libvirt-wireshark-7.10.0-1.module_el8.6.0+1046+bd8eec5e >  A aU]Iv5Yvה~Fҵ 鬅`J1\%N}b_+HXC(1̨!Nl:kJ7md/݄1:HP1ΊVs,G"1KŎYɋMvFvr'{[4 _Q >DPI l (>s #Qt5L3  +WM3E 5V; KB _3p#I CSr U ||ANo*wݐ2]T"ڭV\j[:9GH"gҴlb#2lGd[y+HZMӿ%,"7{}OY{H5F_ӫn6oz>Dnӭd'5u$0*H1&j_[)耉f4188a328de0de17e455b190297b2c41ac4eb4de5e19149b1a8af68521e917cc1c63bb4a22ca9fd076d3b6502d46ede081796aeffaU]`/Z8y2Ȱk8gU*,%k$M=q&rJ@x,ƌ|Fs?V,VND,Wp ˤ*ɂ/_{an6f#Q8}jsf#swWɎc{kp(5[wxx䥤.$uB|{XT (V$y!\op=?޳d : r $9?HX ` h x    4l|(8T90T: TGڴHIXY\4]D^ۃbd eflt0u@vPwxy <@FވތClibvirt-wireshark7.10.01.module_el8.6.0+1046+bd8eec5eWireshark dissector plugin for libvirt RPC transactionsWireshark dissector plugin for better analysis of libvirt RPC traffic.ahaarch64-04.mbox.centos.org:8CentOSCentOSLGPLv2+CentOS Buildsys Unspecifiedhttps://libvirt.org/linuxaarch64;:8AAahahahah~6ee3ed6179ce047dd87e3b2a5e4f107be72bfb54ec12787be05179436e62ed23../../../../usr/lib64/wireshark/plugins/2.6/epan/libvirt.sorootrootrootrootrootrootrootrootlibvirt-7.10.0-1.module_el8.6.0+1046+bd8eec5e.src.rpmlibvirt-wiresharklibvirt-wireshark(aarch-64)libvirt.so()(64bit)@@@@@@@@@    @ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libglib-2.0.so.0()(64bit)libpthread.so.0()(64bit)libtirpc.so.3()(64bit)libtirpc.so.3(TIRPC_0.3.0)(64bit)libvirt-libslibwireshark.so.11()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)wireshark7.10.0-1.module_el8.6.0+1046+bd8eec5e3.0.4-14.6.0-14.0-15.2-14.14.3acayaim@a0a $@`!@`@`@` l_إ@_ _/@_P_FN_-B@_@^@@^^y^3^@^oj@^_@^J@^AE^@]}@]|@]y@]o@]c]Z@]@1@]]G@]@] ] u@]@\ڭ\f\f\]o@\N\I\ - 7.10.0-1Jiri Denemark - 7.9.0-1Jiri Denemark - 7.8.0-1Danilo C. L. de Paula - 7.6.0-2.fc34Jiri Denemark - 6.0.0-37Jiri Denemark - 6.0.0-36Jiri Denemark - 6.0.0-35Jiri Denemark - 6.0.0-34Jiri Denemark - 6.0.0-33Jiri Denemark - 6.0.0-32Jiri Denemark - 6.0.0-31Jiri Denemark - 6.0.0-30Jiri Denemark - 6.0.0-29Jiri Denemark - 6.0.0-28Jiri Denemark - 6.0.0-27Jiri Denemark - 6.0.0-26Jiri Denemark - 6.0.0-25Danilo C. L. de Paula - 6.0.0Danilo C. L. de Paula - 6.0.0Danilo C. L. de Paula - 6.0.0Danilo C. L. de Paula - 6.0.0Jiri Denemark - 4.5.0-42Jiri Denemark - 4.5.0-41Jiri Denemark - 4.5.0-40Jiri Denemark - 4.5.0-39Jiri Denemark - 4.5.0-38Jiri Denemark - 4.5.0-37Jiri Denemark - 4.5.0-36Jiri Denemark - 4.5.0-35Jiri Denemark - 4.5.0-34Jiri Denemark - 4.5.0-33Jiri Denemark - 4.5.0-32Jiri Denemark - 4.5.0-31Jiri Denemark - 4.5.0-30Jiri Denemark - 4.5.0-29Danilo de Paula - 4.5.0-28Jiri Denemark - 4.5.0-27Jiri Denemark - 4.5.0-26Jiri Denemark - 4.5.0-25Jiri Denemark - 4.5.0-24Jiri Denemark - 4.5.0-23Jiri Denemark - 4.5.0-22Jiri Denemark - 4.5.0-21Jiri Denemark - 4.5.0-20Jiri Denemark - 4.5.0-19Jiri Denemark - 4.5.0-18Jiri Denemark - 4.5.0-17Jiri Denemark - 4.5.0-16Jiri Denemark - 4.5.0-15Jiri Denemark - 4.5.0-14Jiri Denemark - 4.5.0-13Jiri Denemark - 4.5.0-12Jiri Denemark - 4.5.0-11Jiri Denemark - 4.5.0-10Jiri Denemark - 4.5.0-9Jiri Denemark - 4.5.0-8Jiri Denemark - 4.5.0-7Jiri Denemark - 4.5.0-6Jiri Denemark - 4.5.0-5Jiri Denemark - 4.5.0-4Jiri Denemark - 4.5.0-3Jiri Denemark - 4.5.0-2Jiri Denemark - 4.5.0-1Jiri Denemark - 4.3.0-1Daniel P. Berrangé - 4.1.0-2Daniel Berrange - 4.1.0-1Fedora Release Engineering - 4.0.0-2Daniel P. Berrange - 4.0.0-1Cole Robinson - 3.10.0-2Daniel P. Berrange - 3.10.0-1Daniel P. Berrange - 3.9.0-1Daniel P. Berrange - 3.8.0-1Daniel P. Berrange - 3.7.0-1Daniel P. Berrange - 3.6.0-1Florian Weimer - 3.5.0-4Daniel P. Berrange - 3.5.0-3Cole Robinson - 3.5.0-2Daniel P. Berrange - 3.5.0-1Daniel P. Berrange - 3.4.0-1Daniel P. Berrange - 3.3.0-1Daniel P. Berrange - 3.2.0-1Daniel P. Berrange - 3.1.0-1Fedora Release Engineering - 3.0.0-2Daniel P. Berrange - 3.0.0-1- Rebased to libvirt-7.10.0 (rhbz#2012802) - The rebase also fixes the following bugs: rhbz#1845468, rhbz#2017928, rhbz#2024419, rhbz#1953389, rhbz#1510237- Rebased to libvirt-7.9.0 (rhbz#2012802) - The rebase also fixes the following bugs: rhbz#2011731, rhbz#2012385, rhbz#2013539- Rebased to libvirt-7.8.0 (rhbz#2012802) - The rebase also fixes the following bugs: rhbz#1839070, rhbz#1942275, rhbz#1995865, rhbz#1806857, rhbz#1924616 rhbz#1978574, rhbz#1989457, rhbz#1965589, rhbz#1677608, rhbz#1926508 rhbz#1810863, rhbz#1845468, rhbz#1738392, rhbz#1965140- Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6)- security: fix SELinux label generation logic (CVE-2021-3631) - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath (CVE-2021-3667)- network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1942805) - network: force re-creation of iptables private chains on firewalld restart (rhbz#1942805) - hostdev: Update mdev pointer reference after checking device type (rhbz#1940449) - hostdev: mdev: Lookup mdevs by sysfs path rather than mdev struct (rhbz#1940449) - qemu_firmware: don't error out for unknown firmware features (rhbz#1961562) - docs: improve description of secure attribute for loader element (rhbz#1929357) - conf: introduce virDomainDefParseBootInitOptions (rhbz#1929357) - conf: introduce virDomainDefParseBootKernelOptions (rhbz#1929357) - conf: introduce virDomainDefParseBootFirmwareOptions (rhbz#1929357) - conf: introduce virDomainDefParseBootLoaderOptions (rhbz#1929357) - conf: introduce virDomainDefParseBootAcpiOptions (rhbz#1929357) - conf: use switch in virDomainDefParseBootOptions (rhbz#1929357) - conf: introduce support for firmware auto-selection feature filtering (rhbz#1929357) - qemu: implement support for firmware auto-selection feature filtering (rhbz#1929357) - domain_conf: Don't leak def->os.firmwareFeatures (rhbz#1929357) - conf: remove duplicated firmware type attribute (rhbz#1929357)- vircgroupv2: properly detect placement of running VM (rhbz#1798463) - virsystemd: export virSystemdHasMachined (rhbz#1798463) - virsystemd: introduce virSystemdGetMachineByPID (rhbz#1798463) - virsystemd: introduce virSystemdGetMachineUnitByPID (rhbz#1798463) - vircgroup: use DBus call to systemd for some APIs (rhbz#1798463) - vircgroupv1: refactor virCgroupV1DetectPlacement (rhbz#1798463) - vircgroupv2: move task into cgroup before enabling controllers (rhbz#1798463) - vircgroup: introduce virCgroupV1Exists and virCgroupV2Exists (rhbz#1798463) - vircgroup: introduce nested cgroup to properly work with systemd (rhbz#1798463) - tests: add cgroup nested tests (rhbz#1798463) - vircgroup: correctly free nested virCgroupPtr (rhbz#1798463) - qemu: Add virtio related options to vsock (rhbz#1931548) - domain_validate: use defines for cpu period and quota limits (rhbz#1798463) - docs: use proper cpu quota value in our documentation (rhbz#1798463) - vircgroup: enforce range limit for cpu.shares (rhbz#1798463) - cgroup: use virCgroupSetCpuShares instead of virCgroupSetupCpuShares (rhbz#1798463) - cpumap: Add support for ibrs CPU feature (rhbz#1926864) - cpumap: Add support for svme-addr-check CPU feature (rhbz#1926864) - cpu_map: Add EPYC-Milan x86 CPU model (rhbz#1926864) - cpu_map: Install x86_EPYC-Milan.xml (rhbz#1926864) - cpu_map: Fix spelling of svme-addr-chk feature (rhbz#1926864)- qemu: move cgroup cpu period and quota defines to vircgroup.h (rhbz#1915733) - vircgroupv1: use defines for cpu period and quota limits (rhbz#1915733) - vircgroupv2: use defines for cpu period and quota limits (rhbz#1915733) - vircgroup: fix cpu quota maximum limit (rhbz#1915733) - util: add virNetDevGetPhysPortName (rhbz#1918708) - util: avoid manual VIR_FREE of a g_autofree pointer in virPCIGetName() (rhbz#1918708) - util: Add phys_port_name support on virPCIGetNetName (rhbz#1918708)- cpu_map: Fix Icelake Server model number (rhbz#1537734) - cputestdata: Add test data for Snowridge (rhbz#1537734) - cpu_map: Add support for fsrm CPU feature (rhbz#1537734) - cpu_map: Add support for core-capability CPU feature (rhbz#1537734) - cpu_map: Add support for split-lock-detect CPU feature (rhbz#1537734) - cpu_map: Define and enable Snowridge model (rhbz#1537734) - util: fix typo in VIR_MOCK_WRAP_RET_ARGS() (rhbz#1607929) - util/tests: enable locking on iptables/ebtables commandlines in unit tests (rhbz#1607929) - util/tests: enable locking on iptables/ebtables commandlines by default (rhbz#1607929) - tests: fix iptables test case commandline options in virfirewalltest.c (rhbz#1607929) - network: be more verbose about the reason for a firewall reload (rhbz#1607929) - util: always check for ebtables/iptables binaries, even when using firewalld (rhbz#1607929) - util: synchronize with firewalld before we start calling iptables directly (rhbz#1607929) - util: call iptables directly rather than via firewalld (rhbz#1607929) - util: virhostcpu: Fail when fetching CPU Stats for invalid cpu (rhbz#1915183)- util: replace macvtap name reservation bitmap with a simple counter (rhbz#1874304) - util: assign tap device names using a monotonically increasing integer (rhbz#1874304) - util: virNetDevTapCreate: initialize fd to -1 (rhbz#1874304)- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1872610) - qemu: format 'ramfb' attribute for mediated devices (rhbz#1876297)- cpu_map: Add missing x86 features in 0x7 CPUID leaf (rhbz#1861506) - cpu_map: Add missing x86 features in 0x80000008 CPUID leaf (rhbz#1861506) - cpu_map: Add missing AMD SVM features (rhbz#1861506) - Add testdata for AMD EPYC 7502 (rhbz#1861506) - cpu_map: Defined and enable EPYC-Rome model (rhbz#1861506) - cpu_map: Remove monitor feature from EPYC-Rome (rhbz#1861506) - tests: qemuxml2argv: Use existing machine type for 'numatune-distances' case (rhbz#1749518) - qemuxml2xmltest: Add "numatune-distance" test case (rhbz#1749518) - conf: Move and rename virDomainParseScaledValue() (rhbz#1749518) - numa_conf: Drop CPU from name of two functions (rhbz#1749518) - qemu_command: Rename qemuBuildNumaArgStr() (rhbz#1749518) - qemuBuildMachineCommandLine: Drop needless check (rhbz#1749518) - numa_conf: Make virDomainNumaSetNodeCpumask() return void (rhbz#1749518) - Allow NUMA nodes without vCPUs (rhbz#1749518) - conf: Parse and format HMAT (rhbz#1749518) - conf: Validate NUMA HMAT configuration (rhbz#1749518) - numa: expose HMAT APIs (rhbz#1749518) - qemu: Introduce QEMU_CAPS_NUMA_HMAT capability (rhbz#1749518) - qemu: Build HMAT command line (rhbz#1749518) - qemuBuildNumaCommandLine: Fix @masterInitiator check (rhbz#1749518) - numa_conf: Properly check for caches in virDomainNumaDefValidate() (rhbz#1749518) - RNG: Allow interleaving of /domain/cpu/numa/cell children (rhbz#1749518)- qemu: substitute missing model name for host-passthrough (rhbz#1850680) - rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - qemu: Fix domfsinfo for non-PCI device information from guest agent (rhbz#1858771) - virDomainNetFindIdx: add support for CCW addresses (rhbz#1837495) - check for NULL before calling g_regex_unref (rhbz#1861176) - virhostcpu.c: fix 'die_id' parsing for Power hosts (rhbz#1876742) - qemuFirmwareFillDomain: Fill NVRAM template on migration too (rhbz#1880418) - node_device: refactor udevProcessCCW (rhbz#1853289, rhbz#1865932) - node_device: detect CSS devices (rhbz#1853289, rhbz#1865932) - virsh: nodedev: ability to filter CSS capabilities (rhbz#1853289, rhbz#1865932) - node_device: detect DASD devices (rhbz#1853289, rhbz#1865932) - udevProcessCSS: Check if def->driver is non-NULL (rhbz#1853289, rhbz#1865932)- virdevmapper: Don't cache device-mapper major (rhbz#1860421) - virdevmapper: Handle kernel without device-mapper support (rhbz#1860421) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1860421)- src: assume sys/sysmacros.h always exists on Linux (rhbz#1860421) - virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1860421) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1860421) - virdevmapper: Don't use libdevmapper to obtain dependencies (CVE-2020-14339, rhbz#1860421) - virDevMapperGetTargets: Don't ignore EBADF (rhbz#1860421)- qemu: blockjob: Don't base bitmap handling of active-layer block commit on QEMU_CAPS_BLOCKDEV_REOPEN (rhbz#1857779) - qemu: blockjob: Actually delete temporary bitmap on failed active commit (rhbz#1857779) - qemu: block: Remove 'active-write' bitmap even if there are no bitmaps to merge (rhbz#1857779) - qemuDomainBlockPivot: Rename 'actions' to 'bitmapactions' (rhbz#1857779) - qemuDomainBlockPivot: Ignore failures of creating active layer bitmap (rhbz#1857779)- Upgrade components in virt:rhel module:stream for RHEL-8.3 release (rhbz#1828317) - conf: Don't format http cookies unless VIR_DOMAIN_DEF_FORMAT_SECURE is used (CVE-2020-14301) - util: Introduce a parser for kernel cmdline arguments (rhbz#1848997) - qemu: Check if s390 secure guest support is enabled (rhbz#1848997) - qemu: Check if AMD secure guest support is enabled (rhbz#1848997) - tools: Secure guest check on s390 in virt-host-validate (rhbz#1848997) - tools: Secure guest check for AMD in virt-host-validate (rhbz#1848997) - docs: Update AMD launch secure description (rhbz#1848997) - docs: Describe protected virtualization guest setup (rhbz#1848997)- Resolves: bz#1828317 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)- Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)- Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)- Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)- RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1808388) - RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1808388) - RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1808388) - RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1808388) - RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1808388) - RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1808399)- qemu: Translate features in virQEMUCapsGetCPUFeatures (rhbz#1804224)- process: wait longer on kill per assigned Hostdev (rhbz#1785338) - process: wait longer 5->30s on hard shutdown (rhbz#1785338)- selinux: Do not report an error when not returning -1 (rhbz#1788096) - qemu: Fix hyperv features with QEMU 4.1 (rhbz#1794868) - qemu: Prefer dashes for hyperv features (rhbz#1794868) - cpu: Drop KVM_ from hyperv feature macros (rhbz#1794868) - cpu: Drop unused KVM features (rhbz#1794868) - qemu: Fix KVM features with QEMU 4.1 (rhbz#1794868) - cpu: Drop CPUID definition for hv-spinlocks (rhbz#1794868)- cpu_map/x86: Add support for BFLOAT16 data type (rhbz#1749516)- cpu_map: Add TAA_NO bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135) - cpu_map: Add TSX_CTRL bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)- cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1749672, rhbz#1756156, rhbz#1721608) - qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1749672, rhbz#1756156, rhbz#1721608) - qemu: Drop disabled CPU features unknown to QEMU (rhbz#1749672, rhbz#1756156, rhbz#1721608) - cputest: Add data for Ice Lake Server CPU (rhbz#1749672, rhbz#1756156, rhbz#1721608) - cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1749672, rhbz#1756156, rhbz#1721608) - qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1749672, rhbz#1756156, rhbz#1721608)- vircgroupv2: fix setting cpu.max period (rhbz#1749227)- vircgroupv2: fix abort in VIR_AUTOFREE (rhbz#1747440)- vircgroupv2: fix parsing multiple values in single file (rhbz#1741825) - vircgroupv2: fix virCgroupV2GetCpuCfsQuota for "max" value (rhbz#1741837)- virDomainObjListAddLocked: Produce better error message than 'Duplicate key' (rhbz#1737790) - virdbus: Grab a ref as long as the while loop is executed (rhbz#1741900)- virDomainObjListAddLocked: fix double free (rhbz#1728530) - docs: schemas: Decouple the virtio options from each other (rhbz#1729675) - util: command: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434) - util: command: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1721434) - util: netdevopenvswitch: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434) - util: virnetdevopenvswitch: Drop an unused variable @ovs_timeout (rhbz#1721434) - util: netdevopenvswitch: use VIR_AUTOPTR for aggregate types (rhbz#1721434) - util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1721434) - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1721434) - test: Introduce virnetdevopenvswitchtest (rhbz#1721434) - vircommand: Separate mass FD closing into a function (rhbz#1721434) - virCommand: use procfs to learn opened FDs (rhbz#1721434) - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1721434) - util: Avoid possible error in virCommandMassClose (rhbz#1721434) - vircgroup: fix cgroups v2 controllers detection (rhbz#1689297) - vircgroupv2: store enabled controllers (rhbz#1689297)- virWaitForDevices: Drop confusing part of comment (rhbz#1710575) - lib: Drop UDEVSETTLE (rhbz#1710575) - m4: Provide default value fore UDEVADM (rhbz#1710575) - m4: Drop needless string checks (rhbz#1710575) - util: vircgroup: introduce virCgroup(Get|Set)ValueRaw (rhbz#1658890) - util: vircgroup: move virCgroupGetValueStr out of virCgroupGetValueForBlkDev (rhbz#1658890) - util: vircgroupv1: add support for BFQ blkio files (rhbz#1658890) - util: vircgroupv2: add support for BFQ files (rhbz#1658890) - Handle copying bitmaps to larger data buffers (rhbz#1703160)- cpu: allow include files for CPU definition (rhbz#1686895) - cpu: fix cleanup when signature parsing fails (rhbz#1686895) - cpu: push more parsing logic into common code (rhbz#1686895) - cpu: simplify failure cleanup paths (rhbz#1686895) - cpu_map: Add support for arch-capabilities feature (rhbz#1693433) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1686895) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1686895) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1686895) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1686895) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1686895) - cpu_x86: Separate ancestor model parsing from x86ModelParse (rhbz#1686895) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1686895) - cpu_x86: Separate vendor parsing from x86ModelParse (rhbz#1686895) - cpu_x86: Separate feature list parsing from x86ModelParse (rhbz#1686895) - cpu_x86: Make sure CPU model names are unique in cpu_map (rhbz#1686895) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1686895) - cpu_x86: Store CPU signature in an array (rhbz#1686895) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1686895) - cpu_x86: Log decoded CPU model and signatures (rhbz#1686895) - qemu_capabilities: Inroduce virQEMUCapsGetCPUModelX86Data (rhbz#1686895) - qemu_capabilities: Introduce virQEMUCapsGetCPUModelInfo (rhbz#1686895) - qemu_capabilities: Use virQEMUCapsGetCPUModelInfo (rhbz#1686895) - cpu_x86: Add virCPUx86DataGetSignature for tests (rhbz#1686895) - cpu_map: Add hex representation of signatures (rhbz#1686895) - cputest: Test CPU signatures (rhbz#1686895) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1686895) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1686895) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1686895) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1686895) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1686895) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1686895) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1686895) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1686895) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1686895) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1686895) - cpu_x86: Require within in CPU map (rhbz#1697627) - cputest: Add data for Intel(R) Xeon(R) Platinum 8268 CPU (rhbz#1693433) - cpu_map: Add Cascadelake-Server CPU model (rhbz#1693433) - cpu_x86: Introduce virCPUx86DataItem container struct (rhbz#1697627) - cpu_x86: Rename virCPUx86Vendor.cpuid (rhbz#1697627) - cpu_x86: Rename virCPUx86DataItem variables (rhbz#1697627) - cpu_x86: Rename x86DataCpuidNext function (rhbz#1697627) - cpu_x86: Rename x86DataCpuid (rhbz#1697627) - cpu_x86: Rename virCPUx86CPUIDSorter (rhbz#1697627) - cpu_x86: Rename virCPUx86DataAddCPUIDInt (rhbz#1697627) - cpu_x86: Rename virCPUx86DataAddCPUID (rhbz#1697627) - cpu_x86: Rename virCPUx86VendorToCPUID (rhbz#1697627) - cpu_x86: Simplify x86DataAdd (rhbz#1697627) - cpu_x86: Introduce virCPUx86DataCmp (rhbz#1697627) - cpu_x86: Make x86cpuidSetBits more general (rhbz#1697627) - cpu_x86: Make x86cpuidClearBits more general (rhbz#1697627) - cpu_x86: Make x86cpuidAndBits more general (rhbz#1697627) - cpu_x86: Make x86cpuidMatchMasked more general (rhbz#1697627) - cpu_x86: Make x86cpuidMatch more general (rhbz#1697627) - cpu_x86: Store virCPUx86DataItem content in union (rhbz#1697627) - cpu_x86: Add support for storing MSR features in CPU map (rhbz#1697627) - cpu_x86: Move *CheckFeature functions (rhbz#1697627) - cputest: Add support for MSR features to cpu-parse.sh (rhbz#1697627) - util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1697627) - vircpuhost: Add support for reading MSRs (rhbz#1697627) - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1697627) - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1697627) - cpu_conf: Introduce virCPUDefFilterFeatures (rhbz#1697627) - qemu_command: Use consistent syntax for CPU features (rhbz#1697627) - tests: Add QEMU caps data for future 4.1.0 (rhbz#1697627) - tests: Add domain capabilities case for QEMU 4.1.0 (rhbz#1697627) - qemuxml2argvtest: Add test for CPU features translation (rhbz#1697627) - qemu: Add APIs for translating CPU features (rhbz#1697627) - qemu: Probe for max-x86_64-cpu type (rhbz#1697627) - qemu: Probe for "unavailable-features" CPU property (rhbz#1697627) - qemu: Probe host CPU after capabilities (rhbz#1697627) - qemu_command: Use canonical names of CPU features (rhbz#1697627) - qemu: Translate feature names from query-cpu-model-expansion (rhbz#1697627) - qemu: Don't use full CPU model expansion (rhbz#1697627) - qemu: Make qemuMonitorGetGuestCPU usable on x86 only (rhbz#1697627) - cpu: Introduce virCPUDataAddFeature (rhbz#1697627) - qemu: Add type filter to qemuMonitorJSONParsePropsList (rhbz#1697627) - util: string: Introduce macro for automatic string lists (rhbz#1697627) - util: json: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1697627) - qemu: Introduce generic qemuMonitorGetGuestCPU (rhbz#1697627) - qemu_process: Prefer generic qemuMonitorGetGuestCPU (rhbz#1697627) - util: Rework virStringListAdd (rhbz#1697627) - conf: Introduce virCPUDefCheckFeatures (rhbz#1697627) - cpu_x86: Turn virCPUx86DataIteratorInit into a function (rhbz#1697627) - cpu_x86: Introduce virCPUx86FeatureFilter*MSR (rhbz#1697627) - cpu_x86: Read CPU features from IA32_ARCH_CAPABILITIES MSR (rhbz#1697627) - cpu_map: Introduce IA32_ARCH_CAPABILITIES MSR features (rhbz#1697627) - qemu: Forbid MSR features with old QEMU (rhbz#1697627) - qemu: Drop MSR features from host-model with old QEMU (rhbz#1697627) - cpu_x86: Fix memory leak - virCPUx86GetHost (rhbz#1697627) - qemu: Use @tmpChr in qemuDomainDetachChrDevice to build device string (rhbz#1624204) - qemu: Drop "user-" prefix for guestfwd netdev (rhbz#1624204) - qemu_hotplug: Attach guestfwd using netdev_add (rhbz#1624204) - qemu_hotplug: Detach guestfwd using netdev_del (rhbz#1624204) - qemuhotplugtest: Test guestfwd attach and detach (rhbz#1624204) - daemon: Register secret driver before storage driver (rhbz#1685151) - bhyve: Move autostarting of domains into bhyveStateInitialize (rhbz#1685151) - Revert "virStateDriver - Separate AutoStart from Initialize" (rhbz#1685151) - Revert "Separate out StateAutoStart from StateInitialize" (rhbz#1685151) - util: moving 'type' argument to avoid issues with mount() syscall. (rhbz#1689297) - util: cgroup: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1689297) - vircgroup: Rename structs to start with underscore (rhbz#1689297) - vircgroup: Introduce standard set of typedefs and use them (rhbz#1689297) - vircgroup: Extract file link resolving into separate function (rhbz#1689297) - vircgroup: Remove unused function virCgroupKill() (rhbz#1689297) - vircgroup: Unexport unused function virCgroupAddTaskController() (rhbz#1689297) - vircgroup: Unexport unused function virCgroupRemoveRecursively (rhbz#1689297) - vircgroup: Move function used in tests into vircgrouppriv.h (rhbz#1689297) - vircgroup: Remove pointless bool parameter (rhbz#1689297) - vircgroup: Extract mount options matching into function (rhbz#1689297) - vircgroup: Use virCgroupMountOptsMatchController in virCgroupDetectPlacement (rhbz#1689297) - vircgroup: Introduce virCgroupEnableMissingControllers (rhbz#1689297) - vircgroup: machinename will never be NULL (rhbz#1689297) - vircgroup: Remove virCgroupAddTaskController (rhbz#1689297) - vircgroup: Introduce virCgroupGetMemoryStat (rhbz#1689297) - lxc: Use virCgroupGetMemoryStat (rhbz#1689297) - vircgroup: fix MinGW build (rhbz#1689297) - vircgroup: Duplicate string before modifying (rhbz#1689297) - vircgroup: Extract controller detection into function (rhbz#1689297) - vircgroup: Extract placement validation into function (rhbz#1689297) - vircgroup: Split virCgroupPathOfController into two functions (rhbz#1689297) - vircgroup: Call virCgroupRemove inside virCgroupMakeGroup (rhbz#1689297) - vircgroup: Simplify if conditions in virCgroupMakeGroup (rhbz#1689297) - vircgroup: Remove obsolete sa_assert (rhbz#1689297) - tests: Resolve possible overrun (rhbz#1689297) - vircgroup: cleanup controllers not managed by systemd on error (rhbz#1689297) - vircgroup: fix bug in virCgroupEnableMissingControllers (rhbz#1689297) - vircgroup: rename virCgroupAdd.*Task to virCgroupAdd.*Process (rhbz#1689297) - vircgroup: introduce virCgroupTaskFlags (rhbz#1689297) - vircgroup: introduce virCgroupAddThread (rhbz#1689297) - vircgroupmock: cleanup unused cgroup files (rhbz#1689297) - vircgroupmock: rewrite cgroup fopen mocking (rhbz#1689297) - vircgrouptest: call virCgroupDetectMounts directly (rhbz#1689297) - vircgrouptest: call virCgroupNewSelf instead virCgroupDetectMounts (rhbz#1689297) - util: introduce vircgroupbackend files (rhbz#1689297) - vircgroup: introduce cgroup v1 backend files (rhbz#1689297) - vircgroup: extract virCgroupV1Available (rhbz#1689297) - vircgroup: detect available backend for cgroup (rhbz#1689297) - vircgroup: extract virCgroupV1ValidateMachineGroup (rhbz#1689297) - vircgroup: extract virCgroupV1CopyMounts (rhbz#1689297) - vircgroup: extract v1 detect functions (rhbz#1689297) - vircgroup: extract virCgroupV1CopyPlacement (rhbz#1689297) - vircgroup: extract virCgroupV1ValidatePlacement (rhbz#1689297) - vircgroup: extract virCgroupV1StealPlacement (rhbz#1689297) - vircgroup: extract virCgroupV1DetectControllers (rhbz#1689297) - vircgroup: extract virCgroupV1HasController (rhbz#1689297) - vircgroup: extract virCgroupV1GetAnyController (rhbz#1689297) - vircgroup: extract virCgroupV1PathOfController (rhbz#1689297) - vircgroup: extract virCgroupV1MakeGroup (rhbz#1689297) - vircgroup: extract virCgroupV1Remove (rhbz#1689297) - vircgroup: extract virCgroupV1AddTask (rhbz#1689297) - vircgroup: extract virCgroupV1HasEmptyTasks (rhbz#1689297) - vircgroup: extract virCgroupV1BindMount (rhbz#1689297) - vircgroup: extract virCgroupV1SetOwner (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioWeight (rhbz#1689297) - vircgroup: extract virCgroupV1GetBlkioIoServiced (rhbz#1689297) - vircgroup: extract virCgroupV1GetBlkioIoDeviceServiced (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWeight (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadIops (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteIops (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadBps (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteBps (rhbz#1689297) - vircgroup: extract virCgroupV1SetMemory (rhbz#1689297) - vircgroup: extract virCgroupV1GetMemoryStat (rhbz#1689297) - vircgroup: extract virCgroupV1GetMemoryUsage (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)Memory*Limit (rhbz#1689297) - vircgroup: extract virCgroupV1GetMemSwapUsage (rhbz#1689297) - vircgroup: extract virCgroupV1(Allow|Deny)Device (rhbz#1689297) - vircgroup: extract virCgroupV1(Allow|Deny)AllDevices (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpuShares (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpuCfsPeriod (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpuCfsQuota (rhbz#1689297) - vircgroup: extract virCgroupV1SupportsCpuBW (rhbz#1689297) - vircgroup: extract virCgroupV1GetCpuacct*Usage (rhbz#1689297) - vircgroup: extract virCgroupV1GetCpuacctStat (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)FreezerState (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpusetMems (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpusetMemoryMigrate (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpusetCpus (rhbz#1689297) - vircgroup: rename virCgroupController into virCgroupV1Controller (rhbz#1689297) - vircgroup: rename controllers to legacy (rhbz#1689297) - vircgroup: remove VIR_CGROUP_SUPPORTED (rhbz#1689297) - vircgroup: include system headers only on linux (rhbz#1689297) - vircgroupv1: fix build on non-linux OSes (rhbz#1689297) - Revert "vircgroup: cleanup controllers not managed by systemd on error" (rhbz#1689297) - util: introduce cgroup v2 files (rhbz#1689297) - vircgroup: introduce virCgroupV2Available (rhbz#1689297) - vircgroup: introduce virCgroupV2ValidateMachineGroup (rhbz#1689297) - vircgroup: introduce virCgroupV2CopyMounts (rhbz#1689297) - vircgroup: introduce virCgroupV2CopyPlacement (rhbz#1689297) - vircgroup: introduce virCgroupV2DetectMounts (rhbz#1689297) - vircgroup: introduce virCgroupV2DetectPlacement (rhbz#1689297) - vircgroup: introduce virCgroupV2ValidatePlacement (rhbz#1689297) - vircgroup: introduce virCgroupV2StealPlacement (rhbz#1689297) - vircgroup: introduce virCgroupV2DetectControllers (rhbz#1689297) - vircgroup: introduce virCgroupV2HasController (rhbz#1689297) - vircgroup: introduce virCgroupV2GetAnyController (rhbz#1689297) - vircgroup: introduce virCgroupV2PathOfController (rhbz#1689297) - vircgroup: introduce virCgroupV2MakeGroup (rhbz#1689297) - vircgroup: introduce virCgroupV2Remove (rhbz#1689297) - vircgroup: introduce virCgroupV2AddTask (rhbz#1689297) - vircgroup: introduce virCgroupV2HasEmptyTasks (rhbz#1689297) - vircgroup: introduce virCgroupV2BindMount (rhbz#1689297) - vircgroup: introduce virCgroupV2SetOwner (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioWeight (rhbz#1689297) - vircgroup: introduce virCgroupV2GetBlkioIoServiced (rhbz#1689297) - vircgroup: introduce virCgroupV2GetBlkioIoDeviceServiced (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWeight (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadIops (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteIops (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadBps (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteBps (rhbz#1689297) - vircgroup: introduce virCgroupV2SetMemory (rhbz#1689297) - vircgroup: introduce virCgroupV2GetMemoryStat (rhbz#1689297) - vircgroup: introduce virCgroupV2GetMemoryUsage (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)MemoryHardLimit (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)MemorySoftLimit (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)MemSwapHardLimit (rhbz#1689297) - vircgroup: introduce virCgroupV2GetMemSwapUsage (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)CpuShares (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsPeriod (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsQuota (rhbz#1689297) - vircgroup: introduce virCgroupV2SupportsCpuBW (rhbz#1689297) - vircgroup: introduce virCgroupV2GetCpuacctUsage (rhbz#1689297) - vircgroup: introduce virCgroupV2GetCpuacctStat (rhbz#1689297) - vircgroup: register cgroup v2 backend (rhbz#1689297) - vircgroup: add support for hybrid configuration (rhbz#1689297) - vircgroupmock: change cgroup prefix (rhbz#1689297) - vircgroupmock: add support to test cgroup v2 (rhbz#1689297) - vircgrouptest: introduce initFakeFS and cleanupFakeFS helpers (rhbz#1689297) - vircgrouptest: prepare testCgroupDetectMounts for cgroup v2 (rhbz#1689297) - vircgrouptest: add detect mounts test for cgroup v2 (rhbz#1689297) - vircgrouptest: add detect mounts test for hybrid cgroups (rhbz#1689297) - vircgrouptest: prepare validateCgroup for cgroupv2 (rhbz#1689297) - vircgrouptest: add cgroup v2 tests (rhbz#1689297) - vircgrouptest: add hybrid tests (rhbz#1689297) - virt-host-validate: rewrite cgroup detection to use util/vircgroup (rhbz#1689297) - virt-host-validate: require freezer for LXC (rhbz#1689297) - virt-host-validate: Fix build on non-Linux (rhbz#1689297) - tests: Use correct function name in error path (rhbz#1689297) - util: Fix virCgroupGetMemoryStat (rhbz#1689297) - tests: Augment vcgrouptest to add virCgroupGetMemoryStat (rhbz#1689297) - vircgroup: introduce virCgroupKillRecursiveCB (rhbz#1689297) - vircgroupv2: fix virCgroupV2ValidateMachineGroup (rhbz#1689297) - util: implement virCgroupV2(Set|Get)CpusetMems (rhbz#1689297) - util: implement virCgroupV2(Set|Get)CpusetMemoryMigrate (rhbz#1689297) - util: implement virCgroupV2(Set|Get)CpusetCpus (rhbz#1689297) - util: enable cgroups v2 cpuset controller for threads (rhbz#1689297) - util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB (rhbz#1689297) - internal: introduce a family of NULLSTR macros (rhbz#1689297) - util: vircgroup: improve controller detection (rhbz#1689297) - util: vircgroupv2: use any controller to create thread directory (rhbz#1689297) - util: vircgroupv2: enable CPU controller only if it's available (rhbz#1689297) - util: vircgroupv2: separate return values of virCgroupV2EnableController (rhbz#1689297) - util: vircgroupv2: don't error out if enabling controller fails (rhbz#1689297) - util: vircgroupv2: mark only requested controllers as available (rhbz#1689297) - Revert "util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB" (rhbz#1689297) - util: vircgroupv2: stop enabling missing controllers with systemd (rhbz#1689297)- Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587 (Ensure modular RPM upgrade path)- RHEL: spec: Disable gluster on i686 (rhbz#1722668) - rpc: virnetlibsshsession: update deprecated functions (rhbz#1722735)- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)- admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) - util: skip RDMA detection for non-PCI network devices (rhbz#1693299) - virfile: Detect ceph as shared FS (rhbz#1698133) - virfile: added GPFS as shared fs (rhbz#1698133) - util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1716943) - qemu: Rework setting process affinity (rhbz#1716943) - qemu: Set up EMULATOR thread and cpuset.mems before exec()-ing qemu (rhbz#1716943) - conf: Add definitions for 'uid' and 'fid' PCI address attributes (rhbz#1508149) - qemu: Introduce zPCI capability (rhbz#1508149) - qemu: Enable PCI multi bus for S390 guests (rhbz#1508149) - conf: Introduce extension flag and zPCI member for PCI address (rhbz#1508149) - conf: Introduce address caching for PCI extensions (rhbz#1508149) - qemu: Auto add pci-root for s390/s390x guests (rhbz#1508149) - conf: use virXMLFormatElement() in virDomainDeviceInfoFormat() (rhbz#1508149) - conf: Introduce parser, formatter for uid and fid (rhbz#1508149) - qemu: Add zPCI address definition check (rhbz#1508149) - conf: Allocate/release 'uid' and 'fid' in PCI address (rhbz#1508149) - qemu: Generate and use zPCI device in QEMU command line (rhbz#1508149) - qemu: Add hotpluging support for PCI devices on S390 guests (rhbz#1508149) - qemuDomainRemoveRNGDevice: Remove associated chardev too (rhbz#1508149) - qemu_hotplug: remove erroneous call to qemuDomainDetachExtensionDevice() (rhbz#1508149) - qemu_hotplug: remove another erroneous qemuDomainDetachExtensionDevice() call (rhbz#1508149) - util: Propagate numad failures correctly (rhbz#1716907) - util: Introduce virBitmapUnion() (rhbz#1716908) - util: Introduce virNumaNodesetToCPUset() (rhbz#1716908) - qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1716908) - qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1716908) - qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1716908) - qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1716908) - qemuBuildMemoryBackendProps: Pass @priv instead of its individual members (rhbz#1624223) - qemu: Don't use -mem-prealloc among with .prealloc=yes (rhbz#1624223) - nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691356) - qemuProcessBuildDestroyMemoryPathsImpl: Don't overwrite error (rhbz#1658112) - qemu_security: Fully implement qemuSecurityDomainSetPathLabel (rhbz#1658112) - qemu: process: SEV: Assume libDir to be the directory to create files in (rhbz#1658112) - qemu: process: SEV: Relabel guest owner's SEV files created before start (rhbz#1658112)- tests: qemuxml2argv: add CAPS_ARCH_LATEST macro (rhbz#1698855) - qemu: Add ccw support for vhost-vsock (rhbz#1698855) - qemu: Allow creating ppc64 guests with graphics and no USB mouse (rhbz#1683681) - conf: Expose virDomainSCSIDriveAddressIsUsed (rhbz#1692354) - qemuhotplugtest: Don't plug a SCSI disk at unit 7 (rhbz#1692354) - qemu_hotplug: Check for duplicate drive addresses (rhbz#1692354) - cpu_map: Add support for cldemote CPU feature (rhbz#1537731) - util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1505998) - qemu: domain: Simplify non-VFIO memLockLimit calculation for PPC64 (rhbz#1505998) - qemu_domain: add a PPC64 memLockLimit helper (rhbz#1505998) - qemu_domain: NVLink2 bridge detection function for PPC64 (rhbz#1505998) - PPC64 support for NVIDIA V100 GPU with NVLink2 passthrough (rhbz#1505998) - cpu_x86: Do not cache microcode version (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130) - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130)- network: explicitly allow icmp/icmpv6 in libvirt zonefile (rhbz#1650320)- util: fix memory leak in virFirewallDInterfaceSetZone() (rhbz#1650320)- docs: Drop /dev/net/tun from the list of shared devices (rhbz#1665400) - qemu: conf: Remove /dev/sev from the default cgroup device acl list (rhbz#1665400) - qemu: cgroup: Expose /dev/sev/ only to domains that require SEV (rhbz#1665400) - qemu: domain: Add /dev/sev into the domain mount namespace selectively (rhbz#1665400) - security: dac: Relabel /dev/sev in the namespace (rhbz#1665400) - qemu: caps: Use CAP_DAC_OVERRIDE for probing to avoid permission issues (rhbz#1665400) - qemu: caps: Don't try to ask for CAP_DAC_OVERRIDE if non-root (rhbz#1665400) - Revert "RHEL: Require firewalld-filesystem for firewalld rpm macros" (rhbz#1650320) - Revert "RHEL: network: regain guest network connectivity after firewalld switch to nftables" (rhbz#1650320) - configure: change HAVE_FIREWALLD to WITH_FIREWALLD (rhbz#1650320) - util: move all firewalld-specific stuff into its own files (rhbz#1650320) - util: new virFirewallD APIs + docs (rhbz#1650320) - configure: selectively install a firewalld 'libvirt' zone (rhbz#1650320) - network: set firewalld zone of bridges to "libvirt" zone when appropriate (rhbz#1650320) - network: allow configuring firewalld zone for virtual network bridge device (rhbz#1650320) - util: remove test code accidentally committed to virFirewallDZoneExists (rhbz#1650320) - qemu: command: Don't skip 'readonly' and throttling info for empty drive (rhbz#1670337)- RHEL: qemu: Fix crash trying to use iSCSI hostdev (rhbz#1669424)- qemu: Fix logic error in qemuSetUnprivSGIO (rhbz#1666605) - tests: qemuxml2argv: Add test case for empty CDROM with cache mode (rhbz#1553255) - qemu: command: Don't format image properties for empty -drive (rhbz#1553255)- conf: correct false boot order error during domain parse (rhbz#1630393) - qemu: Remove duplicated qemuAgentCheckError (rhbz#1665000) - qemu: require reply from guest agent in qemuAgentGetInterfaces (rhbz#1665000) - qemu: Filter non SCSI hostdevs in qemuHostdevPrepareSCSIDevices (rhbz#1665244) - util: remove const specifier from nlmsghdr arg to virNetlinkDumpCallback() (rhbz#1583131) - util: add a function to insert new interfaces to IPv6CheckForwarding list (rhbz#1583131) - util: use nlmsg_find_attr() instead of an open-coded loop (rhbz#1583131) - util: check accept_ra for all nexthop interfaces of multipath routes (rhbz#1583131) - util: make forgotten changes suggested during review of commit d40b820c (rhbz#1583131)- virsh: Strip XML declaration when extracting CPU XMLs (rhbz#1659048) - RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1582424) - RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1582424) - qemu: Alter @val usage in qemuSetUnprivSGIO (rhbz#1656362) - qemu: Alter qemuSetUnprivSGIO hostdev shareable logic (rhbz#1656362)- util: Don't overflow in virRandomBits (rhbz#1655586) - virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1655586) - spec: remove libcgroup and cgconfig (rhbz#1602407) - qemu: Drop duplicated code from qemuDomainDefValidateFeatures() (rhbz#1647822) - tests: Add capabilities data for QEMU 3.1.0 on ppc64 (rhbz#1647822) - qemu: Introduce QEMU_CAPS_MACHINE_PSERIES_CAP_NESTED_HV (rhbz#1647822) - conf: Parse and format nested-hv feature (rhbz#1647822) - qemu: Format nested-hv feature on the command line (rhbz#1647822) - qemu: Add check for whether KVM nesting is enabled (rhbz#1645139) - secret: Add check/validation for correct usage when LookupByUUID (rhbz#1656255) - cpu: Add support for "stibp" x86_64 feature (rhbz#1655032)- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1634782) - qemu: Ignore nwfilter binding instantiation issues during reconnect (rhbz#1648544) - qemu: Set identity for the reconnect all thread (rhbz#1648546) - Revert "access: Modify the VIR_ERR_ACCESS_DENIED to include driverName" (rhbz#1631608) - access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608) - qemu: add vfio-ap capability (rhbz#1508146) - qemu: vfio-ap device support (rhbz#1508146) - qemu: Extract MDEV VFIO PCI validation code into a separate helper (rhbz#1508146) - conf: Move VFIO AP validation from post parse to QEMU validation code (rhbz#1508146) - qemu: Fix post-copy migration on the source (rhbz#1649169)- storage: Remove secretPath from _virStorageBackendQemuImgInfo (rhbz#1645459) - storage: Allow for inputvol to have any format for encryption (rhbz#1645459) - storage: Allow inputvol to be encrypted (rhbz#1645459) - access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608) - docs: Enhance polkit documentation to describe secondary connection (rhbz#1631608) - qemu: Don't ignore resume events (rhbz#1634758, rhbz#1643338)- Revert "spec: Temporarily drop gluster support" (rhbz#1599339)- RHEL: Require firewalld-filesystem for firewalld rpm macros (rhbz#1639932)- virfile: fix cast-align error (rhbz#1634782) - virfiletest: Fix test name prefix for virFileInData test (rhbz#1634782) - virfiletst: Test virFileIsSharedFS (rhbz#1634782) - virFileIsSharedFSType: Detect direct mount points (rhbz#1634782) - virfile: Rework virFileIsSharedFixFUSE (rhbz#1634782) - RHEL: network: regain guest network connectivity after firewalld switch to nftables (rhbz#1638864)- conf: Fix check for chardev source path (rhbz#1609723) - tests: Reuse qemucapabilities data for qemucaps2xml (rhbz#1629862) - tests: Add more tests to qemucaps2xml (rhbz#1629862) - qemu: Drop QEMU_CAPS_ENABLE_KVM (rhbz#1629862) - qemu: Avoid probing non-native binaries all the time (rhbz#1629862) - qemu: Clarify QEMU_CAPS_KVM (rhbz#1629862) - qemu: Don't check for /dev/kvm presence (rhbz#1629862) - tests: Follow up on qemucaps2xmldata rename (rhbz#1629862) - security: dac: also label listen UNIX sockets (rhbz#1634775) - spec: Set correct TLS priority (rhbz#1632269) - spec: Build ceph and gluster support everywhere (rhbz#1599546) - virsh: Require explicit --domain for domxml-to-native (rhbz#1634769) - virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1634782) - qemu: fix up permissions for pre-created UNIX sockets (rhbz#1634775) - cpu_map: Add features for Icelake CPUs (rhbz#1527657, rhbz#1526625) - cpu_map: Add Icelake CPU models (rhbz#1526625) - qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634758) - qemu: Report more appropriate running reasons (rhbz#1634758) - qemu: Pass running reason to RESUME event handler (rhbz#1634758) - qemu: Map running reason to resume event detail (rhbz#1634758) - qemu: Avoid duplicate resume events and state changes (rhbz#1634758) - conf: qemu: add support for Hyper-V frequency MSRs (rhbz#1589702) - conf: qemu: add support for Hyper-V reenlightenment notifications (rhbz#1589702) - conf: qemu: add support for Hyper-V PV TLB flush (rhbz#1589702)- RHEL: Fix virConnectGetMaxVcpus output (rhbz#1582222) - storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1622534) - access: Fix nwfilter-binding ACL access API name generation (rhbz#1622540) - conf: Add validation of input devices (rhbz#1591240) - tests: qemu: Remove disk from graphics-vnc-tls (rhbz#1598167) - tests: qemu: test more versions for graphics-vnc-tls (rhbz#1598167) - qemu: vnc: switch to tls-creds-x509 (rhbz#1598167) - qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624740) - virDomainDefCompatibleDevice: Relax alias change check (rhbz#1603133) - virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1603133) - virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623158) - RHEL: spec: Require python3-devel on RHEL-8 (rhbz#1518446) - qemu: monitor: Remove qemuMonitorJSONExtractCPUArchInfo wrapper (rhbz#1598829) - qemu: monitor: Use 'target' instead of 'arch' in reply of 'query-cpus-fast' (rhbz#1598829)- tests: Add missing thread_siblings_list files (rhbz#1608479) - util: Rewrite virHostCPUCountThreadSiblings() (rhbz#1608479) - utils: Remove arbitrary limit on socket_id/core_id (rhbz#1608479) - tests: Add linux-high-ids test (rhbz#1608479) - qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618680) - tests: rename hugepages to hugepages-default (rhbz#1615461) - tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1615461) - tests: rename hugepages-numa into hugepages-numa-default (rhbz#1615461) - tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1615461) - tests: extract pages-discard out of hugepages-pages (rhbz#1615461) - tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1615461) - tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1615461) - tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1615461) - tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1615461) - tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1615461) - tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1615461) - tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1615461) - tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1615461) - tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1615461) - tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1615461) - tests: introduce hugepages-nodeset (rhbz#1615461) - conf: Move hugepage XML validation check out of qemu_command (rhbz#1615461) - conf: Move hugepages validation out of XML parser (rhbz#1615461) - conf: Introduce virDomainDefPostParseMemtune (rhbz#1615461) - tests: sev: Test launch-security with specific QEMU version (rhbz#1619150) - qemu: Fix probing of AMD SEV support (rhbz#1619150) - qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1619150) - conf: Parse guestfwd channel device info again (rhbz#1610072)- qemu_migration: Avoid writing to freed memory (rhbz#1615854)- qemu: Exempt video model 'none' from getting a PCI address on Q35 - conf: Fix a error msg typo in virDomainVideoDefValidate- esx storage: Fix typo lsilogic -> lsiLogic - networkGetDHCPLeases: Don't always report error if unable to read leases file - nwfilter: Resolve SEGV for NWFilter Snoop processing - qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs - qemuDomainSaveMemory: Don't enforce dynamicOwnership - domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl - examples: Add clean-traffic-gateway into nwfilters- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice - qemu: hotplug: report error when changing rom enabled attr for net iface - qemu: Fix setting global_period cputune element - tests: qemucaps: Add test data for upcoming qemu 3.0.0 - qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend - qemu: command: Move graphics iteration to its own function - qemu: address: Handle all the video devices within a single loop - conf: Introduce virDomainVideoDefClear helper - conf: Introduce virDomainDefPostParseVideo helper - qemu: validate: Enforce compile time switch type checking for videos - tests: Add capabilities data for QEMU 2.11 x86_64 - tests: Update capabilities data for QEMU 3.0.0 x86_64 - qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc - qemu: caps: Introduce a capability for egl-headless - qemu: Introduce a new graphics display type 'headless' - qemu: caps: Add vfio-pci.display capability - conf: Introduce virDomainGraphicsDefHasOpenGL helper - conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys - conf: Introduce new attribute 'display' - qemu: command: Enable formatting vfio-pci.display option onto cmdline - docs: Rephrase the mediated devices hostdev section a bit - conf: Introduce new video type 'none' - virt-xml-validate: Add schema for nwfilterbinding - tools: Fix typo generating adapter_wwpn field - src: Fix memory leak in virNWFilterBindingDispose- qemu: hotplug: Do not try to add secret object for TLS if it does not exist - qemu: monitor: Make qemuMonitorAddObject more robust against programming errors - spec: Explicitly require matching libvirt-libs - virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash - qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one - qemuDomainValidateStorageSource: Relax PR validation - virStoragePRDefFormat: Suppress path formatting for migratable XML - qemu: Wire up PR_MANAGER_STATUS_CHANGED event - qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo - qemu: Fetch pr-helper process info on reconnect - qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject - virsh.pod: Fix a command name typo in nwfilter-binding-undefine - docs: schema: Add missing to vsock device - virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats - tests: fix TLS handshake failure with TLS 1.3- qemu: Add capability for the HTM pSeries feature - conf: Parse and format the HTM pSeries feature - qemu: Format the HTM pSeries feature - qemu: hotplug: Don't access srcPriv when it's not allocated - qemuDomainNestedJobAllowed: Allow QEMU_JOB_NONE - src: Mention DEVICE_REMOVAL_FAILED event in virDomainDetachDeviceAlias docs - virsh.pod: Drop --persistent for detach-device-alias - qemu: don't use chardev FD passing with standalone args - qemu: remove chardevStdioLogd param from vhostuser code path - qemu: consolidate parameters of qemuBuildChrChardevStr into flags - qemu: don't use chardev FD passing for vhostuser backend - qemu: fix UNIX socket chardevs operating in client mode - qemuDomainDeviceDefValidateNetwork: Check for range only if IP prefix set - spec: Temporarily drop gluster support- Rebased to libvirt-4.5.0- Rebased to libvirt-4.3.0- Fix systemd macro argument with line continuations (rhbz#1558648)- Rebase to version 4.1.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Rebase to version 4.0.0- Rebuild for xen 4.10- Rebase to version 3.10.0- Rebase to version 3.9.0- Rebase to version 3.8.0- Rebase to version 3.7.0- Rebase to version 3.6.0- Rebuild with binutils fix for ppc64le (#1475636)- Disabled RBD on i386, arm, ppc64 (rhbz #1474743)- Rebuild for xen 4.9- Rebase to version 3.5.0- Rebase to version 3.4.0- Rebase to version 3.3.0- Rebase to version 3.2.0- Rebase to version 3.1.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Rebase to version 3.0.07.10.0-1.module_el8.6.0+1046+bd8eec5e7.10.0-1.module_el8.6.0+1046+bd8eec5e.build-id905caec8d397f8eb80e8ab85c5b5d71badf6ef9elibvirt.so/usr/lib//usr/lib/.build-id//usr/lib/.build-id/90//usr/lib64/wireshark/plugins/2.6/epan/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=905caec8d397f8eb80e8ab85c5b5d71badf6ef9e, stripped PRRRR RRRRRR utf-8d69a0329a4087c04623f78365a18429ecda57b9d349512f839d61e5943e3254fvirt:rhel:8060020211213145023:d63f516d?07zXZ !#,h3] b2u jӫ`(y-6fM,qQ`Jz rwwAnEÌOA29U`U#rHJ_(Y̼H/,_].` SoX7+mϹV/&EI\f%d``bSl!0[K/n:җ90mx`6՘ICbe@j̀P+E,yP_^Ac@+v?|DLjD\:xćF%Sw>DRC!n(a*XU@fu[ny([:`j[ 9&H\ Uu ^ྊw%sS}Cy*VkIѮ'=-]v0zjVA{4֨WBSѿͨyfZlP^ofh(Q9CDp,Q~W8ey(p6nIU8qE`=3J!qGGRGpbwBwoV^5F 4E}wjQzj2 ?Gy1D>]fK:Lp`51a ǹBb^2 ]B}R%9ZfCBUs[A Q2c?鐕A. :܂[/`γ&7lZ;b:vP_S-@cx3$@U& n F=M>^h !yU;5[֯p-08cWm%!"@vg\2R{!p )@#ΥbiLL[0z5_")y~6IU3 0[1T7_AVs͚0dR.|biPš^r%|Trԁ>^+&k,HCǷsr0]Qlx {+jX"*F{:]pGݮz!tb.dJ¤T̈́c*ɐ<_υU)ʜk HjrӟдQ XPG6Ɣd 8.ǢlhvIb ZuoF) ŕBYGQ43˔P@5y y?!čQ|;a X52-.Ldc|BJzt) 4"e/>qIq3!bFyu2ŷ_"а9D{|60aDf;K( aCtֵu݋'ɛ}DuY#s3xvzBǪWѴV j49-+ksv' 3%bRFSpf9Qu&QVaeNRpgV]%ItsC3WRѡ#/yBi*[ɟB+vrV+E,⿟}"Wp=YyDX$m-=^Vus糜q.9^3.H[ Fe.e r 0Ot"OɎ5.P*PTF`X*|2rqvg^PzR\KպCS]*Oi0piTgm'Cv?Wn^S~vKl5$AOl9R7^e>dkngAbJ=0ܠ}VzMJ9`Jk8yi Ѻ ذ}?ҫw9JF?#H'T2ө{30_O?xؾnC(W&^L_c%;]W$&'Դuh}{@ Wt( YJƈݺGţ`l Ɉk 'S5y'ճ <\I"/֚}v=Ԏ4P^''I1Ĭ|֋:ݛ^ÛMShv"-˕?A> v*nRd3 hUAAOZqBnfS&VD t7ܓCpGW} *ԎwoS(Gp#٤@L.?P)(Z_?m*T*p_DeɨI)raœ- QۍWPGH jt"ٔɄ>z$X<ߧ%(B*0Da}Dޛ# ˆ~NuZv T$vT;z ^/\,EԝK jnHI~S>b|iⲢe imDx(3K/ܶ9ix3uߨ$ 0# C@5ڎ72)HAs%._E2f;h_\%NÞyz (L*'tPPwvK:M|(wkY[3$}kbpM~FqɶWiuԉA gȖ)'sð6PmQ[c8ʈ?SO}ؖ`1"fZ_i>^MfjSmyy-gbR7˸j5Sv UtH3u4׺)"f&J^|WڜCW80CK&!6ߠ f:w\s`=/Tk&K'Z*KP{+T,ǥzw#|B gp~ RZ!ԌyhKFI){?][I#T?\sBdp8P uR&H7ѶdܠDqD%#nviy=7-N+i<`>}j[Zʋ9cgN!z kۊhS!)֞T xz F?pƵs4 -v@Ke57FDmh ǧov%e+ =#Doi;LXrnTb&$KEZg[w45 | ,qD;w~IB}C}Z"2)`O}]k-j+iW];A@  ۷Sq 9jn%q:˝1L.&,(YHg " _jhLu[-|e)R b d55To7>Z#`{s%'aa2ZfWdt;$_G=ⅳLg[$4ulש-Ml $"nk'fX' U'$<Ӳ@00*{* yIid :^Be/Sd#2Ye?C]|Q AͬV¦^$t bƯup%s9Nٿ&(rZOI) Dm.F48o<hh9c.﷘s{VcZ4|-uNaMr6{N :dғn ܿ!Jҗabrk0?R@gEFa mEb@4b{!FռQGLe۱zǚ1ȵ~HG'<9#݂Z%e[{aS@"+iHj.!' F#>(*56W"뼸Mė=jz>9 \`}bIh6L|@ Еm #&3n;Ŀ Jg ryT؃ d]nrpt@ҳS5衲5[27ԩ|B2WrE93juUDdpc}S΋]U0Ijl2q 8XisDCHC28QJ͗J!z3J/df0J>>QCU[2GLl1D|q/UkFL,!Dw`LvW ڦj)XJgT^s:f{$̼W91E9JSΉfz2D75qg 3wxW)}-1 kqZ{~Wqb_&&+sUvb.>(yY!qvJ##yM|zONY>PT۹O8%o ఍_@+qF>}A^擃Q_V kUUd sCO?1LL *CLg6N1GnX$%q"WntOtO.z:-kyZ_hF@t_:n_3+uHZ*4LU7ՙVhἛl__~._|Ѷj$ቊ6~! JdwpQ7D׏/HNM\RN IZM>78MJڮ_!=L =X)~63q֎}G+< 7:k&gNlPGS>ھ8|@y1!$J ݛ}ڱp`*|6^D58BD-n7})??jfO0L2 {QY4 JP0(Z("Uwn~dT+ڔ;%_Þ?ʺBˌ8nF{{R8^~i q1qu*uO IY+䮝:OF*f0A:Qw5`$!)*~gEVյ(/KϜWnWru7K9&zGNuN\}v]HtVF}(AapԻe-i9kn(J+UWw3r3a7)mܢ%Y􃖑 XIq5(aL럏0\θגdҾ¡VO6L㒺|dG}D*ՕN agUQ`8&?fS_6Wǻ(au͛[[QF,}-Mb^]ŜYwHGh5 %O 3-ʈ5 Wa{`r7y̔Jt/Nx?J̯ΜxAXV_y7 q|XlT#s.IkiUE'm y+Xg-1hNnZ3_;pn!gx6J߈Y) I`V?U_%ܾ-^0h}ne.h9Ay  5;Z&C4Z 2:}$yqF]y/:b]@ ub]X%i f;:`BmXӜ?ImtސaçM]{; ">Ԋly܎a0"o@r<`c=4tyS=8(hxtR ;ucV:"w}4m/eu!/#E ;c"mЍenY&kU1CѤ_>yi _6lzCN9t[7/`+rCL[3f^C0d/, ;RD} )q$G2T rwW x,1LvP{1+o=[>=.Ym0%)ↂ$pT#DSS{!#qhJaZEF!cE_"ĺsX&Y@A(>)}=w#+6UYW\y "YDt-Q]?-XSq^cҿkgPijڲ!>\VNZyg0Ww+w6~h*Bqvߦ/Bh?-`KN d. j4Rpr>Q5-]''=E.ֶZi Tku>|1kE[z8u:d˩% @Ƒdj>+^ӎ9,u~`A4;A}0KP‹D"$`tsM OEKG]tcͰE_we_"a -fai3o\a*aچ߉]ɹ ik9ruBv7nٛCןD8 5{BD@}g1vbWOwĴ wqX|Loݬ蔚MRU3%("p06IRpg]4)]heZԐvp0DŴJ:Τ,J BFed7ϱ;`vמ]xC罽M=rE.F;s t`4vh<Mp>xᰙJh묇Z =mK Hkh*iޛ jM= 4  ~)_oX6:)Y9ݭPC0+ TQcKZlD2/HGWuq"_ NB,xn!OIO}^GzTVf*7_l5dZʧ 1_W:t.kڶKe!mjp7.*+f#کǰ}!bǜB_^Mz<z8(K:px#2eFӽu?!6W2uh{)J1E-7ǩxjv^-F36tF~L2f!IK"^@_Ugp:`@TT4fWş8(`Ӽ* PE,?y.IV:U#4s9T0m*0] [}ٷ~EaLpH̟Q߻^ Ȟ{3ӳtwX@ϭ>}$Ypjn~BTZ&~K/D2i6rDC[O#?"H!F56+)tXS[~Zl 5OSC29Ѡ/!_"I~Ev'}{$/\s$%UH"QgPsR 4L{ɽ[w;5)xfjA݈ud3:o#X/c# ^7l3Vw=0mŐ|wJYM:բޱiDH ҭ4%OQ'mYQQ`I7|<FP® ߊ8`/*s2f O >ڽ;-S8]ȕxT'yZz59ٮ'F5 "A khy}V>-B0Sg=T8Rz%#sUcx %K2Uhe$!m٣4 oMƣnحm.gA:g uN^dag ~M~<ڑp[f7VzdG1ܨ}T3d Aq0Tԛdz5l5FAí)^|sXCBgp qݽUiIS$,yIwخ=-[NnEqR=&sm>(A;?u[TnQ.)n'J% -sn,p󃀔d8#dNqkE&6~bP@H&CX-< et yk)?x&> z d->﹢RQ߸a4n7zRlhTٱʓs(#Juyt3)NiovD Q# -\>ɘ8}J=Thi*5&ĩgo9X-}-fp=|Q{tGZM8I(fBF̌A3{!uXڦFV6,taag-OE& 1.UuIe>;w|¦Dn D> a.;zVT/4k O',@Z_%〒LP wn/^ csxs<BN5ӯ^4lKV0^ɗ7X6:q43~f>$€7d1K3$~/OF<1b'DؙU@r&L镳rTwb ̹69oֆ]0nY3}z 00MEr ؞V_7 ,z=ڐI]@hԋDEy̛ "JYwn`9w@izrz[m4n]=m24?r.pKﻘ4x8Nί$LWLMMUH ``H:D9 A{'GnYvp"yQn(Y.v{P:]`f5+B ˅RpO)a&Ua~K2ꘒC7MdSc|  TBc4[[VS3xmAu4ifkGǘ0 }Gj /g:/) Ԣ"uX_[&,dgEA)/ƚ;fWt ς 7;4 WV8BM,50_7Y]oT.Ǧ,hqYPeXNP $kXU* jHn/r.!ı8i_Ӯ45$fՉTvn3]Nx sYv4`ڮ{KT>?(6 76[u`ʧ!˒-y^I<'{Ww x+zA( V1$fWxn+X⎗#1Θ+)`m3ÌClzN'6ZmW\_ŰLd׶4krGcrCA9Y_$5߿ϯMj}F~rΠ^wkGb>勑vb_BU 4VW!x8kcl8ˢKZ0Ç,]U'+.aF Sq2 Q<0>@$  U&P'`Cg#łpd Y޲E*EߝhE`}ßfjk3ؾSvU,] j= J!fP73:QOiopp¥+!Ϲ΢")h[0&slOn֟q_p^Hr 3o,忪.ʎɔ$Fhښl3/o}PG529`è0XZ%O繊@/*L\7(m\,ݲptHؑMX@pt\.uI ԇ/1*1D֞:Fwbv|/vuYq 9ATcS=_ѮL$۳ gS~MzD2]>o}ku蜤kyEOn倛Vn mM(0ȴ7*2PKWudeH@}~fS7MD9 d@Rgs$sXūjjn ̨{X[ISUg$>&`/(@?6`2#s,~,p_M\@:PfTL:5a HoI\a*7Άv6g8S 8E^qמ2ltLFplF3^ CzNXq+TMGJx.bw}x ϫ},Ic.[ 4A=ަ|Hbg*-[Pq; 5vczd;sW!, 枙Dy)(eB02jf<,Jf=i&2MCCXۑfS DHtZȷJBSj} yWdnBCK/Sp5M+]vY-cbW8IX+n$ff'ys (I\6.aLGq1 Ӯ)dc.PQ&roc?% Ti9hk%h ]pW-&loxܵ*#gL(L_t?o`!k3AC''{Va͘]vt`F~:,>5i IRۗ+a  e{G5%D+ ~W) ߲Q9.x}vfUE?z#Ѷ* c3u_4c(&:^/ fR`;^!N֞ӋʮM)CjnSL`" a d)qyIco);H,ȃJH p('{6z w-q#a|fDnQ VZzƋ~GYlz={i&`rԮ0s2(K=zO}[//guw ub"{ |d;?m?) n DT }Qյ;]kVP\5ּ5E`x-,^} װ3$-+^ĘH,Ηt!pɲ!TI <-͉hG3ogJ; XeM۸QͩKL^mlz=VpGO\'"0y$O+'5UDXiK|B`L¶=_e{?ǣfj=],60 C#_3+ O8ˬ=mvRqF<Ȑ d$Rq kA# 'ȿ<?y'KN1]vaJ3OŮpFo#g÷xUV+r+{7o(ΌN6v8.l:O[ja[{._HS4yP7'Tx 9$sk%pU&z 5*0kdc.!-=A}ۺg+ Τ9hIK@H| df]Xdyɮ4%"!":jڀvW%̛=Oݭ.?/Lfgm`_ܻ 52uOx yTە`c6}Uqt%UzYaY[̨iP} CHZNqܓ,HkelU@gɵ4‚Ntl: *ReDm`wްH(L~'N)-a֫ ?i'Qۉ6:l'JVaE6gk*1-y}Qƫ]Z!]ؑV_lx$2r@i:5T3.6bU:Κਸ਼e7j ]mf´gEGԷ%:ѕjLR?ܩ#@(3a<t.)j1VO.q!~k}G}sL˄TxȚ~,V?T.",*w •\?n)FF 4mqB![ B4{&ǖfķ~!вS{.rH6JD(@%1K;緔 s+d ͲPV*`J"T,v"GΜ0+g^3cti. v*O9"a]%!\>aDtLNBry7F8 Lq O u)|Avw}uY[@uXwyEyj]$*sy>P 1izUOθ$\aXBXJ;2EUz/sS&?ꛯ:Uif&VV:pS=e<ӆE[ztթ͛-31VgNPEJR̈$-xR<"w*H@ qzvo92,58m`+ wq-y;KH B;ߡ#*tegYhe*դ9ǁ]|BL_2C;2ϊUP*Jh(}qcD8~ 1dJ!ggWvN#ք=Dy+c0znw,{(^Ȯv7bfNau_cِn#WǷsc2w@p2M`Wnug)1ݟWOFdRgp&?Mc]铀Rm^ MJ3&Tq"(NgdK5^j4~s4D:tع3ׅG-7`9hA-h=~S7Q[QkQm-?΀N\ylJ B/"P'nPD.aT>`z]ؠ PKa/D0R՞J ݠEc|:3|N\$1iv/rI! o#JsYdq*UN7lm@`HpF$bx x>'8֙ S`RX;$۹uHFdu6VdP1])fc.. Hh3iF_&^rҕƎ}I| '.FN0K,A؆51u,3fCP!庇SWM3L̳4z8=ɦOhiQK`L0$_ċ+D5&%M^֬;~Nx:<\XGHnu=a߭Qs46,@|8|Tb~U`[ʷ~KƓ>רy3b4t=_Z>Ц9]`װߣ0M ։%$@[Gּǐ-grqZKMFPh#o|I7IJVn6,0P-՝']?TS(kr7/pL/+'s%^ ˂_hYܟaRefp43ǜUL;?|U@*)]uzbׂ{s ,F 1)txR7r#0gRVEx#kѩ؅bAJmgw%E'D]R dyNspoZ?CR"DjЗ{[ȱv-sdI `T*-2djȋ|` ( Đ?C$)1ݧӿzPi`R%xaL]kg^o_vTꅛM5t8;zN'أ W?َTLL/ŷlRU)03jwI~zއ\`hj!t0cb%N;b2C:X :lrF7AIYVE(n~Ӄ$|WQaCFJPBtVQS㽎;KxJ2F tbG/?@4AJZ0NCߕn*IJҘF+5 @<3c$o6leOa(acF 94Edzς0D|A|M,V֠wQ)oW}:[: OD\ Z wǧȝa3ߥbeH!b(EkRDV?T^e@]5a3@7 t꒶u؆N6pVi޾ 2m0wڌ&R,EA /9vKeMdЋҦS(fJU O%}{Dzȩ>@W HӤMS3z7%S ֲ_)}I$Tl9"!*jjC48E\~=] ?- ?(`6)U13o;m nEl>jH&2^M ao'^ŀy# VʳU` K` 2}{n-Dh C2:1@&N,]K2nϏ8nnȝ,҇8"s~6I >ŧ/H lEz-Nsx؄F#{;v'`U rYN_{ΝR?}V6DgD:[F_Mk6A3Bv[sX-9ySĄw "Zg?~]`i\ kzh2{`Qz__^%;Y/eT(5Y0]+/H{Z>6N`>=IEex93l6iיZN>n`E;_Qmy0iF wY{dg4FU䫷ju΀ȨծT?/T/qnyF?7 3&a6 ۽pG+x|b4Or;YuX`:gpX>bwE)a L\VorM)&%!0ڱ  #wPX+HLc~;FC\32"s1]ӦVt8bdY<3ZAv2,.ͽ&J/F[ثOZc v4 6Z6_>Eed7e5-*n;X]|?3]A(4 Z{f!l8d큇{&owa 9z[!W|J ?k,=O{-n3BG] :P6ݧQڣϔ]c$ }׫ay|fv44E5={fଏo; 4۳|UhX\cj"ϒ#ݮjr7n崼-ULj"\R(wRaIB;KO6š#[+iNMP%yhU"k:֮C7k%JWݙ2JJ72oW,S<20yK-QQ7JCy0!wX$>":N߀A/wφ~J/g,6YJ᳕hE$XHzZoc\Bb׶|hb!jʓI +6A'܃<9eIN cGm5B GK"Tvx RWskx9AlI6W`x$Y_ y_12fƦUn|n@͟>S"k8u"dU:Ǔ@>^TC=T }'"\!\.TrX!́tmhxwN`& W mr5|N@mX%NjW0@zǷzom0>7^%vSG}2ZVi|T'7d[0~V%-C@apUS$;4|ӣ;ЁM<8TZڈDL/f3o%xƞPl$)7z!V-%"){) FJE2\0'j|gF|<R+ u@IVz|_9EV|.'POy5uq('Ɖb5D#1zW¢Iz P\v4\wחwN3`$R}P`5u oc)Tfɞ Қܥ#G}(IgO```"}eάѮN43ӼU\RRp"]h=:JSn:l4%yg(FA3VOǐ{V+%(* BF`vy2jlbM.6W@jQ??]ӾguWl 27 vGuuvX@d#F/}V!{#zȢ&_ pEf`w~_QXE<:!Q}yL #RXaśA\SJJ&wzǭ(bcH`> R%1;*XHӵFd@"jɪkh u,V7p ع3҅B$@;'p8`@jAoς~\T&M4.B)~]1G:F;kq_c&n@Ru ϙT{>D!`(8#"GK<+h?Gi0;La~}[WJ?\S=? ڋpz1@D(~P}')WEƶKUX&c9 9jB_$ysVVrsRRUmBvԋ 1.U oK'sP7[GYj[cU(;+l-5sH$(a)`x0y[Q'c)\#V%0P` i;Lz5@$w]`Πs=#ܼ,|t>^,T(.:Yc马?UQ2Y.nv $YQ$옚;˸tEoujopၨcZC6>hgG%7PbI7WC>$u4ʞi%֜7uE[kUm "!4wm֦9%EͱTtQH0NNbܦcV0dyeͦCՅU; Խ w~zy[m s1XΟj%6 .Zf4Nv\2 '}yPvН,M._s*`n'ZսG:׆Q&siޱ,JEM0ӭ8medi8ũxw_ec,?iJLlw(A 9{%ޢ^L6re@ X X]Dŋ _z/d{v5V6=pG)2tpa ,QY'X_6Z<7u*?ꕫV O80@4тi@.d ]8t05m'm;щf= kU4?Ζi{chz'e5fGw3C&8 ^\$折7^W8:C*iYP[Iq"!yKkE4)VXR#U65ίޔAxr'U^^RBP@N#[$34L^fȂ7͕\Z4`?kDwIerݮA9oA+:D` g*Aq/eV"|aNݔ tWS+Džjvtxuզ'/? FMmn|<π(]PiHܫ9_h~~!>~jcDGU䷶.|'=Qq"u}m<ɃEߪd:`Exq%ӴQ}j8FTcU(Z5Ջma`Rw];U7kGn IV'Q!3N{26$4]s+ɔ1^ȅiHdjy(Tfyj\ uC&|'.5%]HJO^2V˔=Q/{`јzkY2kE/!'ϞYF<5Y8C!gv]  Y.:[`}1~7nY6#om(4;n+!,Jg/};R^#@nӼtʁ$p_j9\aP29p?< "E}4#UrTJm~gRܜ@doN`sl8 .@X/"dx|+!|W"U%YdQ3 1w؂r?ꂐm:}XAA_CCqDV,ڏ$yI|zOX;>W/B.TuTm+8Oފy ƹWj zH ky ,eI}[wމ:Atk$ˆ⤔;>mTjmr2@#Y404W [Hj8&U&wTP[|$ m̸ + ^|s' +`G)$Z;ұ '}G8*D5>w ? cbdZ8. M݇T5p1E@#{4`؏գl 0ٷ$#]{Zq-phfzc‰^44!tBh?b?.^ߘ<e#qجf>m׬|rvN_lY`"^dT\`'U+EIȏN2WXb5Lʺ?PFBܭbв@Bݰj~yk"! ܃uqߐwg!w~!-44 A4梍ZHk6hcޣ":KcKC)Cs%$' 8:M8e$&pL +s'c$bijصN),6sY19}e}m%KǺޖm 6S]8)">3&074řy-_Mk`pg@jkiE RHoՄ')Ds>@:'5re&b$LqN"3AkAD;N&zmmƳ݊urE dӲ$"T l M[_c%'44rEܸ5<aPURSձ :>e\`M±ؗ&IlՊqHm(WsyL̨w))P?^q<W5 k@E(dWxw )d)$L_z3nt6`E1PTg+ 2GpUy>p. GϠU9wk{.vT~jf'v'Oāyk~7@z6.DO_-)[ƦD(ߝ9".ZE|~wbo\N. ^oTiSq}_훓b eVht^=l2v␯><9Ty]Ȳ{aX}@ܯ*\;@pyȂ ZghrYɘkR7T2gi,(m4hJ_8uLa)x kw<8ڥkI|(H.tjHFFЅ^&;#Z$0`Bɩ}rᆚp5ۑ7\n,0o~m"MkG[͉+=T PI>[x!TӒ[Gg댾xB^B (LHlFdPXŞ943Ρ27a5+}7f:ЪO%%WzXwGIɌ]b_d+ (CiS0|ҾT% ^TiT;juH% ~->ѳpsaqMzI,f|ˬ]m }q$䑾~-vYV%Z!PN8]jWY76,w)iY b(ge%S%0kY%D7_(kdV]Ujb/%;.P?J'oᬞegcaEYݙ5}|]t'!Cȍ`ѻ>7Ta~Ky}%q j̅dμG ԃؙB9d­.GҾ{(U' `v:4{?¸D@kA=)Lpz,l?RS.Wby,F!&Xcֻk<~10>y2W, Àor1B-ב\q`"\z+!;2E gOO#[bn#A\ҼMqv1t7Vf}"=97=9ԮM%;@TP lGHvJ}"h\ {*lWcEmy7@6Kec^oC-/&= !+Sa]?nH܎| 4[55*6\fKt$~')ٽVhxly 2LԹfgB7tA{cČIU?(HDc@wR1o]az-V.B=5$H2AC$ %EZ)HBE:OIsǝ%>BS&S SpݙKa˼i+A`iY(el˽mީVτ`]tOwBy]][/٧'\M9zn3^E ^Sv_|f,0i_긬f?K3VVBUX=` hm+X@+ɒQDsM j"0x|N]mO )ʹR!| i1ilǎkfek;? -݃rӍ&9nJ$>NIZC S3sh^ ky@zCGɥP:?b2ҵ{wĔ3⥋wDfxN@ɛցH'`4lb)7_*(L͓%\rҽgCvPo ?gܱE{UVq9BY>zɀ[fMjK~'l*>\%j׍5 ([ ?\[Dbưk9 VsEvjS?ޞTk}V:e?zP {Mk*3#MئDJ !$ J , l%h0E2Z*JgIt > yuM~更z agh&hކJ~ hqAO̙Tlg:->4;eYjs6uO ,0 E;Tl ۧ0閳r}xszGoX.Ė7o*7&&^ob]8Zx!g5BHG*2S@}ESHA2n2 ࢴw6ޗs47FZYxѤQLl-f-~JeL繘 TÒOY1|30[sg ^ Y/zWu4fpqj|ɵfGͨ@FI:GDc_3U$-w+DOA HOCd>,vV{sTg+ sJB'% Q/#2T0Q7whv5QrrV 6s;v E1_0j$0 @Ys-JW{'z։ukUޝ=n\<bhʬx-=u[KfC9~,7XviAh_W=yiR/R x\ ^v%@dVɖ|B9R8|^pP䰬+n.7cK9=Od04r5|RdK-([ l0C;@}w-wq*LGKaSceZ?? 5֥}^\LJկ{(>N]EvLdڳM,;#OKDۥr?7y_N@VRr<,|+cX|d'yދDc[ , jo8 jZ8` W;TNnڌ7MB=@?{k)*]SpՂiqVg%豝/0>c\gJTۆyg-~8ZeZ,@;VIS[5pAҘ~je%0.+|PL.Z`H)=P37[6⹂x[)87$2ݞ@t\u!ni.muqA3Z'4"K >8zt2뀧|wT峦 {%}KU4+QdK; nyC-Сxz_( ,^vCyyw^C~$h?zzf^{ LAJ; g d8vp8"U Ζq]\Dmvj ,6aNVafߤHeD’zf;\t̙ܼS|8 7h}zԅ/$L7÷6;?<"bn`(UsrO0"ZY=E6HH9q2Ė|{MH U.s*Q&g!+בmCC]i&v$亦[]:_@t/AB{e# 5N#ϒ\b {̭}+o،fI_P%wX9w/f#{s=8G^<T64&Iv3u? !j:Cf`KzJ9hOagZCSRp<*~ФW^ :.`XH3#\8fKYSwglp B T/1der$Ex3dJ2⃢-< u:𤪿-}K,_k8 T~ID_pL2)judf3NDKΪ׻gk?~UEd^ <,u3Cl?+[_^Cn9^ ƛsY]G7B{B! 74K)EKe^";fy>_*ӑC ʴw$HNt9=Uoy#[IGVHL?*Jye: `i-)}iTnzq7U$8Cı[ږDEjww%y+3e#7YhC&1=d`&XG|*$[bӉ[OkN 2YMijxHKd?ֈ͞yOgE-&4 h^WPCwvfpmSOTL޶^-x&«[@{a Qc"F EX_guьuGo =Ha;QtjׂfI`f x4m,6Iv:VB Œj* YmI .9`p6'{ <^dޚ"Q2C#غg/c0]`g+ :/sJ]a YP:>#edJBHST̵=>ybg0>MT;5I/a4w-Sv' : }w`?X)fEz8fAf&qo^$tDL6 [CsxfG+z ]bݢ휏(ZנB= pgvj+uDf+ g}A"^ݒu)d @y 58 ul.W,Ƞ"ɨ'1_xqɯG[]MWaeF0>0=_ЁOIUfÝ:-(<3)RDY٢X2|*R\/R>8<LI"fwQen.(+D8̳"z|h@ZGL)O#c@'G(0ĖHu'z 23yUK` ٧ jz{q; %OMyD1lWD ,'!okĔe|OlOOeP1'́ tP0 C6Xk}"]Q&za1ޔ,)Cy(}ѝHxgۺyXuyC}'\JXi%(x鳠e(qՁ lU;H''L-ؿpD}~ ,FT ϗ/8@B'ݯ[o8;\ת51V9`hOb\uPkK߱O;cьmQ>^yPbn_^#@g"zY"3PZ13J65 F7N_ʧUTijI;41#UD{^jG9<~{t~J"i=ɰT}(N>.3%K/2X(;s?n_R0UߘF9Z)r#kq}2]C7΂,3!1aEޠ*z ~2[Lt:_~-s&B!OzbX b!ѻgirȜ-C;tisd%+PZM|R,JE AlBdx,yݴCC(/8tlGb; /~I}2*(<1wf8j#/D,O]gOX@Gq48 N+"Gf19/R$|8[Y;8?Pi4mŢ;hb҇C^ekF}כZj7ecn@REvb3bR ahx|]@%UaM4)>kq5棚35o'yt# bqi3B .>A\}Īۂgn/rY;) ")?v3Vrȶ;h Ü_C/'7F%0@wLp9vZ{_1dĊLG/'o0R,P.],ֶΨ RLvxw{<'/EIaz5P59=d9lP:Vh;TMGJ]p7TkpjPJ,9cը" )? dP[foa:A-L6ʟl&6:?^Lyp#Mӓ+ 6}'vZahFIymO,d_g{y* MX~d|:E-vsO[)ɨh$E~4ILGɨĽ0H*쉴iWʣ(gؗ6+ OTű!4ħ3?OGЇ d-Cfq0v>싿fbs|ADz^A7+wDYIKT͢;YevZ(;sϺ>&Hμ=> Nb~ Bt\?O<3@ t_ GcіfL|~c#MN}_|oltA5>xPZix`h\+2\qeVT = ]+ B٘t ЖrMfk1"^gV3Y]51TAI%Vdꁈ¢@Ԡy Mdzi./9mxb5DaTZZ2L_,W=iԄ m \a& CX˕,h&O`ffs7R-s[ZQ0Ae,}zgxe9}{?E> R2#ؼGzl237@R.HCoPQ,VtVsm7FbRB먜jN48xq3; (7x'13^vE<>0B)$WcnXn\_`!ltk tb$b`ֹvK $(ʼhs^]X-Pnf!IV"1z씕LzU;!"jkN:i{Mռp8H*5ﴤICE>Q{rC!LBo5.\Q֥š8g<yL״Qh e|.@׀Ngi@#dP9aX(UϖOPAuš uoM[9tZXƆB+kTmEMu'9$N{=` R,~R㮺0 :? b K>h]=˼HF-BH(7~B0#x: ==}w3Rlۖll (ƥO|ѽPCTI~8ؓӹśM7$KY_3؃)"O?Bn% 3}լ"l~#̜ԁié t݉d#N2uȭ!bxZЗtF7q]pg Jt,N?>[X d*"ڸŬecA;ui3Ylx_V Cc nT(L4X?`0p/C׬x) פ@ tʸ6 ^"f  kVR aiI( 2tc$;V )5Ym Yd2(6iԡl"/I)GO^*[ZB )u4c Ә*d>^Dg%1`D~*IR:;guLcn-NҟK_y1w?*o6|[f.;`so PKwa[8ip #)qXZjӊydr@|Uȶ{hoPhȒƹoi_f&\9jL,QjKgv7y@NZtX(6c^B0UDUb6~3bS`_[E 8LOplng)Μ1 uh `F=EӍo` :?Y>*tmz-KGneҙϓdCbg-&V.BU$uK7O#55$nE+kZx)UsN2YA|~+hӄ;nnLn',G}j'<ޣS̑Ef6a#K6djbIu,a ~!6guW||I+_D_-f޵<#n9noy3v9Hݶ#,Pۃ<pRP#Cרa:Mbk]߯ (J_tA%#< l2`p|78% ?Ϛ} KȓӶ#s uM,BCO HlfѴ lQ&w;㳘_}1),Tޢܷѐ _M r #Ƥ", iyXM JG=nW8J"LnIV<ۃ-N/qXy3'Ĉ k3}&Vťs݈R$0Z5RJsbU)K*y{ F\s ~~n.);5Ǭw:\u-R;4^f?Uzvw\ q-]`^&8w)z0C^ v"œZ ^`7qFN%1SVfז9Mt24LCzKɵeəTΞis2ǫAsOjc q0< YJTJUtg1%T'Y ,5?Y]Q@,'ɹMtcKXmepf^Ć$o)EM?jE[gLbpWZ1Os5j~'1IϙTO3 "2\Kq #4 j}i7D$~Qy5jx""|J=HMP 'bd`ڭFD,hPXJd'uZT/t浲w PrR1=%*b\$Q T 5ݝ{$Z#c^;HwG؉ISEe 1Ɠ,:Ti&WTNmoBtL =mE*w`&5bus̷m<Ԇ!|h0 =I T>S7c>KhW|#O)]xpKPRbA~:}׆̃il˴e3)LD#se/ιn 4;.j467>`gNS"5 nfr(kZwva =P#)NYWMmI_c1SګEюR?s.E'7ʉ"MŊY]/׬[Rev ɭC>loYBk85(X_Dx~ ޞ}7iy=Kۧ4t8h[dL3<sՊܡ@7G{PD?bҘ aԷu+(GgBZ.Nzj^Cw4[il& QZpǓiAoȼ-f2F~hƾ ŭ$KEY>U!޴䕘P=o*A- \a@9\O_|:AP"*p{uT/jq&tA9I\sLPRKG%XT}bꗴ2ĵ,,L)ԍФ1ceLxl:P/ ͆ICx\ͳKd=3 Q ̦ee5(IzGa{V" ^.%P 9ӯ%Pek=ZD\ޠMA_,Rr;n]fd77ρoUނܺҷgN]^@?U\G~g?Tp%Ԡ0F*Bll|}gz--)[fȈYu*5뇥2b@Dp oGF`/RO%Z ؝'\)wj6V=+ O'pOlTRLS/A0,"$FS"9\ @!$'~nQ6{cw&076 xjs6yCc]b=Q< Zb6L?Ɓw]'c9Obť[UݲEs+D=&/j3]v7 &·[|u;T:'6c gHY&.POP>"wO=|o#㞇%M 2OURl嵜Wc8tB [XTLN{ݠ#4&NZ]B_!_So\Z(.?9̜-kH(TY+zJgIىR—)(1ruR% B;2{! Sx3ʥ( K<]/-O$iM>3#%Ӂ2#w4fjqͮ֬́+o ,JJ}E,?0!9]L[)xM])(BEa(,_ʹ< %Ug5>܍HP!T  K!r =ZY~BO7_LeD_}LbU5YG s ynL*{E]D_⟔qA_Xh˵[$}1O 9$m"~נA *w;n3b +,C ~c'ML:QbsEYsUA#ptyچ!= ,R_:BޡhІ}@a"@Q[~cfcS |;Rx"%f[8i`)h9RiRRBZ>fYuHw=(t% `dְ -DNfQ%Q8ޙde\ua=*CN9}nٕ8"ʣq&yTRݥjaӖxZ h! Z^u}A9ߧ'r )=FYtPQ|gdKV ~}݀lB5i76Wwv.|Xz{^f/}JV9mۗcn]@[ l80Nr\-k(-p(&pS~m.p`88]Ml*Ed^|ʂIrmŅ|ہkq\|{U^==jRF 96 hI+R#T"+KHɧI0f b-l3l*llB sn[` vӬuSU]GJyhnoCk>|Z |g!Sq׌ a;9U*֕.gbe51cuKu/gf$erOB۾OŹLyޭKzU| d/6\S}bGv+B.ox\k-##$d]ɠ!r-Q_\eD"TTCE 08' NZGF,J-P@c!ün  -Q?vb2GKJ3f= `v+lhsZ`VHoIi7bD"wMS 41mz2בM m5{I?y*>cK~&1蚒(9~a"੠DZ (5A{j#lV B2_AΟ>d>-b{?11Li&N]NSDy&g>hI8C$b,<hr_pnfD%)!BQ㝞~@b,ODu G FWSG7IS)eP[eR=jZ{`#is.sT=A~S $ZO^jU w=fB:x@vĆ G'|7s<=~?TKf^؆_ W/ӎNVdF>3=Eb'fGPқ_Nk+ȥjqDoMqF+N!auSHZ s+^=zС5.Xa#F1KwWv yfkս3\J?_yOͤ Zqgߝq,m2&Hy*W,P|AATt1M}6j*ǎm# 蘜@pXaVg]<Ww$f; FSk ?x'm3| t}8 rjnBzn4$6d ?RdDgnT?]6ڙD?['s6M|Ll{ ajh!p{g"A\*40z/TYкo~ GQ粚4y3C]~3$fÏ`V_cO&u}#S/Iuw,m8AlIsqf) Iqp֠Akes`/h |5FSg+ݳg>Ha)f#m@ Ȱ "/֚%KWϡRhF%voנܱ]$?)^v„x>jQN I0oų;)`t`7kHmh8X4v/ƫn%:={G 7п嬓rB) cM oޮ54EXCPɬԍ"iuzpO C\atnÝ  ԭZcP.)s.VC}FN*,9+3x9*3s3HVqd^%q{^=kH~FyJyYQuUO+t~(ՄF?e"&LtH}($ TpF&kar@ s_ogA0m\SQFk " * jbZ8d8 *;V7;֫OCoFN9;^h`lΡ5E~&h]Qooj}<[M5)(TQ`HG h%6 f t7˪nL_XRj5JG'3.{Li^Y"kN/_:P0:wr;C0UZL)䵊 w5^`O$/Df34Uˆ`0픡uDֳAC5l\;e*%w04|܍qz<o}'5 1\J"hͥp S_g @/kҥ_K@ 6Ƶ&x~ma;1eC"]T6Y5cpj+m%n5Kʅޡb&`=(.5󇻄7 ./h_טYs0%hD"l2-H`N +&%"1f Ip!3k1?.܃ :"s7n&GuoL{(`!?OoKzhh$^>C× .Q{I;4]lϕbAƾͫ==u$_%uh-^NN)^>l6 .,p 0,F<=b職 &rݸT-6E@PH?ٙVH<)HCvOO drDLڍp-U Mg[ngq̸N@l ,ctGaT` J@"=ؾAũ6.Kd&`3dOhЏyZ%Oy3x/FCp:ː%I,м+6  Fc/IZi9Kf[JZqSb鮰p/bs bT@O4mq4uP͘A=zqh޿bjP:\kOW+ڀĆLo ;G`(  BNѠmGH撊w! }P@ S"(G y~ES[߹:MF!8(ž)`^,mԄDP=3timDA_^'8ĠC2τTC}j]'YlgZC5k FtBnŠ:2gupӹЛjw=u$v47q 'tj9FXRN>NcZ O)uU>cr|]hŧ&.H0eh&D}O2}!.k.u9RV1$])qZ#XõdKQ.+wJD44PluV|"'7 Cj@{[dYؿ 5n?97!8Z[x鶼:ذ;L e75˳SxQ B(0w}EEC v[@Ԟ2RUնx!.@^{'Huˇ%L_,20!*64 ʍ1l1.cks.nT]R!+WVE#`9ǝ0 ukoa˝~(l3}MMByf2) BA)5xD2ɪ`H4Y[Dg:LH?bƑDF_ySj59 9gKw%mM(Cࡺ T }[[o'Iv=-T`0z|4sÂH-PNk"YZT{!Bp ahVZK"z$?=˕|0]hkF_eu-&iN3ޙeBhm>~CGұ7tgɢE#3C>VyiBV]!0ǥl=i_` ?[]lؔHawirc;Lqla{|1񡦌s7Mf)ʼnFhY ba6Ը7틋R"ʩTVФ+M:oioe~5dIţx-[B)+%oÖyÈTr(dXts%wB i`?"\CgWȐJ픕*앦E6R,WjrWp&=b"k_Z=k!J w?fX.cwI2ޑFwy;A)&]Zf!e'OM ˨S@T0h屿lK"}aAƷhYBRÌUH^{|ݬ|ci@I埓@>Tz_v԰-6L.w(N=MV. Q42֑aya"6O,N}YK}HANy67w>QrRkޚ:G wԨǁ7rTÅk)cIK\C&ׂtD[&fgj9bFe8B}QȠ2eb$-28?D1З+I,I*fY`76Z.Dy AVa8d/ [ 0 H!6ʺ]Nhl+7l ۑ/lݎF~IN!ibB! . +θ[{!pZPxz !2d& ..\~4 USw귷#m'mW:&%\nr7ERNMx<8]nsŒ=TIGinvY#<!,P2@'MˑDZ<7O T*E@`9F*g`;m =/&ǥ#\+t{5AҔl$Nb~^c>oC<г!FU뉋,FdxL8 O+zDiIgZ*PLО(6Tus=[:U Kd$}g&RHFh͜$kPt0D CEpй̻Pc*SOڵZ6g!2F%QEv`ˡu\B1]}s«=O#[ 4.t҆!<2G7[S O,Fwcw\2,m-ٴ5XQ`e1z|]˹?ob|O"Dys;9z/"S;1Zm:XX#5Im EHBqu2l>"=$/WPT'pQa(GPhFlPHз2ʋy쮴M:jdRDeqt8" I'TEqOWkqG"b'5c9y:*<Ő]ЃHM>eC 9VoJҝ `=FϗbbqD6 q=7k@X?^ZWW;s˝LEEK%93rӕ*ЄIg%|4>F 9cvezz0f_DY8FcWoVn AX9آlOO5~ln>+hupէYh$؏w ロlO$ Η*FkޛXZt5dʯMWBS:ȈCܗ=iĄkEv*"K9iNʳ~? jKLM՝^vI|D/0-/:$X5qE;L8 bW ϥԮ1wAj)oѻ A~_ S5qOqN[$tKU(nڤAn"ثN_?Zpb q}ɬ Q َE\-OUޕRu0!D?I]hfQ K$7$;Fe43\vֵ&R,_6R]JFn.Ȣzx? v3"loXw;~~>d,+0ڞ@237έe hlgfR,h;m&Uv+lrW{Hfj6b.= hԓ%uhomS}\+>Y!␵SDO$Gd=Eud3?`.g/! r/]ESnyt+ jbf]g̙AVSG'kKϤĬ ;XW77>AKӭwN~G<=dQb-;= :=gcySLwgِ!@b}駠٫{;,+_C?tD0~Js96кmLLN"+0M>gjXv`H `jduhAg]klIkwZجd1$x$SWk~bQ`ɻf-+D蜬]kf/z|IpY=n=&oQvߡD To}zUMTR;.ɧ3^7h+ղy ۈLJ7>!6Ip}Tl%Du[AX|nSF;v Tn*j)r)zvi++j"yG Gɏ%7qz-sf"e$ҁqjZnOúժx $r" Luh(nOrō@BkO* `Fw0cwm($ ig\0+TE/Mk: ;ޮ#CtӚꜪTnM`s=㨊Ne , %9(F5$@Ϟɞx?L9l[ʸzt-l2뢞jl '=z(ohDM 43}N9zg|OׯAFB:[ƻ~%DxJ\ß1UܬAޱ؃}Nc"ԒzahCGĿXK7oљ'ADb2y>TS/dy]n6(WNR{bNGm8 jS1`n~3jE%>W*˩#bDb#  ]i1M3 -"!My"3$ϱWA=C.T[a)=Cɶ O -@axϺ)sJg!cbZZ(dQ\AJe<}tբb"Ra 3[r{| GՎ!l7/yKRHhpSƘ~HGdF1W"VThSW d&'aV.ܞFE'4f mW.bnAOFL8VvfB!h X؊0"ݳ/g1'M4pGX%bz,FO`S)[/e~UUqU9 ÆV!2s2W:b3@gI!^CWMʹ X2,c#9"o&Qn䊧{f-wrA*L_a BCWuTJ^jM8']D`BvEd9UҦl:N#DlgzŘB-uRx~MoVzF_* o.jsvZ["%vFra@  `:t8AvBX<}Yu Sݯ1.^nB!"jMw~ w~*7+KٮqF`Rh^p'?_s5yß_&{46hF Ep5&_C; 0崕\÷IX-'n~mat*45 PEjʈ `$y '߯}z跍U{]¿3:9|q,(<ՑS(`!nrͶ{zMW\py(P]ƠZYO | Y$b2_|NN%(LAvxU#?I 4heQ_/bvR@i# - lv%ČS{_YX&r A+oA~ra[ݳ )ɑt(Յ qʶEr);ČU)o =:3h&83Xc^!<*7udvZ&'ݘ/5Byv)=/:Ċzjvz 3,iS˶v(_TҼN OK?xtѲR_bƅ7׏œ#hGt0)?E\Np'⚗$$Xl6I%{ݷ\W.dvr#ū*F_͎SbKTNN$wJ Aâd Mnܫ( c(a!.;ᾡe_4 vđYt)G:ۗ_3'7U;:5YaX wr68AK2)]8n~)!XxU-Lwu' aE V/1G`37B=ߚG{Sc)נ!!`bvdI'3%K=!r-ưa=LH xu}ũ;L(ӗՈrj!ԾJT0?a7[56^c  s1v06d"[% ?[A,y}kʱhiWgM\lQ2'e;T0QA__U*CO/0 =,at[P=ΉF;Sb M Y܌h2`V ? O6OOYmt+C>Df\3qr(fgq]ah2P & UnOknqw-3P"''ZJ{_ŸG0Bot ڴyNx5vU镊*m7 Q,A4"*5ɔp'PHEp6bsU^.֝aA䩦\A, i֜b/#dab| @&Bt-,Tva֦O"2R l7EJBF qz$,X FSȹ u'HH݃W%[_(qY@&a F( MsF_)̬fs4S f'i*e/%xI^BxsGZ4Pa}Y9-pwԖ/"ǹ6D/@2 o4^SCxJxP{!tpXA3t,8UPcϮi!hޣO'l-2oj]uЁ}*N{)x=FU[+*:Ыg?KKka+ |>@k|qLzЊ]ݞ $IѣM! ܎b%[w75JmX=|dVMʢ9{ #[j-ĭo~^vg457H ˷z ҷ;Fk"= _"[PL2{@S{H"8Oj"gAqY÷mNMѢN8D|وUwCijr!9,<0޲i j֒2eAk~H\tC6h fml)x;nVS) :,O8`5K=)pU>nRh1rjt!#4s].dBK>c#ڰ2~{jQTr|*i999jl7Jr=ny v۴1%׺{[ip`h~{ eLǻQѵ%0`}ڢdDXYc 9X`۶XWYAJ?Sx"jõk6L j O  ];rr'l];``&DId q+˚\RNj|%=tKVDKe`x#>}Y.";h!qWe0NWՎC/kVѬyX0yOX&֠E5ktAZgW(7J蔺Wg1T[5T6>( m1<Ͱ˔ 9sCia;Bd0W#V%fJ'H"X HeBOL +Opu.}]) 7Z$ '7̔A!3_/E˱4@ўN+k%ճ=$,C* `0_PF{\<ȪS;-;c!(ΎiLo$-@_m?qs͇1l%HUl͢vפ'!00._K^YWgOG}jLbE^51 %5wE(??ΝӚ0Tgɡy;>\EǔJ@JH!Z40 tiNeNZU%R*F{_˜T_N6&$LC>ܸ 53F jINV[@l.QDR^_LR[6fPmTX'szר[7 0X`jJq$ns^ z.[ r4X=kyԙEs<I,.}eP&Z9J|J@ i1kJ/$قyLH&Ř]i4Ai V' (-ph<˭Rb=xMM^R~g 4Ԇ 4 R^u]44{> ]i !DaN'ԓ(l6 "vMW17ڪv;UݸL` 5+3Wx MS!:Te)SG{7q PA(1gId"] ڥS`\ "pl+h7zbs( C&Lr']fOB 1 t ;ez ڞqsQwlEpo?mǨԜ͊~'`8c %CHq7/5_ Ec7qOYPů=*N/sE[eUS>G695Htհ+Q)GZ^>[ Y!tly@VŐ,q8lrtS5>ƫ2vׅZq##|47…9zU3@cT]v7#ؽ_qբyqyo F8f<-6VзKfƅX朌L Kߥڨs0>JnՂl&[uE Ls-{(<+U8cc6;ZS h#q9z=wgr, W GQ["98USJfuS#KVs5 {K+wʾ/BV+_c**Rn1{ l,M>\`yY(4xg$dC*et|?~MFgS ա }`x+ @T>7gbt"[HdDB|r5DFWh$Xn#p>eC) iBu1JCwi|"L@dK/\pRrǑ^l]RU7fb'N1$c̋$:tֲD-ؖyNl \xffozlY4=I4jQĖa_UXk-D>>̖Hntu4Wi3yb5?mo{ )B7J8G#(բQϢj2Q fkMk6n~hpyϚˤ3γx ѡ,wLNl#:G8y^8zբJO[VL'Q"a'O#+[BG-s]Ox̡K2* &NEn_,qabͩ"n Csl1KïyCOW[Y8J7EҐuR'O !&w<i"F&`a!CLF# В@7ff[؆]P>'FG{詬B =ߪҕc0+/\^.wOګX)0:޼[D3rDdzl8 5PRKIu;=dBT$N2eQyBY0a] nV\ >/I2G>B0{zX=&z\L?20JB.iUMhh6e_o] }`e҉sΘ³QL;`P*cѪd&>֛ yDn'1=bzRWou[$qwGFJWx~ \ OG + ә"6*Ǥ inٰg)hS/+c ^-_JvHqbj #o`.gӕ)pִ &fSֆ@?BץUp-ÎY\pZ^vb6;,5̄ҪO!o&x4/7X4Y3_prT kDVntKIҸ+'1ohBv׿ ) teY`K̴5_SBx`[7MYغvuBpX-]Q|w_3m:pjFZ@I6Ӷ`^ʔrp+iFdth"uA没Ц7Z)1Zz#y sKKPFRFC~UԣyILᴒs z.VRlY<-Ce_j.y{͟A) IMEy+W/ca?958OaNFfu9+qD9{oKmCs{5e|fZ#OGe3vwbؑ9by۸"~YAXLyIM XCW4!p;AMK;٠q 4؟$3iզ7!b]]ߤ IBsb͢U/+͇!^v(qs+ADP7mFqB{Co;n>t~{Q D< _rv+5-@ފ0F!txV=yKkMO0'|۷*0}*@LbX!ym==̉$he>cf/0!;!OVvդEw]}Տr&YF'oSsM'TEFlvTW7) ,$n2Wim2n%&چTHԢk~.e23 6FO>!0>Rϟ͑If.m$9Ctej~bq._+uT-Gl*ӤSg;J04 jŀ馇ņMxuJf0Yļ"8g?m!ޏ׹.k3ےlS1bdzY)O\r@^De@|7u 05ς7j&'$Pij?du'y_bˬR$_ =6Ӕ>:N@fbyBBrzՂ(BXslBhs8,gXQд #$Wʿ%W8\=zb!R)rPɈW69,\æ߅xc=} ;k8AabRfQ_re1o4noA؇6|XѸJPM2M0tM0-*ae y,hƄ0hPVC"X|0h홻rcWTДV'-HPC΃X5˻1Ke5 2jA/K͸,oS,/sMQ ? ȏ o`psi`3Wy=xRJelF7o1/B ht'J5+Ϗ B+707Kqfi]: !~ :I'αL{c߯"#` ؊~B\bwsۧ{:1]? Ob֙6\bABb ^dD'Hl _oR:_i9(!/;CTQ4<͛dZ5rHDEQ}W28-RCt(pgܿ.## <3lfI8UxMH:/VIg2f iSгV Z"ǁcr(vGLS빌T w`Z@fAA9˾Ild?^Bh{ HA]҂`c!|a,†ڼ\FrؾY~)Q]Vܕu1]Lఠ%}B&3{2 "/> C;D%A~P t4%jS8&[@7}RÂ.ܷ]]4Wex!PLJRxjE \ˁ Y_%ŕX4XPA3FUDB߶ ^ e>1 =򷑳Dc_g5s"V'`mm ]_b-!kՁ*jd)2XW3F,VB\Lފ@ ]a)c{<{I.j9K_C%F:j O9qe8Fl;Whŏh ',W%~rhHGy~</'cm^5Iti'o<,93`0D,]CH4E3H*(:, ё_5QfBWBy V[$,'41(Q1kś#V6aNj\ ?U ObX|~g駻SsDEuVz_ٲ;dV娷7".}i ėfRS~M?Pr |tUjrC\ɕq]#|џ#"IT<٢[a]]ӷ.?QfCT|A5]' K(q逌]Z&M!)ܲ,,q]2^d]ar;L/yKe(*!# f=skͷf[hݝؔoE=YuIx:Xl*\0}ÇR!SV> ءJDW i)aCͯۚOgZwܽ׃c?HJWQϼ=<3Ш2IN,Lx M5hd&^۳0sj5hLI V>U-Tvq`:a ~DF 8 ^J n_fG-3LW([jÉ =Gǃe~τh Bڬ)aQs@mOI5jE_Xlu^w+UN&ꠇRTs^ݫ4 [)3HكGL }[@Ssk^k)˳:iCz@2u{Aƭѐ 8SЁd2_B-DzGe譨{;Pґ@= |)6eX5g/.\S6?T0'oN^: o]aYqS<[+oxmJ SET.@DUasRѩ VM &wP(Шݛq'?D@&~΅Ȗ, QX /E9wcOpyjz?"tq'G&`Ѧj6L ?ڇ${d0e}`umevڏeq-N ZT3gYH7DU|HӆX}W&upM1x'gkE&qxBxcۛ{uC1pr. A(e܋q&+ݏ u4 䙿@첿?|la b.8vuwupsPGr6A%h~ 8{˥w"]f+>@^~0=%?H,l1" ^I-KVAwvE!c2v,Τ0t{nL/gҩ)~x8[Tִ@|N D"Aʙ yTT t oJ/N Kqx}17̚] 8vFj.'mWX7HrY\ۗwX}7!6cWeoBц7bXeDO4P4["[r 9% n jm34q UӧP"P9<Z1fxH^f7ڧpkBfJ&?S2.X Tv) XC-F&S>~ҪA4} ;:iyaEyncYf"YO"M6gM![;0}F.^ ֺ>=$,vko͗?aoˠx25gb"V*,@pCcA[9JnHԌ,g1 6H%wˌ}s6fՠ6OCGʼד]V; K2 '؅zBDG 4#13Epn 5E)yMr%`T:&KEɖ6Y\# ⚨`z[ 7r 1wF0.*LL@ߺ_sm7%s\5Odӏ^ #K3m1fe4g3d|zxYnLq~96n(??!V27Ӓ$ؽ/Ã'sᜯB!LzN Rs#.Gm#?]ÇM6bW\b0I},*z7dYɳlTh,.v 2*5oQL{OG>6o A@] 9lTe8 fu _e1g{* |L:}֨JϪ-lj.>!8+_Gxz(D:Al7`T+zZ|3nV*ľ=ߞ}r3R%9tX=\RSP{1Y{(~=t[8l%K~9A|̬t4R8.#Պhus"4]KAxJI(ɤ!ť`knE70Z!NaE*C@QTDBZ+bAel?heRwOQzfq[DgF4 A}=Rf]̴Z'49= mD̩B;O;NH4Dg}"cf|Ne[C-v޾XoPbCB_EA ^3r'_mjfǎƕe\ kE&~eM CxߢHrcOH/: 5m,U7ёZ.z0 tSK77CJɜj`ת|Ba0IO560I=ApSLuNlxJ.0x O0K:Δ"N45&f{V` RT#W )qޯa,ŰzK=ȈE/ cđW4y *SU*Hr^0e5ʡFOֶ_3I%.0j/Ѻ\h{3[0:4%~&YN-\aZlםq5+T2{3Lxtu21hk;>dNwR3;&UEH3jmr-*׉\֟_[^xe!lo#an 0*v`a"1g0H)d3t0?rWxXH=lx+`0 BN z9ܲg8SBD$^P >>'7G=,v_!}La/Ʉ ~E*ZS$MPȴFkRk2E+kJ?z'^z$$i(Ge_ wYBZ4lk!w<ۄ=SV`\Or >kr~ߠ?gVbBFuHZ؉ݾdw"ƅkjеh g0X_*y8p7RVE6 =B.|~w5q\X.C0^gdQROdZn`3(}jQ9Z*& t(ݑ94ڌ$@ᮙzcGE3\>RO#h3נdhH[K A/,<Ss8ɞT2 T Id有*!&F?# ziEW$= j>'v̝yV!)1:Ms-,M)s"aųD[k1MXd 5Vz ,ۭi`] mЍ己XkE'L`7 IOZuK9BܬxgzA> kk;!N;ڮ1M?Q nt6^Y EӫTo#3 p sҴJ@fJ{_:Znvz Hy_i:`Po~{c u=c ߙ fFhxjgb)>lyKu7EIuP,#[)eOi>LW0Xa߬/aSgeA7C?sAV\/ `Ac`,3_"g36͸lBLSLP3~zf*<$'t.%}I U(s5u %+.RP Ȳ=v\.ҔVĽ\?<ٴ"FL4nHůXQY\ߙKSga`=BCpC(NaweJ* PVex#*JeLΣ3;Tr˻fI/Ms(?IJہN ނm8-)m1UpMк׀W=DO#2aUq܎D P5U1HsɬXh^NwemN2DPG zCf1ͷ IĩSc[+ $CSt|g^;Ł`exnOIJ&)4:GuFW[RW[I! :,ȦSѻG²$C:%M j^ a1Z;%0#aQCfj覱Sܻ5%$!H=R٩l+v^% pJl5&,|l>zF&i DnqĻsʺؔ_y+pP}+S TX؍Q3j߅3̶xS|aRIł-9{W=*>L *`X3Pt.GО|VjBMQ.$M3`6h6 c>͔>xEǭA{.t$ ڿ1pDܻIڋPVԷz>Y5DTaI; pJb<9CFcX\.3ޫ<% P̚iYgȬ>Fsy 7vgH )a4]Nԉ fzs xg*w2g}X gXIG穱jV pʘ;ۣrt(~ˬ?p[i4x2L/:tl3~^TlSJy_db-bv(3|aszo R$g2sNV VM}Фz=<ȭFn: T׿&r&b׊9 dxM~ĺwQėj | yEab:*a )($ ߞmIY}îv5HPw )&Sʟ̤pX|i)UFU3%R'5&ً`7u.?rqR+=-:t+rLV*V`3O/T/=[qpH]z">Z$]6ѥ LlAy ͒""!,Wk QMs*F҇rӲJ:\ {`WrǜR! D?vA{7_^hs{iߜo8R%E \蒯}i$Y0pΫ:CgZ9͊ _I~ oT UW&L\9 3Q.b 7^'v0sY1hpQb&DW{!4? (xd1JRc-d=C9t*]aμCrG86IF>2uAbJH}+g&0+>H ٮUo~); 6<:;kY( fFa.&uFC\fY}>I;$fe:>mTJlK*V?3j'? &f6 BBWalNleDkHe6Yg_Wqn֑:ɦ e+@+Qpj vk%&cHN|Rz+ J$FG|Z뻐|x+ Zkw-m{*Yh>ljsMA `̙=6/;֩Y^#A(%:w-x8% @ <{{b\- 4gPOL@>p+JVQz(&|:@?^j1nhDFlXp قIgwh_Y*)S{ X}>^ЏKPfH>$w yv'7:0IcOD\,clf>t!BATUȀgT]@T8)K`4x/VX47~ߣ9 qbhr $lˆJ'M8"<޵8>&n;fn`:E-f *8%㥀רD"yyvӬnáʛQtW3Bt{u援eA <޷ޕJ( .VUB@ǽws98P fqY'z-J'1HoNNh6OÂ8e$#s9r!Țrf?ъ(#Q)K?Ŀ_3䎖p6%k)*,y@1Cܚ,~:I/8ڴIfS?*j!5PL;2}"r B+;0PzoHNYMgCOϠ 3 B 8xe_.LL_%6aSsB)O6mT4?QAoI?uu Ua~Ҫ.1{H78*iA쒗A:x6JQ4\(W$2'0wFY劑ww2UotՊQ%x |62sgg>Q!m疶e/d,3e< fsWKԋt^_;Ȓ$QJT%kg~ACvjbrۄ&)wFa0 lҹl6UL9'ZxEYn&mSU[iY&ބ_܂SVxF[519Z  Bẽ<|tN>_?[hNYIGah Z!KD &G՝8=3mՋk[׿<9 .V0y;1f-Ɓ7y × 6s \98Wo6ނCcPtu=-?$XR݀&aD||jJ8S1ԯ>tt.?Ev:*{1E%BaGZ0ʏVtQbcχ~ -#Xyo4VeR Zc -*A@U/q]/"_ ~MMm;]'%?(5?Ǒ2]YܟzA qKEIu ѯϐa~kNzA{F)FhI\6 {\[/7٩v> G'Pl83^x7ܼ=V3AeA*aqڗM29Q7<}Ev/@*Opub&W^WIĢ:o 4Ӛ{/+Я-,PcކNnM\,t>dЧƃqYM=/FFvfuV';r.c J/>E;~7Χ>7ClXm֝dgFpdV*k C*p[Xσ[¨*:uz]%9.(ɩ'%MN0>\229jaOZ!T_ iz袼1Hj;=uF)?êGIaSȹY*Iе拏 m qUt܏^d{:c('‚;3euAC R3"p8|XS4!bڳJk~:gʞmP\/G2{cmXnM35UBY>fRX:Wwu I9CRUn *=;{/;_@@gzJ}F6 a#+zn'n(dnWFmlSQ8 H_F0$vӽ`p2gԞP$ Vw09Rq6&W{I~O> ;$*T^rvȅ4g'hhR\kvV_RPt03< p jLWɼ/ޥWx4G;H\9r'm_w xgO2+8xA2DNIEd$ $nZc) eDu3&}QKsĚ<ة֧!JwZv͖ )=*Q>HbIn0 *f)/ܻO _Lܻz*![9DJbfC+ HI1E[JQ͋0g igj %Of8;m'LBnr!2!@-\+Ia :( u!#곪 4h/E;$_F5ˊT۽4L4/FrV 3:)3wj.o~19) +O5tDcX9+rUD=#>(׾s}iZ%_X2Us:ٞE '/_/)Ԯ_b]q?CuEK\*q}#3aHtgDIh~IJ|I Z2-4p;ØHNr7jF*-ak"S1\m.Z)Ɵ˕JR`! de> \8emJM 0#jGiSpeAIڪ^K*0_E~U"H@:6YOaFN+- Hj])└i 9μZL<@A%4}vtk_~~~$ mj75qhӻ_}#wlCK{PA%Qk޽~[Zfup *ni6m"nBpa GF]l&YihX,\4{ն`" &n: yVT0D(]5 c23U@@kLq΃ W\5呢$ֱq.:4Ǣz)$!E{aMvfӫabuIF5Y^M V5LiC2uCBF6y鉋\T"a`lU9vlOj@T`M qC(-#}Ty;ɡW`^/'1.`GE M8&'ߩJmc9Jdq2JI8<~fSؒn$ϣX܇G,@\ik"q@Z[{ pZ2??MϑtlcF 3Q΢gI_( ,ZD_׎uy\d66UL L/~E9ˇj35a:Bx#7Z^*sZ)Hڇs9*Uj^4G:ݙ4DX~DG:UT/lPa|P(c @͇ի/O:{u{,}jO>NGP2hQLtU0eu'(n& 7FJHbVV|~-y®o`p[V7*1c/QDu8Rhl790٩`a8"Di$(e>\dpDb[??)_hDy}o] c ;}ͦh4FL8$CkwӤ?[ViD"7PJ[6ܗbIzlkmW3seS#[ZG݊ rv4n n26ռ.[,j[qw:nU G:lպnp0{Vfz*#ߥְz(6^إ}"40 <-f7OWPh|&FFYܣpժo EҜcĔ#lBjdPOڬL,~"0 3T* HLܗ`]8yz#cIFqAН!m$:y@W)'Hc.CK:oU:<D# Ln5Q0` `mk dਦTAg8wނMҥi0~ܤR!5*f٬A?; SYKsN5##mrYY"zV?8AU&#R E-͉%J,bB'Jbٗ_֡kTPwwxѥaFåu{OPզC9, N_ gALE6 NX7 CȜCXNSUY ?eyt7>M)5'6F11rO2#0fL G'c3aQ k%{hfT^WYyLSuÝ}8\0?rTu3mW2~Vo$e%\]5|"Ԁ<GBgE^]2p"jqǯ#|*~h &;3lq)|L~]Zص6O;ٰ: >. Z! \5D[}rɖAL'#ml^et Lpbw>{}77@ґ]g_{֫≿XBo/u0ay:\G=r/u7/' fΣ|O~-p4jB$hhJT{SeiDC%oOmt\>i4%^_'n;ie`6F;gȓ<6t+4E& ?pN # p3UzB[Q/t@K57$x[@In)BА`ai|M(m+1onᕙV >zһ 6Q(9>PȈBvX&92zcr-ayʨ`Mc t-Ͱn[31~DDAlj67A#] ~m t?Jװ0Of56U@ߠ+rn&ԡ Sh8[hQ|ػvQg,.S~xUI`>CĈld7%ӤGL؎J_?ecO0%h?¢d}ΏA g c{m<*% kwWG{>(ewsX#.Sz\U,Ȗ-s&qǻ.H<#R6I0LC:svw}!Upq# jLO8݅댚 $yWWyj dVgB*ʞULW\DWBzv_DH;z3xb ; q^BN'r)m%o@r2V Aca2]E"y3ux= r:߇/^hK+d6N()U;>h.$c٘ng:/%"¹ %uyHqq^`Nv!t':st)#%bMڄsޏ8-KR?c$1Qr tr:\{_G#(RB:k/Ӹ@`2+tjEnbxPb0A #x;| q B0ǂ. ӖFm7a+]{%} }Mbգ!]u|^j :=M'ϟrQtn}%a|dv \aZu@{uYb9*8$B}%/dr Ij:޿G~p~ .v|xWI G4Ԃxpι7YhCM~l8VL3Q$b"ԎR=j- ,IN֞e BZbAm_"j [mכ^ˁuE3ܔL']79 G낒 -)f‡^죢v7d$DF4ztx?'N>.B'35GCO\?mVr|)]GItq#F1M.|8)SXX(81f BᄺUcQ%y iKX r0/L )ߥ^Q9㷪W;B ύ7hu\NLlx~YP3qm-'[kHg'"A |#MMawB *)P0y "E%-L~`󭵻㟔vAom'g׏(B9@ 瀕+$A`>HgG֙ : \q)-4}aÙU2MMY, U('*r@u8di#M ;b9kS6(/[vU qZfMrtI"&)VQKC8Kx*o(a_*$iN؋~Kۛl4{1yI(&jx7v]EeNZMרLO3oо*yx @\_5ɭAF"'yɐk(6} XVBiGϴCLgaySXY϶LVcZp7.l㲎$v9:"VY4C?2[!Y |e{u+.(Y]yH%$$Rr="-I$'V9+As-K&]v=/I3t2Vlhe@ٔ`~ʹ]=,+ lh鱶D[KKC(n."N7mZSl&!#Pr Q;>^H#4矼-{ d$ #eXXNiR5mNyBDD L!NBW_̀*U`OH}$ _xGB`4`L[rC"P-y/@PcYV $BqA1a47wS~\۪;~WX_7Uˬ⡰B^"f5RE=V5hS5Ei4i$-UpUyVY|k05ϜDsVr?Ui9<!DY쫢e޶>7e*T@%;IvRӼ+ӝu0P5Lnpv1s ](=%k!3)ڀ- }T"cSDXɝRk \N~M+u1#l}@O`x3 O^%}_W dj(-xIw|<,e(8Su+w.gFP׵Z R0펳綠;iL~k 1jBN0ӫO>6;4kL?&!Vlۿ'udQj ?7r0}o#@xc"*H VV<3bi ʵi/# ' 8vfo a*hКֿlBAT,fk!"XR.=F4Ureʶ[1NҙۛLQ!Wwќ\=2 0L؃Gp[K~b^sgn6wLF<v1ϓ(]&]6ACtaX  K̕_;A5w6o"y#&43ha(p~O2xk6}uEBW@PVe!&oAj| 6{\ zF 6B!El{RIFF޸݃6(yuJz=I1Rrл+HCnzhej)p+i]Yɦi>8+{ n ]O[Lt((.(ԩ]O qمdX=*yT&3qߩ{1ƶ$:ѫ;Xߓ[8$f)zCRB \3E6hu_8U'CYyc{{F)uL11L 1B)#f"$luo 3#JFeoyul&=wI@sk%IIDPYnL> <븳Lg̞aP Õ}f# #pM*ғx;Nuާi>*?ne]i=h-Ŭ D'e|l#ǹcT>QB-$㕢BRzzÖtyHs:>iPUW4/mA$Z!*kΙ.uly  %I1~9@#k+Ih[ n k7Y +7;o`"PQ ВEl ăVr3b4K*RA<>ap1=2̦j{rȐv%~ 7Af3QҀCJ81cC^cSaC?%z:@,g 9O<؛>zo3eaEdN@]aEC;JUAJ,RǪ|F/ߍV%7|ο;tX rLuA" ma#YD4NDCv:Tr4߄8<]U+Pċ޾KIj Aۜ8mA /5]F+f~4`ڟLjpeaӎFmKm,pgWgoqD#{2G xΑ9<͂K9U5n5 'q&F{89`Tf 2XN xevL^@f|<)=5yO\û#)x.󔆮b[SǿtO  kOwOTj`~ǞϬQbjZ40нނO' (fznz~=V{T50 .m/2qp6]>xXSׅ.5-$PiP Qu>+,val￬-AH JyGgAs$U_er Y3"75.o#b!(¤O03T_T 26tICVa 5l[oҼɴ^#q.Mce?JHQ ji )Z9X#eS＊ߨQ$Lp]1up7j\$]i=pl6i&FB?PbeKi%&E2$ ii| $cM9q[hO8%fG:õ/mS_4}8AE$KzWG0 fH3*2Pur2 t1z$in{|wXA*xG"Ombt6 C\@Jۺ&1*4g9QdIhGt%bh۰~1i!BCi60&9@C"\Wd4W.?@`I/sVo4(s #-g}/$ 'P6N̙ޭ?up;7@Y HDw_KV0 @ m[.Ack8"4o體F3̚Xp"e!H*Z4vEh5b8+I2*`Ak4TlaVڪC粫HldZQ/7DžF Cґ.9%OH#̯vIڍ˒ & &gx nu UcPv _e#Y%U\l5bmˊmp`Ӹ>aMM%R44x-d^lS1^kiؾAagU's:!vſuzRk>(j-XGcs}/.p. { {8y[vVK٫fCvDJe) =wM);yG޺pPgWeLz}U"#^5OQmHQ`ur0\Bux)kވ!MnG٣9 "Am(nq&۱9&@]NO PAN:nY?8JiN%wgW,W~&: bQP;KC)1pFU$-&7Z#J c=Lk;KeoEcoݩD=3[)$݁}_L$2=+|>"uN ҡ4,0Rhlc?ɷ|: ?lZl5Jov4i@' ^>ݕvG05~$^nC\GljWc*}Am47XOJ4k mlVoHNڑeԸ Z}uwK\Fxxl^`(2d_ivW*.ww scӯVP} KZL$BR["@ht~)!nMyz@ljs5kNg~ d33[}$ Nl:( 0;9pWh ov:X(pzRk3e=n&asP1IRyꐍmj_.dj,pk7`t!*;`'T"6Y1cV8UM,QD~P#)~]A1 q >e>՟ҀgubipsC+C8"58?I2-YMPmeyh}?P[vvt MLx5J徲9C!ߕB*pV>$ K׷ 6Ħdo=wH8 +:/(dkygD+ GtƊsmRaqoPAN:✆*R=GhIs#oW4ڜPc7,*jSa,D;"NB=N48J@eٓy`] @b%2LYPVFTaaYTd)~4RW新uOt >wdAA~.p|Ea8FoN?ҧ P<p@a+? 8peFKěJ˂`_&*-2ؚP@XkHɬ1ݏVWtn}rW5WգnoxX;1*镎l?nbhu ooxխgj<>큉Uqs#|粵_2Eތ& k j;Q7E,;JT "?A@̶\x48 | DALw–)Lሰ b/fY 7/Ӑ.Y؍S#ʅ-Id`1|WƧ2jֆv/,V1w*#n8|']+',/\ Jngr>n1{I1T35`3r:J)iaK9jS৘#_ayZ?S++43iK2wV_^NawH_p: Fz}ת@&m "vT" |"Dܥsj)-'`wGSj|3YeT555POW)l.3>+Es%}QZTVirrM55S* Gf#z/X2n4p/ȀN}Qއ1䲝oo{Nٸ'7IN]c"4CA@.\r§}ȝUcA>:BS*"Dt2#hr$ZT.`Ֆ~Mc<p7hlD+[tM߅ʐ9ȄXM^&@-pL:: v !qѯSⱘKA-Ff#X|PU]4UR]`+J{I?p$M:܊7y].`>K^]oa~7X ȁkؒd,j@6шr KS:ʥʴ ZI@kd&Cid4rz4EK1m8iA?Q%P?ɨy"8hSWd B-Fxp#E/4^àٯbۈf$Amc"jS%>[1-i$?6sǛLNɺ']q`|$sV!WZE1WfL) (pua?dݑ4`rcNnݯȽ}((<*hdVAe`F/Xoi<E,F0HWԃ" L8A&:\Vg4:h"Ὢ9*z,D[EbD 6#._3٧;9;e8l")J x [qw8/3CBwm|}ZS  "hwmVp 97?GCu`k(i|#[8+ U?KvZ(gt &}t Lx]O]w&K0+[*HiRWfZZ)xtEax㙋lcˈJR<JNMVM鼑ws'9f l 5g<'`̘j/"QܚwHh>Պ4mc95MD˶T@j%qAbXXܖ6Щsi[N3,3 -i^CӊxW X9Tt~!1a3)J!M} =:Y΅\ ߝiE`F³be0LH:#c?d,٧+mT)d<>5lՔcV=azdnhAѝjU(Vk\Ft&m]T RC~zQٸēFζۍX,>v=&O;.rgq@1`V[Mm-&/o>4FzW4bTFaE>dZ#kwo; F8#IkW np78b3(N>c ,4[^`zGqv(BsFJ4QFPAKaJ&Ɔ ˛jy.7ŌWh9rU&wxΛD{Thm / mu x}Ҏ{ 2ږ~d")1aG-NXy 7x`n7&s j 'F̥-7'o<ۤppq^:v*ʐ5OhwJ(rmn6BNQC0S|)J+ T]EjX}PsgdrC$_M 7R)4N2*Wjn#⑗L_Pp*@"xˑc%|iUW:' &_K슂χQh^BN9E$QQ0JM1>MEA;pY`dCV!Ơ?T9{ybqP&ÝAj, ~M#=oXЩVl2`uZ}@/eì=g?O,z Z@] Ͻl8(&n&Y)5z*J3%ętc\)W>xi|2h\(B7'Vq9CHI-)̼PrOPՙp 3,{7qŹLQwt_Ex{):2\mv{XD6>^A\` 0rQ:Qή !3V^1,VLSR}5@Aç"DKእ;59LLn% Ĺ|'1~TC@ulC0}+hGpXm!oyR10҄p}AlN>2$E{ϯ3S>'ߺj7Naі]vⵥo%v jHk?  Ĥ>k "[Pd \GVJ@2{g3%5 !TA:@u~~$m)s-R jxxۯ?ofoh)@SĖg7Y.&Ɇ\1 Q/4F!+fC/ \­BP6'}oJ d\Mr#F 1iؒDE.nhbмy}*7ПbH#M a,15 uˣJ-[or0eޑ6tҫ~GhQ jv>jʺF>`z)kW;t<2ne餪,ukG0z:2gp@P0* (GҫBez()~K,`%wI0镫pSr HxQzȤ#O c1[n UD]alh%k(cKk޼+dwse8W瑩}bQ,l59H*X=nF^L*pkna&;&h=F+!k}R+N>gN{ SJC9gtĹJFwY+ Nir:ZTJ6Dz]E{Tv^Ȁ}#h5v5WHy-W(ȥPF(H{%|b_~;o5štԜ)PX-wN"@ΜKu]e~fj bW" /ڠQp13t^VZ¨Z%1:8 0KR\r!#c7>^i?QSUs@K߫0LV~ k5;6'XLZ]6eM 2F;ou4heUYxb\)y:V8kjo}q̼)vㅝ~2{ 5| ,w'6>u5Fx^ovsgKhyu)Sjh%l>''PyE!Y@%i3hfcOtŸ9>y'!UOScL}pjW(L'j?ʥUqy:p6w/} TS9Af e)z\\JhG+{ߣ8[x YZ