xen-devel-4.13.1_08-lp152.2.9.1 4>$  Ap_tf/=„E`֯ l:3^Gv1?}ld-#rTO}W83oV`[䣈A#/E=:m׳QVLXI bOU#—h$ =* 'y)'gupF2Qi.JG$Qn)#{\x.69qz>ʜ .Ė>PoLKo3 ޏxzaCt [Y>.857ef49160cde71f22c5e662ad45e8ffb308619bcbe76a84d57b87eb6b93cd6922b458a246f0a90378d818108dbdc154f284a3a6B̉_tf/=„2z2?@ 9MOv026{xZۇldp8d+zة~PecG bqWbp9(?d  " \ 8>H & p   , .1h477:;< =(=8=`9C\`:[O`GHDIXY\8]^0bucd«e°f³lµuv\Cxen-devel4.13.1_08lp152.2.9.1Xen Virtualization: Headers and libraries for developmentXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries and header files needed to create tools to control virtual machines. Authors: -------- Ian Pratt _tCgoat03RopenSUSE Leap 15.2openSUSEGPL-2.0-onlyhttp://bugs.opensuse.orgSystem/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxx86_64\?"ii !Q +@4==<'8 d!l:"|21:b?s 2D)y&6`'Dax2 $a ,Yif ?&*+6<)&n16X4&} m *jE-<IU' Ws0^`0XYF`:(ȆEBفA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤_t_t_t^½u_tE^½u^½u^½u^½u_tE_t^½u_t_tE_t^½u_t_tE^½u_t^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u_tE^½u^½u_tE^½u_t_tN_tN_tN_tN^½u_t^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u_t^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u_tF^½u^½u_t^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u_t^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u^½u_tE^½u_t ^½u^½u^½u^½u^½u^½u_t _t _tT_t_tb_t _tV_t_tS_t_tU_t_t_tS_t_tb_t _t_t_t_t_tw_t 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.hxenstore-compat/xs_lib.hlibxencall.so.1libxenctrl.so.4.13libxendevicemodel.so.1libxenevtchn.so.1libxenforeignmemory.so.1libxenfsimage.so.4.13libxengnttab.so.1libxenguest.so.4.13libxenlight.so.4.13libxenstat.so.4.13libxenstore.so.3.0libxentoolcore.so.1libxentoollog.so.1libxenvchan.so.4.13libxlutil.so.4.13rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.13.1_08-lp152.2.9.1.src.rpmpkgconfig(xencall)pkgconfig(xencontrol)pkgconfig(xendevicemodel)pkgconfig(xenevtchn)pkgconfig(xenforeignmemory)pkgconfig(xengnttab)pkgconfig(xenguest)pkgconfig(xenlight)pkgconfig(xenstat)pkgconfig(xenstore)pkgconfig(xentoolcore)pkgconfig(xentoollog)pkgconfig(xenvchan)pkgconfig(xlutil)xen-develxen-devel(x86-64)    /usr/bin/pkg-configlibuuid-develpkgconfig(xencall)pkgconfig(xencontrol)pkgconfig(xendevicemodel)pkgconfig(xenevtchn)pkgconfig(xenforeignmemory)pkgconfig(xengnttab)pkgconfig(xenguest)pkgconfig(xenlight)pkgconfig(xenstore)pkgconfig(xentoolcore)pkgconfig(xentoollog)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)xen-libs3.0.4-14.6.0-14.0-15.2-14.13.1_084.14.1_[f_X_Wr@_'@_{_^)@^^@^3^ϧ^x^@^@^^^{G^r @^j$@^g@^_@^Nt^K^=Q@^:@^0"@^@^@]]]N@]@]ʞ])]c@]@]@]@]]fl]fl]M`@]B@]/ ],j] ]@]@] ] ] #]]@\\ޢ@\ڭ\\@\@\@\,@\7\\N\@\\+@\\M\M\\\@\}@\k\X)@\J@\I\A\?\=@\9\73\4\$\l@[H[k@[@[^[^[ā@[@[@[9@[v[W[CN@[<[6@[0@[0@['[!@[5@Z@ZnZ@ZZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Zz@Zz@Zo Zk@ZV@ZS]@ZOhZ:PZ1@Z.s@Z&@ZOZOZ Z Z Z@Z@Z }ZC@ZYYYY|Y@Y{Y*@Y5YA@Y4YYYbYY@Y3Y@YJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"YY;@YYY@YtY.X@XQ@X@XۡXg@X@X@X@X @X@X@X@X@XXX@XXXwoXs{@XlXWXRXQ4@XEVX43@X.@X*X lX&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@WbWZWZWZWYZ@WV@WEWBW=W;W3W1@W1@W,@W(W(W(W(W(W#LWVbV(@V3VJVxV'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVA@V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUݪ@U@UnU4@UUK@UU@UU>U@Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UU@UUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@TJ?@T?@T=@ohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comCallum Farmer carnold@suse.comcarnold@suse.comJames Fehlig carnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comDominique Leuenberger carnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comMatej Cepl carnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comJim Fehlig ohering@suse.deMartin Liška ohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comJan Engelhardt Guillaume GARDET Guillaume GARDET Bernhard Wiedemann carnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deBernhard Wiedemann ohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comtrenn@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.dejfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.derbrown@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comjfehlig@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.commlatimer@suse.comcarnold@suse.comcyliu@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.derguenther@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comrguenther@suse.comcarnold@suse.commeissner@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.com- Escape some % chars in xen.spec, they have to appear verbatim- Enhance libxc.migrate_tracking.patch Print number of allocated pages on sending side, this is more accurate than p2m_size.- bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) xsa333.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) xsa334.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) xsa336.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) xsa337-1.patch xsa337-2.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) xsa338.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) xsa339.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) xsa340.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) xsa342.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) xsa343-1.patch xsa343-2.patch xsa343-3.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) xsa344-1.patch xsa344-2.patch - Upstream bug fixes (bsc#1027519) 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch- Upstream bug fixes (bsc#1027519) 5ef44e0d-x86-PMTMR-use-FADT-flags.patch 5ef6156a-x86-disallow-access-to-PT-MSRs.patch 5efcb354-x86-protect-CALL-JMP-straight-line-speculation.patch 5f046c18-evtchn-dont-ignore-error-in-get_free_port.patch (Replaces xsa317.patch) 5f046c48-x86-shadow-dirty-VRAM-inverted-conditional.patch (Replaces xsa319.patch) 5f046c64-EPT-set_middle_entry-adjustments.patch (Replaces xsa328-1.patch) 5f046c78-EPT-atomically-modify-ents-in-ept_next_level.patch (Replaces xsa328-2.patch) 5f046c9a-VT-d-improve-IOMMU-TLB-flush.patch (Replaces xsa321-1.patch) 5f046cb5-VT-d-prune-rename-cache-flush-funcs.patch (Replaces xsa321-2.patch) 5f046cca-x86-IOMMU-introduce-cache-sync-hook.patch (Replaces xsa321-3.patch) 5f046ce9-VT-d-sync_cache-misaligned-addresses.patch (Replaces xsa32141.patch) 5f046cfd-x86-introduce-alternative_2.patch (Replaces xsa321-5.patch) 5f046d1a-VT-d-optimize-CPU-cache-sync.patch (Replaces xsa321-6.patch) 5f046d2b-EPT-flush-cache-when-modifying-PTEs.patch (Replaces xsa321-7.patch) 5f046d5c-check-VCPUOP_register_vcpu_info-alignment.patch (Replaces xsa327.patch) 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached ignore-ip-command-script-errors.patch- Enhance libxc.migrate_tracking.patch After transfer of domU memory, the target host has to assemble the backend devices. Track the time prior xc_domain_unpause.- Add libxc.migrate_tracking.patch to track live migrations unconditionally in logfiles, especially in libvirt. This will track how long a domU was suspended during transit.- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect error handling in event channel port allocation xsa317.patch - bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code paths in x86 dirty VRAM tracking xsa319.patch - bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient cache write- back under VT-d xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch - bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic modification of live EPT PTE xsa328-1.patch xsa328-2.patch- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch) 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch) - Upstream bug fixes (bsc#1027519) 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch- Fixes for %_libexecdir changing to /usr/libexec- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) xsa320-1.patch xsa320-2.patch- Update to Xen 4.13.1 bug fix release (bsc#1027519) xen-4.13.1-testing-src.tar.bz2 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch - Drop patches contained in new tarball 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- spec: Remove invocation of autogen.sh - spec: Recommend qemu-ovmf-x86_64 to provide UEFI firmwares- bsc#1170968 - GCC 10: xen build fails on i586 gcc10-fixes.patch- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation handling in GNTTABOP_copy (XSA-318) 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- bsc#1168140 - VUL-0: CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch - bsc#1168142 - VUL-0: CVE-2020-11739: xen: XSA-314 - Missing memory barriers in read-write unlock paths 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch - bsc#1168143 - VUL-0: CVE-2020-11743: xen: XSA-316 - Bad error path in GNTTABOP_map_grant 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch - bsc#1167152 - L3: Xenstored Crashed during VM install Need Core analyzed 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch - Drop for upstream solution (bsc#1165206) 01-xen-credit2-avoid-vcpus-to.patch default-to-credit1-scheduler.patch - Upstream bug fixes (bsc#1027519) 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch- bsc#1167608 - unbound limit for max_event_channels domUs with many vcpus and/or resources fail to start libxl.max_event_channels.patch- bsc#1161480 - Fix xl shutdown for HVM without PV drivers add libxl.libxl__domain_pvcontrol.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 01-xen-credit2-avoid-vcpus-to.patch- bsc#1158414 - GCC 10: xen build fails gcc10-fixes.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 default-to-credit1-scheduler.patch- bsc#1160932 - VUL-0: xen: XSA-312 v1: arm: a CPU may speculate past the ERET instruction 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch - bsc#1164425 - x86: "spec-ctrl=no-xen" should also disable branch hardening 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch - Upstream bug fixes (bsc#1027519) 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch- bsc#1159755 - use fixed qemu-3.1 machine type for HVM This must be done in qemu to preserve PCI layout remove libxl.lock-qemu-machine-for-hvm.patch- jsc#SLE-10183 - script to calculate cpuid= mask add helper script from https://github.com/twizted/xen_maskcalc domUs may be migrated between different cpus from the same vendor if their visible cpuid value has incompatible feature bits masked.- jsc#SLE-10172, bsc#1055731 - handle degraded raid for xendomains add helper script and systemd service from https://github.com/luizluca/xen-tools-xendomains-wait-disk in new sub package xen-tools-xendomains-wait-disk See included README for usage instructions xendomains-wait-disks.LICENSE xendomains-wait-disks.README.md xendomains-wait-disks.sh- bsc#1159755 - use fixed qemu-3.1 machine type for HVM qemu4 introduced incompatible changes in pc-i440fx, which revealed a design bug in 'xenfv'. Live migration from domUs started with qemu versions prior qemu4 can not be received with qemu4+. libxl.lock-qemu-machine-for-hvm.patch- Upstream bug fixes (bsc#1027519) 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- bsc#1159320 - Xen logrotate file needs updated logrotate.conf- Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware- Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch- Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch- Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2- Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call)- Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch- bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch- bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch- Upstream bug fixes (bsc#1027519) 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch - Drop 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Preserve modified files which used to be marked as %config, rename file.rpmsave to file- Update to Xen 4.12.1 bug fix release (bsc#1027519) xen-4.12.1-testing-src.tar.bz2 - Drop patches contained in new tarball 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8f752c-x86-e820-build-with-gcc9.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Refreshed patches libxl.pvscsi.patch- bsc#1143563 - Speculative mitigation facilities report wrong status 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Update xen-dom0-modules.service (bsc#1137251) Map backend module names from pvops and xenlinux kernels to a module alias. This avoids errors from modprobe about unknown modules. Ignore a few xenlinux modules that lack aliases.- Gcc9 warnings seem to be cleared up with upstream fixes. Drop gcc9-ignore-warnings.patch- bsc#1138563 - L3: xenpvnetboot improperly ported to Python 3 fix-xenpvnetboot.patch- Move /etc/modprobe.d/xen_loop.conf to /lib/modprobe.d/xen_loop.conf- Remove /etc/xen/xenapiusers and /etc/pam.d/xen-api- Remove all upstream provided files in /etc/xen They are not required at runtime. The host admin is now responsible if he really needs anything in this subdirectory.- In our effort to make /etc fully admin controlled, move /etc/xen/scripts to libexec/xen/scripts with xen-tools.etc_pollution.patch- Move /etc/bash_completion.d/xl.sh to %{_datadir}/bash-completion/completions- bsc#1138294 - VUL-0: CVE-2019-17349: XSA-295: Unlimited Arm Atomics Operations 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Upstream bug fixes (bsc#1027519) 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch (Replaces xsa297-0a.patch) 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch (Replaces xsa297-0b.patch) 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch (Replaces xsa297-0c.patch) 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch (Replaces xsa297-0d.patch) 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch (Replaces xsa297-1.patch) 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch (Replaces xsa297-2.patch) 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch (Replaces xsa297-3.patch) 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch- Fix some outdated information in the readme README.SUSE- spec: xen-tools: require matching version of xen package bsc#1137471- Remove two stale patches xen.build-compare.man.patch xenpaging.doc.patch- Disable LTO (boo#1133296).- Remove arm32 from ExclusiveArch to fix build- bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4". CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 xsa297-0a.patch xsa297-0b.patch xsa297-0c.patch xsa297-0d.patch xsa297-1.patch xsa297-2.patch xsa297-3.patch - Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch- bsc#1131811 - [XEN] internal error: libxenlight failed to create new domain. This patch is a workaround for a systemd issue. See patch header for additional comments. xenstore-launch.patch- bsc#1125378 - [xen][pygrub] Can not restore sle11sp4 pv guest after upgrading host from sle11sp4 to sle15sp1 pygrub-python3-conversion.patch - Fix "TypeError: virDomainDefineXML() argument 2 must be str or None, not bytes" when converting VMs from using the xm/xend toolstack to the libxl/libvirt toolstack. (bsc#1123378) xen2libvirt.py- bsc#1124560 - Fully virtualized guests crash on boot 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch - bsc#1121391 - GCC 9: xen build fails 5c8f752c-x86-e820-build-with-gcc9.patch - Upstream bug fixes (bsc#1027519) 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch- Install pkgconfig files into libdir instead of datadir- Update to Xen 4.12.0 FCS release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 * HVM/PVH and PV only Hypervisor: The Xen 4.12 release separates the HVM/PVH and PV code paths in Xen and provides KCONFIG options to build a PV only or HVM/PVH only hypervisor. * QEMU Deprivilege (DM_RESTRICT): In Xen 4.12, this feature has been vastly improved. * Argo - Hypervisor-Mediated data eXchange: Argo is a new inter- domain communication mechanism. * Improvements to Virtual Machine Introspection: The VMI subsystem which allows detection of 0-day vulnerabilities has seen many functional and performance improvements. * Credit 2 Scheduler: The Credit2 scheduler is now the Xen Project default scheduler. * PVH Support: Grub2 boot support has been added to Xen and Grub2. * PVH Dom0: PVH Dom0 support has now been upgraded from experimental to tech preview. * The Xen 4.12 upgrade also includes improved IOMMU mapping code, which is designed to significantly improve the startup times of AMD EPYC based systems. * The upgrade also features Automatic Dom0 Sizing which allows the setting of Dom0 memory size as a percentage of host memory (e.g. 10%) or with an offset (e.g. 1G+10%).- bsc#1130485 - Please drop Requires on multipath-tools in xen-tools. Now using Recommends multipath-tools. xen.spec- Update to Xen 4.12.0 RC7 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC6 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1026236 - add Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs if their expected frequency does not match exactly the frequency of the receiving host xen.bug1026236.suse_vtsc_tolerance.patch- Update to Xen 4.12.0 RC5 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- jsc#SLE-3059 - Disable Xen auto-ballooning - Add CONFIG_DOM0_MEM to the spec file for managing dom0 memory. xen.spec - Disable autoballooning in xl.con xl-conf-disable-autoballoon.patch- Update gcc9-ignore-warnings.patch to fix build in SLE12- bsc#1126325 - fix crash in libxl in error path Setup of grant_tables and other variables may fail libxl.prepare-environment-for-domcreate_stream_done.patch- bsc#1127620 - Documentation for the xl configuration file allows for firmware=pvgrub64 but we don't ship pvgrub64. Create a link from grub.xen to pvgrub64 xen.spec- Update to Xen 4.12.0 RC4 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Tarball also contains additional post RC4 security fixes for Xen Security Advisories 287, 288, and 290 through 294.- Update to Xen 4.12.0 RC3 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC2 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1121391 - GCC 9: xen build fails gcc9-ignore-warnings.patch- bsc#1122563 - Virtualization/xen: Bug no Xen on boot, missing /proc/xen, after 4.11 -> 4.12 upgrade on X86_64/efi. Keep xen.efi in /usr/lib64/efi for booting older distros. xen.spec- fate#326960: Package grub2 as noarch. As part of the effort to have a unified bootloader across architectures, modify the xen.spec file to move the Xen efi files to /usr/share/efi/$(uname -m) from /usr/lib64/efi.- Update to Xen 4.12.0 RC1 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Drop 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch 5bdc31d5-VMX-fix-vmx_handle_eoi.patch gcc8-fix-array-warning-on-i586.patch gcc8-fix-format-warning-on-i586.patch gcc8-inlining-failed.patch xen.bug1079730.patch- bsc#1121960 - xen: sync with Factory xen.spec xen.changes- Replace old $RPM_* shell vars. - Run fdupes for all architectures, and not crossing subvolume boundaries.- Do not run %fdupes on aarch64 to avoid the hardlink-across-partition rpmlint error- Require qemu-seabios only on x86* as it is not available on non-x86 systems- Avoid creating dangling symlinks (bsc#1116524) This reverts the revert of tmp_build.patch- Update to Xen 4.11.1 bug fix release (bsc#1027519) xen-4.11.1-testing-src.tar.bz2 - 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch replaces xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch replaces xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch - Drop the following patches contained in the new tarball 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbe-ARM-disable-grant-table-v2.patch 5b72fbbe-oxenstored-eval-order.patch 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch xsa275-1.patch xsa275-2.patch xsa276-1.patch xsa276-2.patch xsa277.patch xsa279.patch xsa280-1.patch xsa280-2.patch- bsc#1116524 - Package xen-tools-4.11.0_09-2.1.x86_64 broken: Missing /bin/domu-xenstore. This was broken because "make package build reproducible" change. (boo#1047218, boo#1062303) This fix reverses the change to this patch. tmp_build.patch- bsc#1115040 - VUL-0: CVE-2018-19961 CVE-2018-19962: xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275) xsa275-1.patch xsa275-2.patch - bsc#1115043 - VUL-0: CVE-2018-19963: xen: resource accounting issues in x86 IOREQ server handling (XSA-276) xsa276-1.patch xsa276-2.patch - bsc#1115044 - VUL-0: CVE-2018-19964: xen: x86: incorrect error handling for guest p2m page removals (XSA-277) xsa277.patch - bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch - bsc#1115045 - VUL-0: xen: CVE-2018-19965: x86: DoS from attempting to use INVPCID with a non-canonical addresses (XSA-279) xsa279.patch - bsc#1115047 - VUL-0: CVE-2018-19966: xen: Fix for XSA-240 conflicts with shadow paging (XSA-280) xsa280-1.patch xsa280-2.patch - bsc#1114988 - VUL-0: CVE-2018-19967: xen: guest use of HLE constructs may lock up host (XSA-282) 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch - bsc#1108940 - L3: XEN SLE12-SP1 domU hang on SLE12-SP3 HV 5bdc31d5-VMX-fix-vmx_handle_eoi.patch - Upstream bug fixes (bsc#1027519) 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch- bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch- Use SMBIOS_REL_DATE instead of SMBIOS_DATE for reproducible binaries- make package build reproducible (boo#1047218, boo#1062303) * Set SMBIOS_REL_DATE * Update tmp_build.patch to use SHA instead of random build-id * Add reproducible.patch to use --no-insert-timestamp- Building with ncurses 6.1 will fail without xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - Building libxl acpi support on aarch64 with gcc 8.2 will fail without xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch- bsc#1106263 - L3: The affinity reporting via 'xl vcpu-list' is apparently broken 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch- bsc#1094508 - L3: Kernel oops in fs/dcache.c called by d_materialise_unique() 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch - bsc#1103279 - (CVE-2018-15470) VUL-0: CVE-2018-15470: xen: oxenstored does not apply quota-maxentity (XSA-272) 5b72fbbe-oxenstored-eval-order.patch - bsc#1103275 - (CVE-2018-15469) VUL-0: CVE-2018-15469: xen: Use of v2 grant tables may cause crash on ARM (XSA-268) 5b72fbbe-ARM-disable-grant-table-v2.patch - Upstream patches from Jan (bsc#1027519) 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch - Drop 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- bsc#1078292 - rpmbuild -ba SPECS/xen.spec with xen-4.9.1 failed xen.spec- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM (XSA-273) 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch - bsc#1103276 - VUL-0: CVE-2018-15468: xen: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (XSA-269) 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch - Upstream prereq patches for XSA-273 and other upstream fixes (bsc#1027519) 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- Upstream patches from Jan (bsc#1027519) 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch gcc8-fix-format-warning-on-i586.patch gcc8-fix-array-warning-on-i586.patch - Drop xen.fuzz-_FORTIFY_SOURCE.patch gcc8-fix-warning-on-i586.patch- Update to Xen 4.11.0 FCS (fate#325202, fate#325123) xen-4.11.0-testing-src.tar.bz2 disable-building-pv-shim.patch - Dropped patches 5a33a12f-domctl-improve-locking-during-domain-destruction.patch 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a9985bd-x86-invpcid-support.patch 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch 5af1daa9-3-x86-traps-use-IST-for-DB.patch 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch 5af97999-viridian-cpuid-leaf-40000003.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch 5b348874-x86-refine-checks-in-DB-handler.patch 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen_fix_build_with_acpica_20180427_and_new_packages.patch- Submit upstream patch libacpi: fixes for iasl >= 20180427 git commit 858dbaaeda33b05c1ac80aea0ba9a03924e09005 xen_fix_build_with_acpica_20180427_and_new_packages.patch This is needed for acpica package to get updated in our build service- Upstream patches from Jan (bsc#1027519) 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch) 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch) 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch) 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch) 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch) 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch) 5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch) 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-<>.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch- bsc#1098403 - fix regression introduced by changes for bsc#1079730 a PV domU without qcow2 and/or vfb has no qemu attached. Ignore QMP errors for PV domUs to handle PV domUs with and without an attached qemu-xen. xen.bug1079730.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1092543 - GCC 8: xen build fails gcc8-fix-warning-on-i586.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" (XSA-263) 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- Always call qemus xen-save-devices-state in suspend/resume to fix migration with qcow2 images (bsc#1079730) libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen.bug1079730.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- bsc#1092543 - GCC 8: xen build fails 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch gcc8-inlining-failed.patch- Update to Xen 4.10.1 bug fix release (bsc#1027519) xen-4.10.1-testing-src.tar.bz2 disable-building-pv-shim.patch - Drop the following patches contained in the new tarball 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch xsa258.patch xsa259.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Upstream patches from Jan (bsc#1027519) and fixes related to Page Table Isolation (XPTI). See also bsc#1074562 XSA-254 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop xsa252.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- Remove stale systemd presets code for 13.2 and older- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Replace hardcoded xen with Name tag when refering to subpkgs- Make sure tools and tools-domU require libs from the very same build- tools-domU: Add support for qemu guest agent. New files 80-xen-channel-setup.rules and xen-channel-setup.sh configure a xen-pv-channel for use by the guest agent FATE#324963- Remove outdated /etc/xen/README*- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with MSR emulation (XSA-253) 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch - bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch- Fix python3 deprecated atoi call (bsc#1067224) pygrub-python3-conversion.patch - Drop xenmon-python3-conversion.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 build-python3-conversion.patch bin-python3-conversion.patch- bsc#1070165 - xen crashes after aborted localhost migration 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch - bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb: libxl__devices_destroy failed 5a33a12f-domctl-improve-locking-during-domain-destruction.patch - Upstream patches from Jan (bsc#1027519) 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch- Update to Xen 4.10.0 FCS (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Rebuild initrd if xen-tools-domU is updated- Update to Xen 4.10.0-rc8 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- Adjust xenstore-run-in-studomain.patch to change the defaults in the code instead of changing the sysconfig template, to also cover the upgrade case- Update to Xen 4.10.0-rc6 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Since xen switched to Kconfig, building a debug hypervisor was done by default. Adjust make logic to build a non-debug hypervisor by default, and continue to provide one as xen-dbg.gz- fate#316614: set migration constraints from cmdline fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10- Document the suse-diskcache-disable-flush option in xl-disk-configuration(5) (bsc#879425,bsc#1067317)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to Xen 4.10.0-rc5 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - fate#323663 - Run Xenstore in stubdomain xenstore-run-in-studomain.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 pygrub-python3-conversion.patch xenmon-python3-conversion.patch migration-python3-conversion.patch xnloader.py xen2libvirt.py- Remove xendriverdomain.service (bsc#1065185) Driver domains must be configured manually with custom .service file- Update to Xen 4.10.0-rc3 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Adjust xen-dom0-modules.service to ignore errors (bsc#1065187)- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Update to Xen 4.10.0-rc2 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Update to Xen 4.10.0-rc1 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop patches included in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch gcc7-mini-os.patch- bsc#1061084 - VUL-0: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1056278 - VUL-0: xen: Missing NUMA node parameter verification (XSA-231) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch - bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232) 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch - bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup (XSA-233) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch - bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch - bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Unignore gcc-PIE the toolstack disables PIE for firmware builds as needed- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- bsc#1044974 - xen-tools require python-pam xen.spec- Clean up spec file errors and a few warnings. (bsc#1027519) - Removed conditional 'with_systemd' and some old deprecated 'sles_version' checks. xen.spec- Remove use of brctl utiltiy from supportconfig plugin FATE#323639- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- fate#323639 Move bridge-utils to legacy replace-obsolete-network-configuration-commands-in-s.patch- bsc#1052686 - VUL-0: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- Add a supportconfig plugin xen-supportconfig FATE#323661- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- fate#323662 Drop qemu-dm from xen-tools package The following tarball and patches have been removed qemu-xen-traditional-dir-remote.tar.bz2 VNC-Support-for-ExtendedKeyEvent-client-message.patch 0001-net-move-the-tap-buffer-into-TAPState.patch 0002-net-increase-tap-buffer-size.patch 0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch 0004-e1000-secrc-support.patch 0005-e1000-multi-buffer-packet-support.patch 0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch 0007-e1000-verify-we-have-buffers-upfront.patch 0008-e1000-check-buffer-availability.patch CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch CVE-2015-4037-qemut-smb-config-dir-name.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch blktap.patch cdrom-removable.patch xen-qemu-iscsi-fix.patch qemu-security-etch1.patch xen-disable-qemu-monitor.patch xen-hvm-default-bridge.patch qemu-ifup-set-mtu.patch ioemu-vnc-resize.patch capslock_enable.patch altgr_2.patch log-guest-console.patch bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch qemu-dm-segfault.patch bdrv_default_rwflag.patch kernel-boot-hvm.patch ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch ioemu-hvm-pv-support.patch pvdrv_emulation_control.patch ioemu-disable-scsi.patch ioemu-disable-emulated-ide-if-pv.patch xenpaging.qemu.flush-cache.patch ioemu-devicemodel-include.patch - Cleanup spec file and remove unused KMP patches kmp_filelist supported_module.patch xen_pvonhvm.xen_emul_unplug.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~1.24.13.01.31.11.31.24.13.04.13.04.13.03.0.31.01.04.13.04.13.04.13.1_08-lp152.2.9.14.13.1_08-lp152.2.9.1  _libxl_list.h_libxl_types.h_libxl_types_json.hlibxenvchan.hlibxl.hlibxl_event.hlibxl_json.hlibxl_utils.hlibxl_uuid.hlibxlutil.hxenCOPYINGarch-armarch-arm.hhvmsave.harch-x86cpufeatureset.hcpuid.hhvmsave.hstart_info.hpmu.hxen-mca.hxen-x86_32.hxen-x86_64.hxen.harch-x86_32.harch-x86_64.hargo.hcallback.hdevice_tree_defs.hdom0_ops.hdomctl.helfnote.herrno.hevent_channel.hfeatures.hforeignarm32.harm64.hx86_32.hx86_64.hgrant_table.hhvmdm_op.he820.hhvm_info_table.hhvm_op.hhvm_vcpu.hhvm_xs_strings.hioreq.hparams.hpvdrivers.hsave.hio9pfs.hblkif.hcameraif.hconsole.hdisplif.hfbif.hfsif.hkbdif.hlibxenvchan.hnetif.hpciif.hprotocols.hpvcalls.hring.hsndif.htpmif.husbif.hvscsiif.hxenbus.hxs_wire.hkexec.hmemory.hnmi.hphysdev.hplatform.hpmu.hsched.hsysevtchn.hgntalloc.hgntdev.hprivcmd.hxenbus_dev.hsysctl.htmem.htrace.hvcpu.hversion.hvm_event.hxen-compat.hxen.hxencomm.hxenoprof.hxsmflask_op.hxencall.hxenctrl.hxenctrl_compat.hxendevicemodel.hxenevtchn.hxenforeignmemory.hxenfsimage.hxenfsimage_grub.hxenfsimage_plugin.hxengnttab.hxenguest.hxenstat.hxenstore-compatxs.hxs_lib.hxenstore.hxenstore_lib.hxentoolcore.hxentoollog.hxs.hxs_lib.hlibxencall.alibxencall.solibxenctrl.alibxenctrl.solibxendevicemodel.alibxendevicemodel.solibxenevtchn.alibxenevtchn.solibxenforeignmemory.alibxenforeignmemory.solibxenfsimage.solibxengnttab.alibxengnttab.solibxenguest.alibxenguest.solibxenlight.alibxenlight.solibxenstat.alibxenstat.solibxenstore.alibxenstore.solibxentoolcore.alibxentoolcore.solibxentoollog.alibxentoollog.solibxenvchan.alibxenvchan.solibxlutil.alibxlutil.soxencall.pcxencontrol.pcxendevicemodel.pcxenevtchn.pcxenforeignmemory.pcxengnttab.pcxenguest.pcxenlight.pcxenstat.pcxenstore.pcxentoolcore.pcxentoollog.pcxenvchan.pcxlutil.pc/usr/include//usr/include/xen//usr/include/xen/arch-arm//usr/include/xen/arch-arm/hvm//usr/include/xen/arch-x86//usr/include/xen/arch-x86/hvm//usr/include/xen/foreign//usr/include/xen/hvm//usr/include/xen/io//usr/include/xen/sys//usr/include/xen/xsm//usr/include/xenstore-compat//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:14321/openSUSE_Leap_15.2_Update/1966dea775060e09384a8deef7d7a629-xen.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxC source, ASCII textASCII textdirectoryC source, UTF-8 Unicode textcurrent ar archivepkgconfig fileutf-8f283619d4188a44c460ee84c9e755536329a52aae6e12a835cb1f36ae86eab8b?p7zXZ !t/] crv(vX0- /-ygu$%:y /ot@)l5Q pȯ,Ȳ^mg D/(+Cjh ^;m+2L=!v1E&y+-Fzٶd>Rn3< 7>5JhX֏Rqaz@7f@~Y#da<=G>ͷ]~bU1U2GrO2CEA"n@%`=IpX|FMF><h q)FfmTHk(x4v&0fz;һ_Zkc˷1ҭ/؏` s3j!%px^^]E%)ATr-Fsʏ*B h5@N3@i8qżb0wҴ돜z̑G:_ EZ)Exb&)i\Au `w̻m7Lw7 -B9VmdS(ߴ-ӝ8aUJ#X栓Ɇ)-js@N Du!xEikl&WNG^hrvut)WM}MZ:'͙:դ@׳vH&mJ8}wͪ-}Zs}y2vmJaedMI Jtn8p#iTJW:=xn W3g<.f5I4!=i ,{$M)ynm!!C-㒠ʂB`y_id&`ʍ@ |"iIi 8O%X_ ڀ_hs̥:Z(_v N_::M0GjKBb-cgb##նU>S"בo1)9s'$h< dA'J zW،tD{eMBnn`8a ̦D[i}&v袪)MD4kMLe/||·pE>R&1DS3A=FrSs,z]B#:>8m9 >*wJ!^n_11y܀6uWڪLmʙ2dCw$-y,a9,PMi_4Ba=hn2k+.=nu۞_C\⾕_damڱ mYP{C 01!^;iDS8o=7.Xm^:gcǸ-h&De7y oQZܡJhNR, }FFxɟDz8UV'tl'8;Fd.vZp; atF_\Λhg=c[v~btq[y migT)=/ 7Ig_:)3SXd3+U~\N[;fF"i'%y&@o]k o1)< RYŗ@7+FJlA[/9hi!+?4$JPUIP/ga= rA(PbP9wĎ\n3eB#9B>nsܪ DAl$X=-bb;0[csnfEb8伤)-~գ@Q>F=8arS^˒!z:UB bw.50|rEz]7QDfʷJ 8A>M bޗmPk͆}E/lGՙg"h\o?arRPCʆIno)#Т8~3s6ܾd)UgT? _OhIKzzfsW]Ա$YV:]VGޤk6$iy ;֖$%o F[Vюo8" c=D'x}TnH? zM7.i9uP/ [)9̎ȈK=Pbp[ \-,F#ȶ#l XF)c  2DڌFbj-$⺈ex\*8D C`lu!O9@gBrbFU1V: r b65+}jlsMB&"9AV :i0@x_~~L⽥j,$řsɐ"g^%蒤L72 2F&d!h}Nւ֏O?9)ayxgCaLLjYDHi | I|%ylߟE8d"u3jFW㝘_d/yUK#S2*#F<93qFXꏝ)wyx,qBDY-&|2ݲi71ӥ-h2#н @[kVwǐåH`NFM>oX'OCUD@MT&]ms50c;5Tcjϖ\lG9@=ݏ[5AQ=|*:S)bwpdܤd\ yV@4Y9V*ӖtCլlذ mPW#tABhk^;aŕJEΪ#g%mj[M'%N) )= F3(e@}!pt5N{1gt:!{$S꡸`skUb75O>> 9 o]k0RrXÖ =\\Dפo_"R;\TS B(e{a]6mq XW~#nvq`2Ā;i )Hk / tw~,xm1v"N)7%F6hUiݷ9`G&ejϣUtvr\Gn@4D/?͹iFo+axX}fBGkse lxf>AxnLM sJw@s{\kd]??Yq|t yRZ;dl?\~cj:ҥBGz v Rz>q(O*ZaBtܘã/FՋkӪzq 0y!芁y ږ1`4##5˹/ɉN€̌I:I3urnx z!{tʺD ygbNb+M|9xfl7$@!j6o&mgjv}mcwUWC9AK/֬ݺp KܟKF1,n(QHlG0WOa-xndҩ| $,޲tSLJ{tPb@كrYFȜ8nɫWDa\u9yg(c)SPq(m3IȬi(.Tb7͔GFyq {/F/OF"D[$O|{MEK]JIxh1}GǠh,ق j8NWNc5?N4uw84g]8, /V;!&/eľaF!sG F}#G]t%K4ml2 t ^E[{\vʅ`anVk OKehؑ0ɤ֠N[`2?eDF3)f(w O ~t|v\ : 孔T5Wxk_dC;~6O4+!WN"36(K&*OQ=,VDELNЀ8(OrZ%RB?ݦBa~U";QKiؿi8~rٔcU0?I-^&9aІo="Z;zb&z %^dhUPZҘ?OBbP`%;p%\'Cjbx\g%VH;`Sٕt U=VL}RMQ,i4#S9uHg%P'6V}?F:ld9)( RœmnK?F_xlaxqXA7bZ4NI(䑊p( \6Oĝq<_;>A( #XK:2܂E$I1DeWM6|@LÉaOV% rЉIs1ވFx*7+Ѯ Xwɴq!Y' p1)[ DG32]lͤ6aRCgIfќOw2> &1ܪ{UǛBL7yY]ڻRn0ZX6m ʓG 5&BhY{;5n)>TTN1QҒ‘=!8u}BʲlPj|2{ “dW>Ab=ǖ(&JƢ5WA!hE]հN?g|TG3%! Hߘ 77kVJVѳE}r+a*} 5ViE1 ã|Q :,46ŕW'Fxtzіi@#$wQ \ד)108F]~16oT< ޭAD 9FfQOA'C*2:ETG+VS+Ek}0E+TC zCc}*N=3w7V^J?FiDtLb2_64<+&)>"]}l5Vb]"(1{8h|hWZB f/z_knIbc#þ;bti~1_ m>XHM]g3*'Y%]Tֿ&zx[g0gj}ڰas'gJ?z P=^ #%9zqf},OOxyg^>kr2~!M5)s6tπؚQLf)%XujcnL_[v055C2\bןDu_M)iܓ]&f m Z{idb7vJz`0m8~H 0OA8p qd(._aRsrXxoHыJ~sM{Mb3YI2lݰI'tHZ~۽`8C+5ǩq(2sSdnɡtiz$%:mLjWtM2(Ƶ<:=)0 !ήTdGսj:%ax6c2C9*MfIxMoMR9D%aLQV`z}Ŋc /ף1>g՝BπxMJ]I2멾)bu3& un հx ?‚d+1V/q2?] */auaf s+ym`GU4-;K0&uҸ- p( bEIUMW)D[ |t_u@3+rrI ;š{툢xR_-6H'Gjo I%eF7u+Fy,*}dZN?-oʀؕ ed_ 5Gh6MԚXjēk@??:̒R[ӨAlyH̸X$ysJ 3gjHŀM y"|may56^@KLƚDԮmK2,ӄfӎG otyܹ< ϼGzrO֑o>e^?KRg,4Ae*] #P3)'h#˻@V=ChI"GP=V Sxeo" ݞýaX~oLHMG}]x8u6UZ&m*P7* {fj%eK.%Y`? Ab@abJI0@ _1?g[l.s2?>3)0jZ1vu՟yq"5"b| |a^=e3,~aH5XwRVJR`>d&oX >[uT>M\ ўY@#o`ѭ;DCKFG;ÐJ`m86e5'Zl#N2`_hle3 pva{sks7.Pa.=k*a(6wd0OPpALd{ tqW ؇e+=5\< 5pGC/lƏHrbX72UƑ!qҫCً>w޿+ĠHF"12;:d4\`" Dݸ \J* I\[9GN#oLҎ.4GןQ>r{Dzq.3 t*w 5toh D#.wG)SmIbTa= G-MĄ`vٴie<";=t'|X/a}HXmv7ݼޤh~9cH/#k]cBa,c;ɹW!@giLyl+ gT}[H(x1^Dȡ! S%~]mi)&ï;qY fJyfJm tN=4>EVqk  "v3Ήh}G: ?"n0dUyV$$};}Q~6xdPaL:c?N?KHB"#-3l MMhwh~vCҽ5>$ނ\Y{2m|}rzbVȹ AI@EYnSDJGawhF<+{ԐHR#<r~wϓ\qz;թ aCQpE%/%ndy?oH gGvכButt$&߇[:H'EN@-m1XTΩ-2&z˫x"ݔӱKl{lD}/2)pd(X,BGB>ji^ZW#ktY-uQR2_PNWFaZ%iZ!4 b o{ե.=25y|qlk5V|jcRnf::|b6Їe(hqz4+K"J{f@]q˦iO3~搘k:5Dg{ȕ<"͑@Yz>9_]([1iGoӕ !m(~jԒg.⛸OTh0a~Q;lE9ԀiodPPN4t2)@tUȐHKZ- +? mj?2X5NZz͟C{qGmo5*tGkjtQuBu9B@azi İ՜Xkߓ>4zH/cZ뛧Ar H jKٙb9_y[92mBy tfH,7?16nێJL ;u ?OK6QJ̥tV^ `hd4`D#9 æ'B(|dqYB+]"hﺾ#5l4&B~] B]}AlK|S8%l^NmQ--]baf.TGH@7ܝHmZ %8b@}Lj PG?[$X݉ tqZ\ YǸ+.+)x5d/ o]6ʋ-GR&R|m}{(ݡPH+.pāτD?8]mCYFG u!Bvg̵z!{hx?OPY ~ ?*rq\r#ή vë+^޾$E ϿZ A6MjNIo~*ό"2%^Etk9\(oe)X ?j+`3914g \=6츍V|deq '\9<>ȳ[ 6r\mfu>-s> `ؓCXCAzz]KB[hmHVyS {E <3.56fGӓbR4R3mҵ# AB); OwACZ[JS[irN/3 "WU=_ ȘxhoϰNAbkWuc lAhA"2)ǿj*F(\P3 5Jjs0D3p/k3X>$щ؉)%1i==?$p I苛JpgaSֶ q-P'5Y !J^X V1ҞϪ 3~9FWok 7On\+ b<ەfCH쐺(F Ntqq_^2T%Zl(cT.ijsWtyX$(,nz%I~?v/w54LN9+^?ЧBؤ1 m!\2S$j$tPS?ɁM}z@ip+"ycv^\[vD,*y[ Am_ǜ4 'm '}Ykm9JxQ)K'F*e`y`f͆`rQ;l ,T{0/.M=?/a۞ƣ\,~\k7(53{ϰb ΖB"bE]]#!{qF_iUToMXoBAL nQH88"x0TaI|(]B=;1+IӫɍF7G׮hG)*Su}I_v.wq9~\?v7;~ubU#!Mcse(Sû,qLIě]qYYԝJz=Rv*IzoċkۣWa?v*r ]`͆@{rZ0/9iNEPfLʽvDk\72YzX doC@3igevpܧfݲI,R!VpE雱|_4ÎzSo &Gt0m=59kVVGLյ*G g VmI^!B4RDE-畚b<@5Ǘ8ЗƨC?!;}GpOZt˿ i%Xs~?L_2L=!{hL$e/uZA%SV1ם,58d-ҁGme+1Ll!n=gj4K9WQ2 npȠVﲢ. pa7? !{]VWkf\?ЊTSQHwf˒d_߳S8&"u +c 6cyq+ȉ5'a݂pvfAֻ֯p(L|{"єBr'(]ISAMK.73)8T{Q:Ft4$J(s9 -vpp5%},?;Hn GSa_ʻ. 27bȞ~)AK+0{8S_EIKmp.(;W@WPo_w#(bCV9>觪z=BYg-R'n͑eW\ gξC,9hcL,yso;GbjaShoC*s8ܐATɄ2{Lw%FUBfQ ~flfzl~=NͰGȽ' Ϫ:Ҳ@b&ёk"d \z#y$(` 5pxq ʐ)gVX|"@9BkoΎiv2hDD/:9%&\˧oD Sz$]\&՞ Uƃ > @+gE$&oޔ1O~6\OyS뭧*^KK%V3i-=&]1FA7W{R č`MńAbAJOK]X ?4?]4T \ h1jQ&Һu2`tIؓq˴#Bm{iM&610FW) ޚ_QZ^$I#+RUpl&(g[6lS3˵1~3gǷcU*A-Trzۓe[^)Ie `O28iQoF\Bό8" YHrM߮'Wձ4w04H$yVqH<3DP/.LR0ޓF@ftޕ]nOD23+#Po%j*`MT O>9n(D>$Zl/Щ~?#xQkVؿĂ>%ڻX* Lh4Ys,QUh ;R)8N|jpgB%Du@dNo{DοRS%dVhfƯ87- ^-7E«N@%wx`T>J>B.f|a(΀CbٰV"<Ěy[.B@pKTqм#GNՕe!Ĭ}x3  #iN w :K~}F9-#\5rR-ei0YU-C8c |:~x30xO=]Gj@Xu0IIFI:T_LJB>[=*a di僓R*,o?99刎Ya,cw6o+4^|FU939}# 4I…](a"iD;YR斗w+[k3/WX.z?-jV kﶇXqaH߶ΉN֘sgj(@ `E\Yf?6 ]J{]PE|#ZzY4n#'H+of> ~b:] ď c2r{͖r]ikRފJZ[O}z,< EGW: ҅tdW%]!qW)7C()Mge% < 22<3w'%xO 9̠t-].˺Rz1h+}Ҙcԙh_{OYi 8P~JTYCHwBHKd!NsϜH׋ QnV`7"4p84ze9 J37ʗ܇%e)/-fnv%e𛦲qO,C؍ac@\^RYBf'%U}収0ag QƠeʮ7K+-]ߊK^FU)ÿsXձ{DgZ#i[ mu4q ZCfF85MzZr[ jʥ%V2?)_/ǜ0g[N(nhJC;j\LNhP~Y L/޸ :p^>PramxqJP*C9hv}Y2FEa\;@/We(ɰpSwaf#%N=?O0HתC/K#o{kیrPL~;_%H맷Dچ.7Cri塈`{r62Uln¨X\`(P(~`ܤqGWi.䏝JATyfEQL&DAw\ROP(F NC6 L|g 7ch7gX%V*\nH;qm",Z\^r%j:8f~-/ k;5$I\1G/X(?јۋe,U369۰Z>o64 {9WSfǡxh;ƍ+R9N2"$9G$,Ib'x/&zyR4S N Aޙσ? \Qx`oX4VuDkq)v>iLiv {6If18~H-J E]~d01'W {+ٶ@)I)V+&m3ǽG; R PҁlUV=XAoZϽ엺ơIQNW6e:ys#:㴾1tǻ9gΔٻ:=1zUUCZܻ dF Z$!mx7l2TsRJZt_W'&~_Ռ\1=0/Fҁn%kp#zѰl."r|01lUw,?.(B##S5oKQbTO~o7K:ZqPwDO<x%gg=;?}{c$AE,yLf*#L̊ WcO"A*Dkwj"Ha<'exPT\6@E~bl(Q[_)ӵO,M/EjiO Y=%n"{4N6FnxwssY]X<axna՘,jqTƋմC8v@ƉP**]R!~*׻U?Sq8ZI*tcY~G)G%*-{S÷zOkbwE }M|Q@0qI9ovk}涺g0ک )L:B?٫A񗌡> xv_$Gæ^*-9IDM34pO>#OQ%6LgF? ]mm7tZt IH^9Ft&*m:vf;CT\ó'˽嵖,S*]C6gn .C_cHP+ƥ&pj V.m5bmw7(S٭vd=q!WǷXe!{+Rn+E$P,T$1lmZ)coGRFj- `ǰK˗bӗYκ2ZMh|2pI'&pxn˼_  pI2$s֊)S7V9*qK{Fx |!LA}/.v'embQ!EՔ#S(^[߷CK^uTz佝R7)5H\r +F|gٺxWQuh 'd fhgDXTRM `mIʱ-<&׫&r<'^9`r_,;?si6$fBij7OD닡*ʅ|{/ FE"Y}r9<&Nr!Hj[N+3mZA~@Wo.RCSh*q-BWEE2U16XYUyfP@78p'{זZ }+I${U^ģBwfd/3pj_Ԟ[bŒf7ӫOMcNwsvOp X\jtf߀&4srp4քM@UP0-$}*߷0@_ʴfoVP+}|Oٱ<*gl;%2 ǩ"Z%zy̘Ysc#-X'~Gczb/>.sBv%A1SV!9[f5:=O.`b8[,kwȭb9,% bHz ځ bB9`-W)3b| }ZΚ#>y9"\ RX<$Ὑ2˞TCM^`Pd F1'6SEtTy1DY0۔[3$ި)6S(3~CY'\z]\IV&a*[TS1eNQ+}(nI*R\uf4a^ 5P^L 1 Qf`|0m"Gܖѭ6Q"貍 KQYMd(`BU'!n\9m{3AR@͐zIXQ/yf?:3DiaJGQ[Q=dm3L RxRεabL±+`d - O'`=T[ TJVy4׮HEY|kNc'(d~C5 yzt^֋z5 "Yx!TV5Tu8?FAbv>evܩ 3Vd+a^5fgmnuFxX!.FDz"nҶǃfV&w5+^%4ᧄ8#gxNcr˷w> MLG4ViC xks`p"\ ם$t~zrw|桺IS[&|$dכߴ[X=5w<@'e ?GS#ExNP[ZnGN㮪Se6Q̔w-G~fQW|)S>3}H:hrEj+Jb@'+ HGuD[T@E] o@EZp 86ۗAM݋g6x /DE{LDz'~ T c)z[$ۙ!%4|kj9:XO=3sl@V\;Yz KVt#2:,,>y9`+\1j`e Ű$/҆XnQJ84 ECx^晅QlAZr j:.qXjx|}1] Gt^H|re&>\BMvV䆣"6D:H(-"R pVO|od~,È̾mwOvF٦nۨqFpc@rS$CdƵ{y87"e&m׶'ohʂ|%r$a=e%7 %e,t8EV*{ UcO"sΖiZ'\t[Gަu>Q>dHn桑i؇$B%;;0]r!r5jx.vTأbq;W@dlY21 lف 钂nhK+t!K=<3h&-fSQx>3(| :Ix(y sU1N_8~:]UMgtnD^oJv?QqShǚ@"a p/qG C!Yc6HD >2>ƪ-_)|? {ӎ wq<(\α$(8] MyOWbFA emOIl>0 T$p(ԌuD;oܱiqw؏[k!XFePxH܍rE6bkwJV "k:/$}@OUHx)WLrn%.6͎"sf% 6ue]>t*2q32'z ,NNrۜl5C4tZ(>z9Լ83;E،G"hnqfڦ=JxfKm'^|\p^K6JVd6i{2Qt^Iq]Ϯ^,v5yTm/|2l6d*ƆKJ6 ñ>&Os(#~s"l]$2连KM ="l?'*U~};'DL;~7ro#F8{="K  xčjLr#{:)dc&3D<ג Jh.L&5up%T?,(yM`&/fx?~h`wo/ (1{9CytARXBÃU,mhE:FP9n#OUF-sT<_ێK}W֠&GO :Rۆ ÙCs;qu?K|PaQ5kA0i6(+"+^/i2JuW`c7*|56dG*Òf1)~␥l$HR7„D~(yd]x8^[ }WhZ*G<`kEH!*!KCD~ ehQ-k TMx.v_0JS+dPc녆g-3 ]7"cOq*labQbE`1Q9_ jО @3~8ÜX-iQVPqk8-V3cq΃A9P#@y`"ɌBX%*+p7D"t\Ҁᤨo#$;{-~FrZrDͪ:(MarNȪ,H4 lKbb0h&kUO >?)%j\eQpr^C7<~ab.0/fՐ/o Z~ZV8tȣx.")* Ӎ 2P槙rNWxl^y-kK"̤F2}\Ƚ%Stś %?G7+^e Jܾ<˲}<.['X.CK03 VH FfJe?:1䟀(wpjL'Ne yi91g3"D!mk/豢πAT76bVHW t`̨I~"crkA%!-*3bxocWNݲ$bAHkנ&pfnhMD Ҍ_Dt\fVNpgfc·p13gcZSO %BDž|wYO$i?)ro ($n.0R).4P`mgɇss1^?q$@`}AYnf/Ox%ժƹlFS!%'6AQ)Eb gj)SvYy*i̒?ŀ:vFvp;eӉOlI W Eaof"&֠^,FRf?ͮG鿾"$R 2K-pXhjXz3D] s4 8pC%d!NֳTMo(_n#x||B8"*8ugL/A~\ӛQ돆_dg>ւH.AV76*般U`/FVJ~]oty%hdо)j;| M nJK#j_٧jnv Wv\zcl,W^"3$^XqCMn?\ga=M#0N#FqsݬgnyФoLQ\'R_zikko. -ŽEm ;?Ke5ΏRww)!A`X-h]в1'U"`IRƻq*0)T&N$2q^.' ֎"Q8 Nu̗(N3@>&Sˋy FBrixCٿI #!>yRfH ۥ NJfCirD&3i.:3&85U]B#ftEf㲢*_2u*4i1ɧJXgQna4Kבu2?C Ax3ҎPm5fڙL$2U}JlN*qs}U ٠(+!ӅKt9TreعkI_bf\jkem`, ݄D)7U?6J{tYȉ̘ALtj 3IYU%+q R bhL;SwC dʸvZ6wj}-)%NYԀ3HsO}q "y*Ez@7A}wK?Z_,%'kZ,8K|#5 )GXzFtL.F<ܟ<E^ N\si4od]'e2[0ANf̛&|6M)F|u"W;;[?CvR=_Tt\?]ยpEA2=~{vص.ےC<[23d"+R|eIsCho%)蕣hh"[Y8k| 8`1?[wUPN:Dg -=G_0'$fa7UʷRB*9g0C[ ᵴkL,k@ NRn8&Czzj~I8{ YHD V~ )K>:tC4nxL,g>c "w^Q2d۝bdp_}$o(_dTb5]fp.RtBC\htn "-M۝~al8#3dK4ߪAL"&AU;oSG I<*AƋ@k=kotCϳW+g:'VӖWLpHTAT QSǃL*:B__8)zmOkɀUCپCS(;REד]Grg-玘SgLk 70P1`t;DpK7h5ۛPTf1c~#$od%,u KFQ%sڂrdnXa%p$}6$"y=ϼuf ݔ~4keqy5PcC,0њ,Cn| Y7q! ?FHrCUi8]#S>Kan;:nEڅ*0@&UnT.S|b30 Hg[\UI[t lkhUT٬PoJ'$2ҕŠ'r0C T̅/R4X}w&A.^,"em-{nm΂; -Bm{Da诌ǟ0SP^W;;[S.BKݽ4Y5P-8ALBVLO1Jh`%l0gGCȈVC'pEla@gh#>$kEXl-8̀,@_׏r_V);e,|f0~T&d_\I`Ԇ%Zl >8“C}wh2:}zaHゞ߳0vy_+5y)B&IT?>NXm'E5!Á`p ZEZ1@qfQwH 1'Ih&KO GVfϸ<ʠk$$]۫!`"Ҧ#B)_irݱ}[!IvHI(ي :K~$M!wҫa @OjSO\ȪqTXt^1"4n!<@C(3OXt5hOPMnl }HoReMpk!~[NV6Z3#QBxyM4(wN5g 0og?BTXT͇ Ρ^}(A%郬Cd{m$R4T9NPZx2Zk6 3 .r}D/t9njnEXeL9/P{QF<-MӌOkJ.) it9RʃF A'{VYjVKA *tYU9?ʺh8rqf vA$Fv-zcF~3(pQ-(aUj&ϹMeL:rp;XD[حLkH^틴 ޹ 1Ұ8]s6y+ϫ"pFD  'sSG<M`Szڟz8fNAapy2h<&DgWb'"fQm0ĊBg/I .!-H+ճWK4h`QJ8W-Ӱח&Rs@z檼{;Ώlȵr\@:G3ҙEʽr7z/a7I̩,IXaOꖻUؐmF,~z|ߍ2@ 2M!OIσN@zX\͎mĒ6/ ^Ix;x-MfeVrQkO+S7?2oSivpH-yz wQdYtlsͅB[sHZq;ݠ&c ^--536AˀL|NېOC0q|WcU nM62bk—9?1*l`a3 &*,7u lϫUV _K*# ^ ,{lSMƹR>IC1Nc7_6$,r—QuG|3y65ƥDY=>l't 6l|#DMId^~@d}=F{PGx I܎4\hɉ2Q׏%z=X"4A:{fyVz(+ty)piME܃_t RtgBj0Ř,mx>̧zM9 `pDy#Q澂Cupnn:ix:5Np9ɧSI6ZӉ&0vwU\9Nѩ5(q-F\@,WG`GX+su{_N#ttw@(BA@oT"AKE.D}9`/rkm*|n:R7(Vt<]$#gZxBj6憂 TN& kͨʈ3$KlL5n@:\!C1FhΧEeד!6^i; c#W"GI&K 8 r7WR ;n u</Okb2l!- BLD+Ox*̆orɫEGT`Gl]" b|Gtq8̳lkkDF=L,iRr2QSiB=:rێ_ԥu:K)ޛ? DՈ\Ol5xi32 9)@ЙXj=`zh0=_̆±U+sduԽO O ^`.Oy6q#[?m?߫9Sɓ)炶pVUuH_묢u=Mv"Y֮'lLA^UY<bHWOxL}:+@+b1v)J'q:BPN3t_vpq'׃7** W3ll3AASk' D k LXP &%_xxO9i7Ț| Aeh'^=αWOws@OQ􌯯]rXPN$)uAehjqa2>euXm\wT`$kΦ'%df>h%!ɬ_y,F8eV1}_ !qZĩ+6)Y痓?aۉ=ԁ+[2vO&̔ 2) éS-"7WCrM ӽ5d`,̕ r{bkS |T.]})2jxw8NuN7fV:Й+?Ӂ` U X)5"&;_T h΍!5}l넲ӳ'*,fZ0ϫ]aX9 Kbw%!mn)U=Y(rns7+seo_SUjۙiWV^~RYsWQn, ͭ쭼C<:MIS4:Lt~ yfn+dp:!u1y3m~ob!I-#{I(֭5Jώ6 ylo,/nkV?ЁҙA"DhLP{Ev#Հb)ttp予itVBփܫ e9GYwӶ_ L[ -.- mqT(ǠW3aOM w{hocdN31\CtA).wyn\h}\ܹ(/XOPiOJ 3aFV<^rR285qwiț8:GQLxjfg]m.ӡ}$cb'F'M#(z(40ZadiD 17NC`ʡ> qq&qoeswl&Q)_o|7\O!&q27!N'rkQ?RHDq- 'Gѿݎ'PB_=ruKR̭BVlaTnO67vXq tQ'H8V!RFή{\YHsƑ~:.Q(2.2nKЪ[ds3w>TO >J, {oLCM~Dy;`AEDЉ#[2sIOc-)lGNu|oGp&r;7+/&t,!4l/)7zC@w6PBݨ(6 SRj,>m S^0)2ɑ`*F_eAh["[3*GmprRH%-CR@R9CR*gܞ049sÎT!$bKR]TfHLM÷Τ 8trN"VhMZKnlQZ0l~B]k=` 3w3?_,ъM 1$2rQ~Fh_O̘܂z}JPm nMUDwݮCx)LB5w [o1b F>_]: Y_ Ǡ~q]cЄ}fIG|7/ŨakR%5yJ5 J9UځX]^Ut\X3u,QGԈC(q\<oY]g %яw53!nW-Ox YE;_#$}9b '%J!HLcOL{f~}n {x!zrֿQWЫZ/AYhS"\DlʤP)$`@"_qENj;&}/CBojD!@Q1aCI[>ڔ;I lR(U:xȤln m(\ fK >*$yWuzS:%U:KDL~zE<5y5 +ש_k 1aCM팄nqk1Ug7~xJ'~~ڭHSlqQ咭;0 u2ҟoV8/T[)nx1)4bwȄHĿ5ʹ{4,#g򧁆;gok"(WӝQ íC@nNJ]A2[mxk ʂy{BݨwbƊb wsXP cC+e@?̊cNcxD'EbBR'Ȉ[CUᴖԪ[u &ٓWPQ>=x"{+sؿ.4Yy!}aKRm}F5E/1L5=n1!> N׾j˄(0^IdW^3*ȩԥ1^Nϟfa?]w2$Qjbzk!vwaD=S৻\F|M XŒ(~+?Vȹ+=Q`i2%)KFL: }U`{هuaKw*-P n-E%@܇cyVUR<{}&vǓ #ljzXZxj=qq޼Ad=FK15h{_Mne6)dJ*לw,M:J[Cqu d /+?X&cW1|2h^wr[pZi`6nA@Krl(ǬA8\\}p\f1L}1Y[y)W=vE¹>?9 獹3$w` HYÀR阖ԀiimF} DBޜ <kϺWtxd)B H ch71ڭ. k yS @ uT' &y :k%M%\`LvK^++RlOwUp%H_BtxPM]%nv (! {^9+_Jixfkv,YN_?S=LūK;V\N+qy/?[+Pj򯟃ꠑNݮw|H@`:/p{cT'<|s- ~w^~: A:{ٰ[I/b_pU ًm:4 lm`c@tγͳotyhĮࡿ')9HB6츈ntDEUKszhdL|j;\1x pEmahiϠ ?0q<qN@Wkrk^YN\tydBiIPF W ch5ǧ1*N 2e>:4ׇnf 7P:ArnY@ĺʠyI'm)Z#?lS%h\ hg9NևL2p<={”j.`&%yvMɿ -<̠6ޘ^/esyei\ 30&LC}ǁ@RI6up/+$}ؚ.O"]uF*v"0L)K\=4:[.;D2/M\3ϒ9boѐ)bG,Sllk$jstVa-;0()!g'Qr3u`-۰էB! GЯ_T>cW1%q`/ƦY}p`Չ 60  Ka)A8Bԇ v53ki,ߜ ?9e#V8" E nq D"H}qsX~\η$ 4hJ賫BV|vw`#oMZ>]v&Qo?yeI> A2ɉ:槢#B}DZJ^-2ZhqQ}t? @qm^wR!^BЇ>[5- JؑCW:!ȺagL|Uv_ڪU)Hݑ}룊^oydt|=ͳd78/\%LyhY˛}r 2pkU_\{"a QoUnAm'47<_9҅ { PAVS~9'eHB'.p8b SS_Hr#FgȚ4̀C:0b_l#2bx6to`[fiy]#ԃ6g.',F"'Jlaޤ;:| a0bP%5k(uQTm>KeN}t(j]VxiGS"J*A8ЂeQ0" ՜.=FsFf>+FO߻d6Y+9ӯ^Ͽ ?K}F5\}kr7D'_лh| F]6nD!?cZV-O-< w8[TyBMꎇ&qٹECJ6.Q$S~v/ j9X*i>U'Ga.,Nۯ1 ֪ W/G+=X]ͧ[M|"W%Nt.f߁VrCLpCvKXyN*6q,sZw8:֛`/vVy+M WV͏c|aO!OoYڀgӖ L`($*Pd]:[Y$;m)K\nް@]O!fFLZ'eCf"xP,L(f3'&w\8JNQ/Fz$;zgW FW\[< Aܛ$Fu%gw>PFx19ZVJ56-%(cf,o{2MU^g[w9 IQ. FpҴ(Q#r$daRX0tꥁC[<]݀(ZY.r^DD$DZY!.=g,62( ~&q@>ٹjp^,!7m3JmvdAayVT}Ǖk$Ͽڑ,)©w /:KYǛp<"@,t]`!Π_ԞPY}5e|lIf' /, ߦY/S(%M o%'DA3=q:8{è`aa<3f6BP @B|vqT*336|4qSD.Fh!DebtL9В9Y=!3\I)ȸP<e(F&0FgyF:s7:ڌ]~Ėv)AίH idgY r^n$yLIJfr5b-t{_蚒AD( xI#6Hv@ i>kaeK^h@+o9nPT4i8`Gv?S(48zan#%-k;Pm=n u s*^ :wb8[TqE/;rC=QFN%nDd`L@լ)&d)l5 ĩX #HHIe={,Nc`v19F= I V8-9]ndXey#E1 F~݉K"؞~ _OF=BХW]7M6B9_VA +:s.JK쇯8xrG5Xrses>3WZU_z8[ 9[Jŝ4w\7 2?8a ۡklr~];=,@SM,UlIV~:E'LIf1lX\~}P0omTZCzN51|=ɯSuO™,StGg=vS= ;M~l^*yuWZzm}<^ z?L a".1?-j^W^zUڱ[;YVXRz|tφq{ ^nMU9 ݾfڪo\6 "Q";2rꅞ$kG%[(^`/qڪ#<~!\q0$IhJ_~% QV$1oee"(f0댉sfƮ@<@&0 v%k?rjVyM:Xw9j.\01R@DsBZXh[ EЋ9,i'^VWvlYq @V yle}-ğ fZu:Ƥll)FE; ópHb-2aXP7HZCgk(t׳C̎q!JiYRpn&"9L/#O,+!($p kX{*4"pv^V h'cmN ,{YqJI NA̓-{&?F||=B)XD[v}=/*;]6 t% /4qtl~BF&]quZNY8 ο!Vp6R3y q4qz-pM=HJ 40xGH!P46n{O>̣PGOnuŰV*w@(?Dr5|u#xyZ=I$SWnM&G /# FfR4~yVnB`^`XtST=OK0Zzp{;P< o.?t̨D2%wyA`OrQ"5>N wh"Xmp,c;XRҶq]#F/%RtI?"vbƴZTa k%UrLl=4jZER~ c5;&UڐEeZl#/NT&J_,Ė,ЦRC){BTRM>l.AwGfԲbG3*IFĿ-R*o֤M%mSj٬>c:Cuzi^E$r7P1+9gS3 Y yR |7 t,$0)TYёӫuȭ{,AkѪI1PiKߺRV AݥúCkWƾ8eZHǟ~Z 8SMBnj&ZA(u|BW3G(tD)(K"E8a/) ]gxo"aI)؇CDg+7O¥WN}hԖl BG9-jXqDLp4gzmY/,3d:%٭%_iK~mM^P9kw|2l`iq 0#S:q~3.1ŷP? \L)y{ǂ3IH@.ᇇ1GE/59,9%*zGD 2-{OVk8~"BSSkzTЪuk(ȪR,OB2{Rϥ)O`lvVh. 31yP\n5h z\'6#NvÏF8(J@RU.ShLF׏ JL(nͥ@,U|@Lj,(r+`d7LrU"k>@HRMTs]tA޴h*NMԼ-z315wT%`!)aCn mrme>na%h;z]chYPJi)HZ¨=5< "aZES/aO6lլ{=ظ!!v%J;'BC AvIIsN BB :3 ]_"T=ݼv:bΣF<)?XUi#KfwOk#5JbPȼX)3ւaFw?cf(%Sqv{I32]V"CRJws*&h(\%Lhn \L +u 2-gN,K(0#Uff)IQ{gIZrupBQD ˑkŎi3Q$@[jI*ZfVI[aԘ!@ '!]w让Pȥ #`M|H,hlG{?g.Ҁ0Uz4Fbj^Mc憊*&u|q&>q T8//a*4CpEɟZy~X=D fw Z=I׹ArpL}Gj iBL$`qWHW.*(GՠxJ ZzH`.\Pyŭ[0Ҽ-~NGzbT(b_SYQ3*YYvD&:&SA[t9ҳG]￸C~*JBTnX1]ν 1bx(Љs.i*:(i:U!δƕmO]ZES Ƹ^_:`SZ+-OC70ŸE\Y.$ypPWQIiI{n6KDX\Օ+)|)C;)%sgbKIc5z><h>Ո-MԆx;PqnLCeL@"35QmP?0%w**AAڃ0[4xV3+i'f \nFʷC|%Ez+/p>t\EMi;:Z$DjԧQ"Du(>餜~dA Ae`)[2|q{gV4Ș0t`IZ'1 ̈́1޹\ w`+,$], -[Y>h%R$f>V&򽚳VxZ U$2Jja}.0| ,ܠJd~>` M@q4+! W[[l68*wT}W8]sY0vs JyMBf^%zJs/F47+B\j3mv*w-t}sF  *-5Zj'չk|<+S<$wS8J(Ccu:ƞ4 ḼDG΍PIo37`C5[ueH]j(I{pƹQNSmAգ~˞my+3VNe5Y0 $R6sh6O@u bLwc>{1T60/` T@P譱U`[1+0(y:÷ 899h‘ھB RWɶ_huujq".< 2U:In6 bȵ5e(O2c ^?ʶlN㾫/H,=ڵac X_֝ti8cnlX<{#6{ʕ}Z|`wJ%)BET ?&ٰ]]u&lYQW5QvLv\;i<ɄcMqY \<=ۿPC">?0id?os25 ТZ3E%ր"e˸<{ B0'AeS/vRs.Q[X7Pw{+Iuc28~vvLcB=ȕR(XR)3,;wppGF̭=ÿK1aIjcnbIzy|&`7)Y-!? /fLd?b̆,^1`$%̱sNGWF[&8EL$nE8Dl5Tꥸk|9‘M#*3/yǺ!JaR_ Gȕe'v_ZH`߾{nvn%,ݯdl &;oPP# ֧pRVQ\s%48+yr*ce}k?*$ rdDT@k9jJv*մ<<<^4jhp9+ PM1Vn Hnћûa146 6ٶ7#W3*g2hwtGJ@?i~QSPvI7dk07#wdN2fahUO5kԸ:2 c#˶܏9)w#\ ?4>IOn1O{ʫR?! }*$U/4s-$Lv(q!Tե˻lp \3F꫙C ƺ*>blsј_>@UZX? 9Woa5U5ρ ($D/n.)GX} y368IWh[eR@٧nS`EH(j%TDYLӍjH?-Ӭh/쯀}}O)_<r<9>a*8KTO,z 'mf^Ş5 o7.At%u!Yjs۬Vޱ臰[%jE%;Aߍ J~֒_nk >7l4;#+'}frPTz_j8h1>^0z^CYӱqX\VZ "]@{*ݍ&5.Tp8^v؄>DR~K>B4ui,v0`eZČ7(z}ZFe חЁH"\2o~hfsDV3PE7{bB}_7Ϯ rrҾІXz tQlEt _)wwoK(A5z٧K%M>B zT[Iw EMBN^;)ӻy ~)K^-~sRE8 4]@ghn"PdH,P>LpMr߿LdY<={SyMkeDrL&2얇1xC=bF'+a݌L3ƫ6@Mm&V?RbzvM]j?t9XJ=k_הҭ@ ?7o2b&54"Dk\sk yo6AGHol<b$=5L̘ȲMhKYO%~ ʶJjh)ksr=:Uv)f CU(~33M:P#~T=tYM:KBl\UxCÛ|%ʵ ܔu@L\IF^Qnn"Vݎд>edg v%Gj921i|;UC4'-Y\`ȫ+!6{dI7FB͍iU}3g}٢:8V)K~P}[cfg3[6ia$vYf MzYeG$cB:Sӳ+d.1M]S 1,yR,bvs&%lvةf/c<#YRǚ '::y]?o_&l?M5m8<ʅʴ~tw$38ó9g. hȬah2V1`JM&(Ia_թEh v`[!tqxýCe iؠR R^Q/gd ß,8Qfnh;. Zҽ \=ctWC[ngң7'b"^*& ОyvS薧v+Re+TAK Rr0fptYKw@kJ#*qYlUrn>[_[*Y]) %MA(TըyFt:N, d ո称Vx̫ ]ރJYQ3򳑭(艼lˏp&_cFfZJ猬~~P{*'Z 6sK"]AĞ@AoМVo<3B",+sIG̻"V(D)\QzMVON w4W%\g ,QW\E99i ge̱hܛϰ&7,bmi:hk>%kjMo'lH(ͥ ŧ Elx)tĘlϬIQpGpD 5y6O_E9%9rKdfy[;`r}Eư:jGȁ)1> ̞M7'ıX@3qp=khO9+c܋cƉ?qS JWb’p0h{7#FTS_Ǫ"my;>un3gfi"]JGWtP.njV!V0rfjۉIT f}`.0E9v|pH νE<$# tkצ`o[z?bl _n_~*0at/)? '2Yx6_ۆRS|g:G 2zYq|a[.'Z3v'q>8,.=Z 5?1+.Iy5KgdݨVǍ̰4k+ԁ}ďt틉VHwHro,d% |=ꇝ^IP@ZavY "6^Q eV B}%7sG#cgL]!*)0or<,ClP\nU(.M:й՗me^xR[4{ya G<ҟBt|hƁ2s`dUEӆN@cĉ"iݩVf'Y :o֬ֈ>)p8V٥O$b Mh-iM-"/ymJE2|CQ{h/Lx1ZϜ9@]VfT;F[ߠɭ{j.j&ZCe&셼 An P"sPzT^N郳 ;POj @cl,|NmN|*1t~l%u*M%+0~ *ߦuKRF,CީY",bub'kS7䖫-xjxVicR,w-[_ݬ  "~E $z~Ο;Eb5tLR4= t*ӷ.wKn0DžuFsUPIG\bc~$z#k$@.C/!HV+ClE6%j%Bn5.g,a]!L}e|s? Da %ajZ 8:XM;51Zkk9+}R4 ~_~0Ϯ/M7mO,2S{#uﰻ0gVaHnRp*ʀf Y5퀨/qC%煻34Dtfߙ$e {›?p'@2)ߑHad$KUgI[*P ++xAnfϼꤥo*mh.AQz(,4K\3?&Y?V]֨va/<`tYI/ZxD蝕w qc.Y:lTegټr p|?֛8(AHK| t=sD)*&&u=Gn"A{2=*#q[ \xԮ `8δ$RWB/]lsY_Ҭ_jޚ0iίTYMZNK" ,fWǻiG&yk%̂buh<9Pe`3V8E,P):XQ7B>>^敓BmDGX9J Q&oj疆AWtjs:X$q#,\W(H`/_VL$!y;X~-zx)CNKѕ|%T`ae+0Ӆ] nF1:z`bC44th,#F/^"+T~qU6P+596'xr999_f:o]#Dj8*|7\/XpɱMRBI륮;:G9rGE#F)(39f _X@!#1ɷP.x.f{0UyMwP{CbQ4NaY3Aٍ70eX$lo05Is}d[4s;ϼmr3!fIUO0c`T9O-2C^,gp⤏$wS_45-/lAC(qGŻߧ*M8.)op!7Rp^w mtutR?)[ѻ#-^ՇYQr7c5#{+uAҨeP9M8Ai.|{p)%66֭9u:MjFT #w_*D"WÏ%uO,v]p4O "m%K[X ܙ>zC 9zR]x dkvOob?_G1i=L7 ?DɰutuڽcO9.˕|I:FO%cI_\X[FťO]s2Ծi 9r)WZG+n:02z0'ډ9*~u(Yi8pT-+t}}f긜M/bnfW 'D%/r#dAMzUˤ/p4U###fH`!ɗ7ƉdAt=V$BgwMtчM PoeH}YY`Zʇ:e0dC}7xb4U8:ሑӫ2%㫠u^xYrF+}[.59+>JRQNV0rZ<yˤTπnBHq-~w@e/ɻZ\]Xđq~v82$,`|rq 0|_PPq@኿qq fl(_s/0>+q *z?lQ k}W PoB_AFFʃ>ăryϔ%E@/yOgb MNz?{ qUz>raw 0lbmrdt2 RGѩA!*$2H7$պ7go6 ] {@ n\Ⓚj>Mirh5ϴ2E[ r%^ybcڌC8Ͻ6&?DoZs4 \Aj/|7IN&#\% BKI*DZ^F&cؽbXD9;L: qUsZ酃&*-x0X3D'e;""g 7%AktQ1; ɟ/(y;q^kTݫy)Rs3fC>`'‚ ֿuxUE=Z5G%*7tӳmf'ofE?҅ d{)7 @H# k +e |ILLˇB:.Q #KӅDNrF%'ݺΣ/+"2{kH_,V*6HMnzɮך_oG/ #.N;XZIp3[>~]T *~LV!1ES!̀LeFˀ=i_v*tX{֟ Oi2%!!Nfn*Ha]Q)Lp J/kNJ+9n6N>PzФU\ vމoCi<'e@W5^pQ[N~]ZWnTv=T,MLJ_HI½&=$8Tȡ^xm[Yc7N!#7.+9czz!d!+[ӷZA-[Lg gMխ@D-V,iW4\+/6.O n%m0/{՗@x+"wz=l-_?c("BIz4Q$K%y!"B8l>Nmn懳d$iq[FMtȬI#!2a/sCΚɟL\$-@pu4_wS)+>s /CkQ/_Y#[נ2W XۈNxLeFշ Z j; {4JZ9@PeBX~KXw!й`"XUҰ*7c0"S~\fRjcU] C<)0Hs ,zFz!pѰ P~{1% A;^Y+9u5n1ިN<<ڱYkhK[},^nI$./C5g73FWv4d9"Vu鲀 %gSlYj-oWT$ y +%ZhRy ? mHv]nc;m.HKeR4y[ȽR6C;5 D$I aawm[*[(ssN:j2-iS]3@՚k>SRh'O$"Bљi%!Zӆ)k&q@)aNǽJWܐTؚ@R .mQ\Ajb_\d352jgzqHxE"ŲۗN.vT[M2%tc_Lkak!G (7ŷEבX@qczU6 mD7&\Mπ`C8ȘQ!9[sQ6W 9˰} /ځ'9p'7vOQ;vLY"a~1kBpRjM2p&ײ 2˗Ns#W*3½F[=Ff"Eh1c#D t}V-2vDBߢ-N=PNwFwKJTD?o -v( 0-x d}^2 4Ov\WenLJ+~]2yB01P*S%њX}\M$<21~Z;bi% $=Z̔ptV| 5XaLYq#duk֧QGǺgtsNn+/0xKuS{ƷykКt1sVK?[@4:景D]Kk~C-#m5Lѐl$wcڊ3چ95#r~!i3::oS4J4 Y',qHAv12P0LZ a9xyDw"<,'c,T?r"iꉵ8E w?bIVu}s8BNs:vhZy07:B|hkcQۓ >EL^\YtRsץ{xl>hk|L.I#n[s?'k>zl>jkErz:ڋƩU,{*sS$Yǣw$@N(0yfifxj\3غk ~v@ѣqs?&fN?1۲R8͑aVe@i ݛɢ&ljpLa~{r?ÖKYVSigDgȷ+/$ح}k=՞eM{/sg7G=) {[=?NTx}aL,vPŇAg,VokOCJ0Kn~Z'.~r NҼ ۓl}U,'H"fjRKe[).I ,R<"P\dj DD ]XU gx-{JWU7DClꜪQՊ26HqŇr;NP&iܼ3ǎuhGA YX b:Dl=wTn3]PԮ+S#(x@)o1tqp D^kj Į70}KXtq&RMs QTuwقDA0%\O\ tQ8q6]cEY-< Zs,5)A&d6?x6M2dL--Z_aZme%1josj"W</ ]K9<5ihM{g;YrD~i%2kwk*IjeV.*ZA~/%qCt%(0i|+9{ {UհVe6$~yF?`ѣ J ֤m=MBD۬H:</ WoEu1361CNm pA"`P \Y*,#Y (PYAgOLks&/jنyVAeS&uV~M)^Yh(TYwTj,+RMr3xTLuO ?I_,cEc TEwzL R5̶{>򤒞g/Eg$HӞp9iO,}wT͞\%t 'aP{M.aOAUKK9J q SN_Vq4&V8;qw'oheҿE|.a jA.63|i+CX_&wz?sd'Yis`-_ۧ_2; -k T66P\Ů+ӌgܭId +|2q71~io2F"4ۯ1E[z>4j״sETHWj6KmPk-~LV/W>p+:,)ޔXčd߻ƝҐ7FaRe/5עȴ?\kC4!aYT^y/͵kTER(q _e,@wuJ+`&m<$xK`;o]s*|NqKoSe89"Y4y ] yIR|Eµn$Pvڳ;^OaOW;Fnxaʃ *sqJVffe=>j#Ki2&r1$L"Hluቘ)PX,ֆ0nUHo{  s#sEyañQN=~h z!]_`" 0xF ar>9tpXdڊI/P06 z#r/pbFOX/ L4- U푛V1[ */FƍR+zV"IE,hOɔ,>w(8ܕ97=ya8b#HW$`\n=WO(녣F4{ _iQ7[lQ}@W"̏2)wa?QXv&e+K^H=מ+nETnyTUB]q*\j'%ZE؛AF 5~UX~T|.(=5FlyhHYVMԓ:+WɛZ -Қ{ Z*\Q_ <r9hE UGBdEj]xR»կpǕz0L^'h. $ 8@(!=*0 ƔHaXh<9]2rŇD}*J^ƕ,{QL݅d sn>>zo8g|o$+>ϔ"[)Jw9|u=g`≉X\@e\MxHE3 }RaU=3DR.icK98 U,"j}rpK~]_Qd2i=nQzL,9#,?,u򨈈7j3{r|Gހ!`'D|&3ĐjhVڼVLic Aj对w|`zPTM (Ã^x$Y"$IYh΁8닪SӾ_{޿6mz`ZyM=7"5阵PP0g廬t7qT"=09{$bot OKj$ꨓ"9,%7WOd;⃲ۜi/lDfY|1'n}k ÉyVgwSR s>dY[ssK/FSrlXY"ZWj3oeH"ԭ&'eKMfI%W=>m#YȦ?V^$Kf*?&&kY~F!1Q+&~Qƛr8|iʢ. b8,y<EKfKe&^w&uN2'當sM3aLR|hs"Dm殭zcաSeKdsR@j~xD91t8ՓH#u{3BSZL>!2Saa7m0r!/DJd,w'/y5@3Te͞Qg/?ǃ{YS0&d䥤U༚ȊGfiVx J2x~U/pjwV|CNQJIڱpfd?$ύeCXHxSkiL70PSqP PAL).~jTi*wEI9[%®_˭UҭRuљN$F9L)ע0$7>gV${->H <\: L<]L\?XSQ303pwI|QhKQ ̸z[Wv"4 "W[(TܪPte֧+^f/k8dA0AE&r_Ku}ڭA`S*CnvEC3dEӂ$Ȇf=Ā&IM{RiKA%QiTl]ww+5Z gqgU؝_@F'|@Õ] 2Q;@M'C* uH X"Н|">-Jt6k-WENy2U?+[߶Da{@*^WZU֌HR|6}*^b PC_u}5;:l\۔a~O{5>{xbO| _<Bwk5\L$i鈂&prZp@{LO Vo/ 9* q"7[LJndt 43v'3<mSccbMõ>m>"RwRrsR7Cz+\Ĕ-9S_KtF{S36 pt>$d5LPQ}W] S(=T@>rarNb,&O^^ӬI)B͞Wf=9(W7 x {ˁb& DFl$V ۄoRjC^11ߟ~֢XSQ̙z&DqH6{a{TWˍl-4c(\>MQNtQ:ȎΩzl5zܞE[cJ-%ˮB|H|[T R`gb_U;Fn hYj9"7E"uVbyRץ}*r}FX{g8COȟKPڐt3F/ֺGJEιKeEY$6y(r@&E8zx+Q>@2z}~"̜|g3b c]8[ Kf^jjݮ&Z Bv[Ddji@vl+:0&!^1XzUeH5|y𶒶Ⱙbƃ[BͼOq1b2Mas'T_>i{4Ŏh!-|aYAGQӵ ni#;ʌ}BmSŴb q%9cTف]@Lrj$#u/~Ztҏ#!gFfxtp'h(vª]M0A'&<l6S\b.cEVܵÚ&SoBoɒf fG;letG`yS"OƯ] <￾whB5`#i'FLi\ {_i԰},3c>Iro"?ģh+J5s %5֥#Dn;O r[ :}pV,RSX8yĶ2\}4TRgnx1[Q2#ݺAi9d܄QIIQBQzeMXdbH +=,'Ю|è',#tfb"^q^[liز8((hRu|TÏ)(Ϋ"DrkkB7697j2[2UQ bCC6MU+Ex S0xb &ÞJۗ.R*zr/OF^U>qIXB?Uhlo.Y`ܼ%&Y ki۪N!'ݪBAQ5!Dz>Un9F)݉X<4[#_ś%k˽H:ZR9!D9. 8tshjnzcnjRbsJ7G}˛\%H>[cCT^. AabZl=LfLq\Rj58T+{i[3R{5PtQH{fX]bik4/v-bHsfq"38WLzžp b֚V'Meyhh[>&>`vRZB| º\@ޱbV w#tr儌zRDDs/Mo{!2c&"gˁ'$aш&O_3Γ(zcӜH[ SSȼ|K#m:WGsQLrQBtZ^,U5@]ޭk 2ٻ>TܔcAެ'A3*i*X0N:LfeLV _vV.i奿;d;bx ~[x-g>")%:6'bQjKi]4Z`7gEOl~76ӥdiN1Fˆ$0`30XOA0+P|~>2"*BJ܊^g>DSoF).&oiD oDFn{GDov;xkp4M4 h$ R/2uy[y6k >':z-%^]ҭӸ#}tbJތRL\w~k.!c(BlOӡy3j0:څL~W?SpٝudqVToѣ\Ne,ujRPĬg0Bܻ㨡 e6c P,g b>i"G84A >UܙEjv@EUwe^mF`(KƻMDM_qY3n:f *!"폇#>gs5#nuN?ޕܠeT[q^fy,Ey峉½Д}ڞ@l9R!8a~Uo6*d8d?R}O:;U+ ^Jj_ ]oi^_Gq{+x \@wFY`iB_}yCGᔗv#e '(9C/'0{6֨~*v?-I[ { _zI%^)6KCFt2L>2va1HJZXdD%/J`a{ч>A5߻abxց$ ĠϾZQps<,!]*_IJ9,~"f.t B\za27ڒ}4"ەߞR!2 />!h7)VTRr5 KK:Q*l}$=K~Qj8E\wN2']6{) T:_lh0bF0 (4pIVȦ bUiyY \iyYe%a%-J9Cw s-r곤;XV]#;1 =K^ҩJ 'Ɖ5v.A s4(Jc?3"[4==BTD5,I4צpY_{2;gm`<*u) PXC𵹣O_"̎2T ƿci9=Y(S:ma /cN/@X{:%NNG f?Jw}~_Y͘uY {?u ܝHkdoňfByDPhMA vh2@;1MI#ˏOd2Ϟ> qhR2d B-_;y+'J9U_1 шu-=ؠ g,)kBy0y"Gb;uϯ/К %-@=tZӤ§TB ~BT ӆ芗 }Mx}"-ah"fWsC=z݂qz ĥG G/ڱ"|II|j)s҉{hy,[_1qAY\ AR\((y#nu0*dsM.V3XqbSYS\t>yIwߛN/qAlL3J `d|ZxtJwgñXArؾX~=`ըN  }ͷjkIA[ A0q{.ǍiG$r:K0xHR9=o n(u˄uy@:@چw Z^ :4`AO\IhFѢ0zy-TJ9r_.ݯ)@*QϏ_lgvB%QWB:1XuM*HҴN@_>hڗh *6+?RD5=qǎGd8g1pN? 1<[f,#^G.@l,O3A oMt@ÖO2 ]Uʳ:'u[XIhSoZ=V Y W,X1?yj.Z/k?a)^&Ib!TiNiC I;b]!81R鏟@eiM=*]ZL5W=Xo tHϊwPΘ'nk!PHϗ$QY%IM߰iH|( B$H;M9ՔJް,*jMg d֬ EP=0~N҈S賏_N޲\/b$lFzt7nď{jt@@件+Yᢰד :D뇭FautbZ/x dXahg9cQClH qMbl~gQs[ioОIOêv} cטanW ,`|]p vJe.iu| G0w#"V޴ Ĭ[/PwOT+~<_JR"M4`˭R#+cAh6d*z˓]%܁tfO?(ZU'zs R;A#m@%>e(^ݚ9Y|i/G Hoݘ>+qeFN{V*b- ;(=q?; Ş@pn4X! $BTw-X]U<)q<[w"zO &$Eea\ Ե6}(yy}5%kEaQV͗*%&QQFG9LC01ĈAwZ0H8HI9z9 cp]-ӴvCN xmēW.TuOy\#6@4"_/oB[8)Ex.33̥_7GKŤVj (ΓLz@Xfs!^2Ss[;7$v̙HtAHį+cNYv}.t` * bY)3R}AF7W&w{9WY鸝MJ ܟ5(-Y_ L^rx}.GHjyPBe8"^ۃs# 廒c{ƭg"Yu wwsgJ>k_./d"2knFwRP=,Z[2Ζ2 7 Vpg'6w7Ի'Lg=d4ob,+ vt_4nR ͒MYhd ՆYC:֨mR0Tڀ*) gMge.qΤ޹ H;QȀ=p5L+Co.Ħ~ҫa ip> #  ~g\uub:ͷߠ&U$ g, fWj!xhY*϶iA<#: oRsH@WdR/Hm(TQn 4>AF!IQlD`;&e}ges4pwlv*BH#oQ1%m@K16CAM]jZ8J$x S->re'B*HJ/Ct=7FXJ ^F6pzR!M$} 3-ar])Fyv|qp^Pc| FI+:JE̱ok*N3Yţ ߱y7SERП- 3wnCBiI;6)y U?d ES$W.8%;-IPfdX ˑ:DZ<ǣ'үdwi6Ieӧ*ԌJu;lw$m+gJq TouLi4 VZS, 0(,6FLt1,XHc6@af4j4os dbULҢBE ퟸxC'۪0jmJI j"R+? 7`:*HEKW/2GTjCP>Lsz\ &9 S2*') q,0Y15{E8|a-nիfB <¥&YR+N(1e3V߿`PPE\ێ)j. >e" ZM[J'nf0ZJ'/#2b禝&teA}Uf}Hq 09ie}T::]y(cp1|W T [f 8NToU!kEh,Ȁ.x22e>˷ 0x>@L'"S٪g _"$+^6-t5kį6O hh9D\icJ ovgGԃ%^RPG*"2{#*!fBK*~2IRԱOskS@C>.$_>gZBt0jP)R~u+;aahm,KcA45UV{UM797s ϶owvxf]č{9z(A.mr\@2U&F{?6}]~,"Sֶs!R/t~ !qJ-3\V ݗ M5eƀK9NEg[ra0T(Wv#=)<3s;y]XI%1*h9A5 rF/iLfo yR.JBA_N N.>'!y8xݿ?}C'6=IT1[A b_U>TX)M p.hݳӑ["3Tnq.qoCݣOhRR{9]IS /FeAff}Bo|16 -b[Tv[U;Y`$H-pbC8]4-$L#0#pXxvDC x9aF[9fkJ溍럌 G~^/17eyёSa#un@ITyrY5$Yԧ-D`ޒc$8\` |wh0N-*#lQ6r[HBǧ{)٩ BXn6X;,1PE |?2H,3;Yl̍ζV*Ǎ2[G;@cgEۡZF`y_'"< cS^C :(-\R=$'W }O$}HML}/TJ:UU]PB~ ~>Z}KPGٌHHxDv}u φ̟5+2) )6cJk̃G+Aw/?"/cYr֚ҙ>Y^[ sS2gxgKKʁyՑD&^U*=[ziB&d;H^5bZޤͳͼ5 yx-Ş)  x@_ű1:6<{`ld(ޛq~Qt_hކbFasN^WJVf(W?vȥ P&jBqpbkI^MmOhxZU"p ՚ҭg1<s |DJkxD!VDlEߡfM C@=&-XR %p7bC0Q}|ޯjo?I6z@~hմ~A4^ZH8Q/ /",tաJ^{\:~Op(D7D8uEH05qQA9ɕW(3cj͇TeFkS-z@F]*rݗYWeЉi4 H{"4;oc{?M8lòZKO)6?vw"e~_g4_M(Zb+Ӧz't\؃I Fc, ,ŁнRHE v+z/CYNHde۲)_# v6qm!#s"8({('"_PQhu *K~}(;Ja0|qhxnϏIߪ+8~z%TU\Lt+@];wjT=ѳ3 g 4wNShzAzFWpa#R  %U)k̂fס%wk1H?`Opj>]1xnF>ֲE]Uc9sUr!yvn,JA@CB0V 5nzLG~P"IB`ɉ:8ۋ) fT@Sn `\Z]3^5*[ڗ]e9i.: +:O+ (8|qCmcͦ ! ԇbBnjϛUhf7YLBH?*fcP Ll`"\19ưPT.}fdPߴj>xB=&zX/@mDҧ$c2Pǖ?DZ)kU|쟭?([/hf*< %@)~{&QM5 ?{?O#ƯpP<:\_= NZ@i7  {L$_*z)c]>)<)4rt\la -=6ͪ([# J9wn#-gR=5IP,5GvCSoڸPDI] LA4 6Q)? FOTVkm󖳠 #Ag'6i Җ]#2ep88k/Gtm듒w| kx1*2HS6Wj1QvsyQWd">VhrIqL(Q!=ΗE 1HVy!I媁-r= G&wL{%;SQ:UI,׵D7HF*Lލ}?ZoG 'YdJ}7:k:lA7J,͊Gu̳?)y!K ic{r&*tۦ Mb @ W3gsDtvGD΀D. 1"(m.Û"pmJ8,֊mxT bS5D)O^6} 뱓F)Лp5`vB@ٍ/Թ]P>|ep׿:ܝg|Rhz$n SWb5_ߝWq7 $1ŷ#|ȰZNQ+(溳Z7n:+p_ f3I{K£j[:W*q-S<~8f#dpC"Jw} dx(P,kܱ^O]tؓC>G[thV?{ptQC?ިp0ph{QyrJr!FqVĬI-ԓE!G~]4T :mêZJ]6וZ\FI˒9ZJh◵=@K\ji*%f՚EORJ6+6:o BHA jdxDb$hz2^4FC0osVicTV}mw[}V_em _)ԯH Z+||m(RjZ bf }$ X*o. }Q9 v f?wBo8~6YM~x ~;2r52:AcA|UcWjIY|v.' q$|@8C$X(=y@*i M""Fy:?޶Hd+J^kz7ր,wI 2sdXKʜ C(˧lr3JD6,w}D"Hl&I[Wdԏ /+My)XW[Da^]FFgQF8QC{ɬƊaZ' D7ב}ueޟd!Y飇Z[N 0!`ng>D_^33ത^+VfخE 9,ډ5_3?/S"_Fm5prq,@D[*MaϦYX1*tIiZV'>g9q\DkE46tK BߊT`wigI< "\m]!fR2QM; *M vʚa~@_j Wh߅cU͕-F0 qܺ1 XvJ>!wfy쾨 Efl"ki'\PR7)}R+DcُN>.WZ«6,>[(~!Fb[o˻ϛ:b#Fs .@BD6Ov(d%N8d!W.ʪL-|{(,[yDrls5=J>DW^炖_;P%!әvP5fF=J"Nj,p=%Yà0HE|%2r@][z[lLԫ+$CYuquW%ztw|`ŭk$IRñ^SeϣhcL` uN iԨW@O;_zT#nI-qo6`ζ>Ѭ0J xp]VgVTg0 ovPOBD;!JD[J.3KDOjguKǐ81Z3Ez"?z_۽~C2=>SgNPSnvZC9)t79KuG=rP^z_=i=ryPyƚ6 hq\-}9"agUj⊳]Jҽ B٤ւ(*Ed/T+I ^XN EKO7 XB'6VA\9하1SnL6?D a;MnadRb!UA##(/[OT+,d[zh~{ԫV9yC-jr1rv$+8;O􅆸zc&٫92ӕ053 9-F\wF<N5[f?!t=jQbcic_Y>1.V9~wMb;h!84l`s- Ώ!aa#15ĂRqs5o/v@~v5'8# +]wPQ_{|@=!U5'Jq{#z t -;ĀYU;-VK<(g{˂[eqe _GS g6Pg|[OY"=]yKm3Ʉ>teSHݶMǸ[jG\A2l,ziҊnuKlzbtɾ9QgT1DbKm󩁬t bDG-yrqrV4i$rq8hKFo$dǖs0<\q~SrtӞIqճ-ԕa7Jƍy]r'ʾrE!|txzJ_ }R|rG%(x@UM2nl(7N[EjJ%~gU ʀ=Y`zQȈibCJ匔'TָQwH)\JajLh9ik[f&LO&|@f <%1e#q@qK&vZNiJP9h[_JW%uH:P`FM!nRjkJ;Ax{-uE!?}4yO>*Z;@)5a gf ^Ww s !>^ڐJ3cϛG{t jbEeC"5 oGA.IPs/B{l<{]7K7睊 3> Alg<.4V=r4"?fh~d`jeBd'2!󄳩:]ʵ7vh[d)h{WdfV_VV=d;%#e ѲVr[g;{n-c ` $Z)dWI_W[*E/F#% EKJ@|ƫiQD܇e$W 5(C]fe%c5P<3P`Ϫ2ZԭuB Rwj:6JpP^\1`h z)C"$oe˴mϼfyaGop sOǑ [Ac,*έsKls 4{K}0L۠ *оqg&SA "9L@wP+7u-pdCLijk+X?9%jhPz/x-t2 4"^h j:?yíNFD[gFAW:{eWD0׎VPDe-VN[.爼mC#Eメc{DC:Ǫ '^}# L@cj}t͊yP/e}8Lp&ڳ@~+eʽݯuo%p-o>1a?^ѺgT`y[ƛVeߊ*<jp|4fAdv "B$xB=W/ɞT\ UҚ;Ó1ӮU_XIEJļ,5'֊MGMFՄUTfzp3 <:nfPc`GwutJ\|maKG'sj;BKVBO4r_aLEz 5WY+_8UA`DF1ew2ݽ/YaF51Z,A/㣡ckąvM3ZsxsD d>@¦Ji FI :ߵT`}*ABImLNElJ׃\8%ƴmdS]"al>W1JE["lAby|~qZ猴33,C|hCR#GmW]v45aUQ|C߭, |$ĺn!2#~ټ׬%.6i7$9,^K>C?|TCK%d)VȄw?TtUX&=0 K[|TY)$fs4Le4I11öi~f%؍:T^Sk 4HԥΊ䘝ٲ\w9ozFgf;T%Cحd8(ZvZ`?^Bwd u`:s:^0YܑK݄{M /kYl >Vl Y[3]kO_ Z=X"cߡ6LTzJUBB^"<ҵW~^ (hߙܽ(xʭ"VpA*c|* TZ}2rn,%O sqg|dɍjkiBXYeR2}ěU7.;.aq)g#vi&,h 01e;Я kқmƈxw<;>Q>* Nܬm?@|τ?(Bw"n2JOQVFg%Xگ$/+zûJi@{a ӫ1f#bYqOJCXHa;q؞Q\N5iYe%&Wj3KGMӆ vm,O[z'eL1X-+XZ Z3iSZ(Oss/ O-GŒ!+7ݨd /UL"pCSv1)!P&q{k\'DJ]r ƾ`&[sDv-ǶɼNo^YpUz`$-g~)ފ+*Mt&}ϳ#!:V>1oUS"%! 86EDM$n!0I~4BG|CS@οxԹ]0q]3ӱOD6[0s q)dis 2&0Ig36vg?3+AB&E{.ehhT<d#ts)=i6P $'`^븀}ǍB_Kl EW{yqN/jBzB@H4{raRK5h0&s7M>H`njYBȏuRV.ݭz}*sx8O])c`XilMA0Nȍ˶jP۾:'YgjH+j=扇/tA/NCp̏v1[Bod7v}JپQuNzטfCS%ֵ9}0PnAiEE8 |WtDԭrW@Q st|i@ Yig36)dH9u{et uQʃd0*[/ OG@sA$ bwjО D]I DžރLVqkJ# ,xm)* ȩr6Qd.K)rff^֡N{?~ 6Q:b*Uy nϬ'6S mk˽>)م`!L$1Qj *gD}(c CqgNm{47-ˍ0&cQWO E*\I62]kVK. wrICs>TNcnH9] 1C)RE{R칣{8Kf"ټ+ԢO($+k3hFn06?r0NZ13]*Cj\]=ޝat?vwq).A.e,EnX2D1z.ȃ(C+jGl}b^5KdmYl|Dh;S|v!BWmpU_+ 녎|M.lFRR- 3wSqtK9N5Wm dqy0Os1K6WXƌIP/5vG,=hC^%Cݜ7#=yWD;<4q-V~ MS5fe(\N{{jsyٝ5*8o!gH8fM'"Ɍx-[pƭ4Wmeɢ'yR~bmQNOrQo[ENoBIWwf%8c}9hq=sH窭w{ 8)*ƴJ㬿 >9?-:g̤c/-"_ʾqo/6Ǝ@>ʠ 0\^) hUo4'ޞS1EZڗrHWC880A|NEyFHE Mo[zhb$g3D)7o9yY1=Bd0ǭ3p9$?:fhj!G82txihe[p 9Pvk+V(a<\dmRqX @ޡ~&YXKnȬ5Q0YV% H"= W]/ siY@bs {Q^i?l,&[\h.^sEY>Nrl'e\ڠA1u]L~o@s %`OU޿+NmkU*,bJiU*PwpM ]Yio/=&_pm~JJCEOF -@^1;Il͞VV* ›JJvT0ė" x|,]A)V}!+jY(?PpЩ%rW;}L3= r]g˭Rg7?w֌V_iFȮ Sk : *Ӛ\Z"(KRi@yb`Nz\NK2,P+ 2w|O*:cUc(b НUNkkAB*5;Q -|mcUN\V0n:̇>*q,z OރAXȞ:r8iWh,Y=9M ˯kڬESTDӓgrT>ٙ|X|q1_^ZIzzy(xk48Q̈́y:-::3 ݯ^>\FJ?hH$>~2Wӷ&#hc*uðؤR.J~.*[]"e_%`pxe^ma)lɹ-.cBw&kojƇmO:?sc0_ӆ)In@kۯaаiwR? Te.eA\?ԗh6%W↸fW+WϘ˜|ت0OkypUI]]2 i jXvLt 2]_>RrDIgNvJ GH.{cླMmv6*tݫDGر.-N?^3[YbzMKEŕckQub]䶴E@+Tk>BXhu^f?-`~Kl4(}d$2?* s.y~$$K؉? 1~ir+{RL\/H9uҍ kɞz t Ox?dq`@S10<3(5y^U}wL*7Ӽ32,ByN%j\}t`VDۑ\"MywqS;.CDCÏ3Ö4[\e$`@$ 51cK?׬[gqzC.:a2݋L}W8@ A}vIrNl%Ɉ.Kgp}ҡxKΟ>X?*h-;gTK >|%NoCCMzYQE%ԝO\-t.`EmdKF-!?"W4& ^ \6.e%CX@oIɷQX5XhЛdnS`xH&?Ae(!vHׁ+X{uL4ty i:@/ш=2X{5cضS2q?ؑQzc%xrww?_P2s?hny'w2QL9kZ6dr m+2Xy1sjڸ6i>b} n~j%H@m&|<<ClP P >w7m&4k ˒`@AhչD  U>/atHjnԸoV`ց2bPe`F,1u5./#4:CuLz̠;e=!۫Vm$G |r tΓ5v!Wcih(!İi  8 mD<[?i0>E; u|rU1FRz*ވ ?3-U)X8Rnwb} 2Zulu!C/n*~ u!;GH3_Pt[~[!;v$Tl6J?}އGfXZ\,ځ <grq}D<Z7zZDrNi2/Gx)7t8 ˳D~d~j̀:Hnjz ~hS=vQ{/ "B9oYAMn]hdQ31%n;)-B}7֦U7s_j,.g&vT7BZuӀ>%W 9}^17WLaRlnz%QQI[E{^h}H*X*Mܝ/H+ܛO5 ڙ)>*Ǩ0 $NUuT;p:!"RYuix< :|B 楔9dDïN [)n*}A}K"PFTWuhBͮ׆j/0TK8;g-gf7*\D8:IwDkwO ̙Haoȷ7;V[?!Z2[Jxݼ#f s5"+z?OH~+OEic) RCIZ1bjTs;hG]\8\U𭇔3Xd}=rBP=bE{وsArN^٫xЭlCܗAm>c29qI\N_-&oPX1*Ae!$|2-CR0i.tAAVrI ]\Hy06dyƺJğJKmʩPмej$%޷z[6YSbڍh$b֑/M]i.@0=܈nK*>>j/^e?O vD$n*]g'Sn]a]:%"{),*N7&N\1@wwD[3-V,ail֙lo9B 54P!&Du_N$|oe/ {v[K?DYQ%'8ԩ[at3l2kَNvї 猂PlzόG%#v^j9ɼ]M%\fxв JHRw^[iL=bU@d*Pn^TPb2?4J<\?҇ެ|RO;{IZCI?7nC6  !(P%pd\sy~.O>!s{!+a>/EF4@r?v G{iL^>Ih8>Kh-**tVe(^'At3f6Ƕ@tFQ-SIB$^ O1{>zr@O3I-ħC`g½mzSS`cr='_}/F_"@ghaBcIYta?#[m|}5\q'ljuRtXB-_oM|ei]+]"N&p9]%‡\|JL4VOsډ; *=#IA-HoK!kZ$oxYc3:TZQ+}PQG W+ yp֥t5 W)K>8u!3ւNxim*!s EO9Q=3"%o5`TSz0혥0\9b Xe^lzOg vدGsW6ԃp34{'U]w2C9瘽ٸ1ݘ]1C{a'W0l"X ĵQdɱN~Ko;z*}3U\br,\$7ya)SZEt^XcPXoC1k^.Nlz,IB*nZ9S\A$7~)M'7aF$Jwՙ|LF:|Ѡw^RWxE~I ZYDer9jǘcK]jqP-=gvTr)AY4vi)XӦe{|[O鍗IC $)]3xI Zgiʺ=2ץdVi]̈́lz2:VS2IMc{SkP_9:\7hlڤ|+mW*n#<#- }C]!ȚG%79c|B ƑCz%yF 2ru;yrDvc&E/V_?lmҐCλf[$ Ɓak<* ]~$*VqSP9yMvxf[T2hU$ʕE Q` D6UV_ԕp$;m˛$Y^(|q^LlRMNzfRPݳe/ ^~?ũM+j/\k*%]O+zôdRqlYl)5O7~O1OiH5_ xk߅0Xc?\G)!<$w@_=$5w^^ q g7OӾG~?[! ,D@͵* k[nȊ4WXk10?u%%֛J{y W sB[E+7nչ |T6>SÖYwh`8Tp.Am1h Ғc.:ź_Bփ70,\%-'7%"׆p*I{JF u DŽRs81@J4=vO螮H|ھXry\i *vG%T٣yr|xQҖں2ˊmFoqq5\LT{VGcPB{en;}`gAR@CTmY%2B^>'! omi޶ L|VRV,Ǥ&!.dmNDW<%rKޯAbs;o{kid~li,/C*],bc+A3_@x?k/QG M\,F췂#:$SkW'$+yIö?q(_dAS- E\,fV X:buV}G"$t0̘>1=o} GkA9 l1 ֌w{mjȈ+Y4Th\c4>pw}ҫ [7Sg|c~K.-:+`(cUTCر< &/SHtV╽2 Dٻͫd()]@0 BT˧k-h5 >M2: W9S 2熱fԊ6HRo'8~R%8^Є,o*|Rۥw5t,5-񛑲Np;=Sѣ] Dh$XTR,*"e-t+~.ڼ9Vi|-0tX^6 g ǃX%zdf\}sF0V }{{U^Υ𢲟ô7@񸻞WuGTdҚ'ػ'y*oޙpvpwJpQ,kd˳W7q\(6B4͆wꦽ/:0߇^cIYf.1h4A)5`E4dM ('VLܜw؏t,3#d߶%}`OGm(~\b;2BkYߘ K>6B%zLS4ws:}V$&9 dF4O!YnTiZ6w*gaY;de菊ϾnJi${}*/?f~|??>DXr)fEn)xv~n` Kf\cێ+,iՃ_r Y^Q.2Xs|PY[z((O`{5=g7QxIn4y5qh6ГA t#5X6 _@/}z\W%Z@h+g#}4 /.Vb.;{qxŘzb 6 -j L?|,V - k-Npx{+e wy+I*M2X¿ f$g,aF j ):h3wķW2402bcQq-Mv'Gj4dD~3zGXKbI$(}T*/KNqH6KFP(4bY|S[l2]N||qrrqQo醖I]YpCz ;V7>]6kk;<~[B i#);޼TRj XSu%I^+'>?|n6D#o՘_Wq|&LrlF܇#Acsoq>+#bKĽwk#x1OӃx >9)V[Oo~l'* Ne4n{@bה * rrOo{E=CyTG~M2x> 7ap^ewo}n/υyHD4a|#לӸ2Oxy Ia* YΗزn_pHt Έ3UKp}>yE_ŧ{g)WUDȘiq\}0'-;9s`=&$}PCYv6i(@(.--eWz''K{A7MPF'W;-W";I|E 2rCT/9$ G ʮ~dkPy/No<&,'6GA:5Jp@h8k+[D\KjSثk.ץ J#1MK < (, F/3 #*nTtVJp~~8W ܉$_,)Ppv8=<[yހ%u`7K?X~*xU&׎#J8vy%q+#>G9mZ$3?lP,l'1n\R҈fÞ?qo^S9dw^# K/?ڒL}%>Mɷ3й$(:- 67US~{ 2hD!A[2;eHCD{\nj  q{y&DM-!w+ qϰw6Zŕn5@%?hn(ÕҘwQ-g7K%ޠag2pW% ~ HL72߁OCE + ~]a'ڭ\?aյfވ:"yt;!g8"XE 0y  q;|7Z4 rI7$R K܍ZǬY-yBsBow4^SQo@Nssc@zw<p:Bg˷8+$nF)() ŧq?G? Ђ i3Êk=XX7-O ]2!$}]wor n@}ύ{5>~:<A= 8 ئxK. PZǡV8c _ QrR^aYCM㊡u027- Zˑ@*3)lk# 1tb ȝ 3kXRjXct歁S1fX\~b-Ec/cÔ:gP'FG#ח.ة(LA^toH3EDJF>Ojyz\A0ނFM;}Pڨɰ^ArQ tK%GR 8`A.8-\\Mq>QEf#QKtO뵙"ps ̠Q/L&Nxw3 pZ53]6uHm*[*8e#,A]>|sN~.L6Lu6c$94.rH_/=2um RNC1,%F>ALfpj(SS*_9$f3ќʝ~y n\RIces'\ A {u`$}qE"屁` kC31LK#.k v|. sշ՞}@* 4Gz@h ~oVUCFl❎!/=jy&'^Dùʔ>xUUq{dgETQ֤aԅE SE r  1Zv`=qQH-}߯jKQX\!eSJyRzg7$z`dT, Ha14KD*5*$3|9;RH ÏjYNF'bF-` 9zQM͔_j|EбC{.8$5: y%DfxrQV?u&rsCE!u{8+Sw2R"k]$4jrJ},sQL\FWh OPPF FD-OOg咔zq1ET )%bߗd OK=?FiЄPI:/> )R6U ."rvz=/ ڿͼٷ!}a*z#.=W+e)@05h8OWC%IKeDg#課Ý*:s0ĺ]U=w{`lI(t|Vqj=4Y ${it]P 5ˑ[ lsDPų& ٬3àSJa ,Q=bѱgRMNʧFaպC hx rOX|Hs@fE9R l4Q8q\ ap" (<0b/1 $ٽ+=Z3  T JN~KJjK[U(yVxd=TrTEpp-EdTxꅶ=.i"m"9L(l_SKuk11iH/` [n2(˺i[%4e `#H ~kf{7pb; di)ʢI=G1ʠUֶ?ǮK0 Eȁ$#m*)D<Õ(orѬkO7)9$^.\Ұ5;>pt<'wuWZR[b~O3XGTbnG/+ɔX}l(SO! 4¥̡JO saS(؅PӿAQT-<{.ȚF_ Oؖ]w:j:|kܕ{!#[dnI$僋4[m 47\ 3@xk0C30^=3&A=I4b"X[O=oގ2ְX9F)bH`%BWSDb-W/I~`{߷w׈4 0Cϊ*CBfwn?[ XakJCU80qe0fF@_j]`Ԝ'T`>%& %nSSeBclKSR'xZȜT+V:ͯҟ ~cބ^;[1@[ϤUAO=&c3?v35hG` "E\|IS?/C6Yx/_eƺ;ƴ|d@ⲀȄ=FRq1m9D)$ .1Z81HfO,,gf8>2 G7zAu:Ż5zC'hyIc":  􆙹 +I/rm[.6>-|DPz0c% b5yqUݽǛ|,aڹQQڡy|/)R6͠c%]l ׻4!` tƳN&b'jfsMߖG{ A>hX7)<"3GB=,` 8a\YءD S_0#sc'E sA3:HE9V DhpʼX7#{JA!q潆䘜e~&e:{v|gV]Sa*x^yZF}`9v YEМsx*?@7 H/TH3C%9Rh5~c%"Zf}+E @aITWFx/5hX-v.͡N⠗K>'q{(ig_9֣.O`-/PVA(ξnUh/$n9Mgblh*A } 썴/5ObLZ˴|D%P<'kӚ'hGIŠd_ D^cAf܂Zz ?OU֒-ZZy!Bu76_&Щo,APf˫< Y'\H󎬆)-j+tު:EҖp}N *VlDLх(-W9n|CWR~?aBwj,{$ٜm%vPQ-̩/'%VKv憐F}5:' K}Fsu.h"Z L!CqU3ೀ^62 Y.AaSlEjrk'@-H1>PCG8=;&YvkI5/ctƆ&zXNpr"WOQ + ys}o\-$&g +wK#s =^?f2CW7FYvfDyz\U{LxB\8\-B.Vsm)f?[}̅v|F J&x%ޤN|GýЪpTޭŢp*cs+Br6&&mŹIS0T!YՄ'X8& `&\J,DBcD`,qkeF7"pk$~B@Y ^&fp aGt[z]iZY]s=j@/ԱvyQ2$s&#K '"9 }K (p{vMh6"pM*.?(;)h> +D.' Yvv|MM{c!҆$V7Ik%zd;":T(𵥩cҤ iU&fۈXު@fA+s cVܤP')Xi6j+2N"#&أd8Uw|^!HO% $5 _Uiyכٍ!Ť8r6l2Kт|('(4}ʞ|LkU*f "4kXi&w>txuR=Wmj}~6"Vhc ًP6V2ZP1 4m8#mOL?ӭ>+2 28`qy&c-㪭q[*2&|)/^7Vn;$qGJYUe߀ʲ?Uw tP?FG٤!J 9)v)^K-{4oq<: OXP?i$lū `Oyeئ50-|3e1׮d:k}K+`smshmW5rC(unISa2T)JgӿG= ]_WDz!yR݉=h%hCC$ e8mSG_7!!~֜(ޱ{+|E^7smȳ19%G`l IƸBoEӤXJblΜ&p hZtF qpЊ  ?pL9Iy.&%cCG{LU5Zݵ%/2![b8k:5ҨQt쿻Hx_JA# i}2Sx%ۧN`luqpx;VD1Km5d",bg]}@8뢒nJ\c1DЎ[ X*l 7UP,Saы]UtloAI#9.'c{yg*y y vmW9!:ܘBb^ <.2Weul8$lC/"=9_[Usr8/z"X(Bxc![r\LDsrNtYRBPi"KUEXm(^=4 l{XCtZ#Ө~|/ osGN7j,,vr–ʶ NJJ(v*Ѕ|).G:p5q<߇EXtl`Ē}&S;:&207s^%k5ǍC'BL"Bv++\59rTlX.|X\CY\e"EKZъJJMm=e`k*d$#w=hs5]k3͟+%bTmfJ\ ePe':U5JRꡞn{e`.Y^e6h{\OG > .m& BдH@~%c9ʝ7,@TȮ` 0xk_SrJK@7)?.uxFg>,B/IȼQd3*xW֏BٕϽcK~5 mR~SR3x5lfca62MuQG`$gN>$(|O#:N}P,̉Cz]L).M$lQB:qo lVt^D쨈Ќ9GG?[AsHT YpU3?-@#M$Pr;nNV C)cF f|KQy=h"ULw :8,>nm6nNrOfw&H{. KGEP~HAY㽡-Lf)K/\n?LsOH}~6XOqÐ b4pϋ>G~vD} cwL'EGxF]WηGM'g2쓙2x)nKUGzyA)RZ -xTx 7pk9Eڶ*P\;"-DGqYH|g1\sz6+nu:Cy* o2D= NR.9`HՊ]JZby, 9N>}jy/ft0 vLsq̱·O-F+t8:Vj!D_/ 8m|9U9:}/cx!]D7`̲fԻ~B8 ~&$ P}' AˋBܫ#ߵM=p9F^Vhxtjc=1)lP ه@дPC}P=pQ?v^!+ c𺎡bQ M#7"$2,.jM5F<)'߀nwm dl%OmC&FZO"_Ͽ.EȬ.հ,ɣܓr!HF [@|GSe'ʭ-$xKcB&5|Dmj.᠖ȩfO{`+ 'TJUd 8} WOYMKKW)֦75$I5Ƭll 3 L1M?Juij|vp٩~{8=jQ>L|r?lƚ`ѯ #0=k[l\IGU}!_= 8ۃcԃ;`/hyqbej5d@}A;&l̬T0h)QVddz`FMcT,xas(wM5}+B _xApU@}TҮTǡQ(GwК=eEYri/8r%-9E֧[HXQ`lYR}j;48]9U4e a)G:P1+SXe ݟ=Z ū+[f3qZ1b|T.]Q"N:UP QUboC"4Nӟ +Ƚ>>K.qIژ^dS) Zr  [@zĬpݥWۭ \%Uջ&싈*: Z6f!j]j4c^;)hNk:1%$ŵsppj8hx>v1ύ;s=fGA+i@QKt)/VSzd{c@^g\,KbUapD̂@ v' ,7`sǾy.r*?<Ф0@ThwI}t%1>ycF2h㙿y|1Y5\pu dW:XR#{ku-7z:J~L}p^D$0žN-2x*/ ۪C MB аVC),?Oj)๼nG_<@mĞ'\ 0jB֧֬?׳#}KV3B"#Y‘w1ϣv+8Rd^W$N1HUIƐ.Bwl~@x쌼hhhܫ e* 1mYi;d?b洮vD(3OKTF̢IDx6`' Njy@rQ),/8`L얰{,p(T ƅvlWjÎ@fyFĤZʏPVq?iJ<쥷&TL|:|[\+8/G4'Ra5| },N[ w^\ȕF`|!FlQyVE<(2`u%Sѿ r^8#o_Zh 4ճezCqDٙF0Ìx |;Ku_;ۜm l?iGfY_I+FIt+_ OD z g.Ͼ F?ZLxgs(~#@ЙP̬o!\<=P[ |uDR;lM5 IUȸbyYf"%UMh =aw#s5OCΎyF$Cҡ&z2>܀6=T"Vɳ瑂CCv}[w}3*;Ln>$A˥`ǣR;X.d_pZ5HOmscZ~?.yy?I}@y'gjMiNy W,Du} 6=SKVMFG%LrRP@T ұM ы?}/G"Wtˌ3 ͋Y?yW1ۤ`8f$; Z\̎(`hn*%LV*ۛ?; :dLIځiޝXq4pW8c6ÖFhX]I`$Rb%Jqd\_>xD7t +  =[ Wd[lhwJ7R_o,v`%Pշ0~ 8Gu{r9Msݦ c34YuU=igHvch۠e38-K]Q֖ GC\?H>+8[I~8τ>iP7^zc~*Uf̾a K /Rɽd(hv4qPQGñIK.3JumםiXAϯI}P2Lc@X yсTirʢ/5YAabTu9ͥvRgg/7+f-]+Ϻj1h<*["R(Y2ÈJ1-K-9]̬dX80RLp <NRj"W 湉˪Ŧ2Gą@ YM^d9&3_/5,uo=V0,. QUvv F{jtQgmM*Y}A~Ea~XNd]t\n.l4㷍r ae D)r Ǜ1{ `pRE< VƖ2vꂍ21vAÿVÛv8kZ"hQ_{?/[K4Vw}怅|[X@7Is ~'*ZoNwVdӹM[*h5BeY( r|{\!+xEhZ[}S)Ic(4)-f.n9Dvu/lE䥵ˑdI]PCgwszƍ+wg &[LE _9IIc"d.w0bpwwSYB,DjYea1)ʪg{+Iⅴ]gU-8gTo(NDDfڷfPaEZw,tg0H^"y)r{|,Ǚ3<00nEbl]ԁDrգo'IdE{U ƶZ6JP"ZM, =nu=qY}l~JE-2Sy5|:XuXU-@'h  a:Sd[ZS c^G^αGDiMG=Kb 0<V$,P+Oaxm_qn֦njնjV82_mf _-jWJU6N۔/07cR _dJr%]}z {M97xO#(B#kV1wYniI2%VH.>!P!Cz3_2P3Jh/&ϟsD%d67李&V FgvXerĸ!KRLj&*'Z9@nGζd {㉁L 8>%${3Y^nU\Cr;DRݯcA ؆Ca Zv)p\+4#vv;&j/ omS/Ј'vPsGi(wNţ/QzOF)i'|p"`5V|AK^"3~(ƛ09^Ԁxq$OKX;mȣxNMG9 ]+sBwx hʑixo&KЛ\WT_ 1%*51*tWLHH쒧"ᾧ=x&$VIh>/Pqew N'4rQJ9-Q;}"e2xJӠ5 2J_=/Bn. ~Z[xdOx14X~A:.9aw&ܯ8[B]G?ҘO`!ɛXb~%f297ףįT*TWN[WVx58Hn q-|sY|JǥFs߹%vK#TC4GѮ_1Ƌ 3q`I_aZHe[ޢpҍ;H+\\U-x-&Un*gvIVx4I3Y>5.Ør7${p6dyvo]m_@βEV_ $vh"*B꟡]bg+̌/&x6Pc;T 6}c6w%Q.U,{EᚕkӃH[KDrEȳ2 ?ӷ䌋mF!{_K"H6 *EϤU^-X+.]$MxP#-TB!E.kHI.@2ݦ 7I}ao2ςͬZS:ƑdGJfltu]B7 OZz4|&afÒLvِl_\9_Ĺy6jv9sڰ93oq1dnQ|:ȑi,azרUO w !S[/O ("J7 vAPsKřƴ^[lΦ4,;RA$_GF&_2W3Jfo<%h}%[7q%ͩx9dn- (%~n{ H_O#8&|9}XDe>P=gGkCgi"A,Hǎ) %k߭1"1X qn3=X'g̑^/t͘=Ve\I,+*N//9"d5ʎ > +kOp˛hJ}?rD JB$ƪJΎIY*ނ9{#Bċ 1?9ާ@i_Cc{^("/ ^; `ų"EL%y>x[nI9VcF0T]W_oI)ȡF@إ۵ҟ4 &qn$[!!{!h(35/2O/ ae  򂑦|d%R_8(L}0)S($I)ޭL+CB(Xȃ6|9L/4<@rZ0VsVdG9>WDt\i[S8>Z+pg@gK]f`fzr.19G#C5ݴns Σ8Dv i˗'O S1~[?;؉Yr_ X׭i*kIgi`Zj!hb$)XSi,k5-C:μOz .ãQasa9|E$wؑ\DGp!EyA2?M;ĤChy/!{lp><wFLM H3]'np]XB<)fılb? A^Ha\RoX |FKb8(ib (z#)ʨc3 _sF&I8<@{1¹"kc:5%:>oz ZG qe<婢 E\%L O7%ZR*($r"!1'IvRmbA:|EE-*[XŎHd\>T/s8#' tQ7BAF>TmIaɌx e;W>7Af R+ wij;p"2-$b0> QGL5UʖwYzb~dB v}j[3$ '˦b)AY2M4צv˗?\=UK'WK-MnJitS>h¼?60YT|?JjP@Pah0F:tqHtg`#ʔ 7ߔۙIx!N j1<~B8V^O״}m8_Z@.Z^y7l!pEBlz ,ku/@pi9sY bQV6I3B` }؏ `_HM"݁Yv9u\bSBZ2wv"zvw1"h2 jMTvpA5ؗ  {]:U RxuB,]Gmᮡ~eZ`'>kB{~%-eS xm;UeٴS͠{ o*c~ &>!vehw UL:VJUyoZ}RRw-_ p7-haȠ`,?pcZi\Ä0 [DAM YcD> fM/dG^7` ZHK$MnIKCXܾKWQ=Xv>APpʧ 3aX;̅t܌S,8:ݼ6嶓!XaV-LuRKHYFۚ Y@&b ^0nڱ ܝލ:'/q5}L1N2;"NV]{:H. "% 'vgQ/-()tV8m.ˆM PvZxG88 ʫP\ $}hyhzGm.6n@Q >;*KMe<o7U"jDE.]Gx+rEFzCR`3O Ptnӆ rs Y׍o_0to;pU%9õ"hkUuI^2qiiq!p;)Cdկ^ͨ|tSN`DΏEo] D%Q.Ƥ"NOΊqsKfLxgq1bǻB: !,UUjR_t1B~Wh^ޏI>w1Y#wH,[yRvC .ݒ)W(X *yӢ-,0 )Rm[S}VC!$QIe9^,?zpRT&s OVUT¤NcMp%7.X !X%a|T/Q*?7tTA1"zۏƢ%("\HF5a|>xowDyݤ>C1Df2a;׏- 쨞_BJVƟJ1JHA E[TB4R(a g Q]w2b4D⩊j*|y= 3r\R&BJ7AT?ßVA[sTlE jZ[ =NVIN8>kOmn,qL*;A t .B; 5w (#xA3.'%@fQR :S)| Kfގ h\}­ǶYfe`t [ƹ-e^yITl`kg= +R]O[ys3M# a@wEo:V\ dM~@Uu"j`m sjh:>J[/ />FR}8_7)%Gfj+bC6Eڐ `/tiGSQK Ԋ~a' 0Fn<јʹ "ڇ+C_-0}@pP ij"a엥 |xmd[RQk>2FD3oLvv6 եz+ȗvޒJ ܉LSӔ-] 3U}$:86]+wZ~@wrgU?#`|ͅ8@{mTJ eb= WDeH1XJQ75%jSDO$';SDCiŇGa>a+CnL# ٿũQKxV}敞U8p?V_i+[傼Ͻ*yA."]3|4ݭ\O^d&dfIb,`@m@wt @>Uoc-7Ճq!,6ἵX@p:qx`6uh'Ɂy;;5FWL 8lªo!Kz@837$g+~[ z~PVT΄@[coffO|k8(22W`0"jS|,yԀZbQ1ovT%K[D\Tlu|2qᬳt!lpoqh6@E^ovj @ҪKDž'D"be|ha9އ{E9Fg)AKmݽc xd6AXǸP$^kG5c SV\BH}'-:jE4bꎾ%ck=w+s])m]i0D dƗZ>6Er棟V~ 6"j{(F{)N{)`Z|X3X[L6^}2@M* /K,Y=H_97PZ0|$,Jm Q4IokY-W&SEfJ̠TFs"}t*e%_i!2R9v0 j`߱q V \wEs?.[ G%.M\tn}w҆_G{S6Ffs:w/{/ UYBryWYοxJm6~b^@EhF@EEҫއHU^b,dCG\V79p7}%-#zrmNk]/*34,foȥ0;Cĺ ɨCLス-c @<1;3QYFpt-a~KmF̦[ΙCkI(~D=sD;-Xlrށ=Z_HmWRt gQ7>u$y q9c&#(Bq_n =\"RK @bpF[bKy18دŒ}? UՆ$1]!8:KU4X]gv53fi/`eM jL\hu9U1l  >'MճoLL:=zN̓O36 gHAawלgH0GD]q%ֆ5zE-EY۷ƃОF5ߎf5S}N[h)tM"6ݔi\UZ#]QS6 -r9ޠM^A7^`& Hm6('IܩU?h¹²ߩb +L04*fWDnjjҹMΠR;Epz0s7M ͕˧enH,(ÆOŲT;j0S{Ui_F\X}A0)ZHz m%hwPuH8I)VAXwJb=Ri781 I{{miNPn541MĽ_t;5euZiaп#lq:q7"* t\s{-5ˮ̷(z4RHXY_)[C[-_H@Oo2CtzMHzMmJmAGM6p3'Ni iWYT>MCcEp|ˈGz\`S nnզ7FDL7$`݅zalid)ABdl]a!RpF'A-Ao\m7n@>_.x[ڮ>!t(s!NiO";U^tôDBÇQR}69˛"EG¬*0QZ^g )'B5Ftki T`5O-V][ @Ŋv(S/\ xn!Jg\$3&v1!㲺1y %@RFA54u^WX3t# PڱSH]* %S鬛UQa7B_Q!IzK ZdR0 #Y1ތygAH˂9tdؓY7jw_/Sӗ0 0[@6~H;@GhBC[BpDZ9bfAJ^}~ 3fmЎ| $px >:hU&5gK3wK3n2bkKcmKX nC\O|oO$\g~e|'n1!]&qmε:ҮC!K$KxavQ1%jq,&{4Ap_$ug巹ĞIrACX8N+&*b6!# ~d]&HqRuG \g¤\x;Q?[v sOb|{g3 ;h-S&V|<Wٌ(8Ԯ!PuC\2kpZ|*_H5 Z CWG[0QH@L9=Sk3*BRS8;ĢʎқTe,Җ{FAjۓ]%^|옣= 2qB! 6^5/Т0[x}؅`5p,Ǒ|Z5%?[*1^%Ld/Ak0Kvk&6wHPu[Siprj't`N^6l }}ZhYQ18E|[!eR% %Л&Geܠ{n`w1=:kzQ֍}9yE|;Jz{*i|V,8ɝ]G;;&ufsgOiYWQ"[bb4nh7L%⯄}.B0xi$LfxtY șC)ε0xq=9Rho)?>Q1rzQ-BLY2TM U:m[J~v]hw6%Fk~` ͈H5Nk)eɥȰ(-w/"U͢Ѧ%+%5+.eDJ?؞Tozn4VR鬬q' 3i[41G Rv75W]]XoRZbHxL`&Ψi@YCwJa0㰈5}VqmE^?VCj?{d{YL|qY]~mg)]mVS*ac9Rg/wdHks`qEe+9۳[!&n,BhdOg& ,/a L +8yg_;4!Q( _6Tnn/#@QC e1zB+A[shjE$eT|5`3"0/lOŀ7^-̺1|?E*0\l%7w +]Ű;©?Uv==0LР ` uktaiFCr+ʠ/?6eV%Pj3!2D!ptY; W *μ=4[ycRkzb5.g#ryCːeuZI~$2H~Ӯ%ER =&] vP%`4j7n&%Q<똆xU@IwY>ƫy!_>bGvڹNf.2y㬒4Sq;i{X@c[!^Ε7;ѕ6UE Dmx5}i y3CKkKdӔ=2ӻ"d $W4; ^@]Z 2#]Q(TC?JAW-I.N%k^>QۍΝss$YII>1!r4TBV,cAKJ4$nO8CD r핝K^L©60&V7370Nl G:"?SG63FSYs|oxM:}U[~I:ܿ''[ЧNБ  NFksXqP6w*rlFsۿc"R,ѝܐʄ8B{kguFWma,i|SHƭS1+ן)(2Tv4 ;0qV)KUyiMʇ$}ofv1SW؅..Z#0B=4$IjN,aAWIX)lk6\ْ`hY|0p(|íXC 䫭[os-#sV sCDce@14ɭmkA PldNVCsE <}pwt87ѡ'b,ɚ97]UW#~~i5׈5ԼTmpT+|ʛCaC2[P&e+uK`>{]n2f.F\f& ϒR^^#%b~[?^+?wfYSCljDbx\d>uwfbpL94g)ru}ߦ זg[lg:4+oNs,y96#BdvD "ȸ3!ڙZzS8;S0p-h P:Loa,k!063q 0do0sʪ#%N η$%vF2/*,>`m+h/tѣj lvwǷN[Ps+k*NrY12!jYkAuEC͞(muv*1t2KLx}JB=Fb:4A'qϋ&!uP%9gܽTbͨȁҚˆx,\Zu/كcÍqSkML 8󼠽:ܚp+mDjZImZ3OYv"ÕhJTMQ@úeMSg8AT߱M?y8yJ ^3l:}Rl7FajֹALO=ȱ#:ZE'Co1傕59հIt ,e4U 6)T]HyA7˥IXƯ"?Fb,tM|:67[jp/UYl1M31awg(6Ǚ0,TL`@S !_omgJ#"3&SׁaN`>Mj C7>HUtg E; ^ 2Ii;pn{$kOL&N@"3 8 ɬHҝf`nsbʘM^=xѯng7@c,:DҼ 2)2+q╏;`r <B'AI5ҧ 5 銛J9%b֤{m+sѝ &gx EH t5@z_^=I"ad<{~Uxy΅ qiABe )c'Qtsa XOYEPbP[:5;/}U:|^7p̯k[X%kwYbsbժhx3̾y [|pv{י<ŬOԦ. s,N$T .:y.f>,=(r/^mhzP%B_Eڃ 2o;23' Sԓ9L&xTޏ**$Xjݰrt#,Fq`[ )a'3:_MM]CMF?mt1Az.eFA輼^&8(+=4ٽhz}N~[q;>^F %NԳfͯ7Os AcE=w[VRΊi7 L@ |~Mr{`#,b~6LD4}ĢK;QqؘEWٌ-FlaѵrL2>q_xniхN +r YmSilE8K7RT1A[7N>\^qHHāڸ(>yEA+H_ESe9: :[?çڧ٪5<jQۿ\v C) ^\Q5YGV#ҚnS<]R,b}!6Qa}0`]+p5`H#H{rSuZp; \ cF1h¯伪0[a34$  eA+Te_`i26b,x},<`oXu>%g~0HǪ+z3I$C.'gך^4%meh0 zH`I :gG_4)l!RfQ0G^,]ؙwc [!NC1OZN"s R~,}q5vm^;ASF<08n(IxV0j1~ ztbB;`|z~3$C`kJ),})[;6#Zs/cc 4d$!sKm.qi}.Cՙ=8wDCD;.D$>x.9,a8*/Z5E M]{Mo%eO7-\'?WX̙ys^a肯]6.y1r.g1Th*\Yi]R3CwBF ۀeX[D|%h-K4 9L,N㘘Yp9ypqq 큲@>s!!s5yr~R `*fSyV<* 7痠tI0td, =>m~;/+>籠}P|UȽ?o@p-#w0K"GŰ#%4waЖ!@cR闇yАG8/!7&8]Tf̈(2bx_&ײS$'DoJEjH4\6J b!EEj6'?~J˔N fQ>ڝuSvͅ"WD!:HkO/;>YZ`rLsB:J ?Ng}L u:ܡaꐡFdž8x*B0I%+t@*fAR؎϶]a⸰@Vu%dIFsU VKdDzY)AKX 3.:k?\W0C&ş/vj52)Z!!}؎reֶF-]Dy7ZV bp3uYPa_iNB6TCF~<ɳaoƩV!Bݟ7w>*[buOyԤ5VmIMxe M؛\]h2T:h?1NXiS6΍bPscuz3wCB1 RsQL4M2XpMtMZT5#adA}Z`-/ziEM7vkhG#(t V/imYwd[ eQmilC#6sU8"X?؟uR[Ktܙ (TAȍhX3T81hU:WI﫫 o4iU*l}#w Q'Ca1X]lz]g҄W@OrAWk;9& ;T(Uc_ Ps7>kh(ך5}o`KOۖI-|=27w28 U\Ȭ8}~:&rbhqa^QMChӞ͔esGzWq*b_T7a憛ǡẀؒp%8 gLsSpf T)۟zgU "DҨv4aüzUpN;,wdԧ|ͪut99sbע(8oC^ˊb(JVn)OQѐ)̹NebVUk!GYĹ_G8`罪κݶKm% ]bf%* ݘ@s-ɑw[!,PjAK~b :mI JS#OT|2?G91XW,p㪻}d G'^b-W6ߪ0\&-ʔZd6 +W:)U8^<56FѸyWF)eW]rv frRQzJҚV*li1jc=&7ڶ;&kjqVb#]YH=Y.86P$vwƶNH5}ujT^[[*P"BXsFMWnVň9щ2\]C1k%`}%l4"OD [ dΒUm?X Y QS, AWo>]\X] 7"*wm8ҐM WUW'babm':1[|$D-:|cjs| GfN +e5$S5(m4݃ڧ&v-cj:R@ T M/5[m #ԊI?{tIxloV_-减*/@t<5E#˵x1ķb1_Nv35 ze;o1D%ȃ c<#hiS*)xw;xU:6\Y$W џɳ^OHV.F0UoHT v?@G, 7Qta@ɊBB5RN F)V:N$Y%7_8,^9١Ae>FjAϜJۢO27pq\W>%Un׉& H\ zƛN^Egcρ+[(Wȃdde}d˘{:SkT)DшN7VXqgM7<*sН3eJ='z6nԏ &z0_N=3DU\ ?+Al4FE^r^6ZF"dcM>]P{|&-ֈolHDy \gsT挥cأAam^Q)o1I\qvx¾T.JS&}K%VU_D-=G'|7<7GT\jdi7}J3,<`Neܓ{v]slI0C· @aW_(cEI!Ԩ!yDd HyNL2E<4^,ʬ_U|^r> ]QB C-M|΀OZPH aܽʒՖaIQc!ʄ^^`> gXul1q]$Kge#h `Z.Ұҗm19QTp|sdTN(n%cKstRTv`k}|;߲ǀ暤!>xGi#W0ȴ*iQ;4`15B<օG;IʲiKT@lw/Yz 0/=@0ᮦ9X>+;A)Q{NWsFdN㟓K㶖t< E[<*@)?cg*F`x+CȨ)*J?euk1Tl=3ΩM}Y '#;_cToHUD:h.T`q]6n/PaY&IIe쾕,'W Y34XҒ vԕӬg,rT*j 0I< NaG kd_I/p џ۔,&Ӗ&* 8H|TM9Xa}R/ᾭȮl6_΅J*82:e՘$7Y|a.{!M9;ҊF OJfE=6;9ȩޫu鿝(p!̰+- ~ ;[!TqU4)♥I%̱x< Y_$T_PwXATYV=d M/Q~q̚6F ?<+3r WotUV8w S9YkR)ܸ\49$Ńƹ-J!,n.仳x QQSa2@|yNNfE5ݾo/í)IPN)6{ʌv3->b]Xt)&x~h`2*D\. cKۓo5 lE`GQ4#"UttTCbd¹*ρGt}r}PSo,.%ڱH/͉0 4 Lpp >ORc LiFx ow Jl+M.OeqY>e^*Ɍ4ً25f ?&USz?@hɾZ {9mZ oyb;mv'OA4 ˣE~d>:Hbm7yeleeIinj'~/%̯Rv#6̯9]1:~ɏWQx/@>.!A6sz#Mv_htȥxqa3MUaT: !'Mah.H۹`z|w*{v- H@ IXOK:$wuGȔz:yo};p&=MȞ n)bO n< P3݀gdxTcz} Zz890 m[hSp6y>-MLXC_Ě+/- 6W):SgIE /8!¯ٜ4 "È5jw[Pͧw;p(+wl-3.͚Q<%)v*H$KtN4\5~͒WYh-}]ݤ:1hZ_n+Z\Yc鞨:?|+ mﳗ1槡C `@&yC!q>g4CB^6x1`CZ$LVl3Cɬ 4g(#Nj_*='7ce.ҁ bխ^ kw2♫m QeێWB$u8Yԋ2n z Mל+ԼiR0iU=4oLq?}^+00z]ݿ;RHUgHo԰hhғ:=fd(, rX^)i5MQ#yCd{qq1D8;> Z31s$`&{4rr 9zH?뉃^>Xm1s~ *IeE,.!i/KiMVsKR[VjEِPށ*>TYK$HM^Wʖ$bPLoQ'FuP˜ XNOuPd}r"h.wZ[VX1؝ C+{#jřݠe%<8+|!К*|"3[\xz]|(w(wd'rwAT.49ڧbuV"ct6ApA߻>ݕ : LmMLn`f*)4k[g9ѱ8_VͤE%y]$(X-6𢡊 # HKلj~ms\N0ZjKqY+ś Z vQi=i-6 @4}M )$ XMuc꧝XJ֌WJK֚lr'j)>bTub8l0 OD_CITb N>Pi[/[eXD3-QjNLm.17[2x0o3bU 6.gaVD=6h\uκ+벒 5B3R"0N5=-A Z q:s:mrr,bGuwX |WOyvHNJXj{dU3q&d6snSG\k:{m-ՐWZ&=A!sUʋdn×L^1%;:?'sީJ$\GWnS ^Ս9͠Y#ޜWX?I?җw8A9*TlNL˔A1Rb>?σe[r)T6*~K/LiMF+ȿqZDxƺ[#nEyi_I*SeT\ϡ"u$D{D254+Eŏ-;;(-_N!O\,h)WJlibٝ\>3Q6CNVy\91pw$g>zABϽ?lPVd3On.@B[4QlU/a)C8D} N(4DCI4YKӳ1%XGڌ%j*qqsQH0*ArNu|qK$rqA;=ygG`WiwoԂل((>@u^VP~X0ǂJ$Ʒ^kl! Q9F kǝz&T̥!0ıy[\!+kWbLu"x</f4ֆnHAP7pη?'ăWf/X{D͗b qQɛNlO)&6b8.GP="`xr r҃ pi AGқjJr 2${P}X~ o^-`3zQe}[q̫Oਣჭ@t"zf[3KdU6Bmd[(|afέdL!Iuc>}uʈJ7+d7O U49o?\?frA& ˾&kȺrTTyq-?|A#|țM=Ss Z%A"O>ӱ4QQ]==,%"ʑn#1om˳^m9K ^<k W"脕N(i7eE s0̴]J$o[7:J׭1K+eæ2ysS}l7qgߛI^FKuF6z/a,-"L4eӢK .D+i ȹ]>-7B61 s!Ctfޮh_-0 bN!B<EZ|cˉ+Eʼwhg0rCR%z\BfeK a+_Zli)Wf4%=!úAHt!IUe؃^1_ek :F5H<[Z,+0rGOVbzy%-fVvCQkQtF'y}$̂Y+ X gmroO=/Pa~')&|K .%YŢ %rWRCtoyy~uB4|liO Ԗ IJn5*2(p"v&w۽DM{(M$nW3R)'(/qXy P4-U L.FXFCqhk@zO F~;ה e7JY8u$Z3=5JʗD \a)(觹β4u ]QYEJQzݎb75VXmaG~8-RGS:I1.)\T3HJ$Hх^-+aO2ϯ%s'f q@iۥ\ LEF˪u%&\WLeލqB ЃJ=l_(R0\wvry $辦)qJeh4~JWYKI\17$>~Q)tfh;898t2 ;y7Vf:w _֝i8bp}:K{+g˕ԁڴJEW0 d ]RYo]{< +-4 pz  .3cRJgo$pp,Cp90xTOD)P+_sLu+3j HhHfϊ 椶VW9ЍmX՗fFST V'~|,>}Wl7q5Z7 2*P7i" ox_EëQ=f#x%ܼ5>/4%}@15ԅ-D+}aXϓ0>ӯ|7jgk2Њ8fU_|h!O)3Z*rl6hڋD2b)x3haiw:<0蝭b,ڌEq%(4~Jս6c}9HdvP׊nvC^Do6D8XnY:d*!;5FJy6 {q#+ $0ï)T~h6&3Հd\Syi8'"||[3-t<.&ȸQVJ.l"j/;,\6(q,ܶ6g`.=__@IPsQ0,jf1Jgpԛ'}N㎠_s/ά\=2УRH7g楝y-b DBAdےڣ*a+Ni#UZ~Ve*VuEA1GHhiVtܭEaIɣ J|OU4"^={]c;P&s%@FWC{xQS㥰/(ˀ<8z2)q~W]ٹu\qS(/+Zs"uw[\p~<&reN 唍~0j 0ۛh2~D6n==AB}TCc;<|uWӃK5E7^x9רՆgXdL@ܔwqrvo @zm쮡 X>vv^On Q~g՟K̅<h ~bC۞%-cO+(a0Nz{0'kѴyIo2ʀ["5'i졩5J8\IeF0"Y>n[#3mO:+R`m֮w2H`t@qc-$3A8SE_ݮ) ~hm(]=Z#KM-@o < >Ɩn*y%Rni@aLGSAn W@uG6@^D/Ͳm]/!x?L'ȚC+Iްm޹>4%RjV"'Yp.:0Fي½wp.t)'Tqw]WJX\.A~'5K<;g9qr`~Sj+-/2ӴT[y׭3h䄘QQʉMZa"|Dn=]Óܰgw7+%M  ;Wp%b ~&Pv֤yVxυѰH)y`R(R ࡓC{śя5NKLj'߮A6~znkǃ#3bQřNަ/SuѨ^TK//;~N+lKO-GW%ݨYąy M% F&R}C&XY%5y95&N53 s-<~Nd?A;C xeJH^ ,G3ۋsQP9OUl6x&xT6t۪&&| c^ 0t󴊖> AdJHA8`+c]&3sɼ/ߏw5'rUrWbYP] {a[F-a3,{0 [ױHUϺh!y!dd_-xOp1u8Rp(4~ _tp|X\OԘȧEPh+ꪻo M~`T8k9J|Gy'/A\`gp֪F/Qק>#In$8gx?QAagn[Q Rvgpm“9jWh#SxvH}PM,8yRauTqgJj\ey_3ne:&AɫLƭ:'*@dg a#fR G3hf@#*D+R+u8zg44 ^F$P"}=pztF;r D.xp88 =fOR n1A9 3Ý}b"u7VPgE(䍩 ҝՔ6\2j+sN.S q}k,@J78X\{l503Ʒ qn-"TM=i T=C{.A zbYKN0斡 x h+.oMEc~BZD!-Û!93N:+ bdoic¶9pg:DЌI5+c))Q@ho'Mܣ;c5BV?P;4iPf5 ٙfc&|+;$Aaຝ ne\}̰k <$EWg`X5zraSIQLwBT_:E0#r1>% /IKjR9>ϣv4(\8ltrm&U&Δ 6<)|Ծ:6D*sk06ӾE> y&4]`ͫMܽݎv0q)\0t.qW; ]x@T5Dz$J; k1>fQPdG p)wFk1 x!WЁ\"Me«>UtD]J (F1trB< P˝1=\w\ZumuNIPZTtRWY%̝cAx *9:q~D hp`׻wed^׮Fi( O^cx0[S3THҌzܝ=&$q^xwr6@ͭJq1Yã`qkĪa1 J6(Te-H2?SrZKuE7q4vZōVXx&|CRގN.L~Ԯ>O<Ǩ8ZP-Nq=7 p4mYQe)- dǾdI\Tb|o]*w}D LVNh>qWK ' 7^?oġy_ WY{Șyj%ߝYz{9)1aKURXjXiLY%K|.cve69Qy=|H+7BR-|@Dzgrz5OԧX@:Zc>Ғ.f. iRI V9Ӭv)KJ4/wG< ]3 80"꟤*,+O~Sb-^cNġ ܑzқ>C{oZ5v6|d!߉NoґXt\eN<&f|Y~ ~ė _ SnG,%: Bf8rLf ^# <Q#-hhpe"a)Wcvtذ'Ԯp"IZHv}@'f݂K+(FYA9χI'T_R_ $uS0p:{?,a4-?eڥ}'ߖH,Aۑȕz8\o L_Ky[]0^bm0>>ʻζp;U:ʇ|$¿rZ+^;څ]:}$+ۦ͛VDWqRȒYdZEa61ɀ #S%ÓX}S=Ra8L+4R.[<ݖ]8 OCAi{2 yVshJsmN[.PJc=t,r2E]. 8h"b+ؽ/fąޱ:^@J,7NBpȟ3 : QKq82w'7!,RdRr3INFJmt#'p?us]\QRA|gd؇?^ćGcx7i=P  G:= /WDXܷ1􋮷.M9-Mni9XjB%BK DY/)bfŗ[Ԍ|{Ȧ2E/V^Bѧ84/h% Tk6ȑLhZ.N`mhs#"J)$Pzv)}va )@ x4oF9mY}AbgfDwUk%ӰA, f{T{%e.:+01՟ 7oA|&,B,3sy:.>ަ]ORs@,v]^,[] gtmڥNG330Sk85H&c/х?l3>GQw8uJ@˰w$JKvL1k`.U>]M"n TjYT=-?3l/K@wh$P:{Zb1B'J15Awfy 8yT土3~ItN+ΈHM7*Il}ub%+:q*\omuΠ=lHu0MFV bO݈oD͘5Џ+|`XezBIغX~P$چuGy") σDsȐl`T]Dĥ {ϩDG0_664FDf>+;l'`+SpB-M34ZwaŴ2t 7m[b"T [$= `z%Ž[^L]Yg=9hژ^Z "Cx.7DΤNF5ڭhZwS˸ta< Hu1X3Rmf0C"@aX@Rue)nF3=V ͭz&j=+*RЅLyrOrj_ZG@Q}TmYA sU=t' +NRGF3=>6),`!=te"}OeU)=!g,P:ѿ#FB=DםlfWʅG>ItF;au+`B΅^7+j[ٹ(a$Q [cnz c {EgcL_Trpᐄ~NJ5 DI('L!AM jg2|fFHz=-n雎B*%+Ĝ޴9W-7Lmx^+KK3HcO1E \V liGw#i[C%;p̭0Ґw-i<Wu eŽޮFRNBBX,c(i@,1;l]{9gVȸOmN,V]lHl}bX@*.N_u$Y}[?Qx#dƳݟp^o-94n xuY$b4 B9y tIc9ژy:;Mn ReXM/*zor,^tG&8aG%W|T(D5K~F V= v(.MKB1~Lb?!w6Y.Yxsi2=%w _ 2; 󁨓qϊq. { ȷMwoWD|0}9)i#= `0Yݧ1H4<XpO*Eۦa~0Ȑ015h wg+SڐO"( F~KjN} `RchvMGF1HC%źHIyלzƶ !D}O) 9$8>Qo_%H|E[ q",7﫺ԵpMbZeԈu 愰sz+HU DS? wh'ӽ4-mWg^7#>FZøօ*c9n Ε [lϒ^ѮN)$Y3ulyZa3ر8`xɏNCG%Iff)&G_#kMD_x0W \Btv+r"o13pL mzɊ֡26&r`HO*2Oh)ʹϻ{u?c:F:5Y")Čҍ5ԶwͰJ:|Zp%P}㏷l5Y>ŇCeMR)>WH)&ˋvZ+Wt9" -ը|nB$Sw(\sImnmxvķr>N! Qywf2QKӵYgҙMƒoVe:Mʴ:-V 6˛B wh|>'ߍV N%zJ .&થ0NEuv̋(]1() 4Rg=E<%i!LϲMKu#O]N U&<i=T^؛`k~E{NR6f}3^W?' $=Ww͉H8,SMbi+Tb$5|qu,<3:$L^ wfhͷk#ˢ^tvX/tn#';Ny{ KU|{~1quO΅ ՜RsqCbxI&5$g`i--gG[Ţ+wG'LN?NYܠZy脔UvHKM Y,B|o wߢD0 aݙPhq5Ix'`L/](}P/7R0i؈0'Nf% xsU#A6]maS!P$>Ud'V #DW&dcΊk}c>ue* uk uKMoJ F>sW-4+MOLŀ[юqژRCN_AIv m|2%O*p%c,%3Uj"s2ߕ#q8EQmT@<,[D9IYyME g7@%C~A6Z”c 8e?[v cC WBJ9D 魔Ո esRܮYt7'%KIUzo&!h[G9 #MV! >6 "V $@/GCc9$7x^2;J:_q ~a xN藃%8[}pn.Y3v&4`:`D43:H ^YBgOL ce^)@b9L#8Aʘ,a^R8VXW A YۨܩT2ւE:6bMuX;h KD9\K—jRE-Isn XjH񞳜Io ߫O-!^gUOjY#%"[z@ʥJ><8O$=@4x l0x.k[vյmL|h<^`CSt^Sf0^8FIƧ{Bx&< %Tvz)B5`]=-)St}Aӑ_%n@ȀB%-kҦj&ީaG*#8^ [i":yI WUiKhM <J_ m7"@z $&aοXLo[HR*4X؟IxN̔5+_xҲX3AX-URc"I4\є!!4zHC[BMK2R] ]b.74qPfRe1~1U*u$ۿTxNK.I?6,2Bkcdn<-cMBͨ G` Z&_#Y(.w}Lv{wXރIiA]C'upb/'wb6oWU`džIl=yRL9Ѩ^v j l(rusxLr~;5sG,omJ1(rvG(쎽*X kwm9/`5蝵8j684*$^DR,6ȯJb v Y"5շ'QkK@P.Vٞ " UJäkrw^m4P^P$l.h )Bo9HT9 U&ÜMa$wU6Ah8M*7iKx9>ݦ.9x/ `ڼA m& lz3AىX3,M̝A<6p ̊k~{q֐q*C=/س͹*K:Hl[f3m"iH.rDFǽ mܝT}!19#!CʽN1\Vg2N Dunr58m,GL2l'KHBd3V>[ f ̂'+ams{=y56. |ʕ@4 al i٨#15:zny˦iyP$'Uz?c[†ըO~u:-R" QVzq#e;/3s[U8@:FalH>;h%/sc8DRNW[S62Iԙo&sa52qdM5rXMC0SpJ킱:]xY\{ƹ3gGSv% :DT05 v;f /׀L9̃*0/œ`s m/M}M?235m:9totJ<ݓš`M_M~a)k56e>9Ⱥ |`ASsإS#X~NٙC;W,wPI9ּ4m0b$HhY4[.`@iGr[GYIjwSD^kE,)N*坷puOx$cmf|!]Hg)ehlO:Ʃ}T@g{sm?hT.AeLGVfWUq95}\sbV01]F~íЕ 5G\QJ̿.AscJ5ot kjԲf5Fy}pJl%m oClָ8{KPKki#)&!MU^s-8ܗd |V,ye[\5*]h3H nØ!xzmy[b޴ͣGDosHU􌴸"^8 ǯY"*@:@r#:õsKP(M7b0!o,gbY\'di<@+teסAژ + *j6è0353|i+v'&fX;1]M ew"d򊛉wI.=sp):;@pCzP4ѻhQ/&^oP(Nްr:m~>U0`d0#'ǒ<`/VoTiz Ì)l)Kqd6]^ >V6Мe`ܒ }CjP8KiA2u9 i;W}inYcşUnXk?(hMo^㉿|K{pI }qI2G~א^+_ 5cOԉIˏڜJ:3b![x͌a:RXrxhV,9/u>s1Aokߌ%j-x&ïS3 Hb ,G=kRbm ɶjuk- ݽ+fqEX>2T I-~Lj*.NވCЛ ?*]B1m0};8|Er )` hqc 4ZOFeF͗[rЏj(Dŷ:fHϡsOFm{ŕo6!=a|Ƶ/b5Uh=~ȬNJĊy_sp^Qn5d}Id w#+޼KMC J#(j}yJkH:."txOZRӫ}4H9mj;_?|5̸,sPŴQiEn A3;EK~TDOXwiVlM+y=m(v1łjsMO鷑bfӘ<`:39cNMt%v=Nbmzwd]SJg#L-*c=no b<c ƽ"f8SYpWol-}!vP:!'ti̍,^lwI>M!DF!faw?Ղ-5 { N * 2MKhm:D_ PcN)6k_ʌIQ`G_\-0&Pڜ ԏE#w5H^$1ppx5q-|?olt 8⋽*3p C[:R,|Mt7vWJ9tK*܂ oʃ0٧ݝH|:H2!V1'1Du Djiyw;tS%؈f 0OAhs/k,l1xUnI/0ٛ* .|g.7KٝV<yh3ӋGp.L DxLڅn[xpps`R !M-m@{B E"X1)  @Wr&"Ҁs0f y[s!’f9,7͂(ߴG u{#Ј_ eP ? 7?ĂqRcis0A5}7>◣=x~Ȅů2Pok>,q!7M_ ZM`CI9qY6%v]?{F9)NGj\Cz×ij;@~: oL |k7ȷJ- GD[5@'O1ʱ {lQٻlt4eFǎ!nC~zwwiaKR{]{ݰ>YnlAG6 8gƸZ׆g,^O\E8Z,w"Fa̳Ϟv@b^YW&xԜTI~osg?|Y`$68ݤ{ȝ:]mA΢ }Pmc:hHS4+cr%kuzyʦ9ju@\Ld.NPVθѕ0%wCtڱ N]Ϻu7|?kFMAkcL{^* ei,ԅ9?ٻ&!=L !q0U2u7rS#`][BX=]5ǪL#~E V9ٳ8|sCBp&S&7X;"2Гkdi#Bnz: ".% x#MtN1 χ؎,7v?snǝ('ʇk%M1%:AZEn>5t,lG߄ j-G ?!+PzCLByScU .oږ0/-aOs+;igaJS :Nʓ)kvQ2ckh\*W^[(8/>LXD2u&9jEȹ>uO3rɈ{P'<O4cm>2IZ.rZ0=cnH,'~)6r|u8s[p0v1^ԋ_ (vZv/Lj >;&6; R^UL`]1= HP _7<hdzCp*(=%jXM./4-MmT>jCV㚝UoV Ģlq]cp di [nxU| Ov> g6kU-0uR S΢^_=/ ic@u-]W ީ`IA:^cl7ZVڻ+k!s>Os6%ZIq{xX}J/w#Q]vxtԅ2+@")ȉ+xb1GGe+_5jG Obľq uw?&30f)=BnɻSAO\NrNzlZtE,~NZa=._Șc` H~'B_i<2}q"bTA'kAsJIH7@}R%oo?2((nKHFk+5m!ٻ5ԥ7ǔwyɹhDN- o /JZR )}AQ`aD@p@eE}N^h.TϖԔ@ [hg aܧKW1~325[H-&dܖ_ôMmU r83Fg(tyGnx&>03Ԙۇ(h0 `M~EPTL;uرJ>"K-頃jqŸ'wzqT̖[\k}>r&R #tEff4l69/ : Eth!$V2a'ůu7U?ş~. f,0x>k"G?Lcn'ߜFc"D>פ $B5pt]U>}E`LVr̤~U%C(Hה"@ߋ$Ij B&X&k"Rq:Ly$mAar6vs?cqu'3Cl"UPށZ AF ٭F.U ^&ݽ_̧R;@˶%)U_LnR] Hn#e+11s>i=.\9?F̢^9QAڇ Z[dfF{29\+H76_[-ouZi Ӻ:v't˨\`跩T\pHm{ >LVS@+J ;Fg;$rN<-i"(_:Vsh t0\]sD Ďl .^ddr{;| ;Z ` f-NNA;*wӿGQPAmb ]_#"cV=ړ 'BK7FzYIA$8ePZ $[wVVl3+ QwvTDNɡg7XT BMm7t터rdnZzG̥xGt")e ǔE~M)-rXujV{rSbrm5*jvT";C=l1lG#b#%1iZ1}O2) њ-C6ITW9j13#bo7ecU6v.2O=U i*u *YRLrsb捸ʡo9l?/I3VZܒ4Iْi5u#DSN[&!Sfas3ĉ J"HҢ*t5};9VG,oN$IKNL&}तW 9l*7}4H&>+M;0hw[۵YvW\yP\Cَ4FȾU6.9tR7A;_fHflVϘ~bF|? ~ouėju p%v9 <[kTvZ!—Yk76M6(3V*r7s Z1 5cTrfC'XU,ɶHx12 2w=r7y65И1!1alB2:.rVVb2KG7O1@ת&踩cw34@ZGR9#_}8R'VbM1$71 <͛f.LI ~>=@ jVfo>'G$o60P 'vom tj4op'K)XunEsUF۵$m|/z-Ă%xvN7$9r?" 7ѐojbu<@[A>?時dHs:NJUzzrStд# * ≧eR}@ȸh) ^RXS2Y;qTfKvZ!@4rH8JȹZ k%!t=ŋ;A߳K̽wPΕ$IwA+3PHRn[ SLwYfg?l^ ,;0X}pm2ȿ9dmG~pڶR6c؟W4avbܑrߧL,;?q6 BV<<_> Tu}yΖ"2gÅaE \=OYE \`B(V18ʚt A/UvT#iӒst<9f2zQ.1,9b=.Sd$w36,ӰT%`z !o1/IUf/5$|!5g6:ǝj]Ic?h]-IRg/״níoLH!Gj -Uaβl 6CudpgzMYs՛}s2'V $u^FRxuzW@͑-p0_%ʝܰNM}bIDx4̾Nlk:4_FXj3ZK  %P/$3Mv,l6CD֞=Ey(xA.L.Wؖ/{Z|6Z=@tSXmzTGq.:{wC<>b{e1k/>ZtAmF?Ox5ecShV ?J@0Nh;#c_ټ<2UcS&;B f1|I.5ਲ&#U'r?5\N(-u5o4E~b`iٽ{ r0PB'|3\}ۤ KဘkȨ_`{-LKi%V̷zȜ™LT8l+xBju-09AobE- ƑPrIS\W ofe*A@SSyT,?^LY'ܸv)=V .I[^\*ftK.+?_f @RߧeL,J]Aqm`@a5kJwvv!9OkJ=Ӈãls(S.U4AT`șf^ d6R}CeA5#Iv1FQAKXbKpALK+SO#j7Wb'C:RmYᩎ+VV@6F>uȕ<VOks~NofI%*\X\e 93 D (qg,e|b',Y3NeU6nU0 N>7䄋ŋzԕ9n2/,B# jN@O@kRp}'$6G2z_әgfOR޶0?lf!!ÞD / 2t6VvƏ'_; 7ɑM]Ѩ9YA*胔,s#Q(EԘU$LOh^4עp:WÀKRA oWUGjl'+B(rLmdܙ~ă ? P@;+OڑQ=7=9r ߗ@JD.):p pJ@ޝX`ӹ靸RWmkpujY&K{XNtEr=t|~Ѓ~ue[h/L [F9sls̙I!D}P1 5BjN) 'PU.MakwS q|$hDj[l{L$MˬPM|(on7$ܔIqX2jyl\fMᐈ0p^_}]Њ .; !8ØA=HlRcGE!/g<0, Ԛ']|T?N6{Ivғ,r~~ GgADhgBXd; VIYU; +29O/ ]G;Ra9nlg*0wUi/зV] l9%x+ YyΛ"WlS{ ]7v$t=ủt׿kzUE=\S-xbP9E R5 7D SIV_@odiˡLylzcg!/WyQrk -ku*qdO^sȔJGn+WL83KjeE9!mzO_O>o9V?$$k0to*d4uBBV@UIjs=b*#Tʶd uҔZ k(̩ڞ 3n9qNaglk\CT UG:Xd&EAIoF=@nz!2(NLFh\?})V:KlA)?_ڽ`5Oʧ3H7S5BvRh` Z, a]V騱? Smm0lVi"rⰌ3,%>w$aLRG/k ?Є+76Tx_]WxMZ_}^ρ:m%aSQ 6Jܸiш K($#fxpVcZϸB炾^~V!p(ʧȂ3_UaÓ[@FB )oe+h$/WRW"؃fXR1bU!(Q^Wk,Rz׻ sNui.\sTD;T/EFbsq5uSLn v xT?a'He2j8ހca4ehx1P鞆fg}c'oa,7o5aSp8yJ(;oZ_l%76oMkY0߳xUC/)S $z k{5 rp` ÿ/gtĂq6Ű6cGbbچZ1G ",8pHG ]?Y0 A^eqCO o0nhP:"YSV2z~X괘_ HµİIKދ.KS+uY>3MЉE[)([Ng lVe"kX) t>!+; 9-l6n^XbRP9%xdcV2w@u",Y^J`Gज CO=a@'h K_.wcD/ŖF&[qI3 ©wofھ{崖y C2)S)9I(#;"4ʿѬ|Bԫ_ƩG߄[%Pg}}A&@km$bRfNlWoS&RIYQuP~JxAgdh8CH?l`[*Bg[kp5b_I =X.,yk70 '?T,$ZѣJٌz/e(G0x"  #m6 Hv"AH;GsKڦ< / M4FG1j:#)~Btn\4KIwʮ؄29\MN-V;"sE/tJUif'3x4 {6-fҦK֥d5o.΍>3W&ƈ:|laؚO^_y  b ~jVy7G immU~37l,.y C,]1o fPdi:' IXj=P` uc ?W3?R}Ol?~Ȗ"yޣAt?r1RWfGӒal DL:W g0;d1oj;OZѢzº8 `qtpOxB>x5ݦHQӨaĒS0𪝓騇>a2l3&k>*C$\~~C@'!;V_6CzK#1\͡aAw2S<͑f&Bq+yM ˱dx-$)`N2vU\Hb+cd*Uۑn 7 ,Ypǘt K'dKx)P%Ĵoخt2Fb[@F7{rLUS N<͏q]gq=qæ:Kx`DTm9|9mv'\< 舭R MƦ-ﳝz fE0`Уy'CRE&#Ox߆A͕㲅9B,x48.t^8a/cp[I%dIh!p CN~hڀnhkȠNoo4 zj rcF^j>#ipJ(ނPy@ יԙd{'Ե"J}#z>5V$/K~[jd`|!lAKJ{itn e\5Oڔ\/ty+=\>Cb`%CՎnu"ygFC9%J3p5EJiq/AhXwꜲXgk:+\ vk4UdN4-vMCxdku \/k 𨽺ӏ$5UWu@^xn鴥oPiDSIi=UvJ Ti[)S!I5LfKDqలC8 3G `b2&!ImPHMZT-|o'ِ1GtB^eZ L !5(tܔACKX0s/1\gii@3!YA`(6*x]SyB q?I嚾ё :A` yܝ?L]lMh+(abeT͙cBgN>OvȢ-<N=VZU32!{BbW'K)&,٭D=K^u9ϞEyۚ=•4$#7Y\*Ɯ \ DJć ]\4p`N[0Q وZ/Pؓ \d`mUUS 3E/O>F+C*8;4"4,oJvUFQ@9vOv*! essKDD~ NPU%c?l*6>%ۺ̹|: yW9ys*Bv{[F4#,kt8$d^&RLt^çuX^r04{$?g.X%1,ջdS [3[᭬`˻VϘ|wm٬>!Dku0=h&֩wUn`c_iZg@YK:2`z_t*!:IW%ؙ3ux;6 !\Z52k'oE/ n7y}J$:~VÝbhXbG )BNgH)i6,pЀW]r*JIP BWT@$}ᭁȢ-vWwPr3!]ҫ[XPGY:;CԛHm-]<[<=[.ṵ&_3b"kH=Taqp JH)cgDLtcOzW ~y{i%I+{[Fg4%7ʣm \ŪJO)t c=a7kR:B2"ޚvpY .ڝfж{)o& ,v'K<_U8EC Qzk\*I [{xqWa f |ϧV8TLaG]~m`ql6|Zx2Z-ILh> XJ2 WY_K\dJzM 2 cLSg5ްZAPIm xddwL˄VXt/jk\2; .ը|Rq2{M5]MtJrIm9e:E"ZWp8<*8#A9Nnaw{~3vef nc]{CL3`c)ݛŒz-6Tb:ޥRx.̥-CkSd 40bəTg\ "H, :KqH'om]TP^wD#CZ6[^Wi-OY XI vU h؇}Kޯb yZvѥF3iڙbpozoILSzvT5"0{mڋ,`ХC1fg&FgԊ @v&&yK؈y%#u \^9fCRI3`Y糨hޟKCxq ]7DVtgզ 6cc !M y_1.?@X,9@:ħ+Բ|_5^OIy?@;>̢6޹'Y\'#3ƙbspDbj{ʏr?^@tґ|Db"cu+π:h7 _2!a*F ߽y*CV!d:]ր6 k 4sO$;KӢO"*z>X%aO*=BZ1BlT7EWjqn(]=ګ)^*agP#` Tt&Yd>} K ~?٣j 6(֏WM4AZ藯΀ѸD͹8 WސLn\M#m̊(Ar9B΢e<'o:?ZMfyKI8_i 4K7O  ­v1d;!1aMKl"13Þ@p"AIe#VgP6me0jĊX|'}CN%笚a^~Bs3gn]s`'n+mڏy/[_w9$bjT# 5#&8pZ+N>KW?b%8cӂ ݥaw$iZ6iJ_p3W )ٴv}0e.X1kO3~MKf[Vz1&cD̡9@q6B8 J\WFEyq؈&7 muG4AV)wĉQۛȈdλTH/D{-~4,rhV]"#+RIA_epd~-9_ok/^w+n%zzIPj=wN.%fˀaFJjhBb2Xf9Ҵ~"S*j 莧Ud9*gufhͷrx,_&eNx^E*Ye9>CP&ˀ `ndu%n^ SEw y?ϵ>%z<|?I;XѨ#yؕ.Yx+1)0䦁|G9 {9S)AIS|_?sUڐd Xف`&>N.k*᜵DW|{Ӥ IQN""5T7 RXZFX#yQxZ*I*hWj-:ugЗmTö?t\\JPtV&n~F KQkM]&bd@F;[3EicM I GqKn_:e* 5Zin Ung\%)wd P`ZI۩ 0g Tˆ5FwQkѕ[7o(--U;|3_zk aϪt}aG)}Kb.O񄇍j% nU#- -Ca+I鵭ϹUb[%o^:6nd:M#hB%rpe'#ӫ-AJo| >ixBN\/U4^ B;ECr^-U9FAV"t P0Ӧ5f 0lm#{n\o(Y4 5,qؖ?,Mw>D#{§-p@Ҳ5M}7I::ܨeܠTe*G4t_cpNwKzy$.bd=XMlWUÒ,z(nB1Gb$E`f"o{v lN&% ;4ҮlCH&+fu.+)H _8"*hmӈvq:c/Ŀ~XJ4& {iSXi!A0sd3XB U[9j=nUD]U`%,QRWȞ`:?@ 29~LJIH %U/ mf@6=w^,+9]Dvw\x@&tFW mënM2z+_uҼE !#pdxbAO5`[MąּqFTf,-xvV}aH槎485e&ѝ¡Q?̀T>5LFΔmcMQ X%zc(K q\Ҩ4H(PYw}/dpJ/eAr${ǁ׈!&A߹VZM;C<ǡm5}3v@0n/Rm.$AUb.WCU-ml;u7R"3p0iO>?.{S /vnqX7Ah.L¬]E! K6xU@_{Y2djidgD[ -˝)K*,yZ(lq\YZsӋg6b-DfCS/#4S= g#zOƄy)#\gyQBD?/uȂa~/1vı `P4:F(ňClKpE#/hN,,}SVh)^G '_0~%ags*cQ{N%AYv`C<6\Ak1S m :v_n?2a(:< zV8U._1@4;J&R4aC6JJ$T"3U&Gkt2JΆ@=*oȾi@xPt([Q4j SA?Ww|u]\KJR^s1* JS BiC \4Vxuf&IIvDYO1 B8|.0b@E#hr&^{:Q0VYUdd?ZG%XNœӱn̪ïXii壚mJ }q!}vQ 7AK_'f8`C.Y+z4# 5pՂM'm8MG3ZIF+ɧC;0sW~zCwz+`l;6+I;^(vipj/LW$ 4oXaɩEN"HJ9o HOdPLC[oS𼷦@3%P=l]44MU[˕& 9`+B m=$ ow%'B>ӃJUc]8L i*?VTwq8b #`#%ƉDG{K)OM^ywA'^tgUBs"u!ˁc0~{rk=:0Jth&RHĘ̠ /[fw8B UOH-pM޼w]KC ݉BbݕorcrXlk0PӺm_ P&HUa5lڥ/Y/GCj,7QĈ*V;25-z3/ZA¨~U`_9N.{ĵYUmw99TMqc[戤RagT|H6tWP9ha@q'm6^_akW }>&@0H#Q tgb-=O=hKIdΛr:]`-Y^Ap+m[LxOq;bH%pL z9,xߎpA^\!5R;4ͪfZщߺ ;n<{D6kU(;K/O6p$FU{aCh9NցoVn-VYhN.yiwP.w.pia2N7D{$N`n>j gNdIt:yYIq"mBg#X^qʌ8rfdXś{KWfXӥx2+G-] @&Pmq7`'$9ƽ h/=ڦz2*GTp,&:gZ/I|:=&jgbkF\Ş˂y^4).OG-ljh2۾e׹Z AXZ;_ā{UJ^b-ri^Bow)I798ٿ}%&j~b))m{#0~u|jsb(_޽5aqj3("w C`Z}) tU]Ħ6^[%Mng0Dk;=#F^-˱xhGikuj={xVZ@MZ?N]iV)|;0=>~FFeP)לUo7H)I؏ WW}99`i\ʁHjs(ib1ƒĿ­^+‡%h}gaB?"k1Ը;ĨVl3Q}G4bV~Rq.ukZq0ԭ,t)9ߘ.]qDx H^~6$bqʙܔdK#ax/X;Yg u9:6ʣ- h~3Aǰf]8Czj.byoGֆ]h3I!a_pT]5}C8w'2Z5&! ?%*Ʈ~'̷>k#@|S2\QTf4I+MSˆ̥i = :+De!60}Y]z"zI+c<3]8DpcPrDu9yƶT~,_ZYR=^JJ)xZ!&*M,CP.Ю0ڽ H"zUi!ϓ <:x/2 TXY4Pu014ڿP-p1X9 Jj[4 >7usLM3WX l}06,=f 3,{ӔO`hY&Sif1(Eh܁tJGX'-FLo3`Yy!Uՙ m~8O _kZ/yGL..F3NO=6/8ɒq!m AؙC^auH'IX 2§RPI28@ێ̍2&3kZ%6mAa] /5dW?B/%0d%i~J<)(DAN Aq"dnV*u-[D 2絓ƪhBЅӀY=Xm`BUf&i8JwÕd]UzUn@P[HP-Čsܸk ,iBZj%CAX'.Q&xȒmќbɔܘΨ[mCR0( @؟Ō*EڣZ+mNRtX;}L,T*Ῐ3& roi=|w"s 1eACx$ 䍨Bfms1Hnq}q5i)MDv}ѽPYN$~kvzpPHHb1en(j2n'#nLOn 3X[]xnyORPr vUY.Em0NxgMyg f) W^-6j6Q|ҌOѾ`W_Odthbƛ/*ӥg~| !=PFq3[x^\F;魈_,8 չ J{-23>G"!itMj j 'c(:lfC^e)d9D R pC|ѕ6Ixe_ 84<~"^_?lc^#Ƕ ɭ?T~;]P,a+k~0?mCzD( =Z^ 4-aSX7vvӸ*,4'Bdb3jgzSR.N`#f KXF\vQcX!N^'.P˾%+Sy`Uehb'IED87.$9Ô ҝ-"]ۃYTaEm9[{*tչK=Əjt>lK70Җ r:i̍&HH6&iX6bs$>4I/+I(uץSx4JS Uͬ ifph)y*@OmvpAZJ92c7lvOM;c bzM! 31G*`;1>-jBwHβ[j it JVW'5uePd|%L-p49o8O<.6tp_W4";vsUBG|sEc6cߨOiU2SMBK<٢m[i %:P6?LJȲ95{~-wwqb'*lPxA ]3-ڎiZNM=[aZB</xdTޘUM^seBH`耧AS~Y 41Crn"W9eQb)#VOTk/J^ƞHBzw SNx*o;[ ,ffd2@JtӔxA5Lc4Ħ/^ΐ/Yz& C[٘T]GuBj#[Z7" Ҷ@ٝ9Xs^B|R_4hLi$9=Nk˓Lu[ D2u,q4Y|KJ,e_x9\ Ov"`jw5LDwlDfOFn9Rjg+w(LOoy{@j"Yy S']#>v"lPmm*\ذҵղ@/Cawrl;69ǷZ:"B r, Q$'gvNb: M#fpi">,Wc,( hfǫJ J&{}KJ4IqSQȡN e6 DaCm?&RY3՜Hm~5\l^-d|ͲAo0p4,Kנtr W} WJ"Am5Չ{:W$ ^z*|rr0j#ׁow(T.55?GHyn' NXt_c2.$;xUHcۡ|>Z~]7mxbrAםfgȼBhWnWKuOogW\x1xCe3EJlA~2D76VL_yL4"ÿzv }`D4+6q)P{[,|C$C2@ppy~C활{<1azۺc!8 0QUTrq-ۚΪmT*?qhma aW]XhnK$dv^c$kxd؝7V>&%E e MbXM_jzX5FuW3?v1X2{LWѪwvGӔ4 HݰCemir鏏(Lj۰VNqihGjHDh@oM{VU2\ܜZ#+13D;i~]gKߔkrRD wC0naݬro(Jbqli86ը-NSr 0>̔ZɷZOQ$u ~boYR964C:r'w5w~\FgnFg&m7}貞h0KWκtBa3պV[ڼi1Z_<Ep4w=I)#-<0. d9pGB)!( Sd}I»߆ctrLIÁDX+\q7Q8ygu林U}Ӑ!"ZJJڞԏ.'1+XmX}'5\T%Kx뮂@b 7^wnX:0# ̪ʢRui H$}G9) JDIXKp~o} t/i(ދrL^#P _4F&+6 ]""Rb/{(q')Z,Wp&J< d}.6YdT ?qW3cUiz&+EwbkxYHx+$f>VʁzAG@6oNvJ8z"'WJfIŸHcRAܫMZP,Wcwo!ইEm6'0,(ZDSa DJX}9r*4fIv+AfZqg5*yK,ja܍aɊ%7#q9VvYIY:9 G.Zqn+:C]Q;2p~q?R/W[/O􃎚FMpM,QNyڸ ^]`k5Nr c_ Xaf,_1Z-ûKqُRǧkh|r\ʧ 1<{n[<0Pߒ# c)#B4G4_0tVZi<=/d bCFZFMGňo3: [oQng7CBt!\_tuhI?VUI,hS$ꡠһ,Y`YzAOz /{gsObsyaTʜ`LY5 GZ-U{.*?Aƣc* [v &JG\MůA7_Ĉor/2Է2J#YuhqM-xtp+sY1Y]^ hhiwBkLĪB#a5dmgrQ0:fH񸞚nGC]{ m]:+U8_̾zB0wH!ʧ/JFW\[[%&}ḛowGɬó;#wt6ȥ[i`onPcJp.* pDg"xb߿xj_0{;hbG@ @ݦ7Hg0u~2 r'Q̤'9c(8+S ۂjg7roߑ03)D`@4v%ĉ*G1(wFdQ6X?ZdE?}fc-_ %Hِ =zQڶ=B>2.JaFOL2 3μXIGXz3]uj1 ;@;^gvlJ>Ȳi{pk؄&Od`.żc`̰['jsތؖ~-F=L J^:X;+i;8x% )>F:>gO?ѢY/F8rf.S^Vdi0fAH/i%f _t$ळo{A*C&~uk zzŋ#}zx=QIO7MҀ+k-T_!NS3J9LJ{#Įn) ep}ӄ>) B M_e;!17ׅeJpE&HA[u[ۋ_ϹBd)TO;ZçKN.]LfvvɊ3X};AEeʠ]c'3?l:"#VF;?p¦+9zEHoB?~ic.ތ3Ib08{?*S`)`ܰwn`VcިLUvm'pT nrl ty0u-sxP4Q2Tq ňF][%8Fsh P5l5Q!V|3+yG A3oņ>'Cp>r2LV쳉QA.ߗgfDaFX)GokޖemrL$fS* RFThyQ5ad5;o.r`c.zF;^FᗿYYb% l+7Mgц5/J E4qt>.(wN}6dLϬN=2qy^@}Ηb?$HPy=ҔjP85Cjzk|0GbG f&~Š F]uo}$wPMQ#벫YkQ7;C S!Y~.<8i?y֡_F-Xp⡸CFQueE Z.G_z}YbAeⲣ}o 5}Z%Oc9"y6;ЫO9eeXݘںߠ +.Ӏix.NJ NHۿ})~⌂ظӘ&:o>.BQd ct ,EF9J~mM7^>N,VB5\r9݃Kfz +gL4 P'ϼ'$*kp,'q/^tBp~:(̹72=Efvt HF{Etq/lgӃBnpUc ݓWC O$ S%zb4 F>n,Z2TE^m3f>}B& i^]$AnSv._ K؂P f~kD'K&߿[A33Ĵ"^`I$Ia['HoPR0fbj򲹥hP!)V;y)O\Wč@ .R+<5CpE΅ft60c ld`5a6$4qL}Ƞ3B 7JuĀ V8m$shqRߺoavxn_ I`#a-^O5@O(L0}\e)Ο$/F*ss zlPHM<>m} XETh)O8| ΕJ|۽{r1zl?;+p6O#I`] >VBA& f>>*8uw#Do zO)kZa ϳ'-si'ô) sJ5bR?]$g&ih?qd^rێE5lBU~_P^-g^nq̛diBCLGóOg5"񬲵h,~*n$⧲ A{S&j^xe=vB%T5!fvͷhb$=]H,fq^ܾQ)rthW ܭ/^Todע#}Q2agVǽgCхa^HkLx w =مT~t7J9?Ji-ŗz/`?ysa`* xEfœ <ES:sd&jYsw~9 L.B9'5kmdgG g(5@"fVvx\|v% ^:+2 0F H{U#cΘPze;:8v(~8HRbK*IW5p(:k-룦FfF)"^d,ꅻ˳5DԻJL66R ;+YD n*hm3}5Ȣ(k*ɡ/R-f`UTZ$Bh!35z];$5tO@ 0A0eC|鴟(jGˆu˚$Rk_RdPw:oAJ Yd8*a)wYcczaȏ8T ur." m7j.sm\1W]TJtfu>`-j]ב;'6''^"mn\Z<1z HxxܓmqW);iIU-zgxGHh : KL,&n>;=?klJ닻6(@ Jue_v$ˆP[ظ ;oNjy{'"RF Ay_xNK'əTH_ĉ5< m~#ܳ~ _ܝgRvΉR&#}}-os)eWwێcխBͭBS8:xٳޑ'eO^ ]k=L4j=*ux!s!{<5. % e_uy9W8R` ["N_: 7u03]vh0>"ՀEJ.-F^-P1-7g:: MvpUYѾAeD9,q)4@ۙqaFWso z2IsqHbM[W6Coҋ 蘦00AZ) 6)bA8EE%n-35Q_I- L[U#9^Hl 'tC![4}m ݆kg:M; kbf bVCu(F^ͽj;yJbR`hJ(?}?!-Oo"ŗyȬB"8O-]dOE~7Um ;}:I:)ZGA=G| U!뾱y>&®Hh}{uGM܌tD/s2ןߗ'S Fiwbh'Aǵ̩b;61)==FT,| b` w+${+U~jN"k,9[5q+xE/tޓHT/p='Fϑ r158h BaU5 Eo/$ge%N#J`USaz3@n~hqk^?bj"Jʡ DtP 3ZV|tz"]-X.iإܘNJhy]d5 ތ\@HLPǟ "{&1ISo@K2_&W~gYƅ|rA0z%ax8:5#` nNy-ڿN'J:aԭwtRt+i\T2|O2[( Ko婺^DKl\ BXBG{e)#m x>!fczZ=p(-1 q7gJ{TfXQXL?{(0벼 ջMt񻓉#hua<<"{ZGƗlJy)Հ,^?} (PT4\i>nm|-fc_XU7d"ωJ; $Ԧ"k6|/Jl,A flaՇK,"p1PĒ:ey]}(t 7KQ7Ϭ'bIzO;oοZ qHU% #N l4U5zJo] ji-_곸0Gu)L SJK'H^3sj !֜bMIA۬~O=fowֳB<{9W̌uFzZ>NNr|H,2(YqИ84ܲ| m 1vZ |֜ Q#PIZm}D!" t!uo*&zn7FszRSUo0FI~Џ~ 9E` 0{PZ]G]VҺ%G0/DlQ[Ei(h.mk6Ѱq/l:Jɹ;PU `,u'`uM!}67ȮÄp6nr:(Dviĥ3%rdڪ-8Om'ƛ'Mۈ {~kiC~ @2c[p#X$Q@0oV`QkK);$gl}kɠvZ\kRm^݀k4qi@K=ϧ 0pmP᫏sݡW Gir35X]&D)he.xTCQnah9}VAhB3MN<r`+r RPa6N+8 Q%'82\\!AQ%;b;nnR+}7mnF#g`({_3 [,kJNIYD^I_osa+&u=Nsz_8I+Te$C= W a-ϤEvSyz+wsfUn'HnDҿ@튏%{^DE([^[EIok>^\YtĮx}A1>D&W09l {_@Z =Mf>S8RpQZ^g jo+{eSYǗ*b KU~p+y`Wv24}d8 h^W+)q"ST~=`?Ai-Hy1u鼀0c~M9sMe-E;LO0kꮍ7s ҂fDicNzlƔ;e( I!7f9-'|:)fstVB IFHɫc씬[ q}[x͈_@!۷T|%GGC'G\ޏdL̍w1bW!ߣ.ϘbG(5|AO6yZOS)f=5'6!i(wfO(_Aiyx>f]=#G%`5JKZ@rOs-AL'uwlNWd0 4~aMZ6d>HMMg+ k nٛ-g |1?֝cSl(Tg̔x6`ɘj[MOTgLw|yUbH #02bθ%O ^Hq[VmeQ*rŽyEv4PR֛;6X-gMۧ𓁾/fiņĞ*m@b?hYˉ5?l=eJe_Ht#:ѡJ-T6&M⟆Vh(b ʲTI3y@+lA梭Dk89.?Dg{L* $_Y Xk \Дac*ET`5$MZnOěPaOMVuњH5},3DW/ V/l NpC43`d;!Ί/C,h?1;닧pc8 =Yy+?cZ i(x~J"94QX,"V!CAQSf́ eIe^@5#CORjEB|#B+=ž39ݪOVT,*v>n{aJ܍YgDlOqv?@Nl&ݴuOˀ>ߚGF=Z>S[PU؏\P\V썓z'l#3-'Hf6@zï 7UڥlXȮ32(z]bqCtICAd[y{ȭz> l`Q;IaE&N*cKct7:^ij~E:|H.תC/M 2NKe]]3 @_S%<[y>\7h 0_^F":L@ &4rG/]6-V?0a(vv({;:I9FrzEnB$b<QB=7Edhvnnn\ڱArYF_ݣ&jǭ[ [ 5NƩ;zcJnp|PWQ/SZٛRA[3|xU#v`h .uXglv5Zh Vwx镐 ;-Y7Ck5E7ŐUY[et4$ tGVAD**uZ>Dn`)Pl5>O!I2шth5W~ޤ<̊Ȧ"`N֤i]p ?UF".r(I"]RgCG=7%JqV ~Z344lhK6|I=!W DR/Ϳs)S^xؿHv’9{. IUĸ cʮx)(E/i(B~}3<Ի 0[󨚒h-%X1}`>`]bMJ֊V#fmӘ?x]Z֛pr֨f1 )ച,>A?PbSYΆ0pWuޝOUG1%[h78(hK!(e`6⾙6V" ]r. gĒm󓑖e ޝ%ٖ=]kORu/ik_'aŔ6 \T xee"hBG;ƸȒ2k̞=JQ V tj쵖;ǣNnP,.O߈&>]!& FmԼ -ۼJ̇y(P@] ̚q#OsUdttd~kәfmB6k,OBb6O MRA̛5 xOV6J ĦZ, ;RfwkOpr7ߩ&S6<Ua!HB߭^i[Gb=pRRrq30euĪ=HF7$$c2ks,#(_>Jf9A GQ>$ciߏ~bmxU5u@*Aoو,"H$tM]Ӻ^-/U|_ 2sTn@<1\Jp5Kt32v'ܳM7O>yzB)#\6OP>F7"ң2 55 7au( \l˺:)5ű>JeՆ?tYlj*<_4 ,J>5OW]#&:8P^Nhqh$||'=ZEP$)2\w8g؟W׆҅Jc'2ҷ玜)ٿu[S܆yfOjI(Ô> ah|l&SPdCbV%"-$EXsfI."1ǻqZk ޤgC7O|JT@|/Q6_/(mSi@ tì5Rt8;AYr٥a_ mq>$2,ݛ$A%Zwxc2O_r֙@~a`IqY*8)a( \/L\oPHcmn^m\+}8d`m] bA;Aф5tSk7'< Cx)DozRԚA5NyBCD\w@2#D?Aů+f$iZzdVHB(VLgو`"dP I&e3jhy' . ˞.4 S˥N/BԥgOP0*˃EedfLȰ1x"V&[ ]B9ުpDwxc\1@}OHͯ\ S g hУHyA6!ܟg'55% r0C*{ܴnI֐z[`+,U[+]}ca[֨6[AFM 8R; ^Vs#B0de=N#]ȋOJ%^\=Í|PQ=Uo#wx7:w3x^t ;djd\;}1AYE? s~"ܒWH٭\ ۄPD0'HɁJ]9*Ǽm: pݯI8C7丹vS'Wm#:Q:Oh=-I܅_^q"{Sz1 _A Gq4? } ~Q]#1i-Rjpߕ r@ޓbv$ñqJ-zBaJU@A/a) ., fnaoڌΥɣ`feٗ*ۿTyyuľJ܌j] XV&viӯ@!Yjfm#p>q1t $V]%Mft˨Fr#uRpi!'X-ZQYTj mʘY9P4dmyde{Pcd9vpVaA +EjAJ'6HCԑ*] pu]DɒP=Ÿ9E'g8---gOɼ-B!}\b5w ߢyFmr폳/#elA;x쏫z16q9h?'M,Rp* q` Ի>k@$*fL[HACm ~Z5w J5GCCp7l)b5H Wck s/¶4AqR^B ]n1Dā8(Oo.$$AVx?KĐ>2SG`: $#:2o>ڼ(2W,B) K,}¹R;F_,ԧq-o#9qt'#P_<,KsǮYlK ruz0'TYcfqdžܨѝ/oIE^ C"ƥÖ7j5+ooFXAb Cp }#2=QP^Н.ffAshXyK3b>Sx g2 x;_1b[2-xutdgCf݊SħWn,7cgADh@r6榝U;JhO ]ɶq sN3lުlа|K !F报H R_ѭ9l%~"Gw-þBKfq?A@19u?",[޵jlOG=myw_syO"')/QQQ}NFI@*?}aOWv/ӷ'ʧdf2ׂa2Y1gX0k)sy\cĚz9[;ϒ-w|P3}֣Kn7" 6]Z~{(qvԣ4āg3äu}KS7ljEHtk1 crXKG~Crz}Ugo##C zX>=+/m}R}-UrQϘO9PEh}Leċ?]0R:1 fط.\kdA2bˡǹ$L QIխ)`zخ)+`wZWY=UiXޏuq㼉ߣ/ USGJ U_ zgEF%+3MߍrQ)< X믃.g,k#+ n(M&1 )xJm">ƵRM#uay5 FXh(aKYιJԧNS/KT7Bm Sta. 4D/zIrǩ߇jie߳ek4)gzZMg92U!N*Y`su!Fomr5X8h˧^nܖ_C_D[ rGÕTĤ|x [~Yk~IֻnZ\֕u wG2|^F%ԡp8.؊Q bNcRKL!cwǡ 7U751n2(512e3`;B(t@unr a:0R>?z8n-2V~#ɸ̺5 ?+r6=>TW#9坄>!I5:L ~7j:.)eJ \a㙕]Q@}UsK׼<|yK1C um~y"+񺨍=!2~$DP3Ҵps) lXYİ(71}-p)WBvtNݡ_#{^u~㡝!7m92c?Jg*mNfwφ΃;Ѡ' R<ƾ4O4 ?{u?J洑H*"|[yG PJ63%0S#˫f?K_CV=Z/MvE^;wpL{nݽp)6 CFHbax $˹NdҥRO+@ sJt SKЯj 4~,Cy4FВAOxȧ$l D,$u }䥌J5iqVQAoY 9W%q1F.za\~)Սš}R'Zsj:5qċ 9'w,AaQ,[+'u2oB`lN'FuD]Η.<25{z=^?2bPR^0QzӾjrAlz_Y*(fx{63;mM.QY_SVVX ѳH\αmTL|*@< B/v63ARs*(m#۾.i̮QFH-03Ed.@('"hChmhb乎8|fy(.)n:X3TȕIH MJ,17ZX^eEcN+Z$ iqimA}D1~+$bxgk:36`|cC+#3fwU(f{$o/zS΀c8` ;h09&-,r<*JyXM ՙY?sLZBY)Cf`i%]ՠtwfqrQ&V+FyN@BdH2!, Y^S&dgi~=~Ӿ^K_E$&JKS@ZDzWx#h5d\Jd"zOS 2bPMˉeee0ct jC>p%@Ĥ -yИU1ĸ"gF!VTpU/sXՄ`2[{-#^8@_6;=p6` }ZE6ЧN=5SVGNX3Ҵzם KRq<A&BzƼ>)-.5(ʫ,بwi/L ?^Ɂ(]۞z:t3b0UuOD*VNUݨ 5꼴_lQ x i Sl<93bdD9> .%eʉEKX+HK8}{o{.\|"މ(v˥4{ILRc\kk?@a|v(Jo.*:{{XٗqTƄ!dfBZS,x $CY?J}sU0O4Z_f nn" (Fi,×&#QaKQsA&VѼV>W.Iubo— n X:aӖzE.ke *^bF*ո0Us vk򮂯\ߙ-bb4ՑZ} vݥTHN~)ƾQ\ϋNmT HBJ*} =GԋcWlWIw%kl{j/ wZ,=]u`났bZ 1 [ζ+sY  et`4Y~߁KzF_;,!*NKg7rrI ol}@")(,*CF6)pPB,>kEUTv%U$O5DL!f)]jthiՏ"v]GS @ ̥NE;E0hiQ܄P`79Zǵ9c(2{cЯ6x}Kr rIe ,&[Y^5ti /3m!=@aX6bJMLLo 6+*$B̄^$Wmca6(4J~<|O*/uJZ5;xd*]~K 3k˸M'48|X/aЏ[jDN_?C=+ZJWYrg9 . Few&5nqm[}D'>Oi1œNauu`6Tk4!=e6tV- yR=6_&<o7&Hq8%C8 lq%L8z$7+.u/^1 9{# q9ap8ᡈV O˳t)'-6h'{:ƩlVUMʷNy{녧 UaZPUeV~\_p\5AhAvZ.@  cKkt!{Gq"hp\h`bxY[))y6&q5s\^]ENRZۖ5-֏HF2u\jYdznD͸^ n=9=Do3(U )mE^p!%G Ol2 %V6 3xk7DWQ~kY]qgOmg-xW,*Gʰ+-!.7J %<*|o hS7ipoe#}ā)EΤ G n :H2"nɛ+S+ue6~ |aȡFVf[ u[Н2kcJY24J|A |ͣ;͕HylFn˺ T}:^elWt?9C{HOjĀ3."%\5 \C_Gî+bαW}`!]jxۄ'zZ=e/NdP2-]U\%$:#MdGɩw[^ben3"}|35-0cuurl8'$(]Iv:L&{:0843ZjAM(.L!I5C1\%G0z苨C;ܮUghKsƑ Z.SymCܙ ~qY=Hȴ/Ǽ1@2F:)ҁt] UO_7/*u6NO4#݅\VOOl]m&2xIV*)˅`drV=UѷJʪҙ1U?3%fMZ7z}hF{f2g&~6KϚ~Gg@CraṞd)цIJ!osr:?jT&WN"Eڹ(]6֎dQͽ+v2,Uu-" k(APLx٣O"^+&ocL0urML@5*-kX"9a;%^0'+Yz{ag2H]iѪю `ߺF6X,%;Y dB}p j]Ұ3B+/(8}y^#*J77k8Fa¨ʢQhbWՎ+ꆽmsb;jl ("͆юB Q#: %ʣ_?g)iyVJe%U GW,sV[i|5]dd_aSI;V8D"➚~ uFFƥY?.ӣ$Q3XG\- = 9oF' @]K*>, Limf"7^Oҫ^$Vj}̹ZxQas1 TPA xt7JcV"D0K_|No%-|\b{/AAZi.eV\ko҈pL2xa}m5^xvJ挍֌oYmG߯G=i^oF x؂0krFOR&7!j'7 / .;1~@ ص_~_g`=z]kgeJ?Za+c ݫHMWzW懲a`PԷm>Z/tl Z҃mQqC߼NGyn/9j>"0ɊE-,:Z8:}$aGI<.Y5+92-\Db ?*) mQvQk8\Nn:|)F^'8j-ь$cJCY0jЪGNjKEm*|ˋV>6pS7@JТp1npŵC[][r~ P{K*>%;d5b9:c^j}}nG(u_AO.y]Fj1ӚKւ(+yXm4D`N:[yYe4rR$VDZ1|ʔo WK"XdНPN)ɘw3 MCEԁSʬNWvSG B{QK:!褖N# KQS Gg=ܲ`LZfJʟ؆"M!Yq)pgs3 X6 rب67;0W8n6Œxq_NMGhgSC0*/x WQx;/$8CĄs#v0K)x8,ph.o%>smJӫ֤OSmF'G/w$NǸ[#gIwX4ԃpOD'U9fͰ<\Ee$)4L3Ra'p 1(F9Aw.IXc};Owe?+7y{f[jڱX= X=|* nG7.3Z(l^q`K}}-Qd PZbxxR/DdwzF*\:<_q$.z|u4fiB{@*z 7FD3OQMO$Fsh$Bp:atWRXbܷٺjFf~bҀaji7e UCVTJk$8/*t͚]oAݟ ].z)ȇ?2^KVqMX*\uAgwmo|i(0Vj)Ya*f7@ mkUbS-w+ꥀs8B^ncvC4lx[0[^8F@앜}#PxgTg\z˿y|w@O|7V-"~] Oܧʂ-kADKUMͩ>h^ 25p$V累8;d`K@343,rT aധoaZ xNTh>5^MAo5z77 q)L Yv](* _&Hbșe,@8Sz_2Bj;t@@ A?7?55,R>a&3_ҩP~ ݃V;L̜p~Ҙyu;AY*uC?ey (o`:*c+.0cy lVa>huG4DBR'k8CVcf ~$<#;TB=H>i}MVZ 䑖6=NKͬswY.mCv) za_67mX)Zldg>C4yG}ԧaTħ`gEwF?@ˑ OT<<5@y!T"b`}_NHA+qd&(I0m=dSD D02ُ;y%xD:nrNw)][5Ƕ^85d!oQ\An#M:GZѤE#&>D2B=iȰa쏴0?gD*PuLvw"g 3Cn>ZVa}>B Y(.kŜ[v$gnX:5k,< qF%hW%PVD5ZFHư%tgkNRRVdG 2ĭ^|hggi7=Pow~\Yz <Ҋ\ սi +<ʚM̌(a$\PB{Lr=3u-Md Qy.peDQ/ am1q[Mo7N\?_4ͻTc,ߜ!vEZ*|ߩa? y[hegVqբ9YҼdR0&EN}dJ- u-%b uȟލ?iXEfCXթ{VdG-ŕG.0Rw`0lDES:$VD]LD"ǐ@c{U#FЮ[fZaAe{o|ߑ{QB%W*Ka"A7? ĝA1vSMQJ땓}>wrwvNMU3QgEmdGϧTq`vLJ|P] ].B2ӓW{/">ѼjuNKom9)O9ҝB-h9ٍ'+`B>?D=!At,.H9>vwHxM0ibNLbsFT|Rv0)JK uv{;~مLBd 07uA86죙ŵx qbMEVLQ87Yo>pGN,^Ƶ{4z4+5m,P\}$}5BxT9.%U>Fc㬂3Mܲ+4*kgKj=+QhIR6"=O.-37GopР`+,vl?^~\:g$!A73 Jv߸_9/z*CKlÐzVy@F*;;-Aj2fO<޶#H*:w mkbŨgnNZ#ı|J72FqBpB:]tOK[ )g~)PLq9e>ۙbJ5z E5b)Vꍻyޘtoa=LbnUhKpAUf D]bBKxD\u_܀H'ئ$i ZjIx}?b'7ѐriO>Զ4;-1YPT׉&'OZ1k HZR s''u0z : u [z`TZH).lp,ӊՅ,5}ߜO s<`e33ˡ8&iYňSDeo}XhcY6)->;*= h`T;Z[>"OPE/Q34H!l\ âfPq~l 1gšI 3us JfങTُmrK3Şiprw%EћP$nrA4|bIl͢SHq``EMڎ2#ded;,̣;08:#n70C lM6칔eazydjN2xLpz>bt =J/C-=*_9{+A oc&j7f`ln@ǣfdl%hY>E%y?ϗVk6,UO[O5;8FJE %̌&+G%f+|(Y_5]~;EƆ}3[/௳؏^C O-cgȄRΫIqNrnC("(G?@B-٦wW|Zs#o7G!qĨePE2hZd|ə{5l0K0* vYB02󔆔5S7쥪x´&Oxytyy0%@ߜEŵu᮹~@.De -somzIJ'hG,{x"&'E."UZU'O#'v5 qOhP{ % ʃ Km~S[Y5 .JޤO/bf" yʆ}ҩ9Rv2̪I*V•Iou7GdWGjA~7 )"޵38 (K[$^tP`bTVBW$ҟW,R1PֺI/p  m$'E;ݻI-qPK6Π֟ncQ#e}=U'$ gitX6v>Y7?2'qg*BYY|sj& u6XTfdNu@`f mw 7 hD p7O%#辡l ×a:@%`kf"[chox;ƭ;I`<03&5S4,vl'zݵPwf''YgCe>SϠ _h3dBcrdn/k}xh0B!Z~wHOG41IqC4f笾%mМ_^ZF@XaKYl+!\88a^ʘU\F0JLUjK\ KGY.%_)͞!ĚVO &b9z9ⅲ@ݧ$jL5 fyѹWߺ%j8)}X|)tֹ"<3^$ SďiẁJ v$#wl-5Drv}^dѽbxMSpN8kI qvqүoÖ=Fud=] ILG{rip^٨6|[z(x>W$ $SZ? hzo d\M3~3&V6Uܕ!6_r@2N"(;q,)Y• ߺ#5K(? I Ђ"(w7栂s#c.ذe{ Fi'T^(7#V'ƛ̴Y{U}MߦXCgPCϏý31,CjC)s^X0$)l7iק3d?'/5;o–Oy=+jPJ-,&9>_`=!{p*fS\o[^YA[xS& ZORSf:o/p"6"r . @A>j34 Zǵ heZTjڼ՘<6h3U͛nG`>pvujB瑟} ҇YKN i#溘|}wrtgq)U;~0jS{1 Lv(X eQ Dl {5ӵ .jFПFqZEz3 w#a̎ 8#v^MWU a\M ɏ~p,OEv#(*gyB&T T< h8 u8 l)4&]bs -}ևݳ1u+FtG}1U*h!KQl9zY9Ytx!\[M?ȜX&(;s $wvAh}2 -{כ~UWoIJQ#qU" W0BzsH;1"iswYGq&0}1yWUdHɦECk 2 6{ԂӣȚC;^g^e^@6)d!~;F^=<Ȩ$2=WQp?f#yB CzOrM(meg8:T`Ii% `ByR$V@mC v  !0b(?cX+:s?N@lS,VU}4š8çò5nճ󼅋QMK]ƕ&Y<^d@ltEl']Q _ʫ晜C yPgpU@Ej9Puu;xOǍ8x6l5-킋+!IN\}4 5?\YL(֕ĭ?u2{"3'7HսИn1?D3'|IjSxFHwlP^+5.Y0XB_iHyui 8i1ui8ԑDC26X*rFLyRK i[>ltyȪW2(5)JFR:9Y n9v[n3 g)wsq].H/Ȗ+^ʉ/ mtp-#Vu:% =X5*ƃzMEa" 87ȵ6.wUNA~ jaQfʠs{(m"oTf8 t36v'kEM2inskvj-4T:QHL/XA?Ewg;0LA+.Oㇾb^M`ڙO5l3'|"EV| |GbѠp(T7x {LoOhD,x a&"m1=% s>wh pV%5+_.G0M;g1M/Lgy!X26n\dV%gMF-DVvl ò?:z].`1f7nR')ݙÖF70"qDm3tМti*8ƞIHǶ 0,_j9D"Û$ bV:`;:= Ev{DFczs D+XKnP W ߫;RPb[9J9l]XWʥKؼG[;UMڍԢq3x@nl,6r$"&,;j`sCQdD| v(Խu(uPhӠl]H#G \eQC*oQjz`:IT׳c)F,6!̴"UG&[kd5̮ՒX28f @ZaBGgֹKtGmn"M"-[BupY:`=Q_H\gEǍjYđ%SJPgڎ!mn\bUCvPOwـ[En»048,r)0_UF*Vئ),7)MB͹Q? =5҆i`mn!gHoT,fPS;M^t s_WUFݒV.cch$t@}+[ rfďS-z{$Zܧ`oZa5GQMΔwWE] QDG(]slJ4=*(q+92&Xkxw{TVNJя}F4QEhe7d:{}דҎ?#i6DGؗ'!681i2E/_FٍQ38=e-(8@-6${wo0nvM΂+7(jctukn'e<)5vvb8w1'[}@$i$8B? Ip6eb.0eu$"MLw@ԡޢ-6Sx} 8YyCoUz* ⫾5[O 2ĨGˆ1e(~ ,w#QPdKgg%p ;f(Xe&3ΥE› ٱ.-qge+Y;»uy@ #У;x+gG(jcU,'RQ6$rJ.pmkyty;^^1%POlۙyHs%ϛu. w$a_E#B2\T*MTh%WeU?o2 n9u_[ V.5E0-xNUp>c .]Yلǫ63&0:_Y'0-jЩ#\C֘eX:g̾|—?l㵋Jt҅ނe6q  O|ˊRץ \rQZQf*Dɍ*G)!՞Жk7q^Jntq[/4){k!WE.÷Epݴr:ZxGIv] /g]4=fxcwyDSlngYMĕK(9/kBJr- E*{_o5'],U"oř&9s&ndQa>/xQ.1Y'yƮQW*\i Z3-OWH{g@SBǴ LOQYl?ѷx B-Ϧ6qvm&v m=M$Ph7yrRJ|YCe&{6fT(`,g{=0KCx,(Vo=Dm ‰[Ԏ8"6n-nlN MbmkF$VD|ACa}7h8.;`LSnLC>UyvmxDY-6 e9pZDFL4%a?6VgYabL(Ŕs\j,@6nc ╃F slC5+4"ܴ9L䙏OhpH0Wamɢص'6O:2L \w$=  l0#h!/ŖJ7vD?,z\08Zl_r'2߆jׄ+2CȼbLaG~6DH0Z:Ϻxǩ-ƵSJ+N̯e |v ;WpLM0uކ{`c9!@LUx&L(͂:|N12 0.(j3?I_mwr>VaCɂ.pX%/ƴq쪲Xoau}N췔{$ȤEIl^bXѠs̈́J筙Kr|B5#(%!&=u$RVO3u.HXW.D~H$H)o[L#D!oĮ%^yKI8HCsLv>HGeٿY!I0&׷{i3P{5E(6NDLܡN0\ef@Ri㎊=,f\ZZi(-YAa$@9kЅȮV^]Sל-&ܩN[ZB|S%"9A"b R|mq=tX7hF}L,LUpBI2$ŷf.h$1sܲmz GF;83愇ռ57 -8 "PD[cڦ :+:jҷ*in8]{шGM;&zh?ҵl__?f* VÒm]"^vz ZKNҍپVnj.zpOCA:8 p>CoNLeQQ/y ddd]o 4l _ZEsvpH~;/mH@G}{AL y]k(2I͂_tG!λ>pƟ!_[**pe"O?{ֶh:`[-֣:K|7AZVEq#5љ:WD~41@PsR7=)?PKazCuk=Ւޢ'N<]_p>;s0emz(}t6;qLe#{t i+p?)!D+N硹ͽYC] TCnĢu: *7R{"8~#jԖ*FӨr I; NYX n=UfEJ`%J Қ֙= h@,PTZ"Ӛ?[p߉o6@Yf99 뵷ύps$@_*]ʃp_Wҥ'ҚDPnB\[T"Nbna ʒ -S }<<4IyGu pp/$dTa_Xb-z_p,C֐흭kZaK)&P!tT}{hq s!5YOWA`Vxbڞ؊i~ 4ϓ;5H9rD m=]ҊHvYC4oP/!]@]wJ W r+DXg4ngv ZnlOkOc~νuQq䔇dBAIR!yBR!7s}s`'\/8*m9?Qɱ"iߩ(\ $tIڊ9F'HKYz!H1TE 1OIпFczPGG{# n`K ,`PNb8%SSC–]wy^Mh`6i?-vZWτĉ`>(ԼI)9>fCbG}|{[pdȭ7`StLuD2VZEmA8-r+- @_j`{(M  A(zj8甹g,r{@C_}d;1=ӸK<$2ocz>kKô_;2]R~˔t"=4~\HL.-q8CMV.1P~{zo[~vIGqlgj5q A܃D38x-GA Oo݅hDT!~M#e粮͘&-EپS5W#3ﳷvr**O d66ѪHl-M6Ktϻ w6B<ݏiI+O.xmڶ*AvFğyc4]QրII*s煢n&ȧ1ƙ[ 31 -4MŃceH:8qY8L* d8I`qQ  av)q5Ëa*2(EknZ|[6ߢMr~B2,J兡тA ~x )|u?oPi$=' 8Lt|/i0BFxךL""8u*%h8.*B2 fVX-Z'K2FM6 2݉D71uv@jyj,}trz&8cx|%ݪ"Xtj5?w@]8zI :BFУ8zT*WLɗU[Ԗt/y}\ϴ)j1t"St/QY\Tա c?u=ܖ3pH4-TA3(?I@֌t,H[&T膹K E FB^0~dM B-&Lg|Ԧ=%RJ`1m&\ObZ>qVsҏToVө\6<D(Nbkqv A\݇?27`V{^ F s]uBKVK"  j;GH[&Wa`ةYWaS&ʯ7Tu [nk513đj| dZw.qѿinRZj!!k;`Ʈ,=kV[3;TQuໂCsk;S#M/B_> h͸^p.4d L_Є^$.= ڱaiM+⫽ TnB -r [^,QIV?b5yxvV`TS9M͜MkO1u7mwׂA| (۾i1\NE\r-5 ŀ)0~aj<5>kgVIT!B)ಕ0yB Չ^Qa/nF7@44+)=*oob/9e_rG;W,Oc~ fMB&f~ $)6)$$EuI΂d~'l2~%\:s SǡR7 ɶ 7^݉wQ+?tƃTM+zye4Q «~ہ^dOxhy|^{7? iOe3W:lqXbCy :Co E ,lCJmv5BM;fݱfjaP1?ӎM-kxe,֟60ӁնDPGZ2Y'̚z-<~V}AF Z_in]B(v+TP6)LN4q2l(1ׅ%`#)z<8 @|}CWy|fZ°l K-Ʋ(LmdU1[](]V,3YKgYCHK6ٹ:ر>]2QGR|@ R #x,:.o5[8H3&Q[e?AQ<ϊ΄ Tr1J콙XYBA4/Iw֝Zꊃ!V^RL6ZT`9:~|;A1:k H?}i]@W3B_bW1 RZmuJKg,Rb֎L*6 dbQ-8T|*Τ~0`x#&wK2%wO܄1&\!J (r} JY=t@J/n}nʎ)uULG\/aAID%ͯ"bu @ WA:b]X:"G仱~^2JPBٲY/ZKWDW8߁Y?CŰC9|(ӔG] e W-x1ɨermYH~._pI8ج/j8v]#Kqзdo||<8G=@zD+~w1iA|Jl wrgjA e9'}nW$wte55HÒr(^}sj `1;WNӾ UZYN#8&-74AK]\Vպk 5uEm*jѲ]Zb-Br&u<~1c$#<ͦˆK]k̹dZ>._FL LѱX>tҳIF ]$\ BCE nӟ :By:9Mu_&sZ<ZLZ-*V> lOϺ;!foe;S.xMnET4fqåc[ wT"ٿj롾pKX<* ݸ]}9o=̏薤Ý!⟩n?ߙqe>DkN^)jU \KKbwrPZ "! %,ϚC4bt;,xfU]ԩ_Bw1BXŻ1n qJN`,O ̘Uui$P|ԠS^}i`x|=j^F\h`v)$[v>Vj&^2Q5. Ж ʳEɘZ`PH5],Eˁ00ܚqŽȻ r8Un?<@@Cm!D1hot8\@c @TY8~sq G_ju-cfڋh?GfJ~J_z]0UfV\=d(ǦTWL4mI<'W qޥTT _K/88GvwҥQ-c`\ch5$ѶؕS{)/A3-ѡx' Dp d{RlFf ;Nzʡj91%;&g笘pX73o @Da:?6rte&S q/3V~n<#d^EV/{ݱ2;cqV|~n][(«<~ N HF8~˃1OYPp^cDܦewWsQ<L>4p'XD)0 8cZ`T׽pgtIZO6; EICb)*%m終_vM.X٥KnFЪ k-HY&% B1԰<#Vt *}oh%c `цyB vDNrN!`VNKLFvNjBzc^:T6Hv?BR<$fM_UDWWe(]'ddŸdMɽYg M=հ߿+#@oa֋k9D,UAzF/mJ`I|`@eL-%Fݧ0+C$GEf/N'q{H״1VJoYk>}QH7X_ Eq~$5ܒ -~ 4Zm/ֺ\&?Tkb2aZ6LMP\§v0qWۮB8?MJ݌曶DH=ࣨ*&CxTk WX[Lwm1Ff Zޓo7'lOo$)bZA };Q> gBd9?\-E6JG 2\[k}Ұ@Ńɭ l A%O/hl6Qtb #qI$IYGWA(3-i;!7'΅%%@@9/q/pZJW.6Y9K`gڸ|tss ̦`Dɀ3^.-*:E_W&tyKCe}|TL>nO 1pXD>v_Xb{lAwWO7UVV>q"zqvЏwixi{F$#UL ^:jZ%dfL}2ta)]t><`J,? 07$_K4BZc"GAI\5۪Ɲ޴WpNS:fb ZUl\ZL$HHzozSp"˷Y]s7ckD[Dֿ΀bn<#D'xыXk 1fA18q"( GQJxxA d/& yULV9he%%IDeY"ăTiAVr؈k.d z/sa1+q*Є&W+&؝-o^/!$ SØqtn\abMjEq;?H SԈQ^'iMDhQ'&NU]!,ث_Pf*x ~7|eP,P'v"au"I?fzg%j b55%i bFIiQ"," pnG?zAh8D$6`{afs,Q&mZo"i?Q-VKNVdw1S冺Tg~D]2Y %z8kZ2]IK,9E>XCWPj%)٩R=4ߵ˥M,+M\/$c8z<ǣO w``0e\<}Cqz潪G(y$%Ħٻu!;ReL>/~|:M+Q2iPWh&rUڄ}  ^lO*!e7..H>%3b,ןFÖ(tTO*axȖL?| !=T@]r^qE> x-V+10 ֡~ hG=CV+C8!S%:H449N_4O]Z)E`A0&J@?!N歑-0xuh[dG]nAϏM;xdB,ڢ\*ZMUΎ}2NHmSު-eAQp՘ kBzb,@Ip9!QM*W7^q G3%7d`qG@?s 6fQZʀd^8#_Fz9!`]]&RnJ⤨[eFb7([4`: \0IbeSgq,~//^ _6.rS $0o:X*,B:j3~/Q;_g]̀U! "Q)Ȧ:@ǂtTE8cE\C#g܁ߏ d&I|D UotC:@C^L:?Ea0ݒmf#!5^0߼K4mV'L7LKε? OZf '=A}d!9pc{C.\! @0+/kvu֍Fti\{kr5 4DhȂޚ]ezqǝkq]MՠҎ  /n&uԝR@n;z5O\˟ƪx0>zK/.ah##̳ta.$ē̋at.Q#sSNKҮBOd4xB콴D=_)D#K+G;L<[`(~L*;0c!}UY/1Ldojw5|g>ѥX>;^Q^tȘUaY,6uf~@w2Jh94FNodRhA6Corc]Kب oU|jo!R<_0^ewW/vx$`nMU"l^ʠΙZߙ%&G9!Gp<+b;V_$~/ TeXlVЧKu6@U-^2%E4 G.̅y5x9p0a,:Za/vp6]Z&t]_&[EH2x%ݼ{ j`aC9Eq Tcq闙 _\q?|u x-Y<Z<鑀RJUz(DfW`I\ںY-LR%X5dD#Ui%t=2t'T&,qbBk7o)ι,Fy[.U%6!_r]\pf<[zo-yuiiŠ1;8&cHW1#n`nW?Bd1WU+Czę4ply^ѹWA5ؙm%6^z9BmN 4@{4(,+ #K9R].M?Er, X@|,TJ3ˮ߆/|NX$^;aLzJSw|Vc彴r{Mp. S=UFam, P]Q{0TJ7!#2:hm]#pҾGVc> yG -B)Cˡ9.:w#Gmh@~[G11+x@ TrC C l@s;HXQ@{ƾS38,K(e35C8~it8mbx\ZiҠ qŞ| g&fhh+#O (]8R\ :;)tޱ7k) . icK%vL[QwFo^ ]owʙ݄@+eYGJ-iZ]f<Sі+~?SA-ty|,s !_B]oO 6q5U]@Ac$uA{!q"}K&,OqNė3;-EH\QN(;3.{ZM1q,vlTBIIsýMoB>_ÄFard 6Oİc8{]VYjs^˥J~91#>xv2 @CikHAUh2LE@huZE_=M!\/I ;>uڸ:֬y<{+`f%AݩĈw{3Dv5^7@xt[Ttw!KM_`p,@Qsyi$ySHH)ohoïPmǭdgnϹ-ڜHZ㤙y\d 39`D{X!%נbʮs֔f5V7 Q&H!qSDk҅Ӽu[v :|cf_̬GǥI%C5]1m2B`qYQU8;긹obfl $FGeBrW^Q8HcY_I\a"oj &8hޱL.l4iIb- Qla(y''$lxX pȴ9pҵ' N #oǹ[H{I+jPӭLedsw<Œu:u^יD菒wlttJK}&_;8Dnv~rSix@0Aq)O4I$?ư:xASS_ɹ5 ]j0٩ftBžڕqt/5Ğ@ĀYۻba4b2 l,}j^˱3Wo챑I6֬ 'S,2 j۠l|)B\~`"0S'HsC ^/pao:O*_*`y@c[RĈC)LVvLKQ|fMY{5ybêw0Y %yᩆCFS=zRvx.8LK;"iTMR9PxGWP׉`^l64I5Z2ɒ2jʊI*t-7Nk闬hW J5ehgEq8&udʆ=K-&S<O񈅇V㧜1WU^y B=6u\{3'+'jCCdlR UOs#<*)v|^iM<-0^h`X$\.5^ۿ`ܣ^WЈq#Z!r`c'JŃ/2@v, +Ug-/DcC@Xk֝SIVI]n_d{'986E}08)ԕ軰!ApT3-sL<њ @![ymrDq[Ɍ%r&Z+U=~Ob r9E9hȷ8j E{j;̩~o7X~yD9^k ^ 9nnq}ha]g?1\ҫ]>9Y]͸Gj"pa ,Jx:W }֟q*Pxb#;<Fα/85V"ڻknABHBK4`SạsT//($~D +JE$]\yWivSE&K.+84V@c't `@ed &G-۪l)~3 ZH@MIr?`eD}6RUw6JRqw^pAXtbZೈAmuz }||S;ޜ7|Gz;4.ki'S$89!t n:L.CO5N{3J..fX1:#s&VYSX`˦OwSkq$4 LWK̟:Lj[}OAYˮ-pHbrlRq==m`mE+WǬAFJ ylk$'ΐ<63agRۇL Ks+&D0[mxU`1Ҟfk`=iI[fnQO48 g*Ra Z)`BYT/7=u^Y2Rp Gt`B o?=[[ F"\7گVs?Ds;ܘIe,яA=a}p8͚/]d9 5lp"Y 8 _0+nX,}p_[3?ivWKAhb"w%8{k Vꯅg[BXTg?@ifeؙK)3 Nח*[,: QT(Jy iUtwS(G%6z!;C~ضbopkDKO.M׬#rS'"?4xW$tHgO"O@ӑHe5w=mZ*e{9؆r6¨R/e'LSjKt2j4dsfk);;:r˕9N_!RSK o~F#DNC"&̽WAQ8d=Ƃ?6 MW'lن/AN.O*;QalRʣI\iR[#ƣ=pF[b|"t˒+heF;C9b\§Rg?d!rNnG_:/N{J@&ANfl椡0=Rj^74? 󲦺 )$AnYZTJ]/THz- Rl3ڎu>:OԲ39L5Xwf~#a5_f;Ht>Uk3b! `O:r9XtFK $w!TFԎS%W6 rs%b_\xZ t\7V\ [STб#kj _g׺m6Bg}NŢ^9ID0-঎ 7~Q11T\,P\d޵Od1_$8JwmnksHKAzq^/ eҜH%@դ8lgA?_5ɚ4%؞9:~[3qkB8MQpSlton,kPvU)sll2:Ѝ#1${[8͚|.,ٴ59ʢtr=0!?_Cs Cu]4n`[-.jf6Ay^Ϫjξ,=h" 6#ռX[.c8ho U 6%)Zw #-5 -<^)ED#}{/K" kvDe1AC赀PF^&f ׋kRn+P;_vd,2Z㄄!iqa{ xa_.M7s|0eow$ '_uA,?S_\.[FPTʖiLTTĤcMRzb%M @`Ō24/&.wY1pEMi6)DXn?QM5{UceuGSsbRH`>6)h SSFƠޓ542N]|5ˑcuhNm?pkѫN al"/`#-w4{\lwK?!-;ؗ -@m>]XRnU37Yok'Y`T^/}Sc|oɑɸ(ÐhtIoۊMТ+%6S-̿|s- 01ڟ稛Z]76$*."^ c@(0CM4iB 9})+`Kg 24H;הMV%u<3x,[<_&O\|C4*k8= 6>,=9TM@"`7&Nond_S0:dڷ}WUyת<3@WqZ}H9*DR|.2u.!ƴp)x1V6kf$s 00hqHf@%Xeš3[Q{5^t# UTe0nZ4˛И"FQ_22,Y/r|zȾu% 9Fݒx˜.EJm=nP8edf>u"ju>{7ϒ/>mTCUa_%wdiZ0(׀1ՠ$XA^Ll'MunWBK V{o HΥEyJ$_^ ʹ `cm jSoԧ}#$l_wM>^ ˘{H lGH hlћ.72>9nf]pyF?jIț+PZ뽉m+ dN&%F9- 6bUP`ĿS66|ře*W,&bOИL:# F? c')ܫQFڜ}!0 (Lw ?r<K8/RoˆY(4Hcf4(w>w ?o_G/yiA7-PM#KB@I0GjTӺ7]#>Fhr,USwe%E͌&*TBb,o/Gxla@΁臣pY>h?~x(,' nגwoa(2h a0\ҹz+".2Y`hFbCs^$=| +;CdwWBfk!y=N@\GojFtP1x[&XB}yGqȉVY/ nUDG9 Q|" z`Xi5MeXW6WP*'Z,rjԎn}p ?uWPI{+3 k;;lgՏx2VJ5o\Ac<~mcFv񥵔G3Š@ ,kubIHGE'9A70ÇYrQ;g~pUN`h<ĩBgH.@~{D2FSn\g>ѷ̍NS10d+KeLTp#7i)}H T,Y $Yh2P(K\f8%P0=C!m~ht, B='.rm Z8]swe|Tf uZEAڔVhg?[q? Vc[-bnE2OȦ_RF=*q̿;(KIm2=jβI8F}C}:-V:EfE֥Z뀛Ib酢V+N/?rO1-Ʒ ՄCk6!ffv+K] ٕx)u~ dӪ ; HϿAI/~8nwA~UKKdͦo%~&}wFEM3ME(Ǘ̌؊QmE|wi]`Y{wu4Egց Hslf.m!hf}VCxO cD b3gaqXMsHT.:HiF8NδL؏V> >15N3N BxmS h6 A@)tA4S*Ph3q1E=WTۇq6T jPF\q'8}7GZ݇ x c5jV1ŐΥsm^#M<e;,`$b]uLIx#7>!FykiqDVE\. Hqq +=z,gЮ3mqmL͏['LY-|vS{B#E9edǶbX:h<|IȝqQdxy n>4 & qJVgw [  w?fn47k!a'܄"\/gBO{{8fAx W?g~iPQStbeһ9+ns:-ME4M˪ECеk691g0x5K4Ӵ aտ J{Mz|vTRD1\fK]Y ZWcWBBwpftf1T?Bw:[ Q /;EHg89p6 jr*#M򳒃,pCop}iÑ1#x nQ:աrGC#6LC݂\Ak:[ ۩$gk5y_jW]gT&/C;;XWoF |s&r [ܵG vtuyx;,oKT"gz{opoi:D+5p0Oy}fˌM<}tve$xFMx|egܠ/Q/FEme-*la)ج> ˞OX˪=rfh&75|Jh$ qԼ5 1h?@}"sB'ɏ ʠ=2l+VĐb 4t2H=Wmw(V50) oR\nÛ4j%еKߦ2Q 68PcA؊(;5GU)=0*Net)(O $k'NMI ʥjy~~צ qO7Q}aN3͝U#,b?q_CC&Zʛ+aզ_k+s >Ra># rdJs]!7"Z3 J7kN3Y"ĝY)M)$ЍX`ŸhBe6jgCfCNjxNԜw^*sG&x810f }v5m#SY$+ (TR|^O.јQW->aFͪ1 a\D]Ӑ%,`9\P2l.3L"=|D/ ]4[d=#b-CMׄEeWĢ;ܒ3p˘279>2pǥݓU`&*[0I0pQj(S. ._Cxt[ە xE$ǝ858G|ocE`&R#D=CJJѺmb:nYͬ+6̮kPkXGz}Kzfg`Ѩ&EDY6H%V> S4 6I7E¦=*Q`ډd80 S4"-zQxcW9FD@p6+S(vQh)j㹿IOƏ@uGw_ ρ8"Dp&#dXS'*J2? ] <>e΁Zl»j%'/?cl] ly> )DS|!JM7u!칓clQVש֟+#{jyi2?fOI$5b qR̃lSdz'j_ "غԼBj)΀69ۥ74[nFLz> qBc'@UEd߆Q""I$!dI넴2ʙZ)p[Ô`,'{Yw+|ap#0h!MւlLݣ-*ҁES_ [`ȥ>IץoYn3!PxHz65qiJߥ#BTei T0ڏ) ̕ ZoL*mf|ǯNZkS9@K:lu[!.])lSC4뫐IWo8?V[cyAmҝAFN,ݦoL} ȑqH<7I' Yc !SM(aeOdC(^; ~U YK+_숈H¢0,ʗ&Jߩ@XpmFٻ^+9PuN,xs?N,uF7i5NjjD8U_ 80R,|'q|)R`> u1Q)!mId*Hq;\ 0qJz{`5A3kL' ڕH,? DM5#daZm'm %/܋'xj잘ʘJkTM} աa"K cPjJx)~.:U3ΏJ}|A0¸" ZE"LTb7h7QR!l.s?} u5M~f7qai9LAәݣV5crôbɠ J  .w}fSg4r(. )QQa??E$<?µBlD&fBB+`Azl^KRon(!y Os-e XP? )(o-ÂkkoG6«w/,5",&y_9lrow+9wesz~Wg3Rcǣkܞd^N<'oa%(>:KlRy{#kvsjXmT߾Wxrt3Jp%BL?6_hRL@/gŕx%WL~&.w ~.ǡcjX cEQț sɚ0.= sXGQtO) Knaj/#m9XfMgwdcȻ҄d"!C`d yݛ 6:Z,I[kc5|5ž:t>VfX3;j%aaq.bDTg'&$qM&[uF(>h(A cg5taSh,Kg`r(Ӌ9x^qq+--h8y?Dު ,?-wU&MQO,c m7iJmso9GqU3<6pk7[A˦-Ӆ*U@QXT Y0=_8z8ԟ,Nn񅠱ֈN񠢜 s`wDݭY>QDgᵶD /h tvOrg *=>W 49i!CG7gX|'U?IN/X-ZwaAb~x8z,xZax1 ^~HԱ0Θ鎆>ғl+_";h7?7UEٖ:YjeHr>t#T]D MJKH M9\J} hӢCӘmX_M4XA/%f5y{LeDc [!0>edFp^zϳ.wB#1Mx-'Y0Kru!#eXeE^DM#`F;"e\ L.r[0;aTsq%&מ-m3If7AhTY0:˦uR~^Dlmg7Sbl# V=W@H~8xb^q/U6]BY KL\m|iA6/tg{]S 4d*MwwS& .zXߔ Ƙ"IUTWܸʈNܞJd2CH#ɽ\>7GʣMD}>a|+ڛ 5˷o A@aXfk>a͒4Yq(˪2< OM`dp[Lfh6kq-UWQfis0}jaBE@$~!x,?Ϡ:juh\N{U)o)L,zKzw;xd4׵dC< ͖<69@@!=El͚#8֌.```$l3@u0Fj$ЁW'#O,I [T7R} ( mLQDW90r*= kAš2y1rnlM7F" 88K~͌{Ĕ`oj\@+@95ADC_RI({ʉZfbfm!X/|+:cw"G`Y={C[6M*ki"J\aC*;3yfpiu#1nj=˞܈W5_G\fF4+ԕX3̦ǟb~1]ul %dA@0FS fP~ۋH_,Woroll^!`_NuO̟|+;^?u Iރ-E+5Û#ͥPba'ɰSGI7Ccƛ.FS 8;W6c2i_0 OTܮi"XǀXoEk;o48F`dM9%= `:Nt JпU8mt&BaUd'ú:R9=KQ+8</0V̭H2˱5Zm@JBEKB>iȘ}v3k?'|F6}1N9!U +0yY7/]z[Ж1ցFw" -vS1;u'?NT k3jo`.22! 2Eiix|CZ?A %͋]!gAt2Wc^gP5Z8pNCkiP;#R*j  fЯr5aVXT*.Ld{bf@ZO!pYW;eIǼ!Q6Ǧ6[fbwuSfԕW};&*ŅT .:3xdj|/Pִ $:Wך㛾">v8>x"VڷiB"XnlUM=#"**İ,Rj 5"} Ha86O`A`5 )G3$zEyc [m #N0Z#߂ov]H"@IsZyɰ ,IwLbk<< FcĽ($%9UB)^ ȇ>i mMFW.`T5We}^L/L-G u*L>:5}4U!Wo!di?Ѵ(6NA"KC"h_5ݬFPz0$*$2֬pVJ >n DqM;1ꘁ/. gig 9jvgJ=l?< (I]Gb[Ju9/>ӨDԌlV/83~p:<w#bZcj(5T4+KpP'aJ1G?7RM'bA~(IiHF'Z-K4En,('h(K:|HZ,u %]r /Egny`<Тt~r;G*4aՐf&s.li>p'RG%%n;sWRBRfַ8wWۈgq!" =4,9y"db肏,WuG+/] WφXgni)UV4s3֎ߩ{o09e!+ w+pUQBdp9D$>O$홇oV?:H2wD&0?7:0+ŏkf|]b@r8sRnC UObgdF+}hUCoOsU-_ 8Ihus&x?_ʗT\…' "GE*˯zR\An>=٥tnǟN$&QMD[B|o}ܔJtihW݉!l(K]%K09BAjDУ8W˱C Ɍ(P`Pu~Ek{7RVq'Te?4+#-e}RޒHn""H;D+'z1aX s)4SVq rfWk$_6rL  ɦyބQ]Xz3-g2i +1 FJ-3NU ѵVӶb\6Yj ~&e%)j+o ƥ.v_Vē")9?}@x_5oTūS߄# j<$fJ=C:;یl--V[ڝNy8"k[DS`od,UcWeߴ>3P [oGdqo|U4Y ⬖ uD* ϱ J4@J Yw=(bHb'uY`,Gce:BLls'U:i]AP61 \=mھ+_=ŽMw܅vHsd35^VBԇ/Szt2}ٵh[Q#Idk^BU-ʇۙMsj [%b TUK/-ruӱ$ `WR(XohP/ Q"7ľ`ͥ^#H)T#%JWL49{ -@)`-r;GwInmtCa1ELH 3v3Rr,r9i2kA%Q8*.`fy3BF-6p$S9՗_`ܐ`ز%QF ,0EyLL*<jU}hG SԑEyml "'y)(;JoGs˵b©Ntq~˲r: C(S|Lנ퟈#}ɱd^s9?gwR4X ],ٿ=  2'H1 sr'䕛ΦvI^q O3mS.MF%M2r osSƱ0j'q(v=KYF>ˀ)3<<';'@?slŵףf ch*[5m6;`𲂴.jƘ̉ܲEqޔޥ&>!>`[s4Xan4 2ͪw.IKKdE$,_ /Z?`BQ1@Exo\^ulRwyci< iCkx+Y!aNhD\WIYp kt&Hf>'g:Lo^:39~5)ѰC6Ad+=G~>/~ABHt[{PXq;Lz8WU4$EF;ZdB&ʧt3L5kHuy' }ř7aUnKC'K7iֲ#euW4C.M:<˸ѐ|a_ Z ![3B%}~er҇..'j/馯(wV&hY< T݄NIb(-8$cpD;"8o\u .+QE)jw as[ZC@뫼ID|*xys<jTr=W{Yr BlԮOϛu.2xЩI3/Ym_=R͒" 8U/=ulJ]QI%{&b_|k׋bhZO@ FpN2HHWJ& ~z٢# C>N\H?Ĵ`FH1 M3m> ,uMwA#kޏ‘ *\񟙫H5WbrmSǐ1P!X&:Upm#]lp'?eMρժ%<@L>dC ͨ;rP|{Ν[1)4FOF72>$@!zX}|!E}c5Hq5́'SZS>}>jnA< UOܛH&G is qc|ڑ-20o<9SG;+!ng:6Zv8-'Azx'#8wRWjsW Y'/raKt;3#F,MC{C#E|co%C +҂Ln’ rXə~>pdhY%  Y$އ| x!ޱ,-%u]JP /Oeܧ:&0cZSl4':4 Nʃ#'Sn|M'֥$XC dylqD!:eW{㣌W{ zE_|؉$/,=]|OSo1zE"knN}n _Wq0!SW_pA3߬ذ$R6]+f'PqAn)"@vo`4>FŨP}U}9=%LʗepCͅN@ ͘me54$F8! 'dЄѭ#6o,x>}n+a^vZpPN"X۱fj :Y16^3Fo|[i"nlEŐc{H@Q ]rP}[nQU+JpzYxAOŵN x!rXO}/ELp3E#"9|f * swq NXtÜ Hؐ7-OyB2+ZsUZ2Dwm5 ImfO8E@s.2t+hX8V#;0ŏ. ]X{@˹|CAځ1@!p=Db#MVL'p} lAR6这L5)ex-:j/b! mRX˟5A[5znF,=NGE,޿l?EW<_>qD%>Ğԅ9MDSY'xu 35 bKb挨HQ[ϼ&Ç|ic0"T҃N@D]`5~{Q ,wH19=e\9ԇQ(k. f&^%y@9Y4% F_ Yq@]5[0Kjh?1{&tEgSdNhu\-uI\çr+'?]ㅷK-=6VBJ>P76e.kȯo$ HJF;(y[ կ"1۴|Og@ΰGu輻Y? :KXjn!i6ؿ&w՞A>IFVv"lhܼ}4l>r0 =*L1np;3#Wk#e̩G n)jfZ:ڂ& a:cp^JPIδ4F@y~IR|qhO}w:~ Y|TmS2b ̕`ſvw!a*'h 4#x qzj$/:4ֆhE>^:7O&/D G"I8uulM DX sTN (n%w!jtTŃy+%VU6J}uI >wm# K'5"0G _iMOw)<&D !c7ynYLn`ᤞ}$VW 6(vv _oN)ncyK(e{(JPsg =...v?%UG rtYrGz$#7 ɒY-Ƣ2 `"Qkhn@EonVx-Ixg LS({@hY%L2/h_(ΤGg5jgޔ&2}cs_="܆9A)# GҍÞQIM0{g .]S-F:: /BHڔ< ۼۭC۠<;[Gڑi RwvR#B ,]49jJE%-^̅p{$8|Kz}y~F!A,ILGiU1RJgdWbJk6N{Bz=(Ҟ8a',=5 mpm DiNs,fRb B %ϙG`TFgi$@C#4Qe2ꃍAI:[^ՁO‘R(Pd ȢR뻭fGaldZ P !AJT=7GՓR X(%o~a|>($ a!kbIq&9a|gAM?P,16^磿5VY,|7 L &69nMr&t5-8hv#FcFuu`KrZޤ(qFS/ۨ##uiTHv1fBBR3Q4>m>'鍆uI&N)JcgJy;;(vH}{D7 ,C=Lxt*SF S@C8de*'fs6,fdp$R<(;ԳG98cY (Y3bw3[nOBa? CT93-g<{Ii,-e08H4,1-cE˥S&$߀tLzj.ŰC/cUC`eAeQRP :!ǜLbr|rSar]Y (MDe>KxU#x%D*gk\0YM'wJed!g[U[D ;}1BzNRx0q1h6κTL04؜/)s,&!"͵*MEʤ͋Б^7V8:Ȅ-!`:NI|u9\Ќ, %C4>V>CK]) ˢy"N6ba!Ĺe4BYC}x+TyYjx Lgqg7)R6C%}/Yi-<ƌ1rjd=:\:dޢ<8w ?ڤU%'C!26ߧK)m|ٵZ Q)D#HP2f ʻqtx|t8AjB[`SVRу񭹄177 $#J4kx?P,n6d&K"2'%yBOrgdjrSyȻ3hEZ˰@].À:Eʋ>'w)P[;^=Y35_:˶?_zDʨYW׹#!BL|E#}HƳ~&IuHw?ORhy&b' ? ;xG"USɢ(}kjhYPa5`V-I$U;B3|(>GƟ`+Ug`XlitMsbLWov& 1ܹT ƫ2s}T:S&[y?j`Wl&OaKT镼n jbmwMRUp0WB<zha’~[2 W?*jp ,kN&_AE1mɔw9A}1)v|`Q T.n g])4<,P?|uc $B9tp++~sݛQt & q*}̭.; [71{(Oi{NZMO|w;Ó[QqRKBڮs S /w[ YLmpwfms$5osj@%U;166L&0F@P:2 k'f6:D).jK)qEb) SoS|2AQ[}j*t\yi7  paJtB)t9;"v>eB+8Wv8J}f~;X19g?sс+"zmik+1.vofms 9b'4ac/ƒ 2`MqC։i -gENpRb2r QۤNs»fGUAu4?SjʋLx3 S!(%LGiH-bC:.vU5&UMXpqcLv\$p sU\&7!7qq)bleKMSH>uKmN!|{ "AM\˄^ BvGF*0nw y+ |వXWZzPVl`V(eiB4S @ RHz#0qeUcN[XegJZ.O{Yepp;U>j]_wQrt^4>?ZbEA7.DLj`tz6bdx3E3c{yCuo< +HmU(-Q$1K`z`sg9G8cw I%<s+%+VN#Y>oЛ_̱A\ c^/X[ޭc?)R&oՁCVxQaS~oZt(P:ID^ a[3鸣OqT=yLdyl _] ) .K𙊰 FD]tүÕxB&Hφ2C+bSa) )+J߷Wz/mf'{(WaPjÞ3at%H$dYrqa$,{xt!tZSS ]cędCNO\n&dz=]XD"B?2 ¬?]eژ8)Gݧe=]*NS},Xu py2vJԴO>&y  rЖdjSHˬ#\3NaL H N4~Bpd< 46f6:-QC|?©0U{>T+:xHɽtq +ȿ2tcyҌ~gkItHliU$~TlúMN .??Q=7n+J0aWI|k=fuZ$0ed9*p\:pH(,őxg5%}pCL\Úޯȯ+rD]L *R󑈴;RAR\:_soW<'R葊> %=ܤƳsnk@J{1vrng-Ns"m ~%)u6Ʀ5qn׎a,BKRՠ:M*l Cd^(-A4SOTS+~+d2Q|/~ˣ] XGS(\LEl.ыb˱,ҲvMU εJ4ux ^>jЭO J>74/M{usZ@ +zd,aښUmDvX z;ZR_`lZP-X1HҐ86,~ ϺFgq2t u0%6:m2Z듍m輩7Iv+.XJ`H4#ŎL^ưmUEWKš@ǴPa$HM4:$::nѶ Ȱ>wtpU솢=A%3ˈUpE8AԕdQM_* kkVQFʃ3}W ZRպXzWS.ɒk>IO). N-o3%a$0M<+(V["FvMxJ\#I3kokxSjQ[q$-zz!zPP |%G|DHH=ՋTtf*=Jg妷 c`²'W𤨲tU"[$J lN)iH;JbX |X4TFd;M ]&X4tW 0XrmЏAӠy+`)x: "}.#XI*\6G O9; xFϝuvl ~T I`vdp Fʄƽ 'l%j[@hnqpȬ0_ 6ț3)Em=2wzaS{o:ܫ#r6b&|<=)]N&nij饄Qh(Z W`1-NA4m OSB{) 4<ٗw{3 ŋCfr. 4$ߡUkG!KknP8K,aft' @%FGQfgi qu5Y/>S;PUwwOzceg[}PIVi@_jM@8cp/ut03哕?/nePW:/:LV!հZr{ydr/o'=H!ܧ0~Q]jIB[ӾhwT:<˿X> =[ ;&u%d!%@p`'^St@F(3.k6A$xdJ:rҟZ v*4.pYU}||l¸|k.hq\uŽ=J}`VȜP-톜o8HHqmD| w:idUam|b^(_FYl*@DC fr͛ơ䆏iaܟotUqY[M( onHA˩ Җ h3"6KB{l"Wk㘺/rt\rFᚕlS%RQܘst8:LAxeGԴW#>e$==Җ] L/> n08ٌjj=}O0ClC-O#'R@ZMqu7+Hx%D>G*\]`-8?*Ǐ bܘm"up`P+Q4Tn'4StR%T==w%f?XeϧX|,I~}]Kh6`yTuTc$vZ@%!!}2 5 %]<bO1)nIхeԄtxjkUzWBa@̂=יvpf\x-fU2boUɎԆuE.M~cl#yНkT'?58&#CHm5ܶ Cf8hIo%`Di|a۠z6 Ki cA(h8CC!xхh7_sazQ ^z4ΤFXֵFH0XJA5^F2]봱̡ښc#/oBb57x7PWטa~'|C&=߽4N [T2|(e4x)G1¸ ?{ H=I9i_29\C?1@sn?pSo\dDɪo ֎g\ d-Fai@>KV_:,#ʯ L#e|1t8Lc]S @!ڨ¿j۝I~Ňޘ2a֫AKJ<(Th^&,cf) i!`áiFWנXe,3oU޶fwYv\P_ GwBPWNeȨ>#zGpٔqs/yhl@˚'S [6"Y%R|%[)rt0L?Y)˶UsB O@C;T9ʨs"F>rn#I 2OX󣄡;d]B?& ^$Kܭde3_3 /W{V La|!B6 yCJE޾Ŵb^Mcߝ4}#2k꡼䌾B5 h ]$E۟POՒBy25T掙WǵUIDA^|Z1@3r^Gs?$ i{a p4UkpLE qZsYm7I^:nW(Ʒ}ՍCF5՛-i@_đ_gqok W8}hFf \!x3ӎ${QL1*ǐP OA@dx),rNՏ`M(mq:CPUՍ#Bi]z#.yw&ðXhƿc#8",,yNlqiX NbNCϸq|~b| .gLQ-|o,㫲隻z:͉Eٙ12G2̊>!H4ŋV| IFQ "s+5*$e 'Zȗ˛OXr`VhmX \V$c[DV`o-?7()3$T˝ 4\< Ug<^ݫh Z"tzVĤD'<~: b6Kv,JNh+3}T|M']_&CCqͲU>k-E@NS M8+hEmUR,1HPN˗]1&'2_{}4R0ҰVۛ͢f%/tF][f h&:՛fǣIͷv9ܹ0D;72̻,DP -֋Z50sĶcudbcA˓+"}dA 'qt:\hJƺT7<]Jٗ9&]  nkԐTwPʚ(ëeA4tu{% &-M#ր_59(,;{ݤ{Vs"V@bW{K^B0 e; RQWϠ!޴ڥ\,AƅU {|`C_пt%^z9HXBƉƢQfx>⌲@3mO&ꩧM$ȏS@6A D ;=*G]ZEF epb^Vh*ME?S君yJtX%p nDۆpAW[x \QTr%j]=C* \A=Dn[jixd _1&R # 攸@֙'i̐{>׵sԱ" 0 Gt'L_{^:6AJO@Qt ˠ;^cLU0T+,(4P`1LyEWiF$,]EKjxSXgUGִk"+K(.#}#k&,ps),R7aIC'@{ 4/x!I" vT% %c tWeo<@tO+ ^2 'c(M=jʹAތ9 i!>sHj/j9-?iXJ h踋XPRs \ӮMF@E9 Q",h<i[E{\r5n@!qnb?4>HJ]u7b U(*N뽜Ihȅ.>tfV[\b*xA Uo`xlACc暚W"XP k&o=l)뤼O5! )xm8~ӹ0H'4;=/啰/`"3BeJazwxN8ol?Ag6e>?S'`vK*GPC)u ЖK0%"e_%xHQ)5OZ ' TvnoT% ^orԺٸE#H7rvsu CjOpt6g5%V75iXd [ 7\P9%ʘL0^h{ ¨)DP.q:j1).OCAdDMm8:,P#~~т ɘHzj9d}\S_~7`Yc&@ n]]}ït$rË:h!zBCD% z sйv%U|0J,U_rz@M 4j/vĿ߸E?URM:i^ r6pkX,@-NQ+°Χm}[́ ׯ(X?+GnFNU#^*YM"Hs["dĪe⺷5~@o &ő2_vIM=\l Et#(n9(g-|IsߊE͵8Ppm-];IX8"C!ܔy;e]*n;|Bu[‡T3TdjLDQE`kܩZㅏøKT2DDhω !fj:K[Fh?*RufˇpIvu3" E zu|غ$8>R*8٩me N1y,',R諕ΧPuh!3~[1`Wprf;ku_`QS::G9?A4[4`ߔc?Ck*B-&#΢&7IDGIC Qum:Zo'w;&bJ(NE*Bju/[a.{[77v񓩭[j4dS~˽t|J|dR{BnyoOG">t)t+:kI*AFҧ;KPNϮN`'Zy4+ÙPe=#Jj}ة<~A|^{a94v7@ R-kPU ]ĬT>p$u~tS-3[zlzկ\[wY'Sk&4zg]d IMx9 ؜1QoՌ׶D}<_*8&Rt\#vªǮ#2Ώ4h]8 PX>/~{jnN@bUGpHUY# ml'>#yEg %+naʣ:Ї(q(E+\P[:ǯՈ|@=/X 1 Wq@ i)BaRw6Qh2Gx}%-yukLLq0 `fT!vݠW;': s )X`>"bmsE;*DgH)W$r#_P`F8ZBJc%=XE`݈ DS} {4}Y3I{'0B֮ o >CWAϠ뎯'u ,% nf̗ĦU&We]nmnuC_ %фkmW`7_%gcJ<{8~U5K#jU̕3~E䢇If_[fhx䏉IMG_.$8WP(5/O{4iK(9?8&rĩ5ĄNj\(l1ݘI! ]D́ ԺUXߪ)+ɅruQҺ>t%%257w֊p]$XA3Zyzmߎ20AHGpwgSOtJHS+e&E; -9ZtHcjkj/G>ҫs-nLׁ;`ّ'2:,ߪʝxZt؅}v L)KJ؀G#̝ l qlxlqz0@yB4:)5[Q5VI `$3Z]r`ɿњ=C&nto-h {Yu/x>I;r(o cMs :,F_( q6pOhRyG#lEЮnɑ_`$R [fI%F/;jl;멧Z >#)qETCJ'?Ҩɺ/w-MuOFgmY]+ 4N3YT3xz1Ft‡ 7PKn{kM( Iqa xTwHԳ60M"đ߀3錍2sio6y$]za}UmUqeQCv a u@&C`d`{i9sH:yI̜”NӪW[s](y9Q)*p?zL)w,Rľ|A@vZ׿˅LpU_0?4,WCE,kKFPr#,  c첃0IcP~7La6T.#H9 MkݬC#I]qTbpcv8#`@+()ƈqJMl{۽-FRY»>gMTo׹n#k m  H/?.< T)(_ż)r0z|˘1{d^%k1NU*B?ނ\â+OҀգNV'NT(r4{04p0)HXB+@v\^k7`<<s-7o5,Om "3Zj}W C~^E, O_zR{* "AdI/FyдОX7Zx"81AJ8,D=) `1.GL+ZFK^8>I~d`\C`9Knj 7҉RV \JmbU#i\jZ#KQsj7\QW˭зb*u8`O-}+ ?PQĐE(+Z8˟p,ދ揆B9_i֩hl|V_YQ-:D<ˆR]-BfﱊW6\zrҍ]X4ȳei~.[}aRRZ=#I4cOS\awWPOңH!m|]5*JRDHz$L:ʶy7&HN6%Yk.rryPr3.txŷA^JpI~KE(R Z^rZkNKZ,[Pij/Ank u#tKO>ONQ6qAi=M:aRֻQ@7|(ЂwM6WwW?L.o v=oCuݚA9rgJ0~-XCEyeWZ Opsn( MeQ26N?dykALB<wI^klu PW yuiK3ہ+΂Tbgpj3~S)yko{!L*6S3KC!8 ^Z5FbYy>*cK`0>VouP;oMɦt[z414?lxd+7D_NZA$,Lɫ`e3RS턱LuFWe-:x3supxmK vN%֗{DQ᷀XYgBua>cdW$b {.v pNHuF:|X86ڌ "yٌZRԤTj+\U:N\A6f"V&f\b?S $5 [`/\z#߻uDTLG1of9*JKD a +ޟ-My^ i\(uwl!_k)Z$//U'nsdQkYtpT𑓁TYtU.Đrtn2nV)7LxOrc"2b_PTDxҤre:<VWzṁY9Hwh"9&@nr.^`%=&}Uˉkw>@1*kcuL3}8 ބ4u\lKVڣgy8͂?ru΂f 7+6BJ:%zk_HDО+-OB Eי [!.[c)G595 4T6(]Ӆ~]5m^p{ Jtj(2Y{ȓ;1HL<ݥ\ҭ\@Lj˞Fw|Ǔz cWgOi =LS~7Z6 T5_WY^̸+oD| ah6lXh_Pf:;%$2VքhvB.Lw;Acϡ+U #g<=Q&[!;AMfI%M)q.?K:m gR"|42=w1&ϜVߞ>6Or#X/5. *#-(};{#AޱpůW;mz{ W]톨)&[ 6U{_w0 Nxy,QǐԘŪ" \xr7!_FepdykG[" 6员Y!pU{U0iZWtV} Z Z)F0 !fI1Ş-|EOJ6Qݙ^RyӜ ?B 8 ~%jU#xFA]D1哕V߯nE8'~ڔ4 4P"N XFq-F7f)%hhF[aV]VG?j=1mi=Y} tr)0tO0*akw9%M1u5}sVnY!j+.P&`$xVYB1CeAwu{i:g-nqW Wv ,W] 4\uut=qEX5 Jb@j'ͲB'>>KMBbi˾sw 4b(mG=lAxۢs.W4v N2>H[H SW[Zaݮc%tT^t M̀O A2[z~m]ILy1eI+AlDS+fw~CZYް7a*Q8B @ZC=}] 4ʠ256hykoQ] dB8-s7weБ`]7~`_ A԰aθ-k\hV685y, Ϭ@&ֽOx\T %;_j^s a ly{lmg xGn5 1N uQpk-F VXÝݢv`(hO{q9at& !X}Xp$ EoO܍dM$0°; _"Xnٗ;/l: w=)y ∫$IS;PN xOO8=[P*5tW)x,B]jygÑe3wKtyA˖oW߅8/a_*ȹ>ɍ";ɽsCfcfy + xG+SpXtg_[) n4mx׽% JdȎ}1v6*GfCYd,zaJ g79wh-a55bSRstY]PkpºQd}X#GYe?ܕq?4.8 k>>&{Tqh=[]ޚw`& 5e1[>222EkCεa~2l&CҊFsoϓ^2l&tT&MX~+@t+uQrW6.Bgiwķ>D|Fdü]WUJn(|ܼ2A!VcDߓOa{B kXl_|)̛Wr]+ Bണ8CT=k\<dbZN١f*rYJpC'FbǓӻj8]9=l /Ka e9Gv EHCFFH;mY ܯ>nyj}Iwk-"o:;KeRg:pz_j˥;&Vqz9LI43ug)T\X$ :{7iYq't%w"\n]Z|ǚ1%uy/i r˸4½z4&D@= :ї P;m%ǥq.{6kW=9Yx}:+,O"ryj%n &Qb$ט1bT~UxƿY:cq?_(ŭRrO9Pnc55\B-z=rHc5#LBk {^g;K5󌢭Wl$8R3[Zi]ڍ^Rx5Y@]>L;^v^o]*vU-(/\,h;fiݶ39 ,$bfshJa5MEAq,-B,\3Y_C٥JLC#֌Q=$DՒu*8H v WR( f TYhTMg8*o0$FOY8/M>|FFse|<=] RkoM%x ZB H7¹I!taQ0strYF?|,tN73JU)De=3GqsI e0xq)@@TU=bMe9*o6Ҿ`bdDhZmp5!suQ GbO$urs89>?$[ +tXÀ6d{̜Lz$A9-R՝ >-] cv2c=K&DZnfON}c'SU[F/#MEzAMI -fw~r<:/7D^7zdV`>a`aOڹsYAWX+AULzIϹwnJV+qC|,K95%/ty CuB.-@Lm#Z H}B{!׳'B ^)> [4JP%AGH=/s+̵3 mc 4e~LΤEN=b4?;uh=^ni+S*4z#H9v\fM3_V]L{.Dn@i5> zߍ5DCTɗ|żB0YSMKA0Bᬍ6 Cd?ؗ7M7gۄc:Eሬ/)ST xMiR|ézZ`6p ٭jl* GG4\%Jv <ҕrʊ7觚F r6f'4fUO4;IK9x>y@jhn7Yڎ`2Pcs na3(XxH62}s.ļH-` }kMh73{xԃj̱̅kA%>D)c(V4Sީq 1r)@Q@3כ(Lg 4 R vj Ϲ|`wZq~K^ffCdVN$9Ȅ YߥNTaF~c#e*^ͬ}eŵn9z-̌[$͠7ba˨T{T&1չU+TM+%nW6 Z#M(>MI. =:n|X9.X f,>p7 R4nfFdj2rdPGY=2~R4&X,_l Ѳ{W]/gRO|>EObä.֗KUЇwo+qä}2v [@Q?t@pV`fG&tj*=e[5Q Xl7Fc|?A?jxvFvt4 E0A/!:Ѽ.FԳDxN':߸$߰ŒWtZ:͋I1)u`QwN4 $Jc_13QFO )So̘4hUR,:xi9lJZ+$WϻD7|i47(nJ:uZU;jʙ[ڎQ qjCZ{-ЇwŹ4ika_y=c]Un\|Z}". iåḿ0ET]081 )S+ mAQy&^\Ilf]DQ>ars9>gQN ^~ڙ Dɞ8_Lj'1݃@2Gf5R4v%Mz4U_aN3,bVεC~Y8.A/>]nf 4ApLܦmXRw"H 1RrDŬK'i]U61,j-l//N (r a_& ǤBxmrBɜI>&)YPoDUO\ҷq~К(|瀆=}mlG 48IR C)YxOs}0 *EYeni^H̑ϱn5m6?QGzuLHhXKeBig$o[XZ#O!LT]Kkbyt$QI']eL+*BI?,)HǦ9iJoG.yMw"Tn׵!KareӤJFZȼ#LRqG'$- )Pweyum'`DŽ$*%=.oh2S~<yJrppuV \}pڇ%t'RBR֞'Q;fTʰ,}oܩRd*W}#GB25!<1zܶQ;I+&uELA嗗)'(s{yTx=Ce,@ K4iTONbD;4ՕbT8bws%chV:@\Ҽ'< 1Z+|$9ܮ!;ܷ#6 w2O :>,qÃoH4K%h!'2I,AOu[YqMd{2!҂+8lj3h^+/>9vQwGpRl$gVz_vbvµfnf_щ5"Nsf\2#Bԅv7D98ZX2֋EUB3`~jRԎK~4Û\%8 EK߀ JvѱOM?0) k0j ϰ3Qǃ@*]#Kڃ"bԵFiSuis1H^9 =ݱdP:0u(^ b-6rm2h(3WwLR0O#T>s N[wLOw>Z5UQ_HiCC Qy-&yn,6P&ȗ-TPk 5yoTH7]wQ,P&z]Ơq9~K.VDճr1nnFo8IFdU Iwt-:sʀxWgMwJa-bKq8S=YA7N*%)K 8l+,iYDZ]>vqp ,hށ5_?bOLEw2؄nliql 쩇l/9 >KvX J#G8Oe):m/Ȥ1n:k.:,s")snh z8}&?`ɢ19OcmFO}?~rIK&H7K-@ӎl9[͙Ɩ_j ITv)঩c {;=ČSq)C \?- QgytKJ3>Z LOvJ̱L~AǢQu1/tÝOt9] Nܾf#&$}eI]Pc+ "qlH4INxdm &a4%}l }]f_-Etﶵ{YNf=5Rs^% R #"Ez-@4sskN-'"8:f%c*f=zex!ihېa|BynWqҗJk&Iv8 NGe/țVL*qܔ)>,w9w 9ܓ"[U:?Nj֐ 9^ﶻ7%C 9L&B0=Xں{֎}٭elqo}NwwpܜJfse~J3U;޺ t1~\837sګkpr{*d5tLB>r_)?F'ϡư3/{-(lx@*mUu!w&7) uMV(]@&sv!B%AG6+*v_A\IfıQ"wث*ZK+OccJ7/Sɬ'E3ߞWIjrjLF)S}FF5obi- \4\";:ne|Dt%DZVM9Ea'\-=U*D .+M-/\CGj[E캻"Y'T H,ݶ>zpC]Jj׼ptJ3Sa=jS2unkns %3]2A{nXz/;jC{qb74$1{󅞼fJ.(>UZ Ƕ[t7Eʆc`vg{[vmjY;r vp{E I*OBPœ7U2)lKZ56@Hŋs0oiz] ?`aӁ=G _O9a:- gWޡ8?T1%0 Y9Y^+Xcd1vq\=~݁OٲAvb#zRB<ۖIr܅`&R -9䘃 ۓx1Y汈G?pi,*CEJ$Px-VTP6!hRz֪(Xɱ"(b߼fCpOz  L'O*jMn+uEF'9NQw ӆ>F$=߆"rkn-rApg6 nɗ'5UpbA5~5?v$V%l{DM c[z܃BMIlHJ$a锁ex:W[&BobhT>@#=! |3r˲| %pe5=גa$.uйXzQLҠ@qCR.@gZ}Z7kY/7YDeE6(Jj Cw8 bC?='PE2巹eU%5\%.zd`~UA^J1 =K \G")Q<@FlzZGr/!T,EqOA%Auk40^W. qn,ۥ5%;ucg.@lc:K &DkW~MnLXc3nX3?~{XܯPB}O5DnF"^[ VY؂C% )k@tp5]Ơg۰B~6bL:!8ĩ|ПRЗ a\ٿ΄oo#A݂拹.l./B~/^ߪB~^mZ\ S#i8IʙNoC^6t(UJCrc'D*k r=qhI_6v$iƺkg$0O{J*jAK-ߥF:גoo\ZgĠbtZÜ$b.){RUz_jf]犬}UR-VٕIEx-݌"ܦj<̃ק ,n(?nvXϞ5-Lzcu;UsX2ݟbP4aK:lFf~H>(8Y}\C:g~azpv21&Z3E6hhF %ߑ\\ ю,6U/aPRڭنA!ʧ<{. Xl| K d}.-nW[|vΡGCD f@5zG&O ))[H].i/!j* qVkVI^؅>"謓 \;x`u'`+;6 Ob57fdAb"`)5W͖EעP,Ż%@`؝ex1`Z'JԤRŽ 8qk TsADQ0y/g)0.ǀMcEz<x(ts]2w9<{lHt<#slE޼Է$΂]h7i M wX~ޙ_@1Ǩ*˕,Ban?x$֬zrЇ!0gűmͼ!@5pЭWN2h` =)Tw}Z)O~-2^s( _ıK%"В ~q-D3IGJyhv̴eGW)_ IӧA7R}BrNv*TM`0.߼;<6kG\. Fg/< v`XG5ۄ(I:j蔙P _ɰ\]gB j6asT{kšo0"-l̃ Fq5'hEldwlF %IFR J1RGѕeĪf>dչ)~Ipv_:2u1\W|ptU2v%a{YڟEY5ߦ>ylWm[GP;>֋jnӒrh'Zr-7puE_;0Uoql_U/E_3~⺲ awb)Q>voOUU ^n-?:2D27"KRԒktk>覎]=5b5(S ޒSҦ*_Afm|xI U?fN0qDwYQٽM镹T`/ee0tyX|5_Y"%߳m^B[{ RZd`}?@2_P8 \$i 2,sHRD{˻|e ^5rq(/^+ԇDL6 h*`EQ7ՔGo"2W;Kcî9{ѣL˜U_:X!άՠѷs-Pe+;K# Dm> 鬭%&Q'cKJ9c s* M`Q̖Sc*kEӭSZNg@ml3KkLS闻bjŅK#Pxea1L^,N!^!43/9VlI=V%2B BO>NyT 5-ۧ 54ĻtYY݊ݗSAEoSrEfN[@!K)^B6_Yfr]T*PgJ7+$$ǎɿT5ݤy~ $YOJ>;9[6|OYySM~rn5j't?iӵUб〉oPHd3^+;$ن@2bY1^|]Xѓ V4A"ufQ:3cϩ,(i-'"v$Ws&;[)?]9tz7+T٦?jAP̒/ L\h{p˯(=8N}yS\.bT8 |l(i<žb`U@cc@ b & )r()o>q](xk`|?xp>>\|O0p+V]c-9rju E4Im)!9~7vd3b\G;57|eP]ƞlN32 mѮ*?ds|\"6  n5ޞm%4XG{2B h+] …GrkwDm2@l+kJg_gb~Z aDlJ[*RVCYԖF$ПP~7Ò܅]cŒKRL?U"P6Cٞm;e.?:av͡r/ݨ fG.;>0'9³91e`2-*O[[ :"+KӓSwdiq{0.w';p~ab:VI:R$YxF_Rf&mR[鿝_@h={򝶲̟RםnEӓ^[_*ِTe~$s3ܔ[KFo*EPğvٝ5V BW|JSqT)'1]I/P{v\ʗ+69c 7Йo_d=E)lyZ5 /1־(²MD.Ce%4<f/G˸{eh/x0fT .7B!#<%ד =,>3G+=62x"Y;cqmE!Btȋ̙ڟt' +%4ƒbWF( O]4xP) G5$ZChGKIjN^0Qp"S<w4F_?1oV ޤ+70zFn*qfֺ< \oA:`ƒc,e@mGx'qnzp.u=QHKtxQJ7,pf%Lt^UrLM2+R^.ZcVq(ҳцWlA ?k(׭zRvwޖH%:¶ꗛ3Mޖ,u.L|,Ц%϶´ƔȜV߂+ :e7.rRKP*o-|PS1vVm ̟ӇtwERvLq بų> I_4j:A͛4c?ry5rGRO9([_DVC|\Z~ׄ _LUX*ϬLNnJ*yj &(| UH_֐06YƁHlV4v` nZRDщo~t@d9 1MB6`o}CTѧܲi]|a؆q4a&φq}K! .t']JoO?++9i閈6sS Pdo[>r 6ҏzn < gUڈn;/%k~y5D% Fj(ar{S^xc*2nЎS&01~ LI7 UVE(LN5[ eNl'@By('KJL BE[&pr)BAGuřQA'z0u+Va#NP/hO/q$H bY)S9 IQ A;-#LI]*krnSPH=R>G6?`SHH,Ƈ&4`(c[Gv#~ !%29턥n$8y4QMiVpI]{]Ldׅ_R\%e7\h=}EoRQ@g#;ll]-u|P| )ZMvmT٨HUuNVv.DdmbI/KLx<lnG'': Sw=GCjȼaq2̞˖ QK;a& _:Š3xb**>Uc΀@vAn(%TN YTA=\+ 8{F#CreQK UvEFvx-f H]bQ4HecD}T{|5s8%~Ɯ韺]`43ɓ 穾Uζxlfpi+f4EZX+(; |jb31{4M4UGX[AhgȬƞnG3xȃ9Ғ ה|/^}o %wH$oBZhK&(#/r 6N5;j哮fi:XҤHOBȬU~5[ :-SPg5MͼtJ gt~%"_}g^SKD>KC_ \ Wk=yruU?dFW>sqD} eqJ]&M$RF8~GkBYsp7%oT^~ixN!jnic>zqq"8&g %H7MwO3{_G"ݍ`#Ju2aDPM;B+¦.];g\uv`JiV#@T^a&Ї%$aHw$AFq uCj}7] 3yHSMi5E2FYs*#xExIgHa8I@.&M-ha(6Px%.[T{]H^O`+ԛ=3~G1s"Gͪn9qlNl|5yms]$ۭóƉ_% wLٻ;S{>[qI)-zYiŭাl) 6J]盀3iP&\R8ҽUC>O`M;(T=a^@ $!NpxPd"\f@ WvBq,]jJ')Y_ʣGw5#-"_¹ੇ{ |BF`p_pR.^Y\K`o ?Fs# b[RkCTl<08?C-6}u4.̏F̋OXHv ?&6oIBzzN AV@I1EƜ"V%e xk?T'd[iGe:ŮZ7NXҌ+7 x Fi~Op^ԷK&a/,.@@"1?}I_GO^2(fD2MAsǑ9$| uTkpՔ޷Nq s+52rR (ڝ񂮸gZW1tߖY?3i gC<+P˜Uѐ WRv/1$;[mptG>pwDO"jC_k$R㲆Hswk2Gm BXxp,~r-qj[͹3΍b9:P(ZAqno?w)m򱉒xS<8XW (IZUQR9]̮q؟?isɭ6^DIzd#]=~3_W!&LZY:D/YiuJyJK:5:,1DQjkB"Sگ\lkf,Jp 맠 ,ԭ>JUyMcTFK!<@3>852j{Q^3`[7XpKT%*% ՗ar-k [a8.:$k7B , g[#^en )n E a!2fINLZ~"_@$T܉mg (#XݻX`_7 f^{Gz^۝}TY_Tũ#qhNM 8?uBvyaF;^6ED3h:2?A5W2 z>I nh/Pvi${j2E(jf|q4?F)Q;JF—5Nl_sHUt77H#軍1k"e*wpr'1,FuX/ll+UXکIn4vrcBp`ʣM,2δxm\Ch 8zV5f2I !z-~"vtrˠm"'!33ͷ$]9pC|-[ժclNe^ ag1BQSU5/ms$|,gE@/ A+汁LmjOx'MH>|E>!Rː ǼpĨS`m"}),F(h?d<9AJ_ewbG![ܺCCMpo{m@m֡}pL>%cΊh0,\C}GȺ~57iEGS=QiU dc嶏btE!jOf},;MG 3Tx|X-dV-L $=΢cUN7heJ5L %dX s3ueilKuS.0tJr~C`H'IYHAozRQn/YF-QyK|Gޏy U\ai*Et ^/XB%T%cfu̍rvyDy{ IB$<:7ϛ9* ;t`ӑM? VOb{|iT=؏Tv٨W$vgƛ~>Ҳvw(~t\H&27=/}m⯚0O}V (x |$6ؓҹ~KYB7d]tou@f]=40\rAw8v kIBKMIDdZ޳tmNjEs8xeO`=ZWN3pzE4#"+" UZmܑ҆+eL%5 >r;c4o ny^:p}jsu@ׅ CkJm_eܺ+\懀PZ<Ҩ''m!Lg`RʍawFB5Aˁ!MtP'N^j4j1:矸vJ<aH>KdLGkX ľ3q pGϲo{(:|^Hoﷻewgd~Z6n/a(*D̀ݬ/+_ g†kr61 w&Tl{3]_.Iϰy5乃j;=O%(P& w%{!-# nSs%*QkxC \kc֪X f5pmA1uLuǣ@H3 t'OoU]zmJM x+pek|eul:>_)Vҝv( &8P j18c-r[&)#Lk奓HW`N5ŗtMqv3`3D1L%$kbXy4D풜g]]1fˣcD7'ܯ,יl) iYQz=>,zM [oa#b< Y{ wYwH1(:_BUa| 57%j*iQ\41COq t@4?v}IK_j]@Z> mIwD8ԼBzdLz,Y.wa bpUj)0,;E fl}K)B2'^үčB :i [_y hJ.W6%Lx>ᚥէ_p۴ `^AG&cfa!*2D|4+?Q>YDlj])M?,Q/:뫵3)&C-ٷm %xch4/ K9gTd$s>=(h~ `9\b{yֈ AXW<[֜:Mkô%o%v=1 uk(VjM]KhDACy)S#)(!g6cA"]*s js?e8S0x(;粦Xtc߻I]p5[2B>sSm[uud2[\Ul/8:I54FP~Ksܔ ݐ<=eo: @78nB<+TJf~v]}uLU !3yG(gFf;Zzqdjޚ=v8V}85s`a5kNOkC /?VeLW%C>|Sı5`t>jηq{fϒ>{Yk&6?+7C;-x 2:N6QA gƇN\gҲcOޯz9oƵ(-8ݍ0F dmtfP]G:S K塀 zka^ 9FJ!͸O|@XKϏ/>,Ք? i+ fb>QqCA>W{.|%H*OJ;q^NmsȹoY0cΙ\M&+s '\KOҞ#'u,%$ ,hČ!Fxj$9$@b#/+_[PB-YH4 N~]e dryǴ8*j4qcw29Λuk.ǛM!ô*8֥yqQe+D=)d(:{mwBl&gs֤/\\4)NIl}ֆ RӚ&p;sn!2P2O /9Jr8IML-)11!*[fc(V LY0/ֳ6 w1w̪]ALQ']8ϔf{,l-g,s<Х)HqG![sb-(؉F%DD#^AɎ)קsK>vGIBlO}bg(zenDĝ!qnqIfk>pG:>qg2TsP؄7 ~ťR‡=ZсWiȕ`^?sއ S!0I`3'djzj2D hY-Hϯ=ޥD&u`yYΊS1$R6JJ^K EF. %:%2P<Ԫ&DB?]røBp>2~ֱQlt+ьW>>WN:o>t x ](AiץL+ߌRv,Z>;)ouVwslW%z`X%4B #YTJ}Oyoj\h?dg?oWt\Uwî@?k\{ot_cͤe+7jg4~O-ouӐ=Nv\Zo,cY_V à>IN]]>pG\נu @,džNW.ņe*l䖔Xz7Š@H>_7vגk0*8!\gk76"+WYwL,R̻LI`q~hOY>y6hpcޜ c\ؽ,z"/À'ݐce?b@-^`Rc!X[ʇŁaA`h s~5֙eg z˫UB-uKn& y^gLϪO l]н c`άmӍ40[pxxjR4w?lA4.XXlSZVTs,h=BDuG.mmNFh8 EAYux{nV0Uha}6OvA𬙌qB ]"Xϣ#jفn3nUQqI s*G輘"+Jw|KM=왱xV|x,ח]qH$Cw"P=[6C^݋& Oa /T(|(Ih5kI:1ү9z6N>ntW=V+&{q,WՑ@&{]w(<~X6x$YJVuNj>DUDW7{F"p9o 2ӊ?>XbLѝc|j g'cra%<E]w,K#rnre =|K=1w : ׍-U/sjIPBeT!7P ƇU#mXÎT`TD-\˻<#sHpMܓQr>DX,n@j={=\rHR>ZAc$8X*0dp$NVxwrPg59oĹ56p9qUL5X^JKײ-ad(ۗ]mˡ|aT;D\J'*7`.e:kIllUA ^}2=HKcRn48j8]kg `*oo@ht,@7ajo&|튑{@=9V'@{CAFf.DKց\[:zzblU?}# mE[l纏3W@FLk+>gPҽQtNr5bo%Kb[ en yX̾M/j(weIL0Fg>!xҲ/&h%#fTqfˠ@- wwE) I:DaN4^SJE]-1Z:" -x"@)y!/y&~']*Xy+;/NV6ɑsP1)~cÒ_ə7h[Ѓv%juJN^#jAôz~)D!n)8S\4BYv鄡m^Tvgr UnC9E|dm_vC`sG8]țg(/(89Vx 0>o>4V˨?1{֡*C˸*M#rg <ֱL#m"q[L~-4\Z5~kRk_i7ڕexK6ӪOEBh6I6(-Tsbt3Q$3GE\`ܝ-S:j>5 ^:cT#^V{pN53$Жo3@MI͙yR+vAK5Ԋkt!CGPxq-V¾NtFmտ3%X;~ՖBɸNF&CV>/ZRg.PԺ7z D L#H~eGLڦg0i𭫈)aͰ5rE$EMhRJ Yt;S7QfffvA`чjKoOB(f,5jR!YHMm&bSՓ1x5HveZm1^er+k&Ծ'AyvP;L{jKD (_5/s?'}oF^:%͆ =icDfse_zfd}>c&c!Q%PFfܳ1;tr7^;"bv\S&4WŦZml~lO)F spY7gG(f^$I.BUaBCZalv<{5{#l@.e%(Q0 |A.I#Pߖ-4h@Ky<‡^%R,+f퀄*#^LsrR9:CRWxϯP:q3|>j(<#yf3v8{6rYB ^"Ow(Try\W!A_kb]V $ At0 _q${(+}-Jl ݎVGa*B/d]{8 `=y:/Ѩo-0=. e'cg3t7r5sTgS~AwV+,?9Rt7j#%:Pl7ye(42L~)xEX>*ͦ/֣`a)Sno?!;F!4*O 2#l2⍷FQta<=σ 0UfߘSvEl8aZ d(>N=gˬqU`E.B~{>MDD#p. KǴDQ:JFI*W t<&\>?3 C${)tG.%F*a6 Fo9&9ғTwx!f>MV)fĒtlَArWl^lAej1Cp8(Rz2,q.bՌıP6miz$liEDt+=SV6;S$;aZ\8-y&It5c+fd{2w\jo$K5 gzKtbԶ-# et2&,sAe#K7AKL&&q"{}7ŌL'p)7ɰ?סp9iތm0Mw@B$!W^OF౶۳p NHZ-ŭCwB֭RC9SXTFV] ԬFmK9k rK dIG0tה2Aju]ڵ.x)2sX صԚz!ரšk6NtJ3J x?:69cq2 etŚ(& BV^E{21.n!0OmcB::|5xNcwh6M~/4ӔQbea V 4Y\ `TZz ٛl;' Pu8K+`H= қѭ]3ײ%rr5D|Nu?F~^=|C}$Ŕ]%﹌Ԓ _ؘb^.~(TȊظ#3̵{j=j VJ*?ؤ%Mѹ\8:Net374l\SȆ–^1b-!yF|Y8MnX[['ϣk"S*cI>HeL ,S5=W]]~ Z 49qPGbg -hjUI DjRVNki5ͩH5IS`$x|u06]d+Sn.,뻆;`Co11r9H&YC1.eGdֹ~-Np/j2jnRׄTA=P+1 UBQe-?6QKRD|R-,S͵>AE͡L2=^Db%?hB BEE͉R `6O7j c18bX%-?hht6Դ.3eT?#v[Jq<;$(i}ق'pvTE|c\!:p>R9FViuFd̀-W`Vd t fDB];2eS; d80c 0URd~t wK?pw#2y3ݥ!VC,k03",H&~.~} bT{= KVl;yC°Xy'%fIxF{  3ly9ooq c K.t;9å9hU@)y$ z>7NUy{a}#]*Sp_a"՘h sFLanxˌ=̷NRDt~#b?_(:Ub.^Qֱf4 "[N/d2Ϙ #Iϖs{иI7шJ4)MUT^DrBl  1 1݄d=)vf`?6^hA&j'Lt`EV 7m~}:w^9MTBpSɤL`pN; D  Ml;:+l߃1tvEha{<t]I.ƐMVʫ0hz!g/6)l.F^l$xkbm0 /Rnفr-Ұgq8ٚ!zJRO8zT\~LĭpK!<;q#w +=,/ЙZE:F $>(bpYZPQ? [hq[I %ŻcADLͰ90w4phBN%@ t$YIIFk}[ "97Ï+K;r+']_@1h3F\ku$`\-{4s:Sz씯0q$JC{%')gm_1_HP0#r P_`k<S`§ԝֹA^Q̕=Su'/!5$l|zT 54LHyAF K";RK |(L qqY?M #Bgܟ' t`4ڹk91+#,%IKM'3#b6 g{22N%=~M>wn>.Ozj,`^m:>p]|% 9jFbz„P#k8Co*~ń\k EaQnEЛ8Š?.6-Ytxzs6/}vˆ o(3GdX=Zd>j`Ԗ^/ܥ{c)5͸k/@vP#<%M$wU6h#jz GII 6]/gqJ41X$a 4]xZZ6xbڍ` r9 iVn(|ePwkaU^!}G$4Ds0μh97rx3oNe5Nkݾ`mjl40Xp2^z[!- UxsW-B؏ˀt|{WI k°'H^I_m(!֊k.5N[篽c'،uta%Mkۓe{-ϱ[0{]L@۰ELc,)wG ұ2IV<]N&_5&ތ<_SBE28ɫ{zRk gh:7Pm [f @hxR^?e ;_ }6 }n\<Ώں'k#keJ7ZV Ĵ됈 Ȑ "+vnna.Ux>P.`L}+|I&>xwo*];0޾+:21爅ǤW- @,~}Fԯož I[Au$4&IkKJ +/⭧RK0N%Ջ/09 [I0EXfM~x]rv͇HPw}V3i΢BMno/]J"*3H~AFSQ %>|s ŋ(4Z2a;P+ P=]{SךK>S" sWm#ZCx?VJbeW¤Hx ֬71[[ ҟzӤ p+ђRSvFOeFC[V Xxs܆Al #XS+ޡ7ӥF/@&]23J>㳰g A ->N%gZBX8XTt_wȺ"v}َazok1{8f\W " ޚ.GMyn`:V&c&?F\KY2|ozxXkpF2̴5"A3.kb9oŕ7Xvz^HЌˊ~&t4l3Sޖ_zBv>H0jYVZɉ nArUP_k @z!H,YIcX^21v`u;8eЯ@VP?ZpG驺 2wqٲ!BSL墦3 b/Gt\)ilpFE5k qD(&x% \+_^fgG3߻Uʐ (C{v{7=*V.7F[o,ZJlɤZdzbe1|p3P,-Hd"IVFdK(Xz=mqCLʉ)tZE}v"5<]Irc}iTB]vu#7𓘝ddZx2ۏ{CK#mp\g}Mt`0`?G%hq`L pBgH!p$Su{ʁkcΌP"3<ȭdId)Yҡ3SJH2v~to 81i9ϘSVJxRpqz?FdD}5VEv`ieX?KYw*t&ޠ*('H(ܞ.0/VN_MßͳW=BH#&0hR]E~O!Lk@bpUS)" k qikZ/T /)VϬF MzonjK d56Op@ iw̴1^CN . b $!l~ֳ*4rFmF)]jcn?G<Ʀ;B  [+zG&]5tQQ>|ժ6d%8B9 J YZ.5T!LJ7Jū||E|:}:#1ZrO$\O&!Ǽ3$臼$wCURh搊q_Tol$g@?b xcR,C*ǡd3TMk]LK׹$[|-@An3o$őasK(ԶSym5}wH׃qU'zv8 W}S6\.hX&ѽ;C^ L?>gdMrR=AI:J`ÔgW&C`D0kiO Q]i7ShraYȞ.btf_Ʃ O!:vS\8:UFn^_BP)3ix\si7Ldnfq~'z"b3wTaI)Uz7nXHu %hp 1L_-Ё,FEPxw%+|G@C:YcEU3hU+$o6,$fkC4zMG/1#Y)1C^g v)H3_PӴ*\(r'<|m|Z!LGJ^;p6(#B!9( B@q?;>l T*D '1;qWī[Pw)ʁ3':Jӎ70d>枀~.E/P+9"LHBτ۰v9Ykz}L\K`Q͢s5D]=(}XzO@#๘}ngh^rC=ē"Eyyu7+ďn0||0ݻ<ݲYJ4ȵM3P5mf)d $$s=@xY! p;Y#B &g۽k\yPX1I+歷3kn jyiMt}ɒ] P!ifwGbaZ8si9<@-7+ އK/ae U?!`^ZbeJ=4.&t<"u~o Ao/ `90XЃ}ABHDx=Oyc>7+4[%j=cVj$Ltk֣3:\Z(M]\,q&MSdw=QJluF=AzVdss56+=MvA ~&LEp ' ֭ S'EN-΢eJî"㈵SI K&kļ#f>PxW U3'n+484u6rGk{_5u'Z/֌j. bM:j\|910mW2Ea:Dnh|nӂ3{ F  g_`CW kf?|}TO +㜈l2+

`Q$lL{&xbrдR6{orQ8"vf38k?AN\6J,A5#Gj[ϗiak{C:r_4?W{858gw8Rb:q"wDK I9w  抎TwdgyRJ;CjP~b( Ac#)\Aafoo&jϡk&u}VJXMq KɲmN(AI;aL:=m,?ɽ:1y':u1kI I3Uyô*uXq|9C&=\`]jBƆي)wᑳO ]K,y]Q6\#[ o<衋簋|^9]BjH-oIlJյr@x3%qj+]N^0/ AGg_>cQ?w7I>3bLC4-G>kʉsDg0:W{$0p Cjz슢׬ckE(?9x5=iw!?&> 눣9[4x')dtߙw}$uǢ](l;DKblνhD/p 9UʭRJ$-xOˍ jukbPReC2]ƞ+v*Y   PUZA'zi.z}8ɬҸ! _m!' #Ur֕yՆGމ#fI㠿VlA!Rx7ZKfgMoZP}vLhS}{\ mUbsl=wS<ȕ! dWO0h>9T(id Sm:#|(1\[[Bm 9ni$^ljQ3]04{LmFsY* QBW@f.To,'_X8h{@ ,Ȭx턎ÇeѥX?T۟;wk9HKt r p׭,@#y5:ǤVı`k'DIV Ss~Ux*r[Zѫυ oCc(=4,z? CfjָN[!]T%g (N6I){S8t*>k{Na+ !;ja[`5$7,TMH=&YpK hƏU&y%4K.++2ѐBFӤy-xM9/8_ t-&[w`$Qt7jNϘ)*|vȎ򼭝  -ޚ c`ٟ# @xPV $)]-@.1*Wm,T( }0DU1ϭE q% dì)HnG](CDEO]C~O#mM--?bE @?3gƺ`7߱v#} $x Q-ƜjH[MZx'EbsJg7'^xȝəJC}h a.*C*1dD[