libspice-server1-0.14.2-lp152.2.6.1<>,`n/=„ q/42T}@u$yLvWrr|/Knpއ1 R +GaN1cCZw| ?(lj2跩j” A`ē|;jּnFfKyU`4"?/6RX+::C"q$@ h͞#>ЦQhz׵Z}ηp͇ -^K b'p پÞO&Yc6q߁> Ԙ<yf 7R ?%C=?=d & ?  =CLl |    8`&& &( 8 9 H:Y>7v@7B7F7G7H7I7X7Y8\Z8[8\8]8^9?b9c:rd;e;f; l; u; v;@w< x<,yacarnold@suse.comBruce Rogers Bruce Rogers olaf@aepfle.deBruce Rogers astieger@suse.comBruce Rogers cbosdonnat@suse.comcbosdonnat@suse.comjengelh@inai.detchvatal@suse.comtchvatal@suse.comcbosdonnat@suse.compsimons@suse.comcbosdonnat@suse.comastieger@suse.comcbosdonnat@suse.commsuchanek@suse.comzaitor@opensuse.orgcbosdonnat@suse.comcbosdonnat@suse.comcbosdonnat@suse.comcbosdonnat@suse.comcrrodriguez@opensuse.orgzaitor@opensuse.org- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client initiated renegotiation denial of service 0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch 0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch- Fix buffer overflow vulnerabilities in QUIC image decoding (CVE-2020-14355 bsc#1177158) 0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch 0002-quic-Check-image-size-in-quic_decode_begin.patch 0003-quic-Check-RLE-lengths.patch 0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch- Update to v0.14.2 stable release The main changes are support for Meson build and graphic device info messages allowing to better support multi-monitor configurations. * support H265 in stream-channel * add support for building with meson/ninja * minor tests fixes improving CI * set char device state for smartcard, allowing Qemu optimization * improve red-parse-qxl.c interface making it more consistent * add some instrumentation for streaming device * QXL interface: add a function to identify monitors in the guest (spice_qxl_set_device_info) * add support for GraphicsDeviceInfo messages * video-stream: prevent crash on stream reattach * make channel client callbacks virtual functions * bumped minimum required glib version to 2.38 * attempt to have a reliable led state for keyboard modifiers - Removed patches: (The first two are altered versions of what is carried upstream. I think we're fine with what upstream does here) 0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch 0002-lz-More-checks-on-image-sizes.patch 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch- Use plain python2 for SLE12 builds - Remove PYTHON=python3, configure will find and use the python3- Fix OOB memory access in internal tracking of slot_ids and group_ids. (CVE-2019-3813 bsc#1122706) * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch - Remove celt051 Requires directive- Upstream disabled support for the celt051 audio codec by default, do likewise in the spec - Note updated 0.14.1 build dependencies in the spec: * OpenSSL 1.0.0 or newer is now required * glib 2.32 required - add upstream signing key and verify source signature- Update to v0.14.1 stable release The announcement email describes this release as follows: The main change in this release is the addition of a new protocol extension in order to support streaming the remote display as a video stream rather than going through the QXL protocol. Together with spice-streaming-agent, and/or with more work on the qemu/ spice-server side, this should allow streaming of 3D accelerated VMs in the future. At this point, this part of spice-server is still a work in progress (multi-monitor support and various features are missing). * avoid performance issues on Windows 10 KVM guests (boo#1109044) * add new org.spice-space.stream.0 channel used for passing an encoded video stream from the guest to the client * add support for TCP_CORK to reduce the amount of packets that we send * fix CVE-2018-10873 (maintainer note: we already carried fix) * fix cursor related migration crash * fix regression causing sound recording to be muted after client disconnection/reconnection (introduced in 0.13.90) * fix regression in corner cases where images could be sent uncompressed when they used to be compressed with QUIC * disable TLS 1.0 support * CELT 0.5.1 support is now disabled by default. If celt051-devel is installed at build-time, --enable-celt051/--disable-celt051 must be explicitly specified * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or newer is now required * bumped minimum required glib version to 2.32 * endianness fixes * (small) leak fixes * usual round of code cleanups * not directly related to this release, but the upstream git repository is now hosted on gitlab.freedesktop.org - Removed patches: bb15d481-Fix-flexible-array-buffer-overflow.patch- Fix potential heap corruption when demarshalling (CVE-2018-10873, bsc#1104448) Added patch: bb15d481-Fix-flexible-array-buffer-overflow.patch- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295) Added patches: 0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch 0002-lz-More-checks-on-image-sizes.patch- Correct RPM group for shared library.- Split the sle condition again for exact features to allow their override- Enable smartcards on sle15 as the supportlib is available * Condition it using name everywhere instead of suse versions and join together with lz4 - Format with spec-cleaner - Convert dependencies to pkgconfig style - Install documentation and license file - Add configure arguments to most of the options to not rely on autotools automatic behavior * Also enable gstreamer and lz4 options - Drop the not needed python dependencies, they are needed only when building from git snapshot- Release 0.14.0 * fix client mouse with virgl * fix frozen display after seamless migration * set human-readable name on spice threads * add sanity-checks for ORC library as it can abort spice-server when selinux is in use * Close TCP connection early when client did not send the correct SPICE magic bytes: this allows VNC clients to gracefully fail when connecting to a SPICE port * Add VP9 encoding support when GStreamer is being used and misc streaming/encoding improvements * Improvements to replay utility * Limit (deprecated/unusud) QXLMessage size to 100,000 characters for improved safety * Improve image quality in low bitrate situation when using the GStreamer backend * Added GStreamer support to the video streaming code * Fix old migration bug causing migration to never end in some cases * Added lz4 compression to the spicevmc channel * Ongoing code cleanups * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local virgl support * spice_server_set_keepalive_timeout() has been removed in favour of unconditionally sending keepalive probes every 10 minutes * Added public spice_server_set_keepalive_timeout() to make it possible to tweak keepalive on all SPICE connection. This can prevent unwanted idle disconnections if proxies are used between the client and the host. * Fix important memory usage when the webdav channel is used * Do not disconnect when the client requests an unsupported compression type * Fix potential race condition when using multiple QXL devices * Fix display glitch when using XSpice * Improve help string for 'replay -s' * Fix small leak in MJPEG code - Removed patches: * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch * CVE-2016-9578-remote-dos-via-crafted-message.patch- Added patches to fix two security vulnerabilities. * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch [CVE-2016-9577, bsc#1023078] * CVE-2016-9578-remote-dos-via-crafted-message.patch [CVE-2016-9578, bsc#1023079]- Synchronize with SLES (fate#322402): + bnc#894069: disable smartcard support for SLES + merge changelog- restrict suppression of obsoletes-not-provided warning to spice-client bsc#1013916- Obsolete spice-client (bsc#1013916)- remove ExclusiveArch (boo#1009438)- Update to version 0.12.8: + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.- Update to version 0.12.7 (fate#320079) + spice-server will now send TCP keepalive probes on the TCP connections it uses. This can prevent unwanted idle disconnections if proxies are used between the client and the host. + Fix important memory usage when the webdav channel is used + Do not disconnect when the client requests an unsupported compression type + Fix a few race conditions + Fix display glitch when using XSpice + Improve help string for 'replay -s' + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port configured, USB webcam redirection over a slow link) + Fix various compilation warning when building on 32 bit machines + Some fixes for big-endian machines, more work is likely to be needed + Do not build static libraries by default, this can be reenabled with --enable-static + Fix small leak in MJPEG code- Update to version 0.12.6 + Removed spicec client code, it has been superseded by remote-viewer and other spice-gtk based clients + Unix socket support + LZ4 support + Let clients specify their preferred image compression format + Allow to record and replay a spice-server session + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261 bsc#944787, bsc#948976 + spice-protocol submodule has been removed, spice-protocol must now be installed when building spice-server + Remove write polling in chardevs to reduce wakeups - Remove upstream merged patches: + spice-Don-t-use-48kHz-for-playback-recording-rates.patch + password-length-check.patch + cve-2015-3247.patch- bsc#944460: fix CVE-2015-3247. cve-2015-3247.patch- Don't allow setting password longer than what the spice protocol allows. password-length-check.patch. boo#931044- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)- Update to version 0.12.5: + Added Opus support. Celt support will be obsoleted in a future release. + Addition of webdav channel. + Force use of TLS 1.0 or newer for TLS connections. + Reference manual. + Some optimizations improving CPU use. + Various bug fixes for race conditions, memory corruption, which could be triggered on client disconnections, migration, and cause spice-server to misbehave. + Portability fixes. + Code cleanups. + bsc#848279: fix CVE-2013-4282. - Add pkconfig(opus) BuildRequires: Needed to build new opus support. - Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch: Fix advertised sound playback/recording rates in public headers (rh#1129961). - Drop spice-glibc217.patch: No longer needed. - Run spec-clean on spec file, remove conditionals for obsolete versions of openSUSE, enable parallel build and drop obsolete clean section./sbin/ldconfig/sbin/ldconfigspice-clientlamb12 16233153100.14.2-lp152.2.6.10.14.2-lp152.2.6.10.14.2-lp152.2.6.1libspice-server.so.1libspice-server.so.1.13.0libspice-server1ChangeLogNEWSREADMElibspice-server1COPYING/usr/lib64//usr/share/doc/packages//usr/share/doc/packages/libspice-server1//usr/share/licenses//usr/share/licenses/libspice-server1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16488/openSUSE_Leap_15.2_Update/0bbbf904e7190908364c7950e098f310-spice.openSUSE_Leap_15.2_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9a6df360f61c829476cf5d6c0fa6487302d9a636, strippeddirectoryUTF-8 Unicode text, with very long linesASCII textJPPPPPPPPPPPPPPPPPPPPPPPPPPPP P P P P P P P P P PPPPPRRR R RRRRRRRRRRRR RRRRRRR R RR R!RRRRR)_x2l#'U utf-81113bc93fd977473457ce993f9258e394d78dd34d99fc29115fdaf59a144fafd?7zXZ !t/Saf]"k%ngkj,__1;#T}j@Asݥc辥SM#/.n}͑}CپMfJe/[``6w wYd~AЧW~=I#Lq&RY CS`Z/=am,[(} >EJq†ҐY6V3[WC;m\HƺKVagFf!Vz% z?M2r7"X&O(q\b@DkY4dn"k(tJ,eg^+ż=;kkfDE`p&wOui:R!tt(:=no:jjgiXFyo@J P<~6l)4贶aLе8t5>q{*F$q/8|2O?K&n7* ׭S[g˷dd>T`H 1WfK]v>uz˛igM1'!|$O8qnyLFNeb)A3L.)WO{}ִJlO`ڢ9h,(ȐfLKxsXY z3M x- x $G-ÎGZF5yHkԱZzAZ dջ8^4'HvOG6{߲JΓHA-w;μKt(ܾyۤ+pxA0A,Xuu6#FXLqHUoY預m~~'%l9Ԯ+5n8AK`5 z꾆T = m r9TR͋X A5$EW5N S\&$}ItEz .O;J|wG*iYMqע:a{XJ4uCy\<7>ç^I!E+X;bn9T@ΟCz= ]T;׋kH$mfE|ԷNI㝀2 :-dѡ"ў0dY:~$&6se F(d*hiUTO:F+'+/JCb'rǬ9+p3q"I5RX0j4(SO1S8Nvz0TV`k~M)eLv~gcT [ gRZ(x #sz=s"I?̀  I H6bGW˺\r[bgw{yݶVzn l"'0R HwQEϭy4{t_@Qzg^'sGA+d玅 VWrWH;Qd1boWrJ 5Rm^e)*TiPbBqaj0jrtQ,x"e'$/#xk^ a p;;ѡnnDynJ_,5D dMNxdr sb<ج\pI-@rU|Q^?"8j/̙rKjoߤ4pg pktX NHvfڥv.l?~Va6P5μ49IXC-5ݛh-Z/i}x y\^wqr;yS`yzB25o4:>\k0֕]%_*S]V9 (>SR3@6xʢɷql 6iG~uj?Ba!GoҖ҅|J{NE2ޯ>2Ts=f M'9]Uf_eY`"3+sˤpz1mHSyP˩7iC3# W&Ha ?Y>oy fC~VXK6Zk{N1md& j4nl'K'tOR0` 3~)%@6yģһS=}?.H zuj*UJ*bz̢ bt)+_ƔZV&-l_Ȩ+"l0A]|&&4<ǎ!&eV[mPJC͌^WV6`YY$`{ V^9w?e\we{>WPgB﬙zFYlEX7|v6ۅH)yYD[2:W+.g0ַWq?Jٸӛl,'8$-g Zlf0ҦW;6}t?o=f,'9睇Ɂz9 Tev`dഽ`㈚bEjT`xF=ޝv,!}*&*B~W%v"cye K-K!6 ҘJ훡'vu&ܫY_%, DM_1wV$c8v~#+iC-Ϥ[#B#the5Y979e eӸc Il:,*ױfjz4N$F0kzO`^2ˊ ՕDlzWdh'sIݠ]҆rY`>w|}Lrr|MWnO^RȾ ɶFЂY*__@w~ܴqR&VccŠIWFֳ3F}6芥fG' O+L؀$~^2\a+z9l^:;sO]_7pA`CJΣѿ,r& $c:Vr0>Z75KUiHXđڴpu&9}̅⏂HWC 7[Gw:XHyۣ.Xbft[> aWˍӛ+}WX.vl?jds!➣ ?טQ波s67+,r[WYB>7Hһtyo7Q9Lv74xkQ54i>eۦmOxr Ѻd@uL(9;JVǛ_̔A0&nqCϜ&S(DFMZ2?G+A L_ܰ>Ps:\*h"hnetYQeF[ .q_Vu_Q!'T*"ugַ3^*[ >umA%`!JZԤ:qni{4GN݂k,>C.xY twL D܅KܐLL9F,g]r(7e(Ad:af{{9H>Qy,C+v!';D ~ܡRwowƋ-W6]2&ǜ`&f&ND 2@1XkDW69|鉈<֜ v`⿿]#:-UIj{~@_c!A%6fWv(kHs㣯]q}s#,Xv(Ѐ)UV3r")03*U&ٖnPԤ*@91c6 ^dY udd Xs.USskTIE{R>RPasI0 #ho)k u ҈fU!SLpB5,39<4Gz|GN)YSq_ߗӬ~^԰!>$n3vKiaYބD$Go3MG~7X 1ZZ4h=9a?]tRDK Pr~ C%*+?F[jqh僲B>B Q>R F:g+~ ~Xnl6|f=L+[2=mG}+jPͅ lF戮ϐ쿱SEc{Sbw{ b9<86-K UBL}.k.[)p03mFG2a F&~gkwFfuRs:&xiT*|@ŹC)vj'kvs¶^*$ʶ1@`G& Lħ0{bpi*a3A9ؗ4tэD_uW--,Q2c@IŶ=UXu]( nן͔/囿VQ} srYPF :V=gyMwq _XQׇO0V1*`M%UCIN, mNxlۂNrK[8'l`|nb9Ϧ5WuoつJTmR~jㇼwA| 6b\HޮO6vi74p#0>4O$dWX5V Qޒ=:CP7+qvVMnPP4lzm/+򵥼߸FC%`.CVdRc9x, Y7xg_lV#4 tg[)kZ<; fD(eUش[܁uP1wA \z' % )]{ɷ.i ̵P9Wr2vYm7{bt6hf85`fKp _K+q?0|ؒQf2C6v$IOXWjeFT $-hc=;!c~z~Rq"RyZL G.d+w/+N4YQt,uP7vm `l?˷VuXض%;~u늩Znn6ACb ~_M$.gfVz;@HuFE0 $KDIB~IqFz>(ߧu#8uxfor~??X,;&T:TQ=݃b".heVK+9bQ紫~%ȝZg+o!7qJGYp8vrMT' &Iy 8Eea}=^YgNbb\kŬQ:5GƠ5qJT$"v S62z|D&ThY(+Gh2uXP_JlWt5[H]f?h?ER\߯{zO)'\dG,fM.(woXR~j41gd"G]B}Gz<Ʋ[> t~i ?3'7z _g>{ LWx.I(N-LE|eUk{o@#ḵQjvtutAb/a`_f-x)D1=z [=En{ќP8 gT/.KXawIg-0 ©l20Mze .{vx*AZV؛`n]|&Ocyoޖp2F8PX1* qrŞĦn۩aIy-_"i%))h[fɛ)@I-ۈnR U5τ,h/81Dנ ?FǦ@lzU"@O(Z=dNN9yZir;mpqՏ;n|rhH/AP<~Xhrc1uz/Mm6'0 +@lRS > ++%Trc7R>"#_WC<{$X.sdM,N"V>ςePUn+*P:K9,ٔ}xymsYÀ =ljg?r3!c3^^%@tY,#4<6RV6CI)" Z͵)W_VY[6Kkd20L1iDiB!t49ٺ"wLs8fjЬYc+L QΎT|J\xIeZe7\˃g{_QEz'm*O$9Ⱦ6_KwA|NVV2}A}-B r7#8_e]LCnS/WRX>~0]7VU$_s<8ذuԩ 5Env7~Pݳu F=Iqt~5ǟڹg qW Pf28ԋ띺q>Җ#X(Un)./5Jqk,hA,$t"^r˅7j4-, M:excU5#7T,e咐#gw՛gqS*zA?@PFz'v `4*-3mZPY 8l|G6w4nh ggOe mK֯(M QGCgD#I˳W."A?㿎މu^FbDxn25lJJQuNQ넏b$EU.ܳLN/u6ʑAbp7J1Btt2aT<ތA- pFO[wW7&n\ܒ`=VT|t0ZF^t3;j?Sliڒ:!]K*6?_c\mwT!rRY D6BEX=_[ﮓt pyuKmEߟL{&_ʁ'(5SmL(λV9 ܣiNXݦ:Ӏ,1J=R @8nT*}<>2Fd_d1V׵U{ sdlLG^f'#Y3"CA(JR?+xDf?Ղ#|Ϙ>'7ŔVWe?ΦIYW4\tƟfZ,L I%dq*?6kJNgg5kqDc_ ѐŵlO.#He]u&_ '.n-*Q_8 Ac]iz0E8kN-cl ʕO7|W+-W|Xn*;⥘) $ ga+={|>.u*F}Cǥ F! ~PWC8A3BvaK{ Zڋ͓RmS1~ VŔ]#ڷ1 e8X"avJ-j{M9]j1=/0/PlUd>K䓝F6S7VJh eK4Y2F,E=qLKDXM6(ZR@snEdN1Ysf%*_ر2E[/G~E}()<}s1c[@ B)ӂ}${\M'Q-'IkHq—1[Kc*ݙ'4RΙJ#s&QC,#51f;°.#!PR [45#v/uvWn,>R2jB_Nv !Ȓ\=?Anc` 4 ÔNDurЗmSA㇒,3 .^?(=6(>]yZhys^hٕ:ܒ^4r t * ɝ+_[QyGGyREpͳ! :t;:LqtCDt!Ѓ(`BՀ7utf5]2u6+>n:ǡQW[4TV=$^aUX1:« `|3 ,$UGk\,GMsbP܅̓%B3r]{S [wڙ{z:5cS8s~!o`vS]R ןTʫH AIn@H)d-f䎁xE&_ܴ>[j "!O;9qfeE?%FFU2ww-8d߫iF|ea2W\$pi5W5+ gkLӝ'`\ r9^KEH_lIIg`͐Z0AY{j$~1?1ͺ\@­|(fP^">B.fVrel.\Ur\LB'+Q>tL)Cބkh,ux=p;wkʔW@pܲ b)%MzUmm-QA:K`"8Z xBǦ8 O# $h/\D.h-^Ih֒gR2$-ӗ3"6rŒ0V룹hMwA4ok.#wwI&=޼}5ֻ,~\g'mp.fe:lfc%}. Gd"Iު18F⯖gbjxѝ- $TU\{69pVE )u4isdV HҁM?MfE6L[`(;'BQki Jv]`\\:*L.W35vYSJR1X>k~C88 âi5 q-S4D\TmaR S};/ NeyZˀ*d0>+rDXN4"9<OؕիRYMp2֤m#PI1T : "1P}*C?;#%#\Q9{#- ;@vWo- PjJXNo^{GўhSnѝ&m4Y6g~ qTXG , -K5SdLF [*R6tƱyr}>Md,2bG#?pW:ߢ~ej C,F"oK[GNMV6)!)A!ym|3( dRP|נǽD {ݴ rޑ ~hwM6cee~>Vi_q3ܡ}]p֌NO^R\m>bRDK$*p͟EF~uü*ϚZFyfr7W&Ed+Ȳ@t (5S 4l00#v;5c*v5AQ%}`KĎAltx;F{ܧa⦁R[HC ֧_їi2 /&ʖlNFs>R~ZȎCs[G NY{NNT,s+{/XPtd3(r{y H&: lRhx3{r7CwGͳK1x+'-K?glgm9*TЊ?oOo⹀n**ΕWWHzR'Tf &u,WlŌ@Eyb'.T\& wLBbQFuRt:c/.vh@ռ*%HI?jԈV &R Nh_E(hKď9KP.^guf zS9uyWߍ3>zɥ7?zEˁ,q"[ӎ6] ;|Z\J.Retw\@^eJgS\ g9PG:3$bmZ=Np򎂇>SPC)6m0 rށo`_8DP== 2i:ynEB, 99Qaھf8^n jpe@ktǽ;Xq Pdt|CJ@v革H [l:|^ B]͔.L|Eg~k3wT tPdia)θȾXAaTRر}C%o`^B;-#5f4$,(|ʴŁ3Ft;e80'.1wi=k'ԐePpү}AF1? ܴ?)S6> Or6  (yMHk̈́۞fL`` .;d)?Nd+!Qf->4j|<tC"Z3ME'a#Dp.=iPb-"ծ lZ ,' _[ͿgƵRm=Η]v Hٱ V3a Ќ\-fyL] 5ν* SmXq6@ȍ2rQˣ5f\x^-}骆vg-یX!%!w@-Z^Yryq>>T {;mvI7Օ%HF5g:P-+x8x+?6D_*2餪Vdh1-4eh~`d ]b{ !C&3et28/Qe)xz6I߰ xyǮv^"Hq: o&rqKJץ=6  dv2 \h}ӝ%:i#Pv+J!CY^ Fk#ྜx4Tk : ?H6ҷ{kݼBX# VUG (UT?zQ ]7u4o$,duWz *P{JcH d)%uKcUQgKr/\ Ɇn6A0 qvSfB{Pii;TE_*?U#h&#aAFW:C#oP &| rݨ $U.(H;%?G :1sIqK .=֊::uY|tl} 8a%BH湫nHw{ǧqA5\ h\2w$ -|hɩ6}7EGCPN6 dY3tõFxI/s^ƮX fHA* P݊m[z.(P;< zD0ޙؖ$ѽN:qH,!øBZ dEbl,v TReENstWax7@T[[rJ%J)(p&SIO{:@uVdB¨]ΛzՊ &:2rF NHȌ7 깋+1jjWF72%.ub'{ إEJBR65i^i&f1s|V(bFr& rYay_^MD^vκ9@y$6+ pzuoS_z뿫/”oXJhdK ! " heyN7hCwd$l9&>~Ȍ4ͻN6N@Q6q&*30@F9JE5JA]p|цKrZo)^͡HB#}wxiqܧG5zULY?73J9pڙzyѥkrZgƑ`b@d >~gޒ\Iϲ t 4B)V'[zt11SLxu#7mt}5,0Ġ8Måh9sQ?qѭ|,Fga!dESMC3->_i L ]xfMX]hwf3f} oͱ4C.P ,ƛQPx>Ķh  6wmm*dJmˈ/]E(v0#zZ8=M~NM;)a$hp[=.̙PWi&@+@,dJ]>q|#o6vDC5`&iMBWߏs͵t2RBxtz4-覲EŐ# >;GeqDkMi"#%9F'ΦՅw~paF*3p6"9UydUؔQ/>lKWI'Ĭphژj\ȗr?^ ㎢Ww {2 WUჺ$ދ G $:˜bt.YƒÎC*:S_N䯬ce`{nZ|Ow58c/vgy{}$QMcE%ux:"AeУ׻مs`n QL8:|RLsFAv2S7K.A$%aV|ؕ ;9\d:T{RQ!a09ZIA#W5bc x$hzz_h/4”|x Yr2WI@XB 7uP Ku"ne uyt{MKIƘ4k"Ysj3ATPe,;U۴)y6FY;Ij#u7UqQ]E":y4qZpw61os&J!k4۵ <2!u0?*t;bЖ- s|,A<7GプEˉgsq mN8\^O;C0la9GH]RM`R .jH~wDj&i1Wl DW0 :8Kkb߃sjn %'v A.<vܮPI?^.5&Rk1=wjރj_:BX-Ю;vC?>xR="Ra)͢(UVY*| ~z0\ hnQ==/H1 EkTz--JA 4)1Tm7k0-y;T??>X˜e^Ӏ+ %l7U Y7WigDrd8A*f~) qZ<%pTݟŴԓ-P=;-+n}=YqGk|BՎ u5= qFE~Tfҵ'D&a9<~*}I_w(&\!5-ֺ"D:UJz+~1J{%OG4L T5fYi*􉭨yE3$a> g1q Iۻ=㕇D2H_T$q w)i&5,-J}sF§59澐kouLy{{XŻt2؂1U5Fy.M]jjT9XM'l}NfWy.`Cb"[7mȽNh2[{bm ]K [uEJ=h̯z>IZC)R7k9Ґ>0Q[Kʺu`%fT!{mŹs΁uZ Owh;qΞ!#wN۶.NngѺtg_SfŋMZß(+p:6o%v)u,.{T\*(yzag|uN!r#UKSyAVݳf76,NF=+O E#3[i0×9θn>)o,=W"RJݬ$'AaNz)x fl+522}`Hssڗy1Y_麺CE}|V\u<;B.fM ЖE1aZr9e]Pso\2'RA&0$<U"uɫG}F"]au6|f6n6Hgd"?$UMyIs0 0~_mol!G vleQO*`._%]>yޭ˨K I^cgS )s4מNʷ9KwqR*:sH\(یC4ˆ&dBNjڰJl ?|:#򩖀KG16b}*! E7Fs 릦?X |C< df)Og+u45rЄ-ٝSDC/w7} :?Ilg>XcCPƂC!܁M(,Z8} ul/l,vS|;ޒr/,caF0$ߖb}d"W =rq9 )Dt>>W:JGu:RN$#FȠP=]Ycm}rν] k+`!gZcL_QE8e3 Qx>\Ra(qRtu/#-/OUz!x_o#FjA>~ Ld`Cy[7 .i8r5Rh=~%\R'g8t ZeĊ˾kMcZ)?,_[_0EgNSHz?LkPm ?2Nj98qrߴTLD4EMS_u%m%B8E i8\tҜ\eW8x02L\*PF [uYW ?.pZ!N[ŝqRdAg0𡔗n9mDsYWuxV}H @}m;瑔8bm@4k4Yb߄pV$m7sg'@DXnQx*â[栐ƠZ*T!rP|!Wdu!.޸#Gù;aMypzj\v2õ{f|!yP_\p읆<< p*H{AR2CWP=z#Kޅw-5tq:d76ũYG;1X}D$lIfvuAd1$bq)H8Z!tDa(Buֈm7a,~QC3yo@$ED.M!<(% ߰PvbŌ0JNM3b WZq{9'1b^ _%\3k`rVY:[;iz4%dl`_I-RjJ&⮅ w;=/ʾĈtkB5u1 yB6M`G:m XqC>lim/܂i,aoz}I]YWؗ!/haD|#?"GlQJJ帤|lY0x;E*^mHt`ێR4D ir[@"7L^1Ost[p oE&}s?²;rWvdӴtV{oU1.n]*N@-fU8ܥ#RU=o{þ.y4zT ȡp&h OՔny xvQޔ/o5M$<GxMd;5eOuZ|L =U}#Jl(HJ}?[d Wdp=>b%\ݣbd*!|VTM&<%cT{Uf|0=+8/Mxy.٦| plѾ*Zb3ha旹{|j+{) %X+qnRe>?Z˜`IMs-QTSY ʱQ2ign~|[ODɋ*RYў䮟`=BLgU3\X 5MքĮ3f0}K|5p;a-X:4[-G\6$eIOZfBMy=q:z?]ye<{SiaIH#@0fmoelzM,u-VO: X?GcwhN>{ڌjLbQݢl*1ߞ^'X.ÔFYEcpQ3h0 ,6\u/ژ 5uUսp\}5vߘѾS0sR9nt )]44%rl[fUzSVʵIG ! YmKDKB#OX T3V=\MnAbkrn5g\y8[2Zʀ[l8za0+C5]q.w$dzqɠVKﳰ ^eDt91mM!U_ʦY՚Ĝa"M[Ey43YJ&4`USqF]B")y cY~J B>4ew o8 jѲx$q )SM]_c nLk@wbkcK(K}9j(. p5R&W|h(vl2.7Qsn Rrnljg Vbww5Pg]%Ɗk[+k=]y2Ӱ I-ǧ'2i@PK PK* %nHTUaI.R΋ Ji.ެ*0 ˌd aR :oWG!l%Y]_:q}S|%lXMC)\eɖkiLOU͎hMRlR> CDxPkN_ kvMwkbZW]5)b5)l~VK@l܍CxpNLT򲯮:wNU# ºm;!_ B_76P& 1,j^ U/8e':/ԙM Hhp櫺xPmn#/EZf(Tj& uS\;>~I_ =}R`jy.k}HWP(\r3ͩxz^{+kJ#1D@42r$Cz;qN DɪϞv毡H*MTVz4S gT Ҩz&:*#er ٽt6Zԙ',52%~{(/Uจ91(c'(At"F;Z\]K\`'0Ya&+3D+ 7pl@LX~ f#@_grSپqMGo]șDʉZ f=]08c %`JQVX{vKu]rDuOЬQtt5T/1nHmiWfV+jLK,<: }ܴO‘^}X<&5,+{u9Iʬ;z(B`}Is|]hÓjNdE8q^,ltZZ29L+&!x@.a+4p7lxrg9ס_x_a,BOC>hLf ~X>))f?$BưީdI ۵5}@KԐLbn| YZ