libvirt-daemon-driver-network-6.0.0-lp152.9.9.1 4>$  Ap`X/=„5oB.=g0A*\r @0 TfS)絿:6;%hU8!Th^;*h myb*m:/FadLY]S:v ryہ1{ts?:v21fmCqzD/aMp"8YÅo5-6_?e."a`J6^N] g,SDYs͙W대ݗE/{X0e8b7e8068d11e430655f0fe9655d84bd36f6081271c90fd92b719f05ff0df0f27f801d8a9634f5245c24c93546ad454268db01a`X/=„?/8M.JRڳ^8C<:('̰. +{J]ݬZ;m&,=G)tLb^ę]MQUҴ18kWT35#NOXA|%_N'T~AUVɽ8T(@rOT-7؛&}M`( -H M͒ e^?U\)5FۺdqRSQ:߽ U3Mg. >pF???d & 2 ` 2 K]qw~ j@     0t{`{({()8)9.:FE=5f>5n?5v@5~F5G5H5I6X6,Y6<\6t]6^7 b8c9Md9e9f9l9u9v:<w@[<[0@[{@[{@[)[@Z?Z@ZZZI@ZZ`@ZZZ@Z@Z1@Z@Z_@Z}@Zk@ZiZaZWQZLZ:PZ7Z2gZ%8Z!D@ZZZ@ZfZfZ@Z@ZZYY@YY@Yܶ@YdYp@YY@Y{YA@YX@YYYKY@YW@Y@Yx@Yx@YqY\YTY7Y6@Y1S@Y"Y@Y]Y.XX9@XӸXg@X~@XXZX @X7@X@X@X@X@XYX@X6@X6@X6@XXXc@XEVX,J@X!@X@W@WiWF@W@WWWW@WW@W~WWv[@WgWbWaC@WYZ@WUeWH6WEWEWJames Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig Lin Ma James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig Dominique Leuenberger James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig Cédric Bosdonnat James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig Goldwyn Rodrigues James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig Jim Fehlig James Fehlig James Fehlig Bruce Rogers James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig jfehlig@suse.comJames Fehlig James Fehlig James Fehlig Jan Engelhardt James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig James Fehlig jfehlig@suse.comjfehlig@suse.comJan Engelhardt James Fehlig jfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comantoine.belvire@opensuse.orgjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comrbrown@suse.comkukuk@suse.deolaf@aepfle.dejfehlig@suse.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comjengelh@inai.dejfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comdmueller@suse.comjfehlig@suse.comjengelh@inai.dejfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.competracvv@opensuse.orgjfehlig@suse.comjengelh@inai.decbosdonnat@suse.comjfehlig@suse.commwilck@suse.comjfehlig@suse.comjengelh@inai.dekukuk@suse.dejfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.commatwey.kornilov@gmail.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjengelh@inai.dejfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comolaf@aepfle.dejfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comcbosdonnat@suse.comcbosdonnat@suse.comnormand@linux.vnet.ibm.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comolaf@aepfle.dejfehlig@suse.comcyliu@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comdmacvicar@suse.dejfehlig@suse.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comfcastelli@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comjfehlig@suse.comcbosdonnat@suse.commlatimer@suse.comcbosdonnat@suse.comLed cbosdonnat@suse.comcbosdonnat@suse.comjfehlig@suse.comcbosdonnat@suse.comcbosdonnat@suse.comjfehlig@suse.comcbosdonnat@suse.comjfehlig@suse.comcbosdonnat@suse.com- qemu: Do not require TSC frequency to strictly match host and ensure TSC tolerance interval is bounded d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch bsc#1184858- qemu: Add virtio related options to vsock 19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch, bd112c9e-qemu-add-vsock-virtio-options.patch bsc#1182364- resolve hangs/crashes on libvirtd shutdown c5bf40bf-add-driver-shutdown-helpers.patch, 018e213f-always-init-prio-cond.patch, 255437ee-add-threadpool-funcs.patch, 1eae52b9-rpc-fix-double-unref.patch, 0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch, b776dfa8-add-shutdown-facility-netserver.patch, 94e45d10-rpc-finish-threads.patch bsc#1182783- qemu: fixing auto-detecting binary in domain capabilities 6d786f95-qemu-fix-dom-caps.patch, c7600931-qemu-rework-dom-caps-cache.patch bsc#1185119- spec: Remove use of %fdupes since it was only acting on files that should be excluded bsc#1184293 - Remove bogus comment from /etc/sysconfig/libvirtd bsc#1184253- qemu: Fail VM creation if unable to fill machine type 67b973b5-qemuDomainDefPostParse-no-machine.patch boo#1183767- virtlockd: Fix crash on exec-restart 6b8e9613-avoid-use-after-free.patch, eab7ae6b-fix-array-access.patch bsc#1183411- libxl: Add lock process indicator to track resource locking fa58f571-libxl-lock-proc-indicator.patch bsc#1182367- libxl: Fix domain shutdown 87a9d3a6-libxl-fix-domain-shutdown.patch bsc#1182515- qemu: end the agent job in qemuDomainSetTimeAgent d61f95cf-qemu-end-agent-job.patch boo#1174607- apparmor: Allow lxc processes to receive signals from libvirt lxc: Set default security model in XML parser config 0d05d51b-apparmor-lxc-fix.patch, cf4e7e62-lxc-def-secmodel.patch bsc#1179735- Fix 'make check' with all downstream patches applied. Some patches touch config files and needed the corresponding augeaus test files updated. Updated patches: b196f8fc-CVE-2020-15708-doc.patch, suse-libvirtd-disable-tls.patch, suse-qemu-conf.patch, suse-ovmf-paths.patch, suse-libxl-disable-autoballoon.patch boo#1175574- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in SUSE distros b196f8fc-CVE-2020-15708-doc.patch bsc#1174955- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing 955029bd-CVE-2020-25637.patch, 50864dcd-CVE-2020-25637.patch, e4116eaa-CVE-2020-25637.patch, a63b48c5-CVE-2020-25637.patch bsc#1177155- Xen: Don't add dom0 twice on driver reload de49d5ba-xen-avoid-multiple-dom0.patch bsc#1176430- Xen: Add support for passing arbitrary commands to the qemu device model, similar to the xl.cfg(5) device_model_args setting b0cad42e-xen-dm-cmdline-passthrough.patch, 3d76f4fc-xen-dm-cmdline-config-converter.patch bsc#1174139- virdevmapper: Handle kernel without device-mapper support feb8564a-handle-no-devmapper.patch, 53d9af1e-ignore-devmapper-open-errors.patch boo#1175465- qemu: Avoid stale capabilities cache host CPU or kernel command line changes c5fffb95-kernel-cmdline-parser.patch, b611b620-check-s390-secure-guest.patch, 657365e7-check-amd-secure-guest.patch, 0254ceab-s390-host-validate-check.patch, 4b561d49-amd-host-validate-check.patch, 2c3ffa37-update-amd-doc.patch, f0d0cd61-update-s390-doc.patch, 8cb9d249-autoptr-file-callback.patch, a551dd5f-intro-virHostCPUGetSignature.patch, 44f826e4-virHostCPUGetSignature-x86.patch, 2a68ceaa-virHostCPUGetSignature-ppc64.patch, d3d87e0c-virHostCPUGetSignature-s390.patch, 004804a7-qemu-invalidate-caps.patch bsc#1173157- CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. 22494556-CVE-2020-14339.patch bsc#1161883, bsc#1174458- libxl: Normalize MAC address in device conf on netdev hotplug ec07aad8-libxl-normalize-mac-addr.patch bsc#1172052- qemu: Fix memory leak in qemuDomainGetStatsIOThread CVE-2020-12430 9bf9e0ae-CVE-2020-12430.patch bsc#1170765- libxl: Add support for 'passthrough' and 'e820_host' settings b7d6648d-conf-add-e820-host.patch, 5749395b-libxl-e820-host.patch, f3ef7daf-xenconfig-e820-host.patch, 34077c1b-tests-check-e820-host.patch, fadbaa23-conf-add-passthrough.patch, 9529e007-libxl-passthrough.patch, 9cb8bc6f-xenconfig-refactor-features.patch, b523e225-xenconfig-passthrough.patch, bed32525-tests-check-passthrough.patch bsc#1167217- qemu: fix hang in p2p + xbzrle compression + parallel migration 93b15ba0-qemu-fix-hang-in-p2p-xbzrle-compression-parallel-mig.patch bsc#1161159- api: Disallow virDomainAgentSetResponseTimeout on read-only connections. CVE-2020-10701 4cc90c2e-CVE-2020-10701.patch bsc#1168680- libxl: Add support for max event channels with maxEventChannel attribute on the xenbus controller 8e669b38-conf-add-event-channels.patch, a93f55c5-libxl-add-event-channels.patch, 967f4eeb-xenconfig-event-channels.patch bsc#1168767- libxl: Bump minimum supported Xen version to 4.9, allowing use of newer libxl APIs for retrieving memory statistics suse-bump-xen-version.patch bsc#1157490, bsc#1167007- qemu: Create multipath targets for PRs a30078cb-qemu-create-mp-target.patch, aeb909bf-qemu-multipath-fix.patch bsc#1161883- qemu: Allow format probing under special circumstances ae9e6c2a-qemu-allow-cond-format-probe.patch bsc#1165588- xen: Fix the list of supported ovmf firmwares suse-xen-ovmf-loaders.patch bsc#1159793- lib: Prohibit parallel connections with tunneled migration e092daac-prohib-parallel-tunneled-mig.patch jsc#SLE-6998- BuildRequire pkgconfig((lib)?udev) instead of (lib)?udev: allow OBS to shortcut through -mini flavors.- spec: Fix several rpmlint warnings 72ed254b-drop-exec-perms-bashcompletion.patch- xen: Support setting credit2 scheduler parameters 849052ec-libxl-support-credit2.patch bsc#1162160- xen: Inhibit libvirtd shutdown when domains are running 6c1dddaf-libxl-shutdown-inhibit.patch bsc#1157100- Update to libvirt 6.0.0 - jsc#SLE-6997, jsc#SLE-6998 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: 0a65cba4-news-fix.patch 07aaced4-Add-TAA-No.patch, f411b7ef6-Add-TSX-CTRL.patch, 50d7465f-qemu-firmware1.patch, 57f9067c-qemu-firmware2.patch, 7c5264d2-qemu-firmware3.patch, 8e1804f9-qemu-firmware4.patch, 8fcee478-qemu-firmware5.patch- qemu: Fix firmware auto detection 50d7465f-qemu-firmware1.patch, 57f9067c-qemu-firmware2.patch, 7c5264d2-qemu-firmware3.patch, 8e1804f9-qemu-firmware4.patch, 8fcee478-qemu-firmware5.patch boo#1157378, bsc#1159796- CVE-2019-11135: Add TSX_CTRL and TAA_NO bits for IA32_ARCH_CAPABILITIES MSR 07aaced4-Add-TAA-No.patch, f411b7ef6-Add-TSX-CTRL.patch bsc#1152505- virt-create-rootfs: add SLE 15 and SLE 12 service packs support bsc#1154093- Update to libvirt 5.10.0 - bsc#1157149 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: 2552752f-libxl-fix-lock-manager-lock-ordering.patch - Added patches: 0a65cba4-news-fix.patch- spec: Enable 'libvirt' firewalld zone for firewalld >= 0.7.0 boo#1157766- libxl: Fix lock manager lock ordering 2552752f-libxl-fix-lock-manager-lock-ordering.patch bsc#1145774- spec: Forcibly remove '--listen' option from LIBVIRTD_ARGS in /etc/sysconfig/libvirtd since it is incompatible with socket activation. Also add '--timeout' option for consistency with upstream. boo#1156161- Enable automatic firmware seletction and add the new smm flavor to the build-time firmware list jsc#SLE-6997- Update to libvirt 5.9.0 - jsc#SLE-7440 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html- Update to libvirt 5.8.0 - bsc#1149100 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html- Update to libvirt 5.7.0 - Experimental split of libvirtd into separate daemons - bsc#1145440, bsc#1145586 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: 4ec3cf9a-apparmor-rules.patch, f38ef0fa-no-RDMA-check.patch, 411cdaf8-apparmor-check-profile-name.patch. 696239ba-qemu-fix-query-cpus-fast.patch, 09eb1ae0-conf-add-xenbus-controller.patch, fb059757-libxl-add-xenbus-controller.patch, ec5a1191-libxl-support-max-grant-frames.patch, 5a64c202-xenconfig-support-max-grant-frames.patch, CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch, e0246257-cputest-add-data-for-Cascadelake-Server.patch, 5cd9db3a-cputest-add-data-E3-1225-v5.patch, 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch, 96f41cd7-admin-reject-clients.patch, f111e094-locking-restrict-sockets-to-mode-0600.patch, e37bd65f-logging-restrict-sockets-to-mode-0600.patch, 9f4e35dc-network-improve-chain-create-error-report.patch, 686803a1-network-split-ipv4-ipv6-chains.patch, c1c235eb-nework-clear-cached-error.patch, 4330d138-network-refactor-global-chains.patch, 3b66bd9a-add-debug-chain-creation.patch, c6cbe187-network-delay-global-fw-setup.patch, CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch, CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch, CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch, CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch, 51f9f80d-fix-copying-bitmaps.patch, 2878278c-cpu_map-add-Cascaselake-Server.patch, 4a0f604d-cpu_map-distribute-Cascaselake-Server.patch, d5572f62-qemu-support-override-max-thread.patch, 673f805d-qemu-chown-uniqDir.patch, 975b004d-virtlogd-over-logrotate.patch, 18d47d61-revert-d00c77ae.patch, d6943eab-libxl-pmsuspend-event.patch, 3d179919-virsh-precopy-bandwidth.patch, f4bdd829-rename-precopy-bandwidth.patch, xen-pv-cdrom.patch, blockcopy-check-dst-identical-device.patch, suse-libvirtd-service-xen.patch, xen-sxpr-disk-type.patch- virsh: use upstream name for migration precopy bandwidth parameter f4bdd829-rename-precopy-bandwidth.patch bsc#1145586- virsh: support for setting precopy bandwidth in migrate 3d179919-virsh-precopy-bandwidth.patch bsc#1145586 - Rename patches to include commit ID revert-d00c77ae.patch -> 18d47d61-revert-d00c77ae.patch libxl-pmsuspend-event.patch -> d6943eab-libxl-pmsuspend-event.patch- libxl: fix domain state following successful suspend operation revert-d00c77ae.patch, libxl-pmsuspend-event.patch bsc#1145440- logging: ensure virtlogd rollover takes priority over logrotate 975b004d-virtlogd-over-logrotate.patch bsc#1137137- qemu: fix default value of security_default_confined Updated suse-qemu-conf.patch bsc#1143871- qemu: Change owner of temp directories under /var/lib/libvirt/qemu 673f805d-qemu-chown-uniqDir.patch bsc#1143497- Add apparmor-abstractions as a required package for daemon (bsc#1142992)- qemu: Add support for overriding max threads per process limit d5572f62-qemu-support-override-max-thread.patch bsc#1133719- cpu_map: Add Cascadelake-Server CPU model e0246257-cputest-add-data-for-Cascadelake-Server.patch, 2878278c-cpu_map-add-Cascaselake-Server.patch, 4a0f604d-cpu_map-distribute-Cascaselake-Server.patch bsc#1141251- util: fix copying bitmap to larger data buffer 51f9f80d-fix-copying-bitmaps.patch bsc#1138734- api: disallow virConnect*HypervisorCPU, virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc on read-only connections CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch, CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch, CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch, CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168 bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305- network: delay global firewall setup if no networks are running 9f4e35dc-network-improve-chain-create-error-report.patch, 686803a1-network-split-ipv4-ipv6-chains.patch, c1c235eb-nework-clear-cached-error.patch, 4330d138-network-refactor-global-chains.patch, 3b66bd9a-add-debug-chain-creation.patch, c6cbe187-network-delay-global-fw-setup.patch, Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch bsc#1133229 - Renamed patches to include commit id: CVE-2019-10132-admin-reject-clients.patch -> 96f41cd7-admin-reject-clients.patch CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -> f111e094-locking-restrict-sockets-to-mode-0600.patch CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -> e37bd65f-logging-restrict-sockets-to-mode-0600.patch- spec: add systemd-container dependency to qemu and lxc drivers bsc#1136109- cpu: add tests for md-clear feature Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and added 5cd9db3a-cputest-add-data-E3-1225-v5.patch bsc#1135273- CVE-2019-10132: admin: reject clients unless their UID matches the server UID CVE-2019-10132-admin-reject-clients.patch, CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch, CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch bsc#1134348- cpu_map: add cpu feature md-clear. CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch bsc#1111331 bsc#1135273- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack module at libvird start revert-7431b3eb.patch, revert-8b967198.patch bsc#1133229- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime for read-only connections and users CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch bsc#1131595- apparmor: reintroduce upstream lxc mount rules Drop apparmor-no-mount.patch bsc#1130129- supportconfig: collect rotated logs in /var/log/libvirt/* Modified libvirt-supportconfig bsc#1124667- hook: encode incoming XML to UTF-8 before passing to lxml etree fromstring method Modifed suse-qemu-domain-hook.py boo#1123642- libxl: change autoballooning default to disabled suse-libxl-disable-autoballoon.patch jsc#SLE-3059- conf: add new 'xenbus' controller type 09eb1ae0-conf-add-xenbus-controller.patch - libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller fb059757-libxl-add-xenbus-controller.patch, ec5a1191-libxl-support-max-grant-frames.patch, 5a64c202-xenconfig-support-max-grant-frames.patch bsc#1126325- Replace patches with upstream variants Old: 0001-apparmor-Check-libvirtd-profile-status-by-name.patch, 0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch New: 411cdaf8-apparmor-check-profile-name.patch, 696239ba-qemu-fix-query-cpus-fast.patch- util: skip RDMA detection for non-PCI network devices f38ef0fa-no-RDMA-check.patch bsc#1112182- qemu: s390: show correct CPU status after guest crash 0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch bsc#1127841- apparmor: fix more fallout from changing libvirtd profile to a named profile 4ec3cf9a-apparmor-rules.patch, 0001-apparmor-Check-libvirtd-profile-status-by-name.patch boo#1125841- Update to libvirt 5.1.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 11c8aca9-libxl-set-mem-after-balloon.patch, 70c2933d-apparmor-named-profiles.patch, a3ab6d42-apparmor-conv-libvirtd-named-profile.patch, b6440119-qemu-conf-sev.patch, a404ac34-qemu-cgroup-sev.patch, 6fd4c8f8-qemu-domain-sev.patch, 17f6a257-security-dac-sev.patch, a2d3dea9-qemu-caps-dac-override-sev.patch, 620d9dd5-qemu-no-dac-override-nonroot.patch - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577- spec: disable VirtualBox driver- qemu: don't use CAP_DAC_OVERRIDE capability if non-root 620d9dd5-qemu-no-dac-override-nonroot.patch boo#1125665- qemu: fix issues related to restricted permissions on /dev/sev b6440119-qemu-conf-sev.patch, a404ac34-qemu-cgroup-sev.patch, 6fd4c8f8-qemu-domain-sev.patch, 17f6a257-security-dac-sev.patch, a2d3dea9-qemu-caps-dac-override-sev.patch bsc#1124842- apparmor: add support for named profiles and convert libvirtd profile to a named profile 70c2933d-apparmor-named-profiles.patch, a3ab6d42-apparmor-conv-libvirtd-named-profile.patch boo#1118952 - libxl: save current memory value after successful balloon 11c8aca9-libxl-set-mem-after-balloon.patch bsc#1120813- Noun phrase for %description doc. - Remove idempotent %if..%endif pair around %package bash-completion. - Reduce hard requirements on bash-c and documentation.- Enable bash completion in Leap15/SLE15 and newer- Update to libvirt 5.0.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Remove UML hypervisor driver - Dropped patches: de09ae2f-libxl-support-openvswitch.patch, 0a1b5653-xenconfig-support-openvswitch.patch - FATE#320928, FATE#325817, FATE#326380, FATE#326698- Requires: ncurses expands to Requires: libncurses5, which is not required by any component of this package. Remove it along with the BuildRequires: ncurses-devel- Update to libvirt 4.10.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 14d03b27-libxl-rm-redundant-virObjectEventStateQueue.patch, 82452a5d-libxl-rm-goto-libxlDomainShutdownThread.patch, da4b0fd9-libxl-support-soft-reset.patch, libxl-qemu-emulator-caps.patch - Added patches: de09ae2f-libxl-support-openvswitch.patch, 0a1b5653-xenconfig-support-openvswitch.patch - FATE#320928, FATE#325817, FATE#326380, FATE#326698- libxl: add support for soft reset 14d03b27-libxl-rm-redundant-virObjectEventStateQueue.patch, 82452a5d-libxl-rm-goto-libxlDomainShutdownThread.patch, da4b0fd9-libxl-support-soft-reset.patch bsc#1081516- Update to libvirt 4.9.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - FATE#326371- Update SLE15 SP1 with openSUSE Factory package FATE#325848, FATE#326368 - FATE and bug references made in the SLE15 package since the last Factory update: FATE#325817, bsc#959329, bsc#1074014, bsc#1106420, bsc#1108395 - Patches in SLE15 package that are dropped by this update: 1b0c42ff-libvirtd-depend-machined.patch, ac4a12db-libxl-fix-hasManagedSave.patch- Update to libvirt 4.8.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 60b4fd90-libxl-rm-vm-finish-phase.patch, e39c66d3-libxl-fix-p2p-migration.patch, 47da84e0-libxl-fix-job-handling-migsrc.patch, 0149464a-libxl-fix-job-handling-migdst.patch, 5ea2abb3-libxl-join-mig-rcv-thread.patch- Fix RPM groups. Remove idempotent %if..%endif guards. - Remove redundant %clean section.- libxl: fix VM migration on busy hosts 60b4fd90-libxl-rm-vm-finish-phase.patch, e39c66d3-libxl-fix-p2p-migration.patch, 47da84e0-libxl-fix-job-handling-migsrc.patch, 0149464a-libxl-fix-job-handling-migdst.patch, 5ea2abb3-libxl-join-mig-rcv-thread.patch bsc#1108086- Update to libvirt 4.7.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 9ed59012--revert-jansson1.patch, 54f2b5e3-revert-jansson2.patch, b56950fd-revert-jansson3.patch, 6c3d66ac-revert-jansson4.patch, 8e373e6d-revert-jansson5.patch, 6f99de31-revert-jansson6.patch, f204cf51-revert-jansson7.patch, 5a58b5ed-revert-jansson8.patch, 63f6e0e9-revert-jansson9.patch, 8687eba-revert-jansson10.patch, e96e71d8-revert-jansson11.patch, d99a8959-revert-jansson12.patch, 074a7e14-revert-jansson13.patch, 86db0db9-revert-jansson14.patch- Revert switch to jansson boo#1104820 - Dropped: temp-build-fix.patch - Added: 9ed59012--revert-jansson1.patch, 54f2b5e3-revert-jansson2.patch, b56950fd-revert-jansson3.patch, 6c3d66ac-revert-jansson4.patch, 8e373e6d-revert-jansson5.patch, 6f99de31-revert-jansson6.patch, f204cf51-revert-jansson7.patch, 5a58b5ed-revert-jansson8.patch, 63f6e0e9-revert-jansson9.patch, 8687eba-revert-jansson10.patch, e96e71d8-revert-jansson11.patch, d99a8959-revert-jansson12.patch, 074a7e14-revert-jansson13.patch, 86db0db9-revert-jansson14.patch- spec: don't restart libvirt-guests when updating libvirt-client bsc#1104662- Update to libvirt 4.6.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Switch from yajl to jansson - Dropped patches: libvirt-4.5.0-apparmor-add-missing-comma.patch - Patches added to fix upstream bugs: temp-build-fix.patch- Fix apparmor failure at startup because of syntax error in libvirt profile: * Add libvirt-4.5.0-apparmor-add-missing-comma.patch (picked from upstream).- Update to libvirt 4.5.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 67c56f6e-libxl-logfd-leak-fix.patch - spec: use more macros in file paths - libxl: Implement virDomainBlockResize 0001-libxl-add-support-for-BlockResize-API.patch FATE#325467, bsc#1094325, bsc#1094725- spec: enable gluster storage backend for openSUSE- spec: BuildRequires glusterfs-devel when gluster support is enabled- spec: use wireshark plugin directory from pkg-config- virt-aa-helper: add SUSE path to OVMF and AAVMF images Adjusted suse-ovmf-paths.patch boo#1095556- Update to libvirt 4.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - CVE-2018-3639 - Dropped patches: 1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch - libxl: fix leaking logfile fds 67c56f6e-libxl-logfd-leak-fix.patch bsc#1094480- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits CVE-2018-3639 1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch bsc#1092885- spec: enable libssh support for suse_version >= 1500- Update to libvirt 4.3.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Remove legacy Xen driver - Dropped patches: 09877303-virSocketAddrParseInternal.patch, 412afdb8-intro-virSocketAddrParseAny.patch- util: improvements in error handling 09877303-virSocketAddrParseInternal.patch, 412afdb8-intro-virSocketAddrParseAny.patch bsc#1080957- Update to libvirt 4.2.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 6b3d716e-keycodemap-py3.patch, 33c6eb96-fix-libvirtd-reload-deadlock.patch, 464889ff-rpc-aquire-ref-dispatch.patch, c6f1d519-rpc-simplify-dispatch.patch, 06e7ebb6-rpc-invoke-dispatch-unlocked.patch, 86cae503-rpc-fix-pre-exec.patch, eefabb38-rpc-virtlockd-virtlogd-single-thread.patch, fbf31e1a-CVE-2018-1064.patch, fb327ac2-virtlockd-admin-socket.patch, 64370c4b-libxl-MigrateBegin.patch, 99486799-libxl-MigrateConfirm.patch, f5eacf2a-libxl-MigratePerform.patch, 4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch, fe51dbda-libxl-use-FindByRef.patch, 60b3fcd9-libxl-MigratePrepare.patch, 3c89868c-libxl-lock-after-ListRemove.patch, 13e81fc6-libxl-EndJob-on-error.patch, 594b8b99-libxl-DefineXMLFlags-API-pattern.patch, c66e344e-libxl-dont-deref-NULL.patch, 83edaf44-libxl-dont-hardcode-sched-weight.patch, apibuild-py3.patch- libxl: don't hardcode scheduler weight 83edaf44-libxl-dont-hardcode-sched-weight.patch bsc#1086377- libxl: fixes and improvements in migration APIs 64370c4b-libxl-MigrateBegin.patch, 99486799-libxl-MigrateConfirm.patch, f5eacf2a-libxl-MigratePerform.patch, 4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch, fe51dbda-libxl-use-FindByRef.patch, 60b3fcd9-libxl-MigratePrepare.patch, 3c89868c-libxl-lock-after-ListRemove.patch, 13e81fc6-libxl-EndJob-on-error.patch, 594b8b99-libxl-DefineXMLFlags-API-pattern.patch, c66e344e-libxl-dont-deref-NULL.patch bsc#1080957- lockd: fix typo in virtlockd-admin.socket fb327ac2-virtlockd-admin-socket.patch bsc#1085386- Install correct firewall service file depending on availability of firewalld vs SuSEfirewall2 libvirtd-relocation-server.xml bsc#1083455- qemu: avoid denial of service reading from QEMU guest agent CVE-2018-1064 fbf31e1a-CVE-2018-1064.patch bsc#1083625- virtlockd: fix loosing lock on re-exec 464889ff-rpc-aquire-ref-dispatch.patch, c6f1d519-rpc-simplify-dispatch.patch, 06e7ebb6-rpc-invoke-dispatch-unlocked.patch, 86cae503-rpc-fix-pre-exec.patch, eefabb38-rpc-virtlockd-virtlogd-single-thread.patch bsc#1076861- libvirtd: fix potential deadlock when reloading 33c6eb96-fix-libvirtd-reload-deadlock.patch bsc#1079150- Update to libvirt 4.1.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 72adaf2f-revert-qemu-monitor-error-report.patch, 71d56a39-nodedev-fix-parse-PCI-address.patch, 68eed56b-conf-smbios-oem-strings.patch, 76977061-qemu-smbios-oem-strings.patch, 0c710a37-libxl-resume-lock-on-mig-failure.patch, 759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch, c2dc6698-fix-deadlock-obtaining-hostname.patch, c391e07e-libxl-clock-settings.patch, ef71caea-libxl-memalign.patch, suse-apparmor-signal.patch- libxl: round memory values to next 1MiB increment ef71caea-libxl-memalign.patch bsc#1082041- libxl: add support for specifying clock offset and adjustment c391e07e-libxl-clock-settings.patch bsc#1082161- Remove all uses of python2 during the build (bsc#1080034) 6b3d716e-keycodemap-py3.patch apibuild-py3.patch - Determine hostname early to avoid code injection in lxc driver. (bsc#1080042) 759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch c2dc6698-fix-deadlock-obtaining-hostname.patch - Add basic support of connectGetAllDomainStats for lxc driver (fate#323742) 0001-Extract-stats-functions-from-the-qemu-driver.patch 0002-lxc-implement-connectGetAllDomainStats.patch- qemu: Support setting OEM strings in SMBIOS 68eed56b-conf-smbios-oem-strings.patch, 76977061-qemu-smbios-oem-strings.patch FATE#323624 - libxl: resume lock process after failed migration 0c710a37-libxl-resume-lock-on-mig-failure.patch bsc#1076861- qemu hook: Change shebang to /usr/bin/python3 - spec: Require python lxml in daemon-hooks subpackage- Update to libvirt 4.0.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 2d07f1f0-fix-storage-crash.patch, 69ed99c7-dom0-persistent.patch, 8599aedd-libvirt-guests-dom0-filter.patch, 0f33025a-virt-aa-helper-handle-more-disk-images.patch, b475a91b-add-virStringFilterChars-string-utility.patch, faec1958-lxc-set-hostname-based-on-container-name.patch, 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch, fix-virt-aa-helper-profile.patch, - Patches added to fix upstream bugs: 72adaf2f-revert-qemu-monitor-error-report.patch, 71d56a39-nodedev-fix-parse-PCI-address.patch - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500- Add a qemu hook script providing functionality similar to Xen's block-dmmd script suse-qemu-domain-hook.py FATE#324177- Fix apparmor rules for virt-aa-helper (bsc#1074265) fix-virt-aa-helper-profile.patch - Lift VirtualBox dependency version to include 5.2.x - Update upstreamed patches Removed patches: * daemon-close-crasher.patch * lxc-hostname.patch Added patches: * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch * b475a91b-add-virStringFilterChars-string-utility.patch * faec1958-lxc-set-hostname-based-on-container-name.patch- Close clients before drivers are cleaned up to avoid crash at libvirtd stop (bsc#1073730) daemon-close-crasher.patch - Set a hostname on lxc containers based on guest's name. lxc-hostname.patch - Enhance apparmor rules for virt-aa-helper (bsc#1070916) 0f33025a-virt-aa-helper-handle-more-disk-images.patch- libvirt-guests: fix 'stop' operation when action is 'suspend' 69ed99c7-dom0-persistent.patch, 8599aedd-libvirt-guests-dom0-filter.patch bsc#1070130- storage: Don't dereference driver object if virStorageSource is not initialized 2d07f1f0-fix-storage-crash.patch bsc#1072974- Update to libvirt 3.10.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - bsc#1070285, bsc#1070478, boo#1070914, - FATE#323473, FATE#324365, FATE#324479- Update to libvirt 3.10.0 RC2 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 8056721c-qemu-null-storage-source.patch, 74a13be4-xdr-flags.patch, apparmor-rules-for-new-mediation-features.patch, apparmor-fine-grained-mount-rules.patch - bsc#1070285, bsc#1070478, FATE#323473, FATE#324479- spec: remove use of 'systemctl enable' bsc#1038401- spec: enable firewalld support for SLE15, Leap15, and Tumbleweed FATE#320794- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- spec: Add BuildRequires for libtirpc-devel in preparation of removal of sunrpc from glibc - build: Use XDR_CFLAGS in more places 74a13be4-xdr-flags.patch- Replace hardcoded libvirt with Name tag when refering to subpkgs - Remove dependencies to /bin/sh in libs and nss %post scripts- apparmor: allow libvirtd to send signals to unconfined processes suse-apparmor-signal.patch boo#1065123- qemu: Tolerate storage source private data being NULL 8056721c-qemu-null-storage-source.patch bsc#1068752- apparmor: add rules for new mediation features apparmor-rules-for-new-mediation-features.patch, apparmor-fine-grained-mount-rules.patch bsc#1066124, boo#1065123 - spec: unconditionally enable the wireshark dissector- Replace %{with_sle_build} by ! 0%{?is_opensuse} bsc#940315- Update to libvirt 3.9.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: c44b29aa-apparmor-dnsmasq-ptrace.patch, 441d3eb6-qemu-tls-client-verify-server-cert.patch- qemu: ensure TLS clients always verify the server certificate CVE-2017-1000256 441d3eb6-qemu-tls-client-verify-server-cert.patch bsc#1062563- Do not ignore errors from useradd/groupadd. - Invoke/expand %service_* just once per scriptlet. - Replace some old macros.- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage bsc#1062620- spec: reload libvirtd Apparmor profile in %post bsc#1060860- apparmor: add dnsmasq ptrace rule to libvirtd profile c44b29aa-apparmor-dnsmasq-ptrace.patch bsc#1060860- spec: Add dependency to UEFI firmwares since paths are specified at build time- Update to libvirt 3.8.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 92bd87a2-ryzen-test-data.patch, 5c83b360-epyc-test-data.patch, a0b62843-epyc-cpu-model.patch, f305d8a1-apparmor-attach_disconnected.patch, b482925c-apparmor-ptrace-support.patch- Enable firewalld support for openSUSE >= 42.2- apparmor: Add rules for kernel 4.13 ptrace checks b482925c-apparmor-ptrace-support.patch Drop temporary workaround apparmor-ptrace-support.patch bsc#1058847 - apparmor: Add rules for denial encountered when starting confined domains f305d8a1-apparmor-attach_disconnected.patch, suse-apparmor-libnl-paths.patch Drop old, useless, undocumented apparmor-fixes.patch- apparmor: add temporary profile fixes to allow starting domains apparmor-ptrace-support.patch bsc#1058847- cpu: Add new EPYC CPU model 92bd87a2-ryzen-test-data.patch, 5c83b360-epyc-test-data.patch, a0b62843-epyc-cpu-model.patch bsc#1052825- Update to libvirt 3.7.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 8982f3ab-util-hash-header.patch, 0b1ecf7b-virHashCodeGen-mockable.patch, f536b0dd-tests-arch-independent-hash.patch, e4cb8500-avoid-malicious-ssh-hostname-as-args.patch- Support OVMF 4MB firmware images Adjustment to spec file and suse-ovmf-paths.patch- supportconfig plugin: list active networks, interfaces and storage pools- rpc: avoid ssh interpreting malicious hostname as arguments e4cb8500-avoid-malicious-ssh-hostname-as-args.patch bsc#1053600- Update to libvirt 3.6.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Fix unit tests on s390x and ppc64 8982f3ab-util-hash-header.patch, 0b1ecf7b-virHashCodeGen-mockable.patch. f536b0dd-tests-arch-independent-hash.patch - Patch cleanup - Renamed libvirtd-defaults.patch to suse-libvirtd-disable-tls.patch - Renamed libvirtd-init-script.patch to suse-libvirtd-sysconfig-settings.patch - Renamed virtlockd-init-script.patch to suse-virtlockd-sysconfig-settings.patch - Renamed virtlogd-init-script.patch to suse-virtlogd-sysconfig-settings.patch - Renamed libvirt-guests-init-script.patch to suse-libvirt-guests-service.patch - Combined suse-libvirtd-service.patch and systemd-service-xen.patch to suse-libvirtd-service-xen.patch since both patches add Xen support to libvirtd service file - Pull OVMF-related changes from suse-qemu-conf.patch into a new suse-ovmf-paths.patch- Add a supportconfig plugin libvirt-supportconfig FATE#323661- Remove Requires on bridge-utils FATE#323639- drop dependency on xen for armv6hl (not supported and does not build)- Update to libvirt 3.5.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 5004f121-virFdStreamThread-dont-exceed-length.patch, 1a4b21f1-set-EOF-on-end-of-stream.patch- Remove --with-pic which is only for static libs - Use %_smp_mflags instead of just %jobs- misc spec file cleanup - remove checks for old distros well beyond EOL - enable wireshark dissector for Leap >= 42.2 and Factory - remove support for old, non-systemd distros - replace $RPM_ shell vars with modern macros- Don't exceed specified length when reading from stream 5004f121-virFdStreamThread-dont-exceed-length.patch, 1a4b21f1-set-EOF-on-end-of-stream.patch- Update to libvirt 3.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: aeda1b8c-qemu-no-error-shutdown.patch, 8023b21a-conf-ioapic.patch, 6b5c6314-qemu-irqchip.patch, 2020e2c6-conf-intremap.patch, 04028a9d-qemu-intremap.patch, d12781b4-conf-iommu-cache-mode-attr.patch, a5691448-qemu-iommu-cache-mode.patch, 3a276c65-conf-iommu-def-stability-check.patch, 935d927a-conf-iommu-ABI-stability-check.patch, 4cd3f241-fix-NULL-disk-source.patch, 975ea20f-loopback-macro.patch, dbb85e0c-libxl-graphics-listen-addr.patch, libxl-def-usbctrl.patch, revert-2841e675-mtu.patch - FATE#321335, bsc#1031056, bsc#1037774, bsc#1040207, bsc#1040213- libxl: add default listen address for VNC and spice 975ea20f-loopback-macro.patch, dbb85e0c-libxl-graphics-listen-addr.patch bsc#1040207 - xenconfig: fix handling of NULL disk source 4cd3f241-fix-NULL-disk-source.patch bsc#1040213- qemu: add support for 288 VCPUS aeda1b8c-qemu-no-error-shutdown.patch, 8023b21a-conf-ioapic.patch, 6b5c6314-qemu-irqchip.patch, 2020e2c6-conf-intremap.patch, 04028a9d-qemu-intremap.patch, d12781b4-conf-iommu-cache-mode-attr.patch, a5691448-qemu-iommu-cache-mode.patch, 3a276c65-conf-iommu-def-stability-check.patch, 935d927a-conf-iommu-ABI-stability-check.patch FATE#321335 - revert commit 2841e675: qemu: propagate bridge MTU into qemu "host_mtu" revert-2841e675-mtu.patch bsc#1037774- Update to libvirt 3.3.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Bug fixes: bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024, bsc#1034146, bsc#1035995 - libxl: updated libxl-def-usbctrl.patch bsc#1031056- Update to libvirt 3.3.0 RC1 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch - Bug fixes: bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024, bsc#1034146 - libxl: add default controllers for USB devices libxl-def-usbctrl.patch bsc#1031056- qemu: Fix regression when hyperv/vendor_id feature is used Added patch: ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch boo#1033893- Update to libvirt 3.2.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 67dcb797-virTimeBackOffWait-sleepcap.patch, 85af0b80-qemu-adaptive-montimeout.patch, d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch, 754515b7d-add-virNetlinkDumpCommand.patch, 3ee35d7d6-more-uses-of-SYSCTL_PATH.patch, 5dd607059-add-virNetDevGetName.patch, 00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch - Add Conflicts=xendomains.service to libvirtd service suse-libvirtd-service.patch bsc#1015348- RPM group fix- Fail to start network instead of losing routes if IPv6 forwarding is required. bsc#1025252 Added patches: 00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch 3ee35d7d6-more-uses-of-SYSCTL_PATH.patch 5dd607059-add-virNetDevGetName.patch 754515b7d-add-virNetlinkDumpCommand.patch d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch- qemu: Fix monitor timeout with large memory VMs 67dcb797-virTimeBackOffWait-sleepcap.patch 85af0b80-qemu-adaptive-montimeout.patch bsc#1013113- network: don't use dhcp-authoritative on static networks bsc#1015588 * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch- Update to libvirt 3.1.0 - Modularize storage driver by splitting it into backend-specific subpackages - CVE-2017-2635, bsc#1027075 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: b018ada3-shunloadtest-build-fix.patch, f86a7a83-libxl-dom0-balloon-fix.patch, 6e4759d0-libxl-timer-fix.patch, 87df87e0-libxl-timer-tsc-emulate.patch, b4386fda-xenconfig-timer-fix.patch, d3970925-timer-tests.patch, 321a28c6-libxl-default-disk-format.patch, bd116810-libxl-fix-disk-detach.patch, ff225538-libxl-autoballoon-setting.patch, c89a6e78-libxl-physinfo-cleanup.patch, d2b77608-libxl-maxmem-fix.patch, 79692c38-libxl-dom0-maxmem.patch, 4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch, apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch, qemu-disable-namespaces.patch- Drop author list from description. Fix summary to be more accurate as to what the subpackage pertains to.- Don't call insserv if we use systemd and don't require it.- libxl: more fixes for dom0 maxmem setting 4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch bsc#1017762- apparmor: don't fail on non-apparmor apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch bsc#1023436- libxl: fix reporting of domain maximum memory ff225538-libxl-autoballoon-setting.patch, c89a6e78-libxl-physinfo-cleanup.patch, d2b77608-libxl-maxmem-fix.patch, 79692c38-libxl-dom0-maxmem.patch bsc#1017762- libxl: set disk format to raw if not specified and fix disk detach 321a28c6-libxl-default-disk-format.patch, bd116810-libxl-fix-disk-detach.patch bsc#1003379- libxl: fix timer configurations 6e4759d0-libxl-timer-fix.patch, 87df87e0-libxl-timer-tsc-emulate.patch, b4386fda-xenconfig-timer-fix.patch, d3970925-timer-tests.patch bsc#1019969- SLE12 SP2 bugs merged via version updates of the Factory libvirt package: bsc#986718 - SLE12 SP2 FATEs merged via version updates of the Factory libvirt package: FATE#316228, FATE#316628, FATE#319531, FATE#319810, FATE#320490 - Replaced libxl-dom0-balloon-fix.patch with upstream patch f86a7a83-libxl-dom0-balloon-fix.patch- Fix dom0 ballooning with Xen >= 4.8 libxl-dom0-balloon-fix.patch bsc#1020755- SLE12 SP2 bugs merged via version updates of the Factory libvirt package: bsc#996020, bsc#987002, bsc#997278, bsc#998005, bsc#998389, bsc#1001446, bsc#1001698, bsc#1005288, bsc#1013991, bsc#1016253, bsc#1017086, bsc#1017762, bsc#1018189- virt-create-rootfs is a temporary SLE-only hack that was never added to the Factory libvirt package, causing it to be dropped when rebasing SLE on Factory. Add it now but only apply associated patch when building for SLE. virt-create-rootfs.patch bsc#995981- Update to libvirt 3.0.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Add b018ada3-shunloadtest-build-fix.patch to fix 'make check' failures - Add qemu-disable-namespaces.patch to temporarily disable qemu namespace feature until all issues are resolved- In order to avoid issues like bsc#1017189, explicitly specify supported VirtualBox versions- Update to libvirt 2.5.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Import new public signing key- spec: explicitly set qemu-bridge-helper path to /usr/lib/ bsc#999070- Package org.libvirt.api.policy polkit file (bsc#959297) - Fix postun systemd services cleanup - Mark /etc/libvirt/nwfilter/*.xml files as config files- Update to libvirt 2.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html- Update to libvirt 2.3.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: pci-use-driver-override-sysfs.patch, virHostdevFindUSBDevice-privsyms.patch, libxl-usb-vendor.patch, apparmor-qemu-bridge-helper.patch- Update to libvirt 2.2.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 856965b3-qemu-secdriver.patch, 541e9ae6-cpu-vendor-crash-fix.patch, d53d4650-qemu-rbd-auth.patch- libxl: allow vendor/product addressing for USB hostdevs virHostdevFindUSBDevice-privsyms.patch, libxl-usb-vendor.patch bsc#989646 - qemu: fix auth for rbd network disks d53d4650-qemu-rbd-auth.patch bsc#988998 - Replace cpumodel-vendor-crash-fix.patch with upstream variant 541e9ae6-cpu-vendor-crash-fix.patch bsc#992425- Update to libvirt 2.1.0 - New subpackages libvirt-libs and libvirt-admin - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: c8f08e48-systemd-notify-fix.patch - qemu: fix qemu.conf security_driver regression in 2.1.0 release 856965b3-qemu-secdriver.patch- cpu_x86: fix libvirtd segfault when host cpu is 'qemu64' cpumodel-vendor-crash-fix.patch bsc#992425- bsc#988279. Move the qemu-bridge-helper apparmor profile from the qemu abstraction to the usr.sbin.libvirtd profile. apparmor-qemu-bridge-helper.patch- spec: minor improvements to logic enabling numactl and numad support and fix nested if indentation FATE#319979- Update patches providing support for driver_override sysfs interface with latest upstream variant. Dropped pci-simplify-stub.patch and updated pci-use-driver-override-sysfs.patch bsc#986718- spec: enable numactl and numad support for aarch64 FATE#319979, bsc#991377- BuildRequires: use librbd-devel instead of ceph-devel - Enable rbd support for aarch64 bsc#979473- Use driver_override sysfs interface for binding/unbinding PCI stub drivers pci-simplify-stub.patch, pci-use-driver-override-sysfs.patch bsc#986718- systemd: fix ready notification on abstract socket c8f08e48-systemd-notify-fix.patch boo#987668- Update to libvirt 2.0.0 - Change version scheme to match libvirt's time-driven release schedule. will be incremented on first release of new calendar year, on each monthly release, and on stable branch maintenance release - Include libvirt-admin utility and API - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: apparmor-dont-scrub-environment-of-virtlogd-process.patch, e33cd67a-xenconfig-backendtype-fix.patch- spec: Recent simplification allows using a common spec file for SLE and openSUSE - Add SLE patches missing in openSUSE libxl-dom-reset.patch, libxl-set-migration-constraints.patch, libxl-set-cach-mode.patch- xenconfig: fix conversion of to backendtype e33cd67a-xenconfig-backendtype-fix.patch bsc#984798- Advertise aarch64 UEFI firmware paths - adjust spec file to include aarch64 paths in '--with-loader-nvram=' configure option - adjust qemu.conf 'nvram' option to include the SUSE paths bsc#981836, bsc#983747- apparmor: Don't scrub environment of virtlogd process apparmor-dont-scrub-environment-of-virtlogd-process.patch boo#980441- Update to libvirt 1.3.5 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: e4d131b8-mv-virDomainDefPostParseInternal.patch, 3e428670-post-parse-implicit-video.patch, 538012c8-default-vram.patch, 96b21fb0-vram-tests.patch, 400e716d-libxl-noprope-emulator.patch, b90c4b5f-tests-use-qemu-xen.patch, fccf2725-libxl-API-4.4.patch, 5325123d-libxl-migv2-save-restore.patch, f9edcfa4-libxl-migv2-migration.patch, a1c9a81a-libxl-rbd-fix.patch, ba566428-libxl-dom-iface-addrs.patch - spec: simplify and cleanup by removing many conditionals that are never toogled. Also drop conditionals for suse_version < 1310- Avoid suppressing errors during useradd/groupadd- libxl: add domainInterfaceAddresses API ba566428-libxl-dom-iface-addrs.patch bsc#979425- libxl: default to qemu driver for network disks a1c9a81a-libxl-rbd-fix.patch boo#981094- spec: Remove %defattr usage Inspired by upstream commit 90f9193c- libxl: support Xen migration stream V2 fccf2725-libxl-API-4.4.patch, 5325123d-libxl-migv2-save-restore.patch, f9edcfa4-libxl-migv2-migration.patch bsc#978361- Fix default video RAM setting e4d131b8-mv-virDomainDefPostParseInternal.patch, 3e428670-post-parse-implicit-video.patch, 538012c8-default-vram.patch, 96b21fb0-vram-tests.patch, 400e716d-libxl-noprope-emulator.patch, b90c4b5f-tests-use-qemu-xen.patch bsc#979397- Remove unknown locales to fix build in old dists- Update to libvirt 1.3.4 - Add support for migration data compression in QEMU driver - Drop libvirtd.socket - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 216650f1-libxl-build-fix.patch, 6d8b6d28-mark-implicit-video-primary.patch, 03e8d5fb-qemu-perf-memory-corruption.patch, libvirtd-systemd-socket.patch- qemu: perf: Fix crash/memory corruption on failed VM start 03e8d5fb-qemu-perf-memory-corruption.patch bsc#977131- Fix setting implicit video devices as primary 6d8b6d28-mark-implicit-video-primary.patch bsc#977150- Update to libvirt 1.3.3 - perf events - post-copy migration support - NSS module - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Add rpmlintrc file to filter shlib-policy-name-error for new libnss_libvirt plugin - Fix build with Xen4.7 216650f1-libxl-build-fix.patch- spec: restart daemons in %posttrans after connection drivers have been processed bsc#854343, bsc#968483- libxl: advertise system qemu instead of qemu-xen in caps libxl-qemu-emulator-caps.patch FATE#320638- Update to libvirt 1.3.2 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html- libxl: Add support for block-{dmmd,drbd,npiv} scripts libxl-support-block-script.patch bsc#954872- qemu: set /usr/share/qemu/ovmf-x86_64-ms-{code,vars}.bin as default UEFI firmwares for x86_64 bsc#961853- Update to libvirt 1.3.1 - CVE-2015-5313 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 034e47c3-CVE-2015-5313.patch, ace1ee22-qemuxml2argv-test.patch, add-with-login-shell.patch, virt-aa-helper-rw-mounts.patch- spec: perform one-time enable and start of virtlogd.socket when upgrading from libvirt < 1.3.0. Inspired by upstream libvirt.git commit da054f35.- CVE-2015-5313: don't allow '/' in filesystem volume names 034e47c3-CVE-2015-5313.patch bsc#953110 - Fix failing qemuxml2argv test on 32-bit platforms ace1ee22-qemuxml2argv-test.patch- Update to libvirt 1.3.0 - New virtlogd log daemon - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patch: 703ec1b7-qemu-bridge-helper-fix.patch - Added patch: virtlogd-init-script.patch- Run udevadm settle after removing NICs in lxc driver. bsc#829033. lxc-wait-after-eth-del.patch- Don't add apparmor deny rw rule for 9P readonly mounts. bsc#952849. virt-aa-helper-rw-mounts.patch- Don't package virt-login-shell anymore as shipping it as non-setuid doesn't make sense. bsc#837609 add-with-login-shell.patch- Detect path of qemu-bridge-helper during %configure - add qemu-tools as BuildRequires for suse_version > 1130 - add upstream patch 703ec1b7-qemu-bridge-helper-fix.patch- Update to libvirt 1.2.21 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: disable-virCgroupGetPercpuStats-test.patch- spec: some minor wireshark fixups. Essentially a backport of commit 7c8250d7.- spec: remove all dependencies on apparmor to keep it optional. bsc#949793- xenconfig: set disk type to BLOCK when driver is not tap or file xen-sxpr-disk-type.patch bsc#938228- spec: the libvirt apparmor profiles #include files from the apparmor-profiles package, thus should have a dependency on it bsc#949793- Remove Wants=xencommons.service from libvirtd.service xencommons is already enabled by a global preset, and the absence of xen-tools.rpm causes a systemd warning- Update to libvirt 1.2.20 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped upstream patches: 3468542f-virFileUnlink.patch, 8b1d84e6-refreshVol-failure.patch, e0025d29-storage-mode-check.patch, ba25c214-libxl-log-level.patch, 56945e13-libxl-AttachDeviceConfig-hostdev.patch- bsc#945962: SLES12 SP1 Beta3 - Pass-through NIC device via virsh not available to VM. 56945e13-libxl-AttachDeviceConfig-hostdev.patch- libxl: set driver log level to the log_level specified in libvirtd.conf ba25c214-libxl-log-level.patch bsc#945796- CVE-2015-5247 - denial of service through root-squash NFS storage bsc#945645 3468542f-virFileUnlink.patch 8b1d84e6-refreshVol-failure.patch e0025d29-storage-mode-check.patch- Update to libvirt 1.2.19 - Improved ppc64 support - New virDomainRename API - Support for PCI Express controllers in QEMU - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped upstream patches: 269d39af-storage-allocation-fix.patch, 26c5fa3a-virt-aa-helper-missing-doc.patch, d25a5e08-virt-aa-helper-simplify-restriction-logic.patch, 2f01cfdf-virt-aa-helper-allow-ovmf.patch, 91fdcefa-virt-aa-helper-allow-nvram.patch, 52970dec-virt-aa-helper-improve-valid-path.patch, 44a54eb0-libxl-fix-refcnt-MigrationDstArgs.patch, 15120b8c-libxl-no-resume-on-suspend-fail.patch, e80b84a7-libxl-acquire-job-on-migrate.patch, 60acb38-revert-curmem-inactive-dom.patch- Replace local libxl patches with upstream variants Dropped: 0003-libxl-fix-ref-counting-of-libxlMigrationDstArgs.patch 0004-libxl-don-t-attempt-to-resume-domain-when-suspend-fa.patch 0005-libxl-acquire-a-job-when-receiving-a-migrating-domai.patch Added: 44a54eb0-libxl-fix-refcnt-MigrationDstArgs.patch 15120b8c-libxl-no-resume-on-suspend-fail.patch e80b84a7-libxl-acquire-job-on-migrate.patch bsc#936185 - Added another virt-aa-helper upstream patch 52970dec-virt-aa-helper-improve-valid-path.patch lp#1483071 - Added upstream patch to fix libvirt-tck memory balloon test failure on Xen 60acb38-revert-curmem-inactive-dom.patch- Fix generated apparmor profile to allow access to ovmf and nvram. 26c5fa3a-virt-aa-helper-missing-doc.patch 2f01cfdf-virt-aa-helper-allow-ovmf.patch 91fdcefa-virt-aa-helper-allow-nvram.patch d25a5e08-virt-aa-helper-simplify-restriction-logic.patch lp#1483071- storage: only run safezero if allocation is > 0 269d39af-storage-allocation-fix.patch bsc#942085- Update to libvirt 1.2.18 - libxl: support dom0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped upstream patches: e44bcae-virt-aa-helper-trailing-slash.patch, a55a5e7-virt-aa-helper-log.patch, 61dab0f-virt-aa-helper-renaming.patch, 24f3c2f-virt-aa-helper-fix-caps.patch, 45697fe5-libxl-support-dom0.patch, e9c27344-libxl-fix-virDomainObj-state.patch, 4ffb21c8-libxl-dom0-state-fix.patch, qemu-nbd-cleanup-fix.patch- Fix crash in libxl driver on receiving side 0003-libxl-fix-ref-counting-of-libxlMigrationDstArgs.patch 0004-libxl-don-t-attempt-to-resume-domain-when-suspend-fa.patch 0005-libxl-acquire-a-job-when-receiving-a-migrating-domai.patch bsc#936185- libxl: set dom0 state to running 4ffb21c8-libxl-dom0-state-fix.patch bsc#937316 - libxl: support management of dom0 45697fe5-libxl-support-dom0.patch bsc#937316 - libxl: libxl: fix setting state of virDomainObj e9c27344-libxl-fix-virDomainObj-state.patch bsc#934937- Fixed virt-aa-helper bugs preventing virt-sandbox to work. 24f3c2f-virt-aa-helper-fix-caps.patch 61dab0f-virt-aa-helper-renaming.patch a55a5e7-virt-aa-helper-log.patch e44bcae-virt-aa-helper-trailing-slash.patch bsc#936841 - Fixed crasher due to uninitialized values qemu-nbd-cleanup-fix.patch bsc#936841- Update to libvirt 1.2.17 - parallels driver renamed to vz (Virtuozzo) - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - spec: re-enable tests that have received upstream fixes and are now passing- Remove unsupported settings in libvirtd.socket unit file when systemd version < 214 libvirtd-systemd-socket.patch bsc#933043 - spec: always apply Apparmor and netcontrol patches- spec: Add libvirtd.socket unit file to service_add_pre and service_del_postun macros- Update to libvirt 1.2.16 - Introduce pci-serial - Introduce virDomainSetUserPassword API - Introduce protected key mgmt ops - Add domain vmport feature - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop upstream patches c0d3f608-libxl-soundhw.patch and 8910e063-arch-caps.patch - Drop polkit-10-virt.rules in favor of upstream 50-libvirt.rules- qemu: fix regression defaulting to host arch 8910e063-arch-caps.patch rhb#1219191- spec: build libxl driver for aarch64 and remove useless 'suse_version <= 1220' conditional- libxl: support virtual sound devices in HVM domains c0d3f608-libxl-soundhw.patch bsc#875216- Update to libvirt 1.2.15 - Implement virDomainAddIOThread and virDomainDelIOThread - libxl: Introduce configuration file for libxl driver - Add VIR_DOMAIN_EVENT_ID_DEVICE_ADDED event - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop upstream patches da33a1ac-lxc-init-statedir.patch and open-ns-files-readonly.patch - spec file fixups for building --without-driver-modules- boo#926765: add libvirt-daemon-driver-qemu dependency on libvirt-daemon-driver-storage.- boo#926153: make sure /var/run/libvirt/lxc folder exists when starting the driver. da33a1ac-lxc-init-statedir.patch - Fix lxc-enter-namespace for 3.19+ kernels. open-ns-files-readonly.patch- Disable building wireshark dissector. Commit 37397320 requires wireshark pkgconfig, which SUSE wireshark packages do not provide. - Disable building the legacy Xen driver since Xen no longer provides the xend toolstack. Remove xend-specific patches while at it: fix-pci-attach-xen-driver.patch, xen-name-for-devid.patch- Update to libvirt 1.2.14 - qemu: Implement memory device hotplug - Implement public API for virDomainPinIOThread - Implement public API for virDomainGetIOThreadsInfo - SRIOV NIC offload feature discovery - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop disable-hugepage-test.patch in favor of upstream fix- Fix build on older distros containing a polkit package that lacks support for /etc/polkit-1/rules.d drop directory- Disable interface driver if libnetcontrol cannot be initialized Modified libvirt-suse-netcontrol.patch boo#920551- Fix crash in libnetcontrol-backed interface driver Modified libvirt-suse-netcontrol.patch boo#920551- Instruct polkit to allow memebers of the 'libvirt' group to connect to libvirt without providing any password (bnc#920804) - Added polkit-10-virt.rules to fix bnc#920804- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch bsc#921586- Fixed a number of QEMU apparmor abstraction problems. bsc#921355 apparmor-fixes.patch- Update to libvirt 1.2.13 - qemu: improved support for host and guest NUMA - Many incremental improvements and bug fixes, see http://libvirt.org/news.html- Update to libvirt 1.2.12 - CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots - CVE-2015-0236: qemu: Check ACLs when dumping security info from save image - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop upstream patches: 30c6aecc-apparmor-lib64.patch, apparmor-xen-fixup.patch, apparmor-allow-helpers.patch, apparmor-tck-raw-packets.patch - Disable a hugepage test that is failing on ppc, ppc64, and ppc64le architectures - disable-hugepage-test.patch- Fixed patches to pass make syntax-check- Apparmor profile regression breaks Xen domains. bsc#913799 apparmor-xen-fixup.patch apparmor-allow-helpers.patch apparmor-tck-raw-packets.patch- Replaced hard to maintain install-apparmor-profiles.patch by upstreamed 30c6aecc-apparmor-lib64.patch. - Reformatted libvirt.spec and libvirtd.init to pass upstream make syntax-check- fix bashisms in libvirt-guests.sh script - update patches: + libvirt-guests-init-script.patch- Update to libvirt 1.2.11 - Implement public API for virDomainGetFSInfo - qemu: Add define for the new throttle options - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats() - CVE-2014-7823: dumpxml: security hole with migratable flag - Drop upstream patches: 2222123-virt-aa-helper-crash.patch, 433b427-iplink-name.patch, 52691f99-qemu-mig-crash.patch, 72fecf1-lxc-resolve-symlinks.patch, b1674ad5-CVE-2014-7823.patch, ba9b7252-sys-net-rw.patch, c264eea-virt-aa-helper-sandbox.patch, e50457d-lxc-unmount-check.patch, cgroup-all-devices.patch, libvirt-ppc64le-support.patch- Get /proc/sys/net/ipv[46] read-write for wicked to work in containers. bsc#904432. ba9b7252-sys-net-rw.patch - Fixed allowing devices for containers. cgroup-all-devices.patch- qemu: Fix crash in tunnelled migration 52691f99-qemu-mig-crash.patch boo#908008- Fix potential crasher in virt-aa-helper 2222123-virt-aa-helper-crash.patch - ip link add now needs the 'name' parameter. 433b427-iplink-name.patch - Fixes for virt-sandbox-service to work: - Allow adding virt-sandbox service config to apparmor rules. c264eea-virt-aa-helper-sandbox.patch - fix symlink resolving for containers to start. 72fecf1-lxc-resolve-symlinks.patch - fix unmounting file system if it contains the source to mount. e50457d-lxc-unmount-check.patch- Remove security_driver = "none" in qemu config. This completely disabled all security drivers instead of probing them. - Changed default value of QEMU's security_default_confined to 0 to keep QEMU domains unconfined by default.- CVE-2014-7823: dumpxml: security hole with migratable flag b1674ad5-CVE-2014-7823.patch bsc#904176- Fix Qemu AppArmor abstraction. - qemu-block.so was denied on x86_64. install-apparmor-profiles.patch - Temporary fix access to screenshot temporary file. bsc#904426. qemu-apparmor-screenshot.patch- Update to libvirt 1.2.10 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html- Added package wireshark-plugin-libvirt to provide the wireshark dissector for the libvirt RPC protocol/bin/sh/bin/sh/bin/sh/bin/shcloud124 1622643920 6.0.0-lp152.9.9.16.0.0-lp152.9.9.16.0.0-lp152.9.9.1 qemunetworksautostartvirtnetworkd.confvirtnetworkd-admin.socketvirtnetworkd-ro.socketvirtnetworkd.servicevirtnetworkd.socketconnection-driverlibvirt_driver_network.solibvirt_leaseshelpervirtnetworkdtest_virtnetworkd.augvirtnetworkd.augdnsmasqnetwork/etc/libvirt//etc/libvirt/qemu//etc/libvirt/qemu/networks//usr/lib/systemd/system//usr/lib64/libvirt//usr/lib64/libvirt/connection-driver//usr/sbin//usr/share/augeas/lenses/tests//usr/share/augeas/lenses//var/lib/libvirt/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16421/openSUSE_Leap_15.2_Update/8ea2fa68fa213eb245a88cc07d8cd677-libvirt.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxdirectoryASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=151c082119229a6d4d16f56b42970034e718492a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=3d0912683110dbbecc5531a4556afcb3998afd1b, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=224520ceecdaf84b77e85ccc6eb93c30ee7ce7c6, for GNU/Linux 3.2.0, stripped lPRRRR RR R R RROR3R"R^RRRuRRR RRRR R R R"RuRRRRRRRRRRRRR R RR RR>RoRRRaRgR\RMR1RdR0RIR%R.RDR@R+RSRVR4RPR$RWRjR`RtRBR-RnR#RlRiRKRORTRkR=RERARZRsRNR]R:RUR?RhRQRrR&R8R7R;RfR!R6RYRCR_RpR[RXR/RLReR,Rw,_ utf-8ff207a7eef44984b07ff046aa9a6b5e64f5709020fbf491b490f2183866d2c67?7zXZ !t/q@+ׁ6H"MC>T`b#'y;f*|1#˦ N<?!㰨WjCD4nPj>.[2ui5LC\tvmj^.1E$0ׄDCW8Xu6`G^qUu{7lK:~'1j;h$ruw; cnFLHF|^ +pAGA?~߆T WcXMa\5}V.qfu,jos, Kiۯ x.0H@L?j"܊m͏?T7-@bKa_r)_4)\qm?}b7n)IrgzjA~+pE.Eǎ̵T]`pAۏ7r5@Z3Gg8'Յ#h1;/4FtZ=.Lu4þa&^,Ej2 f|I:rOe,ۓI7N{&|vh >6%2\v.[oaqzqa; hBn,_f/s 7t}ُyj}?r;&&OwQ<<[WBCDs/O5c.55T]QT"+hYdH欶k>/ eBqr0UH[E/ %"xeI3_.%7KqOq5SC|f^ }fG"v՜pSK\rZv㷒2(A6Fyt yeDAuX]P3DQyh/edۙ6W^5-htWe6*e:]'䞄"#*_[f֕n DYg>Uۻ|U8\W܋JJ$>vf`m@ C炥P9Zw) @Z/pO"o $~"LߎzQV {{)アm4~lb!v+s$U;rb.T6z#IVH`-dZQ~wY #Wx<,Os zoOǤ)daG/A5QM1BUc9-ѪN 96]hΫP܂*h&-=_,D^2ҵ'K%iˆ4TvjnMF䊵\8@H4'O:>.3E @T*ƜEU:rKLqĪ㺅9%?*´׷fE/5ɝS`>ަXHҏ0F'cL+f/29E{ß68/5-P7Y M@xBBlxTy%j}f3NJNUy:ʅގnUfjJzڛT~Уkݮmh'NT=GW GSYI!f$ 2?+cnVAM'z/LoҰo:\f'#һ*f0No]W-9+3jWhkMo= &UT~0G pv('!xfUk`D##_%^ !NH*1K-ԍK2f9V.L(3aN=$ x)IO1{킅|۝^ڷ<Ⱦr96<0WV  FV[樉,G |(֩ɮ#-U_^ol*|cGW!߬:3VzaX׽r93)g$D7L$^Gu\cpweNTV=~IMȑ6ye"f&U/) ˜{[r94]C=%b".`4(88n dn]gG̍iےBB,XȞ\T;Ff#Ol9r= roOޛC_)<lZJF 3XesC&Z#oNy-} ` LζNJdub<`^R"1٣> VET 'Z!j~wZ/pXzEp"y6KC(w>(D_0 ky!Hp݈TIo"PV,dT("n{3"W 9~3Kgzy3d} ,3p"b2'w~pg\#BA!cO_},:UE&Ϙd̑b4]}misXe ]lqlkig_qÐud K I$/Gw_|bT _1bk}c@CkLcQf1ac`a(2\؋3S$*cšQ^ةU 1ͺy6mttu[r&5iUfqbAW[] 8xX],kX@3-\dƖ@ViŦ[6Qۄ&y,Ч%E4Dauj9&|$pp|$Ms5Ɨ>W$wĉ*k `''w߷"5;9dG$Lsus^ dYVq1g;{0bX}JׄϤaߑk6Nfzyh{g2as#y :u,k_>-9Ԕn&ψk6t툎JL/ή2]nv@3niFZyݯeuWpM?tˊyUSƾ<0Xc`l{?31w{QX(3SQ%p iyfkNO8gp0߯![L}w=9cO^M-2 H('J51R·!<ڇaX.h1d* !(ݿdzlJ%o mԶdd" z늪w3qQ.V+Q.;Ŭs13vcJr#=_}YooTB0K_kVPIv9^Ѭ:wcm26QLHq?[cz=Fn-h D&'MBOSBn8O7+wb# nVI[sE.jǓVs[ߓ70-QT'G@>2&t6{YiΠG}'0c aY>dSȃMiy@Tj_E <<&ClR[h(nuP]v-}?`75w{$ f{fy~s&'gAjjk/C}s7^3-9qDL؋z1qBeL!?BlltNIqgk n#[W[m'; Y%G S*2+{ֺ'zZpSJHc|TNx['c Z+.{*YsiǧE:v۶A|a ʘ)"D̝rHtƫvWG/UOgq45 qmlr;`%@ȗ4FFqH!]qc%iit1mN+)ReV Ei ɻi#N\|#$Xwg%(@D gA>(kQF$T>Ufi2s!-ʼfv-EhDFMs?8/Oa6zzi1[G"Pٜc.r.N]ۈːyt¥9GX54zLcE| *gr0Mٗ = b}P߮:a)vXп+vܣWYm/tIw2qTyپOV>ei+uقJwfr*)b(; b901G[`8[.2dEǽu8oIP-M~^QDҾ),NzX/y]_?lM Ls6Pm b~Aj.ܥ_t%SmbJA9 iGO+/Lt(,cQ(]gV|冋5v%КRY/:}+ӽ?Jl 7V)eLPAфĩR;6|KV@#U"@5Okz x㙺)X4¼yą Mi 5l46U[Fa/ iyp)_48#Mb0 >vuqcwSg>uPP_d1P1f`B/?I$<4/]W[~'O| ɗPS3$R>}Δ*zv"@`5wC{ܑ¿u hLQqf8tn }###L$X 9?;_d_O hCd7K/KHnBgUhI F=yPT}*s6[+.ǥohz]Q}-`I{%0 Ȕ&40Kq"P9INߨ W3|LaKgd|(kW]h <".Oԗ}:DD3]*#چ!%D4s~ yH5cnu,9^?Q8L˂a@dUs{1 pJ(3PdoV' Qc}&i̐p1ʻa>P}e#[.&\|oy:Ռ'"jHʦZ n9X^j3 kɠcIUٰh0e=Khu3:{L F[^ ]xjiRr?3MFaw/6޲=7Rx(}37ѢϑF{t fy#Gd<rzN%I3>&Ka;>Č?XcQLrܽv0? 7 tм4-:嗡{U 6kQZ3ՇRG \dDI⹥kgqI<;. +0 siF"I@"{ o L.CzAs!;Lg0u2)\BVp= %3ƚ8=sgGy;1k+Rz7Ek^'|Db\ʙvR=#%2Cs3z ֊f"`GW^.xM)c7, v !)TS 2/VgWK|waio*I\3K~1ћ'jxd[^Cvݧ[_F d?w; 0w&mkLO*tLE.1e)'Z*XVxuݺ$*4 Z,(2 =a?vF3L̠c c`USFCg#HvR'4erw6rPea4JWeY׏۵ch,yQzNW$90Mx]+Sǖ(H\>?HAԙ{,'zxIϘlUf:OU=<]Uu. .=?<[a&'a)jTf|vʓLlYZN-٦myc2WM.DIk;>5U'.d{3Ѱv`583vhHVMؠt)qvb е'GL4"y{X^X<xʽsZsq4>f"eB!@󸟐31Ǻ]b:Bմ9oU'5D'JiAɇ:rrH"zGum͸4K~/:WpӞ.pLiaцC({KG f -өݼr,Veb?(v_'0j %Zu";VT#nS#!5f#߀"-lI(({}2Gf3 hqmxC{u9E4F M4<Ͷ 3-"i|9$%y(-ywD@)}v/+ erj%d;Ʌ3/0]]~(Sdef6}Ep,;Rz֎aZJro{ O6GZF5s*7uVvJ,dLx@9"V-pWaVs 7n_Bo\[\dp X~c{ttyϑ{~/c4OB\8'\G~q]]2U[M9g Nس%*ب2spPd@ ]GeN# "Y*Q[/&X_D3:-AvhA F~vk. IJX ˩<2x8I<<RyBʤ|l# `#F=:~$Th*MlQ7dgW# ^3rM6z \~OI*l^V+_IG埊WqShAU/R,kDFR,1=~JZҔJnJKL->\ 2p@Y Y{f"(wŦ^uLcLL;+<_źZ 2r* >bR5rq5C!N/Q)w>Z;>nsA29Ho^—N69hnBpyC E2GoJc\S̅ϸÓp?MD"q]RVh~ "2kg!zӌ][{@^ 7W (HT!c&:&T'Ø'ƓG:dn]ޥ85ޙ١JiՓBz"!- k_=&E fKټgm!Pg3 1*ŷ 伔 z[.PZ"vqzD" Yw4D#ܞ6Af΀ގ̝}o5_g:«Hm~G>WlC0yjPl: O'YgQ U_dP$ O/4%E}f!`xF$HgUnl`#_ d)q+MT4J'3 $nEg [6_:AI*JzzhZŎ|O4ڬj+ rRXy3A җ05~Z9NB&a x"`y:_mJ|LLӳ*XЎqE i[ ǷZԉR0jt. 1<`ǔ~&$rU#GiY@~n+k|[>=h=֖I^]7Izxͱu;XYy&Y,ۡx35%{H2#KyfYDx_7+YU7ES{5NWn)`@_ p?It$*hFVmXxYs{0Lc )=)|ŝ9 } H zi#`?RiԽmKҝT%Ƈ31ώ;jrB%,rڀ쐲9>E߶9{H6;Q^Ҹ`ɥx2zkCįVӧ7pagu)0- 'ѵo$RS8YmH_X tmsE"eC7ЭXg'~s40$[# Y,:H=ʂ R-bYu eDWK{vpZodf9AgN֫b%H: Kj^/m,<,ڔV=#> %RE´VaD* h  ,_8OY!;9 lI vә@Wfy1d_%)U_r" 3"f/> [Z, yyjUB5sמV|d\Jf`Mo^[h1s)X;?X3Yln}}P9tEM@Gzv q7[?Cۼ=#|nVs1 =-إ,q[?g֍;ū lϿ3vFI~y̅(NӲG({8v Zq @B(Ն)m,ƺ2m_V~y\#)!}J 5~ee7 ƇA|g"XLZbim7g)-O v]݀tO7пQ'{02\ov!mA+ԁmE ﻽724a.I6+aiUu6qDŽ߸znDs c*G}E&*[Ϧ)C ӖtT sXTàQ:fj$\6..Kmj}J *R[Ά K}t^ΑiĮkg1˫Pxנ {r#Or52`;Tڋ#\6X8Ut/XO[A澢ȑJ.K] }%-2lUGv4@IwpP>>,F|P*'n#@l}/u`9)jA'nUִcHH-_jX ;ˌyXMn0#&5ւ.4G4>=FK{@k6YPk=3urdo[<5H #zGBRîn ^h|Yn& uoa)HW#izfj]t"/Mo1|7AH jVVԥn .aqRW"k?HFX~;aht@t1.Zʛ@i'FMGE̿'Olb rU`j>wsmƛ}jTTQNB8ޗl%10CZEY]iW-񍝵I>LslDxHJNtfhY!hp³(]u ssp``~s?sI3s4.(/, ? ~aF|=V X2C4yȶ6 ;SO؜@ZA3HVi gH=m=kN7}ѬrI8aV F ҭz0#חSV@ML2;/LgxhR"K7YCӭX7xhl|-ʫOж,*ԍuY'޶8@mD!$A7ϵ o\QYUM[C܋.]Y"},x"%٢_P 1$ @ľF5³͉ JbX/]LW:i))L2Mre%lb1ႂHU_ },f_=.`yUR^[*rT -pՈ!+\w#O!r3W=~AlXcshΡfT/ӾS+/<p- >Zk@8zolVZ4goѥ2B㳉\!JFgBeTw=Z1LyU5Ez#MՅ!8e%2'{X"> +Ec7MKjqx0})oZZ)Ip3x2{ \[&mₔ9^gR!δTǩYdgeEBdV$K 9\3jg#QCz3P>4ۦop_k? Xt"Ǡ~b3[ g!hlND h(˯|ZFM?F}>_yx"y&k|ɀ} ,Px?^-˜g۲ن -mSssm nu)0y?ߚ(5NM mXkK'_ #Up4}Ev1jDND~6ycpyf끣.<|9r|JS0Aq}`?"b`Gi:$MP5B4r|@Amݽ w 3w7 Mw)ZY`NJ_z [3e1FF{,AENMLo,ݬd8K,f/NI.B? ʒjc\@ i;dw4+2 p՟TrL!-3]>$(C7?)l)~hvOP>$!$7t^v0+<1P?skLsS6p|,UYZPTW98֙Q~,WqY(箊~ n]Ssk?@}س27uN9-81N|iFFKk%~F*yRdZ HSVjmL<= :d=Zo+(v2k&k&rp8_fr "h*n.m25 x2!Yvo@wށFQgܱ2肖8zx:G$_#IįRWюhxu̩ALx?O7 mAǥLB%4muf9[O"vWxzmDa.$?b 8i ?e35 M!Mo9_Q'KؗF 4CV} ko*Zfq|G]WUB7-XZZBbq9+;ǁbTEz!RO"a|ko*IX3Jz`+>7bN(7J"3|q;,ɒJvh#IRnTLiAc6DjG$6:H'eN܄U3J']m]ˡ| K֯@*m\ʽa~o҂&YREࢌ4UXv@a+[mv)+8*w_2tbCEԐN+(Ga- B%k0Sۚ"bg^+o% 930U21Fltarv`xB]dt3uBwbbO~41 @vmtESZL3hepΰur eBAa[!igqu6N2fq 2[ 5t a&p5)Z"ϲNc =TzgTYJbJ}nA3: R2i4{N`#ԷeÜl y0\u r&d_G|7j RL? 3:wюeQ)L+$(z^vCCglL&)À")URp:n>'"0VQf6tVZʣ5X{P8Ҹn%m-e$GFחGb'F}̥iY_͢V.`jX2d E.\v$KcWp>봓{ELp'⣼E;(rs5:S-̑J΢|ͶU5$;2^dPgdHIG#7rS0EʺRQT]?>q0>/ω~Srs+òٲ佊(n#/;EK%qCx]qs׾tE9 IsԖ von{a͵ߍ#tb ߫0Fʐ?.BfGm#;X.D (0j}(q9b<ϻ` m~|>Juy>$oaԹ8xhM ! cIO=T/s7(GYUPg~oyY%vE𪓱'u?{S~U-k> ]6tF5O0: !y^=_q]-1OnpٺHb.:CM$k?t ZSZ4 0eq2yfפDZ0|o# i# zKf7"&w|Uyߌ1 {ZgG,ҝ8Xz XLcϒ-[GhLĽWORٶ%ӻnHg0~H` av 4]<"=ܤW!zvbj#\Qp 총PH|nlQ?v;!x"֋h ^WX٦KTZ4t1A$z{s<.h9zꪬRfO^[N(8؂%vLSO7MQΡ'kzL&ؘT- &b *LcLk /K$I=[Wc,aL[Kpr ٓfd co/߅3G(!SLFjncc;%V-w6SuFW.os4v/[}d^~.:xmG"'gS}>=}]?ІE9yݩ#sLV TaG- Gz.aV~R3M7SknA<77̩m6k^h H< -㩧'Ly=*Ͱg.ҬuL[EW}EOSύ[:.U!і&624D|NB"2u{TPRoTq8=b; ~\4"/l$ w&^f c D"2m=:gN ѠU&s>_UqggC|S@bDKI7`(՝UK2UK~QLL"dݻwwa]D}@5Ok#Y7D6!s+F)Ц*'w*ĩa:?_Kǚ0jS#8VoAk%g@;NM6S+j+yU1`Q}yKZrAI=!1n Biƒ $?TO1HIɩ=# 58W YC1RV#:%5fBΆsLg_Mh7C^;nS~qڸq`'8nq(6 㭸KRݶ|&=2~;ػFA [LHyd9;21Z8Mr>sΠGZOYQՌx^Fm])$ja@A&aE1u_QS#4gWlf>Aa!~̰h`k{%; 9?ÅhO|4 c_Q)ԆK\ZM%'+A$?]|^ R@?~5bkݸ0 g]pڋ^5=}[?+=7F9culŽH3fŧ ;sg~!&Ejx&mY =7,AHh +.]~K<}J%Pu`XOR$ ͼԎ<Lc(͏R{6~=zYc"&=Bs,wqO5o6@K=3r/uW׽aCmP)6x#unDc32l36%Zз.|hCΩ\8A]om9,!_Pg7:&ǩ1N"M>~TKrB8+$ěb_gfŤy@(=Rzhx,TVecQqqъ듸 pDg2MCl!zg o[[t/F@E PKżczcg, k?zOi{&18hԖV%<Wg9k^LudVmTK&>ĊOF`iyrh,`4{ou fؑ V|PtJ̧U^`P1?'d&_>K63LӸ5͔| ouDk؏h[g@ }/&'6)d{C{h+| <6V!uFgzt_~'dj l+֐7D"*-,kEД-9=EwmP M:]|}}3vUkl6pAȰIs GfW=>lofaƔ3HuŹVYO̜.9՞|?Xx"Qj0"IKgJ+%=;1@X:Ijq'5ܙ`Vg$I~\꿻rdkI 搀2V[})ߺ;JsLlE36E%ICRdqsk$[fp76%Z=.Lw;cA6 @Qք@?xrXgM%>GI)k_\àRAM [fE`2u @Ψp}\ ls/͂mCJ1Tzn6k1=抐}p\Ba,7%\oAO\F;mhN;V cŎ܃mg8*]x{V#.JrhGLA#d \&n37/ku2uN/ SI&4_#]^GO(&Id3?J_'ņX<[kǤZ.ɰ6RWpsX5"Lj軽<3ȪQ7Ff SWLs P\-Z9YήXQiNvWf nV@RL$WRLI avV_|w%gHX:"NM451܈8ʲfI*`}M 9UDhW e{0[̍}>,WFX8N֕aR^3TlbyS ǭ+CJc=%:IW.c,t=t(e^~q f} x\/oC[yVXu6/ OLoeu!JSXTu4 {ol$ɪqry,%`.3JYQ{w~9V Z$n=89an s?lu|*m eR*_HBU/w}bԨ[x;<)H89uPTY͔b;4he67i&شü4=&X#!AuWfG _/q(%/9nzH;R{.x UͼbNI*BRñON{&(2>yم1rg+[k: AZ-#4v5/ ,M۷,E2S'oB̖a:PXXZ"Kh+eϲ[,# Zh[)eHu0)2.E[CGAp j28BK!qѢ"T>1uUǍczNv% 1MvþVz{/hǘpOK$*Do2؞X]};ya ^B2mo)Mǀn}}\I)Y\(|<KDq]>!&}]<6 {;& 8Q~6I016,"/w$peJuBWll@Zuw'k!s- Ac<b:#PJU{>#@ܜB~ཇ--JdUC( PcaO=M)s^Ӫ;Ӌeu6P w:y6?|y 74_EkExY,6X|URxn%&XaZ{eC!̖!˩l!}ڷ?;&-aUDxFzt+3]{Y>V?FCKY-RB6z&vsBQ<"=?:lS*^ ߾YNI5q'gGܥ|cCڟMIJ{6鸎#ʺuxJ D i4oJ`E.I!Нn`Xy\m\W6H5Jq(B@7ߺ+X-acb3N 7n1Wm7 7ѷbk(uP6w62o.E"Jk$/-wƮq.p L!MkgN`\珔?P5F!4g{eÆs7jG K/0gbyp5{t8Q+9dpnm7C*i^V>COv<ZZunQa2sC2_4b BTS쿢Bx2~vKWJXf @,=qNTgJ@¹&;6NrLC"~dmhf&ԪYۿSӪ^B7=p{[l$Ԯ 12!\ІDm̈VֱHmG$[FjNё'_< ٲS6BS1PSVœjTA$\ԼcAfhkso,iC"¬9m-8{ep-e^IpRSQ@[ ][AcX {/"5Ą/S\`][V4K:6t`Uك-U ,k}2&Ÿ@ǽ$sy|Bae(S1cNNF;Lלgt夐 e">?uGyJՇ :qҨ׀Fd/ӕfI~N??kJVJ8?>[`m&# #PMsȪ=&Iѽw_FLs-Q}|R`axĞg?fjXCQ˜Կ("B$sIdzR&L^:6B{#ԻӲA#kSsehyԙy+_N壣T5 ۂڵuS_y> iM g*eW9/'\ y){:0)IKJHvu< )#:B+JArsPxchh=-wXoͭG(!~,36XM gLwp[(Z<8\p@ eU/湧'੗sh^! #M 4f'P@Wo ݼN;bCJSZj3LHC_Y"~;I|`!l}II8NФzol>nA/N#V{.6;fJbW@'ρJ]*SX61C*u/ȟ+zo$^}Ο$v"8U}]aۖ3:wdnvAb_ o|k}@1h73oӻ{rpVL‚bRD]8+w]Ě3aY =(h8SPF%r(i|E%m%]AqӉ)Dij;)ɚ!A,-%q7YOgcв@Ro^}ob \oȶ[/tRs;]F JAXqQH4]ֈ9]Uo"3qQ:)PRyjm)v6~KU_tK)ů'42e-cb-}kLR[|eGRi>IЕǘ>QLXlfgXB=6PHM`dcf\sO?Bћ R{WZ^z?DNm;+-#ȥ)3U'¾/4׊|!f^W=V- M{#>e*3ʗ~6CqhШU´KK5%~%a:)$/]+l6PǏYp4C`S{Gl+ (SoMQ(*=KJ*n7b""Q/5*dUGZ|sѓ*YS4Sk_IdTҁrCGHÕྍ.=Fliw^걤 |i'K" Nb|y-,hEEi皥ڗ6#t.h k!"-),<7Qx,җӟ}N7RL ]{BE&}|X*#W J~Qc͏m$=K+7gÑ.\ #IGKa`30sI ̸[_s _mlsږXV|-AqV%x"CPʣGn mff)'Q@bhe$$[IN9;u6TWx(x`)oKOqPQfH.p! w=pVg+>!ǎB e]qrgL1 yU1o{e&TQ.@I主nciq^0n[*&0cwxpa'Iك2ZΤ%m!lX7֔$6fs7js!77 xd|H̾ ~ 'Kluc-'߿!̥/>Ep3ܫ C26[%{ˬL}I4)q3HmqL'ZJdrC˃J̹CC -x,ǗOЀU qhjoAkW{^=BM]8>z 6/rwC<x = IF@lj:ă:^ABPfj&a+BIW؎|KLZ 2}Ɖiw bɉgahҜHJF;:9k. jwSaXI2> )7 RG- 驵̚`?@HeBT̴^=Cܗw3fF=D9EĿv A-d|1*PJH+/4k .geMSx%orRn\I9:luV<ͧW !~ƾ&&͢$}HBcoG {e]NHfPɗ( 9H9ݺ&'=HO g&52%t?/DgHY#ɨ&[w.$j6V.yyC@0O2:sZ]HӃ0Haa5Lˋ] `P?3q $W-PtZPJf;N$(q);ַ\1Nc _AZg\נ֟Kp2#mu{%0=S}h-J!A7H*nĤIu׃@7Ef$VH/|WgyNyӁc +[~Jlxw*EA=ݵ_Cؖ٧Pkt[3Ìa6VL,TKs й @[&!SGImؓXOٌApg찘`;={e-ǵf:DDO$fxd83}݄^ŏ,7\-՟_0T;_oDk/|ݙW`\aZ:ś [ ba8 \mE'0B?LnQp')uޚv =|\锕qûm|^7Z|toW2ѪDyu wNg&r}CIɬJL#6?$Il>K9%S$ܗKdĘ}0z9g^&hhLn3Abik+Vp\ O>[BA("m,)!%IL =aKG$vLmfq=4(ϔ1zn}}] 㸼tׇ!={icR`i 6-5,^t7p&j=c4x?O ?@ G@3 !R1%ȡdm7}BF׹ȶ`"&.qTɹLgP_-:bH8ŵfE9Ͱ].h(WW ZĥZ䥺3RET$U{L?w مBki+59hEiDQq/@*zWgeU*\/[O9ʼnFnIqD"sPsw509@ $= RYBr/܌}OHy^H%Z *n^ y'1qmw1 + k_(_M\g cj*w Ь >5g ~`\",S׮b:CZg>PFVK^7b}}@K$d,QyPv/`Spv+ K:9,<Uy'rhwU{i:p Hsb'ծ_P.jltfj킸r;Z0"t ؖhLQŅ3/v=en_Χ5n@mSIN&!u t_f3H*.-tD֌ 3--~q@8T6_&@nN?C03`6IbVK咞QǢJ0EHJ{ |&6IPV*c{z=IB2o.x,@bJTGMfR$ZYRX|E/n`#uw^#h(SӋ WEY=5I[V);EY}0iׂV+!hћ($+*WVWyW]W6fRmP0USq&}Ag]s)fŽLG+mVU-'-Tp$4QGWOnA15 $᫼VS"|OphyZ؋KB ݻx;*1}XjGgL+,&m~1gaX* uM <#IiA5H~=DNރ$N "+|ʠ*IK]a#J@ %u?^ [4 \/_Rii6@[^u9TaS1nA%rrӡ- ]Ǝ-Ki]N!}#qW]N2)?MќͺX¡ffSadP$_0/|/4 KPRܑcڡ;HPJnit:f+' '[(^'/aL$𲹬9+Pva=8x-HyeU򙝾6 u(TG Kan2ɯ$D5> 7=.Pu84Qg.tf v>hW'g2B pE1W8 &RBE["&HDiͬ^6vcoP b6uM/  jZ>$ gRD^[Oz&6痩$g0F\wg(aBRفQ g:RusM񕀉v O'~k_51'([î2PjKW!?s vAo 4<@gn"#0P#Syj'tx,f2K+evc +ð4]e o&gm1"X#܅ƄmL֖5u<#ҸS3&;*+lvĿ5 /άVaY6Ꟙ*Y(h`KUOPy + ·XJֶjz)rP9bQ`"%"0IKcN_vQŗ,sI%8.3omLDD"ދ&nPh4~݅ĵ8kd։B,FtRΞJo@ էK&EP 2ܯOۃ&hl QTQʱfx5R(4#@{ >7c("DL#\tFKE*uEyZr23شX,Wfu*Upu mf|^ZW@:P~nX9Wo@=݂rSadl#r'Q v2 S$`4\]d@[N~Y=!@mQ^N2^t9׶^ex w[=xX'w3޿36W7X)mc좯[ ;15lq\SC"iHgmO3}2ŏBڰ;i5?EB)D~/u}&rH\yyZHvyǽӓ$ΐɳ:O{G뀇Kgu+ ¾u3sd톲&R92zuޔړKFdۻ܉g?kH@CtxcLG l>˧<85}X~Vܬ#7:O9HےBYMpw?^h4F^*%rՋx#1$]h5 qsԋwC .I"ȧj*g5@XU)Ԅ;eZh/~P#D-1vbq4y6Kc4_dױB*$^ŽQbE9VB K>s+¢ĪB t'؍D9P}v> ){Z9La: E)?E$x:^}ZU35e72QAz1H"sM'M0]Cq]oy0m0R1~`^ |0vқT"9or|"5x/Ci>R(iF .{h Koh,$6 HǚGc|Μ 5nUڗ% (eC:f^Ckn@^vqD]V / #ƫ%1a7vA괰Pg5Z Nۼر.rO>{LOuJwZ9+B;*-xo0uBg eC/ @͛ 2jG]Jf^ ;5`tMs>at6mlb\ݎdz1[(TΔuD-уh/B|hJբ OkT qivL;)Xn|qyb)%p`A~<\yLbTa. ME;ʦ`0wQ^IJٌRw_ * `)M3KvFro_owJAaYlLT]*#G~ȴK1MD _QZs+E §vRʯ9$uֱ!aW3&e;w iveDn;X8)W~To0j a@RnxmDMt V"xxm:\ hpyуL0*<-PKƨ'@pMe,Keݣ%U`X2 t. `6|LɅN" <>;I쭒+6^[#Iͦ"=DNܚ|bgIw>DT/6XDw<뻏UscM˓r Z VB<#qˡ$º{ɪ ** Eq#v@L$bC+3_ P~/??%P 0 m"Aie搛6[ y{BO8e6BZG6iCfֳH@MY; ^J<̡d:{'m:* f -;<+$jlm9ւQLUL$MC;zpuj:7\5H4%-+/Yksm%T3{՝)¨*?c'$+JH9iL݈/Jdq]J s3aGP{Օx|^*r8v#<a@?c=)oע!Ov@?>=gޯogZ{hɇ8"u 6f Ė@wFlXcQᮟ Sl);AqȠzv.dJJ"OW'q 8jjxmK;$X? 4u6@Lq x!;H\U/IvvKO_*HoY͋S7,͵8i,mŽ–&b?4LdTݾG3AGr _[yP )|p&G-x E}|j?uji <e6UJ4a)&0IC ȑJaW4|gW!\E@tB9Vޱi ~,|\: Fc{tIK.` QtyV}-)q5J2 ;d'Ni״]GP rm%_ڨ-\cB4ɿ |`qhk )ldr uہcwcIF%_M}8vNFa"8vAW r5`uA;?>_b@-UJHB k%LCL5ƌ{)#Q#jNEFsLzlhdVj-jU#y$R=pɐ$1- kU"ӫz@>~BK*]!JzAqЍ1h%՗zwZHw=L}/Y ,y{@pY $".հ[v6c2|ISJ[SBv\UB~2Ldk5aB~`.jO!0z/H`|g'һWLHFflF 7L7.TqS5nXnSWLY&sm\fE?0@sp83ڻrW`bکRoxohy:5[y*}W}/@u SsW_C(w6[#Л5bFd~,D&nEx7f DHIzXH}hC,_O jٹASegzI^q:llYXI;k8: f-_|8%הF 5g4Mys9hWffp‰5 i2*#ZӔ(/3whV]q"T07\fqkNJ1aiI[Q]FulAz8(LfN#{@ Ѹp]w`2J`H FIJϼ?ԞGE@Uj&z65<; i:u>f¦1r\'$z^ [׹ $Pܠ—ZBv>7{&[raMq4'xa`o,[ʽhnpC>u!qOj1Tk(Ei2}N큾zP1Mֳ1/InuD/I`blVl1 _|wLY-UyKIR~j18FXyE'0_&HgXؗK9vo@8NqIQwVW%΍W)胾? 1@yvѻ;6I]w(Ư>/Y60ίcs;__[Aհƾ]?L>&te9|ݼpkGG ]{:xp' ynvl_ E]˻$v^4fDρ~wbǽ"<0QP83qAk~+䯘pyU1}E?һVRQd'VP7|7nGJABCч7`$ 4;bu :AbJAU[_H9XlxC=o&W Q%( pz97> ҝ~cmv弬j@&ں/2QkzߚހOxw6j̞=7|ܙm<]5ȩY&‰K|鏆BL'>,MǦXG5EwѰ\hFA4H: "l5s'%D"B,Xp4" DN̂nұ߃rOE[xy:e][_1R@euMݖ~Q$!׹_g Br`?^ bsVzZ rC( J?sr gTZVlǐDDY=2`ם+/>@5=w88!2y`Oռz/NW{i'wzMIJ(C MX\Xtci܉ DB1 TjVj˕F9`Q*JSm &>67UgH ͐@u9]ͬ߻`U7 EڏI~Q}c4QP4ӞFضObRc R j̅C3]Wn!(X{m4VwmIT eL4L(%i lfd{Ȼ Ğ? BphܪVE>HKS=?=ۈ~IsI4*{5tI#)8?{[r/HXuzPdhyעn๗^ě=j?#pgZ2YgM5#M= 3@j2|zhc <%p'H`q%5-P~E/\G|7NճD-aYz6iu(@ٴ!Q9ccY #Q`"tw(.7Z{9f#Pٛ& 4ʵlE ݅?YjQ{v{q^dGm#L)?+( ,2WIhsEtK Ȳ)q!E=՜vXTq:SͲY?䎻~ ̕1 n|w⛿AK-X EK(^UY Z?y1FhQ-F(4tO,l :nAp4;Teb4CLufHF/@$++`-[7*v(+z~mիV~H*}ײC;'ߙOx{}wOY$_7ׅ sȡQ!һBou-' pQ٘lƇ@E_=@2?n/@ &ۑ%$}[xG1nՐ}y#l* ܫ7Y>W7n Ը)#_^˄K,YXBZɶ6ϖ[[\u Vwzjw;7jgeȡJQR:2W )C b=,^լ3v/bj%ݥ _,Wڱ5,biQ! DCf9BІ. ͆%n4ZeYj/ 1]`uA5{0q<|U#F0-5hs -"Mv($U:=Zޞ?7QHw=T|*JkI\#7Xnrjdy %{1 9'$p -M΄)7 ;^42 C 9ZA0h?x_+$2KmQ=rJcnʾ*2=qؾ RIHK'\@U;\fd":,~ڒN4IݜBq`:{co-\*!ₘ!ET |unO5 V30pwJQ^F4}u7ڮlH'c=Q*Z5Ѯ/WZ)C&L0}"TMWi]ZibR;i@?"%v ,eEح!b݋]TW0;2PGy݌(|IM>!OS?w ɐ Iq[R Lʉ{*}u#QP<9Z@F!"9#Gʱn$r ]!1}}//UXZlhki"xρ={_ *vcIJI>[?H1d-60#4`FXbk| 4/ (R_|.9Q ["TӢtJ ku=?)ҫ\~>fmPw ƑtKsV0~23fE'h 9/,_6vB6&Ht+`:]TU|cOw(fe\A:Y mOلIA_QCq? -TóTn6Ny,nh> YFr[c[g j^Oמ^m2'h4,Sz~ `YBѶ_=Z2_RQV 5–*E/((3\:5nE-z9MHaA %Sg]6)x^\#[=E2&4~MN6 N-u` `RM^Ns7HPi=KmHa*{}5|tiNiU=C!YVDk`b7>w;+TA3wժ|46ޢI`ӆ1@Dc(N$>Mۄp"0x -RQ(wtѺOvbxGoRTCR ]2a1SW@Z J? #oЪJ(XBz c {%@9%"?7$~sL[vn,{Г{߱ ߳.?)s.q3#lܾO#Q7,#5oa^#W+G,vxJj9 hMV FNsCe6GŢQhTd]1`->ģTS"S[$zWՍ_zPel_^Swt4Xجo7WcMP)1NyO"2)Ik Oylqbw+P뀿ۈxN*$h"cHu&wYv[cQkCĕ҂7 &>GJYapԲ  ,#+nz-sjKUEen8iKZ6Ec`αY.<Q>+C]poZ,dN9|ԆӘxp+0NR١LOŰ kZ@HDOXܛZg,⌹k6'DV7rW'FXOw4\Gl(anJ&{HTl\Vnc04e,_jDůV'²}%/YyUa*xWt|ۙʖ)Q#2qLñ'C=glObOX|0 #L|[1`<[?anr/poU`zyVaH(p\ISyq*;7zsӣ dl#G ѹc ,4g1# B0Zim |{ &a@U`ʽW^/ua ~;E۪hebbsd[e>)*lƾ?XLJy ӢO?y@Ե;'rE-U}$f%oSpuXL+URYhvC*[j91>Cd2+P!pQiWE*mߋZI7p?O [Nc_Qb S?d:n&9'%Su>{~Hiw\Z0^mcc?ќJ,DYcIȐ/߶,9< 00"|>Lieyp$vծ0<*=[&rUO]f`zA mbl9XhnxTjp,l)K͚(p,[Z#\+HdzUgP+^l=,65N#m1#&Ja:(wCsC{p>nc7[pnXB ^7k5Q&9 x@Um$_Y#( ZnSk1\%xRubnX|>2/ꙨWo[c=2*Y߼` ؘH O|t`6֯z%$K%@!CȜg90ܕþ :TSlAz55 F٫Dz={#@J7|UgD\o@Ȑu- "] eKm~[bQ44˗ Ă&MT}B˰?~6 9J ª専#p^bqf(ьR$ |Hh̏)hS5Ia #1Y)z+GԤƵ;!g-Tڒi&aqoAC0mIYe:MY(!Ў[ش6Loa9`Mձ\Z'B4iբ1w3eg2I4\ BDխã6!iyZȩHtr욻WMIܛpŏV5lhDc<-1u;a3?{<2KD r`: t_5s= iE"A"xSLJΣkWT Ȝy(H  3Ձtm IyRrɳ`ߋ,=)TQ 7آS҉gR3fw} $+m l=Vw $ VAӭi7sXkfHBJN9\lA&ǡ%hݎFT d,unLۊ21G)S迥en3R'2&1ZaW#WN"(☣?l3Xm:-YSN+g}0 O=ļM;( 64bUۖ_ScSI%@v=w]"oz.8,aK~{K:#ccl|&7Zs B { ڞ,a@@Ҟ@ḶqGan62^lS0j4k\νtcj+5\7g[s;vt:^Y4LV4Z 948'hS㠅z}mq`yv۹[Shz\F F~/pd,gzX_.~BZPmžmM &Td2ߏ0;,@v/]%$6==@ bgM32 DsVIdt|OBɲX=RNMirM949A6"-hY]eזQcn)KxN^Yn7mq6 x.o #_@FKjp% h.=u鵥Z .{]c-aQKZC% nI]ag%20+AM[N? [YAICH}4t?ܢGl8<_1FZĉu]̭)͉_+.۳M[mHbG/[Mf XE+PFY?3mMTdk"lH/#qpCQɩYIY_eAj1Y:qc/{hQCm Cf2vR_M ʹq6YOx{/wBQ*<\GwD g0t0Kwx렱#r)'&`&E= l /nYW<`9w^ŗsK6̶ ]&#MO#W ƌa5ۀMv}ߚ8[#fG¸(J3ch46 "HK)qG/÷ZEfWY qrj= {4peMX/MEbU&ܛR*S "Ӝ- D ˸?Tq+lQ3m!ՌP7;u|o.,11.= kn(.h鐱ih 1x1CU-+akZ:MTtcx;XsC$id9im6fFGwX=[)(e&֕OPv+1)ub8KIS R4Kxi{D-9qh!ֱG_Dtf #4Aj`E /Bh3נQ<R|-DZECB5E=@VGw3˖lb6m-OF <17en-_KZ,Yɣ{# ,7N"1+ҿv<7JcVuǠ:xeZYZl748,IN6>^e A& XY,Fbt9eOq*+rւel'}KGT2AM"Xs`P=XXr [a=KoQWjK7 ba.="32>GJRR S=EF=*%h*D q5~idymܘ(EDxw4a,N["Q:lr-=RB6B[5/ĕAl9?,&E,v& nX _9aM#a1th`l6]s,U1kQA]HnLYa1&1aNx| 6!!z8%# ZvhV׿'JkZlb=}gMVO7#[X^# Ӣ ] ΁ !/i =FJ{}9jZ\V'1B#eęc d>sɸIWo׉QJn:˵') Wqy;ؒ2[ANp?/rz%Dth4gS֮S̤&K}1,Oc+7b^GޙXRٰo@$| (Zǵzzvfyw.JUvU'_HSǐ{Fy7j}q mFUd! :.̽X¦\k9B֟*@#]&M+x3ָ1YF٫b14̱L2~Hdi@i.>."Tw霻'VZ}m盒4YOš^ )S,C҅N#4gepRiw{ G낎@t;r0cQ/LD;ZQgLH,6Sjk)hԟM5+r(J3^/3x3΅Q@=_w˦sR(!EgVq2@Ujzoa}Q^P"( +I썬'KseYlնw}`$qT!*B팩.X-!n2Egԑp>?>bI" /g{, {,e(}trrM~s\GJ;ʉqi,R]٪밍֎!Z!h(yA i$Ƌo:`HMVˬzVyZ$ <َA0,F;g.02AzD|#c$uGgeB=ʼ3g۱V58]%/. VVI|CRS~* +F߿{&]+5c٣ySDqQkor }تƨǾ=z a`YDtA0Of,|"]_$`0eཱུb}ևļ4j;zgV88|xj=KQRgT{l'a YMNHnCkPX7Ȧr}c\oT`W˨xC{H1H%+`FrjZ%7(<NJOZ\òhWA΀WNt9:BX 2RӧLYWY^% I*U&nc5a+<J1s@yq "p}C:_aBeb5]t%eBBIj/Vb읈I5>g\#;J- `}n]m5n䧬(LsH)n*T L^l&zc^ u KT%v`-}罎.ˎFw#)3~ 3DB# `,/VrB4=F쑜`Kػ7A7w†H -h_Ӎa|8YR%3ࢅWljC7wD kg+KEnZ)]"rfY9<'zs{m$.TD60ЄA:%+ d8QsN!Yynu]Ai?z%bo< -"@N& ~Z\TēKqj9πO ˭pqUsEuhgp6`cMAy]kfb6|e,;K6ǯ~.EU,Ь7zkz=oFb*FAC>Tu lnj1EK։(|HKkl_wi[s\w훜(EH@0B} +Jea\vN", Dh:X4G;҅9ZܹijRz^hHH0z pPw&)o OF.r["fg^O-ZDg@=F^ Ǯw\P>zH4 ["b@^p=Ή*,BhpAXGˀ2XfK4cx~mȜT\e?Tcæ- l_Av疓bNKw:VZ'^mR/jbȫG@ar٣nxlX=t|W,3P~T: vhUt9F06p~YY]O¢yKEJf|@iZC¯F ͖a%_0KL3 ^)hUygaK 5 ȥ}k΍]J-iȫ7NMYDhy5J !`[/w寮Y]0cEey=kHm dL#]=ZdrCsL%>@ɀ&eNc]/T|Z%XzLtkfhXZ$!e0wPVOC,8weQO~Jj.wP]VSl0)0"A}QJ|IB;,nid_N@ZRϋ8]Ir9@uW/S͵03X~\c*xU|k5 5L+sلʥA/r]^mx erwh G/BVb]Vb.U@L1\#z˙ ?L^ 5E8Z$˺ҫ*1+ \Z]jo^(j'|_T3%?߇k ܚHD"SKʝTSYKhkśFb0Q8i^"sȣ܌}Ɂm&/uen K}@M]7w ϋyȜ0Sj#*x3ȝ NG'9ܚZ8 UI ǖi' Pmk}v(B߆\X qm0:ߢ;械nw<`?7]M}nG-<^x($FA-bL1f%lf(oMXaQify.Z4KsB4E[[q\ :{jڟyO'eYKO&[{Gr?.pР|?f߅JF9UcO5=-\ޯ3t ;[@XU0SZzpPHk^Į^xbm,H~'!64To8?Lޓ΢MD<xѼW9? E~hԩ^@ϔ: FuT/!5V_ͷuA ahw=Ҝ~Jb"wH ThWWZYd?>=x*v IS\OvVF&&E"υӥs.GV|t$J iG5BOWγ%*`D4R8}<ad#6DZ*h?39l=@+r??(ڌ(] jհ۱[Z[e, ?@c䕦 VVT5":|Pl'C3B!m˚6*6X|Zd η=E=I4?S!6v2C{dۉJW+!cAfHM!Ih*?P.RiH{~օ=Aߒ4oʻ6(!K6)j!f۷qnf>v`k#|EVOM OB?)n T-&m7;Y6 s=  ]jV]JeG=֊"h8"*<1J)UlX~Pf(%< LJ__zPȖ;˶@<-c^D`enq-{%` ]{_3# HhoUz*4Cl[j9?@f1\$=Op_걆m-i6rTEX'.Fԓgkl|>60h[G(٘NKf.`~RqѢ&Ré/gbx!KQJ=3F+JM},n"U2((YOCp#OT٥-Rnn"d8/e`X_gGp(6y=dr)L 0eἓ;%c_:'LO$mL2_80߃NEY ~fB/NfJ@~|A06 >JLkG y|%>G/ VŒ-d[PJ?y}.^+uQ2 Wc[٫Ez3Bg]1J7fL!2 Ft ߨ\Aյ\!J*Ϻ`mbSX @oWJ`ؒWh.m,n&%O ڴj|N. 5X1N)8eWO6Wsei븇iN3hEYg8LEA!F"Dg/dA-i?#ǡfM]O,B rK_˵ԝBDS/i-%b C#Mߋ$Q_ucU&R*E1d8JySԨkpe`#c@j2)|ƅ٪7qGf7-N>6W.}^_<-7C;r_SYbuynb3f=tT=m^s?UO/}; KU\^+8컹VWW^탢p@\x7s^k^\o.N< >FroBRhg?NMհ8n岄[Em턻 @ǥ‰ow4lv%YZozzS>xR ~g  26Mn~h"!A72& Wo= 9\Z rtQUQ1yJc_3 k$jٸ$E ěʕ?H#iܾO $6unPT~5 QP. UKb̩Wy`C|oŘfl3cF$bKmǸkN yCf9AM&ӆH.9xTGayRo^+&o)ibu˛? wtg ofDAA4e 6iBA4r9(~ ^VyCIjFpUx"qgP+,IQXڠ 喘 ؍%BJn@s~o6ōZ ij'Qnt=iSC pIX>XЌPEDr0MjO@n6~3Vo Җ.;M Ho/X쾅M0NGPTU8gξP=bs]8R5e-INs$~Hu b}`6qmpNIVG=k6͞l jBعoD2K:n8P:$;˓lUK^Irl|BAm]~Æm3G5.oha\XOF$TJvz>T.KSʯbXP a3^V#H5AyU)djnlߑH6wDM&cW邩01QԟՏg=.qXcyfd(MKH& ~'|ƒ7z-$7~LtU$]{N9?2`.I;/jQ Wz5`HE{9eMxb=lT +M$; LKxgтKU1dSN$S|? ̀` kqA䝸6 ϵ ?9h˕Nt*z5Wr!Z@j҃ZnI\+nVT9P_LywpO[ t%b%̸.`PkEŞYGS>$ %]) H϶QDWMkps- ]֗\d-}ϨR %%zʖ͇JB, -P 8¡Nxۖ6xcr)Z0V KYv9ngKp\L~)TGo1݉~~9iQCD9\7-nɁED) H}<ԊXmdؒ4;&1+ZVn@읋y$Ѽ𸕥X 3_[˥Uߙt;"J9%oOiE1F,Cl".&#3GV_2/dQGo ¤I/ JAգSc͆*\gtYHĝaTUT}S{ ^1NU ˅LDiB FL{d<;_??(]T hq2:lg[!'0h#צZQC8>:u,;gxE x 2C90L4[RHF65/Sdzqޖ|(o+WYэ^kR/J3ZD!ǖU`[ bvLk9II.<^&ƑN&k<.GG-jr>5+;xTnkۧjS V}ys *lyKB Q疽P-O5y?hQk=3Ua*]pd$CxE*1,fi\ Z0a5Jojs^4n,tM0wK[E-b3ӨwLX:U5U3jUcEwl\?ÑKʽ !=!V"L+z4XPddUƧ{jN!弦\RW2-$s+Jq6t(lkߖ6Uc5:Ka`zN|$ ļ,GC1>0 ݄_(r y6 vON}oșt2D )\8a|3Ͷ :tnF7UƥN$H8jwmtq~M BPaeIy\eSm,;hO 欋{~("luDw]e|c؈;X $CTaR\V:?kW.+ =TʼnW88dyKh5Lh-'&yV(1&^ EE1)Aމ]괭zln if/r,'(+L\/w9dݡgT;ÝWğv*˜ȇƪU$+gLcƻq,<~ ohbӍJxp~ iQR8s$+;o<媿iS'ni. 5u=>-xbXPɽ` ˃r)xE iYk)m% k(cpSc発0HCTRP\RJbL \{%vMD/a3k0 ^8^x~WF obr/:xJ\r iT|IIhTPTQ0p&G2N Tl#DB;tW#ZU2 {}I){5Kv~qra~/***h1!ح8 L ExRxRI:~4)h;|օ3S0AYM@.J@>zd@|kY+9osE;N[.rCkL-.FR6yF*cQ8p"˿xh[H7`k!歚@9 68Ԩp .\V-cud=NcJk#¢[ Ĭ3#iRph^>0.f.8ynbm|iubK^r'' H@L2PsK CP2;[/)Vn)\ y:gO,Bu]I]s5NM>j1TD-6`3f0E)Ot;x cHg3? CB8,:4; L0b 98r) l-eՒrx_QVY{L;5*<=~doݭUNȸUYL5CNמ nܹD&3ǃ2M%4MXOTcoK yvOnB]jPnl<hВ슂F%rJ/Z |$'Uq o?xW8; *~ ̜ޡ}9x4TeHE_+Ţ\Tw>*tCNh2*Ld)X'w"-o2@fh/lUɢ) XCr~蹣6 N4@C'_ %|{ +9'-~H!|ZL%usl~((4:&jyY BhM7wUVI:҈/mn=99:fb!>\c1)iq4p;Mc?b?'2ANXҾ| nr1k8WWԇmC'%\S1Ή˘Jl"O) V,1[Qc @l?GK5Jf8F[%rOO?Z,/d6ɡ p&ڳ45NaB+iԷCl!vELY됢|l IZD&S Rf/# Ҳ{Ek@d֕w5|8*VLѯj*'bwhQy٦/#VazOMx uv[;^s15:6B'G6}|S ʯ?+ٯoW z;a3Lo J`Me~t_*w !,qޕ派e5 Be(wR,ҼnP~OWA'貓B>Y<۴}/^`L(G ٦ԐllSS.]?ԍeT".%,3_Q/%/1pXx%Mo)ь 0#uGz?L< qw@"zBXǦh RT}͹ޏ{ۻwWNَ8sd5)7" Ajm>h:#&r NL_b<--g؇BKK5Spi!DÔ!V%9(8JRDAswr ?Zgk%m2~tU'jb]kv(v48U3gȇ&nv%肽BoEcw?ܑ"qnNЏLݾlPZ6~)pң7R٧IUxCδw} QJNx ̯tMLplF{PvI&T6M4$Sl.=e;]SZkNGYuLcm(e8z9d?[djHS¡tz+Jܪn3w玩>z tJI {5dkQٱo|ȔCͩ L˃w=`>%M{Mt~TrJgN u T!0ܟbi3ڕ;^oEhIı:8plmC%̒ /3M Icf+@ #D~>p gH u-t/{Ϲ.utyĿj+H1Įg ;f5< Lt(; $}Vig!(prDkϚ!yGý<y䀪̄j[kS&Ÿq\ >"LCxW<2SCtnvł Y[UQ I)ϝ]{EJLy?*ߐ hԻI=آUȂg>z3h=) kuȀuMɌ=ȇi 4>Ga)f/;e,3`Կ#sWZqF{*6FWwQc?N \->ÊFڌ>] \(dZ\ꕔ4BƔ("/sn~iSpq0Uq M;gb^ %MaQp5. X Y^k;5ʆfFHw7y#&Ψg;N,%v=¢N 9+*_ɽ:]bk-#*=J3>r |x},~Vgw$X/54n>=Er0d]qR؁)GJ1GK\;g9a1Z-|' PJ1@*Igl*m( ϓcp5df>uNT-ޕ=O)wQ-iw,X4HJFj(1:|;bߝ;pw 3_7r;_W=/U8_^iɁo\"e>%[(@b#o| S J h=FƘ&[G7,1n'D-UГȮ3y>5?=.o[|x!SR.=7C1L)x]Y΅3gE4ic95"eP-%"'dk c,CtUB\iwtC8ݻw I;>߆&ȩ^637JCq Kx@mVT M(&sOd|m&Ʊ(_G@z bM r}hqG&[/ ZoF4͑;4M"q_eqOYG/=cj&~WVMmy>:hgLq\+,XhύޗPDa*_BӬüns`f6c,]7fpab%}|mx4OM Z$O]=N, Q8A%`Q4q:Ƴ oxϾ}:$Qm}ˆ `MyGl{AXZ$(hB—$3Pq)@bf7B#w8y&3YarߠViR%hxL39>64Rȃh `9KvcAس߽?Wh=5BD1ߚ*1++wC'x"?J ۫^y֪(+K1*=g@^_;;jK es1 h 0٭V5UDBL E$AV^c-55S7_VMAu~Ny H4fnΑo(/Ng{[?kl)4J)rc:3O`7+Kkw{C)]z ?AZHrq: C.*^b٢j-nA*ZFZ||̞Z jamD n49gقtP0%A¾xvbHe_scwN=wBkΈ5C{Mgm9nDc`%HtFD_2fu!Y@kAF_ >^nPz^}|&l$<%X8&fhΙx#SY{lVMͪ$rOivBc(瀧ujo ],!t*`X\u868WPK(C7:UQݛaͣ?3 gb5H`* J1;K& dcᖬYKvQ3~D13B.&z 0U>y]t5"zƑ,!-{jW{=зi F;VcY#htᔎfcr_pf-.I,0R7ɂ5"1K`=ʁv(!1= |n uMIYK#ZG1Nٽ%`o㸶jF]Ĵ9|sfr$ $z~!yFT?#B?Oy umx/yesidg /0Z)bl9MY$-]f+uP4r ]oOTFW}էTlZ޼`-Bqi함#=v?>sm6RQn%@pT.kkf3G GCWϐyF9qJd9#MM;n) +6qq$§Ze('^,<$FxLNƢ̧}]BN,!'T׃/`; :decԅg'{Y%T$|'C=ϴ> CMƌ+ۏB&6DhcG j'M i0ف-P_Ao~_{vzݦ-9|a{ M|vh:ϯ+qa,-\TCyPCt.]Gѐ9(X=ڦAmI6clc?Ì $ 8[oPQ^ɽ5m-߃Nȅm7S#_b1+:}YGoyL_ Ս0:5 8;ٰ ;t޺9mBp+lmW@ʝʪGַHEEK)k27''dK'"Xp$Ͽiwb8oLOEnl^._39WsJqťh]Rcα/׏')g $_f6aLg?Uf-nPIV%>3P-{c dsL 8 v೔Mnc"W|)XIG,`,[#YP NS\8Icu{-Ad`Gw D_ e㼙2cG4Z.cÇ9Y]&^,Df0H$wֵ{CܗF1x*ٜqRo ѦpwRyE Ğ'1wNV{~#!II׳NAAf̴YL j&<՟{~X pEX~~-jbx2 %/8jk Y.WN \EvGo2-g ??̋s&\C-qa.hv~\茨H{kq,[}x UXH6ZI,T^aqb)>)ynd]L؅ Io>;.XNj|OhY3FedêY`s^u~3Gw&R]06}q&=bDIhxg"!ǻ2{+>B>u&ztп Ì>dlicjƣչLh݄x|"LUK9߉%дѸfp}9^R9)DڜNޑB4x%8k2uBfߨNg~<껉AcMm7OC[4 9ZF1Šx<{iy&D:Vڔc{;b8hi^B (@e21+|HF8A'NJ8W.E=u\yqUڎ`c-Μx5'#?eRacЖ:V )䰡Ϟ a'h' J\(55#׊pL@ZMWs4vĒM"|'P_c_ށ6M8e/o<1bt<&C۴m׮ 6a  bAĊ0Qy=@7}"@.G@$4Si-U<ݸzh:6`{{"2ewߙ̥)86<" ͺ L-,3jTrI:aP]|a0N#FkUHX^'ҟ>ĎT =@6fH\Cu\Lg+UO$Ɔ$X`uՒfl|\HQ=ihǗ_fAlq2!93uߡm]M؇=1 TkWK#Td*3Mb \|d z8nrNwòhrql[qB1R[;Vi;:C_c*\!%a׆[')&gjBvM$j%7LEUh4DTWxF#jB *+]Zyn 3aзn+2Y6 (cQJԡPxJeHˈ0qXBKH1ޅU%xձM``=;R {ޯJ.T՚Vg~˝Q4CbיIY[3i ?uq_jmмVa3`gyJ;֢fE$w|箆 V޶RnwkM wIdZk]pWQzF:Fphwa'[hizE ! AZT?mθ%Eg!XA+lE YKWHEu,QMZ*PV ?{; ްN艹Vuf[!ya] i +,kR@H].sA&Hh4ey.By@/|׼ @K$*{@y܂߭V mPlk[fli5ߴZSYq1tK9e_V3_Uإs,WmomY &

4MZ6hH]~rK9?mx~tY&mA"Ε7 YlfKϨ֥#nK8)ݹj^n!Af.14UKIc#*ȯ H :wD^.M E"Fʡ.wi< #Ċ2:s^i9._߀Ҋ4Ðf岶*;1FR^6{(lK+…aXk{i uO%Z0"M `03xnxMײ'$Ȟ!n'&{=ĩ]|Pa-T/SFZ\ŮFb!jM76X]7oMX᠌E/72l9XӘZu^U6@Xdli@T)x@p9g;%8.zk28>pNUONi&x9p_'BRI) դQ%JyNC*'=+ʬhO(Ұ!ѽLQw!C(ÊʳI2gդRr* @c< Bok N M<(Hd %}Ȉ)!c|4ĩ:.Cǁc%3 {BVÂ_(WyL?b/gh– Nd)UO8D_!-MG[ ²Ab[I^;4L+ޭS F=]Ty q.\sœ]{H3ąK̔]c;uj}&%LH~À 4nvї/vdw v aaqLGth]w 'kcC q/QSu_/z lYLGz;sqe吨.m`M{]UnIzlލ:9}w$kj"R?'AN+`M@?k-;zjzT!5X+.  Gv~3 J\=bҶNǛĉKadZ/5/G!3+̈́*" :rVG44s88W7rZ&қb& f28/MΧ3q"%w}7L7LǾR/\?M76 ۄQ$jY,qag*B}X`a9@F5$ޱ)h>fA݈/b\/}dw|0-$>+.\d:sUCr\(iZSBGwQ0}z{ bqfbV&r캢X:K^C^= vb5_y3[iyӳ*΂&,Ccf -]xR)4U,Zg}ԍk샐R[ǯ.JEC.P5¡]rϦA_UeדEk1EZLv"qmw/L:j2E@ޏ"6rIaPc=rxdUmz؜r[GOKMU8rKpK* jt593EN*!+I-0i$))^rjh, tĻUmEh;bs$-ȢMPTUp !T*gBa욧q˃d5獤Ց/]}U'@ Lߏ @ SP}N޺2BUΡၩCs汹ܾt۔:hNi& WyzS7 ŀh|)ɡqv}{>]9@6W%#؃2 GJW1xFگ`MƊ;wx8qږ0[uN\(1,Sv]#y .lI[xV)ZԠ*$U[} }"=%h8U9Ӊbb¤Ñ]>t"C+mޔFLk䤆n x a[Fّ5]0)N%]Wϋ0<+ovd>H8pyhEŒ܁:e(;_ idO,r=Y Yx)( aQ̥]e݉jrQ)hykQ~sUq*2:΅:(Gg{T,&)3; CT7IaqKROr{jgmm8R+~"Vg6*jbw!+'pj,~UZ7U_Udk;v򵃤ϚuFLF~ !CUYE{B(w_\*Xħlw.95F2$v9qhY kkjX#gW/4L7+m#c}aئ4EPq;[OP^!iZTY` ĞdK;ē4ҖN7<ԋ#̳9ZJ**[XfKP̦&<0>6]r3(m| wDA>>QkGq3UJ蛳 숮rSKfZlvlzLpבsX(q 5iK1>/3nlY>:rΩTTه}JYZ'@X%s/mpgII ی5lV0b п$r!M? ->i[hS$:.q{=9EGEj8{Ib@+$.Z4NOЏX`u 8Aꝗ-?B+#de `ϗqexFZ5Y$zR{`'{ٚZg`d}PqPB(O22/ b[i<'8_0UeExqٮKdZځ$G='NfBG':|j3?Qo}0(Gا1zRobv"_FA=&ptkMPIݐՀdM9ʠ4us%$J03&rFj!hNs-:$0AB\V`t\ƛ[υ#Vs þ飗è>[٤Ke<|菩UaA./&@UQЛѭ. cYޡ2F+;hmYȊMiOڴӔ#>0w 6PC.]gd"™ "qͨcU3Uj/ոn|[v6,  a#&ـL@Q8b]^1t盙f@ps8$Y^XP,RtU|?7|^x3ZO $\ g\ɲ0pi;0BMGDV(^^,PoIv]>SqYb_(ܓI-htgq(HͦotFSW^D{ciD0 k y(npq>d`:xM%X_vv*W҂(` EƠ(vu*YFێB; 7R OVڲ<|_&8QYz2fQ`X\ʅeʂ Q1:#K'Ҩw=O0X0hi4Ķ2 gH:H\h†io \FwQQZf88XhMF!퉦6Q/_,ps :$QWw70!D9<'b7kt7)YŻ mk҇)h$ bحB(͂1^'"t=1l>VF iWroO*,"qqh(jфF"ÃF1ÃWbu/LO W\@W4ve \OPb3%v>Y @"ߦO;=#_ձ;*a[Fi@;PsU+YFNNK%(3A?* P@K30o;,PEבx^Ahw)bEW f_PlL_amux-c?櫴+HA@2;G^2P\I6zOyCÏ O5,}* dm^7@a5L Pf*g6 rcBBPR@T`'FB݇U}ZG?B106hbecvC\Yc7*}.LZ M kfY饷uz6<,Ek{yE@0I\c:4uzTt:c}k ;-{h-;&= 9"{'!%uݚ5YKZmWg5QmDCiW-*WԚQ0Xv@<=e=BzOδc&bqgt+m:/)i^Ӧ{٪ '= J2nOέMTUYz!g_f3j\X/+{0v՗. ^#,}@&p:(3gzAT^DV^rc>kԤ\6o &>O#7Bյ=B\ En"r,yc [ Q/BѶEdoD K+ %1)4Na!IvMB%i< `y7%3d]2D9e2@L[y"NLrֿH H HK51a3Fg@߰NBP&x͏(?7h4Hz∼R/3;ng"$P Z:<̣Ip]Pm9ܳxK"oLu[B9j|4GjV'ToR"s ͞ȱdz*-Q &ӇGIV^(\DѤ&1=@[+w~eq 7=H:)l7@WgApJIEے% ӊU|ykCN=IT(U%S^pQp9㬈}:t: ☇yɩyyj"R6llJ4(tK+F{SG6,E ">Wq]:1e͛5헁gP}/GY_RԣBc8?`S`5PVNSZjbTC^߰{b:t ڀq8έvoy`B7I :9*XKKTe!>˷=/kT=\jc'zka"Vw8ߵ{I%E% آnCb{lpy`Fl7i8d 58(jFelaUDtԫ0zbv#:_ ۦ36* &}pz:<=b\M^?(Ry,rϧ39p]`/L^Dqj`C ? ҲYϟKqT}-+xYt`>z[g v>Nžr\|S"4K iLd/J[qؤDtkס$wX,3'rK#{qPk##ُ^rg ]*gq}I&;\yrj/jZ$ @KPd4~S*N+pM9s|JmתW4Jof(ًإIH0Q/GE*4$q㷃X<5"YBg5=!i0Ta'2锬rT؎50BM (׃VEg6H Y5i<ͩhC qo5e(/?tG^{Ŧ?$#n|s\^;;sW;[i$\1]'M\Q/c;{xU}Vo#sSCӀ]aG_聀G&WL%WUHvBTA?g $,ω? [d\Yaqk[4G哥2R_e YaL/D_:ʋ[W z76Ulx'3 e9ORM=T;g ‰Dr.L]3S122o} 0kw8=A[SFKɹS#|c6VA>Ⱥӡo;@f>dȋ;4O!Fw 9On ίñYIœ; ÙVH-2b%Vm,׵RG J13t Ţ&%ѥ<쳛J0kBdA|F_s?muYHޑ c-OnN!Ikkd5oXDu^UrRFt4G_q.ǵTבuY],_^lیuc/&!E ZdBC^*qn[x_$j۠$xI}ٛ{TFzp3) 7ċgXp-fWt1u;qIS""" ln []$d QF mpU. |]K8s GoDv՛Fpטː}+;E\]Ѻ7t%U$_T9x$ff`ʭ0VAE -j+A\O11Onc{J"IA~vgAYo4 PKuol-hDy-I5}C 6!S参=srN///3OyjOL.DJhkY- Sha%̂\MhSЕ+G9ƂxBEiefL@AK{ `6Ē5bu %œNC9-BfLLLXSxQ`NF '"[NȲ]a3_Mp~Zzuz^DZbdh=!yt)>Y?`\֋1(76OֹڵeG[@qq҆b>9 ,Cѕa ]M#y-Kl&'?D]V+YMzD+ ͛&Z'Mɦ'tZ>udv@br-u icQSZ@@<`sE&t%Q!9\h=JO E{<O^:EDHHFVuK$^ "$oU:i7#u, LPPx|J_w' \k!s&&U 3Ûg~$ 4Śg3Ay=ó,p5꧀::l2!M.SO{WA'M d]pp,^7IutɣRofSpva$FyB<^QO\>K~Q]tW"43Uy_+ֵԈӤύu&aW|Wr"&xɂYԼ{\'l@=&N9"4҂ۭ+"4vwcjBWND^V嫬'} Y}uꬑ-/mЯ0=Zo/LPѰV| 3~Hу}Ƴ"w׿@nv/yy+UjMjc_]2Q-X /4b](w^=Mj.pOc&R89O2Nbjǚ}lY ՘Coa/s 2--q&i|&% JϠTszwra4A36_ [['zKO oF $v][/?\7=J5(v?>>~J*=>ߋR+|+hKd"2&޿ OTT}}q}7P/bIJmzGuw;Wz1פz'~&ͳ@Q,puCX0ʀHb"ۋҌA4 uQGN콅n뗤{u84him  L(Joϓmz#VԳMKM \[j*P~gse+lOiwF8nQm21G$3HmqY\rLSòtxaqYXwV1o.96o^?Diİyɹ;}+٘McW. J?Dr)KM76\ɕ٣ 神)Om*b eH)iH O: #= {lNuY !r "mPl<]IMu}PPbUR-qZ'246ș7*?ځ+ uf:齌:yec"zrMEV٨FˀOLu^,Nz"\Xfُ Nd '-ͭa@v03?"b鴋J+;8-R"T<)Q*o؜!03m^֫ڜд+U<=;j(NrOe@c~j.$h> ?Mc6-6">*ݲj~]QS?1{P'ci*X:0ϷJ6|4Dk].@\4ϸ*0\z^|s=Wz%>_%B?gֺ*Ѝt󔋟l^{wUu( "~ՂYKЭ1Q7KnMƫKOSWxJ̍|fXңJ-T Jt>[E Oc77Z v Ucle,aVDm~fnfg^Һk Ib ДdsV<޽z\THrmeĎČ3xIqLkb2xcgGX3\,fU֎!FH]Ot֥^u5' vv B%[&7txqQp =L{b=V=`b xBpaT 3 wZpFc2xii8j(뮄)t7{T#U?v@ m~W'o*Rw mQ Vf 5!qk"7y%mMyYHL3O>H/^&&̿,+S>D)h QwUb$aLo7L+2k^R:bup֧)&KGQ };rCO 8H&5L1!_zUQC~ "9(NL%")zPُv:Le2M?d[$ܮ~Df0FceBZ]%3}-wzϨOʉ~K`wa K,L&HjDD ɼaaɞ0nUy2.H8a k+~0#knt; $Zkmmr̆w)fCړ4F B][:ʗ㘅ueqH7`:'8%ͦzdye^ NUlL0ZDZWo":* ۼ3E~V|2FGP5έ-Wܔ{EEX WH[61Tv 6h4H[ Mxɑ;t"T[:Q}~/}v5W~0㈝CiR$pn >R5:[Q:{pVqP/NqHZUT`` Y¯:ӛHd+ieN(և+Ŵ} 8kd3_66OK[hE;}IHl_ӫj(SU ~6PzV9; yhG<'Djj`(E= N9Xa"8Z#=1KmrwvzKѬk 6BZ_4NVEׄA eܿ' WAVWG5k4V$/|fT;1ĩPʘo;-w#)]j}f{`G:aքݢ1n>$zRsf1Ad@`<V_\M@h@ aލjK}-[ 'DϟycƬeҶXճ3qLǐh޸|u?Ws{f"4i[F3ؕ>p'jrtU66["g8Bu_'{\EjeI'orG=3Uͻe/zJǯ8FL. "RrHS@( LJ=)փ5\QYl/ Z3(Ufslds`V$bɐy]VR׻4oIփ6Ձ\?Ѕ`oTj\`C$5ɹ u!hzZv8IZ e@)V|.fxJ$!aMdVl9Nɒ0!Bڥ ϱK͕ڙgV:+lӑaV 9w:#/7-MgL[$QCNS,h`B L c9{|EuAM)H"LNޕ~xtrs9q^i攤+:jN4fvQ2W7H q3:Ϳ]7=V2vVSІD(@(ꊼRc/- ؞ӊDC$`aSSNH1?o o&MDr6½DJ.Q Oh|?u)LA[t LD5K[l(TU!k^Eacr.^<Β"#INjdɘwGj}S" tWh:uM|"L.;EVD"飳V|>JFG(MJ=cvs?p#\J~e5)ڙ‡&( Ojco{׹66g}mt g6@6Edhm. 8ɲ_V4zA쿞!K2TuS"ړR/Y  7}Y.!5,M[AlTtΛ3B}J,bOGD/[I!I7Ild$L¬:$-|2m< 0.70gP3DܚAȱxRq/u Ix`(6xï1,;nq *&`g\uQKQ~Mnj/l E@M6|*E=]TNj%]WT [;]'9- iN#EJp@'81I<9gzj#zMd,_R==MM3ΝQKusPS:,vCp~ C&M/+jRuYK;E_^ky&@8K!@yvjE%LI^{.7e1KO-ZR(@禱GԴ%>1"Mç᱆ :pXq#yV#JXD37ѸcK.~6-;A3T*vMxa9w]S`[ x>PSVp~`>)"{mEhq=kXZ!XC`^kjz5@2.z>p"|z_y9i@.1,&Ѱ/w'ǝy3l9/_U5 `=ٶ܊݄ˆX*O % hB̃Ė4)Q =fZuuZ/=.$qL'~kjG/o]w'3["hr\ V<@1<&}t?v Xtcҗ*p #m_3q#5]3EG-2.̙`ȅ?Hqe^ KS9ũEg nTȥCi= xp+`vM(\p 2ؙ-V_q} Yib88^q GXfzg c9zxQ$p:<.p#ua)8>6'CqfQ/bVeG,Q3RniN㉟#׃i>!Th[Jo#Ev^e؛)Ǝ"t_Iml|b'E I^ P"85hz>Q=Ss$#oֆ (#Y2 hY70+ xP'NƝNOɕ-@%qM yMN-R" n c ŶH71zK ޿N=j#H?`Ոg׸+q`jՓH˄DێL%KYC Onshb,Ú@bP{~oMA0kZeVRKM ҿWFgn~e3jVkDS {Ҡ5!㦍ȸssSXD~z^6.% Hn 9AA)")Бkz_#J85#sQM./PRtcBdQ%[ du)>vAh[F;2+>5.x :%ف@=55;ODΤ/['P)@/6|_ŵxOkTbX\kBz>*wR;GC0$G/u 7@Fg[v9aLRv/[5nDɽv+;< `X(¬ZP'鎇1>؞JnXW6RSI8LXsW ц{!<$Qp>Hya(v94~eCxv.f:K,J8 z+V%$DuIz]?!q&`2cQɝk apIvn^P7I]dgh+MvDwaE1&ޔP0(hXW`(hck o%FaῺx'ULфS-vf2.e4x8KNFX6jw]>vڈAJ-<ϲܽJr,Fo)cr9/?(Vhs̃] 8{PA\8a3f,nw.=o(Z݇իteةjZ x(Ph18GC/Y><3 Ԉ )+Gꈼgtr" [k\YG46g@YF!~A 16`- 8 E9.ݘ=<hp}`va/l:Qj[&t^k9aLdG# 9("TE]hNwvcGc^X'i?x`h;Ʋnq-6"&[w9fh-Gl1џ˸@37`롲"0nbj5YBF3n62|UYsȶUEyskSߨ6Q+ѪZdcBÿ68u|lUT?^} GXEZklO aw3yqqb0 Q"fIu,Zl-RKex<:㫷9PV#Iqf u9뻉LAGVᢽeV}gNpkePPK_gHXJ<2'w5 /Q+gȁfAsxܪSKFxC #5 n0b68$W3^aފUKd(!i e0<|8ZX$ucd/ٔN|Ӊ8}IԬV (n=(ܒMC eyA> ??O?1>5m#W5XhT9"xݛ$"da\ta StK"luVFvy"GlioA"l[ȑ:C`4~{ڜQF+p(*vF*v1+>Ʊd=Jt=Hy=ׅjjNZ}~UB;S! 2U<^8ھB=/۩zmwvr13iU. OWY7(B+CA8GgKL3 f*8OI1@kX H*pT|Cسc\kF%V@GnTZeyʀ)J*3GJתI+]R2E{sS0iG,wfO jރT"!"*ZΧ؎{{7͓bV<̚:-}+4C$7ݳ:Eeh dMu}?L$ !i \Tb[Aݾv }l_vȦ|Ԥ" C~6. )p)=ІWD5eXL]DL0IuIM''?OZ֫3Q9o3֊KbQVg[[¦ib;õL5U`*2Ӽ=3-[єg[$ [qMdBsc˺WȐ"`BAXC>f|eTc%\v\/jQХ>9E10pGvzMB& S􏉷Whwh{-M2V!T G.F"yW1HԺ\&zx ݫ}T_fU) tht8:Rd:J֔) @,NƢ+i Zuep%(@&,I_z%'q F3>Cl3cbX 6.qt2>z9< HT2󖷃#lWNF'{Ȏ>閃|F#bB|PlCx)&-pA;VtrG⫲H?(c-; d 2>>-ce9?zr7l/ZNL=ȧ@B|!U1[ IM;.WW*<*w+5 LV5 fM3*U]մ !N2LHlr+0z'(< {?"[u^E07BCZ}JI$|뷂Sgk,XjHP US B]2DR.Zڛ(:Ƚ!aߢ=^~ҀC7#;c5Յhiw6p.&UjH:= f0yzt-zM6.<9 Ukn "&@w|QKy<\wHx7Aɜ@6)1&*eb6 \(O/ϹbwO^Y dD?]t:d"䤊56_+UA!\YiU߲+.^9.L]ֶTh0` v=$m(PPxR =f3(/'DQB.L,ϢSΜ+>&!<`tń}'H]-%ߐ@fmFw^soL`aED$6H!5i'KdI# [Rr gJq&#'!%w{&bAȁw`4bf:W-4PQ{7U*ʠ!3tҎf}d$ LR$Ac_DJטQ!y2 ea 8W{"ᔶ:N$Hw`1]oco) 7'ujB0#gxgM\nXDS!H,6,`Bv8g5=]7 W^DN^}ȍOZ((:d~ N4ȭLh` v།qhؗ8{*@bV 鬖%XbI,Ώ&-ħJ˂],chzN~Pqyi@v0\ J2'v-7S ,myL<0ZFQ D`Fm~㚏N=3S9=:mP ik* ?I2+L5ͺm t .A lan+Hg &hd"irqxgݚ%bSPx#;jDa] ˁK2Otq9]sr>}1&Ԛ!vtB K*(x7Zc~-Ruݿ"b^l W2Ej?ekݠ>Sr+<~ fB  Fn pTy;ɦuZ]"!FFOoFC[nX~CEX1UvD!ic}'?;*!NNKaU B_' Ju[Uc]R!O_88 g)g_C\(&Ծݻu/TcQ: f!0+Dr4inP؅I*%<ƖzϵI@Fu4԰Ywl +eI/#у O@y:?!ŧ5+` CAc/W fW鷴 Jw`kwf G͓ק^.L"iAC7fdp(9E!SԨ^6#ESU?}\cbAKݾ+o=B*}IZn6)aV/:d;(fR4f \y>$0U7Qkn]@ԤPb> ,@Ӆ9˒iF$3 !Dž^]$kتJ0=M^vĦ} fb JUw, 1D [Wٛ'0BC?}]B5ܧzyOGoG ^v^Yvn/׽St|dWdJ;quh T3Ɣ.:⓯ҵӧyP@,dEFbz˕eQ/D)w'0½&΢%<@0]_2qQ$iBEҋMta^t?^`R?HP~TMȨnfaR'L>$*`~[ߺ^̽>YHw.nca"FP tx[K8>&J1'; #&OAFР˛8H:f\fCS+gӱ- |F0W3{\Q8 3o,NUE H -oVOhO +ab`v=Fߎ` m0;0,YW4&cgu1<3%u?(;GFa{'p[ˈAm="FBMQȸ%ؑj!J btjz) :}Asހ%k"&cHN^9I*f Y1*^ q֯1hrww+z+G4i_M7Ctձ@c q;+X5"X6Ajz 8~pĈ@}Q=KA+֐m>*6[ĆCKdA oK֮$ai'Hē⦽+񋁬ߕbNȂ20ydTh3B-~Q96(\Wدȗ?>&` SU%U#(#\y]M"B4q|d[r,Y'y;roCSc! #X#bk(`Ms4IK3}T'I-5ŀ撜QSl8)m:7HDp{m^ɂvA2r 3`|bXDE;n-gCP`7-i`%c 3b䌖0j3WAZytʮPMOɦmc<8b3G^*e(K)ȴ(*[cuR+dYEZ^8{Ŕsұ6` bΘ¨kmO?~:Hrv@:lb(:-xӹIl u;`pHaWdק<+2MqZ $X40<>}I秙8ntXbS A*t'5(6䏾Jk&I$w.gnT:b;bJ$V·&vunsL5yxV)j}u2X GdfZ2\Dh@20XgFꐇ( dv<,[φNU̸ff㔗wGMSVeoR7վ`aU {3Ӫ:I7ίn|xV r-KY7 s1t9KDv`Ѓ@~z]F) @?N8T}d\PQ ~hp!/G0œ|_o1pvĤ|9]L5 ^(D Q\8$CHqPOQa>:E6{ok'G1i 몃{8Ds&|%*<% J"\򙵄վY: U2(΂F(J\5Mؠ?\MChLL^ۗ{(A*Lӡqb¾A͌cvZk8g ,*v2-vF8Jiy'hiandOXfUZXv;|ɻG<鄙)DW ;{*w V,C>7a~chD@^@%.ܒ\VϞ !܏zư@~Bd`a<|bT[$Jľ$_cJyX[k g$m9IB:d. Z)S!vgDvo9: ԇUKIIAqfeI.,*0;\}&3n-!Wqq'npc5@?v#~{JS5&C1Au;3 r iJب^NAD6۫*^le$<&VGjsc._iT] CO؝ujU!t1plj#VUűrsMHhva_YR&]' 6Nϵ<ݒ.]:-DV3Qv\d%7j1`l8zI˳dLlʘY #%W<3ƭX C"l,=[vr%r웛8W?~䜫x6-2&ප$R{ :4;awî*ػ Xx"^O<htNw  ~}jpf} ʂ;Y ~ZSY.q\$_U.*r&6lQ4HU1(/C, |}!{pfSU`daa)P-2Ѓ;gD0 #&t~qK8; &1|, gZ1YKt G}|lɊfcɈFh~àP0ɒ>&c}b~IwB E3#: X?+UZ~k$քJ71ḵֹ)a pN c81 -~a `w}?ޔ%\1u@1襺1obGATcBmt4AF]\.tQpys|ku'zua⛢EOa*gd-6-4m*.SG!M UMLelvߴuْߵ@-'ݶUIة$DmMsN?}!#Rř"Cb|)s8O70V\Ov+ ĒmhGy'h'CEqcU-)/'{!NyȗYI >o E~S1)w9hbC))ݠl?|)g;8 yO1cFB9 [3ְ vgՅ\~H1+W޷ ֳ):S ܒ{o$A5f`G tuHV :fJx6'(9VU{Rުe`ѩ% ䷩ h2=vbP8XO`L3<1O|AWS X⽔q MP:l`x7z:"ޑXhQbHWD|Y)܅yyTN А~Q^ 6QܽwE8]TfDEY{sw*VQ&_6* +^Sp@{SڜsqocC+mq!΅cz/]d]f>%%9xE p^i;@*jQ*vQvYͱvpK QфZ P+vUqj[n@ھ8%!Pd O2@,I++ KOHj# 47H}"Q~>j=k[~+oRWt&5? r:4vn Y^b7WD$ |7gzɳ<2~7 Gf( /.ήL{.킅J1Iqms=?Nxs@h;Ѐpb ?e؉|K!N |'RB:rID\U,Q\ ]3ry^h߷+X /zׇmd?S׵6]#(fU_2/{֝{J;ď!c7t!QMmdS=J5;!.-jaѾl?;'z?,-U"f FNO홂YTS͆ Í/X~e]؍ۮu7"M>dK}.!凩L<ثqo J=Yhcʙ?뜀5Fy!%6طF08'䨀xRm}o8S f>Yw]`qK_-)~En<@.U F?aÇl$60z5OE7]-s~Ăg"nC(-{Lmh?JOe?D2Q~$xxe_^.:L!mdͽӾ1Cn.E\&-SCl[@lM]Z5#P5]R)8j:R֢)( nYZ&ݍxz`&0r-`5i7Œd^e7D{T[՚n]t*矊FPICscXSmNL#ʙSA!OU],UW=q1_[JF!I|h㸼ni*y{ῦJsZ'k{Yzٌo!i8ltc3Mojiմutl{ﰖ2(go,>vzדg/i^\՛+yW%Ȳ`#R"jR,.Oɋ %;Rf"!V#ma,k[W2ETg{B\4#]"!Ѽ,OlW.LA~7B|S淚KlmHhl"Qc1vxʼnzLrTF;nSG>w@cl2H]v^.I[Yv=-<#>/%R;<88.OJכ$9 f^;cJ`Թ^Rd7>*tvޫg1)' =j扖 W?Tw8dH [/94鵽%D}T$eS멙ZUEUm1ID 쨟\ΗY>r< d}O~ŌȭZz6t~Ciᶳ,9QK QϱF;~ i'eBPƥtjX>xa_ 9Dz3ͽ_BgqSbuרb<܆Z '1dNv`-:o%yTNo:*t7{$xg~xB~j\¶1cd>g ye9uЙ~cW -i82BRZ=wAI^饋.Ur> dAE:}]}Oz˓Uri2#srEFZ] f`o)fq/!l^Iu-e zd}~+"9T ٧NV{9 Hݸ qhQҼ@HmL4 v~VRT-N)L}ѹ Z͵MB+qb@!I]ND k:!K+Q'o8'U`2?{S͘/1WzdV[SGݽqD0.\u,}XݑD\^H \U'x$O)5?,ͣe<{k~n[n8/ގ(6>ٟvg!_B̓?V(%/Zgz\gFRl D7$FlgP-wUg\D]7jfT{(z^0 eE %M1{nTQ Qt~e2 $')>ߛsHUu:^]QVTo)k j#zGS=OH, ؃<)ү1,Y^m~U5K!z%0CY`J<ʊ+BYqY/ޚȩ?fgf_ vl1n`2hmwK\j3= J38<(O SޘJ֪½B_BS(Jb37{Fۘ-yYmHEvv9Z-06ae'`Ŭ12U)AA30^t2/.ȤʤRyu4ud\ 8 =;OYēk* D\k@ WI/pMYCѤ4G8_pF?d[0v|#4YM1lR 3l7TXU 8ta ̟ 9)S/G_"bHmC¡;Gב]^o~&-~~7ic8,7CX}Mi~L:.H&ywAb'}\L'pxX)pRR1M喆B*2Gsu4HM1O\+X! TڹjCzfAQtF4Ml>S CYfqWu-*e gʧU{,N׍ͧw%Fиa1bG{o{M'3*1Xb]KI] kэ 8^5&)Kc O H1~"ec e/i)W([gQ 9uz,%f=4B #쯪&Юp Lt6mz9ڦ#}|)[)Mt śqp86&vǚ16 'FBQu2nMBˢ' \<*(Ӊy_R)F <$6,3%L:awA3SN)yc8F:;*9⡾ I%62jԳ2~ F~G>:70VF%Ab|wwqQt+YXohw . ~% n]HAkݖ|f#C}8ǷȤu8)e)vW]#o-H|d:O4$w-X ^2VGo_ghn8X̜&dAM9Y1 sSStH@55Lqu{hټm@~k0TB•↠ M,ݴ\yiֺiCZkK;9]Lb)TJxn$"T, ; Q#Iy_fط-ԌKYpA8{:%xڗK cBJ#Zqi<@k}_ ˕@)R_(h GQ_*ʱnS?tN19UނK-)KNwOhw?I;M@> dGdwg- Pj3=DSm*`Rz6$Q[RΔBgD0}ϜD΄Q9ł$- pkix~.BЉ{"U1j996mr w.mrRHR.}iN7!`O[pm-_M*4wԀHB^>ӽ%/hܦ9J4SK4Ҙx)!ꈊ>0 ejK .cjF7Svsfa/|3%VV+=aToMD-)@v\3/$4m'3$R7 "B{'p> Cn k@GRH⮷fg檍 6"Ud]q6bpx2 _i9՞c_.Ĵ 2<7{ô:/CZCTjTf qL vDM5{wrwtlk-u ..W\J`LІ Xl %1\=EL0F.PHЄ85uxk †;`+2̟L{}QOaʧPaFKүH 2zF8Z%dI "m#d]y}\^\6E x΢.B_88e ' z*gbyp7ٰ-c!~kIac/^VTkRjbYo0l[VȧBXSRޒ+q2TRHKp͡=u~"A(99]$vկ0>8cWe/jnRB!g/7Arf%0\ #iկ`+AUX}N4}'(uKm4 sp ZHȌGGEf6nRt)PƏL>|a&2տ&f?k5! ki1s ^j{(=d&dBɗAN~Sc}Te\*ۓmE&zTB pH>tZUfѧ3QTLqIy7H,g4NW_l)eWOʎ7gJ?(Z'YB$W ZW0s\4cRYB%48^ʅLz;iN6RmQ+b&aeTAD ltKvNǭ3a&Ny.bA&4pL\y̰}֫/G+[@SN2b(z╪nŋb:#e#WMf.9Rvm0ZKW~ nB 9Rf8̭}IBi:VjlqX0`P9׶FEwC'%h>̹czK:*д  +^xė)j)#xअq3#Y'C͛8tz!hX&E\袠 KN 6{7Mx+ =C҆~zrOCRbH$:vn0bJy0]Μ@m)J^y-`Yyc7W EFI=gSf[\w.^s1w\5]knC Q2%}[JXu`\;9ve-[Źp3O/X7QI}iaC5R -K>3:M\l'%YxV@Mhwt芿A(M1 pvA@,CV] & t- -eų*gQ[ zPG YZ4, 9Z;"mY]a0L>%Z&i<s*51"zmϖd*ЈKƊT%/L͚XC0J_Y=QS%7Z/x!GƚE&4ܮ²k>$ ѣ^@GRW\v:Gu^ z*fyX6*Yb*M-@8, (a@NgT-osK{,xE  <7YqZU&#Pw27z@;k eމp Z!݌:ϺwQ% ,Ӯ.wC iz\[S7 ]|Z^h6[hOM{:l30+ 9:㔐⛅WaH>AKMMC&*wtY?m3nEIē #4U..膮ナl8L?1n' iZTWrSr84VlK;o915rdg+I*e+4աZJ+B}z({\r:Cu: a֯Q`#Z~8KQ Tha6ŝ!w3\Ih_R`FUCn""$_)7büt2?/DӍٳZ ;?ؙ݉o*Zs'eҶ:Nm 8^ks/}g ہ5 ZJ. kTV%:Kߒ-+/ ޫOWev?ةmIL3^8 h}E%^%-D@@ i ozJ4(h{'eC9Ϫ!ÌIX\6iJ団:neɂsGL,G$ ǑR' ur@۬E2طwd4"Agr'9 ^خ#td 0ZuB|Ndp X$ox} \p) yzo}HQT=xƪR~&\ %9=zB׿~ .Rq9+\G:qZf Q`3eU/&C\|Ji)%l] h#Fk ȇ[-7_є= !UYd)nH/ 16gO rz(xl"{).].Y܁! 1Q}6[*yDњNSVU ́S99JEWinMK vf%dAJmT'df4k,BfzԙsG5piğP$8vr BbƭR exx Շ8 n;"P>kWi Liǔ5 ; Wb*Ta_xӿkRNW23t, +B+kG`%num[1.c_V`l)K$XkФ4о؆#*cYlr@;i b;5P6WV{/b$ =D1_8m1:Qj8 s2ˉ/[@U+dդ8ʗn,M3]$ ct\~^W (tOC(>m3>=pKi%+ iLB2՛_LТVpsE|4zw_.%e{ h)wj©)nȕa~3<# z{aH"#T[_(nwΊoE1 ˫?nf }-axFE293+Mps/Si(:t"nvꋃ,Af9nJ zŅfR0 j§s׫['3)v9cQ^]zP AMPNQtltgDt _dgnN-ds2ˣ27ۘpH&Ty2IY蔷j]vl6Dyj0tk}\4B?'bdB7y'W鱴F^ȍ@qn6]_5UZ/ͯʼnnMkΎ !BEM gZ/Nq-x$֮;2/Ҿٙ/g4&KbHk:tr;s~*)쪕RE~6X"Ō@)ho@3p8;"QWMs cU44yri W= &˼PqüĭDʒD'Yu:y|E;-^qz8sڄ}ɑ4omTH{6b1:trEndXJ OU<ĭ!{FEonݪleD= /r>l9F.2\VljhxKcvBxg:( ۛkzA5/)XDo3Fȿ 3͍uu{kqs̮qοCAFp(ojPXVez= S_'t€}~"j 9̻ lx/gM+kie F)5M^XW JW|mC1[+4btxcv/_Z"[ҳF!OC7:MN߼W. tx6&]#usM$55Yg%(grpd3Mߙ8nb;M'$ԧeZhERR*Ɗ˙14L/͛?)f}h~;QSqbb-BW*# bK%0(`б;|lnx!HP@ڟYğ0|D{ۉERaV=1\Y(@2Y“ǣ$ Nf_i ~mmȈU")VN 2Bn87C\bhI4x#1ƓR 3xĥt?S;m&%1[UtU۩nP*K{3J7An΂q2E |m uSǢk?z_B\5Z!lԨ깑{L]z:be\Ұow7w-Lbs6SӔf H Q8N_ o"_ K&!2S2b ^ <'ݸeɍln$mH@n}JApB (#CQI%!c8)cBL9~(`TO拆\%Lt;w=6,E hY{MU'}%D'jv;OYz)bɑʓcP8D9g=_dڔyYS؟ZJW}@=T'7H! c7EE>(Wi򛢨(͒'TT^vȐ pM*:*ik:iHDTIA>+Tk'5 ySdztM6(7 'ݍ](a gv'Eۣ̲0q- ޚ,7ϞZ 0pDH; snE99T2pB%XE C1JM&SQaQb\Œ$uE8yDl'6[Ab Th 1_E3#gO6۪Qg\BzzPJ|g%rU~,, ʜ[mw~B|ɼLdbf Ϭgϧo y 7ñ]ò^S48/4D|op| CUGcV"- -v͟ummLknG/[_P,.oL xc*[:1O'gHyHRk({NӣzM9W#zaS"8\| _ڙzyW3o͏&}E[J9 ¿6DZ-t9Q*u-PRBʌ-_׼FGnXTknQ5SXiن"~ѱsn>;-MX$ 3|xױ~Ҝ;Z6Q&K Ʊߍeg?ˈWM>gi: *G~;)-aPH8S/Ի cJONJ.e XqQ4b q4IeҼ;YSlcZs#oUȇdqZkp[&?(|^J wϭ1K#{qAN.3*SwDYl D! G$) wDz+G5KC6-} {z޲͡i~g@F7( 4\^K֫ *?#XyCI$pt|IYj]ṧToőB @w[k0M1?>RҭO\ߠ@IOmpE-?4Ѭ;kEmZ > `Ӛ #,$(ھXw?&)]H*ERKw%GazѦMPwޱKX`=6EdlNFcm/\0WnD~I(H0[s0}dABsKM爹CN)!zzS]$7# ڰ)(3|٦T3#w-q#b$l9W~ hb?ZHtMiYTҽ:6 pZf7WbS^: ;m׵5 '}Bw E 9)tiֽ0=Avl*Y+*30a|k`:q4S% O) *cۤ<ba1,T,Y\WM-ZN> UOIqՙa,y(t;abMلNsRvq< C <ۭo{owl\撟]S92ҹM  x8%:Ě-^ĺ0z?r8ЇX |JO=37`պf  ;ZIT~C)>2wגܽㆢwBيKJͳ"uaQ- @4=w 5~LUb~[^Zpf@1_Ͽ3؞P/ pIƶź).&EinQ5nZjLԐu 5;3lK4 X}`c/Ec.HbG 5hUV*a05PN-?rw` mEYk# ŽkG8W91e=b7GCdN}|u% * ,gZ;/hNj 9W{1h 5m#Em:uzܾ6Q<% -ّ)f@a)0WqZCY@nt~Χ|@Tk~ #={CŽ@0ISZбo'[!߸Jw{7uV0$YԤ %{1|VQi xaJ-RFoրet TfA%]kVs!$8Sv.j+KޫDxR&\*ݴsanWlk9/%m̑Yg$(---33U54!fg Er̸.+RvHfQH6r]PT.uzVI3Hv:nsr S;uF{Gl`N/h`9&^Ә ] 1݋j%~*Q݅1⧲/2pXEjZgX:]JO5yAƙ _gKJ5ObgVItw(Jh!oECXޚ ~sjL_S( +J(OԿH!KjJ8c[//1d nJg\1@y!V332r0xˊeCSw +042d% [~Rj;xQa?=|;k%5hJGCԽDA^T әxKYAO)/u`7~y^&Jz ~ot^/H4:X{Ȼ/3WwMLH{Ov$P:T|C]}kGÚ"R?s+ _$rkLgt* @)Gl 3Sq8U÷UWZ\B XJMlf$LX>Ȯ}sD4\J[Z3ɸ"I]T!%Һ/{JgIԻei/VB:ځlU{Ĺo nW͊4;. /|+OjAP{C)G8e"ZW1@XpB/7œCh7Oz'tw?*Hߕgֻ;:Mh7rXX61*Zq  ZX BF7`S 7zAK$3KIJIȨjJBl wYFr $v`:Kf 8i68JC~?[N[I7t̿ ޓ %e# 5B:PbHt􀇥 e33i *-]2@##8¿Jh׷*jF0' OǯovׯȄsfm.F4:P&ǘbE9)0M4m:9m<$y?f\SlXPqEOU0],ct⤚ mhB&N0gTy­䘺 }AqyOInuW@츭'^)T#Rf$!|Qfqg>{+m5Ɍuztᩡ 99FU4.wa,R_@73,QwZ)=hA+%hMYiV}Qr:iJd<GYjnE_I;>tPT7]\Y^\XoX,K׸eGe륩ѳlph;Qn GŬ!9I!cAYݍk 0 ڻu'{sjV7Gu $=7/swšv)to\jAɰleu„\NЕdA`A7$=$ ~X,+QC@6S=BPr6/)VnIqo/Vv8Mb+ppd./ rQ 3~P.ݳMFK&ռJ2sq).XF{Lpd)ä6"JScx{,%ȯRzL D+~Y`{ߙYlBF\O؏ Sۗ Ƹr' h_4#ғ-!-^*M=<%Yz6ODϒ i?15S律~g.Y/{T1n3d}GCw ݣS3׼KsM29땳g-"زQD|KN`8LhP.? 7|3_uX0`feqkSJ'W؄ʽn+9 1o߷(eN3 -G]uj*kf UŎ;1*GOfvϽ\9_ {(\S>fs=Jw0AcTPPL''#5Z?laS{oglMsbb[i3UwDIzT |A#qSnwJv'GSR]{=nhu *a^]u8 zd53WDN݃WVX Óo (YcgsZsȳwDx>=9*IU֥IH&SVL- 2uXR;fV5Sf=zaR2Eⶂz;L/v^BC#yj.md匵\~DqH6 WB=Rff0.0XP)zۡd57;pODxtY'>h[6hߧ/ v(ZlPJZWxyfh-/GFf~ 1w3>-BuG7Oh23'}`wH"? w} /g$V KfqEωS^g1;jڈDQ?Nz٭!{p ,i4l7k<^DDޅ3bUsoxĮDIlO* U<~KF8oI:=Tx'+r2Xż9447πqS3W+ 屁@T&A~Y$0xll86LKR&wBb3 㒏|$ >OK-Z̗Vxl0Sܥϼ;Q5YQtKI _􍥳i1]߉bXXArcTw RҮvt_ҐZ~p4-J$tUks܋(fn?]J_/6e_8|9RcRg2?MV靇A!bWbB ڧ4-x{d@dM7m75Hg>5m`Ȩ7{ŷXiY;Tnn/hbFOpfI70<ݶq!}ʽeMd&.*I1oڽR9gI+:(N9zΉ%=vx!MɎ^ӚᗶW'9u% 65dظM>1"譁(X7m_|hEXuoLb(1xч ` @DW-ceIwG<䡉Uj.1g NeV pzHgz6J\>wWv\CC9 J8Bl:1hVXF6$)ёJ?^_zƹWՈZnZ<J桪h4>.UQSd;>7 @ׅz ./ %-QRZAѤPM)8}r;R&'ΡI(Yk1 $~R [!3qW^[_h:7fC+R/_憔J}P)zp됛װ] t2I·1)XBTOX[#<)qHmsz ~T8Κ+=;-e0W D25LV2.m3] =3dέaE0lYq"ECvj %2 ,%z鐳h-zImrVH5(e2,f"bNµEׁU:uxۅp[z'D\ ^vFik\Bl\.n%3.̔uT!4*`Ω5;i6`N|Sh2Ov%ˍMh8=ݒx4q n _~& "(׾i<{@O80 X{qQ=sFb *1%0)lÇ\A /z-wRIch(*NH *];*jitG͙g;T4{Si2ʁoi^[r4ēV^?B6!{U{(2ؿK M&*)uOhudh2 e!/CS#2צQ=}W|8`5 9dKZ& %FjLݼ(gFD-2<^ɜ¦uV>񙠛jbusi%qX:DԓBpvB_[vJM|[R#3qbIZͨ 7ꈕ8ا6 % ,_XI[3{Љ)%>X= Ѱb ՠ3J}>zxs ul2L(mǿh{>|8k/vʬ K'F~B,ߤe芋e;kҜ\2l}[g#a&$~ ,0;=({.a1~ah٣Ԣ\rzrn8ƀt@+vgr%rj|g|%8!b̻Bc.G'=! ,{,A`e,($v= nQ^MqGL #b0FdT{g8BնlAE-W[LT`7J"83p5&3Pߊ 9Gy.h67S="B́8>q0(96V1~ǿǜg!+qNm!;#d4M pzpOxrUW 3{/s!Fob;x'"v&p%H[@N}ecAM‰KAE|p.8?+% ,Gܪ1v P>X%9n#?*t {b3mwdrVɛ;?IL{!"ƒewH~GEBF{Ve 爰~{!^Su+ҿ)'9f: Τ:޹ Z}a1xWR9{l^))T=b%z{-B,o۸WBN=hBk>󳮖lAoR uZ+sb5ro*J Ҧ5ǕǩehbCdU2/lV&XM<7aM/P9AUQZN,.='( 4-_0lwrkkt6"Pg (W~$cb%}(/uYeUQ0PW uxx[mxa nҿԢ؋j;3msU1LY|2+aCv ў^ +iK-IbR[x(Uj-tqqũSP'q{Y݃I*IZ{DW|dO#MKXqN9 pvN*Rx@ȁj_@|hƵ k}y*cO> ylӊu Ma,t9PgN~6V];Cd"gK0AzAV=r+E1GB4KWWޚ[ؕ%V ˣd.Σj活k퓇'`ٙ-l>g\Nj'S5~?Vqx3ps/V.ő#z`,A#kc|ήLVX9Νse>?|΄=7Ig K\=`Bͣ} CL4vdl[p D/Ir(s 7m9 Ƃ͵ͫ:IZd.NάԨ! kD]H]1YX?C0 J+)VyX$`90a1/~  bv$E_Db,ZqPO !!Sf(T%1GcEm& gκ:x,٨AÒ[F6*%Uwgw vf.+/?_L|J? d!Sӝԇ nkt)WVnĔNyS ;,ztE)ޕM/woI  -̙|tmg )af*s\ŠE #ǕYG =o~@iȖAcEBQr<[p~[Q"36 ^0g6{ Lr77p1BҮ0)1sxO"FRDJUÆ2β;S\zPY@^}*]GrbZD맠OgB%b|9*9P-R]bPS_aV6QwwP,un3S5}1V[-eWR%VND|P&u=#mpVxOIFZZRjy¿.j!S]k-ky jlԌ\= ^A59&7UhG%pCuW X gSPdM>Ҽ)H^cG*"Nx4yi}0wϐop_pT [(I4SjlsR~Rv.\~ >FiƆcOoFiÙ[a[6IGcG$qtEYOP5OEq"u$# ٲuC~8i|aIsG,PJ'|?ttu0F"*eL1Cj3Sst E(0'"S1' ,$(%̺kl!zoJHyy_YSI%d< G ak)in$j'؞aeW4Z;7κcdX }K Q74*8ѨX|-;r?9ꌂbw aԅD@/5:w/! YtuH,E"+bFK-rc$7 85%4iOX_ms? ,+OI#>4-ClAۈ!*s P/UnkK9zEBA0]t\6m\8e93%,UcLy\1#n~b_*%I5`GKJ-@maSv0+͒v1ĊL>.%s0*i:X6R'L~dP67{5nC8y #h˩u&2:IukXJ,yBBi%(8Gkr6[ÉzM|YUtdW!NϱXM Tߴv =3p6\!Lq&uT+r`@&L) Zt_eCiG礢d3۫OhYxOl@3T],#sy>H(b%BVBK*TUoy{WPX,6qfiLR tD髠>7Ҥ-OfU$@wTqVPsI-SH==9?9Gqk?s32ܺIkPiK >.5ʩKrj˧*284Yvzv)OAKn^4HMN_6&v+]vbb1 [9Z=W^R#.&[ߨVf&eXwdYȦO* @tV%B:OQN?kv_I -ӽzJqʦp4!IݏiQZ|p*o|? s|ͪ:D`" bHza12Au;qĪf@&q˜lm5VNR?8"(󛃰xRxUݥo-tB2 ;Hn&Ew;*ڍlwBQ{Rb[5Θr.s kd2 c3#?MD-͋O]µ2PF6_tհk3]AUA0޷^u=)W\' i^_B'rigqY%[} stfx4 )T=`ʌS= !|=mE3ʥsYej{Av/+·-bA|RU5I FaG ]pd d;ԎH*73EVn ys->7 v.v MCS\ ߫E3Ώp;=: i H _Ӓ9E@=Uy 3c {jNqNnsOSXJ9ۯkǕPGL4=":hKrj / h)52$5Ar.)$y$7մ*h5]AYF=Yq 9 f/8x,[r1{x<ZB@H2#^~##C?e[{zVbg g5 eoPj pDzjά7 &&>@3``s郉 }<< cΒ!C)>lsX~E#ҮQmgn(O-+hCGEj)Vd\$~= ~Dn@,beW;Jnö)m\$;Aw0`  jVn-3$NLu5L7#p^,d3+Թ]r|bCO⥬њf;VSvI9=m =Gˏ Wy4S(~}3ش]h&2phP*%]33 +BM0skj6X̰8gZ\j[Y൒⣈"#t‰O<'B.aG&UeY zO +2+;Ko$jNjILIٶ{av&oͺ'^w`. oinݺf&,?}mڰ*a]>Z\?p"X?cG) .A"G^gddզoPdxp \n!LuK#vqC+t;WFRO{SɅOML?kq>=UyS5>ܴ;Vey $C ;PR+y8ܐ`-}ʸl&4Pj <0PNղ@ĝ~xȥt_3a w |-c| `!ޓ1[Yr>o 30ʪWydn}C35+)^aPp#kTY_+?nzHL+O>;7+NZnAL2z 3$|0C(6TkU]<GR-!2d=#? @(eV'!҄Pv eKuI @LJJM]_7:7FuY-hG͗HK8Gyz˓$wX{N7>U>\bB楏::-PB8CMhwUk5á_>cƺ|Hz"`j'[jrh̊PoqJ }d~D~_݇VIi&?Nj#SkD}Q潷6;}ߥ|Gl|5bBq̬sHj{nx(jZ%A]^Mѹ ~ ;)?z/X"[,hayDDɩ 9q8m6OĜ)-:MqS xXj‘43m hYuKQj0d4@>IA^,- j{!lPN7PW#%eUJ;jXٺRh()eb=BH;69]r2 \b{_.6xoNp{YGmJt?](`Yz Nd œ qiHm!m-=C_<ȱJ8~wdM q:ΆM콲򩚐1Np5=(hNjj:+A)BХ6^d_`y)lYxAMtb^$}#[d,qm}r.IJ o4HO$2!00=GG Oړ~A{eQ8UN3ƀX/mHLTjk X|7 %Ч|ϙrs+(q>f{Ņs%=ݦԫmXsN5}9̱N׶û/[nV)9R.@6Oe6^;(sLQfi'A(Fy*X*@%,fJ!)Q iyYGqm<+^Vd^~v:Ł9u |l2nOWuvveD.N&6F7B8Fqcd~U^ICi_*rQyW恎r鄭l1|TzC~Y_]P A^iMqs#,ƿ˝?bemX, W:$GҶZP0TC䭋I%_ujNIlͻO7rXw3Z1TS{|#7>+k h*?W MsCNYhn$ݕ&{"OـHcWisH),gk_LdM6) ZVRI1Ldmj}bqA +[;]fUT4E8MKpgR:-?H'/}>HaԮ23hIhW3 0JQt#Htա@nھV~$TvP åkiſ.xRUARQU(_QyƕJFTGSU⑂챛s46 ],ӆ xez`DRt<9>3Jqz$n+N-nX W1sCDŽu)Wwڟ){ϼJ:Q3B,g7,7XGMČ!OtJmӷhg|,1ZX>|WH٭HH߅4vt Ƅޘ6VyY5¦n;DBɑ:y8a@jT۝sʠ~QO[}:Nez9{GZ`+(o-8#A. {806o+A!ITXUBء5 xߤ⭝{٦-{3R) zkoi(ǑNJ&!."4DxifzW ܛh lkƨy l 6+ef*E^2%<8fSFa[G}Nq40c=Wt`Ϗ߾Tܛa nC(Nx3MY;~iSЧ42@Xb dAˀfX|S.tzF.=-_tJb]4+ɑ&ܓDGvU7Omҵ=!r)؁ŽwA5̟utM-*eW9ռ`4*L '!*?2шXM$S ZN`@[ВVE݅Dd46- 6h l`R|*njL: D׶hϧkHT92δz~Ϭ]5Z);4K]"iF!JG~-gSú.kԢ1bM@|ךsJeJM㮖i0׳` h+Y#+%'EJ  z/Q sV Ɨ VKd6 `SlA;zSi]s(\0#@J$W@.[Yl_t ʜc+uorD,౴_pmI k-ˁܢst/]`ZaEƘ=mcx*G㨹8>_"Ҁe'`;e0v2DZu[>jrjSB& L]q|Z =C'TdS?x?1)Ϩ8b(^qIP wDt4@3`2|ҲOU+iSyQx+@"X6l~KOZÎt{GOdXoi#3 qc(Ouuڣ:;[ɬ %üSh:(bfe%gʴ yos^#V:$ \J27[2@&XP688uJ$f0\r ) 3lV8`ޫ<,m/o,65aVHs,K!_kAQM78;u41V'A^=-%o%èHQL^coqC%`Nɠb!ټ|vfg^눼^RH B>M#wK =7%6+U uDZ*:$w\ j8,AC?h_zǁ;ؑh SrbMM~ja7צ?MTg#KtbI= ۦᛕ~fSMgqgߔbڷb+/?]EMÌP4—D"Lڰ<{Qt0 ;^N]?ErIOi d*Puhru!%˪r D7ݮaiAIcp "*!gv9&³b?I Y6&<>70T]g2{y]gN#sް׍_y"t/׻qV~- e5EF.me2ᖣyjBL2ᰐX҃m_>Q8-$Iهmg\l)CqxRĹyՕeev vjǷJu{|а 9׶2Ɉtoڙp:$aV 1XEHWǜ_W򃜣}] (hו7BSlԻ [je]iin|-9U-^;;,u ΊwbeTeAPݼD]gj#ލ ݁${37wy#HduHBVi v6י|'(7~#3H9(si[5׼̺,`Y /Jbr7-5}U?WNscl](t&9é/̍6` z{`[z䎄^4zh``rw1cCS~*v-D'gk˂q6wzYV'@<]oz11)wٓ8YZ%mJ:OMD$S?v r'&-8ԩyYoBznw9Wp&!k7s*) |Je6Խg 'p]*pȼY7 v#)-=KHdqV4mCr؛G fַanq@NPGtO7ZX*:e,iK|ބϛ4~@pikxTAY&薚- ]`}˳vO͟jmZ__lN~Ɯ5WyIq$}Tn~zgZ򔼗v'TZ1xz'|8}b(*ጾ]vo$P #*R>0G[bq{^ U7eO#N ~@Ocx 7R}0�E؋Wj?$Mb2qr A#hI|ne:hJAg k({TbAzfp-߼5\_c4]SƲSmV;%eJz=/>"7gDY ~ʗ a<=8%h J:z!csZ4 ~ d_~ KQ[0;(EcƄc<ҥp?aHGfCH ȫ$,3% *gy14"ePď7C9ȟ¼N0~ewwz(+}ZFiΒ?R-Vy  RIg(dǎQg $p9E:W7zHxq:8tJ,V>h7mHr*5[Q)Qu+b}OrQjƒٚ[ǖR4o v$ʓ~ڔ3U1դ|+TڴH_qxE}oZԭLC`\3lW`Ilxny̸T??+.H}}p|:OQ#^r^ x&?ΛGҫ7"8.ۙZIjAͷϳNݚ^:gY62T3c`V$pBfS;14J*EP/}2чR:٪[rzh1jyvB1Y3>|Դ iibRAψ$k;aR!YrZܲ^/% c,*rG`o3Opcxn7MF;2qFⰃYB;"w*t#g7Lōy/s6 ɩ7+M|[]آsQoj6>+[ GUMS*'_ l(P,xͥpq\mI~|+K?1e6V~zL*F%jyxZ?23//lr[ԗv"aX7tkqbGP>'A,j^߃0qU)QC9t;C~nXد@L𲊔 \8NיП$&lnQUAJءgn e_pNY]4i1pRvǘCdor-S"7J Lb.`WphE]<΁WZ6A6gjv:R \I5ei;wЌ~DŽBh}\zs~T3Jcִ֔Hy{Ƹ S6D!%h//kܕ_ͥץ3bVubPoG * R)Zyab`=REkH֪?lX&&{D#xBzrax'a\ ֲ!$/Cs;1/њ.;EW2KիcD bо KJy1>!JŴL>thqĭ$akK [mA¬Vi!8^I<FC6үMaoL.Oݦ0MQk^-qc8ɴh/("̰mO+S$J&RoCn#Q낾|H E}ʢw0q[+a]/V5pWZC|QD_1Fi[QZw$˧+8*pYfsmbsMQX7RXӁ?/S љGnR9ٸs%DyR Hjx8xMNM7pz讄)FK<W Kf}KdQ{IP6،ӻFiQ!^)=*E̋i7e   Ioo `eXjxNQUэkuiI#*ohyJ% _i WPK\ې.Q=eR[^YmP҈~fx]؂\,ɫgmp(_Ҕ/O+"g8*̏ҴOǝL~V|΢Q w'2E!^k^CvO '|ݵV{Jᅮ| R׭Os\[o׺?`rB SsKXᇸQ>`' kKM^'~&4 Rs-@gj\wu3yȌz-%׶xs[R Ftl {u@ XAݒV顰zDI{&{M#n:0U|ynxb1& _Ɉ&Hƻv % 9hKڲjJy }gfZ{%zŹS MNoO`w@Q$/^UTLJ ^vp)TYO4ō+鯞`"3cS%- BY[dSd̪uܼtWbyP%z/jriXy# >]PH%>x2J,7wG<^]MYUPvoA]*MmW€Toli߁$}K1i)[%'beQN'o@|M`^! /n1GJ:e3C,b0>w1]T] b+ֺЌ}ϕ| G![K$SJEObw.䞙fCz.Kh W+>npV`/8؁(SQTL=ijPucokU _0@VB QϾV'Y@1$Y`FiI\#|@ֶ7e̱06:s%22;}2VPՄ]ؼF^ȆďH$ԖkUN( E뽪PvSUV2N+4ƍ$NCOG8%Bxl'LOĻK}OD |$uDz<%+HkL ?A%6 hσޣv8NtJNJ;SՄ5KD. n$$RnjKiZR)˷ 랸NYt#^)6i1n^-SJ#Ȥ4΢$7y%_fP( '|u ut֣#k/qhnvk_)XSVtu}GWƴo5aAQsuj -8x}v~dH7somK#X9HADaעS09eF]G]8vfQf 4;fgNWU4P:+O9PJ}iΪ38|[A=qD*j@@IM&g,B?ꙋ$gX()hjz=%I- 낣#4yCԳH`bR% \F0gCJ]iϱ3+<2EsIxqLq]6;O`SU׌b!|W@(CSߔmk7XkMdKA,F0DpZAAG ~E'O\UDقǎݪ4Z9Adg1FS̳/MQBb [*(8<,6?(Jj@?r ?Y%af\]jpbabf;!|l43u5B%GUt.C+}Zd}wLehgxqS@@@5ɧzx B[`J\C>P n٢C)8GKu_8˔2 d 䳃EQ?jK"/gXq)_Fo5Lqw){ԣZF}q`̍BٗMP{R9eX:ŎaM=;̫ki^r}.+,c0- $"T ec!2 " s@ p`WU5|ю4FO L+zI`Y2Py\13V=ȱSBzM([8+mY>dAVl1yvm|[ŊoieÍTg]BTCHS!!a_FOQwGղa8Ubx/ $πH`4:5 eL)MV*l<2֏(Å@8C1S  VlߊhNVAV(U=ܴ:XloUvv1I*|HdjE咽@j &24tO?n{zm_lECE;e%OuyDjġI[U`ʡ½mx*ɘMzzYjE:}U9K$kvi-Y0eUhBr9u_l)J; XoƞeJrC wg{kcxMvp)\j_5$N`\PV)G#/&~!& µ0\Ɓ83FGv䙰ɰ8OqNB'$ WIu;I[r7E6I(Ot+ϿdEޣa=5̌'l;n^4cHy@v;&OEu=v%@CbD`Su K mZ7W}j{*gFY.W2= ʠ`<.2@.+V(5[I1AM ܒ*+V#xWD7hV b GgAZ$5! m>8$"o[>+:ۯvqAp^.<=e84JWm|C-1, 2$bE"̭8z]!2AǻbۛVuKZbYL;n+`bq^My:0E/Gc6ýD Nihm _O#BɎz '®z}8c~?|^uDu}tl{*܍ӽ R2t*]%v)g6 rL |i#f0&Wf&D"r+#,% ]0 =w!(\e}@%E&$Mb%-BI0dR,PѬhCmx/>Q#MΦ S뭸*}Q3-nj3&N/Z'אַ{4ǁ|Ҭ[s`8sư@v[gNB oAsr3SD%d+%ǃQ[,NFk=/:({:'#^܀Fq] 9ОRV:b,dnVTT(!~Z4nW("dC2^Y۱xޜNS^O=o; @K-6/*gӅY%z@1l;JqšSšf~21;kRK04piֱv.L '(jS@2-'5iZiǝF& =[[) o"(R]ͼ!.Ҫfܲ{z9z8ėˆgLH[$;*dtjݧ8- M!l6mʮ x4R~6T>V ,Osgp3L}Ҵ"nsa5 1ٓ]Ua =⇖K۬1ƾޗL~I Qף+_V1ћpupƁo{#t{n\.#2 !}”!$]cG&tگ*'x p@R;̗GyvҾ}P|d{N¡[@"A2= glp.f *K,^,K.I}O3d} gglfm~y6.Ɩ7s@\>-qS"=vN0sUּ݁bTPXNijif3' 0@JёUJ+@\Pޥgl~8Ms+(j:܊sPe6ɇCd֜L*®"D.] y~Cc P\zzBI)4n /{y5uتXGs\]s˿dEI>%>iwΪky* C0S"97RWꑂZLsN=OV>>' biE;8@vLˑ.!0jALc!-[ϗzUux4*&ᦩ˯M c | ޠAn5'g~K)Ԕ_A>ύiԶ?(w.l9׈3ۅ˭~>5 u-goũ;\9:Q+r!@ CELcڿiO A$] $tvpsH'-m:ډ{8aR&P7ZȰy\ +3(1DmC*Tm"C\^O+a11B5eGfP>6P W',,(jeT aA2_HMt*C|Af~SN;B^  z1!*MQUݗc]Ƒ#sރЀw9Cx6E z+1EZ f^)V& 9 N=F3 ?0o,ܭ<|]rLGU8%ٝr\UC n] M(3ʻwz-=o1E5"]L#CWB\X9ͧN6z bK^ m=1}CWChN#N΋Ga_cxM&Ebk&g*9'S '[,}U=)D99,MҠ^ tqZ#Y^ 댄$8rW)\C@hEpɴ GĖHK5OZD|p쪑3&8Av 2ʎ\ÿ?q+;$?Ng%KYMCr2opnHj:dh( dg^#h@vI*p[0[ϣi죯66.Ur du;Wέ9mܱ|6j~3=AZÚ=3#rgY芺q0$h`ׄ.9K0 pҩs.0zyW4HQOcex X>:n@V(qwDҝYt&`ԫ@22Q0HZO-!-uGݼ+[3RJ )eaKfj3Ja0{'bE!ʹoG.Q 0n* -x=FUS7 ]Qre!6?fzcE؞d1A'b|wɢCCp=P]FCD[;JhoOq*` Uaf+E3&IcE:Pmg~טݟ=ZzŚ!KZݔu] #n:y g22q:¨@%#ZK&<-(k(S0kA=‹@ 3AQẓ8hYvSgue@[M i@P$n񈹔UDsR~zOJ.4GwnefcFmhiňDPO igf]!?Q0W8Y=wCnK$U K<"T` ɡf6mdKbBS ՖF=nΙ8mto_5d֕g ևA@3F4[ iېw< dbi/. }" ֊ !{S-{ h1-ӿwu7xXM^ùNJF+o!j#dR8R"M}'19!^3yq%*RucߩG!iGr*IH[g9z)"ZYSbQPBNk[M*x}K5ANL'-UPnq} ,v~ UI˵+A#+aFVJҾ%5\ߨ:wl}>O\R䈿\C 09J]Hecen=cgR42INxWhy>΁/[~۲^Y/(E6+iz>c1i&RsUv0d8cNLXCqkh<w)?j(Ҳ_Zeh:7bfR;0"bjҁ?ԇ*w Z훝;nrP&ARjd,3^*޳*od T~Eu4h @bya!~E xFyY;+"\ o bbuûqV]|ˎkEQc|nRyg'4{ wLcb]O`IJa{Xn򑜸O|1j+n$S6+ح):V27A |jF#"P^֣\$#<q>FA MADA\p*)o2֕3Z2)l΀4_qabG,X ?檨g#V-)2i|x\'F`xsɗ>s^`NQ5&˔yRIHr_In ⶬS?dplz\7劽Q@5U1rR5*\~( %:`j \˶v<^ܜPU:A{lp9rJv2.]\d9U?#T!ZaCx/BQQ*۪h=z~ΘfZXӰ~)Č~%WW ` 8=nͱ11g~O9Mߛ9=urkEd`e#iQj .ˣQRC\S<="eloEyj2X 38?[ /z{'H⧹er9DNt B h䷨[n.m,y)df2$]~ _c0-2 МRSs,^%tөVPun k*mqF%_;Zkb/??R'%ԅS$᜺^[%l1%mVFZblfp %x*Dܬu^ff$ODBM ldMB