xen-libs-4.16.0_08-150400.2.12 >  A bwfp9| Vq(t! {=beVy6Ċ0}s]lƏsw>Q2ÍWS곍["2U'0<^xFkkW'!4=t AUe-y?A3B4="PBWݞ#;e_f2@}L<ބe} $HBꢀjüRTeȪ6A8tV84Q&BS"Rdx*,SWwbw+V44a23a243d430b5b7a392bab43f63d60da555a189f4a4315fade88c57685f886057db1e30ac438d5b1126dcbf27efb23194a2c87 1tbwfp9|BR)剧CQVte?w͈ e;1k{Cy9!HF+:y%IEt)0JtV [ɪZ󼜰xqY[{5V]BZK'tŸ)/[rs M[jE\P9Dg%1Dc|-Iun p0whĖ/m2&|}`qo' zl;G =0&̀֓?^j$8Zԛ  fG7(* >p@:H?:8d  ! ?+ AO-D- - - -  Y-  - - e-Fh-17t77(1889#:?>H@WFfG-H4-I-X 1Y 1\!8-]!-^$b%c&ed&e&f&l&u&-v'w4$-x4-y5z9999:4Cxen-libs4.16.0_08150400.2.12Xen Virtualization: LibrariesXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries used to interact with the Xen virtual machine monitor. In addition to this package you need to install xen and xen-tools to use Xen. Authors: -------- Ian Pratt bwibs-centriq-5(SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/System/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxaarch64  `GX p `@ H P008( AAAAAAAbwIbwbwKbwbwJbwbwHbwbwJbwbwXbwbwIbwbwLbwbwLbwbwPbwbwMbwbwMbwbwHbwbwHbwbwNbwbwPbwbw[bwbwbwbwbwbwbwbwbwbwbwbwbefaa69a42af3841f407bd9ef2d591972310f8a9d0917e682fa542e7dd4c4738004d79b9b9454e67122729821bac319e79ad0733fd1f2259d04cf6acd7bb98254291a1064f6eacba907a27434804467347cdc0b5944c50d4d2c6e47ead23aa3e3fbb52fc403ce9cfd1e318735b362f08ef98233294b2d62502a35ad50e19cbbf5f1dd9e122c280e85d4fd471ebd82ac8f3f603a8e5b4b8a199b9eb3466fe3df32f03f3d6009f0c6d87aac07c68e07a763893f75d2b4bc9d222ee143bd8ce277fd4df0b40b04d90c1a41b3441ae66af0ec2956f61488babf89e429906b012a446e7e6ad3032b7d3b883c9fccc527912f7d3a7c139d0643650c2a1e980653ecfd7fb3d287facaa9a0f662ea50f9979a43d58736f0013e4cb1cca83cb5d842d9d87dd1c6ac9464f41eac913efd7f932deb16d982fcb2053212a5de83393252e3a332c1a4d66991dd2889542b3fee60b1a8bed07eea14abc907f128bef61906e9caef8d9a34e8c59841fad43ccb819057d4be09799f7856d537abffe1408ead0d3de11c708217892fed60afc12a7696e3bfdda030b66a465bd7281882a50521871151fcae4688df3d953c6342ae4d330aec3611539b21cc37a12d26b0ba522754486f1617d02e7688f8022901e37856834cd594f1460d1f4db6b3911ca730ff6ff535a6294659b390f64ce078f5ab706965691fb82e54b74528e36a97e44461721c4302e3290d7eef6721f5683eef49b93a73a3abb4e7e8caa09dc5a34589cc4bfa2c09f21e2d84b91eb28f6920520a673d4fd64d063bab87b489d8e728c6fcc165866c3c6a4f60c6c0d8b1b50dbe1aa3cf957992eb61819916666061fe57a2eca045192e43aad8af341ae25cee72c44c9c08c6ed083429a73632f09cf115902dde478776f0add7d5717f6328078cc288efa1c2a89f4529d58189cdbccc7afae6495dc147a0242fd9326e46a8b219e61ad2695b53304bcc06a81e08f6e287a5ed70clibxencall.so.1.3libxenctrl.so.4.16.0libxendevicemodel.so.1.4libxenevtchn.so.1.2libxenforeignmemory.so.1.4libxenfsimage.so.4.16.0libxengnttab.so.1.2libxenguest.so.4.16.0libxenhypfs.so.1.0libxenlight.so.4.16.0libxenstat.so.4.16.0libxenstore.so.4.0libxentoolcore.so.1.0libxentoollog.so.1.0libxenvchan.so.4.16.0libxlutil.so.4.16.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.16.0_08-150400.2.12.src.rpmlibxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxencall.so.1(VERS_1.2)(64bit)libxencall.so.1(VERS_1.3)(64bit)libxenctrl.so.4.16()(64bit)libxenctrl.so.4.16(VERS_4.16.0)(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.1)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxendevicemodel.so.1(VERS_1.3)(64bit)libxendevicemodel.so.1(VERS_1.4)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenevtchn.so.1(VERS_1.1)(64bit)libxenevtchn.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1(VERS_1.3)(64bit)libxenforeignmemory.so.1(VERS_1.4)(64bit)libxenfsimage.so.4.16()(64bit)libxenfsimage.so.4.16(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxengnttab.so.1(VERS_1.1)(64bit)libxengnttab.so.1(VERS_1.2)(64bit)libxenguest.so.4.16()(64bit)libxenguest.so.4.16(VERS_4.16.0)(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.16()(64bit)libxenlight.so.4.16(VERS_4.16.0)(64bit)libxenstat.so.4.16()(64bit)libxenstat.so.4.16(VERS_4.16.0)(64bit)libxenstore.so.4()(64bit)libxenstore.so.4(VERS_4.0)(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libxenvchan.so.4.16()(64bit)libxenvchan.so.4.16(VERS_4.16.0)(64bit)libxlutil.so.4.16()(64bit)libxlutil.so.4.16(VERS_4.16.0)(64bit)xen-libsxen-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxenctrl.so.4.16()(64bit)libxenctrl.so.4.16(VERS_4.16.0)(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenfsimage.so.4.16()(64bit)libxenfsimage.so.4.16(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxenguest.so.4.16()(64bit)libxenguest.so.4.16(VERS_4.16.0)(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.16()(64bit)libxenlight.so.4.16(VERS_4.16.0)(64bit)libxenstore.so.4()(64bit)libxenstore.so.4(VERS_4.0)(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libyajl.so.2()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3bP#bJb/.@b b D@a@aaq@aa6a@aaca@@a7T@a,@aGa $@a @`@` @`@`E` @`` @`!@`@````}p`\{@`KW`F`B@`8`4@`.V`#`>` l___@_H@__إ@_إ@_S_$_@______@_"__E@_i@_h_d@_cO_[f_X_O@_N7_*@_'@__{_^)@^^@^3^ϧ^x^@^@^^^{G^r @^j$@^g@^_@^Nt^K^=Q@^:@^0"@^@^@]]]N@]@]ʞ])]c@]@]@]@]]fl]fl]M`@]B@]/ ],j] ]@]@] ] ] #]]@\\ޢ@\ڭ\\@\@\@\}\7\\N\@\\+@\\M\M\\\@\}@\k\X)@\J@\I\A\?\=@\9\73\4\$\l@[@[k@[@[^[^[ā@[@[@[[v[W[CN@[<[6@[0@[0@['[!@[5@Z@ZnZ@ZZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Z|;Zz@Zo Zk@ZV@ZS]@ZOhZ:PZ1@Z.s@Z&@ZOZOZ Z Z Z@Z@Z }ZZYYYY@Y@Y{Y*@Y5YA@Y4YYYbYY@Y3YYJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"Y@Y;@YYY@YtY.XEXQ@X@XۡXg@X@X@X@XZX@X@X@X@XXXXXXwoXs{@XlXWXRXQ4@XF@X43@X.@X*X!@X&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@Wc@WZWZWZWYZ@WV@WEWBW=W;W4p@W1@W1@W,@W(W(W(W(W(W$@WVbV(@V3V@V@V'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVC-V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUU@UnU4@UUK@UU@UU>U>Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UUUUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@TJ?@T?@T=@jbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comguillaume.gardet@opensuse.orgcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comdimstar@opensuse.orgcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.commcepl@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.demliska@suse.czohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjengelh@inai.deguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbwiedemann@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.debwiedemann@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comtrenn@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.dejfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.derbrown@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comjfehlig@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.commlatimer@suse.comcarnold@suse.comcyliu@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.derguenther@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comrguenther@suse.comcarnold@suse.commeissner@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.com- bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch- bsc#1197423 - VUL-0: CVE-2022-26356: xen: Racy interactions between dirty vram tracking and paging log dirty hypercalls (XSA-397) xsa397.patch - bsc#1197425 - VUL-0: CVE-2022-26357: xen: race in VT-d domain ID cleanup (XSA-399) xsa399.patch - bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch xsa400-12.patch - Additional upstream bug fixes for XSA-400 (bsc#1027519) 61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch 61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch 6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch- bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401: xen: BHB speculation issues (XSA-398) 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch- bsc#1196545 - GCC 12: xen package fails gcc12-fixes.patch- Upstream bug fixes (bsc#1027519) 61e0296a-x86-time-calibration-relative-counts.patch 61e029c8-x86-time-TSC-freq-calibration-accuracy.patch 61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch 61e98e88-x86-introduce-get-set-reg-infra.patch 61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch 61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch 61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch 61eaaa23-x86-get-set-reg-infra-build.patch 61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch 61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch 61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch - Drop patches replaced by the above: xsa393.patch xsa394.patch xsa395.patch libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393) xsa393.patch - bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS Xen while unmapping a grant (XSA-394) xsa394.patch - bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of passed-through device IRQs (XSA-395) xsa395.patch- bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1193307 - pci backend does not exist when attach a vf to a pv guest libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch Drop libxl-PCI-defer-backend-wait.patch- bsc#1193447 - Slow execution of hvmloader+ovmf when VM contains an sriov device 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch - Upstream bug fixes (bsc#1027519) 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch- Collect active VM config files in the supportconfig plugin xen-supportconfig- Now that the ovmf package has been updated, reset the configure script to use ovmf-x86_64-xen-4m.bin from ovmf-x86_64-ms.bin References bsc#1194105, bsc#1193274 xen.spec- bsc#1193307 - pci backend does not exist when attach a vf to a pv guest libxl-PCI-defer-backend-wait.patch- Update to Xen 4.16.0 FCS release xen-4.16.0-testing-src.tar.bz2 * Miscellaneous fixes to the TPM manager software in preparation for TPM 2.0 support. * Increased reliance on the PV shim as 32-bit PV guests will only be supported in shim mode going forward. This change reduces the attack surface in the hypervisor. * Increased hardware support by allowing Xen to boot on Intel devices that lack a Programmable Interval Timer. * Cleanup of legacy components by no longer building QEMU Traditional or PV-Grub by default. Note both projects have upstream Xen support merged now, so it is no longer recommended to use the Xen specific forks. * Initial support for guest virtualized Performance Monitor Counters on Arm. * Improved support for dom0less mode by allowing the usage on Arm 64bit hardware with EFI firmware. * Improved support for Arm 64-bit heterogeneous systems by leveling the CPU features across all to improve big.LITTLE support. - bsc#1193274 - [Build67.2][Xen][uefi] xen fullvirt uefi guest can not be created with default 'type=plash' in virt-manager xen.spec- Update to Xen 4.16.0 RC4 release (jsc#SLE-18467) xen-4.16.0-testing-src.tar.bz2 * Xen can now export Intel Processor Trace (IPT) data from guests to tools in dom0. * Xen now supports Viridian enlightenments for guests with more than 64 vcpus. * Xenstored and oxenstored both now support LiveUpdate (tech preview). * Unified boot images * Switched x86 MSR accesses to deny by default policy. * Named PCI devices for xl/libxl and improved documentation for xl PCI configuration format. * Support for zstd-compressed dom0 (x86) and domU kernels. * Reduce ACPI verbosity by default. * Add ucode=allow-same option to test late microcode loading path. * Library improvements from NetBSD ports upstreamed. * x86: Allow domains to use AVX-VNNI instructions. * Added XEN_SCRIPT_DIR configuration option to specify location for Xen scripts. * xennet: Documented a way for the backend (or toolstack) to specify MTU to the frontend. * On detecting a host crash, some debug key handlers can automatically triggered to aid in debugging. * Increase the maximum number of guests which can share a single IRQ from 7 to 16, and make this configurable with irq-max-guests. - Drop iPXE sources and patches. iPXE is only used by QEMU traditional which has never shipped with SLE15. ipxe.tar.bz2 ipxe-enable-nics.patch ipxe-no-error-logical-not-parentheses.patch ipxe-use-rpm-opt-flags.patch - Drop building ocaml xenstored in the spec file. There are no plans or need to support this version. - Drop patches contained in new tarball or no longer required 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch 5ffc58c4-ACPI-reduce-verbosity-by-default.patch 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch 608676f2-VT-d-register-based-invalidation-optional.patch 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60bf9e19-Arm-create-dom0less-domUs-earlier.patch 60bf9e1a-Arm-boot-modules-scrubbing.patch 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch 60bfa904-AMD-IOMMU-wait-for-command-slot.patch 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch 61001231-x86-work-around-GNU-ld-2-37-issue.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6126339d-AMD-IOMMU-global-ER-extending.patch 6126344f-AMD-IOMMU-unity-map-handling.patch 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch 6126349a-AMD-IOMMU-rearrange-reassignment.patch 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch 612634c3-x86-p2m-introduce-p2m_is_special.patch 612634dc-x86-p2m-guard-identity-mappings.patch 612634f4-x86-mm-widen-locked-region-in-xatp1.patch 6126350a-gnttab-release-mappings-preemption.patch 6126351f-gnttab-replace-mapkind.patch 6126353d-gnttab-get-status-frames-array-capacity.patch 61263553-Arm-restrict-maxmem-for-dom0less.patch 6128a856-gnttab-radix-tree-node-init.patch init.xen_loop libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch libxc-bitmap-longs.patch libxc.migrate_tracking.patch libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc.sr.superpage.patch libxc-sr-use-xc_is_known_page_type.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl.fix-libacpi-dependency.patch libxl-qemu6-scsi.patch libxl-qemu6-vnc-password.patch libxl.set-migration-constraints-from-cmdline.patch reproducible.patch stubdom-have-iovec.patch x86-cpufreq-report.patch xenstore-launch.patch xenwatchdogd-options.patch xsa384.patch- bsc#1189632 - VUL-0: CVE-2021-28701: xen: Another race in XENMAPSPACE_grant_table handling (XSA-384) xsa384.patch - Upstream bug fixes (bsc#1027519) 61001231-x86-work-around-GNU-ld-2-37-issue.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6128a856-gnttab-radix-tree-node-init.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch (Replaces credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch) 6126339d-AMD-IOMMU-global-ER-extending.patch (Replaces xsa378-1.patch) 6126344f-AMD-IOMMU-unity-map-handling.patch (Replaces xsa378-2.patch) 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch (Replaces xsa378-3.patch) 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch (Replaces xsa378-4.patch) 6126349a-AMD-IOMMU-rearrange-reassignment.patch (Replaces xsa378-5.patch) 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch (Replaces xsa378-6.patch) 612634c3-x86-p2m-introduce-p2m_is_special.patch (Replaces xsa378-7.patch) 612634dc-x86-p2m-guard-identity-mappings.patch (Replaces xsa378-8.patch) 612634f4-x86-mm-widen-locked-region-in-xatp1.patch (Replaces xsa379.patch) 6126350a-gnttab-release-mappings-preemption.patch (Replaces xsa380-1.patch 6126351f-gnttab-replace-mapkind.patch (Replaces xsa380-2.patch) 6126353d-gnttab-get-status-frames-array-capacity.patch (Replaces xsa382.patch) 61263553-Arm-restrict-maxmem-for-dom0less.patch (Replaces xsa383.patch)- bsc#1189882 - refresh libxc.sr.superpage.patch prevent superpage allocation in the LAPIC and ACPI_INFO range- bsc#1189373 - VUL-0: CVE-2021-28694,CVE-2021-28695, CVE-2021-28696: xen: IOMMU page mapping issues on x86 (XSA-378) xsa378-1.patch xsa378-2.patch xsa378-3.patch xsa378-4.patch xsa378-5.patch xsa378-6.patch xsa378-7.patch xsa378-8.patch - bsc#1189376 - VUL-0: CVE-2021-28697: xen: grant table v2 status pages may remain accessible after de-allocation. (XSA-379) xsa379.patch - bsc#1189378 - VUL-0: CVE-2021-28698: xen: long running loops in grant table handling. (XSA-380) xsa380-1.patch xsa380-2.patch - bsc#1189380 - VUL-0: CVE-2021-28699: xen: inadequate grant-v2 status frames array bounds check. (XSA-382) xsa382.patch - bsc#1189381 - VUL-0: CVE-2021-28700: xen: xen/arm: No memory limit for dom0less domUs. (XSA-383) xsa383.patch- bsc#1188050 - L3: Xen guest yval1a80 SLES11SP4 hangs on cluster See also bsc#1179246. credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch- Drop aarch64-maybe-uninitialized.patch as the fix is in tarball.- refresh the migration patches to state v20210713 removed libxc-sr-add-xc_is_known_page_type.patch removed libxc-sr-arrays.patch removed libxc-sr-batch_pfns.patch removed libxc-sr-page_type_has_stream_data.patch removed libxc-sr-use-xc_is_known_page_type.patch removed libxc.migrate_tracking.patch removed libxc.sr.superpage.patch removed libxl.set-migration-constraints-from-cmdline.patch added libxc-sr-383b41974d5543b62f3181d216070fe3691fb130.patch added libxc-sr-5588ebcfca774477cf823949e5703b0ac48818cc.patch added libxc-sr-9e59d9f8ee3808acde9833192211da25f66d8cc2.patch added libxc-sr-LIBXL_HAVE_DOMAIN_SUSPEND_PROPS.patch added libxc-sr-abort_if_busy.patch added libxc-sr-f17a73b3c0264c62dd6b5dae01ed621c051c3038.patch added libxc-sr-max_iters.patch added libxc-sr-min_remaining.patch added libxc-sr-number-of-iterations.patch added libxc-sr-precopy_policy.patch added libxc-sr-restore-hvm-legacy-superpage.patch added libxc-sr-track-migration-time.patch added libxc-sr-xg_sr_bitmap-populated_pfns.patch added libxc-sr-xg_sr_bitmap.patch added libxc-sr-xl-migration-debug.patch- bsc#1176189 - xl monitoring process exits during xl save -p|-c keep the monitoring process running to cleanup the domU during shutdown xl-save-pc.patch- bsc#1179246 - Dom0 hangs when pinning CPUs for dom0 with HVM guest 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch - Upstream bug fixes (bsc#1027519) 60bf9e19-Arm-create-dom0less-domUs-earlier.patch (Replaces xsa372-1.patch) 60bf9e1a-Arm-boot-modules-scrubbing.patch (Replaces xsa372-2.patch) 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch (Replaces xsa373-1.patch) 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch (Replaces xsa373-2.patch) 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch (Replaces xsa373-2.patch) 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch (Replaces xsa375.patch) 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch (Replaces xsa377.patch) 60bfa904-AMD-IOMMU-wait-for-command-slot.patch (Replaces xsa373-4.patch) 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch (Replaces xsa373-5.patch) 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch - Dropped gcc11-fixes.patch- bsc#1183243 - L3: Core cannot be opened when using xl dump-core of VM with PTF 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch- bsc#1180350 - some long deprecated commands were finally removed in qemu6. Adjust libxl to use supported commands. libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl-qemu6-vnc-password.patch libxl-qemu6-scsi.patch- Update logrotate.conf, move global options into per-file sections to prevent globbering of global state (bsc#1187406)- Fix shell macro expansion in xen.spec, so that ExecStart= in xendomains-wait-disks.service is created correctly (bsc#1183877)- bsc#1186428 - VUL-0: CVE-2021-28693: xen: xen/arm: Boot modules are not scrubbed (XSA-372) xsa372-1.patch xsa372-2.patch - bsc#1186429 - VUL-0: CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (XSA-373) xsa373-1.patch xsa373-2.patch xsa373-3.patch xsa373-4.patch xsa373-5.patch - bsc#1186433 - VUL-0: CVE-2021-0089: xen: Speculative Code Store Bypass (XSA-375) xsa375.patch - bsc#1186434 - VUL-0: CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (XSA-377) xsa377.patch - Upstream bug fixes (bsc#1027519) 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch- Upstream bug fix (bsc#1027519) 608676f2-VT-d-register-based-invalidation-optional.patch- Add xen.sysconfig-fillup.patch to make sure xencommons is in a format as expected by fillup. (bsc#1185682) Each comment needs to be followed by an enabled key. Otherwise fillup will remove manually enabled key=value pairs, along with everything that looks like a stale comment, during next pkg update- Refresh xenstore-launch.patch to cover also daemon case- Update to Xen 4.14.2 bug fix release (bsc#1027519) xen-4.14.2-testing-src.tar.bz2 - Drop patches contained in new tarball 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6011bbc7-x86-timer-fix-boot-without-PIT.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch 60787714-x86-HPET-avoid-legacy-replacement-mode.patch- bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 60787714-x86-HPET-avoid-legacy-replacement-mode.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch - Upstream bug fixes (bsc#1027519) 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch (Replaces xsa368.patch) 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch- bsc#1137251 - Restore changes for xen-dom0-modules.service which were silently removed on 2019-10-17- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway. This resulted to over-allocation.- bsc#1167608 - adjust limit for max_event_channels A previous change allowed an unbound number of event channels to make sure even large domUs can start of of the box. This may have a bad side effect in the light of XSA-344. Adjust the built-in limit based on the number of vcpus. In case this is not enough, max_event_channels=/maxEventChannels= has to be used to set the limit as needed for large domUs adjust libxl.max_event_channels.patch- bsc#1183072 - VUL-0: CVE-2021-28687: xen: HVM soft-reset crashes toolstack (XSA-368). Also resolves, bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl bsc#1181989 - openQA job causes libvirtd to dump core when running kdump inside domain xsa368.patch- bsc#1177204 - L3-Question: conring size for XEN HV's with huge memory to small. Inital Xen logs cut 5ffc58c4-ACPI-reduce-verbosity-by-default.patch - Upstream bug fixes (bsc#1027519) 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch - bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch- bsc#1182576 - L3: XEN domU crashed on resume when using the xl unpause command 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch- Start using the %autosetup macro to simplify patch management xen.spec- bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch - Drop gcc10-fixes.patch- Upstream bug fixes (bsc#1027519) 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch (Replaces xsa360.patch) 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch - bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 6011bbc7-x86-timer-fix-boot-without-PIT.patch- bsc#1181254 - VUL-0: xen: IRQ vector leak on x86 (XSA-360) xsa360.patch- bsc#1180794 - bogus qemu binary path used when creating fv guest under xen xen.spec- bsc#1180690 - L3-Question: xen: no needsreboot flag set Add Provides: installhint(reboot-needed) in xen.spec for libzypp- Update libxl.set-migration-constraints-from-cmdline.patch Remove code which handled --max_factor. The total amount of transferred data is no indicator to trigger the final stop+copy. This should have been removed during upgrade to Xen 4.7. Fix off-by-one in --max_iters, it caused one additional copy cycle. Reduce default value of --max_iters from 5 to 2. The workload within domU will continue to produce dirty pages. It is unreasonable to expect any slowdown during migration. Now there is one initial copy of all memory, one instead of four iteration for dirty memory, and a final copy iteration prior move.- Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch- Pass --with-rundir to configure to get rid of /var/run- bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch- boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch- bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch- Fix build error with libxl.fix-libacpi-dependency.patch- Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere.- Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1- bsc#1178591 - VUL-0: CVE-2020-28368: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351 xsa351-1.patch xsa351-2.patch xsa351-3.patch- bsc#1177950 - adjust help for --max_iters, default is 5 libxl.set-migration-constraints-from-cmdline.patch- jsc#SLE-16899 - improve performance of live migration remove allocations and memcpy from hotpaths on sending and receiving side to get more throughput on 10Gbs+ connections libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc-sr-readv_exact.patch libxc-sr-restore-handle_buffered_page_data.patch libxc-sr-restore-handle_incoming_page_data.patch libxc-sr-restore-map_errs.patch libxc-sr-restore-mfns.patch libxc-sr-restore-pfns.patch libxc-sr-restore-populate_pfns-mfns.patch libxc-sr-restore-populate_pfns-pfns.patch libxc-sr-restore-read_record.patch libxc-sr-restore-types.patch libxc-sr-save-errors.patch libxc-sr-save-guest_data.patch libxc-sr-save-iov.patch libxc-sr-save-local_pages.patch libxc-sr-save-mfns.patch libxc-sr-save-rec_pfns.patch libxc-sr-save-show_transfer_rate.patch libxc-sr-save-types.patch libxc-sr-use-xc_is_known_page_type.patch adjust libxc.sr.superpage.patch adjust libxc.migrate_tracking.patch- Upstream bug fixes (bsc#1027519) 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch - Renamed patches 5f560c42-x86-PV-64bit-segbase-consistency.patch Replaces 5f5b6951-x86-PV-64bit-segbase-consistency.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch Replaces 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch Replaces 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch Replaces 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch Replaces 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch Replaces 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch 5f6a00c4-evtchn-relax-port_is_valid.patch Replaces 5f6a062c-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch Replaces 5f6a065c-pv-Avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch Replaces 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch Replaces 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch Replaces 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch Replaces 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch Replaces 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch Replaces 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch Replaces 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch- bsc#1177409 - VUL-0: CVE-2020-27674: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286) xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch - bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345) 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch - bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346) 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch - bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347) 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch- Update libxc.sr.superpage.patch set errno in x86_hvm_alloc_4k (bsc#1177112)- bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) 5f6a062c-evtchn-relax-port_is_valid.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) 5f6a065c-pv-Avoid-double-exception-injection.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - Upstream bug fix (bsc#1027519) 5f5b6951-x86-PV-64bit-segbase-consistency.patch- Fix problems in xen.spec with building on aarch64- Make use of %service_del_postun_without_restart while preserving the old behavior for older distros. - In %post tools, remove unnecessary qemu symlinks.- Fix error in xen-tools %post when linking pvgrub64.bin - Make paths below libexec more explicit - Create symlink also for pvgrub32.bin- Revert previous libexec change for qemu compat wrapper The path is used in existing domU.xml files in the emulator field - Escape some % chars in xen.spec, they have to appear verbatim- Enhance libxc.migrate_tracking.patch Print number of allocated pages on sending side, this is more accurate than p2m_size.- jsc#SLE-15926 - Dev: XEN: drop netware support Dropped the following patches pygrub-netware-xnloader.patch xnloader.py Refreshed pygrub-boot-legacy-sles.patch- Fix build on aarch64 with gcc10 - Package xenhypfs for aarch64- Correct license name * GPL-3.0+ is now GPL-3.0-or-later- Upstream bug fixes (bsc#1027519) 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch- Update to Xen 4.14.0 FCS release xen-4.14.0-testing-src.tar.bz2 * Linux stubdomains (contributed by QUBES OS) * Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix) * Lightweight VM fork for fuzzing / introspection. (contributed by Intel) * Livepatch: buildid and hotpatch stack requirements * CONFIG_PV32 * Hypervisor FS support * Running Xen as a Hyper-V Guest * Domain ID randomization, persistence across save / restore * Golang binding autogeneration * KDD support for Windows 7, 8.x and 10 - Dropped patches contained in new tarball 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch xsa317.patch xsa319.patch xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch xsa328-1.patch xsa328-2.patch- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached ignore-ip-command-script-errors.patch- Enhance libxc.migrate_tracking.patch After transfer of domU memory, the target host has to assemble the backend devices. Track the time prior xc_domain_unpause.- Add libxc.migrate_tracking.patch to track live migrations unconditionally in logfiles, especially in libvirt. This will track how long a domU was suspended during transit.- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect error handling in event channel port allocation xsa317.patch - bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code paths in x86 dirty VRAM tracking xsa319.patch - bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient cache write- back under VT-d xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch - bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic modification of live EPT PTE xsa328-1.patch xsa328-2.patch- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch) 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch) - Upstream bug fixes (bsc#1027519) 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch- Fixes for %_libexecdir changing to /usr/libexec- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) xsa320-1.patch xsa320-2.patch- Update to Xen 4.13.1 bug fix release (bsc#1027519) xen-4.13.1-testing-src.tar.bz2 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch - Drop patches contained in new tarball 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- spec: Remove invocation of autogen.sh - spec: Recommend qemu-ovmf-x86_64 to provide UEFI firmwares- bsc#1170968 - GCC 10: xen build fails on i586 gcc10-fixes.patch- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation handling in GNTTABOP_copy (XSA-318) 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- bsc#1168140 - VUL-0: CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch - bsc#1168142 - VUL-0: CVE-2020-11739: xen: XSA-314 - Missing memory barriers in read-write unlock paths 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch - bsc#1168143 - VUL-0: CVE-2020-11743: xen: XSA-316 - Bad error path in GNTTABOP_map_grant 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch - bsc#1167152 - L3: Xenstored Crashed during VM install Need Core analyzed 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch - Drop for upstream solution (bsc#1165206) 01-xen-credit2-avoid-vcpus-to.patch default-to-credit1-scheduler.patch - Upstream bug fixes (bsc#1027519) 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch- bsc#1167608 - unbound limit for max_event_channels domUs with many vcpus and/or resources fail to start libxl.max_event_channels.patch- bsc#1161480 - Fix xl shutdown for HVM without PV drivers add libxl.libxl__domain_pvcontrol.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 01-xen-credit2-avoid-vcpus-to.patch- bsc#1158414 - GCC 10: xen build fails gcc10-fixes.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 default-to-credit1-scheduler.patch- bsc#1160932 - VUL-0: xen: XSA-312 v1: arm: a CPU may speculate past the ERET instruction 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch - bsc#1164425 - x86: "spec-ctrl=no-xen" should also disable branch hardening 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch - Upstream bug fixes (bsc#1027519) 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch- bsc#1159755 - use fixed qemu-3.1 machine type for HVM This must be done in qemu to preserve PCI layout remove libxl.lock-qemu-machine-for-hvm.patch- jsc#SLE-10183 - script to calculate cpuid= mask add helper script from https://github.com/twizted/xen_maskcalc domUs may be migrated between different cpus from the same vendor if their visible cpuid value has incompatible feature bits masked.- jsc#SLE-10172, bsc#1055731 - handle degraded raid for xendomains add helper script and systemd service from https://github.com/luizluca/xen-tools-xendomains-wait-disk in new sub package xen-tools-xendomains-wait-disk See included README for usage instructions xendomains-wait-disks.LICENSE xendomains-wait-disks.README.md xendomains-wait-disks.sh- bsc#1159755 - use fixed qemu-3.1 machine type for HVM qemu4 introduced incompatible changes in pc-i440fx, which revealed a design bug in 'xenfv'. Live migration from domUs started with qemu versions prior qemu4 can not be received with qemu4+. libxl.lock-qemu-machine-for-hvm.patch- Upstream bug fixes (bsc#1027519) 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- bsc#1159320 - Xen logrotate file needs updated logrotate.conf- Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware- Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch- Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch- Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2- Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call)- Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch- bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch- bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch- Upstream bug fixes (bsc#1027519) 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch - Drop 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Preserve modified files which used to be marked as %config, rename file.rpmsave to file- Update to Xen 4.12.1 bug fix release (bsc#1027519) xen-4.12.1-testing-src.tar.bz2 - Drop patches contained in new tarball 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8f752c-x86-e820-build-with-gcc9.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Refreshed patches libxl.pvscsi.patch- bsc#1143563 - Speculative mitigation facilities report wrong status 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Update xen-dom0-modules.service (bsc#1137251) Map backend module names from pvops and xenlinux kernels to a module alias. This avoids errors from modprobe about unknown modules. Ignore a few xenlinux modules that lack aliases.- Gcc9 warnings seem to be cleared up with upstream fixes. Drop gcc9-ignore-warnings.patch- bsc#1138563 - L3: xenpvnetboot improperly ported to Python 3 fix-xenpvnetboot.patch- Move /etc/modprobe.d/xen_loop.conf to /lib/modprobe.d/xen_loop.conf- Remove /etc/xen/xenapiusers and /etc/pam.d/xen-api- Remove all upstream provided files in /etc/xen They are not required at runtime. The host admin is now responsible if he really needs anything in this subdirectory.- In our effort to make /etc fully admin controlled, move /etc/xen/scripts to libexec/xen/scripts with xen-tools.etc_pollution.patch- Move /etc/bash_completion.d/xl.sh to %{_datadir}/bash-completion/completions- bsc#1138294 - VUL-0: CVE-2019-17349: XSA-295: Unlimited Arm Atomics Operations 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Upstream bug fixes (bsc#1027519) 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch (Replaces xsa297-0a.patch) 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch (Replaces xsa297-0b.patch) 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch (Replaces xsa297-0c.patch) 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch (Replaces xsa297-0d.patch) 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch (Replaces xsa297-1.patch) 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch (Replaces xsa297-2.patch) 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch (Replaces xsa297-3.patch) 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch- Fix some outdated information in the readme README.SUSE- spec: xen-tools: require matching version of xen package bsc#1137471- Remove two stale patches xen.build-compare.man.patch xenpaging.doc.patch- Disable LTO (boo#1133296).- Remove arm32 from ExclusiveArch to fix build- bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4". CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 xsa297-0a.patch xsa297-0b.patch xsa297-0c.patch xsa297-0d.patch xsa297-1.patch xsa297-2.patch xsa297-3.patch - Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch- bsc#1131811 - [XEN] internal error: libxenlight failed to create new domain. This patch is a workaround for a systemd issue. See patch header for additional comments. xenstore-launch.patch- bsc#1125378 - [xen][pygrub] Can not restore sle11sp4 pv guest after upgrading host from sle11sp4 to sle15sp1 pygrub-python3-conversion.patch - Fix "TypeError: virDomainDefineXML() argument 2 must be str or None, not bytes" when converting VMs from using the xm/xend toolstack to the libxl/libvirt toolstack. (bsc#1123378) xen2libvirt.py- bsc#1124560 - Fully virtualized guests crash on boot 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch - bsc#1121391 - GCC 9: xen build fails 5c8f752c-x86-e820-build-with-gcc9.patch - Upstream bug fixes (bsc#1027519) 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch- Install pkgconfig files into libdir instead of datadir- Update to Xen 4.12.0 FCS release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 * HVM/PVH and PV only Hypervisor: The Xen 4.12 release separates the HVM/PVH and PV code paths in Xen and provides KCONFIG options to build a PV only or HVM/PVH only hypervisor. * QEMU Deprivilege (DM_RESTRICT): In Xen 4.12, this feature has been vastly improved. * Argo - Hypervisor-Mediated data eXchange: Argo is a new inter- domain communication mechanism. * Improvements to Virtual Machine Introspection: The VMI subsystem which allows detection of 0-day vulnerabilities has seen many functional and performance improvements. * Credit 2 Scheduler: The Credit2 scheduler is now the Xen Project default scheduler. * PVH Support: Grub2 boot support has been added to Xen and Grub2. * PVH Dom0: PVH Dom0 support has now been upgraded from experimental to tech preview. * The Xen 4.12 upgrade also includes improved IOMMU mapping code, which is designed to significantly improve the startup times of AMD EPYC based systems. * The upgrade also features Automatic Dom0 Sizing which allows the setting of Dom0 memory size as a percentage of host memory (e.g. 10%) or with an offset (e.g. 1G+10%).- bsc#1130485 - Please drop Requires on multipath-tools in xen-tools. Now using Recommends multipath-tools. xen.spec- Update to Xen 4.12.0 RC7 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC6 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1026236 - add Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs if their expected frequency does not match exactly the frequency of the receiving host xen.bug1026236.suse_vtsc_tolerance.patch- Update to Xen 4.12.0 RC5 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- jsc#SLE-3059 - Disable Xen auto-ballooning - Add CONFIG_DOM0_MEM to the spec file for managing dom0 memory. xen.spec - Disable autoballooning in xl.con xl-conf-disable-autoballoon.patch- Update gcc9-ignore-warnings.patch to fix build in SLE12- bsc#1126325 - fix crash in libxl in error path Setup of grant_tables and other variables may fail libxl.prepare-environment-for-domcreate_stream_done.patch- bsc#1127620 - Documentation for the xl configuration file allows for firmware=pvgrub64 but we don't ship pvgrub64. Create a link from grub.xen to pvgrub64 xen.spec- Update to Xen 4.12.0 RC4 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Tarball also contains additional post RC4 security fixes for Xen Security Advisories 287, 288, and 290 through 294.- Update to Xen 4.12.0 RC3 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC2 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1121391 - GCC 9: xen build fails gcc9-ignore-warnings.patch- bsc#1122563 - Virtualization/xen: Bug no Xen on boot, missing /proc/xen, after 4.11 -> 4.12 upgrade on X86_64/efi. Keep xen.efi in /usr/lib64/efi for booting older distros. xen.spec- fate#326960: Package grub2 as noarch. As part of the effort to have a unified bootloader across architectures, modify the xen.spec file to move the Xen efi files to /usr/share/efi/$(uname -m) from /usr/lib64/efi.- Update to Xen 4.12.0 RC1 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Drop 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch 5bdc31d5-VMX-fix-vmx_handle_eoi.patch gcc8-fix-array-warning-on-i586.patch gcc8-fix-format-warning-on-i586.patch gcc8-inlining-failed.patch xen.bug1079730.patch- bsc#1121960 - xen: sync with Factory xen.spec xen.changes- Replace old $RPM_* shell vars. - Run fdupes for all architectures, and not crossing subvolume boundaries.- Do not run %fdupes on aarch64 to avoid the hardlink-across-partition rpmlint error- Require qemu-seabios only on x86* as it is not available on non-x86 systems- Avoid creating dangling symlinks (bsc#1116524) This reverts the revert of tmp_build.patch- Update to Xen 4.11.1 bug fix release (bsc#1027519) xen-4.11.1-testing-src.tar.bz2 - 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch replaces xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch replaces xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch - Drop the following patches contained in the new tarball 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbe-ARM-disable-grant-table-v2.patch 5b72fbbe-oxenstored-eval-order.patch 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch xsa275-1.patch xsa275-2.patch xsa276-1.patch xsa276-2.patch xsa277.patch xsa279.patch xsa280-1.patch xsa280-2.patch- bsc#1116524 - Package xen-tools-4.11.0_09-2.1.x86_64 broken: Missing /bin/domu-xenstore. This was broken because "make package build reproducible" change. (boo#1047218, boo#1062303) This fix reverses the change to this patch. tmp_build.patch- bsc#1115040 - VUL-0: CVE-2018-19961 CVE-2018-19962: xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275) xsa275-1.patch xsa275-2.patch - bsc#1115043 - VUL-0: CVE-2018-19963: xen: resource accounting issues in x86 IOREQ server handling (XSA-276) xsa276-1.patch xsa276-2.patch - bsc#1115044 - VUL-0: CVE-2018-19964: xen: x86: incorrect error handling for guest p2m page removals (XSA-277) xsa277.patch - bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch - bsc#1115045 - VUL-0: xen: CVE-2018-19965: x86: DoS from attempting to use INVPCID with a non-canonical addresses (XSA-279) xsa279.patch - bsc#1115047 - VUL-0: CVE-2018-19966: xen: Fix for XSA-240 conflicts with shadow paging (XSA-280) xsa280-1.patch xsa280-2.patch - bsc#1114988 - VUL-0: CVE-2018-19967: xen: guest use of HLE constructs may lock up host (XSA-282) 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch - bsc#1108940 - L3: XEN SLE12-SP1 domU hang on SLE12-SP3 HV 5bdc31d5-VMX-fix-vmx_handle_eoi.patch - Upstream bug fixes (bsc#1027519) 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch- bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch- Use SMBIOS_REL_DATE instead of SMBIOS_DATE for reproducible binaries- make package build reproducible (boo#1047218, boo#1062303) * Set SMBIOS_REL_DATE * Update tmp_build.patch to use SHA instead of random build-id * Add reproducible.patch to use --no-insert-timestamp- Building with ncurses 6.1 will fail without xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - Building libxl acpi support on aarch64 with gcc 8.2 will fail without xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch- bsc#1106263 - L3: The affinity reporting via 'xl vcpu-list' is apparently broken 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch- bsc#1094508 - L3: Kernel oops in fs/dcache.c called by d_materialise_unique() 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch - bsc#1103279 - (CVE-2018-15470) VUL-0: CVE-2018-15470: xen: oxenstored does not apply quota-maxentity (XSA-272) 5b72fbbe-oxenstored-eval-order.patch - bsc#1103275 - (CVE-2018-15469) VUL-0: CVE-2018-15469: xen: Use of v2 grant tables may cause crash on ARM (XSA-268) 5b72fbbe-ARM-disable-grant-table-v2.patch - Upstream patches from Jan (bsc#1027519) 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch - Drop 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- bsc#1078292 - rpmbuild -ba SPECS/xen.spec with xen-4.9.1 failed xen.spec- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM (XSA-273) 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch - bsc#1103276 - VUL-0: CVE-2018-15468: xen: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (XSA-269) 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch - Upstream prereq patches for XSA-273 and other upstream fixes (bsc#1027519) 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- Upstream patches from Jan (bsc#1027519) 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch gcc8-fix-format-warning-on-i586.patch gcc8-fix-array-warning-on-i586.patch - Drop xen.fuzz-_FORTIFY_SOURCE.patch gcc8-fix-warning-on-i586.patch- Update to Xen 4.11.0 FCS (fate#325202, fate#325123) xen-4.11.0-testing-src.tar.bz2 disable-building-pv-shim.patch - Dropped patches 5a33a12f-domctl-improve-locking-during-domain-destruction.patch 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a9985bd-x86-invpcid-support.patch 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch 5af1daa9-3-x86-traps-use-IST-for-DB.patch 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch 5af97999-viridian-cpuid-leaf-40000003.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch 5b348874-x86-refine-checks-in-DB-handler.patch 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen_fix_build_with_acpica_20180427_and_new_packages.patch- Submit upstream patch libacpi: fixes for iasl >= 20180427 git commit 858dbaaeda33b05c1ac80aea0ba9a03924e09005 xen_fix_build_with_acpica_20180427_and_new_packages.patch This is needed for acpica package to get updated in our build service- Upstream patches from Jan (bsc#1027519) 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch) 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch) 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch) 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch) 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch) 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch) 5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch) 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-<>.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch- bsc#1098403 - fix regression introduced by changes for bsc#1079730 a PV domU without qcow2 and/or vfb has no qemu attached. Ignore QMP errors for PV domUs to handle PV domUs with and without an attached qemu-xen. xen.bug1079730.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1092543 - GCC 8: xen build fails gcc8-fix-warning-on-i586.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" (XSA-263) 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- Always call qemus xen-save-devices-state in suspend/resume to fix migration with qcow2 images (bsc#1079730) libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen.bug1079730.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- bsc#1092543 - GCC 8: xen build fails 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch gcc8-inlining-failed.patch- Update to Xen 4.10.1 bug fix release (bsc#1027519) xen-4.10.1-testing-src.tar.bz2 disable-building-pv-shim.patch - Drop the following patches contained in the new tarball 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch xsa258.patch xsa259.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Upstream patches from Jan (bsc#1027519) and fixes related to Page Table Isolation (XPTI). See also bsc#1074562 XSA-254 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop xsa252.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- Remove stale systemd presets code for 13.2 and older- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Replace hardcoded xen with Name tag when refering to subpkgs- Make sure tools and tools-domU require libs from the very same build- tools-domU: Add support for qemu guest agent. New files 80-xen-channel-setup.rules and xen-channel-setup.sh configure a xen-pv-channel for use by the guest agent FATE#324963- Remove outdated /etc/xen/README*- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with MSR emulation (XSA-253) 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch - bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch- Fix python3 deprecated atoi call (bsc#1067224) pygrub-python3-conversion.patch - Drop xenmon-python3-conversion.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 build-python3-conversion.patch bin-python3-conversion.patch- bsc#1070165 - xen crashes after aborted localhost migration 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch - bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb: libxl__devices_destroy failed 5a33a12f-domctl-improve-locking-during-domain-destruction.patch - Upstream patches from Jan (bsc#1027519) 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch- Update to Xen 4.10.0 FCS (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Rebuild initrd if xen-tools-domU is updated- Update to Xen 4.10.0-rc8 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- Adjust xenstore-run-in-studomain.patch to change the defaults in the code instead of changing the sysconfig template, to also cover the upgrade case- Update to Xen 4.10.0-rc6 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Since xen switched to Kconfig, building a debug hypervisor was done by default. Adjust make logic to build a non-debug hypervisor by default, and continue to provide one as xen-dbg.gz- fate#316614: set migration constraints from cmdline fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10- Document the suse-diskcache-disable-flush option in xl-disk-configuration(5) (bsc#879425,bsc#1067317)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to Xen 4.10.0-rc5 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - fate#323663 - Run Xenstore in stubdomain xenstore-run-in-studomain.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 pygrub-python3-conversion.patch xenmon-python3-conversion.patch migration-python3-conversion.patch xnloader.py xen2libvirt.py- Remove xendriverdomain.service (bsc#1065185) Driver domains must be configured manually with custom .service file- Update to Xen 4.10.0-rc3 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Adjust xen-dom0-modules.service to ignore errors (bsc#1065187)- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Update to Xen 4.10.0-rc2 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Update to Xen 4.10.0-rc1 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop patches included in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch gcc7-mini-os.patch- bsc#1061084 - VUL-0: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1056278 - VUL-0: xen: Missing NUMA node parameter verification (XSA-231) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch - bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232) 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch - bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup (XSA-233) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch - bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch - bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Unignore gcc-PIE the toolstack disables PIE for firmware builds as needed- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- bsc#1044974 - xen-tools require python-pam xen.spec- Clean up spec file errors and a few warnings. (bsc#1027519) - Removed conditional 'with_systemd' and some old deprecated 'sles_version' checks. xen.spec- Remove use of brctl utiltiy from supportconfig plugin FATE#323639- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- fate#323639 Move bridge-utils to legacy replace-obsolete-network-configuration-commands-in-s.patch- bsc#1052686 - VUL-0: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- Add a supportconfig plugin xen-supportconfig FATE#323661- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- fate#323662 Drop qemu-dm from xen-tools package The following tarball and patches have been removed qemu-xen-traditional-dir-remote.tar.bz2 VNC-Support-for-ExtendedKeyEvent-client-message.patch 0001-net-move-the-tap-buffer-into-TAPState.patch 0002-net-increase-tap-buffer-size.patch 0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch 0004-e1000-secrc-support.patch 0005-e1000-multi-buffer-packet-support.patch 0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch 0007-e1000-verify-we-have-buffers-upfront.patch 0008-e1000-check-buffer-availability.patch CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch CVE-2015-4037-qemut-smb-config-dir-name.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch blktap.patch cdrom-removable.patch xen-qemu-iscsi-fix.patch qemu-security-etch1.patch xen-disable-qemu-monitor.patch xen-hvm-default-bridge.patch qemu-ifup-set-mtu.patch ioemu-vnc-resize.patch capslock_enable.patch altgr_2.patch log-guest-console.patch bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch qemu-dm-segfault.patch bdrv_default_rwflag.patch kernel-boot-hvm.patch ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch ioemu-hvm-pv-support.patch pvdrv_emulation_control.patch ioemu-disable-scsi.patch ioemu-disable-emulated-ide-if-pv.patch xenpaging.qemu.flush-cache.patch ioemu-devicemodel-include.patch - Cleanup spec file and remove unused KMP patches kmp_filelist supported_module.patch xen_pvonhvm.xen_emul_unplug.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch/sbin/ldconfig/sbin/ldconfigibs-centriq-5 1651966354  !"#$%&'()*+,-4.16.0_08-150400.2.124.16.0_08-150400.2.12libxencall.so.1libxencall.so.1.3libxenctrl.so.4.16libxenctrl.so.4.16.0libxendevicemodel.so.1libxendevicemodel.so.1.4libxenevtchn.so.1libxenevtchn.so.1.2libxenforeignmemory.so.1libxenforeignmemory.so.1.4libxenfsimage.so.4.16libxenfsimage.so.4.16.0libxengnttab.so.1libxengnttab.so.1.2libxenguest.so.4.16libxenguest.so.4.16.0libxenhypfs.so.1libxenhypfs.so.1.0libxenlight.so.4.16libxenlight.so.4.16.0libxenstat.so.4.16libxenstat.so.4.16.0libxenstore.so.4libxenstore.so.4.0libxentoolcore.so.1libxentoolcore.so.1.0libxentoollog.so.1libxentoollog.so.1.0libxenvchan.so.4.16libxenvchan.so.4.16.0libxlutil.so.4.16libxlutil.so.4.16.0xenfsimageext2fsfsimage.sofatfsimage.soiso9660fsimage.soreiserfsfsimage.soufsfsimage.sozfsfsimage.so/usr/lib64//usr/lib64/xenfsimage//usr/lib64/xenfsimage/ext2fs//usr/lib64/xenfsimage/fat//usr/lib64/xenfsimage/iso9660//usr/lib64/xenfsimage/reiserfs//usr/lib64/xenfsimage/ufs//usr/lib64/xenfsimage/zfs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/b68872d9d60844477afd84a8c2594a42-xencpioxz5aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=44d8145023012600984927677a43095e499954e3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b821ccab2473ba39f6b93226d777509a9f1d3e9a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c8e937be5b1848202c8761a52ed387a62dddc10, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=49794c2fac1b8feae9323db91384f88f9f2642c6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=694e037fd16c43ead8dceb7f2f11fc6fabc9bac6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8786becacd7afe06c41b7d94ab483f31fe462499, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c1a35707024c246dbcbb7132f456724a25bbec9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=22d3c74d57268ada80e33442140ecd55748cb8fa, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9a93884c3fcee7969bdc637b46a800f2311fe61a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=284c063f8dadb15bf2e6bceb277e7a929d83f1fe, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7298d76756909835732fe15c22ce36df659b9b2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5cf99da021497453d86444585def66aa99bd1aa3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=26e7f76ad4d68bdaf8c2af2a430fb52a668738f1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1961ff586b8c9959c54e8631df2158d7e364f5b8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=405fcce6f380b2a30e3d90ba471ca5f35d24fe08, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e1dc365549e9760820a29b8ee5a0eb035f9efda1, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d2f686835980a0476a83ad178b7eb097e114e64, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c3f9f04df6c862763644feacd7f4684901cce8b1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0c29662d8596b08672073c9f4d0b87127fa02b5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8da498985b0dfff6e8585941c9435b5dfcb69ad4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff416e393cd3ff8ac026b2744af0405493e8a950, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=da64a96e5a7fc42d203606fcdfb2a4c8715cd6e7, stripped(>Nbjz    PPPPPPPPR.RR0RRR/R-RRRPPRR0RR$RRRR RRRR/RRR#RRRRRPP P P P P P P P PR.RR0RRRR/R-RRRRPPPPPP R.R0RRRR/R-RRRPPPPPPPPPPR.RR0RRR/R-RRRPPRRRRRRPPPPPPR.RR0RRR/R-RRRPPRRRRRRRR2RRRP PRR0RRRR/RR2RRRP"P!R0RRR RR(RRR RRRRR&R,R/RRR+R'R%RR R RR R1RRRP$P#RR,RRRRR+R1RRRP&P%R.RRRRR-RRRRP(P'RRRRP*P)RRRRRRP,P+RRR,R$RRR+R#RRRRP.P-RRR*RR)RRRRR"RR!RRRRR"R!RRR"RR!RRR"RR!RRRR"R!RRR"RR!RR8 8ZgD@utf-8ec90316aaa5b1fd7be2c246306c6c193fcf551c9781987b185c7b9e4b2232f12?7zXZ !t/C/] cr$x#Fzd-k,]uAR-ˆ:vX⸝=2/Pょ$呯G.l &hhC4mUJ^6OIӣf LZ. #Oz'<]S"jN[+@'R gfSh#Xfj$av*Ø? fivRYn@8*49g p֎ecŪ³} o\5?`>[dyUC 4ASD7]Uശ쎻cpw osI i'ʹEJ B> IM*_ϲh^hC?ԽcW$'E [6ż_Cdjg?SIyjIBb@A ܌A[֡(+Z}S|ulCʽ ڵݡf[&:{ $Y{p!Q-&Aե<0Q9)c{~R( pkkqh%V, gxCcȋtrK_ԡ$2=P,4J =s 1crź"!u@U 1f:,Ί%3LZs sbi5_ ˳_!-amD;48"b[ҋ 3e% <߱;e'BLڷx`.ݲÍA+p}6Zɋ(x#vY|=(0_GuDF/hx^^vڴs$)ׂIxc㚾D *̿=8? 鷮!dف[qo=}{A6htn1l+X]aS88Σi㔲OB @9>tT3owD}h !x+嵌hʪ]#Kj-H$[O&dU[=o AOJ~Q(EbsV Q'I\Bσ}^œ Q4în-F +G<8ˎw$&\`ܒS0[^zփ|gb odzيl=Iw_n=C[Զ2&!4S#zڗ)X_ ibV/E_f0=lu.%/ܬj"߸I**'<bM҂Tw!&L}U94 fGSXr&D}%e[NMa:{FB27[\k{bY]'Yb%=YN*W8d: Be)%A, m;6&'td&^^GO&>$p t4ɪR s}vۖqcH2X|4/nFjR]䑤m=8  .cZ% & *{Z ̚ņߪH"t5` /HY'-jy49'hOC~y:Cu#jMgNZ-4nY9(P~le$Dup." %Oe^8E!jo'f!qLr /MP2WP2\7.yʂÆ|تW5N\qB|kvu['P̦w,G^2usA[r {ps".sih/Z#bnP!69=J}脧wb>o0s#gG[ 0s俊e_Jy*V3T \sciz.=tOvcύ8Bѳdn-4rAmlk)iTгo258^:~ur/@& o$j fs֜͢69]SOxcjY~ӁSg~ʕ0tYvI=</PJDYxRROLV06\yuojg&dZ{fKA^ڐilT9]4l[ 'C5%mqqOHr\2] )@j(P#!MNRUq@bL۝CH"r\$J%NURMP9MCC6e)* Yu6KnjN%Gơ5n5/7{P{Ŏ`($!LJMgts|;=URa_;gPܜz+ xh6^I]WB4O>c6(!fI*I&D8R[􎯇~˺н[1i-uW!eWh2w>E9|J>7qmKro~J/VUboYc\:@w(JQ!8%p̛LJ0@Rm6`G_\'%.V LRp`Ky×~٨ , (uTRˊbƜpDv{UԄdBY){ ȥ=2z6`I.w;eښH**?-5Q9!S@)/Q,9 y̫[-Ak}q9H= Vgؙ!Q<d l^e-D3$G\@2My4DFJKI~*K3e ,0a?!_@]C[=+Cp/PL6 >d;BfbH,#衴^'z'JVp@LI߮eԼ/%,ݼLCD(Cz-qUZGaiʗБL/z"=LXR?TGk&WZ/CI~IO-/oYK]CpG,5`!UPH( I},bIT*c=΍C Iݻ-98;oDD`Uz S/քqCXʏee8 Ѧ F\E/\zg rTU^]PY+#*4] kEY,vG[GZ۵Ei "pLR:=A9r"xvґmct u7)1aN aEwcn:ySSiy?z.=cJA= WP'e-?RFfGj]W ۺqs:vLJČAyشآG~X5C xΨoK4H < :[)(1Z%\ۧ0=up2EeC}Ȼ-;S7<$&>juz/t⟭"6|9yǺ:0uT- t Gi'9(F|[SVhJ:|e+2yfPV$lQXƽ̆e ¿YFz7ۃJPCCyY tPT7ِg*oy܀~5hc`#\r']Ox->;)\ beFP})*g' Ɍl~oWq^΍x.Qob{UcfXnk&lhL.ep RS*8Xk'I|쪓.%C4Nmz܄Ŵyu1))hiz4E0q|1O@]B<>\Ve\O?lˣ:sc_aGkեס! &1\6!W9GJ^-ygVW.+"iJ\^q0WHN= #{,X3r-jF=*^eI@aq7=C]ͅy3Qr%Սz"-<ʞL)Д^*Zc(H9:~WwFLN,7,SVBǬm2L`x A~ D$.\BZf캰-6_ Fv*Dm=ìjUZ]C4\;׃ d Ck-zh]]X_$yIC̘ bmSlhN^HPD@x;QѢLԬS4 trR"8<"iXjD*6 '[Cq"RTnMy4 랠U_BO1AdfnJWKa~X@!q>ib(ټ,#|Pl2mEp3XD!q*yviL:\{J1H!2',t*eDc7+8ʽ+,S)UQOݙ ɗR8kl=u "/Jgnہ:ޫҚɗ-Ÿ`#Z^iT6eGP3JG^vĹf5SNgWn16k.|[:^ZLr١OU~J32ft+/hQ{A6^za$udX->~3I)VU\M?eZG{H(f[ŧ&w0Qf4OrCݕb%tt6`RB,6rr@˹`xFjJ|tg&6Z>9X,x [KACNVvp|{LY7r@ mJ6jHzk+o 9e(!\+{ ؊g14C,=_6_*\[A%؅!0v4:N]Ǫ0֠+a2lʖ .ԬbN/`/I#itYD >/,4'{jlpbtq/k|-)WV.E^n %.WpX@{ r)?>-3R >Í͙.{eDc"qshUZ{2q{MGqsFǟkoh)H ?+cp.nxӢLkA|(p@iA:sO;|C iNU&ͨeb8=U"t>Qmc+PzғjfZ\#^]BRc&]ĻZ8Q:8 ԆU}d~xT_ϻQhL{q#9Qs`N SU&s.ʼ`aIY( Q-j~- vjbk),{B 9i oEr-alϊj { 19[{b |ffQ m{=։FԻGƜ.Gvh0 IơW'h@ |>;nF ʾ,u<ݱkbc NS|Yro͐!}'COpc(g"M$&>;b<.ăl ?YB{HW^hJφcKrHE?kc_cvؐ(/dq]rD/&@*x'eA^NJk7VhLVǡIYQ;k@s7℡˛!-[qcq OOHO3E?QTj*2: se7tBP(;w1.u~l.nc а-mQ>{x S?8@^3F Gơx_M@W 0omƵaET2uʹIp ̒܊QͦAhw n|s!h^򞇨ɫC'$לH?zA{ !`~ qjٓ_$,2]AO(;m=M$9Sם-71#Q8/i<>͈[?b}_o%aAqKbKHLSq}[8:YR80m>%al+̔n[MVVsiXjXJI!`Jٯy/Ppو@_̻nՍĤHw]/gSS@(kîU;^Pq{^Aś<-d),ĀS$fUy]g"[7ݩr額>ޛEaČ*=̍*#ۍa^ȍ "¶ L\'݁ǜ5;%Sf`=a*R@7C* VVC5hMLUE#_|cX=וzhOs)OG1bcyX-}q_"y, ;̈́sUC#Z 4B>l iNFRKtP@}`[g^z7!ݭ)7sqTۥz-%߹ꭌr38xS1k nqY[!v@ԍr?xkPjh DʝA4B+s~y(__0N3JmfzIG.*,RfZCf1ˈ+a"p[{%JT/mm CuӰ\puLHg2-j@ O2fDJ\^AZvQ ݏ¢1f$_IFkBzrmF66@,ӦH+nݽ@g]0.@҈HRQ|l]wz} rZ]IWh8 Oxט,*hb'ɫgɡ O<:iu|@i7;ַ&@Tow._x5.뎘pO."iX`P_1L!5akiCrȱskν OzI'p^EKU~y]$,h ŘX:PP9kծvw]P_31_.㊂LXJ dž/V}< 9ͣ]"TǀwFTM{8Z`oMV7MyL@Q li!]_K/c8?gtYb|(h]wTPwnm´3h%e4&4P6n[;9^''l޻ݞ X j j@ JnRV,)M".aBEߥ'$HG߽? \œVlv /ftYWq 278 u"2{>kq<V f^#ms̺"MiZwv[b̪lm2ȍ%QvByFٕo *(lK$ ( Σ vS.ys>yBnD>i{]d(7#q@\(9(,].+M=k!籈<]V/kO@|$S4Mj0C2AC`'rBP0h>۶, :xԒgY9vb ji8i>xs؇K;af523D,C}h(x@5>')<<]; Bt)ǹsυM O-ڥprY|A9 ;C`gVwd$JrupJHSiJM)Q~RclCK'0zIq}XYޟC.ZHq"zhSk("! 3ׁ4;VV(DZD_m_9o+W{P,(J|)1[i }W}nsV0| 2!0+ISkp1.amvP_S\byd8MInadHr3I\Ja[Bk#<0Oz?b3ý % dY aдq7Uufk'a`hBkLVFj9֫6p+'=e()fmҝ `,Np-"٫ANy@GpN 4MHg{cX0P! 9y}V簤U*CKr $A->~Jw%qEtHRX,mDx ]kФ_}A(='&/T=j{5z#<`Wg<]My_(10@ek0 yQq^ִ ) CǴy^_V孋r!MtBI+X\wdS"J]+BȽ)&}`< 4trg_þXMͦPw"bs/VvWq5bX gPe~u /kۖIgнH쫪C-*u`|I{`3&(Dī]1+, nF<ΰN4+z+JhK 0i"M9l +UY +lyZ;#+%77O騪9W.ed͘`sFXsC&È0۲%hTJg}䫷ݸ@L"L|Dim>K =)Cv)z֤+*DOp·upGeiUݔ=7#/ceu"3i[xl?E\AԒ;̙81 iʤ2LBJ G83)WW5aM: (Rng3ͮ2/Kb>]gE~ 5D[A !8VB?/~PH2V5w wTڰ dCJF][ع)uR#F?@#'t0`4p"I<@ )Tp[,k_3kJZ$h4:!{:)&*AaC8v΍dlԶ'e1SOƅ'L ):-ͧ8'u}C% {U*B~<{khr!h^,EZ$/VVG7_E S9K8SSPC0h6:OHBKS_ %_k9L9V[|&B*q֔ޑ$7=XpI(H=1}EfY3NSVUo=,{I 2eG +۝kb U\hkx6ˇB7o4yPmy(c!gw32eL9gqGA+vb5@0އΖ[M~C8̉AW~O9. dB}[ÇMя\zM>"\ޕAhhW>Jk,7#(U^[zzX8y TzRBqu:AWydm]j*G6ޓ#ozLxQ"CbD(VeKPp^YI5Q)?y>1Л6%l'IrF'fRpDTh%=]^Zʭf#wykTgAFyNLd_b|ƳnlԳ 24uVQ$PxJ`u{YE&$cWv(U;gH}D fpv;-4NٓXt>,UPhnXne%'zO5RR{DFroVߵXV5hnߧN&"i~ < #첢/(~CKS֡7#5/BVcC|pEM&MU KA51P_ ˍd$q8{Q>#_Kg  "P,.)=UÁyb,nɜ) 6> 5ҽ,ݎW:f8JyI8TUYtsŸ\ #w)GocD= ZPqFALpL.9+bӏțeaWd2i;94h]ۛ|X?R(" %SkT5.]-a=*L PG9 ~,,@ZY*9ePk kkerIH&i+ֈjf{yf9 \ؖwrRqƅwc<|5oYby[oFaD^bhv;C3-rV{ڙ96HF͞7Q7,1kCx:VI~-7\RWo|l1`'/7Dv$b~.OEH=šfD$?iXM{vX0>h O@?8`ߎ,5%kryg)v {VڠH['G@BMAcU39&.v`l8 sX@=42_b#=1XRfVlhTYr0BRŲ\&c:homhʗzJ]Z{.̖ }6F;w(8~H}28'&\j ƒȍW͗9DG7S A2bDoAsPwntiWď& fAHۿ紆h:G7jsב,Y݅{CN4G-Z4mŒZ@u;k]RWOP+ܶ[/SCZ3v3tPSM0ă[uC߅R-}|erkҨ0w"8,2eETm/EbH!H0ezUq@aGP22k蘯jsV;'ΌΠF#Ξb}Uo5i%41Nպas*3ڂ`5(@ΐX^TwmV Rt5>Oy"܍q@$ UK cᒓ<"8ז.|C0 }<Iv5CӬ `zexzk$,. V3™1b#F] sDNd0aWLZ$ڞIWVs'sM٫ ږq |f*2?Ma$wK"SM%^ê+ iS6>IXni!QRVh}=k)JaKU7>xM&{GXȌ:f_M;EpU*Y WDԏ̍xS2jX6zZ1&3+}L2xSAy1vKzf]:vM>ѓՃ=}.Cu٨75n) FTxo&<d6osѽN^ 9:.d4~,x_ky(F\YqH^=;AS/{=N6Aw5B 菎9EuDxa@ofIK\zExDP&t4VeZSKk-O:έDŽqM@j.*oN6ۈ*FKîHdlx}}VXlF'8jU:.zU,rxSE?CB=%ieB',ITZfTu)zy|I Y~r/.UM#֦ r ݼ]4ý-"U?E@ 27\ƾMz E]\j_8@Ͳ޸3~zحzGX%1B*90&vʳ=.xa T}[(bb9걿ӈLvˆ[#Hw5m*H:H*s&pߤHOYI2m-.VKUio5k{!>p60q褋\LO}c~N6%LꞭyߙU<Թf0on} Cggmq?4H„vޫ bs&I.<.KUaJURw{*7HlY\tm<=(9G7lԗ~=HD/eUb>cguK^PhҔ"J6T͐ejEZ)*T->7A`K8HjYKOyUwwB%Τ^pǹ07ʗY)fRp#M/ 3*3؞):*.n{763 ÙD. XpISq_ 0Pt"nrϧz5]ڮt/qHM2Ʃe]zU>@#W*fhSe>>qC}-P}~<90XN휓"Ub2 iFGeeM+$^[97gqq̓F5Lw2MB zGKnppWHbZ3*tJjџ0h WS.8Z ^NKH& COVh`9"1v-xucA"FdG"VpZQ ʆ?xƾjλ[PVfk7z{ 2I"VsPAb^ˁODŽiH26%W-˦y\Sxc\٘>2z{umaG4$K`RkQXkp@̰dȟ;ڻ8i1jOeP֢6ևT!c^h˞yM0՝wn1XΤ: v8y#w^C0})ݤMmy\#ڻ+KLCU: |+T;d"W0\F҅u9sl͠ Ssb$;SGv#pi11xXjd^担 ;::4<2٘kH=lZoqG3d ;B1 ʹ숆MvLh oe0Uq"rK)Ւ?h9N` wi*${mB`kٽ(&w7.J\ ]JN _.}lQVLfDu.j#uLfd=3n5b3%$׿罁|6;6xCWhaVwA!w8 _4K"rL>Ho(CtO n=Y퐮ΓN|F^bJ>OR3c#Oh*dTŐw?g$ȵG^aA;I씼 4aoZ$p'BӪI"rG,CFGI7'4/3*昡F y@, Ǐ8&WK*8% LG vyśz&Ֆ׳pW RBh1+Yh,G=1l6c\`|&M?gv6A+H|5^Wn/r>a th)Z\:r4&oi) WOJK]d0UKz5esJ.c~z_G#i!K$L`Ҳء*r"Pk[ٺd; 8Y =@FAojEdi8H9Ҡ_)vaDzBU:x.Ŧ`Hlp0[(kaѸ BvW6aW"˻yMK2aQ27c@,F*4iL]` @M) T~Zryvs2T9@HzX~׍ݤhLb! STreOyTm=( o_}i$n)b/r.Yct5 qJRZ޹J XF5>-QmNEx~@l+H(;U?$}au4K,n9ى*"Z`p-ӱM\zXr:bpe cñ-EȺuw. \ws".3и$E"'xgdeBwF7veB ?6X?C qR>/> >e6,`3mה *?y6#ͯ* g KMI]IO2TTKӟ+҄GZhVU\>&Զ^/^:O\e\#!vX߼Mp6?uk& ='DŽ05[A|C%/Oϥd*+R .q9[xnjd$~} En D=BM|<// z I25y=3%|&0UǠ­it*򇭁YKF$d*ӾگZ aleY.8,軿aVcqT8a ֆ}LBQN~M#r:hh8eaͤ9G H~n9 OnT4 ,QPu"v'X,7^(KJQd`{MnPf;?v 2lw$8N+SA22lpJ[#\Yxh) ނ=GlSK}0\!D Ɛ(8=@u߶T+!aR(i"ma>wW .Mz*v֨H|M5E 0I*-_ |AHlxy\=1:oPޫ@7aF . *zO! p;mSSB MZS?Hb0yHd"gL7Lzf&F6VtDu@zӥó/;] Y2㮷uaƉcbC5R󏁩֢Pp.aݯ0h>"Ҵ])4Q(q(C[Tr􂺬_) sf8 qiJ'G%C; #64g):S> ؔ-SCeԮi)#ǯD^iD/V愿c Wϋ\Gics ?n (E2iƕ}9֐440cRk}~Cl t?Py]n>iSAਧ(E8hʀnO*&"@/h4c2O.eBmEQ wOMčvh8\+`!T}<2ȍa2yCM; ODAͼ̐qEz1D~Z!;A4+bU3>IvdJƷ}1r+;: qʍdH s5*#S( Ю\d'HP rgk  9s0Y|{6Z52rY{N%o}[LsDdosc -]d:vi["ҵ'{QB5PrNy;RޥXquY]y塱ljٸ{~5jmZ˜\W RH6pgiܘjd~2/gp9:&Ł)qj1 7@эv4> hcj6,?U,6~V*@4$V~Iܣi+n{6ڤ0F=bv6'PͶ 2c]TJ*+{VBzaHƑ,aШɸT}LF`nb#~l=M#k kMWSMlvZj/hםzŷCKO^a,o U]90 Dٕb4[u$'PP9I0pX.p*)7"[1i:ڈ;'4TgH/$JCg8Gwx'5sZ='O5r.[}_d;_+\\?7}}$y}34ʥ}pR'DBEkVGxH|E] d9~-~ D]ճťN5߳ Hc8[릏D\Z[IhʴDJkKoRHrNh k/w9Yb$a4;M!1'H)}Hி|fc7AckO9P>lü>UB=Xҍzݴ|<@;7TjO0y^ۑ2u#էc09U\rMt,Sr[[`EvfOې_Z< ?lSl*HsXӼ.-;!"ZɊ[tY³<!wٶ47w!RS\/zNtyk%sQ@ʻ!7 b Wg#:GP{/V%M2,7.>.%M]|WY(.յ8SxJŋGT%8^=14OS# .S{zXw9LT&C3Ή AP!8Gjr%˖K1)i3jZ=\>cs2WIa*ĞIH40 O2x p(YWPi$k@ nRCbZ $.X'V_VWp|'HNVMT~QGsaF2(/fqT o$w8L_әP'@O[>[PIYVl$\&lbS/bbJeQā cv ~H\C3c>S&0xm79д c}Lr=1!U jgy*b Jv9-9u%O_*`5Rynj˔w"ry7YN`Kܩ5^CB|V p0dR >]fi #GJwFʋ KڸSH;8QN߰|Ze2TӘ%3Ս$ǖn}WuIɇb(so"K{v|<*| ~{쉈Pև%: ,%E\_=Ŝd5M=,cM36]{+L3s']ɚM6RYτkhRorv3p.zOZw]j")SNCľMlUKMaOe :ۆS7P]'ע-GDGUJ .+0@Y|79W㍋=d8Le{(>AƆ yȞĭU, t#F 3Ϫ2ըUJnoR&2.5).'c9D)/T=M%el } B@\SguYxeȑ)z?8xQVj8|*&".1VGBӉ W]r3y[KYb&7dn! I/As@7w$%L,ݫ=E|Aec3I[EHYuc&\ؤh(1X׿ %v M jfˠ%ST%w{&gTJ7!l]<#{Z"ŕ$$!t!9/VA<9y_]^Zq~=h3G PEDR+z`q;#S=2Ea3JٸrE2L*l': O݁өZ1b3uU2Z"Q +% ʧiy8 7.G% a4dc/ByJ%JbҵQφn\weD㻵~0{D70f7K:'ZZ勿5)x!V]:S_yWfI9G=Et0X RlfT^M1[׎4S&|+{z,C8*aIFـXcm=1P\[_t^kց:%Pn(NJC%b0Ŵ+՘ge @xå"d2ݫf5k6+Wzi7V&+kP";#ب;&Chؽfjڽq[yg82o/-ITq#N $)xlVnT$>K&<ޘ;Rc~<τѨ1cͨ@t@qnڪW*!!ӆ\e; ,JY]W6aU|$^E)'8Y;uvٚ|6e|$9Nl=UD< E-;PCű< ix!t@A $ (J͆am3.`*#+%?x|I[C-j,+rRRDܦw鶢:myzd=a %^qw4t˧f뼀>]yy kt jg?V_urKH>tm9E'zUS{@>SD1xGMG|/qugR5߉up E`2 #RҲ<д|2Ԧ@ĠP^N⫷*oFX6~gr}Hԙ |V})I8J8So^]f"iZ)LV%X/μU6$:]m3T[r ŘL655h@6lh J&t)dB߸T*xw.)eeև/GS$|%|j1TʡEh#eDJ<͙Z q|1':dZlou, Eb&[K;5ĥ2*CzŹZos YnвAk -Î7#?E1a$K0m9ry 2q j$w8ۅjb SHq)k HO-8nE0~-* OH vkOvRΠ~}"Ute @Np%"gs0Hjn?:IύAM͗J(@8ZFja)덲ym]Ԫ*({F+s_c9{$^Y %I9u^`ɱK56%lbkݪĮ9* 5wӸ=!NfBe VS/yϱY_V<դ ]Ґ-FE0c&-1LzV%m33B&QAJE[Ջ7|'"`;<6^JbTOaI%g"t6c/UlI!̽5q*ock5S!цpf,X6N 9$nТ)uY 5i }!eH і u?3R# x&ޠ@SC|XTi|3"vdqMBCȘF0)O_i]bs*}SOcp0ݾ-:UيėLq'^X̓]6(Ϯtw&( P =/=D?-N겲phHsDO4bI)OyrUkkMgXxZGc rHp9[fF"*i2_ PFkGPAŢ@@v!M !lqV٧$9,ՁN4̡7r`&IWzB!]|'6!.u[>E'zGyVb~3C"~]ai'df$(;VL^Ķ<;s.gk~D6Vgxe-מ5CV[IX?%kVVqmSvc`7$k:\B̰L*u_+( 哇$æ\f}@CN:"*&WPL/;e2P0,v<hȚI!P:QDsH\iA\W祷F(Q 4؈IG P܋13Ǯ)P ,ǘ7XZF=m{ܫi]0:|2xBc^/- ==t1{wx!%W4G8*Z+q;qG,27G0p_\)ܳ]4jV6*s ͱS^%FOqjyurWV z'+O NCkDA8ug387KFXB`̞-0we|Oqh X n\VU8N^3B;V*~ͧ1# ykK Ȣ %\ZF\T7!GM4>^,y{q@|]`nGzWxnI.YD@v%I6GFG|vt q(brP#Փ$s^g؊AddWrs: z~㽰N`SnG)Gpv@bIOu+}[0XcA!fd f9J|@Uettl08 z'4ъJy_+N[C. d|TfĖkƕIyzgN`I$(U#]}aXe☳. |YeP$/{P8v+=r\<;}—c1?yEi-ߵȮ!/M膟mɇ2iJ7t{5,3ȴ jU6F՚Qf6,VHMWi4Msú#U}vMջ4N@TE.@ 0 ^ ӛUG[' ltYG-K~e nwY h(@6^[SDLˆZK6ja&ՔQ0R#eI"Q}C+2AEptvZy;lE'rnQ6%s[5дiW'nhqм_&4R-V@C>ܛ"(zQ7Q*pc-9LS %] ~0h Nl>g[/yOlb;P'P7`n&9MR/*v0oN1=_9f TG Eyp%oZZX6)5 zΆ$x)*Ȑm2k-_5U ` 0 ĺxk:NO\w\혏)/=؛py)NدibVL;g>7T@zb'H4D )[߶b-N`i={`&'/`-G^F ɭo[3%@yi^ |wfJz,"ȝ[mkF h{ﮨ =YW'Ӿ\o۾8?Z9cU? =Q `D<`bx?/B bI|Kj a$ Pyu C~B/ӲJq9#7_d'bU!cO^cM&uS]?)r@ Tw\Jnuqi@@uQ5n^aƜyyݐojr)HUqd:DNv4#(wƇ/1ћ'cQۑ$|Zޝa%H߭Ad\`6%|` rf/i[ :}B]cM?ϊ'W7z.`[hgtd!|rYjfyH&B?c C*Q1sa8#ƕW7g=*HIAhMkA6^+=Y5.ȋ*6>^_Dj®Omd9UD{(d"j~?Aov1(puAGF޵B{J?j A(scAT͘kHrWȘulvF_ ob`Q*um~ub$D xo`bI'fv7 (3iH$UmB ((Dǁ>BprT=&i1%4Q>雸xLl_5m'bClixr)yOei7VK(^䨦%r WN"sqY֫c4SR&S;Xo{5п&()cL~R=20ڙ\c&1{L$!DS C$&FֆUZ/Ӫdf?H-?=h;`>6s.k`'wо[ccmEf!WI; :V8v})Hˌ[L>=̯`+}:9| WanYFN21LJqD9 "0WdNЪ-'RVyaMYFЗ TBo1T=G`["Y;2e;8,~j" ̃qWDJ(2f5$}b-eiє>-#bQ"5jH07cfE ~$Ĉ7@V.2Uٳ͙_1`X$UBS0zi)9U ߨR |Y "؋633TkJ7"GDžoW7t !gm!L4.==?Ua'm[.Ybe"CKN_ލ#yg|J'Y69=*+ vFA[eAX%g 6Hj}S;pWJt}*fuԪ7sՎq8Yc~vϗ/_a`)ZK!7Gc  7&VB$D&iXz0b{y?D|yH5)r{m=zvfȂn7EW_l l v.?{JV"ug1N/`kLnxΕ7I0]X|p+TBoF^ChՓ尭dpQ/g1ƈ돢V-dc5C2oA\6CZho^v*eQG!M Ai*(/ͱ.-}om2;#B{qEc PK$s9ؾ>!%ʡJ#տ[_t)3L)pV]Lt)Bߤd9|}+aS>h_I1P FhaE.<;9I#կ$@S.^w$ ;@ .\q?,ޝ0&GM,7B MV3ό5`^-Ttֳ+kϣDUYiOCM*u`攺$~#\ER< ]К< ́ʡV: |8CX)@xL-G๼A p+_/_BB+:6r'H2WM3D1LI)`0x3;WG?׽x>x1[Έ Ui )?q<>{Kwv\7aihJHAPb8vD=2RI.0P^R؍aU@%w=IGTNY].Gj)MgqbGMUjeEc6NJH<S^voTƢ0"ܸ42^Ko#bE߳?.4hjYDlNOY=w͒U:r?›<. r֝2("1i4ijs^},eȔx簊 HȨ]HR7ƕ#.ɨxꔺu Pe]SqBt,կVPpvFĨaكx=O=>:&Tk,huݷnwzZ`OIa+2z~xQjK&3xJe U&!߸)}][fipO@u4 "˶yQU&1WE+Rx^ ѵqB"+A*c^Ȓ޶2f~՗5SF*G%&^W:%Oks!՛g7]ڸԺVODY w|u{>lh"_qqZr?Ԥ&¾i-k|&L6%{Ͳj292 Dܪ|E`mi+B[4-ɱ(S o&w_ZQI]|Ȱ%-QBF "EFYc<*^`}>{A~66Qb)^~ PL\MZ'JxT#O72t_8Χь~nl)'}\kn}_ kԕ(.+@(<1?d YqBsJ28&ǘe=}fX67"p>5H*P8^;ː7͔VMğom,![?C:wU+wT3)m{%.3Mcq(oa` ҟ!R(y//fG6^% i9p<|xdHRРL'BQ'_A/fRGdh-%!S[!3ka?1u(}U4 p6g[r,.5ڴ7Ar]SB/bA+0aИQ|Z}X)V' Jn쾼A,+o/ppA1`^%s[\^2L@hFy;g.BXa{Q O7urKֽ '5A] $&? &[㥧´åM$Hr {WgDkOK g;N 1\j-T(n' Yac!E d"ofv=B%6rjY5xB^9Agj(dI?R+cQO Gp&mbNJF]8?Dy[i,2Xx"9p|<яTc98Kkm*V~<8E{Us#z:xU;?hYX): UrbߍAT Wq͇x0e|j![T/_b$P,V*ʇH:hϧ"D'ɬ\g[BV~"coX3P_Lcu$!tC"J*tu? hz:FVe "sK_ÁT)W «[J50"OUr \KAҁꄀϳ¤ŬA;Lczĺ۾ݘNMޝIZ#ݫ 0ϗ!Ӌzow3tZgIP{o^=3]TF# QFFʜwb[ЌVa:W[vnڿ&Q$09ݟp]mqgN}"=#7ܚ5'ipXD ShCWY$R€bz&$>x8 l*MMZ%( A+u-Yȕ }TZcퟔDݕ-{Ӊq4n o-}ިŸk]#y}?ZMaL4@}ƫ&GydCFiUHV ->\d-ua J m/?Kܒq励|J1׋b0+YTF)ܻQ}.C.RKkcUGm.dg;+I+ъl6n Kg'ƱZPT-s 'O}c)/A108ݑJ)R󅱴I߸ȕ+`d5jK:YL9ܠ.V}:!/`Gڻ厕(]a6HjIj~Lpv"49f;r-9 1uL;N#J-ː9_"B/NՄe0c`-5fxqK`3cp閗1SkawSku~KeZG;jSk> `OENKo$9T\u#P _ċhaN,&#C]eW+SeGE<]ptnnC#6xM9MNcRn`c>s =] ,A$J"wEr,FqyHLÍkn f"-st|DiV=#sO; =E~<)ʨVKOSX$yI}Kۨ{ |p?`9KZq95$Xx e2T20p39ఘ19NYUfN 'Òc:8I3:vR)RiH]A >XpRƐfҡ+M a A: -=\Y ,ɭJQ,7`;P#mVr髩f,"`G(|tjeМ.>*R8vi?i@֦ilΣ kMD&qSCE`F?ZP Gqlzv/4V.N)3t?^>9 o>G*#]ɨ Tmrd6sMozC"pq p,9}a 9GE>]X^2HlՁ )dXͤC5vC3zpMRĉyZpZ59: not$TC: pOGӽ[ VXhoYUxQ+ߢt d}K9A**"cd^bݱx)2KnX2@~śJV2%vPI#K-2:dY4)ωtZiۜCޥ i]+ƍ217/ѶrslPB\VĢ`V҈vp]0>٣D DcS]zZHQv߳#ߪvM~~قVCaAiv{7,F6?s9e D|k"EUYO&: rh+ZH;G(6ޓ<;/B|OF-btj_tWF`sg󑿉D^M^W{nǰb.ZbH^klKb9+@ w{lA"۪AHY ab2 K{kސAz(ZrN;/ >2 %ڪA6]m[QQ(JE2D$/l|iREEiOf#ԶlFX]Z,3!Z:K|'<ؠ#X!IV # m4{.f#CyAlei,aaQPD7RWvgֆE"~ҹ FvG.("U{x."+ 9h7v"߰0Lʪdf^auYLr=3 Pҫ%[sc u<u6ef>k% r{Tu0 Ju獛%Xv=nvѤe:,rT{'>`a`U;$Gy462&"b̌A`Pm '(k0[aϣwX vd57- ?x WJKu--Pش4A%KrSŶ"u5SHR’(Uf9(k /T"pj?*E(5g]]Qt8ɎR$.X=p`l쏺N";,X^~{M8ܝLc _vxXxJGnw.o`fV},& &CJs ~;IierG1duqLMup"8Y=2 Vrl7f ɧB!=]_`PS0 }J4#; (#x@,I=]Vg|]a&( 1umG"Y"$Vd#BЧ}ڰ}&,~NJPncrux%Rӥ1^^Ƴ843b(usO-~!b D)wu;4}Y†[& 6; Q皟2yG&?SnB].;~]Ĵr4j zQIg&%IXPd-iocr񃚸r:R%1''%˳{gN C=-NBiſRoC,jX@9'ZɇT4,U(.7V$[ _͡Y G PR< 3k;K:!׹]ц lo_;P -BIjKp(fvzwWUy"WST8=>=:KpesNs~эnɡ7xvl _܃3*]YY:5X3KJc㓕^=@Q%7Cd*C W4n;7H'"|L'c oM_?mؑytϟXK e/ZbG}7fa!O46i7Č+_kiZc=>!+ZP89!plF,#%[.`y! 9 pN=qcHUnehcHP臘b47Z!ɲ&Y$+׷+|z5gʍ$Muw:bz6&lv1үUVB1#rWi7ƺ@Q0lˠfC!l2d)Lh\[K3 @I9G-)I h-Mwp9j-A&Zظ<`?'}O q .¸( sx]NLd_vvVzX-!CzLz Y-䘉3( sx,qdVctz5.Hu[  2/qm T4$ C~ !ـŎS9ChǼ}$nYZL&?pX6Jþj >nt21LEI` /妣3*ka!YbXtѣěJXgAE:/f-$ ]uRgDZ^ c wYF }{qLK$1ME?„YRd2Ώ8Ucv\ YX0,N-?MA,p[\RxUgH3e5R w!lzs|]~@,9/3D,/*ΰ]3|٣!M>;mW_d7SHl',õ*B5k pRn8:ᰌg$6{O< n#_ׂF cS7zv"V|2ظg b}3ݚ0_3_{^Cxb)t=`Y^9L*+%$6&S^[xNHz{d8\[ "FcR ]JJ2ihcC)Xia*5b) 8,;X b_ _g|EtJZ@+m_3LKϭ9M &pTH+7\F㞕)&U;W N4ª'eLy|k r9'5,y˜Fpadu@#Lۗ4D]OptXOژ_[Q$G'%W/IS!穣bV 8Cܑ [nn*)t&N/rfΜ 7= >X[f6\Us.%'Fb-"3!90"ގ?/fg%08`Ә4E'+ˈ4 7ج̃`{&ښڪ>i7bF-(x=Ơy$+A1F[/E+`(hW?}@T-Ld>dNUJ< vk`DI t 2:=}vzYtJ[=sz}#wO}7+WqO$ ZT4b]|h"/M)vBMzWz Nژzl/EiQac@vl ZPe"c״ `P^ZhsV_9} M;B8U lw_~9zom< G`Q9xd*7{_w]PEcNe5F/J$H6bTɶPTL(iqr>L2x?$vփ6,U;^@$;0v蘜/L9yq-m%#`aZb.Ȫ<ճ RYh#JE8CuL܂ ,j$^G6I7uw("ޝd-[Wa "Y.Iy4dZU'iR _!]K'LpJ]!T yݮ`|vT-Aaz AKAOIQɣM Y [$5n"b-y`=ϓ|qg#!"Y#D_@:pUk`))7*H0nKdSV_:˖/h=8 kj gE5xAyAc*C-so 4\ ;Ngp\k .=b/$`la+;S{" +>tzu q` [2,dv@-4 UJ?OJC3>DLm7E.CCpAr{ sK紞-[qCl.kB0%懐(.Ho3y=3D챏fI T1`:[# ~ ב$uev &6謘i1FMw%e E[G=to`QfzgOʃ -bBmV W݀B̺#1Q;ޠ\Ȅojl2>CeO<_%A,ڡ H8qJ뛭l]YaK5ũ,Rˏss[Ҋ~’~-`;ċP_zH PCL(@$oyL$&F$J7q/= В#F t'ѮLu@s]B КRCPSt7P~CQJαy\-5J{&2 [e/=HHIy1, ȇ\)*XFwE XoI6u}dI3cn}REO F{fzckM !b^z:iS4%3jeH*R_ƒ9wr? oz+:K5$ޑдŴ˫"0fd@tk)p7SW_WHb\J2E"ЁW//+WH~xn=3|3ڮ$.~)A}sz˧ݢP%0ߒwZlK{` Wfw-희T'0aQ+C*G;PwJlWK{0/\xE69ꨉ-K~p" HU3>8oZ`0FC')N@oOA+J#s"L3CRWA>/#~o6y53^1Cw8hvZKJ{"dw 8˄FCyF >Op҃ #x'f%"V畲KAK;S;.%rbB8j"7MtN"3@tuYn qE:%8V0ԵQ 5؂JߞB6YO^cXSOX6+ёXԕ]R֙UʥH &py'✋ Ǹv®v_C1 nv=1ٴF܍-6"+=Gug;aaC9&Dxok6H2 ;ee+ %+rRYI"źP;Lt:*Z9lPs]RjC"bǓ1 )<#t Ym)pPY?[wc1>^[a,K&O2 :>*|([#FҶXb'($Z7BXRx#SeZz>L7b Bo lMjp:\lGPև{gXx>,pVkȰ֡{Q^΂Ɵ‡=C12Ps`4{K7+GZޚTQP^ [ \+x4ЁʒJa+ɭҮo!Ռ }](hO"IU @45ni= /78̉7 "RsdH9|`H>EMry(*d㬛 J_6=.m+QJq ,7FtaWn{_q֜e]MU+jH]wF?O—K)= ښH35]ݟnIoD̓Ysժ2b 1Tw]d+:Z^yC{>Ow1׿AQ o/vdhfT2Qd2δTܘx.t- %dDckʩƹ˵<ʇ\-)u!IįL91,j_Seqi{N*m^cj 1C/3%`Mu? S /cת d -g j]ZIg8Pv ȷi-˕QВķp(OX&,.goY#񱽅9 ٍuh' ɑ"瞊SNy4FȈgl@Ƌ+X@jh3 cE̓._, }q, M9JN^=>G2Ji|L0 ״K.U.Mޤ7GBĭ%po vzԔwZ7˖둹~%m!&zrDtC76SrNjfTSՁDn}:L{!1*C>li693];n鞑dv]_9ZXR&ᘋ{K@+;S\ {S}@bgڂmVp)v|dgQPDub+ mE!QHSIRiO\7!ãyT0*Ӊw}g;@Ω6SV$k>J(nsEe4kIKvԁ`([/}2=R,PxAynCXdAN)w=rk=Rա &5u TH.j{23 X9y3#1ڧl!2/Nv\eUhF s㽹(&0NlR? mbXq+{z nDl&pg;A[bK_s>Eyy$K0k+Ja;թBCй,/\tdqAJ@HGz#%kY7Q E[I*?!DjU7B#0Y{KGl qYb3OdA_\ i/S{P&>(sߛT&{9eXܟrp}֝3es\y5V-g:,HM'ڨ_IIؐ^QoN?`NwJ“/B  9#[Rq 0A FL"T#x_ eA=RN vzGQ=0 hMuY,U̕LM/.AרpIt(hd Qඤ|L7Fx93\n32BL/iwdtJҩc`!6נ,opgp v-+niCYOQryw |nyPQ1{/FJ?1[d%"98kUKHf'l C,${&Iu(!7NԥF~׳&83]2On7|4q`wc%OrbϛVq<@ ×|Dn]_L\ YL#v !J$7bOT 0QBƩbxfډI#D"@_bkxh~2Þpo2NABXy}Gu񉀬9d~X7k3Ci٫(CD4: #= 8VF&!C|.XGҗl~ ,\pY_.Fy x:+6TNK0}trg*6UqX=Kj] I;H7C_ݰ6,/~EE_rJ9 Uv]0?ꦏe[F=*ĭa@]Q'ѧڄEc'7xmQFT߼ɵƇц5b؏՟C# e|Wދ}#,3t xr -0}`߼zcM>W>LY7B 0#N_' 6ycjR:V{an_R%x@଒$.p\pIHM^PnS/ /F祸/̵k~X3DHؒ(j;7\<PI-fi*hjeD;6f?t"/V';+:nw0?䴘:{p2I78P{nЧ*lOj) oKÞ&$ubT)mw%8N,K OSW"9kV?Wn.FA7%E$8f%2S[;S15B'o&:+s@>*|RD))eۍƆPmJ oȣ:ѺF000.Z2voEWHFHu`w "{Pۼ-Ot,]sA{/qPC)ob1TŴcGYDml\#l4Aǻ|enFkި>N U_P+sI {]y|*η49u^v!bU,V 9{ҍ .c!- j@iU\R`_:L{g0V/nb1x&7TP_ 6*߷8qMO6z u)zq{?)BBKz2DH6-eߚ1 a8>C@X :~Xو3! ^p$qryͪ).A*^}—R>̃#aXh34-Dc _?Nc3M!uIYZTB`w},!Iaqr"?4_ӏʍh2M'=ZB|Oz t\fؚdN)g#YJOBk˃Ηi̬}fg:.PA&xbQGZM`'mr7)#Ϭeŧb2tD1Z IWeHS|x9¤tiY*|nbAtQ] ]ImOv ๲+ auZvzh>*קּ +os><`1L {pV V Djϣ|ԡ T7] JW~ w]$TMAwX:`=TNZ%67ZoYmt҂K;xָ U n3V91nFkUPuA@q&hN{Nb+W@Ya'"#Ɛ)[ sa#XļO~E;Ow`([/0mbk^ߗRΏHSp"\@yD; 92F|p>c1sSQHP"ALz8k|/*>+iFd0^{V*LπM w[Ev .Xh".f;LPKZ1аG 0& rNiGC:#v(o*huمpfW2c4)&*9zUQ"AzS豮YaioK;5%JQtS>/3X>j,Tlɛ%"e yX2uD_PaMgW?3OsƇvyr7<`iMpը\3 BH[[ׁfinU"<̰SMGOP#Hwn2ETfQ z['$:~ޟț5$6w.鶩YćgsT}Lw"y*A*&+,6%.P,ݽBvN \=yDaQ=\X{a7ol݃qs !c% 3W!èv?p&xٜ-P{[r9W :CTwx* gv%6Pd8݃=ޞ%$W$ eNpGijwa!W~.7Cix$KY#Xs.}JeK$ B6 Q,{*ӻL]ӴK#&`pUCJ5WEgyW 6yh~jhHt^3bݑ&Ȧ+4R[gUc1mv34Eh rҙCΡW2.huڛd3ӣzl8a#ls3&dPm Sl@ jpZx' ԓYsdO;bFC xbv̇aY;&W %vp:Kpvd ҭT`@igʶ#F4,AH, Vq57QvFwcP0mwVߓkM̌!GtQ۫|jM29Dhmv`F*z8s~ U5E"E̞Ǹ'aw,kō[9lРɨ?`}ffULF\~R;DVi _ ev$XF6`Jk EєݧQ)7 TDbdn\z؟gZ0Q-?T(|ʹWpEX b *Ul`ݿM'$WqlRKӹ}&;g11P9?mAܼ۸]«6=uk}5u һxt?i(eCFo u V+,ˆy2RoUU}V?r*psP#(&c ,K._*ݒ?Eep1y6 ز/{#J/nlQ'ue(3AVCY>8/O|+#yb2f+H(HU;=;(bC>Kk;6fb'Wy@{yiu?Rҧ-lXgOo r5kgmr'<\SGM_`퐞ߔY#K~i=#AjLV$d٠= YwٖlX`שB62a&t e%?]ӷf0֞n6䨍Թuhl%~f~b}ڌ= -[Bk{m_?vg[gJ5oRk2\͜p J ȫ?kh(a]JȊ 㔽zmHc6`eb4]( .BomalQA8VݩHYZD0jn=%VmcPfh ӧzE L=v!{!q+1h'/!>mY}M/5e P`\yrpp`Fi x16Zү3mp*gޑPVJH5ӣ#3Ќ2mWH tYdbО!C[3+<3 oLr;Ո_cp>pį"9!t0Q'X4Q. U&lJ<)=?WSOqrзL0j=ylȟ4! zA70(9܍*oףKvIU/BW+NB $M3Elq G*Ωwɥ䦅 V ܣ [Ib?lf7 U{ӘT؊71*>0;tᮀp|u`l yaۚ濫P`A 6老Q?TЛN*S-<\T6΁f,Wrg8daŶ4_(fg#*SY"An*RU? j5y L)Sa_}w1{ȍKtmq.+Άp|5]$@O H`^_O!@%'~),x]f)©v7:ȗl@BnzCBGq-b,-`n0G]}%,oeJ7ÛP+J1 d7ߨ)P/ ߩxv[{n2ufMьz&B2ԮsW[JW\̂9sēNfA'#]P{h5hc2Gq//>Uw ]K3h!sBɻ_nk6,K^)؄,s ::YA3SGLlqm2,4WU˞-~ K@^ J#ɘR pVmQB0y-ofӺ\T4z40H^XF)#VUZwK~aGOuhk[UdA=Rqr+RQ<(ΒAQ@6{ mq +)SAoDh։}ߧg mZ! )%K]|erU{<1`/u9 X)&2 #,NsCr V~dRCM훱FyEʘvLfkZhl2i`;1c{*Cܮ(<@EJ #rQ5TY$j[P޲۱ХMTo9Ų P~J!qcR@/ 4]VJ3|'kрZHJf6I_vA8ѫ*3'bӲA !e<^2ǶJ.x聹MПCՂ&mWFYZߴ1kžaZLYαZ_G_ZRW+y﫻*RUS9˭o9'y?(_C96DҷmK n% CɗNݳ *@3۷'}붶"[}]@ryv?ϓ"yN)8jX>- % \@Mo\woV֮oc;\Dart4MekL$E1p"`34y|s3W?+ūZP$BAܪE AC}!38tXչu䭑$[vi|Io%2F4NK`3\_0]MqN7"؁d?CFsYӞ1nq.,hw jhܚb;7A=w֒ݲ翡XcXlSP՟m?p]\1Lň}i4r@LO)Qؔ?:S<%{y<)'mrHL*.C$9?NP-=wǽQ]sD7ර} q $]AY~%u?;JX(K,u`mzIUF+k2o~5&MPjH0̿UB`@[ûPpv3jMhΕb>١|O\q'3 ᇸr̤V3C8G'$ W.܋A#ҠM|p+x\MQaFPbBP=d\$CՔSMvGhM& Gq\C!TNZX]u zyG0JwԼyhECB7n6ZJYy͏BV 9"eWldqhW\YK_:w@Y"Ns<yTpVy|'P18_W1E˽]2duF6$SJ=VOh[K#A52UxDf DԣȔ1Eh=gi"[-TA |G-;k+Au/.r"0i#!$҃WwBp=?kT͂*i QL`/7 <ѝrZa"HP&jQ .Lpx͝bVj,,hr > @-d @EE_13Ǘ/^ȝ.ʴ롸}@ٱexma51v~:pl!a eR:z7>\zR]P*5[3Q!dlh{XƫC<*-^='~# HFp[jaiM>oڗwz"M &k{Dh|).b-(.lEf}^j\0kęr~@=bXXi f٠樻-$vAEVڕle!/3%Nʐ8# 7K-_v?<42Y m)6f6KyJ*Zq7:EM}e̒кl9kN O45˵ KfHǖ(":o;5+;OXGc@c`DN3MѪn{"vSTs=T[@Y! pYhח0r02Rp MHʯ[2WAZ5~p@^gHzR%f|HLwu9{% t^QТ:Dp=nk3hUqHT$v=6'{䵤w;UVw砅2M-/" *[B'mxD`\>=Fa5QWyXxU`|3.cּ?Fe&L;>ipC`o 4}zR WE̓kB$)6( %VcN[Z4!`펇j(oxt |?,_n:AQQ6  ,El/ P {Lspĺ2;yrj"~69ۨ$|YS Ѱ.ӹ8S= .x?0R޳ۈ_&됉Ero5iN[R4 bI4ENfjDrO8=KE{{ OFE8Ю+YFt886EBٚћPs&"c/A+̧W<)Xk@3QF9LiwǿJxg)*|;ѰVЗy93 æuef[9 !|U Ņ\إUf_bH#KwTYqINjt;(Q[KcWoal Ң9qF'6["rJEiU"5<9tI}j?W T)K{%6-!v Ţ%kKRS`\i9Z㏊{SᰚZGmAq9Mv9 g_]0>9z!x zqC%iîGjH\fE]DFpYiC4jJU^Jc۶qrI`¹…)%1$"5cn[[k@Cm,?wt8yu*pΊKcF{O6*AwO$)t$}7Gw{Nf_ q@f26.0|0U9d`TǠL7E*{ ot rKzlr|"\OB#6S LA+`OSzz[CGG4?ӽ4@$OcM&z"z CuIPK-Z1҂}^OoX7@2ׁi5jD)1%~z٤DH{ s\rXj]~SYs7L3]et'4f$:o}dQl,V3_Uky\6<F; 8(-;!"9W,<?KPѽRop1ҳ(xƬqsa4$b.#Uo izUr>rGO7AD?w-(1cP%H-c{&hXv14?1tPjtr=F[(rs'S<$+r.;gvz +V3[+]X6zm`/4֭M#+֜Vް6GYEsBLP$Iyu1T C*~UGv_0 %.BbލIʶaN٩wD`E˂'IgF0W x% Ef0єf-Kjh%%CFRDM]LD*p7VűYe-L·]# R;qQE߯K0&:Ż! }Fc/7018/"ÅQjWGWtKgە Զ4 iLKi-j5㰦P8TBG;Ca){[/]<@}qA._բ˩d[dHlnmUז|>3'DyNRa nw.Q^|Nsf9\86\|J$ZOj\/"vk8on~oQ8<뇣'yTvEI' l<-s9?1IQi]$կٹ}Z?)h sjg޳nju4)cUM $oLKsىT0M?^Y{C0^,A7ȆMu $z/VlROB/Yc.0h԰Y7!«zKr;@=?i<18e/Aġ(G]CbgdZI1GGo~o)y/4[W^z簂&rU٣ UOFd:!gɧxbk6MD+!iGpn;%StHBz$<~e2 # !beUg\U@0#GMA[ȈB!mj2R$M `E5ySSޮQS/Up(___#Ј2l93.60`Tmkfb-fݞCfRm;Z$bҏ. kv8VQx3]f@Q kcԱN--G>;%()D0yH ,D׷'9X[qs-c-g #JUq15$AG,iR?z AywŴkY$ ) ]֤khAZ[\)!hogTbj军 CwkZsep]w%&q)\R>K[~)ѝ•SުQ-bc{O:pLֈuN&d:Ǭ|%Ri. +%%+S5+a#`7q->BL*t/4}P}VjaT"c9! tVbk ?![J Q18],yf/R\7 9€4<VNq{\cHDs4OW\7r8Խܹ,}~jD]ewbXJ @Ql^\5OqG^xO;uepicJc/7vJIIΐOڲ3}8 T ϐw V5s*1)Ahw>M.&ĝ6L~Qh@'t_tl05ᥒZ-T'ak Uᕸ7u: S:7Iލ?wWzFNtg^9wFfIAN R rRIf#qd>-s,TV'Yiv8}UFwr1),r @6HXCkPx XYV4}WHl%7=02 3TU9s7\yD_7>EUdEI;L"ܪAi7kfVĦ?PA}q6 nbx5vfDoqyO6Y jɱXR 6Ʋ|8K؝G{<ę]G.` X-,miƼS?ƨ||FT0[HX>g?=6Ӽ|S;P6PwoX*I]sLȨZ 9F~sD}Fd9 w~LY ޻--cP} >!6-&I7|8Tl'1m̸6YP `F VgU6tmAc&y01`ua3˭I>G\BAJT@ZvYA5Ac x~/ toE..cڠ#A3,*^,G=F$[Nw~6U+w[uWY&r՝ԃ0ߐj4}M #Ȯ{V%ҤBLŕc7Ni d%h ^P9jMw=1Oo9i$W1}׸.abA80Tk4MW^{ai(y[2,hL.QG+Xߪ*Dچ`lI褈@eqod.S`Ж-n9͖F馩y,+8Ɨ/-g>1xn]Qsܽ5 bt.⹍L_C~Dhw^`$OfG@[}hH}mhAk94]n;a6NTe5&j)K)H&Q_J1 %:׬ckU=c1vR 3<锹o39%O:< e]4(jӦ 6zX:y|4uv3'ݺՏ#x#3sJR{±V^O4BL}'tj:S5!X7Y]hYkK+mzh,%)! MWƹ=ƠkX1}ʚ?}Ld/Z*@J^Ig F;]/\ϭ{oA7u>کD.ox4!~mzju~)ZMuLF)!2iyhc :/7S4*e+;BC8;Hck>Z:bI- oC!{7RLw(2't%!U4R|ml_e,S~ӈr=p*M*ɇӵ KQ$ADzr^ g_F*2N2u}8Bx rDWﮕ;~M~6R̢5^c'DBi A駼IgnFsҊF6M+I%=U8 h]XAXV#kvk. Y ـ _E'g\J1Y;u^wɛ=6) ^CS.2y!8'ReK$IC&_]̵@j9Z~ [^sZ p{ZVa%pș5_4kc7 f&J(dm,Z#WDYD8WI) {vZ*=m(]!asѝ& D߷b6} 툧PeQfF˺˟- s2HWxYsgA9y$37PL7-uMK}{lD&WKPN+H5(rJ I!aMoe򕀟9B(׮ƿ\7Ujv>́Tyώuu5s Bf-I$:ڡ\Qڕ[H d{T4zP1;TǛtAZUY5'E^ .l Ӫ*ZF+.OoRe^Dt=(qKnc)ϛ~-/h7}B%ᏭF/-Z6o lsI ?j'y!j'GeO5Ir\-DPIF5|= &'8 /U{}?LYAqڸ{RSLVf\ZXN 9-p1h|#Z IEt1x7[tұ< KWDA Ug߮%1>rkZOSd^docq-YoMdE{Yt1 ?z-YSW;SvZ?PI dܦj׾bb}GFRHkLkm?rx<э!)C5C"MIvY(5p'jONx\'UՈE\u~%9tջd%*ɉbʐ~=֝*QQ|' b%N Ewwq 2=Vm2~sy}=r$>W!V(k9 zBO20WB|_<4sBɓ5rY+eʢw? F-@P):|/ swf#Jt =tA2qh)Y%ܱd]Yv33_-b- SxX%?Ϣm|Ř%AgJt吟>ÿ=*%LCKl&)-U;YS7n'w K4RW='Gf]$B~[(v= =lZP 07b(j6C9 z6jKr%%aw*u Y̖^Q1jS`mC  #*2&>, AT&[4Lծnyjp@HޙxD6tDr돿b{EīY$eHY%A߁e?"B։ c=k3eW) xɤ(l!A%dkA#N? h/nG/ͻm,jc$f'~b@Y%Gq bΆZVeD3Z,MTgc,!\vJe?hD*FNf66O$EW"DWITp'E2ewݍ{f~)p4~ǭEЁ~09cO~x-mR<$2V'}Uĺֶ5\rᇖ%1]Q1e>?(Vh28וC kA~1cZHNJOjO5 2) Rc%n|T"NEb&\Z+ "2Wֹ\ 7<!R Pw_~&lէUMIkqNu4q[&ƆgEw19)F@)Ӑ-2wӶ4z uDyϢ#B!9_`xZ  USI֥Si} k!m%st#ٟ7svX6]`Rr{@?5$X6+1drcxSGZLCҁËPDp{7UmYGJ@Iů\Z}#dt@`ZUDU.ϣ`K |/uާjx0(3 Gq{z؃3@_Hw¤)ʑ?ߗwVd# XNhQtEq0훇vQ09QxIJxߋJ6Y׌*~$M?jX{` [!Hbxi2T%q8Ƕ@[&u] \<6WxbIZ.*-#a"Gkb-#BC'y$QT.;zhڽu1Ncx?W,"$g]РMu/]R.D{d}`+1t5%ՇŔ21dё eK.mdzFk8فzv[PAaN$h=j)ꋝVTߌ\{3}oLlq6/(tPـ(M- 1/-ܷ MۻN l QX# g4MpՎtJH:NV*/QM2T@g܈$IiI& "\g'L"c*1b~j5X9ߢ8棄Q%OlbC"d&ƗWׁB ;&migҦK-g|ZY)G>M5 W:^e/2 +Rq-/W(+xe.ږ[7M?30REhe  w؍9@UrۘĨ8&9=>/_i;s.ijm>Ք=z6?$y-QGcmH{çdJ({8q:Qvhۚ7V )+/!@P=yk~{Kv&B׻edOpD3)UP }mG լ$P9 7H6d@$\$tV2BGV5cp S'H2m CR0chb h`"'gڀW&T_?s Al_/(jک`fn$^0RT'|Sb!.-8%t m uO[س3FK SDCڽW3NjG<_û0r3C<>.j(d:˪%-,a=a-0~T5⋀يd G "QYʚ'ڶp/vLD|WS8:` j@{;24t" 4ovh z84oHJ{IDRv5eθ'>N} Ch5_c_,/B xbu9}1$o!@`m/nKP v#}.KD0ZCGp;5#FTExR uXxF։؉Ot+3t檶+,<3 ҫ,P"7/ 2 TPr+"_ח% !N^D@]-C)Ύ Dc^]c0Ia7<+ rIIsL co_&%%i;||fn_9 Խ,_I0?+#Ct w QLWrxc/&z'9Xn~hբ( rJ¼Vj]eҌ駰']۪0pUq+g^@Ph)o@ m^ k#l֥j9HiwZp`Li^ _Wc&78(wV[3QӮ]МBeHNR5^~=)pġELjHVX?DbQTl~d'?8zH]ߕq2?j ЈԺ)# tM٬Dpnj#]Uۮs}b6!k͜ߪosQ;%+d&6]V I@+FË&](ߌʫstV%5 \KE7"pl-3Q>v~I+=4q 3MOzK5ZV: =?PWLRS)4R7US "WPD 3ld0V'/&fql+f 't) F/R\Rt1p #Hb>Boi"sai ƹ9JԐGTЌhxm!u|z7Sy_@NWިWlU2lSFo4بs@Q y/O2XoE,w%w0镌>_O0zj ?(ܞkiD( g0\QQP˽[onJ#M?7 /;eۙ}|?L6+fi ḡ#;!'[- +MfΩzQh+b|ʃd( |1nQzhDsO޻Oa-/溳2`b)G)X 2b#v4!\.r _91(AUXŤ@|{7նYxzpx/Y 9sqfUe(jSP^)n(֗<תBm87@i4:#0~04GL,״)UCSjҮ@Snl1YQ' @ց!5ܵ{" R$hن;P͓n-@FwJO;hE)`krJSv=ݒ0M]e7^?٠|ΒBp[ -Y$M"dZĎijQ ܽaE&Aj$_xL݉YOՄNjlQe[` RQW@uۃ$Qi(Gq;JYoo"5PCj }&TCL__Ab*]O7` edO+Y 5ȚѾ!*Sar |[Hφ j5 Llj0a./Fi k u%ضmf")w^1o􄵯z s ҌCtkplCdЖYr<ꮖ8mЈWRxX}{f<|YwMh^yc}8T>W/Nz c|?JSHDO{jTBK.O1PbGY ob^d%u^ltA`v]soϭ#MPq̂D;DeTk9P7rQ"=AgpbR9 SٺD0ח3%lNG x?1;-UDtK?3)ߌ6s狙Q= t4_.H&4DR T&hO5@6)bQ}"29̰1!%0KE?./ԌqU#h:6;._= ]B@#k׌^\UB9?^eR"!@hUv 9Y}dJV}H|0i,2O;G\K&Ēbʛ'澊$$~Vi%5#I]ځ~%؟(5v?]hJr!q,:䕽}ػꘂiBE]H#?y%+QOnNuoj(ʹ"O'Qg5yye2~''V'&O3oa֢ QϊJx$_'QMyxaebt^=?"=Fig . %r_p9C2v^}Qi5Ĕ%kq㆑]` XmUg8XYՔ2jsIyq]~e779_fg$޿'L- 6Z!{\mYDrHVSN?hܞ7->c7R"SU\!LN>j S|JW}D9OJ<-Ԏ2nϛ'w[6y*v&ݶ\=(5KIaxm;"A;`, pX/,KLʛ7!@^.)aHzCWpOcRw0U mHEM ҥQtڗJysgG'LQt;U3sQkx75 eЃ)PXm uQFvEafSQYdʠ7;l.GiЦ3C%F>J=b:/l>U쟦+#$1HK!vNPqNp}0@rP杈W~>1V[Q:BCC(Kd2Vz;F#dݍvV0B @)M.5VsZGڟo/W'>tG|@+\,)%7uU885}`.׆bǰ*69nlvUr]sAӎkH9 K3/:w 7ve6q=UnF~Gǎvrm!GA8 f(P-{i4Tbo+Ki6dtT/`uhI7kN1֞z1O :mݯ"Xcb`Nn95 ӏo2ԧNX)>ُ?8RWX%W{l%n$G7ف7Dή|1*!{Li !GUvޠĉ@K6xo^3)d\& ^ex\j"i +`$?LUux]?!haZq+ ]N'bKݲݐdU4GG0ZM?Yq'[εИgدʆޟ˃ݿhb(Lљ+ȾM飕jqS2{hL@TQHLj3LsGMCޣlui \P7@ %m!J tEmT$9#L3&}b5Ŝb|rԕQŤph7BHnB/&j?crRHMd%k&kuUKkEMNuоY FFe&?}[D>/b@Jy6L$ xK2D  F@xQu9^0%rb`_D@dVp" !t2auc;r뚦r\YA[H?Yup|Tˠ %A5G- howQMbVHx3C m`n'M͘vSFr^WO:]Tp/Fǻ=oԥ6JH"!3/4V۞X{G#׭t|?+bI,dFfieI.*5w/ 9d/\QZ-'=UwIn8:8AxɃ xfbZ$H~ \MzƲ ">/OjYvb]&YLW'`(},R}JCj*qǬO;uk,Ɔ`Td"BXR,.EX#~ Z:^{~$b2Ķ[gɓ+Ch5e_9[%tmuȲ'9bm6 &L)(BBw̼|]u 3mB fLHܭnȿM'n]*2RdDνs 9k=_.i®! f E]}"չxjC0!2Ks$dO"<0B03 k{XJjtc)mO䰷ڼ*9$BzOrX]]*F"1 4תB53$- /hn"BP`Yқn7+,hSauߥ.gy>%@[4YXnl+wLm{87U_bi‚/}al%Jçeʻi,p|wuv9}gytGԈ˙-A[7S49/1u4DH- !.o_DYL9{]}*X*Ŭ⻞EW3x!X?BaXM 2JBs 2IAKL@(Dm<^)gc)ܩz>ݛ!qggv->u8[7%`ERFZZ|[5%F_%,%Âi% LE{Xwp˿l(}5H#Q.j#ez4Lb@x6F_F#23X*D= 45qa_𱲻+mIRDOGymՔ'ODHΎgEҪl!hX*t]VzWyS G\kKlXj+QV0 GKBwD;|%?α$$jdI+v u78/.|݇p`$MVKNyۦz^Lu?YN^ g =HqOTlZtB1/ n)?qt9LH,d]4EJMmoϏQ ,1pQ,-MV$җB&#Sڙg%9}rH(օrWYfs-.P6"vxMؖx3Zr2:h_$ ֙l{6xMb~%ttUG9ܛg 5v _A3Ts7Sk4 V%#&Ǻp3#Iߝ/B>jcmḾ:|Π9`ieS̈hZVj,t:m+I>x6u}&_K:؛{R,RR\V0gG :uzS4-D+6GNW_/QQt"WSRUu=Zm6z\\ٓY`6R/䴟;h]sfOӠHڕ;kҠe>4Ǻ%qcUNXbjj@6Pxv1EP3ޗlTaY42Vv: 2I-Y?O_FS|ݪn01>?b'~\ ^e/sKЌU4d~)Ȥ 6epKSi2%jR OU<͇66Bwee|M #6áѦ^y׺<,맅+ `bw(UWL,O[ 4*| WP?D do _ -/IBߦdʌB7Ț,Nɥ{y}|gޒknڨ @ rKvW sxӊl$oMcXGR+gNg*PiQ&R<.0.RIߤ\(uF#Efr70>\|-\Fhu/puș:.yɠ^C?TACG%} 뻍 [?Q3%4K)gÍ6֔!q2ֳD wȧBy||~-NHvθ%>b סwa&\~ò?ݦ'˅v>/r>X}T(CXc/jX{{.!Hz*İEg&Y]RXt_u]R9kEp1<^)SګFɗke-}y*;]E$*d9wY'GO cV)Kx9f.2;jI MP# rL2;%Y8\ oQK ̩|b~zBHlow;YcIDDd_*MqHdFg˗tsML/H{%H~#'^`q-6PLX-Z>;Lf+=>2+R;^zG\m b4$Ċ#A9IOCJPjzqpq5ޭ;C*pW)ޒ6,D>H?yoΦc?P}ϊU ߜٶ\")_fdL'h ˅U!H^B`c^t !4W]Mќ({x” 0i歬=N]nK 3(amiA"nY8o%xRkcD|N h}C>kRнP"4wxKky 3ktQ8kPL5%h˛;DpMU(TDtt)lݼ|1YpJ'ͬu1]xـHcgȿ N̆2 kZ э7/qn־Šj 093XXW-c9' 9|[śAH8{K})R (z0EK#q=ZPS No lB,bE_eT`#$<[ɔ'˟CNcۿߘ۾ 6GY=g2ZZXNZ稻q(8M/[hS6LMu` _[\ל%$:ֵ&RA+ XMgye;׌||tif䳎86 "+$$chy O]( g3U g^?䝋bc.|7,3J*J`פa^~)K^Nc- & \LɛgUzz$qY.b@Ji#v4P-zct+IMuMU|n{NFzq#Ҙ?;sm&wYd.Fy~ʸ".AEm-@Vth` $DOׂGM7T`Jahop.uEiI0f"|^Cn މ~:kW&&x&)'v M:Xuz<|1 ̈<}P& ʤ> |<m.d0po..1"k<^࿅,P[]SHa.~W`߁A^^Ho/4mn Xnb!DOZ}x xr뗜]B:zO[WSܓCJayO yqm6އB.a z&)Jp8tG;czC6P4 {ge ]TVia/@1# Cy.2S^>Y`U U\ W-5ktO ŕ1mv>,l=i@bΨCIpS0=O5J'̥#Kr-ѡ-=Or-&o2٠BXC>̨ʓ|Z{t9 ?_ s2m_v$ZJujRِY\i,#C_@wUXP33r_FPZODg^}oK*Uf#%!t%c#4Gz-촑c%#k\yGse(-҅c 5h+-de.6#~UsYcMfvejB«>6,6=M-(S,Ť€2BS/7& /HעX+h@NQ0+Is*Bݭ/jqh3rP e՝η\3]$>7lgH>ܰ|K#"w@aB1䥟]m0?# `p˫;cse V[y6k՘)&$Nc}GӊA$%WeU#0l_Sh tnl&"iqm7!~[&=m1|9+vr[!9LkLT~iRt?GpTM4sV(6vedU?S1K&l{IX8GVw {\5HB,ГEǩy 1c7""$v-fbb|@8cEK*ڌL5ɷe. @ӵvr̨"%TׯFѼ:tM!?L|u}# Dݼq!ADߨ?YSMR֐rյRgGER4䰹Fޚ5Ser#}%UP#1ؤ~p6cydDt@FTW:` { 2sf!Gآk|,!)87U\"Ci"JT}vsjOPxh+ͬ:sS8#!8U>oԳ(ΦBQ2u #1 Ne P#VwX@ s,bsP* ؼV~=g7OyQ`[,M~,n}F &2ΛtF\s o'ѦPwj]u0~ F]-*:vS%ö*d„zxE9W4?5m6gw2Y:Ԩ_a"xߕ-2eK ]`T>fQGq(j$M{#_HPUq6M\jI7Ğla 9ӫ+kd„~$B~xM'5 Խ{a&:\K_҄ Ϙ L pI9| 3dng ;dуy+q!&2Hpǔd2\ 9['%Y u0H#x,l9 3웼Xx#b}z ڤ`s$!GvũR!h'TV9f0Wꈯw_!J\@5Q \30HE >Lr.B[cѦEDT<k6xO#3?g<$UQ\ăGkCهGK(uP_ cxxA͡So9HF?}.|H?jdQa o‡ p  %|(DN4D⽊2eKIz<%ES2#OBi,| qH6'NK[5TM.Tqx'ā(C0rqۖ%)_ܾ(wXNy ̫yWLB2YAXb>PGu/$q;il~ 9IvcrBi0ѓP+K׍3j̦3 ֬kvM=b8ӛ 7b .jIK"Y;.!c7+_'m=i5Wz澭7eCfg]`NeB7;vOyP9U3_>-31đN<9SJM* xM^:4_*,ˏj#{xhnE&4AoRQ;2eH2sL֑WuPJ6WMODPӱ{y/0!aP䗾!{?]Sˠo ҉rRuH\N•ߒm[a>jn>*QS [,s^<6?h{*DlV5 %28N,uG*(KY91Sh+N,t1^.{A*W`V8u&u٥5o5zIQZ}-UIfk9P`--p~7\@J2BWM; IcEK(pmlG'2!y;|6R8ĕ"h[A+?^EK=]?QG(-LD('m78@D )X2 y~ :cj?;l=;<*ƍdVI'[ʞ`ܖ&+D-H /pJK ̂qzO ۓn Xtqa?Ʒp%\#iׅ<#jB $1zЩs} @|3.d}:Vc%Wy]ҟ~zYܷezHW;R}Lܷl՟r gatd09,@"kR}w+ĩ9/B7*<&OFbz* vd<0]7, )sd5;u%ƥWkbi$)>v ΁h0(X=ӣUd*zP+T@qI` j礊UdPD`;梟F_+ImI'6ל˕ )lwŪxBklgsY  (C%O#mx0bL4TU=K?Q#gE >1 idG"pFo-!pFSbͼ7Ϋ/3yInIRQ ٽ]O.À[0 2iEt){!5=K6*oP%lM0Kݴ4GFzm٬L_ɠLiS58ZLX}q7&=EH,SL64?6uSIž25|U&tA@I& LWHybuNS <}U v-3䶈|l`4%\ɖJK{xt tuԌbShvK 0L))?"PZ:bKW2~ $qSȺ?V?w =g,7_)ưmÊjd:1 13PN'@[\68z)歷y}P?| 9`Є vQ4Pjc+վF)6 U,0kjL `աK:j$".ucxZ`UPxz0{)]K~}ZPA!*\ΉO)EˍRTO3i.fuHϽ#B'zV< %Ɲ1{cz̞De١'!s'PQ(?R"4{Qlb'8.1]/@aaOqBjZr 8RhQᢆAHQ@![oU#OS$$"K.'؍Ǘu[k7yuEqJG\@ ģ~ovd^*B|[2~) u`J?ӗ\s4tdk# ] mކ;& aAix¶c}\ yaJQm]N!y}E)N#%=}YdUlAxrs?r0* n gL J ,65o;lo!62ݐ\*rK~\;ȍhĬlQ{.f-{76tO^.@ G0mʱ5FsX3[ (82 'mTH j&Wil&|?7VNA!b&[ЯA䑜;D@Vy=5 H`H(q?-rcD^3ѝuHbJQ}+. };c &US3AX)UoD}rb?|.c$-&ÐV(CE;] '6uTJw~\PzQ K<A f^L=L&иxW> &}b*x2r QdB2mĻ|PQ_,654167T hU)vi-TqD<% &ӂǧ0m#mՙΉ>βL8o\S{vt٩1r?ޥ nH+1uiOw*/6Kq2m^ s{vXXzPA/ONoG9'/=[gPۂh "[ۭ.l# ~tYS:aEg`.[_}s>LP]P6(\QSs$B@$rby)$%.|~Sq6W UOr6Kx@oOzMܷ-v-<MfWvǔxUЧ-e.$᱘w0_ţ2WT#b/NV Tb6fƾJNb׸zZ%& )E5]9OW@˙M9X B*BM{ .dOg{ P+2Ln Kv"|/, (|4ݡxt)5$苃56^̢֩|"Sh[O]iK]G{ZŢEWH"e(Jp oAŊŒo;*f;(AWL/goM-+2gp'Ͼ73QQۖxt(\i+@h"^TQXmx/k1}g瀛7٢#jpS| %.\[lqDӫHM-2pf_%ղ%"-,OarH=AHX[W7RM=+eui2!~ NSKLM[.h=^9h}Ƅk,0sN7:;}$@ Jݹ$˷BOiID]+2z#@vO\R^C Hl(>[HuJXEÀG#ˆ3L8oH^~m HB5>;^ 0~X!duuZmd㩸TEiϘPx)Gk=Xu"fXX?{֯)iR3q*iNsBDtw9(TqP{G:ҕ[nIhA6Gu\lg UƑ;:t*`HM~ɠyMdk'BrFNu^?=#qFUFLFm]s+S]% @̙8%WZU X17.bJԈ2*YX-j.'éi"9Ět s&H\"o1.'#ԇjRHo8PJVޘ1D}i+A"w]hqeRuuzBSo,hY x*SKMtx*"*ܓT!{\s] qkG53^Izmu]D7z1?8bVM{P@XzdDW9MQYpFܺo]Ah/誹ӛC}2k>ZZkڵ#⇷D;Z YItR1:ꎬ'W)$sȌ.1ᥳV\)Ҿ'6tX]"U/7Y_(q9}!1itYrND ueAMCuzꑞH%,z-e~~xgI~ͻn0Y*̨7,vކwN~).ITʹRӠݍI"`+g$ 3;McKIMyxVZYM ?[ ڥYosQ&u%Rq@$8 `^`b/?Hq )M #.ѤO!Ek^,~­iQ> ձJ5"#_*^5 BQ0 "l Td*>Y!rQܕGN29{l)_4*M?x:[w*yU0 s%ѻA-m}'&KH79Uo?brc*o”;P?21Mt`04gy,&séA`k{r>EߟRhsm& Zχ^| CxClxKTF(@(TMxӓ^<ڕLXP iD(ȴ}yQ} T/"Q m'{6ƃVjJ)8{,$VZp\Bѐ;kĴ<Z}E^e1, TFgt;aܦrK#8Hη<\HedwRT%}_ZhĬ=|z\O'9l3D<ư%BL(]#O:H,JJ7 h fG׷4_&R5e163z|[z \1$qu"GsP&x{[͠x,fdy΄uF k(g܍~VX0vݦ[ű{9bZ]!,8?~0v- u8tPdTsPYG SSxc;mюrukj@'DH' B!`rŠ7%SHN!5?5MK G#ȳ1A )W$p &Es2vڱb1X9ٖ9,#0b/6S ԓut /$KڀڞB٭A40s_N-Q4N6a"oHjM[˫3ERels QbT ({1f)Db ^XY̆e-MŎqȂcN*YŜN{ O}+ྡ=)Gt\׹jh#Gɖ.KI~݆=ۧF}7䳂8 H\Մgdɉ=ʘYj2Ago/7s(GzXYB g[?RRP8XS}76R;3OrF@D?2tN3J [7泠ݐH-;L=spa |E}XNl˚b'Xn5甭CkzdؕxA-~!gmN3ioŊrtn~Ktx 43'&O֢ja8A]pbA0 564 qKhsNv N&~f6E u,¼V* K4TݴO]N Z6bJ?<0hSķ+FLOϫbq%?p;*q+gk^jzA[xlH.CB+"hN7YXO}m=7Wq5X'U7LƦ$ I8DMJP :3*KB˷ cs0,E`ˡ`k]BԵĀIA3)cmYȋϠnCV-u+vB2^/~`xUŕ-{#̉Yۇ܉Μq52Pȅɞf;^FJɆ \ï\ΑbL!) 9ZȤ17F$]X>fͧ>46 =*J3mƙMAa-P_>&џ5,d"V ]+fׁIz2EDxX(oGфn]>Ii9\]SSNZ{8NAG[!OŔрb: <^yZlR ŝ֌J4cA ]+Ew^*\z|Q+ϟL*!baz$,D[7Y#mti2ˬ :GRF$iJ$u9 Lr|1+`hHsoag$P~w*Ԡ(a*j8u h h$F[h PR8{u0qț;T*dﮂyҀёth y[e8.z |IAD9R`J]|XС`bjARAZ rLJYg/kvRΫ^ y8ȶnKM?XBJU.N`YtB gX4P@&6QJW?eJDŽAH ' gPL7↔HEUp~p5:]\q\^Vxa 'l|(펵.cDVoEhB~ئ>b؂*[X**oqef}.ҴU,~Cu׸%xZY'be3B#!kN񢒧$l,SJ~ZǕ /-Ee U"!< 08x'6I G9ܖG[˩Qu3xZ;/4Zpi('@ 7(I%כأfF v˲.UO$~N}OI1_2V(AOdws}˝!8B ޻) 2 +& wq oe9)7Huaө?Z".gh.R01YpiZn^&Mz=8i_%<[W,y!3ƘiUʌĞJfF_6?(ϩ(.}?sLdžO0#HzXgJT|p 9iu)5 R4*D)g\8yTYzŞެjA@6?vd^_OoXAFGR6Ls_h铹dܦ< ~t@򐉯L= Dxc\9O][Ra[90ioTTLusl㹧Cڹt Zu`~i.GӉOZ GX-y;\ʱs=[M s Ĭ:&?STkI:D7dx:Z%ڲ T2s[53?7V>5ܣ=]v?Hɴ$( i.]z!"ZuNeX]`㈨{]b38xM&,lX2]e$]̡)TJ|7o]1T<$Hf3VN)$tcJ2WIoL"^e]Ef ΀[i&Ujlq-πZ|)pv# MPeF^o/'UOpRo@<phfW(ANNOn.+{ GS߲ca  "5sfTv~K= t X\\ǞW|vH\<ј0Y\`b;Y٫ T_.„lШ.5 .Zibe jf5qԐ[%g`2=_uwXsUwNQwԺRx}8)zccW`@C9šII,`mwSx prymQޏ2BKv$׮k<`t6b2!I^_:]>SJU~*8ԷH[=}0 fv׵\h%gDҴ ga!l-=?7A5VSvJ7々Ss#\}~O:kS{{x{KvML._bMp\)4A/GuO/]4U"!# )߫M#dgBs򼄿sPP-f*s; 1L4 \)$FBW`LsTY`fWGO༇b4g`m"tֳċHjB!0̑j! Zںv&n@-HW|i!rRK)Cu~:y5꾖v |~QG CBq,8e"IgSd񶂝 F!͡R[R0vPa`+$;5ށԸ|d Eh4wfi1;bjP+nex" F(b4'-2U8ߵV3%$P;Uf9rԟ+sEc>SJ: 4VYс\VDh,'lKI$R؅$ttuoOh8 FTz@n,5H̪Ih~0U7w68tYu5 뉏e,0'aʡz@ՠۯYՎI#7g [ANKJ;_Y;ݲ_TML;olylGy:}ؓ,vmyUH x)YG^/W,dr2.}b׀Q8/& Bq?pKDKUGT#1k\;5=$*[{G)@|)vV+kҊ(]?\zcn41s _hjb�@4m W=¢9נFyPyF]htSs2t+!3IfZ77n"m%QP\(dNl kdl;KJsn݉ӧOT>xF ADjEjnIn9Z0gC3@hǽ½9k]ٮdR2FX vy>sq$TxԼ'A#>͚\+veaRn% Gݴ>.xFm)pIeS%6o3H!-i7Tce&̪gfsֶ-e_ȶ@^G]("ZP2>*f$!l GC3Nmo7q\@^AʹDv0\ErP7>KD9KNw;/岋w 6=HJ!Dز vfWܾaEh@C Ue驐dva^=BGI ʈ̃*P&j >QfW/>^r9^2}4Xኄf\B B \bę͉b=6m_{nx^5w7ہ@}憎>p?>GnONUrQcyy_N|O=em3M[a)Zf_Quekufuk}ZL5qy Ō ?YWeTF8`eկ^5PQ& %E I֤; )}UjTydMcd)`R_d#.ӭ(; %ӻxYQ|Jmڴq;5b2CkH  du&}51_e-Mdkl"`CZghƨͤAB~+^5}B(+;|e*, x 1! E\͟@ up˦0T8`7u"ӊIKn*W,E-_o},ɈIҝdY:|Ro=[QP߁يVW{yK^$lu0}AP*'4T޷{ТQ]5Z45 j{.g5UlBo1D.QHwȘD-,.:bK7\8EYrWPS4B ' 4i2##4 ~֫,IA"_c|reIR!x5*N aeA+D D^9`C7`\#-~H^/aj|. [Y :t?"C%R) $F )Ư}]͑p^p}K_9/GPϨ(=)ˍ># pm-t)rEg;ZǰWh .5a] zz vO1˖=G퀄w<@МvWdhX8;f"qI#ӯ^Y1w ĩ31 `g?,u|-3x~bFT72%v;͎1.eLLeO rb_T!~oh?kH;xWkH~J6s꾋oGpCZ O~TGЊli5ה機~'@=.+P/3 pl%vtF;?D6;q.`t R e3 L:5@ev6ƧycX|XCzHp}_xw!ubNM`[6CſGM0Y>*bŸm0w67| X%ͮ-ZtZdCʧ"d4 Mp؁ެ.ܑ;_`BkS$hӽ.5؛L}$' =qM+y`qBgDN)Ѯz_:CRV:؟ӒnX!=ɊZev>E^b*C9NH~XׅĔb2jev ՒDxxfy/?2eQ}kQcy5I?:0m 9m(8*7c!wsփ"[ȤP6*+Uz>ZBNi`l_lXC=pf9PS?[ I.*L =m O}j'M'CoveuCഃWutEa.8lAھYS/Tl0/7r;or3Ri)_%0!bVj{u" ]Os"{Dˊ܍wڍHwsݔTSȩoKw.8D#m|R iwG̘P$_bɯYWOV75[\@LkJZuy܈N8{'mMi/&W.r~gRg>qK;TDʟ{9BClg2=|lU2s3uF]j pc48&Ѯ&) ͞ٳ,ovޟ!«}?Fļ&-VPWKĝ "%KN[uER&+g5aGd*rK`tui JF-4rc?#Hn4,y?g%TR V-ৠǖm!'9|ӛ6`{V̈#jJh%Zz٩p%& 'Q10Sp?1k˓{l$Xu"?&%N )烛1K,`K`ZFn2v~%nԟi#V5t${錸UZ34Q1%ftRBB&6j]].! { fɼe⃣0LI_&W׆;^-wOd5(# 3tN֢ "wʢ4DщG[c!xOxFGdP$ޑ7Rzz bf>tjf'lm;2jd+q 6`l~ʬ< Qsx`TYrPL.~D\-6$En&5Fv2k z,C<qK tQ iHpnHVi`>CW\LѡI;sPk螕31REO1ָB,v(FSUZ [m4G&3\/1ځО-Cn!"6 2 VhڊY:)=5F-0^n}ǂRy#!%aּvXa-wRCCwYȴVl;Uסl/BL>i_ߒ{0tU,)tb/mpeyLUG:,8^ɽ/` &e:MQr=mˮ2H lBżjZ%^ N<Һy9ͺ{mkm+VCÇ#̩{? Iff/`F_r KޝJUaammiЛ>:W}{} Y!&{q~~usxӽPzsa#֝ma5\J@)Z,I{:@sQvqO&Hd邚~?7er\2x]Ydy$D䦆 AT:nTĢOM7亩<ik`v@$桬eeďr4cݭEky%壦(>leA.rf~I̢g]Ռ1 u+(OA^;C3˳ȥdP(7`(-yE.tͼlx9r $`B6XxKJ c=esoMn*6 +& .rGl^c%vY[STKelI2 ;E-**6OvdDiȑuE ,K1(knJIҬUߥ'q^0|ZXE&Zgb'k 4K=^U2Ruq"0 D|^AT Sq bX][`Wq7YHF$n*V$FE$^r^ FtܕH=0%>U@~ڟb(?ՋFU̵ .a ep(5Bs 3cd[@>y`ӥK˿MVT@F UOJH:IMbb0-I ]2Q C2xALpAF%立O{'Sm}wLwBC' CyX7ИnD2 ESˆ>82H*@1xEB~"FT6a1C\QPL^F34-/]60/H~ԐڔjȄ #kG_W9\%j6v;za"1=*J2ٲvG$t ƍoTij܌gɳГ&)N W5VKs㝼z};: | Li TgxQ 6=uOIRasfPE1=xgC[&Eq}6IInz56gI綨v/ IN~:k%v;Zc„@{#gӅڠV DAp 3^&G#0$$Și9~0FK8%7K;1.y Pݢ-mhI]ۚ\Z^҆oz٠*tM즫oNk Y-Ws!./Љe:__b<4)$3x-yޖ[24-2‡-8'${^\ӿSn(Qbş"F"QFmkR@y}p"Y e¹v9Zn}ۥN6˓>筐RMŊggkV@!A3eV` 8+ OV b$ily߻|%{˛nYex-Q\SBOhϭj2$a cIilԒ^]~5Vv>Gi;K%aT"$ñyiyVCA3WTb0ko<5YXBXIZ6?Q9;j(XYZMB5ae3611 [M3:.},KkdSÆ@OB9m\nJq~8ҡS=?VԹ( Ux*Ͱ>wy%Nngu2ܮwQ\=D}l?6bOToŦs넙=8ݨX9rǾ)"Wu&pJx^vF TbVH2D6[Ll඗t(u nr>5vƩ%OX^>L~lTc5B`Sg(#riȽj{oM0,9/m@1| !Xmw]xMzDkW3r&Bad(1b*hİjHItsk eKRot2&Q4CVN*>vk D]@i9c3r6HB [V up\:? i81#EQ偽l߽#_-:ߧw ‘[-fԌwX-XSԀP4#& &鱌ETa N{JYuY*(V8y/8gY]$C\d@r̾sm>UChSjk[!̠47cɀJeFKmƂpR_|osގ+JIb]{ѵCq6 } i)ͯ>aI{cV8kC!9e֊KQiy $_|{[M6'*q4]R~^۔- ad)~[[Zb53R1g$()|w9o/#ЄOI3QJ^EiӨ=Y?9aȽH-$3XS5jy8MtPN!XE49?ڎyz멌v*Q-۠3B*Vb/k{ؔwpd) Gk픔fadG\2N3_`S}㛁\rxs =4̤0:F*mi>_ R*.L06|z oQ?~,9 >I8۩|ZѨ># l֤jM¹qs s7yXDC}6E >f|nUje+? ß Pɞpġ8wyz^$8:QBu V rH>#B{ Y_/ǓW9.]oIYug,䎄uV.QJ5~bOVZ#+Sg&{8t8k}tmJea&%cbK9Mܵy\kz 5Z1]TT[DHSm[N[rZ92Y]=ț3~0sFG3yXɆ`Ѝ)=)5횽y b* 4}~p hkY STY`UGɓ0#]bnQH ZcLdi_VW"ח(927X.q#s(i 0ds_e^OajT0/iO#!^ =wKcG*RݾM_%-NIo;јB~MՃI}bSE N<$"W@gdK+ACROxN>b.45Z!֌c |*RO;oOAEC3rg"ͪ􆈗==ds. z! b#hB_G}7@^—tG y/NY5 4e /vY62)B3o)>4M8*p)jUu0䁹PfL#|q!pj(rcb"hpG#2 vx Y70;qCֵ̊cmHNN]]C]; ,Z 9ߤTV͆![eM)=EsqPu<M݋ ] YD:(D{۩aV8U"l'˴ͭpvPߛ:v,OG@+8vJѻ`0Jc ֈە ŋ; Dmqg*(cNvm񳄜?PϪ_ sk!@?]* A8Nh  |Y0?XIY|.l̝T3 YWf&U_yYP˂_hZG%f9Rhm,w"<MlIe +ؠU_@B;,Lřͩ~:/N]c81^~y YɲS, _TFpo!e:oךNEwЭSԥ9\8InMw˚Wa'|BKѸ+\:=w {1N)nb#g>_qD}"p &tզzδW4g~"cm bʀͅea~>56 -0B?H],g//E00od@+NV9 *9:dMa^[O{ʿX2 L!7{i0~ Ǻ1<H|.״)[D)COz.%tVuFvS,k@ŠZ"Xj1cl5qD*L!jTzWW Vfj$=h;nˀG_i dٙqH;5: Gd;,i%w7C .B)؉D9f)ur˖X?W ƺ& xF1%H=3ĭz&3.aA ŞU3bFr\2 PXd7 HWs2oUٝ,6B~TzˍM0wQq5Jriض݅K4M"0jB}Lhe?U{t͆_7 h!,n 0ot¹/D_UŻsQjL-VjDcbB4ȋ~ae>(I< ;vA*Ǘl%T-%+LV"{h[/5]aKIOaBGC*# EY)5Srdž %d*<\Ѱ+v1L5ͺdϵ%"bo8j6n=. i gS =eLw?1"1=lْ {$V!VkpΨej1 ;7s 絞[)|*pn%I H=lmz,z?Wpe k[:+n[#psDaK2"Rm}=%PݰqS 97.PD<C PZGi2{R `H*-RnL`L+J@:O/=N2,=~R,}B0 F*\}NO0fIƳ5<*4L GȅzEEiYx΄~"c_[7i’Z%Gf՚pn%>~3њ9 P 7#39įҊŶs_NP}%J s~gv_ׇ*= nUdln_MQbFιΏtF6'!y:7RTV1㊩OdIFxHyK.jHʳЁO&&|"x;}x;[~Aa[ Ipl!D.8 {O@a$Ωۣڵl, q8`OI$ rrtSJ;GQ~,im 9H"+a,Ëڪ{unDY5~05&$ށ:~*b2ϱRՎ܅TlV gEߘږ?@+>yzw^$Wֳå^@BtSr$ #dk&o]_A&NV}ENabib7݀ܮ +N{Ɇl̛2N-=$M9׆ojHS1uEJF?,zbJG9Dv]QEU [Αbϙ?'Q׳}F{"zoXoGǻbeO?ttŠ*@Yȏ@]Z4,B>186 ŮSvp/Nj6DKmRÞǃv~GAsNa5H~vk(Yޘ3\[)d,*D6*`VkѨuWU]r}g)zyU"&薹GG!v - p J`ׁUhXW26@ܯFX҂/}eE`h} B(w%~|E%{w>7Px>-2]h:_XF|SFl$7S=fG.$ᴭfiDqoI`b6JėZVȫo+pU<&j@ +/AvQOOS3}28 A\ NИ&zMdWD'GeBht P_ïK(9#.'bǷX{]Rm8(1~W߃`Ąl;؉>/䗲=7B{C Pnz0)#\]__ fs\:u{~((u-ҎO6w_;d *"PբsYbY;U|Fr@@V`^r0bBjË)F{Wnr=?J3c;1ոbUُlkб3[zT3jhYs4!k9efO3>qry4x;Dڿ<xNRMbxڵ;}I2|OcȄ3zo)H$x`vSKSvlV,3%$& @$AUm6LJܛ@Z JV1Rivf]X+r˶nJjxA}ľ(Fz6D'_sζq MחL-I1*_rcUǭ~uq%0p{ ]V !T~hʻZ7~^–IT͒ @s91ho]Ճ2K`nb ןx&6Fd6PjF y<ݔy}WA=PA0`o0Uj2pD.)4E)tf%2hJ85v I 0jxs9Bt f2Pe3P̎>8\8?}QSE˪~)rҕ\l}~*c(7m/JM8u%]S!ܾ))"~"5飪dƯȮ`15dՀZ ¦VvŨwK"KߗuY+V7L"X}=r5-_KeFV 0 f8l1YZlRaq|E Kd=.^l]{K6. /G7X,is,`MyR$Ku)4܁v9չB H,u.[޿` rRʼnEQ*dMQ1|⯰CK>0=/ YWr:mR <Noʝ쟤 v@p 6[U#mP0xM@7`WQvͿG~&:_T?j)>pawۀjहuVRgsrȺJ,w1 R1M ι,\hU}j9l!oKn Gku@SRỤ2ҩ{Up"."ʥg~F+?K+e{LgpąeJt1D'zVHgR>w1t fdV0~`q;%3nC6Ss>?? ~}, qULigKnK6p1Qz{K3<4&){\fODԤ#_ofg8,'Ϲ]v$sw}>ha/ԴkvڒA,oz+>shH;TPZZK{~T,QotŐ+|2ݤ> JFA|,8HGa6Fſ/RLj7vNT衿YϖpLF /RzZLt*n뀁g.*1]#̭'ޘo'+ڱ`_(G ֦Nns|Ϊ&$yf ^ka4ބZƪ2)ub5E#z5@$mtxc\ǨFOBs·I/+ءZvV;KLg)E-L9!I쪦!sך{scTz+؃pGbe&js>liva UcyB QD!~TCFSI=df[A\\}|>7ta};vxEkq/ %ChTSo<Ӂ5D+fPn7 ޓMrsM1 6D뉢NrG6. I$_ h6OIh6RQ;Yh &QPԶ([atb*}]L^2@WPkmYGPW'[q,-˪JAWF$&'`AVp*q{+ߡ $ aּ֬GܙՁNxQ8ϫW`CF'XǬәh*}L.DEBA?nLК=oHUHڥ2LmPwөG^{9 es HO$\DRzgNpfҽ6#F$yx>L}܍Gc/\"Ԡ];iV V؞qCsb2wm7X(~XM`a#__|~SD9?Z;aZs2|4/yM\m\ :UzmSx'Z|{$0ll]j֕bP +}P݄l]*D@},;4"%qPh \<\&_l0Bً*c g "Qt_S4`U$ eR${BahQTP(O MFM#ӹ8=KG}h]!< ʲ3ișP([>}nM/ls—=EPUUQ;i@qP0XEZ@+1ƿ_OL.݌z@.y~74oꖋ@.4k$O5}&Rp8uV5Yń:T8[A]2&ums!*,JRVF0lp '②Qk| ^i$r /ZjKMByno=OL 7Pf{.|\QΈM`zbojDD+;I*qrC@FcY5"z8"AZ9oИ{&(EN%x7sT'D+G4]hɪd5.O۰=#uh7# s Ï uCV ;2:Dke .J7M96}1F|BQAU8Nru+?mv6", LC+5(>Zk6`frl3|V9ADOh _Iq"=J~w?cSϣ>  "vB<9g;62?%-sJmS&pja}`|ˇuQ9qc;\wGD>_o_ڰIUPHll r}Z ? >j7eij-Nk\@e|W/yT]T@ "ے ,h\wrѭvٌs3^d55Kzn#5,яb9,}` :o9  5oR\gNƓ{T4 1-V1#{SJm/68^ D̻[| 8qTzې5O Q؂ Wl)аJ+fL_:}Eq7r$dOXe ys!1N a8BIM w^v<,6D,u uOCϗHy{+)wKV| m?\"If6!RjVWgzad!W?{BMYھTT̃>>?Y _0M.:/JH7+I]>]jXk}_װcRcn Z BgSh{DTZED8 OD >t{zBىɗH#f04Q`7Jr8Ɔf[hFK*O)Sm{Wu\[X7M1̽Pf_CJľ'W>ۂbxBjpBLPWDA"|  uBAjv~%OCh߇Vff~]ډYd ڎ*֢'5?=[BF{-mI$1:]üeACJCRkY!c|g{@ri2CYD+`FP}vYvhCA9ԼgB_|^?Jp?7T[w+P˘c.!\@> o}A؆0g%Ԕ#RAgTor;K)Z=8g4>fyQ>v%iN$@\w~sn5dr{+yrD-.hwǸl>֬:*62']TW-#N:¾V<r5Xjiza PMN棻35@`KLi߳(!(d [pT|d?K&:3k燪B^l$b ;T##~3#l1a]ha,;i${K$FۇضI)hyP%vIGQNzߪ~/D*+Kb|%=Z:9^Fm& G=H׷Y%g?$"iYTm2حҀp -"吪? L L41eĜiQMDTv/m1<w?A+ReVQ;ÔX_=#2ڈ+,LPOv#P(v#v1f% q%99I{55+wVZc!aGxPOr|: $vԺ*;!ݧk7p5לQϫ$IU+ 0w=e)!Q je@sF!*A :rzNJT*iyi-/C| F=e 9a BfIe Z&x*A1K!-{ jtapA X~ ԧՉrZgB0VNJ fr[A-0/]7~{yǹWw^t"..\ 5 ̨N<q9+Qj(eniSkhs")80ڹwIƐ_zK.Z/dJad+x|złW7>%ɥn˵뀱;/>ol*VOcg FYm1{&,yk5PA22Obq# OΨu\67\.#HPIDv."5gԞ𬵋KhXҔ7MngLH嘓]5,DMwejSOYnǙz;D퍿}о<+_8i!djhM]^I[9~qfYPj_A~t餩2WA3J-m_Gi8,1T8y 7"J!*M7A,9JU i`{/I$޿M5}WG5Wls ޛ;N7OHnSQsrզ%~ zmr Dk~a̲fXq;`/uTCBwQGIii?r=MMVQkp9[n|Jѭ= ju*ccɸ*aɚ޵s[Y>~n8 cS:q>A=;]:[sټrcFiH3VUsVU1YݽD=ZS!HJI7&t/bJ /-6{u.Hf!Ʌ2ez|=ZT888'[2FwE_qY'"e+&\}?V=cR,99<Ĭsjx*q-UP{弓 rLqi|kׄFR;eB] K(~h-`PKtX9QUڷf,& ZOboj*8~!ĨoSING!qhԨNpkb˛jמj&́q]LX>*/JtMƉ]K۔e 4iv\ L@JF!1u<>ʠOX$X9\S>(H 2TSd'繆 4BӾF#i$戈]X1HA :=焏7'@}+&]ǚr Щ.S5Ǣe\{oXKiߩOϹagfm r$oE\ (3CϸBRyhY!R FZ}]_ WjqM`d?R"'8Vyp58"Fb\Xs= VG'Y۲@W60hfVv[\QyUB[٨,CS}o'D=Uťcm-56$jMWfcvY&D$tk)q݄L4޼}8? iu|-fRm됁ͩ|I.pmYxKls관䝢[Q?*t`4&Y\ZGq3Ƽ&,l o2/GxOM@#sĒtJKӟ@] 39 Q,e^]hkƣ׶]tߚ>C@H] |;T+<ۉIg C̕0Rv;*(Qu* Qw ]C @d$i%l+~qX[͹Ze5M^-)c!Xg쇞F!Aqz4;%''1udcZ }Ris끫Ynse}}'.@_{O*zwĞ9qTsMĎ4KJJT@Os#A'\6";رzGzn0Q|Kv)fӣMjbGag|j+}M*W1V!Bo)wѰzd6xjoQ!'s 7.KeR,ϥm͎R3_" q ,B[[)q<Ha=KC@TzXGqN4j47ن7#z4_; 0SEIU\>y?ljrrۀke4FYիD: 38xƥI &"(H]C>)O l E[Co!D6-yǮug;kMEq@N ;mXCXgB:n t#>CڴyQcu"> r;m5-[y4|87ZOq_M O2CldG\nT87c. ːXO٫K.l3F̴ @=1mrhP-E49^t-W# BJ )" "~¨y:rb:%W2B ŢjZؿGElՊ|Da dS=*;MuCzEkAGug*v1W3*[ɖ-Y!A'3p6M||OP褝ճ`Vz)Sߣ+xZ܏Oxd87 Kz'P$z)nXcװPOe`.ݕtuP&) ?함#aĩ~.&=:PL݆UMIIn "{^KK!K|T*L_ծ'QH <X6(zW({mTb*^uiCOh@Dtc/h[eoɒ$VD'@{坥/q'شrIRU?"pGS"O_(VImؓC@'s4՛-fVwK@axJTjt/6 ]Rf 1Ja3iIHsAEo%~ ՂЋa'eL0Jɵ01:aM:B喌 3x@"rQ͑.Z7($Hpa>fmz}DS/.(ah꺷߰Q(ah׏v2pjnJ'౨O g(UF-d'"MʃtK4I]T!mK:r2چNo^۽g ~QQ$ocxN$KPe֒mZB)qNqAs~c8":}H_˷F2WYK*RzM[%V@7I~hwSz^8Cj2[ˌ˭O!l:۱ gُ*0g8--Ո*#9$"Ң2jfq4p6$5Ҩ+uѱ\(M!8 _Dw=Ɓ\(v,Zϡ?LkfÙX#!e}>9x?cnKIgF؀xOFsZqixUnYjQO|k dsgb NkB͌]%дkqQ2EKdv\xSt&^r+ |o!qx:qG,;`g&AD edwZdU.k vǚjV#O  ~?ƅ|3&jm"ŶaFqQ]Ikɕe`h=,LL"JpL V Uv=~\s]⻍9=JǾycYNC>k.YAX Fӱbko˛L1< AuR䅤K!!*fYmߊx'Nnz;?{EOe壓Gp >RĖ\TmPD+$}06i^+Cr}LLX_tD[R;Oȏm5IYT(J Q 1ErT?"0u N*! ~HN5#q*ԲEwäXmF߂W"H'ZMgwRz- -@@>Aq";9sc;kx&t%=n*߼\4SOFdw=sH඼IAl1)/Bru.Ow!bTD4&zs~p+֝S3݌ FF%z J{`VEэӪ-LO>Ӏ%Z3{瘯3GQRޯ?ΚR7@ Ge}-&[`0k

-nD8T{H{l U@X7ߙ8cibST~ޙc}o Htc H+Pc@.Α\F~s {,eLjrf/VMfC*.(XJ$2}G#"#fϡNb̈́0L^c:v:FXKi,Q d)7?PKY9tŞ'\_e$WWl~U6eDN6TDlsyHRyjf G: `8_xKJdy8ނPYsτhbp:NΤPESY럳TkMdv)h<2 &lOk*"g1չl8hh#b^N%)4Jmy#9aYi*;}~iV[%hIc:uidhdWU5C2,5t` U/פ7aT*9B/:eؤiPFGa ӎU8(0{'< GzxjzC~uvޞA*:ɑeHFI>|[mŒx,L{a)UcQraLXBMUr-3ţ9u ^s;P𠍴V%O>-^`Ojl]NE3in/Wo)} F_M\]b wrm ˘9EpOHjk#du#QΒˊWy3 ɭ0@O z! 9%ϻu]RJjpU0FmI~6ɀ="$%s5ײTbyjb[qSg_H|4"4 @tU`ʮE vviWZzhlXkݮdatm=%dW詓1N߭ݰ'^h#N +%oנMC )D [b :aJ1WȌ'/egUw3OjCI^ѦZדSc5O)C#m mƱ;51lJk7_9ŷm/f_nx#"lJHCDqWp4+6Od0l%HյddA$-n&rxr*p < d ` ]ڡUbfy /mĒeFs0:|K{ʈᲺ8O+-ć.'804M]N]D_n!)^n,y| w~:+2eHѫnnozX\h'Zw>$$.swo?wszx}ZL9}h2U LuW[jH-.g!ZE@%J fjY $mO ]Fv }?F e 2WkGyt7OVћIQsac+kgʸ'hv]-6yjKL@)oV+jnLM&.죲yޣ)}2n>W v.Xԩ2ea)0Z~NwoA$#eԺq7 Cxv& S΢w {rTNA 8|߿:,Cߜ!><t|t<ͳyLS|+>p-zEe *ѡ%6X5j`lfCVQl7iv O?e 'S &\תt濖g4i|cI DsoBJ65rB3J ]t⻚[އsɖ` ǖ#׃A-I"})!eb5uM8>Ml:H*5ިi>{]vgNn>oI w FL;&(Dh޽.F}#>Rڸ}R{H]no?/ xT nȝa  XK͔p$QeVe.SsMTC(-I8 L VD{S ꀸN/{<n)0E=~aX.~g TE,"=dW?k}UgR4 }| ;HkǩAH| o +#gQhizoZ;&Ⱥ->` }};2՟,FIMAI]e9Dnk#0dEFoN *\+4MKV0xaAS_B< zK(U)K&Y~oynmQ|VG9$(0 / O֖p @v6 <;u%:)LJm뗱Go9yC}=lV~GF +nNtENDơ0Rd^X<ؒiOZ7hT1KdC &Pm';[ָdѹV#PZC_K-)pĮGiSE @!n\>[&q0/*T9sgw(@}cw): f;r*ֱhoxBUwB#tK)!>v=5T.LPa#ułZVh&ř:1jTt)^4Z1[c$ؐJj1 RB+i=C<֐6u's;E}IPz`Ĉ5KYkQ*Tklɗfq%%u;'g;jmV_& h_Mmewrv0MticǗIFl Аg՞3jGj Ѿp$|F}] JqsrFRyyrŕ OKƵ >s,وkkX~*E B9/>EZ8/m{lU "}iS24MQitFfB ?Q*(g9>vI|_*p<^s9ecVh*O"`H6WSaǜ83) KN'|sDVjL2=9j+fq}۳[nTt "Rno\#ߝ6$u,1$u5Ϣ+ 'mȬxGOE,V 'b:E9Anc%PTa*Qȗ/jIyOqQT3[G\_3 ?^O)TOhH=G,āMZXuݵ3y.C @!Xbn] b 2?tޕK弟w9lj] {}H*U ȩ8|^ & v 9tsY`rT UcO–hƌ),GQ+@#d">86գԱSs"Lu2G^'5dH53*+:ٖb*~`qrgBR!Ѭf[Ti]^b%3׆HȊeLkr#HW_fdm _  ixXz$א;ZA׺߈[G(O |٩fIC-Ur!8M܅`U9_cIxtuCngeakT5 غڵ*ϕ87N1NY^R>r?4)̀f y?ޘ7RuvcS doE3ڡ&zHRes<9-c wCMD"baDX}F?ry^ޚwB6 FCa>2֎oXx'a0$q; q]x:\QьB(` =l%=]"1;n 3!vBdȌYU-=4U=5BxRK^iĩOH<+\ ,=ǖV\^zit*y*7&%3R2bY&S;05koET8q? yK`[HKTSi<I{<۽iߠAL@lH]<(b9'j8d ղǵ8AI4ܮP%{Vt1s۱1K^ݺ*Ppлλj]ڤCO㓳Þ3WOtQ]RF0HLN@ cXJ{ >\]3=!g>*ʳ0B<>Of D x -.%,|"Sm$iN )|hBhp;"=IJ̇1j"UuP5qI_ۛ|IdT٘wcM!;@ŵ[A,R - z~plTuaS v-fr97<˜󲰬9srN+Z 'L+b&~Q ,z'K0fA;1FT., $RyN۷&m}z_E#0M=Nn؆f:8l,yz)!y#t8# _\mvC}pc @"Mg9+B0~> аz: 1$S8Q.:'y;Čm =&Hfǀ"p#c ж#\u Ff40ZP vK~]# + gDRGg^fƇcyHKf[F+h= m,xH'hg5CuȰB @Hyݟ=]ųIh|ԭ`Xͬ$)Pm( ):1,3Ʃ:0QFh3\C ߜ~ف֣QQ\:kB"TPЗ( T;xHeUEy:*6N\7q { ]>t d6  Z}9uDWy& x_9 g#? 9=f_* XŻS&7Nua($6)?@ ϟduF\O-f/0''_h)ߣiP%"̫W1fI*EK:3SR2Mq:'%l N9%`E0ӫ+ҟ'kl8B+1h¨| @E6d^xI? _BJN~d!O&Os#e= oBW~TmNIIɢ tqmA7|! (`nOC|緎 M6DIlSyd}:E[ip-H4,+6 9hΎn@921d^2kkUɎGAax`$9aƯ>x52ʴND-X lfRqѳ k](zep 72b2Iq=z % (iT5&qbp^ "%fjaG=8Z }Pp껁~/+pOSJbZ^2CF* zE|ey|OUeYZj*C,[dY?ua07 PAv:R!jy ^L|xQ~fyZ RKN*T\ ka,d;f .~N8Vg+9AM^;\Rf+kd.rZM̺W택R*: )}o+n#m.e' k}{4ńnx3Z9WYɴ%5l`nixŒ9jvHnX@e>| qx1}(މhyma0;@h~f8u0c"a.I[8U;K冶F 7?ݸeu.]Dgʅ0}C'PuWa?_-RE5 spBs;,)^B]ɠ]P-qМ Ae_in^2gTa笚W P;@PBQ2gujWƺAQ#55jTZ^ ug$VUYdѠ+TYf:.y{Ͼz-t$2ᇆ9{;7H9ac"8XW1ԙCmр(qQXll(({0pNTrŁ#SX똽̦ERn, ?e0%dmɹns-qWGOxDZ +Om~(B>Ջ.2 e]UkQ;z"p75a(JVxݯ?GYvSK6Hn-Vw%GOv:=kDk:0F-/|XMѣRF EƃP8qIrH,X1M2HHi+EMw84`5WQ|h%oUM4gY@79ߺ2 n ) VN|b]%QTKܦs&F,:{? ͬ< cz֥3zf X޽% V C?CnY g Y⧮gїcoN)cs@92Ud`!v󲌒M95[+0AӛMR+1u<!4ob %wfTK^Ϋ}I 3d !BhB}X~g~]]i#n C"C'G|p)t_7X*͵tTp\HhhY48ב~Xt~!F͛v7Ċ+CU.-1oaUt-+?~&BnĹJ ͙9#Z`@!Refh""x&(A|eQ-o @6'8y]k%O8aٝW;Z(|.-%+t;QuJvΞ"25}UH;0 M_ق1(qFhφ][^ b똶Q e 's9IjdNi[hŽqR8@{ݭaCeS>Qx<^DƛN@j&U8L/Qƙө4 'g_ prA!Dc{n/ vloc7?WMa9\)oFuŻ6 ,i? 5T!#bfh;ݎdGuIQF`]$NH!]4ˮW@N`Ƀӿ_i:_~rpL\snv@#m6'Y 摑>N٫|ާ#㗗J=HmdM SƻCl^5Kr~RoG4ў2Vw ++Ts_v9w21RO;@v~@Wjlu9 u"c!Y}:= sT ~}o;\g4 */InIb<׼sY_4_3dvXܤRrd.ĉgtgi8Kg`%|1<chЅ)XO0rrxtsϧCo6dAiKn=19.tquZ&-Έd }s4!y{2#QUƴ6d-l E6=vPDxJ./˛푊wH{b]ty7+A6u !GELnYE~ 2(.dITMv? ?Bf9ժ~؎"q?SBCl2d"3 3;bFqKUF nO;]>KgV#V!*97=h Eg+D"<8ќ`qL8RqÍjM n<]d2,'VDTVكTWsw{n|z{ O -^1gL*=Ehk+pueeoHHv=I[= |ø T/?sPIիNr?*wٻomf+U2.K6XEBG(K&$Ԙ x0dr ]% ~N" FQ̐AM I½McnR#G oA5OR)w#j(%:<25?_BA&r%^ җr53̍bvm ˼ӴqVf۠Nl֨,p N7İ'ԗ,W܆j ߁)61Li"Q)@;=N׷K9(dBzپ\+pnĽGQkC5e/|yӎeBi[n;dm)[wϸQm#?R>tpTܑ{~x#ӼMq~N$#a{)[J(K`4鋒,eL}P Q(HK_rP SE;7iœ785ҜIV}R\&VK|^6>|L"(V;)#M|TWzF,޳5fV$E("J=%ƫX R}!dS;G3#5[E;..&wPҨ)h:r7GڼcbBx!Z}BgomvUj xACg׽[%ċ"FJ$U6 F ^uL8ZFYBY# %}5*&b$i>M`pf˫EFIWGi>e~-}]~*y(ƿY:-,_їkE`PlEQiN& Pk{}*&D՟? *0'jyZfvM+>(Gdxt"jYnbOڹ֒~n>#.Jkؿ T׮ #M:MD(B&I<(,yLxdj}ޭ?(rl xxzwHEҢJ x뮑ld䈧&oh!g|Ӓ,4hMU>fѭ5UlUqյ},QWْDB #kG^oKW~ֽ2S%!PYVlway()G-iR/ \cdINZE,Ld>r%5U^r[)fV)a@R8ѲΑP&J@h')NU`;ZS;fKߥ`Pqພ:$lzv j6 b+ƙuomڳifoi=P3?ϥF0O>T%}an#h FmfÇmNKȳf3wW`QG'\'ElAa qwӱBc&^`uWeΰUs  VáӖ˕RaqEx,~ؔ;w>LhMkn2A^6@k!Dh *ʹKq\Kaz^k,;iITDGky!hCK8\ ^k,˞s[<{$1dsaDA+(.4*V2Foz"Lx0Q@#Þ/L2Qwvwq 5q n-;rU+U+Kb*T?9т# -;fL>P^@ 5Ef|su5i:ϚD4XY I E;YomÄ.΍ip1Zmų-j}|td ?_CIc{&LYz \1$< qy]-x_s"1{z!FJ];{W֊s^u Q,gZpE/%OVY!?ұK\l>[g\v}F[AҒ+8Xdh [BJe +9W/?TRa&dÄ2s(Os@:X1Fz(Uw=- XhLv6L[{h'^`7t 5Xb+Ee%0)y$9@ӂoҩ?g4ZqkeJ-#%lar;23N/#9QEx kRpK㜗#en*ǣ/`ķ^wLv {G\-!ǁA|م>U+6_L5t"#vZ*ޕMe?us ³К6>IFn3X #~uf*grׯSn5a-}7N9w(ho;8*vBUY=;>>t8Ezy4fm>2Xdg% v kHkA\; C[ofF]vK]7ImF+u-p? aF'+[^vKa(Ԗ"e)s*3,^(޼|JnÐc,9L>)Sٖ8}I9m(TmCe grp 2&Nw\wˇ;F?6V" -!)0uD09]coӵB q/H @8Va y=*# g4*Jn:Wf.s [RIxy;&QȃP0_+Aޗ6O:&8*k8ML?8%Š:IviI AZQ;և6hs.M1byp)Puo$@)1vGC~󝿳ndS wع >iW@VrY)1L$ICLR\LOob8^_@=q)iFf8O&jPBϒ+W>x(p8=(٥AepnIZ\í\;nN! oշ^oBdbd\mvvS:Z iG0H2a&rWNkX8/G4e?evյ/z:`Ņ FSjhVmե8T ӄfq }{ѾΫ1g4;Yɸ%yMI>+#[e)u],7`\7S$A|^FwB[Dyb |m] zJq,Vxrc#!e$hě#5,חef(w2XDEJ} ܼS-ro?QKcP\B|qAV0a=eu#G G<^a.$r??˰CL$YA.ѫX2l 3qr'qdE^/UUÒEݵjY?(odA4"$ !3F.N;XUŒ@ oW/o'Wg1wMTIDžV-0 EY/FLn튵Rρ>eEG:[Ou|H=%9h44B#CĠ ;H`>iR'r1SEmvd}dgە!8WpKKJSt[#1`>nCBAB idC,M@D2;yģ"s#l} n;߽J(Th*G=>g匁:[J0& ~OIz^Lr.KcbOh8꣼,Hk`0AnxeОċ'&D1񊂴/+8:>=KR1t8 G@d'IOd&-qCYSjeUEl g-MĈB %P*P E l~I'`\CiXu.TX@á+I2+dG2 %Ƭ.LUCoҔY[{qp xm}1.s˒I,#3hޓ;{&[Oشj0\մg3IRo/qTZvzR4"!AcG 4^a5V(U+k"ih`_#A*94n-:6 #Kc:̾#qn+d&,"|MN$~ax$Jcd~Bi_kx=ÏO’yxOrO IE_ojWʾ\}8Bmbg PcՠhEǩY2/XƓ8;|sB txjVteb'ta#AGwdssKvJ}#4$#JvI+K}`yJQI[]O8/0,H"|Md SLd|yGBVpj,c:} @rrVĦ9 *52dw n;>'L=}ˇ-9s=Eڟ?9,!n2BeJC 4Fr)4o:QyL"`/-G|T%f ?7UyUY1\ -VXNA)rs, ~2`D$LC Dx ڈyp٨ ,#C-db{,zjTL*^ŭYKΊefC {Yd0LDJT=NjAU2GM."N02yI3?dn5S~ctIj\$Aμ0i0ct﹙#;ٔoyzϱrċvWNkLJg`H=^`šan ̼YPIQkB$k _\#vt3ugB| E/[?6)$+3':oF_6N6v3D: V+>@mOb@}aҏ6ژ{Sk>^3F[8-.M Ao!cIVZ/iHE13λy~8tsR^uIk(V|)& *5 &P-ڨƇj0%0jd[<܎N[ؗB~m6lDZTH<"{͔g1g$&UM;rtre%M|4ab2ɤpK+Xx瘋:61s'-sNܭɑ+UZZ9ؐ\`ϫn 啙Ek-ٔcN0G"$ I~E PԺ$!jxP5)'am둚xԻoT@&YkDA="7 {֏Է(r,K?XLÂ3,9iw:VI 0 f_\yQ]6=nS.1XF`Cϓh_lOk_'wJ^p5~Ѳ:&9P6ұ|G0'Os :O@_z[eoF w(.cf6 iIan*ni?o,0sM0p<%$=.iEw4 E=iz7|^+qW{詩t<Gus =X ?qMݢei07Y]gT]|xL˽GyLFRݯ4Ϩ8j%6Y\x4ej+79]5&U lyߴ.ڎ~w >_v[bfv/mk0(Adhdp)KbKh,(ԗ#}<=B{ҥ(:?&/ djw )5)5#Q|zە(:7+Ä][.q학$dyM{>).IZF!^u)c.9xj9ҿ?  L#]WywF?%&ۇԨS[D`ɐs.XsSTE׽,L[L9nw?Cw7%@XGYoQWiAöré ,`E`ćm46S-{`lO#gعkM~Cx%M\=ewV ?rLӋSS6k|R6ܚ/Ή/4Eح4sjVl-,un +IBb耡\ݠrc˝4Ų< H*/n/9MװbOQ|FP5 I*01j,U*ih} o~OJSH=H7aȥOeU\hJ6gTvS RĖ B!:pxvV r}ɲi ox1|`7^94ՖhNb"P+ Ɖ@De:qC!)Nv #d,j#vt[cGsUhəu'٪`7y.r\QOC<8=V`)Ӎ6.`jIJ~Q GuZYcJ@N` M$j3 n3Mu|$U((XgF(%aIW߫p^L_ -Svc 9" "sA/N'pnlta(ky p- gMW L}T&9Ulr߼?mnjj7z&:Ƴq%b J|݃|MoPWRlfC F0)UnN LġUx\-7H,pF:UOԳ/@f0H^qyeMX|a(#lBgzRY"/8jz at/m@M"7a)Vk"l6vCb5C2s&k"erI^¬ouHRc)ߜRKe/XkLY:0^!oOxd1 dƟՠFZWb{%;+'5";zrS[Fm$E_Xߒ?f5X2TRB*W=e iޯ:$ 4*|GA\idu~#1b>J|`^_'9 *Qdb")_JG כ`L_8Ѩ G*^g;! A.G(gpAٱϞvciv)YТ[.ñ$֍f'scUB|mFn"`:le䈕Pm':ۣy7ӌ !-uI=C%[ LV%jD(TYZhFhԁ)+ m)6y JǼ)BXv-Za8q|#/yDchBf)HZ ]3fl HϳvϙB]jrxB_ w`ss, o:Mg|+4#!mK`ۻЎ5;f5|>VVQZIϲLZEX%/8חԠ`@eg{b ՍUTWߠ[?W26D4ʿ vxn=YAw0f/('LW*j # S|!K5s'j%2]97#e&#Y E=V9d4p'ٱ3@1|Ř.dq{A9e"+0hԍ%+VzkS@O/49SdS)_u2h߂ڿ+[ӒX! KAWkp*4|>?i7Jx#; %_%I!zUlyq{P8h/ERaBWE1B)> k(Fzq?hdlSNlnϊmsh 6!Kv2ʏm "ZFcH94h +±%j2=cPbx7YMWNLH M3#nFʏH!՘\}Lڑzu$yYaIf}ʪӨEmlK;`wgkj~b5%TwmT!b{騊rwG;AdUcdhJQ1I ZPgRbYf:{%'DmXƨ_XD10,Xagmi!ԝe>'Mb͛k֖p$pgm=``ʈ蜓fj>1lV؎u_,wL45Ɛo6'mF5vA*#B'uܾAS]li^eQڗ )ɊR[ѱu=ck4 \]R3Rzi-&6<} +9C*Ds=<}0vm֊ǚY䫕PwBeK.m(Y]T[%vV;+(Q)VwW#n 62)*6PmfPǹ+F.td߶Mbfnޅ;96&\uJ Cp7k+?"KG{$ 12 TSn7U=u[@D w>qHoQQXb9I5,cK#tk7hY[qƠ޲۩Dx֦75*A:*O?lvoA 76myB6"onھ@W@|= |C6H͖7*Me‹8X:͉>BP(R BbΐN䟐UdT㚯I0a ~-eVyN*[JtpBl c QH0I臹Bsv b刱8& -̥>FsVeGEz>Ph!5fLZ/ | w6 Vꭱ Ǔ^K5n0fXwQ{j35KDsKWCY'~mںa~J@Vd.$S\q$Qx+XZH+JG\ԫR}QFx"Ym.+L3K N䉪G}[J:סȦ_;$`iiSGy;+/KP54n;PSlp|rxZՈ4&CKj&88,(fUŔSe ˂6 o].Re /KҀIn*du$}]jZ8n3chRz(WҺIE[L/"%}SfzkTM.qցEH?p^Y gF,W[l7~LJ3*aVFJB5!a;nCbjΩ "&S[LJ6VL{-9 `嶮3q܎ö >sMJ&^+, lӤWA xXH>MħWRr&,[0ds Q`(Q8J=x߭׈zIặ7/̉P~JSLj YDJ ?a U<-!YmfF?gLj}/0[f+suU?W%aPT$]`fM2yl FWzTSC?l8ZBs_7L'lRkkM#q|QǏS=ۮFwwbOQkp6܁Kg^o/dM(7-po5z9pp!<ϊn'mDʩtiu?㭅T^ѻ7XHHbs$ͣʷ[{t(^',9ₓ|KTJyȇ ٕuDfWUm,\@d׊؞&gUH+E+͕$_ .pBeEԘx!#a/lPN;hLD4rH~#۾{tZ̥;eaOa M 05POTI+F9 -xLP@aYJ''2E(,"&ۛ!I;=(iGbr^4 <~ZYHi U|hnS+^xV~o= Y:] YBJvQ;IB>to[/̶e6-ּS¹%aK^^ 4mU %Mo,jR1%%ǯ7PsaAEfWr{P+{lcF -5(d+I EjkdVߒ?2=tb8#~ΰ7qNL]+RlҥJ=|9f"{n1|d8G"t} ӄz+smv@.0kwi)کdD C&x\6 X}zZ2ANK7qu}MY5P_b9$e&NC,_߉e=,j>A*iOҼyjMJ`oeC)~^ˆ^A_I'¼\J}_ԫp݌I;UOeM:S>F'lPXC'ήEo1s؛l9p@#oC9SQͥe,VN}V=`#_^FS2!ǫGI/ ]0_&w :j>Gӊ(k P]LJR7i%XjH9EeV,;^ u s; (+2lM<*__S)?g ],Gv?uRK+m4 -'hgygQFSf9LNXMb0t!e (#k m62ZIT#Z `2q `Ϯý~hڒ..᧓Ō + o'dVmP_݈6xd9ؐy3mG(3|=oBe*u|Jݷ=#<X|sI6]Aa$.s.X_9d!sş%ÙH}X^c\IԱ.Q8b[3[Z rleVJV:@ Y{@7hί$Cߍuyɓs4nq+j-٧ŀ_)2$MI&琲lَf75cvLД+8UppO4=V |rʖQЪϝz zUϗ =szgsET i %#ƄJγ.fU2'>.EO #af3P5_e5z > nR˖oTi+K|1TqyQM!ǘ[myeUYX_7WHt,\v(v]+Xk3w]Dw`soeMd#)'g+ tF W8Bޥ$y1\f‡>a"c`3N6Ч{ٱ 9nҪnC;nkj<3>'_ s."@O| e|4(=$Zjb_;ʣsz5°+5F#+{a%Я㦾}㌵Ja% i0NpK^"| U }bi&e|y,}crM=D wd낥zJUo2fXY #C>lx Pg3a{>L+3&r]-x!PU`FDj!0 Zofq snB+* mܙoˢ.76[ {mESɇ 8IJ4mRب, a6?=yw:n7:-)|M9_\lF^}mqң) e_ؾj.ѩ(}sNЮ';.|n< L";V"kr"#O=caыWw pN@p}g-="j}_M$>cp_Kl^6j%: c³4; U*mB}"<6;)!;K)ETeѐ.tE( EBHP^A\θ.h8t]_8UM.J{Q12򥏂:_A&ЈB\d?">-)TZV1Ces}V2mD!mu*AhODo5(\%Ú ȳJGIړdT7b;'2x~Lnk"n|[m< Az',_@ *7ReQ?WW._1E*qx/g# إwUK£Zu"nk1T|-e_EҺg9Gn=IwBqrQ3?,ݔfpHͿ* xҨ"pWf pB:͎3b-p^uGidؕ)` "N, NLX0-xfێ2Am0_Op]TzidWnϤΠp3?OY9ɮhL;X*F:~x5NVC04ֈ3~G5fȴm#!5/ݺ+&br W{/ԲO"5hHCcL%%ۊjH3LBQ@ /`v@|~; P9Yr !Y*c؟&|}O@XN3- ]zPXl \mPzu(jIoϻ&X +KOmHښZ.Vo)/e¶h75Y77] r6E6Kn6O36M:+9' Bd(bo!1VռnU-#*]khſN/Hi}Ha}-q%4SQ Bs;LTW@WA0tnjSt $^>OE>CQ\`r?6 Zb^@rtnէ?GzQfb2'qT*2"\:rzǢl\s״^9?qE`Cʺj!;I[t40pg,eV0 NJPC[¾Mg8`cL]f \RW駝:WqͯpwJkMF4{PLW,0Lǟ"N.Elr=?N5K6EL(9KJf $Bwhy9plʑCc ^hХ(5Iu2+q{SK h2 |֒., -@=g'.d/&R0r -izTEtSSυ_#dsM¶6QB%ےWkmPC= R/ . -a*#JwC/W;)Bd%CiV=VAl99$/V!r]AӥkP)hb~,xzws]lRVuٖ/Vm-57+üb^ fu,(#дҤ2+euã5,CDwSkL Qa]yKh_+K۫F1cSG+] :ŁA>9n5uє|g}\!c"(cYWPh-6N l.)iZOZF u+>!JdDk4bA棾qwQ_#`l?>́asSz+j0 92n.U#m)Ec[s7<#J,=zn_'>+\˂A=PlnKcwn&%L "ϳ4 $16rq &P[4Wو>ƨ |Vf緌*ҥZaǖwӝ@Hk 'T7r V#!1%N%^h "٣s$px7{)&:&Y+kiOݍ@_k_on($Y_ FI.'~G_\=(l|`?'='!-Ғ@ixUՖ !;C LcEHkE/ 6/$ۗu嘁ht!FB*J4J"\ΏaZac)9#B0a6R$1 g>Azɤ!*A9P!Б'x^Ikzc%MLFcC@ڸM6 T*H?ym1ŶYݿ!O~uQ>sA z澪˻B437vBO|3Pޏ!4X}Tad*ũXOܷ^3O"$jDDC/FiO,ΫjRuWA,]pe>:h9|Tg#Rˎ+ҩ7dbrD 7$Cj1!$Vb-ܔI)<4$b"Y zIb FsFz,dS))5\} B M$[10DNQrE谜9ŋpo!S3~nx[tesCjXQsQU- ^De48m%X.i\ FM kRxir)ID~&GJM`$AFfO(9n- +2O.!>?2="[wȇݲ|+ͼ̦oBȺ֢'oSF| ԉ);@ߛҎ}ރ$ġ\F_"-Kb@\GE i5N¸RlUw_8U5wk΀ZZˍ~osf] &E[3vp޺ kjv2VQsrKoU 1@rL-5ԨG[ߔIm[fK 'nJ"w%",ږcg4!542G{怸YHH)lVe*AOQm:̭U@dmԈ3?.3bm1;؄)V4''<3ó1Ԣ\Oe!d*c5e0)8m"Zw98xǃ.XoЅ17[_ +;BbB6cw%ν(?`D7м:/< # Th-v"fRYٹj_Tp&doa!!oIN"\`Pׇ54 g]B߸A(b:D6XyiaI|-fU?%IhܴDSPA s= r*$;${'L'tw,]MC^-$Xg [J0|N6q ty%EB3'_qU9_/9u[^;RTYD"zVlkI~Q4u"D51'0\]e-Iэ$C6^њ*hQy'8qjW(x  ݁<&. *q$OA֞c7ӬSG+.Qf W^AGŢ"A@d %gTaM$yܡS1C3aұQ½ -4 -kB;DS!ѰD"j%&ܭTdž}~/9]@cWCߑoBtrW%p==AcC^}_sI"9[B sR`]yFp^ &aLN[tLvTUDg>"ښo~*o-x`܌ol'I>R*g^C_5, VBuT/&4(&SI22]贈;"`FWiNՀ+4 ՏIO:-iXn.X1g~W [ gP{盇^!-뾄x'Ƕ_7HLYo)rᑹ9b!xf!'\B@4̞qW$ڞ 9Fn^Js$,L?zh](г$M/PjZ]l1i.53NeAH^ q#ڎ"5ӗ*,T,_*ƪ4'xD^DhG*?>yr.Vt5XWz/-D6`~G8!kTĝᙚ 'P/2PeJב| !E;J6Fj9ًHȧwĻqL>j5ьuȏBa`֙a5fQL#<ע$.@R'$=.YfhU^RsJ(S:|#_>^7Q%H^;R;/8Qˆoϫ^Ҋ >ٔұ/DFaApiwI5XE{P㺒52{Sp qr/av&Y^ Uok;D2gF">0]3U"w5ӹ:* b 62ɑ_Y(b4t"?xhv(f3,¹ oLIepJ*.Hi]*wj}8-$xMwC%HDBt !/!{HW T(sRDf56Eqpo6]5rMe" ȓSqYRSVrQ :#z% W[JFHRrqO'8TWseoI7̜2>KVϭ]rxա #*U⃻#r]|+f+yIkѣ###ݸ/@(zrpJ? #C7Hbf;!OoQm;jcQ*`Z'Î_w7̊d)5dw8[*=fcS1ڵXbRdjLAS󴭹/<*0 )M~RSwMvG=Y<aDߚ0OÓ>&!f'fYkp[>co*oZ248: ׇQ hSgoT='"Mp5,r!/ĜPXi3hS_sڹ'iW<(\-Ѣ>ƈ!LdE0;Q;c o,w1aeWiP>oFp~q{f{Sy\SqvGmj+[[`-=BaABv nĭbf_BOY0TWu--bT?j5gcoOv\xP婢xx<HΩO%A0]&\G G5O'ϥODB12xh]5r~Go﨧Ym 5ȢV&x{Ih"$̟(u?8MOudzӨ+IS;-B pwyPXle'?U`#|ߴ$fݷ\YWchggWV0O0\宬ƟVSAjZ7 G7oU-5Zxk \E5E>!&y7(H/BDpnKLT❘ղ0(eN:0o]*quG 0GCc}8(eEZ͵8s *hNjXa 9@[SU8ei9=iܜnR~W zZ7A F*jGA'z]]ȒG6(9wPt8Y=[y~cC!h^\ >!Is m2Wl- E=1>P9SGzq[Xn|eU21m ^,+1䩧$N.C;ӝICYޭ)91\"5)0f…r完hK LoVՏXfƛzn۴ \Q\E0͢R;ס\Xd.R&~ghR5⦸H[L;d4zPޟCrsryٸ׊K؅Ff5 |{IYV~'at'/lǸd!bl@?]Ͳ<,^-RW Z.&AfɄ=bQPrW <8P.$ĮZРaCuYS Y2IQ,qq{;Ea ,~aeef!C$&gZ{|lE|]7oO9o}P 6kob==;_cӔl;t)E'ҒJ{%iXt|@Z WR49} U6B?LDǤI$)HJ _U@# uάAG&q`zWѲϨ_ idJjY.$LSs5:LfmrmۦYy.19X]q\^Kd}FU<<2l~Bz֦_:W8%>Ło^Yh]~Xk}Vņ1ʐ*w~ iLN|QK'@5:rxbޫY_6hك$$C)MOeS _4M aW }>1VnHXjuϳ@@b|ug=*(l E˓AiQ$(˖ *4+Ѥ˃6b(=gϢ ⌅>8+d]hf'H-]ϵ'c-s|N l〽~7*{4x`J Ǿ;=XYU9^ood>Eo4jdqx6yi걆^ zq+ٸ=WޟYR?1ht?T8/?M튫l1U:?"~8amOtR q_1j+i@A5SĿmN1[i%UUtZ]9DЙ YhbRK#w$4α>孅vp8bH{6|lx46 RYs?7j>ACTIBβf3Z>ŭj??!<#jnZީ=QԘ>ޅVK9c*T5Ʈo?wؘBD[5gt vt5=(dwi_} _/8NJCH{BxT8d=Nf۬x1 sǣ(\D -FB f)8|ek*&6xK#|MM`8iaΦ x$씂|P,l-uH'ʘ_hݨL{E!N"oOט~MTjaK;\ȋ4 pݲ-.k&2{% B F NdKWhmqV0.l4_jz¹E&'s! Bbt$.H-"Y+> ߱JԐ{a eMU|>N$I5L-Bt܎2<-+zԃKg ߲ ,$ "CSզNGT}{rZ`\XYy{\20ۑYBT^_QnyVTܴ΋@yJ΃m5\#`!VȰv(k0"ݙ8hN?7!9":w6w-(c6 _a9hLDp/pr ]N"A2jsKz&k92]%'{fUDrO3ZjQ%AVXF[ěCڼch3Q w+|<.JllE IMԖ?>w(F+پZ>ak\7*IB0K yjX]5yT|Q;H|li+VҔbQ9̄(]/x#Aj]bW/ _Z}i=:֠ )e4&gsVJB5ӬsxS>|(@躅|=gp9kR 8 i 8L\j-Rۦc\:nTt<Zx[Y3ߑ"}yI*.sUTRWX{XF {.~c_(!9V@n{?8=# [iĂ771!(}Fb}>]b\Z2-\SCE/B*Szy,E? |}̂At(`fndni{ *{:Sn_X\^ߖ%Ι-MD:bATI4bHW A+~I X/T|L$@H{c<~g$!n/HD0,mJsۀӬcKіZ!IX. P^/5Q5m{)Q^8v]o< VNgDX=#Ν<o]*l-woF2 fR QGy{du3tYTPP<3}`LjR`у)ˌ3Mꄤw6B/㍇Gh31EdRgԲ&f!6nN8ߵi !H-3c?iEMfLV=/ۣ pQVVQ 鷭b;$sAŒW^ᯘDjrއnd sޢ>Ng= /E`g\0 \Ū }lƷs[7L_7Pߟ * f4y nZCP!X8SCZW)L  u%u9q=_xi%~#tU/,AuHy"._,T~:;ABc3RY ,k3Pܒ$]f2HBQgq}] i7ŏ9zDʱL0Ut#8 YDȴβMjoݖ1EV&}>W>]8yca|,L¦|NJsFW ZݽQOHvwGG.,h3J2]l ʂC=@|MF\'ޙ`{b4j!md:dQRmբ g1uVVQ;94"7>Z,5B wZ(ͼeRgCP*@`)ozf6)Y Y$&H_c絫ek'rh9>;;ګ RC>4D:P6̣,,H~ͭ9y#Ú cf:kj{ZTyfJ,)1iG#b*/ Ҭ fI':f"k#'he'DvukҬZ\gpyv9,\jsO͍([I\n:Qs2]dX^M 4 (Fy[+0-MT(QԌJKpь++E~t~n$CJpnu^Atn-r@(qKf3|b2R3 ҙ+:EZ cUzưm.amǏvI j{Q렬(89ф ,V ;Xt%][7㜚 !k$Ņ#(s-PZzE#ԩ˜P>RiQ.VFLmy[o3DdBk]erU֔v~Bжw¥ o )Uu(pxc$`0yEz;yX떶_@3_Y} (&Ӽ8MԁX2paBx?g 7F񛗽!ٹÖzE7 HBeSf`s?!r|&_q#u~:8sUtCjcggr-%|ejЕiph4'fM9>Y!]ycKOU~`ImO'Iux}?Z+^R,o5_glKll9ƺgMo&(u$VgaGrzbG!1K6;gHsGOg1!h"չNCM"B2wBp H9>:cr";_AXRa䠃ђ:(+,yH{o42 4hDQ {`IXbnMȣvOj:BdZUn_$ Iq6\`#)rImv|{A/2\?M)S$B_s|/eQub@S">+)Hq؟\P,]$癔/gE\TV®XОY Ssm`) sQ1 &?tA#5db/D9) y"0 PbM!3(Q˾q!-O{Qى᫓ &c[!FIw*8I| . _^}pc/h k2W {J:v"=`q #_hiϯ긷T (|J$T"T q"P=K3+V)?uȻ:su2NMleDbr;(d./ 0ВhDO}S]%qV1ZEf~=೔ sY`]vAx`]n\7*e JwGўPZµ>-d?#:[f7]UZ6P -0<=Q4*;S T~xɐQ}MYƀ}k&a) x_ ._uNURu%z.kiQn1oD^*l{owJe$J)ײ#,TNs~P1O3Flt^g|0:{eRS ;/ tp9fKti RK4FP9ӃN4nʦ(1yF6f ]^k蠫rwg`a kâYȃ~. 9Gᘭ퓔 {}4yͳ-q 7i݊K"@6c[DtJ-1 ӦRQyFtpYN,A,UlޟkE`@X̹t=oͿzR]uq[ZDz+\9d _4ex&d:O4.b$1ąy:$)w;"7r,þO8f_ DE$F|'yMeX9ezUqsd1K?9>rfTB- 5 APx:8r%g<^ ]/@a2YiBdmD̀þ飛ey˔Ǽy5 [ 4uEԢJ@X=6C[O^2]۾Vb(1 @(f7R^7ǕDmXe3-5pӏV%a*MXmUcTlmBdrqVlp`W%കMLƤيJ/L͢$ưo -A[64 mBK&AeLL̹NjtmF<>3p8 Ir!a2u˳qqDk#lU8x.Dn[tl:gRHTy/ռxyL~ #צ67Y~Fȓ߉APKRI9MSD}cmE1Jf=[@!OlGUo0:St}_Ơb9%z*3᭯`%A$jK~Zo_Q<{wٓr$閆p3Ƈ]{pe؃rـL oJi6iT$u&KĈ ƳqTh9+\e ]MA6VShS;}i\ϊLނ8$N-k A([{b[Wn"˖% -fWt:[%:Uf$Y1=R=4{BJ 'H(gy/+QC++l4%_֮ndix^'/pAWMˀMn^sgr{_d%oR:=k)ُ:zڣUe ] JR8Xq@_7;U{ؼYiXp)aº%mK_Ll(b_cf 1௷}TazdKjSĕZOZ&ܫ\x +|G~\첧-YyIFFC?kg\ABPq @/*/`-L1\)NV|z%3hKFYz렅y eKɘ&=U!V,rHk^p1HwU_ŸX Gy 8ezG."h;MrkŠ+3zy\+gWȤvtU]ʃQ"]o_2;NFEJqa56ژկ\5RIHH/]'nlO(A-eB yvbIiꝱ(ad۫}T[zo]قH/`&p>r0nRHIeUOH<+x?\TAXpȡrsQBR"_cY4 .3.1 yC. 5og҃!ZPhdT r7>[5lO6 㖍qp>2'awbNAⲹEI/t z(DlNwfEQUJ1IcK>W6ۿ͎҅{sHɈARH rжϥdf= o#h5c /؝{!Mpd*5`\O2kXyGmvө](82Wt晜0}IԹnnSܩkRЉ[`)V"ɭed rX(eB2oHힲZhP&yC0X -ZUf.N~i.H mD&fYBJU}rO&eÅi ޿L&з>7sM; Cjl) Izl x1k R/ۧg01Z7ѡOXximOM¸iPM\Ա,a6o1DJe͠d=s#HWY227vU,7t^0..qR}W0y1!:Tm?+cf|gpC1.o~Zpȓy*e bq&.۹W@ :]m(aK(瞮B6p[4U= [y|OerKӌˍ+Y^LxNx,?oW%&q1yZݏ 1 zyrbQ'IJ |1ɓ5u2(A6{@"n4B64bko p(OeU1\!C'͞;6KK.6n/G8,Abf;nSIZ8D>WtW4Y[:Gt-X7{\/⨙۪M|-r@08RrRۈ i)Z)D) /# $lﵮ0Wk_moaC=?3zL\tnD$3xD3.WJ)v}e4v鼃;dA^oؗ 2^cg?6MZ.t]zKg{2D~Iv$9q%sr Kӟ'txr4X eFVbNɕ v/1ЄҮl„5tK7ͱw@aA^.FeR܂ PEFu6u멢os x2 y^ބ^z8ZZCـFXw/͊-Jw,H{Qy +pjES/5X8:0p<1K?ŽŹdV$%s.`%ؖv-SIƿD֫It@ Idؙ 94H|LfZ=:Lk:NȌՓ%vj4dtrсh (B։њM1%.Bjuh=s)xʣvYw'Ժ@5 q3%Q!j>/(Qgw'aPkXBL :'tX۞/KZC͕_SAMg,r?.B+H%@ⅼ] OM)il_(MdEi}ιZHﶂ22mE=C ~bT:VsU|)J$b{,U7(yг>R[SeƧ)v;!AKB!8,9y()Y=>SsahM7!*eh6iZ\*Y &WT)Y$yL:ZlP>;^ }&4XXXa dßU:>dw?[ک ]}gpb9D]vpf ǒnJٿH?tIO XCwE2feϡq~ָ>$%D. N᳿ GwoaU9vkTdX U ]bEԧsd8Yq֒j1 ׷Vlre෉M8|a|[M\5xk}0eJ$ 6, |ْCN>BmJvL5{EށQαҹ\Nvíp7_;yټޫ[K̔h#-?aUŌY;3Ų]11}2JfnVϣߜ퇗YToL? ە'ᄰJȓE*~){[yOxwXHQfiZV^~+0\ӦY ;Ahy#䗲M{>F%A g%7~Nu{'fM/+%~f_QZzVbu({:2xn0ni&|Fhn_6_Ck߆&#RV:Yq5ayѾYȨUښK {gsͿ2 Z*<\lQ/*{P" ¬eIr!y:cQ79(P6ϰDҳHb1&qr4ոydO C-q⾹ǚVe-3*~*e!1; mRpUZRBL [&r2}ޅtrߘ"P8%2F9'U7^SHdbEeB$H60.}٤ebD 64cu5ewqdG}Ahq1>z4YK87 z Vj`DS*;p!0Uy~ª)G~.iWukh 2@ީG ; 0\RVPN˙s?bUooxdȡth,Emr]yM2Kyw`i>#\#膜}^mxHXcsྗS؉^F1Y}r^|=O:@F=z!WIl8(O{Q77IQaK׽H< Q!>E;w:Y wB4^QM$HanǪMnk~N 4;/OaLd <& R@;qI0jn(&ؙD gNC4{rJZzb NzY* $L'&m"#$X2,b{KOaل+XJ O#sSǁx2J8†@&r2ѿ#3wUL0,C sxCzWU/jeQv|SĶ"V%A/Q0Xs&99ωY?,~2Naq%|=" bķLGQktN +^n%'5SU$gM?XqR3QZEVi:8CרrD*O=QN#oa.BlQvBbdY ɼ\L`.Ո߯A3\-kvJ9Ƌ^*Or#%%)F%zJ N//+aAV%bt <3ڷr^7tG1zTHo /3_sGLs6I٘x(jdvMџz4o53Dz#>5uL9Q5dL}W+9ehl$kڌ;cnL7FDD#C`*4GIk/Հ?_6y={@|ິkDM˃Š\rZmpIŋϚai 4fW5N{V Jm̷Cl[q)ʠވ*!a7Uf!˘OMNg;.K<u7 +it6⊞Z#gAW0Bd؃.2lEr kPJO. ‰Yz.0VTDSim,{ v,ܾEr,&^p9rHOPWg36_wE!L1%?y H#WU1q<zIf#gGʀQe`G@hHzhQih싂+ˮgOEqg eh *$We)-rZ4pN:)I<=?'D9yp/.)phbYMȍoWwa`2zT874BklA>&qD ՃJ-~81^l & DO{n<sƞ5d+MlA A|i4!$2%{\ҷNxXo-68M(#ONÏ$rMs;\H8 xԄI4 #ж/m$6FF]46Tv{Ps&BDe 3sXbu(+?}u#!aig:MI24o*spFG 3i+M)!64OBW9Pr3l`ᘁJt ~.b61xk٘R@c:|tUm7 D) Mr\v}D%ӵ0z7VTT+WqoV۰⩥jkF|K^^^E{gpAߖ`$>L 7}EdU@QN$V>sUVC)Ӹl*̸E G ԝ̸1tL5gu5YSIvpF zqb?z[36 D`vq=~l5Hk#k{իWjݗEL)DiXT:DUL#tCfM~fpH1M=*%Qd3H(~?*IV8>}穄 F%.ׂ>?}=8Ӂ!xO1{:<̲p.ԈlE$1'l՟6[MC$Kv\ +˩ ,K#%qt)`b~lYJQeÙe~lg_PTPQ;О^h"cS_[r L;iA6-ƌ g+*WcLcI}ο٭aԪͤ8&t9KBYK.ݕЧvG1O2Cvh%-J?ik6f3ĥ.@gHڷfuOXlA!Lq2fb,gfrk yIx&v}*r[iA ѽZX0sr28>O2Nl.j?OE0UzRsg$۔^IKCidʫOt*ᷤѤfu8sMDTPEzq2سԻgSedUAIDF aݒlqDҎ?g*,SS}7]sU$FYDa\tFRWZ?dal~L} )V"+*U Rnoo8[:*j|nq8k9g|/zۻ%k>oG)O:qܰ߳9BO`8d PjV.,seLB"K7N"t}{:+ou'ls]x)yƳ|*Dv(R%LK#Ź Ə0;ɑ4Tf?t! e9;hýZS%BgP}6嬎R?dZ @{rC *-[x?)7XGgk2,A|J72F^4P鮧H}n㕌V;yZ]pFHI91!KtǗF;J{nEsm\F_Ż7`HTA-\JہtxZo0$"9F!f)vՖ" R2AoFV#6^ 7FJyptcXK5R P9ϗD{ɍrוD&4O.oMaפ(ajqW2б}"lWEF,Lu$VR Q9ei|l&ghep5ɿWAP˶N6< oCYSS{xP76h K*ѯ ]?~.RO?$6*rH3AL!iڝҺr%+{w˯wnQc #lҁ ~3RDVH0 8Uǟ/HXeZ‹ YyGCt \>WƎ ˌD%l< ];Fh{ͻvHǓ'5Q.8rҔ=k.'5-%?4ٌGTdJ:8#zknSsd0aPXTd)bTrjRAw5Ngj/&᧚J3!#g9RԀjaJDQi3{ Z. * ƵlBL >k%!a>|H{rQ$3΃D%XϝHGr wbfNB>0yZM&&|$0}WRWSR""Kht''vvbhވusH˳Gv)X)!\ӑk~g d%d;mTa3qfP2Ws@G9[Vd`@2P_[D}BߵmX"h\P+l!E:d KTaM .Ao8T#Յ &X3 R-iQ@)sE| 81R]$̴1!iN`V`sj\'?"W cPj#7on}yֻPzN`1 ^h{!#\̦4KR6٠;[$Ac-+_jB_  /f3v0LuN\yW40y&sKJh `D .|`wx GJ76d_Vr0nXP-qhˀw_/",ߤt[ i7VիK3R(zZfUؾ1T_M}=8\ ڈ(WBt6[JfK)Dzhߘ SB\/.Mupe_`R/,"&/Q221}ijqT*V*Rd9U178;t\އ0cskg֑ɣ )s]Z9z=5r|YPָg(u%2!oMVzX˼Vb˙k< q, ^3wvG.=ʹX&N°ex!HIfܞ=9%C'I_?ZM D+ss-HLhX1uQq/1Na#ٸNqeW7|VE:~փ':6˓@̈́|q6rl'[d+1UZ<0N8"^P}2򯝜sRT[db״"}^].ᓴ:mT9p?n0/VȹL܅TBx3WpHZ~U3y#IJD'/9HwI֠Re&Q b!1 ԯþ # !_uOm|rP>OY4#}En8izޥU =\tBph{F"uɂTsW ~%> =AQ1${3M";5ʹ 57]U)ͩedt\|,7%GHUΎP$'& )8Zʤ N{G 0SEQLrN$<E _.( N+Nz5ǰi" !yZ&^Սv.5ʪ{q( B:7LG9t摉Ӿ|x< *8o*げSQ Vues:5F#ِc*=hJѬ-y{fgW۴_+s8mJ{-ryℒDݐ"Jߤ|ǰ$ F9 Yk6pޝ|uB'gU8cq89ͩKʊ,񳫬\LB`FJX橘tQC\sC.|"uMVZG6J 'FZ[$tng:C_Mr*ShUS(g0sFg8g6ƻmE`Sn]hGR&s/XQH[ڋ&إ.llkDQd#g:Qk.B}'Mib֝CD(L 20`vpjP˰ѮM'VWo7, he~"d6?.=˜ZBdܵ"sǐIt1 Cŷ(]7p#ATTR\los6}&XG"U8 IvvOC1Vq0sfW-~CyH9 5 W]g.$l, 6`&U~ > Cϫe߇U!@ 3F6rfR~ka r"RErp/gz)ߋ׭^ҥ+s-MLV ;RXVwMyt!OܜH䊖P.?WlҼdL.@`]*I0b k nKܰo8H<$W^~ JWry%i }w~$.NiPQFE ?DyOS"y20z;L+OS 'akBȋ FU3u>r``'4"YdILoLL'eP0W}Hqy_?iۄiB$\2]މ[(>pyQZ?E?u;Hgхʥ^WQƸ~\3Kj'P0-8"5wEY ab/&t/'E\ )&Qi*҃SEzB\~n)a8!M4/_7tnWn/Jf#n8?=MTojhW߉ t5#HU}նܕ.C ~Jah@mTcvlwd_:"I&N/-\ d#lKG؁"S#{ֹCjQ8}[?Z55Ct}|%XL;ySŮ9v =WP34NHŰpۀۧiϊXDcs}GNw)\4GحKfE_#5y=m Ԋua_iX{s,9Eix5lc(6[2:|XxפyOmF8Զ{b95X,-r5Wu$@?p3@Bc0UW:-tn/_z'}ۗTYD;GrV(kxWf6ǜ ,b3L 8H21KS\?~ 9%BꝔ͌zPb+Ӡjow?]%`z#}|;!`aX:\ uNtw]krf&+ OI}4eTD.L{ "e6Ʒ]U~f D/`[wA)X}~`jBؙrr>0B6&=}IbJZPdN7V1/nwB4@Ixͦ 1؟M‰˻Ħ+d*z]tz`v`= K| FW-Gs..~+ at^;—@ ,8Ϯ'N2)E*zAz <鎒D(g("W݁&AmrVW&~_zP@)52wmi>`.}]Әf!Hꦐ3Yؖ^;XصRu,̔ȚQd5s+*JY s va$qп5Xx/ZWANbC!{5Xbqjܩ2i1Xa/ꥦ[,n0o?H/mNv 򭚢'FT7d7vN,φ ^,11V.ux wYb_iVk!Dsq2 G0'N96 C&`#9abN?]CĚ̓6DOʔ(J 'pa[edȩc<[)W}8fT@^_m欙t׭&ԗtb|}R RLZU/w -*̔4MnI9QQD1߭% 6mjڼ)Q_Fl)yy a- YlnGk²hTh/,QYDf4V,QbV $qy*s {9޵t-T>桨>//_{QE-Ekm #*BKil,Etlb@2{,|'WBK1hY#j3(vi&6Px2Y\:aNJ,7b?S(eg2%: IfIGf0b)Lm9ktX-?@&.MīMzBF+mt[+ǫ$O8ls}QND.̿»*=M6P Ak} _NuY8|)𫀷#ѷ 5//5`r30"'t$1Ƌ#esmCW]ݙo@bd*Tg &7".>>}n0Fsp2@&د~~GʰDZ-\oxJ$ (@G8-lN+RNC?.~.)gW&*tw7pQOP3_X1kP&( 34|iBVAs3c:UFs H UCN/ž =wNdpX+N&guvEܷ.%A肿;e,^6-Gtj!'iN1ED-\ld{fwUְ@}մ.o+Nm4|HYP7bƒH{ 4t@.*h7gXD1jğs6=ѩsܞo,^u{"ub9F9ai򩁠JKm s/ɤDHF$U93*:hO?tFţhPtJ]v*APվdž 'go+lke.# O1j*ݓ&דrFv(9/Ҿu*&⽦E`+Q Ri>(WL?Vij$ ;,MĥGU}v6X{J9redro{(4!ʁUw TyfʀꩱmQxUg=UANEI.{b'Cѐbb:XP8*kށ"}3M~8VלE`{ahBzq7o^Muzx(STY==$R3q>ouՀ|0R=ڀrkV[a]I8 a!"*;NB'):ZtIP[8XI'd">"DrnVuL0! b9KAɃr(MZMĩjEG*Ͽ^ ~)1{OѸMQI}"E՚d#}?{O|Di0R. Ը/}<@-> (Ji▍F3% 5|a@GWWħ1tx5Eh)Z>F템9# @1f 3$2Mv,ฮ?8Dsz9?:A; OwY8*Rhh ˟ vi%`YW[L#A)d#mB:inŎ2tgy&WRbt@$7[(t K"u%ĉdRG_ M6a"b Yhz: '6v{ϢE,'\_UpVS!›A!ph Z0*1V2|%Ta?̢TƴC \U‰_!O p!KEt >,b7`P]?(K>%)ޘoIAa&>\,Qpzٯn UOv(`D!uٔ"XI‡0U:NqR8DZV=5# ls8+xC m,:@o#Zӑk4& ֊ѡ0lpn5=+ 6r||l0cx%CN'8W"|ib;[ivL!Bľ);E/>7뛌qX6}.BiⰍOyTnIS[/Jf,B?*3JGCʾ巄XK0u=:Pۤ?6^V?}|Sv {p*kY 4_e)Y;kmx9n}Ä{/\v1r=R'C/) szoX#²j{qeϞƨ\\ߊ%*>b/9Ke4_Uw{;:G( {S`.zR{^Z'?be=1fНSu͊הY++yƲawnƆh !Ehq~vΠ h}0.L#ʎ4G@'L<~Dnٵ":ad$JlLkpNx ݧ ]ғJT(FeuI &7*`M`LvJdom,ebZCH \^нXdJkzȺ^~C\Q%4U(z3kG]K.Gf-|~Q{)X H{4_eWH PbusPEg /f`FJ9N)!)gAec+FSTmn& `=2zEj1R,,Ht?E* < #΁- @qliu6t5FP NmNFv9`?AItb;FIa{p/$ɳ_#? 2VaG92K x|b5;N5aB ׹X`ZbE2L^@ 3zy%F@ٝҧQ`G/tb 7E\6=L\'u^MnÉOW `Q4 j2,;sTro|EkCBXO`&YI\GcYB;E؀W58ꡗEK?WSV.:F69h_Z|$3A@8>!6ܟ_M4|6n!,[g*ǠiZ43os9%Oa1&n(_9yC:$Oȍ!8֞ŀ?z3G8 w6;=8v' .Xv:BNS4N$ӹf7L|/Jh-d-ݶ\c,*Xn]yk3rs mሂ 6p}-E#]]1<<ȼ(~-W~SȘO֞h2ϾEǙ/8G@f6-Vյ*4lKuKCJ^ԇ [}C $z|E]Z1KEʏzt=uۍ…6 GxJMIHm2 eBV!'j6 N\4xO+)8-236ݍbfA#pb~>D}?Z. y>fPu1~xQU$e @qCTe>_P-zG'[B1-L+b4hAC2K-i}dKbun<)\BWJ:jrpB]'&;-Kp)F(!NW%Eוݾ1|ٳB)`YLMvrw,N+?Sv H\3z.҈s`Nt6?3*h`X,8{ %؈sHKx~Pi = Rv:P 'c4ƗPr¡ 5@(}6'|j2uc}C[b{+&z&ۡ||NuwqWyOL3V4EI?W{zH͹ ` ?g{'$xeC<8*6Ma"}OB5ྴtfKr\䵅 Y. RxZ;HQ'W1{I=P fz׿l Uò?<rAJX4Ԍ~;P2jL YF"!P c`n5vzSUi' T!-7j)/v/TN}!KW}q72&x-,rIC F6( ˪9׶>l9Vb)nW)邍8s f%c+j2G$ ;>Ok@˭1/IQu۳&@葘I,Eώt񍣾G"fh|MI]_p~ܙ0h<V!p1 Ty5TLäetP&$8١4P9-^Lx&r5B6dvuڰB ഼ *FgE J ^vVQ*Mne90 ]x>!.{|0jM7J0Ŭ{tEFY}[۶1+1*GE3 v͘#LpR&wYI0x%E3J6B9?dqyHTS>u:$"bo+`zraAYA2uc_P|;e4kvg$۵xqm$57!-㊾9(a&VsFjy2MT1`=;%rr$vjd>G1) 7K=3ө}eiھݑ+ǦԲDv&g}kZ`"ffIƭɛP IU*RNΟr ѷq%0^okI~hǛMۀ[@9JbjjZ'ZPR;iډҖO"28_f4h,5L`PeP3M2x9)X%%2Hi !kaDG`r5cʇ:acXB".h*'h1_ഒ!FA}S@j%oz?rl=wA<Ì~$\?y$`ft5;3J&-w^r,sF$/,zwp/4K7(sQt&)F nYK~;M&Y^,aLs+>aRQTgqa/]u`_;wUW_V̧W򯕝eC ӭ4(& ={ڃ?8=1-W\2c}Hv 29^:/Ydž>W [n4e N;]vm qxLRhGy^A4 k_t%b^ez2M!agCPT:u֋KrK42\ ϡx`.""8/MkIpG7WQ74 ZCڊՖ#HlI3q\*Ib4*P(~ Sp`pg ĵB-!1Jww5$9>[nx$NG9F>IazU3@ؽ\XWˤqfAhd hYw 2d\>X>c"63<\7 &+ʈHJ=$xRqZk–VpancIֵ랕1ro\ Iu^')KZ4i/@ Ɂ6ĄC%@tr1id;5{yU (VhHI} Y1i-6L+p7a*Zãoh-h*3㪾j8\3V[!ӫ36Xz&:p/}"Mzwr[H;a9Oܛ, (T3yW殂D/ cēw-@~IkNʗGCm!#/h*fw;vo*SNzk(pʴ6ig}UkfAEmUZ|ʖpׁpf#.^Z,Dah4!2DDnh ;I-fc/Z% ΘRvʽs_JC)%gnelzRP>jOyd@i^X 6 ;CQǓ*v j'RDcϙ LYwV {q=ʒҙd%8ofL\*ydO5oǨeYS˔ݨY7 *EK>>V}3`6-UfBc 4"h1:\T{r~c`p?yW nJ꒗ؓ\^.il%p. qqRm(erO0X-#OcP8v4lkUnt-|4rSb֖ȗ_B7BR ]sÐŵ!A:MH@|8,SmRY$X 2T ev),g婦G!T-[Bt^((MÄB2t/ ܙp&.NF~C@ۺp޳0Éŋs4=7T"1z项%[okdVX1c]&X5fYk }~;X~xQ엺 JD8%$asg & т{,sa?̍d yX-k`K?>1Hܒ4ڷ$ġ(Ȱne\:rf~P[~T֌'EV.@gVU*R j&bpjYyJxiY섈[}oTrU2n}[ 4~ઇ?IaJm։{ 9ajIJ58etsLpy ދÇq]lS?TXflI<Ҿ%ݨE4x aiJY {D K(jZf[Y޷Q#fJs5wk1 2uiٵ3P_w|in5@ 7~"k~U_wi=%;:P bʪRihL@)"C0)\z7EfHP#m(-0@`Q-J޶ΆŞ8q̉͸ j K,S?I=\-$z@e   >נpoBץ=:1CHlS@! k<,"~a?bꠊ8}kBfFN^G%b4ű6UTIpL^VOvJn"kWإ ?Y4q VV̙m{Y,dܓ|] / /}dSh#9+ʘI{C슫S1e~۷ʖY8u)6zl4Q&6ArPrtU'7:ϋBeTB{e_.O1qp1qk1ZW3+=LDJXݏuE3֌Hʴ~+ P)::$BAQ&ߨ.{E"ҢŒ࿧4 QUőpta2b:gkNOxPhҀ r kd5z"[w \\/q1BrK>vZ|{^T`ԭ- mJ#h,xшOHL BEp!q{͢?Ss8wE-Zly*_u.[騶|?df:Dw)@ؑq(n;o;chmz7mD92sc8ؙb1y+T8 Rn9>^=ym3x+Atn/&`Z1\&eQ6`k͕i*vfi'&<;4B3!ĺ"h9EF,N~ ´ @*ݤ2a2?!D)?ErCe-ftzPV֡H;<k^G AL:NRƱUfKHMpckw# RMpl8*u' ӽr['Qu_kAg障WLIɦ~D58'8X2JdnbfX:4"FÕ礝D]?{4/D}]eה+M *+vq򟠓1xG0N( Ħ5,6>{ JQ F>GIWcOVsWEjs51AVة(Z&K)G44햕@@3i8-gxC^ Uͼp nw-p  N}8 8O14!Ʃ Z9zLmv%Sg͇Kc`}9zgͥ7[5c4#ˇMc辠 p럭HC"%+?Mdq:48nC>'LEs7o_D**hXw0A/B+/"mbpA~MCyO[ҏqnKնdUPPO薝| {jxAźjYlIvԃz,r:B"jH$>7vnp) %ۊQ9ǸqYCG0:om $1c *n# ԛt|{\Lc 9~Tz=y,Cz.#\ n ̰\k~+{`!4 #(͘Zb4Q4.% yGlıPgAJ8D:ܢF9~}aIYᙘV dQe=fЃCA-ܔE<4^)]B$ڄ4Z 1_2@: ?t1dxDuAoy Jd7zqug 1I2gpäCOƋ,_oǞ#kQeɖ 񒮳zL %el\LlAdnp6!-+lj:E*s+hXntt]d@#.s21}"3cs >=!:_[]X?E. tH0GD֮pǔ)eW]7B|jNѡSXd6s2vEH/Ǧï8tl+3Iivx{9-\U&!5Vя1;٤'EyYt4.@=܈1ګ--a)d?6.>bT'hnT@F *m 0O4|u* <ֱkTWН磧SUɶ8*$ wazc;3@ك\6 C$uxZ 1E&h,CVF}")F.eZ|[n%PVy:cΔ:C+dg'y".R*V:AuݴlQ+hI]!mwD.fjgz<ʞ+ep@6̑%ؓȏVZ+zF?Ox [Xٻ'2~}ug`n|VRh-<%L4߁e4i8Lnl*K#N$C\r|YZjAky`6ˏd ~o%2gr0ZAPcT1إpjXxʌp陖/a_*D2Ô5 #$g"\ 2aܵh;*boN丒Pͳl3*4wXxI./ v-;-uݢ|^fi4y9dP)aR_MKq|߇!+bhڤ\'eg wH RO=D5ImIU']^vB[#; PO\k΍Y;Ϗ+{0͹ttfLYwL8Lx [sٕZ`kDik4-`)s@4{hsKe3q$Ač(ģ9}t/ή2hm4=%b~OrV~(y䣆3McKW/u]pcHd+P-14ݓ7kX]@OO|]>$P@e1_0w *ު8lŢ~1OHm^;%{i{~0"h6b1Zh6APke\nRMɚPd'84Pb H fqD!L2ʮ F0(VlX>?O-Z*)5A$Mm>|*fc ?DqW:Zyt(J9q״/gah( v)9Cj ?{WyE–E굧 SQ0'An_]b$$jLeo,GN^8Q[Z>Kp$@Vn oöևAj[LY iG°4*l5e+x$!ti1f I5]j`?pUzG_xu: 6'PNP]^WCgd2zN=1|"+09_/)`v;۳glED|*n:Y(8S_aāWZ爻(-)SA!,?8ȏrޣop=j~E~{s_66=}m:چ"B-9@;JZ# Q3rw(YBA'w9vk2֬R2f#zn)WO(f:jB@Z't2Nn>pƏo|&(1asUM"h$,١WN[yܷ͆,BrvvxG;ĝ5WA= ޠ0<6: <}ۋ[f!ھV]KQqV%+X@\nsRE V{*ZҲ״WT珞N'~Aj (MS7j:ɉV렜['I7e3q/œ5#bV4 sMQ_{çXͱXNgd@}yu3YN=yŧUTBK$ײ \ 3*U~?QZcC,c=58֫b‚;~y܄577S^mlُ:X'DL(#dXcLL5%h*'MOA-$98Ĥ/u杦bnR'xkXoC{xp WxXMisMGߓkê֑ !dBDF*+@ xxH$Cԭ(lrp%{]gbYኌv,{KTdB ) dz!pLwX  'IJKGF*ɉ%SnAM.O2BBp|7e} H uYՇ̦OJ*{aG;AA};_+"w R,EnOYA?$uPB5¾uMaR繼8_4OC*wd>9'BcWde:4r FX[* e\uç*:&I^:)C;+b4=XG)&t\黰*PJ[BHя eMǴsʗ 5_2ޗɓK5 R_6.;&H4(wt)b fn}#`kf(Eg'F Xg :q-;\&Zjtu@$8hU?LCl*PDGFi1'ESs_FIoMH&]g_`_C2ٗn[[k`CA7aD)]V'5s;@3"t1E.U!:E˚a3͐4r:V?6:O ]">N?rh}[3oƅfǝ(Ze9HnyO57A!z#ȿ)JpgæmϺ3W Mk cj[!I)xrZy5[/l hT(wNy,K-h'S5XiF lr) ~/~RyE*luE 8f@;5ۺl*CioѰX>VZ~g$3KxčL)KGz$  bɈCh\~@J._R@sq]㌊n a(|<Ҵ`>jQ?J[ E̻%0Ge=C;AEJ *}|^:l3CDS^AAxw r,08N߉C08uTOQ0/ ||6g#r}R, Wq2Sٵr&`S^:+/>A)8JY22me ߳#f4DFݪAdc _*ƀS|k[9m143<[[BDsVŒ28>yLJX{N@~t@n%Lw|}kUj~Cפgr1ɲSmY3|澤6NэZAyyw#Qh@#rR}9-ae݁_t,FNfka3e6vt<+~ʄMd@HӃN<bp Z $q-Ыl +C{7V^B~fm5fln7˛=:;5P X~{iJEz;6ylbYђ-oRCv@7j<$Jx}OKJvF*[Sg9oYc39Zf5#AO QȽpOY7L,Qtܸou]{Mp ,гQ73{K7=6^]E̹[C[}2eK̘ q# +1ޞc~.gO[ M@Ó:cފ/lܸzl@h&}-VW1 z`I.87>4|5nWBcDQ?R>rb˂UιGm0=}Pe= tZr V%1eFz! Ycf2QFBe5,M3f/RCc,Sܸ|enn+ζ 6C>zx ߺ73H6HS(kkn:|Mœi\Egާtd3W1?QrD1`lFU< i AXȷEPfgo0\|2%sZ5 aǞ1jRls,:`(8[ Q+) PYm2,g;dUEqaK ~vGy7}  b4 kY:^^lܪy4#}%9h.LBm`ys"5Ɣp_ɵStܗpOG#@9oӡhS2a1Ո[/U9TL5/(2 cR%㖻Ӆ]p/%R"e/^YSHP<*hZ6S큣VarT f5ZfŰ%ZkƗ)*R6gXb\zPy΀}-_Hc p6og %48ף BAjQ%~}^(sz;"FC|-`4xZ`Nj^2Xz'J>iN놃7)A]uq .WIffax ;:N%۩1ߧiQ_k\X-?T &Nv#SbFjϡdGhYnrQլK4 U:"88״f%'Â/|J)_|:&xx㠡{y0tO߂yt[>&b;һtsrFXz.cҺfQաTIm*'RBlNVU%wf+&&pKqdn]r,hvbb~Wsi4=1jGo\ZJi~_6.3k Z0X0NHN\yG]nXػFJ*'[G/$(4],6Zb.\߱q Wmpb+V7;'4wµZZcLaaP kٿIa/b֗ȋ |iOdj񟂴9ޜ *$}-JV1UΉ;Nqq},DlNe ZDT #l]cÐ"u2ڣ+895|"#0]X(0NL|ܽmX)Dz,wd"LU?a}A`~ otRZDt-`ڙ,".?͡,;_BTHt5tcdsv^3ح醣WkDFP5*7F- 6jp' F%N6 I;8a+˔WҮ"`C2(PS9yue%@j37ebdB\2\phwɄi@v !zEGǓ{\UFCZKC \n%‹Љ Mܤ;h:E W|"F;f=/xMnVKﱮÀGb]\5Mә[H_ omⵐXtAI,# v=*2/R6JȵOB!/?S'yc7_HS.N {d]]Y8hR/ ʫzگ8tѽN$nlZ0ڂQ﹒ 㔠v!b3\ڶs4aS&Uu1Nȝ5XwWC P\D)/ڑbлԕ5j[c%Kb鉶2_M ћ D3v|܌8@Ai@3s7[/oƶCʡ%a^M c$!L^-*9^ğ'f?O]S<_vgE^bn$mŧ6_R|QZqͱX=(0g.2A[RUQJ)Aa~ưsY ۇ-qHxW=7+EuBbh؝^%qdG N54zm,_Mwa3_.(Jfʆ9)pK$X>}ή"43Iԕ]m0aJjҖ'|h&@fBYHeRfӝ9|_6e9>NJo=Fh_EF@oW&EY0T-CMI&3q FAZ:{Po滚ŵݚdH^Jy yc ƞ܌ZV5oj k|yGp]^;ƩgDDQ0 }iF=Q;A] PaJ' @;SijR3?-֜c81ꦶ>-siM-^IEV~r|@b,wN'ws\\xH2Y3]OQlJUA7?5sop%ZG2U}IT>v͈6SW4y]=|aէmJ^2JȸA(4v|P$G+?^jBSA*!*Ԍ' Pb?W d$fVۊpmh럟Wߡ 5kh=l8KKUCX Oϧ ]u\ D׉5kCM,|s25洞5M ^kE"VZl @mnjy~gbG;›a=+ 5W+E9߬+, `‡U-J1,'VH8?F9JkXu1̣ʮ\d_|L8wڅ+ j_ ~Z#Ხ2^ށJK\cy8O0tK5Krl~cylP2ё95bhAfOe٦<t<]j"E8Zmadfj .%-=v3v=Pס=1luZx˧@\ЪG9YF53u՞%;ADZ.T # Yǟm ,Qpo*GHonZr m0aOlngnUXUJbpT`ԦTS]e8A|6{P]OmOo7t725 b'Zom5cﮐJ = EɥbEZe' iΩ}+ v۴šXIPz8T-Rs6ZP1~+8&()YJ釐{AP҃1΅aQO#^A5ǣrAxmp6E) @V.gshK{#A؂߇i,F*[ [?e;V1) |J0li`XF#Ev^TR[<>kwHݩ9i,kjN4"G/cϞOZu1}i.[) 0 9:=\#,hkvU79rؽY%2U$E塼'Avv_d\6M}loRX7\X9ͰRϦ{=GB~i{ q-];&.osq@̺O11$r*h@ Wl4[^#pē|2r.'D tH_ 2J8J(SʍcX!a`u%RoJUNR*p+lƒ./.B%;]4HBJzǬQ)M?U Qf΄rz4g]Tզh)'J6\x0Qq eKGl"}Bʵ䗰E_㆛&D]Dfd[70no Pg68m➦f?40ٮ ]ѡyHۺ1Y\9 LQ8[7i\NfcU+-sŪv]Cx*B4_A0R8iKfh..dGSK|VX 1COlȑR[zQcijN8hk̠،Z ?ͯB;wL#=e j蟸2>U7BM~+VBzofzi /.XrьSi/t(LuEUpi0/R5C[H=vS"RuXԢ9 ߌ=,$n]}bF#B;g vh7~Bȏ QOFb rBUWq_7M*Y5+yYne`婃{x9< 14.mBBt?2!0aePeU]y$6;dq P F)U?U&}H H @} U5S;8IhG%//fMԤNa" E%uZc W!7,eotr.gj='akhM]kuflm#Er7u7z#5C c?C}A ̱F|:"\;D&|%*d&%OX5G2HDHr4T]t= Hu˿DPw 1_TN脨%=)lZy@uzi&9.̦-|I)`c|&)Mu'=Cq΃1MBTi7gYa}5# ܞPWpC?Xls!Zgf%n}?|\ˬ'{>BjE{F#h ?,cr{<:?v"6_q kH(KTtSdƂgKg8NfLTJcOgbQD~cdʻt,_([{, zxd!-Elj) F@RMl(4F^q*o^5Z.ʆwV "d>yւ":i֜=V ;x޺f1VnKЈuhQY<8ֳ~Yn N}+D?I3 RϲU[LEK&.)rp>u萤9uId6',1s}׋gC/Q7_S-B#onjĜ;H|`ǁI5z0kh\/\򟴚؜&BP(bQ-Evba>!]^7)6#ntlE#=9r L7Lٔ3Oq娠! 5+|WAGԵ0>)1^$0"/(l_`U>L6|ܺ>Vfw6m#f[$G9j\9~قFQDeF1=rtYoT|U-9CBy$oL!_8"R\dq%0x!E1${;C{ m"tćojEg4NA􆾖E̴QBޖ,~gDF]n[zҧG֛3%wH޽쏈q֔M!jV)L"9M7o5#R%-sqdWX N-P'b%^WO45 9*~rvA-k0y!%[aC6@C(Mu;9(u61Vb|bc\߂+u -7l:}Qa!}qDzFרe]f0f$qhװDaCpblX-%s [v: !jY3GBdBOe|zBP8szm u-urY SX\J^3Z2/",]5mKx2+Ca4zcвV[:] +C[%K8U7 Vajlfm>;1 J ףe!\햬B4uH{!q< 1T!d.qym 2-l++f%c P]PZpk<Vj>.%5RE.!ز;>) qZ8p-Ūu,Y 1\kuC ;TJgg0OD;ˈ ƕDWNԂ u$IDՅu6HV'-(. z η.-w/]f7(Z!X\7 Eز>dʧ"ZD,{SHise%%VUug9'W'̷yjŰm緣Pw<~2P ݑ=~bGtz#C޼)Np<)#q[(kpP6  uh-_-WN[ 0L$T|w=qئrʑi]"HS9K`Ru`F=Co,|_I5(`&׬7ӠRł<`ko_N"ꈃqwwUM'B")=5YO-#IOhkK{;=Љ7j(#C2DJ-4:cvJIfZltPƟQ ˫S8r Of2rUŕGxztFfۛdɚcgȋTˣR/%Wr.r#MXZ#}Z"hwM{{v'5'JhM}N)f̤O۝ 7IPWƌ!)aI2dEHXPܠTRCNu v74&tсml"3iPx!bz/qcC,tAtG7֦\Cd$?:^!]pU̶UH @|gRD/lՂnRW " WƁI=ak>qq[WwԇK=ն.h\{- s;,Jͽʑ3֕gO7 =m74 1૮uF~W-mt jE'q \՛yxZw g-YtU#$.[*}p0#f@:;ݧN"Ի3L.1Ь.uXE+ɖIֽt(Qh6y#_?gkyՒC *TBH9Hs%(14px@0obHH;zVDHk]{aP(ʵ#'Hqб!"$d*lVpu h#૚3?CIDt" ؃ <+MHC> ( ց&9snmQVDNbpA> ;Y?N25q\n8Cf\"zU!Gw^R q$$x04jgWW=xkZÛ+1 ?*+*ѡ4e6o\3Oz ۚug+f佑ݑ )O-j6dd{otk#e2LN^K~Y}҄Bh;iͷ.ur>=)=BaՄn6c0]f:>`*՟",xض^2}Pq'HSnTw690M+ @p`&ƩBٹRp" Mb z1s6PIN>#xFaVL! 5SWPGo"`7$ٯ_3,9tPr;_w{`/\dGEAq޷/.H9ȾB )eYD*)x)9NO>\bFQ}uBN'$R1%wt!;LRùi{hw"rGTDmCL1)ePpIڹVM>-5 ^2;!t0K>SC8>`X^cXHyM!1_Z3ґXp"q"3j9nH.]H̠$wvl;Z2t6(:Y* H 3U𝨡q@^ܵfJTX/ śΛ+lNu{@<m?" #WAhFqMvuc/%m`ui;nBg q0 mP1uݐD-QJʧ[v=(ߔr^ުf|Dˁ'^y-7!*+tzfVl㟏ZX ̉6cE=<~>Ta1S|&Qw/j 5FEkhWFg>R>d2ޑ12^s| (B37Iyj>C$'ݦB? Qˮ0"%ӿ13& h{:/`\zGhLz,aw SȞtg'C߯'<1 kK V™Qi`pLX 0Ǎtql=we1J+s5qkd:D״hkPrZeO |3"OINK+~NCNbR|%{E'OlJKZ1ɲ,MxWAbRgS+8`b.p(!%#l&KNVvq_u~+pzp5TY@^T=iYǬC ༠dP]ṉ&ji͇+a.0~qi&5 k4bptx cw.R3F(41YNxHW`&\xC'&y  Q]L~A,-j-e E+0MH"p 4?OH D66.̿ k\, [w x,ϥ0T,Y? gRrvPvjSY [O٥Hט~mX$b9f%.mdV ,C ?"s,NPf 浃`:,JuGiw5J|W%iMH4BoO8`+ .DJT4>*i~V`ncE ?RwtaNG-T1DrvfAAQj+-צb @ ,Jcd'3+,|[kd ">/= {D03^LESo\Mez*˖U,okX?]N>QӍб`ZT-8ep0ן&}e^HnT">V`u5j}K9,p/sJJFBCp |az#m E#HHܮpTW4Ѹo*@|J1{:k<T-3l{5 gBX!z29xQpъ /k$ay+QSZ1B.ub9B:D.oIl'$|Qd,l`X*p+11eS-.;xT$2d{b0^3L Y;KחEv8.p1>+̊@ Pd'\ʀ:Kfە!-#Ƚse@Ƕ9,FY|9P0nm ,V,*pQVeDf M ;xS?JH"a@|]-MTƲ_(/4gJ?xg*߽,V1w3FʤN;<$jnC?eGsa8-}nG#I8fBYHHOx-n\my=6w>}WDT:&m`qj4+ f;Z2 KO} NmWG\V Prj;RI;pL2E45kNʸ Ha0G,Im-Ԋm\ʁ BeD;FA*/IYE1ڸ )-=&u Q$V\lT07yء5hKˋLĭ/8Oi @L(i$W(@7AMc5EɚaK%— Tn7}{T%3P 6:Ր[ ٠mjkƆC) Eh6 aɲn|F*szx@̤Dn: wĎ"z'r',Vלq}6FMy:ᒖGiivGYک38V~Z6ɲd-E̦'diQLkV]F\F]/4_u]sthK& 'Ý]i~v[Fk;L_W̤ceU3;eO1|s_qtqجmimB6Vmҷ-rfMnpNĄ;,d' ! Bk. ;| .E^Mg1y;\2}- ['Fl/rP4zzXwp'$/_R",F?L"UiapZF\Nf-jٝ75 ZY0$EV8qQ6e+TXY߾/hrB{.Čd.Wta#}g!'b4E) Κ%d$2gHeap1qŤ+wzkrHGF5"H8$S6ӳ+OZ=W  ɇ2&|Dobmy qTߛ8M{'%aޘέA'aT[>45_CKxFun<&vIN*8b0ݖ#4kpaGM3{T";rԗk;:+6B]ǪQ&IQw,߾mZX`Wlc Zb+'y6!OOM4d9nG;z4\~nZ#¡m(>Zlʲ6PʗF׽7GwxΑxEg:Tؖ--\ОLhW6P8`m4^)Re::[_Gx|iM= `">-yhi4ȕ;_ߜt;Ν96bO!1^C{O,g50Sa;tOz3XETI!ejiiVm9FCl]oL2ݝp(y(yN%ITmTpB~]>9BTؽ%|dDeH/@ikYL{ĩ.DYKNmo~J~,Ug[&c(|`!s\Ŭgj `l ETB#uT N]17?oLwF/M0)\uל8 PV§GSwG">xN%@G6I)h?1n1Sɿw2`4^Nlw8BȐP,p*06!X2F@CIa7Urq}ȉc۟w(XhBg ]#=f=LU g0dx~MF ^z7wԊo¡#}>*q=_AD^"F:VZWcyT#@x||epTcA% oH4 7 C5LgvmL<%>jFaDf vk(Wgl=. Dy5?npK_pxo[9 IxYRSJK];(!z(@#9u+51u<ۺ+RA~#ca_+ 9\SQt]yz*g"@&oĻrSl%:m'{-WۏZ.]vP46V+ #b ޲X_e,#ta8DSm<lwʖ :+/BYMi *ɫKUl`x|r|sz #/Q➈Cp"cjfLSWGl58Ee.(gBkNA MA^ R/zA+ˁfjefFm>sdd ~F\1oǣG/]=yD?}qG"1tIIBv4(6)M#KT>ROdB~\Gl,BƻY%,?x@)&PE.>_~-|R0a]Y7F~c:x+XX%4:S_o[jSef' #(W8Co|haL'1^594ba|گEi | RVPBErӰlˤ Nm3V^52ns~$VI]Ӑ-/MڟxT[Z3|BZC7l|\ oMϦ7ָ7̪Ó ³8qz'QC#=[U 月kPՊG<Ѕ?i4}"S. Iҿz_vGqK<0`6΂ i>Hj ?ۂdj8<ٷer6ubʠ84,~P4ar#+x`Bfr/I 8ajFz"G " 5fL{/.cgt2O9r8m|%cr8 ˟|d-&bI/ 9Ȫ&&pp ࠅCYHv0K+d'bvd[ۓ]U,سs;6E؂Sk` @d/ `iX(*9aH,ïL3.SR%ht3뚤u>5Ҫ; j6}.v7aaN[F_3[0= 㹛{^cQ6'|oՑNuto :|jLjhݪ{vy&,iN:yMmb) !: p^9{+Qq{S=YU֠Nz\w剔 h|U&e n 2LAoܢ*I_"[U`\hخ]f8gQU"O`M=aޜ"w~^ 6jKP^ČsgŶF{:* ϷE.+c vNYki+qyN$Z4%7 z=9R)UFt%hW*27:Gڕ̡8*4C UժYyAd1m{ R[Rj܍{ͰmAg uY K|b;3Ov ~#~-TE-m$5WaS2\?Q H]e-at8UqDģ֡#Bʛ4C=Hp0>]e|, *Aiȟ Y(>w _K-D-눟6 hpca(,_ޮ+1"L+!n#̺\Kn  <3|f)2Qz(fwVұ2U214Q.cG;0ֽUz~C`* 6Hj1wnAoSp)Z:!CU?_>b%G(E`Q xI+g-1 8ZZ]u h6 ʴԢ~Q*Spoɴ1 x%qw%x%Yf6VGSi8$uUX.||}T.`PdA.y%wh/nKgǝbWK`N jLg(Xn!$PKWi7t%N5RH}nff/aM6>T&2tq:QYȓ]cHOiug+<{b`vM3M4C"!zL";Aᠯ+X܉DHѦIA%f3+_0?RBDagoud :F]& ˠaG>fP9Ix_b!|i jbZx>]u)[#@Gr3cftב$5{^1Ƶx0dZt!U77qSW\QRa0^a1\ȲMYnAT$ q~[!H' uiut*`vFIZgRfz" @_7i3 (Q+D@eeEm(,~ѫhtxyۃgcxΥkmgYX6I[&ŝ-Tj.}ɮ?wlQ(+2A'(`sڿƵ]g(Fɯp*,󾅡o+A9Tޕ-M?Xut{̑]J >t+jP ɑ6)ռ_:_NV0ǺQ[ri1Tzy "'bicGrO=`mwK˱}Υs[83%PF_ʬv;%ӊau<.,0c ځo*%'ϸsa68dϾ%K_9$!i^YBdFEDi.(_0 A%rcVJmgnpFƤ <-9b֓1^㴣?YQoG'b!y%Jh.이Lq2,sr|9&vp{-~j@PF)"&rKxƞ7W,%Ôv8zr;sb^q\9' ZTґn)f5V-xORşN L،,m*6hHwgy}QQfkQ?*`U gh͸3 -<F}85:[sm#!hda06*WnS=Rp'ܫ .G#Qe $@*MFk5 GjqYf,[,D9|=X%I['Ӥ7' 9P/hjt<ƒ mwq3 'ñ*3:)_㨰 SAqc5w1k-Ⱦ qr"F 앩nb = IhY7g gHv@/`etllit̴_6hrù3Ϫ/R~EM֗% oI+$U&·C2|M Xȩ"zZ$ԶH {xk퐬Իz)e qd)TYH 5UGS&~IU0?L7 Çmu p0c6DBQpÚ;E\ ȯ+w/MqԤj"% y:nh T8VQ񔉄pFJpr:sZԅITɁiAcgYM#$gJ֛ט%ŨljI2~lω\{̥ίsFy?'{Jun`XQB8@%\+Pv=X *#f|OdXu\+& [HvcA}j45Z/OOCp"dى;OJt)2>Kԟ]~RoP O`ݓ.n}y4݈۩#āGqԘ3g4|>(X)񻹑_cC?T޷tDMc;G^ҡ~$-?sk?ZNXӚeORVSkiWbQX'zJ`;XJ5-LaW0zXlߌ[7)G1uӔ`S9!:Id_^OA5:XU$y,hD n(30fl}!i/1R$ vQ q^ K x'Tڈl6cruӡ0\;_!}7֞K78щ./Կ;G0=ۤV9_jVx,{ʸ +Xp<~[B0*h|uݼ!;q=e!s%ʊsޟ%4TߜL博Wa&@WsI7cOZ\ c;7G{ Bw }URcBJ)+sdkvx>]a#wėulgz}-Z> MFĂ8T] *oR;EB .8%x38/s-VtY&vXĉ_QP)HC sM9ã8ݫ_!8f,urx1ROP@gIѦ~W :[t[$&_5})$+_7Œy`xêqeʾ 'j&i[yz(tjCyd{ԐT'N}!M(jL_F5;T N-Q]s攅~(De z)?fuv չq,pѻ@@J]r4%FяB{ۥ&w+>Gf2 C(f>:c 0A)"Gqߐڔf\}EɠKXA6*^8וc팷I f`3|63espc[28{ZCcvTFLk)e?9A`wʪjk'"k 8^呏u;5vVR5"CbzG@Q?&S]xB:thݴHWmCw7L2tX% bHJ*5.xb*ih{1 JFi\QO2A[Ӛւ}<5mr} 'jwQ.L}*g$Ƌ)E8Ί2r!oB٫d,pux6 xw, q€L~3W!X=P\m]oW"bq cf} t c|MJ>.b8_D[ICDM]Z % exE="kӳL >G@{˺' hpW,ɣ~|)4/yÓFG1{1zc8f$%/CoQsn586V]K:CN+垗RbֶJꊙ_(q47mXқU@{Z?E ! ~\8 _KI!Ã񏛤r]1QJvd^79Z GdX"- bb)\>'T0M rҎ\8]ߦUvP ɒі&z]emv\hJoK<:t22{Њx??md Df凘/Y`ҫKL|C5~/V4q^uȯVa۴U)RlK)iȸ|ʱ$w*ۘvrr6q aJ&Y\fd:QQ#K]>őᑵXL u 2lHﱉ6M]\AW Jcrs/M>a5Q/]jޚ\BVL_!=պ NbEPfhWfF~>}3WqaC MzRbDaT\ʇ2kQţa~'9.?p('jg1񰤛n[zoYv5lDտԃB}j%ff/k`YD.u옟\y0a) B6ew IYsh59jX CwɕK$4~s>Pc>G- QUz/f|ᜰ-0M=_ _2`DTf9 ԋ,5Df5ۋ$C޹.:KVc/ E28FyM]hH-_å9 ).vu@kՁui5=(d\M%じug$'P4栶*w5d_x|riʂ;TMPV6umWғ4.G)1MsΚͱ^ @s /#YIzkP LjÕJشq 1D4[a48q_%CTC#T Ux\ zd]w^ ^a_<4_2c.x?)\\6G?\m ~'f0+y&6RvXԐ*}A-!h$Y-UX#g_! R߉\7;xѡNN3@~sY  Rᴴ;PKFHP-x!}^(\Y>dK$.QX]2ҬqeDV'm̓hwZ c /sOm iZ99M ǰBS7م5 Ψ$$z u'𮾧 VX)"4`&ͺ)ȓI/% RĝPcʵH۰ez=Im9o=; )I~c\>`k+1qxE^L+.iCci9XP!Uע귄mffAVEgPʓ̘Q?EkО`>`{9%4mCUʎJfLA,z_?J Q}DL~9N#Lx="hǹF~74* +i0NTQz6֞#D10 BrCx #n97dFU'V F(gx(j"tx%1=0@uDŽq~̒kuuV`QۨZxj6(X yoSH+0wɞ(CD^A< }dRK I˚ZjпJ 4l3~ns >P S1o^.Vt㖡=:_Y8Pߢ)4!QЅ^&#iXBWt^EU@>Y9ZGeNKv>޸auѱOz+ ׺x.M!LOv/=P w|DȧK$]r0;n{Ӭ:_jS JUᅯ౫35t6TiVVZP w"1L!<@ɩtATc"kZ;?-T6NYVD~Hzq:P#=JhUG` `. '3;ˏ9q 7IKBc`fNI*5m 6Td#~݃LCP382_Pe~:h Hx=6yغ>іͽ5!OoQco`4q{A2.QIGܸ<97E3f:{MrW4૕纝ŗWu~WIƚngGs .?Jh:ϡ}A^ PePB\2_vy&?]M6pgRc&}wX%ZVcҙVW>.K.RB 7ƟoNa?U]~^(B 0۲GA-Yۆ]n.m+K |=$tgMF(_K&':39 6>$ yW{Z 73"ⵔ|l8!J%$'Lj#lюT*b50o SMqoz=X,a(%mҙ=Y٨犢lH")V`_jvݔHYx fkbv--}p}vb6 bzvcwԡ֠0P ,[1!j4 !4RwDg)q>(%>(lw kȻmsƆ R I΢.< S #z/jMrk-h5lsjΔeߵЏzI7н'?=f~ 9Z5 m$vj^uٺH%^Qfr; 1#Bb C1:&O\}ge Z77\ABpۡJ'O03[;y-t;ɣgfN*C#&)aP<(bܲHVc;ՏXzq >U@ ԁ%WgyT1a~ D:u>WnKyiɇ-.ѭ-  _̡KލM h)35ܭmE\+~ >`UW΄o“d%*(?[sk:ϖ+8cz"e`8ҩg `Z Fޗ.+g _, mt=pp<,S4gyp9״.Ёs/W˒Kr2M4 nJCChB2z{ WbٯB![Qq=jilFg3N`85SxatZЕ7?IbOϴ3+a=d }%ӵ?,s"j5! p;?' 7aЃGPFrO/ q3v Bȼ*ߨ;9͎͠G_m o0*:G~dXԗLh %bOr6m|J}NzƥId7y{JNr:ƻ>,OYb ג9W #S <]lJs ~<$h}ݢt7ܠM2x:][H/ z{kv!z v( z*<>F湌5vWduYjӷ߇1fB: c]'ovl  4sYHZ,uq1R%G,W9zH4{6@Q(JkX8`BڙABBah ~X!Y(ѕߕ,P!~ Mp/,D@m䶵1r |7.ex՗ *r{``EAI1)"CYUɑD¦wޒ|Ms@s6"nݶxenWzDиE&2 >i5pVev*d!?X`%@g_ƩGZv_E ^m;ǂ[lFckG6^~F-{s[IH|F<94Q=|U.(\bv]\\LůK'GDy3*=ćJGBXjF\0ȃ.Ć~{Hl-lSt7 Wmg;Bn.CA/o d-)LvXxTzPATnEn ,>v0)jx͒fr?=bRæG̏lϬ},LyuzTzw[J\ʃc}_Yں]F۱H;#bbڴ@ȸ#{S"jP]7Wq9PVo)^3wn8QFҧEŵŘ چxKWSn,C =p~ IO"hޕg-<(FHӣk挢`y42:]ӬŸQbW eczg[ñfV(U?ORt<ݺQ8>w5B>)pRKgy\F 4b!Э`3 1Z*g"`=]SpUݹa5z>\܁=68nr(cdfL+)J}[0aVFÚ۬s;Qk;lCQ2tEd0Z_2A 6 ouU<%G=z'qczyfw0QQ|Ej6n!@mؔ (veXAQ5n y| /BB#LJ7 ]6]sGB4 9p!猝A%$vZQV4Edjz:]9X.Ww2@* \zFX;X{H).y>wx'wmrԌ%# !A<PP 6d;Qd0ozf\ k}H2 ޝf-~6CdJJ 딧ѿ;͠ c {oGz±Vo+Cy9C%%`6rM[Z4jy*wEϸFg-'VL̟Rc=Ǻ(Y8-VE\i$QhmTDM+Œ?lWA.z琊4upK} zK{p&wEr~&ٶz!`ZFFyA7 E}/pޖQ/T5N[+gpW,мˊ[د[2\k)j<+CoO]{wp+ě4aP NR/>?Vne.YeA2_ lw[ ,NV4]uW$mSv ܧϋAȠ4wswyjkX*%F[6@) ]GsegOsnsN9ԽSa/ĎwT1Ed;2PYWocLLm%y$ed=TVSh)P%@==}ֈa+cUooؼI:4Y0 6ʦrSδz9g얠"H,XpIj|.U I{ʼn0I6t0z|8ѿYPnl b}P+zwâ 3r|YYr+T>G՘]YD>g%6L-?(n2ś}QRiw^o?Vq'|hDfMnPe1 ^PEFa"Ir?^:(҈a%_.k5ьQ!dJ9>9[C#6{gR_VoO*^b}G}©5maæuխ^;~y~سBǓ3B{9@%BV_;s_S#t X4]4u& e1E /۶)yy 9 !3UgmcƾUK#ҭ4]MZoTQfS*ȯ) zqN>C15Iu/1CT묹{nMS0j ޑE诤4X[@)4`Tu/_M,?^X+Df@!1dCZK"h@`1o/x-iC+E_fXXA XELs 溪I:NlaaϪÒW0M3dNSvvupN㚮3a:\ЁeT,Q5iϬY%X퍏 n7P*Hݝ/f{o?N:s[&S $g1Op.f7g6A=I/rpwؓJ-{201IؾezNߗf^)N,U%|oG_mRl.,\lHP=Dz\F =i"ze)ADzJE8orw  {¹Z({^4d$_e紶rS^V gf?hA\RQ쩼3'O`}~Umj>Ta0(3QREv%nqNl=bBh46&':G/^@;~&zrfsE- 3KxB^Б.($&#'N7|<?6Ζiq ^54>W*:r bh?M}.BbjE8"y`ꫡW=j=SX fHX@ jnqҋty]F5?'=\'Sݾ:ߚ)nBSWP$M },;ϴ;mN#>YSX'2qu4gu4d_`g6fO% KJ#ZqUQ')?%=[U2`qx̛WNh*tyS#G+=PdҍbW6%7\{L $c OŊ(s_y.A[Eh-)h ~7^/ ;8{?Z xߏ9mzf6VƳf7-_yX#Q; VVѩ;Y-7!vй)t`OXfRG@KlXdv m=ikI%x[vR7ÎѦ|l| 6c/ȦA4a2 ~\b֚)rq>#G hw2&g-荋qWL*Rꮼꭊ> @d +z-i/oM6O"dN8<5Alc9aH9Bo꛳`a'VI#jq%W~bHw %XgRk0GKJPoZ4 y8Vgr:DrC!p5'@rbyZ@e/Tj~l:e)ǂ(Oun0q֤| w&k%?&\-0, RmLywg@Բ?u/#Ώ$ 旬l;Yק9b-d5~ObAwco<4ϥ.|dJf'\ZV.~!:&ЦzT_?yXz˦JHRWW"l*釾`,B *FZ"LV!C:  Qѽ!q/m-.nOsb)D`Hjmڴt!rF @7^m=Y@ MjϦ=a1naEEDv~'Pá܊? S<(xJ]AƸtd¶p[<\-&ȑNVtG*nv_W0tCKlYW% 3,6Gx}PSbTT]9OI`\G:0Dmx:2`]^b3e8%b2rIWCV䐉q7?*=6DKP2b쥻j'ĺ鸃Y=UR;-SWACsN ybrlcS3H9Z1Jkjضt5PZ@Gm(/kD$fnѡ節RbLooOKJ{8%Ӣ?Ji`o6B)Orlu8VsK;I]"ujZ[qSvsIcV4؜oV@ѫ 1wpfÒR'sqpf-Hu/r;uykHPh0m!5ZԈFu؅ul{js)iNӂ& K0jq]$kĢVK7,_L_A S 'jzdǿ(0?eRt[=T p8kQ2I3x簑\f..KKVAmi`а&$84ZN~v{s49k teDZf!hIOEKrbU 9 n >[-LyƧ`ĪG^Prd[X9uG<1>AH, W^vC%(Gwds- Hp%X3]w:N$k!W Q@O>BPq?>UHL*C|7rH UM k[t|='Mw ;!~K(; pT{BʞMyk 6*vt<H8] ѷh?oZ+YqPt/ Įosu{hrU/t>ذLq5"X\ B\,W|%Lnc9lX`xk!(As#$گ"J)! tp1ȢYb9:+{ܢq#'D+)f}h~*XpHRBZz+%[@IMt=$T3ҍRFkW7=~n 8lGVh/{| \;.ʻDpyKρljjAW4K; rVn#jLD~(!<@ aHU};2UzH1H="`4I'P;';q'_s$[s: LM]u>j5BA qwgJ'D+oQ:?1khD̤h:yk;'2Ie 10/=Y9i7Og<ѻVyKV'ы ~V%U|=q:̯W%c{*}MCX5lܔP[z7CO.O.gQd|wߍi9W O??z:L5>paN0 /-r̪.Loozl]/¸nt24mƠoYۧ$^|S0PA,N]4TYɷp#qkpoӁ }m|)7B'Jv@Qu7E' \* ф6g+F䛡`F=H|հFPp\b봭lV=늩vx 8et+Jӗzd\yU\uH&]V8.lo&Wc\Ǿnp[uuO1^ҙ&}khjz"=+ѩKijhz@d_%ڇ_aq{%htecx-yvսHF /1"R9|'Wq6WoK ҍRJ1"jܷ( &K<WtbRn`k6QPp,ل2UOK|Sp0fhR2g"\9WYu;}NYqiY?jLB>#ɬ$,&W=-{vr=LB[8ÑB%KvBG rk<ǰ!%gՍ7Lwn!1;7O`t+-E͛]4'Ɛ*LqhY-Q{ׇ!=|-}A Vv9u:畓 *c_\ m\j+"("͍ cY׼R) 3+@ZWo'h9Ƅ|ŃtEr 5ePJ6>'dܨQY3Py{g>u^w 5.nnr6,f=^y~p^ ^!r^&kvARz2;U"Yn M#f}%t HCܹl)`oN'cES`*o|WxV`Suy,KCwx]se?8W1`dƩv61jjAOgA\s_!9EKۧO]2hDT? s0J4fy/P8vqlIv0=[˽i P|ͯbJOPXz9?6qJl9,]W:p͗_)054|n=UCR,,긾A =!r4tp)ůt.}{YQxwc= Lc &#Q-z ~YL9B́ha; gZk"B,%Ũ_{c-jT'2`H9Sd2{@(wb!4$gw[RBGzK-L ObV*v9\:S|$ luxUР f{z .oq-kSuT@WfZq] '⁕ Z ABDQoiϜ>9n'HQr%r GTtlfw(^ck|s !#"`#Q'}q{{<Nr=i.Sh/H%MR)VO@,(HF zrIJ#8Þb!8_C&\q׌d)Q6Ԍ̷+ҍG|@)m,}0:np YgoI_{Cw]6:SI.:`N6'n/J~ ͮHnvJZ-PESVt ='2~voQV f!Z4ldMOZQG卤w#F֔>S40ijw΍(sOOHL5WUMH IJR k$c mjNV"~V`eՀqEqmO%^UـA ɚK0Yd@LF|;Y:UOI`/&-G`^onaP}CTOK{Hב9m.k2\Ϛ.z ޙX}rfR 6n`*2"$ J=15}"Qѫ "c5QH/X-;0Hw[pY /8ouVIb]#;5 C?N)Q6F"Jnogꭖg@y`gIg^B_"PʷC 9Ct,/qQؒݼ_K4cף%ّFYEx͉=TeV!|i,^L,=ۜDEGbpbթPN~Z$ ,J2a?P$]x䥖-‘\4g)Qf)>:Fh|^}Y`XS3%?."iPY0f=Cf^ ~ظ\XFGᬜ:b:8q:T8e #5\qSg I m^cmb\zCN =0k*>g=O:-h(0em;Bٸ,uZْh0&^C9zvgP׺Khі JNO2) y|,K?X_uakF~J=/U ~8Qy8NC`^߾b89']Á`z;;‰֌I  q)Z9;}sS9)RMn>Ւ389e8pxę(E/o$7]E[$kʹn`!3%t14V#[@$F0րQJCTw([ _OmҪ<-`~8D ]ެ7Z)aV'7%[b)C'kUC;p0/[$obAH|*~d $DΞ1Qb2so`k궅g@.^PzS$N=3 EفԨ.H8)"-\_I8%ٖ\O:?!0Gq=auEi8gH#D!8=wB04z%c@ 4AeN& N3T%v?x\`_NlV TA_^xD"&vA*XީѺ BδXVUEwmTg@xWC jh+dV׹APTH[m=Q#ܝHr8,iU,[*F#Ax4#{V"ogq[F <Ԍ܀5ut5c(Kgɭ_o@4n1E QVԊtGqŽYR$EdmdT7햊X WEYnsFG;Z.eC |veGiqd[zFܓ$Ak/\f73C`dX&Q:wdw - =4%;OrO&ʵ3Cd<ԻXGqjexEA({igZX>tD!MRU݀R[s5t5aCKg쾃ݿ?@iq%3:D`g‹!zfpLlΔavF wPL!$k΂/s\r$O%4bJƿ9Vt´6g0Sh ]0 jpR!{cC⊎3Lnw]$D[QIz=B oZnVzoyW&PA1Xڼ5cJ ի 몖wy,,bDC/㐜+piÚgA[ C|x)*i8)Yj,UאG >*X>,e{pdB6[pVҸĶgދM&ǿaa୨ QQRιf*rRXuJ;S묓Ֆ6fUK'+ l/ĹYƍ^Ɔ1>` ~ Dn7.e/{.]]纮tw+P_yWW,b‹NX[[V*Up^ڸRQ3$}Vmv^+%GQJ2Ôf|5;Z‘UEKe#G&!h|+KP|f879Ub@JA\4 T !Xp dA qk[DxO:,MuZ\W7ˇ_~ wyS8AY1'*XVMд[WH>iB+Rb 65|`J5um{g4;w2hPF7>Q5e'C#YYcQI8;HOX!f=H>-)g: j^)`|oCb~ 69܄̭(9Sgȫ*քK~3'i{4ɶ_^Vi^ѧSj>3 wy=V[{Xul#3'ƚY#VupFb9Z4hyAqJIc3( PsWI!)[ A2e80`_tݣ3#><ۮ^Y-'dyk( ג'Y%4| X)Ӳצa3Q׈j)QiKL+(n/.֞!ajy5\p!] n\ER ǥi^t7wZui|dxݥrV)Exj/Kse;[kzjÇ&>9 ϷxHv : #b{c,-SMWgZh) w a)Em(O.=˯e2Z'n{>dg|NzqQiF~>qԚtY(L 0IGU J) YG$|ft!@۰g-&%oЛ)Ո(l~"1Điw1햟(8MbL.$ @X d^b;i?9ESGPZo"^d[HbP#WV\(Ykr D{*+3+e5dz< ,Vs6dAFݢhO86=}%SUǡ8f9wf9($W1H e*3u8fn]`{}FL _(X`م%s1vΜ! *ȿR. 2x%t{oqroıZII-07E̛pDcpi2e]Up¶Y>7XON4)=bvK-$Of&« #?VKM KLك=vdӶ|8)+1f K[Muof- E'ւ)*PC9&9-S뭊>|A 2iI_1gH {Sɔa="W=[6l#ڴYVDv[Gr2{/hI] bx:hB^A-}#Ekk9>2_>r-Jb,\HlkB'eŝ$B8(ۣ]M$j#7 %gW\ Px>5~qCT Q䖞yWW~8S`-"Lů@|/}t< 1 A)@' :Dt[ ^42:0!-q"Eb` TKsABV[ kړ5e^A΍\?M3o2ٸ!5G5]qӕ [)FXgd&2\D;qb3p=mr$%L~<ٙBE#Uz mF]Xq6(FA?\0<eaTjgKIkA7: 0GwNdwCμ&n $R Ʉg69s%,ո&=IZ8Qϊh)s el]u=jozKB{(14)R8owI@hd]l/=ݩ'dqӚ B  +T>U+zPPLI)Jtܐnᶲ= yKfMܐ܍:*5z4[n=x!]؃ɺrcoA o!I{0'Ɣ;ד肅y]?­0{m@.[uDEO@w) ͖rAji.;JHEi{DK$xeQC6 F:CR@ GioFl%NJs˾kfU9rm{!$l$ "*g+݁sto݋ɂ& ߀UZf &TIASG< N)ޑ)T>=رTxfV|Vl "mX4{FzÏrFn}'16nJM݈  "řlf=50Jק9Ts(}BlW$ 6Okkm ahV"w"dQ7*Ɇ>4:IF &ې: yE9T js3{қ7ɘ/r.qWwb}ȘfQ!$̞DqH|KYdF)^;m0} hc.7{T@fv"s̲+oosyk;32KϖiлU+BeaP]/c.U(̿=a126(D޹/kF"qV'ͯAVXM|KU}_.z[X@Cϰ|yJ53[W`@"3s` eY2eJ7%SxnK4x_kTz%ܡX!WBOrjgwe!p݋lkOg<Fz?,,:25^\@+hm6l֓K6^o%zTFm:%z'-IjcuiiɭJJ<,r*2nR>PyY TY!^}NgLE rn&&9gCO^_PYs[HH1 "E$QA+F:Tm<Ÿ:VJ>QͲ.1$>;B>pd0"ozU~$k;!'Y"9قM90>Ls MVԠYvhKߒ[<"S-٥c=}{]1`DI&Hl-,O`ʒ,> "уP5b_-5588i>!柗Bj$|F&pYԗMMïtˁS] ]Ry$9T=?ŒlcWWf!J'ݫ7fAc=xDG'3=6Yl?+$DԷa a1v`\IFHnypVRXMF5큖ޖ)CEDrL-^aɇMK}u)kXL(<&7@KۗMX$|3ASt)Nay -WA|Xm=c> ݹ}ޛ92`FFtzթ"I/|{|IkSmɨwNns oBȖbya4\JZt$Y!?Nބ Ppis0#:{  sB@p2 ~e}C-J6r\;>L;Fa핗U5l oyqG^-paXWi3c_u=u843,]) ?@Q% xxt3;mؕABvI~erp.l *8LCa Z4rÕ\5F\/1'G,;dWڋ&e)yI`'(Z~b)X5 $.~gpH/WNjtÖ xa>Z瓡t)JwT>z6Vdۖ-&~$?.Lq<~ o?`VJseXj.G<58~RhͲ9]qwjۅ"caPnlS겉`VXuOӤ U[<7_}cm+j:3D:f I-Z>Q{RM$K@ TLݨld^D;yl2|ac ] ϡBgqґ^x~N#4+X:pm~aA؈$4M΃|K3P 剶a]8D6pJ؇"2ucÔa+by;@#:a(gpֶgdA߀xwuHhL5 V I))sݭqu.`t(_;Cyequ\rWʊ`ğ yĬW DIcnc&&3 0=dڀX!R'/KZPl3.vI0dJ'ejEc&^3`ټ/R:WGդFx;0V1WOkV>R 6wkL!&OU^R |nd C~a*cIui27czmS{h7o0u|bn#_A~n7%hW wh/dҶd]ؚKH1$rF8Slx5c-KNN= _1Q7 V2G:Byyݐt$'GVl!h '.[Ԫ!𬤧m$oH5V)^O:}41XR%;đ7-_l8jʦfhSxh csdp؆?prF!'$ $șp>:_,0JG˳}9A$֠cH ^hOa!ޯwl 6v\ʘg^j#mέʺʃ<N@'kWZ.7%9?oD0ӷqAqn^3+R5 &(p)''s&vӮMh4V&GRA6} e!hAhhG$ >hB{羄GҐ@ֈy1Gn& S>q[DrmQ6DF0y.$` KW\F|]۷8׭*9H)<3+ZX,WTTz9u@HT`- 7G>^2Nťt"gVN 㶏*mZIWN,S9e*qȮglL &<7/6`J }C=<y61 JPDችX;i[^7@|2B0 x(H]hۏ=mq)<_x͈Y^"ߨ&}i*SlFaW8t΃J~iur =<$5-~&T!m -9Ke}ְ6Y= ]4!ݗ"9%?m`f~~@3sϳ_ne<!y$bd-4)1UH:ˊ6+QWݠ>%33vG"6&M5qml0xOl8$˽@ ޤ3Ś ֵ']( %8ZezCzG0_E+Dbaѣ=IdZa84' ڎWV\}>+À4:S" F#ѥuC&t]0;5 *3mʴdo)(s},@ Jf_о|ז$4$&0ӏI$a`uB#~J96-JYnj!Pڲ@ܛfłJI*c| '2/c&u)_!л<ံ.p ' >.CTw% :}Q\5ω0,da-Ղm Z~zoGF;q-&rƤbW`h7#w{F/y"ll~VW$Z^ϵ+nb4.[leOSpy]6 h0q_28DE 'h LmjMa3O2w}>;{땵~dJJcp':_m};C| 6o+Oz,I+}'E;o[x~BZJhIvc=q5O?U]p;C\8]i[~SF ^S ^eoc(zYŽ @Vї]6fMO=AkB^Prd.lDX,{kV=6Ŗ軶R-D>a"3J(<0%v~5@ G7TUi ]Z@`VZh~ih<T7.&YB /@Y-l!.le^ױ^ql713ڥ3{C*h8p1gt7j!f8I,KBKJ'Otê<U@&q8\&3B6Shj:AÖUU' ,3˥ '0/"|ZЌu]&4)^~GgvTZw/\``NuE{{ҳ`}Ql\_A`;\͐I Q`;Ce! H;G8 `AM)%T*U42OMNBl`@2+q۽-Wm*"cih6N Wlt3o*T΃(q~JcyQK'cWG!P݌|EKYS=KvոMwr|ؑ1-pD^jgklg}|t*`RbW\[|E&(d!NIM_#rJ٨z434<\àq׆ dfBN=YQ٬X%U!K3( 0 B{ݟ°+ܘb fxA#9j!' cϷ~=yI8cc43Hs:8 wqS[*ΉhKu&&7F|*+A̸)"I"/=1"s6-9H_I.\ȓpTǔXGxڠiiv(F[W١kyjFr>4uB:zmΟ]o~0F ryuS@w米(m =8O%H/\cImDt˭HuNqbRc`}xEf[t٤.Ҹ ]W"2qy!S^Kg١c?OLƿHq凶ufUl8sZ)Opoh8 82Cw!ØْЖ~QnC-[/v.F+`Cf؆QhQK2vL>sxKu^ƴ A$7z𼣸/;X>,lq: f}W̒*8u;֓JΞmM7MѱfK_Ζ4.ZDv]3L뉱B1z8dm{<70<#i\-=5Rc^Ro_7B:>IlZ Þ9Y29Q7>p;.<>=3uaxΥO s]bWpL DF{c8n46(V#87tTEN02Gfy'H$Tff;)yAdQ4)tF|C o9or`Y 7ĂΨ8d!(D;yr;Kո`FuLrջ̝|JgFMة| g$Tc5X ˇ%MHZwM6܆;݃ [ >8;|z3F]7@s~`,qZg 6iaBPI2_{>>6OMbZe 6>~"2]z/UY3&QU翬 2at$K5:|*8? =4:S#yXE^H6sg-֙TχZ .B'TDpt4z2'zhMPސϟ/~ZK~HyYt 5e4*v0xn5l5S0IV++cmtr1kB[F+"zǺ>I>t}W~ 0kJ61X3]c>.>Vrʆkmr[1L'nFK> h+x6K)ehTlGזǟcu \?z mUصڑ;Vfԃiꆪy lª+{ =j3=1,4ژsM7B!cy jڬb/rF @O"P7HMv7(`CFN[\}Pe"?~ I_do)=9@ɤ,Ni`b?݀}?5)'|tdSaS&f{CN~'GxO<~q鑽@LiV4Ek}XPT]+MGv`\}͝lm^=d :W2gWR; /ւO:ua8$8]`nUS32OA gpMHl w y(4X5KV J>^73ĐSbo7Ţ4J^olL$/UO?A?uǦ[{S$+> Eu:3I>iQzE 9[sjd J7pf}#F_gmߌ.p81Go(5|i^iDX&:VdO.C}ehl&.3-j ց]e^4GQxb 8\(^ۚChM &^է&tLN˚?cΝm)54y Ŋ܃ƘL>jMХe=%y3+X(g=d&^W,ĭg| })6?2ix#7ˋ ƕWK}~Bt}`H~(L_ξrW^O˪Q+X\SKjs/ӹ̽cdkGRUdd.:Ld&J {\݁n-5t(AL_~0 &5 ƌpTS[q yۣEfhͽPکZ$L>gEd鐀˖금lυD⌗kRgjy~)-lt"; geDt>)b7ٓէB~@hd(`E͹fތ+ƹË^#n6 \ $,$'U{f_}1&= 0[q*; ,k:a{v$YuO$Ap|.1HgJH֣L(2G#)ю]͒Dϖ!Rak Xe!}P>{ _]5cw`\xqBԭea%T2U3K פ5VI3S`סjL_?żCA%Mj1_x'~x;{(#e[c//dJf~"%O%DlHdfha~[Og o4<6DAPHC]kKQ5NF~mf('׶  x\2^gZ\vC95/1MӅ"۱ TXRn/.ϼ Ks/p%maE=T aHvէgY\5,몰OrtqH[ ȡjP{i;I hqo w:?Cna0o$k4+ngi/jpn{Q\WʶY<=&_02;J{^4JâLKK}iC4}[_^ Nb[Sy"}|B>.0@z"(dxV#ُ OOm0]E ggF >|U&wSSF'y&mJ4- 9`  y6 b蛫>a_4~|5֡-(REo٘C"A-<_q瀍P3 \=.Pėm(tL_89Bf@vW{uBčop_Nqi͌.mcYin˧B:]薊3 wt$ ѓ=؏Yq[hz@7DKq:(K`̊땜+gYڦqp~DcnYnHZ) 53z/]"oM@O 4RodhYtj?隺j!nPl7H5UoUHTxNSBs?)U*|FYK+ѧ1bjˢC:oR3HY+y'GZ j5 #ZLc@MVkd7U#t9-sρ9[.ZI;`;g!]Bb đ3{h' H n3`r]%bHs_jBw!{l@S:BvMD,N] DOZaRh\m 1nA2ݸpK ")IG<ɷ͙dR& (5wY;5:$8%B iN a ioSZqQvG#:T(*ԵuW: ;ڤ] ΏQ9:"13um:mJ7YJO hmo¿Z >R3aX,S^3zH]y]7yNφiƐc"RkIS2G&5l ћƺ7&!нP֕opL/(RBsX=2$ߓF=cQ2u[ѝ?'@"^nem7(k< L!!p S7a;(.^o/1"$=ܬU8:"岠1; aT@Er/vot/E"k/_LjY?tWMLa o+w*(thP6Ǯ(3Hyu?\^k ڵXɺ/Ǭj;2ΤN߷28 u7I9]( +ED5vbR/jy==v/^.3@N7h ҁmsg]Q00kɵ."08oѵf?<'!Gbs(ȝ1zJn)LƆ:H K.P`"hEm;f7AvJ4dže#CyIQ5:0fFUX of1InMR$khwu $>7H9R#^xСV йIb#W*G9B}}1_",AAhI#p{_ϐNW"hQF%Ǻˡ'!zB#(u%wEf'8X`aZ $hLq޲nqG>!85ԟ4Fp"ZAo>B 5p GMjr DPE54c᪓ׅ&O"&5咶委D&V8[˨rV": e 8J1~T:gG&zD?'BȩOGI!7ƩJ߃a{k[՞"I GS& pyXY K9|wšD66yPN9)f<] [} 4ZR#呄L <ʗlifL;gNAq` n~| .jq[ 0*T[q#n#,' \UFe%Z}I X[` lOWp5d*Qdw0(۳Rn7&.|*|/垶2NɃ2^ ':a ]UE塂Ss:p6/*ȷDw5aw ;2vl;Fvo grs3'ޞF 0T9-B6l|s-w\/xG_a- Vx8E]5-B1յ8/Fzq4?~cSw;xm_^7 qM Y),GN7uJ蒘 xDMOE4-jd0%PX%7d?B3K Bo/|FGdN~Z:☬cMIΝ=&1jp{K}oRϵl= $3II1>)<;Z8eX#z+ߐEQw0LkI Oy L^ )F (BMGv.'l`!JDqt4ldR}S9cAiBp޾%`*o w{cv k~*!&絹'~S"{ǑE@tC[iGCu+:PyH^bF"MU2D›=yj0ۏ{uJ V%eF'24.m'3 9qj۳N2GM slUȷ nV'4w#F3(ʇ Ü;ZO8@eS2h'q7,haSpIfܻ]"C d4%K뮪5CC1~,=a s{VVv$(O>M޺8 <L^(, g0gP)Oͧ61A_ <XεlQp)K( Dˮj6}ivZnDïTcQ$2 9ӹv֞D7EDt%ߥiI*6 \̧譟@ENҖn "@scvDnu<k7붂,S.iʼn9R羚BTUwtIÃLӴ@D`j9GK)Bl02p_t(743l+Q(QTa =rـӡ\LҘ\l5 Ck=!0b5jS~ l^mfYUS{Rx1z֞Úƌ@p0F81Bݣs J;^Ptt /Do 6e޶Kb(i}rë0pwFrnlzB4`I$|8$՚$7ԬU cWSz it'pO:U&~J(ZLiWR3)[kr)x~_lS7 r nln.kPE@3 wUfoCZ0UVZ( ~ JH`"~Lq$RN-AÐ9d^cI:D1]ۘ|W{6թ|,}ߏ?Mx(PJ&.,t]m1zf<,f\TmӸ͂nQ_Tܡu,ۋ oV䙝ГzԐmk܏ "exkot2Z:Yˎ2rpfصPjU%a'iGk9 U DLtG"܇8:Uv`IJ`ݝ=ϙ9Lx%rI6^k5~ 40<<}kx_ɞw*k2b@>2g)rKT@"YBl ׺43N IZf+&,1*F>G[J`l;*1aܛ4S0K]gZ4Fe,<^cCn[. Mں+ 15E,Fv@d+qbfT9| S^ڰƔr@|ۇ~&t"o>6&LsR&!0;6ݛL`#Yd7 z:ĥdօih+k&viސՌG)AÌ O",.>@5ޡ5m{UR*Ir= IށC@ a|_O~Sϟ TE,󕖯lwY`ˆ XotV9 #%=Avax4Hry&ϖj9],$GA'ETSOZnj1<8{" :̓>TA^Ÿl\z@ 8xNuB6GyƱxfĚ0"jw6S;쀢L$J;7vgc;WW s4q_֣U i=¤ 2$\ dW_c De|HDrE0$XX靚 w79>LSR}nNɾ} I4׀fM saQPT0%@DInhWTB>e?gejP,sٚP&fs?Cv]ZQF?H&MR9-5ukI6pv#(͐qe_tytΏ3[&TOkRv%T ,n2}AE@w|#2O*&XhHUE{K.CA=mUL/m@,3!N[ Dd8;}5ub'GADm ޸mW3_#Z eDZ1 ,U˳nH73Ⱥr_H2pm!=[/-Qm[֖j8 tH^썠5T{8ZA!mh*+WdqMyC*|5'S{D1*XvK>(k[5TyER 5ےcd3t'b ݡ`u]Tr&GUHsRRuItzuZZnfoyǷTI]I~$3ܓAKz6c"*gOflT\KWhՊd3<|,я<8Z' X" 8%{=44$9vq[żs>R8Fm}=}~YOv-*\GYfoQK;ZMa݀?YW@:*+4c@KQܴ4%gy@xqhIv+u2oOtH% )~4yo֛J{8jXZ꒥)R" Fx[hW~>NY bHLzԵ9ݙˠct|EK, ئ:<3:m#!3#2cxC2F(_ItKh7UKHB:;4͑Nv&{6yH;>6!l{ɓ$F#S直=eӹ{,azj X pT$kV}2|Uya:Y`&Zm =zF\1Qd"O+.Ț>#~tх:b)gkІKGw @"F㉨{Ѣ ,k|^,>C c*M(?PU3>Tv4z.BF:s>zAACt "dvsVu]pstՎ xh\6~\G2Le%p\vU^#6bP4z~\ݗ㠅 nD$K_۸47"}i/b;=I꿋 41 Sj>OQ^D~ %]`:rX0k~z=m^*цݥݵ&$F$٨O19Zְ|$b;WUN'"#h,Λ{!_R?ϘA(CayBL_J/kyTt E+S9Z*MoT5wSævC0Zy:V0;/v×Xüd˔ڻD')ؑb'_Qv͗x'r ,PvD/g_+1U]؈ʓ4õۗxl^Ҭ+e/o`UeU~/Vs6*KUu/9*u|B:(A>>X0f+n!c',ޒ:Б6\r:`l*` iR*.up;[jXu>Mbb# ʸnJxjDG<Q|5ȦϹl!剫7cߚ/iTA)}D"iɂ/-~b8+OA62\w!Ild k*3;qޚnߌ(~uS0$C LGP%]=tD'%\X Sjwrz0V#jj(w u)òOdQB7xoQD&oI~TNzppUDm>Z‡\A zBӑb]Q\H|d@t*:2cj1.*Tgye'Jz ݇V\>^M.*uM*%dxWS)D+_ F_czD rY'd0(ZEF̵͎YT ZCqȨz!eM>d%&:=)hc lJ`~W9fTH}Vox. < &1;wY%Jh0cia$H ^v ?b+OFs Fɶ5G_‰݀iUU!7t9C3 |!vz>Z1\ `I2RW˓G\Gfih,p ˸ n fq8JZ$)K\9AK LtF+yC 5`gmUW;G(h`ppN 3q)Lu_ծ8IZq |v;hߠc&u~}{<#LU015hiY47" ɦ;f.MwШ@;n8P~1Mc"l%/z=l?M~f'>֙'==9Pwa7hL'h$ a[*alE 7 PYD^ȃ3,c0 5 /nR9Zi^qd1ҊKzbva?y|h(Q\k^S)8)(Jb: S-wسCZyL݈G[|{atH) 4M~+D?)m0'Ի2Q!++'_P"F!p0'l}Dr(xyJ۩\гOh}2Ml3cԖ!x@q3d}tk|V<`ag (He[ )AeMT[.x'Bjh+ z܎bNoؐr!))Wrcq ]4p6O*4QCSYp03@KOC=w& wcC<4@@s}].A wP9/ħЏ!+w%z$^ܰ-`Ϭ1PAy{9e"7`($ᆪI(MѬLqIOԛCX:QG c -2k͡Ѕ. IlYT1__?\LU\k—;|;A )_HJ4MFgQ&7cjy?tK갚6wê!ϣ2~_J#wMٛ_o 2ӧr&v345ԛy+"Umcn粗pҼ^seNX>ɨ0|aUzκxA"ŋ5y~ T.Z^bt gZز, I;Ό,kɂX*e@qq.`>$P#a֭4)(FdX3>URXiIJ 2 bPA?\,衹z-DSԹ>UYObഏsner@pbڧ_2]{).ŌWנ:ip=|Ms;[!I5:g#ykRZfp_i#9 ;}1u"d]=6qvp18k6l׿ ЧԧDwtkLv%npy8i&K]zi7X+ٯ]uB@~T bݮ|A[C" Iă6@f݂X;SIȇUFK6{!I zn{)ojWPi(n $ 1VaSi>|"G6RM2 #w3L_!cWFlz@]vp]I\D5ia'غ13U'fbQ[ k7sJN3aQ^a~ᝊ7 H,5}V, ;AA譛2½If+k`Z ,kGtSpIpGc* S ZrْAQoƢ"4q/_h|`֏/h>H!WKMgG"X( Sū{Sa F7qjl~QDrEE )GÕ>hD:B-_r" }w'JNʳd 5!vN adB[W:@LEWyp˨F mV}oe5 ,GPORBHcEcEYp2:Y^r%SP:;0DdW-N nbth|lFEVJL ^cʺIKaly\|A5Blf E1t1c,/pj \=hM j+iU^}B1O &C$J diƛrFZr2!rh(\8Ml~ˣeZs@)g#ZE5v ?zr:kt%VF,,ǗxR{YA&4ƿCj-]pCUJ%+=7֎V Qe(2~;dJ̱3 h'(.Tc0HlTtM}-9=G<1oy*[x}c(@)@U4 xτ f 錮Ajr205=J=LlݰqAf* y!hJunMh,Z2a(1@:Ghd`bY'>SE2<˫C?o|k;1-y-Jn k^B wiHyx&Tm[ WdHO`kRn5ɒ9Qt&;-mK8-A%ѿG,JGwl9db2lBm 26lx;ғ?u+fn7FNoX{ qxu9 fz!=gA sB҈]n`]`&A)ubI2ԇ a0,a:6imaN$E).˂V8vR9OhA-[ҩ8jlG ނ<>7 <^|c3 +`ϖzpMiMuR?_ܛV[(xq'+l>w6wA؝JX9 MMN\^Q)~\kP*aJ$CUo~ef}#ރnW_i1SڭW׳ާ9'0["rdLݡI4Ch!i^?tydyʟ inH5H~#Y#V|m(`m= 4߈̇HZu&ikt_ř:{K`UVLڐx{ٲ$J\uͤ^gfhd!5؄! q5)b;JΪ-`{^}Nc&L[\=+U痭)S]!NpNh-oP,hဗ3SޤSR+ݐ_PaFe)({G#6ق GhP?/9&U&HmWəNi<擵 zņnm ]B/hik~!qst`(ncEa5-M'xAAZ}`Ԭ9:Λѵ;WǥcBm $fsW%Q9RsM$wmBuݑZfVzNb6 zʳcXnLH$6gx '3/V(tK3i7?j t k@aXKW! 1 6Mx|2i[_XszZ$uKZ\L@-GrB_ZM 1tGFfSp !-& 0XXS%jGN¢Ѕns`5&P3 d&F*w-j͓`k6s{'=Xj@e᧐ ɌCr$D-o'YtNB׶Ahk _eN&X-Dr--\,a5>g3N g.Rv=0ưfOn`UU4 z;v8RKT7I>Ci+D?E{ҠL(|i/'I+Aa$mNK?hv%#|$ӎ!Sߤz ;i2>ޭIp .!r;kcR e^ Qޡ"#V >+߷&AMkň>rЇMѲFO1 V}OA7;ZTX[bF pth?򣆴.m~ߺGQ[NS3Kua\`NyЂ iR._Qב5)+sAR Zd3jﯺBpL-f@ UHJ<4)\Ey/W.b`hk}bXA @7׀qe {GDIBPں$)y/A I5_##=krJ cz[L]l$L͞qpLa$!|7z*h_XP3@3o /v jt#hpi;&5LIiZVkjpx!h_k~9.#E7]„lĐU$WzANx 8_D֖+s\ tO MvW A 4rҗ ?_bDːrSIs,&Ԧuq JC v%(Rh:lv2 nfJG h XkG.#uѴkSH\(ij/( >燒jF)?dZv A_1}ƝͩqߜB?s~i {]m7|P[nrp|Рө ;v ʻ8!5\ܹ_r>r"^xTJk%Bj =e%FFƈ sqvIB%8 ?dcR3(F Q[ +i3֟=ܷG{X.VH=? nG`Rp2>7(H6'LZ`HtyXi V1Z|(bWLNMxtg_#=Y.*wNx QV4ԡp(ײQcF?L ,eu"m)N ahLKjMHe΄?\bWIJ_ 9k_-rpnYP[Mk޿}q6ï\~Cj-f?SbfCrd0BOc_4L !WW;5p bu;iȈ`^iZ T-Օ (?/Wnk1JL٣2@yӵu*<;3jWR(P'htk%l?z;=lPn@ Ӏ??E]Mvk=!X&>}U{L/[5@aH t/\ +8|V+WG֬CwDwrO&Icyƥ̱WոdKx2^M{\VAWĜl)uuM5 , 6,~aAK фv-M7.,FwݫO%LiP<& G5P:u°ovPe$b#i/%YmWo~$@Yp@ :npHЇ/ YONNKp7S&Q:{dMt#,Yh}0refN@Zg!|>x >kѸL&M}Þdȹmۖ2Z򅣣px{⿆7Ad96:w7$T=N5^J+c,Į :5zFV-a9g\)>MIpxCާ8uktuq kƻLtXK6C?-2dF)]Sz>be?hBu{;SlX]2FEXQϘ˺8k}x4젟eC<~ -j3H|(% NC8i~#I/Δt,;.ľ5?RV#j'@J-6$)jΫCNhG:S ;8K@ 'v )O@TMQ+5$_2%}7Bmɣt*}>ʉsq[O:\0_x*|TT ,XXRUuAsZ<)1fM3κ+|IqXp尦!m ]82蠓ZӜ`SPQYr?AmsZp' "m0-9@rK>Юu\Ygˤ~:2Ğ, `.+^r= `ƍTY>{9LM_(zԉxyV1[$ c7O=z7BoG.iЪaqiؙ=PVEĉ#)m kaV@UvLgm GT3YƗ jW`K3l1s۹stiL|cJ!3rdJ1`*DUTiB?Fl92p?}'6-h$?cب]!|ws .mlS ѥCOzz민)Ovԡ  śB~Q~@83^O)K_R>wXkҾ 9.W2"Ds֥{S$*>8ЅuDjLt o6' Ǯ gK^H@BL1/4҈>X% X8}'>%")nQ{:xɥiztҦqQQ`Y:% yieT!#TeҐS09kPrǢ7~|$T7K:k_]345je|Wx%gЧ_~:V6)MnYK²jpPOsERM&*V n2CȻ_p8ŹdDɩ:p ter0]A.wd;.E 49`(e+s ȢćK _^„~jΙ1+AIAfW,sQP/f e`B}o('D^ж~І#~jZdi<ɔW뒹`Uȏ g~DXa#;LsՊ(+g[sHg+8#N`dBQfT .q#HWRсafonù\bNHV*Cߑf21d >$R7Q FzpKmI~(dݔi)Dʮ-v}d*rP]6q >$g/+g5c];[po?$\[*&nm6s60_k=]Aq.{D&fI̊XcƞL=9;з\vy?9#HbR5rMظD"q9isT^1)LW=22?E)j(=Ck+o)S5zAnr pϯm/ c q02uYm|H: oms s1térUY|RbX6kf|1@8pM eoR=Ԗ#Ji=ƹg{xOS/ܸ~[78KΔlr:L5ٮv:| ZA]|w.!d|svICj-Vg xTUDSȈBtѩMѾRcZǹ=㙉0( Wʠn|K`W! Xp'o ܍Hns2u3YU!=>l"Ep⌮rLu7w3ݙ8IdcOg̩xП`LL94$캠%Q1g˦ ;0]>ٟSq<Wi"w3O䕙aoF\)R3)taÉ?e* C9cE $c8 b64XԦ:$,x+3sn2Qlar h/ޫ򙕱yP~1q LXh5 f{KhW֡p@>#/N}F6[o@"&=R@^K ^^zZ#Gnʦ; qțrbWIǡGbv֨⇜C.~Kйd?l#d%߻IT X@E`f(CzuɥHKg]FʤݔgK ^݄T_2]GW@>L-BLA"]#c],TkqXyW&C[csn0μJǥ:Ё\V[9.~v SVls#W&]xw'v6mTh6`P\;_9oҴf=\wOUt1:b}&{;, n JvK; 4irNC> bp ѷ0MQYcJclO 5]3TL](u Y ѴJoZUv@hKh^!91Cv-t0sFBmmE5MOTlN]dUEXO͉V"j =KR8a3ǚF4`L!cȆ<K{tI %ٲ{k2t9uYvaP{TE/xŴR\󎸈 ]A%ظPvuKnr|%Я <2NApSvi@^Ngd֗f'gF@S\fZa8x BT̅tjmQ$]4==uLīz^}8'=ăh*ea m8-8魿휐 yA:E15:x`albf ~l%ST7TõtL U ~Hh)P84v C.L寄E.@bgY Vbܪ*81/c">֨2˘'}}r!6yL빱8vUBLÏ pDȐtB;Z\/` a[P 5lCl˥\s/H o[{s[~>&LFMe*B憊+?~U]J^ 4lC 9w:#_oWHO,=!uݠZ)ȧ|f‘\_ڲP&;Z;+FV9ȫpK"~HeIVG]'}n*lKBQo#w^Ϩ{lbdvWۓM~w(o'U`c|3*ݹ wބEc*{ x>#WLl4lq=G@ tҀ B7aጭI^"$w*Ȃbe^=/M xedP(6hJBnF3E1guR. -ey+-PW< ]񘚻4:iFtg%ن,6:l6I}{J pr9FbJpUFBSXp23 ?1B.Xu+8L O{Kқ,z_f&;],lj s#Oݮ%lgbW|>3 ~ҤN7]z抡բg*ᕮv%٬h5*:A\TS8׽dK j| }CcWQv-[\(r ?Ֆӡ/Z*O{>^:u#| A7 3 KEbtPn09ӢsGt%>& '"F?GC;y$7v` %k1!Idԡ%Շ'ʭ9S\+zj@>1q^z/zHf ~ f.3k6Q{-U|\ هȗmL#lۨ ˞F@$w{f=D9.'+ͪQ\Dd\Q]:lXǾ]E2Q e(NkH\3n\ 䕫D-+f1L"n#'s֔ƧQЕ:|jXQ89䤵9%n5oda~Dar Cߎ9P=\SHĈQ7>J)LxVμSP:P&-yݱ ;@x+gwzBNv|n!݇9Zo#BD_O/>MoqFhGwיw~==Z35S_.kʕ+4 tĔ-Ԯ ;z7RtIe[n7KK2F*_o?Q7x:D1 fUeH+ .L k$D]CwKWwShMn}CXeBt{r|!a}|qk*@KI*㌗:tFm'i՝D fv_ Q-9X ʀL.ȦUS9Gn+8W;Xً֙ѪiNl:#~3Fzo|Ƨ8VG\ẁ`@ӥL:<]|._0_J3pTτ222^AAM09Ym C\ c,\KyY3I-kWu-`Ys=nRd4Kr]N?Ǻ'Op.X9tƁdcq2*BLuDTkq񬒌3Pڑѳ(gƂIW:0og4 5 IVu&?>kaUG~hx|FuIʾ.P&H@UcX-P@c0Ą gSXl kmQj,p=x O= K\ʝ8WtV _аEW8>4DyN|=Гϣ~j,uOM49tJJ97iۀPY?r\D>0Z }fC`&˩R{/K(!S)Mt21˹b 352ҫ9=<9^r06|,O5W} sSֻYnpJScgGi4EEDZ|oϘc/u/㳳DQغ&J xQ-gaP#8רP{hXsTP?Ԁb!| .sci!{WG${ÌB\B.aah;@eϨeGqUH:4-/˅KÕܽ.1VK&yAJZ r6PZ|H>:"^N Ik!hOj]ܖ}Usr`ٗfy6EPz˾]:$9t~Jidhp!Cԟ ;\jr:X辳~j\qF~rT08ߟInsed ^̨^I_r3 acKΊ#Oy6(-y#5bO 6b.%rM5, \ɒI© :؛+&)m9*f|_1 X;SWf,d 7bI$t }3|Mbl2;05$ rD9̻CÁob/v*GN)\6~@QiM'n1ctǜ{ȰW-PhP֪0^Qߡ<'͸Qj%5hx;h/-qPVη9x9AӸ@cʅi8hKlO2*Wp:~Lkϡ}8ie1Ɨ* ; z"}!_j\db2AKV=GU6sNqv-E eh m"aXꡖ*s*@Z25(nfF"ێɦaúo_X|ո5@kjBU9InHy9QVAN SHfWj1B-sjde'f!t"aK}h%ܗgى04 sԖyN{>Mi!Hg_nSN=X~>zJzw|^LMmD>&?8sn^,3r*˚cx_´9\۵w֜{Wǩu yܪc{2g3a;gyW6m7t<#8T)J;bqfV!ފ&ņTx)5sRD%\4s}͜m9NvOʹ;f`P&cG BԔx(@dnͨy 5A`Kco ^:Rh1x L1M*O ;f~1g {_7 _'98ƲlibEZO>ٛ[ UY[Ei8;iv?,PFۢ0qC, ƥi4:GK[6>{KrWA@;DCHw)1Mu_M,%t qce3>vz*OI0aܾƸ3emUBGSrHqMk?*Ym#8K6R d=qԝS {{)VtßwATliSS1qx֓=5ީS]v0!-xq)<@P5`EꈱʋŮ_\VhlpBl;h sEǃ ԀP_>2VHyCEg0:+y(@xDdGU^pݽſtu݂&Q.o[`t yeA(GzKOEw gIC ˿:,ZPTՅ )TpX~@Y@O_=El+o3F)L۠=avB݃8Z`ȁm Z/vL`)4~Σ4$s5$Mjj\Z7R]2#m?YĮTENY\-x hʩ+gS2_O AAu 2y%A믏/tANh` 9:G:\ ։|TRy;&Ff1b>^"2~-o+ZwPi)Y+d=WvL |_҉US:I:/! Z#Ql\\ichu X`5է'PK!;^=4 3b]dNňUJZ5MB"a6y U_)Gj&{9tMp|7&+2luV$~.hw` |@^(tuRv|1lWC-j`*G6vլ$&x8 U\3]Mµ5 "ܵGC8S:p@ğeEL֡ ]zwAxOua7֛|`cϢQu 5l!]eUk[:ΦqV{ T*}Y:槨 E'rWcJO]u/uaݷ"<}]z,#Nۀ}Vk'JL?Շ^neV9auw^>m 'kymۖŞ$f*viV]xd,5"M"Qu/h`֣7OUEL^@Bw>jD Y ]EL~oq(qIa6/{PgP ޸"Aґ[Mmcr=8f_U7ticGNaA}))U~V AJb4'Z}44~X]F_ĬVSROW0SMmyúpӎmP  9;Žb! KExn޿MϽFm۴Qͫ|8B c؃͑1 d\Dk|.?\o~rE9ջc(&:.>8%|HveQ &~ *\^٤ *跘x)̾HŞ<ٮ=>H3z,eOL,"ي# pC`g8B19xoY&ƐáĊc|pkPʟ4B1ٗp:ȼ>v3zUmtcn0rӪ{6{OƟ Qړ%:(jOc&i)^zME& !o̼4T(8IE& _LWbDWP^o Xݷ&nkpqJXAX!* .)[~lF9`(ᳫsNϱJ\GJmK]iZi?N k}jaM k} '!9ΡZ I7Yu]3-7/td꘻-R`/l BK#П[-> UJ##s T*^NJRݜV;*,ۏP]gAJ\y';_` 8Ul.&>^#g^@=u<:{T2aDoa]?H]3) Vs(~/"x-I7Nucb|5Խb?/pMah1$b&ݙY5*~S O} TEa 0UN{Jn&XvL|fItdu(NNya.uG4ٶJ-#?*%}rRG؞XE͍g 75piI\F<Ӣki?F+.Uwd:΍d1vM.j g5!jq  :Ľ]%>3!k?i5^k҈<}T׍G 1+l-]&V#mhEBҕ\ ߂%Ɠ!wZǫ-Xo@X°[~@<%7*ϘESN\ص,VĞYz(UQKٮ$+ܹ7t>F< $mU0B,fݩ夛RƖhَCmq,2iOy2y-G#HĉlҚ9އBv hbtfѾTUX/"IFRuşY? eyc%d;ը`Džh ")]t:PcOMX/߆ăjA zR<Д'*o^@ q9dWa ~tm(ϸo;?M;7j˨'?RUBj[|6N-Rb~6cl-8 RX+ƒP*P)^v5G8 .d²ڧۑXQշ&-J ![ϵ uAj2:{wu@$,t!C{@A ~76g^͢DzCz\| Y[ |q|p@z02[r)k/ruӇFt]Iu+ѝ*,<v۲kBf)-i] i٦0XHXnE+G,})\v{WG|れݛD/? P 10X8/C-kZPJPmpQ7e@9%9 ĭQERz%M׎->[*M 4:t3V݇wTK+g N2w/\rK /)G"߭jz^lVS}/#9Y*E->e#Zޗ]`nbu:o)ND43"3@0?W0R;vRɾv^QZݬJZEd@r ~ߛ*s 9P o< O7SeuMh{٢0  ^Uc Z pH ۽zqa!u=Beۑ Qy=pٯЃ&u5yiKr >CU 6< 1{bjhttOy N[+)ӵ90Z=QN.ߢI7Tr#JQN\4ژ|27 iB }g.$UFީ;ɟ&Q.()yr2~Ēm}|7,Rt&92`1׏$lz%o< "fOܱӫ_atT-u _U][Zdܳi &4@jb!AsyAhQqI{zLyeG${S'` Y)!g3YAHb*pd!;oKچ;7ԫ*xK{jw(zS? c^R;;حnj(hJKA4xd!4Ag-FӡQG.1X ꍹ~JVN+s>imkU~Q㝂G+Uxt)H4*1k.XQփ|c;N9@GiB΃ @k=־0`AA=vY)a7@kzLx Wۃ^eE]?i#VY][Ǐ{y<#kpva3G^r O4oGP ^7~L%Ģ<Uˍ)kq܃r)7Vz-(zQ~ٷ(Z@I[WOg CsHc]%&Q@ԔV& Ls2UsŀfmsCgµ/}왣[,(aλotPOPա=_hY8&YhыIC{TYqwv"ar\+"Ѐ yCAq)YSee_f[ Ͽ=Rnaua#V%C oR>4n1\ ]P{uwS.| bR^ Deut+c2ufX=!8} a]3NA |}&P,qHܻtwY-'r>+n Sg=fEMN xpuKw+\K~sRsM0bɎk߻;.w!Y 2[̓H q{ho!2 TyQ!ac7͆=H1$NF<#"h$<ٟ:9ƣa6^IV@]GĪgB|11N wwMܐx EW]ׁv\5y {K1I0Kܧh3b[ =L;E?CNioI DF( ǺHg0XY2p ?pO:gm盃W]uoXgg :+PE6s :Ig(Bɱo<*n`q%?}DBBB^NC: ePsֈJL]WMonlqIAm05X-ȯ/}b?82A։[A #!5Y_䤁&`)BI N Jala 5޹ڨtr{0nqd`> (^{D+q4Y>M\7 7l) 02'у7; {o.[W ؛lǐ\P.UNh[u~~tOm;e"~JU^AZ?++ qu?%e~!s`J#iSѲލ-/Yꋾ|yK=d^gwICY\MJA38=OUr*3ޖ,5Ue)FE1;QD&!oOzTz9*]jfʐ}3^SA#\n T Wk\ጨ3_짬ཨwg nC<).n H5 a[?X扅dz^M-:ܯ4#BY ԪgG{FFTJjZæC:!\\P w6n|q!A$ )R\16iKO<1PJ]a|Z waW6YvV$oĸAeNX; ۮ1"H(} .[DOV:k`QSd*-DPb2ut6{ëbNC͠~>0XzTD^ xf#_b4..P ?x^`v1ń!VL HwE#m,WiŲ(dRNv25P+=!VYr뼰hֻ`˜66?<)-˂zɌ[t9{A'g~^5^Z 3 [Dypx$gD4)SHá\;v=،}퉔 ckn9Ԯ   /9:#<1lCC<6쳌$+M"zHL:, 5u zA FX\)x-J1υ@§*8}aL!%~ZW.CbR[_+ٻ c`5)*:.`K]XCbGp?fΎW;_M;wR-.mI9phQuj0IߖmZs_b9̗^93l jvwFU#CGyJ]B73 ')Sf H0%Ցlw0Ky'P8fi#$Qm%[~']RQ>#^:,?rץ:PrRAFΣ2MBRB=(25T흁2ػ81X@a|wC.]<gs>O鸕6L+ t F-ǔ|F^`icAXa8pa=v-b8XEͺ_kdOLd5Bܬӳ_=p4q~Er:CcZX/;W39:)J~oP! In!L!0 }awyGǤWVC:jʴ\1%@ZBZF[P`Ncwwq2~+L $HbP;T˫MR/RA%x2Fk[T ],vP3--݂$ɵMWbiB%1$;TDpo, O}y}a(Hλvb՗_顬x`DD,Is&Psf 4=7>N3cKm2ƿ 1N6iM*JvkjpQޛj"y)(\;S:ث]M 5Ld&_B)Q2N7. LBEn?s,۰@Œͬ0L-UifՔ:2SհTL`Ejg{<_vOzOnq ZfDPn+ v{\2)Q=[su$ 8=e mzX5NmR]զ yȎ "IDzI{m{؟/#c3qn k>*2}yXzmjp |,8_!Er= RWjŔ Of xը;TiM 70AfdXOH9_{2hb>ٌw]DP]6=P+H "hbg7;9=V dg"lC<&aA%0TkJN7HPĝq/@C_ՓBc;,IJ.d^~lq#2~c^LNHU͖jY'f}!ez$90^V ^L1(Xy5j6+پ:HD{Qo *}/%YE !2R"7yPxCQX  wspUR?˨θ ݛ:zTMuƒn,0SnvoDؾH\ؼBN>` YKv 0pyCqB*D 7A5jp&vC%ÉJIRKPzG]%HAH?bs6gmZFt)EL{%9 uGPtamtֻhI@JKR uՆU[\;?| %Bc& gNXۆKgLh5vxn0aF-}5RHoJ"a Ta7JDȽ.9 "m0~JEaZ-s\{ rNZѺh*rfl.dǿd(8 +D[UOl Xk|s,M8p|*F.dyV4-%$Ι GQa[T;Se[yVϫJ;=?j ^ìIeOm|!!Jf/ biEK`0 x4U _]E{mHR鲾=eY`ۀr9򿷥]S[,k*=N]E~Vp!]-Ok*T?l `uE$na _F3Dwd0ݬV %=3d`e,GF?[ ܴayxo+IGV.Xk5ļ :)[1 &7ck/d(0.*WVn+%i_F+t~YZ(5X&7¡Sn/Ҍ*L"A.RBүp*Ǚ*T9c{8x5J5ѱNG ܼ.f {W⋁F CB!FLd1顰mF"l]}p'UmLU C3Zlg;m0a_vT !"8pxgp`N̗R&€lٜoM)Iz.5*7?LD7S8+P?_%GPiHUL1taR]H3DN$(Uy sJSX:ws ܠQRhWcX O+cFd*Kh8lgZ'=sUL!ZjQx٣%ӄ-lnNY%,kl٫9=~*,' 2 oف4c](3NL < ;Tu љɂ@t&K93zۜ2;ܒ[ G>] /9&{-Py^κw?[>j{-j'J*h\[,5*3Qˋ+?]Ekzz>xC^S#u Q&{:^߯D(lf+ K(rM"`z9w邰ea:g(~ܖݺ`z[5A5Q/ UQMޚ"i0m7m(F^,a%NQ[4;)ӁpZɆy8 B($1QV^ :< b3ݷ^ &h,#0@:K%e^ä9R`Sl/Iz5s1fKw D,Rt(Hh7t!~ANspc#*|{u?\L Wt0p >ڥiL=.30K^\^aTVL&4) [KHӴ,IFͲ A4^wSoݟ19F#bhVr[fu֒3e"E@XOzid ąXθĸf1~Ƨ3&b(XezmBGo>~< WDҜI࿠ עb6W@ug ^Qm6(k5Ibl\ JZ1.ePX_ N=n7f~VE2vW! e/ MRqf0Ay{}G$3ח&P|{<$0r#?&LE@VuT6wAY˓ͧdUu Tń,0 W,VB|xgM".Viۡ0PܞK!IΕafYZZ֖|Bn(/A~h;K,+Wt).ҝMkū ky8[+;:CҚJ7Bl+HfƠ[ky|I h˚9ofӾ2YCmҺe3\J fZz,>MYV`N~!N(UbYGrY| k}ʅfN>l+j4 NBf52Ñ1ڪjuPpomV2Zu%D'Rn~Xe\ځp ,'x7ɵaqG;PxWp+*gXBBxO{'[eM3Jqé|Kt;36.l=5(H`D .*BNP߀Q÷IMhܨnG 5i_Ǐ| "P[%Juuаa5ILNmC@o~dDxs#ZJ4Ưz'rMb'ۖJ/lK1n 삎7I̺UMR|]#?#_IC8Y^2iDhAGTWq^-ͱe ?S"`܊^vf]N/yYmBjYG; G9]aa$ٔHu <\p@tPʢāq>=c e 9kԣ2ZW=kT95JeFm4'ւ$PXwJfązYw'Ewsw9ό,up7-*a lQbÄ_/PDړ;nzQ?Z7ۏ Ai*O۷7%CP&19TZHo:oRa<JVh[n_|)$z&zjVA.._/){:mɌ)p=洶\v.!7BAhM#\?(J X,o=*[UtS,7e{s>/E@)_ ޿]״ed( DFD}F={|B( 8U OG8^-KX$_ԠϰbD#ו g:O.ͺn-sZc\,Q)9BpP-!grM/mp@PYٯgXmn*a: 2^ ґLuxD. qkeٛ%UϨ[hJ}7EET O kE :k J7罈*E`i'V@->VPo8DV}+F$V%(xyPhwH/Hu MOJڵk%I\ѻSmis'kؗZu@0%3\`k^˸j|Ye7hID0q8GV,V2=+ +i_-jaNrxy̵k[||_!#8jVWOw7U-v2M'^.f[ߜMjSB,->-D0.w]ls)3wfj)@,jjVowtB.ax ~L4k DMl*r%le[Tب ^pj"TY`QtnF,|0b:M`?q*x2ezt.k\UOJgJߖ]$,lw b\jl2͛D}luIYPL*W֘YкzA%fkrĶ&=.sSU]9RTw;GH#JշA/mXOtSXgU CY[R)KŊ@Wa]_rb)# 24^ǂu q7GM!X3 ꛖw=-&yAWsXѢ)UjFÍ!DcLXniKl_4`˄)/u>sb[[­2 IF.v3zA**Oz3!#d SEt=ܘu%uF(:iY}};5k?9þ>#`D G{"'|T4OxR"I)p_O?&AS9m&نGJ\w8eVJLȼy8xE" Pz%N?rQܭ#Z*"*T&DӪʚ 0~e˔ >]9T@…Yr.vLVёmHgŽd~r o7FΖ#jt4_BF@J.[QD39 DZ6`0C" M;';c~ &6b)rw xU5JO+NK:(e%?ZÅʢ&R2a֠SS뵚Ԑ&ǟ|l΅mՓ( 1_ z894n'{q*ʠ-7bz}IpF$b&\K&s C=Vժ&-&D_ n6"isUp?QR.b'Llߺ_z]YP̀ ke)iV λ]$}`c2\w!x{!ݞ=Ly(W'XYȡE[Bge1 AG8C/BዃRG m#0lzknuo6[\n2`R -zh+<=ܲ&F<(ȱ)6?V 0?|Yk]cCQ_^mK]vB'Gk]Q̇/wkZNW r֜sO֌ 7V`Dntȷ9 ՐgJE Ť|&YͭAXRPkcߺ7BS-PQ ^5͂7Y SORWINCgS˫rj@a!@*_. w~>51tcjql۱J;k0liQӾFf1dWM V߹ńPԌ¹h{dUNyP[Dnz_q&:Ynܡ 9YvTyꇓH $oi=D1X+u90͕z7@uv-`ؙlxO4*Ɨ+ Č P!5,(iBG8\$D K ;Ͷ`:~r (T8  |Lp*VvkIV6;~] bE)%" $Y$T'<#j[T׽dV_ d 4;: ^Yĵ; S!Sa'v BL M@ 4@ʜmz'۷wGP8.<|y^% }qnx]J쟂u>J{r_PdNTP*S݌ayr׉1oĶ^uMm1P#au,+!a+^pc -i69k/4U'Fφx҇,gwoDOIw { #[x#`S *8c]v!X,{b?}[=a-etAk+XP| 3xE?_.@(׾j3ZR4^|ޭ|HG tW=+qc1^{neIlacPȅQE;AFHY/hLaG&So}vQgԽh ltxݏ$Tg+$ k߉"bVtG^'޵YNY뜑Itim(S=^@]Uߒ̊Ƭ(Fdž_?stwPg;0I)A,R,=]ջU CT-:f"DKEg'dfJ@gTdxv⦬"!*QZn9jT)) 1 Pc"=}-*" jy<_#=0A`FУs a+/CKC 9b0 hL1S/7a᷋Qyy3WnÖg~((x`X`*yI1:cTCK~F_N£dS$kѷt~-瞤X,8@N.9Ǯ|Ij\{M/lbDO{)R<㏭ɜ䷏ gVo]hv)Ƥw  8-zb^0*W唥Mdvfbo{).Cjh®/gY6tC%~9!jqY pe -HiQv]X(|>zr 7YcpUӫGg'leQ>ПGxAe) S-@i]IoMy޽Ѽ\[ l[ ~c$SMej` {ck`T-(䢶KD#'bG Ba}MSAU HiYBZ>P'lP<;} 2_ ¥@ؾY:'> Cʄeƺ,P3I|'e_enLmnB~aFC(Naw-#RzFmG+f+mޟ>'a[ Z@[H iHM;oZ)j\~*\W>aAǴ[Q!Nm/ UC$b~  ]J9[;k]2J9*"Cc " E.xK-wT&'3A< ~F~@vП.V3%L*9` A^L$M UpJBLϩHawW%` + -PO`E.6Jy׏MiR"tLx&>5`{iB'f’u ^;]V0wqwDV*|y0tf"e\nXhv֐/U;7$LTt+@t0vgd2e}SaL;v"Nฌ{"o7~ǖ.#ٰz |.|oO`BojԺ&sZa1uӰ@~9T,.~GtQF ݸMDIsC3w?|y;•,[jZ52ڜa(!R7fh~Gq*\:z9vt17AgWGO17Z5N+٫\="ㄯ/ OlߣCM?%.27ٖi5EiG6ͳiE\;*Y+R&gIvM{;!i0uK:"qHqe(zt *=`lL]&rOkwsg N}Ӫ{돁@|c6Tb_ל^񝐑33ZH =.v2Zb0QC;*]z$V(N_SkTbu()}~0|` 0Ns;s+Jf_n6Nkx4z1άg`ȠphQEuV3٫_3[Lȅ%;0|yA-mF|' gx3 pz^ly݉Ǻg?W"7V.N5}cÄȡx})"\oBD Xw0;@ :~tcbB)jS;ِ4lBHOnOGsՔOG \K7V;O{H?x Cߜ1R&oފ=}CUK [ky.&(owV3c3 C[Oa8[\Cc$ -ڌr j#IGrQ11xiU`FX)7_sFy_M}GsC "Ev%Ν.&k@NmQ1Z,ޒV x>'?ԖNVs㲬io ќ/+Ga+ok5S.4WK8/[d>2jV됳m{@{5q)MdHL)&VD$v;NolOꅕ+pBVv'ȤS#Ǿ\[|Ԯ\d+A~Ɗk߱Jb^5BtDSfY&, Ǜ3%BOe,xj% ϥk>2w-[Z%ιuֻ(O3 p^hSͤ1ty_q/NhU oS^̲X02ZӣolR#C'a$[]'۴F#b7.ncve31.ނg0ZCrx[&p`.ԴN̚3`|Vε@'dX<֕YdzX"+sp>tْ!(%sߦ[*ȧZcu Յߋi.S(KfmˀLoTFo eU랯ZDS=|=gP:C_vcTne~XmN U-b?R @'Vq2TIlU `]U?8ט3L>ؓ{PiD4ɗguChnIOb,`8'iA`tvo>ﮈj=O"‡!6JzAmê;p]vfFј݁aO8Mz|LK+1{c\ ?3^"[:T>|㭊F/MZeqʔb\U׸?{l[ưwnrHJ8a/汥*M$NEw@=&lN ),>ĝuͪ {אG B{nQ;$PFa€bFGQtLaul`J l#K6=DFNp-( IwvK,([^+DoاX-uX-Б޳{o0kcu_]nM:&~QeD놑;ߊe: wWGST"8?jh eřs=->@ġ&&t}r-&h%甯9c?&I-e"ey)8|Bl3X|~wjKuąBz.RjhW0ÕXE8J!f!ihy֊.E"aEZIⲙ1ϐ3P(iqPuGeaCާk'qVq^qaɺ-9z~,fI>:,8wc%WCavRV|%%[)!F*V,wxkYukxE9r.1uh?H8pM/sh55/@W b)"2sZ2E.\tC`r)XC1ufKUw1k>n7+T60󈣶h п&m% pN }^/ -@U7Y0&Efuy[4Pr n0};a"(@򣨲3p80])˂{Ip%7፺0p*H>D8>y߭unf߹V 2L7k6I\(S᳠2sb,=W/E;ik$>Ƈ:f1v-X|=tL?I4]ګ<=ySo'?7 U=#8?a rnm$DC~R5<[8[|O'&1D)P;!^10#4ؼ&輬WWI"Ĺ,xX,z/bha\i~oYDHfNmXx}Ibj.t.*$<ؑ쐻HmVmw֑n7 }ZZz{&B K:_DG„X&Mc%ipm[[HtȄ69ыo}m( *'>mw\|_j1h`(- %~l|Ql(*A'Og {gX g|g ,YsZ"m@YN >SۓC"Y>:4%DPρ{7CJ˜$KgA{5Nf`aPoٓp"$+VP+ÎꄚggLu}9- ~O`FOc+H2MD7(W7{w\!*xC.hk|TQNP ƸrLE–? ]<|H h2\2^w w< (xe婺 đЉ]q檊p|`*eñ]|N=^݃'y`2~[6ڱKJYƢ[ҫL~BƲ̉;zez.x7`Pw,l)CЁLӍ-!P'0SE0iCp=aPxdPާ$i>εRnDSzwBf}rnѨ?V(/ [+u2w\&{y\E ;vtքg/z$$vOn&lR/DЃ/ACt="HQ Ti $hǏK؎zyO5RV(_ f+l YK_4B) bPU17\:4 ʄ7CGBS9/I<Ca"5>Q^x\u\uǴP(q>@N^c"T9;r;ݞ%S(~W;ອ>jF?R.wP{\ *KZrE S$Tw@/#7AY:0xO"&KJ]7VEK $Trŗ^īe%ݞp⨅r"X6,4z]r+5F$ CPaÉ"#GVm!_ItD&J(̓M׻ x!8jSy /.xD4?F\`}R$:K9L\)/T󉵔At2SWe6s[AŠ|Hmk: a)qP15~ktٹIGd'q`ayB߶X&)~ W0) 0+$l=+a x)H5tgV&ƋްCs]ކ ?vғ Ci}P=Wx]qF-߳ v?5hҡ!긜g/lH)g#94N#ݢZʫ|}}B e_|aLU`sNpM"Z J(^iK"qE?eez*G44<ȌYVy~ylJ.9FWW uQYn\ (Gr%> C#y4=ْřbz+sC~6џtgj/:`L^ nn끯F'0o ˸ոOJ9x #yġui+xє, 73:2s#;~;_b2$szゐ=qTeE 8g` 7 `&:ExQqع"ov%#{uKm\M5dtpl8o /ĐTm1JفcGA%ЎFͨ` Ji^\y}ϑfrTh˛TIe sғ5m^W Nd97ϣWKn]p|"2y#GWd|eY yIcvm:]W@w=j-HO.wBm:u&S7a/EnV4, WE]5CWR__qE={_oh{L]V΃Y3Eo Xaޝ6^I tba9@mrD f'M:Ho $ ibnXٻ'}nX\s(7xĆ^%X3\s||Ws"$HX! -$PA<‰1t\i:j-U_hO,>"fub,A8-=!R%v ?dZ-W#cN_e? aQJ'0_Ix-%bg[ʳ( 4t=9 |~/Lݞ$()aXd|3pOi7%/Pj'U,J$(BO'{ bC@XNa&FU<0 q{VbRA U?(yMTKKyI(,"-v~`F#mx}:<F*i!"=m\y\TցA3_yAuѥ`sKyDIUI0CVK?&"e1ukmx&"RcHߏzN9oɤޭr?+CvFd@ ȯ{"R/RiC78Ats9mGu7'j\[k>%IԢ%Zt(n._uD.z] N=K3?2 n4B#,5g鏼WIjZOXKQտ~QHlzL2?MXXLe3VcR jr)P "Lucǎ \ڹV6,zX&@L>M?OjvSClVrBosy2T]A YUt_eK{d܇.aB"hȌh 2CO(DnZ!=&T%P@'Ǿ|6=%2z$DP1C:5>-6?4LH|Ho ͳZU45f}n*J)+"u#??hȈ1u=s̰Aۧx6M*vZ(KL-.<oށF3 n)_Y2 Q =!\e+GG ;UXxlɓ @'0g'{:`u 4g-BJ)7.`AvJ~zߴ>F(5BNj~^{u`g pt,AUK6QsCxV%^u'e 3`}u-sRgYN?ja@D,>ܩ{Ru1NӮt˳|NйCPQx³,9J֨~XՔ)-0g lv& Hr2@ts몚:?FcuǥKO| eE"kDI 1P퐀@_7JGB~{F82JJ : ʩ`jc|pSY|Q_#vjATcWʂNH)ڄkVs^$(=|ba)G@n-Ddk;k{G\9t|=UM LE{Lʎ9JhOQh^LⲀa0}(|m|$.I6:b8?EŷƵ6; lDu-!GKC8t #xԼfcHb|D9wXKdS⦢wځLgF\BƊV ,mwwI䨒97SUKqS"YA Kۚ˺:i*pw0*CD-UUʓMOBKi^O- X9+ )jkUbO9,|cOU>mQVzޅރp-3fɁ:VN$+}0G/B4m?5kyz>yo~װX0^J Ҧ9pA5wT cF?U^ՁrN]H ҏ$0!B1+[JL7^hLRm/[ӳ_L}GԝXZޖG?6E1c@Eș?OĘ۹VZbvf+@)r_ 2?ػҙ!4uB§U»؄}-gq@\nL]@yya_} cٿ9#FW{o›_&B,Y ƍOIjKSESw,ui*.$5[_rs/A3P9W`1$ gR$NUsG&M׍M,]S.`"aT?E{sz^|L'f !_FLzX-: bee|7y_!lp4mzdX2]SCR SNl}ʝS|Gȷw8z j- <)ݕH[D|߁BG 7W;_>&IߑwN{WIw 2ua ܾIu;OIw:aH9MGOd3'cT*di NmQP|Z|`yZg H+Ep(βbs!]:[)g3ꔙ?iѣl$S29(nQ6!gHZ |&ѤE6VDWq[Ȧc588VPq^͈B9RJͬaܦ5KpjOj^kn{g{ B7 bnShP8.ٖeP,C"hH0+nM[\JDAWłBdA,昅(~ X[-J)/xqoYȷ HJD\5ݜ z(RF!WAw^/vVj_*g]"Z5ʏ @@.XJCr b^` F];Kq"V7ω^a_M9b? $rT6CnP|=n R:9 !S-[A{õvL漶%huiqO4vZ Яڇ^#=bvȊb]?[krP:"My8,Y9tφ6ź;P.>h"f=eA. y6%`C(-vE/.=$1$4u!Q/TI|2| 3(UGD[r7T@ GzGgWm/9,.?M;Ͼwa}NJ hD'ԬEnYjAzXP[vK8RCe>"Qnp;KYز,wiZZ9M~tX?ʁ;,/UБxuj:֔m/ua5Mk}Yx_v,dS{g əըԕ@ )J: qD jmb;ckr;txv}%1BŏָEh WT)lUR%6 @gЧk 3S2Jg |<8GMTtP yoP'Hp{\0e*Âw=^d%F2fay@rg gU`Uf1RbВIgԓ*X94&pz+uC'2Ww3;S~;hQ% 6Y8A`F[#~{"y'^!C 8]|Jj*=kagytD Vi7"@疞4YrWV{Rx"R0 8*6h2&F5^.Jg3 HClN,zp ƖVH?Ĩ [3^Hˌ ّ, q{%M8 Ʈk,֋ސ.b-wFU(-Eդ)׀oLqaItd d /e~phmj(W1fp93wx5-Cܲed JQM6{FWؐ]2y fup "_YpYfmQכ)<~wQd2=:rJ9]0y03|_ sL n>F8'Ԧ)^qXuzϟssk6fSl*8tɔ}CڏȮei=JyClR#W,d#z=뽸we0=D;B>aġ+2MKVa9|ح7 RDIR9+Ms|(V1*3l/B[EJÄba1~yt~.m)9L)+O*K N$!JJ:> Ezx8 jWhҴށzC"$hyǪVVK;ܣ Z!x~'EOxAlCnF-ĉGX t6߻ .uVT~?RyjXTψ(M%[1,2YfV%_[[7XƜ^hvxΏ5DpX\,y-NԮZ0d( k+E'afNYRhI 栝gwWPoç0ŁMSY ]ynmqa JXuFMj,^`D޸^G|aG4fY~x//-uʆ;#i4dj +*E J?_ՙIe p6KϞMQCP'tQ$G}m ͽ͵DA$)[F?bN &feBV~ڇJ9rMȑ4r L6=>Q@Mv_VF ,*]ic }qH>]GY'jKA5 "eQ]'S 0\5X:(7߶2\iI\h uJX?'o& ?930?~qџu3{\\ɜ%h0 g`/lWjn[{#EJ/N ҈RCHZ?{;: gOl{#,LV0vݸM~êNgvNcj F]'ۓ ȘWR;. HGЁ<|7Y$ݎM?9_¹u-oč/pJ ]\(8/=e &>mbfeMRH*UINiaI1c,,1 #2q|ɤܾx*L;5Gm=o|Gڻ>Si@%2QGÿݥ'% D©WI<idh;D8K/]JRS%i|_`9.HI~rAÀyj;l|B=Te1 "S |s'9*gr !( yiB*3*m);kt2,YO8MxU{FJi*yI1EgvIЗUryȈh_X ]YD %9 ՊvWzM7=%MUB1e3Z-Fee8 W\JʈDܡT;>%}-_B 'vx{>bL^7kf"NĮJ7 `V.k@,r^@/lap>*%Lp]0ZXt:*^mF!vnxt*#e1J MLAϠB=-.3 m@jGV J֏leb*do1Dv{VV p/sdԡ 2~JN@AXDBP96Nqyx`a28Z[bʏU?2ɽnuR3Mxe?g_.#k_dE0WGoIq}_cEi3| 4E*;, K!ⴴW];e ˯2Eed7&gPLn*mKlEj1m;8`^~n<߾3r$fǬujmH&meXq7E*Άm(<2y|JԒ6#u1 #]"`}V^)BC{[˶S4,exI."[CO'*# ` nA(X ^&3Q3/Y1noX1AIdVt_FZޏ<n-R+ȳe/j&%42:VIO7O[!e|>[xM_Bנv;Y&hj\gd,8tT,#e;|ϡfس7M#bO8neTd_}U02p^p.igo pM`.⁂j؍i#> N>UiP%X^,!3I n&i iρ@[Y9PڄzTaM->RO>G[4hrлBdg@1Ehdd?w VlBV4M Ӎj> [:,R @Wˢh"wpѫKOh0|*4<ӄ4f5毩~` 4H'7 rۏ9۝,s֙47hot[5&utg-nRJXKێYF0f:``WaNe g x\0u- b#(J=|e[0ҷfwOa=#wط\*0SzS6$3Uj~Y]}r8uH"Hv)qssr؅ôN':訳9VbeF.+ YF y@YohBT[K퐏tep4г@ѣ21brNf8X#J?R0alnąG<VzQUv|N^CN#Ω?$f.f6a qec>Y&BbxwCEZPl|kkL}F00B@iУcmW`Q6sna8 мpGlM&ﶕzlA$rzBAT[ -;=}z!.iTͫ*皧D'_YW_|lQC LAQBk&+Ύ=#f`7T6|Aeʜ~#qT0+,56?K|ǑinGn$.iEȕᲫ>N:~&ԤzeP!FJS[+dM,΀P;1&#QaoP.O*42=Wu6@0p>;ZڜF`f>=5O LnJ~̧W= \-4uRX-#+lRLtκ83 ˭ݛdvG1 8¨FCOzQ_c V}Ty|A*{,6t]%X;f \^&!BAL!7 Yj|*jMmʎ[?Qi2Mȇu#s#"R`EC_8˛fbm)ik N \zb4>XqD>%Qn%,kC7b>ưi¤:biBJз0H<;*l2Ơf@-z,FC}C+F7"vYJP>"#PlbSp7eF<)V e`ՑnfI V}*ƾRe3!_CxRVcL /Do(jƟVgroYd~Ppk3} /w[\ &\p$8uM\߆rkvv PtVR δNJPϚڣ>ͧYc@:@-kP[A[E K$lGG-B.x{ZNtkչR: NTe`N\PVۥvJEgxxUڏ{bݴęøƪI| wkFN4>9H i$]+,mg+;G5iZ([ijR',"!ɻpHa4qI+nE, ]@ysd!> kd͜M@q2RH7.0aoȂzwu=cY2Xz*j/r՘npa.jih5l"[F{'Pf0b>hf,j'tzJ>;L{d嘽h5t0kE)%HRvV13N8v,޾5aDl;.QZ9ŌTRJaj.dygZUt.ӹG\>R*".lRΕݡqKOgIPjnWJvzc4%"ɻ=I%c'f۶`[ B#xP|s푭b4%T_2[ 7v{y=%ߝ }j {yNx/|g}x Ͽ`:&C@ \ViT ~ND#L 7*[Nf$xc7yۣi}8%ϠE5)q6%42UkBES_[vA55 TkyeFm0q Vcԏ@`U*!Ow,p~1rpu?H("rGCXgz|@-Ի@|A@fdLkD#\[5;⠃D.Ѝԛkdfܛb6fmTF-[F#he ghLD,ݿO'Mn% $[8nZӦ;+ٕy}qTOh[dHުO%y'<ߡ'ziXXB `?VT"EY FJyMKM|bshhyk| 俧$Nv!FcQE4"ÿpik mR)B5߿e+'VLOx\yHFH&%y پS6G>D>IջEdžir{+%Ul rwwb+>-pԍ{Ӟ^9޺;ZVgz1;|{\9hl\iTd!_e>OoRG<~8,-7 Q6uNBa"%P|V-b<%38Ink&=r5^޲cljp2wgoCD3n0s6Gnz:e>H Fm >sl k%y:ZO鸯d,1DĘ]ՍzظÍ؁p|@p(Qx[o GDoti*c}4n a9<=܋=Gn~Do@&FQlӪXԁЩ QFw+ ބcYV4K@HxC>p۰%xݯɴ4UQӦyF'GٻA>%;FQ6%Rkp{XH1pv;isr2mzDh_x=[HE%kj.\.5aL)'>Cc!pQJjoO({9:jrCʯ# Xp}1ݖn}gúGn_|$Nwx:+sE y`P[44Yԩ0뗰RLXMvCgroUOᩄ 8Mxr$HsXG{4y$ៗIܕe| 0~3^1_켍^ȐEN} ԉʯuJH}T _&_"8m؜Q\e#fHlIvvbZ9g&4xػqw-9ļwꐸ\J qm]JCCkB&woǝL`$ȱos~Ql]Mtq InF\$1H Ù[NkÑ٣+6b))&r:[Dq|IJ/B:Yv<[i0Q0+WXЫ3 Zs)+Wr 'wbm͓$Xz{m,'5:$mUTKI2(=\"~ymӛ[<q+1ke>~Ra>'#<[؀QFo/UKAҭ1V=%SxI 9Q?a56v, |mng[Կv݂8X׀hxƈ9|dXD# { DvNnͣNSP"( 8c+֌_1YAJ:ã5Wї8-0 S_r As?﨎Uw'C2rl"p|ΐx)=>rBJ)Β@1J3їhLM-3S]/F8]ZMf\+̴Vczg+sfZ62:WxagԾ)*vp&G\q- *ވM`;kJ_'jwy9\5Y8hɝ:=Wͪ҈9 oP2|9$ʿ_ї"Q!Ix|n5}߃Z]\N(hO/t$6/j jK>W ^VPҊf ۉb|¬o>syGj&-!_%W}Gcbo'Զr$%e%/~'wC ./'݁6u} ! l#N G=NLF[*9'/S`6%A)VmQ#I=iC_><pID kТF|懬KVђc_` Np(;$3Iܥ֤~>3o7ȎXkhd۔ojdAaS S2.^`s!7! ]_[Rnc #[H{٧!>O Et}[8\.Z".Oxkl5.^ BSBt8huQHثA WB wش lD,)Dv_.s^zCSi){itb%ɋ *V>"] (jJGH2iM٭ c&cM3ƶ:CNU~T<ԣ&ak69d= 5 ̃K9D'}sBh-Z!/uUW%qβFt䬪>C70LEn10OnqU,Ͳǒӗ&$FA+Ceg ^ޓ(ˊ&^CyW] دk,H.QldyqQKPMH:<#WWCCC_zIei'iU̝jZ20>y DVui*u='tfjwGs (+Ǭ\pN]SX ;M& V ,JM4ה:"hY_/,RuCsEaOy~YVC0bgUCyk:uAʀW2e7,wm݅%k~p#*rW+Dh3R`9XT]ʷ=\ù8xx6!UƇctOev5^гO5 p[4|^~Ǫ0p6}t;VT2Ok=ʁ_<?5VF4~FFf<|Uwt"crAb u+ Ww:pzC,DZ6ܗ]{U͞ ±qoMkܔJa ^Ov.TZK|QCPv."'02J|x3:sDSf by\y1yg<|a;08S>֍]Ա"\U c.$aot '3n?zF"3bԘG蘘ljĭh 4Q$v_.{;ՂOi~ U7TLJe5-:sR5us[zg$&j5hKz>7$^?kЦ>%",$%xI"-nI?6O8N43Lɾ">p r;%dݕ'.ډyXdB0q")FoH<:b3?[>Lߘ~^j/FTlF"^sЬDDE6P x]%^9^& >w"6:Hp DUGDk%O_1p))U'LlyCtN2zFk3ne}FIPRKӓ:>[KP{Nkf.3+d a,94 2Yڷ:HQ!^ S! \oR>)7Ӂs6M?P4U+Q]Ư#g4 |f8cĉN)v#u 5bJ'N_.F&31k"F?2cs^v]ևr7l۩\saԆ}P* YJmY\U:&\M9 Sx>7KF)NzEbYΊ1 N`C1-IZMh ;0L| QaC|MvLcYgZSf (ҫLf 3ZzErXCjdBIAUK+?`Bt֭vɪ_MIB  ¶6tK&V=xcT '5U0c|;Pݻ-рΐEOѹP,1JVj#"n/sXn@& Y?zNJ+F/i B$*[JMr8dK )7 ĪDYքu2q8PEIR #ԖuӍ1;O̠ױ "Ѻar\ݺ8Wo'q:iEpᄚ,a"Y&uF"f) E^XlyNqeY;ssBp-" Cx, zϗHK)1PZ7Q[p}i_|=C0 J8pE!uk۵zdA":MkR*P=hbc? |ΦsK ȾHph@[H^ɠ{%XMžX27 _T;⹛T-7#.* XUV 15sK׵ SZ[L{H!͔Qiu'1uv7/'mM7UM=%shmDILЭd} `ID]0m.-d [gt -%ChrUJh$B7ZoZ@s4ߊ Gw}\W_SK@eJM<ߍ-y [řBQ%W3g˫%1 b𮴄Q 8/EKgOΛi#REm;vTx#4(t\6MVŕY Ы _!%abnMNԷ @!ZXom6;U&PӾ]P ,U7Jt{1X66PO}LE-zss9>&aleSZ9!/6pPや/ nɊ3ͬgݶ3`c˕kщ܆P\&{{e03] ڟto;Eַ\qx>DhM P!l(RɄQxX@D%XNiu<V/k=+w:V:s$n|U [loᝇ(M5%(]X5nGkuII>ji/-mXNlSZv{͈~o@pZv19:#Et jMR@Wkun ^2YŢGXHfX4X5B5CEy9j@ ,i<_TچkN~(׆&]w}w/>W-0 >jOKcP(g ϬD*ZB5UMځf)\9 %XsIg lC~3ȹ7;3gc_5~^] U+ /$Òf (_*Lm77qÊ)Ckyҙ5IDkrAbS?S Y)4` "ipt<$?X28 LRMLbA5_ǜ \OIkGi˖mR2tVpL oA%T߷EDzJ)5#[g0I-b{3g`i' !Zx~̑yPӑ&vџDÃu8Wcv8kazyHXo5 S?8cgp~jP1}H3>A~^ a 7_SS)h3 EN_Imu-8]4ɝc=eY&^ش;XI~54X] ȴOYhŝ:ߛrĀ XqAqBݲR~5VH*+HO8'C \HלxE(=P2,a9Ѣ` QGh}ss寛" >eL?ZEׂ3ʦNbf0/ ;b5]# WF2Fڄ܂ 6*F5xM5"%9A-5I%x|iB!&D{f~Żo] ^a]bikqm'V%&dK׍i Y)ѹjǫ+?HL,ECԡmxm[N{&+U`h~&QFZaҨ$:7:j )G1'f;Gxoi\VOf kXϜ@ x,2wWj~5ɷբasSӢiV"dcR2&}+ꪹC'U2z0t@.jmi^oYYRtz^m8(]ȃL;uqMe[YykZIG~7#B !ЉÐRmx'R>:1 o[pl,Q6/?jX]oωlww`09;TY ݔ[ 6-))Ú/4%gܫA9춗A'eogvF*x$5oetЗh  hԵvm뭱Ŧ&1j{{g#TEKr51YƹRaا+s:set1B!1[ rwcbF2C Sߚ&(wI?\ [T o\ިX7^J]F QWx#u*eOLqK ]ĖLFkԼrE>4 EsYZ!t^8tWbN y|jZϙCq?3&%eRrroԪ2m\n1ˉ@URV%bv`͘ع'F>ipH10izw\v,~KR|h$Yプ*wku$zg <9\a􇥭&3j1*XgCR0ur#^pfc (f itPMi˖3  d=3+ z)> 1X W[rs"."_4@S蒏R^?w<4mDڒgzxz";]DRҮNcPh(ՆKbR0c6Ub9aml>=#:"}8+Q{Y-J?_ubb00BXGp#+ژ КbJVFaݛλc'yv?萨]උ- ZLSR? nm'uCy[%isG vOO[4xzy0,k6$a3Ķ|R/):<5d7N',6v3,Cd lK:U\e?M߉S] >al W݈](t|=lȟy7 ~#gOG3 Fzh^ʚTQ sYzC:M*Gk+;/`t({d`j TH$ eM0CCcQX=fD %WWoŝdk -iNu$Yƍب_{.jf_5sҏyC3Mxa"'D [;IImH@ ,:JܻތX \O9l}PDm&{x.XpeK1ih*ٳyalnGW޸*P8Q#Dݾ7: M $tO8]Ϲr`K̦ԒTNW=yW2 _ݮ=*{ÿSêA9t2T osvF~5x}j8XUF}9 Qj&ߘgJ"QcI9Vt;)^PDasv_C><ȝ=:VccUY  Z,p};I+ wׁE$&D3¾U6HQkB-P5BkٳEκdq]:sw8ִ=>d }q?@\sPn)=dfBӹчIac9c]l&7l9G6C}Tq [29G>p:4W; [7ed-jXo utoXHZ(p)}9В\5%| cR[ޛ \9cy܋fq#F]Ts QWAnS :4[2g+/׏cS;ҽ]Nd$#YL40g}t&A\>>h6 LP=@H"0a3 ;AS~p-^Er")c WXY[A)?+ힹNqLOp[E2z„8z֏iYOL~B\|VU,Q,N V@KBWw>nԙ#4dCQo夥>[o5ᇊS%uئ'޾}pY$Rd"tB8_ЯM/lBĖ *+ ̻\j:=iTݰ9-fI%m[0VX#8$m~5˴QR#d0 +4BH؂k݂hQ7159_9rm5ÙV;;uCwM7mÏfgwC3OuxC̳ EKrs[u%Õ? fhBH[a@Q:-V5'f-Y5[\oYY/+&-ۦ" VnRG6#fMPN+UWs2.,'#w'ÜA=LÔ!{[^nRrw>D Fȴ3/挌&eئRY~ubN$=|!Y.i}Y$س<ǻhv]ϝ_d1>UM`InP٥,yQ1ƶZ)İA+uے5,#z zd^JnC N 0׌?Ƭ`ۈmybjQsUs))(d-TKqC-E0acƜ6+kL£g4Xֿ? g ?i &rm8KՈZK#ÝgmNӌ~P؊e'4'PwMa=AR ܵ nXz$ħVl/߹g=H;/9-"0b1}DPKȮnT3uIX,4)4ܨRB'0`g~91Ø8Bo 4'.5\a^:BmÙZ!`i\sPU#(90C01@K= -wVh7 Ipuʰ ^,̀a6n\n:YAyex3 E :*< viGvz~2DIn[vmu;X>wi f_ D[5kۮY~``x-7顬0$aE|3 H (ɺ ;t{2*@@dWʌBY9䌘c -8JqꢮgtjjS`Z<E4n-^ˠK^(蚖 LOW]'٪QTudK2Zp"4i`ON ZCZ35vO۾d߅k7I76#^#E'4!~<;%+URQF|s*&cVfөa~Xu NߖDotD ,n6G38:ϪaꍫƁu}–WoO'O.k枋 VPH`wNcU7Z?Sς[װ AϮ*1ôjLQS¡a_.Q*|;f &2̧YAف+/^A8BI=+)c 65وc23 1>kB*X$ Ks) T;aUGKT15S.ef5w%c5yTq>ږLRpp1پ EeZ&x$'v*G]%|zB|p ԗ%e"qJ5n<\c3JnE(`J6;ke}.~l >Pml +$t.9S+6E۟Na%oUP"$" %~r=;ZC Þ-&BqK9X`Ci& 1[R3D[,:L)JÒ뾕$-(߿;{"bj5$ JQRAh'![jƥƙ4wIU;Kc ٵ}L>)DPcA,$p<ʔq⭼٘kCdx3X~ S.m5mn^)F6T&Q2ф ¡>PuɣPXX/ r@ME䴤Yޗ :v P‚ay.(9 NlJpi%{4jրP&K-X&8 pvk.=q&brdl3S8P6JFh.=Hj3j @1+ C1yDOo W>Qb_ur1BܩؔH*TkmG}Fc~$v8),GzbdLQ"*ԁD:5QI#y.WۦэXϴD;.ލ$3mbA^^Od0$:D u U)P&RsK4}r: j:3z&;Y&7Z,:<\&cX,'u'ae5v 昰2)б2KhK*棿Q$g Mni?KCk4-:t=ru[%i_X$e-, lusIr30sߢe47dqðU,$Ww-8@ %^pWcYA :ot>ϛD/ř},ҮVɰV;*wC6~"Kl)i|S!˵}:֛~";mfqEֱ-r nq )|= *#Փ$.1Xӑ3MPI\ PXsgsPOm(Jx4713Bz_*zB,4q.BR)gCt2|w궓yz?8Ippeo`e RX/cvT6SJ_U?`Cm-{[֘DeixU]$dlҧX|? $U*E~PX/L ?%3^F?*. 1xSIMQZBO|l3U|JldN-]%=ʿ㳒!0g"vhU,DTxR`JYטo/Ƿ#M)!Sr½Xuنi]W/]qFVIzeRe0P3*U(* &oFE^5 4|5[]8[{Mp |9݃@E|`k|pj\ i&m? ^ Wuu^up2W)QJpd%"Ӑ M7P3wU}.^vg9*Eb%fi{`A\\+dL;k2L$4Ql:K:4x̜R@)q\rpd@B@UT_~ 1W_/Drj#E6"[EP-yMAj ttvA9v9u$ 9֬?`7"~6ω~l[=r7< 1ޔ{dMٱV 7f̎Hl!ۗ R5 3WQ nक+=_voTg )@2DML-әsCnkk~IZS ϙ/gϚجy #ImW./$SP=1 Phr1 FxSJvKaK#\9B<11T'E5("ڞV&v,bG&37 zCIͬ̇B&3h60r.8$l'cרl|Cg:#aw/NQM0fBc~>"'erƛM?wOE7`1N.D 2Kh]s_ nu uD0)*xj3aJR(ѵ-mYm0te Rvp=${b=tA\9C@7,+6&#S_tMώl+@wij̅ExƆ(ꌚng5i'B۷CN[^pd$zQX&#zˑ8 %&"= ݩюk]Gl,k;f>8k+Nw Aqr\!&,bAwW9TP{oiMƩ)􇎓ro9DS.'4)ms#V 8x=4z&An۝U I#X1GU5X#:[F偆tz=N]=p26NRoC%0bY}|&1?;^'a8gTfLI7QkM#ʌJ-n6P Vk_!9DYaRf|'fO-CIkP%`'ec7XXB$:?BexVa]愴T>i"(&a 4a2ſ’ʤzwo1kTs$ThD0-MPNl灄Ja=Ձq Qߞ +|iu1dń y.V|řOXz'#r VY^a;5N/ZYfODc*2[%e  ( uUFiL9JH6\3[8Q&]6ގ}5]e=JDs:H[|Kjۖ$*7u:ii?.c ps*Շ Uȶlub} 3/ z@ò܄n6[w2!x$ >,o229KZcm]O !"[@VNOCя򳧽-0 Ffl8х_xw#&6H7dk78h5&O=VDF+Z'u3$M_YX4YgPdcE=[X7 U:VUU/KWlxVc.4`P=]} T؛f>U?PL"D'D}!U )$}QN"3;tsSSmT/ Sߏ1EՏ8䱾ῙhG=Tu\ ,&;P-=&/w xрۥ^u٣Dg enSfk{%n "E3;$ ʰپq.ۥe]R;!g $Om^ztnpzObD8lvA#/`(W>eU4av)" ~(x mNI)S>3!{Qp d.sgqG~%N e&mLx0ur6eZsen &r!7ispQ%>mV,18p.d. H( A_&xI&N] B92Ϝ:&%dsvᥧ+TtDۓTM/tv $6nQ:sj}cz '!>DU왭"\IId+ ymEş{ڹ Pȿ_N$. |0C5)Vѹ(Rk29(^O17gė4cH9<-! ңLh,=lB_1XvpĒ;B"`q;GLzC yqm@pI*!SZE+`i|W eFMfɁo_6rXsaqNU L|sg5Yn8Gp`9W  *:rY},鵾"'Yi-.Y&qTļFy`&-b3S`C buDdM3?9ʋ ) &&0S٤cB*Yp4mjkG"g![E<8ׂ|,@v+9ch3U`AuX>^[7653e_߆#yo^.JZhUx\DϢ"+!X[2{\[a (o";iq q'!(&XJzqdX]]WVcS-[!vgļdOfG.l%D`2 @C>q?aσɂwė)IiR,Ac>Lq\C^e0^7c\oq1S xv3S"0dS6tvqE"fmGNm2#Ʊ{ =A쨐 HrkP"nj=aNP]!1b=Aw[DUwHb> &q$t\(lxç'"!K#yZa h)ܿiv=1Sgx"%%\˗!(}s'5l+)P8Cx ],ڔNi xw:K: Gx!O3XYSXH( 'YWe*YojeM",E;iB >ܰ i s\yX c~|jrʿ7C<ŧU\WY' d SNv-ETMa[;A2q;v.0N|o =.q(,wNQHri$^@$깒OdxԌQ-f s_NxD HN㳊C<{RlISK޿7k!;)hcs vʾs5זf'_v8u0um?c٤@J)2/-5ۡQ0 ~rԛLpudU^Ң &OzJܪlf?³#D*OЉh_nff[- e8gɗJ%Thf&{1LZ"J|Z je*ț%~'9?-:;4p>N9Cx0P>(b^i[!D 2(5U#5pxrҥ.]GIRLMqxŐ3L~j3Ɇ!FWc:WTIw8qp.&0@*蓂+̃Cim*%f/1iT?. >a\s9$]âiՃEސ;r,O@,Qm5M[UI1cV /ebowxs>U18YSEs8H=d*I+qs]AtbG(]57)9/AfˋMD?ST=DVYطX3}d훉a>rp{U<9< {1 0i͝E˳!v^` B΍ +dL[5*{w[a;d(꫊U68ȁi/::`+5Ԋ SG |$=X K6ݤ؊yo i~YINZ #{jvّm C OЇkMh– s^(a$`/?:$dWEDؗn:\YETǹu|9*BxiAzT,72`jY0m&5{\$=XSsQ8|>wbHܯyݮb'cJ@ <k 3[B` KF&^nMx9U$ٓFE!oq>㴐#Yb$}J"{<=&zB[.DS?uo/>zz0 1y%nᵊ%!bkN7r_tR)B)ZΦ%#!Mk@?tUs @R D\bo;ץ%)&ĭ}0~ 펛"I= |vg>P+FW}-ԍ)>R-R6_HF}/VYpL}^ Z}|OYhکPzvfmDg)YxnvVt RqH҅%N 2?lNx܅A7\5^BęX)`Ը&uu|%ey:jd.L6b]m &4m IV8m ]SE8n}b8-uՂ8LfCunz04EIT=L;òϴ*6Zu瘦g DivNG{;휧zڞZY8P]&[*FtM$P:Z~v:0IC >,zR,6Oum aGIغͤ}ߴFO5_E]dB]|Q; D݄ˊƐ 쪘$='eḥ|Jmډaj]Ir!NW&عKvKR/k8tU3(#>ezPS qO a% Fūc ]BRūTWuRL;s1x\ЗLLm*aaDк=tG=]; ,Npj*P*LzL`VZ-E$]Owu -z.X"R. ۦ9 Wfʪ!?FG;yKBmlYY՘YDSy.WDX=yYi-YM^'P+8·.Ǭ'K0ݴmL_9%ܸ!ZDJb^%k0P.ᙉ}JGӽ H/Vs[н͝m1?QnbӻuM~U,3cR?,}ߘl}BoMc7"qHitIgǚ%-ApI7FPTǾh#D{JQEʹ Q{bJJ0ǝ[u[ ECD6@Lǐ ݾj^RA,e}v{ | 4FZmj8H02V<|I!7$;6Em{`Ct-Xak!K>~Ҵ:e8=TĽ _zJ9QjxГF. Q*rc] &Up?TnPڦRFv,5m#RMAUbLsh.L`} P@dE\t4a uL\Eg VK eaCW :܊ڿ+ qk\%|z IQ\2,,"{2dwP mo;OؕvU@Wm<8.8֬azQ&J^ҭNiqR;dli1L3n ̅}; -@XUaRc笋Q֘'tHPHºkc $mA(F\aZR쩑Ž7@> oY:Z<4 |O(,/z ܜ1Z6"Ik]k0m d@haTUQK0\JR~Jnq:`}B\CFw3đ\ROe֙6 ʭC6R,)K1z)k%L~!h΅/&DŒsԠ?ZuF)I&}6#)IG)p2l;8,9/$_^jA&cy]j_@ dp{>_#PM?H?^8;f[yW%{Ù \~Ҕo/\+/.E#K{`損P?PM׮Tw91.NSנv -we Lo%?GǴfG&Gjt +*Y-̱w@"N&1G̢*HtTYr@w4O׼+-I>A-~#sXբ2FJ|7aqQ87qSvJ!Ar|hr|xKIYSR775<e]UāG#6Agk"ZYxJ3aԙ߉kj]%IuSӵ`,5 gnBLÏѴ(PV:PIn< ]BQ"EFNJ:)}938+p`i7sUH_i%^ `+ilPoѲl|cBq7;B3Lqp$AZW7FiajƯQn%c-hM=}^@ $RyiM*9B䦁-{yn/pcG|(spRD%mc8[mvpovpk"ٻvqϡ"ğ%0WLto4Fg X}[{|rV΁Iг e3%/mPm`ȳXްW xY 1*Ix[ eE(6G/ tVP-Rn 1,.i]+SDڼW1NWeV|6jp-X~,b4j4aqḞJ<>͞bdZ*)}@@AGcKS,U5lgm="b/B= o*iӎ9u߂bmPOQq7ݯG űRܡ @L8%M㉁`y ܗbeYcj(ēr+I N?͓|x}(WO+bTx׸aU63DPY.J.QLJ$$f NCUU64We=h/ImY 99AGw/ t,Wehb\dEN# ok ,V5#_ƾ~i<$5h6pu#7ʊb8Ao\>K޳eiaupMEnpd<%#ݠ\y04';TRxp'qY>8쮘B#E`nUxPMS:Ŷ{* 6Zac A|.qG * euK|$Z<2Yi Й~ڒ֫FW:ʸx1L_@ES8ȇ&"EuOå!}X vuDM0#{s*|e,a)CZx]𗉘,cucg.t3N%h>=]Zc1>P\CB,I3?CwlY vs)/]o@+&ϵ{=|.-eeZkA\Hg[WT`x{ ѱY}s׹}R豳#l,]jȗO쒺h=>ϝ$[ (WGcm'εoz4P5d(g I[:>ާv xrg{bF`_ tC3_'vMv/5eK:v{gwYіm3i%o1ƭ$$^\`V6ΈA yQJ* .j@ӿ@:eqg g=( j2A!g'*#'̇#)y^:bi>Z8o5ϨGK|r@ڵ/uzcaҨ"򄟨\W2*s} d Z/fm+c;[={tRZhuP>h-!^FTYV,nwj ҿM3YWf@9{Zq6͊c I+\>1t_4ՈJ^͠jtK&݅цY'B'C7.@4ͪ,/OCRԡq[5&b9z+dD$Hs\̥U|~W77 FMnBX.l7 4^'-6%cK}pۜJ<٧*o%G&<_ kM%b:(eaJqBԛl=xKSNŊJR꫗4'ݴh-<ނ کQaȟwIԘ|a)ssHI%@)JzvԜmMmn{l5ՕEKN򏿄8IW,Sp;6Q|}2Nbj%1-jO~%[3wh>h%X>t(_NڲCc*} 9E3,eæg3R$lVS:Ke@cVR,TjyA\\8OI/h!Cw*4 y]!R@[' ȶg&N%̫p#'sp$.^GQ&"ճ?ȀxlHwc0jƽcuCYџx%C$2ku/EEp{ިj\c(Kؔmu)nɧ'I2#{|[W$[H ǠL4іmC#;K ]q @'oL>Lm^S6"Ѵ_rԭ./Kv{ @nȺpܧ1j#Vn\wF /i £dKvI5e)opb}0~<wK (cm"Z; nB ־' Nܭ _Q|l@bP4GtԊ{eH Dl&ky箭L<8LжŲWn#6s;{/BiMW>n͆6i3)|G'pBK"r^J݄]HK} azqһB4M+ j/W(xgWy}j3/`{}mQي}]\ЄiYY Mz9FPW;RuQxܧe&:#Fo_;1>Ay؝ c8VXwS 5`kIRքqi8Ly2cȾO_QS[RjUZNʩtq9BFb% A6ӛm@{[o`+^ѥ, n;4ƢZ5B- 4 b1UO.`נ({YJW\ˬÚckEu`֘~G2D䯨T٤Gj9yf1+e[?;\Rgan5 wYI\?hFw!sKsVݛkD,yVoȿ4'r=ջr< YœG$) IPʔ;R^20?[dz`B!507 &?Խs% M9}A&W {+E~K|/%]+ը1D#Uŧ\sT:;BܰЍI}ÆM 7&2܃,ش_ZSY{/۶v3/3F@`ߓ<@ݔώ̥ۤu͗5iU=zgn s93DY0V{Gzj[58Xza"48} &Fuh~rh,p2o*C4.->tVS3.jލ/|CttAmb8U̾^ qdjŸPQ;Q2.„bw}@Jx#=>%jzUA&M D%s(`8\o` }-J7Ro(2iwn^Bh+O;;jZ}5OQC~ oYwwĝ XTqZ [9/Oƪ #cΞe˔"W#IL\5"Y*ؕ`S A.wߥ@cUΠH8(K;[YA3Gdf*Ɯjlx 7[_%ؽmæўkQ:ܖ5c˰%+r+랿/-RzsFf[y^Y+g4}Mnz<#PcQ9+fQp[hW @A\@kţ) % 34A_upw!b[ qEv ,O5~t&!"~$Rl.$B ?uW(8?R7x#/|+#ژ!0{GƙfjcWM}ȇC>ivP@cc>m,,MFk.3~7{~u c0 hRԹKgI H(Զ]~8Ѷ|5)ThOp,9 d-(E6kV='θ?GJ1+= E^W;O]cO;nܵMx+tЅ?+dz˔h,%MJ}oߙ,_Y8p1dP67K,CdTF` CsHsd虼"2h'׺ɒSXQ,F| C*7Q\+ʑJ:d[wؽwX *pl)1= Tbʶ+,$Wx(cHhQ;4vpcHVm4*CytswϺQ`(brM-(Eq,DR-O<hus;Y/߯] 2I87+^+Tmpzx9s~ 4}faJ )U#[Bg3Y}BhM%gh} mnه܁Ҍ ͹0 2ЌlZg'Rk&=`Y\jB A{2TSѐh>kWM^&a)Nr<5?xДQyUpЖ?P I\Kߐ#fe@^z>`;ASV2*ltYFMN$$jIi-iץؼsV^cXղreajtVB F)g(Ѹ:0  vQ5z1z˕Px> [/խf)2S-tIS ChB?J# ;wÑR$Xx <,u{Zr8L cjHlBy^pػNrM{>y\d_N;Y2]Pc:M{JsF+3|'y֓/1RĴP|5j[C݊ݴbnԠ_'1+1Zd3%NޘS.n^zbt5lsZ@o9mPPq vq0`~M8 tzDEtSS ʣxCr@#c+Y!C!RFMՕ{d &oG0B)cE+:aY?!8 R࿰_5ms9Vm`"Tu?ACALi6IwFz DZo]Jj G9 !6c;$ LH{1qЈmT`bY7Z\tى--EqSbɕkTG,#I+WOE/jAJ/To$!p>v?kzVjN9G蜎Țga)/5i.`|p/E45sBP@qsf 4ZU=2@ >b#nCz)KC,Ӛ/Eؾ4⺙Oͪ%h,WpEe7 =|HlWlGׅsԡF0L=Hiݕ-ɰW~֢p\9\ETG劥, -jgб9dT3^/NS|YWbFmB54nh-+E ETͰ1/Y9=T xZ(}"9!wq* 0QuIϨlZv5@ZS`0gL!=_A+AeǑg+*NAcX=p$B3y Z fN<!ߊQzzNW5de]0&fePhZyu3Jqg{rVp~ySeHoI"(,.k-p9gqP ͔`=<\$zꨆuWު_3݆HxpxQcoC^  Wi OrL= cdQLh*u_@f.ǜii8T`]t8`gmU s"ipB-zf '6JCC)ƞԕȖZV~DY:@ Ò@\z-% = tiR (eoT8qԼȻ(܎!xNSu?3<ܷE~bVb41"n(l-8Ull2:jCs1N#$*;26jssI26WS=bK8]fG.mV:+t 1ퟔe-\:Q԰i×TR~ LhP̕U/Nf4ނ~o] Ŭg"z6`(y5-gouRhPH阍R.R m{C/IM}㔁fB*[WIG&+Cι5v#!E-JdI=cZS"4~0Y DCEp|uL`b@l9WYJ5twH8s;;Yi(@!Cьzqk$Iy&&_a_9^/7$kap bqQeiX-nى HxA]\+1 ?^,XlB4Z&zKnǚ"~wԗ&MGb8s Rw6$u^!ƺ.Fԁ8tB /Xt3d%Bڼ{[iqlvu*nAhWr=[# Dp[@B$p%p?&]%PI?/$h##?-@S-N "21Z?EX#BMuKrV0{7OuuBqmhlw@aK+D#劌؎u[ rLL9q(Qqt\5&=͎$EaH)U/`Jhml=ţAΐH7!x!q#kSnuaČD?6y({Z҉sTB1"c=].Ď1`06쁚;5$]0J5aqm]DF-G)htW pA0iwLXlj\+Nz\r3E}F hƦ&UA]\4 }S8˳e0)2\>M!PT^!5כkĴxsޏ5-hͨ}<15HsgC/P^G.ӠyjP]hl^_ʛJb>gk7:cw.z /PtyF+ Жk`)SG+rbt)3/baxٙiNjJ_Hގ}7cLSpvl̳Vo6[Iޙ2"޳Êag}Qf~AQ񍍼BLE yk!yLBF/%1ČZ"ᯊӣdBv<0̱5&? Ikqr<Y=q ʊwF+[iz fg~{h7D!r=I؋r~;'+c)]gs):xvoK'yų7G5bШ/<Ka8QM? _xr_@ '/zN!̋E Rrt[J :ӲaΉ; eV'Ypċ8lB;'F'/Doky C9~`QiϞӠa"Z-O2zo/eMs_gHl&T'KU;sܚXFt1c -?4T܃W7_\5[&%ZnB3|wA; 7xĵf)ºD&ؼh1BDOEK<%Cc){ h1|)UUSAj =EG}=9>/RzwLm0_I$|x0R'kPZc7>PAf3[ ~Gl0'ݦ 2 22,֤MyH?׀f `v+ 5(J! "ˈ J90'x R=FPo= `P DibGa{̔,Tuy R Iym:1r~p[I@4&Pa־pK/%XIxll@Hr?gg *j-%芟Q-2ko0 lE3PA{DDk.m瓿 g@aGZV5\q훎G yjBBʢHN6|\291_#J9Wf2h6Xa"Y"[LQ߽<(N}-{Jyy;nѠ@} Xbc*.ݪ,Hű ?4Fwâ-u#26I"H%qI7?WFPܳpʒ`,1$N7cd:{=TEEu;<^w?&&0N@9//uؔE$3 һ}A֢œx4]7z/F7*E8ʚ WȦziFj.C:Rb|Qˤ3̈́0& _ 'i.F2̘)WVP殺n7,u2jIZz5ay:פYQ㷼FXštDN ԓcqU(o9\T?|F3Ydc:I㽖}kVVG5 #nj6&RIs&bG/B4c qtR+ "HF+>:$dڨ/Rųg_&$yǻ(IPQ3=.gޕqAP(:15QBb+*7%|4c8rcRvNbG|P(|Bri9#D ^폱kDroNe+pxV轏j#XȠ{${I8Kדm޼KP1þ:v89^r ۄa]zWV(R+0ZəI~<}2Iw#q5:L!MJ| }(~x˿|3-)5rᨭk:4ANpwN4n֩( c/0 Ǿ}8*\_VT+^;|wI% r8Fetr]::ۉH h;bIdH3H_nޱv"9ʂ_}+5(T"h"yJ8Ϭ0 zӜKi)_OK-9l ?D,H9 |U~1<%y!59PK4!8cCx{̇84aBMnƂP]C_vϙDH; BdLT7z S`vF4ONT6#e`ʠ@Djz(cb6x"Q3ͦNQEM|^F0XYll 3QLk!W<%!d*mIr G1/fSṗ"&>H*ҁX{gꠀVJ[O#7[82=y2Vgi6S]L mZh!P7eu/R^¶}=#/&T ?gvFFvN W!|μ{b (TkCN2TFzN Mu 1FhYj5{de%đZc5H .<u-HV ȡ<.8hptBr8.xMذ-yTXMХ6v=&D*C沃[y}9RyV}KL:+m6q^zb]fAH>z,A0vA߿KZr3n1Qe oWmُ]P-K^EĴ vK G܆ @ `;]7Nӑu+IbCVt A="of)iH\",ksP@%_qZu*e`S)J}ˁh; F ' @Y"Z-U#ΪI'je䡪 n 2iɔ 4C;REríjOn+3$wU32dzhتĺ)~-ޭ.a ]”.9,ۏG:F6AӋWVm$̨YL746o ig$*Gg͜Dcu! 횩Ӣwg&`yܜ|@Tn~;m vbSJOz%{UI2{%^YBU}f ԜL#>"v`Ŀ궠g= u5Si;jgxx+t+C u B kA{]cFs}Bt#rw4f3(oUN3 Cgp&:VpT6Fn <~ś]я3祏Χ~K\b[HGbrAWȷkU(Ɉ;ePnr z}<.!{;xDq;q#ED/w~R!s,+(nRd#f7?Y rJZiT靦I=-t\~齍5[h _74}W;u4T'Vw4a~%x?STJF\+LaCR,4Pv;'4ř {J %Jĺߦ}! :^b x#44v>(e`Tz+@'e쥡`re$jG/wKeh2+-2~#o(o%NϏ0١7i}2 *&/9S$Xs$ 2k?'T4QRS*o:X]Q: ٥PRSm@_D^8"7 ®OT|nr'd2VB#Uv~TH&mMlA9f,Y j݈$bEqANrjqndfra)Xпǘzf@PSY  g؃#+Ò1IwbY٫)$KTEs@.EqT @NU3/zwL! Ɣ!'83D7co;U՛ S)4j4^#Dwii, 1khBΑwARF1#0pOkOE`em 'LHP3+#˝egRi$?H\Hl9X֠HNjdplƘ^vTn٘%JBPPpE(`hk(W,y'j _ٸ3j[^k yES>*.p\xE;J\x{zׇff-`P t|N2QwQC uFo@"'3%bC&L0@ |cfgvŎ|VVS'nF 7)l?rȒeY`ҥd)pS-2N>Ѣv_m faqr?ҹ}]f-N&lBf(%=8T(_A5\XOhCg(,||g&x̾)q,Bf4\z,`KQ,־%(;=%zThמAvso< bEINqP0rWt73ʸϚZ˻IDJ84;/v[\q3EH-^lR9$ȥ< [[Ȉ9nG«AbWрşk95jps.Zx5M=򝜀CרC-ϴ;۩qgC ˣ^فTujvV{WfhD67.,zo<3: vG3%5 :$|;qwd?=(96aM82 xo+I YJelz)- F,:YlR 4 P̎q*!?)ڤ0nI1UeZ\oM/fp% M둯 ~D>=^~P:`s> Z"eD׍ig O)NEV7g+slj˲fƹ/"$pPeQO2dP}%٣>uǝtGh70Ê T%G|r{%Wo(_V2 :d[=.esڳ,t1P,n2S M|ݷV3g 0(bnm?s(UfA2WB!Wf8vƗ&-/CTk^t&fN_;{,am+!όת~8 _%0 'Ps,;~IhLJ>-ڰIYcE_]qzoѺ,kŅ mΩlJUȇH={UZƴfQœ#16Z(%,ܣfv0BLRxsݐ$C%`iMX&|pkυgo ~_mVyR$yTYdG)u591Y0(U!8X&<)sJ9E;!,KnC W)3 [9rFKh!c,DRF^c +ۖ^0n1pb&ZR>@xR*Dܓ3Pi/S5^ǯ"an ռXq>5 .J$w:0d%q!)$yFIaLٳ~;d\0b3\5%  ٠]삗"):A:A=rMIxpfJ&C^^|SaI@aC-asaZW֛p$71!џݙ5w#AzD8$´>&/ O /H$1+YK]Cs.4T|n/hk8׈L?Qumj&Gc)FlugV.zQO' ?8Nv6-ͯj_h Oj;ggaLi*w<}D^}&-1VefS̪,{_'ℾw2@ݳ1+& L,1Š0&rJPHz#rN3:HnT2]a7Տ"Cz<IJ_"Cnny\%[=E+5•W3i ?5QFBq!\tX((*#øx.BbfІ =Pe& ؟xj:q~,o){4LPYƧхWI`}p_D`pI%Y_>m_s~γ;%PGz ɔ il~NjAAt xx$[xq<Е;M^AF:''M劃ո[TTu!/՟;t\ڒY3?\[ r,-0='|*C|>ԁ'wiouzi`،yI ѼRp#uW\lcmdtI|9 TG>k;{kK`/!z0ʨa`CI<~]"I~) &dջ@fl4*֬OKRfY@8Ö& +ٓ>Bݤ1`EzjkrF]h*!67e&U[b>N_ҷdm}&f|ODJ:& PAkkRJ gEhAih,r ͋UɯQ+lЫ96HuG]:k23~`XJtiiFPML3'o4H.vEVp͜CYd&&]gNiA,!ݷ.7rlBDk#?TD)<34$gG2e<-RߍA1ѪWo`SXۡIXPߣ ^blTw'.1,atYLcEճW,̘}ˡwV>(]Q0u7} _jɺ1c3=OJN*/~/x#VNG(6l`t؉RyPO&>Q|B #3GRI٬@a+T`?4O~l_ܨ?Q5"deۿ4i*JVä-`IE^tQaxYްS6Z鏩TD=xV-#yBCcۗ&E J o}D'gztq`dkg՝&s5HSz΢,Y(ei3"z$8.~M*1(0gQ7m@Ԩ+UcQ 0VÛ o)1-9ƫ>,wjinx#iG !ۿl'cҍi;;( fS* k/pVv},^J؎@J}{{րr)+c5\7KPQ n}KeFxNpynQ PIe ;ícZ͆+DGpn!j݇ZB{dfc''fXPѲ\,]9A??>v$K)*" 45zqqk.ӊr I[{ Seh XOFϫĬ֠[e~A&?˪1'A;7^cAUٟv?/(̎*qZ/8$-@rBiUFCr޼kRUOed^71VLoRv0~u'VzA֕סvY,H*qW5ʾ0{)u9TH>]9֍UeNG[q]BrvbrɏD~%V=>6c}> "|FL qޗf+/Ehm޶?α ۖ \B8oB>VSuFHtTqg`lB~z{@Vts>Kcjt8"C@i0jg3ns5ìD6N}}èp<>wCԓuΔMDr:Џra?SMs8 `{Gm?Y#H5HȂB>".VcW+;ݼ"ٚ Ge׺7}T0+w!@W66@b73b+hˍN񳰞Q²%nrkg dĦr$_ah9| g.Ӄ9ĸf D4!N^hO1<^cgVOl|r%, *{r%@LdǗ 5UT.G8o9.Lڞ[/!TGvuDޤ1ٻ*%2&O+"ɻY%:qeu֍64#llƐ{8-+ߑZ8φg<5z p)8qHt0->dNoz6/pʴ^y* K5`vK]Hìf܈PE]2WF#(#$1 񐕠B* Zdmໝwe,y9 @BP'CTѢF>7>Ф>2@Ƭ=QnPxc'Q8g3WB*.optςP3'34Jp&1 9X z, 2XT-1D$I:hY&=S4=Or8f{܁`JCcXkZDoK>[_֥bnȊ'h<[cp§.UPn,9CBgg_HbkuOI(jK=DHٚۏZ B{T|EeÓI .4t\w*<+wRȻ!#/Id1ClJkPK%,&WIb]MH#k& }NrZGѴjb,פyP.UA@S%X#0pT ixEԈVUM1;CY sFu8I\yGXsLN،+|I4$u"V&897/5 <1_u܍s^tظIG澹xS@jv(>XJ; >zo'p".;uAUUjl8O|d>@\s<^q"׃Ct _yy1u2V4^QZ㇂dAEMt #![w2f2%3Ŷ ynnhIԠむGdfOr,4JЎn9*N† `.Bn}P {g pͬ}>L4 F|Y*_W,Qfx.Ϙk\,-9z6Jđ?O;W]G.b_7A- ڠX9,h+`䝽tGݕOJђM{⴦] br$5CFfNZxBf“fV2jvь}Ot7& Mo]= ʹTzs?W>}]<̹:)!dB5 1@՗#&*Rъɹ^~ԹsSJ)r_Nx^ }(Il ӻE(8vJ@;*r¨NG[L͓Lf28)$Gvңj8!23EwT?`\գIĽAP}O^W|"bm#g@iG2lfu460~3 ѓv>,niOGOu(7ѷ9*Dj{q^\Oc@=OHF.[;NҎK[9kc$n|IXV#K"m]%VO%|Y8΀?$M|/ń'sdf9!R@hdAaS =ߟd#M vߗ$`OfQ`#W=oaک[i$4θ#מF2n+ ~TWb*MɱcW n@*@D3F6N6#/7gaJ$I|֤ĕsnV+!M MMq`xH"Zm%mL? ACZy,v+u*PɃcR]FfMYM gVU\v9ޒ ;ny#)X ~pϕK?<񅣢Oͥ?ߔN%/;ْFI^w}$1ǥK[V;|,\BC4;GL`mW0Ri7,g@ p#[ޠ2"f/F 6;Q_d&lbzWcPIeݘn ^x)X] }aa<'3!7%=q9 #}pP>Z*٣J)b}!/)4f": $ojG쳁7r#O]vyRTGnFyH{`d&QT|i@#B>v=Oߨ4ȰWY= B9s~[3?R UM=^Gc>c F Ss+KrOIcQM}N2-NBY6VU"ߚ=Kك]}xX3(<"uFZMȇz;t}]jZnr#YG~ޖ7UiF4 6m Du#@"0RsQtVQ3 k'H۫Z?m ]X9N_^6L` C"mc/B S7vܲ?Zxnkk#Ye=B: Y@iΜJ|s²y~sabn-3#@Ä>"\[Xs?a:1T V "vxK~lm9lp`WZt_P,a $ɑ}7"yx'(P6_ež@6kP1MHo -ojӬKm<حt!qrclU; $2u.uz5K%H&a6`r5K$]Bj][+Xf;@]D$|B[/]hc[EV/,43~*mTdqGǯs|JK2~>24Ga*]䉫E\!TpҜu"SB<Mk`/m r6:U~7Ӆ!Ki]Nt&1 vx*h H[ _8`&QsВ⧼<n-}֨ Q/9`^\8%#8w+dR3(}P:%(tm^L*b`Bt\]7"ۗqT'̛ ` ]J jnK8/IZMwB8LSZ+rY5[W59 v_y3I@~%k6?DY랅xV=d K >pRxJy 'mߊѹN\CV<#y Kdt Dz桴$5AzܘmycCFf<.46p+Z\g( bĉTCy!>Zy8ߖݎ'dUۨYB tp7Exec Sw3?Mc.3mdɊa,(@oYj+I%jXxW%%_3JS)D ZY.E㲦>_wNqK5\X%/☠Q_n` @4U*Yz; %u3K.)PxRΠڛaĪ{]BМɚ9y1F%8~Aę0w̛o>ETrV@2gP̙PF 4鵗UH5 6=NumT&έKXԮd3]9<@z1)5:󼥅>aksܰ_;&jBq><3-XP6OA]Dsh_1룥]''Ѡ6ct|>޺itM>{!l,_pGR7H4>xe[oL,›X$ٴ/:{zSDr ^&99e889OUۮګw:%KboՍ&0fc>rfX;ᅰ ˚vwȤ澕E|?区({n6wS!m3RhG% TGQCq"C8YyeBiW؛o>r;^%.|- UgSurbf}oD mk8}p̳+R#T蘞 `!k?8v_ q^焗}e ߲T(&:ȰpL{7!Kd92侩uMkcڇvX9Ei % L[]S3 &Ms֗iPRʦ>XM"@q9 {ڰ\[ׅ9~ kP0 |A}\P ^(0dĦ}6׍tݖ'I* z/k.*(̷AW(s042DoD/7TUWwz'M+&H~ҡx+Wq" 8C;]x(QIB"{ gs5JbsG.Y<-a QT]F\oP|B*9-ni<,JպK kr4$M#E'I p j*B0HЂ@#xu(H&>k{{_';Q8PrG> l96o:XØD^r[P,ATpQ;_ڲ^gO]:ۦˣuF[_cΝ+AyγE*W]YtXd/z†㗀X>UW8яJJCm f 6QV}E ̨ >٘&-n2%: <0b"ǧd [z[s{__<(N QS>ZMQw 6B6 բ\"|/O߅iX=qU={ q'R:-]j8Ā$ ghn(Z *~12r`bn^֏4Tna.q:G A~ۏȴdscLq\KYY0t@b^|W//=mbn^=@3kf1bӞ\[!hЕb[s:x#h^9Br+@$# تr"v몒)FK`Q!n£pVDj a_^ l *S+ϹIӛk>Q֭k88 +|OW9etŒ<{j#4 C(G8Txy-2ĉ:[)ܯ"S֗xˀFt-b,,~M-1^S?ifr)wwNZ!Mn uͥ&UIk;}:A #fNu_#N\,GuoG u`Oa';]p(̀)6_eqX1y_ %@ǃ}Y֘ƒ1l`!$?$ 4IH0irߟ3%Ia{U}xrAJ;U0^jmIV1;Ao܂4DrmW9hY<$l&䑕\{&L ϗ0+K쥅&ά2f6Ă냍E鎮}6?2© "v}$NNMGE20\ǽ$%zgnd& %Y~5\*^˔Kab۹X_(\^FzR'?h]6} /+)M1a!d\,@_HXH3 e/,bZ15} Γf p.V4']}:]uu~rrI6О̋>g9%}?)dHsfV^p+/[c n}gJ*Q0 ,W;T߻L`D 3:7:Fw%]0^ . >e.־VA 0E#B2l`M]eo1 <tw)oć3SMv^oڥVYAˤ,iݭւU`ًYaXZe_Nyw˳fsOtBwK|E#;' b8[~?@߂M} jץTxcPȁ[_@T^[1譛Ѝ]H׬m(únQ4`|ydS1BKt46Ny+weUcLKt$gjAjkHu? ̋( sF049 $1$S7Cev_~|Q JHuBMkC<`bŅ8G-MG5sn"&C `aq5 ٛ|tBLi<Җ2˪w< #x#LOnY잺?>.cgN%) xaB@n v{&'ˇ75+tχ־eq+ʈ |idH"w|т2ޙuLssYVMpHɒٸYxѧgg lQs^4 qqr6liqa͸%8( Pq4z0saP+@L8GNؚ5GoQ'}X*"i![+wQ\ƾG3Wm]Py 1X#q%a \rn_S5~V棼«z|1}+M-#+})Ĉ˂EMtĢqJ4ڑA|#d;2 ѕsܸE|(A??XQQwP_;uAxoEݦψX^x (8 ɷ%Yt>mBSgV]Adl]yW lMaV;uן*Gfo}>Me::av~wZ8@cooxnZg$oX;]7s@#W s} ֟G:#Z@j aECm(abw 6 W[jd _C?y]h᥹_bmɒ3Ú9R+ª4 w+:GئQ^Zbx%3")!.8 !]7#Bjt )86;:B7t2+ry1DsZsVY Q?S8äX ʎ.-1Cݣ\ bn ?\O{JP9:6"/CjVJiirUhG1+R)tjhD Wnq-҈NK*k.Cʖl|ȭ5=,RD|~(GF=so8;U.WoOX_jwa5(Ops:Ch'hCKGxխDZ`Nk=@b;ԝ94`O/M1]?|H[(W}!P!օWz !'D=EnOcw۴ٯE P )АcV(|bp!a*k~kvM{~o+~AV ݹf8\ O꙯esX=,E,'M\ ұ EZyX@Ӝ̡] ^kJ@>XFp2"yw50Sy9L P#|_,4W '%Jeʕu[,7 Kw|ؽϤ`GrB %W<$K*/u+m:.&j8PI`jz (wǂRFOp; 6rP4"?Cԩ8r~-y` O6Lx{:XFiJ_ q̊X2cV?)9M*k'3Mj\o xPYnEcI%O􈏱,;~&% yۓP*NToEq1>*c䲺5DTn ,U `9nA|8s_Jt7 Yӟ,U¿ޅL*QYy ݯmAt=Rv}%n*_5r_)dW2LrW}|)WQ2T}%_ڐBna[=LJԍ [:+T'tX!{ӱDϖi MfAge ӧc=Yj1Vq'[4%,U!=au uwƳi\(WkLXHgرaIʵcő fwӠvisy'xo1!1܂-W;oo)0Y?PJ-ϑ'K騏p.G (v?a#.I^(mЇ aAWE&v to G5gMNJl@c|K5:>4iC_ pfSpCYyQ@êfPvUO7b̰QíV7&n-3-T!.C1ٝK%SڋB(5 vӾ4]^No3ۣ+B)ʈyYPae/t$7:Ɵi,Z#@t5j\we6za∯6Tt &6t=gϺлC] c.$?˕]Y 4se~0oBGq4iO{FZrxq$J}w/!/fjO5KpT?x֕lF<b-(oq1&`<5oiSLƜ꩒zYַfmvI!6Nk3_CX5HT~a,_HW.V뤍+!&j)iiYw|"IK4-ONt0 ]ꂙdZ,O/Pit,QbUt!d|/xwz{Ka0 8?Jr QOúȾ'G ,\d˱tj QPipʕ%/<3GŎfQz~PĔWT= Me!Z 'kH`}ǝehK9Բ# ֠Qu1%cGݭ#{rd tGmDG,ky^t{6}`ڵ%- } ֱ㇬;bg,T!ZX2S,o9GH@~9,!PU)|Nh9cH듊X9mbpOD%q.:vB@7LkOv:vo` VT <9% 殔IJR̹=E1M&v75GF H:t{k,J!A 3c?z&6-F 4H{OL+xK0̟A{+w; bc6g%O-znOHS5M^ƶJ_F뤆5T%6L;h)k FٰGӢzZEmuJ*GI]<5hso.c{zBkħ]-F5!)X_x-ba+"BhJ< M);&5rT'Sȉ E[Se\YO;%'0$HOgpX` _:b>ŅZ9>[+ 7OM1@_i=cJo,E*G`L;kB|q<ģtZeːݸm[es|?/6IAyp? )J4;k5A }GBVw1JMf BQltĢnAڒ:"&_D+uխ$-ڋ ѭ?ZkbCĭBdJ+qo)[1/ov/RдeYJV.&>tcXoW}Ypfp,qδz(^hta|%olhvr&%aL/UߧQ`n> z,3\& hHآD蒒\eP62)=[6?K.TyTzb 1Ke/HZrS_'GK6:JaY-O.{LWv c/=x+ɊFBD4UPޟILHItV (1VPJcBtA8h0۳s >J~k6\4̈́XE޺c 8[{1')W<8Q߸pɃtDiQ=pŻE FlRzcW^?~={V> Fj&;2C ] R8OCtC;|q4_I((~=쐓 >h{2񰰆] v2~?ƇRU,ihzHb㎿[z١<]x4I$5wSŠ[rͭk_ɛ/K;LNXѩO@hCd 1g;+ aid籭; Ua'gy?3 #jzL0|[wje%eY~*0Qp8424seຯX}M͝?a<=Va_i9x싩C1=|4N?W-v(טGNY#pw"?qIa$Y Gư4 TT$dlX:}iġ:+5O#0,1Wl# (i|Ty9HqZGI~)4<C^T97X@AtXu#-K~嬫i+ru X[xϘH247JfuIƺ^`vbי++DӽYOUF\w'ZRGY}\i-1lqЛMfY_vRYU|ۑcC&c'$}GdFr8`.Ag5jođ0X C.IE?/!κ\8L"/RˠT.Vb='?\#^[f5.-J7Cd L\W ?_q,; bhDX6zdarbܱe#yViH7 }wMi%YfS,ALً[ WƩ©6`~w{cGiq R c8|fH&5y2yBYqUMU␩Kb@-fhʺ cs%RjL'WQuЍsyUuWcyʹ sNJ`'dMn}CX)P;wo$cq G>z{1g _kY 8-w$޽(VrRr=[??lk9ո}]/Qmv7PzMǁTBb2Ә*a/x ![ -aHFpelCd ] 5fE.'N (dFƸK Pe9(uPg@'P ?^˝/\IWCն,9HP6d7cg83Y",=cFDFB8+t8f!D~fǎf'"mGdUX|eŖB7746E;8`,#laލ!%CH<$4;GXZ˝[k;D.ˮO98qBZc*`;z߯큁Z@Qn+-xNH#Z?{~ "ᘤGpDHB*uQ+vyjRpo=rkH~O 2d"R71p}g⦽ 701 0L;ԇ/>+PGI3 ^1;#bT*2d/qKMsvGu#3uMu^M{ ]+{$r`e 2cZdr9TVYPNw쮤OD܈dG75lE(fJ#k&ãk3ex+ީ}w<2nz2=B>tHh@/)@^u$}ĉP&Suo6̳뫾5)jԃф/x uNb Njyt$,!wb[{z癉TǒGz;S'b v/ý l< a7:f#%Y$gUkh|[Xn}?:6DV؆f[CE?ixh>|в‡ I!!IP_GS^Jz芶k# MἬg`5_ ~`ԭa% c3q|b>e#=^ 09;bBDtAeҖ9)f,65A zؐ:ǍF)rPSV;rcJɁaɃ9R`}ѠC -ڧ% !8тqz7ܶ󆯠iP؆7W ]:|WAVrc-nG5,z aua_r<@_$=ojuᶐgϝ9 ܳ'rH0S8+A3Vzȗ[wYeZg H%pG'E=55ǃLekM!%#:hr\¢'L=S/4.Pm8k 9Wisi%ݢ(e2Jxzz6 D85Xja'{?D\(.9˅މubŧ ['1m/yVPiѫ {ˈx$l%} & S=[C;0?`+V<._WT]ҧ]„X5|^u4b^~˫VU P,4`یEX}T 17ՙ㒼?>4is 2B⃧:UDi6%a6|cUK%AEVXϨ1BPn2'<iC19uky! 9#eW+x.9l`sd.;=z@o%11ʯ9ܥD1E:H'Be|"ػ($K6Ͳ(H="q:q{p^}3T'@&7%$≗}Ɓ1A !yGǔI~QX`BӒMlD/Ȳ1yӉsUD/5ZǍ]x"G7C % *ːq8mB6T|aoLժ|ipŖΉs "ߟXxm}WsRY/&*eStnijz8=;>2&A9+30ǡZzawRXT^ȝ &}%x['| B87؀dYl΀GaAkUteCofɀE  vCĞ# w[+$LMorƨ(yR\~c%~nX0o nV}ȽAR w3f#XDWdt:z `0+R[$Q&,C b9 b/Xi=Q^ae2C0Fo}܏[߼F6]ylo=>fߓ4<oA*ÒOk$T&^ @0ZR>/kM%VPR&u#iR鑇-U#9ϋda |3MIO>=OhB54#j>Kڐ<#^!aȀ'>`W/gΓsFS ] n7%2bLw5ir"̣',H6:TgK.^azvxԊ}X?˼ D~ؙ&=r~*rU+{*79nUG ˸AܰGV/}haA7eHR)@P2fLY+zPAQ$jE߂֚\kcދ)믦uHB$gYq,ڂxq[SЋ8X0 X mFŨT=MDs"s_SSns `,>. la+a)ғlDphT_PlDqLxf6I'-ƚ]/is[o'(.rxpa@'aa$N^plDFnNo6_ުGz3GwCc/Js.9LMFd? ZRѕp6C !a3G&Tw˓|Ec=ߘ9IၣO2zڥpi*ἎH !!TxUb~ ~hhlZ2ʊx n\sI,B*+tp qʔ #Áh%dOpDY:ZckquQlP ` HbiؔL+1rHq !Z-'F#Hbu|sC6mIT^RwNVlBRr a%6nM&U5 L m/pv]ňN'Wc h6#' V`b$ZȨ7<1r4.$?x <(dD4( 5Fg21PVYx-QJ. (d鿯?9 k:Q{ 0ݒld'<99QG4Y;\LHm\>ՙ.8D>\+ߚǨoA򯅄xX (-km#H m$:`9oqy@ 1سĢ؝XY-XVwTO~5Nnk!CY O(@Ay|t9h{  "a]^*Zv't(74S*[66HW-S_aR(Ln!:5;ռ6if-]uRU2bcbu|➿I#PRxD}YWwA$zYW=ZK 4*L90t˜tm+MVYcFy&tdaN6Nok{\WnA%j d@X㬽HN8&'1YTeGVB/Lq [e6Cfb@L4ldM>D d([`k'0_|.4n6é)h*:F}̓H@s*'j:vS}Q3D/O$0MsL"[0DmO!l]Zdo8XHQh^bu=/ˋj8fEXȜwUQ1U2\iͰ'%ߖVܴ w :K*ejfr6qlx2~Ç%ig{_% *au3$V6Y}Q>QQatK RS*lӓJ!1)KLd]k$Gd,a! 'WR2p[l.(;pG7W6aW"6HEaMvό(sa?>'Oi;60(MF$?2[H@n+ dd!zKl+Aw;M&wp'Vab^0#/ )e\ZT!rR*H?J*ʠs"t8d@h`u)ƳBlp*[ylEm[,ܫ{])ٟ }0ƍm=@3I!UǙ(s-J0M6{d{˼7³>o6{={і4 ;rzG|3偽OmUb<}ۮҵzl(["hJV[)<}+}V]>ۡEFUKGoQDL~ɔn[Y ';>^(nߏO{qA߉x0LêCnKǗ5#!)_mjݭab閪#842)R $}W"Y=+pho R@ɤ3VP!kQL73ӱ(^a927uol8m3nOf uDE?!%x /~ӭcڂ#b:cpkvxhQz`VC_^:rMb**5 YaEwyd]8t}ܟfp ؝8w/RYʛ뗾|=i;7dFT茳:m98gbf!gkd` 0Srsw ޭ]2p_gU'+<ޭD5Y4z2LZ`$fu rqaHS£"yfq4`zxe5 sa#Z@6~pW;OaqcQ"5~v2Ay(#%a/L0kf[~C]y#1uA5|^ H>'E+?ȁP@R}K<|J)+ 1s(a4U`44P*bDgSnӜäqk:FbYY3 3]soex(lJ6{>S̍e( f(@X5v7#.EՈD|ECp1Jb /Iŷ]Vd)$ؘ]'T|Ҏ 1A?r!qo 2hXc,tLϒػ5]{t%J8Z;l\jhjP_e8ʥN,>ͽXQ+~Acߔw_R>U `MD4&w`DE eF)VYbDu-MO7 eApA ۵ίn8ň0MVS3`E8s={l*Bj\m8vtMO̳oB<)OJ%6 f쑠 rMu3>^r4/Y f=Pe+#~?:B+E@*q}J5u+Pd<7">U~z,tA{|/\& g{F€%Ȕ0&@33ng%h> -yύ@: B# Dc ,-2 u|*ő+^!&z ܧ7A\ BYNy5z{C5P wM+x=!%evJ[zqlAj'VDbcG1f,7Њ41?'~GћxlORM*^Vdif6 }'FS&^)S@dQwJI3`;G T@2^:qgM^(׊&YUfM+%=@gF V{5[܍ ʐii]\sO`"!,[p]a۪ˣO7bv¤=,E4pzq*J!2 >c#EWmr8_:y⋲!K=۾+Lrq[ V^L'EvhY̘Ys͐0J~ٖ$VԆiM@&͟J 7~sX?Zn(Ԭ7YD#~9FiGS=(pҐ'HZPDH*(K<09S^`7<|)B2/_ J/ `kuq/'!C de{[%Sb4P)X*@ fQK uyfar` 9q.!֞.ͯGߞ[$! Q 冈LXIDV%zi/H?|$o3.N4$ڋ1[KM<=sdL΄֯f^ `#z1XfڐU(u[a f(foE+[S#o4FܤAO7Xşf4( Ǚ2D 5'h#dtWD?1r\,;Rh"7T*ZW"dXKl 5G 763A^%>9π2 , q_Xz7-Ti}>1:' W\q 4[xN)RLˊH<Žr/Ԟ7:q 0Hˆ/"f6%ie"V"컶ux¢e^!k Lu)% }Aoϔ3Bbv7%UXL)Bp)6MZ?*B bzdϏ%:!8pqĵc#h3ԧꉹ/!y"ʎzר*k"w&vgl%{ r:#]N-pu<.fMh0&;yфX3B+BYV f"FOwRWU {-E&w}~Dh!`jqUŰT*H#}F/Y$wj6>0]oEagmřOzaDaHnLr[ 9;S0+lD9[=IP 5sFV%X@7Pk!wZ\] vx6ҽ*9"$ЋO,B#|&bI>jM=֟ [(h۴S~n4,Xމ5|[@g< \1:L/}&S"R>s4/aɺ}/}4OM|r8eUf7Sܷ](KalFV]F Vv|Uavc`kt"h(dҦ=Y((+=F.X}`mn/ n=DJ)LPzZ'w. mߪ[)M۰WYu:̣]עo??YY%cu ww?/^kp{|hQSNdz@?rN ")w]--:3'ͅ&-ׂ+UWy}·n:&&ˈ@T3e=jb#ez6$ZЅ{KG9$`oz}xʠ;C YcAeh,FM}b!Ɔ=Bܫ§3 :Nt>,DU )R׿: 'R$)^}zMSJ|{H!|%4> dg?`F ҬKγѢTars4)wl>0<aߟS92y?cPk$p6*('E¡&Ic#]޹ߎHt@hjY{,!ύV8o֛{]rNLjԛ}d44lx]6BIYx&IpS55P)Q*.&y46͑#$;c=l-+9{har/u$-v=a_Wy쫗ywpSϫoMxVEs:MC2O=jtEmAoQЍ K\tyeu]Ӭ^C4s u6c UY^l"QG՗qCDQ| P}I5:B^1Q0q{B?ym^cmm2z1)jZO>+Ry6?d4C'X #>TBZܩDjD%]`r -1q3wVAߋ?zU˓~ ίoaW[vC|ђR1b=W~%@$@f]sʑݱ%$iYN'-bZjM~$j=xSB3!b4~^Xq/ I $3¥֪@e> V?j:=6Ͼ-~~bD%e٥0#Nʥ"9L7AX>HB\b$ zb?` ᴃG$uJt")T8E(uW{l1Wnӣ ׶`7QJ7!mGΉ*`Le1&?GMR/r5k lT%n!rZYlOo&XJӮv$m *]5`%-t&6$\6xTA7JoGÏzZ)5zl DŽKrA.7?%BDb Zg9 )+#˸[O䂡U[~d4eIR#&M殹DXfߎ~Eszr?*w`X?c/"tY[0^iІp.wP~I"hu>u9o P1{?r%d%doE8J 2gf^hsFE6e @nۨT '݀U aUxӗLJCE~d Vne!P2*\,cʿ]LE;Nr0}q6}.g<9NM m9$Z@% +RwA0WF2]G:(/i׍8cO:}XyKS<"7 .*D0A՛ 5^MT.+b?%#V.?dy.Og{mrpC8Ӡ`vQc,~i$U.!)D4 } u6[YӄWb{t- H!{v.$8-DCPme.JzVC_Ei]oʒ@BpR"|t3y;[kh];W󗙆~WjK =E"Ft܆wbԙ Z0f|/"!"t+ŷ)&4W>7:~Zj,bR.;>L:Ԃh. sqtvޓ^ut;D?sD֌oDL)bWGHep9}*>¶) V ؃_ ~GhA<8̕IKjjUUrZI) N|Go|sb<=̌xX|0w./CZҳݛ6v;܅?'|TZy9Zv!Ed.Xl&,a+\rMи6.*Gls ZDzQʚjx k ,fKb(#& X-7Z/$2<ɟyT?1A`W54-[nyLRˑBE~t[,iJT8]V#:j3jN>'rPPM(Mgtퟶ{ŀpu`NWt%#؀n=h '@*+~v)ږ>c p{dSP e!,݀Ղ fO&΋ QOM~ `) AqRB5w9eb{ /xl8 'C}28Í1~)̽"ԗu!TJw,[Wk6DGRxbA ؕp%u߾.hAi#/0X3'VU {Kػnx"%J}Ӏs~Y4nZaŇ3&Dز]},^9bH[wZ2mct7O+)D$Mc<]zS*i"hxb4^nzVF4IeWcO+L&QT v(l9cx"=QHB~Lp{,W=[{X2wК'bok~W-ZE*-:pz X`xbUH]id ]9 nU+YxI5 e 79.e[e\Cd P/=mguMwEv`Ba ooc+ C}njmiKLP"wKD6YmͦJ8N%>^4Qv>,|gbsU!NBf0IpjMNSyjxAV=޽[[fCIPǪM'}UdD 3&o"HWM%y"|fw`ƜzMlF)oc&BmN˳qVcvMDrj"czJ9ՙYͷ) O"M+"|7oϔ\[GH.`!Ij>t CkYNh%p wr mZ%m /o$ rx[ N)dX;|_7n8(}}\i`LRx0tM %ni)eKZ`/Cv ch jם, #!Si:.,B*TPBߦމxF!* :U\=352{Vxq&̂?!B)!WXPxArY}{Ԗm _TUw.^4Vb+/_$0.lc,OD?~W.VUB{ E̡j+ Ys|NaEMXM!4rqc2 *lT>2 ⩏1ל:ệi5ݡ1C}.Sܠ)os\KK p$$<EP褷 gTb\j A3}:iD$V4HO~E,ۓE'8sqN#o(G7kriӊOut-_Rػ?gd}|1!cE 2Oo'+o>SӒy\M]kKd5?Ϣjztt\3d&`|󫚀,pV7{]ڤ+g{0[78#5ALkPKTX5`Na#lz9%R@4ĵmb vXQwGr[9zu{5[pD{U_Pׯ #Cehv9^ۅ?ު|#HC]rkN"`SjjY̒W`{>p*w4Jb9S%뎻vOv'+s<'2wсN!zVʒ:pYdbJ'Lp HD-&T8/k(ܟXDF!hh-rdMNK`n/UY ᪝ʮ$U&,i(I@eQ:4iWq{#/FZeY$`Ѵdbw0rgЍ<ɇ`1&ɡeiyzB>ƫqD܌ 7 T]cw :m r~֨ƏEmM1N?_G*Yu̷ė@WJE]Sƿ9ҭF+_ܮlausb N|ht]q@t4BzWDu5F >p֊h9ۄ g\*lXA- 4RRh|>)5NьqQW8ce:dPUE ͂{+>Skk}!'l(7e c;c2p,̙!me>4UN?Mji 6ؖw y(N5+Vopc +hQCo݇Jpz\''ss4-@!D#d.au)Y֐WC3e YMy_cOZ!CƁO0%zDwv%൘תQj $P;] v:jܚOB+s U KZ[k6n0Ȩ?D ◆cyS"h܏?INaX(GlaX5r%m#|l<ձ "Qجq̑oYoId.W6!TJSc_SEA `nQ))Ot^wWhymX#7G܊3Qwfq_e+υ5بT ej6bQӵ94^&Xς4BY8dJɢ+[wt̂ܤ 3_y~ 4p( b#Eb?!'Z{iusHqzUPA4Ar%WR$i?LP nmGiGRv8hԟ M߽M^ ~t{]3 9%Zagq;sWJ^Q`(MO@;/ΎA#!{WxʿDr.{B7EY'&FamO h` Y"@ +{b2=Tn<(7I?F{vNynhPLX>Q?{ExX'Yr+0-ɩS#aޥ׶43Đ]/7v)FO~>!LV )~mrs{K9 T\J_5j4Żw63־^;LFXj1^2ٷIܙҐދUvC #Jur.TtD06IHt:cɯfԃZ;^^V4QLAXz\,RƋq].2:i@!bJ j ^~|N4('鯺~S0,1k!Lם5 /w瞄@:f yY$ՅX&گOmݴs/)>w w#MKǹ>DUf7);KvF$pzÒ`EktoTv׌Ynl@ V x= Qv$Y ǫNiY+λ`U12d`=_N姐5u Ea@6 /JGUkXYD ,++ZL.p˷-)C;v! v%\kՏK^0Ʒld|M[v9Tx|VUTY4< 0gZK߶vɛCrSvmK*ޞS \&EؠlKg!2mA!*О-=8BIN];,s:k}B`wQٜvn^Oi?_Oқ#ElOդ,Xk\Z4qL}ZoAh~<t)g𢼭I|gpȱ:J$}BTWr_{ "5.EX>H;@ZŁg6%K(;oHp{'Tm@h7:8,M'rp7+8˕px r Jز|}ؖbg]J/+,0 ,[r bIVM(3hkqq׉d9zIk-nJk3g(֪GFȋә`&/xhC,?dܐf@)7(‡"+B)z~(` +Mxew-dG4_80lHwOv)}+[(8!ҊEo檏\k8JibIsLχF9W;>?U ̓(t ) ň5HHŲ~tL.Bu$?%jWt.ZjpW!Nŏi U]%{.3O9a҆[Ȳ=9֢'CMT%\ƿ[xy[L3_FC(0*}v HM5|cno>x^w9#qwݱ4@Sa`98ЙmUcB!bXwd!m4޾t%J'E]QJS/Ӭ|d) !d}k suSRRP:q<ăSJq=͢47jEۜJS^䠳,FpdÁ:ػq)Xٶ򗠵B|GZ8ʠL2ST^={tX-um7{a;+(MUõ6WZaObƳ r^e#d*7ˡay~GcBŚi݇ɫ, A`Hcҿ+ V[`pnz@N/>sno IAgkbZRZ'Gwb^h`YNIlM(E X䤗XIo!k!(R^FP"ϖf5BL{//+bަ`CCa]ܽ^>r@_gNT;ݯ8Bϗ#Y3#kjcո+T>#$y!%Z31piDQ%De>?k#-;j^V"JNkTjҝc}g_/$C(gBNsjwу #v}Hki㱋ptGt(8+bL kwQ5قy&~M8l]5 Gz kۼM䟽cvgwӕO>>oS&:_{&ޛEH6f=o֞iƇ7YhpR j{KoىCZHwH{Ynف_PXǏ ,"$(Ѻ Ջ:ĎsNJ(bt,9;,M3L8#{.:֎*R8y_2i=aWC5NIz~db;- qA4R N-݂lO榓7A%MCL+[خ&?gL$1r FCϵQAȬ%G9{%v&x~|/ޯnjQ^\G܌T_,0.8oa豯F%#[6`# FWChkvJyz`$=|7jj=z|wT'h)EI 5W%Hxx^+E"㊌0>vb%m*V+}LRR2Zw5 DXp1m264SKtm m bҙ bW`A[l ^IHԋs͕џto gBN~T`;Yǜ(SUxJcR, Z ÎyCSZur47tIpYvfX'JS)y^q]m YPNC3O6tZ MȌR)ڮ2RLS\bkEJ(QwpɂܑH+-D ͍J0 'GP†TjLyxC߰u0_OYD$NguZTi|SuHKBmI욑wj5GP,=.byU k)NZ)+d,, yNU7keHbZ֐0^Z+/J:YQ/5m:#e:q&ض YxVΫ=m, % opV3D@D(Sem>2:ǷIW& dK6%X;qQű*}o{S?&"5Do5ͅwd^6<0Tgam͎݇UVA V$ g=˰I96*U8{!d5x39,#bzV\%pap=cF:4:I꼖f:#ۥid7!WV*(n89®~ոMH0YnfgX.|[+_pO@ ̩U@*LLРӢU4`p4 l$yc S^ֿԥߡwUvh[#/>xc$`Te7ri>pܛ$ZMN7&+Yvn׹e0( &_kX1IpVF+7u% Q\"?ᑴo0̿L#kHj]ux](dA Yl33 )0;k߉6ԋl>nr1"q?Ɯ ,h97JO?k? C15Q?w컡jx0[Y;jXlSCaA#3uPuMfq F9Y") ,rgZ[=F!i;Ԟ藬.j{!1uCXJ z+r=Q+Vkod\A,bS.Om1JM 3DS }*MBO5+|x׷ Z 8;W,SÚHH]Ԇa%llʁ z;? r|uM)΄8i_C_}.!7A$DlcrH:gL$իܽ) $RJ\U5s9qQp{<[x ǡ?=.@CH@6!,cw V(fӿZIcx4M[WQҧ`QkBp |w`=qKUywhËp t=><3)Ӷ L LPzgC02Tڮ%4?Z(SU#U|@()D @@u|G8(C9G8| 3OA:w0m> }>oz5Žfm::7Zxn,='gIe9jBgvѣ|%1 VsMq6t {tRH67;Lrzs u_Ep0U_?d,ΝeW) V9"pwB,r+9W_wze}*pHvwΞL9t5*\a4qOrTܘYO΄ ՆΉ⦼Cry-Wk!j J]v5>ψN5S5lI▞Qlcy:Z+7/~fMޙ1뭫y$/3b&i{2FϺ>imc`R_6?j$iF`9ΊkGߩ\bLE%M,"[yfmDvz4ϻ[> j}s5wal:aX#IZ/yF51V7m"BQL|O[]|~OmN$ U*z^Ƕd>^?q;]=wlNת2B9 |]#bhɉmWyÎڳ%׭),!5u܄%K*'%iq9P?}8wzKg"ExP&KΨ`ŚJx|6~Q41s6gG"[hzg5-kqW⋏o*39 \S{]j|h=9)[Anˢ-+gZ1Gq h6)e<)U >c"䰺BD*DC'QݡCĨźOZ(N5WBs#4<C{.;76wYNSdzg):fhv̅>n: [aK;53"xA^jj*S$|_-!TcDot{>s(cgCq {sgto7dŤc,~q_p=)z@vɻY&q@a5sА$A y&+[1wO5YAń)\#lCVKjj!Ap>."C Pm p=q^e΃J0];x;;=WQ,?rw0,O #c@uÆ/oP&TnDZy @c5k†[BTRTõOǘ`r WNob篱KtPKE!JƙՀzZdKbzۮ97B\>$&!'R3\;`R`I{l4J{ z+IhlRJ@=r+oKkrs>1+l_aYe,`R;`a@{|ns|XÙyc͟;?j!L Oևa(dy;)\x$!cdJunC`VvU!D>kaA u͕BEf SoT'Q* Ms< $.O`{Nm-XS#ϝe_GUɩgh2 ( Em5LJ5:c4+}J>=w-B,^%ʠd?H5B~]AT-%dΡ$Ü>*F՟u%٥d5"&ՉPgʷ}(#CV/{JU*HXr[ 6|۞`Z}Mkin|='γ/â4 (@)("O$uiM'w] fZni˜5qh/4p,Fw,o׃~[~fdktP\9ܿh9ҍh}{f<=d{4ijh2!Kt? Phb+Tl;grBhF^n^=TZ֪YŇ+8tnKvwGT!ƴO)M6}Hy;=}:su.!1ZQM̨,[+|~RH/%QTWl̳pO)d̷GKmߏ+ +8_R-*PJJ#7O5LߐyiLf9u|m ,0hm&Q&FF3kK> p/fr/q4jjݒՃMxS)V%(2-^ |Q/x\rh=ysy]/{ B3ӛ%6Ga7֩`فz'Li,D7"}z+^7Dr V$Tb%Q@XS2#k4`;jP},ñ + U鬌0Sl8k]CYR8PN1[pT֔.k?..2e 2OIWmNFպy'UP!$Vy.C[J!{#B72OFI[Ɏ xA-|ST", f"bJΌQ s^Zfhj%lQ.a9`ZNM5NìԢ o\M4U`j$d/y%,TKwڒT^4ڊq';x̟$Ќ|Kuc꯷Imit0^tYKf%D TgM iCo DxJ4gkp-Lw3ڭ?M (M:ϱ$‚$B&zISaZutp9ߴm)_}ӾAJ3T(+hbtz|/Pu'> h)Rc0iXlG?}^/m,@*̍eOu%h[xt56ܶtq`dF1&䡆 faKUAE;HwcȂ92/UŪxPa)J\e̬Oem) -;Q mJ7H`kW80%q0VsS^YIw.RW˗݊b5(AzYSxNi&-g?Lb:в\85ӲXK$./bBz҇X:AS_|A&5ueMf|냷?DYKIXäda56{O2,[ÁFSua%a*uI6~dOhm` '3^7ߦ*j̅'p[WU.E={V齲8cRzIW2+}t$E6 ^jg&^@myo*~g/Z ;z"5q6뻽cgDw6vZ TZMu?5(-tg n\^t_"1,Xhվ" ~G^1!득ub).zKqiy'^gc$ c!=\u|LG[FK*3R?JyE4[8Ouq~6hVm$=f{ IDN0#0r{g u#h,\dK5 'f둪"`j ŴY@!;G^wdC񫙂zk`ȑNW?,i Mhs_x^D"yp$N]_k vט볂c:N:U}$^A\G dEn+?{ c[q/;܃ةz3:?e%d6BN?4jUĆPf{_j1fj0EWpd.u$O |BXp4Ȫ!ǜɛMFAmI"蝝V>u{@ ʛN6[q მXx#h&3\4I _׻0?]ffoZ84b?{ bY%֬+hWa\kTAuP.Ja_P朗L%!{MW$7\ƮH*zNԈQH( f.V2bk[ìJk:c}w lʪv:>w%d}tLx֤;CG^Od:.fyb.!f 2NNRS^C֛qd.R!8/Ȩg^SSOq5.NC7%DſcJan?Q DT[כ3 IHgQKnt'zzՠQN:rḘ}J>{o3ui4;J{ Coynެ鋗,8o#@r֦g˝߉c'^N(Vvq4|x t"h#YpVX6 'QwH#[Qafb+ Z=51t~YZ)Ob ZvW8"`c.Mc94*U_-]ӢWjx$x In۩!"8p:8c ̕:By7:s4.ߙ[IJ104#w3`ioK iNVGۄ '{?z[to4 }y^ 7[h9-iVc-#qkD5Qj٤Q{;?7a2U4uCCw}Czk*oว0~0u w|P;Nd2uR_Ğݗx#MO|9d$n7pslPA\Ce:&{ރ~&@00ӌ`xPd_a({g-RdmdEgGvm 4>v:$X<Oʼ`o7D) {J.mHzLpf5u\u VFĢQ^ֵJNJ>!;S뗔(G)ɾ*ͷ}^Ÿs"V#PCfSG2L r*r/ы`TB uGƸ ̬w*j~o% ӤϨ,ҤOB,w+!AeW=UK&|%Ľ]?0EQ&EՅ٪?4KsyȉiD򨕗h7Sǟ]~68 ; zFǡ)뤳).9hK K Blf~XP[/Z/^_Hї Wk9HUkCB>I7e{1nr^m_cd;A:NwS.}k1yQP*?UZc3П@ _|Av/et$J^3Ӥk8[]4x<};ˊiu "g(MU wo PzmSXX@9IW^\c2+)/`~<70$w UiC50)>#[JItEh=wa݇"[<|:/`-ٰCz$2pj ^2 zrj4zO L<7y9 pEp(,vi!5I0q#E>w90t~a:̟Zt0㾽[^ďҁN5j~[%NlƉ*l|@HGHv