QS'A 1Kq
c~-raHp#I}HA$io_7VꕎoqsAe1RP``(7z4AB0g3nWSO5"`!1 U^j_y|YWE !d4j=MHg";Y 䀮UT̜җEL f_eO6]#!<(YfQVWi/zy=_",$G{ǘqojy`,T{bgg67~ 9YXQYwU??79 p u3RwaZoXƚspv0hr|73qxO?olMZ;vYwsCÙ2Ѳ ",+$ 6Ycix. ~e1*YoοkqԫRM"
oԘґ4nPwM_u徯N=.M(^KjKJ5 bXEd* -ϑ8籊Tt+eҊC/t#@$>
:* ;Tۂʮ1 Bc IYhKD1{ʅ
*)X<ݰ; 7{-Էzͽ U<^ ڕȘG3l6x~*a}=УWCȐ %mA[nL,W@`t ?P88з ,ERA szu#N 2X ]l@j]S
qhm
jA(rN[o~({c.98ça8^Y$69\X|;[)٣EΨj#sM6t
}n]9J&63g2q0 +ÿw+jcF CKwzJ_nݻiOooH۔#p՝nQ17wv~gat}[6l#+>¿
u%ܥRۥƩ786tr!hVuSAJ
}!Cd r
cny~ (CJͯgqȐx'2Vl+.lB:|hY$UH.FT\(#h2LDR(`S ,1tR8 ߘ
#x,oL Alnݥtl\Lve#˫KlDB)`PNT K0H Xu(S($MƂ5,="ph|%Q3v0_f d:ϐr
b[0nA@J#WRQ Gink(
|BŜbP0QQIJqmXp{4I lmfO9p~M,OY YD(ТA* qm
(} omC+ @43^Z7MrK."RFGh;!#Ck
@4k#&+7w /{5cNA XE 0BKBvԨ ʀu(BfOteh! x{_5P$HiG}~
eN0[E8%OVQzam=k|ha+C00laDtS}}9AN8pz:a,
{?Sø!/*ӂ -jEA*" vq5g8 TWeFb 02td@`C<Z )521Km`#
eAł4h`b*TTBA B[ fFra9=^F% F-7=qs LRgv?$l$
PiaP RZ{}k.?Z 4CH+|M
{%tXV6a0mwS aA71PH%ϡpGqWmu8x.㶦B`m E!D-.lŅ'iL92&94.:2xeM&kF&f(nnYWCQƢx^cx 4Oيеez q ,F$bD
;nmY 85g?g4aCg@ L[볌Tl]ڒd/2alËv(q5×pN*ԼR:Pn5uշtR3^7Pm:m(U6nܙecfn6me䩁¦iD_M[M˴k
:3W>J)Tҗl0R,3A̚ AViIޫ
syzt`[wcDnxi)^S,-hOxƠPo !),ds8cf#T $G6}?.o-C3:Kj 0`Ɓ0,fIH@bK
b@TZ,j9 j6¤Liֲ.k~j1\>X zht*{`pΰ=mI xA*Td88&[5.sa
aMSM5t WN}
1Q6zqi d[q'ߕ˿'>HƂ|z4K ZNF/;>Sh)mw0FA]֔
+Ll|{TX֒fS.ԌcgHwV(PHD `{Сd4 2JiWx< g<- yv(0ca\<['D-Ti~Jdht7 Ub)DzlҰ@AKYIP91eAKa%Ȑ l KS!kA`.
h[)) a MJ6$gCH3]//>vQ #5PB)v[|1oEK%AtEQ"Z(
_ "*^'u=\ M' w[ 6u2LIQ--*ōIĦ_ ~:rOj)s^ЅtI폝MӇ
\sҺ[OKXOL-QUQ,=oxwgn5I"Y3b8"+ZR !}@$n PA|t>(Q!GB;
"-L Wx1|!
? ߱ H>$["wsvzўb$ ֝u]z`;v(IF/!}} ˠh1I y3ul?6Ly[MH(ѵ62I`˲e2͘hCzȴ50zf S/L]{^7w+WAL
E +[dchhk`LjS 3 T֥}WCp߶7 h ǪN3_x%kkq؛IU
S$ߝkmcjEss$)rXY UVY1t裾BX_f$;i@{68uvy[#jRgD̤Ej%Rm;]s;cH ȋt REBZAWh0C`9`r C=6\,q4/ev QHY/վk Moʿ@RiDD(UF 4 *6Ǹ8q"qqwǖ!60D6ܡ2p "3$I>FƔ4X*n2 VD A b&NHAS
F7&.\9,\p-78swr.\csu97!%+ZԴTnsÜq\8sQ\.N8ywZUIDAQGiD9 sr`W%9Üq8⸹\ٵxt
96FG$n9 #mDF$¥7RDm$$˨ڃLELmT"FH k2>[eq4ҹd_(n %s[Ey,v{° : lϨױ
H% &mfQ;mc^+Oo
d`7 H0ЃH !h]u}FCVϤD^WK-%6ǎq)Ս ʐ"0:QpT:&aDiSH;. GXcbz9j@Y'hԀ(j dKXIU͈@b ȫfyNO͋?,E-T#t^
oPXJ%(_ @ D;] (}cҥ FЏu꙯A"5o!([|2(ڭ1 ,[Ye2$'i]eQM#?#94ѐϊf.J~uFf86nhz Q5
)zUe =OyH p |/J`̣!ȤuBJAHr8ډc FqiQ&"61#)Lqas6m}{=eN0дVi1gc#/=`_e1yݬ2{LћTc<`^73KՁ#^ܾ8g,sŃ!;TBuQ*ܑU3R;j
UƆ 02"Gk}oL@0AjD1x4f[ސ:ݻsm %`PvIpm@m
]ͷ{3ptUk1{
X3{of:6ZP3> ge:sMjAFBйmmjs Ya6Ck5otz:
6 U"Dńdd}q NYtdOi}D
fY8w9} |܆u(K
5ӼX䀾(F"BD2ԂȡbN xTbb TI{B i~o s)z_G5f]
6dv[TD/V ._̩(4ETQB?"lq:veR h(a!X'LtA7vz89
c\)jL7{Y! zaU='+r;1FY&L$.KPXKM׳tJ,R8-AWc-/MPu/ڀ8ۅoRH ?M@0vb"S~HA GM{guﭘUn?_]$fQ"@En'܊8 W,| L bI]JBң*ں}k~S{ѡgj>@>V'8,ô|㡝 0hH )ڶ `SOjf{* W
*i
5ŭV( D:.¥)2`RpE m|
0t!IBI) ] |@cum\h5oz>;`\ O, 5ςdT* | JО[Dj#]z:whP*dž9U
晥ES~eC'xIqK*Л7*Bz gOdhpBc{B]o;Cv!aɤGkFї`)*qQu}
tlL9
VT}u@a N"'JfE6Jb ;_ߞl7: >em[cHj<d eNd)D@;X\ڜ_>'սkO
) 0d"HyykEG/9iw7|ؼ UK*B(`z7a7 (_CS'܍X4q#z;;iGEQAXh뢋%" uٍ^ܭuC3( hݣ"ZR.hJo9:GRS~D AϠDEhY6
aRV5ΚPjYp}bMsMբ2Hm#K1Mn6!DM
¤q$:c0%= 87ں-c 81ƹ1}na6Y iPі[E
P\*I
4jK$
z6`l7 .LEX2,KP@"Ȏ֣ 6T]1c8imLDK5s :-25x^^ҷrqIM9En4ySQRXyhQp-6 պC'JQ&PGB -REsfS
Y5,. NxI`
j3Hia)Cg $Pvb]yѨt,1h B1 /IjYr@AтwWsU} jEF1mƆIS!ui:!Q243&7j 8M8Z^2֑ X^y"bN+`04Qp% W&,(XF0@$mFW2EY$鄔lU6.C(6s DJTN)XƦa1id׳VnU^PGbuqFrjn`n 0n7 -y58wGґMѥuЛBTy+ڦ
0mh(i hstRA(:Z`\BHPuV7.lUCig5tid cRy^q`r*C1PC6uj*2RIPI6f-VzͮHh@TUT%
U dt:dg*E2¨Q<ޛ
)
X>#
o?h,ayFi` ?煫SA|d@ veKA7T)$ʶ"^Nr0/Yfq]Y"o;GoaU rˍJ[/ 1ǧ,C3=_mm=6ٵV֤d&-`鮕{ |+}/~6e
69EK79G19OzGQ^v 1>ħ`,7Zu331Q}'%`}_Ap0P3,Fz$AɬI3K*l?e >~bY:{_"CO2 Dj
3vWm+ [F=uuԺ¢å& kd' BpTR2=ac1liͽ>Vg`! i D+x_[A +
Κ0lK!R865tQp>2nrz}
@͕~pNjTMj/
8)ᰤE,\%۾ vsF2m;1_=bl#zLs2=v +$@RU L,aS02H;s+b{bHjuI$ _v:y53\E(%n j\gU&yU?Y{Optf Oi䐤 aU9dڥ PrO+?R} P~cV: WSKM"ԡ U Vqǯ>k_&@ lP|Bxܘ(
8~̀YV*oABj"ӯT]X^ㆼ6且˗~q=wcweZ*n`/0JlNd7:0çz= uHd6(KYT
` ifBP0Yǽ M3I.}ѡ3R]۸# @f2:i!+& ^lE-
-lur9-yf
ARr\ti /a(6Ohc d23t`U
fL4SBDmF cg
~y-"UHd}V*5NDgʼn|B[2c9 /kqA97} 2zǢ K8m]Lo3ɿ zG^l\]DCdY@dFdj!Ea pow S* HRc&)NN;[Ùq0VG5ԯ\YA YN8?6,%Y=GpC;xe_^I$\P#/R IH X+W{hQG
z_ɡP͊ bgAO}B ?f R*TAW;~w&<*Γ>H_c$r֚E,'P3_y|U u & nL1nR'\ |?F o7H= pY{Gr ŝsگK6xz~
k+tUPIz<
V0B| 70Ct3H JH;UnE& e4GT\5<ӺolS1a̘uMV[u<eBd1k|~
Y-"rW%lf{wolVrT\t,9mArɅ;f_W
9PC"#blC}б+氕uC_-Z>M:uq^;j[G$V{dn`6.\o#osөêJg`;m!(njFU><䗷9)5̑[D"94s;i]J>.XlFn4w?n "9$ K i+x$^'
"` R:w }498ωcuI2B7RKq-1H) ~(N8ZA@XN6je5A@ Z74ZNM x_U>{3]Lz4r t,ߙˌ/vX3_Ύc#ќagl+lqz#Q+( Jw2EB<A>ײVT
g
ѥro^rMq )haT.S D
aQj22Cd1i?cbyy2)$.jMn=^ v`w&Ʉ*~̞B]C Z6yԆ4%DUnҕ eZc] <̂=wVW1!-eFC[ l
7=EDg_7o{GPd )fՏ'0
MAH-W16 Uz&@{
.SlFt,TH:^ "gb;W7ݾ_=}?ΤVMwc5sc#P^pstX^
pD Zn
eP`Ol
$H|I
jGN$3jrv$Jra%KL&2?+LF Y҄`.+S'Pd9 A\U-T"rim-AkWEqy1
O)́&Ý- TSRv>k՚1Pzh3c4 Nn$(BP
(2T
0z5\٩9Iuӷ39 lrLmachup'ړuJp [(GchriM(l\r ر˚m\ \d6師 h8\\b5{Q1#"JX n{
f3w$(iȔa}#K 74zʆ)T( N@%f, ,!>3>,Q L6U,UT?Y5;
d=pm(eQS7
#pR@C-? ίǫ#a'lֻH'̕*s2R%QE@s*:cifμ$3z˯
sAFF t21I
%UIWR6Ǒs^E 6Z<2+9Tan~%Iٓn%= Uq]Ms8d~@IWxVB//n}K"ŝ=җ`vn.f -+ l.AeWV KGAo|pd .S3~<].8Td'gN 6"/GA
A΅@UZBk|lT駉={VLZE1s̪Ud?LRQB| HTA7(Tktb]e!s(H8w>',U]b('/|ڿ}
ԦHU-i,1@*O4rqA
74j]B c*!0VH'j@jY[$E@B:nlT8<}UkɿN}tЌ6 3M}MU}0fvxn>
oD $Ѐ:0-Ig1^Yux~ i
H@$% @2]Olk}oUnFKjjj@ةswXBl
]E
twZTBDCw~y&@,! & LQ`#Sh ̀Sy~Ws3k ghKݖވmyb@^,;vD3dgأGSnT
bwы6[.EB4m:ZevGhe:ڢd[fFdH[aPs=SıB]řAաO(Tg*#801=.pcF{=?C_p K"F J#הp 0KRБK`{_kwzϬomS}∛>Zݧז\2Zm?^,ݯ8/?w ESP
u+R wd^`|dJzlRXcrJ.94t@f[s} J "` Gb:h'#ݿ3)Cwlk .N]Y6
TP9ffOq?/fg%^WX}[Dn6 XW0RR S;nRnb*Dz X. Sy &0 iavq0 % *ƧV^vZoB{I1D^2Ϗ"@f`W & #20rP_ vػ luSGHo!!QPh } Ӂ8QD vbESxYZN5i() TJ="dy@S i)x0
`)ҠFZCi6r P5KC7?6=%;>֩5\"Z҆ۚ25
Nw/(l,wWTfKMGkgL{_n`đ ɞ
yP~BZrw7Lϔ|\* "As6\zͫ{ݙ7k*O]V E +%X 2d@6 _Kme I78 nc%3f/}gTKz%b_S k
4#%¨
e +`@W٪P ux9/Oc Ǭ̔xȭ2D|"p[wրH9b -m"bNPxW Hlei\h
D'/R?ZlǕXOa. 4wd w4K_߅CY?Xe]~zU&NJ/s@CX Pcq!2Cus\ m+oK Xҕ! ,\_7
5kÓXu1#v'9!Q?'ϋm[L5]husDŽs\Z)@d@EZB +Df3 }MMEcTRjJM/ B+{K-{UnZ<<~{h #v2 08\PScl2~DbUEJ6, hmbM#q?ʝyUn \W O
@-pH{% =/w H$t,&h8P#71 4}z!P@䠨4j {,nFQPY}6
(Σ G}c#Ɖ5 νO0YeQDN }Qgq(unUym@
,q(T%HN$_!IG© ߿O;l'e @i{ >G 9v'PP0(4I&h6+*4~efֺ
[w̡?f"st?n3Ͽ3ؿ+<' $A)- @ pX<#Lh|O^+VhtJ[maOG^ fL oM)XUH"maXbJx6*JZ( GO}NcEh#J^լBui 6i^ ᙷ]lL8,R5HW^/( $T
TMS&2u]`1jY!gAq}Kʏ! (N SWoQT]6(@9]aؒIP#2vìE"k[QzDxy#@idplkk'Ò&J(wO!y OT5 Lg%RJJO 'zU"Vr:xIޢV@о4 "5J ^X2H(. 1O'R F >b9A o6kŕvgcJ5,'9DF(J @A #,E ^R& ~Vu2w)ۺÕBzn귁2_Q= nIH [Ӊ!
8ktTEuxC LXxD ru*Y[Ҟ֨U(C7FI/WgNg l@/R>L{USOKۏ?◾7_MC@MYw=&G /qo!WsYL C8n0Ce,)An@8 (hNlW2{>S|u{g}>Z {Yl57TI]>[ ,vv!>ڨ08؉yfR5u}
_
9=?Mʒ.F(=M.t2RlZR>FE
ח_nEsWk+Ν"r[ryY D} <e!Dⶂ_TQG>e檀LkAG%VU~ <(n$n>>ʸuN /y:ksMݮ3Σi9VJNs&uꭥiA^Rd .> oSOk 5g`GD,&
TFt~b/sWGr
"TYf1()KbOQVNp5xe`(ȢNiXͦk8P+q LDl^e U.r
iA8$6r_D2aG^wm>Us` =VS5$+X!?_σ\n8D + "2=N.' êDlJ
oKw9eևbY {q0ÉN= E2!bmxM`0^*
7~7$9y@Œ2FVv 8H"ujyh)F
Vyj~h|5&[,=a)l;Džu-_ڂȣQP4y &"Pض1ZH4?*8dq\D
5{i BL$% x* @Abqz |u%^Y}\+p2w}Ǜ@2D?55J%$D #a1`m$iQ0ٴ E8HF{M#+ A{8l], /u Kӵ:oU"NoWlBP6#4L7f8Kr)e5{^|="^ 廜,JlZ
Jd $
BĖ 1# HNV$ˆ0XfEX,tҎ8>ͅL``. u,2
Ib~H? ?|IxYm~S8ذYo(I_ RVD^@f_'x,Ny];+m=ϔݦ* }L{}!9 ;o;%?߉Pt );XK^{})^`@b H pjz۴G,"=_93=>8a~v-ĩ6 nP !"d}/.8\\+MϐE Wzr0` ƛ iUA&e3t؍g] bOтYQ2dXWZŀTAUZL[fm+FQiwםgoSFlcIh3ϝٴ_qffdSO /Kl{ o gK=CKYqwܯG 5FƇ?ؑ} }g!5G+}jU5i:E=Ľ - Vw䁎.} 첐[@0`3 d}"M\QqbؐHOꠖ2tۡQcPRUMEX,<; f{?㤊WidT9*JyVB,]s ggtb$d֬&H0`_s'
] s{zoc @:]U/jk6/YV]-Co(BP Ϙ%}5[=G"2b܈ O ǤsrͫUh[B:?ԪϊL$$J$B
g%^D p?7ћDXd "9QGb̪X.L;:9{[Ğ:"˥UP+z}W| koK+}yqw /[^m6?ϴ|1[%t9inƥRz3 fc4Uil]B"Ȅok]x[YS_H t#$g-MU!uCl@WOQLf@koBVc$9ä7lE=M~}h&_̣|kB OIXj5IhH"DX 4DX1Tb(X'f; ^{7wu7X"|뷂FƓZ6QcX(4hRY,l0hHɐh(5B#% f6HX kEQQ)
EdhI RmIj1lTBZcbblV#Xbh[ cE8Xaz5mU*F2 $D
/\.Gs,4Vׇ7t[Ym/*h<0< Y{j$N*$y t&w?^Qn5ŤT%?*|[Z*ug#c0~OAL
NU#̲?_
yߎM_}N$( D$otMpJ yѮ9\lT3 v J 2>@1ߧ<^ח~G>N5!5dEW_.|`7BA$;H 4T ZT頴MC/QԺz{tDa H ep|ƲxB|K.DK1@ONђc]n
$}L[A)Tk9Qw.]] 75[ {)ѩ 6=ɥOQ%;(oo>>N=j茤[n¢j"52Jm1
`C&!4CGO!aoϾ T
KW_\M~bb"o:` ~
?s81m"wwM۽tA|."$OljD.bDHY'Xkfd(I4G /aB|,!F0&
**Obyy`
AT(IjJ4 +HW;{tyt08s{ ~2 "}oyEy NCoigf*! 0Z͑30dcg/"'雖lYj]6o5-mݧJo[Ƃ|Mk:z'G `|$20e$'>;Gxާ/=OQBѕ8u9qs'99u)J܌u 2
1U),j*Y_yM>1*Ln], @U2gzA?W K<-xbWUUJmRT i\6~c 99Y6شo^s@m 3\I$^ D4&j=J(ѷpLV-njDAɶ1( >MUAXE0ЙoNn27okЄYL4)dv**D49 =5@̾Z)S?JCT4 t%P~H /brl'$E@l?m >yȉ4T! I4I-eXΝ ! AAL $;y!>Ȣ8 AK㾆rkI#$P!/gZZa@S)v_ i!q|)_;o gLL60<!L@z%3Ӆ"@U,;('s߰55AԚIvbM/e )5FY 'Nu߂
Ui 53h8 sa*g#~} k>%3؞6(}(R= 2DӖ: G 0x$ $b gv]2ixa,> ӧ%@ł*%F5]\ϓً/Όm1!b1A/ ?PJL^E%?zRU\uA6힔ZD DPy c
M7P[/>p@lq2*⫽4E"Pt5\U$E:e$@)r
!W} D!y:&9sw[W1`!Jm( #TX%@*,B+mTiեJM--iGyVjh֠C@LY"D()"?fU3PҔ
aߨ6(@^L;v<Ϣy*WZ= |}4/Ĩ43HMזѨѵXƳ+mѵ-bQ,Jz#2yYh،r[_t䅈6
?>7wu1:'ztLg -8Oݠ =E3luݶׄbz G,捓 vI(|k0nLD$ `EbO0IH0wMB"1es䰘 7ƃaqpI"XB6,v@])6R\D[+bQ =ًnBczy~N[NW \q0fm$/Nf} Ѥ& E̾Vr| O\j! H)5}|}
LRI ~H 3G
0mol)0gNYf]$z=~O tTT=3Y0-/cOK 2Y"
fhL!cu4.WC HR3| vPPjGïĐA{ S"Gy{;fnbe{vF#'B`A! IԨMGxC71Ыѻ&nwUPnÍ5nac* B(_\z2 HE<[SOVuo#Wlw#v`J(p'E@tݶ2(T 6h {Ih8[t>ӝ3b34dY]^+9=g7CTV(DИ~~Y! 8m9lZ20`P29r] 1 @zu.K9 S
OfPx Oi]OћlW62 %vJ(AFGpmUm:JΟt% '\;?^oh(oJ!vA) M0uHP 1ܫCc uYc0͒
+
~A5yePiiA*C4C5 oˎ]W|>Z=h ] oec qOopt( PmIE q,DM@@MFgj2V
5t8zںĠa)9bH| AwjT<]o"QI]]vN-_{Zz}{Aa9)Vc_w2p E;5wϜizZu{;kr'y>V XEORDWzmoN4!4 _]inD* ]' ?̴/hGl=ndqTy]Vjڳ|<+0UqX"JzNEK %EnzW ? C`iqU A$ RVH4Q#F! %9G'"B1%۔{UB7 Ssae ӳ13]ƥDqвb Lj4j2`hB]:Z
X`@ Ɂ
=P '%6~o´7oROn(7ElEXӅڠLV1YꝪ|7_@ $8#
lt-0l3=/u}{GK5Fx˨[
ƁV/p:J+@DCdyM'҄?pP@rv\mW7tq3RfMtRrmb[cX>tSB f8L`1R[GӏEo{ҿS
!3 u;D@X= P49' ǐ}LnEMgC{ X!9[q/ZdP>&l̘E $t4ӆ"/dhb5[YG 8
-} h(Z_ )GCN
j p
/iwלl4+.eH #D$¡@ŏ[@`S3:Eϯ5&kЦwQD <əEnA
!e(R%b Jd_B5k/Uz/1:!=[kOve84sܒ,16Y"(צ+'܀ R>P, AkW6B
*ICC}3LG(qgekp@,v1I$Bh(#0D~%hR?hRʍBsQhT֖$Ҫv9 1z?-v96ޡcڜ >gg}D w.8)g
. j7oyxd Рy!O&l>m9(ֿX`1Y=|å~p@ T ofnm
.k(sZJEjuLw~5 YUn< *omLN1Nz5$0)+&Qv$2PJS( >|ZgS\_\́+d(AdYcP-$O_L~L?
mT?r߃sg!G,2}j` {%^N
XT5BIi$.g""ܛg#}[ٶ,1*wLM& P%̈UQPobޤSz~s8>* i:
cЈ%`#_ѳ&`c* <\51 .UfH4٤dHqrC}GԶB (߰|NH%i~ I1p=-^Erov;a{ORĚ~>UmW g wv|j,Vu/n`! "?ENmL:)S^K+fBE8>-(qY4?sjh(B
IBG͖CFL$+^G'b0?nJE-RY2ʿRZiru٨!цӛͶ+w/^7&yQP ptXu:p#ZBO?d@I4wS~ϊz#dOA9xm .^/s_c! s9f,{L30fF`g@OqG߬ 3Z)r7e<]U(aЇw %(: 1wmu|_nƏ~E2@d,S4mcQ2}ysh#%6F6#Y&[ђh4Zldj)cRdkjKTjMM%Bıfl̔m*S4AJjA QcSbcK(FBxQl:|/ٹ 807m_ \+b2 ")Mk%/wp_cd|%EBF"ęZ~ KBRhM}KG}WkTPݨ]l4֨pnOXC(3+}Lz"kCΡ|YM2ACI 5 d]&uXdg6W O:뽧gGuiy[R้erȕۅ"txꮓ ݔ 糾bB|ȁzianPTI~7^K'O3_⪇zQ8U
QE
ݬsf߫y o[ݺe`;F*KK8'X 00``pz ՈbL"= QB!أٴKdKz S.[l (&ƃ]kA* ^֝2<"SBJT-?+ӆR71e23?X8a)T+?.'Gef
jzRzѶ>
HBp**!:
@Y@( QDDA}%cy9C$i*Fi :0LQ&5? s+R ^aJj
U}-ե PrlӂC0E wh BI $$(bF)7=O= 20f%]Xkۇ&+4gة%X?67cܠMz[U _^-y9' #D P(IH'Ny>::7kMj?] j 4:|_r
n|~wVFo 1hߕsMlȢnUn99K &UרLC2.oϒxa[MBEy(JH b# |
/ƤۢJFS(un0%~lF@'9 9jupmLPbrS7Kz(oe٘]-,Y `z:<^*ti#oUxW4Y~(s6(C +2iΦCRZ+K[9ܞr IP&4*km֎yDEmcN4P]@Bz:ݟlk&-49BV a%" }#*hUE4تe /Pz6ҏ}֚6Ct9
EM8wq\y zQv?[g .R#&&os㋃zRS
X'ߩo>Vu;4oEP
D6̊*f(J4DSL2)Qc@CC4b~%ˆЕM@v߲.`32((034Д,
$cx㽱$Ae&BLH$D._H-e hJLHH(ŊK&1bI<d#P뿝>__q0HQ|nJJ,j_%]ݜp5c"42hiFC ILnr` DFLdLЁ #2Xm l`$%MHw
Y1K(ћ >`5FH e ˇxJ 4/ofI$MH
Qi$d 7Gk==Mm
R%3%$
v5*E]#fV-8
ˈ#EbMܹ[){ϒFTKzz
TmSl) zzڋ,1bh[&LE&U23UZQDz|>^ٟL4Q6J1KvL42þ!|}>?)K+EfbLZaH5t ZrGl3{
1E$Dj#
L)E"(2i4Q2UVF5 :G̶bƨ
Ȉ")/Q F UY ,2p-?9*պ_wzgs7r1i*H(&5:s3msgNJ),Nm x!E;ET0` rIn@f
Fᦰ &Mn:upK{L{jOyV1z9wA\-dd$,R
Ym;ڱ9=O:A(@aUfX6ULlM8eIe/a= U ?p{إDz2sѷ/Ljլg:UK PǬY*mz%HL~qnm'j[8I;hQ0@ %JK3Ԭ#"ELU@t0Rȡ+Z, ɧ
z@8bcPdM"QUF_/isdó9'k-.x "bEր^Uz4ob `:,t) @ t v{>,EW_ R33$wpRyM ? тgt{}!`_a7`48zLz20 3;J]Hv w 3 f` \ csn1m > T
ZsU N/¹qK}|RXLH!};yXэ$@E_.DDDh Rc$LF$i2q˗~
+1 gԝY1kcv,8{cHxZ >NE dpcczv+1_(Ibu,P+F$oG);, A?6ľQ/ϵXL$FiF$wI7-Acu(S
(ۣZPQQDD 40RB&,EPR8%+3`zHdIFLKHBCRe z^
Duۖ)J.! w4hϏw.X`%y {&Q(yqPC)BHq`)ȁ! g9qFdf3#305Y
?VstDN@-:rvKȤ
,/rj9Y
W>y
.M =٪dh
(ِ `mR6ʚ&$gT j
kOeXh@Ȅ h1 B3]%0}fO?ܥ2)7s;AhLDQ@Oc5;MM41alLt(7Ր:4vi8T(CW S#JQ8t*7|*`FHId
|3 Vo+wiX0xl dL,ۏ$BI_1Q c!iםooUQO6X
(1X*" Ew虾 _ljsH]k:3{
U粤N|8[k]cL_%Al9eG+/`!v "HXbF:0^ݑ۽N
ff.iD1 w>kgn4||b>.fk^4F{i4S2&aBcɴFc& Ust%AA"ϧ> >Xk nc?kW99X%ȨA|j54J#55+/߯cҦ^28:ZnhpmaUuEY|>n"dsy
&E2J'"e%̨E ?BO> &G;S1 PXQDEU/ 0bUǫTM4`Ȩf],X
oY.F&(
(CQTH,/K(2YFJ L-"e$ק~_sϥ{h
3#D
ZR Z"E60*`eeQ)"/O5;ve↚̂]
Vq,٘icc I=3s0klSy p &a K1,[m
ipq(}0QԾ p / O^_Kd6 - u o 4$hr?
90]?Q%(8ɰDH,ɭ
mhz_>}Oq xryt
JNga}<ɨG?X-kh-;Ot>R edK JrS}Srty8U\/20@<*!`d H{SOOa 5\tP0XzX 7oݒFE̠W|wv"0se"f;_f#3## J=}p|o~M|6_i#}{j]lx+~\Zk 4 +c:՜5y9,_ȅ
5AT?o__1$Az_)* ulH0?4}W퍠 rU{ Xu]ȢYԨTlӻ]>L:E2Y?Ňaf~ӇWR`8Gs8PA
~ x
@HQ0V9{ 0ϼ'Wh8rЇ3WrpX
$ޑĤ|7C {>20z=[.!/[juV:n hn}- gGO nߨ Ʉ/6Ųh9Ͳ^w}W}?r12@k4BLvifVYfh^XyA
1f C#
ILd2!bȄ( &4hC3(L"D#D͛ݻ]EO?_xy]h6R#I@=o ۽=ę,"))
iQZI`Ld9r`#"$AVzo?F:4Db-8}``mx3 ]~
ûp
d؇H\mAs((J'SG{)T"
v} c'ȣ$Wgbv }(.H[PR,83988Q݄)-vVY\??~> E9l$]Փ(]t8RR onw6n*" ]svS "~]vWW`dA & P]bcjU"9{=ɇV{^ǡ??so{Ȉ*QT^q X1^2"E3D0"LD A1HLq$K44n{;֗;NwrE j3!)dI&BXL ) (77Yw&)1TQQEG#T>~ПGf'fyLkE^+)L,ńh2ƌM$@0 WzOw;sx|._̷<_ٝiȫFǾDoi
EvV* -gVw&{W' H) [œ (r &v*/`z}ɨ`j8Kr\cbŨ,V2;v2g/UCYPAbgMܶj0}߅_LwUMl'LTAUF$K`شZuy/9g6EUӎF'1+iFOXJ,DWs\_W>g3GnTqƪ_ @L'1HeBBnTl( 綖u48tL2f? 3:s 'qn3cdiWjrH |#9xC1,B;x0V/L_vt îw2AJHO:`>)9vFפX >7nY0 =#Cqd]c$`Z?J@!0! HX-ٸȗ]y?OO_ƒFF /
AclM!ThаD"Th,HZSu ТFIHE20+IMhf, FZJeDmLrӾ2+&@11CHaHZwiyzWclA1(PϝA#"DBiS)۰ JIȚJCbhddbR 2!Z`ѝ,_#%DKM L o$xӣOi5lo/"*mN;=#H kTj6?ko#_WmM/0a wv #"E) .WY"EQX<[nn38hshrߨ]ixlj4˼0ڃ3Ly*iyYF $`X,Xmo
fY3|f'ӵhBH+FURifeJ"6%( )!S04bX Z&ͩs ژ{DZh_ZUo>|"2R0G+v$ &('Ct)3Rx$Ń1[E"psJûeA64<3<}ݘM>n(cmf78gV[ ұws? 2UdN aöw^7O5W37_q鳗٥!@g3WJ(?q}ZmY) \k+"69^hgń5jfH+pEr#? Oj){6?o} ]q&e>|ky-ռ87m5"˕T ɜ Gl 3 MNoy
,f%иྦྷ)٬y\ SZq \YH&㈗KA_r`0fg-(H3
`T딆W=/ F}HH2`HQI* QA 4(C(DԌ ( ɘz?}6o rSEAN{_m6O,3g:n yOswdq#OA9D~ȫ
>^gxeSTpOU Ym82< L#Mq jҷl[ К\iy} 66nݮD6wxHCfg]:d&-'ܠi.S0l$ھi*p*i=h58 , m(؎pZOQpO~> [ +wOAY)z;L5dM ā?zNeTTODw9No7VM^Qexy퓶 mZ8DI6oH&S k!)o $ ytG1}]4aS__?݅8,aNZ|˟ $}3fF4Ԫe9dNn8$(fD)䇞hK?%ϯn|>Mim+@˱%:lW3jS3`3.Ơa W!#4g gu:xoO˹ :i 7=IYU0f̨K%(*at3 J92>]:)Rtz9e,PnLbWyߋ_K%v`AzVhcmqs: W·jѤ*S[ȩ (7L`͔]
MxyUzϻƲ3U+?:*4@: $@Fee;66"(VQSBfآBؔF,dA xN'w쥱_f+~ArȬdfFdVYEi2̴HJFɌV!$%()1de$d# LKe4((2 04SaM4okެo^(0L)b6)4% eLDVF2$$%DKbZ(M1`$i,1f
j̆LF"T)`&1DF $I%$RlI`I`CII$h#b#aƯ=?nrf$ѩ1;n&JM*.]1ϧ#&g Ks'ZtR&nZaY| eI┯{Q~۾b{O hD!id$#f,jPe,-Vv-QW*JG&An[4?7̪ c .Ƙ KhƆ YW*{|*KإΜpBa06 ;ܯssI4or*ҟCk~~ctb ;|z⊈"23aXwV \h
#:DIdH (eD˒Ii *Df m5ؤX%oιcF "33! 4搬S&
$ HG%{_hC4iF̈FL &jVlkV_`M`ԜL> *3Jd#N{y+PD;E [2<7R5U:P0x#P]lҥNKPŒeܕ{0Y8
!!_
"19%z^G!
n_'_v'חe e b-FVW2eW۵
=ā 7~ ݽ=@g_l+z6M/xQ5#U4l'ը M44s7gjԮIQ9&Z+ erЈ}N.=W~h
ݚ7p)FjsZ³0j0q4+:{FjDө`ap+f4:d(MDQ)F(ؠy{Zf5Պ芠fgf|Ax
e37Sbm cqуB0_
E@H$Q%RKkhL0-c+*"a\ A{ADz`$(K^Nh1E bӎUa]X\"ڙXƮkMlWCMڗgWYf xC7r;jLc9g.Io
? L?s5]Db&vj1 fD Jfrjڷubpna"'4+ 6jvM/Q`&l8 ˘:zi=
^hb/T*Ms1(iW2|0ѩG@ԂὪ RS@&7P<2O}"`s uϱ*"[z`On? 7% iZ3GFdd`n3Wm댿=onYk,e7Ȧ]sd[饹I!A;?wgJXr@)Y R
cg:~f&` $
&J&owhCI@BR+)0E:te z_[TϮ\gKG߷dt
HQ upx78fR0ªl|F%h2)4_i|ТoyTyFm ;v ~:5?YQGg6oX[F=*ʕӵE?3jچ2.I|NIQFĵtX1
AdA7
fgPUbEx?+{}79*a_r: ڤy$eIz\AV/WUnN?&g®
èc%PG|vWCNԺx/"< 8[EoN,ֽQJȥ2 ie%PQb q Ql:tK}|;땽KBQMC[i̮Q$ia˚2~":D'|Sw6}ƎP h$J1%%H i 0XTfFE4
2ȊS)"!F)! l
"m6SR̙J
6 BaJR%i"L`(Fl4d# Ɛ&)%40E $K 3D, @I!EFR)Q ,Efc I@ "Ҋ4dl2j0di,h00H"(*l iC )E$(d E,kD4-LS#LE`F !,h"Ăa5a$ j2@(d4Re(,@ēhLaȋIM4QDƄHP#&D(Hي&)#!F ʘId3oþiPK5 rLdfTZ$Š(2)Lfid֒؊
1 M a&ƥ*(KIR 3i1S)HcIȖ,2`bb$2)M"RB%3)d1fPYI QFHEJlT'|~SLlٲ#fY%FhAb#H+ ,D 2$$QMd$`fK,Ɋ)!"(KFD$ъM#bU5fHm$"ȓ&4%0$TВM
Ħ$6$+2X`IIP$"c3dI%jJBI2`I$фIA1@CE(h"S&H6dRm)102(H͌#bBi)Q"%&iB25`,B0M lQAK9Հ"$(s!KLheR':DX2b@Q6B@&$!``L(DS*(@TXZf4Y,QP$hфf2E-4F*6)jZ(1bIƍ`؊U-kFlTVɋhXcj@`E& 4*XRRwe53L&LFl4CHDhYP ٛb|ܼ/6$#&e#R,!T$"4\4͑BMi#`"
TT ۜf;f DhGWiFFLιrvUsBWa|Pt/ףX,8-;&myԇ~_ii G{,`msc,en~ڰOhK(}=Տ'ɣUUaFأՀhR(㽪hu?h,uLՖ`Y ip_օFksvI}JJJ)zXߟT}.V몐V+ r~c~^SKsyx6 2륫D;V
;*JagB`yM-pb^&($ صAǣvr x @% u_$w}3Yhͪ]|c z%"LՈN94f႑s)W{cPhX0t䫼056P5 z`c}Bt3 =OJ)h衱MbI%K
p Ty13ڴ! =} ?#2(ħ:qF'^ 3Dl6^'ir1]ÁQF^I${R)>t=
ASZxL Jټޝ,ݼd@3^MU._o
20C(l2+\ :w? ȋdJIBt^("Z(# gY]!Z͓دv9)x# pHs2=
xmt4F?ힸXi\5)47qV m)^umy#?[>1"_A3]@/etկ_I *r4T|`+k-]Qs-EAH%^P!=IL
9фQ!N̲d-\v$1fIIH6 \lI#'Go IY/W"%MTM 6|#QEjVC |J=/o=X㦘2"Y/Lb,v+DŽFQFm6 B2+v
جK*4h()J
p;d]NGOæNS( _9&.KKs2@\x?@^FLeTA+<~wO0ze" LfFb
tJjy\ׂFgʍA4#1d,:'uU Aq8]b@ V UH `}˧brCݽ˲fga$?q߳mң_69ա :?6>>0 DoFXwcRQݝ~[}_m~G}OʧTJ(iTTX'A(*
{łUP5*C nU4Mrl[q$XZf% Ej:@!hcH%qs)Q4`F&3 hȐr05,i
N3LSfv%šZi%X~6'KD1TQ#II @=ћn#,c!I8O _M5&)Pe%S .r?žҼ[u/77$4seW نD#LɔDr罈XMׅS<}6&kGڧy4p4 cRUR(t7/[o2o SC^L()S4rIaw2E':&Q"
/'W u+bcC$FB,^^"U]CvIH%
n\ߏ_܊iu|mچtr(iMLAhn",K44 f'cdM6DvtJb ?) :G[XUoAw]hgoML45c|E]j>}7.}sO/ PMQfovmƘF#)FY\APNS`BZJ{@S"5F)8I@HE$HUZWE juVm$l1rAc(L rL(uu\ɕX;x"|<5slHY3Dbߪ}>xmѶWr6E-dFTnHrDYAB2;Fh7TfkZA;iTV$4
K ŊY;rjuާfAyaW1ZP /()|{rq{bME'mڰmV j
uYn87^j!JPYzLcE8q
G5UJSa[^Az eŠSU Qhm
f-(ܽsp}W4%gni&tIb<W_oꌷ0p1m?-x 4}R{8I;J*V
ynQŤS-)㥴/L BfE
k2@TL2833)md^I%CQ'e<^z}p0J5HE=/i{r&F 4@-BmJ7Ţnwv7" 8b Uued? +4eEI ٩K ~t6,)5~ 3qwsFg^nlx4v2qb$h`fdzk}Nj$MdvrUAouU#l%nBpEy0T Jh J+I܇;@bD ʰ{Og>Ī",UU}Q4jSQ5 oxdm=T*bW*-('l6Q`>2_^cn -S"CƆY#Ƥ- &7=n~LSλ0I/#Y<: rL!RCx[kcr [R$
y0vo+^ Hu"~me
=U3k}͏9F1TVg"Z#k V{]#ڙpSzSg }_͖C ݭw ;VQUm:]So~fiD챯QB?ѫX0emX d}qRDOm n9Wl͠?nF Xo+f$@1U
KqkuIɃF`MϣUx,s!b{= O/x{%gqw9xZxP J́z[+OG3ieV01`U2 Rě ٵ2AQ_7;}|U+Fsz
I !Mŕ3L? 1Д><0I>Ͼ@>k`l=hH43
s'Em Čܲ"aPxcۗE|.jFxS$7tP4N= :Y3(4'Uah_ 'PJޖ*5K[}`J fM2Xk1ˈ_)h l.O e|+bokP(QF5m(lx9QrpFK^Z"*M[(k?^
ΫEwDD +0 UOqrQ5(flgZj±U21XDS}F&xECHjֈ=]'FeP1ϹJV./%EQk vus m xp#(G̽oM&Izd,mcSY%@Y iV16qV7Ę@[Rć,8p0U
TPdo,P3E0$FJ`~Dk4y"j%? cE1T hk 9ԑ.j%%"&oirвR5[ U ubR֫ {Hx22'Ls :-;]k[+5d kyMƔ
nax\oW@פwQ\Tm5 }v;.׃Z+Yw/ף%OH s]@*!Ү$
REy/]%Ҡ߈c9Ģdu9v _.hSlf3KibK9>x4DfWW i(}lowk<[}be*,F4ԨjԖtaYL=Y5E_R:.QV?h 9vŁ
3(ר)3u|=+ݲg2vLE5q_ʸy+> W5uv\fC Ӻ{~+h b0fdf Df6;<}C>
TUTREF1!S$j$Us?8܌$du=Ou^?Mgח3(w7{>ԹĀ$I}PO`PH"AE>ڄ7PwxT9E,QFH0Iؓ dښ=gUZF6` 4EɋUv%( !ѫMxkU,%Pe*rwڻƨ`T,Y70kw9-><Cnl`b7ͱ̹=!ظgts]ڒJLΛY -v:Ȑ* c/'
~
ē R0*A)4 m]5a0kVuUI{xd(:g\F2 R)ؕkm>VJCQ&%1A٩vGȡP3
HK*8zğ#
#MFFDd X1dDe@ w^5]~[ptlؘ^/Ϝ }zE导BQ(%E" Fib_E^ 1b(%J#
e@ ~ 4P $8
6C^7]y_,b~ezP6*sEt,Ժiu@TGm~g eTPM(6~Ufz=
0I`T*v
P {rk["%#%0?[x%7iLQxZ͗(dRhӓk傢lb-"1ҙ,fjJ%|{U8ﰰ"l[l^nzn[zi鯄a S*6&TBFJ#Rלffb5hzza, 2$FP-%+-$E2-$A,V1i3$(Qj,`
&ō8l2" {
?}Z3sLB-g:v"҅3LFsqg?AF39UB+X@XY4Q#vE
2ѬD#aL۴1Bi-)
fQ-2RT&ỴbqCIŊRC&MBrSva
cػXDfncm"UΥ.WL]1cˠH1Ds|{yy!!۷.)`Q ڕQZ}֢4TBCj`Xu@JYZJ\]\ݒLi$.[IshژD(aUλzryRFM?dH&Y}ׇnW]V"㼲LwQ {ޘ-T W`1#~3(h\U*.wC-衎 !{,EbKZURD:Ql0̭%EJLn%˫f;Xs7W1rENڤ:UE3.="(X943t'uy]yig|\91ƣkVjIR#+U'etv8~oчl8ei%[:-j|X`ۡAMhf eޖk$ 0)2LVD riZX!jEP HhM"eMm2!̢E|q~jժ`C-O Bڷ`{[< CfZ &NۉƕR.Ӹ^}>ވDzaUlIxͦS8Kzn C[um8/ˇMW_SfM9Js1^-dʈd~#>H@l $ xtؖ 2!OwƢȴܦ\$h8S4~49_P7+v(* {uM}
cQm+)qo >ad.MLƕV_oW;=ua~<ĝq_j+fB)l;IZ&ߘŚ2 38Nmlh \,(SNfNUtXXz@R S*$Mj5 գ6½W$eEط Z? gfR"$UEEb ˾~WW>矟go2hz jhQH" (u;ON|ۜ UAAA,( l:דj3rbgbDT~ǩ _Wlf^XM_ЇyUz)Xnq*LNfM0 d@piM_tw]? D=j&nD-(FB ?YE r As_wͿ~
j[ҐQ`a䦉%EZTI_*VGs :2~/ˑxߢVc䚘DiW߆d0;zVC] dk1TwwoOo*?hߣ_L폃w=Wz^~ |(㭷
k$Pޢ?2b$`*eBAT23).F_%'1}I&Z\(ŊH5>2(QbJv} Y b=q b\a1xBA$no}ɨ]Q`,P` B>咐V3٠S~R d|3D,dنO▋}媎#< jfe9/ps)8Z%jh!f y5A."ۘAڼ8k,z܄x8pAbޛnvmkt8A}D(Ah9ga`[jHv\^O,CHd:/I~Y*8LaJyޓ=3[b%op4>|O>'\= (H巇ixۻ3u TΡ94(E}Ce! ڕX,FEQc {_y??s};PbF@wjB/ DhL䛷-\i8Dcjɗ>իե eL%"[H#2%ȯf0v)X6"l3 3_{ ; 8ܫtP2.(馢vH9&De?B'KnJ۠zWw8%p_u;:~T2cHpM 5맮*B$X^BfDjDkFCv9^~C
Y 5s+}D%IĞ$̓4T¥,ɡ2dM*(@CCX!hiPDS3S+
֓JLi 2A3f|~>GW73?Kir~ ﾒv>]EkܦHc4=*̕ jVK¥+kn®/Uq|Z9eR+ *Xl`,Nhjrvq@?O& zABi{ 9g_?[cp9vQѤ7~ҌA k0CU*O?`],tjr(J `B1Fsw ;;}W|+9𬋡
MJ4rP,f K)2h'dZt^p3ܲ~0CsEY# $|J>w^Iu{ta3\} kPng1I so
v92+jd:e{/;X/!KG[*6Fj=Ly5FVmޢB0 ?aX5)Qa79Qߔ6M|%\Yq+)Z1" @
x b?G~ř_NFf];ǵRU={5' ON;DQ sK}0ÚL89o/($ր\# Y$K{44X @EHom'o
ՓEȪ7=iPNV54e+6o9
]/P|$oPȐT>YgH zpMk%!nƔPQQfH:}X6&n:N}X@.Ai0vŰ`' x[xVIR+dI[ .}N~:M$h.Swhp =$̑1qΕ q
| 'sѩ!H/7mbІmjifâ1Zzf&@\;G7.&5E%q$UD1>*1f#;[+:p@?^b]qHڛ/uCqg0kDlVp+ʽvvסF2<8.%?ކfs
(mp;[(O&- 4hXYkkę҅$A9I2F
26K-i2 )vѠmǃQf fL0ffEt{2"?IL1/ К# ̉Qs;6"d2o8,?/#}C }z'j
7Fffftca$t%0 /Oq5F {?/: D89=D hw
]R*,}ם I t 8ҍ ](AYH%&X (aꨬ)wO{<1,B З
kjBAdO $!1Fa\I5PNyTg0"A,<"Ǒ2=yƶJu-_F!٧ H5yrJ@d[r M
ڬvfm2: ):!<F ԾA{<<]F g@6~%rfN]}1 nu4bj[hKjKf#$P6L~l M;84ɩ(LPR)0÷bC! .BZ HΊS
RL HiaelJFɳ+ǐQE tky|]lb,
gM,˼Ƙ_k7a.9aF*s} MFJƈnj[%F4-)&̱&(EQ<_G|Lhj2?eXo;]5/E\ؐ؋RA80#MBh| 3 a@ERX*CJ
?:O5k =$ڈjյ*G*__Oeu JAw? xgQv^ˍN qdDm7;^3ER0
DdYdO;pZ:ʻ :I v۴YK
\ uieMcI84Յ[P= f :
ƚڤ7,ط/ޗ'xT]>hF _0IjXjj[K3\r:y|mQ i+UӍg_g _ ʯ|Ӳ-|~SAHm?WϫRO]ca*]Z?L]^O}0z En~^ϻo|=vfhquh4>4g LXk^ex!Ti "oB1`ߨLRwjBY@lQIa >- j
j7 jr$I+FBb7ې~ܿ"UpB@Cn(
V(ڂ/%nNJUnmX&h%2(,Do(,fU'F(RS{DqD%]f ٕhӮb
A[ j,TFƱb
bGܔqrb
*0ĢXA $D6JE f=s_ϙ%[ W|+ ,"`$QT
JB>no/q
mTJ2UI$o|FeyXm t2XGec%I< cRmF+Hk8F2nzH]
Pa"4[<-,ki?E2Ԣ
< m!P8+]usn $ C
Q]'XZݯG=\xXƜr|~xt:|Z33'_QäԪ Ew(3OhH( E`(\^6MkR{^"3
Mȓ4J `B"<%qpU<
S0pTl=tP3 IX$.ܡ:Ҫ^3?Kߑ͢h
IH(Ib%gbN%$=
"S*k79ᝇVoda :vhup[,bƎ@7wGw`R
Qy!b֤ AePPz@EC< mv+h) LdM̈́#,Tp i] Y>CCIDQ8B! tE5^6
4pyH&7C$K #\|_"ԭb7CnG{4i(-!RsۍSHjE֙iBA)@á0) /?Cz!O10nP:2dβ')F
=|۱yap"! 27_}{hX@H wDn 0 3Cw~}Evp.]*UnK 6btyǖZB!y|p~K4S̪Y
OAJɀ*]UREIIB@'zȶĔ $ >q }eS fpܥ|c)Ne(&MD%F PGO?6ō_~FD[ /Z8X;a%H-`,ŷ+kSB{ g\$$!"Xޯ/7d?z ,IAt7zgSWzI3E1]CU5il'Y:C-Y{ڥ v(8"YϷI B# Smߕi\Wcܝ-~cH iY2 vVtʨgF_⮃ WN#l17E! ؏̑e1$Ƀ.5. VIg\ի<*d&
C b4+:+l~q*GsxyPFCtkMxc J$a'KdR29&P_Q }.}Tat
T!sQOkXNF/ªd ?mɤ;?&]FFF L K\_gla m$QmbSHU>^2hs
ǎp
`9+Q"cuK)ul90&{e| ,X) QbȲTZ1-EEF2m&Ѷ%,jlUcZ"
0Zlk&Fbh_}^ߋUݸPUQk%mQ*a$PDC} -DFk5cBEAQbh"[} lHwZk^$emIWi9گ,jsu#e˶ɡȤ=a$etN:ʤL I&i|@Pj /8u b-L4y~]
@0&Ld;͜m}
ՀIOt&ܟ MI6 nfgJdl,tq~aUZ0c }. \i+$wA 3< /"j8>>Olj56E5QckW^weӚa%KX (O(tsFJ}۹QI(a& ٘0
$_Y} ` I DU[Q<ߢgݯtNPYzwS! # dg =@
9U25?VqeٙkzgAj7{nDf@̂ H ʻ s5E}Tt<
7=dZ M] 1G%tL4M2NP
2=|u>OF9얉A
BVRP 0P /G6f}E/*KC0Ebyݾ696{,?jmu&,x,r`ɋ, Y8t&e =u❧M@ Qt8RHq@ (ADP La1ރZt}SRېAD>|
+{H$Hg!HRHT'{'k,$ZIzJ C:X﮴{o)ymvƪ$6g9>ê &)DF]jkFywZa";5ؐQ <3E5s76~>E˅W*,pOeœ*RT103,jɽ{1W!E6ѾOf3e8O% a P<3 /Gqopa'2rrg
aT_j*0O "fxqn1r1PCtQsרɉF 4 \\Y le :@ >~pH9 <a,P/?(`=6fR17$vO
b0)M#2 UAdA1UZZ#"i&?f
4,ߑ ɕ(D+
d($!pǕ`mI>s +}\ HF)i,(Ƞ ȉ {]rR!7U\kyMU}qa#n Y l r$ |YҞrR- ej;:긵lfJ쪈{ T!F)Q';]5x&[Ϋ5$1XղU_1Z,Ιb03f{
%(se7I悒,ͮXVnĊ;k3\ŶcܗNj
BLAC?PF z/܂ 3@} |3PR !O|si˅Ȩ$!*Z)
`"/TZ^io`svv21p+&2w!2sWB~XCFM WP%7guY2-kE %\Cot `#K< yb|{\PMM1f xu/sp*{}] F???q P7>CEXXu+X-lӦmZrW<
V
ulŮy}r8ZHM aC z.~H_ss-+$IJS((mȜO~ܬz$c)zwRG}14Ŧ#}ѐ=&4`*;_nvnF
if{fɑ? p(nP2NZ1GLc >u̍ʟW7%ȃ_HyVCU#nR) (mB$, @vBS p@18;)6uu&ޣ\S^^K"nQ"ު
Ӧ~$]5rJly l*<
3*R
]3a I>/Ϫ_!܌ db{p]1[z<ҽQ0UBUA~>l|c
A @>.a?Tia sf9!T~'Ej!EìSQ{hMOQX:i c=ct& |~Q(\I T8)y5ԶyjP2XϟqHAW ;D<߿ kF>A`1Oų%\WGƦqJU\26Ҏ{`ڭ|b<~ӕnP2 V!:ռc s:)YmEpSGr:Q=q(S7 :|sO1ٝ"ŋ!
uR!h]Yڪ%ᑤop nvY{mw
AdvGRm`
7K
pdQ ECI`8>)6hLUfiUm(ZLcI(HﳈޙAc2\|1vXQΎR4MwZ= 31_vh_Pd0 PV y VD&dK2NyݘpFtڍ6CѭyuD45g
g QsH06M+ݺ-L@<{tŔP| =`VքzX|9[l''{e3穿 MLfVi ih̕r P
"
oIQ!=m'=cQVJ[aῳQB w] s$84n=qgHV$tR"X({aahԓ(|@e }nCr:xP"ݽcrP[ 2Q w7ϼ4>{-a-0"d (V;nƴկg|
2,y}`Η v}xsl/eu>rBE\ 3-U
@
x[I6#"qLdɫwW/-|^CD?UtuOo^ĈM
. S^ /DGN}_z|~_'IzPBs1lnw ~:Zn A >v,aJJlQKǿٕU 6OE]8i>i[O pY$`5wQe(J
"F
z]t@GO>On8R% .,!DD3 Nsx5Ȃ|h
g1pgb
C&88K o)D$A@P@
@pMd2G3l@;Kܭb!h
t웤! 3d\H; ïl@[n//F3&>eT4
14 $g"jxge"M)Pm""&h7:Q=wKge0Rk{`="`T4 kT*E |
1x(Ѣرy#n Y
Z͖ ـ%־-~9Z 4]a /ZLɋO_ *Ldn2&QcYS>ڰkh$i^9~ԫWUd8qoDdӷ̲%0½9 B gɡM:>x15,^0@1D;W#uQ' ; idw e3s^I@>ݳ&vLR0KARqe.?@O R
38mj w`
n7ΞzV"B-KŮ n@3 _W !>L æ$t P̍ ZH sFSft0fɑjL6C?kҬр8yMD3V+#*,ƍT@;u{ 8>mhd' CƢ߹}Ϩw7U76l$lmȽ
:zϥΈܚ[H 1߹h]n"cşVhB0pS7q|ef">x>íDZa
ʻov,U,X $.;os.5SToUo]Joj40kt x b3 ]@ ^`Eh2V IbO#>"e C8u깤g?o- =7v9Ur`
E!o }1<" ۾ZcүfdY3nUe@$0j $jFe\Q xûTD#ʸ1GfTXBzj6&NNqAT k֑>Ɗݰ[;GL
7^7v3uG_ +8h&9+d{]NL5'㹅\ # ov,L}Jz3ӧCft
^' ɖ.I ,vĪ;iDc?d iڸeտn\d:a_ʤ[;ɣ::A5
U
ëBlZf?$ H>7/0ыWXvWb!X ^ůPe#j;y1 8\WGйs3&~X)Q 1ka&<]{ 5z={X@TGex( ! XB?Zu$f߂\tNDh,LEDr)T`e Kpx^iqpiiq$HHl;p ;ÿE(|qbK34岼uV j3~yj6^%W j䚐n6M=4g&l d9 [
iaqp{-(>vgRO'3nT[_v
\]f|AIVWN0>0I`j
3m: gAƓ&] )/'pq`Pq+Z Uz Nj {H ۼ
f WaĊ'u M R@͂BG- Lbml"cT 3qqi. {ؾz#eIڹ&VD1**HPIb2aZ˙y]rp >ˉOEˡT(c6db4_[`݆a{#N u Fu]d#$XZEͲ;EʼQhڊ
10afd{U^u tabHċ%wՀkK_sFafLwY峄e^9Ÿ7E\lg @B EUpN *kv)W"8&ldkkT-gf֣v&X9Ekʀ8{]yZ*~_~xёbx@&^<^$JFU`uݴ})J\twZ-MKUUE6l,Xj=Ӿ[h[o-,JUK_W7o
uWWEDfcv - J$Q1*%$k̘y) C
(]1-E y1: @i zsáXPp?d|W７:deQ (S
Ug x
\ˑݭ,36 |6o_\u?R5/[|p} W4AEͣʬ ϿB)8D Dʢ .h
j9V][;{؈Hq n>"bUfvg}ަgB3I=۸Ӂ3DQ2B2X*vdrVj
KhEC2mq;m*a.jQΡDx
ͪP!{Ϛ[tolgQ4q.ДZT6WxX3iRNn.}|xp*ޟ? &/WT:>m'vcm gSԹWT ÝU2 }at=BmM3pvXV%yYvů1dkPs_ +JǹT4B$)6ٞ g.* uҐ>o} YrQ0q|}=ճ9<\` 9dd gqWh:&Wm2l ?hnHm .I/2a>@V;˃#nU%^vzSDqٔQ0?/vQ4`ɱ9dծ9n`o'!p'߲ fK驑I8\& sr@!Hrr^[un @t d v*X8;~%T
*6 J(HS
ZRnS'D
4alI%+vtjEy{¢ h>/:kwcݞսzS?]lzd3C>{s! 5 L7{_
QJLV5]Hϳ!^ 5՟ӌIyBc伻QW+n9Co,އ$G~yZIKè]r5u*Bh Fy/f:D.
]s$uƒ0+>XhƯ;=/%QYb+P^=O|vAyFTbxH
?BP*a:5sqf *;0ωxS3w՝qLȜ ] d9
68T@Ivޝ
{98Pa9̉ ѡyEISۼyfɒ~U^OJbxGm¸dZܬڮL4y
l]խbB88.&IݰJ3>0
=[gu+WbgWԟ0!bȥ1Ho(uv<$8JE ` 3c"!G\d"5D pM.5}E-[>5ZR3 îLUM""%Jƚ "ա#_Q]I^}kp%CDp}
_X2c
BȅonI `'Rғ'b$gM>"r.@2MV80T({>f&㈾c2Epx8[5rd( .%XvC5\*5KhV}DtpqGO]ۄʽEf0͟QC ^|ُMYڍl6h8꿏ҫNZCsfI*STΨH4Ǣ^qs7l'q4 UI
5!# ?Xe槨 )QC |ɔk`aZc/\i$pRGsOH{gx HP{ (($nGRv%
@X T
J][D ֵm7Q$\cPY]1+>.ƿ1L n- 5@btU f U Q 0DyuD a hi*2$p@\fqX&54\\T
U F"$HD$>lr]tx$P! +1aT,0a;<- oZH*8 (B Ȁ c;3 /7c F;2&%*,`&ҥCHCQA,r-@=~Ԉ PD-5 Uf2d40tdEްV@iL6YDYJXWwYf%)J ElV27ߵ{. tZ,pDK<".s"e 9%wv1[\36Sii Ȱ ,dXJ>
p6ǹj$
Yi&s3Ndb}]yBp~ (nքg
kO ([6>` SoBf|@b7 ~ٛ)hi w!+PA=ۚlxWWA[#XҔ= ˫?B VNf^[1og;80LD-P!(> i/'c6[cm1l; 3, f 3n UK5DK#BV6H߉&)8m Y<`PsWV!s#$@I2 /b7ם3Ժ;h4aynA
M# :IRHf6pV:?pY"p̚=چf
zWO?RQ
ݫv'=;B Ђ~2$
)cT֬OM2dM'^ Jrx_=6U8W_w=>3ET#«sicJu.I)g) 2]A`?[.evD>s~vC~?&(,SEP_;hg-0E@ y0"|25
rsvΎyES\XSU9_V [iKChiYk21]wO H' *~;3ЖH^ 0_ BĢK(5Eu̦eHgfah4ת3-wnǫ,m:V|(s
1aBkz s # ? Αl 4YJ qjT*!)= '[!dIT@VVdfo\? qNwܓg{<Ș<+!E4&=w{CwN#vr2Bxy{ L=RrETsЀf @ E*6 V[Ye
2 W? ` +4jX|X* 3P띠hn< m n|CTt.>
ph(Bm! ȓ~_3SLd{wyM->dvOc|e芨f~QR_O_>3ӽkZ]4PʕEXZn`r% .X:(Q0 6l/ N!Np 5O.*T]a(a8bTճ, 0V1'Ph^T -#71t((r\QW{ږTVCɥ :ZuCæK<ϱ\#;^Y`?7TX, u01UϵQW! !N8.^x62t^ѡ}PMB '8Pz~UsLC6ܻ=埳 蹦j6-X Uf~4w{S$>Z4m|O.Z9l DA&֊W':f s \+%*t OWbezGتM0J6Q !PژE;6Ɂ,峇30ew>ֈ@Wq `̠h?L[Tzig?ˣw+Ph'0@7b_q?O9c H~x % ol$ H]W'Jj+"'3TW/"%gXk1 f/{ӿ1n@8 ~d@"ACXLP|@0i%e?ǣ |o=PJ#B{o)7Ο 7 1K3e S
C~ˡ BiQĶ
0YE}-_DOo=xķX|l;8,Ftcru+zS)΄Q6"&*eP[MZOdbʪ"OHd9YxQ6%Y`̌M\,r%a2/
8' z{}5=BȪ~ (*=A *@/̚*Sm.AkPAF6-R"8]HD0KƒP[,|6n{>B
}` % wJ ¢@ٷuLE$ZJZIK
t |g>ںA`U© h!;+ ޥZFoo A9.:☏KKpP qͨTDLP* )Oi`oQTsS-FW*#GAOE-%-Gc] R
^+c(NYrA}h(BX{|\9ݍxV@5g?C6^h;6 0E/FGEK F( aH_o8ocww0:s+\k$Y$"{
Qh`'lxw! D$gP]&}uq
@
xŁ,\X(Gʍ(lٙ9fZ堭cXr\4)xX[qGR6Y$fċu}I .,X߽+6hPG V*&, aTE]$e&0Fm%
()(+eqp5i" 1 !"c64 2; }Be \bHSlq!|>I@M/r=50h{Ny~FPʻґ m)3M.=f"#: 4\%I7E"@0`9pFYG ^堳ӳ9!{sTqk&ͧ
Yws^ br}06-]ƵB:]w`0 a<|;ܚ3gxG´q)r ΅ zp 39.2j Jv/EҲHqok0
M.(rۓ'
܃bi`1N h*l`%;x:R[W
ɯ cʀf
n &fQXN-&B=~]Fӈ_ՌrD}-%dhur!W&V+k$0D# 1C
A[Kb)zqo9"K溲RAҲ}ĩ9qKk&fH{I2R:
Haw#<1qݡW2,'ly7/%{iۆ ,]mں8|oŨwy2J N^A x4g$^#$ +ˑ%ׇ͛"R2
]sCD먨k(
tGFRA
<o3Xpf,X K@U FnLK+\n͜@GqIzgւ+
)Y y+p@
!Cf @Ù@8SD.0Zҍ̤F*Y (@/9C2<<<@9=E" J G9gN2l DCja5ƐH0IT* $`$ޱZ%dPak<,/G 'P/ &K@krvW $LcWxiɶ\ :+tFk z a T@9"JYAľѮ@7
a-q#vh %:nd f0a!.yUcm-eO:ŝvFGIoFCa/S~uxlr}R*x9`1MdOR˭Y+u-CY;T
̫S!m\mt+`I7@ vFgb~NN!O)6̲[B9|*%˳WKsMR]n֍{*lטʠDt`0`\,/;m/J.}[7뇍#
$jQ| G aRO*!;*kQ'6Cx+ nT: T892v=ĴH1y#U8/n(ƣ 9j}P dLo
xт1td` B !u?&gAb:J !_k JK-(W TmU AZxHI !<&]3|
f!^T
76&V_wJP^ Y;Md1Pxs5) 3NNH37F)Wϳ0<= Diu0
)W 8@d0RlGC0`J` +jq?P+ݡfB go~,& >26< y]2@ā >R>ܞȪ!pXz-CdGӺ@eG;QO8" o@ܺ7FbLZ7
#e >N >zeXܣLϠ _r϶Q' {oq@7 _Xt>} (vz'sc H9{MW{c|A5@P A ^>vh 'ٵw Wٟ@|@ ]۷ hF^ nΗ椃@ݚ} H "OW AguuD m+ (K!-4Ymm|F)>ƀrCO -lh
4 h*@ : UXvi4}:em7n+NʝGNQ
mB} y|>F.ئ7n{c8٦-#8ڧօ:Ԛz {msڃVJjhzr
r5ͭնY
UTQ#l$j3֭i{u«mRz/{OvZw2"d}5լj' ^y{
7d}}w"Wץ
^71Uϻwۯo} ﯾwemϊ
=]G>s3ۯ1XkGs5Kz۫7wݧ۽Nu}}:f _vu{y^}xort}8 ]%y
|=҇[ӃWg&w9w.^N˗p6sJmCGy3}} fN6˓uu ]w u;-Q 'vYp ;跣2 +En*]UnVKQZ&Dn\ss>e_{W5hڴ\wsl듪s_` Ǧ ^` q`6ӀL46 S6ڙ۫ 3 }Y|lݱ fJ= &-9Zvrz뇠
]W=x{x{ |gdp}xt o` @ C^֢GY=zTwZOv
2rGw{wvɍviQwb>fuvs#J;r OCQÜ ;w/ f_ ={]ϯwH{\&st {ptϰ ϻM>4 hS ;oxN M
00M ` L`4l4B d 0 F &L hhh M14` ѓAhi1$ #% d ##@ M4h hM0 &iLo@@i0?R! 2 4&F
M&&SMBzFL4L56OƉbLbi{TCA5I$LF' d&4ɦɐML3@ LЌѐMO&bjl4h~mމiQꞇS2@ jb@
m4&Si1122j= I#Q
D2Sj
~CAOM OM2~Qi&zSBrƽa_(X]ѻK'$-n0yVA0TFà7J4>]n } fn%@ ԧF
2boU'@aN= t>@ͤ T a/4|i6Vx 4ԬDhT 7x2Cσc $AGɡ7nuʚ(ZR!D ZpOL P ÷|@Q RXE`(7J
+4 0Z%)
b+LӐ$?@!>Dd"ƺ;XrC!T3w*4S4n Ar!9>T6K'&1-:Z'+>``Y
M*@ }v ܀)
d`TxDxd~qݭuJl'g " NMż|oN>]˼Woi}ܼ(;_N@*偑aяh 22`zb 㱳ӛ:8ujVn߽S͢ m3 gaAB) sI(Y3}uXtgBr~+:t%^(( <|%-:z1nWQQܽt -7ZfE*\cn햁RH~+j&v?HُHKٻq>C!(G+Ue]v;X@O{8k[aqfR 6I!CG?Nw <Ɉs>DB"1!Bl+^yli*CBkQDf(P痢kςkUW{Ef #Zī c ^hvN ywG% u(ALp@0/&]~Cgtf'M1N&#f u?! 脻l0` z͡H`"(Ez#F`xf :j"C#str_OPd9D9O/VyqZcH-Rzo9W[Sc ƺKM=[
|cxge X 0Ñcul*]@0s$L
v1* *1 (#I:`]"! =`Sv sg˞ & " &kX^ǴDoK\_<EJ_# Bbf
1 ٥ o4[
=HW҂` /37 T Ri
DD7ߛ ?qkWo?{gz P1 >֯cH !7!H 'e ^x#ɥ $R"da"!$0#Ƿ cC~U $8.' D *~h +
/@
W4ݒy_ zo WnAu\ #"~tێ:u棙X
?~jHj0T EəqD@mҷC.xKł ;kr"1`@$-Z\* 3Bj!Gp*z) Iz|£vv&1k"FCIؿk,hM7(>]~5LZDm -y6Ob0ڊċR5Œ4Hza{?F/Lf#lI?=yt(~C["oM}vhQWE ph Xh/8(ѹ%rvi+8*{ ]&ZIz2Rl+t4
L ) d!;x(nmWVSZ|Y
)
kHPYiV:W%5jrv] L̊Ⱦe+OƃR:zX_4~eFg[4:#$BwSX LL">۫ŭCbG
͋9i%-m`Wk[WtRST
L`cCsm2uv[
u '|īe&A폠 jPpgy>WW1ZKl;3Du Z55"^:eXgEQ_GC$Gz ͺ٤OlaT*t]_..x$n2E> n9ٜ,[&L3ȒOs z\~ہ i[;{/NTEc[mՓKjuu[A$Ka?9`XNW92~a}Vd"KFXFMk/ʪǗku1-X*zi]s*t4x-=T s{U%ep(a&)R։]%mMQIC3U-I;T {0~Y8N;dUZQfv=*^'q07?7g}B QURMr4,ZbYa w`ʁ(fD' h1|b e" ؼ;|ij- +EcN0[ lPiddXb0 ~5 ㏢HT>gdov ^1" 5-җל MY/G"t+B%z}
nvML" 6 h(%3
)K;uGiGx HŒ2+ O,mp9 'R
EE~ SDSsoK+NNϯmn2A o3()JSG PJJPǺ=aYsNOcrSX DUKjէUq6fsrzFT͎+ΪS9bu+D 2 lFļwP5>&X3&Qv(>% !Bh8ӕߡ؉;2c\ <^U]*KvdBlV+CgroUkfWKvӭ?"K>1j.~]+$0 H,' (VH,0Qcv/S} GA_J3!3}$}).y:GDJ#gvov{X*Y{jR Ka>&I_>.9 'J@g-B}t,4c0ش]eC^ӯŅ2~4篓HtRJ *Xyg$NK
.Xzz-Fu EBS>UV^;Y̏#]ل#BDw#Ӧ3~, 3G բ캾NF>eǖԠ 4%b"שP @!3ACx{s.:玻倊[P/;ܿ5'xqWef /"jLe nWgG
;
: Ud |+"DؕnTPϨJ0^EFGStWUqۋ<#Eު kgq*)I|
: mS F:8(@d5liz-֏Iq'h}'+߭O2>#' H®7' IIdTܬ/QQZEܠ IV=
yLFҐ!z)&U:w^ s2-I5wDN ^&D"M%Zc!=9V_R #qz0KlƺOn@ ΏgG8r ɻT\:5{ccS9 ùmH|zFJe xз·|ʭGϣQcpy5vTnq{8 գl.pI"3`B[I 땗d xQR`i8tJQ+M~!~Ȇ͆fl^Cq *G0!/i>ij5Qih!o)f+C)w@
,rvSZ
P 2 %J), dx eBiMDn" D6TR8zW3C4@ ҔA* Ư;,#O Fi._sՁ{hv!?OF!eŞ7"38zј@! 7MWdm589
*;]9L=[V JNN}mv _͓7Q WW z?uigջ @oAA&e
+,hmv-` )YLTW0pVObw{|f|'mB{s˜nr}VYGK2 +u]N٬ 0KxA..4
D.Dp 2l {]ι Q*YhyGzd|qL$2r_f
6o$zZ-_eRHy]c
C Y
ev;./~kRrs]Y*/j+(O,?wz[/@%Q6_~h*k%g&=MKiWcg{l3a f|2uz/S JZw
firJ xxL*)Y0#d8Sއ
fd2rK<'gJFI omWŒڒ=ȹqhTɋ_g}$
GԪRng]f3VvVun3/PߍC ѿJdwMB..;z 3@ T /2~ѵww媡{?!E@((r8<Ce1@9 v_W~)gv9vdTOr;4vxǩ\lNۄЪ>katأ_짾;'ãjUҦX!]wĘʟ~{I
ED\E>ow emodú_s)S.5H
黵6+x\DDQ$
T*6@D-PY K6LԿDP^hiوw)P GxLR @ RЃJ R#lGNpi+xo1lJ*̎ / F㶶Q11$7i-O6|w iX3 :z1=BՖϲ9iq[32`BNmvm,érx ]j cء iHx HZ͉-43HT0:_'/m(t.epˑM_^fmMנ+ʨW[ɝ/Z:B9?JT`|yg5}ϣY_gm>@(I[rD@m| MsYZ1 o
n3o {YtK_xmtL3=5 r[̈:Vk./ rpJƾ
%82$36{%bޠilz1 ( sb9·ЃZu sr6;1L Hc<_j3>Zi T\gES>$X}e}/j0p(-ރ59xJI%T)PAx{vN їύYOj#ti7{wܽG
0h OEưOXqwi[qItf{W᩻z3)ᴯxzz4狛 GB/zFR/3~)x؉3{iUTr~z+@2Vh5/<2xJ.< e|?ޝnrxX܍2VƿSlC3^Cu<>}RP&t/mI˧X.Lع aY\;~vrvezlRj`o0M9 8Ҙ+-%&Ss ^;،Hő
P>z e!b\u7 RNUCFC#!bxli-qk+mrBzRn _ i#x[+F6RA5yYX @! _kc6`]{T9xXw Yjm;<@2:sni # 7[n2*2o52PϨͅIAO1Y
-[L"M% δi+ ; geo52 &qHlCx㯐kr8\[2uibQ{?Ͳ}#⌍/:|?pnh e7"P7ώJ o"w%Wj0yI^r&"S l+{#U&d店Lv,OOH6aMf.nY
"NT̋Gg|.1qpgLj4'[d
I]6 v0(Թt j2bs5ܬ:]eeNl6eFd`;/) Dus͘|I=E:F٬Xe
DٽkJF._.UGgSZ:>7#qum$}Dgum1\]J0O2] e-w<mN& l@@
L, #\Q rsh
֬Rty~d+4)ơEI v9TԬݛ+5:Qstf# \ /kqKd $Tc *c#(q؋opyJ5k0nAhor94L4 UOE*Pm햷̛y7v=[Y9=ѯFL ͛V<@'.@ *On
"
SxbKz/W!_gؕ Sͧmn@ɯ]QyZ$3YgNݱU+bbC+z;Q1 c3?_T1!iӚ9Ds|-9 l $u\Jޔy5sٌ^O_p2 /s4 OAD;,_7џh۠-=$lFJ^%[* ,"V3$Ik%\TmzV룠tX j I ѷ&í l 0ekpkviۼ6;|w,^.}x3i=
= eR4Vw]_ X&ωm$&)ŌYGsX rc3.hنolw1)} we}a't6 E JTh &@@帱1;}75x]
tÌi]WN7²j6c_.ߟe&r
/ Q 렗eEeF/
>apBJ6B`L~r}N9 cql1 k{ysHCA$@a]ꡨcGS x~N)`[VJ搳vE=w}$f#vYCo-&qf2Z*?: &*Ђ5L5[= O*K1+8b]At?YOz|{Ȭݓ+yyj 0oM{Nb{ֻ'Xȏ} i%B"UdI/ ohbSt ]! R@gi5P1Fǀ IXދ ׀;WY(oon=Ӄ ZѽD>LGKG$lZ&w }֝zL=' B rôYbLQd-PɶnZ^MouʋlOxmb&hʄX 3yc2'^aE[04dN7+se,8.vK2w.vz[r}<ƒ۟;Wz ov˾N.N.[];9DR;:Ծ<0s`ç2s)̧2ʑ QmTI$I$#ͩF)#R-Fd[aXFvl lKǣr #+zǟM
NTVOu#zp}~.^oR#=[p]5w-*/嬊<۶-ݵ*k>+ =f#h0
>5q+-fv?Q_϶=TJ 23qL
LV ipМv?_΅ /љz94d vT !7z*''
21R!B!
rh2n.a7/ɮuf' 0e=vY .HXU1r"F>~"B HF.P`(Z;zӓ(@ ͌Ge3^_? O_i>f 1,@m( ǂ:=@ Qi| C@ȴ= ;:( b: c ¼O|L,8` ހ5Q-Ċ T ށSLFQ\~k0ĔAOX i?AH
fl}of2+T"C}r1/ݍO [7qV
3\7Apֹ@ X̒Yͯ5a 3>t :8sU<@ }ab0@@ ҈1R1>A-K1'@(jatdV 쐵CRu l);+z<7@@ !#ϭhv3*` 8
! ImˌBu?b{~rٽ_U}Nnқ
af,H @(DHIHHPfRM-PV›BaJR0UaeIC 4
P=_ҢE`y ir13zk<0P#t(Х
aaI U-ЗE\EKZaTؘZDYpTJNK` (zvk E$2 d
ADQVDD39MfaL2B\FB b5E R-XU!Zz*D @Q![t| Ž5R<=dbㆷGajpy~'FtƗ̷t]?+ǴwCWksh&msn1a7rx GAי7r~.C& 5+3};"6[ b.*7bZ^>L ;.E!x{ 9 \Sn~|NWppsIV~WKgkh^f ?^.0_w)A|[lTN[yD6Bst8vu4'e0.\7:q4gt~yE}0 9{w&n/sd3>47+yn7ο{E*UПJOvO?ypwda;v]~v2Ut)ː=ZR]
yPxWkos;Ut$ 0JyH^Ljz5X}W*JI*ߐԖ'2ŏo#MFէwӻ _
3~ JCI<>J
y"Rz>'>Y "1o}
eO2*a J>t6};i\Üg4EU F 1bSk ֥85kQ>;:ŀ/5v_~r;?Q?.DpJ9;4d8*+'+0 ? !<>ܽH?sFl>]7^ SAi^nRJGٓ9-hUsgp O0#BS _f2'5ɫ~ 'qCfh 2E tTLe( Q@@\ x n擙4otԠ̞ic;RwMCJi$x'"MD]:,Ih(!OA#I0O|9XjyJ3AY$8f ֜T+!6c O^P~I_M^]z:a+,34P@" #fV:BD E@
f|8W1syZH g,α!juy|#9U :Rޮ qʘ-Q+]N`Mw&6Nf'%o/h}_77,6f]F;=߰Α!6MUP+FB
d =#y4푐3\N!
$^&?55Ь~wo';<3N? _
,2,w5IZ9ezp|MR|{epKvKˏI/lvߞj9db^4;17-A s',VBB2'G"Oeɔ@H uQ< $Hd]"X&K#
']X70(4|}ˁ! 2ۓ dڣ aBM^jXfYV v{*?jn?id1SmqeS-UT$T~a,<i=V[%^p©BtC.ZR,9ӟrX{~5ʪT/Ka}ʹk=Ǐ~k%ZOxJҸ {ocd~IoV-Ƙx \>G~mnlchm$N% fQyZkFHbrr%tyq[5de;mp ,SÇ_3 . ٢[_˝O0ˀ3DQe'hMCR B~L|FY&Bt[ ( $XJ
!x)iI% 5&I,s
D*@5$AD:۳M
KBBI 2nAnHT2pŭs?:⟯7
0
ER1ʙD#u ][|n% ! )
d*Lwā[}h`>$jˏďN] s*z|}!Q Hʹ?^?z2}Ll1h,*,D{ } }eu"X]n)# I0+#M5S!b.41(pb Da ۠pBɖ.Rp/[3wXňpA LyYv\ d hnwY{̅ʘA?# nbaRJ=ӳAϛEmX A; Βpg/ǡ] K#<
dP6YPb3h6.,^qWǪy<zx܇C}=# :LT'p%nL`:C-ӼҥiFe&\nܲrI{ ->Kw
_9Ԭ)#l+N:A7=3n C+a;/4X4*.~ux:z-; $0A.[GYeW*lXom,xA4 lK7^uIU OW39]^JW
u
,l8smw{D5Ȋlj]}ji/ 쥿;עn fPv:/"yB@BtU^Py7D OJ @ Xgo G79A,<^#rLMB ʫ[FF)LWAv WO4:5^(>[]
_e>Ɍہp cv.#/#mZOD}ty;>cֽ'o)ȿK~Q{ N?vɶd df ty5ڹH_ zkv a2 9xB*` b!i5}Yp2,4Ð a ^ #y7o+a+`9}붺v3 4a39 :ヸwx
~/{*Xu "|z#ǣF?x}%vixv gޟ҂` 4
D %7-ua[䥶;-Y|V^}97pqo,S1
cV @-&A6ZQ#7C} {i OIVfaFW0a b>7[G"&ȀAA?|kM Ӳib?Ŝ/ S>1>sb
kUJ*i(ݘpq§N:챃_w3v&mخpJlfO劺Ԉh 0 fo~`\2+̼MMk/vf5t>,;1ʥIZ!K zUREWa4ĿɫsL3j?ܸT|惱ܣWF{S6,tmՊ Ps Fp&gUI^gP9X(.@KƁ@ ˥ %bJ U!uצ `a@,M H%u8 36l`5JD!%FCϺbh@^qCdlQJ .
H^*B "p"<=9)x>L !WVU dv Fkh@oGZR%3n xS Oj%rg7wH| B[ `a)/q+P
n.s0* 0'0=Gi!sߞ⁐B ً.K(-:e`+OLݩÒi7xvĎF\2O ^8p%k] y/~ 9% @IE\]/$ άacyej
PT5rt8fWlhL9q-=C3iM`\ԅ11@ю rN? d~8! P|;7ϒPecT&.rBE"0MD an@ k"@F/ M_>{b?@T}5 ǝkTޡ A#0@ 3M?]:'MvN^
xR8,^[
35P;sr< }v }|gӤ'}{C=: ;r d
w+܀0> J9-+zϴz$?B',$=FX mR_ *L1P79 W>ќл
.!z77miR0)Ƞ].ɆY! xm͏;|:'
gVf*#`.˹y~p` pH6 j :ep,|.a ?vbrD3KKĦ:m(Nar
k {ttdFi_61 UI(7k^.ݹn60.ssZl̹33진_ c Hu ug:ĮVPLpDRU5؎]? 0dx[b%}}cr>xleM+ *qK;1"FG4u&gk)v'sح'2A]qh!=V,(Y}]a~6~C"q[m&Ewt1 KԲ`-u7[Rvn~3c,|!vRv` 3|6Tv7kșNfwC"%&$lUg*H]
J'L1h6FY-^4m͢NڛTF _?B%}jwݐS2RxG bĝ#uZ AwtOnʭV_NcEA66/5 #Ű|BƃbqzBC0R qhX
u g^|@hnCbwWKf{&`mN,ܷF 6Cbc >SO Mؤ''XrL1V:ˬCe$*+Qt1uv|eGH n4egHqDG'.9y`z3=? Q8'M Ȝє b|)8 ?@$ rM{we7I9."?qOs'/icv#3JE?g|O qCF"P(RJEEUQTRc?[}o0_5g[,CsK0! 70-y.x{N,rڑZxQp<1 @"}Z ?9F(ERAAH,Xd&AE#T #32{]2
ڝ[ߑ<TP`
UOs?U۟ ~[àv 4ٲޒizRZ:CD -BU&J1:wQniT,Y%7NO[ ,G5J[1dS9"W(F P Q+P*`$ZPn=aժAM7 ?#wϷf s} n-ؽ9CQ\@t*PàI, *
v0Șb䰖T1VW}l;MwQHCsFE@ Qc]clS %@GOo.J__; GU{+~(~RImfl2/za\.pL AaSc[lχ3;RN_>7#Hm/ߔ`nW!?'Zx7[;Qyo, 8Kχי<킝 Äo=IM~UmNI8!)Wlzw4]Z }(m;(5D M v=<:Vxth@h_@HI&㓐=P* >zS,50# uN5 Q RCdRn&R c3s'}jӜ.Iт3-CHrO^5 NUuxmX %DP~ϧdcPg Q]?R_\͂UJ^% $*J{$o"I
Z|w٤Z=VÄ e%E_zN
{3^.K*Eϡ U2(oܑB2dkY:' (*$,Mb6 ]vL F@ 9nD4(ALɒBGS?|lEL%W{^*\JY?wy9ɓ{[E5Rn!ը`.xg7[ACᴨ UT#4)JaDJ%ɦz,ۄ;wPIhs[[S+T2}-"" PXE`ƪPYWR,"AD6xmIG&߃HZ %=w$0< ?r *J ` *8[*f8zuk*W#ՉHBA1U,7: "";'OkZ4 cmz `CK/7>@$
zOu-dj-OV)DPE9;?}x<7 o+H! )_AHW }G'1CDi
3k{QK ij}| I^hB
3)d D7!k@t6[皇} > d%"J6
t f#kۼ*ho~ 3H/܋Q$@%8 C0% D'Ր>gmm!*v'!# ke3qp=I8;q.5Ska@ '@,цD1:@ &@ ( YOL/mx;gV0 "1t|<LQAvp;ejvwr"1@A=
b Pf$ 0ws# Y8x[636~W(/2i |^5T7LXY0: ) `6t_gvL [a
E㚝ƔƦhTU'^v)>= 71?4ٔ|A%@a!y@D9؇4G2puW_P1Ud/fW`'.P9K_4ƕѽ6V F. gdTkV@5ȧ>?ypC^?-و ylFo%Ėi rh,` ND p| ~ds?Gembʡ@W0 *5~[R륡 uXf@BsxT[ kfٗ-e46=9 7,pؿ 7tZ-T;73ѷn 05lE_7Pz -|&Bb^ngG y egsɰ ~ۛ/Mho >e>FKo-O#O'gn2Îrq84xo= j=T7㤫Ax C R!Z%m}40irs9Rx\7{} ˳ # 3w" Eȁ ;,I7hEKxFo E8/u{̸B}
I4jys6}0/Ry:SźDMrLDlsÖ};Ca
]1.00 {֖9}BH+1OegfAOa^H Kt6 W7[jW> 3~
wt< [{- TJ0bnbj :n:H6w SHz? ܮEwi=e
evXp r j 9 5^Tcas̯KӾ3IO-W5TX+;˟y$m V GQa w˅xM2cA継 Z:Sgl3myE#f0|@/G"Rp3`nO Pw1\7D2tLߗ+Ug"[gafZw₶o1aF G]62
}x֏ DL/M $N0}7UG+`"^ Vvy_gI_Vچ;f/^^w q o3̦ngeBkA {x3<j>
`+ US|Ly ldcO]"]^udR1ZM#C|" xr
_"x)29N4RJ8 7鳜.kuIʥ|\zqYL- oHm_+4Ҽ9[Zq{=7EiҀ! 'Ls|ҽS3r>=%E
]u
__/M_GCR7X[tN~-?W
;a5 ?LZ mH @x9TU^ !( oGoK]Dp4pqS /Ӧ"6D ,V7^^o*M6sHo?,{e[z mU9n
kLz zSy- !uR/SY3y] +-!I(`^$U pp
6 G~( T+N4@
M&?IN 7 ""!Ƒ ݴ
Ӥk{т[;l,V4r-jZ,oeD_{eV#C0Fd`9ez};S}cV(hШ1TIJUz?ӧ mSN*Vt2*P4Q* 5o%b,C!U@*"6k c,8ߋ֨hZZ!EȦM ɖU<# 12=m>
dU{ʏr
ڮ,;M
z2eo CϬ:"ccq r]pkȧw
j_K3dU- | 2W赎C2"_ve!SU\bC<; o2+Y$ |
TViE= WgjWxKY_/hd,)8'2U[j$.Om F H"Nb~p,*,}Ǚ
0EEUQTS-O=ޏk=C|ynF>)%&7/(Xܢ[ʆb S/(Mʢ2X _?H!"t2 {Γ {ƨU^X]% c'q (DZHdfl:[f<}v^܁FC^cUKb8JwK0\JKIޚQ:( .{# 3)-$ 1-.XvpIڦ\67cAVv]fg䉿tҘN.dHTЪh SQ ]a,ßdq[la[|S:l9 ;8[Apq!@ F>nzEIfֵZ~7^IjzawBl`ԯI})R9oZRș83O8/~r FS2-nJ1f ^6fLtǗ
[f3)D+j^`WtYEZ87uD/C. 5 [3e'"3Y3NLsNRR4|
|Dhȝ ZxnV 3 O|!d! Q˘։Y4&z¸}v['8Ul+%BYa)bHVrbLʁ
/)CVi+j`҅"QY MH.
k^ϝ3ŘmXO;-xK ͮ J80(hivVyMY(B6k]Ħ,Zp!+YyUC2 fUBe˜e2'Fye5w! -mnݩ~+0²ڭ̖MCsiB!0Iy)uy al+rD`sbg']&b\XV/D%$D^"*Z@QJyIVIcLSJXvpF,YRcP_dIMZC4+@[D4۲Yg:0#a+'U+t[>螂
RUQi51KZmK R|&U[JBIbEM*3dĔUZA/Uu_Jf lZnkY%M>Mw>6m
R ԁHm ),Q$ E*Bh*[AI Y$Q$YERATDTE@IJ(Ȋ " t*,QT- "H1 K"R VM d`I t }:52"Jj1DY`UjE?_K|&h2 2*2(m9,@ Qa
N"ƭ'bjG O:^g87 {5ǂ8%,)\y饆oG?H*9 Tb =)ABArx&su;+~zfkړK*Zʦ>uಔM{][%vϹq}9_?bn.M lswgҥ_WBa˼cp*6+_f9z ֗ 㫗Ne>M#ߧ,]a4ǩt7$Uz r4P(f1Wd. ,6nx_zsp$vJ YU;SIyS#gd&) +U!ĺF4Aa~y9~!%ǫW;"0 ۧ4oб̓樄E:pJ/)^ <̹*5guMיfI ?K-R 2fã|0ZZ,Q|~WjKMW喓ŲX79h':5Ymw1@ +Lv~!@Cgl7sf'Ռ%_.G`[\
e>9
=G9@`s yR40p.RD+0&ѧ fZYL \
>eq*D3U4hg9uk3\I KNJ
by'N{;>fheXYZ~XnMS?cS 9/%mᭋww~Faw|H[p8o KkϏic]a`z)1=-cWo;>=wX5mtmu;}n箟~q}3VLs'-w>ϑzڻNs?5^yK1v)=6? `ՏvgQM_,G+-riÃwCDdO; Z B^t۽.$ngKwc
'?Ëζp+Ңbs5tK۽Py_;r(e^.d+|uMvawv:饼^/6;UWbcw
j%wg_awiX[){y@Ħ5 }q=Xec8yW
-WARt7Nk %L"Q &X 4 f:O'k*miL&+:\(a
J
y].y fٳA:IOWu˄Lg pt̙W@aNXPH ߏ.`fCCb CI k'ݶ|i9ã)ӏ
-pjiACFLiJ1"#Š˝E!ᾖ贖*U]oB+K+M
6K$|[|yڷ|_u?{R((AXȿ E*^u Gk|o&,VPFf"" VVXX4-% PYWR,"AD5e \6V x=SK H%tYruX'-fimGY
~0_+V74ZR߅.wo*ˆ- (pu=C9Vy VXu)Ja1b2 lְmiB-5T-jͪ4 YCݷ5G(^zbgHŻX!D]_F3Hrelk'Hؠdz>c ]Nl
ݵ atn98 ac&=d.~`3Dvv=<6FI["۬uF2 ?^rhy&,/{K~vzC 5tdff3"Q=-dj-M~ym/mKSI8'UQ(f(qu *l?[ELm;W2xSul g? % v"}eSjg u gk92*n:>5 e.,))$Bzz*o檯uG gX[ R լuǩOmR+{RRԴtq!)<:V3%+^'dX-6-\A"k`$etDD hl?m
K29(Wٶ6ġ !dUcq.1K7kV`]g/Y-e֓
g(b]{ :wkOW!˭8eWk;%>cߚkO"w>t.Ҭg~^!>N $gJrɟL R
7-[.MC&oHG#PɑՊ ]E`Oq6 ۏ Jı>6PJr/*Mši`gj!
J \sWx [pꚖ܅s{ ] Q3Sggء |) O\n=~:Om4@xV`C3x-v1M㽛~/u5 *a Y!dž8C gPP &l'7ah3Tx/6(D@f:)0(Gn O9.O#~W(XS$}nl76?}(A(2r %C }@kn)H4CSGeb8䷗ww@h8?}BQ*/ "~gf0bvnxː-(ClZ{ ko@'Ik{g c1
$ BB'2 zsr͓0/輭Ƞ_0 ze!`Ϙ~G'0'6pPA} 0> }?N3\Ziyݡ$l(+
B8XB-y!ޥH@ [E:/I!{Ȣi3VfKU @U2FJneZQ`1b҄FPavX0)!L0 EbY ֵEH`͙/TJm)f|d-_
Y4raEbA q<4(EF- *0v*d" RL)UX.#C
d(PQ))l2,)fHEDEL*PY(+T*" $ZְԄ$ yxN oM]d~kA!CfqQ2)`LVנ /%ᑯ*=ӱ'Vgrppٿ ED֎@eʈmwZρ#o D0?q@9 W ᡕA(^g_٤
%rU0/w[9+ic"eMg 8f62Zc{ÅnURR, xBA)>Ooé݉ 88kl0-:EК0͖̪"7H$<]YFY'.@*856SPl7KEVlBо!;mNV `cdP\עֈk&~i`ԃT!#i7z ~^@3"3;+)s=m}TOT]=sVڛdžf]]ҳ:It
G'z q{#kka܆ =[k+ rps"
y?Mf(\zm_*ލߎ6G*MXL2/,XU'Ug aη1RܠRAYp f+$ vm\M)TV%<.` h7 RŎ[N!_ko ?we]țJ?֞ DϿoݱdN:tu;$AH)gPVQ`6) s0lluEѣҤ5G=
*
j$ATzO`btGJyoQa6;!UsЅzn'PaUq^^zx] Omyrƪs" DdtZ0w+5Ne
?.v}i͝MҬS[}gdfQ8oy+
dH*1,#!EJHaKI= ` 3 ȧX6/U,x a jǯpj4D.3F!Ԇ
o&x+:m64V A$х 3 (X dT`lc*EEEbXT(*SQUƼUV S ZU"3 ̈Diժ]0)
r^QdqawiZMH=UыN]ečO^l4 aZLnIb2*ӓEI52R_Z5)HҲƦge$:}"܇-˟ F&o)6*
2P}mylOPVuXT6(ZףxK?:$A2ԡM'X 9 z]!}-9 vl8f/|c埛Z2X@.QUvo lޮxf\9K݉ {pW*9f]PLXIW%&1P83dp
=rM<{,)n_f!M֎L_t^P:WB*/â I@{d6]A++Ge- ^0赈H:>>BQOoN7i'b l o3-qDJE11 &$$8 [k
sO< & I[n7T. =穦}:t
\T gK5ˑic"d,1F~ܬֿçgφk---0 ,E2pee+*1a` Y|Y&/w3Ri$%"RHkNO@QcҨwSp&c6A :>Bd
z^bX 1dQVHX)Eb DRV,UX(7vI/6}9 p嶼ӤwID ս_<-tgn.444lcVxnM'AW{ztnLnjZC}c}NEQC6P׃_/ycx Kc^>.& 9C#.A!` 0YV,5"f1쯉y>XAHpaܭp8**8L@"J }
B)wG>[sq)Fh(3y]Y ̂d
XȪ*U@R,QQQAAC<~;soݞauCȯ[mp.4A<{ aE,DC'S9[aZmF2C;tfe}5&4©cAN<֞Qt/,$RI
)RZ" бEmRRVA2W N f
xA-mxZ_7%u(' GH5%bE:>8A# sܰ&gzy l{u?gE,'[h A,>2ӹ\HPfpm˲| R$ :vb_%#uYLۗC~U! ˈPdJgi*Pf(ӹ9&; ] NnQbQWNVDm; NwwV .S8a{c{1It2%:Bƪ*N
hV֖ua[r!iڽy
=1R&u" `:J>R '۔5Yrw
RGMZ c3oTIYq
@iB: 4 +P6
)HPLfȔו$=4XM`즟n% u eZls:qPnX הVjU5fb\ٟadvOVd"Y=N.Bf%^2 s&֛v%,9 <
p,¥w4% J:o;ӰXkF<ύ{ ȱar0#N@e28Ӂ$aA?@ h V&5
ܙ2?U?XOlQ^[ˠ'|;uu3xja3r 6Oo(ҼLK
=#va&z:\
-U:6P̧S r[dܴwheuFیxOy%y{.z35ХN~%Osӑm 6@y6[4:>n,kzǙdqZ UJxr$ h2⧅a3LhAzL6^ ><S,>ÑI`up;)E/ ;c cB')9ј)-Mي lUEV,F
(`Oj/{;`(,=Ϟ]D ́:qΝ{ vM!V׃P!crT/nVj{#8Ӣv7A)HH#8\zv
~[\ 4>Rfwө.]:`&JS-c4 wu=C5Mk0ZC'0VP' 3% NRsC]11A6&OŇ>6fi+ a[ P3'E$ ne
^Ʌ#Ml,@\̰ Wױv#^*ћ棅ѥ¹ >+pv zk;0Fc|_)-ƿVŪbn4T /7/Lv[
6Z@V k2*X.xW8Ȇr7y}[s@`c P&xI݅xʸ.ptr0Ui?3?伅 :U¢\xL"R(",VԬLaxnjKU n $
b
?)bkvspq?wO/YYa#l*ܢ$b F
/mfȭ¿+ æD[+D+>%Jn8l^N2W~'#mt؎t̉@jzTg/6bW_yq)->nCcier2*;թOSıoX3X# /JV$)
Ҥ4LI])H^μ\$A D܌5Eͽ#20fcѹAYq-+/i݄M2>]=jU FŅD8tpl$cHR `@ wr9^
6+VNnSS+es%iDžצPv3Xc!Te ~ӳx.R~#ה1;W^Ix (B
5žB8Dd]WLjK 7es+df09GS'C);ŕԀ;r5 P]I
z1s6
VCZa)>ӔPRG=~ܷ b)D#8Fy2R/ٹfyQã \Ā=wIjHXԤͬ EW-K@ڕ1K_Th
A ՇNi
}8{#f
-V XMߵ> f>9* K I"\qR+q|r'a+Khci) 7z͋+Mfצ bu(I_oefͷ #knٜ-JgGwMRmOkS8kPUGY.&C%ac?f[aY: zU=vX xyV^$Lh` ?V>NF]%[ q3ΕNv>Z G 9>.!m
{> oCd* QQ%mJ"=#tm5EB.eEt. @TJS5Nc)8737jjsh[ٞiMU/ŗQej{33h*}Ґjkl}Ә+-l0whQ}(#2)N S@rlh
Y\ 9 Qe
X,BI\SܪyM\R$Ӏq-d`24hR
& i+/]Yy|?wҖcw{ D7فkYk bsAGkU1 uo6>F]u,`4Zql zl)rC^Ξ.Z;ё40#-P_\")p=c?>GQ{b 7zބ%z.2b dh0?+Xn[h l \ L.xb U 8qATz5݊ = x nS({_֫Rþ;اYV.*UcU/FBEF@ӷxy"^x}<|aoRT2 eƙ,ʻԖ)p4NvRoxni!?C"iwt5XU<"? #
CNʯbLúcBmCIdr , Ġx /G +
dp6Wj9(.Rf\YՀKp@ T[ 'lį PH=|7Z=q57>Q臱-<8q 05/QMK߁/ֽVrNenylǦ\oo^z=ӫkG)lőĀ"ooO>k لZx2 [ uXG=b I*0=øKҠ @ @3UqfCUɻ*Ÿx
+gD͗ue2^WLdH Wia~*/s.˯b~) R ;y:/Kk[VSMpqn eD;O4EaXiT+#p#1x.1P R
q'Ab!"@nĜf< a ճQ($q$!7TU&ݚΩ+uذ2v^1>xl O6"p&6F5/ehĵ3{Av`OiN^n= NBskʱgٙ-y h[ k Nd|[" AZF0fz̀Iޞ!7soMݞ{mynVfNoBu6tBiJ4 1UWt)~] [0\ \bhA@F"%Q" /- 1͏`-*|23t }lw(}q6Ե "MRO4\}DBB@э廢=ݕ kQ/dw+LU!2/qX9z(f23#".q rYO'zmHxUNCb]ښv҉Fvaҫe\~潀MPbI˭
S WvEui1u3m Y}.%%'Ll 6) dN.F1T+XK;3+8U K:c`-\{@a \'wM"-XT]Ubobʞ¥e]Lܚf0
:Jš{D2q7#%ly9;`ka>D,X@rhb((etGGz<[ ;Nv[k( /K8;~I
no>.n^MeV4+61f cNXT8*ط2Чr%2n
{;tb Q= EA 88Sp!XT0D &@ 2Y+z JP/Ў "KFՏr%
3CrԿ쿃9#Oǂ_7#[<g?b-o4iSxTWL(9c>8{{Ammƾ"t*3tD L
籞~ksu7{;7b&-:3'Rf'bpȋ+ fEĔ VR%R:s 0 ~2pԻj*yx>-:f.]'qqvw3fu 1 3A9F6oofUfKV
$ҵRyQfur%=EL7OEO
qces^rhѻCZ[f Xb Dvj* J,(SJeڤ8/GL]xcV煝 |F 2JcDe[t' 4>]< M{ŒENcQ;D 9jemٖ1ƗAβ&3NT
zj=*o k>ڬVdAZ571kjܯ½ml`v! ˔%gf&cC P;r3sն3iE9:[ڻQ{il1( =;F.c;M-!\;'dEc`Fmk춾'g$av `(R ϱNù(Bռ켼I&%>aLYO,:.Z/w) ɼ=- .S;R W q<o>ۍ yv|}Щ:#+ S/n,RNzByߟWC ͽ-3okY4bh_NkRP-lm^My{yܜkMrCY:VadOEz˛a.+Rʡ f" uvU̟֓|])Wl -]%:gЃ1Tk$ NN
n(|
Fu!I&p]2 Kx!ڴyKa,og&,y,+*@&
l.X<+aI+PȮUѢ0JFz4\7C%3x0Ӏ^&ӝf3vJ($fJ%CYD4B:4Hդ٦%PdDRUŔt,ѷkf* mw;;b
LAi)w^g+4*HHKe 0q)|YHQAm̝,zR6I p$'v wi{dif0jN9)S|;ȚXQC'Ev+dØUXs
L4
AԬ2)eI,Dh L:5찶\,Y;X /혥RJ/(XUy@g&Z$DĖrv1Yq#ȩS2BՔ]sK*f3'2efQ̜;Bj`7XdJel#PʵJJ=HqM$xGFoπWسXp EҐr}fn2ܬY09Qt
}ڊ7H3&WU3U-`mf&8s \pMh2-H^:+҆̾>ʔ_ߊRU6Z_Pb R,v{98Hӟv|ɲJƝ5,?i\QW:68 aśgNm+u'$ C:-4iwGg^2tdew
I^5L'Y JVYn2ݕݝyvrw V U]ݨk1:&Yp +H<) C8u&NJȻ3,p iWX1khb Eh -ZЗC!%(
w?2!!+p x."H`! yG\=74C^@X\:D*,&tV8d1Z}K5ez rƛ3r+v\(d$ʫݾ:VNɹdQ*₍"ۡ\], oN+/yS#V6e!ms)<7E^)&KaVǥlu1|KeC~x`OEr~gs?89Qn*G=8RJsX1YZ=':=Ϧ9ݗa^e? O~|uWo303aL^R Uf jV[r'*:)e#ҽ$Sd550=/[=,8yLY=6 6get6+#|,.~G1O&cjf3G=S,nZ?Su;u-'Ɵq9?'&NE=٣˵^v^'Na5clC+qS)Σe|0 )q*DeiI:ARjnZk\"um}uyo֛bVS/
[X606P>QMq?Do&2sq9s :%r"# ivڑvrXn 0E YѩOOKrskF| P DS9RTy1
:W/Ϯu?#oW}EQ ⠃ UGCWKAP|N?]o6Jxz ux&@/9)K
.hD/ALe ad6eLyyv ټ:J) PwP@E! "c]&1Mcꎷ kV9br~=" E+
> F 8n.{3~6YZQ zBa^
=~"rsm
uh%Qn"t֬cWנbd8;iYku:|L7yv.v19NDfTf˧sL,F}2rS-l)tPWi dm:L4Fud' 8"Qe-Jڧ|b{C'ϛ&v\}3vB%3ZDn^
&
** sX\ul
G={
UxumgM˕ 8.;HZ#Cp)q0:
B)4Quӵ`Mc:^ձ6ֲe`iVqPr^[xZK!Ōj7N;Sj_D`~?k~-y&XNMƞh]64U]B3p+5 Cj͂$"=_/ dړOJqd{_ki\O^㢒B& "! r6 pjp+Q9Cl*\1YX[BCQ;6ߕc0VnhGQj.* -eo-ؼ_a2 =A_.U\dXp{kzàL;TR~Il0_[!ޢQbB[td
`&^7k^n?_9!+w]w}>>i_ɧB!nV$pH8D= $lCT0ӷ1"01͋ǻGjowt 8B_/ AY 1D2p2 !'1DT2BD0 @A$X)0_AD|K
MM"Ђv wˠ p)QH`
-!Sq)^ T9,B%rBQUϱ0 ȅ$")ޑh h(/Nz{/Eq*bi R:l: Rߓz c7WASxn^
i?+}FG~>_t B U}r#Q
-Lb#F"cu[ '5u
-;Y}gkiiyv۔j?ؿ1w) 'Ook.pu}6|X _/] !mdv|/wߘxʚ}_y~ Ŀj {8< k9u-w;G~Q_})ԁ hjS@?+vE~!CCY_{ xx>suh9NOv#oyD:7={}c]~G6;[Y ^j-N
! /Iڻu`. *UK=9P
ۇ |; "}F^ } &0Rn w`}`{j
0 4 119Zby d?WT B
W8` ?/H(Xr=ss. wӛGu h{Z
U&
'y"ohT@yDX:Kk:}Iz 82px9(?x l4ZUEB |!, if @RE! رiOF=ocoo ;.9w 4tþ"ih?ɧ\:3϶ ;=?ʹ
u4wW
o G&@ ?/eƏsr* 7tڬQ33Y_]v4w_: _ /0 "3^;^2TLjc=; xpv1͵ Er Nr (~=
{0e ;W@c8 ׂ=ew v eE&ۦNj/m {S{/n^F { H=m C:6 ~MYs DE@suV۞7mlmTb "? '[ osy;"]gX; w33fDVvK\rv[/E U<\ sVﺚ/U@ǂSǼqps/cuIF=۷ȏ^oDoáLq7mr#p44Z @`B] %Ȇ~K.dG<p Ap[.֯#yq';fVL9RX" B (x}.UȈ%ܺ{._[ë{Hܰ+ @ :x6XgT 8q,"}n\y ù-6(fe\)Djvt/GN cw]mo~e=noXSD Z#Np (wo^E:FWuj E>-e2={ku 4 Pm]r*Tx8;ޔV%KWg\}ʆ2ǵOsJ
ܛ`fr &$CR/K&PNFۉlMFqU)H:ZYJ
_%>Df yB]JkA~;5@" Zov &3 UPQ_ѝ kv90hGV!Ѯ6bS_F"#&
6`R
z[ٗw EdF ƗT@ݘ}n,6;-w9z vXS==;'szՈ@ ] Z#Fgoke ts IIul``|÷v8t+ԜT1{ 4h! n]7|u@"XG!{YKc*HX4:JA2.RVₑkT['rP;y2GoȲkAmgy6Ljy dAf)7IUQ'T{v5ˁ{zhk]$KJ
e0n 0&L`yvvXvtb{
Cr0ɥ]E)d.W;j]%CXX1LH *[$\ɐCl֢ ,'AZ-"X[Զᠻ~ou~[?]Y2Rx
Y wK" Yרc DB]V)ZVĴ6%UB XQ{=$o$N8u1P 6UwW0e"5sMW;gdXrE_S4%+'{uKO6t
B Bd%yJ#{^m;' w^\PL6f@ ҍ%@#W?/cʾňu6 "_Gw`Ur _oJJ lZRVm@}_wh푥]]up
2)R}@/O5e^r )B>坮m
gԥ0')txWY$ e8 D ~vrum(mZ&oqq
k~# ɹ]6z~ϕ!1+8Zg[7mjk3qsWryq߆NB7%r68?!ͫz1 _xXwђbwGu6q{8 O4f
f̬
g/rƿ ~#Y[ yx|GaIl<쐊=(VCI^p90 <Њ d̢p@4zIbVMf{LmSFW*'
'eiRV!E-,0d)w b sbB `LL)`%w_(жUg=xgxEel) om}Vu
ܴs1eH*&7ގf$
aAq>::B
aVW8hsX,~Ņ ֶt&!g\k[45pmJ#['U 8#iuw6/֢c -RJQ @Gʀ4 F(+`A" & t &2'QZ(xn/2"9}svO"Ȉ^^;o^黽o|N8lB ҠW gAaIH *4
x<N ^ST GFO,Ha}:.T|誵 3{;^] mAdEԿ CwZVD 쉷; QH?e}lYVһ}}XT4b\.dmKB\ ^;ΐ|.
Td҈pBg
Mmp{m\9̝Ǻ=i!AXzF^je]hK65 6~b"J",(0nqk~Tñ qA :r &A
wqܦX QXȅ|>rO9 Tȁ`n,##|}Q6~G!kwKe:ڦ{q5mq+dHsqAx|ۤnpr}}y^KOqH*ZZT ͖s\GB-s"0`l[AR agot1%0ϕvP,fp
%H1aȜ,~e D[ 'i ģ+ r+ADy֢ʙM},|Z8xcE 1wS%4_pţ h fhdi$;=Q߷ @ $+ϭN
pdt"Ia<8w\ `0DU/ Zv=_ bz y^ 9}癭Â'^>
&=hו*BGRd \r?.D@HjO\q
P] ӡTt m U==~bsAE.!hgCG
웍} t !AN x"#Sn ׀O+L~<0؞ӝnN yE LeD}PA=(;Ȁhj "F"zNv1{8!& ;UG O Ne8r}RP{ DŝAS4 zy\TGAO* LU1U6Qˀy"oleP_{:h } L2
AMB oFDkkAрo`{Is8;_;zL"w>t4:b W':b"
U 4
DQ!AA !]BC lAP <-<8PD5 CsO;G|_x!w-I} F\c*<Uʢy_ *)( >
&TAtqP
j8Dx1'uĀ
=:o H%EU5> p@Mdb#A z(1= "ʣQ2w\xp@xeW]<{)Aυ 6Q@:;_UЊj t0T~ DD2qy4(>C.*/D - 4UAiTO
Db "%(z~I`J?gb(z(TPP"*
RlPG 4qD8 "K =ZU?Iψ1B+A|C#Ǥl }/
9'аg
w}ge9]g`17~ Gܯ < H
X7 RRXx WU^nv>}](,砀;\Cnb;# J! ~vz+2v^ dDa@ =Iv8eN@vElP<ҵ.1Ӆ`%i|*Xf:.=@ C:Ŗ
yUQ~Y@mthz
ae`%"pZ'2`E2|33&x eFP&+w+!8 :Dtϱbt(%S
k4׳>_o#S-d!MQu5P u raOOsxvXxU ,]>+ N "()d^ %{
>nDQŠ4ڃqQv">X"
w0 >g }/cH]TQ=F= {fĠ,4ލ
z̫r<+"B@e kZ(/]F 0 Чc(Gkt|u};x+,I^~x+Fy6(P@W!`r5_j礫kH uNҁdt>BSjsAۼB g~3" ;9R\GJ3;4|nf͝ 6*5 k5x*gKFLdԦh- 4JdLVwa| pq?Q
EN2 NCK \>.\HwB nz˷okd6'eN2 z Hww4
qL UpO
zC/ (9y~uħ :D
dNn4 Ô(y~7|*|mu^(r1Vʽ"3yŷ t<
Y;نmo6NP
}sV}DHKmV _?XZ
8/+ #ޭFB籕3#us{ p@Ll_ ʒP\ Pg$Vep " hUZ2@SOv̊;iQ$mpVm$JHy4 j+BMşҁJhlN<,{Vܹ FNCB EVEU
lgpT.
I.Fd\VqÇ /,r!gej.," MYF!.KZc{cW\bVD@O5CqgwBi gZZz 16
Lxu3`T4s0f,5jN6ſ;d.Sx֗}zP ıڋn^BuxZe UQI^$T@.( T),D 5@.1#̓Pӕx}6 N 6q d Hlh$w@́Sym
c# nW0*v'og9m:@AHt/^=^t0tb4er|=Y}Q*7-! 4 !'wPր Op# ki/QLɪ O <R@:>7/emNE[[Q
;!qY"{ʁCI 0Uu ZS\ubt!粸GX9@.Qm@+3tqu" Ib;:pi/sh~Mjus HjwXC}g
ӂ9gYt9٪Q
b@ea/+Er fQkUP7YgM.}
DM))_*敆]'::);6cn.x!N(&
EU\O@ˁ,O普9~'9VyEdsFneLBײ_W:s["#'7:_Csm&bDÙTk E;ъ"E d3T(y_v~+~.c ߏLkqO ծuZ0iͽ~D*
()tDve*q Ëm3N$̘˹EeTiJx]LSorykaj˾y2ގE89w2 `*<Ȋ Pڈ|U5:eƛֱ{s4mMYs=u5PĮS_`ʎTÆU2%2ZuP8q$"@ ./R:ت.\ mU=9 nn*մq7!ߧU Y]\ҿmyԵ Q-d "(
!"
cA8`/2śsW kq֙3b;H *> @T6D@vq ?U`$(DPeNvK.9ܱ~ >?Wt ^x"" Eً }(#Շ6 ꆮ7 >"z%(A3`|95B(vfUN3ZKYd^"AK, ѻsWqHH1* yUNR&;FGq6
U_" i1Cj3.D DP@TX\G/84 z) WZ[Ҡ|L :09T"+i<&!ϗT2AjYPy:euu ))ͯr+Ђ}X 9t A>\t |C(}:QvuRI@AQ||?JoéDQXwpڪCG_K
zpD=
QDylPR*'vvQO9n9hI >(!랃!EIuѨ ;x>+7/ _ D/-MY w{u!ʼn=>L p /Dz( ވ
X
v0 O?mgѰ) 7G~QP?*6 R L]:l8n
]LQV,D~ R NI4*gևa& U!. ݊!È"D[ D@ rmR!L+t=LPCA.
H2 IP?F" xM *MUCiDy~̊ Dw` AU>DQ@{CP?O6rt |
tJ;z( PQG\DEPAA^! z8*gA a=P( Ƃr^m\Ms`qGQ~{ , ȉ`\?K|;x!Go;~ncÂpb]Ohj&~ ƾPCRo{F@53pxFyT[| EVO n,OR !XCب*|Tb<
4OGk̛!MPOj,Fo
@ & ! G0!CU==rH.4D_rYA] *"_WB0QT")UjOsEwV@C }HT,~RUWW6o{f
` )D)!lu8 Tԑ/yU^
TӰMFb$H$ ! "B\
U[\U'$w0.4`WW@2`>gĶ ʋ[A7>>iC l}ZXr_ GrtA~ Ƣ%t9K}EWR=X` ڥr5/{R Xwm[՞i%G8iٹorG@G$Gfp8 /~1?_[]7FY]r*ώ2mzWRO꧹],֣\%=h{xNM#2ib~+1 ͯ3U{}{w~i)sQn]ݐOa~9coюNe`A=S~>ߋ}ϱy[GU"7}
S{u[d5v!}Oo9@A@$EBӉ?8צd>
G:*mbVe3YWxU>2hxymaP* yVYsnݬϳ ˒(lT62 ]y;CB δYSgӨNq "`pqˢŎѦIs6r DB+DA~ sf(uЈo7e
zݍ.aoR~_fZW"2 4S^A;.9pGNkZz8& ;; + C1.K@6.LТH[ ֤μޘaZMa諯 ) 7 zz9k b@h3 H0pOOAH &i
jp >r!ƈ7uw
RPBN3c\a% 74ؑ ͇*Ƞ=UlH⋺ЈHdn4Pc~ %?}v^Wxq~.PZ(d#!3B!"|=(}c!@ץzn %q` _iړ}0?(@,Np=+Bm [@ @:?F-(*$(Gnx"EBb #(r\ae;&[5 1ޫ+Tb/jlUJDM,ʟ59֚Q|? k {| #KTawep[ " :E
z)x /"!mML0 @@ ;OQ &mz]cvR1vژͿB: @6WU:BX 萄
5Qe ajQvmK4Sdu[*B)-s.Kn es}&,BM2{=1VHBH2 }(m~[vN&w 6;E*J)ñly}w^-mtޓË%nρ!(=EՎU~m @vE@$pNbX,U!LUY'BR1 ZFnd d1eH$L;QPXr=_5^ɬZuUowhL`(;|GEƱQ-Tg
BᤇHdDGB]f!o}nq&rIȊT@gNz,kQ i
"RATz{+."]u$R}@} &fee,bP ieUUEUUQMU\F4;!ޏ?wVЌACl ֠,=Z}%wchҕ7y ˊX.mr{Re7+LS Ḭ38C:no ˳qV,*.%^4ŢȀH4 Ƌ
PEA T4ɂ T )Y&_6"w~:1:Ǒ+B"dB-5ʠzξj>`F1VÏ` $8e
[[4lH49
dD[E S0G<efLA8,$H( 7{E8Kcڼv4V፣'Tmf*(:sKSed,x'z<ѧ8C/DMݗgZlc$Cq1Eig7\BCDYSnuXb*H6ʺj`ǫ5}n ~E-rg2"?GCKWh @'&sEWy]p?
/ZBa ?t@GS2¸`IMK)0O
8^P5|XOR*HiF; +Vr5eu cw3mgGM| 4 K@Z *W KcӆF,X1$7%鳎 $Ŏܫ) 5yF.Xs!+ H8çm^f ! Q*63np@CNl.N Y0!A.T|AGC>Mˬ|J:
p)$8]rxZ l2/ tտZ (DreT[EQiCB H 748/Pϸh,XYh;}ol`# ĬhXF.ȞFp bwQ FDioN U4})y)l̥ ʈ cN=}i y ma32DX
Pl+gK3\giq#hݨϰ+TfJcjZc QSF dLiX t}A&b^s-)>Ъ7F atf\ ̥6 e ?aQo G!)HR4}v ̘92g[16qf\Unm3&sZMUEcl Y˹H ?tʲ5 GDbBS2ǖL2zWbӁQ7꛶@&i r@j͍|#y$CѴCbƳW!J`V A2-ͫޱTHK"ՆC Ƕ@J،+(a4)!; \(!xev<# ZMRR:87?l:G4 (S*l_u-j.*(z:"]M͛G+^$5b%KEYqugj==Q6zQA c*'S`=MA t7
u|6B141/i`]b,LnBu5%U2QskҐ#%vZ=N2A2m n(vI; r>TۙD_ AT- a
oyqfWT@P4OY= 58u|at}htF[g\#мu |7(rmK{cB`x$p|[)Gl%ZV&p TW@>2ڊ@^Vf[Q고zu?CG(MWф8i<TǃbֵY l[ꪌ ZtI5$!k*Mlűp|`9)*b 4"W 2NRux5vPH
Hף< w "?l4_.G%T 9T
@$b Bг
%&
p Ok|v6}\8iNGO9Ka37[ZZC: ,]u]q߶&X@8 hmWr 2zʰFӆTp8ؒz:eӾ@Zg
Rqm`U aCS[;/6n03X#41% 3]o-˩r1 `VƱ7N"Uah%e0ݯhXpj^ryCĹbiط5m0ث ܕuK@"
@ !&D5;PQADh%ed
TA@G h3"(- 蠥dl%H JDR!}V$/ĩhBȃΊъ
TQȫR.4aDD `HOLʀ]ȉd7L*V 30^tNj"/H
l8'3r1`$?`@ fl7,% ӝ* ':A,7mAj
D"))D қ}W\$$!L) dل0 &45hÓBq*jF{WV5y *.hu"(RQ 3` T5vm0!prCP1`-TnhoY{&Cq!bn" *lhH/c !p uWT*T,+Y ,sH(04`**R l %nF?L.hVu*DG E˅ϝM- F$BƼ B]!dŐ "5_
3TW16cuA 3^2i/ Ҝ L/fM d,_e($RKCe A 43Sv`"* S uZ%HU"H (+QTP2 aQb6r;ydR * "*HU0e
loHt
(E
2HłYCukֺd FjnS`Pt7Kv*/Ą-ͻ%
`P.piHa#|Dm]-;'aR?^_HpѯAYZAQ ΌəPFzBkW P&q?_~w~o~[^ rE"W ز1QN5CKwx3GPS%$
5Z4s{c W.Ai.M`pY^6[W M#Vag=Owޛ{deʁ>ͩ?pw l 4DPtį8Q:4Mxk|WO@ PPo`F<
l䁾 A1O:vΘeg!*f@ POulh?M- _;ۚi^}Og/L;':_nG? tU%MԖBOBPAI<!+Pg^aj U:4v6%2,YQUZϝJ45 e[GL-g5]*YC7 q~ ] S8HvI/((xUpG"-''+h!AB )~VHe|;xG;8 0K PFM[dEYP}Wc\VVm`xɿF
Q/2^NH6}
Z ,y1m|5^=ٙP̔EKDžPS3kD0 T@ 8Jp?w s c}B\qIv R8c/"hX#fRc2vr6Rֳt/G !N҄E)a z҇7V=}Hk̉~7?tVЁ8U^tE \I $ڴroKwf"/K `6BkλbR+(DWQ)R`kTM@e/$07Pf|,UQa먴ZEGu$AaI*oQAqe"ScnЋ:0Y(r !0*sծ/?kx_}E]-7?3X&&O c( ]q?>" v 𠵽op FѨ5P-Rŀvܺ
i9$kD̖v $j33
!w104+GK s6qze:M=:mA`ۥ8G٬2rj\HkXʗ`W:`He\oBL
iJ*(P;dY@T#-L)R@C۵eD\z^ {YOQ(kcY \&7}X) `s-in@^݄o-V>PVS-F%`''* d& 2]U ^0`h͚HAE6)pð (_}[z"%7K^ S
Mms}Z_bzDb @l2TH < *Rku4ڹds: F[ ^I30#"m gR[V-@ `q@ ] 0 U-ld 3vz7.(+b'v
*8##,;IP#= 6xAKR,ޥ8&Jkbb@hf,P8(Qz @f y;uVLUTф0dSYlU;ĜHClثZ5
1f\"i_[24
U%t
( / ۠ ; 0.
J/ l(Q" (`Cl';97P"@
-j(t!k4*ZR)d@Dfq>j
@MDvpÈEbi%0A0a^pX ZeI82 :PN\8]W2dPm'&0 * gj@Uj]eCUB327Qu3 ^*30)R@FBZh
a Yd!(H($ЃT6@)2 I,^9XbU0Hʶذ0fb rZ,w`1
g\ F@
_9K#*D \BAĸ*r4cX2C 4"0"Bu|{mx3eVR8mfCjZh
nn %S'P .I>@ 0|~ A±A,MWRL(R0 b$jr҈T/
yP5e; Lب83^a *vd0{ɪ.K͍k ])UU`
Ɂ׀a#&7< GNWf\n܈ Ɋ(.gVMW > 2"f3C-jvCJ,_aFBl|ލ8h59.sH؍
f R
I XaE# BA*?
#zԘȺ
*'4&C37F1ߏM=q H */h?{|+
,wJajy fR
WZJowok{ģa0{owå&*\ҡHRC?b&>u6z
X&LEv"m ù!GPԡϺ$ @T([$J*
ƀP \"b!8.|ʈ!_tAF#PfL2iT*+ň h
ZZ h.xz`Rd jB.]4RxlɚApOզ\QpLWZpih&:/n m㍗z" ˩M2RK%LoMt@5Z8g4z&/ !o*T,C$z=B3I!ҁ8AS /q. h2iS ܁XQXLpց R]ԔIo]Kdf\$NnUY&&wY MG`nOspF%0V!jLrʔLcE/
,AXDM*hR8B "6Z9*1KhRP L)$G;+Fk( zBy:= fU[JsQF X^QE[& "b Ly Ə,d6#X\̭
Fٹ(h{Ԑn9vTrF>6X.tZngv4=~~M"!c W]VUP+ `vL2}=b30V
q%av̈ޚE}2N'7mP\K4"v&(NV:梛eN(7%3ttqYhhf`ʑ`;;N5bرfS+fI)}\MpZY
4$XH颂;Qֵ2# 4^V MX\$5- "
3%Y\ffTRY X3+TTL`q9iiC
D$5G,@qQ gvV鑟,U2f-@ U*IB%WI 8ro, f#/c-f]61\ D6Պ
p F牀Z
Vd&#
ZVW15#:ql3絋ɹULR
lBbu- ]jwY(Et(}
ˇ _m"+ *QAQx@1`#*2S+,AC1d9VZ&q cs`Ջ5F-\ 0젩*XP!djmf*MRU
-zBXR)rŨlض-(*85je4U%%
0=F7(!DPE$*JrN
YW8ePl H3֮c۵giy20V Q*< QaIXZ(R4AMUߨwW 5۩YJqu4ܠ]O* iZ<5-Yq=W#9D\bw RHr`k5j
'.EQN ŐE1TU*ZUE`b!MFQU XN64j a 9Za#_N3U6hf2;vYaZjc9/`FB(x( %(r"]UBr [sa]ò#ČeJτs3(E7iw4f¦`e*\ѵ%q\ a k|v,ʪSG[av Xp
ٶ D,
k% QG8H9%*`TPZ"q`y5fӐhĴdJTThú1v0 KGD𮠛txm 5Y9el*@ ,i { Bj]p
etHo0H
U+¬ HJ -2O3iKݱ?
˴(X\).&bź"2Hpcc"6&391>F+dbB,6Z
-aΤ3 k m<',
N+݁d̆Fsn.qB.-!vRhU/ڄЭ $81ORՄh}eT'5'O"b pւ>PD@~M:n G~h 9ٙ[ӕ &Ɔ1C;,Xt:J]YVU fD$ 0Lm /JTSU}?Y
63Pe05 cWH\gyLwCfRIFh+E(@Q. ' GK:͡ol 3mɈ>Lo f~.٧1H/9TI],/G Wd \ qqNx+zh &L8a \0On}szۡ < u-Ww" thU* [=[20D"M
I&wA ZcAP# iG }YۖBi}p̡:@;4h;}g'I[WSav8ɻS"Pi`jJ_q ^SEeQ 5G`!F(^\yR,ajJٟ
V
Q-f S
жw8T*Je(^as(,ܬnnwş=9Zߌ,ŝYC8`/~*a^k k!B
kYl. (0픹#7J+3W%rh8S[@ ^o1,J(n)-CjjHSVJyP@M )"D T:j$xb0Exǧγ^3kUR, ߗJ*bŭ{,#" \09\stͅYJEU,32bgzyp˨GK:)0g.
(ŃNHgce
3&|YX1j&d˥!@*:iӅ8 U[z(JYC" YF$21E E r Bɍxhg{\5."N<}3d q.M쁭[{ZQsnr~ʁTVP 'W kSّDF MC=DŽT
5jRX(4ؼoEZ呲hpTU(i)Lm
,%%X^킲J2IPc&s=ĤJ7]S~ژ:6lZbZ].d&QKU2&c CQpl\N kvZ[(
ޭUcdQr*2N&%pmVŰaS.*2XU%ZVUW*nJWL :1bp0qsQs a3:rjZ`7kv{[)T7QrWiVƱDֶ MJv2Vd5av0pF\AXcwZ`i6P3a(ė"gDA99U
3By!XboaHW ##|f30jrb6h귬 㖃 I h{FT&fT,~É N! 3=23͈%>P$-9ryּg7(S(J.ߟoY],;K5U >-]{Zs\.5} eZ 8 -3 ,h2\ &LXZɀ
1h 7>\`Y..;UA@ˈ ϊ)T|>|PQ/~2)VD$OJ. WVƔE_M86ɼPlڃFĽXd9y `]`Nad(_yگ ^̈Sq!$ l$)(N
4 }D{͋{jݠREaRnH逝)}AQ59: 5$a~zN^)u)_&a/Ud,&ZKSK#Us)k{o3Ʒk 7dDe_슥Ls('u ̶/pGb F|
hL" at=}I m6^MVT>@dIқ?fÄƞrhJhl22
/X "2w8G?gp< T)K;s*0AP`"v3Nw}?a:kHz AI5sK )蔸YwŋRo[s'#Gc} E]&e`/HXaF$,D@d͘MLS'2evg%$b q*&8I`` & l\Fvf(kff6f>ǪLOaqή2lEP%oULژçG 0 \J,^%AQewF,H` 9v(#N'0B"Q2 9d H@T0u¬^U)XK(-
fE
T{Tao .SX ƨ 0 AʌU80I1a(e H.^ K3# ). pg dͅ㑐K5so5;=K&q BlV\G j 6)zdEiRu`maF&jn 53'%5а6oP陙Vkn7o)ZoW_l %6&t YݹLs
_6Ͻze݀p@,]i% jU U % #Uh}w=a 5|| lںrf~/ x=ZsY |pj-
߯%u< niK݅"ҜAq3ɬ4U r L F B
6ࠀ_itaM
h}cO"LƲ(eHO*REjQ}$c2 g7md t Q6t Ќ#AX E""Q`]V |1pe|MHΎ/u3|+|M($Ώc_wۋ&qa,9dD}Vj& :kY . _K"*(#N\ O*Zb[
[(&D4M0
I
%$dVD
!{kY?Bွ[@Rq*@@.Q!>.,(kDDaj_Ce neý+ +e%t~'ؤwL{qh52yn4Eqd-ܺyEYkE"H I hxP:
IW EAaS
,b6jfIhU-0
H]pHqЅ
!Ժ9C(!
Ȫ,TJC
&8r((\ !`B53`eyrWWؒ_9I
w;e _ he`r6/r| Z֡؈O˜VW) JՆg^ H&W1|
svƧ)"L/y6f9YSJ+&&`Q))̴A LR@ol!g6סVR
(,s'AJcj Q&{_w8ٺ̿VG;
εME 4iɔ⎘#b @}N]pR-NIm5 (lns c{}i1V0Ob(ԘmcJI1d .xfnL7iK 31 T%AY\a7l Nm- U
n]B?oR "z* b>"]0^~E
JNߤT`P*dO,zK)gRvG S_{zACAQ"JU")'~ z MbނC'J}bP|zEq)`M؉"
P[(EΈ# :d k# @n\B ?L2̈N |;GXׂRh889y ^E8Gv"f.vO( T%~GwC~W;[Hg a%rZH8-8 <m0,´y+KIW_-S;^!|5Ș>=q1:XJEUa$dYzZ)^7kc7 lF(00L͕.e42{ܮ3CϾϹr!smD1gDQ Ί6d %D _7. ܡ:|, C[)-֮q]~ ^n=ƪzYAimJj8}Ϙ"gT'j3B I"#SOI\dit#FV;LkCg*dF=ZJˋROZ ,qPMćEH_%XQҔBhw?!_ Gh4 "R?N88 r*vʽts5%eu_[4qqˢ3g!Et8'74,]6@:h^ʉ#ۂu
TP nʿvpճ\U 5=( uh;1 7gcar
L]}4j3]IV