libspice-server1-0.14.2-lp152.2.6.1<>,`W/=„%|^+EΏJPMBڮ`: 6 ֟7kz-L0d⦍hGch^g5HGؖ3h õhp|PMP s#(Gs#JKOm{G`!2D+ɦ6%7ZL_n\ö;W~QTd\fK*uyrG7UAEv`%ʽcX#xB~]EzdHXzQ?!xi0܂њX4uI{u7F>C=<?=,d & ? $AGPp     <d!! !( 68 @9 :>6@6B6F6G7H74I7TX7\Y7Z7[7\8]80^8b9)c9d:ge:lf:ol:qu:v:w;xx;y;Ez<<<<=(Clibspice-server10.14.2lp152.2.6.1Library for SPICE-serverLibrary for SPICE-server The SPICE server is used to expose a remote machine's display and devices.`Warmbuild24#VopenSUSE Leap 15.2openSUSELGPL-2.1-or-later OR GPL-2.0-or-laterhttp://bugs.opensuse.orgSystem/Librarieshttps://www.spice-space.org/linuxaarch64@[HQ CgA큤A큤`T`U`W\ \ x\ x`W\ x3314b4586d6ae0fc3b394b59ae9c8a9863007328300b07e7544d786d0fa0a45de284efb9d25c25965a7fa2861db3602ee139aa4f7ccc79604c223b5e60d267bffb55cdaf113b6dc54e8d03e41984e7b0e49faf7aa3443e386148d53eec031f724ad2ad2f17f0995457a4a0ebe74d61a1f3628e7f2a476f05bda058389182c732dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551libspice-server.so.1.13.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootspice-0.14.2-lp152.2.6.1.src.rpmlibspice-server.so.1()(64bit)libspice-server.so.1(SPICE_SERVER_0.10.0)(64bit)libspice-server.so.1(SPICE_SERVER_0.10.1)(64bit)libspice-server.so.1(SPICE_SERVER_0.10.2)(64bit)libspice-server.so.1(SPICE_SERVER_0.10.3)(64bit)libspice-server.so.1(SPICE_SERVER_0.10.4)(64bit)libspice-server.so.1(SPICE_SERVER_0.11.2)(64bit)libspice-server.so.1(SPICE_SERVER_0.11.4)(64bit)libspice-server.so.1(SPICE_SERVER_0.12.2)(64bit)libspice-server.so.1(SPICE_SERVER_0.12.3)(64bit)libspice-server.so.1(SPICE_SERVER_0.12.4)(64bit)libspice-server.so.1(SPICE_SERVER_0.12.5)(64bit)libspice-server.so.1(SPICE_SERVER_0.12.6)(64bit)libspice-server.so.1(SPICE_SERVER_0.13.1)(64bit)libspice-server.so.1(SPICE_SERVER_0.13.2)(64bit)libspice-server.so.1(SPICE_SERVER_0.14.2)(64bit)libspice-server.so.1(SPICE_SERVER_0.6.0)(64bit)libspice-server.so.1(SPICE_SERVER_0.6.1)(64bit)libspice-server.so.1(SPICE_SERVER_0.8.0)(64bit)libspice-server.so.1(SPICE_SERVER_0.8.1)(64bit)libspice-server.so.1(SPICE_SERVER_0.8.2)(64bit)libspice-server.so.1(SPICE_SERVER_0.8.3)(64bit)libspice-server1libspice-server1(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgobject-2.0.so.0()(64bit)libgstapp-1.0.so.0()(64bit)libgstreamer-1.0.so.0()(64bit)libjpeg.so.8()(64bit)libjpeg.so.8(LIBJPEG_8.0)(64bit)liblz4.so.1()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libopus.so.0()(64bit)liborc-0.4.so.0()(64bit)libpixman-1.so.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)librt.so.1()(64bit)librt.so.1(GLIBC_2.17)(64bit)libsasl2.so.3()(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1`_{ \P\y\N[:@[:@[z@[LZp^@Zp^@Z`@Y@X@X@X[@XOX$a@WWVU|@Uq@TBV@T>acarnold@suse.comBruce Rogers Bruce Rogers olaf@aepfle.deBruce Rogers astieger@suse.comBruce Rogers cbosdonnat@suse.comcbosdonnat@suse.comjengelh@inai.detchvatal@suse.comtchvatal@suse.comcbosdonnat@suse.compsimons@suse.comcbosdonnat@suse.comastieger@suse.comcbosdonnat@suse.commsuchanek@suse.comzaitor@opensuse.orgcbosdonnat@suse.comcbosdonnat@suse.comcbosdonnat@suse.comcbosdonnat@suse.comcrrodriguez@opensuse.orgzaitor@opensuse.org- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client initiated renegotiation denial of service 0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch 0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch- Fix buffer overflow vulnerabilities in QUIC image decoding (CVE-2020-14355 bsc#1177158) 0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch 0002-quic-Check-image-size-in-quic_decode_begin.patch 0003-quic-Check-RLE-lengths.patch 0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch- Update to v0.14.2 stable release The main changes are support for Meson build and graphic device info messages allowing to better support multi-monitor configurations. * support H265 in stream-channel * add support for building with meson/ninja * minor tests fixes improving CI * set char device state for smartcard, allowing Qemu optimization * improve red-parse-qxl.c interface making it more consistent * add some instrumentation for streaming device * QXL interface: add a function to identify monitors in the guest (spice_qxl_set_device_info) * add support for GraphicsDeviceInfo messages * video-stream: prevent crash on stream reattach * make channel client callbacks virtual functions * bumped minimum required glib version to 2.38 * attempt to have a reliable led state for keyboard modifiers - Removed patches: (The first two are altered versions of what is carried upstream. I think we're fine with what upstream does here) 0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch 0002-lz-More-checks-on-image-sizes.patch 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch- Use plain python2 for SLE12 builds - Remove PYTHON=python3, configure will find and use the python3- Fix OOB memory access in internal tracking of slot_ids and group_ids. (CVE-2019-3813 bsc#1122706) * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch - Remove celt051 Requires directive- Upstream disabled support for the celt051 audio codec by default, do likewise in the spec - Note updated 0.14.1 build dependencies in the spec: * OpenSSL 1.0.0 or newer is now required * glib 2.32 required - add upstream signing key and verify source signature- Update to v0.14.1 stable release The announcement email describes this release as follows: The main change in this release is the addition of a new protocol extension in order to support streaming the remote display as a video stream rather than going through the QXL protocol. Together with spice-streaming-agent, and/or with more work on the qemu/ spice-server side, this should allow streaming of 3D accelerated VMs in the future. At this point, this part of spice-server is still a work in progress (multi-monitor support and various features are missing). * avoid performance issues on Windows 10 KVM guests (boo#1109044) * add new org.spice-space.stream.0 channel used for passing an encoded video stream from the guest to the client * add support for TCP_CORK to reduce the amount of packets that we send * fix CVE-2018-10873 (maintainer note: we already carried fix) * fix cursor related migration crash * fix regression causing sound recording to be muted after client disconnection/reconnection (introduced in 0.13.90) * fix regression in corner cases where images could be sent uncompressed when they used to be compressed with QUIC * disable TLS 1.0 support * CELT 0.5.1 support is now disabled by default. If celt051-devel is installed at build-time, --enable-celt051/--disable-celt051 must be explicitly specified * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or newer is now required * bumped minimum required glib version to 2.32 * endianness fixes * (small) leak fixes * usual round of code cleanups * not directly related to this release, but the upstream git repository is now hosted on gitlab.freedesktop.org - Removed patches: bb15d481-Fix-flexible-array-buffer-overflow.patch- Fix potential heap corruption when demarshalling (CVE-2018-10873, bsc#1104448) Added patch: bb15d481-Fix-flexible-array-buffer-overflow.patch- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295) Added patches: 0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch 0002-lz-More-checks-on-image-sizes.patch- Correct RPM group for shared library.- Split the sle condition again for exact features to allow their override- Enable smartcards on sle15 as the supportlib is available * Condition it using name everywhere instead of suse versions and join together with lz4 - Format with spec-cleaner - Convert dependencies to pkgconfig style - Install documentation and license file - Add configure arguments to most of the options to not rely on autotools automatic behavior * Also enable gstreamer and lz4 options - Drop the not needed python dependencies, they are needed only when building from git snapshot- Release 0.14.0 * fix client mouse with virgl * fix frozen display after seamless migration * set human-readable name on spice threads * add sanity-checks for ORC library as it can abort spice-server when selinux is in use * Close TCP connection early when client did not send the correct SPICE magic bytes: this allows VNC clients to gracefully fail when connecting to a SPICE port * Add VP9 encoding support when GStreamer is being used and misc streaming/encoding improvements * Improvements to replay utility * Limit (deprecated/unusud) QXLMessage size to 100,000 characters for improved safety * Improve image quality in low bitrate situation when using the GStreamer backend * Added GStreamer support to the video streaming code * Fix old migration bug causing migration to never end in some cases * Added lz4 compression to the spicevmc channel * Ongoing code cleanups * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local virgl support * spice_server_set_keepalive_timeout() has been removed in favour of unconditionally sending keepalive probes every 10 minutes * Added public spice_server_set_keepalive_timeout() to make it possible to tweak keepalive on all SPICE connection. This can prevent unwanted idle disconnections if proxies are used between the client and the host. * Fix important memory usage when the webdav channel is used * Do not disconnect when the client requests an unsupported compression type * Fix potential race condition when using multiple QXL devices * Fix display glitch when using XSpice * Improve help string for 'replay -s' * Fix small leak in MJPEG code - Removed patches: * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch * CVE-2016-9578-remote-dos-via-crafted-message.patch- Added patches to fix two security vulnerabilities. * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch [CVE-2016-9577, bsc#1023078] * CVE-2016-9578-remote-dos-via-crafted-message.patch [CVE-2016-9578, bsc#1023079]- Synchronize with SLES (fate#322402): + bnc#894069: disable smartcard support for SLES + merge changelog- restrict suppression of obsoletes-not-provided warning to spice-client bsc#1013916- Obsolete spice-client (bsc#1013916)- remove ExclusiveArch (boo#1009438)- Update to version 0.12.8: + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.- Update to version 0.12.7 (fate#320079) + spice-server will now send TCP keepalive probes on the TCP connections it uses. This can prevent unwanted idle disconnections if proxies are used between the client and the host. + Fix important memory usage when the webdav channel is used + Do not disconnect when the client requests an unsupported compression type + Fix a few race conditions + Fix display glitch when using XSpice + Improve help string for 'replay -s' + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port configured, USB webcam redirection over a slow link) + Fix various compilation warning when building on 32 bit machines + Some fixes for big-endian machines, more work is likely to be needed + Do not build static libraries by default, this can be reenabled with --enable-static + Fix small leak in MJPEG code- Update to version 0.12.6 + Removed spicec client code, it has been superseded by remote-viewer and other spice-gtk based clients + Unix socket support + LZ4 support + Let clients specify their preferred image compression format + Allow to record and replay a spice-server session + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261 bsc#944787, bsc#948976 + spice-protocol submodule has been removed, spice-protocol must now be installed when building spice-server + Remove write polling in chardevs to reduce wakeups - Remove upstream merged patches: + spice-Don-t-use-48kHz-for-playback-recording-rates.patch + password-length-check.patch + cve-2015-3247.patch- bsc#944460: fix CVE-2015-3247. cve-2015-3247.patch- Don't allow setting password longer than what the spice protocol allows. password-length-check.patch. boo#931044- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)- Update to version 0.12.5: + Added Opus support. Celt support will be obsoleted in a future release. + Addition of webdav channel. + Force use of TLS 1.0 or newer for TLS connections. + Reference manual. + Some optimizations improving CPU use. + Various bug fixes for race conditions, memory corruption, which could be triggered on client disconnections, migration, and cause spice-server to misbehave. + Portability fixes. + Code cleanups. + bsc#848279: fix CVE-2013-4282. - Add pkconfig(opus) BuildRequires: Needed to build new opus support. - Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch: Fix advertised sound playback/recording rates in public headers (rh#1129961). - Drop spice-glibc217.patch: No longer needed. - Run spec-clean on spec file, remove conditionals for obsolete versions of openSUSE, enable parallel build and drop obsolete clean section./sbin/ldconfig/sbin/ldconfigspice-clientarmbuild24 16233155430.14.2-lp152.2.6.10.14.2-lp152.2.6.10.14.2-lp152.2.6.1libspice-server.so.1libspice-server.so.1.13.0libspice-server1ChangeLogNEWSREADMElibspice-server1COPYING/usr/lib64//usr/share/doc/packages//usr/share/doc/packages/libspice-server1//usr/share/licenses//usr/share/licenses/libspice-server1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16488/openSUSE_Leap_15.2_Update_ports/0bbbf904e7190908364c7950e098f310-spice.openSUSE_Leap_15.2_Updatedrpmxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6758e5aad51c7ffd4a12e624fddbdca8008861dc, strippeddirectoryUTF-8 Unicode text, with very long linesASCII textEPPPPPPPPPPPPPPPPPPPPPPPPPPPP P P P P P P P P P PPPPPRRRRRRRRRRR RRRR R R R RRRRRRRRR0-C>!\utf-8242f75edeb753b09c0847b51b4f1ac5ab6e3d7dee0545ec144b80804a41c3985?7zXZ !t/ai>#]"k%+<U*W^}{dGңpew~?՘w=~cL(!>nb, G3bѻ#>ՏjP3vY`fK=yECeI x |wC eYNv&`bWvpwz"ʛPvâo,X3>u>h9=d;y :{,= ,(v!S<zKg vQ{DW܍\!g Ea)AC:"NWzgJEѫ:Usl6Q+~}yi8peO"dDt.mlWXy!i" c`hk!z)Xs mHs'.J>R勚%/%9}peXC(A~dShl"0A3]_LISR0, 19u$OOji_Gh|h,`=JA:3љtzeG9%>"LE4'xDAS{IC? ipyKC1| 4Rg& Y< ð[0ͅ=.(H_@0^-H.f}bUe4(WEJcQ`m|%*%9: \INo`#q|jk/vfAp4bH!Wc =/͡8~RoX-k}:\i#SAG8$j}~>5tml8DhObjgULO x)h6┚Ch\EqkmN*A;ie3J&g4PrL=YH"K֩-#L3bzp:Sw1.0_m51iتGS1AY S5&Yq8`1MV"[LS6!N1p+;)@}}^͏\paj2t>vRoj$Rj*R 9eN.MPGat7@N4N۶S(%"fAoMQQ!~v\ݜiס{ːZ;9g".u9 >&M!^1fumH H>c:aHs\YD^VSeCO]N(*=Wb_h4`R3فE`w7O6YH߷:*I)sJr|6JxmQwm!@Au e,1ZftsxOt1 Gz@C*'@sn#8I*4`[w;-xe6K㎥b G;-4}J, a(W9]`!o㰶eШþv}ʫ=gOD@:厸j9XzD ҅ b|9Zpya%  էl ٣[]#:LS~ Ap?؀7+®S04DQab-16<$-{ay *[EY~={ -y^YJ"f h%?(P sq %\I9ZEzĒwd[xܼ<[2c#@., %L;9(AHm/_>_O\4NN[wx > +\Θ:, 5E35~ n>znm v>Le^Vc"a Vip 5{>#NO\j=p 2z'ӯK?<(CW'.3t".ߏb8,YCt['=P;Ԭrԓp3hӷ\QߺPq4E9/+?DxRyݱ,h\%=֌caH"Q]J񱏥̱?0( s'-Am`GGkcz2 C59ѴӚeԯ"8mې #P& z32u6VԂ& ;%S.&3 GA;z)[Й?j Z<}s:Zu.vY߳0ƒ)|68@Q`~R^ ZX`h;wZ T^ C ~Lغ\,hy y:u j̓wf1{m $VD׬sQY/K=`Y t3c"ܴnT+]A7ɆEzO#oM]WT-A AGepg5rCҩ͖1C߭.@_M~DN2$Qbh_0|Dv*4?wd'K>gm Pq4wCE5+=IO*oąR&N YtyQjl椬/"#]熗֖'\f9 [c ȹf$+P2v?P@ 5biEC}pruw'׍G|kʐ,.m,Tݛ`{ >g埕68|# ZkB!d$3C#'~GKo%&mߘzmY(cAE2j6ޘ ը Ҵ0ҵIs3 HA՚?LNn$gv0|`Ѡ۴; O3 S`C[Viz!ͼ":7hr_nȳ瓌Ů]2?M%ز9M~%g:kU~w'۪aVHC]~GΕI5gYs3K=1D>HD[* SМ<`"$3CmS|Үy=F^rUOZ?lm w[ݒX'4tʍT:λ9-R1܏}D{8P>nUVXVliv#U@{9݅[ 6Džsr7!#zYo&SQM@D1[L{L5u&ckLcU񛟃l9pGWnhޫ%(ཛnKw%ܭ(/Aa*v XvTC (6FлڎKX 5Zڊ(6ꮩ+|Fq_qSۊs%JI 45LQTJcd3'c?W_'$ќn sZd }˾hs=7 4h/:H-K@ev|LR_x-zi#j6L;ǸȐ`OUgkǥrCC\%"(4`]H۸fCR؝ޜj.@"=pFAXJ<(Ϙ?q8eih= `*i)Mɥ@$SVAS̿PJJA5l wč Qw˔9"tubD;J1?T ^ta{5"gɑg_m?;>JEdWIiq|CΞPmѸmNGf? b,*RRz.:Qp{ac-j}fDy`:Uvw;l!\ F5#s7(axRDz#b<qr}STvREsNoN)U >;",W޺նl･'[Un&crXtZๆnEMw;AՈ %Հ,lqL^ hPDl-%5yބMy;] [Evk%X -x3 e uϼsYaq귒 rU}~RUβ A>R5xⲨWZ0/+Z*tʬ!`eRor,".6`*QD0%O:l|xyBkRk I*T" P4$˛?!,%qU=5i-X'8c6\W"g{#ZLؑ p{0\P86Ps˚Y:I 5u=Q _%8;]ZT$5% /,S~͈ǬQ_GxULjP_2Bu 1-? f&U;A 4ad +QVTjUpk]GeH.jY8s#c|~MAS>8OW 0\"wB ;WОuC1 1?<K ^,oK{Wߒ3qΚMryenXdKj֭ 5޴u9 D4曭P hX%<){_`$Ω}PNOPM.PfҥUIq^@A9^v ףރR7 ֭&w4/q!4ihiy,d JK5M{$nJfnK".J8m[a^#[YŅBFn$SA eJe ,[``8% Iq!YΩwk¯NoHz17u iO|?4Ǘ2|ʆ@ސ. kޝ*̉ 3-KFQy .B%$kҭ2,cp.eR@%ZJ%&"RqЄz ܪ|})hd(=O/(uz,a9NA_ Ӻ7R.PnISbg/R]<&*u ֥)xIQӲ Q*uZ%hɳ-XқXf =?4oAD&'"\Q{8/4)bGt_UڧGEVםz2Q*&Zحʅa`=_u֤zQƗ,+r[q=M3%^D2 {C&#-Kм_ngAu"&{Pؑv\ח&':g+YP0Nb.ݫ`#?HYzwKڧ` 2u;{tm腷?]ZZj#/ BJ3O5/b:7Q .\OJNi4F%(k.]SZY~svhλ|NsK*YNpJ*y 6?#PhwǘB@iK]#gxLq$^#=i[BIǚ{L<:,B2 ݲn8ʎjz&tI[i( #Doo\\I/+s,n0Qy;ϵޭ"2ij觾h1"rrioSLZ$I:vuhVa%F{ o 3<|DT ϧ#}Ą9Ѯ;`C_y~qV[@ `9G 3hOCv EQz2>SL[b^keA_Ûb!z8^19?5JWa!f]fɽlnGn(݉2@SB;{1t`ޚfm"Ы&8WU@Mpu-D!Ai,Fy0eD:u6KVoEE6Olm`pa 쿊"i 3>?w[ E8["P1j^7`/Q{m6D.{87T< `<גZAM\Gmŀ΄R}鹃S8hat{ND5| <7175FMn9J6.,DM/1 5r]u4e,q֘P~ Lj$iZeK3}Ќzv1D2'*9k4.V\]6iDKd37{Pگn"V#8_'$'?10Lmy(Cۙ%>6c =(1F[v՟ἽzC#Gk Տ~'pCf^1C?h'B)4˟o{f0KpSow0xaԞ cYrwŇ@5+fjWazܺG >QqM4I GjdBKҤ|sbk_An 5-gO;MbG>pϼ}1s}ϋU%F~y)suBe7zFKV"@W09sYlYV~dXf-b ҝ+djH)ʆKٍNn֠Yanݏs괝&-!*OiQ䝙x0W4:(Y;9`zPfϘ\[2-ĻǍM1dWjyB;;R7aRߴlw:`8 K޸~# 6EMihԲL*1=ƾZ'Yḋ!!U7,yF1c1dC:XRS69kJ2_O3S,͚ 6:LABg)c`^SDCmw{NLvQRPrO>z+3$Z-S<Gj`) B' >楽 5- twr L#XH)z86!HD6?cQg{ ,vFXa咲,uw[HBܦu"%4I!&9f-6˜fQ>tT9} ô)'$D wÜXPraw (V8sȖ/\х%È!6aviJ:~Ua\O-ޙ=yfq W||qBS7Y>pwĸ,-մ'Tih.E)]4a!<<mL{`qwh#Xh֧07:t&LU)G :Jʊ%Tt[17m?YՈJF{$XKEH<*Ĵ;,Nㅺ(ggiIF!F!RxK0B^IIա䡰QBSCH2il-GM I'6i8q9؉(u"bw)_$CYyuBІJJbRN^xALH*3KG}x'DbN=5lw*K#0Uk^]^+y(7Eb { aVQ\81˥s|Wro; OɌpQ6o^f\t/`?T5w^}ۗ>Flum,(`$hXa5oRG@iQLIUUT^\ebʧMhm"Sznd i.HL&^OopQ]&jacu7.4^4<..;a pxf*xL#]:'gJjȳ03Ǿq?%.[xx9ɑU 8|~C5Yhq0=kh5ipV<~~ 8U3l$huAt6ȍyLAN,g[nG#kļ^ЂN b4%]ǞBnP.[*JC 2Hܯeg߁%(U`md^AB#7a>U1YeKNb4,&Ѡ6)\i3F;I{E q$Vv:WQO4Ih+.@Dh>okYp+pcj3D/߯1ۯ>~HV5#"@&=k\V6nО:pnj N߮' f3pG@x= N(.jEaC/?6 eF..2Ґ7&{^p0B/Aڧ8z#LYM=#fp4ɟTbOD$ު)ң x6eabɲ.[T*TLd v\=S~5HPsRb}Isǯh> O%LLUؾDNNlMR-Ka09 -)^2*!7/uhჁ,ēDG4_tW+&f ~l}"7ŕZ9"xo9^CU?p{~JJ+GrչigËo/_XTz4kdĔ̒(()mΪu~mP$kQ$,,Dnu\I$ 7ב>ZmJݭD^#-ZoZ'MM=2R$j q}#lZhy(663AZũ[g~a;ˀުzBvAҚ]] << X *Qy_[}cf,<%˜0טi_cLI>i# b"_&?>lq~2ܛV|譴ώl_G:9if!#yq!#r mӒ3& C&u hCšw S+sq0\`}dD }na!TNH6;^wޅPNu>%jvs8r 3 WmIdAt8E*_3/]F-,,EkkfkQ 3x{ӘmzAdTe2Mp݈s$"R=oңc!j(u| ׽O|ܡ5AEAp'U$)Vctm̖})͞lT ):1Es/#Rͣ/R9x6=U74gG>[IN6xZPpCcd&ev)PC29rr7mJt}VŤeJ̷7ܘ~(<?yb܈;,4 lT0O/#^c5TlK2g9c2Y<3Y:>G$p.9۞o4j8Þ]eYmu0y㍣T7idm/~+jOb~"RZ=i8\VL'ͽyi&|Pnhۤh4hgtos"DnܘS- vZ)1VdVy N27yP&7pJ,i 阼'5l\B0ZlQWW.&7C=3^FD(5l: ~B}e ByͱQsa`D"`f#(jnn4tީ;w W ?YsEO5김h)y+б. 63[WL(fP矰i5Uc7[2pg`u!{LGM>gF%3*QFu\e|P*l|5[vf"p5Dp5eA zn2#ijWU#7(Ŋ|u#>|6a} O"7]"ɗp^< [kjC]5r<9LG?cqs 󢻶2-E~Z}dѰn*RPlIϋ"w41<ݔ\Z< XFB3E i2N9+ D ` SM}ΓWn 嬳.JY1\!\_Ws:7KPo xP>923ԯC5C@uEcRW+~fGJ)#'aַZPs݀Z7k\LpJҩvx@wN&H#/^x; Hq9hFJ#IoRh vv2EǕ68uISޚ ^NƐ˯qvcVsKQPЙCh[0&6{[^&eY#󿥍14mUo$я^/e0yǤj6կIɆ0c%XP%b.VgK##w ۰-qvc5 ƎSKX1B%c}ZC"O;E#kcD7#t>;q? JEi7tnbA~,w %x|X-)+.e}Gᨥojy徂)&'';Kb |Mv_9fҎpu 0!ջ ۚi Be`n a΢Op7*BBkY}uۼ4&D7[.v&+b&Q҄l\z4`ysaMr֪]҈XQ]n%ej6k&p_!g48OTxzؼCᆺB 4 4y#|fnRD/7WB?DVs>r*i $8 kj|2'Lxv.1ê[4#z$ i:5AR \עɭS="9}0DNAD,sh䧀0& Au-P$`G `N=,{JX>P&[^>pw#rtBܺt׶R_dswF-_nDP7ƛjs@2|z"@wh䅤} vƩ-&sHyDAi\]~hŬTiKlȭ4'Ɠ[EM1]AFKr{0o`ʺƌ!"Hes{\Ht !G3u|OlC޶Sô$U QtS3!JfK~s49 r#'Ũr7)Vr?`ֻ[l؍"@x)3[ö㵂SJ0V 1q]M [GoJ֖H`O{0>gmFΠL!{$"% Ҽ`,@n@ 0ZJϚt }ASe>z~ Ig㞠}28"[@)| QhDCi#ǟ^$i$!NJ*a_ʥ4wP\e}%?ń3ʙS2`CF8|'¶ YZ