libvirt-daemon-driver-nwfilter-7.1.0-6.5.1 >
A a
p9|P(݊HYۼ0<~Ep<@,(dMK_ Æ~>;d91j\0{RO@L63JP& fqW牲Sn_Śaeb$5VLAO12r: kreUkz-?KMb IYm鎬$!@B4NI|>C@#NofN"坷 |6x61KZ4#98K2XO}p# @1cfbb14b81c6ad6e4e2f952bb355f517cf6ee8d0 bcbf844a83e8424aa6e87012cd74c92179bac7f635ff05042de8e574ff87fddb i` a
p9| Ix60ۂݚ-3HoWzED0s)rίC[vS ꃣԀHu"^V.* |`4KT.*
/Q%t}ojBCu]Ꞹ
w D%kX @:<]Ȅ.ޣmUĀ}C}ׯ#vm䧩-u`@ "*PI 0>9q PkC=~ӊ_ݨCfy8,
:nNyClZE}SH0
ר > p F P ? P d ! ' - ^ ) J \ r
(
D $ z z )- z ( ) 8 ) - 9 . - : B - = G > G ? G @ G F G G G H H I H8 X HH Y HX \ H ] H ^ I b J c KR d K e K f K l K u K v L, w N x N8 y Np { z P\ Pl Pp Pv P C libvirt-daemon-driver-nwfilter 7.1.0 6.5.1 A nwfilter driver plugin for the libvirtd daemon The nwfilter driver plugin for the libvirtd daemon, providing
an implementation of the firewall APIs using the ebtables,
iptables and ip6tables capabilities a
ibs-arm-6
ΫSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Management http://libvirt.org/ linux aarch64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
PNAME=virtnwfilterd
SUBPNAME=
SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME
# If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR
if [ ! -f $SYSC_TEMPLATE ] ; then
TEMPLATE_DIR=/var/adm/fillup-templates
SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME
fi
SD_NAME=""
if [ -x /bin/fillup ] ; then
if [ -f $SYSC_TEMPLATE ] ; then
echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..."
mkdir -p /etc/sysconfig/$SD_NAME
touch /etc/sysconfig/$SD_NAME$PNAME
/bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE
fi
else
echo "ERROR: fillup not found. This should not happen. Please compare"
echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and"
echo "update by hand."
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket ; do
sysv_service="${service%.*}"
rm "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart virtnwfilterd.service virtnwfilterd.socket virtnwfilterd-ro.socket virtnwfilterd-admin.socket
) || :
fi
fi 0f s O ( cH
L ` AA큤 a
a
a
a
a
a
a
a
a
a
a
Ea
`@[<[0@[{@[{@[)[@Z?Z@ZZZI@ZZ`@ZZZ@Z@Z1@Z@Z_@Z}@Zk@ZiZaZWQZLZ:PZ7Z2gZ%8Z!D@Z Z Z@ZfZfZ@Z@ZZYY@YY@Yܶ@YdYp@Y Y@Y{YA@YX@YYYKY@YW@Y@Yx@Yx@YqY\YTY7Y6@Y1S@Y"Y@Y]Y.XX9@XӸXg@X~@XXZX @X7@X@X@X@X@XYX @X6@X6@X6@XXXc@XEVX,J@X!@X@W@WiWF@W@WWWW@WW@W~WWv[@WgWbWaC@WYZ@WUeWH6WEWEW= 15 SP3
jsc#SLE-17336 - Update to libvirt 7.0.0
- jsc#SLE-15860
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html
- Dropped patches:
0d05d51b-apparmor-lxc-fix.patch,
cf4e7e62-lxc-def-secmodel.patch,
0ddebdb4-qemu-snapshot-deletion.patch - Update libxl-set-migration-constraints.patch
Remove code which handled --max_factor. The total amount of
transferred data is no indicator to trigger the final stop+copy.
This should have been removed during upgrade to Xen 4.7.
Reduce default value of --max_iters from 5 to 2.
The workload within domU will continue to produce dirty pages.
It is unreasonable to expect any slowdown during migration.
Now there is one initial copy of all memory, one instead of four
iteration for dirty memory, and a final copy iteration prior move. - qemu: Fix logic bug in inactive snapshot deletion
0ddebdb4-qemu-snapshot-deletion.patch
boo#1180049 - spec: Enable mdevctl support in the nodedev driver for SLE15 SP3
jsc#SLE-15861, bsc#1179770 - apparmor: Allow lxc processes to receive signals from libvirt
lxc: Set default security model in XML parser config
0d05d51b-apparmor-lxc-fix.patch, cf4e7e62-lxc-def-secmodel.patch
bsc#1179735 - Update to libvirt 6.10.0
- jsc#SLE-13688
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html
- Dropped patches:
f035f53b-virt-guest-shutdown.patch - spec: Remove creation of libvirt group and add Requires to the
libvirt group created with GID 108 by the system-group-libvirt
package.
jsc#SLE-11629 - spec: Add 'Requires: bash-completion' to the
libvirt-bash-completion subpackage
bsc#1178498 - Add libvirtd dependency to virt-guest-shutdown.target
f035f53b-virt-guest-shutdown.patch
boo#1175914, bsc#1177902 - Replace '%service_del_postun -n' with '%service_del_postun_without_restart'
'-n' is deprecated and will be removed in the future. - Update to libvirt 6.9.0
- jsc#SLE-13688, jsc#SLE-16754
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html - bsc#1177950 - adjust help for --max_iters, default is 5
libxl-set-migration-constraints.patch - Drop use of $DISABLE_RESTART_ON_UPDATE in %postrans
Testing "$DISABLE_RESTART_ON_UPDATE != yes" had no effect since its
value is supposed to be read from /etc/sysconfig/services. - Fix 'make check' with all downstream patches applied. Some
patches touch config files and needed the corresponding augeaus
test files updated.
Updated patches:
suse-libvirtd-disable-tls.patch,
suse-qemu-conf.patch,
suse-ovmf-paths.patch,
suse-libxl-disable-autoballoon.patch
boo#1175574 - Update to libvirt 6.8.0
- jsc#SLE-12684, jsc#SLE-15861
- bsc#1174955 (CVE-2020-15708)
- bsc#1177155 (CVE-2020-25637)
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html
- Dropped patches:
2ad009ea-qemu-check-modules-dir.patch,
8abd1ffe-qemu-tolerate-non-existent-files.patch,
4a72b76b-qemu-namespace-memleak-fix.patch - spec: Increase test timeout to account for slower test execution
on some architectures - qemu: Tolerate non-existing files such as /dev/kvm when
populating domain private namespace
8abd1ffe-qemu-tolerate-non-existent-files.patch,
4a72b76b-qemu-namespace-memleak-fix.patch
boo#1176380 - spec: Enable the same hypervisor drivers for openSUSE and SLE
jsc#SLE-11772
- spec: Enable the same storage drivers for openSUSE and SLE
jsc#SLE-11877 - qemu: Reprobe capabilities if the qemu modules directory changes
2ad009ea-qemu-check-modules-dir.patch
boo#1175320 - Update to libvirt 6.7.0
- jsc#SLE-14253, jsc#SLE-15159
- CVE-2020-14339
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html
- Dropped patches:
2edd63a0-fix-virFileSetCOW-logic.patch,
82bb167f-dont-cache-devmapper-major.patch,
feb8564a-handle-no-devmapper.patch,
53d9af1e-ignore-devmapper-open-errors.patch,
support-managed-pci-xen-driver.patch,
disable-multipath-pr-tests.patch - Update to libvirt 6.6.0
- jsc#SLE-14253
- CVE-2020-14339
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html
- Added patches:
2edd63a0-fix-virFileSetCOW-logic.patch,
82bb167f-dont-cache-devmapper-major.patch,
feb8564a-handle-no-devmapper.patch,
53d9af1e-ignore-devmapper-open-errors.patch
Dropped patches:
6c1dddaf-libxl-shutdown-inhibit.patch,
849052ec-libxl-support-credit2.patch,
72ed254b-drop-exec-perms-bashcompletion.patch,
e092daac-prohib-parallel-tunneled-mig.patch,
ae9e6c2a-qemu-allow-cond-format-probe.patch,
a30078cb-qemu-create-mp-target.patch,
aeb909bf-qemu-multipath-fix.patch,
8e669b38-conf-add-event-channels.patch,
a93f55c5-libxl-add-event-channels.patch,
967f4eeb-xenconfig-event-channels.patch,
4cc90c2e-CVE-2020-10701.patch,
93b15ba0-qemu-fix-hang-in-p2p-xbzrle-compression-parallel-mig.patch,
b7d6648d-conf-add-e820-host.patch,
5749395b-libxl-e820-host.patch,
f3ef7daf-xenconfig-e820-host.patch,
34077c1b-tests-check-e820-host.patch,
fadbaa23-conf-add-passthrough.patch,
9529e007-libxl-passthrough.patch,
9cb8bc6f-xenconfig-refactor-features.patch,
b523e225-xenconfig-passthrough.patch,
bed32525-tests-check-passthrough.patch,
9bf9e0ae-CVE-2020-12430.patch,
ec07aad8-libxl-normalize-mac-addr.patch,
22494556-CVE-2020-14339.patch,
c5fffb95-kernel-cmdline-parser.patch,
b611b620-check-s390-secure-guest.patch,
657365e7-check-amd-secure-guest.patch,
0254ceab-s390-host-validate-check.patch,
4b561d49-amd-host-validate-check.patch,
2c3ffa37-update-amd-doc.patch,
f0d0cd61-update-s390-doc.patch,
8cb9d249-autoptr-file-callback.patch,
a551dd5f-intro-virHostCPUGetSignature.patch,
44f826e4-virHostCPUGetSignature-x86.patch,
2a68ceaa-virHostCPUGetSignature-ppc64.patch,
d3d87e0c-virHostCPUGetSignature-s390.patch,
004804a7-qemu-invalidate-caps.patch
- qemu: Avoid stale capabilities cache host CPU or kernel command
line changes
bsc#1173157
- virdevmapper: Handle kernel without device-mapper support
82bb167f-dont-cache-devmapper-major.patch,
feb8564a-handle-no-devmapper.patch,
53d9af1e-ignore-devmapper-open-errors.patch
boo#1175465
- util: Fix logic in virFileSetCOW
2edd63a0-fix-virFileSetCOW-logic.patch
boo#1175463 - CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use
ioctl's to obtain the dependency tree of disks and drop use of
libdevmapper.
22494556-CVE-2020-14339.patch
bsc#1161883, bsc#1174458 - libxl: Normalize MAC address in device conf on netdev hotplug
ec07aad8-libxl-normalize-mac-addr.patch
bsc#1172052 - qemu: Fix memory leak in qemuDomainGetStatsIOThread
CVE-2020-12430
9bf9e0ae-CVE-2020-12430.patch
bsc#1170765 - libxl: Add support for 'passthrough' and 'e820_host' settings
b7d6648d-conf-add-e820-host.patch,
5749395b-libxl-e820-host.patch,
f3ef7daf-xenconfig-e820-host.patch,
34077c1b-tests-check-e820-host.patch,
fadbaa23-conf-add-passthrough.patch,
9529e007-libxl-passthrough.patch,
9cb8bc6f-xenconfig-refactor-features.patch,
b523e225-xenconfig-passthrough.patch,
bed32525-tests-check-passthrough.patch
bsc#1167217 - qemu: fix hang in p2p + xbzrle compression + parallel migration
93b15ba0-qemu-fix-hang-in-p2p-xbzrle-compression-parallel-mig.patch
bsc#1161159 - api: Disallow virDomainAgentSetResponseTimeout on read-only
connections. CVE-2020-10701
4cc90c2e-CVE-2020-10701.patch
bsc#1168680 - libxl: Add support for max event channels with maxEventChannel
attribute on the xenbus controller
8e669b38-conf-add-event-channels.patch,
a93f55c5-libxl-add-event-channels.patch,
967f4eeb-xenconfig-event-channels.patch
bsc#1168767 - libxl: Bump minimum supported Xen version to 4.9, allowing use
of newer libxl APIs for retrieving memory statistics
suse-bump-xen-version.patch
bsc#1157490, bsc#1167007 - qemu: Create multipath targets for PRs
a30078cb-qemu-create-mp-target.patch,
aeb909bf-qemu-multipath-fix.patch
bsc#1161883 - qemu: Allow format probing under special circumstances
ae9e6c2a-qemu-allow-cond-format-probe.patch
bsc#1165588 - xen: Fix the list of supported ovmf firmwares
suse-xen-ovmf-loaders.patch
bsc#1159793 - lib: Prohibit parallel connections with tunneled migration
e092daac-prohib-parallel-tunneled-mig.patch
jsc#SLE-6998 - BuildRequire pkgconfig((lib)?udev) instead of (lib)?udev: allow
OBS to shortcut through -mini flavors. - spec: Fix several rpmlint warnings
72ed254b-drop-exec-perms-bashcompletion.patch - xen: Support setting credit2 scheduler parameters
849052ec-libxl-support-credit2.patch
bsc#1162160 - xen: Inhibit libvirtd shutdown when domains are running
6c1dddaf-libxl-shutdown-inhibit.patch
bsc#1157100 - Update to libvirt 6.0.0
- jsc#SLE-6997, jsc#SLE-6998
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html
- Dropped patches:
0a65cba4-news-fix.patch 07aaced4-Add-TAA-No.patch,
f411b7ef6-Add-TSX-CTRL.patch, 50d7465f-qemu-firmware1.patch,
57f9067c-qemu-firmware2.patch, 7c5264d2-qemu-firmware3.patch,
8e1804f9-qemu-firmware4.patch, 8fcee478-qemu-firmware5.patch - qemu: Fix firmware auto detection
50d7465f-qemu-firmware1.patch, 57f9067c-qemu-firmware2.patch,
7c5264d2-qemu-firmware3.patch, 8e1804f9-qemu-firmware4.patch,
8fcee478-qemu-firmware5.patch
boo#1157378, bsc#1159796 - CVE-2019-11135: Add TSX_CTRL and TAA_NO bits for
IA32_ARCH_CAPABILITIES MSR
07aaced4-Add-TAA-No.patch, f411b7ef6-Add-TSX-CTRL.patch
bsc#1152505 - virt-create-rootfs: add SLE 15 and SLE 12 service packs support
bsc#1154093 - Update to libvirt 5.10.0
- bsc#1157149
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html
- Dropped patches:
2552752f-libxl-fix-lock-manager-lock-ordering.patch
- Added patches:
0a65cba4-news-fix.patch - spec: Enable 'libvirt' firewalld zone for firewalld >= 0.7.0
boo#1157766 - libxl: Fix lock manager lock ordering
2552752f-libxl-fix-lock-manager-lock-ordering.patch
bsc#1145774 - spec: Forcibly remove '--listen' option from LIBVIRTD_ARGS in
/etc/sysconfig/libvirtd since it is incompatible with socket
activation. Also add '--timeout' option for consistency with
upstream.
boo#1156161 - Enable automatic firmware seletction and add the new smm
flavor to the build-time firmware list
jsc#SLE-6997 - Update to libvirt 5.9.0
- jsc#SLE-7440
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html - Update to libvirt 5.8.0
- bsc#1149100
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html - Update to libvirt 5.7.0
- Experimental split of libvirtd into separate daemons
- bsc#1145440, bsc#1145586
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html
- Dropped patches:
4ec3cf9a-apparmor-rules.patch,
f38ef0fa-no-RDMA-check.patch,
411cdaf8-apparmor-check-profile-name.patch.
696239ba-qemu-fix-query-cpus-fast.patch,
09eb1ae0-conf-add-xenbus-controller.patch,
fb059757-libxl-add-xenbus-controller.patch,
ec5a1191-libxl-support-max-grant-frames.patch,
5a64c202-xenconfig-support-max-grant-frames.patch,
CVE-2019-3886-api.patch,
CVE-2019-3886-remote.patch,
e0246257-cputest-add-data-for-Cascadelake-Server.patch,
5cd9db3a-cputest-add-data-E3-1225-v5.patch,
538d8735-cpu_map-Define-md-clear-CPUID-bit.patch,
96f41cd7-admin-reject-clients.patch,
f111e094-locking-restrict-sockets-to-mode-0600.patch,
e37bd65f-logging-restrict-sockets-to-mode-0600.patch,
9f4e35dc-network-improve-chain-create-error-report.patch,
686803a1-network-split-ipv4-ipv6-chains.patch,
c1c235eb-nework-clear-cached-error.patch,
4330d138-network-refactor-global-chains.patch,
3b66bd9a-add-debug-chain-creation.patch,
c6cbe187-network-delay-global-fw-setup.patch,
CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch,
51f9f80d-fix-copying-bitmaps.patch,
2878278c-cpu_map-add-Cascaselake-Server.patch,
4a0f604d-cpu_map-distribute-Cascaselake-Server.patch,
d5572f62-qemu-support-override-max-thread.patch,
673f805d-qemu-chown-uniqDir.patch,
975b004d-virtlogd-over-logrotate.patch,
18d47d61-revert-d00c77ae.patch,
d6943eab-libxl-pmsuspend-event.patch,
3d179919-virsh-precopy-bandwidth.patch,
f4bdd829-rename-precopy-bandwidth.patch,
xen-pv-cdrom.patch,
blockcopy-check-dst-identical-device.patch,
suse-libvirtd-service-xen.patch,
xen-sxpr-disk-type.patch - virsh: use upstream name for migration precopy bandwidth parameter
f4bdd829-rename-precopy-bandwidth.patch
bsc#1145586 - virsh: support for setting precopy bandwidth in migrate
3d179919-virsh-precopy-bandwidth.patch
bsc#1145586
- Rename patches to include commit ID
revert-d00c77ae.patch -> 18d47d61-revert-d00c77ae.patch
libxl-pmsuspend-event.patch -> d6943eab-libxl-pmsuspend-event.patch - libxl: fix domain state following successful suspend operation
revert-d00c77ae.patch, libxl-pmsuspend-event.patch
bsc#1145440 - logging: ensure virtlogd rollover takes priority over logrotate
975b004d-virtlogd-over-logrotate.patch
bsc#1137137 - qemu: fix default value of security_default_confined
Updated suse-qemu-conf.patch
bsc#1143871 - qemu: Change owner of temp directories under /var/lib/libvirt/qemu
673f805d-qemu-chown-uniqDir.patch
bsc#1143497 - Add apparmor-abstractions as a required package for daemon
(bsc#1142992) - qemu: Add support for overriding max threads per process limit
d5572f62-qemu-support-override-max-thread.patch
bsc#1133719 - cpu_map: Add Cascadelake-Server CPU model
e0246257-cputest-add-data-for-Cascadelake-Server.patch,
2878278c-cpu_map-add-Cascaselake-Server.patch,
4a0f604d-cpu_map-distribute-Cascaselake-Server.patch
bsc#1141251 - util: fix copying bitmap to larger data buffer
51f9f80d-fix-copying-bitmaps.patch
bsc#1138734 - api: disallow virConnect*HypervisorCPU,
virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
and virDomainSaveImageGetXMLDesc on read-only connections
CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305 - network: delay global firewall setup if no networks are running
9f4e35dc-network-improve-chain-create-error-report.patch,
686803a1-network-split-ipv4-ipv6-chains.patch,
c1c235eb-nework-clear-cached-error.patch,
4330d138-network-refactor-global-chains.patch,
3b66bd9a-add-debug-chain-creation.patch,
c6cbe187-network-delay-global-fw-setup.patch,
Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
bsc#1133229
- Renamed patches to include commit id:
CVE-2019-10132-admin-reject-clients.patch ->
96f41cd7-admin-reject-clients.patch
CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch ->
f111e094-locking-restrict-sockets-to-mode-0600.patch
CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch ->
e37bd65f-logging-restrict-sockets-to-mode-0600.patch - spec: add systemd-container dependency to qemu and lxc drivers
bsc#1136109 - cpu: add tests for md-clear feature
Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
bsc#1135273 - CVE-2019-10132: admin: reject clients unless their UID matches
the server UID
CVE-2019-10132-admin-reject-clients.patch,
CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
bsc#1134348 - cpu_map: add cpu feature md-clear. CVE-2018-12126,
CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
bsc#1111331
bsc#1135273 - Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
module at libvird start
revert-7431b3eb.patch, revert-8b967198.patch
bsc#1133229 - CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
for read-only connections and users
CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
bsc#1131595 - apparmor: reintroduce upstream lxc mount rules
Drop apparmor-no-mount.patch
bsc#1130129 - supportconfig: collect rotated logs in /var/log/libvirt/*
Modified libvirt-supportconfig
bsc#1124667 - hook: encode incoming XML to UTF-8 before passing to lxml etree
fromstring method
Modifed suse-qemu-domain-hook.py
boo#1123642 - libxl: change autoballooning default to disabled
suse-libxl-disable-autoballoon.patch
jsc#SLE-3059 - conf: add new 'xenbus' controller type
09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
attribute on the xenbus controller
fb059757-libxl-add-xenbus-controller.patch,
ec5a1191-libxl-support-max-grant-frames.patch,
5a64c202-xenconfig-support-max-grant-frames.patch
bsc#1126325 - Replace patches with upstream variants
Old:
0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
New:
411cdaf8-apparmor-check-profile-name.patch,
696239ba-qemu-fix-query-cpus-fast.patch - util: skip RDMA detection for non-PCI network devices
f38ef0fa-no-RDMA-check.patch
bsc#1112182 - qemu: s390: show correct CPU status after guest crash
0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
bsc#1127841 - apparmor: fix more fallout from changing libvirtd profile to a
named profile
4ec3cf9a-apparmor-rules.patch,
0001-apparmor-Check-libvirtd-profile-status-by-name.patch
boo#1125841 - Update to libvirt 5.1.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
11c8aca9-libxl-set-mem-after-balloon.patch,
70c2933d-apparmor-named-profiles.patch,
a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
b6440119-qemu-conf-sev.patch,
a404ac34-qemu-cgroup-sev.patch,
6fd4c8f8-qemu-domain-sev.patch,
17f6a257-security-dac-sev.patch,
a2d3dea9-qemu-caps-dac-override-sev.patch,
620d9dd5-qemu-no-dac-override-nonroot.patch
- jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577 - spec: disable VirtualBox driver - qemu: don't use CAP_DAC_OVERRIDE capability if non-root
620d9dd5-qemu-no-dac-override-nonroot.patch
boo#1125665 - qemu: fix issues related to restricted permissions on /dev/sev
b6440119-qemu-conf-sev.patch, a404ac34-qemu-cgroup-sev.patch,
6fd4c8f8-qemu-domain-sev.patch, 17f6a257-security-dac-sev.patch,
a2d3dea9-qemu-caps-dac-override-sev.patch
bsc#1124842 - apparmor: add support for named profiles and convert libvirtd
profile to a named profile
70c2933d-apparmor-named-profiles.patch,
a3ab6d42-apparmor-conv-libvirtd-named-profile.patch
boo#1118952
- libxl: save current memory value after successful balloon
11c8aca9-libxl-set-mem-after-balloon.patch
bsc#1120813 - Noun phrase for %description doc.
- Remove idempotent %if..%endif pair around
%package bash-completion.
- Reduce hard requirements on bash-c and documentation. - Enable bash completion in Leap15/SLE15 and newer - Update to libvirt 5.0.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Remove UML hypervisor driver
- Dropped patches:
de09ae2f-libxl-support-openvswitch.patch,
0a1b5653-xenconfig-support-openvswitch.patch
- FATE#320928, FATE#325817, FATE#326380, FATE#326698 - Requires: ncurses expands to Requires: libncurses5, which
is not required by any component of this package. Remove it
along with the BuildRequires: ncurses-devel - Update to libvirt 4.10.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
14d03b27-libxl-rm-redundant-virObjectEventStateQueue.patch,
82452a5d-libxl-rm-goto-libxlDomainShutdownThread.patch,
da4b0fd9-libxl-support-soft-reset.patch,
libxl-qemu-emulator-caps.patch
- Added patches:
de09ae2f-libxl-support-openvswitch.patch,
0a1b5653-xenconfig-support-openvswitch.patch
- FATE#320928, FATE#325817, FATE#326380, FATE#326698 - libxl: add support for soft reset
14d03b27-libxl-rm-redundant-virObjectEventStateQueue.patch,
82452a5d-libxl-rm-goto-libxlDomainShutdownThread.patch,
da4b0fd9-libxl-support-soft-reset.patch
bsc#1081516 - Update to libvirt 4.9.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- FATE#326371 - Update SLE15 SP1 with openSUSE Factory package
FATE#325848, FATE#326368
- FATE and bug references made in the SLE15 package since the last
Factory update: FATE#325817, bsc#959329, bsc#1074014,
bsc#1106420, bsc#1108395
- Patches in SLE15 package that are dropped by this update:
1b0c42ff-libvirtd-depend-machined.patch,
ac4a12db-libxl-fix-hasManagedSave.patch - Update to libvirt 4.8.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
60b4fd90-libxl-rm-vm-finish-phase.patch,
e39c66d3-libxl-fix-p2p-migration.patch,
47da84e0-libxl-fix-job-handling-migsrc.patch,
0149464a-libxl-fix-job-handling-migdst.patch,
5ea2abb3-libxl-join-mig-rcv-thread.patch - Fix RPM groups. Remove idempotent %if..%endif guards.
- Remove redundant %clean section. - libxl: fix VM migration on busy hosts
60b4fd90-libxl-rm-vm-finish-phase.patch,
e39c66d3-libxl-fix-p2p-migration.patch,
47da84e0-libxl-fix-job-handling-migsrc.patch,
0149464a-libxl-fix-job-handling-migdst.patch,
5ea2abb3-libxl-join-mig-rcv-thread.patch
bsc#1108086 - Update to libvirt 4.7.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
9ed59012--revert-jansson1.patch,
54f2b5e3-revert-jansson2.patch,
b56950fd-revert-jansson3.patch,
6c3d66ac-revert-jansson4.patch,
8e373e6d-revert-jansson5.patch,
6f99de31-revert-jansson6.patch,
f204cf51-revert-jansson7.patch,
5a58b5ed-revert-jansson8.patch,
63f6e0e9-revert-jansson9.patch,
8687eba-revert-jansson10.patch,
e96e71d8-revert-jansson11.patch,
d99a8959-revert-jansson12.patch,
074a7e14-revert-jansson13.patch,
86db0db9-revert-jansson14.patch - Revert switch to jansson
boo#1104820
- Dropped:
temp-build-fix.patch
- Added:
9ed59012--revert-jansson1.patch,
54f2b5e3-revert-jansson2.patch,
b56950fd-revert-jansson3.patch,
6c3d66ac-revert-jansson4.patch,
8e373e6d-revert-jansson5.patch,
6f99de31-revert-jansson6.patch,
f204cf51-revert-jansson7.patch,
5a58b5ed-revert-jansson8.patch,
63f6e0e9-revert-jansson9.patch,
8687eba-revert-jansson10.patch,
e96e71d8-revert-jansson11.patch,
d99a8959-revert-jansson12.patch,
074a7e14-revert-jansson13.patch,
86db0db9-revert-jansson14.patch - spec: don't restart libvirt-guests when updating libvirt-client
bsc#1104662 - Update to libvirt 4.6.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Switch from yajl to jansson
- Dropped patches:
libvirt-4.5.0-apparmor-add-missing-comma.patch
- Patches added to fix upstream bugs:
temp-build-fix.patch - Fix apparmor failure at startup because of syntax error in
libvirt profile:
* Add libvirt-4.5.0-apparmor-add-missing-comma.patch (picked
from upstream). - Update to libvirt 4.5.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
67c56f6e-libxl-logfd-leak-fix.patch
- spec: use more macros in file paths
- libxl: Implement virDomainBlockResize
0001-libxl-add-support-for-BlockResize-API.patch
FATE#325467, bsc#1094325, bsc#1094725 - spec: enable gluster storage backend for openSUSE - spec: BuildRequires glusterfs-devel when gluster support is
enabled - spec: use wireshark plugin directory from pkg-config - virt-aa-helper: add SUSE path to OVMF and AAVMF images
Adjusted suse-ovmf-paths.patch
boo#1095556 - Update to libvirt 4.4.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- CVE-2018-3639
- Dropped patches:
1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
- libxl: fix leaking logfile fds
67c56f6e-libxl-logfd-leak-fix.patch
bsc#1094480 - cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
CVE-2018-3639
1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
bsc#1092885 - spec: enable libssh support for suse_version >= 1500 - Update to libvirt 4.3.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Remove legacy Xen driver
- Dropped patches:
09877303-virSocketAddrParseInternal.patch,
412afdb8-intro-virSocketAddrParseAny.patch - util: improvements in error handling
09877303-virSocketAddrParseInternal.patch,
412afdb8-intro-virSocketAddrParseAny.patch
bsc#1080957 - Update to libvirt 4.2.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
6b3d716e-keycodemap-py3.patch,
33c6eb96-fix-libvirtd-reload-deadlock.patch,
464889ff-rpc-aquire-ref-dispatch.patch,
c6f1d519-rpc-simplify-dispatch.patch,
06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
86cae503-rpc-fix-pre-exec.patch,
eefabb38-rpc-virtlockd-virtlogd-single-thread.patch,
fbf31e1a-CVE-2018-1064.patch,
fb327ac2-virtlockd-admin-socket.patch,
64370c4b-libxl-MigrateBegin.patch,
99486799-libxl-MigrateConfirm.patch,
f5eacf2a-libxl-MigratePerform.patch,
4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
fe51dbda-libxl-use-FindByRef.patch,
60b3fcd9-libxl-MigratePrepare.patch,
3c89868c-libxl-lock-after-ListRemove.patch,
13e81fc6-libxl-EndJob-on-error.patch,
594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
c66e344e-libxl-dont-deref-NULL.patch,
83edaf44-libxl-dont-hardcode-sched-weight.patch,
apibuild-py3.patch - libxl: don't hardcode scheduler weight
83edaf44-libxl-dont-hardcode-sched-weight.patch
bsc#1086377 - libxl: fixes and improvements in migration APIs
64370c4b-libxl-MigrateBegin.patch,
99486799-libxl-MigrateConfirm.patch,
f5eacf2a-libxl-MigratePerform.patch,
4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
fe51dbda-libxl-use-FindByRef.patch,
60b3fcd9-libxl-MigratePrepare.patch,
3c89868c-libxl-lock-after-ListRemove.patch,
13e81fc6-libxl-EndJob-on-error.patch,
594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
c66e344e-libxl-dont-deref-NULL.patch
bsc#1080957 - lockd: fix typo in virtlockd-admin.socket
fb327ac2-virtlockd-admin-socket.patch
bsc#1085386 - Install correct firewall service file depending on availability
of firewalld vs SuSEfirewall2
libvirtd-relocation-server.xml
bsc#1083455 - qemu: avoid denial of service reading from QEMU guest agent
CVE-2018-1064
fbf31e1a-CVE-2018-1064.patch
bsc#1083625 - virtlockd: fix loosing lock on re-exec
464889ff-rpc-aquire-ref-dispatch.patch,
c6f1d519-rpc-simplify-dispatch.patch,
06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
86cae503-rpc-fix-pre-exec.patch,
eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
bsc#1076861 - libvirtd: fix potential deadlock when reloading
33c6eb96-fix-libvirtd-reload-deadlock.patch
bsc#1079150 - Update to libvirt 4.1.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
72adaf2f-revert-qemu-monitor-error-report.patch,
71d56a39-nodedev-fix-parse-PCI-address.patch,
68eed56b-conf-smbios-oem-strings.patch,
76977061-qemu-smbios-oem-strings.patch,
0c710a37-libxl-resume-lock-on-mig-failure.patch,
759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch,
c2dc6698-fix-deadlock-obtaining-hostname.patch,
c391e07e-libxl-clock-settings.patch,
ef71caea-libxl-memalign.patch,
suse-apparmor-signal.patch - libxl: round memory values to next 1MiB increment
ef71caea-libxl-memalign.patch
bsc#1082041 - libxl: add support for specifying clock offset and adjustment
c391e07e-libxl-clock-settings.patch
bsc#1082161 - Remove all uses of python2 during the build (bsc#1080034)
6b3d716e-keycodemap-py3.patch
apibuild-py3.patch
- Determine hostname early to avoid code injection
in lxc driver. (bsc#1080042)
759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
(fate#323742)
0001-Extract-stats-functions-from-the-qemu-driver.patch
0002-lxc-implement-connectGetAllDomainStats.patch - qemu: Support setting OEM strings in SMBIOS
68eed56b-conf-smbios-oem-strings.patch,
76977061-qemu-smbios-oem-strings.patch
FATE#323624
- libxl: resume lock process after failed migration
0c710a37-libxl-resume-lock-on-mig-failure.patch
bsc#1076861 - qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage - Update to libvirt 4.0.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
2d07f1f0-fix-storage-crash.patch,
69ed99c7-dom0-persistent.patch,
8599aedd-libvirt-guests-dom0-filter.patch,
0f33025a-virt-aa-helper-handle-more-disk-images.patch,
b475a91b-add-virStringFilterChars-string-utility.patch,
faec1958-lxc-set-hostname-based-on-container-name.patch,
2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
fix-virt-aa-helper-profile.patch,
- Patches added to fix upstream bugs:
72adaf2f-revert-qemu-monitor-error-report.patch,
71d56a39-nodedev-fix-parse-PCI-address.patch
- CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500 - Add a qemu hook script providing functionality similar to Xen's
block-dmmd script
suse-qemu-domain-hook.py
FATE#324177 - Fix apparmor rules for virt-aa-helper (bsc#1074265)
fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
Removed patches:
* daemon-close-crasher.patch
* lxc-hostname.patch
Added patches:
* 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
* b475a91b-add-virStringFilterChars-string-utility.patch
* faec1958-lxc-set-hostname-based-on-container-name.patch - Close clients before drivers are cleaned up to avoid crash at
libvirtd stop (bsc#1073730)
daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
0f33025a-virt-aa-helper-handle-more-disk-images.patch - libvirt-guests: fix 'stop' operation when action is 'suspend'
69ed99c7-dom0-persistent.patch,
8599aedd-libvirt-guests-dom0-filter.patch
bsc#1070130 - storage: Don't dereference driver object if virStorageSource is
not initialized
2d07f1f0-fix-storage-crash.patch
bsc#1072974 - Update to libvirt 3.10.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- bsc#1070285, bsc#1070478, boo#1070914,
- FATE#323473, FATE#324365, FATE#324479 - Update to libvirt 3.10.0 RC2
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
8056721c-qemu-null-storage-source.patch,
74a13be4-xdr-flags.patch,
apparmor-rules-for-new-mediation-features.patch,
apparmor-fine-grained-mount-rules.patch
- bsc#1070285, bsc#1070478, FATE#323473, FATE#324479 - spec: remove use of 'systemctl enable'
bsc#1038401 - spec: enable firewalld support for SLE15, Leap15, and Tumbleweed
FATE#320794 - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - spec: Add BuildRequires for libtirpc-devel in preparation of
removal of sunrpc from glibc
- build: Use XDR_CFLAGS in more places
74a13be4-xdr-flags.patch - Replace hardcoded libvirt with Name tag when refering to subpkgs
- Remove dependencies to /bin/sh in libs and nss %post scripts - apparmor: allow libvirtd to send signals to unconfined processes
suse-apparmor-signal.patch
boo#1065123 - qemu: Tolerate storage source private data being NULL
8056721c-qemu-null-storage-source.patch
bsc#1068752 - apparmor: add rules for new mediation features
apparmor-rules-for-new-mediation-features.patch,
apparmor-fine-grained-mount-rules.patch
bsc#1066124, boo#1065123
- spec: unconditionally enable the wireshark dissector - Replace %{with_sle_build} by ! 0%{?is_opensuse}
bsc#940315 - Update to libvirt 3.9.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
c44b29aa-apparmor-dnsmasq-ptrace.patch,
441d3eb6-qemu-tls-client-verify-server-cert.patch - qemu: ensure TLS clients always verify the server certificate
CVE-2017-1000256
441d3eb6-qemu-tls-client-verify-server-cert.patch
bsc#1062563 - Do not ignore errors from useradd/groupadd.
- Invoke/expand %service_* just once per scriptlet.
- Replace some old macros. - spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
bsc#1062620 - spec: reload libvirtd Apparmor profile in %post
bsc#1060860 - apparmor: add dnsmasq ptrace rule to libvirtd profile
c44b29aa-apparmor-dnsmasq-ptrace.patch
bsc#1060860 - spec: Add dependency to UEFI firmwares since paths are specified
at build time - Update to libvirt 3.8.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
92bd87a2-ryzen-test-data.patch,
5c83b360-epyc-test-data.patch,
a0b62843-epyc-cpu-model.patch,
f305d8a1-apparmor-attach_disconnected.patch,
b482925c-apparmor-ptrace-support.patch - Enable firewalld support for openSUSE >= 42.2 - apparmor: Add rules for kernel 4.13 ptrace checks
b482925c-apparmor-ptrace-support.patch
Drop temporary workaround apparmor-ptrace-support.patch
bsc#1058847
- apparmor: Add rules for denial encountered when starting
confined domains
f305d8a1-apparmor-attach_disconnected.patch,
suse-apparmor-libnl-paths.patch
Drop old, useless, undocumented apparmor-fixes.patch - apparmor: add temporary profile fixes to allow starting domains
apparmor-ptrace-support.patch
bsc#1058847 - cpu: Add new EPYC CPU model
92bd87a2-ryzen-test-data.patch, 5c83b360-epyc-test-data.patch,
a0b62843-epyc-cpu-model.patch
bsc#1052825 - Update to libvirt 3.7.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
8982f3ab-util-hash-header.patch,
0b1ecf7b-virHashCodeGen-mockable.patch,
f536b0dd-tests-arch-independent-hash.patch,
e4cb8500-avoid-malicious-ssh-hostname-as-args.patch - Support OVMF 4MB firmware images
Adjustment to spec file and suse-ovmf-paths.patch - supportconfig plugin: list active networks, interfaces and
storage pools - rpc: avoid ssh interpreting malicious hostname as arguments
e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
bsc#1053600 - Update to libvirt 3.6.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Fix unit tests on s390x and ppc64
8982f3ab-util-hash-header.patch,
0b1ecf7b-virHashCodeGen-mockable.patch.
f536b0dd-tests-arch-independent-hash.patch
- Patch cleanup
- Renamed libvirtd-defaults.patch to
suse-libvirtd-disable-tls.patch
- Renamed libvirtd-init-script.patch to
suse-libvirtd-sysconfig-settings.patch
- Renamed virtlockd-init-script.patch to
suse-virtlockd-sysconfig-settings.patch
- Renamed virtlogd-init-script.patch to
suse-virtlogd-sysconfig-settings.patch
- Renamed libvirt-guests-init-script.patch to
suse-libvirt-guests-service.patch
- Combined suse-libvirtd-service.patch and
systemd-service-xen.patch to suse-libvirtd-service-xen.patch
since both patches add Xen support to libvirtd service file
- Pull OVMF-related changes from suse-qemu-conf.patch into a
new suse-ovmf-paths.patch - Add a supportconfig plugin
libvirt-supportconfig
FATE#323661 - Remove Requires on bridge-utils
FATE#323639 - drop dependency on xen for armv6hl (not supported and does not
build) - Update to libvirt 3.5.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
5004f121-virFdStreamThread-dont-exceed-length.patch,
1a4b21f1-set-EOF-on-end-of-stream.patch - Remove --with-pic which is only for static libs
- Use %_smp_mflags instead of just %jobs - misc spec file cleanup
- remove checks for old distros well beyond EOL
- enable wireshark dissector for Leap >= 42.2 and Factory
- remove support for old, non-systemd distros
- replace $RPM_ shell vars with modern macros - Don't exceed specified length when reading from stream
5004f121-virFdStreamThread-dont-exceed-length.patch,
1a4b21f1-set-EOF-on-end-of-stream.patch - Update to libvirt 3.4.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
aeda1b8c-qemu-no-error-shutdown.patch,
8023b21a-conf-ioapic.patch, 6b5c6314-qemu-irqchip.patch,
2020e2c6-conf-intremap.patch, 04028a9d-qemu-intremap.patch,
d12781b4-conf-iommu-cache-mode-attr.patch,
a5691448-qemu-iommu-cache-mode.patch,
3a276c65-conf-iommu-def-stability-check.patch,
935d927a-conf-iommu-ABI-stability-check.patch,
4cd3f241-fix-NULL-disk-source.patch,
975ea20f-loopback-macro.patch,
dbb85e0c-libxl-graphics-listen-addr.patch,
libxl-def-usbctrl.patch, revert-2841e675-mtu.patch
- FATE#321335, bsc#1031056, bsc#1037774, bsc#1040207, bsc#1040213 - libxl: add default listen address for VNC and spice
975ea20f-loopback-macro.patch,
dbb85e0c-libxl-graphics-listen-addr.patch
bsc#1040207
- xenconfig: fix handling of NULL disk source
4cd3f241-fix-NULL-disk-source.patch
bsc#1040213 - qemu: add support for 288 VCPUS
aeda1b8c-qemu-no-error-shutdown.patch,
8023b21a-conf-ioapic.patch,
6b5c6314-qemu-irqchip.patch,
2020e2c6-conf-intremap.patch,
04028a9d-qemu-intremap.patch,
d12781b4-conf-iommu-cache-mode-attr.patch,
a5691448-qemu-iommu-cache-mode.patch,
3a276c65-conf-iommu-def-stability-check.patch,
935d927a-conf-iommu-ABI-stability-check.patch
FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
"host_mtu"
revert-2841e675-mtu.patch
bsc#1037774 - Update to libvirt 3.3.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Bug fixes:
bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
bsc#1031056 - Update to libvirt 3.3.0 RC1
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
- Bug fixes:
bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
bsc#1034146
- libxl: add default controllers for USB devices
libxl-def-usbctrl.patch
bsc#1031056 - qemu: Fix regression when hyperv/vendor_id feature is used
Added patch:
ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
boo#1033893 - Update to libvirt 3.2.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
67dcb797-virTimeBackOffWait-sleepcap.patch,
85af0b80-qemu-adaptive-montimeout.patch,
d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
754515b7d-add-virNetlinkDumpCommand.patch,
3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
5dd607059-add-virNetDevGetName.patch,
00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
suse-libvirtd-service.patch
bsc#1015348 - RPM group fix - Fail to start network instead of losing routes if IPv6 forwarding
is required. bsc#1025252
Added patches:
00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
5dd607059-add-virNetDevGetName.patch
754515b7d-add-virNetlinkDumpCommand.patch
d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch - qemu: Fix monitor timeout with large memory VMs
67dcb797-virTimeBackOffWait-sleepcap.patch
85af0b80-qemu-adaptive-montimeout.patch
bsc#1013113 - network: don't use dhcp-authoritative on static networks
bsc#1015588
* added network-don-t-use-dhcp-authoritative-on-static-netwo.patch - Update to libvirt 3.1.0
- Modularize storage driver by splitting it into backend-specific
subpackages
- CVE-2017-2635, bsc#1027075
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
b018ada3-shunloadtest-build-fix.patch,
f86a7a83-libxl-dom0-balloon-fix.patch,
6e4759d0-libxl-timer-fix.patch,
87df87e0-libxl-timer-tsc-emulate.patch,
b4386fda-xenconfig-timer-fix.patch,
d3970925-timer-tests.patch,
321a28c6-libxl-default-disk-format.patch,
bd116810-libxl-fix-disk-detach.patch,
ff225538-libxl-autoballoon-setting.patch,
c89a6e78-libxl-physinfo-cleanup.patch,
d2b77608-libxl-maxmem-fix.patch,
79692c38-libxl-dom0-maxmem.patch,
4ab0c959-libxl-mem-leak.patch,
2dc1cf19-libxl-double-free.patch,
apparmor-errormsg-fix.patch,
apparmor-alt-seclabel.patch,
qemu-disable-namespaces.patch - Drop author list from description. Fix summary to be more
accurate as to what the subpackage pertains to. - Don't call insserv if we use systemd and don't require it. - libxl: more fixes for dom0 maxmem setting
4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
bsc#1017762 - apparmor: don't fail on non-apparmor
apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
bsc#1023436 - libxl: fix reporting of domain maximum memory
ff225538-libxl-autoballoon-setting.patch,
c89a6e78-libxl-physinfo-cleanup.patch,
d2b77608-libxl-maxmem-fix.patch,
79692c38-libxl-dom0-maxmem.patch
bsc#1017762 - libxl: set disk format to raw if not specified and fix disk
detach
321a28c6-libxl-default-disk-format.patch,
bd116810-libxl-fix-disk-detach.patch
bsc#1003379 - libxl: fix timer configurations
6e4759d0-libxl-timer-fix.patch,
87df87e0-libxl-timer-tsc-emulate.patch,
b4386fda-xenconfig-timer-fix.patch, d3970925-timer-tests.patch
bsc#1019969 - SLE12 SP2 bugs merged via version updates of the Factory libvirt
package:
bsc#986718
- SLE12 SP2 FATEs merged via version updates of the Factory libvirt
package:
FATE#316228, FATE#316628, FATE#319531, FATE#319810, FATE#320490
- Replaced libxl-dom0-balloon-fix.patch with upstream patch
f86a7a83-libxl-dom0-balloon-fix.patch - Fix dom0 ballooning with Xen >= 4.8
libxl-dom0-balloon-fix.patch
bsc#1020755 - SLE12 SP2 bugs merged via version updates of the Factory libvirt
package:
bsc#996020, bsc#987002, bsc#997278, bsc#998005, bsc#998389,
bsc#1001446, bsc#1001698, bsc#1005288, bsc#1013991, bsc#1016253,
bsc#1017086, bsc#1017762, bsc#1018189 - virt-create-rootfs is a temporary SLE-only hack that was never
added to the Factory libvirt package, causing it to be dropped
when rebasing SLE on Factory. Add it now but only apply
associated patch when building for SLE.
virt-create-rootfs.patch
bsc#995981 - Update to libvirt 3.0.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Add b018ada3-shunloadtest-build-fix.patch to fix 'make check'
failures
- Add qemu-disable-namespaces.patch to temporarily disable
qemu namespace feature until all issues are resolved - In order to avoid issues like bsc#1017189, explicitly specify
supported VirtualBox versions - Update to libvirt 2.5.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Import new public signing key - spec: explicitly set qemu-bridge-helper path to /usr/lib/
bsc#999070 - Package org.libvirt.api.policy polkit file (bsc#959297)
- Fix postun systemd services cleanup
- Mark /etc/libvirt/nwfilter/*.xml files as config files - Update to libvirt 2.4.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html - Update to libvirt 2.3.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
pci-use-driver-override-sysfs.patch,
virHostdevFindUSBDevice-privsyms.patch, libxl-usb-vendor.patch,
apparmor-qemu-bridge-helper.patch - Update to libvirt 2.2.0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
856965b3-qemu-secdriver.patch,
541e9ae6-cpu-vendor-crash-fix.patch,
d53d4650-qemu-rbd-auth.patch - libxl: allow vendor/product addressing for USB hostdevs
virHostdevFindUSBDevice-privsyms.patch, libxl-usb-vendor.patch
bsc#989646
- qemu: fix auth for rbd network disks
d53d4650-qemu-rbd-auth.patch
bsc#988998
- Replace cpumodel-vendor-crash-fix.patch with upstream variant
541e9ae6-cpu-vendor-crash-fix.patch
bsc#992425 - Update to libvirt 2.1.0
- New subpackages libvirt-libs and libvirt-admin
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
c8f08e48-systemd-notify-fix.patch
- qemu: fix qemu.conf security_driver regression in 2.1.0 release
856965b3-qemu-secdriver.patch - cpu_x86: fix libvirtd segfault when host cpu is 'qemu64'
cpumodel-vendor-crash-fix.patch
bsc#992425 - bsc#988279. Move the qemu-bridge-helper apparmor profile from the
qemu abstraction to the usr.sbin.libvirtd profile.
apparmor-qemu-bridge-helper.patch - spec: minor improvements to logic enabling numactl and numad
support and fix nested if indentation
FATE#319979 - Update patches providing support for driver_override sysfs
interface with latest upstream variant. Dropped
pci-simplify-stub.patch and updated
pci-use-driver-override-sysfs.patch
bsc#986718 - spec: enable numactl and numad support for aarch64
FATE#319979, bsc#991377 - BuildRequires: use librbd-devel instead of ceph-devel
- Enable rbd support for aarch64
bsc#979473 - Use driver_override sysfs interface for binding/unbinding
PCI stub drivers
pci-simplify-stub.patch, pci-use-driver-override-sysfs.patch
bsc#986718 - systemd: fix ready notification on abstract socket
c8f08e48-systemd-notify-fix.patch
boo#987668 - Update to libvirt 2.0.0
- Change version scheme to match libvirt's time-driven release
schedule. will be incremented on first release of
new calendar year, on each monthly release, and
on stable branch maintenance release
- Include libvirt-admin utility and API
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
apparmor-dont-scrub-environment-of-virtlogd-process.patch,
e33cd67a-xenconfig-backendtype-fix.patch - spec: Recent simplification allows using a common spec file for
SLE and openSUSE
- Add SLE patches missing in openSUSE
libxl-dom-reset.patch, libxl-set-migration-constraints.patch,
libxl-set-cach-mode.patch - xenconfig: fix conversion of to backendtype
e33cd67a-xenconfig-backendtype-fix.patch
bsc#984798 - Advertise aarch64 UEFI firmware paths
- adjust spec file to include aarch64 paths in
'--with-loader-nvram=' configure option
- adjust qemu.conf 'nvram' option to include the SUSE paths
bsc#981836, bsc#983747 - apparmor: Don't scrub environment of virtlogd process
apparmor-dont-scrub-environment-of-virtlogd-process.patch
boo#980441 - Update to libvirt 1.3.5
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
e4d131b8-mv-virDomainDefPostParseInternal.patch,
3e428670-post-parse-implicit-video.patch,
538012c8-default-vram.patch, 96b21fb0-vram-tests.patch,
400e716d-libxl-noprope-emulator.patch,
b90c4b5f-tests-use-qemu-xen.patch,
fccf2725-libxl-API-4.4.patch,
5325123d-libxl-migv2-save-restore.patch,
f9edcfa4-libxl-migv2-migration.patch,
a1c9a81a-libxl-rbd-fix.patch,
ba566428-libxl-dom-iface-addrs.patch
- spec: simplify and cleanup by removing many conditionals that
are never toogled. Also drop conditionals for suse_version <
1310 - Avoid suppressing errors during useradd/groupadd - libxl: add domainInterfaceAddresses API
ba566428-libxl-dom-iface-addrs.patch
bsc#979425 - libxl: default to qemu driver for network disks
a1c9a81a-libxl-rbd-fix.patch
boo#981094 - spec: Remove %defattr usage
Inspired by upstream commit 90f9193c - libxl: support Xen migration stream V2
fccf2725-libxl-API-4.4.patch,
5325123d-libxl-migv2-save-restore.patch,
f9edcfa4-libxl-migv2-migration.patch
bsc#978361 - Fix default video RAM setting
e4d131b8-mv-virDomainDefPostParseInternal.patch,
3e428670-post-parse-implicit-video.patch,
538012c8-default-vram.patch, 96b21fb0-vram-tests.patch,
400e716d-libxl-noprope-emulator.patch,
b90c4b5f-tests-use-qemu-xen.patch
bsc#979397 - Remove unknown locales to fix build in old dists - Update to libvirt 1.3.4
- Add support for migration data compression in QEMU driver
- Drop libvirtd.socket
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches: 216650f1-libxl-build-fix.patch,
6d8b6d28-mark-implicit-video-primary.patch,
03e8d5fb-qemu-perf-memory-corruption.patch,
libvirtd-systemd-socket.patch - qemu: perf: Fix crash/memory corruption on failed VM start
03e8d5fb-qemu-perf-memory-corruption.patch
bsc#977131 - Fix setting implicit video devices as primary
6d8b6d28-mark-implicit-video-primary.patch
bsc#977150 - Update to libvirt 1.3.3
- perf events
- post-copy migration support
- NSS module
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Add rpmlintrc file to filter shlib-policy-name-error for
new libnss_libvirt plugin
- Fix build with Xen4.7
216650f1-libxl-build-fix.patch - spec: restart daemons in %posttrans after connection drivers
have been processed
bsc#854343, bsc#968483 - libxl: advertise system qemu instead of qemu-xen in caps
libxl-qemu-emulator-caps.patch
FATE#320638 - Update to libvirt 1.3.2
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html - libxl: Add support for block-{dmmd,drbd,npiv} scripts
libxl-support-block-script.patch
bsc#954872 - qemu: set /usr/share/qemu/ovmf-x86_64-ms-{code,vars}.bin as
default UEFI firmwares for x86_64
bsc#961853 - Update to libvirt 1.3.1
- CVE-2015-5313
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches: 034e47c3-CVE-2015-5313.patch,
ace1ee22-qemuxml2argv-test.patch, add-with-login-shell.patch,
virt-aa-helper-rw-mounts.patch - spec: perform one-time enable and start of virtlogd.socket when
upgrading from libvirt < 1.3.0. Inspired by upstream libvirt.git
commit da054f35. - CVE-2015-5313: don't allow '/' in filesystem volume names
034e47c3-CVE-2015-5313.patch
bsc#953110
- Fix failing qemuxml2argv test on 32-bit platforms
ace1ee22-qemuxml2argv-test.patch - Update to libvirt 1.3.0
- New virtlogd log daemon
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patch: 703ec1b7-qemu-bridge-helper-fix.patch
- Added patch: virtlogd-init-script.patch - Run udevadm settle after removing NICs in lxc driver.
bsc#829033. lxc-wait-after-eth-del.patch - Don't add apparmor deny rw rule for 9P readonly mounts.
bsc#952849. virt-aa-helper-rw-mounts.patch - Don't package virt-login-shell anymore as shipping it as
non-setuid doesn't make sense. bsc#837609
add-with-login-shell.patch - Detect path of qemu-bridge-helper during %configure
- add qemu-tools as BuildRequires for suse_version > 1130
- add upstream patch 703ec1b7-qemu-bridge-helper-fix.patch - Update to libvirt 1.2.21
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped patches:
disable-virCgroupGetPercpuStats-test.patch - spec: some minor wireshark fixups. Essentially a backport of
commit 7c8250d7. - spec: remove all dependencies on apparmor to keep it optional.
bsc#949793 - xenconfig: set disk type to BLOCK when driver is not tap or file
xen-sxpr-disk-type.patch
bsc#938228 - spec: the libvirt apparmor profiles #include files from the
apparmor-profiles package, thus should have a dependency on it
bsc#949793 - Remove Wants=xencommons.service from libvirtd.service
xencommons is already enabled by a global preset, and the
absence of xen-tools.rpm causes a systemd warning - Update to libvirt 1.2.20
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped upstream patches:
3468542f-virFileUnlink.patch,
8b1d84e6-refreshVol-failure.patch,
e0025d29-storage-mode-check.patch,
ba25c214-libxl-log-level.patch,
56945e13-libxl-AttachDeviceConfig-hostdev.patch - bsc#945962: SLES12 SP1 Beta3 - Pass-through NIC device via virsh
not available to VM.
56945e13-libxl-AttachDeviceConfig-hostdev.patch - libxl: set driver log level to the log_level specified in
libvirtd.conf
ba25c214-libxl-log-level.patch
bsc#945796 - CVE-2015-5247 - denial of service through root-squash NFS storage
bsc#945645
3468542f-virFileUnlink.patch
8b1d84e6-refreshVol-failure.patch
e0025d29-storage-mode-check.patch - Update to libvirt 1.2.19
- Improved ppc64 support
- New virDomainRename API
- Support for PCI Express controllers in QEMU
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped upstream patches:
269d39af-storage-allocation-fix.patch,
26c5fa3a-virt-aa-helper-missing-doc.patch,
d25a5e08-virt-aa-helper-simplify-restriction-logic.patch,
2f01cfdf-virt-aa-helper-allow-ovmf.patch,
91fdcefa-virt-aa-helper-allow-nvram.patch,
52970dec-virt-aa-helper-improve-valid-path.patch,
44a54eb0-libxl-fix-refcnt-MigrationDstArgs.patch,
15120b8c-libxl-no-resume-on-suspend-fail.patch,
e80b84a7-libxl-acquire-job-on-migrate.patch,
60acb38-revert-curmem-inactive-dom.patch - Replace local libxl patches with upstream variants
Dropped:
0003-libxl-fix-ref-counting-of-libxlMigrationDstArgs.patch
0004-libxl-don-t-attempt-to-resume-domain-when-suspend-fa.patch
0005-libxl-acquire-a-job-when-receiving-a-migrating-domai.patch
Added:
44a54eb0-libxl-fix-refcnt-MigrationDstArgs.patch
15120b8c-libxl-no-resume-on-suspend-fail.patch
e80b84a7-libxl-acquire-job-on-migrate.patch
bsc#936185
- Added another virt-aa-helper upstream patch
52970dec-virt-aa-helper-improve-valid-path.patch
lp#1483071
- Added upstream patch to fix libvirt-tck memory balloon test
failure on Xen
60acb38-revert-curmem-inactive-dom.patch - Fix generated apparmor profile to allow access to ovmf and nvram.
26c5fa3a-virt-aa-helper-missing-doc.patch
2f01cfdf-virt-aa-helper-allow-ovmf.patch
91fdcefa-virt-aa-helper-allow-nvram.patch
d25a5e08-virt-aa-helper-simplify-restriction-logic.patch
lp#1483071 - storage: only run safezero if allocation is > 0
269d39af-storage-allocation-fix.patch
bsc#942085 - Update to libvirt 1.2.18
- libxl: support dom0
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Dropped upstream patches:
e44bcae-virt-aa-helper-trailing-slash.patch,
a55a5e7-virt-aa-helper-log.patch,
61dab0f-virt-aa-helper-renaming.patch,
24f3c2f-virt-aa-helper-fix-caps.patch,
45697fe5-libxl-support-dom0.patch,
e9c27344-libxl-fix-virDomainObj-state.patch,
4ffb21c8-libxl-dom0-state-fix.patch,
qemu-nbd-cleanup-fix.patch - Fix crash in libxl driver on receiving side
0003-libxl-fix-ref-counting-of-libxlMigrationDstArgs.patch
0004-libxl-don-t-attempt-to-resume-domain-when-suspend-fa.patch
0005-libxl-acquire-a-job-when-receiving-a-migrating-domai.patch
bsc#936185 - libxl: set dom0 state to running
4ffb21c8-libxl-dom0-state-fix.patch
bsc#937316
- libxl: support management of dom0
45697fe5-libxl-support-dom0.patch
bsc#937316
- libxl: libxl: fix setting state of virDomainObj
e9c27344-libxl-fix-virDomainObj-state.patch
bsc#934937 - Fixed virt-aa-helper bugs preventing virt-sandbox to work.
24f3c2f-virt-aa-helper-fix-caps.patch
61dab0f-virt-aa-helper-renaming.patch
a55a5e7-virt-aa-helper-log.patch
e44bcae-virt-aa-helper-trailing-slash.patch
bsc#936841
- Fixed crasher due to uninitialized values
qemu-nbd-cleanup-fix.patch bsc#936841 - Update to libvirt 1.2.17
- parallels driver renamed to vz (Virtuozzo)
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- spec: re-enable tests that have received upstream fixes and
are now passing - Remove unsupported settings in libvirtd.socket unit file when
systemd version < 214
libvirtd-systemd-socket.patch
bsc#933043
- spec: always apply Apparmor and netcontrol patches - spec: Add libvirtd.socket unit file to service_add_pre and
service_del_postun macros - Update to libvirt 1.2.16
- Introduce pci-serial
- Introduce virDomainSetUserPassword API
- Introduce protected key mgmt ops
- Add domain vmport feature
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Drop upstream patches c0d3f608-libxl-soundhw.patch and
8910e063-arch-caps.patch
- Drop polkit-10-virt.rules in favor of upstream 50-libvirt.rules - qemu: fix regression defaulting to host arch
8910e063-arch-caps.patch
rhb#1219191 - spec: build libxl driver for aarch64 and remove useless
'suse_version <= 1220' conditional - libxl: support virtual sound devices in HVM domains
c0d3f608-libxl-soundhw.patch
bsc#875216 - Update to libvirt 1.2.15
- Implement virDomainAddIOThread and virDomainDelIOThread
- libxl: Introduce configuration file for libxl driver
- Add VIR_DOMAIN_EVENT_ID_DEVICE_ADDED event
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Drop upstream patches da33a1ac-lxc-init-statedir.patch and
open-ns-files-readonly.patch
- spec file fixups for building --without-driver-modules - boo#926765: add libvirt-daemon-driver-qemu dependency on
libvirt-daemon-driver-storage. - boo#926153: make sure /var/run/libvirt/lxc folder exists when
starting the driver. da33a1ac-lxc-init-statedir.patch
- Fix lxc-enter-namespace for 3.19+ kernels.
open-ns-files-readonly.patch - Disable building wireshark dissector. Commit 37397320
requires wireshark pkgconfig, which SUSE wireshark packages
do not provide.
- Disable building the legacy Xen driver since Xen no longer
provides the xend toolstack. Remove xend-specific patches
while at it: fix-pci-attach-xen-driver.patch,
xen-name-for-devid.patch - Update to libvirt 1.2.14
- qemu: Implement memory device hotplug
- Implement public API for virDomainPinIOThread
- Implement public API for virDomainGetIOThreadsInfo
- SRIOV NIC offload feature discovery
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Drop disable-hugepage-test.patch in favor of upstream fix - Fix build on older distros containing a polkit package that lacks
support for /etc/polkit-1/rules.d drop directory - Disable interface driver if libnetcontrol cannot be initialized
Modified libvirt-suse-netcontrol.patch
boo#920551 - Fix crash in libnetcontrol-backed interface driver
Modified libvirt-suse-netcontrol.patch
boo#920551 - Instruct polkit to allow memebers of the 'libvirt' group to connect
to libvirt without providing any password (bnc#920804)
- Added polkit-10-virt.rules to fix bnc#920804 - Change default setting of security_default_confined in
/etc/libvirt/qemu.conf instead of in code. Making the change in
code changes the default behavior for all users, even those that
have a custom security setup in their /etc/libvirt/qemu.conf.
Modified suse-qemu-conf.patch
bsc#921586 - Fixed a number of QEMU apparmor abstraction problems. bsc#921355
apparmor-fixes.patch - Update to libvirt 1.2.13
- qemu: improved support for host and guest NUMA
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html - Update to libvirt 1.2.12
- CVE-2015-0236: qemu: Check ACLs when dumping security info
from snapshots
- CVE-2015-0236: qemu: Check ACLs when dumping security info
from save image
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html
- Drop upstream patches: 30c6aecc-apparmor-lib64.patch,
apparmor-xen-fixup.patch, apparmor-allow-helpers.patch,
apparmor-tck-raw-packets.patch
- Disable a hugepage test that is failing on ppc, ppc64, and
ppc64le architectures - disable-hugepage-test.patch - Fixed patches to pass make syntax-check - Apparmor profile regression breaks Xen domains. bsc#913799
apparmor-xen-fixup.patch
apparmor-allow-helpers.patch
apparmor-tck-raw-packets.patch - Replaced hard to maintain install-apparmor-profiles.patch
by upstreamed 30c6aecc-apparmor-lib64.patch.
- Reformatted libvirt.spec and libvirtd.init to pass upstream make
syntax-check - fix bashisms in libvirt-guests.sh script
- update patches:
+ libvirt-guests-init-script.patch - Update to libvirt 1.2.11
- Implement public API for virDomainGetFSInfo
- qemu: Add define for the new throttle options
- CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats()
- CVE-2014-7823: dumpxml: security hole with migratable flag
- Drop upstream patches: 2222123-virt-aa-helper-crash.patch,
433b427-iplink-name.patch,
52691f99-qemu-mig-crash.patch,
72fecf1-lxc-resolve-symlinks.patch,
b1674ad5-CVE-2014-7823.patch,
ba9b7252-sys-net-rw.patch,
c264eea-virt-aa-helper-sandbox.patch,
e50457d-lxc-unmount-check.patch,
cgroup-all-devices.patch,
libvirt-ppc64le-support.patch - Get /proc/sys/net/ipv[46] read-write for wicked to work in
containers. bsc#904432. ba9b7252-sys-net-rw.patch
- Fixed allowing devices for containers.
cgroup-all-devices.patch - qemu: Fix crash in tunnelled migration
52691f99-qemu-mig-crash.patch
boo#908008 - Fix potential crasher in virt-aa-helper
2222123-virt-aa-helper-crash.patch
- ip link add now needs the 'name' parameter.
433b427-iplink-name.patch
- Fixes for virt-sandbox-service to work:
- Allow adding virt-sandbox service config to apparmor rules.
c264eea-virt-aa-helper-sandbox.patch
- fix symlink resolving for containers to start.
72fecf1-lxc-resolve-symlinks.patch
- fix unmounting file system if it contains the source to mount.
e50457d-lxc-unmount-check.patch - Remove security_driver = "none" in qemu config. This completely
disabled all security drivers instead of probing them.
- Changed default value of QEMU's security_default_confined to 0 to
keep QEMU domains unconfined by default. - CVE-2014-7823: dumpxml: security hole with migratable flag
b1674ad5-CVE-2014-7823.patch
bsc#904176 - Fix Qemu AppArmor abstraction.
- qemu-block.so was denied on x86_64. install-apparmor-profiles.patch
- Temporary fix access to screenshot temporary file. bsc#904426.
qemu-apparmor-screenshot.patch - Update to libvirt 1.2.10
- Many incremental improvements and bug fixes, see
http://libvirt.org/news.html - Added package wireshark-plugin-libvirt to provide the wireshark
dissector for the libvirt RPC protocol /bin/sh /bin/sh /bin/sh /bin/sh ibs-arm-6 1628079575
7.1.0-6.5.1 7.1.0-6.5.1 7.1.0-6.5.1 nwfilter virtnwfilterd.conf virtnwfilterd-admin.socket virtnwfilterd-ro.socket virtnwfilterd.service virtnwfilterd.socket connection-driver libvirt_driver_nwfilter.so rcvirtnwfilterd virtnwfilterd test_virtnwfilterd.aug virtnwfilterd.aug sysconfig.virtnwfilterd virtnwfilterd.8.gz /etc/libvirt/ /usr/lib/systemd/system/ /usr/lib64/libvirt/ /usr/lib64/libvirt/connection-driver/ /usr/sbin/ /usr/share/augeas/lenses/tests/ /usr/share/augeas/lenses/ /usr/share/fillup-templates/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:20358/SUSE_SLE-15-SP3_Update/a55c0aa17f3ce2d7b48d9ea14612e0eb-libvirt.SUSE_SLE-15-SP3_Update cpio xz 5 aarch64-suse-linux directory ASCII text ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=86020c7fe2195a29178e7baaeb6ac5014b96ff12, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=5e6dfc934498334841b67e018d577405900f4c57, for GNU/Linux 3.7.0, stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) l P R R R
R
R 1R R uR R R R R R R R R R
R R R R R R R
R tR R )R QR TR 2R NR "R UR hR ^R rR @R +R lR !R jR gR IR MR RR iR ;R CR ?R XR qR LR [R 8R SR =R fR OR pR $R 6R 5R 9R dR R sR 4R WR AR ]R nR YR VR -R JR cR *R :R 1R (R \R 3R oR R 7R 0R `R 'R &R DR FR kR aR HR %R ER uR R R R R R R R R R R g8^cU_ utf-8 0051a53d82684da34eb0a8581b5db1841e98e9e9c35ab3cc8e0877b4855b431c ? 7zXZ
! t/']
crt:a`*r_ʽuŘ}FI8!k$+JZ5hĆbAQ!IU"h(A -IVuAjqnuAƔK5[*,}XNKn
/ܶ ip06%NӒ0-"QkGAa%Β{?NJ ˄Nju0!brky[. 3 ,R@{TKD])x-
3թu9;hSg9m賩|U0qJ.gk|"ٓ-'#S%zF^XS9Hl/XTt-?; i? KGXebTu
zkO1@ES: EvuBX Ы՛*$\Ls@n R |`UUoNc|cα8^4?5v1-t AKUΎTBـD" N=l=Ρ }C3j~F\
U=
J#&Zh 1V /'LǴ4iG^#!GFG 7XTu=+$~k(Xz1ʍgR@]:jk, S\V7xP%IP81ЯNA ^NF,.=ArS '\YdKRz)m@fbQ1Xz2rp)Wpֹ?2?IE嫗(OQtƇ+vї]?_5H@f(V!s 6] 69yd= ĂMĿ_ڵX$t"h 3ZVEIQpm!HbDFPmBjg"\I{|&Fi]J^uw`fAJw3yWI' XhvS.݉,2#Xƭm )He ¤G .{tFHy(ԭTtlzV`KijSk7Wb j{?Bc iWf1lUz#u̥કkK~0$u
w0%J=g4ak
[5R0aK< 2 2DUUYA"IvP02d V Fqo[CIN+%Ri9OݘgMVShRB?nAjr Jg$+f³\'Mh
jPUa an*2 >nϫv* z$4^`81Z3t1|6fG< kAu]X6v\>k ,>غ{`nxott:#y$>:*VRGr1Dh
;a[Dj?v ig+u5mO$P^GLgIfA1& 7dLk7 Y5 @|7W11^_;gsAttZ*L{Z^K[]j]4 JבJr 8r]4UqBq|w9>G57ũv7aL}
;3tN-RX ^>Y` n[e_;1S`zs̾]Gn g8pn63@n3Ϧ* )d-j> &DA@+!5Tk6lL] ' ٘ ؆>1{ {P=̧ũzFk"o8o{c h܀RGhӰwq9Nr0lճIw!&jm cq nY ͷw7 z<'wѹ(P\*[0'aD
zCwR{[^uo5(H/0E\ށ|H ph۩ʟ%#srdȃEpU#O]ыfӫ ,ȯw8j]gqi;ة)ClO;ׇiO *lHz61=
X+#J_ $ A 2?,$#$;&1i4 4 [ 7fe{"2B#;y Q]xԙn){morė>.I+NA,anȝ sS!$kw/y/[p*2S@%d9ֱ j@^NCP*g˔ <\#pe,1Sa: *<;مz'
k"&[72 Խ!D >b&s LBeQk~/k4@MI "T vWyu
:'tv9%bR"rR>DoL"'{fyZa*8)=
;4A`Tq~5Kb$9kI2$~w@k:B> #!goЃlOA^T8 sH=-zMi JۆW
CAQ1&HU%WZek Q#Fg#2pC1NMr iuuڢI4P]=Xl!ahe Q$Ȣ rp3
T9e߶d ) e]}pWM+40gh5L/`A\_pt V{fR=).]
W. oޅ !
\YP[S-h q]vf (d}A Pq[_ wܢǖ#;!^Bf[SnKke^'VLР[H,mDlWO/Cb| ç 7?bzop/Zm[o
qOd6Q/쭖d%(DYG# sFqo 4 8eiD7Lnn0NhX1Xy &9ZPpʣkCuyzBcw]x V oW0{geߪƏu(UmR
gjܬ DR;0PjШS/\n
H,ຕD~e݁8ྷƢQhޭ=L&&}iZy&MW: ~wl9wb(Cs ɸc c$4'!~74:Lbپ[.E^5|FS%dm!> V8xQGQe>$TE%4(mW"zl?lKRj>ks1k 1 @Ʌ f s ( Pq~2ܭvbi<ʜc9~RXo YbƥQcO韁+x x ])^s֞F,qV?$uM&cKE'QKbb+^vP&NH©[(<6/ݴbIM 2-X 3KsK
kct 8X(V+qat,"ЊpdQ (Ym-v
룖u\
?Qf ?ZO:(u^7@~i . XlԱu
n Lc9}p=8o )F~Bѧ }bc v'ɱ='2nThQIWmڑ N` s7A`XÃ=hB9iTx.!rN, Ѓ2O$3h)9+1JS' à|Ls-6X%?MJ+mǯE#ʛ#[s +IW]W8u\.e ~WZvFJ +j?uur53
-|)|f0%!y-fLk n+ rl>R+-=! ||I ue^Z?7wؓ$@{ԍz͙*$rm{ /W$P/ ;D9g*; ~̧ GgLվ
6"% *!&' ~Vio)v| 4._v-tU4o:57߶˟Te5뺢YsΑ). 5"6 EcSz]o4bcg] hJIXȑCã@y}P:JL|:Vo;s/ iYӝ_' hx88wgFx q ?JL`w$Q&zuG~-YcbЁD4HU3xDA=;}H_fR/#و{ň&Z'ܺ_WҢkrzKY'_@bLM$+8I{28i@m*QZ;$7 ;u]3[fGh`Qf^Yyq=zVwS(R T e_v*w%)K%qn&
*#(#j@e|> h@_!ɏYQԶ+ucV\d kE~5Sl
.ۏ/heKtDp!ah,=3NA v_8yC.RߏքhtRO[ ̋T˙
J?wOt?sUkVi$gpz"c6LQ rO# *z"y ]X.ހhCODA`)6LB@{&BG~D|RA㺌ƅ /Kb1r ἤWc X)E46'@ޫzfJgŹ:]/kQOtсb Y<ݥZZD'Ha<0&pRK+Jʏbf[+>+U
l}e}_rz_п6- ^.!9
.iH3e+nDZ˯Kr{GQ`.
M3hY:kD
}z@u :{O+x&/Tjd̝Sߜ 6Ӧ> _':cG D)b{˅>Mg#Z>g=D -N:W+
8֕J`(( wIWA$t -M .;jOɜ+ACsX\Jj8-$q&o-tTB, C< Pg:ALkYfϐ|$*N=m37Yqj~hkkJjEgxA#w~U/{N0QjI'.*4 0=rLJp f
%S}V>sV`y{[u]\Ty.y푾zJ XnPGpAŵk!~ opM&N~Wf+ѰA]@:8 9HuQI
]n8|_ŤWs'"'
D3hZTT#Σ
4`RZyfu- t6r
fXꂾet?.o톔 䅤E
iDk?BߎG= |<-@h -_=^D:m3)aA{" 6k^߬_04SۑʍE`MEo "C"
Nuqu|ac X#I5n-Ih)W5RӁMml?yH ǾR ]t]R`#ҵ漗IBcK~i@13(xXT&L0 "P JjFmx\̰zbV^ufv>Fpd#mG{T,l?TF,{u)?RɖR'Z|b&{? \
=HrO bȦUt-!%9X?P&=
V垩oP9S b0hp[}d%HjӬK ۑʂLlYY vH~%Ws6ku);iJrRBኽ*G :2ꩬ~4fg+3~O&03E D(WsٍK!w:zc *6\t ,U}eœ jJ&2Uu);3vvEG& Vם0%r\ /0QB)}4ߗB by+2Mi']Ҽ7 J$.DYwugupD;ˏ}j l
\&l:f0 ,Z]yƷ ]}H /e>4e,|{b24C{JI
Ra7Yy0b-0 m; )z}[B 6Gʚx= ,A^פ,uwacldVE៑ؔXN 5J϶ + 93#G]\Bw( v y5|40 go1?V6n(e UsЉYYf{}SFdo;.5£e6i nx j'|o
A :d* }vbhyTZ")#[/* V}
#ðjBl%kvb~TA!bsTYʚ/rfV7RoF%"]"-#( t|bsy_ ~3
@(X`tw:Q ZTqߚz 5WYѽ$Vۜ{VK"|4j0io Vi 7۩NdLE)>QfXli䴩U 2j41'8`Lw;!a r&ux) ҨRzcxJ[|6 #IH
3 oM;j=e ~:D*MZq#i>jU";R&!$dҳ:?z!LB$ 2(_uG a8mPMمi>@&,kz6Q{;Bk%`56 b!|8 97%4H Q6|7&&·K6zh v{oYky~?z
#91M9HR-,.`=W>;ë0V<
֟2-t(.IU,`ԟ?*11@5~L)%0D [_qY'oɀpDW:pZN Q R>,#a ~#djjk|a"K] vRLٺjR,~T@I"
ee莎U^?uκ^ uT_4I pu"P U,'7fwe+^=$lBFj}A3{ bK,gN<**i07 2ʀ/&rqr$} ˸]%A|,Fbθ[֟;BT. _5?sd+v37僓-z .q,A,(\;" eTi5oxO!ّ;tDڷQP貗|² av95hawEVشz)%fWfyd ǯS YBM>tVyOiB
`v @k:AJcQ?5xY/> Geo> l P< ވ)$ZK\'%'.A uZ֞^N~ӖgfpA'ep f!ۿ j%6Rr7
P*PKsc"(g"<k ?/y.pwC?(?@n^愳eo;!Ɍ-c|[)n<:ن-کiGd9 O,W6ѽ6+`x`&Պ;3ҢqգYR_ 1;c
A|m3
q` F2OwLӰH(]X/5Z# ,*,qm=ն^,Ao |0Г-}5~? Y&#WVBlAmXgDfb.*j~c-<$F=Zdk<[ ;hC?0n VdV`"#J,\v1.د:ZzSF9k,Yh@{ 2 ns4c[V2 gh [f%j^(U}*]#rF$7J,ն` XArhH㫌MgN}@:Q8TkϳģCaRE3tu{Qǟ,MeO!a9j櫜I1VTaj|NDOeZv|'֭Hb$/?Nܻ
Pb0į#HڻCg߿>pk]On9t50:]EF0~jT` HXrUk`[g@시}%Nr3۲0 >#ᜉf#qK==YiP zQ x+zCou ?ߝ
x@OLFIVS2jSS9IW ?Bn2B OǪ~57]eW:;l .b٩/p[vĚMۋ1rZG|c+2Ƣ\tDD :y*:IXHYQTJ&Uӌimb&}7y[0?#(`}a2y'_~-찙ח%@DD|>n"@P/N zXʩxmܶ]秀$#> {>q6\Z0#A}|EuYad6Hs
[ qW# 2V[<0 % S{ǘyՉOSm` gW:;WQ2c!Vȇx>@U-b@g B)93n=`}@T W:tff|IPo(XXQZ }52&B͚ses h"fY@/ᙦKPt9F٪
A5>>Fm9
a< )ljq= p*})ɋIi<#`sTj۸}]sz= EuvSki/pU=xQ= KaeSE-;#t\P^dF:~xߤZN)ƺT{]O]( DYm=E&MOuq"!bIlDڞŪJ66,lI# BivH$c#;yUմc-5iX1 rF
Hi7}![t:P} ƁL8s_U5KRyBE T9EQט؍.KHPh ><GрPjZdY+ţVie'QZM͵b-z%ؓC A ҆%Rf 1ppAē ם6G QUx*Xz|%p0 aȝ<[u&9݇E&;2#GEs2=QC|٦]G'CJ\sW\}G6@e5k\4+SkSFI tT1+ (CvA1^%=T80yFujBAC ԶYHTP)< ӗ@_{ =9ZݜHfbߪ SGW
'Q$i/Px ۲~>&⑇*OR'(ψC)Q`au Qq| v- ,,s9?@kMYcq#HB?C(ts* xÉXV͛g b e`$x|;#eYhmAB9 h9sʃѱ][q2C(0|H;Kxb9J^ RC~vrT_=+cgPW~܄Dς':Ƙ#͔13.` \9MUU۰! 0y$h[DϚ+\Qkfbal|Ez$`_5=cP7:[%tAL툆mL
K&4cQ7BkGI`D,tXMDC>1Km=ᕘO!Thsiճ ^5#S!znzear\Вodsk3dQOKGb6qeYy$aK$|۴CR\9]$iKsa獸`x
p\bA1N][1F
o9APׯ0ßqFۭ3|ѻ8\;fVt5jɮ__K'6ȓ8P4F+jXʁ evnWOKIQFd!5&CÍFr#3%eJz3nɆgv]"1Yv{ IY6+ .X Z<>{z[wX-̚{ -"3*?ЫU:3O'zvmľ[/r 5^b}
)B ߝCXL, JO>v=ZN F Y`Y:ً7ml
Mea31Vcr ԯlT[AoGYOX8NviMV,%0΅ u``oƧ @$}${`OvSHn!h]Lxupѽ!~ S.ޔ`uVĔ*^g-z?'iQL
E 8TcjZF4ӮG;0 [8S$!بAk]ơ>I>KF0h&^A "_(,߽: /5l͞x 5){(0Օ5<`BD^-ϳ՛B &C .ѽDkJk1e/`&d5]y^ס "gI
J
/fiJSfcg-t(=H$
ڵ5
:/w$ww634P{4LV4˼hWvg$D'uC4I~2s]>*%v/Qxs'1%h|D'cw+
\"zOBK -&Gt@p=[9$^1k ?nddIE[4(Jךq~<&egSvy:8؞ҌWAcύ~W[ 2a̙ cx5n ^0iY͖aHºIYU \WE>l;2ҟ ifytOkTY 4"0'A!5aZ &eYo];Y(:@3q.n5o]#lHS t;A11k@Ùw}O1R݁%gSmaDqv~ oΥhVkv x6%nV#((1.ݞWBК]Ԧ34Ke@99מ<^,QPn$DjmAr;ء ?aK9wpAoۓlXQ6| P
7-Gq'o}W\j<,~OEC
[x|PB4q/nk'.'ZZaX*tA7.zD\`A)rR=
$aHw<gNy߇eߕQSkwi9#>l|KΌ2qrVE|Mw ogx՝p/XkMq~ m]& o^9 lFS)%ÏF*e?ETCmMԣpf /w A;bt ,ƗR3ׅ^嚶ubEy3(s籑FZ>b\,:zr ݏPf
PhBW6i"Ik UnRAS NyR2 -.wYZg@hZ
_xP?ꬋ(4*iNwV t>࣌
%upm>q iOKNtf YS^E^ͻʧ#9c=R{
W| @| Һ
V_7Iv*J ^/t5 nZ%:
J߄Z+
otp]L+_ZQU.QG}j83P44K{qQ!~[XLxu_@3D!lof;w8"Y#xq@? o8'))ǪSz.,4^nnZ)d _f)= VUPy̟ۡxȻ q+piG-wpz Ush>k ϧu ~17~ӷ$ - 47<*߮c,Ge/ tEOyMGFiYVTvʠ5=Wցu,Nü$=1
Z0g^40ғQѱQ%~5[%3G'>(ˬ
k?ajƨ >喜WBv z2DѼ3sdJv*9O[ #$߃`JVw=xʙneS*5wg i8uPl-FB ;@@Ĭp<gNmFֿnG&_D6`7y0 ^uY .54p m<)cx9W[QaR]T|Z
Pv ;%_±ʽlDu hZ$3Hp<(ֵ]9:-[1I:4#
L>}/_C6 M8LO EQn-u\Jg-{%;%`aJf\g?/~$[p@NySQ
YBK8th K{Z 6 U m
f߂ yB * ^M$=
҂^wR6E`WOᵿ7fax[>>d:0 z/WNCu{f{jgMoʷ ?wC ;8x(yS<`:ࢁdC $ГF*?(Kۀ4ɰ~A IzL gmzEQyO x [l0~ (L6 {xOxڱ{ij2Tc.ɑpF8$ Ȼ{;3̾o[Isq_ԉ Knu%^
M\[w}/BU9v3-Z944duМ
>[-
W&LF ?hbM1y4%&bīU_zNavA.wB-2d !֫ )D.
۸Y $.3o连8-Dي8Wx3DEJ Ls+s\;z JV{ Gd
հ` }>Эax$50xnQ^BDp'*ʠ,u`?t3މzzxE8ˤ`бҊD)Z r"[yu-n{*07
1opčɌ ko.P'Gǫ5cs%EZS3 =K5W$RLi`mFm{H HeU%ۢ8B{͘wbQB>s% /~XiYzָs= <2"A
BU#]*"^n os5:!g~. 4JRSX-Cj8*?5tYA3?X,k#}Qt^#Y
SF衚
{f +?[5ㅋ4C BK (7 ; r٦@Y]*B*L<]wΨџTJZo_vbp ДFV3pDgvq3OA6od`g} x/M&$] ,kވkh |8z~ :Are"L'e% q}Mɭ4G fH06qbF} wL&sߝxrƤ8{Lk찈gԷu٢4.K>(0UPtfNr.(H
eTuy5Az!,@9K^:
0Nmק˴t[,Vu!_[} u}W^l=u |ammAE< b̗Tk0W 2;2)Ws^ m|'.oY1K >g'0fh:MԒ4)]'|LnQu! W'v$$-"xW^d" `1 ԍ3|bG¢4&?(A+MFKqMDQ @! { ˵dlyg۷ Af 8tV ˺Xg%`9]5u4 MP0$|I9tK -|uᥛ[ D"J@e)H -H7x؋jv#Մ8_F!{-N!c@Q h
yS#3+yi͠FW-'2g263bV먜-wJLr*:;v"'Q*;%/!G{^n,Uk:ctj ]v e8N\8 77flcN742I)HL fNirfb0"x@tb2w !YhVMD3NR4 _j"xK9^Ii-!"3KhsRp 6G%[!j;xna/kI[ǰ"YpFrHS$%dlZz^AйjmaP1 <&ZvB
}1Q(%YT"Mg({Z|_+)LĶ엞x.9qZ:GbRTќa^
Sl*,/Z1}ߞ[Q.M3XC(eA#~!+Cch1{ Q
Qʐd4J v~;XփJ dz˥Q}:v;xv.RswT➄v tvԓ!P"!1g ||cw
CF\r_, M]gJ8 7OfQ:T }
U8R
< Ɯx-R^\ $y\6nN! Ъ;Ǩ<{pX& ix[3}u~2{j-Y1o$ɛWB`te>V m
zk9˫&zٗtz&X;.ͽ :(tKH**ql`4"W>GvKIe(W֖&/94l MQL
Tp ^ArSBO"9 %
31Q -}'*@EĨS@C))ӠͧXDjM >!")NӐx12yE%ǡ@U8 I[{X0Kp1f"3tj/$+>"3wkmzt%plqVJ69-A\p # Zc cd4j6Y \%v2# dIE4ŗE&Xzpt ܪ i&V /ntq
,n u5S0-AnF/w<\Z'ǁ.Aڇ0:p=!aap6DlՐd P2&
Ge-
SQV8r聉ʰX]w4{T< 8 3* DXC\q]?,D(Q͞,9M> 5 mNk1ҜIBw > Z( r t#s}%KfbץP9_?Pwܩe-bA~n> 娡b}"Zy.$sqϳ=Y85 ] Ga lrffxוVܿ_RPr*tfȌ[Ũaƀ> Tc $5
Nue9Loe>-==uxIvq+KQay Ďz7ZyJ
n}
GGf)? w xa#a[81
mZIHvLPosJlQ{}.0sqNҥ ﴐ"^MZ&u YX:5<נx](}<boN9vCmdd %Шڬ5~7nyGJ4% !C#P@^.kI'
.WyVQuPFИ} `B!5^
,0 ^ _d6a;K]cGZ1T餽WE z4^d[K%'CQt<Ǧ5b o&{xvs2 <+[vOGmbnjH i60)ۂ(bj`Xu+rcM=q NXYI]95z T,˸֚/zF%uwTj10Q5Ri[}wk_[-? Eyā`P< iQpksꍷ?[,ʸi^Ip# YnTUB2hB#]t P̞ GJ aW%뒁[܆a FF_ u)Juc]0a]Iϱwዜ<
UH') tlLk!Ų(s_-졺#lhT S$h`w7~||
?"Xؙkpڿ3m^ ԤU!dӃ{
;*Pݿ\4z?8G\k!30VƸ/TZ^JH͉(~BQ-VX&9[km*dҕi iLK?1e^Q\^
-b:.Rz+ ;?O^ cC
{`(fFyN'$D vB}ࢨ%'Mݺ!\v I,.V^zJ!9 < M\?/Uy?] z$i6}ǔsWNH %uXD D |I-ԥa.Wr=|&7 ewIQX
2I'o p(:w $[ZyC֚[CUy#/J+da8g[&JDC-A~U$BEtt 4Eh٥=y縞Ħ@c+W5~pQݘ/lW˙r= 2*H$*(tFêBM[9o9
GRWʴOm:ŏ -YH3j-I|K 0&7Z! qP0V+ u҅[
)C9f pJɨd}q
WKth k~.!NF]A6AC%-"*Ujw1?9 Hb2R:汒q!HVSHj"e ><恗3x]k#QŎ Q\kB(9{ 1.eV!jUJC1te%ҩIF123bР/%Zmz$oh 8'<"WQ-h+cd:uGKHҐf %~0rÎ7t#\U4A7/( w 1LF*6ԗ?dG|Mİ4 azNczC Ek6@;~s4 .,,LW}#į{)d9/{3QBhm͒o7
O5C/8V,zl'(9*wà)sݖo^~ qQ TJXї59(qT*=] lixm:[Ū a=uheo":T|7aFv䱦z 6[]{t
b WUj͜L+Fo; QcP1wFڞw۠>x9%BS};xW -+.g\ܤltsfZ鳸H-۔N-;+[]X^YX!4xìp5~ꖊ\|0mgz*Av2fP/RF; .nnI⦑⭀vR>b j=d) ͡:n}1ELۑ3$EehɇmDO*lN!ӡD<$pSdx -xCD#ـ-}L 1'wMS s%le8a½Y/v6s]8Cr<$:2L)m=s WecFǽ 3QJ_wjq/?cU[eJe1H@dN 5Z1h;ģZSVIsL7C0(åQy)~LpsI(n)A[|27RK{ #0u:⧛As}5Wh> AP`HSzf z,?7 G}:*HP5LuBa
!wٌ:y!)oo&U/udAa<wӆ IyEM;Oomoj] UHu}v210:x8|0grZ?#B%U-RgV$Kw) 3
`l4%tC8,Қ?QЪ pB l o
v`
^1[9Nx<@a/)L{ GU5/Y^{{$h `*hOSFe8`% ^cy4SEB?<Sς?ԗ=fFBQֺr!@95HO}D/R{m&inN&Âb0eSpMQz'xY=8X$ӰFȃ*^!_[=so}D'jҙo T}[[RJ:69hA{N/z?^k4aaL>+W iHD%
{E H-0@EN{g62V\2T?'r$`lv??6yޡofNs|M*B:ڰ4 % g.f X`KDkxl "Av?'ᡚ7ҝuTH <, 'w(lsy 3mJH0f:Y*$بu vq+D[\R+5$'[D!*辗{4-XznJA[]SF7,pٻ$
0I@5$ ^' Wa 귳ޭOM/LMb `;'|0SDzy5]zI뙑)BPS>qO# Iuqb|
E!n@ŕI6ujQ?, $DD 2$*ݮ;
{:(͔hq8t>S U}5yWV
Mn9KaY@YT#aA˾Dz JfB^\ .,A8!Lpc܂J)V/qn]>@
v݁cmyhVwFZJzRrEF֙
gwJ}Tgeˠ1`y
D
ߊ( ~Ai\p:wwc
Xo3kpA2UY .}=C/PЯiG.mňnq"*-ב55tjyD +FS Jzpt)/ p$/ihQ kߠU=.A,(6
B<#Fh'
B K%i|3598E"j\-=-ܦSVLJTvTr֟c|[Aԍ &n~#nx0!^rq8rK3/jϥ0咻!*z`"CKTPaq1-_eVȇj°B ΐojL f=MwwT~[dW0Iq5RG҄z(ɖU2ؼH?6 g |ʧ_(jD`u-mI۔ ж \̲e BFlW JI c]6Ce^2 -ʎ 5ۆS}=0VW2\llPr , .2
nI8{[K 4 D o=>C\ X^QSc+3]J #|0::jNZڅY+hzȔ0-:+-l+s #쏛l4c%eة `?W.#+i2^F'-nbmRJ
(6 3_Ӟ |sl"cO$9 =Tv `c^M *rVc0E8dg
g B*x@xZLa ~V\: @*_pbQ 1DlH>H<} vp7Z D̥tZG> J.anX]%MTq`ܬ?yUpqMP"Br!19ٮT MOO]ZlN&ڏ7 pK'L uE6 C7RKOH +is@mR5d4cb=|<&3 f .?S.]ԒFvd`ez>jfAIbs jNuGX,A
귻Q`4¬YmhlX!wecN7]!RVW{:aLD`@i'Du$"y O '}Q}ZOH)0 ) O^j'S0
qUDDzY^6$;#)tO,.rXD-oZ۟\'J-{?_:#Fr/ҏSʰ&{]KkX G
dY'
M ZzO='g
x+g(S >09gwP]d ȶW v(êb|>-l.%@Kf f
ΗOjrs"q Ͳ$x(hh\@I|2]* O}, <: H(˜C,吭Nm
R:{p eIC=c?9NRnnL{9!!SC
--u'MU:A8) [cp`bI8(\,..+ .*ǧ3i($Ct
s"*|$s.ĘOG\~C%C")3
EYTmI,.^zhK(ΩdVNR
}aWuV
c7)%J?^Of4Og ?Dx7%zn "p]b²6Dn'\VAP@cGNq`yѮsF(f{
LR}rEYl4Mb7
Ι]#~< 63dc
͏v ZI*Uqbj]'_Fb
l'š",jz 6cLD[ - 6e`Eq ܨ5b^X د:'9BTfK0t9 ,lhƑAʲˡH|Kz1F\F6É`pG* ~5SEbF=/ԖbM\ņ y ƥܖ!xSbXfoHyZHmcuQryor>:WcAJnphb:٪nT~n) Ūri2A$x@ Kuˉ=N-s/8M6^2OFAf3ޜ 'd|]ǜaJjt*l( <
Ej] ܻ(6HLH'ZYr z>vT!& KҨ$c/[a3GvCj%[_K9.-DS^+,>< xsWA]Sĵn2@ Y~RJpEcoGd-
W?m)PM8\7YpVKl\%CTZ.JEdBITAvOG =1@yaNU 敼m@f_= 5ݬtsKGwoX@ sG* &sв(EhUptuÌXRm6Q90\L Skx?ё58(vjk8lψ5Bj@&!"zOJG-2ϒ8s-( ?=7LXYp0 q 47w٫w?,,
G T
Јˡ#Ko
X[b]Te KWE밬' 1<% %qݘp'k` N#= Yp/V3coY54ֲ),X;xؓˀ- ;R?Qp HWy*d-Im0yBG9Zr"i? =P |_PSxL)&P2a0% !BiY{`$\{G S\:B~p$B:a뀏^,k,vԠ❃ @,֑0n~)x Y=RW=^;HH]RIi;
!VCRmمU2<=!$/,@J)\Fh{͵`?tU
ý~2Ua-k OM7 q}ίo;;ݒDEodԞSR%(_֡hч'5on֔?*
n.ۅ[YFF2NMɇ
>[s\!GfKƧ{>[w@R3KR*5ji)KRc 3g'ih LJJXm'7g=ݿ-ļ
do}'J
91'XPEm fk8ԮI/;)&+m NHfL_`Hxk%P;L<(3( zű¼i(zK&Yǚ-y+0YQPUnWߊ[l\HN dMf#~RGѶ$ToE<5SdTūe[p x'5J
&, `@8@OԁBtAM]l[!\FcDg/p Vi./k|D*QT !oh19U?ȷdN K6QP\qD.G}҆yaY$i)I|јV?o}oҀm$VqBya5S4괦#xhZ&9$0By'R݄=4s(pv@NVJ]F:EIv'w^
}Hǐޒz/qӯ5$DzcfN0ᔈ6czp3vB-u3LFX rk$ݍĒ)C9iUßOkD]֍rZv}N0I/G0D o&jJEV\$8Ȼ҈ :]ca,s,l<260G$*^S8/7J",i͒p(ЄL
.*L_Ay͝K
甬G3tMUH7M{NgʞR+\ 0<T,ʵ"RGM"H 9$+M38 n.]tx{={Ij` .-'xe9d;Z:YRJVT/mX^tpK ͐-._q8YU'rn i;1[(d@?NMI&g$wįv)ë*V j_|+s[gE]36|!s_nX~nZ]|j|҆t@6Wyn h*MxCU*>>;ri_NNԗ 1TnbVK!#gYr.l'd!5Y20X} hGqc{ܿãr"?e7OߴKsAmsϤ#\PaPl%{A^,gJ r܊8 K $6L[h;Pp}鱵eFġbpW:#0Q=&>ऺNF7
ؼ_}Y-~z@ A5'2c4 &sw؈WEw~8n|c(Ҷ@aޭt/Nk2|/Gd֢sD,NJ#-'X
n yL~oiĭ <yq, n}? OUT`aGj)F ek.]ִF_b> .KЛ| yGV̕ёf Yu{ 7 t"3vu8ご>(fvIw81*, BmHL ֺ&K
T6\R6_Yo>l ǽW`$+t}niǪ@##<(ę0S
/u2I\C8cfnG0w 8
G *ӫvp'c^KN=~ >(" L3zA$M=RZ|HbLcq6$wUJX]Պ3dDV)(#ioy6Ph
.xp3ջXyqi@+KĽ
%Z7"6@ga:w5Y562 /(s"z1`Fx" Ub vgeyD9_
U*N pٵ EB}p x
'cp6|5Pگ"BSk<ī őh
v~ `yŷ\J
>f 4) W]RWa٭ŕyYsXwH^BY$0ٖI&Q_P
uF >y436_v3*gÍZV\1Qh$kr\]'(&{ԉ{ґ7i uE' :G(g!#®msJTU%{FZ@ 0 ֹ*"0Z,ÒaïٗRD~\Y T[ C
eH;^zeH8-P%"
sVr9M`$7%Ghfgg]E69YF(>R] d
.d+LF#6,&dRnKu<xwb2#ă7m4*2V4"Y)/6F*}\y}dpqf)'iRp e=)p(Uث(x:5iٗOsb RASq4s=kk$E3 Q)D ǎ+.[_% 4c (;CrthEkB~rKh;<uy.@3/whc[k|Ԃz`#?rTJ؍Kwa7iw!
naP Zj {h7,#}oiҹ:3ǯ^4&/۾@!9 38SDĹ
)p
iO_ft;j|X4(XC 7u
X.y'P##kشio;b} ?zu 4P"6
+u@aF+3C _NU[e5/B$0zL7+g 9e@H gx#R%(lL2W~8Zt)FDfs%Twb V)Bc+Mh*YfJR! C;,zq\{ʐIѽ?LsP<ϭ `HʭI)2䥝1Kq:KyQ
p (D2$Vr)/+˘_*@/_Ɏg6hJ0o dL}(,?'0COgyvF5=af<|"l O)S]LAM6e1.6|85 'jH '*'O>o,IԸ2b]PZH{Vmt( qI߉廃$5MUN ueWg7.x^1
qW.J]ӉOgobn${> '0A8%cC"K_b :H~|@v|M ɚ; 4(@=Fr[_ameVh~EF F/ȡ6ͼr{;~q@M :uݝCml_=eT5|v0 }U'K\7+_? ',Jer K75?ꐾ-/?~ga]i8fFV'X=PGn rܽOLUaW!'ʛy=0jbVT#i-VmUv%.hNֲZS
C(4>;&Z=t^ @鰖d'Օ¡@|ʑrPr`ߍ+F} ;. M03/rl U(z@Xd`YY "żc:NBSQϠ"~Ț0r) k 'q@A?HpPA\S&v7ec۞u5=m!Q6ZL ; \1!/9d^e };yZ֢;xK K輿̩j4vek6G'Џ`IoѴd
" HKEYM
x 1i`QW fG\D^ ",_>*ukØ@} ^㿭2Q>|js hԲo$1U"G]2 _Rc'sN^\sL/iquR}"X!l:^j[7 `9sۙur耎|OcIqxxpVũM68n2NSJʾXY
Yit
aׅ+ Q NdL|9i pCv q|j$ߨ{Kt4O>۬~M`2kTm[ٞ Fr/ȓ@+H0 44jW퍤)S-
k÷*-nO .# |,/[Cp4E ej9(
<bWD8! L%(*`u=MՇi7s(EYRU~hy'rIdh,vBt^`
Gjs}ZsMԬyAf1Hh@u4&^2;.DVٔ6CC(}e<گ a, |o:Q#: _J6Br=*뺷 AJ0:#r[6E!ô@ cV{=Wmh?tywnCL]>ɑLv^A wvJ :zBwb[I3+\+FA NxucPHy577u\$㇙ bkIto~7Muw'+ͥx9LHnB%m C,&rcj/r\9GaGHKk+{>Eچy?* ٷ:26rτ},hgi^þ/TN ~ As[-;*%= sm\ a^+ Vt3>}bHՋx[N))s+^W73F`[xٿ4`M7,g~0[-n%peYؙj)ǹTMRlGVw(FfظE R N2 DRG?\4S6,8 +s+L8XjVs?Jv
rk1
qĮ(;2?ďw6lKGbuJxUwkW\\1[j4J P}wIhvn;}2&2l[!0ѻZ?9{EKê?/
^n,3oMdzVqSB{\Ȩ8hYL5OlSo b$O#֪jKi[>˲^ xPi\*.0Q7xz|Z
jNd -{Ãr2 j!?$ߊ ?@ߔO~2 <$cBmԐ"M!\BP9+J>[RDI\ܽ F46ˍ *K_ Xv'qTQ,Nݤ'aT4ĥzqZ)}vӢ<`V-{%#Ј_'G3Q틆"P ! KZʞ,wi+I tC8N=-bn%Rb"
DEFOmcGompt%+ =Fn+}`UyrDHG~BcƶA4f+J3 -q JT>"$;ai
9h6!()5yXIGto/&*S;. u%7&Ip,lA5܍0p9*Fpސp!x-2S<>le8TEٰ?#:_$/D[ a.T+&S.PJ"lrɛ-?i Q2}]?
>hȶwpkXSvWܶYɁ|=>tr[t(Dt [^M8/ 9sV-tZ.4.9IdiNO o/;"DHcXWVN4`$/G(]pEaSUcMҘHdƿyjU >)4Ƃ!J 8FR:hv/Ps\T9zOv[q̫X頤KN'AhWر tdG [YkA6TRRtjN>qvҿx? ^8
\IeԳa0K.
2齻knt\h } p!g@ q(FJՀ֭ne>f[.ījXkxZ+S+仮<&$rĹ>9ү*Fa1Mi .҄-8s6we3̷45!DNڒyKsm&
$ + rd p4~ɌjKLqx~Bo+6vF7o -4+)}of)QU 7
9]AX1&ZyTtU0qU YPKւHzWJ`y134@Diۡ4rPI>~ aBɡ~x4j[ܘʶ\p%Bi
d @eߤ
KJo-(M#ixY2A ްSsNn9Lܝ.XM\h9Bp_q1+핽+yDbo BY|f1٫{<4Vm (tdroB=afptɸ, 0H'hYLZMmۦMįteM0Gj'gY8QJ0=k:8di#'Y
0 Q O"7Ri|ū; 趎)Ql_Y%nj?w.ZIЄ, C-=StasbH<3FL o!U5 I_U !f(>Tsf>Xk
W7.)}N*alDXpm F1*.LI{C m,ac6?H17Urd*2"{C6={YӉՖ_HkخuP7 l7ҧU]q
gmH0UWSx K W )lXEe Υ+sDo(*|j-VL{.%FzLd\&y,2x c m=Ӗ=]ZfdԇS%gX@ ҈?*Vj)[x`3Y-+w̶Bin͗! yb&9>ߌ*8[2l<23dYT5syDžYnۃ%R *1>7ʬ
bRcYtI2/[B/:st F ۸d7
9zWM+]ճcFٔоQ)8LA8Ï [q=rn{gFMmoOX7EjrܠFq]Uj!$&m8\7s=D6 Mem
?l
gAy< XUts ]ҍ_
};j3 z:f{10\zBo k^ЪʻZ I2%M}tqlQᾳ+'hWu&E>PZ=|#aØ_Q#~ Cyu (&y/ZA}LI!kMD, 'OYN^ĦҦْ{jbMLPq _Ⴅj{\rt d#%e6MLwJsVs* Ө
l=ZƇl[~_2dcJ ن`~Zu_Qiy!& %8; (^-Z-R! ]Gyh8m-bOr
!#a?4m!ϹzzTj{.'i[WI*<T{UwJv:aN䀁e7aUZI^F#Ԏw9Ynv|3em
ҙ4GaEށE0]5CUUMb.[nyHϰAuT;+ vOЪZ fHVyxXwSMguRbuLMYĽ7: do,4j$I]^}c Z+*5?(Zs%kb&Ohۋe3? a "Y ?E %kum
eaOTj^dp]Og7"1ЭE ͔7t@H=@rJࢇ9֠Eˢ)85HG 3^BCDYզJo1}=$ }
,u"_UǂV<*4$ۿwޤA@@Bʷ]~ \Mп<
Bu Ao|IoҾ||ڿ)QkA;-J=d*/6KT ~
'Xuk)y|+սyW)*C#0
ׅ[u*% cb \@`xsL/%&7j[M3͵&ª5f5,̗g ZU).6 5"BS灢zuu|>#dOG5ATceĔJ!47+W&V Atӊ= ݢd2l;[/Yn
2:W&#gfK2
[a!lcZmWXb z:}Rs ٌfir2ױۢ';'߭; 3%ѬR+LǃrJ㘰}Se ]_IdsPzp3x8f=nff)$]V6CP7~坝۵{ Q HX-F7W%r ?0eSY;95TqmdP)h
t+&fp/`
0ysP32{> %'ʟgv%YenZX&[2me5HFgs;>q&)3a J߫Ѳ}^bLT3M`:#-NH(v>Aː6i mG9WVMG7D@Nsh)R3}X+s0j%cᾗ
f;*m(~ YDwy.(DZ;QV
Zo\4?n;$ /4 5s!`QYఘ7 (9YO6ByxE qUi@xqUʾ @h u@ug~Vc3j+2 ,۠ X3ﳩ.TRyeF%7DG_+RV Q*9DZ)-`WrzRhDG:3 ΐieEc=ޓ33?Ag&6ضo'R,[HL1JwD9+xp%Syꚟk XK ^OֲU'iGJWU}U qݔA]^¯2CIc;?B'lNmSy\u|*y_۬ 5eu 0rRwNQ\"X4cT5&G~ !r.Ƣ| 2;`;q_ 2-!hdB$9S[?v9kǀֶPo. Vs]YAϽ0Rۊ'I)S/ܟ yhB : d(jDC3zѝ;ًk!cET:^ CG4t* 4Q7IM9)ea&np
YqKlEuz|
zh+>ۙ'R9!ꇨ-vO1ɜT)W]ٗy浻`S_=M87FY0Q씭o Lur+ʣ*mVktRdgoa31q֮ޖfZO :*Ҟd,go7rT{֫y,YWBpVϚau8kn~urî<:~GJ@dCir{F)0#*?ּ#ip_:,
Z\o-ߦuCM7ҁ;3m œ od
T.*rY`j F ](o: Wvs*⇄P4w-x}tV,߁Ex1qcXы:Sm?cks/-zkdL "gEt٣Hfi~;ִSd~( ,_ӛƓϼOoۀ{&lP(:ߞgy(&Oqm oτ oMbHKAԒ iw%8^M{ d U:rItۜxf {sط᪙n8gj ݖK-lO_ %$+'bm8 J 1
z ({&(
~|'KFUGnw*w4KM; n&5 )(! gETCW!b-:k؟/98K/0rԦ*n2hbY_z>|)D]NHqB9[ȝ?8T)G:s0Ϋs? 88 WqP:GT{yO)rm(G<:g7IV %t!jءcM4w,4ϾIUg+7XLtU>t.SpAŒW}a@pӜ![jws| :Fnr(%
J~a Ir=z_*#0 cM ֏m4U-8`"
!0 0. މctӡwY@_lN.JȨV., Jq14yq qzM#g{0s,U5O<9d( U{>I~[w /Tm;y36"ey3H [ ,ԍHK
%*"c}e_ HYz uOzrXTsaҢ͢rs[f|l)ɱ Q`z&|Q%jKf ĜR]5?잼+jEUI{"d dn{>R0-" ~ &`k8~w)c٤#*o%
:~$U+N 6zsX2D
&,\BCU(YytjWC AUltoI@|
3 {&0V lp갼gsW>zwB];] צա.:xg VRzx2B+G` Ц52w)Y^!OV_/iG+:y0M2Y}qk5`c+Q$đkO&fՓhGê,U.qs lXAtق琻:h"iC[{uie ,^7Qv?nT=IP' *|EquOj Nה߇J7ǘsJTJGrx1|' Kune u |H59+vK* SYHTQ/8wVžl^mү"*'F
's+>*Wp\XSf whZ070۔%}TSAOcbԌIB|o -Ldֱ 9ڪ^B9*:
GI
!͆|Q /x|NG# gT4TV^99U 眠 son.^uCiS`#0oHb@ZAd 4ڽWYz;٤Cܷ/C:y;Av,9>N]bA?$q_r4D_3ȣ?BaG
31|{JHim+!Y>.Ķd[~n>ӑ] U~ZHM^t[RHLkK7D3dL9"=
.ZBL>2'KVw@PU|㬀Ayi .8!X[T~;dYPi~C(=`$>)/pu G.7˼֫s> P;R7~6{?gS淲mI^]k5g}GӵTrfVqj*,ܪLj[Tǐ9
3 4
=\Q^mVZFC$
eEv>٬SM%<FL`GJHp$"JP X4ha\E7}L"/Zo- 7#F[f-Q>~RT߸ը *XSg.jx >B?4{sugAX>ୱz7Ba O?v8%{{\BI/=&YEϺ+ePjظCSgCUR2׃DmZn/.wyV/,Đ cH6 & NY__Ǿ"r7 xtWF#s ~Lg%=&?$=wT^) J{[6M3II¶}`
#'~6BC\CZ6 I;y0M!n ^:BdӕF1"2N۰xVdf p 5I i&*X ZzV @00K0n74Y1 vl{0\LCV] 0W2JlY"J@Qc/̲';h}u&i'vzmApZeyk}?_(%9@U=7}:q:5a|j1>4fb
7p! #7;~4Z ~c
RSϦ i0~wኳm!83aӹ
w;ٻ15M}uMku >'}9$R9#=nԎD . 5%EA pjDΆA
~d"AMZT 2js7\$ SgRCݎ\#&gS4^4ix!l<Ӄ/:y .Rjd AQ@;D W {V)LN%U ^ G1 pCF~gj bj <T#1!1k6A#
1yyFmm@M2JDG2\ugYsQG&u#aGvnIWзЈdKyeq@3n S=F7+j(3Տ_Y ܗk9aB>. ׆`823:U`.qt)-_ʷB;'E)lؚ
`D3
P*;nvG* %-4W[F/f t OGmۛ&{X
δjҚd= )
n LFFeԻJf}`$p2mE`lBW,ɝ@gzE `uY ] ?zxcz-b[(c!5mS%,I"gq\Ho"fMd5&.0 +A1. f
04X/_ wjz!)HqFc&GJO/TcePUg ,0kܢB?%pvzh <#i|U-Uay$!;&,?XsYje|W?{mF.po;p7 P{SΔjy uE뉊h ,qL.>9xe/^1ik>LzCc8Ea&
03J,*]VZ v;,gܷ`ΛySUD#a*FFJ Q@O4'^>2=-Oo 4 n6< !:AELrET3ݡ@ɩ3^M{g)X ./r`cg)j? گP.K
iM#sx v/ u-=Eɻ\7'e
{eiʴ ꊛ沝0]j_Eh } g PVn{Ez A#Yo)wf@[ؓ-Gϔ1KBCtȆP`IBAHϙFxGk_)&*Gkb)komI*^Z Kkqf Q͑ <$&<ߐpm`xVGK{%aGU|/9>9׆¥L]|JU6Mj: 9d .H'(/A %#)p]ʲf\$Oi~ !:Ǝ3Itv ^'4,y.\=._|xNp[v5 }gz/ZlxmO/!s7PCÜcvS/'Q2z##in9hSy] e1Fj5;+tＷ4W{4j*k}Ӊ%IfwNu@ \NTU3b˄@~zVӦpBZ, Gk-VڪQl젪 :S=O]id'ܴK/~%.Dt!Yrm $k0(jQ8FpQNj06vsq6I1E, J`L]O]GZ {SzM\ͷPdǚ/W @rSըlߢ&8FA{QG.'dRZ0iPu\ yJ鑇 LhTqC-Pu" ZYGk[v2fx%x(&0fm M°[?[ѡ
hXܥMת[:t8K:Bސ,\G+? މwa; 3%x= 0 ee\$6i,Ѣ*rt9<+ `oODǗH n]ݴmJNp}RoA[SqVF;HZ䋡u ZiIQꁇ>;]4f9rh+JR
O}YUq-/D!i-J^>#&O
tZ.
[ J?R/Ð6?n<+Rx9ڬ@ԂDZ;4UnG@wP".^'ӺlyS{ "bغL[*rG.\`ѦWj-¾@u l2%]^y5ńM>A7NCq,
Wf^NvQMץ_җ;+^7!xS ++34惽_f j1$mVY5_ G y%QN뇙 [̮CT:uO秸;W Qr꒰>Ie} '[",!
lPc虛V M
^
a c]ñ]bB̥(j5?kLMh=m]t%mYCdt:Xzbu;Z&Ch$WH: clC-_#`<'A<.E5˿kwKa {dR#yw v`אǤ _} !,籬>1Oti>RdK~'Z˾b#}g7W/̈_튛5Ȯ >=TBEylM9xsǰM|(==1-8eXV*PeFg rs j-RY!0/Djs4gpsṇW3өt)hz *@?|>NLO WieD D:
s Y[Jmn'OI>Z2U}UQ_ 5 .w e:S8Y{ {P|kI:,3ŧA@e些v S5DH YTa7_W!;,`0FJ`jT"M56Z:Z/p:UUM]v _$_*,$aue/M 64* ~/VOGҗmh|_ ڼ
h] =;9nX)PYнMs"loi~莉F\fzB
ZL5_N=;CluN#_K,FPL
B"OTC藶8݈4 Q@9Gu>$DҏMLx" B6@%Fm4d%ݟh.t=9N0&# PyAż kI:yDz/C-I0 c 5jIsD5eI"1.P&)}\0 3jWp S`WOFͺ-nJ-ƍi
rA9|OYi\PMTKś!/~.֥!1LH$
D pq{4`qHSY߁&}_{ ?]d]])ωFYK<ӬTx/ bQ%i5wMf-n\z44gʺs i&eomp<4
e+W7dU;"Yz|.̅jT[a\j(z4;(d+߅KstAJlkf"jA9ƗFI
[@i}\B%o pJ9¿rY'rn] A3=
_ Vij!mH=UfG8/Ra`'h<ꃫuME@4T'^ㅅOpH'=9SKUW28{y!hŤɢ>Q#MG "aS"6FxfKM( 4\WlH!)/< %tPlYc+DUL+]>·IJGŹ"ČAlYZ '2f+!k4Y͈z >Ra G %* $$,f\ kt:YIY٧zG2o81CäC@3+rZr% ǥ ւO; RJDTmF ?>;(
z+ش+$ JQtRʛtC@yiS¯k8}\GP +cqF^bK_AG}hUVh,oʢJ]k e07d嘗 dgm)5$e""LlQo ey~?jCB'#Gz6Hvu59'~1R%T7ĥS'`j->@.@T'h*}vUZ^!L)*^ : pHxC ki
A"` c Bd |\w/x0u?) x %]˚_}Ȳ t9`,Gr9 db
Es$8<)&6X1Փ%1貲6m_cQ*@P!7_4a, .V~|:QbrݼZH9/el٩_xJYK;-y2qK
c*+ʇp. Mg \~7^\b91#Kuډˠtm۽D jCJo8i«D{p Z%[eb(ԥYvaKp׆kf.ҮKNo)1++RVszm;ȔV ?GaЇMl`NYq*3-S#Zaҷk6ad$#<8(.mAߺjrp㖹{D> Jj G,_s7'xR^
h2l2fDȿN'߃hW~N\t12$BaFmg A}
LTU1mTlʉ>dvŐqUQcH #V~1 ;ǤxX7t[YAt~ s 6Jv&PMn.ʥ"|𥂿09?
TT:eS+*(AlxZQNySO^kmD" Q i 5,+OQ_;,F&z- ~sx`M.tu =`-2bzgGl8:yJ&1b U'q&)=C*$Bg (ѻu*@$ XML E.2/tʁpe@75{{#VPQ]~.B ,͝+i5Y+F_|ҘLbrx6m8^D&{p} (զ`CWl?wC?/?+@ g)I0Y"
n^9h {S3huѧ@* qbJֻ~ {|6+Xt(uemLr
lŨ]vNWH\kpc)w x| 7ecn@
CqK#oHfa5# ^Zc/ѮPFR$lTP,7n3&Sw t(Ū$On8o$ڇSdh4j+ɖZ'>kVkdt h"}!Hy0P%Lr:w!l)DҺR g1x5xj
ïx!;) <_juZu,Y$tpB}`U i8
HzQ(˥;LY \ a/U:; qd0*̽Ü ȋtW[J߃\nۖ{
o<Ұ,TyI\ PNJۤF )Ös<> ; R%dzjQ]IDjRQh'.{",8 Zs $W<~%G({h_7k
th +
'FE]CS3@SٱNa :cLB 2Ҳ* @QS2W`Ư41ʚ 2-c!06meYmtʤ`;豕۫shD
3M6B&Y
z~&Fy_˕v3Y'k
mc,69aEv)U
3 :3nPU8k.qR ɟ0 MzYqTA@R F7 b|뤧7a<ۛv*1FGD+ ^7-cڒiGWPnZoLi Y`]9%,:۩jW
, ~ڸˇ _7$NCG*u_H14-$g/BOnR3 o p>+☆ dy?
m=ݕtdSƨ Vn0b2I;hփ_aZ`ӍJ D o7ِHuU+t}66$և.a^*,R2jpW#+ia&6V6Pe:.YDḅyo)O֠J
D' 4k{ <9 ;''7Z =ȮsAS{9d\ΛO !S4,{=.pn =Mu`;r!浲ɒ7!XDfco NR؈q!V?+F[`n|˷
Ԏ fy,{QyG*VyiX% YѰ3g dՌiApO4DV0FU#I4nvķF<)U/
)*{ByB6XF~ Jˁ!5h] "= o
ys oȩJג;:Z'N[
UG }1(- ;J|IT{lՈ2jOP#2ZdxBI (N}"0`)fZQc
\2S9Ѽ͠(< G&eQ]R
_s`m#=ǃBצI>%OߥȌkf.,s emd-h:˃Pb߁=,8T5nP{+SFjys NC~G
tr*{cp &*( A= xRf H h; @tv x%W7]>FlwLY~2SMLʤN 5&׃ +yv< hF#& *GXJ5/|yrJ7mf)oRݻ|-#^Fo S J%^02~^
/="}'?): hea觻bT(=рXv9 ` G0~6k.[ {)뷮Ϊ(@0b!
gWdYJ2}5 0JCkmeI
?r0QIs\
=? Î7<_dЄí`ոg- 1T֦.1I ~?/WvQ ŭUQgD#0 PJm$j{ Rey e;Vj%L=Y~dzDzߡ|&!jX 8dBBߓJ$5K%~B@ Ӓ+4AU7.;Al)y J1%6P}* ~$B9p;Y|]0cyEPZm!" N{7Op9# ۧnQyCbyK-K(KZjQ*uH;Q. bs TfVBx- q05o^s:)k~ _4)$YɍC,zQxc0/%玨o]+< uėRTZ(S a]&*P7 'mtR>?}.lFڽ_x#De菇*QAm7
\ tEs GX3l;"zWbq4>~Ah|r.Kjhnr܄xo;* +-B!og~sd`XTNVUDeLs˭ /8K[jh<'B~$S.
<7&W@ * q}W̜u 4% XG2 : jth.묡sW,Cg\uQŕr(̫c"I
g^0tVpp Xl˺ى۩O97 6߂,uNyr'(W7%
*uIsS|F| 2PGIܶB \X93^cƴ`e6
l (nB
V'|d!1QѡTw?/ub湂Q+rb 0dzܬLJh@}Xdm8IlJs4!NhZἶ .]e).S*tG!-W[ŨSD ƞ" V1Ҕ KUT4Zd"P!! 6w
BD 4%Z/kcznnI}~R< E&Y$wT2#X>,!uDӸs%7ة $Pg"l.$S) ɆK;gcں} iO,* K|$Kz9V_A!zQsGM2O? H!}hXw 3췡 eC /X2Y/ˇ'՚"V!fT-z IM ߡM9@Jw3L[zHޫ_r `f-W 2Oӳ#8ȩ3\eC_ED*NsU C6iZEmg s7mA-
rt@?3~f؈vQ:RSݏ\pp.b3J [O ;~rH 6OƁ E}=O#R|?6x웉6Y7f#BwMn(jF6 )hr95L< wWSNOp/Q0ɰu9`|G&9p 1Rx<_"3Mbԕ#UaCd
1e reM+%[Hov '02N6L9NyGa6-. `#
& B!+%ԣ m$mS2ݡflJT*H]xV0
^qN<D5uiQ\?}'F&(}I߀)9_ѭ2ZHYK`m?4TL):*0A]6//;]Zs2;iLYpDlzX|~5)^00Ă ;-2e558I) ɍHb5'd8zZj֘km%ԡ ܂wF'>v9
o8U/}m4oK
F:e ލG<#F
U/pW/|mVK)t]ư( _HDRk4]`tם5ΣߤvHK_"z c -@ېx4CM ZDmZgJWm"A 'ZM:5u)ɞ'ňlЕY\˗.qiRq S6><ՊTB';S pb謁 ́{?h[п&y/<*zU @B:(ꈒ` K: +OnbO|@m[N_<^oZi
L6ΧTnrfZsavU+@ٔE}!^|r I TfQyvX|vw%{O1IM#5oQ3`YkݾR%s!P |{mmvoL 7ŢAjdw3/!r(Fr| 텻l8vI7lMR,(by/MM':8̄un:MnLC8t%u" o^5Euv?VS
](o ľTM0
\-;|W3KwƵOp Q|FP?\y?N[={c d,|J.ĭ^3odsyLEhPRDSxwmݺv-t3aRL-K(矃Rlhi7 "?Rj-[,W ` |we\";N2?ԶաؓeK]tzX}iL&1j9R?t;ӠWfYV2ۋ<2=s
OYߊSϺCm
q@:|RbT E%I X\ R鋫s
hmKtC rfO݁3+Aֳ<DS _͗7&y n +j ^~ !*S0
d:lK=7 7*}/ OMs{SƗ^^A!(偐1&s-&/2iOP;Ľ J
3$>Co[Pr륷cc .liDw
TP2H dGӦj_6lǘ F\[=۹ YR>wbZz<75#eM(dɝ.TX On35)`t"gkv4va|cWCmWϤbǚ_K_ 38ꔑ+r>bs So437䰸-,x[4 uW\Mzؔ@OPw: M<á @ >u9/9X|L.dQJ_ ` $(^֥/N
E;dEK³gqdIDm P7 |+To" r|㶅v+AJ{ IbHV2R,]Ox̚SU;R*Ɛ~
RΖhDsL]m;z 69I榝+_
:&[X42)X4JN{eHIF]'v
`(2CTxSj
GOt!C'״}=Q塑8R5Iu?
]Nw%sihBγ |<>D̀K7/t Z
bæzѪ{mڏ' ?ҩ'\S)7)ar8n٩Ȧi dF'?
߯L
]A"۶0{5\O>*磔*I2*)4Oޢ% y\<_bySL!tt6/i+ Dɨ]M7LJ-;s-[y8 WfA]xҭ K50-H=F ,yɪ|r+ 6
ߔ j:Np]DP
\ ;k\"M/G R iDDv(7gm>K8/`7-+lwe ,$^5NnNH f͊}8#
d6XT#x{ oGwe1ņGWRΜǙwFn%4@2sN%KGM˸wN7]U$m%A1Ðw`puJŨ6fvW ltpk_ (HXgHԩfS(n|kxPyY_QJkJ Kivɕ('U*Uds7ETwH䞩,jcD
wGg^ԞP t}r?"
*#d~|AAbJe]uFZ ؖߞXKasyf6V!| GG.jH 8<hPGm 't]?oP ]\ HI *
"K#Jb4Cؘtw 'ƭܔҌL
2W,E3S-Z]@09/^ǺF ~_x5}p!Wh{@wArq>+;jMy) <:2=Nj?~&5dH^뫡n4 ǶڒL>֤[{O%I\s$9$no1*ͼ q"N+ǿ}7Nt Ѕq@
OHS#rӥ;Q2K'
r 7&hN8矗/Xo _gxOD,T"ǗB |!)8SI-jqKY,l;U>af} (\ձ&-"ACDR.07iP'ޓqO to8hJ`2OYtm6=>ȇ׀H/&g4aoBtrVH}ODl$$?Lt=H9=\7꒒(/5*&މw*~DBA1-@l9J+\+[vXԏg
jKH 3ğC:ۄyLfR ̚Yz<кB6?ClZ
svOcj Z8 d`z`e8S ny>h1ɆCu;
Ւ~Lb@;|yJ* 7/pя#+6P? @*+/
'*JoZOV t쳯ךz/N
/'~13H z $XYU}lzIL",G+Nvݰq5kS =lCl?
Q>pHDRze(kSAB"n嫙|ԟqA/ E+LJ6|3uW;~v EGuz V0Q8(wq3sQӿ+ ߽cm` ki E92.IJp
o3iSXTQ) 'yZ > §Z~8UA].
x,i<h8T-3b ']P}#\uKœfPROrITL 9얌y]TwK;L&;,u Cn:" L̗}
i:f|yM}Akco.dx뿮k=
[ Lŵ֨k%*>C`p[^M9:\:z+|}vO;"?X0+H
E:Ba4P 6ݽJ9 p2;ߐwn^%k:-Y5ܗ(%JXV%J\_UQ0<TldN87Cn9' SjDmŠ.ixc7&yoDg)e
'S ŀSn߁ Y=B=L!%R
YŇ[v+wP]َBY絧 OMH_T0 k"] )]`,Ďu&Ȳ^:H/?xA@EYb*M8EB`Rs1v"!
s
3 ^Ԯpxv9a+p|@Jp):NRru'29Qes{TeVk O V薘Vłh
sc6=[WYbYTR
;'?
UgŁt Z y
!5a
>Ј-)cdp]+K"*wښsm-lgXe; ^C۠`OM>TnTqENHO̜4B8w4Wi[zG 'iF(->*XW@/Q1kUQjMv Rwyl
wFsz6dEyw< iJK:F$
GhF欕F&W-6Գ\Rp^݆|K7u.eWB2$5IYF<4s9(KX%k{"zHxh;hUFzC >RE G4j;@%>:
먶͜Y`2Ti>z4 i@!c9EzT6.M_Agx6'欎!=
1J
/xx"40!I)SL↸k KЀG*I,As+VF:R_u 3쟣F rN Gk
C
ں) ?W"\ "2PJ,C]Ka>Ԡ()pc #_ܼucg U-/93愘c<0)a8t ϝ_Op١Wk̈nN:֩lI :TmJ'770: z^ޞe?q$e/ϖK?v4?( (]? A~"#^'|?S(V&oMT$~CYq4/֤(|!K&mA0Ja1b25
P6 7zO_ʑyMh68d U+6g# (65鹱)I @x sE&Q/s2]Wb{$ 4p5'MAE& EKhr.ݙ7+LV
Z0TE>+E7$ @dCGQL%XJ7lH$HA)7khV2sBk A/XWm@IËV~ M#vēKx`&W[]ߊ oBߧy]ܺDCRM="gqUt~ڃ3b;
LN.6Hm=.9edWkus])7TK ao
48gyNS7fVo&m0hev萫½E)ZP&W2WNAW|xțUIˌ.ƚ(K ~Bf!_(*cK( ũ-O @gOS4-
TpZf`$Je҅T/vAϛV@5Aə7t ?5- x?
/vH#шTBkG ԵÏ`JYyl:-u%_Ҝ#,2$e_mT* ʠT$!E,ΤSz \sGߚ3v]t BeM$P֣/@ X!So/^-'Z1s<_}zfĜM_09zguI6p "Mq)KU#n
(E p:HL/QS, )|bkCY0^a'EˉUl| N+ߊ m8} ~\(
MF|amy=kX3O=ʄu˷BiHj>zŐoB;drU $dekk0k"݀UCjq h K3S;sht %b?8k 7A( +SލUx?ZT9E<)]2vbO3g`TU
·ifv3@)r'݃Bҡatt=Z_ڬ\ѐϿ"^f|%^ $W ehM 7 l>/x s
7FuLj 6,<U
ZuQiL5h?/ ،g$?Mças6tmeIY?H(e]BrcVXeP wDG2l^&W~}`geE{(*D,y]RZ2MKIHY/t
|9s,}j:,me#(8bG50|\_ m@
S ? >{UOfy$X^DHHB@xÄDp;ʳ,YKzd)r*n5&
$7e+
~a+-{^Ôe3bQhB}մnN6h; )\a2""]M%I++KRTSJ زZ|zcFi k;ۄ=?b)ޱ2Ag$j~sZl:gfA7ITB5tTs< LSj1+G>P7{u!cAbh`g&5˹L>56 Z]-z8- >*CŖJL 2k)2 l`$ok-D$9hOp* O|! U%8
xj=8uLX{Zi8DS3;<\_m
l6|\$ "IWv2] $Iz0!V]_͑;} )u+KAojPc@$E(H n.}M? 'Cyuy\=8yO -%aG i4l" d 83i( R;U uj6a}-lOoYTU]? [> 4ݨI.aIDl+&~jCEObFsZ^l¾`WI| ٙmyI /ΥO0_
ܶf˂)+ $b27K{+7}iuIX'P1pP3nL0XN 7c[\ItbH1gV 2;;,GhR*wy7T,> wf54X :;cHYzkP Iiz%/kgvX,6jE^LM2s(}z[<5Le@1^j (CdhYbb0$5@(X
hߑ ;I}ObQۨI46?P`7^k-_Ҳr
o+ip?mQK9KDc m' v_SReULQذ]TxRZӒ3@=oNf+8j%3WV,@VdaԍCvt 6̵ qd`RVhL!YoP8>;+n )ݡYkRoH&ђ
B|S`f'ÊJohTXڂ*F< qNeqPKj0=R'j'( 3E3 `-> \68IW?/Knw_(UIP
H|S<篨VfN[)fSv?% %{J|ATTIO PL2Ѿo}ڬέAL+1,U {~{Qdr+X䞜Yʆƌo*Ws \^T4 JbfQPni9ιߴ2#縒sy`("0(eԦ [YupD&ؕkFV$:/0pDGCƍʸ|Dm/؈-|djES / hp- RΩy
̬6ދ_~Z
^S =!78"עIdCm :n00y Piv7$YZ@wm4.#27=EW|!?=i:wl
Nu3ʬɉ`&ȑ2{o&ѽ"l4kpMW -Cw
Qs W+ 3R vCN«ʗ5 pbBo=JmSvG?|g\{v4-Oj/T.KDzu;VÛID^R6Q92rU
܃avxӜLU k }-`> ͵,^{(飰+HU41nSsj2ϸс%aOƇ緪
7NH|ksS>bD\~x-Ljd 9`Rqć0qۮ B 2]a⦫:WCqDZhE/m
kE˴#Y"KQyգWNL`!g
SޭM!K)¥֓,wxZbCت.Jq2D; M2^~~@9AW0@{Rp00 = Z.>495?Vy 3P؏-Rjxx&n-Z \ĩA5 '@]KOpS!К]OESxYqW
i
nG>ǧy,M9~_kV~|dS4ko .`ɸ} /@H*U}K. @%BރDTĪRN+:8
-IoSEf"u¿-_^$:FA 4*ENLjF6_iY >HdkU'Z kPTK 3l7ƥx5dOSju"QUEliY(i]T7z.WkR8,ĖQHVw-ϭ : @\U]r(F
G9.kw#^*JH Z
@G9A6,*a_5c&H 2AuD{wǪM@htpd47@LaWaeZؠ2iαn#mk ?)`[Ļ6Yύggt_rf@<N xO 0x6%K '; 5gQ? >CΟo=c`#3k#oO0}'FfUfGy-{ns ? ekDˈ0LF]CUސaܞS[CdޅRHL&59<مq:-+P^ǪG_BL'~')tnU
EZ8.U"̵sZl]WzeAA&wۅ6ژ
YtJeUw)496$ic^xK]zglɀ+} l2'9ݜٚ+; 3 !T҉J: =y.iPiK$qqUQ-Y( 'pS cY +&)MmHg e=:R ~[A۷VV0f #*#͐COMSn(>AV3*5RI6XfIm,䠺ԠDM%5p?ae+K\K.!'ƅ;sJ(~iسU:ڌ]Qݑe\Nm[`%͜kRT"Bafu>_nZHxl'^J9'j)$h J*O$"I$s6~ 2 F1H-6K/cRBe8f: L )*j6
]1!4n"x4 ѠdRA}Z[q1 'IBvu#x FW ]/_mMOS6fЙ;>fG3MmmIb%ڐ;$~QBEOǟ8~!Hoѐ
Lq͵WQ$EV>$=/XMf@WԞMC*ƅ춯 DLqD
]`܋F)UqRM.Uߓ7H4ruŤ ~'*Kh+
mΤ72_csDDR,Lj| OSajn,"(đ.ρK%vq2TO5/ϝt_:N"j.멽fcWA -b, gR zctRav # 2 ^qVïB#0\vLl%Ƥ>ƾ /) w -[&f _=PR Ez#m!G2}p2tF{m W*w|5EsEIx ل.if^4.m
Z0(b˟ۺ|Q,Ұ^ L I[/Pgӡa'*2:ٔ˫Z~ZgKXvKٯ: wU]P ' Ӿ TVlk x (NȋVIs%c@a=S3> wِ3o*ٻ^9Q RN5
)\$ysG&
x,X<&blV,?,a,Ilj䏶R+ɫ ` XFC~\+1{ uSOrTWjXZOM+3n+%lj͓rnb[
6
ϸ)'L[V]i X 1еWovZTPQښ#ãY; ;E7 uSYf) 4cr|F3 x={OacЉӺ֪e9&{¾b8p̀h ta R!b.z?(fР\iZ_xnbG=Z$3A\E "j i o@ YDpl--B5X1"
[z"$iz] 6`źF
sZ{/L*bPĸPلVS֥iQ2nbtj~,/Eco!@I2P=Kjܠ>yǪ<*?3Hb/jɓ*l%Lpptk}*Քv!=
ç`"mb>ͥdeZj֧ݴov MEjNMm%J$d
qw0-Vı XJ& /#]~b~^H ;v=:*ܗv]e
s7덝UB`N5<ͣ$X#^66<6[o_$:z,\Gʓ Q;Pco;ޙ2dP
&yiA nI~TAw?>Z+
*y*ywJMocsUd$ZfwÒXذ"Jc5nT`v1^:'ĿL,tYl'ϰ51L?k,]cƹԸɭll w*,k_iQB
c5K3T½ID8flJh2"aB [鈾rm
ASDC dpE{uV4 `0: 箔oF-uwnEd]%9_ {q Ty~mVoG;wrt
kS6H\ m"TEaW.w=ٕxP].ra%bMΫRsU" ILEg#!2'6H*Q϶YUk
jҼdi&_23FÖfVQ%槧E u2oZ5Mއ?ʢr0l˥fjӂ&3&
"K(`2,m`g [grRߑ\e IΩT+Id^ RΝk
A'
F|-O uu#fjpa|)ϢxNO
,
&i~r?j,t (sX
м} ,;^PqW]P\UG=6 p{r]*$pal`nŧ Q@mo-< DyX|+FUwYӖA}^r _@WJ8OSJMd2@SAq 1]\Adیv $c"xFgzxV'/uIӔT$+ǭ 64F?
9գM9-MvK
s b˭ fuۗڙdf! pTͳ=yrW
Py|5*S>b (9H!h6mL i fYR
s@! #^t
1A~B_Șd7q 0_}SWjbo ^Բ_7Wu
1)v~*.rhӋX'Bi $ x oqFxȬ~Ȟi =znmO~z{L#<:e=X
|L^hH* gڊQ7g͐5$F6F N
^1 4BWy />[
j;KYoõ ڹJy3qB];PxNqI:)k&/N Uot?{;0I oIZC
j)Ŗ k5Y b2#?'Caܞ,Oj8@Hn5]w1QWʼnVd uvӵkΥEFжWXYH[b yjݥgIZ*4{36nոz][ܸhQq_ۄ{: 7HF CY
#=7ΐ0KwebCb15.'"N$A*ƳI*9K. ] ;v9p>K0X:ZT(,+c]#Puǿ(_l F)5q;F|.s0q$zC5Y@I; vXhR/J
%8G>XByY!
Ňf;SwI nj1 -V l$MYhͪg 73O
UԅHhYC_M4JwP|X:= w}p/WO1OBǕ&TX@QVA_ž۟gzIVog՛ >|iV`haI5M#lVN !Og[n7!f1XT76ro
TP[VQ}q^ pG\TP #QIearX t:%dz_7
f0FZH 7K&PٷF1bc[@9(/ś 3%S[sIQe
Fd9@t)aH g$ Jҭ&Sm: ?]TCP:-e̟r!(Z v/r>,%ݦ$;Ȃi^v\Lȶl:/ Kr8_(
ѫSFp
"3tT76{c8sLఀ
ݺp ~ܲ::ަD/l5^ 4_ 3wȽ/ $MdfTe`nO-TO Tv͔+kj?TK"yXN1-R2ھΘmƽij Υ2/b3θ?ɂA@{Aa~Bk,y ho?T+k?d& ED qm qCp="eeY? tBZu8" K#ݰU0X&Й(=ˁ838T96]$ {u&ɉZq1k@9qP._^t;a>OZ-9 @䵨sH ]HVz>}
1:lsMȆ}ޮSE :ΰ٣P+@gkn|(͒'8qS͏|&E纅% O=d6s>]0]&FH"<ٹ]2ɖ(}TJ> `3`}k+J4jBy8`A p5gq/d mX8fPY@dg/n6~"}5@?/Bhx;VK &U@
$,3[ K/S^&PK`;'3Z@7%RES+$b?m }rQ` _#t oppސ6ߩ}OF!C$
24 <6[ =Nfh'
?K#ERs 5GT\u2zOz ѹ:Ĩ>d,
;i Ϊ0T`W,up&'p]] .xd|c -}NP'1hꦞ)Z|a^Ƅ6YC 8Q(.
s.6\ {cΩ͘2%i;B,s btxR?23/\ ȟ S-. 3u
P> IQԩ.Ë"j]N$K_%<>~6@QX4-
@l:VC!BhJS% X>X Pź*vRf>QO~B`g9A?3\|{DZ aEP j̲HL m8Pπ㋐
0hjySd_Gz\_oe%&?# _e] m%y'r'$|MBP^1̈́H?N#[-X.|rzOhUAg#OOzbҔ GZZ1Yu\Z3Hl P="oNK;56Z0"2xj,
ѭ $ŧZ=~Dd:6_sxGjԤʽ?lW
y,0Iڹ3_ [䳾L 9Sukjo$ QޡrT āO,(Z BpCxKn i/
ZJշQq<4pN ;BWoQZI1;q=n ێ!Z̯筊 89vϲ_~PfTsLzp(!nO5 g1ߘZQǮ~ cV̯~۸zT a4I>^+ L-M
߮ v[.6;J{ٿn^Q܅%}q-WMApD8V&9?' d\.aAװ|IKd,kKR8ÚR֩Wv{.;_S,%Ji6(!UaI&ڢ(x/0{j
zp2l`#]OIᚖϔp_e@+58@Z.;S
Z_{1`T8|c`PRִ$S>q +z"isyUK
kF 2 !VТ.9;ʋ_$\
c_]]$l$/~abM y'Ӫ^١`T,p %b )87KEKl~cIٹr5Rhwb?F |o9-Hq# ϟrHePg65*!@
[+3=n]VIJ&IIN1XK;h 3TtNA. fD5`b%i0
;Ip={ۨگP1'Na} `/X"F|dDR/^Hh.1A1J-Z P 8g*]:Ѐ^<+t}ȱ{qw&\H:16,˃1O7i;L 9 f]3
s$k|jy*!^_=a^@|,8騃 y p&ǣU0s#, g>~1%b9_1F,mzo[6 H7Ttzv[j{2+%/p0/2֯jI!\~4NEG EA
WTT!|0NW1vCV Xօj(3K p[gڽ!B.eOd}NO0'_@U=GUȲv96g|Zdx1!wހ!M`9rPBu_<6>8%?eNQ;YO 5,ѽ50+i=O&} @&*Ȃ c˝pdLi{[q ٧bϛPk&8eAO+
CjVBe,ZDFn
oA TeRM#@;qϤaM-diy%qX.ltw^Xr6#*"&쩳:+q:Ɂ\Ս˝[/:Ћ; aJ|-:f V'ciͭk}wݙRezb>s}mG+{cuj7G>2or4p㴬I'0
.$SFy֎27ʐJ`Ee(Es!+?T^&
WN ύ=&W ' {Σx` !ήY5`XQhf{[
hG!/E 0!
V&e# > z2ItX p|\x٫ \oְ75I}_W<$)$B T-*,6Mb2Z|b5B7=wb!W2ʱXWcPJ0;oA3p{t>& ,Soe>CjrJ! ŜZ
k!`K:3у%iاY
}nнq gPerb9S`O~#[@!!846:\?tYGF؞1 ͆.%&(Ǘ+LJ ϵ:|JBmb$ n3)d5G,cr+Ϗi9BR6r'cNak֒uLMsOID` m^S0|$Oć3zppe",Gi?vŀ*d؎C|6u ]W` Z؞=^ &)=#\2O7`Ȇ t(c0M>WX(zO_K.m_cZ&V!M襑l'bH2qƤ ga?uCT&#T/v7GЍFj .W d u9]ήm"2J[V-m>:,$V2}8V;+,j>Iƽx5_$hұ?Y uw^M_W@.vDh&)yfsFWd- 2|*Km_lN $#nj>."MoL:M$rVoW A&%;":}?u=G +!WgMg@
C
T8 w ,h wYɔS 0}< sՃJX, e|69OU#4^@z2 ԣO?VjɅKw%w*ٍD_Da a/\: =oby;y(oDA_5v 1aZNƘT;T/m:sWC
˛cح= "g荍,/pAG$ ']#hȫ h
<1w^ד'WML>(h\Qp!5F$}P_uyo7!FmL-9vL+ij!UN6; WKMzvf#zotoC@8oq lsBTFq,.NOigp$ˍgMU_Nc̙gՏS #f4Мz+?d\˵kB?;>]|w~P{> cjBi'@}RSIAcgn ?,K%ޜ>[5+Mz6x2?wq ):V
p 'yiJFa! u+JQr >. +4&x`}alZp C2#ʐS+犠tOj97fK0n
WMp.x 1:Q^jR^KM.KrA /T* = X80 N#IUjJҲ>@ $ӊU*| Ay]!W"pȕ g.
B>ΤSٵWJԴp4ѓ^ ^ͣGUc4&6U:4Q|Np4}8T^2" O1`v>a R+ds'!.NMEG8% |>s"A' ?#s[$sTTՖc0S&xEnZ z> csA;]yBLw. j"2Lj&l7K~ /~CuuK~z! 2Я00fI]DY;$i
Ե(;QB*Q6]t]J#*w1f|ցc^PEo5- +V`.]0]ò'-Z7?n@EӀ&9BYNkCUl7[hixޓ
0nDu ^A G7"Z Ià {=qO^K2A O4iiʌwL=Nxq՞M]; Y`C3.!oTTTy19<7'klL>m_r 7\yI߅
{j æYP)EUh?K'4R-t(o$c\܊s. _m R1J G, i'MZ:Ļ}{
lnq9 6ӷ=}{ єL099qR-"lo(."N:bZ4&Őf%9GϹA3!2wXstD`?3 Q ?4}"o ߞ3{=ܛh3$^] kfp&.܊kB;cUiTrbv(k L%cR?')XE_vKLt٩L08XNI lJm ,Wao~] ^n6NWMj:[upX`,mW.q̢=̳~tk
~R2e, M/o[Us&A `!tx2=B
$F ==$,Pn(P8
Cs]N/:sU+ g
eݛ?CKrZ!=V3H0PE2?5Gb3{A g mg5<bDGz^C\>n|Y!&64WE{;q?珤Prg>**Lש_taNPq:GSYz1[Z_y͵ ƂZU vX/0Ib 8 ~]Np1^ʕ)TdqG-a;AZKȉV_,R R>mՈi.=^ ~K3vQXRXd2%hTJPc\7
u{M ƈWQheGh v2#o k+A]em/ I 6
#Xd)̵ w`V^)rda7[ڍ@ԃn l 8Brjd@)
2[✜38}[vxţ3,ޙG>zۗ :g пyًiR`9i\(g n9 7Qڸ墑4/j9B{եꀪ9y c|Ҡ{ou:% (B-sY94k˝Dݔ<:
I1Цӽ1CFP$h enaQn_E[ _O`Cכax55N}[n#ΤhU2ATϮ =T@)y1L gB`+LmbbZ2"agEZPm| kCGy5w5|,R/v7dFR͡JF.AΚ$j];m#gk㵽&BXE6m3 N 8"!qju ?sI;uQ{C =/@SZ)!o|lbJaOWJMg~qfJFh˝n^{TKL ,bfۼ+*U+$jO/hG}y b?yū=RpfNi3G?Tz]hak(5B|D7۞@`xԄ"m
*Z;ogSA2xc,o5?IPn %zd]Ƀ&
Xh,*Zďy $wh+#6jZ|\ӵ!u"'hן7/4!=Q #eζTD:y܂52d2{1ݯI ) \)"}"0!f?70(咧G+uגdsHb1]Q9ɀspѴt*}\qy-( )d4W "mlLGkɲ{}zZTd#B ~2E TNa~@ %oE:*}Ig8{o/2r)LtIX)suq> ~Qs aQ^,ߣWTJIhEV[Jo:ϩrb0ǃ8y7@y`|a@} [[ " fT*-vG%]z]H(]RH~ bρb @x3Iٵ(= uk p%Ss+5sqk$, Q>w$ k_cU{Wy6WDX;ocp"c M=e]xtt:֕F\ Yc9*[f{)ɝ&P\:I)l >4XJ*e/ 8C=j`r F\ RƢܷ HHs 0T,S\ T3D
9ǃx[ދ
g!/>gdw%D0iAuW)+$DwK| CV#G 4W7\ EƛU dw,M!N̅Qo.z|2']/w4A5 ~'A"j>s&$t`++09w2(pXCO%bWPne+eQ| aEp=qw
2F+`@rgtou- sOmTώU8љy oPk;0A"?Ĝ)
E/2ץV͏IU>@BCna9f)z,; kA:m c
qk} ,zG B@ʟ]wAHe\U-6HvLURv `SxstM+R,{8#:Jr-h ^z8.냔 &K+jҝѩ Ƽ 3-7 3ЊVK&+&4#\NV¦exZ%PlڭT
/ f
U5.l[$Q~Q;_@5 c1[hYQA}
D~%wD"6?-Eܡ@V'fN AlVdKJJED@#IN 9#ϜDط4,"f~*:)O
E_" XdcK` `A6!!W~f5堝vvnq&K{_
6c;+ѷm(Z(KK%Q}'
Eb 1#eY4uE'AXZ9&rُ۲7N-BH<8#b PZlN }ڰv`;~ i>,k2ބ-aJKf6S J0[p2{Ea +^QMO/1=å8`B+(M+䕉Oa̾Sg#zn MJSZ$ *_l, lh,^G#ݛ tպg#vMt(& [DD6 _btxJ
/)VM/GKI~,ma%bLT՟|z68~\w Ȏ*aG<o4'CLƳ94xҽ
q
%D3禆[js"[]}H{Yhᕽ/]v0qd0^:X$a `} 90nf;MCnI|XF
ת)
c<3*&Ahc%OMBfofP=b!u#G^CuMRi/#v4jۿq\N~-uJ$KGjn-Z8?'dԱ W_Gg{dyF\Jqaq,Co?\W l%! дH:RBTm92* |Q`i\|`F g_B 1 ^';T0,]tN +ك+%J/iƫL{x-w-k+4Ye&@z v]C`굉JoLC|k7|
\:xj;Pz2D px>OYl26Nay{/+* (ohPr+ɚn:扼FQ Aށ5w-nr,bQJo9 u IJ35(τ
;1M|aZM_2YS{z-|% kVf2!C:4b}qDgA``Lc * U->}p>F 03L.'4Nc0FҏiKtN#}3 !Vh~Q
m''!q ' e У
@PW6]~DK\Xٝj k5GގSt=h NtqdI]*} |wř́t-Q'KnlJ"IAs\@k gT| Lp"haWK>-wKY ;s#tJ.ao 5[,n6bRLɷJAW;~
SL9"4 m[8bzqaB < Q% ̞1d$aL+YJ8g)4jbDRZІ[k6̴Bw
YY K| 63* xiIև8 a$ifzAvg\"9J )irԚ ͂
E]ɜ:ru=A'D
P]rB,S4#
D7)F\Ab
,܆Cx0؊D` l ح[#LB"W X6Y~CbHq}58? GO].s!HYyXbR'O jߖu덶^a?+ c Os)8k1ſjWXL0< ]N G X
YxmT d@M-`:نS
1;crSV '%GC&bZ*uMh 3B 5}ONC0>U jiSi-m_˨ ^ ~ [ 1rT$]kuq/ʊ'W>>4
a_g,R-Qɀ>*SW<5W^u5T@0{ b9 e?+!BU_g"Yj3Y6,kԺc8tܟ0 +L)v܋{i{ R]^wFO(gn- \0\" ݜX8ʼH&ZakFK:"9a8-9v2ۢahXѶ T|v2M9Ѳ~N#xYzdm8\6z=k
9dkF jR&ݻ,]f+M!vJ (OO>'*d8y J.Ճ-'W+ªH.0?ydG >m7usRG.U ;r,Gҿ8ڍ4"/# Vu!yH
Rग़hXpMK:ɦ uV~+vW=mvoFڗ 4 ᓊ;a<51.NG%Aq)Y ەe7o1iվ[v}yXR7(cZ
S>LhY2!C 5
+\&1[n 勾/XͲ.;>G"da'+Qm i R")/onJsrrI.L>'f M۬%GJYShp7c4 a/ m}4@ 1@XF 'NA|*CsF^3=5puGVL ;eo|.(
w2ߖ+QJU95gA 8QzdE2,Nո*7,*!Cs?(t-30ȎUОzr&tr 9Bΰ d gO_ˌBXDվnsM
{[A.d3K`<\EO@S
~&vp{ k
m{bh p(]eq2z")(/T3õ s ]IcDZyta x{B@27?gѢG`ɑU ' !k?@ z
8= 731}GZ]%LB'7]#DhB /̐u
:/5yV \ *NcƀZ0a=6+AFKuflA Yl 롶zB b5+PA~ e
~t3ha8߁8,3x,{~YEdtN
=x _$hi}X9
RLo , 5HC wz _Hx~ ad؛vFUO&ΝML&~jw1\s ,hpv
0Xj:.D>
M>?L=D7oQZO2¦ sYI<:9/`N-yjU&lf _A; waEO&u+g4uH>AsАkL z[7pTe'Վ{@Ph7 T[X_m$|_i܊A»~bHI]p}H}8[ SP8z8+Vtvի,?`7}oh'll/`gT7J ?"欆.{C3
=L%5ݼPNWb/Lݽԕ5-Tr-T e{릉 #|k˗K[r,L#{ϊ 0$I..:gjS'f sa1|7gvzzc HQh-yŞ!+5\:B PBϷ*>B:6a6
6-07H'+n
>gw:{ө%I ~kb_^F/*M[v(D~zP.h?+r`ɒ>]|-Wt?R+NӬ\G!fwxCzcv.H 9R%!BQ*.JRw C
4)n5 7%n`;}i rgKT4hYQz9exjIW`}u5Oa)
r՞6~X[?#yu/ 6P
3hi>YG; ><`o\aW/
EAPC6oIF`iۍ*.PkƮwr͢N&m~!QW(dIP/\g
Yir>x[EtMxԊ J Pm62mThƟh ԅ~տd,RrxPf}H]G ^ũB;!~-/-_j?M Y
9CQhS⮱|'|:Ew53VZ&?VwLƓJ b؊6smdy&M]7%- ku1T{NV>Er_~Z6 ;RWRhWx
!s G^H #u, [Ny@
T?T8_f/$Q A3k"%iKRwE@/sӚE^P¯/4yB>TKNdy0f ˕Xp}IT 7x WǠa.BE508~a1:pgbssT=֛qyrXi$:Z S <>j G)ԉG7nLFA+(ubszcݰGx+0Q 2ۅ!B}= w\ '.?T
5-u9 {Xa#>i $D^inֹC YbTaw@
ccZQ&؟:^KbHc!lt0}vq_JueǕ
h+l 䈝.Vv~TVm uy!!#.'dG15š #L|Dd'!oTo$&,T[3as` +^-Uid/7QT0s^3W.inbSEߎdSF~䊻[0 SZhBoMA 2>Kw
YQ
Iz\X B$48}P"l7pJP )B0R^@Z 0T Y&1=y.2
ƤnxHhcobn"Dh@Vb
qN"
x Zk8o;ğ!اd.祇S,_js >5>mj 6,f-$hC-vɁfG5ucXzV,$&+#ása t[J =SyXmF5~ ;0P5[6=[k*khOzxOQ֊,}qiCV:! 곢T(DD;&@5#ҵA:u=X{~YLtQgTP }m)ԾKeأǗJjIkU SӆBExqƔuK(Fr) GSzIٌT?v/n ũ VAgQgsuB(i!4E:֩,nwxF_ C[Rxhr
h[ԮN jihgG"\Ղ1͔c%)˄!NZ'jqF0滀T JK5 4rWd
i"Y k]L#Sm {L8ǟb BlE]ytflQ ) A5c僖=zҜmJ88
2z]Gj&˿U##P e#/_cyâ.<=YB?wscY)h@ OʧU$ o*88G`K1v$,sCf#H':bv Ơ>4
1'5.
^{#f ij{df8t ]`XCըJ6c ?..Rx| m-Dq*/O _1|Egڂr="'ݴ h\AHIs]iiH;[lh G^eHt%DgT!@,J&քn%$'}JƮlw7nLV0pa=!#(>GǰVp2 wYlKS o '/اyoQ7!IjO] UF
d}2P>*νYXb>3KFG6 Yp
>"J̧]x ,%EkK{mQlktqzyNnpY;C{ʌԇ*'/dE T-GT}|PDOIqV8 p[Q|jBt{}[L H!@~lS?RÛ_9{lt~d' UOm
'o5mOcv2uÌRYODͧW6IɆqrK#a rNh8"`biap }]jȀ #ķĶo? Jn&`OlHyzlE{\%"C&< Ed ӭpп*~0#Z✫
zH Qt,1~.yJU\$lNVAû : sU:DbҤ}ӥK,/(6n`y{+ dcd\A)N,; ]Io
e·U]
0 pZ֖Aף<rZpGn eEgF9\Q_F (넳%!
`-J -[յ0 yGp{xF<W TKNA
j.MK1d)
2O
rM9FQE:܅a3 rG7<|C;P2iaKjA騱 Fw 8pF?g (bO@s,ZlzŒ6->62ۤ\겏k{1;C
T&Xp)UKُr`x.~+˨} &-:Q
gmuO #)sn& c. |y^?0Ay䊿& vsA'W<8a1K@ly$z~Z ScؼU|fMXh=N3%+iK !x .}~ެ?;lb,ZNɏ 6$ލyA|7<4?(|@]7+iŇȉd=su@da0rN*~+7{>N/~ ͜*z
&B3O=rv ۍ6I4 SJYhMH DLTS:}c?OBREfu q{tςLR] c$;"VH[S7T$h"0;ykiCcØ~O+_aqtH3NjkI w%>z(3C@ĬD55
X7QSVJ XVY2^ӕVw mPzI}[Qogz\u5x,T5IFdǸ F 7ove÷4˪(^+LQz# KX-k(EHz .waF\e7qk(縫, P"TÚ>Ӑh`?9$$+( C,{|g9U` #bM8-_y>ΧzIШ+cH,` ~!Wݍ0yg*Jj FY'+cFXWV7Oy:= Z>rc^@V\ p|2kYHHe>:1*0<` tH&W`,,cùn:``{߂Ma@^R*ǿ,܋[OH2XMg] .ey8{s.)/V
-
֥R䐢ϋZgl~c +y` J/:yXFgD:NLFrbM
I
nF
}HFYņ "hTb;Y*>ųjw#+яn肆OJhf6lR6
Ŷ^!)Ʒn3q${SS(CDa-Ź<`?6tgடy8b;ssZ~h{D!'߅
Uy ,)vKъZXj!i=%wuLQX fY`Sߕřxq2f~)oBS hVH̰e b@tQ\!c'M2t.lB _'`G8enk8qw9dyhU{W D >?l ? A7BGT0P
o7"j9Q}bY/ wʼIW]lΧ¾wu43>I.9 /'J ؎ܑ
Y/|^XYJwQ sNUwn.(IE律ˏHCvdyr.:H5!0scp_ BoEJ*HjugogG~}K
} E1-i]''9K0Z+86ɴ!'A~i3ezϚCaY 86{ .!OMs~sU&!p̻WJja {\{]VEc8Nu\E:bc"ٝ%z % HkJϏiI#HIהȶ ;D#:ܬkCB|=$ ?Iom E37dn(bY]°w#*Ƈ||6N1QenaO8)u)+QH_ػm>d7fP=C۟aҏ:t ls JGۊ{8W4t;Eu7urJva ,5itw .O\"rI5m%iܼ fD/\vc7 ޑ𘟷^%< kԃ j043 mK|N.4CG {PZ,ݕ`Uۂs t?n__XC 2}˪sM(P 0=ㅟݗJǖh1,YS9+pڊvX3̀?PbncPsJ- Hҿ`֞c9zII0m=,y/?y[2GH@cer%w|&t幙YO5@rNoq BQQVpwe%wX
K0}0݃ y_\:B ,x>[e*y 8,&*Jx"LH0Q7%*qzk6.k.sh1FY`s| >}Z&y{\-Y@_?6
NԪlHр:B_`t^31|!yFrJKn-LlX+_ex @Mtբ3^ؼ{牚ǞpGF ZÊ;Fh٭
k:ҖV)(C qw>fK=u4`}ĕя݈Bj\^V`-4x/O s6cLm_ MѾXqӔC
S>2sd`\;Ayap)% 8k38
O++:uq S'-97i$JvDd}Ý ,ſ
(+ry)
$`<ኾK,W`;/s6[~8v:7A<(=T :D$
jJ#1h7Eu0=cM9Z1=rT8c\rJXz6.@*IQ+p]K Hq~I\
<~T[ײ#1Pp* UԋRܠ<]%{_K \OU9tӧyww/\ɂ9*j @w :\[.-*g 㔳4`.
Q08tB>3yۜy6R4H,u^>BKziV}oHr$}cT4J P䇴;Ϯ@4= XY-rP%؏jFa_ c6a!+U) hd\#NLJ) z'f怾C4: V@ga9x2gHvas$4uN ]!'9WF*}Xtj,C7vrrIހ㗾 {wh'qV=r5oY: zAEb}F*έZ䄳 =]I郄S
&XR0|7C4
WO$
y#)n.2VHMeUJ'9Tm8@Va჻uG42yyqz z,Jϩ;0\,F\l蘮
n_k0B>h*R@}\ĭ h6 !SqIv^m
}V"Ə]y
X [gbd {Iɂ o?~n\hRui"}@_P|cW X
WugJ=-ࠏpe`Gl/&fxcuط!J *.|GPT 4T MBR7ϡA{Eq[dϹBvOxB8
ۭAcȩ gu&B~e΄PtUQ:Ov!11!ҪwY-Ӊ::غG:̓"JGsVĈ q@rd;k W\^ڍ\ 1?;
K- tU'Jx
ќLqh*7
5T2"9Jm6bjxs; !+;(CK!6 l HMG&mN5ˣG2l[ &0Cu`
9,MXto/H_~X6 L?4pK["'nٝخ 6tمrS4-3b;u+y@q[̘ݾ@:-
vTEz5&Ttf1oE$7q؋җ sO BFhi M re[| {OhA" (<1NΡ )6brSx6FXxo6I`*7>>}=lB
̪"1.i+$ BL}Qq6qG8.a=ԪHL h¦?.zӎzIoAkL5:
ȏ9M'\ yUGQo}"n6B-k @=?Krkr-GMOA1sðx.k7!c}?mm;XH!$&7S|Fr7g| ̄ vɤO#q Sx4e%[z;l:8
Bڴ4؍12j$N篴Ip|:aVpZnf7c s8EvWъOi`ub w1 D .l'^yphvsSY1ƶܰPJs[ :U)EN3ŋsȴ+tvPEwg{{+W#2v#c6+XL"{ts4fZщ !BXBm͙S7qf|lȥGW/NT֚}`y< '0%*y^`o/:"ҋ{دyPHk30EDP)hxa/42~j`7kA x8OH_-O ?, wוl
&[UOsf > \_h ˘u|Q$ͲEhZ UN]{~ Lb lS&y[ؓj5M,R4χ Ӥ0"L"ev4T?{p\ j$1 -k9 ls8愪1h l#7D?oÔ,?{]Mt&Fh
4& 7G:aDKd;իQdqgBE~?8e,ٽ$WTOA
HXn YEη4c;(dnyҎ)yV {;7&װAY7LԍɊv1}{3a`>̳8qoo9; F w1];=Bp߶d3{2\QOEUhϬl,Gg2A)dƁ7Ny 8ı2̈́S..ٖJ`&o)w4Π5Z$/ϠV*o
3Huf2N V Jb#4W1ˏ)b" c͝.J9t˛4UH-92Gލ,{ dqz_4p(Mgޢ}ϊK>{SMYFW@-XĻ!FXY
{!|\- LЉل z sа7ʁ7^[>L@IQţTsI),JUFVKhĢ"s`t hI \3Àהq9l7ìդ؈N51~bo7f:c1+N VyFmZWc}5K/F}? ȉh+\s>f^
%ܮtß)Y>ΔgCZ7lGb 9'k
f0,٢e1&=zY$(cRVP|Xa$ -J-^@%E֊ctAl7ܺV˗P18]?ȵJ?M߬ J߮ +5,34! 9#FH}If[F ZKCȭEIӛ $
-;@) %=tF3i_Ο}NdUeww1aZѺ FKF*Y#5R lD0ZPV7)m 4Sd.*D;5~.dA< hTuhagnz/1 d\-N잰s7W5]HM|ۇ`l× Ȓ}1'Yۭ
VbWt]0_U''qnPD䫑w{ fg7Z$K JXvrOME
Ef77M40Kq3C2sIL7id"?'"5P>Aww71Hb
3~+T`F ϼWK^\3H) >[pI'F4W*;5Wx6 F{'ie1sT)P}B(3m7' 1[݅s۱)cm,HE,`ڳäzJ[ڠ!4qs
IjK/KX mp}LTUZ}uhT^6FRe =lTP^nS?UOaǩY?z} w 5hU~Л
%xB Kð{ ִK+ <XDjc4Ky88UAr ݬPFD&1AWŗ(k0t7u y
E!Cd%yI7aVev{#ٷ ̊`~f+[ɯ .H{3 ɮSg$y+a}6ѳ;M A>7JGbaB9ftfCk~MpX ;vdk\ azZ 3 ?eĽ|C? H_zq㥲YBZFӦQ%W\ȼQy8U Oc-V턶ZsHoL?|8wAdz((i~ocIEm FՓwi$'VP27C %CZ rǀG;ʜj4i'fPS d bRSӕg$XC8v^}CX 4$d!.ξUm]KSS eRb6q㠅]VUC#'p>}.x Q`l,ۥZ4~ ҄
Ne%:Z )F !)5.يrJw ϴݡkh{8 zhHPݟb
Tlʩ'r
4ߪnOpmUNv0 G(U"Q3 T4Rbjhu1"sv;x %ȶ]EiRtZ+:wUFe؉$Xs @'
BL4`j8 i1$Sr/ď-wU?}+ LÙ|Z $\ C6e)F/]c8 ʻipKDbE!?L\vgڶ` N
kjY/;$iqYvNQҗ.hzjm lP=ݚpS DV\
RaŻS]&!Tߓ'MPH(Ȫh#aw,7${Z1 Q8}X åp3|O> 6L
11f1Ě ;Z3i@G7jPxT4+HTt; !R1ɹ hOz3(uEV1h9S}GX+ im jbinoIǭ5 J lJrݛ:BWzy'jMݷ^A='^B^H[J4k i8Ij7qK9X˂ wZ" 1j
ƍ Ym7<8~ ]A
!^E|ѽ'!p "Z j¯Pqj_cZBRlhٹ!αInX֡b7drdL Mk+>Ż
i0 ch_&ODMN FaZ#\) P0˴@g?(6\ zp,A9Ih< x-Un"&uY%^Cq2v _TЛ>CaHh%2юɐtV p0'(|y=>=N8Ju<Б`$WHSPV*
Cx$yYi:Lzl`2 vVy >(B0Xfp$*Ps Mt/c ԽI
avOШ ŸGTj(MHRXg7ZoQ=Ϧ蕋 _kd31
LJ- T y4:KvVnt~EKnd> G#( |wAQj#/e8hOHPgγ
s6S C Lk> j=$*A{n jf#rhC̹#X~!^;#m .>x5T+#9[p5M)Lw x,S26]<.%M6L~BbAc숊=9
-vگO'
sJYfVsŨ%E8|ˋ"9;{A i?4Onrm4i_{& 6w֛S@`|G a@
%LWQc &lxpʖ9WuSJ+?mz <$%U{D 9, pyFC*fIR A[J*HI"qw"k/^fG.$mUf ^ Ӡsnbַl&KVnP&
n`Sj TEv|V\]&F<A @U ^ 3%Iv@{%f@Ҝ;[7^ml
P)=.g
8 ~2bH&Տ'b[sû |K94YI8-,%8y(ghHdA˚E*4O"5/8 )<-W^kJ=&?fBual:ָR1 ߬qav|Vtn23ޡJ?yAS ,~pN(8"~!JLSWZYi=qx
&c![e}?w8ik Xy$TNcsC0 n*Ӎ
LX0XK1,<c1t!Dq.Ax XUoGaYIO)}hݑtO )%+yism2 wt)^vsu[& =rH#͐Gϑթx߯TB5Tt\F+cXSƄ{[ Y/9[5SO:U'm@r E ͕Ӝvk7G ?1R89 hpS$!0VxA$?`Q",[~ tB ;m?j
plֻBbasTJuOՂMVٲ/- 7td=6 >@8A<
EbuQ3wd q*am }j#I|Wl [a'} s@2.ą&wzD H6?zKab0Vf4h d ~t &R G?)jOdQ!V4Lb I ÚLnfv1!~Bz>}ʤ]fԑh^4/쵶HBDJ^ 8wi
Y1Yrvq\d}A^j2/%).3Gh*"(! ioN_;`rK;ҴGdɤ sda7=?4 lۮ(4sO{sPE=qnEV JE .\~{H>& ?.p*ɐX=`=3Q(."PȡWb)<_:}
u1;E G !cl:r!ù'/lbxB32NwDojL27h-@6^WĠ Z4$Ɩ v
O CoF[)>s!M:utugYP#?Eg| rOpcQ61 (D&&P54hڕj ۸.O>Pr_qp Mr_j_Sr{ָlZ y[x#'d))TRAy-Q`v-K ya .-n}PML';+ԃ~j<\/ֱG@LPK #
f{ "˘[529U1YVڋRtIWDNDE2knP7W[ dހOI \fA!O0 #Եy%&"+HkX¬@'{>йᑧBU?d3 KSB 7
mN8//2c("K^.fZM2>EFy)?L/+ mhR8 !`{ V;(h~am]Ǡ>\wG|'/){cH 94-A
志-iΎfO'fXqLtv=ܜ erTAn_I!Poq J;~g.wzaAZwJ*9;ʈ?F
}6) HyCA ̢뇘-6sf
y3|"Қ%Ju~}< =*Eǭl4ΰ*
v2kiG5@Iy0zX`{Bޔ6,b߂]xUL\Fͱgc_@,KL$ЈkiB<8gp=.{2y f
<@vxj D+F.)Gy;; U5Uf ,P2Fj&:@]{.) P?KFLF| &<бv=)}wS
ū?_0.}*P>V l%N7, TNT` {}8'*@pJHȔ 'GQl=I3 -0!fFJ<2J+c@a-r3#$A!Q\rFND*X-N)~Fyޱ--#b 7 D| '5B*dhPW~8fH *ެm_fL$ms]3K92Do^bňyY|[#96LÅT1n$
uNl{(/t@, g>H -VǹI-*͉nf.2❙EA4< 6[z:9p | 3]'VN9$ Ӛ\n7["de[2S wyG@iܹ;[ Zoάa G0L7|`yz>H]L5A':d1M5
L{ p. YI_YY- MWy !34;bKZ̬"70}^Y핑{o#vLr|y-&ZIu4|*P9|5qr4M ia+BLV f?-I$$}+MƣOY:=HMa_ +;uJS~
j"_e%A9+~ D&*PHlKM<B!ZBည; ZhO_IC.
im6~&./ʰ[;T'H
&*sC8pPahֲssb*'Lj=b}T +^h w o$#Ė?]U( *faaek|e ީ8׆HOi: FK`GH'^:^2H!t%ZW>?fsR'p.{KJǵSRbճ,1bQCG #gG]Gpu!+ZE6p|w-Xqwk4Cw-lѨ8ը ˑO s%.+4 g$WzdS KF|ʦ?č:m< Ӄ翤 :=q2IEUAXZBvZïJh!$IJ@0
a'J˽Kd@
̸|0 m1M~*J#\١Y ZK\9at Kx(x"yw?_~3 zo3-;TB̵'P5^1Z GghY[wq:{Ñkq 2(I0ꈵFˌ"bpp@qN, ' 3wiך|?fD?'$02Qݿ`.@Ԟ lߤ;++ B -(Th)j{E-A2̵h$IbY)AAH%"e4#s)xȜUuG#뙴 Øx3¯Z;L0:.Hfj˛Ot~1 J_K7K!ЭBU>?9 5@k@p>e<-a)~Ťbƍ=X:$?;snwDX q@S- e: $L'mo oa %֚J_hA/:_:, ˑB߮l
^AI&3eV>Z#":s:Bp(yCҵ Kج dM[^يq:TATa!
M}axY
IfMlTY0A]?6#tHH؟"G'Zcn:AU3gj JmW.a:P &b>玪<u`BKI(OPi 69``4N{ ;s%KKa#a-56D:?N8Gw(IKC=`t 4w's´6 U5ZN1=>ʸzOZ6UjB 0 NTCj)2 N*.VЕo
~ ݲ qƄ\|dLfE%/"Xb ZC さw>'L F \&,z hMγbqhDLːLx5_2CӯQe3{vRB4\;v>2wi a@`x4MU<'Spf/' =KbW)"
REc ~%
=t=ǤԅĒ-عQAK&YF>:[dL 指&{|
oVi* or?ܱ^]F~1P 4/rǦ,G Qy]r~oya#wuûe ,cg
];@N΅r-nzJ@-ran[-_>K*j#z L G>H \Oy-,4ͳȱiXSYR@'ƌeZupM[u>Z)# ͢ )k(]^f'6&Lrq̿01#tvAL\\M9X ņ'b GpP+,eOX6K`w+Ѳ\\lElh"]ta}C.egM4m q1 OZG @'0 0qV8l60Y7 'Z <+9YՏpR_>^{Ts3]5ct9 yL5쒍pkq~ۭ[-i4K UG Tg{7>?ce[= >__imd姗&܅Bbdm0:tw"/"a!`KX (\XJa8ͮ.+)㹋zCkF\HbjGMܑbYI|MS.8
P(]/kw"dOm^\d9c>a 9Ht ]vdQ}ӻy- %aM
ነ;Ey--OצUJE!?rsrӿkyjjun/~6] 9f q]`xǞ9 [I:5ۚxw1{+ )ON7f ~;Xcμ:^HQM~l*yA$a3x}J YC7N.&=Jau5 J'"CThB˼cOs7r46 $; W2=j5JI&3r-d\7n]ڄ#P Sc_wɻ ,8\n4BTh4J>LA h WGZT\4Y'9L.~I|D+ 1 &^* Lα&Q2:[}MJ;Q*TE#qQjrܿ8GrG6oT2S$q~(K._m)I8H ܨ
V#z Ʈ܀GegD '#2yO <
iV
"5=.P lٖ4g8U~&.י/|ݛ-]g0v>o ދob
xqgg :|fK$ .dS cȞOyӾP
A3
a* ?ĩfD@
1,ޞM!,vBb({ )+Cty`eW l){hA?H{MˁE_f|BJ t9&b|R܂ZL
xtV S2Yoo۳'r 41bqeQL:2 :'bf
AҊ? wM
xOOFd.ԶX[߮1m[M?% LVO[<^\}0TMdV9$@ L?D?,l߶n
A~֠dˮ / i#lZ2H[Dk/iYO;/ΏzG vs=RxP5 \v Çg89R.5Mr \c!Xhc~
3}^ZrvOw7`!u&pRQGGRꜮK46- $?ta{ Q#]&; J D/uTA, s&E6(H,ZyEH14oq@F5tM!"s NBwG Gl4W܁@8 oO ApTK#- x T[x% 7:jNukMУ21el8˔H0b]lVS 'l
;C MYV kJ![RpV_(0i,a/y,$ b.ɤ*%@wߘa[雎jyR8FГ2q~!8EQ DwK9@@@`/ *$>) 5}FC'2TNsIA
҇>Yq4|eutD> ̵-,7