libsmbclient0-3.5.7-3.5.1<>,yPp/=„J\ 7 1 U_8 95g?߉\+fV2eqZOnl5IwX]~V+h}@Hi=G@kzc  BϬ'm)/Nr|o5*l|c_0Zd^ syOҽbQ"K&shbATK^QN7B I \502m!nQ&bFSK/ d5Fiz+(ufC>< ? d  1dhpt      V X`jt+++(78@9 :> @ B F G H I X Y Z 0[ 4\ 8] @^ db c d ne sf xl zz Clibsmbclient03.5.73.5.1Samba Client Library This package includes the libsmbclient library. libsmbclient is provided by the libsmbclient0 package. This entry is required to allow a samba.spec file providing libsmbclient for SUSE version < 11.0 while versions > 10.0 will have libsmbclient0. Authors: -------- The Samba Team N1)build10pdopenSUSE 11.4openSUSEGPLv3+http://bugs.opensuse.orgSystem/Librarieshttp://www.samba.org/linuxi586/sbin/ldconfig/sbin/ldconfigp< (큤N1oN1B789c2147f5d65c09ab08e1c00d5d638ebcabfa6a5b49fed3c85539ab5bd8e4c4rootrootrootrootsamba-3.5.7-3.5.1.src.rpmlibsmbclientlibsmbclient.so.0libsmbclient0libsmbclient0(x86-32)   @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ rpmlib(VersionedDependencies)/sbin/ldconfig/bin/sh/bin/shrpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.2.4)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.5)libc.so.6(GLIBC_2.8)libcom_err.so.2libdl.so.2libdl.so.2(GLIBC_2.0)libdl.so.2(GLIBC_2.1)libgssapi_krb5.so.2libgssapi_krb5.so.2(gssapi_krb5_2_MIT)libk5crypto.so.3libk5crypto.so.3(k5crypto_3_MIT)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)liblber-2.4.so.2libldap-2.4.so.2libnscd.so.1libnscd.so.1(LIBNSCD_1.0)libnsl.so.1libnsl.so.1(GLIBC_2.0)libpthread.so.0libpthread.so.0(GLIBC_2.0)libresolv.so.2libresolv.so.2(GLIBC_2.2)libwbclient.so.0libz.so.1rpmlib(PayloadIsLzma)3.0.3-14.0-13.0.4-14.4.6-14.8.0N.@N.@NMM@M2@MMwkMp@Mp@Mk@MdMc@M] MS@MRM5M0:M# Mt@MM PM@ML!L~LL@L@L@L@LOLOL@L@L@LfL,@LLډ@Lډ@Lډ@LeLB@LLA@LLLLzL{@LvW@LrbLnn@LmLmLmLi(@LgLc@LPL1@L!@LT@L%@L0L @K@KK@K@KtK.K.KKKsK"@KKK@K[K[K[K[KKK@KKK@K@KK~}@KqN@KqN@KqN@KqN@KoKoKn@Kn@Kl@KjK^@KUKLd@KG@KEKEKD{@K=K;@K/c@K*@K'z@K@K@K@K?K?KK@KmK3@JJJ@JJJJ`@J@JH@JJ JjJ0@J@JJJ@JJ JzJzJt.@JmJ_@J\s@JT@JT@JMJL@JI@JCfJB@JB@J@J;}J:,@J8J7@J7@J2C@J2C@J,@J'@J'@J'@J+@JMJp@IIIo@Io@IԨIW@IW@III@IV@Ilmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.dejmcdonough@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.deddiss@suse.dero@suse.delmuelle@suse.delmuelle@suse.delars@samba.orglmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.deddiss@suse.dejmcdonough@suse.decoolo@novell.comlmuelle@suse.dejmcdonough@suse.degber@opensuse.orgjmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.desjayaraman@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dehhetter@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delars@samba.orglars@samba.orgjmcdonough@suse.dejsmeix@suse.delmuelle@suse.dehhetter@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.derhafer@novell.comhhetter@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.deboyang@suse.dejmcdonough@suse.delmuelle@suse.deboyang@suse.deboyang@suse.delmuelle@suse.derhafer@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delars@samba.orgjmcdonough@suse.desjayaraman@suse.dejengelh@medozas.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.deboyang@suse.dechris@computersalat.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.deboyang@suse.deboyang@suse.dehhetter@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.desbrabec@suse.czlmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.deboyang@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.desjayaraman@suse.desjayaraman@suse.desjayaraman@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dero@suse.de- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289); (bnc#708503).- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site request forgery; CVE-2011-2522; (bso#8290); (bnc#705241).- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION; (bnc#705170).- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).- Fix idmap_tdb for big-endian systems such as ppc and s390; (bso#6901); (bnc#675978).- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).- Don't crash when publishing a single printer; (bnc#643119).- Define the libwbclient packages ahead of packages with a different version.- Require a particular library version even if the major version is part of the package name. Using the same major version does not guarantee forward compatibility.- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).- Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Disable separate build of samba-doc for post-11.1 systems.- Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460).- Do not require a particular library version if the major version is part of the package name.- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems.- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936).- No longer force activation of the cifs service on post-11.3 systems. - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems. - Move the cifs init script nfs dependencies from Required to Should.- Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845).- Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842).- Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936).- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).- Don't tweak with baselibs.conf during %post if not present; (bnc#652620).- Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).- Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux Enterprise 10; (bnc#652620).- vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835).- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620).- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620).- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620).- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620).- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).- One further fix for spoolss GetPrinter (level 2) response; (bnc#649636).- Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620).- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).- Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719).- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4.- Add the _build_arch at the end of the vendor version suffix.- Fix incorrect spoolss GetPrinterData behaviour, causing user get printer settings problems; (bnc#643787).- Fix malformed spoolss EnumPrinterKey response, causing add printer failures on Windows 7; (bso#6883); (bnc#649526).- Fix malformed spoolss GetPrinter (level 2) response; (bso#6727); (bnc#649636).- Provide and Obsolete samba-gplv3 to replace potentially installed packages.- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4. - Do not package libsmbclient and libsmbsharemodes.- Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578). + Fix "admin users" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541). + Fix 'smbclient -M'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba "write wache wize"; (bso#7715).- Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755).- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).- Fix baselibs.conf for libtalloc.- Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218).- Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304).- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS.- Complete fix for trusts with Windows 2008R2 DCs.- Fix authentication dialogs when connecting to older systems; (bnc#632055).- Adjust position of conditional ldapsmb %package and %files definition.- Create the /var/run/samba directory on the fly and package it as %ghost.- Fix preexec scripts; (bso#7104); (bnc#632852).- Fix printers not auto loading with registry config; (bso#7280); (bnc#617153).- Intilize workgroup of nmblookup as empty string.- Fix net ads join when using parent domain users; (bso#6364); (bnc#630812).- cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246).- Fix "Too many open files" when trying to access large number of files; (bso#6837); (bnc#619787).- Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends "raw" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with "sec=ntlmv2"; (bso#7517).- Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product.- Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935).- Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927).- Update of the SMB Traffic Analyzer v2 VFS module- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697).- Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via 'cupsaddsmb' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on 'net conf import' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via 'net rpc user password' command; (bso#7417). + Fix 'net rpc printer list' command; (bso#7418). + Rename mod_name to module_name; (bso#7421). - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler. - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423). - Winbind not working over IPv6; (bso#7341).- Honor "interfaces" list in net ad dns register; (bnc#606947).- Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049).- Enable the build of the idmap tdb2 module; (bnc#600822).- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.- Add "net conf import" error messages; (bso#7378, bnc#598189).- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).- Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in "waiting for connections" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it's own domain; (bso#7295). + Fix segfault if hide files or veto files has no ".AppleDouble"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix 'net share' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with 'getent group'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix "printer admin" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make 'net conf addshare' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316).- Add SMB Traffic Analyzer v2 VFS module.- Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868).- Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215).- Fix tdb validation for offline auth; (bnc#587014).- Fix "printer admin" functionality; (bso#7255).- An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642.- Ensure to have a valid talloc stackframe; (bso#7251).- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).- Merge missing pam_winbind message translations; (bnc#499233).- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package.- Fix join of Windows 2008 domains; (bnc#567013).- Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683).- Fixed libldb.so link in libldb-devel.- Fix argc handling in net_share, making the command "net share" work again; (bso#7203); (bnc#584253).- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix 'net ads dns' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).- Update to 3.4.6. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first "uid" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for "ldapsam:trusted". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when "ldapsam:trusted = yes". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when "ldapsam:trusted = yes". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.- Update to 3.5.0rc3. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix 'smbget' error status; (bso#7069). + Fix build of 'smbfilter'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new "nmbd bind explicit broadcast" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix some wrong newlines in de translation strings.- Take extra care that a mount point of mount.cifs isn't changed during mount and don't allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).- Don't invalidate cache for uninitialized domains; (bnc#538923).- Signals are processed twice in child; (bnc#538923).- Allow forced pw change even with min pw age; (bnc#561894).- Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).- Fix enumerate domain local groups for primary domain; (bnc#573813).- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).- Build libtevent and libldb and put them into separate subpackages.- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + 'net', 'smbclient' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing "badPasswordCount"; (bso#4347). + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202). + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in "trusted_domains"; (bso#7037). + Complete and improve some German translation of 'net'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with "dos filemode=yes" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments. + BUG 7043: Fix crash bug in "SMBC_parse_path". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.- Free unused memory after a packet got processed; (bso#7020).- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).- Update to 3.5.0rc1. + BUG 6837: Fix "Too many open files" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when "mangling method" is set to "hash". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the 'net' command. + Fix up a share type translation and translate some more strings in 'net'. + Allow to call "pdbedit -N description -u user" without specifiyng "-r". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in 'net ads testjoin'. + Add some German translations for the 'net' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone 'make installdocs'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix "UID range full" error in Winbind (bug #6901). + Fix multiple LDAP servers in "idmap backend" and "idmap alloc backend" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display "none" in 'net rpc trustdom list'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix "Too many open files" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix "map acl inherit = yes". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with "mangling method = hash". + BUG 6967: Fix 'net ads join' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix "mangle method = hash" truncates files with dot "." character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).- Add BuildRequires to fam-devel; (bnc#564260).- Prevent winbind crash; (bso#7014); (bnc#566119).- Fix processing of open modes in POSIX open; (bnc#530683).- Add baselibs.conf as a source.- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: "Too many open files" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on 'net ads join'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing "strict allocate". + Restore "fake directory create times" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate "write cache size" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.- Give the user a chance to change password when password will expire soon; (FATE#302414).- Rename smbfs init script to cifs for post-11.2 systems.- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165). - Simplify the winbind package %pre script and suppress stdout only.- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring. - Remove using_samba from the doc package. - Increase major version of libtalloc to 2.- Fix kerberos refresh chain; (bnc#546162); (bso#6872).- Hardlink duplicate files on post-11.1 systems.- Add BuildArch noarch to samba-doc on post-11.1 systems.- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a "hidden" parameter "share:fake_fscaps". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if "aio write behind" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don't fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.- Let smbclient show special characters properly; (bso#6829); (bnc#544204).- Don't fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).- Allow winbind to ignore certain domains; (bnc#539506).- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix potential denial of service; CVE-2009-2906; (bnc#543115).- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix unresolved home path; CVE-2009-2813; (bnc#539517).- Don't overwrite password in pam_winbind; (bnc#515444).- mods for winbind (when used with squid - ntlm_auth) o winbind adds group 'winbind' o permission 0750,root,winbind LOCKDIR/winbindd_privileged- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified "net join". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix 'smbcontrol smbd ping'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in 'net usershare list'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix 'force user' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix 'force user'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don't require "Modify property" perms to unjoin. + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with 'passdb backend = tdbsam'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the '/' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to 'net'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).- check in .po files for pam_winbind; (bnc#499233); (bso#6602).- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).- Update to 3.0.36. + Fix Winbind crash on 'getent group' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on 'getent group'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it's an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don't install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don't try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build./bin/sh/bin/shlibsmbclientbuild10 13118930333.5.7-3.5.13.5.7-3.5.13.5.7-3.5.1libsmbclient.so.0libsmbclient.7.gz/usr/lib//usr/share/man/man7/-fomit-frame-pointer -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:11.4:Update:Test/standard/e3c204134517d901e519a20b831ea5c4-sambadrpmlzma5i586-suse-linux?>x'y)?@]"k%wdZ[ K@_pdA`g`\޹itBȁ4V|ζN90Kfh^FKxsU*mMm:>t@<9v /x6Jd&>eumw_ -(e{pl[mP?I.+e*uXc7 UEEs&K&37?6꧇"@DJdSbI掃q?5:EUa)]PZƸj^pZyԭwo찱743IJ*SEe+Xo$<`e<㝻z[9k3ʩ۳2;_uY×t綩+Ku`m7Sn{K$l;w~v !ߚڒ!؀URG pBno^z=LaeJyb#5#Fc}}赛թO YIB6&VQhDyBNI(~y_8pb`w2?nWtO}DSI=:[.*B-_ꥆq<*;2 i`Ճ,vr'׀Sz,֥^!dg?xD BJ^B7`w8VĤ;sVsAv};fٿAٗղMr[8b24H~lML~Tɸ4^g(=D‡a1B^߉f~-|<`Ժl4SB Sel[+jsqe<-h1V-y"|¼16a);߇HVEBHy*3mm0+.=;M{XM܄Ȳ;w ̷?]Ыa 8\F0VcJu-ɢb@KGob=CJLHQH:׹픋j#%&M26) 9*o**g,,8q3b3\1xaogɗ;zHYs#p5%!!h75J塛2އ ieE'LJA lrdsc@C˲⊠`gE,Mv\Kj6ɱxX=,3G-|S~]T Ա2v^v_'C# pǿP"^(*[ " X9Yv)D.*Qt>B BvMJbj$RT08KR*U]LbN$9o|wk/!Dݿ qK5Bn;ԋWgP9*qB!3+Xȩ8OOlEe[҆Bе,8WL= \(DLzyjYN.9ȐVڛlk|`oȩ{K[ý5'z^ Ai&͐-n-O%K>\ IݩLh~yK(p6(̑{S?'"0zHrYhNeFěd{~4_ϖt N`}}|q_J|:[|v `U>^ZɈf|*r\PPlgR?jLzF`}]CRG %KXpԋqAsu ꗴhZ<Уˉ}k&R/6I(Y@a+qV,T~-'TZaci pg1ںaX/KeY!€:g@pn'OiD-0Ƭ^9n< .f.FL'OQutXXrFt̩0"M4}<) qo =+tL\ɵGI!iQnK5#nglm˘QK ɬȍ8dVȾvl3fƷZ6CܼK{޲V T-w.'Jtي/7 sjOH}uXߣ4匜.;S|J+0$@d,R,>Ʋ] &31uZa4rv24=^ז؂^T\C#XhÔDp^Ā [IKR^yX%?*}] [qҪMhYM#rY@؜f^np"xU8z=HN4ƑS:Oյ׻eÒlu$:J76\u~za fG*b p {BTIsKx4`v&MF3ZEa<ȓL4d*\¾s ϭR`i<83LJ@lM gA\i4s*֞E>U,>.$nm#AJχ]z¦-=jOjdΟGMd툴)/?|]GiTm@!izgm9v_X cG_1 厣J~&nUN{r"AKT%f)q;k4HH}+D<2p|z{b 2(JLÖaS 2p&yg5)4>b<,M:;fbLz{,[rٞ DW›~b b )C ލM[*Q# ^bwS.I(3)$KMCShM?ݺD4TGH fdiLh9 B0k.eˡn%:ELztC7/zeU&T$ivQ6@Hksq2Y;g(n^(Ơ#y'EIlK 2d6q9ojaf}fV5.k*$ydq*,6_YLw\^&JJ`[k̼kh 9X$*_D)GSVbɥQB=_\BEZ9Iv6;d}ZxrCDFoR $0Pjs") }R<_CWY#~m^vk;L"4N1Dp=ТM˂7/lHPѳR#DО94bPBv nQ_{c +6h Ez@۟4JD| Z'bLC%AF#XhÄ2ɍC8eYcw5i(}͛ݳ]Z,ƿ)"u,CMrmcCa*3)T_I8ߝ_,2NA60HiqRǡzLSʻ/ З?Tǀ[g*`쀳nT ן(~ut(Ck&YYqY 0R[4kRݏXoc:,[Ū>h" #R" sO~;連] J(A23FTlw=FUO2܋gf{8r3"Ӛ Up1l*$ߦ[3j 74ǹX*=k<+nZsP ::Yg\E>ۗyaHCP)YvE@dֿX΃z6n|<.UWZdx׻CW JzNzB1[Z QJ& ű Ę%IV?2u2zM 4ٻsl5cek[^ !g>|, l#@tEaL?Tr4цVcRR+G }C yX` 9\o\P?/%xNwŗGCˬ/s dVo"OqvWm3׷5Ƨ73N~imY&CrLZWhBԃ~l!>K6{^7 S]u3sB|Wdr$LB}$3x08ƆYĩ{o+DϜ0B7pXT{<ۏ(#[B ٜUP?QT+cށ<$FOn{80g?eT]S`r(kaB@dntw5pqJѸruKNr y(2e\h qjLNQ%*fv O=H·mt޾B%G7|'98hhv-lD:mX-iR gձ V3kH%-v^݀4k _^H?#Mڒ+AUm" c D _ 4v6ˇf ?etO4Kq_}d)S`-.0 jZf]G~r8LMb5# cf[Qȼs,A~tcu:.D)g %q6a絉 :B|k eo~QKʰ'vvю8j.3]!l&}~{' @D΂j- F, .MbBȠ )!B,ejE)ytvUI BtoL4B94(,3}}O1@`1~%μ0" 7|1 QIjfQn9¤6ku8 }MCE  m  ˋ87 ln󪎦>D+ +Gdž]eaY)Fr'x`ͤpT-s[Hszy]Ôy E>z|U/N6\kE8`♙3: k -Ĩe_f<#*3g{31(i.@x2PMBjng%VٴycOYQHEW_J6mkhBlAfraWN "?>g9LVh'<IԬgVmzTQtTw ," +DxA@){XxfBW1J8o>($}N:1TA8 nAn=`ض" |Ɍܤ|V m^#YP2UYa}!7'fu[!pF//:J RM_.Y/=7~0+|hZ"k"rω;0o5wqst 988GU ^J͋Xmk-1F3i pX)+1ץ v 6ǍO,ۯa5 x29Ź0ϠN/\VpEˑ Z$NMs}^vвwt5*3PlJ 0H Zt <%SO~}I%H8Ƕ5RE/2-*Fő=mY/!s@bW1TDi+h Aps:MԓhqA562.y˩MzD㙬 6uMCzKY]wE.eԨwcB˩~v`A @v3|* <5o)<⤋y>hc3@'vKd grc<6Q{x6BЌ:>ERhteqD]]yvH kȉmCO"nO:4HCuk2,@ {\X(uvN&ӷfjNzrR0(Jŕ?Rgd>Aovi?weKN-G{9,g2qadA?\L~`&&j*uif|ua"wMxXq;_޵{mcׂq|3Sw5|HO=gJXmLżݏ+7@U Z6።:dWN8򔄣A5̡+ zDryg h=F`ĸ},5)A/;>y@&B_cީ~ڧYZ2N6\^ڏ a±1i`"| 7}#EX&]ljc-Ժ W]Ǵ3FGkvPlӿٿ?ë;m $Ԏ0R XXppxBe(V̾ӽ qÃNZD:5HȖ/>D.Q*387(Ы-$v};;>hɏ]2;ֵo@槧jan`֐3מ d0> Lr?[g4kĤ@CVO LA4D2:YʣzgqYO\'xZ#W4,TíO)._z@1ha$죲lө<Ts1[SFrou[Biow}k6 ~iՇ&tJʃ \o0MVabw%6jX`u"1W]wr-{PDQ#tvXJL?!H8FgBj]{g +p:!;KN ie"@Ir`NhWh|/2p^ׂ96p%6> }HE%4<"z%L).lX28J.|/4?E|/c`KfNdF~‚kiXiS@!=żrUcd[rO2w2`,:`*lw\C^=쏵с- ; ? Oͭ`,09 niw5Z7["JEGUФh@+L5Ţ׻r n?Qn ä#J)hM9`smYF"gYqpyXSmRgrTӇx8uXwaC#h!twRɥ_']7O շvI4tCbb01Q|Jet?pՠ-wx_ G4#:ʖPc%.ָmS*]>C岥p!"I{֢B\d$ [6N|ri1V=ыrޒ`d~T sδqm[??)(. ~_* qɍ ̖vYBaKJVW倗Uq$x E!55~ (g+%q%Uҽ>9!6&2#?5~lff V4|:Fs,@.ģM#$l| M.VT"f_:ctF~q[7Q7 -WSH8EP0 ++Z&&RS\zeU6sriV MUSɉ #h fރ?\to& WdF6whAln 1n[ώj6GH71vugU4rN([WxgCqV;k2ڣ)t҃eͪ< (L]2q a򅵚Z8qW `}-JqO5 Nego֌ b(ZȱCfD&Glo;bJp Ǟ%+rkɷ ?E; ՖFteiB+'XrL$us\fg%['2'FgxY$lzˊ')؏ڬou]J&O 7j?\CHSWQ.TXAwrN<-4Ss@2[[aTP<81TDfwgeU) "Jd@_S^ͫ8PۖJm=$`j%Xл,/u>O'{&I(W GwE+x1lYLGxcʉ!mz6mmeY/g>ҽ-4,  &b~.3ȫ ~۲c/=B\ّ&n֞=\=G-ȡLKJ tq%SiX͒N~|yi\sܠ%mU#_'^xSdM)"+ [u;&)!L+R 67NOb=lܺ\ m vAdPH0 '\34gצm7|ĝISpknpj7￬yNYe\$ܑ3u ,])(q1^]ʥ,x5yATw Hm9F\63Foc+ fY?Z˥Y̋02 mF|:kWDim ` |(2hc9Ff(In'pB[(5gޅfС n=[ ry(=? bt_fqbezø3""O^۽=(z}jߓp!&\34+$|AO{Zݥ8L.H yп?G0nĀ1vۋzJ#c)]DN(~-RE0% Q1i'Ei(9A@"=_~ZWa 1*%_|9t/%=ɿatd2 WR\,&Ig8mt/D]!l>wr*lJ*BT)BHB%@+{ފh@Q{ݿcAjr@6GCn%Ǫ0&^f %! g}7SĻ^duYe1\gWT+ U&p}z9hIqTmV iA#_lħU.OۣKAjzC>:ȟ$l~s֦}Zx&E܊UK; "tUcZ) V<9ciU h?p]e){BɢE6~%us2(Q׃]^Y$~RMoJe]'{q6|'&)d˓h/;=L\͆4ZPذC b${r$ 8 ,ň(xN> oo-<绚wzPwSڗp@bU;mR+/ 'wm+jۏK3k&\m[f\6=B-iH2 |$=0Sb[4Ova h5yF ̱%APs`8=2Qwa0/yR.nL.Qy J!V \)ZcH,c ģ;eKc_CQy)NjhGcTSTaaP%W=u>\2qP-3M|V;N8x6+ωbmlvXUW>9bG/@0k0#<.A<**9]i{ yܘ7Gm-X&/'㐧@eB)%7|{!3ei ʰ"Lk HMRJ\zbՈ<38~sԻ }sO)h| !B{ujR>NUKG54 9ƇIn)l>FgHE^'uFI&8M{I$$d3qT3S̛D9;Pqhw۶Ӄ@,-p iǾ0 :}-v#QJB8"Őr^+a/]Q( T-KNrY 0]v'J{8 ψ/hNt鲨tܯańB;ǨAq ! KYۡ5!3EMę.6fZ2dVb٫Q['k`Kb)͹տ-NtK];b+-CIlϗ.: v}:*AM#AK?_Y ^_?|fsKB_7 F0Q" kkPtVfe~rڎό8vd8SÖaZL.)L7PjQ_ =HHٕyB@0Jt4>!5wwv RŘ.fd'WZRovO.ٟG諍hT gyH^L,0G)qmXē3zJ:7H<čT3 B_ I'? $F1*b_bܴ=Oo}ho0E.`F.4G4זe 8:O* g7jB6*Fe P @$QC1ZiDl-GD"Mj,y =ofC8`;@EKpo$lpkBBCF&Ji#Mh±3`]c ;K-d=x1Z4f2 ؈@ j[UX?fzT]jq!D'T8#v4yjQ7>vx1F2KgHbI{f]x*$b%*lJ=3*Ur&L T5>;Q|Wa%pR79YpuCJ[7@KA('!ֹ iԫ~_$+"qea[D K[]uz &Y? FLI軍G]B| bϜIM5 r47_%=s@PS,+1 OQ TMb5JJ̓XY~D&G3])WnBKf%en|j3(p{,$q U:A;._]zRƒECrx%fy四"~`v_LZu+puKX53}KSLʚ0r `B/aw(= DgȰ@D _)V>E,k @am%LiqLȠ"y2 DyP,ô\4 % ­$Qa Gܟ*$THj}k_!#ø?tn˴b`}W;q8EE|]0-{{{ r4/4:]lO[]q}m (TeRLiC {SlObKsKEv_3+6E&&|y7jg3Ni꟭|Dj:{uv#0 Ғ( + k>iGж_^-wH/CR'bM!`YdǢ$sp Dg82Ky\~kdwG Ʃ[긓bgǠ (Ԫơ |m*][lڒAzR3Wp)163lnAvLfUȲr(C ~91LyMgǨ!'z- J lhS{F\*F]U5zPb2::Gq7* /,"*4э#\GցD딺KeD xwL*kz/WJ1^0bmnЊUPr͈:dl V$)$@a51e6#R^xgp#}(tfD#LQMm'mʜPd5ljmZg5er(BS<]?z} u|tG[2k?ο9i!~M;X}פXiB\p6=r("fT:תf'ߜPZ6.D?GkcEo]>|҈ԦSF%@/Znmϫ-3]b@˜췪`fQP,7 3BW sl\D&$4~l{Vd)$L(ICc޺n[!O>.ݯj1w0= *W{/8$]\\hSB*єWWnib!dkzޘ@#U$㸊h,r0{dĩױ @g7ai*rRz v2ZO|S$\qQfx P?+A_wQVix zjo b8z^H, 7| .zA̧ 4+KJ7 |^WEg}Z pirY)F̅i=n]Mk/MdIa~㈥W``UcTnƅPü ˝H16d2>Q`ENӪŠIB=OyCk~cȋl0æ V 2PWzΰsPH N} \Oyꎯ ETR>Ma2S4}WwDGZx ,aYfsO'6칔VSGx죠 wIFl}V.fiKa4^ {b:xe(Ǒ;/T/*HT; =и@4S%P**'?enWhPzFlE$2?9["B{=02KQ="yuIu%ʁQڟX\w9f-|e$:y_%Nn|q^/1ڥ(Ƙ(p6UՁ T-]:D3Q\-qs\=s~-A4O3}z%p\>P@"arZTȻBKR< ^W58/B@h ["}{ꁊ~yׁvG!MآHYC-ؿ\ ;/>M =%}0q= ߡ1cce U 2>_PUd(b' `dDEe`C% YVtX opŪ,U6e\#45$$C@'#mU;DQ.ũ5uc_ )MZhA qE-Uz52ĒVqN1~<^oE'bl DD r0!+dKݵ"Bo"B&ѴnYO5n6G]c`\slLq xuaIfa'# ,>.H>+4kyo]STḻ fH`,ʣ ]{N2 @t,(5/u,Pԥ &w脻3:OWZtqRHδsv"ba5WHE+Ƅx}[J$pl3S*{O8UJjnNeښ U؄ یY/2=M|&1sd%k8c0+䪌yɚ* i Lʢ R=kaz%g߀&yYx {w1qFU ~K)K9zK (+&j}7Lu&U2z2R!VK ikѮ ‡&hJ]] Tm5 &b7f)PV.$>4Q(CvXW#9k}KI;]]OC`'k_eH hR~ܳ73Tf*?B@ ?Pl!;{/4,! }6͋m>qV|@019rx欪FAGF}2` ķfni|W |U>_'sm$݇5Z /t}DI (-Oue*_̎\F8]~h;nhX¼>pw35Q":QV`[:E%BS8r4bq?,Ķl-aA'ҹ~Oe n]žXfޅuڎc@u*`rn=f;[9[O:'SaSIZrآd/1HW>P`eI'],^j*kV!|~ [Ͱ>Xуv{ (Ceɪ-Ҕ]|gMd0AWHY;=q;20駆 sty}$xu?0,vNN07-У Jm[CkJB}%>`68H|x2Lxض[lK凾.H4*3Z~&dGsR)9;SD:QP<,i"әVT@&{c%3XUР9z{ׯ,#5 |YOXѹ=TfL,W\Ѱ8\\,]XTA@4%u@W;b`aR*]3ۦ6S3YBIG UJD ^,Vc0I ڏuB) )y"𪄧ypy.b* ?IΕoW6ϜOtpf'ujQG ?A2%*5SFLnr|u}un}: n7 ghLJ `F^~0-oYPg3Z9PKv l&&-߳| 6/("rQ.-i/YL#{\ ~?!N;!9- +h3z ?/gSYM#j.Q^beUvL`_l) Jf}5`Q3ZGf93+y)a auNsTanzXֲ=4!۹p~n7*k̺l2xP`UW3^OItP=j_zsL_h"/"\S 5j/W?59%VC>HA@bjlO#O'ZbAQS iD&N*6$.UKÞ gkwrGDMӝ9$\݋MakLxs|+Oϳ'f!擶C0/C9Fl̓2)#F lMQ|x=S0iu\^ &Fu:2(wIOa+| ѿO.YOU^FJnJ qOIOaA&XRЃ~cz[тͶj*!Sٳnv&5i,kFt}ɵd^yzN_Ap`ra] v69ITdDppMҮABScQ&iFP7HTH'_S剽ĜmqfF'?Tr;D_9hbDuh;wJ/5ax*ƦǏ2- '_2Fad,e*8>ϋf$PD㉶aH8Ս"ӥ^ȥ`v2᎝l`V3=1"BXK˿M7j5tsy80S7 5uOG}^ .d)ʗ:fB"}XM zE m-D*v:zu:)jT>uw~05H)HqAɿ,­ ]s՟m(/͢ʢ$淍tWaxclƥ?g`ͅ_}/N\Շ!Yk<82-RNc?|X`+e&^a"woqg*கnoh '& )nf/*ϥ1)?%:A"#b1kӗ} JѫF#)uzm`#X9u ߊ[5&e͸`0hćx ҍ!qDz\μgd*߶V'zR04v =0 "+1@{.;AURJ'|yG9l#̴H1*1:Ρ!4`G_pq=rQd^C%.rwE[ چR*ݼд TB.&oKZ?$%zMW񩃀r;̴dOL}dhHHY戭!g$~=zhƒ/LH5lHnGA\ 2ӋG!b+q&~#ŹRqlq8L+>l֔J}B%J\k&7^ Zagez+(gkd: XܞV`H`_YwN@op- hoϡu>3#gZ|u3|{/ļD$\'/2}]hv3rst?BDɅ0*PY8)uH?^Y?syYB8_bVwE160ZPkqZ 6pL)pqʤ}EUtt"uʍ4d|q}Qšfq ͆ɜ;0#*a'9YO[Z Lw VnXVit g63t GEqrv:juƤl{{IoIE^})a3Zܿ!):,Vtv:r-0\Ȟc$7ZvTT:y)Xn |K J̾,kNn5SRqLzK+SSxn u:yG=jl%*i:|h 9 pz0!s͖![$vC 3p" ұx wO~2ՃjVy m|LZbZ1+B=mG2 ({db7zH hFdyۃa,@d 'al\fM7TW2"fw5d(4tU߷ub? ;E5=n#ʤ뙧D/x-(Z}m"G *\3tP}|RU;=ҋȈ~ D 1&3ݢOS@ ~Sc'f"^ЗHr˷ʇ\k7J$858׎>Z>S_S}Np SWvidrv~tZV&ܮ+"4= aMm8&f2Z[/pM^Axm#%y$d+F|pdRzl83Pq!yW#,*s ˰IBJcbyoJTJ~Dhު[g)ELS낱wJbuٞ#+0<!2fKI3=s8F*#.w-X(guT,(m2hG^wd8.&ͫ` a["mgmQ -"SA&wmy~煾cw`\b +cER..l~"UuF-^'tl}Jizie"@-UħjE>JWdrvFGP"N}U᫸'$a\dHd/,9n$n؆Fn 0>"AZ#u7µnumD vgzU~,w/HGFQ r{m_SN>\iN1xL9((k]hggxwDXD1zOQ`C_א4Pi_C;jPL&з鐹nE CwQrFzP>TтruR̾R F=}{\|7h-u@L@$Æڋ٪ElIki\@!f2u4#_`2_RK5kt`B8,Na )oJ^rͧRxGٞƕcx9qGT(<)o,ӬJ _䒚Yà2B#l-x [_F7GyM>燤=kGvO&^C94O 5{osBoZ,:ḕu4@24^)v 6hLnpUs>?pU\ZlU [FfΘjˠ ԁddH{${=cۊp0+"3 \Vا>k]9:N'ɥk-TFM)]uuFKx4eF}quM%sx=80C(Z!uЈ㤬2Hn[5{#D/70d`MR4͕krz,zŅK'r84P.D/g?]վ" #(kZN~1FtXzu dnz+[{܌)¾@ j:Bc"Wq6H62UnnqHpɯnV_ّgI1=+*;[L6w֗Y3zʱqu&Tb3%Wr,e*Nbfe,l%W|eRz(z'T*<:ݔ:mE R]Y,p~2ոplwws.CƣWYڈSo˼6E|育t-$Ա:&MSUvJ^e>;ƞ7(x Nz X$UHyyU^U؛P-L6Jj驸w57WΠ,LCD d/cyb? :;/7U[P ϠtΕD%XFPv勵Jpʚ!gJabz+z / 2`6>7 ˊ!R8rVl3eiDN{Ys)=GVm@cIL\= 1J:I^)%T*0`#>qQāTacUABڕ,!~=>w[(ʞ_F'Two10lڿo90;wI So;YV XesXst𹹡|<%`n ڗIח$v%Sq Mi6& ;'',^ 7HCm$@AЮъBw |2S O. ues1I'Wk(F0xp&h]^-ߍ:=kYSzkLnh - =JKw+W:4>O2o|-čЃ=^2X[gIYY_ %u0">u@qD!̣h=D2ZX,P^n8l٬AmV7X83юfTr#>$ 'XD.W^4sUB&jP1zimno6(>I"X}GsXTwn,dq8`//Eĕ=)u :'|.mA<u? 6ș7=&{ƅHT1~hu[bNRqe I}kvIyJ1i24i—9ه![Fby~{U{g;{|$~6ͯϠunFh/0*଺xp3ƒav hyJ% UucT [ vQm[mcMPU@f `e6`u27HD  v:^Z'rM&9B5DmT |ty.z ?. sl{dX %Mq;yѾ)as|`}_ȅE:mj>bs$d>?cilʿZv0l͂X)-2D&jWu@oatbbfeQ7o}N{*}nM[aBuAz_ߖO1w&'U^A);nJS /D %#@"{Wu#qɟg1OZUZcf͠ ZJTAOaamЈmX թ yVa6lOA@D{!Afԟ{hn*j s[1 n5V|Z \H"܏EF(<]dXf*,K z(  Eڭ quq@Lwss`DQ{2,5I}HҒnI1ZE//{LQ=m\-̄]#-X@}+47Ǭ:m$EUUnXƚh~c*n.LR#>$8^2%i ul{n/Qd51M1 Tѭ͟DÚ|YAWTOWp1nDxM0cGK58A+ȷDd+6 q'iR ڢ#}|`{;OW"d;R$ JYƂ9;\SPS$&}gPƊ}{hw̉ rsTMZHVjiCH˯^=T 7 ]]0ņ*Do%${tb,2tǦj58,|y0Vp$@Ӹ{ϵƁ;[Sũ p,8%x$S.>@.Ujl}\YCicШC7 TĔC0x"%bɚn"9H5\TmRa9rܩUF!MRx/Hc/ c't :9:h1GOl y!zg(ha?,|IOt)f hIn?/gxh1[r+ZΗômg*rGm) !7+9+Q9~q=qIC{rq2[sEM,qBǴ!ۂfP!JöZZX NL@f8{`ψe0z 9E2EÙp7ʘ$YkB$F\-2c/ Xoy#r c,pa&_VVD?j:nr/a;d;@܎i ȟ}} Ak/؆рg';4V`꟝[Io" a%W?tCp1| /¢5"uMj>X;_F~ֱ:dI'{ ! V"  Jɣ$W8 /zIu*3͠bAퟘN*Ck|'XOT'6I~ $jvտwB@~^^fۓkXCAPMe ŚdfGtHnREm2ZM?۸ʯ>x {]d؃ -%hM=n1M|;T+'C-_- t'7%j64(TɊqjXT4frl'ÏI7Nh]/5 _O">z-<913;( c H:֎˓B WZ3~ƛ*ž\aEߟP5Ǻ(oP',-Z&ԣѼa9Й1/څSɈij.~7o 8黣i7SvÃ)CLsUcZ4ɺXNm|Z'Hi`sq [[prOiD+/% E+.q18ݓZAqKD=yUAFr𙉃IƂR ܉f΍F_w!GSOT͛KQN:Gڛ?ѱck> ˁDz,yI ]KuH6Dt;xkƙ%3Q)XfpI}ņ9LvpI)9 ܉ !앃YwFI"V6&4$5-T_I[ohZ!so<@r FU*^x@O|.mCj܃t;ʆ?J \s瑰^c%K[߷=,6k&wadrؒcO46Q&xvYFHVE=[𙨞@(#ư !9\;R{Ә_EWb4$$Q*]2r;ƀc=[gWT~JfyH2L26VQA#-Wh+,!lE\Gn:ۙ$"r2gʵsA1RBޛ49{m2k'@b1+WBmH~c79<ϸ+f"0q2il:ދoAI`6+AƋrk:=$p۠ElHb0BZL['RJF!v/fAIgS d݌UشEJ%x )ra:Q"Aﭞ&F:aD ]AXL\eduw)wJ5XVs+t&=fA+6Yݤm\0Z]GHk-&mCnA/ΊrD-0:fog1 %iV!] B4,.p֝)__iXwN&X-|EAw<<^e՞zG7v#b/g=]#Q!qrsb5ev{_V73y)zU  %[SF N_?T=ގR nFZ :鴿`_n]Eb @fGr 0t㊉4{])%".^kiaKEUF,rM0U0!''[׆D_':^iG &ʆbsWRJ4MrgæJ_eu윫djbLAP?ϵROs5y@F73"Hr2f۔U/Y~Ewȃ`mEc6qw*Jw⍣FN#{ fuP6~#rjO0ۚ3XkOr-oz)_OC}J!l  (60V<4"ۘ|$8v<*;D@OdC>řD5jJVJU)i -R|UAkU@u3^L&uv̈́ )SIɳN) WlЀ ]ަMH7' <Eh_)|Ii2)Rf!J\WJ'lu9(f)CK!i/]+MZ^uO2U\vEF}B,@e峘drK{!-CMc;I*p,PgdeUc)lu";a(.LZJN!>a^`=դ[u :CȀl|)Ԉ M^$ihagMZtA6Wk;?A7Dž&{2:aϴ[X*fda)Y>uBR'#@E.2"s$,5ճ!B7=e]x1?Q-Ť0#88iY ~5%#L z&BdWh*y7K8R9^] ;| Es Zlൢ`H6P ^{!Rsϫ ͜<7 죤<E6cB$y1| BY9h'ux" h@ˀ3Sfcpl+c Ȱ*M~帖tnt6VZ&<ӿ{ FejL[s쟪 `@4q[. Rhy49Ó$"EMz5=LD?/}hfc8ᝲ4(/3cDrYV7FqsQ177kw~-!IНAVx}؍v+Q}ycW Wx 0g֡*rc J(';΄6Eq8o;$M/x1x;%[/xYn \$/Gz EyNvǙp[y=ZwLҲݝE~!EbvX3!J&\3t:GV@׸€OY*k]oRFJn6)Nz?$*2 po_hb |<|3ȫgߟ%8B6KO-HrD؋E-{'=(pcA YkB[>׾+%3ּ@UN lG \;­ L R@]\ ~cA1k{U>X 0(:VӋ9E$IIr,Kor ?($B3Jm<1/ xԯ@ҳˍ62# Kg_85EݪZ3t c|9@D22O1sL4{ 9̒粶޹#8r;ʬ'=H~fB~etrnЍ9q07IN@6YM~yׄs =6V{]4tPhA칬x_p\@]B2f'A/@VJ_z ׺u?fz߉H.#O|sIa AzP4ƷF) aWCF ФN"Įd [-^yT)ar02oed&i0.ߌ)/ÿA?;{H}iLkdW/$HR( L0{#PSLnчyt x[MLэ}9Kբo Iz|$`TMd]hwWVrC. >w&*FL  p\O) >NJ۸ hr-D_rWniֵ>;X:0xqIhd 'Dr&n⨞Ql) D~КvSB~O!z'#` sGtzP)<9(E?HǍ(ݷT)'!/9FO2r%k5U vO-Ia#J )eBCx*%qҔxf_8e ăaUC}2aiUiI߅ L][ A} ;$-+1/̼ݼiW<&dVrmb9]:] <H7#uq0cK Mke0޷靷VO+)%0"ȥf<_tub{1uy$Tr\QFVx1guA`٤v_SmD;.COJp$ <} k;&->lr Df*(V4Qf} <1gKGMūWSUͿ"888ZE6 nmڽfyK̒lrJ!BRVGi,g{9i:46BsDyˡXGE5ml}Z8qM{4vZUJܾ'ġām(1lV6 1I<ҜO7åxX-I΀<ǯguy5xI;2 ߠm:~/ xc[W,lSy͍yD z{J'[?3[G t2 3+1g߈dA8@uƎN0iaO~ χZ'`;@юܜ'ҧPӖ|yKgáAsCFB2S8ɝ"!GZKM!ӎGZ.i;.];r,SboN*pS8U)6"XW-U<>pVf\4% EEpY@#tj7fy$eٟ ҙ}Ẉ(RLžd0,*+ ߤF's0أ:o3gӇG÷ټvᰏl,03bl!¼uDGYB5<.vOrF)@L5gg.(\fĚ߃01Qc1d(`u2DveQL?| 8A.!5n Q}1gmBὫ8c#p1F^;#>+ JüBљpդ`A7AuYۼʀ' |FQuuqȋ #t^gB𽺴|0Oف5\Ekex<!^:܈qXҗXU|x0'9V8M!o„ŨZ$)i1-@lqO35?N‚{hu`'mX̀quy6x+GZmPedQޞ {Xh͝{Ȏs=LQ[UV45b-J5n'}-|* ЁrN~me©Xs:ʤ sM8dvGǵg Dܱg7?I)q-Y9nρA-Pc7H1{s!?G m-eO[5@r@t 糌vDۄY!i YAPc|;+ $h9_?4DW/ luqU1J@bq8 »0bvB8wIp_& z޼A mrDAQ+d;_bͷ//` jƈtӾq M 紂ڵO% Ċk)h^YP;%+utcrL(5"%f*QvdMڅ|&;X2~1oT fÐ& !΄-s0NSh1SW!75Gkj拃pF *X-yjc7A  .Rۋv%` †om;-{Ll•5H8qZCPouCnhoPxy0p s}v{$|"(E pqgz' ""SgڔQ 6@?o,s lx^v0nLPۆ{Lrjhg}÷\5~\H6#! k1lFG)OVA Ϙ{tk6]s;\KB!*>%b*o%N6݂KCo+Ҥy.)G#E ޘq9ZwϻݽϺ zѲS)!M!GIgro"s1RǷTUHejR5<ܦ2plZ8"})=aAn McRKlٸ|~0N=BSCyLXN"=@<}y'+fWdJ(W{G7Ԁ d^Ϧ5| C($$L`ǯB!l;{i`?d\Mz45;GM(׶m0}dgj mSM Aaх\]tlxPK){pi "Uh)X\uPx)TI164* #te]i-c=8{8ȟs>t3~GdO]KRǔ5x?۱d.xޅc;ΐa)J2VGWE);_{Qg#G4`oYM'!f=[7kj{hn|1#v3>-ɀ2;ރϼPfPOP<=)ąFR8|zU/ͨkZ{;""틨z>ӿޒ^LOPx{Y47Oe{Gg02ҼL%53Iթlۣ*WT:R)k[u ԏJA %_eONy.Ͼ F{ܰ;>QjM>zka[l,Zy?y ]{*(1.ض4hYjiBFr6/ظէ/uj@ Zwx]bXI t1BNS^B;+Ƒ_L6b*0;5tfLNusFXkRT`!EInDK۟vsfiZB!$1e|h:O@J+Ce  E+kX!6N{ŀ'R 0C D'  {}!tƁS: n9{CX^챉#  ,E< ­2)OIO 84r8[Gj-(rː}`Il߻ g`+k4}'ofDJڶ|Girg}=ho;t"JN| "ESC_O5sT dr_|D7C 'w/+HhGZwU v3: F`sXJwMy%pkY]]N՝ qk7R8<~T}:\\^BxV v-~|TpYhֺ̽x"U|2D<PRx5|r QkX*] h6)d,f2żg\ 5'j Ҍ %pS3Lp5s8BBQdmE-zѪ%3-ѹtAJTFXݦv#'꠮ L8GG۳tGh۸y=D+-\`|jZ@v؁ϿQ7%lcI`Z޺?(Crxݍ19|bI@L'p1-ݵW>~#VRMV*-H`0)k>' T@C6*sDʛ~.+1MJ;x)7?zWy_"L]/_-v,ec mӇq06u?F>P4DUlTѐ?k{K ZgLZ)k`!FZL|P&u،9$kRDP {IN4ASf n=Ge\N8ȉ dG5V#gS!SSćR/$!+Xue=~C34عleM5+YLxԑ8 YK? E&g}w o% }܋BEfb<"w{,U @Y|c_w#ԈtۿuZP{I ["^V8 T8vӜ}6<=HwA\UIB7r"Q ;l72-TɉC NȋG*r=/D-?$u6ⵘ)+j F( OVnCI9f;-52|0fSmfڱ4);''׼ ?bmCdna Uj%3dTؕpMbNd?{KS=]s|W(W47;&;2 TH wHWz.H `@0o>)^ԑRb+E41wtW wA}A`X ;ϯYkX)25pL[=k?Vd\VL  "ZV.*'$T`%{j^LQ1f칲IG8T?J0%x<ݳp=%,w(%<Hܱ˸\.O;wAJW[=*ܨk YDkeء 󍃆Zՙwx~J+j˃1]<y'pp] #BNGl,X̧N-}U{}XXz=) 3W-!!r`$yGuE-$Po8y$1*.4@ue'޵ aM?=ͬͪ Y`/5fh ?>>^PK2(r& Ju.Il b4 Zw!b/s\nk(|S' C5wؿn>Oi^!X9ca$-;>B/a{Gth}H(+ E9R$Mcj˹) 0PlCK?&m7N#?&\6XЋ,Ё3dW 5QaؗRK %#ϥ}'8>kiJQ$"ʸ^H֍ó3Lu̺￐5W=q4CA'b]d+FHc0PF|prf+=/9KF4?`ufKTBey9Q]]9JHI?0 HUpv:@4{# Q*߳o>+"3NՈ~w.Ӷ]ESqڈyup 7\!]]eji@! Z?'Z[[%*yNJnFtn!JV!MQ+m `|rӐLSL>*騪 o+%+0o_|L\c !1U]4%;@H޴{yc zHcud_HG;8 7Yؙ(7E&"/ٸ:t?fexRg9:vq%NY8SQ¯ k䭎WcHBsCнd͔}]g]gKhH#LP=HɺEE: $TFNiJ: [!DW{T!ٞ[1<#ZS8[ҧ(H}1q,01Ƒt@8 h%9R>zyݖPnDB`2w"IH(9zwհٿ!O<~\ScY_K}ܝ@CWڤ ;Eo+4: (68)tMsu1/`GR=Oιΐ9/Dֿ8]nq|Hb<֬?_j[yޏ/b(1/*~N#@T6D77JRR !O~oY(#dylO=KPTsrf@mA* q*OXLE@7=_)jxM?2ڇ@pԽ2pRI!8 5bxa5 9`BOp~"W^}`C2GJsQ,6~ٵNIN95^q{ F.Zxz~[uq-2}=,7Ax䖔"A^bg%w]{]ն+b'RT|vǀn70EPIRt;K$Tl cnQwNB}ǯ?n\aw,00w.˭ŕɱ~!iYhJ#=/\6&9ZhcYkS<°P˞ЇCF>Ys?ëں 9? ԍ*!aa/ҴRU&!R̓)DJ.@C5Rι$2..3i)O' 6AyXH#2n :~.v@Oyu’Os>KLօb~hk71VK}yNƋŒqv8}<̤^+HoIޗ:-_5Mt{OWf:<1TXUg@,_?)4&"<ޖ(l@l0о.!4݊`yXKE@Ozw#n ZV2?*oI6Ν: lv m vCe~AjDi n!u!;S_".3Unx/·|(!? 򻃿t={1fk xRttsv_~^Atp)ۃپ&2^`ÂoxB/B]o\aqC @23&>kM 2)NuAq- V{_1 p!w4b?lW{՛ .AISa~:RS0v;|kp>7:ST'uZA{V-Sacۛwl "Pq*BftEo/+,2ILoG"64} ܗBK+XSCȠ_Z+lO3XVPطBzu|Ik?S;6ynTN/dލ ([Yd@H)>wBJng<藙+Nwc N6տFDp˓t*x+@ZB&1yY&K$YΊgddx[yJRC&8y3~5~iz0q~hX;teĒvZՀf{T1Ҳ ier ۫|>Ͱ=#ʶ)5e%ϭcWkGJe8xa?lYH&W9BSN㑅!1ҳ)ζG!#8(q4I > ({ |->3G6&p[xAJےpZt ngg[Ps2=[`toub<4 lIi&tʸĝgM7d|%G Z/t#?!^bfaaCBȜ\U ױ&ל|v^qAѲV^ӎ96yuDrRkj0ۏqMe~˰l}m=A['zʣtA[rT{_~C%/S*tt;>eqWm,KVu$Wdv J->ɓZkՇrW'0L>Ӡ\ћGKb,& 4Ą9/x f 9ކy"(\b߃>]'29/;hpqa9u@t::ȍr!㈓?k ޒ؎/@Хj3D 1uAxmm-C&jX 8>K+{_,+FRhvܕӜ(WksQEK.)cq >*E pW"Ez9u{F v #_k ˞U^ d [3k<:.ƙ{J*!#T3]]숡d$ڀC^``"ĥޓjf9*)yU}9C:'D#fw'U'Z+y)_}(vS g!>'MSk)o?Uhe9.h(Jz]&x>6PAB_j]XGNʁ4^쓾am勝Ͷ>SՁVdn~# r\F],C  AcN5yTo^{b~wdVMTC4iٲ<i>mZBLx@&L'ZԠ6-8oihy_ H&tҺĽ,D'V8Qn;gRTGbJ- Hf{Sӱ{S9M=ŠR =RY>R<ʍx_ʾnrf/AbBATDʭbK++nNKy!b+Lf?~BD {sc._j6ѿ fAfX_cUQ  1MhzR-Ƞ JTl'кQ;%iׅXQq~c;9dGzcNm[u߽4.vhtU|$F͠KRpVp|F(7YDY1%ʑp5%" #0:VܘdbvN%jf9:$ pYs3s4+e,_2@Y.1 -UUזB4FV/YZw wēp*Ч.? arMj>h.n[Q y[ c)25.E4-MjF~W3m k-.A fm /eȳ%˝6b,;J 7ww["\TTɭVYs:.1Yzۖ/ 弼:IEP7+/Fm\&/|PH/p|ki8׈J٩e{T5STQ| eEF6π9ȳ{_eG;l9OUZ(BWsWvrS deZ__v$ /绿͋^)_u Nu'Em۰&FB\ f &xp.?nBkkywWFeC#v"6=DguD! ʊj|4,whW̴H$Ebv+1nDCL RB!<[//|'GռHE^;}3AQP滋Ԝɠv[oo9C;;6+%QД-f79gYZAr߶-oW:֑EmDA$yϑs1`n1&f&3(CQ/":1:%iQeWԪUӅG ܬ%imW2zKE J}yŐ7[a=wM,\-_m8g7z dHpX/e~8!oө+G^OC9GFRb"+Tn ^Y!򃑼3"?~HYaA$͐ZR5;Cc/>p %d;TZĭ]x?NRi!U^{G:(S)F=RQ܅È+_P2 ;$yYXUUxu xېGj' ` ‚TG#5jc|LGɰca:b>h6#((f9ٖ17¸05j\=&x-,4"O`J.09ȺdԵ~]_ʽ)#}cÎ} .q̞w }ó/ڛZҸ,AkG ( &]Rၾ,3~Z؆ݳ,"9K0k TFq?si/hHgx^CiK}#΍Z 'D@%MWǿvLhUg Nqf٦9'!0~:^Aa W˂o @c+|S}6iTE)~ Rε K+tv}@ 7Ƭ@=&)~R:luJ_h ]4 Bj;/|QUY2W<ՁQu/Hq'8SOXuc?%T20G,w` H|,*YHv,^"DWU\np z4I25D2IX 5_CT)  .9+l^\XF tyM K;tW/ߥԀVt_Q-W9̼1)T˽40ҔHZw~'!_dO؇`H.DO;=)>Jr'UhNnQ 9F~ 5Lʱ_d[uOE[n-(Ogģ"Z7/ qi :FMm7JV n$aIF9#Pc Zfc;dmV($a^U&ƲŒIڻ(9fhaUɅsecrgSS~|hbp ouF .w,CX<1*S_Y}ti61L~$: O'Yfͽ#G\RJ;ȍTY9\ɨ :tPSF3_3)P~u/4C5rFtEq[R+Ƈ}@xwx!M쬞[;U8*GQV._(C)Q4>Æӆs<#UO0c jjV&x}݆V$lCx$4dgBRC`,r7x'q9S[zԁYWk'͹Gz3aQRïf0]-C  cjO$pN 6޶ĹsJ[-E0RJ WHCˤռo|ɢ 0ݏLUf n,v!<< 5y^Z/QGNhnfz@@U͏2V85Iev,H1ТQVX 1>n*srm07[WiCvIcbno.ZoK)HP"x p~a\PRP4U+`!l{ b Ӛ{Jн1!cȃ->­MxZ$i5GL0})\d#~Y-O^(嫻ݖl3k2'8y1 P(9Csv3Ւb@2*eu}pSȨ31^M|dWSO2mmUf5h.i5"|ϕT2mo@*"-?QѮ^$E֊8<8e"mѰɑ2Kh߷Aq'| c)1i55:{3X>xmZglw9 އyjለ?-FSPaÙGQ,9Vyy4"[QpeyV;DXɯd%@UX;>,!(4f V p{ቨJ3`PWAlڍ_1{!rgHҷ a$aNsPF6s>KWAڒ~@F5C{&ӓ0^"n>qb&b;ƾ$ )_6VJ(D bv;EҹRrL~f cְ ;ؗ.tBEz]xi-G9?2Ǘj5x}9ZҚT+{f[b؈59: bؘ_U[<+&c4Zj5+}z;xIy+98R@TiF3Tyi\!=\] ߑX5ζD5QĶd)Խ?k^|j}T)ʆ1ԯ2$ dBX|1\q5 vvRt}4lc6j"H>`Ggaob+55DnLgFs~DJt3Oꋒ.hx,XeǥfJ+c|}M\W'~Ǜ6z9]KbMl W:OCWw7jL^N *^JQ/8ƒw%rꜥɟ-|H n!+bry!(1;jPCPpas!-I!zHW=iF c,\'f1O\Pvj)WVaS7?Y.o|9٫"o =>>w%iQ螩BD^ː0jء;3`qk<'GbAVžEp+NoJ|R۪Rt0]|*<ҋ5|pPPÜnu6@ uzwW$,חZs>+¶+Tg?XCxLV}vxI;(Xt+hnq*<;R렮P{^@R~}k#52_ʹX<5Mz';ͱ}L.9r8.Ӣ2?3&Խ+Hf K4=aطzRo ,3LV_R.yl?C,B0&k$zᖷ{ͫӆ [PSHq;J<\9=~gj|$\>Q x,ZPwz1BjR˖]rzOV+d1DrK?q{`1$(x0kP٬Dt6 O~$:fSI'ب O\vcЅJ',-a V ʽH'l閔Am]<3WX/'0&iUsBȧ-2Ky=EҽfTrSnʑL<ܹt znGzׂ@T{BKbvNŃ{Yci EB1i񘜌._}@zq6(MOjQ%`v#?8JY(>b'JM;+݄#UI'cUz<r0Jl+rH!`&-`4dN;?vU")=Bycc˦1m+ldz6vВ:VJNɻ!yӃ+,щ슧U|b)i#[t.8I"l@dF݁Oū-ډ PҶčs_|E~rE;l6X@z q!\ tUy;EOu;sA-]Sf@oB~aAމ'N}烘"AqDB^qmϖdzG)r9p"\y\Y\~j|p֌D(?uUg`[{cɕBur6}hTK[\F ,/i$aD1r~.z^7w(w_$]8MS-ݴC 5gJLڐaţ;+4 _-e/fks: F;(r"bxa =&N WCC؉ȍ$q<\I5&g%gmŅRgKͨ&j+"I?] 5Pmb%R|Ӎr((AtYP/djl1֖ކ+:yH=6 *5M]a5:xUVZ͕bYA@Y'D?'p .qD-YV".-ϕH"JC3p@Fx )e`~}"5$kunܰJ"fx^<{lKM2Mt%dv]@H;>*$iZ-"V1&ŜsCkfc[FMXL{ Nu"_&RZ;(ќ^\O'u3[_U!C$]'*F.N]~7"}ߓ[]L;{,Gdq)^JJ+D~xi1BSl/4R6i:DPH9wW3ODJYK<&swk$g $iEW _|Pէh1U+4Eig~ <ޘz3ꪬD [ 뻉v,2+_sE,1TfTqcZWAc:@᠚t: -]Ue~ͣщ*y'݉}0_w"ĝȢˏη|k􈰡Y#dRF6(E?z5x cp<3pgRnn7yKb3."$9dU+ۣD=hS"| QN-t .i;O7;fd7.Tzڨ WpY{s+rx~5l3Yڬ V^FoL#F0(nKXx&Flҳ!F3tl`DObK?rGYad{eau{[np_o&7t pOjB•BwR/Ѿۦ?(O]{rcXe+\ŧE>iȕ#kVy0Pkm_ |;Tn|fhj}gTS\V^m]hCÀZrssR_&Z X Zvg˜Uՠ';NKհxtLOu7 *"g #F!kVE5ZL%Nι u4хӊnat"J{|w`Nq{\+nF[P26Z:E|hauRBSH;FM`}gG8 s!TAzDv j8i{U dW03<μ<ҭs7$CjQ W%2, O_"ܺc8ޠʮ >TؤFB`^0ݿ0;Iж !75eݩ*c{BD1da5oQ):[8!aι3?}/l)x&Z6QȕU"OA:Ռ?е!Ƃ`ԣkCqrL,s7x[--}'fW<>o g\zw>y!Fcf>SSL&.&K05Hnᛩ.#S'Kz볛h!%7zz€my:ln'+cnʣ)`9Ͷ&0dK,3CceCeK.cdtқ~B8f/h2x_#]<(C1|)ԗ^Fq&@Hfv4uwRE6#| t-xa\crJ m}CY5cN|Sm@2ҩ8A!LzЊw~Q{? p\PF?9 '16U `BPw%("ү4ĄTsޢdJ4}yEG$o_vԣ}'-8qr) g|D+2VGRfy~21 Mt S}m*3 >XAx IãPԯiMaQ Dwe۵ B5ƼkNSedCܜ+J."8+8- F+Ea$!%Ћj,փfg z*UY?sa ibX.Wb.6lz<>) …=C (+ΊxW\( Bx.dV8U5MFwk\؛瀿_ HxVn"6kańvCޓakYܺGd +nhr46 Ud!"Dȍ#F(/@u(8E,o;4ˀ{9-N;B UƠ1"y.qz^ׇ;O@o|E)z`0'WɘU,,Q37b,-F@V!>mEpPQ2>zw qtl\5X7Uq W5I% s},\VB9l47j2Kr74]AD+I 2nȜC@gPڪ\GIx,7͍2$0B$Z"xP+tIQu_^ vo=oZɗ.Kao 4cߚ%:d,8I2|$Î"X4 *C0.oger[!le'Ю(8|qڵאzӋ xQj#r؂tq|VyR8HvbŵnCwq9dqh[IYR]A@O,k9 y OܗM*{Bxײl.uai^#5_[֩*(8!91UO\xBj&|pncPe9-@8&Z̿2+T80 x̰Žx'{co93^ ^Ob PwUaSt\Xe"@B@Qu8W308(3@ePV Ç.ls#uTژP0Il8W0CՃ:d=p#h0|Y!r6h沑ZNoò WlGecBsXNW /rabfFUࣕD L6י(ni ʆ26KTg_fvzFves?O xҺ:1M㝗z=(wEHڔF}5҆~Nۧ},)'>˭?ꂊZGGS/xu h1Ra$L]$MT%s7-{TD~)h!_GIunPV6V8^3$7K~%m]kٙ;E3`ɖ,VE' |0F!<_PtݖҺmY@Њ:ϔ Qh{}We"R5T7E~+^ԓ)$KMcA箾0^&`>[&pudh C&/RIYF e\=)Z,yi)@li򈽮f\ KT0!xC@>s\ >8a"C6=(Jr*l/@B__9(n}l^ȉv:o'4Z ?#:%J)MӱaE%+1K sx<c;1dtrNd? mT E0uwZ%x%rN1K&ORw:AtҪg`z^{D].+VlA_ۊŝnFEC#Ί^ l}CZ_Rb-\~d?Jfy@󇪅(& }+z!+ag Yy?hB͠8ww& K@%*jG,X=+a`|eࢨff{*Y1bY5׮><_vW&HfMOIq?O{w1F;mkrHlܲ7R C< As1+lWu#gѺ[mBjzQ"KcA*&+RW$`u4R6Jhg{,+~&W4:J1aWød72L}-H-}YZ"O֍|sn՞CGC'o14uOV;nG&> =" 9Oz4E+29Ѳ]DD4ԃ0h'퓷 ByE-TU(,=!ȅUPnIl@m@iѢ,t"$d{GowX߯R12l$J"!`\”ySov 3MHgN^8r3 e7ci"%eNw&yDWT'a.LIv۾hx#ZmtAw^| 'E%SګٌO־)9I6j1q+^o,3TXvn(ܵDȳ-m{:^a㣷z` 0n=VJT kEj-~JZpg~Z/\p2-#QBJzcĈ)vۍeQ%ؿϤAqo+)Jgwmq(i=$߶A ,8P:v:60a͵B MÞSt૑f]rSُ``@{/O䑞ƀ/t{TlPMO jODMk ѯ=sarO|BÐZ^}ss.*xo_?"R}]|yuIXWg9%6Hvg&ЀYGv`-umV]UU!0P\Qg`A}5i_,UG4r*|&+2bYe\ҡDK~yFϠ/GI#!$V廒c2]U$$V<PU/~)64y()3~j@?5_{U1DꕗwAڢ}W8̺NP? zK0]S\ @]@72h<`I0H~?oMwM}Qح+lsmI"yc[ 0>\1q< O.WowܩHâAW$Bf *T8˲bFoQ|jdNJ9#`_*Bƒ={#w|V*[8ZP#vS»QHwP /欇<["dn'@ q>:#Ukn9 k0X gh W(ent+,W}\ ;KSXֈ(`ӎ:T;![Ѐ].zȱHR|^ ;\4=3V3D'x`uo7e'XWgD*POP0!ڝLbQO;S¥nJ4v!7SԄˇt_tAa|sL<ȧ;֣s {䵷2f :t uMe!1ٴ}σOeK>07&0bζA+cF\q!jS^آ8s6dgYDȼӝ7?yCm*{*O gAI$H2&aiP{6?B'nD !-:AZUԭClKJuz!hszO)4\ đJ_A4x51VB7@^"k3P}*<[la_9]!~FU:P\LdΝ;^5*3UJlHOivbN4x,DLJ #ոU_9+9Ѥ #.,Csx B~˲LpB> ( u)d|δA$`\א] OeȎ$gJ{w2d+-CMnkxO0݋_55XN]>p ; <8_)BN\ k_Yа2 s!,k& D]c3IOy/nʧ!Pzv3J-.9dh V[h=)i5^`!:BR醂PX*=V9AM,W7sۚ"`%PoǦV/x w􏒩,s*F⥯S;KID2 / R|qSB{'f uh2oEoXzPLT*_mJ94.Օ#;%mbbq^ {ȁE/|6ٓ >L2 }2HUQp.w̓)K[`kT]h'PϜˊ 4FmMK0n}?#>:\靓VUi^Mf%egì*Jخ(>{a@Cc<^np'hXYQՑl@5\6<%XSv]UOvYǜw,<ЇPOd؎T<<lS\NLs<ǜʓOI*f|.MB.xB_\3nQ=e h$bŒc!3zGx%wuo>5JdZ6bUN $Nj)o}Y,'-o!ASjn^oZY;$WZ.w/oOj+=W7(:Bz &:|VVPYar]o\RXΧW̽H& gN=VY+Eԏr r zz_biqs $~H26P(ܱDrs83GA쫕$|sKK3G[;͸}B[(5ҳyԺfGͯfzC ]^.i?zц'"&i (d@d4UD Ax4xewq¸ш5䳯m 5cس=Z,&߹oi<.q34CQXM˦է  "/,O_%A8[zJmrg`.0No+ ކM4tϛٷ6<s+`&tUKIҨ96V# GJ.,v8/S(CcH{ tX@\ O$W(M $ښd?pߺӮVgzu@} Oȴ/&D[$SRCRݽ&=8и^ ;T/NND'YVz/`.\Z]`5`z썎TBA;\,=Q/E_o쉃 ђ?kSN['}inGXˡ(<gLݝkf>ȨTЕ(rv77Ovǭ/-sl޹u@z`8bzըuQnWny/yU#0k {6,)"-M'~6a`Cyrlɼ"Sq _bf@_6*kd[JA.W4Ba."l0^`<#vݶP1"sC A?p@[wȹɮghZ[R\JNՒql|e̻#g>  LEȍPrWS0'cװ%Yw>sמGڥ5h#}f YTq 5=c9=u$F›1  /"ɤT0BDϼ"ufTi׬j3Kal؇L%{KORJѷ !;ȥAu_eYy 5:'rWewb2Uqn°u3A QpÉo9i&8FE)Bk!JyA,OݤTNc[\b}]T#؇kp:1A6 .^h?٤5z[ oydo]߫>7gŧO=_MPt %cIZKO)a7(K,QkbtȊw&}ľ͙w\A٧/|?vM@U-?keuzޖ@n&EB\7  \qV) A9.^қEz1\ՊgPq2>Qv"Ncqj5T̰/m`c j!(]"] ^KC]470}No-LOgk4;CSha%07Ip P6> cwGGLxϿny渉}z:V^%ڴ K*޺w/FWS3삙3<@IPEp3dN_.YAzIM6Ar ~)W~7|++pCX"iy) 6KZ/f:eo>Pr `i+{Vo:V=K W]\ib$01E݆֎h:+4br*bziZ2@+̡yHCw5{O/S~M_!h\1cp 2S\[]a,_`cî>x& rQA 庱o1կώst}Wg,[lB<qw͢hUi:;b#{Qߔ2 f,7rH5Bl46*~[xxeį q,.N(nkՆ C=6=<jese"kYf T (j= brJJB5 j^`K~(Ŷ0>5BS9bڱA฿Sg5Q[miz#MI>uaX`32AA<.iSg*9?>'a_T5F'6&tZaL 8ǰW=b,0s#ɾ{G)ưVJ( Æ%7E! ^"hCQf/>W[Yoc]5w%E4épEo)R%`cx-ٵ ?n⋕68߉CQ8uU\@ISZHϧ0XS=I1JBE<4uxz4=KRT+rS35߽,< L*xz<6D\)+4 ϷкgYћ^xJG_mv HsX2t$-{#1qpU^# js5\x%8(Zܼ!l𥃯iT-'+qΠR6P âbSLs]W4|g~X/:ՇlNO D4p=ug%Y6mkhak!M~imc5YR:V 6ץZCv%Df%E|pt;fV897Xf4_YN 0ktyHO>XKQ+-h?ذH^RNa{#&^6{I4mV"G=SCEu1$CRJҴI'LJX\O|Q4קQ8 !;6Vmi;o漥!S#v Y U`AN(tuXL?6寵-@T^gfP3$m2tbb[/99((na/p^Th QVϫYs/?ô>`'N7X{ua@1`5ݧ?֣w s0`3Aeɰ7O9vע|RbV)>)_pmWeȬk"`Zޭ[2Zf1ym*t&~-x%ęRNQn?Q Ww̛݊ISmrDU?TlB܅ /( $h?eUrg&QfT&а[E}6 \([GmzDr$7nFEk4&h)]TOTu10JmSMH$-z:|,юO$ʌGtF0G^mX;#,FR6UӰvEтB=_쯹 &OՋ eCz?> {Se)$JAut1Wx_ 8ccg]` !?KOq"$ [# Sbhf'e^΁}ltt^s5*r"U>ݴ ~eуӝrKZI~[ ^f#kH? 9 H*RpnC`7/t'Cmٝ١|]6ӻ } H_ u-p'![(KMb( 44NEdy|,R8z䁠tB>&VPw& r!ѷ~+tVF@Qc/dB +XZVm_KJ<> cF+*diZx `.10[dNac%rA2 s)[ctcg TPfTdI0|=ڔN㭛AgHu%}}G(*A#Lm))2 5:\8FddS:meqh8pJr) >7D+KGQfУ&\k59nD>(qCS|I5tTܳŗY|1n%Щά1H!K&]$n4"8)d~f}?wK5xif꾮qoUəcC &O0(BPuۉ?2ܲ]{n %f[t~_jd!ACJDY3`MP s En"QH]XeoԖ y yXRidVLL}Ϝ,aa]1]Kpc!83j45/#h.9 WR0/:;F^$)$)Ck[%lu'fUD-k-/֤v''B!NĠBhnls(^$UR= l6vORkN?v>'\aCl doy=`ΒM 52{1!7h~ beO$Ehx.hiņ UH)eCՌ?KaM]dKx#u8fTb!Nbc'*<7C!so,C +P fN>Nާ46 (Dݩvr<"-̆y8o֡+;$XR}!{=zXl*54Z ש'ROB":v6 \jI^gY)ϭ9Ȍ,(H#7zPN?`du:4d %F N(~+B[HqL=Vx7` j:=4vkQ:m wnHSt-`S{WJ,iOJ+U+b5 @?) ؟^6vL+ԇhE E#-pB}=?]tz<LNd0.7N|)z7J*FpcP3iR&uUc_Gd4H %ssº^צ f=(BS;slw:}0,BUű/aNKɷ`'R \!o7'x[A;/N[peT[6iTV 'p]\'$\.1WpȽW+KDQ&VX4vĶ އ<#=)^oX"y JJ:?K̂/\(/uDoXf!iX._^w;]Vb;U"zf♅Ab7Tґ.(o˓IZJDXme@p'?cg{t<֐~$DKF~ ]5GEs_H%v4k@ɸV2hK^u $bUj$r5'W\D{>YxG,ΐGiU;L9h_exEoc9+b.Fp'F(4(nȵjQ<6C;ƏZZv*AK|X%u5pc!!Hc @^GzTz,FW _ ":lSTcC^ÍG@M3Fğ8CvyQj<5qX!^񂟁t[bEAY_cAͥ5RCxYo``du3u2, Bz?u|yJX J2F^K'&t$!PӥAÊeU(.vL2ATB68XfGe`p.OED9b+E(QDmgJz,#3%FRtȏdÎCSŚ|# ԽahAֿO5ݤbPAhGlCNv+0w":۩T{~'@Qi@?R&?wb|:vi6Jl94?z}dZ$E+Qt'H!G`EOZv)΅@9q^4n˝&RFV#X` #_u{T_}:,9TSdQVʲ˅*vLt#DL7!>rӼXGe)$ p*~eۆ@Ѣvf^ƃoe0!]񰌞` jpt@T%IP!2t6ҋ6 ]UIi@ .!L_vփ{a0SuH/xn}$HHKt0_1m%eVv'?^ҺwWgqJvqK2ftKќX9G0d3`<0pR=mCtI ނj'9|'^c}cICqB0&89č|F?bK7nj,x^OXUQ{DvhRx H= UQFƬHR _]D./㍽ ,kRaxWZE>rKqEHce ?HfޓX`{p:4LRXqt@fE-%Y:R'ƸCt$yx0yt)m9zTJWh#3mvl_DnŌ1A`ށM4EMPbf7?I|8(*{rc+З .aδt+df`3>/LgTdJ&w`pa W+wK ԮyT{~)P2)r XWtא_š/Jo:%Mc~%E^j!<ǡH8JP%&,|"HDRלh301giWɷۭCxb{Sa8*vKMW/LI3n,8 ϙYux1/q:vn^-ߛi>< ^^FS " \ph\#@P2JCX֝䃵j'xVOJ99Qs\g(%==pn{ki~iӰ+g@oBVoSgF(bn !a7? %r+QԌ$ZRiF-9RN,]=f{6|Q:Bj-.kŽ@-|qfLVΪa g#ۿF#gv(CjNnOY'NhN1KWoଓ5%NrzԥRrN0`.uW+I.F<(5oBא+I%U~8jrvHG@گH ʄg9¿\G>N|$,ƥ1C'Np!Oj[qҍqL.o'GDt'ÄbA/:į!4%I,}yI$ƽ=]ZC2R$Aƹ kwlMnuYI?r֪:BX $~&lrHCEti:4⺥IcgMՕ F9g't!Y1_aBQ<bKtFPѓY,4a6@A#4p{kPV^Oؼ]14}@c:Rr7J" 421}ɿғ.Mr\ {sZ> Iك&[]ɥ/c$9FS 4BVO8Jm/'W,q'ùنYI/Ě*=VFAʾ_jǎl.Vp?"5]17tsh3+Y=jν hV3@^^ 0SvƋ ?V v"3F/1D CbtZb986 *NI8(2 ;L+6J8g@sFΗ% R/&)mA.0HH<{Pt^EF/XNN PCVb*/WY6OGy)/݅LKMQ?vw d/Qb+DQN^1fk@g?=;7+yꑧB;+ɡXMeq&Xzd7cƥ h\ {ց"#4HQ:Vjb~`#}`L:~GERQ;ݗKc~u#jPjR |lԓPD27/rCEG׌+82vCY5y6O[ߵURKvW}ISGt[HFѭFF'ܻ@;;m`Z1{(C=*R׵I! eeM;Wx sb{#:O{  @͇}u9=Al9ynpRs@BE%F%cBML+N/eVvUYW'ܛwѰ^eϏJK|XJW)(M='l|̦V Srcsp|*IK)91̉gf  +z:.*>) ;Fޔp̚Y_V"FiXQ `Ƙ8j챃= ER6_j#֊]h)Mxڈt2'հ@]N-UxuL>9,gn ) MgIӃ;f <=C$vaz7[o^LƇ+j%}'L܏r̀W5Wi%DӮ$ۀ0wsi^=tq:FxkS%% ","ﺠ+O{xC'KEѼѦ5=Rc:7[(W=cuWh N!v7U|!(gyIex.C~ ֻ9|;.GpTfB.W2?r U9#meᱽ&L[L,Z-Xd0զڜ΃R6Ƈ#MJBȴy_"e6 "UNa. SC~ɾ1y_^J qfzGg쑝(C> 9N8;D*7ܧJ!(rUAR6OsuG ]& [*z9F3+@?K࣢+D 91f_6'au7CF5XG3qT3LAkrVY&B /zadaGVjcU8jDbu9>aM5pLjiqμBE#߷)ѪߴtPZB/A?r]<]( &*6<Eq:k)ߺ6T>wj(DH,{:6lyl˘yuJ<3`.P@- *(<s!݌ZP=jNR-[d`zk?W Sgqy0+O[oƥ]Z& z`Cww(-/q+Sz1\4g{N#8|hd/B!oi+7pMaAU"-l/99Yў)nŽ=e9$~Ru=?`v Nr |/+ 3Kxl짪pNOp r>9SUs>w B62 պ'bjeanIjz~&RiD : (&'sE+:i=FP6)F;\zT֍3jW0_s9'ƘgJ\!}㦮0V|,E@6gF{XO1h4Yn_]l7ܻDBt4>=MVsxp*k@fWu92PկGF#3$Je?m.Z5^ F>^Ϥ)u9t* Q[f?:K Ͻ޼_ula~JV$+/%Z1iDE};zi(kz.~6 #˅OLs$͒*5ȥVv`$ vߔu6t}(1 NMb=:w21cRpq2XF^'GyZ 2LJFrPT13H:ԏ v^3mA{)^-_%kZgYVSR-u;J_vbZB] SNcNyMœꤙԬ}uZ!GkP[ s[4wqڑ߲#81r%za`*K+Bva0W!F 76i4MGO]\N!W #r7}pvD}h'uf$C;~D؈!>7>ts\A$gB'y|mr?21e u5ޢh]"fAI) Y3n:Ŗ+ҋ(AhB ELӘ֮IuO_x|dxDB+ oy鼘wlt&;\p5 064vQ$OYC-M5b>K )u Ć;9=nd&-/m<;$ BDC[}[ 3FZ_(,7.yHl@ AKULaC5VVtV7ĺBêK@6 T=c(-" ds!QmECKqGPo`рg-`Պ]D: ̓)+B/|m1 Ku{.uB$u8 nhiirN|:Ń%)QSɢfy4b>~F^wJ6ʪwY3w`#;Vۅzۨ%Fʛ)^֚ﮞU&oQv6ݳ[T}+/tt\'|3 nW()ϘE< cNF螟keXC_ʨ|AjT۹`i>eMoVz+)(@23H t5Q|HN'TZ6)ik˳D#P =2Cu/Ok%![U0BP}o tvԣ0v~O?c+ZA[hHEm_h,6NR 3C11CVWD-(!5,l06A՝ _|rju^!&):֚rɒFM+֒p Y.~iiV+^A-rL׻uyH+/U88߮,Bpj?aƒJ4mK܌ IpFXح9J)*˨C Do{;NJkP!;ʋ]X{;s !mW_a8'͖K}$caŽ@`8ҢeMvmzӷ)F;K.8dZ}ٽYfMa2('/1ϳI2"WW1ޓv50Hhrꋛ<-Ҩ-w}9+{kufs`B,Eb˗H1k9P$$}*Vl6cJ{T 34?:-F'ai1)3Bqjڤ1) 9P9~\Mr04+eġZk%Pojg}3J_lpHRCC]N6SeL2n1pEh p+%G};Rj+PK`U|A@,HȮ [285: N/,qQ)oqrd bgާMi7K_@3Հ,]s |C(h*NۺA5)+eߍŖ^ܹ(:oK|b4ɳ6| ]ŊPLEw&Z %c+|$ٵ44Wd' + a ~`:e& eRN 畍׋@ԲFT ۤg)< \VQ(-xW̎nPNOL-TK1myb;E-0 ImTI-LHKsS]U2 Mݕj|W"'YУ6| ?{۠?hqTna[i7YfTؓw=T1W!k34AS-*Tk"=}V(eWt,[%^uv")A|bHp?3m|fޑG6V-wvUņ8d\Vz29ܖH=Tԓ}vni)i"[)wfaހii9\E3P敔c1,33>>›]z2obDVm^\rRh~϶2^O#Ku!VȠ;պLH7=o:1&Dy[⦯rF/ߺڙM&ldpnT.嚯҆_ Z>J4>T7$\ C WPؓ% Z^ț.")՛mu>r붛c̾hĘigkۿSZ\|II&4m`TJ. 7CۘX NրSE!X܈OhW)O`JtJ꩝?&{eIn*Y&!?8?>v~x1u((-vobGf) XE4jfBK8nKOܦЎ^= -sqӅԆ+[U ş8Q|br;qoRoSWb5TD8rA=Eiڏ-Da"!8NDjU% |2`F[On=.ar3rA2 9:+[ ]4 K/$Q%VRnGum\0du0Ba+-grٳ4*%w?/N LBVQ}A^P$k7gY/f"-sR.:i9"4Ѩ}e0YMS](CX=3.eM-_SvJ5ޕs WumӒIBczu NV&L8L[[2`SJQL.r:^Tiց-1h_zwM`ᓈg&CL{ww m>_.(Wk5@YD 0(8Ò:c$GK'sbx{GCYYMRd?#Y@r|soA".`KLVc!+<4v[<\YI5&&aT5Muq(J#'(ac]p90_X5Ԯ)48ؾ'2*UTsiOׄ|E=iy'" -Ɉe#AlJ};gnFd.4+-}7yԳLl2aZQ Qv訵 ȭ/(5n݋jmS&xnF_р].ORJ X'fnE{[q6Z7MV˚ߒ O.3Ar,I@p"xAESܼ;~aNS\]®\-+ФYT;vNoH