libvirt-daemon-driver-nwfilter-1.1.1-29.el7_0.7> H HtxHFT ?*}}k Aw(_NQK:.kv84DUDcnaf9d7e0531ab65ea1b65a490de932607fb6d5e19)PG߼F ^8+FT ?*}}yaXA{!U8*ն'5s֙{^ʻ\>9?d!' 2 a $5FN _u     (38<9l:.GHIXY\]^/bUdefltuvwxyClibvirt-daemon-driver-nwfilter1.1.129.el7_0.7Nwfilter driver plugin for the libvirtd daemonThe nwfilter driver plugin for the libvirtd daemon, providing an implementation of the firewall APIs using the ebtables, iptables and ip6tables capabilitiesTksl7-kojislave01.fnal.gov0Scientific LinuxScientific LinuxLGPLv2+Scientific LinuxDevelopment/Librarieshttp://libvirt.org/linuxx86_640Tkdd1ddb55b5df68994c09de4e5d86ced1b5bd6fe287f851222fb53e5e53e5cabcrootrootlibvirt-1.1.1-29.el7_0.7.src.rpmlibvirt-daemon-driver-nwfilterlibvirt-daemon-driver-nwfilter(x86-64)libvirt_driver_nwfilter.so()(64bit)@@@@@@@@@@@@@@   @ ebtablesiptablesiptables-ipv6libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.9)(64bit)libdbus-1.so.3()(64bit)libdl.so.2()(64bit)libnl-3.so.200()(64bit)libnl-route-3.so.200()(64bit)libpcap.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libutil.so.1()(64bit)libvirt-daemonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)1.1.1-29.el7_0.73.0.4-14.6.0-14.0-15.2-14.11.1T T@T7T@T!`T @SES0@S(5@S L@SS @S Rb@R'R@RUR߲R=RkR@RR@RG@R|@RsRg@R].@RL RB@R:@R4OR)R @Q@QQQo@Q@QQU@Qq1Qb@Qb@Q5@Q \PZPP@PP)P`K@P`K@P\VPQPPy@PG>P@@P>@P6@P*=P*=P"TP - 1.1.1-29.el7_0.7Jiri Denemark - 1.1.1-29.el7_0.6Jiri Denemark - 1.1.1-29.el7_0.5Jiri Denemark - 1.1.1-29.el7_0.4Jiri Denemark - 1.1.1-29.el7_0.3Jiri Denemark - 1.1.1-29.el7_0.2Jiri Denemark - 1.1.1-29.el7_0.1Jiri Denemark - 1.1.1-29Jiri Denemark - 1.1.1-28Jiri Denemark - 1.1.1-27Jiri Denemark - 1.1.1-26Jiri Denemark - 1.1.1-25Jiri Denemark - 1.1.1-24Jiri Denemark - 1.1.1-23Jiri Denemark - 1.1.1-22Jiri Denemark - 1.1.1-21Daniel Mach - 1.1.1-20Jiri Denemark - 1.1.1-19Jiri Denemark - 1.1.1-18Daniel Mach - 1.1.1-17Jiri Denemark - 1.1.1-16Jiri Denemark - 1.1.1-15Jiri Denemark - 1.1.1-14Jiri Denemark - 1.1.1-13Jiri Denemark - 1.1.1-12Jiri Denemark - 1.1.1-11Jiri Denemark - 1.1.1-10Jiri Denemark - 1.1.1-9Jiri Denemark - 1.1.1-8Jiri Denemark - 1.1.1-7Jiri Denemark - 1.1.1-6Jiri Denemark - 1.1.1-5Jiri Denemark - 1.1.1-4Jiri Denemark - 1.1.1-3Jiri Denemark - 1.1.1-2Jiri Denemark - 1.1.1-1Jiri Denemark - 1.1.0-2Jiri Denemark - 1.1.0-1Jiri Denemark - 1.0.6-1Jiri Denemark - 1.0.5-2Jiri Denemark - 1.0.5-1Daniel Mach - 1.0.4-1.1Jiri Denemark - 1.0.4-1Richard W.M. Jones - 1.0.3-2Jiri Denemark - 1.0.3-1Jiri Denemark - 1.0.2-1Jiri Denemark - 1.0.1-1Jiri Denemark - 1.0.0-1Cole Robinson - 0.10.2.1-2Cole Robinson - 0.10.2.1-1Cole Robinson - 0.10.2-4Richard W.M. Jones - 0.10.2-3Daniel Veillard - 0.10.2-1Richard W.M. Jones - 0.10.1-5Richard W.M. Jones - 0.10.1-4Cole Robinson - 0.10.1-3Daniel P. Berrange - 0.10.1-2Daniel Veillard - 0.10.1-1Daniel Veillard - 0.10.0-1Daniel Veillard - 0.10.0-0rc1Daniel P. Berrange - 0.10.0-0rc0.2Daniel Veillard - 0.10.0-0rc0.1Daniel Veillard - 0.10.0-0rc0Richard W.M. Jones - 0.9.13-3Fedora Release Engineering - 0.9.13-2Daniel Veillard - 0.9.13-1Daniel Veillard - 0.9.12-1Cole Robinson - 0.9.11.3-1Daniel P. Berrange - 0.9.11-1Daniel P. Berrange - 0.9.10-4Daniel P. Berrange - 0.9.10-3Daniel P. Berrange - 0.9.10-2Daniel P. Berrange - 0.9.10-1Daniel P. Berrange - 0.9.9-2Daniel Veillard - 0.9.9-1Daniel P. Berrange - 0.9.8-2Daniel Veillard - 0.9.8-1Justin M. Forbes - 0.9.7-3Daniel P. Berrange - 0.9.7-2Daniel P. Berrange - 0.9.7-1Dan Horák - 0.9.6-3Laine Stump - 0.9.6-2Daniel Veillard - 0.9.6-1Daniel Veillard - 0.9.5-1Daniel Veillard - 0.9.4-1Dan Hor?k - 0.9.3-3Peter Robinson - 0.9.3-2Daniel Veillard - 0.9.3-1Richard W.M. Jones - 0.9.2-3Laine Stump - 0.9.2-2Daniel Veillard - 0.9.2-1Richard W.M. Jones - 0.9.1-3Daniel Veillard - 0.9.1-1Daniel Veillard - 0.9.0-1Daniel Veillard - 0.8.8-3Daniel P. Berrange - 0.8.8-2Daniel Veillard - 0.8.8-1Fedora Release Engineering - 0.8.7-2Daniel Veillard - 0.8.7-1Daniel Veillard - 0.8.5-1jkeating - 0.8.4-3Dan Horák - 0.8.4-2Daniel Veillard - 0.8.4-1Daniel P. Berrange - 0.8.3-2Daniel P. Berrange - 0.8.3-1David Malcolm - 0.8.2-3Daniel P. Berrange - 0.8.2-2Daniel Veillard - 0.8.2-1Daniel Veillard - 0.8.1-1Daniel Veillard - 0.8.0-1Richard W.M. Jones - 0.7.7-3.fc14Cole Robinson - 0.7.7-2.fc14Daniel Veillard - 0.7.7-1Adam Jackson 0.7.6-2Daniel Veillard - 0.7.6-1Chris Weyl 0.7.5-3Daniel P. Berrange - 0.7.5-2Daniel Veillard - 0.7.5-1Daniel Veillard - 0.7.4-1Daniel P. Berrange - 0.7.2-6Daniel P. Berrange - 0.7.2-5Daniel P. Berrange - 0.7.2-4Mark McLoughlin - 0.7.2-3Mark McLoughlin - 0.7.2-2Daniel Veillard - 0.7.2-1Mark McLoughlin - 0.7.1-12Mark McLoughlin - 0.7.1-11Mark McLoughlin - 0.7.1-10Mark McLoughlin - 0.7.1-9Mark McLoughlin - 0.7.1-8Mark McLoughlin - 0.7.1-7Chris Weyl - 0.7.1-6Mark McLoughlin - 0.7.1-5Mark McLoughlin - 0.7.1-4Daniel Veillard - 0.7.1-3Daniel Veillard - 0.7.1-2Daniel Veillard - 0.7.1-1Mark McLoughlin - 0.7.1-0.2.gitfac3f4cMark McLoughlin - 0.7.1-0.1.gitg3ef2e05Mark McLoughlin - 0.7.0-6Mark McLoughlin - 0.7.0-5Daniel P. Berrange - 0.7.0-4Mark McLoughlin - 0.7.0-3Mark McLoughlin - 0.7.0-2Daniel Veillard - 0.7.0-1Daniel Veillard - 0.6.5-1Daniel Veillard - 0.6.4-1Daniel Veillard - 0.6.3-1Daniel Veillard - 0.6.2-1Daniel Veillard - 0.6.1-1Daniel Veillard - 0.6.0-1Daniel Veillard - 0.5.0-1Daniel Veillard - 0.4.6-1Daniel Veillard - 0.4.5-1Daniel Veillard - 0.4.4-1Daniel Veillard - 0.4.3-1Daniel Veillard - 0.4.2-1Daniel Veillard - 0.4.1-1Daniel Veillard - 0.4.0-1Daniel Veillard - 0.3.3-1Daniel Veillard - 0.3.2-1Daniel Veillard - 0.3.1-1Daniel Veillard - 0.3.0-1Daniel Veillard - 0.2.3-1Daniel Veillard - 0.2.2-1Jeremy Katz - 0.2.1-2.fc7Daniel Veillard - 0.2.1-1Daniel P. Berrange - 0.2.0-4.fc7Daniel P. Berrange - 0.2.0-3.fc7Daniel P. Berrange - 0.2.0-2.fc7Daniel Veillard 0.2.0-1.fc7Daniel Veillard 0.1.11-1.fc7Daniel Veillard 0.1.10-1.fc7Jeremy Katz - 0.1.9-2Daniel Veillard 0.1.9-1Daniel Veillard 0.1.8-3Daniel Veillard 0.1.8-2Daniel Veillard 0.1.8-1Daniel Veillard 0.1.7-1Daniel Veillard 0.1.6-1Jeremy Katz - 0.1.5-3Daniel Veillard 0.1.5-2Daniel Veillard 0.1.5-1Daniel Berrange - 0.1.4-5Jeremy Katz - 0.1.4-4Daniel Veillard 0.1.4-3Daniel Veillard 0.1.4-2Daniel Veillard 0.1.4-1Jeremy Katz - 0.1.3-6Jeremy Katz - 0.1.3-5Jeremy Katz - 0.1.3-4Daniel Veillard 0.1.3-3Mark McLoughlin - 0.1.3-2Jesse Keating - 0.1.3-1.1Daniel Veillard 0.1.3-1Daniel Veillard 0.1.2-1Daniel Veillard 0.1.1-1Daniel Veillard 0.1.0-1Daniel Veillard 0.0.6-1Daniel Veillard 0.0.5-1Daniel Veillard 0.0.4-1Daniel Veillard 0.0.3-1Daniel Veillard 0.0.2-1Daniel Veillard 0.0.1-1- Fix segfault when starting a domain with no cpu definition (rhbz#1185458)- Add invariant TSC cpu flag (rhbz#1185458) - cpu_x86: Resolve Coverity RESOURCE_LEAK (rhbz#1185458) - Don't include non-migratable features in host-model (rhbz#1185458) - Fix leak in x86UpdateHostModel (rhbz#1185458) - Also filter out non-migratable features out of host-passthrough (rhbz#1185458) - man: virsh: Add man page for "virsh metadata" (rhbz#1184929) - virsh: man: Crosslink "desc" and "metadata" sections (rhbz#1184929)- conf: Format interface's driver more frequently (rhbz#1183447) - qemu: Factor out body of qemuDomainGetMetadata for universal use (rhbz#1184929) - qemu: Factor out body of qemuDomainSetMetadata for universal use (rhbz#1184929) - conf: Factor out setting of metadata to simplify code (rhbz#1184929) - util: Add helper to convert libxml2 nodes to a string (rhbz#1184929) - virsh-domain: use virXMLNodeToString instead of xmlNodeDump (rhbz#1184929) - virsh-domain: Add command to allow modifications of XML metadata (rhbz#1184929) - conf: Add support for requesting of XML metadata via the API (rhbz#1184929) - conf: allow to add XML metadata using the virDomainSetMetadata api (rhbz#1184929) - lib: Don't force the key argument when deleting metadata (rhbz#1184929) - lxc: Add metadata modification APIs (rhbz#1184929) - test: Add support into the test driver (rhbz#1184929) - tests: Add metadata tests (rhbz#1184929) - conf: Don't corrupt metadata on OOM (rhbz#1184929) - conf: Avoid false positive of uninitialized variable use (rhbz#1184929) - virsh: Don't shadow global variable "remove" in cmdMetadata (rhbz#1184929) - metadata: track title edits across libvirtd restart (rhbz#1184929) - conf: Improve metadata type verification (rhbz#1184929) - Fix possible memory leak in util/virxml.c (rhbz#1184929) - util: check for an illegal character in a XML namespace prefix (rhbz#1184929) - Fix libvirtd crash when removing metadata (rhbz#1184929)- qemu: blockcopy: Don't remove existing disk mirror info (rhbz#1149078) - qemu: copy: Accept 'format' parameter when copying to a non-existing img (rhbz#1149078) - qemu: reject rather than hang on blockcommit of active layer (rhbz#1150379) - CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823) - Fix crash when saving a domain with type none dac label (rhbz#1171124)- domain_conf: fix domain deadlock (CVE-2014-3657)- qemu: split out cpuset.mems setting (rhbz#1135871) - qemu: leave restricting cpuset.mems after initialization (rhbz#1135871) - qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)- LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179) - virNetClientSetTLSSession: Restore original signal mask (rhbz#1112689) - Don't use AI_ADDRCONFIG when binding to wildcard addresses (rhbz#1112692) - qemu: Unlock the NWFilter update lock by leaving via the cleanup label (rhbz#1112690)- nwfilter: Increase buffer size for libpcap (rhbz#1078347) - nwfilter: Display pcap's error message when pcap setup fails (rhbz#1078347) - nwfilter: Fix double free of pointer (rhbz#1071181)- qemu: Forbid "sgio" support for SCSI generic host device (rhbz#957292) - qemu: monitor: Fix invalid parentheses (rhbz#1075973) - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1076503)- spec: Let translations be properly updated (rhbz#1030368) - Update translation to supported languages (rhbz#1030368) - Add a mutex to serialize updates to firewall (rhbz#1074003)- virNetDevVethCreate: Serialize callers (rhbz#1014604) - qemuBuildNicDevStr: Adapt to new advisory on multiqueue (rhbz#1071888)- maint: fix comma style issues: conf (rhbz#1032370) - Allow for type=block to have no dev (rhbz#1032370) - Allow LUN type disks to have no source (rhbz#1032370) - virsh-volume: Unify strigification of volume type (rhbz#1032370) - conf: Refactor virDomainDiskSourcePoolDefParse (rhbz#1032370) - conf: Split out code to parse the source of a disk definition (rhbz#1032370) - conf: Rename virDomainDiskHostDefFree to virDomainDiskHostDefClear (rhbz#1032370) - conf: Refactor virDomainDiskSourceDefParse (rhbz#1032370) - storage: fix RNG validation of gluster via netfs (rhbz#1032370) - maint: fix comment typos. (rhbz#1032370) - storage: use valid XML for awkward volume names (rhbz#1032370) - build: Don't fail on '< ' or '> ' with old xmllint (rhbz#1032370) - storage: allow interleave in volume XML (rhbz#1032370) - storage: expose volume meta-type in XML (rhbz#1032370) - storage: initial support for linking with libgfapi (rhbz#1032370) - storage: document existing pools (rhbz#1032370) - storage: document gluster pool (rhbz#1032370) - storage: implement rudimentary glusterfs pool refresh (rhbz#1032370) - storage: add network-dir as new storage volume type (rhbz#1032370) - storage: improve directory support in gluster pool (rhbz#1032370) - storage: improve allocation stats reported on gluster files (rhbz#1032370) - storage: improve handling of symlinks in gluster (rhbz#1032370) - storage: probe qcow2 volumes in gluster pool (rhbz#1032370) - storage: fix typo in previous patch (rhbz#1032370) - conf: Export virStorageVolType enum helper functions (rhbz#1032370) - test: Implement fake storage pool driver in qemuxml2argv test (rhbz#1032370) - storage: reduce number of stat calls (rhbz#1032370) - storage: use simpler 'char *' (rhbz#1032370) - storage: refactor backing chain division of labor (rhbz#1032370) - storage: always probe type with buffer (rhbz#1032370) - storage: don't read storage volumes in nonblock mode (rhbz#1032370) - storage: skip selinux cleanup when fd not available (rhbz#1032370) - storage: use correct type for array count (rhbz#1032370) - storage: allow interleave in pool XML (rhbz#1032370) - qemuxml2argv: Add test to verify correct usage of disk type="volume" (rhbz#1032370) - qemuxml2argv: Add test for disk type='volume' with iSCSI pools (rhbz#1032370) - tests: Fix comment for fake storage pool driver (rhbz#1032370) - conf: Support disk source formatting without needing a virDomainDiskDefPtr (rhbz#1032370) - conf: Clean up virDomainDiskSourceDefFormatInternal (rhbz#1032370) - conf: Split out seclabel formating code for disk source (rhbz#1032370) - conf: Export disk source formatter and parser (rhbz#1032370) - snapshot: conf: Use common parsing and formatting functions for source (rhbz#1032370) - snapshot: conf: Fix NULL dereference when element is empty (rhbz#1032370) - conf: Add functions to copy and free network disk source definitions (rhbz#1032370) - qemu: snapshot: Detect internal snapshots also for sheepdog and RBD (rhbz#1032370) - conf: Add helper do clear disk source authentication struct (rhbz#1032370) - qemu: snapshot: Touch up error message (rhbz#1032370) - qemu: snapshot: Add functions similar to disk source pool translation (rhbz#1032370) - qemu: Refactor qemuTranslateDiskSourcePool (rhbz#1032370) - qemu: Split out formatting of network disk source URI (rhbz#1032370) - qemu: Simplify call pattern of qemuBuildDriveURIString (rhbz#1032370) - qemu: Use qemuBuildNetworkDriveURI to handle http/ftp and friends (rhbz#1032370) - qemu: Migrate sheepdog source generation into common function (rhbz#1032370) - qemu: Split out NBD command generation (rhbz#1032370) - qemu: Unify formatting of RBD sources (rhbz#1032370) - qemu: Refactor disk source string formatting (rhbz#1032370) - qemu: Clear old translated pool source (rhbz#1032370) - qemu: snapshots: Declare supported and unsupported snapshot configs (rhbz#1032370) - domainsnapshotxml2xmltest: Clean up labels and use bool instead of int (rhbz#1032370) - domainsnapshotxml2xmltest: Allow for better testing of snapshots (rhbz#1032370) - domainsnapshotxml2xml: Move files with conflicting names (rhbz#1032370) - domainsnapshotxml2xmltest: Add existing files as new tests (rhbz#1032370) - domainsnapshotxml2xmltest: Add test case for empty driver element (rhbz#1032370) - qemu: Fix indentation in qemuTranslateDiskSourcePool (rhbz#1032370) - qemu: snapshot: Fix incorrect disk type for auto-generated disks (rhbz#1032370) - storage: fix omitted slash in gluster volume URI (rhbz#1032370) - virsh: domain: Fix undefine with storage of 'volume' disks (rhbz#1032370) - snapshot: schema: Split out snapshot disk driver definition (rhbz#1032370) - storage: Add gluster pool filter and fix virsh pool listing (rhbz#1032370) - storage: fix bogus target in gluster volume xml (rhbz#1032370) - storage: Improve error message when a storage backend is missing (rhbz#1032370) - storage: Break long lines and clean up spaces in storage backend header (rhbz#1032370) - storage: Support deletion of volumes on gluster pools (rhbz#1032370) - qemu: snapshot: Avoid libvirtd crash when qemu crashes while snapshotting (rhbz#1032370) - qemu: snapshot: Forbid snapshots when backing is a scsi passthrough disk (rhbz#1034993) - qemu: Avoid crash in qemuDiskGetActualType (rhbz#1032370) - snapshot: Add support for specifying snapshot disk backing type (rhbz#1032370) - conf: Move qemuDiskGetActualType to virDomainDiskGetActualType (rhbz#1032370) - conf: Move qemuSnapshotDiskGetActualType to virDomainSnapshotDiskGetActualType (rhbz#1032370) - storage: Add file storage APIs in the default storage driver (rhbz#1032370) - storage: add file functions for local and block files (rhbz#1032370) - storage: Add storage file backends for gluster (rhbz#1032370) - qemu: Switch snapshot deletion to the new API functions (rhbz#1032370) - qemu: snapshot: Use new APIs to detect presence of existing storage files (rhbz#1032370) - qemu: snapshot: Add support for external active snapshots on gluster (rhbz#1032370) - storage: Fix build with older compilers afeter gluster snapshot series (rhbz#1032370) - storage: gluster: Don't leak private data when storage file init fails (rhbz#1032370) - spec: Use correct versions of libgfapi in RHEL builds (rhbz#1032370) - spec: Fix braces around macros (rhbz#1032370) - build: use --with-systemd-daemon as configure option (rhbz#1032695) - spec: require device-mapper-devel for storage-disk (rhbz#1032695) - spec: make systemd_daemon usage configurable (rhbz#1032695)- Block info query: Add check for transient domain (rhbz#1065531) - Fix minor typos in messages and docs (rhbz#1045643) - LXC: Free variable vroot in lxcDomainDetachDeviceHostdevUSBLive() (rhbz#1045643) - LXC: free dst before lxcDomainAttachDeviceDiskLive returns (rhbz#1045643) - maint: fix comment typos (rhbz#1045643) - storage: avoid short reads while chasing backing chain (rhbz#1045643) - Don't block use of USB with containers (rhbz#1045643) - Fix path used for USB device attach with LXC (rhbz#1045643) - Record hotplugged USB device in LXC live guest config (rhbz#1045643) - Fix reset of cgroup when detaching USB device from LXC guests (rhbz#1045643) - Disks are always block devices, never character devices (rhbz#1045643) - Move check for cgroup devices ACL upfront in LXC hotplug (rhbz#1045643) - Add virFileMakeParentPath helper function (rhbz#1045643) - Add helper for running code in separate namespaces (rhbz#1045643) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code (CVE-2013-6456) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC disk hotplug (CVE-2013-6456) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug (CVE-2013-6456) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC block hostdev hotplug (CVE-2013-6456) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug (CVE-2013-6456) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code (CVE-2013-6456) - Ignore additional fields in iscsiadm output (rhbz#1067173) - qemuBuildNicDevStr: Set vectors= on Multiqueue (rhbz#1066209) - Don't depend on syslog.service (rhbz#1032695) - libvirt-guests: Run only after libvirtd (rhbz#1032695) - virSystemdCreateMachine: Set dependencies for slices (rhbz#1032695) - libvirt-guests: Wait for libvirtd to initialize (rhbz#1032695) - virNetServerRun: Notify systemd that we're accepting clients (rhbz#1032695)- Generate a valid imagelabel even for type 'none' (rhbz#1061657) - qemu: keep pre-migration domain state after failed migration (rhbz#1057407) - schema: Fix guest timer specification schema according to the docs (rhbz#1056205) - conf: Enforce supported options for certain timers (rhbz#1056205) - qemu: hyperv: Add support for timer enlightenments (rhbz#1056205) - build: correctly check for SOICGIFVLAN GET_VLAN_VID_CMD command (rhbz#1062665) - util: Add "shareable" field for virSCSIDevice struct (rhbz#957292) - util: Fix the indention (rhbz#957292) - qemu: Don't fail if the SCSI host device is shareable between domains (rhbz#957292) - util: Add one argument for several scsi utils (rhbz#957292) - tests: Add tests for scsi utils (rhbz#957292) - qemu: Fix the error message for scsi host device's shareable checking (rhbz#957292) - util: Accept test data path for scsi device's sg_path (rhbz#957292) - tests: Modify the scsi util tests (rhbz#957292) - event: move event filtering to daemon (regression fix) (rhbz#1047964)- Add a read/write lock implementation (rhbz#1034807) - Push nwfilter update locking up to top level (rhbz#1034807) - utils: Introduce functions for kernel module manipulation (rhbz#1045124) - virCommand: Introduce virCommandSetDryRun (rhbz#1045124) - tests: Add test for new virkmod functions (rhbz#1045124) - Honor blacklist for modprobe command (rhbz#1045124) - qemu: Be sure we're using the updated value of backend during hotplug (rhbz#1056360) - network: Permit upstream forwarding of unqualified DNS names (rhbz#1061099) - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1061099) - network: Change default of forwardPlainNames to 'yes' (rhbz#1061099)- util: Correct the NUMA node range checking (rhbz#1045958) - storage: Add document for possible problem on volume detection (rhbz#726797) - storage: Fix autostart of pool with "fc_host" type adapter (rhbz#726797)- Mass rebuild 2014-01-24- CVE-2013-6436: Fix crash in lxcDomainGetMemoryParameters (rhbz#1049137) - Fix crash in lxcDomainSetMemoryParameters (rhbz#1052062) - Don't crash if a connection closes early (CVE-2014-1447) - Really don't crash if a connection closes early (CVE-2014-1447) - qemu: Change the default unix monitor timeout (rhbz#892273) - virSecuritySELinuxSetFileconHelper: Don't fail on read-only NFS (rhbz#996543) - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1054785) - virt-login-shell: Fix regressions in behavior (rhbz#1015247) - pci: Make reattach work for unbound devices (rhbz#1046919) - pci: Fix failure paths in detach (rhbz#1046919) - qemu: Don't detach devices if passthrough doesn't work (rhbz#1046919) - Fix migration with QEMU 1.6 (rhbz#1053405) - build: More workarounds for if_bridge.h (rhbz#1042937) - build: Fix build with latest rawhide kernel headers (rhbz#1042937) - aarch64: Disable -fstack-protector. (rhbz#1042937) - AArch64: Parse cputopology from /proc/cpuinfo. (rhbz#1042937) - virDomainEventCallbackListFree: Don't leak @list->callbacks (rhbz#1047964) - Fix memory leak in virObjectEventCallbackListRemoveID() (rhbz#1047964) - event: Filter global events by domain:getattr ACL (CVE-2014-0028) - Doc: Improve the document for nodesuspend (rhbz#1045089) - Doc: Add "note" for node-memory-tune (rhbz#1045089)- qemu: Ask for -enable-fips when FIPS is required (rhbz#1035474) - qemu: Properly set MaxMemLock when hotplugging with VFIO (rhbz#1035490) - qemu: Avoid duplicate security label restore on hostdev attach failure (rhbz#1035490) - qemu: Re-add hostdev interfaces to hostdev array on libvirtd restart (rhbz#1045002) - domain: Don't try to interpret as virtio config for hostdev interfaces (rhbz#1046337) - virBitmapParse: Fix behavior in case of error and fix up callers (rhbz#1047234) - qemu: Fix live pinning to memory node on NUMA system (rhbz#1047234) - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1047234) - qemu: Range check numa memory placement mode (rhbz#1047234) - virkeycode: Allow ANSI_A (rhbz#1044806) - Fix argument order of qemuMigrationPerformJob(). (rhbz#1049338) - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458) - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458) - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458) - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1048643) - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458) - PanicCheckABIStability: Need to check for existence (rhbz#996520) - virsh: Improve usability of '--print-xml' flag for attach-disk command (rhbz#1049529) - virsh: Don't use legacy API if --current is used on device hot(un)plug (rhbz#1049529) - virsh: Use inactive definition when removing disk from config (rhbz#1049529)- Mass rebuild 2013-12-27- qemu: Check for reboot-timeout on monitor (rhbz#1042690) - virsh: Fix return value error of cpu-stats (rhbz#1043388) - tools: Fix virsh connect man page (rhbz#1043260) - conf: Introduce generic ISA address (rhbz#996520) - conf: Add support for panic device (rhbz#996520) - qemu: Add support for -device pvpanic (rhbz#996520) - Fix invalid read in virNetSASLSessionClientStep debug log (rhbz#1043864) - virsh: man: Mention that volumes need to be in storage pool for undefine (rhbz#1044445)- spec: Don't save/restore running VMs on libvirt-client update (rhbz#1033626) - qemu: hotplug: Only label hostdev after checking device conflicts (rhbz#1025108) - qemu: hotplug: Fix double free on USB collision (rhbz#1025108) - qemu: hotplug: Fix adding USB devices to the driver list (rhbz#1025108) - docs: Enhance memoryBacking/locked documentation (rhbz#1035954) - util: Fix two virCompareLimitUlong bugs (rhbz#1024272) - cgroups: Redefine what "unlimited" means wrt memory limits (rhbz#1024272) - qemu: Report VIR_DOMAIN_MEMORY_PARAM_UNLIMITED properly (rhbz#1024272) - qemu: Fix minor inconsistency in error message (rhbz#1024272) - conf: Don't format memtune with unlimited values (rhbz#1024272) - qemu_process: Read errors from child (rhbz#1035955) - network: Properly update iptables rules during net-update (rhbz#1035336) - Tie SASL callbacks lifecycle to virNetSessionSASLContext (rhbz#1039991) - screenshot: Implement multiple screen support (rhbz#1026966) - Switch to private redhat namespace for QMP I/O error reason (rhbz#1026966) - Support virtio disk hotplug in JSON mode (rhbz#1026966)- nodedev: Resolve Relax-NG validity error (rhbz#1035792) - test-lib: Make case skipping possible (rhbz#1034380) - tests: Don't test user config file if ran as root (rhbz#1034380) - Improve cgroups docs to cover systemd integration (rhbz#1004340) - Fix busy wait loop in LXC container I/O handling (rhbz#1032705) - tests: Guarantee abs_srcdir in all C tests (rhbz#1035403) - Introduce standard methods for sorting strings with qsort (rhbz#1035403) - Add virFileIsMountPoint function (rhbz#1035403) - Pull lxcContainerGetSubtree out into shared virfile module (rhbz#1035403) - Fix bug in identifying sub-mounts (rhbz#1035403) - LXC: Ensure security context is set when mounting images (rhbz#923903) - Ensure to zero out the virDomainBlockJobInfo arg (rhbz#1028846) - qemu: Default to vfio for nodedev-detach (rhbz#1035188) - daemon: Run virStateCleanup conditionally (rhbz#1033061) - qemu: Add "-boot strict" to commandline whenever possible (rhbz#1037593) - tests: Add forgotten boot-strict test files (rhbz#1037593) - conf: Fix XML formatting of RNG device info (rhbz#1035118) - qemu: Improve error when setting invalid count of vcpus via agent (rhbz#1035108) - Add qxl ram size to ABI stability check (rhbz#1035123)- virsh-domain: Mark --live and --config mutually exclusive in vcpucount (rhbz#1024245) - virSecurityLabelDefParseXML: Don't parse label on model='none' (rhbz#1028962) - qemuMonitorIO: Don't use @mon after it's unrefed (rhbz#1018267) - qemu: Allow hotplug of multiple SCSI devices (rhbz#1031062) - qemu: Call qemuSetupHostdevCGroup later during hotplug (rhbz#1025108) - virscsi: Hostdev SCSI AdapterId retrieval fix (rhbz#1031079) - storage: Returns earlier if source adapter of the scsi pool is a HBA (rhbz#1027680) - spec: Restrict virt-login-shell usage (rhbz#1033614) - spec: Don't save/restore running VMs on libvirt-client update (rhbz#1033626) - Don't start a nested job in qemuMigrationPrepareAny (rhbz#1018267)- virpci: Don't error on unbinded devices (rhbz#1019387) - network: Fix connections count in case of allocate failure (rhbz#1020135) - qemu: Clean up migration ports when migration cancelled (rhbz#1019237) - qemuMigrationBeginPhase: Check for 'drive-mirror' for NBD (rhbz#1022393) - Allow root directory in filesystem source dir schema (rhbz#1028107) - Use a port from the migration range for NBD as well (rhbz#1025699) - qemu: Avoid double free of VM (rhbz#1018267) - util: Use size_t instead of unsigned int for num_virtual_functions (rhbz#1025397) - pci: Properly handle out-of-order SRIOV virtual functions (rhbz#1025397) - conf: Do better job when comparing features ABI compatibility (rhbz#1008989) - schema: Rename option 'hypervtristate' to 'featurestate' (rhbz#1008989) - conf: Mark user provided strings in error messages when parsing XML (rhbz#1008989) - cpu: Add support for loading and storing CPU data (rhbz#1008989) - cpu: x86: Rename struct cpuX86cpuid as virCPUx86CPUID (rhbz#1008989) - cpu: x86: Rename struct cpuX86Data as virCPUx86Data (rhbz#1008989) - cpu: x86: Rename x86DataFree() as virCPUx86DataFree() (rhbz#1008989) - Ensure 'arch' is always set in cpuArchNodeData (rhbz#1008989) - cpu: x86: Rename x86MakeCPUData as virCPUx86MakeData (rhbz#1008989) - cpu: x86: Rename x86DataAddCpuid as virCPUx86DataAddCPUID (rhbz#1008989) - cpu: x86: Rename data_iterator and DATA_ITERATOR_INIT (rhbz#1008989) - cpu: x86: Fix return types of x86cpuidMatch and x86cpuidMatchMasked (rhbz#1008989) - cpu: x86: Use whitespace to clarify context and use consistent labels (rhbz#1008989) - cpu: x86: Clean up error messages in x86VendorLoad() (rhbz#1008989) - cpu: Export few x86-specific APIs (rhbz#1008989) - cpu: x86: Parse the CPU feature map only once (rhbz#1008989) - cpu_x86: Refactor storage of CPUID data to add support for KVM features (rhbz#1008989) - qemu: Add monitor APIs to fetch CPUID data from QEMU (rhbz#1008989) - cpu: x86: Add internal CPUID features support and KVM feature bits (rhbz#1008989) - conf: Refactor storing and usage of feature flags (rhbz#1008989) - qemu: Add support for paravirtual spinlocks in the guest (rhbz#1008989) - qemu: process: Validate specific CPUID flags of a guest (rhbz#1008989)- Add helpers for getting env vars in a setuid environment (rhbz#1015247) - Only allow 'stderr' log output when running setuid (CVE-2013-4400) - Close all non-stdio FDs in virt-login-shell (CVE-2013-4400) - Don't link virt-login-shell against libvirt.so (CVE-2013-4400) - build: Fix linking virt-login-shell (rhbz#1015247) - build: Fix build of virt-login-shell on systems with older gnutls (rhbz#1015247) - Set a sane $PATH for virt-login-shell (rhbz#1015247) - spec: Fix rpm build when lxc disabled (rhbz#1015247) - Move virt-login-shell into libvirt-login-shell sub-RPM (rhbz#1015247) - Make virCommand env handling robust in setuid env (rhbz#1015247) - Remove all direct use of getenv (rhbz#1015247) - Block all use of getenv with syntax-check (rhbz#1015247) - Only allow the UNIX transport in remote driver when setuid (rhbz#1015247) - Don't allow remote driver daemon autostart when running setuid (rhbz#1015247) - Add stub getegid impl for platforms lacking it (rhbz#1015247) - Remove (nearly) all use of getuid()/getgid() (rhbz#1015247) - Block all use of libvirt.so in setuid programs (rhbz#1015247) - spec: Clean up distribution of ChangeLog (and others) (rhbz#1024393) - Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs (rhbz#1024393)- qemu_process: Make qemuProcessReadLog() more versatile and reusable (rhbz#1001738) - qemu: monitor: Add infrastructure to access VM logs for better err msgs (rhbz#1001738) - qemu: monitor: Produce better errors on monitor hangup (rhbz#1001738) - qemu: Wire up better early error reporting (rhbz#1001738) - qemu: process: Silence coverity warning when rewinding log file (rhbz#1001738) - qemu: hostdev: Refactor PCI passhrough handling (rhbz#1001738) - qemu: hostdev: Fix function spacing and header formatting (rhbz#1001738) - qemu: hostdev: Add checks if PCI passthrough is available in the host (rhbz#1001738) - qemu: Prefer VFIO for PCI device passthrough (rhbz#1001738) - qemu: Init @pcidevs in qemuPrepareHostdevPCIDevices (rhbz#1001738) - Fix max stream packet size for old clients (rhbz#950416) - Adjust legacy max payload size to account for header information (rhbz#950416) - rpc: Correct the wrong payload size checking (rhbz#950416) - qemu: Simplify calling qemuDomainHostdevNetConfigRestore (rhbz#1005682) - qemu: Move qemuDomainRemoveNetDevice to avoid forward reference (rhbz#1005682) - qemu: Fix removal of (rhbz#1005682) - remote: Fix regression in event deregistration (rhbz#1020376) - qemu: managedsave: Add support for compressing managed save images (rhbz#1017227) - qemu: snapshot: Add support for compressing external snapshot memory (rhbz#1017227) - Migration: Introduce VIR_MIGRATE_PARAM_LISTEN_ADDRESS (rhbz#1015215) - virsocket: Introduce virSocketAddrIsWildcard (rhbz#1015215) - qemu: Implement support for VIR_MIGRATE_PARAM_LISTEN_ADDRESS (rhbz#1015215) - qemu_conf: Introduce "migration_address" (rhbz#1015215) - qemu: Include listenAddress in debug prints (rhbz#1015215) - docs: Expand description of host-model CPU mode (rhbz#1014682) - qemu: Avoid assigning unavailable migration ports (rhbz#1019237) - qemu: Make migration port range configurable (rhbz#1019237) - qemu: Fix augeas support for migration ports (rhbz#1019237) - Fix perms for virConnectDomainXML{To, From}Native (CVE-2013-4401)- virNetDevBandwidthEqual: Make it more robust (rhbz#1014503) - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014503) - qemu: Check actual netdev type rather than config netdev type during init (rhbz#1012824) - Fix crash in libvirtd when events are registered & ACLs active (CVE-2013-4399) (rhbz#1011429) - Remove virConnectPtr arg from virNWFilterDefParse* (rhbz#1015108) - Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' (rhbz#1015108) - Remove use of virConnectPtr from all remaining nwfilter code (rhbz#1015108) - Don't set netdev offline in container cleanup (rhbz#1014604) - Avoid reporting an error if veth device is already deleted (rhbz#1014604) - Avoid deleting NULL veth device name (rhbz#1014604) - Retry veth device creation on failure (rhbz#1014604) - Use 'vnet' as prefix for veth devices (rhbz#1014604) - Free cmd in virNetDevVethDelete (rhbz#1014604) - Free cmd in virNetDevVethCreate (rhbz#1014604) - LXC: Fix handling of RAM filesystem size units (rhbz#1015689) - build: Add lxc testcase to dist list (rhbz#1015689) - tests: Work with older dbus (rhbz#1018730) - virdbus: Add virDBusHasSystemBus() (rhbz#1018730) - virsystemd: Don't fail to start VM if DBus isn't available or compiled in (rhbz#1018730) - DBus: Introduce virDBusIsServiceEnabled (rhbz#1018730) - Change way we fake dbus method calls (rhbz#1018730) - Fix virsystemdtest for previous commit (rhbz#1018730) - LXC: Workaround machined uncleaned data with containers running systemd. (rhbz#1018730) - Allow use of a private dbus bus connection (rhbz#998365) - Add a method for closing the dbus system bus connection (rhbz#998365) - Make LXC controller use a private dbus connection & close it (rhbz#998365) - Fix flaw in detecting log format (rhbz#927072) - Fix exit status of lxc controller (rhbz#927072) - Improve error reporting with LXC controller (rhbz#927072) - nwfilter: Don't fail to start if DBus isn't available (rhbz#927072) - Don't ignore all dbus connection errors (rhbz#927072) - LXC: Check the existence of dir before resolving symlinks (rhbz#927072) - Ensure lxcContainerMain reports errors on stderr (rhbz#927072) - Ensure lxcContainerResolveSymlinks reports errors (rhbz#927072) - Improve log filtering in virLXCProcessReadLogOutputData (rhbz#927072) - Initialize threading & error layer in LXC controller (rhbz#1018725) - qemu_migration: Avoid crashing if domain dies too quickly (rhbz#1018267) - Convert uuid to a string before printing it (rhbz#1019023)- conf: Don't crash on invalid chardev source definition of RNGs and other (rhbz#1012196) - rpc: Increase bound limit for virDomainGetJobStats (rhbz#1012818) - qemu: Free all driver data in qemuStateCleanup (rhbz#1011330) - qemu: Don't leak reference to virQEMUDriverConfigPtr (rhbz#1011330) - qemu: Eliminate redundant if clauses in qemuCollectPCIAddress (rhbz#1003983) - qemu: Allow some PCI devices to be attached to PCIe slots (rhbz#1003983) - qemu: Replace multiple strcmps with a switch on an enum (rhbz#1003983) - qemu: Support ich9-intel-hda audio device (rhbz#1003983) - qemu: Turn if into switch in qemuDomainValidateDevicePCISlotsQ35 (rhbz#1003983) - qemu: Prefer to put a Q35 machine's dmi-to-pci-bridge at 00:1E.0 (rhbz#1003983)- Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296) - LXC: Don't mount securityfs when user namespace enabled (rhbz#872648) - Move array of mounts out of lxcContainerMountBasicFS (rhbz#872648) - Ensure root filesystem is recursively mounted readonly (rhbz#872648) - qemu: Fix seamless SPICE migration (rhbz#1010861) - qemu: Use "ide" as device name for implicit SATA controller on Q35 (rhbz#1008903) - qemu: Only parse basename when determining emulator properties (rhbz#1010617) - qemu: Recognize -machine accel=kvm when parsing native (rhbz#1010617) - qemu: Don't leave shutdown inhibited on attach failure (rhbz#1010617) - qemu: Don't leak vm on failure (rhbz#1010617) - Fix typo in identity code which is pre-requisite for CVE-2013-4311 (rhbz#1006272)- Also store user & group ID values in virIdentity (rhbz#1006272) - Ensure system identity includes process start time (rhbz#1006272) - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311) - Free slicename in virSystemdCreateMachine (rhbz#1008619) - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1008340) - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1008340) - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1008340) - qemu: Avoid dangling job in qemuDomainSetBlockIoTune (rhbz#700443)- Pass AM_LDFLAGS to driver modules too (rhbz#1006299) - virsh domjobinfo: Do not return 1 if job is NONE (rhbz#1006864) - Fix polkit permission names for storage pools, vols & node devices (rhbz#700443) - Fix naming of permission for detecting storage pools (rhbz#700443) - security: Provide supplemental groups even when parsing label (CVE-2013-4291) (rhbz#1006513) - virFileNBDDeviceAssociate: Avoid use of uninitialized variable (CVE-2013-4297) - Rename "struct interface_driver" to virNetcfDriverState (rhbz#983026) - netcf driver: Use a single netcf handle for all connections (rhbz#983026) - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006722) - Add test for the nodemask double free crash (rhbz#1006722) - qemu: Fix checking of guest ABI compatibility when reverting snapshots (rhbz#1006886)- Don't crash in qemuBuildDeviceAddressStr (rhbz#1003526) - Fix leaks in python bindings (rhbz#1003828) - Process virtlockd.conf instead of libvirtd.conf (rhbz#1003685) - test_virtlockd.aug.in: Use the correct file (rhbz#1003685) - qemu: Make domain renaming work during migration (rhbz#999352) - qemu: Handle huge number of queues correctly (rhbz#651941) - conf: Remove the actual hostdev when removing a network (rhbz#1003537) - conf: Don't deref NULL actual network in virDomainNetGetActualHostdev() (rhbz#1003537) - python: Fix a PyList usage mistake (rhbz#1002558) - Add '' element to '' network schemas (rhbz#1004364) - Always specify qcow2 compat level on qemu-img command line (rhbz#997977) - selinux: Distinguish failure to label from request to avoid label (rhbz#924153) - selinux: Enhance test to cover nfs label failure (rhbz#924153)- RPC: Don't accept client if it would overcommit max_clients (rhbz#981729) - Introduce max_queued_clients (rhbz#981729) - conf: Add default USB controller in qemu post-parse callback (rhbz#819968) - qemu: Rename some functions in qemu_command.c (rhbz#819968) - qemu: Eliminate almost-duplicate code in qemu_command.c (rhbz#819968) - qemu: Enable auto-allocate of all PCI addresses (rhbz#819968) - qemu: Add pcie-root controller (rhbz#819968) - qemu: Add dmi-to-pci-bridge controller (rhbz#819968) - qemu: Fix handling of default/implicit devices for q35 (rhbz#819968) - qemu: Properly set/use device alias for pci controllers (rhbz#819968) - qemu: Enable using implicit sata controller in q35 machines (rhbz#819968) - qemu: Improve error reporting during PCI address validation (rhbz#819968) - qemu: Refactor qemuDomainCheckDiskPresence for only disk presence check (rhbz#910171) - qemu: Add helper functions for diskchain checking (rhbz#910171) - qemu: Check presence of each disk and its backing file as well (rhbz#910171) - conf: Add startupPolicy attribute for harddisk (rhbz#910171) - qemu: Support to drop disk with 'optional' startupPolicy (rhbz#910171) - Split TLS test into two separate tests (rhbz#994158) - Avoid re-generating certs every time (rhbz#994158) - Change data passed into TLS test cases (rhbz#994158) - Fix validation of CA certificate chains (rhbz#994158) - Fix parallel runs of TLS test suites (rhbz#994158) - tests: Fix parallel runs of TLS test suites (rhbz#994158) - Add a man page for virtlockd daemon (rhbz#991494) - Add an example config file for virtlockd (rhbz#991494) - Properly handle -h / -V for --help/--version aliases in virtlockd/libvirtd (rhbz#991494) - Make check for /dev/loop device names stricter to avoid /dev/loop-control (rhbz#924815) - Ensure securityfs is mounted readonly in container (rhbz#872642) - Add info about access control checks into API reference (rhbz#700443) - Record the where the auto-generated data comes from (rhbz#700443) - Add documentation for access control system (rhbz#700443) - virsh-domain: Flip logic in cmdSetvcpus (rhbz#996552) - Honour root prefix in lxcContainerMountFSBlockAuto (rhbz#924815) - util: Add virGetUserDirectoryByUID (rhbz#988491) - Introduce a virt-login-shell binary (rhbz#988491) - build: Fix compilation of virt-login-shell.c (rhbz#988491) - Fix double-free and broken logic in virt-login-shell (rhbz#988491) - Address missed feedback from review of virt-login-shell (rhbz#988491) - Ensure that /dev exists in the container root filesystem (rhbz#924815) - remote: Fix a segfault in remoteDomainCreateWithFlags (rhbz#994855) - build: Avoid -lgcrypt with newer gnutls (rhbz#951637) - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#994158) - build: Fix missing max_queued_clients in augeas test file for libvirtd.conf (rhbz#981729) - virsh-domain: Fix memleak in cmdCPUBaseline (rhbz#997798) - Fix typo in domain name in polkit acl example (rhbz#700443) - Update polkit examples to use 'lookup' method (rhbz#700443) - Add bounds checking on virDomainMigrate*Params RPC calls (CVE-2013-4292) (rhbz#1002667) - Add bounds checking on virDomainGetJobStats RPC call (rhbz#1002667) - Add bounds checking on virDomain{SnapshotListAllChildren, ListAllSnapshots} RPC calls (rhbz#1002667) - Add bounds checking on virConnectListAllDomains RPC call (rhbz#1002667) - Add bounds checking on virConnectListAllStoragePools RPC call (rhbz#1002667) - Add bounds checking on virStoragePoolListAllVolumes RPC call (rhbz#1002667) - Add bounds checking on virConnectListAllNetworks RPC call (rhbz#1002667) - Add bounds checking on virConnectListAllInterfaces RPC call (rhbz#1002667) - Add bounds checking on virConnectListAllNodeDevices RPC call (rhbz#1002667) - Add bounds checking on virConnectListAllNWFilters RPC call (rhbz#1002667) - Add bounds checking on virConnectListAllSecrets RPC call (rhbz#1002667) - Prohibit unbounded arrays in XDR protocols (rhbz#1002667) - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997906) - virbitmaptest: Fix function header formatting (rhbz#997906) - virbitmaptest: Add test for out of bounds condition (rhbz#997906) - virsh-domain: Fix memleak in cmdUndefine with storage (rhbz#999057) - virsh: Modify vshStringToArray to duplicate the elements too (rhbz#999057) - virsh: Don't leak list of volumes when undefining domain with storage (rhbz#999057) - Fix URI connect precedence (rhbz#999323) - tests: Add URI precedence checking (rhbz#999323) - Don't free NULL network in cmdNetworkUpdate (rhbz#1001094) - virsh: Fix debugging (rhbz#1001628) - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1002669) - Set security label on FD for virDomainOpenGraphics (rhbz#999925) - virsh: Free the caps list properly if one of them is invalid (rhbz#1001957) - virsh: Free the formatting string when listing pool details (rhbz#1001957) - virsh-pool.c: Don't jump over variable declaration (rhbz#1001957) - virsh: Free the list from ListAll APIs even for 0 items (rhbz#1001957) - virsh: Free messages after logging them to a file (rhbz#1001957) - Reverse logic allowing partial DHCP host XML (rhbz#1001078) - virsh: Print cephx and iscsi usage (rhbz#1000155) - qemu_conf: Fix broken logic for adding passthrough iscsi lun (rhbz#1000159) - Report secret usage error message similarly (rhbz#1000168) - docs: Update the formatdomain disk examples (rhbz#1000169) - docs: Update formatsecrets to include more examples of each type (rhbz#1000169) - docs: Update iSCSI storage pool example (rhbz#1000169) - docs: Reformat attribute description in formatdomain (rhbz#1000169) - qemuBuildNicDevStr: Add mq=on for multiqueue networking (rhbz#651941) - migration: Do not restore labels on failed migration (rhbz#822052) - qemu: Drop qemuDomainMemoryLimit (rhbz#1001143) - docs: Discourage users to set hard_limit (rhbz#1001143) - docs: Clean 09adfdc62de2b up (rhbz#1001143) - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1001143) - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1001143) - qemuDomainAttachHostPciDevice: Fall back to mem balloon if there's no hard_limit (rhbz#1001143)- spec: Change --enable-werror handling to match upstream - Delete obsolete / unused python test files (rhbz#884103) - Remove reference to python/tests from RPM %doc (rhbz#884103) - spec: Explicitly claim ownership of channel subdir (rhbz#884103) - Add APIs for formatting systemd slice/scope names (rhbz#980929) - Add support for systemd cgroup mount (rhbz#980929) - Cope with races while killing processes (rhbz#980929) - Enable support for systemd-machined in cgroups creation (rhbz#980929) - Ensure LXC/QEMU APIs set the filename for errors (rhbz#991348) - Avoid crash if NULL is passed for filename/funcname in logging (rhbz#991348)- Rebased to libvirt-1.1.1- qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961) - Fix crash when multiple event callbacks were registered (CVE-2013-2230) - Paused domain should remain paused after migration (rhbz#981139)- Rebased to libvirt-1.1.0- Rebased to libvirt-1.0.6- virInitctlRequest: Don't hardcode 384 bytes size - network: Fix network driver startup for qemu:///session - virInitctlRequest: Unbreak make syntax check - virInitctlRequest: Unbreak make syntax check - build: Always include sanitytest in tarball - qemu: Fix stupid typos in VFIO cgroup setup/teardown - build: Always include libvirt_lxc.syms in tarball - build: Clean up stray files found by 'make distcheck' - spec: Proper soft static allocation of qemu uid - Fix F_DUPFD_CLOEXEC operation args - build: Fix mingw build of virprocess.c - Fix potential use of undefined variable in remote dispatch code - build: Avoid non-portable cast of pthread_t - Fix release of resources with lockd plugin - Fixup rpcgen code on kFreeBSD too - Make detect_scsi_host_caps a function on all architectures - qemu: Allocate network connections sooner during domain startup - tests: Files named '.*-invalid.xml' should fail validation - conf: Don't crash on a tpm device with no backends - Don't mention disk controllers in generic controller errors - iscsi: Don't leak portal string when starting a pool - util: Fix virFileOpenAs return value and resulting error logs- Rebased to libvirt-1.0.5- Rebuild for cyrus-sasl- Rebased to libvirt-1.0.4- Rebuild against gnutls 3.- Rebased to libvirt-1.0.3- Rebased to libvirt-1.0.2- Rebased to libvirt-1.0.1- Rebased to libvirt-1.0.0- Disable libxl on F18 too- Rebased to version 0.10.2.1 - Fix lvm volume creation when alloc=0 (bz #866481) - Clarify virsh send-keys man page example (bz #860004) - Fix occasional deadlock via virDomainDestroy (bz #859009) - Fix LXC deadlock from ctrl-c (bz #848119) - Fix occasional selinux denials with macvtap (bz #798605) - Fix multilib conflict with systemtap files (bz #831425) - Don't trigger keytab warning in system logs (bz #745203) - Fix qemu domxml-2-native NIC model out (bz #636832) - Fix error message if not enough space for lvm vol (bz #609104)- Disable libxl driver, since it doesn't build with xen 4.2 in rawhide- Re-add Use-qemu-system-i386-as-binary-instead-of-qemu.patch NB: This patch is Fedora-specific and not upstream. - Add upstream patches: don't duplicate environment variables (RHBZ#859596).- Upstream release 0.10.2 - network: define new API virNetworkUpdate - add support for QEmu sandbox support - blockjob: add virDomainBlockCommit - New APIs to get/set Node memory parameters - new API virConnectListAllSecrets - new API virConnectListAllNWFilters - new API virConnectListAllNodeDevices - parallels: add support of containers to the driver - new API virConnectListAllInterfaces - new API virConnectListAllNetworks - new API virStoragePoolListAllVolumes - Add PMSUSPENDED life cycle event - new API virStorageListAllStoragePools - Add per-guest S3/S4 state configuration - qemu: Support for Block Device IO Limits - a lot of bug fixes, improvements and portability work- Add (upstream) patches to label sockets for SELinux (RHBZ#853393).- Fix for 32 bit qemu renamed to qemu-system-i386 (RHBZ#857026).- Fix libvirtd segfault with old netcf-libs (bz 853381) - Drop unneeded dnsmasq --filterwin2k - Fix unwanted connection closing, needed for boxes- Remove dep on ceph RPM (rhbz #854360)- upstream release of 0.10.1 - many fixes from 0.10.0- upstream release of 0.10.0 - agent: add qemuAgentArbitraryCommand() for general qemu agent command - Introduce virDomainPinEmulator and virDomainGetEmulatorPinInfo functions - network: use firewalld instead of iptables, when available - network: make network driver vlan-aware - esx: Implement network driver - driver for parallels hypervisor - Various LXC improvements - Add virDomainGetHostname - a lot of bug fixes, improvements and portability work- release candidate 1 of 0.10.0- Enable autotools to make previous patch work- fix security driver missing from the daemon- snapshot before 0.10.0 in a few weeks - adds the parallel driver support- Add upstream patch to fix RHBZ#842114.- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- S390: support for s390(x) - snapshot: implement new APIs for esx and vbox - snapshot: new query APIs and many improvements - virsh: Allow users to reedit rejected XML - nwfilter: add DHCP snooping - Enable driver modules in libvirt RPM - Default to enable driver modules for libvirtd - storage backend: Add RBD (RADOS Block Device) support - sVirt support for LXC domains inprovement - a lot of bug fixes, improvements and portability work- qemu: allow snapshotting of sheepdog and rbd disks - blockjob: add new APIs - a lot of bug fixes, improvements and portability work- Rebased to version 0.9.11.3 - Abide URI username when connecting to hypervisor (bz 811397) - Fix managed USB mode (bz 814866) - Fix crash connecting to ESX host (bz 811891)- Update to 0.9.11 release- Revert previous change- Refactor RPM spec to allow install without default configs- Rebuild for libparted soname break- Update to 0.9.10- Fix LXC I/O handling- Add API virDomain{S,G}etInterfaceParameters - Add API virDomain{G, S}etNumaParameters - Add support for ppc64 qemu - Support Xen domctl v8 - many improvements and bug fixes- Fix install of libvirt-guests.service & libvirtd.service- Add support for QEMU 1.0 - Add preliminary PPC cpu driver - Add new API virDomain{Set, Get}BlockIoTune - block_resize: Define the new API - Add a public API to invoke suspend/resume on the host - various improvements for LXC containers - Define keepalive protocol and add virConnectIsAlive API - Add support for STP and VLAN filtering - many improvements and bug fixes- Remove versioned buildreq for yajl as 2.0.x features are not required.- Rebuild for yajl 2.0.1- Update to 0.9.7 release- xenlight available only on Xen arches (#745020)- Make PCI multifunction support more manual - Bug 742836 - F15 build still uses cgconfig - Bug 738725- Fix the qemu reboot bug and a few others bug fixes- many snapshot improvements (Eric Blake) - latency: Define new public API and structure (Osier Yang) - USB2 and various USB improvements (Marc-André Lureau) - storage: Add fs pool formatting (Osier Yang) - Add public API for getting migration speed (Jim Fehlig) - Add basic driver for Microsoft Hyper-V (Matthias Bolte) - many improvements and bug fixes- network bandwidth QoS control - Add new API virDomainBlockPull* - save: new API to manipulate save file images - CPU bandwidth limits support - allow to send NMI and key event to guests - new API virDomainUndefineFlags - Implement code to attach to external QEMU instances - bios: Add support for SGA - various missing python binding - many improvements and bug fixes- xenlight available only on Xen arches- Add ARM to NUMA platform excludes- new API virDomainGetVcpupinInfo - Add TXT record support for virtual DNS service - Support reboots with the QEMU driver - New API virDomainGetControlInfo API - New API virNodeGetMemoryStats - New API virNodeGetCPUTime - New API for send-key - New API virDomainPinVcpuFlags - support multifunction PCI device - lxc: various improvements - many improvements and bug fixes- Rebuild because of libparted soname bump (libparted.so.0 -> libparted.so.1).- add rule to require netcf-0.1.8 during build so that new transactional network change APIs are included. - document that CVE-2011-2178 has been fixed (by virtue of rebase to 0.9.2 - see https://bugzilla.redhat.com/show_bug.cgi?id=709777)- Framework for lock manager plugins - API for network config change transactions - flags for setting memory parameters - virDomainGetState public API - qemu: allow blkstat/blkinfo calls during migration - Introduce migration v3 API - Defining the Screenshot public API - public API for NMI injection - Various improvements and bug fixes- Add upstream patches: 0001-json-Avoid-passing-large-positive-64-bit-integers-to.patch 0001-qemudDomainMemoryPeek-change-ownership-selinux-label.patch 0002-remote-remove-bogus-virDomainFree.patch so that users can try out virt-dmesg. - Change /var/cache mode to 0711.- support various persistent domain updates - improvements on memory APIs - Add virDomainEventRebootNew - various improvements to libxl driver - Spice: support audio, images and stream compression - Various improvements and bug fixes- Support cputune cpu usage tuning - Add public APIs for storage volume upload/download - Add public API for setting migration speed on the fly - Add libxenlight driver - qemu: support migration to fd - libvirt: add virDomain{Get,Set}BlkioParameters - setmem: introduce a new libvirt API (virDomainSetMemoryFlags) - Expose event loop implementation as a public API - Dump the debug buffer to libvirtd.log on fatal signal - Audit support - Various improvements and bug fixes- fix a lack of API check on read-only connections - CVE-2011-1146- Fix kernel boot with latest QEMU- expose new API for sysinfo extraction - cgroup blkio weight support - smartcard device support - qemu: Support per-device boot ordering - Various improvements and bug fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Preliminary support for VirtualBox 4.0 - IPv6 support - Add VMware Workstation and Player driver driver - Add network disk support - Various improvements and bug fixes - from 0.8.6: - Add support for iSCSI target auto-discovery - QED: Basic support for QED images - remote console support - support for SPICE graphics - sysinfo and VMBIOS support - virsh qemu-monitor-command - various improvements and bug fixes- Enable JSON and netdev features in QEMU >= 0.13 - framework for auditing integration - framework DTrace/SystemTap integration - Setting the number of vcpu at boot - Enable support for nested SVM - Virtio plan9fs filesystem QEMU - Memory parameter controls - various improvements and bug fixes- Rebuilt for gcc bug 634757- disable the nwfilterxml2xmltest also on s390(x)- Upstream release 0.8.4- Fix potential overflow in boot menu code- Upstream release 0.8.3- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- CVE-2010-2237 ignoring defined main disk format when looking up disk backing stores - CVE-2010-2238 ignoring defined disk backing store format when recursing into disk image backing stores - CVE-2010-2239 not setting user defined backing store format when creating new image - CVE-2010-2242 libvirt: improperly mapped source privileged ports may allow for obtaining privileged resources on the host- Upstream release 0.8.2 - phyp: adding support for IVM - libvirt: introduce domainCreateWithFlags API - add 802.1Qbh and 802.1Qbg switches handling - Support for VirtualBox version 3.2 - Init script for handling guests on shutdown/boot - qemu: live migration with non-shared storage for kvm- Upstream release 0.8.1 - Starts dnsmasq from libvirtd with --dhcp-hostsfile - Add virDomainGetBlockInfo API to query disk sizing - a lot of bug fixes and cleanups- Upstream release 0.8.0 - Snapshotting support (QEmu/VBox/ESX) - Network filtering API - XenAPI driver - new APIs for domain events - Libvirt managed save API - timer subselection for domain clock - synchronous hooks - API to update guest CPU to host CPU - virDomainUpdateDeviceFlags new API - migrate max downtime API - volume wiping API - and many bug fixes- No change, just rebuild against new libparted with bumped soname.- Fix USB devices by product with security enabled (bz 574136) - Set kernel/initrd in security driver, fixes some URL installs (bz 566425)- macvtap support - async job handling - virtio channel - computing baseline CPU - virDomain{Attach,Detach}DeviceFlags - assorted bug fixes and lots of cleanups- libvirt-0.7.6-add-needed.patch: Fix FTBFS from --no-add-needed - Add BuildRequires: xmlrpc-c-client for libxmlrpc_client.so- upstream release of 0.7.6 - Use QEmu new device adressing when possible - Implement CPU topology support for QEMU driver - Implement SCSI controller hotplug/unplug for QEMU - Implement support for multi IQN - a lot of fixes and improvements- bump for libssh2 rebuild- Rebuild for libparted soname change- Add new API virDomainMemoryStats - Public API and domain extension for CPU flags - vbox: Add support for version 3.1 - Support QEMU's virtual FAT block device driver - a lot of fixes- upstream release of 0.7.4 - udev node device backend - API to check object properties - better QEmu monitor processing - MAC address based port filtering for qemu - support IPv6 and multiple addresses per interfaces - a lot of fixes- Really fix restore file labelling this time- Disable numactl on s390[x]. Again.- Fix QEMU save/restore permissions / labelling- Avoid compressing small log files (#531030)- Make libvirt-devel require libvirt-client, not libvirt - Fix qemu machine types handling- Upstream release of 0.7.2 - Allow to define ESX domains - Allows suspend and resulme of LXC domains - API for data streams - many bug fixes- Fix restore of qemu guest using raw save format (#523158)- Fix libvirtd memory leak during error reply sending (#528162) - Add several PCI hot-unplug typo fixes from upstream- Create /var/log/libvirt/{lxc,uml} dirs for logrotate - Make libvirt-python dependon on libvirt-client - Sync misc minor changes from upstream spec- Change logrotate config to weekly (#526769)- Disable sound backend, even when selinux is disabled (#524499) - Re-label qcow2 backing files (#497131)- Fix USB device passthrough (#522683)- rebuild for libssh2 1.2- Don't set a bogus error in virDrvSupportsFeature() - Fix raw save format- A couple of hot-unplug memory handling fixes (#523953)- disable numactl on s390[x]- revamp of spec file for modularity and RHELs- Upstream release of 0.7.1 - ESX, VBox driver updates - mutipath support - support for encrypted (qcow) volume - compressed save image format for Qemu/KVM - QEmu host PCI device hotplug support - configuration of huge pages in guests - a lot of fixes- Update to newer snapshot of 0.7.1 - Stop libvirt using untrusted 'info vcpus' PID data (#520864) - Support relabelling of USB and PCI devices - Enable multipath storage support - Restart libvirtd upon RPM upgrade- Update to pre-release git snapshot of 0.7.1 - Drop upstreamed patches- Fix migration completion with newer versions of qemu (#516187)- Add PCI host device hotplug support - Allow PCI bus reset to reset other devices (#499678) - Fix stupid PCI reset error message (bug #499678) - Allow PM reset on multi-function PCI devices (bug #515689) - Re-attach PCI host devices after guest shuts down (bug #499561) - Fix list corruption after disk hot-unplug - Fix minor 'virsh nodedev-list --tree' annoyance- Rewrite policykit support (rhbz #499970) - Log and ignore NUMA topology problems (rhbz #506590)- Don't fail to start network if ipv6 modules is not loaded (#516497)- Make sure qemu can access kernel/initrd (bug #516034) - Set perms on /var/lib/libvirt/boot to 0711 (bug #516034)- ESX, VBox3, Power Hypervisor drivers - new net filesystem glusterfs - Storage cloning for LVM and Disk backends - interface implementation based on netcf - Support cgroups in QEMU driver - QEmu hotplug NIC support - a lot of fixes- release of 0.6.5- release of 0.6.4 - various new APIs- release of 0.6.3 - VirtualBox driver- release of 0.6.2- release of 0.6.1- release of 0.6.0- release of 0.5.0- release of 0.4.6- release of 0.4.5- release of 0.4.4 - mostly a few bug fixes from 0.4.3- release of 0.4.3 - lots of bug fixes and small improvements- release of 0.4.2 - lots of bug fixes and small improvements- Release of 0.4.1 - Storage APIs - xenner support - lots of assorted improvements, bugfixes and cleanups - documentation and localization improvements- Release of 0.4.0 - SASL based authentication - PolicyKit authentication - improved NUMA and statistics support - lots of assorted improvements, bugfixes and cleanups - documentation and localization improvements- Release of 0.3.3 - Avahi support - NUMA support - lots of assorted improvements, bugfixes and cleanups - documentation and localization improvements- Release of 0.3.2 - API for domains migration - APIs for collecting statistics on disks and interfaces - lots of assorted bugfixes and cleanups - documentation and localization improvements- Release of 0.3.1 - localtime clock support - PS/2 and USB input devices - lots of assorted bugfixes and cleanups - documentation and localization improvements- Release of 0.3.0 - Secure remote access support - unification of daemons - lots of assorted bugfixes and cleanups - documentation and localization improvements- Release of 0.2.3 - lot of assorted bugfixes and cleanups - support for Xen-3.1 - new scheduler API- Release of 0.2.2 - lot of assorted bugfixes and cleanups - preparing for Xen-3.0.5- don't require xen; we don't need the daemon and can control non-xen now - fix scriptlet error (need to own more directories) - update description text- Release of 0.2.1 - lot of bug and portability fixes - Add support for network autostart and init scripts - New API to detect the virtualization capabilities of a host - Documentation updates- Fix loading of guest & network configs- Disable kqemu support since its not in Fedora qemu binary - Fix for -vnc arg syntax change in 0.9.0 QEMU- Fixed path to qemu daemon for autostart - Fixed generation of block in XML - Pre-create config directory at startup- support for KVM and QEmu - support for network configuration - assorted fixes- finish inactive Xen domains support - memory leak fix - RelaxNG schemas for XML configs- support for inactive Xen domains - improved support for Xen display and vnc - a few bug fixes - localization updates- rebuild against python 2.5- better error reporting - python bindings fixes and extensions - add support for shareable drives - add support for non-bridge style networking - hot plug device support - added support for inactive domains - API to dump core of domains - various bug fixes, cleanups and improvements - updated the localization- it's pkgconfig not pgkconfig !- fixing spec file, added %dist, -devel requires pkgconfig and xen-devel - Resolves: rhbz#202320- fix missing page size detection code for ia64 - fix mlock size when getting domain info list from hypervisor - vcpu number initialization - don't label crashed domains as shut off - fix virsh man page - blktapdd support for alternate drivers like blktap - memory leak fixes (xend interface and XML parsing) - compile fix - mlock/munlock size fixes- Fix bug when running against xen-3.0.3 hypercalls - Fix memory bug when getting vcpus info from xend- Support for localization - Support for new Xen-3.0.3 cdrom and disk configuration - Support for setting VNC port - Fix bug when running against xen-3.0.2 hypercalls - Fix reconnection problem when talking directly to http xend- patch from danpb to support new-format cd devices for HVM guests- reactivating ia64 support- new release - bug fixes - support for new hypervisor calls - early code for config files and defined domains- add patch to address dom0_ops API breakage in Xen 3.0.3 tree- add patch to support paravirt framebuffer in Xen- another patch to fix network handling in non-HVM guests- patch to fix virParseUUID()- vCPUs and affinity support - more complete XML, console and boot options - specific features support - enforced read-only connections - various improvements, bug fixes- add patch from pvetere to allow getting uuid from libvirt- build on ia64 now- don't BR xen, we just need xen-devel- need rebuild since libxenstore is now versionned- Add BuildRequires: xen-devel- rebuild- support for HVM Xen guests - various bugfixes- added a proxy mechanism for read only access using httpu - fixed header includes paths- extend and cleanup the driver infrastructure and code - python examples - extend uuid support - bug fixes, buffer handling cleanups - support for new Xen hypervisor API - test driver for unit testing - virsh --conect argument- various fixes - new APIs: for Node information and Reboot - virsh improvements and extensions - documentation updates and man page - enhancement and fixes of the XML description format- added error handling APIs - small bug fixes - improve python bindings - augment documentation and regression tests- new domain creation API - new UUID based APIs - more tests, documentation, devhelp - bug fixes- fixes some problems in 0.0.3 due to the change of names- changed library name to libvirt from libvir, complete and test the python bindings- upstream release of 0.0.2, use xend, save and restore added, python bindings fixed- created1.1.1-29.el7_0.71.1.1-29.el7_0.7libvirt_driver_nwfilter.so/usr/lib64/libvirt/connection-driver/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnuELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0x479f58c89b8c6d36a98c30a754ceec6c2678341f, strippedPRRRRRRR R R R RRR RR?p7zXZ !#,E] b2u y-iSq]x?leuZb($V\ő "dB}ϋIY\.+:l~]cՐpcl S+[F4\ ~gs _#ٝWd͐GadXmCiwMUDJpO8F*WǢK.[*wӥ1[w?pZZo⬎BbPnxW"H`'{͏(yjQ!rT/UAcXzjn PNYvĬ[}r/:vh"mx ҊEsd\Avj 9Fa uVۘ\pYP϶nly1?S:ԟ;Y;̝ΜC6bkJxyma @ѢoJplQtXmCt'u4gcǾ9tX㮄 h3n[FSp%̨өs؁N6s]P`u(4.vc ^7m(5Ujs]%ĐKePԻκNi*0}{Џl995G|#)ĚqCla MbL{'IPC*{mP'#N!"(:y8 ޫlʼn @X%F]ʦwBr ^bq  _r. e>k";[d4CG[o(R`եt~S9vRpK{_ْ"L(o2lX 9:Du3nR{gm+q>ZȎFz1 *$M9gZN>qY.E>wYnANngXËH%?5FkY3' v i/}|q9L Ƶp/?5ؑ>6q[24R8vX=BE 1[ HqQwyA971 <]ݞ"|Yuo8P|3I4M9ܕ|X&`nAKAGȜ :mo&*ؽi}BEZs`GF:ّ{k8VĪ8iFrrvDjvq Z~na_R4hϩA-7>ZB9}Aѓrp*ߠ NTl=! j@ r*!uſYkrkI~w939%952hӫM\7E0|q@&PXMݡ>AcFXQ%>KtCNEKbD t,!/43~^ (p2_J64qpOW74Ip>@*֒5D @ւrpaVG)^pLf$Z.Q+m[+ַ80'4)DRr"otќ72Mm B2Iz ]p \2V$tFWc͏sbD]VnR cG=0:lm|MdQԲcyu5h2R9*A(  R1=}} Z{PD\='{M4F3NG܁+ &&՟wyP$M҃STa-%C'4W "~VA#t.KVK@HA`DJHS(olOlrn / Eĕ.ԇz>缀G 7&3_2xG^ֱʅLNbagc#v6;!|Wi,td9yL #HWҺb|";6L_b ̎jE m3fju/#/1aFu. aK|c{|677!48"'LtqUwO@Nf!U[l&H1W<%?=\B$[:> 7jÔonEA`$w8߆=ca-ȿ)Oyxb3_yI=z KR[O0֧0JF)yf-^yp!`rݠ(`tcWf6t :0v+HYK YoVVpڮ,w@Gly E)U]Ayĥ-ѳF{|Y2p+段^ [L!gy ,:yE?%5*pai']y gnd7ʗqQ4! g"dFڝAQ4𰯧?/$Ύq d^!BzGL/QA@,q}=vI1K|S8L{f}\ %7hcg|{6\Xt644{s"v${ET@.f)^YfGAҎ).Y/e_5wvP`|y=#16P8\x+v~^ eC/ٴDLZQr =[:_Aж?)r74ssF uy˒|3OjGDeB; e†+EFd\K%FIT;kU7Y娆%0tᄽZF s5#$"v5EDX*)!mc@kaDO-/MdG ixUHG?.lĐǤw%uUn쬙X=`AV UŽwK[93|-"I$ |ەEr(CϏLaEqcOnQFo*ua6##-#E\G'ӛ('9ۂ:6s.6ʶN9&*ęJ=g7OOO'%$ޑ#zg`wpRÿ!Q PzgKLVly1b9iʁ Ǐ‰QdB,i.>F?ܕ5*` T՚mGGW4+[? ["^K9]km\fD 1؈:8:NN B+sv}d:m ^2ݤth^XyU"j}ha,d}t*&& L~Q?x֛a{`6vvMy!N?,ӟE<`A\& w}X D` ڿ\,.9uH 9 kd<\x,wR2ɁK]$#[B^<`VwO\0`z{Z_Aݗ=Ays{d,guշ" ܫݮsKnë1g߻Fezkkre^juLHAS dhX cw LWX `yzni5.~$ȇb FO)Un"ʟJ# %4@b  ϧ6)t${XC Seh8bT07Pa˃Ab\?lJiҝ h -W.2rhib෾P(g?4 Jąɽ珯U?G=ED8RC\R^aw'ˊI(:S}`X|T2tpG&z/G'Ϧx8ţܺx(b/$!)5ǼdsǠw |ꚊHG[EjTttwj7?Uj@~*L8|8ЮȺhN]v^m+ s1S.`4PO~;;?Sk9v8݆g2c(KݦwL]U@< a«a@Ї&s̉Bxla|pٟy]5hVKt㬡EZ^Y8P{YF3|>%Z * PA*/{$'/ gd)(j;-=A|| KC4s/ҹxW?ɲ {ΖF )pͶtUQȗe Y]x[ 25\[rA%19 ձHvD t\t\}- G>㩊"^a$RNE{L3~A}l1&|W Cq/[Oh XOM0uԞ!T2;B "ט Dj?2BS(-WCd;׳Z!-N@$,'A.&@kCwze`=101BTǦhu4i09_93%ReP/W/.@7Gյ9I-1ZzDcBc };t ENcFmIj}Ŗ_}ӫiP#nd+2˛/Pdf\X<ڢV׸ۺ~KN 93c|{x*U3*vq*]?&5?GlLwΩ!^(=Ju{C/k};$`~Na,O^~}/@i\@mΆߟ̅l%rZ5 J##nW Vjg!@ w+QlG "4H2aOys;?h°LhN"ٟOx3mc-vTG JqvB\y_ 'AmEeI %:G5lx0Ro s޵tk qS?5;# C_l۬dX"^UL xVH7S-X?иK"DN=Q8(]7Wjm#pִ$ #}yOs-}%;E!TS"S ޒ&t'o#ېq;$0It}SͷQ왙_,8Lhkq!:^R]ϒy[w@ #$R;2W5jq61J+6O<b)% "zl[43tb54ʂj>_ DYX-Fx Jr^|L4\ 2kIs;ѩb1PL JK5D!y&j}wEp+i]d_c4 ornc$}Yy]x pI/zsb\^辱UTijweBR,#[.#|O2㵕F7-G+. ֘_9(Y3_m4 f+UiJm5TǨ.{.%^O&az_\F"gXaN@)gC!޾R5>l*KQ_:H؄G@ ,Lɼ-4n;20Jv4X%|oJ&p>SgOga+K/ADBŒ?ђ d| _U (ӀWpN﬘_!bb)pbegs9&4 ,鸊ƍlLay;|.%Elo`<.*9 Dƨ ]O FTo+mɎ<*>_0m4?w00-P` [Αtס8 .d/ke b> y&tQq@Q`%Umq8' $hwf[hO*j}tMmXnzh+xeexu(_ QB&QFKЭ7£-doѭrk~mƂtJ߃ }knހ9cq?e:bKZJ9^eM?,U'l*|T+@tOPp`Wi%AYrS{c2b,~bKI3wY}|pP.!۫ok@W%3 +8L kUXJk;<gw QF3oz5;YE,2O-J1i.b}Z@\¢w^F B`vsM{@m[ R_'(OqbRsgs +ikS A΅D߻zq&-|^Le6HQŌAncK )6XBŒ`}8XSr/ o{(:ՄNԙ_kRQ?)u15vMAA?DF5|y)+3П81IGege ( DؽQ+$ߐFO3Bk^1:1'yJW>a0n$yՄ2CiTk#;Vՠ F%DDsE|jNG!,2&{Jaɑ1"]M#~[ʎ%ͅ )vQ䖍r3}p˰'upNYOah*7~4lm/pj0ҹ҉⠔KjRl` qtaQHB2ݟzZ/vMci;kv(4a`RĀH` vY.Lv8&Sܶ"bՁG)8{^n;O'gdp(2ŀ TF^l?޲ڨ> V ӋHkpKO]#Ȅ&I ^nNf %q-jI&z=zCpKP8zgl܃0d=}eU^Aؗ!D`/;:p6 ,>`3*^Ӟ^AB[BpXCF4P"7_1;h^¨~ߐ}$v̨%jB{cD_P/q&Fa&ߴ`%ټD($V 4OaWyۋwYh:-s8)K&%C>fIړ#4ޣt,ftlM]^ |+!VP׹ƷC;c]XםބBi+jI'l/fSDV̰ qEBQ&+5sC6 4<z176OJ}SR:Hg1B3ħiyDMmБ`wą%%d&5YJh:Vmkf<;&es^X$?O)ljHB@zb*@{-f~%p?] '1RRv鬫$Ɠmx:Q1lcZ/ ,;ſ"d/7:. UY`ֳA1q,("a` G (Bf( \$k1`Gkѹן~:;|hN/wJ_? hVJ~u\bVT!br~>^,IFs]I@ RP0 hVs5¨eMԠEXVK ~`-Of`ch{>LZ&93&]=l aox^7n&vKU`,<,n_Aw&[cs*>>Ncp'9A^7UU)N8}?ca`y턹*Hl1.ͪav=cc̥q]2Q5Jׯ^5[r ÒR}4hnLU^ϛ=/ Ņt*3(CH"66VoIuLu5s=JWe7'PHuk@2!ȸvlT;Aoob1-?!5=7:9|,!#u8Hw}dy{5R5vR iq{tܢG f9!I aťϴLċ73PkWOO0ձV@&yؘt9r\a*sF7gkBF[cOZ~ c`*eFQ%o"߽Kx(^oя`0dmGq14etyM5lu 硍究|;p!Yk ;њOa7E;UW+YlٳNe\azp`^&}]@Z֠/nHdUe$E:Mp̐g3pZc#p)/X% ~x%~vd%}Ur'K4V:H(qAS'B%p3RлEg# @!$vҿMgcӥ1s\6n4Ny>%Ac1C{vy27հd]E{<̜l@[nAc#KM35ho&u%7mE_ay5//*wV8g`b@tv8o4:-z6hl8rhH-Lh0|o?k\mI 4/VTAMliEP$~k8\Kc|oig h訊/4n3;X |N+sijX?+gJ_9̄z$h`Qa-^r.yuSf\׸Z.AEzz J%VoV`w"Ni:^ k2鍊u8`b׬9?SǶMƕ~;!~ۓEHP梭{8N'DD9ɕkh0^Y8WlS2$npk2,4I3SOp߼@縃wr?)Em9Nqlxߋa1sᪿ)ml\I/?T11=[n)_b+ƑS64|uRsUi^5b3|9'c4.S[ԔW@ ;B&փ+}p=^."잔$ìGieջdl'. N)X!#A-c^ D@iQY5メw>w+|H=&O,C vtWr~<Emn&Ĵ ۊ:5=!LץFq3Qb9F6 NW٨x8D2 c -֡DQ' ƛ6<ܢ63G<rJ$œB&YE#KyIV`5NiB;H{eRBWbu4ӘPX V l\rqw6HR ȡ+s TSu1ru]4|/6)zzac/cUcQZyiDꋪBJS e0H|HϔF /?]./?O![* k At3QmOVO?MG!/]"-ɾ6-Rd5Wmt r60lN"^x栐:&vo2H 缟O9JSvdNmfJI ӵF5&07A?q!"pM$ +T٤Y.+ivAdj\5b|ݟ-[HRkIW.)p {37$hǫžAAqܚأ.%dą>xUYPRD; 0 E| z>w.KyS\UQL"GW+yv*²1ʒ* |l\߀S,8NO6( ܗX4w"Yzԓ KfckV@-м 倆|lu'p,afGK2:_~eWذΣ23/oW>%ʃA&~$:]+g?F82!'SZ(: GMCnmQ[M<]A},@]ԥZсƪ4Q'uyJe 0ތ\} TLV° g]2b4/B:~|;di܍ZCǣ?ug32C?ޞj=κ<ɜߥ8(l>lX!y}#a >NԌVǹ(uycӇY U#{m@Ͷ/ޢce$5RE:BpuNzк-ͽ". RpmhV ]IPI PGȆ(ğM-Z-B)QDB 8`e(jWy$-4QВk#ZgyNO]uEhPr@Wb#)_r0;%)g$cc`:t{K58ZP rϢ`߷vAcAJĎ1'P+Uߕ3uQG|o]Zn2I$lZ+ݾOp-DvZKyI_`ȫSU~q$N;c[I@QA6 pQohOY7ۋ U:xLmLq@hhZq _׹7Fo,Qdc*zƆGt`DB3%Oč|욧@ 2[ uh}{[RgCP qpp(0.Dg=v&h;WJ1|E 8,hIV&E[輗"sQV,j }8ԡ V"6 d,*VEUTBDEcDʓBV.>Qo4_-$ۼ,y:$286dM)wWTzVà wGatdChZNcjQG'!P}z: 1BO d'99½9[Y\'~ednò\oOJ~%+0.?ZWZ892B p`c`S|,=g7}>1.TydfXh>A3woP$FB:$C~ Tslyo7*}cV@DNïƾhLڞƃu6%%A6MQwШ ̐2-x<h qrv!40"e}vԊ ]IڠD!֊m}4.L;,?t,e04z&2QE~+PM3x Rn6(x ([B`!Sžk2_d_RE\LZCyNO29":e[X37@aGv%' P)8>Lb;o OVäI"kޖr:R<٭<&S(/5] wZn`W\NB7R~o^qC}퇁Ha@7am u i1w[+0 JmLu03 Rn$;4nl#:R e~s$U%ױ5-S+l?ήRm6#Y]h.ZKZR/kQ InZ},: E 8kK-UװhOQ?JmAQX@i*uI#B0}i9WcSŶ9,*6phɁDL$gvB`B4Z+wvMWԤw@ exi4Uz}ƋD08g\⢸{B'tPҐ[L #rBjw)}Pf7;vnVNuߖF ,Fؗj)dY_.=<ǀ20s}o{!!-#q;5 f;n8r0QCmgQ W %&:`ԂĴ! o V(Dt[)X~,*FZ*TGSvyZwކhr{pWRl64qp 3Nco}ϟsؽDAUκgkMȘjtܛGW]g{"6!ˀ1OjKBQ C[>yGʄj  PeZ<70096IGil%Lf\B!mU-<ɰJ!ӖWvƎm`ޛ W8t6=Vg۟l1);2yo8zy~PA6ƁSU>[1Dž-҃RCn*ØuG}yUNHi35tcg`.>w~=W/_@ x+mM=k*&91|c/+nx.#*/]*]hi@ŒLh*W +"MA *6x yXoY!]P}21Iͣ H Rg`R[;x%B.}%#$*Sc"wFRfy}ͩYSxzuO&vvZ>FyK]9:?U6yΪ[ʣr[\-=7a6G(DZe0e;IF`R/wBVgd2 mXNG ݡ^ѹA557ra04'aU:e46Bޣ`(5[a=zA >>W]u ɓ-~(<ؕT{&9޷MKCfg65?j^au7y5d~xK8aá6Tt 71n^yփ.2cxANsI7yF;)l٧3kQw(>4{aKpQjL>b-zsc[ /VUdҍgVߛW L$Bi_8vbX9@> {Z[#}F9 &D)%r}n(jw+qWBH^(eYtE= S&:Gg_uM~ =sE%XUgYZ\ܿ9hV'LTtҎ\ŭ@/._516 N.\,՘]j:ܴ!QndE䮈 ѓ YTLP^TQQպ%?z7ܒz`'={"%ڷ ~\W^r<X=Y4[?e_Ж ;;q~xBz];be6!skCQn|;I}B~eSmpIS]`+.x%ݶrgT8pJ?';yQa39[a@ݐ>]\V0)SD#ds.ӎSepd1h69rz0=CNŸb(,Kڂd9Wg@W!,%gNTΣ0T+$_nl@bg|c_>NNs!v bj݆SR2ډ2>pJd/'CΡz^?a\ģnr&s֤9`q!)\1֔;Ƥa|NU8i ٭i\ {Ƽ} ņ}eSEoR# cƕ£VLq7 I_L2ֻG9ޭxgYw$М(閑CR4}15oD|UkԵ AWܺ(F欉7=Ԣ:#|iVen0kn'&Qhs$Lg6??HXʬy@vC*,4g=%p>QZl,f~)}:?@-Nm*$F\8+3b4At/{<`}KP^V"Ҩ 'Z eCաv};:IA A:*0V0[,_>7v5)hr*ą*$q @(-&gH<:Q)-ذǮ ѩ%4Ut]8q%wҨh^/nDNm_uԱ"zM^k+hb1?Qok426r |-!>ɤ>"Bu`O靥uMl5W1 ~[Y3(#Ini2 ]daG:-X$byj ?W'y{|CU[vw 7)*82TiHT]ˡdʎC{lԺpxG$J]bGSΆ\JZ;䕉MvK;#RB)Y4>\NA$u?:{CʂO!䅗eeЅg^eqڥ~$2.|8O c}g:8Wv$(@%:'b>{َ0/ԎL0PǴ{hĀR꜓Zlx#ds4K80X,iڐ|mɿ |w]]hx^߾d>1K`$jjκ+~HbX"!yOق$y.NHpGVhW\kAȥSs:3_- Q䑰kk}g jH\iՙQI~RZVVxRBa6v<ݯXt", sԥ-2Nd7F,zT/{ɽnh(W.OM[nry) ^Z 3| 5bTx³G0\KW!? JB}*{}aT/˴ޜh] ?*Zز*I~V&_C_eᦻfhÜB {jο+?ӌHbQ^VrN0zB&U?ЛCɫfLJ] ^i,Dl)S O8FwEN-a1rsB<8f8sݪfN74C\`݋f` MRZ']B9`P$ޠ ZN?8a gADJ]Q /[~C%& MF,.ٻ(+#P4|sA ` my n@ pCD)=ٻq/<IhDĒfu @]EsF#DwZV=~ t&}yc܏6CaCz+Q5x?9+F9%d]@MoDZ|tt+ugM(T0DCKd&O9{ ?Q0r`;g`5mIk7/s{dk>*IO㨽ww~UO?]X@Z8q -_Ze4=_!drF}sw]X&3+1DfoFL}F[a*g43>PJ^dnSd!B@٨ߠɥxw}3&\xD{@x܉r{E6pHk=\KVDB "}(,:~ 0*F/9RKL dޒ/]0//zCkq1cFB ܌m4oe$V(ӿR##>.N1&wm}CX" z.Dd+.Ĩm&c&rPQ;=YʡuĠ˾:{D(Ktlj:e. 5prr}tjQ s$HϠ6T#4N((7Ug+ Q'ź7X[FWUVhQ}vi#2S/b4d0Q hG` G+4PAK C27G6rAd^k}I.|_|X'2z.FȓVF&P;8.kWZA]@6=GK{gv; 5ub͎jMQ"g@_aGz zv\Qs$%|.Z( 6"|, -@^Mc^p9?%x`[U/^><ݳY& F+áqc/!U<\VEñg- k};SugSbO3Hb\ڌ=x]~{Y`69.}LAĢ&7-Gh"YG} * Qy8eщPwv? P Z&PuqZ%BFrR \S30h d:PA*ӠZg鋶Kf.[kv̹qP|!%g {qnjax $DG!{U]*j)ߴ %I9熚Wߑi$Լ uX 7 ƪs#Y4j*IĹr1Scū70df-=IӒЬ4W4= h^`H!cnb2Zn*SvJ6bd:&l]PlκE FƗ6(^nu\J&i:^6J i}r/uЁVXM8b~D$J Eour\[!\dy7|pΘ0 J_a=rk㎠Zp! ?No毯V\2lioO|:,HSٗ! yL;x4T): Xd©WwԿSTu X$)!c':2GJDe47(?x`;h(Rgf%('`B/r8$ֲ)- D;w_- _u-FW;|%꒺h>Qhd&%EESҐq+TY'H Nڻ| 8nja❋ WSNqꯠ"*2WM4r]&_lzhۭώ=<08P|#noqb0'C6 氪u+Qjiݨ9Ȱh v7豌m_AK aEL%'_uiLV>'onIhQ8ÔF7b?flCCɁ(39py.nb*叝ؼ+[h3!U[}1W^a.T71ѳL!*wZ>/K`dүl怑B5m.$Er :`wxz;}tlX6!ƣoħ$Vr'Pp[pֺ''bx?y *vx|G =#uՈ+;G1&npg[UCoj(y&A5["%d} DxyFB'X L>"z!¦2[s\] Z' E25hŸL5ЄHFTIH<%w;")Vֳ\aPbtLqN#TvC1Yy}vR?-!E?P%t~Qo"AJtf ?b/$ *x!hax;>o,a $/& ?tgPgT2l߇ ;wCUf٭]Wn2EG4?R1 "`a\ǻ[Gfp@DBZ0ve_Y\/F1B$#pmMhrM}>MkQ· [䎁@?=fl|!5I9=~75QKqj}aؑPĐI EooAgWuXiUH8pS]5؂T iIpOV@c5n 5Z.ȌXo!ELߋ! -n,A9e`i?O db4!GMrTU)3Kd>6j0cg`{& OjCҺca"I9n8đBJ9G^}[s;ng\lKrsf8OP[ ]Wf y#%iїiaǠ8Y3c} :̎F]ȇ^!QᑥE?'=ܜ jѾb{Tצo`[MC<=jmNj qD [(M-~-\oED{1XffTAw\J +5}`d"G(t}M9mZْodY8Nv'Z[qKgzkCzU47k }«YBhvƛ} e*(t̛Ӹnl(5[} WԐ{1؞ 2\*1T;̆nqH< z(aTZ``ڹgeNx%I'U>DҘ Ѓb:Zz^yҝN; w]O0*eٍt a'"h¨dcO8; g+#, _I "r3`Ak8Θd_y/_2O;%|)"$t?)gq@VmѳhW]i :f01ڍ^|6y'C#dܘz\MUC!|716E\e3!0T&8{׺2G&w]6$n͓PAn8fM}r G;lџSEh[b#$v/C˵U(r]ZS5~YPYVo jl؄jB)n!RcFꉸ{jr?43B]"PI󮤕!8!X莺G.UJ1{2L|`ۭzQhK!=y)M2Pڠ x=z =J,a<,`/]nuC =W*3jU;TQlfm y7u4簦6חI踪{q hKܦo?'׬G85xqV%Љ}"Qڶz.WHU.QƼɎT9kNqӡ{N+ӿiK~w-q6F(L'B jR{n9%}xS{' BegG"D7"u)%0jŨqZC)|/;xr,Ghp E6`nR!8@}ħJ᎔)>Q)1 |9F6#<~v |_qK*$FATMzw_6Kd/F>+Z㖝$5Fz,$߬\X%C!Y@u]x36alѷسf4`%HTčapc!TALiI/v?oopEV +[p˪\>-(;΂pͶQidP޶aVUZLgD۹3nZe}oK#*a +jai>v@@l 9#24՛=r~/6GU: );[؉enKѢ2];2Peޑho6`myL(<푉bsE*6RI+yG(d z9pRg&4h euhhɭbzq*?_+"vx91j\ ܠQ%3–և~lgm ( kkZFxD#Q"9%ܙO8=zӳJ~ FWHc2+S@s68ºt!>UڔVpXޱݔRzU ø=v||~P,h`42Cs6.C]J<]H5׋ >΋jgZ}K}g%k5.n(˔o/FlU MCt _G8p>3HUt8Oҫ fԋ(9q/!TkAEƿNڤo4MCzUuC@4NE=FTXuZ]br$_Ls+\vsFc3=t7]ٜM`3Axg#Jq|M#hTĘOΆ VJuzjpCZGxP-PK M=-^_-OY%K;dnd+-з O@?p1">/P:>ӗz]G;:vPr&3sTuH[b}{=W`4eø UUF!97<4N ;Ək h0Ɋrxt4??C~3YX臒Q.K16kC,JqJ>R26.\1߻k>n]'&#Tps[e @t=ǺR !!6!ŋpWčdb9O/*td^u1 p:R7n/>0b˩afMrr ^S"^"Ǜ3mdoSK}i_ή pmPӅY+ SzJĠQ$ʱuѢV$"7KB%B,JjbNgg AJ珎y`VO0X}Ʋ}'gj۳mr(4&"M@֫1w-"i?9|eޫp$n_*fFuյ FeB4ZNzyhFat!q@3V 70Qb8:,M-Qb\KYvVoc* ;} nڶ#qTxLA,+XcܿTk-KkV41B`3sq EAU;s}i4ժoޱ`ky>_{ aS:}.,lm((MUbiAѻNuN 5֪t>y"7yx W%nhapWq57F^j"m,D?\?FAxEv<ʁg4?Ň٪r렎c>_Hոc!M?*fA4ʤ` xE}&9OrU C%V:ѤEPe ]cUn+0@nzav^h {dl]er-Y(A}GM6 PC'XeUTrϘvԍ:jHʻm_y̚R Â{ٝɂd yΚ%Dyzr'fTˣPөz3 Pz|qr1ҭq#31NPqTOl$_U\WDz&?\xZ4/:[{ )Z{O*f@):_mhhĵ"6Qh1U^Nqb7ˍshKEW T˄%4y3ciV/Yآw;Fi>N;Q\&QK_t*t:R-,:fGU:52:WAϒ[& PxB[@ӥ}-C$ceA}~ʡ͛fMi.7 I- re dAIU ׳u1?o~Ģ}ĝӄfv ~K.vW+W E_p:nEՕz05'K:q9mS>o9Z+G@ZZ#y[)߰m[Z]}n+WJ?mkbH!T o Øk\rOf^h2AiMΪ>L`:PԱW^uy׮6/ ʙ7$ۏ gZRPt)!Gq^ >џSwwt%`ywɥ4HِP|(MXyi&Kd+9Ő2[ϊ>/v!'D>dE{C^2UN(ĂTM?7MrX5f a6.[>BsbH tfriKg@sRelJ3oÝ.H&tI|QN(^< D*]34]ՙ4Sq?,r6i۳/^^w]EBS|-ִTOtog(Juȿj&h^es' H~'@OrLi`a&SHqLinEjV‡)]}!\pxK:Sl;PvLxvo#`A I]ݧr&J_І`D 8ca9{vnaMg-OϲaK@8h8fQsJZ;>QY_S84.cՙz /e_Eds>u!P{Y`UNȦL2q)aGT{Jڈ8Xc^XL=*5+Yz3NGSE) Su䑲a\v™{n"7$-ťA9pbOh̔Ԓ93bp U;Jt[[ ]Bq?|/nDvT!hωxmR8P&% Ԩ*VV7f4z-aO*3c!oM` qƂK8c'bt?ՋX'Q,J%Klxc("m|K eS?WHbI|$%@C㻅_KfJhʫM+d{vnɍYy 5-"q/SqԶR>\;s`W=t vjX`M<,*٦2̗}/~(MDe[hF' DT٬9.)A#wfз7@$XAʳxm&ڡGIa wٓaY2n3j;%nGТk&@}{D=(ϮuPBWcKLJj L홮b[jj#T^<Vّ.<*K{Ѻ0M+<`@FH<&?ou meXZR7R>|ώdYN=/a7ҳ诽Qz3Ȥ'k %Q]1OqF=C<857i@T=a*߇[[遬p0Ώa\xj1 Cȝzm+9=^ ?1?$^|4D?D:6>ļGRX͎&0${>ü|]m>2=jD$@xF8qoeCUxMPڞ'{(O-:d GIekYmpaax[mخ{C4˔g3&g'q!FD ^^׿Jzsp>g 'ɲ^x@״Ԉ.o9ڄvcڶ:ԗB?$/X+9"%J橓0_q\M+ AF8uԻHozZ^0dH"az':(wɶ2}VSGtϛFz%{N mUgz"O1- d qKӷC:?Zbǭ&R^j@u؆#}CDأA^)4ny(kP0qM#" S̏…זRN.!*v8ʅXkBBs)3Ou5>;3Ʃ]Phe^VOD]Cy9gl2o>[MCphG#v{3YJ3aTcP{SȉZ_ ~>hܺZNyף .g(0@ĥ0Y!;6 sg r\{\. G>PzkNە @B}tڲΖPUk$7Z|w/ *,B`[EGK Զw<@G1F^>Xv@ce[ө{Q#iPj62쩙H4d;=,D`waJi33}-4f`P+; EO|(sYIX29A8erNO˴{fIN)I_Ҁ+OlJL֮ej%K.=wRVCd\ 1 &^9ug.9ig\W> M?Εh⫐i}4XPi/r?pVr?Ʈ-g=v`nhuj|Ư8W$lcs2p:-=Ɉ3:RVU<01Qtb߄r%ATWL2#ȣj2R`Q]{ {k 46 7˖3zy=t[pZNt2Lc0Ζ5jWLʵ&,4b"=̄ _d)jv =Մ`a_MϕSE9Kǂ/TLP ĸA&!usC86Ss~26D&nKd2kƚs8/" ug38iB^J}][hSmmn bQ~$şF}8;c0L{kpY؎z_*~y%v* m(1q[B,5Hv)nDdk6mipEAZ. $9qogl;>0 5oi(ae @tw^>c3[%OT9vB[@ @l!iJzLo' 7nTE:O8m0`h8ؾZw([[e  CBW xܕ秎Zh&Pθt77(fL+*zQxNd,@eprIhV.Cj['l}p pZB PgAItGCAMb#<9si.m'#BhgId0I;x|6Nc ~t4*zdj'Mbw*@¸FעgglW= y$!lJw'(VZSWFC@ktٺ;=P7\ơ8.t9m#9;'ȽGGVY,۽b{w<%HZ `SNSv{>GɒGar<|Ss5{= \_9)>El5=`8 >"tEBD-. %GNW 'IK-'ԆN!dp+_XYnwEr{ VqUÖSkxVoaL<'rxugfӏ|},-ÒM(h09hI<К4a{HqF+#h :i:AcZ߹R,$c ˂0bO:?+ Ifj˯Nݏz~F %Sx}#8VzM3Z'IɖۦW~O@{FX8vO웼Vrr75]^/V#OQnr^/yyJ+I&7~AArLj\ٔ<}ɀ`3s`S(L< 2.cJMY޳ɦW_ Z4LѣBbSLH8oo ](O1+_,2)F^Y&2^Do_~~KYXD.lF[rbq]m6o?=ͦR3O?l .C؛RQk܂`ظt LN4{Q_YRsY1X,!SfTV.vo:wjIәM>n ^J=WW:\׳ySX}/:ѣCDnv}85p[][žU2դ@x4zlmg H$Q{yZ,V* NS0уk|odM'ӥAzETi SdЉ;Q[Ҙ_-u(;(TKO_ ]:J Fqrȕ_[[2I|+]#KЊAΜZ䏆xV]f{wWsK{".ˆwhxZ͈(aڃقxb21ʢc?YnW\M }M?GW.YviVBZ*a+ZZ|yǫJ h Ye d.b(>3.iϫ Qk<6k{cYE8%/fyL+$wpILSRS1PFT YҸ3ySdۼ4uM`KLFב_Xd@e$πShx:M5? o: Hx딀 AL3L\͎Ո[΄2N h 2aȼ+yzQX ΂]HZ^F6vE.eXj dr,Y5 3 ??^~b-^BdKyϿ20! sā 3'J'gۃ8LMD3 ζkOŘI^vjzV#}x!%s#nM}}PC114[ PʐwԪtn{Dy\͓A ڭy@|,U4qfyg'mm !>?u|:煮($d̓jś%'Dpm{JN"lD.[cmhfHu\1PpOp~d 'YkNB3S6c\6~ ))Abei?sg8ٲhZHX38\Bqp$֯A Ri?DQE&hr0fxPJ_u,na=ct Y`bѓKZ PxcV!|?עj`Әg`9#W O]cNj%|/:ҀR-GK.NF[-u;ܑ+d7[eV;8cq x??OGBL9! Qɴ%%$a#q"Uܫ3ٜ# ~݂T9?I^fۉ{xnZfqyK?*}6AQB _['Y0&YEFM@bLs^u (A;l[JP+l3[ɄM\kP˗/e=ba P+Ds &N\y ϩ{ ~Y*Q#TتR![(Z}%h m/fgJ~/"9Vg+} mW~d5ϰ}tkQYK*B'Uw?c3DeԢsNhGm/%mE=cf\"xEb#:vq^OG*V(jlݘBl'[<-DxcUH&&_])EVfO 7˩X}[~32;[ !>q5$eZό7H6N)U{YUuj3 6`b]-,G|E E#=:!XG]s zv =ԓ޴"@haV$,l;q݌o#8: ¾i,>Ko3Aǒ@gÀ5x:U#gAZki[^TX1Gf{4MJ~Ũ;b0 yF~Yr=L>٧x,\Ό;A_$bJQe5qV~cȅQW },v`{( N+ml׍rr807U&Z`0%#VpgҘl4kBXO0P3ij$Wď'/ү9O= 5M- ;R[˛IӚKcO'e'5Ћ Hɀ0FW.umm(vye%u p"j}C\w?ohZM~6bBO[MNEwS =_aB]K:x#O@|sOJG)̞vNA`3 4-+r0߾씋(|X֡UwלVDA׽f gᶍ<%7`W$eC?cM7ȩ=|,'o5U1ZisvrRגW /+~3uw:HWB@_qj8ba b<Ьq۲ ԒAOT5kgra[$KX9Maр zǿ X NVgց"7{Z8"lI4)}MaC)<}7zY|eJ*ڂgx{wWq+v}?1(x~ ^ p@(( 2YQQJ6̆O&?>Y`tσUƕ"kˢ+FSuWMAXqr9uR%Xoc ͇wFSF2^ :3b}zKvM=YdND)C>.mınzcf-@&}`@57(UqȹZX--7N%bTy;') a4$zFxg6xTfBI41gH&E32G7UCvݛQU3b0İWpHzj93$k J׼fܧEH=J,N< %<2M;HW yY񃊩OQK`0Z74 _$w^HW2 0]NFxye Mqiv2aVFwn*SS 1T(f;wzvhYgo P37Ӿv~T ⠯O^ F[ݓDt|H&_|ح\Ckh$Szβi|oK|9%oGSYXqD @0 u!R҉ $4h!>†wm8nC:!'BSb_\6 C{ ݚ=dΜXLz֩shºNۓpZ2]_{ xɤAh_}F*|m"jFxP?꭯N>Km Fv&FԶ=Y @ imR`KӉ&$h5&ݸǞG).fË;-~(ɨV䭵~v%+x;CʖŚWE2d A-L,;훍OCL;y@aۼ~J&#Zk}X_Urjn'97 `< o8.hp<ҥufq0Q6߁b_ncf nQȾx (߹pFI""'9xc^lIrUQ $g<>tEIzQqzZƝ"3>@)͹J$X`k XPGƻyR,'B8Zi+KܘH&|[r ҞO+xq6/LI a KN7VK { tV1[XAب@Wm@05LaQ)a#O{ y 'άfהo1}mƣFDydY c8kzPF6bi@XN6`R\' ,`h>tsH}Q s8~4 ؾq>ړ$8 & WJY)~/ԤHeID{O׫I:Ds&&|淠V -C;]ne!̩+0@`b @߼( ؛OM9dRJ"Y켮e:#i\QV2IJy3ٔ ]@5yZd!_a%29waM6 ߌGӜ9@YGť\BOAn_7Efa6,VrJNKv1er n԰> 9z] PlHLћG@ueX0arI;V@V[<yѱI+/yXl5ͥq".2O >;|{v\wL! 4ũ uiXpxA l1!?`%Bb3 ixU K PF!漳s~ *eqӢ4aF hEM Nʞ)w~a‡:tW8\s F+'WiAl.byWү2vA;K)݌40-:(Cw! Fuy&KZQ.e^">#W#\-5o >Eةp"@e1x3|ȏmH3#BghcD~i>`wd<*BMI,w`"]7 S.Z~<"r~oD D4IUhEJVVglCJ\l_T.%i'(!ꃎR'rr$bO:sBtOWg|l-IT\j(#,8NmOuwf3iR]`9~7|f9A[Uʑ7 ZLbŇFE^q3@R0}Z9kN:e+[Di|n/fzQ1Eîߚ,RwVb˘/Ai+.r8zgO..J4|Iȴ  V:N>My^Rg1,N.(,Q\ÚV6`ttgJN\Eo.BtvZH1twa3Q&Q)$kI:Vte} a H"9}Jq4rĻ.0'Ժ]C`:s6=<ЩPMAv&kهbrtiӭ#{+ͥhEܟEԢhvĵsE4_SXĚc;yۛ-0iI?[6aXr?|kG׸ʸP'+9yuL[=?I)WTMEc:˯! 8ãSz{6T_q%E^G$yw4NpIjִJu$~jߒtuߦK޼iDx萺\{ 賙eLFhu" H}@,K>ov=v`/+.-RE&iknRV+rŠ q@T6YkU >\]=T .PQJ[ǁ<҈| ?Eo ׮a=WTu}K-vʑH'eRDiR#"ɲp{̂woȻӧpl)Z9̇vgMEoC}MJeLXOy=:hZuC7m45yeew]`_HN򾥱{?U!ֻ8 6X~~{Z~\&Etwʉ{09X{!+y*ϖ:]a.7tXpS;!q8֐W$d\_zz^7*倅'JBh\MS\F5 NgO2ǩ`Y茉^EJ:pop6$-ͤ;7jdxWόOIF{ѥ5ellXE˞=J5\Vv&skp5ͿC DVp0 F6F:t|򏏡m'n_%[XS& ( "2^TrJdsk6#"=ȊX0uY8ΗK hŦs4p Dž4v%7uXETK %RmMrjKGƯuZ!Zu`& 7w1 NN9Ƚ1ޗx>U9{FHeU!͕Z{-!@o*6q w%.2c" qhG&ϳj;!E oP^Ċ@x:90wMi){e`Lօd9euաmHΕ{h [7`05W@N4Щs}`vd8U_Ă%A-\Lsrʃx8GRdyYokYb{1鎨eB} c"5/>/psסRk7R͐6-x9K6&5€}ҵq3K+NC$]H_EAn:cq0ʸRlyAuYD99A;ɺ`9}^=YV|wG\D?k$<*)# ;.=6Ǹ' 1#i\B @OY au[ʾz &T9. r$L8jn+g fX!vE-u[}|!40M4zos85b*S1rMu4dK-@UcYT6Yಯco:v#$<([>0jV/pf{6U"Ʒݬ招Ȇg$ŀZVp4^븠f-?T:uտs)Ao3꾪3az]a8YlSd`.Ms&n|')4n_GqlAbx ƹ`ٸCUAqFl0E/V hF,Ss?jY* 7{UdCWln~z6%/s}o+Y afgz)z9e7Ǐ)/XYoyNEB|峈YyOQZhV^))0v1|)F,y:#2|3 )aSq!w]*T]]<%u[F 2<#pNb8r}"c%ҙ-7琞!v: Pz,p>sQ3;GN(O-Z\GA5xc3z*-#뵞Ío>׼Dr'VW$3!"tg%$K>0 BpM~b*ok+[b/x(K&LfH&,Ɉ<7;ܭzhZQ{a?96Ʌޯ)*?hhIxU)BB':)hsoI-Tk6K.!*ϻв FnpS bNYd ErW@8}ibeaLX* .zl~)WM{h&0OB]ɓZmDJI\WbL찂=E g6yj~F Az5%qg\U( 2TxߑTd4,Ruoa$Ԁ2z%Q*gS%=$rUf _MQaJJMBTh4Bھp l؇{eg ["x`1 Jz}1.$2Ƿ%nK6zDWKޱ:1HGHx$LPyD\@/y ww/-c-\G3C5shZ&!KOKbI)J_rȦ}SA5 |m`E>W<]^M ;A2 ܋Xht j(cODXzJ5ڈ%òaȱ72#E\CAtM-A $Zptl=YV $$j;Sl[ȿ"YjeK*MlhD׽φRm<BzJl_-]RU/|x9jfb93t 2yl{)zpگgxg0L -)jc m2~M)|]Z#Y[zH~N{gy7$gOMFtiDCq.󛔃vF gvAWšc8gfoݭ'|G;{ vުn[Q8*jN2,z%sOc#Mz$<@/yo(|uA@d =]  x\+{lQZZ#JN?eݥK7c%sw^K,qUx\4ka)5V^NŸc ̧ >V(@A|*AY!dH;dڼMYs#'*P!k|KeN? ޛw B)I-|*_D)NL&_]YHvmǪD72l#-ɶӌKbSh1fE3O![<#rS HQ3iuo׊;pX޺>5~8.ߟpHf(PV2hb--ӷrwa(& KnXic(Bqњ mڊ:CO8QaOyRjO:-{w:']-ghp@^Ec{JbF+cU ,2[Ō]pީ z⃱^rT*Of囀a!黸jmRYPD:I,тbKT$sj3Hw )S }U| 1mg#b🶳L݌ZH ^o)IUf? |l[ɩYZ0I{}acI(TU~B-y񵺚B`*.*Fd9ExM6 ruzLzY }AίM'lUJ L?"qG|G£~pe#?,D )!Ka$VbȠQ(0fp=\h|%ٍ?+H D-8S:\ry+KJxDZ $MGѠYM$5)P, /-R v#Ή^/۱I Y@76z e@ %c5IRDPnL2gH#nӴڟ8(>bW{ ӫ{b;$wS&cyV#Z"SÂ4lwub7{{lktScB{eǃ9;5goہs%ͱ wjͰD-x(&6x̺Ce VMD>9Y'L,ް={:&MGD&؁ϯ)]-QпR]AE@W' lʋjhFm*[&uW9x MTևg)-pS{UFo>06d; s!yUY v`)26'{«X rsc.<ͻ_-0Dt'$~ DwU|00M'.Ppx/Ĥ!E0"iy2y:{3%G\|۽g9$A ȓ%tGOor8 xxRSH*W Y'f2OuC/_$3Yƭ$Tp\m.'.Ⱥ|y!:MóF'F~e_k#B >zkUOJ >#O=uċV Zc'ۗ#X;kD{`ݗ 6E\?4.v=ZSr(%9!O'vX*zV(~L/":=pZ.Z'Cm!wgR uc(N<09rǔ `Ez!YY6rٵDGh*1-kq8O %r }eFS+Z>U"@AMy~ z#Kk dV'5VјP k zg}ZԬ( q?,XgpH#ڿgx̽`*]+8ܠC!!H]lxwGԣЉ[wе/ uu̠6.Y(&GEx  gC .CRVL$Z'oybU@D4]I)YtRuY`uG~j vH2fHW*Z~ws ' \݁ ~= Qa)AS^BN << &wi#T%S yPoZm|nCN^7?;%IB@gO-_ρ+*؊^Ŧ-(hCe Y*^C(wu6zmrwǵI\T5B̿yopaʽJ"ƆLx)/ ~z;t5iv 6A \mHfl\|6>YIa\nE}մ`\ Y85IZ2-\|v?s>Ltr'&)%^ zi#@Z!>jDc^U@6OUC7g;{ܻ5|8Cj{ SX .[ѐ,Y8H3 JG{ JU=hQf{9+{*vP]yeutv\F3[.=er" B &q 4X|6_)[@gxQFF_WXq"$ $ZxS9`5`]yC KBjU0$9xwO75˅07(P=YXT,KO7H"}+ռ?koUKpY$5 8%vQv>ACy[)z;^_U@8p™7)uyx$*m|>vMюph5Al[}<38$a^tޖd?( | 4>/HYE/GVzI:+=Efzږ@tazg$>eͷL.sf*V@#=^rxs42z#gF0KGc;;4R>؆@:sJ.A\&Utnqݚ7*?vat24&L0EF^`m{W8vq{rgw 2mKDAhIz/Q;N#=Yd`]eA` ކ,q̎W iLO}*THE(J]W'R3՜  װ6ڑZ.A0JC i-\HVRL$4#>+djRїkE7Uu^p[п6,[P.JC/{␎5l#X\'G' sX!۬Z_߷6\@Oj,S, r([ems^rD#ƃ`wɼ!?nV:WL'S p{ BbJ0qVւ@#^FW -)r#Tmcadt *&~Z[U .H4zM4<-jȱ>?;6IR!':?`;ߣRQT"^.ҍFO+4[O3n9 I/o ʅtw/zv2+I1*o@g P~)%?Cdvשʁ# =D7( ;%R>!IQ/"o2Lp/zd-h[@v_@|R8gߺ덠,OvhfK/M2m\z[0?h`OV I<  mqr;JBv,opucc(X,Rq[Ea%yvLL#33Kv3X4ɢI @y*J99Z fĵә#W^Vy+FY5M2UVd%ߺmfg_fP$2K~PQ"}jf.3Sց_µ'VSh}*^Aai<8 0J_?!~Y󮿔lV&/̶Ȗ%]W@;+ XA]}lx>%Q͍_d,MU?uE>{ju'L5A%$M$ltZ(;m`NtmشH-{i$ok8z ŊQ`!rq`K3?6-p4#)`7K?i wNN8` vB6~VYrQtyW%L6JW 0Qm'" `8bzѴ=:`! ]uFmZAd&SϲRJܝyi'08o} qM9Ȭ 㦍0{In<OCVOpu5yq ?oYae,2y2R3hZ Yv)FEx5F:sϦX Є 7!߸dZwOA2Bf6O3̹FyC4k g VZw&ݛ9*pthDr2}I,'6{cKj`Έ0]ui}ZynNW ӭj$om@"Yi&ߵa,WV"8~y@UaOv~JZ b{\~&E `!!DVuGJ"[C֑q^P^L[l8}HcV:.LȊZ+éh,q81шݛOq~C @$.\bV&9X?հICRQ{[Aj1Uo 6 'e#x&s۴Ln:\/ AnXܖ,v)ck(j>D$0&nD9ye #8{XJ6ӫ2}h=FE <)NGl>$,.7 /PmRu\׍jyhw1cn9dRam _\Sv7"\5'_n=++'%!pLBX0枃A]|q ]D8 w?3 gd7%!TY >) "FPOh׺඼&!l9)Z #@hK:$>p@uNlu85CGN V!.*Ρ%ᅳsPG8RW&q+7&3V&Kk5 c.iS^e.9ȋccjDP&L0Vɿi(?05P3ƫi &Jz0\֪jBh?r6VZ)K|"u`]s8j^uOœxS|?P&lOk? r`K@6oLw4ɁkHvBy4#ײM*r!ܣ4Y[O]-+AV|Es4 Hi`+lWif.!D .R 4Bղ}6g;>+w瀰3nvo_,qjp"Z2VV7=1h#N,,3s~ѐ`wG%|@ 5Y˭"k6  0AD-mnW2`Ge,UKF=K̆!Z=NAqMtG'uW*X}0v2ӛKi+"BMf!%#d骆t1_i+D1zMTus0h6n,0J}TD۶?DYWߘ캐4fl.¼R 7=QcG!6"N Ą9`mg$_rRl]`LD/b'g%ٕPH jI_1-9F,f1!jÝ(NJy/kKƻ7!಍l uN+qkW!a_2MytSӌbTQ/c3}"&(xυ0 ~:OTk&ss!`i;NVˉj!Km̰gQ0oki%&(``w#V*ߖ2!*0ˢ e:Lr4d N ".?fOEE>t8!G#=$wbIwXNR=yGC`" 4<yȁ0yAn `5lz0[ݥٺG۩8}aMmӽoJ@`Y \&vm*p1Q2|hT@¥£S-6+׻`L^md3g\v`$M^Ϡ:5edm zZVN\^zoVjXfw1tk,Iy_*f2EkO_O?rFzs?gē^M@靰 @RF7:G#"z<]ԥMݱ[wBfE.!R`pzTBi<'kmCY*P,: 0eڌ{!kJz%>_xbÐzw8P+e2l[224ˉR1 6Dd"z2+im9/[dג |sd lq;LGպq{̬{Wo G 'ʾtTؙ+yiT?I$eېvMowiT늺MǶ6eo_b>}Y/*G>q;y,S\l}Qs%!_ef[2ulo:Q[ǫ98jt|/BTJĆz4G?e*ƒV\{n$)Ot|$ 1i:/z{EV) ^ 6s=6'TjΠW*#t5ny}FTvcطWgk:l`P1C/xm H'Bs[sYBt-kt~1oE3(Uۡ46)y"oҥ|Ċ?Y.c8e)(< ,c@Iȇ#;D YH08 ~7ڠRFt&WR6z̑KQ &w5er%K'@vNA>'Az xQsZ|4㦶C꟫s'(B8uLpT7X޾IN0ߔeIO@! IN8`[G.{lss&z5!($@c^pO_)Iju˙#щ79 MusS1v3{ayyi&rk+DpKi` h8 ڭEirs >u"rC@}k M"N1ec1ne]U px,]z1d}y*wvUy8<[d0:25\q V_tlh||rPmtmgy'MS bf-a3O(d< o3`@H=F͚ s_c F,}9.a\'|YsUB2lzN f"r~L|D3*AT,h t.-,~sC0374ݯoLkoRF'e/ (^ &nƦʤ m%ݼS>2 'HPu駅'9o6zP߮rFY ճ_Ob 6RRYHyoF@?F"F~\%UNƔf/kl?5,Tm\|?Qg.62+Q,}Wwz,2ͣ8֚SqzM)_h8޻19t`5O޷F,͙v=8AVzNUGE?b>Yp@#|ڃjs-G(@dKVCXU%Q"FU)f/Cs#|xmαW/0Vs9(TWDL#b8KԊO) 6[uQatRFu5.!i;Uuay<8:*r hC*qDu-y`_a!;Ci^}]&X$\Pn}9ǒN|ul]5>K J=CWK^x4pj^RNnQrQ0W `f 8Q_t%|wnFP1b/J81^r*~qC{7HsVr,<әGi9?V+WK_vHXS',TʚdRXkhN+!D` 9$i,B Xp2״vu$yO:m|@I9+(MYQ5It"o2|4D]M<@M4NpbGn5WH{! E*Y{:qϘb6UW1&DL{?:kt4T5/ǖers+Q|NFPHfh :pV e{[k4<-6daj#3lpx]T|ykuIB^qِ/aeT O癿TiJJ9+p($"U=`!^&WOt) V~S6"֍W"HI{ !O"i:w]qyq?*YNwQrJT/c!lV!"`ߥS|.|yqչM⬞(C\ƨJ1ߎ68KOH{.(Ż)*4*4Z& ٸ͓3&q$5օr4Ǒa" d~bhǶ Ks 1y8gдcc8Y&ӗ3 pÇMCyc&׸[Ob Yֹ~KGޏ!!M9F$d  GӵO=|b=T8=fdH5R^A1Zե9*2+3$7Zv/#׊C<,W< WVaj$~mGw|\v.蒱dre!+Ȓ(,vKoE.o5osM{<yKJvU]Պ O rx $nfs~wN{"kIJ]aeO4j9_WoJH0sS9 N')Emsl-9ȰEX3_X3 m1')=vȼ7U+Ce_Z|!&܊'[A'ۼӎL>pNTu#f>r} *F GW1]Zu$Sº}S> I +t1s˳W;.s#| vrT\-&qvت+졾0ݻA]롓Ha(z[ PK{)Yv}%:kz& Hern5[WJ 7' jx\rmȄQs9Dx !y|ODk%/vtqhf1"UdI %!D/|,^j8bULdw;|(VE5{[]WXV 57ZGΣQ7dWIHGZ'. fa"F1nт2 "4b7/Riήw7,N"'m;VԘS s Z#B05\Zy 8azx|taR5mHHoF T)!j̽:~aM!b՘@H(O0tWrCiӧ>hǸaalQ5W"xI$2\ \>5r1**sS9/?%o]Y5f@kˆp~F'˱ SO Z8lF'<1]Ge`,dib" tY]zG WX^|:;c' }S@ا`she3Zu$)\sk3T<ogCi#0cpʞQO}$XV R8=M4fƚGq)Ȋ?6 '[( kAN +'#j>FԶq\J6'A»gß̬[FGnj]>UgO`7{JkQL4&tdXeQ4M}=[J /Cȑs :¿CVR6/Fy" fZnJbT ƧlgF"*k}U/ W0K𲭣**xguS%lLb!iU=P 'ȰkrM}bq Zy\ WҴ!-ϠfIަ]o|#-D;#n-]ԙTT;}i(-/J}hQ~4M_H^bgL'N;=gm_OzrE@b<6-0ٰFxhrDYYQ!|w_zVZD)Bʕl5vGyI2kOo2[7=Yx~n&Kήp,Aw~ל3+PXR-s{Yxec=Xs)jZ%P:gٜcڜXLtݥuz y bPO`{>FS~gA*4 m_w=-S|x~Zt JP,NQIGV,B1ٍbWnfxKq샿)>dP xDr>P/iz8Vw/rlDGӡ-6<粘ipx!QilsBfx:|HWJ5ʕɊMMOgoJsMcYwU C5էf*S%m#$:wx0Pe^Hax /\A7 x^&rêm okQ[ C @Z$9KT}yn~EՅai¡mPUKb[:D ^z3 %e<*:E` C!?P{,ӅSUkZ2Dzm5mv:^Ika`|~)iEKf-!g2XU6r?NE3c&R-dT[p`ZT ::)ԧbݴ`/"l`/.4һ[iMDX[7Q ,(92'cPdPWI6 nk6Rkx’O Fmr*h(ŠUNfx9[O$A/޷tAiY,Tgh<P21f{<G8-]uv5* j\A6b:-1mI5k1{bFPʞy@ZJ}5^2h!n:TbwCrp.2A n5!Ϩd2aPT8"PXZ }e(J rx&2ܮvSm F&$WATMY=jwHcxj' 1Z%L2H@i!{A1zYʒcM˗>51Mj(. ш؎w_8:)j-Fow}X)bqpv 4FjX`@*}2 |{}t;7nĒ/q=) bǍ;2*:\ZB4|p.R@mV `'+VGvY͓estgMXzxjUHh->x /q)/g@ 0zˑحj_-3؍ٓ+ҵÅb+P22XM˓F Yw0B؈tB[˹?WeE7[u|e'הX+E7xM(ȉ4O &IksFd7bSfTB7b c6T}#es.Wˇ#9 \LdiT7ndo04ӇqEUWxYK0W?f=[ u ?I 6rh'X|`*Dd{Hf5yfVU &RYO"|)c_