xen-libs-32bit-4.10.1_06-lp150.2.6.1 4>$  Ap[N /=„?T.ڔh b-6uI;~޷A%w:=NAmF>^`^a:5Ujavjx ;6UՖD /]*,(uw9Zh<-׮ CoiC730~ג)VK bNgv3v?U!VZs22*N"鉪 DR7e9'85lP\p>?pd ' E 1?ou|-@- - - -  U-  - h- I-*L-66O6(8\9%\:_|\>IGT-H-Iռ-XYd\֬-]`-^8 bcېde!f$l&u8-vw-x8-y  $*lCxen-libs-32bit4.10.1_06lp150.2.6.1Xen Virtualization: LibrariesXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries used to interact with the Xen virtual machine monitor. In addition to this package you need to install kernel-xen, xen and xen-tools to use Xen. Authors: -------- Ian Pratt [Nwildcard3DopenSUSE Leap 15.0openSUSEGPL-2.0http://bugs.opensuse.orgSystem/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxx86_64/sbin/ldconfig5%%5%5f6@58$5%%5+ `vv&$5'TAAAAAAAA[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[N[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.so.1.0.0libxencall.so.1.0libxenctrl.so.4.10.0libxendevicemodel.so.1.1libxenevtchn.so.1.1libxenforeignmemory.so.1.2libxengnttab.so.1.1libxenguest.so.4.10.0libxenlight.so.4.10.0libxenstat.so.0.0libxenstore.so.3.0.3libxentoolcore.so.1.0libxentoollog.so.1.0libxenvchan.so.4.10.0libxlutil.so.4.10.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.10.1_06-lp150.2.6.1.src.rpmlibfsimage.so.1.0libfsimage.so.1.0(libfsimage.so.1.0)libxencall.so.1libxencall.so.1(VERS_1.0)libxenctrl.so.4.10libxendevicemodel.so.1libxendevicemodel.so.1(VERS_1.0)libxendevicemodel.so.1(VERS_1.1)libxenevtchn.so.1libxenevtchn.so.1(VERS_1.0)libxenevtchn.so.1(VERS_1.1)libxenforeignmemory.so.1libxenforeignmemory.so.1(VERS_1.0)libxenforeignmemory.so.1(VERS_1.1)libxenforeignmemory.so.1(VERS_1.2)libxengnttab.so.1libxengnttab.so.1(VERS_1.0)libxengnttab.so.1(VERS_1.1)libxenguest.so.4.10libxenlight.so.4.10libxenstat.so.0libxenstore.so.3.0libxentoolcore.so.1libxentoolcore.so.1(VERS_1.0)libxentoollog.so.1libxentoollog.so.1(VERS_1.0)libxenvchan.so.4.10libxlutil.so.4.10xen-libs-32bitxen-libs-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shlibbz2.so.1libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.2)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.7)libc.so.6(GLIBC_2.8)libfsimage.so.1.0libfsimage.so.1.0(libfsimage.so.1.0)liblzma.so.5liblzma.so.5(XZ_5.0)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.1)libpthread.so.0(GLIBC_2.2)libpthread.so.0(GLIBC_2.3.2)libpthread.so.0(GLIBC_2.3.3)libutil.so.1libutil.so.1(GLIBC_2.0)libuuid.so.1libuuid.so.1(UUID_1.0)libxencall.so.1libxencall.so.1(VERS_1.0)libxenctrl.so.4.10libxendevicemodel.so.1libxendevicemodel.so.1(VERS_1.0)libxenevtchn.so.1libxenevtchn.so.1(VERS_1.0)libxenforeignmemory.so.1libxenforeignmemory.so.1(VERS_1.0)libxengnttab.so.1libxengnttab.so.1(VERS_1.0)libxenguest.so.4.10libxenlight.so.4.10libxenstore.so.3.0libxentoolcore.so.1libxentoolcore.so.1(VERS_1.0)libxentoollog.so.1libxentoollog.so.1(VERS_1.0)libyajl.so.2libz.so.1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1[6@[0@['[!@Z@ZnZ@ZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Zz@Zz@Zo Zk@ZV@ZS]@ZOhZ:PZ1@Z.s@Z&@ZOZOZ Z Z Z@Z@Z }ZC@ZYYYY|Y@Y{Y*@Y5YA@Y4YYYbYY@Y3Y@YJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"YY;@YYY@YtY.X@XQ@X@XۡXg@X@X@X@X @X@X@X@X@XXX@XXXwoXs{@XlXWXRXQ4@XEVX43@X.@X*X lX&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@WbWZWZWZWYZ@WV@WEWBW=W;W3W1@W1@W,@W(W(W(W(W(W#LWVbV(@V3VJVxV'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVA@V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUݪ@U@UnU4@UUK@UU@UU>U@Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UU@UUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@THT?@T=@T9T5'@T.T*@T*@T)IT @TwTT=@TT@T@T_Tk@S@SSj@Sہ@S@S׌S@S˯@S@S.SSSS\Sh@SS@S[S~@S~@S~@S~@S{CSuSpSl@ShS[SXSI*SE6@S=M@S=M@S=M@S;S:@S5d@S4S)S L@SS@Sc@S SRRRR@R@R@RR3@R3@RR@R>R>RJ@R@R@RlR@RRx@R&RΏ@RTR@R@RG@RG@RRRRRRw@RrF@RfhRe@RL RJ@RIgRB@RB@R-@R%@R @R @R @R @RC@RZ@R@R@R Q@QY@QQQ@Qֵ@Q)@Q@QQQ@Q(@QQ?@QxQ'@QQQ@Q@QIQU@Q@Q~`Q~`Qw@Qq1Qo@QkQkQ]k@QZ@QQQAQAQ=@Q=@Q=@Q9Q8@Q5@Q4Q/FQ$Q#i@Q#i@Q"Q@Q@QEQ@Q @Q @QsQ"@P@PP@PDP@P @P @P @P @PPPP@P@P|@P6@P@PP@PoP)P@P5@P5@P@P@P}L@P{PyWPtPr@Pr@PnPnPnPnPnPiPaP`K@PYPXb@PWPIPG>P?UP.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch- bsc#1098403 - fix regression introduced by changes for bsc#1079730 a PV domU without qcow2 and/or vfb has no qemu attached. Ignore QMP errors for PV domUs to handle PV domUs with and without an attached qemu-xen. xen.bug1079730.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" (XSA-263) 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- Always call qemus xen-save-devices-state in suspend/resume to fix migration with qcow2 images (bsc#1079730) libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen.bug1079730.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- Update to Xen 4.10.1 bug fix release (bsc#1027519) xen-4.10.1-testing-src.tar.bz2 disable-building-pv-shim.patch - Drop the following patches contained in the new tarball 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch xsa258.patch xsa259.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Upstream patches from Jan (bsc#1027519) and fixes related to Page Table Isolation (XPTI). See also bsc#1074562 XSA-254 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop xsa252.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- Remove stale systemd presets code for 13.2 and older- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Replace hardcoded xen with Name tag when refering to subpkgs- Make sure tools and tools-domU require libs from the very same build- tools-domU: Add support for qemu guest agent. New files 80-xen-channel-setup.rules and xen-channel-setup.sh configure a xen-pv-channel for use by the guest agent FATE#324963- Remove outdated /etc/xen/README*- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with MSR emulation (XSA-253) 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch - bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch- Fix python3 deprecated atoi call (bsc#1067224) pygrub-python3-conversion.patch - Drop xenmon-python3-conversion.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 build-python3-conversion.patch bin-python3-conversion.patch- bsc#1070165 - xen crashes after aborted localhost migration 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch - bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb: libxl__devices_destroy failed 5a33a12f-domctl-improve-locking-during-domain-destruction.patch - Upstream patches from Jan (bsc#1027519) 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch- Update to Xen 4.10.0 FCS (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Rebuild initrd if xen-tools-domU is updated- Update to Xen 4.10.0-rc8 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- Adjust xenstore-run-in-studomain.patch to change the defaults in the code instead of changing the sysconfig template, to also cover the upgrade case- Update to Xen 4.10.0-rc6 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Since xen switched to Kconfig, building a debug hypervisor was done by default. Adjust make logic to build a non-debug hypervisor by default, and continue to provide one as xen-dbg.gz- fate#316614: set migration constraints from cmdline fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10- Document the suse-diskcache-disable-flush option in xl-disk-configuration(5) (bsc#879425,bsc#1067317)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to Xen 4.10.0-rc5 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - fate#323663 - Run Xenstore in stubdomain xenstore-run-in-studomain.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 pygrub-python3-conversion.patch xenmon-python3-conversion.patch migration-python3-conversion.patch xnloader.py xen2libvirt.py- Remove xendriverdomain.service (bsc#1065185) Driver domains must be configured manually with custom .service file- Update to Xen 4.10.0-rc3 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Adjust xen-dom0-modules.service to ignore errors (bsc#1065187)- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Update to Xen 4.10.0-rc2 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Update to Xen 4.10.0-rc1 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop patches included in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch gcc7-mini-os.patch- bsc#1061084 - VUL-0: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1056278 - VUL-0: xen: Missing NUMA node parameter verification (XSA-231) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch - bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232) 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch - bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup (XSA-233) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch - bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch - bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Unignore gcc-PIE the toolstack disables PIE for firmware builds as needed- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- bsc#1044974 - xen-tools require python-pam xen.spec- Clean up spec file errors and a few warnings. (bsc#1027519) - Removed conditional 'with_systemd' and some old deprecated 'sles_version' checks. xen.spec- Remove use of brctl utiltiy from supportconfig plugin FATE#323639- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- fate#323639 Move bridge-utils to legacy replace-obsolete-network-configuration-commands-in-s.patch- bsc#1052686 - VUL-0: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- Add a supportconfig plugin xen-supportconfig FATE#323661- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- fate#323662 Drop qemu-dm from xen-tools package The following tarball and patches have been removed qemu-xen-traditional-dir-remote.tar.bz2 VNC-Support-for-ExtendedKeyEvent-client-message.patch 0001-net-move-the-tap-buffer-into-TAPState.patch 0002-net-increase-tap-buffer-size.patch 0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch 0004-e1000-secrc-support.patch 0005-e1000-multi-buffer-packet-support.patch 0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch 0007-e1000-verify-we-have-buffers-upfront.patch 0008-e1000-check-buffer-availability.patch CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch CVE-2015-4037-qemut-smb-config-dir-name.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch blktap.patch cdrom-removable.patch xen-qemu-iscsi-fix.patch qemu-security-etch1.patch xen-disable-qemu-monitor.patch xen-hvm-default-bridge.patch qemu-ifup-set-mtu.patch ioemu-vnc-resize.patch capslock_enable.patch altgr_2.patch log-guest-console.patch bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch qemu-dm-segfault.patch bdrv_default_rwflag.patch kernel-boot-hvm.patch ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch ioemu-hvm-pv-support.patch pvdrv_emulation_control.patch ioemu-disable-scsi.patch ioemu-disable-emulated-ide-if-pv.patch xenpaging.qemu.flush-cache.patch ioemu-devicemodel-include.patch - Cleanup spec file and remove unused KMP patches kmp_filelist supported_module.patch xen_pvonhvm.xen_emul_unplug.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch- restrict requires on grub2-x86_64-xen to x86_64 hosts- bsc#900292 - xl: change default dump directory xl-coredump-file-location.patch- Update xen2libvirt.py to better detect and handle file formats- bnc#889526 - VUL-0: CVE-2014-5146, CVE-2014-5149: xen: XSA-97 Long latency virtual-mmu operations are not preemptible xsa97.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch - Upstream patches from Jan 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch- bnc#897657 - VUL-0: CVE-2014-7188: xen: XSA-108 Improper MSR range used for x2APIC emulation xsa108.patch- bnc#897906 - libxc: check return values on mmap() and madvise() on xc_alloc_hypercall_buffer() 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch- bnc#897614 - Virtualization/xen: Bug `xen-tools` uninstallable; grub2-x86_64-xen dependency not available xen.spec- More cleanup of README.SUSE- Update xen patch with upstream patch so that latest libvirt patch can work. (bnc#896044) + 53fcebab-xen-pass-kernel-initrd-to-qemu.patch - xen-pass-kernel-initrd-to-qemu.patch- bnc#895804 - VUL-0: CVE-2014-6268: xen: XSA-107: Mishandling of uninitialised FIFO-based event channel control blocks xsa107.patch - bnc#895802 - VUL-0: CVE-2014-7156: xen: XSA-106: Missing privilege level checks in x86 emulation of software interrupts xsa106.patch - bnc#895799 - VUL-0: CVE-2014-7155: xen: XSA-105: Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation xsa105.patch - bnc#895798 - VUL-0: CVE-2014-7154: xen: XSA-104: Race condition in HVMOP_track_dirty_vram xsa104.patch- bnc#882405 - Only one key-press event was generated while holding a key before key-release in pv guests through xl vncviewer tigervnc-long-press.patch- Update to Xen Version 4.4.1 FCS xen-4.4.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 53d7b781-x86-cpu-undo-BIOS-CPUID-max_leaf-limit-earlier.patch 53df71c7-lz4-check-for-underruns.patch 53e47d6b-x86_emulate-properly-do-IP-updates-and-other-side-effects.patch- bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch - Upstream patches from Jan 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch- bnc#864801 - VUL-0: CVE-2013-4540: qemu: zaurus: buffer overrun on invalid state load CVE-2013-4540-qemu.patch- Update README.SUSE with additional debug help- bnc#883112 - Xen Panic during boot "System without CMOS RTC must be booted from EFI" 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch - Upstream patches from Jan 53d7b781-x86-cpu-undo-BIOS-CPUID-max_leaf-limit-earlier.patch 53df71c7-lz4-check-for-underruns.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e47d6b-x86_emulate-properly-do-IP-updates-and-other-side-effects.patch- Update to Xen Version 4.4.1-rc2 xen-4.4.1-testing-src.tar.bz2 - Dropped the following upstream patches and xen-4.4.0-testing-src.tar.bz2 537b5ede-move-domain-to-cpupool0-before-destroying-it.patch 5327190a-x86-Intel-work-around-Xeon-7400-series-erratum-AAI65.patch 534bdf47-x86-HAP-also-flush-TLB-when-altering-a-present-1G-or-intermediate-entry.patch 535a354b-passthrough-allow-to-suppress-SERR-and-PERR-signaling.patch 53636ebf-x86-fix-guest-CPUID-handling.patch 5347b524-evtchn-eliminate-64k-ports-limitation.patch 53a040c6-page-alloc-scrub-pages-used-by-hypervisor-upon-freeing.patch 53a1990a-IOMMU-prevent-VT-d-device-IOTLB-operations-on-wrong-IOMMU.patch 53732f4f-x86-MCE-bypass-uninitialized-vcpu-in-vMCE-injection.patch 531dc0e2-xmalloc-handle-correctly-page-allocation-when-align-size.patch 5331917d-x86-enforce-preemption-in-HVM_set_mem_access-p2m_set_mem_access.patch 531d8e09-x86-HVM-fix-memory-type-merging-in-epte_get_entry_emt.patch 538ee637-ACPI-Prevent-acpi_table_entries-from-falling-into-a-infinite-loop.patch 535a34eb-VT-d-suppress-UR-signaling-for-server-chipsets.patch 535e31bc-x86-HVM-correct-the-SMEP-logic-for-HVM_CR0_GUEST_RESERVED_BITS.patch 53859956-timers-set-the-deadline-more-accurately.patch 53636978-hvm_set_ioreq_page-releases-wrong-page-in-error-path.patch 535a3516-VT-d-suppress-UR-signaling-for-desktop-chipsets.patch 53cfdcc7-avoid-crash-when-doing-shutdown-with-active-cpupools.patch 5383175e-VT-d-fix-mask-applied-to-DMIBAR-in-desktop-chipset-XSA-59-workaround.patch 531d8e34-x86-HVM-consolidate-passthrough-handling-in-epte_get_entry_emt.patch 532fff53-x86-fix-determination-of-bit-count-for-struct-domain-allocations.patch 5357baff-x86-add-missing-break-in-dom0_pit_access.patch 530c54c3-x86-mce-Reduce-boot-time-logspam.patch 5383167d-ACPI-ERST-fix-table-mapping.patch 5390927f-x86-fix-reboot-shutdown-with-running-HVM-guests.patch 530b27fd-x86-MCE-Fix-race-condition-in-mctelem_reserve.patch 53709b77-Nested-VMX-load-current_vmcs-only-when-it-exists.patch 5396d818-avoid-crash-on-HVM-domain-destroy-with-PCI-passthrough.patch 531d8fd0-kexec-identify-which-cpu-the-kexec-image-is-being-executed-on.patch 5385956b-x86-don-t-use-VA-for-cache-flush-when-also-flushing-TLB.patch 539ec004-x86-mce-don-t-spam-the-console-with-CPUx-Temperature-z.patch 53909259-x86-domctl-two-functional-fixes-to-XEN_DOMCTL_-gs-etvcpuextstate.patch 53859549-AMD-IOMMU-don-t-free-page-table-prematurely.patch 533d413b-x86-mm-fix-checks-against-max_mapped_pfn.patch 535fa503-x86-HVM-restrict-HVMOP_set_mem_type.patch 53271880-VT-d-fix-RMRR-handling.patch 5390917a-VT-d-honor-APEI-firmware-first-mode-in-XSA-59-workaround-code.patch 538dcada-x86-HVM-eliminate-vulnerabilities-from-hvm_inject_msi.patch 53455585-x86-AMD-feature-masking-is-unavailable-on-Fam11.patch 537b5e50-VT-d-apply-quirks-at-device-setup-time-rather-than-only-at-boot.patch 53a199d7-x86-EFI-allow-FPU-XMM-use-in-runtime-service-functions.patch 53cfddaf-x86-mem_event-validate-the-response-vcpu_id-before-acting-on-it.patch 53b16cd4-VT-d-ATS-correct-and-clean-up-dev_invalidate_iotlb.patch 53cfdde4-x86-mem_event-prevent-underflow-of-vcpu-pause-counts.patch 53356c1e-x86-HVM-correct-CPUID-leaf-80000008-handling.patch 534bbd90-x86-nested-HAP-don-t-BUG-on-legitimate-error.patch 530b28c5-x86-MSI-don-t-risk-division-by-zero.patch 5396e805-x86-HVM-refine-SMEP-test-in-HVM_CR4_GUEST_RESERVED_BITS.patch 5370e03b-pygrub-fix-error-handling-if-no-valid-partitions-are-found.patch 5321b257-x86-make-hypercall-preemption-checks-consistent.patch 5321b20b-common-make-hypercall-preemption-checks-consistent.patch 538c338f-x86-amd_ucode-flip-revision-numbers-in-printk.patch 537b5e79-VT-d-extend-error-report-masking-workaround-to-newer-chipsets.patch 531d8db1-x86-hvm-refine-the-judgment-on-IDENT_PT-for-EMT.patch 53b56de1-properly-reference-count-DOMCTL_-un-pausedomain-hypercalls.patch 530b2880-Nested-VMX-update-nested-paging-mode-on-vmexit.patch 533ad1ee-VMX-fix-PAT-value-seen-by-guest.patch 53206661-pygrub-support-linux16-and-initrd16.patch 5315a254-IOMMU-generalize-and-correct-softirq-processing.patch- bnc#820873 - The "long" option doesn't work with "xl list" 53d124e7-fix-list_domain_details-check-config-data-length-0.patch- bnc#888996 - Package 'xen-tool' contains 'SuSE' spelling in a filename and/or SPEC file Renamed README.SuSE -> README.SUSE Modified files: xen.spec, boot.local.xenU, init.pciback xend-config.patch, xend-vif-route-ifup.patch- bnc#882673 - Dom0 memory should enforce a minimum memory size (e.g. dom0_mem=min:512M) xen.spec (Mike Latimer)- Upstream patches from Jan 5347b524-evtchn-eliminate-64k-ports-limitation.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53b16cd4-VT-d-ATS-correct-and-clean-up-dev_invalidate_iotlb.patch 53b56de1-properly-reference-count-DOMCTL_-un-pausedomain-hypercalls.patch 53cfdcc7-avoid-crash-when-doing-shutdown-with-active-cpupools.patch 53cfddaf-x86-mem_event-validate-the-response-vcpu_id-before-acting-on-it.patch 53cfdde4-x86-mem_event-prevent-underflow-of-vcpu-pause-counts.patch- bnc#886801 - xl vncviewer: The first domu can be accessed by any id 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch- Upstream pygrub bug fix 5370e03b-pygrub-fix-error-handling-if-no-valid-partitions-are-found.patch- Fix pygrub to handle old 32 bit VMs pygrub-boot-legacy-sles.patch (Mike Latimer)- Remove xen-vmresync utility. It is an old Platespin Orchestrate utility that should have never been included in the Xen package. Updated xen.spec- Rework xen-destroy utility included in xen-utils bnc#885292 and bnc#886063 Updated xen-utils-0.1.tar.bz2- bnc#886063 - Xen monitor fails (xl list --long output different from xm list --long output) - bnc#885292 - VirtualDomain: pid_status does not know how to check status on SLE12 Re-enable building xen-utils for sle12 and include xen-list and xen-destroy in the xen-tools package for HA. xen.spec- bnc#882127 - Xen kernel panics on booting SLES12 Beta 8 53a199d7-x86-EFI-allow-FPU-XMM-use-in-runtime-service-functions.patch - Upstream patches from Jan 538c338f-x86-amd_ucode-flip-revision-numbers-in-printk.patch 538ee637-ACPI-Prevent-acpi_table_entries-from-falling-into-a-infinite-loop.patch 5390917a-VT-d-honor-APEI-firmware-first-mode-in-XSA-59-workaround-code.patch 53909259-x86-domctl-two-functional-fixes-to-XEN_DOMCTL_-gs-etvcpuextstate.patch 5390927f-x86-fix-reboot-shutdown-with-running-HVM-guests.patch 5396d818-avoid-crash-on-HVM-domain-destroy-with-PCI-passthrough.patch 5396e805-x86-HVM-refine-SMEP-test-in-HVM_CR4_GUEST_RESERVED_BITS.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 539ec004-x86-mce-don-t-spam-the-console-with-CPUx-Temperature-z.patch 53a040c6-page-alloc-scrub-pages-used-by-hypervisor-upon-freeing.patch (replaces xsa100.patch) 53a1990a-IOMMU-prevent-VT-d-device-IOTLB-operations-on-wrong-IOMMU.patch- Replace 'domUloader' with 'pygrub' when converting or importing Xen domains into libvirt with xen2libvirt. domUloader is no longer provided in xen-tools. Modified: xen2libvirt.py- fate#310956: Support Direct Kernel Boot for FV guests patches would go to upstream: qemu side: qemu-support-xen-hvm-direct-kernel-boot.patch xen side: xen-pass-kernel-initrd-to-qemu.patch- Modify how we check for libvirt managed domains xl-check-for-libvirt-managed-domain.patch- bnc#880751 - VUL-0: xen: Hypervisor heap contents leaked to guests xsa100.patch - bnc#878841 - VUL-0: XSA-96: Xen: Vulnerabilities in HVM MSI injection 538dcada-x86-HVM-eliminate-vulnerabilities-from-hvm_inject_msi.patch - Upstream patches from Jan 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 5383167d-ACPI-ERST-fix-table-mapping.patch 5383175e-VT-d-fix-mask-applied-to-DMIBAR-in-desktop-chipset-XSA-59-workaround.patch 53859549-AMD-IOMMU-don-t-free-page-table-prematurely.patch 5385956b-x86-don-t-use-VA-for-cache-flush-when-also-flushing-TLB.patch 53859956-timers-set-the-deadline-more-accurately.patch- bnc#879425: handle cache=unsafe from libvirt to disable flush in qdisk libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch qemu-xen-upstream-qdisk-cache-unsafe.patch- libxl: introduce an option for disabling the non-O_DIRECT workaround recognize direct-io-safe in domU.cfg diskspec libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch- fate#316071: add discard support for file backed storage (qdisk) update patch to allow more values in overloaded ->readwrite member- bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 537b5e50-VT-d-apply-quirks-at-device-setup-time-rather-than-only-at-boot.patch 537b5e79-VT-d-extend-error-report-masking-workaround-to-newer-chipsets.patch - Upstream patches from Jan 53709b77-Nested-VMX-load-current_vmcs-only-when-it-exists.patch 53732f4f-x86-MCE-bypass-uninitialized-vcpu-in-vMCE-injection.patch 537b5ede-move-domain-to-cpupool0-before-destroying-it.patch- Update README.SuSE with information on the toolstack change- fate#316071: add discard support for file backed storage (qdisk) update to recognize option discard/no-discard instead of discard=0,1 to match upstream change- fate#316613: Implement pvscsi in xl/libxl libxl.pvscsi.patch- bnc#875668 - VUL-0: CVE-2014-3124: xen: XSA-92: HVMOP_set_mem_type allows invalid P2M entries to be created 535fa503-x86-HVM-restrict-HVMOP_set_mem_type.patch (replaces xsa92.patch) - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 535a34eb-VT-d-suppress-UR-signaling-for-server-chipsets.patch 535a3516-VT-d-suppress-UR-signaling-for-desktop-chipsets.patch - Upstream patches from Jan 535a354b-passthrough-allow-to-suppress-SERR-and-PERR-signaling.patch 535e31bc-x86-HVM-correct-the-SMEP-logic-for-HVM_CR0_GUEST_RESERVED_BITS.patch 53636978-hvm_set_ioreq_page-releases-wrong-page-in-error-path.patch 53636ebf-x86-fix-guest-CPUID-handling.patch- Fix pygrub to handle VM with no grub/menu.lst file. - Don't use /var/run/xend/boot for temporary boot directory pygrub-boot-legacy-sles.patch- When the xl command is used, check to see if the domain being modified is managed by libvirt and print warning if it is. xl-check-for-libvirt-managed-domain.patch- Upstream patches from Jan 53455585-x86-AMD-feature-masking-is-unavailable-on-Fam11.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 534bbd90-x86-nested-HAP-don-t-BUG-on-legitimate-error.patch 534bdf47-x86-HAP-also-flush-TLB-when-altering-a-present-1G-or-intermediate-entry.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 5357baff-x86-add-missing-break-in-dom0_pit_access.patch - XSA-92 xsa92.patch- Add # needssslcertforbuild to use the project's certificate when building in a home project. (bnc#872354)- Upstream patches from Jan 53356c1e-x86-HVM-correct-CPUID-leaf-80000008-handling.patch 533ad1ee-VMX-fix-PAT-value-seen-by-guest.patch 533d413b-x86-mm-fix-checks-against-max_mapped_pfn.patch- bnc#862608 - SLES 11 SP3 vm-install should get RHEL 7 support when released 53206661-pygrub-support-linux16-and-initrd16.patch - Upstream bug fixes 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch- fix build for armv7l and aarch64- Remove compiletime strings from qemu-upstream qemu-xen-upstream-megasas-buildtime.patch- bnc#871546 - KMPs are not signed in SUSE:SLE-12:GA? xen.spec- Upstream patches from Jan 532fff53-x86-fix-determination-of-bit-count-for-struct-domain-allocations.patch 5331917d-x86-enforce-preemption-in-HVM_set_mem_access-p2m_set_mem_access.patch - Drop xsa89.patch for upstream version (see bnc#867910, 5331917d-x86-enforce...)- bnc#863821 - Xen unable to boot paravirtualized VMs installed with btrfs. Add 'Requires: grub2-x86_64-xen' to xen-tools. - Restore soft links for qemu-system-i386 and qemu-dm - Cleanup inconsistency in which version of qemu-system-i386 is being used (Xen vs qemu-x86). Use only Xen's version. xen.spec- Add conditionals for SLE12 when defining xend and max_cpus xen.spec- Upstream patches from Jan 5321b20b-common-make-hypercall-preemption-checks-consistent.patch 5321b257-x86-make-hypercall-preemption-checks-consistent.patch 53271880-VT-d-fix-RMRR-handling.patch 5327190a-x86-Intel-work-around-Xeon-7400-series-erratum-AAI65.patch - Dropped the following as now part of 5321b257 5310bac3-mm-ensure-useful-progress-in-decrease_reservation.patch- bnc#867910 - VUL-0: EMBARGOED: xen: XSA-89: HVMOP_set_mem_access is not preemptible xsa89.patch - Upstream patches from Jan 530b27fd-x86-MCE-Fix-race-condition-in-mctelem_reserve.patch 530b2880-Nested-VMX-update-nested-paging-mode-on-vmexit.patch 530b28c5-x86-MSI-don-t-risk-division-by-zero.patch 530c54c3-x86-mce-Reduce-boot-time-logspam.patch 5310bac3-mm-ensure-useful-progress-in-decrease_reservation.patch 5315a254-IOMMU-generalize-and-correct-softirq-processing.patch 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 531d8db1-x86-hvm-refine-the-judgment-on-IDENT_PT-for-EMT.patch 531d8e09-x86-HVM-fix-memory-type-merging-in-epte_get_entry_emt.patch 531d8e34-x86-HVM-consolidate-passthrough-handling-in-epte_get_entry_emt.patch 531d8fd0-kexec-identify-which-cpu-the-kexec-image-is-being-executed-on.patch 531dc0e2-xmalloc-handle-correctly-page-allocation-when-align-size.patch- Add conversion tool for migrating xend/xm managed VMs to libvirt xen2libvirt.py (Jim Fehlig)- Update to Xen 4.4.0 FCS- bnc#865682 - Local attach support for PHY backends using scripts local_attach_support_for_phy.patch- bnc#798770 - Improve multipath support for npiv devices block-npiv block-npiv-common.sh- honor global keymap= option in libxl libxl.honor-more-top-level-vfb-options.patch- Update to c/s 28381 to include libxl fork and event fixes for libvirt xen-4.4.0-testing-src.tar.bz2- bnc#863297: xend/pvscsi: recognize also SCSI CDROM devices xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch- fate#316614: set migration constraints from cmdline fix xl migrate to print the actual error string libxc-pass-errno-to-callers-of-xc_domain_save.patch- Include additional help docs for xl in xen-tools - Apply all patches including those for unpackaged xend xen.spec- fate#316614: set migration constraints from cmdline split existing changes into libxl and xend part added libxl.set-migration-constraints-from-cmdline.patch added xend-set-migration-constraints-from-cmdline.patch removed xen.migrate.tools_add_xm_migrate_--log_progress_option.patch removed xen.migrate.tools_set_number_of_dirty_pages_during_migration.patch removed xen.migrate.tools_set_migration_constraints_from_cmdline.patch- Enable ix86 32bit build for xen-libs to be built to support xen-tools-domU on 32bit VMs and also vhostmd running in 32bit VMs- Enable blktapctrl when qemu-traditional is required to satisfy build dependencies. Remove binaries after build if xend is disabled- update ifarch usage in xen.spec to cover also arm - blktapctrl is used only by xend - fix xend-tools-xend sub pkg handling - default to gcc47 for sles11sp3 builds - remove all latex packages from BuildRequires - aarch64-rename-PSR_MODE_ELxx-to-match-linux-headers.patch- add arch dependent install suffix for /boot/xen files- Set max_cpus==4 for non-x86_64 builds- Update to Xen 4.4.0 RC3 c/s 28321- Add flex and bison to BuildRequires, needed by previous patch- fate#316071: add discard support for file backed storage (qdisk) libxl.add-option-for-discard-support-to-xl-disk-conf.patch- On platforms where xend is still supported don't output a deprecation warning when using xm. xend-remove-xm-deprecation-warning.patch- Changed License to GPL-2.0 (from GPL-2.0+)- Dropped xen-changeset.patch. It is no longer needed.- BuildRequire libfdt1-devel on ARM- fate#311487: remove modprobe.conf files for autoloading of pv-on-hvm files. Rely on core kernel to skip initialization of emulated hardware Handle xen_emul_unplug= from xenlinux based core kernel-default xen_pvonhvm.xen_emul_unplug.patch Dropped xen_pvdrivers.conf- Fix the spec file to build for old distros The xm/xend toolstack will continue to be contained in xen-tools for older openSUSE and sles distros but it will be contained in xend-tools for os13.x- fate#316071: add discard support for file backed storage (qdisk) to qemu-upstream, enabled unconditionally qemu-xen-upstream-blkif-discard.patch- Update to Xen 4.4.0 RC2 c/s 28287- Restore 32bit ix86 support in spec file for kmps and domU tools - Restore a few missing xend patches xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-vif-route-ifup.patch- fate#315692: XEN: Include Xen version 4.4 in SLES-12 Update to Xen 4.4.0 RC1 c/s 28233 - Drop 32bit support from spec file - Dropped numerous patches now included in the tarball- gcc-32bit pulls in the right gcc bits, so better buildrequire that- Upstream patches from Jan 5281fad4-numa-sched-leave-node-affinity-alone-if-not-in-auto-mode.patch 52820823-nested-SVM-adjust-guest-handling-of-structure-mappings.patch 52820863-VMX-don-t-crash-processing-d-debug-key.patch 5282492f-x86-eliminate-has_arch_mmios.patch 52864df2-credit-Update-other-parameters-when-setting-tslice_ms.patch 52864f30-fix-leaking-of-v-cpu_affinity_saved-on-domain-destruction.patch 5289d225-nested-VMX-don-t-ignore-mapping-errors.patch 528a0eb0-x86-consider-modules-when-cutting-off-memory.patch 528f606c-x86-hvm-reset-TSC-to-0-after-domain-resume-from-S3.patch 528f609c-x86-crash-disable-the-watchdog-NMIs-on-the-crashing-cpu.patch 52932418-x86-xsave-fix-nonlazy-state-handling.patch- bnc#851749 - Xen service file does not call xend properly xend.service- Add missing requires to pciutils package for xend-tools- bnc#851386 - VUL-0: xen: XSA-78: Insufficient TLB flushing in VT-d (iommu) code 528a0e5b-TLB-flushing-in-dma_pte_clear_one.patch- Make -devel package depend on libuuid-devel, since libxl.h includes uuid.h- bnc#849667 - VUL-0: xen: XSA-74: Lock order reversal between page_alloc_lock and mm_rwlock CVE-2013-4553-xsa74.patch - bnc#849665 - VUL-0: CVE-2013-4551: xen: XSA-75: Host crash due to guest VMX instruction execution 52809208-nested-VMX-VMLANUCH-VMRESUME-emulation-must-check-permission-1st.patch - bnc#849668 - VUL-0: xen: XSA-76: Hypercalls exposed to privilege rings 1 and 2 of HVM guests CVE-2013-4554-xsa76.patch - Upstream patches from Jan 52654798-x86-xsave-also-save-restore-XCR0-across-suspend-ACPI-S3.patch 526e43d4-x86-refine-address-validity-checks-before-accessing-page-tables.patch 526f786a-fix-locking-in-cpu_disable_scheduler.patch 5277646c-x86-ACPI-x2APIC-guard-against-out-of-range-ACPI-or-APIC-IDs.patch 5277a134-x86-make-sure-memory-block-is-RAM-before-passing-to-the-allocator.patch 5278f7f9-x86-HVM-32-bit-IN-result-must-be-zero-extended-to-64-bits.patch 527a0a05-call-sched_destroy_domain-before-cpupool_rm_domain.patch 527cb7d2-x86-hvm-fix-restart-of-RTC-periodic-timer-with-vpt_align-1.patch 527cb820-x86-EFI-make-trampoline-allocation-more-flexible.patch 5280aae0-x86-idle-reduce-contention-on-ACPI-register-accesses.patch- bnc#848657 - VUL-0: xen: CVE-2013-4494: XSA-73: Lock order reversal between page allocation and grant table locks 5277639c-gnttab-correct-locking-order-reversal.patch- Update to Xen 4.3.1- domUloader can no longer be used with the xl toolstack to boot sles10. Patch pygrub to get the kernel and initrd from the image. pygrub-boot-legacy-sles.patch- bnc#842515 - VUL-0: CVE-2013-4375: XSA-71: xen: qemu disk backend (qdisk) resource leak CVE-2013-4375-xsa71.patch - bnc#845520 - VUL-0: CVE-2013-4416: xen: ocaml xenstored mishandles oversized message replies CVE-2013-4416-xsa72.patch - Upstream patches from Jan 52496bea-x86-properly-handle-hvm_copy_from_guest_-phys-virt-errors.patch (Replaces CVE-2013-4355-xsa63.patch) 52496c11-x86-mm-shadow-Fix-initialization-of-PV-shadow-L4-tables.patch (Replaces CVE-2013-4356-xsa64.patch) 52496c32-x86-properly-set-up-fbld-emulation-operand-address.patch (Replaces CVE-2013-4361-xsa66.patch) 52497c6c-x86-don-t-blindly-create-L3-tables-for-the-direct-map.patch 524e971b-x86-idle-Fix-get_cpu_idle_time-s-interaction-with-offline-pcpus.patch 524e9762-x86-percpu-Force-INVALID_PERCPU_AREA-to-non-canonical.patch 524e983e-Nested-VMX-check-VMX-capability-before-read-VMX-related-MSRs.patch 524e98b1-Nested-VMX-fix-IA32_VMX_CR4_FIXED1-msr-emulation.patch 524e9dc0-xsm-forbid-PV-guest-console-reads.patch 5256a979-x86-check-segment-descriptor-read-result-in-64-bit-OUTS-emulation.patch 5256be57-libxl-fix-vif-rate-parsing.patch 5256be84-tools-ocaml-fix-erroneous-free-of-cpumap-in-stub_xc_vcpu_getaffinity.patch 5256be92-libxl-fix-out-of-memory-error-handling-in-libxl_list_cpupool.patch 5257a89a-x86-correct-LDT-checks.patch 5257a8e7-x86-add-address-validity-check-to-guest_map_l1e.patch 5257a944-x86-check-for-canonical-address-before-doing-page-walks.patch 525b95f4-scheduler-adjust-internal-locking-interface.patch 525b9617-sched-fix-race-between-sched_move_domain-and-vcpu_wake.patch 525e69e8-credit-unpause-parked-vcpu-before-destroying-it.patch 525faf5e-x86-print-relevant-tail-part-of-filename-for-warnings-and-crashes.patch- Improvements to block-dmmd script bnc#828623- bnc#840196 - L3: MTU size on Dom0 gets reset when booting DomU with e1000 device set-mtu-from-bridge-for-tap-interface.patch- bnc#839596 - VUL-0: CVE-2013-1442: XSA-62: xen: Information leak on AVX and/or LWP capable CPUs 5242a1b5-x86-xsave-initialize-extended-register-state-when-guests-enable-it.patch - bnc#840592 - VUL-0: CVE-2013-4355: XSA-63: xen: Information leaks through I/O instruction emulation CVE-2013-4355-xsa63.patch - bnc#840593 - VUL-0: CVE-2013-4356: XSA-64: xen: Memory accessible by 64-bit PV guests under live migration CVE-2013-4356-xsa64.patch - bnc#841766 - VUL-1: CVE-2013-4361: XSA-66: xen: Information leak through fbld instruction emulation CVE-2013-4361-xsa66.patch - bnc#833796 - L3: Xen: migration broken from xsave-capable to xsave-incapable host 52205e27-x86-xsave-initialization-improvements.patch 522dc0e6-x86-xsave-fix-migration-from-xsave-capable-to-xsave-incapable-host.patch - bnc#839600 - [HP BCS SLES11 Bug]: In HP’s UEFI x86_64 platform and sles11sp3 with xen environment, xen hypervisor will panic on multiple blades nPar. 523172d5-x86-fix-memory-cut-off-when-using-PFN-compression.patch - bnc#833251 - [HP BCS SLES11 Bug]: In HP’s UEFI x86_64 platform and with xen environment, in booting stage ,xen hypervisor will panic. 522d896b-x86-EFI-properly-handle-run-time-memory-regions-outside-the-1-1-map.patch - bnc#834751 - [HP BCS SLES11 Bug]: In xen, “shutdown –y 0 –h” cannot power off system 522d896b-x86-EFI-properly-handle-run-time-memory-regions-outside-the-1-1-map.patch - Upstream patches from Jan 520119fc-xen-conring-Write-to-console-ring-even-if-console-lock-is-busted.patch 520a2705-watchdog-crash-Always-disable-watchdog-in-console_force_unlock.patch 522d8a1f-x86-allow-guest-to-set-clear-MSI-X-mask-bit-try-2.patch 522dc044-xmalloc-make-whole-pages-xfree-clear-the-order-field-ab-used-by-xmalloc.patch 522f2f9f-Nested-VMX-Clear-bit-31-of-IA32_VMX_BASIC-MSR.patch 522f37b2-sched-arinc653-check-for-guest-data-transfer-failures.patch 5231e090-libxc-x86-fix-page-table-creation-for-huge-guests.patch 5231f00c-cpufreq-missing-check-of-copy_from_guest.patch 523304b6-x86-machine_restart-must-not-call-acpi_dmar_reinstate-twice.patch 5239a064-x86-HVM-fix-failure-path-in-hvm_vcpu_initialise.patch 5239a076-VMX-fix-failure-path-in-construct_vmcs.patch 523c0ed4-x86-HVM-properly-handle-wide-MMIO.patch 523c1758-sched_credit-filter-node-affinity-mask-against-online-cpus.patch 523ff393-x86-HVM-linear-address-must-be-canonical-for-the-whole-accessed-range.patch 523ff3e2-x86-HVM-refuse-doing-string-operations-in-certain-situations.patch- Use upstream version of unplugging in PVonHVM guests add 523c1834-unmodified_drivers-enable-unplug-per-default.patch remove disable_emulated_device.patch- fate#315714 - Support pvUSB in Xen HVM guests, add xen-usb.ko- Upstream patches from Jan 521c6d4a-x86-don-t-allow-Dom0-access-to-the-MSI-address-range.patch 521c6d6c-x86-don-t-allow-Dom0-access-to-the-HT-address-range.patch 521c6e23-x86-Intel-add-support-for-Haswell-CPU-models.patch 521db25f-Fix-inactive-timer-list-corruption-on-second-S3-resume.patch 521e1156-x86-AVX-instruction-emulation-fixes.patch 521ef8d9-AMD-IOMMU-add-missing-checks.patch 52205a7d-hvmloader-smbios-Correctly-count-the-number-of-tables-written.patch 52205a90-public-hvm_xs_strings.h-Fix-ABI-regression-for-OEM-SMBios-strings.patch 52205e27-x86-xsave-initialization-improvements.patch 5226020f-xend-handle-extended-PCI-configuration-space-when-saving-state.patch 52260214-xend-fix-file-descriptor-leak-in-pci-utilities.patch 52285317-hvmloader-fix-SeaBIOS-interface.patch- bnc#837585 - xen* pkg update DISables `xencommons` and `xendomains` systemd services xen.spec- remove unneeded patch, autoload is handled by PCI device, without PCI device xen_platform_pci would not work anyway xen.sles11sp1.fate311487.xen_platform_pci.dmistring.patch- Update our xen-3.0.4 version of unplug code in qemu-trad add comments about the usage of the code rename handler function reenable handlers for writing/reading from emulated PCI device- Change unplugging of emulated devices in PVonHVM guests Since 3.0.4 xen-platform-pci.ko triggerd the unplug by writing to the PCI space of the emulated PCI device. 3.3 introduced an official unplug protocol. The option to unplug wit the official protocol is disabled per default. Remove our version and enable the unplug via official protocol- Upstream patches from Jan 51e517e6-AMD-IOMMU-allocate-IRTEs.patch 51e5183f-AMD-IOMMU-untie-remap-and-vector-maps.patch 51e63df6-VMX-fix-interaction-of-APIC-V-and-Viridian-emulation.patch 52146070-ACPI-fix-acpi_os_map_memory.patch 5214d26a-VT-d-warn-about-CFI-being-enabled-by-firmware.patch 5215d094-Nested-VMX-Check-whether-interrupt-is-blocked-by-TPR.patch 5215d0c5-Nested-VMX-Force-check-ISR-when-L2-is-running.patch 5215d135-Nested-VMX-Clear-APIC-v-control-bit-in-vmcs02.patch 5215d2d5-Nested-VMX-Update-APIC-v-RVI-SVI-when-vmexit-to-L1.patch 5215d8b0-Correct-X2-APIC-HVM-emulation.patch - Dropped 520d417d-xen-Add-stdbool.h-workaround-for-BSD.patch- bnc#836239 - SLES 11 SP3 Xen security patch does not automatically update UEFI boot binary xen.spec- Upstream patches from Jan 51d5334e-x86-mm-Ensure-useful-progress-in-alloc_l2_table.patch 51dd155c-adjust-x86-EFI-build.patch 51e63d80-x86-cpuidle-Change-logging-for-unknown-APIC-IDs.patch 51e6540d-x86-don-t-use-destroy_xen_mappings-for-vunmap.patch 51e7963f-x86-time-Update-wallclock-in-shared-info-when-altering-domain-time-offset.patch 51ffd577-fix-off-by-one-mistakes-in-vm_alloc.patch 51ffd5fd-x86-refine-FPU-selector-handling-code-for-XSAVEOPT.patch 520114bb-Nested-VMX-Flush-TLBs-and-Caches-if-paging-mode-changed.patch 520a5504-VMX-add-boot-parameter-to-enable-disable-APIC-v-dynamically.patch 520a24f6-x86-AMD-Fix-nested-svm-crash-due-to-assertion-in-__virt_to_maddr.patch 520a2570-x86-AMD-Inject-GP-instead-of-UD-when-unable-to-map-vmcb.patch 520b4b60-VT-d-protect-against-bogus-information-coming-from-BIOS.patch 520b4bda-x86-MTRR-fix-range-check-in-mtrr_add_page.patch 520cb8b6-x86-time-fix-check-for-negative-time-in-__update_vcpu_system_time.patch 520d417d-xen-Add-stdbool.h-workaround-for-BSD.patch- The xencommons.service file handles the starting of xenstored and xenconsoled. Drop the following services files as unecessary. Update xendomains.service to reflect these changes. xenstored.service xenconsoled.service blktapctrl.service- Add xencommons.service to xendomains.service 'After' tag xendomains.service- Change the default bridge in xl.conf from xenbr0 to just br0 xl-conf-default-bridge.patch - Add network.target to xendomains.service 'After' tag xendomains.service- Spec file cleanups xen.spec - Renamed xend-sysconfig.patch to xencommons-sysconfig.patch- Added support for systemd with the following service files xenstored.service blktapctrl.service xend.service xenconsoled.service xen-watchdog.service xendomains.service xencommons.service- Upstream patches from Jan 51d277a3-x86-don-t-pass-negative-time-to-gtime_to_gtsc-try-2.patch 51d27807-iommu-amd-Fix-logic-for-clearing-the-IOMMU-interrupt-bits.patch 51d27841-iommu-amd-Workaround-for-erratum-787.patch 51daa074-Revert-hvmloader-always-include-HPET-table.patch- Dropped deprecated or unnecessary patches pvdrv-import-shared-info.patch minios-fixups.patch- Update to Xen 4.3.0 FCS- Enable ARM targets for Xen- Update to Xen 4.3.0-rc6- Update to Xen 4.3.0-rc5- Update to Xen 4.3.0-rc4- Fix xen-utils compiler time warnings xen-utils-0.1.tar.bz2- Enable building the KMPs xen.spec- Update to Xen 4.3.0-rc3- bnc#801663 - performance of mirror lvm unsuitable for production block-dmmd- Update to Xen 4.3.0-rc2- The xend toolstack is now deprecated and unsupported. Consolidate all xend and traditional qemu patches into one patch file. Rename '.diff' patches to '.patch' and reoder others. xend-traditional-qemu.patch- Create a xend-tools package for the legacy xend toolstack and traditional qemu files.- Update to Xen 4.3.0-rc1 c/s 27068 Drop all upstream changeset patches now included in 4.3 tarball - Removed the doc-pdf RPM as there are no more PDFs to include since the docs/xen-api sources were dropped.- bnc#818183 - VUL-0: xen: CVE-2013-2007: XSA-51: qga set umask 0077 when daemonizing CVE-2013-2007-xsa51-1.patch CVE-2013-2007-xsa51-2.patch- add lndir to BuildRequires- remove xen.migrate.tools_notify_restore_to_hangup_during_migration_--abort_if_busy.patch It changed migration protocol and upstream wants a different solution- bnc#802221 - fix xenpaging readd xenpaging.qemu.flush-cache.patch- bnc#808269 - Fully Virtualized Windows VM install is failed on Ivy Bridge platforms with Xen kernel 26754-hvm-Improve-APIC-INIT-SIPI-emulation.patch- Upstream patches from Jan 26891-x86-S3-Fix-cpu-pool-scheduling-after-suspend-resume.patch 26930-x86-EFI-fix-runtime-call-status-for-compat-mode-Dom0.patch - Additional fix for bnc#816159 CVE-2013-1918-xsa45-followup.patch- bnc#817068 - Xen guest with >1 sr-iov vf won't start xen-managed-pci-device.patch- Update to Xen 4.2.2 c/s 26064 The following recent security patches are included in the tarball CVE-2013-0151-xsa34.patch (bnc#797285) CVE-2012-6075-xsa41.patch (bnc#797523) CVE-2013-1917-xsa44.patch (bnc#813673) CVE-2013-1919-xsa46.patch (bnc#813675)- Upstream patch from Jan 26902-x86-EFI-pass-boot-services-variable-info-to-runtime-code.patch- bnc#816159 - VUL-0: xen: CVE-2013-1918: XSA-45: Several long latency operations are not preemptible CVE-2013-1918-xsa45-1-vcpu-destroy-pagetables-preemptible.patch CVE-2013-1918-xsa45-2-new-guest-cr3-preemptible.patch CVE-2013-1918-xsa45-3-new-user-base-preemptible.patch CVE-2013-1918-xsa45-4-vcpu-reset-preemptible.patch CVE-2013-1918-xsa45-5-set-info-guest-preemptible.patch CVE-2013-1918-xsa45-6-unpin-preemptible.patch CVE-2013-1918-xsa45-7-mm-error-paths-preemptible.patch - bnc#816163 - VUL-0: xen: CVE-2013-1952: XSA-49: VT-d interrupt remapping source validation flaw for bridges CVE-2013-1952-xsa49.patch- bnc#809662 - can't use pv-grub to start domU (pygrub does work) xen.spec- bnc#814709 - Unable to create XEN virtual machines in SLED 11 SP2 on Kyoto xend-cpuinfo-model-name.patch- bnc#813673 - VUL-0: CVE-2013-1917: xen: Xen PV DoS vulnerability with SYSENTER CVE-2013-1917-xsa44.patch - bnc#813675 - VUL-0: CVE-2013-1919: xen: Several access permission issues with IRQs for unprivileged guests CVE-2013-1919-xsa46.patch - bnc#814059 - VUL-1: xen: qemu-nbd format-guessing due to missing format specification CVE-2013-1922-xsa48.patch - Upstream patches from Jan 26749-x86-reserve-pages-when-SandyBridge-integrated-graphics.patch 26751-x86-EFI-permit-setting-variable-with-non-zero-attributes.patch 26765-hvm-Clean-up-vlapic_reg_write-error-propagation.patch 26770-x86-irq_move_cleanup_interrupt-must-ignore-legacy-vectors.patch 26771-x86-S3-Restore-broken-vcpu-affinity-on-resume.patch 26772-VMX-Always-disable-SMEP-when-guest-is-in-non-paging-mode.patch 26773-x86-mm-shadow-spurious-warning-when-unmapping-xenheap-pages.patch 26774-defer-event-channel-bucket-pointer-store-until-after-XSM-checks.patch 26799-x86-don-t-pass-negative-time-to-gtime_to_gtsc.patch- bnc#813156 - IndentationError in XendCheckpoint.py xend-domain-lock.patch- bnc#797014 - no way to control live migrations - bnc#803712 - after live migration rcu_sched_state detected stalls xen.migrate.tools-xend_move_assert_to_exception_block.patch xen.migrate.tools-libxc_print_stats_if_migration_is_aborted.patch xen.migrate.tools_set_number_of_dirty_pages_during_migration.patch xen.migrate.tools_notify_restore_to_hangup_during_migration_--abort_if_busy.patch- bnc#811764 - XEN (hypervisor or kernel) has a problem with EFI variable services x86-EFI-set-variable-permit-attrs.patch - Upstream patches from Jan 26060-ACPI-ERST-table-size-checks.patch 26692-x86-fully-protect-MSI-X-table-from-PV-guest-accesses.patch 26702-powernow-add-fixups-for-AMD-P-state-figures.patch 26704-x86-MCA-suppress-bank-clearing-for-certain-injected-events.patch (bnc#805579) 26731-AMD-IOMMU-Process-softirqs-while-building-dom0-iommu-mappings.patch 26733-VT-d-Enumerate-IOMMUs-when-listing-capabilities.patch 26734-ACPI-ERST-Name-table-in-otherwise-opaque-error-messages.patch 26736-ACPI-APEI-Unlock-apei_iomaps_lock-on-error-path.patch 26737-ACPI-APEI-Add-apei_exec_run_optional.patch 26742-IOMMU-properly-check-whether-interrupt-remapping-is-enabled.patch 26743-VT-d-deal-with-5500-5520-X58-errata.patch (bnc#801910) 26744-AMD-IOMMU-allow-disabling-only-interrupt-remapping.patch- Load blktap module in xencommons init script. blktap2 doesn't support qcow2, so blktap is needed to support domains with 'tap:qcow2' disk configurations. modified tmp-initscript-modprobe.patch- bnc#809203 - xen.efi isn't signed with SUSE Secure Boot key xen.spec- Fix adding managed PCI device to an inactive domain modified xen-managed-pci-device.patch- bnc#805094 - xen hot plug attach/detach fails modified blktap-pv-cdrom.patch- bnc# 802690 - domain locking can prevent a live migration from completing modified xend-domain-lock.patch- bnc#797014 - no way to control live migrations 26675-tools-xentoollog_update_tty_detection_in_stdiostream_progress.patch xen.migrate.tools-xc_print_messages_from_xc_save_with_xc_report.patch xen.migrate.tools-xc_document_printf_calls_in_xc_restore.patch xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirty.patch xen.migrate.tools_set_migration_constraints_from_cmdline.patch xen.migrate.tools_add_xm_migrate_--log_progress_option.patch- Upstream patches from Jan 26585-x86-mm-Take-the-p2m-lock-even-in-shadow-mode.patch 26595-x86-nhvm-properly-clean-up-after-failure-to-set-up-all-vCPU-s.patch 26601-honor-ACPI-v4-FADT-flags.patch 26656-x86-fix-null-pointer-dereference-in-intel_get_extended_msrs.patch 26659-AMD-IOMMU-erratum-746-workaround.patch 26660-x86-fix-CMCI-injection.patch 26672-vmx-fix-handling-of-NMI-VMEXIT.patch 26673-Avoid-stale-pointer-when-moving-domain-to-another-cpupool.patch 26676-fix-compat-memory-exchange-op-splitting.patch 26677-x86-make-certain-memory-sub-ops-return-valid-values.patch 26678-SEDF-avoid-gathering-vCPU-s-on-pCPU0.patch 26679-x86-defer-processing-events-on-the-NMI-exit-path.patch 26683-credit1-Use-atomic-bit-operations-for-the-flags-structure.patch 26689-fix-domain-unlocking-in-some-xsm-error-paths.patch- fate#313584: pass bios information to XEN HVM guest xend-hvm-firmware-passthrough.patch- bnc#806736: enabling xentrace crashes hypervisor 26686-xentrace_fix_off-by-one_in_calculate_tbuf_size.patch- update xenalyze to revision 149 Make eip_list output more useful Use correct length when copying record into buffer decode PV_HYPERCALL_SUBCALL events decode PV_HYPERCALL_V2 records Analyze populate-on-demand reclamation patterns Handle 64-bit MMIO Also strip write bit when processing a generic event Make the warnigns in hvm_generic_postprocess more informative Don't warn about switching paging levels unless verbosity>=6 Process NPFs as generic for summary purposes Add HVM_EVENT_VLAPIC- Add upstream patch to fix vfb/vkb initialization in libxl 26369-libxl-devid.patch- fate##313584: pass bios information to XEN HVM guest 26554-hvm-firmware-passthrough.patch 26555-hvm-firmware-passthrough.patch 26556-hvm-firmware-passthrough.patch- Upstream patches from Jan 26516-ACPI-parse-table-retval.patch (Replaces CVE-2013-0153-xsa36.patch) 26517-AMD-IOMMU-clear-irtes.patch (Replaces CVE-2013-0153-xsa36.patch) 26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch (Replaces CVE-2013-0153-xsa36.patch) 26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch 26529-gcc48-build-fix.patch 26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces CVE-2013-0153-xsa36.patch) 26532-AMD-IOMMU-phantom-MSI.patch 26536-xenoprof-div-by-0.patch 26576-x86-APICV-migration.patch 26577-x86-APICV-x2APIC.patch 26578-AMD-IOMMU-replace-BUG_ON.patch- bnc#797014 - no way to control live migrations 26547-tools-xc_fix_logic_error_in_stdiostream_progress.patch 26548-tools-xc_handle_tty_output_differently_in_stdiostream_progress.patch 26549-tools-xc_turn_XCFLAGS_*_into_shifts.patch 26550-tools-xc_restore_logging_in_xc_save.patch 26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patch- Set $BRP_PESIGN_FILES in the %install section so that modules are signed in the buildservice (fate#314552).- PVonHVM: __devinit was removed in linux-3.8- Add 'managed' PCI passthrough support to xend, allowing support for the same through libvirt xen-managed-pci-device.patch FATE#313570- Upstream patches from Jan 26287-sched-credit-pick-idle.patch 26340-VT-d-intremap-verify-legacy-bridge.patch (Replaces CVE-2012-5634-xsa33.patch) 26370-libxc-x86-initial-mapping-fit.patch 26395-x86-FPU-context-conditional.patch 26404-x86-forward-both-NMI-kinds.patch 26418-x86-trampoline-consider-multiboot.patch 26427-x86-AMD-enable-WC+.patch 26428-x86-HVM-RTC-update.patch 26440-x86-forward-SERR.patch 26443-ACPI-zap-DMAR.patch 26444-x86-nHVM-no-self-enable.patch (Replaces CVE-2013-0152-xsa35.patch) 26501-VMX-simplify-CR0-update.patch 26502-VMX-disable-SMEP-when-not-paging.patch- bnc#800275 - VUL-0: XSA-36: CVE-2013-0153: xen: interrupt remap entries shared and old ones not cleared on AMD IOMMUs CVE-2013-0153-xsa36.patch- Add # needssslcertforbuild to the specfile, to make the UEFI signing certificate available during build (fate#314511, fate#314552).- bnc#798188 - Add $network to xend initscript dependencies- Add upstream patches to fix libxl bugs. These patches have already been posted for inclusion in xen-4.2-testing. 25912-partial-libxl.patch 26372-tools-paths.patch 26468-libxl-race.patch 26469-libxl-race.patch- bnc#797285 - VUL-0: Xen: XSA-34 (CVE-2013-0151) - nested virtualization on 32-bit exposes host crash CVE-2013-0151-xsa34.patch - bnc#797287 - VUL-0: Xen: XSA-35 (CVE-2013-0152) - Nested HVM exposes host to being driven out of memory by guest CVE-2013-0152-xsa35.patch- bnc#793717 - NetWare will not boot on Xen 4.2 xnloader.py domUloader.py pygrub-netware-xnloader.patch Removed reverse-24757-use-grant-references.patch- bnc#797523 - VUL-1: CVE-2012-6075: qemu / kvm-qemu: e1000 overflows under some conditions CVE-2012-6075-xsa41.patch- Mask the floating point exceptions for guests like NetWare on machines that support XSAVE. x86-fpu-context-conditional.patch- fate##313584: pass bios information to XEN HVM guest 26341-hvm-firmware-passthrough.patch 26342-hvm-firmware-passthrough.patch 26343-hvm-firmware-passthrough.patch 26344-hvm-firmware-passthrough.patch- bnc#787169 - L3: Marvell 88SE9125 disk controller not detecting disk in Xen kernel 26133-IOMMU-defer-BM-disable.patch 26324-IOMMU-assign-params.patch 26325-IOMMU-add-remove-params.patch 26326-VT-d-context-map-params.patch 26327-AMD-IOMMU-flush-params.patch 26328-IOMMU-pdev-type.patch 26329-IOMMU-phantom-dev.patch 26330-VT-d-phantom-MSI.patch 26331-IOMMU-phantom-dev-quirk.patch - Upstream patches from Jan 26294-x86-AMD-Fam15-way-access-filter.patch 26320-IOMMU-domctl-assign-seg.patch 26332-x86-compat-show-guest-stack-mfn.patch 26333-x86-get_page_type-assert.patch- bnc#794316 - VUL-0: CVE-2012-5634: xen: VT-d interrupt remapping source validation flaw (XSA-33) CVE-2012-5634-xsa33.patch- Update to Xen 4.2.1 c/s 25952- Upstream patches from Jan 26195-x86-compat-atp-gmfn-range-cont.patch 26196-ACPI-set-PDC-bits-rc.patch 26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch 26229-gnttab-version-switch.patch (Replaces CVE-2012-5510-xsa26.patch) 26230-x86-HVM-limit-batches.patch (Replaces CVE-2012-5511-xsa27.patch) 26231-memory-exchange-checks.patch (Replaces CVE-2012-5513-xsa29.patch) 26232-x86-mark-PoD-error-path.patch (Replaces CVE-2012-5514-xsa30.patch) 26233-memop-order-checks.patch (Replaces CVE-2012-5515-xsa31.patch) 26234-x86-page-from-gfn-pv.patch (Replaces CVE-2012-5525-xsa32.patch) 26235-IOMMU-ATS-max-queue-depth.patch 26252-VMX-nested-rflags.patch 26253-VMX-nested-rdtsc.patch 26254-VMX-nested-dr.patch 26255-VMX-nested-ia32e-mode.patch 26258-VMX-nested-intr-delivery.patch 26260-x86-mmuext-errors.patch 26262-x86-EFI-secure-shim.patch 26266-sched-ratelimit-check.patch 26272-x86-EFI-makefile-cflags-filter.patch- bnc#757525 - domain destroyed on live migration with missing vif on target machine xen-migration-bridge-check.patch- NetWare will not boot or install on Xen 4.2 reverse-24757-use-grant-references.patch- fate#313222 - xenstore-chmod should support 256 permissions 26189-xenstore-chmod.patch- bnc#789945 - VUL-0: CVE-2012-5510: xen: Grant table version switch list corruption vulnerability (XSA-26) CVE-2012-5510-xsa26.patch - bnc#789944 - VUL-0: CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs (XSA-27) CVE-2012-5511-xsa27.patch - bnc#789951 - VUL-0: CVE-2012-5513: xen: XENMEM_exchange may overwrite hypervisor memory (XSA-29) CVE-2012-5513-xsa29.patch - bnc#789948 - VUL-0: CVE-2012-5514: xen: Missing unlock in guest_physmap_mark_populate_on_demand() (XSA-30) CVE-2012-5514-xsa30.patch - bnc#789950 - VUL-0: CVE-2012-5515: xen: Several memory hypercall operations allow invalid extent order values (XSA-31) CVE-2012-5515-xsa31.patch - bnc#789952 - VUL-0: CVE-2012-5525: xen: Several hypercalls do not validate input GFNs (XSA-32) CVE-2012-5525-xsa32.patch - Upstream patches from Jan 26129-ACPI-BGRT-invalidate.patch 26132-tmem-save-NULL-check.patch 26134-x86-shadow-invlpg-check.patch 26139-cpumap-masking.patch 26148-vcpu-timer-overflow.patch (Replaces CVE-2012-4535-xsa20.patch) 26149-x86-p2m-physmap-error-path.patch (Replaces CVE-2012-4537-xsa22.patch) 26150-x86-shadow-unhook-toplevel-check.patch (Replaces CVE-2012-4538-xsa23.patch) 26151-gnttab-compat-get-status-frames.patch (Replaces CVE-2012-4539-xsa24.patch) 26179-PCI-find-next-cap.patch 26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch- remove obsolete pv-driver-build.patch to fix build- Fix build with glibc 2.17: add patch xen-glibc217.patch, fix configure for librt.- bnc#777628 - guest "disappears" after live migration Updated block-dmmd script- Fix exception in balloon.py and osdep.py xen-max-free-mem.diff- fate#311966: Fix XEN VNC implementation to correctly map keyboard layouts VNC-Support-for-ExtendedKeyEvent-client-message.patch- fate#310510 - fix xenpaging restore changes to integrate paging into xm/xend xenpaging.autostart.patch xenpaging.doc.patch- bnc#787163 - VUL-0: CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk (XSA 25) CVE-2012-4544-xsa25.patch - bnc#779212 - VUL-0: CVE-2012-4411: XEN / qemu: guest administrator can access qemu monitor console (XSA-19) CVE-2012-4411-xsa19.patch- bnc#786516 - VUL-0: CVE-2012-4535: xen: Timer overflow DoS vulnerability CVE-2012-4535-xsa20.patch - bnc#786518 - VUL-0: CVE-2012-4536: xen: pirq range check DoS vulnerability CVE-2012-4536-xsa21.patch - bnc#786517 - VUL-0: CVE-2012-4537: xen: Memory mapping failure DoS vulnerability CVE-2012-4537-xsa22.patch - bnc#786519 - VUL-0: CVE-2012-4538: xen: Unhooking empty PAE entries DoS vulnerability CVE-2012-4538-xsa23.patch - bnc#786520 - VUL-0: CVE-2012-4539: xen: Grant table hypercall infinite loop DoS vulnerability CVE-2012-4539-xsa24.patch - bnc#784087 - L3: Xen BUG at io_apic.c:129 26102-x86-IOAPIC-legacy-not-first.patch- Upstream patches from Jan 25920-x86-APICV-enable.patch 25921-x86-APICV-delivery.patch 25922-x86-APICV-x2APIC.patch 25957-x86-TSC-adjust-HVM.patch 25958-x86-TSC-adjust-sr.patch 25959-x86-TSC-adjust-expose.patch 25975-x86-IvyBridge.patch 25984-SVM-nested-paging-mode.patch 26054-x86-AMD-perf-ctr-init.patch 26055-x86-oprof-hvm-mode.patch 26056-page-alloc-flush-filter.patch 26061-x86-oprof-counter-range.patch 26062-ACPI-ERST-move-data.patch 26063-x86-HPET-affinity-lock.patch 26095-SVM-nested-leak.patch 26096-SVM-nested-vmexit-emul.patch 26098-perfc-build.patch- handle possible asprintf failures in log-guest-console.patch- bnc#694863 - kexec fails in xen 26093-hvm_handle_PoD_and_grant_pages_in_HVMOP_get_mem_type.patch- fate#312709: Pygrub needs to know which entry to select 26114-pygrub-list-entries.patch- merge changes fron xen-unstable, obsolete our changes 26077-stubdom_fix_compile_errors_in_grub.patch 26078-hotplug-Linux_remove_hotplug_support_rely_on_udev_instead.patch 26079-hotplug-Linux_close_lockfd_after_lock_attempt.patch 26081-stubdom_fix_rpmlint_warning_spurious-executable-perm.patch 26082-blktap2-libvhd_fix_rpmlint_warning_spurious-executable-perm.patch 26083-blktap_fix_rpmlint_warning_spurious-executable-perm.patch 26084-hotplug_install_hotplugpath.sh_as_data_file.patch 26085-stubdom_install_stubdompath.sh_as_data_file.patch 26086-hotplug-Linux_correct_sysconfig_tag_in_xendomains.patch 26087-hotplug-Linux_install_sysconfig_files_as_data_files.patch 26088-tools_xend_fix_wrong_condition_check_for_xml_file.patch- fate#311966: Fix XEN VNC implementation to correctly map keyboard layouts VNC-Support-for-ExtendedKeyEvent-client-message.patch- workaround bash bug in locking.sh:claim_lock, close fd- fix incorrect self-provides/obsoletes of xen-tools-ioemu- bnc#783847 - Virtualization/xen: Bug Xen 4.2 'xendomins' init script incorrectly Requires 'xend' service when using 'xl' toolstack init.xendomains- bnc#782835 - Xen HVM Guest fails (errors) to launch on Opensuse 12.2 + Xen 4.2 + 'xl' toolstack xen-pygrub-grub-args.patch- backport parallel build support for stubdom - rename 5 patches which were merged upstream- remove more obsolete changes: CFLAGS passing to qemu-traditional, PYTHON_PREFIX_ARG handling and pygrub installation- update blktap-pv-cdrom.patch handle allocation errors in asprintf to fix compile errors handle value returned from xs_read properly remove casts from void pointers- update xenalyze to revision 138 Fix dump time calculation overflow move struct record_info into a header correctly display of count of HW events update trace.h to match xen-unstable Remove vestigal HW_IRQ trace records Remove decode of PV_UPDATE_VA_MAPPING automatically generate dependencies Get rid of redundant hvm dump_header Introduce more efficient read mechanism Eliminate unnecessary cycles_to_time calculation Rework math to remove two 64-bit divisions Enable -O2 optimization level Remove --dump-cooked Remove spurious dump_header construction Improve record-sorting algorithm Use long to cast into and out of pointers Make max_active_pcpu calculation smarter Optimize pcpu_string Enable more cr3 output Sort cr3 enumerated values by start time Add option to skip vga range in MMIO enumeration Handle MMIO records from different vmexits Relocate pio and mmio enumaration structs to their own sub-struct Handle new hvm_event traces Introduce generic summary functionality Function-ize setting of h->post_process Reorganize cr trace handling Allow several summary handlers to register on a single vmexit Get rid of all tabs in xenalyze.c Handle new IRQ tracing Decrease verbosity Print exit reason number if no string is available Fix minor summary issue Add string for TPR_BELOW_THRESHOLD Raise MAX_CPUS to 256 cpus. Add --report-pcpu option to report physical cpu utilization. increase MAX_CPUS Handle RUNSTATE_INIT in domain_runstate calculation- update RPM_OPT_FLAGS handling in spec file pass EXTRA_CFLAGS via environment- remove obsolete xencommons-proc-xen.patch- Upstream patches from Jan 25927-x86-domctl-ioport-mapping-range.patch 25929-tmem-restore-pool-version.patch 25931-x86-domctl-iomem-mapping-checks.patch 25940-x86-S3-flush-cache.patch 25952-x86-MMIO-remap-permissions.patch 25961-x86-HPET-interrupts.patch 25962-x86-assign-irq-vector-old.patch 25965-x86-ucode-Intel-resume.patch- pygrub: always append --args 25941-pygrub_always_append_--args.patch- use BuildRequires: gcc46 only in sles11sp2 or 12.1 to fix build in 11.4- Upstream patches from Jan 25833-32on64-bogus-pt_base-adjust.patch 25835-adjust-rcu-lock-domain.patch 25836-VT-d-S3-MSI-resume.patch 25850-tmem-xsa-15-1.patch 25851-tmem-xsa-15-2.patch 25852-tmem-xsa-15-3.patch 25853-tmem-xsa-15-4.patch 25854-tmem-xsa-15-5.patch 25855-tmem-xsa-15-6.patch 25856-tmem-xsa-15-7.patch 25857-tmem-xsa-15-8.patch 25858-tmem-xsa-15-9.patch 25859-tmem-missing-break.patch 25860-tmem-cleanup.patch 25861-x86-early-fixmap.patch 25862-sercon-non-com.patch 25863-sercon-ehci-dbgp.patch 25864-sercon-unused.patch 25866-sercon-ns16550-pci-irq.patch 25867-sercon-ns16550-parse.patch 25874-x86-EFI-chain-cfg.patch 25909-xenpm-consistent.patch- Fixed the 32bit build.- Update to Xen 4.2.0 FCS c/s 25844- unmodified_drivers: handle IRQF_SAMPLE_RANDOM, it was removed in 3.6-rc1- bnc#778105 - first XEN-PV VM fails to spawn xend: Increase wait time for disk to appear in host bootloader Modified existing xen-domUloader.diff- Disable the snapshot patches. Snapshot only supported the qcow2 image format which was poorly implemented qemu 0.10.2. Snapshot support may be restored in the future when the newer upstream qemu is used by Xen.- bnc#776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices xen-bug776995-pvscsi-persistent-names.patch - xend/pvscsi: update sysfs parser for Linux 3.0 xen-bug776995-pvscsi-sysfs-parser.patch- Update to Xen 4.2.0 RC3+ c/s 25779- Update to Xen 4.2.0 RC2+ c/s 25765-bnc#766284 - compiled-in ata_piix driver issues with PVonHVM guests Update xen_pvdrivers.conf to match not only libata but also ata_piix This avoids IO errors in the piix driver caused by unplugged hardware- Update to Xen 4.1.3 c/s 23336- Upstream or pending upstream patches from Jan 25587-fix-off-by-one-parsing-error.patch 25616-x86-MCi_CTL-default.patch 25617-vtd-qinval-addr.patch 25688-x86-nr_irqs_gsi.patch- Build all files with optimization (fortify source does not work with -O0).- bnc#773393 - VUL-0: CVE-2012-3433: xen: HVM guest destroy p2m teardown host DoS vulnerability CVE-2012-3433-xsa11.patch - bnc#773401 - VUL-1: CVE-2012-3432: xen: HVM guest user mode MMIO emulation DoS 25682-x86-inconsistent-io-state.patch- bnc#762484 - VUL-1: CVE-2012-2625: xen: pv bootloader doesn't check the size of the bzip2 or lzma compressed kernel, leading to denial of service 25589-pygrub-size-limits.patch- Make it build with latest TeXLive 2012 with new package layout- bnc#767273 - unsupported /var/lock/subsys is still used by xendomains init.xendomains- bnc#766283 - opensuse 12.2 pv guests can not start after installation due to lack of grub2 support in the host 24000-pygrub-grub2.patch 24001-pygrub-grub2.patch 24002-pygrub-grub2.patch- Upstream pygrub patches for grub2 support and fixes 23686-pygrub-solaris.patch 23697-pygrub-grub2.patch 23944-pygrub-debug.patch 23998-pygrub-GPT.patch 23999-pygrub-grub2.patch 24064-pygrub-HybridISO.patch 24401-pygrub-scrolling.patch 24402-pygrub-edit-fix.patch 24460-pygrub-extlinux.patch 24706-pygrub-extlinux.patch- Revised version of security patch and an additional patch for bnc#764077 x86_64-AMD-erratum-121.patch x86_64-allow-unsafe-adjust.patch- remove dummy asm/smp-processor-id.h- removed dummy xenapi.tex which was added because of bnc#750679 (see the below entry dated "Mon Apr 2 13:07:20 CEST 2012") because "ps2pdf xenapi.ps xenapi.pdf" failed only for Ghostscript version 9.04 (now we have Ghostscript 9.05).- bnc#764077 - VUL-0: EMBARGOED: xen: XSA-9: denial of service on older AMD systems x86_64-AMD-erratum-121.patch - Revised version of security patch for bnc#757537 x86_64-sysret-canonical.patch- Upstream patches from Jan 25242-x86_64-hotplug-compat-m2p.patch 25247-SVM-no-rdtsc-intercept.patch 25267-x86-text-unlikely.patch 25269-x86-vMCE-addr-misc-write.patch 25271-x86_64-IST-index.patch 25327-pvdrv-no-asm-system-h.patch- add dummy asm/smp-processor-id.h for kernel-source 3.4-rcX- remove inclusion of asm/system.h from platform-pci.c- Upstream patches from Jan 25168-x86-memset-size.patch 25191-x86-tdt-delta-calculation.patch 25195-x86-cpuidle-C2-no-flush-or-bm-check.patch 25196-x86-HAP-PAT-sr.patch 25200-x86_64-trap-bounce-flags.patch- bnc#757537 - VUL-0: xen: CVE-2012-0217 PV guest escalation x86_64-sysret-canonical.patch - bnc#757970 - VUL-1: xen: guest denial of service on syscall GPF generation x86_64-trap-bounce-flags.patch- Upstream patches from Jan 25098-x86-emul-lock-UD.patch 25101-x86-hpet-disable.patch ioemu-9877-MSI-X-device-cleanup.patch- bnc#750679 - "ps2pdf xenapi.ps xenapi.pdf" fails for user abuild in Factory add dummy xenapi.tex until ghostscript is fixed- remove vcd.o rule from PVonHVM Makefile, not needed anymore- bnc#753165 - xen/scripts/network-bridge wont create bridge bridge-bonding.diff- Upstream patches from Jan 24950-gnttab-copy-mapped.patch 24970-x86-cpuidle-deny-port-access.patch 24996-x86-cpuidle-array-overrun.patch 25041-tapdisk2-create-init-name.patch- use BuildRequires: gcc46 only in sles11sp2 to avoid issues when gcc47 and newer is the distro default- bnc#745880 - cpuid setting is not preserved across xend restarts xend-cpuid.patch- Rename 2XXXX-vif-bridge.patch -> vif-bridge-tap-fix.patch- bnc#747331 - XEN: standard "newburn" kernel QA stress test on guest (+ smartd on Dom0?) freezes the guest 24883-x86-guest-walk-not-present.patch - bnc#745367 - MCE bank handling during migration 24781-x86-vmce-mcg_ctl.patch 24886-x86-vmce-mcg_ctl-default.patch 24887-x86-vmce-sr.patch - bnc#744771 - L3: VM with passed through PCI card fails to reboot under dom0 load 24888-pci-release-devices.patch - Upstream patches from Jan 24517-VT-d-fault-softirq.patch 24527-AMD-Vi-fault-softirq.patch 24535-x86-vMSI-misc.patch 24615-VESA-lfb-flush.patch 24690-x86-PCI-SERR-no-deadlock.patch 24701-gnttab-map-grant-ref-recovery.patch 24742-gnttab-misc.patch 24780-x86-paging-use-clear_guest.patch 24805-x86-MSI-X-dom0-ro.patch ioemu-9869-MSI-X-init.patch ioemu-9873-MSI-X-fix-unregister_iomem.patch- add BuildRequires: libuuid-devel- bnc#746702 - Xen HVM DomU crash during Windows Server 2008 R2 install, when maxmem > memory README.SuSE- bnc#745005 - Update vif configuration examples in xmexample* Updated xen-xmexample.diff- bnc#743414 - using vifname is ignored when defining a xen virtual interface with xl/libxl 24459-libxl-vifname.patch- bnc#740165 - VUL-0: kvm: qemu heap overflow in e1000 device emulation (applicable to Xen qemu - CVE-2012-0029) cve-2012-0029-qemu-xen-unstable.patch- bnc#744014 - blank screen in SLES11 SP2 guest with a VF statically assigned ioemu-MSI-X-fix-unregister_iomem.patch - Upstream patches from Jan 24453-x86-vIRQ-IRR-TMR-race.patch 24456-x86-emul-lea.patch- fate#310510 - fix xenpaging 24586-x86-mm_Properly_account_for_paged_out_pages.patch 24609-tools-libxc_handle_fallback_in_linux_privcmd_map_foreign_bulk_properly.patch 24610-xenpaging_make_file_op_largefile_aware.patch xen-unstable.misc.linux_privcmd_map_foreign_bulk.retry_paged.patch xenpaging.speedup-page-out.resume_pages.find_next_bit_set.patch xenpaging.speedup-page-out.evict_pages.free_slot_stack.patch xenpaging.speedup-page-out.policy_choose_victim.patch update xenpaging.error-handling.patch, flush qemu cache not so often- fate#310510 - fix xenpaging 24566-tools-libxc_fix_error_handling_in_xc_mem_paging_load.patch- fate#310510 - fix xenpaging 24466-libxc_Only_retry_mapping_pages_when_ENOENT_is_returned.patch- The xen kmp packages fail on the 09-check-packaged-twice script. Rename xen_pvdrivers.conf to xen_pvdrivers-.conf- fate#310510 - fix xenpaging xenpaging.speedup-page-in.gfn_to_slot.patch- bnc#739585 - L3: Xen block-attach fails after repeated attach/detach blktap-close-fifos.patch blktap-disable-debug-printf.patch- bnc#741159 - Fix default setting of XENSTORED_ROOTDIR in xencommons init script xencommons-xenstored-root.patch- bnc#740625 - xen: cannot interact with xend after upgrade (SLES) - bnc#738694 - xen: cannot interact with xend after upgrade (os12.1) - Other README changes included. README.SuSE- bnc#694863 - kexec fails in xen 24478-libxl_add_feature_flag_to_xenstore_for_XS_RESET_WATCHES.patch- fate#310510 - fix xenpaging xenpaging.speedup-page-out.patch- bnc#735806 - VF doesn't work after hot-plug for many times 24448-x86-pt-irq-leak.patch - Upstream patches from Jan 24261-x86-cpuidle-Westmere-EX.patch 24417-amd-erratum-573.patch 24429-mceinj-tool.patch 24447-x86-TXT-INIT-SIPI-delay.patch ioemu-9868-MSI-X.patch- bnc#732884 - remove private runlevel 4 from init scripts xen.no-default-runlevel-4.patch- bnc#727515 - Fragmented packets hang network boot of HVM guest ipxe-gcc45-warnings.patch ipxe-ipv4-fragment.patch ipxe-enable-nics.patch- fate#310510 - fix xenpaging update xenpaging.autostart.patch, make changes with mem-swap-target permanent update xenpaging.doc.patch, mention issues with live migration- fate#310510 - fix xenpaging add xenpaging.evict_mmap_readonly.patch update xenpaging.error-handling.patch, reduce debug output- bnc#736824 - Microcode patches for AMD's 15h processors panic the system 24189-x86-p2m-pod-locking.patch 24412-x86-AMD-errata-model-shift.patch 24411-x86-ucode-AMD-Fam15.patch- bnc#711219 - SR-IOV VF doesn't work in SLES11 sp2 guest 24357-firmware-no-_PS0-_PS3.patch - Upstream patches from Jan 24153-x86-emul-feature-checks.patch 24275-x86-emul-lzcnt.patch 24277-x86-dom0-features.patch 24278-x86-dom0-no-PCID.patch 24282-x86-log-dirty-bitmap-leak.patch 24359-x86-domU-features.patch 24360-x86-pv-domU-no-PCID.patch 24389-amd-fam10-gart-tlb-walk-err.patch 24391-x86-pcpu-version.patch- bnc#729208 - xenpaging=-1 doesn't work xenpaging.doc.patch- fate#310510 - fix xenpaging readd xenpaging.qemu.flush-cache.patch- bnc#732782 - L3: xm create hangs when maxmen value is enclosed in "quotes" xm-create-maxmem.patch- Upstream patches / changes from Jan Added 24358-kexec-compat-overflow.patch Removed 24341-x86-64-mmcfg_remove___initdata_annotation_overlooked_in_23749e8d1c8f074ba.patch Removed 24345-tools-libxc_Fix_x86_32_build_breakage_in_previous_changeset..patch- fate#310510 - fix xenpaging 24178-debug_Add_domain-vcpu_pause_count_info_to_d_key..patch Use wait queues for paging, improve foreign mappings. xenpaging.versioned-interface.patch xenpaging.mmap-before-nominate.patch xenpaging.p2m_is_paged.patch xenpaging.evict_fail_fast_forward.patch xenpaging.error-handling.patch xenpaging.mem_event-use-wait_queue.patch xenpaging.waitqueue-paging.patch Remove obsolete patch, not needed with wait queue usage xenpaging.HVMCOPY_gfn_paged_out.patch- fate#310510 - fix xenpaging Fix incorrect backport, remove double memset, use xzalloc 24171-x86waitqueue_Allocate_whole_page_for_shadow_stack..patch- fate#310510 - fix xenpaging fix typo in nominate, use lock instead of double unlock 23905-xenpaging_fix_locking_in_p2m_mem_paging_functions.patch- fate#310510 - fix xenpaging 24327-After_preparing_a_page_for_page-in_allow_immediate_fill-in_of_the_page_contents.patch 24328-Tools_Libxc_wrappers_to_automatically_fill_in_page_oud_page_contents_on_prepare.patch 24329-Teach_xenpaging_to_use_the_new_and_non-racy_xc_mem_paging_load_interface.patch- bnc#734826 - xm rename doesn't work anymore Updated xend-migration-domname-fix.patch- fate#310510 - fix xenpaging 24269-mem_event_move_mem_event_domain_out_of_struct_domain.patch 24270-Free_d-mem_event_on_domain_destruction..patch- fate#310510 - fix xenpaging 24318-x86-mm_Fix_checks_during_foreign_mapping_of_paged_pages.patch- fate#310510 - fix xenpaging 23949-constify_vcpu_set_affinitys_second_parameter.patch- fate#310510 - fix xenpaging 24105-xenpaging_compare_domain_pointer_in_p2m_mem_paging_populate.patch 24106-mem_event_check_capabilities_only_once.patch- fate#310510 - fix xenpaging 24272-xenpaging_Fix_c-s_235070a29c8c3ddf7_update_machine_to_phys_mapping_during_page_deallocation.patch- bnc#727081 - xend domains don't work anymore since update from 12.1 beta to 12.1 RC 1 24344-tools-x86_64_Fix_cpuid_inline_asm_to_not_clobber_stacks_red_zone.patch 24345-tools-libxc_Fix_x86_32_build_breakage_in_previous_changeset..patch- bnc#733449 - Panic in mcfg_ioremap when booting xen-dbg.gz on Xeon E3-1230 24341-x86-64-mmcfg_remove___initdata_annotation_overlooked_in_23749e8d1c8f074ba.patch- fate#310510 - fix xenpaging backport waitqueue changes from xen-unstable 24104-waitqueue_Double_size_of_x86_shadow_stack..patch 24171-x86waitqueue_Allocate_whole_page_for_shadow_stack..patch 24195-waitqueue_Detect_saved-stack_overflow_and_crash_the_guest..patch 24196-waitqueue_Reorder_prepare_to_wait_so_that_vcpu_is_definitely_on_the.patch 24197-x86-waitqueue_Because_we_have_per-cpu_stacks_we_must_wake_up_on_teh.patch 24231-waitqueue_Implement_wake_up_nroneall..patch 24232-waitqueue_Hold_a_reference_to_a_domain_on_a_waitqueue..patch- fate#310510 - fix xenpaging 24227-xenpaging_restrict_pagefile_permissions.patch- fate#310510 - fix xenpaging merge upstream version of our existing patches: 24218-libxc_add_bitmap_clear_function.patch remove old versions: xenpaging.bitmap_clear.patch- fate#310510 - fix xenpaging merge upstream version of our existing patches: 24138-xenpaging_munmap_all_pages_after_page-in.patch 24208-xenpaging_remove_filename_from_comment.patch 24209-xenpaging_remove_obsolete_comment_in_resume_path.patch 24210-xenpaging_use_PERROR_to_print_errno.patch 24211-xenpaging_simplify_file_op.patch 24212-xenpaging_print_gfn_in_failure_case.patch 24213-xenpaging_update_xenpaging_init.patch 24214-xenpaging_remove_xc_dominfo_t_from_paging_t.patch 24215-xenpaging_track_the_number_of_paged-out_pages.patch 24216-xenpaging_move_page_add-resume_loops_into_its_own_function..patch 24217-xenpaging_improve_mainloop_exit_handling.patch 24219-xenpaging_retry_unpageable_gfns.patch 24220-xenpaging_install_into_LIBEXEC_dir.patch 24221-xenpaging_add_XEN_PAGING_DIR_-_libxl_xenpaging_dir_path.patch 24222-xenpaging_use_guests_tot_pages_as_working_target.patch 24223-xenpaging_watch_the_guests_memory-target-tot_pages_xenstore_value.patch 24224-xenpaging_add_cmdline_interface_for_pager.patch 24225-xenpaging_improve_policy_mru_list_handling.patch 24226-xenpaging_add_debug_to_show_received_watch_event..patch remove old versions: xenpaging.XEN_PAGING_DIR.patch xenpaging.add_evict_pages.patch xenpaging.cmdline-interface.patch xenpaging.encapsulate_domain_info.patch xenpaging.file_op-return-code.patch xenpaging.install-to-libexec.patch xenpaging.low_target_policy_nomru.patch xenpaging.main-loop-exit-handling.patch xenpaging.misleading-comment.patch xenpaging.page_in-munmap-size.patch xenpaging.print-gfn.patch xenpaging.record-numer-paged-out-pages.patch xenpaging.reset-uncomsumed.patch xenpaging.stale-comments.patch xenpaging.target-tot_pages.patch xenpaging.use-PERROR.patch xenpaging.watch-target-tot_pages.patch xenpaging.watch_event-DPRINTF.patch xenpaging.xc_interface_open-comment.patch- bnc#733348 - Use 'xm' in various scripts if xend is running. Modified xmclone.sh and xen-updown.sh - Only emit xl warning when xend is running and -f (force) flag is not specified. Modified disable-xl-when-using-xend.patch- Upstream patches from Jan 24190-hap-log-dirty-disable-rc.patch 24193-hap-track-dirty-vram-rc.patch 24201-x86-pcpu-platform-op.patch- Upstream patches from Jan 23900-xzalloc.patch 24144-cpufreq-turbo-crash.patch 24148-shadow-pgt-dying-op-performance.patch 24155-x86-ioapic-EOI-after-migration.patch 24156-x86-ioapic-shared-vectors.patch 24157-x86-xstate-init.patch 24168-x86-vioapic-clear-remote_irr.patch- submit fixes for bnc#649209 and bnc#711892 xl-create-pv-with-qcow2-img.patch update suspend_evtchn_lock.patch- Update trace.c, merge patches from upstream 23050-xentrace_dynamic_tracebuffer_allocation.patch 23091-xentrace_fix_t_info_pages_calculation..patch 23092-xentrace_print_calculated_numbers_in_calculate_tbuf_size.patch 23093-xentrace_remove_gdprintk_usage_since_they_are_not_in_guest_context.patch 23094-xentrace_update_comments.patch 23095-xentrace_use_consistent_printk_prefix.patch 23128-xentrace_correct_formula_to_calculate_t_info_pages.patch 23129-xentrace_remove_unneeded_debug_printk.patch 23173-xentrace_Move_register_cpu_notifier_call_into_boot-time_init..patch 23239-xentrace_correct_overflow_check_for_number_of_per-cpu_trace_pages.patch 23308-xentrace_Move_the_global_variable_t_info_first_offset_into_calculate_tbuf_size.patch 23309-xentrace_Mark_data_size___read_mostly_because_its_only_written_once.patch 23310-xentrace_Remove_unneeded_cast_when_assigning_pointer_value_to_dst.patch 23404-xentrace_reduce_trace_buffer_size_to_something_mfn_offset_can_reach.patch 23405-xentrace_fix_type_of_offset_to_avoid_ouf-of-bounds_access.patch 23406-xentrace_update___insert_record_to_copy_the_trace_record_to_individual_mfns.patch 23407-xentrace_allocate_non-contiguous_per-cpu_trace_buffers.patch 23643-xentrace_Allow_tracing_to_be_enabled_at_boot.patch 23719-xentrace_update___trace_var_comment.patch Remove old patches: xen-unstable.xentrace.dynamic_tbuf.patch xen-unstable.xentrace.empty_t_info_pages.patch xen-unstable.xentrace.verbose.patch xen-unstable.xentrace.no_gdprintk.patch xen-unstable.xentrace.comments.patch xen-unstable.xentrace.printk_prefix.patch xen-unstable.xentrace.remove_debug_printk.patch xen-unstable.xentrace.t_info_pages-formula.patch xen-unstable.xentrace.register_cpu_notifier-boot_time.patch xen-unstable.xentrace.t_info_page-overflow.patch xen-unstable.xentrace.t_info_first_offset.patch xen-unstable.xentrace.data_size__read_mostly.patch xen-unstable.xentrace.__insert_record-dst-type.patch- Upstream patches from Jan 24116-x86-continuation-cancel.patch 24123-x86-cpuidle-quiesce.patch 24124-x86-microcode-amd-quiesce.patch 24137-revert-23666.patch 24xxx-shadow-pgt-dying-op-performance.patch- bnc#722738 - xm cpupool-create errors out xen-cpupool-xl-config-format.patch- Fix broken build when building docs 23819-make-docs.patch- bnc#720054 - Prevent vif-bridge from adding user-created tap interfaces to a bridge 2XXXX-vif-bridge.patch- bnc#713503 - DOM0 filesystem commit 23752-x86-shared-IRQ-vector-maps.patch 23754-AMD-perdev-vector-map.patch- fate#310510 - fix xenpaging This change reverses the task of xenpaging. Before this change a fixed number of pages was paged out. With this change the guest will not have access to more than the given number of pages at the same time. The xenpaging= config option is replaced by actmem= A new xm mem-swap-target is added. The xenpaging binary is moved to /usr/lib/xen/bin/ xenpaging.HVMCOPY_gfn_paged_out.patch xenpaging.XEN_PAGING_DIR.patch xenpaging.add_evict_pages.patch xenpaging.bitmap_clear.patch xenpaging.cmdline-interface.patch xenpaging.encapsulate_domain_info.patch xenpaging.file_op-return-code.patch xenpaging.guest-memusage.patch xenpaging.install-to-libexec.patch xenpaging.low_target_policy_nomru.patch xenpaging.main-loop-exit-handling.patch xenpaging.misleading-comment.patch xenpaging.page_in-munmap-size.patch xenpaging.print-gfn.patch xenpaging.record-numer-paged-out-pages.patch xenpaging.reset-uncomsumed.patch xenpaging.stale-comments.patch xenpaging.target-tot_pages.patch xenpaging.use-PERROR.patch xenpaging.watch-target-tot_pages.patch xenpaging.watch_event-DPRINTF.patch xenpaging.xc_interface_open-comment.patch- xen.spec: update filelist package /usr/lib*/xen with wildcard to pickup new files remove duplicate /usr/sbin/xen-list from filelist- bnc#725169 - xen-4.0.2_21511_03-0.5.3: bootup hangs 23993-x86-microcode-amd-fix-23871.patch- Update to Xen 4.1.2 FCS c/s 23174- bnc#720054 - Fix syntax error introduced during recent adjustment of Xen's tap udev rule. Updated udev-rules.patch- fate#310510 - fix xenpaging Merge paging related fixes from xen-unstable: 23506-x86_Disable_set_gpfn_from_mfn_until_m2p_table_is_allocated..patch 23507-xenpaging_update_machine_to_phys_mapping_during_page_deallocation.patch 23509-x86_32_Fix_build_Define_machine_to_phys_mapping_valid.patch 23562-xenpaging_remove_unused_spinlock_in_pager.patch 23576-x86_show_page_walk_also_for_early_page_faults.patch 23577-tools_merge_several_bitop_functions_into_xc_bitops.h.patch 23578-xenpaging_add_xs_handle_to_struct_xenpaging.patch 23579-xenpaging_drop_xc.c_remove_ASSERT.patch 23580-xenpaging_drop_xc.c_remove_xc_platform_info_t.patch 23581-xenpaging_drop_xc.c_remove_xc_wait_for_event.patch 23582-xenpaging_drop_xc.c_move_xc_mem_paging_flush_ioemu_cache.patch 23583-xenpaging_drop_xc.c_move_xc_wait_for_event_or_timeout.patch 23584-xenpaging_drop_xc.c_remove_xc_files.patch 23585-xenpaging_correct_dropping_of_pages_to_avoid_full_ring_buffer.patch 23586-xenpaging_do_not_bounce_p2mt_back_to_the_hypervisor.patch 23587-xenpaging_remove_srand_call.patch 23588-xenpaging_remove_return_values_from_functions_that_can_not_fail.patch 23589-xenpaging_catch_xc_mem_paging_resume_errors.patch 23590-xenpaging_remove_local_domain_id_variable.patch 23591-xenpaging_move_num_pages_into_xenpaging_struct.patch 23592-xenpaging_start_paging_in_the_middle_of_gfn_range.patch 23593-xenpaging_pass_integer_to_xenpaging_populate_page.patch 23594-xenpaging_add_helper_function_for_unlinking_pagefile.patch 23595-xenpaging_add_watch_thread_to_catch_guest_shutdown.patch 23596-xenpaging_implement_stopping_of_pager_by_sending_SIGTERM-SIGINT.patch 23597-xenpaging_remove_private_mem_event.h.patch 23599-tools_fix_build_after_recent_xenpaging_changes.patch 23817-mem_event_add_ref_counting_for_free_requestslots.patch 23818-mem_event_use_mem_event_mark_and_pause_in_mem_event_check_ring.patch 23827-xenpaging_use_batch_of_pages_during_final_page-in.patch 23841-mem_event_pass_mem_event_domain_pointer_to_mem_event_functions.patch 23842-mem_event_use_different_ringbuffers_for_share_paging_and_access.patch 23874-xenpaging_track_number_of_paged_pages_in_struct_domain.patch 23904-xenpaging_use_p2m-get_entry_in_p2m_mem_paging_functions.patch 23905-xenpaging_fix_locking_in_p2m_mem_paging_functions.patch 23906-xenpaging_remove_confusing_comment_from_p2m_mem_paging_populate.patch 23908-p2m_query-modify_p2mt_with_p2m_lock_held.patch 23943-xenpaging_clear_page_content_after_evict.patch 23953-xenpaging_handle_evict_failures.patch 23978-xenpaging_check_p2mt_in_p2m_mem_paging_functions.patch 23979-xenpaging_document_p2m_mem_paging_functions.patch 23980-xenpaging_disallow_paging_in_a_PoD_guest.patch Remove obsolete patches: x86-show-page-walk-early.patch xenpaging.23817-mem_event_check_ring.patch xenpaging.catch-xc_mem_paging_resume-error.patch xenpaging.guest_remove_page.slow_path.patch xenpaging.mem_event-no-p2mt.patch xenpaging.no-srand.patch xenpaging.return-void.patch xenpaging.xenpaging_populate_page-gfn.patch- xen.spec: use changeset number as patch number for upstream patches- do not use runlevel 4 in init scripts, it makes it impossible to "insserv xend" on 12.1- Upstream patches from Jan 23955-x86-pv-cpuid-xsave.patch 23957-cpufreq-error-paths.patch- Upstream patches from Jan 23933-pt-bus2bridge-update.patch 23726-x86-intel-flexmigration-v2.patch 23925-x86-AMD-ARAT-Fam12.patch 23246-x86-xsave-enable.patch 23897-x86-mce-offline-again.patch- Update to Xen 4.1.2_rc3 c/s 23171- bnc#720054 - Changed /etc/udev/rules.d/40-xen.rules to not run Xen's vif-bridge script when not running Xen. This is not a solution to the bug but an improvement in the rules regardless. Updated udev-rules.patch- Upstream patches from Jan 23868-vtd-RMRR-validation.patch 23871-x86-microcode-amd-silent.patch 23898-cc-option-grep.patch- Add pciback init script and sysconf file, giving users a simple mechanism to configure pciback. init.pciback sysconfig.pciback- update scripts to use xl -f, or xm if xend is running: xen-updown.sh, init.xendomains, xmclone.sh- bnc#694863 - kexec fails in xen xenstored: allow guest to shutdown all its watches/transactions xenstored.XS_RESET_WATCHES.patch- Upstream patches from Jan 23843-scheduler-switch.patch 23846-x86-TSC-check.patch 23848-vmx-conditional-off.patch 23853-x86-pv-cpuid-xsave.patch- fate#310510 - fix xenpaging mem_event: add ref counting for free requestslots xenpaging.23817-mem_event_check_ring.patch- bnc#717650 - Unable to start VM - Update to Xen 4.1.2_rc2 c/s 23152- bnc#716695 - domUs using tap devices will not start updated multi-xvdp.patch- Upstream patches from Jan 23803-intel-pmu-models.patch 23800-x86_64-guest-addr-range.patch 23795-intel-ich10-quirk.patch 23804-x86-IPI-counts.patch- bnc#706106 - Inconsistent reporting of VM names during migration xend-migration-domname-fix.patch- bnc#712823 - L3:Xen guest does not start reliable when rebooted xend-vcpu-affinity-fix.patch- Upstream patches from Jan 23725-pci-add-device.patch 23762-iommu-fault-bm-off.patch 23763-pci-multi-seg-x2apic-vtd-no-crash.patch 23765-x86-irq-vector-leak.patch 23766-x86-msi-vf-bars.patch 23771-x86-ioapic-clear-pin.patch 23772-x86-trampoline.patch 23774-x86_64-EFI-EDD.patch 23776-x86-kexec-hpet-legacy-bcast-disable.patch 23781-pm-wide-ACPI-ids.patch 23782-x86-ioapic-clear-irr.patch 23783-ACPI-set-_PDC-bits.patch- Include gcc46 only when its available (>11.4 && >sles11sp1)- bnc#711943 - [xl] Fail to create multi-guests with NIC assigned 23685-libxl-segfault-fix.patch- libxenlight and legacy xend toolstack should not be used together. If xend is running, print a warning and exit xl. Add a '-f' (force) option to xl to override this behavior. disable-xl-when-using-xend.patch bnc#707664- Upstream patches from Jan 23732-sedf.patch 23735-guest-dom0-cap.patch 23746-vtd-cleanup-timers.patch 23747-mmcfg-base-address.patch 23749-mmcfg-reservation.patch- bnc#704160 - crm resource migrate fails with xen machines update snapshot-xend.patch - bnc#706574 - xm console DomUName hang after "xm save/restore" of PVM on the latest Xen xend-console-port-restore.patch- update xencommons script to run only when needed xencommons-proc-xen.patch- Upstream patches from Jan 23726-x86-intel-flexmigration.patch 23706-fix-20892.patch 23723-x86-CMOS-lock.patch 23676-x86_64-image-map-bounds.patch 23724-x86-smpboot-x2apic.patch- hotplug.losetup.patch correct dev:inode detection, stat returns major:minor without leading zeros, while losetup -a includes trailing zeros- fate#310635: xen npiv multipath support update block-npiv* scripts for testing- Fixes for EFI support x86-EFI-discard-comment.patch- fate#309894: Xen needs to correctly understand family 15h CPU topology - fate#311376: EFI support in SP2 - fate#311529: Native UEFI booting under Xen (installation) 23074-pfn.h.patch 23571-vtd-fault-verbosity.patch 23574-x86-dom0-compressed-ELF.patch 23575-x86-DMI.patch 23610-x86-topology-info.patch 23611-amd-fam15-topology.patch 23613-EFI-headers.patch 23614-x86_64-EFI-boot.patch 23615-x86_64-EFI-runtime.patch 23616-x86_64-EFI-MPS.patch- Mark xen-scsi.ko supported (bnc#582265, fate#309459).- fate#310308: Hypervisor assisted watchdog driver ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch tools-watchdog-support.patch- bnc#702025 - VUL-0: xen: VT-d (PCI passthrough) MSI trap injection (CVE-2011-1898) Fixed in Xen version 4.1.1- fate#310956: Support Direct Kernel Boot for FV guests kernel-boot-hvm.patch- fate#310316: Support change vnc password while vm is running change-vnc-passwd.patch - fate#310325: Support get domU console log from Dom0 log-guest-console.patch- fate#311487: remove modprobe.conf files for autoloading of Xen and Hyper-V drivers xen.sles11sp1.fate311487.xen_platform_pci.dmistring.patch add dmi modalias to xen-platform-pci.ko- fate#308532: [NONCODE] Remove XEN 32-bit Hypervisor Modify ExclusiveArch in xen.spec to build only x86_64- fate#309900 - Add Xen support for SVM Decode Assist in AMD family 15h - fate#309902 - Add Xen support for AMD family 12h processors - fate#309903 - Add Xen support for AMD family 14h processors - fate#309906 - Add Xen support for performance event counters in AMD family 15h- fate#309893: Add Xen support for AMD family 15h processors - fate#309901: Add Xen support for SVM TSC scaling in AMD family 15h - fate#311951: Ivy Bridge: XEN support for Supervisor Mode Execution Protection (SMEP) 23437-amd-fam15-TSC-scaling.patch 23462-libxc-cpu-feature.patch 23481-x86-SMEP.patch 23504-x86-SMEP-hvm.patch 23505-x86-cpu-add-arg-check.patch 23508-vmx-proc-based-ctls-probe.patch 23510-hvm-cpuid-DRNG.patch 23511-amd-fam15-no-flush-for-C3.patch 23516-cpuid-ERMS.patch 23538-hvm-pio-emul-no-host-crash.patch 23539-hvm-cpuid-FSGSBASE.patch 23543-x86_64-maddr_to_virt-assertion.patch 23546-fucomip.patch- Fix libxc reentrancy issues 23383-libxc-rm-static-vars.patch- fate#310957 - Update to Xen 4.1.1 FCS c/s 23079- fate#311000 - Extend Xen domain lock framework to support more alternative xend-domain-lock-sfex.patch- fate#311371 - Enhance yast to configure live migration for Xen and KVM add firewall service file for xen-tools- Add man page for xen-list utility updated xen-utils-0.1.tar.bz2- Upstream patches from Jan 23233-hvm-cr-access.patch 23234-svm-decode-assist-base.patch 23235-svm-decode-assist-crs.patch 23236-svm-decode-assist-invlpg.patch 23238-svm-decode-assist-insn-fetch.patch 23303-cpufreq-misc.patch 23304-amd-oprofile-strings.patch 23305-amd-fam15-xenoprof.patch 23306-amd-fam15-vpmu.patch 23334-amd-fam12+14-vpmu.patch 23338-vtd-force-intremap.patch- fate#310957 - Update to Xen 4.1.1-rc1 c/s 23064- xentrace: dynamic tracebuffer allocation xen-unstable.xentrace.dynamic_tbuf.patch xen-unstable.xentrace.empty_t_info_pages.patch xen-unstable.xentrace.verbose.patch xen-unstable.xentrace.no_gdprintk.patch xen-unstable.xentrace.comments.patch xen-unstable.xentrace.printk_prefix.patch xen-unstable.xentrace.remove_debug_printk.patch xen-unstable.xentrace.t_info_pages-formula.patch xen-unstable.xentrace.register_cpu_notifier-boot_time.patch xen-unstable.xentrace.t_info_page-overflow.patch xen-unstable.xentrace.t_info_first_offset.patch xen-unstable.xentrace.data_size__read_mostly.patch xen-unstable.xentrace.__insert_record-dst-type.patch- fate#310510 - fix xenpaging update xenpaging patches for xen 4.1 xenpaging.guest_remove_page.slow_path.patch xenpaging.mem_event-no-p2mt.patch xenpaging.no-srand.patch xenpaging.return-void.patch xenpaging.catch-xc_mem_paging_resume-error.patch xenpaging.xenpaging_populate_page-gfn.patch xenpaging.autostart.patch- bnc#670465 - When connecting to Xen guest through vncviewer mouse tracking is off. - Upstream patch 23298-hvmop-get-mem-type.patch replaces xen.sles11sp1.bug684297.HVMOP_get_mem_type.patch - Upstream patches from Jan 23333-hvm-32bit-compat-hypercalls.patch 23337-vtd-malicious-msi-filter.patch 23338-vtd-force-intremap.patch (CVE-2011-1898) 23341-x86-ioapic-write-entry.patch 23343-vtd-error-path-leaks.patch- bnc#684305 - on_crash is being ignored with kdump now working in HVM xend-config-enable-dump-comment.patch- disable xend's logrotation for xend.log, use included logrotate.conf- bnc#684297 - HVM taking too long to dump vmcore xen.sles11sp1.bug684297.HVMOP_get_mem_type.patch new hvm_op hyper call option xen.sles11sp1.bug684297.xen_oldmem_pfn_is_ram.patch Use new Xen HVMOP_get_mem_type hvmop hypercall option and new Linux kernel register_oldmem_pfn_is_ram interface. (depends on two kernel-source changes)- Update to Xen 4.1.1-rc1-pre c/s 23051- Numerous cleanups when compiling with the unused-but-set-variable flag enabled and warnings equal to errors. xen-warnings-unused.diff- Add a 'long' option to xen-list utility Updated xen-utils-0.1.tar.bz2- bnc#691256 - move modprobe of xen backend modules from xend to xencommons initscript tmp-initscript-modprobe.patch- bnc#691738 - Xen does not find device create with npiv block xen-qemu-iscsi-fix.patch- Upstream patches from Jan 22998-x86-get_page_from_l1e-retcode.patch 22999-x86-mod_l1_entry-retcode.patch 23000-x86-mod_l2_entry-retcode.patch 23096-x86-hpet-no-cpumask_lock.patch 23099-x86-rwlock-scalability.patch 23103-x86-pirq-guest-eoi-check.patch 23127-vtd-bios-settings.patch 23153-x86-amd-clear-DramModEn.patch 23154-x86-amd-iorr-no-rdwr.patch 23199-amd-iommu-unmapped-intr-fault.patch 23200-amd-iommu-intremap-sync.patch 23228-x86-conditional-write_tsc.patch- bnc#691238 - L3: question on behaviour change xm list snapshot-xend.patch- update xenalyze to revision 98 * Unify setting of vcpu data type * Unify record size checks * Fix cr3_switch not to access hvm struct before it's initialized - add xenalyze.gcc46.patch to fix unused-but-set-variable errors- bnc#688473 - VUL-0: potential buffer overflow in tools cve-2011-1583-4.0.patch- hotplug.losetup.patch correct dev:inode detection and use variable expansion- bnc#623680 - xen kernel freezes during boot when processor module is loaded 23228-x86-conditional-write_tsc.patch - bnc#680824 - dom0 can't recognize boot disk when IOMMU is enabled 23200-amd-iommu-intremap-sync.patch - Upstream patches from Jan 23127-vtd-bios-settings.patch 23153-x86-amd-clear-DramModEn.patch 23154-x86-amd-iorr-no-rdwr.patch 23199-amd-iommu-unmapped-intr-fault.patch- bnc#685189: update vif-route-ifup.patch to use correct variable after upstream commit 22910:d4bc41a8cecb- bnc#688519: correct indention in xend-domain-lock.patch- bnc#687981 - L3: mistyping model type when defining VIF crashes VM xend-validate-nic-model.patch- bnc#685338: Fix porting of xend-domain-lock.patch- update scripts to use xl instead of xm: xen-updown.sh, init.xendomains, xmclone.sh- disable xend in openSuSE > 11.4 the xl command is the replacement for the xm command- mark runlevel scripts as config to preserve local changes by admin or dev during package update- enable xencommons runlevel script during upgrade if xend was already enabled- call /sbin/ldconfig directly in xen-libs post install scripts- Upstream patches from Jan 23103-x86-pirq-guest-eoi-check.patch 23030-x86-hpet-init.patch 23061-amd-iommu-resume.patch 23127-vtd-bios-settings.patch- add baselibs.conf as libvirt uses 32bit libraries- Remus support is enabled for now.- Enable support for kernel decompression for gzip, bzip2, and LZMA so that kernels compressed with any of these methods can be launched- Update to Xen 4.1 FCS- fix xentrace.dynamic_sized_tbuf.patch the default case did not work, correct size calculation- Update to c/s 23010 Xen 4.1 rc8- use _smp_mflags instead of jobs, jobs is not expanded everywhere- bnc#681302 - xm create -x returns "ImportError: No module named ext" xm-create-xflag.patch- bnc#675817 - Kernel panic when creating HVM guests on AMD platforms with XSAVE 22462-x86-xsave-init-common.patch- bnc#679344 - Xen: multi-vCPU pv guest may crash host 23034-x86-arch_set_info_guest-DoS.patch - bnc#678871 - dom0 hangs long time when starting hvm guests with memory >= 64GB 22780-pod-preempt.patch - bnc#675363 - Random lockups with kernel-xen. Possibly graphics related 22997-x86-map_pages_to_xen-check.patch - Upstream patches from Jan 22949-x86-nmi-pci-serr.patch 22992-x86-fiop-m32i.patch 22996-x86-alloc_xen_pagetable-no-BUG.patch 23020-x86-cpuidle-ordering.patch 23039-csched-constrain-cpu.patch- Fix xen-utils to cope with xen-unstable c/s 21483- bnc#678229 - restore of sles HVM fails 22873-svm-sr-32bit-sysenter-msrs.patch- xz-devel is available since 11.2, make it optional for SLES11SP1- Fix /vm/uuid xenstore leak on tapdisk2 device cleanup 22499-xen-hotplug-cleanup.patch- Upstream patches from Jan 22872-amd-iommu-pci-reattach.patch 22879-hvm-no-self-set-mem-type.patch 22899-x86-tighten-msr-permissions.patch 22915-x86-hpet-msi-s3.patch 22947-amd-k8-mce-init-all-msrs.patch- bnc#672833 - xen-tools bug causing problems with Ubuntu 10.10 under Xen 4. 22238-pygrub-grub2-fix.patch- bnc#665610 - xm console > 1 to same VM messes up both consoles Upstream rejected due to portability concern, see http://lists.xensource.com/archives/html/xen-devel/2011-02/msg00942.html xenconsole-no-multiple-connections.patch- Enable support for kernel decompression for gzip, bzip2, and LZMA so that kernels compressed with any of these methods can be launched.- bnc#651822 - xm snapshot-xxx scripts lead to an XP SP3 HVM domU to chkdsk Make sure we only apply the snapshot once, and the changes made after snapshot-apply hit the disk.- Update to Xen 4.1.0 c/s 22861- bnc#658569 - SLES 11 SP1 dom0 iptables gives lots of physdev messages 22385-vif-common.patch- update xenalyze, more 64bit fixes- allocate xentrace buffer metadata based on requested tbuf_size xentrace.dynamic_sized_tbuf.patch- fate#310510 - fix xenpaging xenpaging.runtime_mru_size.patch - specify policy mru size at runtime xenpaging.no_domain_id.patch - reduce memory usage in pager- bnc#625394 - set vif mtu from bridge mtu if kernel supports it vif-bridge.mtu.patch- fate#310510 - fix xenpaging xenpaging.autostart_delay.patch - decouple create/destroycreateXenPaging from _create/_removeDevices - change xenpaging variable from int to str - init xenpaging variable to 0 if xenpaging is not in config file to avoid string None coming from sxp file- Update to Xen 4.0.2 rc2-pre, changeset 21443- bnc#633573 - System fail to boot after running several warm reboot tests 22749-vtd-workarounds.patch - Upstream patches from Jan 22744-ept-pod-locking.patch 22777-vtd-ats-fixes.patch 22781-pod-hap-logdirty.patch 22782-x86-emul-smsw.patch 22789-i386-no-x2apic.patch 22790-svm-resume-migrate-pirqs.patch 22816-x86-pirq-drop-priv-check.patch- Don't pass the deprecataed extid parameter to xc.hvm_build- bnc#658704 - SLES11 SP1 Xen boot panic in x2apic mode 22707-x2apic-preenabled-check.patch - bnc#641419 - L3: Xen: qemu-dm reports "xc_map_foreign_batch: mmap failed: Cannot allocate memory" 7434-qemu-rlimit-as.patch - Additional or upstream patches from Jan 22693-fam10-mmio-conf-base-protect.patch 22694-x86_64-no-weak.patch 22708-xenctx-misc.patch 21432-4.0-cpu-boot-failure.patch 22645-amd-flush-filter.patch qemu-fix-7433.patch- Maintain compatibility with the extid flag even though it is deprecated for both legacy and sxp config files. hv_extid_compatibility.patch- bnc#649209-improve suspend eventchn lock suspend_evtchn_lock.patch- Removed the hyper-v shim patches in favor of using the upstream version.- bnc#641419 - L3: Xen: qemu-dm reports "xc_map_foreign_batch: mmap failed: Cannot allocate memory" qemu-rlimit-as.patch- Upstream c/s 7433 to replace qemu_altgr_more.patch 7433-qemu-altgr.patch- bnc#661931 - Fix fd leak in xenstore library 21344-4.0-testing-xenstore-fd-leak.patch- bnc#656369 - g5plus: sles11sp1 xen crash with 8 socket x2apic preenabled 21989-x2apic-resume.patch 22475-x2apic-cleanup.patch 22535-x2apic-preenabled.patch - bnc#658163 - maintenance release - Nehalem system cannot boot into xen with maintenance release installed 22504-iommu-dom0-holes.patch 22506-x86-iommu-dom0-estimate.patch - bnc#658704 - SLES11 SP1 Xen boot panic in x2apic mode 21810-x2apic-acpi.patch - Upstream patches from Jan 22470-vlapic-tick-loss.patch 22484-vlapic-tmcct-periodic.patch 22526-ept-access-once.patch 22533-x86-32bit-apicid.patch 22534-x86-max-local-apic.patch 22538-keyhandler-relax.patch 22540-32on64-hypercall-debug.patch 22549-vtd-map-page-leak.patch 22574-ept-skip-validation.patch 22632-vtd-print-entries.patch- bnc#661298 - maintenance release candidate - Windows VMs reboot too fast, triggering failsafe xen-minimum-restart-time.patch- bnc#659070 - Fail to input '|' in en-us keyboard qemu_altgr_more.patch- bnc#659466 - XEN drbd block device type not working on SLES 11 SP1 20158-revert.patch- Revert changes made to snapshot-xend.patch and snapshot-ioemu-restore.patch made on 2010-11-19. The changes were intended to fix bnc#651822, but testing revealed additional changes were needed to completely resolve the bug. bnc#651822 will be fixed in a subsequent maintenance release.- bnc#654543 - PV guest won't unplug the IDE disk created by qemu-dm a dirty hack, only add the device to drives_table[] if we are FV domU, that will be unplugged anyway if a PV driver is loaded later. ioemu-disable-emulated-ide-if-pv.patch- Upstream patch to replace xenfb_32bpp.patch 7426-xenfb-depth.patch- bnc#651822 make sure we only apply the snapshot once, and the changes made after snapshot-apply hit the disk. snapshot-xend.patch snapshot-without-pv-fix.patch- fate#310510 - fix xenpaging xenpaging.HVMCOPY_gfn_paged_out.patch - remove incorrect and unneeded cleanup from do_memory_op subfunctions add mainline tag to merged patches- bnc#613584 - If available, use kpartx '-f' option in domUloader- bnc#659872 - xend: Do no release domain lock on checkpoint operation.- Upstream patches from Jan 22431-p2m-remove-bug-check.patch 22448-x86_64-gdt-ldt-fault-filter.patch 22466-x86-sis-apic-bug.patch 22451-hvm-cap-clobber.patch 22388-x2apic-panic.patch 22452-x86-irq-migrate-directed-eoi.patch- bnc#658163 - maintenance release - Nehalem system cannot boot into xen with maintenance release installed iommu-dom0-holes.patch x86-iommu-dom0-estimate.patch- bnc#659085 - physical host is rebooted with unknown reason Regression: Remove the patch 22071-ept-get-entry-lock.patch- Removed 7410-qemu-alt-gr.patch and altgr_2.patch. It causes a regression (see bnc#659070)- make stubdom build optional- pass -j N to stubdom build- add xenalzye from http://xenbits.xensource.com/ext/xenalyze.hg- hotplug-block-losetup-a.patch allow hardlinked blockdevices - fate#310510 - fix xenpaging xenpaging.paging_prep_enomem.patch - retry page-in if guest is temporary out-of-memory xenpaging.print-arguments.patch - print arguments passed to xenpaging xenpaging.machine_to_phys_mapping.patch - invalidate array during page deallocation xenpaging.autostart_delay.patch - fold xenpaging.enabled.patch into this patch - set xenpaging_delay to 0.0 to start xenpaging right away- bnc#654591 - SLES11 SP0->Sp1 regression? (Xen, HVMs, NPIV) Fixed xen-qemu-iscsi-fix.patch- blktap2 patch - fix problem that blktap2 device info not cleared when block-attach fail. blktap2.patch- bnc#655438 - Using performance counter in domU on Nehalem cpus 22417-vpmu-nehalem.patch - Upstream patches from Jan 22389-amd-iommu-decls.patch 22416-acpi-check-mwait.patch 22431-p2m-remove-bug-check.patch- bnc#656245 - VUL-1: hypervisor: application or kernel in any pv Xen domain can crash Xen x86_64-gdt-ldt-fault-filter.patch- bnc#654050 - Python: a crasher bug in pyexpat - upstream patch needs backporting 22235-lxml-validator.patch- bnc#628729 - Add a small, fast alternative to 'xm list' for enumerating active domains. xen-list is a C program that uses libxenstore and libxenctl directly, bypassing the python toolstack. xen-utils-0.1.tar.bz2- bnc#628729 - Add a small, fast alternative to 'xm list' for enumerating active domains. xen-list is a C program that uses libxenstore and libxenctl directly, bypassing the python toolstack. xen-utils-0.1.tar.bz2- bnc#651822 - xm snapshot-xxx scripts lead to an XP SP3 HVM domU to chkdsk snapshot-xend.patch snapshot-ioemu-restore.patch- bnc#651957 - Xen: vm-install failed to start xenpaging.enabled.patch- fate#310510 - fix xenpaging xenpaging.signal_handling.patch - unlink pagefile in signal handler- Upstream patch for python 2.7 compatibility 22045-python27-compat.patch- bnc#641144 - FV Xen VM running windows or linux cannot write to virtual floppy drive bdrv_default_rwflag.patch- fate#310510 - fix xenpaging xenpaging.optimize_p2m_mem_paging_populate.patch xenpaging.HVMCOPY_gfn_paged_out.patch- bnc#649864 - automatic numa cpu placement of xen conflicts with cpupools 22326-cpu-pools-numa-placement.patch- fate#310510 - fix xenpaging xenpaging.populate_only_if_paged.patch - revert logic, populate needs to happen unconditionally xenpaging.p2m_mem_paging_populate_if_p2m_ram_paged.patch - invalidate current mfn only if gfn is not in flight or done xenpaging.mem_event_check_ring-free_requests.patch - print info only if 1 instead of 2 slots are free xenpaging.guest_remove_page.patch - check mfn before usage in resume function xenpaging.machine_to_phys_mapping.patch - check mfn before usage in resume function- bnc#552115 - Remove target discovery in block-iscsi modified block-iscsi script- bnc#649277 - Fix pci passthru in xend interface used by libvirt 22369-xend-pci-passthru-fix.patch- bnc#642078 - xm snapshot-create causes qemu-dm to SEGV snapshot-without-pv-fix.patch- fate#310510 - fix xenpaging xenpaging.num_pages_equal_max_pages.patch- bnc#647681 - L3: Passthrough of certain PCI device broken after SLES 11 to SP1 upgrade - bnc#650871 - Regression in Xen PCI Passthrough 22348-vtd-check-secbus-devfn.patch - Upstream patches from Jan 22223-vtd-workarounds.patch (bnc#652935) 22231-x86-pv-ucode-msr-intel.patch 22232-x86-64-lahf-lm-bios-workaround.patch 22280-kexec.patch 22337-vtd-scan-single-func.patch- bnc#497149 - SLES11 64bit Xen - SLES11 64bit HVM guest has corrupt text console stdvga-cache.patch- fate#310510 - fix xenpaging xenpaging.page_already_populated.patch xenpaging.notify_policy_only_once.patch xenpaging.guest_remove_page.patch xenpaging.machine_to_phys_mapping.patch remove xenpaging.memory_op.patch, retry loops are not needed- bnc#474789 - xen-tools 3.3 rpm misses pv-grub - PV-GRUB replaces PyGrub to boot domU images safely: it runs the regular grub inside the created domain itself and uses regular domU facilities to read the disk / fetch files from network etc.; it eventually loads the PV kernel and chain-boots it.- fate#310510 - fix xenpaging xenpaging.doc.patch - add /var/lib/xen/xenpaging directory- Some cleanup in the APIC handling code in the HyperV shim. hv_apic.patch- fate#310510 - fix xenpaging xenpaging.memory_op.patch, correct delay handling in retry loop- bnc#640370 - VM graphic console in VNC is corrupted xenfb_32bpp.patch- fate#310510 - fix xenpaging xenpaging.autostart_delay.patch delay start of xenpaging 7 seconds for smooth BIOS startup- fate#310510 - fix xenpaging xenpaging.tools_xenpaging_cleanup.patch- fate#310510 - fix xenpaging xenpaging.mem_event_check_ring-free_requests.patch- install /etc/xen/examples/xentrace_formats.txt to get human readable tracedata if xenalyze is not used- fate#310510 - fix xenpaging xenpaging.autostart_delay.patch xenpaging.blacklist.patch xenpaging.MRU_SIZE.patch remove xenpaging.hacks.patch, realmode works- Upstream patches from Jan including fixes for the following bugs bnc#583568 - Xen kernel is not booting bnc#615206 - Xen kernel fails to boot with IO-APIC problem bnc#640773 - Xen kernel crashing right after grub bnc#643477 - issues with PCI hotplug/hotunplug to Xen driver domain 22222-x86-timer-extint.patch 22214-x86-msr-misc-enable.patch 22213-x86-xsave-cpuid-check.patch 22194-tmem-check-pv-mfn.patch 22177-i386-irq-safe-map_domain_page.patch 22175-x86-irq-enter-exit.patch 22174-x86-pmtimer-accuracy.patch 22160-Intel-C6-EOI.patch 22159-notify-evtchn-dying.patch 22157-x86-debug-key-i.patch- fate#310510 - fix xenpaging xenpaging.signal_handling.patch xenpaging.autostart.patch xenpaging.hacks.patch- rename xenpaging.XENMEM_decrease_reservation.patch to xenpaging.memory_op.patch- bnc#632956 - fix VNC altgr-insert behavior 7410-qemu-alt-gr.patch altgr_2.patch- bnc#618087 - VNC view won't stay connected to fully virtualized Linux Xen VMs modified ioemu-vnc-resize.patch- bnc#639546 - Dom-U deleted after introduction of the parameter "change_home_server False" in the VM configuration change_home_server.patch- bnc#641859 - block-dmmd script does not handle the configuration when only MD is used modified block-dmmd script- fate#310510 - fix xenpaging xenpaging.populate_only_if_paged.patch- bnc#640773 - Xen kernel crashing right after grub 21894-intel-unmask-cpuid.patch - Upstream patch from Jan 22148-serial-irq-dest.patch- bnc#628719 - improve check_device_status to handle HA cases check_device_status.patch- bnc#628719 - multi-xvdp mutli-xvdp.patch- fate#310510 - fix xenpaging xenpaging.XENMEM_decrease_reservation.patch xenpaging.xenpaging_init.patch xenpaging.policy_linear.patch- bnc#632956 - fix VNC altgr-insert behavior 7410-qemu-alt-gr.patch altgr_2.patch- fate#310510 - fix xenpaging xenpaging.pageout_policy.patch xenpaging.xs_daemon_close.patch xenpaging.pagefile.patch xenpaging.mem_paging_tool_qemu_flush_cache.patch xenpaging.get_paged_frame.patch xenpaging.notify_via_xen_event_channel.patch- bnc#636231 - XEN: Unable to disconnect/remove CDROM drive from VM xend-devid-or-name.patch- Upstream patches from Jan 22019-x86-cpuidle-online-check.patch 22051-x86-forced-EOI.patch 22067-x86-irq-domain.patch 22068-vtd-irte-RH-bit.patch 22071-ept-get-entry-lock.patch 22084-x86-xsave-off.patch- bnc#638465 - hypervisor panic in memory handling 22135-heap-lock.patch- Update to Xen 4.0.1. This is a bug fix release.- bnc#635380 - Fix pygrub Grub2 support See update to Xen 4.0.1 for fixes- bnc#628701 - Improve performance when activate/deactivate dmmd devices modified block-dmmd script- bnc#628701 - Fix qemu-dm handling of dmmd devices modified xen-qemu-iscsi-fix.patch- bnc#626262 - Populate-on-demand memory problem on xen with hvm guest 21971-pod-accounting.patch- bnc#584204 - xm usb-list broken usb-list.patch- bnc#625520 - TP-L3: NMI cannot be triggered for xen kernel 21926-x86-pv-NMI-inject.patch- bnc#613529 - TP-L3: kdump kernel hangs when crash was initiated from xen kernel 21886-kexec-shutdown.patch- Upstream Intel patches to improve X2APIC handling. 21716-iommu-alloc.patch 21717-ir-qi.patch 21718-x2apic-logic.patch- bnc#623833 - Error in Xend-API method VM_set_actions_after_crash 21866-xenapi.patch- bnc#625003 - Fix vm config options coredump-{restart,destroy} Added hunk to xm-create-xflag.patch- bnc#605186 - Squelch harmless error messages in block-iscsi- bnc#623438 - Add ability to control SCSI device path scanning in xend 21847-pscsi.patch- Enable the packaging of create.dtd. This is needed for when xm is configured to use xenapi.- bnc#624285 - TP-L3: xen rdtsc emulation reports wrong frequency 21445-x86-tsc-handling-cleanups-v2.patch- bnc#623201 - drbd xvd will fail in new xen4 packages due to wrong popen2 arguments in blkif.py popen2-argument-fix.patch- bnc#620694 - Xen yast vm-install for existing paravirtualized disk fails with UnboundLocalError: local variable 'dev_type' referenced before assignment 21678-xend-mac-fix.patch- bnc#586221 - cannot add DomU with USB host controller defined domu-usb-controller.patch (Chun Yan Liu)- Upstream patches from Jan 21151-trace-bounds-check.patch 21627-cpuidle-wrap.patch 21643-vmx-vpmu-pmc-offset.patch 21682-trace-buffer-range.patch 21683-vtd-kill-timer-conditional.patch 21693-memevent-64bit-only.patch 21695-trace-t_info-readonly.patch 21698-x86-pirq-range-check.patch 21699-p2m-query-for-type-change.patch 21700-32on64-vm86-gpf.patch 21705-trace-printk.patch 21706-trace-security.patch 21712-amd-osvw.patch 21744-x86-cpufreq-range-check.patch 21933-vtd-ioapic-write.patch 21953-msi-enable.patch- bnc#599550 - Xen cannot distinguish the status of 'pause' 21723-get-domu-state.patch- bnc#604611 - Do not store vif device details when vif config contains invalid mac address. 21653-xend-mac-addr.patch- linux pvdrv: generalize location of autoconf.h Fixes error because of missing autoconf.h when building os11.2 Factory.- bnc#609153 - xm migrate localhost -l fails on Windows VMs 21615-dont-save-xen-heap-pages.patch - Upstream fixes from Jan 21446-iommu-graceful-generic-fail.patch 21453-shadow-avoid-remove-all-after-teardown.patch 21456-compat-hvm-addr-check.patch 21492-x86-pirq-unbind.patch 21526-x86-nehalem-cpuid-mask.patch 21620-x86-signed-domain-irq.patch- bnc#612189 - Clear APIC Timer Initial Count Register when masking timer interrupt 21542-amd-erratum-411.patch- bnc#610658 - XEN: PXE boot fails for fully virtualized guests - e1000 virtual nic. (see also bnc#484778) enable_more_nic_pxe.patch- bnc#608191 - /var/adm/fillup-templates/sysconfig.xend from package xen-tools is no valid sysconfig file xend-sysconfig.patch- bnc#608194 - /etc/xen/* config files are not packaged with noreplace- bnc#569744 - SLE HVM guest clock/timezone is incorrect after reboot 21460-xend-timeoffset.patch- bnc#606882 - Allow spaces in vbd path names 21459-block-script.patch- bnc#591799 - The status of Caps Lock is incorrect in domU capslock_enable.patch- Upstream fixes from Jan including a fix for Intel's ATS issue 21435-vmx-retain-global-controls.patch 21406-x86-microcode-quiet.patch 21421-vts-ats-enabling.patch- bnc#607219 - AMD Erratum 383 workaround for Xen 21408-amd-erratum-383.patch- Added modprobe of evtchn to init.xend. The kernel will also need to build evtchn as a module for this to be meaningful.- bnc#603008 - On an 8 Socket Nehalem-EX system, the fix for 593536 causes a hang during network setup. - Upstream patches from Jan. 21360-x86-mce-polling-disabled-init.patch 21372-x86-cross-cpu-wait.patch 21331-svm-vintr-during-nmi.patch 21333-xentrace-t_info-size.patch 21340-vtd-dom0-mapping-latency.patch 21346-x86-platform-timer-wrap.patch 21373-dummy-domain-io-caps.patch- bnc#605182 - /etc/xen/scripts/xen-hotplug-cleanup: line 24: [: !=: unary operator expected 21129-xen-hotplug-cleanup.patch- bnc#599929 - Hot add/remove Kawela NIC device over 500 times will cause guest domain crash passthrough-hotplug-segfault.patch- bnc#603583 - Fix migration of domUs using tapdisk devices 21317-xend-blkif-util-tap2.patch suse-disable-tap2-default.patch- Match upstreams cpu pools switch from domctl to sysctl - Upstream replacements for two of our custom patches (to ease applying further backports) - Fixed dump-exec-state.patch (could previously hang the system, as could - with lower probability - the un-patched implementation)- bnc#593536 - xen hypervisor takes very long to initialize Dom0 on 128 CPUs and 256Gb 21272-x86-dom0-alloc-performance.patch 21266-vmx-disabled-check.patch 21271-x86-cache-flush-global.patch- bnc#558815 - using multiple npiv luns with same wwpn/wwnn broken - bnc#601104 - Xen /etc/xen/scripts/block-npiv script fails when accessing multiple disks using NPIV block-npiv- bnc#595124 - VT-d can not be enabled on 32PAE Xen on Nehalem-EX platform 21234-x86-bad-srat-clear-pxm2node.patch bnc#585371 - kdump fails to load with xen: locate_hole failed 21235-crashkernel-advanced.patch- bnc#588918 - Attaching a U-disk to domain's failed by "xm usb-attach" init.xend- bnc#596442 - Preserve device config on domain start failure xend-preserve-devs.patch- bnc#597770 - insserv reports a loop between xendomains and openais. Remove openais from Should-Start in xendomains script.- bnc#569194 - Tools-side fixes for tapdisk protocol specification blktap-script.patch ioemu-subtype.patch Modified xen-domUloader.diff- Upstream bug fixes from Jan 21089-x86-startup-irq-from-setup-gsi.patch 21109-x86-cpu-hotplug.patch 21150-shadow-race.patch 21160-sysctl-debug-keys.patch- Updated to Xen 4.0.0 FCS, changeset 21091- Change default lock dir (when domain locking is enabled) to /var/lib/xen/images/vm_locks - Support SXP config files in xendomains script- Update to changeset 21087 Xen 4.0.0 RC9.- Update to changeset 21075 Xen 4.0.0 RC8.- bnc#584210 - xm usb-hc-destroy does not remove entry from xend del_usb_xend_entry.patch- Update to changeset 21057 Xen 4.0.0 RC7.-Fix bnc#466899 - numa enabled xen fails to start/create vms adjust_vcpuaffinity_more_cpu.patch- Update to changeset 21022 Xen 4.0.0 RC6.- bnc#586510 - cpupool fixes cpu-pools-update.patch- bnc#582645 - Xen stuck, mptbase driver attempting to reset config request- Update to changeset 20990 Xen 4.0.0 RC5.- bnc#556939 - Improve device map cleanup code in domUloader- bnc# 578910 - xm block-detach does not cleanup xenstore hotplug-cleanup-fix.patch- bnc#579361 - Windows Server 2003 cannot wake up from stand by in sp1 hibernate.patch- fate#308852: XEN CPU Pools cpupools-core.patch cpupools-core-fixup.patch keyhandler-alternative.patch cpu-pools-libxc.patch cpu-pools-python.patch cpu-pools-libxen.patch cpu-pools-xmtest.patch cpu-pools-docs.patch- bnc#558760: Disable scsi devices when PV drivers are loaded.- Update to changeset 20951 Xen 4.0.0 RC4 for sle11-sp1 beta5.- bnc#572146 - SLES11 SP1 beta 2 Xen - BUG: soft lockup - CPU#31 stuck for 61s! [kstop/31:4512] cpuidle-hint-v3.patch- Update to changeset 20900 RC2+ for sle11-sp1 beta4.- bnc#573376 - OS reboot while create DomU with Windows CD- bnc#573881 - /usr/lib64/xen/bin/qemu-dm is a broken link- Update to changeset 20840 RC1+ for sle11-sp1 beta3.- bnc#569581 - SuSEfirewall2 should handle rules. Disable handle_iptable in vif-bridge script vif-bridge-no-iptables.patch- bnc#569577 - /etc/modprove.d/xen_pvdrivers, installed by xen-kmp-default, to ../xen_pvdrivers.conf- bnc#564406 - Make the new PV drivers work with older hosts that do not understand the new PV driver protocol.- Upstream Xen version renamed to 4.0.0 in changeset 20624 & 20625.- fate#307594: HP-MCBS: XEN: support NR_CPUS=256 This is a spec file change (xen.spec)- bnc#555152 - "NAME" column in xentop (SLES11) output limited to 10 characters unlike SLES10 The update to c/s 20572 includes this fix (at c/s 20567).- Modify xen-paths.diff- Merge xend-tap-fix.patch to xen-domUloader.diff remove part of it which accepted by upstream- Load gntdev module in xend init script similar to blkbk, netbk, etc.- Backport dmmd from sles11/xen block-dmmd xen-qemu-iscsi-fix.patch xen.spec- Fix regression when create_vbd for tap xend-tap-fix.patch- Temporarily disable libxl because of libconfig dependency.- fate#302864 domUloader support lvm in disk domUloader.py Note: for test in Beta1, if not good, remove it- fate#302864 domUloader support fs on whole disk domUloader.py- Turn KMPs back on now that kernel side fix is checked in.- fate#304415 VMM: ability to switch networking mode Add vif-route-ifup to handle routed configurations using sysconfig scripts. vif-route-ifup.patch- fate#307540 USB for Xen VMs usb-add.patch- fate#305545 XEN extra descriptive field within xenstore add_des.patch- Update to Xen version 3.5.0 for the following features. fate#304226 XEN: FlexMigration feature of VT-x2 support fate#305004 Add SR-IOV PF and VF drivers to Vt-d enabled Xen fate#306830 T states in Xen controlling by MSR fate#306832 Fix for xen panic on new processors fate#306833 Westmere and Nehalem-EX: Add support for Pause Loop exiting feature for Xen fate#306835 Xen: server virtual power management enhacement fate#306837 VT-d2 - PCI SIG ATS support fate#306872 Xen: Node manager support P/T-states change when Vt-d enable fate#306873 Xen: SMP guest live migration may fail with hap=1 on NHM fate#306875 Westmere: LT-SX (Xen) fate#306891 RAS features for Xen: Add support for Machine Check and CPU/Memory online/offline features fate#307322 1GB page support in Xen fate#307324 Xen IOMMU support- bnc#541945 - xm create -x command does not work in SLES 10 SP2 or SLES 11 xm-create-xflag.patch- Minor enhancement to xen-updown.sh sysconfig hook- Add patch ioemu-bdrv-open-CACHE_WB.patch for install guest on tapdisk very very slow.- Add temporary workaround for race between xend writing and qemu-dm reading from xenstore. The issue is preventing PV domUs from booting as they have no backend console. qemu-retry-be-status.patch - bnc#520234 - npiv does not work with XEN Update block-npiv - bnc#496033 - Support for creating NPIV ports without starting vm block-npiv-common.sh block-npiv-vport Update block-npiv - bnc#500043 - Fix access to NPIV disk from HVM vm Update xen-qemu-iscsi-fix.patch- bnc#513921 - Xen doesn't work get an eror when starting the install processes or starting a pervious installed DomU 20125-xc-parse-tuple-fix.patch- bnc#536176 - Xen panic when using iommu after updating hypervisor 19380-vtd-feature-check.patch- bnc#530959 - virsh autostart doesn't work Fixing this libvirt bug also required fixing xend's op_pincpu method with upstream c/s 19580 19580-xend-pincpu.patch- bnc#534146 - Xen: Fix SRAT check for discontig memory 20120-x86-srat-check-discontig.patch- bnc#491081 - Xen time goes backwards x3950M2 20112-x86-dom0-boot-run-timers.patch- disable module build for ec2 correctly to fix build (at the suse_kernel_module_package macro)- bnc#524071 - implemented workaround for a windows7 bug. hv_win7_eoi_bug.patch- bnc#524180 - xend memory leak resulting in long garbage collector runs 20013-xend-memleak.patch- Upstream bugfixes from Jan. 19896-32on64-arg-xlat.patch 19960-show-page-walk.patch 19945-pae-xen-l2-entries.patch 19953-x86-fsgs-base.patch 19931-gnttblop-preempt.patch 19885-kexec-gdt-switch.patch 19894-shadow-resync-fastpath-race.patch - hvperv shim patches no longer require being applied conditionally- bnc#520234 - npiv does not work with XEN in SLE11 Update block-npiv - bnc#496033 - Support for creating NPIV ports without starting vm block-npiv-common.sh block-npiv-vport Update block-npiv - bnc#500043 - Fix access to NPIV disk from HVM vm Update xen-qemu-iscsi-fix.patch- Don't build the KMPs for the ec2 kernel.- Upstream fixes from Jan Beulich 19606-hvm-x2apic-cpuid.patch 19734-vtd-gcmd-submit.patch 19752-vtd-srtp-sirtp-flush.patch 19753-vtd-reg-write-lock.patch 19764-hvm-domain-lock-leak.patch 19765-hvm-post-restore-vcpu-state.patch 19767-hvm-port80-inhibit.patch 19768-x86-dom0-stack-dump.patch 19770-x86-amd-s3-resume.patch 19801-x86-p2m-2mb-hap-only.patch 19815-vtd-kill-correct-timer.patch - Patch from Jan Beulich to aid in debugging bnc#509911 gnttblop-preempt.patch- bnc#515220 - qemu-img-xen snapshot Segmentation fault qemu-img-snapshot.patch update- bnc#504491 - drop write data when set read only disk in xen config bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch- Upstream fixes from Jan Beulich. 19474-32on64-S3.patch 19490-log-dirty.patch 19492-sched-timer-non-idle.patch 19493-hvm-io-intercept-count.patch 19505-x86_64-clear-cr1.patch 19519-domctl-deadlock.patch 19523-32on64-restore-p2m.patch 19555-ept-live-migration.patch 19557-amd-iommu-ioapic-remap.patch 19560-x86-flush-tlb-empty-mask.patch 19571-x86-numa-shift.patch 19578-hvm-load-ldt-first.patch 19592-vmx-exit-reason-perfc-size.patch 19595-hvm-set-callback-irq-level.patch 19597-x86-ioport-quirks-BL2xx.patch 19602-vtd-multi-ioapic-remap.patch 19631-x86-frametable-map.patch 19653-hvm-vcpuid-range-checks.patch- bnc#382112 - Caps lock not being passed to vm correctly. capslock_enable.patch- bnc#506833 - Use pidof in xend and xendomains init scripts- bnc#484778 - XEN: PXE boot of FV domU using non-Realtek NIC fails enable_more_nic_pxe.patchcross-migrate.patch - bnc#390961 - cross-migration of a VM causes it to become unresponsive (remains paused after migration)- Patches taken to fix the xenctx tool. The fixed version of this tool is needed to debug bnc#502735. 18962-xc_translate_foreign_address.patch 18963-xenctx.patch 19168-hvm-domctl.patch 19169-remove-declare-bitmap.patch 19170-libxc.patch 19171-xenctx.patch 19450-xc_translate_foreign_address.patch-bnc#485770 - check exsit file for save and snapshot-create xm-save-check-file.patch snapshot-xend.patch-bnc#503782 - Using converted vmdk image does not work ioemu-tapdisk-compat-QEMU_IMG.patch- bnc#503332 - Remove useless qcow tools /usr/sbin/{qcow-create,img2qcow,qcow2raw} from xen-tools package.- bnc#474738 - adding CD drive to VM guest makes it unbootable. parse_boot_disk.patch- bnc#477892 - snapshot windows can't accomplish. snapshot-xend.patch- bnc#495300 - L3: Xen unable to PXE boot Windows based DomU's 18545-hvm-gpxe-rom.patch, 18548-hvm-gpxe-rom.patch- bnc#459836 - Fix rtc_timeoffset when localtime=0 xend-timeoffset.patch- bnc#497440 - xmclone.sh script incorrectly handles networking for SLE11.- bnc#477890 - VM becomes unresponsive after applying snapshot- bnc#494892 - Update xend-domain-lock.patch to flock the lock file.- bnc#439639 - SVVP Test 273 System - Sleep Stress With IO" fails Turned off s3/s4 sleep states for HVM guests.- bnc#468169 - fix domUloader to umount the mounted device mapper target in dom0 when install a sles10 guest with disk = /dev/disk/by_path- bnc#488490 - domUloader can't handle block device names with ':' - bnc#486244 - vms fail to start after reboot when using qcow2- bnc#490835 - VTd errata on Cantiga chipset 19230-vtd-mobile-series4-chipset.patch- bnc#482515 - Missing dependency in xen.spec- Additional upstream bug fix patches from Jan Beulich. 19132-page-list-mfn-links.patch 19134-fold-shadow-page-info.patch 19135-next-shadow-mfn.patch 19136-page-info-rearrange.patch 19156-page-list-simplify.patch 19161-pv-ldt-handling.patch 19162-page-info-no-cpumask.patch 19216-msix-fixmap.patch 19268-page-get-owner.patch 19293-vcpu-migration-delay.patch 19391-vpmu-double-free.patch 19415-vtd-dom0-s3.patch- Imported numerous upstream bug fix patches. 19083-memory-is-conventional-fix.patch 19097-M2P-table-1G-page-mappings.patch 19137-lock-domain-page-list.patch 19140-init-heap-pages-max-order.patch 19167-recover-pat-value-s3-resume.patch 19172-irq-to-vector.patch 19173-pci-passthrough-fix.patch 19176-free-irq-shutdown-fix.patch 19190-pciif-typo-fix.patch 19204-allow-old-images-restore.patch 19232-xend-exception-fix.patch 19239-ioapic-s3-suspend-fix.patch 19240-ioapic-s3-suspend-fix.patch 19242-xenstored-use-after-free-fix.patch 19259-ignore-shutdown-deferrals.patch 19266-19365-event-channel-access-fix.patch 19275-19296-schedular-deadlock-fixes.patch 19276-cpu-selection-allocation-fix.patch 19302-passthrough-pt-irq-time-out.patch 19313-hvmemul-read-msr-fix.patch 19317-vram-tracking-fix.patch 19335-apic-s3-resume-error-fix.patch 19353-amd-migration-fix.patch 19354-amd-migration-fix.patch 19371-in-sync-L1s-writable.patch 19372-2-on-3-shadow-mode-fix.patch 19377-xend-vnclisten.patch 19400-ensure-ltr-execute.patch 19410-virt-to-maddr-fix.patch- bnc#483565 - Fix block-iscsi script. Updated block-iscsi and xen-domUloader.diff- bnc#465814 - Mouse stops responding when wheel is used in Windows VM. mouse-wheel-roll.patch (James Song) - bnc#470704 - save/restore of windows VM throws off the mouse tracking. usb-save-restore.patch (James Song)- bnc#436629 - Use global vnc-listen setting specified in xend configuration file. xend-vnclisten.patch - bnc#482623 - Fix pygrub to append user-supplied 'extra' args to kernel args. 19234_pygrub.patch- bnc#481161 upgrade - sles10sp2 to sles11 upgrade keeps xen-tools-ioemu- Don't load 8139* driver if xen-vnif works [bnc#480164]/bin/sh  !"#$%&'()*+,-4.10.1_06-lp150.2.6.14.10.1_06-lp150.2.6.1fsext2fsfsimage.sofatfsimage.soiso9660fsimage.soreiserfsfsimage.soufsfsimage.soxfsfsimage.sozfsfsimage.solibfsimage.so.1.0libfsimage.so.1.0.0libxencall.so.1libxencall.so.1.0libxenctrl.so.4.10libxenctrl.so.4.10.0libxendevicemodel.so.1libxendevicemodel.so.1.1libxenevtchn.so.1libxenevtchn.so.1.1libxenforeignmemory.so.1libxenforeignmemory.so.1.2libxengnttab.so.1libxengnttab.so.1.1libxenguest.so.4.10libxenguest.so.4.10.0libxenlight.so.4.10libxenlight.so.4.10.0libxenstat.so.0libxenstat.so.0.0libxenstore.so.3.0libxenstore.so.3.0.3libxentoolcore.so.1libxentoolcore.so.1.0libxentoollog.so.1libxentoollog.so.1.0libxenvchan.so.4.10libxenvchan.so.4.10.0libxlutil.so.4.10libxlutil.so.4.10.0/usr/lib//usr/lib/fs//usr/lib/fs/ext2fs//usr/lib/fs/fat//usr/lib/fs/iso9660//usr/lib/fs/reiserfs//usr/lib/fs/ufs//usr/lib/fs/xfs//usr/lib/fs/zfs/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8436/openSUSE_Leap_15.0_Update/c56eb83b6ab9563b56f8b59e9a2e01b3-xen.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linux     directoryELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c5e46346575ff019423c050852078aa9aebd2e8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a86ac5ce10c994aca6d3307d78c5e9edbc808bae, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6b236df8e0040c05a5b90102cec3679ee8bec3ca, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c26eaac533c54c302f6ab6e9ccc7bac41a453f5c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=09c2969c24070c9a683d0675907b2215c14acf57, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb60cc80afca9b2b5308decccf4854ff2b37f7f1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca8c958bf89d80e53fe4bcd095f8f8eb497b34a6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=37336fdab385a03f87dd15c21594095952e5ecda, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e67c8344d27e736115e56e695bd2f54f479f8729, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f2a167f58d0fd808af9cfcec7c6e6ccc6094b8df, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a632f143d9a287056866b62b8e2f565b560706b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad8bd49ac53576975669939450ba077ba8358fa5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=519108e3c8fa756420747957beab276f8efa7e7e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3adedc953c511faf71845ff95e249a40c49fbe0d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d960a200c0a9f73e1c2fa6981de5814147b136a2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc74c376876de9fc7c3d63e97ab1d105a9ee9d28, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c311175b6c4a1562ebc84d9edf10dcf9f3f0b44, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=387741b02986efc4bb8d1a74540a7dd2db69ac63, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed7c04759e09c5e8f82a95624bb951235b5a2cdb, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=06a4a24d4b3d81fc98f4a7b8c5ba38508a110754, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e42da88d74bb733608d18d9a961338426fe8034d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=493576690b72d74afde1442f30ebac397a5ffbd8, stripped '0;I`q~     R R RR RRRRR RR RRRR RRRRRRR RR RRRR RRRRRR RR RRRRR R RRR RRRPPRRR RR RRRRPPR-R/RRR RRRR.R,RRPR/R(RR RRR RR R$R&R"RRR.R#R'RR%R!RRPPPPRRR-R/RRR RR.RR,RRP P P PR-R/RR RRR.R,RP P P PPP RRR-R/RRR RR.R,RRPPPPR-R/RR RRR.R,RPR$RRRRR RRR RRR1R#R RPRR/R$RR RR RRRR RRR RRRRRR.R#R R)R+RRR0RRPRRR RRRR R+R R0RPR-RRRR RR RRRRRR,RRPPRRRRPPRR RR RPR(RR RR R$R+R'R#RPRRR RRRR RRR R*RRutf-84d294a7b20374766ba67db99bba7f4d3ff503e0dc9373b0d09ec180ed01535e9? 7zXZ !t/ ] crt:bLL N$zX(3a\nOu+4j\Feɝ%8.<^K8 8;,GBcv'%bNhx͈< @c!>V54E؃ K 'X@@CT:_#Ary75$|-,_Y%V!х/>I{zLpʒ!͏vH$J\:n䪣f@w]hgϹH4B(eWkOFlKְ frh3}n}b,Fh j Z!7~6YGT is^bbC({E f>W7 r o,|//jPatm2l1OO+KdqiFWkqYVڇ2V+!uƳI*įA?)A0'j!u-P.Cj%{HxFq2=ʨV Qjj_$ \ߢܣ26Ԁ}i&a \=FWB: cG6c]ɊՊ~0w;A|chN0neR`s0E0q֢N]$:ua`:vBXW4`r,zM8ؓ/xū|=֝b~=C$&>qձuy߱\tJϗvund:2- Jc$*N)P% iHг1ˀ{() t7+5.UiB} jRUi>˪ Y?tM;3 Q&s},[&cdE dO-]9-o\ +ڝ Ty+fcdX`a~'n}ґ@#6@'9g?gy|g0/1%>xIUn_7'&߰G8CBH9_LF\ǭ))qoߡz"L[wx'N1Wx/%k\щ6]XøQTxO ܷGa) ruja!dsw㳬 &}\ UW! 51nEKxTrE0YUOU$lח] PWv%s0 ,xplܰla;u nA1A$S a'+s-DhuǗ"U, @?OPĦ]ik] OA{)v"a(nKbܪyXa-LFɪwoy}&~5ZtaKV E#JO1[tJ78Amm"p%Ja $B ^uF67{8=$a:*(K}5:=nZ,e:cv Ly7h( d9t JqeW1T>ڌQC ؉ Q0 }X2BWx I󻂮uߦ{ @cbLc74KUH'Zzð%Ov<9D;/9NCg{H6Gt59; ˂Vo˛ wYʤ:|/z9Z`&Ipu _A4rtǪ@-Φ[$P6<3U]ʼ9ޫKtap4[U,Ik$5 1<+ӟ]Ym zx,J{^,@DZEZRVU|9S\dSy:?0SKeuJKXf-=>/(<1PvHlDoo-^ OJ _e#ٱΫW#k:MI! MȢ0ۺ]]^Xq> w N57sIgs&n]qcCޭZyL ͮ041 (Hk"\DxfE`܇}C$zuM^n!Ǿ$T`X.Eڹ5Of|Gtx>G}cZQ󐅍ŐN+xzz>-~OlLD52LoE&]|୬T/'P1/wF=r)@m:wR>9HZyĔZXSF!wJEcȇnL1sk"(CN`)̏sSĚ$)0R #|T8epM75 "S@~]/߀@YY:3 &?B`QiLR?Bo1B Ib\1h:ܐCG?Bnq?|yitjPsP∻ F;8:[.bV1q)R|??0ڑ f[sдntm(]7"v#kۇ@ko\ivmm]X䃃jV`|$^ÖLO 'sUE<1J k5 uDL3Û)XE$;xĮzfm?-4~E7x̫5PB*Y0tƲQmIbf cM~,t4".>֑,]wm V%͓2•w3>b,egLsjvnhJlxM&MC>#t9J@EY/B< ӟ:#݆?WZ:3N^y' ﺼ;v@6tT7ZฌR9_ ` oTU'Yt]_3ӲOgS6@ 3گΌqxYhM1o2 &$4b &|bo`tjIxWGyTxC ѡE%6TjY},]U I0t &r,d0o([YUI뽠F}x7 NT֮2 ɏ/A:7Wd5WR A׍d( Rwrx Ke# 5+n5m 2ު5i}zd,$v Bs&`V4z| 3;bdsC "@NwMĥU*|.>b0* 6:DOoA zCfjS3"br*a0c3 {X/FX:I O{.R?vДicbtHt Hj%-$ky>uz7%B,K%fdH~zd:! `(Dlv>%ZQc$Nl \:'uT!jB<&ll&&Y`8T`=, ]H(K?}jSY5K.)N\FrnV(!Aؐ^\_8h8,޷ k*ks6ؼn.τ+ MhmBCC}~K.4C$š?к7B}R(c@X.=!1SOz5KH㳁-Mó4+/b&(zK!dlj5dJbӦ׹mR9zDjMyAIS)ny4g(&!J}dPLנOjPg͕BHGƯlp\D'kvz<=rHJe~oC͜x|Pb 2Rv`QZ7`nU?OT ;.`mgM=ې\l#;:!JX1Y45\ko )JK*ސ05#xɞD+ ɽP%S=ΧEl.\V6SAnO/%NUx3Y r#[7ә''ex .ё* m ,*{pT+caU2q& &ܒ^<#km50/sbbj6U ۤM"A_4l-UwR̹ k=9Nqc$hD^U Q~ ݀@S':bSQSLz]egiN*p+Ф2K is㐾xm14qD#tPT/t'`^_Jp; 3;gCQ3ݴ}Xd*4h 1kvd8HE~)*UC \(L ]_^u?7Yn@SqB+S+:܊-e->N)-Ьun* ڸO $M|T\3S0x,aFEB&q0~QqHN (m7H~lP03T9 ;-z4P<ɽ 2 Nf)m(Z<ُImoox8#;]%l AT7\1gY:7}FhrYNzǭg3-ɶ1F-Y63I5#[ -NWyg衆q2򒡕Gl6LsKĹG1v+ Kf[Kt{J5vu9-E͓gf.kE~x’!\pA?U0ng@Ld,ޛ޸;E&~vK D:썥1xJcF]6W)H?\r\#*]9|!B+Jd}*,[J0A(y?[P6x2[KW6r%&o{B.gb&4 6Lh}4f8ͬ*/6p+#?gp0$1ʣ\huM9J.WKaw( r\MqȻ ]XTu\ )`C^w7:ͮw~T FQeZ"" V=ްr Ҥ#XPoٽNٝS螦XD{T:]-+ߑPw)~P^%:VGPV7 1̮ -_/n@+Nxu ݉Jɐ%Nֲ^鷕qI/RItgn;&ð E"r.=^_}`s2_Jk}7_Kͨ Ju2(5<3zKZL0דO&C>@l#F+~Ye$` 6f+.4.4\uC9<&Pҳxq/lk L@ܬ .Z"wDUڰ?YPƷфiMW2!v6+F}F )G8nXF&dC̑KР׸,FхY;1giTg>>=l09 iR޼kЪ̨ 7,CbfH6)5fSk;ؙ0Pꮛ"$3j+YVy/6rC=A*x*Wo$2q rSoTFIX3Mj*-rK _QDK+08aAmN'lgDr%0 wcnI9dpLmEd~΍ˈ0I`q/SW2:% -t? L OrqQ>~+ g::-wjR1ۢC}%4-@w7l VT+Dw\O'")Jb`nq"Kg6F0Y׈Z("(۰3yKq`h13xkL WdF9*<NgM3'#-Pgm&kpҠ3U="x5jNJOWY"l ޔTOEATVf?o*NӢ; ި.O{hvTxoA:Ҋj@kD#侲kMbR˘L | ;_OLs@ a~s+~Jzhj(Hs.u޽KR&5"&7uW'`aTCːoU|2"Snj U QN{A6R+0m+v~yÎ|")L+!dDNlju9f8TVaKo9rɁ JϵtQPuџ{T?x5MnMG2gӇ~Q1͑2KoUFL6Vp@q|8Ït "/*:ˎDDd Et, g򈎡Jmf.@Ԥ82nP pO6Ҽ{s]8ޕ,{5GL ўjΒjk5ׁܗXeBX9n0d h(ڂ93LvxS\z⢱>GwGI{ki,?sUbZyuL%GÈ) taJ;gHwNySK2y5o& QzP]:GC,j.^iqWiJY8AntdAZ{@_Mي!LY3G/-Q z }4鴘739aer "{w%h葓ݓ|9ǟtrWUKW#Gj0 fgϮ q;LS+6+h-Ɛ_$d40fSMXm8N˜:>Ԏ"*P<FsvQ9ɭT&{ansg~EAB9HF@JI# L}*H]f: 7&8wQ/aeQg5I-kXtc1DS{ؕbs2Ld&7ykDC &{_xDdC9xov[B9iӜ[yz%'XaǘF( jlܡ* G ' f @ZVGorp}l4R4qZ|S3>gBHJ DOp/61Sx bOE+B'}ߦdR}>ȈR<1bg ,BuRX3\5M?*zugBS}},hQ+bf:HƂm_< i ӫ1x4wrwV(Xb[E;$%5r~++Opk]ɼlLn |>7ov2fD iIXK#Y"Ĭh: V3" av?Bvޟ SK56ޱ3KyNJ5kXrI ݘld(G[-![ۋf1+L>Cc l vl! ng?PYwDW9X~E9g2SAS"qM]Άr>z8?i L&x!c*@ {_r m;q%k`ίTqa` E" f N{z/ZЙ9cLgrttk"vAN1] JO3uMpST+;APDg~y~s!Q_+6cFJXeRi`"M|okϥQ{ZsS 6ncKVjف?(/]fj#>xC͓o7J6I<0Oz腬4au$>A@ Ap1 dKgp,yKK&ǹiEy; ФttU(E#NEOֺs` :-lƢB}bU7WюaL}u*A~di E5ޱUFgLI , i-b`3xO v [P,I-o`&brTn6}G9.U|Ema\TI2\]fUdyQY_#o\%Cv9?9E6uB >fwxmK)s tk jb, `!YG6MD2` v=3ULE84fL` .Uu5wil6F -a=mCL91 Z0CIP|ZF7Mc3Xu-6Ǎ'fUX=Wg³_S6C_n{1Bm6D }GTf{F:𜈏~!VR QgKIK`Z=ֱK!j$;7Ceֿc"^ֵ:tl@K׿La -eR)I 84#^.I#1(' nrWMt>]͋>'4h-]Y&Vm?GmmkjI "ۄWy~OK}u]vKǺ 땻%]3{+^ޮ+Kr]Vw\ Rf$}S>*]x}`xA (K w.Abp#q"ܮ^f͙0O>3یϞc׏ꃼ]$8YR !T!\o:HI֔9,,1# @'{@'? dVmxrT) f25VY.__kFO#Σi\{L!Z)m(vt:%S"sI@W0)C?-;N &WR흵ϋ֧B"{~v)1uuj}+T\r 2Ҝ(gC)_I5|uȟ1Rz5Nśn#G}\-d9aÚ g+ƶp 6&V Psn5&/_J^kw,I%ut2 1,'FnvZ$^bq5آ5"Ҁp+mZˍ][18ضֳ+vG55~3 1]ѓOk`/H~Zq

MN|g@+G9wtؾwL`=PӴu9l[B2X2E(]#Ģ G"dECMkgyz$;QT#p쬙I̗OݥQ}Zs(KwE=mEmSe*.J\4xؤ u7)d|I  [!Elh=Hv1{#|9N3.]* t4`'q{ziɡB;6`ᖗ zyrX̔T*zf->t-# ېfwBBUƜ.T~ =c`u. @vFdv&yq:abVz'צu\T8<'(XǏg¯:F_5i/?AUI ze2dZUC5(6?iй~7A Uܽ2+镉6*}݁zfO %2_xp&HP5[Fm3I"~ "Y.\R t7JBF~U `ATEFA9!Z ٦KiŎU/).i󚁼 }Q ƚnȚ,] ٿ:!!RiO Wo3<)O buYE0ScfoF$w \F=ޅ4s0c1کc?~yŇGOm { &9JtNΆoHb!;ds.@+XҧKy٫o_~Ce-|[ϒґaИn]QU)67<4 ߌ֥3d//\7,RenD+v:{] Cexe^nrMo' j0xSOz iL. FsOܻ&x:x֒L`҃Ojq ͋w޺}wݾ-LV*f~bPgs@yeXE:2=Z؄Y*BRh"Y\jvh. )m.֨c}SCk EދR\ @,"Gx kFtpY*7@{}a+[[|:v yc{5 u?.$~|ƟcAp! "λv Ĝ$Wr5%irڛһ^_F؃n/x;)#} :xt(gΝ{(KOɄC\agIxV(.5)m8zrH5sFct't5EK}^F̼,@ > ä!w`%)ie=452e?;oJc%n\v8tYt6ĭԧ1tE~ExVv){9B DDaBa)̐wQ،łwl|=L.|Cuu7S!^S']r U_ 4*z]/( ,o1i2(H2eݚH_l"fҎIH$,4G#ae'߭oqJ_9@_~5S 6MjEWg4XRxl >X:nI%)-D}=Mp6Z_޶@qjrlNNgg2cD aA:Cy+,C!Ab3?*MSPcZ m~~b3ȇ5hBdaPN)gbG疋m {as,Rf1nh|֫mO$k* %(K|__ǒAIIvS͞2NmCmDpXc Cݢ_&W8;`'wz2*1Gs7̌[kXL1ԵV}OI(hEA믦9׹bJh1NU&AEE2\ $1QZ*ۯ!޲~Ud遠a}ךd9K@'.V3rXy`ϑhM pX^ɉMWu_h#TK0$`H)H6}O0[8}$Mî-xL18HgDQ19ބUbf j1\Ii|{K#EGy$Xh݋8>A9 \щAmiPoM Llչ$8P}شAY±by)=` Ԩw@/ziZ ^|+:C|(p\759ϧ{ERPqzk~\T@5eZ$K ==yŮ li p=Hxvgqn˦.J_tB^k4Q)a(T9j곳fӜ,wt$RMkX/FZz glk0^]T*pB%b.M *wW`HщuYi7ϟ|dk}LY> ˃.ڒ ཏGEcz?hBtdfsm҄ σ%p⵭I}y720 _GOg=PP.,U|VMG[8Cna.#޼7NTcۗp3cy-BF<{LBδ5V{K7^-F5&eaøCe/}:XVdsK-p P".@O 5ܾ)#%ʝ7d׼\{51&E-P2qfԔZc\/{ND Y#z:hc& YԄ?-s{?x?{$i&Pln(%8z0c29 Y]R1׮j]aR@RE944@wh#tmu6!P`A%Gɧlxk$Gq)zO$- NC /% n{ʀն:JpWI1o&t; mSLOGB8gJٍt r%/[IuL4brjyYG_>LԺIGX;ZGd_ݨ׊7l]:Րd ;s4*/BKV `DNN:RN mD FQV3#n35@{%yg/Y C8yJT%Q/0'$q-ALp]BMݥSOdf}1+< ~{7kz(_*_[ĭ[b7pQ 5ɻd׶Ƨ71M@_B>JiKK*C~ S73(6%vS嶦7!Hl5R<aЛj;{ʼn?ţ™28]vn]ke}ݵ^x x!2{& HC.@ݾ׹T)!" v$okfbv{L$WBƦkeQ':_DuRwgh-rez% ~߇^>{lOX\1b^F%Lj=2{E|vtHʁW" Yܽ@!-@]ݮuU%س'*|R̳"rr|,ljKf\_zebhs_Wps@;nI{pL_2kZ9EAA6 Cq#eF!^D[KP'`,Bzn`P|pr~롳E[/k Mh)3Il`|E=Dqʵ *T k"9L%gCVYdAfK6U"vG/0Kv\#YTƀ,5jW|evôuq-1KL~rm1OAҽM4 Q6=@%n5/@{]Йg)b=\2o@s0Ê^2(=E^k&\@TI)zJm9QgԙM4HP u9U2ִrX'5x Bx;{dfL7wT 䆊X"4_hU W9TBkBi1';0DwRDLrNq44gL)lr+f _ߴVI.a|g(;fw2 |қg2 xM B0?Xƍf]tHf?Ѵc>;\1ij,;qk9:ن&@"۠9f \3K #TG=mvz Dzc6zOu\S݀,FS`Hc{ #"_(Nz͍m~b6rp/CCfd:;pl 0IE"N怼69J!,g_rU"$C"{V2'5cd ]!39DgA%Rva{mU.[mί-v>odtPV8z|;ţo 8t9$ڑH^k ݔ5!|*E*WJo[:VC%<(c3}zBKP UNeIA7a]k dFxut Krͪb7f/} #yD W.Q*vNOI_g"_==HB<9VC^7ݞf !;݃IQr+Vm~ w2:Q"imLyRTDjoG#/|h_]Gv_TTmZ^|s}nR㤁*oD]\`h*a6.O*g*Wp%M[$r^q/hs% A1#6ql"O??ϙ8j'Ӌn"iDӯc 2AV#"\J͂l (UD,LGz\OއXvaӽ_%$$#tcnղ\Ϟ5rKm:qhsyCa h" 9Bȧ?G҄qtX%4 {-\PXr;`0?N]یCQ~@`!(.E__; vSnuX5(}۔3Åf,5F ^-]__KW5@I(e=?Q%2RrC`);²ٕKZ67TʉNO s1ݮq[ʲ>7»ϜM*@/@h`m +2~Giwv,l)ʥ[?*IS͚cTI7b7#ub᫒yCZ3;@ ̳3?{Sz>nЌ59]^)2oxW~0%u tKS8}Ш>$=B^? \#6 \]M8lciJmhɂ9WdEv2Gd x뎚< Ofˎ< 0ߜw-'n U[/ؼK xEHNU̳VdD]N%d>4yNeoޘruEϋYy고#~3Pu#Y fSCfZ^ Bcr'lV% l.v +/_wc| uO=zd:^cyQ޳J9JQSؗw Y:_Nz,ퟹIی{mcבRY?nK6n6h[d<Ah|2¡=a܌:|9h A(x (hCKr@-S ?SZC0{{?7?x&J\fvoRTfJƈ Yj#uYC}Ͽei?|-]Naې^̾}ŰmTL& 6#OC*qur룸&窓T8X>U$)8!7G*UAAS֞[Ĵ%Ԅv":p]<[Li wSA_X& q ̰v&Y!fgH7bnM<|Q@)~JHQ.c )5Xn? hsn;I¸.x0m:B#x\Jjn֫ujD .*&=(v᫵4ɌU)& t5rh*kM#"woI)B%_t`ˆq㎉ )pG(?wl,d]yKt#nzDŘm 3$RP r:w9={+$! =8!(Qm 19^V|C: Xΰi(z8nb[e'MEH+Q{,2d6f^v^O*٪z2%XYb^@5ӏ4G 'Cʖp(9qr6e8ǫ}T 26jD'/6WUSn_ {v2uJDu{81e:2>3̥v.#0i#8:nA \񑰎CKtuS$F rSTps}UK#zA,`n`|4ŃَMCj ϻX ^=/f2I*W /K.Qjg3S[0f ~l|(sL08ejsbO-@K *j0~nve qTvWT$]LRdz._͠FMi q8HtfE$kaQrd>T+y>4?ץ+e=Q6牅ZZ-7 O@V$oZ0l`Jƀ2E.SG2{b*@!^s>F /6j1uDpBP=t=VdNo۬ƣj"J dQYPOVq m6Rvpaxׯ &-HL/GUMl̶ 0[ Ï٭y#7}ϪJ""x۸RͱZ-^iw'܄+>jeO]Wpnί]~)SART^5Y7+T% ]:av=:E1B2s9׎ [y.Ύ.8nռu8;@v5lIͬ"7pPs'}OP#RPmA\9Q䊺7ԡNԹcӕֹ67lOy Wջ{'muˠE조)T5ehua 2Qbm:&ʏK+fחAPrAIԨHKҨZLwH)YJTO;quo:-pBG37l;;8z*֒1o{O6i.>6pwcw5*kёanӽy`,Mw<d"W<2D@8|N8B3E@ xȝmp \lJhYշ\ul#$JKo+ S @I0^Eoc3:Y~*!)ܺ |8fR `UK0<A(y$#M ؠS1;wvLjbۭ!l w3Xa"'E]@aYdl@H_禨vhpu%-_qV}@S G='pPо˜Q:-k.EuuW`g$/I5 {-fY{U;]x潒.J/Q H'bVv۔c9IeV<W'=qɡ%$]dIal .t0)X;ak *a SKǁπh}T07?x t˰UQJE49/ҤlC^>~eIdZUtS~"bҗSX=ҹl7S%,s9[*z웽.~2oW:6&F18nYN%(2)XXJwR>jy"Hp~A9v.pk[vR"qу+Nv%3`f.U XH 9eX0=2q4j c_ھLaڗ L Nt{@tN-ZaP]oս) JQyM7I% uי2VwX9˘ $H?ޫ<>\6% qb2s#wMgiѣ"v= BnG%vob;B$;rt )==I4VM؏zVE`_ P؇o9 7{ @}ɿN3ȷ_hapNjHqqU^Jb~A?ۋ~J&.(x^\SfbH;/ ЁWBZ,AR@a]yPM,GK+C+0. *kI0gbA[KY8l fh1>XY lƻ4Y#ե .r.<">Y(RD;p,c# NC4+>;ٴf\@ Ppθn q̹^EMl=Jm ul+<F0eor f.(?k<w=TljYZ)IzӯV6#A Fm֧Rn+0wѯ1u ZK&*r p6 NWcwy~ bgG`0Dx5v E[F&SIf7./K9-V͑陨ϝj{-T[.[4;>)g` /&P@aNRU=HMz\Ais^QP@tFxkMc>+3HC"yNH=]'(+EFlnr;jMڷz3cD, nj ~@ jQvEǘH% $2iat x^6Crv.豥>WfSwp{%m2أc[^|ARX&8FijnA}z>%_?+aoSߙhۍWR5O6͌w|N'{Y袐ݔ\ɧ$srNtrt+d*?m'g~W՘q\B=U50FdFDhf/ڬV@*VRP8Zhpb5 ';PѲ-%kZ۠LL)_,?[ޅC-DiqM)WHL\JW .6Ή {nr20 iZ΃/0QEʙrhFg9 Nu;:F8g|[ݮV9]ʘ|<uAc[6v;丰j)1/&ء5Ss0Wdkn?D')p K2a$ߩaRϭuM˦^a-n= .]v ' Md .t~IUnic8L:PqkAꗕ޺"|;07ȡQ/^md; LK94U^??uఘP{W%$)U*bNֻrQ@ԅؙb)@JJܿ>?O%sJ–#f 'ƴ5uōȠ3ݫUp(*,"R4AXu=bpU7nHAm"`<+ngT}H(ҕl"oDæh>.m@٪z+W ,w#K;>#n ̞U6j(!m213n6|ʀz/ʪCri֕iiƼ'o?aeطvk8/~6s]{,:"} +} @ P5Ocj%>;GotL0eAleBX"=;n<->;B87n[VoOO^ `l6 ':h(7m]W܃?}FwW6*m٬% `^٭@t8GĎɡċWD9lǘ?J19 >B)I. XHh80jAM!ݵ; Z28:ɃC]?)yDO12C$i Rxjt* Ѐ]u;J73~\0#*o[3n]Ӭv?*u ÔEe7q/gTi *_i-&dj8E}PX# k~*]uDtւxYτd29j޸t =.%n%P Kxϓgʶg6Qg6*ӀOfJ!' c{}57~ FcHB64Yͧ&e6L5LG,ۥ<.#'Z“ʫgE&zU=|&eWFcZf82gB; Qi(ɿ>) u$^|h34-C(DHFm <&FdMqʞ#eE(;Yxz48Y!%]KA$.Zތ_tpwй3rm2HG;7b@U.#l$[l jO]V.g[-?KXk@=Ɠm)f";`ŇnHq9[:+^K!5D`,sGd C!ÿi(-h1,‘<N%Y5p"v {,hFPhI;wCUg @YrEjCXc/chͷ@zkbnڵT%Ԭ)_BS 5r;2tlbPVZ]FHwz?).3+V^܀̱VE쨸Hھ_k)**.g0_d PjCyMf-WϞmFHtC/}( ,LJ$&xғe /X9l҂Qz:AXI{&*#J4.쇀{aWp ϳb̢̨hSr~cmp m,Lj7.8Ȋ7y.XgjQ"C"JU @6$y}ںY&/ύÂp"12˹%I{ Ϡ>>qWg 2wr OmTb ~ϴ5itLs,,@b0N:~R9jWp& ~5}TyxX{kKaAd8%)/n__!Jp_^FVPڨt̑\Τx (j*cKഇtqwhgN+2 [ gW)PMvjPZ'JA4*C*Mc0h ksP1ZFbaep9"p(<+-'Q2洓 Y9O-Cv^h'1|N,4|3%q^Ubx?iPY-';Rhڠ1q`c|dr29A>Z9tp}-rSԭr6i6QX~ ܓT0pλz_,#&X?ProH6jvoǔK 8&GHәd>BPn܊kL ٞ۔`GmNQd9@AR_`mTtix Ak:)wKnՍqOX#<>/^+fTeІfԎ(lv &-s5An% GgN||z߿{>daaT?Y)'$T~;tgUŖ1Td,4pBf>Na@#`椿ޥp-v)#F7MʸvuZ7Md6(/:4ЗR $_ԗб*L=4CQ߂GHI2#ЗHXi4{"^bk@/x_FDDG?:sJ 1̄\i#0=܄rfqJKxV{ @,z>cD|t:Б+!TKsy4 AM]=n>srJt j׃KE 0a B{Z^*65߅oL־ :HWO93[Zlu)^n.)D=BׄP5OƩq:ߺ& MTj0s@{B`D_o/ ɗ+2{]QSn/SS&f]B-&C#M>os#<oJF+T𤘰9aPg~=K 9MthD2tIAC=%! (U> R>ZV \\j(h_VZ`{jewX5MmG;à $k@PdtYn M0`g//"ek~^}lXlz7Mxt᳛,R[ׯ\ ΞEOвolfo;`-,^¹U]D qʭPlinm܌*&%J(5N]I5֭2V7,# u'*]ofuyԚ|AtOB}Khr֍ݜ;ױzx+Za?]?I5PR;"tqU{7S0/[Sa\|390vJ$X9,}w[ ֫/߶$.T}ۄtdSC;q=~1hj /} f^L _*%d養3{~y=-o~aYL.Ѯs{W̤4(r -<ZoVl'@,wCן9dAÎG}j݂^ys \kYj}%0.ҽ@/HfᑜȞȭjydЎJ}/oI_ʣ4qɒAۢVRGC0p/+߼q)ܮG#&wSFUHl)x.`/7TRÞQa(Sx3Tj>9Sy/dJ nݡ*m ߇-" !fM6e*}0X KYE2NfN;Fs^• GCIʊH UvQ[65K>ӀG",˹_O3l"bܠ )ca_f5d=[B9-iL% ҳ!EeŖDTTX/6f2'#NlR+D4R8%S͎=1Y;^I붍hɑM%mmN?4{7awfu<;:jiJ]",? %, Dʔ+LȊ(ߒDVsGo=rTM3GԪ+S7X5q,de7=lODTx% m`xxk" øTKQgv\Br') ?]WoL W]CNd M,\j䴄Yn,QtI2 lWN+zgiN$_t)z3yf 5"v\IeM Xro0bb>S扶Bg-`Zb+/[/BeNu1S󆭟v1nZ:e/D PN-BY\} vV2l.GVH!ĮK'Ԗ<ϕ sc1b)%X\ZD;ElvDV;s -q)|"A3i VoAL g-dtX=dD`G*.ahDh/9>IݎЭqlA*["/|~;R4؏58 o U/$pZF1K0׼^u*tma누 i]W[r##&nq1=R5u*kh)of6Z&}?Jɜ>b6/̿g$]KAvdֻn9eG4.!Y TfzD|<'akφc?hE~ҭD.wR ?h2@8x7ɛN$%`"'Cm38[_f#Yͅ/]ڌ+vע&6 5ڻ»YƢݒksqϭwZN߭ ޲+fs #+[N@GJMH*LRj av8n,w[$WsףfҨ%WӦqЏaZݺ߂{@OLLv6g{B x axRH .#'8שD;,Wc`I^5%)8;#"ZulTZ{pLU)V,g ]RG)9ZK{0H׻籺1ˡu0 gm~ ~D!LglWI&.vumz2DK;)Ob+$1`v* /&<@5;og&wPcnN!Q|sm?k(O|Zd`_=ȣrLIMEb弮ziqStֵJNGʼn;Ӯo($] y9@a|'cjo˰3ԆU݋:mV@<\V$Z^$"Q y1UE!Ī ,7|)0G\8CwXk Aaq{Ɋ3ksy= l|lR R`f{pHwg:J>G}|IQ3ȫf}T7J152KmHo?sf^Wِ*]vT-+ErlDdc/H@ 7е;sR;PA;gz45zeTT)C)L V4k5\2+'DxaPjzX*~zj Y*_d& [<ΐ^ADK)[.<$L͟/ji"TANܬ>_ۉpVB!zF*0#Г<bdL!rt\ Ι]=.:Ê% O;Ioեu;rDQ JW!5:Lv҉ ,t{2cT.q"G-9*lVr;j0/\Sȶ S],)]#tNB#Cxo@XF pEޛ040l>P>kgNEܻ$ ;oNª^NpROrzVqyD} ☷FH.h!ƺGZ^RkLm"90GtBT,QYیu꧸x?pKu! UwxJaWf[1$v.DpGlG^Hqp C;}3}%}9oJBY]'3a}n*80dNH6H!3Y{M%W CXuj2+% 0vD t|.kbL/!|OMY,H-b6BNώ `NPz)'e3p]ۻ+]v`dC"4*zrfjcTZi)-U- 0``M}i0-ϸ=S."(>;7k>sBF!wNu9(Rd-0#.ՍU󮒢[ L&K5szE!'̳FTmE<. /UCl@!^r,N _,HߢFl>nDWcqmz GD 4FRց'Cac<.Ok.Tv<֜` !uTL,oa֜ ̕Z3^zЫ!P=?J e.53vO/*> bج6SwԊ:Oeո3>CHqƒ /E#m ikܣeًOQ8VNm]zPjԚI@9Y8_ 殄rrvc<Ԧ^zZ1w7%sce }ދ?A&@d.2A~72I<^}~.͘ASdP4!ix NJ "V,-'_s]3*!˚1`{,n)Ҡx!߃&Rj,!݉Il%3ŷ43H aړ55"I)Rn^_PIN H*TnVCkHoAsS] cq"/qȧtaZ'pa[J z!KmdE|m Nx|yutX !-{?  wm}F Au洓p?yR`L:O\Xz.А ͓7J]#mk)8q'fe'_t8q=JJ< q":! p?2t1_g Vƺw', Akܮ;%˛ՎzRRTdŸf(U@7`2kd`֯q7_/eǥ¹Gm1LpK_]imL>v<c]>EmUhЄ2{j]Ά$&["„sNZ]ɺd:XC+Tbێ.v>A4?A-n Dޑ7,;s•CKY^ Ox"P w{/-㿻e;# :}s<0RQ(e IUMZG<-(aDx|<:wHf2G2.M'5 UJъ> ]dk&gwVo76q$TCHxK\<۔w者HÆ K$Ee uBy'ƱX c )gD<504 r e{5d)*?*ʏlk`TDI3%嵩A%e{E`5GbFռG7X`uq޲er۝v6Ɠ V;W3tpKs< s =;F*` n֐|^z)N ٕ"ǁ35"ԫ$O}{>ΰ<4lkr/Ҙn-T$0B-P6=麼ݵ\R[Tx #" iԢMYZZ"ћQC0 _Hcp^gN|?$%#7Hh"Qa] FpQ1_gL={^tޅiJyS˕JTד6/XaY"un«8cI|{󾺐ZKqlP z撇qh>`7]yu:% +18 j-UOiS`K 6@ G;؍ڛ)/r۳CjlgBFjо$O/qh^ۚ#I3ǷNn/m<=@e #]SYy)j+tT6#uxVU⋮ME Onf6yw}yZ)ӰjHmxS/Hy(CfY=n.LupJUqU>em/-P.y+ (F jsTN_v?*eZ8lז~vdwx6 N'3r?*bzCu\ά,dh\p 遃s9k.2Ex%#?` >D i=vs#AܶQd[8@s&-ƿjܐǜ QkЉk͝J1 | 754 g)㥰䞖\ R░ >in s]vK"hWQV6qjqw"E1-w^s>Zg1R:kbSgrFјd'x pY!MV1gfB2 /lMpŵ>=ȕ)+a{82h"#삫Fi]yͦ_vλԛ1Im@L i)u zt њ2sܱ:U>ƬJ5bF"0cb|sNmB$[7M0+4@iYqJ" ׃|DB޸sV-<mQFܙ18; p݅klgW-s o? hwk0N"`Oڲ$f+V NX'&>ɹRZ 9AF[9-TWzu !OotG;Ϯ%\b jYTOI8z苹7!+]EV\$DR+,o>P&桍il7vcQ)gCbה@k1t=οT tOYanZY_FߕDMbyAuIXꃍGM&b+7m8}@.O:(.@{c2@-w=f>H\yE3gb<2)<^\`Ow|0_&h%7r_GҒz Fd(}3udRB/ϗOJ&_O܀>tq+r킳?gOGt9HͰZ=X2<eC}G -S ￈ksC|ˁD bt}9U@9lнB=ZUk?Jm/l &m ,C,y={ɇ^.z,/|UU1u.1n =Y" >V4=!C*2 :*L W` 40QvN'#A5 X:+ v߃Ah#E[lqywVmoZy9F<1B2<.n/K @<&$}+E7p s}̏G|չwy?WK/싥)1X}#FH=H7bYoLѣ*ru^‰CEtvA!DQf.@T}g6YV9M+[1RUaTeW zg+3ʔiC= )nhu^RUSd6h4ŢC〜0()lZ> 9ķ U2dVSg$ՐrpW".֨W7Hp'`Xyrbyw%LJGk*= W= ߻14MгQ ǂj?rW/EbCY݊8Ui{aQ-\/2G. eePZI#DL^F8r'JQ&+ e'_, 9m$"u_Wkang!0ס@duTg:~t M>9)3p)S%Yk}{I:Ydg$'E\Kl~a得 hJ1GPTUaYl0<`$~&~gx:=Bt<^${] {NO1EI*lu:8^۳0BUJzS=ݏUH#t3&YkjOc|CmrO(W*X*ejoWD 9Qz& M ^&;_I PʺE.IM7v!4PZ AQw5w%&RGePbU8:X߬У*B`9xBEE תsֆt3wY|U5IeĔ0,fX=4*XZk/(!\zaT! 8J[P^E,v6dcBecSpo%]nt0ձͷ<+Cb^HI0Ql@o}@Lb! [ ި?\ህ ]#մZ4CVnc6$f0ڒ& .P@?zY8tV4okmew7#RlysrmQ;I@s''h}T|/gn Wn͚X_)GEEb]/qS#VBm,X-tQTd]*AfkDj(7?G !\"?g&)X Ju Y?h7DmNFdkrc!3vl`} K* I9=R9=T-+<ݻ!.`UT rKe` XO^fVˎ;pE"/2G٥.l,{}߮WL@Tv9zGep N"ò*: 3N7a)a]βV{ە1m8fB$<;pq &ϻ_G4E|wv^taeTȠ`a4>n3)^ L$q:[OAQGp-XmpzX&~ Q沔E̡k t=Π&m9,'L}-g(k`ÿ]"I6VM {U>)a>]3Z&vx{`=JѯGk9g# {b@H~hAcFC)@!Ö֦pt}|߃LsX!DW1F]?HvxhJ aJq C- pRB_FKdv6eJh4WAS)i`ݴa}|Sg"b:bԀ5LygB~,n٦UxbEr7AP>mWl6Q$=-.$}o w`0OXj^q7/e_I8ty]­bP~]rT[lC#]OxcYN:5"G]OOWA0d9KkB'yvxE.;sBRj-EFC*LCt{;xdɠC-٣_ϼ,/ {:(vdI8j:dnb8黠#4m\%SPEx>9I?Q9X:~e>H^-8{S#6Xjܡøb\/W1d1nxu)G+1Ul$ #ȟJ[Vuu- _Qd)ʑnk`jM:Ww-jZ6mY R./J­i?q*-t_zYme%"{$Mh%8];1˔-;쭁<7>JTo`@{rmMձ_Evͽ-s)ƨ/{u sg!oxtℓY*ϳu3鑴9Z(j>9)5[~bTk-H{Xi!0WfpܢSxZ"*h'q|h%0ZETQ1 PIYOv.'GE{^&WQNv%p"/#$h|<,s 5VAANNbƈh.bEnx`gRW8e]B+pr C@ݰ?X|,u: [0>^$ i"ԪR9spǬZ]S[eXGzO;sbU{ kd cvjZ'1H5A0d/ JQ6j5II-)vqx+Jrضh(a}ijs މr&B6?Ls5Nk(IsUeA=8b o`VsSˤxɞZ1vE5/]tW])EDD)3qqM5`'+J-.FqC8E*CNWZp|ÒT `]|ZѽЀ=ʹ$!R<ܘK,/d_i M+s#dS~x|Gwh HOaVOnKCbP ηPN8 Zs2߄'XYC\ֶxx+=S(Ieuo֬OxP4vxse ;$Nf"NƦW'uAk|(^\qG q-ڇ 1[b'J?tfdjeBH8Hz;ߎLD]m@1Bn5h˲Hݠ(>/@+D2f.>;h6yr\q(-@Һ萝?DSCN{OCktM#+gH`J/6Bh v*W!-i!x[_ wKV_@dP,\c)dkR\F4C蛡1V,uhۋ؈[ɮ{>I-ɠ]ոC"iT%m .]b!N\u&?ߩO_7`8W8ꨓ ~7$i)).1ݼ t^s*X$J*_FǶ2Hqsir0Z -F,{8,4&|Z=W Q ;_kHOoS)|>93q^RRڹPe$ݖ_S[P4/ kj.j!}5]Ɖ3$%9QO#} iNr#B*MHQnG! S+WcӞyf6CU)5PCXY2t` p JRF(]o:8)V%*x5hNyGU pLMpmAg}_n8B[a=?]F n/Xu x@#+'DRym|;00ZGl&X滎 zneXٵf,_b[+˄dOҙש[MyU-p?ê-stM+)oHʨ2P0+ex0Rp p$ ض9U_W[Y(^a"pG#~]'ѐN~C}3 v+RLI8Hp~1 mh'Vi`6ފ~JAu8:xYsxt% Io/#H/!~݀w c|mϽ43f,\Q[0 T'DMkX wML_19g[^9EKY2^0bz`bVg[3=:vG5w"1x}K! 'xOhLZa!"B0e#le 1 sԿYGs.`8! +֝OQ)ލ$.Ҩm"Qx={-Jb},BuhۯZz(hJg+]_EBCb}>+kDd|uys uJJL| .̛hKURƶ\8rBK'f#S}D {R9mܞ2eSxXNٚT| &+&Hqun? j9SGssı؀4|zS ayHb Ԉ=m쇼3h5iw$'ѭo,e8~yl|MyT)-Zez"﹈$>'+=Q_hզLb@O-NQ_MumclKY;wB^gIgi!T 9=  %.YM?6z!A܏j 1,l4JUnlZ YFT }}~\@B@1ڥ'$7sW>#`$閻 3g ٌ&c6t61SxcİT0#g2-ZfK_yH(~ʆJN QH95\K3E|JkGز(^)*_;Z:F/AA Kx}fFNWc?QB.̗ Hƃ8-NJڈD0.v>!Qk1eC|]ߑF;z\ֱ<B~;_ܓlt ʾ =qEˇE/G8`4׌,eQny3.ʟBXp߼zՃCyzOx>N⾈\r7ݽ$8lIKXju@#G׾xChmlUՆ TSj B(N{_Q| tEw( >W 1'uZo+b‰"ʶyžu^Dr0-^15(&WY H1Gl:#Qa,cf`p}Ew%w5/>7vP&crIijKHǡ302dVNKYgқW6չ[|6BQ$).Q1eZkP'-؞JƉTW)禄a4øOY1Ɩ4 q兴Kޘ`o7K5_8<϶:zhA|կREqWia#ۀ[I>c(*T31ײ#WGEj[?"t=ʅ 5\c;qDDAVbr:jaOZ «A*8P,$7.&R#R>:;Ec-fl›"WQ9:j.]d6u+.Ŧ΢-5Q"rg{)S: _ ]TVGv\BEGu9ňbrZWoL;xV *έ~w$dX^Pa9zǭqk^%I*<4R!YUGS+ZR *kOkR5K*zv갠1gl~Ԃ+?2>E:'8̂'p~ǽzH?kZei5j9CisʼnX$U}˵+Z=&^|>jpd9ho8f(75mWcJ`Y΂}kքw8tZ5vh@%qhvNRLVxY4޳^VǶLT(gԣ&#~b9ǖW^9}ݰ馃 t3B~KR[~pkMϳE62y&,(ƃy+erVtUAlc[8 c;cC1w,aahJCyngn~䛪['3g^k$Wqd/bDhI]Џwq6˝I/>M2i<'K7z8oxqAPakHBeIނr0 VT'6߱sQQC?]W vf2ߚƦ}|a(|=bmucޙ=!#>PذSL(ROJFF 2+rBmuиG|#й.I}ְ\S@#J!\16 xq(hH<劈 l̍MI$@QBZBꩭ}S#hhKP! 5;alhRtQ٬DgRRC͘tkX>xŚ;36_GXAPԽbU17``oQְՉi/zjڿҖrQt<*4!F;ⓝHS'!F.u䛩UcFV@%wgƛ$HZ *:네YB:~G_O[!:3]:=Y^nҼ<~9SHF97.0$Ϋ; >fhِ9Q)_zqS71Yz8?M=.^!aq0 z +F2|_1carī=j\9؏8!.:%_8 ìYwH֡.]FO㜫ݑܯۗ1½Q$N⦇b(Fܰahc[Y<ㆤy;"'~ŌK")1FZyN̨CFaNj{v&Ժh7.eij1[WԺŠEp}F0ijiħKpޢkdM-=hr$ҙiZ^ v=mfzCG|)Cz~:RK ;ƎvJ<5{VS~॓yzj3*-ڑlGKQ+#M;t 8`aFJ*` !`Q.lUQ6+ $p"1Փm}Q(3geuߛ^ңnufFe~8!Y $|t p00~rO |`af8 PS_}MFX9k%DL[?a(hcM_u(b9Ipy3ڠO~`-KA`ve7CQrRLs B=`j i)XMcK2fq.Ʒ|gm;>kJ8ڤ'nf]cz,{A^[\f(v f$#g{$ӚQԓq*Pawo]<}+1jXi> hgġa|cSʐMnUFa i /*zLN:qEws?uĝݰX 79 'o9P1 .f55'*8_KQ^36Ƚ)8PiP.;IÜ A?zSěR6.]yY<4i쓑;jL׆{]FARp^Σ!M?1o$/U֞4N0`7Y u&빀ܸo_o7MkS1C_ Du,aQ&Var'+?.xV}HGY8SMޢ᳃=@Њ*(:2/ӚK&r[/,eySZ:w!q*u][Qm9 Ʒ?=}w%\cdlx~Ve+/xx<a9&cH{(Qa(\nZQk`qG6Wё0PKP| EH|NЏG no{TrVPY\1kBx<)*򊈨;?HeL*Uސ~D%] a؋Ot}K{$С$׿T^7<.ʀڪ =TmG𼄃+"|(*RŎRr[|;r,$%h!V3y*r!Cw=eg0# @>rCP7({j]N9Dn {>5)E ]H=)DCFے^ggbz`Dg-e=J=#`֪۽2;7GbG+W`K0lY)bIW#ߑ߇)EhN`K%iK@+#}iEZ5`H LiӻF2ۑ u_Q$OgZ Hţ^\>!v3"$ˆ(}RŷfyXfe_paI=ؘ鵐/]Ζd,ŕz?Ê!,p}-Z8#@*Ϝ6@A /t[B[7-P g/s(N]o4B_< f_B2 Z4Ҝ[Ļf}a~81g]Ve]3hgJ7V~*C~X1p32'sKf4DtBc2pR^wZOH8 *tJA.] -`G^ze{"_dy ю ۷uVh\Ap/t2L%\݌d>ev5ne}$ 5z+$L'[QT=.5y 4zVʪӡAR o. X7,+8>xw1{KΨpPelNR3b! d;1g#d%-:`v۷:@?䃑h.N1,ThCl4J:*.Ĩ.Hw#:QЌv?B!H} .mLY2f gz?3\/G^&ok`rVT29 Dmk$1uh- tu쨴g]_gdPA{EنV{kwY/Yd (FNB7yj~բmlc !%mIR ?S$,bL@umvO?{M#haf :9+pMʤ[$>dPbVCyc?nr6\t$2ɄI(';VǢ.-N~0*v'w,uHs«t hnەH% iQcJѝn-ễ>9&='~$T=NwL\.20GѺ*6UΒߌ_s~j#m¡1+?o$J9Usñ8z}J#z J-Jd(u`rӃBrmF `-'d@v}n/5p6 fosN"yɓWn?x寰LvuYj䉁֫mKI~RT5m~]C4  8Bp~b7(]^u蒆vS*e#oڢFX-HwZ)w@ň5R-"P[Z8t.j lIS:0y&WfȚalZƵX< -HWa?I{wڵ+AST r\ᨨWWUʭʑOsTlWPGxR!U+x-sc€PC;7+*mB?Ќd%P9\3~t"6E./ &ܤU -~u_J"- Д0ϼ8YI)g?/JJ,B㪸LHġ9kYbw ESj .`ʳSf*e^`\XR& Bх)/<6w+j;m55opə(bhP*L+=kzqwSY~rPnTy;o?ȶH\ǻAZ/rDnjaa>ЭZ:n,huP/kGSA]IJ]9!&ꍍ؋"fodlme 6$éwki99FX7|iZ.fن `.HQ33C"TieQ)N˞$;<&b`)8h #0Bl1r+VⱾ@@nRԺ{u7kBY+##Hw@oe~Va#֐ؒ`N&G[r&B8B#'~uxH Eǥ_@˙~/[gz@+7ٳtIl4qZ2C9_wOS}VۗDMPrĞ|?!1ab:ψ)h{v4DZj\/iH&.IG^;ۣۢ `ULjR435%k3NǼxtۯ0).2<4hIlx,EpF1>:ڪe{V+%U8!菏@Mߠpc[ƢR(ia`@G,(s_vbdzdfS|ʍX:nY'\]&6^4mV03AE"ԅd!\VV>̲~ֲUq喊|={)zjdy̜X(`?@2Y6@ * oiyr:wD!!~\B 9[+7ηu6"6ZV$]6>(#nvC1at[7/5"@aZtc5; 0X|UQ _9p<>Թ{;sTZ@ػr'JرVtvp +-x>urXd$Bq11_"<ոUD8yp_jsqDe^Q?ЧF@^2]>ݓZXVf?֨u(>RxtbQOŠƧDtL]3 ɫ4{'Yc?NL2 Q[kʍC>T&]iո&*̍;x*]XCy.>Ԁ8Y\;GF| uݦeN<}6ǝݝ C X6"(|3!(SYr#0i7\a=7! 6!@^ #MJuՓ[Ufߢq~)->o - c/4OqWp 'ob $qlqlqAäZNmxcsXS+jOKϢ%h4ɛVT& v tEJq:dm׸2 1e)1Tق ]H\՚JKּ`oCJWMKxtpײZv EL&F5+HouSLUkq!w‘n^10W6ܑE1΁fXK',o;@5XWwgxE+'36'z Ir$ӿHGAX}_,j*2cYH6Vƚt_fĸI{D!AK: (9ȑFArנ6%MO}˪6׾5G$ZLmrOs?_w Qs׉u\Oa=j=%La$:(kpEARQ"ms5!]m}2aXR`Nc%[JRM]=m0N;8\/FQ)D;.}}=^EY掹>gۛ=hvR~*(XoyM?B,—ZF#5s{<$FWCJFbAΠx#F5%a\P,@m?q"0ʲko @F툅%~p-@/X z۵;xmMje9r惒g(ȿLz A \7Pp)QecWR>8;a\ ~?ѵ_,ۊu||12trU~b6#;g^s1X온}PI$Ok4y\ZrmT@Jvַ 7-u-!rvLQ&EY_aW<<+kGj[j˹Mx˦A~,_jQʷX1E3^E$ hs W 4}eN\/u){ q-Fw@cn#]eCaa_Pxq.d7кA9?:2v:2I~$/S)@4+}G˼*MϮbX[UeCoT|YQׇOSt7 ֞VUy?5r{2lc N #gOCuRf?铤[kPg`qRmUpp,/o+\ jR}Axw{PZL/jK+Rt$0_ ڨ[j?.}*?u "5uxq77un\%q ⤜!Dw1Kr^0p*Wyݺ1R$[x)I>Oau+c6V BPۇHlʒ荶˫0vrXw)9 7`/oഓjzt~'JAWmBJM I{^{`:[ zFN D] (`Loo`sbYH&8+zNNCY\qߌD}HavRD-:0ܫ,]oś`(@"3ə w&*^W[D|e+ٚYl9P Yk`jG7G%]rkū%%X[cXza DLMt#&o2Tg)\ (?_mEe v(+G!0j7y9Y[z|P$ݯ:ٻ* R.<[4dLƐOy&xKHܩO9hI:5~PڋIp;ܖA>YU-QZ:3B&aMDG_y촋y|*EjH4QYA2䁉QGlO]%pԩ218x/Q|"/LF7";_Y9mi$ |[#jFjc'0O|r%ȏS;lhwez@){D7 H]c0Xe)AUZÆ.-}NJM& zJ4=w"t UK'+g6Pmi0bng v֛Ns> tdPB;ߞ;_g)ъ,]2Z".-2E<a(jb\}o~ݼvSdSn1|~QRpV!WO~J vd] TPE]!>}w>/Nn,bsRlvTQGR5]˫~a^'s3#[< ƣ9U%F ~IbFwʾ}_zg_C1j?1i\Zr:'_SY }W/ ٓF\/.:'voڏ[!}Ya5-!b:`Jw\б<]1gP"a/o*hkZ'OpVY^T~bф&`2flN7kj ׿~?9ov'U;l wӑv7{U?F;w>I<~+H]ʻ!Pɐ^!TZF Kxu\16{!|_7Opt* 0,vxY:z;<6f`sIf|.IG}"M{,9(ܥHzVEW1}>bM'Q}g Ot aw|ګ a$hꑞMw2C (Q F?9Y]Pdv4RP{=nqAOme?A$ _c?|0WI i|Xb?н+)l^.ř& BNQyPC2cjPp4Uչb^_~"N FܿlSY u9ٲvu?yϕig{5,XiʣA3QҥJpy;Q R  ?D'QIT}9Hq:* h tld&G:"|ܥxzZ&6=~A %+-[eMJ F Ì,nw_XX=SVP7QٹX9 LalH޻ yq4(W&D?za4'w8X&-5+75#s.7|p>AGyH/؈S2 wI0iko;;y1 |s!<1TgN,6 Fx=Nj d+{@ PVX;߼TR6,߁8J8tD52 ф6ǸZrK}q;cwY #7݌Wdvu95[">]JXib`cB1[ !V_ bjE-R߼aǕ犉<1hE YRT2sۋV:Eh=, ȣp pT^؟ԣ*XkTͼKM~)4i.U/W|զ &Z>Ti^kGRȯ'wԉ#ܐ6.1>2ҳ|rHXj,q*,+'zj(ׁ s 5Z@OGg,u Y=Xj{EVxau#f&DLkPtN Z"uwz ADK )SGLF A & \?ޖ ]f'gbu#E-NZ8FY p/]R$D,͐zq/KgADyc? kZNж#F,!\۟龔r*'f@ .OTߞH)e"SK~GeE=@WCdO~ K> 5qu( 2Ja`@O`'3E8GlX7i^2[Y5 p<kh 9z1afg Kʪe{xM~څ3%u(kgOrTtgyJ'/ΰR? tSx\\iLv 7[a,5SI{)ti `M-C;͆QN~Ӕ:1v1,6!P$ {* .O"UewNT%Ukkl->t| ź'oEҳ hnfvǂ_~llV#ML-!w&&alzTv!iO)e(N N # a+.Պ AKI*J/Aapwq p|3!PB=!TzER D۰OxK5Wkax3u'.\Aw~:Pw9VMf3%JJ.x' ٱPT~iO$ Րi7C Y H={M0NFw,`95,Kp6\#jyaP{ ka %ރ*n/Oxɂ$.W+B[ԕv!ɠ!=y>=E &1{naFuYIrAU{8Ǜ~-,A#; x{n.B-?c»j- e7#<bl3OBt {֋@q8#$b4>~ ):AJ0gڝ룈 gt<#pٳǮ_{MpL5r"ޙ# )8G k'صj<&5/Iᮇ~ʂֹ6zfӊ\Du>_AcF?=muQIS/~.ߤl^BT-xEqp1hDC(>`k,-ٔ@ǁ/vBTm%j5%m4]h`v {{(!3]2qJ♅s@3Xr]S;!6ӣ*߂QZFC1 YB%U9Y*Q i1d!TiiBbQ0.; Ugl,l$$J1TXuh/@)'s49BX\Wa?;&P=,CG{Ϻ3ϊ"q&X0Y؈Ud9mgsHQ*iLRʓA2kOa:3s:DdFL,@c1ǢP8Oc k$Ix(e|ZQOlnG l~#x`C8g)!<=DO[ 3S_N>GO[giwZT*'R>:,5Ed=^R'ŧ"l |" ykS@6yWJ] E fF\=tHFNSbc"VA=.f5n$Oj`l}ϵZK*ӎ0읶4m$S4 %^Te4 0fB` 8+hRÔ.Տ S4 j(g\1YtIOD4l[6O|ɦo߬Th=VX^[rE x.BN_9h|_<#P]~pAm\L|;J_ꪕg24^MTI>] O xk L+C=:6 +BrT;~Tm܂Ob2=10jmp:K,bG+p/xVT,h 5KDUWYw#@όd>!+-zodz/ r-O#!V ݜ"a!Cް/ ‘,n m..ɔ"%_ $XMrlT N^oT*jxN5(A" G:C8Ihg>15Q,)&Qݜ[<6ٗjF1f CnP#e_tyqQۃlPSo|-'Iʞ^ hˍׅp>6YC`>q$q+Jr+Oi ,|^6]y\'_̺+ %wtY, [Wq:|`Gi**YeVRK>M{-G=T-N/$YXbyrN:#-H9hùYo4J_3fM|w3$]#zc8t}WmTiCFһW/\H``+D{%÷=IN9S4䄬 gWkz qʿ߲oohLu]+Jo]g"Du YiڸENW2,TqdD@%D|52 ]99F|t?& Rp.r-]t kbe~AN~d 9Hb-\&i/1fz= 5K$6C2ƥⳜԕOJ1q{'ѷ8M)3@0N8&*OGgf^x@B U$5r$X6()dz?NNdb忝dGI C]JFkޡa#zʹ N(ͨ %Aw܊ ǿ8=30E~k{>4 k$F(Qĝ 4>'X6,ݮcwDniE36$k|˦᧐ /sG!&e(GN,(~0EdSP+_ d13&=nk7!Z6S,a`_XL>s}'ٟ) vިs-wj`?a:Ntz,eG nubIK4^.|1jf}+E;hHrEqy *"-HM\͊?>|}3(IgKnW*F;wpC#s;AE3nT/x(VN!<.}M{޹*6t7Eҙ@~@sxq#Ѹ>7d E8.?}S}m(AhTWHo[r3J_.p@#z=xoQgyVUFc=^yX* >)Mt(YcԺFqIǾ޼[MKL% Ou4#@:k?N'G ]_2A4uASz 1RZp $iZP]gӷͲ!,c[WMZA 1l7e? F^c(ba$FZ*||T)[&^|Z*|6PUE4T^CuX ]"b/Ihb?Akwum@`L5ȭISҍ^}OwkwVH]; M,S_}LŢ┡th̅$ZXm8Biay"D f'q Uc|f =6q%rW\k1~rkl(r}drL^'U kZz2F FݐP@Yda'j~1auٴs"s3OGjџgb.y'^/ |*_zBദBc^Uly}-?M~͗ݐr74DΘ#}D(D\2z7Fq`EgX_ 2R A*4?<90`1Z~ ]!Y(3dWI6s'4;s+3봕$9Я880JUT"b ÷5ae|/(#* l>y :=/uȖ'}##L{w?rTQ|?8:>S ౄ3mH!qe"sPx%-@<_4E0ǬD&hX)9j쎐`;~k?ދo,uN~`SgQ^}sƖ^{`" w-d%i5mZIN/Q"TEY/`ތìH?+5tcnh  D{zeIF?QfinIV s|MxJ>d,ء V,vjBk '~)>M5ɋo#PM!I0qW[: Ro4_(yō2h)0lJ% eXs( "XՅWh:l (rcA-r$}G?i) ̶)Zkc["t*c}>cUsi+N'SIӺ%8 *=ՙ1g?hn~\b1 }O;Z/@n*:lQ_Iv?k.-:qoD˕9Yz=J >b z^-EĿs]K'w|1cHΞ*"l 6E:E:xq2y(ٌv>k' Lӧ3cⳌhfqo7%ƾ`3@TZdNOIQu)wKϏUXRArz-~id%31'F"ӌTtY ÿ;#j>+\dPE 9 &`7B%=̹?}|'Aˣ(4uH.āG}^"сWk)"&γ4[yH7V g*N 6#MdQ]I(zd#,<{ߌCrݝFH䲙5hVccOR7Z5,)]J OJ6.5&b#_vi4AA/c&.@a36@Ҫ;+;syC!}QBuX\+[O=BMjm(M)*ik&dL bEuӈ~ UQaA(L%QE!JVyPḚ[$ TUi_Dя5y#ZGڏ.NIlw{ ioa"jv,v85b[@UE^`'~[O[vr!tkf%iGY痎j]j6DV qYP[B>gfے(%.! $Td(XiXs@C0J˷U!qB/"SdX%lGr!oN5 Zez oL|1CbB҈yd Wyת~XG}bhCPУGċ{.G-x^ƇfK]lG&<'~20`[ +5i"dCRJS|UJBWQY n_TxiwB4=pulhR -2gP$ W~"/+jDDcnPrQ2j'o.;r [0؋Ye%8T pB-?AL K"wAta_00vzHǑQL͉M >z@anf"0B•N<8#%GsF )VIB}^`OdB[9iq'0u4ĐHQy s ϦޭJ<](Aet} ]\<MF_*}D$XC6a-g3T1N筩P;W'Lg/!#^zT3yQ[j#*CE=ۇG6: H M\w'NG9\]vQȄ\ԕd 7ղ+|&Fdm4gIVvzC3%v_<] >Yѣ~6ͰI؂ Uճ=Q =v ߺvTb,*AT%pSܕ[!lݱt=BG^z&n@>f5 x-94+DW{E4h-9+܀Oרے1ɍJWJ_'LA\#]2$}ҤB~L)~=վE^&ncT/+ "ʀ{HoLO6󌜜3fD71` ^+ի-š͚$.-x]@AIW^vv}yq\aT~[> ?d=0iH >ŵF Δ!&5X%nKZÒ9Sr7bP~WYlѸq4C {|ʾqj2ۋ=H%2_PseٱS ŴH;1K w"wGq|h `>qp8JN߲L; RΣW!WK؇X3 Bp 7L !(B0HK9+a>4?gXH I]HZRŦ-] 0H\&nfta =0 ʑ]sK }{DiNB VXz0z!p:}60{F:Rwy\,[9{ȝ_C5ҩ]EZR؄=fbssNg#h—o%KJq"npH`2˶ս`a!`ׄ쳳lw0uى"{02&m;4-~6Dd:[nŵ9-a2#[8:"@wi EE4'hOb*͋u%5Su.mJ/eT /w_~ou W]Cw2/"aY *XܿT ?r8q+Hmkql~Srqҟt-VO&\riSPu 3M?Ҏ.xUִ{wzDD_>_' Cm@:N68֩#n[ô\"Ɂݾp~G5RӁ@}|7vɼΘ˘Ed9fis9EH׹Cf*0t?G! "9F __}$yv@WHDLB(cMCMe=нs  P#{` X\K¢;32Q[p9gIhzxtٺ\_ T:$AQ )Fˆ<821vzǚ㹚  X+:Bg+.lE7z ue>LwAm^{3hGkE(VvOwaVwQ*暶X lo>vUV Cpf=FDy. l"n$H[ڠ}Jk7R$ٟט9."'&ܡsO9w?q1de^IAtˍUXf 1BpiQޗ2x&`!{RTtiR\MLR9r!0+6&JXK,~6\呮D\cP-Pu N- R2>?( 9_Pwq%h  g"U.Zj;o s,`Vlqa\*Η9*  5kOS?L˓CײѬsz]fpwtRYu 1wJ4`&iVHr]Ҳެ7"@l3W0Y]k5=]e?fGmگK.Qwhy㊝;a9gK2]!wKG+/nu~nAWFEsd·s8w* O]gKyj 7!wړT&Mg[Dir(m1M?hQGoPq+]6m|ӫ|&P@;jL"dM1T gq/ඃoja.Չ, Jk| "0ږf88~/~9$ffŕt Ucʎ7l%Rhlm_IhT!6_4%lیbD[ զ1pl=D"D\ap~9u2׊! Kb땞lק3hu'tGS1Yo4q0^!ix ŏv"!WM}j.%XS_NE6[&R<. ˜ ?VOmNE[b"1gpޜh?tFfVcں$D+rdBEDX8cS]J^8ȨUKY+?aE;:)]ۈ8iMMŠc"8PF^"fTN|L卍sUeY%0_'KewnRQ6Uēڋx, Cʿ?ٗŗ,l "@2HR vlL=3Pr4]<}a6>%9jߩs[m*Ϛz~ϴ2Ƴx/j> h7"j`%:'BأkN9`Юa@;Xm݇*a ,)`އv*^Lr`<%6A",QJDIf%Y]GnjWq'TkH:^ ϵ Ex>l X< *+bo\!YKpׇoϿHܔAJlG(؈3[x@dzM H7@TXM^:rid1tmY_G]P }UƶYnilߪe?`ͳ`F~kXzlk<Ii_5b$01U ~CzpKp;T"VS2KXmfWVG$AV0^Wz_dSB@ D%*iQ&%FUNk+v/8ޣIk; pvCIPdS0͗WPWĀVrŮWJ0'n(M0zR|ЖJFT@ߙYG,DP]$hUv &πX}}z5ڪzƺ!}ѫp7b&lsTf(Buˮ;GXbbpThSNwmcX4sJ=B,~xPŲ :ĸbI`+AR1Q+^#KT0'kе22 8σ]Sc[365<'9y,4 AC8=M̦*}9(sj;, '9ߐ2=w e:CLx5٨a~0- @3/N;hSOـʭ*dE t"PE;$"s[4Z@jٔN!~n>Tp5 % 1c \<)| CmdR=WcNMIRmUX|;ghl%zt2gz۪ tyZ1 i{ tHo<ME}(e-lF +݂ Ԯ["DS"_;J E6X?d ;,wGpt`cWۨg`ъK oD>7װo+NSG+Mg%:RrA"؜bNCZI D.Ć/.ldu{mL\E:ey`-#Lmqy9*@XQBj8H !=GqB&C6aR5LNyt-<)!LПUvo& PܥD㡑Uc)Go|ڗwIǎ y3֙l4Db,Oo,y'8CMUXMm(3 LXXlv]oWqC^H}a'Xeb^QH`ܞ(ns?!|/H$|Gi(ҊIt>pA2jec&9+I*#D;#%mz'POJ-,LV 4z,19xL%g9Ey9rPrF,sx{nZ_~שl"X TpjT`JPʢs#R$V!|lvbrGk7aҕ ,s&r AE:_Ve%ɑLLXL*jΙ[>t!rB2 (#l$ ^<43rauZCBEp^j@;!2$9v) E$!֙hZ#|z3c,~~Pa/ 69&@ N3ڗ]^ ,ѸӊTqnKtW,5UZI|ĽT'sH 4' A޳bgmA,gE:0tZކ?˰Mc겣vǭy8HUU } gVVI Z žVQHL&Fe,wT/)_z\wf[ nf| ma{9wQd%x XMQ6Q#j۟@9"P}m%с0Np8Fx#l_ʾsSR~29 `!;#:r@=֊v qΓe0CFpL&vk8׎ay{ u"*Rߐ ,)ݼJE+Xy,LyO_w#fI]WwrM owTl2K*+g2ԡ.S!\p85~}F5dR1g^R8boٌpr7(ZNqbd{^W+po B dڦ\@Rz$JAЧ@h%Pbt'P^I8 <&ELƭ{jё< %mzCIt1:&j}?/8p§k/ )T'\H Nãc9flzNX*`G"1\c4|X 8͵Kda 3es+GeBi澝؁܄6O 7ZN?4BL2QBQhrK $4x>4Ŏ^BriqI>3,{hFvt>i9 tVfdY Htv EċT:^PVS4pE'*HnVG 2D)bY &f3zb,; ܋G7-H\.E= 6[8`*֤5}W"NNF[l<ư-2Rs2$sE73=w&/^dp  h =TGma,CV<| ^.Y'IA ֏2"[$40EwQY_¼ZL%Y mM Ž䁭)Θu' ?KҎHE]p_Oq \٪ʣsDJnB&wRMWx,0( >Ϥ جA$uXzJ?T'`gT{`}(ElcU͟ɰ)]NF#yh$ۦM/OpM*rCVT.ti U 9gDKԌ+J,RKP뵻:q޵Wis2HvS!  gK4W OPz<욓L0qfvdqv* A{QIJ HɃ_Ș~Pธ桯_t,0bMavS0PDzwͣ&`Lș/s಴*_!c+"viZh]־YYkEv|A_N'15Dʞf)mg~\>6`y61M7T{n02Wy>vұPr!L >DvQljyNj*涀Uܝ>H뻯,B.ء'4s[db VHh-wOIy9jZŏow$iK_"I C)<:;ϡQ ^x}M]1!ER֊4OnB2[XEd2HdJX'i@pE&,,zU?Є|" '`js+k.gN~=̚}`6wb7>D1[RD\ܓ,_{7ĦhК-az[ܶeߦ7{v{ UoSn HD/d# }_jPљ==E} 1a:ElgGIvtƉ{Qէ܇)?L+~X͞C/u 5*:8юJ{ŗA" Dn\ߊN\X#!Jq2JV@_9oq(Nl=mMT(|4].OH `gd.&6lq|KAjqa8M?R?^f w0IZ˾0˿ܿ d``sB=_w w=o%raԒxk jp9#59HWׯzGcUϡOb=XAתT32p%N@ ="݊>iL=F%j5ܲиzz],PL}IGslb0..G%fD,rNeL垚ˣ nJ*no4ZGgQ^t?{8U7J7:½ס&Rj hچl°90[A `pB헫>W;i{1~g.Rsłdh@JKB1Rp,e$/PJv&Y.ĦG,3hW&YM-D B Q^ɺ_4WqCYWq7U?X1l9)XL^hiiiU7^0=lp˓7!Rf9^ĩ8"k3Y b2).:y6H_@L'C~A32aB#$!e۶[R>f$C4?iy<Cn@A!7a Uww8fEұeM$y1שĂ,zU,ox>}>fS2?"V/$.a pU7۫0t6|煸wtK@tD4XzZhz/>; nMG TMgqkArbtC2둆j>F.7MUTP)omq(6^yli{u.wi^)fI3B~JF}]ABf5;FA7(~p:R:1"-ЄSӠ-a6V]ʍ:;@Wfu$b_2)/e)s du__ .ͼ>ra#T p[m*P8D&vRpQy2xΠzEUGs :\~X|ضu *(ʉ ??_m:# .7SJg[ k܀G#;<*&޽vGO~.Ft ,JD1q!?S~7CCξ\C&Puyz݈ aM(&UI:m*"cy2 OԎ˻9MQgyN :xυ. 基 Sæ)iK)hâ9QS[a)!fbqu˗6 olGҕS]es2IQڰWrNؼsz`x yS8 eOK )/$#NݼBnL4!9@kXj~UYv8H#p?| lT%mS^ mMx!xA;:;EV0$ 3Tdܹ2O`U:U}cWAAMS"klY68a~f){HɇR9[~6p4zv'qkչ;(u[k7D2XX;C好rC~JCTʟk }td">P^k5)ʝe`Ҧxm!lKAޓi pՍ"j4>$"BވQŖ3NxPBg_Q&i t|̧dJkux0sF*D_1--c!z |_feSTSCauܺg*뵀_SE^v cvFFhBi?=Fu-e+t+A]EWa!"Y#yoCM6( Ϛ[^j,-^7,;D?;Z7UzZWq/UcIKEn贀랽@ښ>ۛ|șOF7N%hAuǵ`6:umJ;XP'THΛ h:&zq%+JiMtӽr2wTldiv|;oZwX_:٥S7[2̒JefnTǿr)Ӡ،6#>UW*vkۺVAFkO:OmM02m!1`T>TUe tA+:h ؎7'yfbDrpiX<8J710zI4 ytd v%')/G{n]i>~&IXAn1:eH8^ 214`^5d)z̥ZH~< cE?Gwkh:$d絑1_AN b%kZ/sLU93;V-]p䂺3b M5_hF1Qx>.jW:ٴ$AֲfqؙFUtBc_Ԟ! :/~t琝}$o bǖ^HA(brCbuO΄{m'?Os~`ԦTu/a:cXҴ*0JUDDC,%%gʯwEr_ 5|IaM"ި\,o05hD0,Oo!.yg4\iM`LtuLwȚ |,DvFDKK)P2WOmUJ,@_^ޕjx~٦(5G8TmfhB$4eȬNxKwlWJKLf"**EYdzBfUQ{0ڬ:)>]vh`=k1jۏ|sQ)0U&:@_bBAtPv,Rީ6a>a ֆUEv\Ig@Vfmk2<btf|n TKCr, gx-[ Zb曄(*E&/HG9pH.LhnTԈ*W:Mp h-XNɥQd:<9AA-xy=EaUPE㈱2%FxVO6)B !:OU.BDguڜF.HN(_S=9X$m _eDŽ2cj<ɐFLm+KNwX^CZ)(*Π{ג:o&?ѪDDh=y8HxX m2yAX)atpk$ j(-ܢ3ro"kQɟwָr.9T6T=Qv"rPTlD# {0Jcn-QP$;]c>@z =Yc|J`fd#=N2RUrwqnyR8Oh5o+}Yhz[HMT)=8U%f2N9 &+tx[ؑ 1;FEf%LN .zԱy̹c^VzU>)" '&ԍ|$9,L\ -G[;OԪ\tUG9-x亮""OKp,AimKN;'HG ,l<8kpOn|Wт&}RD`ACL.$E=G ( ;הfٗZ>e:ʽg<Sk3e\ n3 <\cuU>xSEJ$w^WS?z ɍ#BF=w!H}ZdhbWtc%= +\gM JUM0h2<5!e7=XBm;{/Y5>ȘDxaOw+Zh񞈁QMJ?,U6FE5}CT=LmnޱCLlK@Kوim'2^G‰ G CxT-.+}'Bwl8,jJ"7zS@ǞG= VQ4[$Mjj 2''| Qw=/r~*vq~ڽpD=ҍ#q8#鬄enǽiT$hQ~+O5` .lrq9D|WZ4D.W]dmҕt02X dn`\f1S}QI1G\$ﱀV(!=Nt݌dBKIr(fEcKkn&díݩzdB} jaX2ɯ([h6*5Ӛ/RrMMP6)Cq|Wf'A0q\^5x)msb9%öʊKS gJWDԋəM.|kMkT~ÅIYlr;XxEs@pV_ (mhBRws7EQ 8B{xvv݂Si'jTIHTLD= 4@UKsW [R|+"09!f͕׆ߖ@Cn0ÇDK+ebTa(Mr'˪IИ_w_\ CF5,d;0p$gW8bPZ\O]>Fϩ/s Er\Pc_PAN3\?_;g~u;t?ʞxsNUx;|nfBDtST4wGBl:1^ɭ1_ǒxiV~՞,uȄ8O-f v#_5~.U%#\F $S|Bգ֎3]eA7'|IMSHMSa2ϼq=]nmBAga"yt ΐu”'!K".μwjХHԏɰmJҦ횞Ũt 䂪^e&Fdgm&Ώ 2XBaȝD]Fl?W-gk34"d=ߒ(coZy塳3 r%nt=VO4n&)1aQCdHĨ!+A{DxǣuroyACV-jPdqcK*π8捏iw,WPƹAL-o(Dyx3 2x jL󁻷~~5biOj.g 1<ª`QcYx^;Jr +/Ei ?Q[JrNTSvQfaIh/2Ic9~37pXZ2zPq^*i|CnTҤ孋T,/;lD|f2!ہ1}?|)a~XF͜6]&ztTDd,X4/K @>AӄvubA#X嵬ŔݶTbբ=L *re*(2GD|2ٟP-D8|co/74NսCj/,d{-HF/NentJ=%DlbNr%sͱ̓!<b:,2}gmzyBBh;o&9k{X(IJ!(+(X/sEyOu<GmY(r aQN"8eۻ!/chƑJ{Pd|*lݾL1նj+H ޾lr 5V"U:), j.fʬ:²t,"b79(K-zFo{~YRRĂs)aNNП+Oc49f*xHHcϪC.@Ngؠp 3ݶFrdo OB&B "8㇠ݚB/bɻ(o6 I!=`Ȅ^:#ϗ:-;;0 eߤ Ks(^Z{kВv=%_&ArhORk6.-w{,<ƤpX4w"< πeJ&fU.pBA IޝC-G#(o=3(4"fVbsA}JQ/QF$#R8y*15щYuو3uM$kjq쏌{۟7.*B65MA-qBw%&{#~ctU.'1>6<*@p-A 1wҹy0&x# Xa}fpxaHۈnmYc`-x*[}`F~EQ'~)6SN`Jk5'%qkȾFxZs)fb˓pSs7i"2YOQ](F\Bn9 1bs /On'+>p&:74<6tgp@X_M%yZ&p!ATLO_'h0 ڬbNh%jo)P!opS( @UceiK"%HnopCiMJR")m#TÞPB$Q:Kf.lbWf'}ٖu z'"JѨ9XHgW Ok.;#]S {j KOna<Ӊyf\@k.zt[ lz]i˘G67TyI?ҷ)Hz9M~*S2UM'*,`j_sKFٯurA*bWBqxނ5ٓjDƴy-qϨ>pb>'1tXnz1mE3`BՒ%f'g-dZmzdbJ|.XsߏZ| 2\ ie%/F_ ݿ"-;W"pVk6aմ<>HJVoY`z-v=YXO;J]3E=QEfsݫx(oz0r64 ,$(Ԟ"mÐ6IeZ$xvi$:&6U月 qx[>|kJ>m$M.qnx2 >PF&FxjAB$ef>eč?AzoS|b :&K\<\.{YgY#IHvǠ:?-^#Rh,׌ޠ~`'J4`>} B?(Y76}s)z\0p>!#zO!onyc< m'g<EFxDDBN撠Lh0uHb;.϶gjϾ ^4PyA9;gI]s͚tiPKEkxJ ?HRi>RZ팮͟r6m+&LdY[!>[)^ݩP2[*@l>?'CjyELٌxr?" ?ЧLwJ$l@5M5J9n6u.%6RI7`oGv ?YѿBmURB,4:XU,p wYa4ﷃb]3sh&9'EO^]jP}Hg%AWNyPAٽ>#[&nzQrLtC2):]P4h:յMZlřq;ɽ'${첳!ʺRğ %ǟZΧc9 )~V*H1pqAs D` qnPE^_rQc/,bTje?gݓU4ko.ނǢr|XnTН$%L&onu<;N|y5J6Sֲ͟~*j-#J%$͑**̂`{}Q4)CF\H ," JSH'nׯyq, <1,ȑ4t2۬jc$êR(ݙ=)Aß,jF@WDSd S=T'-٫ŇG}t),ߙ Z]"mH"C1Sd گa3|LoN*oΖb.''v)6LiSڍD\0[E%380U1Kx c2:N(Ew Ac̖ym8ZZֽ"N;b(1ɠʾEL@) ;ξ '2Baz۞%UkU-* j) wүwZAǓ*rtzqW䖦#AĢ}ϠBs/Ŋ /JHsjՠ\]Shoǚ~%DȠtZch-`e‰N1} qEdwzkkZہI̵N" ri`a|?G7s4M i،N#U>}U=DzM] ͏<QŸZxF]v d JfyFф<,e-hNd( d23q>fUIͫ(OcOelvp،T }S0.#10+^}.2l/g߬> ZpVŋ,oT adc x=d0FCgn'OB ? Ӻ({K~̢]ri|H}ʚmN"i@`"G<Ҋ[') RQZHAmQ;ݍ^R;!p/ ~XBFV%|xnq"i(+Ws2GH2)4}%qWuAAr6#Q^XWrnԵ&񁢗u_Wݣ~R'~ +Pl }fikB\w^K-nYJ7ߓ\y{dtr?56سn0+NhMYT̅Sw,p=%D8490X7|,[j)ZS47^vh & @DtN1󑽝WhB CwU*1emHn$Lzu鶦>1+v;nwl&M ?06D+Q{ yI rzY ; z1* R0>o^apY*g0 ,#N~m *,"V͡UH{ӽ۹"F'`ppiO"_> 8to]\~;T\*L)%F"l 2q x\Y}TFP^frB0{i!rV@ j|\UV,0e0d"FtmKI r"~Ք|=JޝsFj|"SZ'v#d'6!y{˩1ĕh=` Q-^V.#:([VK>ReNE<.=^@UwV0;ļLLax΁yξ>#,sL.:. =Ŧ׿" J$\yh#Փڪ2ebIBeCP;B2CB0zj,B^8b&(G;پ+OOg;o?)3xG`/i dԿ,qrIVn) JBW`^fZc^R|CODhoO h|h?}kH)h`6hʅa2.a:@p;α,?vUxXb"-njC әq{m+Ҙ蛭~A?[棍E.6_I9 f5B6LcK'V-0l|לɍ2Ah`UGLy,Foe1(Aĝ4z^U<,~ ;\^\Q,vG>^CA(0nAޱq%Bw1~?ݯgi^ W2Bl ? ^(ࣦ݊q M &V@Z 40BoXtriؗ%ȁmٵ:=d2Z4Аjq~3?.O(9S{YGɺy"kip&hAȜ]bЀ@O2L.p8zvM^0;OI7[&q̂+~0_qV(פ-WQ~5uRtcs\# 60y%HSLk5GMoTKqP/6ro. NT]pL_W8.kD`uk`R| 5ďۑHT\ }ৄ>2BZy:]@OSͺ;+6MV_- ch b2U{SOkjr։ ]Td7s=qK

SxMKҹӝ2 @ 2`/ZB jo£nD╲5xbq<_7c lU:R'#.nŸp.a؇Ȍ+*x>J#YI&F}8k3u`c\;;,I'̼Y7<|Bm7^}^ z~V6&S-jۭ-Țr;GA܎lƪeQ㱖?UNѼg|kΕ&i$&Q33yTA!72J<4gt|zs`;E&U~a)d%P6Q?u/`ai(ݒm: z`$9i$7S̒c̱4fB؈~1n]&didT " T)i0GbeBefkjt߼}9Uy6V ? Χ$գfѶ;GU@hC%DHDuI2c@|#o#Dm ѓ0 "oLKJ`O1YBw}{0m9o c*RJ{{UXK C#w MԤm(iX(!>خ=(Nޥg6(ʭ6[ldmw{$ A;e˼4,!J&j\5)B83&m3J6=/bW /-a뜸B=X,s q _)##0Jա+lrG=HĈ9Vsk73jðk.S2Y ޝd/Lݩ;R}(Z%#TD\n3ݥl"{Z[DUox nh8ѣ}`NPH!`; ,jk4駼w$Aaӥ?; ݝ^*${x!M\*v!VnF4ټߗ7&ʼnHh=)U8Y'hb| +tQ4, յ֗|uۜj" Tz< ImM=\nrd?Ǧj"x`AAu5'69\mۻ6QV1ڧ\]{C].\ ,u=;'bLEq{/)]U`;i]~V5 wKJ z 59_f(2%7Jx&)rZT}ܒjQ46aН{+!9;\ȘW'/(wPCRq59>.DlٳkI\ͪz-[F+o^r|r%+BnlRKAS|ڨN P>3 l!AQ%Hu$ɰLHRS-Lf|~;9".D KC0n 1ˌr s8<7EX (]fQ2 <Po49s+FsE+U&9 A5Nt)Eq D E3enG2.q:*Fy-ѵ Iy E-}ˢk DS^͚lywQe Bz=_z̴봛Wڮp3 qY7WmEoA#qnr'\ mQjJFĊYS'`mj!H0עfmDǩKIWZJj雖 75 `tuZ ^nj뎁̣h/#I Nm,]gO `ŐY& Bsu/MQ/ryC.Z%ϷP9gSn_=7/ӵo|H(LG6&RͰL;p\w,W̉:6-$WmVUԅCA zC V $8E褯0 ^4.|?PV }rŗ;v̞np ԉ;AN(:mCb/]5}nG[wLM y0&p1Ԗߊ~sJW]Fմ`O`,CTt VQdڻ,=J܄N!n=%X GB_ VVF37R)kNb*=L)H3 L׋ ˫-cC|!夻71%hUO3OhLOLML~ A./B-,VU,5:[VKlc5eCop#iq a:`exB^G+X#F4xT}6Qvs>I5ݚrw v*=I_e7~r ja Ҙk +Ln<ݣJ,U\:."y'O70 ǭVf( c._ pӖTa N)OniLں4_\QNo NHIQ^?.?C("wĸ\:-Tg\(74I[5w_ yCW63ZX.,  /6v14aJnݔ}+PUhh? ua׍J\HКZb9T#KtSXCsa]aŻRđ%N)@ML8@h=IMZbT ،!_ &=@ h37gA' ]j$.Oxeqq)^']Xq5K-B!~&W;YNL!#re6N$`kZn㰛Nt4E$"j&%&e/1p%[7KR noaHS>EgWa{OJmֵFW#, TRlKvGbDa "vlj&I^4T^30ߐ-\'j1~Q?QGPT6<$4{"Y| վFHy2k#Xv]XxOc<= 0I~A'V)PYʰ: .4k*U.j!xς/6pr3z|* -?΀< fDal|jYfmi;GY qXbDm.9[:N,yR6*!M1i6/-<4Z0ZqR MmEh:Zv9 MyRw~X*߹]a59גEtMڷlpJ6]3@cZ(hQ;iW 6\%1^bD[>ͣ(F vqʥ`&ـ*k! Byxf cxG90Ǐ#ɦ.~^c9\?y'otFݤ#.dKy%nccV}<1lX>%ȅc:Wv1G1`@HF D V?&K9iW.*u0'CS vqZJNM#9vʅ[?VX7~U#R], h,Lyݛ)N-M^I)\%HDR{@𫜯Z$ee[7SCeA댚[<@mvȰLAiڀ~3먫HA)&Vr'), BkI"iI7m@p")2 fA>y⍓=HUܠcS cjjj n sݮ\C%ncQ,|v-a vH&OL3Ǥ^Y὎8/ˮ|G~yv\ͩw0c{f`1l|BS hCXIQb1cH1 C&~v}aؠ"E;@azNnrJ cq/k|k}+ƾQ%,Y)gJ jGGg\ٲ& vӃ@0KH%\H㡷k:F*\|-a5Ѹ+g>@o]tC퀶=<;V1>`/"3CCM[ͻ^)p(+OӑAy+#׵8+Cx)< ʬl$k]>v\Gi/R.Rb<薞h@tj%'#_aGX泸VۄMsql˞])_e4+UI0\gpC.6w6y[دx>\DI Rvʷ}@'*&${a  t@7CKǯJ!vx2Lrctb]т>\+ָ69l̃ zP b jn5y8cȆ9)^t{[SF7o_ob6MdT8Huoa:Gi]%߂d5)Z13HյPNp*[Z3C.,&p5:fȧ7X"J([ :PXkz 5~[i[Ѣh&EaEB!V8JCI8?SIŧS$!Xi@F!UU&xZ6IZ.[M%ٻ GI рٲ&!bܺdjy촢t;{8& %&M$%~, ^|]jβv5` > (2ZbDc'Z*I` +^'L|x@eyLy~#*F9܀_Mصq]x$\1]qn oxώgM aE I[S6杧'ś6h^E}݊&Lߍ tЖ?I G4` [>*k1P5 /Lw`W ~". 6H3c;(ɝ=`o@B"ģ U@` . ?YBhJ\\hp3:·OldKZt%# dnZƆAЫRm Bb̠OPli#Ұ=^Y ԏڤmIw3uM^پnQ'H]v{Af .'PKLPdhFE:7L5#}RQ[}TaEEV_>fhVMv kt!; ùwMեTK 'yuޭQ8vG|÷dX4t ̳ɵ fe9 GLbH"^Mľ9Ǵ\J!p qUo7*"q}o(o;/4eV%є~KL[k̠yr7W6nr^nMLas7$!<*Z10C6X 6=>,%WNq|Cˈ0kiR*lA|݋FIxM6G]|܎lj $E7:9.jÙY|ӄ9 %8$( F;%܆K#۹ ,o0^V7uiY!\%H ?5HM+2s+m}žh{a%+p`% gbx=.hiN 98V2DB YNe .D&_'ݿORB5Ţuz~ݶl79GHY^G:3gǶOEe2Ȅ2\ΘP{̪l=d7MBhĘN%~}ۜSHwfѱ7"J-EgDw_n=q;ёoygل?'=>$Ϭ.ILTR !L[ ".eEH.,#Nsx-rOT~C - 4 HaAt1R˩AHφw3dTWm )>nyI 0Lq^@:],6x<:FF&Q{a_]Kk=52x)+5u z|rjis'YxD;1q0Q}{*L#," S@?i2ο;nT$o\d:`g=|近,:sRcq+ow?  Y7.BJ1Km:Op.;u7;l[)ǢU!.GX8׫J<&/1߫Wtf>]fP:Ór!MHǂ:B>OdŞyOң<h88Ey{ʥ692/)6=ܘb@{[5k't(@Z܅srlT=hZL0nrfLy_ߐd1Է5"F).YݥQ_Sm`+stĥME=k#mZ_Lg){fYK(5,@{|Ȅc #Cڴ?U'pr'`GᨙDE&[V\{WB7圸?YߥwպI-?t s`UvRn*&I ܍|np]{by::vLXG-o*Mæ_lߦvM5Ux9Tk'5l_ZD7@aI}9$50C?)8f80w]Q }hs&^[5IРkىR?տK| +Y ߁ƛLjxg^7omh_=}Z"~qdwC9}9B@Uw^[30QNAa4G&p+٭ Q)寃x~|?<貼ŃAæTp~m)c[S[XY&tDv@luڶYOGb$ /(lOkƅϱ"V2pF8Qoeҋ{ <)r;a־{ߩԱPENn!{7,;Mx.TԄ{V\hDHkxΰ2-x=8VM:dĘ%Ȉa3A{g;rγK _7%~p MZJA-.5@VMJ")@u9ݝ *F24op&(oOzau(/$AKW!E%č8 O5Aݧba</~OQV֧u<\Y B$/. ܮws >:vRe֤=+¡10Aue/-UWK?:ُOš1N OJIAa_Zh_~.$~/o ڬL* -jy?v^^ >[<|kU25|xIvji, 9>ec]*-O1$|W51mC.V= 0u!~%pNBlx>ݭ DA=g!5|sgoN}ty LP4io 5a5WaIB54$Qws(Bs&hLۚ*A0b9>@cs*P;ƶظ}{͵䘾k0*I*:UŚk/z,KFX r] wvpJ16Qfw m\rz#J,79eLa!X;Ѝe{L==4y >7/(uV:a'!]y~p01bikNҎfKFf1n#44c擕.rWU06:%>\}qL;S?JD5&mxwm\AՎIfoZP ?}}ѳ4jzYXNk$ 7 dzT<'ǏZVQq0fjB|=d_[]h WԻZ |0Gt8eGa~Dsђz6`EWMO&(N T2Eɒ)iUNDčV6RV[B^'UH/ɵ6PNӟ5o(y o{.EW0ї]:dX IbBm*V6ixduȥ8=%L4dN "5CY2o/B(PYМ9Ԙ^ Cqefuޤ'sG@aWP:~\|Ҫ3?eTexv#B/C(S@!ELZ1N4mKy5؛-cwû2hCp5Ju O;Jvؽ)]4 1vK?ILNժ-"6/Z]*́ Zv`eD[&o \Myo5#gWEXj#9Ϗ3רxeFEzmtI>z]EVjGM&U>OlF[>bI8v3[ZɆxug8Į0۬?648kpw$LL@ZF[X9`)x^o|KuY.2d4M,;y^SQw`]A0SCǟclH 2cod?eHy֎:#x}M׺Ua2S]ZKWu\mS 5<g{51:~rA l#WP=`kxۃC26U]k@4-AeLZ=p`UCnwvPPؿ`Npʮ?Ń?\hB)"P]"Zĸ`My\L0Cyt:}4_, kqj&aNGFaZ4YGVpf"ݼ~frh{ys.YOۅEs 3r$#uX?%3HqW( SsB25d1͆%CuDžΩиּft4hFdQQpK'̢'y3)#ufr!t]>cvVUc)lU Nş35 ;хn6J6I-3u9 Odq|+lV@ rF-mHB-Zv8ѶY kߴ58;6>l`7;Tԛ[O>F{I5ӰşMx-H67pÀ'y`] A??l0j[o( |e-F֮|HyF uzf~.=8qVEBTPN7EaM !,Vhc[f"srWCSz&41gRل1}Ki,w #UwkCcQFR%Dg'Qaz b9XFYeؐ%-"Gf ="L,4 r+3yY"vp\Nh-HP^v2-ZB:r\%FnJP?_+c]nHdVN)TH-T[bz5bւ'i@j$" T2ۿ?%w=r9^޷mHRUkK$be|L&z@p3]#Xlo4 YJf&,M$O^ 0(#ztrLf-Btl e4Zr!X gji1@PE^QnIzԠ(P|hkr:'SVQ@gv{rw0DcdnV`iz. ̈́|%IFaUmpu^[8:|nRPޗtA^(B~U+WFM$R+pTfkrpYYY7G;;.Wy!:fSA4;szy?7roI?! Th\jq:ֆ.@D¶ZUY':tX2n=>xli&/z.Ih>Ry(/FJ CPtL?͗cD? L9D^ZU(K|o⳱8#:RM4sgi`LÚ랇/1#Aݩڻ2NpׂofdG7`϶OAۺzyf4gn;Y8骏{x14p,]0zI_؋ RiήRDAL۳_Ҩ3\=*k %fS{aD=jHxPtth.(TJc]]g4NdLQm7b%.[\kNOґEIZF#ĢrD^"|t_/>/fT I]=? 8[pRwt @Yann9UbbYwWhM|r4׬N\\A;8k.9T$.uɟ`vMGBqA# z∪hb8o[<,uf(-=tҰ8\l)x~2s^TXYA ^H~*-ŏHfQ`RAFT^V+:uru/t)\lƜ{kGdΦ|NIp2<):DҺ"L"dwx{%Tㆾەɪ7v|@[)P`3?N(׉V$PA@_`Сm:UbNp@8ψ7Fm3C ?~UwzDs p 46V 2@4/DَwƂ;03Ӝ^rBM whآ|UJk,JŻ_ūyI3pBFj֩d59g`%)9m)QhiV|1. pFqJAn1f ~``z9'b hl)8ppskNT\j5g] 4̎VbhPS%rF _2bs-:a*'lv}ч/BC"Q)sRōp.yOBX ϸ&F'V!sc=m9ig7n0љ6v#H%9 F1Yf`un|ff׈^M[IhA |)N'A 2GXf;ʳh#/Q\F?ćx!'x4wi?s>XM`/@<]@Q=\ s  i˫0 J۹(݀p"Ҥ!2 ԈnS!6oi }e<:诰C i=K24Yb~iMXPy?`"eZxgO뜼`TW?'2QoXh i,<}q"zZ.d^A TcX|xt R"eM Uq|` oSUR3jRkp8X M{5&Wo[[1t5l +aRS!VvA*0>ts|<ŞWVI`t#kɔbpFjbpb9;i0~10>`ĝ@g3Feۀqq S?aBɅvܸ˖li+r[xlŠbtX(۰&%͌H`%%o?w"0E;uI[4ee2rɍMf Y* s6>K[.%$48#iM$ X >hЕ`ozo0:u\TL`j@j@f;Jf#>܋%خ(>ޯL‚?V懶@^v6'xH7+4C9(j;ퟪS3 3/ aE+6Ɔ;?0\yx4÷ $f'HP{ Y'7ғz> χՎS5rԥ8!nXb5e. 9l9oLP? l7s% Kn.?>6|„Eu+8C0RMZAyOއu/#7ě^Ulԯ{$ܮv|b<h3cs`OKs6= ̭ћ[`sZ~gXma?H ĿW-}GZm)7h՛x7uUKZ F\F)- hQY,GLY҅cGm3* :iGRk8"XAmƁu>ｾxZBF/ L_Ϫ)E:4}P( kz{PkK<(/@Pecr>]I†OuOW 4Or!R_OS~pWeEپO/[g(dR}SxkvrX%Eʿ'C;8Or"0[|~Jr-¸osڪPi i|X.G@JzQѿ`wGt2V>}-㟍2wo|WTd3b`E&ޅn*@O2h#v{U8\d3Aq7OK(3lJ 'Q1JdmlCFZBSWEVf!O:z=ƒS`p|/tL1K_oD i #N<ɀ$$v%$`Y!Oh응?%}%K&7zIT%U-"?L/yָ4ʌQ@:y9H't>|5KLhhG.782K5O"`GwF.Lps$ߡ?BmYe@?VO:&MӰvJź#Bf7ړit~h)P[ @f:ȴwLIiͦpm=2<^D#P]7ͦ 0Zc[LnzE HQQBl-qWc8=ȽB0' g pL]5< L lqKI4Gb,lDpp;P0٫7D"$l1lK1>?=bWQ{KR"dFJ:XԲUpP:ޘKuCFxcSW6KmPMJ*}p5wy8ÀxY_} ]v}q_C?JY;n  c&3<)խl@vRDާTvƢh_Dj4`@/grdsH4s2xAKB귯[Ҡ'|dq ?=?w$~8!ICd^*)krXnǍpX:{9W$"Icx[?̩aשz1aފ!p~JXHb+Cc'A;dUġx`H I4Nn&0i3znV‰ȵ{k8D}'r 4Q.D9sc*[ dOc:j`'Ԁe%U@`KH+,ŧM}/÷VFJLT!{{PQ.x9> qw #jvtԬ72B!-5ŨDžD~$7RU}|䳷@ lT%Z1C$Nd%BI݉qS[cN* LH燼#sQXf\&n<&աPՆ?dR"FԦܢ%L-3l·H皘?8rU nI 1x!:< Wz0}_}]?s tʇ/f`4}"GD NsSg i$B_Ϸߍlay_7,'KӅ){%tj#TMD~ƴ+ )=y~UϢݮdĀp}r[ ?6ikW[ Fd9+)&C9 'lkuf~*za-=OW%b'UzȢ&B%rKqa hV^|CrQNq;ޗKl`ٮ>VU7&م%^P^l*h[L $Ҽ"q&\),%.8Ѽy K@,uy89gAfƋZw-ZvƟRU6Ja ֒(-E¼ګ3ӴDoj pYɞd+q6 #Ytǝ`)e}Oˢ֧"\)R_+E62\PUw|:Jx5.oҮDi0?$w|:qn]aϘRjIiߞ[/w^5Փ 7ԫ bfH_^Al:ʱ:7Po?zcFAtObBe=pn'Agl$X^Tqtt7G%V_nÔĬ'WŌk.[Ke"'hW֑ԑ&ŕ5wwbRG[˩a0_޲v-mIZ/SMԱ4ںQAgʰ8k>̛}^mFm@3ѡ y*yڮ# ᩭg*p6|0􃖂rlxEKBߘ{n) 6puۡ00 ߹]^E^'W S#WsXN5]^σ6Jc{NbRt⹹D?^Vi+8'GU' ,2kY]4?xl;LR5)>|G?jC"U ˜h@firK7jxCȬ UZΝOVNoF4pYYk{MAImgsGO5o"ʲs^ptNRQ%)S/ǹ̴#Y9t18Ў{`HE2Z`:pq#$JcgW$y,{0Ar  AVqdHRivR~'WIU' 6j%UM74duCi \7&s=·IڟնaZP3Lh ;}4lo-bH"#x;3ʹvF&pvZT4@U@ DpQG4ېnsFf,ecGqy/pbxJv6*dn,DX^vkݙ5#d;sj@<CArIu^|Nί!/2|0NRwPkt,^4h$ӎY7A'YSC;ʎov\ o2уPR[yxFJ@&"3BU=ynS7gTt(y$]դ5ՊYCჩX|6Wwڧ#q4g] 4 E#u{git)cYTWˌā0)RQ?h$%{d[p?wA *_0!lWHtq$K޾#'S4Ud t͈@9nqQEiypck?tqxO*+dLx^V!2_ 7 ^~cǎ%-4[>Tu'LCOۤ.c *ka)u@noU1 ||z{"v-ΐS#qTc [!vbbăp.̰8Fю ρkP;E.'?_.!;(rVl`.Y6[QΝ N{ԛv1R:nų:q 1k/4įPJELfWӠv. *D*1OᓬY賦%PR$w:޷pIRJﮢK#Z-V,-vL|펚yJm\ۀgdlu{=h_I~ɹ[M8ɑW׃x`O 6@9M% +Hڊv9uf~7-:%#$TR!Ό{\-$,JN<g{V3 ?U(dï_K<UX,; s:U/<'YSCvwO@2P>-v}g ;шۋ?R,[YrB\k{>|{3YfN:б~̚4f:tHX_㾶]535STdh*Q?FC@[o9)~5$7aa>Ԯ٧^_t5Q]_Uʞnk*1d|24P^4'DX@2NF8㫫0۶'-$ux=tiEY+,}}Lp3L -gh=7Z]vZ۫US%Qz}gL'$Gdn=Фf6h=.-_gU". LH)AgCv7vFIYZI -!8a 6#W'䯨HɕZm<nÌ0ZG1wBYvEH[y`) 0puUF.:6ꝪZm+HDH8d&x'P]+u2 50*(:SiNOv6C \ʭG+1Ǯ̠oIX>vyv!hN,%nuD%żDqK[9V)s]Ru)bosE#IaQAvNO:H5_K&ԢJNpjE Ψ]w -ڃc".VVek BTĞA = Hٽnٝmor'N y|X>̊H9a[)KGS =2O&t_r~DGw$VM$Q$jz ڼY1A0c?[)%]k lgn%~•ξlLD@oE5NpKX&" %jŃ!}"}8~Hq oɇ3e"s_Ѝ'_Xr:59^Vx\ҿSsq36Na}$,nyP׬4%/ <> @?|۱5wlndpw2Z"]+33#@(֙s]e0&plF*{iu—APxޮ7JumTh~*m w|xz[~{Fuѝ^"ҟ-҉z=D҂5r|z c  lD=1 Vp.d7K|&V%XlEjhE_3 sZ\ZeK@@sxHCJLULg~ e0xA vSI+[7Z6RF`JٱE_CGo.zLpHuCɒ?aY"EUB:4h(˄3oG#jA!$#KUƟ݉v˘5!WZ<٣iM> QqrTOyItKIxu{7޳? |Aޤ=AA^ &f.讹ܝYk}fuUItG3gM:!> r?°h뭘^j9Q:L=(F\##1 y p.̯{:q9+zcCcj`q_@8 &~kYԘƶTn{&->"QAy;}@6N+~K]Hx&a tBZԑhVFiV"kÛe[qwH:nLQL׬ВvPGN!o1D2ZC56h-Vyt3gzB|S1Iyʤ{AM07\51o9#,:&ϋ L " Fe h+3WWbdC$y,(8YڐqJ^aa׿Lh '"sV/PnB hE}=Ks;iTBSě(oK9;wX7m[via53RDܬGsi9 d伄ԵRV#ȕ!il'UR"Wb˪\?K`cG,`;hޟP;bwu) M$QoLfVE$d 1ku®z$eu\Dl]jF녾/]tؒsJ.B̩Rd}$j,|eu2 lprTB7n&3 qN Vx7ҵH{aK`#/W6mM#ٶ}3b\Md\c] GY&IYa V2 6< dZء3 ;n,L]&{~r3ᰀn3I`)t l ;pXsBKm0R Ǽ`?:?;4ʧKMpH-a1e3xhC WH= xc(C|i8)ٲ6ake@!Nlx?Hm[ 6eʤp6}0p춼܋ ]v?b`rԫtUP?*=tb}J d7ŻqnRmkMZRMhaH\S6g5ĬPMGxچbət}$;VPuhfU_eۙoV )Ο]n7igX)eg\(bRS5~ľv皭G@1F(@OA1`Lb|hx/ y#Qثc]ՎdJl C|Luzw<*+1 Ðo12 ͉D^: ԍ~FS*n-1"A<(PŸ*X袋S;)O6mxS?Ϳ+X%3J^1*մ͝P*n?Ε#`kΊ&z9wxsaio{Q`j紭sˁqu&guU3G f5+[hMt\ Czo1air8opU{$ 6R7i7|h~>&gs}nLDr탫H>/犐" h£peYSEw0m#x*MPyRwp>EJ }YY2]>M")zQkyIL{=stX# ^U8?d;S1e\~ԏR!7I0ȫ=ӹGҜ7 ^ٿ~1slmn~#*v]dv ԕk3.m|(/U0oFՙ nN6ȘV@v UT8lu:$X[ WAr-t5]܉{C6z=uX;C ==- R p;0i| -pC@|t[qJC2D(PfG L?Z>vbJ>ePEfVɪ/)R%k]E Jȩߓ1@5I/"ǧ= ѫ6AhFi0c+(-J_eAA7+s#ф.^eu/c3@8m5v LQE.5|>f{fI6p-74<}golGByƾ7πA g b)#MiX,MKR ̮^zC :~{s`vdٜ~kPX5i^FcM\X[Y}Dt:r3DT@b3AVq<~I7ZOUZLY:&͝V)9|"e~T t_ vI-jRp{]Ķ'pbبOG z!*8i[:~$Wb v~ ;FnD-ܪ OVcץ~qr} z3:V~!}_B@߄GSrP⬐`a#@,Et{.@P4|.C"l_11!f=A"%LCdjPrH@R>fb0SwKLX>w!?- `Ec%:X~ҍ¿PԉsTsiLzyIfmT5;tYl%6dVU1bwbc5m#3^{!J%ҁ](.uʿ F>Ζa~B,g[?dtQz^Xtw($Ja,vS\f}#jv+)AJ??DD|r<94֣LGv'VTu&ʐ`3ֵ/)X! iߞC6phqU85Pl|977b `: 84# XNL%L0&qMKm.#Ϥꢰ|*sJJC>K؈BՄ{$gbh:1nW3*<[r-6LņPBGQa=_U!$L^Lxե>oyǀn'UMRQN&t\SO,'ɲQ+*M Y˭9E$x>(0+ (/EFhӯɝ$ʜ%c|J@߀ :Ƞ1nn>9vW C(bIpg}Wjkla]vL3Hh53KA"k':i\a0~0GppSlՕ:GlkD1{혜AU@U۽ asf8 4ĨU"aOr,ؠoaSuC婒 'OG[J~Ǡ[Ҁ:u=w"~NJØVZͨ6lwV&|Wڎ B/}x7!k>[*:NR)\䳯ћe*,T>g@tB96k"uP޳U&Uld,$̱g-^CXmڤnfd|ǯ tbnq>p!sL hW1|Ls x!nJV%P祁.q>]oܬU~WHOOS8|l{o<,;Bc+@0KuQaHG,$7XBt2p/ew`t/q*E"/=I=[?MX଀`135`t* ֊8'.7Pzc6ra3N1nD%ֹZiQLƲayy*(]j=XCwVnq4g?&DU+ص@fy 6޺&]"CNʰ\+i.>j+5N8 +.{@F#hEO- ;7,Fa5F#BJ* R bG+A'I@Y2wɢͩGq#,s6ÄOpc;Eϋ`z5iyGхFѠbP)3Tّ#v'hbke+y"Di7S=x^ej7rά4f T?Џ^c*.9)q uWpޭˬ,=<3 anaj+VE^!cpWOUq_?r8:l&HMc: ^-D.G?"\x9C=s*?k {+gWSO%x$Y +!j6);U 2ݾD+r$QɆh0S҃j7FGӍ9#cۿhrkkg2x-Lޢ1ZU%;lpiV"0ns؛cw{-H uAX;jP=¤c콕`9G\ %λ, % 3e 18CK;N|KvH9q6Q Swwu,޾&>;oԹQ\,iPÌF&3;(wBU!3^WibAi1 *'kc;W4|扪7;ɶ@3Ʉ῟w3DyG7fiѓk+#Ȕٷ19v^ݝhU2'O@/ZiFŌc?cNN<~U؎ stʆ0Sʻ&r׹ jA(bz[3{Pi}S֏ep̀_+SAEn޿1ܴD{bB^-r`o`qhU'y)FϐHSpÞ FbA w;%y:.&gGc Kc;6yTڭTtץH@_R?U(lhi)*CU :]/**6R2B4+-oFS=exɺj#sv:r4+y{j #&2^*|n&&^ǵshQI'Eod=ǚ誘7  3P* 5H9NU=!ٹGPMd[Do Qd.UB)S*(TTW)]{~_ݗgC*~2FCX.=;ޯpG-d߂W'nZc& bbCnwMF47+f_?5^N!W~iN&٬ 4L3Ije2>y^4y⛉Tv]kÌxyfzxi1,U,-͹}~+v d4GG&_>m1:l})xxit72-?y%qwCr7u0),!r5,cg  XG[Q+OMTxDWu!"[KbeS@7r f[N'aPa%@BEJ!(0zbmZ=RvMb? m(O?&nbáMCigkg+J'#~apSVunj|s';ߪYݑ0u-@$@G6xe0LWIxstI.La1 ylM0$3t`_!X!)SD*@UU~xo` Ž.9x4vbw{bc= 7ds=iQ&5GJ% ހ-6S[tjG-\sV^kٽweWT#tQn.?k/ۻ{O'V_lZOM짊/4T} H1~E)-acdhj|efHװq`~ӹD˩?^k "x t'Nl$xz=S;Rʫ:/&o;R萶\d$:p92l!6^ ͕ro)؃A~J#b@\^ӳOIp$fprƤ]X.ҼZF I}r눵?N8|ETxCcFʝwnJMh{ pkUcp /emTZ3P_ EZϊ+ʣg!,P7M+BewtE`?>HN81sXE: BzgArSG[QF|% hrT uٜ pp|P{TYC<{GWʝkv-cUƑ}-7J)G\uD\RgNXa7ƒ$!TjR^cEX;nA4GiVƵrcA4Hh&gRDZW@Lo{qS[L aQJL-?͈%ttS*8(W6:S0,Fݙ()QeMh8fU wO6PXI-鰄ke;柩|=qz`죷v#KVҹH3x|鰂KG/#'M:9$gh .nR`o=$cqS 0d7*wa;|FJwx&;݅{Dٗs6a5@:(]D&xC.W:ӴJ*u.w{FM#OBTj/*3\X{q$$SFղy5h)uIcݻ]h*cd CDh c?/ N}]Y06YA|۽`V1!4 X iD/]b?\?Xe9>̵0)kt3F92?Y? |zK57rI=R]НDHx6rl|-Ue/(ӦLm  xxPdϠ[%`HZ#g 7鰕QRZ/ǀ(e Ⱥ9U0)O j< EaYMu[`~0\l0ɲwLcΎh|GꟋaY`/0d{9JQ pfل\7;tSQ{D5{Ijjֱ|c20q}O$cImxNfZ (?gnCDQ^P{'Df7-<8QV̝ʚ|}y0B`J}!e#'fwغeP(XK:I=WCk!lF T=G]2IBUE$c0/bT1xu(Pr=yVچ@-1א"xly촎t("]r vW,=E;הVj~iO$}XX _q3>3-gTӂ8T9Nfr5u=i 'iyxl2AM4^;aB 3y1V?B4/{"3Hշ%z>Vt=Ek2;g7ōo~T#M!,kM??Γ\.dKC8;u'Yj¼u\qX% ֖!,b^_u;IYSj}gG nTu5 YZM&-mTHCFU@uM) |b #^%x̆=1c佌GXPKdٚn [': e.%.~s}m`Ϳ >S#rA)`𓴊`E4ڼ}<냅8&w_æ`-J6㻅,}Y*;h*;=qf>+ԣDLƧEtFCmZϗ1x.&HgRPCZz$%Vwx{ec1ׁP;Lo<*489(MVZⰯ҂a04Fʃ́]D#95MuK LR8Syت30{ESl6j A_H 'thjFܞpF$0|6沍ς%l.2iA.JkI0zxa}iv#Db_Ed*P&2PfMd3,75yYLhAH {(AKt4q̠~<=t-$+#JPZ4A^cH?"uO_$&)a);\A?s`DR.*5odv 1eƬd]_Bͫ(gbѤ+d s倶||wT4.S  CP_jQ~㧊gܘ؊'[␿k,v*"P!E©/W7#tX$`Hdۂè";~Wu?Nx>! yȼ)c٤K'>~=s-{ };s3x7qKm-D>ʄK&zA cYc9t ˉ\n_w =5o5N?,,#GACF̉2w(+sT$8n1mX}KSu[9铙yvUX&B(UtXog7a@Tgrc7}%]H!{W}݄}LV p0]7򓼚v9Vi+h4ھv' ф}|h=~U-R:d#ט%S4>,0 ޘ^Uk厱hnxC&37xw$^IH&(3n2 3ރ^Y>tRۘ/JtCc^ H\2Y'<#3r6sXl# ekh5m67B+<=zdP'fH>w'4=LF˵{S''d?M~,n2"WYB3[ݸ`3d^*LYaX88fp_zZXP,i+1 ^)_n UJn?ǬuUY}X ,L=ͱMy>GAPSR5 /_t }::"6{;Z K\OŻ":f٠U@{IVOEC=[4#ݒWXBQ9MkIDqHh֏~<݆cWQ"YcNˇf fB6GU)#b!j@VFKI0+SyŀC^fMR|v#BO0P}O?x4h% -WH 1 {@5*+ ПXu[)9ZNa*C1ƄW3ԈRcq{pb#9V+X>^3l4SVXѡ t4wW}9W]ĝ^Șn>iv Hies!5)QםzN@fٺr?X_L[e>5ń.e咾)!3ƇT t?zNB%q |:;j/(Av;EjF !Y-P(je]l՟Q|q&0pw{.7$l|!Ywr/[er6&퍭+F3LҰj5I#v4C.EϮ#3.ftZYxT&s%OE$j.TSL3B`5%& ::1bM3x$/[;fƈǘzC1{*I& d<=-‘ +rHF`Ph'[x*Qe`D)-xKN9c5> Sj+)(o{;#!^xAj-d?b[Y"@&\>qP8D*Rӡ -Pb#KɦQ]݅XS^CW>FƙgoI~PiTWMf䉕Lꝳx!U<" L/ցasYC#UzzlٍkPNY">Pyi;eŁDKܹ]rRUcR/;}O*+<ìB!j&lH2`4/BW0Pu:KW@=awJ< o%Cp$ Mat3΋:GDfPlfuʼ6<3-:fCDf49 $cܐb"p<)Q7Yr9Ȕc?^ [0/Bۯ%M… Ows9o1H"2d(fYwFX$QZ"4MF0PR9=~.wJn}O _Ez;%t}1{U&2HZ!^ZҩIV0~g\۱3=ih́<[rdx$G#׋MSwԢRT6c*Rk)N+Ңn=<˩H:G;i"mKwZ]o)V@_lWԜ7Ӭ!5Tےߥ0@kE<_v%6D3,y"iѺ.}1мB;#BW7 X+&x\}y8eecg ne4@S!2iu )2XHne*GD^-/эϞ@c|@`j(Y̝9щoLZdkGaP(/DHN!ǎD;Vq Ä)eA+ѐIY]OyAi;TW/ hSɄ^]w? d񠺎JEXl\ w&`w[Uoo\ Z-BgPc(rܵ ͭM*U6%q u4<UyiSJ 9GM]3-.Kv+I3THx8fz/}62@~U`bd}sw8ۯY,ƈa,]ڵDVgg n[j"G!R +A#ι2|^8]>A@~s"hH'#z%yғ, TN#LEh1-c6ĭ1˰*K1``=iZv)8:ɡY) DL 螛GQV B`/jβ:+#vͺ!ijٓJ]2>v1/ n7IsuJ|ϑH-5djIхq$:+W=91 z0DGqNb>:ࡳDa?yx7S 7ۓPOu8j T>>Q!yl>G:2ُVuS dV̗T[~à Vi&VwF:X燚fPef1.AO!:4_)`XB^~F-@Y>9to<V+S&L}m"wȂw"tuϙl5C D;,7c,1O!!=]U{_==)k5zTV:d7T9hK U)v.]:8pAMZ/LGP22]opW&Ba1t4MVk_I_#אttp٤tS)xu0&yQ~?4GIz' ANi9ꄶ%t(%Ϣ{J0xULu *Uļ:&klo^F vL: 3Go{'G*kz2 $I}=RRo&֬B)r<l\ۄ^y݁{&O柞uj%uPDI?mUZfX{Ej>1ˤeDY2ޑSP}>7}M42J.{c 1ڂة #& np& e>̲ډzDOXJ8Rڙeyz"* 'ۛuQ_Lٱ <۷Ϩ%;-6FQU=xf73yY{"Y%K=TQ:OFS?lz'u53o`2WH fpmV LQ}obQb,b,οpuz/gjiYJpVr3ԋ;BIH,ps&"d!?6+Ɛ ؑN" [1:$`y`0g)O߁7mQtNnkc`AXDHkة*o˷mHؘ(5& 5( Fb>\ ҼuXRA#~#>B9ٸ([~Q?I7\#UJ^-Kkqf>8)Tфǫ(IQ=gSAM*Ywŵ>nZFp*wn /Z2/SCĎdefhFωFFt$a*GN1J?>$c[71nC%:N+},NXԬ,Dhe&[PhI' $5AӃD4+C g M1ZGo["ngʮwO\FҋP=k{{8=}d'"coi2REB3cv(Y₥,3sn.k={[msF{\F'h:?ZȊ3M o?D'Z'%WTїEuIT2C/2L' DadfN' tں3"1S?Tk\iJi}&|9ғ@ 1u-2<wrqk'ψҶ \=^5Oq^ e_ "t@N @] Cť>z渊BI=cMr=vP/jorhCM\쇟 h! W`ҫ_ak{+P; J"CgaTiF_.R PI )F*#=5p4823>N95 aob[ٜlܠE~ 0O v-y*uLhdkPG6Ѐ6 l AҥQUQ%Ej"0<~uR武** q^]SY8<$`HVH=#2ЫCэHtVg9E[ ɓ]ܢIu^ t%?}ޠīezG cVV)mChIˆx`"d'g`'1ӱu⣈ڿ~"j=ADx c'\m꽌yX=ՄF :+ ¤k>ZDzto =3!Ӽed]W/A~ IՋrcA$`*֕m$mCr $r@aD"5P|(U!ʇ|c#! zɠҿrOIkǙns;Γwצq183 A5K%R D3`?9!U?n_jo[S$ԑX]}aifւMP =Zf"Ե÷z/ 9 -憡iXBLAwAlH壃jV s_S$ʹb[uE#$gɭmP`\›{e4();71%b)ge@/^!u)q/y{t}h)"]o>w~xkך]c`5#C#o*-4^?Zs[N%b"081MdIK lUzݝl@`|QT@c7{^t)a|ojхS .h':RHWJ 3ZKEa4=R%OgWlu9di},}M 4i&`EXE0HA'CYT.07Y6{LEi:t |%4qC&CT|9 [s2 Dns6T{zS+&BgoM9T k4 X!!z9 Ϣ%1N\c;&h̴mp8D&%[eBPtزēHlb\nQ}?ԴTП^ǎu58"%E%dȎH­(1Ѻze aJM贾5B$9v BC51R鰥49/$`R7czJ6nf`S#^@!-<e֎\752[Rgq ;8rJƕFc^N[: *JsEԍ.\" B'6u9EA_4@CJX;>۲r4.YrcB笚&O>h>jgFrK#%>3-R| :ċKr3Zfv;N7~-e A8#45YD0BSD9`j&ʼn4p~c*F Žd9_j'C1Pc7$VO6k.-=icbgyy343KhݖzBYk g JbD+sDpV$+C3r\}Mο8B>y!fg#Ww铻 z/P|T6ʦRoċ> 0[5IRX'=A4]&Mybv:z[?U:ljDNf@WiJ}`ډ}f`;kldJk܋,țy;HV33:Z.9 $ !IMUm³;+3 ;\fV Ϥ:lՆ64ˠi섚g ["dv1vك%i_SJ\n^%|K#ė N؃B q Jx3S|#T`gjDEJF/Z<ޯ}VB,YvMzaA읙^M^&kauwT;l鹏*qu k6u }D] F ٗo4` CʍL]CY ٽf0$?穡dv.jyXj9GB)-lofQ.q&yRlj 01Q:օ%<-?:k[&~D)ſ+ 0Zv n$O_L*s_S!P'󊷸jzdgI_50O7Lakвpklj.,4(Y7t TiA]iAoETHY'D ѲNؓ=[b`h")cm )hG-jU04!SܺPP[qwѪN+ z;N#59npڳ3~<֬2JN]TtK7 1W)%%?kю' -`B.Uov9\JlQ!;kJ C_w[w_ it{]oQ'ξ'.oYtd@\Km˝VB5ذa, ~N;FL@Zkm^ylŐ@I1yuDh|> =f"&R-T^UA·N=ЌbP-p'((]$.D:2(ŵZ4P_oJF`Iy1CKw+hAҕcV!+ X2R%ŇZ ;@t;wETep2i<흄utˍ jR?y}ƍθ!>^便SDucs"^g /Zgx[.yi0\)~ِ&͇c# lbgkCO@)8軰̣f_a]OH7ibdz746@$Wm>XڷBJ(1&f*Mٿ2~6 YHnQ6GEQ~σ&٢,3o:­p;o0<[X4 1(m+L-)\nk{;C^îXaA090P2 I}-EMY ޮ\5Np: h_3%KőAL':E@|!\Y ecgFYsr}zyfƧ$%F7Ӹ 7XBV(١r.#h eaW 8r'r޴Qkn鄳sB`8\Gn604+ *^iYbX1w4.b:תa5ދ P0 7 :eKr[/b9hQou?{x&SV]q=$WZ쳩7aƺ9Y"ʽߨ{,# ;ґI*N# 菉 2-C4⋮y@[f4sD_zM"=cvӸ=!~Z0JLKJOx_AAB>\-YΑb@Xb3wVoѮO;ԭr9հTW\!$Nr7AH-W0R).ONKY{+yքkzQG>ٮ_M<QrEep 1ϮK&I3wq*޻F}|br [&UnQ-xlN7e"] h7GՏ}5G+TptEZ9P7wU0/%0UIjä H{ӝjQ~-yq bv\JY i=4S`;YkG@зuL/kd+Ĥ*2Brn@jnȉB~tbuݍsW}&D[xiCl@&[O"hA;h$N<9tSh"98htcYfV״ />Tצϙs6_R@;zR+ + 9&|x}^K֒~(@É`^ Zvo6{c#47,YЮ͚= 4`]_h 1rh "xq7=j|],~2թREPvkb-2Hۚ6?v0} WZQ}:ٸh .j)4=bP}(u!36NB)hNqHaM+w1.BU59y 0jX"z` @,KBz2TG6J z82'g_yV5~r+1V0Jp١'9;rqR듁b86Y+eHk@20Μht"**% V@Ƕ=q[ ՛AFAO%ȥ;λTFrv+ZX~/C|*@PKd%Md?duX`'=w J3&*Nt}-6z38)h&wĉl[-uKzhj{t+ 4%"C>9ˬ_uNQnYʟYhTajg5 V m%ISƴkK>wA+ُD#*bVe0lpg/ Gsb軏nAāw(l極?l!zNFrﲑ60bKBaweK>Mx:&`&xaBxh}3ۨ^a)s1iqG4&qFM`s1=66Ӣ슯Z9l562Bx>H`yD&E7O * dI#cO 4+{qKG%\P2߻[>F3koY FN22}nh '!6ڹ.о?f\G@h "N# un;dM2u՚7ĦEOLS1^V( 3ӹluiBw1m@ܲ":=5 _ZkAq{:( `-RcF# $,qLGx#NKW͛[ { p\$5tr5IA.kQ&_xfG'XD2m,*zԇx?n Qc1sP*c cGY%&Ck;*-k%jwpgX]8tP m$yEiI7;3@1~ܙ6KvqpўQa JzMmADK1EP}3羫gIAb5вe[ϳ[2Tbc~GX;x 62@ ho@E9xG!逢7ٹX!#l,D/XcB[JG+wn9g/^]WC(ͺ=J>U{ŕ} 'ӷ3-aۦ)4H&{qCqp'8r'.c8|'Ήs~rfG^vlm!oXx=9?`cBQuh€cqű Ѕ-+I7c(4HS+5%j}'mP Amm9$!ɖvȪPMIz\Ѐe-놼Cij+#LRxk-;Tlנ_~q^+5Su \|5"*>d-sqTy{k}f0<&݆ -u@mZ7- QOA^ Ff!}R-;٩99qMPD蛡Sy?g_3'm.N AFgŏQ8$G~3ɎX8Yz@F[.2G^wq[`jm`=dJ7tq/wܫ$9׵M5lMnY"La6 eF.v5VZPh9F#qB2ㆽFUP|+o ?*5Hu܏mp1ұ]%>a!mg `Vtuť:Maٝ52RkI!52Wg09 N ȉqLҤ^)=ZQr{r~k(ar,NG򖉇K("vD8.-^^nB:`#|КeLE^U8|~?q;dTm[U4WjMjȃ/󨀾 j]V^1Hit7C{cj-[zv5cxՌE*g*lQ&O6H)v R|H~K {=Z}5Z[Y;WttQ'焴:vB]|)N^w)X_fB4|͙E@c?ZcROqs߲ LOl.ʀe:<9fk,ˀ-@eKUeE&"lErE*YqGHS7:Ҿ[Cr2vjBdPyZ|zйG ˝rlz跑\1"X }p[}} < hatiǃ mFIuTU53 Z0Troqi&q_j-NN8\>q"1aGpVy*fhfxI.60]xgq:GGp;鎌)utǵH-6X_0n1>,Σ pY ]jϿ0i}qX&#awRNI;`ug9ĤՄr -@+#zȕI 0ֹaWm c{n[)ͪR[{}C oM@4H@JQV0%ѻĈg K6n3Ӌl~MYdr--3s/A8,Ĉ9Rͣ mLt_3 “ MlTBjD ռݵ9w.'78aDUyEgN'4W gkޭv/;nLUty=WI%&ctugoMO _5>ͭtj~гPx?LxCr9<⫥uyB ?}ܳyus9}Ǧd~_m_D4""~$^tKj:S(.U$F QHSz,jN-+]tnx@yL6$-Bz&uDNm~o56xo0x'J^XC "Yz?䅙iGϴ /S{Kl;|7fEƢ;PFz)DBMٟžd\rOHHQ>CB" }vm9Ax?`i׭ic+W0ܖ\G#J/eEA: `PI ܲ>̓|oU1e6E0g!dD 1]/ 81ըH;^:cfNo`aU}_flj-Ҷ ǧA{nRrˆ'7LהqГ[ⴐnpy`L]sduVݷ߬_G3M؜cԏֆTt ܴIi;m2+ , )]4P%F1A%Zm7*\NrnJE}4T .)10nb%/ƛ..%ŁD j)6Jzm؛x'}BoHsyQhP0ӐNzܖW֖YKg3W,+rjz 4l5 یN{\^<)47Pq 3Z 0CuǓ7:.eY Wh)_j`BHAD8b@L7mֻA$%HBq<]iH >hl9q 48UikDV ~ q{g/e 8 8v˒L 漖ˇ sa&I"tRË3kKX(ҡOsyCix}']t[+W4<?#۟,#-'@<=P2[@ GҜS/}V %.o''Jb>>s׹"C~A|V}^܂_ҙ+X'j0P~WЖAm:^u=]}R4MMiZ5$JE7pS-P,i@[ :XŽ8YתfLI`Mjc"DO0sCaT! !g31ǣvj?|j/): өo }ޕE]B 4^wB>7w'Qhzv p bv:P<<ňM1gvnqoãA`ԻV@LN%P6"hA;tAgƎJ#jmt%-LnMR0,Nx0SsZ5[ts4G-颞r;4R! ~N:Q/zPY$xN3386WK>&:qö9~2yoGV]?t]_/] ۊü]nDS'|>`Yjo1#Z- mQ2|$p t:o5Z"p~Txqmq ĿDprZd9`I5b#VܕƆN{K|+V5wBs3=ay|cryLkk*^;ҫYLYz!Cx-E LܻƟ8=!҅8"#-kn%ڱ&Kk_[ Y9\SYY?Kf |tC)M1ܱa*9{/iť䜾zjmSV^eAT|ʂ)Tn;{/`DvwspXX\YWfl1(FAz[W_P:%whnЖJ{ڢ.^#.N]seajw=gnk3-H9^^jQQnȕ'-C*OV#|(EA/bjKbzeJJY#˸NCOi?pSK~N n'VA.Cd#쌙ev zH m :N|PTU>1;@EC?QԲ jW[yh ]5>)R >]Y!;v*ҿdc.&OH GdEL(_ͷ:zDT7KSKöx<%|‹:YQ+T"dhFEV>'Cޕ*&#!ECם.SRI y"5D,!8K&FD& \nkP] GR9 <&#!%6:2e)K{ 5'7]ѺEc|!49b!p",4bVnAyx0q>jMK}Lx^]3;i60\&ۈc(N߅ףaQek'$3W+ckZٞgZ @֨~T7LLn9mir9J Bg,+'HHXQy 1cri`)h( ZfdI:K{?2A 0@z`γWw,8CWS;[l (/79=a[m~wy6b`~6 6guy%N^X9R uUŸs-simq5zCqF}lϖ]ܾ"fJ^0 7xK⃩$0 䌐 /aZ4"H䌧[-ߎ;f;G]#G-ejU8 ,)w>#+ȗtpHf Pcph hl9Vok&YJ@":(OjY'z,Jw 4>#F@lMT\qA^=QrYc I,#&`ܶ?ǎùh6H/ QR~$N7x[36GO*0VWNHȫ۾"xߡe{pPh7: t''Uy> V*ȂS~wCI *| = 5O yDkXrD~X$AOg3<~3WeCG.GPHrM%z#X hNxo}zi(b26ЛƛZqp~Ж@@$-|ʪe#kUt0A=ToR9ƖF.9 y~fِ;}ZK?ţ,u^#x(:~[ Eʵy%0]ptb# T~ @Rt 2&O6AeA\B3F"ZQ3b 0ޥg't*B7k7/>5X:+R6mr.\nxPh&/K-Rtu scܥΥ1 Ll@86 ]/t&ѕrݺ OW=$SV}(-Njݧ;$pڍb \!GetL} Z`q@%DD26T\(j8; F'ԷJX[,zzFߙ{DVb٨`L9FzW'dg+Ipڷ҅ޞ*/H콩:͞kL-!R/J7;ל?4oFUO'D<4WϺT`.(,NއLU e?C_}**ֲ* Pϻ} ޸$ܣy;?{ި%c=sJ4!rͲ+i_HhgN^漲!+})dGzߕ:/-̱8f\MZxS\M]|L氿? pXv3Tmn6#-hrU{VL*eb6+h3wP[WĖYBEՍՄǕc( J !k {X/ʏ&2)Z_)o%A>Vu⭅rHj2Qĸcې"r-&\ . Kq ,H V=:5 hiww?*gT8czRy,9-.d`Wö8_2?m[RGp`kR]ZWWRr#rLl}2]'A)mV:8]t/m)0?QcK-\x6:ijz-&OZ{mJ1AͿA5OF` X+k5=B#]H`J0Ka¾݂shQ,o j}9YL Vjv?£krߚ9,vbH'%nlv,s3No܅/Sנ߅tR&6 4D1qRi** y{y0(#Mo A Tj#}dQ[Yט 9,9SikVݹkš3Ls2 =ٯHk |Q(KKT}x f>msW!3C3(ۼҲD8. &p7 `?#<]*]feCBX3.,'Cw~C \XacKk.ŀ= k+ʾ"Fm ɒu VvflINyI1bgi{f-qSʦ_Y!N_OlшTb"ɥ;F+v(E~!xīv׮M ?cwj:U#UY;P_lUWvS2>Yp<"{폕>9~|_LwK44 #Č&`%kwѝg5b|WwY@D߼*!&Ȭ Z`ҝg/z9!WuWqRܤ6^Cr4]&.OB@oeY{BHd|Ps^ܪ,;˽2܇bWlqI&"Cx:8#頤2 \B{w}ۢ+BE`=} 4M&k+gth_Å r;r}e*eMXQ:""|+OF TJ%F{5=TM?k@1)~ 5D?ŝ%%E_EX dZOr<7+ SlXZS 8Ą r@K X0C2G!4O %yr@(IV1sxeYM>Ѯ@|YäFs"F 2NY* | P:(@M0̤֑P(o6Yr‹;5/ᒁNn]1T;߂m" 9etY8CCq+C#_  apR#'n.2LrJ|1k3bO28^o 4ǿd˥-֊QiUTC&jfS=<f]{L#Ϻ0B c3鷕BQ7 3<[҅N;C#[ \(-V?gx#$s%5iiϮFQ¸F'BCp^]yC( \L1a RRqD]ݕE pZ+RZOA[a\!`mMx{x҅q8QDE QXOųb.n@L$– Vv'9y<bpxCG\;@ oVvX*y']X^K=fepR/r)"מ^ax31-Qצ@p~D}e ˦{c|VMV1RU1o*6Q:?Hr|"m>?%4`M$-fΪ8OV5JĴ:/RblʹB(OArS&4rncdF=~"о$Mr$1@HyڴmRtN1]N&jŸJ=.ۥ#}cmLd]T^=HAE(%@!I 󡹯긺%R0bS&:vFh~湷Oõlt[z|nz7$ů_.F5EFJMGwQ y I-+|QUNR3Az^gh\S;!4n/φN9zzCFRZDa.CwT0蛂+IYqBK.K ggS%.ۢE"UtuGB:lR==JRBBv}f<{A  jZk!:q,F\p*K |*bIN8pDt2 $ >)|Ox=M?U'Yiߣt9$VH5uact1*;V[rqC 33Rp4۶vG@_L (CZ,UUx37$NiEAH510Wwwo`;6V;|JgH3R.*=ɗJ)ZTcև %F'O}:̜;m3K ,\i"j 8ˏѷ7tцe%+eG1 58W'E].2:<),q:Ż}LuNGWZwptb:O kLl߀N!} TvoMI2HS AG tpu?#¿j@4_uH#uTIB` vi `B W&!ȷIʫj@j;Դ;:pඦ Nl&u. yv`:G"\~I*58))Viu%'z@x%USW;<6Ti2iI_]4ޒdMtZzj/=UX #"a'*y坠ц?ޥ"%u_q?[T,WMeO[bE %ކS#9R%)Oak\V< a1@(1_JtU-*WHy`F;~ddwVI2;(q}RĪi%lQ;"3+vG*ZcBmޫ3`Ϙ +w&b>`.i%L8"z@.O~eAsfBt`_WFNs*7FԱ\ɒ=AfEX{$K,u-gd\n %}GyBɑ3f' ]"#feʈ,VpDFǂ*QL,Ogԡi0#2v:㼨0p=MM} ms'g" ǔ.א 2.W mQ\홉3p՟nB/vvz&Ao(;fX'n~.y>qyPFrH3O0視bLn$>@ wڒfK%DyU6hr J߲8 TKW?Уo&9]RGZ|OH#<̑_6mDIhӹoJgTऊ}#+cp2SzV*q6Hn502KȪ1ST֥vISFeg⩬5PV 閄LDtzʈx$3UCgQ00"eۇM%V˹~c`r [;n䕢n[/;c2$I'^5ؽѺ6U !Ky#'!/IɝNH;T`l4|``$^х7׼?!/ }4#YoVNttVNf ʴ6.Lk9/"r05vi>[zF}wo#* I%=$GGj{D!Ȟ6HNpǑ¨Q6 0=1*=vݱEul3Ym ۄ_iZRjx~#Iwpߘ^̀<VC _y8s}bwJu_G)@])v]pH'It/ d?pfWDlqs?DV2l聸`C4}˖nk!T~vֶP͂v={\u|EYQQ{sB'o ٓ?ySm)#6b*4;G\,//H]5h%9iU;|=ctWNgIvxw=tc-t*OEe$mBxUP~7#3G_̬KA@PY6c0=FsRHLRٙslHcrZ/cOYx8`rkm| TRf+szIUDŽn0r6ϫi-He%q5G0u^S!OY61DSl9mm.zTAOv[AC av_5 LV }RIy|$"rZ'em/=oX(I^H ۴C. Mѩ9(kσ.QhЃқlz<`DDnrKR5X޴VdEtYiE m pniŌ V9F_&v52uue bfkp|jgQ$0iM-7~?,]jBľTomCLIT%fTfqQ K-ZYX)]a ISfK% 6>Vrī\kڿpx\̙Unlbfg"c2.D~fY>Q)?2 W}=,mTu7&qAQH鴳sE`ܻ5ka= zy(KN8b Ifk.m ՚2=Hʄ@SfŁy'==̃)罚M,biؔ.hطzPM+k;vg6KN&*T:=x J=QCʌŒĺ&cmĞC )6yc+~lw-` Ռ KKvv D,0;)yppĕʋJ mnf[ ;[('ucq$ +rDWMċyZ$ %t95'~FeLj0kh 0/Y ^ xVi#ӊI8ｾM-4cC-{h^0F/D/%s7:0H2BPs&ɂTBB.VVW;Vgy s87D;}B Yi\Au*))/pMXp u N4AFp(/6ͻ4vXAT MB\$ Xn% )@#yAњnJ q@gbUɘGO`%űxvKn#r@j)Sr2\s.{ 2/ +#9̓^otRhc)\9*6uqub麜c[CfuOmܸt53bzXw!kчeen\rpu܄OS'̆a XlHqͬ20ٲ>f8Ab ڒޒƨa;A ]#v-\D>Q1SS  ;ct6&G?u ;֐GN*{G\قӚiąȒf(C$D#bgeKӝ/쇐Agk>MWkWj?'tJ'a 8κ{@0}E[+J(~!ߖ߲>0#^RG2r_`)M̨> 8lm#,trSŕ EEz[=\|85JD9Xpϳ)Mb6G$] obGg.*a{O~Sr%\zv!DW5b ^8F{bb P]|w+*7`%ӁtwX6oؤGᐓ~oVz! Qr%ނW٫@'U..Ǻ +cmmd)ŋ1v/Y3ESD-/ l3O,M(B۪7-q *.>_[ =0X{NQէ7{).6I/'k!d~kE)=C@.g$|ْHuLo;f $xG3(s4GNBjB̧HqDe ?ju ckS@;!pMz쯻xu)~Q ES?D0zAj֪<"1Kh,Y=DbWn;N|\4YNd;F#rCfc`3(;3OVhsj@ P'$ |EsӴ[Q)G>oq0,'(*a@=bحQJ'C?8鯂IU: C`2Qzu8R_%VS<0V蝋Ԇ)D,y9E `•˛-z57W[L!JDAƎJQ$"7BQ Iv 9Y MRK\cٞX#kQ3.Y&FJ' 4Xٔ'KMCe⏒:` О8M\Q&t(APx?*(b3j @UaYF HO!F`lo\W& yyo2|-їΏtK¥ݜq@ ;GT%&-ưm;28NW*)#Nm#7 ݝ!&|ifM`[vf@d՟tqIv2,5@<ݢ;% ԛN]`aj=1%F3'5v`4n]`EƴV߂)g)3L?zH%pilHp~FDrr1oq*D^Pޣ"\ 쌽" .t0#qB݊Z4E[*XEZ y/m(OSc8rYg74derczl0Eil=}J7 VU4g &z'Ηe%:LkC:FJ9i;= 9_>c<Rj~)5g./[x2Χ_?P;?;살w8Qzzi ѕ^DcșIn[kǁ3gW\Hi,G-r@5*>:>HH iRpv(< $-} EiL2KQ Ogg hr}vpyIN)n# lsaFa[=t(l*[ݙ$bCu4Ӛ|nyy$\hQ?6DgUW|Dy3ATS:ky~%$G=8 vFо|'`O72Xc !/57taJGFgkdO jIzea/- e_#joRRgW5`տ$z,cf$U-F q'L*DҨԁ 締P,:$@`v6O֋M9qPHROEuuO ڣTH:\ z mGw"^!^;>!x:6,*30,݀Y*gŜ2mMR>9ZM< 3|'lv麂>̮B<:XR60Gxڟ|dX; YBdY$(v/sWAB-..B]8<fGG鳁1C)3hT%EC U*M^Ѐ4¿2vNfІFXL)q݊&a-~#03Fkj\̘BЦI5|BK%z[2Ss/Q[ߵ7PA|8+ٔuȨ#ٯ/r2 ~ >J#ND~KMc1)kt^YG_kj,%j. gtPZO@gpoO%*-:ԯ `&iDnm9*ɐҜ@#lJ4||1|9 %pWyҫ+Mvɾ fF/[ Ͼ{UbW`EiED$.kgZ\B@kV@Ӈ,qonR?A?T-ԃ/O ?b7#}\((IPdT:1Q[x9ܽz ztnXzXU-iZqE #N{AVf떍.]>5"N80Ts`Q₽3<B|.3 p|qq6zJ24y$O=K`~,8Hj_Ix .78mq1 l*^) Bu+Ue6N#j.q;a@#LdU3pqXz ΪP)s-,a?x31=6 8 P?ĎRbd.c׻Fn%&j79\{5ȓ5,BAq- v& yb[q]omEqTz` jo2+@J|V(1Ɣldb gР.EJ"{\Bŕ MxOvrAm熻4~"Xy{8gu![*t:<]}$e$pA=v@lzum*ye{;u;mۓ$y ؿd_ ""'Y/wcqw'ч>58Iu=䅒"'BvA&q k23GygcJRӆ $PU%<ߺ#g`4B *hOD>VI̜Ƹ$c܌l)ȹ=}ϣKY5)S-W v+:?&ꗿMm+8MBst1*B khQ̃xfCT)T1R;)xU8{u;TZ,e{eMWnbfK)@(QjANNCn:2 E;5OixE6T1bOpѹa *D岪&v*4<*ɵ 0BwϩaHi썠0BRܩp)bik^mX;TOYt}/&YMxdlIb#}9cSjO.f[tF8pjIMrbF=_@J 4X[، | L0($SҰ5sc.+AbeEU-n !!l=j/9pw7e[ u__؄>+2a8Nn|(ℿ$rJYO<Orȱۭg1Q"P صm>c|;bv7+]Y2S Xhz&ٛpzX -AQ;#H=2u5P OMُj?.`'<, N]iB<)m1Rc׭gf{-N&=IW*y#=/'s m9>+hwP -jOHm`o#ٞgK^Z1xmmRE\xʺDJjqglcǞmu.vU @;CvU:56i\/*mgC)1+~3ڞrm%1׹HtBh"r靮9Vn K~UmM8AB^ ~|O0]5}<\Gv} œyINo &Go/$v|?<&}YR:!]m[Ky,wS A]0*5Xm/^jœ84BkNlaeNM-95ye ?O-d֌uz$@nE2u@W㔓P&4Q8g Pͷu%1j bۙ';ݬD@?ܷ̹diAiAY#PTA@vFVat<d!W'|>4[+P6y:cVP+ hG{xNۯ ~*o+g.8w3)ܨQSlc1dEhA;Ɂ.{r^C4g vs/fxWO5J&IxO;SKA=7h+ ;h궇WsyV&i&7%.Hqv.`oޚnMQ, "؅  m9ц0=>:~[/1xR%Eg@)&mƇEQ32v^ڛF! c}'GelK8yC,ɪU!Km"+REEp~V8司<W}~{WNVC5j N5hf Ф`l=$ğ >Ip6qn/U\=k#AtN9"W.xoM8'2XBgխfx aL#᭦6R7d~x%N X8k6iFs.kտ!C41CzF*++Rw'?;VJ'wesnuZY'9~Hu~U;Ǔ6Pl#"ԁfغGowۯtpTIa&=tV3''UG$8|};l>RƺN gsPm!4hTC~Z4۫Y7 E|T_>@N(Zڼ89aA( VC3Ԓ>|!,{OM,nٌ,Jt)B@P zľ28lV2P+x\g6]{+R@^S(Z૤ݼ[uNٺUӷ\'GHa8~G<ɧxoV>sd$u`Qt7gW7N3Gd:}"DG.(̡CBFEO@'̓EB/gM+?1w~s)PY/"[N!'Ǘ(2"O1.Ѓ:*!V(Flx'$ /;x[: LItTB0"?[ =[ML NXX ><nȱ i,/ƐPLLL0"OK GAo[,=4'0H "WsIv>z{<\x*^/|5.x而Z[Ca`,9H d >J/TlCSY_*Tر`!aϮr7Z+E]e4Y<j/9tטL'MK KN 9E?OP$ןLh9\ +,zL}s_S7|bx=Z ֢+Ҟޤ5Y8i+scƴs( 23u7nA* [+MU9(r }|ml/g&ˣ8bh$O A ;= ⳵MfR4C1tä΀v }@g] ] oz| Ea8x}jQ)Hˊ|M47YBI,kIQO{]t۰PeLJ-) .EZAڟ2svm& P43Gt *wy:Vb%/-j:-ʍg7jh/5ߦ B:YBx;<^ q6TKiG&&E%!>՝x.mHn+֎nJ9/V'vzݞ<\ƨϩy{  s՝-06uK#M6?Mh{ vPm407 y;޹aCSUc@t\ z>U^1x`^ȈqfT/Ȩ ^5iT-p||w= ^yR\c"^X(G?7?ˊ}7{kzH$ArԜϊ]N E|yQqBy|a3`pz# X.N 4`掆Bͫe&NVo5niΕ`vsg;c3p& d6ĕz,y/piij:qjfWc;qP4]ʰyJ)8jݰ|L,.n ؝ K??;La6*n|G:z;"q7t"ܹfg*HMhP,RՌ 7_~^J{Ns&$_'k!O9lAeZؤsS?D"cep~dW|Hwr0Snbůr4:%=P3&w lAH2k*(@)C2>_Afp^ҿ [H9<u@(wbnWU<. ?4P5ͯT\~PaꊓztJhI艗PVq?Կ( esgsUPPZᨯTo}\jEoAY_͚c*z1Ӵ6کuOJ =h% &v.% mO[6g[ly`,:r:ZkjPJoQ"UhI|8-\2<#x0ILyQw@LWs䗘5?0 =Ym|Qku չ%aS5&lRHNDUO\Cvx1@g):JJ%-,~_b&QܫĽs LWw|B\ n͂bXҎz" e] Lj L=7,gBDL2.Û@G ]*qz}'AF@{6f (ū:8x"LOoQʯDݡǸW~΀2T\0h[J>|;/Bkm*0 v|Uޝ>õ FjFM,j(f}@g٨}SW^:oe3ARK z*\\#/H?m!’sI8{덭P# 80vKKMPX#٧aC:3xZo w+0ІwG:bQčDW<黡dCeYmcE};,LB23kVJĝx>4Z@qrIoB:2=ad8NįI2)FP54yHևqhJ_X:m\g^yf^J9b=F þy}֮pT{%@0րDyk؟ʌ5 piW<~z%~>JXgB[DaR7Jb*6cNQW,!.[0P85~_(\Z|sj0.$4%7>Ki_t2 ~klA݄rq_Uo ޟcˊ QOd^4uђZ]HxjCgZsjʧdSQQyP^xi]kCw91vkF vW*MMml0k֭AԾ)_@ bEtj6^`my" 2o- 5j@мjа8>4{\7R,ˇ?P %?겴zm|P,a1qf pw|Ȕʐ7kⲹZJ'2O@_&kN!cB+Sš,a[5]G=l9uf?Sc2ڋBsÐtg2Dr`47pܤtCgEn?ۚ)B5^Le+CVR(BE@j])n W"Rcnh9B{H9t3Z:+TIo665 cs h \0,cb,95[?E0^ֽC֕4(EVЅf_+{s۸€m }wa4)+^p1ѫ Ht{;SIyh hpcU(-`wBMI%;@ ۹[ %a_\oX)Pu̚"e)ɼ@5GRZk/1_{q5xvE:;{Yj? :PZ;֤6jM 2}>@3uYj/ֈ>z1kuK18HB2i$crJ>W"-F$%j|9ϏDqɌf:>957ҬHȡ8DG'5kd`z8[T %7_kc2"uW/rwI BIy{;I rP! WmkÎ0Pau4DaD5@ FokpQyM!6#ݐ˭%p&{;A/e{鵬X)y7xGL@uNͲ+!d9t,#=w=6'8*tЕv>H\a(Xv-KDvbkCgbDW^s Mh=R3V0pY (ZiMr]&9!Y-g cק&ccn(nzb%)|.?@S.&H}+t(/6`. z1R,X3n9XLB(}Hȥ{PIOF`,%_7yōTCf[ثS)ʋ-eՒ yrRVvltgpdN_l7vxλf)}#;{nЯ`xX&9-K6aiOz$vKjCQ|KoY5#.d04-lhZGp3cW2}֍*ܵ0/ST<**'qe|ꊨuk sZhǴ*:>,DoyBo9igck'gś^,O+hdX\8wtH٪AHlBAcuIһΣYEcsYA\j-`LXktА' B)斖ZND=!J2}@eBJЯK?[@'1d#+®ʵŸi~a"ݜOQKWvS9=>:<8s{@%G M )G9:l7/.Cв;\ޟ"k.l; 픢+ w.=k {\Bbzi܈Dhm\0z-[7*Xq>*]-zߠIlkrLy6/ܽ p귐(I&3#SxYbxyF|qxCas:gq<-=bӽ%\=c%Э+ؑJ 1m?QD9 4oK]!do+;ዕz½cśRѳ_5'y#AɱM"zԙ 0R{Hݚ -` )@;rTR'i a(z;7sgkʫaG}H.j[RT3IPE}(V|>  cf_3,=|ð!TӜ%^Q*dϝwm)grt'UN|H<1@PaV֭:9Ժ'~_:ٖwafr,km+[ Fu]1/=@/ (xkn+A9_?kE)4?MAO늆a)L D]-psmcV[./54K]DVuO҆ c:R7PgKrSsG'/@agBQAe-^T&I BaN#s WRe>PG J^D?dk/ ?,v~敕?n0\}$уEo]a.=,̘$ ȅNo#oigpfScCrx+?Tmބ;]"lI+y8Q]M ,Rn<PO[/YNk6jW1 àbDi LA;wUx'(Klv)i{OG&^0`LOS񭓶ip"ybղ(2%¾%/|J'W.I;J[Or9S A9 +)9 K9«ьGf}H]> 7$Ӳg1uVMG8܊#f ꄍ;x)gXD a R[PKp mV01Pt̘U,fҞع8.ݥ{R|UH>k c覱UJBGw|m[ע4 px<#0zXKb u([\L r(jMECر cJ5&|1 #&fr7I"̡8kc0C ~V6/ (oZ擩nB1 ZX(P*'710isO㢑216\knc1e+yfBXYne q0MF<)0 ѵ7ي R=_;c@Op{GEP3=KDv r2!nmMiِa;F_6&ŏҌvq"s>"V`Š\Dλ"՜ae ҿIlgmK+<8T!'15;ʆ}Z܈~ҟHRI@K Ƅ8֥UՐ*'#Y jsUm Mb84!c(y Nsv 6>cyB|2z#ۊc2a,8mFFiCKc&^R?dL ] L S2|XYN(~ջXmL&ugB[D9%) g`OyOlρ.źmd^jN&n@"}%Bъu w?0JjDݣ+QHWLڛo 48:L,R}*,;'s(nc#գI)g`tdIyK &WDrtS Ϲ7}teX]7O3d k"pIUvS\_V2E02Gͷt`O2<$.|^"ChI 5`bKărlm#J|(I'EPmѰ:^Et?u]î(pZK#g.L*j%].@>3%6;#{֟[F=|IOc36c)}lOlei6M c⿏d[akB1g/HkFڵaWaFAbs9H ¹i-TZ@fJQe里ș{Q &# ƒ;-ĬG,E|<ꡌ5#jNK +*S$C:jUS& :.#In&ߕS V0~Mf3k 73LŠ)Vp ]9’^M@DΛK+jP(}wc+hmo몙w&G:!9dP27uNϛY4TOxf@YHe0*b埢=80&=C>S'Eϟ-t\f`AyxdćC3"I^vD7RToT$Jn)N3[ z^B eu~)TDDJіBp8TyL!(~7x5fc I+ [@9b]Q0p*t1'5;M3"jJ_;$j}34y^#@_Ge&"B,Ps؄Z߲Jvg3MYkȳړ\`UAq^]_k^wEȯ 6t~Z׮ B!/sWnn!n&O|ogY!rN'u2^K+2B_($̓faT?&75Hd2T]Hk }I;#算SejQDhn[X:8yeim~PٽIpNhxE-JgR[6dƁ"?[nFuf<} !  6E:>˘XAw3*J_k<+9. $XS;D\v" >0$| ˍȺ/͉=_[BdG G2Fw%^DWc_ke?MÈ7pj{t/yWef4["] ]:Nal6z 3KUQ23Ss fe Հ fӥ]Tf^ϩe=U"N3 दslr`Uu/z qJy3gr'OAPM!~KJ 8mir{gof#s@B㔨dG0R~: !,8dOQw.sI̍b1o&{D?k9 a?C5كRzF\d!Բ"ٕ r Xqt0A! 34zUk}6U ˶iTM%oi>IbaؼKǷ$6R459ee8C}lG|{T5?@oJ+k@ŸyS,XiI!k&_)PV(7\oxYD` 3%j0gj~ }E@%ӓBm -ol[#]G[5_5H.PM?K8E^ޞJAᢜi@1h8J4aĄyn-P7aE,ЋKӱ2'Ě.%?CY"\+% mojY)gK:dIȚ`;2?',[zdh)]ΣҬ;[>I]$l,x#\ep~Y!QO&v݅7a$-.|e]%i#E_3O9܆h4X5`3<`/mk'c+FƍG ]DٹPxzozHa=x,4c$R*&ޡMSyORde@F" fɪ b#Y!(&{)m*o"9JY ƇGJahlQOxZ[O_gze|qjH5*yu$q>=ݔ^ [J[',?/?nAIܮ:Ć@CHwv(;CU95z"A"p^Gl2JjTŞI,?Å{'j\h묄̚n i9$Ϊq@x" ~_&;FPJ8gm.Yg$yx!Nn!Ի(twT-ZcRg.l*H6jV &Ҍj. gL&b@jQԛMK7\SUulǨTr A,`|FF͞ʛxF푁fYSmW& >ʦv9hSFº[mzWu˻zKG (:D/"t 9*KqEL%ԃ`$#dJl׮ui]G(o5=9/Z$ o +J^6~5MvTIOsh/uiFfL>Ao0Ck~d6޻X2,}‘weV(GM*) _tUy,`Oa ,"f+ ۰آtcyܱ|"`ZxQQKDU!gd1mȻȫ3HwdܴNTd+6o[iQjƔe48,C``e#͛auŒ7rHL.42F(% ^ãqw;Y>'arN0oaδftS峣r'K>`0''i9:˹GmDh5#o !鯙H'/ƼoU|]KϜP8Va1ZTƽ㎁CqHWvrd$+fTNL]_Yfg8x K펱]Qw "A)+V/h2ZPjHxTV|$m,2ib@ZBQ߬X|ǭ#aIv)UtBxQmُ`a&O2f:g ?e`0sbV.^ uBBݽ 4.U?:D\h.E>u/,SlSWTy utZ{Rr֘IdG^icG%sҗB'.=)Յ HBE YG3K?ǵcM{\ bw fPr) ?N,~Q6I O!";Υ@۶tZ`P[3\@e*@Pw<,o:WJDfT[א{FoW ^qB^H8F+R^ӧGT]OBi_ K\99a©ôfxK7PVYe(#Z_@g*aέwDnWe͘TjtD g \۸Dta@jP}l+rT\Rwl) TR/~6ʗr33K$ͧFp侨LdY35g8?^m]E[snR)[ysB<*4,>1VKo_Z5tK c{os.y$%|mFw BϪ0)UA-Pj;n/*#.iZ2 fSA *N ;J_n#RUu2:uՔ0mθf_k7vI)%:)c}Y&|A`NؤDΞЇccGFpCHJ,#B%Ldfmzt#YuBg}&ImKUz:O@ׄtWb< HEXlXYjya.!98JIL&w>ϒ"]c Oo(Vw̭s2B7'&p"TaG^djw_Tq !Ȼ':[O= I{YkXBH8sJd-?_Rjд61B"h$h?y,ȴY2A$|#=㟔)+%]9#{v£&A$4a2;jbZEVph4 Bi`E`"U1?M)i7Zu0%pM{ bi-(^R6f|А:ba)nEkjKf8>r̽C/$ ANwXjJ{g=oK%h2ֹ 5mJF\O^hة8^ g%љ*)JENWgml!T5`m^yBI4(v7!|8Pp1i*m_ImߊiL 1'" TN K+Hp`ٗu@DžQY𾸌KP'NO~Ux1˯ۚ!Iq/,xB5R II2`QɤrF.x4#)98.',;l18aXS_g{ghk3lO`KCQ3ob {jht/| k]E=[ *"z ~!QLB{#=Nϋ(TtU! i4g3f 0|?=Qi(__ݬ} 81@i8z DZh~i,($(I* aF !XkٰʇL6Rm 1x3T2f b8N,y]MݣjpƠӴ>Ps?hvNUa=OM.ިXhlF6Q#։In=-#9ꐟz8{">K4ln:ĆQbRU T!%z5@&Z}=f^X>su=r_ oaR R@՛|`G==.eOٮ}|:rB?դ*X+~$g)Զy/wWi*Z[qEޒ*!"cwMR횒[eߤ)jt%9+PtM7V ȣX=M!)mZ&jI Oi(:{Ҏ^8ġ) ^aLQ܇:#*'ɔ_r@\{Hrq7*\F":f2#-i%MTŚ;kVP"9ɖN/Ʋ@$;Y SP!%;Ǖ]jbE8[ ?A`%U/&=:SM =xER5,<[w*gqc6i"[^B; -3"8$7o:oRR3B'{+8q+ Jp_&%vj"n4}k9.Gad6ip}_ Y:b,2_SyY vwM "t +,rxܠ]Uӏ@n儦:xoN$)u8Fz^ʎQ47/˪9]c8zĔg7R2xgz-%.oBcF>S"ڭu,3,T$#IP7j2o呬)#tp䤞]'C9pzk, To |#JVI/PǖnP[pcZ+{kYikVN"䢸W#Zmu8Vb%zTCe-0|4hhjÄ]‘^,rzȘ"x×Bܦ̟O᩻"^Rp*aC#8''Og+[uX+b^} q˼b"x1j!] 2ީQrA <8x x>7[G  ,Tiu ,qtOh2xE2,]6*iyz(HqTİoG>ʐe\>}Tu 54h* l @: >ozȗ6NɖfDν2pY10sޙ]L| gcm`eYQjIlj~j-:FCU/)qЫ>5C9k!H=w[{HĞO\u( Dqk%0˾}4 Ҍ&霄D,nXM*g%-KibK jm)p~"T+i RSBjnuxg<@')ĵ›M'BEO NgKg0!G"Ȯlj,&t!;qo?GR1iꬖ{ISp`3Uݏ,%'&=+'3 J)nQ]ڝN0gK!C_D1ǫ At7ˁ&K :qmOw41g^e;&SM3'6v6݋lvd*htrC:hi]ʙ*H\8)]`UklcQA"J2g4$BH!85(ZR,TaCbZ{;$bfwQT |c \P9>R|v(Q[SMhm%cA`1o聾0<-څIpAl]+7?`7e6p*_>dN퓮jړIe2H )7Hr-*B.!v˜o-Ճo18(~ /O厸kEw|6Z/g yJt],)J,~h!g{]:eULLL{*Ww5>bkf-JrF H(GcfїX49Þ>- \JgfnHX–3!A E_RdxR[rzVvg(X2QD M$dd7EA׀ǎ ]r}i72e?<8$n@;MSLT>bzנON.7P C/e-{ 49ĔSKPy=Dq| J\Ъt$T_ Yt>OԜŤ'Ti&$F|`IlX該Cl#g}pDDE U@ER\l7hwdq0k+ǵ!Q*G.0C1;G7[\aG,i3tVbͻ"_?BfAڍMMJs+|l: KٵS8B(9>X#R 3:T_`ɠ&Hl~wխEYuF!a\ gRWE&V?^J=9*lMd`PB떹)i.u杲/Gș$!GQ 5{lYmO2VZBJcNR =eCx hUطBLp)1տtjdx?O}wf؎[z@7zal>#7&9q4)T'Mp4:=}U~>'z:-UQ3sȍuMYGqil?݂:/|J h҇je&h >EdBկ QpΤWMm՝ƅI{KH:}u$RQűIc#{ucz=kT"\G Kkזb{"đdn`Mwsv0[;["g=&8Gӡ=Qט_9$qqWIzj8Hhq0F,(dCH^MQ 3qiڌ|e]o긃ֻ+/kB#-~S{ġw|8RB?Cēzp>you_y2|\9ɑԥB BzXsYPX'Ug奅YtJZ髌A0C !Ex7IzQe&;-@¥9.:R 7%lY gdH95D-zm^C<ɱ(T28D ogY| /1[JqMf$Q++Js/W5:cZPd ̺Ϳ6<7؟fyQHW~R^,r\NcRdK#B>D﹋ Sc|{NlgLfO!R 1?2VFN(Q9$tDgK guE>YYb-95A,5[t3AGw)bsneϭ'&i[Ay3dc+Ky3{.kclO JX^ N+ 2xM +UyQ^q eqf;^5á-*xGʘȐB ])0J{:*p3ӎwoҞ5t:EZmEп'9GNHGmwq5 TmWM=]c,lHŏ>KDU^Cpw ݞRNo529{t.GbwU[҃ àPvȢ/qhK|I&Ѭ,ޠ^W&OC !X IAltҁtmv\yÄ!;V&,T@DfsaI]GBbUx^a-i(bZ^?"Q xھ'|Fp4/C'd&.xk#?Ј,S]cS9]Un(Alcj\'!I{g¬XU1qaM=!:5?wsEC$4w$P@!hpMf__˶?n-5?\V԰ń׸h*YFtn2Tɬ/ٸ"&.I‘~0DxMvLOBG NUgl 8xt%q_[̳e-0-~L|Z F6X:&e2e6e-:n'<TM < ; xQ ]3',~a@EH:k#"|9F49y8%6(mְOƉ4=_ Ս)S9qi /f/\I`f^F܄*o:yWB_?nZCNݱ.~sI,+>x"w{ (a#QZÌM漈 E@ ! m˭UWXxN^,;U?9hORI5%a|7Ȕt%ni^{ [.@DBQ~`X.0Whv' 0^ [,jp=&Z:nSv!kAzW^o_QOZk8.͆d3sErOL}5ґ%Xpk|\4#25:=ݏfPdJ]bܽe]V:%S Gtz;$@JtvYQ ݢ.'%Da]MlӻxtynLxYbiR?pЭt~[}d+(4|m.Auo`wB]<"u?2Ҳߑ^];Cẵ{YiR=dn.M=&p'[r"x~O`D6xbL&&L(vl3jf3MK{C}xAb#3]у]S1KJTsPIӭ} w7fcpK<]$yPj C2itcQ]᳢;7'KȺ+[Q?ڴ{&Kv DR2|BߝhZ'Prߊ7(^45:/iP|mY !L0Nc#U+W}Ul;U(݉ Ĕ%C,wdka4KMo؉!MqJb#o/M*QtIܔZȳM>-gGr"paަMQ_HKG t)iD`m52| XdtEaܩ2?rvMB5x_ s HTezW5qYU*+b'슉FTu\^*!-aNq =u5 ||رMųC?5GaH!Repy+j_03T@7x6{Bebsg6`Ϭ3΍,kv9 K#Ch`#a*q/J2:& %ʼn|`\kJE7vƭwЮ6zEjDgYs c Y*:aY nfK0~&_ knW4}3elyo6xŇ6[4' VIc4;fI=#_*FF@ZKkˤOrHu' LI.Nd} YPZ%_?x{'YpADߎ~e |?+ómJЩnt {OnT؆,XVFZ\Њǘ쾜/4t{ԩ<$lL#s݂Y-ٵpeB)_.5M$00$#Fh+:be`[1xH d;.Qf)>Apn<%4qk*y$Xۜx P'x,yɚYҏȮ\->[wJN=2mxR4VZWc 'UYc0 Vul]u3,$V) g>ή+q̥\xUdȴVs j&<};`d5u.E@X(Ӹ907iprTw Lr.F3gsXǙ89>azU*65D L,|uf~ fܽ^؛kRZG@sU$00Xg 4 7Zk.\7\ F&,Dvch,n$ŚlqR%e礜*h$4b~zn EkhHˢRbfmbJ{fdGg?MG-).A_=};( ލ~S݁e6iCưQ72N.C448rEaې5Ull4)859Tw&-v#L}? ;S0a{cУHu{Ǩmt)@ұRlF3oR^Ϣxơo8 JV%º=AGj-1{\Ym mUhsuJR\lBF&<QnW-kf:f7W*4w=s 1!QECFj}!]+SO=+ u6j?U4ȺBڜFF>xU(]qÈÞx P7z7xL+57J\hL4&zm< %) g.}Jͽ#It@6Wu?ZT,\Mh`y9r#KP a,7kX IiC5r^>.~G۳`2x$i>% LDsE\/5j?=GϜ8, TZ07%aq&ЬQMmo1Bf3EEiBf%K^DEzZ5t]IAط4%=''/aKW㺫6$`eg#vb('zԖD _p:{mP|_7UB XZ Up10T ҭպO 㼜Yg^.m?]r} Se{WXW̑o pGx ]m\~ &7 .'MnaK`A/wYEr%JH!5#; ‹834\z+gwl\aVɃzn#b< xe+s`eUU:iU8L{Wv1 v*1 /Q#f/sqq=?DXRyc̙o*{"ZT3ۤR:.y6Uy*I)H:z'1|iJ@.cUDǧ:5˗Rkot׫3 r"miQroԴ_TZ\6I93`T۸[> sho?'fDC-7N,c !~4FXA+2-\_B6 h!r>i8i !s.ۇOblHetk"S5ycl\> ǻ'Ө X=snnJK3N'!:~ sXH$w#fPd2Ըb %/zGD'=Uu.Ib|z,=}}3nm|YU_WN/Pa83hIea]Ln|WG"!3ￊ0Η2{3 Ct>hNjSA/x#i,% _0>w-c9ZU!Q\N L1ceYl$`QVtwJj7LO)+$Q?*9b9"ƴJSʙ'|l#'Uƶ`Dr^ ;`hYIF2O3^,UItO}o([,6*0[ݸnMJ*T4mCqb^&aCPy)bN"_pkg:ˌE2HtZ(*!#T SmQ⧮*@& s"䠭Пh_ԃe_v&pb;| |~( ]8DiP6ԪOF}Gs>6!Q!5O ta>2K1i#GnM/!=:%~BTzѼ//6g p{2i&`S:K3h*mY}h2T2MS~zG8$~ G""=P|Ӭr7iw &ͽVo(b҉vCᬵ6I~˰` }nf` @Km~T) Vpn?VAbeū"t2s:vxLr>YVk.wxkIhYPa |i &#-ʕ!6w%nzD~/)ۭu41b~,=I m`TJ^jwNҹ8, R {A(~sZg"Rjdud˴ItUu&^!ż(MfƝ>ScbNgF_|:8BWUZoV`$(Nxv-G#+j/g)fN*\#/ZO9-VcYgD0lME;kb8rcXF ''KoDsG=XeAm@p5M1b !LS'T0o4.|VJ2iOlՃ/"غqޠ:M7rG-}Y+CAc~KXtf;]]|+6eO$GS޹j򎺫Vys̡A Ҵ\Bv{7g ܢZ<?<]:֣ʻ=.9Y4%ޏwL9%8rc/bH^S_Hē('"gdXwEw goijs&vً*vY nPĂZZ>gOOO&!Q:?vʨL늜:^t+,u>~ ITT}XF:n j>{8jخ$hitZ{>6ť!S6RΥvWJ<~֪"ߜl]3#.d˕seypUjF=IsZ HٿT2݃yJvSbHJH `yHAc *keӖQ;<9-v2#Qoy3JVrΦ䆲ȦmBFY$L=l[A1+/$Rp,EVtnQ1 DEIw*=n=Jus-G:ZRc 5 1庯[ɢmPOgޥ>de3wߍ8o#ɳ:G0#/DsmboWNۋjDd*61AW\ C/뭾S2Q)vmL,-?8IN-@>OFlGH;=`*͖a|/TDdSf@#<{f5+ aƴ u0K^1HbC$]EdU,!"Fяͻ'f6-]XKO3#Qr7]g~e$Δ'öe)y-lgq% NpT/ҁ!DMT^+rգ}PW$,.t$q`em匡ikٻcVn\]p@Qk({ֆ+Lӹ~~*D*#Y`QJ5rbfWR`0a^j,^ߤ`\Ppk:M DxTiرӞ@Zaox1D*zސ>Fk/4yP/HyXqڠhPcPsRQ狦P̽0X0 =ͣg?ݶ_!<,lM?K2/}71sOzPs Nf%=j-lnðq,GҼzӚ5P!Z&':M}@ykm[or<ӭA`-G,bĹb5yx;xҭV:|j2Y^Y7<ԛr5; lCg.?3;=jlDDkFhq)V2*w`R(m9xrh%@ ˣXݴ])(asdk ), W, cRs!=C7!ekNڭka#cs CL5Qy(Upb5dmN,Ř믾lmB'cH6Iw_Bn<PHLo#9I&[A٨4X=eb%?)u\d1gގ6d@R.5"X=qX8A'%Xb T ^Obzx&}nEeėchk*2tee9ȚcfH NbVNl_X1I-2uB "{H3d($FLT5||AB ;PG[ڰ-ȧΝ檿>xJ_gr7u S.l⸤L/uql~D*/w`D_jύyFؔ bm#V =]ֵ n22z Y6$CƵ{*7Miv u>OMr:IVu+B_/(z¶aɽE s} Ià":#G;qm \OO].&{ˀ]]QNMzxR'-Us9]3W)y`yJe0tܐt| IhT҈3/RH~}W$pNc_\ta$h$`ģ l=I4"K64ƺ/kBeh0 㧒P69p7s ]l`E` dJAk;gF{Fr̥!D;Km@V;5oѢ'U;XD2PBtS+s>BERpijÀj L);%1E#7(T$$U IS7d ,f׾蒽1Qf!qha%pNNuL$;dT,Ld296"[@@~jV,hiQVhC [uXHV]P0,{w hWg7CEћPKnPe#J6×ÝWTX(i5 g^e6׹Zu_zX_\9Cܺn<mgPTY [{WN&(uDe6)Mh=nwygㄺS@Ad "Ax!&6Y;_6As˔yIp>Ɠo݌-l ]G(tψXu_1'񏍲6rvL"w(pG,d^Iw|Cevpym5: ;?]߭(Mm"/RmU3~d''9-:<3!ke'sR49:`;fGUA/b[Dq$u?j]%GA E Q-v9} *讇e#+>{YcWLr18k>0ìEdJڋYhKk `WA{urHJiz]*c˓D\22 c_ r>(M 3/t%! ))7/m~L wRїB\H9"f2sٹ 8D\O=>Ţd!vJQ9`{2߃WLn͍ B<{Rl _؇& \^Pro !w KVa{3"Jɭ>mMC YN97,/xxqR?'XM|uF<8ۏ y:9$cG-~{5Hv4\&mXo/=k2 u*&)*~@om} Y-t3 Qq!A2H턋s{qFGh_Z_RI۲oFC's%J TD͸%Ab'P3!Y33弑?`d\W^{1x:nļr^;A*zc B=)g\ܼrBv::]c0:j=72V %'uAolR P2uV&*= n]ܵ'!(&z-YȞ5a1D}v<2m?HaX1|ԭ~=6 C Z;jCMaRvSHfTzW?&؝`=/rZ+%9&LgH;W.MB=̆D 4 ,SAiSDOi9zyb:@ , rKΨ~ zLƤpWpY<*C!kD/ =GNn]_HL6ʨIJr%{+뫄Ρ!}6sl#|JgP!x>n~,:XjUtâq/u)P C0V~(\$#=/L%c37jIn@u2i׭ _g-b99ucW%VH W;L[KyҞ].`Ġ{\d59 **8w ~r[Q.go;ّ:wXR= ӗ竆~dndMψOD<Մ4[a) "v&zxA0ձU- j@A J25}U2B7Ȩj {0ET3u tFvSmFʍD[=!wdЕ+W3䦒1n?B/{&[D0ćUGgnIY({<-ZKоZя`E-vwGdz6R:쏴hخP@Ms3~tԃQY 1NG]NKfgv~'8KʈiIGOD$z>ώa7sdwJ,{肀&9A.^q5\^U \/d7kͷxvH΋8nњi8i=,ea![ zNɓ -OŦ`2"*}bC?]8ulI쒞,OJ+ބ.Ӆ-#QA|ƩzބSaӹ}̰'`0f4ـkMB?!#mIneYo5 [$̽m[m^)L5Bb5){׻τ'_ZIЙ؊s\' ''H;ȥ.I#DoԬ,^‘$[0`bSoM%FNP,kpWEALs0H)]O<9Y_G t<2f~eFEOD13Ezᰉ\g 5Kpȭ4DŽ> l7jDz6{G] BKk5{eP$?+o)U? 8:UOC}@2(|tXwezYc{ } ٢p3ߵq#!Hd? =Y;"u5%ޯ0Coz&Y`еGޠPH0c[_kڏ7s}c@֮Uw* x4^AiMigrdՍ"efg qn;yB Jښ8UL3AR%UTv+WY˿pq֋a}YMHFOr*7x1ǹʇ'Y.MHyS3Ϣ!hj܆]y=J# GjGF\x2\xEyeFeA6,cl*ȐndS+9%M,]"5Co dn/q~3ͥ^- s㭘d@Ȝk# 3X!:20[fy|z,*夻B} )28[;ƘkqFB6oA7#*}6cswJ'3؛(2bUeV#~|ή". <Z0/#8gl~X xi2\w`?yI"p^5pT.үI:tYer&-'~: ^s?7:̙)9։xQc~SRM]wڐIKM~uSR}RJ*WEn(^^~|?Cءy߲k/=r`ku 휠7g'돰W2/-c N╰6v#S:s 2z'62;G2&={~eEa^z?A"]_2z_y E4Z6'El-B!2tV>& [ˊ>w>˂9"=7 q|U8[i`ޕQy질xOK_0XD=py[RGU>'V`wq[loVNaH<D#jΦW+Ljn a뫡t rr  _w O,D`=p1*R?0uu&L:-mT|kVc8L4AR5źF^p)_B4]M_`uh]Zʷ%489E:.aucgZxg"}Z︾mzJ 7c лs67w#ԳLQw+rKF}x$¨[tΟR:-)3"|ԓ6^FHʊOm wMG]ª/ѽ*OkiӒF&cA \4L# I2(L)}+諣Ge ~4v9#61͕OTA_Opr s A"eGqfAwzJ믨,:H= Z?ĤG8cF`TD'? Z.)1IgIy^)!yg,wr7[)=m: $FȲ^Sab*GmЂgRVuU;o2yRd +M?/{с'"-g_ z2 HQ%:Ayئmw#ET{IJ.qˈE()Fy#ZV9aLbMgҪO^>{e/^9yggGzLa#]zHofX8=kG\G0c#/So%bʎLkwsSN$y^U% ĺM1CC8+6U6"aR"Ɔ'XҠx0Mz}sTF[`!zQZ0nS^ǑbnNpGp`WaqDBȊ{ ne+Ŷ ަ}+21oVCDk]f2OpO.ݔA j&ߐ,C.9;R-VQaLq)rӈ3h+)^EȘA}\:k@'w~ 8D:ͷi*AB\ WoMw`h3n&onZ%kS՘ӗl0uT7ܘ Y٧8J^+3̅H/?!o*4D;!KvN&Osf {h"pEg8բG]Tu=J al)Gb>juT&-QSX;k9?~`F-Sk8eIL*@GA {j<Ô~ P'9LR*Da8e:G%X1d(2G (|k 0W&k᪩O_sɼ',ZO?ÁiɄ= Y QYHmԙ@I$MwF-;l]*H8 Q YN{6Ro-Xzޔf)r'NkL'ɗ )򝔮֯GN529 Ӿ%4z6H:*XfMŝ2KIˁݑ@ b0If<.ڋҜS')LG'66-l梜=ÕGZ3(R$tft$s 7)R. jҟ-f_SbW[B QG*ɫ2]MMaGvydv!@}uH]ݠW3n>'4gh̰><=Я+3=0`3ޏ$F'Y N]}oe=+0f5N0гzj>P:ت&H[TFgǏh`C܈6 085_U-y10uIo"D6lHw1̒~b1Pg:1.$(?Y!lnt!Ei]8RUY0qM62wYf$ɶ 3Ic.,I 9t:ֈ0$$R^`m06CNVv<`{= æ1S/ֶNW,%A; t~9RSTJ%| #T 祪 t8i@h$n횈-lky >݉W'^W/t *>3 Op]fw'pM8$ pzN_X!/hlcuu͍Ó֒\n]2F c%hWnDɨjm|%EWF2 Y)%/4 p2b:UH7^o?/JN.1Z|YLy=g`TZMЀzeٓ5USJu>n>+LExXGjXu8'tQfuıY.2HZձচ(d"^ 7>`o1#,hf+\u|j#p$ ]Nu:]jF gT(WU5<% 7Q󸩈ubwI<:E$4l`rl7>ԅ8C;Cw)hTsr;+rQ@v w!7Z?A!EpS|.DKeDɄ\b -Rb]f$3,TY)㑎gF俷@b5td)N>Ee-5oae0F]3fv*=J7eeo̮"gP+mM=u;h^-A"ԦրR$ p A,#JSs3/1eu?NW 1d= ai~E PDcrFO@PqR&)(*n^/sA(s_f)妼4cm3;H/& y7i E!6]0DpQS@gL|Fd]rDDFT7=‚eC=Q5(0>EdV"v#EQYmJٯPkW!^GO?䶞]l9K#1yC?yaJ%}0!BʅZJmQͦgSn#D@#-ѭHaMYfUє)EOCZNǻKUs:L4 O)y+FG@6/*<E4Er\GtIL0:r*tʳ$r;xb!8U!Ȳ=3%4\ǀã2cLxlg(.-:W*s]ų7g  8VXsʮ[;9"`\g(C!>TK/ȉKKKQ=x͞BM Ŵ`7i%,*|i-s 紐8TU+Pݍ@ VgI$v# ޤ"u_Ac2i SR5H$-5Pz5CcSQ`m$P]s`+Iޟ_Wv0BW4lq# 9 xa kG+r$=Pv~B.f8r\񅆊י)g׎IOm~[q1}S!Э i%ứ*֛_k=ϧp 3\?/P3JhBwu€y% +5q&&'9$xCGXM֮&tz4 QS :F2&NlX}8>bk[YS@p ^SSqv/;&ky=1/O~>HTVs6V_&Y3&3;OdOzLlr+96Pք" c.|Pi|6a~n 2d?05SY/ 2; VufV دF2{,P-ABs=KKӋ}>*xČ򙧌 1Lf=x9F+cOiA<e AQ{r0^bZ>._h/:l/UV-%30W4jo${[|wLsb ]h.JS$E-s(_6U>iC}9Ӌ]ȳ Z=}cd3 \񘣃QW{!#\^~W`7k<߽]k- usx4FNI^ ³qA Bb`b>"CL<ŐqgTOC=5NrU}uˣUۮO,T'Q/ڋb<:_5O_aON,. P\T^%u$R{; , }dDz;pu?q[I|$Ŝm^2Rc_O^8Ȓ'9%^NHhA&^7MmzўA}y)=BzqU$}|;8/n ,w̲U>F_jg &>#Av*_#.CmMࢪ#בepd~͸rJJy^ E}{3ٍA/#s)7.` [h$eFr:P|.lJs'»|ԌL  T/{ҡ\QWE!;s!0hH8>0+šħݭ {Ѕ%0>SKKR.w(OsxiGkЈ ; t=;^g&]P>ZCdZ[q5j6Ia.9_~bVs: vcEl_8-6!FFLpFh:'!e/{*8gmP" i/ټd~k/^fa_0܀C ځHpuF~HۡTBT؃40LkDd>!]b}gÝ7]KvͰ`Gϛ0w lX69(Waf![qIs#\C׬h 'YC$HFh d7o^~+P#MaY;uM;$Iv^Cg>,bĂ8.8{qÁ=YwZ5Ci"0qYW&(V=)abʾݚ™y}]bˎ̴Hq_Uoy 6 ɛ״buV|URFQ5kg{}rɚ?h]mMf n$w #}X;:B" EJvp ɬNF"i\mooԵZkRuJvƱZ ;Qd!!i'PJUHӷȭA]2*OcFXХR?>@UUokHg`0*؞6s,jKunqrw.†r5 m Dv%Fvp0jv0fװtxG}bW<u/WkHn)& 'u ʿt~Gsp,+;ƥ_8㾿}0*-ӭ\N7x3Y#xI5e.fe-yB}(#+ %F!yE&[w!z_W3_a\RB S A..^of w dikd[xTWq)WPQ p!L_OH^يh c-!t%jֳM$W[ч(ȭ6`pDzN*%w}q +HZqُ Хf?*שE:Csv9 bhrtAk a-={}UAiMc_=7)ۡAn Լ[+l,1$mM$Zŧ;xqv*d:YjE5)y.YM$(~v iwьeƔA% ;KT}(?vwi CY C즯3;˽I15qQ-H}#mptZџ9q)P8\GZSmD 5`dY؁xܖxodgzgy<#?G.LѰ5|O: ekazYv}\mpszʟ'HC5zxd$SdCgT~R#@JidC\aUX F5Z2=[T(++ Q͑SvͦP^D/^~+xaōů&k +~9_|&Lh>?0o`s$TԚJ&v(=9 ruR8>WYF-_ Wd-mUd88U~Yqգ( ¢ߌ la9m@xuY:_LOzPi5-6uv)>6}lt[b%c;焝|IhB)X]?70uag/b`Xl `3Ҋ 7]ƫD {WǺۂ+"(~qxJ7y=Y1"_ ա&(*뗁(Xt"r?#|`Kh3 ܡh Uag%:X>m?JM|)}9 o! yNdB[fze_ dA7$a@*֘j A; -UѼvi[3,s!osl[N ~f?oٷj\-H׾J+bJB)DV8=.?᛹xXGgs`DF?%X\gπ+4B _5೛a$Xtɻj`(N{Pi3BXDz۫R뱷Fa Zwe_k^s4^5F(flA[^_)84}db*ؒE@Œ-A EKtxy㎡\Y/QԔw':c vc>#ݔ1c8iTZ }]k,[nwrd`E!bYh1s)g9/;xii.݈^" ;C, !h7vc<ӔdS)vB)P3*h[xm Mo6JXKwJ8áTV Sݓ* \шD=#JtҪ^KE'U và zm@{6dU9$CjKflen) a9nwM 5rNΘZ=9MZ> Aם%:u Rѐ-c(Mm 0R-o xycR0~/~\WCDiCSXnjbic' h@k(ZΖ'@G 8*~O"l]esC)wMwu ? 䅥|7g§s!eS.ƶ7ŊX@zE5D-r"PIA&r `;j5G@ӭ{Τ-W{~zZ)mna'[M]u/$. WJ,@#)s示dŶj-ܰ9_qQ[rVO'Ss=(>4hNPGHNrH ^!~Rb V7/S.LΩh+CLu*޿M{P竌zn1uuBXkM2>Yd/-jzNw=[ŒŁq%cʹP&~0nH:x_۷,ɯ抇'>=2N%#rseH(j7I;[t7uBZH Na[$*3~84<{yǟb_IyBKhldaTQg1Or720r&i0o !}C 'o$scen,l|/ lE{9:?)/jWz!( n$VʂDy]j1>U%e`*(/SHigCz?U\ ',hxZ ` +2<~˙fzVH]7~ɨA1?PO*`B=hT" t~ns<+U}.kfKd XN_/ oQ/L14!ƑS Pqe[[)W@"]CVM +r&^W^: >`0c6"4.Lr{/`a WsDZta~b-dH8$աN6bkS' Q@ :ñfPV6zm^6]h[Vvrj19 ݫROXNY|Cΰa;C_8OT1 Ȑ/,:↡&Dғ_ڛF]I,*Ybhٵd+H~ҎT[ 2C M{l"FJ<&BkFk@@D";QZa\fÂ) @}FA:N״"WFBwuk {mm'az-=@tۭlt7yrq/P BB/ɕK7 hU"%K9 |r|p&cV(~;UA~BEEZ7oؙu!wZQu*򌹄q,H_9z]ٳ ;sX+x>H~0.aHr {E?r ɜ^~}qzv5Ss MjU@ީÝ*P):pͻP7RVTQTI95َW)Tr`5v6D)_Bv@;H/#j#dz˕ʵ3יDt,o&Tm2K!%PO_N-2=0kƹ1T u8,:T]= v߹Տe*ݿ EﯗGohK}1Wit!eeކuNp7Kڇ!7ʦѶڥ'oxn,4TD-俩 @/*ٵCLaM,CRh|ɀ̯ϊq 㫗А 9Kzlm9ftZڿCrik҈!Nt` \?X&x6>N#_tA۪8R>r5 18\<~|ƼM<٣&Hy,ց5 h&xVUaj=q!c[|ʃVtKa 8X E-&?>btxL?ۧ$)dsmACkCS>M'9G4TABJ%!9qT(MYJUjSb'3\©1^V+0jhv wSn"V-) ;rtN/'{.K{}}ᆹJԯ4=3 { I瞌GvNB,UH`m6díhW oҧe7BrH>Y8w̷UTSeu&쾰HHd3{r[aDIJVxDN1]RA8m\n17 G뛥= 81|β8^j7Eo>'TiwhtcmGwQA 3Rpeb^09.RW3gV; o W()Y\7 Pt(0qa$ Iq .xֿJm)&9{W45NƜ4N ۛeF`Tރ7F׀*R񈷯K]P^^l'xQ^FMi䄳3;z@81@=D]mMwTCij )Kx~*S]&jl%7{#4iF p()0xS=3]PJ SĔΉTy23_0`YQ婞fԜDC{G[",k!Un~P-N5"X,2-Aªu^1>N̡kkIױHڅT-;2 a%džO-d2jR2`D(yuvNB@9ɦ̏` ׳p#l'u7mC|H~>'rW,-1$%8sWtt1u3Nte+w#w,VF(~[ fᏜ[ꥍ?g$ wftӢs k%С=m5o&,ZQ{~USF:U5V[>5.}{rI"~ﭧGS;ڌ^]edȒm&펡| IYrDe5=Y$RuoQֆPF;!lpV]Fn͚:t)]$kw*jϒ.E޿1~-wqTqK4 K&y cJv 2btY2j"O}; YzMOJA@5D&E)RGlɑ*c8{3² <)3[=B 5R < twBG`XVqY=8EwK{ЩYRE٤>Gd/ŞF#¨cBty(v7}]<:deJ;ӯ(rX- 7 ,эq5t/6*\4|Ҝ''KbR-cO9G__Qeb9X(M\F+xTPF(kZa5V.9qR!qwū iŗ;{ '{&qWj #o<թDl Dfb<2Eb;6Zzۑ8^̾~7 :I^j>ϬG6'=GK̎j__3UNF7FpJ@l [pmu ^4  m{uUG\%RϽg嘽!{yDnTVGE^ Hd!r#E۵>}`޹fI.M-E^`>kDJfyͤȓ Y,z |:U6 9/+0J5,*߻;3 ,Eyg ˬIoC7 OB6A*({Mc#Vwˮ|sSY8|>MW,($,֋zKz+7}>SY1^W":v~P{/,)䥃P?!}upZj!OIV\jdE''`Tdž9r!޹vZ|+<A P<x÷pŢATe͋+I8v:;񿩊۱DkY&lm>X"'XJo+C-p@3q%=OnےHA2i+XTm0i$| 5p-'OՓDRa, * |ut_:9 E ^Yo`4o@&SϏ]k,c 5>Zӕ:xL-Ce#Gx?!/9ecQ=/f^YT@%y躝_J@2w~Jrx7qm'hy"'QD#7k.P5vBy\g7Yb:dr̭r!fl.ζT%@QcRBe@y9g]i}Ae<¼(CǨ^,tg(vgEnUDp2;o) F۟?155ŦK>jQnש0[_<vS*rա/~%'"EݿeX=m# Av,fёxd$и5? nC3mI = JQabK6H#j,egԿD$xX&tF$'h sjlPJ_? 0{<. @j, ZF5GP`ڹ/Qt`6=r}dSsx#%5됲^>t3+&G4U bHOEY: qߠ@*2F\K9qƜMp9b*(,3Cx^UpÊ X5R'6*( Y#-}"BuH<@9Jel2y j䫅 Lf>B`قm ؍J]E6èFq]*$+j+nTp|'onZs]f0K ^>"ileㆠ-7_Qd9ŲC N&ss'~ }-<5L=y,(1yU w7zs3,9`[֤Z3Φ~,7O|쪏( 5pFvJ;}xNgpߝ28|6fsn~ozjʍ4@ey9o Oؐ1 G3d-t2-=Zr5W3e ;p3I;gyX*=qlKXr5!~ЍcGAHf?ʙ,aV'CcŎ.#sR#>:[>v-g; `vUrk bx3;"*y;]xuҌl;6"s@VE .4G6MVJ<-wU Xnm ĜjWpy/­T8e^1.Ҍ@'?jqY.920Ed_)۬`2v+淶В2rdQn[ȥTY[D:%ND59f+Bz\5`0QPb|wp0enN+uY2SxfwL;4ꖣ J/PnY nw8XP~)Sly03ePCUFj]&03 O44ifm+jE(Ʉr{/^c{t4;hGIe[%mBuku2lا52aqCWM? '+-ǗZӍ4Xʠ5Ҋy[9iΉyp4*.Z'T8ECBC{=]%Ԓ=sc.i)D[88iֱb戽 jP|~\:B 'k}<,>]1|[E: iTq↚)(^- @ƥ>Nmʧi١l&oȑ ũ)_!7Ξ]R'a:kĒ._+ |J橎GQ>mgX ̬JTZ ŠK¦3-%L@twtdPK18zt"QtYܔ @cg p{FU>*#+]o-vcԟx DŽ֭0Vw?),\D)mJ(l$H35f/?^>""M:[%H?OdoӆG,5[5GNCLM*ZA''P}{ʉPFliuA3)tf{b罧\x \y|6͒k'KqU?xD4(p?Ek)}6Fr0,EVƆAKu3$9ꂈu~\}5[vحn Ƥ&b(Cj:DH!~~]oCɤ!Õ M~i1gY~6\<V.Th}wD2;jfIHތlF-~Cas~2DsOD|Ll>5Cυo8{m_ee/AvJ):~Zw0iK@%%:4 dC1Q@L&bF.dzΡyf$mnu/Jx~O헔]A<=j$ͮ($0 % T ޣb?)-4q(jOHГ0 4SL$߷Ӻե@Z"ySZMfǍ˶؄JkwRw Fv#oG_Tg7#qaC(A "q<@="+%Ӗ(t)'?S?0'?W @$ʗ2& ڊ8q% *";s[@5{,17J^ ĿbTq3[݆w]V*+1ǾKU@]rO7}BJbjF"BUEw7 ![꬛@P5ȡRnKNfT3,2ãMJm+%\Ugpx#6wp︟{W`Lx;| wZTqŖ|v0ܽ а"%߻_VKA=}K##JڮՌq|^{f|) y1SFqBCA;{O >$<Ƣ+{BTAE%)=4˛Ԯ6PQ{Imh"T%6;y4*9mŬNE7QZ #v58!O\eJE 7,U {Dv`{Pj؏lW=TXo5l>Iq O{4̖2ªM=U}`W#a'j{8hVX$b]kPN[ D]{9azk#ݯW v-i92^hƀXiW\DzQ<5!RvͰL f/j'c LxHLof[M|0EQN:>WASxI_Uxɿ?,TMX4݆aX_(]ZM50Fɋ8#7픚Z[aV3N»ָf?In1}F֋#Rtdߣ @ v 1zx/JbQZaKle@4XA/Zwƈ{EOu%!wxFNHwa'PDZ}=UPiL0^—M(2nbg( *q SUkv^efğa^Mw.:B 1)~O y PIʘ;ܠ`mTшʰ%d̢Mw@u\f0,`AS֭;Oӆrv-8̏-deU!UTXhFC냼ށ:99s@zlb]FWRvRx>2cwe_Vz؏~ [֤=xY"&y;RsɼW*m@L bi7~UzRav-T:b@Gug:Ta3ѭ>}*%Ȟ|`Jy8ZTf#oD@*VW >I*Z]g³N܆(ɉm-~24\ M X1K*R XkV~6Ƣ?-7Je)):QD]x>}hfcu&0˞yMh8Q_qvpth&1n=̧lfF ġتrVn<)tMd>|F*D[)أN^"xHT"ws+id_jst[Za̟3M*ƘۯݔY; TCm`p6{\${;〤=Pحz=g>;fA(5h9͜7I׹QU݃uP1h)&Y_=x U$̜5"-u!. ׽,8uW2u lGIshx o{\z}g"H<~pr\*Y/6 gccAy0afa}:|4;e(4'|'.e#w-.I#wSX 0H`"}`6 L؛JqDLT[f_bHu4}w}),y;[\nɵ=SFM ]J#y&[ 78OtvR!kXj?;cSB'gW=JY\MX,g{4%b[9xU[)R* y]@DʷIt_)rh1-! )b.SR*䦔P*4>&U_"w@~"[?94{TX!h_q6yU_Q@ZI ifb7M?)3\ՅGèOF:vM^#pʈw̟uUa=Fs!|eygڞ=.HTJ"`T#I `ľZï> "a8DŽZcyc̏I}W59]"a<[JfOS_MU):nҦ\ T_G.R=?Ĝ-*POVhmq?hfܓCիِ;P㷉r4d5uVLߵqSF q5?J^\mr»Dh M>u5tݥS%j1(-0R:g81+x{pԓ^c/WUD~lqd促8?R|!"5qpp* *4A[.2cdz3JTAdg$tpR;hgR-h$`9*L,~ukpU;{_vspw6Q: /OٻgHudدǡǙROB0* n pKCyqV,-oh͓Z&}͆\&q;t)0&˸HT* i\ef!kM聶|֣Fܾ;iGGp](/=˂C=p2U@h[ybrO*Йl5b=%%2%[Ws]]箯s NŐ_aslfsOm=T4MŰD>.eb0?ryX r^ 6ހ+rv}1*sU*ua hL0jG93;8P" e=3Mj|'ElI˕4<\ۃKA[N4s^hyk6B[?G)t s\YU:mPl$qlڠ)ӳlᕳz[ Xѹ]66g 51<8VW o)Tر%v`OlzFc=:i\8SUX'M빪nv !|Y1{%M#(O!Vg[m [_QmWа7,S}ߓbӸ*Cv]9^!|ѽs@4ƔK0"S#<)F E1=x22naL[iKpx(YdLJHю&c3eNUy߽bUFRne@0ֹ@%Һ~fA$ mP5`mm}Ak 0a:1.N-oלNuuh֪{<|UGL;IβjXUg R!blA\F|eYh,Z?er6@[m{v9VB;Ed-C/TP?#ЙO|%ͯ/)Sj༒a.$2l l+8@ƦSS:뛪tcX=҆j- (TFkO%sgzjKaP ",P $RbSC%pe"b~c ڒORJU1M(;'.$ fkb/˪0+߻l(0S]cb3; ;(p|;4mOFCNOGL YƤ>=\Ɛr o;!H_3Q26J[]>WFc͓-S<ғqT 2K j"V*1Wf&3fpK3iLQdqeypAG e $H n3*aGC\hNs"F8*v(gzx'g_!I}@=gx˿`_+\p= A]I=]_1gP 9Q]wՂNg51 8/-T|-TeHo4uHSXg$uϏ +dB|ӰbMLQg*.ޜubu*jl>5oP̆ۋhjĺL's=PU/a>|ڑ4>.fZPିi'Qv^mh }=x`ƾWH3cđ oH^DvNiGh!].֮:~,}F#=t;S$(I@cח>$[IDVX DthN)tjڰ0]+*< 1aGz Uwrb"vDŽ[]O1}IȕW7B=GСXjڼITkcUS~yzz3Nx"+viwfkNY"dx]^=!Eo0EvAuPqpS+n7MN`?]>;FrE+#x.k"OH,2lc:a륻EFRv!Wq^"- 2&Ɲ懱,Fxd 8MZD< qXI&kf泯,1#"{d[!,Ca/*-z4H*jn >F3lh⹪Gֈ>:"W$',Lyf-س0h9ZGcκI%noO~7w(^MZ hGg;o}j F=aZ~ZS;:lsWa R\#]D_(0.;~j@9$;P8u[,n W]^Z@2C`F(s)M /-C+H8guXj _/zN4<_抡k;?!ӔĄ10~qx"mzA9Z#2PG`B8X=f#WAm CE6Ŝ`H+qMl],'[v#-b`s%VЃV=ϤޖӀL^T* kCT49:ɠ܏vٙ 6L-KA?9uG68^c)4z5h?N]O.a?~"Х*"pKvuAʎp*y+-_𐱫1BJZ2ˑ3rlݒ'V}4TF^"̑0l29!7x*T>~q~M'LPfc(}־ݸr0x:x%)뙳8]۸*Ӎ/ivdTP`RfG9]U2 6 M2eL %Ol4tb:IԌWoyH ;_0cq,lŽr{er=$S)7 eu,>(-"Kh9BFrYK>WcMwǻ5=& Huf(H[{SC4kfnīˠtSIc- 7`e)j/Fb.ʨSCgq Q^ r:uW${[&6|-`~Zk'hi5(|̓F' __,¥o@<%Tkݬ|v>dMBC#ewaJ ju+l)1Oca*ga9/hjKZ-"8m.wƭ7`tڑ={,F|_O~m?vrzvA; 7;%4%D;*.hTy}H_\6y$B蹉o# +xij)D y2L[Ӈ4(# مZnKpڤAƈcL񻞻[1I7 R*$ QDԁd43QRh5 }UsQRsiϲ NK-%Gծx93篼Bh j/hJX^ dS0~kf:6_ ±4UN/׸/\@nb W)bNȗ0uCB)L_1k=6 MQOH4&KX\w BSt$~]t`߶Bk9lb7Wk;KoF5jd!l&D%+Zq5MrRQh@䏚nwl7qa4牬nT7.WF/8ųy-2FqKrK w"}jnUBj`;Cr]=WǵB?pޖD_6 @˲vTHu*-i̢(>hNEnnkBc)>ciĿ8綿n'r;%M`yH1UjI+b.?X9AMD<4DƧjF~* &i'~ePک5j9akB+3_+=Jٶ׺{MHѶZ*ǧl} G/&ΆUBWɊTYzE'|&+DJ(g3誎*V0^BN ۸L!mWMkB0mI6xyk5lo%'7K񍪤z[*f'[Gǰ=F.'l-IX7LI<-l vb%y3k.$Q~?z:<%_E+1 _q թ /Y5޴6W$rrT!nlp.?zdJ l e'ݺiオ%l#|Zkc5%Y*%J6fG E7ю)cYt*Iҋ-кh&6ݞ}|mXQmJdX"ꭣ7h7S=68zuL)E- ˁ8'|4/IƒtC]zl2q"`[TB͕o^'W4MnP;}vљ*Gva+肵aizsQv2W*K2]DPlѮXw> K* ; "zii${hAYi n]IS)S`ݖ)b9]D~Z=6/k450M8=0>A t$;8=Y]}Q@_t7<(ԛڰ#ސw7E$}&2A%.A-VЕrYjs (-/O(`=h˜<Sڭmcτ;ӔGi9Ȝ%G1eAfw7F|HO8qit;N%xb}b bh_T[ #]ܬ(m Wҹ~C3D7![%F8v[ӸslTp[eyvC7AOIUqEDN~ĪE@ϽZ41󳙠?sxmW07Cw  s}WQE]˧=,!֬'lbHƵ ~&~s0/ fU~ dgOS 53lJ荩 g]r5o݄7FNr~9*$fҺB ‹KNfCx5o%x-EimW͙$( mB*ra]n H- hSrRU]Xk^JvT#jk!taSڥ|pZv||2BlzߚqT)z2Yo}}-ȅ3Չ A_|U8ioly Pqڬǹ,CPTsyuH8){knWA&ݳ-8%qV)SoouNb]Cn4%^E=a(:g,BwQ_,wng-#<:d_bY?9[I %q/qY HvtLySxXҺRTYv y>6TZ=-gO&kTP':ҽүhy\`XW9% >!xFTI^(tU_]mˊ[u}Z"h26̎6חfBO4)[t!(ANd~\p?ρlE~.ku92ѥǁrKMб4Q纝{?XFCg[ewk4;Q-ͪksV1yt.wc%reUiȷCrO6i0KgQ./_=h'89)O:ֶּ862ezvWM]`K&e:(,7[#i U _1f% ﹃BuY#bօiY+ٷ2mh9>PFoI-۔(3}Sm\ T,l]!vT57GįB( UYzwpEKkÕ#'-<̠}P62(-u~"ݻ`(k9W;;yL BWHxoUk|DYFO)<:wsߵ/ AIψÉL߇ õ4b[KbNǝr/ CzدsREZΐ0dW|S=bqK2 aMWi9m{',<Q5 = eV fH4?͍F/`{&mG ?Ru+%g0OkU;eJ=g0N(2~XDhi{8M7G ?t~S"lQ4RC%#ěA7:JsM-Eua~ٞ. \ľC?<t<,[je %Tf'a`fK\^drd;*}CGpy2)CI< Q2q^Xõ&0ml#Y&waI}MB?6ލI(F=vu\ b69?!*핪^[ٕ"jҙ׽ J^YNGXXG3TވSQ2&mZudXl=4f PK".$g (|uZ7+autGF8vj%v^jyaP8򬍫5]6B*NUxOXT?3űR;)Њ,qp ϹzxfBgyM.UV8 2n}׏J\EAl,_*:U= %n~7l1 0'7#Ts-*]?,<. Р##1KS5X.~ siIM.^\LU{Vz {fzKp!ԇV d\ﻛ3&S Qܾ+ w҈E卩nCYHd5\kꄞ rrL^X0jƁ.Dd0I-WԘchF6ʄJXA<2;͕؝WB3#+(Z=*(;;Ys (2zϠ?-|? ێ*J6Y P#܀FPTRNRT@"*5-9,6غ)̔MB0jmT xjV _qT" zLA"ހJ}?K0fa#"2ˠ ?zEpK9PX.DquoZ a+b Lm#{A\hȐ0\U~Q_fȺ% )oV2_bK ] qoR'\$*2Iz+hR!/%CٯAZj5 6-LʬЂw"\,>q?ٸB`$I7CT^)VQi5|R^pʬ AQ^g+HS`@3! tXNٌy8W`+-&؂8d}(.[cxcOJ׉EI0HVGZc/Nfy%Ihn}&H '!Hh9C,eCz @TW4Uܤ1 ?7Vգڪ94#!z5=oQM-cܘ C/UhT97GiU 0g7Y6UrӭV|m3QAI̓dD4)i\^'! U@& q]ݷὕ]%0 ̕uvⅭ8(tnC[Oeayْ娾)z`d:ͤ{Y$ RP:)F#s"6Cp^JsqYBтhfbvg&>}:otT@w96$AcSruȥV\{a<.5 {&~Հ =i,y~@ 5UF Ofa<-VM?ßDռ Z-~Xv\Z` W-bR64E.9֊'eSLfvUs =ಯMhIFߴf7x' Z1l(ju153!fA1YwF6L{ R_V\fc[ աjufr^y'TҾ^`"~&:xDH߿p ܪ"ל\Mװ5.VwG)]fӗzDǁײ!&2l>`U9GiGCC5yu:dx; p _|vSC=&Me>f2;/qEYa)d?Tn~J W.j 5^9 Or^(VH/_'/i(ι~ڨ[(*O]89 r>dT~ =`}V::VXsyIM pv;1 -|#h*M--E|v8sCjYH@03!a_/tAeFb$m+6ʄAW鞭b<De-1e,''}Ux %s:@L@qd+: ]ϝAԽhm= ws% z]Ifv -@;N@heYX_ ({AH]yg*Ew)>TZzH&Gm@T",Y΄SC80Z Jڟ0jQ"L 5כžvbJJS륔_΀'&36ģ? o5ɸU%4NB%󟰢*߈H/ ɘ5^[9|dS=/R.d59Q2Y9%Gi =dGayO"? : ^BsxĴnk>%n;nf쮏j LұD>E˖0ɟd2e--.G&7Y tOVN?]To,$vA-n`mq z'tnt;Mkr:c4*\݊ˆXI> #6bu T62XjۗjtT-Fvώ pa]-f@ .|¦Ҩ,/S`F~'Dz2 xҤ@2Ni-꼃_L8fy%[r9F%r_N4*/kc$Kr" n&# F/B*wj#V?Ռcukڞ[3Q7{9ǸLf% Bkʠi60 GgjIO& sR _*QnnA գ"US VRDټFr9^$z9r:qݱGy5@~l4 ^eY6:ϪOmxb|z./k{!RLʶ?[2e`2l5N= p ^<@͊Y%9t& Z8:co`3nkjD)-rсv2ߵ5se\oǮ <6U݊7heɃ N ^_.$s:qn"IFp\E&B }Gǂo1t|Vڠd㉋oS2][&acB+HeDNjΗ) JOvIS f۔֕'3.(V NR i4ُ +vKŸx@('V ghw!'Qu;)á5DHv5"4;*Np7hvы39we8eWf[#:i9cc+GB;f܋˓d"KvZ\tO[טe(M8!@QIƟhw V@Ɵ$q$ k̰:e*fnMۦ? =u! HZ̅<y Z&=:  { 7a^ڪLy|c*Jj?M.^F~i4nڂ-T6'J_G8IT OlG82JT}Ն|Ib]WSSM-)2nyĕ~dbbN@TH\oCHSrVncj4{h ldzPHb^щ8+izTh[%C3L/Q]ŦݿPg$!an}.6 l-DŽX6{ Rӳq+Oޘd熿I>&mM5kvq1+G,rԯ{(ce-lwx ZMv ^Ϟ>IPoR&9x*:+YYe P @ D?2*OHfv`cm&L3uX\Utn }"3 ɽP "ML|c{'9K"Cm~{DъiP d(eX*ÐYȎPkz#yޜx3w00^ m9qgAy}Av̀GQj~y{*ׯ7m.F tY Q|S/ d/ C}p*`?CtV04+$S"B)Aj4"VD_\xq 5=Ճa2"1U%YHtDBy].Nؤka\Fqp[Ca Y'H5-uOO aK=Ui* <aA[0#1J3A̵)|E(g%RQCNpuSbFDJ͉\tNSQ9=(w4PB8 C7R4HiǢPdZl(CH- PR89nF)$@`qQ@ɗ{!~oګ%$]o q܃ە9؞rw %23Nf0tW%. VlVD1#=L׾D] ,'̕5Xÿ_e5nXwJJ 84헟z>^V훢y޳Y8TXx 'xmە)P~#kكLK#Uc/=W ';]P1ZU~fqd2+l7s;x]bv<]5_^IkJ0hWNNw;YN$Dѥ_ _ /N62KDj@eP4_V8t<ݠ_;7駾+I?}".N,P*U9?Z)?&D}1@YΙ)-<eūa{Q S nq;xn N^;mέP!縱rZ`.j0ޕ˻ P=bBbg瑄LYwt'[J0jn͓y?vBUnf;=$iz-' JSv|Z-յ`2:(޸a6\Cc3"T̵D[ 7& ~ K"4l_ ťhp}P?LLC沐3=[lu=alAǁ4g0Ѱ8odltIln6G ,-BS;}׳`"1b(,WZu 7{9143Z>U^~;P?CLxqz7? b$a|̐i:@S{ c";'m>d'ۀ"~> x=\CXLϺɍSCFR 0Р9Z yFIR$!n ZAtL2,'kp8&^nOynEF }|/K4];΃ dbF3 bX9(5uj2jXUhNO}~ )zQ?* ]q-:oF1n(ī(a՗"^W mu#[jQ՟<ǒPַwX⽈vN@A[KbX^3 O. N Yi%sjSgdOlO@ʝgrQ<\o!QA~oPD*!6J(PvbiJYI S&KDC{+ 3_Lӓf&ГrJ*ru8rCMf]{ BUB]y"L ۺS"y=)Ж׭8\3{,0]*kȿh0 CK jyȂ +&03ȧbEʲW7]5\Yk 1;J/[xD-l㴋a%ِ'wZSۄuMA/jKs,L#`9k|4\?RzV'azNpEo[e R<%Lصݐ| r0OX :]mTZ[=xR^5"TZ ܺ婰]\Wk)Z%ߏULgrke{a7]ܕI˭?=ž0b;Zx NcUQӟԦ\F7}`T!F&`%03 x8?&k&{cEx/y*2rdwx+~UgţHo^@:(3:7[bMІ0 ݲ "ãP(ϑ{g)+opBHU 5> fc G Asg вi!6aѿNza[ZHj5,ޘ7QV>]Ȍr(Ha;nb/AOV7~n36N.9JTUr=x\u jfr}Xf=[ǀ8"7.ٶ=}:[\+bT4z,M; /8'ldMka 8u@akWF]a $2Q]լl-LR] vErAY}/~Tf7!;`ZW8ͬZIVmMZNlٌե;zi"aӎHEE@EU2\y>"j#-#~OEF {;ߐAEE0?,,qE5\H,KaIKJҿj0@[%H;OZ'үbdӇ24 w` gMI"z5}؟BÕ n,Kw 5]C1|u: yNA`[pswtȸs*5gJ#{y%̀$+Oѽ,/ to`7kĴYqGߑV Em5|k w(\1p¶Fu?Wΐlroi mIX.d@Rep.RHrxIskX+@oWB(+Q"=.D߳!0mmFN":( t"U1z|TKe7Xg m8Ż\&!pcu !UO"blj-&#!i0*G?Vӳ<+"ɬ'dca%g~,χEx2Lتڳ糣 A>]: ѷFbؓLBG neg#4,COo>un!\_IrAm:R,J J-@B2 q)+hΚ٨w.?1T,s1F/hP1E4*/'f9)uRSr$LB^ #@Ee h[sXy WLf"2َ]e0\[NqcJS#:P幭Si8)8FHIԯm*c᎘kr}bUu;C>^>cG恶/(*7218'5 _GM/u;ֶJI/t6z/;yVJ^*~rKrڮK@EKl;b3:z3u%a<"-4eXs3cw7fR_,BܒnrN.גa(]LJu\^xl_C- IHq CjtipO`a@+J/gH$GcT^OG^6#k*w*o84  #Pb&~i=<:MzC;گFs7-][K3L̚b`MOG'b*t:%:BGuN,aM.?qhx7pzsC9"Tܿe6>b[ƽZ@(뼦e-wvZ0HaL}ʸoϥ `3j>ѣ* (oYCB] 6#=ls4`1Gtz/MK C1!?i/HL\*wg<%n{°}PpAKيd]*ٻGBތfrfS ~T*)N  qce]EߥI|=˭0A%_hB T-y-a 7Z@Vk&]>/i>u ,>Tibh,nġc:p BC!,8q-.(n(,Ц4C6!)!,׆J F|%GBb`}Q p7q+&}=QklKjȏ/Tz/@@QB'&S،y!s3gk .wQw-߷LoOXI o 2 ޅy[ BUXǺڏ=ܨ@3?uWjpHĽhVRJӓһko;?˾r#!"}ͫRgĮ[w oU#a]d $%]?ΤW TŋJo٫?ZRϽ$q)FYX3D0.u=Ʉna^㳛% 4g$.9lBmj9#w% a,%ץ̇&LgkIF8oE4Ꜹn) K\Dhmӏ5)|:+=qq£˗NoUgE!qx 7*PZZ\DDNRBRJ*=r/Ũѕ-fRC2 W$gb6@IIz;)c3{Yutf@5M#p-5bY. UfODVXPB ]$!Ơ69厊af\Wؐ+8df{ӾHzBguJG MkGlj-Oche"P*'׈R$Hx59u9%wM$H! _ce}ȫ7 ]朩1cM 2 wޅ8ls>UO{L0ĪX~9`LVg4F1H0kޅjas-- D5qJL%ı<@Wl%W܀ 'd`w%G, *FjQ7ZJgVduZݫOrY00;[W}u;x2lIJDc!G;R Trʿn1vAknW$ȝ;]?B ]&ٜ&ùucAkQ42JbE+%ޱޅ jagq׍T?#lF&|A2Ȍ˥%:qw NCwCd?ܓ؜gHfo`5;lM I~n ܞ_Pdҭa\x Z_2 0OŀZ@?\eMߧD*] sͣDk}7o~]჏!\blZs;?/L"68u2/]y&|Y=Iwo5='dP?egf=S0[n#Da Y NC>(̀.( $(@#򲵂xQSEBc ,L*Ix%0&ǀmMz’SOU&[ޭk-Krpň$uX4Ga0EaG,iU.VK-# !Hɽv[ҁQ,-xF0ֽ(t$X(lpC+Δddmfp&:lφD|{iuЙX vw-3BQrn_fYr[3$slI^jSmJO*TS},1/OIWzҌF=)\BJd ,/VlD=DnfHMg\?P8'HFF|K 7g>jiC,`A%_> 樎!~&7873jdUR\ %Awqg|cZl)h,94NH$2 G%BX<ھߺA_}jIb\X-&٠\MӬt6O=v;u1>bfY5rQ$Aif(<CU/j1| #n  ĭ03+>|F4ծ(Gg0ArU0ti'F2]tҽOg?0hK?ۜJ8KW@6/S{RXOP4IKP# $viMzO3r} +|pz`þd$Rd(BxzED#"ZE`&%x'Orڀe}CUSxjNҐT2$o*@"y[xZ)Aq@x<%LY3;ʀ߆JΦNЭoQ*[r UYQ.)="!_.k5oy58桄Qy23 㜞Ho \[ }^'uB33 `+hV0hZyS 69'0d둔mDt*/496C@&xÔ {rd[Mj S+Iݳ[;eoxjޘfDULN"邓gBûlٷ0<([r5,oYHm]ްa żCL/eNCL*'^iD1"i'ǘ*gƘ`j1˪z4Eo<GѨdls`9GM;@yClZ1|%<;:P 0qɢ zn+=O4H[3?BC.u>(ZTWFBƐ@ jw\E1pC0J>YVﲀڏ婾O MiU+ ]-U[H4zGᙗ˦Tcg[&{瀓rҟkZLQjgʁh X9ј)p^kzr-[݁Xl+yJ6I-AJO ykXv@b2eX">̄FȲOdl;۝ЌVNK [lnff:[ڪ=၁2^^m6aoM>5f=E衋NY\)jDN46%6b:dګ('&~DBQ_vZ1cxP%;DZ\MOylFzpFgZƪ)P7VXW ejsI4?JJV雺eUDGܵLNfyebd߁s'iL~nR*`WGa}ws%vǀU˛zG-E]r4EϢ A^8}Ĵn%qp W^<dĠwT< k+L]G4J@<"%kڴ;UY=|w]&<\hsQsD__¨5*Hž2-]RgVWLrA2VO?jZ:FN9dgoEjjuW"$w=\O% F\ٝۮlc6珘,Wotz{=̩ !Bo!ΙmYcŀ,%> 8CYr/s b-^ Qi7g@/dL.BYMV.lɬT±߆nn @s/u~8JN꣺V`u7i 35_,t?qr,&f@-·4W&cz_ZkLǾ`jl@TBXv? `J7=+G &6;, Ws٘hlQ WI8",BTax niZ^08SfU n֒5 _R`=#< 6&{k|,&:0sa/nnGݲ2l `LWk1ן*U] /J 2kE~Fñ7{S4hOzc7kr=ϗE]'K;i>MH>ya c`QX3x-5T5EcP'n-C ƿ"zbX9lH$a tdj```&lWxCMFBu9Ooh2P.ǫPCufo S7IB]:4KM9c_ ԇ]wwvzX^-dJ$0{dKAE+s+guxrc?f@4Rzpvk.Cʩ26f`-1j qfDU,"UBR#m3҂5l&! `,4[(ny@!/L/b]&Mx\`>'3aj 8%0k\\I|u@(VR2sǪ9mmΉ9d'Rğ3'QkK(b %ԕ a#>gc$ucH~t{\{1)v5]6Ai uj}sa u4P/)]%2ZR/JC{vGPyu7ȿ2*Q֙A~P<,!c衵o.@؊VpP .4HNsTQb`<6廝e,:#܋pͯhަLg ^u%Tf]au!FQ;aX/<2;y@x?w3p#H(<44S 4|2yV: ?cyFa2~.i|H*$;v?+䄅$/Yh=tgcA,lhiFyⲐ K{鏓2ŚGF_x2 Z*}? aTDd%Z(r~⇒-P ׂqoQA70KׇON\:$n)]1=myQR[tw _#n2LP!٘Cf2 G>76tiYuF_+X"_Pq@ QZrqפ̨mk$GX~ 5߹pHHv@u(U~5,FD>@"U[($DB W|8q<U0x&Z݃Η 1.EȭF+on}Ue DmU1}jܥ,' wB(vZgCB5z[A,A*>}WV~ˢ! RdѳG0\6`75nrrQ86޽""(\/ȼFG 7ұk<\#U:OTz>əLjfa }/.{rjaZSuSC+pi>(~ =*D!х{d}eݹaDN%+咢`,RڇRxe]`XhH^U N}G^QCҼo_(#m({ewEloa6 [6s"r~: BYRg.c=:FCtL -̰N*XM)+|4O:H*qpv6NL f euUxCaVs>}ّKk8k%ige}7#u6;Spp(F|:N3!5)SP_p~2H?O D{L!kkWwiS~@+pMWq-B?H3| Mi?Y]6p1L(E4}2=fDzyK\9Ym?uQc1<_y!+سDs Cv~ 0F+翭eF?n%LLx vR9N4 a: IᬒYD%vrts \]?+qh'ܳ 4 ^c=~trƈDh4*Yk{E4P>Fo|,[52J*"{\$o[sHG+=UԼw7 %w6AW3JVY_{,(UEsZ$$ 6m֚rI7E#e]"%2 B p#5l(_XQ V &6^T>cS5cEjJmUo+iAVvO-ЧC<-PGYҪ*>&/lfe# )o fnySz)UZ&a~F u0ZoG73qp*9Mk,CEuN7e1 v#7 X /R(Sۇox"g$GN Fa2z_n&?cf,򊁛 N H@ Zao@_rwh r+RRXhɊGt%,ɀ[uyeX'Ֆ/Tł:&4jnN(\Izn"Ű du{ZcPbH5mBT~iƱнK|z` #}4Л3[)RjϨ.tۥ>kCQl>]'<(чjVjA\'{[{5E{(&Ϻ;LzBKdd]76'OOf( BZV7 ٮ%}_'9b쪂RMfVul 9KǨiDNOP3CE?EW \ i1a%7!@xQ8|Nӿw mߪcrUqKEx8윳r'Q`Uc(N[ \9uyP|p 2Z1ϗwRk"[H$²LyBFڎ_H~*Y,2SW( r5TyR,m :T#?rH*xP1qgFkTWS[L5b`ɩEqP>_ZX Աz\,̚ԳZ'y{$ ,u$jN:f3FP5SCu FwM ~=N8-ϖ D5X~_g9O@%k)h`'2*42⬃pyrȫ&9)M..~ #dftoWP"uaoHl6Ň (=tjA\w@+ "It-r9ʻMZ2"4 i=~t[%2i'UٙL?6AV@2fr_[Q &7M=):˩i)M-X=a(=y5 TFg@ԫ0AP~1 g2edԨV } tV#C-к{/3 _^1[@µpPoXFk׮m5E#^$Bp-> P{6jf:'»QRn0 uDG FRҐǒsyD>z󾸪 A]hI|GvyT4p_LMX)J IO|$1HKZ y/B-H#Cт|Q{6if'ʲA3<~>8_P:edB!.L6J%#$_ݘY#+hy=wOu?B޴Ϝ>l7 &Dwi!d/<]<K%s)IWLt[_K\z冉PqjnsB X0-MMHe^UޒϏk)>nn%Ps? 4[_4MR'Eo wPѵB,ᕶt >"cn.vN=Ȥ:":<.ۚ^S{Q9;Qa{r m MQWl&I3ߴeA/F8;<ѕQeeLٯMbS2ߍ||șJ N/ds;ө^B9+X砜dr#%@πtE^\g"^%v[ 0^t bC 5/ʏ >E1j.w2) P9Uf=UygMIG]vVĔXz N :ߌ!6 yH ="w={ޯȄ" J2E26GnxORPH _'/aϥ?$]pBIځwԚYGrDoۉACDũ"xκ.DyǚλFJl+/jf >W=^8f9{xT,܌KH&5]A=ero_8$VAd7)+%b⦔e6|<÷ϻ＊;^z-rxN#cdkYr;<4˯m%Vm[׋X94o*)kvn qOSp5Q[I"^ Eq[K.8 \2d 'EĖ.0v uhGg6d{}$VՙPީA "h!GP?44a( 7dIC)RWo Q'&>'q:3WtRyV4+bS9ȥؾ?﹯&ly)!v"Ҟ]$3tF6|ӳP0}HۈO-VqʢAz phK?xoQB_BJP$˕ JLTǧ> cqҞ55}GxJUQw'K8Q)& _O<* 貼#Dd+!_l?x_5*֛ 2xMj9CYIQZj8} ܕR0 gZt2P>\ٹmDZTAτ>FcYϏGbu|/UAռ/ֹ9yJ$HQ6ާu:;Bm,P2wj:MlNMZ])ŪSuqxO3g`n)w bTzyn .xsriz=X \ɂHt{O_?Ud%ӆY}'9ef_sG['j"gH&TOq-RWQxEYƪpl=Q v֦pw `y1XBt~f8KtK%kuxKz x k^Ma^L@n)gg3XȌ.{$<4xN0czd5cS`r髕%vv<`? Sz2ʻd GNL>SQ6n SGQ# %p0azO-3BZOkuU&D4PH:yZ&D9p=[NF3Q@±_C:P-+ynuSmDU I-@Ϋ|#.^Vx#sASǰצ[Rv<)ԡ^hglLNClE:d'qC08X(fyc +] 7ܙ)=5H~I9dx{̱#dӓxK ,uEGmz.,9Q8(Tt:0P`*6WAe@BSɔ}sS2&6Rn% |Lw#ƞYx#()qz _˧vkD(1x\&[V᪯p8:*})t$ؑjD-\@#*EҨu,3'|%2w6†PNC?)լow-&^Yff+p}}71Jq{SǫUw. W}*M7b%)dQμd]H@l, ް]sC ^טl,BٛSdJH_"\u.*z'58˻~Hj$w^;?L;i35-ȪuM^W<&~ݮ ^N{HĈu-ؠ:+}{˺fj5]d"teiAa$\I)tpLqߚz)pm'Y<+[-|T[f[AhSh顏<̑,Eu`Ύ)]Ki]z]ΗoG\4BطoY^ L)RuV]TY ˀKe^2ϲ-:-8pqrЗ"04eW 1c3 C@x>G-~p=0g2߅gobuj# "5Uw{>R'&%603EfBԷ~9R|vvRw|=~uoJ=TҾuSΖP}Z s Abyv= u!%,iU)y,Wm! |V5E!Oj<ƕ\)+. &xVz/O2^7`2H8cxĀE6zDK-c:N({7v.-Ii/7C[VJ#KP܋4B1Xfywv?"$8qU;G܈+B6uy%D]𒥑\Դ6)ci#帶t'7[?ܗF~kP^b_ %[n)Lq|JoO TyV ʁIb*/J:gZj~"uds"\{3'߀I[^vyCITgen\*$ȳlZbyQ/,ӺgK[)I{ czR7̡M LQU SƶSQ}q?Rho/\D-Z^+y-W~ߌ`=sv/Qr8P[qI= `ؠZxُ/ʥ x.IcK:[. wy#-p^\  R3%Ekt8]×4'>LMmkQi;ez4?wl}dm5?+k,K.nWD%h ;~H)3; 3k61:4OҬu4oo⤢:V k9ǮoԛiukNГIr6*_Q ͢%&8{DL,zkl-Ծq:yE-ɓ]zHBuoM\EMt=88MblXT$Gƃ?,S@]QK>"7dOOR!N(xHc}i!ܶ[g{GeF"!s:~{VH& ua&9V06. ;4oIVx#3]!93Nl?޻Ʉ^x{.D&pƸ ] y ZE:UX~[)vKY<Z{\sxfTGH@h, NlN|gR:*&]iq~WIZ#.!* $w:Ao5&A8P7f2Dd:ÞhSdm%#O ̻]VPUB NO.s4D1PNfg~z ɛO,m>ςozamϳ$Up 0A9uF H#چ5LUX#{ҷ HK?xxÖD1SoK{-BHc 5';Tx0X:U#'uV*\[ n`ia吉M-+g=N ɌjK|`Y4P.I2٢;Y!QT-Sfg&FzR%')-iw{ӂMւaaG"lF{.;b]pLvNÿgE Z 9!OQsͿȉX r6; RA/XDkcBONgoWk(ZK疗яJbvߒ8(5&*b+IPdBE1U_-F{STΥHZZƈ/Aк`^bi_‡KP+pwX.3(/b4b;v2O,+e[:?-!ʞȎ!pA uC Y]]9܇|Ƞ?qT\Jj Ui5^xF:C'x ^3˟g7\ ;(f{~'$IF9BgG0V}fL:3ʀnZIe0c:M#Ckc׵ƅTmf;Kz Φ CS'Hv#sY;aKz֮qmu{ݬqMt0z4ƝcJcc RLH ]ȝ,y7I. W} ~:&Pru)|oڭe#$ vj_-hb*_S 4>d0q6|4KB'=^Ok\l FZ w'yZ ebjq=!&_rjcYv%z/]eD }q&)WI7*._a 7n,u ) oc yÃ:+KwEG&Axf|/CfM/{~Hx`8%X[)p)_|ȝk sUɮc/В]Fӆ8t;]po9R2Ur{K mY G(I*o|VJ%], n{l5_Z |k o5a>f͉ $^! Cey]5-\]-Zt ۞d:pH{PLh~~cEi <=*xi5G:]03;]a6!$`挮 .B AN/Α#~;ji,|SƦ*<;e@Zp룟I5BlO3c tK_4 bǭtQ8l~1j}ȨT+' ip`ABg(e%x."KLC$˙㱮gW#BXTeE\~|-v"\ZY4\%ɡI/g˵ PQE^VrtDS'@0oHkۣ‹\h8q3 iV7`WEuK&s)B3ic`q8>I#R}/d^TŶz8YJbLlvu[ ^ȞSJjPUZ*;Tf6߱v$;L2{~ȓ]h(VPܞMD2 p* ek3X(+p_QB~ 9"걧S?/ޞv+ -{tj1(aWo`_N`9rΔ0&V9]#A)/YOb5]P~|EȆO+Vț#Hwh?-ߒ|+C"&J(DH+]upm8 OCX N~Ӎ"-}AV60O)ua4%ȼ9f=9EF58œ$e\7w҈_ZgIAΚ.,)VfHhưL' :Rݔ=U^[y,K-۲9%/+lE%:y.6=j.dOz>Smy^ ʼn9=`}ٳ);dc.Y)>ǰ4 xnK8IIe%Df>mAPwh\0Y鞁{$,! M9Ř㥏X^lP`ӻ{;(T]<3]]&8q&C9JGUT[#$XNÍ ~Qe.QV $ѣMeVc*r y|lX.,kԭ KrgVuh~9`Fȱ؍!P7#D6rRfA X1>[P t '^+vUFC%'bvS ;|\مeiNRJL/ u6kBBosz:g]56$i-C4H |W*:2j 옚2WH"]~dE뉉0*= bhRBYv\Gu`d`%mFK&*Bu,|[ {0ۚ9CP%l 872L[]xjhvpft51 UCT#1?d0cݞ, if0c9+CXDޑ^*x6!]lzj%x1xևJyJ`f`*զ㣾6 m[UQ5@2ٻ0$54zk=ISc>uҏb L{%m);030*7.8HX k|G#;~@EK6Ok%aA؍ַ6ȨUBjYrԽ}u |\bxVh¶,ltL`H{qS]~\zR?.z^] ݱ=@x+wi,,5Pڑ~JP 9@q4pu>hm&k+Cxjz^0(6Ao'ܸU0 .q)#^_6Y˫4E!'7Snz~끙?/l !t(l|Yim <5ըr<ʑ PA> [H]6׺nY$z; $2Mι 7eq+@eT3yUTzCQ5cz4Ngj WNp,Kc땆 |겏Y"JmmT0 dBj':.,ؒsJAF/eYNh's>Y4 -(qc JŒL&ZD\H{6ìkz,7m[D>r &wkcg-CBq ~kN#<9/c %~ԣ z>s*W$`q !8s[vFcbf FyH^ƚ/`e(yE;/kT0r~Q|Z¼vS"0+smFI6բ_ـ*AMb%{7R0^+,{TR^~xQמ V~C7g<<Ᏻ6O*n$B?p2Ic6YPC~OUͻ) AG?wϏYU oq:Fj$-~S*1AHʆȆX( M!Yrp2$\3nYb85dJbZLB2Tb3`*٭4]p5M&ڞ#!~Af:eC,t\z0My?.@E-(m@7NzH2\$LG'5,qAaQ?G0@n $] 4 Hy8&j')1ʻ I67~C1 L(r[q+_gH.m #F O4A‹5[7ٗ) SLZ )3zjgSO8uiy*(ݱOVXZAFt3*WH 1=ɥwjܲ 0%J-jGh} eu- iv`l1$ QR#)"4aigc#a?ҍ*v+3/I\$g@XɖT˽(sTX 6j3h!n3 [~QPce+5U! ts<mJ $(Xb.O&6ٹj&/hqɣQ@XԝmCkС >A~9Cps..9+TZJXuU~xD_7FBV1ގBz8$j/z(]>jc*_[f٘a# mYLM#=Rt&T<+ $q4_ں2 aa\rJGs-GxLd}Vin9^HwFh-j,*`5*~3.0n[2ˉs_1ZiتWR*5ҬWCI3eH^)/}e#HЎejcF"(VgbV#Ox~3lkT0p%]@ 0ߨb; +9Zp?|{.:>>qxWy'j3N}.Nl}EA *v#PV TjZT! .`{{Zh<9*_t!NSĬٕc~ +>4-8 %3'8Rkqz JW79^w] ZZ~j4 C4Y6ވWCfI0-lMBomIhYIK^;> lQL\BI6v=U%Z~_q [7]D9g\x@Kh!^X/+ΡLO[>ЪBnu~!/rCYEat0 Mi'Bu(F/)s;4T_Jg+ "y[a+a,3XQ׶Lj*Ըni[}659L5 ,DÐGh/ѴH B,"8s^ՒL9B]>/ AUA2k#!gvV@:9B hOMu#TSFc&G/d+4mk)YY,ģ*9r`D:ߍV&8i/DI|Z pC"ϩ3-%|&-%9>& !כ81 JE(bEq})`Qa~,= 1.`[%Dktg|XJ2 zJZv~" ϣ6Y@0 c$trD%pl 5cy!=4##snVyQ~CB[-3E}aځ4g[asV.]5w *S%a@0-m7[_x=Zc̦[u'%eW55^nas0ߛ }|WN@>>\!# ;"QޚNJ%qO8T˛ыmtvE)vB -4aV;c-E(:?bkr6C5 Jd<ܣgG8 oWH`eV#{*Cy !81X"A޲LfLh8*~}r\ nnup YT/h86djoڭ-O7foƊ+RTXBwRuH]X8ܐ_sfQ)BZݭF{=o drŠ Gah[٫u{ꑴ$/R6:zTAclq z L|„bK>: gRj>}ՓYレoC ΁hݲ=jPަ_1<Fg`gw\Q #TZzǣ&(VɌCvžpKx"ؒvZ#% MMF4icd,PJJ-R_.gr ݔ@(v Z)?a8 7ӵ}Z揟дG`@! Md>y-=jۄDrѤ{4w/, JQy Qn_~ݔAWS>90 : L46ǁ/rBIieH|̘g 'ҩ9_B,6/vШ7bXy4B3Mٔ Eܧ6IM*g ׶'o)/vE)- |i\Pc$vEr3}>u~G] '@,ІGk_iI 79 ZB'`}:fPbAo׷U=&1\u~(4o^)q].cv,̎-]_/vf3d:,x{Z}l{QB*ltb}8ڹًXK:/ow RuUVp=o~뒰6ַ{qyFX"b\b >荶*b[fJyFK)B%n+h}xw\qbk+q]¿{ g4P6:ķZi 'u%0iH70&'PU}l`}v>(EݮUAL t,OVD~:lZ[ptLht!]M߅E'_iO4$p* ~ rR2M(ܾYx5\9z ,pa{livmbF PȞ,NYj!"4bi3v:&/y|Brp;~rB,> Y[`|tPݰEcRr0lXQ"=#6ZX;G2}v1k\bu𧬿%~|B -ε~n@.HИ$x!_NBX܃ 1 ԊW'n E PȶxhVr8:@}\1C6S2loUUzSr$qձ[n =M- ﳔ<BOa; +S]fyW74 lKpCi4Bߣ `YykGQ+C_ED55*+T-0Ͱ'jf[3OXqA.U5"[%b}<o)6q.kc%l(?S(p9 J},v2;+#䚥4:6mjf{r릹wA.Oz69*ƃV@TQ4r|f#C6cAs[`i3WYafּ+'L9mf"8)znjKcB"_ܴȑ/XsaaԀ%em{w>YL2w-'t9@aQT#}mpKO!>[~f+>_ገnP7Hη`5bqޔ8r22`g^s0Md`u {#y(gePϪK,!_lG񵛉[ W!j˲4Qᢙ3J8U:.̻ITC{NgBq]  &ǩt~\\ykhy֦SeꎨKݚ>LF"^?/Xl,q"$S4FS<9_ edOT )VpN|  CÚB <UkS<ʗZXV{/;\Ytpe#yyH;N$R #+M]T%د OCuFw3>$1Lۖθ-]MɑItw4gN6MB}̸fJ]ֆFOvayN'>uDM uROl/Is?DŽ6#M5+F?YqJi9z-M,a{Vr赋:2DƧb9ä ` yg؉צ.! \o\|Y,dЋS >TbPƋիd8Ҹ..bGȬs'+(eu=?/JKx>k!C0Ю_αGZ=nqO~RGQ{JR+1/bl2 #@#ܤ6J{;z_2*B0uk611m9wQ1DpaIAiwHLנMXT?gm :rRrțT]/>duJyo|w1emf2+o-D|Jcs;jlQK-[e1ż @Swx繚>9u8_]:+bS]Bů0o.k)6E&0(i8Fҿs_yR"9dg2o_ZCk^ye{,a?u֏-Qdh/vpB]-U)  i5As|?cph Mj@tj_<0fh=ޤa 6rkmr$/@%B$o0J&m !HML,Qgk^s'6U?_XYlzeBjT@b6#Ep-"AOEgŴ뛷jTȲ,GCxcEqn N )sX[K 5T?Tؔ;h#;s׉Њ48)Rk .a.֔2^W,%F?KZIw_7H^O +z"D_Bz^ _+Go+U,6@/̆Omq$\vD`+zhM@uo^X8kRM#K R:(xm-nkD˼}x,sttA= IUˡⲸDMG5 8= nZ%Ĥ-f:DU b;BJsO`:uA]Eb 1B<0ݾ)؄)'߶˜3{ B&B1Ta1;]8j]JpRڏ|zG rY_wŮ&| {sI71P|ՊP=P`:qhoHs+疕1$̭Ni:оlsGN"qeTAr/^;uϱn%%n=.oD'2"Aˑw'|KD§ji5s7ȰD ثɼ4~c*BcP($k21XeNu/K3;\/M ȇ8%#"LM^ bDrbԾ噁6v #θG þtemiߡ(l902Yo/u;-^|K.C[\Bua~i_ǣzp q];cxRPŴS.( j4W{ %)m܁r/DL*ś$="<'p r,[ȱ@7TyX\^q Y"S $4rQe h2}1=60Ŕ _ Ie#Dro$/H>G q-ݨ' kpEuՃBw\1NJ0W.":zJF;zNgOn1η0eL˂NB4K)(~}D ۱併MMB$1UREuuPvA$XZr'ޘGߏGo3q8 q~h,|_d"Ox/@uPla5w1V߫sUfIC(m܏v n_?F8utN~u Wu?Y)vUKPei)P0|ظQׅWzEӣX\,Dy:W;tVa fxoOj-!]^MuPoʭaF2V_9B?W4N2ĽpEe,(Rܐ `L7Cr"{g^~{1m&X(q I5?wꖣBX[g(DR|Z0'x!!T؂ڶX/͈)(?U :@w7u .k@@mI}${D6&M!C[iH{F*HHuwguV/&#YzJWWDgdU5{ sM~^@$-0̐p9` 3lU!~"g0CDyna<wSo%&S/z;]QIl pLGrK<-f"t.=6f8th .tы{z,O,+8Td\,0m\kOKҶSp\smwFS@)JZƸG1k"P ɟ89H&ٝfxg(^ڏbR|Rmb \uGI|';iqF⬇]I=LxtL\fƁPOQ&gZXOL/ ^yDY~3(h)*3Tfbh6 Ar5-.Z,DwAJK.$Skv[iDڇ:C!h;{Yx7*q)%f{W.`,0@iDd@"YBrX>XR8^>K#8<.=훝7AE =˂iC+O&rM]X}˜E ݩ SME@bQ̌[|=dCb=y=C܈ Y3o-VF0=H\TX.a -]itMxKܸ̎R4& \;Fۑ_[ 0(x LSh'"'T-VA.dJGA[h+ྷ3910'`3ZPSʘ1!P]lܺwמpY_ТϬ+Ui[&NW0r66EZ_R;%-#)ET}+eKO$It]-uA`[cŶ0PhR/ȫWǟE;$'/|o: b%#Mh8OSs죕,P; ת),`U6<-;7&cң)"G.FЭkWlzG R GАP@j/GضJ=ʶ4Ԃ4VlfxxQnK4xnFY3jOV7*fRA:uDRyU]@VRXoS]mktćL`O5MۦD+oTװX确Tf#lލ6K`yoL S\K=LF8cQ>/]@X šxʸH42zmI $H ~ .6e-d]qFtCNYBw@sd> v;%jG~ʝ[ R6YeJ?!L 5,.9QH4\$ U++ 8APx,laKgtT5fVo=EaQ+Bg F4yP= g+IPύcYtJɄVNA_!=K+,ӈ~U&ouΐE"V.,yHC뭪He, dNGCWsw\i2E9(R^#IsFΣaG&R7|i}pE9_dJ*AVbAdgXi S6x/tN{[ }jXNAm$<{cX׹V1J60\e-MhYڣNR:cˣWaǂ N!sH^y{`Lyuqn;g,dT%j׋Ϫӯ|UvیA[t5nn#mFD^ C$w{C\⦜滑߽([fWE2]{57o2HΌWuwGHv0NQh=`E>7~^LyWךRb-+O(21/$g~%o}^%w`G ?D\%M+lvxXV`V @a R:SA2=CO3*(s9wɖ`tsLnk܃2OljSЎD!>o7vƎg&Qu<0NP]Sc]PtA~y@Pf"l^ה7Zb ]*{l&O5~^3żC'HcC?ܶ X]N R(g ED6D^?>ipk1(:|̥;P$@Ҫ@ظL?Bq"OX Pb͊X0N77~{- "DZ>D#IZ2a<*)$*QR^ȿ֊=#'ot$N@U[ݭ2a`W1Q(3I$d)wWeF٠ni5OM_}mRFW6Q`!%=G@'e޾%G\j5"шM:wq'.-?Y$ 20rTJvY6kNHjO}9 yRwݎ#ɮw¢ Kikz. 0/ؠPaaVepʨ'GNKLSX5A$u5E[Sc%_7&5tJuix ?}߿%EȓY:BB6 oE}~o}Cl-Zo+b=[^[)_E)Q*:DYfcjѣẘG`Ҷz;0y2 dyؼ i RJSkqRFRCof]jוv8wPs]+y%rj\o$?ˀC #0De x" y^@)VأHtI9M@okЦ1gznu3];8!YWb0v <'y3vZYI6>6  .4vq.4E[XyG@odNɭ +w|9OÞ?V/{I 9 TL(i{ߦ16 {rGb6!Vb\x{ӈb[t1n5.z)D6clT 7pz}iWG:M&mo\ĜfB+.x GK|z$/U\r-iW<,܋^3[KM`XȘ7aibǶ7vMV2r(̸ޭ y,}^}< ƽLJup O8Z/Yr7UBM7v<:QtY Ӊ8^J[g*i@P|͏+2Xs+y8A*ϻ8z8Zbuǚr3yjbc y7i=Ty1g ݂!+Nb_ 8)Dv~#Q(H񍗨Wך~ܼE,?SZ$7x@h#BH5d :p.zP!!F!pN4u[v^hV(/5f=,:~x~y!jpQJc+di 4֚kA <*x{&fjcS!7Uđ_ dZ ӲPu)eڲ=;$=Gbs)q3`q84aogUBUդ,ZK2V &o4EhTiZZߚD޼VyX)gy >6f6*_gSd?TB:d=_ ^z]Rx4KJdqx*q>PY贗ډ8Sުm.?okWZb£y'E6$:Mӏ].m\\mM8}G\qi{m]k ;={XouARTY,9yd >z+N(@]sOx\8}>.u&e/8@Q Gc8"U*6t_pX))R+Ag HdWc*$Z_e4QY[oIva,φO" .~KHQ auJCl_8^в?c&} {N3 _q,΂~Z ۭr;A"cN7eB0^%'?MTMMZQ;#0C:◱oEk1+uphz5=} {-Jl-1t=ciɂ2vLKRhΏ]h|~ZćTp- v+=\N1~qff18[}^4baL~?#ܩfK;wtFnt]KtXTFlC8ltU2fPiþAL+h>,DD&塳Ȍk2{XD@$ Րk8̪YTk'L=:>H QV(ω]*Ic Y QMv!&BPफ़(#-ᒻN m&UY@a Q<$[^Ŵ"+[ ")=>~D)8LѨؖ$ҭ7ճgMR|s[$-XFѯ Ї GGDcyku|8p{pTb-N\.d;r]_9+2j.|ݮyui<:o=ZZZ,\-|GBYDHXezu#`~ $ß2 A`<2Y7"ZRP*^DkF,mbDz+ժn̜/&P %]sfg.Yh| oZ$B~ǵ'M){F|͓߹jܦPLYbLb(@[!͡TO~N~oY'Lm{_4VHr.ap9 qq<Ƥ Ue/Q{*~LY AT-KaTx5#_*k ƥfr^X]_a?nZ(%j+X8 -Na %;`-uB7Qse] z5(u(KER=I!i6>@X'Dh5 ghRY=9'ED,ZS DDU~«/clF58im{T"Xyg y夤lyze'u\4mY?7r{QAIŧ߮ëf Y;%Isb x^gPCI̬%p"v&9r7Wa /? &,J6iS8џM;n3yPr>zµ{Vݾ '<^6ˡL<}JEM 9Vhjo’sqm` GcjIOV,gᰕ H|(_K,f:D]H}^$_D(۲xZ Sh4!*rgKRu9|NT), E9)^v~#Sgfh zu.S|KڞB+'r |5ZX.vz\H ؜t7BD{8>% -Z]sV,I;B zPfxH|\O{5c!fu/oN5AjåtZ**2K82,WNXerY޵~].>0f W6g$ |GNCs}I{4Bk /[o䞏pn$|jsbB_X[ter 7j  ]M)=VludIZykiT}el ;5$BKmR:an;s篱jS^b|ԡJ(3G5}-=:H(:„0Tɗd?&P#|$,52p)7$=2_}oF!JKaD:{_AőƔkH*;5SB𕔱&5mwHkqL_#S9ʇ  c=[5I{]?.I>]9vAf S c<eܤ4R*dt YoA)j sha4nxh3/V}qU#a (0>Ih K#qɂ-%ޝ}ϛWƮ gj1!$|ֿ"-BTmDE=1c蔽2TkKw5rE9x!"dTb p# fL={ P (!=V@wctk9~I`ڊ{3kyICj]rXY8"ˁ#2v))"[)a0ฐ{%t#DD=MZfW*^MŊy7ªmTDW:Nr;_:̡YMFT7GԾvU~ jf48(Nk- z_v[{-]@ )J/(;?OoXx}gmT`S"9;sTrArLHsƹ_^&Q 88y8zR)X|)1.B8~2RWV>]`}13%=˫zg@E0vױh6^Xo!+bO/;%/̶pِZ>(D]ifՁ!E]F<%8 PJ\; 3/"ьi |\ohD6R帠+Nc~= a!cRiŽ 1oP f .GճҽqԄpzo@e졞x["E뒓:8IבΨ壃 ٕy=TQɒWΟ˙ǂ+e u׏w}Avwg})#q!yhKcȃ{B\?#5Nʐ3khZ1p]X$psȫ!U?{YIuDk9&NEنM-2 XH2EH R^WJѷK%iPC\@7+h1K-ҁuSV=!#{_'.1ă)-fƜX k|2]FG"כ!f_#4L*\DQbk ) "dcs+Jc&0 >T&~80)X (kU-!opVyySY-^aWz;s|Lfzs eǰz /:ڈ ټxdqעmB<1h+?,ALp࿃t_$nS4^_}F1sM,L1Sgʷw≑$d@iBE٤v zyWda5wZ;q_%PVG9f^T85x9P{{ {{l4t׊qKѠ(˺cާVx@c6!S/ ~BgX`M9 #aaGVbu 寳)l+El "H.GHG6vsakxuW*nÀ U;b\|1|EMb綖w!R#_U TSoyӡ!:2 t -OL/Z?y^g=Ne8cW0B#,AmcPѺ]kv#If>YLnk2 ^,9~zwQ4- TS"(dAƑ i1&M% T;e\|,?˧fw.va!^Vom4+e-?f.4V[oΜHUȔGɝ[KVac:,ћ뢳R>mkc6#c'#OB Cp&p]dy7zĀ^pWe{sPޟHS9bÌѳl}2&'yFYdبjTW:a<@$W q=`z# r*}n|Sfw9$fl0*&*JVIū S {<9Mc0@ nIG ޺Τ&(;/)@=tAѐtt,* Taz?n@l3$*Rd Aq:098@91uAh(ƘǙ%G[>1@|Ò˹һ95\zLã؏l\ G)E;YʈdWMrK}b~@czNe:V> QotN50QL:罜)E/eW1>Lw}!>rhT 7BJ UV[w;<=&;!Q-w "ή GDrRy 9sWB<Ժo!WeqMBVFZZS)->׍ [hr45fBcpUlG>2=C`@A}YO|;9$j`V'u?gipZ`>pDll.(jSB](Ĥ QZyBa Μx ~9Fl z~X8n /{*hD5λRI7Mx6"1{A̮̿`bƚBCUx9{@aggg6cJɣz"qeipYުp%>bR9X: O>_4ݰK<8 Â^i?ͫ@b+IѺ^Q#M3Q5&:*3$xKҺ |'QH3ΤVrSz}b4u?|h|CU]WD1[nհ"G: }6 .y2Ll; >TD$=6YDc,;'=9 u`,H;.u+i]3.y zXC╰eё$B<ثH>Jj[g4E"_Zc:M[Dɍ`\(|1SC8<)(GpAgWqH%J{3Gůa d 7< s_*-KGU* =9U~7~~ʾ@v:R nmކHtTa-NX؝$fnj$>E7bzFgy`>^԰J2S[=†@(Un~LU"J16o RJ94UR*! [AT `66[ O2б'm8C6| h!M -ۘ;z0` zѿa5ti.BC܎w6D;IB̒?= tҭ=t{d?DDX4ft0xumdj[[m! =(4h̄!m(/:&$DK+JwZj> ٮ=Q0SW h2 ҅R]-tM\ ɑH" IQ %|+gLG%`"§T1pd'IEJ_a99g aTſw*EydwXӮ߫L|bEr:XcSjL޷#{vhRwYuu3D$!TVs/e ` .<5$s`2DςŰ-3){yo9 )q@+;5w"y$ހw"y!NgS>`7P3..gU rcn XuDJ`ʤ,wvhrL[L#4iz2}8o%H]  f0G]`'ҁrIq1ĊM\ӶM2R%`w3O"C ࿘~0)mDaÍh ,, zȼ(Gq:{Oɭ$)C y9,'pEKLV,<j%$q5;|[JśgcOH^dɰ|{>iׂ  wMt[?SkDbW/ ]M -`ȡבhCOa}Q<"Ofֽv+ 57V_hHg^o`cJI/RƑ$&]/HS a`l\n,2afbG! 9΅0pOhu5HEnx2]%scBߢ|J%*C$Ƙ! B& E=Z +,WL 9`Я%ܶ|@zϦ#AsdUOX6t:g&kݢ*3J8Kj>T& Q(G;,x>d.&#,] 2VAqxWB&^eqɐKgS7zaHf$YCKAD'{nu)d93$Or۱!uDrFdAdAޭX?s]?Zz mK=ZҘ%dsu χ[MCMtP4uVK_@$6>-! u35f8 1e2u3 į۾A_Rk*D]1x%6njA[/+.R;rE ' :8EGI+غh[CcZȈU_У&0~]x,F2eЏEI8 9$Oll7e?9Gs b?s%!2jJm/Tm0?b$WLv|;%As*)o:Lt(7~%cSnH9qŸ́PNEBꙍTQ[Y޳ Fnv],̣iE=>HK +Dž4 ֩Zh~,QV=PvEes`۰5^{8AkmV6vfC'YZ`yl,/J&#&IfnmTdcTqB‡v@&n>!Rхlė0F@[%3:嚰az$˅ɯ/:+A- |@]ip=~X`AESE⬯FYuyMvrqwݽԻ0<C*z>+bfҺ <$h`w *'KLOuwg.3,S= 0ve肮u`;ʲ"N触wr-R|ῐLF%w,׼~q،Ij~Q(4#6Aevߌ51G^ou1RX4^MߒoٓU,4 ع(AF;)gxq%L~m0CkoSJ'IUao -c >7 I((ËɊ,[< pHڎ Q|5s:\rf^(1kE2_f"r?CTmvn;C:5..KIWRB0WP7.ܕE kitEp^ZƻQg$?JV}Q0f6yl%aI `+e<2T[s0䣴1V1LgIF Wf@A:xpeoc&= 0 V.ny>̝u&F5 ߒ<ި򃩁hMmWۨ]^:T %5r&o@)\5t^-<YyF.C'F;^KG~?'̈ 9&CUm8c#/Du{L'_4ZU.`rMpA}X`zI%^ @09&Vo!>4\NR2L&Ic::RCE='zQ%I:42g>޹o74؎P.uKtaJ!Q:4}) e!σ^l  $3FCHktDTYp&ifޯ:ra[)w<>j\<7N?0(M5,ӷrU>gg\%\#lؽC=~h%\]Lye-ȆG,]CfsQ k潬k0f5-(`C]rdO1q%ݑcr%ugiCS:p'fN`H?hldz2" WީtkRDz,RcDS+{9=nMx3}Ҕ0:Mbj/}oJ8Sj˗skĖ5!%'9H: @+噛<΋cE+< HmUj32apւV|x7NAۀ~=p. HьJI)z%fceXhHW2=/#уj󧼩{IMR~RL;Gca@#C\#dz, C x)4☯A?go=D:c狜wGä[S\Δ Zywe89sA.`Q+Bm\ >|sK9Ɣfz"[.8rim,4=/_o@6 F_]NiÈBӰKiciK|3׎lz/KHZ;x}|{^Rn(]~CڈX^u>h$6COb{ӿ 'OYMȲ?jubϷC],Wť.( ϙ/B.dSWi}Ѻ;V. *`y%H:0|Sd|u)ehTۘrH72SMv3~d-ΙV:GeTJ\w+ܡ#Ge$tAsm!:JuymQ=_oͩߋLAd}͡bL}n7ԉJҵY(4gvkm<%epCZ"ٌa9&pbS3%YQ_mRu|lH`+cEwܭ/rC,ΐe#iHMIdt=%MgJz ik\R6 ix-V8&ޯvq{w,&ýfbN=.R}c|Q&.2jDž}h&1mѬߌ~쳚o ,a~.ժ5ym,Hx.:)%8k)`(5H* &\>W|;#|~;Yn 6Y\ 1 Zk;Sn $5t߂|RWK ,a/99̝.-x˂ٿp69 8 5f(4Q.=n/V=g 7w+5cզY=(CbIZqܤ"d;bvD6 r#. VR9KyW&c wdeCiV9{Q:?PI_l,&,>dq_*5ďFr,6˩+?mwFvRT{p gKVfVfeTƱdϨovZ@>MffY+z|"|. c/0?֭.f/W|UԾІ_}4Hk)_ӗ\](_@6K51 氈xA, 8 ψ?"jgF {En`08 !rƼ؁tvhUJ mL.^]e\F9b Qw&_o23:HVP{d]2wiR_Vut`UC=2R׉W HvS  7l%x11aF_N^/Iߌs8#b?lBjhKA '6"]W + θSlc\3eXjUbcd&7kx1;cϙׅ z"#h (zՐ+ cޑDcfQ4\yP{e׹ˇo3:O@NXLZAn9 MӗVY;ݞ㡣wi@B d&'7}).om$!+hrۂlYVcrTôhw&Jd Jd*I#Ss;jzF`Z'dEAFhN( " B9/*ykΘ_M;\'͔ EU cU]| /z~( -rKl$oN81 %;<=%!)~>/imFbnb% ! lrszf7 qRtd6c5W |<"|;Z'c'$Œdaek?CuQpP G%teLBdT>&aߖA*84 s08m˓)2EyUWL}BoՌ3ѳ%x?{5->{AD?OX %FLH@ߗM5=}_#6~RșZ0W*P8CkTy?=Z;/u VUK )  Z(]-Lђl7ͺR@5ŻF]ARBb⓷!\i6&JGm( }WȲ۬w#Jyrhmh$Gݺ}V8Zm/ #d|țRCJ>Z~A10rs$R[V:Z_ ]⤳" ךxxkU^ l;Xsͤc3OmV‡~5O/$5>=2ȘpbGE%)鶓ir (SV_q)ѵ}>yi# Oms[ qw+gOiy31]ST0 ٰs wQCi@,<]Og]B7T,S6B3) >+B1BѬ"qƼPZFeRBpfG]&+NGZijھ)\9m?!}NpfkE6QK$jN!.T*eé:umejL6f@`;x蛆1VP EG AY<OK ;Ǿ{Q!&Ҳ~jbd4 $$1rX`nzKQyM;}- lӵB(YRUM)zБ< *(d{D ߈#|iB.nAiv8IH>TKUq_1 1jTFv Y{X 7#ayt)pn[m&NoîP6y9^^<r²``ufK)@VJ\#z S_}6NUU+fL$(= ~1<궏Z- 4 QↆO1C id"8rFmn0F䳫crJ ܁{ V>1`CЖ_y X#VE͡lo_IM+ۿ_g[m!<]f- V끾rH L?WD/wP\䚟AOv3ƣfeli>R՘fm3sIa`y kxwr {%FZCF(<Ñ *ySy⾜6I©=܆WV)Ď<7ǑWbpZZ4# cL**p %Qr$'!Y^g)?N'W9}4ce$%*h[S^jqi.!Sݽ^D>Lxv,hGx Xְ6Bɽ[{ly9q' Lj{'6]slHA5Tr i*qٕSw[0kÐ)pix3;'xkM řx+tD_ݙj>J;ΚUT:MwFS QLA?@‚ NGpֿ$7UΕ PZ=awmg2knjlX 0vV=:@PJ\roE!zbPf*7Xı@辦'z+ [Ii"@ŒS@ciDžB_XWU%N2>t_bpƚ,QQ#b&$h| OA|5"`Dݏu#=A)sC딁"aN1?Htщth,|m>m3ڝdYf2Y΂mgrVM䷶bė#D5sM2N_;"Op5|IR eQ&t_次ʆmTdoWU#%B?iQf,(W+.&ۙ-lda)IJJ67;Ɗ5Yu;ڧ7_Ӏ}s?#*j0h]XRFTˁ5T'@H]l=2FǢK7.pҗ*N3A u);э%yz&'nUhYF 2BMˍ$IC\{tMtD~t# DK>9MyS#ӲE%,PvX#ŃBaۜhk K[W ZEE RHuQh&P{$"X{z-_ ;⩠0{1x;ɤ!F](o^s v Z?J(3/4ԧ_elTcm7IrV43i0]p aLӕ?Ws!ʞD;'͌t(&M 7J[\Ci& RE$=+?YngjjlGK{Ҫ"E)D+\X 뼮c(:XSg2c_:؞BTT4!=`6 Igs[dD'%黨LV#Pq@‘н` jr`_iɔTH S@p;2 qTđ Y[!R"lw#Adw0g.^ӒW`,v4X0JٱtRP}hc@Q3@~g>4+rIUp_W+ZԢF,LG",C65od'+/'4NIƞ@oH5G3=$hc+T &p擨=Drʻd[nrcU1;wfP@sљ1 [ߠH[JiتU٫k9TyTй峭cuTʩ:vM=l[A4%BFEN8[>0sY9~'9K9’ L ]BGⰔE#)af~?8KkF0R0{kNP5ֿH{lcI\Z0]}OicGVvmM+ 6^ &+^ 2\/rq28{[[ɾǴIue-zvWDF_ِTe)A9Y:kvR诊G0X b{9e<we,*0&<\"a6~R7}yAB( zUgnճ"kçCQ5we/!'Nha} (ʽf՘B|ٔʶz 浞/ݚ[!"I4S0kEer `3xחˋ6y.ݱ{ǁN3`ܡݛ,vλ߃"j-TY<*ٍ(W6^g:h =h${a P$W+Ro +ϏҶ4H 5*n^hpqP{6FM3F6Jd6!I@RcH_Ү{v/5gT^cODκE}bQ?')^0|hYQ,^r\[ kM.PҼdgZ+ pT_Zk%ݰybilpp\dɢi1I-;4I? 0)^Xlw:߶I \Es= |>~[I Wrz]:\F RUk~ް@ԓ.hh$bn`0=W /j(7QORy@DA~>u0ZP=u}UOCei1 yI7溄e:YxJsV \m\ˠ $'z& \^mlf*$;"<(|uV)dso X`G}"4w2l$to obїF[.t-eqs(R7rJw.430l{ /7MAK?|9 ַ'Iwn v?a_[ʱ/0fEebQٜBmɡ JS,vƘ $\xb ^-qhb"g[M]dGp|rG6Z,ݜҽT0U14o$F}( Ԣ-n/&et5s?Դe1e^#HcSA9< >&B1׍m-4Vʱv $-6$$YU)z>H`3~@gNx mcL7[{պ!L`` Lҳ*/3kUF:a`J^qF擹5{wd Kx M~5; zQqYNtMx\WZe;l5%b$1lc]GR}S}Gce({91".3l %}!w]MjРr}[VM迪 |UgT7Pë::c:; EqMhY6okN@_|vPm9lWUUf!\I9mʪ,3o?(qIK%kG~*j찎AІC] ɽQXUT6hkb7!t24|q3cWX7fz/I/zAla+Qcz'MopN8%8*krIUwk=BH"'*(*Rsy)ܞ`8eOX|9%&BOcD>r=yCXM#ͮg:F9ye$θ@nF9)>DURay,>IoQ"u?O\I0嚖͏``K+E/@k >M/9ip;rfhb+y ħb,bb'b){|^r˲7Ȝ0f~u5WjZ%ciэVJy]&H÷Պ[XYg1@Գȥ\{4Z&V蓄 s%g[yߧ5"<K4:r/'^ FIPgLZ3UDO^-A25C֐ش;Hj)z:ôi#s:e 14m8Fxane8/Z 5Bh%j.u" b14<]\ GU>~{Pঞ\;eD9ȼ BP}0QٱrWvf&ԻԇԒ]v&ans)*|B6e1`u#B#&+;TWHi[^'3&'+.ݢC;%SM:`Ń~7.\e5YW~4C SpJn|4Ѵ" edx9ZhJ0^.bq tQ 4@+~2N¡0 0\d`uZ DL^&uD'CОq ՕC.ìQƸgMSh/>_c ?,8%cT/=HxpE]Ru,4KYI'$z+:[U t _NrIJ]bo ;ƃYf9ָOΐ{t^}+^J\2TtMGC~RŁ؊Gi107s8#yH|D8|($-gBQbB%P\FT¯z*:6\( _X< AG9Ĺ2+Tl q諾KYHUz# )pz=7ndQ'p*eXnn7^#[cDVHs\̚ ?dGK6bl B,@u|'1[G!־vIX;!lOj_hxK_,nǫ$Bܞ긫+Kg ^B.ޘ{ʻ(W+(Ԗ +5<24^ua;=};% ?vbߨpG5S4{I5ּVNzDW-K@hX};Z=%7/`&wE LMg;/Ǐ{2#Ze0ƨnZΛqֺПYl7b:n=el)ɫvXs[#Ue.pmcF}&'۳1e$eJgUF hsÞgUЂye&(a!zAi\9+DBfx'&&A/JMiIW1OcI.h`ZbImtVtK3N]T̹dRM/nPRVC MUڨL$D #蚵u/ /!UǪY:>*mYt?u")Aڒ)`p^j 5j'F]|URlϏ׎j TiLEQmhTSN~Dr*hALo9!CR-ID/ уl&Cj/2 fN6u‚a8d>pY^aZ uȡMр9urTo/so2cӸ@(RAD 8G_|ٯif~⃅ȑ=1UACyT|k^?xn0]j_ʝ h;kp )D1AptqcskE#ZP팮iK%쮌iW|w^)Idju3dwbVEn')S^=)ԧ$tQ5.*m軵hݤ36i/꡻LYW(tƺmDز5; s zY&<=w{G!TXuaC`+zwk/)ޏ\GA϶ ;^:L$4?! W*2 Ri!g {Έw?V -sVs*Ɩ+T\GW&՜ B"W%Ehwm1$4x;>{f]G31U!g1WA [B!.F2^@ CI= ;R'Mgr :C9ωmJ S5!(RY|0s3'VrFWm7oOf_@W.(&nvooFV,|دOXtmh욣?݂/e Tl#jnIZ-Elړ845|Vf$Z\GaۮH<(8峽y k0~w/_iتoa0|ԃu/vln=~g >^U*>A=}at xٜ8^O@U JZZ] 3g=X}?$Ʉg9Ste/Q.1فA6٫HROٷmo:UO-7z@5RQAarцM.Ρ`Ö1C,N"n7$@MQwpga걅Vcj礤b9ΏAbg'䂭5C >.% &ߚV$7!ĖMG9RҨ)Ye "~dȘE!cU̓zmԬWn6p9'>vMϮJ_u.Q(RaЂ2>sLJ }]WTD~faAH\=;4 1 p" SkpG+ERߺ2x} ;?Brrkw$"8FQ=Xyt_v]B[cΙo΢9(9(M}rGY- ܌'+]ӄZ|+Ѣ6#<4De[VŠ-āCmԏ $f9qtLjܚUC08ّ۬^±GAffd=B7c*-낁649|}nB|4CUĪygND?Tbq iђĦ /Txe2?j `R4̞i2/6~4FT~8yՔd~@Տ2{vikj&,gX,?wCx aBpxUb]|D/|4Ҕsob?F#b& F<>7*Gi%1ZT3 1~-.HQժ5/oT~6C6ߛM2o 7fTr?spC%0# q.-*{1`=$RwCET@Ra܁"58#?% ԭ+2~qRfC]7㦭|,Vc66rvɍ$0E췄9,&Z]nj{S [2 $W^ IzM^pg,Nui#uv59k".}*Ⴖ>ظ]DP7OTQūlXA/ )-m|QHXyW,&M/ǔ8kT$OoDp4@_TvىQ6x@TÆQ*g0[#`'< hg$RѽkJEJٗrdeG#jQa$M#C,[XTѮW%9Y3Y{sj\?~ʊ'w |B$K;;N)w *juyA`B "׵tF^Raed&ϫ_֡e>݆F<,8B!_?ĄW'7V4?ߟ'4X~xzŠWz>V:Fy3brKWNhM?I )<x(nkvptɟ$q%~OF TBW6<7[i1$6U$_#{sr"=i0Kb[GzGa YPKnvL|VpRRK.#V73'JP^N!$pTQZdYM]圤}Cpubm0lp*4>H7ẗP+loQA01njq3XHnh{>}k*P->B!z\V*fk$hPA3ceMfK v&m#&n-i&b7ۜMGn[ξ ZM*gKh,VW(+n>Yb ITL ]f/x1=j"3"*lZ^U+;ceA^&C1=A0l!483Sb,g؋M?rXľrKbcm\p/kME,;gb]@a˦68Mg zun$Dg?z,ri /efK{*s 53>QKa'?!|F|6 5MHb\b\|R;(_js|=p+Pң0[w# ܢ'b!V 1@-8Ct)a5R 鋠BJ ǒ_;AJ隞uohDz3?g AY=LmѰΰ bDjt-rs0268} С:T`XA4^wV|F O1'B9WpN!P9J2[ a/9ILۛ?CswcǮE7|4B ឍ0L+Z[zm;9#JL.eXҲ+jo/%E5?Ev-{MD mMG ١y<1?u"jʃo!c!T4}䗺aMeGɯ#*]Z]2.5&ڕqJje𴏥[O M`QqR-ш'>m^Ktz b tfe[ # Z͎ 8ԫLGYeMA㹻c*@"zj y\1(>]Pո;Y\t*Lzꞝzǯ㎓eL0~q *p1=rD>sauXݶ:σ89Z8_ }>Buksn:uHq/0x"͟$Ӂ55 ]! H25w(vEg;ĮFcK`s.iyn}?oGIR  F4 nD*tA.EYem"T 4_ѓՀy6k5o*n-IcD!NXltޟdmI*a$$%#RoEkKq Ieʸ r>Rz2`  y( `֐L #^j({C:dTu% f\;5"2}xm:]~!/tKIdșTxlh\C"b ]t`t柖&_`(_uvxu4( v]!6QX%Ak5x ,Ln@Q7VpBZ De`5m/^!?pfjw\m1ی]'CrЬQOihy ."*tJ;a b1o8 a )S%5f0uqВ J'PJgZEEt>/Z3JP}p)yVºxGxhD{Gmj,ʹ(3}:w҆8 Fv`'F"+cl\4$U@)bry !T{alQ~"BNbوow]n2oѵ1l)Ûh:M|˕sVG; hC#f ZTU?ܧfU$Ha]L' /wK &UBK6bĪDg1fCdݕ*rwR餩Ea!%誛ѱ~ `4 TOl̥2>Xx8ƐU1|h!{/Crt}nr&O 棘r* ޽v5OSng\x C֭fG슛{Y<#%$оVdW+g2ۏ q#j^Dw|>δ;z~UJņ9=[ny 2Li9="%/ 0@V3Oհ /GV#r!wG_y۠C(Xpt+pCtM 1oSA.`Ix 05_~c'` ҁ*,\If5AdOX]rʲ tLAUN6-}˖KH#0e?ZGE]_vp_YUmWw,GSzZ7<~pV bO dOq ΃F{MgUJs{b샒w\iy%$PV>ݶ`0=wsA: wpp7 ~3.&a>O,/xuX!98p-$jR7{2^>w)dIX:>ژ9_҇F.8;!/A J]pT[+Fxp>Ybg75U]tL40d+$N xI2Tn.V1 xr-^=w9sfViF XͰE"/7"1G%ש˪IMS[pJ%\C#JsӧroJ4|˃ (G/gQ`ܭekt`_v@m wJJaNA|?x:ڠ1Dd/K櫲V1־hGߣ!`-+@0/D^nMx& .^ۆ\4 JKR$l%p"ءԜ4\zMQ6,GUln53sXb"2dtWsUGnC:)˪F|m~wX[ (%{Cȧeԉ|~8%{Aaĸx3tKlPt_#OD)Z3$tӂU T `'P0qX %~"GW֍(:Xlu4$ E#;0JEQ# ') i.hXqf7]ؖvb̽nMцUsVN5+e"4V 67 Ce_<"?%$qt(|CЭe3D~BL_o 4IWG;_#6Mf?q%\.A yΝ0FwϲvњORW,4rP+zհ5Ak_`10L,*/='!]_ޑOэWc<ܾ7jU *3z/A8۹`ljU7-/Vj**rj"CAf҇رʜUy +04·!63(M1qS$#^Fwu?A1QXps>zNZo"5ukDU W_bߴ]#B7;18H 'wAGS?{z)Kz.cEfc.9 #sY7ͯO.li@H+>e0?OL1n8{^e x(SYIaHXndyame椑L2Ӟ G-DQ$Np4>ne_ opU‘#tI_P+u"F Ѣ7rxc9T;1eP*m H0l#D+ͅ2%T]ןbP d7~Sglz$Hb20nD#,CV]?5[hRm< .<^>OMf#U^ r;14Aa_:݋T iۙ7p ]8umݹ*y; Fw,߈NZRf'9[{jFu_dĿ馰d6X ˪+M?+-$D|a.R6qrnΑǮq ._INmAG^{#`,fE_EUY!u姧 2=g5.DE:bU5wIHw}INxf>YoL\ rHީo)8a:Ub*Ď ֎.[O@B2k6դH8F /)Lp [rj=5q|.P%ZDIkÛޗ=zX 1D[B~NمV](%]3fڶ8z էR#&FnR(LJ{dDPXR†>)6;:[iC] y"r塶u ˷Wȅ])ge%O;#<0a9 UI0PTD\p# ^ \پ4-hu7-S**ݢ.O͑/cDguWUVs ߧ'PȦo :Ϳ\95?C`b0C!˳i̿gXEQʅ" ro &sE ܔ7 [,_Q{*үcΖo42{vN krP.ghukQwLETwzRE1Avu:+ =ձNOMBt+{+L4Q>xLx;.{5ĂEח02ӂ#NJ!CܖP2lP[i,1Oymco]&.8pTq,V~G?'~Eh4FR^7cme[ȃ^=t00mi :j6͓ ǿ{gs'R2:\d! ,&1pn 5щuWn=̯2-oG$J1G2!ᗀͿEn pE~%U`_=nehMN>cQ4o][D}#/\"[l!!ouhAeMZ2pdB{7#gR>|?āh^̛C;ʸ>n;yṪI OU1|m4U%=o2]^5-V.ZNt7~E1)הCq+OY23v/D#F^ i.v' _XXgӖ½9t*AB4M:MWbdXta.7sw -Y2B`_/p#|Q+qnܚZ+'[S *&1}<:ζm 84ICK:FԅqkZ"wl9Փ 2*LߌOoFwiqAbh+]un1Ӏ:Hk9j~n3Ђģ<}'TxM9SPs굇 ׎ 6 ܋ uWrRxgBtVxJ?Ǘ+Ncfږiy<@Oo/Gak,2$@ h5ycQ͉{:U<鵀*ئN '?{68,pqiY\- ( 9KohdZ-qԅHcq`X+ 6RM `Oh6ل^G #N(Dd:+ M`߮4\i0,7֠]Mu0"HM 3Ҥ\.Oz ~ M*tvڙh\GJ0& Pzt{phePꩻ'Oطω"w\TxܰioE>/-ɕv"C'zgADsrEӄk)W Yy9r5i*^&jd_R6I2iv~7L87"/ж'#{ &W0)MgوJӭ`=~ٿ?Dn0qӤICknh }>&{Z!- SdVS}paԱjt32+/+Hw gqGI1n崡EPpYA3x݈%j}NϿڍӨS( eWǢ?yxErH/DdRfj`PvdjTu68?1 ,qB7TL70yU::@ r' ? uH˜,`bP>c?pJ 3g!V7/Z{x6z3.Ŋ(зorƻx0e' ̨xw,Xc[^?#=$ƮTڅpj<Jev1G#lMr1a:np$2%V9~< LkAf.z"Ttq=񧜴ҕFU0S%QuL@p[ a`g=A%bEO͍]0GCYnW'0['{IcuCQ$5S=jDÈ1>\o*_R(]fs3?Ŏ #;Xmn搰(o-F]/3>*HYqFR !*,OQ͟#wq[2W$A[ 0sF?2'Kq\se;} lJYFe3GܘZnd[3XDVVnwzUvf#N d~y$ NdV\PMJ3q@RCcǡXS ?ւgCڌ 4.PlƏ/iXݥ8m맲w 3bEX^_HS@82xmoy)8FcɎ V*ih ۫S>+*a+W;F&PYggzX o OY@_G$ra\39AՑg%"r= zi9Ghm`dDQF б*mND757 Das1LD7gJ`yzW {I6F9KDu~XU.oMo-0ybsS77w`F G ̬2k ΑRw.8|^EXxOQjܺYkmw2OVU0bT0LWLkbVlupChIT% tD ~)~`HKqɏ0PǸ4<^)^H$ǎ/ނ+W%(r˻ꬕ>7$b|!:pd Jbh|Tv-}qHAy=e}^7?%+MH״a"=!Z\ .`]0xTOExOZ~Zj׀0Oc=H7_yVF62T[H50H`2J1zzL8omaSvݾ\`y-R"ڰrذ>W6QO y&,؁f&Su36>M fwպ;QuO3}2-qT{5>U8_!@ȖHNP3*UG͖[[]?kj 3J$3e}X\[]rۿ0!e`:䕟>?sdճӃMQa檫QG+kG@j2n>ʓ\R{gHZ['~7w/Gv~H#S)+B0͡1^W*hoe᪽ISԡF=>{^Mx'j5CZLZf)@յ2)sq.Nߖ ;RjaB.X äiXDQ6yLJES:j=+eH!k>j>#hHC:ͅ"s%$R[5ܪ-WY8&ͦ} N9뎛tE#P;;ڔ'*%yf6R*_{%l;㈒q^>$8{jHGԭiѮE3Eo3 wh,~=#ԫPRIWGd.n𨉅(Wg  =l`S7weͧ#G)+JH2ggRnoRG5c5yz[ʎ+Z%e+|Am+2זb1lJ&%ce=?!E%zǜ|+7/])y^YP@.(eI"SFaV Y<+ޝv9[^w~Go}G{Vs$l^bݨkmLAKD{.S Z,*̍XKVT}_rz'N`dRAX{݇+zĮ+|#l_X0޾Fb+tV ? Ϗ!ͩnK@^枡O,Һ!2jjN(7 fŏ/= Z%i _kdv]`I;:N2U_S ~҇OIfhtir 8BLF5. 4ɿlУ&}[ׇC}{yxh=HRssU)[^H|9{yȱՓ[f| Ch ScTѾ( M/e4qyug,T2PoL5?RF^dq8'g%̱cLNgACS]lնl.X؊lώ[q,*_,ATD(Rd/p)n{8넽c+)߅kr۔к_r)KVl oqf?K?ERٷ.&'O T/3eDdž> pCDݏfcz?R5(a-Q# ?ַ" p$c!v@ st蹪](ct}Ԁy-'󮝀GKS̋ttvbBYNafxԗ+y}OQȥd<]Z;mp7O̻k'ɬ}LWfcMsn`m/=o]g:/ڠnUyt߄қ,ʷԈe> u`T9`MGBDqŻq͕%.$T}tUe{A-}if|nɔ獴[rn2'9J3;uGy azݽYU=vmx:䉜eS-!1a?raEŽe=+5{T0g*H x*AS쩾NS-T^v)M@fw 1PHkVF $2#"w&0PXᾥfMܢ@\9|Aʴ:"~) ?-HLsk2t)h['߹W(,\^U7@ɷ;`V6e4[ &Ƃ"怆ة`U`FWJz[33{x}1f&n|3\RI`M@yHmyy/0HKڠpc%Q0ڧ;Z{0u"BCy$ØEzʝ'YXRNmQPs[@M@ ^nZ̰ ][By:ݯ鲆ɔf- |B7v(&-juܛ: UU%*_ĭazzF>1xĀ ~ u 䊮1jvb6GQ RF3Wo4u%y%ꖻyRmYیJV= liD,, "2b3}kJlbY<αrEsKm}K͞csV$Jń<;x*BVg6[ݷ9_ǖm]UVDH¤׋* c|8*?6( D8s6{ʒuފS>,)X8jR m?rQ~azqsɕBw<4 &`*HW! 7V(v1e u1; j@8->O.S&^ӘZCV${q6Ra5״bNtn1zk\+A OxJؿ縭oo(d؂-|F¼z, a`I!45&Gζy`/OMWxc{Hf R!6B:F3X)F~ǔAcxZ !;Yio,៨z|5ގ{VaQ6Z62=\v\U %v\1]31^)\ά1(ֲ#/ X/@!]s@e\[v͞PV^;h}l}m_\'yf/r5,D~hlJmoB3VqvwMlD8R 5+I8iCOi=*oRi#̈fLi( k):~wpWG$NxG6Xѡ[Ůri3T;ݠ$m[YaW`VW0-#*h?УwEcSfٓle:2K~71\UA9iUO$-Eb]֡c8x5x7KFn%Vє.m;'Cx&DhﰦVli |hFy5` Ћ5ܱٶ jgqgwX.}fb*P%! :>CGXJm 15!rS|:m<ݥ&5o҂*E/v$rӆHɏ072 zyꔁ WB3:A_4ж0g U8(;gtpI||PBʀ,8do|'3|0oߠ鳊mGv[wjNP=1UZy?BH~@e ?U`g$G%w}Rȳ2x/ ,剓:2+,p3aA /ԃW0qh#~:5U^YѮ3H=޷!:aJF/.f $pɝy>Ⱥu)蘴y.8Si qu*,(n:]и.EL.'*o{/T~":Pmzώ4mدxI A$넔>0r:U ۵eZ󙉄}p$fnkdNŒW:7 N eg?" x&u(2S'C me" (&r ˴ O˸45~}bkEʑ~t3[ ӫ-_+ ^>EJ\oid\Ďr}M H{A*u[iײY@p+Mudw0I5<\~uR0S]4:Mmǭ6|K윩ײi8!7KdAg7{ȹ } /h%Z$Ad ?-1v-Q=Ufg~ìeӑJ*z" \N|/E[97@Ns7̯@蟃/f;e4|Zo" ,9Uҥ{F.wj3b8돔1-]zseђTc?J9:ˋghgԖnsC{MjbVFRF&: A!KD+u;7:"*6S݈ SBÄ8#Ү ?5tl`3VGu_-yp&deI ;},_ ygv[S/byyɋ{D j}"x!e Oq1F/;,Lxu+t"6<|8bdEl'u9l6 -Ӹj{+5Zp!Eǜ rLסɖ{6LCJWcOßt#+|W9 90֞8)mD[7oz6ĸAwR.2 @cUM W3h{X$ *qS>4$R;M/4ͲI7@t3soa5m'NM-e^-D02EW acMV[ P~^kih?bJ'g)0Rcta|iiݡM؃_&X'A;˂ o+ &:6eYF-qfKS?dr'k6Mnf Zns-pxT lFXAk7_̜|vD.@E8^so9(HSe qmQ0@&gZ*M1uL|ǵ,kZ#M!ھ ;u(wvCB3…4!XZo&M7ۗӬJ7m `)X튮Nz8@Z"Dcφ[?csѶkDh9'2UVKHIZr\E ݽ,GfMY0=W6Q)qqش9Q9\68-B*X=SYċ rJ'. <Ƣc+S<`">ڜW#בGBPqB}҇||4u:.eq[b"@jzr&Xy3#X|76]fQH_,]O^(v݈me>Hc'}5Ym2lRi湧Ɗ) w@I-7E8>.Q| MYUʒ⢞æܢ %t‚iQ1P$u+^~145"/ `/ 3B% K䔃 [j>۞Q#/E4A''@k*]ZR!Xbu3C*BA`ztrq"m-^367O6 SXl:nkmHNZ/V)8IT3Sy8tUkE C-BEHbI&Nh!-D?5obs ?^܇f .߾۰Ů^'YY`QlՌcTF NtV8m>YbkExfa2w7jzWL)]52=MFZle[s;m*zSp |gN-85mVL8ZAqGu20u+(d? rlc=h)i;4\jql ^##r>ŕb%RN UY;<ײHߓ΄SVdQIp 5qH;ym xjeDybLZYْOp.A.+uNbrnjw4}3(]T<*en)BAM/WAS>+sxЇStyXHpz(.f&YCs }G[7!0u0P(\AY!Kj"V206֭Lxwn@yt 0;~Ř}$b rO@qI Mc2Ș9 ǯbd8HN)*co#Yl9vɊ;Dޕk̗ )Cd/c9gۧC/CqT Mo2Sҙ; {; EJUH4ʩhN7v\#(ǔrA(5oGܼWs*N_ fG"]٦AܓwiDgO _uA0OS |qd@}iSo;$1C˥.?ݲ1)%V|&[|? (nӇGR A;o*K,ov צ  Ga6v@1nԱYr~XDSۿ8,VoOB"FVEMJ`ɎjGX+'WO|[ε,FRA מE<`>_rbKs gVOO(E Pܜ݄hEz[XR֣/5;HX񇱤>T!7 '#꙽$3 v2Ix WJ^) xϡZNw7)/~?H.{P j`d`m;rVEszߙո/+4D}EfO߹G=&b[b# z :%k. Fn=KE+nY k_nSFƺǧh x{sw~/|h-; )4:pCdKasE*H4(XRO"CV=mƩ_&4Qyg8]oڅCmqd'f\ w'"!]ljGUe?AI3DwQ@7%[ }DuYA),U F*7‡*B;!wn['m` M~J1)fsa Y<,8/o+ԓ~//XyWtG9t[;gr-)bf.׎ȩ󼽾m%'#$Dž!y{SMԉ=`pY5hOq\ 3!_T^EM;u0fPNƻi)t~/lo H}a-~Sm#9Ϯ~2O ׵+">xx2˟3NC{93i6ק qսoZ Vqwq16&jvv[?V%vY9}:ķQ B1!lWZ1=}- e-c&[nu}$ '~yAIacм1NjHAÐAixӞ|L3K&]M# h36Yz2Ҷr8~,&X~: 0tc=}uAx调Ff4@]G96{CAx\fbO }oMnLe'kE~,v{^%lQض*#Ѳ2;ݡ<阁CdBV nVr0L[M KW6DsD{gx{J<(ngtʎfՒ$`\,G}f$x.s!F&ۤ\ K21\0iېՀgFTA quRGqdʢZb5s JAM̰wmk%Hc4?uo= (ʙ-: XkWY0VXbnJ-UիhJwAbmk"WfkV$De?-Y0n)cHM;(+LUs qCm'7b<+D"Lc3~,И~HUl{L^T6 4pvczIE8}L2 ;dq$-8l3PiTQ0 E?SW8>enOyrP6ǵZï#V̞EIhKZ7u|棞mlU3m\pa!siEXAx#x$ 63]Pv#L?&=cߟU+!Oty3Vpo1%X7@vZ%ss39(pp6\NI&]y܏<qd{W;:lT6+5pcD TSG]2˕k\ؠF7lxWUTъ ~QLqS;TiMP1T$/gJ, 7- b㽁+NY++G (ȿJ XujkKKnfvk&r+␢=Y7^$YNA4}Yp~;ϼom3_%˧`ۈ*`0ePsś-M[1Y%^N=dVD#(EE77Mp{|dV j+"1B@lG,T%Hh`qlM\mFڡ*DԂY:r=&9!&[υ"oRTbQM" ]$.W&?!_f؝sRQ:oa&W\0 4z{c>%} Hd.*I`@)KBHfF3rAmE:STA} Y%|w;'B;O8mhTJWՀ">v2abP˦'UM>MfcŞΕ )_D:/ԥs' g0WVrud֒H@-+Kk@EfB;.I<ʖSRpƳ&G\ں1<)IsX=toJQvF ?b/F= 7SԭYKF@ۭQ+4 Xm:{57B/g=Sf/p|6(?=1$7 a/:^p4DWTaBIKPq^#Y/EﰪTI8\_ҮwA ɴ}:0jtz*g`U6-=p^;3|6keDRֳ6oq}8/x<ѩ9Z"$%7^bZ;mm9|RU#fS͌HIqJ:ܫ'R_^s#!K 3Ƽԅ[L=%Mw"o[j1O1,S 45.|8a 7VobD~",ؽ$%kr^$N}q0Lh{e*6R " { 2;ɢɑن8"A5ei1i]TT2 l9o ݢC#.?L`Tqr̹v_&DF)JJ~bOsa<7J~pL掃 zPA5j6rHiYAs+ )YmX;tٺދbV7B hq4Ci82&o&u<C샺姩c# P2YP;"&[ 63}[w#aץBY~8A Gmdw"̄7q8@͑Ap3hj cu.{N@AX o(4J3 I '5ӌ;z~HuT]jTV r1Jt'!"$=5 ƄMRL4cn9FdCw͎_?I'@”vPV$(#bwΠS_DHr&s}uYVi9y,^u>dKHqNQ^н?MBKMtnk 2,џxy'iZp'_Qc]z2ߚ5.Gz@\ṽ@څÀV Z\:m\8%/ !G }s4>9`!qr Ut'|*r΢ZӠ:YGZ64ZNUX hn;>AX-q?J#KJ1 dž8 pɱ a=v6:+HUuqbJpuT`59|qv>גz[2'yYcQ̮>L5n*;j'͍(qE:ӟny5Y_BMܮfhzeK)lW {V54ɲp[0쪿"x]7'eX; @_֜_8s΀,6q̕@yhd1+8 IlA+Nס%'3A2ޟLl]DւB b2%X;PNҜD"Vc;cx-ojx/'@?޺xGnWڂԈs'۷=5j,hNv4/0C#M?P68?&\ _7wB ?Ev%䕃]5}qǣڛ*lNO}Ɂ%n`\ƠuK#eSrvØnSv#q(ԇ3IO }нz] Ð,`ۅkO,?N4%'Z(LOfemnwtR; DԸ>'jfM%0PTc*pJߢ]3񶑧LpIϬw^3 k)aO7O)8 `K"vzp5RbxEk G0O0sXBe dUBq!LY MNP-s y?C:lج7aNd2(,LQ=:1 &6",n(o_ T&mnwX5`&pX"sP1.9wck`K XoZ q3r"84ɂ>?mv@x9#w5d8Y۳N6) x9OFD<ڗ19C zYJx9'܊ȣhXm G:SVtӭ.+S*QFĬ~8y㮀-NNT;/$Aֺ4,`IGv!?A3UmAHB&.9/WC[/Sqk'::H)Z9Bt Ӵ:q&<\Eÿ#hĨ}B"v}ci-ZWaovW/k65|֛try / *+DK,tq ̊Z?A?xd5,8inZXtP. *`Zx:sKEjXԝ}<31`j `*/˓x|&.R4 7ݬnO{y|"O.eƱd鯳s}z_ RHzܴ敫kpI繊O 1`[#.d @V? z}wmF4__4g^ܯxr)+sΙ;$L kcfYJOb*VtLw,B&|M%0{ K4iE ﰊbWҠѥ,.p=PvSq5HJ@ ~׉0T?h>IL.X${R8*pY"RXr~)p1K;s|x'~ka1p%>MF.\Л78OV/.''eΉ](gA)C#s?(~n u~z>is_^T#p v-5uV$o|PW$="z魿DpGqy=II'Tbzn%.w!4T3%pϝ΃~s!nYDkе*SNX|UTz8V"=u} ̪I|r,Z̩LBfpq _7ŭr yJtwu_Q~DTW2y䔂w0`W3sE7yI\y+ P0͋lydI >*u}-hB=!HxV4_{Y#jX  rˢ c$}%o# wnE2 䰯߼H|@QD3~Qphdѡ!ixY}"ј'կ= !!Hcݩ|U}mKV5ZBwʹJ d]R tuhnFˉY^p S@|L$@}egN3PkS< Tr@@qDZT'\|omń{_(1biHb7*?$\zD> >3z~:&G0_us̒칢\/'s!@_š_ G}~nO%iӼa=Qn[RUnl'!C&ws*ؘ}?…(|p]4l,tG@:.ZCk,_bXl q\+ 쳹NV\:|Pns8h#`٢ҁ9a82N[?[ȶ#bTku5rIٍKya˙W5nI-3KoEHkJ B%_Fp3͢6pjuZp\ TӶOUYiIC4s>VX:F IOng~ 胒rǶklixNDS_"09PSڟ PE5و̐)@#A65dӊˇo]$V4DU˷TOwtRU$1gI[lQuS“yXב:"#vntY!]oeSD'Iץ{jф7 9''%*r DMLP!Z9pyeeC#rrMX  zJ iJR :x}A$tI}FE,y~ZebKbCÐѻ7PpLqîQ@@qNYvg+QH::9ا[&pU)5{Rr:Ow;BRR-7< K<Ҽc݋~X{9mB( ?Ceu%cVEoCpV벅:dg02Yk|>w6SQGڪ$6(5mF0Nټ"/`9d1/ZcտG#JQ2*EQ9$0k/6$A@Q6k(]Mlgzu(TYIG$fi ޥXX"yb mjA#:Яu\u$CB[fan}^wxqVvGp^WJ$eZ w/?)UDg]O3EWS3bEBKfm <އƄ/j.m8; Sppa (|A^0q[۝:!G,d}YCwB,SA4Q7Gr Pmfkܟ{˪ќۊƓJeƾ*j/T*<8 ]$ό )P=Ym4o1w^wZ0hӞ.(v.inq!%Ae=מҍ0_JWZ˟B9u'|4M&Ebᴩ=GTUצW!Hnуϝɽ,Yph9}>WΗO}lEL7Έv/<b% /tϲJ\ >AQ)a4=ySպ:,P)ZB/=T14 u(|Ĕ2i*ӌ W 4{V1T7Izj(α7`ZKms$ KD3gU8qV ;_Ő_g[sO<7L! <ÇoSzCƘsq->Ӆs+L W qr(6:u*@#k|HڷU+yS[gU7 =5 -ڋ{71L8-"#@UN`kй]?tJVb٥r[ H9(c ua'`6H8!~p oEsf0=GG|{@  #ѻ~)!)\%[wN#½&VAHҳ{ǨƑN/1d5ZfͿ6I<-va( &~~51$4~imyWŸ>N=5MxycR@b"[ YfW3җB7 8ߑ = @v2j%Eq4X{Ui>Mu)PDT:$8@O388툯D{=e;.iH}yɣe !D2jZ+X%ɵZOS1hܝAHJ| .M:hjaUr[),}*$,W_hňY"^G>w~ OJ `WΕe;T)4(\`W2Sp8ig)ئgvWYj7.>URoI~{HatdwyɧӽP~,"+lqZKxm-Loy>x j]ȯ$=yxPN1P1jD@N'amLw2:_*rapoWfa5gz~A֩,N{(0Uc' (Jld"b3.5u;C`ssqI4]KRҲӝf@ydtu.g$4ڲZ~O`f靸ϸ.N'(gi k}Jc%wX{(RD$1F J/ [YRJna]͊հ+C:mО]"XqHAҒ2msN!E si?%,YWx=9l Łhn)k,?{N|uUW2_AO + a&)*ȑ3wR^j šTskv~Dȑ9 T_F0FoI/fD3vJ|9_],ݹCGt,<߉}%ѫbFh=m7`\S/OJb['J <ńR|+)o;<bGU 5x‹/t4Œ,pV|W G 2'D Uw_J;dd6 3Lw2>ss+d0*Zf /:C[`ѦJX%.O\s@1m#eD8v/8x!S`II-w0.s;[Q.>l>foөdp! `0mA;b!rӰca =6vV`Y^Ѥ:)gQuwy'"^0;=4TMf6Ϸ *x2|96geܑ*Ôi w ;`H] lj  wؾ{WH:)_lۙUu YEi\?,m$ڛg`$o(a #""ضMy:Nň mF6wT?ȩd㹔.Oe/Td%v>*&YȴS`#a^e-vEB=λxĒ7W3**l!ݭ3d3ʈPc - X͟tlu WBăW~lA#3=ޔM śjR|4EF<*q}? ]!PuusmmyFx$_9}bj}Aj3ۜ(Iȡ;#lˆGӴ[Q]-l6J qtڍ / W IdP ;}ݺuْ^zm_+Z":i&dU6Sqlٺ %Puɼ (wL}цϤGNB뵪pd ZuDn(%ݗ&GGs|ڂɐ \1eUS0m)&潌ӂ}olvlŘׁBP;[iΕd Ve{4؈ޮ5y=5r0/2rނ'y{u5vS@[H͂SC8C .Uh6nUŴ~(󓓛Dv7ݦ}(N=]I1NtE+ZetC&%PE*M`ٿ4): YK:IBϣg,l@d5#tL(`d/dԈOY#dWR!T/?ujҐ*X'[,f<<'8`}׬%%:+.P`sBX/0HP.;;Kt]*=+!UvgЃUKre ^v&AIpYFۋ_ǭF< . ațRw556'fz̘#WV[ٝmE`a4, k+/,vu=xs9I<{αle;'j9qnq>l fQ} Fɪ*TZ}\!wI/YY}XMƧ:_%&*>e2AkJsDP?,.<f[B4"vm'ꘊIX0sn. Eɽ!:c ?&1Jdh*>#a@jV -d.w_)rXQA q,ӑ=+RD>JN]!HZD|#0ꅜbn|S@ڼHqM|VJ9+Le>Z3ՖѾPZ?Lr-ahi;#"RTRJi+v>^Uv7ޑyM'I_sR_/#}aiZ+ljtiIP̢/SeţnAO^[4u GǪA3?V/ȪYkߓX 9.h 1ֈ:lO5^ѕP4h{a6gdR3ݴ) PF*AO-M5w ʁiG̘ .ܦ0_C J>gQ|_)i9#-@uʁ* l,oV0t'H%22\WCC+o9K(tgڢǶ~Xd0Gѽĥ$qR0$ I l_B[CEvљoR>wkŃف$WZKT]['.b3dž`iUlru!s:iMB4~ 7t^uK@TQuK0㓘>H^8sFkQ ?NٵC5{vog --gS<ֽe_38@ֶ0P27M 7^MKڎ +;'x\J+;`_gx#@Kn=d`d-N͕y2絆2Q;7H 7~rh`41d& Ӛ\-ԑ8 T7nΔD0*9_6T+b(56ہble[O\)3Ws].BXOE~W>Y6[tEl@L@mWI]TC5#z{ypzμ56,9El~8d{_YtbZoH~:s5T2Iz^?mE)yX>$*?>U) Yxgu6Y}L hO{e7__DQ>$مLkՃ 93d2C("ZZW8&Cwlct ؈&1r ;|5u+h$F <*(jTX̷%m @n;Fв^vIҶIEb~aP 2=DA+tN? O{%ԭZ LB3QyXW]'&S^^Ǘq b'K YPT oò=q bgA4ĺ> oU|Y4Oz9>L]{k9F^D-"9u~? ˝IY ܯ>p|'4WoH,HɪͿEX6-bkQ?ܠw<ća$#WunDdQB'dZq㝽˕>{OHb~|20Z1m:Yy0U"ifTFyw&*gfFa5uI7&V82j=3X š\7+z )x:VC#YZUOkJEO>aYy.Û΁EDeVZ`co90N#*f*k3vE7O闷.4`ۇ>wק2=^ַ_{9F >uݥeD8- 2}Y4uRYȆ"' %uVN;HiO dD|حG0r'9P8IškR߇Do)*#vMj!O+'+_e0J -7nwS(tN-T9ɮPSx0s+L%|~'dZ9 =91]hUl;?1q_b\:| F&XT0&'QXmX|u+rr!Fz"3q7=K^2 ,I@s^H$PMy,nVql6wޓs)i4EggߦA~ȏ.1ڸ۱m7᜛OַX+7bٿ0Niw| Iv C F[2f/wl grUfDq37r&$ JOmm,4T߉|C}ɤ?|FEҸ䐛mox^DW̐?Zl{ x%A: Oy#3P!ba et}'Qnޠ_}: ӏEHGҚF&{k޹&g!{(̈́#lׂefᶧˑ} G(c@إEgD! +)pbTmZ0@ hWu.ެrKӴO lU P}*qh.쿔`e\R _P@* b'ن.V3\gE6-TXOn][TQZ q\E;v^0 PNn[C2e.~zqZ '}Sn̅E& F"@w (;=w]?d"lOk%j`F=EtQݭcW@[bm E~˄>\PY4F䷈b]0k6ihXb*YU|-O#Qoc9_|AvKUsϤ"j'7srD3]<:&'R-\I$6*AG$LZpXM܏ Ȁ5ϧj<A(Z9su9V+_6A"69K('_̝, 1E^Q"-y ߈dxl`°) |Rh[jn!Tvƽ/z+}eT2%VXZ"M=ێo,Poy0@:~S .!T}Z +oVBY]m-7ryuE|Gk]L9=$$f9LQroSӥνewD9Vt=@v-qjQ!]v]~σ4Hӳ![B1\Z*g2qaG=eGuݢ<}`/#6ESb~^[ vu=rn`TUJ=v_'KG@1eSl=,|Pef3 K9tpvaI5Kl혣9 ZPxec0$}@ `3u"9pe5T&UU#$|Wf+]}nۯGhޤ~ٜ9 `{E+cʼni{PA=)t!t|j>V kʚE|U;%%%Bu~i QĉCY=˥Vtgɶ̔/BC6t:AŴv[m 1 "XgG7JF9|6H('hm4?'tEuMtr%s;;T_i(bR+?:!L xvA+b$p0wKue/] }ʀPD信b1fDBx|6%X85K?e! '+t!0a"!ĎG&/6IkO=Z (KʥE1g< £-b,2P%O U8 guxFd]6X6pÆv& %ƹk1WܑЈ^#y﹓k)G)ˍ@DThЭVr~_5^G=ґ2w ^ZZf(mS˅s@M\@̱ҩXC={~[Y3NE@Dwy*+-h{mJ[׈̞h|@hX3qո!۠z.жK]<>)sxjmjRغ2 LF5@M;6$\3um1iӖE\8r^ X]549OM= io > *B7fZŐL4= `.xNד[HIˑJcjvtoܤp*R8S:IF/RmXnl4I'4y#VLALS)zv1uB Z@f*#3-Uk:6vrCSF(~{@ Yqk R3*9R{l$ؖUh !R a,hk >+$,t@}dsЪEghQ<ՔL4ӢlE Qj^X7&DhGqHo K [Sj.hR ijn;a]Vp@M2ئezʲa2bkM&t{&'A+7$g5wEan9g*:Y ?NJ%KӅƠj J":PM\>QU~ tB8d.ӪӚ>e>ۗelM[MV2`W݀J_LvI+ŗS."^N60I̥r Za"5ԲL،2:sׅ*bSW颲FJsșF4ФVs.$ɏ̘ N;AaP "MAVBg*VYB뻨)xQb&|>' nϽ!ye+wbi j^9'=|K;ț㎠\Tl/ p7 D ̈j!@71̒eS w4wF"Y߻g[㵍@ʡ\&7 O1&5F`RJ(f J{ Fyf^F5_t-]zN;B 7=n5?.uEv Qv/6"#dEOymLoy,tt`؏> 4W~Èr~d`C9;8 MTKCU)ŷpX6_գ+W|2V'!m3t|u[ů4+6]$ŇINlkӁFY@XDoV]К.1=U{cêpH;].#s+HWDg[6q羬70L]_0Ў =~"O\iQ7I*D3Z_)e`!uHk#aL&`X% %=QeL1ghXT4$\;ta$<%mj]Y$$ FAI;ęPa1lĘ>m{iVoL}ycCuCnf$%mۋЈii"ٞ[|QaA zk}d8 'JxdMfcwcRNʤq5qUcn]*A%t >^5=\]KX+"U[9mȲ*M8vҋ:jR0A/ ;MƬ}%r1֞<.Jooڸ0'x !mȈk2߂vt]6HX@_h >;MJ-M-wD2rR@Te9]~֘řjXӾ4JdYVK@0Is1ڷu=,Tee I_YeHS#d=L)򸽭G1*ROSR4BV0S ˑBy|Pt5֡>h:+hv=ˡcCj'bV}El^獫Qj3 jC+4R BƒؗY aXV.Kc32NhE5^]g#=FGf۳:ߕ'[9Vw^l&[wMctε`iZHDu[;Tׁ VBF2= kax]AR_ ';w3\+&8Lc\"%eS֝ڰ6Z[Wt]pϔQf]==`-PNjز2;=t}(20Zԓr>C: 5lhEuK )ɰM1FO |Q*է+5m./0^ҳB+NTޢi _eyٸeyb-+F2H_:Vk[K jq *}_ʯRsI Nh~jS&sfagl3>Ֆk ćAҫ5YZTl/o\BnԚoF8<\$.R*-ky5W҃"5o׮ Me`<ﴈ"T|rvuIAh{[Q0:LC;'8Vk~ UR%2&鞩J"^eQ!Z=fn˓J=rM  0F/<}13ٙ,26 9 ieVɢnꀪF)ɽS! @4f/{ &W˪ vb(NZoDZW#04bvqKgSs@*QoÍE?4SuI~3g gnzޢ|3|#cuoGvܳJQG6S]h2GkW}9۳X'A#R ySZͧv+a1 %HgΣ]ԃvc!"T:MtBZDx T V컏"w_#HGaJ_dyڗ/eτ0b >gäyc_S%~AATof{29z9O)/TonkAdZF%S_gzB"Oda 56p#~W.Ķ:ֺy?b[; pX["2G6K}'r"Fgc3@\G, VlYplUUgh-)]I0UT=x|aQg5L0[q,Zc:A-9 7?1)8b{{>I^c9mXu/T֧蝗2C#ՏFi6($z8#өeY#ܝ0yR냾ɿ| Ω;8Sn4xjm WxtxČVs"M(qpB(`;\ (fϾu? ~H--7BXg reEx缢[V3rmYd+uң2Z 9͟G!uK}\&%ݢ o}C3SVcpςy;{=Dڥ$<<+|urBoz؍ N̥ZQaFdŨ{MGhtxd,ʹ[ \kB>I fdnW-gfުwa|1Nq 屇)1FG# tZ%.ަJl,[(DNԲ^:6 ۈ_`W?K!ZFujڧtp'0E.ru  6OLTisb/[) ';/^%db)7EO7yx6U֙Gݬc=^"~bvԵ ddU:%J7~a)kBb& !'*2Vн~3$ё@H0zo[Н\ZSًY^,K0fXc,y=rU J!EU \1Pf4\)'HX,`>sZ?U۝" )/h򬝥QE/b(iu= 9ZG vx0cKeYVB\~1NXǸm/I|Mr z޸Hsنk:,iHaAŀcТ%ūa?^ȃt4-Om F#cbDgJk!8蒇.$m$k² !k`>]h7ZCzih5k4$3 ߛyBJP|h%m%Œ|zЫ҆KD2#_GF/'C˱0}6}H;p(Q|%,q̖OA=e]A6"0"q;aʎyLy&F8x7Y7VeH4L xl>(.E3 <?\ 0qlAg1La8.zA(|ş&yr-*ҧ{ZayJ{~͘]>ۙ]bixwLeB"i񛚸 XQ>@C"܇B(YZ;W0Ig=l M'NZ-Wi6da Nž%爽g;iNEAxzCEU.V {'6VC}ثK(I(IIxpsI?Vf'`~PY{Bkg&b{^e<䤆-Hn'P 3A& aH ۣR2u  |WceXݓȀ8&$iî# ˙h1-%?,%:N^ጶ8 `;A[4kdgKg*sDo_Qb;TCp 9ٮ]WJچfaW(Ѱ=- 1ƱLWja&xJ E+7M8M*4d'L#y%4'٫2uE>9vdYLJñiZ*"w$-RXF]%oM' :hhA(ж݌WËH zDfp9ֲȍdݹc ϑC[j^z :}5vdnܪxpJ[.+Iw䝟iIq܄T9cD z$ߧKnPϘ*$ 1A[54 0MϲY^;gM[]B2з:5t:p.s~_jLZ)Pt7 !nD@7FEzڪa7ʾc nyF/q. \XZ]ptD3c0;<5*ѣX.o<0쐜FJN_iET9e3x/LopGRގ?[ks5` %'dj9PǜYBC 0~md+7!Z?% FG&B9o% 0JNF v?s$X UT:X_+ $M᭰ظSv1a lyuHHr* ?;%i.";Ym| k%,j$ aE#PoV:H M=5Y< 2[k~y4nfCȈHHOHdm“>ʅigqɺ~`j=z1-eXQզW` %3c S&M65*WktREIv w-Xd|;2~& >h{0ЯG=Ǯ]WGtsBgxjWiEUAPzGW%38ږYd‡nRCuL3x $)dQrw|zz(AeZ[#t;4Zw^'p;A>zаyZs/EO3a耶$CڈXa(Dhfquw{U.#E m 4r/::%brEӐl,a2-깱_:V BwDs0p'ٛt;T?'s0%RQfX˔*11ReCS2v;q~]t8OZKyX"i%tTyLGn`mi8)Xp~0byq&O.tm,Lt kgM0]) kZp NzշM`>)3F69t٤dB>ڠ-nx̕Mb^r!g0%-؀Qebq:?E$qץjH2so*rZ/,ʃ@~8L`< DبEJF="FUf5'X2gG1?Vu#9o!_&4|Mqp^S.+ArCax"4 Tӂ][~X;+VA5}t/8v+{[ls.)UX☀]Ppғ`m_C3tV,PîC_7C^hxBWHYw J9)ˈc2ϷFȇ ՘:gR qSW$N8\znR;Ok}H @n ; [e*K1/w|MszTADbZOM:%9h (7{1)f EW];5R"W~&+T>^ka4-b!Ģkݳ.-w] =8)'{"&]{A)F.+#R*~߄\2i6}r!#:25yD>v[r@Xj@]2W隊һfiFYY۹ 9aP;32t+h7/ X91ă@/_;K B(>Ҥ"DP7ϾΠNZ|͋mU]2yl ӖI-k̀-1!$g"zYf~ʬT7ۢ)FDj]Oq7mR$kꜤ[)gFٛP*LXY5_Os'6T` />eR/UвCSe0b[1FSʜmm':;ƨ9fFvs&EeeUl 9ӄ[ y#kMN;&%VLw'[ek?&.khgc[v pۏ{4_[ MɊX SݾM0sNvO:sv*b]j(҉BjC?+oF~ZZzT=i*L&%aL*n(H]=x᪾= Q 9)cƧ3t0iOVZMCR۱4hvkV*S _'17V *}$s:`ZR*c?m*Gҟ 3s  Zä#el+kMLA.>2%`r/y֥btDlf2f0o]w?0q(jsOV*@̈́ǷGWo}7HB3klmE ' 6} J̹}ʗ=p#f"j"gŭȚz|$QsttWJ>!ÀMx?=2$J="6K5uQfŋyȡ0OgeHڦH.1D/'G~b8>@0oѣMtON =@Iٿ,b^q%53:4Eʊvy ;]IpZu/9Wl7&FX$r vr\|{2tw1X22ӈ*v'g)aZߵEHm\O)17_K!:Y̩&ϥJ2|.݉3dyl&ؐ^ [)0|3:f0j`A!ސI .94CgR:+ސ,;?EP:e v>9mgOA&_VU5ȺAè ǎAVV %[+.4Ș/90ڟ֭4*Ri!T 8^\f5*^byf ؔZPP& p.!jp+\AO bIu 1!̨C2W퀤V!h7+*/!'I_4H$ \ n[ESғl||vT<o%Fտӯ{akjD"){ ] O mm0;pT0E/%u½K2۟״ӐO6o !t^X,oT UshPqF8f-:*yeOԁش):Q|g(0RF(: <+ Zo25QbVcs{VEyR][~Llkw/;Z #b=J#lETl!VS٣^nkL^oz܂<3H:@CJcdE,w\ ZH8*{9r\ccd[nkU›G5Mb^stOLBX+F@-{\Q/B: JJIhz`gL(D0gxg] J# WӒw}S{0<7E`Ee#hT]"EnHbZSwdBB W\V+"=x/^XH1&qz/tqڗ6 +S5%_]4k7?/wXl>WiԑHa6R0?yrڞ7҇{Ky3`kc6{m!)dBkæ:l-H{xy!*~2fx7#Ey 7{p =ӓd=$rf>͒` chF)9UMGosB M s&l, lGL'G+фʓo17SDmظy 弼.ڭrDy/p*^}#.=?v7xi~O#cU_2,:lf @ (=No5>^8Ij Mw~LDrl&T9pzƴ삱\IuXHf`^pǘ"|+ťIV!Rd^UtEQu~C ~"P^V nqxqH$B֤} ']hr]EWMix|]4s3nl) >ɇJgۂerH_R]m0ئ'dKuI.;SCѴ_HnE׹P+J~8 q/Z_E[Qvz3 *\,cE~i2QDFj&""Y'i31+$ ݂ѤooJ֪ g+7:2{r2ĚgzE\T!V&rP_wc'H|z )#HGtm'zĨi]5``K*ns4ӟαOO:@y S/G|3\|]/tR c|,L*t;ۦ^5?+oOȠp bI,pcٜj hv%u.˙K ㅘNL q`-OM>ͅENA\vtOjl/qDz@=da,wET1ml2~p&q?cV }@f%+e={=Ii0d^22 E׶p:ƒk$u@gbW|PNv q4QU"IZyL6SNQW LUU(TwdYFa97ʹ+ =}u;8@ '@ʟӚbt h֔8/x%,kQ!A(%֧&S(-]1 ,+j;?C~+xK}.WbX n :MPpo+ziξ)ez\G) 0yt6Q$I;wbШjq\i &t3 ! اk\o$ 7 yp`pom*ߘ8Esz@R&*˚s3xj섪"|3 Y=Ny@$PtYME*5g AoEѐɂs>,f t(u/m+vflٗmCNWMzǡ;;BZ@x7kkylR.M$2#3F%Y;H&y+ \0=3|va,q o`/)ɢ Z~i<Izz RFhSA^0t* z~ῧ.<S {#8 (,ED!>C$c-BU$qT^7H[܃ĶK&l U2zE 7 7A@oĺz䄥M{gפ?@i]١ $~5,R6ߺXoY=Hs>5#2/5 J9?y kBde@atRۆ\,.\CʨTD_$floE+4W~0TzY4'[+N;t%[-|M$ c-_:ף/Z}אKO*[*P\a(Ǒs UQ}ih W1AbZ'g(d_kՍ &_8ZO~S''\t(>7e\O#mkPZC^KᲢšxL\I3q9'r`ǨMĴ!c ew+1L6qh$IDe&Ef ڹ&T zdXED`k!)вAtHM Ի֜C%weHy?gٗ{jfa'RSug,W[p*a/A]IBv[z{%^7A WWeP2⎈<Cv R )lR~Ԭ~\&}~t#2C6{гǷ^JYlc_2X؅ ]pT$3rgnήG ~jgcwz"|mx׵yIfy1xcE5KBskj@"iw(4sS/ U#8[vO~>#m7ք]_e=h1X](uBjՠlC㡟$y]!q_&ZĿ\cܞ+ %LrB2r=5W+X}( Xf =T,NyAUbOwɸi]v!i?J_si&D}{E*\'{GG`\DW*V-bI1bS39r:?={/&a͠[ 퓞yR K 6kڪDkH{8mn+=J;G,gXXR=꘺nHIKmF_ xh¢Bc)ZxII&|C7Z沬n,| Seb;nGR҇p#O1_wݳ[jhjyfL1Ѝe|X1JLlܜ0iT%ʇcVG{+< m{WEPFJ۝DCA&$Q,>iM\K\Uӌ sI̕ GE3fc:dй26_/ܬe>ȴ@R+es՗R1\dS7 ؇#qpm='&fm|6C,J.WV{Rކ (إ /-06sU]9cJ&xi1o-=xy8j ՝١#Nhucj O~^u.`0MJM.:EE< b@-Z{+q-"ɸ|we('$0 f$&CP)dnz2>6I#tk R:#?rϷɈut| h 7ydh:5]Qޢ?5ՌYA:'ZD5(TUc.#%d iNUFzuЬs6VA_EGVB0i9!DCTv(ؔūnѷ# Q)i~JHcfAUa<@tM..D9Ž_q TF#۾FVH9b%,=pIsS(^V;mH)*u0#B:R2w@q T6C>B[jY7pL^żp]u9pb95>o';j꒏uz* 4-뷗L^.׳O[m_NTzK![L lc>0G(ڌ`7&j&08*D?sr;nvٹy$Fc2Јo$"5O@*b kU+z[kQR;%NSSMTTJ/AiDUTA?ʨ@RUc6i1fi!"Y/ ~5 a%02\ |K6,ǝCW(K,|.]WiQ;}?g˛/Vfv Id d],!nmߦ&.:T~D.wWXֈHؗ.;$!!-/:vqU$sFs6\)pH/y,? o #3FĠWB֎ٯfp!~c NVzAig;mPZdLs:[3T/c3l U߂ǹ|PKLRO\-i2 8^Q *82庂.4QjAT |O]\Hv?dK$+S(wj ґW'U*ꦑD7DiO!NiHcnK-)]kH/iޝA&鹎Fv۠M, Nш+^턕ٴzŃͽ (RrT~5}aBWncG -&ZUY~#684c'cdНQqDJI%I=TB~cUr8U%d1CwWx^xH2V&_:S4K8wH tĶ4yl:y J\{ >۠_A F.x?^ыĮ[ $Is RaGJ\ M/ :;h4sՇ]>Z q2QdW)⫭H[1+I0Āڻ\$=Ef]Tid\ WZqzյ>GJJc\0`OJYJ:=ox nx usv$JATz(@Tcn vD+`ʚsvXiUA~@nyl4$l 8AOX󕸖Mf~ GW`J_t8%aRA_H곴linI\ԷPJhj;>~*X>[Þ;8*߯sl4h2K5sXt/0Z 5ckO>-д~iV:wT}WwAM.|5*`El(R[ήS=] [RBӼ7NM8K9ZoQ^ hj"<No bjR3hǰ|䏵eة g( %`E+n|V9aa3F8t:}wc/Mci }=! ~7=^; QtEj@M0GVjïX¯.pL>hQO=%3"adJ2{4')`Kc3XJ8䊬U_WBЊpt -LfSVЕOF%-΢Ei߰J{¡q + Hh45,H:ȦA0 v 9'x15 r(`"boCKɫ:k̞WQ+TMvU+犄²&ܪQ>^Еz<$n!pk+N0A43v7 #\5SA,h[֩&ϝ/Q=qf ϫOs.LF“ui'U$b]*k[E*Nkg+oK2sVr[vZ&BK2YOdqv KQxtuRb;IVOgHZ\2ɘ/'Aj-@:J^~ֲvf~Jw`{9K!.EK:MJtH:'ӆ07Vl`! K*:T|O0L*z#&6 t\3{mNq!O8hw=m:/ϧ4 ^2.} sQ n80*J3ȚSc=&*]#yZtiPГ.> d` [<['G1i51iVhgӂU}$Ĝ+⊞^zoB%e"*?epȆ@^@ץux?8{,l|9WBZtIpIW6٥ibqćyn,mdaCY_HUHkXdmMBȅoW8ub%Hwjf. r7g:@kWPմpm@eyR9LE6x6KƝH1neo7ov7 rk[tq]x!u3%VX쁀YU -yy3o{Vv$TNo?(-ة 6v"AL@MÁ[ʌNTe0hbֆ'M;:iBvTT@I]q N8h{\Jq+C3Uc4<@l/hP+J=Xj O$~joz\yY%u ,lv2!mK{Li| {?S=^w?HeɈG`ugbOp8i5|6l8;VƳ[/GDM*tCy206~Ֆ )SK!opq`l7C)P^q 󷎾]潯A]~1$AtVč> + |ߎ+ũFnǰceܒ?^i4Hu5/Er dKH"jX9#mID) E22OwS\] ?}$4e!<jz j։|aCT9c/cGeDV!*B&yHv=딐qfGY\ėD hҡ`"|WjއՄ=]SMɘ{ 74@g飯G:`SRK.AkJ݌4Ƥk0T59$n=7=@>y$/9gP@нv|Ur5wҽh5Eo!nJ)?0rqWadw Az{&`x-{DZ2<9EűkITES[bE5$ a ܝj m FFpRogni jĥ).P<~{`pӫ`Nd %U虏^nXwJTTRIceq R,smir5̃DiƁ-vWܤKORZ-RǣE4O\$bK֔Lw\8_٘։ܮi7ܑ;uWj-˧s#17Z" ׍N wT GZQq}1Ν\7(ݫ$^ajIv^6TCuںO}s,.cp-^40L?/t*qU^#?vpv`n\V'hau,xH3`6CW˖q#*7UL_WnbswV1]q?0ò?XJ'vŵ/sH@ilSh2x,!N/I$)2g 2^ԫK%alaS[N~ RЯYol/||!!H(5]ikP%bVGH,Vy_:k°t6vP 1j>D$Ȩf)K`=GbɲvF$,=xo< |"P0M$wn! E\6MB+N\A8[zc:1 [ {(yPPrh@ h[5 vWϥ_29Bp/7[sԶv*7כ cCZ.LK=AU5uJJAZ|8!*aM ;y-'1 %"^Si+oz i?v#Ư =T@K|]gwX(a , {̪@˪j, fslKL# >|b[-&.D@2A@yyb?yA\_^hb%ݧ 'jf`-u;A*(# ^S`xu x#bo u2ݏXf3Tkiǯ,81N=w (U.9cwGldky# KG*Cg0 pep_e&;(]׷ %ǜ/eUBT3vIVA;`Pq;^Ó㤠F犃R{mHZ1),7[94RhiƏ;*3$bFlQ^۬!A@heUmM3ҫ A'ȈBZ3 .8\$m%'!:RB ]2̌m8`Av4<署(& EMe$1T`>{ j}Ye"G]x,:Ez~B0k7fqK=Oƽ4v@m KAeTPFzda]B 齾@Yu$lK;قxj{4nnw 'bWwf(la`y+ܿ jХRJ%f0;]j/b;yfVy4bFCNoV3[>޺ >?2:ֺΛJIߞiU j4[M~T q;(d!/K agI0!<)aՆyzoAC3mdvsZ;Sl͠ݜiVhhAJ_ޡ!&jH d}ش<|#p/3lD>a8M<ߏ7|%F2YL:2O_XNe_呸4C(BDM!J˻AWT..5i!{ɚ5 f^ 2=8\VôYlP7;kMܿu,'2 ic|8ZzwO3_EFDAXFۧş}Lt2Bn6 Kt ja(x)u{Sf2["Tzƒ\g/]B@PWSmgt$RJ[0=h3p'oUZmyDA>bzSჅ k1ѫ+uO-Oh74O<,__)M(N|R]^FT{}"Bl#*ŧ!a<.6G*̽؈tvU(`5">vۗ<É y5`i 5\+S.;h ~[Mmk}0'CtqVLO=D-Qv3&sѷU&LX%~^js)@MJ:ȁAOMClxtLm oOc1/{ m-,g+Gߝx@Klc_wʠx^{̼`"=K֝B w`~YJ?>?~ʽBhA5Ez Z^&z Vm> 8>8gk5Dh~\J˲ˣ QY46Y\]bRDO 4?Z(L~!o$N'W .1, NK j3$c[as@Sْ̽raw~˵;:^O\LǞ!͎1T׮[Lh%^UC~HLpԪ{r5CSU9yL ZRkxⱁƸMu=uuE!I7I`L듶FPZg<t+KvuHCʩl(u$UA$j [hU)Jh o),l{ۇOVW_!⨝Nyu (SӓYr*.zA~СF.Euod|d}*C EnJE!&{+n,f W*h/KײŞz9W=nWUɌ*-/gfQOgܺM<`%ls\I-S2π4&\QMq;j vqWox,0 0'?lN}tC|cI?F3mJ.kZiK, .IXfeu!y})8A\U8f?:}>(b/#|{B`żOhd0znSX3rZgG~Vٗ&tȑş5uPi/%T?)jm#&g1M=9YVmMA^&Fԝ'ԻFĒQ!d!QD귃 0 CUKGep pnX[*,%'P_IB NOE䦟FKDB\N!:la}^t1gRZ9qLɤl&SsnQ-EX/X\؎$dZ9TrΛΕdgMȊ};MeXRF;ʏq²&nv "]fLH`F^|jZ;pi : ][vЈ6JE[BbX5=nEEF=4|TB=O-/tʵחNLMFS^(ʡi"GO# VL+g7ռ E@h{OQkW$²䕮qb#l^* vl-Z+&n!0IshxԾppK`O%Y4)b v1v!%TLj%W2 w_^X@=td6@msEayjNuA~d,'2X/\R0p(Hs%L˓+np' 뀓[eC:Ñ6œV0X=?(褦Tiwj&Մ۔ݎ綪)9*6˜!)hub? v +ha눑}˕`o1Pט(z(K$,IЁɍa:oLtTgt2oMWf0Rg E]" g}Qo % lH/}>@'#pMDjOX@?aWk1K~dđnZ2Ǥy'~=Ww)Ji "jgRѹI1Ks$8rH0 G).CG@wzzתa u *K?M1ɐ< ֿN!גgdsAOhI[xsRhbM ?ˌ@U#vi*gBroXcqmCAfa6gLK6i>)!7m[K6Iik }-  fZ=|K0|ktUwf_HUw-12”-4jo gcMb)- \l$wQpKgyޛ|6XԺdM1Czd_ a}J|ABbNY*ws%$Bd BZ~%G[BGzD"/SgpȥJAo P/sZU4>շqV6%9\J|>58>d%H`1x՜ G{yH%m0mzlFҬ_p4r!f "5 zm£)+ b;Z6,m$/AiMuwR9=c`0V!wrѪȉUErCvR򚽖-C)Q-FsX+OLg^ ʷMoIQŰ&”⩠wf0p; ?L)/+A-];GLtLElu-~?y uٯS`ip҂Тg-O8 xKPlI[_l%vj8,t˴`"&_7WbvC]a98236^"4|+:0 X2X牽UBiqYpqYbڑ[uό|=1 fW 91H6V0X?IE-Gz w,e\r>^-=-؂ UP!#)C+ \Ǥ~ؤ3ϴ&ܘ<]\&#d34uo2PW:ĀLQL28 mxIzzy f < WeH=Y␳ o֥#D{t:Zw4nc7po~K67j9R9 k^ljv`=?(nK"mopʙ U3`x3e9 mr$}ct^oĔ'v\5%Z[soF,8=}֌ O]w]:5ZIa﹔.:`⦄<͔9ۛSr-w:L^N",inlŃ)F.`M&gyPPb5NL.|F$6Q ܇^"&fQm^n侀8DsRe3`{u)0+G0[&3΍K/u ؤg.ix 4M~@&? [uIgszoڄu-bށ>n^1lRjOBW雯N3T.WvF_-yMvڑFb9yTuxRAp!v`1 `EiZ.OBDQU SNF.FG8OA405PRzSKԾJYX<90 Bk]rIU+٦Fd%V uk3%/v7v\=&+FTDμ@18G'u׳"mVd%{}8҈#*-J;bMg=QGNҙ#RLo 9/Οm"Zn=0E`Tv7D!\v S=aL`ԭT;2zX2R|0ɺMo쎋k=>';;s{J eN Zb`S.D9]5 VzT`k g.'KhԔҗA:(j!+fl]Ț(V9/`Ґ\ꖶi oD ]mq:j*ZżjԳ?y<>$"6?3W+ymXo๚tzw3]*;2W+d^Uci ohkRZy,V6[:FKv3N"n&]r(Ko~'d\\9 t sؐI[6>za^̛Es )?z!ϳXj!f ^4? B?]W[y0׳B/ۛH>mS^++]?@!1ɩj7-M`-{$T<^[[[b7me&m<Ŏ=nQ:(AYUo!Y>S5GRo&^뷠ō Lݙt$+Mk08eCk<.`~B ^ۯ ?/Бnmҟgy ha|nGNm\Vd3Ro,q`]=)DǬ5(wb%PD@"6's4.zox4/d"""Q;8(u ͶDO; "*.s+p VFJEk_.?igRXγiYkyfub ~ߞP(g"I|hvcCa }|,wTp"ʻabdm1;C#;aqz/C HSM:jWlp |ۅb= ĿX?6(%}#er.xh/IS}NO ?K Z 5*Qc!E&w?̦p{ϡC^Xd!9unz5Jg4'21,Ճ< G}RYYA|L!:78 㷹g6]+g)ZҸqh&KzmQs 6Mqir1M^06C93003E8S|& "0KY˶_w.@e-{~Y'_.]W8#:8@C :C?NuJ9 騷#,#BO^JL\Q,Sr8u4̱liHÁfdAIN1#uY@w0#kpb?߰Xl-˪ Lj=TKQ;s/=#^S!*[݅5>"!r0js!ORvcg,}ZH|ߢëgg@`$CEj ӾTwW2;O$"+v; 𵺆Hqipe\ '7ybP  L)$Rs/77PqD2k\0^c)`i&!rldkWoȰ_z PKA8j;W6%(8$$I0&y}1ƵL䫿A5*hx89ƀYQJ֐4bh|_~]O8P6IYO_m R~DS 8dz*ம!+z|h^A]:+ZLe*'42i'4?fDZ Isy~:Bt ·HOC< ).68aCOul;ק C vuO?[4)y~aω!V*tA?Lfh,xe2bH֚~cUʽH-P7u(7+'S77* Mp Xڞo0w`jZU\"U绉w?rߊ$]6>t(ҵ#+N '}qLM+/ Tg)G5o0kzmɏU]zsTT6 O3#a{;>^aj k=xIVq1R>qN2+Y.\23"~ ܕgPשBNxu]%X- )胲`%Jy 𒝡/s_G*4E(]6.ރ} y3C=Oju䐊s׭~$>T6f $TҕCn!Ol ;9fU=%c%R8 ՗ےrJ3ź1$(?>i;cnxdviwn;LbGG@J1t>8C)F,"{S D]I pC%+$XjEd>1"?HR1tuv8w_( '֥Uؼo ƣ9;pLjoN{1ډu+%74}(5쫢F#@"Ѓ9pOڪcݿ 'wM7 v;EC-*"MWsH>hcqPv2N`D=a%4o4R@^7I͍-@gvyU)rj's*8QYPE/c9fѡWq/oXٗo7lD +j7h ܾRRHob`j1N_ .CpA19~( ~/2$ak:b+cQ }CBe_7:3Qę;K*V}FTQ(lpf<۫U 79g#c!@  T-s v%~h1M#VZiVMF`96lX3O{Dku}U4U8)A5v*6~HZu~[M Mtg'{׾bѺq/u^ ̆Oz8q0PꓭA-qU{2kME0F2ԂiNzi2 3?cI'Ĝ!Q%.5j^Դ3BQ>U|hjPYKS 6¸wzcX;q}Tx^uxm©z{( |Q Ak 6,9Ij[~G6i}l"=6m^IhM%L8&@H"t̕zڢU,r~T0K ܊j݁TO%e0itxB['k=Z$:II6 =@i_(E'=1uMڥ6ڶ($y ص$JO}eIC.>/ts]Ue!EX찠dn)q* )>m5#;?r}\UAJrş7XS 5PqdR\mM f]G7!&waP+-CVxF؆5X/%(fODE%?;k2,7ɶR!լïx||uQ"Q%N#})S4.r'޳74] ײ j4|h>wm1?W#=Dh& dBzdhԊi br -EAOgCwmhbHxS0|`X9 ;)tT~  UzM җbx !k *+'pHG$O<te&:.cpMQCd +/$HcLsijo > d|Mp_3}W4.㯼 0~2fa8纸aLf\D)r7a"ܵ\hw=#{ RJ8g)'*9}y.plA*:A?ї[m!0)vc:UqzR$H 9Wt("D/$)'U~S\?e|tBR^3@M&+!~f*x[Lę=O#r"=D/l7W)v4!b_z;)ڥo%ȇ'I-!/8HH~ AX^V="]l&e={v!\VNB8?q] [媳8zM$DA14:ywf ?̖7_OS/鉢If Mr!*ns[(# #m(:\I\s(k7ʛ)Kk=UU:晅݅erl Ҳq.sNc§JW !j)O DERy2l=T&Y&ō]"h1@šhrk/% (T  #reYm_f=ppﰤbp=;)0{ͪa/v\RMkcSi H,ڜkZ@wzvaIT@cmBo0{ANAJh ?oSO% V4[ AbpɱfRmKJ6DVN3cG‚N@W0ۃ90;!EyBθ2z@1(b'>#!ϱ%hrA1P_tڂPz F,N2!8c}) Hc|>'w|˿jW(_I&\ ŋ:"~C_nJtzA/L --_mx&g1M< g 5د :ηa)p5SKӴs&o|0,`2CT&: Bg~Cڻ ^Z# _k&T뾙BtnċEDc&hK(1,>TeLt|[GDr@1| au-BT+6b k(5Ov5nD 9m_wN;w4@/थ)Qvm-}g53ׅ,W|d|0M&' =; m;fiy e/FUɪRKD+fıwk1cfID>4/bJg<o`/1| ޣg[z!&8n S1$36%!6o鍁N# ?Mn]#Pi2'U% qJ:mW c$bj?*s̑X:Zc@,q7C@eY]_vH %29]q^92Ap[pa\0qlchL_pV{dqDU"t(fG$ t}"Z吚%.a0q/Xrv\ȿysG{۴N>Ŭd U RgNP8 dOu70lͿgZ&ƱB D qccZXLH 4aL%XZ]07yhXMCkbeW'yyiH>@OSCtߨn0S*H%$/n6d0@hJp\ORa-mÁC寘_)n}vtxf&w86Z[x`$TCnmAS ~={3w/7GKp]2+ )HiV@02 j=MHc's{\)R~e/͗|>u8' Pj*2}nTﳐqg_]ݑz# = f@J.+Gg^)a ۙuh2>La ^H槸aK5zhO3dJ宅N+m$m4ǿ'Md #ʓ_8qۗaey?eNa ^i녈)|W^mHENT2^5mTI+BYZzoO fC4*I'8)& :2~1$~>hf=T%^c"{hk(Hj*~!kʭɚ:T%7[VwLY*ot}st;"y%-Օ!R4{^%b8)%ٗkE)E"^sSP+3Ac.\~+&Q. LawϲBD[L( nV[1i?>djSЧ4>/;0 Z2)u8T" EDXS-xqRx8 Hk&*;@򆄅˼0~G^0j=jw͸_όC) {sӰd$ޜ{mNFy9)FG*͇q2N[~IC6)9@2t9Da ;lŽH27{wDFo7P4@_ua3ΤYsN9P[pl.R;-vS_5jW.=B=bR\ Tq6t#jvZZ"UʳMM&nwĤX6{bII_ɰVlR]KtѨåUC(.yz)I1?-’5ҙMAwGPf@7V3ʑ1]g)[+8\D4 n>6LYcXY8:vvjP Xk , -mVG.çh&t>1nxNG)Gm=ᙓ 'cz!u5?TԊ(VegC6âTvvbyKB{DvfY'Fս@MvUHƾdC6[ՋJKga 4'T*(,'qrӧPp Jlwȷ,s1#&##U IM<9[iZ`VmIm0TEpJfe:JLnkAWjTdqK-ƻl^UŊ Jei"vk'P0FnRpϒT&D.䰚5? a8ܗ]4U;JemOQ tta@.~/3ѠU͚LU-];TLZS|6lcM.~'LoH9ieZ̋A>: ;uKqfjXE%u<NJN8+;L&C]8}59w*:p5i4d;ݡwV#)_Ob~Wiez)N)UTrݫ2%*]z( 6cK &FS5;AJ=+YmƆu/ /' NM[iL*$t|]_r`9h ÅP-[Ӟp7eb[^Y)|j0׃ף^: Պogdo &{ e~WK9Q6l(;RgDRaP(wry+y4X]tghpT6[Q7Ƙ;{Ttـ,|@3? ݭQ *vXZD$}`mfqo.߂ħ='͟ >NX^̠ ~јP&o%t`B+R*?v+yN{4[1‘k3 [עzm ,%8ZƠ:7+s؎;Sojr4YL:XvwOiT~:@\-(^U;KM (KpO5fT/z #҂`^.BQe{ [iPv܌ }ʕӣĮ?Lф T?'BZFs⫒v&6KUˆ9Y~1UFL*`v',G~hQH%bcMzq~([GMeXj^1C-7pDbB8噌Yp_SA^x/7]M+r" 5In5Ld,Z po(inȪO9CsBq {LV;@y֯Ka&L0a:.Ә2`q O9ĶJtDXslP P)o)#RFuLCX +:hYz0_netίy}zc\W"h*Y|bwYki,{,3{Ɖc[z`S0E2=Ro 1 +3V !aVՅfOUWLiZV539mWZ-'#HŮFxWhwvy[Em*4Ły8*nc;܎W&[ ([ͯTiChgO=O0Ǻ7Vl}B 2j;jWkqݰSO8FcuIؘ@Tz^!W xus'l@ UfR"8ٵ. X^mh2u)P5 m˪8O h2dSV4pei8Yυ5!3 )Y |.90W>4kDCgWN]O..;ݏ ]?j?30'S\OR>):ƫDO?5G#Y6u\A^ oa&ꏰ9]>a&u57AfhM$'pGb~i3n# .Hl$9WZ\7YI 5R]I ܥzq.صJ|b}1h&%EPO,Bp@DN80%ďqo׺,}O{XA6ejz-vA[\~(j٥ÿb!B-eE{6B-ȁ.%t~ӧφ n$(B^q%6=|d2)@ل+IqrY-[6؇_50.mdSKMR & { ©r&){e5E5<ij6rAF`J*P:}8ݠ~bgDt֡cRLGr3{jo'pjſRcŸ wǎ0p~fD HIyZǫy{4]M&. \s |o$ Ty3CD R4ss4賨a_( _ˮz0ULO9//*^'}z,3= @)=h_vWB8u w٧ YeQD4l4Iz2kmqlij>!5̟|)l|97n5 '8WH,$AVA>`j1d`qɽ3:MXZ#s6OVt@Ho@v7?sLOFNFʩwc+\ 53W Izm5[Xy)E0^r}1vИm"Ud=x!־&dz)aQ~_.N9d&Vȣ=! γ7\GB RD0yjγ/ОepqB*湔$ 4WiYAEǡ>,zy5c[<tahU})K((Ґ{t<~PRuˑJrŽL9;rJ56y+1aфbX-DžZfխ h((幠v#b%G64_46Nxm4$7ImهѐExtžM ߽$ url¿) n2C,ZM<0'/%}sri쉩Fn|BVR>dZ#9xzY'*Fj:S ;(A~mEpgFu򇭥[YCPwŏZ޼52 O`P&q Qh~Žݓ0?AJc}\Z/E!>!Q)dJu"5b BUM9v3YKs8R(W˰N.wB;7LhQ0_Cf#${#iJlyWw 9r="Q !*%rLlgRXpl+8SC7H3oW!VZ8WY1dtU!܎]cNSY슼^YģOZ9 !h8ԅie z貓c Ґ[]ūqYz5>qV:re#CWC鈵/>4DUp Y+ c6V@&|bPlg)(L j_웴J5o` OĖuL }do>(ԲV #&R{ Ԑ'}a2y>j79H,ZZD* s' jCe4mwswMWKˎhHY~W)RX9Eئ,&+q⮧>PB!B Lyސ5V?rvwmdqm`a辐8厭 UhJ#m#L f[Jj=kmj >p?SNȄR.Bуg="=M\&jI@ \>7uW>jLxkui5c4n.7+%qֆFsmnHgKtXJ>^в{+eIJV!?0u8QgdHC}pkPj@ĝ?S?mWlY f*= Cd؍b9&)+(dL[G`Q;"qnUVԐlCqLk:&Z. ܛ*нE)طe#$Ǡ5+}>@F.03#DH晽Fq/U1/Hm'`G఺,)@ouRy#Mz坝S{ ofP?(yq/:ll1[HhjEN4 E>&lg9O[E/ c,O3nұo*R#*88^U!`W̋ey9db]&)Ԏ?^:J}D~ῗLYWBly1@AdQ*dơ\FsfƋ}xe:_F9ZBW߬({[ B)I1_QQ =[O0ZlU DwR.1ꋊОQ)t^&8RUtHNmWS%׌wSMpd-o@*sqZ2ͺlW}ɤ> %\\bȤ[1o}zݰMѤDi-!U%vGAwTު̰0.Ǘve/d3!I 6v .=RϘky5cf,I.vKOgbbCʼn+ ! ;S"'r̵}cpq-T&suR!qEr WJ&Y!:vnfBv}cz}lRڜ2Iꎏʷ,1F ە%((@b2jdc3Ueg+l<ϢYތ,x_0<O\r݇1O8]& ֦HMx]ͳ%Uhqsz^ xf+yEdO1][vu2Ai%? c.;ˤS?= E5z8 A''V!?wx ݑr.dޫ-'3.I5UqʾxQ,K"[) '<:m]߷?:ò$hWpY<Hc}I7_Zl 1]j 8mІ)QYup!*-㪞oH" V 6Qdי$A^NNw}(l :Lʳ7[v|Y97t(٫\1 X ZE ]4L|[[vq!d UlP&{s!ȗHIѲ-ic(1*N^w[!k?u!`V 1 bVw&L~ ”4)ʅ#(F re)z8י/b*m#&<+&*j4$.ILR5\Mbt.\FeLӏm$?sjif[{~%NJOMkb4Ąl5|foJ D7* ҖM%$-N 6[E9h'%?T( K:1ʀgupBҎ\J4^yL܋Cw⸡EU&'6QiY@:sx8*#\Y S`5U$:7{9RQ%g3Nvpe7]żo-P%ʩ+$8 Uia=6@!摺vi`hW0J+%2k~Pu~"g3^W$OCZdN=Ħ-vk͊)`$eDNB(Ui7OTAvx*8q7e#l3$"(XQ ) ݠpox7~rkqB(UfffDtKƄS0 YZ)ܥ ߬hp'8&i+|ר$ z!v]`ybC{[.H|̯#H (s͸:'meh`+MUrj7wE?ZD_7KhlawR28 i`OVdv}_mkU5 hDĄ=Yu|G6+ѿ*|W}}o0z!$J9E$܍ <7]3E3COA-T 2RmR6n}+KMoBP[ 6b -vQ׊Ί1Z/L|DܻZP!=|WR$\M8/( u@_w Mܳ)!`]brHyUkė3>TmFʭ/m.U>d>HѲڕ'I*QԚRNv"#}y2] d^~s ;isj=Ȼ~s |XJGP_Q_lTŲۼa)M zZ~o@Mdr Kݩ~nMѕYg=5*|&Y7̖!|%Iw?~g)4[ !᜞IQ!yAHۢ6`}\oQg<"<a%GL.(&<nZslr?8퉑qS^ݫa 6Y7h[Ҿ95J+ƨaӟYc8;4E=YoWӛ t;كڪlu *H6oCa2L>W Z:JC>z0dߗC:k{ wH^MȵF" JB2Jn ,,Oe|k*dNܭMM|Z j-,UccPamg?EAr-ڜ9ɲaA.-enC$q6>=775퉠P̓f!ItDc`N=P r)}^r#Zz)SGg:>/{MƟsb?kݾ*p [)BPST_O)^i2=큨hxV8Cb{AEqx"͔23|Yoã [2u+; D`TR#q$F"ls*ά=uӇ0χcƉtc.]H;'DPIXU'U:ưHxKg`昚 r a^9@VKAZ7=3/zQ W /!h|g$Kfөz$ LZܴR"ZwQH(fR'uN.v@xy6ןuTfEjC<9K5RQay׼n|;.4CO2Srx(kA?.#cWA"dTv%s+Pd`{a}cG3}JB\|Lrw[dK"`6𩎉=Jv5"[M!f~#V9Fz[HחUpkϝ7xObdwNb-,r?Vm|'g*Rrsj4c-wr(vf863޲փ\_SVUy5P5z 4eAfAJ3MdBj'|^COE{9Vc7CnĿu T+X0d|>揅?Q5J̳^Aq!G3;fSy:f>gWf &dGC i1|(<[vnX*p2+FCFZtР"na ~O :%rǞ^.FkT`b|WPn:KhY|-MAfFa1S-!Ôgko7g$8$0*p:'#zZ Шz]pB-ύ `LX:gAlT 6Yq|mD sٵ~3oX$:@ 9?[:ʵS/zze2qWȗtza.Idjo4]Tgel?OQyWٺ (К=7SEmJt.}ؖ&=Ŧ;p SDғi3aY9t%K@q4]n*'d/dE)ﵷ eAd41NO3[E,U jk^-ph6/>9u( >"2@Iin2na Caq) v2MYhx߶CNhok>eu+!|ݕLq\ /?L|Ct\?ĂV^蔩yt/ `dRR˻|MK[٧,ōL?JOcv4C72^7^R!{pE2ڕBFMhmD<.Y>-_; {v_> U|hϖ=U=pU-2(HJ/~Qgm äUɏ%8Bzi_(b I v$>t[;X^B=Kn=n42#-e]5o$`iįG"(wN*)߶+QYl׀K鮁 pSypD*@/i57 `85*uQ]^&`׃F?Weo;+dɌ~Y/r+wIr|@/ƽhZiR8Si{.ǬrѪ{CA"{Ɣ.331Z}w %,ˌA]Oe~Zuã7OYj2!nOػe$MhqsxsXȖ(,J%baC=I~)[Ÿ2D QvIa!QZfKD-회8c;2kuCǠX<͢ÆsFuj(f.7%Al<.諚(X;MЯy2(ޢ(P.$U dqm#YjWf15ͅwoPtj(Ea¢@aSRo/tz_߹!( Y։1obÅVf˖gו0aa  sz f:񾭣DPble*X* XzG40m{|~Vi`mK4z̉1 P`´v+{d~P'v..m{ P胖-!Y0#" \e}fpQkzV}KZnBX77dQ##7?'0Yv%ouC)r FE&ll!VVւ>vlo:@x330{" ./7T_q5G'46 v %`x-kF/Y aP)҉9v1*qR<Ʌapex52Ll9+: wFLlFWoc~e7f\X{Lh+)")ηI qFm S{+G8Ѐfq/|`S*O B&z[U:Nw bBgs Qy\πWBc0Oݸ8{=Yi|]l@3T=!Ds)*V0Y`Hw&{H\5fQ5$xeuVfj#a_,QB3G"Q!o atUex 9a51HJ1n[a_N @9/`qYK 25tIcƺ|EHGJֺ0KBqK # ñܡEn!B80C1GܢkIMhH&5!gt̫CxA5 ybvU =u(EZAQpxV8 [T?pkNLp\oXD$VP$-ݘ-ۡh&jmOczyأQ*8C$AU MaQۓCP?} oG ?56¹G1O)I9o%[^%j$:bù!kHPrzV]ac>MnV4mЧaKl@=d$_6JXSʢY|pX"W ? b2IK&ҷZ/CĦ3AGYCkFY֪CN4x&1 5V [)/I8tcI[V X67]}*' 86炟@Dr*k"VO]>#fMTvG1CR\"j!|I2Lh_C9&n=[GGd[֐jKl4@gG?+@U0w%c053$a VoKM#E`kՀ[a9j䗸^Cfw/G,gZK!{q˪gˁ_d΅270ݥ`xܸfVF^A }3g%!>m{J=,4[\Ɗ ,{;t9t}e,1]AGЖ|J~6sxo@ѥF۴e|ZD@9L 2`#~ڠ6P4XK<#qyx4.a`㋽1?fQ(^g eNF%kZ'].@=PԵB+}~EO% uGg3Ԍ:^'#MIULyѰ/c\ %bA05f II@.λ4+B^`jF |X9a ƉYꗓM M]b|'{lF$Ŋ+|h΍|KAA>Q(֋ [ 7k_.YcIr>p9]BpoΰNrWE+MqRbf[r_p: 'KLEz3;-]V#tE^Uqd=KҸ1;b3FTkZkۿwTC^ƴ毡>q{qD娯%4 RWM* pKx.yܯv^J~Svi.sR\qB?֑,A|e SЄN%] 1K0ϓmOU|%XW$NR4㓁l'Y1l4X{3$2prbuy^gr޴$#ᇠ7u'mwbZF&; ̵S2&́Lā_ԜD}rҵ/C^1]c;KC>׫آ)y+˵3,|k @W "|_S c҇bsx+>_seZG3R0FQ+Yt9Uzod+ֲamc'}?96o޴n *mLJ{$_E I9# . 5X-?n "1H8bݡ5oTPpuP k^g/M87SJpQ3A߂f{|z80zi%WCHcs* fm 6G)^2ƒ{E͸w>6O7D16 wq6Ro9#,w_NL<{D8_w 5Y?Ik>U8(eފO;3S@#adN:Tǘ, *.TWp7mc̗T_`TAsʼnDqXvY>`~qp1u)}}3Dz^)TlJAb&go8h!΄[Xz@*DWhO|PR Ĺ΁wU6,EZb7~~}8/SѱoeJ 9 ё t$T_M!*J>YTx7`o*(2ּʗ. fOxD'?ěb^FW&8h!"^J| ~NvȦnMmSifzK}Y`4I zR^Y |H 3Iwj_ZutJq7~5N.P8%zʸ:?X~׆xX\W@rE1%Ne}oZS#pg(I`3ɵ [~ACmLW|ʄ̭S yXԧ `Y)CjW"oEv>ݫ + igDb^Gw K|@ؼkHJT"qWrߐErykeVۡ*ecJm.*[ۄKNҎ˾c}dj_bnpfF(J5x)r-{c2 Du[2z:W?E۳N}T}7-DG*ǹ}[^QXS{y󯟫72t09k%E3FVF ( "*X A?}f4ߎEFz;TZ{e81Vo_~CZ{˔!Ւ3@⤮tP|`e^k ƈ9]%aI  6(J~yᳪH?)o)lX\䔊H\۩mƦE4VX+%d)#}$)ilBH}-V*ubD 8︞]W,|9GtF0X4]{ T(lMk'/R8 [?DGfFgnhh6(h")]^ݏٱG\Cr>ڃmOҘe%cx7|AtRSNИ˖u[s6WT&Qzs̅-619U))=e.{?â|].!\5?2TS4З'jUxkIVⳢ@e0Xiu ~V6 hlST42,l}rQ8 _ ginnf,b=7D iHd/J@{?,>v*ooojGhRmOd;{K0]dte O4ݓ4Q\Ld*Ga#c'W(x `ZeS1/dB}3&iJ&DVĩ(. U|5h D0 "q7 orrbuoSoA-ucqN<i늈 oj_#P Gx|U_kǔLVYWoR 3&|F 褸3vRBXiZhM5a! nCCRXc qve.08H|bEaB|0nRXj;;"> .rpM>?ZA͏wUn97&5T?u;Yx42@#dV݅?ɵ?5vV&c5<6*gvkIoP8C׫% &@W7Hstwb]k!Ա]cch~f%!Kƻj LXGid@~Jӷ KRō&5TЮE>86%?^tYȖ6IHد]pLKCP@<1١<gq(9PvO cC -)+hp\QmcZ'4؃Jv/, YH\Ï{.iaQ}j%.P+7fU=b!zgcĹiR `4e7h$$>c r&MlupW<=.:#[eZBKta RB-GyUZoQEW-c0 wZX*9.`f$$? u(M㫰eܩ8Nl"e,`@@&ϓGx~YmY,&ո [ru[أ'cfߞ&D t;xR2K rg漇\<[8)^ %F~jzEp՜Ih{O5wv.?NJeXMYEώRW)q-9u+y \1-Sh9uYO8բN\W G w~&Ս(?NFL͚$Õh| :Efc8Ʃt&>X^/({Zqӡh3+W3>K4>Tdi ,2)0dU;z51!jFK^:dvld5&7}BV;Q4]ޫU -!UBI2jtz ,sZDr̃#W9XY9M ,_cf!>&.{ڹBL`N˝GY]nQo~s]SKۚ2N;_$.Js!h"lx%m>haT/ي@vJTʩ>4kNDIkݟJk%5yιܴc `2yOWr!óug0)pTk4б"i[>Y6_[Rx@m zī+iFB ߤ:e6ƪɘ b;xl7Nܩ2a36)C?w/y~Y3D7b߆[n Mv`>43"v6WuvLfFJ57z*F6ҠWףakxf˾jc.SE5 OL w$  ʅtޜCMLKҤ.a0!hB/h%%-ӯ4:riG@#٦IZ/-2v);+nJ$K8Y067S_ޔ-{i 8# qdMl myf.D:&ϭK?,]QXiZ2=id%60io$N0L(m$fݙM Oՠɂ&op?.3Aq Tbᐫ\i^-1\!5KNJZ n¿>NB=c,ƪHo`\ֻ`0Ѻ V@ L+.pPKi6Ϟ"~ksOkĠKzX)-g fO?g$WRj1h8'R4:¬3MuUBW&6>Ozn0^{VR=zB`Ə/R5fJs*tkZ[jaQU![ ~cːEpzwa3DGD1o4$4| IUb?!Bl-H(@2mްM/߲2j&p5.M`aנlgIyP?/x]E`;7/@k:l@!1Vu./qݑS\^v`ϊHbf3A؈ݸt/r[4 I-@IyY0{` *~4 yT|;zyǢ2T 1%wzwZxx Mq$5P\c.M;KD2#n\CoB0}G584)*, k"f*z;.5ٺIfd\?@Sg w(Pmd(vaf. JNe.s'ط7{F&sd6A^qiΚK?[$OF\u#$jlx<2m @dL ~sYAhKR7EolJc&GCr\Gc3z$U.#Dy~`K>/m?KTua4 OQ=G391uP~ 2l=w|$S)n,bUS5U]K|bqH)sRT\^Q/duKGY PD,Mi&mH;*ԵىIfa@1Kp#G~FS`* Pׯ|t4$OKM.3";է=}p1! |&.Y)Wrx zEWxCVB#lhkC^+t7 %/ޥ-T~d/ÿ\$2Eu߳kWg[=C2ޚE'*UIz|B"džv;>>^}٥s{ Ng_Fz*gsnBhF#1A:"2+d"4n g5Ȣ퟿_HըF չ<|鎾͟1&An `oPh#AfwYHE>RJYT+'6Spi NܻcajfBV"¸,D& AKwO8BPp ضen(Ph{cZ?y}>\-+ot/}L˰KNlwwdFf?d (d ᫒G# mh3H;HA\D {X-ØD˞C->x.~:K _G*MW/w <]%;˳eu^{iA#O ӟsLx;w1֫ 8ڙ; mS:9BMˤY;Gjg_3ȝ:t$VQ˻#fv|&LJ]fTC#0.z7.\K@ nSEW[*^p+gb*,˗Ҥ˵S>HGY)m^tNp#Wz3Q[ -<4xę&WEʼnaq xЙ`?o AZ'Ky]z xc%`~A[kmVL0nq39E\s2EfC =( ꭥh!į T@U[g1t{7zFQH Pqk<#GLӓ++ I~'IAC,Wc:y'S8IšE?SExT1wD1VJ2,,WKؼ7_;lvFAtg0lbA.PCt/eCˠyi_ 3BC {5+nA|zN/YCJhhL:#^h%V9W ݃]]^0J4V41D!IӢ !G3"MGoB'~4dQdcgdŲk\{)~6j+kZرcch}q8<sf3 `Uʛ4fipwR;} $i}6 Kh(/g!Eٙrr<it6ҶŤd[3 u# `]M#1 9^,lop<>sLRi/N'q qxQ/f+re/ҢAz.IS~Oq=Ɔ ԩ| .p9[pxc;On:CE)Ӿ؎p9 /Eu\*enTm3-li1Ԃ)`#NeVtjw#h ު֚(j_))#C5z|*9?ՀqU.-T:˛퓸O 9VB|Z#Q6y7MF2 ~`E}4 TziFmo24__hҘIb--p`|;35k#&_UУbpF@)-A?2.Uҷ~o`hX]z%X.Z)< ,.⑱~ 7"*<(ή4f䑏$woYH_MZ~"(~S]t0npIT5  K &#Zps$I4tBG,/)9TYL9Gm& oV(o|~a`[n&RiR-T*sؔчBsdлm&fqi?[uFL>;ˌkRDz?(yed!su3x7پbG8="^9tG$LGj%qZ,ƻ! %)7tJ["0#f qY]8 7^ pO8>El?@'eu\Tڽ+[@IED~SȎT߳Z"XFhM0 ^0= QRu{kMn!֢wGM^$K>sh0,! N}n*eG{koƓ-K4A  IٖKkOM$;GۍuJs<D*".nc,Y1ci҉Y  F|5b^tۘG+Hӄ"8n^+yq!^ N)&]^7 I+[:6bSrVӵQPӋjJV>O1?~#<%N`ӯ UͩϷ0ªM XN1UWukп G C9m?*$ڱ"}ل #)^V֊Чd=qy?QG't)>/}D_9yrO6ɥI9\nlTEyJfbW u\)ČhKM݌4GbZpf!]rq!FPd>B gA5Y3_()Wdi[OB0O%!lu՛gŞ| Z .(O?R͕-Y]uK1E WC.ֹ e8?ν(kFjR858+҉f\ iU7DLǝmM}SF{g (bDIHǯDBb2+,x䰏%W3#’φ}TRpcTmeKTNտW-yh@u-b@9A(:PnY>rEU&Qmx6Fl5AR' H/vHRI0L>6%=}s4٫E8zPMcQ79F`4$ ,Ͳ5&JHJِa+̢QM8QMUcrAe,0`*D-|* ϝN*LCYY~o&u rk ;^]Vc=8^2O.Xaڋ%ᇭ3*lF93{8Z0*ݥP=2Ż\-ŸYsDzm!Nz~} x&N)W_NvqRf߅.؛-*g=ps{ vo-'xh5RԭJbS Z6EiF!ٳ[]($ڧ)|ܹb]xG‘_RyU7yԦUލ';`cwzjB y^"?ז1?a4fO4cƭR3wxo߁SPfvа>a1Xϕ2i ?:.+YcQh<7K)!PLNc}cxo:bcPj~=/"ס^`)ihD<]%L 5i:NBV2 1𹻕Ny %p+'5,K3$hc|ܳx^84x2L^>zj:(u^5כ%KN~Hj֜UЖ`7yf+X$bhYaK\G6&w%oB}փ4 >ݣ T^A_#JRУ9 N3V}:({&.'x=Ew Ee!3f5ܕ0Tũ{ԺgzazٚpMA5Iѓɸ@pSS&1:Ll (te_/ݫ'Aw-׵H?`IรX e$HL.,V5qU~0cW)qX%V<˟F0:cPIx8-1 V lݔEZNmXN|l\">G/l\s=OBbS]aWh:/IXRH~3W3~~ 8D0= ffF7]&j"YZd?+ʎVكl_GO /9/˜CvOmkx>k3Yq[La  fHi@!RN /3YAb3gxE8qMN6 w4r8AFk2Mރ5'|fwM]| lx+WlkB (sDgvԊcl JT܁/U73F1P{ a~<<_qǔ^/ 泙=)"CIlƀV2o*JU2*בFMG;|3=ivq"s 974Iv$Wu9OMHL"Yy1<ɐ:9ym!|P/(WP@^M?[fCJH险m-}yȕ3ѡfbqZWhi|{Mf 6#F%|LK ' 80g\u*CU6d&3T}6<(r^t(54M|Z3rkb=ZRbeh?Ε>GQ-.RP_$o/n} RKd1vEPjD3*K!u1h&َȣl꜄*Eky[;Bf fIHp=mbaJ KK0^->4ܨu:5 N+@*qR|?WߑmXΘ= y:`Kp/e=}eͭgV>6d+c_vnzdo`7v0< >9k\F;r WDt شmk׼"˫) {-T[YVNEes븰\Պe8[Φ)1ԁ.ڲր>~0 &,ǜb6h-UK i-Y@LHiB_"[,"\MQU_R:ôH=/?u Ka֜ӣӞ~ABE4gbجF0}(_j,43ˡ,AzGv3"с}*r#e8ITAt`5"iWQf*C(SJo3Ǥt$afGX,wOɺV]:€Y60oZCqo"!rTȎ.W"2kGd= EZ3NwKfb[՘m=l7lP#tʗ4[~my/l(]9[v;e_P79{NQ#6(KkThZ=%ظӠ(bsYNa-{8U8c]_yEM-idž+ , 7R ыL&_?mf3Tb 8v9XNHMU:vsuҵG߮qt=2J0͓v`RV=yfM(1ilæe%Fp7+x z|Ѹ܈k7{JIGbIBFIi,t'$Umub}MK_ ryVAN~yB6P +HdK'=bD ͽVH.bn~[yshO$)C@rGн-ys{S faP'.`Eʪ!r8ԵLCuDQ NB8 srr)zUbJו;D^'u0P⩝0"OBœAD8|2/NP?M hIٔ-) UZko [ZS']($}F z2-6ĝQtæi ރ+=, UZ = 58MAP&r\s7֐6NE>V/CҕGp20QصftB]F8m DynB(Ƌ7NJުr8O v^5s'7%3vM!yl>>bjw,NxӼR̡ ?et+P (?O<ϔⓛ?~slY\Kȸn6suasFO+fj& 'U&q߽-IFc2VWKj7]@(PR&wmpJ;XA'&xy<4ĸ 84rq@apՒH l}]!HqWm6fBC|Zj݀qu"vd_}<7?\aN*´E: 9ͦ1vuwݮ[a.H`1)s@#N>'OY8 "էݚ>(>^ݍj+K >g5ax%T[ al^(P\Ys#NVx53Ap0+Kp7OQߋۄ؃-jWM`ܫ`/_v7慁w x5pJ]3l&0z÷);ٺH2o?+/Bn)dJ4JK̦kƧb)&B+{b`'W3ZmQ,pA[CAF"JUz( iN_ 9)O!ٸ7V ^}! (=}k]#UD^/ o]J\0M0JHM]9V T$m 0N±͕B=NC2j) X]>;TZFD-y]lb>4rP:3mZ>KLcZb12`ZrQ[c.orP4Y:y]7: }P $2&UEvq&z @Z6 AoG(cݣGKA&j.Jg+OCZ&GŻ˘0ofa$ H ϻ|:ΪY@|4GlQS8>kypVnfXe25?ص~"ŰVau82㝝2e_1rh;u1#QL'460˦I7S^s+UƹkaE"rn@sձløtϬF@!B5\Msʰ؆ hDŽQ7V`uVEW]f"qfCHn4ERC4)W 6CYϺwu!UTFB~v 1xw޶'OԦw(%Cӓg։A諸&kp;r47|?xJ.pJ CO7IaqH9P|G$u{%1&¢o אb-)a[1l],^χ~?m!ļNp}b^pi-ahM6 I'GA^u>'lj!,bgVm%3o(CDp"fP eiF5Բ!mHyYQ"{qUk65880dbZҬ6] GЍZswAs>VMi`tE"""Z&o'5կ{5:baf;gp5\JiBͤK<بETC:J8A .>۬uġ65}фHm eSCwt y=f |QZnTqzz/ԁv ܟQ2UnyqIO,׬bN޽ 0elQSJPQM;\Qěp6y.UIH ҙ',!jc3 o{'F!+d`I%C(u? wDQOdQ)bcCz.!!Yg{iBO4I#NТ<-ajQBH!6 ‹k|Q"[XP!*nk-^(dA]h/S[#lg?\ ҮC^Fn) x`"ղdT;-"*y{ Njztc*N87 ܂*¤'WO8xksx ?P?>lvxOXlq45aV tzMjqvK]A<Γ}9';4.ê|Q.]S a1MwHxނ+(3C/z;HyzCMy. Dn4XD CK{!Ek'嗍C}CLJ^dG&'2>(g5hc -ll2ԫ[ RWZ.og6Ap0ECQB&)MZ 9)S~5xȂؤ[ oqqqpiQKdCSwV)ZSQ/Z$AcbNaͳ4Nz>ڡz(K9`c'"ZР<=̲_>\Ȉ6MP8XƟ-(!eH3Gy^~\ f3RilvTZa#bw{=aV?ZYt 8 S>qGv"'S):+] r=z5F%[4}I(lz"*R[/iW·/q$RKq>6334N5c]# uT8RöZe5G!=y 7uDlIF!>]ٲXVTaFq4Y5u%Ĉ{S=cj㽥d##*wi .<@NKD: Oy&c&\k_V .4UB%ֽrI Ǐ# kDЌ. Q۵T٭[z΃d4ۺwr*JX??r;?;(gH4Ί-o0Z `>*fLf ,MOL~H`2钕VbɈфe >o:>g?ZhOv A]y@M# aFn+[#崻iА^c*&e| ؉z$DdV c˨䀉T7 * i)KVw:\h- (ftwbO _\K߿‘{Ea6)^]vFCFTe[*'+^ޅRONI7>,Dݏ*wY^ZTCޗB6 xjF0i_LpdNx2_}eAE.cEaș.?RrugaBK/s6n= CSBsG6,XP~,6)QiEn}=|i:9@|&Vl/ b\{׈6A379t^/Yt@/ -#AQ_r'؉2eΧg#G_If76d ]H^f.i]흷|5E>'FhBpw눵j~OPPf"/[|C) f{Z c[2`{cMzl5gaz\bܿ^_PQώ oiP-V՘P$]eUIR-k9yo-E9 ;"?*Qgʔ =Rd@/w_ 3-N:|m+c ݤWd3Iņ ?ۚ4{L{{t:4RkT?Ci2(acb:'4j/&O.dj娌4/lGl_ Iq  %(TSl7 L^]hn1GugpZWQO2xTLՀ=MߎC'WMA&/iLZ|HzS/<(~cB07 T;DFiKyYDDߑwCc曫=] fΡcGGd;\1r)5oŜ{m35MFv 37C&`MN:\}+$k'Y7Q[#V8 6HZ^g|[,*Í 6/m5ڦ'+@$ F0B~oU _^кׅ7rdcl`GvDM^VӥMAa+A A.JT/5?T8idWPDZRNi]+cl+j67Sa\mq/˜{hq?Jg?PM|k${Kq":EMn \8Ȯ y'Un׫8 exSj1,7< Վ%rwD*KhY+ lkꙵtnT~%T?dXcrYDq1kaZ?-m;^uora+hJt2n!77eUd7\tFf>6tt'ZR:svb7~ު?@D#9bW(bK04:wZ 0pHl8" C` 0O7%,x_,AjJX$i'ӵ՘KF0ÃY)g\Y|{z p#?Jx ^O޻֢=۾D< (9M*7yxlZLd^IoK(׈}h EV"6R;kOpX˒k@N{tt~p~ӓ'3u ҽEjp ^ݦ' GGm@$ ?j c\ s9h5uf}>ʛ'7^d ӓskϭѢ^plzV$P0:0%;SL]S,c!<$!?x\hH/4 qABܦ=S"M:F]623DV<ﺮv_< 3~9:ϑl}9sY¸P]?z-w[i3gpF{qL 0=a͡JvQp"⪵;{Dz'yWR&U30N-naҨ_f2Ҷ>A#k Z{[d9MuF. O"HDQE(pu*;eb ܘ ?nir%ĵ dPa=+& TE%񢼣Wu>ildmzv/"ݎ\+}^#4q0u &; ^ \H?NPGAge[HСGB47oq8}s)q͕x^}G2T66.,nKOr+{nkN9_(;ycWY?Sx$vr+`dbQj,ܖU\VY;sQCχGinha+v6 Tg0b`.#r1_hrmG,*38d= ox 0./y+=d{I} #;Xg؋-CP؁OwJfD- 3BL> C4tQ |N3szl%u~P Am , l #N*X,²P͗U$r -#IpekM], ER'پoVk| 7euU|?z٠]'dnJg 2WtTO4x4MnQq p^Jfѵ.")l Q0cpEH<,d{=3Է,k҅UgF Y b[VO $[#Dܮ"@ru |{2`jJ;us1W Ȼ˦⅐B@`R C*8<;P22~t@ùc \x)hdr?0,E;8áٚe˼wÇYTRqGu0E-Q.د[E%BD`弋hԼx/CgOWS@Zi@E{SL~1N\B*a1KFBte8C:ȋ G)ߗ WRS(w}TɼI ͎C6K)D7;Ő71qY ԅ,=cN$MPt?sglQmK߮ SuO}L~<YO¥49JE9 #M()S0!\ɒiio ~SBA- b^'AZ8aGŕq9GA 4ehB _g):uFx$#4.;4-1]\MmL*얟O l !A 6YpYhєUhڷ0떷v[|[,f_OieH,>qǩʨQOD;L 7:]pK Į Ϥp%aN~g@s9VLsrGdpLSylQl_?Ũ@R1IgS#`'v: |Wt3DMh9x#UV"LpW_sUuڒgmoOhӱ*?;zfZ xn^_ܪT S2{5'~,i/S3=]⸝d䒚DDe9;uH6;u8Yk]Tȼ ox? ?C5yL4&i>|nR)@ww|C+CّMtc!L-YY1?0:!]ϐr32 z4$NgÒ !ส(LHBw`17D>0a\PPcY4cQ9sR7۲MC=)3U #JA!%A xy%B`jfzOTGY.5VnBʋ. +?%]r PmMo (G9 !Jw+,-$)ӓ@Y81f>&Fi.Bgd8m\dk\^ *Rȑ apGeHFIl[^䘞р8:MtD4g`M?wW^6kfxI-I 30JUnkHRф7gb3Ӝ& " ̢BJ'2mR1 9nQDā<~6Xm~oN-*L;f*LD2+Zbo$;fKĿ/7C[z[D &wA!Xq9@^Ȣjo9}{9i|T`[dNs Hhf`NsgmsƯ6,sxU`pn)-f4uԗwyEjL2K:2n9)c۽ݖuNrWG]nf;iia6u5 N_s&[6|mp K3?܂#`j@1`,!X&p/%5 jܕ <|_ o&ăѺt:onWdihw|tۻnOu\vZ?zwN}PB8cLz}~z8^|pc.U߀ֱNi|}|@vI;mEH t$R[KzYajVDtdu%]ft\Tw/ޒ@it(>ߍYm!=Fd#K$g1/}e? cF˻:'X0Yt ̚o%Tˌ [&lc kt,Q뙍63[/fpi\1~KvBBv F9VttRtK hG|ej!f[q/P,^^ yPmHJk$$# A+iim"uRE߰&R- iZ< Qr#=Pϔ&y溎LDL =~J 0(*F%j!H%ВkC!kbٛ!Jx`R~A>Fk[ۚ;Az 'Zq߇|ē2RH_Cr$vH[F#RB-E&7J8a@͌ς>'nÒ.PUbʤD*# $in8!Py3touE/L{%9t깲S7D$.]طG_` vyi {U%\e5띢OVS6LGBҪX@#^ 0Ռ"7w'Ita泚{n "tMF [d`Xj 8ɂltCf$LO7g  OZTEy] 9}t $K,Yo#Ng)h=`͖횖PP7O0h*bW% e,'{<_vs)‰Mh$yŲhX fO#,Lze덀ᲛiYD^<~\ -ԩW-Q: UL%.CRf|~U%)kv=t3*V(!q,D!hzؓғKѓpX[j 6VmP~O"UsEÌj6/A)s苨'W'EE Ev9B673*T# 6"ڣmCð2!Sd7<G4*B*p{>kI<2JzlBhM/ɏ!AP> Ų-wg=Z{h|':KCdtU'3u plU&CHJ] v8\8Y =JcBg|P@fg ̯rxFŞ\J̞O6ы}\-hgꥩ@Ai;^N)|^f&8U溽"-Y`}TJ:3YQlKidz4V|W3I07Tv`n3L_0WODI}%Vaz $"A*38eȜD _Bc i`ѶIswR͛}JBǙk6d$Ǵ@TKXk)X)䍪ה]S_??6G&x2p2f q*hy:oQ1銷wNt褏W=I2۷ |U /&X_$ؔp^?(M3p p+JySnK>мQs0YVr!˯ݵ)DMjW'$22O2c$[Ԫ%NhZ]t0[ǖ+]T Ű/tUd5e$o)MyY馐YxTXϿx?g't29]enkME"0E# GKKnQ*]F*Fgg &T3d Q4r(Dx:N+L{#jqn7=!i(} L5i,[ڤ{"Mӑ@Z_i:@~= \ξُ: l ­+Ǜ!euD%)rAЍSu عRG1m?j g,}9 2+j 4zw;3 )?; 61cɉh|?ݚA!{ ,GWR5T_ϲ"nBaLIoґ޵jdùd-]L\1ǒ j4?0RVA1{-uq WZBA;˹ 7 Ap.7xʺ6TG~/JQ`g6xӢx(Hj!  D>JA4Nٸ"AMG<@Lǀwe:'U4Vɋ3}aKP wYZȣuC$pn4W{}$LO/{]h=tۀbko3=-; ;'| E5aH9&]UCOG|&5^9Q5t̻=;vTF'u8b~'zo]X-x|//#aɁIneZ}4`j/!ſ(PI]Lؕ_w.c/Ct')a?ʭxL έf Osw|1ҩr۟m.Yji2jb&q1]yWh;n8*ݹNsyn&YkLbnǤ_.9U:e>qi,lxڞҬg>zr7w!fTAgsdS)kv`WSZRd]z#%:=%1GnttlWNp~׳U\\-i+ ^&r=Lt/pOmIO7!&|E! Uzxp\]|G@3lקZf^O)X9Sy ){wЬT&34I1k=V| ?$tn#)- B/jKO:G9M*7zcX?="oq1v,P/dF+ Mbz\n~됧I3E;:򿥁$] @.f2x@x 3c'|͋" s[rq m!9e]T#G+StqD,eg[ݍHhC'ރgx:t-J'P\aķNofБ8 ."h.*UْgEwM+}7/#BT~ёɾC{IEu I#AoeHg^z"eL,|]jҹ9XH S8IZs,b㸅66||Ŭ2Ȁ)"T tj'RSY4uq&u A/fM!Ĭj̔^_/3I4Ļt3+YgQ$8/o+[Uʪؙ\t^vRՎ(DI>Y;Q]5$$X.d^ԆDuzs wX@/&A n,^ :PpyK'#" 0~ii,c8Q~{#`؇FG.]ђ8 (AE,.“>s״P JXG)]@蛫`p/]נo8Tކg˖8v? e|,7ͱeNHj*vl v9"We9Q^R(Se\,!>咖CKF2eғxӴ80}gPc/Px֦ڲu@/k@%_ |O~?u6tA^@=qf>[ NYs:G֞ppUiXg(]^Rf8ю!:\mtWW;PwDyz  g͆_fMD{PbľhwS^n3-vv6_IdZ6h@EiNx<;*|1@O:H4ƒ>U=(2Tb =L^ 1 5$_b*|v{t53CQ*jvo.oEouHqɞ9\n`MQV Se8es#&H%há ,[ɺξ$ {@ x8&z`Tv,؏1T: Cb|"ƉzG:؝}P8:M8ʅBpv[|Fӣcz.Z!etd٘ \k:R s:MRx2[9!u?4B))E0P"Q&NnDZ)VӽaZUFyBR*ar䓙{]{{)j1K`J*FKK2D9*.Sp&^!0THjƛ+x"ޙ떜HQ!^5QZO!aP(ۺUlpՕǪR0n}ڡC >(bL6pt_GcfL "!hAv/nŕlgW/fp}Ȫ3s?6gFWpɊ_ϱ+IG(̼㊁=fZ f9Y$rbEa=u A<)?Z8 zbeqkm Ud2GQ)qo 6x JmH]ܸÍ3ãiukWϤ$\,|*ɍŘQrՑ, jxƙ"iR[0}CTQE*d?h}c&t1E@:Gx!}2r'[(.Y -6'iM'%b~_Ƭt$`Hi${Z'.*xk7q2]T;A_MϝmooEܭmw)ƬͯQ;j"1IωɃP<i$;wu_/Q MhXk;tL7z،;SAk5}qùp) vӸ4-Ug3uйN}Jzȡ6}h88;*@t?Bg4I{MU 'D`"IYdiRV[j1L)Tk-dQuYW6`"famiOktuбny>Mf@ , rW}eck@y*qη]VGm cc32ltFQ4wo/m.aMu!&*Ơk[,!񜞴d E0/0*R:>oP`;SBzԙRUx8ZYgJ W'nz3 rzN{sNL#Ư¶OhY V j  »υkVuAA9l8o'n"U5 <ʊT)Z{|߆+#j\&(ų"Sz} N0Tb=~$zU^ɼt(eҲ=9ZXСd9j5Yۯ~> Hp\F_b"(4EO"J 0,. r6Ȭ™)Gx`wi]:訲/ev9+]Zr&q{ezݺ}'vI8 z MYɫؑϭnazY]阐a~;~φtZ\P %pKīDxdLG?/k<͋=ɪIpm Rі C/WxHp'?q@Zo#Jr.s-2P|Bo~ԙOA/|#34e|*i.":O TB-60Bh WbRCiMEu>9W ,bS0и/ڮhc*b͑&; Q,a`sɚw\Q'hpljalϊցH /a]^kpߪm9Q < *\X0OZQͬ~?j >Un5]!dvH23\e`FW:kWF'.CHGbWOȠVtBJv"ek;$̳\ 5{e  d#\i8 e|akP>GrOվrM__ѵ͜K`Lt8VmȚ/Ѵ#ܵ E oLOofo]\_i~A` 34@%-P񅯁Yqo}v\K?#qO6Fǚ؂'UcxZ8 tVyTMHgH1Z(,FX|^-ΈՖP4BJ`mI`ըOnrca&kX4Q(A{!1qO59 {oOV άQܰQm@{ q!лxˡJ Teb(2[mP+5T]AYN~O1ő/ UGpkP7O P7mh@&F8lճÅEF#У-/ 3x N߾TbN5yjfQ]U~+.W~}P:5l">κ#uݚ 7t%fq fkVk߶nT[%{~.T0=^Sd A^#Eٖt~2f+0&4+A QgUr 0xg;r0 _vf.>Ht2ح}3%ɜh;ۄ+ҟk,e&.χK71^lT(ovxHZxR8"_f=s+\V<q)A形GA]dtnq0:|CCwtJ4$3X^zO"'+>Ai;#W9a|ujPL{%2~ˠ 3(Yqf\gչ4P*5K"J+'63?ǒ KoHf# F8?}Ÿ>1JpI!8!;KDƋ2d}J3ı?j/? ſ]n=ݗfѴ$ꇕr/Ccx(㦹eJx h:k2TW%3jhVHS%GZ5Ke>AQq; a]^ 7G,x! :#o}qA)"qY\ [ujZ|RB<S7 'ipPz(FY^ߊw_g}A?WȳTk-UNAUy1c?YJkpn-Th') +y9yӟnZA;oZ7H&4TGs(]ҥl=DgnD+Xy)5 YҾw_󼏯>酿SOygY 7ZyQe 8}\IRY4@a ]P0"Bt#mz`1ņT;;%+JݚDhY T~sN"2$AoK;+&+h杸1X^~;Jv㳯<TBBք,V y %|zz"kF1O紲TLWtÕ"M#kਮLE\Ei9ڹ>f55K8ZUr4/_fxb 9ʢPt,:xn,#܎;G`mŷ| - mAIIH' f}B_B8x˱.%tE֙3zMolTΦh9qAEhpLC'|a-Ic ލ}OB]H6$nդ=స()Edj@md1d&KD:P(-3NDf`Kڞ( x`n\j,Oť֙q¶0F@yZev҂ *xXbj@l+8A\Vs {LM÷;(> qo@']"X6\@VI!sW$d|.״[L|w,`w ע SҖ0UDa7WnU  rcxQJm@ YnI6lVy6L[o .8 w3s^GJL}qU@)*^/D<{/G#S2cWL"NǕn, *AX ÅNkt}!m*D=t)ۙ1!P-./8!L6WIJ8t -~w1kM;t7E&+,9#P2 GMVD 5KNL:kF{dKiJ]C:zʦ@G_ުp_4kziikK]K$ZMt ;F JyEl@9c?Y1?ok莪{s%o`2z$rps%E3\Peypqr&CZݝiA<F paK=ʄ" Z, Dy`r(~Sͤ:<~il<:q+ /Eta[KvVIJj!)m\K=vLp8QGzD,DɽlEUu68<[ aan] 5{f-Ld^j_9D}y+'/"[u{MdX BYx@H$4&W6`FuI{jPVQ̵i/Q(x&NY!Pn7~f.M@sr+dQgXzܸ̀,KjISbѲڈ!+:v \sWz;)f^;fn M )a2CV?M'@Q!-kR! yfӛo(ץe8i`?>lv̬#eN?充]ˎR?etF:@ףoGpu3"%XHL-2{l{, *?WVжw6Wyaql$Y0ը8]:ðqo#yn䭨*Nckd8[)%vU3U㩪RiѮ 6XmED4ɧ$ & gݹ^TH=PxBSr~%Dhi/{ǫvk4Pڒ㸕I!e٘S袙o&MIm 2>h^|*mգ+M[1P${n|` y9$:pA^@:pX$|H?i1H^B7@ŧ <Ga ΐf1ҏu\{UBXR?FO{*29)a,MCb:[p"lB*O +ru iƹ['b37GlY& O13|`LFtW)5U.Q~I.\BDzQ(M^jzƹnٱ`O>=&;82v:K ˬ,saNO݁- r_ BPS22,([ !2pʫxᨌKy%s1ՒL&!Yrtn~3H.ʍuM2+vYT8>0d.C<vY.⋧кAaS @! q's wWXGfѢ+dY tDUK90G^>& x:>Rx$a(ee5).'^f&ؗ5k'N[4uϚx}A̳s/RS( Sq=9?P1i;a?ڽwH sE8|DzRj} sОcv$VXH " }}p 9X-qc 6MZ`Qr~$ymIaWQ.Rzܿ_Bp]!麚va'~@*8}bh9@Wr_JeJp3甐 |$ }z,f6_Av.>%VhH<CBdbN驈L?πS%_XAI:Ɏr&jW"@jÁc|+9rrnlZMGE[X=0O|>CoC? wً!~M5.?ég¾ho\^[ʣM[c##'f-ra P7 &oijv/cٖnbGFuŊ.ƷEiڏRN+|V3wV. @6q}Z[[)VlFc "Wh?(8 fV,?I| [O@LMa~ST>#bp+N/C`ZLv- *HjB6ٷ,-׳e[g-{>+o C^("'COlyݤT,6V=a6ľ@i^qHqݏ݌+, 3F0Rezw-@ryTOb*>\q I_7?h qj3(i,0mlE驑U"nMl @4p4/lF~2ۧX'&/cl3.zZF2L-lc ]*`,Qۡ>,4mDX4msU0J Ԁ?Zuy 6'xPXV"DI)ڣBR]u3fM˫)?|&Z RabB=d%j.MrLSNiAr5`iE[kD'-)gzȺ5 EI6ez}wS5A}_O8HcqdsDJPMODЎ{C̐攒>f@j(G/9\CQj_'nE.}!Δ?jK4ogx ݈AOfWv J#%9"m Fӈјj)jDYbt, ` v)OELykC<6ڱ~C\1Uu*/ S~e^ ķs-v.kߚ M]W~8~tdL5Ϩixkjf@<,[Fȥzf=yKp1ҽ _{ǃQjТ˰2K6kގs؞;{0sy4ᕭQZ̓ pdu?#a % Q[G=sVX}+0%l~]Kb(M]@x?N gTAqrە"`}gOW^cfx:1 rШ4\{'n(ry##˛x*6eO֪k!Haarsm +Y'Bǖu=8P1Dd$oQq9jR7؄o 6l$8x3w4ƜX[ %NPi}Vǰ9.ݣZx&dʹnsN2C+ޥw+],$^M_HǪr t|NeqoEy[U펅pMg?#-뽒.z=sLʼc=֊K x@D6Nƶ i -*7Rjm,@~'ܻv_9!FK;'KdOs:g "?b0KYyK$쇺Z"lɁ1[ 'sMcM|Bgpg{!rD26k5#8#dl49ABvj[*$؊qwLukeT{hMCrz?2/pnSY"Vuo vKHN9 E&C@(,jM}#z֥.H^8ȏVT2C26V6,'sZDs HSl5!n4DG~U=Kh]:Zr?J^ߺE6A/J}iKOF|vژ#MG$շCK@+-Gݳ?i#U/Z/q'%O hx`<y$1YXq'Їyv{740Gj-.C{'9@ԇ~x9F:^qֱ- W&,TTB N Llt6솴V1tX*;@ 4f0{*_(E}_|>0@K.T NmO{{F|J|Z&rq5pNъI썤# uzGx@v9Ns ˳ߎPfr B9yل \qQU\:w$vy_xgqI&9z*j2:7 8U'n[m2P6qw,D5˻i?~TbQ\?ϺwxP.MC|oI9gnfb-VX!͔W7>mE7.~0XYUdN h7gmeӝSւǨ(x*'+*uGmf Dp [PL/85٣Qu@D ̔HY(G DCr)dIщ껑⣛_u3Fx2ֶtZkL8Q(p>bHVA)AFNZQ.oe2Ż?lYlE9ޣ;fDn WRv^;ڟeٰQE$z6j۷x e?|](8kkUU\wưzqRnx/- f[O+Z#39xQ3ZSice" 'Zу-&5dߍM[/: y,D}M#jW<9>`k 'hpZV)9P1q P!Kݛ:'.[T|U9mdhW9"NYv2x;F]}doU-4ЁW[X_}+U'+S=_* 00`JU r:`wVQ@[m 8rƷG,t'i;eݵȊ;=`ۗӹJ'[I0@Њ[I?q(_$z"])i8ϼURx&s|2#;@~XOH\E6";\BZQPnV6EzfRst" >¾ G?e4Ӌ$[uV{2d*ӿ|`*F]B8K'TUᐥ&TL!@^E ̓T- H y'_dA 3h)rp9}`ay%;Yxr8Ow'9P(sh=`6^ YK9HVDqfG 2-2!eG߫A^M&WկiE{3>In;E|T6}No_㏉*ܾU19A"`v6w996c2W⨄ [_٫2JF9<K33ͣrv/:}"JD KZr VVr/XW׬,9^dǡB(b{0*MlL0C!@DւqB4݈"E%ON(u%8:PvQTO$òD3$d$ AbҴ*f3*v S'j[EE1Otf+ Yob,>X^^0-7պ ¢~[-:}lY&<kիZQeTf.;&!hMpx,tX}==Eu]r׎-]=r:[S^首$D"xpGl- H2WF?񧼔ſwCzcmR,wmHkJgk_/NaѲ,ix AD R5/mvJx[8Db9W.=p`֫8:|`QCa?K h-*/)@#ʉ QO.ft~"Gzm ^L#( ȖCۏħWNhsAVMF]@>wNWHLqK=~d(nm?Z`.+yYpHom4`(U ߇iBIfe|?^%>E|-N@Y2߬.A,ǯX]7>g㖪49lA$gȔx TwGY~y/}xYMs[N#tH'>1!Wn)F@-7gFlY)6+{ 1g+wR[ =%%F `d^ UFk,(sfЎ~ At 6j\8i-)Lcw()=5g]&Vt & m1* SJҜZ zEDH ڕ)O,| zBѥ* \ ?hxgk4{h(3,=KSVG|u'Ã"JŖv̾?1DTFj#AgFQNjq4+0[.J BE$Dk)ОyG GkjZRc'#?!INjS\2]a8ڵx_5eAX{G)7TZ?lHQ2w c]q(xH,<1$HΖ7ee>nu;}5f 7.Ճ#raCy#O~dNXfY5Ԫ :sb)cYꉗvT"'4ą YqQ9Fm4kQMecW 2e<ąRWq!ٜKl\.LږYek\oT8:wSN ;;_8Fn6^)rtC 3Z7աBy p8T|RB}V hZVFH_ƕ sV_MPk.ʲ%,%|:ў' #HbWP\2FU=ZvWxDFn0a$"te1gLNk ?Q3qD#*:ifRCp|)~wNGeFF귯Q=W}_8+̷b[@L)W\M9H2Ξ"?f3o%]? ?\B(C 79)uyRBQ/waG~Og+S,w>tٹ=P»Ok):x6%=jlƨ~ml'<>nAn<\Y Pki9F "#_l*m;m^a&F/m,ѓAЯ56@jgmL=zpcY5:È V. SU)gVDK4̆V N<$\9&$Ø@!C&7h/\7 4{V[e1o6ꮟ=]z"[ٸmHZ2W)L ,Sy/qw\,N nPP%d , ]X^u\|BPjstYgḅJ'<&ʦc:&T[V: yM]ɈVӸ1DA% iǐτZ_G\ܐHt0-M}4uF^DpdCZ̥̆X]qSO\ԍ17ϟY_>)J9}oK4 J>whpU0]oEv,dY=ru, nb%de$H]Cgd j kurk `ўQ+P i7]̩js:i`{'+"ӑxD*YcrGfϯ@^ ΏZ$viRPj+->^9_4RDCU!j-1&< 0QYqmEGZN}ecMpz{5rBr!g)Ө)t_%q:?yP4&l܄^qffhR[ ţGEyaRzG䎐sC> nryXد_* 셔 Cof 4G\8{<%.tZ-^[yʭ@o5ު  ${M" W~^պ@#%gJ[lݠi:éRwz I7׻+ƒ{Q$W%%OKԦ2(0HA)%n5JF홙'RTz~^Q<&1ځY.V.b|—C$2^F7{R&_6R3RŸ׻w dL#.I2t/mMB4DCYצ|b5n[H[E3d?}[imCoCfSWkv'Hyw_Nt%ΥVW9,<ˌTU/^1w_uڞ~~ېN€8uIɮXPE>)dHBՠTŸ,Pny1ɉlԅ0ą z=)Stw9iAޅ*h!R{=n^A5$KD}ݿcZ7fB[u7HIB-X](lre'0*HOxf U^-q' s E K{2`t(4>$CsL%xo*tL&z}zr5اB^Ʋ*XxCT`KFrz>$r5+ݫa.LvlBlp%J^i[kbY91YB1m@H1YTB?S/REIr¦i~`uq2jieq?B-5$z!/s ďvfSϱ^Йu_y7 ө Y mͺk4r0rWEZdF\43@v;[[BH;kQ++Qv.Nm.rՕOy==<[mSc#-hS NN?H3(69Ga,D! E[s~d@LI"D)V73z,1h0>^17ztH 3s{y'OEZa^" W7~̍Ml.T IC5vDaN7. Ͽ" ! ^P4-npҽeC ~٤MΊaWWhHikGczΓCX'c/AWSA_!*n< e[ʲwS1geg7J1Qմ C83) :7⏝ڎlUR=hMx &;}X ЄE, L66ܿyRD]C褥En럦vp!ThuUM@x@7U_qK%9sSR )SaO\$@I7xLG*|.<[]'=@(=NW2;Z946vT^ `VޒR &J+´i =`~Zn*tvQuQt\|@"AO&OA1̡X!{CH74{|W? sIy㔡1XJJ3iߕ`X dp[gJm%iI}Fs,*^^ lfc l!G2gV#"Ȫ~%7AbO66z³N΀rG!n#>*W #ځ;=CUZu{MғmFjmݑ ,X J/tGΏ8zhBw$)N )LvY_(L n 7;% /j`uwEt S8$Ὦ!0lW0z:i5T_Y(r|i@Je %TcZKߔ"kA=1K)kn* ȅ+7x,exgy# nq(WpFLT{IƾYs C8g5.h;L؜ҐA\+`^wTL6-,Pv?#!,K@w$d[(|99 ,SF "eʐ$Lr6fwrH ̙/3 jWϢˡlœiCf1誮GǗ\ s[Wxĥp !ILw"x鉙R$j@ɣŹ|\/*߭J*E^s{ͺ7)P UWziG 7Q)Qa@9OxF"jRpNq*-!(F3k' %]^kCf4l_? q4.剻GSU:dI3` ĺ& \ ZhAINaD.gŗ/)B#>'fA\@03\d@XOwp WgXxaP칔q# ;og ]ؼgK1+NDR@K)~s 1'\"W,-&k*qҞo+AjY+n]K1MMLeش^ȉ*?->5:ljUv«`=4 g$%.;=cмq=t@Bbi& {|Cj"O(t$v v.ՠZ RÐ]D>V+ SgTqJcqL*bPlOBMXؑheȼ9S̋)px*4k94 42 Zr!_S^XUq|%Z/q![[|T@-G+΢t1LG|Q [kr2t7yy<6qX_1Vw75KOޫ pC"JZt ougؼ%T,H@Aٌbt`G/"AZ͌Zm7VOv(1ocGE3mg_4pksl46fj8ύ 4v,F㉒!g$ݕg@Vp 8p2d~EW_ʴ)%S1&Ԕr ׈6:1/76 㼁up'6V$Aᒫ#oF|O[=¿/lMf;>QGwIB1]hN7t?|TIAˎHKj D\2+1[:9ne2t9#iŁ%NdWpuL sܦWUVa)u 4uuZ,@\s ε">"nu|kАhRL g9=)])Yf KS`˹da%A7[nbrߣ%.Zg'~Q/e6.=!8\D YX%ewv S/&g׽ X.`DY!lشї "#S zef2 WmVy 9SZZHj'a_,Pn?~dגUeU6kg(Ll~Vp)po>E%2VsΐfeT"ݬ:yX;{ŸؓS(FɈk$P-mbނlH+h1?An'"ǭ\xJT+ɍf4Yo[3V? x(gB~BD:0[ކN0əOPS,|4TNlrxi@Z.g-#' U'|,^[_1K\.S ?r\^`ZUp(Clϣ; o5m^U&fW~E5/j#v^p>j=$G\؁ Xlg@XipI4'RoeC5=b+zab/3#޾ I xB| +WJbB8`h j"gO :qOskSҲYx\+ʼJFKu DR8p&Y /(qWwwʶj .CD^pE[,LTJɥ"U5l"49F̐DU>: ,j$(= υ<-ɥaQxNo-5 &e5-yդ1钌>+Z0k ̯aW|a3 &>V.b6)FF"GY0vXٍolB#78w̉N !}s`]*2{0&#'i9#,/7f(&@T% :^6pò4DnP/87 5MpuLWy8DICE2Ax@ਯ"xnp kb/2Ϭ<5ow2N$ ҵஜzUsj:Q $EHקe+Gzz#MOf^6˴FG TMyT;hzLMnIN8 &1?SF$%g jV~r;);<Q*S[b^q~<1uO{^SPji0[BJ,Bܛvt08:e-AYRm|&qX w#q_/[ЍPLCduTg-d uV xq8}pz(cxg!r"6Jrdcˠ#8Vy*'YonjItU NɲLɕ˚ G(s ?v̐02nJQʴmu(̚oUTh\luwO%X;qB ȃY6!Xe|܀+2P LuY~&8f̽qzV bN=p^n1lb9ptT?b{x2uYs2,8f obq(Zu_Mx# aNB 9 ?!j0tRfՀ2G  q{?}1*Պ@ٞq]cL+E0wJ@5c^ 8%%sư;zX1r}m'Oj =02UwT38v?2]ǽR>,ڬj~4L8s=I]U!®XX6^=At(6^d҃g)_!onphiḫңm*OŸ/ <8܉9!:#mA,NC)EL;n:\bi5$h6HJqЁ㮑< %^hGTU[dAۻe znH2>_}h,Qw,j% r#dq6;6Ȟa3 xuCbi2@5s.7^y:H%-RHrЭʡ?ߕUfLHr  3¼+4cꌯ'PZbҪiz]3Pkl1j9='L?5Rr+F3xjpauI(0A;JG0,H(N(:$E$ƌEu/u)b5.У%ESp(3B$2?lrf[l_ftqӛze׏䚯ZW p ˅IA=+i˗}m tgn@`tnP7 Uzu;$IځEEҚ2WDi7mv$UOxOSxygL?jR* v4FC 3 P<$0m!·"em7WK7qb[V r7ߘlL&9@Wrrd H> 'kx(Cf-U Gt<3A!p4Fay(rӊۇ3 '-% 2ӒGX%3E/)ud;)x@pm#iͤrbmSB[*jН~5R_#@ %]!KDk[$Zh-:#ma\O@˩#Wr`F)uFf hefI1 `iNfxx 9ilGJ&F6)z: i0&F >46Dtѿ!h?2b(\`XW}ɖxZ F-ʨ5ۦ y[CMooe{d?H޹; *儑3\kF|=Ya$[v(FcLMbMbL+~M('c%Z }^1'k,dI 4_0$K6ݼ@pU.f6;3gjЕΰ#v |>o37p|x:ּP_ bv{pCR,=&rOjD @>߱2sƨ';eTs$1Slmv}$j9A+zscQ)&7lƺ]w7V>A?@ƙȜBzWfP=X5hR!0hgma3ر+I&`Ri?\I%Jk =4/e"SM#j9Nܳ:C8ip~#5Bugw 5:L//H 6dx0G+ûS,k+ lbދZy#GAbv["|~X"V)$/}@7çKUƅ 8$(U*Ka攁~:&OL@{%2 p$Պaa5nVx=.fr᭥%ib׶6q'H KlﻁN*.L7nK \hqq-eZ>{+~^L4L.o]ӧPh~nUP |t?b=U52 Gtcj:қwВOQ[ /bmlz|d:z 3gђ`A:0ݙF 0i ;~8ifړ T-#nG,ՈO8֠Ԡ LQz͉YYL%߻Y]içm ?79tBmoeYka?w;C~!|%&ZX]szq;gddgy 4ʿs? t2H&*MقQ 0A~hMt om_]uC !Mbjw. cƖP.qpo] ]~ֽ˹ϒ6WI0s ~IQ {PI&>0r=u͘,vN{&SGZ˳bd'Ņ*}ê<,Q8,j~PZFب./-wC(կn6ڎGɠ]zF8rJi7o|ik?RՇrhSn0Q[<ɝyL]{`_.!KȈny!.H4ir|Gl)O5JoC4+ԊdHh:k0m ) = *L9 ث~ A2=[mD9!%esSbO_4$@,;S?L 8-fEx4ڟ'ߥ~# Z4r/w5\ַ.JDHXrn£v;JI'Xlډ6̠wۢgY>BWб+%1ad{C8X؟ 7f.r-󞖇QC- ,a3I`i2M/2+:'W#Zf, .p۷<+jF ,$<0ҤbS[RA dm@nյ(1\+iIÕ2#gA;O"qMNvX26WU^\ T012bQMW,+#{/+Nx]JUc.4 yHk1ysbYC Bc%A,VLW!q("kӲa۾8:LD [,ZBrNo*؞IFm=>+iiv)YDDc1Izh6\)qW h厩`,{Ӻ=ls_)uvLh)$!Z;?B11ʴ&9plm^`ňĶ4@X)OLI3Q2{!ID}L.,^,}WF\} p ͠,nx(̀*Navc;MG3,a7uvI)ث%CaѺ|ޑ9,+-H/KUp=!l'ҍа^;|?t )[٧Y; K 7%C'*z;^Xā9ayV {?qȡXZYT"o$ik1nXJsPyZ5s8-L twZC2pQ0=Vi%f}jݗK@(*w.s#=Oى2B 2Ge|br5ʜ\U7u9p\e0آB!@C$<;Hd4CʕWz!LwzϊdA F?b=GՋU$;D&ItVV ߷cv!h'`ۡr`91P@n/u"$6TZ#1; vA4۳q*pm#rzA;zN p M] Me^m)Mpf5I4fb;+އnv y*Wԡ]W C)EG6,LOe!HڪHB 5;1 z:H_vR(Ɉ 'Hj펗&"L=R]/%pU$Dl-Vl}݋9UiP` _Tj..=dr= A_7qdp}Vȣ"h^/S jxݞ 8blCd4 ;Pѳ>3ſE7 Io(">b t\4;Q8 | 0 ʼ$I_ 5~1.Vp/[RyuP bT/}fV2ETʍ7D2K9בBY᱃BOQ6s`wPfJTGcE/2Ycbz3mJ]A;_/u@Y$ &k@}hJA jݯitHIf ![Q1b{*2 =Z |m?,]mHjh4m{g5qٻ_7,#g8 E?/ ǧj6M.ﺜ)^F}7bC_[=`/NHk>a a,{5#X^*E'h=_*͠2"<.}s;p*a_Bzy9%VY cAP5/,s5ɟ<^Ez]kAJ厝Xۘ/â`Lp%(=cŷF`' g19=x #`p}< |H&I?=ϔdX5C)څt-'HV.wo{={ Xm?r`e_6?MnJIpagyW& ,|*kqUK|Kjocږ (5tƾ+Z4O/d"»AqIuV }N+E6,)xUwFa)3yDv I $Y)g2\%JLũ61˔ 9Aooyqoaٷ?fy7%+O_<.2ƞg%Z@nλ~ YVK3#,^u-_4 ~ƌL^bGݣp(!dx6cN|OܒũG7K!CпSi]$6,BRhUy8n)9֒s&I'~D_UgpsB{.}tm2~J(?Xҡ`</?i8ضf|2Sh!kȉʠ>#N(s6[2[$}5d6.#&ʰ{z|qp|d K9 ] ިVif-181Aȳ$EqZ!l(:f3q5gI%HKz}>s *I Ł8n*ת{kl*ȿy|'K`B`{^xTBEvN} }>2AqKvƝJ!~8Igg_=kum_V_Li_?J)r {yb ByS{W\(myvW=?T6Jy̧݁0$I):XT^PZ]}spxp)+Vz,|$`nЙe;k~ +V9B1<6SC})r(VTt (>fh(k;"f|/1IMg+^ٗwKDkFKƎN"YLGa= vVƵm+bz ~'vz]UEwG%|XuH\ZdcwU -1?ROEMk{+Cl4Ad4!͑^v́3jR@=?mQtfpWPahp|<^pjSQ$"?* π\Rya)?E4>qT` BL#1˓&n)uЅdg;_ !"7fӜ4F3K8W+oRR*&W/<Ў ϵ FBmfQCR7^X| DĞg]Cs|bd9l)X(R'[iLBR驺^2ǩ/N=/~.]ޏ sSKTPcX> ⛸瑩 ht&׀L"6ذxF JЍ5p$6?drizlq9|ROЖky-' ŹƸb 7֌`e v7H^eL1-:9_]o_WZ_Rԓ:E冞mH,ғZoauNV+X sN]X,[^C4Ū)>5 85Bn},&9q6$/+ y,g/7(Do v!Ix㉯c"6b^59.!9{Ջ"lU&= GN^Tq@KhX ۏbv/vFHt3?e rwY 5XBFj?CZO 8Dm@CAmrKwyH F0I{}O*<'*Q7PfBT;4Ϸ5+629;ifϘ#KC`fErH*ް (72dǞ^g|{)02%H^G%m:CB,AwA" _[_ITLmͪwI~^e:ݺr-Fbkfڴ/DuFMRLJjO2BĂ|/ٗԢ罭>3%eLbgh.M$ ?,;?upB*~4(8LyDM&TH l"C-|3-$eGW,r[7ͼPG?YO&Ew!*⿿ qfR)mg{ !2I+hxM]@dKק p*bM6>c%eϻ!a|g_*S"'vZ#]UCb Qz) J μB1Հ}Bm M>K'R)GwppP`Fj<% aŻ_ -zO#NuY< HUlN@hXYI0]cdAnYaM *ZdsoC Ξ8uoz ?aiԩT[4oSb}ądXtg|T uӫJك lόo81ڦϜ`4)">A~EE,:L] Lm/MH0v-fL129=^9ceb=k@Rjۻ BŧꮭSsxkhP~81$Ɇ5榿o:L(ڟ}n};ii1_FQӯC3/,lG%WkBY9Ԥ(qd {}b$Bsc{cEY3(Sv(PnxY W ãR N.Ƿ ?%;T<"8}YvܷhR#+D QlC"ti] B!Z;]0^u{>o3`A }jdХDI["i/(uiӪ^UNk2k2yP_+y-u{'=[Pq WGJ8J>R "/0nR̄\Qu`T]U9Dۄi"FLC+6!`_+1WHʗQ+K{ [4#k"ku-7wl1ˀ`)`6bz)5P""ȵdR5#a (C+&ĮiQE_i%$5 CMCE7Ib{%b_.{}^A>zYh>"/KYr,p6C#X׷ +j, fKç.#'EpLI$YȻS`HǶB(_ |sXY%8FP3;= 6y';C 'IՊvO{xea ?޵z(P8̂>h=rO.JuEv"2GNZFMoV$0|Z{ePi%a8[Ǹ@W,&@d|j7$/۰v7/VCDr < F4I]\p =*ƻ?~?s߳w0B~H6CQU`Eu`NF"z,jCLֽ֖Uq[?Vh`D8 Hq ٬ut;7`nUnWcѺ;m8(Yg RԆ?

6bՅ%m:Vla2F VUw#ɝzz[wK z7 OaKX7ժd9 $h.G僦H^+^L7Ǹc'ZR|4R'M,zSmVG}\0T[T ]ʔӝ%J xuk5z{u¡ -C0!S1@֟&w3`~$4&#Ѷ;|nw:3G$Hྵ}v֙.Edv ӖA< LbaޘTAW \58q:hj针 "@XΝeF"ȘnQK~u"kcTz|ז5*o -hpI# V5ԏ= _4AypBjȻS2򦵭L&f8Il'~伪1ߚw4Fmפ0RMfɅvCI$307^Ԥomv7G;Y2x#uEpimj4}F*Z L,B"?;* 찪*WFv&Ixd痣ɦ`Z2Ꜭw8$jꬹmM}=S1 Cō c=}:[Vr{ $U.3U7 'ZfO 8Vt*CQe@Ik6Iz=8eOg3!~eC?m?Yz I2A+KT=vk!8ou E5AXj巫X7uF=Шwl`h(; zbWd~` b,ԄO^ӹ\J zNm@rd4ȋi'SƷHa F1EvPBbP\I_RJJ`bk:Ür6r; Gh2О֝bʨ[h 3Co ma,M@9Z q!Ӛ'/B)ބfqp˺6)񫺂rF&U>ȡƇl/>'9'3݁5wbE1T:$9}-hDyE) u6k Hœ"ujI?c۹{\PyNOo4I|~B}o)+Y3iT1NNVP#7./N-u%Ң 竡}?,C x#=beΓL1%kWaM__.MlgYWi[b]_*K-mbb{³ N`׎eU{{򺑻9CM k5UM7qNs>PD9Bj#~mE&o2?*ao#MZxD0!4]W&I .CP}z%apeIF(ZB"CmZW#D95Mzj5'vV?#^8K,Y۞&_㼨|zgOD7hr|Sh $6|X}Mh-:5XI7Qx@ yhЬ6"¥y.#en-nGnQB\f6Bvj~ֺ#RA1 jRoX&13$pjjhK>I` j3 ]O-7^'r h%&1~ *cFX&+3,Cэjt`Z x7u.$0(3se' Ť~^Dq4~LMpɉ$"yUrQxcŒ1VD2/Dt`g ާ\~蛢[[4?I^) )GsVuvsK֘2+7xU~",,@ZaXNrF~.j R4\nn0 s:ڕXxUf޻>, ;RF7e6Vr$J= _ vDcFccHw؞s#mk|lZ寑hG\ICjbI'/F yԷ/XyoP2lC>PT%8C*>-"!r49>,ӡ}2)@+CA?z8[Yꥄ1pjj'nݚi#?L5]};uT/5 #$92n5,Jdu;*[𘸑߄+G59Vj˶HX%%0Qg_|Raml~{6, ?}قm?:_ٺ}U@Zm}*@1t0tx}!Ω!m!G-O'f7alyp ~+oRhr*!X "8 Lw&kXѾ o35iӌZv=msΜH\cyuM83y&`s.x .A&RH]oio IښfS#g$ca]*U|Y/؁Ƽz:bgKZ8vTvj6=dhzν>`!l}[ Y u9:O # ^%0@é|2g%[d)-M3@yPMlv ^8wAr1CɚkW"z;PF@sBQ6TFj* ^e7񮍼N׼.2"id@[ $_Ey:2 |_*E0GMVNzwSŃeXzsmJ `HAj߃@6[$_ czN0b?L7pz9p62cLQwCVǟO4Jۗ|ՈҺ̉729;̉6}շE6[vJ`;q~`c`!fy95ÉlRRe\ tjBuws-ENljΟkiV+~κ#6má^Sⴹt|d~1} H`7({hθ QK{u2(/",ZY @;º3,<]N g!&TeT+# [ǰ@ 0y#R֥XԒuBL[Rɿ]G] .8*2yǘ? ^ ݿJMQͦ0'hM]@ߛT8ɍĶ:΂:AF%s W]{BhD#Oo+ Ue,miEG,M]HP|j-)/}4]sSh.u8rcLOsuY)2}x(o;GNzu)_'ft%Chw6]i0sy'Lf_FGQLI†! `r"jN ǨBs ̰rc%.|^Z6V&,R,qrj]56=ҷc*D%(=6=B%7yC'{2ob~~;OΝ'!S A9@齝R,skWzIG&{>((*OQ) x*r}z{ÿەiw/FF•7XGCWL)5ƭ- t4(wF#x@7N/UCoUt͖*ESb hI6Pch#mz Y #]:r(oxJ?#|??a:hoϧt^㕲2A978V%e$ @G;ء0GmX*%  ;q:*_mA绣@PtX;Uղ_>B yh0S ]:L 7'--Sʕ/=BhHI̗ѱLsWU@VPbgëQaj0hu5kÜ@EzDq:t`PiWFlg7#k+=TPݶ|_ XOX;L/a =ꇓ]ʫQ nƂ?uA]J!{YT[sK'X>Q`ۑhG;㎺7CV͊Y^EfatEٽ;TԄF6t`՛]u%tF[x|AM)\[q4 j@lUl,1fpXN/oĎ- `&qlO<Ξ 0RAn"{믇:Y|DfѼusrCfA݅@A>[\2DQRI{2$ ;kX]o ( * ۹ I{R އ98@ ?+}5TeDBΏg&ޞϜSm-FL]k|F4Ƅ