í«îÛ    samba-dcerpc-4.19.8+git.404.38b26805d4-150600.3.12.2                                Ž­è         <   >     ,     è            ê          ì         =(‰ g¦.Šp¯ž9Û|‚«Ã Ë¸G) ç§†²¤v0tñéž¤®Ð@°ÛJ¯‘Ö^Åé8h±wN± ¤‚£ÔbƒÚ8|R­LºjEâÿéY¤¥sœiÿ+BÛÚá.{ƒò¿ü;@”Ø´ý¶”Áplí=±´Qt¶ÎÜpÈ2Ú^íÐ_.9®ºdnJ‘æê @ÊAêSÇ®ë|là¢eV¦çF¼—å2ÔVÚoÆ'yI‘–ËR¡Ä½²VT%ôÝ°Ñë)*|Xh¡‘ÿ¢‘è#…Ü½‘€¿f»^}ìMþ'¹ƒ^J±‚\)u¹ÆA %‚>¥v_0bM%£iñ[’Ž¡$†t)Jtºh$fÐðãOgwâNùt>nM «Ñ½   >   ÿÿÿÀ       Ž­è       > éà   ?    éÐ      d            è           é           ê      )     ì   	   7     í   	   U     î      œ     ï            ñ      ¬     ò      °     ó      É     ö      ê     ÷      û     ø   	       ü           ý     7     þ     =          D   	       h   	  	     z   	  
     Œ   	       °   	       ù   	          	       (   	       U   	       ‚          ¸   	       Ü                     @          #|     (     $$     8     $,  %  9     (À  %  :     <?  %  F    Öõ     G    ×   	  H    ×0   	  I    ×T   	  X    ×`     Y    ×h     \    ×¸   	  ]    ×Ü   	  ^    ØR     b    Øy     c    Ù"     d    Ù¢     e    Ù§     f    Ùª     l    Ù¬     u    ÙÀ   	  v    Ùä   	  w    à°   	  x    àÔ   	  y    àø    z    ép     “    é€     Æ    é„     ä    éŠ     å    éÌ   C samba-dcerpc 4.19.8+git.404.38b26805d4 150600.3.12.2 Samba dcerpc service binaries This packages contains the binaries for the DCE/RPC endpoint servers.  g¦.Šh03-ch2b     *íÛSUSE Linux Enterprise 15 SUSE LLC <https://www.suse.com/> GPL-3.0-or-later https://www.suse.com/ System/Daemons https://www.samba.org/ linux x86_64  Ï0  ˆø ð © )0 žp 8ø Èð  
#íííííííí¤                  g¦.rg¦.rg¦.rg¦.rg¦.rg¦.rg¦.rg¦.rg¦.05b2e312913741e83c747e3a65e3288980d0737f314f8ce07d2a124711f0bcf7b 9b0a2016c878dfaa2e94903ad4f02b6d32f62711a24601a79be621143375b842 58e4ecc16cd69965dd46cd4178873cf7836f7e4d3e25ee5905cb3830bda983a7 f353f96363cdb31275d762fec593c28cd307123e5bf8344fb7e8303df78f9c7c a06e81d53562446df234e299bccaf16dc8dd78741a01f6a7b5757286d7a842dc 32af64b700e43c1128538a15f35f45787afa05bd766c2511073de46cd436d66c b9270a3f0aad32517c203f6b074ad25fc334cde5116ae1a72eae21938168fd91 8b33f85e2016eab1b1514e0f53b424691a619424486d5078935d662a8e9f8037 8159eea759f1f4c3d6ec932584342b8cb049f4b1b2ef6ee4dee777578ae4885c                                               root root root root root root root root root root root root root root root root root root samba-4.19.8+git.404.38b26805d4-150600.3.12.2.src.rpm ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿsamba-dcerpc samba-dcerpc(x86-64)     @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   
  
  
  
libCHARSET3-samba4.so()(64bit) libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libREG-FULL-samba4.so()(64bit) libREG-FULL-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libRPC-SERVER-LOOP-samba4.so()(64bit) libRPC-SERVER-LOOP-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libRPC-WORKER-samba4.so()(64bit) libRPC-WORKER-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libads-samba4.so()(64bit) libads-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libauth-samba4.so()(64bit) libauth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcli-smb-common-samba4.so()(64bit) libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libcli-spoolss-samba4.so()(64bit) libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libcliauth-samba4.so()(64bit) libcliauth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libcmdline-samba4.so()(64bit) libcmdline-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libcommon-auth-samba4.so()(64bit) libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libcups.so.2()(64bit) libdbwrap-samba4.so()(64bit) libdbwrap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libdcerpc-binding.so.0()(64bit) libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit) libdcerpc-samba-samba4.so()(64bit) libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libdcerpc-server-core.so.0()(64bit) libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit) libgenrand-samba4.so()(64bit) libgenrand-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libgnutls.so.30()(64bit) libgnutls.so.30(GNUTLS_3_4)(64bit) libgnutls.so.30(GNUTLS_3_6_13)(64bit) libgnutls.so.30(GNUTLS_3_6_3)(64bit) libgse-samba4.so()(64bit) libgse-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libldap_r-2.4.so.2()(64bit) liblibcli-lsa3-samba4.so()(64bit) liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) liblibcli-netlogon3-samba4.so()(64bit) liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) liblibsmb-samba4.so()(64bit) liblibsmb-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libmsrpc3-samba4.so()(64bit) libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libndr-samba-samba4.so()(64bit) libndr-samba-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libndr-samba4.so()(64bit) libndr-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libndr-standard.so.0()(64bit) libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit) libndr.so.3()(64bit) libndr.so.3(NDR_0.0.1)(64bit) libndr.so.3(NDR_0.0.3)(64bit) libndr.so.3(NDR_0.0.7)(64bit) libndr.so.3(NDR_0.2.0)(64bit) libndr.so.3(NDR_1.0.0)(64bit) libndr.so.3(NDR_1.0.2)(64bit) libndr.so.3(NDR_2.0.0)(64bit) libnetapi.so.1()(64bit) libnetapi.so.1(NETAPI_1.0.0)(64bit) libnpa-tstream-samba4.so()(64bit) libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libpopt.so.0()(64bit) libpopt.so.0(LIBPOPT_0)(64bit) libprinting-migrate-samba4.so()(64bit) libprinting-migrate-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libreplace-samba4.so()(64bit) libreplace-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsamba-credentials.so.1()(64bit) libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit) libsamba-debug-samba4.so()(64bit) libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsamba-errors.so.1()(64bit) libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit) libsamba-hostconfig.so.0()(64bit) libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit) libsamba-passdb.so.0()(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit) libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit) libsamba-security-samba4.so()(64bit) libsamba-security-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsamba-sockets-samba4.so()(64bit) libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsamba-util.so.0()(64bit) libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit) libsamba3-util-samba4.so()(64bit) libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsamdb.so.0()(64bit) libsamdb.so.0(SAMDB_0.0.1)(64bit) libsecrets3-samba4.so()(64bit) libsecrets3-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsmbconf.so.0()(64bit) libsmbconf.so.0(SMBCONF_0.0.1)(64bit) libsmbd-base-samba4.so()(64bit) libsmbd-base-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsmbd-shim-samba4.so()(64bit) libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsocket-blocking-samba4.so()(64bit) libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsys-rw-samba4.so()(64bit) libsys-rw-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libsystemd.so.0()(64bit) libsystemd.so.0(LIBSYSTEMD_209)(64bit) libsystemd.so.0(LIBSYSTEMD_254)(64bit) libtalloc.so.2()(64bit) libtalloc.so.2(TALLOC_2.0.2)(64bit) libtdb-wrap-samba4.so()(64bit) libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libtdb.so.1()(64bit) libtdb.so.1(TDB_1.2.1)(64bit) libtdb.so.1(TDB_1.2.2)(64bit) libtevent-util.so.0()(64bit) libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit) libtevent.so.0()(64bit) libtevent.so.0(TEVENT_0.15.0)(64bit) libtevent.so.0(TEVENT_0.9.12)(64bit) libtevent.so.0(TEVENT_0.9.9)(64bit) libtime-basic-samba4.so()(64bit) libtime-basic-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libutil-reg-samba4.so()(64bit) libutil-reg-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libutil-tdb-samba4.so()(64bit) libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.404.38B26805D4150600.3.12.2SUSE_OS15.0_X86_64_SAMBA4)(64bit) libwbclient.so.0()(64bit) libwbclient.so.0(WBCLIENT_0.9)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz)                                                                                                                                             3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3  g£RÀgRç@gMÀgp@fÙ@f«xÀftÀeÔ”@ež†Àe5@ed„Àe6`@e-%Àe'ßÀe%<ÀeÇÀdÚ@dÒ.@dÈóÀdµ-@d¯ç@d¦¬ÀdŠý@d6@dâ@d	Ê@cÎvÀcÎvÀc¿ö@c¢õ@c›@cˆ—@c„¢ÀctÐÀc5ˆÀcM@büØ@bÐ@bÈ@b°a@b‚<Àb{¥@bkÓ@bi0@bi0@bT@b0Àb%óÀb!ÿ@b!Àb
D@b	Àa÷Ï@añ7Àaê @aæ«Àaà@a³A@a–@@a‹´@afÊ@aU¦ÀaTU@aLl@aHwÀa9÷@a¤À`vÙ@`aÁ@`<×@`@_éÈÀ_ÙöÀ_²iÀ_£é@_|\@_{
À_lŠ@_iç@_d¡@_ÁÀ_ž@^ýÌ@^ÔíÀ^½2À^½2À^°À^ 1À^ŽÀ^Y À^J€@^2Å@^&çÀ^&çÀ]ü·À]ïˆÀ]äüÀ]¸)À]®ï@]©©@]˜…À]Œ¨@]nUÀ]nUÀ]iÀ]e@]_Õ@]J½@]BÔ@]
#À]:À\Ú­À\ÒÄÀ\·@\·@\³ À\£NÀ\›eÀ\›eÀ\}@\oä@\\À\\À\4À\	@[ÿÔÀ[þƒ@[ò¥À[ä%@[Öö@[Ï@[ÀŒÀ[«tÀ[ª#@[¨ÑÀ[šQ@[šQ@[–\À[†ŠÀ[ƒçÀ[{þÀ[z­@[rÄ@[@À[WÀZãÀZÍøÀZ¸àÀZ³šÀZ³šÀZª`@Z§½@Z§½@Z“öÀZ@ZÀZ}@Z'ÛÀZ¡@ZOÀZþ@Z,@Z @YíÙÀYÌä@Yºo@Yºo@Yºo@Y§ú@Y”3ÀY‰§ÀYuá@Yg`ÀYf@Y7êÀY7êÀY,@Y"ÒÀXÿ:@Xÿ:@XõÿÀXësÀXç@Xâ9@XÜó@XÜó@XÒg@XÉ,ÀXÆ‰ÀX«@XœYÀX˜e@X‰äÀXˆ“@X…ð@X€ª@XWËÀXAb@X-›ÀWéÀWâv@Wá$ÀWÙ;ÀWÅu@WÄ#ÀW±®ÀW¯ÀW­º@W~D@Wj}ÀW_ñÀWYZ@WYZ@W=ªÀW(’ÀW!û@WîÀW@Vñ3ÀVñ3ÀVÜÀVØ'@VÕ„@VÕ„@VÎìÀVÌIÀVÊø@VÄ`ÀVÀl@V½É@V˜ß@V–<@V–<@V“™@VjºÀV]‹ÀVIÅ@VG"@VG"@VG"@VG"@V(ÏÀV'~@V æÀV7@VBÀUùYÀUòÂ@Uð@UîÍÀUäAÀUÄÀU¨î@U¤ùÀU™@U–y@U€ÀUràÀUq@UhTÀU_@US<ÀUJ@U/¤@U/¤@U&iÀUŒ@UÀU	hÀU@TøE@Tòÿ@TìgÀTìgÀTÀæ@TÀæ@T¾C@T¼ñÀT¼ñÀTµÀTµÀT«Î@T…’ÀTž@T€LÀT}©ÀTxcÀT[bÀTZ@TR(@TO…@TKÀT>aÀscabrero@suse.de nopower@suse.com nopower@suse.com nopower@suse.com ddiss@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com dmulder@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com scabrero@suse.de dmulder@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com ddiss@suse.com nopower@suse.com dmulder@suse.com dmulder@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de dimstar@opensuse.org scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com nopower@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de nopower@suse.com scabrero@suse.de ddiss@suse.com ddiss@suse.com ddiss@suse.com scabrero@suse.de scabrero@suse.de dmulder@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de dmulder@suse.com scabrero@suse.de scabrero@suse.de nopower@suse.com nopower@suse.com nopower@suse.com dmulder@suse.com scabrero@suse.de nopower@suse.com ddiss@suse.com nopower@suse.com nopower@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com jmcdonough@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com ddiss@suse.com ddiss@suse.com nopower@suse.com nopower@suse.com ddiss@suse.com nopower@suse.com dmulder@suse.com dmulder@suse.com ddiss@suse.com scabrero@suse.de dmulder@suse.com ddiss@suse.com nopower@suse.com jengelh@inai.de dmulder@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com dmulder@suse.com dmulder@suse.com jmcdonough@suse.com dmulder@suse.com scabrero@suse.de dmulder@suse.com scabrero@suse.de dmulder@suse.com dmulder@suse.com vcizek@suse.com dmulder@suse.com dmulder@suse.com nopower@suse.com scabrero@suse.de jmcdonough@suse.com scabrero@suse.de aaptel@suse.com jengelh@inai.de dimstar@opensuse.org dmulder@suse.com jmcdonough@suse.com david.mulder@suse.com jmcdonough@suse.com aaptel@suse.com dmulder@suse.com scabrero@suse.com scabrero@suse.com kukuk@suse.de david.mulder@suse.com scabrero@suse.com rbrown@suse.com dmulder@suse.com scabrero@suse.com dimstar@opensuse.org scabrero@suse.com aaptel@suse.com nopower@suse.com nopower@suse.com aaptel@suse.com ddiss@suse.com dmulder@suse.com ddiss@suse.com dmulder@suse.com ddiss@suse.com ddiss@suse.com nopower@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com dmulder@suse.com nopower@suse.com jmcdonough@suse.com aaptel@suse.com kukuk@suse.com kukuk@suse.de nopower@suse.com aaptel@suse.com dmulder@suse.com ddiss@suse.com dmulder@suse.com ddiss@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com jmcdonough@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com ddiss@suse.com jmcdonough@suse.com ddiss@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com nopower@suse.com lmuelle@suse.com lmuelle@suse.com jmcdonough@suse.com nopower@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com nopower@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com tchvatal@suse.com lmuelle@suse.com nopower@suse.com crrodriguez@opensuse.org lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com noel.power@suse.com ddiss@suse.com ddiss@suse.com lmuelle@suse.com ddiss@suse.com lmuelle@suse.com lmuelle@suse.com nopower@suse.com ddiss@suse.com ddiss@suse.com lmuelle@suse.com lmuelle@suse.com ddiss@suse.com lmuelle@suse.com mpluskal@suse.com lmuelle@suse.com nopower@suse.de ddiss@suse.com ddiss@suse.com ddiss@suse.com lmuelle@suse.de nopower@suse.de lmuelle@suse.com nopower@suse.de ddiss@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com - Fix crossing automounter mount points; (bsc#1215212);
  (bsc#1236803); - Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880). - Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700). -  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414). - Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677); - Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732); - Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580). - Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555). - Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431). - Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547). - Update to 4.19.3
  * sid_strings test broken by unix epoch > 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513). - packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519). - Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477). - use systemd-logind rather than utmp for y2038 safety;
  (bsc#1216159). - CVE-2023-4091: samba: Client can truncate file with read-only
  permissions; (bsc#1215904); (bso#15439).
- CVE-2023-42669: samba: rpcecho, enabled and running in AD DC,
  allows blocking sleep on request; (bso#1215905); (bso#15474).
- CVE-2023-42670: samba:  The procedure number is out of range
  when starting Active Directory Users and Computers;
  (bsc#1215906); (bso#15473).
- CVE-2023-3961: samba: Unsanitized client pipe name passed to
  local_np_connect(); (bsc#1215907); (bso#15422).
- CVE-2023-4154: samba: dirsync allows SYSTEM access with only
  "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES;
  (bsc#1215908); (bso#15424). - Update to 4.19.0
  * File doesn't show when user doesn't have permission if
    aio_pthread is loaded; (bso#15453).
  * ctdb_killtcp fails to work with --enable-pcap and libpcap â‰¥
    1.9.1; (bso#15451).
  * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can
    log to syslog; (bso#15460).
  * â€˜samba-tool domain level raiseâ€™ fails unless given a URL;
    (bso#15458).
  * reply_sesssetup_and_X() can dereference uninitialized tmp
    pointer; (bso#15420).
  * missing return in reply_exit_done(); (bso#15430).
  * TREE_CONNECT without SETUP causes smbd to use uninitialized
    pointer; (bso#15432).
  * Avoid infinite loop in initial user sync with Azure AD
    Connect when synchronising a large Samba AD domain;
    (bso#15401).
  * Samba replication logs show (null) DN; (bso#15407).
  * 2-3min delays at reconnect with
    smb2_validate_sequence_number: bad message_id 2; (bso#15346).
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed;
    (bso#15446).
  * CID 1539212 causes real issue when output contains only
    newlines; (bso#15438).
  * KDC encodes INT64 claims incorrectly; (bso#15452).
  * mdssvc: Do an early talloc_free() in _mdssvc_open();
    (bso#15449).
  * Windows client join fails if a second container CN=System
    exists somewhere; (bso#9959).
  * regression DFS not working with widelinks = true;
    (bso#15435).
  * Heimdal fails to build on 32-bit FreeBSD; (bso#15443).
  * samba-tool ntacl get segfault if aio_pthread appended;
    (bso#15441).
- Update to 4.18.6
  * reply_sesssetup_and_X() can dereference uninitialized tmp pointer;
    (bso#15420);
  * Missing return in reply_exit_done(); (bso#15430);
  * post-exec password redaction for samba-tool is more reliable for fully
    random passwords as it no longer uses regular expressions containing the
    password value itself; (bso#15289);
  * Windows client join fails if a second container CN=System exists somewhere;
    (bso#9959);
  * Spotlight sometimes returns no results on latest macOS; (bso#15342);
  * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to
    remove the destination; (bso#15417);
  * Spotlight results return wrong date in result list; (bso#15427);
  * "net offlinejoin provision" does not work as non-root user; (bso#15414);
  * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400);
  * cm_prepare_connection() calls close(fd) for the second time; (bso#15433);
  * 2-3min delays at reconnect with smb2_validate_sequence_number: bad
    message_id 2; (bso#15346);
  * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441);
  * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446);
  * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559
    mitigation); (bso#15390);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449);
- Update to 4.18.5
  * CVE-2022-2127: lm_resp_len not checked properly in
    winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
  * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
    Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
  * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
    Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
  * CVE-2023-34968: Spotlight server-side Share Path Disclosure;
    (bso#15388); (bsc#1213171).
  * CVE-2023-3347: Samba doesn't require SMB2+ signing if
    `server signing = mandatory` is set; (bso#15397); (bsc#1213170).
  * secure channel faulty since Windows 10/11 update 07/2023;
    (bso#15418); (bsc#1213384).
- Update to 4.18.4
  * Backport --pidl-developer fixes; (bso#15404).
  * Named crashes on DLZ zone update; (bso#14030).
  * smbcacls and smbcquotas do not check // before the server;
    (bso#2312).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * smbd returns NOT_FOUND when creating files on a r/o
    filesystem; (bso#15402).
  * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry
    and causes test timeouts; (bso#15355).
  * net ads lookup (with unspecified realm) fails; (bso#15384).
  * Register Samba processes with GPFS; (bso#15381).
  * Python tarfile extraction needs change to avoid a warning
    (CVE-2007-4559 mitigation); (bso#15390).
  * The winbind child segfaults when listing users with `winbind
    scan trusted domains = yes`; (bso#15398).
  * Remove comments about deprecated 'write cache size';
    (bso#15383).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).
- Update to 4.18.3
  * Symlinks to files can have random DOS mode information in a
    directory listing; (bso#15375).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * wbinfo -u fails on ad dc with >1000 users; (bso#15366).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * a lot of messages: get_static_share_mode_data:
    get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND;
    (bso#15362).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360).
  * "samba-tool domain provision" does not run interactive mode
    if no arguments are given; (bso#15363).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).
- Update to 4.18.2
  * Log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Tests use depricated and removed methods like
    assertRegexpMatches; (bso#15343).
- Update to 4.18.1
  * CVE-2023-0225: AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users.
    (bso#15276);(bsc#1209483).
  * CVE-2023-0614: Access controlled AD LDAP attributes can be
    discovered  (bso#15270); (bsc#1209485).
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends
    passwords in cleartext(bso#15315);(bsc#1209481).
  * ldb wildcard matching makes excessive allocations;
    (bso#15331).
  * large_ldap test is inefficient; (bso#15332).
- Update to 4.18.0
  * SMB server performance improvements
  * More succinct samba-tool error messages
  * Color output with samba-tool --color
    The NO_COLOR environment variable will disable colour output
  * New samba-tool dsacl subcommand for deleting ACEs
  * New wbinfo option --change-secret-at
  * Net option to change the NT ACL default location
  * Azure AD / Office365 synchronization improvements - Fix DFS not working with widelinks enabled; (bsc#1213607);
  (bso#15435); - Move libcluster-samba4.so from samba-libs to samba-client-libs;
  (bsc#1213940); - net ads lookup with unspecified realm fails; (bso#15384);
  (bsc#1213826); - secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384). - CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170). - Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403). - Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with >1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281). - Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck. - Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck. - Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414). - libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally. - Clean up logic for PAM migration settings in spec file. - Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in >= SLE15-SP5;
  (jsc#PED-1122). - Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists - Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps > year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection->connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp->base_fsp->fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del & deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847); - Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689); - Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254) - Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection->connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    <sys/mount.h> in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493). - CVE-2022-1615: Do not ignore errors in random number generation;
  (bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
  (bso#14833); (bsc#1202803); - Fix Use after free when iterating
  smbd_server_connection->connections after tree disconnect
  failure; (bso#15128); (bsc#1200102). - CVE-2022-32746: samba: Use-after-free occurring in database
  audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
  process with an LDAP add or modify request; (bso#15008);
  (bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
  restrictions associated with changing passwords; (bso#15047);
  (bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
  SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
  (bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
  requests for any user; (bso#15074); (bso#15047); (bsc#1201493). - Update to 4.15.8
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * Setting fruit:resource = stream in vfs_fruit causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work; (bso#15076);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * netgroups support removed; (bso#15087); (bsc#1199247);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674); (bsc#1199734);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient commands del & deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979); - Fix  smbclient commands del & deltree failing with
  NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
  (bsc#1200556). - Revert NIS support removal; (bsc#1199247); - Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362); - Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255); - Update to 4.15.7
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written
    to; (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES
    in SMBC_server_internal; (bso#14983);
  * Simple bind doesn't work against an RODC (with non-preloaded users);
    (bso#13879);
  * Crash of winbind on RODC; (bso#14641);
  * uncached logon on RODC always fails once; (bso#14865);
  * KVNO off by 100000; (bso#14951);
  * LDAP simple binds should honour "old password allowed period";
    (bso#15001);
  * wbinfo -a doesn't work reliable with upn names; (bso#15003);
  * Simple bind doesn't work against an RODC (with non-preloaded
    users); (bso#13879);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * Regression: create krb5 conf = yes doesn't work with a single KDC;
    (bso#15016); - Add provides to samba-client-libs package to fix upgrades from
  previous versions; (bsc#1197995); - Add missing samba-libs requirement to samba-winbind package;
  (bsc#1198255); - Update to 4.15.6
  * Renaming file on DFS root fails with
    NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169);
  * Samba does not response STATUS_INVALID_PARAMETER when opening 2
    objects with same lease key; (bso#14737);
  * NT error code is not set when overwriting a file during rename
    in libsmbclient; (bso#14938);
  * Fix ldap simple bind with TLS auditing; (bso#14996);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * pam_winbind will not allow gdm login if password about to
    expire; (bso#8691);
  * virusfilter_vfs_openat: Not scanned: Directory or special file;
    (bso#14971);
  * DFS fix for AIX broken; (bso#13631);
  * Solaris and AIX acl modules: wrong function arguments;
    (bso#14974);
  * Function aixacl_sys_acl_get_file not declared / coredump;
    (bso#7239);
  * Regression: Samba 4.15.2 on macOS segfaults intermittently
    during strcpy in tdbsam_getsampwnam; (bso#14900);
  * Fix a use-after-free in SMB1 server; (bso#14989);
  * smb2_signing_decrypt_pdu() may not decrypt with
    gnutls_aead_cipher_decrypt() from gnutls before 3.5.2;
    (bso#14968);
  * Changing the machine password against an RODC likely destroys
    the domain join; (bso#14984);
  * authsam_make_user_info_dc() steals memory from its struct
    ldb_message *msg argument; (bso#14993);
  * Use Heimdal 8.0 (pre) rather than an earlier snapshot;
    (bso#14995);
  * Samba autorid fails to map AD users if id rangesize fits in the
    id range only once; (bso#14967); - Fix mismatched version of libldb2; (bsc#1196788).
- Drop obsolete SuSEfirewall2 service files. - Drop obsolete Samba fsrvp v0->v1 state upgrade functionality;
  (bsc#1080338). - Fix ntlm authentications with "winbind use default domain = yes";
  (bso#13126); (bsc#1173429); (bsc#1196308). - Fix samba-ad-dc status warning notification message by disabling
  systemd notifications in bgqd; (bsc#1195896); (bso#14947). - libldb version mismatch in Samba dsdb component; (bsc#1118508); - Update to 4.15.5
  * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the
    outside target of a symlink exists; (bso#14911);
    (bsc#1193690).
  * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
    module; (bso#14914); (bsc#1194859).
  * CVE-2022-0336:  Re-adding an SPN skips subsequent SPN
    conflict checks; bso#14950); (bsc#1195048). - CVE-2021-44141: Information leak via symlinks of existance of
  files or directories outside of the exported share; (bso#14911);
  (bsc#1193690);
- CVE-2021-44142: Out-of-bounds heap read/write vulnerability
  in VFS module vfs_fruit allows code execution; (bso#14914);
  (bsc#1194859);
- CVE-2022-0336: Samba AD users with permission to write to an
  account can impersonate arbitrary services; (bso#14950);
  (bsc#1195048); - Update to 4.15.4
  * Duplicate SMB file_ids leading to Windows client cache
    poisoning; (bso#14928);
  * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error -
    NT_STATUS_BUFFER_TOO_SMALL; (bso#14932);
  * kill_tcp_connections does not work; (bso#14934);
  * Can't connect to Windows shares not requiring authentication
    using KDE/Gnome; (bso#14935);
  * smbclient -L doesn't set "client max protocol" to NT1 before
    calling the "Reconnecting with SMB1 for workgroup listing"
    path; (bso#14939);
  * Cross device copy of the crossrename module always fails;
    (bso#14940);
  * symlinkat function from VFS cap module always fails with an
    error; (bso#14941);
  * Fix possible fsp pointer deference; (bso#14942);
  * Missing pop_sec_ctx() in error path inside close_directory();
    (bso#14944);
  * "smbd --build-options" no longer works without an smb.conf file;
    (bso#14945); - Use pkgconfig(krb5) as dependency for the -devel package: allow
  OBS to pick the right flavor of krb5-devel (full vs mini).
- Do not require the 'krb5' symbol by samba-client-libs: this
  package has an automatic dependency due to linkage on
  libgssapi_krb5.so.2. Automatic deps are always better.
- Do not require the 'krb5' symbol from samba-libs: samba-libs
  requires samba-client-libs, which in turn requires krb5
  libraries. Samba-libs itself has no need for krb5 (but get it
  indirectly anyway). - Reorganize libs packages. Split samba-libs into samba-client-libs,
  samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba
  public libraries depending on internal samba libraries into these
  packages as there were dependency problems everytime one of these
  public libraries changed its version (bsc#1192684). The devel
  packages are merged into samba-devel.
- Rename package samba-core-devel to samba-devel
- Add python-rpm-macros to build requirements
- Update the symlink create by samba-dsdb-modules to private samba
  ldb modules following libldb2 changes from /usr/lib64/ldb/samba to
  /usr/lib64/ldb2/modules/ldb/samba - Update to 4.15.3
  * Recursive directory delete with veto files is broken in 4.15.0;
    (bso#14878);
  * A directory containing dangling symlinks cannot be deleted by
    SMB2 alone when they are the only entry in the directory;
    (bso#14879);
  * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used
    uninitialized in rmdir_internals(); (bso#14892);
  * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694);
  * The CVE-2020-25717 username map [script] advice has undesired
    side effects for the local nt token; (bso#14901); (bsc#1192849);
  * User with multiple spaces (eg Fred<space><space>Nurk) become
    un-deletable; (bso#14902);
  * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127);
  * smbXsrv_client_global record validation leads to crash if existing
    record points at non-existing process; (bso#14882);
  * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call;
    (bso#14890);
  * Samba process doesn't log to logfile; (bso#14897);
  * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata()
    triggers locking.tdb assert; (bso#14907);
  * Kerberos authentication on standalone server in MIT realm broken;
    (bso#14922);
  * Segmentation fault when joining the domain; (bso#14923);
  * Support for ROLE_IPA_DC is incomplete; (bso#14903);
  * rpcclient cannot connect to ncacn_ip_tcp services anymore;
    (bso#14767);
  * winexe crashes since 4.15.0 after popt parsing; (bso#14893);
  * net ads status -P broken in a clustered environment; (bso#14908);
  * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before
    smbd_smb2_ioctl_send; (bso#14788);
  * winbindd doesn't start when "allow trusted domains" is off;
    (bso#14899);
  * smbclient login without password using '-N' fails with
    NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883);
  * A schannel client incorrectly detects a downgrade connecting to
    an AES only server; (bso#14912);
  * Possible null pointer dereference in winbind; (bso#14921);
  * Fix -k legacy option for client tools like smbclient, rpcclient,
    net, etc.; (bso#14846);
  * Add Debian 11 CI bootstrap support; (bso#14872);
  * Crash in recycle_unlink_internal(); (bso#14888); - Fix dependency problem upgrading from libndr0 to libndr2 and
  from libsamba-credentials0 to libsamba-credentials1;
  (bsc#1192684); - Fix regression introduced by CVE-2020-25717 patches, winbindd
  does not start when 'allow trusted domains' is off; (bso#14899);
- Update to 4.15.2
  * CVE-2016-2124:  SMB1 client connections can be downgraded to
    plaintext authentication; (bso#12444); (bsc#1014440);
  * CVE-2020-25717: A user on the domain can become root on domain
    members; (bso#14556); (bsc#1192284);
  * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos
    tickets issued by an RODC; (bso#14558); (bsc#1192246);
  * CVE-2020-25719: Samba AD DC did not always rely on the SID and
    PAC in Kerberos tickets; (bso#14561); (bsc#1192247);
  * CVE-2020-25721: Kerberos acceptors need easy access to stable
    AD identifiers (eg objectSid); (bso#14557); (bsc#1192505);
  * CVE-2020-25722: Samba AD DC did not do suffienct access and
    conformance checking of data stored; (bso#14564);
    (bsc#1192283);
  * CVE-2021-3738: Use after free in Samba AD DC RPC server;
    (bso#14468); (bsc#1192215);
  * CVE-2021-23192: Subsequent DCE/RPC fragment injection
    vulnerability; (bso#14875); (bsc#1192214);
- Update to 4.15.1
  * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682);
  * Log clutter from filename_convert_internal; (bso#14685);
  * MacOSX compilation fixes; (bso#14862);
  * rodc_rwdc test flaps; (bso#14868);
  * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
  bit' S4U2Proxy Constrained Delegation bypass in Samba with
  embedded Heimdal; (bso#14642);
  * Python ldb.msg_diff() memory handling failure; (bso#14836);
  * "in" operator on ldb.Message is case sensitive; (bso#14845);
  * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848);
  * samldb_krbtgtnumber_available() looks for incorrect string;
  (bso#14854);
  * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871);
  * Allow special chars like "@" in samAccountName when generating
  the salt; (bso#14874);
  * Correctly ignore comments in CTDB public addresses file;
  (bso#14826);
  * Fix transit path validation; (bso#12998);
  * Fix that child winbindd logs to log.winbindd instead of
  log.wb-<DOMAIN>; (bso#14852);
  * SMB3 cancel requests should only include the MID together with
  AsyncID when AES-128-GMAC is used; (bso#14855);
  * Prepare to operate with MIT krb5 >= 1.20; (bso#14870);
  * Heimdal prefers RC4 over AES for machine accounts; (bso#14864); - Enable samba-tool without ad dc. -  Adjust spec to use pam macros; (bsc#1191046). - Adjust spec for size
  * allow some Recommends instead Requires to be configured
    for cifs-utils, samba-libs-python3 & samba-gpupdate;
    (bsc#1182847).
  * remove fam, undocumented and unneeded. - Add missing build dependency on bison when building with the
  embedded Heimdal Kerberos - Update to 4.15.0
  * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10
  * VFS layer modernized.
  * Add the ability to set allow/deny lists for zone transfer clients
    in Bind DLZ plugin
  * Server multi-channel support no longer experimental
  * Improved command line user experience, unifying the options in
    different commands
  * Winbindd no longer scans trusted domains on startup and will use
    enterprise principals by default.
  * The net utility is now able to support the offline domain join feature
  * New options for 'samba-tool dns zoneoptions' for aging control
    and to mark old records as static or dynamic
  * DNS tombstones are now deleted as appropriate and use a consistent
    timestamp format
  * The 'samba-tool dns update' command validates and rejects now malformed
    IPv4 and IPv6 addresses
  * The 'samba-tool domain backup' command correctly takes out locks
    against concurrent modification during backup when using the LMDB
    backend
  * TruACL support has been removed
  * NIS support has been removed - Fix 'net rpc' authentication when using the machine account;
  (bsc#1189017); (bso#14796); - Fix dependency problem upgrading from libndr0 to libndr1;
  (bsc#1189875);
- Fix dependency problem upgrading from libsmbldap0 to libsmbldap2;
  (bsc#1189875);
- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);
- Add Certificate Auto Enrollment Policy; (jsc#SLE-18456).
- Update to 4.13.10
  * s3: smbd: Ensure POSIX default ACL is mapped into returned
    Windows ACL for directory handles; (bso#14708);
  * Take a copy to make sure we don't reference free'd memory; (bso#14721);
  * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722);
  * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
    change_file_owner_to_parent() error path; (bso#14736);
  * samba-tool: Give better error information when the
    'domain backup restore' fails with a duplicate SID; (bso#14575);
  * smbd: Correctly initialize close timestamp fields; (bso#14714);
  * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740);
  * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475);
  * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750);
  * smbXsrv_{open,session,tcon}: Protect
    smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752);
  * samba-tool domain backup offline doesn't work against bind DLZ
    backend; (bso#14027);
  * netcmd: Use next_free_rid() function to calculate a SID for
    restoring a backup; (bso#14669);
- Update to 4.13.9
  * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696);
  * Add documentation for dsdb_group_audit and dsdb_group_json_audit
    to "log level", synchronise "log level" in smb.conf with the code; (bso#14689);
  * Fix smbd panic when two clients open same file; (bso#14672);
  * Fix memory leak in the RPC server; (bso#14675);
  * s3: smbd: Fix deferred renames; (bso#14679);
  * s3-iremotewinspool: Set the per-request memory context; (bso#14675);
  * rpc_server3: Fix a memleak for internal pipes; (bso#14675);
  * third_party: Update socket_wrapper to version 1.3.2; (bso#11899);
  * third_party: Update socket_wrapper to version 1.3.3; (bso#14639);
  * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid
    conflict; (bso#14663);
  * Fix the build on OmniOS; (bso#14288);
- Update to 4.13.8
  * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571
- Update to 4.13.7
  * Release with dependency on ldb version 2.2.1. -  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677). - Fix offline domain backup not possible using lmdb version >= 0.9.26;
  (bso#14676);
- Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574);
- Update to 4.13.6
  * CVE-2020-27840: samba: Unauthenticated remote heap corruption
    via bad DNs; (bso#14595); (bsc#1183572).
  * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
    (bso#14655); (bsc#1183574).
- Update to 4.13.5
  * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite
    start-up failure; (bso#14634);
  * s3: libsmb: Add missing cli_tdis() in error path if encryption setup
    failed on temp proxy connection; (bso#13992);
  * smbd: In conn_force_tdis_done() when forcing a connection closed force
    a full reload of services; (bso#14604);
  * dbcheck: Check Deleted Objects and reduce noise in reports about
    expired tombstones (bso#14593);
  * s3: Fix fcntl waf configure check; (bso#14503);
  * s3/auth: Implement "winbind:ignore domains"; (bso#14602);
  * smbd: Use fsp->conn->session_info for the initial delete-on-close
    token; (bso#14617);
  * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path;
    (bso#14648);
  * classicupgrade: Treat old never expires value right; (bso#14624);
  * g_lock: Fix uninitalized variable reads; (bso#14636);
  * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898);
  * lib:util: Avoid free'ing our own pointer; (bso#14625);
  * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505); - Spec file fixes around systemd and requires; (bsc#1182830);
- Align systemd service unit files with upstream provided ones. - Update to 4.13.4
  * Work around special SMB2 IOCTL response behavior of NetApp Ontap
    7.3.7; (bso#14607);
  * Temporary DFS share setup doesn't set case parameters in the same
    way as a regular share definition does; (bso#14612);
  * lib: Avoid declaring zero-length VLAs in various messaging functions;
    (bso#14605);
  * Do not create an empty DB when accessing a sam.ldb; (bso#14579);
  * vfs_fruit may close wrong backend fd; (bso#14596);
  * Temporary DFS share setup doesn't set case parameters in the same way
    as a regular share definition does; (bso#14612);
  * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606);
  * vfs_fruit may close wrong backend fd; (bso#14596);
  * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7;
    (bso#14607);
  * The cache directory for the user gencache should be created recursively;
    (bso#14601);
  * Be more flexible with repository names in CentOS 8 test environments;
    (bso#14594); - Uninstalling samba-client: Failed to disable unit, cifs.service
  does not exists; (bsc#1180388); - Update to 4.13.3
  + libcli: smb2: Never print length if smb2_signing_key_valid() fails for
    crypto blob; (bso#14210);
  + s3: modules: gluster. Fix the error I made in preventing talloc leaks
    from a function; (bso#14486);
  + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL
    via TALLOC_FREE(); (bso#14515);
  + s3: spoolss: Make parameters in call to user_ok_token() match all other
    uses; (bso#14568);
  + s3: smbd: Quiet log messages from usershares for an unknown share;
    (bso#14590);
  + samba process does not honor max log size; (bso#14248);
  + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE;
    (bso#14587);
  + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124);
  + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486);
  + smbclient: Fix recursive mget; (bso#14517);
  + clitar: Use do_list()'s recursion in clitar.c; (bso#14581);
  + manpages/vfs_glusterfs: Mention silent skipping of write-behind
    translator; (bso#14486);
  + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573);
  + interface: Fix if_index is not parsed correctly; (bso#14514); - Update to 4.13.2
  + s3: modules: vfs_glusterfs: Fix leak of char **lines onto
    mem_ctx on return; (bso#14486);
  + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
    (bso#14471);
  + smb.conf.5: Add clarification how configuration changes reflected
    by Samba; (bso#14538);
  + daemons: Report status to systemd even when running in foreground;
    (bso#14552);
  + DNS Resolver: Support both dnspython before and after 2.0.0;
    (bso#14553);
  + s3-vfs_glusterfs: Refuse connection when write-behind xlator is
    present; (bso#14486);
  + provision: Add support for BIND 9.16.x; (bso#14487);
  + ctdb-common: Avoid aliasing errors during code optimization;
    (bso#14537);
  + libndr: Avoid assigning duplicate versions to symbols; (bso#14541);
  + docs: Fix default value of spoolss:architecture; (bso#14522);
  + winbind: Fix a memleak; (bso#14388);
  + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531);
  + docs-xml/manpages: Add warning about write-behind translator for
    vfs_glusterfs; (bso#14486);
  + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h.
  + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530);
  + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547);
  + examples:auth: Do not install example plugin; (bso#14550);
  + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513);
  + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
    (bso#14471); - Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469). - Update to samba 4.13.1
  + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
    easily crafted records; (bsc#1177613); (bso#14472);
  + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
    (bso#14436);
  + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
    (bsc#1173902); (bso#14434);
- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1177355); - Fix vfs_ceph query_directory regression; (bso#14519)
- Drop liburing-devel for SLE15-SP2; (bsc#1177245) - Register CTDB recovery lock holder with ceph-mgr
- Add liburing-devel dependency - Update to samba 4.13.0
  + Require Python 3.6
  + Move wide links functionality into VFS module
  + Deprecate NT4-like 'classic' Samba domain controllers
  + Deprecate SMBv1 only protocol options
  + Remove deprecated "ldap ssl ads" option
  + Unify asynchronous DCE-RPC server; (jsc#SES-645)
  + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655)
  + Drop internal byteorder.h header from util-devel package
  + Remove final code for the AD DC LDAP backend
  + Add AD DC Group Policy Scripts
  + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399)
  + Fix %U substitutions if it contains a domain name; (bso#14467)
  + Fix krb5.conf creation for 'net ads join'; (bso#14479)
  + Fix build problem if libbsd-dev is not installed; (bso#14482)
  + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437)
  + Fix idmap_ad RFC4511 response handling; (bso#14465)
  + Fix panic in get_lease_type(); (bso#14428) - Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425); - Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810); - Fix net command unable to negotiate SMB2; (bsc#1174120); - Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227). - Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307); - Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437); - Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521); - Require libldb2 >= 2.0.10 after security release. - CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850); - Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095). - Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680). - CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680). - Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931). - Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927); - Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856). - Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320). - Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109). -  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109). - Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094); - CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902); - CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289). - Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed - Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128). - Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832). - Update to samba 4.10.8
  + CVE-2019-10197: user escape from share path definition;
    (bso#14035); (bsc#1141267); - Fix build on newer systems by modifying samba.spec to use
  consistent non-relative paths for pammodules in configure line
  and specification of pam_winbind.so library to package. - Update to samba 4.10.7
  + Unable to create or rename file/directory inside shares
    configured with vfs_glusterfs_fuse module; (bso#14010).
  + build: Allow build when '--disable-gnutls' is set; (bso#13844)
  + samba-tool: Add 'import samba.drs_utils' to fsmo.py;
    (bso#13973).
  + Fix 'Error 32 determining PSOs in system' message on old DB
    with FL upgrade; (bso#14008).
  + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021)
  + join: Use a specific attribute order for the DsAddEntry
    nTDSDSA object; (bso#14046).
  + vfs_catia: Pass stat info to synthetic_smb_fname();
    (bso#14015).
  + lookup_name: Allow own domain lookup when flags == 0;
    (bso#14091).
  + s4 librpc rpc pyrpc: Ensure tevent_context deleted last;
    (bso#13932).
  + DEBUGC and DEBUGADDC doesn't print into a class specific log
    file; (bso#13915).
  + Request to keep deprecated option "server schannel",
    VMWare Quickprep requires "auto"; (bso#13949).
  + dbcheck: Fallback to the default tombstoneLifetime of 180 days;
    (bso#13967).
  + dnsProperty fails to decode values from older Windows versions;
    (bso#13969).
  + samba-tool: Use only one LDAP modify for dns partition fsmo
    role transfer; (bso#13973).
  + third_party: Update waf to version 2.0.17; (bso#13960).
  + netcmd: Allow 'drs replicate --local' to create partitions;
    (bso#14051).
  + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017). - CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267). - Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059). - Update samba-winbind script to work with systemd; (bsc#1132739);
- Drop samba dhcpcd hook scripts
- Update to samba 4.10.6
  + s3: winbind: Fix crash when invoking winbind idmap scripts;
    (bso#13956).
  + smbd does not correctly parse arguments passed to dfree and quota
    scripts; (bso#13964).
  + samba-tool dns: use bytes for inet_ntop; (bso#13965).
  + samba-tool domain provision: Fix --interactive module in python3;
    (bso#13828).
  + ldb_kv: Skip @ records early in a search full scan; (bso#13893).
  + docs: Improve documentation of "lanman auth" and "ntlm auth"
    connection; (bso#13981).
  + python/ntacls: Use correct "state directory" smb.conf option instead
    of "state dir"; (bso#14002).
  + registry: Add a missing include; (bso#13840).
  + Fix SMB guest authentication; (bso#13944).
  + AppleDouble conversion breaks Resourceforks; (bso#13958).
  + vfs_fruit makes direct use of syscalls like mmap() and pread();
    (bso#13968).
  + s3:mdssvc: Fix flex compilation error; (bso#13987).
  + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872).
  + dsdb:samdb: schemainfo update with relax control; (bso#13799).
  + s3:util: Move static file_pload() function to lib/util; (bso#13964).
  + smbd: Fix a panic; (bso#13957).
  + ldap server: Generate correct referral schemes; (bso#12478).
  + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value;
    (bso#13941).
  + s4 dsdb: Fix use after free in samldb_rename_search_base_callback;
    (bso#13942).
  + dsdb/repl: we need to replicate the whole schema before we can apply it;
    (bso#12204).
  + ldb: Release ldb 1.5.5; (bso#12478).
  + Schema replication fails if link crosses chunk boundary backwards;
    (bso#13713).
  + 'samba-tool domain schemaupgrade' uses relax control and skips the
    schemaInfo update provision; (bso#13799).
  + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)]
    ..."; (bso#13916).
  + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to
    get the ACL; (bso#13917).
  + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary;
    (bso#13947).
  + Using Kerberos credentials to print using spoolss doesn't work;
    (bso#13939).
  + wafsamba: Use native waf timer; (bso#13998).
  + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984). - Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3)
  + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found
    in DnssrvOperation2; (bso#13922); (bsc#1137815).
  + CVE-2019-12436 dsdb/paged_results: Ignore successful results
    without messages; (bso#13951); (bsc#1137816).
- Update to samba-4.10.4
  + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938).
  + py/provision: Fix for Python 2.6; (bso#13882).
  + netcmd: Fix 'passwordsettings --max-pwd-age' command;
    (bso#13873).
  + s3-libnet_join: 'net ads join' to child domain fails when
    using "-U admin@forestroot"; (bso#13861).
  + vfs_ceph: Explicitly enable libcephfs POSIX ACL support;
    (bso#13896); (bsc#1130245).
  + vfs_ceph: Fix cephwrap_flistxattr() debug message;
    (bso#13940); (bsc#1134697).
  + ctdb-common: Avoid race between fd and signal events;
    (bso#13895).
  + ctdb-common: Fix memory leak in run_proc; (bso#13943).
  + lib: Initialize getline() arguments; (bso#13892).
  + winbind: Fix overlapping id ranges; (bco#13903).
  + lib util debug: Increase format buffer to 4KiB; (bso#13902).
  + nsswitch pam_winbind: Fix Asan use after free; (bso#13927).
  + s4 lib socket: Ensure address string owned by parent struct;
    (bso#13929).
  + s3 rpc_client: Fix Asan stack use after scope; (bso#13936).
  + s3:smbd: Handle IO_REPARSE_TAG_DFS in
    SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097).
  + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344).
  + smb2_sesssetup: avoid STATUS_PENDING responses for session setup;
    (bso#12845).
  + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698).
  + smb2_sesssetup: avoid STATUS_PENDING responses for session
    setup; (bso#13796).
  + dbcheck: Fix the err_empty_attribute() check; (bso#13843).
  + vfs_snapper: Drop unneeded fstat handler; (bso#13858).
  + vfs_default: Fix vfswrap_offload_write_send()
    NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862).
  + smb2_server: Grant all 8192 credits to clients; (bso#13863).
  + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling;
    (bso#13919).
  + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872).
  + s3: modules: ceph: Use current working directory instead of
    share path; (bso#13918); (bsc#1134452).
  + winbind: Use domain name from lsa query for sid_to_name cache
    entry; (bso#13831).
  + memcache: Increase size of default memcache to 512k;
    (bso#13865).
  + docs: Update smbclient manpage for "--max-protocol";
    (bso#13857).
  + s3:utils: If share is NULL in smbcacls, don't print it;
    (bso#13937).
  + s3:smbspool: Fix regression printing with Kerberos credentials;
    (bso#13939).
  + ctdb-scripts: CTDB restarts failed NFS RPC services by hand,
    which is incompatible with systemd; (bso#13860).
  + ctdb-daemon: Revert "We can not assume that just because we
    could complete a TCP handshake"; (bso#13888).
  + ctdb-daemon: Never use 0 as a client ID; (bso#13930).
  + ctdb-common: Fix memory leak; (bso#13943).
  + s3:debug: Enable logging for early startup failures;
    (bso#13904)
- Update to samba-4.10.3
  + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum; (bso#13685); (bsc#1134024). - CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815). - Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183). - Fix vfs_ceph realpath; (bso#13918); (bsc#1134452). - Update to samba-4.10.2:
  + CVE-2019-3870 (World writable files in
    Samba AD DC private/ dir); (bso#13834).
  + CVE-2019-3880 (Save registry file outside share as
    unprivileged user); (bso#13851).
  + py/kcc_utils: py2.6 compatibility; (bso#13837).
  + libcli: permit larger values of DataLength in
    SMB2_ENCRYPTION_CAPABILITIES of negotiate response;
    (bso#13869).
  + regfio: Improve handling of malformed registry hive files;
    (bso#13840).
  + ctdb-version: Simplify version string usage; (bso#13789).
  + lib: Make fd_load work for non-regular files; (bso#13859).
  + dbcheck: in the middle of the tombstone garbage collection
    causes replication failures,
    dbcheck: add --selftest-check-expired-tombstones cmdline
    option; (bso#13816).
  + ndr_spoolss_buf: Fix out of scope use of stack variable in
    NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818).
  + s4/messaging: Fix undefined reference in linking
    libMESSAGING-samba4.so; (bso#13854).
  + acl_read: Fix regression for empty lists; (bso#13836).
  + s4:dlz make b9_has_soa check dc=@ node; (bso#13841).
  + s3:client: Fix printing via smbspool backend with kerberos
    auth; (bso#13832).
  + s4:librpc: Fix installation of Samba; (bso#13847).
  + s3:lib: Fix the debug message for adding cache entries;
    (bso#13848).
  + s3:utils: Add 'smbstatus -L --resolve-uids' to show username;
    (bso#13793).
  + s3:lib: Fix the debug message for adding cache entries;
    (bso#13848).
  + s3:waf: Fix the detection of makdev() macro on Linux;
    (bso#13853).
  * ctdb-build: Drop creation of .distversion in tarball;
    (bso#13789).
  * ctdb-packaging: Test package requires tcpdump, ctdb package
    should not own system library directory;  (bso#13838).
- Update to samba-4.10.1:
  + py/kcc_utils: py2.6 compatibility; (bso#13837);
  + libcli: permit larger values of DataLength in
    SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869);
  + regfio: Improve handling of malformed registry hive files; (bso#13840);
  + ctdb-version: Simplify version string usage; (bso#13789);
  + lib: Make fd_load work for non-regular files; (bso#13859);
  + dbcheck in the middle of the tombstone garbage collection causes
    replication failures, dbcheck: add --selftest-check-expired-tombstones
    cmdline option; (bso#13816);
  + ndr_spoolss_buf: Fix out of scope use of stack variable in
    NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818);
  + s4/messaging: Fix undefined reference in linking
    libMESSAGING-samba4.so; (bso#13854);
  + acl_read: Fix regression for empty lists; (bso#13836);
  + s4:dlz make b9_has_soa check dc=@ node; (bso#13841);
  + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832);
  + s4:librpc: Fix installation of Samba; (bso#13847);
  + s3:lib: Fix the debug message for adding cache entries; (bso#13848);
  + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793);
  + s3:lib: Fix the debug message for adding cache entries; (bso#13848);
  + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853);
  + ctdb-build: Drop creation of .distversion in tarball; (bso#13789);
  + ctdb-packaging: Test package requires tcpdump, ctdb package
    should not own system library directory; (bso#13838);
- Update to samba-4.10.0:
  + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s4/scripting/bin: Open unicode files with utf8 encoding and write
  + unicode string.
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813);
  + passdb: Update ABI to 0.27.2.
  + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813);
  + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823); - MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698) - Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). - CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ). - CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703); - Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol <pid> debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744); - Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153). - Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377); - LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758); - Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223); - Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498). - Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd. - Remove python2 build dependency from samba-libs; (bsc#1116900); - Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path. - Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323); - Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670); - lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373); - winbind requires latest version of libtevent-util0 to start - Backport latest gpo code from master
  + Read policy from local gpt cache
  + Offline policy application
  + Make group policy extensible via register/unregister gpext
  + gpext's run via a process_group_policy method - Enable profiling data collection - Change samba-kdc package name to samba-ad-dc
- Move samba-ad-dc.service to the samba-ad-dc package - Update to samba-4.9.1
  + s3: nmbd: Stop nmbd network announce storm; (bso#13620);
  + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds;
    (bso#13597);
  + CTDB recovery lock has some race conditions; (bso#13617);
  + s3-rpc_client: Advertise Windows 7 client info; (bso#13597);
  + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610); - Tumbleweed doesn't define the sle_version macro, so we must
  include a check for suse_version also. Otherwise python3 is
  disabled on Tumbleweed. - Update to samba-4.9.0
  + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if
    needed; (bso#13605);
  + wafsamba: Fix 'make -j<jobs>'; (bso#13606); - Update to samba-4.9.0rc5
  + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only
    returns absolute pathnames; (bso#13565);
  + s3: util: Do not take over stderr when there is no log file; (bso#13578);
  + Durable Reconnect fails because cookie.allow_reconnect is not
    set; (bso#13549);
  + krb5-samba: Interdomain trust uses different salt principal; (bso#13539);
  + vfs_fruit: Don't unlink the main file; (bso#13441);
  + smbd: Fix a memleak in async search ask sharemode; (bso#13602);
  + Fix Samba GPO issue when Trust is enabled; (bso#11517);
  + samba-tool: Add "virtualKerberosSalt" attribute to
    'user getpassword/syncpasswords'; (bso#13539);
  + Fix CTDB configuration issues; (bso#13589);
  + ctdbd logs an error until it can successfully connect to
    eventd; (bso#13592); - Update to samba-4.9.0rc4
  + s3: smbd: Ensure get_real_filename() copes with empty
    pathnames; (bso#13585);
  + samba domain backup online/rename commands force user to specify
    password on CLI; (bso#13566);
  + wafsamba/samba_abi: Always hide ABI symbols which must be
    local; (bso#13579);
  + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584);
  + Fix memory and resource leaks; (bso#13567);
  + python: Fix print in dns_invalid.py; (bso#13580);
  + Aliasing issue causes incorrect IPv6 checksum; (bso#13588);
  + Fix CTDB configuration issues; (bso#13589);
  + s3: vfs: time_audit: fix handling of token_blob in
    smb_time_audit_offload_read_recv(); (bso#13568); - Add missing zlib-devel dependency which was previously pulled in
  by libopenssl-devel - Update to samba-4.9.0rc3+git.22.3fff23ae36e
  + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against
    returns from malicious servers; (bso#13453);
  + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query
    with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374);
  + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when
    not servicePrincipalName is set on a user; (bso#13552);
  + CVE-2018-10919: acl_read: Fix unauthorized attribute access via
    searches; (bso#13434);
  + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540);
  + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it
    is disabled via "ntlm auth"; (bso#13360);
  + s3-tldap: do not install test_tldap; (bso#13529);
  + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540);
  + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in
    ltdb_index_dn_attr(); (bso#13374);
  + ctdb-eventd: Fix CID 1438155; (bso#13554);
  + Fix CIDs 1438243, (Unchecked return value) 1438244
    (Unsigned compared against 0), 1438245 (Dereference before null check) and
    1438246 (Unchecked return value); (bso#13553);
  + ctdb: Fix a cut&paste error; (bso#13554);
  + systemd: Only start smb when network interfaces are up; (bso#13559);
  + Fix quotas don't work with SMB2; (bso#13553);
  + s3/smbd: Ensure quota code is only called when quota support
    detected; (bso#13563);
  + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204);
  + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561);
  + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562); - Update to samba-4.9.0rc2+git.21.a1069afb007
  + s3: smbd:  Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537);
  + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check();
    (bso#13535);
  + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538);
  + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542);
  + Fix portability issues on freebsd; (bso#13520);
  + DNS wildcard search does not handle multiple labels correctly; (bso#13536);
  + samba-tool domain trust: Fix trust compatibility to Windows
    Server 1709 and FreeIPA; (bso#13308);
  + Fix portability issues on freebsd; (bso#13520);
  + ctdb-protocol: Fix CTDB compilation issues; (bso#13545);
  + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT
    option; (bso#13546);
  + ctdb-doc: Provide an example script for migrating old
    configuration; (bso#13550);
  + ctdb-event: Implement event tool "script list" command; (bso#13551); - Update to samba-4.8.4+git.37.a7a861d7982;
  + CVE-2018-1139:  Weak authentication protocol allowed;
    (bsc#1095048); (bsc#13360);
  + CVE-2018-1140:  Denial of Service Attack on DNS and LDAP server;
    (bsc#1095056); (bso#13466); (bso#13374);
  + CVE-2018-10858: Insufficient input validation on client directory
    listing in libsmbclient; (bsc#1103411); (bso#13453);
  + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server;
    (bsc#1103414); (bso#13552);
  + CVE-2018-10919: Confidential attribute disclosure from the AD
    LDAP server; (bsc#1095057); (bso#13434);
  + s3:winbind: winbind normalize names' doesn't work for users;
    (bso#12851);
  + winbind: Fix UPN handling in canonicalize_username(); (bso#13369);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + samdb: Fix building Samba with gcc 8.1; (bso#13437);
  + s3:utils: Do not segfault on error in DoDNSUpdate();  (bso#13440);
  + smbd: Flush dfree memcache on service reload; (bso#13446);
  + ldb: Save a copy of the index result before calling the
  + lib/util: No Backtrace given by Samba's AD DC by default;
    (bso#13454).
  + s3: smbd: printing: Re-implement delete-on-close semantics for
    print files missing since 3.5.x; (bso#13457).
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474).
  + krb5_wrap: Fix keep_old_entries logic for older Kerberos
    libraries;(bso#13478).
  + krb5_plugin: Add winbind localauth plugin for MIT Kerberos;
    (bso#13480). - Add missing package descriptions; (bsc#1093864);
- Fix dependency issue between samba-python and samba-kdc; (bsc#1062876);
- Call update-apparmor-samba-profile when running samba-ad-dc;
  (bsc#1092099); - Update to 4.8.2
  + After update to 4.8.0 DC failed with "Failed to find our own
    NTDS Settings objectGUID" (bso#13335).
  + fix incorrect reporting of stream dos  attributes on a
    directory (bso#13380).
  + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412).
  + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425)
  + vfs_ceph: Fix memory leak; (bso#13424).
  + libsmbclient: Fix hard-coded connection error return of
    ETIMEDOUT; (bso#13419).
  + s4-lsa: Fix use-after-free in LSA server; (bso#13420).
  + winbindd: Do re-connect if the RPC call fails in the passdb
    case; (bso#13430).
  + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416).
  + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd
    unclean process shutdown; (bso#13414).
  + ctdb-client: Remove ununsed functions from old client code;
    (bso#13411).
  + printing: Return the same error code as windows does on upload
    failures; (bso#13395).
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the
    privileged pipe is not accessable; (bso#13400).
  + s4:lsa_lookup: remove TALLOC_FREE(state) after all
    dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420).
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407).
  + s3:smbspool: Fix cmdline argument handling; (bso#13417). - Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is
  required by some client libs; (bsc#1074135);
- Update to 4.8.1; (bsc#1091179);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number of
    ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + ms_schema/samba-tool visualize: Fix python2.6 incompatibility;
    (bso#13337);
  + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + winbindd: Recover loss of netlogon secure channel in case the peer DC is
    rebooted; (bso#13332);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + ctdb-client: Fix bugs in client code; (bso#13356);
  + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + libads: Fix the build '--without-ads'; (bso#13273);
  + winbind: Keep "force_reauth" in invalidate_cm_connection, add
    'smbcontrol disconnect-dc'; (bso#13332);
  + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + rpc_server: Fix core dump in dfsgetinfo; (bso#13370);
  + smbclient: Fix notify; (bso#13382);
  + Fix smbd panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + lib/util: Remove unused '#include <sys/syscall.h>' from tests/tfork.c;
    (bso#13342);
  + Fix build errors with cc from developerstudio 12.5 on Solaris;
    (bso#13343);
  + Fix the picky-developer build on FreeBSD 11; (bso#13344);
  + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + lib:replace: Fix linking when libtirpc-devel overwrites system headers;
    (bso#13341);
  + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid
    query; (bso#13312);
  + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302); - Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551);
  + Add %post scriptlet to clear old sysconfig flags
- Update vendor-files to commit 880b3e7.
  + Set samba sysconfig template variables to ""
  + Add required daemon flags directly to systemd unit - Specfile cleanup
  + Remove %if..%endif guards which don't affect the build
  + Remove redundant %clean section
  + Replace old $RPM_* shell vars with macros - BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in
  place of systemd and systemd-devel: Allow OBS to optimize the
  workload by allowing the usage of the 'build-optimized' systemd
  packages. - Enable building samba with python3, and create a samba-python3 package. - Update to 4.8
  + New GUID Index mode in sam.ldb for the AD DC
  + GPO support for samba KDC
  + Time machine support with vfs_fruit
  + Encrypted secrets
  + AD Replication visualization
  + Improved trust support
  - ability to not scan global trust list
  - AD external trusts have limited support
  - verbose trusted domain listing
  + VirusFilter VFS module
  + NT4-style replication removed
  + vfs_aio_linux removed - Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150); - Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024). - Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test - samba fails to build with glibc2.27; (bsc#1081042); - Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176); - Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125); - Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc) - smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868). - Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE. - Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) - samba-tool requires samba-python; (bnc#1067771). - Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049); - Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package. - Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available. - CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624). - CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622). - CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565). - Clean specfile assuming SUSE-only system and product >=SLE11
  + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version}
    are always undefined
  + %{_vendor} is "suse" and %{suse_version} is at least 1100 - Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (>=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli->server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827). - Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339). - fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278). - Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339). - Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387). - Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756). - s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419). - Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899). - Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231). - Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737). - Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416). - Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist" - Update to 4.6.2
  + remove bso#12721 patches now upstream - Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64 - Enable librados CTDB lock helper for samba-ceph package; (fate#321622). - Build and install the html man pages (bsc#1021907). - Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721). - Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes - Remove chkconfig requirements for systemd systems - Don't call insserv if systemd is used - Fix check if we need to require insserv - async_req: make async_connect_send() "reentrant";
  (bso#12105); (bsc#1024416). - Force usage of ncurses6-config thru NCURSES_CONFIG env var;
  (bsc#1023847). - add missing patch for libnss_wins segfault; (bsc#995730). - Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933). - Document "winbind: ignore domains" parameter; (bsc#1019416). - Add base Samba dependency to samba-ceph package. - Update to 4.5.3
  + Heap-based Buffer Overflow Remote Code Execution Vulnerability;
    CVE-2016-2123; (bso#12409); (bsc#1014437).
  + Don't send delegated credentials to all servers; CVE-2016-2125;
  (bso#12445); (bsc#1014441).
  + denial of service due to a client triggered crash in the winbindd
    parent process; CVE-2016-2126; (bso#12446); (bsc#1014442).
- 4.5.1 and 4.5.2 updates
  + various streams vfs fixes
  + various printing fixes
  + ntlm_auth: do not map explicitly empty domain
  + various stability fixes in smbd
  + match file compression ReFS behavior -  Add missing ldb module directory; (bnc#1012092). - s3/client: obey 'disable netbios' smb.conf param, don't
  connect via NBT port; (bsc#1009085); (bso#12418). - Include vfstest in samba-test; (bsc#1001203). - s3/winbindd: using default domain with user@domain.com format
  fails; (bsc#997833). - Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730). - Update to 4.5.0
  + NTLM1 Authentication disabled by default
  + SMB2.1 leases enabled by default
  + Support for OFD locks
  + ctdb tool rewritten
  + Added shadow copy snapshot prefix parameter - Fix illegal memory access after memory has been deleted;
  (bso#11836); (bsc#975299). - Prevent core, make sure response->extra_data.data is always
  cleared out; (bsc#993692). - Don't package man pages for VFS modules that aren't built;
  (boo#993707). - Fix population of ctdb sysconfig after source merge; (bsc#981566). - Enable vfs_ceph builds for Factory (x86-64)
  + Package as samba-ceph to avoid Ceph dependency in base package. - Update to 4.4.5
  +  Prevent client-side SMB2 signing downgrade; CVE-2016-2119;
    (bso#11860); (bsc#986869). - Remove obsolete syslog.target; (bsc#983938). - Honor smb.conf socket options in winbind; (bsc#975131). - Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522). - Update to 4.4.4
  + SMB3 multichannel: Add implementation of missing channel sequence
    number verification; (bso#11809).
  + smbd:close: Only remove kernel share modes if they had been
    taken at open; (bso#11919).
  + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor;
    (bso#11930).
  + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796).
  + Fix case sensitivity issues over SMB2 or above; (bso#11438).
  + s3:smbd: Fix anonymous authentication if signing is mandatory.
    (bso#11910)
  + Fix NTLM Authentication issue with squid; (bso#11914).
  + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530).
  + Fix memory leak in share mode locking; (bso#11934). - Update to 4.4.3
  + Various post-badlock regressions; (bso#11841); (bso#11850);
    (bso#11858); (bso#11870); (bso#11872).
  + Only allow idmap_hash for default idmap config (bso#11786).
  + smbd: Avoid large reads beyond EOF; (bso#11878).
  + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls"
    is set; (bso#11806).
  + libads: Record session expiry for spnego sasl binds; (bso#11852). - Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849);
  (bsc#975962); (bsc#979268), (bsc#977669). - Revert shared library packaging to comply with SLPP - Update to 4.4.2
  + A man-in-the-middle can downgrade NTLMSSP authentication;
    CVE-2016-2110; (bso#11688); (bsc#973031).
  + Domain controller netlogon member computer can be spoofed;
    CVE-2016-2111; (bso#11749); (bsc#973032).
  + LDAP conenctions vulnerable to downgrade and  MITM attack;
    CVE-2016-2112; (bso#11644); (bsc#973033).
  + TLS certificate validation missing; CVE-2016-2113; (bso#11752);
    (bsc#973034).
  + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
    (bso#11756); (bsc#973036).
  + "Badlock" DCERPC impersonation of authenticated account possible;
    CVE-2016-2118; (bso#11804); (bsc#971965).
  + DCERPC server and client vulnerable to DOS and MITM attacks;
    CVE-2015-5370; (bso#11344); (bsc#936862). - Fix samba.tests.messaging test and prevent potential tdb corruption
  by removing obsolete now invalid tdb_close call; (bsc#974629). - Obsolete libsmbclient from libsmbclient0 while not providing it;
  (bsc#972197). - Update to 4.4.0.
  + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686);
    CVE-2016-0771.
  + Getting and setting Windows ACLs on symlinks can change permissions on link
    target; (bso#11648); CVE-2015-7560.
  + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543.
  + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem
    with no ACL support; (bso#10489).
  + docs: Add example for domain logins to smbspool man page; (bso#11643).
  + smbd: Show correct disk size for different quota and dfree block sizes;
    (bso#11681).
  + docs: Add smbspool_krb5_wrapper manpage; (bso#11690).
  + winbindd: Return trust parameters when listing trusts; (bso#11691).
  + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696).
  + Crypto.Cipher.ARC4 is not available on some platforms, fallback to
    M2Crypto.RC4.RC4 then; (bso#11699).
  + s3:utils/smbget: Set default blocksize; (bso#11700).
  + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700).
  + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702).
  + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703).
  + loadparm: Fix memory leak issue; (bso#11708).
  + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714).
  + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715).
  + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719).
  + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723).
  + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724).
  + smbd: Fix CID 1351216 Dereference null return value; (bso#11725).
  + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new
    file; (bso#11727).
  + docs: Add manpage for cifsdd; (bso#11730).
  + param: Fix str_list_v3 to accept ; again; (bso#11732).
  + lib/socket: Fix improper use of default interface speed; (bso#11734).
  + lib:socket: Fix CID 1350009: Fix illegal memory accesses
    (BUFFER_SIZE_WARNING); (bso#11735).
  + libcli: Fix debug message, print sid string for new_ace trustee;
    (bso#11738).
  + Fix installation path of Samba helper binaries; (bso#11739).
  + Fix memory leak in loadparm; (bso#11740).
  + tevent: version 0.9.28: Fix memory leak when old signal action restored;
    (bso#11742).
  + smbd: Ignore SVHDX create context; (bso#11753).
  + Fix net join; (bso#11755).
  + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add;
    (bso#11755).
  + passdb: Add linefeed to debug message; (bso#11763).
  + s3:utils/smbget: Fix option parsing; (bso#11767).
  + libnet: Make Kerberos domain join site-aware; (bso#11769).
  + Reset TCP Connections during IP failover; (bso#11770).
  + ldb: Version 1.1.26; (bso#11772).
  + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773).
  + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774).
  + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780).
  + "trustdom_list_done: Got invalid trustdom response" message should be
    avoided; (bso#11782).
  + Mismatch between local and remote attribute ids lets replication fail with
    custom schema; (bso#11783).
  + Quota is not supported on Solaris 10; (bso#11788).
  + Talloc: Version 2.1.6; (bso#11789).
  + smbd: Enable multi-channel if 'server multi channel support = yes' in the
    config; (bso#11796).
  + build: Fix build when '--without-quota' specified; (bso#11798).
  + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802).
  + Access based share enum: handle permission set in configuration files;
    (bso#8093).
  + See also WHATSNEW.txt from the samba-doc package. - Update to 4.3.6.
  + Getting and setting Windows ACLs on symlinks can change permissions on link
    target; CVE-2015-7560; (bso#11648); (bsc#968222).
  + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771;
    (bso#11128); (bso#11686); (bsc#968223). - Upgrade on-disk FSRVP server state to new version; (bsc#924519). - Only obsolete but do not provide gplv2/3 package names; (bsc#968973). - Relocate existing lock files to /var/lib/samba/lock; (bsc#968963). - Obsolete no longer existing samba-32bit package; (bsc#967625). - Update to 4.3.5.
  + s3:utils/smbget: Fix recursive download; (bso#6482).
  + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi
    with no ACL support; (bso#10489).
  + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks;
    (bso#11400).
  + vfs_shadow_copy2: Fix case where snapshots are outside the share;
    (bso#11580).
  + smbclient: Query disk usage relative to current directory; (bso#11662).
  + winbindd: Handle expired sessions correctly; (bso#11670).
  + smbd: Show correct disk size for different quota and dfree block sizes;
    (bso#11681).
  + smbcacls: Fix uninitialized variable; (bso#11682).
  + s3:smbd: Ignore initial allocation size for directory creation;
    (bso#11684).
  + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690).
  + s3-parm: Clean up defaults when removing global parameters; (bso#11693).
  + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699).
  + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703).
  + ctdb: Remove error messages after kernel security update; CVE-2015-8543;
    (bso#11705).
  + loadparm: Fix memory leak issue; (bso#11708).
  + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714).
  + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ...";
    (bso#11719).
  + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new
    file; (bso#11727).
  + param: Fix str_list_v3 to accept ";" again; (bso#11732). - Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361). - Simplify shared library packaging; (bsc#966956). - Enable clustering (CTDB) support; (bsc#966271). - s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703);
  (bsc#964023). - Add quotes around path of update-apparmor-samba-profile; (bnc#962177). - Remove autoconf build-time requirement. - Update to 4.3.4.
  + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065).
  + Crash: Bad talloc magic value - access after free; (bso#11394).
  + Copying files with vfs_fruit fails when using vfs_streams_xattr without
    stream prefix and type suffix; (bso#11466).
  + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given;
    (bso#11613).
  + Fix a typo in the smb.conf manpage, explanation of idmap config;
    (bso#11619).
  + Correctly initialize the list head when keeping a list of primary followed
    by DFS connections; (bso#11624).
  + Reduce the memory footprint of empty string options; (bso#11625).
  + lib/async_req: Do not install async_connect_send_test; (bso#11639).
  + Fix typos in man vfs_gpfs; (bso#11641).
  + Make "hide dot files" option work with "store dos attributes = yes";
    (bso#11645).
  + Fix a corner case of the symlink verification; (bso#11647);  (bnc#960249).
  + Do not disable "store dos attributes" on-the-fly; (bso#11649).
  + Update lastLogon and lastLogonTimestamp; (bso#11659). - Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249). - Update to 4.3.3.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585). - Update to 4.3.2.
  + vfs_gpfs: Re-enable share modes; (bso#11243).
  + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327).
  + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute
    type of zero; (bso#11452).
  + Add libreplace dependency to texpect, fixes a linking error on Solaris;
    (bso#11511).
  + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512).
  + s4:lib/messaging: Use correct path for names.tdb; (bso#11562).
  + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins;
    (bso#11563).
  + async_req: Fix non-blocking connect(); (bso#11564).
  + auth: gensec: Fix a memory leak; (bso#11565).
  + lib: util: Make non-critical message a warning; (bso#11566).
  + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569);
    (bnc#949022).
  + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570).
  + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577).
  + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer;
    (bso#11581).
  + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581).
  + manpage: Correct small typo error; (bso#11584).
  + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create
    containing them; (bso#11589).
  + Backport some valgrind fixes from upstream master; (bso#11597).
  + auth: Consistent handling of well-known alias as primary gid; (bso#11608).
  + winbind: Fix crash on invalid idmap configs; (bso#11612).
  + s3: smbd: have_file_open_below() fails to enumerate open files below an
    open directory handle; (bso#11615).
  + Changing log level of two entries to DBG_NOTICE; (bso#9912). - Ensure samlogon fallback requests are rerouted after kerberos failure;
  (bnc#953382); (bnc#953972). - Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0.
- Always use the default optimization even on pre-9.2 systems. - Remove redundant configure options while adding with-relro. - Relocate the lockdir to the /var/lib/samba/lock directory. - Cleanup and enhance the pidl sub package. - Require renamed python-ldb-devel and python-talloc-devel at build-time.
- Requires python-ldb and python-talloc from the python subpackage. - Update to 4.3.1.
  + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match
    Windows; (bso#10252).
  + nss_winbind: Fix hang on Solaris on big groups; (bso#10365).
  + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634).
  + kerberos: Make sure we only use prompter type when available;
    winbind: Fix 100% loop; (bso#11038).
  + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053).
  + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket;
    (bso#11316).
  + s3: smbd: Fix mkdir race condition; (bso#11486).
  + pam_winbind: Fix a segfault if initialization fails; (bso#11502).
  + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509).
  + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related
    subdirs; (bso#11515).
  + s3: smbd: Fix opening/creating :stream files on the root share directory;
    (bso#11522).
  + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526).
  + net: Fix a crash with 'net ads keytab create'; (bso#11528).
  + s3: smbd: Fix a crash in unix_convert(); (bso#11535).
  + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix
    (bso#11522); (bso#11535).
  + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543).
  + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547).
  + s3:locking: Initialize lease pointer in share_mode_traverse_fn();
    (bso#11549).
  + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550).
  + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555).
  + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names
    is incorrect; (bso#11555). - Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038). - Relocate the tmpfiles.d directory to the client package; (bnc#947552). - Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716). - Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051). - Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502). - Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15
  systems; (bnc#945013). - Update to 4.3.0.
  + Samba "map to guest = Bad uid" doesn't work; (bso#9862).
  + revert LDAP extended rule 1.2.840.113556.1.4.1941
    LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493).
  + No objectClass found in replPropertyMetaData on ordinary objects
    (non-deleted); (bso#10973).
  + Stream names with colon don't work with fruit:encoding = native;
    (bso#11278).
  + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + "force group" with local group not working; (bso#11320).
  + strsep is not available on Solaris; (bso#11359).
  + smbtorture does not build when configured --with-system-mitkrb5;
    (bso#11411).
  + Build with GPFS support is broken; (bso#11421).
  + Build broken with --disable-python; (bso#11424).
  + net share allowedusers crashes; (bso#11426).
  + nmbd incorrectly matches netbios names as own name; (bso#11427).
  + Python bindings don't check integer types; (bso#11429).
  + Python bindings don't check array sizes; (bso#11430).
  + CTDB's eventscript error handling is broken; (bso#11431).
  + Fix crash in nested ctdb banning; (bso#11432).
  + Cannot build ctdbpmda; (bso#11434).
  + samba-tool uncaught exception error; (bso#11436).
  + Crash in notify_remove caused by change notify = no; (bso#11444).
  + Poor SMB3 encryption performance with AES-GCM; (bso#11451).
  + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451).
  + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455).
  + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and
    install; (bso#11458).
  + xid2sid gives inconsistent results; (bso#11464).
  + ctdb: Fix the build on FreeBSD 10.1; (bso#11465).
  + Handling of 0 byte resource fork stream; (bso#11467).
  + AD samr GetGroupsForUser fails for users with "()" in their name;
    (bso#11488). - Configure with --bundled-libraries=NONE; (bso#11458). - Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284). - Remove libiniparser-devel build-time requirement. - Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "â€˜PTHREAD_MUTEX_ROBUSTâ€™ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371). - Disable rpath usage; (bnc#902421). - Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909). - Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457). - Order winbind.service Before and Want nss-user-lookup target. - Remove fam-devel build-time dependency for post-6 RHEL systems. - Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() ->
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033). - Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854). - Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf. - Drop redundant doc attribute from man pages. - Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185). - Prevent samba package updates from disabling samba kerberos printing. - Add sparse file support for samba; (fate#318424). - Purge printer name cache on spoolss SetPrinter change; (bso#11210);
  (bnc#901813). - Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374). - Simplify libxslt build requirement and README.SUSE install.
- Remove no longer required cleanup steps while populating the build root. - Remove deprecated base_rid example from idmap_rid manpage; (bso#11169);
  (bnc#913304). - Update to 4.2.0.
  + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115).
  + pam_winbind: fix warn_pwd_expire implementation; (bso#9056).
  + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299).
  + Make 'profiles' work again; (bso#9629).
  + s3:smb2_server: protect against integer wrap with
    "smb2 max credits = 65535"; (bso#9702).
  + Make validate_ldb of String(Generalized-Time) accept millisecond format
    ".000Z"; (bso#9810).
  + Use -R linker flag on Solaris, not -rpath; (bso#10112).
  + vfs: Add glusterfs manpage; (bso#10240).
  + Make 'smbclient' use cached creds; (bso#10279).
  + pdb: Fix build issues with shared modules; (bso#10355).
  + s4-dns: Add support for BIND 9.10; (bso#10620).
  + idmap: Return the correct id type to *id_to_sid methods; (bso#10720).
  + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808).
  + Don't build vfs_snapper on FreeBSD; (bso#10834).
  + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835).
  + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837).
  + s3: smb2cli: query info return length check was reversed; (bso#10848).
  + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849).
  + lib: uid_wrapper: Fix setgroups and syscall detection on a system without
    native uid_wrapper library; (bso#10851).
  + winbind3: Fix pwent variable substitution; (bso#10852).
  + Improve samba-regedit; (bso#10859).
  + registry: Don't leave dangling transactions; (bso#10860).
  + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861).
  + build: Do not install 'texpect' binary anymore; (bso#10862).
  + Fix testparm to show hidden share defaults; (bso#10864).
  + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1
    max=PROTOCOL_SMB2_02; (bso#10866).
  + Integrate CTDB into top-level Samba build; (bso#10892).
  + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895).
  + s3-nmbd: Fix netbios name truncation; (bso#10896).
  + spoolss: Fix handling of bad EnumJobs levels; (bso#10898).
  + Fix smbclient loops doing a directory listing against Mac OS X 10 server
    with a non-wildcard path; (bso#10904).
  + Fix print job enumeration; (bso#10905); (bnc#898031).
  + samba-tool: Create NIS enabled users and unixHomeDirectory attribute;
    (bso#10909).
  + Add support for SMB2 leases; (bso#10911).
  + btrfs: Don't leak opened directory handle; (bso#10918).
  + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920).
  + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921).
  + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932).
  + s3-keytab: fix keytab array NULL termination; (bso#10933).
  + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940).
  + Cleanup add_string_to_array and usage; (bso#10942).
  + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942).
  + Fix RootDSE search with extended dn control; (bso#10949).
  + Fix 'samba-tool dns serverinfo <server>' for IPv6; (bso#10952).
  + libcli/smb: only force signing of smb2 session setups when binding a new
    session; (bso#10958).
  + s3-smbclient: Return success if we listed the shares; (bso#10960).
  + s3-smbstatus: Fix exit code of profile output; (bso#10961).
  + socket_wrapper: Add missing prototype check for eventfd; (bso#10965).
  + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows
    client does; (bso#10966).
  + vfs_streams_xattr: Check stream type; (bso#10971).
  + s3: smbd: Fix *allocate* calls to follow POSIX error return convention;
    (bso#10982).
  + vfs_fruit: Add support for AAPL; (bso#10983).
  + Fix spoolss IDL response marshalling when returning error without clearing
    info; (bso#10984).
  + dsdb-samldb: Check for extended access rights before we allow changes to
    userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).
  + Fix IPv6 support in CTDB; (bso#10996).
  + ctdb-daemon: Use correct tdb flags when enabling robust mutex support;
    (bso#11000).
  + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005).
  + s3-util: Fix authentication with long hostnames; (bso#11008).
  + ctdb-build: Fix build without xsltproc; (bso#11014).
  + packaging: Include CTDB man pages in the tarball; (bso#11014).
  + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords;
    (bso#11016).
  + Make Sharepoint search show user documents; (bso#11022).
  + nss_wrapper: check for nss.h; (bso#11026).
  + Enable mutexes in gencache_notrans.tdb; (bso#11032).
  + tdb_wrap: Make mutexes easier to use; (bso#11032).
  + lib/util: Avoid collision which alread defined consumer DEBUG macro;
    (bso#11033).
  + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034).
  + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037).
  + vfs_fruit: Fix base_fsp name conversion; (bso#11039).
  + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040).
  + Fix authentication using Kerberos (not AD); (bso#11044).
  + net: Fix sam addgroupmem; (bso#11051).
  + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055);
    (bnc#913238).
  + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058).
  + utils: Fix 'net time' segfault; (bso#11058).
  + libsmb: Provide authinfo domain for encrypted session referrals;
    (bso#11059).
  + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066).
  + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069).
  + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069).
  + vfs_glusterfs: Implement AIO support; (bso#11069).
  + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070).
  + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer;
    (bso#11077); CVE-2015-0240; (bnc#917376).
  + vfs: Add a brief vfs_ceph manpage; (bso#11088).
  + s3: smbclient: Allinfo leaves the file handle open; (bso#11094).
  + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain;
    (bso#11097).
  + debug: Set close-on-exec for the main log file FD; (bso#11100).
  + s3: smbd: leases - losen paranoia check. Stat opens can grant leases;
    (bso#11102).
  + s3: smbd: SMB2 close. If a file has delete on close, store the return info
    before deleting; (bso#11104).
  + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117).
  + snprintf: Try to support %j; (bso#11119).
  + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124).
  + doc-xml: Add 'sharesec' reference to 'access based share enum';
    (bso#11127). - Update to 4.2.0rc5.
  + Ensure we don't call talloc_free on an uninitialized pointer;
    CVE-2015-0240; (bso#11077); (bnc#917376). - Fix usage of freed memory on server exit; (bso#11218); (bnc#919309). - Fix tdb_store_flag_to_ntdb() gcc5 build failure. - Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238). - Update to 4.1.16.
  + dsdb-samldb: Check for extended access rights before we allow changes to
    userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). - Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0. - Fix libsmbclient DFS referral handling.
  + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512).
  + Set domain/workgroup based on authentication callback value; (bso#11059). - Update to 4.2.0rc4.
- Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and
  libhttp to the libs package; (boo#913547).
- Rename libpdb packages to libsamba-passdb.
- Drop libsmbsharemodes packages. - Enable avahi support on post-12.2 systems. - Update to 4.1.15.
  + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056).
  + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299).
  + Fix profiles tool; (bso#9629).
  + s3-lib: Do not require a password with --use-ccache; (bso#10279).
  + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control;
    (bso#10949).
  + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952).
  + s3:smb2_server: Allow reauthentication without signing; (bso#10958).
  + s3-smbclient: Return success if we listed the shares; (bso#10960).
  + s3-smbstatus: Fix exit code of profile output; (bso#10961).
  + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows
    client does; (bso#10966).
  + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return
    convention; (bso#10982).
  + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute
    'supported_extensions'; (bso#11006).
  + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo;
    (bso#11006).
  + winbind: Retry LogonControl RPC in ping-dc after session expiration;
    (bso#11034). - yast2-samba-client should be able to specify osName and osVer on
  AD domain join; (bnc#873922). - Lookup FSRVP share snums at runtime rather than storing them persistently;
  (bnc#908627). - Specify soft dependency for network-online.target in Winbind systemd service
  file; (bnc#889175). - Fix spoolss error response marshalling; (bso#10984). - Update to 4.1.14.
  + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/
    Tools/perl.py back to upstream state; (bso#10472).
  + s4-dns: Add support for BIND 9.10; (bso#10620).
  + nmbd fails to accept "--piddir" option; (bso#10711).
  + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835).
  + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path;
    (bso#10880).
  + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers;
    (bso#10889).
  + s3-nmbd: Fix netbios name truncation; (bso#10896).
  + spoolss: Fix handling of bad EnumJobs levels; (bso#10898).
  + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set
    STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904).
  + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905).
  + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920).
  + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921).
  + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932).
  + s3-keytab: Fix keytab array NULL termination; (bso#10933).
  + Cleanup add_string_to_array and usage; (bso#10942). - Remove and cleanup shares and registry state associated with
  externally deleted snaphots exposed as shadow copies; (bnc#876312). - Use the upstream tar ball, as signature verification is now able to handle
  compressed archives. - Fix leak when closing file descriptor returned from dirfd; (bso#10918). - Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031).
  + Fix handling of bad EnumJobs levels; (bso#10898). - Remove dependency on gpg-offline as signature checking is implemented in the
  source validator. - Update to 4.1.13.
  + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984).
  + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984).
  + s3-libads: Add all machine account principals to the keytab; (bso#9985).
  + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to
    be NULL. Ensure this is safe with modern AD-DCs; (bso#10717).
  + Fix unstrcpy; (bso#10735).
  + pthreadpool: Slightly serialize jobs; (bso#10779).
  + s3: smbd: streams - Ensure share mode validation ignores internal opens
    (op_mid == 0); (bso#10797).
  + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809).
  + vfs_media_harmony: Fix a crash bug; (bso#10813).
  + docs: Mention incompatibility between kernel oplocks and streams_xattr;
    (bso#10814).
  + nmbd: Send waiting status to systemd; (bso#10816).
  + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL;
    (bso#10817).
  + nsswitch: Skip groups we were not able to map; (bso#10824).
  + s3-winbindd: Use correct realm for trusted domains in idmap child;
    (bso#10826).
  + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830).
  + s3: lib: Signal handling - ensure smbrun and change password code save and
    restore existing SIGCHLD handlers; (bso#10831).
  + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837).
  + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call;
    (bso#10838).
  + s3: smb2cli: Query info return length check was reversed; (bso#10848).
  + registry: Don't leave dangling transactions; (bso#10860). - Update to 4.2.0rc2. h03-ch2b 1738944138                                                          	                  4.19.8+git.404.38b26805d4-150600.3.12.2 4.19.8+git.404.38b26805d4-150600.3.12.2                                    rpcd_classic rpcd_epmapper rpcd_fsrvp rpcd_lsad rpcd_mdssvc rpcd_spoolss rpcd_winreg samba-dcerpcd samba-dcerpcd.8.gz /usr/lib64/samba/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37359/SUSE_SLE-15-SP6_Update/b6fb6fd06a0afae1f83ba160476a0246-samba.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux                               ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=bc941b73a282ff802110fb8cee0c89149909c088, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=ac576ad691fc48f7ceb095971ab880bbad15541a, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=d74a8e2a80d70edfb6ad638de79767c4acbee3fa, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e0fc93142bd93586f094b83641e23a484058b0cd, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=9483c0401e59cd196841052fe59d3589e3ded3e9, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=8e72e96262b9c695bbd2d161b6fe05729e9dd216, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=b137ebbdb22c16c49bc048241e6e86d4ad23c64a, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=85d3d256337be7fb1b356cd28346f0bf8adb4f3c, stripped troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)           v   Ÿ   Ð    P  §  Î       v   )   1   O   1   W   '   P    R  qR  …R  R  TR  ‹R  ZR  JR  vR  uR  8R  R  iR  XR  ƒR  #R  R  1R  CR  GR  ER  BR  :R  4R  .R  /R  -R  eR  R  %R  'R  R  zR  ‡R  RR  )R  	R  VR  +R  R  aR  R  sR  >R  <R  ‰R  |R  _R  cR  xR  mR  oR  PR  R  kR  R  R  R  R  R  R  R  R  R  \R  @R  AR  "R  rR  ^R  ;R  hR  pR  OR  jR  (R  `R  bR  YR  R  ˆR  R  R  dR  R  [R  WR   R  &R  QR  lR  yR  ?R  UR  R  SR  =R  *R  R  †R  nR  $R  „R  
R  ŠR  R  7R  9R  IR  3R  0R  2R  wR  tR  €R  {R  !R  ,R  R  zR  XR  ‰R  aR  kR  R  cR  ER  GR  CR  BR  oR  VR  )R  R  R  R  %R  |R  R  RR  xR  <R  R  bR  AR  (R  R  QR  ;R  UR  jR  `R  WR  ˆR  $R  yR  nR  {R  wR  R  eR  ‰R  R  XR  R  ƒR  +R  %R  >R  _R  oR  ER  BR  )R  #R  VR  R  R  R  R  kR  RR  xR  <R  mR  cR  AR  R  bR  lR  QR  WR  
R  (R  R  ;R  *R  UR  "R  ^R  jR  =R  ˆR  dR  $R  nR  wR  €R  R  qR  mR  eR  ƒR  R  JR  ‡R  ‹R  aR  iR  	R  %R  oR  ER  BR  4R  VR  .R  /R  -R  R  )R  'R  RR  xR  XR  +R  _R  R  kR  R  R  R  R  R  R  R  R  <R  sR  @R  ZR  \R  cR  AR  WR  R  (R  bR  QR  ^R  hR  lR  R  YR  UR  
R  R  ;R  pR  $R  rR  *R  jR  `R  dR  [R  IR  3R  R  ?R  †R  nR  &R  ŠR  wR  ,R  €R  R  }R  …R  XR  ƒR  +R  R  <R  %R  ER  BR  #R  cR  oR  VR  )R  _R  ‰R  kR  mR  R  R  R  R  R  R  RR  xR  R  bR  lR  AR  (R  R  QR  ;R  "R  ^R  jR  ˆR  *R  UR  „R  WR  $R  nR  {R  wR  €R  R  TR  ZR  8R  +R  R  ‡R  iR  XR  aR  %R  …R  >R  ƒR  1R  :R  R  R  VR  R  'R  |R  eR  oR  R  )R  	R  RR  ‰R  PR  xR  mR  R  R  R  R  R  R  R  R  R  ER  BR  _R  kR  sR  cR  @R  AR  rR  ^R  hR  OR  jR  (R  `R  bR  ˆR  R  dR  R  WR  &R  QR  lR  ?R  UR  R  SR  YR  =R  *R  R  †R  nR  $R  „R  
R  7R  9R  R  0R  2R  wR  €R  {R  !R  R  R  XR  %R  ER  BR  oR  VR  )R  _R  eR  R  kR  R  R  R  R  R  RR  xR  @R  R  cR  AR  R  R  bR  QR  WR  (R  R  jR  dR  UR  ^R  $R  ?R  nR  wR  R  zR  ‰R  qR  <R  LR  +R  R  6R  NR  gR  oR  aR  iR   R  4R  R  eR  VR  TR  |R  ZR  R  %R  ‚R  R  ƒR  xR  XR  ]R  \R  _R  R  R  R  R  R  R  R  DR  GR  CR  HR  FR  BR  kR  RR  cR  AR  $R  ^R  hR  R  pR  jR  `R  ~R  bR  KR  R  dR  3R  [R  WR  QR  ˆR  yR  SR  R  YR  *R  UR  nR  ;R  5R  fR  €R  wR  {R  MR  ŠÒµóò~ãL\Ž)šÐú   utf-8 6cf2acfa506d5714efcbd31c1d319e2e557222bce74f466194312feb57c456c4        ?   ÿÿü    ý7zXZ  
áû¡ !   t/å£àüDïþ] "ÌkÀ%å-2_¤eïídûuW'.zÚÞ±5¿ã®
°\œ™G´|<Æ	pä.ÿ}¥[¹Êà	Ú—.Ú2ëC-m6|ãé	)ò·soD„ÜÝè!Wºž„û&~8J,Ã!‹qË%»˜tÐôø%RMlÍbzÙK}ÝÂ¡È™Ì&	^2b•leÍñÚ
¼Ûî¿3S¨x•Ôa=¶f³¯ÅO.èáJ_ÇÔw¤%"„ÀïÜâÆn„Òçù7Ì ³	3`åi_èà°t“-û©ØœŽæßü4Ia;røSÆc„§/Ýµïœs·é~ÿw.ˆ@@—Ø¼\u«ÆR¤(žqW+^w 66‚[ÚŸý7%¹ôqNœ¸Ë¢(Uïá,†²í¤é†$JV[À†EŠ—!Âë„ÚnÉ.ËòŸS—ÂÙi‰KVÈk)¡+âÈ›_ÎáÅëUØ(¸
{›s§k‹ÞD` 4Í—ZíZF™cœ“kƒ7ëÝÖ;Ò£ðÖÂkg5†}ìâI'ªÔÑE3GÁ’œ-®Å`Ž÷ª88XßðÝ?‹-‡uÃÞRŸ9Uî<?ÿ;ä8sw¾«Ôñ½L¤™ û‡GÁ ÛÓôœ*ûC>0Í1¾µ²¨fšýÏiV<1V®]Ö4²š#>wš™ü©öžÅ€nœÈÆàÂÙñ Ì¡ÛIf-·i*;Ù:³÷a‡ø‹)ä¬}ò¤„ ow5ÌôëÙš	|¦sŒÛ&€¨Líl·õ4u?Â:vŒþo°¹Ï:`‡ówÑmß…
5AíxÊûÑ(lw¨îpøV²›ßÏÈÀÕ`€™mý	]"¡ƒŽDÓiHüÎ ;­”î®´FÆ§ž›ÓŒ¤Ô= ‚¨$<Áœge|,+L_eáB…º´¢:É53ãø`©S¾ i®ü½óFÓˆ‚:º_¸O¨Ö^ÈìèU}Y]1·¸I%Š¨šYÊ˜ÍÑôNÛëó±ÓÎOÑð”/x†üœÅžßlPI[oÐ¾eÐ(\j^ArðXO0„bá¤a)ˆÈ.Z{_lù:óøÚI~juÔ
|“y¤o¼ÑtÆŸú°zìÅlR';}Á•[]á§á. PÈzÿ)®Âm0þ¤Céj{CÒ;‚+f•OD9®Á U’Ô²}ß£	xlŒozÁž½Ãâxî,¥0¿}ÚçHrˆ&Ë‰ëSO/¹ñÓTù*~¡]Wæ æ¤zæjp°šu,ééÜÔU”Èîà^RSäÎæÈä†±g8}¼ÓEhî&Š½‘Mÿâ¨«ƒÇì¾À?ÃUAÂFgeì¢Òëï·X¦Øœ ¤yôJóª•!#2ñùtüøï²o*²šùã—êz°¬ÔSÎcn®Ø›u¢5Öí‹TR+T+\¤ÍÑÈ7çˆižú)!z»KToT} ÷$Ïœ ÷p¿E
ÅU%$P¡ÙÕ=v$6©IkýŸÁÐJ¶Â^?iÏÍKdM­Õ?ºþ¼Õ*V³eýŸ¹ºIH·ÅŽv T0¥N‘6õùŽuÛ‰o}æ)8.lïwƒÍ¹aM3}:-Ø­ýÖ¥!át$¡w´ÿqŒÑKöå	pŒG".¢	ªZZ¶í{úü\XO>¸xDãÍz^ª)Ì1›¡A¨°¼ÿ!3ÇlÂ0Þpë£híß,óë¾
…ž—RÓ õýÓ¬þSª•x–Á»°7Bµ %Ïœ“8WÈ^n-`®¦‡²ÛÌÜ¦|^_ÕñsBê-OGs)d\Çè•­_‹Ñ3eÐvØ]ºôVxƒzQÕ©Ù«©°í†#CJÊ—7jeY8Êg$ïéÅõ‚Z¬¦›U·H„ë…•¶~}=ÊŠùºôBPL	…xœcWBv’ì‹ÐÃèXTi¶+Ë]—ã&”R,Ôµ à®û>ÿ
.9¼r:œdvô‰ÑFKýÀ™o“6–3o-v†ÅÀ=»7Û3¤\»ÉW3#ˆ²»[™a™hÞôí§Y!FºðL=¯ê×»39NBv;‹C¡
ÑÄ²kúë"!ØÀÞF-y§iH·høžâÎAhPSó›Æ›Ì¯ŒýÇt}üksz\p@Ç¼·q%i$.»ã‰­‹µ*Ÿpë?ˆMÇ j×Isžî·ªþ©Ãæzå$¦Y¤©óê©Ùxð•XÎ]škkìo|$ûÐ1tkÔ‘èw	=xía-FÿàÁ@¶-ÀVMzú¨5Z:±œ*™ìKÄs3¦IûZŸOfî¿Â—o Š{(´_‹à¯-ÐB™°ü¨y§ï(¥‚Å3pÊt²7£ã¶£)Ï¿æ!õ)U«¦•l—~‚Ä]šá³U~Z©:ãìC³E*¶d„ö¬jÏíN<õSf1›ä¦
 ÄõÒ!³ÜóêS2î»*+vC©‘¹ŽàP³TA|<>zêÒhb³m7UçVàŽ{k·íð X«‘¢Iï…’ÎžOg“Þçlˆ•Ž¥û#mQ-_21V,´“û!_R	–ó*™[8È
(ÖÃ‹''Üe—òd_ÞÁSk`éàvYÇ†N3«žkÜ½ëMž‡ÈªJŸ;’c'¢ÿ¢`"
Š~:ßãõC%ú…ÈŽíÎÇÀC“£$5ŸáÁæ¥èµ¾²õrBx=<í°ÝÞ…¾z¢ô ûÊ!YRYuÜ+ˆåU)ù¬ŸóË9S÷“6¼©-0Övö=B£âK"£žDQšSZïàNç\dÀ•¨$iñôN2b$—|)ó”‘2]IÞ¦Ûý)œ6óÝ!ôêÆ@içeI–^’!ÉEš+¸,\õj|+ržè‡ 2æœõ“ïZd)O	âð”ø‹¬´4·“EF{OŒR×NE…ÂPË‚ÿêeÂ®ù‹i¼­PtÖ—(s—,bä P€š¬*™G{µþò3«+7¥ÏNÇƒE„³ÉÏd³|]ÇBÄ#èyÿgÛ„½Í›Ç«‰ÍW¡´zžÏþÍøKf”¨QVÀÛ“6Tâ±nwtÀ
>kwüL –]Ô·iy¿©(j¸mÍ–d—ÿÐTiòÍ¿	‰Îz|Ø† HAô!!²gÂg2ë^O¾ƒ`›mÝ‘º”}Î exÕÙ*GQ±¦-Ë}ÃFÈ”ä»ÖQeø5*H| •%©5óÊCòÇÒ {m3ýÐ³‚»Âlª"ö¼™5¥¡	S{ØªZ(nÿ)Êz½%
ä+Þ'o.R @w³nGÍ>‹Ì•`³Yc˜ì“‰)yåEØ´'ôTŠ‹yÔ8¨òÑ¢àÇŸˆk'šýÐ‰‚²ÝÛêyŽËœÅ$lÔ¬«QrwÕ	jÙ(¹cy¿D)õtù±QÆçò¿,G‰-wh™.þ÷=íXgýÝW)YXÆ.dñTÏáð'$ërŽõ²…3ï\²Ž*0{¼g…ViV€,OK•²ºdFÄ‘©–=pÈP‰Ñÿò¤¡0Ë¡Ûo÷”¾¬»$Zÿ£Þ>ìÃ	òÕøMÀE–B{‘Ï3Ën¼ó_šœ÷°
DgÛ÷^¹þ4¡HSpÓDäq }¹Ü«sRßËóBzœ™ÝØ¢w¸yÙNê
 M,“‘Æ|w‡®"‘ªÒþð/e±îë`¬ËT\=Ÿ¢à˜Ã´û}\N´ËÑ#¬b¯Å Rë3™kåÚ> *š»­47þ2Žù`ÖçeÚíºÉDã‹ž³Æózû0–ŸÔ?šŒ-žgæ_ òˆ§ ¯dQ ÓH©¬5VtZpÃþðÖ¸L	‘¿†BÂ‘»W?lJfï4±ëx»¶jg¦)Ù¬66Î*Ëñì.››@R§ër0ººbré±3†‡·‹#Tí»› ‹¨¦BùÔëÑ´¨w0”ë»¯P‘ºÿˆìÄ@×+?-ÐíZ„,'S”õ®$fÅ:_QD6mÊÒ¸MOoÏð¨=œˆ×|òr¸±Ç"ñ~Puœ¹*šô™Kz‚þNöU’É³øEœ¯Ýâ@}êšØ§ÚÓð+°†<°/÷WÑ¥GZ+œ-iuè=ìõN[<]¬CSXáÚ§±G!E¥ÂîZXÅ)"sÐK®ÂúØ%l±?Ô:z À»Á]ë¬È_üÄºSÄLjkîguêäOA«Ïò`€2ôqIÔýÞù©]VÏ6ß•]Ö<xßoD®ûcéÚÂÝ¨é¶N&vî®1¥s‘‹æ§Üœî÷ð¡cNÄ‹>{“„êÊEåÕÝæpñ?_ÄYž·ª¾³q¡”/î®):DB’ä|ád|D34û$ÞÄþm5œ#µžkµ;u¦üÅm³Nòâ¸Tâê×%8\r,4Ò¡\X$Öå×yñëxÖ®P±%±iŸÇšQˆÁnQ¨!€ÈîÄû!¥0û^ÇçØ`-cÙçQ‘`ó®&pì#Ž¦²ºVdÃQ.û×2ºú7qžKòÙð†‡nòwÕu•ÈZË`ü°ÔiÍ1-0q™@%¶ 8Çó1é~??¾òR¨Ìx³!57Ÿ?ƒ‹ÌXƒH{áAÿ.ð,‡€EÚÊŽ‰¿ïêaÌ«]œó,²u*“k;M¥ýúú'%¼É¾ŸöüìØËnhgèüC¥Àê˜Ú¸\,tâç2ñI[¤$=¢±ía•ÃÖ/8CÅ–ÀÎ=”ÞFù-|¶ŒÅØ$ºŠ´wDb§%àµÐµCaê)ƒ|Ñè;é&‰"ùEÑL`Âi-(#‘…$t¨é€¶=¹SVpí¸ÂÂ‹ÕßõR¸Ò›Î£[]€Û}Q7ðæ÷FÓq‚ËŸ¹ú.U/z[/ø×›QÊXç²‚•$¨`­*ÔtÏnÈÐ=Ýã‹ž‰ü_üþ3Òó•Ñ6ˆ…NYkÎ¯©éö)¨uduU2f£odG¢»n¼fñ!ßAå¥æ!ñßßMö«H'qW<|3©UF\c”ªÜL¿–ŽW9ÏqÙÀÉÄ"*	'Òs|œ†bß)7Â¢8Ý"’;azaÀýˆF,¶JOÊ.PŒZÁÀK„Adû'KX}¹/»<]ã“$"lq"Žäµ51Õ<ªÝ($B: FW»¦àÏvÆÑÁ›Ê ›Ÿ^àÙ€dûu18 º{/>€ÕÛê²ùêÞ$Dí~¯Òô × “–&?ùtxL²íŠN*K¥9›¯aê1‚.$³hÃ‚sÝà¡Ã2Ð!´‹öÍ"]„AºNiXÌV«½¨Pã‡Ûÿ
M 	«@ž{û	]ˆd!“æ_œEfüL Õj,â[éö½Ô*m$ŠgøIºa¿^Ü4°«—{Ð†]l[Õú‡S¬	à¸ž(uC´ÆW	ÓÏ®x^OšWSìþåYhìÓËÎøäa"Ú-¾†£©©NëÜÄ‘Þ7´YŸùüN8bpûC¤ëÝ±o°Ø__CÕ $9 }QåDãâèÏ’ÀÓ¯Úå/Ew¸ŠMO‡(ûüÄìVøKœæþsJG‘¾lDy>É¾/*Ì}'*–þn¶ÉôQ BD¢ýìÀNÌmíÇã'Û5D•¶8û²kï0ÛëN¶]SzãŸn{¼œéÛ	Y…‹ˆ}¸®rºÊÛ>(j@ý3ºä÷vÍ!†|”:Î¹»×©©â:Ú‰{]5l“å¿£ïð5„)Â"a]`¢[Fü´`%Ûµ¨ƒénp%Û(ïÙN¸ó”é[ïÖ'YTl…ïjR:áRü;Ó)Î¹W¢'$ÜK”«*Bµöñ?ù3Hó0ÑÆA9ò³›‰È¶M‡­òª5“Q£¶ú«›  N~Z€NãX8{ „);™Ón_gÌ¥‚šÚÏKe¸[ÏfVcä©Ý»ÅN0Xe®,CÀu/’ûõßeò «a1y‹Ì¦–Ò(ÐoO3®”^Vîi¶´vi¯»,C‚ïæõû7Â¸÷Œl9Š;ÓÝë’{Ûì¢ëùÐW[j2e~³çqÅ•'ÉÌšÔÝ·ËI©¹•æ­~c[ß\ˆ¾ðDÕc%!>®Z{qn‰%ZäÃ«*õ¬–‚¦üµq—bÙ¯²Ë`ÃŸF…q²h®ª¤¿&˜f;¹K{c|¨V´ÐÜcÇµ°\1ÖÃ0ò3F}[H?QYC(ÅœWvçhP!ß<Å¡¥\!ÈÛä}&WÝ=»~®Æš4º-þ¾ä‘ÓÒ»Õä:š=›@/Dpú9xÊ,»·¢t4ûyS­`pz•ìÊ‘©ˆ!‹_ŠçÎU Õ~QÀ–Ä*îz…#ëgSì$kÚqw‚‘T³!Jó.–U;ªì››æ¸¬–““äÕ2}¨i=ÄÏ`×lª\<5Nù[Æ íÙÞl[©Â•RnýmQj5ßéÿóiq‚ôâ˜wÕSßk Ù lMö÷Ÿ]F±emàwÊ¤Wå ã‰ä‹‡&Y¢È57¾YP:œ¢Åå¢¬Ê•¦cï–·xçà¢´ˆ"ÑƒPPåVâGÝoï³êkžâõÒU%¼HK}ŒÊS%‘\yM‘¶ó8OåG#‚¾9½þÓËbV:°Fãœ}F@ÐWc´‹4ã4I	Hû ëLâÅ±Ëb~õäóBž+=û‡¿óz}çO4å¨’"%Ô`lqèÐ¤Ã½´,¿wY{íÅD5˜j{YèÌŠ¸‡
i?fRÇ&	g9sòÞ†œ ¸òX¡â‹ëàÆU¨=YøÕþ‚:Ul%•vAnœ4 œÜÿ\vÞ 8”^«:²‰î»!õÏ§v¢¸Ê`AÇÀ³¹¦<HØ›çß‘{Îp§›ˆ
€	ü!œ–åÙ—eó[­+RKÎúJSø¦À<9¿”­Æßsè	69Ð9=«6Utý*«½äá˜Q‘ïë­…œÈ[ƒý6bn€ÄÖžaŸŒ@™ÑP»‰ëA’Ë^£O8l¢*m¨t„¸¦×R™­ì(í7Lëè#’G{²oÑ9_,õKÐLýd´¯%Þk<® ôö‚¹ï.é[——Þ·‡Ú*B]âãšî&W•€r4{_XEª›%Åj"ÉàlRÓÇ¨@™«˜-©À;àdS­˜“æ­×®‚ì£È9Ðöè\•–D6ËóÜåQQk‡ÂGöI>¼ÿ8Ëáq¾m©_`¨¨öL†qõNWë»ÀvµF¾2ežŽPóëì?¦Nëþ¬NÁs—ö&IºµÇ=™&Üõ§¿f$?F…ã&’›†µ¢´¦Ÿ<}§EÛ4tŠÿø)þ&~cN‘“L
i‰ð^ÕÒ	|	à}ùv\“Ðä7}šRw’Xw:Ìtån?GÆÒAj;oÌ‰Ñžëéa”ñ	þo—qÂãé±XCqßãí2‡ocëb½0!˜GZúóR‘è¶OÏÝŒGÅþ9¿LDq«fõŒ åß]òEÂ_ì7Ç'žÛüzØr¯v¾‹²#^Mïû¹)¯5”Tfî@AÁÃx\ZõYÄ>`SO<Ÿ¼Îw¼n®Èy¦ñØø®^{BbêÙ‡E‰ÎxÑ8g qh>™U|Auðf²½·7±ðŒ—Y³¨íò8f­Ð<…°¦•³BøŽ_[A¯·wr} úG?v&Öö÷"Á"vyåX‹«Ê°ÿ†šã_ýÉê‚2Ã¾áð7½µˆP'|¾#Ýš =yªç;býdŠÈŒÚÏµ3vB±ö0åK¾ú´µ‘¡Ì¬¨TBq—{tÔo¢çk¤aþ–¾•*ÕžÏáYœ
c{Ô(ô$Ç¢ÇwßßÞqiøà|ÂA¨Xúü|• ESÓ´0/l}Ûö>55ÎþzIv2É#	â}a_Àmï>.­—•7N~WÇbEN
u4²R§ä`ªÜs<À¶ ÒP‡•%Rëð_™i·¿JŒP€˜Ç÷c@ã9Š¦Uª×ø/«	ˆÃW@Hÿú1´ÂL¹lZ°mbÞP‹2&Î˜ìÜ 6—<#iÛÓñQÜkÀ{ßúÁÇUN W£8Ä¸iÃlsFáÿµ¤\q‹‰°GcµãUÒE~&6'Ëœ±v¿§¼ŽáÊ(]GÆ	 w]o¹ÝÇ:\Ï‰Ô«4÷äàL¿Q‰ÕErHnw0‘^l®í·KÓÎã| C¹	¦´&­pú”8êWûiP¶Õf³Å ã/I%Ùn”6òæ,0ð¬¤àäéðÃBCq,¯Ç‚°;ZÙTÔ{Á‘OÈwõn[Ì|ÙóqÈ 'dÔ¡}5?ãiJYŽÅ¼>R7«Ïž'¢(Ï½Äj‘¬ÿö´ËArÈú—Jè‡®¯töÁg².…Uˆ,c6‹Ì´Ý•Hš#Ñ¾÷A]Ï;3i5ÏB˜85±Gžó;w›…Ø(M•û¾„˜Ñ›R•ÅÓ0‹Hæ¸çÒEKoÙÖfü ìé‹ñëÙ˜ÇIUu¸³ÐO¯à€Íû¶O&U¸ÌíØˆÐ³o±dJ39›Ì™úÓX@ÈkÀ
iø$²ã©¼2ê·Šâ{ýeã21¶¤«ßBšTz{c¡ºÄªº,çz1Š\‰ÑAl['"uÿ›]¯x»4ÙNwŽK}’)†;­“ØhØâ^—"öu\ôõ–BÖ<Óá&Öbë¿ôÊ¥XÄÕr’˜ÏÎ®ö«c[iÕñ¶úš¥§!ù²¤ï&šß”	û"qÜ@ÇíœúŽÆtÚ8_­¤Á»K'ÌÑJö¤¶mÉ&+L25J­GM?o-ËL$<L‚¥íò±yº5«s5.Ü£ì–çúËiF\‘‚€Šp{<…bMòÆžF6¿ÆýÌ5á`T¾éÌÇƒÌ°µÃ™-7Ì]NZL3eã¬ oí;N’<öý1¬.$§}Oî-Šû°´±ýˆ!ÞSï¢†nÑ	üÐ[UÛ²Ýæ S °SKÄ&ñ,|˜“)nÍEb|†ú-m~Ã:mŠ>ý„4ò”eÀ—Üý3Ï¦öoBw‚z-1‚ÝkSÁƒw¦R†Ê”³%‘%¢;$´Gåh T³›x/Â™cÞ¡xÃù†{<	:YLýšÏŸœÔ’Þ8J¹³×q¦y”«{£5fQ »¥Àø4sÛÆaAÂÝ;6©*´ž¼¨©8<Žt}àƒHÅO)+ðuØwÛ9éeT”‰žÀec ®V_Ÿ¨Ëì6ÏÕ-9ÎïŽ¸|JE½Îì@€Ñ|%h ‹8ÿ/œÔ ij0âmwZã>Ã®ÒüâýŒ‹Úë¹ßyÅ°3À«ÖMOó"4d*”èÌðV¿¶p)^–}J—­ÁöMÇƒ×ë†÷®f™t•Óï,êÐk9JHÞöO¾šýâñ³½|„qþ­Üüz8².Ê62 û>&ùuPÕáy†Pkfù¯u ¥d—÷ÏCûg™h‚°3`,¸7€hàrãÔ»\“áR(KB ´DT©£ôZ`šÒ™»¢ØWbAˆ[¤ MyÈ˜cáÉÁb´w^2¨»>;ŸH_,TâËI•ÖRÉ­MûÁƒ1pæ˜å$QOžœ
Å5FÂÐ8‡ôÚLp£Fž€U‡'åÇø9awÿÕH¥°© ò¼Äb‡»q¶¢¥ý9×•Ãæ0 ¥)L„sðÝÿ~öýM¤!'÷Î‡XDyAæ¸?P±k4R@cÒÒ°Ä×dé$n9·Æm8sOÜï¨~žv•âòô0*%®bS‰<¼¥éUJ3H4Xþýú0p­XËüû5ög¦®[ÅFÂŽg@~ö½ÿÖbºêjpóú¸Ît-cº¥ VúÂ'KF±ßÕ6Áåêx'>$/ÃÁ+Ù$»¹Hsr§­\a…ËÒÊfž œKä«ÚW²ƒ[¨ÁÊÑ|0h3†V=,I{Ï65„"tFI·±âá±Þï²U‘ãžž’–…3Ö©ÿò/Qy7~ØkE‹|–Œðh®Ï•KÍ[OM½T’¢ñk|kj¼Í©Å(¿ÿd^þ¡`÷ÝûíÏóoñùqå“%
p[Åª/rÔÀu’Èžý¢F3wäçÛb‚D%zŠ¤gÇ0ã!æK$i+m~º½ÈM>cÁûhÌY¯çGÿœÚ4î:ÌŠWï]öA·7¬hZMÿ»©á­—…09þq à"{±55žó{U)YXâËð²¢ù2¡ë}[ÛTüànY}˜sÅ21GñX™¦o›¸Ü®5˜ò0•òNÇw©‘F¶è »`ì*Bâƒ"-&s¹ud bc¼hP~cN§Û¡PÞ£0úÏž¾ÚoÞ½v_½˜äËàM=Kºú
K¤D©#1™Š»qÉò/Ê¬„ÖÞUkDÜØ?Þ£7ë€>éë©'rñ—%¢ê.Õú­˜ LR2Å´	ŠXÜï|ú¹zgèèŒ…Ös¯ÔÈòß[ýÚ‹=£K³kW³¼µ(ÂQ„Ù¼cí…!¢ÞØEQÎM­rßkÐšæeuÊ¸¦±85ú¯jd§¸žüw”¸W¥qÉ%ZX¥¬Ô#¯”3µ½í~‘+™
Ó¡ÉYV®LÆaD9„"Ö[ä-,Û\ò½´g"#Êå1Ý86jEœ—3”Y´Ó« ®>&ãDŒsÎ~êÁÒg¹7šûJ¤~“µ¶NÚÉæÝÓŠÏ¾à¾ÅœhVbQr»Ã>dåRgüpú2EîîAUÇ!õ8×êþa~ŽIix ¿ûÜÀ½Ÿ&íÃù‹î]‡mñÇH}…Û¿¥9êd<\É–@`£Nygšf_P}ùi[õ"¸KàõXx¸ôj>}ra›±vŒÔ)XvƒïâJ}0å¡ª;¡S}ä©Ts„dÈÃ°Ò	VLFC`v‰®5"kp/&Ó8eÌT¹þ'ÑFšÍ²®CoRŠO«†­èâòœD;`ÿ§‡Ùo]§ì‰ECoÃ•}(5½&%^¯Œók]˜Yè×ƒ†‚,x\Ië¬øŽ2ñºM7ŒsåvÂêÞ<=p¤âV1I8ð¾“m+ÐúCµ£b¬çJzýÏ#À@Ë§×Ý Aý ì>‰B}<åq²àH¯ÈR’JsQÏÅR<|
²° K>Ù|­“üì5½P¤’öNTø›]î¿*	à;ÿM—¡
¶ºôGº<,ñqó0í4Ù¾ê50·ˆwÇÐPû²Ü€ø/8Kß\ý@"®:Œ[ÂžxÓ~»ƒnÝz[¦¦ì™º™ÏšxÍs×/·á[¿›Âäf8JÈ8©×¦
‡³{Œ6õŒ2>þC(ûfLñ¨îª-}{ùöS¦2Â-Ïœ”#ÊJÉY	¿g$–†uo;ÊFÓ¡Ü{uì•¢Á«nõô#miScv‘bBÚu`Ôô·SEÏ ú=*KgŒ–2Ê`®ŒpŒRùŸT'¤ŸîÐ™°“ÛR¿Ý/‰¶8O,ýÏe91M3ï6úO#5ºx[31Ü»ê‹Êp§œÔu®ÿìùä!<½ŒÕ§å!kf5Ä´/‘5é9ÆDão+6r¯íË#Õg%Z€±˜¥gÜú'Jœ`„5îåu({J¹rÛí”ø}yÚlTÃ–¬ò™ojw5€<fNŽÖ½ ß?2HgKb>á2¢,¥ÿv¢t–Êícê8›jnº|·gÜÈü[Äád Ul <Vü’·m­$†æ}ÐsïÏ¿I›à»:¯V¶îè·–ÿ†'E½¼iCœB'öJpX3¶£’Vüþj—ÍáAú¤ý¸T…U™£ÿêÉ0»NrÜ×¿µ0n!à<7ðý:ŠÆ‘ù¬ÚQky	ØM3m
P´drÞË«çÌ¨@-àÅqqžú;Êƒéc ž›Rz’ô?†&vuS"Š-ËŸd%‘ê½-CÕXu!³ aYC¼TÁNêzäŽ4¶…æèíÕ½mI5Þâ8äÃ ¨ª.N5—€6ñ“Wåk­‡KÐ"ÿ\e²T¯AÂqj”Aïf£Æ3Ã:ýÝŒu†4^GY!R.Þ¥žDo17ÂpeÌŸNJ¸2·	%n¨¦hBL yš
˜	m|G ¼ŸÄÄú8XþH$Dÿ íè„ÍX…e\{¿ße¼¤Ä›}gD9ï¾B³ÓAc4Bïúî¿Î5A›Ý©eâ\ÇÇeåÏÆ%OIö?“£ÊŠTWOÝYÀ»û®¤1Â²ó9>ŠçL‘ürúD³šg.×‘Å„+d÷ö¦ OS‚”|;«2m¹¥Üï0eMØÎd†ã@ÃÕ’œäQÀÀiÐÜh@—ï÷­ÆµsNf@(7/ºÔo©XÉ§VÜ¡I¾¤JŠü¿’?ÀŒºÇ;ã·n&ë4º£É&/×´Q”^M3Qhä™Boe!t¶JPŠ!9„ié%
ò`ØRûVï2˜=Þl¬%27A’=%ìæÕQñ)–s"Sü‚¨Úy©"G™~:ZTù¹)ÍŽTˆx*ÊÜÕ‡Íäœç=êD«[›ö“'\‹	ÛÇËIÓ1ÉOpDîž¾U³‹¥%¿¨‡ß»O¾°™X	ïù=õÒD7ÎÀQ»;0>…tŒ†sÁV^¶${ÔXn´Ëž}"¨hiE®#=aò’ÓdPî}LYã?í¤”•_£>+¦Â«	Å€ú'7` + ž·÷=r9ìo‚?ÅkÕæ=¾‚à
öŒð{¾ë+8õPUÎíÜÆ{ñÆ4Aë®‘úÌôyÅÅ.Ð ×;~Êb;‰F„•FcÎîmAr`hl¤–¬­š•\u'±K›ÍÊìË<ï»ú¥ p÷¯ëåBó2‡ÁÝÐ¸vCW¹Gà—Y$¥:W=E}Á>„G°3=KËàÁú¾kÚqüæÐÕ¤ÓAqp1g›·Nhù^ËªÙÿcdÀÈÕ0§+ñXÿ~ðIÙÄ#›<i˜ªàÄÓmÿ¡cÕ›0Á}ÃÔ¬ˆÄÃöÉ?ùü­à0ð;äšž’ÄœÆ´»ûù×„í/¤ÝWè<ÂÅq4%ñ!Íôå¬«uÍ°À{5a5¬šS@˜×Ï#Ã§f³%±z ¯¤òÚæøÝŽä¼¨æB1•z*‘øo•AôZ`_¯ž"½Þ{ËÔYz—0$SÒ‰ý¦ûªznÚ¾w|O
5âÈFiîE$•hã7G‘¨Xy	«;.LÀ&pä¢ðž‹
þüîóŠ‚Ê#0=F{Ivrç2Js
>);Fý8»¸"³LBŽnÏ1•Iv–s½g`¸¿m>Í@¶æìÄƒ&€ó¯œP§›Õ@pÝ¶S#yE‡hñ£iÁ|ÔÛŠÉgP<ôÒ	¹+SïGì6Š“aðc6èOÀªÌµy! Çï…jt³ºÆ¦tÀ;ˆ+¨µdpˆ‰ajœ¦À×ë–oÖ|2ËÆZé/ÞvûØJÕé‚[X¸9¡Ù…Õ jÛC˜òe6!–³œƒb‰ê `­^1FLnîŠ¢ÆºéDÃ^ÅPÍí .h„yw_‰nYu¡×ù-+¿ýµ—^Ìaæ”´úE·\-OùTZë€ªÛ±lX=Ue˜Q•5áevïÒ¤·ºÒkIëó³°"tCPÏIƒÊoø\$`ó¿= ¤]8ÌOßA8üëÿå^e--J4{(4ÖUCœÓ ¹#%;­+Xí±¹3’9Ž½@zXž²_µGKq0…1À—ªnÖRŸÐö-j_²(¯ü¡Ûu-¥’% Šjl9¬àl(pl	Õf°õua²ïãÌ¯´4P–§Š»J©Sí É×5ûn¦®›úÙ®&IEø¯¸ðÛd•¯—OiÍù°…]žÃžqKj£å¹S³_(n®{Õm1|#¨Ø4bùék0úÄ†Õ¿´½©s½ép ®ê† YZ?rˆÒÎ3¶gˆöˆ„ŠbËç'Õ¨ C<™~fìO©ýù~Ñ.?µÆ¾½:wèX¸A=CÎ÷8€v¥ùt¦ÇA#õ@‹Þ¾D9’ÔŠç ÐU˜}G§Ò—^„:ýQeäïù\&‚È7”òÚoè6³:ï¶T.ëo~ûÂŽ¹§êB™ý0NU<ÿ}µ¹Üðü7Ô©v˜Éiv~j-ßÁ?V­‘ÐÖKí÷¼SäÐ„àcÔv„© ^Yç½YIÍêõ`nS5kóBp®’/i¼áõDU%SÏ7*Ì­ÕŠyv;qXŠßÛb•Éýã‘æL_7CD‰½–éãpUÁÄ2kdx2mF/@ÓLœ`Ê¡ ©~sñzìœ*aàyßçZ@Îë5ãpƒá#¿ÉÀ2ïéÌßêú5Š\´yAI”-UÆT\x=´Þ˜6{>Ãû£îÄS¶¶Ox¿|ömŒppÜÄú—1¥ÍÍzØÍ¤+Žþ n›IR8w‹ê;˜˜Aö‘éì|üc0˜*OQ´ê!ªÐ€‚7G1âAøŠ:wàSÀ&˜Uzz²cÆRÍZw&±E	.Ìj:ûk7Í6Ü¦Ô2ÂYËÓI†õÄ_ºGI¸–½š%3og,º‹²Û|cÌlB;›¼zzUÌí¤dØb:¤ÂêÚ?#å«jtî‹×Ïøð|EÏ‡H	B«ñªË¸Ì ÷¼h[?F+,¢b‘&ÕecÐ_9ÖIýÛÇ¶Y…'!–á]z°ú,ÈVã-·eê¶*‘%ÝFnD¼šB3â•óé–*VÕãðv½—}Ra¤½$<`Í‡;dËæ(¶7|*Î5b›ÜèYªÖ“ñ€Ž‘-hÂ] ¯Bø¥ßŸÕ÷­.ž^ÓX)­‘HG°ÚÅÐË‚ÝVé~nE/
¨Í`ÓcwõË@n4NrXzÆaË Œ38ùÆ˜X]Cÿï=kã›Ã¿DÏŽÈ‡0gª%<Š¥¥`ÜI¦áï¨Ýó=ƒ–ëÁåËPOCv¢6V²§ÒÃ:5;M;RÒ\¾ùç›°úE"š)Vïü±Cåö”•½‰Ñ¡=£V—ÔÊ ¬sÃv(W>ÅŸ\º÷!*öå?ÈðHbê4HŸ¢-þD”¶êïýŒ¬§ïÇBÓ]l4 wåùˆ˜„ñŒyæ®`Ëô²•Ë¬e_lmöY¿ÌªŠ½¤ØyÄ-³Àª'ç|ë«²ƒ"Ä6jÞž9Ü-…9ÆWT+bø"ùXXÒQ¿ÙÅgÓ¹önbÆË„ÙÊoÚþê2Ú®ÎI]¨VÊ‘ýfNä+Ç£Í´,p’“ñ+»„íÅÈ¶®r‹¿™½R
¸Î0C¿,è…_è–øþÖw¨E±Â$j±<mÝœ/YR'·•Z’þÍd+ˆÛA¶Lvõ¢¶%±…48En¬á¢¶-¡\ƒüau‡Ž‹ÚËg_.Dc½7FøQ»Çð©$Ì¶5xEAW„2¬Í²Îõ"i=4¥¶*˜ÐñŸÇ‡mÖ0é¹C`–½X	&ša%jJGcÄ9Ú‰B¥R8GÌ–9©27„²,¢™¼(7ºJ7mN*¥×¿ÖaI\ùü³¥í1ŒVÄÊß}TZKî#õ³i!`Æ‘½OrAAtù(Óìür>%“±5žºL?‰ó±QOÉö"¶yeÕ‹$p_¨h¼T'²eÎwùbé!”ùõÿðõýO˜ôaW´bSªƒ–$—c×rFÃõdØ“Fì2€€å„š¹•­¾ô^ä¾¢ÚÑ"ÞO`í$†hoÑ?ãN;I¨3JéÒ’jÙCCu*Þ¹®NgãéÉ$îÂUÛV¨YMÔã$ÀWÀ_NžvnãSÍÔ»—…ýä³
h£‘—2	€Ò‚ø:Wtì÷c”L„n :]>€}E<ÿþL‘0AÝ5Ög7wE·F¯?×F~¶4v»DÁg®†©'3A 
;£CB™ÆHˆÿQ‚ýÃ‚tHÁŸÂG|åÒ&ø°û/r<]°*ÂuJŒî9îü¬{òÌa÷ž¬ä;2Ò@šî#6z·|-¨ÖIí¡Ýb30@G'¨ZO±„ÙcÌšJßo`ZÙ	åÄ˜ˆœú÷ûQš¥¨±E$z-¼xm&Ý1ø‰Á›Ä%—·‚xÇ*·È>›ŒGUÓuýò)¾ q…¹çAD‹ºòÈðMç¢—þë´e2_€i¯…8•RÔnÿ[=:ìÆaïÙ+)ç°¦Q•×+¯ÈË_Sé"ÿ?-r³u[Vî]GQ	góœiÝ8‹ôØÊå…5ãÒ3 ÜÀ£ßw*ù°$»‚;xmp¸ù›Å:-,™\HôÌ\Ðºìžý¤œ9Óì¤/š/ëBFãm´æÈöi¬–GŠÄá#í¡®p¿w)L mò}"ËM¯ã4UœA²!Édó=r…àz¹zˆ\üVhã)ÿáßqªÒ(Ø$²ànDê}i_5¢ù>k±ÇŒ¦\u)ªú XÒ»ô¡l¿åz¡
F1WûJïGÌ@ž6‘$;>=*4Ýßñ¦3KÍ€ë<ÖÀRp—®jCSôí1À´ì´yW¶‚6lÀy5Ïc0J~Û¿Ï÷ŽÚ“„0Û–^IÚÉ7cXüh%÷é¶Pª bó+é{€·}îýSùîžC¯~Š]“lÏÁ»UÑRDohÿÅª‚šä…–†Ð‹nB“©ô[Ô—£P‡ÆšX°W@)×{5OÍèbÞ,Û‰²‘G‹dxstMç„œ›eÅçø	™2uã9áØIæ™_#âïÝ: ·P1îï ò~UºË
·¾:;×~Óì|¬#‘	4Åi„Æha½uÕµb Ü£mX„P©‡o0w¾dÚw6†«OB©@Eö;$­ãíè Üb­Sô€œnè°æ+ð*çþw¥ 		(‰fžèùXxAË“‘ïg­òsù£o§÷] ­Kùô~WT9Þ0ú™×B(kâ¯ËÆÕ~ç\¹`\3G$ýNñT>Q¼ùt¨Ìß€Ö\Áðï%‚áëNtS$‡E/E,{´üGé+Iáè•«Iøîf_‘*Ó®&@ÍlwA\”Ø»Ú¹G¤{ÙkíãÍ€x¬Ò‡×àGØ¸lšƒÊl¾JiQCR4…lã‰¤óp³Îª‘¸·Ü+Z¯ÑöIô`àvå/¿{Ü¾mÉ«LœíÝOã¦þÛ	Éîž@©ú0°ØaÅ9é†”æŸ	…7Ò–ÇHYyäï:²&n=«
qÔr'A…hëÓ¡ÓËÔÓXõ^½Û¿š§jV†ú’kvÉ>„VáAÜá‚]1S;âVM™âá©§b­¨³¹œ3P6<ücZÎ-n”X8-ëƒºñžÊzžoº°aÏ%€Ÿ/¤,–ŸsÇ°Ö†è8(¹­p¶Åÿ–1¡{£Ë£X2«vŸ‹õì*>KŸâ4ƒL˜é¼ð £•ÀäÌnµÜ;HW¥,û#¼qÒ´z€µÎ’)tg›Y—Èwçª‹+à/´=b…BùÎÆÞÜT´’•ó­®ff³‰ãúïGŒ„URÎùÁÆþ“ÓÔ!y^Qlvoƒ6¶˜¹hÅ4x79¨ª–èbùøGU
Œ|Â8;c2#õd*aºhÉQøÇÊn±š˜äÆ—À<ƒ>Ð-. èÐ	]ìöÜï ÊÍ	Vv3á"w¼ù~[5K~úÜuArXÿ™Ë;,Î¬/X(BäYÝ8ÚBÐX±Óüñqû÷=á ˆ²FÍ;<÷.¢q%°ŸuÄîR•’£>f°ÝpÏ1QÄŠMŸÜôm1ÿ/ªÎ«R€Ð¿dJ7ßœ«mzS›AJÙ’5õøÒ9V–Á}wþom¡Ø,«8 ÍØ	ž~6ËAo™«—a™~B×‚ ¾á+þÏ-j÷ìO‡D:aXõÜÍGKþT:ðlÉÌ?—u€›c¨Ý# ‰ÂZe)ë<ó½ÝºZ$ièúî÷¥j|ˆQ¸(ö2.RH†ë5*·°
–W®ÁKi¸ÏM•µÐmð‰!…3Ë¶CÅ°œ¥\ƒÈ£àÜí_VMûŽí¹Q…Z™)7®ké}r¾/ÞJx´OÚ<š„¢1¯09Pvp%ÆÄÄ»øö"€•»h4°šøådé¬°±5z‰”U›†Å'7t+¿¹éÿâR%hp,‰…4/ÕjA–bÏ_1tpvƒŠ±Ï£îZü¦Æóš°pÌ÷e¡éNVvJµØxî]‚²ÁÄ }W‘'ù~d¤¿	ma­:/*Žt9ä$ù¿‡>	1AÅ¡˜‘–¸ôð¼mZ‹“1¹#óÏ˜¸@ŒÚ|M4&ê“÷Ò$KAÙµ³[oPôT„üÅd’ kù =§^GÕ„ëDˆ;Ý<Z¢åÅìŸïq¥.Ë6÷8+Ñ„Þ¡-6  n”mUöJ0Ø4U{øÔÛCd•Ô(,puT‹)ÿÉteÄ[È»÷ÂóDô?ñL\ºŽdAE×;Õ+ÎPeT4ÚÝd.Vi—¾ó;üBÏ8}íFibTxI«ßÖÇ‘8¡<ÃÜÄ«ÀJªûïS=÷è§:œ&n}+¦O—¥%z÷_y<Â*µv9{•JØR2«ÀØ4Ô›ë‘’#GxÑº3Ò¬¬ LyÎ™Çˆ„9eU )t¡usë°\mÐiO	Â0XZ[÷ÖÎ$¥$çò(k€EìãÕœ\Àé{Ã¥Ãf¥%•“D%’k86KùTD †esboÛIP¬™òZŸz¥o00ÖjVŽÉ+}ßÁ¤îçó¥arcø	TõŸ·{õ5p¹wæhãÚPØÀB‚S5Ó("ð@Ëç,{•ÉÛ°.Ú¥1äÀ÷ÙKlÚ D 2ï·Ë‡’ÊûW¥ñ57tÞj-— e£›-‹µÖýU”o½µ^Äé-wnà”f’²Ô†îw×Wd:Ò<ÑëAâÊsã=KJõˆŒLªQ‡ŠTÆÛ d@õ¶À+G&så4ÍéôŠ•|¼ë@ž}øjÍO3ËJ-|mà"Tâ>³7Êî59Â¡,Y;ìK“Ä¿~~¶f3¼À\zÄu`‘«~ZÏÆ$nÕÂ@qù»àìÿ‘B,_4¢8—‰
&8œ¾‹z;ù[€6Ûöûj~µf1ÃEwš$ž^àË9Œ-øƒÇeøu¿|_ûR¾³$ZÁd'»ùÿcÎtr4þnÆ †Ç=tî§ž·´ w[äaýà
1ðO-„ÜËÝm`{Aƒ~yn¹{5
­làséc—£Fmú³“†Ö€3.ÍÆŸB\#ýdÜe„ýÞiyÔÑ’š§4Ê,£ŸÜ¡§ÙÉ­Þ#ïw}0Zß­{0RÉmvôrÒ(üæk†×÷R§Û¶_m–‡pûþ	-g8^†:åOÅÃš9F;–¶”þÙû9wxô®a›ŸÉ'Óv&Â½$QÁNeÎ#Ù2™3ƒß›9Ýw‰ï}S”`üŸ»Íˆ'õ^q¢‚ÝîÆN”›Å_i@©jêbnšÎ¼½BŠì-OK(’u&¬­Ý?“æðQOÒâIcÛ4¢…$¬oEÛ*nH]y9Áq©5sjËê_ÙùÃÂ‘U®œžÐk‡zšÁ¥/vô]üj;”Yëf®°jÛ´¢·ïF¤-ì&ãY?%‡²wÌó#§Kä‘ ¼—eWÏ™qFqÄ¥„Vánî²c2a<&Tu8lÅêËK”ÙU6‰ùQ%gïAÅzø[¶Í•M°»+Ÿã…’ÒÀéñX†6Ù?'9•Ã!sðÜËoÓqªšòeÓ H[håÞN”s’ÙAY÷ÅõŠXd+:Êštš¼úgl~b¦en›ßVHæ0o7q"ËÜ£ùý”ÇÞ
Äÿ& !˜Á\ä’ÖÓÑ9¡^û³EË›GùyiˆæŠ\Çü«µm*\´{2¼ÀZã/±è^ù>25'Šð© È•2t>´š¹'%P_’&ËÜàèB&Ë>ºŠ<@´Íöò¶3¢È\À¬G¡x¿ð7äÀ‚„C|y•Ìöå×FseÃ\tv52û#›Š”kÖýÎqÐ
_¬•»áÞÇt÷…Yjáz@8IÐ}}#ïá{jüþmaöG¦%ˆ„¥î"G°¥›ûiU¸Ök·±Gpù›o?íò7©¤j”CÄrX·¬-Á"^åš7V eýµ³–+ÍæÜ2|jØÙÇÎü•ž"¨ÆE{l¶.€åMtE´Tg
\Ö»‡vQ­*Á(<ü4Î¹VT9`,ÌcFŽ+ƒÏ4ÞØ½UI›ÊøôÉ®|ü§4ÀÚ&DË§µ„­AÏéÀ¿™•–Lÿ@«ÑUˆ0%8¤Sò….úí}ƒÃ‰VÜàà„"K[¨í¯ý©Í&ãc}ê‹´&e!J@ve$¢=ìÂ«?^	Û5£nŠTÑ!ÄY‰æ|ªÐ`5Z1…gzWäé»Q9ªë›ò'`KžL¯LãH .‡³|—mj	TE£¾\yÞ¦Ô×É-ëOŠº¨b´Ða6´­¢ªqd†ÔÔ›e Á(Œ”M_šëcg;úg·î~v„öy„Ú.V¬HùŽ˜Ž‡û“¦À9Vñ€s-Û×¢(Œ2XÐÀ|?ZË,(µ_}÷]{óÁ}RÈ²H U’|ÿ†!N)Ñˆ}x EF·þ‹Qï¼†þýöÝ°îùByìãW,&@ÈzLðµ?èc·¾å+žø~6ÅÛ™2/eÒ{ÀA‚\LÐÃ’dqèþ }o«ö½¥]ìRY½ƒÃÆµ¹¢ž–[	I¾Cº%QG­1Ì¾@¨Þ_ÙÌ5oö™ûŸ¾ ÔõpÒ@ØûìuçžCâ¡F¯‹Ç>Û×C]óX.Ù,âgÆ9–@—í—ª•øÛLà°·9œ]¤ž|êe÷¯›AÏÃ;8Rº:©§OÊEñõ¬Û9( žÝþSkD¦ù2Úý„q;¢Ob]™N…’o÷y¶Ø±áˆB™¾[ÀÃ“*j	'‡¼6×ô†zÔ GÿX*Añ¿+ò`,\ç½  ÂgyL¨Óèµ=/kó°Só‡dÍ(ç6Q¬Ý=Þ îH)}N
‰wxf‰ªÄ5-«vÚÕÕ›““Ñ¸ÃÓã`²“#OÔ‚óðâd«YVŒÓ3,£g{©"x"$kZÌRùB½)­¹Ã‚T¶Ê'ofv7HÓzY?k/ŽÁûÍÀx˜À*M”¸+ÔXvNèìïÑáI:f88ýŽJûµ‘ój/aùí, `¶Än¢êükæô¿þk£{Ã5‹mxOtÆŽSŒÑ!oa=Dí2seGMSª$T<¦¢UqG„€97Ï8!ªˆ‚³èæ‚ßíèFïcž°úc-œ¢z[ø!^Ñ³CÍ¯Œ	$÷n TInc2#`«l•£ðÚÉxkš`;õg^©$@ÙLYÜ©q×¾ü"å”€„ìÉ TþÕ±º2£\§sé¦UlÀÉFŒ¥îðIgr]\´{õQÛÚ	P™‚Ç½oáÖ=•bÌh"¥!bõ³:m?¨Î<Î¹™ü}ÿë<«b6ãVné XO>†¤q·‘ünÇš¯•¡¦µˆ™Z(·úñ¤Ã2Ó`î§yxŠZu›k(ómÔL™Ìx©¥Ñäü`z§±Hb™ÝfÊ8e†èE::‘Ë'”;~q)Ð.$C(ªƒ/‚A2¹SXÊ]L5Q2GQuÀÊZÊÞšüÑêQæ”~€ú¬ñ¼"A„‡øƒZï‡úN‰ÿû€:»Ë\‹G—x!
nSòqÌÜl;Nýh0+s²ËŒ€ ?¿ûâ¼›aµVr}‹ò«Ðèîƒ¿·7`«|î²Ž‹Å
­xÏì:ÝB?ãÕ±¯–îv8|-G®–¨)C&ûgÌ-¶}™öóÉØ/¦Ò·à(–€©‚Ó™bëã«ÐšLPè½$Â¡–Úók½²Añ˜;PpúÏð‘-
’»@t{U!Š½ÏÞµÌ8?# 
f<\è±ÚÅ;É8§é}šXà..¡Ì#2u8¹ m<1öqÁ=ƒ;PlïÂ²Y'•¬¸»XØ$³¡¸ã ¬
=Ê×3â:ÍÌ&Œî¸nÒÂÙ(7Ç€q=e‡ð–Å”G¾búûh—)¹GÅÑWŽG’ó‡¨{¡åæo‰¬’ŸÜÕ=f~v¸œGsâÄX,®ñz.Ô7dÃ=Þ¦Ÿø1&WÑ°ªúºGÅóÆ½íö>äê&\ Wà®Yyã±f^ô/×NŠŠqÓ”!)èDÊ°«í¦¸[vZMè(?n(³Vthþ
û”›'#¤Ž%	‘ÖÞ.s­´Sí:†t)@ƒ‚£¹›$5©Ð²ªIñ×››‘sî,‹Ÿþe€hànÂ^‹"7‹¬Çz!¯ÂÿÀŸÒ„ÿnLƒæ‡1E€B:]b"‡6¹XR¬Cojçqý®Zl²…Gãá“cÛ?íæÁ:¬‰|BïÃ´.…¢	é¼¼jöö%,Î†Ó²-¤,+Ÿ´˜¶eŠ5Âáërm¬¼B!â=a Yå´Ñ€x«/ ¥SšX7Ý05‹¥—Æy<´ûçÄþ}†#ÆØ š§@í€±P<{Åt–§ò¬îKÑï­ËG¹äÈð4rÂ^´Ì«õ©~\ð
Ü˜A)/m…Y$ÚîrpÞ1ƒJcðå#Þd ãŠÄ£ž¸êÊç’%„fåÖÓ
ƒ¾}é'–wsí‘·=°`È¹SÏ;À½Zøà¾FŽÉ0ý²a“¯ª¼[ ZyÎ@w n»=/|‚¿×7ëºòÞ¿3Ú8Gó	^Ñ[iBHù‰ðß|`¶3u;ˆaˆð²#U(I›A«û(¬IüI%5¯µùú%ºò<i~‚ë=ä"Ñ¡¶ë!’R°„³õ¼¤›iþÃœQˆ%)µ&ý®˜f§2•†Å¼2Nœ;
Ñg’×“O¤2 oËè©‹ÌL‚'`|I*»J‹bpˆ¼éò{ÚØDãa/‚Ò€¸½Û¢ä³J®ùoÿ?šWÛ;/oRé.(Ô²(7óBÃ˜´¾óø‡G@e¢¼ºÁQ†<•Á5›~*2búƒ aŸ#‰Ü€¤wDé÷D¹/9g®Þ<§Mƒ)•C4¤Þ9¨g<¨æT®ä±ä¢ÀY¾*mgÊÑ³ö8áCz°‚µû/]N°+täúåÿ%ì>¦ÓM¾Ä¡ÿkTùåƒ8Ú—KÐý¾`tQÝ†"ûþ'ø¸ZÂ‘¯A’H³ÒoÓGî¢­…_QbèÊ¨­—&¶ø%R¬~SyŽ&Ž80,Ç®äiÍ2IG,p•ÉƒýÛÅZ‘‡Y“[o[ )xT¡Æ³ÈÜP¥AWzÐóQÛÊ1¯ÀßÇˆ~:“Kì;H0SãJÀÕ8k±ZÖž®§Æç¬yÚ/8¸ÆþW*hw“<¬ï¤ß~…à‹Í˜N’ªg‘ÝÂœÝ>*¾`!íÏ¾!J°®·5+~Ý”Ø&Š°#ðBô(P©[Žlþ¥dŽáAØP¿2X¸'ÛT¸þ¶ÅOƒ¥#Taÿï°7A ÝÇ”ãõþÃíIN?‡¡¶¾z¯ÊÉ™uÞ­EâwÊ…'×íX -YÚ@§	érË­kž®„AÜj­
¯…³MäXaßÝOÓêo4­É Š\}4«·_ë<ŽA´._^$·ca+WSn¬b¢Ac¥Í\>Hq´[`Ëo¬XíÐ‰lËëërž4>Ð´o4ó¾uŽ;î¹ÿW;°±Šq•^nêcr?t­ýù¿Œ$žBû×fQ”Ïd].L¥(×ÑVƒ:÷5Ç¤MåJ,™¤ø6.›ø$8ÆeÃMfzV¼@ß‰+\®^âýcwuÀCÝþñh~ Èl”Ë ¹-Öî`×§—;¡;€VR@ŽŽàåVhÉåy”‘d²ã?	Æ•S…¼mT>e¬\:H30®2KZ°…¡„m¢äD¤2pA&H’K2ùœmÁ Œ¿*	r è’&BúŠtkP¸q,éa‹©,=·ß?¤Ô
~9µqÓ´§.NZ«œ‹CUŽiãÎªèÆb hkjAàŸ¦¾™„#0Ö5áeŽåõ]p§œVQ3Y7q\‘÷×wÃÛŸ´}è˜¹C?ù øEš„ú6.hBý¡S!]Å0‡ý~¢¸7Æ­!jÒ$Š8‡ï^lí„±Ìne‡wIgþNûÖízÂe‰ôkieÚ)·ÝrøÑùCI7u'Ò~b‡ª°ÅMœK·$Çd/ï™ôÓâtU5Úô’NCGb¥ŠÓìÛ9ŸMä	yûòäê‹€ç£NT­ãˆfç³H˜àœ/Ø	˜V>×ÂÛ"Œö-àÿæ0+.9Ãõ½q>7\œÓußD3@ãEXíŠ‡Aåb…ØXøñÄq1À®s3œþw˜ÅßÙN­jï‘° ÑGÂN…M¤ç—SyÞ-[íT½AN×d~Ò½M¤·r.K3o¨,²XávîïÙQwJ­LÏm!—£ƒb§8ç¢©W†‚G¿GìŸÄÓJ7w¾o]sL’Ý%^£"ºiiWœ=9ft,´;@m©*2ârJq¨ÃªJÓ»1¹þš÷@ä|Ü[ßY¡g%Gš²îÙ-
=ŽÅJÎ/>¾oQBõ-Ú#r×Ï³{‘.ágé¯sçøùFˆ>»…ÂS£°–¼Z<‡³‹ï«+çŸ²ÖC®ªG/§ýMþªÁ|liñ¸.5XÐêï:æ=˜àÜjóägŸàoÞDZD5Tÿw*Ž{=á:ü[œ~ÞB(p¥A×	‘P´®UùëÉióMs³)ÒîZ¼¹ 6|GÖuWÎsîÎÏ'Œ9‹švŠÎ¼©¾wZØóU}ýs=€{HØR«6eZŸL+˜Z“I«*}Öijh~Èz@péø…¦K²Wè¬äÝ¾_°q„$æ¸ÖTž6fgþBhl)ÕÿžÕ1ýÅGºYNü;’ÂSïˆ;}?~û &HnTQ”7úpå®Žn|9r°»RÈF'\­'¦ÕwÿQ" °I©}¯ªVí\ çƒXÇW”+R[WÑ}Ò†ÆÕr¬Ë¤‹Ü…ce*ö× ¸ŽüoÒ¹$þä	dÃÀÛèR%	Côz“‚oú@ÍYø×j²ÚÄ§P™§=h\Çk’\7T7/Ð´iZˆ»ˆIAæ‡Ï‹ôH-ž´ý ŸÛ/d«ÔÂz$íD°ÿòV”f}\é‘Í™y–‰yÏÜóîýÚª3žéO‰Ò;‰î OÏUÿV&Å
¥¤gIŽ©ØéõeÇƒ	Ö¦ŠŸ=óO_ÉhO?_©dÆYuÒíc©5Cºåj’zmW¾Üƒ"/Îp"©¤UÖˆ4pqCÜÓâ˜ýÐÕ¨û>rNÉñvûý>^„õ™àzK@ ¢„+"ì]Ö¨MoÜ’ŸÃß T~5Ý×áú½°Ç¯çv,”èyî_l¨œd¹qŽ\Þì%‡B´íãMñvwÐ©]ŽÐ`ûkW#`¶­ƒ§µ]Ú ë©0Tì|©}}K(DÝš@»å,7à t}ŠåÇÇenï«ë
Ÿ)ÀiA°'WÃPÛeÓy“½´ÌŒÜüÿiøÝ$›ê=`EçØ©\vlTÕ+x]£ªËò\Øƒòóß(ZÜ†Íxûš¬n>Î¿(ö°Àå¯Ôa½qì`ŠKF³
uç¼iï¡åd¯Ó„‘ÊŽ'aÏ/ÞjIy”tÙ¦Ò3Ë<‘þh¯LQ¶@}çâ¾p©½ÛÆK;@_5È©„‰u™ÕÛFvyq^bË}àMù<qu[?Lú}ÔHhI…Px!¶]ü]ÛhgÃÏMš«ûÉ¡t˜«wé0m‘äÄŒf@`?Â×-Uò<‹V­Þ	¡öƒNá'è)¢2j›YKêÔ8ÖJ¦Úo¿Q´hüƒ‰Ë8þ*Xžµ|5U7¹½Š¹E9KŠêS–‚øº–€Ý…Ê1&¶2Óëó}Õ	BM›k¥_rf¿j‚ŽîISžCí†•Ê‘NIú+ßL p¶bª÷dõËA#¿,ðl[ª[‡½<G0®VpüæðøìPS‚:pLnÚEv”"Äg´%êJw†À åd`íày7 5Q«ˆWU!›Û¢Þ®Nt+3‰ª¤ FuV˜!¯váFàH=‘éõñá¶(ÎQóŠgð!ØR$J¨%7.òƒÌ<hÙµŸ”`öÂØ”›÷98X¾|ø§ð¢ŽÑ+«WwMþ'é «£ûÍn²þï³2=ÿÅÈV0‹2³5yâ…uŒu¸0ß¿H…e#•HÕ½ˆsˆáP²oÌ^DáŒç{×AÞüJøÆ`\ÙóP©Nã¨K‡iýK<¤û|[6A&waFa¼‚m1`¶¦VÑ[a)î­X¸‡ð0ÏÓQËÆÒæàWqw…¡°Ñ&Ôèo¼çQhª{Í_P[ã+/NÁÈþ^ârî3Ú«GÐ"á„­ë>¿ìÄjÈÐ7ñºüÛ‚ŠåÔ+ŒYPüæpÙ—Ëÿr£Ï·IGt¯õ©‹"²hæºÄ ¡WYê©­LÎtÖÿíÆ§ÔE°º.•Ç?Ôá“	@Z²©#¯ßdÞ¹9†»MÆ-ˆ˜Ý<ï§£×qí¶©Q2ëŒÁFyÚ8E’c¢oŽ]º©˜Q”*Ó®ãq@Ìûv7€/ä¢ÇgÓì‚”%ã¿¿TX†æA¡€ Z:Ÿ%;˜ßÒ`4å×B[Cý9r”UZþI¡'[[zY?ÍFð"œôq5¼oºy¨™¡,äf ™JGnéÿáXNa‰Æ*‘ÄÛçá>;;I‘¡v)ÙŠÎW¦ Èe¤Íý&*BEDpºÛ+šªs®W·¦¨Ðô—ÔßÝ3]Ö!³ Ižlu¤³©ô˜üèµjÊ{Fý	ó6¿I‡Á.%áE9>K¼æºø‚sÞ&e¡j.cWãBË_æ4	é\’iLÔãYì
¡[rR…x†Ê³B"BÆ©›_WFML&äÿE³('æ÷[lÔƒ·’¾mÕÊ+#Lÿe˜µ§OÓK˜†CÆÁ:Ï„¥#a£R5~')õ"ün.ð'?1"´6(vÆ)'rQi{Úöûª_-õjÊ»F˜Ã›<ë KRƒf‡WüARÂAÄÂ±éq7Ðf¶ŸÀ±‰÷=`R?~›Ü­žbçu¤EÃ]\	ÌNš¡äýeÎh=Ýõ¨“M€•kæ¯É†dn§',6¹£ÂÉ@‰w]pÅ‘áÏ¦h=0Ptˆ?ôÓ`ý‹âz5´.D‰XG	Æ\¾Š<Ø0Nñ¿6ŽCfGÖNØPK>L·kƒïå<÷fæÅ9×=r%­]Ó/×^¼VÚ	>ö½õüS2g·x÷sÃuÊ¡ÈˆÕ[c–j–Q6s’]Lºf™–é4{Ûû¶Mq˜Jëk¯Äˆ1Áª[-h£ÎÉü„V•†
\¨E¿Ö¢jËp¦5ÇÝìx!pfB¸Ìê•ÚõùÀ*×_rgX”Û­ÊÓ0µH"Þ~ÿä²™ÁPh”s­þ1¾@™åxóx@°@Œ_kD^‰Û'\Ûÿ.’xárI½ÝYPN°ºM2ÄÙo1â`˜]Qúc§3¹&þÚ%™§§+Üëa3€f3å¹¡*`u^ùe@÷–hïÑôê¶uÝ˜µwƒ°E—ûH³Ä>ä¨œ $w?ojŽ
?¿ÊÇˆi¦fÛ¨`×âÉ'1të¨–ŽŸèÀ…jÆãÙnÀTÑo¥KƒBÕ¤Å¶( 7 ›«Žó0ùLúà€·ýÈÙ&rIÏË¶ø’X\[«ÙÇ5éÅMn¨š&ãã_Óµ¼¾Ë¯¨ž…Øƒ4ÅïV·å¿Íw®{³´ZÁZåONˆ:,³Q²’}\½m´ªÙb<XÿpJ­…›’¡âdT¨q6üÍQ¤1x·´>‘â ˆTµ²ê±Ë»d]OÂrµ+@ÀfÓ'¿q£%q9OäzqÓìð¨‰à¾³¿Ý‹hé!ÚÜžL"¯]“_™ú +cWp7ßäbÓP9RÞ‘ÔÍ»….úwû5ùl#˜¸Æ˜ý«é1‡1°d¨[5fAŽ'¥ÊÂbOB$Çâ&IA†`:Ç£‰WA"Cdáw$þ|Ñt>,Æˆeÿ„V;	OËþx·‰CåŒ“ cZTHŠ=®‡ûígk™ì8“­«äÊó’^óÔãßàÙWL¼­wPƒ§yúiƒI­¿¡…[øMùadŽ‚›*ºÖòbê¡Y•õ"ršd¿õŽúÓÆ†Œ¦v*4†û›è¥‡Ž>¿î(J[¢¹·kÊç§¾Ê Î‹d	T÷1>‚Xüá¨X #.k_´h7~‚ïtZÛÝô·ŒViªÑÛQ¾èü“ûóü¹ýðËØažÆŸjRÛÅ#÷Í‘/rBg®û!ŽÕÊcÄ|¬›÷ Mö0¿ÉÿÔÑ˜¯Ññ[/z-ËªcOîÈì,0ßbm\VtÊö5¬Ä±œ3Ph—Š8Ð(•af’u;Nž&š™½bìd!=MJÐ®i·°3F mN šŸO~_°|¶èŸãìðîºö?Ú	h×¯BìÍƒ‘ð‘¾Ôƒ3"÷2ˆßPÙ«$•XÿÐÊRV‹+zÞIíò²A…xð†l2G|_ÐþÂœºƒs;¸iœ•~CƒQ\˜©Ã³q´æ>âÎH5„Xhžßè•|xë!…h“(þlCŠg]ÖM~ w~‚=ë×êý^T§$ä·š†dƒ6!‹8T¢ÈãÍ2(bº6·#>ž’yjÉ.dp‹Y± t&ÏE—IÖÂß ‚OÍ!$¹¼°ê“¨\Æá—!=8Œ¹êl^aQšzÊEy)ïÕP	cP!§6w/Ž7Š‡¿=§Mþ(Ä–‡#Ó¹î€6v?:Ó/FO!u˜´œV´Âë7›&>ð‚Ômù4Õcv6[+'O¯c?¶é†©ÔHt/Ç‘šTa´;rænigªPæï²å"oìãë4$<,ŸÌÈT.¬°© æùùôž—8þ{s‚\î‘…æß+,k’èÏC<l5_âöƒ:c÷(o‚¶ŒÕÍŠÆyXc=‚iž8^§½0i>Õ5ØÛ¨L£¿a[ªlÉ+/L>YQg# FAöî¿bméýÐž˜ÔW``ROU<-óÌ•Õœd÷ˆj}¨Gm ~aôQ¹5Oµoh;ŸùlåäR"µ  ìÊ¥		N[ÎÆý¦µSK"Šä0/Ì)ÄxÏ"b§Þ•zæá€Íê _Ã›ÖGêKfÜ„~(Kbƒ ;ò•¬ó™v£ô²æýš¤ÆlC*ÖÎºŸ™õxaŒà<è¨¡Ú	’V[jÃÏMÆ&@{Ä;ã«>ÂƒNP%ãlØ íKbQû$õ‹ÈJ`Súv7Â¯	áýË+¤Ýiî‰mº:ûvÙs`VÆÓ:(€n—’b³¾EZ¢sÖ­Ð Qã¾ýF'Ø®w£³ñ4r8ëS,bVqQßÍÈASŒÑ._‰^>- Ï ¤’#	ºÖá(3ý•º,I‚Ie?•>B¶Ç×Ï6“ñª·9?Ì¨Øvs¨T1Å½%$¦«h|Bz9±æªÁ`6Õõ-Ip ÇÞuò–]j˜æš€7Ù×-Ssä[Û»ÁçÆñŒ²™p¶gF@´ábeã‘à"—X@Œ =3Ês%ý) ù?&HN’Ì¡?5˜ÛìRSŸHãGó2¿¾‘lyñ@ìÍÙù ŽÑ±Su]·ºª]’ùÓë÷ÎRúª#¸¤Æ<8®^Ð6ìf0BB´d W­ahDÒ©“=îK€ö\¼ÊàÅ!œv>”J94l!8ã]×ÝÎÜñ¡1Mjm0ôt¨¥ Ð¶»¬qpjc5D„Üœy@fÖî¢
†¾Èº*õ‘ëBdY”#êi#ˆ€%B>^ÑÀýŒ~´éwèO@ÆÔ‡…sYBvðIt!ÒÀŠãUúéèðÆïiÖÓ¸Ç8](Å*Œeý¤D6 gµý½†áÔtÌ#VHÇÎ‘Ò¥iC·;/˜å!ßèþØgžÒ•°ÖÖ¢<Ü7œn^CØ¸ˆ?FfGˆéu÷÷î34†çàCm|Ùµ k[üKF~?;™ŠÆ,ûL/Ý¸ˆÁBt†d9
‡¡|~šyÈ&O^!{s*²";"‹½dsÕÀ'òõç,›¾¡s%ÓÍK/UÃü±¿#˜>3`ˆ'÷¨wÕÿ‘è˜ªe™(¸J»ŸÜ‹šÒŸ{€yz¾žŽ
–ŒOí6…\0ÌÕ$jÌÍÌ”òwBþEìrevÅ‘ÍCÃ	ùpÆn-9jTºÅm
L-ï±föëíÒßB#³ž|Õ(,·À3c®–ó>X‘	­›Œ(ó—Zû©Úˆ·$œ}P²p9Abý9Ñp¬#ÑI•òñH.âËÙM™û•~[r€øç¡è˜}’]¥¥‡ÑtøºÏA‚ædø–îvŠql¹È¡hß¹·È"éN“!^¶Tlæ^aÑS>æþ©>¨Žºï}éº;­òJ^ŽŸ‹ÞƒEd²ÖàÅ™m¦[‰#jÊì›á¤&xL;ð‹£½ÂîJÉ¼B^²i_žÿÜ&dÌ®öþº~fî#AÈ+éÚa–y”ØÀ²F2•t=í>Ü™Ûÿç»§Nçžª~‚7ÊÒßxì‚äÜµðUÌúƒ®hˆóÄ"ŒŸ1ûûvÖQºc<®Î‘³¥H+œ^yÛ9í‰öGžwÌ{^™7þXR»›ÆÆpù=öB]ÿœáõ(ÖÀð*^}õ¿ì
²ÌB“».v©ÒU=\:ÜÉŽdh«àîeúNË®¾ôv»RrE¤?Â5JAd.L5…yvÏÍÙZ`Ô8½2ÅáÀ$™¼rLÏÈ¥­¡ü\s^8Å¤‰ÀÀjíbK‘Še…61ŸW}£Ÿd.ÂbÛEÍMùAÒ•Hý1êJ<vùöy‘=ÅLz¯*ÙŒ$¿-2\Gu~ŠÉ…GñkÇDžW7BU3‘&æñ¥[cÌÊ²1åxó¦yž›ç‹$ÊˆgÓýU¿-¯ªŒ0·É¹èû¢3&µ·˜Ÿ¾œpª'å‚Œ`»é%u.?BòçIµtjG°"²0sB“%´G8G/??Þ4I«Å¾£Q	}ô;;•' ÔTƒ^&;®VÊ‹¶½¡qc 7ˆ?dDlâ• ð¦å3ã/³žÌ%‰1dì+xJåwZœN´n<ú3xŠ\Ø©s¨)ýuÝ~·ï)Aµd¬Ç//CÇqEâ(>kªX ¤’~¨î—½SNÊ´WgÞPw–íEŽ\˜î˜‹?ÅÒ~˜«øéÝ\àHÁÑ)JÈ0\=á¡ Å¹Ø6|@Âê©È<	By‰ ÿFÀR<¯€°¤l½Þ¹M‰NÛ”›£'Ð%ßZ*åY¸6¢Ëˆç#›Ò\°›nÙïíÓ~ÙkßïE%ÈúÿÄ„¡œš†Æý§ÓX²®}·ÙÌÁÐ @˜6$Ëí:ÔÅL\§7'™[Ü((O6ÿ§’ÅÓ2EÏçº)Hìù—'Š#ÊsL<ŸŠ”&ÀfaDü±ïÉž,2fsu™U8ðºª?aÍ‚£‰ Í­éÎùP1i*õšÑ‡ÿÃ{³íºÛ»Ü'NÕ/—ÌdÚO¡ÝºÂ>Ÿ
Ü¹2<z,Ù‘\³žrÑððhÐi)ÚTÀõcßÞ¸žÀiJ-ËqbFd‡/¾ÊSJÇ¤7“tö®nÿí7@öUÙuoUÿË‡ çFâ¼ Æª ¸<ôäÞQJË‘…Ô'¯‰è¤ù¥`«ôìEðÁ:â¯ØŠjmÆ?£šì+9]›ùÉ
‘ù;³¾„XªQˆ‡ñ W7Ô¤eËÖ):)•;ãÈá¾ gŠ ?Æ£–‘ó2íëß‹sén^¼çt+ žŒ3>ŸÉÓ¬é _“sr9Dº^p»ŽÂŸXÏÀ¦9LÔžƒ¼»HñËÚÝ/*3Y"Ð)Ž>«Î9ª³QÒXâE‡z¾+ê½®¹YÆÄ>žNcÇgÚ$Ä,Œ!þ¥ì*5ÿPE§lýÂ\ÍÆWLíŒÏ|Ø¨ÀA’Àý¿@®ä€‰6OdÉNMgíJk-ªQî[¿ý¬À¬«âŽ¡2{ÛM‹òNr<Ã„L<Ï  ê\-û,mÚé“U´!“3Æ¼è Žƒ{mòõr«Fð35üCÒ	 ØÕ±ë®V§iž"æŽ`^îâ¦6õñ[ÌÍ½ $`ýQ°;fŽ>N[ØñÖWÝ´oÈÖe,p¬©sUÌj·DÕ–”ÜÑ­gP>\O'F”–uŸÂß‡®d¨­i YÖÈóu+)wÜnT+OHÜe~x9¯{­V\ó´ô2â¨4sÃâËšnÛ–8Ç€‹în˜ÇD²²=lþÜá£¯HhWiEò(\Äð–g¾ yW½Zi–‹Œ#¸ŠP€–C¸øÊÙnhÚÃ×wÜÁçCHiGVÃÅC?Z¯Ã¢/8‘—Y?KßÉHUòÁ‹ò6HVz¹Jw.x,å8`F ¨»Üî½.ª0&±PÞ‹,Ô@¹µ`ÑúÛ`"eb“%rs¡jÒÿbi?™ >ÚúýËdã1àŽÝã“µ\æÐö|©S÷×9Ãn"‚,†Ý ¾äxXŒÏŠ"qÀË(Løx™Ý"ZhÌ½ûIVÕ“é,Ô÷ùŒÈõˆˆ~Q|«Ünø§uë®tÀ:‹üžêf>o*1xNÈË Ø,÷Q}"ŠP[—(Ûê  iÎÁ!Ìub¥'ë*ù¾’75ŸûW“Ûm&Ã˜0×aX!XÕá‚¡äv¸]oÝ7ãÓJ«ÁCšØ
¸q«G¬_îZ+Ð|ù	ƒú»©Éj5¥XeÅän±E®Æ„§Rƒƒ~óÄècF‚"»C+ÉÛo÷®‹5‡Œîêü Óå&»Ä°Â$^†S1a]Ø'|ŸP¤1•˜Ûº’ïZƒ]é¿2²Èó66€öÖö:`£‡cÜÅRK¦8¤2úÒŽ³ï‚x™ÓÌNp›ˆÕ®¥³à#[8•dó¹\'°U?c¼y‘ŒôÏ×1eQpÔÒ†*·ìâ8XÍ0Ö+ ›|<_$wIü†¢‚[¸€½E¿¶?r×¯¶¾3ÉŽ2õƒÌŽ	û½7µ­ãöktŠœz{Ecþ%€Á`ü\@Ë±§TúÚÉ‡!Â0ApÓºÚ6òö¢„)`-:”;!¶º¼Ê3†[ÁõÃ©é[Ü˜~¥–	Ù ðtÁÄãø‘‘é„aÒ-Liß¸ÞÉ¾‹µ"ézÛ'"’‹©—NcYÙÂ±üw+ ‚™sñûs¨n±®¿×–½4°LÔéitídBäK¹JïñÅ©0 TS44‰¢´´‚ç?¤Œ3G1.ºS†DwÒÿª™áØÒ/4•…ä2¼Ç~jÏJ¤ãv–ÜEc ‚°~sÆá¦ä.óUô
vâ@
†ë´Õùº!\×m°Ò– ©Øæ µ(›|˜Ï„žÞ›pw#pouíð‹NXe2„ˆjE‘ g´žs¾*µ¯(
­é¥§E®Ç‚iƒžÎ`aªQ8÷µÓ§‚‹Q¼^æ¹ï¥‰m>ñÄ§{[ ¹·G°lËüA<öÆ›ÎTô×Ç:ê&Ë±•­Ø»®¿Í¿‡×ÈÅbd-‹®”òš$4éÓÀ›ƒ=@þcßÂçvÆ>

Á±‘—TZü#‡äbØŒµã=³!ß¦s™ìÓªÓP>hÑ`#¸ÎÖÑ+‘Q“Ë›W×Æûm?:øÎ r_½ˆêYm’2ãð´#u\µNÀ?bn°ñ¢P¬_¶Ç-e^025ïC‰;§Ax~?VýBÃê€ÛJ»)-Å`R¦_ÇMµû¨·ùwiêéáÀÎÞÜûü›ÈÓ”ŸËnÌè¥ûHÎŒ¦ýr	¡v—¬ûÒ=§UÞPÂ<bž;ƒÒ7JYTŒ‡ç|qË
MØ¹)ÄÈEqkŠ¬hªŠGbÐ¯ŸaÀjÅxu¢¥n¡ØOa£ƒó	6ÝUˆÇž>z~AO v‹
|<…]M%Š õM˜:„,OW2:Ë>û¸>ÙêÉðžÃá©,ˆ(•â·ýôÚ3úfLˆÀ²êh»¶*òóHÞ%XF¢þGì;ð·?™4|±¼#0ó0/›ª¶>”9máÞ¼¨Q£#B¼z€b‘CfÊ²¨ÿrsžŠ!í~m›ceº±"õì±½â¥[Ž%æ§Ì/¥ÊylŸ»B7Ò?lÙWàG;óÅ|yÎ§[øVÞëZ?ÚúÔpËŽ´ÞgØCÀXÖaÂM¯.ß–À
½ÔÁ[XfÖt¸)ÁÂ<í¯Ý]–ãè,
§PI={\¿ò°\½h¿.ÔË®2ÌìwÔF#ifÐÀ62¶½uŒSŒãq8Š¯ù¼j?QÅ»NþÓÂßG‚#98Tõ6QÕ¨É|X[kÊsKŠˆÀýð§sSq·‹É¢ŠÑæSYÃ¡ÿù‘ôÉDú€D¦â¨’xRÌ®úïù4¦‹åíþÝŸ`Ú[¾‰]g¾7+s!50¿7Ùbø«qPœ-y•„-	•=:¼)Al…e0™ƒvº•6>dIø m,„² »H½…!ôTÛgúð¯~—4ì>›#›°¨Ì`L¡¶p?á7H}V„ž÷uì@Ã¥“=K[ˆ·—:»^7f„ˆWŸ§¿Bië|Põ³,ìNž
"á"°!k³Vm<oBÃhÌYX9u „G‹D†Óÿï ©½¦iZ[‡Â®Öf[±äÎêà9úõ¬3ÌææËf²a/äàÔ­¬‹€·2›éaVA…±S– 556©Ëö»®F{d®Eò. •ËœÇUBî°éú…M²1WÆD¡BQ8xIR÷eP‚vk:ö!•‹7EÐí~!xDOã”pVØæYjóºgÉ3©G?AáƒX’&,e93¤öZõþó,,?9óHœ¬9¹AW<c¨ÿ*©ýtgèHIØû#b^Ê€;,F¾_?m¸ÿSMöµƒó5Ž7ÿCSÊ‘QÅßÐ 9ä6'1N@è¤¶_¢œjQöJQûPAb9lXùðl’Ìãô@&Äà·˜	2é£·rðäFawÓ ©Å¸[ò*G‹#‡éw×¾£³ÿjÝ£%p÷zÂ"÷?©’Û«:{y‰–l§èÿgo±«^Ä7hCy†KÆœr¤¸ÊT5š’Çá:÷UwÆH™89–.§ÇÍK>ô•eùJpÉZ+o¼yH82´‚îíÆîFÄNŠòC¬—Ò°œ¡jæÎi¤®,+°©eÉÝ§Ðá¾8¶qCþî©ˆ1"äZR]w>£ –âxx¹Ô£E“4U/B6ç(O¡[ê;ÿºÕy¯@‘É¤¦OÎèŽ›òþ»á»ëWuQŽií¾ÜÃaäç)¤âð\6&ÖSS4HCM¨"8«¼8›ƒ†'¼€YA¬˜S§›ÙàM{†ƒ6TÆl™ŸpNþßìUç1—™³·KÈž†Ñ}$“àºbX1Ã<üXÝTY¥
€rëZ7¿03»¡+‘tF!zXªÙ›Ê¢áø(ôÎÅÃbÝù¯77^Dˆ+#-J'ÛÓ+ƒÐx¶«’ƒyó6°£qµÄ4é%)‡ÀP{´-À_6ÁuâBÞ
€psæëËUÉòr[¢O<ˆÊ$ÿVÓ)v¢°ùV²Gº8‚îEIÞAgc‡¤ ôøawºD‚úg¨¤åÜ7bÛ{}Ðr‰vUE`ÀâaæC±
º£²|Ÿa›à—(×Œ9*tí°àã%~&‡Üè(È†r(N¸¢3¬BóHkÈ¾b–SÙã`_WŠžVúUãÏÜrRœñö‘¨ƒÛ¥UA‚¸ÊÛÇ–e@•Èÿ½ ³GÅTPéÅÆ€¬‹jbt #çä€íËÈLãÖs%o¸¿³`&fWÐÃ·³>Ÿog@”šÝwÇŠ¡DïÔBñÑÏÁ rÞ¼æ!1~nïóëDbu¢ÊzEØ-¤þÛàÊ+;ƒ¸|B…WÊ2`ÐLMý‚¥ÛöïŠ|…¹¸ŠbkÿB%n.3!	¤%ïäBÑ‰X	ñHŒÇdƒO!‰þ¼žÒêéÍäCA±¬×†©Øâ]³f&¸WñÞE›ÐÚ=ÝH¤(õÑÿPÝ5Ògú
—ÍªXzˆÉõ%îwüì:A¾%tª=„ÌóK— @ÒT…ì»!ß!Ž£í*W®Ï} u	Âpü0gøÂüŽ^2Á‹ƒÃrÁD-¡¢³¹ÍW#–øþ0oÜ$`9lbÎ–#¿a³
=C{#a É•8
u7;½žÍ(2J˜Å‡©öÐ/~L E¢fÑG f\“ùØ\uÔfR…©SÇ„Üo´™Ë×Ÿ¡s²ITˆ”mÂÉžÀÜ°Ð`w‚ñ¤Áõ!3žR°ìWfÆFÂ+åš&Û1J|ë-n@óZÞÓ·Oÿk}l¹‡YªìÍG"ûÝ¬Q^Nµ¢ž©Æ)áe^¿1'{²Ý„N™gÿOˆ±¡—Ž1”À–‰©‡¾‚Æ$utX×°µ‹¥Ã¿øû0¡ÐÁ¦ðÕ/Æƒ³Ôx•üˆ÷l\¨m°1¨F",ô!Â!f×‹I]ùË•7ÏÓÃ5Iêž¹Éc»f–a‘Äõ}f'åDüH©$Ðwå“3YnKpuÛóMµÕCž…QÅòsJÍ’‚9Sý~Q½Ó÷f§úÍaðàß¢p¸ZæÀX	-cí8ìõñññoƒœ€˜×_)umÈ”VéÄðº\»_ü´¬_›ÖìÏsšßÊS¯(fÌß´l„óp`Mã;3ZÂ“f¬€ºç¥ªÕL²Ixí vB4Gõ	œYyÅ¦‰ID`LðB ¢$T"–y3‡»NÁç|¸ai<¨¡âªP{!–l(OÃä–áFäÆ‡Ü0Sy|}©ë9ï‚‚¼VÐ;+;=FíÐ}ÊÛhí7‰YsfžïOï}NBq^ÂE÷ûVnLaù@`î|ûa‹ ª¦20°Í$Îtãm|V_a¬õ0Ñžï±ÄÎZŠ¢W.B…‡yþöLËäqiü©/ÝEË©lÀé}~‰JBøJpygFe·ÎÅÓe,„YÞÍnÏO½|°£‘˜ÿ’ré‰àÀ2¶rÖKÁ4+¼Ô$×`¤;f"6*±6c* œŸ|c§jÝ“¶1ºï›#•W[ª¨ç–ãegÌ/»Ix‹ã¼íÏ¡ôÜ&Û×¨èúfz_&Æ.I5ñóš[ÎÛržôÖ7;»Iï¯„¤’Mys–ÿ*Ä“ÈRWN3b«ê´®³ä®ª50:liváyõû2%X[œTX'ž¨ëbsÅ;'^—H*‰Q•_ÁÞ½(êÍ´hlQÎÈI`4äÕ+Îö°ßñPÑZWä+{yZüâúÑþ™è@áðˆo-õÖÓˆ»kF‡’¥><¹ËÎb)~h´3Ïé±_¢áWrz ¥„ûlÛ½œ¶-?]ÔÖøØz›ÊÁÀw·aª<EùTxØréœæ[28Ðó`i½^êAK¯òá´È	DªR9`O·¼Ú7;þsçŒÈ7i÷DdzDAÊÀsµà‡Ó§ÎbŒäÈ.Êãt®¼Ïœ››ˆÛÝx¥±Toä¹XÈ(Š@ûìn™ç2ý§[âYÎ0Ó-J(8êý è/F›?¿JzUzÛh‹7°ÚB|Ãôy{¡7èÛMLR,×ÆÑ–·—Ú|ëúòìüÄÈÖ­ÄDßNáÁ¤ž`XÊ4›Š%ä'`/™LZ[ýÅôª•=aú©rùns
rŒêÍ~ƒ²¼¯sW—«øƒ‡…,ö¿$x2q°õæb5®HçÃQ9bøo%C/Å(Y$c×ÓãS…Ž²M0|@Ú{º9S1Dh0` zé7# P®Ô–•GET‡…¤†c8á­Žt²œŽÆOí
°‹!åâÜÙB±ö"öøŒi¯Y¾X°š7'´VÏxüv¥°c­üTû² ½uÈ°©†DNú?é<,²N±ëª§R9HCÌþ³Ìš2½[šhö{2óÍKáç¹ù>Û‹RfE«‘Ô>?æøv”î|e#þ•xCUBËv¢9 ˆ„IýØM¬¯s¢-÷eáA¨?×j(-×ƒ™¸u…Óér\$ÐÙ‘iø2®BLßÐùjr{‹)à¾&:ì›$>†˜ãÆpª€ü·l¬^½ÁÉ ¼ÇgÇ`NI:?cf]•Hù„±æ¬­ÓŠ-ˆ?h)óqxêáŒ°åµnâÚ’ÓCÛ·H¹C¥ÐíÄ¾!À‰‚ &C¯ªÌÒ|WkY6ó¤ÎfWó&sCØ"V7ûf’ýDÑæßß¹·uÐV8Â–òˆ•“üo­¿¬@ƒ!ÎXq>U–æ4oÙ²ª1VQ1ò38Ù%9+ûÈÒ^õ0¯Ñ¹ZS²EÇÚqK¾*$ à£áiÆÄ¬íiB8‰§¿7<û„=IœäXsàÐ4úÃ4>ÃÓ™­œºÍ“ŽŒªôÛµÎa<¨µ©ÂD™áhJñx~|ôt“8Ü3`ƒ°‰tPk:ÊÆîtõGgº¤É-²PÇÝ(Ú]âÂêDåóýtÙa@*+¼,,åGæA¾ç"£âºÃ	7°ÙTó$<<Ó1&šÛ|³"!Q3‚¥§*“Õ&²íG+sFmÙ¡¹Ç­r;LˆïKG –¹RÚÊ ìÖ9ôr“Z&¸â°Výªåû€¥A*»Fw·_sºf—¶GÛWd#š#2˜X.…àf¯![+SÁa¿ÿ¦Hçœ¾ú`@ÕÈéŸ`ÈšÃˆG:¤6QÅ~Ô¤±}ëC\6!R¿wN¢â›jÍ¸È3yÿ4ÊYûØó+¤^sûuøŸ$hM/œá·½TJàuï`¿¿;"` ;‘ÂÕò0»€ñCN†®Íkzœš‚ÝS9ä²îg.ï9 Ûèeã9|iå›‚tš{œ
X‡!.‘K¡ [Ä/ãóÈb¯¤j{µ´1Ù¦Û–û˜¤\¹ßxÎÆ<—µêtÊr|ið1ß±ðÚ6†W':Ðø–ŠKµX–‰÷npÀùrü­1ä`ê&”E9‘ã5’L=Àï—Ûªà£Ó©Ç‰‘ìs, Ÿdüm MU¬2ë RÈ«Ò\c2W>²Ž!=%¬¡R M§^Í€¬–»©+­ÃôÈÈ\ÑƒGé…£ñ_I¾®ô©CÃý}2%øÔ†KöJ§°îÁ—a„K2òF9­@Sy&i
w´½›Jù8Å›+¯ÿ^8ý)C2Ç 3e_«u/ã·«ÄÆˆ»×2Šr”ãÖÈ+[™½ˆ)åÝ;(ßä"Ën™¦{úIj²â[èsXÀšSÒ7*~@€19Ý†§5ÆVTYm„hÄ¦›I³YÐÔ±ZjÄ£ŒeL˜ó¥®Þ$êîfÈ‰
AµüW«ÌLhB
ü®7PbtƒrÓˆý´¥gºšo¸Txû-‚ƒ¶;UýIÛ»;Ú¡€õÓOL·J(“…³÷Úì@\Ô´ l8O6¢þÒjâ¡Ü×!ž©ì°Ûž6*èŒïÞ3»Ú	U:ìw¯²ØÈ«ì§Ù«ƒ_íŸÒÛÀ§R?êl~‘ª%÷!¨D©te|o•¨cÊ@!8ÒçÇˆ=¼»²½7Œ;ýjÛµÀŒûÛ9Í»òs¾œp…	Ö,ýoI¢D(Æ¡¸+R3eð‘µ¸P=u¦pÅŽÖcÄWÓ®ç6{çH‰:C&%ÞŒ+õÖõK¶é…müŒŒ3i®,µ*wëäOå‹
Þbç[Õ›ÂŒV‚ž÷ù·Ž–ìCYI÷ãøYŒl‡iÌ©!”m- 	>k­‹¢¾pâ+‘ŸV7í	÷Ö¬"ÍŒ_F^Ø#ÈÚ½(]¶(xŠiz5€CY	.òÚwÊ.`9yÞcÊvBÉŸ}¸a¦ôŽØÚ0ˆFú@~í¬…¨Í<–8ÇúL8l	®kÅ’xEÐ}D«JÄ¹Ø¸BŽ¨Ç¹KÿèÜœ$îëu$S<s¼¯
%sÒ’oÑË¥6[â©lßè—|ç2+¼uãH|ÇØ6„´¤Üä<GÓÛ±€áª$}ëH¼yJmà¥´ÃQ¥$ãM!8òÎV¦Ô”Iö…i…æo&l‚bPõtáÐiŽöƒo¢LÛFñpº/$Q×Š8Ï¡
H_47JE½["‚$×ì•!Û-Ú.Ãð³ï1>ÈÜ¿\Ù{§à®ÏsLÜ’):Tê(Ønurf±¯ƒÀåê‹Ç*ÄÕ,T	âúð6ìhO¶ï6“bµœ¢S\œ?›nåÄ)7ÊŠÚ*Gº¨­ú§}6ÏvM!ñ“tÁ½Uøû²üî5ôSÄ<]q72HÃ”½1”e€9¨n:¸. þPb<–ÐUì— ô©¨r*·'zÖâ UÕÅ?œqøWÄmÂK`‘ïÉPÇ`Dí|ÇeâgÉˆšŸßG=AÃ!F¯îøÒ[÷dº¢«ýoîåþW¿[geO&l†ûKöÅ‘Abz…Sn-ž•õ*¦<‡ÉÖ'Lj1ï)Äó–ŒA¦†ž:ØpeìOÇMAÏâ¤BîÚ¿ñ_ðud}Ê†5º"´¼´¢fcS'™w	?(ir»¬nûN/Ã£dêZuK™´ÌvD>?7‘pECVšÖ&wÉoèzéU7>j–Œé3YÎj«Úl~]Ç`*•Ò*‰²¬¶â*ÛPÐø+ÁUŒ ‚f=‰)áýÒÕµÍ÷Ò#E€±ök=ÃÙ]™Î¡Rï~W÷tV2ª3ÔÔÏÒ‹Q–Z~Ù¸ïPŸ+û<'FKU‹=vé4$Ì¥ûµiáèeO1Úƒq}ÓkS,tuaäU/ò•;{6…ŠW‰TJp·Îë.±Itó|Î.âOøÌ¨N¬Î ”Ë7„lc‰¬‹FSOVW^•”³õTI½!Ê†(ºòÔd%ã³r. ¶::†÷`,ÉÖÏž…wüÈŸE=é5u´>ó<¨×=7ˆ¤(¤‘Ï­S¥Ýš%â(öPu1q@¯Û£ÁFLP&øçI+äáõ&‰‹Î1lÈÙ˜N1ÂP…0nrÀ¥>¾"Cfdñ±Dëbv†Hm­Ó¼ÌïÚùÈ#/ ,PšñQÊ½8Ü‰¨·8«¤,œQ©¢C¢˜¦ÉÊ¸_C·ÿ4v¾Êx|ðrÕ7’—z—íc"€½N	‹ž‚ÂjXÍËÍîÆ'!kA4‡ÉN~óxàÜWµ	êN¦›[‹Sô®	çâ¢»Ö†m_öGÐo;"¬(z.Ø1ìÎBhhÞÞ,l§j|¯¯o”±Þ=˜2Äg±ÿ™9m¼-O
¿æk–ßf˜µ<Ø‚‰zÏ[ñ·SE4]\ÎŠr6Ú&“ÓNUM¸‹]3snßX4fEÁ•$ñEãäsËÏ…É.ÓôS·¾qOd«,W[´ÁF¤r×¼˜“åN>¸ôëv˜`„“œ5‘
c)0_ûï7@dæãŒžÄÀÿgp'57²ìFtÛXï‚ë½ÔIÅÐ®ŸH?*qÿÔÍšh¯QÆ2FçQ«JT8½½HòÂÜ… ÆÍöè…†ÎAÜºêCQolŸ"–¬ˆLç8<Xj³Ðç¦Ï¹¸½WÜ#”NF~TÒáouß?rÇœú¸%ì§,ÕD+Gß!{y†  jÆðŽh#—Çè†"Àÿz€YÍ‡¢Ñã‹ÒNIäç­-ÀÃÙXgtP¢ýïÜ 
Œª0 –—ˆ'ù¤×y™3q8i9–¿4ÍÈ’nqÙµå>ŽAÕˆ+'¿P¹™à-u2m£™5ëÄøú/Mÿ¥<NU¯·+Û¯ô¥`¬4Y—Ú#Ò=,?Ð
^¿=yBŒÃÏ_Ú#™f€¢áC“ˆçSJw» 0VÀd‰FÑ‘úª63¦ÌgÃ³ñ1ú8›­ÃêàEk¸C™l¯íº }Æðs¯%SZu!Òù!ëÆû#S9_PñËaõ2ìƒDÍk0¦ÿJiP4DÅË0„÷æ³ 0åa/@AÙ9…˜µ	N3‰2Ê¥ÕÛïjG©€ûÐY1Œâñ!‘‡r¡ò«æ†¿¶MUt¸	‘Îà{ødt”Ý(Áúï™ÚúÇãy0¦¡Pe”A0’lÑ©24DOLÐ&`|i‘@ªƒÙ!äíøÊÎ6¤§•ç»²„¤%p¢‹W,Å 4(MÓÊ¥Š |Â¶·ÛV=SËXÍÊ–­Iª¦Fv¡•tî­=Ñêl³›<Ä°:SX=U|X¾œ‚ÚÜôþÜ· í°œ[Ê¤y5†SÙ)žé.hŸŒŸì®t;yvY Þ_ W³ú-´[vA+<	¶Ëy	CD0oŠ+iƒ„Í¨r	m1¡c Iñ\¢QÒŽ€§a}¬FþL´Ñ2ñlßóR§3Å±Ì3ò+ç‘'S
’­ +­ü9ŽÙJ¦@êO_óˆ—†ª’;}c-¹ÕçrY¾{qÚ—=sõÉûóBÐÁÎñÇ^˜öàþ»".R6Á x>T&_ÕÁ±#xs,qH_9ÈI“X¦Ð'²CñÌ0|–ÑéV-]J(È-íuiÑƒú±¥ÎwŸ~3kœouÇ¼»¦Ìíî#º²*»ó±¡­m‘WjÔ˜ïa&Š–ÿ½{„¾!YbpWÏAý:Lë”ÿuÜ@9ê«—2²mûæÔÌ¹à£»üoÅÆÚÏ?/ÈÆ°®Jæ¦×ó‰œÅRžv¢¨¨ÔZŠê@~S.">»C&Vm3î>mñÍ·õà;ÇüJ_z-¥„Úvý	ˆJûY–e±ÓÔ¸­Á'j—o©-?Ø !ï.¾ìöVVÚµþúÆZ÷j/óæ–ðîÃN::‹R>5%Òœ°5ä´€)ÓU<Ê”Ï¸†¡10;5Éß“
¢·dò•›#Q{‡Â„ópLu—iÖªP•AÎ&³ëÉ¸íÃ)×‹ P$‡)xúäš¨r4€Ð~?ñ™è}å!Û5<•„a5ÒÐãsˆ³6íX9_PãX>Wv™ÞU…èZù——&Nô±Sd‘;i¼÷ÍP?=òX_M6ô ?áßÙVZ½>¦à”–«ÛC>T“2"øÐa	•:|¹Dy4Ì<ñ¦ª€Ÿ­^:ˆTÚ¸	ø•?ÉÙù»Pø×[CÄ À£–c'pbÌUÐ 2VbÏM“·ýôdžŸ¦ùýùÖÉtNh^ÖßþÔ‰CƒTZ'ëÎÝr[O–Ì4t-ÚÔ Ï@Û>³’fL‚‡¥žéYLú±§ðÄk‘a°êI—äVuÈµ,¥›N)hWWÔ”Ñˆ¥pˆ	Þ‘>L8õÕñRË}EŒÅÄŽdœ›SD\êˆùø”‹¿0Œ«H}€Ï¥—¦Ê˜¢(²©€ˆ”Ãe;Gºæ§Wÿ~1S®u/ÓÀù@½7ôìwBÞÞ®ªqßDGòÂZ]Ë[U«B¯zóÍZo4ú>×wY˜ë“&T1e
¢?Y÷Wb¶EæqEgQm$pQYÄZÊ€ê‰”©©9qþÁSê¥-çÍÔäq»¢­”ìQå¼¿¬7‹{`"|“ß³Ø‹øehðeÛ%ôªkÉm-³÷ …	Û*’e`=<›vø!c74£r«ý—¤žÂc1ru¶‡†»MF‰Ê¾Ã¾U}ÞG-žWXO¨œ>8	h/…üæRxjh?ÐÈ2g|Yuo=à(!	"*r¦ãØ5È?Q	’ÞÑŠY9Þ<¦[ÓÉ‡ôþ‹Ë‚‡eºÂ‡ò¦î'#£-€Â48rÂ6À)!h”þ`©^]È~-k!Þgñ!º9 Ã‚0›©øá?—nÑÖ‹ÑíÏ¨-oót¾\ÿk«•åDïôÒ'6¬ÖgS_°	®^ü>
‡íÔÎbãG?Õœmb”£ðsæu.UBE16%ò$Ïzrû&ze<Žú½5&†«[˜¾9gHP´‡è©ÅB:úNØ­q¡)à”½è&¾šLzg`dÊéÿÝC!m#<þÕ±4Ÿ¾^oºó¢{@þcÃ}rcàÕkmOCeŸºìáÈ3Í}ùÿn‹/î¤@nca’±ú™ãÃ=MÔµ± ¶ ¼«°8¦ŒX¨ž‘»”ÛDT¢(~Ç÷h‘5¨Å1FEÑOFIçg›¡IÀù$ŒRÃEc^XÂÅÉpÚqPcgü\•T*¥²X!°	g#CÇ"–
”Ñ­ä§ñDÓ4ˆÈ)x+/o“ƒ_›Qµâ®½óÔááLÔEMexj+Ñq"œ%o 8 vË;exK3´:ö]Sw:xB¨¯Ø*SÐÆN´ÒEÒÞÊD®röÌ²!>#ò¦œry,^dbZØW¿ùyef…Hô!ÝØšëîW7‘žI™WKD¦øÄMüŠ¢Þ–¾ÖKdÒ¦°ýÐ!UÎyÑ¸2‹Â%{œC7ïÀ©ŽCXÙ9«Ù(¨ŸFéÂj½±Åú7ç(Ë„4j’P—4Ýy²ÇWó*GV¨’	ç‰iøšBŽoÓn`FæWÁ°1Xê\öuoá
·Ä6‹Ÿ»ÏæÂj[—é¥§nûÒHÒˆœ´Ü§>›ªDŽó[PôâÚ†r¨~™‘°®V.ÖÌV9~y‰—w|Þ|Q‡ýÈ/¹Ÿž2zÌhËTÅ^¡Sjÿk­ý—¹80™Ýñå÷k‹Þ9q,5e¾=X“kYq4ïG'»l8ô[L\óÙ±TXÄðÙ²ÆoÊôâiúyËÕ¿„:‘þ¶ÑåúsÏÎ‘z.ïDSÄæÿõÍjÁ¹u–dœg¯I^ÿip"ˆT¬X ÿŠ¿ä°_nÖ0ÆÆp£C¬‰¥ÍÁ±˜¬'“Ao¼µï¢Nz3@J{>žò­>-F¨µ cpÞ’]s:D
Ï¤3Ñ©ë]þ0Är<ZdÓ2¾¹ÊO+ÞX®Ú!ýoj!G‘­JyõÒ¶'Ñ¨ŠÇü‘R#¸cZüVŽÔÀhS,DíŽÿõæB\$¿ñƒ!g*usðDPÂ¦	U¾³™uÒ¬j'Ä±I%üQg2}/BKi|&þ»[Ó¨Ï‹8+eš#A2Â!q2ñb²ÔŽV&:m®p¨DƒØs”IYúÉ[;×,z7ÓVK	d@›°«Ã…¢ÿ!>¼c&“tEöã›{—/ð‰7>ÓYº·µL7æXvh;Éê+n›8yå¹’	–­àGŽ—l×à¸èÝnòCÓ ©ˆ… ¢)&õ¬v#g{X‚¢øš‡˜¢¼:€(Çoe4%ô‚‚2ò(r@ù gðN’¨çm{y¯ë»¡`lþ.§ÊÇ[•ÞÊ†{pP27°>k»âú6@}äB>NŠAÙ¥6ê¤M~ìâšºw«MÌº‹LFÀ~r'?°,/Çr†º•*üþ'V¯#‘¸¥¼ _‰á%±ÇJsc"ë¤-z_9Ö?áK¸^"Õ;¶3€0¡ºÚŸ°õsV:¶É†Êr¸¯Dþäóë—P=åîÖ`þ·ªÛÎó™m«FL@®–?}Ê”áE8>}MÒkª­¸SŸzBlÂ›£nÒmƒÝtÞ;,;ÀµÉÚQ/ÔúvÃ`Í¡aíµÊ¸7È g¾Ë_:¤‰få¼¥æZmÒ2ÔáÔrÞ’¦‘;Þ‘•Î1E©ÐHV®È
ŒJpÙþ“—¼fÌO0´Œ½§zYp&†Me‰›>OOÞu#u>ÒÁ*9Ól(€à÷òfûêW”‹#ôÌr) k²Úz¨ßàxÝ[‹Cô¡!OYÊÙŸ‘¦ªt£lU×ó-Æ*ÑM_º23S~×N½Ä†ÉPÊ»Ì"¢ƒƒ¢ûS'`Ô„<YÏ7¢cÔbþ*æ	,°ó6b†7Ñ­úAÅÖGLFae¹9œp±§O‰ÃT‘Îé›;Æ¹¡õÞÅ´+ØÈMiø±³§ò€†1šäDfÞ(í®û¦¿‰½Ø¡Äí@‰õóû<jçGÄQù	"T†O€µ4œ'0¨0ã‘ˆ’ÕË¦ï$P3'©õ#~ü³îU€§¯í€çeŒ™ 2ƒDŸTŸcžâ×ØÈ‰ùæoGÄúB×•Â)Ùã!{`ó7BA#d~Wg¬ž´.+;onaºê±Zu 6†úIÿs‹‰[h‘åY
ÄØZÑy[û!bÂe
’kO'eå’ŽMÞ¶òi:`OŸ¼D¶ó…¯Oñ3àªŽP‹ýneµÁâ6ù'Á€3’kÃÂ`¢EÛ'­})žë‹I2ý³»y†
±\…Š”$lÇ§®ä~ÁÕû¶ÿ*jC˜º;»1üŠDmˆ„'
ŸV‰.oŠù/â7´Ä §žßžbêa¹ó­¿2Ò6NƒtSîE–Tnž6ÂpÝŸJ1—Óºüew`7µ;”šµê„äôÅ&×“5ù ¨óŽ ž³â¨úy–]a7¹º£ÊW³Åèã·IMà»‰°Ù˜óíUÀæ¼`%Ç¤v²øžì¬bX×H-#‘8ê‡”;­ q0c9—q+6HEóÉšèXÌî“Ë«uµYùiudxÆ9‹cøª„*í—ruÝÄ[¦Fv.yÿJ6|üO‰9^àÕ»"òÒ«b
Ùq¸v-^Tkíýfk¥c€ˆwDÙúÌpÿsÏ+öxôT©•¯:ŠÝäK÷Ù7¢þï\Ä“Q¦^Û¿Ó0ªê©ÕõìÊ:=§»€¢½k9üôÓÀÞ_à{ÚLbãJ=á‘S^ia‘ç	³à)C³Eca4Îóžj5o úfH›ñJÔgï1?,E-Ÿ`±¬;·ûÒcã€/¿ÛÍT– ²ÿ¿í¿q	%ì%¸š#v(¿³²2Ë¸­)¬§ÍÉQ&øO®thw†J‰>Ò¡9ÊÍ¡ ÓÇeQ”R)NÆÈ¶<­ÓÛ¤Êìö(n&™£ûí|e0:ë¿· b×¦ÐLÃCQ%ÍcñÜñLõÇùH&Æw;¬úülZÌ1zaöª:Ù"‰®·k[PDBÝù|)ƒ­›N~Mçx`EÉp0Eé1=N7úPóÆÚn£µû… Ïuáe;°lsêŸpÿ'Ø‘ý$aN¿ˆià…µ1Ì Ÿ¹]äï½ÃÇœ	ˆ–•0o^¿ŠÅeW×ÐPLÀP7þI~òà‰°/pD/WàÙwéHCq›‡Ã¢}‡øÒò(ym!…['íêU²Ÿo(FðqŠè cÝäˆ©Á-ÙŒuý"ºOIÍ9°K¬íäÿ$p*‚“ÇÒ€O£}›r&¨Œæ[Ó–Âqâ‰³ÿ iÃ²†ÜC¾Ÿ‘ }4…ÌvÀ,òÄÞÕ@d\<5ä ýÞ;“Æ”›ßëá}öâÏäÜô0„S²Ð
`ûª"ÀGñwí Â^L.Ý]ÂÑlqÄ§úæÂ÷œ-yÏPgìîàEÿçØ{·•ç!áX¼=à8 $!Cš\X<•yM³ý$C£a¿e;Ï–ãïfÕZŸ;ÀU]àÜ·´q˜WM³¹‹KñåOÍ$Sûìµ,H9ó¹“?0)Á8Â›„YõrôÇ‡®cá c®­?uVÈaÚoA˜ü:2©°6lªA~ÄÆçéo»Ê&®§œƒ(Y=ÛEœ-\ß«ý‡dPp^¼Ûðü¼Fó!OO´üÞ¥Hr¨–À“cÔEˆòÞñ3cTp5H\™^üÎ4Îf³&{-Á­m±±‹ßVË‹ÁþQ9è¹’¾Ÿíš$=àÚ	Æ…Î~K¡±ý» í`‘ÿ7ªƒZVxêÆ†…›-q‡t->‚ÇÜþ³AQjnS ³çWÆAõ¡·öç7–#3$[àÝÑ‹ÌÉK%\©íG¸~‡2:®†Y(½¨ïJú8Œò¨Ö
rV¤í­ò$QLwAl‹}…ÐìS•çGÝ©¹³@‰;Ø¯¸Ô`kf¢{e´¿vTisë7ó6¯=º{²S¯kE˜WnÒ¸úiŒ}ã* LúÎN‰/‘&¶sYd#³Øõií°a†Aª¬giQŽÈpÝ·ùá±Ñh²MŒAr;)§èohÊhæjrû Fl$L/,gãŒ¬Ž°½ ¨#þQy7Ï`Í®ŒÂô,Ãó„×O¤‡øõ’/‹704…nñ& ·­‘52ÑY s²i›Oö­¥]4ÈF6cý²^
~è†ò‘ÁÕ¡LzµñÍ/„Qù«™Šcà9Ì¾ž©®«ŠÁ'{g“b×·[ˆ—Û#nêínÝ?Ê-=Oú¨„÷«ÚK9kËºo¾ÑÐµvƒ$*gðrC½¢<ó’ŽƒÊJH£Y‘ù€X8Ü]æ®ÆR«UÂµ*¥eµ=n
#˜ç‚Ž‘ÙwWâÄRôì[¹ä[_]ºôVí:á;T}û¹ âàCA ½à¸œYÎDè»‚LWK°Ž è©J§Š)ýèè¼hóâÎXàü¹UÆ^-eáÛAæÅN–bE†·g¨t’0òd?ûÜæ)ñÒ2Ö «Èd!õ)ˆâ¿=-"úªHf“Œ¢ÄN¶ÊN`‹õHÌ¦"*¢²Ž†¨8ù»Åá…½G|™]’>Lµ3àâ±éÍ 8:á”?	F¼Fd½Îµák9,xPMêÜú©]fm^OmÆ æ:Ç+´Õ`B!5Ù?±=8&¸Åx}«ù¶Áýý<”jþ¦BQµBRöo@QŒæGØF¤H;ˆ×}ÆU8Ê·üu ã°Ëg)š‰Cê–ª†"¦Í,S›‰©™cÐwõÔZþ.ƒ²ï´Ô{Ãò—úØÝ=¨—¡|_|ô("X‹;Çó$Žý0êê4@Ï'jêæþDhÔ=…ù	RH‘wW;º‚·ÚîZk›®ËmÓ3ctb’¯•ûy)ò7ÜÃq¾X••“yöª1QÅè¡	’¾UY-ÐÈ½Òim:ü
¶¨×¡ØÎð’ýz½ð[I1Ü-‚€„@œÃ#6þI{tÈÑÀï9ii·¡µjï!9âÃþÏ2À«Ôê˜]pVº}yÌ	}YQ;õQ>;› ‡žH¤ûæF8OµQtû°ïÊm¨ãO‡ÔæQJW¯ŸDR±rWO¤‘„b‘-Ò)e‚ÃNôýßGŽÈÒ+«šÿ×£ƒ’Åi†»=ÓÚíªÎˆ$­ŸtñûÝ]”p-T·Åwi³a«D#tò2fÐ—9@l7'…—X­A”•"yE¸È2›ñËùÂp4ÊÝ€±óh‡Ö4kFR¦*p‚v:m…&ù«ù²àïlê¸Ù£­š·K¢×i™?¸ˆ®[¨ºPTG!õ!’Ñ~)ä´˜óÒû	ŽÒb*é
‚¾µ_:Kùß‘3,¹ám>x‚~¹ã5¬ž%{u&G¯Ÿx>Âúî.†ÝµE„]„¶Ê3Ò 0ªu7^aÐ>¬J5kÍ©Y‚‚­îRiø[²:Xšô|R¯PÏÉÇ&&®±myò¶Q(à†¦À9¢Ï¬Ç\¯ôâÕï-õÈ!îºOKî+™Þß4ö¨üî½‰b°ÝÇñÔá”ÅµÉ¿/ÁÁˆŽ«Œœ+ûˆÑžhvMQ‹x~NGÖ®Þ÷Œ}‡NVt§F #Ôrèh^°ÕØ®5 ÿ„7˜kú(Î«muÅ–:Iâ”ï>ˆ)“4ý<…²x»[˜ré$;¼§Õš/1äÀÙ«XÌ€œJ{¤v¨ä`^q^ie/°sŸG!|qUv÷€v¼éL˜^ÇUÐ
Wõ–ÎufßUtíUuö-­ÍÒ ƒiÂÓF¶FLÉ%Z<}º-|¡xýP-ùÄ¥‘?ŒŠUíÓ¥ùÕsWSZ£¹(;zÝ0Ì‘4ap)–öþ£4Ìylz÷ÿŸ+ô¹Q=Åâ!T ç!_\1z#³Èc(ò-ƒ   …aÇ—Èrïo¢ÐNíD ;P„—…K)¸¯´dF7X]ZA°ŸŒ½°&½”Üû'ª™zÛVL›/Ú¬UºÌ}ó@–‹B‘&tßGá}º7· XÙð‘Ð@OïÍ(¾6ÿK_Í[åÍv<mh ²o¤àžr×ÞTSw3~:7çk³Ô¹
ã©zP^¾IDoƒžÁÁƒÅ2’õÒŸŒìÖ˜l¿ÉOqN×ôÆ·²ý×¦¸Á²ÒÂ=D
åû|Úa3-VŽTXaÚy²;ÃËk‡t*©Ùe <N+æì´8—dFËèû)Pˆ²·ç_a`W>Å`K.wP>™õýR—B-ó£KÛø6Yÿ%Ýf@o½$‡tÆü¡ð´ñ*ß0ëÄrpÂ£{wµ $"‰ŽÚtEÌtRÛ×<ß† Öhõ dkMú¬»˜¬€„‡;¬O¯åe!Aú©çûÌË²5ŠÈOt&Øˆq`¥å×ž~ÚD¦¡lý
ƒß…Â
QŸ»kÝ
€tsà2š˜Ê‰°¥§è¶
´ê}P{·¿˜NR0v8½a[ÎÈá¬Ÿ®õgÑÓtK˜Tïj)´Ž U·DÞä‹j–Kä*-ŒyøÓÂÍ¾6ž	¬ à\ ÙY)ÇæL//^_·ý¡¿f¦S×Ë?p3é¡v·¼ ¬èÈ¹	ã…n¿~Vª Ò@Uxm±ùr¾˜#ÚÔäµ¦¯µÏ#¸ôÞâBX—øùî™½ƒm‰Dp|0)²åÌ0¾½Z”4Ùµ4Iª$˜šè¥Y|¢”J (OøøÜ‹ù LÜ1u…Ü™ àÊ¬ñåtJí† è “€­M`0ŸIõ’	ã}=*Ñµz}uˆÎg-LôÇw§s{Wì¢Üî0Áÿ#k-^Å¸¯ë²ÝL‡º5TY‚{óàÒÍÙ·ø²ÚÃ×¦C¨¿®åSŠýwô1.aTžs²zÔÐÀEëý>íýÞŸp ª!!ñPåqþý3¡Ù	ý;ìÚ4!ÌVòQ’œN‚,Xzÿ;uà§Tå;ñä8¼šúŸÿ–É1y6úßLÙÐîC(t_ùŽ¼Æª©ˆÝ§:)û°K'ÚÆJ»€[û c»±&GRZÂA_L’Céz3‹ÖïlGv0è@¦{Ûz+i¥üï´ez*$çÞïÏJHVø£"„™NLÁíW+–úæu\ÁÞ·B{c #Û?xi!pþ½ôž²!ç‘Ó:µ°ÏÌ£ÿ»HfRòüÁr´?^2Ê†&(ÝÈq†’„s-õx':¬@q©¢TRãa.·ïLù)«‚[Žu-CñXÇ4º—-¡{;ŸÀ	§ri •€«=ÚF°±¯+óD#s-`>Cù"½£uÜ”ÁÑ™8Ê
™»	Oâ÷kÄ=›hq¦$å98pü–$'
áòó{à…í7‰ñO¥‡›†EMìTOµK6ßwÉq«„³b‚«Øn‡yÒiÅØ)‚4Ûî¹Èª R–A¦Ée”ò‰Ðª6\=Á,úbN/:‚´SŠ¦•éó/v¼víƒãH7IxÛ¬z¬y›LÚ¡ a){ó¼o(9 Å`®O½l:P —×<m0:[v^+¾"·03à¬D.²Qû«#æ:õµ	åÔ–ÉwbÂÁˆrzWHê$£;DET < ®üe<Ûç©ß‡¼FMd‡QÝ0ŒnÄqK…b¸6hµŠ…üWk„»ž5èCyð3äª7P€‹Ä¿ÞLÛM7‹}[7 î@#[Àê³uYÈ:«}“{{Éfèã€Ò¼^þ¬™ÄGÊ’,øôpIµ˜~×>ýéÊÏ$È6æ©±Ï¸ogy8Cíô¸v/ÎÈåÿÏÄHÜ0 ðT5gÁZf{a?Ò5ÛW`^ïN]œäHÊ7×HÙ‡%"3<D ÉIrŽvbNÔës¹ø¡Î¸O@¤YØû|äR+…M‰jYøÂAÌ’ÅÛb+²çÿfŽ”Oßu3	ƒ8eˆÅ½;€³êWAá’;£¾	m •ÉRË©EÕ¬TÓW×gçË¹7U=W¨áõ{Rp Ù¬MWùÃx½úðÐ·ÂeŠý÷)³Rê]bÃ¤ÒBq@ÆxÔ“mbÑ3³÷è ß³sOæš<i;”',¢©Ð,Î¸\Ë¹gÈ0œÈÓB&®íO.¦Å
 ó
 ®‹›{Ý‘s5ïÝ>!ˆ›Ú¸ÚG”ÉVó-²ˆYËƒºësÛâ¿ƒ­Ç:¾(v"³vKVLØUÿ¤¨Å„‰%Q¨ŽØÀ¨_®þt5\oM ŸŽÐo¬5»˜aALð®ÉŽ'- ·0ø/Öîíæïã©:c›AqNMù[[	—ZUEIÜtÜkTzNÍª¤­Ûç¡î+²FUÙîÓ#¬œ˜¿8Ò)Ï	å–íHa<­¡‘ÃôgVþÊPtH¥½@rfå%X¿«£¥¶Æ÷¯ãàBõ‰ˆú'÷ü–ºGv¹€Šû>¿Èÿ›ó9²‹³Œ­~-±ªšë¿BUž<ÏÈXF´Ì…^èÎB’aƒ4–D¼ìpÛµŸ”¢^&ÈåüBF{´ž †–påå;<lëÙ•ÆÔ»—‰c*„)A›øØ~Éë>¿0‹¸ðÙynðOÛž‰Ž_ø«ýjwäQÆ¿}Å9¡3˜I„;ó×EQmå!ü?4<”6rù•l_¬"ÖöB{ï` "‘›Tvð³ð³QW“«Ê)°`Î€([•¦q_DÕ³²Þ¯A^¼ÿÉ±{9ùýdo&@z[mà‚39ëUÏÎÑüDA¿Ã²]Îž;´Þ6Å99YNÁí–B3‰©ë&>P¨þ±wÌ†kê:V¨g[ØØ¾_Ì,ï!½=xqÎ”[["ÚDïvGêáÆyušòÞe!Ê%$ÇÌ’¤ÛˆlÇ™	³|jì ¼“Kû¬BŽcg¨ì®ª{EùëuêŠxþ¬ŒÜz¢q@B…Û%“êu”•¾•‹º=€Åb®YýŽ~VrðmPÃä‘ŠœeÍˆf«÷óv›±7pºtÞ¡ƒ7‚J³gà®õD¼±$j}æpMbÿ¶xÆ_ ¡+¨oKZD{U¢SÂáñ@aˆµ¶Þ/ü°Ädç ?&®nË~kq¹4—åOÒ,VM+èß„Ìz¨æšFçû$ëá³jgÐC; E"vë$1‰Ô´Ck…]ôÆakM¤Á¹Ä«ð»Y,ÝÛÉA†›~©¦›£ Šú.²K7ËéÄ¾ôY‚%šè@µ œ0$ qr[\C©ãþ´U49öÙ{N‘z$to<s‡ÓTr½‘Ió`C¡
}¾zÍ%~ÁƒZè˜šX&xÛ¢-É'(ª0®r­äÛ·Á£”Bf4„áÌ¢ªÙo—sà1XÚ Ñ ­zË~úNFF½n¶x…„’€Ø¡Ÿ{Ø†Æ'ÚQ–b¾GwéönÐRæíðRZ=!‚³‰• 0pÄç÷~™"õL~’wî$ÉÄ©mm sì¡‡ Ûd:?ìfJí±dÖù½¹5°i&ê€yè± Ôíˆ×yáÖ«*²‚/wzhµüw÷qE,nûQ™‰¦ÓïçIõ[ÄimRGS6¸¼…s{VÜ›M@%íì³··Pueë#;ÉiÛ~GÛh¶¬>ÌÌ/4…‡ºvÊ>(Êz!ÜWÌ‘Àú¡Ù®ˆ˜Í	ßù0·È8qgü×jÎÕ\ºÿAn«²äj\(›Û“Tí?ßÒ Í©Žc_¯]™³dŽsx~£wmŠG<‡_~{¥f™§ ­]d¤ÛehŸ©GñÁ‘UÛ6Aþ:×•…þ[keZþ#ÞÝÎÊè,Ba‚Ý¦ý;-j%Q	úÒçyÅâxAŠ‘v6=‹9¨j£ƒ—àV˜ðÊ„Ø±	Ø;Üƒ´~9ê/m#ÖË4À4´%÷oPfŠœM÷ôFÁÕòÈ¾à¡9©EÜ¬ê&ÍÆÓê
ÏzÆð™1US®³|¢´¹bÍßP‡öTpù„dàRõwª™ÆeƒíN4ºÒþæ0a¥Ö5Îð°‚¡é~l<™oËë¼=%ämûWhéŸ’êBqP_ƒ+Í¨A&_©3fkh ˜økCÆÞjÖ:®ÝÙ²Šz³ð!‹.¢›¶2yŽå=ºº¦Þ°Iå«aÂ fŽò²ðøR)˜ÌÀW…X°gS'ÏÆzÚ‡¤Î÷ºTSÁl§èN˜öªùØMW 6Öƒ[Zä‚{¥ßö)*fhX¸¼MšÁ|•ûµQ/ÅìÞ„Z‘ú9L¬@yñ¢QflÈMâ. þºž€_1VnqÖr4a~È€L2Nuý·XŸaÞâ†¦Ê<„;Cõn'àk•;©Púñ!$yŸ¨7øQ/‹¸8>ô‡Þ#"ËŸoÕþòÚ¯±°¶_„=¬n|Ðë—r8F¼)}kŽÊAú
‰à²)ô-?Hèg\±¥¦˜ìNÐDAëÞ	»ÜÌTœöí6üvBJ¡':ý‚-‹ñþ¡UÃÞHŠàøáŒJ*­*–QÆ€¤ìäá{Omód9ëè|òa<äPx§ÈQ­–Ê	ãW¸“ÖO_ˆöUë7ü0¼Œ²Û®[Eµ;9Hã9Æûp|u‡l¯gAé•ì¡Oa¸—Ïì é|"ç8xçŸç-DFžhÉÔóÌÑŸKt^ÓfËàÇ¥qTÁË¤zšh7nëU#¾ò$xHØ€(œw¤–ÕÕnÁ¡ŠË~?Öæ©ü™wÐíiû°Éc¡Î`@QÝ²Ïßöº¹Ñ îð WØ/”¤:Gõ±d×öíšëÎ£y c¶]òÚu]$Ã·™|â–Þ¤;˜ZOh>"[8“'ÿ¬4RåT4³ËF^äŸ'zÍÔÝ"I/vÐóð·D”h÷0pÊ¸®Cä{gV£ä‰GµPž yøÒ¢Eó&ãŒP´ÿf¡”‰7éhH~óÚ£Ã"Ú-	w¿#ˆl&L—âpgùísüø·ž,«©N`TÄ£õÆ\ñgUPœ©WþRâìð1D©žX4Èe!à‡A¡äy#[nF‹Ÿ-I|Ç2íšÉ~‡Ö¿s;”DÞœ›Ùo¶-Nõ9“k?åü+1a¸Þ£=Ûð4'VcZ¨~3G‡6LÏR…{}ÁøÖÖäVÉkQÞ¤£'Ç*ŸÓ4Ë,°>oÍ¹œCî	¿|@ÄäÔ¿ìÓKœ/@·ea€"Â¢b“v	óï˜ÑÓçà÷2áŽ»Ú›G¨·ŒVó—ßàVeOX:ut
Mu}Mlå¼Y.µ$úÐ#Ã€”¶Y&@r)<”“¨oGØ"4ý'ÁžÜ†š#ËòU#<m@>¯ö“×ó}S@6ÃÙõ¿}r	˜áÖ²dxÍªMr˜¹"ŸêüÌ-¿=^k¹a¾c}‡gËßê‰&]åˆ–ëvà¸ÃQùÒé~Ÿóî$5UŠ0.N ÙÅ1™/Ã~Z¥bÿƒ8pŠ nðŒßs½“8ˆ4¸í¿÷ˆ}¸;Ì}átïln!cV‘îâSË xå×Î’öv;pC×¶IZVq¢ÖuÖÙ÷ð—ö%ðìÏ›–FIeÒä4•Õ¢ÕéZ¦xÁ£çºCÌD•
‚q"ÛÛàñnwOÃ%ÈòèÂ°‰è[W¤’¯Æ÷}ºtÕD/»î1Hà TåÎrÜ„®E&#0üz>î…!îÊr«š£2­Âe/ú)àÔÆ¦ÚÆGÎ¾Â¾ûðøHâðè!KÀQ%ÇPWýíÑ^Ù¢j¥ŠàÃ"42fÂ]wä™=òïpLe6¿5"›T¨¶â Ñbâ™ë¶¯›³Eõ™¼;HPÏšexImvjŒƒûžVú’3Ã	¡Xš¡f¥ë¤¼Š ·üÉÕ+'{¼ú¡¡<I¢¬Él–¿}yN4^å³Ð²Fgˆî¤u?ÀŸQ\f¥,-çQàþ¯®äŒCz=â¯v6‡Zö¦µ<åÿ¤­s¬¼a%µ5Š³Í±ò~9{üªH;I…Ë
ÄËÔP>¸ŒïÄ¡>á<z¸Úê±ªV=3ñ8ò4nôz¬¹Û*Š7ÃòLÑ‘]CÉõW&×0^cåQˆ*ù4à°´ŠuB‹¸_UÓÕK¢‚a;€ð(Êkš/‘²Ez§ìñßkaÑG¥}®‘ÒÀ1å:`Æé Ž÷$rjub•ë£Zéµ3R“tÈöÒZ 
‡‰ŠïˆÄ[Rÿ…ËnH
ïoÈÉšU;)}eÁÏ9wF:UuøšfPgÙl¹ÖÿŽsrÅUI”kK6 Òyç…2ä
Åá·oámšYWµ'qkD¥_Œº²§ÜÙÆwÎO’4ê•æÈ8ÍEºñ†¯±eÌY°ýLŽHžÛûÚJx&º¬i<¦”Ô`
òã-Tà—‚³óF9wÕøå¹¢ië6ÖÄÆÚ©ªšÀÝ{Í¹-–ôº \ªþÚ¯æMòÕØGó¡‰4±i36
p±Ü3xËýšUÇù¶Ü‹‘¼Æ„+âÑOŠpÉ¸.à ëä örÖñí‰:ÉsÜåªi©#ÀòëµFÎŽò+ÐôÔ3Ê³$#(‡M:Ú”¨åo–mËP¸ñŽg!¼Ê˜ÝBZ<t Uä7!\i+iõ<\!¯î÷YjëvmÂœˆ’JÎÌ×ÁMMLû_¤ƒùù"z{QiðâŽ1?„ûÑP‹ŒUüioã-ó!x(Ç_<ÊNÚ¤,ÚÎÏ–j
|F»ÙË¸ÓYiýtÐypËƒ{sV°Ò9A*ß ù«)ç~£<àl(ÿX#šŸ5£…ÛÒB,‰ÀKÖˆâÇ‹z ·çÕjé+…4>‰üáŠµñ»è8'å¼ä>U–x0ä,’åuª¸>G)»ôîräÅ1¦õèŽìŽÑtÕñ‡¡Š0ÚQ3ÍðùË˜ìs_g«ƒ2Ö.‹Ñ’ƒ³Ù§bRh6ùöMü9ZÍ‘B¸Jçp¿á<ß/ÃC²ç•Øô#ö½Ü[e‰˜'¨NKr•<Ãûj8þdfóø‹Ï²¨SY®#ÉN¢¿üïÜÁ¹…õ±m)Ïl2F	ÔØ;´ž 6 Ü­Ó—ZQêœ3éä>r÷oÙ¥N¥|Ÿ÷}ÞŒ—ï"$.\‰%#Ä.C×õXÀ€a¾¼<£¼kRò8T¹·‡þ(oB=O$i“nì\íÞë²X;ÜÏ`@Tì£T¥d±YnáÏü¯?Eé*rßàH†×ÄÞ>‚˜„L½åN…kxÛ¼9¬EøWÉA1¹o»@¨¬ÙBÙ`hEòƒÜ³*ñ@.9Ï~„†WÍ÷õPeS¾)€A8MJýE`sgNhÀåúGŽÒ’4~Ðs´ -¥·ÍÇ
ÙAFØá‘Öã|È[ÀÎâZÁ$ú£|5ö";áFä¢z×TðçÜõ4-—ë–ž²^’Íe8s9Ï[J§ð¿ƒØ\A!ô@Ýœ¹•…Š¥Ù.6MÓôõâ'­dó‡·ÌðnŽ$)ÈÔP²wÀWÿ.QÇPVVì<B€ÕÖú)'å±Æ±\Çô.°æœ¶bYûB²uzÝpÊ:rñuŒ¨_¤ƒ#bh|C÷§©ÞÀ;)Lå…^[Úm9„p÷ÊbIEÀÞ:Š:C¼’ª3(G¸_*.Ï	á=:CfYžÚ½lÞý·x;ým€UD	ê–ç~(pãV¢E]»'®p­Èß ®¦jØ~DZ|%¨©m2/À5oh5/§UiEhã@ñ`¹4)ŠÊŽ›Õ-û‹´G
-ÖõlœSÞwÍhrÜÁûÏHkN¡„g`â©¢‹%€4ÞçíE`M×Gè]“Ç¼3¹ÄÛj,0)!R%2µ v-NPC‹¢¶Ép$ã-Ý±[Ó¼_LzÕÖþK9g×ä˜”(ˆœˆ`CÎÑ¼•ü£O!ù:ofàX¸ü<Ï‘Z§[ÿ÷È»Ì-¾ž<¯i`ˆúbå‡‹Ø2—ï°í¡ßu¾ž!ÍæhÍþÐõ®g¢¢)Þe!Uúcc	äù/Ú„šdhÛ§TëÂ¢ä—köóø91B_àÝ?JüBwÑ+ÁfÃJ´Rs098ïk®ê„	ÎÉæàIc{"ÍEuf˜a¸l[lâœû$D÷.XÎ‰¦H³–*œ$r/&’¤ß{ìM·#Wè¯e(çwÄ‹¢ä"Üštè@)Éºcé5™À§ÿ^nÚÍX¢ØÈvš‘"^”íu½PŽ©ïçútcì3°+IVÖ^$hþ9¸8ˆS·¯½RÕg!+VÂ'\„-G†q¯Æ]$˜dé[ù§žC€s{eQ›
h¿íŒËæÞPCÉën“£3¸r:rf*ÖË4.ä©â³
ŠH¦}äÈ›!*äg ÀŽµ¨}ž™	¹Æy!Ÿ7uã£Å¡½ÉÅ›ÒéŒ¸´†(RVrL‚«3öõÞŸÅßví½¬J8P-Yú¬pÐÃÌüO+Ÿ˜¤<.uúŠœïŽÙxÌ¬µØ¾„'UE#r‹¹áh'¸ÿ×QUþ["Íñtä¸~PÐº86:óWoj2Üú¦µf%Ü¯Ó˜C÷Á9†ÛÇ687°@ÞhÀšªŸ1&oZÊ=é2RÞÜ9! JÇcé÷*ƒ1Û¢¦4¤(1FD_ÑRÃ9ãeá§AcÑ¸ä#·“+‚~¦tÏKŸË†ß´1Õs‘	]>iÕ¤.úsò³2`™rèë#ô]+à×cg;¡ûžÉÎy‡šÁE(p¾/‡ö€‘"Mï>~ßJÛ^¿o
ÈœÚ-X£õ0ÿ\Ž)SÄ%S¼‡›Z¾¦&€×öÎIpYK]J'ÅdåJmèªŠÿ c·ÏSøúå"îÀE²
ò[æ_ÀŒ‡NÀ¾)–0Hrª\Àáª[çy¾VÀ‰á±ƒÜ¿™ö9½ˆh±'ïìª|xîJ§v(´Ë¿”lnðØ/“óçÓ²gœT¨@XËÜ3ŠÕÞRv³`.®
Æ¥Î9yŽéÀÚÖzW4a~Ò¾|~[cü^·Võ:ê¹‡ßŒíY²K¡ÔÀ,†®;q…ª7¡• æ#¬((çH8khÓtŽÚßþT«sÎ¸„ÀyešD<8T&x+ImÒ4íDpÞh*,®‡
3ç¾Dmó»öu·J¦ÙxìFx^"ä?ùC¾O¡êËÑø?íÔÌB÷¶ªlzŒÀÇïì«¾µùÒÄ':JDò¨ô¼t:hšó‰!i¤ÕïŒEOñYôTâx(“K©×Wwø³9G¤n¾_Ú49ûÓš¼×oÁŒßQ$6¿"Ýø ò dqÔ­šÇÆG&ç¤¼sÖüb;EXWâºÑ5Yãën{c?q¨‹éunÌ¬ÑP†{Oôî‡%9FjÀ-£0ÕJÚY4™6gˆ˜ƒ„èÃ{`CTÎ½ÿ”L9h¥F 1ÄXªÚûØ°­QN¬h•ó|´¨ì7í•z¬/S˜Üï×ÓåI·9Çc\Héð8Ã8uI'bÙÄÞi¾†ê(:$IÈiédFP§“¼¤e+k^%õøn¡×¡½0:„fõ½Ê¾Œ
Ï}bŸ–ša@a?\¢Úµá’föÂ¿/e÷y/<(ðì2vöç,nð2‰Ø8®‹âä@‡ãƒ¥/wä„“Sy®/Gg†øWÞEuÔG«~¥²„^)Öø—qI4yãÉ^)Ö3}“ä¼PNÂÃð¹àZƒFÊ±O‡¹;ÍµÊVRMþ~ªìÙ‚îk‡t?±BA·	@nü“yøSé7:};è
üúþFpÇ*°Þce³× y^î/G˜g;Eœ´êOs×Èè/zŽÎô;8kXÓåmÆ„¥"¯U‰’íÜÈÚ¢†¦ŽS.žæø$)Qaz´×µ}LÍR{Ïjº|ñ‹½r]v`PÎõFH7w{Ïš. ºëÒÚkë˜`ŠZ½@jug3@pÐ¥]L¶ äŸ(êxjØ¼ë‹óçƒ³am8 |7Ž[Xç›kQÚN{¡êæVD®è‰³O´Á)UÜ^`åL½í´ìg²ÃßÙ9.è¬›éAÃ
Ú7›Å;j9yðÆr53€iE¨,M°–äé8CxÞôœ§Åá6XâÚ3w5pû#±Ù7Ö¯ãßA¤èŠ.¶C|‹š çÌ£Êµ:'Àèš¦ÔÎ6¹„­«Œ§ïBº¾æ+*îÖÏU&È²ï7Ý?A9gkŒÇ9>\Õ]Åþ""œÞuZÚôX›ô{x**9É<ðÇäelëÖP:­£k‘qûûû@áŒJ-}i «|í<ˆ=ã§'Ñ²T@V2_’¿2JC,š-7/QÀôÄS)ýî)•åªñ8ô9Ž¹¦·¿Wû¦²„ÅŒÀs5>ß`J>‡M„Í}3›Æ!PŽIÉ6Ø;VI§ílH‡öJ©w÷Ö	¿Øð—ÃdŠÓª~:j
¾Âßù}³®d`äIvK3ú™dôëÚ‡¥¦ñ^5{‰Û$~àbÄyórý-¾E¡’)ê&Þ&2Ã-¶ÁMâ-„1k2[RÑ­Þ7âr™Ô®â!é„$âåcq¢L8”sÁ:²ÓîªÆ&÷Ø¼ôŒ-‡ÝuÌLIGCÿì.MX®dD¼ ÷|6±Ì—f+¹Ëð?êpQ+²ÑVßŽ«5PÙQÞ‹<[<÷Ü‹¸Ç1l¦,Éïíq£´E+•ÝßÎ'”ÿÃŠràÎB4£!åð"¬;à€Å‡ùo'”Ë›‹§€#ÔGúíK~´WÞÖÑoœ0ÕÕW3|A1…G<D°˜…Ž²njvÙ«ÐëJwt%±8ýªÊ&(ÈÔ1Åh 	R0,§åÎ§w­	v¯»ÅPû•“a-FhbÔUK†h‚â<°¨b£vì tÓ¨D#|âôÇ£õ©ºgÙ•®â23„X¥‰»'c¨ÇFåvóˆ+2TÍºÇuùÈWç˜©o‹þ€ö+Ä³ß¦½}½“ðKM¹c8k6ÉòOßâ³%L÷Ómô|ƒbK«(”1ïIg2úJ;ý\´°ºŽ(¾Šhß,þ?ÉÕH	KÒ§ò!¶VT«X/o$ó0¹+Økd5³!ì‚â‡/Î¹©QD‚ž~¿à¿QhÛN¾Ÿ?m.dÅø`âÆX0Ÿà•®Ú{ìÿÁÎ6yUr*å}"\F¹ø(Íi™<ydN,œ†¥ÚÜMw¹27ƒ¡gÚ=Í˜ã&Z;Ð(¸â#›@ ŒYÔ4¹JZíž"É¯o»¤r]·Tâuükžê¶&Ôüeq¡’½"µµ4°éA‚ éM#’¼îKã0!™q©oWð>kkxÃàìÉŠ®“a³âp«&ÈÊ/ôüÍHWe››µÊ­IkC	PwSVW­Ì71ËGñ%¬ŠŠƒzH/š‹æDÙackB‰~°ý»“§o©ÈZ½Ö­ç}GÈÁ;¾Å¯Jýö3V\=Í—¦i·ç!™÷ÚKYÉD¯Šº¾ànbŸÕ¨Z]y!ePÈl#ÜíøÄÿýŠ§	žY¿¸~Ž³{wýÕŽ
ý¾*$ÅäÇ””
Ñä÷æˆØÉ°(TTÍ]Þ†Fx‡ÊåÒÛQŽ¡×)ï?¨Ñsq¯HÝ?M%žÇG¹v6¹E¸ŸÅ¡©9=Žúåw_ßVý¡Z3÷%¢¥ªMVÈèRt–1a„êãùÓõdÆß;o,<k}ÿ18J†æßÄ¶1Árˆ6’|¯¿*Zu¨ÅpŸCEyï‚›Ðm’5.ˆ±ÏŽšhE:¾%bT3Ú`hüríä-U»íœ‘½<”+KN¬’º¨Ôûi%ømƒÿõPk +äj›3´ûawß‡³«:¨«²e•q&–ùGþ¬ü—ç‹ËñÞlC£Žûëùu7ÉÁt0¡–l4GØüb€l
BÜžîÆÁ²<££–5d^”fXžœ°Ã§»ûY[Ÿ“ÁYWŸÁÈ<¾:")‚Ûò+áq›ö¹%ÌÖãigæwÇ–@£x?«³d½$Üƒ‚BSÝù=KW %£ÞëZ9˜üúÞþL{QÜK{À…­QtÕ!@Ú–×Fkj¢É(Šá^
M­û>$´Ž`+Mø¨t·û•·þ¤[.ƒí<º<nG3´ùßÊ¶“¾ä8Ìc: € ˜šnÕ°8Åld³÷uCÓáQ¸˜-}lY¯QY®E„PÈ¼ÞxwÚÆ¶a~”ò”¯Ê“2kêO›ÐE«3DÙÊë:U1d¬-l¬C¥bWmí¼åµ‰®q‡à5cå¨g¾r3ˆq! &É“ÑýØÐ'»¸¸¥áúgÃhei¶àŽ;ô Ë~½ñ	ŽXêÁ…ì‘õ:Õë‘6&èG“dNo#1Ns2Ÿ—Í¥û¯`¤¤Âr¦ð¥¶d¸’2AU%‹¯“`…ËX3ÍÁ+:†…>O~7kVbÔ¾Žbdñ½o«í9u°í	Ô[“´©Ã0ª:Xò8êí½ð1æ¶E*õ`á@wÎµ]8rÝ¥¨¦7Dh«k´QêÓkwŠ(FbÈæFÍ«¡MÖ0¬Õ©]^ÿíûK•~|´Ç©«=ß Ø0j¶˜€ì¹>Šõj*K¥ú³L£_­.ËšBfG…‹Ÿ ™4:'BÜè7Õ2<“ò¾›|A	tãL,)mh=é¤Î/I¾_ý…slÍ]cÆòO.ùgÒ€jóòd
¼}eEøAs¹jƒj^@ìÕã„^‘kÛ¿¢-¼œhÓÜ<Õj\Ù¦ô9‰ðÿ0qŒ‚µîÛUº&¿#ßén¿±C‡‹mfs»ZIÁ’OÚ2Ž3£Ñì>¥ƒk²UŠXÏN½

—UÕíhU*3Špd¢Êl?ºÞ¯—¦z0ÐŸéž²™0’ö(ö®›²‚ìÎcirì‚Æ·O©ØWŠ·ó Ïsã9 Pq¬3ÂUsaG½Yø[7­;Ó|êí³¥À‘´CTPhO%ù€nÁø›tZ'¥`­ÿUX]ÉvªK1ƒ´˜GQœ›Qƒã·ˆìÄk,HõªŽ½LH•áG¼ 7øÕ…ÊD‹œ¾ûx¢gÆ[Äf{é(Ùëýßé[æ»þÿ‰ÔŽ×d:þ;–cš‹‚Õnú×ŽM×(ñÚ6.ÄM4üV£¦²¯ÄãRªƒÉÃ7D•µdÊËSË0[¶–Daú:w$Ö°wnj”NQ?y"³	›ÕàÔ¤âmIYgj70´;ÛñŸŠeb	³…%1ê_Å½KŒ%ÇàÍ(’%¥	A=™=4t4 ý¡œ°j+ GM~æHe yœ}*1t$)…’úH*ÀW‰±ÇyòÀOÜˆŠ8Åj… 9áÙé;¶Yâ^žUoÛ¸J³™AÞƒMyz•ÆeÏ"¢ô´ðv03$ê0_>xÅNÔ8~7“¤f»!ÿ´×t7Æ"dâ ŠdœkóÁ¶†øhÀ¦ïþ·èG:®Ï>"üä%ÒÏ¹ÌOÚ<à~	jYýQiT@òå1&½'æžW/úRA­š¯‚Ô!½ÂŒù»…ú]uÜ­j1‚.×¥ã:¿X/v³;Oá~-¸í—Î$ôcoO‹¸­sÖì[J­û¨–H5K†ö¼Ð-ª¡{ŸÉ²	ìBh^z¸ëôÐÂ›ãÎ&ÉÊZV
°‰¸2úCr\×¥G üG¼’^†õhÛ‚lpç º½X~tœb‚%¬×žŠËéIdf!!pú¢C1œ˜yà9íÖìÛ,Û€*–³Í…cJY`î\ÓFa˜ÛƒðPÍ’˜†Ò<Çu*_|ê¬ñkF/êR÷œ»þš¡±Å»J?-¤òñ>—#™L?¶Ž€"õl¸ºæ_\ÆjãÀæqÑªó {±fÒù%ÀÓ®Šâès›;añ1j£¦d&X‘©YÛ,ÔÇƒ«#{/è¼jÄ¯Ãö$@…¨Éê_Pw§6Ù§ºw5Ž®âøáˆ
¨â•Á•kpÒ)Svîè¯x^5ð˜aaÈ@ˆOÓr}$Ÿ“MP¼;N“ åËOATe6c|†ÆE¸áMÒ|ïÂ÷P4­léÇ[Ç=ÝØ{ÄV¦]‘•7Ž#Y7/£Àl;‹û²=dEo>·"K½Å Ð§Ù	%.2ŠÃÀŠ/Ê©†‰UÞY#@¤óÉ\O‡b^rae½ç,K'TcaËFÌqôJÍ{ÄS·DÿÚp(ª ›*uŽáD!•ûŒpÍq—!ÁïN¼PyÀÍ‘M¤Íô¸@‚/í¼\5Îàlñµ§¨ÒŠZH·ºÙú¶ëê@x‹Æ WôuÉ`h7å„ˆÏåÖw§ŽL¨@¼êW |¹ˆyˆ”Nú‚¡£­€ÌWðê´ù#v"tÑTR‡A_:#òñaºík:Q5^wÜ(™§à«{'ò‘­-_ÆûÅip`YTÅ	ÔEõj+¯ô@¦™1—HýÓÆ®š_»ƒÀD[M\-¹HÐO:‡"Ü=«h@5©b#@~í{`Y„ç™{Êå”	ŠF/SeÛÛ'UÜ8µ€ÔÊ½´ðÁù°RÙèÃ.\16ô×b0\"ð;|SbáW—­PPjŽE{ñÅHBzîÂraBe6æ`4­š÷·Ü¥æYƒÎ|‰šØ=}p¹,bVE¹<‚¹ —å&ÞAÒ¨“œ±BÙA¼y+[°–¿û:žyBJÛÙ˜Àz¦0-™û51x¯O+mÁ^áÓ>ÞqyÍÑeY}úÊÕg.`¨2ÓþÛÍp¼½Ó—Ë^ŒZbWªÍbÃ˜é­7”Ö—˜O™3™°†Ý·¥+ÏhïÅ¾ˆ‘T‚™…:beÑÖ'¾âCè¦L!Hö
u…þh UžÚq½Ñ]oÅ¡Œö°±Ý8^è0šAËäæ»YæÏ;¿+ö¯ôPÝþïãƒöØÌ½í[¾à¬‡bB&oEÊD½žˆSÐz·ãsÇ7ô¶â<µ*#ŠUÖØÓêÒ©ºþfz'»Ÿ0F3…<'×<ÐS.W·ôùÛa0gïúRÐÆÔ=¨öœ?7TŽüÙàRASn‹çyæ£¾U€R|Úáûéäí¥Ë£Px¶-&g­AH­+­H>ÙJÞ…ÑYT¹vû~{OîQJê¢rç½ÄžlUÚ™ŒÍ? ¦"~:)’)A·ÝacLD“Þ„0eÇŽW÷½2Òc+Û0Ö‡ÆJƒxd€æûYýå˜ñšÍ<ÅÝ³Ø;×~3<ñ¨C:£¿ÝÉbE=.Æ„õhQ«ünzj3t/ó7Ýf&iZ¦˜Y7bøõ5û¬X¢ò¶z˜½]A=Ê‘q¶°LŒ°ÉFÉJã¯ùšÄÔ]Q±šZÕÁ³êÿ•zª0
"uqa]0å‹ä+~|!¡¤‚œ8<›90¢É²Üêdž{Rœ<|šðê´‡à$xÚuÅm|Ã\êlUO¥¹zêŽ´iáî<8f…MD6›$Oü*R;üi¢@¬s¶8›áø3c\ŽÅfj0ï~ªî
µ-šq	¦@vT¬Ç'IÎ6è¿ùB—{N@«kÕÛT(*à‘ÐóÀ—gz€D(äº÷‰_Bä÷~A×µÞa L-ÎZp”,ÚáÁØmx!À¿"~€ãòÀX¨ÉþÁ¥Ï+¦’]^·QE.þj• 1ãh+ˆåÅOz–ã¸RDbB‚ƒÄÉZÝ®¶ˆÆ‡(VÉšÐ²ÿV¼å,Q»u/R·ôŒÛ&ôn0Ye'’Pz?€¡Ë
>=ØèiÞTiñçÌ5–¿i;ž[ivà"}ÞeÎO€cÔ4Ž¹«š[`Â†V1zæ||ë”DŸaØŒW7(jÅly4ð¸z7~aPÆùƒ<—1Ç ßbŽ4º>­v4Àãüz8Ò&KäÈ_¿ÚGîg/qº¼6Þ«q]0{ùð<óÛðF<êÿû›^vå¢MGš ãÈ‰ü]7"0C[§‘¬AœÁºø÷×"Æ#FÏŽÍÐÊöÁCuV/ŸjHp,ëaitQËQWƒjyõ¤“4ÛÜ'@úÔêš¡+«*N©õ=Ò+ëFä“u »n¿æÿ~`w&Â”ÿ¡¼ï\^tÎðEïy†Š‡*)‰aþJÇf9÷vž‘ëýr¾è9¾³'¶Üß›‚SzrúAŸ›T¤¥1 Éx®œ¦SjÎ; u¹½¼“ž*†AQäÀ[Â|Ê³>/r"d¥£×;ÆI°¹$ÞÆ—ÓÑº(¢‰ù~‘xXñ¸´ª2`8÷Ñ !5-ät›Ta½‘T^Úqíi]J×¬ÓY}uRŸŸjÐ·TkõŒ§/¨s\pò@oâh³ñ{Ù3;çŸ7 ¬TðÒ=.×_wJêÇ€H*FãÀò;OCfn¿·Ëí.‹óŽ]ûŒ9¤1©èK”·›´ïm}öòL{¸Ey0R°{—ÕÝÀš«To‹ÉÜŠ¦©ör=˜+-—÷&ê6\·T«œyû¤B=Ë Å\ÈÝ‹íÅÄ5d=ÚÕÎK¤O˜kÌÂ( †G |eËˆ“V+êÂL½¹Àö’UZ¾‚õO`?¬¶<×…ïíy!D,»KÉ*¹Æüýé‚¤4(yNÿèT«:¥Ò|š™´¹—+ô¼"Ç¡âþÚBñüU+¸-äéÒVr˜8Y^½Phzø˜j/WÑ„j=ì"xmHç!ro:ÉŠ$î1«µ(J‘3dä¹kÒAv]qün<Yh}²lýÕ‹ïM¹È‡^Qïr$%úè^I#rªMÙ6´e©ù[h+ß½xccd4¯/¦Óa4’¨!¨ðâbá÷”»½…ïÛbˆ%35®3…3Êv–šÃ¾vö(}Ñßc›9“d
F9®‰=Ü¿V†r.6ÝõÐû›KÿªU˜>ª¯îÅ‘¼„×¸ýåÎ ‰4“¿Ww8õ'Õ£ˆŽ?#QoÕ?é€Â²Oá˜'CôÊ!G­Ä³ð™aÒ€ÀãÛA+ÿÂ_ éZZ£~vÏ+NÃºOª.?LÉ®èNþ~>T¯‡5,dTlõß›ÜœB´CŸÁèªù&©,Ô(Îû¸aÀÜeÚŽDôIah2Çô2ÀÓÃ½â*_BÊóHƒôÑGBÖ¦¿HÊúŸ« Ü¦!¬ÅÖ;>±a‡VÈ–j•Ã½½ð*¿–<^ýp~|¯¿ÖvCÇ~pÔT?Æœ<±b¶eC²Óç³‚EIšxcâÍGuîÛÍóc’™ªêÕÒ  [Éc(tºñJj¼”^âPš4üRXˆ4’²y£_Ù¦MÃù¡”k'hÊì6–B@•Ú›ÑÿaMÇøŒÐÆÕžÀnèçCŒµD `B1c¡PÑÕªˆŸ¡QëHŽ¨¼5E.à(¸ûT›SºŽãt§ï 3: ûÅ²´… aH‹AbrbÜÚ¸ãXP™þ‰É,Ø›}¨¶™Œ.:dp2¾[ü¢¦Ó,º RZ/×%¦¦}­ìRƒQëôVá°Ž.€ëmB$™`ê’ÂŽzá<Jýûù†›í9˜Ï‰
(tÅŽ‹¥pº§›C}Ømüäv/P£îÉ¨N6ô>nç›ûUrëgtÍkp¸ê¿ÖÓ‡æ ŒXµ+Ì ´©çÑsþ×èÓwp&ûÂ#²µ*ˆ×ªš\^ÓO2f	õøJpÙ÷.ª½âùGC’¶OUÔÈß©÷Ÿ‹Ë6.(vW¡SBÑ}­Q+:^GùRcì¦ñkàû]wÊSà²ðsz¹{ ª «0ÀºbX2õè%ÏEîžºF¶é¨Gö¾ø]Ú;okGÖ¯ýèö=Þz4)æ«GECU×VõõÃ“½#æ²Mà»y#á[’Z7½D6÷ˆ›i{`÷ÓLbˆï€UÙ8ŽÂ=Õ˜¸Š8­“ØÐ”ûTÓªdˆÂ*[÷Å%Ý™YY5\	Ÿb>~ß¤C\óë”VM”!2b€BÕ8³É4Ô¸iù^ºå±ª€%z%~géøÃmH{nT*mémi´X^*âŠœˆ.’å<$0m;«9íTx²?'4‰`‹Ç… ôô¦H¾nK–ÑÁ¯ÆÑ#I5åÆÛË…]S;F™ àµ{½û0­«©¥¥ðA˜‹ÄBG^vJ‡7< *ÁáC3ZMònKÑÍCgÀ%XyïõÄÓ.WJNè¦Ó+R`Fcº2 MòÀôâ°‹×5)ÅiÔ‚xT¼Ã#ã·Ž|q€ãU_S~ó×ªÔÌ=:3O%ôäXeè—¢Ñ9P?PY•æ<_Ð×“6ÍÒ>y³sí7ëz)ÛTÀøÑ5Ì`Ntiý`äên¼®[zÆ½ÔÀ´5xz]á³ðú,êøœ¡ç#Ï¥R@û»_²fxW²ãáh{ŠzS´—)àæ^7¹”@*-TŸURäDÊ8â]Ó­³Þa24lûÚÐT3—ö‰w|r!‰	kÖÎVÂo\ÊE®):GÞ ©
‡J&MHrtU¢–oš4VþERËf3ÇSiIC+ štF_‰Ü3%7œdÿ}ŽáêÝ}×|HØIµûFO…?šâí_*S^_ä»±Óº‘n­gôû,Úæ&û0#æŒ"ï_ZÃ³ÌÂ2Ïbµ„Ýµ–v.Ó•ˆ(|Æù7}xþ…c=ŸEq„gÏJÞ:…¤Ö¬¢g¸W¬*ÈcÄÀ}²àFÖ'¦ù ³É•s?:@nÙÞøC€4F¬sg/ø6Õ	š»Ž–X£uöÆ{›ùÚ¢H™Â;å¹=ù‚”Hœ¶P+r˜þšãxxË5Ê¡É-cæÄž©Gô?ÕÅŸ01µ,Ÿ„Z5²Vˆ„ÑRrØÑm?=iÒ’!JèÈœ¹—m
Mß„Ð'iè³Ï~]Ð‹‰Ás`!Ž\óÁ*—Š‰Î9\>WÊWV6!àrÙé×¸3‹>Ìê!OeJ¦^êq¡³gžäg‘@{È Z{0¼lçPo†Áº^¬Ò¹]FE&°"y‘¶ùÍ¾å^K…ª¸À‹š—rC„`T¶. ¡
ú„7þåÝÃ—BÐD—1L*ô˜”ÊÙÑQÒ0”ó•KVÏ£ÜšZéj¸¤ÈEJ ¨¬ñO&À™~"™RšŠ®¥bÈvrÙÅ'i÷<ÇÓ-<JË¢Ð2¿é¥ñ±þä–N›6°ë?aú4p6[„[X‘Þ}Ptë[ž-ÇÒýðR9%Òïý>ŠyìjžY¦kâÙ°öˆž•y²¡M}9Ùƒé6¥]Wð„jyè!Ýòá€âZÞ$övx°'’Ìr–òÃDµDº¸b­•Gôö/aXRœv¹ou	‰›§,PÏ‡ùáq¡|Š©Æ©òyOµÊaL@_7: D˜¯‡$üœªvº*$Hèé¦?0öR»ã¡Å†ÆG¨–ôSqÁ<îç#‹ˆÐ| Lõ¦î…&
'05‚S±îG’ koP¤š]qJÚ´ø6›”ã:gœÂ]â_¤¥›Ö—
²)m¶vÀSÂõà¬üÍ Ûß½CŒ8ðÓÂ+¬µ«/ìè¥kLËçUma”a”ÉMœ›®ÒÛœ¸AV»íîþX€¢ñVâ ;ñËòrZ[™ÍÈµ÷ýE®J‰ÙrÒ<ëš„‘ ®×i´j?oîÏùGE®êÐš9D'EÖ-òÀkˆàÚ\qöM­€¸Í<G*Œ•AØ¥Ø¨K‹2k <ó_¿V`‹Š&¾°Ðr*ã¸Äû¸MÆi)=Þ#6"ÁÛ¬›Ñ&Móº=§3?sè¯Ñ	Ï¢Í kÑ{Þëº™Is2B±kÛ¡ù+õQ³Èê3ïêÐd/Ë¦ŽÓ£“‹Òî+„8.´Ôí¢ÁyÔœD×µ*K‘†¬Q.ö©ôÝsü:ÂÂQyÐîÝyÌ}g£$Á­)µ·Þ·p·3½Ú[ó|d€Ë-Lg°? h‡¸ ÌÔó2èF×vmt~ßˆ­l²’»8q/ÎßsJËyF9¹âwÀ“¼pªŽ¯o{ál{¿	èQóÐÙ¤§yÌNñ2ïa@ëŽT$Â”‘Êf¶ç¹º¿gUé”ÌÏßùFô««¢Ì¬ô3F}XûÉ?ÊU)“NHŒ1AB‹ÑÐS¶cs'žêW¡'™‘›KtÁ8 1I‰ešm0á nÉe
²„Lt^–ˆgÿãÜî:rÀL¢RL‹ñ#QÑ¨OÌ´ÕA®GÅ{Í7õç”˜N[¢¡5˜*ŠE˜® üž¾3‘–úUãn+\]ÆèK¯EëA+G3€¥z*2ýW¹.î[õí='o7”–N‰	„Õ:àVÃ,¨~DR{QÙM²½õom®…ž-ï"DÊ;žŽZ´1P-ßà!»ëøoÞ•}QÍ7ÅšSó?Ö÷{Ò?ê¸‰áaSº^½høüÂ‹Zö†ø†ÅUÖ®¨÷-0ò/«oŠj­ªaîsUés6õ&BRð†5ûá-§u™	â•U÷»%$¨ãF-74Í»U^?[
ˆF“|	_°doMu(¨Iø\YƒŽŽöýôü¹{D!eë²$ÞÙV[„zÚ–öbTWx,ø¨€ïÊhÓ})Ä° Kq$°ë'•Ñèv:;’5ü­ùõæÚ±ÊÎ¾°(/£ûkt;Ÿï½à wô ¦çùšU—õ]ç\f~,x‘j×—ðÉïÍý-„R‡#ŽÉÆ“ýA“ÚóIoØEƒ_XÒÎÖZµ>/A-…aÐÚ&kÕ›JE)¡O3ËÃ‡Ü:/ øk	ëÂí›¡ÚXò"&u£´!¬&ÍÝ/ý¿³
†dß™DA.¾oíÀtZ6ë¼g¼ÐœS)>˜»gíàñVD¹8÷í|ç‰hó6åS)	x_iì\ì[žRøžBoSÍ{œÕXI˜½~OKàë&á<ÀÊÏ|Âh£ú]aè\Jƒc,‘;\LÊD«“ :AóPÄë/‹Æòõí(µjÎÆ½X8è'xræ¤ƒTGêŽYn¯ÑwnõoÏêp[ô|M<¯!œ+uÎí0/5D“ÃÁ/Í‰E>Î[ØÞï×qø©;WòÛ:ÃqÑZ"6žð«%U<Êˆ:×eçƒ,^Uœß†yI»¤4"A6 Míö©o**"”AØÛq‘Cz-^ª1†ò(U/„ojç¬
|˜7'^‹ñí.œˆÙC"´ÌPúZýà·¥{ú~•ÜÕ~ÈÃ	G´­4ôÛÂ(Ð' ÝZÎæÇ`#‹š9ìnÂ±Àq€·³ì­€å¶x×é/‰@Ãèø²*¶°¬íû =*»šÂ—Ê–Ç²ä¤érsµ²@H—òt°ØEˆ¾ÊXOÎ}’×Z6å,EKá™ð-BÅú€u‚ÆÑÄ ³>šüV*-}Ú`Þë×ÿö[8#4¨ CÅÍ¹L+Þj«à»C“4-END±13«¡.ÍÖ¦ò­Ìdíî<Žxí$†•V]}Zoµ<Û—sžéÙ±P/yË{à@`ÄKˆh™@œ˜ï9ÄÃmˆ»5~½"d¾2l÷ŸðÊ¦áPCT‘”n"@a6òÏeÙR%%9\{ø§È½«î~ö>¢oˆ—taþ0¥˜¬,—Ê^lmŠÀ”fôbŽ#œ«SvÖèC<¯?Ð'
fÈ*‘S¤_ò™¡!gúˆöÐÃ²6[P–Ê#¸—:¥- .ÿ¯×4ú\Rºà!s¢ÞÏÉúì±ë´5P’)¬ýÈ"†x(Y‰Ù&W¨ÌÈ`V'5 2ØAÁUìw\ Èè"N¿p¾¼ó¯ÔÕß˜ã†T÷ý«o¢„Âb†GxŽŒò³*šš1@&9ƒ¬³À”ÿëm¸©Y¾Véˆ L7¬£×ûcî5Fk³ËSø¸n´€ÈØt«ÑÕÙO‰úêÇØÏû§÷ÓY°Ù²ý÷¼A‰t8ž¯_ý%¾aÖÛ“	%¶vj³ÈïU6ÔÉ>rà¯>„Íª¯.¹Tä…p /¼ôáº°/€!§ü­LòÄÌË©`6Ë0Ù?§n2n®­¾YDÔ’êá@ˆœ˜#e{@B¼Œè÷`¸½þ<±2±Í{£?4ËnŒûþ«³ŸN·Ôr¨"÷lø˜¾€’(xè²?”9Q+ÊDÊ=ùhéÇ¿·÷³H‰Þ\_ áfªšj­àa‘·7÷£¯F 8¦¯”»;¹‚J;€òß‹‚Qk•Äp£´ÅØ×°¡½OD*÷€'É]©\ ñÇC½›z;Åœ§Îg”Ö:+-N¤8Hîu(&Ë;Ð›;‚¬£è¿[ñ›N\êÕ?N0#W›?&!(ó%#™¹V~³œJÆÕ³OIÄ"°H*U[Tzb…˜û˜ÏŠi7z;G?@}ÆØ2[®™êóû;‰k\"w³ûÎÛƒ1á@­Ò@C räˆ<ù8öŠåäjÓùÏaåëUÃ¸9L†=jâÙQˆÖéÜ"ÜïëñÎ‚Æßº‹­jk÷BÆXêà! ÚÉ·Ë¸ìs•ï>v”DŽì†¾Ÿ½Ð~-Xýïd&ôûVYŸ-B¨ŠÏ$Gÿ1$Éâ1©¡ñd9eƒôÊOa…)þ¼íãB~¼#B'ZA/wl ,4¯¹	VÀy§2DM
ÙßLÖ¤UÐ&åsqóˆ2ù‡Ñ$Â—¡¶»›ã¡LùMîíÇßAãó…“$‹pŽ&˜ÓÎ‹w‘íƒVáp± µ4	õùÀ>ì[·!7–NNlàqk©<p_¾*âW5—ÇôãÏÈ!|ÈÊV\›å;,Ö±Þ_çí#Š WÀ¯ž”{U½“s¢’è*é]vWö@º mg¬î¶5¹'Ïc…d'zÍ™—ý‚,ç9_S‹šx¸ð+Ý/\ž=«ñ¼g+5AZ¤ÖçBÄ—¶;r[˜¼ƒrTÖŸ¤÷1ù©'Ô„šdKf–Àš|¨ì¡‰×žÕw ¥!À2–LÂó]ÆŠwÒ1ž \&Y]ý´qP®Ó¹•#^¯eG‚øÔ(þPø^­¬zº¤±Z˜«ˆøg»
†¶µ„7}¤!áÎad^´¢g¿º¿û²Xü‘O `
»7ÜÙU¯n‰ãó{žßoJÇcÎn.úË9kŸ~tçÙ@»èVð¾þooÔ(QÌþåf~â~–x*Z`K­ÄõòdQ®Œ­9¼oÚÜŽB#5¥þ0lZ5¶dq¾Æé0›ÆPlˆNÌÌ_˜‘»)Õ+nÙGyB¦5Ò4-,P]OçºhŠF|IGw’#L_­þœç2ˆ“°2:µ´xxÈ²ÉW¸ñíN&/Ã,Î²¨°il*oƒ $ð*Û/»¥TñmŠíH†¿Ú_EÒãSé"œÖF3 ‘N£dË[DÛ¯F‚^dìÞÊK˜dhP–XyEVæŠ²\P±‰ùT—øçôíGhl4£b®ªã(+U¬ŽãU]ÿ6ãBJäÕú6ì»Ÿ]«Ì®	Âs7´Îqº.7rã¼|â^ÖÆSãèñPík˜$ˆ“nÏ€‘kæME·˜&•·Õ+Èø&‚:Îš kŽ¢`b±¸'Áø~ãDY@×u|ü_dN+¼Y­»\Å¬òqØS1÷m·¹ã~„øˆ>âØEq‰MçM{“ÏÒ£µÝ§É˜¢[4É4dYÝœÍèdÝêÒ,/ÎŒÚ?ÏUKÕck‹±Ü áÜü>#øw¸v²aœ‰d®šžüY(Y4"§5úãT£jÒ·bÞ(Dyýå‡-R&f•bØò5!½¯†Yÿeqâ
Yíul@cZÚ¡¦Cq9bNÞ]üM9†³ÖNyQv›Pnûfnfi=Ð]Hùq´Qìÿ2°r%‘bÐú9ÔÖÊ¨é)?á&ó¤*86Ì<¸Éçd z¹íýPO:‡[	÷x-eîm0ˆ™µþž´º„k*ÔÊö‹#Ñ©ò/£í5(ö¿jÜYÜGÜ_q€Ks×Ò:“*:bÎä1ÿ”5a3Ò%õÄ ¼üì*Ë:ñÝÖ]B¬’Äú	,§É2ˆ,²Ý?‰Ïà¢SÞ·0wzü¬ þ•®ý|å=\Úœ§*¬!€{úeCM*óâ†Õ¹¶#~ú•2LÄ¼·ôAØÂó	Éy”=¬•çÂ2Ékmøh¦,¬ü”ƒÅz©VéQ:aÑúÐ¿ŽŠÜGd¾X&K%Þ_ýÔEH‹Ã¶š“\í¿«8‹#L¿_0øÐË¬çˆŠð-‘8Í…”¹\ß·Qh`ú$M’l»2DR¹ã€”¸Ua ¼¾ù?å‡#Ë…â‚„-“(,˜æn<y9x 'ûý=ì©½0;´;+œùùí²¸Zïñü*MR÷r¥/Ð
ÞÚìbr1¤íèûßÃç4Ls…ÈãïÚ“®J€¡‰Lí›Ø(7•f”ÑdYCÜœ2Ý²#öÑçë¦bäúî¥€ô-fb²"f Á‘ßžª‡rS±£{Ì°=æc_½öÄmúþý5s CßU•¢ÈÚ9x‡0}ZIH-<@tÌ¢Ü­9TÐ±n§H%ì@{qDÿØä6?°²½ò©1íuæBå¥ÁŠˆ¯%S€Ÿ”á›\â±;…@|˜øŸQÄ¢“·òþŸšJq¦+çúµ>ñ±qŸR8•-)5`o  ³ËY:ž­imÝxûÜ÷uñE‡!ÇO’‘§&(@·.(ÍÅjlç)VžEÿ–±‹ErZ„Î=,(™ñÿÏóŸÅdœ±ï»ÕG³—ð?|„§#öÁS¸³”¨Ïú–½Ùß¦*=yüFÿ‘06 w}«’ãÜïÌ$žl·‚u„àmhi}‰@ýÚQ×òHüð@rç0Î®—Ì¸wýXnÄ	>üyœqä.N:ÍBÀ Xj!—ñ€ÚÝþêÖw35¶¦]×•ðN“wjÇ€Z§ªjlbN¼­¤†øT@8.©£Y¢êŠ‹4_%Gg¯íŽ9	@¿¢HÓ£…éV'ò±û"‹lÈLˆAAµBX¶³ÞL…,2mÉ‚uÿ¿RÒ¬I†'Ø/r$|Ô½f9NÊ]ö¤RÛ)ˆÏ ó¯r&ÊWvòDêëºj¶z¤¹ «Ÿ-_oÚ¤Çñ–À»wÔuÑ §$Nh¥{TºùÓ,Ax-„#¹Ý]2-ékYè£„•.)S@f‡‘Wtr5òÂ,uv]4ÈžÃ:°{y—q#£OUèRÍ°FÎ’Vöð:ÜV¸ý’eAø´qå‡ýÒ1§p$m‹ÍzãGv¢=íøŽ[Ù@Y‚ÃÎ É³ÏeÞO;ë¨+c,ÌBŠ´yæ ÚÊíÞX¾ß4YL™ª	g„)y”)¶¦œ€…rUÚËgqiI]`m5òº©/ûè®e÷ç¤ø&U4¦U<Ûß!á'8ne Ù!cSõ~-WÇzì£òýª°CÄŸ_^hôÆk qÔf&þ}éÜ¢É"2‡]¥V@ŽFÐ!ö«ÖLä¬,4Ù`÷&ó>íÇ!¼8Q­±ÜÈ_NÄÚ9í.²ßaÕ˜ ô ÝwÖwýX'44[Ÿ®ÃÑ7c0©o±áûvØ~ÊC3~ºW—oMø@ü¯¾G=_*äóUŠË<0D
jq«‹Í+s·k5<X«ÆòKÞHÝ²¹Y=AÇIì·í)Aæ†¼Õ<*×±š’/œ…Ýq˜D¤ú“ó›}Ø ›ÅÚµ¾Ùfv;Õq û(ê/g¸ØijÅ¤®3$¨á.z&ž/TSWÂØE7;Q+©éÉB@r²…Û6IÃfO6¿Mûš¯¶@éUÛk¾Y‚\²sb´Ý<Þ'Ã˜L"T}‚%¶
íÝmžÃÎSÆ²ËÛ×${K…ÞðÂe¹|Kõš)³((vÜ·f\3…o[û2¯è›)½°1ã[’-€&›v~Ù	èüJíÞŒ#<§¢XsVVÖÃ$èIÊÆ^üõ†œìâÁmÈõÎF"“h9SPyýµÑ¬ÛæÈ•“³l¥rzH‚A¡ÂÌšù†ô“ØåXb<¦|™ûûcShÁµKe²ÅâaÇiÅÐ\/JÝ]«tÐÁ†ÔèD&ù,}¥È‚spK¹…ÐbQo„–ë}ò%}`‰ŠpûÍ¦«AFlÇs‘ÔäMÖ
xLº2k¬'íXsS§‹GêžsÐ2]¼ù<Œö§a¹Ù'b1õê*"éÝü–PG¼úèzUÕ÷oÞ/ÔuvÛì<•5Sý`$æ_A]¾#Í¢KÎÖ#²{·“7}h=|1~-tÊÑ×ï¾øë³êu+ë§]xd&ºÑ1l#@Ñgç…ÁSüÝ2KÞÐ

MLÔMðÍcOÏíÄV9LM±y©GŽº‘_ð±B€ž{tý9k'› ¡5ì+=ÿ€Æ,œ¡<–‹8×°}e°ø%ª§böRšô…HË ±ˆ–v§#ÝÂ°Ê®¢ÉiÌû:ÆlzîÖn®/8¡Å‘®çu¹´ŒœAæ—Ma±÷ÔMºmP!…††Ðçmß@øvœ/çë£ûvêÂ$Î*ˆs1ãrìØƒµ T¿Ø˜ -%æµü·ÿª^ô?q¯1[¨­ÿ˜[1¬kÞ‰„,[ºG¦þÉr“ãÉc×[‹j-ÂÌ„`p(ˆ)Nw]Òq¼ÅÀÞR· Ç›¬_²”ŠÖqSºd‚I0kïÂœR€Ç?WÆøÖƒ°‡lòºŸº¯c®‰¾ƒš[îÚhK÷=Ö&½»»M×.7¶ª;fdü?f\W0¿Ü¯ÜþÛŸ%7?ôç0€¡!¶®»ä	¦¸¤iz¯yížÐôP}	‹wâMð°áZwZÙ@ÂJ¢_ËH!(„Â}Ê]ÁÜŽY)ß7þÔYÇ³û‰ïg‚°‚f°)%<€Ð”•È×Ý~z÷Ã'iEi&S<eh2r*…K¹%ø’º;Â¯p÷‰ðŸžIZ—¹i©Ô8,¹Ü~› g˜à‘òE‘š2}mµrç„)^þ'aöÅ¿‚¦ùAsèLç?“÷´þ5Tí¡Â%),Â´E¼¨D yNÞtEÖ‘«šÿÎƒÙÒ¾$EÃ“|ÿ„æÎJÁÛ¥Ì´šå·r¯¶ò´gÑç1¿Ržä©éIœÐ8dm:ÕºeB
Pç_²êšø¸©{Þ+ô˜3dTó§þ5Wk*Å[7EÎ_ÍÒäzÂÕñNß;¿†œ¤Âò˜LQ}Ymì!iÍXl›™Á›Àà‰dý:œ}þBÌ¿›%
.ûxqÂñ—ëtëº¤÷ß¿ðcQ]oùEÂÊXŠ‹iÈUs‘Zlx¤Ç§œ:ú3i `Z™©Â3Úº”ÓâtºxË±½ÕÔ‡¨É“XWŠ#hŽÖ,äº8Ihøú’Ê¨fù„ÇVÊ
†³¼š{A0SÔŸ­'XýIŸîg+½:ª­3¿‘§XyÝ^%—P3€`Ö0¡âìžœ J¨ö±ÌŒuu2×¯…Moÿ9‹q&ê\}'ëÀågÙ™UL»PAŠÔÚ„ `´!3ï®‘_!w&:5¿?;Øü@”û¦`k¿h%5ÿÐ3\¹×Óè‰üè¹á+f&¤çU6å)þ‡†_‡”mMmq¦´Õ"û›Ëk»*æ.cy{k!ß	Fä¸à¤ØÙ~%£;&³¶þèxæº1÷íÃ;ôZlžø³W"{ËH–ÜÀÛ©{"nù‡¶&´ª¿¤³…øB(ÕçæžË
•Bª—µ¾÷Ã]¸­$ÎÂ%)“üWa>”Ø»pL*ÂÞUïìI‰ñæ0b–V" n#™±‘	¹läoRBPñ'¥ØöÆJX;tuªiæùY<Íè½…½u?aÈ“‰ÆÏyëm$Ê°ïu—^¾±ÔðÝíFªZ³ô?“Ö†Â‡™i¦ª8eLk.Uí8#`]×oúFO@e¡ö+"ú;‰¬HŸþ-û~P Tjÿ-J;‹ÒBÙ@J¶QRz0í!C¡3‰ËyVpÛÁ@´Â8p¸Èkz¦MÕëâfÏ×õ¨ºdw¯8~aÏxñàñØt	!rÌØ7ª¥×ØoŽ'…Oî4:è#Em­òe&¨OÉ³™ñÖ›>/"u‰£ûIowoY×·~„ÿ9šgÓ“A³MSÿET~ñ³›Ð#GË—á&ÝêItÌ{R°~ë!}l„áüfÅOjV]ô— a3ê“	ÝÑ[f¿xTKÖ¾Ifeo_¬ì¾ó+JñÜ=~g§Uîé‘ŒXµ’Ñ­;e6aÅz[¦Y5<Kü t**Ê-ä1¨Z•u©»a›mIV]„²‘ÐÈ<ïå3ËsŒ«rÖ‰²»E¨4)xj’áájyŽ"@ùMt[²„¡ñS1Ê_÷Û÷„¿L¢£Â—=Å³ü^„ËuŸ©Af[ t¹:¢<À74î_cßÞç´¤
j9C®r`—¹Õù†)æŠÀ¨;ñ Øp#PitšÖ•ªÈ@Oßl˜`áþ ì¤ù†Ç6w¬ýÎuÒžŠáCId³P@þ”p;ÅÜûv«•ÞL³ªX$&Ö>gÒ,A–ÕåP‰\h½Fæ´áÑ¢{¼› 0Õã©vèÃõ£¥aØ?ÛÔz tš/8Á;™ÍÂƒ>h$ÕšT6øeýåå[]êºÞŽÊ­‹êà›é®L;¶‹ªzð “=Ë‰£/ó¹ˆv~=8M¸äã_‡“ý}µ/åX¡ÛÂ‚sÐ4‡åqªFvauƒ#wU£¥z¥¿âÇk%ò8]B7|[êxð@ŒfAb±à_ö^ N›4x»  W®3±œææ-2èÚMO˜YMDÛâ—SFÞ%†M¾«ÓUÛïÒLH#²ïrª÷K3"³‡„~±äªÔ‡žãÕ9²õ{\æ„n+RÑ¹¡62QÍý?0ÎGÍ‚¬à„(ºé±Á„“L ö¦Ð]WMZþÙ~RèåLê`Uy."³t/Æ!k	õŽD±ÐÔÈ™fGÿ4Žß£<à
ø'<YûaïKDÙ˜šm-ãÍ$„m\Ú¢f¥îLîÑ®óOrqNÐÛÄÎàò‘Œà 4.'vvÖ¾9rú¢ÙAç’¥{½¸4¢ÿ²»!\"$Ã¾æ-ô%T‹”å²”ÃR6ŽÓ¢£Ôª1·¾]\ÐýC—¯—©Xéa*lØ¼*ÓXDóMŠþ1CuaF÷ÄEhx>šJ0Çf¸$ŸTó{Á¹;Tª™†KGmq—A¸PÔþú*´¨M;¨3út-YØø˜±6¼%Ú^×,Ç‰Î'gÂ"Õ‡H>“|Ê=ˆ:,záz\ dâ¼–^´á¦WºmøÇö&—’ÁbÐ@Çà’Ã ú^¿V{÷‰CÊC]Á‹Èh+^0wÌvë‘}º†fœûù“‹¿æhr>}’õ[6½åæƒŸêký&iæ$ÎòØVµ[×xÞÍèû!>%BàGNhöi¿šþ2ûrv¯«=ßü3ªôr_ù‡]@{a9LÚCa—O¢ bÚTÄŸ¼¬Ï“ˆzøÎÀû ¾^*»¨º/·Ãù·ô0Œ˜ú“+µU7ØÂ¢È		 o5¢Hõëp'÷ÍÏ(k$„¹eûòÅ“Xˆ½44ü¤'=±|lnŸÈyXÆFqÈ#—Ñç.ª)XÔ„w28Â.ö(Ùv£[^û?‰>7&õèG©•ÊÖ‹xôž›ÙßÀù=GÁz9q•ÕÂOé°QÒJQþošBÀ+­ý?ôÿ}~=”br¦ßtßË_ËíºÎqº<ãÚû½©§F«yTöS¦žnê$ BsT&VÞ¬cL¾O³óWùëçlWMåaög6ÿèÄ°øÿÑ„å t`jÇÄ°¯íùïUó&·h¶J·DX§ê2„üØá‡ÖÂç²oÊ©«½çßó=woö—4÷}UõcàZ]Uˆï™ö}·±üî?ø¼lß¯ûtjÓP¥óÞ²¼/%Ûxæ©]MÎËØvŸÙûŸsØd<jÜ{TO’ÒcPËòêoþL›Uu4P±ˆ ƒØ9Ù©ïƒõý¯ìüŽ¯ØùxWäÔ€Ì[(#õµü®üÈ ‚9Ÿ‚ƒî/þwrîtùNÚ÷_ðÃ KÖ²Óª£ç§ÙÜ)èx%¹yÚ?WÓxÖƒ5Q‘TªÅWßQéìlíøþ‹ÄÑÈËè»ÿ{éuûm;[{=G3¾1hŠrœv™Á€ uu@Å&;+£Q€rGÙø@ÒJ¨³L‘hçà4Ì²ËJ]½\}éŸ¥ÿˆzÇù‡šÔnàóäT)š&¤!å	L¾
ÀMëå½¡Ž¥ÃÍ²ßfÜîcé`2yÝ¦zS.o{`¤ÔŠqARYãKvš ›ëüË’¢S<ÇgŸû%R½éC³!eê^¯êz|ÍZ¯d`¢Z‰8‰[šë[5þ”T,sXk¼÷ö<æž«ˆAf˜‡zŒ™
Étê¡‰e[È²ÒIyfd>×R¾ßÂG¾È]LP7<}àéÎV…©U—£N{ßÔÔEÊve9YÕøPa¦† w“3ŠÔAæÆVk°%)·/žÊLÝ¸¢ÒqñÍ¼¤ÖÜñä:xV{keéï†ËúÊcüJ.QŽMÞ,(©‡õ­:yiÙ{øæÐÞ £Ëáp™KÏÝÄ›ôø°ò˜xJ&©žäžžAz• –ÂLÈ?{í}uô1aÅ^‰!Ô‘4ê¦Pfg×€ÑbµûÈ¢…ÿ3+âÂìËkf›sùô&½†¹þÆí/àìº™‹9±™žì¿…wâbå÷nS ë'®Y&üÿŸž	ùäJ6dÅ,[èž (¤ÑÂ.dh^ª0nÉÐSeEBÙôzÜë]Ë¡¡"öbˆ8·”R|£&žÚ}¾g&Qúzµ5M•+Q­st‘¤,0Ï¾xé¨¹Ãsu_ô³7¢sZ˜Õh±Õ)©½ýSA2>)³½5lÀ÷»»ÈØôëMs”ÑYo
 d=¡„Uwå]ß×ÝKðl&Øêå}W%)v”0aëæÄŒ´¯p’µÜ±ÁÓÉS´S\4ÇÂX£®T!OeÊ›f	d	§âYÕ° Òˆe6Õ))­XNô<ÞEÁÿ?Ýñù½ë{a]´¾úÈ ¼¿‚Û°X†Jîe|'6úC7c<àÐÆ=«ãžÖÖ‹ zxGÞ*M>¹0.Fº?©•l‹?OØ°ÿÒÇÑ-ÍãÄ+‰ÍÌÓŠÛ+‹}”ûÙjÍ9—THœæÝ8LÖoº’·mMeøB Ë"ööžX¦ÁWòNrþò„!Ò _©ÓW\ê&”T~ö/æ¢òÖäY;ær Õ¯¡¤Ê­rðúÈðe„ÑûÍkâ“¸¶Òþ¡BÚeôÊ°Ì™š¤é˜9úö9{œ£K's_4ó3Þ·òâT‚HDˆˆøÉ¨­ç›ºÈÚnGÌ ?õªÝ}(á{«Ï!n(Ú§w}L†"¯	m):“í÷“Ò\ýæ®‘Ž…Úz­Ð3µ„©‘›è—Ôy‡©ÏžbC}B³è±‡Øå\t÷nÂ¦!f3Ë÷ 0½úš8cmå›5ÉH³ÖÞ“ÁT+¡×8âËw—oÄ‡ŸnvÅ±Œ«çc¿!h¡žbÓYHm[ž¼p¤–'>±à`“‹¹êÍL3Âq3¯¹Ó‹q£F8­©ÛŠºòy™Þ¬·^!‹	¾fVo`fi}ÆQ$V0B?{Wµ–yó<È ^ßô-áÌçsPIužùï°jýÂœI—.D¬6kPE}Ù	ÁÙ˜³’w ÎÂP9ªÍ"/h1É5ä¹H;ÉæOªÜ­Úš:ã:¾c¬X…Ùå[vDÓ{ :&  ¬ýÞö~Îó,é·yréÛr‡ßêjbáæ8>÷±ö¨õ+^ëÂ×i+l1º,!Û¤ÿT½Ò°œÁ=¬­Ôÿ~0äÜ.À¨UXÈJ®ù—OAmïß{Ž1LÎ0Cï<W8S±¸ÉñTïCBqžØBë<ÐùHÂT@™ŠÂYCÆäErïØÆ4½rÀ¦öËz‹_ÎtKÙ_¤ßçÕcê¢ðw‚aÚ–þõrœµ|¶~
¿ˆ³Ð|ºU8N© 6¨ÉÁ!aòi—VÕür:—_dZîvµžÝf7²ÁI #"Œ«em¼s‡lûÕAi4]Oh£^~jº2øªò _hˆì”ìÌÜ™yYm°y	ÿ:zËû¤¯fœéJ)L!^W£ü+½í=È–Os»öÛ[
È­²J‰u^ç!ùK™qÆ¨eÐ_Jš¼ôU*"ˆéI“¢ÝÐ´)éwNÝñXÓ½šÜq™ÝêaÛ¯¶Áš ¹•²ôÛÛvuy
ê·£™ÝEÅOægé…Ý…q D…‘ñK,é@°_´ºð­ÂRƒ`‹ 
P¥ÜU Ö(†|½8É+Îú‹ñ>ª¯ÁÆkõ×÷§vD>äë“¾ï½ds´·a“BûIJxPC€©¡;iÍƒ Ã¯ÓÍ9ª,r}IxbŠÅO¥&í¯¡D:¤¯`ÞÛ–úÍää[N¥:¦\¶ÎÊçsá¬ì!aRMB#ª¦¬/éÎs(5ËÐkeHªÐ¢ƒä—UÒ”ÖÕ±÷/3ÒòÛuPvä˜·â0q.H±Ÿ¨?	:^b³6é¢ÎaÙ>}Í›crÅJ>TÐñ[ŽåØŒm,ˆÐãdì¢5lÊÖ‰¨>©F.‰µ‘|_§dX±Ïµbã¬å¸%¥6›mQŒC¸x
-Ãmç,»’3…¢æý³ö:¬fÌ¦ËÈC_àX’iáHT!7è(	»¢ö¬ÛU3bÃL²#m^‚“  %…¢£RÛª€Zö‰±†LwHŠè¦Yµ¤v5‡E¯.†mCÖå¥í{É…#‚
1¦ö¡Ÿ}a0ÜL­²MÊÌ1V¡™yä©­rV`–“ –eÄèm­7··VãÙ4Å–Fî]ÞUß˜ÖR ´ÄÉn½GÉî
 VJ
T"²q)‹5:mm1RÐ£8>3ŒcTœ+!u®2h¯26ú¢1‹Ê‹0µÕÌû§$m‹—UwHç}ˆçÛ‘†*	ÁfÓ{-zð´ßS"av¥qÜ+0«2ï­1gGµâ$¸˜Ù1¨é.ç³IoÀ‘1=!ˆU1¦ÉÀdJÈ­VE›–°MT¥G\$]€’	€çL„Å¸¶ïÚâH¨Ç1l®H[Iµô17ÁÐ&Î*‹HÖqHÄ÷6TŽA6‡ˆð­ú*,¾Õ‡lÖæ`ÒX &¢YbM@EêR”(AJˆç{Ñà¥RTJµæ ÃÊ© ´“Fã
ISb vÂ+‘3)¦lˆˆV·&½Ô¦'Ù²k›j° ä Á“q‘Uº´Ú-˜ÛGVÀÁØB·7~ø0õ}ÄV·KFÄ&.yŠÜÃ(e%	 @	Ð|¯ƒ .Ù‘G«ÝÕNƒp)BNÂ“CR[÷óZ}ø^íˆù >¤àí¦Mu5|e,RûôÊB „p 0
Ú4øe\»ì3ýÝíƒ·°(§ÔIÕÓ¸ó4mKú÷ßù’ó°ZÃB¸4ÌÍ©½ªgð½ sò%Ðâ2Óóõ½††>+2Ç~õ·jl`—º1nZû1Î§®äÉ[T®™YF²îOÛþ{jwjb’~j®LŸçŸø±¢îÏÎ†jä ´  ;ø*$ŠŒˆ;p
(ŠýÎŸ-Žô_wÅß¯§&p:ëoÌméêI¿õIô-º¡¢áXÂh¿ý£ÑÎª¶q”Á–šTì¾SiVJrmáe “…7—ÀÂ×Ì2ZÉÏ….­)QqKSÓ«#.ë¯øýW(9Zì%+ôH&	Ÿ–ÌVöâÊ±·q•ï1S-Ë÷V´aM5ÝÃY¯2Úu&Hìã²æ'ûµ×-ÆËSP±Ÿu"œ~UÚ<¼§…7éQ¡©m¤™ÃX(cŽ£ÕÓTš†yÏ@|Ë.êßê/ÎÓ£Ÿv)…_)°ÈÄ¡“.5èÖ¸¬ÉhÙØmÏçÒ(¶äc'Ù„4ß—w#þø)çJÔßH³ô(èÞ½Žzh–Õ„¦ó§'Ÿ³AŽþÞ$çò;ŽeI‹ÔCÙÅöò s|mƒ³ºïS²Ÿ¿ÐÔÔÊè¦«YÄ88ÿgÊÚà˜`ÑIëŠÅ@ñ_§Áë.>~V‹ÓU,^úÞïÅþÉ”Gj¨!$‰Ò@þýÿáúÿËÎúžÞÿÿÖNC£9ß¹qm|(!Â9*­*v×x6?ñ~ùzxVù#üW>Nr8Œ£â]bL5N§cì=æñ‹pã—x¨@Ÿ’’ˆÈwŠ*<öÐpÈú—ûƒ›ö’\Žñ÷ÿ
<'ÙWC„IÐ€DÊGúÇú[ˆ
oy^„Ë{[{Î›wü78Oïœýg~Òþª–‰<C7oo'Ëº¢ŠQû3Jq'n> ˜œÑ,vËù·=¯úT´¢¢Í}_ÖPR©õšÀ£yý¤Ë~Œ3Ñ—§K¶l”Ï^Ó›Òh½ã7¾·[þOÝÂc­\ßÑÚQ_,n*ƒ™/ÊùÎ=Ä	uzB¨É,àý±Rmt+öÞ?ôyÿä¨¨©”>ÊŠ¨‡íP?½‚í÷7gñ/âù?;†yíÂ¯bÛß*êºUÎNM\=]€·ß„ðÚ9g²ëía’8½o¸<AâqÀcOÚún4§5v|/!Î+@ÿ°/>•#„s`€2<O
Šž­ëJM b8”‚È¢°M”6Ôª 7•½o…³œ]ž“¸TÁß¤Õ»}<˜=ª‘š»²½f6îmá7‹~Ÿ‰jm:!(D¦$Îåé±9/?µôÞ°„NÁIëBÕ+K+•R™ôB¸YÕË­ãr%Ù«K1•¯‘™	¢þÞ`ÀšÓîÇúØbò"ö6ž·K9ë/Çø4žÎ«ò^ï´r› Âùzù†]®¨5ìV½æ à§5¹ï²¼4±¥ŒÕè ÞPº'~YÃÓ5™µfâÎ'á%O›QrÁ;ø½¿|íñ·s8CG~‰GÂÖn>Äî#[YBÚ³³%ÑãDkaÉô¥€ëº,cŸÜ”c[-P±½çFç0¤D + "ª¹ö?MSûïÀû9›—¦`@ zéÃzÏä–ðÁÉWW‹ß‹\WŠ©»¸¿E)S.®åZ•ô]®ÎýÝ Ð`{tÙ0%€b%‚˜^ì-V»˜ Âšâ³ ;­rÛµ¾þ]Ú„·Êª{ÉÙê_¿1WÙƒ† b»ó]µvø?swÕmÜ¯ÿ3ª©)@,ºÎ6ë‹Ôä,$„dd‰¿zŽŽ}[,lfïø<Kòð®i
ì“—®KE6¢o±TÄ‚”Í¾¾çâ¸<^f;„óQA+ª—qS¦\3:«Ûí©ªóo*q—ßÊ¹xõüâÒW=©ˆQŒ“N¾QÔ`aÐÙ+UómÖ{`sÒIvcXÅ‘ Ä)®¿oŸ—ÅËo¥›faÐÑ—7¹šä¥ýœjy-¶èÜç^ÂÒK1$X­G^ÿìÍÐpÆ8¿6ƒnÞ§ý´³´÷cVý™¤=–´ ŠŽ~”ŽïÔÕïå@=§2Òž_>eóÿ'ñ1ÁÇç|«]sPW±Š_3]´½ÄšTØ
I=cPP0!õ™‡3’ä¯bÞŸƒà¹Æo{¬fp{N±³0ržË¸"?^µË•c²c£øüß,@û³ëhôgNïºŠ+–P„ÿe¶›Œ½6»“çˆÃå&à>‹®z]°cî©+£Þ"ôä/E&à^bv2R±)¹¶zû2H½„Ì!PiÎ#à°e]’.â- ÀBF šÃÃ_§àü/Q_:Äª¯¢“tœz¼uöÂÓ«5i¡Æ©ˆ¼"b>»Là NSTšWBÕ¯P–½Œvêd''F8Ã Eêšž€¢œåaãt4‹.KÔ+xôÓ ^)´£­€¶½û-¡4jcÍt1äMÛ‰¥R÷Ï«Ó†uså{Éª`ªž`T¹@Ñ5üÅ1*eU8Ý§­ò~.éå0ÖýÞŠV/Ô×P³ÜUÐ½¿åø8œœÕaDú´8ú*{Þ£ÈÿÎæÇ7F9êëRžÚÔbÁnk¥õ¼ŸÚ¼&G½j	é£RLž¤«ÆVÄ¸1¯™¶7¥šd%Ò‰	SW[½·§æ|NU<Ç1­±{¼£€Nv¥C»âü®	£*´çx~_åý>ê`W¨Ågîù^ÉúØ•r&oÒöžbçöÍ—;>ãç€½á}ª
ò+Ë¿2\ÏbŠÿMqÓÐ~'ÑüŸ[ý;=IšjGú«wÒßy¼kŠZoMa¾Ÿb¶6:‰º!b0“'‹âr?»+LRÔRÈÈ“ö<NÏñ?K>\vyéê¹“z†W8Üú¿Où>'ÖÆ~–®7kµµ‰¶Øé¡ú-•‡A
~Ÿ™í¯:\
ÈzÊáÓ-z‡Ætg×ÔÐ!´Þìï‘Õún¸üjjEß#«â
¼iHÔúE(ÀÙß"4˜jÝ'!(…–vÎ¡Ø¾¶ªÕÒîåœM‡–D›/O‹AÊŸa5F•Ô•gWÄ¬~›lx$r £ê6×ÃðýŸ‹óyÑUì+Ü„MùfN9ˆQ
8˜Æ1­ˆ(wås=[A/k‘Uj/û=pñÐ½»3c·Üç§ë–^ÎBøSøn–e¿Yäütcj=Ž¡Hkµ_âð¦¿Vl…èTôTCTDmi˜ÂSÅ9Liîž¼íòFØÙÎzôÍì„bÕ•‡&maõú½ÿ³¼¯=_0Å0œþAnÄ©±xªþ­£ªë^Ïhõ @Sn56´MïTÌPµ¨p vPT¯5jüÊ)ò8NÆ¯õa€ ¾R‰4ýãóÐÄS+kðÿÙuWc›ÎjàtèÜga#Y1Š,šìÂšeUF9Y2Ê¬¢‚!|ee€Å"ÖId“09¨™v9”ÿ_·óò§jÌ[Žû)úÎ$¼Çó‰$´Ä Çf¢*4ÖŸ´*ôu^?úâ¥Ï`²Šn#ãØ"Tµq¬ …Vd¤qâÌÅ‹?Wç²m©ÛkŒv:Á¾%¡NeV¯³âø\ePýî8–l_™ù1o¸)Pü³R‡ € ?lÑ·‰žvó|‹Ïü‡?$pð!3‘x].C.sDoƒ0AÐŒ‚mnŽ½¥øÒ?Ø\{ù¾ë5™ªÍË•r&+]®1#û¿ñ{žÅóo|á%,&¦˜uˆ¸¸aRÍ™PnPYô0½ªJBczRÕÂÀØÂËM"…ª‰UJ(ÚÖZ‹0z¬ÛU¹é´æø™ú<dAc€¹;"DR€ˆ7â5@€{ÂD.±ébùîn/«€-dD<2S¨7±(&.š¶z-#3Üâ?»hú}j|‹{Ü¢äŽéÜr®@ù7€n]ìXF*°›¢‡€R)ÌZ§¥G´%ÛºôK`SŽš·«¥ˆþý5ŽøÊv—ÕüÍCÊ¯{Êü®_–I4À|&_ w>É|°äÂdÉ~×3àvyª"÷>í|K(fòõLë=ÕÃ­™Ùu)Z(;®y€Ê!÷“ çA<'#Í”ÐOÓx5u¶ù<ˆ|}ß.¦Ïå­yÃÁ¢ÅÇBÚsÊi¥ÐhÍ	T%fWŸßškYØÃ¢9€¡zÕÈpåhÿ*bIá[ò|:õ´÷vö×C›®<4°§Ã~q ‚oªƒ`V§U‚Åäd!	IuBô(±›a$$’H2ËÌfñ›ÿ%¹àäu;ÏÃÑvYY¼va¼Óë¯m ?iãÙáX^jåÙÏ­ÔÕ¹ö>S¸©—éÈ¾J†¡˜…Ò’Ëy»ì·5õÝ.T8 ¤äãk³]´r¨êq†0-P¨žJ)Ar"q{ƒ/Wœn6{Ð%™&óq¶®?þŽÏoßs- fÁ0`ÃN$Ë¬3õ­ês7uG\ëÛåj’X$IB#Dÿ¦óÎì3s÷·™çk gâîú¿aŸQÜÚ²kÙ_Ú6®·Ÿé÷Ö86«Á»Œ<cP ƒ=éåõt´L¶.B=Õª
'9ü\™È·|+„Ã€þXjQÒ—¡ÂÍ‚þz|{Ý^ÔÎ·žß¯«ZÖgSøÞé–ÐTÈEîÈ(M9nð·Õqki6w9“¿èWS~.}ÁT@H©ËYˆoöçºqèõtv{>¶ðsÆµ*>ïo•ÆA€)ùØÄ•Ú¢·av#ÆíSB&¬³‹®Ó•ë2ÕÒOÁ;´]æ²à°†A·‘ÁW¼¼§•(©¶Ir¥*MJ,X}nÓ)2ýŒ_==S“ÿiÍ®KìÙ§ ™ÄN%§Çcµ9S(SAxÿüJ_¢„}–-ÐÌä`ÎéÃU6ÖÙ\"ŽtaØîÄújÄ=j—/¡¢$Z‰Ž¢
ÝßŽ,
çõ“ÄORQX¾8[ÐÇE‚JhéÚÛïVÉ½Œ<±¤FÜç¡ÌŠ½>§q“›Eüëø0ØÌñyÁXäyöÄY:=rÌ™˜èYLÓêßS.ºZ³¾?Ó”.xR¤ AJUf‰ûi~5ï„u›>q™ó±Ïù‰¿'S	k-ç«çŒVÆ€¿1§þî:Œ&ôpË=©:æŠ(ÌO´8ÂÄõÊÑÞÂ¿zcaq©tg¹w¿[ÆTÁ¢g»­9K­Ò¿NhT)å³Ü
\­Š«g.OP½tj¸\7ú¨¤&§‰¹Œ&še(H @D¢øõµæx¸{]wY¨	ª*@A1ÜtpëshòÐcœÏÕ:º…hËÛq[C˜ B¹Ãy;†‹H®Mf!ðç·nW¦‰=®‹¦ù‰lYØ•@ßë™}TÞ4
Ÿ<øC¦,Ñ=j®…à­Edç(TXûió×Q¦0^"¢s	BXÜˆ­ÍæQòø5úÝ	/»²ç^rõ…êÛj:åînq¸Ú;}J=67çìûl¦ä:slEÁA$µS3`ØåBiëÆEió'˜k>Ï£Ü¬Å–wK»±n…ÔhL/îÒ/nÃ^-¬fúUôÔ‡†uæË·QGeªïî¬“,Ó]“Ê}LîÛAF¬‹ìûïr“‹ÎˆÊ;ªÒ”%[¼*÷"Í…0wó
C×çOÁ,ý”ù‹¹—/{\è#kCeÁöLWí‘¨ÇžÐQ—ãøÓ÷'{­m‰2aîÓÕŒ ¾ƒs™¨Ü*ÂµÒÄù½ÚNRU^,ÃZ©ë˜Þ­·Á‘ºgi”Å­…‰®ðÔ¬·YuÁ‹S`Øê‡ÞcG™äOì²z¶¶{áÆlošŒX#B :ipÅ”% ˆÉ›ÝzÉóÏ¼¥ÜC ,seCž‚˜ Ãâº¶wR4ÃÅ.Û œýÄ+Ôþo«Ë¡–V¥¯¥ûÿ‹‰Ü+v©D”×"ˆx@¤Ë.zŸs8aÒõsZÜÎ·¹ì{ÜŸq}wÿ#OÅâêÛõ‘—EVÐOf3¨nò½."eNÿú¢$¾âç’@Nñ
X!rCÍ^P¨{ÿ¥ò¾/»ä{Þ»6‡CµSž–ÛÜeXWÈj"å‡ò7Ðçý/‹øßi¨ùÞÙa{D)U'V”ŽÊ¯•þÎ+CÙøÝ]°ró&c©§—º§3_ÙD½EUëýï÷zÿ¥ñ1qW«ÞÉiöõR2ph¬®šÖ{Hû®çùò.LQÀâ„+ùj_·F Ö@¨JkmXß3w‹5ÙžÑÉu)@$)@C£¢ˆâ%CÇ}OkÉõ=OéßøÎÏùqÃs2IðÀ›«5á×À†ÏÍáóñùÅ‚¾‡‰ŽCŒ¾…ÕüŸý²õ¬k±Þ?ï!±šýÒvû€ó>¢hîhÏÈ‘+mnÃÿžÿƒò¼FôSgWC'i•òî—|à"ù‹ª£~aš¾Oâ{~«õÿ·K­ûÎ>=ÒœˆV[—sÒˆàì´0b&6ÑÜ¬¾×	‘éžÒjnæ:Â©Ë¬xþrAnÐ¤ó  * øŒ)…!.ã‘01ÊŠé¸¿Éè38—ùÉ¼cŒLŽýùqÀté@À¢!KÁ$ø™õj©4á¾˜Ý–×ù¿Ï¤óUðw8š7ðàË—­`‘ 
¦”¯m’Åß·æœ´Dd3" `½~€ ­ÎòxšÕI|Ù¿´‘@‰w
C<þÛB¥;éøAŽ|&Mqö(öAx¼kgŽŸÝt˜HL]u÷~*¯d‡!E<nñÀ—^¼ÿ„åt±“e±x¾-+÷;o¢õ8ê²Í;xˆg‘Y5%ƒþklRüzW°às©á›2sà_/_Ã¿[äãøÃ÷}©+ÚWý7øéF£ÙaÿŽ	Ö®ÌÉÆ0Ñž&iÜïTêçÝš¥;¯Üø7-ÔÅC¸dÞƒD‰¬)+*L9Ô;)g)èa¡òoÐùYjAí’ÈøØ,§ÕÍ{åj±é1c}:º¼—ƒb±ï`:ÃÅUE§ƒÇyÕÅ!“â'‡7<ÉKÝˆ¹AÿS¨Õœ‚F]¼U‚ˆ™é	Hg»(ã;”ÆCÌUF´EU,µ¤ã¾šV. ùÎ)fÇN"N´6q8|QÌº æÈøHiA§¼&7Å,¹êTþ,Fö†vžyKìU…³Hü;éÅW¢	5Ç'%£ïaAÿŒCBñ=¯ÃJþ‘V[ÞÑ¢	§ÅJ c‚à¯X¬äÒ0‰i±3ØÔ9ŒJA© z'¥X÷þx#æTA°`IþëðÜÊâSr®R_ûÝelRºŠ¿Z<¤yÜ€HD¸W'ô¡±ê©ã5ò!€K““À^Vé/f4µ±x™lYôè÷yít'êi{%!zéR,1 ƒ“ÊJÁv›Óõ´Zí‘Œk¨®¤ª]7¢)F=æ&üÖûŒ7aGÿV¦ºLùë5™ÐÇÛ7Õ­•¡r0(‹+™âƒßrÄZÒØŒ~5"ÛÕdÿocûØuá(ªZÜH•†@ÁÕ<®õY^ì[Û”Íß¿5@ˆ8(ûCw}y›í.ë]7=¸>d‰ %	D4†o@¼4üÄ·’º™üäLß£ ðZöY6"Ö%´Oë;péƒÐÞöÌðÊ™ @DÖxåÇ~Âç§CNQ8ÜmôÙÅâßÉ!K²Ÿ¤9Óôq 9ru¦ì¾ H"@ ŒP“’ŠR°¤¥{Â±8—ímÇïë‘½Æm¼åçUÓð,A ‘Y‘Ô‚œEŽ§ÜÝl47ã ˆMmjA;û«g±Ê·Ïâ©¾O±9~k…½þþŽö¦i¶qö–IvW=¼âç%¿ô–»+c·¼ië8y‘Ì€TI$R#Š,EUL(B˜SdUHSJ‹"€ˆ°UT…0
dPU‚€°Y"Ä@YEŠdb	 Ær¿9rçËÐãfÛË–êåðd$	Á’ùÇ¯Ÿ÷²îhmB’½‘‘ëMS6,ðM0€C°6²ßì°tØ›@·´v¢ÇØ¾ä=°6Ð3D€ý˜´`ºRôÚÂ+ˆ‡w¯êÌ%R”BE’E]* ‘	$$Y$IPlÒŠ¢È Œ`
¢-’’ÈÅ °E‡bÂ˜‘	-*O+µÍ·Âä½õƒÂ¸£b$œì¥ª!T4@‘ $ö™‰jC
 @(‰@‹y6øYÙÕó¸þs9÷ÿùïp¶ï¯›–¶:¼A4:›Žª|^o¦îÃc¦ÈÅ[/_ûøì ú˜y;å¹‰„®Uæ©6[K—%¡‡›ÍÊkp“ƒ¼7/âxú¿¹+[Â¤!D"áìyhK$8Ý5ÀlPÝ©Š£®a
P:ù:„‡\Š€F8 P#w®ÿžËŽqâzUàÿD`  å "(‡B`@5ô­
Üú:û™TùòoXx‰X)èTÎÿVŒ?nÃò#bHCguÆû¼/@'LO}í|®ÛæÚðàÄž#kú>¾Yëß9I‚FhWmj†ÖŠÆLbbÅãAjGÑEë³þ™jÿÏÓ.aÀñ!A((„(‘`€F„ôý÷•ù/<¶)øÀŸùþ¯×ó¸5­öÜçÐò,ÍÁ“—Ü\Ò`”H2qòõÅgéw};ñ»ÞË¬áó]Ï§ç>¶vV¨=WDøkË‚þÙø;<ü i©”@Øòüx²cÃK…È`Ò"¹© †\ËN[ÞøìÞèjY¢=äy‰DÂ@Gó
Á'ù—äñ²7K³'#£Óö)l &rœmo­_½£ü“Áåïoÿä€ðÈÇ.ÕUã ¾ÌRi@#ÿ[žüÛ&#ÙB‡.±õp>'@Ë h`ïý]ïñÒ.ú‰zÏÞÉ©"Ñuº”‹\èrä’ßkw`®¥…",ðÂ=½ïg[WÚ`@R@!ùÈxàÈGgêù;Ãoàÿ¶¿¿øÕ${ßoÚ¼0íý¥CÇd„’ßƒ¯òU~‹'Qåj|îS‡Ôe|\Y¯Eºt'·p³ÃþafÜ	LâeNMªé!.’@Ãç~…jÊ°’, w’Cˆ„™"Š¼¤¨¢aýšàúÎï÷¾#½õüoöý^[’Š:D 3 ¨s~®“âaë à›* ÿ‹ZO§7õ)v:˜mâè#Q L1‰åUº¬Bž›l˜MBoÍê<;ûÿÇ«ºFÅRÆàÀØ 96¢!22»Q%³ˆšä÷=Ô¬bR—Æ”R¼ˆˆ-Ÿ)HØR˜" "1ï‚a ê (	&LI‘æw'^·ð¹û÷£Û˜gw|â- .u”žA€ùÝ(^ZGˆ¶Dˆ
 Š]¨¡{°œã¸Èïþ¾ÿoSänÔè{í›Ophÿ•8éøØu×ºñõ`YŽsÞ}hç÷ØHÄ@…ÜœMkdë‚‹ŸRÝ +ÓŽ0^tQNßp(×«"àÃÀ)sÆ9¡=ô=ŸÈ‰¤ySÈ}Ã‡h&Ç¿´XBÂ´$þUˆÙ?l=·ÌsŠ ·ÖL¨×ˆ?½øòe+”7î]™Írôø5%§Hhu­ÆólÍg°é× v bî×™{K]ÝãîãŸÞÑd‚3“þ‰Çáôrs2ÏÓí‚è$¯¢¼R8fY'p&žLV+— Åê¿-ôÉý¨ÂnûôZÚ{×Šø/Èþ!P$-Áx•+˜uÐ÷"3–12ê`3‚®ÿ†æúê˜c_}’–¼¯Ëç}-EüVï¤!2»<5áâc$RÓïÐ4.fé¾ F¿R«à¯ù@ÞK{Ö# Õ…žp'ÁÝkÓ¬EµŠ 
×å=÷ëkÜ<äéÑ÷Ë¥f$N¾u~‹µ±ßC‡=×”£‰ô9ø_ãÐã­üš^›3I2]Ÿ4Ÿ& AP"BÌþŠ÷Å‡pSSõ¹l9i©¹‘ÔM1øJôj«§J¾OÜ×°¡'•[Ýê7ç¥:Jlò¸s½`8„€L š$ œ+xâ¤€~PÀÁÂ2…|ëû
ðéÖÎ^\j:x´Næf¦Ú[éfïo”GÇO;'ÍÙV¹RO_Ç¯c¸—ÔÇVjZ¸¬Õºò¨é÷€Ÿ*Ÿ:½ÎG'.gð”²q4ù¥B6rì}pw´¶¯‹”ºÁ+‰Oˆ}ÂiáZ‚ÏŸ—É“ùÇ@¶7Ñì@³Á¥øZ±(¡³ybþÿÏ—³µÓZËSCUáÊì1-›¾çhû!Kß~‹Õ|o£{Ã~˜ÎX­¾ÚI9ƒ{BT\®V;ç2ð­ƒ†A‡›ûÖqÏÇQ>ªUvÛMëð"åé¤¦ý=z¿ó.QÁBË—Å8~_¥N…ÛÅm5 µK/¬G».gœÂÈû¨ãàÖšv>ä¾h_ ¤QÝ1&	ˆH*šæaŒrÕR•ËI}©e
O¾f\Ûx':T<×O#_ˆÂZ‘¬Kù“3šX¸ˆT>¯î¦ÅÙÈà’_“Aìä•c¼((ÚVÌ"ýµ©Mœá^ÃH‰6FHÛ¤÷²g
‰ìÉr¼3ZÍL?'å-u@ŒÌÛ»·®›øì@ØhhÇGY_é pF¿7ýë	ý²åRbùœ-¾ÏÖràÏÆÇÐ ­¡+á) ŠOb7{"Ú	#„7ÈHJ;¥VüŽíë>ÿCÓY£çsú¯Ë¶/÷zŸ¡¦7}¨ß¤+´º¾¦ßZîj×ç·Fäqâ‰™ ŸÁ%ûUïqÕöÄæRi>_‡ï—þ³@À	Ò‘‡dã-<å¨ H *@d$(ô
Q4@ ‘ÑÜ/`ÓUÙ¬Ä¾f­½®ÑßýžÛµÑYÒºF» «DAÌJ
ŠB€Ä”
¯Áû?«¡y÷yh¿fú¬6ò+üµ»^ŸYd'ÏÕ¼|{X7àgËð„„‡+«±­?a\ ÃO‰L¥Çžñs½6·†¸éYLtÿ^|*ì_Õ†*÷’$HG2j ÿûPk¦6Ê§
Tçg“ÕQ´ÜPßª;éñx€ÜdíÉ:bc- Cµâòlvèz­¯žïü;üFgæ;ß•|vŠjç!±¹ {}w¡#»—"aˆš1Ì}Ú;ÞÂ}Äý»üNé³eÂãa Û‚èÑâßf££1ûI>[%èî8˜w“}ÕËÒŽ* sËX/J˜¶QØÁ×ÁÒ5:\p‘äé¥\x¸ahÐÁU6œ¯ïw#òü»‰ÔŸ¿Èý~cýuü_yàz\gOB‚Í\ëJ`<“!$8³—UËâû+4^„>º·øÊO/
f ù1 Ë°Ð©‘x¡‡9
H@ ”   ÷¶¥¬ŒbEˆ‰æ×%×»wpêÑB!Üv#2 t¢€_€
tIÕ»(ëy>lë¾­ä}œvðœdyïÕ:MëH’]ïø€7}*z¯êÐ’;k‚÷k¥ùæì ëJþÕ’ãûxþ“ýÔË¡ð
gˆx¬ïü›šªšþYh $OÆá¯”,-. ±8s¢?ìfÊTàÿ ‹øö+;øî>U–PA,Ä±ÿçöÿYjíOr‰§]•®Ð,QØR™ñó"_Á“óKº‘Ï¸@ à|w(Ø‹ÉU¡ó°+i+`‰Š»¼(û]s 09¡™WpE*iÐDY×qŽUµs—3á|¨’RÏJ'Vdë*v,¿íl¦ª¯}OáNŒ©•ÄA„°å¹s+IdL2 û:Ž÷­ÇKí{bø·maÁ¬wÄ3È§{CÕÄê ¾G6“"MÎV4‰tm%LÓ•&pœ9Ö"‡lˆ¥võ¹¥-ñHÐ<ù‘®Àq¨™×ˆµU§«Ì÷op7Ÿî øÅU²¯ep€ 9ˆäa­5ÛÓU	™Å´ØÐ;È'	wÃŸrta3!D B%Ja„B&Ïz”û×c ¦É6Ëd£¡ÍrvðP_´'z{<í¼ùÜ/Ó¶ÓÚjÎªÛ-O¹ôeãq¶öv{ïoYPFnÓ2TìÐ_·Ëû®<Ä?Qëìy?@žÖ”sçH@luÿ»çL§Æôç³8¶û˜œ5\	>ƒ‹Žë¢ €	Ä†	’¢ÎðPaz˜t4¦Ò$ºS•ìñ±Eþ=*M¬RgÊÕ^”ÈC+÷*ÎòÖssJ= 9¦Ù@ ¬^âõÎm~R¿çå)†wî1ÂâÞ‘^7¥þsü‰'n„&ù$7ÇØQÅ†KÓçŽ_çaÒè}YúÈÊFZ\Sˆ”ûô§c *{¥Þuªîž\o¥CÂ…iÕ§Ïã3¼çsrô!c«ÿÝœË¹û·71Ne/ÔŸe‘Da‘€:t.øê<¥ÍîDjšx›âJ½<‹òÙBHP Õ.*ßû·ùkÌ`"ãûc„Ø›ñ}Ü¨¥(«hì°Ñ£"ë·üNÄŸ,È5§gT‚‰ûƒÚáûüñúJÝZ›³(MÓcò#ÜamÜ{ï¾tçžÌýùë+Cy#œ4Ñ~*ÈcoåÖZÏý&ëê‰LP¾B  ŠŽ|½…ÕNfN4Ö™—vû ß×÷*7µ´ˆ}÷©µ0
#t+ä–y€à ±F‰VVú~Ã7]ŒYÇÒl¬H¨¦`
`ÊÞ
K¥
°Œœå`ÿ©Ì3üÜSü<nõÂ"?².®­üR\Vú™¿l#ß>ß¹Þnª¿‰Nä“Û™WõÁŽ[¡1O/ƒwUE››<a	±§‰¯ýnÌÀ+Ä*	$œˆs`„×0"cãŒ¨ÑDÏ:ëi*‡bwšm“s§X¯@µv©$‰¬¿ó«Õ$Üô-)Xém­`ÒºÔþå‡#¶Ô°!' ÕD€		—ÉŒÑZÜã)Êú”ûFVPPoòðu‘ Z¥¿éÌ ‡_©úWR’½ Ð^Î“/wç	F€2knýÚÊfVù–A¼3?§#J vf¯rÉFILÿmþßŒžnšåÌè«Š iu¢ (p“/äÛ½h„YËÇºBf/‰PszMö©æYøóÈK¦B ÚKdåA;&ºò 3»wê¥GÚ¨8|+vëû/:M*]›nVž{ÝÐMšmt“}©zK¬`œöŽÙåï7Ü$bGØ_ö8¾LÈ@«a±òÐpX¹Š2Ä A[ü5 3ý·Þÿ1æ¹—2†ä@}ê"A<&/=ÆÅ_À`]1í`”3;C²zÞ;»¿¸ñÎQùÝKÿ¨«{™‡×_QSàÅVOÅC×™(í*hVÔ‰F>-Ç,ÎuÕïjŠkeˆÕS\áú$Ü“4	õè1èma”»3å§OýàZbW}mÜÕ×
wñÔ«Tù4}„ºü1¸ËÒµ§ÎbŒŽD[TûGÂÔc­®olO>¶—OyÜ[›ÌÉÒÙƒå%.Nº®yïù]ÒºeèÅÒ²8%„‡]fúu¬#¸Cw•"ƒ³˜ |úA¾IÎ•§ƒß2žnd+™¯»Á@S7\þâî¥õæù’ ³(‰ 
"´ L£b	{ ÈÊÂ7¾e(¯Ò(T
ÙÑ¶¦T.B
%Â1µ^ë“È_ÒÂ9~Ïä=zï«3òw6Oï½iˆ·b#Q’ÌcX•=g@Ÿž7ê'´ù÷ëvZˆ#î|ì>R¬ÛÙ·ÿÓw6½“gÞdïÆÍƒÇ>÷ëû¦[\"®!ø_²ƒ³ÄËèçùKU(Ó$G¡¬hqÏA»ëúñ‡"ò ]}ÕûïSD>ö¸­VhÏfI§&HíNPËPçm	hÿHLnQ2´Rý§ëûÞm¼X9LÊ¥®û;þµ™Uó÷ÏÁj¤¯/pÝY³`OKHC^RøïeaÊËÛ`7Í€„¾—–ðzb–­ü‹;»_­§Z¡sû\àÞg6Ó ÌÏ¥¾ÎÜ‡¯ñ¬GÊÅ°œ‘ñêÔÂ#±¡orlÛ{ÊÖ[º“þ¿ô¾–ÿ™}«˜ÃßãÝ¶r–±Þfb.…	sxX4 >‰½3´>ª·5ÙÄæc;+‘Œ[Œ(í,|Æ®³òø¼¼gì4IÂJ„GõÔÜðmŽ‡ï¿Ãê›O³èÚ¯]bOàØ{´bš5p1N_Hü€ÜÎ±[|.?;1e
œùà¿?µ”e`0¾ørñõ³ã‘i·äd%%,¥‘÷ŽÛðí«OÞÃ¨—+q<¬>WW‹<ïcÖßvuT,L”ˆ=á‘Îáo „’¸OL&'³›ï¾ÉÔgà¾’:>ïù`é•óyìd8»-ÿóûÝÎÏeHÑAÇmí³âªJd_!WCÄñ;Ê*«y=„©')Br‘¶ÚT„åÑ‚×ÌËûÿŸíí™ƒ2Å|Š	b!²€œp¢! %*³>ø±Iðß7ß¸Åí•ù±ÿO7¡«*ÉoêÏÖw>ûí­`Ã·Îäà/Ÿ¸ˆ‡1?øR–}ýÁö“eí8Ö:,tÇ9>ª.sè=GF‚wé‚I×‹øÚõHD–Á7‰ž«1žºWúë=ÆÂ°ˆ¥¥´ílº	#ÍA
D&yjvöX"¤ôŽ/ðÁWqo^e6ã¹æ­amÑL…Ü·Ÿ®:Ž„†©Í`–u©:OQ§_³ël(üµŸÕÂhëêkÙ}ïòý{Á¾‚à‚r}8óÄ/[Ö˜9+]èj~/‰ZžŸ¥À×ß!‰És3Æö×ëÀñúu´À%£—ÌPŽyÙ#ŸBÂ@p§¡1@˜ƒNy="@‡¬®+ëÝÝ>é:
ì§ùŒÝ\°Z{š~ó7ö/v#¸}!«@þXü”vö7•æºÁql–®”—ÁÔ7û‰‰zŠ¿@tª´™<Ô<-õ]ÉO|h_¼«ƒo4ô6±HíXœæ€l³THh 
Ì†zŠ[
µ<Ð˜=˜,¦ ƒGÜáÛVr?/Ë©ÇŸeÙó4ßÁà0ž,ÅÓ[ªjüƒ)àÈó´N­»¶‚Ñ-;8àÑÞÊâÏƒ1#®raZÕÃ´¬¯‡f÷ïR,‚Ï.È=ë8	›õÍ>nþÞ|Ò742e!<mSEO°Ç@ˆx¶¿u¾Ç¹Ë´D¤R:` ˆ^ôR(yÝøÞsÀì1ä2is§’ÎF¾W’®¿AŽWYÒž«'ÂÒUX{<’~ë¾0ë&¿Þù›E»}^‹“úû=.pä&|H²`×A0f=¦€¾ÂÕ ízës“ŠÆ$ï·…²jsÔÚNÖXxº+ú%r²€Pø5S¾4Êmð}ø§‚6wõsÛr=íºò*ÄÏ3JRˆCñ!‘ {ô¸Žóï~B}ÔÍ?7ýßñ}ßƒèRË¸ÉÕe ’$ø¤¸M¡„ fä±f€cö¡baæyuþpZ½ë»«þ«Qæ¦•] ÿ/l¶Š;ìe}•·*_3rîuÆAˆ€ôüd+CBxFÎ>?»¤Š0ôu(Š)”ƒ¶M‰IL”é«XøõGšB„½Qû|þçñÿgø_‘÷«½ñxíMÎ¨W¡ƒ÷àëaËm*<ôå-ðê¼~·Ú`Á©)ë®­ÚeªTé ¤v£2t=îVr
KPŒ)Åø@½7”-,dÏDçrô—ähLHØ?#fÝóaŸ-z8^Ø€Añ~~ÑA´’Ä1oùi@@%‹ù°!ÿJ¡A°}Y‡üx×ýŸ×ÃâîgyŠ¬ ªûù†~Ü²çÝð+˜Böë;œt
Ií9'j¿ßV·òÅ¾ê±#õÄ£#&)‘¥½ÿKv[Ú-Óîüq;‚¸tU¢ßí`|ÿ÷ ò|6(‚»ñ1‡ÜRvŒ(oÊSÀCWƒÄM« @°JÅXÅÌªONÍJ»Ö°ð
þ“ÞkººË+eÆ¥ßÊÞ…;`Tp
`
ÂïJq za4ÂÓšþ$0]D¡DØ ’¡ˆ¦™îæd¡z×}?o‘âÿÝuÑ'9¾oÒ®ïºÑ=Gv^\ž?íGÙ ÇSë³Ÿwí·—~&DÀ@¿iH$Ð®À/PFcü%²íÁ>$J(
oüT%ömˆ–(¨ðØ“8˜Æ²þòCér×öDÏÖÉå4‰#YÝ÷I½ÿŸB¸“tIº%9Ó2_˜Ë™wÖþÓª 
þºY¹ËÆ,¢k‹ÊçâÎ|ï›_ÖÜ¹†³\«¾ÒhFÉø×ÙÓô?EÚðe!J¾×?òõ¹ñ¾MÞöâ~—ÝÄm2t~©ôà@LñÒ1yÙ$¼Áæ³¦‡ ö³ãÂkqåMqsã[sµ]Íbé=nÚ%ÃÌLù   h
+W0Pñ§g.x†ÚH(‘ä.I)l6ouÇ‘iV7CÅqí„=é¢ûŠ
ðç©s©%ÒÖY‘%§îGêvpB[ˆ¶RÄô6 rÇë<Õ0è‘ìC‡ßAœ·æ»äÁF>“‘©®<¦£­óöUû¹¾S½JWiŠ¼¼q|(®•>'€ È€ab¬@ÜÕ$ôœ¼=Gå	MäôàQËì4Zº{o*<­ô¨ãhÏêsÂÈ"£˜Äò½{@¬%,8Ê¢F×ÞNn¯ùÕà½¢_ü ÷Q
QÈòÖNÒékl÷ß/ÊµG%Ð3“·êÐó~w:¿Ò­¥~Óÿ<èyr^ImïM%Qvkm«èÿ¿~ôËš’.$‚Æô$!"D €GCbP6@q‡_ANHiG¼k >/‘úó~¡¢¿’Hž…ó³_Ùz [$ÁYÛ*¶5Ñë[§sT^ª¯AfÙW‚—N÷÷=ÇWô{{yù_×í|ŸF÷Oµêªøîø9%’>ÁBk‘@€BB„º6¾™ó´üÿsBè3‚‹ûK¨@qÐóÏc–41¬.Çq
Jê:a¡&ð`ŠìX5ÞW=!CØ¸u3H˜Ñøhû"¸}†uÆð~Ù´H- ¼_¾ò @#€;øQ”½X®ÓÁk²|°ò4¾Ê`~uöüf(«ÌØãî=¶²¨eð8øYiÏ˜Ã3I*Úè’Ð%ÚFx×áÌ¿“~ï-–dýŸÿ¯f{¡7ÉYîXþ»êÔÔ;K²Íåî4T_N—Ó;gù;ó?Ÿóow¼Y³âk¼žÖ;;æðZ`ãe¬oïoïÝyQîè/¡ôÞ~JÍä‚~¸@*Ä³BÁøiÀñÕ^OŽâ¯a (erU++hTÑ$Öä;ãôbØX_í˜\CD˜7àa†¹ã–&0*qVQbåF9DÈŒ¥AlöÃ°Ù#ºv i{ÈroÐîé¯¢aýéM‚2E4ÌCº’Á[ib½9K}ÝÀ–´ÜC	^þŒÌ–âqlïR
@³)¥	ÄK 7@vp¨­¢(FEP±9Ø¢]½°¦¡.«šë¬ÔÐ*Í )8¥äˆM0ÒˆœuÒÃ{4ðß¼Ó™{Íà¯~©®ë›uOÂ°úÞCÚøß—Çr™ÞOb§–‚È‚~%`N$‡^­ÌRp~ž@.Òéîæ&m"`K”L@rïÜ’^Ž[7-Ò sY/u9ø å½½z/øº£ù>áÐm€IÊýO…k¶O8¤0DB+Ñ¾¿K|~IÂ™ëPŽÛóÉ9-í:!Öõ,Ûbÿ›l„ÏññˆÉþu=ç-¢ÝüwïÔèd£)4yêdgH ‘!&Ä@$Q¡ú^Ë4lGXµëz|x¢c~BO{ìk‰C…ÔåtG·Á›üî’ahòñ:Ôç¢Hk¡D·öWOuE—­bCÆVEë‡@ý€
	Ö™=ÆgÃ¡ñ¦ùGsñœ.?v’ßºÓêé²TšúùÎ´Û~¿þžº1ÿ†Á ú÷:Oœî¡N’G[•ñÞbÀ € @ F2@ ™0®rFˆ#ÊK³3È
=¨Ÿ÷w¾‡¶ßýØíÿº®ôÖ²‚þ±ÅÈZÇ50D»”ÐÂOWí)<ÿ†ÓðÕ¤# !xKâ£Q¹‰	Ó†0â(¹Âb8"†¸Bå­0Õøx,r49¥ QQ}gi÷{à;ü®Û‘§/¾WZIžåŽ¶Õõ*åuÛO¤ßCÔ‚ëëÎ³ñmç‘6Ëõ¼MûêéØ°Êå5üLdì‡wžÇ•SÉœ”7ìx0¬?ÂŸùƒÌ`0Ýzi`àÝÎØ>uh;4 Ÿ‰9wd!@R^oÏñ¬§ÞúyEŽF–½Ímkž/×§Ëàb¼äLÍ©Šë÷ùŠ.û0ÖiÉ[3 k$‰wNJe¨£F½´ºO‡]U«õ_íº]ÇmYKË~ç[üþƒþn‹³½à3¦ÓÃŒ³½Id7ŸK±Ûlÿ©ÍEM-N_Á!…GúÇÄí{iæ¥íàò¿§å÷í!^õ¾‰e/“í:è¡›^Oÿ|Hü]j÷ª¿J6V‰­$Ím¯["Þ©_+å?;K!þ¯©Pš“3Ožù/¦2·%ƒ¾‘Üð«’B²À Ú¾äÄÃ‰€aL@OÞwñÈOdV%oõzvq|<(÷ñ±žÇo‡M‰øßyšìu{¤;æÃ¦/—ã ?52€Ð(‚"¢0
"'¥À[2Là<PáñOvÉ¢EÕ(¡å !@„ií^ò´\´VaˆÚy'&îÙqÿçiÚ LÒkƒãËp¥ZíU›tof~
y|J'Ë«XÒÜ†¹‹Af¡ƒDDºy¸©A„çÎ¿}ŽÊB¦MK””iô23Ýcÿ¦_Ñ»Ñ«ëÝŸŸL-émÝe*ðuÌý‘Ø\h¢‹´XÊÌFáD&OûyÝzÓªÞt°³/G¥ö¾þ|nÃ!lîÈ':•|Wª?{g¨e—kƒ/·’û¦[×•e6¶–í‡vcáwôÞ}>Ö~`¢IÙ¡„nö©˜}AÈ_hÊÙ«Å¿¨×•I?ýv`ÍHÀ:–I;ÖBd²2aÖ2Ì;=g¤6öÏÑ÷8“žY„ß`ß¾«je„“„„cRýÛbør÷½ HH"ÉAÇìü|ðlX«¾“’=}	 ‡9<*ú+ÂzÐ÷õÐ0þ¹Ýaò³8æ^qì/‚~Çà±Ïúý;*oZCôÝûMX[k‰Hcrø7`RßIÌAv®Oÿñ½>X;øeïïÏ¦@é%!¾•°¨qÛ(O°pÆ‚ìÁØP	.‚ëŒUéß}ŒM’¿è~Ù_Cß-ƒ®m÷ãì ºÎ¹ÞÝøk/Yž‡ÇÈçüiu¹¸ÜÛS]ÄïzqSý¯ÇÕ§äù§óK¾^‰ž‹”êËæùöO§~Â¾ktù·SïâxðdðW×ýþ½Fö9•_Éf4ð%Y»Õû“ø÷ìuŠòLg½Ïý=Wí;Ð›ú«88¿«Ì}/òí=oëô\>Kér¾K£êÿG“î?¯ƒû»uTÈ ùØî FEGŸÈÓ·´€½ý\ì5Ÿº‚ïÃûv1°]ë©ÁÎ»“ŽÉeM«ñÚä$¦ƒ#žçQf(¹x`Îˆ€Xæ„3@(‘ ›é\A‘ æPS@J¤<¹Ã„3üJ„@jÕàÁ)IªäÖ^›»`Uý|ÛHÞD Y€]·OÇd	#$S<olÀÀ…I×}58<\ßß£îR[ì¼ÝµÁ“™˜Ouµqa€Å€¼¬¸1EÌ;Fv´þ©'ŽÏä§s€h@:ükþ¨¸LÍ®!»Ðèxü8ë>dõâƒ_À4†jPÒYt¹ÁÈ».4ÃÐ¥(Ñ%åÕúnî_™†L¹Õ™'ùÑáÈ…™ä²,Æ×…¥l~‡ôpÆª„¼F…õ±ÉDBÐBM<Áâ¡“óÖ>¦ªñÎÉÄ„‹Ø¬vð7²­²ødUEw'ƒ³+í>Ž`YÌ×LÑRðÈ·ŸóšúRuîi	(9†³…dT³Î±ˆ¿²Ÿ†çØj­Ö˜¥¨¾)”õ×/u@vtY%·ú¼¿ƒô|cƒ?îÒÓ“Š¡Cæo³6iì+ñÛ"s»ze~„ˆ%ãˆŸ›h?„6\ŸGåâI>'{¿bnÔË™úá¼æ™wöNï§ÝDäÆù”BçŒçŸ£»ÈÐv0{¾>ó¯­š÷eœØvO7ìpJŠ #È”žL0d|îw¹ñ°r±Ã)r®·l ‚cm7ÝÃán±—€Ì¡ô14BÓrëúá&,” Êz·h‘6-þ.ò'&pBîIÈ‹Á Å-‹Z”$L`”ãDtìMB çËZá×?ƒ >-Â wÓçbü^ò¶01ZÚ*|š¸P.¡EÙþÅòšÊaâ³X¦Ëú§wãÝl‹ò’_Ñ‘„£T†áb÷cÓ˜ºÊ ð;h8#^h:‰IVÓOžÓJJÀ)B¢
`á˜èA¤¡RÿHanq½Ky¶Úù@œT @<CÅ¸¢+±Á˜ëÔ2°vÀ€±ÛŽÙ`´–´Bg¸\GgKÜ2MúÓŽmžÖ»¥h·¼ë[>­4PVB²S xÅmzbÐÑkcëSD¤uà=ïÇžËI>–ÃXžaýÕ Rêeh°âÒ‹Þì·òûÙ‘òâª¦)¤¡L†àFOCSó&ÌZ¢»ˆÄODƒ¦«þWÖú¼·÷zŸ?™Ÿ–ý;V¹ôjAÜÆÔîìN„î © +OÐá¡,b˜Sg+…”P»LwP@zÊ»j•KShšÕ7Åø5368|ë£³Om/p…-/•èK¸¾bùñ…U³¸î—`ÁJj°ÄÊìø`ðê /Ð’°ƒ^tRä©êWî|åSÖ&)]a–ÂŠd|™14V2yk8cY“Â:ì©!¤ŽØÉ	;©]‹ƒlh¥´\L|Emžô£²„Ý †‚ü‘sÆSÉk`¦Æi~:Æ ç5H ,ÂE$ÙY­æÌq|™@"YˆZÛ’p¶µ2zÔ:%„cOÍýÇóÜë¦6£4EÂhËA$Àôe³Xkn|ß·Ä©iÿbV¼ên:/÷óÐ ØèÙß«)ˆ:´v¯îöº°òÈJ³‚üX„1`X±Q6bÌÕ *çèç«MpÑÞï?I›ù`:¼íõI„Š I$¶®Äµ7 D™l@Ö†æþÎ‹†­M!®ÎVv4SªD6žkß²ä8y {Td¾yª“ š¡®ä‘Â³E5ë¬@l•Ú­"FíëW›.}z±[ÜŒÙz¨Ú^„ øäc
Puõ¨ûÉÇta€XŽŠ(:† Bd§jxªs­¯0GTÚAŠÎ:1 ¬Ä½<ÝÌi‰õ–¬Œþ¥Ø±¯!ˆOõH›6ÎV’ùŽ`h*±.ÚÃ‹¡†’T6¹ŠÙ,p«[ªÍñ~£òþ_õÞþ@˜N0„(	âJŽb–ƒýÑ'1 "dÅ™š/‡ÕµÅ¦j¬Sq¬äUTÇøœ@"f¼×¥€…©Ó|wßY›vÍ¡TèMV)Y¬5£¬‚æ§¢)@ œÝ¤'Ébyë34‰Þí‡ž³Mµ}GxÛ/þÕ‡;ôÈÊ·˜É·¿ý$Íß~^Zm®ut¨T8œoˆnH`k
 ¡4¹Ÿ\£G£¬šÿÀ½Óø«ù™Þûƒƒ éæÄ=|9J§>ØÙÒÎüæ®éú‚j¤…èÎéžÀE@•Õp+dóèzTÃàÄX=¿Oj’£Ññ.Œ+Í{íÁÁ4û\˜ûtÅO¼ux»='ôõþ>Êfù„'L;Í« ÈZ£tKD}l/KEîàµ2E$Y'že0.Â
H­PHùú	³‰ÌÃßD1¢²(`‹ ÞˆT$Y!3°¤ú¿•®Ó2Î ãðôâs*ÞÇŠQlm8Ÿ{YmàÞ!?±ÀRc8½O¾|" ÖÉÍ)S¸Û$uhÛÄÜö2\ìz8_[8˜Î	!"¢ˆdÁ¥†FfÔ!!Ìœ¦š†pH&–Eô¿&(fml1¾8›¤Ä@‚¢E¢Á$H1HÄQ	¢‚hÊhÄ! 
@)@Jqµî›'½çåÑ_)ý‡€òÛ¦‹­UÑ¤)
Kh²Ò0ò‹FKÕ…Gž™1(Ÿ± ÐJ•‹ŠÐfa„f„L‹>&ÉXã“£ðíPgFz²l@šRÒÅBVLÛž%ôæ8	Ä¢M"™ñIdê1â:êe+Á˜Bp ÆâRÌ…2Út¥EÔW¿ý—ŽûQxiÙ(ªdwABÓA M”Ño0N&¡ÌŽØ©Ó×
3óêþ<,ª@ce« -öÚ ) ¨€¦@Å¡qÐaŽR‰™á¥Â_ :²B¬ ÉÍGtàq Å™üGgiÄ0hóŒH(@È(8®‚¯µô5ã’˜PQ¾62©”&QÆÄ#û—-b¥ÑÈÛä¥–…uÂ°ô\ÀûËZÌ!g–_Œ<¾IQ[@DãjU™ãDÛKJ´
AqYQ.cAŒø×7QbÒüXWd
ðPZ°»óÙ¼?úlbŒÎ9’”ÔÛp÷×Ml‰‰Éž2tç½˜cÏr`-œ6ðÛÛv‹mM«.®V[6ö«N²jÐh±A „¢%×{™Â._Ùˆ±Ã" ŒÙ'*ÆÆúåzÒlà<äÂ ¢€B!Kmª÷HCE–Xo².Ý ”$$ù“–ã¦ÂWQA_Rò†…?.úc^íÆ«×_ñ3\f@§&%JÄJT	J¥Bp{ÜÀß•¥tøXØ-Ž›P‚÷¤uíbØ¾ÅÆÀù¹Ð1«&˜üHJž£­˜‚Aßscÿ¾˜¤ïŸôbñp’/Ôö@EâåvÂjg^ó‹5l«kÁì†f_Âwf;NL¸íºÐ¿^]žêÐHwaVÈ_AkZJW£ý¶6vÄ\WTuÑ·UQ$b8ÈNè˜¨ŸüzÒ¬·-1\¡E t7Ñê# VªqýúcÓÎ8÷æ˜ÿ)fûe•Á¿-àf‰.6©ó}:5ýŒ¯nÏ;¬6®Ò\ä<Ì6 ”ÌÎqˆÂãE_3b>¦ïEóxŒÌèj7Ë4¸Ž­r$õªÇ±ò*Ý$†6¦B¯‘ñˆ«ÀÁŒƒjäƒ¬rƒ3ùXjª%
ëÆh gSÿ{Ï{¨ÃÂBýÈ‹+foa¶È%‹“Vüì0°KŒàö‘1DÂ)ÎMÀ#ñ¾I`ê×TVhºN5´›!ó¸\ÝVÕ]ð Sª57IäOU`¿=îc_$G~qlXÓ¦ñJˆ5tNeé¸qûX¿Ï9p)ÂqôlÙqÄ'nŠ‰QÇšä˜5I–…µ=V­ëB¤ó(s|)(Xnš0¡¦"$ ƒcÄnZ&„Q±‡K1ásÝ¡óp5’EiýŒM{ò;4™3rþý¿•\p£ò¤ž¢½Ø–ÇÕ¸¸°Í¥^s„›ôˆÿÉ*Kãµó €«5#'´‹ú…šÊ×»W¹ëöEÔi°ˆœtm'QòróŽñ÷,8Ïô!ØJ¬}bTÌè­…KpêvFMÃEpa›?á8n}vÐKµ†èß{—Tá¸¬Šêu·¾$ÔGAFúÿê=7P«ë—Ð¿1=äHÝ,4k•ac‘F`q÷'ée‹C9æ«ØÆ«®>ir8#Aq|Oé@Ñ+ò‘ÈfF\¢1b‘ý“o³>ç¯_sû3Ÿfëo‰²"cœm×”øÈÑb?_©ä‘qÏ‘aîFÂÀpÈ8»\}ê)%îîlÑk£ö?¡iwSé6Q,…ð£wí¨60Ái©êR“$¡ˆä€´üég8s|ŠŒ^Ç½ƒÚ¬gÔòØ·ÒÆêeüiû?ö†ûtÚ}m³×·¦×Œs”oBØ¼ÌG‡w¿«ÙØí7}m—{ùëñyQ9_Z™Óµ½y'|06Ý®–Ýð®Žøé4{=^²–ÏÉâø¥ÙÝ¦.³œ¶j?ƒ¤ñÿ¸\L§ËvÅ<(ñÖÞü›®ÿ’ÕvóÜ°¬ü¤vŸ—E†£šªñï¼ýU½#”€á»÷¸‘ð0ïëÅãä4T«ò.ÚÏù£Û}¯J—ìümØçö“”ÜgÐ´ÅÉï²]LßÃ	ƒòä'-4Üw¯G¤§=oñ‡×Mk4F÷¥aª¿¯ôÈßÒY<t¿…[×‡+ü]ŽÜî:Çü²·<ß&ñßô3¶Ðù[nø[Œä&ïuéŠüý;åjÃe Çæ¹{¬®É÷Úƒ´ößéìþ×Áÿ¿ðˆ¦¾>Þº±~)ÉÁìÖ /¥èxýàð¿ïÑ–ðèÒq~Š¯z:öÐmß×°Ã7½Ñã=\&YL„ P!ÿâîH§
ç‰/       
ˆØŽ›>¦-ÒnâÙfÑ&…åvg1.´DÙœH¤*Rq¼Xìoßs/%[v<Å&“¶†Cñqçž{¨>š	ðI?SísõZ8YÌe?MTU&iûpTû¥­^‹_œRÂ/•8}ž¾¿ž	§¯­ùÊ3ÿ®Œª¤§™6ygíø9þ b¿Î•[*å¸uF–ni½8[z_¾>9Im2ÇÌËFù“·ƒÄ…ô0hxz2|~r:<}Þ>ù(M-ó×"^;¯
1Jm´ó8–omîÚ©±­«›Ää•x6xòjðª¿Ð~ðlølðôåüôÅËáóôÙ“çÃÃáàéàÉéà4þû6~ò|0ìß½|ñë‹ga·Ò,j¹Ànc³Èµ[Òp4˜¾Gñèã»Ñ¬q>ž|:¿8G/ñok8~i˜ý&àãÕŒ¬ÀØÏ­%4õ÷Ý:bKúö‡wùA\¨L%œ-”(måå\çÚ¯…óu–=àIÿý³?¼K—y½pƒTÍµ4[-Nž|ñãÓî¤Æ»ÁÂÔü\VÉRßª“¥/ò“Ee³)¾ê#;…[‡Ã'Oôì¡,ÕJÌÌñ`!©£obv,¿E•H·£4‘Ny‘ªLÖ¹™­
é½6‹<"ÕNÎs%–ër©2˜åÎ³ßjçu¦“ ×c™Ò€ðêVä*ó¢ÕBaM¾~d*òÃÇÑå•8¿¾šŽ¯¦"žŽ&ÓX¼OÆâ‡‡:&F­_>Ž¢š³¾˜.µøkQQ6„3ûáxôÍ‰@ÈRu«*QV6QÎ)"•^$ÒB¬¢¸ “¢ÉÕRUJ´«4YÑÆÆS!MJg—7¾Ý•Ž¦ÑÎ‘¼X{¡Í­½Ql#>›œæ:…ÅàØ|Ý<LyxYyüƒRUÐaYeáŠ9Æ*±Òf®M°‚Ú¸H™–¼4²À¥.ñðØ”…„b©òr2…Ã¶Òy.æ¡³àl“ÊŠvöuIp…ud>žä9£[†i9¢}R¨bŽMCxOFÍ·Ç¢nb×5öHu¶¦ïº
þas—TºôlÇ•õ
gPàMÓ-`XbM¦5‡ö1B·»Exu…¾g«5ú\!±}eóv°¼A›ÎsþDvå‚OLºÕ)ÎFÖÕn¾Ÿ¼Æ}ØrÖ"ŽLþ'™z ‡s0xh!{~Rî$þ¤RÖôØÒEnç8VaKrWØ’xVü2Ïkõu–½Ãa« B&x#2™;5Ë&XðU|üO)“ÄH¨z$Ì®öL§ñ°Û6‡8;Wü¯«ëOñeŒF÷þ“˜­ÍÄ£:ÚÛàtÚÿÌú`G¾Ò€æm<çˆGâQ`Hùk“òà¬oì¬ßb°OOJ~ÎÄ:K½˜®nUþ¶™ÆúÎ§¶öÍX@F¦sõæ¬E	cs&h°]‚ùæŒÊáí›³[‰¶Ïr%ofýJQë=0»ë<ç_Ø`ÚéÆ]LÕsu§ÌFH\ëX9ë‡Ì4•’é¦ë…‘9vLßœe)p'_.ÏÇ¿>Ùùí”C:Âß·_CZ.ÆñùäòÓôòú
™ùô)â²%IBUR24˜x"À%d+›ÿø8rµö!»X´—Fb>@¥vÄ;8++VrÍÕxiœM=$Ò)”$hí÷0êºm:Ìï:ú¿Aí«ºÅtD„8ÓÎm—Å µØÇ½†1ÛÚÛeÌˆŠ=²UÔ0fDN  [ðœœäQ(»‰Ýr¡•mØõ±r¸BA!ÚnDe§Â(Pªi+»$ßaƒ6ßjù;|ÂGgß™á;'†ê$Òi
]ä07=LÞºdí‘QxlþËP‚sh”¼fÉƒ 4˜éíá?â&Io‘AaÔiTUQëEáÊÑVw)n'»}ªª—¼ú½u¾íP*V6(BÇL¤)Á £-3Ãvï“|»ÉfI®o”ˆ'_â/ç­µX¥¨êÙ© =F/–óŒNìÚbºQ
[pï• Ø“Õ¾
‡#Suâ–U8|e«›ÏSw²(sÕã\¨4õƒ6õ¸Q•„?¾;meÜM«†Jëœž“îÁüjgŽ¦È³ Z6Ì¯Øbâ\-åmÐ²*(B×•„Öðä<#/:zòþ!!V š\“<Dðàƒ0€Ü­:ŸÄ‚N®h@HÛ
à* f$Z×ì.ª¡ÍêRAvº›.Qs…qâò±4!L©Ã&JwCá¢JY¢¤v… öF:\s{ŠCÚUÑ`‹gêÞ•*A¿Pi/¤¨¯P@O4¹j‹³lIï3T ¶°W­$è“ª¼L–,±Br(,(G×"|.“› > 3­ò”Š¥RßjåBRi’,Q,e¥é,îý8äšÏ¦Ù›:†PÝw`Ž3©‡ìïûÈ§sÞÛÄNÅÎê"'*Qª	Ý’ëò®ð†ÃYW/o8ÿýÂZÂa÷dI>Içjjq:Û÷IòÔÍÕ$à®ÓIá#Î=çŠÉ¸Â=m¸ÅÃÈ!!@Ad{ÔÙ-_‰ÞINO ¦†BÒYû‡ìqû&µ J‚MTú:!D´=Þ°Üm÷¡Èª/¾¹É$Q¥ç+l§ YU©ª xÕÈP“„jW!×áÚÀ•µïQ0t#	ûq´µ‰k?×ý¡3»‰Ú—ë°n©Ïí;·¹ƒYNQ”þ7h^ãlvª~ž+>÷†¥7´Ëå¸éM87ç ª´s“§»yèœ®”+ÄPÓ8Gœ§ÀÝÈ64ÐóÚo<Ø\S«­îøUa(”@IºÍ6!›ßÀ|‡Ìí½+J²ÈÙŠ¾Ã&é¢vLEAän¸ b]HÞÿ Þ¡¢ŽA»üj#
ñ¯\K0´Jš"+‘ËŸ7'RÐ¡FvÓ}è"Ö¤ü"¤+Áý…è¨_möâyìì½;ñÎæ»7¤fãkzƒ²ûb…{R|aâî¾½ùpùnüóøüârÒãi0cð5š*”!rD§üzÄPh)Œ:È½óº¶52âèYs„Z¹gw¥=^@ü¬îBÑ£^I%°M;µ‘§yÈæ^&6×Ž&P“ú^-m @È–íed#S üÖvÿ6ÑH [¥[.ÕIÔû”yAï!·× –çÇ¾y]wèR·›Ã—è6N|YßDŸæ"¼€)5=>%# p ¸­Ñä¸ƒ`CÊýæD2Í­lt®­ô‚ˆ§é¼Îf~Å(#¥¡rIí¤öôê^“.§^¨~42i…â™V:]´¥½6»‚óè`È'OÞJ„©’EóÎBÄ4ÿ‘Bàÿä%œ.t.« öZ¿§–µÛnNþe1*o   07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!        ?A«%ÙŸ	£à¥žnâÿZkcmúÍ¡rÚð5nx ±žÁ¶ˆ|³¶éß    
YZ