xen-libs-4.17.0_06-150500.1.10 >  A dd5p9|f7Qi<~[yc_D5hsyAڌ81ѷ;1k+u&y];QBx0]ўu4LXJΆRIZwV bCT>Jr'(VJi$[|gsڭكКx$@sgPyNH27PP<WhwqF~p~.Re!d`QGhd1a345cf3e2ecda27f7c0e2a0fc40d1181cfc576829b8538990c57ea71007755f2baf23e41780b40d6d3066fa5a51f37edcd61d6 dd5p9|zk\7;Gnj4  H%@lF1@#]UD#o< JT:3p!j,+>z`Ǥ 3^aA Q/}==>x!9zF {4 gʳs2q;UFޫ|ѫ37LtrKu)Jvb"]Ht%Fs8ӱƻ;ftYlMW{ԍ[RH#TS/S8u=%/EL\ĠqX,(>p@?d  ! ?' =K{-@- - - -  U-  - - a-Bd-17p77(-849$(:A>f@fFg Gg -Hg-Ih-Xh1Yi|1\i-]j-^mbn\codoZeo_fobloduox-vp,w|-x}x-y~,zxCxen-libs4.17.0_06150500.1.10Xen Virtualization: LibrariesXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries used to interact with the Xen virtual machine monitor. In addition to this package you need to install xen and xen-tools to use Xen. Authors: -------- Ian Pratt ddGPL-2.0-onlyhttps://www.suse.com/System/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxaarch64 -xxxx AAAAAAAdddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dddd%dd%dd%dd%dd%dd%dd%dd%dd%dd%dd%dd%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.so.1.3libxenctrl.so.4.17.0libxendevicemodel.so.1.4libxenevtchn.so.1.2libxenforeignmemory.so.1.4libxenfsimage.so.4.17.0libxengnttab.so.1.2libxenguest.so.4.17.0libxenhypfs.so.1.0libxenlight.so.4.17.0libxenstat.so.4.17.0libxenstore.so.4.0libxentoolcore.so.1.0libxentoollog.so.1.0libxenvchan.so.4.17.0libxlutil.so.4.17.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.17.0_06-150500.1.10.src.rpmlibxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxencall.so.1(VERS_1.2)(64bit)libxencall.so.1(VERS_1.3)(64bit)libxenctrl.so.4.17()(64bit)libxenctrl.so.4.17(VERS_4.17.0)(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.1)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxendevicemodel.so.1(VERS_1.3)(64bit)libxendevicemodel.so.1(VERS_1.4)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenevtchn.so.1(VERS_1.1)(64bit)libxenevtchn.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1(VERS_1.3)(64bit)libxenforeignmemory.so.1(VERS_1.4)(64bit)libxenfsimage.so.4.17()(64bit)libxenfsimage.so.4.17(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxengnttab.so.1(VERS_1.1)(64bit)libxengnttab.so.1(VERS_1.2)(64bit)libxenguest.so.4.17()(64bit)libxenguest.so.4.17(VERS_4.17.0)(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.17()(64bit)libxenlight.so.4.17(VERS_4.17.0)(64bit)libxenstat.so.4.17()(64bit)libxenstat.so.4.17(VERS_4.17.0)(64bit)libxenstore.so.4()(64bit)libxenstore.so.4(VERS_4.0)(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libxenvchan.so.4.17()(64bit)libxenvchan.so.4.17(VERS_4.17.0)(64bit)libxlutil.so.4.17()(64bit)libxlutil.so.4.17(VERS_4.17.0)(64bit)xen-libsxen-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxenctrl.so.4.17()(64bit)libxenctrl.so.4.17(VERS_4.17.0)(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenfsimage.so.4.17()(64bit)libxenfsimage.so.4.17(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxenguest.so.4.17()(64bit)libxenguest.so.4.17(VERS_4.17.0)(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.17()(64bit)libxenlight.so.4.17(VERS_4.17.0)(64bit)libxenstore.so.4()(64bit)libxenstore.so.4(VERS_4.0)(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libyajl.so.2()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3d'@c@c@cccccc[@cWcOcOc47@c @c@b)bz@bγbγbb@b@b@b@bzSbV@bP#bJb/.@b b D@a@aaq@aa6a@aaca@@a7T@a,@aGa $@a @`@` @`@`E` @`` @`!@`@`7@`7@``}p`\{@`KW`F`B@`8`4@`.V`#`>` l___@_H@__إ@_إ@_S_$_______@_"__E@_i@_h_d@_cO_[f_X_O@_N7_*@_'@_@_{_^)@^^@^3^ϧ^x^@^@^^^{G^r @^j$@^g@^_@^Nt^K^=Q@^:@^0"@^@^@]]]N@]@]ʞ])]c@]@]@]@]]fl]fl]M`@]B@]/ ],j] ]@]@] ] ] #]]@\\ޢ@\ڭ\\@\@\@\,@\7\\N\@\\+@\\M\M\\\@\}@\k\X)@\J@\I\A\?\=@\9\73\4\$\l@[H[k@[@[^[^[/[@[@[9@[v[W[CN@[<[6@[0@[0@['[!@[5@Z@ZnZ@ZZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Zz@Zz@Zo Zk@ZV@ZS]@ZOhZ:PZ1@Z.s@Z&@ZOZOZ Z Z Z@Z@Z }ZC@ZYYYY|Y@Y{Y*@Y5YA@Y4YYYbYY@Y3Y@YJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"YY;@YYY@YtY.X@XQ@X@XۡXg@X@XƉX@X @X@X@X@X@XXX@XXXwoXs{@XlXWXRXQ4@XEVX43@X.@X*X lX&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@WbWZWZWZWYZ@WV@WEWBW=W;W3W1@W1@W,@W(W(W(W(W(W#LWVbV(@V3VJVxV'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVA@V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUݪ@U@UnU4@UUK@UU@UU>U@Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UU@UUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@THT?@T=@carnold@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comschubi@suse.comjbeulich@suse.comjbeulich@suse.comdmueller@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comguillaume.gardet@opensuse.orgcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comdimstar@opensuse.orgcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.commcepl@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.demliska@suse.czohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjengelh@inai.deguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbwiedemann@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.debwiedemann@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comtrenn@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.dejfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.derbrown@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comjfehlig@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.commlatimer@suse.comcarnold@suse.comcyliu@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.derguenther@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comrguenther@suse.comcarnold@suse.commeissner@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.com- bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus log-dirty mode use-after-free (XSA-427) xsa427.patch - bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM pinned cache attributes mis-handling (XSA-428) xsa428-1.patch xsa428-2.patch - bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative vulnerability in 32bit SYSCALL path (XSA-429) xsa429.patch- bsc#1208286 - VUL-0: CVE-2022-27672: xen: Cross-Thread Return Address Predictions (XSA-426) 63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch- bsc#1205792 - Partner-L3: launch-xenstore error messages show in SLES15 SP4 xen kernel. 63e4da00-dont-log-errors-when-trying-to-load-PVH-xenstore-stubdom.patch- bsc#1026236 - tidy/modernize patch xen.bug1026236.suse_vtsc_tolerance.patch- Upstream bug fixes (bsc#1027519) 63c05478-VMX-calculate-model-specific-LBRs-once.patch 63c05478-VMX-support-CPUs-without-model-specific-LBR.patch - bsc#1207544 - VUL-0: CVE-2022-42330: xen: Guests can cause Xenstore crash via soft reset (XSA-425) xsa425.patch -> 63d24e91-tools-xenstore-revert-simplify-loop-handling.patch- bsc#1207544 - VUL-0: CVE-2022-42330: xen: Guests can cause Xenstore crash via soft reset (XSA-425) xsa425.patch- Upstream bug fixes (bsc#1027519) 63a03e28-x86-high-freq-TSC-overflow.patch- Update to Xen 4.17.0 FCS release (jsc#PED-1858) xen-4.17.0-testing-src.tar.bz2 * On x86 "vga=current" can now be used together with GrUB2's gfxpayload setting. Note that this requires use of "multiboot2" (and "module2") as the GrUB commands loading Xen. * The "gnttab" option now has a new command line sub-option for disabling the GNTTABOP_transfer functionality. * The x86 MCE command line option info is now updated. * Out-of-tree builds for the hypervisor now supported. * __ro_after_init support, for marking data as immutable after boot. * The project has officially adopted 4 directives and 24 rules of MISRA-C, added MISRA-C checker build integration, and defined how to document deviations. * IOMMU superpage support on x86, affecting PV guests as well as HVM/PVH ones when they don't share page tables with the CPU (HAP / EPT / NPT). * Support for VIRT_SSBD and MSR_SPEC_CTRL for HVM guests on AMD. * Improved TSC, CPU, and APIC clock frequency calibration on x86. * Support for Xen using x86 Control Flow Enforcement technology for its own protection. Both Shadow Stacks (ROP protection) and Indirect Branch Tracking (COP/JOP protection). * Add mwait-idle support for SPR and ADL on x86. * Extend security support for hosts to 12 TiB of memory on x86. * Add command line option to set cpuid parameters for dom0 at boot time on x86. * Improved static configuration options on Arm. * cpupools can be specified at boot using device tree on Arm. * It is possible to use PV drivers with dom0less guests, allowing statically booted dom0less guests with PV devices. * On Arm, p2m structures are now allocated out of a pool of memory set aside at domain creation. * Improved mitigations against Spectre-BHB on Arm. * Support VirtIO-MMIO devices device-tree binding creation in toolstack on Arm. * Allow setting the number of CPUs to activate at runtime from command line option on Arm. * Grant-table support on Arm was improved and hardened by implementing "simplified M2P-like approach for the xenheap pages" * Add Renesas R-Car Gen4 IPMMU-VMSA support on Arm. * Add i.MX lpuart and i.MX8QM support on Arm. * Improved toolstack build system. * Add Xue - console over USB 3 Debug Capability. * gitlab-ci automation: Fixes and improvements together with new tests. * dropped support for the (x86-only) "vesa-mtrr" and "vesa-remap" command line options - Drop patches contained in new tarball or invalid 62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch 6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch 631b5ba6-gnttab-acquire-resource-vaddrs.patch 63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch 63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch 63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch 63455fe4-x86-HAP-monitor-table-error-handling.patch 63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch 6345601d-x86-tolerate-shadow_prealloc-failure.patch 6345603a-x86-P2M-refuse-new-alloc-for-dying.patch 63456057-x86-P2M-truly-free-paging-pool-for-dying.patch 63456075-x86-P2M-free-paging-pool-preemptively.patch 63456090-x86-p2m_teardown-preemption.patch 63456175-libxl-per-arch-extra-default-paging-memory.patch 63456177-Arm-construct-P2M-pool-for-guests.patch 6345617a-Arm-XEN_DOMCTL_shadow_op.patch 6345617c-Arm-take-P2M-pages-P2M-pool.patch 634561aa-gnttab-locking-on-transitive-copy-error-path.patch 634561f1-x86emul-respect-NSCB.patch 6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch 6351095c-Arm-rework-p2m_init.patch 6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch 635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch 635665fb-sched-fix-restore_vcpu_affinity.patch 63569723-x86-shadow-replace-bogus-assertions.patch 61dd5f64-limit-support-statement-for-Linux-and-Windows-frontends.patch xsa326-01.patch xsa326-02.patch xsa326-03.patch xsa326-04.patch xsa326-05.patch xsa326-06.patch xsa326-07.patch xsa326-08.patch xsa326-09.patch xsa326-10.patch xsa326-11.patch xsa326-12.patch xsa326-13.patch xsa326-14.patch xsa326-15.patch xsa326-16.patch xsa412.patch xsa414.patch xsa415.patch xsa416.patch xsa417.patch xsa418-01.patch xsa418-02.patch xsa418-03.patch xsa418-04.patch xsa418-05.patch xsa418-06.patch xsa418-07.patch xsa419-01.patch xsa419-02.patch xsa419-03.patch xsa421-01.patch xsa421-02.patch- bsc#1193923 - VUL-1: xen: Frontends vulnerable to backends (XSA-376) 61dd5f64-limit-support-statement-for-Linux-and-Windows-frontends.patch- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may take excessively long (XSA-410) 63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch 63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch 63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch 63455fe4-x86-HAP-monitor-table-error-handling.patch 63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch 6345601d-x86-tolerate-shadow_prealloc-failure.patch 6345603a-x86-P2M-refuse-new-alloc-for-dying.patch 63456057-x86-P2M-truly-free-paging-pool-for-dying.patch 63456075-x86-P2M-free-paging-pool-preemptively.patch 63456090-x86-p2m_teardown-preemption.patch - bcs#1203804 - VUL-0: CVE-2022-33747: xen: unbounded memory consumption for 2nd-level page tables on ARM systems (XSA-409) 63456175-libxl-per-arch-extra-default-paging-memory.patch 63456177-Arm-construct-P2M-pool-for-guests.patch 6345617a-Arm-XEN_DOMCTL_shadow_op.patch 6345617c-Arm-take-P2M-pages-P2M-pool.patch - bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in transitive grant copy handling (XSA-411) 634561aa-gnttab-locking-on-transitive-copy-error-path.patch - Upstream bug fixes (bsc#1027519) 6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch 631b5ba6-gnttab-acquire-resource-vaddrs.patch 634561f1-x86emul-respect-NSCB.patch 6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch 6351095c-Arm-rework-p2m_init.patch 6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch 635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch 635665fb-sched-fix-restore_vcpu_affinity.patch 63569723-x86-shadow-replace-bogus-assertions.patch - Drop patches replaced by upstream versions: xsa410-01.patch xsa410-02.patch xsa410-03.patch xsa410-04.patch xsa410-05.patch xsa410-06.patch xsa410-07.patch xsa410-08.patch xsa410-09.patch xsa410-10.patch xsa411.patch- bsc#1204482 - VUL-0: CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (XSA-326) xsa326-01.patch xsa326-02.patch xsa326-03.patch xsa326-04.patch xsa326-05.patch xsa326-06.patch xsa326-07.patch xsa326-08.patch xsa326-09.patch xsa326-10.patch xsa326-11.patch xsa326-12.patch xsa326-13.patch xsa326-14.patch xsa326-15.patch xsa326-16.patch - bsc#1204485 - VUL-0: CVE-2022-42309: xen: Xenstore: Guests can crash xenstored (XSA-414) xsa414.patch - bsc#1204487 - VUL-0: CVE-2022-42310: xen: Xenstore: Guests can create orphaned Xenstore nodes (XSA-415) xsa415.patch - bsc#1204488 - VUL-0: CVE-2022-42319: xen: Xenstore: Guests can cause Xenstore to not free temporary memory (XSA-416) xsa416.patch - bsc#1204489 - VUL-0: CVE-2022-42320: xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains (XSA-417) xsa417.patch - bsc#1204490 - VUL-0: CVE-2022-42321: xen: Xenstore: Guests can crash xenstored via exhausting the stack (XSA-418) xsa418-01.patch xsa418-02.patch xsa418-03.patch xsa418-04.patch xsa418-05.patch xsa418-06.patch xsa418-07.patch - bsc#1204494 - VUL-0: CVE-2022-42322,CVE-2022-42323: xen: Xenstore: cooperating guests can create arbitrary numbers of nodes (XSA-419) xsa419-01.patch xsa419-02.patch xsa419-03.patch - bsc#1204496 - VUL-0: CVE-2022-42325,CVE-2022-42326: xen: Xenstore: Guests can create arbitray number of nodes via transactions (XSA-421) xsa421-01.patch xsa421-02.patch- bsc#1204483 - VUL-0: CVE-2022-42327: xen: x86: unintended memory sharing between guests (XSA-412) xsa412.patch- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may take excessively long (XSA-410) xsa410-01.patch xsa410-02.patch xsa410-03.patch xsa410-04.patch xsa410-05.patch xsa410-06.patch xsa410-07.patch xsa410-08.patch xsa410-09.patch xsa410-10.patch - bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in transitive grant copy handling (XSA-411) xsa411.patch- bsc#1201994 - Xen DomU unable to emulate audio device 62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch- Things are compiling fine now with gcc12. Drop gcc12-fixes.patch- Update to Xen 4.16.2 bug fix release (bsc#1027519) xen-4.16.2-testing-src.tar.bz2 * No upstream changelog found in sources or webpage - Drop patches contained in new tarball 625fca42-VT-d-reserved-CAP-ND.patch 626f7ee8-x86-MSR-handle-P5-MC-reads.patch 627549d6-IO-shutdown-race.patch 62a1e594-x86-clean-up-_get_page_type.patch 62a1e5b0-x86-ABAC-race-in-_get_page_type.patch 62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch 62a1e5f0-x86-dont-change-cacheability-of-directmap.patch 62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch 62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch 62a1e649-x86-track-and-flush-non-coherent.patch 62a99614-IOMMU-x86-gcc12.patch 62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch 62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch 62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch 62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch 62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch 62c56cc0-libxc-fix-compilation-error-with-gcc13.patch 62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch 62cc31ee-cmdline-extend-parse_boolean.patch 62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch 62cd91d0-x86-spec-ctrl-rework-context-switching.patch 62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch 62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch 62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch 62cd91d5-x86-cpuid-BTC_NO-enum.patch 62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch 62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch xsa408.patch- bsc#1167608, bsc#1201631 - fix built-in default of max_event_channels A previous change to the built-in default had a logic error, effectively restoring the upstream limit of 1023 channels per domU. Fix the logic to calculate the default based on the number of vcpus. adjust libxl.max_event_channels.patch- Added --disable-pvshim when running configure in xen.spec. We have never shipped the shim and don't need to build it.- bsc#1199965 - VUL-0: CVE-2022-26362: xen: Race condition in typeref acquisition 62a1e594-x86-clean-up-_get_page_type.patch 62a1e5b0-x86-ABAC-race-in-_get_page_type.patch - bsc#1199966 - VUL-0: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings 62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch 62a1e5f0-x86-dont-change-cacheability-of-directmap.patch 62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch 62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch 62a1e649-x86-track-and-flush-non-coherent.patch - bsc#1200549 VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166: xen: x86: MMIO Stale Data vulnerabilities (XSA-404) 62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch 62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch 62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch - bsc#1201469 - VUL-0: CVE-2022-23816,CVE-2022-23825,CVE-2022-29900: xen: retbleed - arbitrary speculative code execution with return instructions (XSA-407) 62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch 62cc31ee-cmdline-extend-parse_boolean.patch 62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch 62cd91d0-x86-spec-ctrl-rework-context-switching.patch 62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch 62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch 62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch 62cd91d5-x86-cpuid-BTC_NO-enum.patch 62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch 62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch - Upstream bug fixes (bsc#1027519) 62a99614-IOMMU-x86-gcc12.patch 62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch 62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch - Drop patches replaced by upstream versions xsa401-1.patch xsa401-2.patch xsa402-1.patch xsa402-2.patch xsa402-3.patch xsa402-4.patch xsa402-5.patch- bsc#1201394 - VUL-0: CVE-2022-33745: xen: insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) xsa408.patch - Fix gcc13 compilation error 62c56cc0-libxc-fix-compilation-error-with-gcc13.patch- Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d.- bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings fix xsa402-5.patch- Upstream bug fixes (bsc#1027519) 625fca42-VT-d-reserved-CAP-ND.patch 626f7ee8-x86-MSR-handle-P5-MC-reads.patch 627549d6-IO-shutdown-race.patch - bsc#1199965 - VUL-0: EMBARGOED: CVE-2022-26362: xen: Race condition in typeref acquisition xsa401-1.patch xsa401-2.patch - bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings xsa402-1.patch xsa402-2.patch xsa402-3.patch xsa402-4.patch xsa402-5.patch- fix python3 >= 3.10 version detection- Update to Xen 4.16.1 bug fix release (bsc#1027519) xen-4.16.1-testing-src.tar.bz2 - Drop patches contained in new tarball 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch 61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch 61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch 61e0296a-x86-time-calibration-relative-counts.patch 61e029c8-x86-time-TSC-freq-calibration-accuracy.patch 61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch 61e98e88-x86-introduce-get-set-reg-infra.patch 61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch 61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch 61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch 61eaaa23-x86-get-set-reg-infra-build.patch 61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch 61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch 61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch 6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch xsa397.patch xsa399.patch xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch xsa400-12.patch- bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch- bsc#1197423 - VUL-0: CVE-2022-26356: xen: Racy interactions between dirty vram tracking and paging log dirty hypercalls (XSA-397) xsa397.patch - bsc#1197425 - VUL-0: CVE-2022-26357: xen: race in VT-d domain ID cleanup (XSA-399) xsa399.patch - bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch xsa400-12.patch - Additional upstream bug fixes for XSA-400 (bsc#1027519) 61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch 61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch 6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch- bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401: xen: BHB speculation issues (XSA-398) 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch- bsc#1196545 - GCC 12: xen package fails gcc12-fixes.patch- Upstream bug fixes (bsc#1027519) 61e0296a-x86-time-calibration-relative-counts.patch 61e029c8-x86-time-TSC-freq-calibration-accuracy.patch 61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch 61e98e88-x86-introduce-get-set-reg-infra.patch 61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch 61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch 61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch 61eaaa23-x86-get-set-reg-infra-build.patch 61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch 61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch 61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch - Drop patches replaced by the above: xsa393.patch xsa394.patch xsa395.patch libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393) xsa393.patch - bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS Xen while unmapping a grant (XSA-394) xsa394.patch - bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of passed-through device IRQs (XSA-395) xsa395.patch- bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1193307 - pci backend does not exist when attach a vf to a pv guest libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch Drop libxl-PCI-defer-backend-wait.patch- bsc#1193447 - Slow execution of hvmloader+ovmf when VM contains an sriov device 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch - Upstream bug fixes (bsc#1027519) 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch- Collect active VM config files in the supportconfig plugin xen-supportconfig- Now that the ovmf package has been updated, reset the configure script to use ovmf-x86_64-xen-4m.bin from ovmf-x86_64-ms.bin References bsc#1194105, bsc#1193274 xen.spec- bsc#1193307 - pci backend does not exist when attach a vf to a pv guest libxl-PCI-defer-backend-wait.patch- Update to Xen 4.16.0 FCS release xen-4.16.0-testing-src.tar.bz2 * Miscellaneous fixes to the TPM manager software in preparation for TPM 2.0 support. * Increased reliance on the PV shim as 32-bit PV guests will only be supported in shim mode going forward. This change reduces the attack surface in the hypervisor. * Increased hardware support by allowing Xen to boot on Intel devices that lack a Programmable Interval Timer. * Cleanup of legacy components by no longer building QEMU Traditional or PV-Grub by default. Note both projects have upstream Xen support merged now, so it is no longer recommended to use the Xen specific forks. * Initial support for guest virtualized Performance Monitor Counters on Arm. * Improved support for dom0less mode by allowing the usage on Arm 64bit hardware with EFI firmware. * Improved support for Arm 64-bit heterogeneous systems by leveling the CPU features across all to improve big.LITTLE support. - bsc#1193274 - [Build67.2][Xen][uefi] xen fullvirt uefi guest can not be created with default 'type=plash' in virt-manager xen.spec- Update to Xen 4.16.0 RC4 release (jsc#SLE-18467) xen-4.16.0-testing-src.tar.bz2 * Xen can now export Intel Processor Trace (IPT) data from guests to tools in dom0. * Xen now supports Viridian enlightenments for guests with more than 64 vcpus. * Xenstored and oxenstored both now support LiveUpdate (tech preview). * Unified boot images * Switched x86 MSR accesses to deny by default policy. * Named PCI devices for xl/libxl and improved documentation for xl PCI configuration format. * Support for zstd-compressed dom0 (x86) and domU kernels. * Reduce ACPI verbosity by default. * Add ucode=allow-same option to test late microcode loading path. * Library improvements from NetBSD ports upstreamed. * x86: Allow domains to use AVX-VNNI instructions. * Added XEN_SCRIPT_DIR configuration option to specify location for Xen scripts. * xennet: Documented a way for the backend (or toolstack) to specify MTU to the frontend. * On detecting a host crash, some debug key handlers can automatically triggered to aid in debugging. * Increase the maximum number of guests which can share a single IRQ from 7 to 16, and make this configurable with irq-max-guests. - Drop iPXE sources and patches. iPXE is only used by QEMU traditional which has never shipped with SLE15. ipxe.tar.bz2 ipxe-enable-nics.patch ipxe-no-error-logical-not-parentheses.patch ipxe-use-rpm-opt-flags.patch - Drop building ocaml xenstored in the spec file. There are no plans or need to support this version. - Drop patches contained in new tarball or no longer required 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch 5ffc58c4-ACPI-reduce-verbosity-by-default.patch 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch 608676f2-VT-d-register-based-invalidation-optional.patch 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60bf9e19-Arm-create-dom0less-domUs-earlier.patch 60bf9e1a-Arm-boot-modules-scrubbing.patch 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch 60bfa904-AMD-IOMMU-wait-for-command-slot.patch 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch 61001231-x86-work-around-GNU-ld-2-37-issue.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6126339d-AMD-IOMMU-global-ER-extending.patch 6126344f-AMD-IOMMU-unity-map-handling.patch 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch 6126349a-AMD-IOMMU-rearrange-reassignment.patch 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch 612634c3-x86-p2m-introduce-p2m_is_special.patch 612634dc-x86-p2m-guard-identity-mappings.patch 612634f4-x86-mm-widen-locked-region-in-xatp1.patch 6126350a-gnttab-release-mappings-preemption.patch 6126351f-gnttab-replace-mapkind.patch 6126353d-gnttab-get-status-frames-array-capacity.patch 61263553-Arm-restrict-maxmem-for-dom0less.patch 6128a856-gnttab-radix-tree-node-init.patch init.xen_loop libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch libxc-bitmap-longs.patch libxc.migrate_tracking.patch libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc.sr.superpage.patch libxc-sr-use-xc_is_known_page_type.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl.fix-libacpi-dependency.patch libxl-qemu6-scsi.patch libxl-qemu6-vnc-password.patch libxl.set-migration-constraints-from-cmdline.patch reproducible.patch stubdom-have-iovec.patch x86-cpufreq-report.patch xenstore-launch.patch xenwatchdogd-options.patch xsa384.patch- bsc#1189632 - VUL-0: CVE-2021-28701: xen: Another race in XENMAPSPACE_grant_table handling (XSA-384) xsa384.patch - Upstream bug fixes (bsc#1027519) 61001231-x86-work-around-GNU-ld-2-37-issue.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6128a856-gnttab-radix-tree-node-init.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch (Replaces credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch) 6126339d-AMD-IOMMU-global-ER-extending.patch (Replaces xsa378-1.patch) 6126344f-AMD-IOMMU-unity-map-handling.patch (Replaces xsa378-2.patch) 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch (Replaces xsa378-3.patch) 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch (Replaces xsa378-4.patch) 6126349a-AMD-IOMMU-rearrange-reassignment.patch (Replaces xsa378-5.patch) 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch (Replaces xsa378-6.patch) 612634c3-x86-p2m-introduce-p2m_is_special.patch (Replaces xsa378-7.patch) 612634dc-x86-p2m-guard-identity-mappings.patch (Replaces xsa378-8.patch) 612634f4-x86-mm-widen-locked-region-in-xatp1.patch (Replaces xsa379.patch) 6126350a-gnttab-release-mappings-preemption.patch (Replaces xsa380-1.patch 6126351f-gnttab-replace-mapkind.patch (Replaces xsa380-2.patch) 6126353d-gnttab-get-status-frames-array-capacity.patch (Replaces xsa382.patch) 61263553-Arm-restrict-maxmem-for-dom0less.patch (Replaces xsa383.patch)- bsc#1189882 - refresh libxc.sr.superpage.patch prevent superpage allocation in the LAPIC and ACPI_INFO range- bsc#1189373 - VUL-0: CVE-2021-28694,CVE-2021-28695, CVE-2021-28696: xen: IOMMU page mapping issues on x86 (XSA-378) xsa378-1.patch xsa378-2.patch xsa378-3.patch xsa378-4.patch xsa378-5.patch xsa378-6.patch xsa378-7.patch xsa378-8.patch - bsc#1189376 - VUL-0: CVE-2021-28697: xen: grant table v2 status pages may remain accessible after de-allocation. (XSA-379) xsa379.patch - bsc#1189378 - VUL-0: CVE-2021-28698: xen: long running loops in grant table handling. (XSA-380) xsa380-1.patch xsa380-2.patch - bsc#1189380 - VUL-0: CVE-2021-28699: xen: inadequate grant-v2 status frames array bounds check. (XSA-382) xsa382.patch - bsc#1189381 - VUL-0: CVE-2021-28700: xen: xen/arm: No memory limit for dom0less domUs. (XSA-383) xsa383.patch- bsc#1188050 - L3: Xen guest yval1a80 SLES11SP4 hangs on cluster See also bsc#1179246. credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch- Drop aarch64-maybe-uninitialized.patch as the fix is in tarball.- refresh the migration patches to state v20210713 removed libxc-sr-add-xc_is_known_page_type.patch removed libxc-sr-arrays.patch removed libxc-sr-batch_pfns.patch removed libxc-sr-page_type_has_stream_data.patch removed libxc-sr-use-xc_is_known_page_type.patch removed libxc.migrate_tracking.patch removed libxc.sr.superpage.patch removed libxl.set-migration-constraints-from-cmdline.patch added libxc-sr-383b41974d5543b62f3181d216070fe3691fb130.patch added libxc-sr-5588ebcfca774477cf823949e5703b0ac48818cc.patch added libxc-sr-9e59d9f8ee3808acde9833192211da25f66d8cc2.patch added libxc-sr-LIBXL_HAVE_DOMAIN_SUSPEND_PROPS.patch added libxc-sr-abort_if_busy.patch added libxc-sr-f17a73b3c0264c62dd6b5dae01ed621c051c3038.patch added libxc-sr-max_iters.patch added libxc-sr-min_remaining.patch added libxc-sr-number-of-iterations.patch added libxc-sr-precopy_policy.patch added libxc-sr-restore-hvm-legacy-superpage.patch added libxc-sr-track-migration-time.patch added libxc-sr-xg_sr_bitmap-populated_pfns.patch added libxc-sr-xg_sr_bitmap.patch added libxc-sr-xl-migration-debug.patch- bsc#1176189 - xl monitoring process exits during xl save -p|-c keep the monitoring process running to cleanup the domU during shutdown xl-save-pc.patch- bsc#1179246 - Dom0 hangs when pinning CPUs for dom0 with HVM guest 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch - Upstream bug fixes (bsc#1027519) 60bf9e19-Arm-create-dom0less-domUs-earlier.patch (Replaces xsa372-1.patch) 60bf9e1a-Arm-boot-modules-scrubbing.patch (Replaces xsa372-2.patch) 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch (Replaces xsa373-1.patch) 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch (Replaces xsa373-2.patch) 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch (Replaces xsa373-2.patch) 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch (Replaces xsa375.patch) 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch (Replaces xsa377.patch) 60bfa904-AMD-IOMMU-wait-for-command-slot.patch (Replaces xsa373-4.patch) 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch (Replaces xsa373-5.patch) 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch - Dropped gcc11-fixes.patch- bsc#1183243 - L3: Core cannot be opened when using xl dump-core of VM with PTF 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch- bsc#1180350 - some long deprecated commands were finally removed in qemu6. Adjust libxl to use supported commands. libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl-qemu6-vnc-password.patch libxl-qemu6-scsi.patch- Update logrotate.conf, move global options into per-file sections to prevent globbering of global state (bsc#1187406)- Fix shell macro expansion in xen.spec, so that ExecStart= in xendomains-wait-disks.service is created correctly (bsc#1183877)- bsc#1186428 - VUL-0: CVE-2021-28693: xen: xen/arm: Boot modules are not scrubbed (XSA-372) xsa372-1.patch xsa372-2.patch - bsc#1186429 - VUL-0: CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (XSA-373) xsa373-1.patch xsa373-2.patch xsa373-3.patch xsa373-4.patch xsa373-5.patch - bsc#1186433 - VUL-0: CVE-2021-0089: xen: Speculative Code Store Bypass (XSA-375) xsa375.patch - bsc#1186434 - VUL-0: CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (XSA-377) xsa377.patch - Upstream bug fixes (bsc#1027519) 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch- Upstream bug fix (bsc#1027519) 608676f2-VT-d-register-based-invalidation-optional.patch- Add xen.sysconfig-fillup.patch to make sure xencommons is in a format as expected by fillup. (bsc#1185682) Each comment needs to be followed by an enabled key. Otherwise fillup will remove manually enabled key=value pairs, along with everything that looks like a stale comment, during next pkg update- Refresh xenstore-launch.patch to cover also daemon case- Update to Xen 4.14.2 bug fix release (bsc#1027519) xen-4.14.2-testing-src.tar.bz2 - Drop patches contained in new tarball 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6011bbc7-x86-timer-fix-boot-without-PIT.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch 60787714-x86-HPET-avoid-legacy-replacement-mode.patch- bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 60787714-x86-HPET-avoid-legacy-replacement-mode.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch - Upstream bug fixes (bsc#1027519) 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch (Replaces xsa368.patch) 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch- bsc#1137251 - Restore changes for xen-dom0-modules.service which were silently removed on 2019-10-17- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway. This resulted to over-allocation.- bsc#1167608 - adjust limit for max_event_channels A previous change allowed an unbound number of event channels to make sure even large domUs can start of of the box. This may have a bad side effect in the light of XSA-344. Adjust the built-in limit based on the number of vcpus. In case this is not enough, max_event_channels=/maxEventChannels= has to be used to set the limit as needed for large domUs adjust libxl.max_event_channels.patch- bsc#1183072 - VUL-0: CVE-2021-28687: xen: HVM soft-reset crashes toolstack (XSA-368). Also resolves, bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl bsc#1181989 - openQA job causes libvirtd to dump core when running kdump inside domain xsa368.patch- bsc#1177204 - L3-Question: conring size for XEN HV's with huge memory to small. Inital Xen logs cut 5ffc58c4-ACPI-reduce-verbosity-by-default.patch - Upstream bug fixes (bsc#1027519) 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch - bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch- bsc#1182576 - L3: XEN domU crashed on resume when using the xl unpause command 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch- Start using the %autosetup macro to simplify patch management xen.spec- bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch - Drop gcc10-fixes.patch- Upstream bug fixes (bsc#1027519) 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch (Replaces xsa360.patch) 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch - bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 6011bbc7-x86-timer-fix-boot-without-PIT.patch- bsc#1181254 - VUL-0: xen: IRQ vector leak on x86 (XSA-360) xsa360.patch- bsc#1180794 - bogus qemu binary path used when creating fv guest under xen xen.spec- bsc#1180690 - L3-Question: xen: no needsreboot flag set Add Provides: installhint(reboot-needed) in xen.spec for libzypp- Update libxl.set-migration-constraints-from-cmdline.patch Remove code which handled --max_factor. The total amount of transferred data is no indicator to trigger the final stop+copy. This should have been removed during upgrade to Xen 4.7. Fix off-by-one in --max_iters, it caused one additional copy cycle. Reduce default value of --max_iters from 5 to 2. The workload within domU will continue to produce dirty pages. It is unreasonable to expect any slowdown during migration. Now there is one initial copy of all memory, one instead of four iteration for dirty memory, and a final copy iteration prior move.- Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch- Pass --with-rundir to configure to get rid of /var/run- bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch- boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch- bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch- Fix build error with libxl.fix-libacpi-dependency.patch- Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere.- Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1- bsc#1178591 - VUL-0: CVE-2020-28368: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351 xsa351-1.patch xsa351-2.patch xsa351-3.patch- bsc#1177950 - adjust help for --max_iters, default is 5 libxl.set-migration-constraints-from-cmdline.patch- jsc#SLE-16899 - improve performance of live migration remove allocations and memcpy from hotpaths on sending and receiving side to get more throughput on 10Gbs+ connections libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc-sr-readv_exact.patch libxc-sr-restore-handle_buffered_page_data.patch libxc-sr-restore-handle_incoming_page_data.patch libxc-sr-restore-map_errs.patch libxc-sr-restore-mfns.patch libxc-sr-restore-pfns.patch libxc-sr-restore-populate_pfns-mfns.patch libxc-sr-restore-populate_pfns-pfns.patch libxc-sr-restore-read_record.patch libxc-sr-restore-types.patch libxc-sr-save-errors.patch libxc-sr-save-guest_data.patch libxc-sr-save-iov.patch libxc-sr-save-local_pages.patch libxc-sr-save-mfns.patch libxc-sr-save-rec_pfns.patch libxc-sr-save-show_transfer_rate.patch libxc-sr-save-types.patch libxc-sr-use-xc_is_known_page_type.patch adjust libxc.sr.superpage.patch adjust libxc.migrate_tracking.patch- Upstream bug fixes (bsc#1027519) 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch - Renamed patches 5f560c42-x86-PV-64bit-segbase-consistency.patch Replaces 5f5b6951-x86-PV-64bit-segbase-consistency.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch Replaces 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch Replaces 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch Replaces 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch Replaces 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch Replaces 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch 5f6a00c4-evtchn-relax-port_is_valid.patch Replaces 5f6a062c-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch Replaces 5f6a065c-pv-Avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch Replaces 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch Replaces 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch Replaces 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch Replaces 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch Replaces 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch Replaces 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch Replaces 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch- bsc#1177409 - VUL-0: CVE-2020-27674: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286) xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch - bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345) 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch - bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346) 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch - bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347) 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch- Update libxc.sr.superpage.patch set errno in x86_hvm_alloc_4k (bsc#1177112)- bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) 5f6a062c-evtchn-relax-port_is_valid.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) 5f6a065c-pv-Avoid-double-exception-injection.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - Upstream bug fix (bsc#1027519) 5f5b6951-x86-PV-64bit-segbase-consistency.patch- Fix problems in xen.spec with building on aarch64- Make use of %service_del_postun_without_restart while preserving the old behavior for older distros. - In %post tools, remove unnecessary qemu symlinks.- Fix error in xen-tools %post when linking pvgrub64.bin - Make paths below libexec more explicit - Create symlink also for pvgrub32.bin- Revert previous libexec change for qemu compat wrapper The path is used in existing domU.xml files in the emulator field - Escape some % chars in xen.spec, they have to appear verbatim- Enhance libxc.migrate_tracking.patch Print number of allocated pages on sending side, this is more accurate than p2m_size.- jsc#SLE-15926 - Dev: XEN: drop netware support Dropped the following patches pygrub-netware-xnloader.patch xnloader.py Refreshed pygrub-boot-legacy-sles.patch- Fix build on aarch64 with gcc10 - Package xenhypfs for aarch64- Correct license name * GPL-3.0+ is now GPL-3.0-or-later- Upstream bug fixes (bsc#1027519) 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch- Update to Xen 4.14.0 FCS release xen-4.14.0-testing-src.tar.bz2 * Linux stubdomains (contributed by QUBES OS) * Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix) * Lightweight VM fork for fuzzing / introspection. (contributed by Intel) * Livepatch: buildid and hotpatch stack requirements * CONFIG_PV32 * Hypervisor FS support * Running Xen as a Hyper-V Guest * Domain ID randomization, persistence across save / restore * Golang binding autogeneration * KDD support for Windows 7, 8.x and 10 - Dropped patches contained in new tarball 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch xsa317.patch xsa319.patch xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch xsa328-1.patch xsa328-2.patch- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached ignore-ip-command-script-errors.patch- Enhance libxc.migrate_tracking.patch After transfer of domU memory, the target host has to assemble the backend devices. Track the time prior xc_domain_unpause.- Add libxc.migrate_tracking.patch to track live migrations unconditionally in logfiles, especially in libvirt. This will track how long a domU was suspended during transit.- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect error handling in event channel port allocation xsa317.patch - bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code paths in x86 dirty VRAM tracking xsa319.patch - bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient cache write- back under VT-d xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch - bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic modification of live EPT PTE xsa328-1.patch xsa328-2.patch- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch) 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch) - Upstream bug fixes (bsc#1027519) 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch- Fixes for %_libexecdir changing to /usr/libexec- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) xsa320-1.patch xsa320-2.patch- Update to Xen 4.13.1 bug fix release (bsc#1027519) xen-4.13.1-testing-src.tar.bz2 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch - Drop patches contained in new tarball 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- spec: Remove invocation of autogen.sh - spec: Recommend qemu-ovmf-x86_64 to provide UEFI firmwares- bsc#1170968 - GCC 10: xen build fails on i586 gcc10-fixes.patch- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation handling in GNTTABOP_copy (XSA-318) 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- bsc#1168140 - VUL-0: CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch - bsc#1168142 - VUL-0: CVE-2020-11739: xen: XSA-314 - Missing memory barriers in read-write unlock paths 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch - bsc#1168143 - VUL-0: CVE-2020-11743: xen: XSA-316 - Bad error path in GNTTABOP_map_grant 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch - bsc#1167152 - L3: Xenstored Crashed during VM install Need Core analyzed 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch - Drop for upstream solution (bsc#1165206) 01-xen-credit2-avoid-vcpus-to.patch default-to-credit1-scheduler.patch - Upstream bug fixes (bsc#1027519) 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch- bsc#1167608 - unbound limit for max_event_channels domUs with many vcpus and/or resources fail to start libxl.max_event_channels.patch- bsc#1161480 - Fix xl shutdown for HVM without PV drivers add libxl.libxl__domain_pvcontrol.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 01-xen-credit2-avoid-vcpus-to.patch- bsc#1158414 - GCC 10: xen build fails gcc10-fixes.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 default-to-credit1-scheduler.patch- bsc#1160932 - VUL-0: xen: XSA-312 v1: arm: a CPU may speculate past the ERET instruction 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch - bsc#1164425 - x86: "spec-ctrl=no-xen" should also disable branch hardening 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch - Upstream bug fixes (bsc#1027519) 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch- bsc#1159755 - use fixed qemu-3.1 machine type for HVM This must be done in qemu to preserve PCI layout remove libxl.lock-qemu-machine-for-hvm.patch- jsc#SLE-10183 - script to calculate cpuid= mask add helper script from https://github.com/twizted/xen_maskcalc domUs may be migrated between different cpus from the same vendor if their visible cpuid value has incompatible feature bits masked.- jsc#SLE-10172, bsc#1055731 - handle degraded raid for xendomains add helper script and systemd service from https://github.com/luizluca/xen-tools-xendomains-wait-disk in new sub package xen-tools-xendomains-wait-disk See included README for usage instructions xendomains-wait-disks.LICENSE xendomains-wait-disks.README.md xendomains-wait-disks.sh- bsc#1159755 - use fixed qemu-3.1 machine type for HVM qemu4 introduced incompatible changes in pc-i440fx, which revealed a design bug in 'xenfv'. Live migration from domUs started with qemu versions prior qemu4 can not be received with qemu4+. libxl.lock-qemu-machine-for-hvm.patch- Upstream bug fixes (bsc#1027519) 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- bsc#1159320 - Xen logrotate file needs updated logrotate.conf- Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware- Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch- Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch- Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2- Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call)- Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch- bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch- bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch- Upstream bug fixes (bsc#1027519) 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch - Drop 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Preserve modified files which used to be marked as %config, rename file.rpmsave to file- Update to Xen 4.12.1 bug fix release (bsc#1027519) xen-4.12.1-testing-src.tar.bz2 - Drop patches contained in new tarball 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8f752c-x86-e820-build-with-gcc9.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Refreshed patches libxl.pvscsi.patch- bsc#1143563 - Speculative mitigation facilities report wrong status 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Update xen-dom0-modules.service (bsc#1137251) Map backend module names from pvops and xenlinux kernels to a module alias. This avoids errors from modprobe about unknown modules. Ignore a few xenlinux modules that lack aliases.- Gcc9 warnings seem to be cleared up with upstream fixes. Drop gcc9-ignore-warnings.patch- bsc#1138563 - L3: xenpvnetboot improperly ported to Python 3 fix-xenpvnetboot.patch- Move /etc/modprobe.d/xen_loop.conf to /lib/modprobe.d/xen_loop.conf- Remove /etc/xen/xenapiusers and /etc/pam.d/xen-api- Remove all upstream provided files in /etc/xen They are not required at runtime. The host admin is now responsible if he really needs anything in this subdirectory.- In our effort to make /etc fully admin controlled, move /etc/xen/scripts to libexec/xen/scripts with xen-tools.etc_pollution.patch- Move /etc/bash_completion.d/xl.sh to %{_datadir}/bash-completion/completions- bsc#1138294 - VUL-0: CVE-2019-17349: XSA-295: Unlimited Arm Atomics Operations 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Upstream bug fixes (bsc#1027519) 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch (Replaces xsa297-0a.patch) 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch (Replaces xsa297-0b.patch) 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch (Replaces xsa297-0c.patch) 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch (Replaces xsa297-0d.patch) 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch (Replaces xsa297-1.patch) 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch (Replaces xsa297-2.patch) 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch (Replaces xsa297-3.patch) 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch- Fix some outdated information in the readme README.SUSE- spec: xen-tools: require matching version of xen package bsc#1137471- Remove two stale patches xen.build-compare.man.patch xenpaging.doc.patch- Disable LTO (boo#1133296).- Remove arm32 from ExclusiveArch to fix build- bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4". CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 xsa297-0a.patch xsa297-0b.patch xsa297-0c.patch xsa297-0d.patch xsa297-1.patch xsa297-2.patch xsa297-3.patch - Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch- bsc#1131811 - [XEN] internal error: libxenlight failed to create new domain. This patch is a workaround for a systemd issue. See patch header for additional comments. xenstore-launch.patch- bsc#1125378 - [xen][pygrub] Can not restore sle11sp4 pv guest after upgrading host from sle11sp4 to sle15sp1 pygrub-python3-conversion.patch - Fix "TypeError: virDomainDefineXML() argument 2 must be str or None, not bytes" when converting VMs from using the xm/xend toolstack to the libxl/libvirt toolstack. (bsc#1123378) xen2libvirt.py- bsc#1124560 - Fully virtualized guests crash on boot 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch - bsc#1121391 - GCC 9: xen build fails 5c8f752c-x86-e820-build-with-gcc9.patch - Upstream bug fixes (bsc#1027519) 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch- Install pkgconfig files into libdir instead of datadir- Update to Xen 4.12.0 FCS release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 * HVM/PVH and PV only Hypervisor: The Xen 4.12 release separates the HVM/PVH and PV code paths in Xen and provides KCONFIG options to build a PV only or HVM/PVH only hypervisor. * QEMU Deprivilege (DM_RESTRICT): In Xen 4.12, this feature has been vastly improved. * Argo - Hypervisor-Mediated data eXchange: Argo is a new inter- domain communication mechanism. * Improvements to Virtual Machine Introspection: The VMI subsystem which allows detection of 0-day vulnerabilities has seen many functional and performance improvements. * Credit 2 Scheduler: The Credit2 scheduler is now the Xen Project default scheduler. * PVH Support: Grub2 boot support has been added to Xen and Grub2. * PVH Dom0: PVH Dom0 support has now been upgraded from experimental to tech preview. * The Xen 4.12 upgrade also includes improved IOMMU mapping code, which is designed to significantly improve the startup times of AMD EPYC based systems. * The upgrade also features Automatic Dom0 Sizing which allows the setting of Dom0 memory size as a percentage of host memory (e.g. 10%) or with an offset (e.g. 1G+10%).- bsc#1130485 - Please drop Requires on multipath-tools in xen-tools. Now using Recommends multipath-tools. xen.spec- Update to Xen 4.12.0 RC7 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC6 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1026236 - add Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs if their expected frequency does not match exactly the frequency of the receiving host xen.bug1026236.suse_vtsc_tolerance.patch- Update to Xen 4.12.0 RC5 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- jsc#SLE-3059 - Disable Xen auto-ballooning - Add CONFIG_DOM0_MEM to the spec file for managing dom0 memory. xen.spec - Disable autoballooning in xl.con xl-conf-disable-autoballoon.patch- Update gcc9-ignore-warnings.patch to fix build in SLE12- bsc#1126325 - fix crash in libxl in error path Setup of grant_tables and other variables may fail libxl.prepare-environment-for-domcreate_stream_done.patch- bsc#1127620 - Documentation for the xl configuration file allows for firmware=pvgrub64 but we don't ship pvgrub64. Create a link from grub.xen to pvgrub64 xen.spec- Update to Xen 4.12.0 RC4 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Tarball also contains additional post RC4 security fixes for Xen Security Advisories 287, 288, and 290 through 294.- Update to Xen 4.12.0 RC3 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC2 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1121391 - GCC 9: xen build fails gcc9-ignore-warnings.patch- bsc#1122563 - Virtualization/xen: Bug no Xen on boot, missing /proc/xen, after 4.11 -> 4.12 upgrade on X86_64/efi. Keep xen.efi in /usr/lib64/efi for booting older distros. xen.spec- fate#326960: Package grub2 as noarch. As part of the effort to have a unified bootloader across architectures, modify the xen.spec file to move the Xen efi files to /usr/share/efi/$(uname -m) from /usr/lib64/efi.- Update to Xen 4.12.0 RC1 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Drop 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch 5bdc31d5-VMX-fix-vmx_handle_eoi.patch gcc8-fix-array-warning-on-i586.patch gcc8-fix-format-warning-on-i586.patch gcc8-inlining-failed.patch xen.bug1079730.patch- bsc#1121960 - xen: sync with Factory xen.spec xen.changes- Replace old $RPM_* shell vars. - Run fdupes for all architectures, and not crossing subvolume boundaries.- Do not run %fdupes on aarch64 to avoid the hardlink-across-partition rpmlint error- Require qemu-seabios only on x86* as it is not available on non-x86 systems- Avoid creating dangling symlinks (bsc#1116524) This reverts the revert of tmp_build.patch- Update to Xen 4.11.1 bug fix release (bsc#1027519) xen-4.11.1-testing-src.tar.bz2 - 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch replaces xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch replaces xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch - Drop the following patches contained in the new tarball 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbe-ARM-disable-grant-table-v2.patch 5b72fbbe-oxenstored-eval-order.patch 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch xsa275-1.patch xsa275-2.patch xsa276-1.patch xsa276-2.patch xsa277.patch xsa279.patch xsa280-1.patch xsa280-2.patch- bsc#1116524 - Package xen-tools-4.11.0_09-2.1.x86_64 broken: Missing /bin/domu-xenstore. This was broken because "make package build reproducible" change. (boo#1047218, boo#1062303) This fix reverses the change to this patch. tmp_build.patch- bsc#1115040 - VUL-0: CVE-2018-19961 CVE-2018-19962: xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275) xsa275-1.patch xsa275-2.patch - bsc#1115043 - VUL-0: CVE-2018-19963: xen: resource accounting issues in x86 IOREQ server handling (XSA-276) xsa276-1.patch xsa276-2.patch - bsc#1115044 - VUL-0: CVE-2018-19964: xen: x86: incorrect error handling for guest p2m page removals (XSA-277) xsa277.patch - bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch - bsc#1115045 - VUL-0: xen: CVE-2018-19965: x86: DoS from attempting to use INVPCID with a non-canonical addresses (XSA-279) xsa279.patch - bsc#1115047 - VUL-0: CVE-2018-19966: xen: Fix for XSA-240 conflicts with shadow paging (XSA-280) xsa280-1.patch xsa280-2.patch - bsc#1114988 - VUL-0: CVE-2018-19967: xen: guest use of HLE constructs may lock up host (XSA-282) 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch - bsc#1108940 - L3: XEN SLE12-SP1 domU hang on SLE12-SP3 HV 5bdc31d5-VMX-fix-vmx_handle_eoi.patch - Upstream bug fixes (bsc#1027519) 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch- bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch- Use SMBIOS_REL_DATE instead of SMBIOS_DATE for reproducible binaries- make package build reproducible (boo#1047218, boo#1062303) * Set SMBIOS_REL_DATE * Update tmp_build.patch to use SHA instead of random build-id * Add reproducible.patch to use --no-insert-timestamp- Building with ncurses 6.1 will fail without xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - Building libxl acpi support on aarch64 with gcc 8.2 will fail without xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch- bsc#1106263 - L3: The affinity reporting via 'xl vcpu-list' is apparently broken 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch- bsc#1094508 - L3: Kernel oops in fs/dcache.c called by d_materialise_unique() 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch - bsc#1103279 - (CVE-2018-15470) VUL-0: CVE-2018-15470: xen: oxenstored does not apply quota-maxentity (XSA-272) 5b72fbbe-oxenstored-eval-order.patch - bsc#1103275 - (CVE-2018-15469) VUL-0: CVE-2018-15469: xen: Use of v2 grant tables may cause crash on ARM (XSA-268) 5b72fbbe-ARM-disable-grant-table-v2.patch - Upstream patches from Jan (bsc#1027519) 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch - Drop 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- bsc#1078292 - rpmbuild -ba SPECS/xen.spec with xen-4.9.1 failed xen.spec- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM (XSA-273) 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch - bsc#1103276 - VUL-0: CVE-2018-15468: xen: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (XSA-269) 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch - Upstream prereq patches for XSA-273 and other upstream fixes (bsc#1027519) 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- Upstream patches from Jan (bsc#1027519) 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch gcc8-fix-format-warning-on-i586.patch gcc8-fix-array-warning-on-i586.patch - Drop xen.fuzz-_FORTIFY_SOURCE.patch gcc8-fix-warning-on-i586.patch- Update to Xen 4.11.0 FCS (fate#325202, fate#325123) xen-4.11.0-testing-src.tar.bz2 disable-building-pv-shim.patch - Dropped patches 5a33a12f-domctl-improve-locking-during-domain-destruction.patch 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a9985bd-x86-invpcid-support.patch 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch 5af1daa9-3-x86-traps-use-IST-for-DB.patch 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch 5af97999-viridian-cpuid-leaf-40000003.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch 5b348874-x86-refine-checks-in-DB-handler.patch 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen_fix_build_with_acpica_20180427_and_new_packages.patch- Submit upstream patch libacpi: fixes for iasl >= 20180427 git commit 858dbaaeda33b05c1ac80aea0ba9a03924e09005 xen_fix_build_with_acpica_20180427_and_new_packages.patch This is needed for acpica package to get updated in our build service- Upstream patches from Jan (bsc#1027519) 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch) 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch) 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch) 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch) 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch) 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch) 5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch) 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-<>.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch- bsc#1098403 - fix regression introduced by changes for bsc#1079730 a PV domU without qcow2 and/or vfb has no qemu attached. Ignore QMP errors for PV domUs to handle PV domUs with and without an attached qemu-xen. xen.bug1079730.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1092543 - GCC 8: xen build fails gcc8-fix-warning-on-i586.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" (XSA-263) 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- Always call qemus xen-save-devices-state in suspend/resume to fix migration with qcow2 images (bsc#1079730) libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen.bug1079730.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- bsc#1092543 - GCC 8: xen build fails 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch gcc8-inlining-failed.patch- Update to Xen 4.10.1 bug fix release (bsc#1027519) xen-4.10.1-testing-src.tar.bz2 disable-building-pv-shim.patch - Drop the following patches contained in the new tarball 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch xsa258.patch xsa259.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Upstream patches from Jan (bsc#1027519) and fixes related to Page Table Isolation (XPTI). See also bsc#1074562 XSA-254 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop xsa252.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- Remove stale systemd presets code for 13.2 and older- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Replace hardcoded xen with Name tag when refering to subpkgs- Make sure tools and tools-domU require libs from the very same build- tools-domU: Add support for qemu guest agent. New files 80-xen-channel-setup.rules and xen-channel-setup.sh configure a xen-pv-channel for use by the guest agent FATE#324963- Remove outdated /etc/xen/README*- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with MSR emulation (XSA-253) 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch - bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch- Fix python3 deprecated atoi call (bsc#1067224) pygrub-python3-conversion.patch - Drop xenmon-python3-conversion.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 build-python3-conversion.patch bin-python3-conversion.patch- bsc#1070165 - xen crashes after aborted localhost migration 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch - bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb: libxl__devices_destroy failed 5a33a12f-domctl-improve-locking-during-domain-destruction.patch - Upstream patches from Jan (bsc#1027519) 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch- Update to Xen 4.10.0 FCS (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Rebuild initrd if xen-tools-domU is updated- Update to Xen 4.10.0-rc8 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- Adjust xenstore-run-in-studomain.patch to change the defaults in the code instead of changing the sysconfig template, to also cover the upgrade case- Update to Xen 4.10.0-rc6 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Since xen switched to Kconfig, building a debug hypervisor was done by default. Adjust make logic to build a non-debug hypervisor by default, and continue to provide one as xen-dbg.gz- fate#316614: set migration constraints from cmdline fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10- Document the suse-diskcache-disable-flush option in xl-disk-configuration(5) (bsc#879425,bsc#1067317)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to Xen 4.10.0-rc5 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - fate#323663 - Run Xenstore in stubdomain xenstore-run-in-studomain.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 pygrub-python3-conversion.patch xenmon-python3-conversion.patch migration-python3-conversion.patch xnloader.py xen2libvirt.py- Remove xendriverdomain.service (bsc#1065185) Driver domains must be configured manually with custom .service file- Update to Xen 4.10.0-rc3 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Adjust xen-dom0-modules.service to ignore errors (bsc#1065187)- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Update to Xen 4.10.0-rc2 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Update to Xen 4.10.0-rc1 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop patches included in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch gcc7-mini-os.patch- bsc#1061084 - VUL-0: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1056278 - VUL-0: xen: Missing NUMA node parameter verification (XSA-231) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch - bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232) 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch - bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup (XSA-233) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch - bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch - bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Unignore gcc-PIE the toolstack disables PIE for firmware builds as needed- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- bsc#1044974 - xen-tools require python-pam xen.spec- Clean up spec file errors and a few warnings. (bsc#1027519) - Removed conditional 'with_systemd' and some old deprecated 'sles_version' checks. xen.spec- Remove use of brctl utiltiy from supportconfig plugin FATE#323639- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- fate#323639 Move bridge-utils to legacy replace-obsolete-network-configuration-commands-in-s.patch- bsc#1052686 - VUL-0: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- Add a supportconfig plugin xen-supportconfig FATE#323661- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- fate#323662 Drop qemu-dm from xen-tools package The following tarball and patches have been removed qemu-xen-traditional-dir-remote.tar.bz2 VNC-Support-for-ExtendedKeyEvent-client-message.patch 0001-net-move-the-tap-buffer-into-TAPState.patch 0002-net-increase-tap-buffer-size.patch 0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch 0004-e1000-secrc-support.patch 0005-e1000-multi-buffer-packet-support.patch 0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch 0007-e1000-verify-we-have-buffers-upfront.patch 0008-e1000-check-buffer-availability.patch CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch CVE-2015-4037-qemut-smb-config-dir-name.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch blktap.patch cdrom-removable.patch xen-qemu-iscsi-fix.patch qemu-security-etch1.patch xen-disable-qemu-monitor.patch xen-hvm-default-bridge.patch qemu-ifup-set-mtu.patch ioemu-vnc-resize.patch capslock_enable.patch altgr_2.patch log-guest-console.patch bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch qemu-dm-segfault.patch bdrv_default_rwflag.patch kernel-boot-hvm.patch ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch ioemu-hvm-pv-support.patch pvdrv_emulation_control.patch ioemu-disable-scsi.patch ioemu-disable-emulated-ide-if-pv.patch xenpaging.qemu.flush-cache.patch ioemu-devicemodel-include.patch - Cleanup spec file and remove unused KMP patches kmp_filelist supported_module.patch xen_pvonhvm.xen_emul_unplug.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch/sbin/ldconfig/sbin/ldconfigibs-arm-3 1684339004  !"#$%&'()*+,-4.17.0_06-150500.1.104.17.0_06-150500.1.10libxencall.so.1libxencall.so.1.3libxenctrl.so.4.17libxenctrl.so.4.17.0libxendevicemodel.so.1libxendevicemodel.so.1.4libxenevtchn.so.1libxenevtchn.so.1.2libxenforeignmemory.so.1libxenforeignmemory.so.1.4libxenfsimage.so.4.17libxenfsimage.so.4.17.0libxengnttab.so.1libxengnttab.so.1.2libxenguest.so.4.17libxenguest.so.4.17.0libxenhypfs.so.1libxenhypfs.so.1.0libxenlight.so.4.17libxenlight.so.4.17.0libxenstat.so.4.17libxenstat.so.4.17.0libxenstore.so.4libxenstore.so.4.0libxentoolcore.so.1libxentoolcore.so.1.0libxentoollog.so.1libxentoollog.so.1.0libxenvchan.so.4.17libxenvchan.so.4.17.0libxlutil.so.4.17libxlutil.so.4.17.0xenfsimageext2fsfsimage.sofatfsimage.soiso9660fsimage.soreiserfsfsimage.soufsfsimage.sozfsfsimage.so/usr/lib64//usr/lib64/xenfsimage//usr/lib64/xenfsimage/ext2fs//usr/lib64/xenfsimage/fat//usr/lib64/xenfsimage/iso9660//usr/lib64/xenfsimage/reiserfs//usr/lib64/xenfsimage/ufs//usr/lib64/xenfsimage/zfs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP5:GA/standard/3eca4b2bda5a4a86386c190500d5fea1-xencpioxz5aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9ee491700005b68a69ef070562751e9db4a5886e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=62aa651178b0787f49ac719b6614ffd328ed4af8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b3e396ffb29cf0ab5f6a4c7f23d18a7f6ba58ce, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=735a6305c30fa164e46659ff91bd72f2fb06e296, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d706fe693dbd94618c287ca86c668c647203afd3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=85e60caed0a191f04ed01306ac918eb4aba536be, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a0a6d50ed25f3971d4423177cb4892b0760931d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b8635f3ffff48c5b8e6416cfc67a14a3c51bf72, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1682f41a75e8b5c1a3a923c466f6268e7b6b3502, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c89ceec3453cdabae2feeee6240e75021616d5f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d30026f38c3c843277dacd3be74f7017b1d505b9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a7a2f8e3203e0e299fa2b85f164daddddb50427b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0726b3d47708811d295feb1c325ead90fe92aacd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eef8914a584a620e5e55fd37c426d92f89f1a54d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ef49083e9d06418f6632861eeaacb757b46b745, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eace63a7f7fbb4e325eef7169578452262e44116, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=90aaef3f0ddeb5a5d16f360cbaf2dbd292ce1317, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ccfbd84b48c79f91f8fb3d1949ef6f71675a8639, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6f76e1cd5994dfccb24d888ca2a90b8d97cfbc95, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b7cb8f31da83294c6ba16ffc69340afff72c3f0d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fcba5194b15300d54b42374c00002f50b1e2d70c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d8db3a699d58f6f13faeaac59469d043d488f1c, stripped(>Nbjz    PPPPPPPPR.RR0RRR/R-RRRPPRR0RR$RRRR RRRR/RRR#RRRRRPP P P P P P P P PR.RR0RRRR/R-RRRRPPPPPP R.R0RRRR/R-RRRPPPPPPPPPPR.RR0RRR/R-RRRPPRRRRRRPPPPPPR.RR0RRR/R-RRRPPRRRRRRRR2RRRP PRR0RRRR2R/RRRRP"P!R0RRR RR(RRR RRRR&R,RR/RRR+R'R%RR R RR R1RRRP$P#RR,RRRR1RR+RRRP&P%R.RRRRRR-RRRP(P'RRRRP*P)RRRRRRP,P+RRR,R$RRR+R#RRRRP.P-RRR*RR)RRRRR"RR!RRRRR"R!RRR"RR!RRR"RR!RRRR"R!RRR"RR!RRBB÷̣utf-8db8ae8eacfbaa95812dbb4dc40be50af81978800d160e71733acf35074552ec5?7zXZ !t/N] cr$x#I>pstoq+{L)Bv ,5 )Ɵ {Wѩ?|`ڝ (Cy.?VPo< t{he559m:̊c/co+ }~4N]P( u2v;tĶBksx7u'*<_*U`_>W1Ez=l^j'>P*sr]!VS( `]w (T6bU7@NXE8(plrL)X7S?N@Sf`Dqд {!W(ڰ6e@BxwDy'0]D|@_toܔh>؜.ԽK R7p;zxzcF:m0i%*B^G3xV~rS,.ݷgCJU||^Y %irǖ+u~lo9O298ɤM/̧t<[@xRbA_G7o苅ݖ01z){M= ޒ{5I%\%X">ͮ%/hgto{rCюsa7oY1&0n`ޯĜć[VDmE6* e*cD =j%8CV)ntJm;5!K|D{\lFE-G!l/hn8>/Fe/ϻ:g qVx H:9" rEٓ._"uF@@t#HDYGvyym3*8~fmnB:Z& ;i7H v'8-ua6, z ^"H FiN('CsՌ[Uf5w>cU=)j2ԯ$&ȬŊ"xb^z:nrE$l.&XUQ?r!?tWzTXo/#`2 \lVLZ9DN8)lSɺ)mJ&W;9er].L&O *ge![ bϵ #Peh=g[*1aO}/-uZ e3.6}11YuvY=>'c vd0~&;"! ֛*&Ya83 [I^|ihnN!Lq6OkئlE * ;)s8=/£T [[03qۮ@3'xs>izhnj#>sY;TDORm{=9ELkryopSTO$d>҈c2>y漣; Rhx^M%GW#ijrĸ x]]>PQaZ x8N9,dl$Owz+y|+NWARl֧U"i4JN31Y+n2"Q꫿ 6Є\_EW>C`2}?pc(q|Do@{+3_,|˂;H~O{0D^ņ 8vf0#ݧ_AB`e.fA?%\_^,v(,NZtp>%|bsK΀f4W}V *aխnwY .݂"[帐Zv߷Ps:#_o) XФoce+n\yB T>-q]eo65`o%9Cnwi'og,{D08 Ghj30u/_moڡb٩Tf`"냩Ḛc A;ybI el=tNuf.+DcGuF ŕ"ax[=Øyl~KEU>cD`,ᤂLl,̹)D/e:&-2f,uxDօ%W-&^C"r[8ޡWe]yI kMYceeڀB6}΀zQ(-Sf G!7c-KL 8v,j M<'ޱ9TAh{/;]Blu_BE6p&N+~9 M³BMgdW.Mv9/\JMZ?}pa9P vnR{2#Hw/?!z~ ( 7p0ϟR EV`[l_i\ 9f9zX3\ bKm1^К5I |= L z6h\NApki/ nRm>Qϵg~P3aޒCVC% lUڝD~!J2u ! s8^eW#B*sE!z벛8_a-d\4J1h2ҥ{!V,hO֥ S;hοLsO> |SBo >ᚻv|[P-q?4/5 OlՇSH츙6j)Zu?WKhPWXXG}@$g.o*7m1!O$g|+OCDO,PI"+\ڂwݚupQkwkA򆳠?j 鹳 .e): ,C%B~Ԓ׹}ݾTMk_I$=/9IбwtcI'iG'e@9Q e|iwē29W)Ӥ1y] r3uzI u5PjPhwXA,6%R+}p,Nsomނ>訇њL6ͷs8QHJbsX@a*g;닽ɧ~Y/_p̱>JW^;nh?zb{%klraadj4R'xCAխuU?.~9c\S W\DV}?sBS TaC5םk%9 P!o</{ E!% ZـB OhY^5Ws7Io cF7A\v `' %CXj~bM V/HM5b:.Ր)fѲEe0(纷NXU}u:ǙN6W9b~_{w2DI+'|!8[߮GK((Ψ܌̔Xc 6/P 4|5[Jk…eɚ t*h5\8]otAXa./YUE|i2>Ǎp)Djv {m;4:|ÀgI&ėi`J~qo#KGnRu`Ƞm!`N" 2T B7[Xx|6*%y!9yJ#%$EsTL-1 69i~wst/ [h0El>¨wzMED>aoht==H)0 dOh]++^&7ܡߜ~NtQ&Xt1U죊2~~}cXcS; :843>jK1r<Xtfbwh#2O3CFuWzލ}h C![&* u#5[̵x!\J!"\i=9<,7lCgG%[=㩸0u##e8 Ƥ `RX, t-9BJ%ӄb WfDPGA]͙0TFZ$QyoueUH-l&&d;=l]j:o*ڤpquig792@8?d'7Mԫ Ђ+ׁ@̂Jḛ~JgL.mq|77e[R-j*37*/yzHsL ns0-]3Jd0!~Dik^ @ޖчg)BZd=P1 b&tŐ& TBhNm}3eCn|\KW g ØcP]U`Mܖ'cQ+6f#@&4m36RsI6Hu^e*\6E  XnvޙB ~m[9}1$8µΧ$3RU1*gSUgSEMךRԋ(0)1nYGX1%kYE>C Bғ[΍j@ہ|_5/lUS"l:]o4>JTM|hZUM[Q( #brzw$\:TkPsۂ…j녕wO Bvwf]1nIk*9|rf`vd+J] C) kwq'.URLGP6u:, S ]_~WM&Ԗ:L*IgBdC^2cJ̵#TCb#l9ɏ}#d/]ԓSZ*d5+fW&ٱm{S: .wJlI­H*{fbR)iLJHzY6Ke(8TnA|(% SrBiru܉~/Fu_NKrKW'>杔26mu(+?EM e*H)Y~t%=%*`RYIaEn|;Q{hI_<'K8`ߛ"/A\QK?@pڿb#ko1ΙCʡg3@~|ed˵f{v^8/) ]N3]HM̓[%nӎjx;=C@dW 6v2.O1߃+ &"o\ !?!?CO=v0D 6rXp4*4`׏xq(~#gs M,CL\x-Y"aV#Xu;1Q J|[Ru][3bDw`!/74N'J'ԲOFK^ I3sOqJ"L[r/?!}]?[ \ &NAH>Ʀ#z=,K]jر+//'v mٹ;TNxR.JEQ-ѝK qobθΛoz8~iV^H cy[~>]D R,he@{Jo/ sx(q$o> @NeYNPIyd&#c2{.E2EIc݋$_e*D"?VvݮmR) ѓҒ91U/Vh\ɝTDjLc( `a`V( Jf 0БTkQSBFLb#9-g;Qq74x>}oI1G<B7t/U3@A 1[/lbo))ϝA ve)êՅ Vi-!x(br`FO_6!PSPatGz&ulj&xRUZlg,]jOm8ƌ`?}?s"v#gTz\=73ePP-FL1#/L/2onRvūH+8yZ U߃=d$ EHο1wuJP8 Ҹs~Gh;?`8 HfgAF F(.3cm eDbj4]-=ۊԓ6U@z:`Yj`%~'D3A"R!XΏ/AԢR[nD؂:IL`6@r"9[:XX*/3\T :|HG=R8A -]ǵłuofPTy)OM`TX E{g W5z3&zu&#ps23n +QI3 ɡJo袔#J4;X9n jtDLqEF Jz 9R)ǟCwHsCXND0k_klA>'_4q,=k>ADx;Su\|(ˆ$𸊸uP +c٨W!5Gs+U@>Q#*q#.@2eAËYma=ޑ GÙTZFF.Mf0QoUYWVA:e0)B#ge r9-<\\tSi4pTSs 's.8ޯ @H|A8ڮǂ*s~]#&խ"  GB ؛#jm71=Fi NQIm7k Q>`HwNfǐ?T(}hJO)Y|WohiҪv MaY:lv~J40jLACMGg,Xt&3f2k/:h(h6v_vr$\H%4|O>DސuC\'lkZHC>#zuGh{rM{ ,h({ ; g"_+ N;% W.",fIZ]Qx^ I"^VӹR2 ؂guYL33P?Gk#tF=0Џx\S7HFaba/vm]+*#hZx=.RɏlDX$w-wI)gIFBc1h>m'`GRL4ZbܐxmNcp$, Lh@;8]R\ +΃JĿN01SO`iQulᗧ/#ᑇS,WQI2ykً0,˂q=},B!:+ 'l־[k1qXB%N[x:ӏw𦬟P5Ⱥ{mӐmv@˿:$d=KA]+Gym/aߡQzaĞb F vy=PZd-z}0[WH@Sď뱃 U*q̮XkikS"j9:]K^/S9eݢg5rƯ[N3e^ߵK@##4 Q*2uS WpfQؕ67YNtٲE9ph&u9 3" O_c)zF Fg4ݭQ/r^J#@]ȸX%[+ab8U?FELʵC?8XHWXC>F5IqŘ?X $ָK`'WEA*J-q؋Ѱ$,Pz_|iba:GJ!+%~1%!bSJ'a5r,p zPyD(B|(<--l8q8=T#5ԑԌ ܐ'q6d]GQyS1ēsD,6Im ,R}mi0?>\=/SV\ސ[[mnr܏⬖||{Y_vc)ި= o 8SKg,&nŖ;VY# Oxo:,VNyZo yJORۙ쇉0E=@o7D3Nb{!w2%`T0:Q(Ng(˲1*fϟs_`NR5T*,DXA j}ڊmzXgֿ_F6hz!$S3! bk cB ={j-[͒?~8jPQCDRWca;CA~rG_Akwˌ<^`f/rVԈs L٭@}Ԣ [8 ?#d\ev>twZd%ҳyNQKʷ1ɢv†Mp rsvC*o  7e׸p9ܓAm!~4MYwlõKkJflM"֗4F'}D)K~ (JGhY=UF?-lU0<$(&p$u#0˕kscгI|>wWd^BJ$,J#lM_3$_gE\~(9490B&[ ڎJ6shk!1vK)e|~{0/R%w(* ?2kQHRzI)FX~/f{"3WrL6b;PhZֱq*m-o06"2~M!5 Km4w=C 'KOFWf'49#Y"@cJK¤*A"ЮBJS,=V }ި>eBȘiJ1U' YZX[VU攡Ƭَ(p W*5䨡,ox2(?Mwsm(^wN0GM L)7?V  fæƞ>/~Zy1^0d< ϔy?aM:uP(Vl̳[.:n!D wu)#^8;X@zW^h,E(g4MJ, ~';ў[(eSB![6+x=wJ#r<11Av#2P ~I%Thd]GF3O QIђ2Z+5&qr^8S݊J0ʙ1!vچ9.w0m %8<;+dLk = WisY&C'0./KʷbM\!/BNGmM5]Ζ!Wt\ Hﶩ~3FLgo)uȔUhz2#?AIob-aLczWohD_*^w =pw`44:Fți#[+`h y&ûE[T9"_}:WD0FZW{+mVT iV l.'8*f8,!}ٸ[f-Z+Ca+Svg(jSz.}ŬNk}77:O_48R@BT{_w4z;SJ;bgE"s4ՎQI3hB,Z蔇 OSɶ65z.J7uVD$B\U3F2x>͆*[(8/?P:|VNS^3PDhE,Qdm6hAͭks a&4]i֠kl}Xw8~)!.\V]L^HN(1QOY&~R] 5ka\ 4OEy5 ',uM{*|T͕1ʩ: Hf/̍X>߫uty Bڐ^?0DQ8:$UlĂ$)lj+❠KnTAɴ]9U7.ȐWfۧޯ=λ(@ʆ)wEڻ%&ʢiǠnNA8yW;۔AM7_=?Yؗrx_њ\S3Flscov$ru$׀<#}:-l+{S/sY -2}su@ve :]6m0%V\_9qD\F38CFD rwȰiihfOCU-&5s-7FfFqtRM@"PS}N GKq|ۧ>0bKT+Uny\4i*a- R,|q0mlr1?̜O#Zb tv= 0i[ QW(^m*QPR2F.aqhUU_OxCFy]\t:J噸/gFwqr>r0Y[-oګL)I=1*mXpWen{, %-b} L>@8@t D]HWE"Y .<,pJ]27#%'Jaz"hJTWC*JJx?GiA tv,k3t].\ 1s@Ph"3CAr*ʙ̠Qut ot7y}5'<.ωQt7/(xZ!%^&HxI!)t1?Vw'8uEiXo`EM!%fg3땥k Ze=V_ _`Б를6uaQ!6]mӘ xD6Z<_A#wĬCHV^bBSHxNX#ſ*}kG$cҴq̱7ēv1 [ezpNKWކ"FMRoe".TU@)YH!!`NzQcNQϼŜHV^ )ɯ0yʏo&DW`>>iZPJcq MW-XI"(KRL-;A/?AGs$8zflݔ90ۯQ"/K=>Gٌ>ѹ$pypK P0ӯx\U?P_$M; A*YO4 y,a(/ MYM6X'vk1W*3M6A%K%\cSŕ9JԀ*7mSH 2뺗ND$.5)}Ee!upaC;svUziv/˰d1R_/q(TZK7U6r{g!cĪbJHǐ  sDێɀ~ J|^"2hwX[E2,C[\"3x^=!'"фOXf xHz', /|-f@ kx/Ƥq\}d#U6oYכ@yAѴ8W޿'x&H쭘H^:1~~]{D, 9ruQ!yRP9&OB6&DҀ-8B4B/, 6#dQˏv9$5˝%Jt9+n}c"[oý)22"Ⱦ/QQ( Ϥp0A8{ R2`K|OEe[t<[d 3Pe{wM͛YVsSqx UTz;ՙcSMr7WV 6b*BM<% ㄇ*pZ#'!D'G7m8Z̻6}"tdNcp-|mوX? 5IX.+0Ժ xG[!cqKoxex~<#uyy?,ZvJMK-{0z yR?"ilȊ5.:Uk} c*DOuxZ{^ZʝՔ+}T9aP9v\2S6{Q5Њ_YNxʸXyIZ {DPxo=܅&ך2Ke,7(1 m+7o|@*i.?Y,e#r=0pj&+Q&E[H+U.](0.3ޕOfnbC=b[g·ۊh}0EAe2J,shI5FyPk>1Μ Efy;ɉA/՚crN=:n9J `ˡ41  F#"c5Ҋ:C5H#JL#K)NRuuF_'6: b*I}ևCٮSsm+~fO<t̗Zrb뭱و`fsA:ٸ@fuR@{%QM42? orRTqkL, ܡZw`J9s:#BE0:rMG aN'3nj`=( [Gy @OAf+.0* T>d~ߪyYKf*bJ>/^6N RR%.qDK_NMTXq2$҃rxz`d}J\nf%ԈJ:mQ;Da,I.>@ޔYަ~ƒʹg2~gSf|ZlѮP%MĬ5)cUu3='削^sdߝei0;󄿍g }dǎNJEEBF8- 䧼ӹ\dȔYdhc *0-8NkŲUa%f)">E~rS"oY> ʄ"dX#0[]WWFCӚ0z.Mc+~Ed&z5Z^Mu_<4ajO;5(l&;Hx: e^'aw%gYU`I%[y|Nnc^uL;':^,zIX$ g;ƭ+w/-0!5SER'B*Mh?6=soIGVޙ'{fE@h~kQ`?udpq@*AS)i~p#ʇ[I6^JI s[&x|0DUPMLBdEEcůk˃zLKc_-y)*ә#=7H3$;VޮASp.kM5 tA{I$m~7lWj}E2_ً̲߲1}d2o $p@MU]/ 4?IF2Ym7Hcth\Cr`nIM覤2[}aG+,,u2JBL_9O{l$LD"h$5 6ʲ̉qr~$+Ȅ˜>6 C@{Ga@5iy;Or*w݁Y}6=bBT4uxܗ֏p0`г^ERd&U&\^A${\i}[LW mL EHEp("ߖPg}mmkȔZCBFM;N18>&{0_טיD`RAT4װqUMvWDqd !?YH" 3cƶiEyd;mP};ecg|vg 螷,{O9v~vL,SoK VCaTw+R @&[!~ [g% dd׳EC.[FS"9g=+μn@vߏȀ/*=EYXwEhS^9p '8cGE#ߓ̄ iReWb92/ qqڼ?-,N?hzj^PVx(s%YApt;F0 [Te2 ԩT1}b@& N,OĤaRnF.la2c(q8a~j,a2pd~{t^FHY5DzW#Fvæ\V#U޽8^՗Kh,\{^xK+qj/Nt-aWY5_6y WGh؁sT#.'k~KP侱T9->!QP^rtl92:;m t |nq,ʲћPeS? <9-`iˮpd t3/OYKUgb@C}a[TdY'O>v)I8џHx4^w}JGl(;l0Pf+6~;<}L`I%WpBZ2A~-Ϫ@ƇY6EwI9gr<5VOSBԴPl"*,bj$DoC,c4l:X#,؝HLKeƀSfiE~|/EU(@Myo{ L?&g٣ >e+)6*@۵̬ʰJHT%{ Ә?}unHb} Xp%H-An* UⷑPV\@oOw G$#_*%96lD rElZ{&2kC"Ctޗ# }'8(]P tӑHQH i?.1C9Qv*E0cK̴倁4u9)C^$[]g&+ Ms { 6zSʣY-٘@ lKK`Բov)kĸ_$Kb@4>b@(k@Mשh~nkϖ]RCv*ؗq00ڎ*>~allE7ah}{# hЅu:ohU+;Ѝ ,S+R9:!y 1^G>r݌@'q6G5F$vH^/;ůE*]wJRиli, d/Z[ͭ< YjSJ:}%n#ah b´d({'(poX`˼^I0d5:E0C #XH͎QV0vZvh^݅@F`.n[LmsZK",Ll]%} p $_d-EabbSAdtA2Bf2f;3.#U er%v0L1XԔYyBDG\a;} Amd f^xqt^<(Eldj K^\M&ӓh1X-gq=664Rtv-6̸e y6m9,~5➈E: l_@1L\%:nJʊ)91ѭC#=oJy`*H(S"rI( y%"6I|'6A6̘}"+_6x$<qp@%h7&5L'%4;.jpu=PC46' Q—" B+.3t Uѵ#3+c;ڧ3zP<>Y԰fii\J3ϓ /F lDcr&a1'qoeM ]~%y~zpM\OqU${izAv؋AuFccFX;cTbǎZ{Gop$cr:# (s;9_c{q=X x%eVRQC<%&/) 7zeXI" GL |^76>/DK3:Կh@ѹgurއ#k6V '\캧'Tl֠Vx /'D\Ns R%:K*y(w~~څ+ԧ1-h.f.3 .>%`S=^S5oR`[V!i3;xx*ȪۥiHlXw%~Уw8We Q^ u&{Aۯ_) Np:pzN]!G wO.b5?x >#YcN2oʷh3 E9ZdT? JrNAQ'dU:q5ľ/{s{PVF FKNS^Oޫ,AicuE_Q69OOEE0ɓc+~3\CAc;r@8M=$ :f@ެ";aF*7ם0YG]¶PN Δ Nu J\`6C"Xbl[wDl.goe뮼n^zEAG]K54S:^+$dc*,vv]/5.^)Y9Ăh&4>"{%W'Y?7_]ᗛ,&8Mo(2+l3( 1϶퐣̆d{qsLMD`9{;؋8"C4u=Gj:o?.#IP k^H[zaZϖڇ^tkT:&3AbtJ2St ;Z1Xz`.rSNc=b)dpFQo-ys%ql%yԸѿw;.=QHѹuFfGWAA!+(?wx!7 Nҗ]`Mɱ~꧒"&&P $H ^W4;ɤ"ULaXf+b'٭q D w Dv3#e)o6I4L cIbk^CA!ONY :|r<ѓuȉ9`,8!>clS^# 9-49OUS^S\^Gb4 8}>29*}~_1fF%z BdAS^Ų /JPL5lq Ky\_-Zȕ>x?Vi[]-Ln7\!YL,@[6R׾bfK{+G}s=s${_hُ?U,,ܒLt rkꥉ_AhKE1D505{N̕7&Ia q`E%;)9q%EU'8WdϜbKyv gmSjBY g q(-|^y3e-'!Cm|`[bB!mT͋gH|c0/B/LS- "UJn,C,[nLYō\iPg䁎W2 B?P.?tsGCa"gT>:-Q74 n&VOXj=O RK,UQλ+K7U1ۆ]䵝%(LFDx㳟 yVFi> ¢,v {OƤ([xO[*ݤ~2-8'}UoPqH=8ή? [t3әRMxW➙yHDϏFW"'I dcN{Q bvMĨȬKvF `T1&A&[Ȏ[wv1M@ISaa. ѭtƺ|rv6 x^UO,? ld") Y|ZO q\E! R=[.LndbͧJˣh $NC fù+ 2)gDPz6O(궍9(d#&i$M Cn50o @y<<+S[\83ZO-K¯}xM/iٽu+Ys,#*-Y7&DoO/79s zܦB2jbyZ$gU?]* %yỮ8|*`lYJnlv`s 7D.-4IFn[EO@{khUUJNN SDUr/~O2`.><ࢌDJ:!Pe(Sv CXpI`&<Ue1. b;(@0"Ye=t {&0}mRFG(u/;Mȟ:qB)hK9ߐx༁܈ƫJ AT6ӗ{q D+&>wFUp0޳xkDL{QoS!n§ͬI7j\l/U/{9eH]s] M6ch YN OѧaAUuc V<=aP2TyJ\KGf!ȸ%'N%j{Sh(r"07 Q- ZcR8`sDh]Xط-oی#.3" LJ6/Pq&H |)2x{ZC(38V|O޻/^I2x%563y7O7!HҴš'룓= y StigLy8=$_n7hI/7gIހK>0o@^qJBȵs'Rbț- (9[WO࢙"IܝCoOsӥ!C69ڄԐ"mPXqCf@yִQ əLOi2w.hvpmhY֊GNJ eQdǔsP4H/vL#I@*}‹Xs7q&"C1+[gw |k9=$;K*\|ɓ)AhurݵE]1VpC@lhLYANULFhHK* wm e[YТl`''߼{oq"nWngL+ רFaQ>K0Mv:raz^@(/$*{ ^ νJ?hĖtpET2h$RTA,F茰> Mc#1[ Cr?yjB5N+*UN 67;bvB$~ q͂oB08Q5PBwS#WMINIϙ"Kc3M&ȸ:ݥ*؟<86nsj'x<ȍtrl󟤉?KK+HN̝yqຣ{O_pbE!u&dMwtPF_ݿw}ySc]yG2^O˹NYbRw+gy_ɩ.+j(e)vU <^B0^*Ο7Cg1*,Kz kSMBޗZ1#!).|˯*hcL1Ԓs-r?,{/y*j ~d  3ktğ k#̋;mb\~X>EQ3Yr#MsO %T/'1;/mG'!=xAURM2P#N_G//n!KVOҿѐ❗8)$260ZG\?g/tmٟ=+앷E#fhC7DV~{o3\NNd|J -.wkH޸)li'GbB6}L.ъ$7רj Ruv=PI-j'ÅߔJ L[=ߑVYF8x5AHM@AKB'0R>>YK+s@Y !所`qC;LHd>U#;0rXOh J| k-bCEc+w Qd 'y2-Fo/o]H#ߍt=9YnL@丘obXkVLٻJl_R7 \""%#Be]$V-ٓG~o +RW8h Q|rguiŁGg[xq̭ n`#kޒk ;:*ʅwitュQ)L{^ cE\ ;ek7Ns r2weɚ. #i: ne9x*Ɉ}a?%q#WD퀴w`4K/ kt(nAip EhKG#TbK:l1wOzG\!tSaXYT^` FieLG2ilzZ @AeL{ݺmTqq̧#}aɓhe/ vI;@:5 2Ǽwx&=8I_3#.A2d^߫J,J>ђZ-[뻣FGgZkr"[i ]ĞkP"WOҼqDQ̾?%\*ߐKi:nPlJজ”ǧn"3=2).q$oX` ,pq׵Ⱗ`{p${ mac=l'Œ? 쵈B5{|d-iG"E&p%QR6@7"LRAMs|bdx42\e[' Q=a#k JYR-қȻMg ߨ)t{j e <Ô1!CÇ}pg?q7S2gO@^0"`O f谳8=\{_Tc@! [ >Z>h(m|,%Yd]Vi2úUR1 M5MI䫌I}"3Fá$됂fa#(Me`@Τ]y6ق(W @Xeide V1.;UB}Y=NIAwfWF4 ξ2|s*΀eZ(')93'imhTm$y4S6jl ƒQT4 AA &N6v':E2о z˴b]bfȀph`06C‘F[x~/Gwn-f 'J&SܢmgX-צ(Pzժ˛@<4Q%_yz!DWWK@XCR3EZAƟ4W|.r^1HO%JyQ sH5z@@Ȇ0yX=aO$ks\DR=^F8@r:92Hn~{m7x6jwN^Ẓ, "N6gٸK 4PzH_;t/p6(<5IדM:WxpLY3^H.MUܲV16;k ,Wט t(~+8Arx)sd--ɬS׽L0{u(eBA76Ң"K,YAv7v55Oqk# D\KS6tد$'GQ'l$N$"1zZ6 SW 8WYx`USgDyv>]k%FWss -n .iΉ|ipLU@hLfg.)YYV U>80"/-{2\U˲Itk胀4Ou7˟A(J2hذ~2@'3,JYRlHG9b)g`iRD2!A@Wqǟ+/yg 2 ;d6 T#R>H&%jbql*<cRaa_~ΛQwB OIn(w8An#XF.K׷:@7nt"LDFpa{y34&.=B&VE߻C3yx-!Ij_mh*If͆観x&9M_E<ക#,X1~SP=5}+,"AeKQ~u q%))G7 xw1-W,T2 e&`Yv3`v5eD~ӎO A޴,:.fW=}``!P&P;\-g(}6BaDU3~^h4C>vtN-90j@1 Q2oZV22ř%~{\H_ {֓T{tZjH؀=CVXjM; bsf6Y+nH ڵ( 'ҜU!}I5v(~Üyk.;KwNUg8%?+6&;Dώ C"݊ .{qu?cȧe䘝]*&~ǯˎ2T1-{?5l?bi=\{Ԥxz\Vb]ƌJ1^5TP0^|@[c/4Ӻa ohr&Qn# Z=ЪNgB-ѥE[S'FXn#ܖ[Y?>ղn =>Wp.`UgƖާȟ3 XQ _6ǫtIJ- Z^T\53 nlVpUJCRIMJ^U.]Sԯi&xU7hĿmQ; o0+m_Rd~*#ɱPi;zey=Ht 2Mkc6:6yviKyqEp_|ʐhA4Py5 $|+@42# su-u?xSܩLiKAMk1N5CDôzzMAёGR{aEKg [s oͣlnӛ9xR]$%tbB-$ x6eop>S!RL ttN5 ȟ\(xgX#Hl->g^ AxPt  tj{1s !F4{2󦒯}0 "ӊL6 EB#Y`oOp6R OB7rWU>'a(U%=HriODC9^ 2@pZʹ^=}b$x $ӻ'ⱒtShtTAEayvջ8tGbg1]1^>?#jO-Wp۰;BWBB2E˧_X\di~77%8pn2ͯ"va";fe+ dx?bO8Ȍ=HFBJj$ )zOdG?Hoq: Ȫ j==RL̟`c<59N(о efu=J ?7}M0}f[ͮ%V{8Z[_|{%ŸWD90  *+GlkwQӇTEzI}x=!C"yO+l{IJla0`Ef"O~9dn5Vܸ'qvdJ?@cHu*V$`瑜`\$]/I3Fr_̡+p̺+"׶B,jl H 36Bj(M{9|%| m·JpJjaDu' J;56WAeK(] uiaj RQƄ_v&$NRdA WN8&QqZSy8yY-Y-eY&{t`}FUD$oЇOuA3(LK3U qmvSz+]xݳl1 :TZKC1i1*[Z.``¢$GWWP _rW)$swF}wG&30IR Kw(D, )&}!=|lNb>׳n>6)sQ<8݉X+oOOʱd`"$y7&Ts+KXDأV5lnj%*ݪgFh?٘h]dJ^ƐYNSiN'CzqVGn|_vpˢBt[. i?Bڌ&3UwA\|$ֺm]3>lnmMxp!?Β/z@ݸRbzZM/b\9.*S,ϸqyy`:P>hL9~@$?c(e"0:Г9ɟ[׳X|ۀʺ{hv8D˨S*c()y%y{jnF|ȼ}wʙ*PS0.ߵVjP*wP??7Sk>XR;GI5w B)1k#H?ݡAd12]"a6¥G8+2\fi≘Rgs:b:? ɅgTa?R9ȶ*M53vlNlO]CS1(|BMJN*lh~_5nkhAfd+4`vP\\5(=&bB\.g/n`axG4=50@mijsN;P$ti?\d=saģ*"bԊ}B5 |$~U$UT n+9fs.Lj 0Tˉ\X7r+lVF(SʅV4;It8UnIq C#O1d=u/֙_͔X/8d( pi>z>7fŒV ?SM̬g {.R{p8iRb/m<>ISWtb{$ S ڙT*"V&&HqPjnΓ̒o5weL x{X hB'?WM8`kӦHq]kAh p`$[)N,1U_25IF^fi5?ޭ+VǮM.υ\ fٱw/Y.ѷhl'm./H]RSfLOV.ra|y3[z2ЖM{bۗRttc+ƍ^g1DʭQ?xb oVӥ_li(ҳh@e1G A,h!ѭM.dshT]G9 ցlOhNaA8\l(s`ÝdQr,fSnL $Bz! #qC!FWq^?Ƹk vA0w)5#D!$u(́.EJIQ`EzWl+9puK k _vaQօe,&Յ_%4Uzؾ0{b'Ƒ ۟͟ 6tۤR,Z'QuVēB]BO~hiv7:ozEM@)<-GJ6pcc+tKA"[@9Byׄܳ4ULDR ^JԹ6+cx()xz&։琓Q Uyq\BLL$AnXfw =׌wm ]x&@N>0 Em ?*RmX[sdM١tWR_y:gP{H[KXM)\7(({ϐ irs߈ĭ['v0oӽ1`rFQ/dgLGM€X]i/Mhخ&2pu*Cp?V@:鏟oJ u@kXc(%i@AUYZ~T/nU'\[GمO">5k<69PWypŮW֊ piCB鲹Z蝩 cAS Қc|Ie&.`=#5ؔQk<-*%fjQO)INLids+?pD"Wa䫙]"i{m_h,q4a{+>wj[/ԵqKBT6Rm[@m|Wmd؂l.1!o9|=6/\-dZtAaR[ebח]f[3\Rv%_'`N1T>VtXul0 x*¨?o^S^=Ux4~rx5y16PMhݰdʼ D xط9.ɺ0lt{NekiE\wŝ:ʲI\ S9RBϮI~wM֦:nt@a>Vs28C ߉2EtF ?n}eXחSGk9ts3R0@~ޖ){%p|`ى)Gqp}/_叻+R8ڊP/XQϡUyIWqHTZ᷼hʍ_TnϕqZ[a_n14_8}~;-FyU:V^WCNŦ1l{({v%d14)1rB'FP(X[?JȐ54Wb|jCvE9ɐj뎠Ɔ%PVcɊ j\nqlT.Xf0q@O- Ȗ/ s'\,HF[sGIA!ՆtMNl s@Y}eGzsؗլvu(Z$!_ TzU`3VNKRUYbU1%̏|B XB䤲'gc4@7d,^h2_ e{W.sRp͉.xkL/~!jǫK~wq=ȄՙqZ2+kg3(#Z"S)1Gy[40=4;Bk~̮>F<+u|P8m_Ke4|Yǂc@˟>zlfN9ᑕz /0' #@r4 t1~9J'*1ľ'%جޝo;MTSB>n0\})mxOZd i+=EcJU`,."_B:׼T^8֧?5$:4AlEׁ,]3=Ӑa-#F{wB.ig40m~5$1r`u2PG%7lw2i^0i`*ݣGu› +AV3J9q;w'mq9-`o|96t2,mnpCotw}IeW'dl(3gj׊L@,^"ѣ%ҹ먵RyZu|Q32jG qrHLҵqZ.EF pŠ toM=G;@3Wx-f."% > <1 kJ} gDG=M?,APTe|wIgHwUzíB_:#tk*79I5F_{C: ӦOif߯xQ+r~W S'~Һ@ͧ] ݄|g4: wLOO9K#'w.g =z"dm+tӬAK3b(=5Ry֜//đX[TLvڀSȩr䜕i.1K~Au@8VvM ! `=N0! o`"1J,"u|j B"{8`9:M{> +B L'Nb>'NNq "EJDE,A5XiGEoqRMn=|h{2?q|a(=u ͨ47=u!3x. XO,kK(ϛs)!rjv ‚lɫt6y'S/{lfdOEָfu L99#U\K5I#GFk!h*3 Yp3yu]c=7B9%́e]73t*BnKL BҮ3,Ĥ}/2pO6ُƼ bun-|z,#-tЄ/iaPAz5$p{q`5ӕ6*!acmgsa+GA=7?*U;ҟ,R{U? b?Gp#P* vƤգ>wfy w]Wj+hiUl(QU41܋ǤC0XBUsH0A ?V\Aժ1ȇ/ 54d\-< p,I919 8h0V~o>ޭ%D\ɰb*k|$nmXmNFSUR?v2U @5at>݊RAT/I >C,NLgD N{܃h#V<[TulJ "c|@X:Ԡu u- tc|?K4JXא-,J`sR-ezBCL}`g4kbW!lϠ!yqe<8ǧwqf _w|wXL;bHgVxCUAsD3A/Mh3B% OJಁ\z'* OxK?א 'L. > ޟCa?,4)HeA_O剌= txMjQӥEMap}婇'.уK4 έ]w} O#1wG4ÆN`4 z4oc?jޟ̀HCu6ioF%?*XJqqˁDyT&((%1"=f7t30tb`tioVp{>.nܲF6?&d]X݂Bc <'i+ j$B=~FXIoI ࣟRkyxۯeAz @;~QSp5{ uJTX N I7f'}ѐ!/N<.y?9͗!Yxbnw_4yu.c\X X1}ZWo b W@CtXx1T?8RE=.!Aا~h>1B(k^_<!:Ѳm{N63Fa?{򝖆S"y |BR!_0=}5ы*;1@R?kIo͏^L2PM$QPɼqfFCOg7l*k of++H4@AO.!+V1oXdk".VIyD K xɐ6&|!£3hu俈U2WNtVbhC>:ݲ=lzWA=KKZ,t4- Nwoy+O@8*,0x7L׏-DBQXlLYq{Ks+xe:- j )1dn*:7oO%T~N܇x IrUt(Yslf$TMi*g*%<;:;#o T*}R2"DVQ/Ǖu4sD1C/'kW'KClOgLJ;uzۆ)HDƘG,*_q]Eі9q2/85qkʣyTFrP[d~(΋*4+j|(EԮY{k9TM>⁈2Toꁒ)=ؾAYJ:{j!`#)s&$yHӆ͕g,¸5r kyƤ"Ȼ!j -2E胃)Vl1ghRe5="MJo&㋻n8aφ15 O:ὄc!"]y3_TU P/E:-biTtϤ5~?PPOJ-,u==ZOwKޮj(ZG;8iv_#GhFsZS}Ywcpu Ś ԃјlʝrJ(,uzƨorW:ZKZm6_]ӫ|y[^5:؀TŻT/2U uUQCN}-a'+y cGX)sC&7QIxU'I#<#m,w,°LSB8SL.>5ݰ#}VS$ 8>[dUȕa]3[,h")UFcYa)u1c,Cϥ d/StIk*3XW@N O:.A8ySiZ6/ۀ^2{1lw7Ŀ}_׭eLjݤyz?^H;w_Ccn00 ox9$a\V+@ן}"ЙH~[Φ6iD3&Ўq=BnA*m1ѯLFԱQRM R v/V*h!l yjV0̽E%69K %W28k tgUTڑXѰ5[Y 䵁^p=Rtp(~lCίJ2n'>(]gp|(JV%Dݯ˻XyDჅ]`O0C_[S3N*pBO ܞL;pd;,[g u;G!xN|" MnXg:V2>aB $FtHѡ8 }Hfgjj(|6R〲'9.Z3qY3̙<$ڙ֤\I!Y ( vcw>K=6),hё_%a8*[{{`a|"CGco][,RSG< 6[֦ëYJD*F5ثiuRi;<D*ڛWu~~~m S?GߊdķW|zH3Ghi~`Q,H 8`!V~ABf D¥Su"i7ekiз|)BC"GP2? NYr(S?}3¼- DMUcQk^PNAƧ 5&g V\(}\ gr7ܡ}K#a@ Yު3>Ō87e+%:?vmu:ޥ ߩ2;)f,#~^8gZZup Z'S選xϼƇ'E$NۗGzrjGi;)}KM3R[mBv&odzz֨8d(1ƨ2^п\)1!JCma<3- XN/ۄ zs3 #>K3P^=tO7{H cjn4e/kkF?TuX;x?##Uw3JE1"U)eE)Hw|I.}n2VZiF{:Z+<Ŭqiap`G"fAZJ1 %HN+9dfk}:Yy";}754 G~+igMq@Ц;d(a2uu1&x|{伥E U4f )'\(vgz!p,Sur!bD 73 F< dU.fPr_F[%DFT\45< )3Bem8ĪmpOn_ftR_)/<ϧֻtQ<aSvP,h[\`.AZH҉GC肛1w=tj0Bɒ!BN SH5R_ ֫dLYxB`2T1{ֹzu=Qi M>"ba{E*zʎhu@8W%86OOMWYbfj_n4WgLhKӗ=ERu]d8O_Q8w,flEp}'Ң$J@љwCQӱsnZN)GTݻm $h+LU¼T YSUOz-* U$tkl)H]I`6s@#n(`,\Ry sn>PJjcS'tQ"|9*:JsǨGS^ʟH(meWewIlfUƻ% /7-N"GTo. tY}VG6YgyQʓjnU:Hz.mbnW$CEsclPR-EMz&Awir8ϧTZ% =뜤:2SU0$VD&O;J60? rezgh,l4 Im5I>1߀`JDz0cs]{VFdD" 飮xw̿['ڭNU"DlJdm%v_^ _X^tBkg}oR`lsF7*V}\Y9{T'8q(Uq#sU˰Q|5(À~90ib[*8(1=PnS~ܺm@t_ӡ-ؼV !]lu&V̧ŗ-Rcd 0U}/53 xQ1םHe UQNTPr9ԢuJO'5'{Od7zIVe6Ѿq+f[PEI{,e˄Cgd"M|A!fxKa:{;5lE$#?BD>nOS8~?|pJ'PvRd?=3^Q >a'|"ʖ I )sTa|(l$r>KU?T X928"%GA{/@u5gYf в|Z+*[dد `H~>Vf䉀ƾC`]J2%Y;4L{;oj9il5lNo9'+=ńy$*c(-ωv!|׺wܴ/Nnjlx5۟>dh 胟7)DPPȼ6}}"~L1vꃒ&7%rYC0-+rn+& Sc'BcYfJAj@Ob0LP]!dܳ bG4d\aMj ǁ<׾2J;5xl7M2m%z@_McV9![~eDT+!h>xKCJoaAyZ$0D).k&+.ߢ+Yf.?'P1FˆZg{X!tk:CNK~ J$8|7bdҽ~P(_{f#&օ4}QUbn7)10ag*YvyBj,zPAlq+$YEՊ@%,f4'g φR iZ$.Bޱ?kǁO,!iʟFƄPTa8H2CCD}ARN#.<\B|݃\sbi{tw3xqF;l̽蝠:qְ9ir$@/&Gdƚz&ha5n_^($鑤FՐ,H|X83UR]aӽ`wd$z27XP|ې}Q 7q9M&>I7,I(?gW^&*i*_ZE?E*w #"UR3BWACo؄t(5 N)/fo35U]e'D;vIo>)Gi( 7nO GFmi.0]⣆MΝ"  Awbm<.qGm3myڱEhQiY7FW"B 5 U>{+Ll`kvf|Im:V,)0[RBЄǏz_w6kq,"ebSݨ8DRlz+)b1?ö8X>ٶ?2\cq?h`ѕܥo} E3`eKRSEE>ISe-͐Jd$CIr뽐UmOENueߚ;Rr\F``F^>qVtH}}knjȦƿA8q`)&[K4#gCF=r{<#S"_DY*w4*^B-#̃ȗ[}9-0QUp"xzd׻no"~/(MIr-+avv}n x}]CuO0g<%`A<lۓ'BZ7'\{d RbMhT^ڬekD*j+_FSL6։al~Y27@NZo!+'4nnyh`% ŭY wmqo&8UqCǑZ9O$ q1klӵTtdÎK%G;z(;ބЗ.;2D5Ν{Y.O4UGu9A"UvHvDew]ɜIjJb&n, hHb%өO?a{ Se ǿ0Jz|牏3Ho1)'Rl3de )s_j>Wjh`^O\wױh҅+`[|6(% !|zi(Pk؏qa(TY/?Zv˷tktKycw<<0XQ=h7jũHysaa/"Јӥƶ7 GmK!Y/KB8rptEf=OfsЏxtw;Cz2/#Ei~+ק,u31JK ml@l "Ɲ&Vd\ kSϴ uTz ΄LBt@aCooBw֠ 40@" 6Y% )o@>?LWjE95E|W96;VD!R/oֆiNm f4 Y D5+J`5}'^ 28:a5wl0TF 'Cd`MX>CDֆpCK(I9oY,!!ACR5 cSxe}T m*-کnɮі%DC\0rBA!y4`\ޛs7o>8PD_^ә.{p9dttGۂz4JG8}e/~9G1,Picr#Aܫt]KjTPd&ؠ霆G_mpOVS8f#<( Eyyk^܍z>tQGml('s)Vno;7QMn>J=q"?ܴtY"B?I=YWl H}ӶMu=KCrT U̕2 xi{# +FXVs+xcՃNV=H#;lA7"b<9@!!RCtLߔ%Ǚk%7n7֒N=z̥U9b9Xh|8 ,~Fj13?_O~z_v㿋>:>5XPb;<$<B2%1&!b zImte/-<m&ZHF/`Մ͔=dň" mfaZV%v!|f쫱7ᕄ#Uʜc* ש0os=0Kfz_=peL3 6Îü7mqPtaW.zM>uKΦf߈ECv:{j!x9"nŏ>W悍fNL8uǽJ6x*%Q?.hKqp1`U^/{aЀ86yf.۠Z@G0Wڻ63LKdĪWt!謧?HֆQBFN[/sږC7׎%1Sě{~w'R1M<ԟ:kbuRV}mB\O*q} ZA*+4b3mMmN1e]NtϕdcOߕ7Wnν  {$I\e->$q8Nm1 LUdޑ* ;sō]&4ÿy~~)&O1 XlS8~h{<vE B6~I?MO"/ER9yH%(]ax 1"I4@۴]JӢhk`#{'Ķ"Lp4\n% Xgp8yS?WU-ʹ  uDlbTpMV,h-'#7;_. &h˷ԩ5wq=JZja2%]q=9bb%F>r"z%["O.W0tIkwDFp<,ֈƺ$JQ6зC rϾ&6 U~eCX4rFwOgrHZ aG(拊~>LeQDxWj24u hΥMDjIL!wT@)؅`fF뷍[hˁd̵6Ņ$%5F8|&DG&0*ͅٴ-H17?*]bR%<̀O/kw$mB@V:93A\CD/z FU؏{MXF"~zpJP0E$ltyApL{Oj `GqdO &ԗٝ%aYe6vޤJEINX0)&P1ʝJr$.WjuofݺЍXqeq:KɁ"p{ey~Af{m_$L:\|I/:MF65z)6d4{ڥ,GL:\Gt`UE*Yseҧ#_(R?W-4i-$i]>J!\3g%T$顲0e z}N3U~~Fz^'*` !TƓ-07}FR4G 3Ÿ\ar ((27~dpٗ26[RvRqޭŬ ^gyH!NHZn^OkXd|WV4sqdkzD3  UIx%MwS {ݶum>'$Yp"q iM(eQyKueKBM; (Z;QdDr'ES 9GKjۯvhfӠlX$qY32yh.VLn]=uB2|pX$,$ [e| K5O;!g>KG8xtT0[Hӳ@9%XG4p?ZU(qt_m}*#=CQ e^QXd7#AUL7?Y|b;ַyycI&QTGǛibq솓ClKb $W a2TQ~4Ck͈/? DĿ2grR"g҆-7D{ou(@3sIcZҤ>6}*sAldÄߞ%!iք) y}Xg:u;Qz$%oamDӺ=6/%0SZ>hBvY/DE*ZAST_[[GOƲhS}$Ͳ,1EmB(UAX}R"de/{S߳"FL#1"]*p#-4Em%eʅR;FXf&Ko bF-MԵӈ0INTVs+ghp@+Q5A݁>Ɛj~j b>OtqC Kń9 *"r?7$KZ_LUcfH?-2P*>8˽?!eoIOIgRQGTSyS 4eeō|spHW@m{χ|˘g%O*8darx3uV?[Έlgm[[] ~tic2RO n%p5^Q!y%Ij)cn=)[km ᣩԢ;I:^2R}Idbp?:㫁X |H}|̇ioH94RC]╥oߎQ^h# "mw:/P 5tVs09 " m~e&*^y^AG=|g' q4 QC>QebNAfL f>5Ug;B%́\iŋ/;WȱuUI6p;*rt ۔0Īpm{TP;l?3b o`||Sy9^/T8j5KN>~ 7S2)@P`ˇzNӹ5U$庁i+I =0lm=ЏXAl5^/M>bhaF~>QydXAWtFYiW2EԈ #s)IOݐ=Je,M/_1"Dt"W!|/tiRȯlGД FRS򏬩]ڄq;5['k`>Jb<‡ 1Fy:10jB 2ңAjhFAEKiF>^ተ9[(-Kl_Th@ZL# D|/h_ Z}Ʉ&#H_<-);&=oNAn[}VYKI 㠆ËxRV/iy*TOFӃEb2 эF݆}Y2-ķ+x E{RT$zYZ8>'' V xppÒ`@\ +5Ī8Y3(׌;)|"/g)w5HBfn u:<+]3 + š,'e?!?aז\Mw%|jN>f8qf)m2}[tv`)Q?QA.(~uᗆ&L? , ~S|ڙ_&_k 0vX9iUn8s#cu:cf`_} U6c7ѨD$ ɸU a`hoqB[W/cR{HSr9Q̏1F!|k*-v@g All-&<%ا]ڐE; *:- <Ë,Q|:EFMjNd좑C'<6_8VAOcg3Gw뭋)a+mkҹ _ǶT⹱ X~kGE0+ڽWCQ}ǭQ$vF鮷8Vq<{56B#|{J`\ g),,kk%nR@^N*A9b_|wˈ*aO8RPx&'2vvFᏓ{+"`~k9;ruhyIZ<JbZ4AAR2KHMq~O vacO9]RU?5E΂ %]/k&随|NQ ]7ΗLKnT,i #gZozw9 ~ #:B<A[$k7O*b{Z@ͺnU̖PT\~~UVNDɄ ^l3uNH'wpI `G"As.x0a/F ׳R!.s9qM@Ky:_qg%w]*J2> 7z^ڳuV׊}Q@|Ӌ!˫W7gtPd5d#y3]ϫO6/5gHE9Rޞ >C̜Qm3~Fq?x&PEH~&)WA9C6 6g IˠU^|' 7/q@uJ(fb;,F_:)/5e"߬.ŲڸN$~%qCؑ~ B>_3|+j9UPLv=+^Z2-R]37_O87ӗ`kڭ%Z2  1-V~-Vvd+qK 6o2_fHie{.*J!"Y8=IuNy }<>Wo lR_A>/xyBDRS*pf]%|t9 |…&=n V%C꽜$R^fdqr6&;m4T!/5ewG`= @/_f(, wv⇹l;V%uGA|z45zc*tz?r=!2h5@S~?Lўp1%=lv(/xB#NI hK͖Tñ<,`f,Ix*ITݬoݠwh9njU.~G0b5U&74(1XQX{l d!\6Z-X|!3hKSx&[8'@-κv`KVFTO+cyL[!c?|q.o𶞧//@ 5p'ϸd[ϯmSh!CJ4\zwޙ2qSR6~ fֆ/ʙ♉Ws@M>=/P K"7F]ΈTWpzk8kA#^qeCn}xZ zOn_ u-zbcɰvɩB_^4WEeN,Q20e񶁋;Z#+ ]3/Ex;=?~?`y}QyGnZB'-6e4MdoFQ7 6KyX. WrzԌbERב} Wb,ܐ r1#v,ՊXf8ZXiy2t]l@#?IfٍdBpe,ܔbyM\p4|ҋ&#ZW=rT:Jh^tӜycъ͆yj;EɊ`48)vK| Mh,' ٞŮ!Y@rg=]L"k9eɬ}.(XхNu 5?iv};k}9D҈ ψOqitO™a Sd#4sZ8}w0OX[ݡo:b^H,AA/Ns+TTS;Br$ <Q#[PenŽL]ܸO&&~ (Ephz!'y {c|fPF/ FsK$Ub!߳rdC5,rϮ#Ht\28F _Jz 8T*>9Sqcz.eu|:Ꮨ9tR(\fK8l.NoP  ;i PZrq)5iT7#305 HZob)zU\[NXN9σs0*Fu)ڷw<x/;"]f e硑FMˍ쿪ӫN^bQ4ƚLH} G@!gOZo$v1fgdVvKJ1BGO>wl;ʠ2 5> =aK=>|" WTT9!=H??hD%ihr{P' jMr ?9z3{1E/ճC흝PyW64bsǧf)Ε_eL:5?QOgklhܮ 4 iwIDH=l r+/sOIVR7tX{_7tHHRX.Jd lY V龫:*N҅R-rHݾdo_.y$(mN1<Td:UR @i'MKLr3XdU) rI2 KSl؎(ӛNq{Y^uk 6yʎ݈iL]w0{c"m2GqxjSضKҷ[AТ/Ș˨G LarDnC]5=ǢY }˂cdx'T}l]#rK+p:oU3y{ (.g>3\\b]ئɜu.dE4m㎟$iUTӓ0Hty|R7 J*ĄXƋ! I$ 쇇^xޗ_y $]RdEiVSGI@5t[WApB Ƈ!q~3 tZ7!+Ѽcqo*G,[u7*Kh<t[ Lb1)VᮁjIzj^CqP L%!Hu9K/ 2Bl ﺹJ? Zi(\M!bž,p'&@a2S;Fèljs(g޺\;w+n(ʙNJU|hs=#?ާJnEHN:Q?u/^ 3LA;ͅJCދfv OU, @~,5{7! uI2*^lUPi-FBPGM_ GĒSظ@'<8эMȈwqĴ&˛T5&?X%T.t< ., p2L%dEnh  +,ˈWMtʕ>x!Xq=Oo\YUTPXDeƍN:"\s̀e B?'eL:ƞ {&X% jx:*J^XvPdP^ .o\`2 NM1Q=0$n58ZIjL-]aJ~Ȅ<#6/(>( uu# `5o'`T~?a:(VܕEJjJ< "ݖW _zFޠb!_qRqC*^0C> EO1eQCO>1|g}PuC-mn㌪҇#H| U4i_q ,5G(ezh$9B-Xzr}2/$ZL.g{"4Jk!»hUgp׏ V~JYX|LEx dKˋbO)W\ٷ~\`rv"u$T]U]/Ξxu1amEgWO1h^zOv̻Zȭ?X#hhd۶UYC\KV3n .R%|ި> #Y oX0:fuwvUjH>v}D|iny3C"'p8{z32- JƧE$aCiݵБ+8x,똃 BѴ#;Z[Ą;M{)Q&?ˉo. @ʑsW!UKTI؍/ow\IKC&28,Tw͞3x'inE ]*}M,_?,F BP+i| O""mccXo !Sg!bE;ך*'Ɉ7P[#B~eiSMQcGEWwhh8Pa=1@4-}Sb![(yiE9 tp LxS<EG̅$bv_c\y=䐭B(;6K;cM䚙cv`UAh$M ƃVP5}h/*/LnQgŕeG}|$ֵWH. RT; =d RlX_a(!Z;5qUUuJPtW>FVSs2UfLrHttYmTT߅JO9j`WpRZ[!4 ⌷+@-zƾY}+J?h)Q.|,~ǼPÇwv#r1 6 c9-biܣ;(v)dqqQ-sx4d*qs5LB)[&.4K!\5#Y3K&["-88D:#09p-3( %z+RօY373;AޞJ9kĈ3C1'oYlOxmr~k(.j'9j$&ODECv4 X6S(N E$ Y9FH\ Y*v}ۛi &P@RMZh CC.yXoU˹D*NG8J]r^zߏ~e\z^٩ĥmx `]0h3"3jNaSH)Gu{@lBgfFZM^d hvX-$'7he( XI+TxoFSaƍӊw&I娗_!1q }% >U U=Jݏah!hb|]|bsr9FH׀i(Y#M~b\+⿘dxRsR%?3 [ 6c֐}Ps[ NdR2c"Q3 J ql:‘ˈ|OwŋHUܨ"K%<)*ϥQ=CIVҁxs@]OL7$zrSs~LXΓ:.4W*˳6{`V Cvl{Sl_BLJ{"&6jI(%j_}5O[ vO%8` i,i)swl 0۬G젷Y,2$Ԡҩane1!$%C%9:aT xbpFWƊ(˖)5p =zW& T^ PUQ/$;ܹp\ƻR%!P^ ?vƷ1"J=ZTޥLor%szFJύwğnCC!Q2n QsC'œ_Z}"dbLm?Cu  ֩tv. Xl$* JWZ4Ҁvpo[0+ "Z}g2cjaelLҌ.#lo53[FM Oۜ6$1b v|^A <~%0CܡzŌ?k4rOpEw-9~{w9.P2 A@w$Dž]@Dt]gL(DԀ5)0GZF6(P&c+3C7^D0?oB i_I\]@cJl$%< ^{:Uz7y63co)ewM5 ҷNRpvB1Oe/d|Wv:!5JUksd#FX9h8SN&M@LR[4lBsTK HZ˰%9y5rv0`;6K"9n 4pcR<)KX6}2.虂m"\IɌq}1lq#g uc/"x^6rC5*񄢂nB1(V1GF,TWWL@Q)O.`8V>*>Lf"jvm~yn$کJEE`/(D+I܇,u#~ zb:6$X9z]u_e- @vwǘbħcV-nevldYd@UGk6K܀58aN3LP{ğ0m!Ϝa7L*b;H9̒رX vYMR@**u.3 5&Q~b k~owgD]3-^YgdsFPXr,Ǧ#hKhx!wj&ՈLX l h`HuD1ӪLo钖CS_fs*f*x"Rq1^J=~Ķ3 C"W3 n=?or͉?RR+;c l^p^e=E鰷]:s cFCӍvM@!e{(*N_x< pO))[~Ոeia錦o F@Dj&q{ʁ DP\@&W,(Ҹzb /[oT;b !l0a:&VRYd r,keT䑌l`,}3̱JR!-o o8TF[](? Nnh 3Ž:h@p_Ҏk S,N~7ZDQO6Uo>Et%%%MGtYпwO~&'8؃yCvhy[*\S)s'-)|))pt7u K0{ve|@MoDAh&S(.bJl"`=:3tIOJ7j1pGiK Ȩ =p6}G:X& Jb% Ivohs?Rdv)?6?iy|IIyYmcI6xhA:d~sn~Ѹ)m8V[&&?R|}jo(Y" ytffPnj82AY~^&Dz'F5V'n(\`Ayѷ`ɐz,19'ԠX4q(\Y.nW3YCON\?T(RR&_[u`POabq.5TͣyD4#lA~^>avkEfQVSJ3RXl/VJIR:oG@ oi#|/ ]j[D$\5J=}8@UXۼȫTmMT̯aW,.mW>",6a>i(A^NPg벖rt0햭!KPGҧA'@Kr= ߣM7m3Í6bū?rpYr3e&I!ׯF;6Do3'T7đRtUlGMZ]qy1oQR%Qx@~\tl'arQaB"KEXHm3[+Ňʫ9~" -pԷ-P(/z1iu1dg!=@B%y0at3$Bͼ2xN-J6M_/!!j h׏K{-lYR`a=] U|Chd47Mj:;3.5䀟ę[ Mɳ`1o{wpJ Amϸ`:RTodwhrٷu[ "(}ߒ4rd0}v,y1|Q8;~mQn++~K܃7"s'kt2UEפa_Ff`o]CBzek-P\oYhc{d|Gf?o vbQ|HxiDž0urw?ʓ$j%θ)qO(mrÀY:M]WI:KsReyOJ~ v 7)59bI${Ze[ܹ6`eG 9 rHZ%3l{?!Q [b7Unx[ƸZ)RK Y?۩BH8L4SZ敃nYa"}T_x_X=o]!bX9Ӆ|8]L3'NosHL5HaSa uz,H>`Z}מk9}#1NFpy;t<% +Mc ʮ@-xWwg!7P1"{3zn1ȭ^&}0[11uU^R:,CiZfNKɎnSb D _RDGw#c,HrdKrLA-;{U*.#N.pٴ+ټfzY?nuni]àsbu p<,9tc!(ٲCz0+̗=3L,Df`V378t-M5@zw9d|T:\-}:!'1&nK"|WҀrS<E".ܞzL^(cY{|hV;I1x;V<;n=x]q4NkrOHמį% rdy/P>O}}A,f[%M9Nv ›Vjh"0|G8V¨ ŷHA4q/0Rȟ ރƒg$Zw-j>l"P2 * +!Iz R>~|m6Rbkp⋒ !k8==~@kT[te'ŀ=Ylו.& Ky?]) 6{R^*y`|X %3l4J_DIP9O[n],-cBOWK1A!}^@ʖ]$>DCepZDMa us2 .A,?~@wnMzNz:6Yk4B aν>h+_'WqY* aط)42,bmVlǙ1EWJѓ< fkWqw C15^ܤ4`٨f;JCx,SB j\\W*kiOSw~ Z F>4#%G}[nvfKKQ;ޏX?I͙Jw"²8/y] #g!lKH'xrAp+Q܎B_C^ ͣS*'Fȷ֛/A+&ylBGmTvn^?!S,@#@W /+0.)m5,n]*<8? snվ봂A6c VGz%ȹs@O ̉[F"Y12;IGW;p*HtFz+S79[#rcP:(| |`1Aݤd6zpt*uRi:X>ټ(+uEQiG=Ǚو32UXᇴ5Ž/M߰9D#aڒV8wYnL7#2n6T&;޲ftAهVm$#Vi2Ts򄿛3)3 JUi{LLY]dRCyuۗ!Ji-CA$UBJ86M0yB^e$Yo+V3B= !m+#p M v̀z8pCfV~y2z7; /nqn߁{:V$O%|<;:$Y\HC7UuH5Q(Jc8y P1hnυ=.g9lw#SړgFj/Y,*j[QHNeGeˢW6x s5n8 ?G9?Ii 5P!?$ ǯRpBWP+`CKx:лf|.;*>1STov?,ojV,MFrnbxmr C 򘈶":]|Y:' 6j!+ נw4=&UoTyqĎw6%Keppd~ H.gc9J!6]\k^ G| 3>YMr=sEMɦFItmYޮ{ @=zD&^Gkvߖ,HxO9bTnMN8&j|~]񅾌js-ъ& :4AAi:ӟ1v,# `Y— }B!,uƿwB볎V*gpӒ61Wnv#oyPٙ xs6;.OP/`|9.*ϿOLpa`i JvfJ/V$+GM.ttzr ]!v`64;観2 pvؒ'A\{Tde]Tmװ2I_ qVbDg`:[ye^pWRC>}CLjB^ YuNUXcػTHANh f݈ d썚P QI5>ؗDmq-k$JOHN4ŋ(Aٿ(pE1 $s_ᔡ]#m}0 TUakJ(y~OpS|l8T410|^|V.3њ,')0TtxEn;6K-4p "$r : <݊#D]ʖ$CEOuj,Cl16*r8Tg Rfd5XJl_尀4+, $2( lmzS+1*yL.f]PqP\0cBvbRtx 7ؓOp|Vߦev/FnNڠi6s"_}]41|VfD}/h[gEɏFz^}۪"aŽFO"=$ڦ};t@?OؼI>r1t7;iGb?B8R|?SLu0()ϲŭޛ=/?ľ:ڕʅ6JvY{cUǨtmhv.JŶ8)ӈ7wK]-Ǎ_MȳDa.Օ{ ߏOnSo۶rl jyxPy:C–Rtz=KIwf({"s3c䚂!;]&$lUGb$:b2y^'}af;K b 3EϹ1hOJBH<>84I`5/\4ޕ# QYr\T|ѶW9 ,uvݘu,V`+gi4>aGb|E6{av,b]׀|$i *ɭ3!ATLC!mXXcT\A֊n*bJ]PPas3S|OXp#/Źۺu,P lѷyl@=YߎH}KĢR;њ*PhIܚazLZ=ddaWMTn^j5?C$9ϵ"!Q9 Pyލu~3%,"2zaYfy8L2V<\iHJڛ 7[PiCyctlD4E%'EE E VpޑQq tw1`A(~^'dh`F0ymB4tԚن5 yB%qzS~JZq!%ĭKk*fn`ޱ^TG9'D;~gL4G~;qxֈzK`"*)Dy7r8Jj*RNۍ㱙o!;nmsͧ(5S#!a&r5u0qpqE s.`ϻErK oph8& 3zMȺJ#| Sy3MU\~㡌s6NF\+:i2QX뱈Eۥ LM7%mά{bu.zz#pP@Яa~.sK뺌,um 3VmZ|p~lF7GmtfA$"3ړ| pz1pR9N2Ϡ O>Nm}+,*PnG.ymuG`q$`^ym'`+Mѩ8ma^1=By9Ռ=:&cXٲT8qi ټ_\p6 {G[Uq D1Y1~5sWx]dݿMv% c+@kzei5yB\ cd&ZٔTwӥ& <[}wg5=>Ba0DIvz+H>+nZ>eqqgUdyiRmԌ5, ʏn&(Me4d]Z?{,}{=uң(.s씖(byE.u 5flklI@Wzg߂10Oq_> fHH I|E8>hڮ/aJFA=y{@&ؼ\ KjTQ$%0Ƕ(`<,3'6i\Mdi>'~Q7q!lXM59 ۅW63r;>.#Dun*>n6tF; rhS|Lfx~~L_`v֏:Fg}q|@op?ed>` m5}e؏UMi"`]؏q=2x߾5Q3M5 Jĕ`} "&Zlǩ>Hx.?,XNJvRܒ(.l;c%eÙku)Pocv |4J-7875(ջӒ8YʑP\guXI΄racAf>0csRqu,=Oi. 5)1L%H/3[6+~%dNOdg+MHY 3uoӔӿ4䌒]0BGW2DOf-:2:'s0&-.G`@'=j 㵤;$ռhNJT2e|h{ Z֎]tzzkE=H/60u%8ohkY}$dq~'gU8jI/3>9fk3c:gj)!*X3[wwexe}%`3aQan l|" ./x!ZS;=1]$Xv&t \4Ak-v9cz&Z# IW-o[呑lm׋fΚ5X~ϼ\Btm!Lt!:rcP2pkŜ͙[]TԎ$OWVojOٝJ>ڴ!弟r[ijtXzpoB{7]$"cEq\#c^3,15 A|G18-"fs'pxfLRGY^߲![IFL<a"cP,hOfyP~RC-/g#c+ڵWޭ%d<1h{BTll_i)3=tؗEG toZǞ5x7_Z>1s0kb'ĭw ?)7?D"q/efp qd?FFQ 2]lFTF~E[¦TDXtLG- S/X턚(M}5dA5nH5ɸtU8y;sbJdžxZ1.~(~u1>%7υubjjo[ &eA=C-?³D?&6Cg6 mb~lZ&ҫ ZM=^b:+C^1C8|Y7Nt [h 1 !!,\ͥGTs`p,l9<5g@1d$B Ofm'1|$-$J>6a?Q57F2 B)4Bz 봅d7d ?J{C#o `?WͺtSg#BxEkχ06yAm"#}NCiҷY,sѠ& bС(qJq2E3ED De鶴 w/-$zEټ2C:NakQCk{ZG旼)-T_zhvњ^)lxw+XV'1,҆uǰ^v d0qV_NJ |0 ƺA!K yg^ &\8-p n"F(ۉX3KE{aL;De9f},Tl2`%Wvã]"Lp4PGc$ϸ? _>lm:u.\B'ahEFQ㫊fM$ֹI97c)Ls9 \Y2s5ӚtH 'F3hҹ Td 9nu}1Cxt_$I7sl̮{5S1~ wMfC˭|9R"fژk|"5wխap]m@Rۀ2 NA3X#Og]1V֠Y)C{oAƿI2\ot_A0 |!M; SlWά)DDW;bqsB[*mW/%G2?4<L+W FXXʊɯ&0ygNBss~PB[Si40JL9|sJ}h Èxǧ"Yg(/5h/[ˍFѽA[&~{JBԓD&̭LH1&!Bs|Hk+cQ@^X.(ҭhAfŘ4;ٍ\FC|IH]6\7;xjba2b@6粥NSLmQij;l^b7z?,4}Krz ڼ ~gFDv2Sabr^d%%Iɜ_ W@=j|稝%mBy1;T.j6`O~<<=#0vj!8grx-1S4lՋ;4D3Zm_B8߃\/QŀZ|ɩפvOӜ2 5%pј19\/QBzL.5&*N6j7Gsl Rv0Q=O̯e#%w1}zR#$$A""`jJ#bQT ;㶜4Z%DNnl9"r s:sq#O7wyt|-" G4"'rOʥXWnM+ Wn,6Iߖ#*bt5@ @BEo|'U v_ȟj|c~2GAR}1u.zO)eʽ}?؄O :PYb{ 夂ͫ2(& r¡u=|rxU-CJsZJa_ aVVH+nHzy}HIOBs(6P W9GV mam5:}Kp\G ;cB>'| Kt_|B;u/ 4?ˮoH]Ђ#47edh1#Ve.&@k|l4SpōrOF`Ah 9'5-p%m~i(Vlݽx+g .Jovm֖DWjڇa\5즢cחF?EaTDcYщ=ph Z9xfc!!!|l.~m[?JhW"e5&ʮ ⌡).hiXԑy:ݦ/*P\OpU8}2OGDtLfD>k/bPj꺎O̴ځ<-}aFe;A~Ï3u;:fY'\~'8oAN79)"R Tk#3z'A#$&w>1j49U~'Jx`͑ӹ Br]ѧ\C+T=%1b Wy7O"8(2|nVD:$_>RST t)$&X<5[5N c׮Iz)S%7=:_viʇ s~ `ZL+B*~܅@)IG3~eMuDڸM$X ǵ8^Kgc}$J%D?)?i/L/|{.9l\0ODqe BHPqJ6ɨ$B B)'5\ZofuuZO89&f~oDJ|-O,ZuK -]t%!=á{*ka7\`ZJA d{z]Y&.+-&xjB`,,EވAq >q}+3`"٫x_AGc0>>.G=^/I.N\)X|RQ#z8OH۫!Ҡ bTdPzBjA#2to-MJ=GD Xm}'*8/6dSPN`k $$/PF\Sȕ;1o*4n*Bx+s9IvXkQͦ+'(m-|$b5\5˚h\Ԟ5>b?q:'m&#إ41i@׌#1zmx.MIyh[~6{Xc껝0CGp |U()L{Ԟ{ct˓6$biMR5c53-gY#s{FԧvUI~M:Q-us?["E;Z5bs֥22NAشI[:WF=OH+5tM&T :fV1Q0d!SU#BKUHEu_9vrMm0XTFony=ʷha9?|p;vHtƋ9iC7ġⶌMvlJp[?E#uӁ9/Q7va =,wwW2tnW΢4=b X̄*A3xm&aP⧿ռ㵝J'Jۨi}ψZ)%'~'D8+FtCQm7via}Ža9|U;=դ.qͳGӮ~Z&SX<בM| *A1wXXgW-Ya~=D({Yt')OMuS)!2ڻm j -`[A.)k[ԀD&5.T|AA.+I\P,Jg/eCAGD[p74;g7Ճ+a$Nz*j!8'-"P=ZJ(9ge[g*홮L0/}LLX%'m ^vԬ_k@wネ*_Պ -B t"f܉ Ci+{C7r}GＫ< ]{L@*"A609c?Eiјw6Wt\*4+k~RU z= ~S "CM?΂g]7k^|L ^`Oĕ7G+çO0Yӵ8bRM5 un>zDi0#kKK'_;b/m)\6G hmУ'Aނb"@ }Ȫb~{Fȉ̇?{ h\bwL@ź|';=+t)}AyWsD$i%NO0q}dkaI6E k}ǤE?(^e[&62*qܛ:/P@ՅziY\Y7̠kޗkRm:8 /f$Wa\FZ]V-wa97>LWv |N2 !qt N քw5 Xd;D=G6/A#]uf![tiODYoxp`vUht~迏[CC8<@A5KMt\64"R@-emLɻ9i'GiT Bw)7 _#ţmCkBWf"ӡ2yVf՛-;&j HZ/lm yWui? =N̗_= {;Ff74hˤlZg>tXܩ{`N6Ciׁ7N#-&W]&4GvBAu_1S&)VG>mşHx:E'>|:w* ^L^䮳gf~hjP[n';I_՛K/ړDb}0]z98;!Ԗ8q^gz1J_ǑUye3K O}Q 54O L?"p>4+ySW,0Rnʎ!.8%N'N /%Aho݉na8!"#BWx9|0šA=0C=oxـA߱&7ˑy+u 7%kEH̰ GMa]!nB?bEF#жf"'fݪUE)`Ϩ%E 9̈"=V, P d”tPcxW|**~!ڡI @NQ5>H[̲RDG7s[GUH9$ }EX[`gU_"͍`L,opX,$3܉~BDx *v4"Xn26ɰI-0*4R>ڕ{&; l6eմSYW,BdExPv/f; {̍'I|KvCܲߙ)5ֹd ڽ]РKW8!ήeV9k'G{_[/TqJD 9abL{=8`)$H))4|{ŝȑ;sj>Ūrvw[~q` =.@Qޱ]zNUXw];ރ-c5'd 4}# ^S()i Y~]ܳi+{oTTKڨ` `E:74q,H2o7;L/Xec7LiCLU\sⓢ"y –8է1谓ZS3({nvCU|"VQBnn3R@bY''d@3EHߺPU!۫J{V/Щsu擦ݒؒRz4ܓhj4n{sCUX'}MתvD7ͨ-rQaܓ `m6(`XyhlL{qDTrnNT-1u:ʘ8(cArOmu`;Cs=?Lxg<#Ͽ.ކU+Ik4Qm!:"j<vHdrVBUg%[M⌳V n!' $3A ͋|`\ ~ (~gspѯ7MzUgM̾nA6(;.Eg>^ًJ@nԣCOlŦZAbxo€7\']a+ʴo_]]9$smx߾įI.cU*Ĝ̨"= \,U^5ĸwEէ8Е, 住,ie2mتާA~HiD=S/O9[csoʽ_(l }B+UUqo!AkXŪ#IF{Ӵ0 mZ,~3 ]WfBx)^ x2 SSu A΢Ni7`6 :PhA^ t8ؖw9uyŚܑ[VqJwEPiyoRT]^)g[ yeT!])k -(i7}Lݷ..cgz +, t꼣H${woNdOgu'~Ŏ+ hYtc2S`% f<},Bݙd3`J@5}c$ #`3*?ȋcR)_<\s#[%$C|^c>opLM`_Xuȑ!3~ -lqh姍ePM3pO+'/F8Ut$Q(EueDg,XiTiG NPl H}w9vnh<ubPEaØF&}˰Fa ţOO?xRc?6e-'WXZ6JRkuwŠ Cmy2Mikζր#w Ѐ,4B!m_G:!I.59UJbZ^>dy j&3wݎμg W[ Y}K򂹎Bo Ih {d~Tdoqv.,Ɔ߿j ЈIK<Ơ_pзRVsUCcuzh}7#rUtgWx U,:vL^*̰U/ՖPč;f u |p%UD߷"7a-Mš&0q6㉳pU WKTq軉Tf7J&K;ˈ$qN/Ԏ6NP+|"SV_R W]cao`gUɌ\1kzQϵXwP M~ߖ"1qT@ ci XCD^ kh fT;ITqbfLisiz,"vt[dO)FŶ(|IP^1ᤠ$.κJSiL-GHD|v8R֨/V?]ZD'yRjs>۰2YDmdZ m24p:\`XBKe 3,8X&&:ގ7ZŴJacA&A4f=[m}fC6BrҺjWݥd,-ۊDVt$%~VbKJct\Mz%"ni8ӠH:ǝYy: _NıPvLec0F"fX2~|1T~=3WU-U' 0TLߑ=󽯥-_k:1(yS\V?GcP]wkXE-%`ot 2G/7RS*ˋDERLwI-[\S_j'BIMwl-uI%N'b. C5{*IeL1%3¡_u 9*]:bWim+S?џ+1P2L`AbYN`(NR2PydzQ&7&f3/#"n*mw,/,FA>"]{Q/O|x1WC̬G"iJٗ!opПZP$RsCjȦ(Z2_K(K ڤ98ɚ&uMvk!nрA疝}4ɋIyE@S{d5z#)Xjt[akp6pOºB9+][e8"wn״u-L(v|ޱľ@v&Hlٌn?,V17@TmuI;5IlQydd,yy7w~h}ҕ^ <*o:Ob| \wZ؍FÁ7a]E9H=Q$'My^ 2HRPh3SGUJ2ho51Wşyۇ7s+ 'EJOfim=x@̑,@*V՘%.j9- fJ}BX}'.but:X8A_RZwDOniqأ])Ed% 0CJ ZCzMDD{p2aX>64ݱ(F %k \գICa1CCx/naѹ{aR§}ʂdqLQoD߮^F#=]ŁLݞn})s{Z{^.TѐiW5ru[RMS -0/(N%ܵkjϠWcRq)8m83YO]b)g`*`K}Z Jݜp_Xq+8\R)fXk|_TlhPV5mTf?&1JÞf2fJaѠLn=yZ#-B{`z/|"|YO &Z,knyq1/~pfg7 "(x w Q.aגU#*ip+DݍkR]Gǩk: y#s~ɴ&-Cp$} DmzdQڦ&r?G۩FNJըl~Jd ܍nyxfb}ǺA8wgW9.1ɕdД4J!Pj^vYBIQƽ8#wLDH OaE6D#8S#s襊~ Ҿs/WR d#&M-K{4$sj8Lq 2 9"-04`za"f{~; K"ڼ}{ߑ{H?c;KWOEȼi?OGCfetxڈ6$_s.ŒT%ŁdKtR 9r7A\iJ)4ldҬ>nϹB5z h\] rAg&PH;*7sf6p#[X 6 {Wnm`BLJ(e!)էNe3' ztY{|8O߰7Q #0-m̑{  ?ǝ[=PLSƒ5/&e. a{t0K#m2=ې}"Y97 ZzM;¾8uOLo)z?#xoSR>1XR8c g5Yc7jhRhBϴXu>KA)N`=t!;mJl4_]Y9dAg!n}6ܑ-`{Vb@/=5V%43))#bB9PL"7$x375ҳ&Z?q6iW{ X@rxpIN}-}#9.4ncY&=šsb(׎u%p%Gla=.Bձ0~zIU.pri!̖E Z Ȫtq!,WԽ o(4&nngT (^Ք46tWCoJ ŲH.VL-Rj ̅6C,!A$_Nrh+Ʀ 5N 6z4_^wRQ`O0I XD[ i.i4 aIW[ǥ>6H53zڬ}]/7P; YK#54޴ Af.,݁̆OGLfm\>5Lܵ*Tze>{'URQX y!(Vhn7g ˬ. ½'&+䮛Aԭ4!ۦmJ.Ma3ԺJyŜ٠\o%0^V{1|ayTֹ0C fDMԻ(J8ӜJAds^;yW'r~fh7΄%v٢}U(NLWn >ǵRv832J܎G=:榌ٰ}4dJvJG“0"vsAkn\j[1.1 9&&|)ۍe& <4+WշaC#4R4H #_KM6rWJԋ/# Ӣ.ހTNlJ qJJJYWg;b].@C$٘۰ȥ-зUo9W6[IἍ4V2LG P"p:g'U)~*춷w?tz,0oP͡DS,#(Jy =NnmtS}2Op(d2ÍFbMѺ#u, ܏`% eTWM`̑oCDd6BnTA_ReqtUki4c1b<8Md?:|ފTXBIe'YR}c;M~eY%c94fU K,lU hߕ/8 ;Ϲa14尙J@Gm3ܹM:SdĂ7sHBٔ̿/T<+g"0,-`r7!u )*M,^Of~ي6v'6 |va"/GYʫ1߼@_=[jPSQ?C{ s}>:_k/Iȵhюe7+dh{)lR/nb }"CaJKtSQ@wQpuo(4:% /6l? ,NCJ#aN:qE0<\=qQ ($wPSab7sE{U FQ` FpE%<ϧ ce[ETU6 Ej ʌ(Lh?L4AGCՑt1ѐ B7EHInhg" {)VŔ" $"<"MB2L3TK^걺' Py{bC\9{byӬxihLٔI(}Յ&"c$V|fYST0 ՚9_^)bu?}N7J˝ߛ;DNm:GR{x8tYP-s LAh&zͿI*1~pT 2)!O)wQ#/M# t+ pɪg!?_KF@ Wۑg>qx' B~Dw!voD"duѸ+V 6 slWxGSKǠA*D?L|AҎQu$e:\ؓ陌o%I^* w1*7ko<$ I^OI}3pLr?X\T g@)Q/8"r+,T}z,#Ȃ\uU  ]aS1yd³](J0˴g:z  н!8`υ]c )J ɬ$)+]׍ nZ\l6µ+پMd EO Y)"r0XzU'3AƦv[{JuI7A3u#"k#KLLL?<~i%, y6{MK?i7ggg/ FLm?ΠHcGyfg8"|8- 03دj^~}Ў5 'Rbo Ԟ1n'Jњ8 n*^,=ٟ6t fVDLx dJ^4y)1IOJ+ki\mpg-@뵪qW4z„0Ú$r.\l Cmh1uJkGLMn @C'䳞Z߳I1Lh I =&Zubp[x2=t}ރseHHNYe2PN6|l,3UtDe0čh3WZ&ˏaf^סQ T^|hL/\q"yw^ס}qFN{prYK(BaKXΪtxT Wc7bGh>Whm8Q [@(O)A1tnM2wu{R*3\DA\}0=…;bmņvr"jV1Z} 2ǯ 8@VTi\:9L03`QU0Y036,Q7)|j UL$.JYU^=ERh i@{ޝޑ y^[1d>mM(zM]A:\G£bBlN(҉B6HKs P#fp-%dgumꌰ$ 1acnd4FpgVyç /43w!vq,壌26+حܓ^j-? mxթsB{ԛJ4C /a%.* - uYp;fK It8 +5EͼzKloIΞ|5n]zOdzY<9%FV>sRBq\Z j^rhcڭQrE 2}w(=&Wv%HcQ̋i/۱9v&$Zc'*U,X^~VIyGA4Χ,Ke:O6 U,Y6hAWba/3N6%|Crzq/#AoyCfm?/3)תFG-ja$v m+v}l!-|5YN0E&rI!fՙ4sɸi~R?Y 2rыVt`awtҗ[q剩F{iM%h0 &} /IԳ{8R%Η瞴09m-'K$۫ }]iф^aE/Jql9|'œkӹJ7eT6ui "l7Y/B<%ӁcX'6n…jc 6>2q(b :4K {or qofH8#,}=eD2Jvo[,eGi b޹3 Y"sZVJW5y],˅ j}DZ\ˁsX_zgbN1uA+PUg9$B;[sXo)_xL)'W O kČzMǤ*a(7 A=Aw#DhDyp2^"o[fE@z!2D7q ث%peJD?l-z0W[\~W_w 1Mz7iJilէ%v;鑂B'WPP qyEZha)=ϯg,_<{khBJ)byBçh@ ]bSǍH]P)C*QUZBK `s#2c``Q|)6 < )Z -'LM*qMl;R57jJ]tzlbWjB4 Ŵfnxѳ>߅(XCEռгJC]&|VEO:9EdO5VN2j3kLsWNXqP'K qDB㮴zT$M\tÁˢdw9JƬ NMKq3oA_G5E†@H6lm^qp-Cػ?v ]$kj޾IX ÉW 8>2H#E˲8A=Q8;zA _ٯDs|^A}]eb3A)V\b ^cwe:c+_|j aCa`tly!POP2>F O.WwM(7|sc.ۀf/>MCr皇@9T^&%_X(JRuuo8$e'++* cV|: ༮ zߎ}m/mo$/:Ryޒ&tI}$6\DMgzUN\NJ'TZ q&~U#*i{'90^7P/Ӛ%:V< &2dd[$PEBXݳH܀aQznG@3nN#قA_}A8 LE Cԋ+zKr~zc$ 3bNH'I60 _(4GTv! x.atq^`^MJJ2t]pʼnv*t?]cyx#W0eFy5stkۢ)]NHԧ}L;-m0(ZeW(T ?NY㰠~u/pZC4i*?CoI=x>zIƋ [oOc_xn:|/k.!!9MQfo" '9|DW'@ },]L* l}H_-bJQY۵ ɗ#0,3nJ(oW( 5] &~|V뿋B@O I^Ա@1ۧ3džd ;k(QG.nEC[YuIE${Wr<5>"=IľԨ6ulMJDsYጅODub8&3>J iZyA[ D Q@a/^Ű%͔*PǠlL:Pe C?J;ʧ`hy/;8tUKwË2}#Cg5)U#nl/! 0x3}E4Ueҩ_bhoQN.+ (Hu-?j>aoQ_ 0b\"``^0 BevI˭e (Ev) BNbɬQ#a1=ew_6td&8[5T+C#µ8KCvr[AoǽJyw2i2h 14{y4rJ kA>IXm8V`=9 fC ^Lk?z߫“?`1$W#O 5x ˬ`h8{݇k. 925j{uEwvAr:.Y @`=g!(ܦ2=ґPn7v JpQEcJG,)$Esh0qbcYKUʂ~Ia<>HrIMnn-3: C1A_ݧ䋈f`yyDZTs^Y'ۊDh>t| s^` lq> 0j &?xxt[Zg9+*/@{FN›ܫ %!=>ӊ>_Z z00x#1 t3 Zci鉽d}NJ2g*}6ᘲx@~nW`gt;$/rikTEj~gz~8Lz2(Uѥ]~NUq0Krg9T֘%`1l_&l9!.Κ :{5SLt?ve?Ehi]LA:lx,[+v[ M.}R4b1'4&j4 uLE;9]ҩ=̈́ci0re()']8H$T _M4wͷ|\Z[8y XlGrC..2k?㶆<,]0ΐ; ՇAs=Ea/%ÎԈ\"TO6Fh$ngBPJes:c^#ڼ,{D'urɼpfeR5>o4&sa}%Px|b̂5WWUad,%mRfKWJ7ϖx‹ke&Czn%?ax"y4&Erva ȱ='X%w~s1QAy^»9D>?l? .a]A͵ ' 6'= )܎tx1?$,TA/:]ON;+*_ C![Ygmc n&\o@@LC=>Nr0`L2Dе8M(&uUZ͂ΉzMĚ6:_>I-Jg»R+lt̐C-OP/N=dO(׌>A4ItyvDf\>zR呝)9?3&ЯG!sl#]F'F:]hjm]),_2zeI2~'Uat2SôDt: MܳEXX^(jnS)kKPK5M~MD0 x]kV m\}s13A{oJV-YcaN/;s3cv_T  IvdW~U$_g;>B]P#3nuN65!R4xlQ-gMKU$i{/iw^~ٔ:O(} 򸍬9T4of[@pMtkx74"tvX=Uۯ^dJ#=cyqT$ /x-t gF|cc͡<Opv[4N6K;klHQ()Df71@U, LL|l\Q&~Q-z/ma*`#Z׵"vB̐k&|a)%B'}& ̰mu>RHɄ@*Gvػ273 1dw%WڃT|PpbʥNP W$Qқ%Z6>E} PힱmqC]F;SlzsJBS\pG~m=m|]^WyJ%>Rﶲy+Pvi,vv qupIDalFfeG黅^A&w W㸫{r}\ao4@k+9f=C垜?nJ3;h )xDQ- 5[Ⲣ~f \, 'n@&rQ#IidjK*4-rX ֿ[6+quJy[̵wza % $Wn v>Ѭ:>Ѳ:3sm}@NvD+D5: GIHj?)xc%:؋6 *i-x AWdS1 Ï7 rfJ ꨟ$e&+0Fv%~+V|!![G37|m"UPIm:Y1uFgu+<`/^kѻNU=2x<ƬSYb<>o -͠I~!\|L$#Ʀ?()kT}ˌ]B3`^*5=qLagh'AdV^L|ܪKR^VCOR;;]f4E]&1 MRz= "see3jnoΧPӉaֱe12y%֧V|=1vq@Fk/B~DZK$@c^I4C0 U<%1N3 9v+cBB?BU+ 铿JUc-6#WB n_r/CaKrrbRK|Lzi86y9VĿڡNY1Օ Lb5V:  _ Tߒ\[/$mCEղ%-$!9l;] 'o+ F1w)J \@-Jg\z)5KiG V),SKR>+Z3sA[%u>vN}EzJX =|It@ ,4O)lxz1h5pGȂ,}B_n"% ]S޻awyFx٭+:߃tBs$pZHߴT!L1^Ɩ6@E.F\wZ/ kcM]bZ,;{8UG4}1:_"ztMn8>hC>0U6+ em3Gj4'[r,exd HG{9/aevMazo5qY=J>^N5_*KCBw/JnQ"R39k?r皚?a I=78wv' (u瘚47^ eݪd7N0Ҝ6SXb ͸S@WAP_H錷=OiEJ0+D\1Q5@Rmi6{e?UWco[.R&33g  CP1k>ӈO2xPcTNDVo? V"@r:2'ѻ{^YV+QO5җ+X|^> ):XS@vRP<ՐO2ސ hӾ n]_ݥE>ˎ翎ԯF bTT_RK:B8 +4d o+XMMzU Ήap$tk00_ jL,6Ӗfæ}nUb,{Odsx y}cƉnbv)ŷ3֍WGL+wf"Q9(_]N%W LI+4JdQ}7ЋkB_1df++[:X/ċarkS]ɃC^qczW_aγՔ#I>:IP.M-9-$֢eu:߆^ں}w7s,$]btb ?}iY]#9E B׋p۩?F;r~E;?qëz|n PEëڙ)J"TH}jekXz{ؓ)$x-Ĩ{}`|[{Ž))]d.?Bob2vLދPwwؖFq^'ػQؤ50zs$t!w2o m]EÆ Y./!!,ra)gT|DT8 #hcxC> Eލ1 K#TJ]V?-UYWXE α~~p#t9GU?м륺-|ϻbܘw@ҭԳiC5Χ n>8Ynܿj9TnP#i/C K)ٌ/p0,]4ϐv `nxf6c5$+%eUm=EOqT_E9m8Ijv T%~(>@g2dQHl 8zzv. R6A"gi%.w ԿW.X9ӂKW{HHLܼԢ(lB$5;ߐp".6ԝB6b3"yď |ᓏPaOS1]x !vCfg)Ȍss307mBoA"}'ʒvNH^$cޡi`JBlupTӸ?K3Vv,6~|V$ ߽{9M"^nT,l:,?/SvtYM-18JMCP`ȴ><^Y=Eg&A]lZ{&o ^yIp)K?gOqhю'OW V_K]e$G;?\ `ɧ3%=TD.lKi2]J(Cl+:]<ԯef/1OvFp;CɭrJjP oJ@)Z֒%Q៖BDh(O3T:~) d:[N]BwNZRo^zu{$ 2\t/ޛsNv)$kYrV8}ܸr'yNrQHmpw$&܊oF;f vNK dhW4cׂ;~"*,֬(!XoIFj_[(rAKy)S$20zEl [#վȠ+~S5_M3Y~y6?it'mb@ 8c*yRD|"2׋Yc P: '7)jPxR6$Ҙu+ahҌMb<{X5 y#a3!h-ZoUvO4b@Y!=z20;ݕI kBjQ'SRvaGNY*9p%[TnW70댍C=rT*r/~W]#?#QxoCى<.|sDs o99. =ѭ}e4gEҞ#x,OCPj"մt$\(CDF]Ӛ5~BSW~8)'u[(3Z3S̀Z5r03J5BJ _'2Feu*Wâ]0 -Eޓ_}%"(rഊ"ߕd(VM! {Qy-A@Wdd5˹}P0.1'\ZlV.tqqZ&oT_)r294J jY70+y>듄JfHx-[-DQEl3=c*TY@] `/eNBE S>SZ(V=RKearvP_[ġ[?9kF4;rfy  <uzH3nNG' 8J:( `ptñywh7(a%}@!+7UkruEfX@HiUo~0`9Czpw~VvϱVTLX*_°A`SE>)p4r GhmoGvr/v`7ÔRSp@c dv,qk5xŧC/>j4b56b X[ L+L4B٪^7waZFsDk|]O]"| =^ϥ^N<u%iiEz#me V=.mڱu2Xl<"RlSV 8V BY neΗI\ Ք[l2tN7铵 Y?SoP< wkW S)'ԅ#Cq2 0/@2il0`5M$L "N[*ٲ7kLL -.H?<~gy !q&>TV.f"s#ۿҞ2qf؆tP.ǮFXkx #3KZpxɴqT XJE#$/ fQUOT\ QjQZC &=CZe|!ZsnIXw"~Kq,pzY?qw(1>(*.n2](М'2X艢%@K׼5Ϳ:y `cub{2^LwH(B-9py>X'}̉!Oѓ!$BT̓#Lp&ʼn !蔈^15sm|#OXÚlcikG·1|"zq;dq6U&Y`q;n]Q/^/2 "ZPH/o}Gxdmd-I  ij9͍|yfi*Zxp;X)7mdzofRiOv8oĒ|ƿ4BNV_Z/KQK<\#/ڇnW⊪ #iyJW}jN/GG.ϑ U"&ʦU/ Ύh)D6On35Kǽwp MFl| vuAC#Lg]bUSl-61zx^~sP6{kI ! !j|{=R8/Fi B,xz\6-[svlw)ӡ΂(0CU\ WJxx `~sJ3=w*z&f@'kN6 6-R99Ul&W+]'Sl~\ߘۼغ~s4/3;y@*=*46U_qt0(i&М:.^d+wƁro:KM7>$k |#Fj5&fJ'[_^U}ܗM{QUӡJ^7ǰ<8${hsb+\txьcV\HD:=yo==D^ Z/Vt ݣ0H-n1.#_.K_a:+BvÂoPE~%D-9^k"ܦ ڛwyZ)(iF^9śUFJD{O;@e>+6"T@Lт,D(9>SD6z;Bb>z?ӡTx04:T8U-ʹFc$&fmM\Í[$db|w& D\֜K EEfi$UJmK!M׆@eg#ə܇ D)#` !0nKR;2y:O4;ǧޢي> ֎, u!96Y0OPفx<}yC{kEZ(׉-]{֑{{ ܖRh5Vd6 QI,)9u]*N2i֬AYB5%D&Zq%i U"(]/?oNEIB92p>u$2ŷvvFW1bԫevJnU<4L}+ԕPL(ŹvL.7z{_U䭜lB`+Dž\jZ^csG~hڦ!sfԴArWpO.E,o>h#<cx吥b;:1neb5$$w  y`sدTVpI1.HCĎ;/ZJSHC3㉄ke8Di.S06fX&\ J1Jfu4Β 3;H?Q#THRU>: ,lt1 T]Nb` .%j1/Ǣ5]]HdDJ]jdOO+(E̫o`.%~sVt{NA_]p:e ,i5Cd^6`S~aHl(!hO~PNL#,(QLϊΖ5zyOwh4u((hΣPѱ!_PoU]V;le,1Cͫ'ldm/ep*0aK軺qe/opoA!猀Ûʫv.#(o8{37 Rv:H͏1d6JJJY0dLUVKtZ)$sT@X-f"H9wVu:d $x BrهۼF͕ 2~kj ?7)o)B&Ӌ; /p?c NDEUrCy|Um?#U=J;uG[yw˟}@] UDAiz5j;Tܲ!{p&FěLF I/R J /ZSZ$@xG.F4;fS9{5{8o<$9hBUqQO|0 /2|?'HQ\)' FM'c~<3B V_!+#G/D=P4P!>9ՅCJd馾_87سe>34+Y -cvfwwϑLVX&7'>}IGV)(#tNU/osܾh[ `M] ǞEҜ283 =R錪 NgNjG$MAn6ӈɫJ'(^3:7Z K'[HaTԍSYkB؈eU(qH8hSen,a Zx@iNıy5/i?mi#i,dUw)q*/|>-ppЏgW;cR]xJHXf,*/ |G1EwŶ1lby8e@Αǀ:i%F%Yys9hFţEkoqݍׯ_NK9/#n hn e=I5Iuux|\GEYX--2qJbZu Fqn$ sCW]CL>h;+-k6 &j}[t7bsۘ&QP7oNbz g5_R>3ngIkN'ǾR7m;e'^~>)w0摤Bo{2P+,uN.o`L|G!% o-y@&:'A(p#}osz_c̝,FJ Asw6=+qBȏ:-¸|dN~z8bk*V׉U[gG6gńIXK=mt)C?uzʑ?$B,>>p!s`6*sV!:KD[dQ2(b=cKO{4 ͸]Әҩ6X7N;M>ŻP5Y~ǐ=,Zy҉y{Cx9k G*{tgL)vSCǽZ9y4/`ݡqn9eVZ+~/5]2#0E+x8[/O'z?>#+o}R uxnʣ8,;/MwJ#3&Yj}J8MxYՒD˰9Z3|厬jq'Q5_ [OkEd k0Vogzq*U" lOd4 cT%RNSw`F:I2PO6 /ҐE_PNBIPF4x/MP1{AldX4A0?x1х%!3u,vU=RM"Ip瀄5,,Ѳ܀=hs@ ҊX$nCZoeҴГT?*4.ڪJ~orLPxCzm魁ף>Xr$q853Y "!آNݙY6YoCf.$)jL$Ln--f\I\?Յ\Ƃr:'8Еgg֮1LMg; . OXo#5t;03֋.Bi^Eh`3ВSe&8*W8V/y1Ix ,.&e/Jsς˂1 u6>f"yy ,Ϧ$؇P˿tŒSoL鳩u5T~^.b_B ҈ :≟!Vf6\B :sqU*dg ]t1\oK[1[!Brz_YW8Ӑ,UAxKN6aw}v\z)3#N1r-?~U}Ed+e`:fRnkXu~/ 24* bS\3!p^G#{C>0hth9PP?^Cx.]9T,΁ YZ0Nn_WVkg5Zq[;r+uծhT&(Fw;}]@0j/Y$3v;Bdܠ7|klB 589f7J R0'(AE;PM "7Fx ꩄ͌3;8=a;ޜ$̶tR]=q A LzQUht뇃6͸U!wHFʷasSΥSnU:871[.7M0鹣5RDh?6e5t6< vQ "U{}̑ɺ۞k-,oH]YC&BBSdT8ygzsV6j X#+D&Hl=!P6ߩ e[WBxq=0='dr望r ~K^TPMLAVbl<=#vCѳ{v== P\R#Z?z\ȓu`Hg;8[.%bvKn+7d?.9ӍOhM<`mEry"3.W"1ImdzI]үTH$2azJՎF{1o9LeI'oh˔nV3a M,cI ;^KG[S\w,5W̓جxKiL{hN`D.2%#-Z {I\/X¨;tn5yL.-nC\Hfc xM T@@˭Q 5z1=FPТKG7pp iЁ]SGAky|F%նΰq!SM#ek.iH([Ǭ'&nvJk^ v$_b##lˑ0j|b0b!y/ܯ 'D\ 2pnܦq >/ڣ:ۛ-Tƙ5Ǩ#2.|* Z'!{uv+'iCACQ¸.I p3`Su#+E#tBKLզ$QI( ]:٢cE*~(bEr ouv&݂19߽Th2xn6%s}y'Kgb J!JuW 5էa\xֹ;{tc"op ɀ@zF (]QoXA2ρZ_E@xf$|.|ص=0.6@V4gp#ϛ>b:)}LWNÆJ%?1ꙛsvPa|EyOtxn![jU3?9-Qd78x| 6_D!׫0ۄq]l^2Ѓ[lOZ"\jDi62RN=Ht T'IeNJ$qow^D  j] I<}[ yӕA 1KyBD(N#=v|xfIBj2&vv}A/AlVJsz)ꐐ\V9:zl*۲%^چky4(~Wcl0sa _&-;ޢ;%vdG3]𳅝~Ǻ;YR0&'NMԣ1=T=-h;wrsGXR+CW& MMFoo[/ȿS8@p!n& }˝e -M0K݄22ӌp=t[t!Ě(j\uK'>.8ÌŮ1!~JT9b0J ˆG;T@cm`a :r,A4%~)Ez+k4 etQ}k28[\Z(æ9{) H^&?F]g5"w*ߘpfL/N(6`>nM;%r)M ZPHDmskvWzvz ]v@֔0ՈnZ+z$0{G6gǕM׼wj &`A0X5HnsZ$o9س~nȅ槕56R5˺xfm6)!C+CD{SY|D!A5+Xĭs(yw{kS݂:y'+TSPM+I^9⥊6I4LLKJIPg25! 3yG4FͰt#.J2w5YLC]BQЅmM cxQ_ P}[σHhGX e*VNoO ZKDN28cJ'绤]6^l"&/ 6'˞ЕUfҚ3Y1se\6 nY0 ^_8W=\:6)ݟϾi[jO1<ɹefV=ǸQĥFDN\dOs44!G<ʮ\|K3rt0X5>ׇЙt?.jmk>Ÿ,Hl`[I3j7vH#AQ0(kS9֘\4eԊX#j5kwm]f! |Qհu ;D739FGH ~zdf7F 8fꀅY byknWY̶|fLCC0q7s jX-ˎm>nC͠.-=r)915#.,ƔF&5 &8yRC@tDVT |+W˘]Gw7B]c^\z)4E{1 /lS|n̋Mơ`vyC)2Od?TLW+3<~v[SbcnIej`]{WЬ)aB8 2ͤ[R#Hѕ4+¨b h:t,B =$ USFa2@B~BOgL)8O/tBX1g'ܤl#̟nw QAK:<`J)UDvAAosTW4g X%: ZduD|>5l9$s3&͇axĚ{&ڦ ^e3le6?b ,?)h ²{(ǜ&YbؖqٛI 9;tOGa8v8g9(|I#鉋C+My| x=ܤHl/'æWb͍,S y+XsInoMq^P &w:>M,m/ нx2K(F?`Ӝ{CM]EoLa/1pnr;陉BhK `Fƒ%.pԺz? T…'e 0ʾ|o3nWcQܜ;X Ny"QKhcd,=3:TX\Z]!A/`2'v~'Ŕ0:>-nfhG1j+k0NƧNXPz_]͚QFs YC Žo4MSeNc$@Bϰp?# _8ؠd 2W+ !RseZ$beQ3/ ,м:4B*TbԆIX'EQ/fX/Wވ - aWtaE9dҌ0BN *cw2N;]<$-: 6\n hh5f<h>"_9}N[9}u hS;\?o/ 61d'߭vO:0Ltx$y}S% Vn,áYai▒H"ykw(a]đy(Knb>CmY?m#Ƹ:9\ܙ?Wh, xTRtZYtHZ+̥065> 禮#z%il'DxcLgc;+G`e*Q \7 {hnぞ2`"VōiI2Ҿ@rNB;3aߧyFW};Hw"wB-X =ߧC5ZXݯ[ٍհjg\Vſ8~c<gFݩgjA_V s2g%~$7,ߩ *WHU.Ь,++E]' XqA(*jj6^s(!4!i VObQ& %)L,u-ib&gܷn gZ6Btd~#:(┦G^[{NTO_\j)m)U%]g9y8 M}nӕe [>>Nj8e<4[is#?G{a}TgnQ׿.Isi}F5s_^'e{(uYKat.(( m8}4 \V79@9oQ; (xJ /F9 ٌC2n1/Eb!em6trN6O:j5}+^0qN'c{P^ECĄ< Wdt.x<2=}d5tei:/Z#)SZ:'VNP`tVh)~nbmFFY &.9W|@ds}{Ӽ5<>S7^{+.#^P*_#SAЬ#U = iP(IqtN82NԽHR;k`x~~Y[y} ^? !aA `ѢL(PR8i>Kľv0J Aбpa6]rGM5ozj%I 'CxR z@a!S$W]CZ`t5ԴzDW/G<98 Wq,hₚ̥0E0AWu{#4dz6Ndb }9[<oq۩V1Kl,P< *u(臡0$`-]CS3gƘRn{+@S1~|tfLϓ{zJ[xEPpq킻SҐ.ލ)9éh_zu5Q>x|7z##ey=z v%ڝR$/!M "̽iI*9%^ZzFh'};N)m+'<ѽo.aI y>gh tgS8>#JOf̌-'dgPkd*BWWaxpY?jc.GP#lVͣ+_в-Sb3^+DspJvc% IXS!'E.]2v1xVJu! ODv4l=t@?廙Pb13+zfe֮?J:o]J1 S0 &P9X%9VD0 S &C"ŗ:m pw"=;E<4kb]L٨drrBJ[4';S"[IіeIEa9D?fH6Xfh y@ ƎMN)d"g3f>>ZjYro :EOj<,u'xvo࣢w۵u~B9.2c5 $t71P>tO?,ۋYͭcV\.HW:Q*{ iz`G(+K(` [;}pCۇ_缶t n\ˀa?'|yf.Z7xuaq6KU¬6܀ʤ$v fMsq|ah>ۦGP 8kwh4WmkrRmU\T7mn(΅dv2""WU0 `np&T ʰ Ob {LI/zeT|xX0mD{ZW/ΊMW0 Øu/5 r[ }ϥLJ¨}dϝ6HmK=l+WN)G3[xBNF. 7J'VcI0ٙS8R) 4Ǒcd>WU֭7[s|3)IlxdiWŜ@ĚJfm, +8 }Col0D{/jyF3r|םƘSMMb8+KOU_ beBjngf |g75ǍNәD 3.I¯'RZDf.!^z>u yL=;mBZӹLpX͠re!zɿَiޏ*_Wxu e-v:.uA]M&PWL< Ƨ_R /v#le!ÃKܞz P4"UЋt* ֝Qc71wrF-7^$ \'XKr^"\mm#lrVCkIRz/AY1;xh+9mr"YPo~~?HDDBB44@`cRO@[+:KιMEQI*}bB͋SfZ;˖,0 koZ\BrFHBZYdT^{[4ܶ@0!`HZ}~[ʉ['C{_̋t^YXa-s&t'6ڍɂ9ǧRqeKC7Oۣk5͋h6 1*)ߖtc˱M!I8]Ua'T*!U̴"HkCr(҄B=v'00РUO o/Z^QGE;zHĘâN4*}}T xMsm=z:]`qj[g۠Eƅٓ;~{mi5%dVf&w|QvHk[ 1-Jg"?T{,IDvFj{V[TJ9o^F+~^Y=Gي<|c6^ o,+W\ l[1B8Ug JnؤcB86ܼݟ[9nE^ t@ "Nzpl=!QwUY6?WOEpIh~0E00HDr,2Е~7T/4(pz4VSN)?aUvQQ7n}RC`읯ט+ͤB$˄Ql,Y7dQ02[/4uws8ۂXG ͡?$.)@qh ~kQANO^Oȁ;lHCz6cV~A5x \m9:4ďY Fꧩ>]y!/& xsf:`i{RA^B-!MueAI15 N\JQ ƛ]!עB/gh\1x[R]䇷y3ݔVn%:f,@|B{50]<6Cmդ"p,v[b9^f%z@9RO&P0{ aۅ+L۹@yFܛ |QpoI `PqDy?o?'Gwg} /QJ ~ʾiok m[=R-9t:DyFtG$eыz@ p`>QQU@4P&_hQx.i2E`,W G-=93(݋^uhJ)YWvx@:F#V N3H4XHo`UӹX&/~ kp <Ć5b{D  *tQYsPb2XtW%8$8pfEGѳ3R!勵CvY禘) ޼~ V-nZ[,{ฬ˷ JEjoTO_,Qٝۢb6żq"Ǣ0c=.=rU2=v!nMjMi\s *+ga|`(FWDы;j]FM!@V lu.?ZC{$r#7I8\BYT\ݔԕ풼4?}GMVLjmaڇWs1甂^V MmŒXT$}ʟkb"7(BÉ8=ɘ/Rvs1yCPVڀJW$+7dH`Ix[pn0៹)\>a'o]B{Xc>}Nge,y0bccxD1Ǖ>4(u4 h炾^]8Ք ;`>cT.B a?rxJwsxr8geN жDD ?\}mZSLf j/ 6Ѧ֯HWf':9~ I6L'ُPΛ;zvc_åG_J~@Ȣ`ÇʼO^"u^?d浐~ f# QT&ԇi:pabb}{jSYaHFkPD+3yrv8$qߓ[F&`@_._d^qX*QZ Q!4Cl8zE,(\ ΰiAMaVz\/OPXv@.0ō4測)Lld dg&0Xí>̆r?x %PjT"F\6$ ŗ eu+65fwDč׋ƶ}!ܒ}O7/ Ը]YaØ|u^]xO )f7KPeG Ϻ| Yػˉ)5mp]̉Hr?UfέޢN-U O!,yxŏ0 vwoO-C׌O%tu7 %ٍ~Lp7kk~|9[A/_s>^m\?h}g,r."MqV5LȆx|٬‹?nԴӫ1diXqjP~Fҧ qwHVOwDz$b;d{}TzE6Ƨsy!ǩ؛y|蟗EߕdKҫ.bɮb߼{x@u qO1S)8o 7-ڋëd^g0 .M1:A-2(*5vqf+jܾZ4;a,6fzp'\Z[RN Ow֪*"z̵wtyti&c~k]n:0OyZS=>QjIBIps9:IaEvYewjcǺJ Z)zY1Yl 0jDoݙODOSXm q9Ζ5H:=BE-?ϼ82S$-ZJmb]yoFQr&z;R$w{7f42}!^]! oaEoۿ4pDT<k ^fҋa_ y [;/lɒ"|qi wXt}m-s Zdyf68'xQݾLqYi"łTl]iDgTB#FuTB|/`PD'Ed b3$R3RwPqZ-]yT#zLb=US1g0$L5Nx#~ڲҳمu6 <7s8k7m)0=j^ c?ATZ nLswΎz2ConAz-"Ѹ>$X_442 _Y x{p󮪃oX֙MUy'.vsY9"c% &d6-({47[cI鴢:6"(ZI |ڥ"IeSvaILJ TH8M\~K;P[M#2bY7LT 7ȉd/|G[۪ErOʂW|Yq% cS2:4|>,͚^$}iİF)SĕLW WۗB*9XGnM[`xR iDl>XJQO{2q_L^ÝGHJdcy]zb<Y)lnp*r6]gH_,@qARWm7NUO9/ #3!@u{ iN|l:ϊxR8պP9Ɖ-P|Ru#s w? F {^ʒ̈́59RuboVcW^xcedwƔKa;/cuKJzLHڳw&poyHSՈbg֬.Tt3_qO +/7s^8i.f$gFz &InԿpqqko˚İUUgE*֖j D%kW葈5ɗw4`VSo2oå y}ƪ.3],&AQq^xh8~v0JJ߈  ĭ\CBbSȿYFy]_h=SS>zDº\,4 "Dv4,Uh,PBldо+FSRohl@'vn =4+_?gS=`+Lr & y RFnyCЙ{eٞ.Z0: *$Άy3GPXJPP?R5QgF/E>&A¦4m9\,w{@֎a ;pa.uL3}m; ۓv[ 5 hX>WQ<%$7j=d;؍Xx(iҫ1yÕcӢiaCT۴hDx+HYa `xTS'I-dqu(ZV @KlsQG=P [dsB]5?uLmJePRJR? 0;=m}%G{vXx@Sa3ojRڟ͈ qxWiMK'Oj89/f4lRr^|s}ͩl'V?Z<|,0 补<nUJž̟yJ/A)¬gK. ҥh뻆ͿNZ&mvAN_G ȲO\=l]$c;\ʺjF#+mSMv\q=/y  ŝؖr!AetljN/ęd}~f`rqK6%٥$ (9X  ©߻.#k_7̒,>mEr<_Ȫ |cyA_;DK,Pr&x8&W$9"1y/P?k}7|2.jo9ozcDO'17-TNx23(~Xf2NM`;Ux~q2ەd-pY gBkspL?0:34Tʑ̒"={vJ*G\9bzvBx,WkgtZ'Y:)}WG#jX;R7 O sTrS*Lki>z,y,KjCgw0 WNɛ`ZdUP_:b%ށs/=[ã%>+nơQnJN,[ s]yNWWfє/zYR֡@:duED5GdX]Csgo<ȣ2Xѧ+.yelbCY;T2Yԕd6pym2h\`s֍HktR+3Y\!n Zxf!|ȍE=wdՌv/iɄ?RV !B p0:?GƶLiΥb+C>(wP憕;2} ZMF#'x FuacJ}~vXKq0Gg:5i2k%\Q N}7h| ؖ<@Z&J&DZbQc3c6cE%%;ot"/eDw89rRsq 1`?DJ Tx|s\ ~ "*\cA=A4 3e/'&LVa ssq'#Mm儧[YlE0"c`h У~vF${tʟ43)0=p:f?S,;8: 0Ï,w+e9[2oT$ܢQ4i!x\|rJ!zax-o3bpUHZ+'{P7C]6Q>t 3ؐ-8qJ'r ~,f?.oQ8WY G)YY.&; k\&B ]{- r<!BDW3&.o lQ8 x`?\[ՇH"¾t"O;Q-'j#@.cnB餤*Bm?;œ֧ἁT<^:YxDD-βt`~nw9鵝џԙOtPHM=!tHh[tw17&Ig5NarÀphL̫(_Uצ:6.F)5T@=^.op ;v9¹)uh4}O4 x4CF,=Ȗ'O tȗr K`ZŧaO gHKB`362\;։Hŗ( [T$GTM~_߶6ڶN6ӆE_D*6(R.[C׬5xA;H #Bvi$ '_Uu`#h&_@[UcKD aLDsFI!'yNٟ !;˔dY=w%F&Q3ji9h ܝ INfR$ǘCIIƮ2TD/%n^a ExʇM6h 1A] n9WC:se>cm, eK|xYYV_\-8'W#NFja IO& 1Q5,x@Gz#ۼ(;4xӔэfCѤZWz\=Ui4P6~1Ɂ4Fֶk{h0yzq}ǝ5ФSL89= G{CF+J76f(<]F=c o'Śu'TVgGl"ř j*dIm;B._f2=gOZ>c%™G}#I.;o#y y'xsUlZJ pZG%?\;|ˊ\+5mHGAziXڊW\[`a RpNxWPnVA (n%,SՓ#|XLbҐYd*c/zwmSл+5?彋ٛf]B(+WR:RE`7:<$ נ\ou\{U-#ϻ+`wa?J}F) @8&?ECr/^/C 4s{65zeo˯< WOi|=cw\iDH 1W\cU0V6|lR:Qc z0~HP"|u(ߙ;ݩ¹JrK5)flB wmi:kh *RJZj">8RJ5|C4gHarqKT5A%3kr;+cCe؟Fc2ڷظڙy> != .)pgc?ʷ<-F0k|ȚZAg$bHD>fv2w̻}ʦ!λҸ)ɆdIԾ^#8Ma:1&+`F_vbJPy^eԻ<^]3KпhGQ;TlX ģ+\3 m9$1'Uo%9YVZ@ɶ}C>?*bG$ H\ciֿo :},P$@t&(/g@l<@:_ڤeuC*rNUN^p$eAcW5X,܆j[cZ}HU2Z+ܩ X01~}01Lv3l%GфAeJasR3Dw WFR1qgw Iyˮ{_wcrzhJX?x+A|ˈf~I8+ܺkYI1 ;|%E'%Q̋O2-5%qoლD'9MF˽ pHBeTd`aƜ/p|vȗғAw)fUղ"5T;Rpg.GןVVJEd('6"h{ii:]~&!Ydy{N 3F)\Dؿ}.^`,+;A"j3IM{hQst(1Y UaxԈ­:(ʣWu-(Wa[/9g:%_@<ܭX{|~sJ)d4̟Q? /8YHV»]?Xi6zcN aY:[(PI "p6v˿FޓsMi6o|CWjy?:#%ȭ"[5i5}HCD**0! zk٦Q}vZsO%q߶~6IrutsO"d7mX1ʌ\2gBQr]P?d|es@^ k=X֗C1˃q?t3lXc ȼnEf{>veM Z;0]K{׹2^e1 ϻ+2| (eV̅CXt1ٖ9W|đ~Vcx hZ]H/T#e|LQ䀖+ݑA'EYĩPxh1{Oh`0Emjg1d`Qx I'j`&PȀh̚!J|:LI[No#Z8/7u@wNhy]W {Q[j9 Y{0*_ldJRy9$;^E9]PZ{4Ñw&4sI 5u6:V֗AX\\N瞬O3qXI'N>;v,$l Di5ڵyrǎUVnobqKف)кcP"t/H1vѡ ndf@E{IxYo7vw!ߠPfYCe"_ oe~>c+U~ŐeV?vfϪ r]{t Z6yW[1졖 R`(Z25j_ڟ{(5a?ٷ^]ߤT~_<Cϥ24 r%c`Ǎ_8qJiD`b!$<`2 s%eY'lmǿUK.$l5𪫎5ݩ/9XqxA%=9TA%8tT`!.ʥU[Gj}GU旂bm/ ~ٗ Cn2.atSyǑ, +ϭ]^B/tļ7sbmIdr^6%Ii@aZw?vpt/˜sWttps'~6$HgXH9ju6/A__P8ӅM0QR,(’}NǴ}GPnƦÿA^ bLܒūgpeCIAƕ~q8(?H|KDF!l0{nBeoOzg/1N8+)yR&'9빵ˏ\ENg`ux25{[i؍OfwT]ɵY= kC{'  KKaZZ хt 'pm/x!PS޷d t[Of88O7l,z <9Z|;a5 6`m…(2o4U?0Y&_:z06ᢣ -ܺˇ_)orj/Mq@utt,RkP"Jƥ*s5#nYN,v8TG.M ܥ l[Vt0# qn?};=0Ůk}oewpI[ 7l9 ւHcY, -MOg%u%oF˞yavP,,}?L@k evpOqBqnGOߎR>=Dś@l|-ֹ٧LhOam(ܞ)"RV:0qMDb&[k 9tM' 7<݌'?'d:T S uZ UJ" ӫ< J\0O*/YwM$ iϦUKi|~!Zb3߫$VIPʏE2 z:Q [~TlyP;BcctU ͟D]wU›@U6 b)j˺M=`͝=VC;}'Mo%CDF aZ t_\)o?.\\8V E:xݒZ9<}+C>m髭r`OԷOpOGBc:|Mokl<.)Ւ†䞪 [ULC&᥆ʒwq JKk'5-&m!e}KآJO8(@S"EzcVͱ4~ j38LwA(|֎h[GLWj%^/qݹoV"ġܒ`@KP ծ p4=/(HޒeH ftZ:P+,[dN Cܘ^x6y0NfrCo9+d t &p|n@.e)†AcFHG 3~f1rډKHh52 ިr&g6$ Y=ꁴ?! ][Fg Fl" j{@kƗ]#Hzcuy7^-`$ÿh8wep~|#@Voe nٴ^nIb<KԚx u'K_V܆0ҡFZY&Ly6nzvAt= H9:bh7JYfaItko9 ٺ 1m>0bJqJx#3cw3lB~W F_ڳ>"4V#s)T14/OI?5b2 S:Ȥ_u I%h=8}>+k-ƾL;5%^PtelYXpZ vcJIz$[h²b7w3C@i|3^)W#>߬" y ;ԅ8[G|ӹYd>kB$ s1z/QWzČM8Y.-'K &jTV`f"`/~=-eqԣ9l6tYb wvZ$, pKV  TZePGY1Nf1zU#fpP?xGbc`r֥r! D6oC"g\yûbAORT xM'\`F[-ʳ`|:5&v"~C20{թi X;&4 3_tݼ~k%ERUo{lԼd/_e^[Hհ!2@5iR9@Sn 8Gؗ ]2}Z–l*N$I\W}"TRPq_ج}1;/Y-Տ'6冥cIe1kWI-SmbVPbN6cCVRh M)P`\Kx9d_' ްXρ<gOi/h2Hn ^GbEIQyU @z"иMn-R˪ۃyEnIYjJBHTQZ`<;jh9C`[TI&6JPJxׇD= ʥщ)Sx]NO.8dG+lc9dߊ(0/M+ egho3l[0&~wiOAoj'?^t"|DBqC/Rgq3('$PAI3 $TT}aJ̱wk`sTKNxί0Hi=X:$I^M*(UC$2*PiV)̰πT! pK 1Mvsr|xt/\KQ{M\UAb rt  Ƅ qgp0]V-Z|hW':q:i|/A`LŸ%֦pP3[ki3.Kr*\4[B8dXh8ݭ3~!&PN(Z4 ռ,@n7#$0xGV0ir&C+S+2HT1Uqm}-6[w`K}Dz;زr26z~zЖaL;h0$tEnxFL ;ƛ?4Fv\JDG^u!~AkSԥC`OdϹ@ˎxo|8:R?$>[ٸJ3`3y4"0X9C8MZlm @ }~9"#t %8#{V)H*(0UW,7~զ.mpg3|9{f±TCo뫙 @xkw3X՝` `7Q`Wm'b.}KY! ޛ^wjO/~Uc˒`u'SƬoԱN<- sSbFtìzbsfAjt\]cM"{]2FrϨQYd/f~ \3 )UOD܍kiɂೝc[ƣ2F@ZTz <]sۦiS$=w<@,Þ 7~!sl Q_&D0;ccA`:,  o5Ԧnq cswZ,.sCeb;>n.KܢޢE Z goY58"L3/(&݊i>Hie#oĢR)z^jnSi$%61(A;2iYVF? l .yO 8]d+7Q,!qE |IK2h$7 0kl\Jd995 -ԏƒZ(`T 6v˴dRE nm{J6: qAVgY|ݎ3[夲pfs f&@)FŦ">۹x((K:u|7+JR$8gk Tx |&SD5n$i$rpٵ)4O Sh7?O9YAJ1p ~cMEn2+Qwn+3zthrjbtZ RSS8sX sKc5|+ /<y juiĒdx!DtjcISa~65vߖ70mFZjiփ]Q`vڣJWK&X%̄sOJdQvɘ]3xŮI?:9CDAZZ_!s؍(q > QP\ K7wayGg8V1ߝeH]J j39qF f%>hyF1\sPwv6.dU.EMli>X*QŌm>p=y(B@ån5o!b[1!SN¬ei(zK3b>" "/ w,,gjB ,d vfrQ3RÈ-=~ rzg Ii\|VH8oֵ;nɦV.9}l9A'4# OFt=t/'0:ǣ l0ES4+ѹ36sS̩ W!P]!eQGfߧW.9٠ZbI:Fb#&ҍ,)5xEU`*?ތ AMq.N.7h/}m~ŵl(<#r\HKD!: W7ｷARC@ENm1 W˝iZNg|COA^քFpuM 87oqv=S"+ ɈK,88r1vo|<Ǘs [%eo! ʠ{l!@IZLXJՐyCFm/ Lsn7$heإӀpZͻ /})+|/HE[GyL}g~ڳlQ!rT1-BO׌mML_k6JRq'K;= ߒG,I%@uPs qe@s|?ʮVp2MUn2d3[g#:[#P|S. Q^p- Gz͵/?pZܐ&-1߿@x_‹jFj7vdخW 6ˎ>]M!$L"j*teF)}r0^6%}OƑ$}=DU5V!lSUkp}e/Bݭ1+P/_n.I_?cq>Hc阦0? ZNޕ:r8rg4Z]Da$I5bYjҦWuk yo Ow8 Q"fI#DH_O,UIT7l-5wMwXj(hKlRzIwx+En v!6q*5{Bc/'fb1DE*H7) ٱ33{yJ+@" wIr]8*![z8#/RB)+'4n,v,D~c6Z}SAg\d|x|drXb|FaSYX0jJK &S(: m&xS$VwNƄE'[It?'ey"5Yqn&=ߢ9 b)SB#Q{1}IފDx|ɛ˃ppw'>߃ȼ?a*Ocw<ϏÐAR*t緉uqyzG)aF̌KrRW]08knfeBI%/)nײIs$8kB5hК_5pGM9ggTQ Da ^մ"@ĥ2*^ JC!ڸoݚe_&w =N(Z3O'FDS0 Z "xaC@h$%lM 1 6PdU:KX\bUE#/tE5W)m)&>ѣҁI.#U36A@uUe5kI2v.F#/| _'5ρߚ>V]Oʗ%;H =V6k㔨+`"uT .mYPǯgTE>=,>g#*Iol&äܪ6}Wq`4,=_s6zk<:Ȟn%A|tr3ݚnY ؄qSn~<(1Q5]Bσfsԡv !ѭ}?9HƜx.IgEOg N骶'`/]z7: D+ʠO1zW&L4E㨬Ry!BM Ɲ#jɥО=H fʇ`()n!iR; :$B114FR ^j&'qfp4fnH/rq/2^tZ8m%XbxܾcAS-%hm|^Ӡ g0YF68]sj uIYoi+|(eu ypkΙϗ.`{//U;];G;+kޒG8]pSIWs0FgRV$_CzڝJ؀T[̚dS4X}uodX$ [W%궥:cɑHcM6.覢1PwHi#n3?9eFȃ=Ax"umKxV#ؗ̽DAq3 t5pD*u< x?9$ -ܰUMtC/FۢrEfrtjsF{i|G 8do܎ZNccjԿ ?D >|FI;Qo렵@#? O1xP5}/zA X D-%};!Bו3JL32O8_* *z5ױe|;@xQ6[CV2-ME|N 7đYo/אJ1ql4.m5 *b H.a.4_S6%,:YJ 3NK|}.qpDSj)IEmAxԋ.&ՉA|2N>4:tnA\H]@W(,#sX)帳] ZIܖR b6ݥpNљ6}6OYa2F|`{v5&>4^|ηo(*b n+~4NP S6 iAp^H{hgH/jĤ$ьk%ޣڥNўS?=eh>IFxTzEQ"0Hz婖^A068{b.Ob!(@Bk/`&uAÑŧՆn](>>KœW'iF) ETk7Wz#'ж;ËG :e-XŦ"2ZnՂs@FI;[/`^bCinbI7ZCx=G\4t;yphCv [NrJd& ӝrۘPp0!ekBS׵*AQ {eӛF12P|y*hG0&k#W#&NA0o<\1EV%e01lW&/d ۫-`ɢ'snsgyZ^M5#aM3^}[Gf&)mXB7cS dxcik} G*:fHQԚe_g| 5aۺ#6]l;<0]FDզЦc! ,f[ PFڭyPgU6qYEw zӡ+NcJxx<̱kl(勸y7A٥8}&)Gms8ʋᓾ +A2XKK]d%h%}F೯n_9g@E!i8}n\Us<nqB|oLnwqRSԤDnBP>ZOy25­&\ i1P]݁Te4I #FCX3FWn;%5N;Q$%&p{{s|0ۋr8?\h/Mǟ~,.XLz˶G҈:]b_Y!: ͟Z"Ryi H'h`a=qwY|#s-)ѡXx4K֘¬\5A?dO&鳋ˎ!n)~y<z]54K]D[sb=1 Nߣ tōG CFlIxsҭG=|&Qt^i P5qϣl"*77ߦZ3z$8Z=^,د~F~24*WA[zt`<rz!H;Xa'=.msX6}hw'KG]pO1@]^A5ױ#/#jOsex¦ڈbGmϹN9yDBJUaut[Kc>y@xtg$#M{PSEM8#<w#L^fڭ_ޟ4$.hFԶx$k+ut"D }XzzJu[z&oQ:!Q"Al4UA|([4'R _ m9,u#cdNvJn>%qI% pm~~)g϶T>ɉK:w0f]đ gC8ي'sSIzE /7dGSXtl e\jEE96hGOm-q ʁ夤nժe$'B2!BVTW|W7L)(=$ qVw)oJVOH7#;,sh[jlo Jʜ,1}n#Ȝ, uFhO\?96H(XzDJ 2 ="DuFZ :p9#|qoߟ HK8FV}=Jv;d>V>DY`J9JwaqT6l[^BILy/Ы` ԹͲ}5`2b!.5ɴW=.bs9T%J.9UuHҌ 3{[[~&xIIWYXp(p vnno-&ul[nnl-: O&vM! mN ;ژfY| f5WhG?c:D4cb*J^8_xr+l e#wDCTjPRI7*,/GV/q|# 9j6|K5iLB"<{b9غɆ!hMA%ou[$fF 9ېmuP垐Y1 ]X5 'ɺ>1һkcjɑ(RlTw g|Xtꛅ3XMKqXa}[ S\~ef V[HdX[4&] Nqlx"%L(o2+c6,{>V/u(z,'#[yn/;r]Q@6E0˛[-9-I J*KR;9}C0cww.A$m]T74ɴw vWVei|`bvk R9f \WM;mC)a &iQ9+,1&A ^Ãu8 4^EҤZ;b5$)<.գhEtP״RQkZR-? 9Q!4,ĥw ܛgZRu|_8faKnduI^бi: E羉"}:3+%Y J-ǧrɜchv-dx')ȝbL'0Ht]ji*5?{緾 ^fw⊢r!7 ֧=nT{ :f\$̱D^mN2+L\膮ɽo4V(Z |$ k\,.7QaL}5wQǠ?2ȿ !hj'^}j-&Us rp?ٮ0g}5Wdcb1ܨZ6eۏ9y9q(Ðd7E7?G?7à=e*6 C^)׾F.ku~74Q2 XeՈWɌlDn5Fu8*,-Nrԏ$9 M:D7#f˳M[5O, n':!9U.[As1r!+@&E]V>/>Gci#|^SbuE6@iAwACzOCq#[6W8njIh+&pK=:EYr>S*)s $ rU k%ˊw$5y›z@G5-<0XJm8_RW 2pv l#jÉ0|g&l:iIg;fe1lv>j $]Et.ku|Yjn\oL=k'1kJPl=}E`*:ݬBSa`'IBb:v`YM MiԷcPe^qBF Fa]uVc:B[7W0fe D@mnw`'e߃3\6Hs|n E# ߺ#"Q\d;2OOPChZ-IrI{NPT+@y X(kҲQ&- pa+h |IP -=RMDacKf3DC{`-wO;yz#`pkQeT?!cXjֻSO *^e- !@<&Ku*7YĻ$ fB@LxEZՍL<(# 4 b@X#=n{n y A ~㉤=z^̋V{恫FϺ$t (9HF!I]B*K?F_³P%",C #W:0P:>L\ZDJѸuah>S!J{#kOf2";x1 dZ^1;Y/DwAD(w$kY(U^4U۪h(](;1wcd<22X6Ǘ\)m?, Ʊ{ٳ3Thi!hdkh*ʙ*iXךI%}kJPH\'W$*C'xZz0bX7Eᄆ5y mC8b k.PX/+ 2z95_^-PEƽnQ}Z2`2pPruv&yy8 lm p=B24HDN $Gظw)Rbz$H=wz`OA[Cζ-wHaLLl:Y[3X !X\8X/Po;} (;RŗJ?=sy!]Se. Xf{ƤN~si}a`qX$ 3+jvND~prD!և h]9ĉ-{fxA]/0dZtRND 0H RKL@^cZS2|Hl6L|>"5_0*֞}Tޖ\[ OmTX1 V=ݳãPs^j@*j5hH/[ *aj?RJL\SnƏui549&{EE4*dE@|/8"y5_%(.J՟Nfepaܩ'[3ڠ'ġ𘺏ZveLN\EټW3w"[&#q4Tto\;vgAuh W.J"(ԁE+:,myX* )wCCͅ!K=J>?[3NzR _%8[]d6FY~:UeWKw]rK>-V5oX YeLrj6^G}-鴅+O8a|#vGcM1@^J4.f7 TvUpt|Mkʍ wKr߁d<|xGJg,,)MKuS'+w c[ktn:0q u ]U$IZYQxőbP|:c]2\M]}.u;ÿ .!\A(}om)m/A$raJGR DwM Em-j WHO~oSҊRfG #y s/`u?NHZC \vlV<]ق;0 40ȃhDefr rd$:,V[0Rk$s9v0jd8!rGr}#6N\x~ n4N3O;av;%؊m4!b QVo=*)pʆޙ鐑o&7Ȏ(HRy"c''fBvv%rklZv]McZaxcțOʿ $YZAF~ os*޼+ O5-cGIf?})|<ΠSVP8?.40+_pqVɑxX:>3 _A1 \KJe6;|HJ/wz戽:âa6/r M]>N _Qf2Ep&% :.3%u8'`o5z*4z~rjf犉ݷNSruL{H"t$;ϜY~؍N_':Ys2 _wzra6ye*S6:v,B5h8RarPQd}f~>kdq#_po@!hW6a,Pp7kWsec4\&gEN-n4x#:G3UqiR׳3V4OR~{zZoģcY0R: VOߎÁFDv,NJ/"ѩ[Z4FOIf6q08{3Z;De P'U6$m뽛#˙ :7\VɘO1&,ty6A|l_gnNVs$A)${ V!$)ԙj”0Ϻc[VԱ=L,ӌˡĽ-ssRL]`NfDƕ n?6^g?EsuN@9X7˹E^g7ZmD%CĪqz998^klxޔڬBX`4;Sk pI ,lSB,TT 2jik1<; z$~ETх6WZpZA+f10u䢑ZHKڒv[# 17CPJa3)e"}˩ٌEX_v֪Xٕ ҚU%rb\)NI5q)98:IΒھW÷u5ȽDWx.l[lK$2SN(WE q{M{҈Z4~A^Po8z6bE0=:3^{{f\xxSށROq㟨U$l>d#PP`*8|h]|8I\"+qڃ!D=_&e {|*Ŏ #R$UT> s0s⇞+J&I88#ɢ.a8 Ȁ*cb//>y0%?Zt)):} 2No }VJC!ړ>i f g{)5$]+XNKDj}_V}" [J,C'7wu;Y kq>+"8 < 1Q it>6s?$ˮHxD _P?xO|_$TįNxHDX qq'&lzmvKkPn(S:}(JZYNV V&ۢɑI00np-lQdx R25JN-$n ]ׁj/&R ڸxZP,oإb|vW$LD0n!|]F0C&i|V{mꢢQ{<@G#6vI1${S?4Уx^^jUtH0`ݖz`Y>E<{Mi>vC@ȼd eh]2DIoX荎Tp2_IvφUv["G3+*,;n7o ;wV&_|>*iեD]goϱCܞ杁/ACL^Wto%+Dx_)AE$o.~ube/Wn[^r~r"xO2Ǐհ \3~,ա޲B g=ZÂt0b*h~"U{Icr"_0\~%NICnKݗ2 G1n#0b)x7pOG(e6,ިdIы\0leäjb'sab z(+o>xY ёf6M[lm{F,-` ;*xHt+t#dGWz:S+6>oX şs:TB:^]G}zGi$?@,xClT ܤgV/Use ӟ|L!t_gdQYdj9ʯf7*a>>͇a>_L<\ ^^r5QAc9f"MiWg@٥Zi-ПDOttGq;) WudG~;Ec yu8'rUbT˗8Tr계ԥD(׃'@ sD2V*r Aċ)fʔV:2x;6!!x[4}+?O4I̺X=V+H{Hw k<ڧO\Шd07ux솋3J9UoäTTu>lCd\gѩ0p8-nDm!H3۱xZ b+jX\F,E+*4i;lFg,Y̗|녌;ɇG$&Rb8Qt(ӐbbtY{,]!xUdeG&) j~C mwȜo,1x뚮TjME_HgBW` I{pI*51s]JYRhF#Di@OC"=c46 /F\˔H辆T5W霜g(3 ʘt)3ǖNvo.=DHWK=z5>S,%:L/woJ! Ka)vllWk! DG`[Y>#_jYP8nS{tai sҬA%O/WH"gDG$̢fS!ױ̿ȹa3N1*,S!J5CL@0h3]#€iGx"rΤ^]IL {#/Um3QԄhDX|NDj] pfp)lcP}Uzr- ϻUNX5bM#Ioz%˱#-L+EpaϜ\c t([(9UUȖ_-1n콨G.2 59zq@ȗ$35GrwݶƫL}5A{B1I` 0 JLOXLޣPu?Q/gklK r _"F uRorN'@.D4KjmQEBigv̌aB`+җ^ڦ(`4jPۍ;]4cJ=׿'˷/$LnH$Պ`K ˗IvfcxhSS{8geDymI[Y(?# qK4파e'$+~Id6pQqLXZsfU4/9~*)Y)|MdNz >$`Lr߫q# qcނz[Qїl;=Br2wĿaS_˩@+J>4unKx.bhaPTrr(TJV@QYznu~h`Jk$ug%$f:YwI_y]I~ŋid1/27@rslnmlC{gԻؙGBߧL'fK,輊/᜝Ux<[*lIM5y؏ys]vì'unP/D8=p;^$0ɉ{8t 8r&S c#)[+ޤs n"Lj[AZnɝƽn#qeiTg}o#!{ZV UY(iL̩%"ió; )A|uJeg50+(]JA}IG8xwʩ} V;{ ۜcY]۳MzIK)l`:| V7ϣ|wi {.,ܺ $u+Ylɭ9hQ ߅;$uu&j*+ZF?GM~%uU[lcKN {6;# ;7 KDBK{L<C7zlD~XabuuNV J@:AR)Լ6`W8vFIC~Yf&ŭZ 4Po:!k}Kwʯ;6|\:2"9D塥˜4Q;(=LLVLMp KM.YZ􊟫JzȖNCZy&T?5oUQ.YQܹe,cOP&ݥsdڋb3% .x` aЎBS0vL E1N5cR$g*e HFQֹLr<P~D R{[{qHW?<ڪZ+XO>ɳK qbև3B<ߜhby7*jw0(ar?0Hv'x;:}Hr"6(o8vu^4(y6(n帐_COz9]2qט^G/Uuޏ!"pd )HNͳboX&IRF0NY!|0ZWyEXd0\Hs ~؃,W< ;.tV߇U#Nj@[AO\0}? n&nMۼr'攚Foږ84Fy\IIJB{EᔯOorVa q<ժ<3/4/1̰M:7K .МyJ!2}[~pr_L 6J6ʂ:raՐ}#:Xu[1A-veNI $KC^o"mO3]2n xGGB!>llkYx۝lqp3߈Icr-2H6VJBQ h7r\C],g8LO`>R]è kK%ܤ E8:e_ :jNo[ =&_s@Md*Ν'b?[څO4p 笻w`SO0!хzSlaLUMND,A%\W 09/(^ m?Ն b!aԄ{0iv2gj=P]ӆɭV L$^!x3qT\$Ö)#':٠Ws.NT|hty!i(ObByj [?Fjc ]Ѵ8+&sO0z4eE++W6dǑh1’\`m弩J4 Hˍ^:7CQ$(@m #a,ͻ}<) 4a'7 xK":+lV!}yc^+:q&TϏ)\'2ʄmIL%g^2 oOAF~"tJ5v:E[.B% W4}F;6_T^`A7vo [5s٫Ihb(eù j0Ҷ|8pH5Fxi3py,IMɳ~J{ѰFXY`:8 KNs-vN< # %%V)ƘYMm̴ق.oB:K 24 ^^8qhxBZ.  k Kv ;ć0x刡4ücqiߢ#aG%owmSۻ=B%aKJ> @;shvM S+7e􈔀~P ğ$Wo~1LP}HۭLlpٽ5%.ap3\w qu!~dn?J[&eAVrq. ΆtA"%<{i^Mc s1x&i\>eځM Tm| Y'v/MI)ʁUG3vh` F-&XO|,K^u7kD!<K">=&ʠӹ;5_? ԢJie0`pl~ȄcZ5-8Lz"H?RѴǑĵE⫛[oUf?d?Z؀;N $4`ϗz*1tt@~mEPnv 3Ӛ8Gߋ^`"@kKFb /^䬂Mv}^Gs@Eh6m|Qm1e; 6OU˙V y%ɓQo|25ZE }OĔaTt:8pӌ@8?]"DkڄgXMD%05v_625gt|g2XDz"kSvXr = >f9JU;]hXjfX<3еr\f2K ]:YТ {1 zZyC8Gqcvn@N4W,Y Nu*;BZn}cw'ͺk15z< [2JK)H!6J&u)5DWjΌSO@v烷+㍿b[C<.@!^ >=Fܝ Qvo C-d':\r20-7x@m|&Fo{>tW)ֆWD/3Ĥ>Ϧnҽ޽'cjz6֎ s^tS!k^9i_z;d'gZ\KUCSdA/+JMZFDЭNҨN{GU{HZ( kD:uiSwGih ӗbQ%hƆ7x oZ.";$ғp4UN2}Y"O1Sp9, %bJF&}GعzEjm#C_쥍ңځ7:Baע0Qt4p[[c6U2|Ose%ENm̯UWFZ> =dQ2OujS뀤\z_~AyWĒEbNc{,\$v Bv%2{Jvi:BW|L$ mqٷe?b߿N4[D_ ȠY dÊR"|@UM#KZB#m1+KVrR_5 ^Ij q0QL嚙#ĝ05{v$;d`-_X yڂT{@0QD c^u=RSEA-b T}3B!wf0/cZ~*- ٶ_2HH_Wwⱓn,׸vA2q:?$=DsVtM;bx`[㰳IF%*wD\R1~㜼uhC:&hjG]z]ބ,?ȍ:!H}J:]Ncwb{wnC`2 V{DnyZERR%2۝1W0}ݰ{*sx }ND[ UM ЈS"nbT P<5갞|o^ a_ڧoj@ۇ :$Ty@Le)h#u߆XπP ˌ(A NSYu_E' lxa:6d@s>׬qepcD_1C4TNE o(o6*M(p5Du[gؼzII+B5Izc*2֟Bt pw_\ū>9qD"#,9^]u]E({*ʯ#LY]c_2>ݎ@;sk: w)Ծ^逓-ީi>!JuG9>b:UY@@KLFV=."h0σ^`r6 jsH.a@< *d܇an$ҞOd/?0)zӋ|!igJbS=b&6&.c6u D^´qQuttHQpz>ŽȲ'IZ6R=B dOG&Vkf4R|ⷴ iOx`k;7ɁKUxˏYMZ%oD?vruGȚS௿ByS{;tP¨9!r}+L7?[+2Ӥ|SԀGi)X Kj7MF ]풜.ި6+nD+Ǥ)juTn9hք9Q.qI<o׌(UE F"l>xXH -HnQDPrI[AwcqѹD\CrȎήjC Y򆝞f0lۯ[ϛo,-VQ).+{iPR Vpğ}9t?k+q;-)ok+/3lL3;-2H`\[A@Kx"[Tƭp먥=K\{0ٟR/7zd'j1_cmcEƆY@-p {PQ( 6qkLD#]V)$ $;mh~GQ(ݒT@h#n1<{ nCkU'k+j˥MSBYF~C59ˀhˢmZ\A_!AkY}AA|_]) Tv=)ۄK#j7"l7Ɏ&nR+Җ@(zXJbGW͠y"5QP8Ϛ+y$f FR9MePݽKfʽVj gws;%tW%܉"(Z+P  /iMٷUV)㚠@m5Swg$"דx#(d6{Qt#Cq؃8Uڃr o' 鱄.;C,ZdvopwyBr""[?9L6f_"3n3_|l,1;~ߨ:h| ٵ|ҡ/WvSdJHrkUOmBqzv8TƏVD䯗[ l|>;sI:YyQ JKƚ3Dd"ե?~"& mݥi_?B&o82f\.c2,ۧ(vSzjSN/Їh^'Wٯ2n9& |@ԤL "d٫z7XjEs 1ߩDj~z!QrIZ35Ħ_7kSK6\6C* a- ]P$*D+'=Dho.Rd_FaQYoqw&l+YO~$LAr}hxט;? NfZG "6ܗAȪZH {.-Le Am8c`z`/9[qeCIE:ڀՏ$:4vDzvmF6F?WZnC^듟,>yJ+4u,BEIPHU꬛/C=kVw`vB{4hie^)dG+#yF1TrcYF"+mɓZbC.%j1,Z"ZP+5"4/r0BY)JF#S..zֿwnR">aOVkާ c4ĥEzN5 ^ šVaTֿ8jiH5X1dݷ#; 5[:M[%X!İqL{7_=[?#|e9•ZUSR CN>zwsh !37#N  f`Lתh;; #`)I3G G@N޲,qG']AZ'YEˇ< !Ԋ)RSG*;ϞZ IC}Yjzm7W ZIn3v*\X׶&uwbqupE K; %jTAp_6_dMu|dyNMm[45PVhуgWbё"R؆GPGVafYm{5^j"vb(w/Cb͖gP: (3 u,AFY+&M3m lT)_g[8jBurzUy_Č+<.b⇐L*xĠ$({R¶`:I}-GЯXrɻɞŠt-nBvS3-| A!"܅)VF-T F1~R&x {#}gI}> dȺEp2I0.dsm]L-dD]3_z-أ֠n0;}don)y&QV%?mGR-3-C0eko đB{Q̝9S,E, m֎W䭃g@f.KToMc"hA?Й9un4EW0&'!a&}.1K~#߇nPG@2+hVY^]fըu|䉼UqN %أ#yOPvqaPβm#xABS_<@>뉧!vq7 Vg+B/A+?0Q1E(hRP+w`X틏͵_ ,u@u}#j~6F3(/e"4R-JVf &|Ft' a`7{ EW ihDYYkg9To$t+>+sfyLS̵ܧ(GUL3Y3f"UEh̀9 20 <ѭ9Vn1Y&!ֿLÅ~5񬿜0}vzJMhEX~}5p%|G@%v!b4qu)NM(\, g=,䠽D+[, `3F-Nmcf`*2[Déz`B.##SbM`wu,&>Bl0FğKsz *gJO؜Go{ݹ SX7[ T"Azg.-\D?]ЈK{bl[pUf*'ZS'pvG|U}tbY&wk!sOi(kHg>yJWbh=jWl@vG1l.}cXR3|諝n!/7P{A-;/w RӍ\>:I2pڭ8ݬ0{̤ W`e"cV,A. M?o &C &a5)Z퍃?o4EvWCx HO# Rz0N g_]p4<}BW*[Aޭ?Jҡx65W8p632j-ڹh6OJQS#.0rṊ~ VLO9=v\B-WjIwb!^/T=#Mn`]AmEˁZ!F<*/UΠ~ OP~\٧yv>mVcE"\"}CR˾_#dwU3y pNS?V+evi0o_1\Q&n%"㛓/20->6M};?&;tPΡղ_.!an0'ׄ|)Kڼ?RkXJp&"ߍKst.y™rR(a3Gޒ?zɓPoAݟ[iAmʄ Z\-(F7f?!R`ޛG,ϯՉ,1Ȑ kZHJbGk/!SwӖ$4Ĭϧ&cm+6[|HvK-"v9ퟫ%~tCXkhw/Ҳߏj\5h@<σngnP]ܻYɬgEHhrCʅdoso7ʹ#DeWKrѥ#I4Oa#]lLsR]n~+\. c YOF֧o$4|.>D"p:P6˻!BXHbKcdaoJrH0fi^ׇMi<өs&;?~qcRM$[uq< X $)g_0c^V}(& ~4 -u.j&V\s!Dpѐ8݄Ytaq0?)Z'O!U^2[LY߽yYϳ+HJKWşe`CP϶e[0f\:BV+\WԟvXufUx]RбTxƹ)FK*Lu=H:T3[b.x(􏄵&6v- F5cW.lZ:YT/v3Q7Q/{rY֣e^w~G^]zj}vݫطbz!s=Q2j_prs8-V|nf1Tgsv2j4]x^)!> s~y[$<0$W!8^GqF ̦GWNP0IQIh%a"&"Lѫ^^#n4ZEs?ժ.*i]^C7^/Bk~(B?m&vc`d!UѼ%" j:~l6C;jSBEzSZ.e&aLal{sS-tlI~5N)bu w_)xXtBn`j& rRBZ(EUU)'>wU;qMϔJJ\Rʿʃ^l63=Dhڻk+bH!Lƹm9qO:Ò/pPLY7~awfCΌkۗNCf =8nuGm:Q4Ai]v#dŕ] =GUA_|x K]tAaεS63a휃),qZ6/0ȿ_`f;s_ 嶐eQjFv&C,9 4B;MaĬ$9BRN/?>Ɨ'BVPy0-f^ Fʔm~]*ޝSʮ9p=ˑS#(~ H,4ڄo`me@6o-)Rgpcb(73 <$GL3wI1 $+$Yl jf-:op+3 /?s/ѽև%ʽ: ΓԴۻ-1 p5f.}nf `Y6dA(6gŚi"."sԙ1dGMrP8qLB ~QyCJ |/VCɦ|s!H9\~9-&+'aC" 7p`AŷLcn`KrJ?"%HH~<_\s8+tV3>+FV¼8U/|j2R4+yѹ͕j[t4NbZ_}(b2؏f_̱ÙKt0γ_)_BCUV>aHǽ*Q!ԎX0.}˥e;%-2Xzey7' 54e"ҏyruB$WVD.;K 9pU8WmPD/]O^rcwzȮƢ~$뾩o6H6m>f$pgұmWpX! g-d?gd1 R$R>"0ݨ|9%VVZP<\A*%S**З Z_q @ޞkxI#ָ!b\ k-pڴqـck[>R,O]guxmխIu88Q~sDy!47yaxqd` p% z+[@{zs6n >zh09TG9nXqA G&??I*ř8}3Hup0JQwR1f~~.B{юE!' *{)Fq,=/3X^>O5m+`5'r<TFiRSll/'|_俟V# Li8 W "pĽ\R)u_ntqu"9䭤)V/OkL/&0p}a+BU:u/꜓fd>z="U_x}p`܀4c 8͠ɰ/}:{+@ZLNǺ3:Oq01n ZD~tCf6e$,o-HB0o^$_m@5C ;fG3`S5xJ<[=hzsGQs!d/j S߹ͣ3czU3 2"8iB2-c[=gd-l9QQR> 9~ *8v˘TS"9: ,O2ڶMU84)EAzD䯛%y#p}msur*NV{`k]aCcgaePƌ3_Mj/^re4ć7-uS%ٖa MV<$Ju0<`!uҩk|];?YLˏn0ې-)wz|2lr-3䑪-|1Dnǹ'~>X0$h0\C@ }3lOuj͌LabSSlrgPQ%Ê埪3[ÊܕбOPZ/䐆T6^ƖvT{*BL9ZǕ;* 3lUypU`eyWB[Uh๼䀔 t&LU M?F>+ jӅ(L)k%E?zEk5F `g[U$uQe96IJCp&19?W 1ߧ8uoIGa2+sEWJZjD)l! v:_Jwuc9Zc2:'3xԭ.C(}̰:N+h@ Ͽm#( ECS]D;YWIZlg K YHlc-``e$69+%~ yý%B9TzꑢH/HK pt42rhy's8w@ tG3E:e Dݤy~0.-⯮SZ5zչ*y>Ve݅TF@<~>+oCɋ\Ҥ!FoFjqOoЍ*56ff^~l%kiѠ} 8hfҰk+RiP _7њŵ/Nwn:ܶxׂ17h^ut7B^uI2/5[47P1A͢b2x~PjWRπ4A:K?OIz _o@eF:!{>f՟7 vzdWGcp*v:iGkHlEɑ^E[.; j=zg,ڎ_ YSt-ө@dDbJk#λq]BfW#==xrP-~+kO#%;PtƖ"D!73x.Z[q6(VZ)PEGDҤG-M+bvvEe213ZU =Zo(#6[$}O%OR7pͦ=Hd彦ttp;uK9D ZkDl/&&g9rE8yOߏI5!Kmfv?RyxOɌ W±8 ~? MaŠ+`n` K̿A8.u7n{ӊl ĘzBP# ح7JS' }=J+`Y4)\8p"Ny&ֽlpN;ݧ =}qM)qŽҢbAzjyv92;#B@7mNXN.XvETx>6Z5UiI"B՚EK.ATJt]%0M_'TF rLfȭI&`0¥"M^OBU~3tvg&4F[ U#> p" @[eD(hZxLVΣR!)e%i=E{IDy]W [@ލn}'\:Ztx-w°z|'lVSjj&(ltczo?7:'7 ~%`vIk)]M|c|0bz4y&}JŶK:T]j085hsinauhѧ~'I߮y’8fU9ƲH*y9).v2TX& QB,5>OD~exstO `e@5vvm{gg3#{#FzZtK5Ms7_2Bf~n-j0(_ZF}F),IJgD1: y}+MkSHȪvn`Z, "S-xSizwVBE}" 5;AGn8l$M'S~kPۺyx:٠4T&4`¹BjݷkHҨ?c$@}J<Qk+r!*uUؠɛh֭甪l~ rBO+"s/SC%٢B/YI4F40n8,VM!o^&@uÈ#H֭C~:L3K#o#?tj%p]wGI}O+dP:O9כJ(,@)72'-}Xc{n15K mGX坉!Un2HP:\BvˏbQE+lH%qEXZ^&y`M/K_ԓ: m:,~ հ\qʥ nrJ @54T@ }W6 b t2U\1yN]rGBFo:oPT E?B&*ldHgX$#Tdِy'GY|+ID3 Xe ȝG |!iQJ1E ~y䌁='qWH9 >N]Y1> [k)9?!lɎJo|BKHd=.D̼9q8P]RCͣmu\ Қ2}!6^{:r-P %~bY2V$!tzz+.VҴ0QS@wF:RKsjjo1LC͎!RJtXw%KrϚAZw+[2w 6w>Q/\XIѭn9ۃ|DcgמBre{n^gJ 1T D+m4R~p0R~oHQ ,̿-7ƒfɂŇ26{#Ԣmgƍm{\>A=-2 &ȍz$WgAшL|HU-I!ՖTu^Y NECsf/òVN'Cmդ`]WSg+C)G2)]0c1lX(Ehɒ d,M1D5]JqsHyސ,7Z$sWxy=?DǶƴI֮ 7L`բyPDm:Ҥ/϶_;5nC); (׮ |kr FNw$!{{h" {!9ɝ|v}8G!H"Nk\Zځ&Vj a4XY[kE1ͼșӱKLT!vb0E']1eӆڀ$g(q|dmgԴGR/.YrkPFE!,ٯU@T8/l6\;w\EBYкi/ \4utٛsB2GЈ~I5t jQb;&c@$WKDj F^=@MydUd TIUQOKF({<& oz.i48 OZ!YɹS݁V 4^V=zm\r+))cpgHmnG B`7{H\g͡xfe4ߨ&Z))rP8KE!|Mm HR1f `?}hN}Ҩy5YZ2$RJ AjJhsxDz=x^0 m?xUpbZ!43h%Pf:Ab[fu!>%RVz?r.׫91shfHwj.^T,ZFFqWd W^EqʲgS:%qޒ%OJMuP램v˸JkaoG:"?>Ž2TZT jܻCAb-^TW)eD^ndv{Ye/ b[M+8%B~{UOTas:qWҴ L&WIX#/DM[|N޶霧w{ocP*Y,M?E}ຑǐrW(1?y)1rC-DrXy~OIaQU g[/z~ѴҥCTXW.}%{\v :-Z|wkbCboOݚ@0h}iPФ(.Ai77UFto,nɗMVX}!mxž&^Sz:ꬲBFSB-l">긚$,}($Od(M7,\.X8ZYG*nD*(eAm kѲ,c18/IFrEㆁo6R tiMg ci3U ˧nNW8qi)LTcx DtᕺT /{tlKiUWZŸ 2ӫR(աxX#ke!L^_'LZ=߀wN'*$OZy8I8jB2 0$ I%ʼnRgjz3åo\Ghj 'p7gwa-{O*ag.j7m|~Ǝ2jN@~x/=)!`2|c%,M*ڄI&3~sCrk?1E` x`?[#2f#\{ɂ:Kyzz 7Z#ԢdKDD4End٤;aUݚZ/up73Lh1?*:&)О"-G{/_HFoJPp_*8_TL(e72(ny^aJfLDe@ W|M!bY~CbGkJThoJcyP!ٮ%ڴ& QmXN)qx'>TXyaV#mPyc ēV)r:'$Y /Zvs;G^]L e#ؿȃF +3ʎB؁`:dT tCXuWNS.~ܷ&E%!`d/;ZA2^[y'TH ܥAGUqf` J* G9 x%ú Rҽ}3  ick;<%+׋#s4df]X{$E%t4$_kʶCƒg%k=d z-`U1;Z8" Ir2y@!&XڋI_ՠ˖VoEpK>儅mz6VQ@L(9G)0qRgq6ߒ`kCP/ !jMBPK;em⶙od.pŕfLS#L*7Y5A0[F)6b*JO-[GO 4!I佖o9JJ(G@wcaZ|o3S4 > yVsJ IpHpQg]!٦QL8 Sr< ÊֹH12>Jpʣ +fo< y aIE0*8v!_!+6 9ǚW)B՟y78AJMʳ=q'* $:KFR KS  (?xϐ0l1-YQ'Br`kq a韧?2\iŋ<_Fo%V)vp וfc,;<gVHЫv-2P8H>7G}&(]2 Y1ifG@/ VCh/ْ+9an7.WdHAa=Jd"#h͡[ުõ }iRpP86F?q"Tbt9},z *5ƚuZ4E֛ ڛt'ƷH Q!.{ٿ)%fY"GkO؞ER6ꖦݥJUx6 y?7Y` ɣf^ydQ,.*_q*8DɕȘN~!ktU9*0^¯OSlЙBo׿Ҭkt!Y`7W O!P+<؂8%jLhO*Pr+;r J3`rP TcʏS >6Iw `UWB\C)O8B[@i/]pR)côV@ќ"jK C'HY/CeE/()T0=7)T嶺֛B`Ǣ~;| ɕ\$To-7Vv3 bRrTG7WJɤ]ʹax=ørKB%DA{UXnkvNLyM<ឆ(D_вm,n7/{N!j]@kTcV2ʨMw_yKK΍ޑ>롟Pu&YS@1}UN1ș ,yH_Neh' СشQ&JZ9:S49 `[|'SĒt4L%%CI*lZ^GOHfTȒoV2~-p]qEӢ>|$fcs8%)Mj+eb~5 334f#?mj^^V2e^H"99BwlηZ> .| fN\.Il>AWU>xcBD"Qp8ES)x H/jQ7#d \wUm0dYzX; !}%ƒZ :yTJnC1kF/H#ÜfIbw]v/Y@ϯW~D` }[`1:D '[1 Y$ V*&2{4bI6䏄B H,.څFCXr }Q>azEg aQb)X2Uu> ?5%x}''܂ʬV1ɋrMKv+@ F:݅=B<PPQzƽslǒh),-ۢQG0ɮ&w?Y9v{$M +Qi΢. 9LcpW?b1ZU>}{BA?*m4ӕSyƄzP~z;\bxOKh 2MvFHHmA+; 邜 S--v- #eA4Ue7p8Ŀ}FԽOс|Ԝ ev75G^хK㧄)9"jKԪuyNjrYcybK1dluH\q1); $EI2Xd&Ma2|L/N?3'gBt a06t k bc{ ~>S< [ɾֶFĮ$dtOt%10;Ȧ\/| ~Y '`, to6mQR1HUs[Rxp, wm""B~[;xY}pw M Qf4$2۴Zu]GWC2%{tcfcT?z6tcغ͌=6{œ)L; ŵ&A`V8u*󼟨!eRK^$־Pb_)JG4"~cffjGrdkj[x*cl7]$PV}9I'R’%'9j=B /5-++^*+{[c`9{z_0cFC7z }hd`\R.m5 AcP&),i(EY:}utβw8Q9-^0&~ݒVɂa uzMpl9 av0c(r !3{Wj(GV+$^=9!䯜ܫtYê G̑BSD yk͵Ou''l<+RǃY;5Ĵ-Lc[Xկ+ MN_6-CUk={Bb[E<<7!][nB3'غTgv]cו){Jn͍[#YvZ+g jXL鞂~2>DsaX!3O-T}}[4@ٯd+gn0A緄>Y:y)܋#Ntca<- PGDE.-ت;1&z ,2j>uW2Ȝ~*>r(\gރg/T["})k'd XFнf+jZVyO*,.i$ز umԱ[| FPlsk1 ݣ qk 2sПV:pPM&l6 avKScjP[X`fȎ;5'=٠/_MgoABN|VC4Z'[&x\%x+LSy^ 'g{U j+EFa,<$GG(sl.jcC^1ٳ}#dKal}#\=܏ZيR<.R  qkQwmt8?XyN`ۈ* `nקJK_=Q)g\КϗE3I<ᦣJ\'[쟯6B_QKw޻S8+]Oi*~՚wBk0R85'`s$Qmxp cPu{{&XF}a2yw滧 Kz|JF|'aSXfglko>nNO+P'A'cT-cLXjnro ClB9=XZk)F&Id?z§WF +gw7ݦj[/9!0g6Xİf0jmݖvv:-Z 34k%f$oo4suDT_*Ysd[qoO;b-]m2H}mK4Q|_v^r7-7= >lZd@R$uݽWOSvS+@*=.ٸȢ??^^>T`ؙei4cs쉙\]VHaR Ƃ-oPupi%vtE[1e&zQ1b *Nj١lulk0T5U'/lb>yjP7 aǟo|< \.ٴqNz +a#~C>,,`6'@x;Es?E9^\U{A£ B_%-hơfƦA8ǔZ)h%wW%È̮(}-<~VEq' RUrڊ@R4~.-F YVjPU$3CegEyb)h!!?M"#k<`Jq~fJW%:\MQ_DRp.8mU͡,PHBl [2E:+:U> T TX=`%|٧Xh>)`wuI@B󋈐qѮ>23aң ƥxs3="i,WA^5hl]'|cLGSM9&㺯ȁ+gi/2$9HxJ^^u'{/hj[X@'Вxϲ4^_C2]օnrI2P+@f1 SHIɍFq 3|")?.lK3L͒Uy‰NiA8^#Xbe3]XN37! ,tKL]=$C:3~X|g=}f, =e|*NPHH)h6KFwXsOMw%$n%6puDG6KrﰄeS򅨳AwA4nDt(+6T; 3hb^b1+U7Ƶ+dmx_J^GZ"{oծgy {q7җprŲ 8&9IXf#qEsPCrHik[Ƭ9&O]M榶?.dE jPr65n**<,U4._h|QjӪ2Jw*SEwɲwDY* <]dJ wlstu(@x_ m싲c {ny \9Z$j 7@fEk+{Q,oJir ߸m j뢮/ŵZT5Wœ橮 n<hO!:c.*Bޞilտ`JW Dc+zL+/d~Q{goeuMZ\cl)+8u.2jH-AU Ss>=Xu/L$JT] ԐE;.2t]j[q+XMkp B‡6f솈-U珛*<ލ@֗^Fۏ3x@T[ @-Ό&ڣͩ$9vÙcV F핆~+lͶt_>݋EPH TvQaV-..qpͫ `(?<[ݫkT Thx?PbR^a@z$JU}?*-d3"U=#HeEu`rA1ou(آ^tSwrG9/dH|ښvh ]h%X䁵:V=M7^%3`~"ZۤS)wyfڣmlL8:4zqr2S"ksYTf|GO;!oXc6#/-]S@Aޖ^,kE XR9%N6guaAr^pZ<3": !/;دM5 <YъE^}$!i uuiH7ˌKfӘ e~V7ow |H?h㷽:w4{v;k|G!B-61cDAٝ.i]U9F6ZnCpN.* <u}8u L Dc~Yel?Ci9~W4Uߧ5%Laެr}y5m~}zGZw`n!`ps+9!Y^䐊 6&ЏkBD%*%d~8ر@XO;dw7n7SdxD;~iv6 ua[*0$G[;%O62PȕFVb\4$/NSGHDqd6?踩+#fu@HP=f'$-CfѢ'ۢH`=9ˢHor2}9rwGGѦ5/kS7[ߓrT3ݰ1ABwdQ3vhp8ž\d(HM> g j=InMCG:bݿ$ij8v`ut(!1 a պ*#P5(1]HoY MJ {\ohe{M_/A1%ྱM%b9C1|$|U8 W)6Bz1Py$E+cזR]d$QZ܂)MxSmo`?JPҬAs[DhQBuQ䮃Tcu Rh =Tu?b꣏og9v\{X\cL%lPpPh)}n '܄k3O]ö|h4jw}J({J lt,M Н㐛$e6E*wk4J2gm]|n{ň0_C7^txvۂ1eEi4`c匨[9ݡo\)U/|.â۟{RG S`+[ ŊQfw_`MTQjp, Yz~_]]i-/TU(߉ko<^쳺*E7E>nE4O:iN: %4!ɾ̗g~ fmFn>cڋ$2w$ROkBb=^h`ΟE皬}F6L!+&9׿:S€s`Zi\A?)Ye~#`up $Z @9B GfZS]*dq qӤVou˚F+-v#ڈ/X&9Z -J&*ώ&$X=gn@1d›xQPgt4ӄWf8PIT5ۆ;pҋXroGq3FE|hjXH3]]WC;rpy BNj A8;7D߭̅aӊO];kCu!豻 9V'ldC l TUgP<ij~7JKjZ+GŹ^Ȅ G`gF tFUsRL ej;]t]xJ_ןho l=E]-&1 >_h!dK J=:`dFPuY 3k="{b\v2_Lސ> I Ћx3 P⍽D/6-P86=oㅚM80͟)<*a7brhG<<)c͡vޤTvs/(Q`RUMeW3x4G |- +G璽h Ų 4ѣJ[8W.o2=/ %Zxp_jl0sBHFpG3mhmJ[ [d}6vUr-'dhI@n9&l P_RFE6QqZo,-{5u 4v?A _Bk-7Rh!t (){}u3_ԙp?>&BZHCBOaBi j@b9ʤ+vS#D'ڲei#"[9dYY \HOSE|EEZA8|PjςFnYώѻ7׆m'86u6A~,"6?hUߜ+;kzk4-Ĥ'WQGs Bڔ̰],fG-f_ʾ tP3`_M;)!ye4&` #:fmeovKͱe^z ag&J1oc?f/ '4J}@,Ef4p6VTT z;bԫ9 g Lz4Ws^軿`bKZj8T`WqY̿zn;dKk;kQZ!eW_ JS\@"@)hh;k TDžom _tDnA:Cfhp0t{PEXZ9J`fs(5n&KC{Z+T>Zh]0)-ӵg@r|z<.6)cZ5-=\}^ZwǤzMit u~}s&埫r XefoD\Ӌ1OCZ`/eNJ;h@qzQ[O/qɳF׺fƝxci]я8X҂Թ'jMИͲmck"(nζeԄUGՄIYJMb\Y׮g)̊g a4dԅCl'd(IFΠ~Nmv(Fӟnr)ׄ|CWBz-ՐֳF sE՗Hudi;B+Mh$'zM3ty Vc!1Nu;7oαh4d砩m9wX'ןT(ɚR>Y<*EeG6R}τ<0jyGV>+X~Hn%b!8-~3MpדOkb%RĢBь7eTE}E#r/:t 9s ;sH0Wd .*.7ɛ0:;eyǐ!)dE0v졭 .'q7;YZu_igaw5;;D!\[GYWH?i+erBs)vJȠνi#+׎nR9$RX٤"BP gY!J|~Oh2ңIjE`eNm MC9U1s~9gieMG|c!H[#QC tpvo-S$ l)uoǟTo7KPTYB'ӃCblS ؽuh9 D8(Mf QS$WjD4oB̋vGHgYΈ&%/_a ϱ*C)+׹y}u<!_P(X8=sad<^Lxo>Xz Gٵ0&gz}W}PFzOkxsAf^zyRE#CY3>CIoX=Bc'v{91QF ejB@WAҭVU^gIijT<-Bk~ L˦PXDP/HFߎCR$Aj􆳼KE> qCL W`_ d!]n7nݬF`Ŗ]RBX42cI8ޅ}z HFe=mw*Du|/BNxߠzkv9Cx`g۟$'[W=W|9q4e`JӒ'7$IkyHǶca,( f%3n[ŧuৢU0Zh^Lʺ+h$ [_Bw 9Q`5t,1/;7<`}`  M&7*s6j't~"H o t{ڧz@ FBG ֫lZG!Ǣ'8[Dv ryd02'huܳ+]i><֚c 5Q;ty֙%ڥ6/X_:T$ddkT 1ײ Anit\j@3'U%!UD ^h4["Y;g}΋3#-; Ѹo]iC,N:ӰeNKThw{g:+SӅB4tf2.7MԌv3^hL~r~؆6]c#` 5BEo㝙$6d~I5tbh&:'pcSB0gǺޯ =he^ .8"Ӈ EpcpDu־J2mub3E'r%Uz&c?\(2B>GhrVMٵ=_\ÎUv_iDL.b1@NU}Q9poN<$k4DS| #l92{3PsI `Cf?!s%L&^A 3[7 i/ҕbH>-"zo]|mo_%޴Vk@fs(ZUߴIh6:9/]{zx⯭I]4LqyH-6Fܴ oe^Ɠw=q2n{9ʵvγh\>(Pid1R#skpxG:1j©l"j"aأK%@pk6kô6IIS#=몱:6<njiސ~7cEMȏcc[ v?-]:R_fE󻺽MI"Mj_}HPم;[B44̋wJЛbjۯLuU!n1$gi|.6 PE8xNF{O[MPʆ,ꯢjU"䬻iΒug}}bl|#Fþ8b&;,ф/[̲Hed63;U]ߣƺMJxX cqF{2L6Dj7< >VJP{N ON(+/tJm7DhUk^H8#*wٹHa$KG`>i {zHjRZVsfemE~Nmb78>8`e.xϾY;L& YY$vEkH8Cn89QCfN <៟b]Gآzˬ,*d_`}/ 6Jda /X*|.DahbtI][s<&th\ݗb 5dfBh(F;8|:,^R*x&_kI(uU/[:yl,8@aHW[ ar?ТrT ,VVu~DDS\>]+Y'[y] {KC:N 5!Yk V7 ǦĻP'=ＢSNh2ǟDbsqRFfhb对 5C?LBl@4^-WouNo1|GӜVxau?Ced҉?n;@O$ VSsd,u5meTS@]<CZ gJÖ*;9ǩN3*O;t;bZm :BKPyh=H?ҥVD.<3Ԓ hz\w=G(G :?nqMyXݖ:wxYQ0oĹhHHAI%fR[Sx;$zuRE!πVJE8tڀ~tll"lrnKH\ki%q֟% Moc A;Wz%g6'}= ye%%^5ϟ;jy1!S#pDCy>pGJ9]Hܛ1v UK2$!Ŧ F_fh-|TBhjc(Tͭ@2I5i` 7HpWOzѤ3y;𒤒aN6f-T_:P 㚵3Y!~/VA:Jp WEx P)Qwܲ]ii0ϜUFſ'&z@ Bb='C+Wk(awmppfs2$Cr΀d9MJ\ rdfm3^`аp̍S[g<3 ΧȿojA ?E$Cr㷜߂z'Ԧ-="B# --]ĭUw㇫&?ՇVɂrșdf^%ty-At>AUE>k~9ȟ`O=;X:w 5-{r}!yr 8!ߤT39V'OU@PY8mPf‡jYH3'83qxĆF0Q޼pRt8*KQ75uϴpc 3^ږ@'/079iA:ȈFƎ9#ݨ.L'vhGedn,-` V]J2yĘ_"Wvfh$'gur']AKJ=/=)G|,X!g10 8>b] I9 @iUK}bʹG,fD(G3a#lwQmnӇ4 J*{aN`MxG]rRrKR+4 bW 8)k?/ n liΓ8x $^0@3Hj?M]=G3hhT.&;҉RV4t2v_&W%W {Hq #L?&9h?K. z}hs&V R2i".{V\xX2C8}* yu/[ԋF%w٫(Xv۷DNZAhxw؈zBM)ھ\[^h\ %s?co*b׵M!iT( -@'4"sItKgw(wMH5tsowYN#5Vyƕ 2u*=IxV#f7v)/s'Q+rOR1Yjk7"ͺnMuDƭNh}>Co0QXlC1z~/Ye#zWo+ \퉩KXù3N.Y o[ 4٧]c^#.$:GQZĽ1[wy ]&?o1OX[G{r5ebP@+jl7`'v\9룐^()|3pѻXmC_C)$ЧYiwQξ̼,N%^mU;qDX xE0(M"TBÄ/1Gp]hq,Ә[#.:HBl2_yC9g|Ojd),~S@nh63Luz|*>4q@0 HyXBADy^Q݋Hk2hm~J=$ B0"lVS87P5:jsSb5t̿kaWR_Cm?c}A]&y9K罉h  zj[.n˃}za².]yҦv3GȰk6AzYudއ2,:A ϶Ble i?{tݵ90|۪ &i?[WL=6Lũ& ̷?ς{MJԐgS!Y#}͉`>((Py` 9Gq&i/{O@x6$%DnxފROs!F]WeR.6 Hm[~TXmpQ9!쇤' "[Ӯ"Z OA}%eQ7Ie ZjC/-ZKakə_F- s11zsXtJmVt4/Ĝc-,D x{AXj8sÐ=`+ C=a<DpES {A}b8fƹ<'D037]XJaiu^5@s_*{jy$ J.vQu׀S,.H&Un@(ΖG$9۾~dʟ*G1>k[Uא'|i;fWלMI| 3 2;=Q(ǎ`I- dEa6vi7X=71[grSZζz 3V4Dzَ֕:ݨmWIq3]i".kM߫4RF ܪi(?jo5}dW ?+c-Z1E~UܼfIBL}Y"U Eٌmi]}:d$!{tjb@r[ wɴiO~Y +qpǔl|LW*2'1s/Q@7w%}9 +8\T){1 e0@'HsP$Oݖ2CR)J8te_ PCd7<'v;JgI&4#aڤ1(?CwU]%~ypl20g£RVU;2_pNIl^^/CzRN+i4IhrP"I$;.nmPD;+Z#Aɴ'ohD-r̊9ʋ"/آ;Dau B8rPe{i>C7<0 Cy3rɗWHKqRdx3qh"8 1Gb02Ki,2vMA*C%ݟͩm-jmKDu}.Lb" Ԣp2Qp*W?ǀ(Dz21Mԁ=nDGb[h]}0sTK}PkĊ ]8Wm$",Ƌ7zԙ)y8L kV)o(P-џpzl0S7_۰.-h_^%oI<¶sZܬUUC띚n/,@W<_m>>`PzqðMI/=334v`Dby4"-)x ya7CJaνZ/`J%eE?mcv=*e+ jn>{?e)KBt1565>O8y ,Ne ߒimb S9/ jdHFM*y@^ ǀg-EF?YB*"*?ZQ|3A(* H?K$;rAWUI^)Bؚ,pڪUFHDgmh/͕P(oW}}T(xk2tݓTkB}%b1Yt!O)IpqhY?STE X4-E:`.VJ_7SY#kٹ\MFX, ,8rʨDz'CS_QeވBYcj"j*s"G!_K)|Ut9z[ 5s(A TWDFȫ+-\5<ɮ8ξ4_Dݛ}Ys j1ŀX{1ui .KThʹ.Z=F:Xo`95Y:iaFjĕM)mu94t8Ǡ!LZ Ѳ:'q]ˎ>qXB1RS6u&N58W;Z-WOl6<^D Qy2MGQ˞餒)K=i?ǭ/NEe<SxR-` _DaZ5OKHE'Ȣ7"W(o _u30QP6d,ޜ qGQ⛼g|Y\!ƙ+mG^^IU3d=w%6GgQ/*\HhƋf1&7? so<eknwxH@/fʇII=*)(V'\ X^Ww<돡x^RMC0̆#SM ѫd,;qh]a1P_Gm3P&aPL?Hiœ6u~'jvJmA7U)t@M66Q)y'  OH(HI] "ɊYN4Z=ՃsCuKBQYJ2a%T#GфJ,vKKZXDIi1!PX5djuHO yFKW-X5[$"} U=ebhH%3v-4)uf|=֚sRG /M nstz# N)Ś-jѴ?N\)C՛Rmrʎwvj_Jh/l<6悞 a%g؆Yܥ5~W}Z8icA8u<0 ֝j>#U6 ge8Ԙ"WclIH1fY}Pv2}gߞكqAí8Qdlc#Z7ZhMԭ+F ~rxʮaRoDc#ɤANeYZ0$DXԾY6p/ 佩C;=?Թʠ8ӛ|`>d98͖npq85lə[~9b[ :ߞ %Zޏ( DO}6ǟpշ8g4꺙e0s8px07-Dz_K|Y(ggll)ǼY?=hDe"؍^aA(Pjw;C Ev^'J\?pw%Y ḧ$ *2ulv!)X x | MgEĢ}I@&|&7Fac@| u(f>=ɜ\ҍ 3EKR|6h\<, EM+kYSxぼ {Ml0G9 U5_?`$ؗ2qb޷^PPn%Іʹq-DaQ|ڪ!,Jw/=? CluߢHHG ,6ikp*##}9`lŏ]ЍTU|U5؜r l翗ATyY$a!Zw WYWE>n 8h+dZ~M{Iat2D{"D}Ո~"}Κu:3BۍJ!mw !|zza/ay'46?ƩFBywזA`r̓'! SQHEj 7_ENh4{jٯm|Iɳ=~<Uܠv ޞ;av'GE6tv7<.m1NK\*ɑ$$7-gqhSEg7#\d/BiZl"Z\0xg*VfI&U'Pa){9T%% fي%&fSة{]#pާ:!t_G*)uٖ[vm5S.F_b%x%:[ W9܄kc<|ijA8߳# GLdFW"  ntфG!Sz7z虳Ȋ?l/l4MAi.t38GJasQB2ɱ`ޠV +x]A{ iP`[Dq9pG&ӻyܮfhAUNa r#yYl*'zE (<ߴP?̔YEt|VP?-\%&-i[ ."dRpCv&!K±&@7 `% kie6]d:Q.9r4*qBo('}.T[tZIFG9Lk}J30]c j{ld"AteЪjpfx6oJ&M00C2AQ$IZA#}. z=G<BCF7ݶXc`|g3QIJu'la?U5Wf^yJРspB #yz[WaFn~Z/!MF;W[J- G*3 ~q'mDPHOUYNѭ=07`;}ő5sJXz\H^:FkPv!ȉqR8܄-  jɘ]1ڻ.rEem\(V Lvh mSde3L;@+u'۶xDm v=@@wawK۟](*3-ꣴ)6cm| <𑺟,?6뀞#"3 . =Π))Ŭ5JpeԠY%=Q؍Vpxk? xnb`0EQ7E{#s2zrծLC&k&_9e 8VYxv7cq:+ص\%H)V KƣccӚu^N"EG)HޛҴN+!,ćٺQa5{,즦$ZpDCG!~zL"Zxs?OBG&StzLo43PND _+ߒAxFOqhri3b ^;Jl|Y9YP}RfҶ? [PɈ;di2;k$լ+:IC >kDdt3C2ZXZ Ҩ>r_siX(<@2"$}Ǎj+^b=f˪>|v%QApȸfYɥ*&uL8݌~>s[-`'gwx 'bM]Љ.,]ߘĥC܅yZ-Iʈx[8`#4bz,5hW\ە zD1%fB, 7lS)ˣ6?}%$HeԶHqt!s(Lp:p%~gV^έ p HFO xT(M*d}u)T5K"{f 0Mw9CL<4"+R+ g3 O¥ÔCTs5N[t)QM+gie͢jܔy9q[N_#fEI~اn-Q9cjTWK3J_*6j~ yp4oY!= Cci ߟsYx ~`JMw`: u`S(I o z u_pÕNMTfLHݜ!ACOXl ;Eط|{8o`nnskTܞJֵ0U\vbey^/(V[l4Z&{~d~!nS,70_`/˿Ie%R,7fBi<Z臖G4ӵ i DF=^t }yo841-| t'q,U{&8jJAfu,hX ̑uP5@<of:DSN_UV#S{JdK|^?W$#JY2GmW[Ri[7 k8Z^^ pX^NLx`4r*V-ľ(Ţ' RL '[c =&(MMo@8 3?WD;HF/zaSws{orN{(PTzf8t~ar*;Tm>(!up׋R,gܣ%8nn?h`!&^tOOU@s;]eܿGp5.B jZimi].Hq68_9}:7ȥ 1ǼJt߳P}U}qza~Auq^3,ܾJehmi*>释/y鄒w4^0cB[v.M:D]S΃ fmcq "cZl2Wj o-d3Zб8#8ymz_gB#@ٱ23$"p0K+xM;yc݆ǫ =e^/ɕ8ͭ{>Xt-]+ /l$RrƗ.ZOZrWt{C&\dyO17\w߮d PV@>]gHjZ3ɑsb~5)2WH )B`ZV,8hQ<viN}XOCD+!By<)Fd1D I~.IL{]V#I. !!L^T<¸s(P nEn:>-JJʰ+LC<|+20uk?;2xnB:B fq/ طd(?``za7/>WMu0TwȎ70dd2Efur2O]2ѻ~ g9èGȤSWs=ItvQ'Wr< 4PyKÞ 3eݣˢ 'W@]" 4a[6{_tfv"kBiLL+M SMt=s& }j&Z;i3;fQ;hcXX*_T =LPrmZA8' ;m'>U 7U|c\ U, .yu9۵v>p_bsO MM< ,TL<{޸K92BޞynI|/'K8PеREN7,td_l?ߛEWwV |ՊO^aS:xt] czC~"G[(wFeetKR:Mۛ*>RnʉӴƝĢ4E'p087KIAw6YZNc{ }QD|n=da6wj-W5󼧬{.zr0-MDomӔa()WhzQYZ gkFhf1=;M->]\S/{g:38k]wZǖ1H<8Prf2§5-NqVxo*M^K"2kU^W l!?rY~[ & =k9MxC椐dBTDHmMڳu"6Cap/`k!3fy>?fHKHA);F*XEԇ1\ya7%3>Ԙrj;aHrQ ^PkTWHzW ̦@ q)0,if##UF[oҮ=!{6u1lxK"1u#rP阛|Ag.E+nek90!,8%8vb-,`fkHo:3oGAs.g2 -AEm _X;Ҋ}?ͧ όVx!eohbw5RID6|QV$xBAM5˹ -d/iy~%o K% ܤnJJ٢&il9x|\<_掫D6#]DfэϿljԯ}'qL'r5FejjY(FW ZۆEK keq3] Gl_&7b 󩓗=[ )kX6tԦ3ƇZ?P؉7+at'pv,N!ʃżc~p }?Ff+(UN!fEom33$gOSw@G6tZHFJF~Fߕy Uo_4߸=-7zm\#φv:K( naIBf4Ln"tQ Gt'"pYp*.ERJ5+# S~H~pg/"N~9zWFo"hOӟٔdnOEGcXv%\Z/8b8,"Nȷ3myJ_ᄁP鴀0̩n :amZ,a3:k3AIԭX%Τi-,:ulbN'7^gVh2D}C>E|PxikhfGNTK''ȫ 'n dR.ۖ.Ҭgt*i2\9 e\5`&rA.ϖ&_M @ھ}bz4%5(\9lFdRD#$Tl/S]M /ev {bW͛}u,ŠOW'aWKcˋSqHZ8r=q~;*>I"ei25$ h}Hufk-lȠ2PIl4 nd ;7߲Iμ(zX#̐=VN!22US [AڔN a#! G\]V4zS4Y.vv!FG\RHy(AknXt"R։qng$,?w|(?v\a2T#j_X (CJ@04K'U—dy/|ٞ6Y.";CZGC m+'iq6*& D/GzQ8y;f u"@q&lx);=xϠb>2N zu&@p"SlR0-k g|]zW̫r#8Rq<;t !Z=>7랒P[ׇ nH߽ӺZeU /02(l$N.Q2s7ڶx/k}dӒ"*3(!,sLo8 ʊyQ?xnM^&'Kh+sT5zj籲/U~}L~|XY}O\.K_3dIDA Iw'Iv' JB7Qrkӂ$i(x@ivcW>_.i|Q94Qq'{k{ԦOs[B#"n}#8Goz٩UHMH@p6 xhd!d{fz~# mjZ<<iάWJ]%3Zmea5=-i V6( $_&)x0u-׉X.9Wޜ,3>v;bOb/^W-Jhay m)Blt J:wU7-ب09iJ"17;v*Z:cM e})XGjx3(|̏R-V !=1vsu'`gjz,CL/waZ9k/.^4UvU:Wb}% ~JKgU*!w+e쳤ہ#\_UA1bT97Acu*-@ا7I2I8ᵕ^'Жʒ%Ohl4 7|3^߶D?D|Ў<$5*KE]Y pߞ!z{V>>4a!ߙDbS7נE bW.7QuP\_&V\mYlYh1m"apڴoJ&̈́N>>_Nc~|5~e-}i \,3CX)ENIW o1\Hm$ZrTE-a.oL+ C(spÖ|Ln rl]^SfpθlKc&64΁I5υO5BÙ-ХG9 i!]S$BR"n~=[c1eV5Peh'hH2(9fhduVCba3eICl2wC߮+"b 'xM8r t" =.µyCWL dhKXKaa'f"t4bðhE%I(,;G ȍ߀W0̌&^}a|K^?YabeFTTu2fQ wYIuOG%m#Py69 jwkxk5MPlNK{MdU߻EJh ]=I4 Tńm,[-8#3_l*9 ma b2Y^m#o6 ;9}sfHh_jfڃ9?əG\J>?ȹ+!G<1VIyv^nKyEMۿ5^uC"%泥{ laA7/ut?)w-G6مIef]_zh9KK;ӎ*H,ҢfJ |X{nTU- gNk`0. tX `EЕ)=u/Ok]TYwզA+#6%E ߴ3c4KD`^{z(. &/Nc][aV[)>SL4xʎ {1MNfw58l5lderjA&uR@dFtppGOl.Kbef 2$oX2@ CNVJ֡~8=cu4a5K]LBUo|Ke9D3]nm&eQ{>!2 9Pm{$MkRqIYyPB7a\1٬sm6gbl?p!%[AVi,lS/!?qPfuq;2\2#@IO-l!Ҽ d1̝\-;ħGO'M.:G*?$BBƞyeQpLXN9Hcg;;|; 3k%6yv Q-p>qRO#*XlEBr4B\@V{*$1yF#7Qwv2. %yqmCixZ+9Tߖ;C (.# aMJҫ+%yqym.K׻JY2vIPԐ{Y@F(}B 3T#6MsH > [p, % jBcwA=rЩq단jZllzRԃTNP9dwEq㒸j&[5$xO33y44V= o1-$|yE7K]ehP%*$r'B6ad8)DdW7T/l}yv֢녻{R0?(j~2BteY?t`īp}( !6RӺMgyM" qQW6?^\ޓ5sicoҘ VO DއA2rQnr A*Lh /Jj#]6T\EM d`T{]`E<S@f~:cHso[ K|dET}f3/V`x :C2FŌ2>O4IJWX34\$WIY(P̬xNnM6#g nZiܔ[jF64ؓ LS S+ɱN~_AL`U\ֱvLڱXIҴX Ix{t,k7!Zl )!T3Pqb=orD-,)r%DJRj63o<ֈ?X1n@]f.͸d..DHzKuBUR>~HM JS_~aŌf|Ye-/fq3-J&*ɍu@ڻZuqM j1Jwz7ȍLIOoaHT[\L zFbyr,5}EG)6Ѯ$XFv U*9a䠴sdiA=M'o2:- /^?4pݫ"75}cG\(ί2=>ྶXJ߁v B@LZɪ֘2@s3)r/uO:P\҄ifjWupr2=3jtɖt§ o#eRad0޽Q;c*;6RSU;g]`&N )aX)G>HSy~~p~]_vST|nP#*fsqoㆱr]>:~pt@`SSs`zjp1?~CP}0kHnVeZl[F`#[3L܈J(V`gSe H"]2E!I*AZəHqvvhu)dC4ne=qGF01fA+/v.ژI|^L3҄ r/"-> S 9{/߻0aAԏZ{%rC4MC-;I3qK1S&I(/KBVH=hVe_vRXL\{A m`c)?5HaNNI9A9GlY7rl yKzK旚x0e|`I 1~xO_SQ#פYRB\Z:E,6Tj_bm*fb yhulB4"PyBKhW-)qW&N!uUpfRo{ǎąJN§i궫')-}~t܏V߿u v-I5I2~I>CFG~{ jzoeA0{mԳ q0b^LPQ[dy q9~b!Sc!TXػfv72'vPkS_qoc']“˖TVpROl)i[M ',wg H;o.$l[d[A_ sV΄eescדP'gz>^LfaZ/VbTύ|h^ 6yRzpU*&0(F;5OYYV\vsm\? ZsTd*YQ•Q2{6\y>g;YQf8J$?쁬u+Ob=UCK]ovRR*~BLD:-]F!6b4\DYb#"0n DO!ȤL 0ڝ|CCLL>['MaBvm݀qZY JP2hpsV*331D+Nt]k%VZT6Eu˽*7C$3!>0zu؂uUOq/##Q.g/$Ҽ; u~R/%hm"`g ,As&r?T|swJ|.ȋѸڪژYl <U/cpFOWCe3G{6Xhu~lSlf_w"5"{@nQ*r-Qo]kDuN8%ns@&HȘwm)}t@Tɗ: +: r oԐ g,* .)s|1Y8.-48̠Dc!+`hLX')r4$k۽I w=@ #jiV/9KĤ\w{YAe)z"f`NEuYX0ﮆu7v;~G遗cߴ1PVN7n8R4ܒ u*]cvoؓESl֘WJāRI/`dz"f!+rz&~GF֬O n?BBebVq4_k&<۴m\[&J~uK׾vd[V7U}||i Gр@W{:ܩA'vTؾ<,RC+ <*Qh 7x|{_nBĽ0q7' lx_S\k^7}G@f)sQ9S8-Z2PZ -,S{+ gK"jۧPy#a"櫭f!j? `w`5QEDi<9IT n*2m*ų$j[1"eZڻ u':7Gg$ߜ98L$X#ծUb?5}2i!´B1əep&^kg2%h7V#C.D>ρRal'״뭝C `;1O|ة&f({ \PdPƾcȖM!q"Rɾ6a|dwFI72Ep!}!-%d><2 PI1ڐʒ7?|r dL^[c%=P̑pbQeN%H?bʼ+/pw0 D+* AC/}|Pl(-c m &n7EVcyoU|2lPb}7S ֎ Mlf,]\.2E95yV+yǞhYdqhAS& EȎ _*iʀ]ݘ/wCsmYLIYw=A8 XvIeoCiRJ¦ݯN !FSEaq2E\, ۴80Ř啼\^,פxdV(& !wBF {҉YkS39 {戃f Jt,%U I#vi=Э=zLb>7m22 QdgES7Nף\)ETtxK:<>5h)zf3b,yG韕8ho֤֝ %VFd,Ǿ @+5+#e2JO#ߚ.QY#[fy$ztmW-,p$"q$^ sD ]}ZQ5ݒZ\=DӮ&n8U†Y+u?'O3[v7gU͌S#83ì ^;hzk=\ĝ;ha8^r0 qr PF%q<;7AC-o'U+8f4,"ǎdݺ!MYt(x?Qp@kr`)Њm-o7 n?LuTa\ѷ3c3!`$OD9UCdX爅)p+Pbs)fCbꞄ;YYS#٨B_ONᙀv^R \}@B&5&M?ҺMeϜB%ԉxKiJEL"clP^i`c okRD%0JG㳮B ]&0W?bh!$,:ؼ[fænp<q]j2W&Vbз*O;Tn޺&kNDp[ֺ}qSc#@,JtIǕ rf3,-`kH6%lbڑ0v5~)D)1SP<"6cEFUJ#(a, o4)߯ǭݬW0 dؙj~z ˴0XXJ䏇UY'Hx%с0{7s߸q5dI;{8~26OrU[2zV|}=@)X=@2u~:tŏ L!d&d2p'y%usٱǐ4oj>QU5T-jQi/H!8o,7qz0c$'ѥs13A-/tG-oVB_$_K1??UE/MD@P1系1N6BZ¶4҃\ЮG>2ыV;}75dRk֊ppvԞvTRE]HBbjB2)VOHsƐFwcG9X)z-LZ7|6pyy ٺbhcTCII(RZF>Jٕ<]ߨ&>$p{7;n1hV~dh*+Cm&Qy عٔ7Ka'mP[ Na%tuuV]!W qI<20ECZP~!a7D*yZ@Ψf7ZeiB}M;\s(*tHib̺n>+cc;-۰u8mm,rl" \|kڡULOTtȽ8וIB-}!G} D$ bQ=Zfp` DܴrZ1%DgJA:›d6,Wp <}$g)ʤ$RnRBCVtTI$$ҡ D_2|ehWHH2D֙d% =(z= hٝkC,1̧S$$x1j1J;~u8UWqj49TZ~FA"2qJedzh Y58LOxȏ;g%;B@u`cpQ)PF=ݚ j"i \"j,,N"( Sc5$_]!: R[c1-g(9C* k8'Ŵ}{bDWmyMZ,1t |z9Ezeuz dhT?IIwV,Q8pنLyD>["{} LgA5Ȗ+4`_)[gf$n]4tI`_wmxN;.~߁ǖjUzn}u,l ~dmbp)BiQ-UD^fL:Up4d#~Knn8U/ކ@dM4'}ks4]yԦ\+ A}W_0p/x%,WpɘЦȃH P!KCW6ٙe9`m@c 2c90}.3EPc'@Z|'Nosg5Qf-zuC 9l@(MK@rk_l^p֔*OJ`~ Fvp$", vHBXAN9&tQV#;AR0 l6HI{qt_RүFM閝@>.`p3Mt7`12ךhKݎyOc.Sڬf+ˬ?B5;s~? t$Lr~pavο hGO^p |upT\bm#XtOK'4}G.AF? lrRH^(ZXUoRvLH}j$ڏGlC +|1@/cI!llI˷xԿDs% åo+aNYӇTs-m{%ĦOi8+L??2/.er*1BKOk xρUk#ݙ̷|C];.Φ #l])B)c`H0I%ַ7݇!_ 9BnDb "6Nߣh#:J$p/CqKils iH/Goڋy]U𺑱;kZk 0 2e=֕n DiY LC޼m|lzV/ܥN69hʪ+.t87?{)&*JQВQ][q\Uk_ '֩U&}RԢp/w7 BȱeXέV7VUx C[+@k 96+h=-2Pc(o ~s.p5;YI>)/T%?>V%&|LBXpaa7.QT1Wm}S@Sfp eK[ke9B5(Ve>QvѢ .''͏`p fe^Ȩ"Q]{bty݇{[H\f>w?hNyAsS_qEQ o :@o;L\ω[_ jWӘJlzjk*z+d4_f՜Yt4PKTeM$1 'Ff=dS/́+yB,Aq9Iܸޙ¦Xv4244r09wb!Bpos0vD2/.ibe+R&`h&ٹ~Y'>;pʞ0y%g%_ۯt飶ob n=u4g`0LŏsjK^1)LCB΅wdvAj<:Js]?biٹ@p 3jmMXZ=֎Qzk"\ԝ=3 %m)2ḄAPF Gʷ{r"Χrl9zʸY AgVjq-Z69ܵ>M|F`+'6\H ^܆Ɠs?*1Gd`lbd|Saa`g{)}hu }@nl57CT_۬@Ogx5Qڅ`X0 ǛәQtg6([%10: 2\ǙVeYW$RpVJ.6@t'qrLȅThèfʹh$U_ V'@޼2~Aqj,:cSIYۚxHM96?vU!^o#az7$pSs`>S05h8f N0I0![ʰỾ(F;āR3\ת PGsAj G!t\]J uH,w'YlM} d^E. \ U >HFʻSKѭ&?-i;4lzX_|q - [ <|IÊ"0*)c^FEXqWFCn, I@HN dInp A_acu}Cz4b-;QYtkNNy=K0EСDz+nm= &j XPOd"窉5=ҁB+m"s\,mGܷqe4Lp?N>;j<"EJdeF\TC)=O7_運cg* mkjZօLWڶ43L (}^U{Cr2Q@ 8}~#هzƄ<8_2 ػ XsEnΨݶTF zN{mfrXacc-X|W9zSP&I7a0תX8៪DNϴ)Y;fa ߵJ :g<ÎZO# d5cS黙藝[ goPr\_F-%D h2*K,7 *v!~c~VJ矤2CU{$˖/B_PZ{{GIo`?cc"/efИ:ep793j%S0vjs+}wʋ j0\#Wd'=Ei+ӿDz"JzI*t!-Z΄.Yz-1lȌDr/hiۑ20 X7X>Z?g– Aau_~a4 t ot! Hl U[M#ϑCyv^&3 @ F(NG47*y@`{8d-ӕ|$Aߓ-U5O}jjc')g 4C3PG~$d&W ɷEVo,F@+\FjϞ$-`V?d&o){_0"2iMf&"ގ5>!^.]3 ֊M䚿Sh."l[ȅ*UCSZ IL }iĎ|P;o*FxL̓Ta[FkJ Ș] +P,D`j[P<A ;qA"S2\ؿ:m!!sM}H0;8Ξ۩.J. .HM$zdc\[R}As;@F(4p $f$ 5OFZ͌!I~Dz&kj=ki+#Y>H6UN{r5RA5J 83i!t%LfږەvHC悓~kd~S> &ۗa>KCqMS2 8fӚy'3P +R]HbCe=IlT#B"`HcPpNmd]3۲|ٟN\Kj4+eO3(^Yt"Lff7I%?%rC`l BrVخBc|sp[j[VLV)-Ӄ ;Q  ;( 1NڮEWWs t_ `<|bI~xAjrM muP*:+r:~BnRWV ;lٚr10} vUSqh~ &ʈT2-©X ;*̽K\,R4GWꎈ^"R8?W SP溁]ZSRz%.\b*p\s;êF#Lq(k;(܇C(ʼW-˴^&$Hߢp<g>}d%Q~n}f"SHͤ%X]`E׿U4W}@,otd2_W?JO2%ű]?3;c)#|@[ܖ)+jP{BW{vWгBL$3Ċ7l L{`=Gft$?an%Yx$K#A[ "Zvfш.vRB֩C{B v)|L}x5Ӊ5Sn@G#nb,n1 hyZrWc/dSX_?;Sl| Q DP-AUC[ ]p,N"mBaUFTdƦcxE}%Qut ZK.=8؝3цmԶ;.Լ*k~ԃ#әӍNhhmR>0 @{IA $1R07o `lFo ;Jf@ IVcMX=>] xƥ歿HIp : eֶ#x|͏ xY$޹[5UP'PO1F4U-H#ߋ<ըe(ƭ|1cqRS43eh+CF<92CO) 쭌0v zs̆1Դ*%~'v˂ 2zhKWF}ZXJJ1(M.+> l1wbڷ@ +iX+ց%~Υ dWy|ܠ}o>B7ؼQ MCb=BYv\À9!A6粊-Kߛ0F:[h,W) +*#D0i{kɏRbռ 4V;) `qv!1xZyit@e&m_^K݃ Yj)K5-t$2«Kf^K\>d^0Nvb#bG2` v\Z*FGNhY+0yT2!IEB]]T>LdTXU [.ս<6mʫSΝd/oq 08-tr  5ZW ъU&0Z9aC` KP@ps8=pϢwWIh@=\=|Ó;+K[+q?db֯lB(mÊ?U™U̠ fe" լZ| 'cPǤawN ;k% ugb޻ջW:uotT1ڬ2ģŸKd{Ē7KIgD ka<4$SL1i|yd0KvC*FJAT (ǒSZH3d)CjRZL U;^q 6U}ZQm(vc8m ɟ3I4{eKo3,5 3y%^-C 0YKQwyFLI~43vNHjiu$LV6o6>+c=_o5*YV:w[ _Eqt'>_`T\W JTxԳI D2Gy?(R):BWR/c:اA{@%AL+@'ƿۻd!I }'/E)}]_\UjD8]^\y-TMg+pZ#_`Re@;?Dٗ?6e}*(N]`N׌f'I|8&'-a{9p"BIJRi` -M :޵I䃲)]I+3~ߊ H!υp aaTfQQ<~S)ִ3b&b&+9Gss˼'P  0^9&4+ntjw- 1>, ş|"*!wmojNI4D:W1؆EYƏ{l8B<޷Wvh(;Am ,:Mލ?C{tXjLua49G iHw ޼#/2sxpY%35Eэ'TB6ikeV:p訶ZL`DIE' r3^*fLPi`e1tz 0Rhf;=]%hԁrǶ^"{ @ \6g|qUqs^'V䘾U\ZҸsټ%\nmAm;@l$$`6eF ]C\2ֲ,c 8T . wO<^, *XuH(`~ߺ/UE׏)$Fm}NYװC#9;pJV;Pۚ cUx_p?2S,'l(YfBēR240yO0߅|f33cK'r6 Qt,b^8Miҵz`aQu,YN+ii=?rdh`{ >DTЗl l4SWBKkߎݚFs>iMѻQGg9Aov W|a՟= &|u|/uf4[ll ?86d(؁f:PG1&b SIXspJz)[dyc8*%V JxBGI213qAL_O{^m֛~P˸oӰ?L" z4+sDfIE\YȖ+yӫ=yם a+2Wl&^1?P# ZۂJbga-8.9?o1hxƹ^;ϒ;=gKCrnKO[(c(/舷:N%nwK^Z\$v<1=Ho զ ůBph)54P ExB6fTgc#Ǔڠ!'$r֬Mm =sI2b |i;3L5bm麩;ZI㍓=o˘oms8 qkY_$% 4qy l/A\_(e>T'5Pi.Hcm1Z#k;i )c}/m[qJ΄jn1X}SJ/ljv|e,[Z%Vy#hݕ!wdm2xE?Y!{o&}v@05^ #pj^4Tkb4-uHJ3:Tvny":丱hg`zLFӂĩ45k(R q,.Ohjg޺/n$ݘy .B$L\YZx}6:Ÿ$&d{5Ap[̓a)Wɿ?fG|5#X*'Rg$E,y6v^HفUs6<Ą6 /9T,'O/* 𱦡^f}(qXn-klkEMߔG<l4(B࿡am:+֍Zh!*MBsΎDU=k{?4m71R K_Ctg6Ecd\pq"CS *Qs^/>VPm{TإB?X| s;mԭ *EkBmBY`nzȜ4E~qdžŞBQeg?[Z~I)IFQk~:zgjAy 1DJtv|0]_4'l@,U bz]f”|Y3tHe%XC'o'`]=GWp736MC&J9D_ T=:<$x&C@^52Ą'uCB6"9 tWn-:F1m ߢ)!I*b4~:(6FņY$a51%mz?Q ^zUzюT 1KAKkiG*qn/bW.`t1ȼ#B[ qPGqvxBkХp3%wCf  ,Jm v2Uaa٨2L1WU3Yј)K [AD4aFd)`ߙ "6lcE:|V7 0\Ft"=,ڗ0UiWЭ8FvUo,,/3 lnt'vrZ!inCnlZ]sN|DXu|6\7ЏdF.2"b!]M[?W2a'po _ Z vwyf =fWB\m]a@KW 7MLZô:f- Ak*{=dznr?pm$(pԮb%{/ψ)S`@]+_CI`Q`Y}|':jGm RI,. ڠ?:tU= 79':oYL PCʘI큕B s\/M3c^G&` -)^=GMh[UP-N1摸h癫p+{+S0l9,{fi/--2{yY +3qc0Y #bFfW#pڟx$֟]z}ͥS.."utɸWNUþfP PsgP}W1'RtOPMgF }[{ .:u֖u= 3zvK zC]]B͕bS?.' ALsSΎ 7—R-B9Y>4gS-ۂqMuE; lAb:+^3iAe=} h,V;4sCD_4F,nզ VL-iѡ8ؖ|-vPZYǀ*t{G\{úqXL`auXϏak|ʷXX9j64G +[DRxҼka+w 1;މN;v s,A6PIGgZ&\3Ruok1ZSG8[ 8:v }.SMC Dz<UGml 7W&wR|j]+ qLm);C5~kHRX$a;Ԋ&?:h޳MJ9#OzYyPpCj޷6%.-zuXߕK==߸A0GVF bw^JL,7mRݔsK?c.&K2V\Rj1g>Zӻ4hmUgow JLs?1)fۤb)AhԚF (QWD[13LO ~_^+qS gå; 203vQ]!J]-&B-!%8乞cAԯԝ{mdϗRFQutD8zֈ!Q!YZ] fnڧ;UL˪Qc›#O*i&ʧǼ|ny9p,YH;՟ QtWt'_@ dxmzT䓷?A'I;__Vb}JL# x,}rO+hPjeuVՈ2>x)Ql÷E][M:fa$F sκwUb@ 9*͸\hs$=S D/Șc!ATvjًj<_p<2Osu#c{BO͵XGH_W aᶮ}6xT꟟vzMDWSNJ؍_9/QZ}x|Қ"aES1Cc[fDיSUFV6dĘ)1O{ Ja:F+gM^}ŭe)0 = W~P&%o5Tut%&6';u){=擥zgtظ hO:I0vY6䣎Q8Еj1b t sXSS؅ĭ ք/Ľq3*Jt>ޝW'NN-b5RBΊ(D=kgVf RjnP_7V00t"}5HkϙLlouPN8#wDڌ#x ="N eg,4 HgҖdȥJn^ɏ~ Dy3G+V[V8[4YF7e0B(l֤Y*HKerزC>ƏhZmK? ׃b%sK( Pt|>8WJ󽓅~a.nFm(^@ "*'p$WQўq y-bSk#\_fepkU]5uJ*x^u?﶐/Pjwʟ3[H%;JO?"i?I?Wi@r㧷 1 J|TYn&izs& (9LC_ }: UK7|HûYq+Kk&A1F'Qݡ-#-Ё.# 5V@G|SL@q[5 |cm [Q`!31 Ad~yM!GԖ/wvYyMAa(kc3* r{Ӈ&ݧ~ew܁p& OdK\}Eu`ZEtN? Q߱ HvJ X{ nmFDy( | WY;;fz-iM,K(pJ! = %2Y]S@˧ErĺgboyFxrJ!n}dhuپAWݡ'|f-W`3raO&дk#hvُɚ/Ի=R4#0]LJ[G0]Yo١DM[q6r7JFB[qfP@mL~3!'8ӻ2q-֦0$+) @ 3kƃycAG[oE mS0kGS8Sded4)3jٖƯr3DƄsl@khQ*kXWmFl;A"֠rc6\J)VQٝQy"&O<3_4 W ^:RDxl'ͽq MThW K"j+G):RwrH -:=jYAO l}. jyF5IdP7wk|Kv6 #S~?vv^0朾kdŬwi[r4eIs ܍ȖbӨ5 I#\?QOrBDךP*I!w"2T ѸixE բLؖƝjZDнLbȃu XN)ǁ[A:Fm~rM[ݔ{)f|*Lr)hr@ŷz9'u?jEQؿxkKʖKg'(\ mr 5^\K]bn)fvy"ŵ(;B$\Uu39gtw|I vu=Sh(g Hi\uߦBK׫hrYz#kI_ˌw*0ۺOS}=0ĎYdT?  lv} e&8!B\ʐ ]FyM-})e<|{*d Ʈp+Dr(n=ðz4^遁cЦt}At[Smb6 _~V:Nf:}rxa+|O+"?SfId}]35 ".EPdKTfm5U}2#evLּ3zmX'+RL]]>ir[9>Uv^d翏O e~7(R^[8O»Zoܠ8xʰ fM< 3O&F\ г"*^:l)ݏS٨d қd?rjn擔Tf6;-mU dWp`<ԧbiHsKзyQHqeY Go2r ŀ[{HӧbqcNˠ;|: [\ 1pK!7N݈#񑓤4\&G:VnL E$3*$fwgT}dJSE Ȥd-%FLB`^~wuW3֜]IzѰLM""ǵ~h* ,M9ӽ>VOw?]i_uMil+QHܶ4@<uD/7jb_I< l@J}ن{"͡i"y׶bh9Ѕpc z TTAq%R#30m#G&JlSP7'D E?MTAդ}nek{xbR|\{3˽=̹Z|:I%'%mvJl[/ťr2 tRZ%K5K'l991=]SKf,VgdWOFBC{P0f|g,T7G@ cpjm! g i}ExvG xdXz30 &.kL>AjZ'&hG\.O3yM |mO"!" S)cƲ(*5L.Tƿm;X:Y#UDXؚB#hGl&_nwϪuVNymt.\q]oN >)`< XuYpg.#l&>$bP5o[DRP`f1[& Sh'lkCy'A j6SC8t*ȼ1~E2R}--E '_IiAhGL@ C~1 P<ᾣ4LԨǣ_EM3vM6WoaFNOceMxI U;mY|T^`EsЕJ@ɧ˗<I,ZYkyIHPfƨbx*Q5+Jw[=-W$z tQ89k-RNbgʙl\#&q $?d (d7s<{c_u^4E64 fMl$q}[L =,`8 0-M+NA4?P$.tiUm}h8鸕|{A5 W@Yd]i4Urr_fsS+`17ЀCn+pȄW xD('9:LHyA]n@c^ (]cGDE8gbP~g-;/a&oɪ2.%>dあsñ]:5̺D*(;@_!Tㄩl7Rjt:KmڀIl]h*',a72= X8yXPD4T4Knrekɬ kZZ3&/Codhlcw tc1(g^,I4O)jgQ׎k֡D~+ d YΊZDN&Je,bg4Zv6${iYj@Fњv0 Gd4i{,sVB w}J.f5:F\޲wVd73|]vq>}UI45}|F ӡxc4r:6X: 2x@d#T'xיy u۫{kUF kL4k#ť:5ZDOS"Q> )Vq0M5xj0z!vԺ TGo#@A&ڶ$j/Y LhxЊT_ѯu&ۿL?nMq%L)ED}=swY CC-)T,G3m#; ?=i:0;C/L&b΄}J*,FQ-:P8h,=);j10[m,c %Cm 긋/όkpï8!NA75un&o<'01p`%',ϔUe'A2"}z5ng4acLt)1gVSFLW (gy=,l ㈲>=v/x9Y*-Ux6of蔒x~9:ΑhKJ <RpXuTDK4{}=Y.`H"L vZhhǏ[vJ á.l ?24;ގ5d*ѻG\fTN-hG'1Kw;6\5b.~7II6'NK*4tp4VP mZ/2CIrV=6wY :%j) q[˱HZwtHSJJH3!58"cHyF rB&[@Ϡ'*R.3י0jOFdڸQq0b k=BW"=X@kDV$Eq+Ykt/;y=!hFqJdZ'@3yy_gDpj5ާ/L~Ŷ@sբGqd)tnL[!R8+h }&'\3DiKAk6p Qqr3 ,9nHH}(gm=ױs.A^3I@ޜ-o"fXR,\%RLFdr]J˥}$tؗ2"`N~M)rH9UϏw`Q2$ 5E1E?sħUö4c K,5Lpmřnjk*';}0؋^h6fiώSEV^Ge8a@}EFgl?W}La\*ĨK'%0:l(8BK|q]/#a P`aPVޡm#B %`-6oUSoV{^e-^5 +[GMj;\( PW_LZX\43/\\U͔}SH[ĕY/>MFaGF IymͽlqVciD%Α'.ah_-)D؇ 0z,ጞnIcio󔛫7TC; 5oh9-{ ؗ (f~qǔT_bzj'C;6SZԓU&M)҅peAt7_93q 3]1=Cr,[/\8 Mg 5腴PeL?sb14'ϕz|^0m! T)4tpV)<<ғ2!=umRUtnžQCТ9kj1&P+adUMr'xӁ'ݫ]ڸ,*z x%/D(MɜJgUnDVa" ܪhw$\Y&#lUZeTGuL/ד3(P˨0kzz1I8|U$|# KSX1C9$h'`gQ |{:쏃1<&z_pnjYBOun mF7 ЄK6?0 *5oWa5t'ab۾j05A$I] 2gU=LŰ&0ېN+|Z{hc`Ĥ, kF@q(ȜFi&7syBAAO7Q%Kˎu$v T*!K7Bo2:( ZA&IQN3_Fa)հsMT9Ee`NJv7IШr\r¬v 0.d:]+`ն09;jXXd$1~1 6} >o1zvm0Yj?B^C(eYQG(E@! hZVژz3-e/Q\zN\R3MՋ6w9-}θy(\fs3 Za+^[)s yy^?!o

Ëo W:bSeh冋]@(ޙoC^p:ISlDBa#P] ,d ;fiU6JcN.(F԰AIw6/7ѐp{o6+lJ|q%Ŵ%waRӉ 2lmDe(j%ҐH @%@Fenb|˹fк_WK']P73ʱYmDc鼯Ab9κ᳧u\}s{A٘+UPP,9?h?P_{MZV/R~ jڦZ$?lyשD>"M´5 nCʬXKWܟB~9}?l+Et{={VЩn"C,;@g dݢm ̌W/%D"zX x \#CI e|$ŕkrC(r*d>3 UYvXm_HIw*Z"W6[&m.Opb-iqY$+ӹKqz&AyD]GocpT-bb 7,2;Jd3kh }{wX n(pdS*rUi2Bp^YXWrQ"i"J 8>h|?bR@EBuZY%Yt+8xRp?cBHkq8foJ}9VĆn\V 8Əi.aL_hZM|6{yn?a7pIrۙoeЩ|V!Bo wyg\>&nM6"IV÷,2\cEX3)4rBE0#b^;\Gzd!`%l1vy/_`G>QI탌ϜƵ&*Ɉ槉w7 HBhK.:jXU1/v UimN~'~\h+w#!sT~W‘&mA:*;6tK·T-n0tx)hM" DqrG6"r:_vӨpBz>qk7+CG WMo/ YS6̢tt(ߖRK5,ϟlxb&̸3'[ no$ Q >;Cxh{wgpmE}@7M7P} |B~yOBAs=|W/biO֌!$X[ lu)48\K@솋$+6;6[w`lkRzl9\?5솞E% Rʑ-{# iJQ+Kc:Vr(錾jx{5I;P(v5'RfABҪ=XV {t4-Zcl4msyqGlm\7I 9Ht,Sxiɢn84vB'kyK[$Eg\9:^+hdB&}h脰Ic}h&uV; 6uzy}`eq&e7j0\,SJk-ԻB[mi_+ە:Z8\}>`6ꛯc\GPk]W; _\wn^q n XR(e/8b"u%c0'.w.@v9T ;kp0ԃ`iG ja1 SнSѷ Zn¡G_sFݦl;PᯉA7v|+n*(pR*N/%%t)B^=ɼltr2[U.+GR[ K?aȜ:T6qINDS2BN{3qn5P|[HRF?4e2mGrI *XIgeTz 7+R3e=ы; RT9Euk"!CW{l}?_aZ!o|yp'7.ٚGY5QhD%ꦪBj{ksYgssjW @w;Xnnm JOv֓}Hdb;E)`?a:̄`"| (ږ>W;E~гX~|c;t3lT\S-eT&TpU!+6nSk> Ͻ;SqFƌTZ }H czх"~qXz.T~-~73/\ނGM$(PN vs5m*`- rzKL0nF7_tFj-}i{dk\Z]ȳGX:]ջ;#ж7 8Mw EX@v\I|ՑRn02 *ep"` SlC;JMDgt|,)]ct Y> 8neDJa޸$Z.zqZMZ *xv2J?~ӥs_'PI,iְ̘ Ż5ʞ!-^ۻ2;HtgReOBgїvF1m,>TȿVor;;)7(;a4QwMkZ. F2!f ^͔aYV? 47 Hj3mUXJ]j-8_R r:" =ʸ$}Fǭ@?%`(ͮY1 ]~f䮥ھ6EM RoeK)>OGb.Ԡݶfw_XI;Q2ۜ#S3WhEV\J kS2$7z; =[ 6v^)àӓSꉖ5 ECfIkn3p[;f\\: )͔h$,鈒swAvAqY 0 =SBnjXIUcXׇa- Z| ?dҸ\٫Z\lrt |Fa]A+ұ^:mL{gϗ̍rYDiNLGf*/G三tQo2#-+n^3hF |.OlS~1vܘRuti^F5l8..q}⣈2bOoăD$eT1єt >GP<Cq/K~-ִwxDI 뒣ު/Gcz>@)Z@CՃ\46_fiSQ^wHphECw<:yZڏHP$%Ew\v N`Z-g%zB;l.v{T|0iKi:*{F&_̾25z<(m^Ft!b@G(ZZP/_l\ "^ϰ$+{ QӌrzĤZdEu/2T7_$d g C4Gw M)ŬҀj vc ZYfs-qy]o24gv9!Yåf(&Duo.g= X!Sn%IcYI1`&yBaAY .4{z1}$8D&'Uh2g!p``GhuT,V ?Bн@ 58Gb u pLPo=^>4,5y@TfZMCsC5Q^]M(J(j)ϪɝeeL>9(x|W[D}mL֩VD &^?n7#P*&*9A;kuZNӪ;u$#uŽgUٺ8h*njv Tg5]"l_ǥ*=QNےw _T~6J Nm2]D,к3{b¥fMQ&븿:9t[=5t)$rl#-gZ[u^5SzEB>Ҁ‚}Xz7Ix+5|5xijQWdž;Q) L-L-&ff\ [%./o27]] DGXmҪݺ,&:vM2~rR Lu \D:$OɓS.O6$}Vzm?I`c'V+Z-vUNyW6&YT:mW=D8Y.kN{xj o9 N.Ƒz;e忢(T$4Ltn3_+c*j]}&.E@5E1M%.)Յ+WhuX(Mlj|w8K6QBSgD.\ϥPr}1@!l6Ko1Ң"mmӍ {nt>/&'L=bKꛃ󟃐Ql\ A!Wn]t1'o0OjD!|nq\h4\>(^oĭoZT.Qbףj4[&\= ta[[O5(%o5tPjr݌qs{ۺ)iFGP @wa%ukU 74h/6B6HZNQwDk*/YNeV~ j=5oO \g}*!V]SW[k֔@T/'%v+^t  w\F l $9HJi7\Xsf)QO8l f;zoݓPxD)"kyޢ7;SA!̰z\MJ϶lRV7_Ge.52*c*O"*3s~N5)QP螁D<ա̡ZLsq@[w㪟Z%;W(g&nBg\) s5p,AI"KɌ!:&&|C*ae56?q1gNg@77Y8>;ڎ*PzQI^I^uϚK҄mͭ5b+ :c.P=͸Ǡ:D7/Dx &Y \E Mna.q|B '7Cn`kshox9u~Vn-\; q;r.٬Z^pVFv?a_[Rjmч כR?ek1 .^NZ(pêiGؠ™fx *hni1(,1's&}+™%!%?ai {bCɽY\^Vv W@K7'H%-QJd 庴qGD%bZP\:F}S~P'Dvũ3B" 2hd:fo`0 hFnfa15e<2d䐫,(?EGF,Ȥ{b@6 K?Ao`[p{Y5Q-'߄4b>x0+oW. ;,f"@q'͕>B)ṭE$Ƃ͡(Iɖ8>XLy-L\޳c?$\Q2u!$@?ȷ &~X~,}un\FQIgRu$W=<7z| c9HuԈ)]M5OxwLpj8*j2]L_W =7;d 烫%I\{?hԃΆy" ;,7Ai5k lSԼPg_bߗۜvJ{9/iQ8^*/.K)"Cn huXr~gd#fȳ|Ȃvxkn3etӀ *ߣ XE1sCZ4>/-M?AE ]֫C>nqiLЎXo-4E;n>Bcf-ᜃ}KV28IF)FءH~1Aknb./W¢Tz F].qZ(T{~&KW?ѧkDt IY ԨU}'#/D?x3(;8]#} æV|30=tYsfRM, f_;Y+14{\=AeϬOqGCڦ8lE4913.*Tl0U@m0W71<џ -Q A e|3^_UpH [ Fht!3[V3ǰi( X2]o+d|jWb#e}Raf¯} z]33*9P:yY2Ĉꫫ@jTVyivmgɡ+*>WgypNATQ!FIW+gemR(fSݼ= ZFEl}6^;SPކ"_):Å]LF81kh@?j픵{7p<14~9~[ ,Pn  >U 9 ݀L4!$]H]PH$0uL\kd,}M1 =\S~cqi]RӲ,QXO$W`T)^X:+ïkwJ0 h?ügK<2n$4R,A4Wbxİ3y#xOW LR,9WD')7s&u3uo<*_tpDW 9.2aSӸ1ݡ0yg4'ɖE[mjO΄a,m_/^Xl(!KΏ7m( Q\Zl~JRՉkԻ="|e!Z{^D$*T7:Ge"QݪERr]Ѹk:|g}IiCzqොp= ]}"'5}_ؒ\G8./h ),R"o?=Xdy6jBg,z7lә!afF^p/făSll= ukǧVI":=V&j3fGj !Zc!26۞ !4G rġ/<K"Ԯ"Bd7AH1ڞė%8 hk0Kf&OmU~riUvXߩZp'Qi" A<~[1ٴ3:| *A ot6йMfςf'ǽ`>Lұ6M*flFFX4 o9 -Q!K2n\F1p[vw\q{A<-1͖kGCeՁݡV6t/r dK_?&Ԅ;NḰP(Qm8{<+?%%@XYSZr楻&5IABX &7 ar*/!s3ԶU4.Ï}wj&f ʤ<(jA"5;$ &p\ 3{̋z`GȺ 5\t|# y-U[NI|1LmISC>Z i /iq_)B Ӏ󳵉R"X=VQ$.fY x~'l9n+_!1U%T=8fd5n#gI$|.J{* FJnP:%"vD^Y=aǴbJ*kknn ȿ q^sc/Eȍ e#$koޢnXwe )'R9 p֥G@50cV6v !/.UN.S+`۞u_!d0f*MɼjKmڂ./Dǚgl-wD$r|ÿGS0̵;GG4`A 1-tGa.d=l C!K>* OinFҴV2俁E7\i0"di4&f5BED(_75~JNV+HǐDmCzZBl_zz*Do`zϽqdcPu-+,ƧRZ)Qm1,D} h A"@~^M鶖qY (;mɋ]kգN:O0]${\xӹAP-}jy?Kou6#3D\$ޢ'#ž_1H[ɠ{:aVk~SՊ L7? u,o& ɝUw֯y{I?=y)'1JRQoRWGeTDk1u5μ0>GnWcp*^otZ!3CRZEp?_ab HVp3Ih KH+P.&çN1RE@æB >C.gYh¹}i%2FjؙKu_ߩƒS. WJԊ!p|`1{q txy&KfC蠱n>y6z#_N{Wo5/H3<c}[PRݽQqX\jV CӢrxRF[m Ƈ,lanv=[[1Wb{: }8"M9KRUѱr k*R T-VE#Ta-K\EńrIP}G:lob|OJ!B> vEN3=XJϮ0sӚSsU--FUIUQ(gD 6LfBS%_!>fm;M,Ygхҷϝ_V,ի-UT߯c#Fwu6pTyAI%`O-@GZx_fFuu4s#z}Zk\:S%dCiե.E06KX%,3ׇ I(J۶ȸ+U=O?M6~vȝDN_0LԐć_J˨ CmiQfp#."b%'fwQ2_g4wZ>JiPRzP>[P=bn#E YSD q=<) 9|m?ӼKbe#5+58M.5"1vwc;B,%.PiP*K{^w&jq J5|}g-Erg<"H_pBLRv .༚,%j2KVW׊&7 ۉqϩu wBzq~\D~2h?x B3I& 5Zpb8t$H*tevu6^jk zV"&Wgww.\JP7xkY$""~"<;TmBaI 5>?4TA!'=-Ћ.zrKz08ف+u5-rl;̷)6A`FňT/ufi7xTT$pd=H_!րg\2 dd~| 1 N۷E&!fݕ-|G;u%g@\ n!3Ko'p{Ĭ K\il߄lo9ÒU }g|{q qF[v謦ORSZf Rμ(J,0EK*؎赑&b! =rЏSwu}"i/е$Ѥ?_৷+:}d@OWOk -}gG7Gp7f,;=ô`  #:n*,}8u osk Es}mmԚ1\wsF=Ʃ|2fv-Z-u"CJ٣~[Ef״8c!иɠ*:QH/sEN/@O!)˃]n"|m~;_De8Ct͒Q) e:[S,5- A9:D&Sc>bT4BEh>0֚:y۝8rG#88udmCiOµRjRZ^A_W聐8@o ==NՀÀdCÈY!H~3kMkǴ۩B>RuQQԜj/&7H^#K09WL1a7 CGC6ar1lF'aѰ:g3G̉kBZ[H=̅ɏ\5WpUeO§s%uv,dIT4y|[7ل [o2ʔ|Qcp90S bW2NTne$ԗ:z~ҁEY4/וrf )Vk-I):C"MR<}TSo ~ mJ[  p/6fSZ%D`"(xITjM@Mfr%y0O"#,R5ElV ´YOFlpa*zRb?P͜fx_c8bSM0tưC *3bg#|P9=JMmWCĉٰ8h:YoNB92xgf_N( L7eș+C4YU;0ia}T;5CU}"qga; (flZELLV;jKǮU5DVPIUZː#I= gI _@'@JfY&{$!ZSN#f"C{ZafD}459ȩyqiڏh ϙGi|-0Wr,&u<o;`P_5{-Ds"q5<¿O+J]K^D5MeQP(W>W`&t }"i=Uڻ {d'6'7\ëܺS% .~lVC~H 7K+fK,UO; 2TR*Z^m17L/k]pJBrGU~&mx#iYZSN1Xo@WUPC gG0 &.3=srӓ묀b/Lݘ*&Y@Ջ[G ͟?GZe53Ƞx7y͍ 7D0쒞y۴gρP; 3woFH۹b)><1X3S{@凌 V-&%!1­wNJ.;XGBH$2;T;*XKwnfy~xx4Lze,f !>y'B#7~*Rd Eߓ }TBbmeLzź&̹4ى3uʿtq?)utS=m·'F5槜%%Il뢼9jɋ+j(َJزz3PtC)/)FjQ 2!s*Ǧ8 O>?KbyNmnQ9nS&0=v BP*H l}[ט4<GVq&D܊qm="7uUjZ qKa/QR^ߓGw6|"E\lj8:J[c 6Ú?)\'NLWlӦyC{0C;ޮ P<[jr-h2Hu 3*꙲_'XOb-M\Å[iL瑨 ޙ~eVFŏ`\2.Q?{@~˺YU%2fL?1t ).n)< 1dQ2ֳ~L]Ee' ,6g$#!S?=򡢖7~g \\w'$N\-VTQN\ձ5.%:"c17MS4!)^SzsDSTAυ$bw=]7yS !܊1nT2D_lP伎< S!Kǜ,7/x']avV7GC'ZP?P! &Pt8{N?VQKA^=ƺEWy14t.Wۣl;&ҭ9ᑖ&W5YkGn֓S*+M)-,xq4( {o kk6QCf6 >=G0hc-š b|FPZt_>WVB1zoR XO};G3è@o%v;&ʽo4t9 xMΙA2Jm *iOlJ]LzsPTo[ʓ\h 8V*˙y49Gh7vOg^1':1#SD 8<}:s]S;fL!ЏY#r,ɦBj@lM5kjmhw7l.MhW}>9Ix5:"v;sJ2%f"=,&@14WRy3%JLŸPp㛽JOUe0r"(lxNSjyeV*ȟaW%i @gO.0]hn/n^'F9G7L .uI`ҩO{`pYCp}(}WD"u$ +-$ͥ&4ʐݿVXKW#\#l>r9eLyΪT*Ô~0P6I ;~ͣA;'xUB˳?TLqIlۏhѼVu}$eTZ㩼;!4YHT0T%^‹glv1!}h,yIIEbm$;㢷d^S? d^N[6/]ο:ďL$}~ЃI3w yx{9ѥ$I̎ʪa?hImRyB_1$ᨓd}Q]yn&xo@#9 `SYMPNJzvUYM\ev>D$8-#' m8.R,(,r8x-~.tQ€"Q2jύ"x{2c>s{c'Z9H4pr,l3rFlk Qۢ{+5_o 1w,}F ۣǂ+kvQWA2T/m?a[ɺݻiә:x)],rͤ6.-d pqWgJ?O~Ӹ)eVjӥtvp ,F 7iloI{-*W0B^NmMH[[cΆ;' &٣eW 19~\dk*k8Ӌۀb|u yMS C 7~~'e7"9YYlAێ.9n5Vz4z;C'}P҂z .JE}Gerr^V:^l+ C W4w^Xk-]]Nɵ anok`Wp }QOCmv-oB[KcCDA7'a4ZEM{3ϧWi=W8͛>Pd,Ao 9]Qz#{S23Z&YQ2K.Osp76~D>6 ?%af][xkeL~0ՐB O׷a`B׀?`AKf1BLL)hc{ 1R4/+u6e^*ܠV||Ь叭c7/PPUw[`|,`5ER$LCfs/B_v"l[VZ6&Z8˧whD DM@z%¥vƭ»_̉٘cZ\1Ϭ# _s fc^vy) >/K䟃B}t4R]9aOFm{Q [r7GfJ}E1ϱF6>ˢ'2` Z8+p6K/UG^>PHC_쬭&c@2U~Hs( O^*_NZ2S– НI7#W*K@r[ԚXp_ѳev/@\?YvN-[*y(LN$ZNnR:Df4=#Y{v5?^$AGb$15>K9wDxHnq=YCnnrzɱa(JBJcDW!Y(٬VG%_=/dCP`mRTO4qP;A!I6/4BiiEm<]7<7/-wopfm3GcHs-1 9==iZ[M:_厘s\=g@H,0@?=VPWGɵHW%4#)3ڞQztѿ:{#ؚ>Ec:=$] 5g!olUEчgԫ>ݥ;3ap%8Fq&B_sNx-Y Es3Yٯ^kONI5oN\V)blH|/:MgؚAqg^wh]VJTW;TKmeHGTM0zBFIBnl׋hyUTX[ji*SF]ـD;͉= w]zBFypI'$])!llAR(yJ ݪ!hi%b̾auªȤ~ b mD ;`\5w$)-:a`wPHE4o05;E[oE:jAuH(yYۉs`Q!Wn 2l&WV7;~X#v5 9‡pg;q)&\aODd[Z]w"֭3nB>Mcvi> }F{5I8vT)%UuG6jG:ekVj"/ !3?HD %X* gR_^  3;1{YTgƟTN`=#6(vL~YaS7SxNK9}-s".j8wv\]Eţ[(72~"5:R9/vJ֮{˲h HYaHŝ|p }"9Cu#oʇ}b ~k?TޔCcY))xm>iC+ #ŏ{%'kC{>Df|hF`N =tiN)F\^d-Frs'4eb7/=^r蛇\/< K pܵȺ5CҖ5ʁa r6T"w)) k<&sK7jW$YV]Y>x3|TAQû% $?jM]:ow/`"?({^Hi$Z?2WDIΕ$AWWablq0 WL7'sȞօbyMt ep"a(+J TΛXUGu *D1tDZ[BI?Ύ'uk1%-Vqƚ)b=Byhً7`Yio;1V4?m5lgF,)/>[ N C E(j:{lH $-CWB&q31:%YYU;o<1IaVG+ ˭wuPfӋZYY*um2 /Qij006 P߂8pJ˶QKgT`Ƌ6j?yUsۇz~p0\6=czu 4`^ 7<p7%aIFe;.d:>ڷgg3K(cN")TQyu?Cs˓Qip̽ľVLY,Y{;\WG!+%ײt|uWO%KYC1v'3Cӄ9eI?) 䔞AQF#KGE5mI &6:Ňp3E.sR5OgQGFMY`') a=iӡxT,I_% P]#khj=5 g;[/T~SK @BKWB0#MϩA H}xe '^F13;YL~:DԀg,!Pէ  0b*`{Rq`:ƛ|/5V*J6P6?_=0gJ@u $~7b?ֿq®/T9TFIЛ9!م_!r;| . X\|:{xQWĤtСg5Cb8L-fBh cJ^{Ţ55̄9dW25.$d34*;{Ej#yN4mZ ω3 lH=nΤ.M $g7iIx6i9xD=WHwҋnYjLl)v26*}Vk*v!an/m3!#/)c #I(gs4p65 Ko.Y|* l\g GS#kjP ćL*aYa@FِJ0|7>6f>n[؞"M6"8c6S͉`{'%} &*X8&PKp/L|fFPl=3ƭz\ujHCzjCH-l[ޤR.z9UAa~{5pؤaϴ vD!ܣ6uv|%N86wnD1?xy}DChdA>PMЂL0?VhI܌yFwS# 3(mװ!iɢ8s#V<%> q.V2K1$^5;->^:ܤd2 -qj&\pTA*x C^j?yRRmZ~-}wwg}pae"u;2_kR͂RGqㆱۨgu&"Ϲ,*f)4jei^ fM؋ce+I 9*T^ Ǧ[͸zhٙڇ3 ȤN2^#*_&rVu6(y)0WG,i!96W9؂gr"4Y44p! θ3/ϟ1K#|Gؖn\ Iګi|ZS&oFר[ Mi<ix%7{eq0إ{*KtEb(l j.y^y`YSZ}cn G|/&6F`oJCoktIHPg~Z\ȃ Qrj w3 $`LpXx/#=e{J(HAczn$>WZR$GpE{ӫ~BTnp0N  *?H+ZR%cgO EK@Fت,`Ca[zu?:5"3t>yc$-\5{}F^aHowu|cĎ"nF#&9͍Cn?.Jm5Y rLAyA%]S<^b/#*9'tv(n2VJǪDS̊F?x*FJ@ikC2F`}xFY'3K;L h|yE}@`"1&[i#쾲b '-fEw zǞz<_Ŗv :U+-_35iFXhu}1 x$,F5! X>@Rw8TF8DѥM&VFcN>Hv9lVrgn2v/xyBp6 ,䔰;܌'.\Q`6e H- zdČ`ODtLAr\`AnZ#n)n ,ZLb+apō-axe*]Sߪ+Бb[ D}S8NUiBtEJ1Dc|R|zx8Nq1@%PsqTU=56Pȅ%]uذ7 ^:`Actw{+[g㚌,8S䦆&y >ğxMtu$Im*؝~⮥GiaBNt(BW]p"s}N4;X\fq=0OC\(@&|M&AE[wёGR1OKՇP Oh++Nܩc8J}:8C& @̝wm%J4U5;&LY3 4/O9 ItV*VSr7mEKɆuگ%%5g[;8B6b-^X[U iuMJ@NWjnk~1^eT 1.KJ=ktQ>aṢ>C1檽M|@t" 8t'_Qaȣ lhƋ!Pń|Xc']oEwv+yük.1C 1Y›2ZW)L98on"dAW7MIXݲ~F`vJo|ocY&h4Wd.bnFCF:/PEWnj~5m.`:118w{ (Q3z)=ğSzVt]1Ffl&]jj{HQiP^,_+Om"!ŧ>Oα(k9Vy=JH8!L6E!0gl. FzL` AIl|{"+VhAS暷Z{>TYzmk ]zAʑҖ  >,*$S(+U*/Nyhꛎqw ZvqIuQ'ᑤlܻ -y0r|[Ib׵ӉNV3 5>(]ۧ[ZC2Λ ^K.!;x xRiub݆fSv@ ̅k/Vj{O+R졲=d#: P?S-c#.0NE7>D/_:QYu1~@+azQ}6epp|@xi׹p#\[H8/KN\kFf V 0`bh1mJ&nb~++/lL vlTU!ý@J:uTaz{K#Z2褆vVFm$vD`b]a|(ˍg_l!)]My4IINv1 hSzsSV_*[v$J)`]svlrOF ^(} o"t1h~iʬ;Oel)O\hojܾ6_28x5ZW Hʇnh1`h6yiYޏXFj/[tьgc SD|7b9O/NAskbSkMjH ^!kѸE^lf9DnEb]rPr~z/Q%vGiIm-$_Iwv8[rG1m\Wi\Y@9HKuyJ@%+R#&,6 ZӖlt hyI>i'c{dj+[/MR0QcW?4ܕDfyfl~Du<6E*lH~F9Ti `ʣuޝj따W#qYaa&IvM/&sZ f{rR|LxP!5f,^`Z2:{4X \vhb<ƻeFk,nS:qy9\lWJiwUX.(+/O 0E e81wȫWڴ&\Jع3'? . @g} 4cpQh͹2(( 8j0ߘbG,}ebtg7FX;|B/IԗR@X hPJl4m KyhU)BŽ̉m6Oky TȬ#WR[(uQ߈|+ GWC7WQGAz[9b`PҢ>o|IOOAQ];kG*a,& C̑\;"PnfE: Yc2SԹ7.^hو L*v=Gk2F۬Lcj88 cLpMN7 \CDbQ]J 1b%},3X7[qyG8Qf/w̦7#ZoV קnH@} *~ȶإE4A <e/V2d:?!2˕^Jᄓ>Y4g[7}Ww D{'c :c>OzYaKqUG.E^qާNvXr:5d7V8C"^2P@HZ[`ΐ!0]<ﵶ'Ǥ h-HDxX߹H~`\6NF&ںTF^[wA[Rva~Y1 H杕TIGX$*9Zk;ir\_4B➯Z8O_bF%;ҷ[- EU8.tǢ?E=-ȆN1FR 'P r+1Ĥc4D [,|ӹ{E0%篼͟/H#a &*Fşa"4 )ka^ޫ3w}_joSo٧|’1W &Z|T&P؇uENDW3gD'"~+x)̗_U.Nˋ؀ 9y.Ǿw$wvׂ`cP9y VJ¬ @Ҝun1GՒ=I@ؐ{؎eqMDJ+;WbB5JXa_`M&@H%Fq.0Dq(L՜Ma1T܃$c#̀V,!ݿ=Z,1:n% 8Ϯt2PlLgRY&LF3la0OoUKf:C<5&E)C D8NcҠi6au5(kahOUz:*c_^(ø+j1 ֢"͉Cν3r4P\ԝۚ{ndPr/pM %)tjcwSM(ȗ !g]/*]lE=g>{&ZjQd&\Pf¬Kh^Ef~U&UdNi-R)Doʨ/SG20b@IyS`Z*3uƦB#RdMb^|272&Zl V%fv],^5wc"Zgi_/b+֛%,oqiAa =MI仰Bxн9>$?0HI`iY(f^aҕ -)6sRS@d Y2+ ڟpǔ:~xuviK'K`vL@Z!L2Ypfߛ>=NpDc3S:rM^oMI]c׿?bM!$/ ; QvgXx[F- ϧpx-fCF\ wFY>rmPh%ȣrncBqn2l 9z;ay˱#H/EPJQFgq8M d &t8*=˕ {G@#az_h[tsbBB_.N(G? R$0k :JܦNӫuCciox^hj[ٲ@`ѬmX\,`=䢛2AVfA6GaX11 wy ƆаJV~rN C p)ۚbL\U VDOY|RoA;ġ ld"LHIݠ0~iKq^$Wr#gC. ?ZE,9lc?Yқrp A?W)Ia|(Q`Ft i.0Vcf*tf 8!f^j_]k B<Õ5v~quh.9sj̇Kcܥ3s|% /Q&³klcVT\р܏7E;V`($H*-U 0Ev /M6dSx19X20@dcFس D&$ S?7x.D|H3dHme㶎0x)m5)#_}y0ڒ=D.ޒf{, aaWj;ņ)ZBĝPTSJ$]ou9WWj,nd` $Uw %ر4b5E#l oPe:s23ٺil.u~IiN"H~uVy|ep vsfns|h^S*h[ᘆw9"t `v(BԤjDs;Yv:^oru\~{׹3?@afĝ)* Яf&Ղln -]SÊ)X)-|gªwԨ O:A D58ou[2¼^Ƌ8tjʐ;P0=Ń\;w=jeo<)+"cLA\KC+G*yU%ŤG#m♗/=Q R|!!4yw(׌v2'R\=VRf|b԰etGR[mD8Vwpf_0:Cͮѣ{'d1(EeXl^ƫĐdwE]v_DФȆhͿ@\q9VXyCx7}6癔/.hAWtl۪J~JgTdI\umr½M}: ΈT`,G>YUP;"(,Phua\8JrD N5|e #D2j }OJ426]~?~׿.Cy '8+>h?$Cvq󾗩B5$)z iUJI&;-8ŤXs{X!(zr5M{hl)w "zHx!>d{6NxؐO)rMSکņfA,CRm{9͞r:z]/У쬃@.!Y+BEwV 輕P\_`jNHIڌ ?{5YЍ^O醓p'"bFZj1GWл[pt}f׊LJȏD>Y@Wűy+[3-.Ie: {3T W˲Tzy}YkI_$Kell"N~^*4*t؇pFk`Uys@lư'C?R]>B9za0r`D D h^v>JRVz2v*=қscXY[xό_ m5H(n 7恺{!b!En+0lH0|WsM44?a-(2x}ݨ=Y|; uZ>  RiF"mCO1԰TU-bDUt @r5'tdv*青e&fۿoK3ā&l`/ yzWq EP1@_@SID K8 {RMܟ@ԚacBQɥ'E6|Z|hA՞պiZ~hC²eaUPtI~ _GsYk|ЦKww)ܖa@7[Q̑Tcy^utJ`M2}Q:AJЄj S`z]xC%ͳJp^1XNj`pW=ߑ4wiG} DJ$;x- 5 A<lBZfLQ-\+N&HwfN/" jwpOOޝD5jz2JbWԏ/Aγ߄s%ûj+0<>1Tlr T J^I_J^ڧn6)ݣTO'?a -\Dq|0A$e8k1{8:"*C0;B.C҈>SY)u+fl0zc@,n9aW܌ dn l+e)va/Nʼ" (T]#qp#3(Njΰ[a$Υ 8]JWdq7aM^@}ۍ0PP,BmL_2i o4&+HsuphBɚL^p;ԗ#VĜmw)W0Di"z*V~E6K&Ut8Z!vpj:!=$A/6d9!r% SpPmOF,f xIIڸݙ(h-% <2J%|UjկSc?8]J| HA˻^Y=PE2Ū98 , +)Vjo^gnoeiW2$1;Y{i0צFBŭ`7o:q*m(M%Dnns:7$>{&gǽz*XIHk[&.qD9oNKl)nVd`iɈ$Vbv/|n:HBW3 W=+N!>DFoL874!l֖^FD_ 72 B[`Ծ2nA0Ntӊ3Eb[~P> #`LzVqz4,?r,6J6nxW%'e6ІGX27g/j[{Zm pc1Tک_^8QÅ6WG5w]O #@ײpKtzgl͗S@_Bcߡn*ūGGĈΝ 7Y.jXJ"kwQ>di4Iyu mtf:|WMvGR 2Ry;TOsv/PHϞquz(vHdnQ.٭&}<~YYLA3.Ș 8ab ^wٿg i@tvT9;3op\0xM¡N z!– l'1bK䢃#Wej%;`1/8uP_GMOۑXJʨ_ZJc$VpENd}ڶ>&-Ɯ3\}UPɉ_-r*fPQm Oo5=Xwەm_G*0%vg-CY=[Ř+1kkRj,j}5.1E?&FvXs. ˥*&jD`)|"(#*OTf1v;0/ɶ&:s;Qƭo~3}_/ 3t=J"W:}ȹX]?mh돽 "6*ة' ;jiP:&k$kLґ;N+|;B_i)IkwZ{ ̚xW(1 `ⰙሧJtֳ{I:9y6(oQ5jڨYQm' ab4rJmw.7]aתDڅp@Ï*~^/)_J78.wN--nFFD<u"]5N9 d"Q̕K%^o)d|OToB&U5\`yU?5_JM0%a k9V0qqgzO?ЇbÇW(<{󀺭[s0+ D[+1d#b"HPf8kY=)m1TɆd%55 { uőUD#Z]Aiѿ̚ i)yTuQ &Md:[4Tkɺ !y cwKV嘱$,6sv?!y55I7nIѲ0}1J7ggl*שVQY٩\DaP+FCZKGͱ3X @'< b|Bu O^=c$6\0{RM@Ҝ#7~)4JѦZ2e㞞26~pC 9$b#b,QUѻ'lrC[7s hkCBZ Ȯ?wpd)6> bK$Vpqz\ äpV(H2պ=*0y_E| ,%l79s{4tߓaݜWzާ+nr ];ؤ>qcK| ݢ\O6\zKEr7 -GWQ5p!h@1jZU%-VTi8D61~$_~댬_6yJ}OV$+uoTMzDc_cF~ )8ŧ[ !4Yv#m"b ZcX G8t20AdVրEwM)qjn 5V % \V7AUzS%R&^IaIGSynáKϢ^(LK4tnX6 /,>WV[DQr%=h%V[nV!UI5Npʏ黒*oJ7uܹܳ\>jeBTd@fPBϏz($0aq i3QgTD>J, TYFq_Ix%ԛj.oag }m{D`mMx؃pFo:{q0dQ,1wX ]͒9a]ue,vz܌H?<1~t) +!%˔CGy=JN4 n*}v]MA?5|~Q:BL3Xm)ep0r>իR66Hg%? g23bƺޢSy?:ABBOT$v2]$HMmFLVO/S,1^39@5 ˣֺM cUulIf|9m|FMN@^w5W& !U)l3TjA D_!:aFIwgd.ԹA4LZ˺>4[܍ѧKН7\1R/zV?W7+E30?`V}L730Wi/!b6N>?bm.ᩦbjJ2.:I >=aWo: qQeS|Ppm*NqҌU,,H8K FxwTdYlOMpv/_B}_G9a1df77D11{=G\N:1az@rH!{סu5 .lY3EF~ T֓^bgvzo8,ӭ6ArѷVR>-LvXR0R ?%7X7ysTҒ[a?YA}a@NX{k aDu/U94$Ӂ@)Yk3rp1xY)WK ׌3t>ϕy~jn XEzdݐH0Դ(%32*3vql_|f7P:Nj$A"}5 %V1txsQWΉflkbMJO0;gM)8C{ABiK73h)pI P)Br!*jOX۝rWK"771[ #IUlzf$0S(i>[[; 9uRޣ~CiLKDɣ|N\Q| [aN3-1`+#>e,ͨv8shn ;u]0i dR{Nn99F%.8YDixuLq9XbR>yN=Y"$DZ i鑪vړIV+Wtp]ܷ$,ia}G`{-k_bţ2)ΏZqvAŶDfH~c:FK1|M2̨-^P# ꣧7Ť-aR?n' >^ d9/\pj4L /\qL)F?v(GFJZ ,ۇ@^# Oq( g\Z;zՙHBֈ+pd^_k%1Jt۸23ݤ?S*A J_ֲiEʄ vWӭsbQ$e.izThbz - _HSfȩb~an}+vjy[@] .VSsˢng G"s;ͣ%pPL`8o}'b E<W( tI"\eĊ|z|8~, d4]r;kjxF~gfCTw*u?(w`+Y@gIϞD4V}JQ5*T݀MЊR̤þzl@,Cq nҊY2hsjMi9p•0+>ϴN h,P>}5?m[01x񤖅5ƳYT3;eMDb&r1J̀Sw\cYJ4CPx3: }ߙv,>k[A- 򖏻2pʝ/zhpkE2q&9^RK@[vA!' e %C?ʜ )2["C`, ǀyMLpY{l)*2$N d;?|Kz!QME^C]S/ʧJL O%Gdhi>"[&uTsKȃ1I 8o-fq'+}97?k *{6^mVGG/#[Z\Wdmp()ZxxL_a7UN.Ec;J?OkL#Kh~y bL"I=ސO&m'HSIT7h# 1LAf~OF3bؤ M,)Z'yZ M)}b M?>fg>۵R=׎e [hv4Aޕź͔ߩc)+9[O^+@[Ѧ&VjՎ硥-ďk$/51`L|biL81#F{./Q1/`:Hw G%3P+Yzn-r.Ƈ v˹H◊Q[,]=0"*gh/DYPMDNw~R&@^Hr!?trނqS%Jɻvr4+) aK-mG75x9l1MLӊniaxfӌALq\.- 85YPr6-T]SM@j-b4 $zFdyc*J$g;8ݛTJedKSҦ@)Hj8?zn}8E`2-(C%M[iz9B ?\ۚ66XSCj-gDd吹kw%8!逋;:ERɍ(ĨƔ-+._[`tGX%{'۾=:i!"*[.vi6*,4i݈n6"ERfa LiZ&-$TY&7m*]'p1(R$nA>kA1_AcP'[.&TL\o=Lj%]sXg6en>2D!mGE[2oPyM%͜!lMo`S 't;\Ğu5CQ\UL֖T]xsL_#ZP)mv U[acwV%>I~-xԩQCO8+F'FQkeIG-FX c~Q>\-cā}\$m,l[UgRtVS~{}|x,T`>DQLJAҞDE[ks)JUС$:V&y%V]Zp?~Rm0#A\{z\:\`alLa4[ bMpdp> /s&Da(`&-Bϧ ȴ&թfT+7N\~0W|.b <ܴhUHA(k9=ўs;E/8QP*u}CuM,ϯBmɤ \|j]lDwq$Dj޷!*:ܘ`mCq_ 0c uA.QƬ7+k׫nA$'mfL->y5qnbZtr[B:nC1dc?G^ KIT+t/|!,d>n9Y-2}kF٘W&?@PZ7c.(%vAG`]oz!~ˆ1ԑ'ltl@St sc$\yxՔᇻ;W'/AZS^>nƍ.2(4!_@:LVY-.b>{.aIt2i8õFo낪slbHޱW;+;d!'gDɾ%E4 p.d7a͵JBePr$΁)44C+PऑǚWz$j-,bKa‹OfRLT tǺKim\v$_ k)<݀o>TZ+""s1F[b[%=׫PmZnjE׈T?3VJd5AV2v70n 2_jdoZ>:6[ˉ'Yv=a\.D<ՃR5Ro?3/OaO jU!fP󼋗r) *IDHI ݔJ|,7#q BƖ09$g HSRYZ=d熼ޗ*Z./hYnZp'E:i' 2l]n"u>b,USx-S%Rⵊg" ^MNJM>Z1{$9kV9 ؕR G:\L(' suoJfM EiUI@[.l&p92l'@b#P*s@B#lO& ТAt&AϭV^ru_'P;X:cζzEsʞ{zwOs~-'9D4$ۢGLy龵yc yzL\[eAni̶ þZsa"9!~r'$^25$)i6pM6s:Ld~uTO.˨Z> mn^RY'ff:_^|AgЎI2]18FeIG &\[?$ޓ>zjjtHߢ\ǝmL6 3]k#< 'B9D8Ո!ಬ<yXn\(%xcڂ+h8UT͇‰e3>L8K`.,Ѵ>ԯh< am壨LI0nK>pmOwQ0GT$Wr0&!&Wi4 Ѿc<4h.\RW=rZš{+O J+mt,Ri?0Dw3\f"a5E= ̙)ZnLRfuF^ܝ!AbYKjv>NE\M)r_h3+5` ^!x\5!h_)ófȏg$뛣jbS.C3A-~5ٿ!C1[E)z6CpV^WqwFttciY>3q#} .qʋqF] X/j)F ? #6t/QhAڞJ"o1HVlO،6qcp8WCYA/gfE6`h$oMFXF9:[;Cs?_*YlE$Y\ RĨwh %/4(;!cb&ٮ SXet Ʌ>!㦞S{tZ^tA~ ̅am*Z|obZnfrV OMW?΢`oQi9VNk=ɮǥIF f3&WV^z"K`S֔wqfFb!-ZG\n.c&8Z4\vO@*Y1<,9_x*)G5! T銏I'Y/ ػOG- t`[,KP+ FtÌؠ hoN5!`0z$$57q&^Q&,]`"pA`XZ X؇ ʼn9t?쎳湜InqlOz|7ӇiAmnPJXژl&kM&0Y(m#2\l'[bC-Zd ޻)1Ay;Hy%Iw֫ \uGL*`W49zǫK^Ww̪9Ą(py?\IOm,4 %k *\22n4u,%ѻܗbP_/(5&sh `h6O_,a,amɜ[ B$2b՜M`^:\÷I~g59ŃHB̑G bk3!+5D F#54 2Q6? `&$L~R~'TQEށ,Sc>ĀffSTvFa(n_LrG/aϲ˵!Jӂ!{JP$X <tΉEnBԭ]d7$$t_~Aͨ:Cհb&F'[ejD n&6DW*T,\~kɸ? kRN1bȰOKxC<ۇ.(+XnYw]mb'W%KjDꭽ1en?[Ӳ`.4]]F(Zf]j\2'Ưﵢ~uzp2NzvJ)XY(g._[>k0`QQOg؀̖(hϏH8}[B4f@ 2BM*mYsG-Sak}@Ey[{(aʞ܅FC##k2)]%R jsu9,FTʯQY9Z <Qq Omym>o֢k *ɱ0WL B`iqw81m2ƵZ,An+QN~mV梎/M]01i<.AVZ䗵NY0FXeFGXç'CSP|(ⳗdoϑ9k@*.UB=aOa^5#B-?HP]^BGf3*y`oJt]čHEcqK-1HF$sd_&*U IWܦV" Ўpqp*loF<+=Zxr951%NA ?;2\⠝V]o9/cN1y1!`jW1Y$S 2Zkuа[Hz7J=E0|۰e{/WQ޲Krǃ^lhJb{u_fHC@y, s'-z* \;m4VȱLAM39PN"yS0f;Fy0{L,$٫#%nXD V>'SHЈ\3j @ڨ"6 ݻRKTo P)O- ݹ4]-Y%/YqQ`mHR Pﯸj1arN5YJ$GU$У x7KX}l !Rz CEЮ0 <`([|ª شnC6NԣU|VA#ygVMPSd] (fr3W$ XRZn0@N7)fSyjb_ NCSi+v bslN)I,_ZܹlƑ `c|rrpA Fs,2On"<98xX1^e2{gz'zn-'. ɼhS'fuLBN/fⱰ0 Kp-7-2lޞ+OhE~Qm|y*Zzxk[F֯ncApc=7QZyo|hxvO Aa~-2)PNiY#lJC *zj&;_R\:'YMK/gZB>']3HK+A]I&!܏tF)}3|8Ur(o|FxZH~Ϻ':FR%:ETKr#*wc&:*>ޕ,ΙGѻnBMZZa"B"qjq|c 7X 8, R1aY\.P$Wzz\5);k ?g;bO8|zEl+`GڬӚ5nu2} ]"̔HpUkKAEe'Pvsgb负uh$ƿTě14W%Eu03?a;bD7Wb gMt(gE fSk⣂s1y&XD9nMVPfFtw%zVGC^CG|U۰&.:LT+Wa G3H -8Kjjr#<ֹ ]]^)w#bMUT \/ߘux ̓$aܑΐ&~,=odJ\;p?i csU/y*O(g={C~|3.[{^eu*KNVa5uu(VҎWyXrs9%3VW* DjYgE'܂ &8d$găD !u /e-.cջQ8LXE~jяw:b<_!5^<46)]$O 3lM?r.W\T{{(&䊏  br-lp\Zu*kzPqJ ϶,Zw6g!ĆaaSMOKXL=+]Zd}Zkw=#*bŝ[4s܅2V@̰w5^Xd>^Xl1s,Hg-_֮P98CBٛw"*pbo>\h?~y!u˚+C3f6]=Ul53]ռلsׄ (S)8PcUUIbe_5mQo/g>%$.E/2U.Q9SL$pM)CAyζɋth =]{! ZtF\wQ!Ie*Iz|& Vת~HOar3Jv^`r}W$ߍ UY2 c:Ohe+Q`0魣lk{񢇔Lt aV@#kAQwIBgh ^/wh32?[k\FcP<>Kb!?ؓh=c ay+ n.ý )LP!s^RWUf~x(Fuu~XdkAR5q q1ºWľdH {bc_L+?giJPzיF,gׁ-Gğ&qCrTit*Ib+=NFAF1_S:)_0(JlnF\/!*)pƜpM̦ {p^WN0z4I$Qg[a[?mJ_u lLds.,ZnոʸHg砍vˆm\D+g>ŧã:kEOkmfŃEi/VK9vяcܔ;K¦{"`xQj,&"I5pVN C/B{U9Q2gWKp8]=5}IL`"sr[QVl|?/K)2JbTRY i@&S(sⴆ/>:Su[6k'f+Q>╚7Ʋb6ZM+䂌]66`esRc.9+;M+du.ti|DǀV.D\ui𒂌ڪF8\,qLu|J- P ]l\+?tܦ6@d Cu:ecɠ~jPBvKswܻ!#&pLIW($HiA޳=p.k;'8B(c%7àwUi 5$Ov+ ֝fZwg3wg5qGk.nQϹk{EBlz#=JnuGeC!7gHlD  L4•;K[R}%I Jnw(Y~1 ϻ*~s- ( yZ-E9ʗ.H}ۨgc|`e1<ΟLC΢xV~IJ~r%ԣFO_ Px"vªϔ\x1-ȯ*qI% 8x=HY:'o| ?fWo-uȺT\P'gÇNYrqǪZԠ91y(Ŵ9if{W{Z M[)--B"CSia>v:Qբ b a< X{@r?b~8ڙ̓QGTOsΫQl6׎'J2437S,.' DG c$N^}B⇥|=g,Pw$o#JŹR28x'S~ԡ(/D" 1wV47 d,f2R"46J F$2B|(Z̥D+ym?HE\W~Ip R^& hirQIjZDrS|m`ieEdb1޴+l]QTf:h̃U3p<ǂn&.YPX&3 X4qJ{W̛ >wV́tL07sABYM6ωpnDSS%B'%' Mޢ^=U-Q 2avOx؛hAcmq;w`R<)"CB>CFi(9JxɦBm!a1P LuuX| s*bԮ ^ߞxokAD5,2;$RϜD5ʹw3Պ0{FiecwCne!f27O0hhs|l3WFIyf2#0n ï幕 )\{1V.9fWZi{TqEK"ĐIfz$UQ.I8 m IQ+$?-h&8M*~}FqpFO 30y C-lҤM ;qDw<z{n^?xqL0!i+|hZ9^8 &5E\p̲m<>O ;CD >0/y^E;7'؄3M1yEOU[\4856ӛbKriy)4_cOT =1QW5+WqzL{|1j_GR KO\B ?B$8@i:'r,$-BLpαG#!1|f crUF/:xGvڝ߇IH{r!V k~V o9Qv/7}{ޯnVa[ԵڿO[1!)y#$vw(d㪜Πt.QtzhB!}s9$HH}nI2PSb~Z] *»#anʥXe81F0P[8GMלQ례 ~*.>>79B3/A&xQ_^ElKDyWNXUiO0:#R,m+ ++hvbi.p$10-Vp>SO~o#ݹ*`NXRj$q,|,P$$rjiXgRjf7 7ͦ>xh"*M! 8Z|y8hw̲]BƝ5թf}wOLu~NTx㭆)&ƴL/&K_l5Bbm,7X8F&-ZZ|GkN%1rl~Im9lԱTQhxFS[Jn((;Aϑc2y_UB ϒ@BQ'Q{OEi yhC+#o1Z+|YۙDE[iZ-7l6NPNEo,-Nأg`bJW=j9Uy!lܮ1%J2 /K΁=*qe G1l8TRKp=rLDmw"9![A Ps1ָD.noB,1z[Į;g`ThPx?G-v o tO&Tel@{hD)\r C#*$8J4(!E.U.t/d3+QSI 3fIojϣks+~فPzEh"Ǟ, PL}ՏwcFDƧDeQSPt$w&L. rn-fe $4|܌^>ug4|x!οh5\7u:A c ʙfŨEv=s*Rygm,YBYHvTXs @KM|^+}'$)ݿЂ9'>Sr-n/?nQn_8~-3phivLP5q|֞%2S%y8,BJ?e ]50:3nk^`>[ʂaaOOI4>zU4!D7AL] <%BUڟ@4k2ZYe#ƨ < 澺{ S &s?,F@rPs Ysy^tL7 IWu[*v +:V cY{WHŠ}2!/Ʉ<9F;yѨ)͎>r3LMj5oH8t* {& U5Kqc4MҒso ˻6T ʝiRiZOzj0q?lMTe V« lIm^2CI"gr`:Am*.o0_P*+Moj#m@䑫PdV%rL\b"NKG@C[7no+aJA>Oh; n,a.#T  #QȤQUtpJu} I7Ӯ.k;쏦@?1"V`NVNBd-(H~W߫g ^V?۔@D`=F}+}gE@uyis/KM"[c_B)?p! MCگoH $#!r _/Wƽ]"2MmiDDĚǣg%#hy-fhmx\P,,e,~xܞ~l3`W9k[f$횻rH8 /Xj8Ŕ^D9%2 *WЩn 3>C1T끢cl(װ0l0ӔoqJ5+z1=˳98hG]"II8X\ Ӕ-74ݎ TP)r D'L(u-{,c_Ze_Bt?(r}&ezc6ɩmd* /_5ΐɨ`QMv`aI*G<4n;5%Q`ɱ;V-`#aO.EaU m9/##%tMB,#3+' k)]no2Ga*QʝfR>Q5 "j"tWaNN#qMmxiheFlڽϺHy[ *7~^qÀ.4Y$ϷT.:GS6:K-Rv'Չ"p7ZZJ? Rwm+ĥJ`W`iэAj eh{a}/J)k _o@V9%ѕW)#Hɲ:_j6`w, H K $hm$&Q#i:\ɥJnh}Mm$$lhw߫N8^ F ‰f sjGU(z'>f!"WhݔjU E~:;<ƆCO,Q@L0єJNi4(ynZE=Kk(*> UUCJ^گ܇s;jvesn?6tDWJ=stI"l.m/"C{Ĺ{kC)xcܱ !$GΚC߰NjlGyI44 3엓]vi|}.q;ЂK%l}E_~uඉ*wTJ++ߕ\NƎpmM&8ڢ9VZJJ{?sAS GPɼ8F=r#MbF^\=?Ji=nab* W;Wb˵<&?s`10jcrva GvzW]#HBhlZ0_j$PvLH)`J> Q`2gr81}kÜWfhruc B)қx>J1"&XS~= 8YvϋwѬTs)dFeu$^f}1Ώ(_6Nbi7Z+p&tۉ?-'ZRWRb8GlT{Hr|ZEngDɾ$ݭn1٬JTn*>"|BOM0(/2P3P?5-# *fғ;K>@0KqfR %$1o_NqR#J{ @`brv_1!Sæb ,-6f`].;u0vltg+.cwe*0*`QnevZϰFy*>;E7:/29eȑ$~ Xu|0WR[4>Q-\G?Hek@Pj?OPàMyhWAߔ\{y7[bLAL̲Qv䀓7RLsdhK@ K3VXx0-R=8@.xK/eIc()KmgVB;ppj \ا9s13 CK~47xknI+]O5!WeA/H0^ 2闃=ojc&՜h㾌u 1-]0XwB}\;> u̖,U~69t0ayJ6<#L82IEu"!5sV؆5~W(8 ycWf27SjWGJȸSR;O8 ME@h,g. Ia&l($U5dW G@*u lAonEyFL1 T62xynXEVzYQi֩;e텧w:9ՖMZ1:LchqTί0(2G|n_yi'?pp(ﳦ!i. >]i0!'zm.Cе:]?JMVzk#* t\s^@reZs 9fV7oߴhw .KD}8T4ui]K)mԂ4=  J=l|`'myxaUa<R5p[lcu&GY[k 2Գb<M?=v(5טT~0+åa+|&W=Qq֔Yeo:Ц!ZEze#bb,ͫyd.G=\ i85)\[/,BE*iԼ%FǵaI[ߞ oU.|5&ۗ *sFk ]-辳g|;ϢQt'M,0}¾\_cIs}9BsN˫Gg0zSJ7X|hnC ixB|,P1L0_oScUD}cv>dQ%_sg]j<[o<2,^S?S4D9:V"w+Pi`LKՑa} $-bK]P<ỰXa6 "9u@ԡsٙkʲ7RP tj@q<-Uwz#AreY&7٠Q+BTD7@*:48Z룎!b5c ZZRħc#Zԁ63?Jfsj|{ N<gKj&-nRFmJk- -J_KxNd$N?R= LI%.{9.fG@63|sNY5=vv4)<]A_Qwlߑ=ܻ}{5tKXێ7A ,N'q<]^**u!O$J*[IB#kKy6@"&b/*i; RɎb_fxl^b|Ratmi@]-BkRQ^F0o Jw kY;=7 [M4kG1#ԅkTQn1uhV|25=VR O{OtN~Dyšy <—jP} hvѡl.M<BN'-dbbfZ7[$iIs CRG_G bTc^iQV^ c&湖ph/Vp4z5 $ä3^B>0ZO,@PJ/ K$f p#fw|-U:BR?2 OB ^sJ=X<'~IqND~:f>HnG͢/kgh.8WYft^ۑjw:&'Bg`\B{ {00ICs޲(v6!YΆa(F{P۬Î|*=GH$A۟^]svlla5Qy'Eq5 ;E@m^ţZ0WS8:ob6dhNSepZ'o=چG ;yqZUG+F\'z,J9Ls#x1sc ;Y]}s>0*-Phae&4rrk=e"v&!pj !p|X;qЍ#n66W:t0ԱÜ:̗d:_Ks+}vI0K@0)>`/7JU! UV{G_f[OTy[7AdI/KmEv`P恪nٌA#As<-&WSgD":Œ$VArU ԅ(vAP[xNf6&3(5%^]` #ʮ` W r~N@1KMHT ﴼ: fZs ǼS%546" ?d%þSm|ˤ8x@6fX/-$τ8EpюO4AՄ8閈,2s/'5މ7{s3, hN]/~-etYg+~=S(D;Ӝ6 LFT.KD˞aCRŤ:MGklmp_6s0~s>]av9x:0~6qt1ƟkF7r=t L@o.p+^ꕦm%~fx>:O@#bzPG6u@)CލARb'9QB7DE[ȟ (-goʿ(S$cM#d>mMZCRgŎD {Ͱ;Bse)P{ Q n9KO~觲 8qP8k\Ŕ4(z~aďIvl рۊ?rfh`x5ȑ,?ZXBvPNħ|1Gs3;ƕnm½ӶVz`NzT &8UA+ MOy&q_Ƿ#gNc"Ɓ2?Շ/ L u/s?ؙKZTgЏE~7qKc3 ;[ge$tILe_✭"epa]%.pEU=cČ"Y.]vT<>kɁ#V2=% [eNOBnx)c5P0+ο!V/$fB8LECݼR'(Ǘ^)Ιg},G!LU}$EǾ\JYR2|}0jF3ƿx P֕,Fپ&rj:;Yzr6AYoPM(Fipe  `: f`!gM?#TN0rB,cz<Jqya|"?@ѢK` Y+!v`BZ䦐LNFˎ<ٲ4+&KNE|u3F,1tUd 4g딨;ny4GG3#sYi\ɧ~֟;PS7zhtBHs-n5Aᠧ YyrA M,Yc c wR(wr DL1 ('WG$oƳ85AW|Dɕ,ۡ|\n[K=qKR.7tw Уj@ v K｛ޡ+=2ҘjBXA @hP3p6$Rp=oTdZ Lgj"vFלLp^ 3w肷3{@ob϶չIdz>q9)C橭}\A\ H~]Ol]X@m~zf8Ii7Y*DPbI7ͤH{p3Gyv)`#Otkl(5Q|XJOV:;*tGjR G=N2?[ɞ?0^y*FT^U TQν#!_YQ2SoM0MEKDsקk, 0SqK~u(I4sQk})|lN ρ+^BX |o5W C#p˩u4]]]g0379=:aBd/<釓)B7JЭ}&X1H׺ӭHjdiKnJBǼ/*q;H Cb\|xY[!8L **6LD HDOO&͸J#m 6B3Qe@6'jGޥ ? (O墢K&؈3PsۅKVZM~NXf4"ͤ ecAz^ 0aGk7T#VI{+o# Zjr;Ͷ%.ӇI~鄀(Ga :{Xsd1 Gg !Ol iƅ'3&  aǃk} Nwp ? C~3Q}~v̀|N4*g_Fr<׉;SaeP (0=7b<$I6ӫn&f#*Z7$6cdb5`* ,+W+cVKJ\ޔ;L38˘ 5pHR`}^\/ac7_֊<ˣ(C6 ;n3;ghj%1,խ>NF?e6c\})뜹{ҍ|NyBX$Sq_M#wWwJS NRN{DMSEimP84(d ~&+RmZUv6mF?PTZp['uk.5}Y  ||EZdfXkyLtT‹B++TG>R]6HK LmgT7_ ?PZa.;)lĺ\ =Ycp8mr3 7U_r|j܇o ` *ǂNJE8 4H.G,S'^L&nr:2` qjǽ{mY=sϦoi7h9]LκsM(tp2+w $O37N^hPC/ ~i{O2FG9M}OC= H ^1\5yf03%v0 6FM]ygH@Q&PJ>?0?߮Q]6c#J Zu| ZC{S-VAFW.PB<צӍZ=L+v(tWIb[m Թ{'E.Z!f$2*1D_m'1KTnoCN귁Ga"b^yxvZi",xr,b|eb[U&nVrgؾjƄ]rdqKa] <1@agH!bˍ{&XkK<ϤZņ h1P|jH@|A{BZ5:~žc#aqy ;̨']C6Y^FGYyv)¸@!!ٲ% H#I]кle|Ru'F?LR"^dYN8*Epn#VR4/jo <<?_4K/r}2M_N[/ۯť0)^AL]+4NoJTW->h|3U vB0@™ՊǧoC,W>KO5lA<n:L̐FrgS^ ^NW෠,>_Ua>$  <+ ~ |KkL9:3Zϼ]Rm .N(2m5QSZRvi|q:&LÝ zy()?/t8H,( N9B Ey~-Шu9"@E-1Qg:2`Kxa :J?S"3وvM=H9ug$Brz@BTٖ ^XR0ok? ȆÝm709yx0 LVxVӀlq7Һ0K aã>-7lF &k~KNaY~MȊ9a^)PAG0΃:Q8uVt]7a"b՞b>vazcur¨\?{X9 &$wE:F1Pw3eG!YДkĩM`T&MA`Jkh8m6CEP,'NX(2O.3.`Io%AoN^ª#f^ n2KS3Ч{ޓfBUׅ4A+r :Ýֿg:ȃ%X" vJ3gy{G(_@1\־%_WlL7yг7(3Al%&CK˴"la2!vO̷Seq@f q8TБ?/T;;i;4+%ӢT0/ְ!ffagr1Q#|/.J{Ēk"C)6k9Xxqqv9#);=.N}6~X66(JW`d؄{ 8 r\)]EZUí,zygț|5-+߄pgWyq-4…U@i5P㹬A|ou3 .aS~F~% /Pg&XgiRa+sD}IE0;.'F0c{Wo~u">eYA`I ݮ4:-`.iFsLA䷳1 d R]t foCRjvf t(GO1bK@ ]KvŘUˌ}N0 +*[f9DKY0t^y;㮭!h:JMnZD2f6G,rFj<:IKp*x$$ZIy G-)H.8+6+!Ǐ !%AJT#va x~1vK5"x.3pҜ<qԑdk"_&u9(H/{YMx, HU9ȯІIi@@rԴܐS;Yd w57J`Pŧ; &2vZv;/[{6ȻRɄdFDY:5E%l%G'=Tu@>&82rۋNhp‹Mtj<Uu,ǜH(8}17?sFE0Ek;f~tDNmϖP$Z]`:pl/,P+7]ˎY~TA/}NIBIiȱCl6Pix92i7; m rN1MH#-ΪOHn 7 ;t@ALÒ*ʞ/t=4\ӟleE'_eCWkH8-ϸI]9@qDYrIҶ~(J?^x;k8,b_y\?c-*.}ýh#[,ƴ3Dkgiɪq|Me&*.\ MҸlx_O/o՛|X@-`t#>K qvc=8:pI|Z f|%f}<. IEqwP^M-MΠs&+Ckh fQj꿱itCw@w1yA.F(4zbRيS쨨NuBAcBڈ^u$[hz1V\kw²zH;K[Y#Ovcf>plNgWxE=dDLago IͽW>4['-/u4O&:3D},yH ȖRB9ߘJ9ه񡯇Nj@:1%W"kLTShKC9ɸ!di--Z.*c5򼞈mݢfпkdR\s-JMT.//rv_Kf_{Qz;TVSOnzXi9#'DGwʳvRJ7J2z{͌m93 OO&x=*C3])2kj 9нhkAN4{Fq'08Pd֢·u)4< &,gL&-r]ӽcE2Jt ,GWx/3q'NLbEgہ<~>GI}dxdPV;#V)}9ٗ]Lc~o^Lg5qUZ#`4VIrݔ"M7PFW;Zf6;*@< xNjqfjoqt mV>&j"t݉JC+"V'huX MX81[όu`Qj_5.ucN4AM,3fC=׷:DK|%*bLu鼟i@QŒ~Ze{l Br=PS: H7zCO&a+t˨DYCA_B~lB9w͇r βF`Pw| P9T|-hiZ" "vM r&S`x/% g0_(sq5dKiI,amLN4ɯ&2-{,$"T3:D= ^e.JfX߶PCqsKTCΖ_s:|7K J@Cˇ#AapizvFSB0#]Eн}|ˡ+YbDumH!C^c]aWOȴkaHկo}e _ڿ<wP36+{0U3ee/KSQMI;({ J5gRvbc!Аڼ(-ghpKɿkkWe xTGzPDY?QCY}F}?t3cSDt_#0+{ڰA{zGrnpduy:񈲦iBzT܁z.v-ow eTWF280w&G_] x@4 6J>.*]%?p6'ꢨλ 0hU`)Iy5=Ju&"oO]zjG-(at8hQFLEp,#m>ΟHeYxΌ d 8J:±9zEWtXˎq)]ƃmJV?׮:1рz 6<Wǻ?8r5.ph[qD#/ЊD+Csdby##$dQeTcU$څÞ6ր!ro0[CtlДu.]ߪU(ZLa㠋rB^fO^07J%@^ԁ=`8Ә¥kxO`ƴpC"o tNAePTH.2s2' kHt׈AI7yo'&-TS75,7,ۈWf#+ qFP\qtId0|9f R'~ RՇ+mB/=9Rcŗu9Ss1\/X#xPl\m`,]ɯ0E0Qtl-9ZJMd!8ŵ ,/Ա gcT|@d ,~LtY;UZg/kr6dreʱ'{H@h#Q'HźXZⰚ~*vm q]μ-a"-/ Ũ1𷻃 :Hfz*o?M[da}+(\.»׉t5PNVCq;3L֜j|)a 2C:k81V7ibehl(PtC.yz(\ &w[ Om 4uMMY:ê]3i+ F],c!׉z O͢\Gnl?BA@U>躑&孏1E!q{¼]^lOvY2!] ʃ aX78,V~dfti=8K%UM tvK5/l _{M-2 hk@JP.6KU`pz1zhXyӭ\Ea ,BU֭ hYOR@Jk2Y} `-'Q24= %VJqFpfRC\OoxzFfH{ky‹Yl`l zxMY#J { og6s"W;'ӕü 4wEg%"v hG˯ 6Gd2]g:7؍wFM!  BlqL\K;oՐ\%uKQ6aߟ0ٌVr3VP8=>;CwP"$kdy;YV"#KcYQcItg1n{E@a,:Ga@adRo8r_= -[1ry <6gu7hã9whi7wJ@ Q:{D2HYk23̞R@aw.^ 'b"'?1D''t?(jCGw 2z;B`WG>K.Y1g!<JnQW#*͘x?oa3Zy?T8:NA(Vf)J^a(*S lٞk*#\Nw2f>3I"QFG4T06?M3 ggX̍ooOwfK?'"Uށ4Xn?8ޚlX039VR؋)WwKXG/0ãd%hSomPErҾz1̸_we[Ik)ZSvqc,Y?ӺD,] 3y膲p8\WqRK$7aimtLFpvQ &$$ 9 8+o? Iތ"c3ѤY& ƃpw6Xk`m\.m? EQo$^N"`JX#/XM'벞5a<{g M2rULuq5PU#_h P #$IY OgWUm~V:Q5]9bŰ-t[6"E"ivtp 6˛n8`#Gc b>f:]a cg.>5} Le+ON4nH] 쑠[9Ϯ'u 7|< U Ei{i0"RYQ{6`"}_dp6;}(ޭ@t[<{2(S- "~6oQ[Uh,^ٲfXOSxn;PX옃&/&o"=a`D8ݭ\3QݘY Ut]uG1}kK:`0]ݷA`UY+zհ7yQ|_w2XV)VֈJkžb/&(Rܜ}:,?;Fj}"#p1wےzhk7ci0tۭVcy(% ,ԁ??ĭh՞3o2'!^# _S<"oZ_+?DBo{{a!i+v02)rB -2OWفc uDJrFtQkXiR9Qe mj/gSЭo\?;b87XEIyVEĜ߽;XbGpk?RY.Bgdp_1w4>*6pV).I>f~McL];mv'-b~nйDSia'P6yڨ 2btl1#߬!J'e}̇@lMϞ.P475d{Ze )̋" [xu x4:S`bNX-|=;y,j q;pX"^-f )e #59Ԥ[6O+ (Ž^Dceg(C#  ?O\xyGq5TڧTu2q /F= 'jK ]ќH2k(IFg6 7~IZ[* <* =d~\G #1_믶A#s\K3ۓTG錊3 `(2֦t{ցhA]\F1uE2֞9L C#CWpE4(^mؤ3J|oJ_1Dϛޘe$H4#Z9iR17=#>ΩkatQ4wylt S9GIEW/*x]J㦼+&[uu*NT܅̮RԵG*x\_tr 9 Us8."Y!Z=55NiP"H:/` {(ʔ{vFϢuHcV`Ɓ`\jVHݳzgMuQ MYgt\)V˧i7G?s{[ZOT@~R'VuJ>`^`> UVC@kʔ%F֊}ei,ݓ mkơ}7Ɵ RM W<lz HU_ԎTS5EjhUծ,6ZNoim4W0]'0J ܠj\'#ʯ/ rZii}R J% CG(&ڜ%Œך&K:?fbjF͕ABă `n[Wy鞏s.oe,CKyr՚xrG[','s-"FϑVe(ذQ-lUN7L9c-_I%;w&9D?朳65@@/KXɴZ2XAoFM|IdA#?O|XzEΖ.Q1o#W"z:'`-u_#"7kfcP|*nc WͤVtӌalYɥmeeAH?NzəO8mut(WZ_ͧ1_hENA?S[)3M*Jtt7>\@"OVbH9&V~NN;^o cˡ͉ ݛqF5@wymf^ a}<@ J:Ξ(Sa_#~/8)yw* %Ns)@st ۅx"t:6ݘj`쏉,kY$!8V]*~ّd6SzP"8Є1B#uѻw7 Ԍא8ppTl2àG jvߔ_yFr{:4M%>9(Gz8Qȁ+ \Xr$[HSig#rTj|4tn| X|3'û[8C\ZS alFGO'`_׵G{d'v.,+M*`F .-Ԟ-hp2 |+Y;玛WZR?5IcԑOC/ $s ;r\"53~~%.!SdDlThӓMi3R2吜Ⱥl2sVdkq9^r\LELoI*IscmT(g*3^5eƘ|g*t5e,/3zhoS=&O(=1V{5G֬>P .뀷9&TZwC+EcC2\Jx#S&^paƔ̼!G_tp#«YSO0+T2Evn:`kE$qТq_-uGw&80Cx6{[ʀ UfkT"@n|M̥(= Vuu.\*Pv^j WM&Ndv{pNVM!&W7}_Ht2 9)H,-\E)I tߊI9 k ٓu_11ajXd钰>-'{3 $4i绠u[]#d< (|pp_#,ghnbKUV`Hzx'՛d5OhFhdڊe#FE)dbm1)qzh\J R͕Ls|Ve"0%V,e/L,TFz5qA{a'QkWLGܛv[#HĢ399#ov1j0iR :+I:S~%^ ϧ{ݳNf Lė,`;usTv}{o_HYo!;6Ҝ(j#y,#P6VEM(IWo@0D{\mY#f jYGDtB}3Kl=yuzi]EzPڵSq5O(Տhu2GKa[b"CD鹊k'drqMjܭ. ֍6_+[qm-x-KAA9Ц125*Rm}5!Q U~g\ %Y( ԚG(/Phzq(@ސ?' w b Nrv[HDD0UD2J„e4̂K)׫:ex[3YT~Ӿ[Á(Qal6C*6^$n"z:'pPH٬KTȖqm\A*X}G``?* 'C޷P_'2e%sߜ9ŧk̓а׵WG;vKP7f 8Qy<zcĐdwzՉϛV{j*gҜ$Qӗ>{RP~mtJ3'+N0nps(hwзm Ugy?t4} e!O@*аwV-qM9pb nKzz&ƻΔO.xVqms]Y}Ƴ!=iZHa](筘z}.X' :w .$R׶C8chK3KZn%d}s\h4}j,Bʖ̅1M($g*d [;{oVWi5* V3 `p2;z`Z%F*ȯmSNlRQ`|b%J4" TV2!3g_-#p XRadW~Y43% d\Hez):[xF@ NJ}CdA**tve6ʢa#LpoJfS-n;_X 8T(b5 *wG:,4p|ZY)H6Z0jJF,?J1<%H}zkYD[)C J,+QtX6^'\Q@Z"z}t Com/__\~B6K73m#˱+픓2_RTtb(^Ċn9xn8A+afa 4 x@ Qei" S /J Ƣi\H}$u,mf%OT!9 m'~$.h9_@kn.6`-(<)_$df/dZ~QpC$ ȉ4Avkơf%_ S#CN2Y5]ѫ]nRNZ l(Oo`pz{<'Ԟ~7y@iX[qQם2w 2:aEZlYr`7&EU9^.63l:#Kޭ~ T"ay,w'uym Zu $?(KyqFlqukeH,u;yI;j">2+WWS1ӀC>(^fگST5eq,[w`EZKPhfZ~STEizx1#3G|щlv2-zxZK[%;Rj)J$43D~ʦy:r\>gʩp]`@$I Ǵ:nXR'/xF(:1c9 N I$;.-P>"Cp8{4W90|O[3;4)FvE1E J;A3 |X lZ汣V8'kŭ wpĭ<i^btP1-p*4}fھP "m.S@|RH9q|mЁܬ x_c#ZR?*P%]ihmz?vt0֜aQ4=N%ޖA|FA&n5xFˡW*lf:dB;`d/9SmXgN&5n[R@ P)@-ԣr:UH ar_R ^'Lrud+ZvXF70wȷljk6mifϻ6/1ubdե\fbdZw8h*YRF%(4 S% $x5JIH0RJ?%/UBnڴ-]q~}XlȷDAKT`åjk,/ >ժI|u"85$wQP g92]}jM"eWbJC`[g ]/ /̱|҇h%Rtx kRX 6g3d#/g_k$8r|OH\C&'PhyCA-\n*}pV+zIٷ6Ip:OPWhPO&P!Vu8$ H;z 3̟DmCiN%gM}֧ fe@64x3-0'|AD4,YB Ƣg7m5 -o N>xKT.j7^jwKy6D pHݕN`RX~ǚ[^ f=ωna/U)/ ŗM}x> w.#~OŇР,e;(ŅNzp/FmxIL <l$_  ]\(Fp!d#o4 9e\)uEvbч5:y^LEzX2Ų0^@|+K+f+0 2U"# >W !*T6jKIen^smjy~;[ D#V0:z:|2ߟkfh)XI0 "~b >(fG@g u Ѱ#N"SJ?0QO*mCa AdP-l}=&FD{AԘ\k6gۈKL‡}R½Tjhr~D> axiJs7{2IZ btJUQ $L"pk@я]O'xJ , /3:rBPZ6Q `JQ ߌQ*[8f4Nt=C(aj%g4?=d}cDZº7(oyu}}n,oWIb;MoQ)M9V߷SӾj,[oKoR?RpƖϮ$O+(Y(o) ٫Yn7 (uC~fyu>SG/o-^uX#[p4"{[얮ˤ&eR:,jwS_k1C1Vg {rpwѨzq$//mM:FGıNatٻT o`I {YI].D>h g9B#x׎;|" >P!Gab2eԢ`bcԎ U*I# #Ҧ4xEYc>,RvRV'FM*l#F^#`eO˗3vB 3 M7`^* tC"2nkhURm3GaջTrLq#zj,gm'?1s!ȓA\)ɟDl*w⊰\3mZJ}ϓP+'K󎁸gʧk ߀ƬKLc{|2k8bͶߺ *}W{ۖ yv2x HӯL1P od`o{Y0ηCa>*J Y@ ?T LW{0yD11]׾ ,h28]F9UB aElQZ9 `|eK1bKwD,t[^ fsL|d.ϡzLرbK F+<*D|e-G6/ |Kc}j/:7`FU񿊨n?B(nJ)d/Hpg%f$W xȱI2SKyDS鈄3<LHc{-Q';wq5e\ bf/G"u|$w%w5{WHC 2$SP٨Ho#pSM OWSCőwl_u"Ql_ N=ʥ7nP~߂ e71N&+ՁZYcr㙕C7ߥ]fKrAs{2[QZ xAG4JRa92F\,?l,˩Y;Y'>5-Lt |~o8b4X'ZOX3toAyn. u܆`%g(n~ٗ7vXnc^r_妠9væ/5U^1- lɫW(۫yp.롷#fٚOӻ.5u(q*yv iCfRSM U#`C H~tqO [o[n!~CX~1iI3JDcZXlԕw+Ku :_/Κ71_['ɌqQ|Zo,NJ9in7:1un,y<&|/ȴ9з""G xb̅D4󶼽<*o{v{0E//ڵV7D9@yB1~*y zvxpRƔ'V$:qA݌(`ϐ8}h0#.Ʋ[]SݍJM .s0+FO*U+wV>Kp4MXlAFgPo0\GdՂ<2‹mCTpH(xRjUD,kj$:8$E+@{gz}PbL@6e0r!$!l*c27E)? f`%ߢВڅ`k0+di2y(o>kAS7]܇; t,w&ѐxS:h^epﶥDf#fd28 ѽvHZ> /:K[%V0܈UKVc[)}:9$ f?4ť+X^L#,p|8|X)V$.Ad9~ܩm+dnOCm t 3U$·nlckfq7hmQ>xXrJ[5YB칱!f>$Lt4Ȭ'8vBl*ďeIkG>( }jZ6Dm[@,̀ lN:gK o;lUƻ3c կAfP+Phvt6T,48|vF>笿9xYQDԦ, QwWPe'6oB֪{m{\NsPyZi`ATvk辽sag\eb3s3ˋ@Ɠv63Zی7' ާSLHWl:K9M TgW=z[ ^__ UKR _&#J3+P}_0ژe%Ϊ9 ^X^wyK? b ~)}ͨVnG![ lOWEGAV!\s&]_| tJ8Յ<2VeZ#e#jTAIJ]ޒY#$nԵ=I`i# {}\BcYUb`G"!`ίOFeev OOqwG,Җ-\LKxbH.7vv ߎ.$oXqİ/U~Y^ȿp>[#m뤝GJs%W)m9-YZ VԤxxTihI7Zƺ5`gE Hg 7yOgݢ:j}0s]O#?_Y5ₜθh*<8|WvJf#c?CID!?m8~G7?BMʹ~BsLlB@+Hk$ŁBX[_&TmHb)M6wȜV>s]E*y+C=it/!<d^t|W,ZMi6 ! &+޺ku}͠v' m $F|ϛcJF[PM"6'ƇMfK*(% =۳I|B)~b/>O GQSʲ鶞76ݸ?؀ ֯#: H?M9W52* PC˴XaX R˨(cS0r4rS|N wRT==NYT }@tږ>7](Es1˨ǔwbLk@7h#bN!T1' .N\fd.."%w& 1 1Jv |`[x'Cxw^\V(w&UWn$magƑhXyN 4 EV\{D;u{[NڧƥlJb+*OMqq6& *%ʛ,V*;VKaMl~hٰEN(ZL*`䙾a/dǝvPipZ Żӗq%צM5/6 F!0y[g;WܾNu߸ݗhK3eq1.X+NxZ%Ѷʕ`+rߑ?,8A /O'4LO?lu@[t\!C{"߳s1-5'(ex`Tڋb2 t~{'\kİ#t@M贡OČ~s]‚#Y+e2fr;)# @eqia],Ϫ}øA*j "l]uX0CAG!UH1рvNI%zb~r<ޣ㐀wWeya[QnW4xNo̼%kd0=iõK-Ӯ(6o#3~MX)BN_P5ŀF9MߑDcT~%k\3-==G-6pÓ Zjx!N*:0piΰ_l[89n|KA/Zr0}M  Q߸O##w2oZk28DF5ȉP`o7iԋKMo8(Ƞ‰vg1lA. J/*w2*(@7 N}="h g3 Z9aUBqC)NH$l_hLAbW #Xȱb,#l]k*!nAhBf;҅#{b ƈ BU3ܚN-3܁c>1$j~7Ԕ4h$,,oۛhf VqEۘfwDTlQ!(ay^"%TZd uM(uĵ@՚h\hG/p3JSWNrNC`V}!I31/p~aƽTd}b'bfk$uKrў=sVfZ7lHL8VWв| qhp-␲hwt"E#$x ~=o1w:-Kb=5}3V%?V&a=*5ԭfX~fPva7Ayם+qQ_c=,?2m5H#C?)pܽZSÔIgWjG}AىtvE唊wGe-F" sNc3/I[\3CFcIŔ;,s!pZ5ح WL RJ\jsYV ?dse:&eg7'RmZp%ȷ):QGcBߗm$)C3 9G=, ޝ+xQxdj)^y0[4y=N*wԯ_C06ϹR˻|j&.*}ѐm]ʐټ KpSpG<p pⲕxÒ5;`DBّ@t:OE6mFbyWw 1_|fY4PZo{/FJ(|]$| OdJʷ-`L[7;K <_ebM_YJ6Td%<3Tz7#!rsP?xR5-8J镯 8z3p=HàP|]hxy$ }NEWkwlj S{?I؆^z-cv$iXL1cL1,I N9ұOX*0 *)n|Ԡ# 8j@ǵ4cʼQb0~LOq1Pswg/E\ Ksb0-yӪs6v@UEL"9s*j _Z(ᬣQ'ahfQoFe, G< ䷇hͭ֘0bDBi}JOKT >΃o테 p~?LKnFܔ$e{W3uU2,bn5ΫӯWժ 2n o)J͍&ؒ(ޕ!5|(?Z2|AtT@Hgͮm4"!k׽#7vaL ,&}[.7L59Wnl4; yӌ\-֙NB]#AT;"yEe4~b1ajk:%y}Xsw Xz_ B{Ey֥{l+xr|W'1U@kR6uKF mLA$t8R 1u'!<.ã<SkV =ZR9FAXC5LS3BT%[eGƖ'r:n]uO$lO)-A4dSQYSY;1VNO.! Iɿ@w> ͉!һ4`sgSĦWkX.y^S-iv2mrֿ޻X}5]VĩS_Hoٖb\NQ 3#u_2o `@m].%',F6IWh32ڮ#H$=!K Ԙy[жT%GXxQ$=dcf_I}9 @ߟv%fv%<*AEEg ߉61i4֦/E480*Y.,7ؤI a0\F 8P4ɧ e}>3 F ^qg;6z*.bA].{󈳽[" U8OY;Usb%Yt=jߥ V;:>M2'وrs:j==Z7`2fѧD;3* -".8Ts/~005iŠ̯X9;k )tۖ~Pnߥ{^jd!X_1~C|@ԡfӄOAp2(Vʪ R+t`C&*(w+dm,]e؊czj%LF(y{ףc4詞3H*J%/ v>Oy5MZk5>OvY}0m:΋_wģvQPw>#gTr2{'RhKw}YHlVi)Uxl m*@F"&dVi:is\?~&v@s!C2DwުS+Ő%Nn5/"Ex+Xc[F)pqk6=1FEBm :UY`ך݅ =:TfpO{ПeF >uZ#96Tx^;n6\߀0oR9;b5WV48l> |C"UJ#h[bO):5WMiµ'sϻ̑oi& "GTK!s`I-_đ]*LŤz@.5Z'NE ~0;Rk&%V+(U;. "#4({E#|{w,чNkDcITmBxm]D6y*V t𘧡FVe 5Vu׷UG (e9Nd`/y}і҈uzk3B!sD\3Ro7]PKZ s ݏ?=Mzv܍w*染Pjd#i۔hwE܂w^0?at0$jI[R~U/W%Y(L Ԁ *Q~]4t]؊T.}SMi׵X6⨯<#0~ MDIT}q@:P4TLkcd)IoN$TصViM2mVv" AEb1B2͂r70mAsd^V4'i}=p)0&֡plH4,]XNð'hp#kW0dU@\Y>~ oT sԖS` }^EAU5kp^8%h 3*xdFoWOa&"?@\RddN&+z=.XW{do;,W#=xaR1&%hך Co/%XPӈy̤\۞쳊}}~b'tXop(zUU;Q8K$q>Si8B>Ď:^c1-4T۵/ (DebID&!lʹnFd C$.&&5~;|%XC̳vz8ZDɽч"(AQI2 }2C8^?\ J@ѻz_ӝZ1f= k-hGBk&( i)O<`1w:LGo 0L{UԜhPC" Vt=53]oݨaC%tMhŮpq34bf^@0Tz" K븸-&f*9+hR?Js~ $Yձ-'x$I74CMޠ J"+DRpjzoj&I8Oԋ|U}EAXlL^7;W5UPQJe/LSRBL +44EQE0Wv|;hRz# -&ԏ8v ֯ڞa( ʨgxŽ!-)T /]3}z9DdľiMPr`o/뻸x}:̏f>BŁP:5WYNgF(#3n$[B[i5<` $\-я~O}T`uO;BfB)BC/SϿ&M?V1>CX075G|C٥jFfj믐PGK_VhdjNP#8%Uv%nJ7Z%]=UQq8-/I}V*ˣ_ʖZ Dtaw22[ͱX#KFZkp.uE0t4xGYX[#Ŕ1Tİ'oO#OqD "8X4>1RȦ|t:a& Jp<~q2-ie:A|`Ͽ>54S!bO NTd)Z 6*r$;W_ȥL3@/$3.0 ?}.fؖ.K_WY{,iM`% *ӧ:UY>"`ovWsNfkϷiu)@!`^ ֒ސJP.q{qTSθxf7td.?tE_knQNTL:OP3PEv|{@ ԇG BsiC48&)vg΁bEBOJ>P} g4\\3cqDTLTiew$~i&k r% LǬ}][mE5V4hj+T9+}:$&3d\;Y_!U\6$}< A;i;C2 @T_Ŝ\7zf5HXz\RldL3~1[ l7^ Ms:03R8P\5vs7q3 H=!!{L:`>o”H Dx)%T^-y@BzJ`$@.Z"⯚JpPn^ICm*fS o_G93 7>(F+=pH wshMtjA9z@~ӲfޔGjQ}CNH~E`E Yb-O| ǢVE ,iĿnStæc LҜ C"EG]TY:!GmmAҏ@@TGMH}OSF.2*>vq[[-j/VT iA.|n˺i\, ݣeVC1cx8%:K+}ф"oeyPT47c*PFzf }p3.N%w'탦wdYbEZ %ڳ5Sh GYTR]]4> oJ|$?r7B"`: CG4(B0sg e^XL񻶹80İ2Ltb}kI[7@-7H'40>' Ou ?nd/VPC3:I]r&+٠dB&2e4}VRYTb$/3D=bۧ{%/ϗnx y_o 8rLr"e#: /os5T0ﰵS w:lj}I]q a7.?kI93t#hZُ/y^*y-jDuk;kFFΔ䰟~ؤ w,TTT8&1|`uh? ,O/ ]4[ z\UAIu)fWs z?k^dx/B o֢}WRuheM-IصO2`OI3}S@.Sv0Jt0,): ($9IBqPk=__c jg .D#-\ߘ"I4UT3ΔLL<,˱{ERRTQ$ϫ{wYs=@iY ѤX |?ʊ9J{J7Ii9)7;Pl:x<^Lwv̪wRH[͗ d%<-I|)껱VF,- fG4cU,l}>C!AR=9 [yުFik=,8FˋRPxI-gNuE[Y\?۔,F`BZe{ODI|}>l%FVle_pP=rg$M怴8Gb[/Q<<Jзob!s\ZN"", &(ɍxkhqj x [50n#Hm   ^5pDGHmչ x8#XMzlr鎩NG]#v ސ40*U͢aX4 uNb-<# 7C\^sðK4hذ1?ui2i0W242س˫6u7ݤ MH,B6s+ajup}l4SO`@e&4&Ѓ#pҾ׶^LɎ;Û4R.6j0PN~Ǻ|-L;q;$wL{-=J&CP ؖ";:` wRZIBI!v(U||I 2a7-x.hp އg7eܬ$@w9/N\hG95i3Zp9<~:_ ŋ?/9VF.8׺ $~ e[k~ـ1q5[T$ $3jù紱;:&CxSsspSi⯳Jdjyʽ7[bOyZѰI~cß))%F-h!-a˪Fh4{Q/y;͜zD@c>Թҷĵ#5GN?n @&7pIBL FdJ*Cb@&&p(k4jGcs^?8O;B@nQrgƇg>w:~W'f:+'=ɗS MPJWP‰7PcT89uS8C |`XcVlY?XCHY+ZϰۓkT!eዲ'u--36"#PkGgL\Ȏ^=WRiיԒv)ɠ90jLWoLX-18, zV.SoU8}qS-"z#EcJSREJث=OUx2<إڋuxm3eh}g"J^p`+aWDȣrqXç'-_)q>; *]3X@ nG}s o$Z5ۿiҍ-KRsGVdT3HU^4ۛF2:&&ocJLY^~gzAHAO51&_R% ӪS3'>4>{ث_3$cMCt[;;OVNOIRYXZ >Tܮ{ƫ()wnM:{( ~$gv_4#M4^VG4ә@C)gG=8H38Ti鑆'"Ÿu-kp⠁∨b]ЮB".N@™mk5Q|A[(L;*X~#uL Oۚq>"h ])PgrBGuF4`nX=QWg.i mmG92Mhu/~pK9y_C6>uqr bܹjH &Dq@+rᔰ E Lon:+6KJSHfApK8Y9"l-n U0ɐ;4TzXKSr>꺖CO$r pahW(~:fsbKJ,$y!s+ X<TiC_4D3cޜF -ueK41c 6WIP˺i]=[t? OtTK>WZӽI$os@ t&RWNK/MРTx;kΝ"긞Xܭ(9cu'Է7 ?}d JJ[J9 BG&aO}c2>>`j|%Ǵ0t NeAAvuځ*hOuB@$Y˴x֚8}G,^cn$͘sdu'YQwj b!CiԃqGzc~ȯϲ?)CD#9,|1dWT5 sei,ڄ}L#!X չe$L^;%QbFQ^T* {A s? n`g mONx0%zVq僓Cg+r1Ph /%''^.DcƳIw1&"r;Ku;㮥N8Ħzl:3O|Rj  ]kt7UzIFg?k%LڑGUKfw/6Iku`RohΕ]@+#j:#OPlBY?;8]2ӊEe4O |â: =3o!R܋^o$![A?W}e7Oc59RJj##0 tGa4PP9~dW hiY67c/h@jKqr) jVfBƆw'%@:rv%qP ĐӨfyr6[ aݍ+z|{_6hk,ZOgpq`S?`X5"ZI#i/#}(aQFGX/ǚ083['UjIa !CN+~+"RqV9fIrH{ W*Ts{Cg1 aHVv6A1j&eYS~ @k*mlcrRC-mh\Zh4Mr?wDOp pʥg풍ge֥w{E*1Ȧ:-VosS|!eru}7ងU ! O !FvWDS0"MJ!'*B,J0]ă*w;| rKA!vI `g&b* rRKO3ai+!4aS:bZй[̾SCGRnhǓK*˓9IW^л$rx碷jH0=p7?ɚU v c8EuSZ?S58'R kuD$[Dn5dK51Tc`%D)0-LfD3Uh6?ET'-(jzlHOgmTBp3oڟ,]1W薗q0<]ٷ$yL;!i{߸VhmdȺ^3t}[ jgJ9 .7Upۇ8ܬlԳT`tP#.ct9=42券紬LhBl)`z޻35Y 9}v`+~X/.q= 4G-,r%~HE$ۑqq̐A6/#]Gy*\jQc]J|}c=(vt,mIJT~G, @//F79-|6V@vC-8~ʻVS~.B:SSa40 ӾvK5QJ]etܽ0r;vYlQ&24ӯɃ{>@fOf&`_ 9₩l8[^ >R+D:w5\}ayOĢd;p'(lՓ1 ^&, j_'qwc  {۔QܓC$XQd>$Djn[JdI89cqc b-N_@lywbP%!? ZON,EOlTmC"}}&}JR-&e+ˇWz$R\&M 2vHnFz+ADhA|?4 &>3\;~gsnԩ$+!]/kKTy-Fw$_,J;y,8WPyh)jz^5< 9lbWƬev49}> #+)pHwdˁsXkti ]\6 e `oEW^C4reȫs]= 7;Z&/|.!SMaikc. xS{; 0& ~, <ـg+H'nȀ':H4Y7㈖Z)Jef\`9܁NqtlzR! $=֤\Q2E~ČdZKDH/*N@o%ԕKC4H7# H.47TKǣN|6d y95eBf^CN;='i6jsGo&Thqɒ #fAHӶ0ftEy$d8sޝge)?oJPx1}Riǂ#,3B;f V9!!s/;H#_9(d6m6JY[>Z OoJs\\>IHe kڡT*76\[;E|vŖ߾a5J H KVg2L]Oj K5Zbpᘔkog6/n 4||08yI"bpJ_$_QUw?tFR \iKWѤES""WFG"4:C Wa·S( !`T̀}/CkђQXOXW][#dU!xU~jb?)MC ՇȤksk@5G|n|k1g32m%TfMl樢v7(e^#Gڍr꛷9|鐼:u\`0 Yvm+h8yT!#I5e~iM`|sI{26"@c .NWύY/l4 1? ORp%ԋFqƙYC~Q"(uhtF5^z8Oa8 _pf}qF4@+ ' xںz4b6_p݂>{69*\Ŭl[X@yRi8.]X0jg}S.',rT{gKq9m^%Ք8q+(0nv,zɁMsv S#a]QƈP [al={m"Ho~ #xwXeQ3iM#h#Gb'eV.:4K[,6XkAޠn6UP` NG'Q)lCr_f&^ӶD[!Bӛ<>q-$d> [&iyq:]ț??Xvq6BmgcF=29m|$'Jir O HMt8ZÎLրM7F*S 98pAv7Sa7$mbk\Csq>Cx﮹>1Evmc:AZ1TJr4kJUPs0`舚0.S ! J5jZȚ3l&7zn+Hz/]b7/|{4]#\ USBćf%|Lۑ>Hc޲9 ۘD@:8N&U~b!wR'ާrh:1wL)LB*e^9pda1)0>D6{%0FrwG10Ǔ$R9NoXQg/PpNC7g a AV |f <ZX : {&ⱄS@aracO =M6BRWw~3Q&6D 1&]8óke;/ѷB.pbUG_LӦ2,s؊/w;=Ǿx'/ {U>ng.{߃I je*ɧ|Yw;w#~wbm, h[>`!r -B`#ut$'Y ?27NBYYwH6]M@;Hq?/4H5̊ʧGNӅf[ڹi$v]*`^*Mw\2irK"g}'7̗ w<$ݗ_|WGPoGBׂ2V+8x:_#=NE^y*?:bc=9_:7ciW۸a6Iӟ/Gt9AºyۦUNrjȳNڛf3CBV߲_7.S.A̺D }B#"y; EU u|G/gh+9;A!ȱay֒IFĽ`Ja(X%ENP&zzS?H+^ỏK_"",ud-If!nz"vbקZЩChE:".S.$)b}4e=VeO(Ia޹bI6\:ZJit(rnlsPNI$]kc|#u Srb2_DL;B{R߶ q*] C>Y XxQ(üǙv%ͺXTkvKRk2V*Zpǹ "cEc L׺$$D?/kGIC󯶯3 +p5 w]{2`1⊽c/֙ o bAέlfLnACn]t z ,L{ ÉT>dA_S1[a6GGoI}H' EL .SLD|J N9jwon凔x> $,@8,_*K)Zޞo8Rajܺ$vVrd67}_];ƺv[$Dxp)ozT]퓿)"naべ53Sy _K)l.` BF9UBۯ2~KԞҗE*kĪ(P}#[TNJFp8J4lr0NZ $! 巉Ke{jE T3J9<"2R}FԤDˬ.:'Y]mqeP~aKE9(Kjݭ2mVNqheIY&w[emfrO\䁫uB=rn8m- ƢRm>s|Zf}>Sce=J uBCCRXecO#g_K, MpN(}-b$5={ qs zXHχU@iNì0S1@!E'%=:Bs8ƽ#UL'+yΣz#2_](r%@H4/W']w0I$,ro̴Щ Z)"ZM"KIH a5AKYsmc֝J`3-j1/黤-VOi8F攻:F.LP3 G{yRgr'bKֵ4h8QANYg)ZNc^HqJDN>'|Y~*ش[]t Xҙ`J@zTЗ!TŔ̓|`.fFd碘,YDoڏ31 zft+v2ļHkh<9nU=1Uˉ[ˋhq`ƕ<$KѼϕUW#6~}kH(=@ C^2JDe%QWswҖAI46k{l'@]rYNY] 3vlE+ ݽ484P9`q^0a6%,1cHIrBz=oNR\R,םHe,p#0 DԋU18<&Aa4g5ٸN9.P&V-q[\|. 8޼Ch>Ra_IPIN!&GϚ''a*Vt ]i4 nUdlVb,+ )&)EZ*H} ?Ԙ/׀r~fif,0E5ΘT_1$^vVjJ 5&mKuaPMӊ~hkg `ˋ5+׾x|Ѐc:x[:_?G /UêZ7˲ ,1z1萃SH4f>`(+InNࢲsh~ZӿױREzUu :0T~f8b!('gkzv8qz}䞁[ "&C0j 9%IJno![ޢe *_ͱr8j* a+[±3ؖ"S©U+F>1YsIH,#5XyUXņIZ]ed*} EEP~5sFwMȩS?ݶ.>9Oɀ^&Z)ܠfESFy#S۔mx1tCBس#$ofl XˉRY.-KdЈkea&N7q Ş \kkTOhSMn(97;%%Qtp_5=ي"I*ؕh' * } vM| <9$ŭBRΙn=1};&88-JyDXoO: ʲq@-)Ct7-1G:#23ں,?f9QVyu-\[;PkJD2^&vE&X(hP Y w.@nhOLR rm۶c,H4_\gUxhW樭;o0-9tq; -33վYxTŜ(aO436X+ 1ԝAC2E*ƈZ5b!Ⱦ1Jb> \ AF.{xΗP,}Osl;I*&.tot4aN[-O#6׼ſ鄿!p! mmpŜjR}*n]g^R!Ohs}5.\.zg8\H?B{0OIYؒD*1{_;R8;H![^%f1gA}jY P4؄E22쌉H"L#o7;B T>"PࢬD:{l>"EdZڮO{g] hcCG& 0+/ ̻sCiO&$S9{I f%YFI z] :u|3cڈh1uNԻm'\s#ѡz5ٸ9X%-@s嶖jc sP~mqJ _wrD(1*Q6zqcs{ir$}gRӽEF8{R qk)խ6>1 qa 4skh$[Ӛe ~w`c%Ѩq @JT VO-V8&TreS7C̿iYx}i)D P Hܧ]Vyآ UOSAhք| n QI&vr} .cb<bXEaڂo#&z*8RE*,k%;]#<ҽI }.ȨLt7L`QPMt_ƾJ\-%Q~⿂!p3%ӣI[?=ޕV肹ϐvK*[oݏC۶vh+96]㉚\u.gĢ. @B4iM5jH#i.:ybZ? v,6y5=I8$yW8}y}QZ3QDf?Dd!$-hc0* W%Ogi,),h Ս}LKj ukWY],!uUr}~"G1TD.1k x`jf c̰MKȋf D)u`Ng \#m̀ԥJ_voEPC 8a\5hl?]nʶ6;8+fr&k UQS}a|p%) `8(|\Cq)3uʠ m'jd{^~?-|iܓ֝F:1kS8}2U!HwqnԴv8laFޘ*q> k7WұvSSl0x̻Q%5ȑ\W:2 >M<Ȁ w-;o1=KZ' kkPU /*&-Pb !iKM4e%R#1g}LsF_SǤrP 6 G5g>/u^ˢtXCNK#(7A5rWK^#&KmƢvG]NFHn#H/9GO>@~%)E 7Xr0s }1[͓`D(C!\A[z"z5dz3-* OK#(TR"ިTXfˇd(;&cG @(w>91[Fuk.] !JVDH%D.?SIx4ޢI@oMAM W"ٕ_e)* $X]Q Z ȬQ2N5i|ol6 IwvJ(|H0BZZ2'd k,)1:t\Q0,| )PJQe|k Zj hGX$5+PLBѿ8㨫T|q?#x/ uGG f$SVu YSB]k>a$+5Ըnn)5Xwj+M˧dWv!zˡZYuJ*@G%!|hmA>rߒݥoơSY͢-t'QLN!z ciJ ,0nڗ;6 rj:jEt|_sak⢾8R$#a7W *",Eҭ{>Ow{wY@'Bv- S }?A VLF7 eHTO]=L`&X]}?c;(W=#g^fHEV=}MӭBArO9B"#"Iե~u=m6.*4{*3:vxmx4xQت 9~ TLˁǏ{! w Sm]}i1dDZYAP O$-(XV a05)AcT9zQ ~:=&.RPj`)'}ޔ aD q,Ej{a6V1!3G̈8&O?gOFF?o,`xL3{1z”Io?'XAܛr2y_AKMxk nKv^|]KJ-MН9b4[Z&gn. ϊ4gc*SvX&;ZEa?'(9Ecӏa*NVfA|%qڝAr߼g?i4a:Neő 1|=kiby>tg-pۊNYf?frc|]iK  mߓ5{~[8pAim=~T@5Z[Mɔa<A]ӑ~t&GϏ0 3(P$&:j9H#aS.^:X%K5 ?}$C!~/9گ=Am fp EGQc]ESFZТ$7|w=0UD#^M-ǡ5̱ꅏP,S/2v _ٔ_^kH㝴3Kk/O8ԧCKjv>#;I'a+Gp:Fva1Xa6Y]w̫ٸ 7Uqr&Kz؄U `bG7lIXuk@sn gjK3"L[Pmjz-m(6z'2y=K a]jt/YvLqvHOl1$"cRgy"S S'\&Ar^o]2,yIԂw|!?.Z ZFL/X>K%-@Kl t:sb۶Swݕ8){ՋTcWU&\toewԨyl~XแO uH:A$w VUsE9ٸN؟]h"vY'[=S*spyCK^4gHV aSȴm9҇m:u 3O⎄ _;3ܰ0BCwC1V34 1J1GϨo#5Z yQ'9fY6*QK:k5 LY"\(#&CT@PE  r\,  Ob"eX;˛䝆A}ۭG{u?|OMzYB1G+ ƈÇ+|WLԄc30 .*ri-UgSqYCDY x! S> $c]؁ct[‰9aAQ>wBDe @BS]Ҩ(A|=82Tl|]!UYxZg5KJPtxR/v_ ",4w6`meBp55N=RaQMfY8+Zi:e"Y{m߇lEɲK1nTU.ʑgcS(h&td'$# ?4zvP{Uݬˤ`.Š0ƊДeD)^U1  A>/\TJ,B8=57ʖu9JDJ׻4EAק|3nrwB<*rGEcR;;:^"ms案:?Hyi*dY]9xw;1j*c23)޷A(u=O٘0aX^|F"v`v79VkE/N]WPi{GBۢJL0뷃x os8!I,(nBrˣ:q8.s PZ]Z hH솴Uj3BYW1rн n{T7A \몚)t/~JshFKSȯKvf95˯!ڤfDُB =v5Jهr,+r0ah*8Y]HJ!:&[K(yr%h}qblrZkK6d|J-`}0/Q%awƀP3,n)aS/z 1Sũ ƁfosuhdG1~8y]Z( T jѨQIkjXD*鸨Qؑ2D*"\Ͱ~W!JWZcKtE᪳=Z}>1Fk%bmvTxK pܕb~DV1s Jkgaxe! `l'-uV1(Q-מzW i~hIL" Ҙi6*F5 U`'G ;$.Z7J?v/+iR S+aT[,\˥ƷD3ݦu9q'b1dxZ % nw+TLofhT8 =<\8n\Pj=>1:\cF ,j]L?1nz܄VE)'+X}%3pjbAGaf~xϵSN$Y%6ӐBngo:J}L)k]U.<g 5 h>dq}.0cXmIFkX1 bZ :TՃ(Q~% !phX>W9"hF[&L >HV Ĉϝnq]w&!/&/j_ ݁/%fIBƩ\  åFUqu똹M4e1ޝx*c $Kى4F7sgRY˚*+="9U!Y+ )dߜOyU)DeYkG 86k>1#x ΰ^Z"71X6Ty9 JbBV/*%'m 2W5QxH [$3=y4\iM7TC(]A:/\~H33{&$iFU DI$WI]TLb?5VtbS0CԃXRޞ=HOh'2%dtB-)#̈́"zs4v＃ݜZ.ةw{$lOٸ 䜝lx/΋Euh&fzuoRd!g/O>ΎON}"=ՉOޭ v2T Oªc|*R*k8QU. ڇW{kj0ǵ C ,PC-ɞu皝t穵*#_g8.c#)M M=\WR@8CxlTrQz#,e1:"": $p24 C`IR[Mm]Jڝ+hC,P'i@{6իH"Tz?{_hKus嶩j59vsd-~Vbc fR0WԼu0El܄vlF6ܶLzr8|O?oq&EFURudLUN\ $+ruGfiB()ٛСdŠ% +W`JU]!5x%kQָ;)2tnζMY*3n`[g,6 '/K óp9y =̑*$Ea46)'$qC֫JA-;5ʵ' D7>?ܯa:Sb=Cq+*u3ep =tg ͏X;)Wܠ)aѩjfh( E&U싚Mxpm,o54:- uH3c_.#XkQ>h!ѷUJ%ZZUL%I+ҿ~XE.5N} Rl'Ix `^etg+5S57@J.9Yưt5mB7N/ ĐE]@2qyƤ@┰,T@4x}sk~gCYHYklh`ۂt= 7Ura?x4mZd`n,GqvC'u%䖭N/ `Vhg:-I<2vz3!}a</wBE}A} dV=?j_h[|#gxeL!TĄo %[ҳbC~&;Z{ 2a:2=@?4fvZǚ2&"<7‘oFCL QotcH=ͪE#pG`~7?G^u8z 31E Ct:5θ ʉyua~)?/b 3C:~r;d2U#ekM9P Xi?Ԯ(C9n!m8[8l(:~PH%Ig7`voOrzRYp[^w<&\0v쪥(wN)BSdUg=4Jjo&ߚ2À3G 09Q:+n L?V 6')>0lCy5hQq#k9Uנq_/~) YRPwz?>.j,+#vɿڡiQIV7kM#OWO,g5(H;q0{=砊K4S3<b"mnE׶ޥ@H:dU`UE Z/4k˟0+?㣑$!l25VQ!t?f T~da=l09ݩƓxeє m K2y3C937ɐJVpvyԮrX]:&\4`#8%掟^z)۳v"M|4).)}8AbNhR+"_n% |{Qn>.~xҌ1fO|Z cD,vz>%4=M| 4 A_] k'l+uMU/-SM?a$>~03z7%&X]hM Jo^%>.-ƓlK&݊<t|KVӿ<L௰"GH :RkЧpg0V`6i,Bo@#Q6ځ1Ehf= ATl/Ըº[(r 9jhu+(#sԂ2G I-*qy7# 5%ג7 DB,f0nWBodKF")KЛxpd_jwڤ~idZ9ưJ5AM,1,m^ { fy)~uaXzgP P 4oQ 365u-kBakV\*>?Ƨ` :4_|侺߸C*^x䏩95`(>_}EhSWvgmd88 ׳ŵzF\*wD3,ҞJ_Д_["28 +N\|Q$lJ܌PN`QdRV[#<էj$;[ɩ$VTqu[sqK9!}V1ُCd.Ϭ{/23g[:E \Fr} c@ Fr$uÞ.3Wlb$[?\X*8qN+Y;PFK] Г?*w rbPݚͼ~%R태>qaͳ7)] ˆO9?FBDW:S Kyx#XB~?G$54c(esZ8u,DEЬx\AL'8䆦r8. ZkUB։PctFnO}h6<I"@_o)paYD&8XW'ªN8 3LyPxO*54^b'(xcqz`KT\Ol5QeԈؿ&mxG8Ze[r^cY9t\sNI\_ c/wmڦia#D0c{uBe$H)}6_}BMm+DMH }VNPnsɌ5MKn3:]j$'M1xص/L@?43I6ɘ$^{2yRRRp/Bj2&?ϕe36_̖oe(`}!C*HWٻhWzZ"mr=}3&BY}t*oS]q 4 6e2DN;dOpH!u|6wIԆWv˜}jЁcoJB$=!hk頍 4Z:<-S\ٴ-A07!;ް*&{SȺH0PeP7 k-D~UUc9r?R]8W(t \tY[o{ׂ`NJRkjm;GUoeSn)>Z̩Lcg̀=Tb2:rv3fkjXUʂ>!HG$d@J$8'L!DiF *&^h~b>㱋a@qe'_t>4l([\+ s #'bZX*yWH)>=t f+ 0yN)Z Q+fr(Ѫ Q/^bt,FuQ#;Ïya^^^‡^(\-ՃLVGf?JP0hrr&S FO%'0.y8 kūܔ⑛w-I& >R t~U *ˉ9)hP#Zm9%4a{wUoaegip_?@Y_Ҏ.ga8LV'trn7'a5lB;59"BLd#m$h:zcвάG78@FC B; BW.4q4섚ukEfXeyc܏GP(xK@* yOZqcY3ҷ:Zh,KGU ^`ԅ Fsa㾶磣8k«%'oy'}Xu?I U\O$C /X/(з*784vAȫד`R vtŊ$X maO${cg}HT:8N&?f\ؿϖ΋QK V(ԍjb]WL3y 6lKzz)S|^̕X|о;BKnŖ圧 <5&Hfj\6آx{ނ$>h +=gGZ]OE|WK (#HݍvcjJ푙f xى,˪Uq"pCk`JDpөCErΊb{'st)nܝLJ#%V'[2!BNݶ)]mvnqm~{a*`KP=O$۵)*, nP]MJ!ދ#*Y0I,gD6E4^H nQ{/71k*4Ek7wt* 2"}vKUXbBTAR,EF But#{!@a)/ǯ֤"ſDMQH:urRpq&xZd~ s"[k ) Su^k)R>Į=TKxR͞e@lZU `#{' d8Cs/rAf, yI_v%nB=1G\ghV? rn9 ȵz`fڵeqH4A+*XӑQL sh"֥Jq.fB"+ }%9?,lBq*rj2@>y .~7*(r(Ƴ,5Wg;gz`SfcSd[8OI%.uVG{VFϾ9F7֮u㧏ِ2l$֡Hg GR{{gO-՛m2mKM¨#_1c Detiz@t l:=Q"Y4،15[g框=+wl ?[)'(+%8xn [F~4+:YEN!ݫуvg$X b Bk׸#/;v QFˈloWdquk%.\8-º@doaz<ۥv _ac_mi*0#-óDz {MYnōj4;M*%fq@wD!zcPIiace*4V3ևlw=D^{Ay+RTˌnEf(,`cr IGAԉQ]÷ -9;p&dmdԛ858Yz_ã(^/|-}gN4a:E[:\%/J*?rvEegfhDNT<%͔HZQNEuԷ@ 5Ng` UtXԘʮ+]h?KԮ"4 !בK\ paLAw9$L0H3K5ӹN7nHn|>@6Zr@8?-@nXgq}HXL_ߌ6 _Dg%t% DN?6{(rk%k\-ttzF%Y/Pc%=a0SQvヲW,A{&ʶyH&o'kIi%QEy)M]GXm;+t񠎈H D I.;mЦߧ,Sސ?+ 'guاcUmtvk%oMe_?ѵӹ<lR>摇Hq4m0 +|P+ v|Ƞpj ' F/[Qbi z;h Peܓ9J ¾@dQɖQ]RΌbBW% ?^ S?TX p{un-#XaUG~_ fxYl[ˋ!ЗL3ǩ3v~[)q=y%k",:556Ngv &4WW)L݄\vPٹvwV1C o>BeӉ( +q)ugdFmu[.9Rr['HVΗԵ8,FYKWfUp>ӳ'J]Rt6]>dB^蛱"=z=- + \LRM}KJuZ/xb`fK4꥖۳a}iZ+nho|LmGJԎV/ lo2Inʟ O"Gn#\QRmұIpOb.p!37f+3Vًd!j~n\jm^&ۏ*h錿M fK2.4ڛfz5Ҫt8MtKY1p{oZ+O]JT8Cēޗ!L6Dp_]A !WӝG`y

M'BΦPO. YcA&zhj$$ĊҨpl95]w uiM8)Hqspg3e9"ܐcY}rytpDbrQcD…˷[JQ1Gj.eVpD݅. [Kԅ'*j(tH]!hƣ@eBFAqy) #y&WljRo9J.gM渦zb'M(Tbˊoz 򩤁>GiRv#h1IG3ac< ju(-Z6֟):Ft ȗ)_tV $L*+f1:;-V"@1T7狫]TpN]zU/`!##$LyNǻA@'seyʰ.$>Qot&Z)B:\K=1 ?ޭG[Rv7.8{']Faz\Y?YW7ۅoP[WW N:q(H7f!!p=x"57dd!>6)f2F-J;y+ow9FWYpo:G!#eGٓI3SHy֥puNt]Db);>yU?=UļĬ=ҳMzIE]Y' DOn G[Z;&vrm½tJs.F_4= N<.R!:бxxk'vF/Y߫`+BNuIZˍ&ڈyL@sй K#ąW.`Ͼ١>a PL;q$HKjGwPTgv8<՚t\'unw8oםˡ>&6W2%p~S3;[g 1D%aV@]%PV }Mns<hA#L?dT=10 /@GgN~7GZ-RPUQ&ܞZia}W#?7[.xAB>Wox4QϟLJgcTM:` ?Zr-,t$>:~# ^hU.+I'4?ycepAC"F8&o@h5]cU0 \)(GRIrbk?&hO ƭPc,eqj &0#Gaz(/3p6eǯG-ɎMG@h50aD.hZRL}cp]Ru۳ld❩N^D˃6&̱L-yԌl@[ C.^.3>Bx6ɷ. LA\4 JX M #o7]q!l' Y 0F."KQ%RDK.'0|Vc3NSN#3MO=ǛJ^D+|$ln_ԞWr^OoRɯSz伹Ng'f$V[7F.ou<>!@HNW͓Zt}.>թE>Z1Ĥ4kon$L ʨ"b,toy䩼lX E .)lg8EiJ햧^|FaeL,84Mٍ2SB`?pPjFlEE)"ɽ`6f5t':3fEɅ(R1*rϷH?eA.V*>#uc]2(cB3?wXwDyk\!yRYanԼƈ>X-NI͐ū~R˯TsnNM(DNT<̗Hf4RH˾_ҥnT?0O2jHyP߲s#&~RX@?a(= qV!Og*;t,s$W 'r|!O-%y8eZ_@]^#`!|0Dx!Ŕ>WQ|ǰj@br/ X/)sW$eW[yބd#gq/cQ WQ+/ӫy hl+5)@Ƀuh"Ew >~L803z #7>G&8OS̟/oVu1e Gߑ/@IL{%:z+#!Z:56>qSJnd$n2WΆh팵gi,5{H T>0~8B/$Yrp`uqܶCE`ʝ _Qtg,ZOlRn%@٘{ځ@09з7E ng%]{ŽPfw]~M&reM$55HC'iu)d5/#]; HS jj&`oݞw_8DB(e# $9>{hV_eǼZoS2M]EC%@@1@mv[^OSevr;g(ȹQq'vcoVzmmA s&Tt"tXtQ,YjI| TfzOK TD|iӐ׳f̵ze+sXc?H-J5 —p%}/(OnBQQhNxS@)i6|y&ZHrǢI_WN 2(uMmm8,}Z9((V ooכL}CKmJsWl"Lt⚝ ot:s~* _i?@kgz̕Nc ^&h!dc27k('P 7\ %jGI{{63~bv Gٝn74q#2Op>Ut!\7 -.-$+6S[0Do㎣KʢbF"b'aJ#(~K){t5E^;!Z`ԐCF4OK iVG/KOd)"䬱v$xn3b\,,G4l? ɐ  'CxsGgkG:^iSoVJ= }މ9|ۓOxp袺Nǡr Z%+ӞH}§~sMy^ EȶI5kl|CΉmN{#C 6/K$V7b+-,eT7{?7hxIQ$%ZH.\?9v~)\}m:a3f}8lS ~K2V&%!S}BčVEVOnq!*GYȂ,yԷVs9tk:?>= fddA ?8'sYC!ɽ*߿6l3ARkga4ֻ0x%=9|9CyzK8͖0&+pQNMR2 Q- 8"~q8KgM^;nG$5,{(ti6'TmfL~KRDv,|j<)cAE6wB]0R'[+;J3^4/w>qs 4\yG3*Bܖnjɻ9~JOJ<4 (+:y"nv⛶&it+A[q.ɹ! e'Teew_*q $[)Ljg*ޟIxI7 -S &gVߣڴ 'jPYtXh=`R*U^ubWIO8"SO&2% >5AȂ]:YblO TZ/ MsaeH<+rul:qs$̏;|L:}7.LsYLl7|ZiH.#i^'/_>{S`b cܾGك]ZA\|M>nJį#]5} xajṥx?q2u݀2<>=!HJ=+`cDQ-Z-4k,~BTOq?i9O fSTmNɖ]? U?Ŋ/,k-l{z&d&,r]> [@!Y5tu%N$, $YgyjI$ND֙4H ~|`MQԢm M=hZlJQpX&)c;+ۅ Ph+t&rn_2n[=@6˛Wϯa`j>Mri\kɼxRZMds8>@|GQm[ )GnǑ U׮M977/5Mn]ҀU2TekȞYլ/uNvՌ. T>roW>I pu<xx>N4BTPg@l'9EWu}1밿*'#1". IѨho] ~J0bQ;}-$^_;Y>\+"!(/$ iPBJ!'#5.8&wPe듷t};?[4~u r2g_Y3eY@;!: %pM'¬m @rMLtSvDbEK-6KGw0{X>GYE ̣ r"9ҞeqC#BVﺰ9f)=]&*D `]Yn`딄*2J6Çęk#E(]:xs*;l\|9KLs}bAc]# T&vpXI TeSzAcS, 0EFH>VnjNxh?49;sK j䭕hx`uf-'>Q#򊡅cLncEqԚ$ĴhR:KZϭ@WZ|`l&͊mxs歭j9@~pޟӖv=Jq/=^xmIq[L LG*yY)LGVURDzGzUVrY|2_ou]Zl_sJ:x*Ƒv$E&1J%3L=-{O2}Y"̗8<+K`P)v՟updFg݁4z+)[(o Y b*&&%YZXؗgQZ>*}ilTu2tt_]u+m4x!)ֆ'^5W2Ba+spæh`4[p Pe:(0l['aՅq|Q%=7Nn^@f:'3[Ix4 ׵ңѷ. (nzf c/F6~G0\Iq@>4ϻZO5 z,Dm^W_|-$ V@9>;*kǽi4&7]"ʐaة'hQ1$qI^/_] 27O8JSJnM4@׸`geV_ XNJ8֗8mZI=$CUo(3 PΛzVQ93f~7!3, L/R?C-pW:yF@֞FVHh':/:A>n_o)_Ft_6f} ŀ]g\JBD<`VZᛟijɷBO#( Ke%RP_XA)+@Ny<#LQD5C!o9op %G=Ek y/b\<*T%My5<|B8'ⴱ>6됒v8-AT8drWjwRTVm׉sR) 5AINy:"WlGA#ˡƣ˥fuqlVR[?,l"9tL+WҺ%2ಷٌ OPo'=;ID"lRRvq q1j)3Be185!ҼA;(YKtjo郥gLw؍ɾ jRgˤ m9V*()Qj +d<&)A~HCC,)A,J #/Vߧb;KwFb1_=@q51d%\) Ŷ. -a.7㬶r웱ؐnyeamrpyNC@04ŸﰯĹb IYCyf /άՈ{!b!=|{6&  %_r`t)K`j;E$փ`h60N*z% gpZֆNJ+y eW{dаږ-d*Os&ZoiMouZ{^3}21F0ؐ~h {*&iVffgRgtX4PejZm])pqӬPѧBRvJw}FU%XNq9A|b{\h(.e뿻P"3JV`=oD|G?lj;HY-~=~7ЇS3x bOiFw]HQx=_$Cu1_Sjv]R=JOtT0Ӻك #tvɰGu\D8u>i#WSɎ/\]k_|4 F^LqL}n\A=Q%,0Kqcf?(`|)?uxCʒY^π2(CڕF{acur=ULB(ӉK[T3>2}4% =Pr0*Z$eRGC__0ȚN1̞H]d< %/BpQcƦ~ t|-ee72LKP-n<9>5ȳ8)5#鳩>>ejZ> qw,}cE)X{GU^V/~S\5&5+a4$[cBqtXr)WPG"FU ?u*qDvM#RrBuBYHɆhEcH!_ˇ~,?#Z"@"{rYOj̖ǾR-tMG0܂F Ao0gEHBD@bk}: N#S98_DzmmuDtFx=yi<, XZ7pZ `߮D`K"1w&2.Gzs3ψī_2kʮ1^'I a:b.?d|@}rJ?[(JOE.6eN.cPi`Y?$Sd g)m|eC҃_V|#i~s-E3M^]һSzd&A:x 5M1b}ICp OgA:|GI_ÏH`TUCíiШacR-<惈O4_ #U@mfIckhi8K+8Uj\_5崟%T6_Hԝ,&!!h˃1ڢ|~{z8#WD}c]_ʀi~̅^V ghF]i,-SBVr3XpU(Xh wD5rpe2`E-]|WTy&FcW/;^@üѠcvIXwџf~upl@VGZg__)EELZ;-{}|=#hYqeHAtg}`L76XyڥWjВpX{+ԕqL}8 Q J*?Uִ3)操Nd2e~O;ND-SxʳfENu24I[G/>$ׯ{ߖ w&eK]N>\\k\qVΣ Io"vYn43Q U%)eMqMi#RnQuΙg$Aim/)`c 5xA%`E}*jiRVdX lҏ=7TI"e#GaF{$G- UqBm LVnBv~@Pe;Zd:(H,5Ӓ`M N ݫc!(B Z>P8ڒb=8CS9ɌYѪ [ku8 5ylt4 Tr 7 =KrYaqs҉.71'䇱`r] 5,$T4?;/0„Q>9д]pv>% -"L^D=R(ŗnXb$g<&Kf3\liP'evBT"&LzB;ԓ̻&]UٺnPS/kSK^*yz0]GtS.l>GNWЬ,DШ9[[9G*$˒ŅFϕjZժ4c+LR ieǟ4D0E:&,4뗂vWG$hqJ#FHuU{x_JXJ>x.⪍`wƩ @MqY<Di_HERʈKR 9XqQ"`0ɟdY"^_`%DqE-&ə,!3qk]=-K2^iLA5j薻!p VpS>UhfJ~B?MHqQ N>EZm>64`%Hr7YjRrbs>^4r`wdǠ+쎪:f. KU&72Kh0ߍQ]ԌWi kpM|6Cud,ci3LmEKOvG#<Q&1Z'Q(O]n!FXBp_> nY2~$ KM (fiQ~k씄##skg_ԲК(y?ך07iK.iOY@ l5aV3 ͹ k,ϖo]j $Ĥ=rU1;o*tD>#Td.s^ 1Xk6z7vo 덺&D5Ml2e8xC鎣% CvHӭ't߿ٟ|~Pxd[B *uTxP]iAxq?5!rmyu,7>-R3I 9sz (6pb#r Q-pBѢ?0b,!ZfFHPM~WVܚB@bwvQ2ՠj5W}I3AhACǿ^s€&(? il~-NZzq,Нc|3mj &otUp[D+Ցդs-zb!4|(a"pG_sH_, C!Fَ1 쭠3E\0I9 2qdlYDga33w sg˱˼cVIr0Xv_"iEM$vè; n6MR@g6y0M9u@I} i&F=ju3i!d=->&EG3 .'v"e4xnz qd^#g gN2\jńGVWWf4g:=ĬIRCe^f`\R=z'TId!ìޮMxeF[s /U&k)i@AC)]F8,gT[UO K9yzbf5ۼܭ0Y KEС]]Lŕ*3~?̮zRyP?/y*0W`R/`Vp@&aEg O3o{TXa!4o( d{t; R%w0ẍ0Aۏjh&X=^G;6CK D <8 y˞@QOxz*5ꆭ|j]X)JcP 3b"#9|6z;x]C:&n-_ϥ&M^ҪjҰo?yP|\[S-ØlImT!6r0φp?`;׋fy*{Ӛ@ Ӫ4&@vm*㏷)`r;]O*_D$T:8ϛ2(CUf7WOP]Ab>d#BHhQq{EDfԢJǜ3DM|`;9‚m2\Jͮݦz}׳uCW"!LMk[[戃zJ/4j5#9g<)z7'W3F%GI@ݻi3^b.,:eT'~&(eX(ÖWQXn%BQ7@#ł?5J(y+Dhw1{4[;.lPZluh=Uu5-pet>x~N"lOG m2de ?ǚ QLP%U^' p!aQg̣EPl uMݼT,֓S=pp !QRN= р<}WNjUUл{wrL  T_5Wuc>G~8I ް&Ѕz$[ݵzM(@;lq3ౄ!$v.on,Wso>&\=(WKMi:%^[S?|UK?5˕Ӥ"` Oyk)dr>)g3&_ljfK+~4(ϦAɅ8 K6 Ôsj@Q-YAR9ϩDC@pStH^Xc\w$8y<7`"vgI_lQֆ>YMW!9H$2aTX5% (aIoֆV}|~4Sv_H+aYo|_%P؃>w$w_iF-7[1uYg}w%t<]hb' e7}h<æҴިr:%$.n[mNh:G% VR^ m( |ժt7NGx㨲9Wg9K`$"ۅol 1cMZM_V,~&^r*o"?V%e^q08͝ ^x5jH}ӽi5s 7!8+f-,2;³o'9$U?&_Ru(m/¦QDrDpS  ;dL}ߏ,EMK">ɟ`#@&n N0-oԑRA+r2 5Փ'v[%H'^l;~XϏ]~"W)\Qi5af~?̓C ̛M+e)ؼ0ʅqT/{ +&Aw&/qWuSv^a; $;1.5zǵ[R`I_\K b42 ꅓ@)Is'N)m.: qMGչ(p4:g d7 ϴj(!Th鞏À`s>;#ߑ;h +; 2\h_{b8xLY0)0۔e<`+ޤvaLNtٴ(Yv)\wv~m~@{;TbҖ--D+يX5m[xEDb}tWi!}Py(]#,m\pY\<􇛄IP iV!kD$քn\` iUGl1˸ED3k87 *~v)6de-h:xJ0Z5nG>b?tEBAW /_Lyi-* Ȝa~|!(hZy],ڎ_yN3 p]VW)BS{= кT8mGc@$ kZW3&V2W N T}1.a9l+Fh~L_გ!i^k~D,WO*\DS-vY3?}~p-kȬ0ɭJQ|vOY:}Kq<}yd% OəIv<-ܬrTEv -kNs\1}\1 7[۰xPCz%.ڝ;3P[,Nt* ^~)PI78>!lUy6xZ}/'ݮyzerMQw/`cKqA2O#YY]݉:X=* [F=%fV-1XZ.<ǀ4 Ce TnT¦˪:-" _h{EEhNAYV=3/P^+ V !SWdZ悁IᅶA.{v9cx7`d¦$\vC9A!%#o 'H3XF~f|? <\o *,L9IVfO Z$g,vmM1BqH`DIJf ^H<lty*0ρfARD9ɋ_#{9ڙi&nOAkU?!{oUY<U58_HN[)f*ji?Brb1q 1D}_|f'%@ĀuT6^CR)tH_U"r.FţD'I /DJi``Z)un0FU8i5#z肠Su´Z<1XkR+Ppw^ךWGޔ1mȤqx8v.k]j dG|_kVNKxD;{gjZvp&]/گhg*DPBXؑ}AK+1@'Z M0ڸ^2~5 .H$u 2 <4}3WK龺TÞRx;2Pc,lgݚ }P[ 'gȄXe{'A(pᦼ^Khx mULB~Fw3&bzRlTt0+'ZH| (\ƷoLrƢ9\\0H岔YT# Ìiua?~AC]t!'A [ $n?i!9_9<;  g&j=s{Iΰc7*u7Y0}ZD 8A H!WDU JF8q I/ :iSU8L|8S%0Gri<$$z<Ķ 6ݴv<@*zi0EIPH(0zwPbl$w0 jR;r LbTۤm(XFlckEmMya0fg-Tz<(ټF UJby+Mk%8cV:}KXv>\>)B=3SS\g7^< 5<ݴKQN=ƿdiJiW4w}lAV'(ȜfXH(4FnS KɆ]1ӽNZR/B-~$`KME',.r 2;q]$᱑KZAh3#D]{Xhb ",ˣryՊo옍0}=PMIe_+[1U8:MLSZU0ASir [c .jK( Z"Any lM!b׮.tvLُNwrwS-+kkR(_Yw yz%)D`iCqIP4A7Lo']]߽j[04W駢lYYL|!A{NKYZLEN)+,9R7!On6fMӁkE"[Y H5_ג!s%E`H"(|6 Ҕ81&K j:+qǧ.&6&G?kl$\m 5ⵣS0,䚖'ILV;;h7L YԎe <5;#,D.̚ T.oWdhJ=b&_GG-}i)ФH^0j;;+= Yʫ ;:٥W0/v`bњ[p(g|xݑﾥ9E't ?%,yTIo)*io$+]':!cd#4e=3Kc ‚?xEZ &0G}}lRn33^ #;>8Kq3B\|6 QX5JYChp ^4q-b)M,T*IK Q3O|=NM5ZJ>y;pVoDDI`"#8d9U+uסDvS<ڽF|LӠ3_L2p8>D>>* Rֶf_."ׯs!-yԺΰ6gEx5rV lca& Jtj,i9o4sdʸ xI+da^DU. y"N]$=Za%Rz7Nl_GW(Rs Ћ b7Gwk3j pVC-4J<`qθ? (]Qv6₢' !JJ}ka.3%p\Q@=xe9  0+KC'71tc>bb*rQT%NǮ06Bed&=ͳNCL}V] 5Cb]Ž'\)U+L%BHhӶ-ouәNsMH4"l?WxtY:+Aߙ;bX, l8-RVO\OۜNhG[_K0|7e;Dn<uAʡ!T]j'}qLmޒ3^yVk$hyT0YRQI}}*B^ψ-rj.y8]OBl;X1l(oe<9kfMkEO1Z `zhE9JI3Wa ӧa}w~e#QV0y'EHb/6>4?R\@Rӟ+ VX^:AT[+ԕ$]#瀲{lnF>nUvߊRf};] .~YeK+ .q?1X$F:ZW`$\p{:lwdjAr6q9&j;ztgxǿ;ZcR$Co4;[GG 2Jcz`KMLeS:'bjFb[d{8.QU%:#2Abd`p&BXyHcJ=;}Iәx[ /+i,!&Pvr|g,XăG!&c,KpAI'k׺er Ԣ`ӵXMq8@#DV\gq!jҍfD[;-u:<6怺B`="|}quH̬y{ &{+PFEoϙqjyiAYxxU3KZ|@b\i(ݟ{4DWhuXmo-\/Jg fJ%7P `Frڈ4h\-E`ɖkCrWƢ#>x&ͱ)ADPIU[D}@X("-ewvq-xxj4 W˚:6/&<6j#.D⼫c$aӇ2\}Oqx$7d:;?mOxs;yM~RK"-j .6kMiaK %\T.wtpESó^زB門i| Fy|n}gI̟ Q|vVJuY`캮!oտ7Z)~#Uc`/kSd+hUb߉i˛A|+'#zdy_p"u{v֔e+n("}X'0eޏN9(sEttwS֬6mWj&N;CYBJ3#ˇt`Q8/I٧n7f]ٲN'8e"cy8S" WN@As:R'9m^ iƛk?Q⼞k#W!llEfB]ÜE3?1x0KPW&{}圉-\z37s}WТu)ׯĹnÉ?a&S\z3n9Vk##.y }Բ(y^"f@7~({ppRpiЕ w7QΟp}c-+vSMPz>@߻٤[WS ڳ JA %bXƫn(/b$LN`s2њ_mBOCq/VLb>дIzdSI`!&*J:MGec<ګ| }d]f78լ9I.9j%E!s]A4/Ol-50 6bh$~):aNrF!H?u6t~}I(A Kr)oZML(AEJ5`PA]Dv䅍.}Cd.h_„˯1fcƓH mȨD(JZiq&mNq/J;#0I/Uan Q1CaAd-$P_- a7coU[9HލnJXS碙咽W9,C*zFE^doV[ܛt,Iu0^Y2xzDy Z׷nhFkQ9, ˟1P\J?zhh4s?>b=c18~ =@KiSqqYocCq] ѣ#z?"$wʔ=%W@I`^Lo6-=Ak#&<-~d0g>_< }ʧȂ f#͋DoP;zA<;0⎷$&:x~S;6Ӽc,ɯI8&[("@_U> CAe%jW O:%vHVh;CBBM" tTw7­4כ 4K$3Bfޞ?& ClE|o”@lB \8$LNPrTI6vM3WqO+O܂0{LQt3ADL6 7u#KEj+\ ݸ.lX34v˶c޵輏@Ρ=rX2+wOevk[6܀D®F %I3x|4.Β@碟!~̘pQA#\ {NޑǬ18+Ũ~#Wh( (mo$ؑ`o[.O#ǦGGv5&?2F%sAŞ+Y m.O[:{@v[0#WcLl.8K@N@.bsK,XAɗ4OpYbZ"1J!N##IH^ͺub@ j9 t$ΎeHyxuyX)ӗ,QO)kJ>a@2=YLP@OH}v?eLV .xqEWH&aZ%18#q]vٷ<>$䯪4ْ^! a[ŃfD}3cV9* 춅 NٻRa91T"cɣ2a&59b~W B]^YضnC /V#Uٟf&tZw wkGl~;B}q =~r] ő {[5WMoC3r+_3qֿq܉tR<Й@Yw'/bc 7REǣϠ c"Rd8=btYβ$ 2)$M$$L^|7u[݈⯽Jm>pNŊ`36݄0E1,b gTT[MYטE>ot/)g/jG?-W϶Xo֫)Wzt/ŭ} h6Ya37|(treOR&U&ɊXx! .aɰP'cu .sMAv߲H1WpEzC;$~Z|Ң'"$>U: wfp. fʐ8':~G΃#N7 CCa@hZze}ݜO͘ULN bg8,=ҮZtR1`R;J#ahQF}@ g`|;cA,jIS#.ga17<-nґD26n&u%'5I~B ^o֤Ԟ !*k=GYj /| {?}SCjR(p4jCSޥt$8`OpzpRUIٖp5drEmka|Bp'KݑW&!+֑6Hz/1g_%5lIF1< Iy\oNa+b1 X m G+d :z\7)) q #HR QjTɜ=L}1zɑ[Q<{^k&N&0[ii 8"WV݉ o*A)d7F`V? &tm$_ƇBmrpaL`Ksp{ZxQ9f+?j ':*y.AtJNxЀ-J袹l m3]{}Jāـͧɷ{ד/ˊP ū͚EbN]ocU|Wr9IϺ=C)XXn{LaVlg|V;L_1&`@$chϔUpSm,3O3wp5}r'mҰrx!,Tu)-#$ڣm$#0 2y۳KVL&',?Q '!G% -_e+QDqTUvn ]HJ2QUW('곬AI-E]74#6,چdnUk\0zH;WDފGMGOmlOK`eVnN?i텦ZNjaa=d; y&l0 C͓ 4Xi By$Ohj){1_]"D=ѽg3pZ`* , Œz~3iyO!+Т.6Diferlg~'^`H7>C!OSg\'& r41+a`(Q e b?a9 }l-hܸdV5}-Me@T?-($݉bu|u|מ MOE 4bk^ɢ@?oJRߟ}˪ȖюJVgIgemw@g6_5:I^::%zwZʫ꽑^_tFU-MU65!IŊ@s4BFȿmr:L/ })U>Bg=$uN D9$ =K6a͟ L,v^C vBU=K&&7jWYU4}5Ґy.h;AD(A|EC\VQ1xI&pP?(Mcil@Ѭ‰'=۟΁ꨪfEg}^;t(o H^BDPg,QsU 4M`B ND O}q^-жj(ZX')R,9/gc3_DOQ7J2Cj}Tnẉߛ3c,YZ/՛QC^ތS?m:Y&֭O 9{s;#`X#gH*LWbuD8J\7T'7oϵT@B$K;ι+ʥޚ:KOgI}n U z&FwNcҿ*h,K+c8qݦ",V_\ci.-:|Π/i,҆K au]ɸ-jʯ&+㨁{2!Dch7v]R{6v}c55 ժHJ &̙ظ4ϩ[xe3hfN''UW/+!?QHmYV(brW.uD5Mg:Aj|e+M>ƻUS֬wp3L]NHVyr?&ݗ.]$8A$G5GH0d}[N/MhF̈́^gcFUBsLBAʂٯP72Ї9dN԰*JgLHM4bגvQagHK<Yϫؔ0K Gu[DI*4qޯo\!n\CI ~\J[DMpq!䒝$JUƔhox}R$@`e_Bн*Fڄ܃zl3=53[-$ۀZczo_C5N Ѓ01yo( "]AVV\taMeϻ=g}EZǰÕ2Q8,`gOUWV/ʗ6"ecG%-"tEaG`h{j~Wk}1]j_؀<#J81AJCz@-̒bS~Bk DI,}&#4^ԜcRxck` &su .D.C<OM5/H) F/; ` t3=Sn8eY'T$нeGS }͸EK2H^ۮNe6r겖L,zfQ!/LZm`?K n2;,)Wm?A 8c\,qYx89A $[78yvs{w^?Ѽ` j$ewT`;L'Id`I߼~W/P =V|`_Qv+Oap87AP1rR_bAS_~ĝܲҁQd\/m](A(pDFwBI0i=g?v%tС^Ǵa+cr+CHanSZG9}jz KvDo풆lgǣ?Q)GJW\cv& 66NAd0`ӡH|.QʞjD,3}%\Qm7YxN񜏉7%j5 <ĭr-ά-n"/e>kچf̎R^x\w {c{QRuJU |(%K?PmbO9I^n( cp ,/oʨwL1ѮӸ,Xߎ5;vSʒ~摜^CQTpx60=,xz{5GPh[Wfi„:_rn=݊=4H<0Ҽ96 ѧ]j^ 7| CU|USPыM0D] ٯz$e,J?UR[NTdOl-;#mMpt5[jF.+=Tc٠xUaMEUm LTIߡ^kzS\<>i3Y*_uUK' Ӌqu5r7c Yu iԋP=uSI#Zx91o<Ǒ0.HX*@ FNhȳ(DŽf/u#qP~*둸Qqf?=-AZ ݯ3k v-,\@ GiqxWj6{hUw9[P}y<}h:(LbMBim"jFRXaVV ]|Sׇ %}|d8QnPIrMP /bSR%94jdnJB#xb7(]N;c׈QNbp2>yiEk%:LTx VKτb|=Vw=gP)_f-^i_k"SZ YgtFhHc"`(r b`$NV:ݸğLiY`iv޿ .E m<#$aE$N2 F+ܙ&iRw*I* h;GUhMo~9Tn'|KE-"شtS'.Sav=YfP'il/egZ/Au,GWgk_nx7qY-x--ٵ\9Ka>X j+Qf׫[nf0l 1YPZv\гJvw-pwR>Fdzmio9>řE+ X  ߋ%R3` ˁ# %&z1}4NWU$_@7R5A,(\.삌z'DO8yRqGtD6+4(ό/g,˙9$$>w־O+!W bh-~3Nsn:s;fLBvU7FbV47ؙ8V&e Qǹ0n8累+ VsxeEa'vXW`,VCF9Zڗt{ FEXwī*fl!%b)ltVJUӠK{Wq+ h%,y[Јq/PS,\LzIKH3Nwgya6?V~x{ +(]˭+98nJ9~V `Ufwt"L~9񞲗ߛÅ 5Qۭ)<`w ڄ܋Pz˳i>3uTW-諤M\A8 4:Ix[${ 6_o-̀t]5$R`m> PW1w5῅#gzUsu̴rn_FY,6^AN}tZ/(a֤cgPx.mbVLn,c=8W V K+wXE(+B&0XN FD9Wo$'zEP2)So,Tuk7ų'0#tqMs&`˲LmIHʷJ5_K8! H 5k*yVM>S)Nbl $ޝ8A؀3L }$^~DCp*XRQ] ~ p7k ؿZlUG| ɮ? zyQ J!ih},p PJuԂo>P+Qo6@+a 9z<Ӊ8ڴUdMlfMAÄ́:-mHc ^we!i' <!"xR[udZmԃq 5[}^C$"# 0 orɭ|pT^[1]\0&|+9֜zN bΨ8glTksگwfĴ{nۑ/T͂f*RXp^m]]\-pI9LxyY c V>cxM7A+SQ8R|y1רwMD,9oi'IpkOP.8ɒK&6-꼘jN9I#OgI!0 Մ1O,Imx!EnnNnQZQ![" :ׁ+}j sѓqϻ"z&y?rpZaq^3 ; U|Q^ҩX|UMW\۷ojĽ%>ZvUzLZ+l.%P8RAXNmEW7Mru;ťb3cK_Y:V~G $s9v.~@i}9UMʁ{Lx'J./,ʼn*b*>S=[C8x> e(o>L69Ĭ ]V\wӮm( VogZfzM nU0W ]_(NtE/-Zh?s˄Ϸ:}rfWFGdzۑ QKقUc)8oбvvo S`LsN-{ED5v hSQ'fPB^Yw=R2|1#_:Sxk#83jWc^C2mF,QhxX qlC-lWeU˖1L};Y`#4!1O2^&)BQЎFа3g.?-Ikщ CZr BF<ʏD@[rwD,#ZHRz_U$#g50 MH3*k 5 `azrLo 6({;1qϫ{}; 2EK<*L </kp4E闤GZnٮ> * Im[wܾ[g!'lIrfU 'm }&&vW]x c-pH*WW:_eAI}8YرŊN|\E %濫ȏ4Hm \63%w6!)ިA%Du Vw^BMO)F3T%֊#{ڊ=}H_` ^l[2x@.A7D<| ڠ?x"H#rhi&g#N(" rZΛdR󊣫#%5kf1cxx:t t[rʴc7'5n-q0Ϗ:e#B:Q?#ܑ8GL߆K-B#_`hcA񪜉.&*+df,ULB j_Ompښỡ"itґ}m_dw/!QU7R r:&(5|UaUn51IIϧǸ3rh3^PMҹ:`dSKscȐ-ZXWt! ,!c+UK-aWsܻpO v'*$`;Utcˀ H_~˱e1k̔vQB@4⍽aZG"#֕/ZK?*uz¿Rjq떌~[vTjfԭxER9[W4;@j~b\_i'Ay lvB>юrOT%ykdEۨRM 뺑} ve(_ uOIRO(z9*i,TXKCnK=pS,ouVDAg~p? YiY`n{{1}Z$@NT00iR#=?X9c SPBtM5b늲IU kx"YrUoK1\s-nL)7R%{Dׁx/c0ѝ*#a $Y;8'O}oL: "% }xE`}5ߛ"66Y}; "lELfg`P]l6\,y|G1Yg< GY48E44E,>5v8pqVsL/<Z#Xu[$Wy6jya zEFI6*Ogs[sql В?x(7>'lJ{.eIPd/,TZyOO(wc\mRp DzKk25Iv 5+Gխ}<]W+FneO8\}#w{̽iZ;w, /b ̻d@{=Gq` P*_Ν-+9ٹ8#t'FQBm!U]0 Wib*p=|%xҟ+s)@``egifGy5sNj#t25 =&x&qDƈ$Fb5meym=څ&ocAAE՗GXa\ARvҞ;<ĨWu}xOmTsLA?ȋrr֨ɪ9\`9u'9Db6_yha7uN\B|$grcܩs饽 "|bNf(ZxxXp!CW͡_{-:[ J'^bkL6o'=¡^/"o<zke9J]ipY]g)9}"AN14IˁxALGԮm3_BxTQ_9ﳘMB) tӰCWO;RSzc.-*Mս<Fc/}; 9`e{ dk|a]䛠*4B' 0V )^WhLx9v%!nӈ[ 7c1 Piip5YNeEm47*FD;L5T-!nd_EjSI /P ֵJn1qoq_CjM6iA${jf@uz%z V5ZN-xt_vVeiD^&[,6V ClWW 5ňjk#|/)򜣁EZr"_4< ?gf6bu&p'.$*•wٞܳd;DqHf طb*P\eHgee{3ڪ+Ce2v$ԕ<){9 ns~~͡dlΑH}kgh:$`crtTiFo(zQK1V^Y*"K,gr\YlYLtՠ9_џ$GlD=4r(ڃ$c e.3qB ~8 @]p@m j-W')˒wiPj@V.)`PL^}*U<6*gTaX/ W*{:'- qipR{a5c*gW5cw(3ʄJ~kQE֐A\i6cg̱.c׵=S< V.L'>il06%!M`lrAr6ƕJ8$f5/Z.!ϖ*/پ) HrCK6#y̞:x3O1:ˑ OW*&tkώxvq+j=ĉA%ݏvoJzjg2#[~?h鮘-7 >]b <!1ſlƕˤ.3SUy7:`/%,+*rf}ؽr3:KX%RԜМ:[XC@$@I"(o%~g(A(!^FG=ӦS k9ScqXc[~pX4[HgNKd~sJTHg@~۪YzR0䀎𫉯{Zv耐 ,aDg\z $x}Lըc`]sc6ӥy-2jz|y4D*.ڋ+v%jQ_="^PXcDўY׏:8؏cS_MM[ ,f ߪVWX)$OcNDű{Ycm;z4h4B4kk]ڙ`1l2ܥ$5>eoۆ^_r$%FQvd&QyWV~v0(HA[.g^= m% ;p2+9d(Bp2v(ix@hDӬՏgxjbCҕnoj%Hy 6l\clq@Zۻ@MYz'ڝl\=X>Ț+D\NFl:7N"% u$ s]K`韽'#xP(!%'=ŽRg(ɩ9 22-٣Wa=Bp0.,s |WŷwR.E JcGtλ_wF,]2[D<>k pM_+_`Lo'Mz> m-I,"W8!׆2~ɇ\#yck>vXjpX%B2)/.cv[&M:!KQ0uP5w^S8.@GF("F}zDM:t WI+YaEV%Bk1 Xgpe6ȳ hRP:}9?m%,X6_9ㄱײQhQsz-)]7ř;R+L#w?**q/zܕƱoR;vK~(s▚@REmӛ3B;\ :9oEiLF jC1+f[o$Xڎ% lW'p8Zd5]nu#C#.+βsPikBzJ9R :ݤ]ΊYncW;pw[v Ȃ01-3cW"|{K E⿁G^YʳcNɂ;7N-8:3i|SG Eu(jlI1<iS<wS[P7#j鶃49C1r DmuC<=F8$_վȞ:ΑD+j"tz[ӑ%x(IḱapK-{Tgrr[v$LtjݛR+lW)(цJR71Trqؼ~=s)C.pnIb2hpB&G+0D[aeNЫe?W  CVwgQƂĤ䕙m@|;1,MZWO@FEV=c=7*u?XDӽkm .Zb@r+MX &eoC?` @c碵s]uVe;;2d`2uB˄@mTBvzw;T*"}J>z,9 /)@a1ýW}bQGǦUjm&ZJc0H CX>ja:&&5uiobhtoA0 a\y{IՃ#>~Ic3ŪY :" D;yN!ޤ9(ˁV兜{|^tZtG#79Y܏rw}:X+/~zlF-@șnP NvnTZڃ%t|VO>yˈi]J!bEjl݆:+bcyW$sHK6"AԢv> w8̇8|"܅oH``{0C̃_p輼υM pFS#,YJw?~̫ҨʛlM6>L ;\-@άϔ|ZP=PúQ́fb[I`;>4xgEmёQVmϯDx`y~ .MS.U$H@ yv &.dbUQB&3N/=*d[IH6 y`dI,m\lQ% ڤ(YS2kezT1yP#8(QiMr=cHFt^&wv͓0ǧDiA,8rɀ'qI̕u\0i!Y`ves^Vlw;Q=T>Y?ã%gQ)n mz&n`C)JXx?lJA)Re~UE$1PNa܄|7`+9'UL?:A {䢣IƾG<]lg>M "_+:d]?ZAسp*-z|F:"tcXbg,pb=!1aGy!wr-_;6 r_&*26g??Q%X;B=MW{Z<Ln=LB&}G.†nbO;hL5"՜v'赼Gd]cSൃ;ٓcYbAA\ySն%RjoE9z@w8Cj=Q) ]V;$-3؀oc8~= ONneL" PcK:x80Cvo`@ئ,uy\V{⚺+^_DVdd=}MRqs!e{T3L Vf/ݭtݼwK=#L]c##'6emwL{<侅JDV4%o`5\5^5Nw7a:xBV/8=܄uܱXGg݆O*u],v5ϾEpe™g ݤSiXG /WݺdC[tX4G=#zoD|T&[ṗ2d E(+~?\9JX9~oՖNeH!+5O橘1dm*7REWPp[q?1@ʠ{Ruбy^k(x#jme Dk.I>1&(B?Ir[\v7Ǻ8ϫ5;CT"EUajBG>EwvV6f-rrJp\xq F酔fnSZHؾ*pORn MQt(lkw3$ u.6~K\'`5h[J\>*FiT1@aEAH8;b9/;|6AU04MmܜOgz t䝵mWhjZ,tBǼQCH ҰsҴ < '۳1Hk&!< `D(G+=UyW2M""_|ޱ[DsN-k3 mB^5qHJaLiOQ)0\D?׋i(tz4,欕*-?dٝAj$q҃=NI{ϔsD=!=9 IVN g f !Ujo3u!hŶZBb\nGazu7ה>4 je"ZCb])*C(x Wk V"3X ,W,\Q]dH~MlŤ,*X^|^a.gp-̤^_:Nr 2n"Kv#Ůgׄg;;/3"Hlu Lwr&^ 5j -L.A٨ Hg8 OSuQ/-ZVhwg I4`]JEV(M A€_]5\iK">3&¬%à /7}‹#$,<;248:yؑFƨA6M4%{~ʿˆ};v6E-ˊ 1 Am+`} JWI*sm=_ak]]GEpWV_NK&חL166 ͑XZh>׾pR FgycSʜ;A7GVE0Q@+X fR`ArcL 2q;K?k:2.v$.۟Yvpw%~5-J׹ 3ƎbEZ'du݃ԃ  1&. YҐKƽy͸t1gS|B݋63>Uipqk`CwݔI ?@X g߱<?7,}k,5!a pG;ueWN# \IԠObTu\BҾ~-]SHM/B̐b\ؽ@wobw=]B"7Y G amLpȇp#V5qZyڎJH6:4d?dXBb!sIi]V܇JO=~gC Nf& SHG]"a\}<W7Wr+nȗnɾdK7e fQ's]W7=QXĂf%)"T񧛽,p1mDEII1 0ϒdl{K0֐Ug8VGX 8lA /06Asa=WHVnB^u%7WCֱ :Q #@7;l>+ kEaK56TԔfwe65AI8UFcUim!hH9SiukR}L#٬+^4z{+1j2>F QS7 κb\\.Ҡژ A\&Y]lU@sFFpЗ5: S~Vk3Vl^F1`Qup6ҐBϢC>eF[SJ w7$7/B@-V`.R"%'18ME=y:ers =c 1ە$bZ"v6 po1?ϯia#bnIEVJo9$sū3;X&􏌃S <05~>iʁ4{KwR.y{-6BNqi,s;ჄsDC;jvoAx's;)%,Jy6'sYq}27|~G ݉Zx}ttZV|;v@.K(K_gxig.rh6T_?ѴJjGiA拉w3O0ٕ.R'l(Fn#?M.'*A_%i&_EpG! XQի0ܮHUqPK£r4_V*3r$R>{"'!C7*ËUGuˠ(d_">yV[M5}i+E:nebs>KL@+JNXM SkwN+4Fw^sQۏOI0]WO6 Ԣ攨J\!j;\bqDdՔsǜRLﾍ7!%Mkgo+ywՂ{Y>,̪2$[ `&~?J{.WIM@%[PKd6ax' ׄU T^# ]ɹS::HZAق35x"2Nm0IHnThNd>^"& gRh$0KIvTPGJ. +|D_tZ+ؔ] *&qG~rR{oo&u!GɎ5i if6 Icr'upg$\Abkn- *vFJL+uh~r,0V:d fj0C`HݡuF _;媲׊|6mNh} |srJ_s/PժAW`#;5̛Bw A &vPa6 xWC܌dF ]H۩m1wʛPMp#lnk]@y ~ 覣%Cڛ[5H1ΒP2(g膏8p#:W= 5+Ab 0ׂ,-eb#Q1y8evm[Vs4f|CL[ӆBNQ >D&9JC;bLplӥ /6 q11_x^GwDٯ6G{G?ض2/XVTF:CGwށE?I4 Cǣ{A$ͱ13gE5k}:ִ]N,!5r{< OsGOꫭFG ȍ3nl|*< SKJUq$*h2oE&8Tp9>Q=B1Ar-g@qgf8>wyJV*YxZyJ)<Ňyo)*Qg{tHT֘dcoK oz+0x#! Pu9m|%HLZMUѓ{̅tQ*7ӱ G_>[ 苾_g&&@'A?YM==( sAkա杠tfgP\p<*eH> Sc9*Ra;|D+An@55bOL(?\?081b=&'Ch̃Y8Bȹ:җ&U]"d8IlAɣ>au>q?SY-wCsP*n`MʠwSFhmcO/2]/d?jNFY6Qp[cg:G pFiKH&EͽLxK:n؋EhYcϜK;;$ JS$ j@H|1qO.vDoA <|l_?+ ) ˙dP1<e{g(&&PPC" z!(T;$9ƈ5ka@l:c--Xo4yɩ˯e#Ğ7LJŌɺ/R]:ݔZ *lj~gC Ѣߐ.239"#Mvp!ڷ|(\iCz+M9ks]at/lL!#ђv__GȔd^\ ^8ԧ=}wQgF}B%{7jf?K\亽͕][|P ɲgQ%S[1BӨ ϙ =wS.+68ƒwzz]>QrfmVz.ik\/FDTbXZw 9|Oy47ZD+XOX5^} Vhp$gN@*)~C*o ~2O))%xBTvD^qϨe;@3M fIt=Nԩ_-2R7`/TjVOT8<}2WX L ҏyU%Pٷy@y6TaFY$R"G䥺W!L=R)TV5GY{bpC1O=#F<-+pc-Qٌ]RLa"*Q:\oBS1Fk7ʮȟi)\nv!ؙ|ݣOT@dw^<("yP.COV([!lDf}q"v ICNtv-!TQK[&6pum(K>SК 9`^HԪBh!ѱwwߩO DSR註ԐV5sK`-tZknj4L0 3GH1lXɟ\}jɷ.LpMGeo12F_?R@}24-xk'ۖg͌S39.GލvT92\#$/"0FIⷄ- ;G=VBY(l49L``PF{ mhZEZ]CC>q-$է4+n^opy G-u9z9*oIgܙ[c4# WNfK?KxvNN ##dK^,j="Ѱt"RQ6:;@ea/:7eu/ة ?7ӍXQ,]Mȫq'x`#Nk3ͦZH.RCZ;"%sӝMni p/fUD>NVFK-qɉn4{D0S \IPar"JlrdYvE@t s#Te d ú{#<Ŵ4|sD *-܏ڧeo=#ZOxH*$G`ppRdVM!ˡD ( [z۟w]םdh;kMBz& F) Wnr%Hs+0hf)&[ęF* gLmX/ cˍ4֧/O+KTk9rTZS=&;&W,?~]0#jǓ ]E'#kMpA g2s(O<'ZhE^nlƑgu ͞G,wJn һv7 Hdnnн; [;إZT1@W4Pg  }P~{4. BJsR9o~Cak Kc@eN")wƨHԕm|&Z*2UBF43eT0ԁOonNNWo-jGDNu+5R&*OށLc0|ِM6)BKF9**6K89bUbOέfU&@tFRkLv7\~s(OmtD尣*ŵN28ַVr45 _2=>&UY!(thw'Z|mdϐ? ;7G.M2)s}ؿ vӹn[e6Lk_遶qLr8yBǼַTZ~E&iP` h!v~a'Fp_.;c&A& j?|BЄUB[^zng* 0VȥGD{B.b%Pzf A90G!58$Xe؞:}f銾q8 Y¯o$4yWi&HUWUU+Ǵ~V o"~%n)xnϭi˥"1 JrW]W'=XᾍSCNXpki>uTchResdrttGLJ@oF [dg%$!2UVg}hӗ˳Mƫ⽬޳_"Ѡ׋?1-ZV~{dƄsgdԐB#Um6^Q*(n:_EZ-Zuܛqy81:䖁Bޛx4ˆ9xܾ,ι-VBmK #?SN턝beHtɋ [)M_%b+SSNwnó&%uþ/m#is~6a;<#3>ps @W 3e56ۤGE5uF1.wNL.`9[3Z8R2ViI,-?ߙTth !xml,6q[0 Ӻ77[Ly+2>EbE 0%$72K-@16Wu9dЮn8/%g_f1K(ɤjo qllRˉe+?tVy*GB7eM]c4жl0"j2 )4Bl4NMΨ$Fӓ|$/ `) }~H zu噻0773RaWHxsN/(eetв~xa)5d#N\U&Y2(h܃:֊gFq~,!ި;TZDNvjoVj7h}ؘ`͔Ε7O\=4<"nkp.`5Ko㋑@+: el@1lC͵s3_^eA\:GJ7rӕZ4|Z~*qE,nYIh6*Q8x /BY.\H`"i'aQKpw!EԎ!Ey6nv9^6`\`8ĚՃ,)w_ qsE=!νFpY l3PxQ:F4"\_:XT,z֑/2[T?{<^Df{u&BҐ[zTC4bq\\/ 9E //^*e87(b W*]7<XSeSŶXfery+] "hΙlq/ vtPV jզk-~z~MSpeC6!EgcwCx:oN/w@,x` QBTҢ畕~[NtvA(SuR:᳕ >_YM4y|X H?f~EO7пuUXϵ`9voSNcEK=M ˺b$ xœ Bࡿ (S8k#FSA͎Wwm+K*@VV9hQ_q;/}"7KUnӆ1ϿY;`ýV{h-6q'B@MݶWZACKD}4_Oͫ}N|FݨӬ?@]^&炜!gvz*v mG֚MJ`$vr#PU]jѣ~NrDzi\g-0u[*~;n]ɲ2OYx:C⪺h&HշMo\'~iߟ~CxLen~qbppWF[NyY6XnhB [8dk*J,+! =%%ѧ :l.G:?IjS__N8?w_Q,NȀ;7įoϤV^d ۣ?I~: YZ