samba-client-libs-4.17.12+git.455.b299ac1e60-150500.3.20.1<>,ep9|uXG7#k9#M7 ƕ,SV#]<4f3̴ҁ%)SϪ]l-rUOpn|ϣ?tL>J1w{GB-;L/҅a$˜TL,F,&ҷH)2rmGu1[ZTfebЃ䑧Qk90{7ҽ7Fu9H韪V,XaOͰfFVZ4T. @j oEzP/%P>C?d/ = T 9PV\u0u u u u u !u#|u%u((Hu*^c,(E8L9:e>@BF'G<uHuIuX\YXZ |[ \#(u]$u^/&b/Zc0d0e0f0l0u0uv2tcwiuxjuyl z0@DJCsamba-client-libs4.17.12+git.455.b299ac1e60150500.3.20.1Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.es390zl3aH SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxs390xH8X8I( G7'gx0X wW''w7')7HKpx7G'$xhGG0'Wx7H`Y@7(W]X7''g('7HAe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)ehe)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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.0libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.15rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.17.12+git.455.b299ac1e60-150500.3.20.1.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.2.4)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.6.2)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.2)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.455.B299AC1E60150500.3.20.1SUSE_OS15.0_S390X_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ez@e[J@e6`@eSd@d.@dd-@d@dd@d6@d@d @cvcvc@c@c @c@cctc5cM@b@b@b@ba@bascabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Add new idmap_nss option 'use_upn' for those NSS modules able to handle UPNs or DOMAIN/user name format; (bsc#1215369); - Avoid unnecessary locking in idmap parent setup; (bsc#1215369);- Add "net offlinejoin composeodj" command; (bsc#1214076);- Update to samba 4.17.12 * Weird filename can cause assert to fail in openat_pathref_fsp_nosymlink(); (bso#15419); * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432); * Improve GetNChanges to address some (but not all "Azure AD Connect") syncronisation tool looping during the initial user sync phase; (bso#15401); * Samba replication logs show (null) DN; (bso#15407); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * macOS mdfind returns only 50 results; (bso#15463); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453); * net ads lookup (with unspecified realm) fails; (bso#15384); (bsc#1213826); * Regression DFS not working with widelinks = true; (bso#15435); (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1; (bso#15451); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); - Fix crossing automounter mount points; (bsc#1215212);- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0s390zl3a 1704181926  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstu4.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e60-150500.3.20.14.17.12+git.455.b299ac1e60-150500.3.20.14.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e604.17.12+git.455.b299ac1e60libdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.0libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.15libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31987/SUSE_SLE-15-SP5_Update/5d6206584aa08ed2ed19252942a3645f-samba.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=92035046c608e944443ed50c224e625cc3b6ea2a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d335962fb349b347999e1aaec6f034369ff0ef8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ae72d37a46e76b520984fb9ad809cc782579bae, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0bf1f8becab3f80975df377f67452b359149ed8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=faef1ec650c55f244583a8e53fcf56a2a1fdf3c2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=55412fd181ec099f17b864dc80152259b0911daf, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b97a2d356caed73b91d3690805219f76dbb5bb6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5bd37274fd1e624c763a0c7502e60f8fab2fcf8c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=41948bd0362269aa4c0050d539f5ba1ddfb03399, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0b24b32ba2425abcf0a0709578ec06d058d2af34, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=63cef2a1ec5dab777e4e026c7462938c9d5ce840, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=03419c3235965f272e98fa650233295401fd1c0b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ed3928f455c1061bcb89db14b1158e6c792308d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=04dfc976a6c92a14388c395304313caa25b7f4f0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1676cd259f9b2334a708a43774f8fb5f9d07fc3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9b130bbc5144bf824f98ee0ab131cf5025c33388, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=deafb4c5d4092df64abf44bef712d2a1e2f01f29, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=263856c48c9807977e2e602f65dfd38af085232d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=14cae181e4b7189510a08366f8f3cf2f2038e3cf, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3ad93415d40745f2f10822388f6c682ac0d67ed, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=14ae78ec35b3831f27a5241bb459512285d918f6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d2333facc59f8ade1457ee49b0b1f9d119953e9d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4719c5faf5e4b523bf87daed6fb4dde0bf588675, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=241ab489e059da10290a0de985fbe2bb029d5c88, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=648bf989542fb12be87d83d62bf53e0b6cf3f550, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4001a5330dd0cd53f93e0953e7f307c76c33a4fb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=91cacf32516685c857f537cfdbde90c7cb5b69df, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=540ffa7b3d351a5f32e47abd166b32859985c4eb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c46a9a3b78297e9dea382549cb34351157676bf3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e01b7601ac790c699c6e91ea27414eb38204489, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=974f1f1a8579f8ee9efffc38dae4ff2ca16d712b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a16978c6459dab6b98a96b5559f9f63912991797, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6bbbf84dab0ad45afbc250ea4e5368b990510a6e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ab47308bf6f6656d395fa54912cc0f1ddc3e05b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2cee255a4848f4b55e96017f0d2f1acbd217ebb8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e3c4975e237c13072000eba2eb6ca132e2421ff, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6a22e689741215e78d960e55ea035cbc4293acb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f77e91f199a40954b6209fbd3b6246f8771d7baf, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7c62debf31214cbd8d81356bb43cedf2df5fbb6b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=18faf61f0ca6a9f84d33f28c531f5f7ccd41b4cc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=73ed248c34db3d8dec5703312cc5c48aed9d234e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9933855ad4291b69211bf95d4a1576cce42c4222, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=82f3e2218cd2b0ea6ef1b5666d715dd70a18f2b8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c88a6e4a43a25e7265fecb899df2287edd6befc5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4051a4859b6aa803887ca32b1bbf052a3f3f1f8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=32d1965916e6d89f1e47235094a8d8f89033d3d1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5a293ab0836fac4e0e75e9ae8f279b39ceaa6e2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=304621785d81b657cd494bf4ab36fb3d6cd6eb03, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e323a61545aaa2020635f44fef7a45040c918360, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c14dbf5a202a8032bfe58578891bac2c77f7298, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=25cc9fcc22c895336438aad2b070e52946c68d85, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b85c3626e19310ea6408afd93c489e329c4b33a7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=50fffe8ece6931b865292e4b6ed1398e2edacf24, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fcada65207d9b47aadbcf58f830ec5487af9a81c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3ca2d15726eb13d4d54843144d2eda9d2882f13, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1896090a577a7344a8cae34a9540210ddd033b9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=25193873dc0a1f29598d4f27136b4af17bdf5503, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb5ca180b43a9a4256252771878b074c9abd0b4f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=66ad35a70af5be53e4fbfad30748e141e572e8e6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ecfb41e347d099975c14ee6fea63cbfd38f6b52, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c233c59b522eea75ac7ab3a100c0ad9b347ef91a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7ec36ea4101662139f3e885324ba06893287b62c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0f498067b3c99b52c840d2303431ea18b8c8a0c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b5cb7a37707d1049cf75cec8ece96c340852ee7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d253b83af39fcd64aa4dd4fb51071c1189e3cebc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c59c64f67caa5152f7b951e79ba70db98e27ca8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d8639d5d4c25ce34f2f195a0f78a3f13367e3c8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=62a93651ffae5b0de6dd00461e1e4a7f170f1e3f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8318f4dd81dc2013f8c974f90c6c47264f0c2e1a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e3f0e9dddea8f89f7dc1d0847fa1e016d61ed9ee, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=029fcfc4f10e598f16d8d90e1ff466b7e9c244cd, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad300d6989df0f842aaa80055bb022aa119cb80d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff0805b8e94c2f55851ab636afba95970278b4ae, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=476e0170207e22e3942186215cce25d36deaef3b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c152042708d0187527aaa8071cc5dfe7ec89d42c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ccd41df0bf43b5253f1c71ddb1fa8078fb74172, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5542b1ce7a41149fc204bf1f7ae6016c04dc155, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6758aa8f5c9b59ac8874fa2518eb692a6d564f6f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=90dd6b4d0f93aeae4df280d0765cabca7409af93, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=751cf1a664fdb8506d97369abc4a970d927d8007, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0197969a30b056d30f447842542242661f16d6ac, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=beacb68edc9296d2ad15fc055f4fca523a9a94fc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=88cfbde936a663c61992a88ae45259535baf136b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5d701ebe49fec46b2a3e9d80af3a6a31cd945695, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=82dd08ddea911dc66d68d36d2dc135f26bfdb28b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=98a94f64247b4c369fc205dff717e4537dafb3e4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d858a9f8705c569886110b546a9d46bd4a4527b1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad6ab37755bc4e8490253d5a94dded6c83dd2cb6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f2b9991fd73ab324dd6d9e913fd3225c5b4158e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=428b6d4a21962a54c75393cf71adc3393c043065, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=bad212a9740089baee4495cda15289da7bf49b08, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e7446f69c0702ef9b6ea843ee9ebe47b21c134b8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4cc687f237ce202a3f6e14fbaad5ab046898e6a0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3eb9f7be664e1dfc0b80c72a1638eda1d5f6acd9, strippeddirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=093adae1d35db9ed34b0a9ee681736a5b3f8c3de, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=81b3610974d61fdf078b6aa8d2c1ed8ab7301059, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0e0cb9b3f5b5d04e93603145c2824bbd658bee3, stripped"J>ox0}"/Bl!Kp"G`mu Ry2Ef)Hi   ) 8 N m  @   & / 3 < a |"(B5D1 F%1Me * <I*%4- %  ='>1!;#H!$*40/  %"P+P*RRRLRRRRRRRR&R'R#RRRRRRRRRRRRRRRKRRRRP4P3RLRRHRRRRRRRBR#RRNRRR@RRRRRRRAR?RRRRMRRRKRRRRRGRRP6P5RRRDRRR-R5RBRR'R#RRRNRRRRRRR)R1RRRLRRRRRRRRRYR@RRAR?RRRRR0RRRR4RRRRXRMRCRR(RRRRKR,RRRRP_P^RR#RRRRRRRRRRRRRRPbPaRRRR R#RRRRRRRRRRRPiPhRR#RRRRRRRRRRRRRRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~PkRLRRR'R#RRRRRRRRRKRRPPRRtRR1RRPRRRRxRRRRRJR#RRRRRRLRRURRRvRRDRRRRRRR5RRuRRRRRRRRCRRRR4RsRRIRRwRRRTRRRKRR0RRRORPPRRPRRR R>RrRRRLRRRRRWRgRcRRR5R#R"RRaRRRqR=RRRRbRRRR R4RRKRR`R:RRVRORfRPPRRR#RRRRPPRRLRRRRRR#R R&RRRRPRRRRRRRKRRRRORPPPPPPPPPPPPPPPPPRLRRRRRRRRRRRRRR R5RRRRR RR>R#R'RRRRR RRRR4RRRR=RRR RRRRKRRRRRRRRPPRRRHRRRRRRR#R R'R!R&RR"RRRRRLRPRKRRRRRRRRRGRORRPPRWRcR>R5RR9RRRLRRRRRR#RRRgRrRRRaRR+RRRqRRRbRRRRRR*R4R=RRKR8R`RRVRfRRPPPPPPPPPPPPPPPPPPPPPPPPPRRRRDRRRRRRURR'R&R#RRRRtRRLR1RRRRRxRRRRwRsRRRRRRRTR0RCRRRRRRRKRRRRRPPRRRRRLR|RHRR R[RR]RRRRRRRRRRRRRRRRRRRRRRRRRRRR RRR>RRR'R R"RR#R$R&RRRRRzRRRRRRR{RRR=RRRRRRR\RRyRZRRRRRRR RRRRKRRReRRRRRdRGRRPPPPPPPRLRRRRRRRRR#RRRRKRRRRReRdRRRPPRRRRR#RRRRRRRPPPPPPPPPPPPPRHR&R"R#RRGRPPRRRLR#RRRRRKRRPPRzR RRRLRR#RR|RyR{RRKRRRRPPR|RLRzRRRRRRR@RRR#RRRRRRRRRR{RRRRRRR?RRRKRRRyRRRRPPRRRRLR7RRRRRRRRRWR#RR RRR6RRRKRRRRRRVRP PRR+R)RRRRRxRLRcRRR'R#R&RRaRRRR RURRNRRRRRRR(RwRRRRRRbR RRR*RRTRMRRRRRKRReRR`R:RRdRP P RLRRRR R#RRRRRKRRRP P RR RR RURtRRRvRRLRRRRRNRRRRRRRRRRR5RRRR RR=RRRRRRRRKRRRRORPPRRLRRRRRRRRR#RRRRRRRRKRRRRP!P RR>RRR#RRRR=RRP#P"RRRRRRP%P$RRRLRRRRRRR#RRRRRRRRRKRRRRP'P&RRRRRR#RRRRRRRRRRRRRRRRRRRP)P(RRRRLR RRRRRR#RRRRRRRRRR RRKRRRRRRP.P-RRRRNR#RR@RMR?RRRRP0P/RR#RRRRRR@RRRR?RRRRRRP2P1RRR#RRRRR@RRR?RRRRP9P8RRRRRRP;P:RRRRP=PRcRRRR?RwR=RRRTRRRRR4RRRRRMRCR RR0RRRKRRR;RRRRRPePdRRR#RR'R&RRRRRRRRRRRRRRRRRRRRRRRPgPfRRRRRR#RRRRRRRRRRRRRRRRRRRRRRRRRPPRURRLRRRRR#RRaRcRbRRRTRRKRRR`R:RPPRRRRR[R#RRRZRRRRRRPPRLRRRRR#RRRRRRRRRRRRRRRRRKRRRRPPRRRRRR#R RRRRR3RRRRRRDR2RRCRRRRRRRRRRRRRPPRFRRRRRRrRRRRRLR'R#R&RR RDRRRgRRRqRRERCRRRRRRKRRRRRRfRPPR#RRPPRRRRRRRR#RRRRRRRRRRPPRRRRRHRR R'R#RRRRRGRRRPPRRHRRRR#RRRRRGRRPPRLRRR R#RRRRRRRRRRRRRKRRPPR]RRR[RLRRRRRRRRR R#RRRRZRRRR\RRKRRRRPPRHRRRLRRRR R R&R#RRRRRRKRRRRGRRPPRLRRRRRRRRJRRRRRRR#R RRiRjRoRhRgRRRRRRR+RIRRRR*RRRRRRRRKRRRRRfRRPPR5R RRaRRRRR'R#RRcRRRLRRRRR>RRRRRRR=RRRbRRR R4RRRRRKRRRRR`R:RPPRRR RR#RRRRR RRRPPRRRRPPR]RRRRRRRR#RRRR\RRRPPRRLRRRPRR5RR#RRRRRRRNRR1RRRRRRRRRRRRRR0RRRMRRR4RRKRRRORRPPRRRRRRRRDRRRRR'R"RR%R R#R&RRRR{R2RwRR=RRRRbRRyRRRRRRRRR\RRRRR RMRCRRTR0R4RRRRKRRRRRRRR;RsRR:RRRR RRORRPPRRPPRRRRR#RR'RRRRRRRRRRRRRRRReRPPRRPPR]R#RR\RPPR#RRRRPPRRRR'R#RRRRRRRPPR#RRPPR RLRRRR#RRRRRRR@RRRRRRRR R?RRRRKRRRPPRR#RRRRRPPRRPPRR#RRRRRRLRRRR5RRR#R'RRRRRRRRRRRRRR4RRRRRRRKRRRRReRdRRLRRRRRRRRRR#R R"RRRRRRRKRRRRRRRRLRRRRR#R'RRRR RRRRRRR>RR=RRRRR RRRKRRRRRR2.Ia)utf-81ebf98a7a392e0991a9d6619422656cf5b2b346b0454a6bc30cfd054ed9ea3fe?7zXZ !t/&]"k%~2_e#ȄjkEltwxc㱣H Sݢyt#fЂÈk?Nz*+\D#:D5y`7i(GJ,Jܬiz*B Gi9_jE)S^k1EdO'fJK*҇"8,Wa:UPy>p,bCCڴˋ-į Al@hϬ{v\{(uKgHס&M)o$0{i$e .ǷZfDX2=v-svc% ]>7 4wզ/s`R`ny[>0/<7<w{DyDŒ.ׄ3<0왰d'F]]y}qF+o1:Lp`4 *.J3{_; HvYn[?I@=`|"zծ;`OkRa9yyDD,-5 쐡pI4+Ъ1oyKvZ([b 2|>@·y4QtNNټ%vEcWӰ;zq4z92r+M) L)#ـ[s{5q*+Mb1QrPK- 2JN`iL^H77@*j"(+S5Vy~NcaB) 6t.]rE5g b]{ꤥoФ;7(R`Ӱ"z@ w'UO]#=@̰[yћ+_FS&5S/33 6IآSkܥlw@z/îr +:ZsZҡ8޿o _q 8037HD;]ا:,q[?uc Qz ~7 ]+2-@B5D.Ij+RPI |vi:M=3"YO =}MRD{iK+;4Vu#-S̳:=UHˠxÃaa; e,n|RM501!Ӟ)+BX#{n|&Ԥ7T;P~4;>xK}85kvqKk78hӹ}0i ӨUSv/iҺ2́<@-WH.Ixcx \gw匪o ֠FM9bwH\#e~E;*,@0p^jBCHgadlܙ;ldREɶ"@^+?+ pUPI4U+&l5S@{u=>9E̾RvwSpC-jkKT?K0].31Mm8 ՟EQ@/ga V4P:MFYk%8&8#T}0 B!"@*\TW;fMlJeS.v*s91)\Q̥H}@q}]SɇSKH1Sh_@;ÞDm[Y*x1O4ŷH&&)^`%ѨNC`ti7jlћ!eLݥjd?粙&=<6y<c"mKC '8G~:CQVx][^Tجpyge q (BڐFo}`ުԬ6ֱBٯl:ssN2q9=q0=rڼF1/ Z'kǁM]·* +%JIufK5r+cUc-M0r dox G/:ŭIjAp#~`]O2pnCզc7?RPΚ*?K|A!q5 ıQ~:VVievUV˶oj4{'"LU̢r0ЂFd"p9Uλ,lmVzVOĔE`EYI!` 7vhWq#B3$ B4QHw48*\^FD"JgN꺃="#<'DLEa3|J m+n3/\ aTd:%_qʺ*͞a]+IBɫ(3izƖwɰHf4#G%[>x5|zn#鴀1pM*ht.hެdB2cAK0Z(FBu#Z%9Bl_7;0UK__5lNR> ѦlO ~f*t%.E&zmj_{@>C Dգc 6Fú/ i&#óU?;u'}tuӪ8T WReuuIZerV QRKxhE,B%i Ɵxtش˥@-odjܚh\7&SG,?I#WTrјHMXpZϦu~άQɴ A BL)"L싛3ؔ foO% RVA] Lr4٤vZ ߷ HtAqsxGb0f1wz0^NW<ýqR 4L?Z. ɪ nVj_R睺˪p.3*א X0>up6hXlUϸ{H*9_…CKrZrܬ=eVW0=+iCڬCZYZlѲC,G#eN2%hJq"[Kkw2Pmɚ)^ѳzCˊ5DRWEVH8eB;x_V. WEK!yN„;~tpL"#t57쁰+B8:\T` S^OÂ70ԜMtԫQ(iہ Ƨ~nީeGq砆{)Ju"GYڌrm^a}G}!evXTd9=:<hc_a$S '91z". AXoT|ݝfn?I[  Aw,yAyʯtۭ&?67óc -z&bKyǒhH'Z(ǁ~]yQ)Çhr*%h>Zakۗog/գ5s)1K Ԁ;~$~uī 8t@v1:[슘xCSe7?:g 񚌝fG3`!8zѷ"TV>@ZUCEM!rffh͑U9&Vtu,!d3rVL##q*15’}ucRv.v#-0̓o2`Z H.B,Dt%FkZ F fbГqqg5һ,떟3(I-S.*(.#lXa<Z|S47FСC-ORQ Hd]WU}ݡ$NR7 ǣȫoN*m+\=ݵ݈gMf`%911('~12x( +)?2K+lڗZNa =F加A<QZõr8*Ntz"➞X)F <$۫FC1.z*S\_\f^8}cphH%*LOgߘuc,.6"JswÆӾeC1An_>Q0?+PhlKОp8CYGV]AseǼ>FSk9zR=nڛ+dK @MN غw 3brםxx|H} NVSd!@s}J$ga%<֫^_^pBr?Ǝ +cT,$.k=BfZAq`"̙0Wy2;9a\nq#ڳ2 /*&*ԇ,ϠsEYUc$Yb-lSX9<~PiK!eVc[|s* < $Eiy8 b]*e>'VkKy{T]ÖFܾ|QE(x^d=$bτz>.}٘e[+V"7M|aJf9A.M\2 s􌻻N;bYOS 3d 6:NI tl[ae;_Pg3fx?S[$Q jA5y0h'bU#.4=ZCj&`O^yBu/>eYuAѢaǮo\(d98T9w: M/Sk0,˔$=~;k%3LNRMeKKU$ݚtG{З?!8M.mV芹 "~ cKIZjd431Z9xר4wȇw7TW*+d^KP֖ YPBׅx1t+xe}U+ zֱzhE;90cfќ4[yGj)BR#F5Tn=R^3Y%NBe;cX~\7}h[8m%/^+Y@vFm1o a nJ;{AF?@ONQ#JXS͞egR9ĥ9g骒J.u|w-~ᱮ^4M|>^Cd>8~u9|ԑU sKF_ph|* ,KhAAF}mDiSkD+/$9ɀ6\埥QWFo\ۓ#zKXNxb :& 1L"NEfwmI3`y{Aix-3;Q},\BqǤ ;%[ -d* &+Ay7! X26qk/.%v<{^O A5J$WTMmH9rQDXsi4|B((|.Ugpa'xC`2WiO|C%b!\kvѥsS([ݙaV.&Xh5JFƍAZQoԆH,dBᠻU{?ZkcҦ ,3<pTr,vRyooH oĺYF៳Shɚ<ĹMɧ$E}*WjUFPqNЂw6UΜ6[(Sj8)0~K!v֠i95a,=1,0HT0'XwxF yxhS;ea.:Kyˆq89הVڌjΟwa3<;vopd Tb'8霸y$2zm2"h7v0JRWb{a8Krƅ& Qpx 1@]鷗?3IKRqEA[䄶7x5 RZ;!!,(L=:7Hgkz lF;IߢG<ꬥmP_&o",qb*^-L, 'H3!6lFBo' dvAAql1艻Yߢhm,vZ:=; 7&d&[ %"fo?0%H`LZm޶)kTCǞJMq΀IJX8 CPՄZ9䖟W=9Z*9QWW?LÚ.B81PT톋<)p- "a/z)h)m۫IEqىprІ܍IˆIn`q)h[~7+ȔL.󡳟iB`(7̖-xi&?_A( {MmNZ}$TDI+qcܾMlj{op̒ ogC}~FV 5^!%q-1MȎpNmPR9@(<,fgؘGE!é/ם#*=agH ex[7uILZzc=<;]Ҧ\abG}}U{sY9]^ ԗ>@q|#U0W);6^A5eyC -A R׆&5{XuQ1x h#iqU䇑7x?'{N署?C\J5}w?Fx.Ď+Vkk`v h L*]LPa>i y('}&/76]/&^JܜpE&Rb5ͪf(1mG^nw /u],$]K%{n#lD]"4tA%L{CɛPM֬ҳ>ç*CԭFSTjE'#l<)]=sܵ v1'fpqZf4QҳEd h`f;ѹQo@7Ũޗxrca'slV০"kbZ Ӥ nSxdZ獊]Lah78RDPp p=f>_[]Meu_(EB.÷gX6^& H翸 ԕE"/n`Fڰ]^Vw@uIW+BAPD(P VЙʸK^"|3iG)E/G=b6֎ KZ[#Gd}t+\dWypwCwhM` ϛС? UFamQn t j`ͷ=CހYwdEpNMI˿": J76[X+θY0Y-ĈOD LOw f[3G\d2 oB_EZArjhdpZfj'Y)- eE|hx2o$-U]M_oc(@}hK" Y%/Y-%xbͧx=iT5!caoI@_R#0c߳4읯@uoebpy$ą'"q9<kqNgT[ wrf< 4 eȰ!d4@Wmw?u]bt/|vEjm mݓ&xuh`j~"3u!٢wQx5LK9l&M*F~W?-H!_I,j`Yꪜc ˳g};^/QUJT!U؉KBj@sJsC_,8XA&oo+BGS#+sVT:t*/-< ) WԆmkAbhwΤ\,m~[<%{Pp3"tKaa ?j1f6; 7k{Y _XͶ:Y 5:ߦ? Χ 2s i]x&g\DJIFT⊅:<% _ 1v,]ԐM BP>'eIuN# 7Տӽfn/rSi{)۽]ہ _ {\@v?Ai>ڦ>|`Dy?sTz UC 9uUO '`bTHMJӢ?ϡǍ}g JGxTekb*N)@ϥ@>ȩ{fqwq%N+ނڶ K>$=_,c9{W THHNBQ…d&[:#ڹ88w#+PW_NjI2HUH0 P h\fy ' 7挽VEw`=P]tn_A 7eI߆R{ Լ=eYdX/1 tӠ]Ijh,'mDn!n&dXG+v+JcKUVևd('C̮)v0TTT0V^SQ#$N PEћʉ01W)TB qZ疕>͜!z;.F~3 nVIwX{?̏Ũ\cޗ-10 ϐ;1Ę| X/_i=A6,4Jj+mYShy"({'w+JcױOGR6ߗ4KZZ&Nq53N{kMҲ/}K}f^|ͬL;2c~ߍQ3_+YO&DPր,J{1C uJv9|}05 nK.ZٳP'{Mv[#>;C\sj\ 0G"e<#I Qꐽ 0}hS%dX;c˲ >w8P}zlU~! R\o6+5)9*FFdV\ך9X|Km_+-,~LFΘsUS_zNXQ|β uG1yÖ-z+ !թ%+ FFKG}*z9dLZg~[;8R/!pMڲ߻P1aDESo669|GCQ#82m pgs\*i@%LxKJ56DUShɵ^@p<ہ57%a.)X!lLaޏg3 jB#BtHoSydXoiΣ'+|bbpz< ‡g~mׯk4Ò=#nˆXJVP])&z~qiˀ͹l@j_&$LFL;h7Dr/9kꮽjtVcW[nv&",+ԑ,~az}/6NVo15 )IQ`pxδƒUܖӧ@a4F+=0$zraG~Z#p͉|w ;znt!}o!˃AF;CO%DWVhb%ڕ7 W.%XX3#&马}VqbFgT,,G UѾ.`ddǙSCL`,bss .+P NOq`YGNOT( cc[.ȣjN@!n?PI״ZJ܏ߗ޺DָUܾ֨[Y`];ix{uNg<_=uLk^iw&lviW}L!"kn8`ڊ@^3H:wP N[l+3ȓH*wORBNծƘK5}hn37hy/8FϜlɱf~Ɗzw3Vσ9&ФhDVʴkKF}kDw{b(}vWH,F$=EіąS 8?;Z:4{׎ U_~YGIa/^{|T jWX8w_¼ȋވ {mSb{G#N6c7^$`7%Mk@vټ#B{E>[~8We=cj c-D XBG^echjh~\cIȡ(m4!&_*}VB'$E0UDZ-x8ec:+o0~$ҹHgaNYPgu;[!D؉lф#!s%>Ǫrn | ,VمwD9NnGW਷{rL,|[s6f=]+8ϪOt535@5k-ϠW\kN?m~.2nfkIt5_D9]= ߔJ{T$ btfUO*-1j 3gOFj`_eʥ#w\||>m}2 d+c:H8CB9F~fWC 9JfLtzULA>(O:XcN#o:UC̴^Z\U~PdzVȃ㗩v@7|Q8w⣕6j\QCU;k @>ts \{=H+<"{FVCd*Zl% 0c-O 2HF9?aV^v2>euuVs]yWf v4wS Aʦlٺ8/`Q"gHt*%"AB4Nh567n!}bJ:U- M:1kD.8L^ATz^P cUX5fodR9wg'8&6%=6Ucu۽wmL"qÀPC 7M*;FqM +E3-m` [ Ma΅8ZCgA} by-E>Ǣld!_sa&p.Auk1B濖U6D\U:Hv).LU=^㭊ҳA+FK#e&044 ]Ϧ2Z7| |-kFIB' 0~Udm}e+7ҜjEY@ Jc:rIMUO[JTkvEk@"oK Yq_I<.8d9 e0giT*7};IUX!+vUUu儿IlMlm1dycN2!Ajђ.J];תkInvzm3W'8EgXj蜩vz=j⋇f3 b;;۬k5g$4bM\-즺 y70 bBW˻+x{Mu7!;.S,EఏA}7o ~~{gh\IC6ͮ{Ω#` a~ +l=D7wlZ ZA6M-.5Lu (YIp"}n)"62cg% /$Z{'8i@G7G JWalB$ ǼC+p3+ 뺆C?W-_IGφ2Uv)ZLeIM{s_f}-oz rTqY#\.$rߠhtE%dZP:a?G03aMb 0q9h]/նL| yzvʲ5ɒCp: Ǭ^C('0Htk5MArhTᴷR Z>Y#OYqSi9~M `(( }:aYhI>q4UcW=5é-"НruAd֡ℯ_㧿5"Qe\C?0+N-P|}dQGj萿kUB zF[[ʵ?h@Au'G9ɢ"fwcz<!rk;ނr'bOdfsJW4 I l?.iORYڃ:pZ㇃1X2}/=61 \A Lʓ}K GNmE k9 At I+ج+"ZcqS%'.1:稏K$] zL)5YY||N֫Q|/xSˀpvd}h4,>͛@gul! E~>Iin4F{@L}#iTIMBL?EOXoƀagYq_#gjwjG7a~@ \+`d6BSNK%?=-$(3B4>Y럶BgYjԃ߾jrB CW}c΢uf̭ԫ(%%?Gѣ"])%O6eh^D42='_E00І3zqp/+N:w*euPq)ſN$%p^*wE-!g`޽{Բ"~;ݨVsVbc}ge0'0a f!$NT?{ڰ}}59 };A.s~գ]K 8bY`AOMA9T5%!`P@7>0WAn,NAg13>bq|!2#_:r@uPS:1s$N# vxh.N8l.!g}4_xLPTh*鞨l.w~:0b]t GySi-ʏ9I` Hwa6A5J\ELmj>oءh{텓QU|'vdޞ*K9YGSX_3-WuIi3ppᕧ,zbSsXՁl7 +:e:@ĚXE~^Ձ0x^^g#KGB ؒZ#zz}V x1 mSg {-F59%AKl6vZͳb,x>(| #dΦBϢͯ2qRL]xYOn ScI*$lcwu}#uZkod H()QO20`N~ ~EZOtLG4ݬko>KzVRe6%=e; u^ׁdfh\W5țEx~ko+SƼ"+\ɢ9JYPUݢMV畚.Pݲ${YJjVn@uv¶!ZkR O\SQފEhhAˎ 3=r/;?WQM%J)ˉo@|{`i6j.;!~| ,7}rc⥓*B0W'їnq[6BmZq3û0,I`:qXսTΡ `Bx=\F?QCDŽwmS >Nw_GFpYydvBBaDj\t*%)sVYctO~أ}ZF-fI 57ĪZ h*g:X6鷷rۧ:]sa0,FcnH f{)7/50Rzd4}ӝA=da_'P{[bZtQ7hӕ|;*)tIa|ڡP׷:\C^jl?վ9M쁒dž[q}¾3p\wtR46a-;ܼp e|0 xt@0ף]/$O1>P Oݸ2yAMjZ[}3MmV_ iICE[Uy]%}|'ض'h\)O?6 nt%5h]ԕ\3'@7 (;LL"1|)OO~k1J#P-14tC:IɶL]  \̱%j;BO렚`D0E.$#"cWÛPԬ< aO4BFf`CuKRи I/Ei![[Dq cE;&6|*3c  kbw]p{b wP#V N`_L=o WE*&-gԀc, #z앴'Ԏl @Hnd!漫Ϩ4gЉ'eh"HèN?VL|[a#V¤65@Y0MoP3>m{ L[5Y¢P&U?E]BJ1? rb*.ðmDVcbKҋN7;#k5KLb7Q~ nzC7%c^wAhw ^QtaF_(mDfy>tC"dFNMY!/]p|{zWG)񺔡Y?ڔtG(f )LlU0dK*` RE.!@5cif̾VlTāTG(W͍Ҳ*@K'R(z}5_+8R\F]l7M )қ&Ǵ7'ضӖt/xї8ĘlA׾?` ڼۿ+<3[e4&[3Nz5?1\y+F} 7б^r:gl*hG̽pq#S[2=p*. >ݯz aٓF נiz{zn1to ".4i`ڐe]|F)U"0=4u}@c|> #[)ĎJ~ѱ='p(Q QZن=!Y_PN>q/V ;=%TmE)mc@rS{m2~t)x>w m`Kc[ܪ<&2i]T´yc?ZŐA, OXs L+VN .X>7ɋJ&`)|tR1<.^L}ׯ4A}H]@ eU)at#eV'?@\4T̶u%U"|Ms1ž_T@eec23؟+2GːASz݈tR0m}oX'"g+A(8ay{ʣkEWW_x,8x8@AgENYҎ)9" *k> E:>:S) n N=xZsRt,p#vO8 ֩%Pj%FgMB,Xcp\GtV|B(&?5EcB Q@3vbMٱ⏆kilSA{СʓkTɏZ G؆}F$*oc0oTyp\՚^TEtQV37|1C[a\FB@lmYKYԩcEJ]İgY kEPa*lB.-:qۘ4Zqmzԙ]% '䭬OCsER`Y*7 hNK;l>r(b`&z=XCu&vC V:[lz\&x&+KLC ɲ5m<9xnsyQ"7}բyͷ2v A { ?["KU¥7Ve_Uo}˜=8kZWLص,<bRyJ.k.ԋcm&v &긏?V_0^З^ V 3㷉 M5^팶4G}Jù_CdH) ?_B/v/v4Z K غEZ7|k\u(HnO]WKnG~I6[</|Bl732('FIUOvz[`qB Kק Mx :1枵*GxvlNor^}#%,%:V3kNrq$ײiSEYx -&.~+=ajėD^yBqjCgn+\1EdPa Z~'V]q[cKrd<].D n.Q&zؼ XpQM:]#rVbΩyTT y̌vNv07Jڨdy)\4A5=;VIXD<f_"Q!3&#=+x+ OWp[ x S8N4z^|c8{SW" /:63bϨS&z3"I3,\'o\dGR k}pRiH,nŰf֌um=! "JhM56.K-Ǚ4HuOo~C*9}WPzs/Bb5 (逜2J#a**kl8Ahg/݀U1^{,ypGLjj$V 7#tEk@`p7*mz Ϸ*~TWS1\Ɍz*nU?IYJes4 VmirLOϮ.\OM)o\l\BV |aOf_m᷵h+Aܟ[T.a.I}ƇƠ q?Bmmh#YE?m- *줃ʉއ$.X&1 oPh3Sm9U!yNb0, @U#mH_Yp)*!B?1t~$D08nQր9$}fα..B1A%ezk/GVeRSL*i0ǵfKg7:7ڃ_Wx="k\wnٯ%{\ BmNy C>уC@H!ţq~ -1T1Ƶ#T&hzU? ZJuGM6 "X3`Mk1>tFRo A6t)дcT*Mw /G"iTG# k'w/SS6hP!_ >aCWuq L=n4RF.0|y(~we>CBp-bl)u[WkQhvcy##4󍏠[+7Shu{9 "NgB5B帮:=?4VfP,֒ ̶3ՋTތƻ2YU:~a-+5W;`P6ظ(û.t S{Za(1bۄ459;x)CUbѤ YU&n dAR`?ӔC;LJ{Z< ꭧePu"Z@;g[3)= nkk/A4i@iіj-Ո )"N? (bT] J$o].Bcn -z"y>Pו3~D:E#ӹ\~bݡYy)w<]%@_/#'moH}RMLVL\zu V*7a+~?ٴEm ]nfp ]n칞:~\2g~5)cxح5u|#\264~|}u_v̚ 5@;CAtGo%7aN뾟񧉠K2as,S z<"Py>2bZ޹dT!O3`N<+ n:eUB$jPlťIu#H"k 7uU,%& rik6.w]P]=vh2iz91]{bP,:{H{4 ]',Kְ<<̫(cw̋e|릈ͪ_g80P}slZ RE-ẠH&3"|@,u^Ս8 BVbxՐu+k`h&X4wl榖` .&SvwWLCɦ߿Н[̟k*]r 1ɤX7"Ie**!`sV[ybA.WD y@;$bGB_vPM"VdU䓶X)dΤY5zOԁĺiBq0e"ˡj6FYZ4>| P^ͭXE8Co[G@m܃|-$\{4&]0opTg!<,Sz+NZqTtq(_mU ,iY`ja[dVU)҈v¹>!|@<<>;]gW9-dOבT!^}&9kJ(!R?7E[<:,Yd./"զm[zӰ6[Ǽ,Aw5dHD"XogVN [Sn*&;:<RORcwr;iPW3N +paǗ6[8z ccu("3?Xh?@V(o.ܢ^D`."*J;it:&; Zpf!IH ha@} 9%7 KnwGQ+n`榋^6圮8 :jtjIܴ)!_QQCƘt~dph`mKmx61bˢW^Qv`If7aF|>{J8X-3@J*ޢÞZUY_uw6 &;qj. #AGc*<.F}Fe Aj^jayV'<f"dL^Q B:0mMt2Q%wGChlF%GbNK1.ub-E7(^SjJloG(T6-,SdDXL[z}P:qD%fvv7@84W1t >YnR*z``b~0!ej!)X`/%UЛr$~YD㘫xr[:0]9!144= @g4 zύ(MarpZ_o}Ui\t#ɵGx~  }k/8]<;xQO$+ǟ]\GW%S99_"+Doˁ*BA)eBJ:IyzPţf) 02ď#xm:@a9s$AL{+@Fq1ׄT)ա!B@|=qD%wi:Hv5 ⎂N*NwaaN3~H% ";}7ۙ|%4?;! F;3s?,ƶ928р0 n2qUo$NAiUiM~AȭC͚coyA*qf~=,W;N !zIQHP,^Mg=ON_YZke0 vc_T}f%iBWU(2/$:9~C>VĢ[i{e'J6|rvSkw\hZn{#"l{6js9zN8-C[hWtlj[|~96z<*+3S1`nzn@ތ7HW+IɥeMT; XP4l&DʐY`Qr񐽈z|ƅDVl s*TiM: BXLP(_PrPd5C@r,lUˉ<؛v= 0YSђE*?z4`㼡i=UyP&s]"Ox4Z H l\0>TIB?|p2vՠC}RcXrK Gc18 zYE[ۧ9IIAljݿXYGKf" zQtW Ϸ+DgqOH@i26[\:v{:\zgrY.i:qC'`щzդh.v ڹ#ڐq3lP0T %YBYb vȂp{ɎQM S,샳N5=fmg5Eپȋ4:tdScx ਝn{}[Ck,psa\ z=͞k5+{HOQqKtDa w/A¢:GعSH1gD^-2E z֎qW*5Tcll j :TwѤ}4)$EVSCB tޟL;d 'EtZQp_6E^1sR w%/c@vKNĽ`K0/b2-z((g8xs_O/=}fʻfƷHr)t 5FdV3; h,ЎPR%0 `DݐUo\<Y6B (2DGZV)bܜb[`@Rz4sYo  fc/44!CCE[ F묠Ivk\ ΰpv5.N8G` fB:M3կٓ}>+ᤫܪ8ٺjBg/b9~3 X3ϴ[ljL(-XqRRڸ  n,w7yA{,D5=yCVb #QdXr6ջ^R :O>!/)O}`{fH]Wȶn#  v名 >E7bBR*oρC Ԥ"6+3rPr":@"cٖz~)ÉI6TiOj ŸG<)5U(4n7ӯ Mz&6:W5 o`BY6 _>}) U1` ܤ"Â6cگ[I;qri;73LoZf1N{`M4Wx/?` H'ћjx~;: <(LZ#6e8-,&db-J5D ٩&wa$ sY ^\(bҺMVFW5Sh .P0bHK|CO 0*|0x<:3NcU !'3Ew[iiH~[ nzaK^Qj5o^:1J%1w,ȋTRZУLryo.q& k Kz2/-07<klq+dU]ӥOVa⃪nl9vǔ =+2gi'J]-D7rFg"} ϱ <=e5KdλW/auB wʻ 6-#vi$Tg-ctFViN.B ;g)XRJ~eEj].X5z|#A&& F ;kW$ApeT ~3ڊЈ8;1O h0k(yփ[mjZ?Wqm4 ׄ>O3Uq_nt!璾Rgʙp2o/(¾l\vQfmSSpt1@;Z 1Qz. Xolx<2Cr + yN ggq66B{ ZDVZ6NLd B)$iF4lΙYӲ8,)Z7e%)hqE<M**[paJ<\ݚ!w*5̟9?1[y:"-{ۆT~}Ggݓ#@$t)ҕY1Zp\d~yb o/UM|('K~V;3O톇r\9"5u{oGЧZWau<^Ka UELo"G_(?/;Ʈ/=&3g*Q0nI&C$sYtV$kLGm mʰI0 f ˝G+ S, Bd4&x~Y2T3Q{k5q' УcŘ3w:ᲾЂo ۦG? mZ"Ec8ČZ[d-N Q_< bz P:'(ƪj$bgRͬi(WmcMcCcOQ\gE=^^u!ԪX܇v0`˟hz!0 cݫawo`Fu@~'1/_b/ӛo2*ʏi[ߕ  Mmhٷ(g )OZ"{aXqTkQQf޽rxmUhk>Rr 0Zn#Q;֋]5yb/'ݠCl|pZfC[C'JWq@EA]S;b>tD%<'^ 3:䮛{n 'o6K,0swAGĠpocW!GF!_i#t103|~3¥ ah\fsR#r RC7κP:"~э/bJv#눈'q(@jAC1 46_/zȧHq+Wٻ}p71jzdw>?gx35SE?n&VUlBwǧV (ۃ@x4kNn: 1h48`1eӗE wyp=s3-靗/JDU9TCn-KC*A[r6Pb -In(E59a ג\PVS[ygN2`7_h'F\YÍE9ޝ䝰#^swaW#U P]'*׹!0n-{Hq4JZmX@xoTο&Q5DNK&RIvYש.o@J-`N_=e7S&(o(=\pϩ,L/z99OY _+*vsLEi/MH){6^ȟg&IepvߒP' (pC6%B?Dqq9sBl!9zWvҒ,YL>{kL3f-v9S;Wl!_:ÆP"3vIR"d+-"fɊtu7פD0> G_P 8Th>3Q}~ uѮ \ ݷ[AM&*EU3_sq =1RCxF S7Ԩ- F8>g< SSbW͢6D6tz&lP%^6 vh/q,Е[q9 e2[ H!{BᙷjAWhOhKTo㳃Rt4QqŘdtwH<37a֙4z>˖^Udʧ ^GuF~e<9aj^q>x- ukk2& άHBX0A0LIAL(2@ vp7Z3.wým A&s9<}%?bpT=m!%~[YJx:*8џ׌pyrIs_+&r1cƐ$f;}d&:Be%Tp8$Gu`ZkKc)՞= A2$1~'^ޗ:qu_i]\S`N!zn2xe/!Y[*@+QYon)Tȃst;[~Mw~: 듾"~CKDswx{hLa7}~/ljs<P5Mk_TFƮxdڳ6:FX1#S}#ae9M `Nb6ׄ'\-8( ]c(~QWŃ1MCzRtk տE3՞ pY_OCdB6RUh@s >ZTA \kY+܇+:`ךYwu?2"xG_/d>|Qp ?ANd%NPg DA$^ p3347T-C&@Y(K2;MUh\X|kGj]DL``2P"9/# 07*fۦT2+\)@Kg!`$JތR6הYc(¹CkR!0ImMXz3">MW9dq.AAe],Ci|81~eCK7a:$\_O]CRII/R3ceAxQ6đ,0H\ZYˀ0rRmݍ-?P=-I9r*YBd%Ќ5h0 u/ |S_ʙpA1&ym Jbȟ+c%KW1U X4 rX"#@t4qH|? NW`B>#ng#X_$hm/5qFɀ;ũ.f@XR@GjEZ $nY^o+_IÉ>3k!]en"=ߡ)5m?┟22P"<e"Ճ8ӻP-{y@ !&޺J97?nM2*Єe2l'>%F@j]ËA +|a/wz: G &s5jwwcl N)9ͶNӻ mMeh8Pʰ8ю[$Mi^5Q[/]v>&uU05 ^@!f:;n^ܗܐ_ .&,՟#) ^zuÍ%qd!PD5YW i1\<9̨(؄ F͂BcתMi">`*Fj;YyӻǝU!UiNv#r4 +oJ}"_wxi:Y9ջ[lB>iM6wR&=GPUsAGQe8.(&;1ϵ`'c4Ԛ8\Jg~o I؜uy{ Q; gr;\[)ivb GtJȿW6Tciudx,!ա-: -P,C!a& LB#&s{y=,]y뤫yJ9a]|A8Qr<5T\P#tz/ A]?.?/ZN0ݡF"75lz|*Dܰ@m3O+;ۭb7]$Yr&@1GP=f[v2BU.nn1s\nrw_]j|0o_ZԷivNARQCau1D{_#? h ͸2U])NcςU_(2R.jIT@EUC0{J%w#yeXJ$z^?JuڱBUxTb8ŷb,uI7Omj~GҊٖhpKʒ!!r=~v/bPVqczTNC-/ yv412a^Ya3sꆶ= 2$;Oq4<$mpW tbK ?޴ST!:+uӛ&3C e٥;yEz5p /5ӱW"a|4w%2_D䫗Dy~v;Gx ,v?l hA32 vnVL HF["BE(=e~ۂB x(&~W;N03{fƚq.j3(csInɻ"@`c+΀*&iOhpNNn'aNkX@ۥҶ)?z+QG)2L%a.;\|ZGxWKgSOY6VmE)~m Ox*C ש3`n-3DIGEY"S"O0/w \_"uea47PXtH3J*XV/IMH[G;P,"AT!XA&Fj%f@5S-~ 3!r7ը8:Ă{]?\xtlych_`l8"845܄$ eԖ-QډϪhF&]]ц(!OƘN(cFK[ ɊY3 MR^X|"5ᕲg{ U{n 2X:@&m/%y6o< r)4O2x%2dQ| `bA6`$s^)Uv! #";D&SC 8_OG?ͣl:W0E~[ R/c!dy;e2.Μ=}u+<ڜ^ ίz)cC*E6aW*4M3[CDqN>XP-U;x6W\/_,cv[ldh]}؁76}qȑFJy@Y~f\k qU(aaga0N,Ӛ ]oZwwkPI ,F)Wq-#iō'մ@q7.9Bcwp#N,Z#Tb0 걤Nt (x,o`]pa )HN*\+]c{)"w5!A{y>.B Ο/-_cUZCLp@N F2ydNؗ2U]ʎyھ,hH$P&@ G^Ơ4%z}^QNLBkQىw ?KR=y ӢytRc !2o'r0"fykB|_"r`a$We; GYt7< . W] uCxȿg~d\%~i䣉#,?OJRvffkij6KIv_~u:{ WCe8I->t]`ƬNQ.MNsC|\>م2uST6eKT==^58ۈ׬K"?xMROEٯ5.za v|S ]8T V&j1'(sOi7 jel Cd5!C|bUoƿhhNK@Y*9Fsxb)ґF̪=v)jRd~Z)ʿظ~IN"b%(i2V$n?[\~ >t7V6X>f0 j%*t/~i{6ܪp9']yZ?~ZIIH/ @CYFU'ӄtux$hX{[geZɾ`.O+)ur8+ÉR3.'#D,EV!mRT,'6r).0ۅ̀7(\7Ͽ#|qDq'nܿ]+B0Mk]΢6"aP^ZeJah1] ubA:_;[bܭN.>KU }땫õ]q ہAU'7jwRTbЅWgm6T^ez [;uj'GUX78As~ZtD!Fw*ARL|neSmnXހ[&(:|??{_EmYWHU(p.…yϨyYtsO#FyB/^iq } >kXm{ jefA[< |v04W}&^e8Đ2Z9oKf6bJ^/hjh"m޳]i]DvE-]7Ċ.-@Z2М/oM6sx>}>@.S YuY Gn$J$ԇH<'$r˦^n~?Wm/GG9Ϫ>6!z3@0tíFM6J4@pJD/ |/ՠqR馥7*hJ٫#cŲ)Eum:CR%)'!DB9; $~ :Jy:-FH^5$4+Aւ:M.J᷆dWr9% I0,j:ᤫN[}1O } CRQ 粩B ʂ)!k tI!SMφ3~XU{գӴ֮3㼎 {{k]AWh& _Gܣ.d~R0uGウ'Nn[$7zI]!vm $5v 4V;'D!w8-xYO߳KOL}Aw,zR˦$O)P]RIϞkQevgδЄ<ڢWn%OlxɾfVM>xsdnÉܷ<] * Q*̐wb.Kh8)N⩪Rpꭍc`5HXMexPY\G؍.{qL)( CN$0F5W 79s=h᨟Ʈ5ЉdUU ('N쨒p!U ?,t> >_¯E58*I20nk%rիwIJe+s*g*)6Vhd ؁ݦ?S(}-b{_ѩ@\zѭ׾ix `w uzt@v',STf*U  ͟;K;:rztTFwl:+̻9s:Zk=˹;66T%K9ʜh&8$mר.zviֳ"=qբkBAkևJW7-tSUwX`uNZ#] #a+95JkaiM 0ad 4H̢j_C#p[0q GA5Ǖ筟]Y4D춎X~U(iؤt ^q{j[`e!rX.CxbQG0U8?JXM"1XLtcLʜK9dFaysr)'DV* ;'&7gCi]=9(X=IpF!Hh#Ŀˎ-Y˒uB !Mԏ)49S)R]aig`ݓ-wzEVT4bu`\*PXGʞfkH,hͺP(>[e-vCQ,e+jppE,!ǔJ?3v `Qf֍ 2ZBUyHh5?sxbc QJWM6AZjŬ?Xc|XHbGW/`%J7~[?(K̞ ݊:FuSlzΞ<_8A؍r>?JU>${|2ms0<73 rXIهqj GWt5{r}sgCHexT2i^39 g@J7t6n\)F' AXD3?XiPbcoNSWpo5ayzhQ(|WX.TAݭۼD6-ID[>.r/4 U٧ұۣtP'+x)gS3~xʣN$Ƙ9r"a*-~5Buc6qR4TV|W$40Ey0n# T?]+N$r1T4 dS=bfDᔴg=K+{߁z(ܺQtͳ/bD"PSME8:6g2qŵ~ChnA?O\Y<{ u9~s>M>n#evkk eyd*Ӑbʸz j&1%=E ];F@pȌ p )T|)R_](эcyPf 4w]Kcazc݈|*}'Wۀ+tg==0BuL_B_Df}~\p2^2;R:E1ǃh^ǰU1C $T#]נ:z@ĬuϏ$J\RjLdTwFE MPZ0`iz(]% VdMǵt\.3D`l;ƪ',`̛( Q Zczx"i!x?.9!-  lHޥtQzHЦ*M*v'y􎄰9&ܪ'h 0 LNI']54qxKVԣn!Q^^Dj[d/_c &o0ofr;c[q@vU!jYpY"Yw'K{X|7@$Jec?JN3V)66Az)|#g98-V2uCѫ 7fMl;tE#`GmCZv0I\ AP1G\Z;(If[UhLPC$>*Br`J\0fajv+?E-HvVRw??r/<'O(7Vkڭ=v{m]%_;?|hT҆ k7Oa+|X~_݄K9#NY rQSa,H._c΀XwOtG`oV !Po̯ lLՔIl~F0ywM1It3>;=֤؂!j2BG,-Y),VOl9O/*pO:dGk`J;o ;hW]r &dxm$+=vRw/c]Е@NѓL_IzkVȳ/D&TI⌬rL̻‘qkCzaԫg}XVzF[d4X<$#wi#^~o7n"a:@y1g$U\ױx aW"]mQ-&'jqKk 4|6[Ze+eG$'2H}V "L^Y⨜+.C2ޘBi/)5Җ,}yZDNɋ-b0Ze؝҄Ӗ %$"Hh5pQ9N:4z*Pw):@pBt2+ 8K -_I0`)}['Jz_`VJC X}L\]TPBU6z[M`Jݥ.Ю 9>V4>gv詎}\9F$o4bc.f7ωZ#ްh Kq?^0(Dܯ$qԘm ?+*Q˹x /\ S;km4~|I&v J Y. '%֕YP|dD5<2r#oW\0#'j;I~n2(S֩[|}.D{癩FO.K) #(u)N-XC&ӝWcst@!O~27Ej:.:fҙU~O `?Ka]%U#v!G@O͆X-j(8+}\(z0t7"W2^jIŜOPYӯW<=n:z-;[ Neu8a/@)AWy[z,U^ Lr,NvV`U[b?Db댓u}^ͽlbsedʖ h|Jԓ|e}!J0Ά7g&$nŪT8]*!y >![tUm7IO1}Vm =۽[Z'sK`j*[!vbܯ|pTT1 ^9#¡ QPN)St`m:4 MOkjZ)w8R"{G]V*h0wշ~:H>O lQ/Rӕ !l7R"긓$٥R__04n>m30veg@Գg0I\~̵87g/[:-q: {L?E= 6 sTYe|tk732 cj=iuh 7S&+vtj~?7Ήש"G=0=|Whfpwג"'(E9w#dqz^c &G^43>hj5fK"^M-1(\8DR3.ecu*~Rَqu?R1&Nsn8DӜ-wU,IMMnnd&1ߐH7>L`쓗} K>+b h|Z (6mO <=eQ#CǞ9N R`Oojb%p(dƦZGP|rr5A,ȡ~=O(U6A;7ޘosҴJzzZ53ʥ Y-\ PxɯtO}rऩGt;?]/m :9Rb#̺f՛uaN@Y(&,<=e( D}p Fjϴm;Ug1CD͆ ٱ̏O]oBO? zƒ\DWыMj#Gj p!GⱾ-5YI]`xEtYaR^-<(]'S xs~V` lOYUC6{n;׀%  ="zTS c%šcx=<1 {(>EI" ߤv**1v />':ROTP-ʩcApho%eqZ@6Q&܀l@sQDz4l 誕˵djOshovk`Lݍ`hC9)ʛ6~ɂS Z;dy)@IpTB'?~`͜e4վ%緂'ج99^.`)#8xؚH 1e]/Q~ {fn=P閥z5d"ܿO/ÚfcyB}3ߴ*{ <}w⧞l -A~h,OUrQB,`~Jɰ wN DCgOfz .Sk7(,4R %$wv{fWfw]/DSzUfndJ} T̀#Zmvvs ?<['mqVW:5E.aPX\E㷦|y1yyR8Hf҅FwN:iƜ[ :/8&w?QO*zפZum Bg28o/-:4ހmM: aj?Ix@ >Kif ݿK;R}iFi,2IP2qQIϾS@( 9^SUiDoW.~gb܁?^PKqBd 2,:5(aK/<˚*acHF=y1ȦU6awBu"8[-X e\'Rz$Y\Y"BW\ 4YM rxܸccXجG7 U7AX!RRl D~ibnFs.~͠h:BpsNtC{Hw"t`\ n4CcP9kU~# 6:#*9z5/7`!2CaMj3;UT9BAp~5>BoR0B>\:eϪ0{ m*4'idsYdfWoge^Y_dք+84ϟxU<`\J w(C)|!Vfevy49Bg|oCnLT2R%Ʒ &¤ . TLp\dʘ$8_$baCr(3] ֫L[ dΩ|ojNɩ uIE<=ME~~rE_]{/-Rπ n4( KJjw0J[ɛrK}xG֜Q5ghGQ_WjYKا@xM-,8Ս*5RޤVA9yΐ 4w1>dw?薭j3NubT*,Lc]=mģ QHxeÊT'2d4B)k?ǭuPhG{hoh0 Vɶp| 8r>]1$1Ո$>:lSD5$c* ica=%Cq?B[`nJ4YU0|NobfcNRr?-p=z.ȧӘÆ#NOUf|xJq"p( ѫ_F0H4:B(Blpg+@EpS^U&T:aeT ʼnŘ'wF8ԲV%Q.]m_VO)\~::d/Q#6XL)4;N>c[CKԠȽ0 n#9'䙐I#Ȕwv&ԘP˹${PMA_pN[[Oy!!WxivlC4(;)꒽Yenc¥b3/[:pnjf6S;k-x$IRSt7*GllKt7Rej<З#d`;ġ{ZPs@mVO札V۔޶`/v3g7H>s], 6xd)<]68_`1`<[1v[S}1z1$d |r2_ Η|PȄ+rzm̝&"O$:e=t\_a 8uWdSq/B7YN;j{Tϭn",:z2:@l O֌%8yeZSo9H.|$\:~YRoxRM-{KǭN˪:[ll6yQcHw"t+~P`:oB5:;`݇ 0r?omPox&OU6Q> v832!RmjN:$Ќ~ w.Y;+13)ߍNYRE䍘ѐ ` 9: ]8МҐM"mAbؒb0]\uoќͻ0st8uԘAny#eZ_Qԏ!ZOԣs'jNL[rnXT"|U bhɕ$` u$1_:-cx{C ϫ8YQ;bGLr8b \U<5elKBܳ5Оوbp2vE q:bC3ɫ't0<*Ւv JT30Sk+P8'a_zϩF?26Zt(Bnd+m-V]&ơHV .[ʱQ+h (>m-.@,ܲ Sw]ȶVZy[UD=]THe^L׹Eh?~K(w p.VU>ټ\dS3O^`eJEO4 ^|jW PF\:;OƵI VWcr1xykD3ww玡d.^yE2+(&嗽? VQҍUmNk,su)?kpBps+/1@åN@m)q{NޫQ-rqqf?/՞cYTcg\IpWy˝oQ2IJ0.x8ϿVi Xiz\އ L4NΝn8:b0-Duo5gk]]@ qx󨺟we%N skV1NAxrZS03 l*o8 e:^|U\eц$1dt_͆l[{K2`-X_p ]OW0rqkg;oj,4- {ȋ>$LMI:m? 6%Kbv mN x-DiBx C_Q,-C^"\dp| %5K<[,wGم,VɁ(} e--@L%C(sp} 8`狮VR95>kW.3B҄;=ׄS{Au [eIf qU4W8t{x+Vr ey=oAҳRO9(n5u~DDƿy~A+*U(AUst} T4&؎mE @"VM}qBC< v xN1oy@?!3hy.5iDjؕN){:e˻qmOH4rc+7:͛cľ BPIM>ox3o`0ǖ1hy닶BR8ݧ?A9V&q_QvEȓbJ3txMoiRի=$L΢Q"h\e|UwiQ`$^ܱH)h46<=ggRZ]fJ7@-(3Irzt7< i'Xd-HOMjd ԁY'[63耣⋽eW?I/WT^*]9v!@)zrP۶T)y7KP0, <~{CSu Ͻ̂B5{fHS0'k>  pCǠrΈu5ҶLQ.#blG&p(2d"Y<).eYlm$*\lدum FY}wmͨ} "Iyv2Vs2|gOgf@i Eb$t⠦,j{AJM5 a}lcp%$̍0Ѽʪ)_@m(r@:"ToN z"ׁ֤K=kt8aMmu{&Kl S%VOPzU'l΀KE?8 #o@Κ_#W2Xe5Rj |w/`'pFG.DK3ocBO"{)9O"A*sqkܦDI]I t C5KYݍӜ˸;tWX7LyLNqd]+ @1YL}!zźb11KYʮM|zab .h)-$։J&-7 \Ќ &XvL;QyE}_ORMEl&pewiݍ6 faeS)*ڧG޺wi -}m0!;6#S,'GXȱ1-|h>A'~u) Q=^ְV!"'jfِ4?N1C"twT1ύ 5nZ;6D3gTYgv8|kNޙ>f;A1񭥰ZF֐X|dt*7~".;ȓ_ˆkz.a~>S!c*zbH4XD^fT9EE}k-i?0Eȡ0]! ^/kG`$Pg_ج䕡G$IN Qz61t$9**h~ +s7hNZ!J=3nZ'顶i&S^MhHV/ @^A/@&SӌƓVޔ!\^b+'@;AR :#i2]+jn wK7 w[r(SpD{˖mSB v؊ :6s+egEz dDZ2BG-ۙ^cAy<J bd062>j 8?p&"&)&w[@pͥ@9}5}体N;vC@F85?5O ,sQK[Ien&w0,3kh^q%(֗]ew?LTWae)paLRU@觡FجhLK-"]lxTcD0Zٜ"qCBqoFȹMK|{ 1lsط+ퟜaቘov|r h%e4@|S' wWHk 6n ffP o'4G(2zG&(7'1 vGlXMJNrTz qh/UR[ɵ% /7z}ƴ2{Gcz]QE64C$;6Vgۨovݓ)T4yT ؚIѨ`PGWs྾8ēE}k5s5+\|+EUFՊlYȦxShK NQt3>Ɠ(z ۢn.ˈ}iH cϹ`yї8 E +@V-*@! .)2aFC^oXP ĞLL s!c9LEl k¤D9SF7 )9jh-Cֱw"W kEEo&4!81։zNk^3uŞ(>$*#u A^ɑ+۪q,&WS@I$7_ 7/ˀyhk1ױj{R@wDc#x;U eʔiJ [9]bcΒ cTzMfr>ggM){wTmxW> ,7=SK#fް6GkEjl A\W_1>HD2PU3SSPDDmnZh7Q5,-snK_jk*s\ z g_X r9 ʎn1vHnDkEiȓB ޶GKaM]FqFx]Pcu&vXWRwB3o2G*Vg$'8d^*KއhBD6K2n/vt^uꗽt7p ef4rG1Js7Ai$y IV- FdV"Khi*mQ ~ƈXYopسQ>SJqxSνQpU=5^;T`GКޘň\ i1ҲozÞm]5$Xluy\kV#&#/az4!֢jc-]zX? -E2"pS|iݴJ DH,XP)^%E9q]%wO8y/N_ 3}'@y$Η\!i]H~azC2b'#}2c^<~>VS 0; rQz-HyOpI~veO11ېQ_CQ.MQR6}0v.jRv|#H:%E~%{a<>_R äĖ찌}PumtW w-1Ip+MLK{$G6t)e;:Vmm9P^}I VUZ|<=^ԁ!/11q챨4-WW"d_,f.u.KtB [WfΥ`BZy楹$Up :{6f&J"YpaE}u"otY׭ϘB 84$ ͙B2HI-In8I$!%]WRB` <` I z!n!$a?`BI2I>Y !$d@B )c lIN$ q#z"lH^@U UÚG*ъЩ$͊-@$q%[Fv$f %cKW -9r@/]˔"ni_ !}oBC۲R,.`E.lo "iⱮKnIƁ ;nlG*~U %~sCXo21>+#'doad$ ".V+ԛIO}{;i˒ӘXg8X"PrIE.ҫ=I2Ç>N8dqT Bm B%( D'9J"'S7m4 l:ZGmET'ܥ9SRM3FĿ&cJ墼-z n D{~ntyCŷ较7+{6>/Y` XY5vczmz_4h$\6Mkyh qbܾ_12~%=kݷ;rwYh 륌NֵQS5A);H}D$#PP_Ýc$ 9 tOF>կ\'<~ϩ^PBEUN4n@vNNdx5buX$#_e Te̾eȬtU:X564˵rSv+t =o‡LdDy %H8ӫW'3N&`dx~%J%?m䭀 09!&]J-5y"NX:;T]PU.P$`S}&U4[dK72LPrAz Nd騛Ebz#1]h6qחG54'pS"UC|<}!'2kG,k5(b B)Ƀﳍck=+.FJ40b$ 0bw+ֻ~n+ϊm01il_kXg]^ÊKHȑ&9ҹG;$XJ~?5iǓnQ-צ\?/s>&5Tpxu튖j )LDzҶ)wHݩŨf^yrF;U³x5W^O̗kUwS*׽V {~WGӹֲOn.6&4xOzy_U}@z5 j1A 䇉!d]h@87=FJEx@}3g)b-<.5i'׻] xT̺,٦vxffpC.Ɋ !&:Er3u:mV2pq$QY-]`ũ[+ɣvt)OR:MwcE~|$N ǐ?.(h"/ &cہ*tajjwe=xwЕmV/ 4*#8ܟ[$R`m._ E4)N vꨔc;`FA pP x%z#K= ֿOHnBR1t Vm126WibX4hVV(2lt"Vōe;?WV"$Cԡ=\*LǬni2\esh_l-Y@m`(rgzKi'TC<7quB;.y凑k@sӛ`F;,XyS' Ѝdr<5Z/$rX^x+tdR{2 _ɑcKTŝWt?_-N kRzhr,EA !kƄ$+\{T0k*&3~:V6UXF֪S[>ò=,WWV_Õٹs_NXW+OG3''?B- tŃK.RoQOs/Zr6wRՋspmf$δװ W"fG{eU6p^bvb#މq=%5shTe!sw4SfJa*\(j*'Qm?VH#X(4! m#FIy-iRE/=<P6ߗaqUahs??UtOWkD1}o8!1>ٸ oF_kY?ryCSW3<*:]ߣ_5}V9O_E,5>7wٓ(AŔi3x5"~2+S17 rٿ%gC [ƭm؏ڨ>DS"j2gOG)n7şI=Lr7!秽-*m\odH<U 8کUsldf8ڜh-yv(U(V"HPzu۠pY˹w+uߩd^Ѝ_vub$R%'=F˜D YC,ϏLUGe !gCD"Kե-fP^g⏑Ӹ:0aO'ݸa/\^g ¹<iO[S<J" Yue{ ^y, FWgL&h+Ӡn*zy\S=O/ߠ']~tYQs$\#ES^Fbܰg߳ej$Z%qpXM]EN,Ŧ: ӛĻH&ufW~aqg5RQ ﹻa.DmsI{\}s\3y4T[r7l!P}-pD:QϪ$=_48^ܐ`ە4D syk,L!v`vs4z]U)[t2mn7;c=Ӱ9f9z!Q5G~ uuYTX!_Z8Y-5*&<ن8`Fd赶C{ZQ5ӏ q];w뻵e,޼#ις6@=+1>#QG_hSUYEk#C[[b[U4bZDW9k=/Ib7PQjξrmIBjv- J[KLZдxG@<Sڢp|o5NE+H,W"|.gwb~ΖLϥn^܍IogDOz;nݫ5q1a>|VCR).fތ Jk QZ lCl}^Y*kF}M\ygϡMt1븆P5ٳ¸WL[uCVr3 s,uܴ) d=\=R_!Xy)<o~<,z,'a;ΩE'sߣ$i#5.%ZPGNI(QX0ՎP(`OIE<:$K~s<.jjIuJ$9rڲ(5N؋CcLKYW &Ε!6 @"ajLdk'9v3]KXtJr֍CUT4h_,B+Mʱ^hPD\J!C[V$w/nH8;~FT!h]ΣYޙ{FUgg%< hj^xWiI_\6,䮎!ZnnÊj('h٬q1Dk\lHlKj31JλXS1E./ Wҡ4ԁx9~!Ҹ=-5|5iW89GAYI›V,Mτ:}R%+pjBD%Kfuubö# yD<zO/%d<b\H yӳ.uqnYG\pU!; S,4Rn{J,g]<;/t:5lvmV>:re'4̌ChZ53:']U jJSKs9ZTaJ`~} j~yՆqAԙHL+u堆܌4%$)SoqJswX9kU4 dϙa HWY}TO+Ś©s:m5̤rP'2FRp&&)D )pbeMHQ_\Njh^R?M?e{>S3n+N"X^GN{`MT']t[衅ᑡ9|]1PBS 궖vV nn!tuHw-r *[ 'kFufS7қCbGRNI{_m?6@cՇcsy 2\J qdк`Ϧ #v43@!Vx>$.d /t@&!w/%L*g8w5O0^q3vGw JHA10 X>y NŽjJt$M'}ߨ_0;HqcPP +981Ǐ=XI&I4 wVS.Σ}둔 V1fa&UV .(|]߱_٪膡y g.2sH\g ;2\PIg+:lGc)z&ҼvP5B&&bTu,L:upAJdp~2_Jkn/_sPBj>wsFUCZ6ng왿,u7ǿNɰa a]-)F,ԼU9.Fkea$AHǐ@ J_z  ڦ>Y`Q 2a-Z:sP.wy|1`%.&j- g!ah.mxyx4J;)Sg$T~{;l!'^=F/4tw?J*O&l\罍MVd$(S,:{acy"$:{6A&o%CՅj-e鱳gKfͭkv WŘOs+\{̶;j1,Klv= 7cǰԟfI| $h toVnnjKү :dT9iʤ"C@MQZʊ*N]*|4防p&ѼIXbl,an2 A)I$a8ݢJǬ݅w"{Ub0!,Vz-`n6 ^g$a0 [4л cF/JB\'z3`%mm8^((YT%,%mbPOhv l#l7+5[|\|u=0b'8c3LkQ"Zm@nv7Z 62Tdϱy@`Z4qHo;Pa¯tUS nQΎ.I"jƄ JAr.ֶ:-;qۜ.fn)4؛]ICcL^P 4k`6hL!16Dt,͒F1%wİʣtEjGytt{zoS}>ɛG+mOJmACfQ0|$h<* Zw\=tgRX&.x=r]-xj7ߍc0,'(J_)L#>FIT GM)PV~I"HyW519 0LQ(P6YL֍aYk^E#hNajv\Ylz/z SMSHl u`\,4qf0 軆Qҵ/BLILUZO̪ &/2OY*ؔ~Q?ĄSYΚ9HU{oT $p>j_[oQ}j0[Ǎ:  IR$C?u$ oUN# ֔IE &4M%b].m' #XJJ^ʯSR8$jJEV6g}~­*ƒқSW[ p/ɏu, NӪ3(η-/f2@ykrI0$zi!$H Hl @vn5'9~$@Dž6ڮ@LQ)ՅUHH- soް[q̣oz}_j}HZPcL>c=// -UצRBxmZjLdf^_^\jDdQ e*mS(8g)A/yL๱Lj ]Brn8xT0^pdJ=tR-l]$6F< c}selZ"㡶pM2ZWgbQNܘ6_Q8n4yRMǜz R1!a]:&C;h51ڋPK zJT.~FîFn!~QDA竹>YP% ,&-t!$Q a?~ZP}G=#sUuz >HWF ڜnQ) P-}dHx@ýF\JJ:"O00|C MJh#Ba@d%ԕJH_?e\*\;=?1:`jrvdJ-$}^}H‚,*r ]301# OȣB %xigdd"۪9<Ӄ&JPuJK"!΁H2fE$>J;,PHAmt^ByFC6 Y,ZqFB ЁA2{Ji%+"0:}x~ԧ=G26oNB׽O?]Eqc[*mmE#&cy,օuLj(@Pz(yi,@LE-#¢'OQ92C{]9ek% fS>@$vj~&Ǒq@"H+&x0Y4eI*%2_(}6=1?ebX^, JKBd)RH,2Gxt`)b,$* vY ] S a %,@1 (b I"M$$PI1lӪgZWR2 ^>pM6]Fa'e-"*߿6K]oY{V~y(xO̝_{)%I|?{Q맅/\hTD\&^7*LXE}\?? _yf4 }N~b/ӭK†y?-~Fg^NVǍrAbĒ7C3&֨iڒ<cPRC9EKm8 !nz3>tl=}bSMKdEe.b," 9vrjٟ֭6@6H4bܺ2oaG6y6@xrwZܑ`QJ5eTk_N<+GEE-Iѡ w3WxGr .t" j2A2#uS(] 瘏Ki ,e̕I"XWT0?.R"Q;!se >Ü{7{4PXT(3˓չ pYideQpG`WXGi|~՝2.gХ9ŁC#WzQǗz!jG[I aRzZ=\bn?%A&"B8BHG@'w a4KT ~PJ:$\!d2q kbRZ_;V'igS'j,QYQ/yi66Ĥ>DBU{+tVT_~ZQ;r-c5}vݿ_g]a!II'W\:|;p(4HOO>zR4Ȉ%s3AJJ,rx@ N1 EX/ @&~Ҡ\dÔX}= '21??')OH̜FW;M'E[AW.31m$MC&{k{JFS_B>w {ϕүUȳ2MJiJU,LkDхYGM/~!x@(aOJ ?LtQ@/' LN%gR$d//^ς 8{Ln_BDD< _YVɯ}ˏ7ssa xaoɇJ"^mc4!툆.FѤXB<{Ci$l!M qҳ'YS'AMu_ƆczkvUپbC[=g _` 6X/9.dܬ4u]Qgݕ"OcOve/|D#d(wlA0AE3麻=;f#K-bޕ!00Iay(l$tT F7U*Yxؖd36C hM +i- 04 ck],ŨyMN $On#"U#fT-s+ jy(Ia EQTrwy4rKv*i6ceV908~Flۘݬ"M68Vɦ%m,`coB/5ļz0J^)kGʠ䠩8xq;:S紧RWl92iDg%gg(XzKC!ؽX:}]r6#CqkCͩ\E@Q7P! CwЖu;)(HNwP){I$wz| Hh7ړl :u'A #ґ#⠺V&a)DUKVcOXsi'LyZ+B@ ĸ J29ul=q0ĻU!_'ʒh&t1DBq.Ţ U0@& /yb(Moxߋg; l9:)9P>jC$;f  vps֮QAg4re~BIŬ=u_u7$;fFƑ!Q?c2g2r{/'Kdw/Vlv0nF> JcɗvWӍub*|y@0`EP D",!I! /yQ3J$-1~>{,ydaOڛ>2XI괓Zk^rUwd!@g$B^аsBE֒3Zu@Hk_ts:{!AͰ:Y~VٽFB(EMglǻ'(ȥ/n@v8G,ċ yƒX`9~$ VzIJ m?d8,[`-H휄hJŮ`D$Wi`k{Jt#ϴ Պ"Ɏ6!z%B޷ա< 5&n@XOmN hI o% QKAvd6ڋPܵ0VAI#Lk6;wW!Jv#M#z_;zx`Li,W/Ж|$YhI6`Kuſow}qz-HOǼ ˀs:>L.:9?,K};~zH@9X } @a$P "! _VhH4Vb t@M@@- eIL90ȁ&^MIzF,@[6[y>2ϼe밒HpaI ioGGPCH!O*|b7Ģ@9 f0T7P4d" ׆/P&u* hjT!)Z #5.9G_|eE6kBPq<&8k/[kM*>CO8e%(8~.\Y$j@bI@ƶ*OWyl_yݵZ` Sv \RAuh7:gL;߯PuϻTs,[):|ԻGg\n񦿊p}+4pFִK_WmkȪIou0PKj\uGs=k,˲&FEgdq><՟:!ŮqKru&.~uG_n&*u8zZc-u;OkD u3aP!l0XA!RKg dO2uOjʰ)]+_iE~+A,+c`(k_?sU d$FIz '#!hGh- tלtDo1yAܵɳ :.#P p yP,>R=C退d 354YKi$eh: YIfTHH ^B}/&4 `Rd{U0J=F"  X?F1dΤJ+Ud x0ܸoCٍ+vS#l*} O9^ 쒲in͋*To=O 60  CНeknMyqK$C7 %&!3yň"3eܒ?c,>e1v JX%5Dx-ԥ>>}z]D$C# $Y)S#Ӯ8OqƜ|).W,܋$ӆbm3L^90MpCP?n\qrx>$J+ohSN2܆)}x6 >85`HP0H*d$a K>ҤS a$I* ugm R2v ߓD'fCA$> I:Νyd9>UICCĖI=((`愶mY'BH9ǟP؀! Ѓkcu (w,~"/϶6ay` PR"  ' :o4"E(LуbwzgU2re"[_yOTR'H2E`C{z O첸CkuJ'--ݑӫ~E @D'}^tx'*aEyQsjÙs'%vs/Zs|.hPݻ6ǹ_`j6H5J̟9ȠFkHO>,=s;~wǍ܈NzxM6ꉼ(M;v& [@|#N_xبQAa=#Ivš&#G#b$"\cЉfbVW&b_rM {; ҺVmB}%[֍~b 10Ow-]̓mU-!O/X.ZCcʹ7ml{vMNGgmC9rW2dD6 Us1͈ c9nvn[)9 aB*K R$䔞% ` G4RT'|pyoUz~yϹV2Ca Af.ķS۷V]Ÿc ͗E¦T<4EuϲfD g%k(r]7W [E]dmDx..RI (1S$o) #6Fa͇]|쬪ݽ,jp׮тVG]^PZXxn~EF'fns0hsPMyGxG8)mՇcЊ{2@X-upZ_]q;$O$)$DA,8/ia)7tdDž\^Y'L 1%EΤ+I-ǧ֯[q 1ac?>}Em_HtgL~zwY;L}k;}E>Vli6bUy (b`F/ ַACQ #D:~u+ e4 aBRkw;O|;G1/g.+ߐSB-i*Țy6Fa]SvNuի@Vz2?c/-BtԨosa—^'Z< 4+0qxYdQylyti{Cā]dF{HQ yj6] S+O~EQ,-cgj:ńZiYvaLoPWH{nk0VjY6y3n{y~KCc> @rWwꞩY.sM'LEЎDt,L4yۺB)!`u cs1YX25\)>eۃ,M?ş ^{{;7!Ԩ*M@iOrF(V=t[ijueS| 3fƒ6mQ+?e[_{'53GjiJ\Co`{zrA DVig$jƷZ'i{]>=Q$Y33@(=P7wn]IF!?V6 )84t]:TJ3_-66ls!&%*eD}gp܊͞++iD"A/Ldo"IJq,.$(ٿ_UXnj=() ( #r|WH)So7{,Ò!`jdm>>kZi+naLBYeSQȹl6 {=ϻG gzrֵݳ$mYfȑ9wy^"K퇴Ql?M^M֜}Ǩ}=s z: ]^lS! Agx[E5kݚs>3Xn@,]pv ᦒ |\wٔŌoꧫ8+/V@rR"-G$!6PzA&Z8 뚩@8Nu,&YehWYEZr)˸#$P"yOD8С$0denrWbڥXD()b4b7N5-ISm'ˡw[oyLJǣ_qT`1 whB}M6]n™jc|޲ u}xF4 Wiܸ&Uv(Dqە@Zb60Q^WaUeH3Wzk58Փa~#웶Q]Ppa"B~ŋ|8jAns`)d"B8Bo^| 0đ]l`-սsLqyd[ϖ$=eSw>ƶ5Ќd2 ; bn+N]z7+Xse=6?GE6E*|sx??W]W{H@"(KBп.r7z[J,\; 1mrvB@0ӭ!]%>W<|.l~9<5вQW1QS3Kp6G EGZ^ĤӮUfPǑ$b&ݖXp9w1,T9 u5V%S;uACWV]dHCHNC@T`1h):NK@ A A`CaZU_lw\h?6[~WN} Ӯ.˓M,xU+@HGA,aAk:T *1:& F1f9xmpSZX6tI]1?Z`7vwI򨭓9KМ(BbE^MDҵ#4-@Ep~|uQc`D%},;.lZD-HffP%JX,+Ir|mnhx_}._+GygGٛ+k9*oY0w(zV|g$m9IJ}'.7s3[4d^LID''hV.y{Qgt5Vq!WE@ c:Ľ/^^= حg'60ǰ@n' zpf8#{Qk!B @@B$sT=U`E% y%UᬰeeꈷU8<x\1P~J GL0EKDstQ8ݢG5p?5z7iolʽ/-'JNQ}w/M_MB<>D=^hCGѦf{`-lw,II=*V~ ܩ^ۜ]j$ {i,2R4~%\$ySZ8䀮Z~WQum-=G.,ca֎^47 ;o9*46KZgV;ob6xt@{ $"nUWzT;ā~f{#Tf=)s,J4\yZ`>\aW>&ϢPع#|lf,U71ߵVKzmVq$ K1 :H= -znpʕ"'TdAbN9U*#6}W}ank3-ګYPtdS+޽">+BbxRs@'ME-U X]jUɯ()U܉]X?AX;T^DU.j~{j5._[mWM5Q}<Dͱ{Md\ʇe_vw4~ v[zNơ} N_V3W #"j䢺2ûi v[%@e96sfJ Ṥ660xЪ:[.FMŸl9f*x\wjs[u'NSO\w@>bE' 4EViub.g]xum#oYvH 5s}Tyڬ@4)C6K(]~h\;*89ܻ= ˡԓ'6jۛj$2pgEȼ|꼔U$s432hGM\阢H#tcKB=~mlk;nV"rW[S_(tHϠhM6s;E3O_6n+ .B{2kg掄95F0}vY>;OjV`ȕy)^#%wu^ 4*$ސ(HX;ú7$̟ȟ{b&jYUO[vVon8#k^߻_t}7pHQV]?/D:6sZwPnxl'Z 8ov vZNu`"/7}HzRt'h/qoTL:Zk|jۘ{`w< jw}6>,MZ" dN3k_ƃ,R=H#]2]vY~U 0 >1@ c!ȹɒNW\GMr$Ǩ01e\. } &,⅑`FIE6oɴdUf Xa./3B98W 5`$9$ _}O- @?ŀH }R"HJ@/q OL$ z(aa'a'@`ROrbJ(C{d!Y@jj$PM((?B,D+쟗VUʣℨ(mO?NHC$!<OB XYziK~CiYjAA4 g'߁>=[ r7eN9$&*AQ8OSa@$i0BhBLI+v閿PO $ 0 dI$)P`2 "? Ch hMl,`v|L׍*U [H ,B$RI H.yl"Z4y:+ș( Y^SL-c-x}&V "f*URVfG9n:$ < RHC z$4[ , $; 'Ym'9I! patkiE6#b;%#!&$?g*!2Y&F$RCR$P@$' {-  MX~~Z RAW-$Ud|xU`d%'2BI@)XHH_<*NK`vQ4BGxX|ش Z!+S B0 JI@'Zޕ\5)I Ia>!h敩-8%#)acS+fsM熒=#bM4(iؓWZA ` C'AUDwMlO_:+Z1.ooB`zl:Z- AHPM'u">Bsm爼Q9ݗ4!Ϗ}uqO9$-D OXJ^KRHGiJkłwL Ycָﱿ=2S$ĆDBlBt$m`НF*=n`C *$ S!!?" `BA<Tݨ JbH9xPe 3F d$AHBʄ)p#էp}H6<{&L* P IJzr}sd2H@TQ()DIzQ\vV!U@ @|-@Ɏ 8vIlǽ{]ńl@<^5=K}En ̋/4sw+j-n纫ؿӀUѠLXs煮g$F G$x0T XBHIb~$l%0D$8B@? U!U"WGV)?w:r>0}q!搒3u8#Moxay7bֹwH:IP 2Wxǯ;Zt.=\*ui%X! /@#C1  H /BA HhB4 q9Ra4aaly)|PmYuc3:T!:SnzD>[ʉPw5f'hPBceő0 ꞳDo/qwU<+\kq{WNnm~jH93t$$-FRBII \1;a2I$(I{] {hE!&ɱKFT~{5W3noO / l"jozW ޤz.a{w_vmXJ=uVڋV^#E- %FWeCSY6JֱNgJ yt2Ia$aQF򈭏/J%|W5%dJ0O|ݶ7f^bdff/шV_5Q-V& WI׫M4.$T)8g7m;_ ;Ws:_Wb V~+*iJ6FA6GH 'V 9]xRBm(ZSde*\8X"wp9U_dAT~5afNrؚ+5i'k,?aNs/,N082P} <(5 DcŒAfOu]n X-{OπXOk;}s3Dd`|2Iܖ@cIvz1K {gѠ@f~ۉNXtZ QsUɫ7/DXTTDJI 0wi&j?c-6OZ]L+htq_J ENS/JKRi(]$KKMVځmaHYIK>hL1(qG2I(RA))@qp޽SD4Re``]k況@&).lkh"1Da@//X84i˩}>{):N1q9@)+a"2Pevgz-NcYm$(A@"<,cFvba侎G!uz77A9 |[cdɵ:VZ4$ (5mQ #1]ұ`D[3JSbCT)k"FlӠD:XBe1T$y+LDMn,b"j_5dn"ft~rWI0O6Jbʢ\U惣ՄkNW*݇tʹb ܐItC\: xEJ_7NVb WJTĐ (ⅮlO8:<]3MkWB0^ z;XHs(IϪ@) S8-grqL(cS#r}E&CoȬ'__ՍNqsD(.λݖT '$ehA`"iL]ɍWϬ 2ݓfKԻź3~_Mʅqinj_F5ǔn<,"ȢA_"l^`|if0| N6TÞ%$ũs_U^ZWaìdr^;SŪV81^DncAa 4ЃBR,Gv>.deLt@\Y<!=})24R#HIB E!L@A ,&Lԓ;f5Ġ£Rԩ)$SJ4d>r2U,)`;m N&S:ɌC{?ws_x0eg0yoQ }s휡!MfWz+FIb#!+$/6 Q4=bBȇQlowH3{鲃 U;_(>+\ Zgʪ AUHr!Z6gү-k,׶- :CU2wZJ00D%#W%GŞhT^T nىGl[.QRW01%#) WuW){Qħ$^ Mi9H;cŴ֛ё%1a #V2PqZ/H)ּ#Dkt(&lGEzL||s^{6Hd {hGQMxPz_ejb vXػ;'1F[Ia y 8BC)z~ZD_ء^}g@,0K fhz Wg~8$6X J|g>\ 5͉lb*]ٰPP깚W.9-q:94v*D| #ЀrZz홵e3xZeU`V8%}$4@~ȝY_ Nȫ-lB؅ ) $`|+>Z"Q@aK: J%dhKƻOa̖L̲#)-:VdS^"򯗅hxf |I (C65ƭz3f SXvX"rz` G@A 2!e5LxlY5ŻP2A Q}<㻭ĒmIkٶ.D rAx1JIM M3z1/u&޵a66R0ބ(${lO0ĥh2OǬAZzM5gB &Ƽ0~n֖'S32|j>Ӧ<6s܃d{=CC)T 6$n]=[GkVvnr檾/s1Ijl8I~APq.D2=^80I﯏" gzSv.*׷C%F޺2S)KQ+v̲̦0d6ID"ql7.cA]s# ǂ|;>טzikx BB4ERqFn)pFxO#Y󫩎D6|ͧMb_-8"cIx2Kba+\LX\D6[Ɯ`HP4 #ls!I&#nieF) !u|nn'SNsSB ls9'dc^R!ƪl}OjY"`b+?aH p`S">N" Gy{٫2ĚPsK KKAfoLǭ>W'}^_6ϙhnsMH;>}ਸ਼٥-$3\;=[T\^_?_E' s{Oнk|{k8~EQWvu1s]rtwlvQ#dxgxlvk m̧`y68&E^T(jIơc 0ݰAS׵#$r31]U N+IVN;.v#k,I@X+|VL$m. ̈́dQ*ou7~}~K8t*l{9)n13*$@~!((MCl^ZA+E/2\t\: D%_47qv ޭF96fGk^u9r2u+K[fPM>@%q+^޻>rw ^Y||k*_~[/r ƒ@/C8/L)ηEp{rR,g\#H3JrKRI FD wt>//rH'H'RXDȁ2D9ZۉӸf>4_tHׂav D"rAr+ oo)=&OQtٰ& %pL\@m0)*A fhkv:0K9䀐a顐|M"sEF/Vvy !gӖd6MRSW2Rzj1V?.Kx e3G}tbPIA*-2i%G7I%8s'OZ)t'dLB4K㎍D6pxnmOD9CL`琺94lU=JL5_խ0n-d/tUH#zl9N^! #(=-C ujCBL|Fpe:eOUja6[5ٲC!-px䱧| "9-2?VS3=AWK&q["jI'zM`F0A38b9#1:W0ͦelYF_H:uf5gEęGTW*)OJ8TxhgEp?;OK}~jPB$$nZeɇns# QKa=>2;W½ZWsiMdBNN d;Ι&5qy*|KǶG41 e|H94S4S?I?OJ0*HcBqʘ`e"^r^L$+ZE֤ 4$h[Bu, !/zvl@BIqca H<5pcKɞM1pڙ8oizV?rO=IElu `v/[,G=↗!>S'e)ȃaAZ?P聣-}͑ 0}2g2Y6U&}َxD=R2uSpZ a #?wLpB>E"2*uGL!zNN[b,0 _̱IJsDHJܧC]{>=U+tIʴ&XNZrcirLAƴ G *RVeAo: $듿Xc~!X$ުqH!|4OB7~63j:ǹ6]b[;8,F%[>p̢s&9hҹj$࠿|ccSvWGň6j{o{`cTj}R ب%XPW Ull-Y fkGt8Ą|vd0 qE @U$„1z I,V*l#r m AJ=#}k{\*HFG1-(}J{ $ h@m Kk6BI`b+`s*.UU*_wd L\O-Du $" 03OajHZE@(T$ J)R#A AS||+C1j4_fI6(%?(EDՊ-adn%k+,ГBIiִ(ϫ{]` HUTL]1!m\sAxq՛ iH H!u $@HUDPl]HU@6 BHAtĬ{S=wg^zeQ#T,\l^+R^Y?z $i#5_])4.4)1 ;)Tj"58)eQ':UZ>.7>7Ȧ19kp01 7uH Pa)& T4 jn)rdaFvrs,ml: \\=Z *ė`0Eo^ds;)y ɱ Iq#H r3̬f]6>Ok/^GelVvB-#^ F;H$#a؄ i! \i0kI) ?'ިwή]'&`Ǟ7gs&۾Mi&T7(]_.ڤB} ~_fqKI'$;NN^_lk]Y`E:7ɡ xvBZpZAm#`<)0Jx%_e"Sm5faiŸ~Ϲٓ]!Ԇi3@ҦhuvA] u("Mq5 Aƥek6=Jn}_35*~$P~/՚XD҂6徭cӯkSG[rgy?̓ɥcN)-HpuB(1De.cC93t":X3Vj_BNt v<%f$4WҠ  :pd5]>R5j$rCMM55"}m# 3vlTe64l\v^=r?]܋[E/)Cs+A , $6 dD< ӾO*g!f-q==K%D JXLpu0{\SpSmB(a6>f}[{?3ĂK!:07*盿]/n?߻CS]A( }M䋬G,vO>Vmƚ('|_zgw5{yd-ZX9 H*P ĬR f(IA#i,?to|^uIBv+>363 ]yH$yЪN5 Ɛ$ =]KJj8w O|~uU&G \ TZ[MRHc/2~ ^ ,EmrGt~ HT1Q)aj6zCa :Kܙp.*)P)ICilAmH'Wu(Y$}t- AQc"lTYRYU֝X: Fe4R#s .<[^n`6h:ch06D@dI9t S:۹HƜ]t*/޿(zv*]Te[&Ĝϵ DZ$  < )1@ %#\1gw8}HlłB{J@(dF!r$PAd i$PZL; %^DY dR, }wo{W[w Ka1h7zVw>k1ίxm6yo8w5.ņzWe2|om-DELH*}o~L0ڭõz'"|c^]mVQgc_>R("%6dy4MC _!ɻIX0a}DuEڜh;/q*yv!Zvs`op]tRGtY;UN6N#̔[" 6.BЗmri>Sq£ ч44Ro}5P:`'>?C+n5qϽ%6k:̚T06 ÂD҅?itq4v_J{xE\VHo4% SHB2`!Ź,gݏr_YW/+@X lW$s.umxƄMWe=+j %#`j l̬ N?, D08/y"u.JVGS4moo[,rèY[RKJubtODzGcB|J/o@O"JzSz=__ "dxxCOjeB L,L5%I F``  \ W.|*n<3ІA5Ի~WdzTle Ӣ8:j3$bMxmzl ֙RȢ}̤=,{,rLЬ.IҞO269  !k7I3wR>GWW aF6Ӣ+X:܅\Ч,OrI" E`0 Z%`DJ3 |zƩ}M~Ra#~   E3c~ZxHcݻ9C3 jKTQa3bNxKU`4}X <26Wn[EY9'Ū61Nrb2+TN+E:fnQ*'5ņM;lwbTs0k{f0R6 XA"TAdTEX,PEdTE;7iӯ]\THD[CWHdM 7bآ S$ϲ!d 4JP,T0łTF")+s~=,Q2G(BI 1wKDUAӎ6ɦn6S.Ѫ>^O\Wt{ nܬc>2yڏhQv  Ф0>$A%8z*{1O>FzX_nW:m8v#ӬeH $dD"9xV,YsT~묱:Ly9n2EIAEX"XX+" T!U(J@U) @"2&(i=Klz,6kni/g0g[_ l,T&v Vos7XhYՂ*H&(|wlU~6n8{P(% x8oeM~$Xܝ}\cANT?fRoP~Eޯ?bM}Z!Ų:5h7`fkG^L $jOVJU#vDHZuL䡤.p(g!\+2yWv̾'(Z,barI>˅x҂Zl :Odҋt(!@'ijq%ٳ8lw{sNkՈƏWuB# "F,F2JH)DjvՏҾ*w~* ݪʹJb5Z߁qUwwnj~cMA\sh j 7^Xg~;0)iG̮rpNgE_PA|sžrkE % z 68Q(s$DB2R{zMNe@՛m:ϵ} $E*#jq{ee~9afvHhنP4.Puu{WXZ1G;6r ͥ_z*/Cζ߄hWއeZV ~`4IM!i߱v2)ƀJ"`Kt}Ԉp=e~_~)wIM !Ǚk%>1<>fIymzuc<4g 1N|8*@ gڳvl65!(=#˝x H,y9%Us323&cm0j_*(R xcp?/f+hPAAX{G&dhCwxdk|R \0C3%2$%@Y~L."#7!w- gn &HAna46ёzAOʲѻ=,,m6〈C 0TNDa8AJKXoQާbؐ;wx aX $ mĐ]$#=SGawTU XEKX>]ʢ>ŗsC`*(~l :,KWݰ" R w%\ťٚW@,F?L A *b$P$PU'^ME_~ E5ؚ5[fpXlCA/"pO&k4gob=͂Z 6MaOt簃C#547t8)kCf5۬΢$ĢEQmoO4&wr QXmGNYY ChVf|Rf,:J2#6{*BޭL*QTɇFMzֽz%.8-+~Lڋwdj@MIJ 6fi?p-OA_n%Y0:濌Ws!,HS* E@td)'-e  ̜UY>-{P.o"_|%Ͷ'bHg Fj뗭/ӡQ]d ja (h0 ݰ\ualV#U@wHH+N`:TbRl/n7wgE_ | ˃Yb.M$$H`$~y6=i0>@C` &A{&Deӫ{\;G&o޾?DTRK:ch4?܄H@ʰ<_okuţVbE态B^(C*mwT㽳W8iyKLC(]e}9D 86 Iu!CIiKHK4]X$ #j$ `&ъ^_3Pk/3oJV o}wr;[cr'}$`cyk#AitFI8#xSRR~\z*(2ah(1e$JBME$a0YFKbH>;@_h5)sҎɱAK(j^Gxr-Rx [D_b{1!ⲁ\v4 \bBUFki%%)ҥ[u6)xM@5T6`ЇA ,G;=K@G4D&f;DIЮ׾|_I#|eͲa8Nr==>c瀃$׹kD8LW`T]NxSӔהQw[ }޴e)HZI ^H\IXhYI/07/J$`g,j(:OjUtn.rO*ES[j. j.a떖4,f 9$j5x yA4,rՇ?dм[{l;1ALDb$l%K I:BB#(Rb33)jlnpZń[$bC)xXtMc̘R>sHF-M@C;s;[\﫯BB h)8v I VGsbGh4SBB ;rfԳp#cV֏Eڮ<n{BӊI2 {%+ԞCLj::?]xHOa)6x DMjPMi5$efk 醪a7]J?%xƬ#pY.qOa,$ȼW_h0i75&q9;.\>p¹[٫a}GȎ^|qUQ%WY΅C6A?kfcRD$$ LauVʹ#L`v8uZi9Ҳ/F ="͑^j[z1w{w/&.UMI晼C#$ Ƽ8/f8&*V2缕A#c{KGy\Yo16 KQ%{;߾8SQDV]ѿJn;*J4CvSm,˭:eS]6>ơM;]??"?=VP%[ 9Z.וGGg <uAo޺e)CE oD^e2qu,WԵgqQ#.ZIAY lmbE0łIgJM'ґtI6â]=O:$[/ɶkCcP08}=WS!Yc;ؗRTCy螏>}?;ۧ;\eٕ6rkH L jzqZoq+vu5 j x1x3! f*0@ClVB8#yi0r[Z0B0*2TzvI8qz$,!JFo5ְw.o )T5;XZy79G@,EݳG͘J͎KdD'MK|88yDWnxm>}5#R HiMؖ17]6Vn3sr|f6Eb((.y|{W[Oz\W= 1E|^5MLy\:χ}Wz%"ŒEI *3mYg:|HAZG >P9RLJt5sSQ? C$jB0/l (J]/۳YW\8!UH ҁHzbT^guov*IB F8bg$%rU{kԶ2LQd'g/BWiHleATqwdya !F@@ X@u;O w??iI!^o4W0.VJi)wyjp|5ȔSĘt0jVD[,`ZV#s= $%-@B5!.feKw P̌`",1q8ױ/{EJF@OxhO%(ik6u2"Π:n9_п\o%WLA$4%E`X#QBR)xPڼ͢@t#!h^B/>ƺ.d W-hxrSsa1J;DQ G钾AJVW9#FaG_QEI H+$$}rzŎ//.}j1sRѴ$Q!;sN+ FVIr%N^orf|/1eԡpNwkuO}wobju'yeVuvӿ}d>ߴMnN<,zbYd'k]w &K9'sa4pR E P6E {CZؑA~&,@Z)z@{nkѪꬉr وtjg2nWBCB24t| 2zxA8ud dEPq<#;)` A~7+&.&**UEx3zc5鰇U[/Cz6XrG<5g7"tm:q𚐠KX _8 U]nq-btA>$-Y maGb#`Ć9՟qZw]\!HC^<| W;Q_2ԃ:1&Ak]Y "61̆'vU SZ;튵\ܝ)ݨ#E;JF$v=v3.H=:J -}vG-Ql^|̐ bBR*D@* c 1x1%?%jyZ</bٽrh\@`~Vn3]>C24$@˘1)#'C#=Sq܁H]M}ɉ~fdP$|L h>HbH>cJ +D}i7;0[GXV2e-dBYk_VPց kB* -4텗Xc޺Ð:=4%i0w,ܱ#=G$t%XOH@ђI;~'}n,-.*u9g<|]Tne'˞wJ^A,&Igjf% *†Gi +zp+1_J(;NIջouŒU$GTӉW9 8U;BH/b<&Ϻ Yw D^ k3 DQ#T](ٌ C )Rb:Ŀ0RgP]yKhE|Bl"!_ eIU.5 օ!L1B|rD%cq&mAaPWHϜ3bdQCZt WЀM_t+^#~L]w\~dSi{RLBB2TW6ks r,? pps1v4=@A-8CwmE:R8)bep#7mȁF~t"  &F4ǃNEz>=?WwG\MKgqQ0;hIr,:'3y{w`'("NgpqZmޡʰ X-vFSe+ 040]$ 7CHY7w!&mX0@MB6xz6#Jۚk!췈=aW>xR lKv 7'ZiVfD66Ņi9'jZl3y$ BNmʙYs[IX6ƭLN?H3u:7/8416rηՙJ2(2"+Bi-٩_'`=!D=/\[>*׫&+tC1f)[Z';s0!@l ذmrNT5!H{GCu1v#A輚ѥ#ckk*Xc݉!D\)vڋt5DTTX*DPbb2#VJ < F"EQH(z(F*bEhktH)ҮSu/"Jh˺AQ(MP" R(QU"ň1Z"PQH(iTLR ؈UfHH$$?|"`" gqQ40c#`dEy"0AXH>n{ooVwgSVtd !`rc"D ܕ+JV'y ]B@JgH/TJ,,@w0odҀEjU?YY ]ݰ] H ^C$1eRyE|]Y/!Ao~s$H)׫'}(vvnרO\aS ֆ|5v,nRm*S5V) y%bԄV*I!&djW5a^0IUˌjtcs H,4I .aR Duj) M j2;VS5$h9B^k1E3HRȶߗ|P[tQFFAR1ֽҎr GןOB%Q-fcrCt]1l Tԑ u7OB>5HTbEuW+qfSt_fGH ! .wGӃQdXܚYF!ņˎߦQZ6DCpf@HUyՀf$] (>ؒsʖwX p">o&.Ԭl0ې$MJr$ /BQ2IQѸ7GÁ8%w9yuuV\S3G3 4SFDFD*@`RJZ aJ(Eef^Qd ]Nږb%]ҹ{㞛Rўe+D$7ȉTSYIatL'!:B%"qZ#(.PI ga, !ꞻ݊iѫXf45jLR;TC"QD⮨7pъ)XA3V9[pY2AH%2}?6 PM"daBi̺Xn)Z$L8vST`)/8+ D6\YH)ARs(]"f֤ePVAh9g ]i&"mVRqA=dH̓+X݄D[" RB(KaL BM*uH{8UFk\;jl(j?ț1cV Au"^OYۧ i*ʮVrKlw(G[$cǏt7QOVm\<͊ +WJo~sKkL7&Sՙ*0=K71 Q U(I]i 0Ylę,9n^tkطkܹvg>rʜӈczS#kBDC#싵vSF;esZfX@xL/`K)9p+#4! XďGbF3)V"_7 I:h%#aJ7jv7n68d21byWa=F$P+ޅE~?gW-7dJ̥(r\̝lE +[F;(>v E H0aRx0n&,+9{yn$Ċȥ4{vdw٣۲+/?=JCS8x3DsC}M6VtwFX@/ 50IWnJU3?f&eX; *(!LDRE7UOU7 bIn^oLH*jnPSKU{tq'&rFRN;6P#`r}?ɂB<7xl82&| f/"k^‘&gxq!?FK -]fIw,~^Q_8'NmteÊݍy\}ҍĬ׸0yf. GBSG*;BJDIxiYZT:<U܇B$$JJ#}uy>/$OhgA}Ga#`,B/!%\`nf>"8lזn=n8#Nq !b0 bPm H$͕+AlAg؃2od>lupu][7Zj͛nN["21/k*V+]Mo\$XlN?#4 +|hHZ 𴎫sM*3;N/sxWV&4g`l&hi%ыBu%[bOpk?>)ΩATU%h+,߇nyN:;]S=dV1=,\ѓq#j鬒#{?gd B^l> ?6:*hrO[lXT1#}OnZm `B}A#y޲Ug.EC!t{GU_%,sHp(dXe,, YH@"T֫K?gUE|/mj;o>+1w"xsU|.QM`AUQ`EYr@, j&G]Q10Mm;||_/sjVETV*1X**AdX*e5M~~ׇЕilO h xL3]oQL,t wh4OAb|lMmTUH!.ˎ#wmx=C~K}͜ӛڥe }OC^mS 9rl5ugeߣwqC|&UnCQQ{g\m)((=R$ }݌>H}T'ID(Z&4kE0YI oKE-(:w%e}.[6h 'Vf詇)ОG7̿)9Y y u&m8GMѬ\_>iatp'2(U+Z|KWOQ/ޮ30lkt#+.7.wZ9[ 6i1**"@|s}>,YQQmNR:3NWE+5ǘȳ;spК (MSW N>W ԕ!nW.+}ZQ4jWpWl-RYfn"lm I$Tu;]66a]Xccc};% ;&.a8;f3 !}*GPed] g3YYLMx)ԜnWY[JԼ@В$F]vъ6&R3lgOw~,k{횛J&9Kjhhh}6NJvumQzT,ўN7S@ 6gU<:MLIy˸l+ӳKzIct&h45_CeLFᚾB3`DW`m%Zs2j-Mi1mx|>28C=X/_~[+fe#) TmGK<Z) ɛ]F0(O:>KD ;?w2^.3U _fd1 B5CMQDJԡJeT/fQS5K:~l;U_B >Nxo;ylF,[(% \$2%j6%H$R[AB @v.= =)}2đaHNFU%,5IaYգʼn?[GemK,JwZ&J3s'4NHB3ZӷTc `0D0eDB#[" 3~lcփɝN} '!"P Z1 ']oKg>^€&)ju Y`@h<>+ [2u cYB@@A(/d2+۳pY.k aWo1iYV|Ʀ{bV#Y>9%ۄ>I ]H/ŲBMf +bu/׵_,s=YҧBNRvCcw|GF{@kZKo^ǁߜqC lS{{;2({ ~)H,u?NY!hih J(È{9-5CǎT$x詘ic\B/1zT 䀋E|9_cJA 46y7ޢ$rFYE4LRk϶Nуx3>R{9~Sd"!ڴd?^^ ݅˫:;r[ H`"i 7Z.YkH?CZk5>ɣ4Jُ:jоB~sFjqJ*ARG׹$YF2cȼйL"RiDk AԱ_{v|Z ',Q!j)wa"@`aޢK/>Wɦ^f~l81](HB+ '7$`bʀ`5)^/5Ϛ]w5{Bmbt?Z@}/3j~c@[\!pHٸ6c%WLr5m}JwYQf%b<`4hH;J $(i1uIsKe~^. 4jIo3wtA~'{=s!0+*] OU|秏S޽8JWDG{H AHIVuJce(+λABGmӿƵyeiչZ$II*xVڝ'zp~Ci2~fyW%H !Zvz(S nWgz>e_b?=~GVRa TImIw8щ f,d1Rܝ\.$К 6}BJA{FP|,R|u)jD,XPrS=V p:n5"$!#Z״s Q2s],C;1j3B۫$6/N*E@k$2$1@mD#, 0'A ֣AW3n鹭߀YF"*΂!n>1W沠ڽƜ4O9AJTB(.#?ez`2uEE=5,ReL-mMZeu,7ῠ됄J!8UOvB4,Vc<"a\}yCѓ}/"m@_Nz#tO(5(C zAI\h]aG#q = TUg'_i}vu0کur D*21TXs ﾯ5g?s{ߝhc" Q1&vÒ.2Jw-s$*VۯX(>I OuTK4i'dMI"227F :ИK\Nq.70tPtQ!`4-L Ctg}TqQ:QBԥhw$Du~[Y"A#;JчﱪziВ]%L7 þ@B,/* oY0ذB{>}=HxMҹkW$.ݨrKE*ΌW8 w0XUD{dADeM|c=%r$`$V!YXWzz)>+]xj 'F^wwJLX#:_t6U-h~M\68xҩoBCK8mCvB CFn#E-=;_{ OߐfqX6}$u%hi*61ƏM zD!Ydw^2'J-ɏkpu89_Aѫ,oxvҽ["ÑrmW`?_]FB1}^It.FxO-etS r-=T$V`w~i _Zksrsy';ޖ=Ekw\qBăڿ؍]tBI+rQ,Ne|XqsasB9mu 9 P\R٬ݏ|*]$ D'2HK&3U9u2rKmLE ?Lבgi ,%&Kz\΃ksգQ,%lީ/ #_~nbic\JmoYvȒ( ȏE? @=!FKPe)נUc$;S_7#6o-lqrG\Շ/O]e5J=t;С[Ǒ8w$${+nwܣ5:ڽ~/R dv_=-(?}L LzN9Kvy&FJ`Jd+]{>L31Z\ x,71yq $v/`X{cw&Fڭ7kh0cQj5TS zB@p$! 0yJo)fi}<eqkr d&L!d +6 6GS^N2AYhJ ^ @"dOnMrBj@$~:ҧ Ul;eݼlԹ-"+tAig} \w&m|ےpz e4͏r=Q%tu۴'H0ViCh*D a1rӦ w+-1ZփSWGV&D9CCEJ^Gkv;8"s82? ;3 ~vV20HI"LҪNYinxs7zJ%oNR"F^>sjhbܚ|;wF:N6CPp) 3P|k+0 (U@{"q[jM[n0$G͛:_zR}:=o%ã=pb"X+@Bw&}2+)Qs GU8[;scՅ]ˑ\+1!`$m6U19ee0EԖUrc0Q03_bb1PaWS7fa}`rhW+q!XEQ^m1cCzDe#2G/Xt,Ү(HN#KPP5gd,$PgE=9t9DOy}*9oe|-'͞?WdIWySLwOd뫮07N 7O˯2`Q$+4`u˾!dpz j5"Vd-?7(d @=ӀBs-]Z3 mψ1Cq8qB^YBŧ{KOK 츍\gj=cJ c3!cn~;ko ˇ&h_Л=Śk,5hHUK)#(k2dzño*Z]4 a˅箚UH(LOJ;E8 UaJq$L1WD@UյIq@!a+>@z<7So6ʄu ڋq`{E%p]cEYo-XI($L-6328A:)C nHa.UcH*iZ5ȈiI ~EjN"ﳑv &4mtUI}S2hi"^Ea}RV97>q3[B9n+De_3Rh 0Gzf#I~~nmKKtʕ}wyiz:;x3 3ÛM2~UMbT;̈́p9WygoI %a ȗV Lwtyrg[`y!YGk!q {K5AZH1ο1yvr-[ Oݵ'F"sZP<bgW2Af&Dp:}Dى;9ǛlqoDwsks^jcht㜃bt;lVgz6K=ydDS0]U3]*4ROw|Lχ>W_00Krd\ZiOwv6 8FG4ƫ ,߰2hs&9ͻ+ "}ǰJm.gm5#.o6 B0> mgā# $ښII?_eqJ\I 0YR#\ð3.昏7,Aq`hERŋOj֜%P.kNl@o[Sb2A JW:U)-[Pff=v Rƫv,V͝Q6^yY )dкF %nk@TL4O>G6õ6/#“UH$=;Sd BT[u՜HŭfL\uk|0qcU26 ~V,ڧ1JQ,B~A=[UMԩ9HPU+ FJk[,oDMXV< qQy tT=: 2+g&kj%p& *F#V WgE7:Q@J· gb%89O5^%3xMg.B(h/,¦խ óok=G,i3Lwa.؃HL?~%e/C n9+QuoJSw5:IuƍM]^BFi'wqLfp;U=C-&>5Z=y_-ۇvg97=Ey7#Ղb7BR,Կ\$ qӁϴghѦh, 5 & 3)AcVd Lz 3H)NC*x;/wj}S{`,z'PaF ѼJ.5ɵ3bU%]>cugԆ٠pǹPNp[Z**߽]y}c1/xl$a]O?,:6KHcP]sb)mMsD-- gM,g- 8KV;oB$}F^Ɇs_uñwLrÉb┺7xΛ^+de&2Vu+;1 ﴎY ,_S!+~[#b,Ң- K?NYow$]` 8;*yw5iy1㱻\X.mbdNS4sNYv>} ׿ğX Wu}.zO{e$,g j?5f5:Ie׵f]UjTN|b;Oɟ$ 0Չ1w_`떳W}u7Ȥ/9'M[R~ " ߖ|/bqh0$Ph|ܭ|(]\~>AmCMGt,~ *|ʹݷaҗP\T*DE(KrJ#ൌ>>^ jBs9 ,Qpw\|^ƆȻHm6Y%YBgA2:S!ոɵsTD".gjsbj 5{. I -Bp:W"!G_`"&S`*H[R3tE0) d.JZe$EK>~|hW <'Wv8f8H[HFO> %fShl8:g[^ы\OaUZKCh|cq_;iW:H=\%f iI " ,cxSlo"Ո=B&ƙҦj.(#O.Vp ˶Vx$<.֌˝ꃄB !_J@\oC>dֳ]97,PQ !X4 >tU b5?UT Q"U}u:wmu\]/ĵА;C PЛ-Ju `6yf2qWTH*6`ЩäI'`~Ι=5 mtχ:y/zҊ RpWd6&qbDz/Ub8?gA:R@PljkoUbLf*)nvݢ DO,88O\4> uNbeHA M{y)~㊱(φPd0]XJ;Yr1 H?mb`c,Wz0/2ܽ_(uy52s:jh53|:ՙΌN;@m$z~^`A9-d QcŖuE 1K͆33~,> z!X ?[WݴBW"Y8K pWѣ9yx1c0}|rNi{B> " [c4hJci8n76YbQ)ta#ۦ(d8"kfQDC/#2<_c3f&vyڌ)F: /5[F&bQ|ǵA/=uDްkK<G79#pZ`.l07 X*^@!/ktms@>"A BIod>;gizzIYMc-uC,Sۍb6~ ?=1C-B;БvSS"7JGnI:ԋ>@ ^'TbYPWg-ij9qa[2OErr%tY/-8 j5Xh#Fu 4gJD+ًHȳlf3vOTg$ D܈t<߶cQњɜUongp>vI""**#I &!TS(IS%Xxf%-m{V˨ji&Ͽ6د.ŧ6iRj`bSJLuDRW+JKEWGl4%>' bQgMK;,O`u-yﲤ+.nMVZ XbQxpqM>Eb 4"rWr遆\m>]Fz2w{rl8y/ˏ5sEd4Z@ F0$DQK@0%Mg;n3D3I$)!,3}:5o@.W_d_"òv><}ы"Q#"+V5xc_稉I=AAVHFHb~whvṣDObi}PO概=#9=s'uW+*ZT;oX` ((;E[nuW#rޙj=]~$~IPC:1wEgn}{OV\nTqʷfM-{JOj# QX4}F:ĨfyyY$=ViQԍI*08橺}܋7KqH=%oJ&Ww33;R݊UC*q $m]Zg{j{㫛97&Y`ə0Ɍǩ/Sysz'$5wg[j"UNc:SʻyS:…SC:( pN.N%@$ȘB7ݒP b@T*Zw73CG'{YՉaEP ~7Mx \\W=HAik6%;Zcn$$8R>XHA{2ַe*}L"k- uX5N ?)9-9z|@JDNh bK$<+1.Q]]ˍYGwz \Î?sUC](2´'R=h=m@ξcM뗴yȨ0@ު0 X#@@X8ؽ Df91[>+\6RIL۲e?eS v^Ut#M﹃ܻ_G[ @$lxr RaЖUB6AͿ{fXZj|* S,koY6ք6Z,1ǯ̔Eޞxi;sEѭ)YReTLND.%Ȉ$~F@-gg^unYbQɜv2"//_>5cYǕ\oCB>đwD3R]YA{>Bxsۗ_G{f2« zI+(sh~ DEj23la:lW6wl|~0BAA" v Nza^ס|STPcL<=SG^Z~ekS}㿇+YqfeξkK ЄAGJS(ĐK,GZrTf;_c&<{?EKO"xj*jOã(l肢(( O_Kû6BW}>GO=udQAAXyy4ӣ~Eɧ[ο#+љ)O AH*d}{s/E1FiCm#v;Cmg k/Ǵlpse"oxKu ?lǐ Dp5+i-.pF9O拞q 'jM]ߏ) '`7uUU-z,w ~>Gbɻ j=)%m>ܝHvZLD 35ĭϟ5]QvX{f~uxɈ(guis]M^D2NkV"dKENH!IxAudDC^  κa$" OG`.!mh~au) iStLANV!$ B,DgsuXBEdkpA+իK|(Q7?up_2Ыy{GI+1]%yUs|y^읊 ?V1Fҥ M>w K)/_As_$)gylmen]K^λtΚ*e4GdN[AϵǤ`#Axxw`Q(2ƜA7>qfHЎcc;_ L u,./1}C1!P5!&յ~G~e!fR41V$ e4cH}h~ \{{hdYIO'`1lh.Z3yD͡ǝ5H+5k'=H2gӡȝSBH8Î*N!*5PUU40v'ZlASwR#hf%^^lͳOAV׷'d"0"Wfv~3!s!^V!CKj~=R])n\3OsOKhr O6-q+<1;>AlJv ަEY#!]*U\5-9m%)Ԅuԭz6q>!~N$ {[*:{h3AXleb5P'nZ.Em*GBn-~`s!qQ\{oq`hb>iܶ0?q.ZW8bSv7B9Qe` }mrenNK^1e#e˵f]>v'a1Syè ܮGSU\ i@z甜U&c*q%m9lؚntO kIgnrr[=G`{zH46h![*yeLNg V*i1Y5U=VI"W9K$w1kj@ZpՐoU ĜUD[hOd&Oѩ{ Uhˆ~ʺ/pSz޷WEiXC^ W;9 \Fuf\ٹ)\Y[ ssЫy:OH nry5lц c:ekNÚBzWof%U_odD ԟ"&Ea3;bQ^TcRjYU'TB(CUkpW,M9Szcqӓ@YeJuXXG?lCu⇦rO2;~q{翞+ĭ)?O XǮ)HUf5/{|奕;*<%RS5Jz喇cnϥRdB0u )R +Gz:؍(-K:/Z:T '/JMdt: g鎬NwMIm̝}0D_r~D=!g:AZ<e~zpX}&w⫡`*/@*V_$^23Fyr tꚽ-MHrt"|)JQT0^y2 ;߻Kef̗f5ɼ|Wu $NqĴmy4Џx}8du@E0藟'gx|kR8^^- pkspU:kYz6C~F%XZhx6t>t 攤\Bz~[7X.>UK+U-[AݯeDËq+ ]`Wo4sl–1`&<{h vmJhѸ|^ꭿ̑D9fjrg>ʪL@{!'z oh|ˁ=hD*&dEr ojY˳B *;@C *"O[ݢHYD9@O 2G`4 ؙ|-MV[UDj׺fMk)\?Dу IиG^ o$e^콑ϙ??F(](>^7yN?DAQǤ~5Jl?c .u,HRT  :w*9]j0;^\̟{Nΰda)<q~Z?J4V hn`AhrK]we*BE"j$hYNnVY_Sa;0|>?N}J0IdVJEbz%V7* XCs!lfheaz[VO˟/ߙ]w2 MU{dΩ*elc3P-Kid] &uoaHҺnFkDhᕹH'w0H*";1}Ĝۼ Bʤ!)I\Ye'uב;VE ǴuyS# m$J9'X:(ÏS=xtZ@gG`&eA- ְV$T*ͱdySW7Hc<4:pЪE1nKݵͫY/$Bp.ݽ l9T>V('xhy}g׾ll\ )Uuc86#2]$F<ձJm+pa߰9fq(D@\{ Cu-Kle3OyZzSzbA^.2-UW #-t#qhE1E&9-gqێ=ҦN(~ύ:K3\͹#i \rdDU]í4ËOYq+~fz1RWY3cGF)cGھ_SR{zie _pqI-7BawQTCseenPsHP$IB e3g)ouss0XZ\ A6R/@*Y~/*u#HL5XrͯH)e ͟%_7^좿s0lbf E^q;>+6/m "5nS8Y GZ  t^qZ쎼<+mldgW8Y.K{Zfs5)uzwW/&EޖZ*UNHՆT?jY.W%{XVh`}ofy10);sJRXC,#~I%﵊~vԻ~+]c9a!±'2w !|+]BZY$ H# C|> M_0!TyU-k/ŎC}cۅs:ru&̫n֕Sh+DAIPj+>/ָk*y?S׳KI2qԐN:ʦ,/^ܬj@`",ͶMUJt"RlZ'y}&j:9=oe?OvV7.BD(篕"?k$%x0=zn\dמ{Aʿf2>$Ncr4 M /`{Nl;*8̠r{:.^) &ww~᜿\o߼:mСLBQC<x{w ,A ROvWR`*Y-I@`IFghmIįE>۟|d'){V{:թsj_+A>v㮈qlsͿ7Cњr,m';3[ƭⱃl_9nOh࢑L.ѵ''jI5~piV;ۗ!zꈴj\ŚZVmALwX%-}/s5C?U$Ÿ^=~PJN-g;sO3fn"Ycshkv-gU_sO"Jd|G_0ī[,^i8ggz.rFU[+ٽ68xXѱdv4n!Kȑ{t&iu_X_VkNQv=w=‹ݕTx$tsA#^Mrr.Ǿ*k3?.!c.uqKuô 4&9Yٵic{:WsszM%{'è2Cc޻ߙc^w-j=?ﺎ.~C#Wʷaؿpu&_vlwN4 O؛keGZɻ&itX8Sqy?JoG⫶PѶA?4Q,:"HwFdhd`_l"}T#%+]en9\}Op K3_Fo}m{oNw+`O*&bUҼc\脻?Ah C/ spZ 9YV^FMЮWJ<3G5G8isVgC^0" xbd$_/HE1-9qh@Xzz2Tp|x+ܒZvlt+1ٵ7|8')E ?ΈckKR<, KMF3V!Ӓ0_^ jً&-+w'XYeՙg?M< 6jD}ˬ^C?ox͗1~Fwto1:].𚞄sU@nDZepZBF\}xɮuUgVeJqh2X̩H {1($Lшj@il܎5x8sm(ֵju8nSo˧:iHZKǤ{ q_^5)0@:jNG& Ye#'AQtVl<ٵzxT3~Fy~8ȏ3ro I\Q"ROc/@e gL: z$]E&d{iWn+(M_pLS1PD+%$A6CL|&Yɧf=ob.]Ľu$pp?H'84;֮fIbDj}K>9fBg+:i?Uڗ2^ٮ=hMS9ݣ&x@~ ;G9 xfU% xBj^c܏˗ 9q/Y*7_hIbU4dnt p4r;wYDSN#8U|(E|Y*= =m>Ĕf AؚLn\# cVSR$Na]nphEޚ?&5io,CK r~qߥ{V{OL~ ttkyhv^6?6\\or!ywO!$ $95q]qQ'3p X0ܢ::/h aCFY6$sz/p{[r_!lTj%me rRȴbʕ~i[BbHn)8@L|MocpacI0MsS#A ϕD 8`m修2X#=,KZԖ{~SNqw~~5_4~.vx ZADS .?Z,jT 3BMe͇{4udTN&ǗW%XCLPnByG&&-%촵q!7Geo7TCN!Svg(/Km+YA8qL(Er͎SЊԿRK LIxʉ+5ZWʻ>F'fn+0~3Vz~n48 7mفB JTء&{ayؑ?OZ`OAQS0}i􈈲gΥ[uI 5K^䄳ܑU]ۋg\!W|l9CPu:+}ϐ֬Gs幢<s{Gy.ؑ[ H.PqbDDz R=H,H ߡjP>(vi͊JYqxɞ蓥J~eH%ᷦ x2=~A݆Aj rzGDTQ$' < wCڷbKŚ h/_.v$$$/`ӇGNz}.eC([ućqѮ0s ]핺? W=<Ѩ?Q9ܑ ř[vN\!NppS&{9,,7pAS3ɣ6w (x@%î `x%m1Ix?7}nZ(:;y"Q@3o.j&t.9a*>LA+ ¥i,C1C~f3QMnv x0Ǣ)d0$!Il.s $:wWj|>98y(UTNh7ydOEd0x[>MG%v)R8^!6ar VyWn|͘~(~c{n4f R'!$V6Af[Gz 9wsJОЄzЄ4,.HS KKŃkx%μ9VЛsMQ0Ot].ŴaF÷K$6B~ i"T0f [\E-.r .t.ډ7v +SfY<]6\ME?W+ݜ?Z; g^(5CE\,`J p$:Ҵ(}fIџ)b,L-/R2_wr2{KqatO?tOyz>,KNA~*ћr" Kail0_7T׼";۳|ت H*!!ci16SkTjz:vjΏeѫ֣j2TK: ALa D|KCCg;7"Kh~o%j!u~WPA]Xuq!7GJz鹒!r%uaNK.tϯ[<.y{:ƥ_rNcyug 6]4Y}/c'F:0Ɛ-w 12TV#2qu57zSEl q %n}zXԍ_[E:ԡOߥ:0!.fQ\?^įv~U9>+oZXG}vK!v@v*U1OՓh=U!8Y[{@Kcq7pnS&Bv/.@hK9` 17z]UU[E}^e.³M 2hMa91a\GRfB,IRgQ2; m5!!+$YB6aD! kI1z{x +/OCBBvOh]!#iV!Zy2$$I}%&C%&E}͟=޷z B"Lu=! N@>D@W2F#D_5gYjLȂ[AGCc|clfRH)B$!!6)ڜ IѱhhT[m.Jp6sVM"GWB>vϧVv_eF։'yTftB$2 &lRjQ6yJn&+rUMC6u;8|vͦ,*nK @$F)@b7:Oǭ\MiR,` d"H,XX D싚ܼrNu_}=1/'Zv~:\ 1:\WF^aIu y@{=k@'5}?"yɪ.8|)8z]BMdZ)gΣ* p:@Q̃n=18]u^7+[,I*XMU!;M TjthsXzt9$ˣcMlI  eo^o$ĶqtPao@H  .`/h;C`P *Ox~}>/C7q=om2COsSMU q8My>{biUrkD`^՛8Ji( lW+oxN4^>ϕ+.l?4ef 63_klg>k[6{BʾsS0ƜZuO6s(A3܈F=}" }%Ǧ^i; ]x[DѳE$XaK0|Y@9]M{$jH Bt8,{볓ffk Al^u^klVM^4Fws9M"r/R+" v(HM`W,˸Sb3y *j;~x\/Ϭk!@#,_&8fAW[f^q̝NmjMXAd^tLB z^_gimF!fuv>~a)3RދCy\up|{8WLs˯;Sm([,̭ɏ^QZ-4waړ_{ի/nDYbƊ'TbkjF[Rp9ůY@zz#nڶXu¿cܹtEwa1 yd\ E3{Ll@6B(E0442ʍ:.}9"}ֆr hTl޴z\k{|=rzYWicO$Cy̞?sҼB}vlIhj~Җ O0M|?c k_,>+{zI6D|Ff>8ɉ&IQR3$b̽o "i~8]#fFvj$c@""K$gj51;z{~ӎ1]W'ġ{+/ڳf(|*UZY+?RhًgRd}cDŽtbJsoO|ezH:H49?{U2LвVּS7^WjU'g:0ڈ9ge/%KjՆVт̓^21 ,eJٮejSH|#=[ڿ hlV. vC >o~ΐz"Ml M -@O„y ocQAkoת='Zj$DB#$ lBmwڷ5a˂"ǜ#] W.Σ[ͯw݈J+IHhaY!gks`¾+ػ 21T?)!y.A8 6i$՛4}BQza:1iDQRJ6Ixmx:*!"@*GEz,d :.1h Ijol7E6֦t /Y}Džhnj*?~ 9KBL$8 Ļ{I2'd7@RsC'F憐CҘM V[`)kWbVG2ܲ"tU{ɠyͷe?GSEa 6pSkB*⮕BGa%S.lIP]HyHla06 2wS23\Pj--uf:SgV<ztxyiٕ/ Lbu4FM [Q_BJ̆0qXZ!6QK,m 鎘̆īMOi]F^@m I "QT^ҝGbBc_ wr ۲ڿdϟT=fz@ZBՀ(~e[|?Mh,I9S^?س;Lޗ$e:gWy j>E1%cW/8 8E k} /Q͵gklYrB-ihqSUP!&n?nO*w5sk bQf'}SʋW("SI$"P_S O8MdDQ_B ~Ky;bҘ$9m)L.J5>RۨKKlB.<*p d<6EVX|<淧d0+>\d55e>>|f~>2dsea" uʢp|՟i$4;b[^pۧh,%H$yHX>bHhKWQ4לW|m{g@}튵:cK і{߉Ni>fMBpW]xT}zrÕȬ%ace2Uj^ٗew-k {f(AZI"EvhƂܽy8V%@C,Ĉ.-WoclO9iPr[[)T5n(l.%U[zKdӀYs͵Qw<2`K4;^˓ogkAgъ`5]_Я0 2Ѥ*$!spѺ~-~ 9v!KZ'yB XG>.(ǀFk\mcs}}i6vXr , +"f[Uq,qarg-ip *<'lὭ,fe`}=Ƶ}y?RnzURuW>r⬤DFJpqj w^ 8uר{[ܾP5Z"RTti1VG7}ڎc0nDuy]4%.JY2~*]HTZ{MoQWhx[:Ŏ#34"n!'ͩ/m7bBͿ`* iᱝJs>0>a ! t/;Q֭iaqۢ.J@6\V\cmT)~W}ǵSPP/I0++=ewU0w](z΃p]W;-]RX,F4%hJг$8s+>Mm˂tHTE|Nw]I madnpMC>;kd!#C2V<ߣ[W9;3H140+d@4\J[z҄l \*qMeAOʫ).pe{|;yxwͣEe#B5sUٯ~j8/ҁ.G~CEs˕Ýo4jD&0$)$P]S?s_ug~%$ lCtag^8s[nn_%[cub3t>[fv],V v7*;⊼gy *޲6:.>dg%8e*(*mh}_]CE9OA|*7T,[X,u ٻS䋝RF@1([{_IΗTO C_911 PwQ0 CW;sa??p=n^E5{OŚt.kسÉJB3!żBQ:_8%8CBKHg>FT%FbZVz(Bvmu\}y칆04@$`iw2%VMT3a@zvвH/:A2xBp RgE KyrhdG\=?r@t SG[^ׅmE+39'v89KUWN" 3~o!?Ͷq=.cC aV-\D5$͕ϦxF'G.N`0mfR @$#ѷ͝TH2C W2QNVY:;vsO~?XψKKa꘢EbB 7(5AeRXT\I9ξC}Əd|QWG2?~M5l..=+^{chc>ȃsOtVc~ok}Kޓ? R5޿ɍx|NVbXʳ?ǣ qŗsGdW] HCFp3]s93>U헾JS~ DI嫅jp$PM<4 @w&r+ʹ N}zdڙE2p}#؊Nbr>Q_Gzqcddz  x_G!EfZoƪV+OP?ɘ1rl+x`7kٰg\T-\C%06oE?+ם]" EQ aͣ\1_gsߙO_ _wS|޵aLY&bQKJ;IESP=N":^v͌בq"Vƒy[dԿXי &z-gfcKr3}oGo\U5Kr67b|mR u]|PΏ*{ Fz=rX2p;\̓uye39W>jT><r&yآ;a?̨SB` {%NY\v!T<$23_NwSntA ֳý;^HJ,b>rn-:#8ｷ+\/W5S=嗈.[FVP(B }l3lwn -HDp : yܲs_* jFFHm DH =Ti4T&6[y7inzbw Owοgy_YooPLQ19|FoBJ$d{}>qt=Z;5e< d$5`'[MSbWZ҂LyTR2A}bܾJs8<^gkˍ<|l=){FnTXwT|vo]w?U|zn3T+&y},lP& rStfJHFGgiC{I!75pb{:5X_ UbL)~h\#HY+˗g9o<h asU"Fy !>5A+*n"px7w}k۷s}}T 6hӉy)5wW~}78G|i9&er={ =Vյj3 nkɟ_mm N) B= Hxp'x+I% S:3,b%kҐ9}=w/w`?W٭л2 oߘviVb01]Ě ʄ)v6[PA"3)|{J0mAJGة1؏h ;v7uz>BwڹW0i HuS~Meh 禃WyJp$gGRXm$lx#utt :S\/8s|oe55)cBJis~V8Y1i)nIayDl[/l^;332Q;䐱8Ő?i"B 4}C@B|L={.M@{2߹_qnO_'' oK/?{|^/s+5mH,2?}?'a9CG5ۋt}~seֿSnv`Q[ G|5|tWq61^e;[t2BQJ! 2B@G8E^Z /T1%,M#;?nn˫U,3Ca\(Si.p!RKQ#[Ƞٟ-|QI)2F ✡bdgo1@uGtκl8w2(};tABˎYU_+,WQF5o20i\U7q~K9X_P>K%؎޻q)':D32&')9L;Sݶ끚/mi,qذu7~M#D)9sey<scQQd~PkC(HRB @'O㕫\ؑ7Ir3?D&UL<=Iy9ONzbeR.dMh1B{oK {1L3E_a_^GPu},o ?qGϋC(Й AyK53$Pd-eSLXWtqY,HXo0`F+6qfFY4,Rj&iZRk2 GB3Zmv8u܄7[ۚYu'[.*[-r,6oY=)9.|7B?(ܯlca\6A"$~tOY:y/N^4=h~ۛ_?FNJt*Hڞ5#I]D$fa4Z y5 ;Hs!m j &JaV`:!G H+B^[_G`.]" C!H{HI BB[ 'B Bh~a ?hEI~mnbWi8M ;X/B!c>viCI*5Oaqiuhqh|K` rCRYjU^qmYӎJ|{#쵆řbu?3 v$$KR P@b; YYS #Wͯ>֓J$ J< Aҵ*릳jaުיl8}IY 6SjE|e4D6 RUmm?QM<ʵ26T1ܪRy\?V~ՋՏ_Ӳs:I.X﮿XjY]ʦ-e: =#_['vX[-ԝ $e ZeHqgo]u16gEt$`Td4w B')+qxdwO40$V&W@?eMi`Ή?#o̼ylun%mړܖ[ dv/l(R'cB7&n-A}JȯdzZk\ f;P~aC 5P AY KaqH ;2"O58F:qlCYpd t>SI"LGbw,c3~m;ҹ+>I{WDC"!1)kp=gxuK\qJܿgmz~ԿY+ld׎6lP;1(, b<%y%|kIcl#󾆕XVӅrͣs*kk%װcnEXPC*B_I^j"FO'bF+tZpҳĈİW[+k^+.]z' "|,n>r[g`m% )(l+8|\f%y\*!(MA}[YWsD=խ~K^3S}Vr!ҳgr/"[%h"Lf4+L^n ^&еcl96-9S';^ zܙ$'9ꄶL+31agc^۫cS]aJ,0 x'3ef1C/4\^,2 pU{tF!B0܆BX!ݖK3y}qo kB3܈!c=S oHQB~0NnZʔRiguD ߹i8{~wnh!I4zk6cqX:Ϊ?6x&V!yW~(l)pIL3Jx03KnW\DSjZ R";$kFs Q<}UɎDSzE gv ade=䪓u v{<5\^afd/7ݨX Eh=|k4 F@XVc@$4(F7p9Thj=UoC2?^a_sVYeWe$тX,=v. `j{]XC7.F]ڊ1xlC'v1#_~~+.0^|ֺ݌9^;)4s,FݯÏz_sOQl/-c&)IgwNo/f@Xe |}iPy)mlie" d gtN'Klе<':Ւ]8ŹFE?,Xd (}&2 ?+8obuchpq'x捛^mk\Si4rёܲe>ѹ %!^Rc{_7$bH+0^iL5졞##_S_z&6]x8RK!TLWzHr(x%}c\5_bceJI9s|cXXau*61S`,IyITR|)&8ݨ[o)jb=L6i'FL}.B_hEH`A|؄i }]_"t]/7a{Erdgrt -GsJ:$gxlc3n9J/^%)eEDl0S<%hǒJmq&RL?Zi?7>ʩ~!TLNzaJj>ʂ!xi@]Jcߥznf}zsa? j 6jT"$ ʱ:d6idXtaƦw9. X" [E q*S{At7|?K$r SM9W8RuIqh,--IDE{~rfkg73=^cMq.lnbt&8hLec c2')frO5(ѝL3qcmJ6)*.6xltwbN?IF:Ӵ7P=k8'j܄S&ɡ5AgP1M(V0k2bf^us,E|+nvUkm6f8cu;pfڀR8{TS}c~_-G50W=b0P\M>"&^zbtm-E, VU.yOehZވL8Yqb~(lsYb2h0םb̔啥iud=Ot?p=ku΍ [84Ykqo}MSBpvHYHo˜86hCE¤|=S8˱zWp^p߁.%3s;^WY 켬У˃rL)(-n9mP *#M^D $0$דV~F+[-LnZ2p5vvnzqO$ّɱp)n-;DFb4)!Dh&lbk^bY#/ɯO6T^#CcO/(欬Ll\k`ՖY hҍChv?Ϻ]ې$n4 OzOGD1y +|(RC!cOEPK NkihH\6!H>"5:hlඃm(cKBAT'N7Wh?.d\wDsm4l2^ޗf[]fֿIg (YD{BAQ"(<bpҽflU/{},TLS}jAbHz65V@d/;gY^Lv~2EO*K~NtߪC&:LNXCȨzr|w9 OKȕ.9aJsd5? 5/"^ԯ1q?'wj7;!bSn.i*} 3^UgϫVh} gIt)aRMh(cƟ-wSM9hȲI2r~o_翁t9*(7C7_禔g (u0-%UI'JSBu̠-!{TRt`0II&l/ALsZ0`? *7s?Poњ;/h-z@PIŸVX'=Lb6 Rwco?QCHqƤ)!Z[b_A e¿v#~'5j _-8_/צM+[v~ ;VVҠ ic8j$v=?&qj} 5mMBz/.MG5^8$t$Ԭ*RPc|!r?*~<1+n',1L~l7+s!)1X4K4z sj'w\gEH7WڭBI9jI};}}.},\m嵮t'ҜAm{߭X;M~(l/bjE}wmiqӁKr b8*G%+ǶH9O4pYзe1e*T{tK4LfE7}/G&#~wT`gSz I~HqN9&45ƣHWا 4K3+cqV&um\vZP6G: b9|wX8 p+Ư%#@bdB 'nm*pzь$2|/c>C/oò=Va_#ό[L ajJ&fTpX !P mZqYWi^sXM;0vCM(4R FH>!wܸM[S,q[n߽z>ͻԐ2ihry7Tl-{n~*6[9QuüL1{(irn(TP܅2x*Ĩ !- ,6bMH|/Z5';Bl3>6 5 of!u?qh*Fܭ^}PU#p=6=?qZuB3d_$ڦJ',bYƺWU[nP3棉tg(1xaU-)y Si@Cb& @=NY7B$\,Hido]{jpNCo5C45ù55~+3QV-V0׺uSV R%"zhǎE= ]q ЮI` #44#ޑtcʥb6?GJH*#;q^nG(5Uq=%kR&9N]}}Me)Jg\]MLjǹy037铦`=a:FSa-MU33=_=SUt8lJL_6n;3D8[ZtBӼnO^~wi{}][=ON&--Y~vvKx4߳flQ13ѯSCqb `$_,^Ee-ۃfVYw?&ccLċ^/Cuvzt,1>clf=b+y-/$r4򪻫[. n}vŷ#Ǎu4T,yii4PQND3&/.Gsj<Y"aʔ"O|tt,%p$H&t !~E6MM&c d_ǢoN}cB3q٥-B>%X~7#;PCVRa8n ʳTREa*\":STSs뢇߉)'.4?qbKz E_jUƻRT[ŷ"KG)\_>-6AEpU]fo7k6 ؛^RFn%zg# &i8}Bވtl`&հ%9:4ӻRf ^=Kʘʱ36S% [W[M }Ƃy׻¦gJT{[>, S&V+nsDn8:yaGq5<}Buj,iF3{$1q*)yypC3-yM^f6\Tz^a ,y>2PO'Hi9W'8 6'ZVsDaA;ܴ'aڛ4r #`un]4͹sK^mhڃ\,2iT_u P"rtTBy̓Ĺ^sMV9*ԺHuoLN0GKvo%UM,Qʀa" E!NM;SÛ|Ҋ1޾z:+ Z:N7uFaHÊ㋒Pqp vNI\deQ_5,VW*t7kmeO3Qˬ/d)($KW?]/6Qftʩ)uiӘ'٫eUxt ȃtoFY彡K#m;4n87Rt1o9yMͯgydq BI Q;>ײ tr$O{t?␗8JWg9dM`g|0jl2tk>j/Oή| y5pG[M<~Zq>3ef}s q^4NhVH)"0֓pv5k/#N+)^܎>QI}}1m8Z Jӿɋ-St/os6%Ƀ(юc*&RDgT' PiƜx}_fain>!H}[VBhBG_ʿ`_kܙގ+I`3ԧI W HxU+z~@ T"ӮoֱQ8ƌGXX! 2UY&O LVj .Yq>:iL)<Оџ~hyI 8V_L@띰G(4 oUUxf6VVQl='Lz}`އoQMyHe:UןѲgWc 0rnbh xTrsǓNX{^IRWZAND8"pM}"əIǰlc;W?ҩyOtSOfNM,oo(BIY1a 9d37 ĹE,Fj qq ,F.zzå v$hv'җ*YJvg+Eǩgy|[vcՃ[SjTyO!TQN=Et<ضOc罂tYrAx] R_|j6pS)BTKo06'0L:-^W]mFбY9>'0n#p5c/=Uf†,YJɼޝZXjGW04ZI27W~;0#xRێoYOs\=.f#QRdN[mpH4!nGb}j]]y6wJ^c/wlU OY*" ;gۜLB-~YTc-:UJDB-_nY;!79-;5=̯5ixzY-bq9BI)!p ߘ뮾LTO8nmȟ=NݧN*0ԚܵL/_M(~zKm\[Jgob.zu+|KI }J(/-*uaȴB:@:G JAm&;4ˑFQ)#FVds.cSn #wԝAk[EVwM|^͉Q؛zxԿy74RdJ.0QoEə<4$%Q_jӽ_1Ar:oOd'E{r[.1}UYnU}Y Ϣ ABEnreI̩&bS]Jrb/eڇZNYTynEEWo}w\q?v>!e;@^S\;m s$D񯦼ZN:μ-k8jg QZ\꼭 2ɳ_]׷.ɸϊVc0AN~92(2/thfN|}zh œi CK_HHYJ{Uu +M-AR)[VN恄A}8S{+>Qh$&!5?Mz~D;'LPj{35aSlE- IV^p;L&0Fm|;C:x=*MWjSr~GWAdd`Uzʱ-4ʹb$5)sNhkLhB8;EA(ZXw [bM(&-kre7 =sY"\̮6AU4|M'n 3I@WD /P X_I?G*X҉]פY觳^?%TVÍE1$M|ȏRM-S6E78>u|g7tlҧbnv)yDIo)K;^'oί|Jnyg=ywöSMm/]O}x`xo_X۬^vgm+AG}HӦRbԀ F 4s&hc`jD`#X'/glΌ vml}4S`-ϙL Mj.4`TUhh0жi#@֊ (UcK@uPP76;wv9x_mz|ۯza;mdkJիiTZmх\©7jOޙv|Go Y (v +nnzXVl=͂:y妬򱴐5T ˺F@J՟vPm]a^J n;|@ P ˕/vZ dRy#pBꁀ@ Ϗx\h @2R i&fz1)@n(uk8ݸJTEj(z >w`sꙛws\uV]Q"ݷZm {mF4(vtJ$rbnmxݝp4€( vzP@f ֲ:;fiѮϡikwRb 4}Sݫ;;JcBۺ ÊҚ{qu݅j (ξyvfM)M|ݱq|})囻T;7UPqw`hvfڶYg]u]w]l=nTwmMpVepQѭn:s0`wRh{)VP ;>zuRZ{;wCmY%QmW ѵҕOcW݊P>nke,ƍ ] FfvqU%S5J6֧i{]Gm=#w[֪Nػ7ްݫNhJ*`#6u6½=7;=;iwk]k^JI;gvȠBVVڤo.X3^/OMW4]mZjKYd+޽<׭s; K:wgt*kݛ-;@dm֫#wgMU6pJ(ն;4kVڻ7nsҨuUo3buZn6ӽK׺zꆁ@P }A/`ѡat -O@`Y @0&4i4 S @@ 4Lh4a4`LLM10LL&L@D$L@ I?MjahS2IS 4=&m'=@ 6ڏI4=OPMzQ4zLD A &F!biOT*lh1OM6=4ژh zh`e?S)=2z?TlhyGO&IDɓ@h@5=LLL Ojj{#Qd1ڙ4ɣSe='?J~F{z7=FjLɈ4Ꞧjyy$&3S" !4@&M`&2h#MLP4iL 4i0<&5C $e[EtL\D/ s Qe|`ЧΫoEu48r2К 5Uh?6g[5w*lE2J|n/+⵲ZdKzVC/}\=dN}#gvm]6ȓ;:Izړ|ܤ<.-mV]\3.O=s^] j}. qe/׌FƏgt[ᦾ|/Snn?Bn< CHlqXr93~߫IKhw ^'R!037ƙ]Ok"t&m'_bͲ=y>u%GwygK'Qx?t[9=ㆮ~|GRON ܥ鮵Bkz ~^շ|d74IՃU&cӵF@3X/ֺ:K_|"jw_&D8yMjmOŖeϪjoYlsRs[~诤3co:T}] v?LgY@g}|r[{~gNNgpdT|tsux|._+crwSw|'[flZe `1"^0(O_} L :GULz2}_PvYQI%O?g~Oڤu:h/?zUn/\qYo8/Wvz؍S?HrkZ[ 痩aUӭ}k0>};Mb 4ZK)ݦN]ݜb;Zon-{:L#MW~|9v61~Ά9 c旂bo솧Qd;Ɵ-=Y9Pַ=xuR54iXV{;w4Pd]m pu" //}rj/-Eʊj0=KOӡƾNjDV|Wip,#ɨ-7(.TwE?Oͦdaܲo1VbF@soi^K#L剷Y˕e!_N^hk\DNCw!.~wV^ zzr6,Ҟm^A[R7D.?b8[9+J=w2nN͢%d8/׃s2Ѡz^b(sWMs8}Խ~o2:{}IYv C$mԭ{,~wmy_M1hYM܁w sveZ=[rAe{UsDژA IPg'z}S̿5{90[w?OWt' ^>Uo04"S +yс}1.ffQ  哨$/BD{4I^fO_V$_ڰy~ Uʂ?la695)$?}w}d5i^y~>jOsdgw58N6"?qt ݷG̷LzNpJ 5 8 N 0-J>wh *M3gh KFxZ3dg̀ý&G L81:b-O0̷0ЍHtkͺtۻ}<I0&k7̧Xj2->TOB") ,bR b"Z*)H *h&ӚlfBӲOkhig_(e h7FHDI-|w+r=as66*(qTj~oi{{;{&Ŗ KC䥯tA4ټd1i+/1t e?^GrN븫Y>5[%[*Hӝ?1qO"8-~3b꽼=j1PƂ{--pɺCY?hG c=eij ٩|$s CPgi?;+p3M[Yr'?ͪbT//:Xi2R:DLM6j8~r6/s0x𥉉3 ˁB}h0~>[3_w0缐H|s8_o]g[OHn{#ϮݪT=m7\D<`1Y{u⦪: ~=Z(e)n_?.3$.9t&gЁYkf^wKEj>J_K5ɭ\{|^=h2E/{hbط3OﭝH{ Gpw|.Fԫt4_/+`+4T<+tv-U 1;n*z?H|ft\?]ɽ g¼6~}v>E(F7ɫo? }͞R->P:{u_m{Vcotem\vϗ~tRl4|#nw8<bx'9p%mACs;[~_VFkA|pwGKuZVNa?_ ֛ѩmHO\]}86=5 <W$y3z"$@A`_μ]͸;TS~d;=[X7#o8lݞ2.SFw{l_oo2)'va7G]̿OVoH]cE>'8VY Cح/´_ΏLD)Ñ@딹O} R(" ,gHYcth'݈QD)=IP}iV%5-'ty~62EauWLz)_"-/\^eAtԯ &gy*Wa!,^Bd(RޚHsBH h3j{j)EA@ћp\}dƙNiЖ4^X⺈ {XP&"{(=EAB}tey! /Q?+̙(.ßd5޳꿻n=ݟ˟txt61S$՗y6Ou"AdGyQ|x1M!)z_$}@vߣ R X2L7IXnqn£ir\1g޻090ٜ0onX[aF/$9c6IN]'6BN8|S3:tD cy, ~mؚNTC e2Uv .ކ Ç˼$gY_s0 E("*{"`W}y8k*$c;9L8@~lIVY"SiH#B!B%b\5S*LLgJ`f@7zZEme qpLՑݲ"Pa@/й&O4yZ;0 Zye*#࿢b &lF Ȥ1ПϽ}<(@;G_5bP`<_D ]7m=ܔ{wirxF~WD3;kCVb\u('_<ĕYf\8#4#]?]Dsi[uZd][=c5,Ł/rQaEb@,V^A}֟BaYdm5۩K",9.}qhv-$>C{#>#h#vcIh@ ٬[o sfXm?YfdfDH Di"HF\Y$ F]Etvm֮8Um==ˍ]#MhXu-5iL"Q0Z 2 |Dccα) o,b v2iHd4]궋[ nh|ٍ Fq:zγ $CgZ 5ԛ6x}:^4Ԯ/}kE*7Mj=ps(Ti:aHn÷M 4֕5g Q2P3!g"#cY2jQ""&iaXGB锅 d^T>U٬T 5Uń%jC%|I ŏ= ]A2;b6( 6V͏ֻfc`Xaz :uz"(,{Pg])l4kBHP<8.!H#3(r~ϥnǏ Z\r0UK@ID2qܶʸfg[^vt"tG7f>qj ?/ϲ-Rqyz9 H#O =;^Q7"Ӏ 1057xSiU@(!D^f=d f W]`O tR)Yzz)X ~ -; o3F^Bꎻ5!bp`((V" ,(cTdPQb 1,PEcUCRg4\n'Ҥ3ղDI|,+?2 Y*( ʥg)lwT@4Aj4ǕhߡD0Kh~>I6$c׍Y Hɼ!v[_x'>qٶtTt(NIʭ=4A:JXm^SLkx;7f]]/hM)e`3DB/Qݕ{|$ߪo[\>V4_c3un4l}<@I1 tOvGA9F#8 L 㷤:)G$NvtY5_i *dFlptLL2o/e0QXOiU|?, sne|+ `4%8=7 GH me>"<79hWl@Y J1'5|ɦ!m?,dn oGET5ˑ(%9jT3q9('yeni\МJ'Xmkyrqn$Lɘ``ʅeM$JČg 9c %>ZZ•wLsj^a.< ٶg4@zQcZTGvd] 3& _e|_? ͱh#iWβ5 g:lRWE 4.5P"SbemJ"d |e ,AAe7BphضkyF-韷vjti壱f_b|l9lP7 -7(W7Xv 'A#5~l3k,o3&gC[einYƋnRA&f@ ֹUp>JAla,'T}O{./y!~]L]Sykz) )Lf44PۅjnST<Ʉ@2j"zg]r<%3UUἲkn޸p/)<+~K0c^>ZX!BQP}8G>Ž)2DzeA|xou.sBL@@!CfY`@b1f#7Tw޽x4"YXwm/E; iq57-֞~)%'Z@'ӣױ}4u8>ϩثalo4Dɂ) 0"䳘P;"ޚ 0CL扴j4p/R"L!)ZSOKsnV79Sav%@5#@EhQfP~șIcv{D쑩V_C<_=8#I5m^>]Y, (f@# &J[gtؑE-] <3(xk)U& ݿ{d ̋!džFy IbE5("P${P٘AX ¾ZBc<: l,N4}DDYrbIKIG#۩0i膧5lN`JHP";6V&S<β/3@LXζ/1΄W PA>O}^i+I-(R`6 սlh@aLF{pv,&r)XFTX;qi!/v&hRqgO_iVR㴰rjwkZtcFHGyO|IS%ݍ9B] ,zLc{_&S~iG4 IӢ<;zp҃B47IN| ޅz~nvt7Р>tޙ_k(N fQР{ܥߐ`d0}pz+uJ|I45*i2$)<|qrŤp;A| \1h3ۦhki4t+E .}K^1]vbdv'ٰP.P"ZȖ@ q=)T->d[oCApK;U Nס#gnø)#CҀ -blX&0fu.m9!!ށVL? ;Zָ%XJ)d6 EMMG3uL-^#_\`ë́* GYIp jT4v@6\0l. L&6S%U>kÜ$!\xl-ֺ}=]A o.O҂ #e%mK;AFɒ-|YWu*i eya;]J!D}'.PK<^hrpd E GI|ChNxl"[d)tQD ,M*@Eĵ 'k) nā}uq=$c Čr9ŌBaN[7H)>l4b[FaS!ViB { #-lcy"tQmYG% $ Nw;3HrIɝ\:oM:fmrJT4&Aʍ%r/Y nA"k`0Fc0K(XGnb "KI%ڬ)[Htu۪I\Ӈ$.Ha#'`xK6y rdI;.:(:D8AŪ2DsB]&9N StμN)i6q{tYB7 ~Z7J)^E ]{rK@zýCt HNIPs7h;ܶf '!a ;p*H"IY\L,;^`%NDE!璋M4g0ZF$H2Bid&!U_ (1a/Leij1(%]ڋ<mw"8L)r@& 8 A]Ţg8p/BT 4jf׹uo:6Á`5DҳE`+vL$:&027HfP8'#`R6 ZH5`/[]%a|ٱ[ *¯M+' ?S@X]zˀVW&j 9NH a YU!E S0Lb V*HA;`q( @b&BJeLjsf$DЙmlH!s2{˗I!DŽ@:z~e0G2cC qGY.Suzpb*(&S;vn].UVE!FPS;gRk⸑nӰMm"^ek}ZB.+H+]T8"v K{0@Hd4\ ͯ㒉{+;Ng!1O=c)kciݭ$&IJi`0R5\YC\oT|ޒ|2b@LTFLLw9_:^7,m:'_x)zD6hT5Yf~Ř؟>4^TJmWW,S,1LhH:҆E2p4F1x *JY* 8=Ekqk[I'}cuH >HR h{Ք@祿=lBqjȰI%憍fEjBDМȉ";b*lr*+fc$=2Q;zG ھ,FO 5=V,Uu|  b%⁲#Wp5$  A[ AԺM<Μ&8D D*rm73.#īV=&6ओ'+Ϯhl ʼ-΃Nϟ\czOQVn b TVߝ;@.QX\K@i޹:W#m&O#7Nڔ+Ô%jce(8]6¥-1p:eVw-*tt"=y)9<-duÝQj@uB؉!BXED]1LBYN #107$3iDw?IUbk-{5NRU+pv̳5D[r؍tCL^K}acl a9+UC]YY-$DdB Uɮ ` 6< T%0(VGg-5+<-! .A) EKV%$QɢI"Q O J " ) JfK))uF0tJhrC[j+8k-cR) Jv3r*bgk`T\Z3* !:@;iI6MG808KX].rBq n,(2@Q9)a6B^=t=\`oaս=/oyގ $YĦMY])ZQbȧM8׬ Hhcr,3Hb( DXP"P+*r'(A9$Eks΄vWD31*z%bB-2!C,Z&ac[(b(#Mqն5Pl7@GEC,3VTLts˖w89d!.xŵUOT b`)Tm*?FwcQ~o!Sf J j JYA]IBbhA`$`UMPө֨R6PhLdJV: lV\WLh]@X"k-[^Qm*@`Alv8!nY 5xLj۳9ްو,ml]RP;{Jd 6ٱkWO &Y;MSwEwyaSt*+ADǞV 58i07D]$^wrT\ca>\G1'c#mo^L@]9s a (4j y<{y7TXG}sA:BCӞ]uO[ zE j ?| Ai1]6G|c2aAXScq  P3.Q|)yTKuu, |Xibf 2k;Yjd:6 J7 1l*163ӦݲְHdYٗzœ7jCN0gۇ6M1ZP8v{$;sxVlME.IX%_'`d=~ Z@> r;y6MOm{͙BSTI &5Cxzidstי>S #s زeP$,qzD%j-&we, i{fcKr -\BCUipYD 9aδ(aI׳$byDg,NHd2·s:[5f9X[ j\~LDg$]]d< 3!P^y뗗] M1ۊ2w0ÈY6$g m4D Rr%bZ,0 8 1 C#K!9tsy!t$=fcWab@ck C B NMBQʪT2l9MJA)gD)#{r+;#D}QӖ 7rfLjq-2L9#Zl4R[E* U`尼҆%ŕW|TU ޽kI k**i-Rl61IbiG[a4ﵼ^Z' `!@RՑlI# H!¨b̶Dݷ$NuVɊņ%9*l˜N%`#tJF4s0h;Yώf31eR8%{3)  4unP aD3)E)fg%CpQLz8/!C9+USINJ$\ RnedB nhd[AYL XXX2K"F&4KHwEM-q\~>GkrT%HHyyoOܽDɕQu#=n3iqH_te1!` ~ip}=Z!Aerj =&)񚄷7Gc߻l~g;W_U(A?PtodUu/xQbN # E҅!wdZtxxsHуxxC wY6]LQ{g*4U|)Ta;=4,p۔\jN a2gm'8,9eо&kmlഹE?ST}Ok%iw)ŇVӵo>`@HDKd%zRWTz2u&y):q ~c]׹smiMSUV8;>VlԱ>\'DQquhdlT5s欆.22ҴpYO{=V!ng=,c~( V@>ɺebYbLh&OSqôgj-$hFm69E)}-SU 3Lo[pgxz_JnRͤeء,B}{ 35y$pZыj *f?1x*OZ={sjjlJP>D4)djŭ:)"+sCN mb0{ ^{#;*7EnwM$M$Kw!׷<=vQpŶ+,;)npGC/;}ll7'4.jxҨ&ٙS2mg=ZYܵ!bDEALrSuۖh1EjNCIQ7l"p&mſe<ˬߧ?퍍Oߦ^UNٯXp^v4L#{[iA@^ [1YJmz!B;^^8J]N}#CA.~Ú׻ytc2|P);96_a>ۉ[efnϼ@=Ap%)F!gZeh],~K[ǂ;YYe*tS,F8=ַ0~􆹬u6Zx'$.FG}o%CnG-,Y^ZLGb%2ZBt_/x=?QDx/61{wVOr6w}O/Jvs>xNUNh[AVUۂSw>?65XD6e{Qzq_f޿q>"Oe׿e䷞U~c?1,N\.#XCm#nb݆]\1;`#bfݮ}w:_MvW+So=jV} &oqy~͉hhlFBuޚ/{O~P̴ͳcY't G/Ӥk,UVA($d3v倵_A\~K)Al/jxokwsﴆcoX]s ^^ٺ^GU.rom;2{8Et~J6sG9k37,t+44{V}ߏ@셆-`Xq%Qrx{,"}='BFn"p E?Ǖ`vNB*ev~[.*W쯹g_:&k~=Y}1V}4U,_t6Jk=6V =eͫ實Z=wnսz\9^^IUuf+sбëESd zl.ɔ=7uW֊[Y>?nV52;Lyo sev?Sod Uum=#[N}[˪H|[|V#@AWQ*mkȭn|~|}a3F s pߧ>W&. eA)nw,|H,o狵M@z|'*۔v1֩ '/9D^4#Vھs}/.<곰(kkH ۋ|6ڼI}uw :EppMl7I wwmf:ҵEƥcR ^O/lkp3+Gvsjj/Oi>x.㥳$p +zz|=>@z[a R+/?[ۺF"tyYo+(YguMlvUYZ(><ߗ~xz8irڗۮAG5nK8i~_Z;{ ,'W;^}kբ]N']It%ae3n5ۼY}fDJ^ E4/}?3=?Mo]Qnb/ Z! KcǽM75? (÷y¼~~&3zo}tD_7IopOgs];k[mn̈́/]:7V;2L qo]f)ɾ҆cQu?sJ ||5uU<#ͫ?}D.q:HEt9ky; vKd$yWƎe~!y>=&S\˒ mҞlWҕֶ&7~fr:_SyC!r؟ɻAk5s@km4br81?, 4 OA4YrƱhygzO]s(cؔmL[{.jAi[JNKCK*g=Ok;4'3@;7oQ]{r543Z˰Mm.3k~曫.t.˂n8Cͻ5-[-G]V£ynAF#_I+rH.=Xd;N}Zij91*s+M1 LN c~o3b&Qme8 @ٓlO8DNI"m !؂M9Is>_;;whJZ`YYUK@ēL!a'FmIaS Ձ& "!QF XBEP83got-Sl9gw+) s 0R _ڭ wz;cg=xFaa{V {}x[Wi(W;p{u.6O]߰Y4nz.gVqZˢsz۟s z}QvNaˍU_A:>yVZ>5o\E&~_ļK\zO_`zH~WEFf!uJ{۳5x|&aT;sAbw5&o7w\G\zYlW'm78NSt~B,Nu_Ȯ7pe)sپ~eƝ9)rz=ڻ4gO\'zF+}k9g$Jkᵗ;Ǿwq6 DL5eA{ɻJx߇s !c<}fi2ߐ&Pl#|n=9;>\_왮׳ؠSl>Wىzؾf.y@亴9Ȍj(Ooni'j3S0ws}[oOS[Z}51_?G)e!!5y dvnApt5QqL;f?w;Vxz@ϥqMߗpki3?pޫrE8}Qlۜ;wwe|Kvu~._MFӑ͖]tmN/gmvE *vs[濇#"7I}=କ>z L'̳n;Ŝi$ۆBīuO! P*iqO%=-ޓ#7ݴO_B$6Ѽ Yg b/lKX㫐P!561UA?W\] Wo(FnR' ^Ӊ0;cM/_qGV,,5뷏gk^LR;~QQur9L_|o|~oGL8アLz&U7!G.cK}Wg-n 8f6~؝.Adxђ <*zwhk>O;WjzICc3gm}O/~Ƥm*\F;kkAnaqՐ?pjC׫NpgG'Uexzlc/ҫzq55n%#bͭ|_;xtFz#=.8X8݁38K8X۞ȼeIm-^ݿ%ȇc7h^ݠjIEjth[]YH9?4ћ;w݈oB3If~].q}˦:?g?, _/wjwM nght^ˎnZ~{kxobEq\6jz}7/ ӄ&umw^*ߒ雽~eF #w[wE;W_`7M{-^|'0YnqێC#ϙ76)L&s +.9qp[m<#lx_({FBf/+}>Sxb>τ\ Ezj4oMM+vvpR:~qD5}ˬeľi7?5^^5w\l/G_,[{yjuIZ8-iKR^:Ypxӗo/-j~gsQ,g7'p?_y1\ MRE7ݟ=t9U] -o49`oO\zz҅cn =]0GXn#R#كQW{)hgsB @=^|nx ǝ5y׈}wC^-]|[/g ř8⺵)'O|k:Ȩ?_/R>bFK_>oѷWGJۼaܑE#;Fxc!Ȁ{On X]rA<|8/~u^#17m, ~#V ԍ5wiګt0ڌM{r6]-GXeA@7AP|\)80nvX*ΥY~W.#7 A:?N~ ;ST鹵YI4M_r/k,,?5eVO~ &#zv39Ě~ϲ:v֖) rNRe.Z~.Wm4!k6cE$[$٭^3;KEUE+s*.Vcl|}3'| ,~dS 1PPy `$Ԗ~wr ֺkN-3NjKaVm-s/~^뷶z<^3ɷj˟vu]#@2`ʁ g }37[,?&gqS]]mCZz=zԼ,|sS|$:?ń?:O1k5~3HZmu.?H#Z|tX! @ R쵡  LNmO+MݟEror>]dO=~u|X22 ZpBhܠo˾gvzyFv>qzyqeilj]Cwu A D$ʂ0Yg\L;ṀO#S!5^HN^_c9p]\х|걪~S['ù DO1w7ilg8])A *cc4K,OˬZ3')a:YIot8̕6d{|D.]m⏴4^X{q [ w"72ߒ'!/qot;T5DXοi.I!n2f[8P(%?re}/sF^H5/w?MС_\͠?/JEz=Wz+V i"}[[kekc&0_*&!RM. A[A)'Z lpͩH  $˻p%M/0Z˃tퟚ5%{yJoVO|`Tb_ٗv2`k৹_Μ[Xd !n"x> ˾6n՟9aO42 jAk[أ2NSA="j`AH`!z/}m=WtvG1J*1_<`l/IA /A~s #%?kvMx|n:,&?mvj:ΓgibSR ܒ +` /Z6t!$8o ΚaeGO? \47>hWzU֒gvKpr(XބWxGYo"8 pgMKkG["k+HSgQjK!F"L fܿ?wkz*$]c|ҷBBhE`z< pP&6`Pd\ eUF; \uqP^,?mzB]02$<ܸk |s.0hA&QJ֊]՛1%)[Z>b3\*t+Pe=;@#ߨ?ފn{.wHhR`p{ :a]b Sp1y+qυYG"Q%JhH`/b 9~^n]f/7Ȯ~_,3]V;o#2<fI.lZnF?6ׁqߓR>7([?^O3P8į"H*XG>z?sFD==tqM = Uݏȹxhw>p@ccsS{/}So27|e'r(t[!6&A+馚hW%,{F'DnaiHV!cx]S~%W=$Wʈ` =Nթ0>! ]o 3lgK=&^+v-E:?̣w7#ܘaO-QWZ6A lr+OR8ӐIEljwoX>|o7#\ˌ͠ElH|t-cMvOx:;r+W/1FOx[|4fr4K㥤I}l(B?{^ˆ.RPtr""}{zwe;GhZ-{F͏8&fmA]*o~5}-͝|TqM )~Aށ{Vg} TR^sjD9 K1rW[p7[]fVFSKz=l'K>9S"OWǀXv~|녟2{Eu$a/ĶsG=ٍ4v)WtRRYu(>jvK-*7,:Z'ӣgBa=xuTA`@1d(@Yd @ $T %kz$ \^F"1_KW;BR-p aQqQ#4uRy^梎)@ud/kl~Aˏ;{Ypevʼn>-l y2G#mcGR-)CyIBRsKBHZgP%6&ЉeY1Uˏ58v$d >Y'LYYTآ Yrټ<| J+'s|c>˻rmO>ۂJ.&F;s`a#Z HMy_I!xf98t>D}058bh[N :.C81`!"'?CQpˀǐwOh)~j:GyO1@xjasMvV^Ũ:+KauiUb0 D+'fic6?tyfO)dqPXvF$@"Di`,d Y{L@ǢS8^&nݦ4KXHEy$$d rW)ZY"L(+SXhV7O7|,@?kfgk汞LX{Oт~!V$~?ԣ?WsW _ 1d5Aˬ 5 1 %=#⽜bIcoGyōjS`es36~L<茠DPc t3n˄8mU De][TFEzXC'LsM09Mq6B ct!E"a#AhIux.ߋ#VTGTnKB!e?P/?kRk=;7aa'`0iXn҆,<>qZ3? qעhMդ\ iRQʕ-(lʼn@ǭ!sWP?(l6dw|(A;0Dh7"4"sk  !R,U  L6ؽ1di[,E:\H@M̓4ȵh&ձD=[fxd+-.Zl+dMYMS@i_?˕@.Be=^U+x*& f)Tib 24!h@F- `޳b/]H xn{]? "g6n;q68@ oo=Xc}\1J-2^H$ani]+C_t#)&tP"7NMhiK1xy'U(~iHKH^I"chWe OzZu7CmԠ:Ѽ={̴ ͣSe8+_EB~Xk~|e':b|廱Sr9QB<1icY( 0BNP&tXXmLQp"!D*pטg_FՈr)n[Έar!Qbl2̕`5e!M71rYF2[j&u]3{(idFvxtB5Ud$"J4b ƦZA,7,)H   ,bl)(A {H \t)@ ]6bA3 ^  _0Y[( eH2.@3XΣZEنj%&kz[{f(;ӍJMpۧ&G8P% . Xt.`1,Xnϙ(:lmζv JM%ar&"*@R@ʑ4 1[~Ị|  eAZ֑d"0!ZQg:!2"Y(ck8 k9h6KH̅rB" DQ}m`VriŢ"$Lz" E椑s85*z2×u59n7."bQ;2^&ԕ2D]4TY ddReTQfTa 1 |4 '+x<(J/jA4W&e IfkSKs&YWᇚ9;)kYl1Xcd+ & Nw]LjN}.M 1tfE jTpV\ڈBŖw2&p6["RUBE$HdTw!Lŵ0"򈵶Abi6-l0E]bƬDa$ $F֕kEJk&ږ3{v:1;B+=iwyd&# [iͺ9iZ,cp(XXU#q&*%‰(\NPͤ)7.AvHgfI&Vl 0_zv@f0cB"BLH^Ʈ5f!z2P<\Ș 4P^26 y(JaiYE*RqvU*m.e)\)6GYB.^e\"7Ht:S,B sKM !k۵|*ݰ Li-"Ea8ktӍVcehAr|jV@Å傻Vt<3-EKeAce~]O_g\wN2n}L{9Hj-!ḯY\(q1N":K$ i"$p-V7[&6Xˋ@xPLJ'D2 d]>냪А4E/It^Z@#;@!oJSnTR:ɍTAw%6c3)<` @4 i!hDe-% m.[0n/|R+gc舢HlsoG5ϞnW7Y޶Ƅ TFPɰ@ t@. ]rTkk/4FCaSQ]=AKEϘ͒ݴC9bc[L{6d!D:PI, i JuleAHyéG׼h q ! 4Q\5VmmɣKdsH5n"&8h"kFkivʬ\ij`rJ(Y0:j׌`0BZf#P(F6luPѪYrF)Z9a ְ1)\ Q0H&X` ˪ҨJraIZ鰁UR<x"փڱB@ݔC1y\`檲D(Ph6Rw40@օJ%FhY7Uz.gC82C= -!Z ʄLHBEDJw 'qJ@jAVoS+e.\X)ƲA 㬒bfơ4*L%2\ BY4$a[B`&eHWCZNoqA"zRJkUӌ@$y - iFۏqu2yĮ bC2k^ȎaM21YLՊDDr67ˆZjQ`鲒`6;ѺB/pJI X@@JI'eQg rw5 ZS& !Ml>3>N~PTY'C@ y"]ך" kZb ChjFm>G}^=^g?iT;5H @U "-JN<>fJ>|?g>io'!f JRK*ґfMWUֵM:8.(ky{?W7#=H@fZ`9";Zڎ(07m/Q8BYOO?GqݨA5mp(M \RB-q9iRr/sCNd0"$L9E^ RX8([=hy&1DY k|26ʡ_?t WHN_@qFY(M,8h85˭ {_[oQ~N(%9_.@ &(fEu!ɹ|m#~o]M) Ucz 6L"ᔩV"Ll5YW!"ounz%<@17"*G< L89)g1XeQx 1M??3MRײ% r%o_NrGBubHUѠS>LX!_7k,samԓ|o)Ņϻ)h%МT&*O7x 'BX% JlBa(3VEZ}[QIѩdXuݠp6!:QhXKH@6@INPҁl3~=vLLEHYIr1VD2 `Ih6؀r)f@iE+\۟f 7!SC,aD7^ydDaFf&iyDZTr+cTTAr͢.Q&t-\sOWӁ,M]1DUh:ih&DGO2^(YPLu^qg58si֗*N/K=d dTǩ hн&SܱE/;N fcT ŒI)HtIPl`'|CA{C ܋;@R),"ŇF[CHLP]Ak%LB%:sJj"rI|綹]dőNL 93lusXi DM umikٻή|o遜Ó 2C" Jcm婛9d3QІV 1酆wqi1k$HiBLNý,'6TJ0JMZa6k<lh-K YU-gȰ9iD}+ ZD`x۞E6 *jæȮpcL$QV]/X|> s<Q BGb(m+k\eȵi!17@ך`4F$3\l*lLd@oeZm9l؞Sy*MM2Mohct_-^H%0fҼcҪT2Ŝ |͌ݛ΋VWmcj@Q2 2̸DXa .d i 5D.;kBk1S38s\>a]hbpQDH9p0&҈l&Q|M ?^]d´#3͐'010`HkLk9=~629hƣswH!^?݅˪X<I'7a:j3,elFWB_i|عq,Ur, D%j2s oAHn@nb"TjDHb&dVR' X[LT' 3r^d. SM O:m6rzw{l;[EVW.]`}bWsbc?ԥ&$CKm7cb5L89h/YWƻ} :rˠr۵Կ3c3'k>5pxP0VKX aJ˻ 5\ Ϋ#G{by:N%UٰaR,$2Q`N$:9V sK6q}VR'?esCg=^k GE _! wlx_iqRfN ӖBZ N(5ryMd4L2n8NhM*W݀Mݟ=D{Pd*i3&:j1CZf͎9FBQ F;9f`1.Q@½dӸUH R%Qq;{5v(pZPI&I#oa}@[=|WʭjDZ8Zwp-u0:,U(AfSchAY,jc l9f!bt\jDY  ,A;g\[*S[RV/nģ\- 42m‹Ԏ̑wůG%ɤIDqiDr K LvmN]8 0&wueݸ RC(B3[YF*n1DXbɸv(+a-zsD+WlTcB,C=L Ml."݆/ҥ$jJHX=`6a(M>f_nt?7<mJ7Œh&&" יTk]l>;|ZЪwҼ::r!=U9( ފ)Zs:h$u2jègrbE){Ǖ~%!̥P~L9=wyNsA ih5yr+?_w "z $&͐F x|9 uY2C]tNS'vx..4ư 2x OG]N*rVm@ <9<< Go"-d #ׯMj8F-=3t]}fDXI3ȅK#μHd㶫2('~҅MͯkWMO0 =9sM]4Αƚ?RĐ" F$5R4#6x/f5aezwу hHi,D _9{/ {2zom_' WevH^aHn&I(IсY$7=;3>x *mm~ӵ X"&t*Y t|CnC2Sń%37l^]Yix.X^:9X + rGS~A7eqw5e޻}⼊qT{WT0EK"LhtAε145g6RPKe0>F3^]P#;x=ޒle^Ar.lemL%eh ;DA)yJGq" 9T ϸ[ pzKL$`RJxKu~w]smv׵!&IXH^,!̴  8m7]`OeaR-0U&ze9tW|ȤubbeV $B@FmakZҊ/DlMVֳbt53cu+zєS{l0Eddаh$هuhdy<6 FuwR@ X~s`9ۑA)14n͔#UMloS|†Uڡr8s-H&zvDZ&Q(ޮݻBX~}c[kϘuֲX1>YC+{kaR@ `\+!jn]SFد]ui$Iv/7놧Mjp2]1q.$]m2qnf0qoxotzvZ6 @Z@?m^j`%|]\yOޞQ{TMj3Lʶ 1.@klI xEdxaO¦zQaB0,Y4 ;Vߪ *$Xf0@ɲ@᜘x kpiޕ dTgY%m/Xujr?3͆/4Ț;rLeֱf&6i U)cFAB@ H,n 'Sc55v6$tk!JqIlj"c#`膹oTehi\lWT },ru HȷtitET\or6p1-uZ 23 Q6C^Ìa5Vƿpl<GώjEb/5[[ p2B5H 9nC'= 0.bq"% H2wDirwN`13}/4UD@,LBAZe9*I@"%CTz!%ɻЮIW,2UQ-X}a ָpT]ޢnp-X RfG\q+B`,a,ܰ0si0> l-4{6eiOB+ӵMba` ,, [g}mk`:ꧫbO 6-EJ!tfbTp[-ٖoz v+QςԀFeNFI( FГR&|aEРd w̔8ϰҧ~ʲ@> ܻ`HAN\7XzC4%X ?lM>Tqal"}!ɗA,F(aB啠?q]0Iۏb~GD!jE1A[mڗLe@)N)Tw?Of%~S>vcq7xVƠuf6vG .si?=4Nh3)f !;7Ba&-6X{1ɵ' "!+kMؘR@ I;9,cQG5kVb\0͑Hы_j6%rWPJ>Pݥՙ\ ڝ !z-4g8%ﱴo/]޷azVa)KV%6*h$H-υ#!=/&??EOlu~uRa  ).<#^K\5sZ$JfdCF*y79 t!:S.N0#&p@sC+#)єl[Jմ@sj*\ yL./<40JaoYro>B;sE&2GG[lll|#PtON._2;$u37#p:*oSJ ^ j_},=nl\2Y$;jx"U567VDLu"T@J (Q/4N7<4!ɢVBL0yt7a@YJ6]SG=zUO}sԬe'S;,cD ~#lfjfbb*I;s͒k~̲X.ْvs3}DmcRSvMimwѶPtRMִ|tzhTGץl>J!GQtrbCtk ,r'@N0̺* P fZhMddޕNzbm\2,ᠵ&J!KeRT"~eCeMi7Hzq]u֔(\7$`kBrᓳdb_jd7Hv9[s(1oY Qbr cGT9lǭӥZ=a̯+a a^}w.\96/ڻ_w&fqCE>6:XW6ɳ=uDm(FH|,U^@RQ+5l̙ +x"d4"C"@|O  "=KͣW9 pa,Rńj:x9?#䱪#|ܭՋXIF6[.Ý;J9|bTh޶%sL*D?vƉm"$ P0ŒA:M/i]X Mtس1k1lS)5Ձ+csi Tu#+fF WˠkhF|Pۮ%\kZl  45q֍ꢜ\űY(C(AD{>:_fu8vnDX` n Yn|>)y:lMmfA#t2[f@d`!* g:q*,pj)ʴf " K*FʘW )) r-|S;M_}88SP4IU&/̶1-7ĹJ-xj[8P)~3@5u4d(oĸYSW(RL5_??qWp=)8:08<ܘ5Kf%\JO,Sc58f M C`8K1=8.H7Kx6wi꯫Së7-nu^_'"r!n]g Oηz(KḮE ԉ)3*#"4&PєUT&ji4e7G4Қ1l]0,@L@@| Ņ*l "@60A!0&J&Q"%F lͲuE啛 UF r90b܀A/%A@nrז?С ɝ|XCDP( IÂP"J AK!}7~巩I9H7+ p n0¤+A:[iC{ \*jl1] jj[ [O)]2$8T E4>Ju pEA’c벖3:ZQ>u8xUٝG$5Ը[qIusBINbG×Ozju&^]'<3oNLO^f ¸9F(ۚW$U  Y klDeb04=#R,@3t$A_Ҏ 6{PP5|`_UH"yAU_gMb . pA`70͗J2l,*܁ NR*&̥ (Ұ0IQ#rhD ,@B >'CŃbBk4ӽf$RBq4 c !L$ܝϕ7UqfH{4,I,a 2]uO%WB^Ⱦ^5FWsEqcR +i(06'8l0`  w2w:,'-dx^۷,] řXԪB*Q5cZ0%d[ު,ÄRn$v {%D|C:M)k\6Es^EOjQpI sY4X]S)yׄ :h-jKq$pM-hֱҩMGb|q7 IߋX;(&Tmrs\ؖ:FI.B% kZ7&)]XɴfĺLY b̀^?s}ђ pǚH aOSD/{g DeyT r8L[p.}Rg8BxEtT)2MV(jx*γu%toA2q\lș'VZQ6=|%w`| /\{51dFl_f]%6mS \wʟDy^{ӞWsɤ } H A#Ko\LB(PL S,XJW@ \7# 414tHϵ8}OqG[ he_Nu~uN5DDҵdP@;sI*:K|2.D=iؠNJ$ly/R9ճb(?0u` TgI07x5Y! ںp\Տ^[ݻc `IU\Yy+G+@ XoEy¾Vbg^5M;;=n>RJZNoȶD" 鈴ek=xs#XSyUIvpGhetA )Sٜow뭷4zmfwB|ϊYv TPoVL>+Q-`DXIcp(iH[ D 1%w.P $#ljn,DQ0dݝ^iXn 4t`KZn&$Eu*Rq A"\,ɶ- Z¬(d" 6>Ͱ4r,1ɉ흄4x`dkzj h Q(`jrSq'quLjj1  3/䄇ɲ3qm~"EEDu wQɛ^9{QF3?LI]~ #7_8X?ߩSy:K-&dpy8²`ʮ1mG":l+ܴnT~QH9]  Y vX`im.%op[d_hNlS.X:Ƃh]r7!$x đՌ?t-ȿ[J0Ke)=] Y[.vf8{-6v5t_~N!l+%IXh U= ߬ }҆i>.}i $@6t :|\sWvS*^͑Ho>'NƂh׋(/`b?A,RmA"VxG#D, ȖwVYg2K/j̗OwO23vqw$`J: p1$,JHɺ bw15Y3$בֿBo+MZ^Kd6J Q2'XC`hA&Ju4}WS3Abg=i+)w1rF`0'yqI5vT3gϡN>6$2Pcw<3CrG ;tzgp@ dME62k@rv.uG/ ٿ59؝*!nwOg+xJL),]54xm9`ݵ- -Df^;w|jm@j}Պw=]LaCg%-(w۬+6%ta&79ƫ5;y5/.:4 %A@jzTRZ.J zu4lN „v%BI1~Bߊ2Lm kil£QP)fA|CWZzIz"*3r/QvhcT\p3T7@^%5WQx@"El]mZR(;iYL+gDs#G 8"0]a1]4;ljU!vBZՉQ@ BcT!MXF4CkJM 7EPX$eC.QёS`oѨpeU\34!o:/(mL EaRTA9i۷ɂ^89e6{kX>\0$"tjh8lF\:;5]j+v-&Lq ^t.ҿqx~ Jk DKfGh'jf*{|Vv@w+ȶ,dŅ! @NB2ʔ 3zP3BB +9 P)"o N#kdd"9d c}fm̘S|=Qz )[cXAZTK0  $rxK\%ކ\5i.?.06&x[sWzE{-WK1jI!ܫR@/(ްu,ҽ ɀRB6 a~ Z< d %z9=h-$+_JMTJbHG yAH%)z[׵W7Cv_cK2b;;MEs3hVHDf:V["6܀K@^.EHt,.CZ1 Mp|I6;t$k(1uWz`mF9[]XZvTۏaɓ2fEwpQ~a _V˾nCip\Z80Һ;cѬ@O+HB ܩ?y|.5CVzw2] ѶFo㯳3Za5}6SӁ7%)P񬷍<68Rh%ɍ.6X TbfJC @ַfASI m@(wc#k[=2BcJIo1MfX2s`p͢$,NkBk4NJT"aEc[%K'2kmI5H? nA5]NJ5x!}R<#K^ϛkޮm)B#vi l4:]3],n:yA`b)cQl-H+@,*t .*NFv۪],NΧ+hI 0">ܰ:ڂJ/aҜGvЕ~_cKc- a%luTV]tS~&S5ba] bm=Ϋ/ZB `+T=솆qCe;XT8p=>QldWfv!,IBrvn {f{Y∰$YKfHbAS31Hf>^hm\]F >4:[.ehу^6x 2 Z[܉EjX/H;i] D3UEBDф>/yn%~~O^fˁrc1βJ"^.-xƱoׂB)[Z= &kW."=WyP´`$X)yFGMor^uiD0P*K)ЉrtUg ̦ gư"M4^a؅E|r%2,nN>Ceo]"S1T: g9"T#KjMgI٪exx`b Qu[L @l;hQaunjvV0.vfZ:C<Ֆ!fT46 @X(ɋ:<-ʔ)~Pne,Ѫa+FL.^lوt@G9o j*aEl$dPvh;RC2 3ۀch5J!:]Nbۻ d&̓C`t㫽nM 6f@.Ф; |N]O*B?k!{L|…ߚ`>V3_ts9__d^ -(5MFIDF9@J0f]OQϔg $W8 m +CvDi/c^>H9\V,/1bj guQ7уDsyFWaӺrxmYA)7h`=Gz6i ijWcEq-M'~7*xYO<y%z@p#ۆi2ڝV󱈀Ё$9aVHY&Q{ySR{LJd"kӸ~x p׼qXY.mkόuҠ=8@F`q;wa{׎IG Iz[ _LX>fLLNv q.%cO-r;69_]Lnj 0Ԩ(vu] $Ʀ"fu4 `d.o"QZjjCHBezː\qPޗǏܠ8mӠH*1g8FEG_2k]TR:*-!id.X6g)̹a=0k$tb* ( SȚmXQbA UD4y](NCr@  YrDHD/Ti&Pj% [ G]ÀFǕ^.gq׫_ޝ0_ִ|yKS"t+V#:Q%sXP)Rf+Li] U"YNA ڴ^| LPw9i.""=1o?C*)5W\/~l-T%:dۇYwr{ܷ%.HJApxzA^3ͅ[ěX \(izR+J G[ )#ۊm LA2n]:٢HKIM FNC'Yl Χ,l ?knf0;,$HVw46V%Lg"iTDfa X@8q޴/Ü!#e5 :ni/OA9Hp}aJTͺʒ"*0ɢ(baj\HئPZit4P-k$@'gZCew%XTZ1Ӟ?9x]ggt%]w,WA6d‹0$L0Kkar70LsBQOJ#*Q䌢ó&"Bi-d\.9^Fu~B}V/eN9[YֻP.tp (ҩ-J{ÃU>.L(BsvAϔg+Rt=m@~-j 5)եnQ#h:d;)p 9KT瞿2_Q Anݧ#XȊQ1B&^ 6"E61Q(PROPtGa5Moܑ9PA9$*Ler _1!gijh}*:OjBr~lMw7՚z*1Nc-X$,M&pND U/xs[e; B ŮЖM$/^[뛠.IWF5 vB Sa>RalE) qPk@yC[5j> *ha^58ϣdƙ*1٠pHBZPhy@mwUBVИ`1꺙\YX\0.IJ+CQozڼZl/MYHct sjG9ю$^ ˓ =MW B-\$ձ}ݨquR7XIj{(6?Q˲=_,jYS@ ="!fA7K+?ţCJQ^ 8Z9R9eg}>F_&  0[E""2֯^Ppn.:#m?[52=(|b%8r9G=t:miB;h2PP6l*agNg(cfԲD _G,`%OM/E,Q17瘪*7(үC@TO@DWw=zHW{ /^o#32opwcBJ t_G+NΗyߧfr8/₰:&֊Gg8SfDۨcU!=BQp#f 8.:t*XZd#\[rc&k|WЈ:4X3Y8SG{b[bwI0JY]cj"3O\AYFi"xG>͞V:JtNU*YAT$m_f -l~~Vq}Qk!u}E PIpwQ}u|],a{t̲Ȏ`&ЂB =| կ$"N%37Xny޵1Vtݤ8uB<d6s+sc'a8/X ˣWݾǞ磴sE4C[Ɵl" ل"{yXэ| *vJ\PrRy/63E3*5Cv֯Fd[{ҿ*T&^s~G.99Uo^>E`kƺ"l,~tGDu -K#| [8.P M}T*d^La .ﲧ: W=W=[]dbî?H0.j7qv7}^쮽nl>7Z}CE4?g2/zͲP?ZYN0zE4z2kYuEi$ׂ+w}$H_7wo2~#4p3D&.R+S*'$lepAK<]7ؽgYxʽ"% ]_Ѱ8ߊB.>|{ JE3avyu_GEQu0%5)Fiej vҠ@J0u|~6=!>(镛$6]oqԑ[.I FJ6y1K>hou9тkgoJwhM{2*ch{7KQ&۲ya.^f8;xUzDZ ,d ?H>}1|;AblHK c3l{%h k]pS[H=S!JLG&Gyb|$DT%?M."XHaEE)C M$$oQ.s[<v=McŢl?N|Exs.\eǽo>47QJZ iJ,ύz lh0q5>:V2:qa 'w<닌j5@DL5v vr?  lG@wcϟ<#x^cI\z{pnAx}:Nٵؐ7 d7%TIAP>SH/|>(py5}4 z[bV){bz°4\~+_=GG _.|G ^Pmf bu6_9zJ(:)%*S)P[a:C֓|I5NfB4oL)gp;6m4NC}m{=MJ`~0SH>P>WQ;,k& ^LOGGJ}/y >烷Ҏo*!9!3z6}PGK 3漦aua-O.kXb8kDفw&@gdW2.!cFVleⵯ?57>Ad*DH19n*mlb}~b7b;]_ןH1u6ƈ ÚmB6"ݯɆ!D(~|8mBW*^H"H Rbl+u":~D< "YƘ'&<8 绽JQf#$9% . Q|qSSE]^2&ոM_3dC fo D؋m7{9 {e_ B,Fz!gKDuz\\u) XdۀSe)N P0I 젟볪.ңHw݉oOmqɏC 2F 0}c ۡcJly`ζtCN&$R7!~6JVܒB.X-~PJLO)\$ц NE0=,=6adp~' !履+?G{ ~O)n- R!l='P$A@ĉ%UгK3￯ezoI޽[Q@"9:/@fgY]$ $ |L@E @>SLvE l{l'߳~vB! CNԐ1KK!Ziz&##xŅ bH!0d0<=6H0 OO$'rjJ" 1$B@?Đ̐'6H)!`IBu'Pye{I ;@HI2C O98I0;=I@ [@/ԒsI!͓!n Bl hlp+ @~#!! 4 $$I?bmX@ ~!cBFHr@P$؀@R Iِ$ Va3 11+*jJ3A<U{iQ;R_ iϳigWowvSޅP}Pu <8yh{,k^O^!ko !Hۦy$_ڂ_X ʈ\juܹ\%Bܺ;M1A( ' 3Ti@Ue\z=fH@aIB$$ @ ?HڲkzGv @>HB $L!kHI  aXBHDHdI!u$`H O!9II!'$$Y HH>k !̈́n<RBNT/ăeRI(!$\b4T1d{~ۤHlI.c 4Ӂ}/qyIsty Iؑ?GY׵/ЁwǮqBHkr'Jq۳HƁUXT*(;x0E]ty7 "8qP@Bꢱ x=>hgϹ=|JvY[^T4,G&0Š~߶ 4v_nERsO1B?x`ӄ4 H:"}ː$ IRuh^flIݬsl-C,֎ 'd${H Ӯr6!(wX~Ar?Q̦9j`WӸU8"Ѹt174HbL'زN ֯fv[i/Aw&-A("Ʈ~M/BݛtqFCy@~ xAa}C!$CAC&y"`f $cqnHsJ|Nw?qI|9OIL$?E$'~4VĽk XGĒ@J7I-m|E%f>KAbI$3lw zf! _ BH $#zc ZB,ĐАH_{& 7  4XI~IKM$,$4_hBB_i$I)Xd`BI'@$!Q=$a$<~u $a=$uCB@.I%`-@%؄ B阀Gi(I$$$!@$BBI!b`ĄBmƒAXIL-yd 'L@kIHBc Imx=0Di$i`p 9fbsG<ă !,@I ~4ЄzV y.Ձei|iv/>ı61%h,/?wMlz i9VĒi.lvxmJѝ 8^9$"r;III>V|w66.XR "}X`AXI.|>L>ĕK~b(^rƨ濂9ӥ4_v'*tz\0«C^tQ .ؙ7Z|ZfJ5q`X[jG_֒e۳^Hxd_) q^zYyd$'ֳ] 8/j}yʼnz`L*Wj6p& *Jz5Um-/Gw[b FI%FsVMTm ^lARisq8B%EBnMĘ aC]i (.xoíD%(uO mGenB ?{U3?mVϏc[1pY},:%ĵĀ^4W~lAg\n7cEi枆SN1+\g~7a_+6?úty"z [ldJaSf1[֧t[Ё4$ ` #G$1fn,Ц_YUO7Son[eKqP==D,rYXֻieBÉ,!!D*H@{Kzw&U"udXU6З.̒.a@-oXUZ{Ng%}yߖK{<0s깿_oOv=f[P[T?q fq1ۛgu#WOϥ5w&*muAq{K$e4ȩvnoPBR4u)Hjܜ^6u6 WyZ3gx0!fEp[RmO)*ϚF孞 M %xgUPVW3MSPw& PCO%m`z{YOԓr[cunVb^xjHk@#gk1us:[.E~_2Hϱo]jx7VM@@6Fe{ëuף]@"<ӗaI H]i쥛Z YF~ rb^+u@KMmn@JqԠ ns) euQ˚Ԑ*$vjoI @azK0?^!,W/4!!)!$Wm $֣EI BABIFN$A@i@#C$ SsBB>΁$!k4$-BH;H1$ VRI. r8@BXHBNC_*y?VOߒ;VUm7]m,K~i?~5UDZ5,0EqeYKOV١W=sщ.n)yv}(sJğ8oK~TuQ+yJ vKG4'mhMwlU ]4P/<#,תԛ-K}-SJؔIbTvg*e9X]^-N8_E:dWϏ=wEPTFQFj䊵,9.vlj`xl,z0mOBb#՛Z%,O1WnjS^Ѥ7:Muy-+JEfp6&kYO-4=S]cī,[Ʃ/C:_%+[LYyg2O+ɡ>ilWaM\2}.GбP=6SsFӞVƢcS2e YVD!EQls,Y7jhk)yJFr%'6mq]>klFNůʫnr9L&j:2էX*v|[XpiէUIJ!$š!6mZTwߏ|_.틍;.]:=Ej=":ќƆj{>W bp)`vmfcy\?Q#Ͽ3wTj]O>-5m_M8dsL|(龸&w6U)SxDW`fƯF&܈V9 ;$Kq:Ԓz:ꕯMlzuTM 4reG܆{6_ufL׺w:دcJ?yri^Z"cuBdn,3F!#!A$af`/]0nvT Y`8Ț@&r~Z^ e~G "ߝ=c {o5_n( DOM"N3bd+}*Mik25ȟYynyTP򦙍$si17ȪE$SzFlVk+UjҖw R3Va :;2%-8p4XITRhBo`;sbEˑYI0 "|T5\:%+~c;^MiYpD Ȉ W&f]=b2ydvWo=ym=Xj(EZU$ `m,Q)K]jll52R-do__s4ơ9"j.ww[~W7REXgƭm57|i<0R j'`Q;\V/5YS*,D% ǍUc˭f$P$RH, H?џ;ѽ3ߦI & ^tF_¦oTM&.4j,;y .]3 HE"H ]@O!vnֵ]G+ *Y,Bݡ|!!EE@u'wWʶ+NINʹ+Fz}4ͧo-| z?c*PuVwZnExX ِ5jAmXUXAW¬q{/w]趻,h7n]"f'.Exgg4 :؁1\í\h6 eB+ Y'Q)U;/E!AݮDMr"BW3}`|0 `p [ﾟ9zW]ֻ~(:ra'5M>SR!Cp 5S@A(,I+{KPbBaO1KezWk)ՓJC.e8P8$ ˀӘc a@'Ϧ}o+j?Z dgjuj P$easf?:[_Gb~=xۋUf,b2!0d*!rb08S!f偔DaZ-;C;h<ׯ{yi `HD!6sQZ"Y ?ϯP5pHpˠG8D{i;K ރ%ͦ%…SfvhQ Q#RWءjѫm\ۓ]i9BAK^p ^Z`Տ$P(Kc;."'ȀnZ@ W7[X]F.TA4G.r}OlSh~цR `/-O=YiutGOc mIgmHǞ/\uz?k _ʙ؟9gGa5E Qe%Aݔ;D ٻcL =Ux,"SN˴Kè>Gt.ߍ1/UV!^-`# ^EET`6matND1UN]H$WE*,&#^A`'ZTąh23%Ql_+i e[ w)C~XgfF>IEz%agx<OCW|ɿ\>, ,)jzl$΂ O 3j^y?^<$I}ua)Oj @f;6/7Sig>-FN6dWv\x&O- $t}BcfkW$bg˨'8'Wv4䊶7'QDYeS&0 si.uyQ[F. |ﾫ &}]t'+3ȏ) @2 .(4%߿c*RfFvaf2oW:E"45~@#Coޱ nKik^! />S/9nǖh>Yrݳ_s[׀@RD+ >{9#Y&(NZH|$vX0龽,}Z - `X`$FlSbp]{{whG ûtsh%2]ߚ[\*G.*xqۯ,b5}f'RY6l*?MYEvLH=DΪgy*ŗ7&^44O׉ǥ@0ԒR:D0`ҕ$M@lޡ{jW@Fo?GM<Ӟ"As>$uf{ȃJD} KĬ.jj>CjUΐ5D0k^}tsMB =E/@KT-eeO5;7f@ߊu,X\MŅ(,C,eLjs !GL ]%9{qGTD^i6 E˖~7'\=ILɕsʤ-5`M trQg aX"x.Y!-ܒ&HcVt |]o8o#՚%)JZyiݽ{Sk(y1LBKuOyf,^,72Io$KTP1Jx-(C&(ĭ{qީ=nUA)adTxE9[dIa֍MҰe܃2Xraf!6c(Os2^f<Nn|t%qʴa rkϓ"AW%F4st4~U<"@ #i$Pxe{H)%ۃ]6shc""@$HI!$|9_@˧YFv_՘1Љf;1D->1:W^UB*b$WJCҫb_q]%ptN[}WT+|Yn֚FwU0U7܃QX`+3JӵHj"{RJ5qŭы-<:ؖ,W@#ޔ@!>=J8Z9JT5y*}D@_'"A.A,y s!=JD-0.M2XNm0b1V%JW8[zW_ngۿ!=[,{3u nN)3>j)F{ݸwr֒zR/HZ+R5#j(ە ӝ0+ia~ EH O-c 61D[Vv@38~s;_Bk&i*/[wf%kЬlv<2}/Gpmޝ(W9^G~𨶇xĤc{f k|pͳtr+\>jƿnhK©M|5Br]&jbq.ZI{Q^ ַwїӼ v!ލo%]ݪk(܍=4 >ͥEф ] Xa`$G5ȡ{n= 5ZcB7h$iݞ2+`Kc뢁mX׉k2Qw-2{.5AIѳdP5B MϦH~NtGw,+/䛞K "=v?N " 53/lu̐G9QE68ޕm!EIy~lY`lL1j0AE}Vp;&,$E RDu 7TLFv2\snbh^T}tyw.oZ]n]O2BXEp$C"e˳!_?p⃲#~V"Ŭ萠?]SBw{ujE) Ԡo#D+t4`Y:QI&Y7aMǃ1jmʼy+宭eT!]ϊݦ?;x׹8Sƚ%kwƦI(@ƙ%]-@MǜI%6C :"BQi%J؅&x$NS ^m˸Ƴ6ˁӱ!_zz jtY@EETBKC+(큏{XeetIyVLZn_i%Ֆ 2Ra@ݿP#CЏ4κǶw>;+*UHIQ,륊b̾4'50B'+lE-Qګ!%dj ㄎ!@};!I5*cSπ>̡BBղNx;5U`Pm/+Nufzm 62!;PI3*c8f~s5*FF&AH@$;} :+ΙhA}-Tt`1T$}! P\[`zĵ` hyp|.hf-`3,Ic/u,:y?ؕM HH=-h-#9 )+9?-_!G揝9u-M1rrId^*<)~G3K v,͂k%B6P!h˖6vn|{.ŖZ @E۔QGw"Į:,PC259\&FԂq=//[zt{ÆJˈ+)TIܠj{^۞̉w1ݟ78E-T!zAr8ߍmeFlO+*\_ : ˑi#+`y,WL\67DA#@"6?f,˲@8j9=JeSLTYi'?m"՘!iSGqy@p W s-쑀Ij˅k-~"y3"[^a ePi)E1XޗUۀ(,%2%‘`P6:1*>KlY}6d0y"x.8'ge&RSU`߉]]@7;c#@X lgsviКwxhDIB1Mp! ^kgN~i  &zOh?6;-'1ѰZC?@;e97_cb 29 愖̞ ԁf-jc6="A+'tH+N;}%3䅠Bxi3_?o{3}{QنsU%=pvIe3R+r5O~E6ם2QA"r@{Ȥ!ÔH`Ȋ>>Nl{ZEl ae'ʔǜ&U"y`w 5@PZ H! v/ !g&f< I%]lܺ@5x摐0</=M|=ڷh J3b o,F`okoDRIc~ lݸ봼"k֝Hq 6i61BW*|q>OZ4_tykeV!Fu8/Y, "Ã',\]  > sԋ¨4TK!gZka-"]GQ0[;;߫vEܬ4]o 0vA%uZGM^Er*~~>/c^v6a%F1BH17fc8.١O 2:{J  ﾛ xܒF/xyuWG{ {uؗB,ܗgWa vOU 7ܷ^($W=W5yvLݯ#heObҒ1 %>Rw˓Yg%J C._4>Qݚ{عMKxwPLf,qHoK)·'|3qE;ڢs߿4i6lcmf\JS6rAπ6Ċ/t{Z_i>L,tAyhwEc K{VOiph4!j<`)CVÐ-DsU(bɢw)@xDr։CL\%lC@k ~Eﴶ)I鯦ھ.d^ N n&F+k䅠d)@P3;X&4<ie\J)3gz~ow[o6'llpd`x4Y>!ǵ$86Q,Vuݫ?*=ć ~uN,pCJQDyzZi; ,&=܌e1~حR(,}}eKm6t[r24Ztz-oh sԏ-T2ƄP$Gz^d ɵ{W 5rN$:y xE~; YZ69.TYEPЩvxX%1JêˉS%,( xg VœyI+»[qxۀh*CIdbFؿ@~ȁʾӎG.lFa ExNX'TXP2o=`bWH J($l%xP *,|V{ݼpbgfԉ/o:Bqh'ՠ=;  Hj5;s=0e䌩aeENJ")Ynz?=$oe6}[-*ϛ`oGVYB N׸ sD]U!3u) i}HBKwOZN-hn6%;TufWhUGfS%Ymǹt PREeI'ԝOdHj|.D'u:ՑQYֺ,OgȚfR h/AQ 0<+3W:SVd,sPNgm [ŕLRU0v3*\#P;ܵH 2|J3DVƤ7DGݿ7$A#뼨gfZ'<ǩODol#I|Z6Bd#?BsFfɿTLP2l46>3%z$U`lk 'Qz{i,d& EfSH$I WMϒjb n`7 NqZ"xJ9,,tI5PX,@-fnJD@%sy;B>p]wRhmJ!O=#DEʍHˁVSdS\%nt&sT䁧MaW%>Y+d”Z!qjL.M"sC~9XWrU,G`L7X8O«u~}@Y C;> jyx2]&x[;Tc-@e%98vt/vv<vX?𺿲@$e1I粙?;:~Q,! WEޞL*zſ Ԗ@t I9[LN`oWr|닫78VyQx"9^2otϏ(Һ{M_7>KPRLu|W7YXi[dz09Pb igR DUgܸ< n5`(Fԅ.DK^M\4On={"\>Xb\賍N;mg]jh6wb^"ka&FvyS)l+F&qI_iǧ6062L]#Hl 1=k^k[aۻYʫuAAo @{m!E'S.R@@tW?$g]ڀڭWb.ݮFf0in\Z|jzI<((tHP Cx-Ulj?n7"育ߞڍŁѥ*Xއѷ LZBbܽuN!XAOՂ= %b}'T UԀoۚ.2 s+T[pBe!ƝLjIHS̆zeS"l*VtiQWgXKpfѾalC4Tʚ,_a`7?=ßѰ%&SkD֙i%V!࿊MkҴS$Is%JŨ)(˰%RKXJbrJr;I tΣ>ĵbdiTub7B1^u, P~][.%5, 'Uw'sz_lt#6~bQd&k2!Vw38-l7Q[p=4;.B;1xp-âXUq''ӽYI-=榎 ĶeDޕS2eaPXwʣؤ[phdxnC Ee3(Wc ΕWbd=Լ쟜|}(=갻Uƀ<jjOm&fH),4LԫnIfF sV Imuk8Df(B=M^xWoQ"^0"BLy/[|\Z@TNrfެPUmIZ <)qإCAZEƗ4 |RÅ,5j Fu FVX\Vopiy!.-?4,.& B4|,sñ Or'vi&^҉J9A{< M/Bx>5 ea4MGؑK ?_w?[[\9 7 6$ G2( 4lwfsI$3~2k1 #۲cdvP_n-d, L YpwLFA 4 Weh T9/r< %' _H:lP8zZKzROd*fœC>Vi-BIgK KI) Ay{II Ixd0>{>f٭BBP YX DKFϫO)rKT~ͫfw! Xj&V_uZߺg~_~ ƀ44{ "@YB~'r?yrJԬӲzeaux6jv?:PmҖ3rtd0gqfeyY]^u;cL`YjHz8U  61>*1mpȤ:o&G#Pȩ8?v_ym(Z3WСpߕֽfˁbn%f}I .\c=N+'}@v`Z 3(w[o~G5if:qHPawitm*,^m+J+7wsCs=EM5M"+{`*[knchԶqLhG|0&<Ո۴?#1~][R j\IUy Z]BԸ2hP $lViwҦ&5zm|DZ{< dZ2J'W|Yk(֓VgT e8|%D#|\ NZ0Bwxq<XRIRRH[HHa)$&!$WZ| _OLW(LS$)|ˠ*;SG~s[ͬGJL4Ne(56._g㹕Y[~; i"GCOڱY,{utf^o"kYd!N:K$N];Iށ!9abyE^q<څdNL$P$0 d$d Y`PP+! EXCZ7M/$ I%Y%+!1X)'c2'd ?t2`Xs@(i! =ؒh01TX>e^^m > iހK.YSN00dc z,TI vXQ~SWt N]vC1 cJ'\@}߯)7W?*rNEh(mWǡ6@ DQ[iĊ_.yxy]!Q96)Qni>޻U!.͇;>>WoPm,BC"!M-Ey_lР( fXXLX?Vb&?'`r+x!>CżWNbvQIb,ʅdR}WŀhՒX 0,dO:HUaB H'aLj,Hr@?Q$c 57bn.op&ЩX(DL"~["P1XeT֒VE( *,XBD ,($+!u)n福@URGc*}v)2>$N>TO  a6;hc0+HǏJi L?"/iW?s $ u,(H#!U&lsv5NQ;y|8y Xk[q{рO&;_{IԻaRߢL2eCϮNz;  ť  &[pF@!~z2e3ʔ uIAI3|6[z}7sAb(c !e1?:(?T9\ɥIxàR(I1.H@s P@!!i& #!=]HڲS/eBR۳WbH$R3(,* "Ia =?IycٖZ/7:{[Tބ; 'n+~㿪uS#|eq"X 9O|<XPc`rq%Ĉi;HbIH֏%BD;5f!4}I6 %| , rtٝDڤϧke٢=*]-+:Ej<H[\' m=j(5Fv#A!Byf0vM^5hv$/(HC>f}G䠺`{[k ?&jF :Tv73!#?:_)÷|:hWQkSK4Gt#y]~T|~}ߩ;$LHE>b@GiV-:E\CO[m,U?V@1u2׳!̜' *l#>A|A%O34ޒuްFݏ d ml@4Ѭxt8jr{:9fy[3@$?_xUA~J( Gn  3Ek^?C;|^?'APR"+ܙZʕ Bi=Ay.K A>E]C!sg#;G$s3͍O#|B %,J,3\4KȾ"gQ5?ãb֋8bmVFE>4[0%BsGoZ|gq@OCeM[hK+TR5lC@?7"zk:g_sj.9?eulمԚJXζOafU܇SOR\[8`ù|&8 X,s43girpn9<? )CY˅gSCS<4 kLdB9 -FO݆XT`#sSO;SCMd { Aa|^'o§杖Pw8aElՙ`YRcR|=ȥ1L#+!cTHI)i+Q"\;: &4kJo1!dhvGxe`n}6 b M ]#*`fX΍$LK?"~GCՒ07H="Yo߇8t{ P_M)&Q@dXic݆SI z Y1V*37 h۳?;Uuԃv]Yϒn ͻ4?K5I;希^}Db-BםQ09ͷMDTƸO!ň$r"@eA*Z'֏߁n"R![/}O=|Bݽ,m؅get3F`V#WB7;4t!5šs;!$4ƅÙB)x-3`e:?k(ڏh9BRVBeFL|3z8.l{QwN;Bņ́R# UUH ܠRH"0,,koⰏ 0Jt~ ׶}QVOtE!շlVXG$!$:?Fs`d[Hi} 3$ 9AE ;I '! q@ 2O@ O澲hf5)0 WuCק%}v RG@3ϵ Q|7gO>cgr8V* ؠ_z+:g&yWG}!dAW}*pT{4ʰE~ 0R@"I (&3ٱf7NS8N9 P΍r*9v>~澝hv1yޠ!i54`-y*@sJM:Y.:6$&$5;kmp3&oYi[dؽl8aS_]pic{ޓKW>PcBFF2(vN?K<,I4I@Y$|IL@ـHDI o4 C4 WB6@a? { f DZ94|ɧ}h}T,~1Bd4r@ץQ5?E]P+![b;+$`$V#3"OUV,J"=dI (HOߡa0z:;GSZ]}[gHx;$RHu0̒c" $ȃp !z6[$0 쐄$Y!(œdY<|J#ŬnI ,"}yUV2~Ugu:δ7k@d:'"S絝^gS~j̏wuV)дHq-Kj_8za_ܺ4i=OrIå HbbAH @D #)䴳I%I"^om>頓ik眃jsL7EKQ%;dJT"s{\z8NO)ԵDk!鰄@ >dMGh `|4 A_$'IvQ8c|LgEhB2X!,b{h"3Z86H`=$҈}Cv{%B->Wu$ 6O>$ "$f0ZGb8tnz&(Gi4 b}?3}hUm.׻3 WvQZg86^Ab(B,8\rkmqP rry^J3";=D Px|џ&Ӳq p~ $#$DX6m b{YGt7y{I.!y1 c1xbH;7o{I1 |v@'BI'j0ٛ[5>q.cb^)ą$gJ+DE"1ٴt-{,,U֠2jkh^^;Ix<؇;}lߐP![0_ջE Y_I}("IRI$xCHI ,'Kbz@|!4hHRm m M._ ́#HwАޤԒpB| &FAB}$Gc2ǧ>uhMLchzI3C<|Рg{3_EXPYX)$!=϶'/盝~@=)kpCg!ZmIES=L"KFz*ƅa#uŸ#G\$$ =g@䔉P=޴d"-X^F%$`M2(EYEE C!X2R|s8wUwi}ky[;ޥRAhuRm $ i.Onʉȯٲ[^]+ Dlւ\'=zv|dWoC6;ȎP,o)H+K\EIo"@ykyl>]-! 777%·=ʹ"#kI"Vh^H3&RgUP>^.n^8su>dߖ}ՙ!Vg0ˆ)d;ˆ2"sI! bbVr $NCbج]un ̹' s=oCnn` uŀs,HRi,|qZҩGK~zWt\a11 EO$%B[ǃ{RXQD6،(Xo[XtbԸZ4tNb7I05<5A ȍ`ioW>AmG=0/@crr8N#O'wԱe4 seנ~F Gs K~uܨӂ~"Ò{a |Z׺j9&Wcsͮ׃2)pgAHZuZ^wߏ}}i&"@V1-o-f"@@o5FGOڶ=re^{U05V]GZ X EF+" EAH(,T` )X H,PUPR,UPU(bREH@d;:$?y/fb;|uc @Th*X2J)i#,'Z4lշfan߲3-"Eb9;#l{4?̖GWz(evW[v'g49Os>}Hxҹ [Z eG#?RHF#$ eTZYkCS|GX屷{2{qv%Yy.IY&DddQrxz}A<$c*w *~K }+8[Hچ$vqKu)YHE͞ b՟Pn"̇DN)2}/0ƢY :sό4k{ʢ H˂B|MАN3bvQ BWH fAͽIVVot,)b*~cbUg e>HUa@PYQW<ʮ1hÝ+|r| F'2‡Lޓc!XвCG}|9O޻AhI,6IK[:}4wvM||k1R{}v0B$$~q9,Y*}r@EOO6HHNYDBMRbi^ۗ^ז m7 r9wƜL~u`oqCA%tطrbguCC/^$M5"E[5g[%Q"A]5%C;d`pB$k0@PO.@ݿWzo&\tS 0,$ L~V>X'MrGs9ܖZ{Q\[+0`qb=koT$BZ)Gԥ41:fTsH!h⥬1/5Axz7%YXV;C!d<p%:?%@.r$iگyIr1DQ 1 ֽqİky+5O=~}^,0ń0i"sֵ(˫c;6Vk+w+^`i)\%A&zif4di/&$r+#iTFKljfR_BX# CڣMRP8Uq> $h\{DD[\ٹ! tVp]mEm32յ,myE DEYD6؆VY+[c꽙Ff6e&ZMJx =ERǒISg컨M"1! ǀ$]K0l8uw6utk懲ύD$H@[q6¼yQ@ @f^]>k֓b~boK*r>7^&;@$u*)xh|>XLsxQ@NI`\ƇSU!'F7ZNc4`Qh=QUCYkj؃q 0΋>U:i WIi/6g,Dz$/aVu==#?BȺCgAOy{rGeLpgmq&7sRHV -6s3Us(mGb/XdScQ[8!"@.w\ "HFC)$$c6 my!sjrj7x|twrXÿ~72`x-`[^OJoS:Q׷#>U NY#Zp]˫Ls}/hlH"Taf`jJ5 ռ鯓\޾IVA iˀ"ҝUGOv($#;f}'1ۊ=d4@BofEv٠^,o9~ E>g´I_vnyO՝F2@n@DM8Z&i?1{%BZ|}L'VDz[Aχw.دWD/kS m}Wa<fsͅJ "IlO4왕FrWWebx.k:hBF-EVsմ} F<Ր2+]Oi%b*`VնW!8f$+ByG|ߟtqEMݟ7+}ȯ1B${pHeZx7ŖlBj8b=FGYΕ )((ŕe UVg߻Wv"0 go}} B++X,N ,Bq8ghi8)T뽧YC=B =_^TV`-d$}O{m؇&Ɠ=Jl7 M ͶeIuSZ%4'gN,vΗ:N҈ISbԞD.y,|[hh0~u;8X*^ۗ:?Ÿ-X:zzRUSlenI[tnu&A,wvmC+߾7꽯j~)Eހjv.'Egy;nf lߝŹ҆a٠{"[m9\uKodjL<]v%6uv:opH\Cd(,cM8akcLڭԦU̶W܎Ɲ_Xnj1f֣P<| bC(7ܲi"ـ@{tdJ"ҹnxhȡnCi=|e`P+%Zt!^;5 lэMUn`SQg)WֹDMS)DР%('+Q j˃>." Hj+.픺fanܮoRW<3յ8{6e8 &nESϡwqm݌>vҢ@pgW7ViI川SnPўxW/>cV~wݶWK]l-;Wdu` '}?b'ZM+D;/lњ*.{ 跠JzQ*qՊ4n$I@D7 䁉ћ$INcRAƵ$e|X< >o6DAdk+!<3!bnI_a}J !\l_Fλ`ej6:뛗nXj2ۃ],'vDV9K2+"X}<9j%LQ57E/ C 3u5Ʋɴ]M1Q0z~v3Ύ-W&'Mw|>ɭcORƇ[NsP"Ic2I-Ԇ&b*/n1RQȥJ 4t˟+ΡZW7Wv,/0E㺘[:7NViEbU: ^Z8Hy=x1͹i]^JX5M xQ^ -;d "J)r@ZvVFouLze5G m ^mЛu+V  _QXJ6`~_D\nڰgO>ILR4lJ|5E4J|3Tng^;zW!~(cfӓ}mڽBhWNxKXZEu&9Zacp*ZY[R9%R~mݛ⪝R"Jq/1ܬar3ǡ-Q+N%)y {O9l2szMEKQ^z?g8+څx3V_~; Cfyb]toOFUqwOyO0:_zwlsbb`/eW#Y8bh:Ry){,i<Pd~ #UeK%-4vOJxu;q+G_M]47@94´,3- JDmM-nuV;nW+X_^z6<_wL3V6j2`ӟWYn z'-YZQ?wMw⤉tFt?mo'+$x w\2l8h%ALMe+:Wns˯=|:f?B-խȿEgN1f܌3dbƓ̒Ӥ$HBD*I` E1^__Œ<9{rDЗ^J3J2P1HJ/P{ cyxʈK{#Wtޱ댮߳Jߵ=#-C\ BtB)OTb?U@@XHtB,%@U!?'Z@$ (=)0dP $Y,H$2mf  @ƃϢs2`} /?Cxz\ &ච!Q%ѣmB4 "$+!BI, RAd$iB}7I1SHHM I$ IT BC w #`!L@VN2\A8% ]f|w,JDԩzdRp!wx3Km/Nc/R@0kOcAt]Є$м}փ@kؒ1 8H_A $!u~zF-KԞeHu~0'r݅E Y 6[=@:*inguZ[E˔An(Ȓootwb kUy `"cѨu m5$H`$7(@Ҳ!?G١' O ̀92HIBH, ēaкta!*!I /HH{5b @ `$}[>zT# . E@!O@|E lT |O 2:%e2TnRl{,E=v4#ug؜-ޟ/8Z4 &ifL{vO/u5wĉyOzIмs&vΑ|ΏbELSi&A|MՌj/zx> 4a!&`hBIs5  h ~$~wbWzh!$?$%AB{)'7čn~KIYiO Nl$s<~.Q,wҾfa`BvIC@$؆A4&!$ ĔsR6MSr @+Xkmxe#{G- ^7A1fimn`q1f}>^T=ķ;}҄H0AvH>;Q{uuд{/~y]p*8 g'`O~̽Acጶ]o_)rD1:gg?Anȫ:=aGPD<)y+>TJI6 0%}uUR6T0B/]C;up*$b CV5W_zKJj4ZB$ (@*Nv99Z $hxkMPGd]^7v ˮ˜cU`.e% !t>_i/;7\t~b>0K%>s rKĤ*z*Hi&2, r.8|ߐuun)+n11 $YhBrul"$:%\V?c !;\{khN?u DbMJ]}L"X'sP 0.u#:3z BTTmc7k :Ra6.~oaz#R,BZ"uݭ BNӖ(_4;sЌQDD̵1t47ϕκiG`+{MN*Y'fXrsRzxFncap#]¡ 6X{UB/Ϗ "֟ o4Ph-]8ԬVݛD<#:Ypz|d[k P h )n孕,8^Zn.M;3ܛ H?(؇q9ATڵ=yoH*'tYi"EZPݢʔp&TyAK#.(w^ ǴxG O7^QZDmY+$Ž BR@s'%]0_[g)wI {.$&=dv[]fg_I\67е}eȨ,b! 5{0>?I17dlI #\&m .UVG9]3Z_?O|+Xag8ɧy[k4Z -@#ٰۼ !w]ǻsccW%|V^}6AcA{ZDʍRتx*a0tV+qʰ!TClJVq-g2ݔ3#&1!YevEzބ0&4N\o_H4Sy5 F!T 7A"M:U\hm$)!ʨ}0vՅ6lӝU洢IΟo?'RՕB ^}tXEc]F̼|e5J8օ:ֽQL@֗F"lɕDߕB;QxAj P:j )LޫwVn\Bt&$Pg. C\b,ސZWkR*L 7V`}h"NcQB#-DMdra >iS)⚻(Ō tަֲ5#qMwR.F@uys2tFY".7r9@{мCd!ml)ϴ˰5JQLDbT+ѶH C?aΦ{yʽRBD}_@ ӗ#Y\Mƽ\\Jw]jRT-`dc}xXisK/ѝЭeT: k ~{_z߂vj"]FdgA~+=fSST3c~-Lf̥jiqtnD$yLXeyf@ L{ݧEa>kdGGn(q0Ψ0FE)+z7TK1Hww? >s6iоFy.ԫ޺p̬qPCM@xOLgJ|:[ۈԐÏoR|jqJo4+I<7_:א+6m7S2B!UoHӈtoHdd3ua Y\a]J++ˆe3IO7WXCliK~ `PT}zI (2R桗C GU\`kei \ $3ED4IHKЂ=-vB="LB@}OI lMs_&]ƅphZ>OGEgBAD~嵩әaifJCe(F[PY޽~|s0Sj>}u(2U]6  h[!;`wokf߽}E͖*\RaFLywcHD0HZdI<{/̤"Mk'ɦ I@Q&[? ^n? Uw٬9=[ 8kȄG\NB G) $Bh!v2FXWv%C_skQ8C33h&" w[zlx{~_]9@ǽht>|.ƴy_;Db B FHl +iiX i%Nl6%: Ir-LW-( D <įq=}|*oJ 7#Ns[Œ{=|v=˩6QȔtB `0ibY Vm|v{e!y!i۸+?ݬ{Cgb~gc$!Y}E/i@Ջb[اIt=|s{ct^YeJ r"4>V#Y[Ȝ}*/178 s))MajͩIR( X#!Hͺ ¦\,QF$q LQ[ n Q E߯ CbĎ bC I;?E#|O/;n\o{ڼ p\!n\=o壒i,BXַs{PI! w FRDN =Kׂb@Oe}L2]\oe)ʪ!и1'_5PPwMi9v\oUM&@:: 2MhCPN4"ozB唝nSҸշ7ՐI-"P!ߒ j$( !0g %My,;U !P%FR } =+_7}@vҧΧuoS>t~?чy.íhYstb4{86caTB^Ա&c&>ȞG_:?@ BisBv$RZinh-> Bk;=!?)˜ɚ=^ ) s:lN㺾 zTN |O&-<goJ%|lm e5ɚ͞LA,'.V42TS*6 L8CdcŤKbU٧a Mdm2hYNh$L0a*$Wr<QL! "udRáSk6CػhMJͦN8hTPݘ8y-}DєQe@dL34+'wOfvf?iξaR Ws:Q ENJ{~0& J?|WtFhNO?{ebt{:ћ6!Hi*k lc?ಐS% mKFUYPP.Xx3d0>vjr3 / tD,d7 9,4DI@A k`*a8OY_SeRlxxX I=mZV#"DA V7w 5<μH^+zȇ)W~>R I ]BxS>ăFt֪-{T% D gR9lpA;mj+!zߍiZwlJ؛Z=TmWyRԀVFi6;#"[v1lUbYSvwf g<`];t Eֱ[tm QW2t(:s4L8JDS $P˚7Um:$!$ɺh;cRL=dN ;Vjzmm'Ky3`a㚇BŮӰʔ;5#|<,cfr ;"RPaz%{彄f@FKG۰z$Zz")v&됿'E$ѤA (DJPn4RL}nUKFX^nutNRmZ`$ /Xs{UT8%xvk](8i+ʥ}gq=?緩tTgƤyeN~lUQ<((o)  k}s=~caWFŋ< fk-cih&#. s !m8 ="vy LA$ jzF{9s}6qEv45C8BḨ t6b9|Q X51q6# 7a@U=? atQlЉk! (qW#K+HN&|]^1(XZ7& 83p$4cblXKӍšn@W,b"!eo}M׳0ay 0a o; U\^߿GC/sDVgp]bi݇)<>O?Z2,2 r{ o> lqpi/Ev[8񝃶~nԶ9eۃx eADGMJD+`I@IJ^ xArddžJ #FuNx;SLQl Qxx\ʷthw+z}>nYFқTV4Qr+1_o4돪T5ꟁ܍j9ϑ\üNFxV_Pcc< 9SjSТ#A HIyܸ ybU^&\P^Ξ7Y-G7""$\naINgeGz7&8!SVox(!?&QϾ#]ːBtW2O)R #1`i޽jI'>~gx[ ˯-Ǘ9uHY@J=]Z6$2M͇o!V'UJ%˅tNӯ ;b v^86Gk Ǚفp8kZe*0)߳uPY{5r|C@:u|E&9ߡX5/H ڗ{u#Iה~P9vka7#_y z]*†xF$'m^ʆSA+|'SxB =zܜ/-+=zx}kCW<[̩9Ng՘ҸEw0r,Q݇p8~B`>U,u<ߏ_kK!GY}״|;Y7yܿ!3sѫfíM,biڟ`im2׽C"ƟR'փ½E]'ŋw:XxYgG̶0^׌_`jXx{8йju\u/w rB.My1[鴲C=j5aPi\bEpSǖ9P'm9ȇs~s%;сC K<8⨘Z* ifRѽb_ȇJaڗCvz*a~V8xFmږ7W+Y1zg/ ˟~ϙE l<Ac_P jÛU MLhx Ѡb5 1R 3~\C;I&"Ѡ%hŷ)&U]-Ӎg&S{V8{/y&/H^[U[{\/t[:1&zlѯ#-mui?N̤]9gh3zA͇ǧDOJ|1gVRZR(Š=gSGV?7ftX>o/eӽ7G/@)$1㠝*_f`٪I|F~?'Iݚ;o- d2\L3fU]9d?;@fgE?j98B#oԮ+VL `vCi2h0%RHIE&,4BfF"F@ R*Y z[:abaܶS$!&bn21v(4sTlvŵ&r CB@T i Z_eŬu6h!˒Gʘ%y!t^pW$`)՛{K=VrdR+|sZ*w)0MC-?1ŽGo+gvofL Ms?WO#!;_:~rRfɮZ+u)>[[ܣR`5!Qp[aVeS\yfըN4䛧wk{D fD,%oSq@6:ǰB:A6+#@y8<~{Hɍa/ʑH<ϓ̜ܿAw,GAY/c.u<\7c.|QŭgJqH|eOk ȁ#(`[CCi g@ϊI"E)@V{uJ$u?_gy<>C>~Z}u*B2<ށϣj?oS˿̱07 ۱h0lm~^-LQpGIE+E/S:y<5.o>JP+ͻwR`c2Ikg1Kcq@*mlr./*'xwWEt.=}Wv؇\C[#5Hڤr+Ox&F">|BΥcC X{= ę.4U;  )5 mCz3:\$ˋ 0k;l* 7L Ԙ!iso~ЫK yVhUU9!&bUykso]QH.q&UQ~l"[=-jl `ٜ}>ҀrdĖH D׸,]:h&ȱd20"Sp,a-y8 ;NףFבH[6P~ۡk6΄$`l6z捳 ҜPT?hMd󐀄hXxZؠkU+jTo>ˮC?vKبwN\OqNuӷg\Ihbܳu?B[wHTa| l`<$&[FmB̌שNۣji2$٠{QnTRH!F K}FkЏ8 (RЁT4 hZq$I,w&U1 X"u4 RiTBmf+L'8q~SBHKp6'_ٙ]fߚ͏+{?j.;qh^PG]kVE?uv"̆STb}:^ ш$ @;N(PHK{_pk(׺aMءGIILZ/%+wd;3Z_>ݯhA04B" zM}fLy>#Zh{XfM%DDT&\` v I fCdhrw=^v hڄ f+*36p8^WnO5@sBմ VBI*{ϼ0aL HE~?@Y "(B~+?|d2 U6aQwB+ >$>RAu๜EL24 QXAuϾ+~$ 3%/%7!UI<ħG醇Bk_i~dic|Wў½iuk7iM)޿SyAc`/bL[=$P.4OJ@x,oϲľoz6S\gr)I p?ysUS@` & |8"_dO+$ u0ua ᒓH@ *h6 ƒBHu_E BH*Ц0 (%Yvd@=a@I2!~L@ ]Y@/*BDŽ) 04/ 2~q%NQƠϕYYҿ3%ँ͐,3(cd?f὚_H? {/U~j)  isoP;5q+=R҂XKpP\OE*o\+}/$Z^ ɾEPMyM{oQ6Lj^򾽪(fK-[^VB@cxb3n%ͫ O2tUH4B56aZ8\ÖHeq`exa3A|ta(%4 +PQ~Íb=;YeR4ƓUow\a\'-+sFl]y6Ջ/3I(04JxhOaBij|\$:][([?!,G"o^KV^W`Fk.Ն6ǃh|4]B# TZ0zʲHȲAܭǩsdF*W>T:~3}1c-zw_Ҵ%ScPMbJa Pad?BTJLaV`Mm,I=-&9젆 Y,7/=8M {o6tg«FC. 'YO2/j4"H Y e]"e$bg]V.ToHytvCk$v)qZ/ћ@HmpQjO?/u4!Yu8Cb[hmy.`r}ˆѠ)Zs$vRƓjDb7L!Ń4rIO0O8aXQ7XzMWXj87`:ѻ <pdTObo|t鞷οvʛ+&{ ?]:+.| ^dSfn2"fgJ EOisn}q$ 0Pܾv7Zӫ*\X8JuVdQ[P]7BI RR|;`Q$pѳ{% >;7W}ߑ"QB9-`(λql\1 ̓HŨ VB5<}A<xx 9\7_Kg_]o⊰a%HN"q\8GpMK 5^@ Ob HHB 5; x L9@A!}Ϥ-<gv "(|k>x}oP{ÆdbQA$'99Ʈ?=$9Uj/Z&!Ѭy`׫YҬ{֎i;Z(:mb@ʟ?й*ni/%N>%ø8E(P:N3Vi;0_9|\n8.J"%EmC2Q'q6a~#u@*<`1a!<ҼmuPDc6XB*}XFw/KmK;RV${-nrwO'ܲHM ㋇r(ZڤdJM!GX@F1"ޜk̾h="?6]S4Ɏ/0md[1M̫EE- 5XQ[M*X=w[{)Y'=|ufl]?g8&ߢ~߅j8f} Aa#|ގ y1Wָ{ xy4 }B}qz#|, 6 H@Eb FnG|I*vnO/['^‘ F'(*<21UdV@H!魗5ѯ j|Aȹ$%xj˶ai@ Z'6 ;Uy>=ty7hLc.83JA)UWV.-8{W!ݸUݒp28H&2 RвKn(ګߺOxyIy.ϧuL# M@y u deF „b]^wʙ'gO7Op<Pf:CZֱ=1?W[H_?eꖽ%Ӫ]vv٤6{i&" , )nPc! DzEG-!6F )VVB(kֆ؃̼fdtm%]z ɢƖ~J"|[H\Eƽn}7ͪ\@XnְV8<(|lZ.U}9ic$!pbwv;~eFXD:D ]"j2G6{kcF~%Ξ@V8xk-2pΆ,OeÊaQLm  Hgv ; { M'dK=u'uʂ+pf0Ik'#ac>7wc>$4xh-KewA6 m jn,qܥ6}s@` biu`.ӿlu`pZYЩKktm[k:Γ'R0˻=,ꖂh\DHU2qM;o@?t|[}(WzG.{0v$wR#zR w+M|/6Ji[=KZITu8<.r{tԈ0t3fBױt;;5oYf>^BLBۗao1[PvfY{3"66^(ֶ!|2Y7L2,Ҋ;7ϰfo)pH;),;""L0ѓH4 dRdfvuB }S?ISŲcu,xt߻-zorn wb/Jj%^ LxqROR *-cO8dDY g rȒ 9MF^8tU`8,&GVpC@pgl0.nSnkovK״r (SI 4cL V׺$TDgd : XBڕw"fv˥p9ɟKoyxx?\imHfn19'.lw}ǫ-Ǡu&ϚMXX jlav1Ԕ1y;52zϭi$gEv VH mbF0b(>x#@F %[xU62}屦͟KT <4,~ /bB2@Z߱Ci-6 t l'8=u_cOWn-8Sڨ":ޱ,م+k0D@!!$ni"K!ZȢؐ2ed0W~oR62I0!*5`? $z, $}*t OQ DGb(i.U0HЪ@6T$\"iVTa?]'"G[Wv,8,kVZHq\0d46mzOu :iH{ou֦cxGː$yo#Fs! di' Ȑ T M]EG_2q%=/,þDpĩҙjmQK=Vv($?cׯ;g( oھuԜhgO&wl(_ÊK RBN j$,@@+m7L B~76{ߢs[ooMgў_^$ZƼsװ -62M&VF Hʁ̡K6^/L~gTuLF}/uy=I@ "H~JIO0p~$d>XVK9p5}[GSII5pS:7vl2hbG4H^BjQܲúb>+Hɻ,-& >'rLSz4xC+EZ%V@yVyp!sE-BqKAGŠjy;˭kj$4$'i%V˥ʂlO2Ok5E.pj@q>ˑG5afiR*V ё>3>s՚tZ/wNs y'\ ` 'O.<>k:'?5(lPwJ~rE^D˽l-1oi&^[aKi=v6DŽ◀)A$RJQIE 'dE D@_yb Ud, Xs! dBJ0-cNʤ4U,*DeJN×65}Qܚc@ABQzz.N_|>6.N; ͼL+wrkҙ5gSkꙌGL Aj1 XhfJd#v6RP7U*ɠ1֜_H) f&]PZ.{B%Z酸j|^~އ1=wSK`( {g.C0u #t$V)oN@☁>`xl͚+#".//~VahAS->~>=:>z;Ҹ#;0ksYS&V*1d_DժTgxo=='9z#dA ^}$c;{5QrB)ƀp6V" ITc1|is>`W~װ"$9#.`†PWQM t.I֨cM603q>agQN\,—O<[u)譯_tc~(ĊbK~/>`0B,"" R*0Q@V G c+W{| odｈΩ4f}B/uUX$K&z0>oyW] :'#αHX@b)jD8`~_y0BY`F_9vJA-$0Z/_lPUTU$ UPO{{ J 8QtTD"Œ"hpR^W啻%u,)qD>]zyh,Fyyٹ^ܗ/5b8eTd^Vz,"{7#oNhnaSk1m92W"MdkU9zSlEIǚTbD ]d{ϔ׃m7}5ZEaO8>LcP9 aayDOy>Z.1uG|[ti6e-HrKjTͅ`l$$8" N5NdW6MuǹHRm $} ؾOHzFvsiF'D<_b (7a]-E}d6JP+5䨐D"շ\vS j%ٕ\Z$y}S辪bg\`h}ČKI D4ʌH"|` F Tt)|&4%A E -JL)s˕99Ë X'M[7Y">UL/ڐ"w-C0!NFcC  $ D&{+zrᤸvor7z كDtBX{Optϝ˸́dLSI j(ڛgFNVWsg.`9zإ!3-,G`6WS\> xJ=ί?}=9ea[YY33}y>ȶzz[aD5r^H`a!p02=%pPI B~>R|H&E&O?7Q1&VRڧ4e?[gqh9vm5O::J;pVpY kH#5U ֳZifmn1DÀ= \ ]:Uz.ci1߲jf*[7AbVAd̃qYӗwUASQ N# D#O=,njxq{.TɦON +/ (iAcrYYDf)Y{GoT *^V24X_$S{m^ndT{pl=_E]r}cy&-Df4-'0[S[uHV`X; v#/}s>M|}7oJ5P*VJ*=dO{q*~g_/=}-:vO'~e[}1ª 񫯀OUEyBBG,]5e<{ZՎ^h K:r7[A36JE)߇ \Z&tDqk=p!B Tl j)&8oqaLR;%ZUW/#Ç}<'Pi eo*2Gyo{שm x^^,NƴgpA$ן4 b080DRm`Ǹ!}rĽjH q6{9(Sx0 ,p% Q%/)F jHӹy_Ψ>U?cIt= >P"g@2ĪZ{N0|zo>/N~[#BIǝ'{_vCWs)ZVp 7zũ`[_yb~z)1. ="k A&,Ҋ\'>M{=Vi'i7->Ee/[8@DDa73yvydVW>YpO–{46QػZ}>QcNc1:/t[Q(R!Ve(0%yGpȟ, ^i.##EX>f^a]݊_F ěqou#gϟ*vѫ|kUq++{}?UEL2GҞ{cyh-uu=9>O,9oy}^C+yls@ڂbr9O,93K%!aRa4b QL-;=Mgs*L\ǧ/b~H^kڴu]k"٥& X@'k9apf791w^СDJYd`[x,3Kg{9R.q IH/eB 4q}UvFS<Z;:$;-Ǔ#}Ό __9sxEvgQxeHP32~> mD}N.;IH 3Y1)ԚR}'ͱ?q@AM=\\~Mh ii mCl8HsL[!` ӵп?*߁Z8'&\sδ7:ow E6z <$і޹JuFۯ?-7eDz7v$ڟ$yokBSzC]3TGL!!{{D_=b#9A"HL Pɫ %y[f!LBgcgrCFebF\-7hg,DR\3a3@1(8EQW8PV)Kl2üfGXHSßN,s]6ѬT-ͅCxbeJJ&Sa8\+Be^TѤi6tȞb&ȼ֒?C I7[K!diu3Zpdg@Y$H_* "@Id/F9[hPF T&aW]|utй!~vy*(0j'YG Q(n3Cw@aP滨2ήKߔk4=_ѼQA(77ZҠbyͩȤژhԹ#*rfAm~{ϳ8PITIHJJݜѨaz^/&b% kO0Yd В0Y !\}k7w>9u;_b0hW8r=MY&d"mR?V娚Ss(!r:pP'{PI,2/ϕ2|UE Pt8=Gmti> ν^V#<'yAo,I> .#^Km@s&)#2 ."+jtcb9ik. jU>Fi ^;V%STP>bhҗ ^RH 粐rµ~vc7#IgS5ʤBu`!&_iHpw)/rII;cj: Ź?3"$TxT*c pC(ȢAx@dDRD I,q`A)"@ƒ%BsijjBFo Ghzğ9X@"$$ b ؒ2fK;(+j` S黙{rt9W/ag}bQEAh޾Ɂ_D|RIkp:m`jR+C-pc~E-}V 4!q?n_WW~YtG?(!$xH##OTSyYQ]ui6t^-=Diɽ'^Rl%&͊EkǛ!a yW֔4 $+?kDJ8O: O{.q]N:gU>aiz Bx_6!$? z@$"$ 3zE٠BϨʞl+s_;=V䰋jiovo/) <)Uwy68\B07f/].ߗ+-dHs HaٿCBRЃ1{Lx\> c 04rZ765 iERfeAFєJYCި"'{˾{̵rc5n͕/Wy~-3ل@&Qlr]X6#:+1M%pYKƟ{C:o>`iԎ]}D2 '"!B0 *|.5wt;ٙ5rY50H&3Xssp~DU a,1UbEQ Q;מ+ݙ'pmVWkxĥH_07chBrʣ2뵾۬l|w=nriMBFkm X# ?7^Ol`G'Wp=}C "o//~PE%C*0*U` E$pIůP$IJ ;pI+uhR{s~ox{ǽhyNsslԛQgzDdFoC''vPhh[K-Z#R;c %"<ίG9AʁZx=L^HЈ<_hp"(hh_w/rGR"㧭Rw٦y[ xm߻fwЬ o."E(j8I`^fMrYhL0;ZOkjUJX̃юwDH!Q-\FJ QBFUB*¡V.`a8!z>Ʀ1h'`G}պI>!3"2'F/`iDJRiڜW?K<;׉?߲uݏm[ɝ_jLTʙJEx`+rWiqR 9̈e3w3ur z~.=QM 1YǦ VVT*uk{R 같XCjF1X^OOE*E x/VPǛ|4-K,ѹl$^ֱ`,km#uɽ9ïmகę"E)~ZOLG( -7юjm^$$y|6\kU&U=Z eED)bf"+KGϐhHKemXu DbU dgam0 -ƟQaak"v OWk^߱!Fh0>](`,i;1+ >PtV[Ek\|Xg_GǢؕu0]IQI4$,ƙRbRd"_1.4#6O?  HbO6dg2ɜa>vCk9Aczyʇ};,;kA^]'#C-̆MɴJɟf8iƒR:`N­u,\ SI0tj*:|UٚvW&alMS0 AEPUY`/{|3nb^O<C'W3͇DAe%Я#\Ck.1IlfmDEv E/i]d#Ofd3bL1IrsQ D@&G.Oa0V,oJ \,+$WS__&R@o WBtBxtcP=ôÎgp/!9֭"%tz*qm\k۲S6D5[^=šaĖ pվF(,P|,|C@rc{Pq극+=>>?~j:~?=M[)lzȦT@fD;e0>-w3#u/%fPU=,b1kSU]%0Ӈ# |ae  (NH~?gy+t5YRdV+b'.{C# Z M=./W3u v&I#5BYyJ_EǀKW1Hm#6H<;ufhRp|RB֗0D+z/Бb2Cq Hװ|σӻw%b6$-C*!#%Wl3+yY޼(-F8=43њP`g"'M_CxT6wنҚ=N8AI7xӄ\қцF@TJ҄ɝHV MۂΣ˼L?sIstxNؤDqK.Ÿ>+ t|7pTQi2˱y-@3^{\LV2ړ6xF VH$c^*̘ރ*h|9Ecv˅Ӊ{B Mm2w'В7L$;7]0@Cwkd1V<'b df _}qzWa\`HcR#$&vBLXZ,O5P"[ I@wY9.7 ޙOZłDHUt%GAɣ{RYp*;jB. +WX a B,(B!y-vT5UF1?0(!. -ZYa,Ra-!ǜcocDm h ,2*hMX$i/((PK*EȜޒՂIbZuҁȏ+z lh㦦(av| =(-GQeq-\\57"g%:M1@NrAu$!vWt 5+ñ3l-[Ǜ < mF@S\V^0zn{0@iIǙ':|ap3 ܲs 9xy|<ǹ~0H")Zg*@ʊx0}WuDFYz7$2I cf:h]Py'#zũ}N<|/ 3Oi]x֗,=?헹0}r,QBzeYpaRO{a{}ˎ``wBDg3?X˿l2I Ҕwƍ»t]JQCtf]I ෪6 Ma݅D$>63^Sv v0%EIy]z#x!Bh {Oj4k)h.hzĕ sJˋbbo-7_JS(_ڗ4K{vW+ot>ezLHFM~щ] //A<Zvܹ̉D,YIfII 6iՉY/J#'"N` ~ أ{r{;I۬uukk|fĵG23_:lZv6L/<0@Q7 h5ijR龣yFt|xGPc$,$(hi 3^/ބ~2Q: uO[wqvX}SKc;EG"i?[(?Hp}R[{G?{Ȁ~~r.xr$BG~(0Ѱ@ex FvF<>G?nϕ]vl@Zu1spI-KPL=) oF=hKQ6\]p⠩lcKZgq>  Y$ ”qӐ!" e@16\v DH#a悦~">?iheum=Jgz#UL#R(ſ}%V5vz)287Οh`iH>,uښ DJ`y#sf'-Qi'#J&@u-$~OB[}XߎԨ;,E~q8 hK^G\=?J-G~/\Ns3ȄGgt]8#B,"Y'R}}LsE{M,#+3p[GC£?}b^_m GZ' ?^mL_%H0>Cy!KP-AȰ|V(Q\nG4`wrJcZCR:yc"^V{]FE]. ,&& c $8:铣?Ͽӛt\tǀC ` |Ky3E'Ό]Ο"W6PjJn3ElJI5CBB`DEQ*##H"D"}^,cWc}iV+Uw翯Sxý6}K?%WDD';ΠJ< [kdk z´+y 9[Sla?t+r3i)KǬ4~EBCU8{tU#{;xYFErO5)DyLxr찐EE}-Dt 呁uRrywpm00(H ^Cp-7pX BP<Pϱ Ř_dol]Ot3a"+Ȯ^>Vkڢg=~b*mkdLߌA%5!e1Fd$'j`/uX ʑ)Gm&CDg?} [$ (Qb9CJu5xWnD"N}$cfi`f4Դ,d#~fB^A7+(IkYqUweqrH@z#S_v/^|\N"H ݖLbeH${1P:aa%x~ivU<Ͱkˤ•EaQz:&(4W&61ysd6U UaELcI[͕OqV KI؈nJfh*bκ^WPЏ]2n1|09 X7w40Qa#A#$X 1 UEF bȲ1 ?qGƝov]yhF1" (ETR Ab,X* RJd|vϪP=EV* V[{52b$U Pyz)l G9c>,.VX,=F`ssT#7U|jE3#%\v$j0=tXAoJ{JH/&n#FMLRF91Q|ŧ=k"wm酑wq" ߥ EX9>./>n꥚AEuyBL I$ҕ7JݫS1Pٳ%=AsFB~R`8H}5@cb  N$\)Atq|m=Aā$/]lL :Xdz3J![}1=<cAf%K1@$xH2@-3_79jk/'$!)VQVp'N֨V#>?!.f04Pޝ_W9P:qmT& n~σ_<G$#tf\eATQ^TM9YK^N*Bc'$zV(0H"o0quՀ& 7Cr#3RSrէ9_:]6!K=ay,;\ vVF}C=ɲMѣ r8$%z5vPD[c"Fguݧoݹ?ы$3>i 3Z0JGIr &v>e,;u]+վ\X1%?Jadu(]<2yu&DEGBI@ 7>v$E\~:_HsYf.CEM? ǿ6KgN=wV'Qs+oD9TI 1!l>)'T@Oq(B;P! (T:=׿颪h0ta3%ʢ%hI7@g~ ! F`^ۍ Z!?;_W.r}0Bd#Ab?ͣ/,3YKz޻TZO7HޮGqtw{;=fP*) ^ܯ/@B8/MZ~L2Bڋ=]zI$$QJ[]XZC>D@T4|H/B.j"*:QEԮ|`]ځ@14X@mq$jǑI~>sՖPצŁ+DjWN -΀;rRsUTboX%`-"F FTJgI~BH*kAi 2D@^1XfuO@TJq+"h9/7H͜3 ɦCWÄ`/(z "28Wq"dgة>jǢWQoK;*ĄG\„r5|vPV︠ᑉ{'!HH|{*!r&"6YDҷz'#s_vv> LS/qcP`͔b',M`rQu8ߋ#]'icxhbǖovbء%4PčF飲ŐekȇsV?ļz"*ҥ_<^N!@QMbwE>G (a  "UdJu )>tͶ?[!Zkbqj\f$n#@DQ@#?>$I&#a;CtpOT0l؈44R1m A|V1# <*L7y|zIV1Ft-@2ǁtc+I >zSH&RClV҇#+Q?4u|!:_  [)dRܟ,ebBmJ {xBf w*n?ӿΟ1SU{lUDݔDmmTQb|X@ʄbm!%E{\$E}867W;щ~Ѻ ~J TugW-GuhZ2[g̵OBy"~dPԃBk%Y+n_7Ԩ% B/iKS7ae&z³ dE穯q+PwŷM˯7TII'j )"FVI F\W"kmci홥*a\->oKOq{OPmc(Z-dn~]>Z-3$ۍ@^yTgx79h5)|w1@o~\y%b:wܙz=h ґIOOJZ8*;cCE/ g&s?9nJ0Hig/J M ߕ@y7O̘I)!fNZ>;WJtg+c:Z 3?mrʼ|~eAjQO,9\VUr\?vH< %K J"?}iO9WRu ` =>J6dMl>D` %Û:~Dq$)Ee)F%|vN"Dy>S Ď"*0앉26ihݔHKk2S6&a:3 wc,Oz硆y2nӒq}_9Rw&D k$ʌw*7&_{=-PgW(xCJyGl1.b(yVFa\pO'9貐҈jZNPbvAy:9Y ~Nݩ5l  !-.^> w(De۝xad/ARhx jSuR?v:^g=֑N"˿AaU'zy)Y8݂ PDVuuuGx~ |dQadIdPWOg1v{zGa5~'ppAL%0J:0h2X_:!s$F !x=מǦ$Vn(Pe2'6URjKGݣɿk'<|e1G_MEmձT-w!IQ)cUV~J0T{;ISŋUH1Nv;3*l3] y'n6cb418ÜPx)2 )O'zbO =[c{jv2RWrt eL 6x3S6񎒆`Xd:TDajb>ϢjٹTDK:>A)( ZS)@tRE]\ckbCg>>Y_skW +ۺfyw7ަD%k'4/{5+x1S5&lP7ƣ vjew?m?sB* yrΝuhƺǣ7y~Q<O̤ 0*f(M8/HU:#ǖ&%,r6dz +|DS<^N*u_z7W"ED2/\ 1rJ$0Z `qbygIB?d"F2QB^;n0 ] y|^3-S:>G9ɿJ~{+?'m 6%gT9/W󰝆ک\O'qbř|)>/ Qrel$>%'Kk4~~[d*NuG2ۭZ{&,E5A@Y_H8d\g|8P8qXoW>|a4^$ 8H \ 9$:GjRd踕9yv l;fi+^oٙs2uA>)kc6Ϸ7K?. '^O1?SWb%{R{SP9fЃuUt;3/$qZ^4撻u`vrT^H~SZҪ lH.\"E 0^+ʮBFΏ#C ;қ.cH%(w8SG55nmz_z/\3Lrw }$@X P2GI;)#$FuA!i2e L|v9NCݓ޾sb륢 ׽Wo^-?W:G9Q JM4 ȁ( ]t\gm-u~jlۜcx쌲y+S@@iLhpPCgVN* D'O"M.#Rgoaq{؈2*~ 3y&ʏ駸p0A`oC5Ϩt)R:şf gLgR7.PF.Npxvg~}`=BkY4|eA_NӐE[nf5EgeRF>`.g| oz/dៈ݆,)PP 5B7Ռ^VƊ|N@: -S')ejfYٴHi xƈl`ѣI@ijԄ؊~ Za24oïzDl8<:FRSSbXc fFu14Dyc$qs*(<.Y)-+T*oiUs}9f[u$#ط5,MkUE1-Ha aa 0d?+6Ee_#Qcv}%X2vnHq{m0'1*g~Rl (GW&^{)h܀"7ddN|rIR0ZG'CZZ'N?'!ICϜצцA-GCi)2ͳ\|i }lBHg ^iɅȜxxjM \~hbkeP%Dcai$~$$z/9lITjY80(ȑ7 =a/UvV9nE55IN D f{h?3y39L>WaRgD~/GBYc%]2EaH#,PXAAATX)A`,֯I Xbk&}<H3@)망HDqBB62B:١Xts8?r=ch#=nŦ|bB f3LQPT#DbR"*QQQ`XjQ"ܥ| EX <EDT^m]0H맫K|4_]<,2B vI`g3ƱT*e?V2`A`bJjbq`22 \q#!ЇACR=x[<Mmg ">[RA B Ad+Ȋ/{lX;,Si 0z03$(ml (g< e& !D)Cr1"XAgQ!/r #c\_J0/C%y Zy8E,arܖ{0wU,hmOrR'1@È&+!R) Ι'|9pK?7d+rpܓ 0rzV RuH/CK ӴȢ ?ߏ=ִ<>:aMzݗ/iEsƋRZDRwߧ_gn_OUAH,Tud* Ggw)$JmNRzl@/ۂ~`d7Y/BG02> 4u'Xp$H` y7u I UK20*,R*祇fڂ 23 op|~'<拏o_O~^yu=woW.`;JȀ//>g}qL9PUA "HXłAHE (*HZoMNϟֺ~ m{ G oonwdɡHFEb"0HF EVAV(ȅ`,* Uc (dEE"ċUUPX,UDb+QD*bȤY*ȤU`͔,PB,XH VX"(ODo}MH@z"hO9 D  yib Ӫ0h>J'!W /*-"z㍗IBPzW#Fdou}7ET@9\PXKw^\K3ߎo32PI#UЙ=@X˸\9a0QF")Y^,Z g䆲!?ߌq2i4e< 0/ereooFJ E-l=rhvv'v=Hr$hQZ됂Q3oX;9|r*L2 #?]87 +s#A=X҂_?0uwK)lsZ0reQ'q[ljOKRnHcmjojĩT&O >ܩtn<6~C$:{~΍y W.(ILLz5>'ȍ=$OJ1G9?CKrn{1S hCp]g$/% >=Z|oCב]rgy{(^MyMK~blʁFh4{my@Db Mp}L!i%j#VbC4ѬJquk?$͂);GJп䥠Y AѰ]tBlRØݵgce}I=I6RE_~ftyT;k$쟡z@>Ri,WfӚAQE;oݝ+dw&Cc - #II4\z&Eԩ$tnjEt:\UUla^ 8G#cti pRl ) 5 ʥ "t!,?㫾P^ą G2y;2͎vYH<$m5tHm K#``屢FϨz/{ٵ\*97˺lbfQhV4=k~aHg4Q#&)g!+$S]FjnEM,ux{zۣRis֡a%407[ZUDg{pw)j珢uH{xp|t6eT\禌 쀱zƇwgtys=tױakQPR%FL&IH2|4 } -3퉈 hzݒ={,hQmV4/i8ٍv24!\h][YyQx'Ol3w9~ لEZNN?6*k Cs`[)] 9 BD VJki0'J1bA$9.Xzj*T#n0,;]UmEs{ZKŞ뫬?L}M-a4{uZ$⮘8$9&VG{9Ndr}jEs9Wރ HeY Fy "nJ}h.ID@RK94KJwI-FU)V"Yf E^k XXtD(лt4Χo@ưq6QBcL=(9*~_!%~ he{vU[n[%/94ʌ׉f =2;pƾ]Ea3ɹ6 xKsR,9Ety6_$ H|I,%gJ^ }/|ɻF t*P>oqÉB$0D~2'E 껷RlGd1C`^[9|ܢb o*A䨜 2M*"peo(P1#Ga5}:[X!mI&;\=IHe[hG}2츶ry\<j^:;&\BxRGؽD +Tkj]RʚTrȡ.DVFòWUNެǰjs,M)_u{s_tÒOSm ܿ==wO}?)w^Ϧѵ>([N;:z4P<קzdMYʾ_h&-HitЇE=?MH~rFsP`u-sZq}#QɩcLP{H(s??+j$Y|fώRж0/w59 /4݉/:B͈0BPBV5VƕƔP\Wq+w#AvB ;N5[Bo=[MQBF^' ˽\Ocǩ"gC//7(9;U-ӥd.v^Pf$4Pb-/˱Z(B9$D@[pƼ6)wSLфk|߹UFMĵfNy4/^bcO7a~34/OS+-bxl 2 *X1!v, |O[Tbq:hԙo?lZLFeH ,R% ( 7g-Hz@>~+$zGIk8ՔSK\L^Gy"^ZCb{t@ %jȝт/d$"gߺoz"yEI,O _4A|F1_ .YH\:]{;S?pI~t_Ntܱi}uҎa{>E~h5r1:2tPK}='~/6Of LL>|X/ aE R{ecx~/18I+%r*>s4-6 zǑ C$Ir.D?饐 ːrx8S<#xJ`:2a%/&@2QÎ($!  KckLdnS7SVzTHydTQWc+}i6A{fI~,N~ը&j>vkZm@L@@ ꣨cigc^-=wm]msQޫ Ek0o ?@kwىph2yt"QcWWH=٤g [^mvZ`Jߒ_U-L不Dѳ%> 2˼-612~4zLUn-s m^”@^gz~)b+O Hd n ~z&8BVJKKZ򧕖z$h߾m:2?|?z{j2D-sխH`vq`6q;/1H HHVPěA.VGy RBZg8/c Ѳg&*ބ\]c'fZvi uϙxjݼ`kY()b/j OҼ_4. d}Y$Zr7[ |L_0P> :P->IX.ʟe JvrJ&G%o5Ekh7bRIw£gE_w167tՃ?69^>Y)d$}]u14uΧ=&CMݐXevU*(oS?.ڷvTU}3/voyBxsogsbc|r9RO )B eMu^g[3zIiKv?x cP/ *t vX˶?X$.H$_oIDzQX+o =BK-0* .#cAY\LoNQm:YBK"M7zȮ>9[+ڼ%W8Uo$YM`ci5=bI ]t^|_̽4żtbn !g6N$ak˃m=e[e]C}({SؗN9loZuTdqFI˴ѦN+,2Zz9V{ 轲KՊoGĝǾRF2 b9u:'G3)l4שyD\6rAJRiKra\&}cgK,+>Õ[(Т| 4`kwYW;o5]cm'Q(-W_ϱ[ =!ok$SYŷ3> *|g⾇$1?YϦrzmWEaoe̊su˽&P$xEXD+o7mrWzN:>Q~;#HYfHCq"z晻M?o&gFާ8.XYIH$#6qQ-e&@~MN='H5nu cPV{ux'yEgo}L?ϥڞ>^u"(I_fBB{g~c_QE7`Bⶆm>mvU ڤ XӞf"?KlZ f6.ǥ#.bxֽ( @K5w#_x#K.M3ؙ+lopX!rP5Px]~(;Xj>H`[ vqy#+2epFNbH0838XMԊE2h&+N#?44 ϖfjw93PQTN;L6rߣp|oȄ}.*d۩!_DENu#1B( fu#V5;sF2YʓVc"M3{aᴡb{=3xJ/sN`B1YtNi,\3k3*e=Mvr<=%}0Ւ_hsֺ7re/#n5AЫk_3ڱ@-Y& KC{(U ̗˦RFweJIVm,se 𞋹S`p]Š n%(lP /<;g@L|Lj CXy QVBՀ0QG8FA9܋0hXՌ҆!$1xP5 .v袻)&θa|m澵j|Wp!=9}w!0 "q( --28hurkז'5: վYOQ:^Lgޑ&*!7 ߍ?a`FM+YA(S[Pxމ@orXkp6tX|\iON?Ɯ@43HhܩC_ə؃?zwcVxcxL(}at`+d |+dȰg"\4E 1?k*@]Ny*ǒz_A]{-0IA;zu#ܼjB|[@f/$!v>ږ"2 lxuٰ;"*EDY ~O{=?/qM~^ۡIAYdBTA mIx53oY,whEҔsrQ|_-Ͽ z$:4龎P[u?#h\j !ن,~8Qիl${Gΰp OB٤CF:OHtڼ˜-*|7y69qKǪ;ŌD__KwYIV}4]C A5__c}_qӯ­??EXH%ӄLinJPh8 zI(P M;R6`9i4=<[x&AO#Y[*4 {nf8hjkQ|25[&Rbτj 2' Y<6q-lj"RQ/3aAsbciozQ6 l = 0fb3+sOOt{TSX$1-y}g] yk}\ 't:@9(R:<լx8䑓 "yC6]:=DbAx{BmJx܎C=l#^yr)Pc;lY%M8&|$3T6!0D5LKb1&ZG\gcWR&`,nt$ej764FSZih5V.mDP/ִ]-L$J#hwjSczR9 :XR|CeL7}ě9c'Dž_,uB$iyEBAv]z@n&KKNڒ3 +t;|vt-"M:; ,^ӌ1=ǻZUI'1oqJR/tBŃi{*՝{_Yb30:֥yi!kx֌dF'F}i$r;zoVt7%QA181-pG=E3$[/l,}>\ˇ/~.,u1M)`Q ^5EÚ>LyNAZ #r i i.lhQTFDt^9bcLLHsLk&'i< YX"iJFc!qn+cn<BČkyZCxOGt}3̧Ow+~\&/YďMh^ʌVG10Ej\?juyW兟"j,&;8hI=dVИrh~S Q W$Şmo?Or.mӿV.1>UK28,D )rHr}WQ8c'D3s% k.zB_uY&\ʗ_/RJ$,v,PxkuxV$%IJ`m16ޡ [x=)w "ʙD佧r(B#,YE95EV!D R&ݲ7^"O :hY*`HUv ۾J[C$Gc}\a1e?f [M!G)|3!q׃vO>3Xv]}w2b =L2`nJ bE;zMic_A+BIu% y|7Sc' n28YFI}$ ;\ 63N=s9sCSߟR^BPPĻ˟6$r`SXY03vN')M"G6ˢ<>1PѢd3HF9'%3X!0rgG|^ڠ67Q+c-jgpye?s^>[3AP98l9Q33K3Ŧy;ފ+o뷌._k_1$M a9ҐŪeVr,oyMG <㏳D4 6(|TP EbV#Eb4nYIEX ZpZ͡=L* zU:6>{@L^ÖFi=`ytm{'~ S&N*WdsK@ݽ%3MOcjȭIARV'tS2! $k~e?i +=BA|/"kU$X FVR 嗳VKC;;h)W|n&jJq"FKɎCūi-=WhBLMKgX{h@(Ywv5U0ES0ЁwjN:dy⇿J %kVINnJ5,4UP#kZXn}%Gʧb?!4no̵+8q)ejx o۟`B۽Ԗx/'H j`ݹ!{ـB;G ͿC.y#SWy7儞rsjj*HεԝA%/!<3#s{lT"Ra .8$у$Y<]uU-QRZ_$d2Xm.v"3MZF- EEto FX`Dze[X*PhTBoj<)0bAeE,(_O* VZq(;&JDa3_PuTrdn>L(ټd(ln=.Wʪ5VTъesSҫsVيJ1ᴔ{Kif5F0">bݱE;Rr!0daǤgQ{-  } FG Y!$b'!lu+T-h. MzPDI!5EFqrm|b/K`HD_ˠɹz7H@5ZbύF/ CM!6:ˎ HZ*ym@}C0(` } 0^58(Ol:NjGG :Xwnf,j"rR kbYWEib&`h/o-=t o(w {Ǖ!XlzH_m= *mڵ\ E= KqZ dQ<.Gdns hejُ.uiWGG#)Mz\!Ak ZUD#IG.dabEfTA!,jž5uX1^{puh.5޵rH|C)At \q pE>(iHIlE0]GS 0ݡK{fGST󌞷›%9|TCǧڹA `ݡj&DIRڼbWQ[M1b~h`})v*7<,}{ɖ2!/e~0pNZ>VnB/%Y#cs% GP;qz5QWȑI>QdR)# _ OH^HԿRt۱{sm9'|#/uaJj]g4-.ߵsY ,r4oP3PV]1D5ӈ %)__ RQ<]:Q[Jic ]d(F 4$ :4"kf  w5%!,@l I+Q>ӪI*( 8b4ZӤXܬ?%+Ru ^ WXO vkz<,o)p#};$Hb a}oCoV7]{'S?F; ˆbQ>z+@U]D8IH|.Y͟>'Ʃ?| =8+dFHD#H4dօڤg&X3uhW![BXrWihE&̋x¹#6F>䌅2_ +Do-eB-nA\U@HF^][>H $j-cWX5ji(b1vt Ho#A#*+ 4D5lHܐ$CjF j^z:~WQz75Ќ-WQar{fLo>43vp7yTJΕגٖ5757F`%cSoQeBdnU'Zpfe293p^c2r $gqS`t HtX ubNiaԺt؅1oCH K$ +YV ޼'t Ln%y-<W{6u-4Qz;ݟh5iPDbT= IGyK=Z|=V쫊TN7c v3R6[:!gFə]$o V̫W\fzHRW36.T0D2 @)*"-kjqoZ4"EDn *E)M'y&2Qߥ̞KwN7*K!$" y`j^nyKwe]*Bh-NFe@DL e/ v6aw\IwWPH! Mۨ>!gdeFa6SJz =P sެ&$WB_ٰ{+ ] }$qabA 3@"@.[ޑe A#˜A稜&bc壽=ٳ}W-oo[b_a}GH #"5DtW4;ܮ^E?Fw$Sΐ9irz^b7Hյn$-mp(,-^_nׁd4lIFNY!b}m5wyHdWcx^ h"O$KH '2uSuvi{/ĽI~t e8Y#ZDXb}$"k(.ϡ_UVC/aҊ8:>solNux@Obf^'E1y]ΜR$Z ) 7rĵD\p|s ?JL%jŢwΙ6aVUҫia1JbдbhU!Eވm|Yga#BFy|.D$>=ybɋxW 4n{ B[CY뭄Bϗqz_g#`ғ`6R ` i 8bCQ/u硙وͪ(=Fxk*v_ơL|!Jw'F Bp 5ްoX~5+^nC\w٣p)W|MSGE8}Qr3v9΁1('^/_ I6i8WL)dx0\l.> ![c+m:2_fܩXn, y3)cA]O٧B΅BVj x~(7۝QM/'Eb swxERIs}6ޙE eQ_ԳhO;2{۰W}gn'z. ғ {Q$GW?I{nW=eס?Qs*cXg﹵?;kPw#B)f(‚ZBD\J}\Oqc}OP J(),= \r#-*"%<(,ren2C ( ] '& jA\1x۽@hLe}pl~ Bb<FLz|>ӆœq?J!^SD 9F6$~ 3kQ~Ⱥ!A&&`Xkp1}0 L|0F,, W[+Fp" GuXP!3k,A ЌkyLHfU+9 hVL?q}Ɛ}Ҟ D]0d Y_1KcsL'?PwQ ( j5I$@;߉00eԷ"Mfry$(UzVC/ѯU#_"{:@ɾ\k  U9^/%wաz}}fl^ uv aH%zD[<;V.5UxA=$plĐa16$5Fai"PDu 6K TD̅A7_:Akz(odf /&W-$F |?$T|1ϔ??exq0ȑ$Ey 8 |ب6 2j )/iIcy^47 eԲt`OWR J k57kVoW? f*_ƑhJ "Y}[]SzqQ:c<_{+ {#?ܯD_/>W>)7]yEƎ:za#5*B-r=?V/Am/j Vܥ8}!8Tsi~<~/Y=b}"b"-o0!%b02yBHf~rO1|L8r^$ǗxƝjt(|w6aA;KLOVO1אHtr4!*`q)o@lfG"fXd /Sav8g&i]{|I⡨ePr0|S۠ci֏y;Ut39Mφ{QmE ;#~n#f h[Qqw"} %9uOS7m\ŷh- {gR[XW=j,&MJXAKje}@chb X{hݟBn΁63A?Sύ~'?N ߟfs+Pg qh4X@&=q#=k^>E--kskm={zm5Ǩ> ~KW)jkWڶTpQZ4)kRҙ$9>µZa HH픫ߩEirSiOYڸWJȁt܊Bk %wc~H\g=4r nHRȥָthS7) K-/LR:SY0c"q@PV(ͮk<CXZi1"+Feeʯe]vRE$h'5ZrR(Yҙ>i _ ȏN լ̦y.xĠ"qtqN9o? SjNuq#Av5$=1cϺ3{dᔡ&Bi#$*v//Kx|͍ +`UHV@LHbp~eۤ޹߿INFaat6.ޙ f ~㓭f OņID T:l0Fmoo/=_NPVZ`aL~q~:-BA+,L{6*2&Ƅ@A4Q(2ZWd?'h3L@QQzO8?F%o"}WA  m5DvZJUSxL):Y޲Rk-4>'kĘ ¥߾{):<)JM0Xx: KbVt68jRƾPiCh1CA u;;SyhV=L|oiE?ՖZJf-£~?qߍGUDMc+滷Dњ%![Qcz;=fH%[wCwo75MNR ۵q1-2E(#vL$#."\!)Y1M׍a)Pe}ϩljTcv)OWd? P]mM1LUs&b$ě^ůeJ_(e&(b$iu/_F+2M{ҲsHqԝ#@(vڱKA (?Q*G.YWFSiс<\E->$5_x @C>( ?J?ǝ2`L5:@?ώݪ$u\!ĚwS' 2_jbyr\`>ܡ>t/v,z,1s,4EY'gu^ Ggh>DКЛXHAdvҘxfw\4ie`R{e! ⭰Vʱp3X<y&x:ס ['˯,p\)(\Rm_4DMdmvXw@9ظq'q,$h"['V}+N."6DOLb?& BH)ҋ}?F˜CV|gT~nKFd/&duL`V ̸x)H2#)KP#kܬtV/R(,ل1ZDU|,"G_ȝ^;vʱSۻX_jRa_3^7K_X!ve/>Uq X*j6T:`}$|pbzˇ?S^{-jrGs 9"a픦8iF-Hh[|Lf\/ J_WqnyBQƀۧx`& 'fڽ8<Ks+j5"gi&[p{˫4#Zi7?fbnRh;K7Ȅ}֢NsIv`sh&Vo'Y±i]fّ[1E!ͪbhj[qyv_F IjPj毖+\I7&*cdJD_G>%:Ҡдᣗ8 V{iFx/'ިh0E=[щ5x'ByJu 5G %F3$ub^dIq_?f9lˆʟ29՞TP-eW CknܵciGeӿ^|w[5\isl\­h։\8Ϲ7&2<" ޟцkf0e}"=t->w}J3-!nmd5Xm%/Np)Kaw Oixz_a'6~ZU~k'B_Sꕧ: aԿb,z"Dv":XIKu_B׹ !ڞTtUȎ·m.8Gg.,iBv|;gJ[g7y;y5hqrm!]_Wq|dniUS{}n ~e{ Miet{'  Q'UX; U܄~[,y#bzA,}XϹjbO]"^<>{[k ٫5Զx-u]S!Ǿ|Cqjԋ<_Q:݅q0Ioz7mct#.1o~׭MsV{|-M'>ٚ[F/η-KѻfcB7'ݓ)jE]բY,/E<i0yui{82B"~gTPp=U !>M[g?I@tLGNd@vhCG~cM";" h VHH: N^4'o>fjUQ_UBc"0g jʅ&z~n*Nʒ*Y`  |c՗ibgѪ i_XB sBX${F`I\6obfͷd[_0_jRoS2Ro5ZSZj|{z4%* ZbXZ(4<+\$;| ~Kj8}/nIa{3(2~i+깿_ؖ(@K1 ԙa:}PB`+:1,( q;48CPzcdKؓ Tۜ0qje|;ΝV \0Iq!cAG`{8)z ,fo1dct9ii 5O\6I;w߽56gohf%2g$*.u`r}m)`zoҌ~H :%@Vj@f_NI+|WޗCV4Ȝ`iy%(IH7B"":Vi 4 -lyig `/j{y:>lI*z˧斳;PEU|ăCqFa=jԘFaA ܫߕ~,'C 1K#JIv,*g{7gG9Ը75gɰ`rLm?E>{zɭm8MnE__cN=F1Pc)p* TєYĿxȌ_=#oݳIwAQ,PGEqtacF#Uckv{n y!@" gwKo#ﮔV^&d򷼼jgFd3sW@qH3F${J#!z M5Ѣ8^E @%-jFX&%NRr_5=_aۥ<>r˝%S;RD˓)%fq\Y!HYqW'q2ڶ6C$py>K?W+C%agȄ켫"3~1(m,~R|@1= 8GQEjz_Ƚ$ ili]42j?$ilqWn)b^^a6Zc*KTS g_Oh<ac  )]6A Sn5mFF;܇#\6ޅi XCXA .VKT]ՐL\}\4 Q O2 %D$. YhSdY.FрuKJ]R_(6PbG1E#)ïW"U!T xk(No8ǭxY h-d,1?ﭟHlyQ+^Ѐ; i^3,L5;YHbY!;r0Q=F#+Οkz7~K&%/&XQlͣf s DžϯZ" ,ps'""{v;pv|UV@Te. PᏴquhǪk z X9lV'v"ڦxȖ!K1s#hp|s-5gBG"ˑEM$l%߬~0umH3<:IDɎo7^5kSrN_TbB񔡷Yӏ{dar/ZjyOZΡ7V@"53D>j+aOLG <]_҂pcԿm+'K]Ҥ;yBI۫6˴tP=Iv"Ę%S@I^w.ı\~3RyDV.*®NB6Udbb>R7:Щ(8_s/;K|dϯGBw/F ]#1z{1-3RȦ$OC5RFjh23H/: B譎q۸;ݞMPc~uzA)R,Z-cQPn/&ZXKldRDԴwBdrmHN=fE9|2$s .REP=~l#&מe{63?Zmky=Cj;>ũ EgtkdC' Mr|OĥJy*+)kTCʫ:$5$o`K'GLwwsGTm_Zqƻyx0I!Lb@M$j)qC6s?6[R{$w bkﮝJ3}>Z㱫WXpO O[$KLZ}z fpr*{ü*bզ kȫJ-;""ᬋK_Oe>ԝS#?Z 俳iF 80JIi"8JԬ)dRH X}අP&FG^Hw#Ô[OnB+TRP,^6T2׏[JTCufWB߮òvV/Y;l|/LJ)kĨexd~ .|1֫ 7 UEWsml ) s~i~kܯ~ydUbi6 6p&SlCp< ;u="NWgE@XO*N?EMA aX]̭{*xƍ=uԄDL"g?CvP :m۟ ֑~#k7ۍTH;ZwxIgUB oHt!ܓ7MD4{y/`y_pp_e챖;.+QGYL vmbV/n8iK}qث>J.PFUد1FmwV+&ӻvA~R#WxnN־iApq菇VP5+pq4v1!>{4av6 .foѥ c{D*o*~Moypdd9G5r?@5?XCqpާ_lg?nF]Lidyw^/6> klb  ^㴻;°y(5&` n]<&PlOlf8rˉULB^;5",Z}S^_.[\Rg5_:#"A=n=_!}>=}ٲq O=~1+WYr`!兹|a6r? \t:k3lۈ#W1NE1ahH+f(u7GO@{^M >cTP#*wEVC$B#]f`'y]}y(τƜ'g,?q׉O9?W.^-gӬWz3N;.+`ó=:\=Pf=~(do:! l/wn_ž+_kbN{2|h}rkOٵ<\nJ'h>AUCSUw>S"+%_:p͌}XIirzQcaѻ'V'd˳k9# Q Wca ߛRށTj7>U/}g'rD8als~ ,R;W N/0}Q"Lޑ`_%-`[;;sr3T7b(#dɳV'BxlnVA@b[܆) C|x/.S7<D$ ᵨ%׾d?ޏA܃|:&~\`ߒUg{Fx T-Ċ;Da<NʊE/E)<2qa(B;&ُ"1y E.:bfe0OvY7Asnav>ߞ(;_Ćfnm|rv뵗םh2"B s+~Gs1iICk R[pбU\rw1Gc=:"( `Qt5e@qb'c FN7B >C<)`^p"?~_ߑfb i`؂ 4,RX:?'901>vcb\f*ԃ_k|Jz%)-7) d$vLi/ܶk{IQ ק[;Jc27FT}cցg]Yb(c'3{2\_  UC!fBP k1`d&zSc1ƽIPpa+)e#~Dpkmxaw x՞[7kԏ/U F|ou6D.uH6 R5R(&_{{?F oej?`h e|3.c B"kЋ:.dԱ$}IS 3d~v2\N^=~ׁ-T5dN)C677}co/sf]o?DҟE*LsS71) ܪ_63PVuڪO]>Qſ ;[@d wV讋DZkԍ6v[tiaNA^baݿ7keƐ]9KXaf) ^Q1fs,/Ny{Ս$6]5)ĮAKT䤑K_gw 3]66l AU p~+ʻ3U+Mp_55 $BfDy0tټV8};/I80m%$sP% n᧷ĨiFyI&s^x1 /L`#I\i:K<4('B ųYQ~Wsc/eʩKXKR-H|0W䣐+jCpǦNtpʙ'X6ed I>WQbGKю %͵sUFhB1֍BS(Q)˥9$=iٯw6J[xЮʕ7R[d䎨y9|Z[H^|X[ey &QăomNuóͅ[Rvc=&]C$]F|fy}s޺'3j3 h'YY7e|S0G1t@D`ڃ5LlY"81|Z`bd1k3_L  \t,JaYG2`h^vN%# P$rj/~GC}{\k9}3\["B=ap{$I9A!Mb|ǓrkL_?zIr9B_ հ?iZ3'}̕~M4$?޷Kkl_n66YW{v`m~6R [(\}cCΎJZȱ링5S@a;/qNEbxl>"WX&,,Єw^Z"K0Hh} #?5ԿCUUb^OWcWb=phU f1F@' ˄~Ksd>sSRY."WX#t|s[3KWȨz/+C7"gҟǔ#/{_|yZ? CiV|fzwSɸP_8(.jFq[ f|Y[6( 1 ӛO*d#OU]r^-[O'lq>j;O|78xըDIxUZyO 2Y$?w,=BLԞz}N1$xC9cȲ5a<cϧDSpU'ϫe_j9M~uJ jE yaCA֯cDT1Q#3$ fHNè ßQC.ֳtvNđ׺DI急b,!&53mF{Xbn y/_Mݯ?s.4˾:4Y JRQb,PNf[ 3JԤ֬cN3)=&A4$$id*Ha*BNu0V*GEO`[m>,#j-+NCm{׹Y,MV1_kU>GbKJ Cnw6H1F=F-dZj$1=E IA8ӕ-@+ΕQ#[I?2pb25LWdQ@Q1:JU_Ձgи;M ,A<<εlҪѶ~oŽl-I~KTɶy+{/hl:.3ME6BՔhy)뱼Рx3~9̟6ASA!LNHZ0y>"֕_])i)j(&&}mPD7^Ci_\β++4)?c)10 b@ %(˷ ec,,B2b(1S,8{:c! 99/Yr#I=)Dj6yOsNqt<槆aKD+VW͗ѽWh@h/9kR${׭L0WT?Qq\1x7{wU9e gSҴ!yq\6X*`s&cpuu6 D' F"1h@)Rѓ'y d"N xГHEb{_'3kۥsF8cb>ʐ H5@9"ŋ,M# >S^Do,NyW)Wru&`dBkDl 8`z)'E{SOgLP8qjC"8.ĩ6B?r/qKj`6؟Yst)ٞF橷GֽM<0ˉ^=maPvTz䐍 CiΩhHbkv_ཇ0XA_RwsY32[M|F "=vH3Q~b>r'{ OBg=3Ӯ'&F(I1iC=od83zuA T<߯'+=>D=/3wWjzD0? bDI5GYaMw}iO[tݟ9Tb97GMQ!!|\֬i1r5B]A{h9K|jO8ƔvᏬtbQ!zX(\}_ƪ00|mJTI{\YvMd2 pĺ~3G9w@V#hUm@M)X!k &ee=,y1E,֪&.K0lމK27k#VJpNO/MfGظFk2Tڌ{[cJsÖ́RI@^^ !"Ih rj*[Dp@⠗5PàiP ,TOߒ}R_voۙ!p`wȪ 8I %2$@_`2ƹP5ӣo?VIjcH,c62nk]~|F?OGSAۻ.ԙ:~<ϵ}E95pqj.o6B. EkG 1_oyE (^ŘZA3b2RTxZ**Uhl~vl:Uvfau׆-Og&$<,wǪl4?cs" uL1FDdNcЀu:aQ!YM04A;^m븋W`/nUU}=+R>4t;,8u\dN6{QhNX>YQ鬔ηo^}N}Lp3qkf) ;IDdU=\w3EV"ZPZJ =X c\Ocsu9ō[SklB(bFi\Cͱb,a@uQ.X% P# EAnLbQԟJA 9cODx (D O1b\HIWLP?Ξ2Ͱ06B@P?jg *'4-"\XCHjd"kgvNM`v[fB,?X"i'1"!ǷlЇH 2{,1??A1 &+{{wNZnFu.߽m%>cos9|hRA@Agb {~i4?ݹ(Q{Gh8͕+]G3ClXW@|э`*;Eu<Ɛ{BO%KX{΋ӏh%oZ~w/pXwpy~6?7Z[)a hf $4+ 2Fb[ISH?|jӜW18*fBjXinI;ʱTBAso[T8N.z;&bUT &鼘-%#y|Vu<@C pa*F u2b/jjhZ=݅NJVEJStN[mκ%~9#c( 5#bH99.F G͈WMݔ2~Sܨz"loF_2p=_:SO ,t`=-˥,I]Kz~\k{Efsưoy˔|[H}"㈉4goFZb ϧ|$c@^ts;;5rĊʗ"$fucX=ئRM{%LD C`KDYD{ϱ{C럻UFp\M()i[MIϩMԸϵUkrnY3F$uJy4뇰Lv!Kb R4WӵnqUA$-=o׵"zmYeah| adnjֿH}7@k35׮c1徖1N5$-B1Mf'j~KJ%\iV٢tL2n:M%kHq uzȒy1V %Zdf -aOcoc}}s%l]N[.Y[$.剉% 8nwГSުm7_S Zu [,}j p9# = ̟p`!#ܓ[R2DkUqCy[tJ+L"Q nk}9:Oxbિq+oS,yEQN};O_v{jM`0 $hhb=N>Z SUx)[$ `H F1dR .c |T4pᲪ+kP5ںmqr"|S.].iZ$qiК"Fd;TG&9q9-8OIPeB3քX0H$ ;%r*o+It<9cZ Pb3^9mG[L?*+߳tB}3ܯ4#~Z&G/^ *}siVc\Gsx&^1Wpsڬf7{?Jgy/Ώ.CE[otӇ!?F%xRBvs߫_ Iæ!Oq+0hjǕo%7W(>jU63w/a ! CC&yx W*EUJ3;pz.uMdTCH4C"8VIn!_!,aB7`a5A麕1O9N#Rlh> !Wq'R*$N*kP4sɵYmv4ƍ8ytI^wk)gmLJo1\=-n[Fp d kt>sݥ(IynMh,A& wsJ$coJx$C};!O$5 BX9m~w,MϰI.4'O&x(c'ś#/ǹ'r }6fGq k9*QI6YN*¹<·mr\F\ߔphj8;ooZY5~W:?R$1eNQ^nk2(JheiknhNlH8xb`~s̎4HND>yyx6qIaRV#o{SMHtggn#ā+wZ_'9!u84_aeW{S4Z42sZ .DJ Ѳ|_#Gk$Qع~h9&[/sr7>:x0vknI,/<.V6͟ǩ'̗'.t1t(5/a՗Ky%p_]:2l WNU:NK2Zd*"AOGe6 w8Ӕ, _73G^o"$y.o#]=L[8=]/2m:jC}zJ(H@[[py{8IjjNL%C $`of}D DGie`'PCBh.xc  &T/qg1K~tM!|M˅~D}ܫ9Խ]nLiW72Rݬ1K3=?6ܚP|QV(jºjwHիly!~dbRI(̠*|H"/~CӲ܃T&;=U,1a\{kvMhɎׯh}R{ | Ҋ0PN2G/mPɃ6 FXPIi(i7kT+Q|YkX~YX{ԿNʞPWI'G }=ssϭ·)IZ_YOFOɮWyn_}U >C3"Ɗla8P,krw65L z Yq<sIQ}?IdbͶZiTc;l8+>faI ɣO~?q~sq! ܔBm Pp MUv z>w| <9h4ǟӱc@/Cyۥ.C ! phŲ5p--wZ;>˂#ߥRQPneQDZ'{eP@M?NaPo /‹-Zyc$V3Vكk=QzAU Pb5lIf+}xp_W9Tw&TS3?>MЙfަo%򉢒4ܓ Ov@OuaD3Ⱦ PVl!>%ۿěU[[bqFGcsSɗ/erooS+A"q4jMPMx/!a«zcZ1~ӹ纚*Wff淕>^䑰mΚq,M Y\y˥f8ǝP/u a m襔C-CutKχ3fUEtө|#}Zot[ίBM1Ϧܷ#v[whw.ĽVMz-Z%Fk9ң\o:-JHl/T_ ;-ܞ2=4