libvirt-daemon-driver-nwfilter-7.1.0-4.1 >  A `ojp9|j') .6r6!4"RO^xU]G'.<3Šo49]Xέԟk^TB_I]a0M%}X]h3VAj{k}ֽV0l_0)UDgd{Z7NWuEu2h—W9=P:CkRjEwwmLΘ0?}5#xJbp'%k(*z4RZ1UGfLdc5903d4cc2b7c432560dbf0552a8475ccae4b56f19de80bd826bd7192e9bc7dfa077851b986d06ec089e7bce8026736268efe20ԉ`ojp9|2150X}Dc7cjji ^v# g*,wIҷw#|9ujiq?uA hIi+ ;mizYr(G7CA;KJ{DY@|'-?qRgf 4֧5W~Uݔ` ާ`1Wܥ,H8 P Fn8rEny&l77`aKpe҂fi ڽMR6&bKs,ڭ8} ט>pFN(?Nd!' + \ )J\ r    (   D$xx(x()8))9.4):BE)=E>E ?E(@E0FE8GEPHEIEXEYE\F]F8^GQ bH)cHdI+eI0fI3lI5uIHvIwKlxKyKwzMMMMNClibvirt-daemon-driver-nwfilter7.1.04.1A nwfilter driver plugin for the libvirtd daemonThe nwfilter driver plugin for the libvirtd daemon, providing an implementation of the firewall APIs using the ebtables, iptables and ip6tables capabilities`oi1xinomavro ΛSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Managementhttp://libvirt.org/linuxppc64le if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi PNAME=virtnwfilterd SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket ) || : fi fi0fsO cH L`AA큤`oh`of~`of`of`of`of`oh`oh`oh`oh`og`of~`@[<[0@[{@[{@[)[@Z?Z@ZZZI@ZZ`@ZZZ@Z@Z1@Z@Z_@Z}@Zk@ZiZaZWQZLZ:PZ7Z2gZ%8Z!D@ZZZ@ZfZfZ@Z@ZZYY@YY@Yܶ@YdYp@YY@Y{YA@YX@YYYKY@YW@Y@Yx@Yx@YqY\YTY7Y6@Y1S@Y"Y@Y]Y.XX9@XӸXg@X~@XXZX @X7@X@X@X@X@XYX@X6@X6@X6@XXXc@XEVX,J@X!@X@W@WiWF@W@WWWW@WW@W~WWv[@WgWbWaC@WYZ@WUeWH6WEWEW= 15 SP3 jsc#SLE-17336- Update to libvirt 7.0.0 - jsc#SLE-15860 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: 0d05d51b-apparmor-lxc-fix.patch, cf4e7e62-lxc-def-secmodel.patch, 0ddebdb4-qemu-snapshot-deletion.patch- Update libxl-set-migration-constraints.patch Remove code which handled --max_factor. The total amount of transferred data is no indicator to trigger the final stop+copy. This should have been removed during upgrade to Xen 4.7. Reduce default value of --max_iters from 5 to 2. The workload within domU will continue to produce dirty pages. It is unreasonable to expect any slowdown during migration. Now there is one initial copy of all memory, one instead of four iteration for dirty memory, and a final copy iteration prior move.- qemu: Fix logic bug in inactive snapshot deletion 0ddebdb4-qemu-snapshot-deletion.patch boo#1180049- spec: Enable mdevctl support in the nodedev driver for SLE15 SP3 jsc#SLE-15861, bsc#1179770- apparmor: Allow lxc processes to receive signals from libvirt lxc: Set default security model in XML parser config 0d05d51b-apparmor-lxc-fix.patch, cf4e7e62-lxc-def-secmodel.patch bsc#1179735- Update to libvirt 6.10.0 - jsc#SLE-13688 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: f035f53b-virt-guest-shutdown.patch- spec: Remove creation of libvirt group and add Requires to the libvirt group created with GID 108 by the system-group-libvirt package. jsc#SLE-11629- spec: Add 'Requires: bash-completion' to the libvirt-bash-completion subpackage bsc#1178498- Add libvirtd dependency to virt-guest-shutdown.target f035f53b-virt-guest-shutdown.patch boo#1175914, bsc#1177902- Replace '%service_del_postun -n' with '%service_del_postun_without_restart' '-n' is deprecated and will be removed in the future.- Update to libvirt 6.9.0 - jsc#SLE-13688, jsc#SLE-16754 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html- bsc#1177950 - adjust help for --max_iters, default is 5 libxl-set-migration-constraints.patch- Drop use of $DISABLE_RESTART_ON_UPDATE in %postrans Testing "$DISABLE_RESTART_ON_UPDATE != yes" had no effect since its value is supposed to be read from /etc/sysconfig/services.- Fix 'make check' with all downstream patches applied. Some patches touch config files and needed the corresponding augeaus test files updated. Updated patches: suse-libvirtd-disable-tls.patch, suse-qemu-conf.patch, suse-ovmf-paths.patch, suse-libxl-disable-autoballoon.patch boo#1175574- Update to libvirt 6.8.0 - jsc#SLE-12684, jsc#SLE-15861 - bsc#1174955 (CVE-2020-15708) - bsc#1177155 (CVE-2020-25637) - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: 2ad009ea-qemu-check-modules-dir.patch, 8abd1ffe-qemu-tolerate-non-existent-files.patch, 4a72b76b-qemu-namespace-memleak-fix.patch- spec: Increase test timeout to account for slower test execution on some architectures- qemu: Tolerate non-existing files such as /dev/kvm when populating domain private namespace 8abd1ffe-qemu-tolerate-non-existent-files.patch, 4a72b76b-qemu-namespace-memleak-fix.patch boo#1176380- spec: Enable the same hypervisor drivers for openSUSE and SLE jsc#SLE-11772 - spec: Enable the same storage drivers for openSUSE and SLE jsc#SLE-11877- qemu: Reprobe capabilities if the qemu modules directory changes 2ad009ea-qemu-check-modules-dir.patch boo#1175320- Update to libvirt 6.7.0 - jsc#SLE-14253, jsc#SLE-15159 - CVE-2020-14339 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: 2edd63a0-fix-virFileSetCOW-logic.patch, 82bb167f-dont-cache-devmapper-major.patch, feb8564a-handle-no-devmapper.patch, 53d9af1e-ignore-devmapper-open-errors.patch, support-managed-pci-xen-driver.patch, disable-multipath-pr-tests.patch- Update to libvirt 6.6.0 - jsc#SLE-14253 - CVE-2020-14339 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Added patches: 2edd63a0-fix-virFileSetCOW-logic.patch, 82bb167f-dont-cache-devmapper-major.patch, feb8564a-handle-no-devmapper.patch, 53d9af1e-ignore-devmapper-open-errors.patch Dropped patches: 6c1dddaf-libxl-shutdown-inhibit.patch, 849052ec-libxl-support-credit2.patch, 72ed254b-drop-exec-perms-bashcompletion.patch, e092daac-prohib-parallel-tunneled-mig.patch, ae9e6c2a-qemu-allow-cond-format-probe.patch, a30078cb-qemu-create-mp-target.patch, aeb909bf-qemu-multipath-fix.patch, 8e669b38-conf-add-event-channels.patch, a93f55c5-libxl-add-event-channels.patch, 967f4eeb-xenconfig-event-channels.patch, 4cc90c2e-CVE-2020-10701.patch, 93b15ba0-qemu-fix-hang-in-p2p-xbzrle-compression-parallel-mig.patch, b7d6648d-conf-add-e820-host.patch, 5749395b-libxl-e820-host.patch, f3ef7daf-xenconfig-e820-host.patch, 34077c1b-tests-check-e820-host.patch, fadbaa23-conf-add-passthrough.patch, 9529e007-libxl-passthrough.patch, 9cb8bc6f-xenconfig-refactor-features.patch, b523e225-xenconfig-passthrough.patch, bed32525-tests-check-passthrough.patch, 9bf9e0ae-CVE-2020-12430.patch, ec07aad8-libxl-normalize-mac-addr.patch, 22494556-CVE-2020-14339.patch, c5fffb95-kernel-cmdline-parser.patch, b611b620-check-s390-secure-guest.patch, 657365e7-check-amd-secure-guest.patch, 0254ceab-s390-host-validate-check.patch, 4b561d49-amd-host-validate-check.patch, 2c3ffa37-update-amd-doc.patch, f0d0cd61-update-s390-doc.patch, 8cb9d249-autoptr-file-callback.patch, a551dd5f-intro-virHostCPUGetSignature.patch, 44f826e4-virHostCPUGetSignature-x86.patch, 2a68ceaa-virHostCPUGetSignature-ppc64.patch, d3d87e0c-virHostCPUGetSignature-s390.patch, 004804a7-qemu-invalidate-caps.patch - qemu: Avoid stale capabilities cache host CPU or kernel command line changes bsc#1173157 - virdevmapper: Handle kernel without device-mapper support 82bb167f-dont-cache-devmapper-major.patch, feb8564a-handle-no-devmapper.patch, 53d9af1e-ignore-devmapper-open-errors.patch boo#1175465 - util: Fix logic in virFileSetCOW 2edd63a0-fix-virFileSetCOW-logic.patch boo#1175463- CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. 22494556-CVE-2020-14339.patch bsc#1161883, bsc#1174458- libxl: Normalize MAC address in device conf on netdev hotplug ec07aad8-libxl-normalize-mac-addr.patch bsc#1172052- qemu: Fix memory leak in qemuDomainGetStatsIOThread CVE-2020-12430 9bf9e0ae-CVE-2020-12430.patch bsc#1170765- libxl: Add support for 'passthrough' and 'e820_host' settings b7d6648d-conf-add-e820-host.patch, 5749395b-libxl-e820-host.patch, f3ef7daf-xenconfig-e820-host.patch, 34077c1b-tests-check-e820-host.patch, fadbaa23-conf-add-passthrough.patch, 9529e007-libxl-passthrough.patch, 9cb8bc6f-xenconfig-refactor-features.patch, b523e225-xenconfig-passthrough.patch, bed32525-tests-check-passthrough.patch bsc#1167217- qemu: fix hang in p2p + xbzrle compression + parallel migration 93b15ba0-qemu-fix-hang-in-p2p-xbzrle-compression-parallel-mig.patch bsc#1161159- api: Disallow virDomainAgentSetResponseTimeout on read-only connections. CVE-2020-10701 4cc90c2e-CVE-2020-10701.patch bsc#1168680- libxl: Add support for max event channels with maxEventChannel attribute on the xenbus controller 8e669b38-conf-add-event-channels.patch, a93f55c5-libxl-add-event-channels.patch, 967f4eeb-xenconfig-event-channels.patch bsc#1168767- libxl: Bump minimum supported Xen version to 4.9, allowing use of newer libxl APIs for retrieving memory statistics suse-bump-xen-version.patch bsc#1157490, bsc#1167007- qemu: Create multipath targets for PRs a30078cb-qemu-create-mp-target.patch, aeb909bf-qemu-multipath-fix.patch bsc#1161883- qemu: Allow format probing under special circumstances ae9e6c2a-qemu-allow-cond-format-probe.patch bsc#1165588- xen: Fix the list of supported ovmf firmwares suse-xen-ovmf-loaders.patch bsc#1159793- lib: Prohibit parallel connections with tunneled migration e092daac-prohib-parallel-tunneled-mig.patch jsc#SLE-6998- BuildRequire pkgconfig((lib)?udev) instead of (lib)?udev: allow OBS to shortcut through -mini flavors.- spec: Fix several rpmlint warnings 72ed254b-drop-exec-perms-bashcompletion.patch- xen: Support setting credit2 scheduler parameters 849052ec-libxl-support-credit2.patch bsc#1162160- xen: Inhibit libvirtd shutdown when domains are running 6c1dddaf-libxl-shutdown-inhibit.patch bsc#1157100- Update to libvirt 6.0.0 - jsc#SLE-6997, jsc#SLE-6998 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: 0a65cba4-news-fix.patch 07aaced4-Add-TAA-No.patch, f411b7ef6-Add-TSX-CTRL.patch, 50d7465f-qemu-firmware1.patch, 57f9067c-qemu-firmware2.patch, 7c5264d2-qemu-firmware3.patch, 8e1804f9-qemu-firmware4.patch, 8fcee478-qemu-firmware5.patch- qemu: Fix firmware auto detection 50d7465f-qemu-firmware1.patch, 57f9067c-qemu-firmware2.patch, 7c5264d2-qemu-firmware3.patch, 8e1804f9-qemu-firmware4.patch, 8fcee478-qemu-firmware5.patch boo#1157378, bsc#1159796- CVE-2019-11135: Add TSX_CTRL and TAA_NO bits for IA32_ARCH_CAPABILITIES MSR 07aaced4-Add-TAA-No.patch, f411b7ef6-Add-TSX-CTRL.patch bsc#1152505- virt-create-rootfs: add SLE 15 and SLE 12 service packs support bsc#1154093- Update to libvirt 5.10.0 - bsc#1157149 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: 2552752f-libxl-fix-lock-manager-lock-ordering.patch - Added patches: 0a65cba4-news-fix.patch- spec: Enable 'libvirt' firewalld zone for firewalld >= 0.7.0 boo#1157766- libxl: Fix lock manager lock ordering 2552752f-libxl-fix-lock-manager-lock-ordering.patch bsc#1145774- spec: Forcibly remove '--listen' option from LIBVIRTD_ARGS in /etc/sysconfig/libvirtd since it is incompatible with socket activation. Also add '--timeout' option for consistency with upstream. boo#1156161- Enable automatic firmware seletction and add the new smm flavor to the build-time firmware list jsc#SLE-6997- Update to libvirt 5.9.0 - jsc#SLE-7440 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html- Update to libvirt 5.8.0 - bsc#1149100 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html- Update to libvirt 5.7.0 - Experimental split of libvirtd into separate daemons - bsc#1145440, bsc#1145586 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: 4ec3cf9a-apparmor-rules.patch, f38ef0fa-no-RDMA-check.patch, 411cdaf8-apparmor-check-profile-name.patch. 696239ba-qemu-fix-query-cpus-fast.patch, 09eb1ae0-conf-add-xenbus-controller.patch, fb059757-libxl-add-xenbus-controller.patch, ec5a1191-libxl-support-max-grant-frames.patch, 5a64c202-xenconfig-support-max-grant-frames.patch, CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch, e0246257-cputest-add-data-for-Cascadelake-Server.patch, 5cd9db3a-cputest-add-data-E3-1225-v5.patch, 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch, 96f41cd7-admin-reject-clients.patch, f111e094-locking-restrict-sockets-to-mode-0600.patch, e37bd65f-logging-restrict-sockets-to-mode-0600.patch, 9f4e35dc-network-improve-chain-create-error-report.patch, 686803a1-network-split-ipv4-ipv6-chains.patch, c1c235eb-nework-clear-cached-error.patch, 4330d138-network-refactor-global-chains.patch, 3b66bd9a-add-debug-chain-creation.patch, c6cbe187-network-delay-global-fw-setup.patch, CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch, CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch, CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch, CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch, 51f9f80d-fix-copying-bitmaps.patch, 2878278c-cpu_map-add-Cascaselake-Server.patch, 4a0f604d-cpu_map-distribute-Cascaselake-Server.patch, d5572f62-qemu-support-override-max-thread.patch, 673f805d-qemu-chown-uniqDir.patch, 975b004d-virtlogd-over-logrotate.patch, 18d47d61-revert-d00c77ae.patch, d6943eab-libxl-pmsuspend-event.patch, 3d179919-virsh-precopy-bandwidth.patch, f4bdd829-rename-precopy-bandwidth.patch, xen-pv-cdrom.patch, blockcopy-check-dst-identical-device.patch, suse-libvirtd-service-xen.patch, xen-sxpr-disk-type.patch- virsh: use upstream name for migration precopy bandwidth parameter f4bdd829-rename-precopy-bandwidth.patch bsc#1145586- virsh: support for setting precopy bandwidth in migrate 3d179919-virsh-precopy-bandwidth.patch bsc#1145586 - Rename patches to include commit ID revert-d00c77ae.patch -> 18d47d61-revert-d00c77ae.patch libxl-pmsuspend-event.patch -> d6943eab-libxl-pmsuspend-event.patch- libxl: fix domain state following successful suspend operation revert-d00c77ae.patch, libxl-pmsuspend-event.patch bsc#1145440- logging: ensure virtlogd rollover takes priority over logrotate 975b004d-virtlogd-over-logrotate.patch bsc#1137137- qemu: fix default value of security_default_confined Updated suse-qemu-conf.patch bsc#1143871- qemu: Change owner of temp directories under /var/lib/libvirt/qemu 673f805d-qemu-chown-uniqDir.patch bsc#1143497- Add apparmor-abstractions as a required package for daemon (bsc#1142992)- qemu: Add support for overriding max threads per process limit d5572f62-qemu-support-override-max-thread.patch bsc#1133719- cpu_map: Add Cascadelake-Server CPU model e0246257-cputest-add-data-for-Cascadelake-Server.patch, 2878278c-cpu_map-add-Cascaselake-Server.patch, 4a0f604d-cpu_map-distribute-Cascaselake-Server.patch bsc#1141251- util: fix copying bitmap to larger data buffer 51f9f80d-fix-copying-bitmaps.patch bsc#1138734- api: disallow virConnect*HypervisorCPU, virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc on read-only connections CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch, CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch, CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch, CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168 bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305- network: delay global firewall setup if no networks are running 9f4e35dc-network-improve-chain-create-error-report.patch, 686803a1-network-split-ipv4-ipv6-chains.patch, c1c235eb-nework-clear-cached-error.patch, 4330d138-network-refactor-global-chains.patch, 3b66bd9a-add-debug-chain-creation.patch, c6cbe187-network-delay-global-fw-setup.patch, Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch bsc#1133229 - Renamed patches to include commit id: CVE-2019-10132-admin-reject-clients.patch -> 96f41cd7-admin-reject-clients.patch CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -> f111e094-locking-restrict-sockets-to-mode-0600.patch CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -> e37bd65f-logging-restrict-sockets-to-mode-0600.patch- spec: add systemd-container dependency to qemu and lxc drivers bsc#1136109- cpu: add tests for md-clear feature Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and added 5cd9db3a-cputest-add-data-E3-1225-v5.patch bsc#1135273- CVE-2019-10132: admin: reject clients unless their UID matches the server UID CVE-2019-10132-admin-reject-clients.patch, CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch, CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch bsc#1134348- cpu_map: add cpu feature md-clear. CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch bsc#1111331 bsc#1135273- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack module at libvird start revert-7431b3eb.patch, revert-8b967198.patch bsc#1133229- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime for read-only connections and users CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch bsc#1131595- apparmor: reintroduce upstream lxc mount rules Drop apparmor-no-mount.patch bsc#1130129- supportconfig: collect rotated logs in /var/log/libvirt/* Modified libvirt-supportconfig bsc#1124667- hook: encode incoming XML to UTF-8 before passing to lxml etree fromstring method Modifed suse-qemu-domain-hook.py boo#1123642- libxl: change autoballooning default to disabled suse-libxl-disable-autoballoon.patch jsc#SLE-3059- conf: add new 'xenbus' controller type 09eb1ae0-conf-add-xenbus-controller.patch - libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller fb059757-libxl-add-xenbus-controller.patch, ec5a1191-libxl-support-max-grant-frames.patch, 5a64c202-xenconfig-support-max-grant-frames.patch bsc#1126325- Replace patches with upstream variants Old: 0001-apparmor-Check-libvirtd-profile-status-by-name.patch, 0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch New: 411cdaf8-apparmor-check-profile-name.patch, 696239ba-qemu-fix-query-cpus-fast.patch- util: skip RDMA detection for non-PCI network devices f38ef0fa-no-RDMA-check.patch bsc#1112182- qemu: s390: show correct CPU status after guest crash 0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch bsc#1127841- apparmor: fix more fallout from changing libvirtd profile to a named profile 4ec3cf9a-apparmor-rules.patch, 0001-apparmor-Check-libvirtd-profile-status-by-name.patch boo#1125841- Update to libvirt 5.1.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 11c8aca9-libxl-set-mem-after-balloon.patch, 70c2933d-apparmor-named-profiles.patch, a3ab6d42-apparmor-conv-libvirtd-named-profile.patch, b6440119-qemu-conf-sev.patch, a404ac34-qemu-cgroup-sev.patch, 6fd4c8f8-qemu-domain-sev.patch, 17f6a257-security-dac-sev.patch, a2d3dea9-qemu-caps-dac-override-sev.patch, 620d9dd5-qemu-no-dac-override-nonroot.patch - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577- spec: disable VirtualBox driver- qemu: don't use CAP_DAC_OVERRIDE capability if non-root 620d9dd5-qemu-no-dac-override-nonroot.patch boo#1125665- qemu: fix issues related to restricted permissions on /dev/sev b6440119-qemu-conf-sev.patch, a404ac34-qemu-cgroup-sev.patch, 6fd4c8f8-qemu-domain-sev.patch, 17f6a257-security-dac-sev.patch, a2d3dea9-qemu-caps-dac-override-sev.patch bsc#1124842- apparmor: add support for named profiles and convert libvirtd profile to a named profile 70c2933d-apparmor-named-profiles.patch, a3ab6d42-apparmor-conv-libvirtd-named-profile.patch boo#1118952 - libxl: save current memory value after successful balloon 11c8aca9-libxl-set-mem-after-balloon.patch bsc#1120813- Noun phrase for %description doc. - Remove idempotent %if..%endif pair around %package bash-completion. - Reduce hard requirements on bash-c and documentation.- Enable bash completion in Leap15/SLE15 and newer- Update to libvirt 5.0.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Remove UML hypervisor driver - Dropped patches: de09ae2f-libxl-support-openvswitch.patch, 0a1b5653-xenconfig-support-openvswitch.patch - FATE#320928, FATE#325817, FATE#326380, FATE#326698- Requires: ncurses expands to Requires: libncurses5, which is not required by any component of this package. Remove it along with the BuildRequires: ncurses-devel- Update to libvirt 4.10.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 14d03b27-libxl-rm-redundant-virObjectEventStateQueue.patch, 82452a5d-libxl-rm-goto-libxlDomainShutdownThread.patch, da4b0fd9-libxl-support-soft-reset.patch, libxl-qemu-emulator-caps.patch - Added patches: de09ae2f-libxl-support-openvswitch.patch, 0a1b5653-xenconfig-support-openvswitch.patch - FATE#320928, FATE#325817, FATE#326380, FATE#326698- libxl: add support for soft reset 14d03b27-libxl-rm-redundant-virObjectEventStateQueue.patch, 82452a5d-libxl-rm-goto-libxlDomainShutdownThread.patch, da4b0fd9-libxl-support-soft-reset.patch bsc#1081516- Update to libvirt 4.9.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - FATE#326371- Update SLE15 SP1 with openSUSE Factory package FATE#325848, FATE#326368 - FATE and bug references made in the SLE15 package since the last Factory update: FATE#325817, bsc#959329, bsc#1074014, bsc#1106420, bsc#1108395 - Patches in SLE15 package that are dropped by this update: 1b0c42ff-libvirtd-depend-machined.patch, ac4a12db-libxl-fix-hasManagedSave.patch- Update to libvirt 4.8.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 60b4fd90-libxl-rm-vm-finish-phase.patch, e39c66d3-libxl-fix-p2p-migration.patch, 47da84e0-libxl-fix-job-handling-migsrc.patch, 0149464a-libxl-fix-job-handling-migdst.patch, 5ea2abb3-libxl-join-mig-rcv-thread.patch- Fix RPM groups. Remove idempotent %if..%endif guards. - Remove redundant %clean section.- libxl: fix VM migration on busy hosts 60b4fd90-libxl-rm-vm-finish-phase.patch, e39c66d3-libxl-fix-p2p-migration.patch, 47da84e0-libxl-fix-job-handling-migsrc.patch, 0149464a-libxl-fix-job-handling-migdst.patch, 5ea2abb3-libxl-join-mig-rcv-thread.patch bsc#1108086- Update to libvirt 4.7.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 9ed59012--revert-jansson1.patch, 54f2b5e3-revert-jansson2.patch, b56950fd-revert-jansson3.patch, 6c3d66ac-revert-jansson4.patch, 8e373e6d-revert-jansson5.patch, 6f99de31-revert-jansson6.patch, f204cf51-revert-jansson7.patch, 5a58b5ed-revert-jansson8.patch, 63f6e0e9-revert-jansson9.patch, 8687eba-revert-jansson10.patch, e96e71d8-revert-jansson11.patch, d99a8959-revert-jansson12.patch, 074a7e14-revert-jansson13.patch, 86db0db9-revert-jansson14.patch- Revert switch to jansson boo#1104820 - Dropped: temp-build-fix.patch - Added: 9ed59012--revert-jansson1.patch, 54f2b5e3-revert-jansson2.patch, b56950fd-revert-jansson3.patch, 6c3d66ac-revert-jansson4.patch, 8e373e6d-revert-jansson5.patch, 6f99de31-revert-jansson6.patch, f204cf51-revert-jansson7.patch, 5a58b5ed-revert-jansson8.patch, 63f6e0e9-revert-jansson9.patch, 8687eba-revert-jansson10.patch, e96e71d8-revert-jansson11.patch, d99a8959-revert-jansson12.patch, 074a7e14-revert-jansson13.patch, 86db0db9-revert-jansson14.patch- spec: don't restart libvirt-guests when updating libvirt-client bsc#1104662- Update to libvirt 4.6.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Switch from yajl to jansson - Dropped patches: libvirt-4.5.0-apparmor-add-missing-comma.patch - Patches added to fix upstream bugs: temp-build-fix.patch- Fix apparmor failure at startup because of syntax error in libvirt profile: * Add libvirt-4.5.0-apparmor-add-missing-comma.patch (picked from upstream).- Update to libvirt 4.5.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 67c56f6e-libxl-logfd-leak-fix.patch - spec: use more macros in file paths - libxl: Implement virDomainBlockResize 0001-libxl-add-support-for-BlockResize-API.patch FATE#325467, bsc#1094325, bsc#1094725- spec: enable gluster storage backend for openSUSE- spec: BuildRequires glusterfs-devel when gluster support is enabled- spec: use wireshark plugin directory from pkg-config- virt-aa-helper: add SUSE path to OVMF and AAVMF images Adjusted suse-ovmf-paths.patch boo#1095556- Update to libvirt 4.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - CVE-2018-3639 - Dropped patches: 1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch - libxl: fix leaking logfile fds 67c56f6e-libxl-logfd-leak-fix.patch bsc#1094480- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits CVE-2018-3639 1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch bsc#1092885- spec: enable libssh support for suse_version >= 1500- Update to libvirt 4.3.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Remove legacy Xen driver - Dropped patches: 09877303-virSocketAddrParseInternal.patch, 412afdb8-intro-virSocketAddrParseAny.patch- util: improvements in error handling 09877303-virSocketAddrParseInternal.patch, 412afdb8-intro-virSocketAddrParseAny.patch bsc#1080957- Update to libvirt 4.2.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 6b3d716e-keycodemap-py3.patch, 33c6eb96-fix-libvirtd-reload-deadlock.patch, 464889ff-rpc-aquire-ref-dispatch.patch, c6f1d519-rpc-simplify-dispatch.patch, 06e7ebb6-rpc-invoke-dispatch-unlocked.patch, 86cae503-rpc-fix-pre-exec.patch, eefabb38-rpc-virtlockd-virtlogd-single-thread.patch, fbf31e1a-CVE-2018-1064.patch, fb327ac2-virtlockd-admin-socket.patch, 64370c4b-libxl-MigrateBegin.patch, 99486799-libxl-MigrateConfirm.patch, f5eacf2a-libxl-MigratePerform.patch, 4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch, fe51dbda-libxl-use-FindByRef.patch, 60b3fcd9-libxl-MigratePrepare.patch, 3c89868c-libxl-lock-after-ListRemove.patch, 13e81fc6-libxl-EndJob-on-error.patch, 594b8b99-libxl-DefineXMLFlags-API-pattern.patch, c66e344e-libxl-dont-deref-NULL.patch, 83edaf44-libxl-dont-hardcode-sched-weight.patch, apibuild-py3.patch- libxl: don't hardcode scheduler weight 83edaf44-libxl-dont-hardcode-sched-weight.patch bsc#1086377- libxl: fixes and improvements in migration APIs 64370c4b-libxl-MigrateBegin.patch, 99486799-libxl-MigrateConfirm.patch, f5eacf2a-libxl-MigratePerform.patch, 4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch, fe51dbda-libxl-use-FindByRef.patch, 60b3fcd9-libxl-MigratePrepare.patch, 3c89868c-libxl-lock-after-ListRemove.patch, 13e81fc6-libxl-EndJob-on-error.patch, 594b8b99-libxl-DefineXMLFlags-API-pattern.patch, c66e344e-libxl-dont-deref-NULL.patch bsc#1080957- lockd: fix typo in virtlockd-admin.socket fb327ac2-virtlockd-admin-socket.patch bsc#1085386- Install correct firewall service file depending on availability of firewalld vs SuSEfirewall2 libvirtd-relocation-server.xml bsc#1083455- qemu: avoid denial of service reading from QEMU guest agent CVE-2018-1064 fbf31e1a-CVE-2018-1064.patch bsc#1083625- virtlockd: fix loosing lock on re-exec 464889ff-rpc-aquire-ref-dispatch.patch, c6f1d519-rpc-simplify-dispatch.patch, 06e7ebb6-rpc-invoke-dispatch-unlocked.patch, 86cae503-rpc-fix-pre-exec.patch, eefabb38-rpc-virtlockd-virtlogd-single-thread.patch bsc#1076861- libvirtd: fix potential deadlock when reloading 33c6eb96-fix-libvirtd-reload-deadlock.patch bsc#1079150- Update to libvirt 4.1.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 72adaf2f-revert-qemu-monitor-error-report.patch, 71d56a39-nodedev-fix-parse-PCI-address.patch, 68eed56b-conf-smbios-oem-strings.patch, 76977061-qemu-smbios-oem-strings.patch, 0c710a37-libxl-resume-lock-on-mig-failure.patch, 759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch, c2dc6698-fix-deadlock-obtaining-hostname.patch, c391e07e-libxl-clock-settings.patch, ef71caea-libxl-memalign.patch, suse-apparmor-signal.patch- libxl: round memory values to next 1MiB increment ef71caea-libxl-memalign.patch bsc#1082041- libxl: add support for specifying clock offset and adjustment c391e07e-libxl-clock-settings.patch bsc#1082161- Remove all uses of python2 during the build (bsc#1080034) 6b3d716e-keycodemap-py3.patch apibuild-py3.patch - Determine hostname early to avoid code injection in lxc driver. (bsc#1080042) 759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch c2dc6698-fix-deadlock-obtaining-hostname.patch - Add basic support of connectGetAllDomainStats for lxc driver (fate#323742) 0001-Extract-stats-functions-from-the-qemu-driver.patch 0002-lxc-implement-connectGetAllDomainStats.patch- qemu: Support setting OEM strings in SMBIOS 68eed56b-conf-smbios-oem-strings.patch, 76977061-qemu-smbios-oem-strings.patch FATE#323624 - libxl: resume lock process after failed migration 0c710a37-libxl-resume-lock-on-mig-failure.patch bsc#1076861- qemu hook: Change shebang to /usr/bin/python3 - spec: Require python lxml in daemon-hooks subpackage- Update to libvirt 4.0.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 2d07f1f0-fix-storage-crash.patch, 69ed99c7-dom0-persistent.patch, 8599aedd-libvirt-guests-dom0-filter.patch, 0f33025a-virt-aa-helper-handle-more-disk-images.patch, b475a91b-add-virStringFilterChars-string-utility.patch, faec1958-lxc-set-hostname-based-on-container-name.patch, 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch, fix-virt-aa-helper-profile.patch, - Patches added to fix upstream bugs: 72adaf2f-revert-qemu-monitor-error-report.patch, 71d56a39-nodedev-fix-parse-PCI-address.patch - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500- Add a qemu hook script providing functionality similar to Xen's block-dmmd script suse-qemu-domain-hook.py FATE#324177- Fix apparmor rules for virt-aa-helper (bsc#1074265) fix-virt-aa-helper-profile.patch - Lift VirtualBox dependency version to include 5.2.x - Update upstreamed patches Removed patches: * daemon-close-crasher.patch * lxc-hostname.patch Added patches: * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch * b475a91b-add-virStringFilterChars-string-utility.patch * faec1958-lxc-set-hostname-based-on-container-name.patch- Close clients before drivers are cleaned up to avoid crash at libvirtd stop (bsc#1073730) daemon-close-crasher.patch - Set a hostname on lxc containers based on guest's name. lxc-hostname.patch - Enhance apparmor rules for virt-aa-helper (bsc#1070916) 0f33025a-virt-aa-helper-handle-more-disk-images.patch- libvirt-guests: fix 'stop' operation when action is 'suspend' 69ed99c7-dom0-persistent.patch, 8599aedd-libvirt-guests-dom0-filter.patch bsc#1070130- storage: Don't dereference driver object if virStorageSource is not initialized 2d07f1f0-fix-storage-crash.patch bsc#1072974- Update to libvirt 3.10.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - bsc#1070285, bsc#1070478, boo#1070914, - FATE#323473, FATE#324365, FATE#324479- Update to libvirt 3.10.0 RC2 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 8056721c-qemu-null-storage-source.patch, 74a13be4-xdr-flags.patch, apparmor-rules-for-new-mediation-features.patch, apparmor-fine-grained-mount-rules.patch - bsc#1070285, bsc#1070478, FATE#323473, FATE#324479- spec: remove use of 'systemctl enable' bsc#1038401- spec: enable firewalld support for SLE15, Leap15, and Tumbleweed FATE#320794- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- spec: Add BuildRequires for libtirpc-devel in preparation of removal of sunrpc from glibc - build: Use XDR_CFLAGS in more places 74a13be4-xdr-flags.patch- Replace hardcoded libvirt with Name tag when refering to subpkgs - Remove dependencies to /bin/sh in libs and nss %post scripts- apparmor: allow libvirtd to send signals to unconfined processes suse-apparmor-signal.patch boo#1065123- qemu: Tolerate storage source private data being NULL 8056721c-qemu-null-storage-source.patch bsc#1068752- apparmor: add rules for new mediation features apparmor-rules-for-new-mediation-features.patch, apparmor-fine-grained-mount-rules.patch bsc#1066124, boo#1065123 - spec: unconditionally enable the wireshark dissector- Replace %{with_sle_build} by ! 0%{?is_opensuse} bsc#940315- Update to libvirt 3.9.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: c44b29aa-apparmor-dnsmasq-ptrace.patch, 441d3eb6-qemu-tls-client-verify-server-cert.patch- qemu: ensure TLS clients always verify the server certificate CVE-2017-1000256 441d3eb6-qemu-tls-client-verify-server-cert.patch bsc#1062563- Do not ignore errors from useradd/groupadd. - Invoke/expand %service_* just once per scriptlet. - Replace some old macros.- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage bsc#1062620- spec: reload libvirtd Apparmor profile in %post bsc#1060860- apparmor: add dnsmasq ptrace rule to libvirtd profile c44b29aa-apparmor-dnsmasq-ptrace.patch bsc#1060860- spec: Add dependency to UEFI firmwares since paths are specified at build time- Update to libvirt 3.8.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 92bd87a2-ryzen-test-data.patch, 5c83b360-epyc-test-data.patch, a0b62843-epyc-cpu-model.patch, f305d8a1-apparmor-attach_disconnected.patch, b482925c-apparmor-ptrace-support.patch- Enable firewalld support for openSUSE >= 42.2- apparmor: Add rules for kernel 4.13 ptrace checks b482925c-apparmor-ptrace-support.patch Drop temporary workaround apparmor-ptrace-support.patch bsc#1058847 - apparmor: Add rules for denial encountered when starting confined domains f305d8a1-apparmor-attach_disconnected.patch, suse-apparmor-libnl-paths.patch Drop old, useless, undocumented apparmor-fixes.patch- apparmor: add temporary profile fixes to allow starting domains apparmor-ptrace-support.patch bsc#1058847- cpu: Add new EPYC CPU model 92bd87a2-ryzen-test-data.patch, 5c83b360-epyc-test-data.patch, a0b62843-epyc-cpu-model.patch bsc#1052825- Update to libvirt 3.7.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 8982f3ab-util-hash-header.patch, 0b1ecf7b-virHashCodeGen-mockable.patch, f536b0dd-tests-arch-independent-hash.patch, e4cb8500-avoid-malicious-ssh-hostname-as-args.patch- Support OVMF 4MB firmware images Adjustment to spec file and suse-ovmf-paths.patch- supportconfig plugin: list active networks, interfaces and storage pools- rpc: avoid ssh interpreting malicious hostname as arguments e4cb8500-avoid-malicious-ssh-hostname-as-args.patch bsc#1053600- Update to libvirt 3.6.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Fix unit tests on s390x and ppc64 8982f3ab-util-hash-header.patch, 0b1ecf7b-virHashCodeGen-mockable.patch. f536b0dd-tests-arch-independent-hash.patch - Patch cleanup - Renamed libvirtd-defaults.patch to suse-libvirtd-disable-tls.patch - Renamed libvirtd-init-script.patch to suse-libvirtd-sysconfig-settings.patch - Renamed virtlockd-init-script.patch to suse-virtlockd-sysconfig-settings.patch - Renamed virtlogd-init-script.patch to suse-virtlogd-sysconfig-settings.patch - Renamed libvirt-guests-init-script.patch to suse-libvirt-guests-service.patch - Combined suse-libvirtd-service.patch and systemd-service-xen.patch to suse-libvirtd-service-xen.patch since both patches add Xen support to libvirtd service file - Pull OVMF-related changes from suse-qemu-conf.patch into a new suse-ovmf-paths.patch- Add a supportconfig plugin libvirt-supportconfig FATE#323661- Remove Requires on bridge-utils FATE#323639- drop dependency on xen for armv6hl (not supported and does not build)- Update to libvirt 3.5.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 5004f121-virFdStreamThread-dont-exceed-length.patch, 1a4b21f1-set-EOF-on-end-of-stream.patch- Remove --with-pic which is only for static libs - Use %_smp_mflags instead of just %jobs- misc spec file cleanup - remove checks for old distros well beyond EOL - enable wireshark dissector for Leap >= 42.2 and Factory - remove support for old, non-systemd distros - replace $RPM_ shell vars with modern macros- Don't exceed specified length when reading from stream 5004f121-virFdStreamThread-dont-exceed-length.patch, 1a4b21f1-set-EOF-on-end-of-stream.patch- Update to libvirt 3.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: aeda1b8c-qemu-no-error-shutdown.patch, 8023b21a-conf-ioapic.patch, 6b5c6314-qemu-irqchip.patch, 2020e2c6-conf-intremap.patch, 04028a9d-qemu-intremap.patch, d12781b4-conf-iommu-cache-mode-attr.patch, a5691448-qemu-iommu-cache-mode.patch, 3a276c65-conf-iommu-def-stability-check.patch, 935d927a-conf-iommu-ABI-stability-check.patch, 4cd3f241-fix-NULL-disk-source.patch, 975ea20f-loopback-macro.patch, dbb85e0c-libxl-graphics-listen-addr.patch, libxl-def-usbctrl.patch, revert-2841e675-mtu.patch - FATE#321335, bsc#1031056, bsc#1037774, bsc#1040207, bsc#1040213- libxl: add default listen address for VNC and spice 975ea20f-loopback-macro.patch, dbb85e0c-libxl-graphics-listen-addr.patch bsc#1040207 - xenconfig: fix handling of NULL disk source 4cd3f241-fix-NULL-disk-source.patch bsc#1040213- qemu: add support for 288 VCPUS aeda1b8c-qemu-no-error-shutdown.patch, 8023b21a-conf-ioapic.patch, 6b5c6314-qemu-irqchip.patch, 2020e2c6-conf-intremap.patch, 04028a9d-qemu-intremap.patch, d12781b4-conf-iommu-cache-mode-attr.patch, a5691448-qemu-iommu-cache-mode.patch, 3a276c65-conf-iommu-def-stability-check.patch, 935d927a-conf-iommu-ABI-stability-check.patch FATE#321335 - revert commit 2841e675: qemu: propagate bridge MTU into qemu "host_mtu" revert-2841e675-mtu.patch bsc#1037774- Update to libvirt 3.3.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Bug fixes: bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024, bsc#1034146, bsc#1035995 - libxl: updated libxl-def-usbctrl.patch bsc#1031056- Update to libvirt 3.3.0 RC1 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch - Bug fixes: bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024, bsc#1034146 - libxl: add default controllers for USB devices libxl-def-usbctrl.patch bsc#1031056- qemu: Fix regression when hyperv/vendor_id feature is used Added patch: ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch boo#1033893- Update to libvirt 3.2.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 67dcb797-virTimeBackOffWait-sleepcap.patch, 85af0b80-qemu-adaptive-montimeout.patch, d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch, 754515b7d-add-virNetlinkDumpCommand.patch, 3ee35d7d6-more-uses-of-SYSCTL_PATH.patch, 5dd607059-add-virNetDevGetName.patch, 00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch - Add Conflicts=xendomains.service to libvirtd service suse-libvirtd-service.patch bsc#1015348- RPM group fix- Fail to start network instead of losing routes if IPv6 forwarding is required. bsc#1025252 Added patches: 00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch 3ee35d7d6-more-uses-of-SYSCTL_PATH.patch 5dd607059-add-virNetDevGetName.patch 754515b7d-add-virNetlinkDumpCommand.patch d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch- qemu: Fix monitor timeout with large memory VMs 67dcb797-virTimeBackOffWait-sleepcap.patch 85af0b80-qemu-adaptive-montimeout.patch bsc#1013113- network: don't use dhcp-authoritative on static networks bsc#1015588 * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch- Update to libvirt 3.1.0 - Modularize storage driver by splitting it into backend-specific subpackages - CVE-2017-2635, bsc#1027075 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: b018ada3-shunloadtest-build-fix.patch, f86a7a83-libxl-dom0-balloon-fix.patch, 6e4759d0-libxl-timer-fix.patch, 87df87e0-libxl-timer-tsc-emulate.patch, b4386fda-xenconfig-timer-fix.patch, d3970925-timer-tests.patch, 321a28c6-libxl-default-disk-format.patch, bd116810-libxl-fix-disk-detach.patch, ff225538-libxl-autoballoon-setting.patch, c89a6e78-libxl-physinfo-cleanup.patch, d2b77608-libxl-maxmem-fix.patch, 79692c38-libxl-dom0-maxmem.patch, 4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch, apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch, qemu-disable-namespaces.patch- Drop author list from description. Fix summary to be more accurate as to what the subpackage pertains to.- Don't call insserv if we use systemd and don't require it.- libxl: more fixes for dom0 maxmem setting 4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch bsc#1017762- apparmor: don't fail on non-apparmor apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch bsc#1023436- libxl: fix reporting of domain maximum memory ff225538-libxl-autoballoon-setting.patch, c89a6e78-libxl-physinfo-cleanup.patch, d2b77608-libxl-maxmem-fix.patch, 79692c38-libxl-dom0-maxmem.patch bsc#1017762- libxl: set disk format to raw if not specified and fix disk detach 321a28c6-libxl-default-disk-format.patch, bd116810-libxl-fix-disk-detach.patch bsc#1003379- libxl: fix timer configurations 6e4759d0-libxl-timer-fix.patch, 87df87e0-libxl-timer-tsc-emulate.patch, b4386fda-xenconfig-timer-fix.patch, d3970925-timer-tests.patch bsc#1019969- SLE12 SP2 bugs merged via version updates of the Factory libvirt package: bsc#986718 - SLE12 SP2 FATEs merged via version updates of the Factory libvirt package: FATE#316228, FATE#316628, FATE#319531, FATE#319810, FATE#320490 - Replaced libxl-dom0-balloon-fix.patch with upstream patch f86a7a83-libxl-dom0-balloon-fix.patch- Fix dom0 ballooning with Xen >= 4.8 libxl-dom0-balloon-fix.patch bsc#1020755- SLE12 SP2 bugs merged via version updates of the Factory libvirt package: bsc#996020, bsc#987002, bsc#997278, bsc#998005, bsc#998389, bsc#1001446, bsc#1001698, bsc#1005288, bsc#1013991, bsc#1016253, bsc#1017086, bsc#1017762, bsc#1018189- virt-create-rootfs is a temporary SLE-only hack that was never added to the Factory libvirt package, causing it to be dropped when rebasing SLE on Factory. Add it now but only apply associated patch when building for SLE. virt-create-rootfs.patch bsc#995981- Update to libvirt 3.0.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Add b018ada3-shunloadtest-build-fix.patch to fix 'make check' failures - Add qemu-disable-namespaces.patch to temporarily disable qemu namespace feature until all issues are resolved- In order to avoid issues like bsc#1017189, explicitly specify supported VirtualBox versions- Update to libvirt 2.5.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Import new public signing key- spec: explicitly set qemu-bridge-helper path to /usr/lib/ bsc#999070- Package org.libvirt.api.policy polkit file (bsc#959297) - Fix postun systemd services cleanup - Mark /etc/libvirt/nwfilter/*.xml files as config files- Update to libvirt 2.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html- Update to libvirt 2.3.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: pci-use-driver-override-sysfs.patch, virHostdevFindUSBDevice-privsyms.patch, libxl-usb-vendor.patch, apparmor-qemu-bridge-helper.patch- Update to libvirt 2.2.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 856965b3-qemu-secdriver.patch, 541e9ae6-cpu-vendor-crash-fix.patch, d53d4650-qemu-rbd-auth.patch- libxl: allow vendor/product addressing for USB hostdevs virHostdevFindUSBDevice-privsyms.patch, libxl-usb-vendor.patch bsc#989646 - qemu: fix auth for rbd network disks d53d4650-qemu-rbd-auth.patch bsc#988998 - Replace cpumodel-vendor-crash-fix.patch with upstream variant 541e9ae6-cpu-vendor-crash-fix.patch bsc#992425- Update to libvirt 2.1.0 - New subpackages libvirt-libs and libvirt-admin - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: c8f08e48-systemd-notify-fix.patch - qemu: fix qemu.conf security_driver regression in 2.1.0 release 856965b3-qemu-secdriver.patch- cpu_x86: fix libvirtd segfault when host cpu is 'qemu64' cpumodel-vendor-crash-fix.patch bsc#992425- bsc#988279. Move the qemu-bridge-helper apparmor profile from the qemu abstraction to the usr.sbin.libvirtd profile. apparmor-qemu-bridge-helper.patch- spec: minor improvements to logic enabling numactl and numad support and fix nested if indentation FATE#319979- Update patches providing support for driver_override sysfs interface with latest upstream variant. Dropped pci-simplify-stub.patch and updated pci-use-driver-override-sysfs.patch bsc#986718- spec: enable numactl and numad support for aarch64 FATE#319979, bsc#991377- BuildRequires: use librbd-devel instead of ceph-devel - Enable rbd support for aarch64 bsc#979473- Use driver_override sysfs interface for binding/unbinding PCI stub drivers pci-simplify-stub.patch, pci-use-driver-override-sysfs.patch bsc#986718- systemd: fix ready notification on abstract socket c8f08e48-systemd-notify-fix.patch boo#987668- Update to libvirt 2.0.0 - Change version scheme to match libvirt's time-driven release schedule. will be incremented on first release of new calendar year, on each monthly release, and on stable branch maintenance release - Include libvirt-admin utility and API - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: apparmor-dont-scrub-environment-of-virtlogd-process.patch, e33cd67a-xenconfig-backendtype-fix.patch- spec: Recent simplification allows using a common spec file for SLE and openSUSE - Add SLE patches missing in openSUSE libxl-dom-reset.patch, libxl-set-migration-constraints.patch, libxl-set-cach-mode.patch- xenconfig: fix conversion of to backendtype e33cd67a-xenconfig-backendtype-fix.patch bsc#984798- Advertise aarch64 UEFI firmware paths - adjust spec file to include aarch64 paths in '--with-loader-nvram=' configure option - adjust qemu.conf 'nvram' option to include the SUSE paths bsc#981836, bsc#983747- apparmor: Don't scrub environment of virtlogd process apparmor-dont-scrub-environment-of-virtlogd-process.patch boo#980441- Update to libvirt 1.3.5 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: e4d131b8-mv-virDomainDefPostParseInternal.patch, 3e428670-post-parse-implicit-video.patch, 538012c8-default-vram.patch, 96b21fb0-vram-tests.patch, 400e716d-libxl-noprope-emulator.patch, b90c4b5f-tests-use-qemu-xen.patch, fccf2725-libxl-API-4.4.patch, 5325123d-libxl-migv2-save-restore.patch, f9edcfa4-libxl-migv2-migration.patch, a1c9a81a-libxl-rbd-fix.patch, ba566428-libxl-dom-iface-addrs.patch - spec: simplify and cleanup by removing many conditionals that are never toogled. Also drop conditionals for suse_version < 1310- Avoid suppressing errors during useradd/groupadd- libxl: add domainInterfaceAddresses API ba566428-libxl-dom-iface-addrs.patch bsc#979425- libxl: default to qemu driver for network disks a1c9a81a-libxl-rbd-fix.patch boo#981094- spec: Remove %defattr usage Inspired by upstream commit 90f9193c- libxl: support Xen migration stream V2 fccf2725-libxl-API-4.4.patch, 5325123d-libxl-migv2-save-restore.patch, f9edcfa4-libxl-migv2-migration.patch bsc#978361- Fix default video RAM setting e4d131b8-mv-virDomainDefPostParseInternal.patch, 3e428670-post-parse-implicit-video.patch, 538012c8-default-vram.patch, 96b21fb0-vram-tests.patch, 400e716d-libxl-noprope-emulator.patch, b90c4b5f-tests-use-qemu-xen.patch bsc#979397- Remove unknown locales to fix build in old dists- Update to libvirt 1.3.4 - Add support for migration data compression in QEMU driver - Drop libvirtd.socket - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 216650f1-libxl-build-fix.patch, 6d8b6d28-mark-implicit-video-primary.patch, 03e8d5fb-qemu-perf-memory-corruption.patch, libvirtd-systemd-socket.patch- qemu: perf: Fix crash/memory corruption on failed VM start 03e8d5fb-qemu-perf-memory-corruption.patch bsc#977131- Fix setting implicit video devices as primary 6d8b6d28-mark-implicit-video-primary.patch bsc#977150- Update to libvirt 1.3.3 - perf events - post-copy migration support - NSS module - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Add rpmlintrc file to filter shlib-policy-name-error for new libnss_libvirt plugin - Fix build with Xen4.7 216650f1-libxl-build-fix.patch- spec: restart daemons in %posttrans after connection drivers have been processed bsc#854343, bsc#968483- libxl: advertise system qemu instead of qemu-xen in caps libxl-qemu-emulator-caps.patch FATE#320638- Update to libvirt 1.3.2 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html- libxl: Add support for block-{dmmd,drbd,npiv} scripts libxl-support-block-script.patch bsc#954872- qemu: set /usr/share/qemu/ovmf-x86_64-ms-{code,vars}.bin as default UEFI firmwares for x86_64 bsc#961853- Update to libvirt 1.3.1 - CVE-2015-5313 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 034e47c3-CVE-2015-5313.patch, ace1ee22-qemuxml2argv-test.patch, add-with-login-shell.patch, virt-aa-helper-rw-mounts.patch- spec: perform one-time enable and start of virtlogd.socket when upgrading from libvirt < 1.3.0. Inspired by upstream libvirt.git commit da054f35.- CVE-2015-5313: don't allow '/' in filesystem volume names 034e47c3-CVE-2015-5313.patch bsc#953110 - Fix failing qemuxml2argv test on 32-bit platforms ace1ee22-qemuxml2argv-test.patch- Update to libvirt 1.3.0 - New virtlogd log daemon - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patch: 703ec1b7-qemu-bridge-helper-fix.patch - Added patch: virtlogd-init-script.patch- Run udevadm settle after removing NICs in lxc driver. bsc#829033. lxc-wait-after-eth-del.patch- Don't add apparmor deny rw rule for 9P readonly mounts. bsc#952849. virt-aa-helper-rw-mounts.patch- Don't package virt-login-shell anymore as shipping it as non-setuid doesn't make sense. bsc#837609 add-with-login-shell.patch- Detect path of qemu-bridge-helper during %configure - add qemu-tools as BuildRequires for suse_version > 1130 - add upstream patch 703ec1b7-qemu-bridge-helper-fix.patch- Update to libvirt 1.2.21 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: disable-virCgroupGetPercpuStats-test.patch- spec: some minor wireshark fixups. Essentially a backport of commit 7c8250d7.- spec: remove all dependencies on apparmor to keep it optional. bsc#949793- xenconfig: set disk type to BLOCK when driver is not tap or file xen-sxpr-disk-type.patch bsc#938228- spec: the libvirt apparmor profiles #include files from the apparmor-profiles package, thus should have a dependency on it bsc#949793- Remove Wants=xencommons.service from libvirtd.service xencommons is already enabled by a global preset, and the absence of xen-tools.rpm causes a systemd warning- Update to libvirt 1.2.20 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped upstream patches: 3468542f-virFileUnlink.patch, 8b1d84e6-refreshVol-failure.patch, e0025d29-storage-mode-check.patch, ba25c214-libxl-log-level.patch, 56945e13-libxl-AttachDeviceConfig-hostdev.patch- bsc#945962: SLES12 SP1 Beta3 - Pass-through NIC device via virsh not available to VM. 56945e13-libxl-AttachDeviceConfig-hostdev.patch- libxl: set driver log level to the log_level specified in libvirtd.conf ba25c214-libxl-log-level.patch bsc#945796- CVE-2015-5247 - denial of service through root-squash NFS storage bsc#945645 3468542f-virFileUnlink.patch 8b1d84e6-refreshVol-failure.patch e0025d29-storage-mode-check.patch- Update to libvirt 1.2.19 - Improved ppc64 support - New virDomainRename API - Support for PCI Express controllers in QEMU - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped upstream patches: 269d39af-storage-allocation-fix.patch, 26c5fa3a-virt-aa-helper-missing-doc.patch, d25a5e08-virt-aa-helper-simplify-restriction-logic.patch, 2f01cfdf-virt-aa-helper-allow-ovmf.patch, 91fdcefa-virt-aa-helper-allow-nvram.patch, 52970dec-virt-aa-helper-improve-valid-path.patch, 44a54eb0-libxl-fix-refcnt-MigrationDstArgs.patch, 15120b8c-libxl-no-resume-on-suspend-fail.patch, e80b84a7-libxl-acquire-job-on-migrate.patch, 60acb38-revert-curmem-inactive-dom.patch- Replace local libxl patches with upstream variants Dropped: 0003-libxl-fix-ref-counting-of-libxlMigrationDstArgs.patch 0004-libxl-don-t-attempt-to-resume-domain-when-suspend-fa.patch 0005-libxl-acquire-a-job-when-receiving-a-migrating-domai.patch Added: 44a54eb0-libxl-fix-refcnt-MigrationDstArgs.patch 15120b8c-libxl-no-resume-on-suspend-fail.patch e80b84a7-libxl-acquire-job-on-migrate.patch bsc#936185 - Added another virt-aa-helper upstream patch 52970dec-virt-aa-helper-improve-valid-path.patch lp#1483071 - Added upstream patch to fix libvirt-tck memory balloon test failure on Xen 60acb38-revert-curmem-inactive-dom.patch- Fix generated apparmor profile to allow access to ovmf and nvram. 26c5fa3a-virt-aa-helper-missing-doc.patch 2f01cfdf-virt-aa-helper-allow-ovmf.patch 91fdcefa-virt-aa-helper-allow-nvram.patch d25a5e08-virt-aa-helper-simplify-restriction-logic.patch lp#1483071- storage: only run safezero if allocation is > 0 269d39af-storage-allocation-fix.patch bsc#942085- Update to libvirt 1.2.18 - libxl: support dom0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped upstream patches: e44bcae-virt-aa-helper-trailing-slash.patch, a55a5e7-virt-aa-helper-log.patch, 61dab0f-virt-aa-helper-renaming.patch, 24f3c2f-virt-aa-helper-fix-caps.patch, 45697fe5-libxl-support-dom0.patch, e9c27344-libxl-fix-virDomainObj-state.patch, 4ffb21c8-libxl-dom0-state-fix.patch, qemu-nbd-cleanup-fix.patch- Fix crash in libxl driver on receiving side 0003-libxl-fix-ref-counting-of-libxlMigrationDstArgs.patch 0004-libxl-don-t-attempt-to-resume-domain-when-suspend-fa.patch 0005-libxl-acquire-a-job-when-receiving-a-migrating-domai.patch bsc#936185- libxl: set dom0 state to running 4ffb21c8-libxl-dom0-state-fix.patch bsc#937316 - libxl: support management of dom0 45697fe5-libxl-support-dom0.patch bsc#937316 - libxl: libxl: fix setting state of virDomainObj e9c27344-libxl-fix-virDomainObj-state.patch bsc#934937- Fixed virt-aa-helper bugs preventing virt-sandbox to work. 24f3c2f-virt-aa-helper-fix-caps.patch 61dab0f-virt-aa-helper-renaming.patch a55a5e7-virt-aa-helper-log.patch e44bcae-virt-aa-helper-trailing-slash.patch bsc#936841 - Fixed crasher due to uninitialized values qemu-nbd-cleanup-fix.patch bsc#936841- Update to libvirt 1.2.17 - parallels driver renamed to vz (Virtuozzo) - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - spec: re-enable tests that have received upstream fixes and are now passing- Remove unsupported settings in libvirtd.socket unit file when systemd version < 214 libvirtd-systemd-socket.patch bsc#933043 - spec: always apply Apparmor and netcontrol patches- spec: Add libvirtd.socket unit file to service_add_pre and service_del_postun macros- Update to libvirt 1.2.16 - Introduce pci-serial - Introduce virDomainSetUserPassword API - Introduce protected key mgmt ops - Add domain vmport feature - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop upstream patches c0d3f608-libxl-soundhw.patch and 8910e063-arch-caps.patch - Drop polkit-10-virt.rules in favor of upstream 50-libvirt.rules- qemu: fix regression defaulting to host arch 8910e063-arch-caps.patch rhb#1219191- spec: build libxl driver for aarch64 and remove useless 'suse_version <= 1220' conditional- libxl: support virtual sound devices in HVM domains c0d3f608-libxl-soundhw.patch bsc#875216- Update to libvirt 1.2.15 - Implement virDomainAddIOThread and virDomainDelIOThread - libxl: Introduce configuration file for libxl driver - Add VIR_DOMAIN_EVENT_ID_DEVICE_ADDED event - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop upstream patches da33a1ac-lxc-init-statedir.patch and open-ns-files-readonly.patch - spec file fixups for building --without-driver-modules- boo#926765: add libvirt-daemon-driver-qemu dependency on libvirt-daemon-driver-storage.- boo#926153: make sure /var/run/libvirt/lxc folder exists when starting the driver. da33a1ac-lxc-init-statedir.patch - Fix lxc-enter-namespace for 3.19+ kernels. open-ns-files-readonly.patch- Disable building wireshark dissector. Commit 37397320 requires wireshark pkgconfig, which SUSE wireshark packages do not provide. - Disable building the legacy Xen driver since Xen no longer provides the xend toolstack. Remove xend-specific patches while at it: fix-pci-attach-xen-driver.patch, xen-name-for-devid.patch- Update to libvirt 1.2.14 - qemu: Implement memory device hotplug - Implement public API for virDomainPinIOThread - Implement public API for virDomainGetIOThreadsInfo - SRIOV NIC offload feature discovery - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop disable-hugepage-test.patch in favor of upstream fix- Fix build on older distros containing a polkit package that lacks support for /etc/polkit-1/rules.d drop directory- Disable interface driver if libnetcontrol cannot be initialized Modified libvirt-suse-netcontrol.patch boo#920551- Fix crash in libnetcontrol-backed interface driver Modified libvirt-suse-netcontrol.patch boo#920551- Instruct polkit to allow memebers of the 'libvirt' group to connect to libvirt without providing any password (bnc#920804) - Added polkit-10-virt.rules to fix bnc#920804- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch bsc#921586- Fixed a number of QEMU apparmor abstraction problems. bsc#921355 apparmor-fixes.patch- Update to libvirt 1.2.13 - qemu: improved support for host and guest NUMA - Many incremental improvements and bug fixes, see http://libvirt.org/news.html- Update to libvirt 1.2.12 - CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots - CVE-2015-0236: qemu: Check ACLs when dumping security info from save image - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop upstream patches: 30c6aecc-apparmor-lib64.patch, apparmor-xen-fixup.patch, apparmor-allow-helpers.patch, apparmor-tck-raw-packets.patch - Disable a hugepage test that is failing on ppc, ppc64, and ppc64le architectures - disable-hugepage-test.patch- Fixed patches to pass make syntax-check- Apparmor profile regression breaks Xen domains. bsc#913799 apparmor-xen-fixup.patch apparmor-allow-helpers.patch apparmor-tck-raw-packets.patch- Replaced hard to maintain install-apparmor-profiles.patch by upstreamed 30c6aecc-apparmor-lib64.patch. - Reformatted libvirt.spec and libvirtd.init to pass upstream make syntax-check- fix bashisms in libvirt-guests.sh script - update patches: + libvirt-guests-init-script.patch- Update to libvirt 1.2.11 - Implement public API for virDomainGetFSInfo - qemu: Add define for the new throttle options - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats() - CVE-2014-7823: dumpxml: security hole with migratable flag - Drop upstream patches: 2222123-virt-aa-helper-crash.patch, 433b427-iplink-name.patch, 52691f99-qemu-mig-crash.patch, 72fecf1-lxc-resolve-symlinks.patch, b1674ad5-CVE-2014-7823.patch, ba9b7252-sys-net-rw.patch, c264eea-virt-aa-helper-sandbox.patch, e50457d-lxc-unmount-check.patch, cgroup-all-devices.patch, libvirt-ppc64le-support.patch- Get /proc/sys/net/ipv[46] read-write for wicked to work in containers. bsc#904432. ba9b7252-sys-net-rw.patch - Fixed allowing devices for containers. cgroup-all-devices.patch- qemu: Fix crash in tunnelled migration 52691f99-qemu-mig-crash.patch boo#908008- Fix potential crasher in virt-aa-helper 2222123-virt-aa-helper-crash.patch - ip link add now needs the 'name' parameter. 433b427-iplink-name.patch - Fixes for virt-sandbox-service to work: - Allow adding virt-sandbox service config to apparmor rules. c264eea-virt-aa-helper-sandbox.patch - fix symlink resolving for containers to start. 72fecf1-lxc-resolve-symlinks.patch - fix unmounting file system if it contains the source to mount. e50457d-lxc-unmount-check.patch- Remove security_driver = "none" in qemu config. This completely disabled all security drivers instead of probing them. - Changed default value of QEMU's security_default_confined to 0 to keep QEMU domains unconfined by default.- CVE-2014-7823: dumpxml: security hole with migratable flag b1674ad5-CVE-2014-7823.patch bsc#904176- Fix Qemu AppArmor abstraction. - qemu-block.so was denied on x86_64. install-apparmor-profiles.patch - Temporary fix access to screenshot temporary file. bsc#904426. qemu-apparmor-screenshot.patch- Update to libvirt 1.2.10 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html- Added package wireshark-plugin-libvirt to provide the wireshark dissector for the libvirt RPC protocol/bin/sh/bin/sh/bin/sh/bin/shxinomavro 1617914161 7.1.0-4.17.1.0-4.17.1.0-4.1nwfiltervirtnwfilterd.confvirtnwfilterd-admin.socketvirtnwfilterd-ro.socketvirtnwfilterd.servicevirtnwfilterd.socketconnection-driverlibvirt_driver_nwfilter.sorcvirtnwfilterdvirtnwfilterdtest_virtnwfilterd.augvirtnwfilterd.augsysconfig.virtnwfilterdvirtnwfilterd.8.gz/etc/libvirt//usr/lib/systemd/system//usr/lib64/libvirt//usr/lib64/libvirt/connection-driver//usr/sbin//usr/share/augeas/lenses/tests//usr/share/augeas/lenses//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/b356981fed14d4c4240e732d1051e3f8-libvirtcpioxz5ppc64le-suse-linuxdirectoryASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=dfb1224a9b117e2d04d0e44c558e4fb8eab3fc29, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=2c9b3f3207b738c0a954b853749c7a2242eee2d3, for GNU/Linux 3.10.0, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) jPR R RR/RRsRR R RR RRR R RRRRRRRrR:RkRNR]RcRXRIR-R`R,RER!R*R@RR)RjRRhReRGRKRPRgR9RAR=RVRoRJRYR6RQR;RdRMRnR"R4R3R7RbRRqR2RUR?R[RlRWRTR+RHRaR(R8R/R&RZR1RmRR5R.R^R%R$RBRDRiR_RFR#RCRsRRRRR RR RR R9 .9x Qutf-8c0cd402fe1d8bcbc0a7fd3bd179baa51fee70b1dbcfed596b527fd6188fe4a87?7zXZ !t/] crt:a`*rPjmm9@I,eGvB?ՙG'e;`;K#h sYe8xEΉ ےx1qG tzPR;=_1we"㥢p Gk(/3f$WEҎcXLeO0khVA (L UCz8X'oH:A(T5/nܽ9v &'|i١D®jKvrAs!tЯh}0XpM@@M>R{oC 0N?;Y~>}xfCwr}TXՖ_0e:$kξYzg7OB(4W@*sv;x}x^/@fRVZ)ԗVH/t )ặC=*š2g!k.ăkL˗Vwp%BX,* KY8Lر^øzˇܧĒ=^ճE_]I31@V`yg߱LSYlhjĦM mp%V%:ϕ6_ S_` 0JIiZް 8|ym׳{[ &4ˏ.3jn끯O/ƣZ[U-Lf+=HľubE5#N@ꍒ [1)Qg uxiyv5]ǙSߐeQ6EfFb!ZoC_Kjro쪃 yJɾ';)+ P<%]Dlyo*2uH3ax4R}%IñI}%@BٵϘ[;g9DH-t%\lo7POU:׈T,HH>c{\Cׁa8ZKhG⃙lߎ3Y?'xz@_hVÇ#ʩDs&vWIpTwmEi96}rvx|1A0W{e̛х 7c ߾U#fz}E)oZF9-*V{#?yC*G%mq8W@MSZ<8b@ڣO_|Ѱ%x7񋲐 Eet/tnIh-Δ!bN!$D}"/;~ .ͲSȲ?#+4L3Nsfq9eq*{/ Ѵ4*E $)=GϢѐl7KCVoPD꡽2Õl[!PU q6#vw9p5-oG׻rUfjC,eP66`$_t?8 I lzZSP@9@\ ˍ{ӅÁk+souyF P T4%%> CD rLH7TcӁ{iTi%EZQwK/j#0; 4iNfyÎ18ÄNu4S$+ Q?YA$c5+WXc2S'-4*Ҥ-+ލ ݴ 6Ⱦ4R>"ț:[;o\vlc!tYfʆvH6f ғM!^7Z~G?# \8 p6ח`a 9߂o+_W oM7EjpƮ/q81Q T^$z>o04t}Ϲff`#L##@]6jtr2P&wF(?s21aa7ḒAmv'a0Y-jEurZ0@ErwVL-/*da`?KW*Nk[NhKj8.yK^$&EF\__(<%WxOs(s#M|cf '\sn5Vޡ-4 D}Ƨ1 #_;]ϸ Hw;⼎nP]uDw)f,ʢ2}KYg"<O|1l{1W*(JIihif&3/WJ| ΃8Ff'KR>SdK#? DO_!0vT8q&D` T{[|Ob5H\r{4%F*k0]"r2Mܙ=7+&sQu-# ɰ(?r$rT!'1pgXr"0]눾/~mҞI)]&D%Y< *'V焓u<imYa!hMH^}ΩA~5C/_\u/:VO<>d6Q{/j/.)k6 }?JT=5(RE`a_Mi X* QdeSMPL9h TC+uKaa%_`^'g!1lG"DAZD.NFr/K#ׅSG8_< f1Yܺ` saf th!=(cLqbFގV"mZJF-2"Ưm.Hfo1MJm/t.^68b.yR0X 3a~5 hZ!9LsBh┦\?m$k 9߬0E{N[ҵNl]L^c/&WiIa|]׏YRV0a:_VWI]k}z~&PF!nY~o$fO+kRh5ZC[=Ywg8HB!F:m cxMg֓b%![1@!9iLإ.ɝt@}5Bk@5([3*qR-TB.ӌVz])u;dF?l 8`@5um'k'ZNrBғ ɸGV7@8^&z0 60qO|M^n~WG&~3ǜYYd9!sƋ2V=l~͉6Gqoų`AA|rA8򅛲H:dK֡3hq‰vrt Ϝ?#Z%!$_ =gt]H" m{U!XlvWΉ< v7lG~"jT}R{ {U#ޓy@ҕqTdiA|d;/P˩COB 7_үXoٵ,>Gքژ=o"Y x+?%, km6'mDRa|pU6D+Uze6+ W7[.FqB<7K_\D9`j}Zbl~],g9{)B1ZuF sO-ha{-Kv(2zo# h})Pcyp*oeU6{0j/ ",iFӫEÝ]j"v xm iveԻUw?[égu5$kv;9C?E+yҨpڇRoS]O+Oq|笟:"\:/n;2Em(3O I :U$=HKguy8_'kVDZ6g 6cTḌ;  ˼tJ CxHdL{Ria${2ʙзw{x 092j͓z(|t^l♚df-2ZXQy KD[gZl{jYkA-}Z X7|b^'PN,àvtĽ'a^J(Ɛ_k>'n~Fʬ@.sP!&,m3+p;*?ޥ_WLP ثU8(/+{1H=iۨ{Vt':dcJH5Dy WS>kf~hUZ#Trc"BW+NKN~kھAh*I~: Κ +А_,`uk"Bd {* X_S16hY 8-ݣ,2KceS~}Z<&7F N!̀Iq8LJi}cm*q0!.]6UN\<Īw&sVօ[iREu~壣ĨDlI*-z/f~Ozu M2U6~|-5?&u^؋%22#J-3_1󨴈vb0}6=l7bdz.ʉ8o-u*n^!dAo]夾Nt=sɤ#ĚL8΅",7Zwm1K}5?fyC59u<2EE)KMeJ4v EE@g]Ucp`xaCpbMZV]Qc8z$a]2(P(22Euh%%5IFi!h-)DİP ; ijt 8}@&~ jC!ܛWTE 8jf6Q?&n!3X0V4 O ,,y޹jFKuK@c)2ȽG~J.sNj>̐ %WuI)t$/|? ]M%Wz ], OGq 򄏡ɺxdq0T]8;=pebA!Z-%Dć2Aa~j<,m̨RiĐojkFV{i54&=3S9['utQrU~g>LJ@(/Yv=m}L](fW i!@HO>>S!~~V_y;P%t|$SE|#-oY;T쓓s_ (Tz&Nr kծb7r!}"X-B pnAEoh6 g8J fum-M 7x#Yr6F o)%$Qsׄ hLqs--'b7< 4kFy%b]/Piny/!K(S4\ZD{VƐuуwCMux2v>_;UyՇTMF? 1J%Y3* wȔYDg; (Ջu 4Rb|E(%u|Z1H;ox]?X0!4ƔYknlqZ[k$nh4A,^y$(87(eRmT͢r;"QM0+Iqܚi^i|_s;d]Ŭ>VLT ƣz90E0-%?R5ũ'.F/mׂqQ< y0+sw o+@C c뷔Cf֙E\SzsJI_zMO ?sy5Jo,h=+(b⏻w="AEPaUP]LpVqs+8꽍rhr! vt zFg{ׇћ]mwL*KXޯ+'2 \ΑsFfngЁػ5.߈kJ&Mxk`'r׺W852عC3QP-/O.ia4#}gc&K>?D#Čve1yaz>ҶWKzGs`zK]ik@L4mt. 7v};ӏ-8T e3`Lbäe ɠ-W7?l$b\5aP>on M,n5 Y21F+Ӫf KX@Vh跜'u/̫mۥ]J6 `v-5G-'md19yN&R1؋X[fѨ9'!έ.WgR_HR&Ht" 0_*R"aVzֆ1]7dq^O[5M+Z*Jq9FJk[c0Nm$t_tOKAaķ|C>ʻDB,éY~hϳvG {[N C4(Oo[^BS]5qfNdw8[eLR E?Mc |J<3`"UYFwR:$ ;['ATqP!tՙ2$VInO ul&ȊQ3?ɱ;I8۩Nm7RzeOWGi8RH餕+B=Oށj8xŠVu-DVu /gTH蘜*G ޢP f"W9ͻ|Vu#w,kxfBPuL"[XC]KyzVv'_ҢG7+O͉ԦtPtcؐ{4a難R=5S 3K85lh AP+@οT6hV'gMUG:}@?ƕSY֦3Ō8]z`Xv 濠T< ;Տg$QtRb>x=V>5>9@dnEN: w=mSI,9m-x<"le=?Reu-?M!NqZ+ ,)V%"d~2oN?e Dcn `u%{):iC(!g$|i=Bnkf rl] [ :k"*>OI_ʦ''En*E&,~2I]V3QPΈ%)3r&5]%qB;կ&)0rMsz$kYPIrmkAM: J&"fɚ oUCK~%ҹ PSCvC@͏ȶ0}-X"[WU$y;4{C'DI|Ĕ\ީU>R#-'"b1=n%&y/g9o}xI?/oJEq.h2(iGQus C:lH IF1aĒ,\ L+en/ЍT}_RvK'Ʈl)S 㐹zּ^.R}ב`+ri'AW%T- =4ޛ^YVroY-w37M0(0֣Qs۠ʰi.r4{H69xLJ,,mK(2SƘ\I"̤]~w`U"w>[_xm,m1qU$%fu3"7&ʪ\,4t %G^<UrUάw q ;찡#| NC#s³<Ǜ,ʇŀh\:nȂ4FIDY5PaM(=wG۞"G{xLF "C=kG(9h*&(!6ʮMXOB9AcG.~ȷM̔klW>Lsα>|Uq usEM(zg!OI\J@&9P6v&Ttr<Ƅ2pP;MKLGM6i/Zq{MO{ީЩ? # `K롳]Nu4,gi#U,V.,VoLFuc#8MM(l%3Ew~ 3bSMM[Wû)DAD"QM7z[Dn.1 bʖt/W؝w[< MCvd"(q`RgoIGιoCvRdu.b!_k&u<6S NOU Ei"%slֶ8)Ac?OIW?7o^`j>Á"\'/˗40KRFC 'y'cX(iv4(M>7ME^ u=?K ZAyC=K%ƚa׸NX_w)$S9!6݃X} bu ATd1vHW{,׸N+g8>W JhU%8*;@^* ,yӵRnd:ԏ(TpM(S(ѹ]ݧ< ެmҍYi1-q^6g1?5d{G>w͆u^= p܌z^;n-|;8KJr;,3+|t5&B ٹnӋ(CoQ$bs8AYi֤Ms,o>o3fꇲdK`(wZ <IgvHb=hmKN Bc qp&lk)rRp͹~ YЧ5?%(s&):f2?O$iY7?v[PvpWXQKH[t +| SBzؔo'G6?:ZL1 B9vF-gg]8s&زI.H`gpW #:IFk lʊE߾Q6 0rCOs@ʜگTR 3U[oa,Zsb˦d)ρѭcșd2e oZ6CC5_KiN!&Kl9]#k (Fb7sU!w見#`Nm8Q;??>Xj]3A=?{4U+^B:qt.p@;!8QXy'-bħǂ1 88Iwg8@09, JOĜ-9ѧaoE݄rNMhXt@Doq`;Iq'j+϶kQC,5(*8vAL_X(&tH} U<_u{YX6! .UsݎlUX&ҹI3z ml+Q[u)ޠhs'}xmoT㺯 Yg wev|v6zWWMb^L/MP Ev/ʈɲXHW+P?j `DQb>)],N|UMNA]o (zȿEI$O5ud@uV[)j !!Lz ;; .̃h?P.Et;[qllR=NMl_~YcFu ]h?Tw7$:ӗi e=;B*Se:H+V7V2(Ɂbt8^f[\ =Jq#T$acMHEP 6U{"|Efy_ g=,aSnyڸqb͢t䟛!L;e`R& g>ۋk.x"xƁno-X)ݷ8:u@˙0$pà kvB8E+yN[Gd}6Bx6xC?R+_W-Vk־Cm{ XT1ʃzǰ jJj5"UMHv_eRфn"j3߆xAÕI׆[['J^=u7; W~1_H-J ?[FXcs6̞sqvoN $$$zϲ4D ?T7IA~x(mNԦ5N\P{ܟO\nq45w!::~2=?fiIlKnyZl7 m>?[iPi9 oO0q^/t(̾uK`zef}=րf O"bX!_Uhw6o#cDO;U'\TH[K|4'_8(p7V:icp|6(DvXW:A ^m+);?CDlIź~ikd|G)fpaP~]-|."9 CHtw Wq{~*qxty?^S!P ;{MHu+`f>7" v͈HIr3TϜt&̏% ' #2y1~Y +>V`MbIh>· bqG7*S ;ϓ< 9jodaWB 1,t[/H}ɉŁ!23 oZ;S#*iX5>q}#i.}YxrSE SΣta+쁉HGZz2MDHک5D{^@%~ix͓D?xk6^38oótCh1VԌ~ȫ !>GG* ϫUSE8/~@m6\RypiYr+-c!|*67"(4q+ X=y< %Mp5s.|ĕ41KGG(Lb$ HWg7VSJW*ޝNIWʿ7i;di ]|lZ<\)ShV5Nx"1%r)Y  pP~@^0ڎds=CG)Э'p_8y/pZ'8BkĚsiH @uj؉TE-kg[bj9d8 שL2ji qv N7U-TU?.m:>&a4O(P8<2ɤ(edd%e6>Y@BSW$R`1G i+ >K?<9Dp֒IE%>sC,S 4>6 ޶lSG^`r:@[9ӖܭR$s6)}tggRm-йǪGe'2m&GZ~u,.jݣBs buvdXLɓs]qP1)i2uwѳSrjs@k@// [|;%7.L'mQRNF0ZD8;f5&yѭp8yB$fp~h3qnC꠺zn# *FfUi"?Y8aFݶզרR[~N7W$^u9~RM¼}3.ٙM(u,Alr1 '(< )'w%s~+WňcepIqJLg1†KwСZH3Zad&tf^ >0.?Fo$KNc*khi̢:b||꥙9G Ȇ­NTeZȿ1,eKVZ;?K3l {H.b"7'#uMhv~ԁ\"_5l`tS'1)RQgv7)X5vgPkIz1Ls+L~]#lfa:%^rDJ[_)MizDl<nt&Av[C}gxv)ĒIUh 3 @"2҃y@ɢ*}N`t 5GX/ebǔgomuq߶BE,g[h@{ObIW! B{ 9 .ٓ},2ۃMk1vgo߲P n^ $7q/m9̉n&a!tBCy\XCIS ]!~\ВPu,eL6 4ZRte59l3XA 杳O5`KqP ܵEdQVbwdpW3WK{0TRd_l$pLcߧ [)`/Šo.B(P`1|(Œ!`9o&Ƌ:{ǚ\)XzI<ԫe +>cHN5#z2kFxUMC'L1ILxml`Y]Xh(>Z< #k]`-)%]K7el-g M;>.YojE55Q|LN6V)T[[©>ԍ_`" RڥSѼLyp/NJ%$"zlJk(XAXUqy|T:Պ?ek:<?jJP[nyqEZEP%)6;3XII+Kdi훛Q4tgP6T`c77RAί [;s >+-`翷مvܦIӑBsҫn.eoq6:fnYY?X"r8tC){п֖U2bl/|ewaPqiܐvTD#$Q"du@Brp]=.nGϹ\'+0$un zihs 3Ŷ\L-?{VxGn/eJ?&]m5фzxF28Ku9%ߒ;/Vswp5BÃ^9DoMjI3PWc{{OٲOU nsh߷ EGo5iI c:? ^x22)gT_R3=BB/:ful};:pǛa:22fv ق__CҖjw܇܇htIuqrC6|+FȍACX^38@$Ǩvd oӡ}H1*>K%,|:) Z@#(¸@~O ;.⇨i3Dǣt#];)L<DŽ^wC[<0e egPOog#[[hyF3/JĹV$WjL;!CɎiD.=FcSZ‹L]2ፁCQbx G;d7ޅskgM"8H.dZVab8Sq.ImhSh uUn 2TȨ,)K#GSZ(@dM#G$5{(Jy E)ipqvt 2HQx׏CV+#<9r(Pkȁkgzef]}eRh4nGʗd#4nsebDXi#5"oR_)[Sfq&Zrr!zb~q_TG 3L7jзք !cqO #|Uܠ͋]k*Ej5&@v'(-΁ 5\йt~c  ?" {*Z U>ϮI>Gń|Bt tp<[QV:F3sp){+Ik:Q1w+3hIHh$7^c"SB,=yNdvDZp$W:RviFyURca=җ^力j OJӪ|v9~ 6nu*ǔ珴` AkXrpgë狕N³w@v`pf%I(F2u0VS-C.*̐.i%(,u'rEhf=v^ V =wƱJ1۰d'(Wkk䯄x ^[T o= CK\a2M㱾YKY*_O,ܡIսRX7FL{”88NO1Nsβ2]Un=/z\>€D^sH!æS>cĨ7.PZc~i*0"lt4W{1ϥu?}C;]lHznZ| B=ImP@;:n͖_3 [9B"z0%'h@ޡ:aZbf ˁg@r뵭Ymթڵ>ihw{_^L8j\l9( 9|6@%*o;bI(4 P.N!#j ]U3{gpqqQ+: aaIq1ɧ~NKR~&+d[CZϱ<3i*qUnft'gDZ3퍚?{BxkywΌ }vO߮ 0XF;Ԑ'e6Puɞ02]%Dħmp! -%u* qqKэض. -?`hJ1 {$-[YﺜU5a~\`(xh5t;Ԣ &{=ę[%6p%x |@PDZq.~Hƨ[{-ς~rƹkchYBҺ&^GU!s <K`}y M΄qWt6}tkÆeTJ U]Rkγ}?g56d rfBlerШ 1#7ZylX ]A+V~-hc (L|lE2tԛvDow) d, ㈪Ol%Ӎ9V. ܩLVMfCуWm.x/0'8Iaޑq#^l0_HpU˯SiJLrГM<{¤4=\o^tĦCrF)Ng_u͖Bbklbͪq;Xnac 쀩vWb$\6`zWi\DGTmeݬ@OD.xytY^NW (2iI/nUE<+OUU;f0. q_911uD<'׻:?dŖBpMCm-4Vheڱ-LNUB{]l^)qms"[Z@Pa]SP}|OG,lc-=Mn㨩,0Su|LnNS8s7CjPg5*ulOM?1dliP-H&;#쥷 RW^5L.6*  Tuǩ@味zUמ\M;0Ҏ=Yan Bqv~f 98V1gM@kd_gEd0BrxjZ+J?]. )TS+G`uy>{VZK ;VV’>2%лHH٩c$N,6wl$c<%rF2ғYZi9zJx7?/5%͕uy FyvӇ<7]0a϶wMCD[(PWhuЧ YrtFdz;CP7vRTDXKW`&nĥwC:$|Y55(f ŔHb0Vyͪ_ŐWE@cz%,&+navv:71@Am3ĂXivhMej7qLFG%QG- @d(m*`2J X|Rjfa-&bxk͹Ŵ&f>S>lXL'ͩ"43z Zvks[w/DI>#=㴯}Y5=wuwҲt5~Ƙ-|5mSJ혍0h+~ms _x+vqjuc4 =NoP+LsVpWiuB xcJrJ5|GNius{'n*30R96&f]442 u~|ݨtsX,G|&vX&  s}F9invz0jy<8jdlz^ J ~3s%Оf ca{Q~0xvCZ?h* CQ Z$ YVr>-x]16Sꨏ)x{[}pzjwDmMĪ~O$-\7-{^1a %?HCޝ[ 4p Ak /!8ƴOlF`n3kRmZ$k#GadSp)';  *&҉m<{&'R=Ax$cCr [&.NT^;I_ˇʰ*ШTܹbG,Ҡ {Od~wJ5@j!)N% W&6<[W7 ԙ9o,Kbޛ|5?iO1l*tp;呯x:"6Y cE( V_2!n*18Cgc_q] KANj.0̡(`Mg̽/RPQSowf!i%ե7\QL;n˺ҵœ@d$SH'Fͻ %i! ]/ǒ>hY>+5. hALu荐qMГSԬ ZF3R§?<-!7v\N;QE_y΄qV2T[TLA4]5 `]u r`Fs)Ԙ"6ȪX' $YiCs>äڲw%pЦ*2E)ߩĞ|yP,rm}o-i6E ȣMa5U2CT[kcS!6ÜFK>̅;vWd,Ս4MfFP;3Ӷ F=q2׾|U)~K-JIK4 eRrfYJ.Y.10Psy_m4[ j2GKn$+IFN|¢w۹[(:-bQ7a^>d+?Ozq8m-+ͱĉ01I3B -T[i4w:h'5vMu1oTYyN!NoBM[#pچBE5<X8hYd]Kdt<~^ds`PÌ$u8ήd zj"#y MetPisKAP|12QԈ7F9Xedk¹at 0l ~L6Wo~&vVb$쭝Ti[qHݼ50YidS_/]Ch*R$W`ԭ7=aSQu=d_Nb qaoS`|8"& 2IeTR$(zE, #}?s S?R k`d R&RO p7fJʚH[_Bݵ{6sQe1khmRXmKxkdJ\=.+BpM KrGCQ]0}'dqvQ j*X=hÊT.AexoґEV]-@WhDHHv Tzuv*gtOx7K\ =m}sК> fu$]Ug$Y/Qzcڍls fwШ^|O ,mG'#)°U3K-f0e8$[ݿ@mFH Ҍ[RYjrxSYW*8p!t`?I {!N8 3rN!>h FNR֧2 tu'V+)Fz|1-R櫜9P!b>" \[Vg[be&qnGL # jhSƇ=%¤*Y&'#lx%X0=&]dS`{5l GhJNG;!9k\6' 8ec>5>|R^|v>ANZMeSof6\9fߔAw); >ֈ 0MOQhJFRlM;)Gw ϟ\xajQ?K7S Y!eAab&!NV:}6=QTv#Ic(teɨcqa'G1}dNqq`4 kZ)-;-ѣ0 kC/R>M k\Y/WnsϜw+̲  KLd<&/=#Sf6`,5yӡ&a{z7ؓ g@#0mE7%Z=/D {chqpM㵏 +=ÚS&.($tITd' }-x_^/\bHW篧JfCjF{@{viAО`r|Fw7r~#VЊOJM%[fq婋 cG{Ve^+t*Xh:t|SM$T9o:#%TbcBHGV/ m8UǂhLs STS6Eňcb3R'V г{7MQ NDNSCd TRPm峕C{Z<EY-eO;vŮ:[ϡ hA .잶DZW539- {֠K<:@)z̞TVHPnGw?Lsԋ|kL,?)uxn>X` T)1Jnq%5UX:$^uG X]P9[H\7UpcY"pƴ5e ;cc6#\J 9%DǨGr,3&J >Ė.] [5F q Pg+SWZn-l%f#!j%TaxjvTdeojU(H:cAUmʢmnϧxpuV}?Y cѡ ɾlƄc%ae"z clrd%*BY{7Zb{.3<8#kbF`1{ ܮw0㋛0"lu%9rke~\\^ޤ{p^g-및i?p8 5fJkOYd1Pق(2+ /< Yؚ,+j ]Z-'˶ZСׄq7INOS^hetMy,j=K|Cpۑe NOa*|HJ.^a9$澌73(B^+)@1v61: 6фqrRT(9̀n˒2$T $iOjO:aASYQȇ:l@LBKa#JrY9}x^Ȧ"| *@oIu>ZxFx"3=BdWbhˬ$_0 ]m_b-9WB5.?Egr}ִgH!A|Ug`B9i?861:[9@/HUOo~3̑/+Qx>RxR5o_DwH(_x]1?R % \-}q}L7E9Ί,X!bP*T[#2߆+kOq nk.oٹbTo/Xh/RM7m+^"ǝBD%8Ha.BOoЙ^hy73>(qr?7͠>H=j-=<(*<-BLu y~D5t|ՌuiڽӃ$A0RE)AVTXʹ.ͦ˜@ wm Pl. uYEx[ʐ6vZ?!dQfqNpdV1۷ c/rev~7A̐&B\Zq t]? )Ri ,gL B>%64^ L]s,ԟhv 3)>sX4˰kc C!3`f޿nezƶ6 o\&)t + 5 ʊ[|Sa#g7ż%##@E=w|dLjyJ_ޟ׭LM1zﰁQf(~n'MV?{Hd7 bw0=|&g g0X} /j*XvH^"COC(/8FQ7^NE34\*+mt=aůWE4c>A/ a[۰S .|.RxAp Ry֧Neį$6 Z>r(gSԣb&en(brj'?x;uQlVHCKȣ X]ȷP8Ŋh*R_w0p(CGT)WV-+љ2GqwKgɸ@o|Za:*CJlºtYľG^f,}(3&0~2}WBJSnndnYӽ72MOF|`Gfö j/*#g)*Bqԧ'FmwZW6t(So=Zm]j[`;8 rV7ԗCj:~b45{ńAژ&fk98uV$)eQ全i}[Smc]` B,sgXt{n*HdqdD|ݷ+JB^E'EȰ X+clw R#\e3腠>b x.R3s׈q%U ZrzMдJKǾ;YO)BfAVKUMϡ䉹t62W! k҇*G_3h [2GxuhՒ7m*ְ͎ LJH|0%3̋m\\|Zvj1X-1]3KZLAwVM Bn#D-f^eΔ*:t76 ZV$9ǾeEkN-%hUo}Iy\_fGޤc!0ih=p؅O˨V\i'< ؼC%?z+[]fcs/D ( BulhQb"a D,JA3v"3t&g 2L =T!|^z*}j#`3o@6>]:pT@HSWН՗-y{{nPz (;ZőLWj?! ]ʯĥoÝؔNҦ#pm&[KKA+"f_ȓªI fniqxZeѭeuVp\ #u: `!k0r ǵ<{iIo"2 ê>nl4fv8}a j~ 1І?%Y@žb;HfqۙpYA43GM"ϞP U Sn|ttD\tj'{s_7DN30X*I(k`¯yxU5[I}Hl`J-Q CW{o!9MT׋2i`|CIBߍ<&2XiKYY>7KﻡlhF:'#եEM2rg}hXӒj?0c;5#OCճC>1m$󸘹<-kG!N/LWȱNOL,KD3!*!3 `3ya-JSJAfB? 㵃_9&0gOPG VլDyz\3JL dі'+#/imjdzy0 @2䳺][k.xRX4tx'51`s7Rc/]Wѣ MNBQle0X!n}chOE=lR_(ZƋsHl~!W腗e);>1oIE3wH,HM(77R:dCzGQ*xd/c.C\{b0n!BO$צcy諁|\{NL]Ui7TPaJJj'ͲnR\tjFfd'm\ьQ";&s˪gPoi@%>|%-SKUN S:ο6z)G7ZF0?pF$ڻ0:ߢ dDL[5h/d"6*뉵(B˷6b\$*J&p>=>1+ q,&4"/uV=cѝIB fG]|1Gh{aE|aТűو\Hg?R 'PȟhK LmD65:1v)#w(cʨ${n*e胲 ` xg񷹜д2LLdz|/M_k,Rp3IѵUa#DWC9>l$O`U'7\b[6S js :d*4 R?`4ڴOwkMMv3243i 4cm )[\`iYW,uo:5 Cf}RpibٷE;>T.Ιe:ջ.i`lx@,I#LLJ7M`4}fc& [O)+ I6͂/w̼N>^gH60HB_-4 zP)Gbg*7ם/#-S]r|]:(aU[хѿU6KA'&a>2(OR@ !yᚿo(: CigHl~] <38T%5+{0 ͐-xQ"m0dF6byQ:݊΍eKFoU׬O/XXe֑>#P) 8ܿu 4eMn gZ4/n$t^Xf Đ9vY-C@LMcʳl+wg%\{v"K-kr’?Ξ7MEͤ iWg? g=Zز9}K\0Zx )g_*;FrBBUDǐ*c=_| jƔTt3q MjBAM?UqDŽe5_> BI;f;q4Z΃w|cE)/[m<v?(.;C6An-9SE<(x }֦l.GM#c"AWNYSNt$N3en Isb982D&bS Gzi׵+Ew뮚:?[W0X3TlU֜]]}t$WFzj(`4 l|X(}|dc+_j5f13DᾕK:C Sˍ}z`ʪ;ЕByU'`^ {ژ_,M}r\S==TULbuyH8| |hUr!-g 2{J24}MڃMѣy[SM Dza1hm>8|1*S=㿦j_ԂUci+QD9Y* T&A2FE/UyFfa1YiuːS%j5Qh`T@ƲD>(^,sx~!w)ds Q@Ե!oU0\}2?^M\"bpU@jUމĎXoSlB 6Mhv`MB>Q<ʒ8В XeRq\ˑ2"lyf3Ȧ 5DU97Xm |+r+MՑKSLc o5-d\x5@"E8IdnR( ^WE%.#)W#nV-ʐe&JWNoxQ?{ys-آ3; QIɷ<)_am jxq;фD[a͙nB/أ7 b!(3WU8$'^TáI퉰G@r gh=CǢm0F^z?I_cاRڣ :ꭓ;#Ǔ]T_[j*}"Bqx-t_XB[vVwoH~~~Ng#&+2}!vۮ7By!n|d^@YG$E/ڡ;@D8Buh jNd٤qzE5#D/6)\AI۱-Q9^ )=@dh^'i!Uqhsm4֏l?s!q,YC˅tH9Œh-4e&|~ۉi6b ܔӕ[ jh#FY[iZMਤs~EX뢐 tƿwC3Քs|X12;a&U)>o%ϪtZL}Gf eG5#AIM"fQ{Jb{ZR w6%4JK%bKqFKicKw+Ngmg3J2E6KX|# ck͡⾽6άbes;{ACx‣ـjx\nV.W^n$# SSʑstǁ|iSԿ !V 8o^WOƬ ?%~v_BBen?PܟmA Ȍis UIr`O˿ 7kX?,~.^V6|>u!K`W2*?ȂZtUc`@^|ƣ% MuNegd#ԞRBvQg4.B*Txq0eGU䋲'5D9ĪvN>h](X/k;(|%.ڏL~|%yqBoՂw1RY*o(>pMg}JCf;Pe] áECt8Qdci67]`gj`hrLZxUkf]sS48%} [D9 "kġM'E_%9>Rkp^F΅~CU ӈbfϠntSzx?5 \ W@g ȟ$U8u8Dg*)oЀJrxM %-edҚYeH5[\\&_`T< ^-='r pl#n ;/ (5䩞Qa$zP[a--; ,O \G*5ؐT$wcxNeP)Min,V.fh`8CKD8f?SIsZJ,n<:V \OWի!BT0sBCTX,8gt)&]=B#=۫nQYv?f< 9Ϥ= N_X>G}: !LlAsu=YgH36XtDa?F;v##WJ z+򦝃z„& ۷4tt`7pl`UFxˆ D$CQ ֶURݥ`>cThٟ@&u) 7 eY$3}/k0vH K?y-UM$\27l85 :([j\_t]O y] V|B40?2kQz?ā٦t1^o?/pӝoB 4Fg nvز}h;׃[9c8z'068M="ԅ9to=EDv|k<-8o@n |&7A'rutydae;&N¯*(jl7K|(%yQw]xACm^2"H[=Ob:,9HWG.\'ף l lPBi;WLAP{[Ȼah𲜨ZL`$z cS=$?ޫ7j9{E'Expd &G6p YE!ryp1+u5wn/_2sA]+W{X~Y !J۸PkQIĔ 7i2>8?d^~2uƟ%RA\ߥP+Bn KMThIL@8#St& \Z&/xogTCW]t>a3z3i * Mn (E=Y Pl੅(':<5Qvaק^ė?M8n*F/_YM^l˕ EIW2?! 9{u&.|'j@+tE'Tq-t.+W+T*J{!fvRLV{y(Y3G'n< N@Lޣ>>Tл0X [_@S^6OGicI )" cS8q \[2"cE:}&}t/ѩZ7ڂYAN/Xl³`"Ayob|WI(GI(CK\ſIF*\K&rK( +E8P~ԕ/$O^Tt׸ on{?ކ<(*alCHF5 >-:SEJfK8@yW,+xe B\ NQ?"ꡜD`{"{{fv!`x=if]TJ_ssA )7KWnԻHu%0@̞n^XtRǒ*  9iKĠ 5iXݙ-I=X6?StvqK@k)h4~[5p==d {#N[X[#)\J܍W_Olgfhш+cl؁8:Z2]s̑ ڑO9n:ɺt3ijʷFovHA{d&#ECs1C>,[ 8P"b4g_,-6UEFPwb&t>bVc/Y☣cʓ٠dD"" c΢su[rWVK:ͣ^q,2M g}88X>eۢ0)o!ъNci w\ŤT5 ɭ7P+O߷J7w4IܖHgL`<ͥ }2^RxJlz ˋg(o>t 1? qeöjWR|)JTGyK||WRk:Y*j2!zmMQtSB6!ƳWx2x_b A6Ϭ죂'MK`VDZﲖ%#MǂCSvFv"ю=EaԮaowYG&WלI kyrxz0FZ:}$c faiFk\LZ3.y\Z/VuıBvNp(bv: b|Ψ,6=( K7lP` "AyU{Z#l)P*u9ЈizYsn>s>)5>prQ`5Ƀ3WC 8R{>,Jmkt=޼^G%=m{nYNڮd~G@*v5\?]9еM>l7=(B$HEMv< _) Xq1]ZufTH*4~O/MZ%MPW7-_~~^9Z[#vY_r8zg{6%b6T~$7x:x2ϰˠ [oǵ,_DlTYX172^$lwpdP\fA+`}{Jss0聭L"4u}ar־U/'Ʈb %`嚎F-<-~ Tj}?Wqi!@ dab~O^O[wRJ~!S4~:!N`g9N4"4d6_;=7.VN/"$1e3?Ւd>"WA8*@C7[Lo,@fc\î ;~uGXE|o腜ZE\Csl-K IP!_G4L[ VZ1/6lԡ&Q޶lp~~yVc4(ATխ?_˒uD"ƝM֎>2)*>$hɩE//A˳(~&&r^*2F5XI5s!k<)p,z*2? 4b 'MA\ȵW$@;|2*2{ԐĭCxon/m--;مPS'W.KZ/iI ~3! 8`%ue{X7W bkT:W44T16盐nmw([̱ƨP ډٳ >˺b*OI!P X*IP|q8ΓKɫuH&Sr*H^5}.}9:j0Tp3X*FO4 {<~<#I q 0=/59BEryJ}=@4͍.qn6l1dDB=[ء¶j:_^280㫤fir{ <u[eb߸`RK.#'cmӃF~'Hg Oª=vvd P9dG;ǴE|]_eUX8\4ӳ z[;C;e 9ahhne7ȫ|`A61bVCf656T;=>g} j 1T:z)!!v'\"5R/Me`@BȢRɘ^ Y1ˬ/Ox-THD+ewij>8(#wT`eǘh(p:ǃ7X\Nm<)T7Y?X*Gm-A {mVmHZow Gta+jC3OɧXa}?gm,ۚvgQίK{0ݢ1VMCsu@$^8[_dd#FRkLH&v~3"N 2%~f!Sm B޲  װ @ e%3?!L;3,:/ 3VNLg|Lr(M[aJ˞h1坥0'8Z SpMAv c5Myp ߃kY4@[kkyFtC .t7s6,gs_,$Ĭ57Va\V%KJ%$dӱx$ށ3shH#0XrV'c}sܯ6oLW_zQq׼JKTTWCf*YTk>1@ ?Y_!xm_mP6s0b}枯6dnR<4V%D!`+a {uR" Wmj>d<ٞI ]bNVp߷vu*A{}K|$ݬU[CFL^xbzp9'c䟢4/`77HPD-8>a@Q i%$ XxztIl6vAr'=\Ry{sS~ʹAWMnGrS pSxMEb/DW7(&D%<;wF4LIdY屜QeVSZ7NW^3SJW; *I/~L yW> ވC&[4,$_+XsANmbgfCdCyq`؝%ǕE {M_Bd>Ln:|b!F| C#'d8'mk/HR1YoclE㛀'V%i.Sd7$GųR| U$ w~W;'" \Y:&&Ӊ!L_31nsьU:30@␺8Mf$˱ ީ @h:bB׀t;kW"5 _thM;Y@]_}]ﺨӨ @66aH ph‡ *1E^3?ECQR%;w!p5k;Q?NQs}"×"Ya!blFr5?])GGeb^C "(g2} w‰{-ܒ^;I+1xѣ106Z3&7N{TjGd3WA , ણMЇ5tҟJjuE|c晽5S9iH ~gv Yc!S^"`^'-\gq+P uPIq\| }scCOۮE[Ц۳SEb51~>WNk"3|oo~{n/= BQnu$zD< 6c=حȩ6. Xl%wLw ,mF fSr-+NKcUwD5%[ ed:yvg{SFStɕ48ōoԥM?XtHH uxihL֣Υ7mj46wIY>M/VzbiIP|AywlJ +]]H)̒] A-91/\']t ~OZO"Hj%EnBp:=Yv#m"u hb8a{Ͼra;X>s_T ouLسC`<*բ7?%GINB 4Cj(0^&m(Qɐ'wНUmkI5VEB-\1([Qv[uCb-Sa-` ̒FB^?TN)PP3|پ|,1lԅ*9gT)onӈD6/4\Xkm&""H۵|CU9z=yvtZ) XHD,q#$&zhU :j>57x%]OuU@JZT-5Vb|IBW3d~ 8g=$[]x@1[AˍI#gp\}.onEzqRRn:PYvVr@ dL!ڤ$JBYޟPm<)PIS[LqcI"<#pX] $Ew -$;*d2zaNjtQ;9?hbLU~0leQ50a,m)5X{aP$T,"C7jɞ(:퇋D}T2a {O2Q 0F32JG&e%\kb2}>X DKL\UOPWeTUFw2n_C@^t+}20!vl@>fӔ\lhGFn-&ʥ~}'2S̾-F(2j  &n"fU/)uZ3b>uXfDI,YM>\ #:wFVyi|1lq1j, gťdq¥q5lfs>z1o\4{kW"ˊcH">T3G^<63Oh?jau!Ke~7Q^5~Ո y!B|łW:6?.Y!)̫xwp{:t$pq/˥?ʃƇ(xG#/^uTa<1+Y3TmὔO#zPҬ3(o030zayЅr)Gp(8g3#n g~27z C2`Qxa.3X iĨ$;%i`>eA|,ԋ\%>=n`YBd\@emTGYBO(~ baQkukk" x׶ (i:?궡A0wASw:ʨ j#HU/j54&.L8 oh.b2};A%!Z 5tYD e@tx˚/9BI2>og9b/D-¶g mQ_ul0dS[v\blXThhLe,KTW%[$6\Әxi>П[䔺a(y*)oGʄe=R~{][fA0-4}vI|E-RpD1+c?:A{RD =)wRbvj^Q3/4-ƍl|M y= <jh%Z9wHDU% lO:zLȻ)/jlptUtFl>`(Ϟ2iWJI3/COb En7PN>/6^#sX">?yɳM+&Ѡ譥ÀNDDy%3v-\.IANB rm7ڴn#s,]} ^ WeXkDc_ E߿[G%DXXkj̞'F't4"n!lc==r### a^SZAqX?ϓdAԭqcPxzB^5N&أ1T@DaM']x1Mg_>e@Ψs̗gP@^YܚPӎ v27Y/W9߷du,j Z4&{;3ѭ{p8 B۔etKb)l .V\{¸+^dըCJ$6e)BR{vS !92á/_kf2e"R?vB0ظ4/QΩ:#B֨' $S7{0 'B=HW*:7}Ez,i#>DGC̥h AT[*7; Cn˘J l)({·Y) 7B<6PQ{OBggbsCsaH=jjLˢ32 grM^r%C?*z4o˨< Lg#{0L01RUtk. 'Ţ *<_ᆵIzl͍mNl(/9#c WIk0 ̓z÷8,|8L_Fn9}?2 7yL֢J ْiDRiSn2)xg2Qy;Cgʊ)%:7wLMhj=CH&E0Xc>߲5hu5Kڷo" U/M%B Ry.f_H{8Эoи$FWt+JMu^sL"]ڷsv6Y,aИHaV\@t3m LL}'d_:"B,nOoN?3fa3͑7Ҳӿ1dͪ*&8e2XH14~UH>t!([-SE{" wfr- b/!%4H{hFٰSl#~eVrN@ϊ>$)y:B GwmQcZڒ~?ּAChOhY52C8t{ty!`En'3{]vkw(=/JʾL7PN |=y<K*|eؖMƅ"A ~\~%}r r M@i`5klpju!Upѱ u0Nݽ mYj ejvQi !׋}2h}TB2l& tk2rѼo|Obp“7oJkS;Gb}Ҝ ~ LM*~䭿:7vn0TׂX :הZ*GOy2P]E#D C$WуIpnBNAP Bͳv͑k$E&$,hOCϹRmT{ ~NpfUb_NZk}n=.*J{Ryso"o<NZ\ (b]DD|g]MjVU\4f7+$G(Oi y M)`*e>< O*_?7N3Aa6tʒ]'`.$riT2j.o7r3lc^鍞PzlAX| _uQ2Jv _46"KS}F:TBO⅛k%KEN -3'Š+RS9{`[=H>?-sk  ~JnWّSӳ/Oba A(võ#vfTZ/X`4GP0G00泡-l&1>'pWv+lM U_g_EV89M|U*L8+g[,|]iO6OQf<' #' Tćܫ:Lbeqi(>?M_eno(ify-#^51?VKpw"*h&iP9v7L;ʅF .4C" IѫDY6p\$?]~65Rd >Muֽk$N0&Myb(a!޳%)dg{^:OXl_ VX,M=v| O5Ev~yǩt%hq.]758+>w?'QsOA.=bҸO٠g?UZ.4T9l'300/Ԙ28tN ^~=Z1Ӕp" kҺgI+cQ*%X_s$_Z-Td,AɄ<Z?ۆ2&m0MuLs&Pl3Gu7@w%3c#8P7?Jpx_ {~ڝG1Xaʲ//qcމlg:*gke%I?Ćp/!w-6h+™6{k@2¯3JEm/ [};&s~^7=O`jSZ 黸UEyDI7pEptTk'_HåҫC$av̱JfgIac%ԍi<9WPΡ9iU{ć2SHĆ`kggթQ1n(Ǘ{ePd{磜n>JG ~()B^[dzǹNSfX.1Qժ|7 bE^%Ž9W:z " Mof:qfOjwߧ|dKv=}͕Swna /HM 4ɫZPQ8z5w[e|4ę I G=}K & [rۥO >?ٱFJE;a ZY>$;,w ,21] :c =`=lBGj …>7Zb=@M$fLSg0SXX`.#dmf{` qaxL{xC&<ŋ<4ʓr`AypO Kւ|mY^+pvԚqAʜ:ۜ?-e-J=b8Y?Gҙ0紓yϛDսc. wD>ԛF'oqO6ھC +r#а0]챣*ТQ1̃}y1Otm%Z'dcƝXOX%iKXf msV XoYo'BJQ꫕ȠiUa'ML@7_Y>m{<<Fe~[_O[|u$ {IFm 6}4~PZ=OaJ6a3\a3AR%n}Y仟ߘoL+!$q0W&6 $k޶[s Y 0]e>'kZ 0]6Ўn U\ 隄9eͷkMwZؗBBlT@P5Z%Y@B.۴w7Tr MXwM@cs%dF_s Wͨ#{5$2APyf?ij؜?j-GҠ'lƪ -;GRܭKei3Q$:=kzɯb4F 2-C萌x K1lJ(1)ؼ }>|A?3:$ N>1=άPq+km#\6me<ߞ>M+$jy{$F2N 8|KKt6%:Լ~b`n/+i܄Ԁ'{ |߅i\D=VJգMxNY>I']kz.hӐ)m H6kC."*ۡƷ|hbKb9TbqP}/(S"U/:hUgK(Z{wv$SlFA`Vr\QO}I3ʯ"πf1܃:b!WKn|Q7U7m$V!k͓ejJUM;ZXNP4ue45Ѡ~zߊh1ZenUdafn =OECMq,,Nct' Bɲ0X=W,rŒN&.YJ> ЂU[rMosUvSGV9qZR%,fiw=bCeڢF-'|vpl@.q/nփ/Wy<}ŏ `%RB}trW '`1ϿO VPBD"-ڰ,]wxOkJIw-5P>׻4EeQNfm**Y\,M/MmM_No͵ahω Y|7j/Z2v=k4D^R (%Nve4 ̰MXYY(oD)+Pbvf⤧{X:Blt4d:Ő޴E81UIAqdRθz6-%_|.u,nOpPY)MU"aϭ8nT@kGt?TQ7|lLB{wS;1:Dz}~l4ZHGٟ I8~n<7A`|ְmhk t, קUvFMgXYC%g zȧ݄` 8r  }FCD]jLī`kht8bva?L@äsh8CfmAH-'2`jsNBn8}abP[Jȍ2_%5<͸F[M$v ~enE\#SPA:m*hw˵CM*I  tRʃ1PB OQ­*~}E1lAhT$ 1U?$v X|Xh]<ڬT\4UټBX( Avډ 賭vwAkd%ZRK:܌$'?vw_Uل!oXٹ"v‰t6w !:6D^a;F~%e-"#ob8+_ ,v'v´u ϊWk;LX{15rmbuƽALYp6[Jo {,v.g =o_*ޗ|Y.I|GVq:1,g߫,C#?ϳp`Gr8P6:i75&#!^@l6\bBâ w@D0nJ7OŜ$Ub!5KܤrPюK<Ю-m멦RKW lC!\OP0c obm 5Y_ɚ yyrЂ"͡ӫ tw>J?Hm4w~_ڊ5)j\FaRQNbM6$>x1櫔Ml)m`|EC ߟ+xX:qwb2UVց[YĚ',n?fp񱥣O((pMղdi1=SN66k6*sp1Ժz@K uge" Xl׹gmƵWD8ОXF,C=inZ}#uj I~b;֝y~QbdMDɂvRs3}Ӥ#mY%i yXN~BqY)o *1BW|W 3 }w44]k [{K*,`/uˏBS9rdYj{7ƾx2iJeRh(5*ƙ831^<;z-jpГ8. \rE<>y=Yzkt _3g=^I1lG/hаe;#YB?^[ kپ6EtTm+1㉄ 8STA__~g>%5y~$lkz v*3 ѕ&m5z曪!Z,[8/吲,;t=w^&Ŭ>EH:ꚺ|g6ŞPb`RzU,P u _Ndͧ8snMe&ah˄{#!z:gA\nFbVX*0fbSVR)żLBědp2!kf5o({-!z13Bv$Kh*6ch7+#: ߃6چ.LU<9hCQ)+O+;v-3 j\.ҥУ}}'@DF`9wfyhN"$WO*+\qW_SYEIJDUBPˮ#wUs9%/)f,C$])e%/ЪC1ėf&ӿ#T 3.zP,Vk Vbv1^W \{8eDVF"A{uqU(Kr]ZT1QaLQ`rqο_1U3rd7?a*vq;䝅7;ϯi!hT=JtFcgQ"`Z~#y][.)˄N= tˎܵ4 L龵on.#g4]hm퇨mqB+itVqT H,o ՀeJ~ōhChq0i:ޭ0%ײ,IѬrnFJ g9ݔܴnЈoukO;Je?Cuڅ(P)AS8(iπb~>_UMmI{B ,Td!D(6a|~=% Z ,*c[Yı8TkQ䳸e" E?'Q"[/8fjA8kӡ梔 "rDH=uK'MTlhAiT)x\] X[ czZd5V CTi:Ӫm<#E-T~MJ@h*[ťߝ<ϩko-άX,p$>*qfT5$%TǷ_42p^z C?od#*BuB?`HfR6G'O Ijq!]"Ke5MV㓯Qb=; aͬ'<]furdp\ x`umckI(L3LɈޞ T_Ockkvxt]3uK9۶?%ĖJW}O.ѕ/9+~b_WK==]X"R<3݂?>ykӎZ H8r {^(&5nN tefOUW zK4"Yk?^ͧPt8n`-ƌ=,8!cfER*Cng<e 4%RRzvo=_-FQa3,_˩!E{<]KR~ydBKh+l4qBei, |&a5' ~gр@=!Mfeqv% ;J)JYy#\j{aG(4~Vբo{dط F,-vr[tn^Ik]ө x GI3͍L},Gl,,q +!z*/eJ#Iѧi!JѸqst^v͒* /?aŮR, t\YH"p3`4!elD|94[&# I fF31EB9sYNژoY;PA4u i4eסe)}G 6=, ǃ 癁$)K>Dj9-d0w "R NzHfH4N`o6yT5D|vO~gb\o?<; yT jU$oHscehL' )X+==r  W8$0 1SeEETGRUPnswb>cfGLDYk 5J)\͌<9O=`o 3`_Qso[0)x#NΣAH$=Dt$lB1&fɱ p f)kC*& ҊAIc2YSrKEeOKlJ4S}zB ʠGJm/Zƣ')Z TvQ7.aghi4K97@5ʳIf:Sߛ zǥ Ĵ=NZ#X_@G.XP)(liB3cw mƷG]U qYv 5/ qaс& E&BŌ2[8t)jK~CqHJKUm~! ጡSઓYNXQI ie$E(4酥)[Q^](6oAW4 ӑ)^ :qm+"uuh J&6#m gMJ^Ӏ#}%`?QԊ!=BUFJci b5zw|Ky˧8`7R:>wG k/Eacœ? ]1)]+tX]fQ5O({i`iթЕ`#mXu|9+SXY2,_ax4ҩ\h]FV;-뿼Cj _e^2}qw|,4/|1Za#DC"*cNqm"rucNr"YYDm?ei!fy5'0~>37j&wGSXcb+H˵nEMv]N-? %)P#1u;r9H9xL@!\Ft@PRG||b߫}S#Չ#n$F$up_b|QP6ptΔ%!Mn*Uy2īֻ ǶJvyÄd:I1O.Qp"Q VَKKk(]FǛ?S\^#4ǎ= 6s|QȎbUv5bGN>BÇL^srĔ,\s_5 #R B/GA  Ȉ|#;e9({,ٷw9-aۡ1ŧ[3Cl eEdh"_$ia6wI6:lDL|!T MB¦uYeSd&O嗖݂ɨ:2)B7lޜ!iZw}+zMz QX  ivWu7}q_s.GX( > |_CxFxGw|a\wC<1T ]VZgH SdHVO dظ2|`Olral TfLOrh}&g1k͖~ڋHg'1?Vel&xH¶B26>2yPcޠnK+8$iaLr%O1 `|\4bpؐ}yOGfi}rBDCГX;|j@]lwaU~̟`Ì)2%~6VsW|5/2|4@ORl,VJƩ?:R Roae?#PrĎ;3BJZƈh=@/Ov  a}|L(ׁqV8v  @oI* ķ+" @Wdy/ m69JQʹ L݅4loD+9R0Zʡ[

_4K:EXMڨ7Ki!!Fn𚿜G m,l\/zvˮp%Ǥq[g|&|guQ%cUq_MDK3gXZ ]G:C lI|K~wb1Ciko_eNFXY.*D*55Vd UMs%T9!!v3}J J w"r(UWKAMZ`q4u tB2u _&d%k)`2+@DbUWb<Ȳ19Ow$f+,  @Vr Z*4 ?UI=jZvOE~^ei ^)C]O/*xuUxNAD5*{UMD?%MrcRi[R?<^~wi31D/Dq7t 9^3ԊePg  I<]ߢdq'7֍;"]!zyD v+^PUF{Y5(gZzc"Ij3=)n(^VWmMA>}1;#Ӓ 7e2Ճ+ *_[3lFdy >&oCWϊk$c1R>R*לtSnG|ܺ'k); huqnQ@)-k '%',)N%%;3s"Efz]˪R_2 oBHk`sX"t]O w  $T8יa(vpJ MhIwaU8J_OI~)?+-v|iXT/ /t?\ K0 v^K])2H_㗺_*O]`ˎ/*pDD%AF&> p EQKIP{B,whfW1ngA Bj S 0ہ+P0F,3{ P]G>V"4M$HWUx‚!Uլ?WJϭXEH d>yŊ{7l(U:+sO&<ſҴ>Tg\2u2p?,0c;X'j/<1kb$Eڒ4.Wq!RSsici eR: =mזdmny՝܍hA фކT ɮoXIȉop/n >ԩػ9t %gC YՐֆCDUzsxl rm4Xqк.:`yzy-z?vҡk_S*ڊ)ܤߧeU$$ǵ*uBYcY6fO_`VsE1}'JګfuXTzvdSS7O 2[ۀ`k)լّBJ[^9? DRf޻ f~-_&IX3:0ΣY|qpbjs 1OE?9g4 s;hS@J)ҔFFzknխ%KhX‒Br~œI _ K=ӥTLwee!\ >L7:v]9;xlqo"%(N52a\o\x| X)7smX`8{0\ NBA1^Iqm>lk d&48P49铞`!T1U[zw)`nXR}U-o2l>ӏ;75PA> ,7- >,;Ϻ;NRq#sB]6Dz l ۪ iQI ߏʐ\CNj@ڦQTC^WV| ά"bIWorh?u!ͧ)O}lMQ ~ `I] ƻrڕuM!8=t7ڱQ M.{⮧'B "]sj%ZH1i枻PxkTұ*-)R,X6X&eNFoVÉa9yELZWwBG*G㓏j"|b²yҪE@eٜ!W] X7'YXfݍ?n<֞.7]Zfv@%0Lv@hE}@"}ҜcyXY6W"Wϙ抍w@5J]g_S ޑ'eSB%fq(9?.v;@`]{#k@Wfm! QJH=[ F1_-m[)okyW. V9MI֎_zDb$ኮ qu;*n$;;eQPrۑpK&& x1_ĚnkqL~Vigor#]a}(*vOQާ3ES-]c: T\e\=&tTYH)uj}/1 {UA&@YHNrBX*WJ8xͼzPĮL>͈XI,Hb^Ta33-f\) :O >7a#eakC٥MB" C}_&Dwe҄ޜ F3irf̒gd^ՈpUА dlߓ8xtړ_BZ +% *&Bi;Hq _b %fYOzՀ6zS@_A`D)=l]JNwԳǰÎzP5\+_k4~G>&}ίWE =b ,kVذ!Ok3A`jYTzRm$^';Fm9[,Z襬.tqTPnIYcPE jz\NzSꛈ m f|`c!MxMmiRs QX= tWOJ.zz)ٯ{1?M$3b٫}aѧ@Q*9A6Hg*}5 =|Ϭhf՞\OY /@1B0}z Co>p}Bth4|^iRN~`a`+F֭Etnnko a_NPZʍcxC+RR*^뵧)޾E~PPp.zByEA/Cy*S9̺'Hw`7[7]e759 4IVOEjzsqU||%Tp!{l0Dڳq:L*Hؠ_Ag7猢xT9SJ"gkAgMr Fx CiNp]#u8"sߤX3LIr$Z/,0?iW/tCCv'lF}嬯]Ø^Γx&Qr7:lG1t^2QIiRR[_Q14ԔYبΈKj.֕[RIJ~=TbZ UE15nRgлF^Wmpf$BC*ެGS;> Z"Boj9c_e+78$fr?ίe*iYH- `V\πѤ#GfpT#{ {O(Y/ <86@WVJċ{*dќ >2|&VZIP{U4,[tYmo^ {qPϝy͖6˹UYvC0yT-%fUJc[s0:p^-rQ쁸槤HV* Mͽ>ka4&B>'a> B_qĬrh/ X:wZ/߿O2V[^OAn\1:|eUīw,3F?Ћa5 zEi0W4$)iz86Rs@SU /3 7MW|Qf[^TvaJ\,V\ɿ;Jɞb ځGN3yf=3@zi/nZX!%[?be4(Bb[3 ;,^xyZS}T/n[Mwb NXwܣJ0%$ߝ4>]h(F}zo*m'!sϩ_A,ÛϗuYsev@@ܵo; n3]z9U߆19"UOU&06eE%rxYۓC7۵-h]Qky|L3  BG@|=J!b ?[%BEӑ r$Z aˊvnM;]/qc[} HDk 6lHhEX%pv!eŲ pJk5||b5BaӒ;bQ;M Mݗ5r4#4@DZ67?A :9EEЀNAcL}L O0mKօJC-jW 1r_S(u*fIQRpz PWq\j5A_(P1#LBvI'/-U̬u|6.wpE:`褬AG7?VwoExe2H A1ܗ{yRB`1iamUq]ݮ,X^d"5>[|3f55h >9yq"[򪶌i5fJ,-X ]I4Orz`w:kR^a]yJZ`T9q~dQØ)TєSU <Gu򾰆%y/-x#ĵךVA$y pWD2l'a5R 5<<(١ |j@aLAJ燒R[%J6H!S$m6KVl4 !bC.V(F]hP^"ie C&9@`R[|9ph-4Ux~k?ZIeI5Š ~P\}CVyC(Tv{5ko1CAdL+G}RN鑕8ۨ``՚=ڊ5xm޵Oh,#el_&7Ytt遺qe4gw|.Ϙ WlpoeeZ'dm*~j.\־tUٛ[wpZhGęeDW;?ՔoHR@-)YIΉOW>ǩ# WQwm%L(2G}ݺ@"MfֽYML܀_ PAQ +?ϥ{DC#Xbe+Gg3}Aoh UJM5w7*.#]$1SLV$]<@Zg$EρdF4~0pt/Ia)$jUuBQ`&w۪)8)LUk7q'O,kݱ `{\lo0 /T^ 3Ǻ6RDo}ᴴ%1_VW~._c@Dzeqi"_脞mO1u#eZнTԭJn6>XK IW/s6ep,GׯAmu~9@.LX˚H&8ƀ`+,@-;qy,,X.'}T FwJnEp0C*`K꽄[;,T3$N$uzዛk!ͩoW?'j~M/@Ȃ:?d8ʭs~h 6>^]-LkL~T4.qeͻ쩹{fy! 0ZKK'Dѷ$UP%{5#`D+ 6]2MC\=2(*[!]Wik #96"jWKR,zɋ4@G2}z*56)%u %pfNyGZ3.3`'SP EL!"r/ 5fX2qghwM9̘ \uE&?-o4cb>] @ЄN`0vwie~V@'5ad~tN\eVY &0{rja"=V Lo=`/ڑd/),giZm3z}|tul$pZeM*2uH-!x:!&##]$u|벘܉R_.^"2Ertkc<ل|4^UcZgq?x`.J~] 4us penjUJއXe ka"JJ&;Qo>EbN#-+&0dd8'{aް, 6roᦷeShxHqk~q>ް,D;R~Jҋzw|H''Q~eȲoTдm4CYhh*O,{uKAFź`.s df#0p9+㟲gg;4ilWDmO$1 rp}qC6RYtNv>YKE;:+32dteYoIs_~,D1jI ?`Hڧu¾Iе+/BeKF7I!;ЈὀQw@mpk.JQN#pmQ}4JT;JR; v1y9/?v-@rY cqBi(+mU(B1F& )6LYXRͺV;z h F*`68P2kLZ42!gZ1,WIkx0-OH 3P7][a'EuO2SDS z?H"{i`wVEPE\өt&&,=MEVy1 4f+kWOSd 7 IAۊJziw:XU #x51UB>Pc-_+Tj\ײ}]$-OrJkR3a(iJ*Dv OA`4P,焵(V!kl]BU'P9X-@8e+Jr;(Ю3A|9?\ Ro>;YDx;H잣/}rpw#y<];!o|š̒p9; i ׷w:@&bEMsφا@+mJ ]'ԎRIm^Ze\JqHwx -f$Ni,K[bbs2/Pէ5Dx/N{W3Ux&S8qc~)_^Q7Z=i}W$s!& Rbo`~oC*|9jH+" |cE PM1z,"I/iw.pm1ʺe5;2iҒ!k|eaNemmȄg\q 1{J$=PHs.u@.Dheo0:|C}*n7uovp2^b[c[~#j;9;&CSvJAN&{2)CW-`DWev8R=Tӥ5G^k{يryin KU£0_$2$톉e Za2[Ħ ҟ'XGh3]23.P+q I@NƂ}!3tr5]KtMB*׃7%a7ʫN +Q~Ym@qdr<;8})pU|UBш&DhwReD890zWz=XDH*!޹(PQ92794%5$(2 ۑNmTkGR(azi#P>T YЁlHxkuu]۬*Ӄ\ `D'C+R|KG yW2{=q0%"o\|-hx:dZ= -|ELXvA`0܏3ȟty,K9-qc8< oywD?7y5]&*rU@"?,71ǫymj6q".rys4|͕(\NGRWԧ3+'BRu mYEYL4 ٰz!&]jky ˅0cӐj!pDcXXb%J@қ~"Cd2P!GpQm F7?o, {'UgہA=y8Nߎ%9k) Xz7;Z <hQ@ib9 ޛҦU> \ʏch垪ɝog,<6S k@;^y|zV4 ?2!M$ o޾^2m\ϸ;i1!˛3_BCu=DIgKΧMH-xϨs[swƚ?Cۥ袳Zy=[%n /Z.Jb0D[|@X/ekqgHG'iƷ=Y(KJq މY>űSюW`rhu'!|k㝹śщZJueIw0s<}u}ȠF)V:į иJsVQ0ר9I2GI:lnje~QmI*X6Z9i5ֽ6b3Xb`\7rԧYeUv?K", Pb.VSZ6^ sR'n$Io̠.(ҊP8,X(W~FNzZahp:SKU֙G (_EUݱ hj ;B{Pj g)k,SZ;IDƱr\+ x,:8X)OE>BIU2yL1Ĕȼ?5މc=wBˀP@kihv]8zT ;\ 㥫i N5\#!Ȣ^]9OI¡6a2u+>4J_zپ(OyPY9ޏaa(T>a{M˘^WuDQ%kK¤"BZ}+MMnJ*>4[<T4:>RN-i]T!|I c s x$e9$N{u4_QVyZ-j~ga/3ZXZvIY<7 +2X:PrQrǓKt #Mq&_.1&50Mӗ{~vq!*^ ZMsYFwD9H' @K,VsQ}@U7V8Z.V19M/ZN"]Dj=9'YqڟnDpyZh_Q oUJCE =Wtz#:uc$a&j)|q2{#GCR@FPחpb{ws3:;@A5jp%o(oZi %2*67LΒ4Z{mbr+rχf|Rrl)5C傦gyjNV\5Gހ D%"ZҊnjZS8 ʟ%bΘh?"[7rl'ܚ5Gy>w(4+pi=7t 0* niHM#`@ c8ܑFȌU°s'\݆= vz "vcVP+S5^eEAL)$!tu|p|JӾȋ9rcve꽴X5XŮ~VZYZ `,[I д[~b'ϙ])>B{OsNX%gkO49mCXfEG &ܷvfsiv<w`@5^K} 6''M܆N ^4kh J ^jJIJ4J"~KwJb[СA=>6>Fi/9ޱD H$~ <!mXJSafg~h`K!'֊2{)ӷ#o1sc3Ա]=0(6CF`z|$|^A p_`3u"xѾ_\fes5A?2 _2IA0L&bwQnTIQ ڗ>p\֟Pn%RC)G)S-4p(EO$UQYO%/?Z}w#%*r7m(v\2Fr$?Ņg| Db>ꖩY1FtH͘RC+ E TwS22'cA]tkӎ - RR,:H65L3 sc&ҧ{iQYyvK?ά3OHRj_ Ҹ+ߊNO. ΈPJi)mҪq@sT}M*1L1р`9^&w jq+oe~B\4\ZIjHrʀ=ptE?=&8*U^8mݸpbzx,КKӅ4>)N 7ֹ_uwwS[|ecEP:+Xf7h|ujǧT{#E^g=&#t+,HF) pYbU $YvA55E}a?2 8G3㐀"rxDi~ TtF?`R9{Q>dys03S'ijY2$ߛ&^iE&ۋ/ mGc{֤V< V32PXrkyRۧÖa'wqN6U$,;H$xjPGdY4;Pm=<ɥU[Ym+5uUU+?Q*y:+rWv{C YD1܁K;uKHO߾(GJR7"jk_20!OPP|/~ 4 CL&Q&?NB]ig4S; k0%v>CE-0|@QOb^ ;{ɒb>*eUUqzc!K bY/ԆKߪ g\]X:"0s.Z./™k[CZ4wظ +gߝOH m]،-WTҾB|,'TM1;'=C#")(*~C"&)ű7I#LUi4l$@;$>xCrJ걂~E {dhi<, P^T_hjk(!o*1E1CȁH mxs| Ձ7&Ȩuf>z*#q+(<% ȯ:zR?mUMq*U'Re};ԸD뒨SkA[JFu#ovSS*P9KejISFiO(!O}0#,FWEM˛{;pYmRͪXngT˦pEE$>ɥь pٝ^,|EI!J}57-|LЃӫ1YӿbJ8+iaKB e'D+=b/Ah& 6,ٞ/nM1;30Ӿ8}>(!.Kb~x :H{w1rЌjgˮa`+Icٴ'}[خN,٨ӧ] &f49! & DI*5@k%bHV=7K04?HVEoTLAxӫRԟqcD-~^r۞rDHHA`ُ߅;%|OE=w@T3FN:AQÑnhF3^L'k Z T/wG#fkXF0[+l8$M }d׎ੰpa)nlw&"=*h,w9XONj/66|QC1`#:1ᄽc (@.`)3e*wr6NBLt9mkR;W|WeUJ29j7W]}[2C!vBeܯCw~kձ Vũ^xAlS4z(^_&* KaXwtZR H9^3U[F,7lt#Bev,#"Vm"ۯ8Ka'={@jmg*%N9s6U JyQ42[mߝ6%S?~ L%44W>M'̪@J-<)$/c eoa`qYtdum0;RAv̲Q)C9 **#PwATcFgSץm7$U9@¶y@C*iyQo$0Q(ڸ97=Uq;Y~8W|C &)ȀWUDAdu%ۨh=I5|@m;[%礊B>j6N _49UMwH W3u6\GiEKa%ɥX,||㞇tYU@73}&L|f> C vJ|>` 83L}(pL#*a9/os[1_Z5-WgAz[Ozҡ5{ !CS= JSepIu>[kSf C@M|D*RF܁20vS/?ֲY^:yRuPꇃ*Źuqno.2ʎS5c,`JqWMRڧ R`pxl2\? T%+6yξ NGtXN˞6S6>aScMK^ fNKCƏn4:ipT"P6$$<~Ҏ*ޙ4jK0FLX?"' B-rNΑ#ءEP*u'p$൅]Ӫ^Y -q&Eȶ-v$BXg$,Ӏ.qMGytG'JM 6iybrU* PΉ]\:$/SG\Ԓ d',O3bln# 7l+޳B%+2P+(3Y]3r~_E;Q<(psj lIi8"6w8K3>qhFlڨm/2ԤSd{OAwS}UBYT>|?fw0U +Z6?7[n|j{P/rm7e(Bkur %NyQE$W_t$WQUH@×Mޯ~a =c1V+Cх4k51g\n\oh7;-g01k6eTǩfU|KðVEjsȼ"![LC.tP&klk'V~_Kwl1dC@+v"h+’<~\J} =OIc*ʋ*9Fl;&nڞAu,O-&-I*0 yh!]tp`ERfz_>^a$eӍjOku[=h jP@VzP/5W$9[ZͬmDuk#[ZE+Z = V7)lM~F4]>֚o6(?GIJ-fDb7G2[n-xI4V4YQا!#MuF`3*@B<<>N&%W0BjIK<":{n9@:#kǗ *CbxD,)^`GLEgd4 .FH?@b,(O$ʃƧ[q&0Wy]5Iޠշ f̩vfl}YK8: iHU#{1Vư<AѠ"O)N49OQOҷ'p$ǒ9yYtRg7?BG?!IBRdʲ- 2W7\a~ʉZ9࠻U9;~$exyiץL$[Z;pߟ0Iѧ*=L,Ieno1zoP=$8G1O-tʇ Tnk=kM!g1ؙjΰmJp^יqr15(MC#k4CٿaU^ITV`Κy<Ѵs,R0VSw 2 [i1]ÎQ;k}r,'^m}(ƍU 5;W5S'˾$yВZAlN;vY lw=|ஃ.IU##S>`Y> yu7 /8(;˞Tur#?6Ɔ6`MQO#tZI/,oRZo&@N*I;Z{nYQR1 L)ȶayGG8tR@Vmwa2>mm?j]^*_= Vp}S?Ma'K&xVKt.Cg8(w gBh9yMWݗ=>KPEQ)%騹&ϏI c*%Fy šIG+Ms ռ1w ŊYdg-mޢl_$Hb^S1EZBAeLI(Ew{ 7f [a9Ha8cN“"|$҄qkl)zʶ׌ԙ܈>a@3-}ΐ)DȄ#l a#~AbK$uޢwIE&u׹%p?MJy.n8ndKuwu| Uz ԻywbOl?"e^*"77 VHmAJX(HQ\Ot~>zWOqpWJ& V)96 4}:_ CE`Ƌ tRC0/E `HKXqʔтw_a{ȶUe ^R⓲/772_43wᴁ^A܊ !eqp2HH n&5Df}5c2 6y*dW62-wV#6L!}*;iO֠PDU! sp6+aMpZdPpr+mf`-EOT $bOS}lSoZ @x^:aΖ;z&'{^њ9D) K/tOB H=~la=BzFY%,Jdn:zG2s쬹)nI\ A{͉ $zs mzU G/9)2JLP+"Jԯ٭yl0Я:\\iEGݑɽ!,˅E,+/Pr9 gA`,~uZكIEV`*R0R <aA S9ˠL>?Az6)EΛAiRpn=8crqK b s/YRBb!DsQ/.PEp`^^tjYy{VIhyh- ͼԇ@Z ?M ktp!/iS ZR _ -{BY'z ̈)eTG]>Ul3E`N.l?I [-BpyVMt93#uYڰ#ê'm-iR7PrN5aēa4]"(aVAT ~I|va¢4k)'P7P BlV!oRWp5FǮN6>utB|P<OAE[mt:PNTSG(s>U2vv椚Y)K:r3IAO*jgSbm!̊ǮfL9f3Z?8)G{e108E~89=r9Aې2J]OW2Lu5G7+qA+JBc"7^~`K-|C=*O6#Ȃ=EP0!{_rgf2hQ vP Up5ú_Qnboq6WizՎ- c2! CjH hw {@eoΗ7Z6B^F|F]jeђNM'MbjJc󌝲 8X…TrjY(B{3wBc8xVc{?V4w5ZQcSm?uǼy\vd}/gadonMrt6g1e,Eц4s9 G [v3r:2Fx<U՜MnL;kQ@~AntsIBgEIhvDǭY:dB&WD0y;E0|9!5RC:P\8+}gE#KeBN|b ʺ 类#_SƤӂ(#OEUn-![fJk.>ڷ[C {{ q!/ZfN4R.K"*kGZaGi"_$T?^>k,΋jqը8T9ƞgxh cµ.?@QCLzQE!liYcRZ6^v-1_~ !fyzfJ|w5 ׯaG 75Ҡ a0Wdl`dpL@Fź`fY7T=@yikw[,\a<-D8/+!j<ٸ(%D8IQ @bYUPYڂX54%:._c.q @g^eNo 5 }pΖ«!i wFNx%y EhX/023*J6& I/kI#Vt fBoRPTE5h5wVeU~Z7ȳ Á|'V% #Ƴ _W.::߂[Cݶv9ݯR)WjgaXp=  yn&Ym?dhOYK\V),Ιl|Xucj@:B)Q-ŬUNI&PָP+JsR}{mT#و28tadE-MBɾnӂIq1pUb\ hzr@@no:t=uߊ(Mqʚum9uGSqO"V8?@p+_RwF )a'H$q̥,QRCNsS6ʃ*Jb{2Yuow+󴴶D:QnOB' rKa>j9MW8y?:[yX myJi*{li氫pl1W] s"G &[>F}LkMNPbUN\ġnvަ&?oVi,6E(TzSQ Tn ˇN[{Mky{Gl0͚GTc]:n.>7u `0Y.\{+#d%]tj8w@ -#TBEu}{ߔB_m*L3-s,RW5N>k,%3d\E*RޑP^v<~ 5 cSr~#i{f*eAhpxVCpxoڸ[i[H/̻zOvl*GF ꇃGfy?=fńƲC nEߑ޵:vt v$[#3Q bl5o'S@AXeBZbr jY~L)~GU/\8~t.G4[Hh {Mwd1s72#:ڽSd0+RlcdAam;&yڤ6!sA\C C.\ 6SJ@C|dIx]Q#!R_ (`Ƴ=~ I;ČMAt4{G)ڔBija|ȜpQ>(J4(18pdj Q\`P"9>gcO 5Ϡ2 g)+* 3i:PlIr6h! (`Y^;a 5o+>nuU~V Q6j ЅA[\sA&O*Ҕ_d4ͼ'S5ٗ_oICldԞu XNbr:9YmKV>M'&Ό+NBܱʐ̔N+,e.2BھkT~I}_~14fF\W^y藭t $jn5ь` x| ?-[j=S.h"?mPw;uDZaϪ9Hfg2.J3ܔj3u-[s%T,P>ȱ,+x. 6#Lαi?lqkkAy4B`}ۖPwsGLB\spʧiGH?\Yb3sPk3-f" S(W^&~|ӟ(1ALأ6EX+U:.!;~Ut9{"* 1~$nUEW'KϐZI$NifckɆ戤 cDa,JuRb9Vg,S@ZǕ.'0k]I/Kؚ&eIk$1rI hTmIJ!AJ(0HȒIU~wJ|VAw\vaߜ#?o/Kh{uiZLYc]`eu/Q.FO~]D2a6kٟ*mymUPDr 5%qhbb1n-h2sx'pY CN aD=ٚ0NS `d| FBXѢi{D"pLhugw OK1˱x$4QV7?pvcVuH8V J# z]PbbOƑnI,UVo 0o1CF))T3}Y[+d\rt =I` Z`Ҧ )UDj;Zu 9OI4;ؾ4jDSԻ_ʌA=R (( duƗV.%MF!rpVN$Je@[@߈5o#ʈ:ilj] m%qLxygB+,zV70 NYxt#}T=AIɮYr뙅3Ux-I}kcv [ۊ<8v 'lIfdlh@̀ΰT2>ҋFMbfgnn6'85QcHjs֋%f帶{ԓP=c!qz ѻbW.LqY?M鋹*Yyh);ؙ]Xث:6ʑA2&'n^IWBrMN#v t@i;֧ܨ cN%mhĉ +Y'Ui$} *e!h2d2ZabX[,$ iXOkiTco7Ca1YVK&ƅv(2)Rh Q:q59|3dR$`5aJ50~Ts \hE}Tfbի)%^ r_xY:=2U(I2>Z|d5;ڕ|q69qnt:_'W55p3|/7[P{94p6 tk rJ*4MP,ƹ4%ZBcOɥke>$n#ґ$g`F'5mM3w[J!F!q'a+J'$9qg8`QqNl1]ٝ^b~(}ʅ o7Q[_T#\y&Wb,eWfC'dubPO 65W̒gYU+ۋ@3 |f֢  1a 0I\#bI/ƒ=w ZbEf^ aSk0&ʞ˻D_?^, W-]oqx x)\֧h9ɪ[&k(dWn/ȸYtq,T P6!a 3}a[nHig57a'lQ`s?~/%8`9ueH킴Eel3?%:B+2=y'!-G4#.<_[+7jI<U4`Eϔ0hKË*ϷJQ7D+=\p]B!F7SYTIGSWlž-aÔ,~qФliac^eEpMgreB$525Kl=Ts ǪB;~[kTGW^S" Y.tDWMM[ r{^p bl2ѳۂM}UyPSacnoou2L=ӂ1/@ |l(~VKx8}ꑓ2jqwY`,)XuZc{ ^>Jgv1f@ Y>%T>G: K MVk5cX- }I**r05GЮ?CH\|3,zb sW+TSl8#V9HVxb"iu/xymrq~-zӑ~)®]H}EOdJX} F{ H^e}?5yX{SH0Zk۫Xb:?jKI4>bdC14RnxDVr7.Ӕ=p{J0#5GH]'/>鵹wqJ5ɾ{FڥSj<0 ߍ '͈tdnzmvK{? z(qCХ1"Z,^zl_hȥo-wuS8|\&dN^7ǢVm_, mlnGo8n/SA;k?OD&⢡2v4#ARI't'Q+F+,GDhɇCa"sWݝ( AK؍ &kefJ|KbpN# ޙ2?=/~E3&7OD%^D5.W>-QBOO4Hc}UCfR#D+o\\]2>?BQ& %b nyVS;myOMt0*QĀu#4Fԉ \܄'vX9'7CWk H6J(7Ʊ&Ww9XTib/pFVh=KA2$BH]En}DotWY 3p@ >d_zۉ@ L* 7&RKx\eqB]>FItԖtt %w*M 8^, P܋'rP<;">_6K EBg `6 [FeS-ٶ!F>1`'vKE֥yn{VqsVNezȪc廩; 1|PH,)vqR0NW~i.v@aq 3HE9 .Iu=7{ Lbge@19%ޱiIy*F s8lE,p."o \L8hdy{6D36CAx\Մj(OX0RRkieKvJe:Z4Rf8]4 Q!MW;`'qnF$:kVEfn ;M~'wPO&ny(@ol}SOA$Hx+\K7빢(MC 򡇔Q,P_4hn{{zDj/NU!{H~2ܤy3~ 2鳮^}.fЋe1>ob lEly!+gRj -l((l6ql{dnT|LRd'Pk}.$A,F"mlcóu>otI}.vJşT$@WJb]BS7 7}#f JUj+/lMJ}2ݏɧB;J`"u󮨗Q&|߅. r;t1Oc#AƚМ9Mi#9=pE}m՚YW#V{p($B+ˆAigpkD^+P1M;Ǥ/>}i3UZl\ 4LK˨ |jR=CJ՗TPeýTt(eT:CNVq].==b0)S8(sh!*eƣ:;<9ƒiV/.u@ӮŖY_ğX(.geiT6VDָ> dhcx~|ܼVY)#AC-? {yS, ]RS8/HuGhRZ G=I'JI/K`>eDG n ~Y!ڢd[g#Q=eoN׻#T&5I mYFN~q}3ZҢC7s\;U@ģ wukq9y JGK6Q? D p%i†A==PdVv|=C|,C 26ى//}PNQK82w2 lC`\{\}ɒl {F֗f9Tڄ4)1J EYHI`lg:jViLݬ%{FS0zQ-V2ogxNO]Y/x6|[uJyݎn`eF2[f3ZGBb"{Pی.jvtX:Sgw­Mٿ|ƴaf_)ÈY:_0 k\-OcAZMA zJni52 -l3]p^!qS܅h8q{: ԛO!?h؉y q ԍuDADj3,?kf% bJ**_VaOX~WalS%FTctBb'~={lպTۉ: s4.ЗZcPc5|50wsodr6K]?JA~) T{(/jT;@Uh^hxqr C"eb3ҸmPaGzI.c7jquѝeKeeDbeJu#R5! 9˿26C ;HF  | 0(|>c߭#K!Nv0ޑ'e4) jF!wZku A\\jQN=Dt%*gjO|W0DS7_3^1TL퀝oIɧM nh`E縞N ,:b"yrk3P6)m9EWoh -d?ZxZF"R԰\-:pVKnO7ap:8j|~W `•TAD˘BP8KknS 7H^M4)F!]u^GMYiCT rьH+!FS&)DŽ> 7{] 3n~o֡j$/m0յq$Ǫ?|/[읟z$$RLMsj *|cX, 0 6vY6!PYy8:l3CJ3ŇZ#8>xͧ bҨ8m &L3SW({߸f~"V],eOjHGT;:gʓ%2Mwvsaً{^=,5M#NPFCMNDh=E)G2|ILdҾa^g3vZEZ|4* ˆ-A|u@~^Vqu(^(F9D}Q=no)ڠµj^T$'aw]}3cȯߐ32uqH0 E/wK+*ʭ0g^FsY?Vċ# > Je-pen{L7S Mi@i}Xg׬Y\/ &?5t*%6 }-.`hGiwTY67[hW(ynUL=l'9ȍu( :A_FDt~n" (Z  $$[Z\B *K cNGb"EJ44QkMQ$>Y(`H֫ vCԯ\Fei*8&,8N l.iahF 9}@{^۟,H]kHwwc .]X<k@-,jd0 &G ({\QP !dfpXW}ґE;"?I^a }͓tfgo[ 9U+h$50@搥'؅E/X `yޛ5?=}O^RlS3{wP\³<LmD 8x _*@qґ ې]ۀiv֏g=ō"/#dqG'ӋL +a!6Ƃ^fɌ-䍝c ,zɇ.G K #qםyй"qH>7dL. g_!a >* k>褕JM(=K1ObCܮ+$_<[G_$h$_m7JGtZ뼿\!UȻlP@֩{}_S01&[4ܽvJO8 21T 4쩿z9z{N>6Tf ,Ʉt uezv@FxxZxNjp .~em@&̧<-{5df  ! —;#o} 0N $p u WX= &.ć,zx;YSA?V(@ji5ƊD>*L[ &!PKp}[+\i3;wom~0 b|9_;9qPOj`079l~<]lTtiÛyha bVk|=b\P݇Q$]J6mI)ut>8l6ƾ]h{z1RA=CYBfo݊]\SSWQ Jxb$Mx+ qDS/+񶀗FC+ M*f`B'\*r³X^/O B&ҸbnGQЏ,F,m ZzZ ~풨]AQЗԾqa 5zM;^QN7M:+ *$ [%Sw{A2'DV*<8|A7z n(ϧޓ3Ivg1i} vQPZinCߌhfGg挽gac'6}פ)3/wP6F'b@=gJj{oDIS8,|KEn b}W3ZCཔ~Y+NvzH`o GUӹEq R!gĎO+OÙe%\^%" 㯪F@P=|H@jF*%y@ƈ+"޶'^ oT2WPxIh# S%YuvSRo/V(B$_Ձ>]M10Ү˧PqqJ7\ED5,3'No71a3Wxu)|8M=C@{O3+G?CY: Ӈ==H$7}`V 1!8*oLD ! 1PMOBH54Μ*8k;&ȴ~́aJ5Xu{Cfx 1[EKk[haP=ܦ֔Tt_\Ȍ[ FN=bua4v_^J#fCjKi9Tm+^d@C$zw l0Rˤeʂe )>98{) ^r L/;/yu :ۧ) v,62:3-PꝊ<8xq[QqÑ$`gs"pG{C!frL=jg݄A3gLH~yYB3VSo 7UŀT._+]Y,3EY<͜T3Q'u9oL+zJ^~Z(&02/ҩ݀%zA@pB6pی'2@Ɖ0ϨJdst2OW ĸXLd(is^u"88L21UHgPhNyr7y<H nx\dU?_?!)KlqxК]# >zD_Zl)ZTNg W[捒yzY:++^و GWd6 ;rrMW R{`?D(J017y8>36 H3 eg ,N$?8qu '@u*<0 Ǵ { W &_bH۵iH.񝴫Apv¬#-stڶ%YIך }Lio{4U}D; 1ZP;G{K6w&0u~-:ASbaeL}9Q7(Cldp=BzVrPmG(޳_ZI0Dg ߩFK: BI qzUo/Aɢ"Mo<9bWK9 ӸII ;}8Mјr?VtQZHRyLvuW eh c3-au|Q%~&pҊj;x3a49%??=fH.gSB U[?6/U_91s\h1!-ǬA͸tA>[9 V8t֘ 0c&T*">NCxзSI:fQMG@za."=nJƯL%=x5İ 9br"=]|G?ѮCʁn}fäZie_8 e7d><] ɲ3-TS=t2'uWw?bI TPJ1ϝf|5Rg]Ԃjg.)f<)=0|4,:xHѠ)7Rl*=nG4p>&+./͌M%l՟yy+8Sݲ\L)Veľq[wʍ B k N(eAHQj & ݆nKdS-\etSrNV,l>&7Jda"6mX?ǯ = d zj0M.VgA]NoQMMxF \!)$H֫oE' :~ 8 FB>+$kbbpĐqɷTҡ MR ,9wy~x_@']D4,xxD-( +k%5wy ^"^ˢ![ Xs-3|e/(;h)r٦W$6e< 1! *YꞱXU?T/a_7?<1o0An pWҾ@iĶp!Y×oHp 5ޠO֓ޞɁ 7mzF_. <ص%:j$s/CXrns5;UtsOqQfS T'x;iկۮu0{^c<?1΋偧NVi+ک Ӏ|&HYR. a3<6MEp<1PsDž=$LExIG[z Y&x#+$ (19'\'42&zce_(2wFOϠr\И;Y9 P4Xt!kW:0t7U,A.I6yb-UX"bF&A!%~; a0x;0Cd=y}eT+7ke eo}dE9(ԺH折~5qSlB,ןz`RtJIl_;Gw]])ٲƼ).? <eF io X_vYi|Th41Aں_>U.;zPzwWaķb @l쵞ʼnPlkדXߩ!3\sO8AVo6ArZ軤Q"8F*dd f#f1RU&VYT=Adqp=WM nCx&ach2kٛ>y|X.Wೀ J\2ءdnVΉvrKAע<}UxK!fʣSi3%CHgU~<+HP* _%ɓnVx/oځBX݇\ ڟ1*؅$CY`KY?kf,e*eMM5%o7}@$'uEk/ZκOTzmo+1HYq4-2BB' %`q^EHtW b>~Y޽ܕ:Vt zYw-&aFgIf{UZɝ :'f/ YAs"M sNUuU T+-WL,ܧg*jTv"Rv2NRWEƱ%|_4We0"Isl|I |Ĭ$J]~πqAW\#rx2j q/Ee* r%-Tqx;uX5뵝LlJwPS[lؑݒ7ӄ9V{<|f-[lkqN$TzQvq4UCאWbY &Bxo稖b-$~$Y8xon(kw !pރ.,mKRbml׬xEY8 /Mqى'ji`ρ2r/+z% H ӧ- [euR4twO&h^<L2亘/ѝG;xvWWGXd/Tl)YLRs #MDnRYEKMf8OuìQWOdL~[5A,u|2"'؝*A`M&,;/k(|Ef |`ʝ&OX ޏ1rԾ VLxu^/ Az'4%b{j756,5GDeO?:?X2 =a` ,wHMG7WU`rd6t']@B#I<2<+DFYO*oP@3Ld=7%~Bj(F"$IW i@ -v:w&b6]G"UѧrBp:J,X[}h{"%&P؄z1A]:o[֝P5w%6[hTsuuC'V?@wsG N1jZsNV:ѐJ[iyZJZqN1C`< -XI䭭s*wg B8{h;7#&87iYglŜ cFeFjstD.[ݡt: %(0k?~6b|r/ X w2;̖+PoR$I15TԁsIs˰&"YMyrBKy j*/^ӧºgSE#h/JdIH:M )U5uUtO;MBs)!x-%Beɂd8gQ  RM# idǵz)CtImVIwE a)rY͙bT_ũ 9WL딱|\-D,t1nEW#s s<[$YTXBE%&i'6@V< (;s4ƒ! bk9*(EӮ*\#}to Z8JU`r0 o KHY:[Q{7 Cbhd.92yIA5q[mlC=L׼-΃.ZcMû(TA)=)f*CV. )H#X%O*OU/ SFfujhr1K|.=Y->Jf*ZgHXJY9t:s ź9S(F`Nf: ( ?؄d!*EJ5Nؘe5*V剐uk §ͼcm T Dk_`RP>yW &:} ys 1hdгoAFDPv3.6zJY }MmuEMSe.nЗ #9]j` ` Ўp5|QNÿ4_sS*YPcd_ɍ8U7;"#!ˁ Q?^A!jZ $MD륾:")'A%n5وQ%d  L ȍ$ IaF& FsvADEOGNFl~ 5x')>r咙Qdž'ɺ{[K&\T՞/RaRiycM|1zMwd_S`|gTαtK۞,Z 5o{iY5۳Nek"Iq3e'9'&UqnH}{;$Z*Ͳ@fZ+ΌAB,=2!Q58> \hz\id97gmbhKk &]v03*lf=;]xEuy (2i}~~1? ᔇd'ܐOв\g>r>eh&zҌmҥ hQlARJzh;k e*8*OC;PWt}!jtK6T%QUM͸?n"pCs>xԪXGm3}B+aDO"vq4e,^uF-튥.k_ڶnun 7<4$mƺ q6S6 n4DU`6u2L'j_v>O"Kn8lɩ?3? 2{^7@h۸+ я4 VWxnYAr֙-nujo_HR'pAOrަ i )%㼿֖?)g0AF:v~/k` / 4r +G&2#ܺ2’$)!a~)4{'ٜ2i*-lVZ뷴%2 1h粣,,zo̺ Q5ȗ. \3CMh0{ `T ;ԂDJSBDE7Q5Sw)hE/hoI=jt04os{O ="{ѣ;i^SxÐ-.KDqNx&4}[YfG3"|Don,F6kct n$y [ G78:s- @"M|̍JLOO9pP/Fn6٥]; xK(yv3! >bt t#C[hD2!v>۵b"ќ^*&/BGiVDúP{_`.Ư>Mq1 ^jV"|Zyzr0#S>;"Ae‰{FyLyHg%P >`Mix֫ch(X']{m\> O]Dx萤KJoEUmX~PK,8(^WSVSs(pѪKN& 3OZkZtI( |ɲYN+M P|qYdb{:!pqOՠ0A{ܶ 2 !jOp":D ׏i->D4{B&7b7 w Yըi{XFRa5b|i؆{@:B o0e=]ӭVk;.(* ]ꦍ!Qq\Y"" NY s벣4pRۭ&}PՀ& prqnbN|_l>"Wx%2Υ/P/I$7vf h蝐JeQ-P4!J+60| #z>f<`!*p8`ɋV%o h; 3V#n@ڕ~4_Jo(Lib!KL~r|4lL{C {4D>%Ѣ-#=v{a;&!%,y|yOȪmG@5¡IUIT)^C #gʞ`u85!~AWd>ұӝ,:W|W@ʮ[Xڑv}ӮC~ 00it-iHQ|Hz~(ލ2cR$z&;YweꏔxϽSZ`!2G+埈* AY')u69D\\j{;-;)X4un%[*+IOqEӥml: '2=ܯtLx/(+D(^ K<Ʌ̷S,`RYR\:sǴ Ϙ{ "y+*Bݞj0֜[ K&bK{!I)dHZ^(~3*lLo6c8rGIu;#)KlG1ׅ *AFĂdG񹢮QNv N#ف1{ꔯE(vyAqٞMzexxi3@\^"V!Lt%{r -@GL|5 +zh ^LP|gXEeW€a eՀLsⴃ[/dz O/rA0=wW$ycctbOeX y -4W|s&d &,NcQ><1GIk7YtsHjм:շ`zŵO<H߽@Kz$4V#+?n@m? #Z)sҟjmnR47-\5gA0ߥ3~Q) h'gho$DPgPK42bEV8sv.9hl y<,4d-zƎ[Yw _N*^8qW.0Ҋ4D&!{Af7LRcӻ?ړi()_A]ZB e+@bF_q8 T}osw']_)Y Jr>5VQb^ipJ,]7Nc(ExRCˍLS[NrP:K9,@fGдq%y*iѦcFCI+=UC03 ]~+˺y*]n>HuDDžt2cӃ/q3hÜc9N𘰋:ؾ,8 @1d}J6ߧW-,u cĹNyQO qȒG/@PnTY 7v+~bCC吼Pt 3-( Ѧe.0ic;<{J6[S?$_a>Dd=1CM >2':bau܎qh65_BzK%~w~e<}eM6Bg!{a &2P? f$܍ş7v-fCt:jBM ,9<=`c}kZQK] Οkiu` n#aۍEc7Ƙ5G:ʌ|3쑮\-teZ%]a) PJDjˡsKz#̡FM<>UĀMak>z>f5>r`ԙ>X9&14<XTg3c_KR#r|7:a3pCLPjIK4m*,r6x1-L ўsqSj*s[4*UJ Mwˉ#֖J3⦪v7JkLG 1y+,hkݾMWB'ẑ&iGgz^<)~qszX {I#ᑞ#bw) ƁR닃 v,]v7&E&4ڶu^\n:5+c*& CW~:WB)4 ®a`}>X&ds&m)].T29>6 0/x?y|QqhF{Ƅr>hQϾӃ@9mĩlp%G7A@NpXdnGƉ ،Q? pS WnZ(:#"bg^*;g?BH~_=gspU"<u2gW@7۟;xY[)&8q}9?M3 )J$pv+W&7IwN{UpUՋErGlu$\2=w;nv?&MMfv mgㆪ j,$T$c\_`-S׊'AQԕQxvXi{Iβ#  }w<)oϾF d=%GXAN91# L Ī8sZ~{S7XUSя Q?͚npI#.3T #$.PO9gN;2~26>?un.ƷV6Ö@!ufgO?a}_R6pF΁ 5aS x^@;+|4l$An$5.Dz/4A ęCzX`p!< Pcb^Fe67 z\ _ SCGE܍-ʐEdS+{W)Qq^ADY:+rDrRwW*Vp~\6_c@\AopYnX,GMEG|4LYOVݽ*G+6$,Zb[ rNu< pelKR4#R+=,,lR6k"D$s2mϜj$ϰ#egfBs1jT6 H0x ^~%"zfeaT>%n1V0FZ#;xٍUw&u [ _+O#c&>9኶\EXqYXY'#:X8xHk8V]=eݾPa #' Qg-,X]| l5JC_X;:Sie1]Ns w^o)aI;Foվ^ip˴<' ncfd.ZQOPX"/ BOt |fR6hţ$jsS[?lh`ˁ#Fzc+^w;q} ޑ]jwsϟu:QȹCQ=xlUsSwCE }Z*^ 1݄`̏zx&H}/k%^Dkjj2ŨLwfГ=CPdUҜL :e{Dg$b\ge%dQUk'cPb<軟qѰ=F7??W;M6 6@b <$a3o{, &&Z:aU)3guhz}<* ^Iuf%8O'EA[9$0 y {rQAiTdktwBt=6ngNH\"b :~GO0\ C?ׯCh1{ˎ ([OW+081|4ҎONVNTρ[_bB:lHBh!)9~2YB5Oݲ.7o:ϖPeʪ27a6L11ݺWXVb'8.2<3ڭIػDl5dymknJ3Jc-I IxDnsqޤKNԨ;)'P0+`1=vπZya2&M(e,GIw,VЯ#RkLco:؋,WFJCp.M=>ݽ0tL<i>15_{3tw2'GUIfVo곀"!xxJ! IZIa(T͆LdHWDrtzM"uc_^ E;.1$;J6&/(Br%CՖo.(OqKyc=ޅa,3k hM"^Ur$tƞ?˟y`LizAfl˜V^i_F/nHHXd*{׆1 _hR{H=^ #AqSk0&Y1›Tk&i0hW`N!dC@pYgƼFbt栮BN`XOD@(N ÁjLxDQ3peMZ!AxN:s)G;U0v~?F,|jt+2g?Dz*G;\n̥^7ͥ4Djcn Q4 y9!8;nov%O2Q d`JgQq*.F|.X# pz$"6C9R*.E^zza5̓ǝ0sV"_~ V2 'zG1C&D%.Y-&JSѠհX,ĉexoD4׮h[\J$ՋzhL]f62 dMq@!oϺ>l8Vq. =3߯; cߪ)f:|y!ߞi !+ _ӿ*lJY69+CSf:!s!/GN?BfEn5$Js\$`1t'&όZVz+x*8NR,_ \ډaE X#)~!ϟϾ trF7C+ YtNR;ISK&02eZ5TN4xPU 𳦪6$K1g`"O١XS4XԡS]qc %dJ Y>҅aSiZIޅ*O%CJ3+ \xX][ ^*/:"|Li޹ύB鶶:}՜w# J^qԁeb1u{5V^/-фn>`\9;.ْzP8g#[ 1gUAu3۰3?Nb&ÜO,:gL4*;m̧G@<ČNCKqi_7ч>f?}al39{:, P='2KG8?֚rAeGgrntH҃w2IXqk@;#KUϖ:RnB^ ^+R\PtR0Bo5"PdH(њYFژb)s}uz?pOrU'76^anaxgq6.cnXP{f )+&ڑO*HrdUы+g#AVe|W’})ń]a OzA⧕ Y0"IY gK^q;D'tvTH6,)7o~|3 )Q/Ym՝vm(bSh](j2pH9ll@Ձ8RvdlVĘBH6=WgJǦScGI=|0yoE_D"ZfqLʦe.B sA.,CZu)Æ'>EMK9V= m%<<)>'BòލR-.0AOQWb-n̘lpELیEJvn 0D؃>כޛZ]c";* e .//Yؤ'(*4oay熥jѳi8:qBo\θ"|ge{ďT1+@21ե\6]{OcUB_hGHI[ASW"??~^pk#{Zg%YvRH =pp?~NUU%#D`i܁Ԟ1gt$(BJI=soV~VY)6_ "mp}RiKRg&&H*`n@;YҹRPִ!' s1{eMtt\%K6ad!a4 w-)squ> hvjŴC¤mJaEx0.g1Mg|o\_ĜsΠv̷X:p6Rj:?Mt L80+/ 30,y(bhbxܝ^.+M[$joдBw~2A. *hKQ39-c=b=\9Qiwg.6j%zqz[g"[&Fznͩ6q,:\q3q k,QADnkuOaO~wV8`}˼q,&60bwq3ڰe&)FR S@ >|x3 qinUMm-yDݕZ$tdHn=y X0MOf쓁]!%'!櫋yAcCA GI*ma!ΟgLH^ÁWGuNih|:\\#QD`yeJIVC3IPu\ V4W :I%'͡W: [Y^3 M:ld˩UkdCٗ lօRL 2kchNgbw> \p+`K^*nJs ImfNf0X>@x9*jq(\!x}Wnr|*`Ԙ$ HHznPl; ^`D~o’^t:=S)"3K0<ߓ*+, !^YY8Jiė;4B+Z\C@~O~E\zc&)01wۆꚤ*&=CC%J>U}tnU _-n}KCH4-aj,}s^d1VcfI]n5[8dgO$;=5'5FM,:†+vOA5ڇrبRm:9h"N앉?ɟzl)hO7{UvKs_a]"lԒ ߩ~YZta{Cv*ΐ+Q]%/Mч&NiȼY%n.i MP|^HcGó8Yp4GMQV@,('0}(^*grm`',7b߉Z,H+}oo$2 {gnNŐ]>HYa+* 1@D6iF'pԇߕB%Ouhh :1RT*KaeHAꝗok$mD|:7Z79.rưv$r*F9yjYx0F1q E䴩\(:C$򇨹E]Amú>1CAa8"t8)n\~L &Į!p6MgpJq lyOSJR^S &⿈ 6bfN+29J8u^19lSbJKZDVXLD%~ޤX܈MoGȄr6n1@ѭ:_MA2oƨ}A]~tEqu7T |$|&{XJ_7"abc*[&hWX`ƬqORA9 uauNbVdfd#lE=ɎO2R/,AMΧո?Gn& /vt|fN`z+~ؿ/JhaK%p\Sֲ)ͧ$9/q,k<Ӷ&D]8l/f2'z"""+=~ .0j~S9#P2}ќFvqyo1u586$++QIi<>_'^>bB19hh띨!Y̰Q%d$:ʿ|yʍTm[(idB€ᥟsq`]B J GDT"w/I|b.jg.<;ΗPpwt|-ͳ͈5a-9#@g^=U+9?~PG)"~ /[~*0F,Uz v7&AsilS.[5m.d}[vUCVbXwEŒ6k5JR7ٮ|w\O_𞽁97exٽviwu"ODayvE9Z/gJ,:NLSo"5_κs686!Kx==pUf_.~o0 Pq /b!pU¿LP24+y|Zupuo`T8oת*KaXdn\-cx9ekD[~)u0g*]I;^mac%JxR#y,6ކ0,_?R%^\G8mvV,{CN*̦ ԥ&5%& !`@ QpA-krEi6҉dl(V`r[ۭGTuUV<ə%dqn+@QPY֐6$ȏn툽hJu8NKA3m‘ 5b2Sfׄ #וgF}0>ǁ jZL.ɹk%,Oф_O*UZ3ݓI5QȪK\Qy(_/ {/s%+"('<?4Oؽ )!/ȁxW 7hܬ\)_k ԿUD,8ę7cAު-OKoVZa=t %{{xͯ˲O_QR,j>V:k,p*@=ד>mNE5U[ Qê>4?%*iGj|umf䛒 b` ~;7v/tP|3r^M( ~?^TT[ɪF!l䗓.`l81V~,pQkS:hL_XxHcMigQe#L8+۹!8bx'Y&>?MkgMM6ȼOpE}Ey:om" gxk}+V)(6|; œjJe9ƌRܘ((/mD·:p.QFgFG^ىIZ 9&DO7D\3$8 ګ#5ɓÊ+e1F)'#R&'2wȏv!z "à;G^R~/ Hτ7?.gwpM KPYb K4\%L 9@X5#BQ1-v)2TK,O;i5S i"׀MNӤSS+hWa6pHT d֓yV9*SqNu.>'5EZ˦o$E M>3g~G|q]$Y6@ 47Ym3 ݷqhv&GBWr ,$ߕczuxz%:*"ej[16^.DEP?kN—lyE򶗗Xۊ'"5҉Gb 4b3Li\3&Z7넮QUJHFT!:"_MhSm^%41sI$$Q9^0 VV Q4c\l@9-b"^*AӤMJ?tpu!Ӡ&`TAIխ2C#)I./|ruXx ^Z-D8q;߾yںf–#q_"?7Raǭ}!13-iȦF &+AE,$7[Q XHbȌeFZ6Np ;^ QnfڔKfYh-y;MfP}w۩᧙u"_ !WS/A/_ 8Svۿ`|k^&%&)ȶ@6ѠLHY-ԜPJX%2nĭ]1_CqQqȽ_sXoF]rZC{KM^'G;L`1jq}rhǸGX8gbYiq[Y-^RIj 6C@2_kfw* n΋&g=j *>ޘז7+_|k'Cdj9XPۜm9!ۡ#PC.B]/dɈmÐyhAm:tIbX*}dmHƘ)xZȺ‡hB/ƱATra(}z?c֦`G;# J tjMP,& VOB4vFaZcܧoMaނ鬡ˉ48g;Ekj@9_v \]bO^hj~lTO*"&2b lپ%Ђ $8ڸ*,%;*s_\%Fgf"e;eH/i|3 V'dίr=qTqR1/B B/նӻEv'.4`2tCM'8)7cYY CD#ĵi&CS|wJJ,eÜ/$S/ $l^" &wZ.9Pi0L%1y>m1W:qpo[Pc̠NZ-L` / nEѲC^dI,a)C~Ŀ"RFUo^&.i];ա2DVX ') y1ˀ`]! MZIvF=~%xZ- @:lZ/-Odf ȿT.va`x17eh@;>@^J]eӳu5Ajq*-?Ů.]+-k~G:@t1d_d*"mM>73g%9TNa-*3x=Uk4~KI5E_ْ4eW[n6y0@I&0Z e;_1@W_z0󓸫 [0gA&'!Gln&B. {gyAGejY҇*@y.LS;غg]"3!M+s@Cy|f%&+ּ -GJ`xj/Ӷ3r8)N1WDȻc;+'4 pd;N| e۰TpgJ!ץ.6"Ҙpb8/W8N-2 K@dt0eF!&/ u,łIW:csFc8 'a $b7=V,kvԦ;P+ʈ&ZylŬy%6׶WNėdXƨʂaySXiNzUIJ,ɄE>fdkiW \`/ZTdSwXp?t3'u {߀T \f8r`J2=="R@\RΔfVe ؾ/ޓ]OAxH{f՘L vqpM7&5j5o 1 _t?w/x9>囋,I^7^frb%kQMAUF!@]GǷ}ՎpQdyk~\O휣H,/ -MPvN4_iJϫӶ6֑-yT^IubR 1^Tr }2D0i&kwGU&RYROx{t 8J {_V+ #[urFNdAF:O]82o3A\ʵ4hQ>ڟ=LjzeR{,2ҝk`;W?"v3A[OP/ K[CR1#.&)3ˌ_J/1 0:ƕ@o6rjo,졦tWO׺pP@ X^-.4|S4mw^+5wd25J]ڡX6:P6濣Gi~~q24Gm8z#tWѕKUݎ&K,&EYixp ~n+[5uI),CAs#/el?btt TT?!_ܼX: /,XXu4q.Qn?! 9;Jr,I#8fac*WŐyCv^%a 4-ksUej4!MX+E \U5[n搗vnR0Lu}J! I1zsF ]CUTߤ]Ž< @kҶOBt; ];mI%]OPЃ=1DAOVR4 &u/c&*q@A_4ж>)O앟6$pte_*pbV`MYPLBM$+= 힋N$3񌄮~BD00j]&& B.wPU9rwݑs(b\d2)"Jg!("ITp6v,GX1l+F7(FzХAƀcTZhUYFw0c3Wbgi%" >o ٙXĵZ:&2:+¸ƌpJ 5W֩fDV[T6L^w"Cc))U;6{@^hRB1A4Պ'Fu4Bʄ~&I{0[(bKTxq?avBt _9O`i9x>88vfqM46mvՙ@_/1-vSR(}_cteLGƥV}^VCǛ}GLS *W@\ ק.[NDPI\WTZ4,W_"GLc]j˿; 0(xkW_c`oVh$9o'Y -O8Caw!q+-N*!:S*6}Y9t&%TӢ1bJd(J~3roq޴U44ՔcG u. K\Tm8 U0WiM=иTO̐V!,Tmnj8.Dű*iƖQɸp[>b _{r蹢@A6Tܗʴ(Jzyg);hQ2k<Ȣ;|iIcX56)wt@nQoOޔ.Rĵy\e͈Iw*ԁv{t,@/Woc$RN8J I'Zj"~@<H9"TꙩxBsm?r'0>\z+rr;Iy6< tF/&=>jaRY4+護zn|/$mj$ IlVl0 Be1-VP雄.y)uNcgCG2!oZ-=k85oQ侏*m*8FzfVT?G܆Xʕ~(bG8RVwzW{ kJ[@sUQM6_Cۊf>NŨ!pz^%Bcf1ւT:2WTZC!X3[[\fZGVuQHńïтXǿpΫHkk{!R#Aarsu|h넴N3pj4s+ߕ0դ.߬-IbՈF&; `~13w"XZ1['Y rGGjRpI| [o~?\0c ##lb#O$,6O(4PYcHhJjtϰBĚcP@ؽQЖ~e+qr*e5!Ioj- _]R w2x })aD=?n3j ~aHkc .]C]PnTWuS'$2jH|OG4EN8Q^>+[`M{6"j!2VǼ$ +41pU#Cr $GqFJ2-[;;۰~M]-M<}6P+9+չCJRmtAd6<>,H9O* Z[FD=Y+TKxLjlݱ,fƫ5d|ϾmftJ\(؄ $y`΍CXc:_D φAdRtbNI^>1.L566틜!e24 +ʮ5Aq\NG9O?k$Bpޔ4pTLo}"!Nx؉)Aݬ~1 ݒBh9&YqQUsu%MCһGORVDvpF-F^vcV>?'X%I #{|ә_^RY0;A?kDݒ/4 +-'yLs1Q"kfu LK ZLW dvBQmOjl`&/+/y┺- .P⬾] W}NSA4C,-YgICX^PA8WgfRyN!8φH9eD(AډP{,]4n4ЍGj5sYd9;LJ{ʘ4< ,j7OpkߒP' \q7FrQ41 &"x.$X7yy9yلpvf _qJx ~KDZq+` |c%t5S ÔKD$gεNMP6rr#nd@,;/XwcuMw: ۬F|IʃOѫM6w'̰F۽} ')AЄDeS-+~@nrOQn 퍌)T^v&)dw,&fH'%6 # gI[ K&'+BL Gq5zB@ABt8Io|JhKs}#JJ!go^*LhO}UXPAJZHX1G:9f?eVg|hk0:b?D5vpVi0U|FbwѮ ć> T&L*y]K#&p$N߭fb4bP߶\?] ,eXX!mhȵ@UkevKQ~OF5E؏T~ p\98mS"XrY^xu|]M@ı1ݑ8A9.n6~,{.0ܸ(`\Eٯz?Px#G} aψ#0[&Si+-@g0yBճj+sn:yjM"uYڂX0>D?bQحt{]R7v*2+273<Ҟ޶ YZ