xen-libs-4.14.3_04-3.15.1 >  A ap9|{J`ѧ ;.>?'~L|{іsϩF21y|:j*Gk %*cd9LJ8o|؆匓Y:uTP^ざ% ɘ w/JI'࿇m2|Pڭ."n ̜Ii1u߄ NCA3fyU3LR E+iV"o$RMC QYCqnYmH7<„w=W){I1c`8G5cf3d52fa60446d1db481987a2a01b718e2d47a6aa6cf488ba956f4dcda7da8c4b791fa469beb239c81b43d5f270587b48a6a49b ap9|FCDGBN ÖmmIxWX\]>"Y3=VuH ĺ?Kx,:k*%tj&蘨f͠C Mo>p5JIJQkZpi˧hUj$w\I3']:Ɖ)1(Gd ˫:[ Y)] qr埸={ QF*u;V.s`p$,:&nʱ!҉lz!R"ZSF{d $U s('>p@?d   :# 9Gw}-<- - - -  Q-  - |- ]->\-&333(89!H:<@KFZGp-H$-I-X&Y&\-]-^bpcdeflu-vhw -x -yhz@PTZCxen-libs4.14.3_043.15.1Xen Virtualization: LibrariesXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries used to interact with the Xen virtual machine monitor. In addition to this package you need to install xen and xen-tools to use Xen. Authors: -------- Ian Pratt aibs-arm-4( SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/System/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxaarch64 p XHF ( 88 P008( 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.so.1.2libxenctrl.so.4.14.0libxendevicemodel.so.1.3libxenevtchn.so.1.1libxenforeignmemory.so.1.3libxenfsimage.so.4.14.0libxengnttab.so.1.2libxenguest.so.4.14.0libxenhypfs.so.1.0libxenlight.so.4.14.0libxenstat.so.4.14.0libxenstore.so.3.0.3libxentoolcore.so.1.0libxentoollog.so.1.0libxenvchan.so.4.14.0libxlutil.so.4.14.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.14.3_04-3.15.1.src.rpmlibxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxencall.so.1(VERS_1.2)(64bit)libxenctrl.so.4.14()(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.1)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxendevicemodel.so.1(VERS_1.3)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenevtchn.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1(VERS_1.3)(64bit)libxenfsimage.so.4.14()(64bit)libxenfsimage.so.4.14(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxengnttab.so.1(VERS_1.1)(64bit)libxengnttab.so.1(VERS_1.2)(64bit)libxenguest.so.4.14()(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.14()(64bit)libxenstat.so.4.14()(64bit)libxenstore.so.3.0()(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libxenvchan.so.4.14()(64bit)libxlutil.so.4.14()(64bit)xen-libsxen-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxenctrl.so.4.14()(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenfsimage.so.4.14()(64bit)libxenfsimage.so.4.14(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxenguest.so.4.14()(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.14()(64bit)libxenstore.so.3.0()(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libyajl.so.2()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a@ad'@a]a?=@a7T@a,@aGa $@a @` @`@`E` @`` @`!@`@`7@`7@``}p`\{@`KW`F`B@`8`4@`.V`#`>` l___@_H@__إ@_إ@_S_$_______@_"__E@_i@_h_d@_cO_[f_X_O@_N7_*@_'@_@_{_^)@^^@^3^ϧ^x^@^@^^^{G^r @^j$@^g@^_@^Nt^K^=Q@^:@^0"@^@^@]]]N@]@]ʞ])]c@]@]@]@]]fl]fl]M`@]B@]/ ],j] ]@]@] ] ] #]]@\\ޢ@\ڭ\\@\@\@\,@\7\\N\@\\+@\\M\M\\\@\}@\k\X)@\J@\I\A\?\=@\9\73\4\$\l@[H[k@[@[^[^[/[@[@[9@[v[W[CN@[<[6@[0@[0@['[!@[5@Z@ZnZ@ZZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Zz@Zz@Zo Zk@ZV@ZS]@ZOhZ:PZ1@Z.s@Z&@ZOZOZ Z Z Z@Z@Z }ZC@ZYYYY|Y@Y{Y*@Y5YA@Y4YYYbYY@Y3Y@YJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"YY;@YYY@YtY.X@XQ@X@XۡXg@X@XƉX@X @X@X@X@X@XXX@XXXwoXs{@XlXWXRXQ4@XEVX43@X.@X*X lX&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@WbWZWZWZWYZ@WV@WEWBW=W;W3W1@W1@W,@W(W(W(W(W(W#LWVbV(@V3VJVxV'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVA@V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUݪ@U@UnU4@UUK@UU@UU>U@Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UU@UUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@THT?@T=@carnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comguillaume.gardet@opensuse.orgcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comdimstar@opensuse.orgcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.commcepl@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.demliska@suse.czohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjengelh@inai.deguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbwiedemann@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.debwiedemann@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comtrenn@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.dejfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.derbrown@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comjfehlig@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.commlatimer@suse.comcarnold@suse.comcyliu@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.derguenther@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comrguenther@suse.comcarnold@suse.commeissner@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.com- bsc#1192554 - VUL-0: CVE-2021-28706: xen: guests may exceed their designated memory limit (XSA-385) xsa385.patch - bsc#1192557 - VUL-0: CVE-2021-28704,CVE-2021-28707,CVE-2021-28708: xen: PoD operations on misaligned GFNs (XSA-388) xsa388-1.patch xsa388-2.patch - bsc#1192559 - VUL-0: CVE-2021-28705,CVE-2021-28709: xen: issues with partially successful P2M updates on x86 (XSA-389) xsa389.patch- Upstream bug fixes (bsc#1027519) 6138b7a1-x86-spec-ctrl-split-diagnostics-line.patch 6138b7a2-x86-AMD-enum-speculative-hints.patch 6138b7a3-x86-AMD-use-newer-SSBD.patch 6139f1b1-x86-spec-ctrl-print-AMD-features.patch 6148453b-VT-d-hidden-devices-unmap.patch 6148455f-VT-d-PCI-segment-numbers-16-bits.patch 61532102-PCI-bridge-with-subord-bus-0xFF.patch- bsc#1191363 - VUL-0: CVE-2021-28702: xen: PCI devices with RMRRs not deassigned correctly (XSA-386) 615c9fd0-VT-d-fix-deassign-of-device-with-RMRR.patch- Update to Xen 4.14.3 bug fix release (bsc#1027519) xen-4.14.3-testing-src.tar.bz2 - Drop patches contained in new tarball 608676f2-VT-d-register-based-invalidation-optional.patch 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60bf9e19-Arm-create-dom0less-domUs-earlier.patch 60bf9e1a-Arm-boot-modules-scrubbing.patch 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch 60bfa904-AMD-IOMMU-wait-for-command-slot.patch 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch 61001231-x86-work-around-GNU-ld-2-37-issue.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6126339d-AMD-IOMMU-global-ER-extending.patch 6126344f-AMD-IOMMU-unity-map-handling.patch 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch 6126349a-AMD-IOMMU-rearrange-reassignment.patch 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch 612634c3-x86-p2m-introduce-p2m_is_special.patch 612634dc-x86-p2m-guard-identity-mappings.patch 612634f4-x86-mm-widen-locked-region-in-xatp1.patch 6126350a-gnttab-release-mappings-preemption.patch 6126351f-gnttab-replace-mapkind.patch 6126353d-gnttab-get-status-frames-array-capacity.patch 61263553-Arm-restrict-maxmem-for-dom0less.patch 6128a856-gnttab-radix-tree-node-init.patch xsa384.patch- bsc#1189632 - VUL-0: CVE-2021-28701: xen: Another race in XENMAPSPACE_grant_table handling (XSA-384) xsa384.patch - Upstream bug fixes (bsc#1027519) 61001231-x86-work-around-GNU-ld-2-37-issue.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6128a856-gnttab-radix-tree-node-init.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch (Replaces credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch) 6126339d-AMD-IOMMU-global-ER-extending.patch (Replaces xsa378-1.patch) 6126344f-AMD-IOMMU-unity-map-handling.patch (Replaces xsa378-2.patch) 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch (Replaces xsa378-3.patch) 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch (Replaces xsa378-4.patch) 6126349a-AMD-IOMMU-rearrange-reassignment.patch (Replaces xsa378-5.patch) 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch (Replaces xsa378-6.patch) 612634c3-x86-p2m-introduce-p2m_is_special.patch (Replaces xsa378-7.patch) 612634dc-x86-p2m-guard-identity-mappings.patch (Replaces xsa378-8.patch) 612634f4-x86-mm-widen-locked-region-in-xatp1.patch (Replaces xsa379.patch) 6126350a-gnttab-release-mappings-preemption.patch (Replaces xsa380-1.patch 6126351f-gnttab-replace-mapkind.patch (Replaces xsa380-2.patch) 6126353d-gnttab-get-status-frames-array-capacity.patch (Replaces xsa382.patch) 61263553-Arm-restrict-maxmem-for-dom0less.patch (Replaces xsa383.patch)- bsc#1189882 - refresh libxc.sr.superpage.patch prevent superpage allocation in the LAPIC and ACPI_INFO range- bsc#1189373 - VUL-0: CVE-2021-28694,CVE-2021-28695, CVE-2021-28696: xen: IOMMU page mapping issues on x86 (XSA-378) xsa378-1.patch xsa378-2.patch xsa378-3.patch xsa378-4.patch xsa378-5.patch xsa378-6.patch xsa378-7.patch xsa378-8.patch - bsc#1189376 - VUL-0: CVE-2021-28697: xen: grant table v2 status pages may remain accessible after de-allocation. (XSA-379) xsa379.patch - bsc#1189378 - VUL-0: CVE-2021-28698: xen: long running loops in grant table handling. (XSA-380) xsa380-1.patch xsa380-2.patch - bsc#1189380 - VUL-0: CVE-2021-28699: xen: inadequate grant-v2 status frames array bounds check. (XSA-382) xsa382.patch - bsc#1189381 - VUL-0: CVE-2021-28700: xen: xen/arm: No memory limit for dom0less domUs. (XSA-383) xsa383.patch- bsc#1188050 - L3: Xen guest yval1a80 SLES11SP4 hangs on cluster See also bsc#1179246. credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch- Drop aarch64-maybe-uninitialized.patch as the fix is in tarball.- bsc#1176189 - xl monitoring process exits during xl save -p|-c keep the monitoring process running to cleanup the domU during shutdown xl-save-pc.patch- bsc#1179246 - Dom0 hangs when pinning CPUs for dom0 with HVM guest 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch - Upstream bug fixes (bsc#1027519) 60bf9e19-Arm-create-dom0less-domUs-earlier.patch (Replaces xsa372-1.patch) 60bf9e1a-Arm-boot-modules-scrubbing.patch (Replaces xsa372-2.patch) 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch (Replaces xsa373-1.patch) 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch (Replaces xsa373-2.patch) 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch (Replaces xsa373-2.patch) 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch (Replaces xsa375.patch) 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch (Replaces xsa377.patch) 60bfa904-AMD-IOMMU-wait-for-command-slot.patch (Replaces xsa373-4.patch) 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch (Replaces xsa373-5.patch) 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch - Dropped gcc11-fixes.patch- bsc#1183243 - L3: Core cannot be opened when using xl dump-core of VM with PTF 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch- bsc#1180350 - some long deprecated commands were finally removed in qemu6. Adjust libxl to use supported commands. libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl-qemu6-vnc-password.patch libxl-qemu6-scsi.patch- Update logrotate.conf, move global options into per-file sections to prevent globbering of global state (bsc#1187406)- Fix shell macro expansion in xen.spec, so that ExecStart= in xendomains-wait-disks.service is created correctly (bsc#1183877)- bsc#1186428 - VUL-0: CVE-2021-28693: xen: xen/arm: Boot modules are not scrubbed (XSA-372) xsa372-1.patch xsa372-2.patch - bsc#1186429 - VUL-0: CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (XSA-373) xsa373-1.patch xsa373-2.patch xsa373-3.patch xsa373-4.patch xsa373-5.patch - bsc#1186433 - VUL-0: CVE-2021-0089: xen: Speculative Code Store Bypass (XSA-375) xsa375.patch - bsc#1186434 - VUL-0: CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (XSA-377) xsa377.patch - Upstream bug fixes (bsc#1027519) 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch- Upstream bug fix (bsc#1027519) 608676f2-VT-d-register-based-invalidation-optional.patch- Add xen.sysconfig-fillup.patch to make sure xencommons is in a format as expected by fillup. (bsc#1185682) Each comment needs to be followed by an enabled key. Otherwise fillup will remove manually enabled key=value pairs, along with everything that looks like a stale comment, during next pkg update- Refresh xenstore-launch.patch to cover also daemon case- Update to Xen 4.14.2 bug fix release (bsc#1027519) xen-4.14.2-testing-src.tar.bz2 - Drop patches contained in new tarball 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6011bbc7-x86-timer-fix-boot-without-PIT.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch 60787714-x86-HPET-avoid-legacy-replacement-mode.patch- bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 60787714-x86-HPET-avoid-legacy-replacement-mode.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch - Upstream bug fixes (bsc#1027519) 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch (Replaces xsa368.patch) 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch- bsc#1137251 - Restore changes for xen-dom0-modules.service which were silently removed on 2019-10-17- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway. This resulted to over-allocation.- bsc#1167608 - adjust limit for max_event_channels A previous change allowed an unbound number of event channels to make sure even large domUs can start of of the box. This may have a bad side effect in the light of XSA-344. Adjust the built-in limit based on the number of vcpus. In case this is not enough, max_event_channels=/maxEventChannels= has to be used to set the limit as needed for large domUs adjust libxl.max_event_channels.patch- bsc#1183072 - VUL-0: CVE-2021-28687: xen: HVM soft-reset crashes toolstack (XSA-368). Also resolves, bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl bsc#1181989 - openQA job causes libvirtd to dump core when running kdump inside domain xsa368.patch- bsc#1177204 - L3-Question: conring size for XEN HV's with huge memory to small. Inital Xen logs cut 5ffc58c4-ACPI-reduce-verbosity-by-default.patch - Upstream bug fixes (bsc#1027519) 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch - bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch- bsc#1182576 - L3: XEN domU crashed on resume when using the xl unpause command 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch- Start using the %autosetup macro to simplify patch management xen.spec- bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch - Drop gcc10-fixes.patch- Upstream bug fixes (bsc#1027519) 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch (Replaces xsa360.patch) 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch - bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 6011bbc7-x86-timer-fix-boot-without-PIT.patch- bsc#1181254 - VUL-0: xen: IRQ vector leak on x86 (XSA-360) xsa360.patch- bsc#1180794 - bogus qemu binary path used when creating fv guest under xen xen.spec- bsc#1180690 - L3-Question: xen: no needsreboot flag set Add Provides: installhint(reboot-needed) in xen.spec for libzypp- Update libxl.set-migration-constraints-from-cmdline.patch Remove code which handled --max_factor. The total amount of transferred data is no indicator to trigger the final stop+copy. This should have been removed during upgrade to Xen 4.7. Fix off-by-one in --max_iters, it caused one additional copy cycle. Reduce default value of --max_iters from 5 to 2. The workload within domU will continue to produce dirty pages. It is unreasonable to expect any slowdown during migration. Now there is one initial copy of all memory, one instead of four iteration for dirty memory, and a final copy iteration prior move.- Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch- Pass --with-rundir to configure to get rid of /var/run- bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch- boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch- bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch- Fix build error with libxl.fix-libacpi-dependency.patch- Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere.- Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1- bsc#1178591 - VUL-0: CVE-2020-28368: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351 xsa351-1.patch xsa351-2.patch xsa351-3.patch- bsc#1177950 - adjust help for --max_iters, default is 5 libxl.set-migration-constraints-from-cmdline.patch- jsc#SLE-16899 - improve performance of live migration remove allocations and memcpy from hotpaths on sending and receiving side to get more throughput on 10Gbs+ connections libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc-sr-readv_exact.patch libxc-sr-restore-handle_buffered_page_data.patch libxc-sr-restore-handle_incoming_page_data.patch libxc-sr-restore-map_errs.patch libxc-sr-restore-mfns.patch libxc-sr-restore-pfns.patch libxc-sr-restore-populate_pfns-mfns.patch libxc-sr-restore-populate_pfns-pfns.patch libxc-sr-restore-read_record.patch libxc-sr-restore-types.patch libxc-sr-save-errors.patch libxc-sr-save-guest_data.patch libxc-sr-save-iov.patch libxc-sr-save-local_pages.patch libxc-sr-save-mfns.patch libxc-sr-save-rec_pfns.patch libxc-sr-save-show_transfer_rate.patch libxc-sr-save-types.patch libxc-sr-use-xc_is_known_page_type.patch adjust libxc.sr.superpage.patch adjust libxc.migrate_tracking.patch- Upstream bug fixes (bsc#1027519) 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch - Renamed patches 5f560c42-x86-PV-64bit-segbase-consistency.patch Replaces 5f5b6951-x86-PV-64bit-segbase-consistency.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch Replaces 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch Replaces 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch Replaces 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch Replaces 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch Replaces 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch 5f6a00c4-evtchn-relax-port_is_valid.patch Replaces 5f6a062c-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch Replaces 5f6a065c-pv-Avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch Replaces 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch Replaces 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch Replaces 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch Replaces 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch Replaces 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch Replaces 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch Replaces 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch- bsc#1177409 - VUL-0: CVE-2020-27674: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286) xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch - bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345) 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch - bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346) 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch - bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347) 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch- Update libxc.sr.superpage.patch set errno in x86_hvm_alloc_4k (bsc#1177112)- bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) 5f6a062c-evtchn-relax-port_is_valid.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) 5f6a065c-pv-Avoid-double-exception-injection.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - Upstream bug fix (bsc#1027519) 5f5b6951-x86-PV-64bit-segbase-consistency.patch- Fix problems in xen.spec with building on aarch64- Make use of %service_del_postun_without_restart while preserving the old behavior for older distros. - In %post tools, remove unnecessary qemu symlinks.- Fix error in xen-tools %post when linking pvgrub64.bin - Make paths below libexec more explicit - Create symlink also for pvgrub32.bin- Revert previous libexec change for qemu compat wrapper The path is used in existing domU.xml files in the emulator field - Escape some % chars in xen.spec, they have to appear verbatim- Enhance libxc.migrate_tracking.patch Print number of allocated pages on sending side, this is more accurate than p2m_size.- jsc#SLE-15926 - Dev: XEN: drop netware support Dropped the following patches pygrub-netware-xnloader.patch xnloader.py Refreshed pygrub-boot-legacy-sles.patch- Fix build on aarch64 with gcc10 - Package xenhypfs for aarch64- Correct license name * GPL-3.0+ is now GPL-3.0-or-later- Upstream bug fixes (bsc#1027519) 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch- Update to Xen 4.14.0 FCS release xen-4.14.0-testing-src.tar.bz2 * Linux stubdomains (contributed by QUBES OS) * Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix) * Lightweight VM fork for fuzzing / introspection. (contributed by Intel) * Livepatch: buildid and hotpatch stack requirements * CONFIG_PV32 * Hypervisor FS support * Running Xen as a Hyper-V Guest * Domain ID randomization, persistence across save / restore * Golang binding autogeneration * KDD support for Windows 7, 8.x and 10 - Dropped patches contained in new tarball 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch xsa317.patch xsa319.patch xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch xsa328-1.patch xsa328-2.patch- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached ignore-ip-command-script-errors.patch- Enhance libxc.migrate_tracking.patch After transfer of domU memory, the target host has to assemble the backend devices. Track the time prior xc_domain_unpause.- Add libxc.migrate_tracking.patch to track live migrations unconditionally in logfiles, especially in libvirt. This will track how long a domU was suspended during transit.- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect error handling in event channel port allocation xsa317.patch - bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code paths in x86 dirty VRAM tracking xsa319.patch - bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient cache write- back under VT-d xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch - bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic modification of live EPT PTE xsa328-1.patch xsa328-2.patch- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch) 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch) - Upstream bug fixes (bsc#1027519) 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch- Fixes for %_libexecdir changing to /usr/libexec- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) xsa320-1.patch xsa320-2.patch- Update to Xen 4.13.1 bug fix release (bsc#1027519) xen-4.13.1-testing-src.tar.bz2 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch - Drop patches contained in new tarball 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- spec: Remove invocation of autogen.sh - spec: Recommend qemu-ovmf-x86_64 to provide UEFI firmwares- bsc#1170968 - GCC 10: xen build fails on i586 gcc10-fixes.patch- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation handling in GNTTABOP_copy (XSA-318) 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- bsc#1168140 - VUL-0: CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch - bsc#1168142 - VUL-0: CVE-2020-11739: xen: XSA-314 - Missing memory barriers in read-write unlock paths 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch - bsc#1168143 - VUL-0: CVE-2020-11743: xen: XSA-316 - Bad error path in GNTTABOP_map_grant 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch - bsc#1167152 - L3: Xenstored Crashed during VM install Need Core analyzed 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch - Drop for upstream solution (bsc#1165206) 01-xen-credit2-avoid-vcpus-to.patch default-to-credit1-scheduler.patch - Upstream bug fixes (bsc#1027519) 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch- bsc#1167608 - unbound limit for max_event_channels domUs with many vcpus and/or resources fail to start libxl.max_event_channels.patch- bsc#1161480 - Fix xl shutdown for HVM without PV drivers add libxl.libxl__domain_pvcontrol.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 01-xen-credit2-avoid-vcpus-to.patch- bsc#1158414 - GCC 10: xen build fails gcc10-fixes.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 default-to-credit1-scheduler.patch- bsc#1160932 - VUL-0: xen: XSA-312 v1: arm: a CPU may speculate past the ERET instruction 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch - bsc#1164425 - x86: "spec-ctrl=no-xen" should also disable branch hardening 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch - Upstream bug fixes (bsc#1027519) 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch- bsc#1159755 - use fixed qemu-3.1 machine type for HVM This must be done in qemu to preserve PCI layout remove libxl.lock-qemu-machine-for-hvm.patch- jsc#SLE-10183 - script to calculate cpuid= mask add helper script from https://github.com/twizted/xen_maskcalc domUs may be migrated between different cpus from the same vendor if their visible cpuid value has incompatible feature bits masked.- jsc#SLE-10172, bsc#1055731 - handle degraded raid for xendomains add helper script and systemd service from https://github.com/luizluca/xen-tools-xendomains-wait-disk in new sub package xen-tools-xendomains-wait-disk See included README for usage instructions xendomains-wait-disks.LICENSE xendomains-wait-disks.README.md xendomains-wait-disks.sh- bsc#1159755 - use fixed qemu-3.1 machine type for HVM qemu4 introduced incompatible changes in pc-i440fx, which revealed a design bug in 'xenfv'. Live migration from domUs started with qemu versions prior qemu4 can not be received with qemu4+. libxl.lock-qemu-machine-for-hvm.patch- Upstream bug fixes (bsc#1027519) 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- bsc#1159320 - Xen logrotate file needs updated logrotate.conf- Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware- Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch- Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch- Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2- Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call)- Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch- bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch- bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch- Upstream bug fixes (bsc#1027519) 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch - Drop 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Preserve modified files which used to be marked as %config, rename file.rpmsave to file- Update to Xen 4.12.1 bug fix release (bsc#1027519) xen-4.12.1-testing-src.tar.bz2 - Drop patches contained in new tarball 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8f752c-x86-e820-build-with-gcc9.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Refreshed patches libxl.pvscsi.patch- bsc#1143563 - Speculative mitigation facilities report wrong status 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Update xen-dom0-modules.service (bsc#1137251) Map backend module names from pvops and xenlinux kernels to a module alias. This avoids errors from modprobe about unknown modules. Ignore a few xenlinux modules that lack aliases.- Gcc9 warnings seem to be cleared up with upstream fixes. Drop gcc9-ignore-warnings.patch- bsc#1138563 - L3: xenpvnetboot improperly ported to Python 3 fix-xenpvnetboot.patch- Move /etc/modprobe.d/xen_loop.conf to /lib/modprobe.d/xen_loop.conf- Remove /etc/xen/xenapiusers and /etc/pam.d/xen-api- Remove all upstream provided files in /etc/xen They are not required at runtime. The host admin is now responsible if he really needs anything in this subdirectory.- In our effort to make /etc fully admin controlled, move /etc/xen/scripts to libexec/xen/scripts with xen-tools.etc_pollution.patch- Move /etc/bash_completion.d/xl.sh to %{_datadir}/bash-completion/completions- bsc#1138294 - VUL-0: CVE-2019-17349: XSA-295: Unlimited Arm Atomics Operations 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Upstream bug fixes (bsc#1027519) 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch (Replaces xsa297-0a.patch) 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch (Replaces xsa297-0b.patch) 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch (Replaces xsa297-0c.patch) 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch (Replaces xsa297-0d.patch) 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch (Replaces xsa297-1.patch) 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch (Replaces xsa297-2.patch) 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch (Replaces xsa297-3.patch) 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch- Fix some outdated information in the readme README.SUSE- spec: xen-tools: require matching version of xen package bsc#1137471- Remove two stale patches xen.build-compare.man.patch xenpaging.doc.patch- Disable LTO (boo#1133296).- Remove arm32 from ExclusiveArch to fix build- bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4". CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 xsa297-0a.patch xsa297-0b.patch xsa297-0c.patch xsa297-0d.patch xsa297-1.patch xsa297-2.patch xsa297-3.patch - Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch- bsc#1131811 - [XEN] internal error: libxenlight failed to create new domain. This patch is a workaround for a systemd issue. See patch header for additional comments. xenstore-launch.patch- bsc#1125378 - [xen][pygrub] Can not restore sle11sp4 pv guest after upgrading host from sle11sp4 to sle15sp1 pygrub-python3-conversion.patch - Fix "TypeError: virDomainDefineXML() argument 2 must be str or None, not bytes" when converting VMs from using the xm/xend toolstack to the libxl/libvirt toolstack. (bsc#1123378) xen2libvirt.py- bsc#1124560 - Fully virtualized guests crash on boot 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch - bsc#1121391 - GCC 9: xen build fails 5c8f752c-x86-e820-build-with-gcc9.patch - Upstream bug fixes (bsc#1027519) 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch- Install pkgconfig files into libdir instead of datadir- Update to Xen 4.12.0 FCS release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 * HVM/PVH and PV only Hypervisor: The Xen 4.12 release separates the HVM/PVH and PV code paths in Xen and provides KCONFIG options to build a PV only or HVM/PVH only hypervisor. * QEMU Deprivilege (DM_RESTRICT): In Xen 4.12, this feature has been vastly improved. * Argo - Hypervisor-Mediated data eXchange: Argo is a new inter- domain communication mechanism. * Improvements to Virtual Machine Introspection: The VMI subsystem which allows detection of 0-day vulnerabilities has seen many functional and performance improvements. * Credit 2 Scheduler: The Credit2 scheduler is now the Xen Project default scheduler. * PVH Support: Grub2 boot support has been added to Xen and Grub2. * PVH Dom0: PVH Dom0 support has now been upgraded from experimental to tech preview. * The Xen 4.12 upgrade also includes improved IOMMU mapping code, which is designed to significantly improve the startup times of AMD EPYC based systems. * The upgrade also features Automatic Dom0 Sizing which allows the setting of Dom0 memory size as a percentage of host memory (e.g. 10%) or with an offset (e.g. 1G+10%).- bsc#1130485 - Please drop Requires on multipath-tools in xen-tools. Now using Recommends multipath-tools. xen.spec- Update to Xen 4.12.0 RC7 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC6 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1026236 - add Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs if their expected frequency does not match exactly the frequency of the receiving host xen.bug1026236.suse_vtsc_tolerance.patch- Update to Xen 4.12.0 RC5 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- jsc#SLE-3059 - Disable Xen auto-ballooning - Add CONFIG_DOM0_MEM to the spec file for managing dom0 memory. xen.spec - Disable autoballooning in xl.con xl-conf-disable-autoballoon.patch- Update gcc9-ignore-warnings.patch to fix build in SLE12- bsc#1126325 - fix crash in libxl in error path Setup of grant_tables and other variables may fail libxl.prepare-environment-for-domcreate_stream_done.patch- bsc#1127620 - Documentation for the xl configuration file allows for firmware=pvgrub64 but we don't ship pvgrub64. Create a link from grub.xen to pvgrub64 xen.spec- Update to Xen 4.12.0 RC4 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Tarball also contains additional post RC4 security fixes for Xen Security Advisories 287, 288, and 290 through 294.- Update to Xen 4.12.0 RC3 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC2 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1121391 - GCC 9: xen build fails gcc9-ignore-warnings.patch- bsc#1122563 - Virtualization/xen: Bug no Xen on boot, missing /proc/xen, after 4.11 -> 4.12 upgrade on X86_64/efi. Keep xen.efi in /usr/lib64/efi for booting older distros. xen.spec- fate#326960: Package grub2 as noarch. As part of the effort to have a unified bootloader across architectures, modify the xen.spec file to move the Xen efi files to /usr/share/efi/$(uname -m) from /usr/lib64/efi.- Update to Xen 4.12.0 RC1 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Drop 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch 5bdc31d5-VMX-fix-vmx_handle_eoi.patch gcc8-fix-array-warning-on-i586.patch gcc8-fix-format-warning-on-i586.patch gcc8-inlining-failed.patch xen.bug1079730.patch- bsc#1121960 - xen: sync with Factory xen.spec xen.changes- Replace old $RPM_* shell vars. - Run fdupes for all architectures, and not crossing subvolume boundaries.- Do not run %fdupes on aarch64 to avoid the hardlink-across-partition rpmlint error- Require qemu-seabios only on x86* as it is not available on non-x86 systems- Avoid creating dangling symlinks (bsc#1116524) This reverts the revert of tmp_build.patch- Update to Xen 4.11.1 bug fix release (bsc#1027519) xen-4.11.1-testing-src.tar.bz2 - 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch replaces xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch replaces xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch - Drop the following patches contained in the new tarball 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbe-ARM-disable-grant-table-v2.patch 5b72fbbe-oxenstored-eval-order.patch 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch xsa275-1.patch xsa275-2.patch xsa276-1.patch xsa276-2.patch xsa277.patch xsa279.patch xsa280-1.patch xsa280-2.patch- bsc#1116524 - Package xen-tools-4.11.0_09-2.1.x86_64 broken: Missing /bin/domu-xenstore. This was broken because "make package build reproducible" change. (boo#1047218, boo#1062303) This fix reverses the change to this patch. tmp_build.patch- bsc#1115040 - VUL-0: CVE-2018-19961 CVE-2018-19962: xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275) xsa275-1.patch xsa275-2.patch - bsc#1115043 - VUL-0: CVE-2018-19963: xen: resource accounting issues in x86 IOREQ server handling (XSA-276) xsa276-1.patch xsa276-2.patch - bsc#1115044 - VUL-0: CVE-2018-19964: xen: x86: incorrect error handling for guest p2m page removals (XSA-277) xsa277.patch - bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch - bsc#1115045 - VUL-0: xen: CVE-2018-19965: x86: DoS from attempting to use INVPCID with a non-canonical addresses (XSA-279) xsa279.patch - bsc#1115047 - VUL-0: CVE-2018-19966: xen: Fix for XSA-240 conflicts with shadow paging (XSA-280) xsa280-1.patch xsa280-2.patch - bsc#1114988 - VUL-0: CVE-2018-19967: xen: guest use of HLE constructs may lock up host (XSA-282) 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch - bsc#1108940 - L3: XEN SLE12-SP1 domU hang on SLE12-SP3 HV 5bdc31d5-VMX-fix-vmx_handle_eoi.patch - Upstream bug fixes (bsc#1027519) 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch- bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch- Use SMBIOS_REL_DATE instead of SMBIOS_DATE for reproducible binaries- make package build reproducible (boo#1047218, boo#1062303) * Set SMBIOS_REL_DATE * Update tmp_build.patch to use SHA instead of random build-id * Add reproducible.patch to use --no-insert-timestamp- Building with ncurses 6.1 will fail without xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - Building libxl acpi support on aarch64 with gcc 8.2 will fail without xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch- bsc#1106263 - L3: The affinity reporting via 'xl vcpu-list' is apparently broken 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch- bsc#1094508 - L3: Kernel oops in fs/dcache.c called by d_materialise_unique() 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch - bsc#1103279 - (CVE-2018-15470) VUL-0: CVE-2018-15470: xen: oxenstored does not apply quota-maxentity (XSA-272) 5b72fbbe-oxenstored-eval-order.patch - bsc#1103275 - (CVE-2018-15469) VUL-0: CVE-2018-15469: xen: Use of v2 grant tables may cause crash on ARM (XSA-268) 5b72fbbe-ARM-disable-grant-table-v2.patch - Upstream patches from Jan (bsc#1027519) 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch - Drop 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- bsc#1078292 - rpmbuild -ba SPECS/xen.spec with xen-4.9.1 failed xen.spec- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM (XSA-273) 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch - bsc#1103276 - VUL-0: CVE-2018-15468: xen: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (XSA-269) 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch - Upstream prereq patches for XSA-273 and other upstream fixes (bsc#1027519) 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- Upstream patches from Jan (bsc#1027519) 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch gcc8-fix-format-warning-on-i586.patch gcc8-fix-array-warning-on-i586.patch - Drop xen.fuzz-_FORTIFY_SOURCE.patch gcc8-fix-warning-on-i586.patch- Update to Xen 4.11.0 FCS (fate#325202, fate#325123) xen-4.11.0-testing-src.tar.bz2 disable-building-pv-shim.patch - Dropped patches 5a33a12f-domctl-improve-locking-during-domain-destruction.patch 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a9985bd-x86-invpcid-support.patch 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch 5af1daa9-3-x86-traps-use-IST-for-DB.patch 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch 5af97999-viridian-cpuid-leaf-40000003.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch 5b348874-x86-refine-checks-in-DB-handler.patch 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen_fix_build_with_acpica_20180427_and_new_packages.patch- Submit upstream patch libacpi: fixes for iasl >= 20180427 git commit 858dbaaeda33b05c1ac80aea0ba9a03924e09005 xen_fix_build_with_acpica_20180427_and_new_packages.patch This is needed for acpica package to get updated in our build service- Upstream patches from Jan (bsc#1027519) 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch) 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch) 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch) 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch) 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch) 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch) 5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch) 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-<>.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch- bsc#1098403 - fix regression introduced by changes for bsc#1079730 a PV domU without qcow2 and/or vfb has no qemu attached. Ignore QMP errors for PV domUs to handle PV domUs with and without an attached qemu-xen. xen.bug1079730.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1092543 - GCC 8: xen build fails gcc8-fix-warning-on-i586.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" (XSA-263) 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- Always call qemus xen-save-devices-state in suspend/resume to fix migration with qcow2 images (bsc#1079730) libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen.bug1079730.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- bsc#1092543 - GCC 8: xen build fails 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch gcc8-inlining-failed.patch- Update to Xen 4.10.1 bug fix release (bsc#1027519) xen-4.10.1-testing-src.tar.bz2 disable-building-pv-shim.patch - Drop the following patches contained in the new tarball 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch xsa258.patch xsa259.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Upstream patches from Jan (bsc#1027519) and fixes related to Page Table Isolation (XPTI). See also bsc#1074562 XSA-254 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop xsa252.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- Remove stale systemd presets code for 13.2 and older- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Replace hardcoded xen with Name tag when refering to subpkgs- Make sure tools and tools-domU require libs from the very same build- tools-domU: Add support for qemu guest agent. New files 80-xen-channel-setup.rules and xen-channel-setup.sh configure a xen-pv-channel for use by the guest agent FATE#324963- Remove outdated /etc/xen/README*- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with MSR emulation (XSA-253) 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch - bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch- Fix python3 deprecated atoi call (bsc#1067224) pygrub-python3-conversion.patch - Drop xenmon-python3-conversion.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 build-python3-conversion.patch bin-python3-conversion.patch- bsc#1070165 - xen crashes after aborted localhost migration 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch - bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb: libxl__devices_destroy failed 5a33a12f-domctl-improve-locking-during-domain-destruction.patch - Upstream patches from Jan (bsc#1027519) 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch- Update to Xen 4.10.0 FCS (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Rebuild initrd if xen-tools-domU is updated- Update to Xen 4.10.0-rc8 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- Adjust xenstore-run-in-studomain.patch to change the defaults in the code instead of changing the sysconfig template, to also cover the upgrade case- Update to Xen 4.10.0-rc6 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Since xen switched to Kconfig, building a debug hypervisor was done by default. Adjust make logic to build a non-debug hypervisor by default, and continue to provide one as xen-dbg.gz- fate#316614: set migration constraints from cmdline fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10- Document the suse-diskcache-disable-flush option in xl-disk-configuration(5) (bsc#879425,bsc#1067317)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to Xen 4.10.0-rc5 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - fate#323663 - Run Xenstore in stubdomain xenstore-run-in-studomain.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 pygrub-python3-conversion.patch xenmon-python3-conversion.patch migration-python3-conversion.patch xnloader.py xen2libvirt.py- Remove xendriverdomain.service (bsc#1065185) Driver domains must be configured manually with custom .service file- Update to Xen 4.10.0-rc3 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Adjust xen-dom0-modules.service to ignore errors (bsc#1065187)- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Update to Xen 4.10.0-rc2 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Update to Xen 4.10.0-rc1 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop patches included in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch gcc7-mini-os.patch- bsc#1061084 - VUL-0: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1056278 - VUL-0: xen: Missing NUMA node parameter verification (XSA-231) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch - bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232) 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch - bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup (XSA-233) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch - bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch - bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Unignore gcc-PIE the toolstack disables PIE for firmware builds as needed- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- bsc#1044974 - xen-tools require python-pam xen.spec- Clean up spec file errors and a few warnings. (bsc#1027519) - Removed conditional 'with_systemd' and some old deprecated 'sles_version' checks. xen.spec- Remove use of brctl utiltiy from supportconfig plugin FATE#323639- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- fate#323639 Move bridge-utils to legacy replace-obsolete-network-configuration-commands-in-s.patch- bsc#1052686 - VUL-0: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- Add a supportconfig plugin xen-supportconfig FATE#323661- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- fate#323662 Drop qemu-dm from xen-tools package The following tarball and patches have been removed qemu-xen-traditional-dir-remote.tar.bz2 VNC-Support-for-ExtendedKeyEvent-client-message.patch 0001-net-move-the-tap-buffer-into-TAPState.patch 0002-net-increase-tap-buffer-size.patch 0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch 0004-e1000-secrc-support.patch 0005-e1000-multi-buffer-packet-support.patch 0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch 0007-e1000-verify-we-have-buffers-upfront.patch 0008-e1000-check-buffer-availability.patch CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch CVE-2015-4037-qemut-smb-config-dir-name.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch blktap.patch cdrom-removable.patch xen-qemu-iscsi-fix.patch qemu-security-etch1.patch xen-disable-qemu-monitor.patch xen-hvm-default-bridge.patch qemu-ifup-set-mtu.patch ioemu-vnc-resize.patch capslock_enable.patch altgr_2.patch log-guest-console.patch bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch qemu-dm-segfault.patch bdrv_default_rwflag.patch kernel-boot-hvm.patch ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch ioemu-hvm-pv-support.patch pvdrv_emulation_control.patch ioemu-disable-scsi.patch ioemu-disable-emulated-ide-if-pv.patch xenpaging.qemu.flush-cache.patch ioemu-devicemodel-include.patch - Cleanup spec file and remove unused KMP patches kmp_filelist supported_module.patch xen_pvonhvm.xen_emul_unplug.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch/sbin/ldconfig/sbin/ldconfigibs-arm-4 1637335324  !"#$%&'()*+,-4.14.3_04-3.15.14.14.3_04-3.15.1libxencall.so.1libxencall.so.1.2libxenctrl.so.4.14libxenctrl.so.4.14.0libxendevicemodel.so.1libxendevicemodel.so.1.3libxenevtchn.so.1libxenevtchn.so.1.1libxenforeignmemory.so.1libxenforeignmemory.so.1.3libxenfsimage.so.4.14libxenfsimage.so.4.14.0libxengnttab.so.1libxengnttab.so.1.2libxenguest.so.4.14libxenguest.so.4.14.0libxenhypfs.so.1libxenhypfs.so.1.0libxenlight.so.4.14libxenlight.so.4.14.0libxenstat.so.4.14libxenstat.so.4.14.0libxenstore.so.3.0libxenstore.so.3.0.3libxentoolcore.so.1libxentoolcore.so.1.0libxentoollog.so.1libxentoollog.so.1.0libxenvchan.so.4.14libxenvchan.so.4.14.0libxlutil.so.4.14libxlutil.so.4.14.0xenfsimageext2fsfsimage.sofatfsimage.soiso9660fsimage.soreiserfsfsimage.soufsfsimage.sozfsfsimage.so/usr/lib64//usr/lib64/xenfsimage//usr/lib64/xenfsimage/ext2fs//usr/lib64/xenfsimage/fat//usr/lib64/xenfsimage/iso9660//usr/lib64/xenfsimage/reiserfs//usr/lib64/xenfsimage/ufs//usr/lib64/xenfsimage/zfs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:21904/SUSE_SLE-15-SP3_Update/81f38002cc7cc8dc13bc2dfbcd2f4644-xen.SUSE_SLE-15-SP3_Updatecpioxz5aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bfc0ca0075d975aee508e443f0bac553b53e5810, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=880333dbb7f531b356085b73481318487ed7879b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c19495e3c590aa605a5bff94654fd7594e60cfac, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=45569808816181ba8ed2cbc8184f87d5e1368435, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=45346b2daaa07d36590b3026244b09f543379697, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2aeffdc8714ba8a0fe59ef4d87f93312f89569e3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=41c01ce1142c84ea2476b45d2cbdfc31fc0e2d70, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6f69a175c9fd17b5ea6a9f1bd92db505f89b1c58, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=282a2fe13b20755fb29524dd1b31255e8499a056, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=afeb64a32d048b85a3dad839e4fe6675c3ce3eda, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ed9bba9c2f6e1c002e31cc4b0154ed5e353a541, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a74811eb505c9f40145b91fcc40fcbd1db6b8506, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6f7724b1f6510485369ea1baf76ce6cec10ac08d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=007122d33a397c4dcd750bfc3eddc6b5256b4c72, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a42e302ab9cb7e48d8161a3803067657d42c987, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=73802fbb877a2a7351b134f447d36bcb69276e94, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1a3e3fb4860cceeeacd4c7724833725ecbf50e9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0719b9d84bedb64d6bed12ce2498970be5dcf38f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6af41ea355a38641b5c453f88e8d17ba00bb3597, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=53b550107a510e94412f5ac43c0f4ae717e015e4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb9c0e970c91cb444690c66e48eaeba11b0b0c1f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a5d08ee917239a162b2d384ba95fdc87d1c5c1ac, stripped%9GYaqz   PPPPPPR*RR,RRR+R)RRRPRR,RR#RRRRRRRR+RR"RRRRRRPPPPPP P PR*RR,RRRR+R)RRRRP P P P R*R,RRRR+R)RRRPPPPPPPP R*RR,RRR+R)RRRPPRRRRRRPPPPPPR*RR,RRR+R)RRRPRRRR.RRRRPPRR,RRRR+RR.RRRPR,RRR RR&RRR RRRR+RRR$R%R(RRR R R R-RRRPRRR(RR-RRPR*RRRRR)RRRRPPRRRRP!P RRRRRRP"RR#RRR(R"RRRP#RRRR'RRRRR!RR RRRRR!R RRR!RR RRR!RR RRRR!R RRR!RR RRQyg@ aFXutf-8b9f8992b2561be874addaa00f4787355c78134c4b0440ef0640af4a5d409f5fb?7zXZ !t/:] cr$x#E/Y.$gx]ݔ_\!4o+x(ZZOAMT6> 'pb0r)5wEWSiFs&3vfpVI%{&n8\xj-oQ#@!hWI%X[1 uK p`k+(K n9ԭ$ ͓'cV|-/F;Ԑ?9<EfaS"MPi^7xؖt(ԑ;V55s1b1@Gt ^nfi/wS*ZyYplS\D֮#!\@Ximh'ɤ]H1/rjEfr|x`Ȍڐ2"(TK@|;m;(Cw  A@m "/G0Y</5d0\DIkzO0A,3CÅ^:P/\xU+S5 ϻ>a1e7Y@91<,.s. Rdi[g.]Gͽڊǜ* 2܉GL7oVW/?fRjkNc6ӻP=)TPE.,cUC >?0(SQ;n`**#TrG^G00#dp:nP!L0]=x4n#op0"ɭS;f-0jI:z.ͽ_T<25ӀK' ڴRGMtC,F"BWm@:m1ux}(I"e%4$vaxtVV-ƿ]H'i"-KS2o ]NDeV3nʼn\gYїH0H\?36F`Ō2 w;pO?,vX'+ݹoxϭب.EKn;k^@ْ/?*ba# @?PA>Q75[:$@!~X iK&i6@j1(%ivD Fsd`ݨ.h:D.O`j,G=nk ťR_(JK1J!/_y%6Ve}za#) kU/oEs?:9%rYkMYT * 2;cǮsㇻnxEut5]yѩDgYo3?0ơP$%4-Ѩ*9>OJ.@O<$n7UGx2bSr iL^v¥́Tu=j.rAPpR~Bn1JUNvzaMԙ0u[XEIjK܌Sq%.7*6T Sf9H~,͠T\ H6nVhe6I6>XUJxbͺdzP^ ╅ѥnp _>C : ͤU_%ĝOH+ aAz`vIurneX=mlD5DwVfOɍ1 X8ظiqL#уZcR⮯ w#]5ABW]NfXvb/Q(wF9ϼ5)'!۹ڔo5 ))2n1:gJw-BNZϨc[T 4&VRϳյ{[_/,^` UDjWVQrm(8k8Sj"xvP =iax!Pd$7Zz:I3O+c|/o;))efu{%{ɚmLxDճ m℠%M6w'IeWs/t2#kP\F+, @{QNxr3;hi LqbDB^֯4H34ZS]~ v~ZMz"V][*.fƽChJH,UNt(,M=w{`<٬54 t\'c**ΖIQgv~gҾZ8Ȫ糡Pq ӂD\ <:H(C w~~ip:V,uIW}"%WQ0JpqV/h9z&1ef>+P}]I i!Xp"hf/OtN Wъs8aI<_"O - h/ωhߒK eF5'kzu?x(}8#:㨩ǧŠVڈ羛}59JKpv#B %VͯsRM(<ݘ4 lӧRHVNMxÉ숢)E쇳& 0&/+X'٠ ˋ9 c]p Ksvw0jN:IISǪ ŅU\WSӖRq$s@onhӁ(WQ}9Aha :Vrn4=(`P4Da< N`_C~L&HSDi]EOq] tq)l!{x9@,*Kt;3D1{߭oݍ聯دɪC ,fj' B\xRh\$u$},߇jB+YCF`<&֌[N~p(srԲ/Gб!oJTolh,t.WkA=u%g"jDN1& VSz.{ORWe-ܐ-U]ʳ/d:ԣ޿_>@v?p?xи3-w^dL ߊ7juF{ ^ c¾(_') tfRX0ڃꪯz9.[g"DchЯy4J?D1Sb^c=Nc9婯 l̍PLz2ɧUzI<ڿTTn73VA/3GݎnSb0lfi;zkƎֈIajxKνaQJ:ޒqNş+@~μ͒=(zPbq[ŠI[o f%?B`dUO-| G\V&Gn` c͝išvok wn/$yHy$Y=j1bk836{b~fNsiX{D#ҭŮ?xۛVqb1* aejj}4Cn}W(\ 7^kxP2mtPM#a6A܇$/HEwvGG|crit`yxýKfD5L} }›X̌=5o8[r UòU9Oƪ/؞h=rTQ̴s I.pۅmrrq{[-.[L?MzzN#HN903 SL:ѹwP) 2 ?n_zuiŦ_k֢}fW~\V\EH.Ʈ@#˚H8-tYAaQ5gmŭ+^xVL `v nGnIo}q$(bę*;H=ktWm;cH?>EGjئ^{˛<̰h^9x#W!fD8_z+K5xi5I 0$늮#k̋8Fm|O߉یSv1H]K2+zAfa/\ >'!nZ v%\K ٟGWY /"@_Z.+6[-9·8q I@54s'?Ro !Mf+on)ZL1jn1s?um^dg}(]Z-iA c%8$`/!]~."'XNܽˣwlu̬& 6u$}^Rxh|#Vy +^hE> ){e$K:m9`t ܍QIDRhvw4(1}R?|6|MXymS D֊P<-V8>3 P=R(gV)bN}-4<96$(p}-Su sw?*iqfn6x>#MGǴcz>Pgwcb&{ Pv5Ɓ _8gh5xˠ^ˬ(6"&$>ŝ+^n x^1hpw(gۥJ vY\;6.u2GƇQ>άxg`h} (SppӴ J)Z \#*jR&]ݮV=W[TgaVabe,VKQXwjKo#XyG)HQC,+DSC߹"(PUjR?_ES&FҬGhr6wt ց@+ou|ʚW”0b/Y0 Ȧqx TSWt_ݛ#մ-Elݢ̉d_u֢;Y_R:RǨ+F"Ue]s /9UEm#Iov;UZ6£ۿ ,ԅW켘4p-#,)LrP"1ܽm#/:l'Y_UQC9P9l /^ +CH=ͦȰi`=$%Mxr^n(V·|~+ìQȖ"+XZ:~_`}?G&%> uTSoͅYlGS3}ϷJ{&HѩΚBޤV@z$L>G`sMe*mٶ=QL(.A! ^}^~Tq+'& (nM 7@~7wjJhCIw7E$j icfͭoAcgvuBgE Q\'q:x`JsvPƜ{>fh$mp=Z(xCI:@}މjR73~")'SPe?)g鳐0|bM>tglDHn7MIj>7c*O!-8Pe5x #hfClW`Ѳ"G  = >xZSRdr>f'M䡘eXsAnH7qY mkDR1N7t{E+NhXWYfQ_>ӝX8~>es>GhxIse3E 4Y]^E>"  䝙 `f)J100eQ: .q!>&N=)PycwZ+9fzuO,cQw`v$ffswq=c@ϮZK$}:6#٤}iM8\Q63Z|JZ +-B1 "_)I~ճ".#_d}ga]ɹGJ|}xk1bSpPtJ"RS =|dhL`|{b.LL\͒g`_]-f&Y R,/d!uY3@Si}/T?* eCRLݠwOjd L”Y? '@v̾\6G̩^H]z Do-v~Q?`[|̏|PAx&>"ϏgwNaqެwpoj:aB%хl8`ShEmG}Y{l}|5Q[k $GZŽ`_4/Lw׽QS@L@ژ*E˯\F3z=1;xˆwOL'&"b>f$?`78ogd/(x@͉1hxʡ)oԜ *^؀lA ޒS~KEr AIn'xWbHA&p Ok4Knt`ʜF@e}L϶mcȀ|$^7m懎b>B~󔘒O2dskpdV( _`A >7쐧YCxm ϼENNP{ Sp2øZT ;mjl_ +#T3OZǮ2*!Pr@wzkOjelJ(I>fwJOپkG:tTi\}i.EW-t&.-5)Md: zY/zQk@/wW{s;8z:$>EUI=u`ClU JidpDPikX#&@9|'BVt@nU0&uMe_I$ 5׌SוB|opiyo^˼$ߙwN "k11Ue!~6(ʠm04^GeϿa)e)GџOgf^E\!I=JÚ؄AԵFW_[\6 t.usM) vƣ)?bp:Y;Z3yHA@H7r#/2V%<>Ѓ"\4)9fg-"љG G Mkf0_'8;2>; %7W@tZ|ON<`%cR^10ǽHT`ҎY9.ܭM7> &Idh{"D<[%asNu1\(7jFjO/=;8MjofP)AxLMD#zhustM?}xu5${ #Q}d\gf*"|9r L¾`c7Vf."Ef*PE4*}u>8 V3와\Q8wĵ%  ٪mrY:\-n21!CV Le nK*N15k< )dgs=$EsЬY/y3*>T5䜸52S`j?noDo⧻]QtzppG )DF} iV}qK:&HJ> p` 5ĞfXNb0W.Sg-u3ĦV+dg.Όqn_Yҙ[Kmը5| k)?Dͣ8}ug>4 LO?P)Б"򌗜 W ۄ JkM_ͬ |Ua9mڡ#P8#d~"KwE&*;H䙯0W+V-,;R⽤2豃,}#,0ѹ[tH矝ߎO-\ Q#Q%md*LOFT~`ת\vt-ؐ|-nw%Uõ]ɀuk9>le{7'ȆtJÓM4h3^Y3^ 5\FL5 &Y'TiF_ '< ̌Op:8gh|glA"㭱QCBq䈆_Ed^)㐗?u-9hY,lV@QcjgCsWSmW  ;t"-HBO2,N_2Ĺc̻dczcχe[wGKԋdC LYɤM@AZv!S4!lW9cN##-CLa7tVN 8K@Ol:9sfhOU-hbE gb"䁒N|%%v,cùZ g^JSBǫR*c/mY]Fu5+]b-4F^ 67l}Y0%q\i͞{eohN|^O)r>ٌ|/ҋ>2ba_o?LAVm`0AF. j ,2OI{BA0[Vmb}rp_ WEضC8UUEbTh; kHX FsLW-Lp޸|5R㭤(1E`ʜ\]( C)co \9`_du="l^QE?/ oJT0cE ^E%/re;;55nˏC2 P6~ܳ(1~#"SM cH]:W'ћ-4f S@7ua X}Kn#:t=6!^}W 8CIyA^hoaU( <#T ->X.}K.(+keO`+,^jėᤷ`Dl5% .tcT2Zdv!=LmgҾ]KxQ'\eجR2N?h-ĭV} /!I5MFe0+*n^Qʌ#"%YcLN_L"٠^.yoXޱS2譜D|ﳓTlZ=uu*|r:&wȍ>ҨF~XIQ" /|&pn}v>(N413#4.5_䣥Ҵ6_k%:l+ T}C6(k^(&)g'°\v 07!iS=j4',% Z:EY)DSjLsԹv.B^hkdEi08fm+(HzpsG 2מ0렍Gg1A`LL6E%!#-;[\9Jʎ0 &=fIK1c7vJ2U9-_@,ܾ.b KUSqHU73xv.h^ZiN,;4 +UUML 2OW͟| fB(76&6vd,Yleʭ~X)rnYyMdmAHc>P<cdMoVDrG7+ -ON_6-L74D`103_Tf+* [5FwCV w})7(i T1OYd\Wz,6a',ME?N>4f iͱ#n7"2t[盞|4-S3OxIߺv[_v'9#."!Ȅ*#:A[+p(*<@V&9XJSbtIbjy{bu L|S٩>ʢ%g& LKnԁ\3q 8 PGUe@./y@Z]2?7SH9tbiSUWi樂z~,L&~UWE@Dmo1^NIT2urQJWvPO^ T ΀w)?LP>*^yDH~9fxg TaRW4IgUEk86@lqd_V+feHhb QMS&i$;(>-,ʮ*D :q"y I|U $~Lsj.堳vTNE>CX7XB$B;tE>ڙ69wڊ^,إF#Ozޒ9&Ƞ/WlTz _&2֖R]k!ko7H]$cǤ!Wg΋Nf^T>(mʫH{%xJ }KԉC_ԷdwЖNt?7o.ч<ּ^2 f"+ݽ%'^K\R_+zYcHcж["35-Uc2&Jq{a aX1g0Tj8߲̲5_)}DU$ s{O9QӦ*|]<'3}q9-z7^ e~#XW^#efzoE̵;wPP2T1? 9yFfJX";[tj#F6g5uf0sY|0E*r^ ?{uA ;aau$ SeJ0N\ߔUrѣV3~1A}-~Wtb #*xp>Scg;M^)(%0̞%Uq o&CD~unXHPK"`sSMbr8/]Imi4eVQ p+z) ņ6dU[[A{ddg Z9_n;H+ޱˢqoܮ4T%EZS\S*Zrgε[\cn GA4`T=GuČ`foN_| /=ptKٟTK]8dj@w:nTm(\]8f#ꭞjf(a!:s .̱y{ $I{h=zX_kAܞ*Qi}%)J"ohWU_A@wA蜜.oiMf`BrF(8")>wT?%g gGS<:py/~%6E8^V(ccڊF€=+\(M]^O?}eT'3_[-2km( ^ 9K֤DC`/; U.qd3źw"aeGh*ڶ9~k66գ*Rkl$MLmUDeUlZ?ak(Ɛ%x ^1纠yp-.Vb?NLg\|Qg/V˂> +%tmDLru {UC70=qH ļoAdU*tZo2'C )O>TpfȢCfD^5Yr8nåkؖ;QGsHVeX-;=P8 $I)5AbǒKr?X hk.: |Εɩ'ޛ" ؊R|MJS2LK ,c\{eޛ>Is~m&z C }vz. ąS=,QyWuXxʺr؆@Mp%ɽ8-Y˯"<7ϜVb7ZXgn2(ANxUJa,T*TmڪYd|_9 yQ fYL7BnQce?,Lu{ߠjs$px)dJ@ȇG2ص`WA'y>:t`V(*7.}/KQeҚbZXbM'xK&!E ~Asʓ /m\ ɫ7Ĕ+[`HGLJ_1:+./pa󥒤Fx(Pxltn>t q.$ѕpB|$M x*aV"R/q[mpߌqCBeNK%A?Ȝjt;">Djny>3լ|,W &Vu0qj3}ݗppgjp mXZXc-E~ ϲɿzڑ跅Sbkɟ q@dA^!._X}fz$nlõLoVaO=zs?㲭+Ҷ|}Ln=tuSI 0kXiGA=9C <=u'%+{?\; r >VxC{T{S$kٛuR #Oh3 F;V,H)Jꋛf ;wpu1]E(! KIu܋Wb}/lbH ]d sd#ƙeqHk f ]}T2ptScV=QT`TGGmVIp6t!29q 0-?0~8z:r Ow"l>.ɹsѷN=!fSdS 5^fHtALVT tP @[+  ܒxS(}(923Ra._S#A2c.*W %}J p'\M>3%bԩHYwSmyUf&86+<]u[Thsyqْܸ2iHӫvzEh?*2߽D2lʡ6dDc6C͠6hX5,;?ts0 xwwo  k`2yDue Q\!;^z>#C8#0feCWڷkzzk];RgTMijv]8.,eG^yƈbeJ܈+rtݹFNp&F`si Fnأ @u0$aja*Tm&DpW).YDc»d&^\JR'y|*jkOF(YcokeUؓp)C~_6Y=Ѩ|A&out!Z +v+kyNaw0LjWz8&FZ8!GÅcì drK_3;ψҖ bS-λD|݉UE~N-26=TO~k2lWy~p0SV0U뻘k$bDyTP0R`A첝AGC륨 3^U\P] 0&b7֩>GKڶ+jbsgQ0xghkB0(ͩ QV^R։ KX3c}z{C #j Ж-_?74vA5`.lPU'F"##u#ϛp C]|_8\i(~wiHL;)u&p?s'pz*#̯n /aߪp5d-IR.Ćt@N=ٍC7pX P&5'L5:RֲLKQ[ds+ዐcQQUEL_zgّYtm2oBHQ|HYF.Yz/r:iBG?A29n5}ӹ?.$3L3 48uaҗg<(:nͦjj?cbwq96WC 3B$~ 0}궞@C d=Q m"!Zt/ǢZeR)šDy\Js{(܌+G9uZ||0ta뭢;2uxk'7kX  .?2 S`k:|$X7+BeNqu^*ue1;<Ze2paj/C`cVN AlGOf1~55+D5E\=S>In=0:SI{GhMYNuA |[Dd<(7l/~p:4H2,RHrk 3lg1baYj)5J\Q׫zXƁtyt1oG+荤9i298uDm]At j;@r?#[ggYBWa@% .9+0? F ~P| t|(>lxrzZŰKW jI-1x+]?yEзH=H=brV'7gP"lmNuZ޸ 4(n2 +\z!pm9fB Ǧy䚨8]B(E{fn1c:N.> Red;RiWNIdU~ϸ>^vl-m[nj7#ғ%&j*P.gQwƢHh*` ,rEB1 M}Q̱}p.uVm2̭ADX|'zr@jGo}p Bv@UU9qdT]46K:6GɵY[-@F./հ(o '{v?u4E^[|ۍPWz|eg;ke%N@}b,kv;Gr9Ύ Y7^#6Nơijj 'sIgC}$XRBigM3b@GH+D`*A& qsdQM2ו7eȰA-۱Je  ZŠ2lݏ&~3+7A=M4N2ō + +IRcD_S1s.]Vc[2w{Hq<O!cUZ.谬u5/(2mE CPmCdzxؽ(9חAsJopr1_4{_pFp8l6P&~c%sFw\p/F!r/`"X K6M3,e,B4Kn dZBsb,]FvJ<5#D|Uuʴc\ QTM\g0L.Jv M⟻ic} %}d0\U,BsDZ&Z[hc;9qP-r`pqmbG;z4[VڈԌ)Wb X&HfʎE,Qc_%ep<z#T𖢄 |î9&EύB p); nzx.W;G@JuJWzL(w1vL'酽 /9q杄9̻מzcybgS"]6RA\8u6r{QU22j.S S;~wV>rtc}ֿ9^kOvd:Ȟ#\]\ҧ @Mσ]1=}P?05}?D-󳺛(x~NdTF2 xfSEf6w\ƅ`U6f'S,S T )Lt5 jͺa|uތ-.(sU;+ƨm/u> 7$1[B5NQyn($P-Cop9l0E@~Ck ^\z4KAWsuR+3VxGZ ʝ3 1{++=*~?7AL u kK]G/#B`:XV--eq JG=ߖs!nC]p>.n!-TEE WiRVc,\E6,lTM; *PwO"?zRqoբ:+Ofp[yT;Zmb0 CoT^?C,!( vpbH1\ $zaG lD!:0Ń/VR6E  |a&'R tM+ m庚rĻ %eޔPsU|f4SZl=JmL%7(SlK Pl)#v M}1ݙ厒ֱA!xfQWR缍cip36[Eis*~~ 5qG|srܩrxRoIbj\!6*{m~P-?@.U+!1}lhX^L{fH knS`sY{_e`CHhГ{ V/f_=cTgmc6xj$bD'R.N\xquvz}D,;&sI͞\fm$Άԟqܰ#G0c`ӉdOjqubL@9V0yϩ}֞ҳMkER1h'3:_]w*f8P];p t'L}i͂4tlw%(K>EZ=T6.wnT?$ ^7Xܣ/!X5/fs^'2rV&Au KdX.Z?*vu+8KO@]rb-݅鱖5EMK+zâ["JO"of_4Š@`k>f>Y N[IUՙ{fyVOI{ǮE 3o H"]lSk׮[ͅxEt= ,@*K}?e! ׈h%7mc [Y [D>ZShpfX R3>@`Tn\c*ȊUM2CPoS= ~1fw_)@5!f tC?>:Fz֧2+>޶^6'Iiֆ~Df.hzF݌Fu@u9/Hd'F8]+3$ B4&z,ޠWPFQ Z;AW#~xk h|t"'4,~0nm1\Y!Cy^1v[lhvȇZJZ[Ά xڼ,4n/Q}y-c0(э}Y^L8QMz%*)ij)qѺcǛe` *Wr/m ND>PzF;!.O _}j\ʖdV3R48ݳO[`qeׂz;.ao ٿv~ZzղV!S͹̿B:?]ZkD-R1!~fRSo"BdۄGv q6(_2R~D,F=sKv`|asp*}v#iUG'A[\s5Q"=h"AFn0>ũ9^dAc~O4h̫=!;xOŀ<ȏ! ѭ&ES kU#p.a`'p@ٓzSJ D2Nk 9B٫tg{HJO.şhGY@]2?"1-A f㙛rN>6)ujƗD3 U8,N֡F|m 2?Ӄk/ &6 ݌E I9B\I*]]s)w7*^E}9ScF; [z`i"qX3dreT4#^40,e~z뺃>)j3GH'Uy^ӑwGiy& Վ,'&A g9 EDŠ vm&#v~y|>s ܏5#XfAMSuH^m Hl09>I0"8 +}WUbW t%W#̇-^l_AsꂰMW2Vۤ [0֓|/ hA j#ygnzЈѢ)EE)NJ%{u50?닾@ȓKbaӅQO˫7\{ Rk4zƀ,yؒCemHE:\LjaUWñܾ e'Qv}cL`GW؁ār+7f݊/pF2^K؋N(Q_9o(^:1g̉~ Bnޤ ȝλUcN7Y$;! K]"<:@=qFG ŭHP ڢk#GqRR[3A<1쀹=!kxaЩRJd L˨Wq3e2'J=TcW`,Sp`O2c6o[n Fͳb05HI28>:Li`+jpgD7IS y#a=bA8ֵ7E%)^]fPLX730| E+4k! j9UfR"+,4s)}!/9#f]O_BM QVE! Q(7Vuۖ% /\x BCݻ$:$ V{>W2Y`pbN>[z.I#b ao(c7s2=v&5ZhVw/9m)% /3.>wDݎvn[clC(iO,r?iL]4&2vq-/hh/2 W>7(2![JCsT*abfI15qsr8CJk׀c…!N֊8qC]=aQ)?ɓhIg/U ׮DyW=ra'Iyu;}6-pm>X >Q%DGxUɔe-Q-Q9_MZjuH9#';Yij),/C2n9# :GH+ @Mj ihyU$]>X-կg'cBH:/ܜn*ƵF3~qhB0eoǝ@tWU(OgrIMdZ'9DQX m gHsⓣn*j /Hn̛F@2\!Ϳ_<0žHevDovG$]уFpzo=OZn1'*C^<0$xCO\riҬf] @t\{PS`hA0[Y9.9(.a0fYH])ຍ1Nh%R}ipSH]Ϩ(B<+0NG ˅4 h3]}}62v&"͔/b޵׶wT_a9dp/V*w!ARx*x4C*9Bj.xY3MGg++ D#8IHc$ <a#&9 ZLnu#KЈWIg瀝X/`5]4kr)͐tƪ=.JGzO|LNtC#bts/xGP/??XYG=z iϝ]3-Xl1I?O:ӐtAd0좊t~Н W&s<@WNطḁ~;6H]f_;p)zGR #GF#BwHٲQ+)CŰeU7quW]e6 G><{+.!kݐT6 QYMV =XҏDrg~Q$LtFr#KY7l(uC P[BoxFJlvXg.%H!ڟ!SW.WN.1*s8A [/ ?0yÝ̮}kr-xIˊT2K!k[Le$HeH=pq %j4od䗎3؋Cza8wPKM=TIiԦ)t+-ʋ~|ܫ<eZLIwn46aϱjWMwpGJi nZ?rUAǖG9M/eфZC=ü]Kœك>G)5pK%lKh`΢kǮ`-ȶ) w14M,T0S>CvB!G1+ks b1EBxH\0(Hʀ}rɪ=Dl|qe%K1Յ5/j@yrl P۶hA{e 9{] a:Rselt}vzxfu5:f%%DѢ:FGC>>O?qk@ c=#Ztnm&(lO&XXXNˡzHjVdh'R#Ip˻\2]YJLJ[S1g$ 0K4wW(PG*ZK2.4NդUvv(!:r UEg~umi8 =ܟ(-lbZP/rR:@+2@}3/,GN{> ?FmoRӖF:VI3P .Hhඔs9u0k"3U|H '‡ z;grl(藸D[6 S6MJrֻ7Od!p;h2pff cX1j ^pbG1TV2v)SH`q $z٢ciG-Du#.!.Y~M1M'|8s` a~W߮"u {"t2rBu"y@D(WjY2̼)QW'Ȧ/lUcv U" 51dU6Jɯ+dgK6%aqٽI 﫮,l5uv˰O9Zڒ +zܣ_>4$Sql6/'/'F.E}ɕMm$I;"RȺ`£ l*~b:"]rI:vB,҉?atwJҧ0 ͆|"'m}0;F":$R]v>L<< pŅP6[V!u|tmGeG2Xũu;Dj.G8rQXko'߻I`/J㞱y6?|*$TӠ 䊊?lez/aDҩGA].p^E8Cw9exmYJ^`@Ї>S '(_ i+FVƾCR#4f>t9"nPcrՌN3}TNyrN8jMI&fW,N=uM1Zl0;7l+@ YCRRr-b(3|,ۗ8~egs,JiؘK#ܩn)cX6y}Ŭ$"éfi*DX U:r=?s:$B5  ]= AfϭK:cMଣPu6ũӼ~K|^6GJQ`3;wzhW*X!BwLB~,.,wdtV; ! m_PʓtAdz__ 9oDI3*-=~3Wb.FT [I}xEg+2QcxR](!'tbB~jex"&foH='5c4Ӛc} UHgFH{1["T/޿p=~LʉAzךYzjbjh75&fϟ>0WGZ$cYJBR0eήd:kVwKxn,{C`y#2'[S:ZߓxV4¤ iK}|11E[:;H֢=BCH̿'t\*nns6>Ab ɫR̉IЗl 1}!0P0x[b- sH=T\y0 Z#ґb^$mf߱v6E\UǛblTzPuO -R#=u\rmQvA Դ,z&p7`C֪wfr+-?kRlN*l0o؃N{PCOC\6nkZөf:ࠦ[2w/  UDJq 7bFIDM!x{l sNip^N} j <,Z"VnwЧы)~̫w3x#l1U:KBOWSaq+ jzn@|܊VjZԣ9ЯF.#+kgH01 /@ YqatN vbro&ޝ( C&޵=J:(;p Nܔ |Z+@wR=̍ST=:"3ZY@T<;؋Fc|O~m`D \V$ѵJ\ 4xH T u(f+^0j7v8)E95Iqc@>j{C-|HV&^Rz*`b0ęa|EհI&ڼçu=Յk"g3@ɦY0tq@2x3lQߪ"Ky! 4>Rj#zFDy}k `fɫ!So 8C7UzV>K#Jnfu &JO_UQ"MZ+jpGX 5&4&E0D;j)p%ư;iR9>ޛqE#yG!eR]vpb&kUu@ jSOJQz/(# ؅>h`ENrrfixWK}|n˦|4ypzc%lR>wr3"{R G=XǶK-({ꄰ[ ,ۉ2SLZƦrF@3$Ӗ<7Nmζ5ynBA{<luHZj(MG":/Qoe-s(h$K׼#O+^D#C(fR/GTl,p$Úb};!qS0_k.V}PfF`GuFވ0MީƀAy̤%nL7ˡPrҹ˪ԵSخxG0wUĤ̆I!NJ.UִovbrW}O-%(1&=m"/c5kx~[FΜiUoS}UP;1|5܈4PЇB¬[MQԴ',A>&e{ֳm6*IX||QtDD@0,Op*Do$#kk(#0hT8w׻?Hvn6K[޻1x^^zSW!V~gE3!Joe CV8ҩtFMV7!+ɵzM {mDPC6Ks=v`w0tDqluoF]\Ty,;8 T>r";iՁhQaPx]s{tʸ= ;@ .%i q^2]CX!0RM ^ӿ ]eg|*[@.ri_gaJH3rJx k^jVv}e$3/hM(, |S $x>B\\멬O\B U]*KBy t13p,]@D0zgAZd}Ճ C Gȩ]$ K݀+9@-c],.kbxϳ8Cf!OERVuv cHW>KC'PGYCZ.m߄' *|TqGI=/ *ſ6@tIʗh%ɿN2eoHszkoaSRT l?Da*) #ucZƢٲ nH1tkʞMFs,?oBlG}2 "!|.n2`p 12HnJ!FTuĕw?Ad{O,| UDJ5eCu ^ )JuΣB yl^&a5 =}S;#qU_7QMh"R5rP81>~s!WgL]`C1 _&oX\vNg9QXKZ=~^9 T 5ZٷVtH"g SN`=8Jjw\K!|RŬ7*rǝ3#HzRuO-l+`/>IWtٖ_mMQ8}Fp 8}ȩwKC:zFɢ.SP}ާ851~ߑt۷jmEy4&"VP"T%YW{5Hu[KOqmT ښwUzQa0&)O~OU+е;R >3鴿3\D+(ۻQ0:8%rI/bV\0w )‰PlguzFAllpb)P`% Gp>g3C*N'&[+ssIΚf8{Ʋh4 AeoJez@`,(A:= m@rqke|*u];h=H/Ko:;M nwŧΙHcT*͸ ϘEөҘM1 Q$cTF%D6NvLM%ơyZr&]/R`MakҶ.]yW~VjS!Ng}́͐5^)Azѵ9 G}@MP4S!Y|ȫyo6G5l7lAܯIt|a5Zj/YAx:=GfvvrvY:l@pihT|4e6~lԉ7V Qz )Tez$ F̄x9fkgxiv?Os&V)NA |e[!+O=4M^>wefe*e yTiܬ=gT4.w1^A6=!a*;(0(?) MyS.D\ϓ.F|Ncm{PU祓g%6uT 5&bN@|_fWܧf7^z0TTg쿻m"BC:_Om,D$:Lo>Zqks&My:tOݪ+.dډWvmwwٍr*<`0v͆\GN?oXcj+|D&цhK30?ON;ĥQ+24 v#:qe 84-H{|XyˑrZ?=kABM}*@CЊ~2+[{*O"~XIV(FMYkhc#Y;Zp$./ ӭa8#Ŀ%;MΗ֍Hi~ 8w5*EO!ӌv#ZK㥖 tg>s7XYy*,T=U]-?@JˍfYx|%:>4LKX*x3 h'#Q QtI3fg50=v-K6@N.#X4UeQ<ŵ%EA f X_"\ uT/ GU(4,@?W$W8Eu\хB CJ{ٻԑxyz '30@_9 A$ڄhR.Gj>ß l(v?dĊ8ǑjϽ VAѰkUwV÷|&t2B̓ PSAO2[PwCe4Ol^Bf1Jy ʞQ9g^ ]ZuSBwpEjы]a;2va"w(,Y}!Nj$.뢨O ,btL$fH\k_ߐ=RGVnXd7b4; h[/]5d ‡%M%9ѽyY6~j 52PL4!I1U d|} .]fɓaP [JP,;wb杠}vnJWd*Q_ <ġ4_8#_Ρu^V#٨j͊q NtL >gi~iHÚ*%xN_c[E,_yZÍis/\1!)yþ\^[yT+{8釩]Q)Ue*dOk%Ŕ!5N1ga=yLz3c-j\fq2\Fs2k\ )\$rDfWݠTO$y_FX|0DѾ~f:.ɺ4rG!=᝘Iȶ?dDHqAb2P@U8`OZs6E@iMg(`bv.-S3vW7J!U9dGfv/2Wn|+1=؞܊+;WVpcs1J>h5&W 40an PmmQ sPZ4>֣Mx${]";}V-,5!.p'j'L6Q9v3l擡.G`jCد%}l$:{~dhLoʌ ;yIVKdqA]vxPᝃ}$lV*wDlSwnvt}1^<%uF@ܓF Z|`iX#fwZA4SK[obVKצrVhxe:0;:&wz(bl$P#VEJDSn||eXУֽ3ؼ,;H]`s$Odf~lOɗ^'`b td/V:7gKjbQyEUGQj=UT%4xA}  oMԞlʂՐ$zxzӲ>,5T9|juqla(R!QPHhhKO- :&itEyg8t7st |a>c)Rvd]ڎ2^DqF* `0 K8 оU~WIyzmOj atg,6J ≑;VY'W]0?;"<0Th ,-}&sKZƲTZD9nʭ#$i-H Sb5$B ~g-3n7׊}#.xV{R &C>i+3+3{s,!L .*ntH,n rë8fT n K~  J?4z8ؓWBA?>{D#Q^dkCa>DTqkYm& $ ]$rW ߥ#"6L\T2$J4N:ЕW4,'V_X:EfrCBԏUVlVRQ;| @6ޤMoG AZneIyWn޶I(3H0PAQh +xSNc!Zi6w<& h";)C)ZlSP؏RX~%\́']}6oNф+\|N%3[εcx5Y?U!.u32jLȄw`!N132݌9ېb p#¶ QՠV31P)¡J=|6EG1sz"k$a]oQd?aW&HO䅯 JU5 DBc0M4p!ߋAL U)>*èCw.=](\]O3B#:2wPs2tAܴt1Ks|s/ LXWԏګ2堔hk,mS;uB~(e2ލs6d%+#c@R)h d^Cꀫ1Sfj!jg fКB]@P%\rJ_QR-G:q*6{Jw:XVt.]km} EO9t|re344 np#l3ױ7aMshѬ-yOa[ڠa?/0XxwsnafD)Cm/u0`k}Ctve֣6mdg I73񒾊|V>cVֲi`e@o.Qړ76^X5Kdb(!`ج2V?յ6=:ز6ԳtZi{Jga RGGL\DTVp7.+^i ~6>[ ;S| DV߲ȊV_LC]ZR&8x1jǃZQ,Ψ,%G}MhuAv".Z}pQmM E6 [>[ekpM=8ߥ٨ӓ؇;S(ƓjG)Q/:G`4Wuމ6|q4DsG~ugͭvǀ3ߥhyg M*!n2_ SYv X巑9/Y `i`Mw̆$N=S]<<TdF !YBe0+եq/u&@AGE%z&@a$wLP>Ng߅ָX~7.~6֑ov1)6 E:&7p!er'dS[sd|G\pg 6 1!ָT]cQX4ѠiOzS+B@lmZ KFW:SE \PgQXrheS$ 9VכQ MpU|$.W½T ^caysYo{.i>ԭu:tL_M*2]%je{njD[l'[.tly&y?GOݯgWg1|Y]th%h0 jhln.\Xhh5A$nЗsLpP5w?n=sx,t~󑦿kO2P$l$SΘr?.|p**U1Zi\1:39? ,Z-" )W2.D 2F#^+ ⧁)aiggMZ喇{]?Q qֺg!fG`PG+N&{Q=;b @5k"QRfx4dONz%*̘_ Q/iy.<}DERVWƳ4q`Y`AmFAs'0 ukJSHN KOCka90Qj~?gWB\{uTR%V|:ړe) jnO(ԮC=L cn;Q/ۄ6D~JuUL(H w/g1%P~-\ML5==QOYGJo/[B驐#✜ ̠&:\G1 Ӥ&h1̰fl[zhmeSFˤWK_!WǏ>l$C(*ǞAc AYLxD/ӲkFhRO[6]%G6 9`YHP 7bCHUpI,_=!,&XvbAC^(/6"ЮTi<࿉XBږ) Wr^0vpt6}}o0z* _C)N=} 10kgӳZM0^ft.J. %\@+<.\?< Sscfc"}.Y XPJu=c/*[~k[n {MTSp]É)ľ`7ѵ$҄%cԜoww vŷ@a 淕MF<ݷ_)O3H+aS]&K{>g"`JAT-Ud-[Gl=Б3<|+"i<6!g~ZȪW+-:𾑦v odC*糢b[ZX"BtN) {;S=66YS={(-X2!Do -q1C n]Eߋ.N9Lt?σ[Z.Z~e>-?ƥۯpӲvQPtS ()ڕ/?#e~éeAtQdmax6:ɓv:H@!ү-) #3K]m3pRTIEޜjrZ-9~HmB|iA/:?"aqOv0ʣ^u~]̓ӈ=L7qf [W P`C5"LL ,u2XrçrG r!S([ |W<\H%vI:0^'7K|΋W2Rp'Sx?ʷ[ aEzf[~$z&T^yx2 Ɔ{. i(7/Cplb ب@$3 BZ323/?3s BYYj~] YBoU[dui*/^d-P;.m>~@ *{l(@XO6~#t$ &"'w?e̓0|ljzn2(t=Xry^,~@N0ſ#S竇,KZp zS*8>=&.oT= unVUK6DzÐչ""_w#(Cǂw^q;zHwbh$<Rxgʅ>PE"YNRA\qu pF1/wF>sH3)w]GFP} c사(9t #+GNGÍE"đ+A"XGs$Wq]EFq̦lֳiZ0vv)FڃXn {30Wfk [l\GYSeVJKYn '[r2dy{pMgZpZs\M! zgd]OX^ά_E]'5j.ELbLkl%΄h)/^Xm"p@Y[?$5QƝhD;D\;cič3z p(:}˴瑱:.0Ե4,Iu6O?\%|7$T_WlY4U(5n"ul͑p{| Zӏ'\Ɵ *t{p^,ȪZq[5[{+ 1O8:<wcbw\ 13I><}43[Tbq 5'%vX˶#YZ- ;1"ʳ 5Ʌ6 D%\ߘW†o0ںDBCݒB X Hp6:6ۡ7_V={Z)G:cYqwOΓN kWQ2Q*77[l iFOXLQl["i6<BY<-dlzr&`ki=p1?(5jsS?rRÑ^@މsZIͩ+$@PT9MEX%T.Ti`o77'(-Q0n~m%Lmw\M5j ܎yPwŘTs93CgrF؟ީY}Le/Gh*weÏBdy1-D=§Fם.EDCBX{Q8@Z6$[03Dj GLq ׊D0zwpṒ`ybJ1 WwX{% RYLg B{p|(u3*jB YYOR[b]63K/JYAvJze nC;somL["!/KDI6 p+D2~ʏaUZ4H?􎺀~=aBXCF(!4amF>kȶ$ʼ=.R2&+y_U[?fz|qgD4ΙE`:pB (68\%'YoTq[j8v#W:QO3mUqȴ_ܖUSs2۴}1eE&)2V^6L t |aS=?,ypӒdq8A^Cs+l_lL10:^;tX*!"ztYIp]=&J1I2X1Fe|D9bK쨻o{)kqLPnq_%-B9uYiSf\`!EVombb gOK0^;Ae۬a=DxESGsM[s88kbj<7V5oBKgJ!AVsӁȲ:,@eo%cN@ZqN! j%KzoZ("dW`-#cVz h%f2FB*J M$}i{g+c}]K7:SWAi¥K9x6BuZrS(d"A+@^t$q|zb/af:13 Uͭ] %2ڷY34mb8&\όZm$j[Y$|zǂGPW=$ K?SgFLq@cKHs9,0re|·_:؀n@05`2ka+FG {럝Cd`M\SDe[u밌˝1͊Mol{10Tg?π).sHӰ U^!O#k]dK0c$WFn ~\J5t xCsC㭯sWd z@joO_%:hI`.{K(^6$k$G95:s\3ωL<3^Ȇ]t.UZ!"<."N;4D:DâʽvԾEM.Ŧc[PA}E~<7:PepS,2&IywB|] 'AOGx%lTWcg\f<~XC+J.\ Fk h4 ]چͼ-9sf,#2ЃA֮XR?9ua|ޏ |%E l:l4~|VpcWݧ8ɦgLd- @O7qo\lh]/imgS JEV3B{}PQ+o;~W-(Q6Z,>,.9yH VTTqYTkMJp6VbZ#ښ!jr2AY9zkKR@6*bђ:1^mHDAVhw{neQZSԖG@ 'izK ibZzzqUQpټQȀ3)̡x3v]dG(7)5+}1Py< AJFwIkϿ~-lEݗR{ZnYt=tݥ(v2ND{Qrd}"cJ54dbf-Gt.*~wlJJf[ݥ|"Y%8_2CMr5ytl1jj9 7{jջF-p&4) V|Ơj>һ.m0@bYcie0-;RXe1ո/5'O?d%p)ݝ`% T+SnўBo/d]|lDnf&:_iւ<$7>;J͊a>̭64W +HOi%fLiǢpC2NWXwν^,:+AB}xYث'AowxN 76!Su=C7Laxj[ˢr[I9 'uӚ&[ VB9u|Cta'"5_%=YI5Ә2I |Χ$T*v;Q9[۹KZ,ZOjV}Ϝ\9l|8}]됵.#FγJ7݁;c/@RQl|y1m>Qx62A2O` 4@ ,(,!İ iӸ5@JOWh ӄ"zJ胋u'RBb'A EAVxsty*dg4wr8c܍8.]|Hr-לDWs$3/Yƃ|)O#am bP_0sbFgѳTOU:&KzLO;kԩ(V ti2{af,Y'jańV`x"MZ7KNcG=jΰI;!nU1GK'6A~(vgZx=K)/_t5>gZnr5M]C`^vNE߈\r.Sbt!ǀ̝BD]d-kC8B!73dF0e@o=dz5YA`/w*hd~glqUa3+D^?qnEuˑde@hu =隒 Cz Eas]g/1oU%$LQD'42}`L*JZPi0r`o֧lcx8&-1u'k?Y֥!sI@{/J&F}Ed\~SixVSwFhZ=;t*_YFe|Vha@3dhw!Ulw'aQ(K ]Ĉy5(5D5H^,^gX5iGK^HLe`ގDe L(0U\٧yk2Z/Xq`:JWݛ '*ǗS4C5X"c (?xإ)t@1Nߎ! ƹKmw. *Xޢ"OOwD.w&fft+j4"8{V_\N3I=HNvZ.L7Fl\rJEϜ]섚jn_71ժuOfDf6%s~z8c)+jꕾE-KE9$rpA*"HkN"@KQ>GCcug$C Y>O~g{\t;k]pt;V Bf`G䋮Hm,$;x lP>6c:g:U#%&"ۖ{m0';#Vݜ0$T# [w179f)wqBp=@=5F80C$]2 xhZ$C3 -ݕYΖ(`Rl@r_3s Opd ꠯Rf C2|ܚΝk;Eb1q3ɾQިp.yrޕ'46E,^fEMD2~] OOCNu>fl[G[F=&]Y98OXՖ(TFm8K^G uҪgNV]Yr٠''9Ra-JX٪LJ|AU*+q:()B\JcB੢vc;Ag@|}] x^R>~ÎLuK4CGZbӯk.<2d4³X$zu}:SZ6XF ueHB:oQO}+d`ueG`,BϘGV:]\H۾b-@D00{9Uz]g:V\nYM.xF`p7ikRH ({ӳב@QEqm1-zT5MIз8eS7$ MqKAc[4WSӮU8ij?ҢH=O%༠+IPR) = H1lJ QcMT",uwwyQ7ٿJbtT"EV Z.2VK28ԅ2VM%fͧFfHr1+ RoP*y}׳y8{uyg_W[+/ZZZIW[T\:8Bܚ Ҝ:׉|tha E#`Ghϭ~fUDPP(r%ΤMti/[d-$QpUCe*~ ?gx"ٕNDD ;P跣k5A1pNXmo7{|2;He 'ڈ?pQV#[ k&XB÷'>^L/\,囒hvc^rvjIdpxvzXc f\II̿W]MHԥqŮKj4ЮC.$,$L~OΏF k+H9q@t{0){((VsMu x ]# o.(Vq?[R@m< +U7rٻY2S' pZ[yzQ}XCh@(5~H,!hk\ޯgL#W=-Gf`o:8 ՞*A`m\tyQlcaMZq; 6Yf<@Kt(ޡ0wt |pNhM>o]ď[󻹄/&㍓>!.U>dﺜ+/^"}Ixc]p WgeA$pv<6橂1ivAdDJߌxuZEǣT^z#p cPޫ ?;Gñ bY=bT,O#Dס$ V}gt%<`8D}t\ZO|$oO2%2gcm&RҶ?1aW!V֒y.{}g {ٽHU.w9 z4ܞzgę ]!a>ʪx"`қҸ$|} ƭN"M`ѳ&hkX)hg}lC i:2hE4:XV:Si9ݗ6"fZ ^Ԣg2c bqD;T_EQ|AQlte.q&F#2hVMnؔx-pEڌ0Wݍ9QCUщ6 5% ?˨$گ(*&0wd^Q/c& 2c0w̦xf m?+!%mA XxQ,> \NzYL<g0~bH:@u]EFo#Jx T @ M޸3qr==X+Iirwt/,v%RݸidV. X/8E}.wsŰ5 LjЄ~dQe$j ;I)_iI28965ӓd%%bz38a,a<2C-hf-!6iD6ASΉ/u Km >L+3.rg-}_+j5vr Z!N*nPBİ׉ 87:Q0^ HmTQV,щks\f`AK:o./RPI2e5@+dAkTƮ|/)pJv >SQv׉E0QTN3FgSrβ]@JyobRhƹ.i2?lYR <wE6 B>VK,Ufba>d {3Xbݼ 7Cw/ã'r14ĝYX,#QS@g'ﻯG?5f*Hm;eГ& qɢZ7!hN( '2*(1Xʥ}?j؍ qT˘GbPJ3"bjk{ ?9XU>v!(3 ]ᶙZL]<)?|(VO.J$X`6NhQt|&M=q&O-JuS0-XppE XP]zE1QL : fN"2݁u8j[ъtY XץpaZP]M~5K]'QW uDO@xt9đ48+>Raf]㒆WB ԒJqn|8jb] ՐE+v9 fh.+-pЇt|k")&"z~9"-7jS?}&VAt-g9yƧ~(+`|ģn~ dF fw-l'6׽JPK\̚;l3dXkН*ȄtE ?e"P;kӎe^QEM\!t`2[өq`!ǰF(|nga$:յmӿ_4W h*]YtPau6^ErSxй# 3/. <O!%\:}??Xt 50Nm%QhN 핔CjTEkZ9H ]I9 :\G+.Iræ۹c #cY|-BfG~_QO6Bf-3nOCLqh VΜhL;MųG+A*+M˟^f|@xFG'akZgHCQIt{|IqIEš!`Req~84oh\#]0h]mcuHs(k  #b3(E ::$=vwYp/n@ޖUl~h[-NOl&.X:+dÑdo H# z_''̍í,C'|CSbS+p/jajl͟ H^# ?ʧ'eqDv:y/tf1aH|vdvvB8+W#K~?0 {ӭ!JwCОέ{ȊAe0 @F¹j7è2c#!Z bbљt<`x frD|k"@Y?p>j:.2Ie(םP'jp&m_Yκnhar)fL^2ƖL,F $:R Z6hjhk (Dꨍgmn*g-xkƛ;#5TM:Ivp3po,d02M/şzF7B^_W.VmJ k? B?9wSk7S=O@uu3ȶL%F_MI|I~ Il\'>7ao_)WlPlȾܛ13PgWP v%Lݳ5-?>6^l68|4w #2]0XN;Os5ʶ s(9/TW0p;`Pd YKRy,Δ##Yq38ܶlW|o@|܁f49 a=0JJ+<_|{ay~/;v%$4}ɛO "R*d1O X*lCw+72hn>m7QID7&%VH?cZDȼA˚ОU&`ՑUgNG+J5,8+.:< 1b"t3̲4bIc.; 9w.r;#koI6h~ 59qg *ESL ^$6<^AԕJhybALM?zKGXk' d٦-9U4:e=…sj2\("C1uÈATz EGNP%r)$V%ǘC\%(w R%EB'Vm39],XnJ)< J>V 1$-z=]I4qKZ8k{U:\~ h8O#H=,0&9ɳBv{Kx|lM'>ETuJpPbm:zx^ht)8k{I=xAUVڦ?69pyK\q@뜪Gzk}S+`^=@G'LΦ>`_lBX Nkwf_ ?_慥e>?@jJǚk58MZqpcJW̬x] Bf%?_Uddu<-G+KHr|aT.PFW n&IL)N5|"(ҮЀ^q\$°\5M5HsljV0{*Il [Խgv FHL&;-"6RYa=QqDP3OɁNjB,>{"yLuVRgpuA57*$ɇ 0-AᴬPML51l6`tiZ8NͲPij_5>Y'1H$ ywS  i[O~hƮt?G1Pw@S ٮB%n*!Q_b{w"#Hnk7~ePnT4Ep}=67fZ/&lKU LՖf"boYkj{#"vpJ໸d]\Ī6Zl,ue@CYx\-#wF}Чrm$gkӓQ'g eݑ[amu"tago;%SK(˅S82t13Gy܃J F~U6|,K@߽$@8Sh6fhAnR w~v*m[܏Gr,=dtt_/إ#n֫6@[{~&e glţatPdtXlS$HO#Ĭ>pS``<@ O/ $Ɗ5ޮڴxSPa!@ԡHjg {op٭aVl`3sNEX*-Od, )Wgu>=nJT ,N&X{A&Gj1Qj3Ro~B8gδ/AH]u^0Ku/B րCc7 ^uuNoT3= B9ï6#*7qDAxH.DuyoF~ =RO,W=W*YDϩ8w& ݊]AO"#l  W)‡ &(:H咂=h6Ѻ8qSz^ Nn>udǼ=}@=UH׹$ |Fpwˉ-#pL2,7)2Q fC:*<ﱑ+AHkL YG 'ma7]|֎[;8Y{s+eMV/q*s759o]"ee)"*7~kNHxoKHs­h1ld#;/NoYn ֖寎&eGLl-np^NePH7ؚ(*\*Jjcsn-D"~ܳ0I{/x]~ ؋+wi/EfT ;]jrbLӐ"MD3WoR=HrQݤg!o7tjl>bIe]ћq dc./BX |,=mo`R\y Lҷ>@ 2ldMmMY28`7:2430X6OaYH $(Nw!9w ԁ+0(׎tPA L6vsnT&C*DM3Vke<߫2:7yiG,sڔl2b+LC7HMaG5oxU^+5ݠG7a@kb zy;Ġi_i}lGapvߔ8 UI"n~&*5=Ř2E$XJJ|R8 ͼ P$cd鴼94L`SǹEdE{@c8Nݟr}$1?'QY?Aab?7"o76}ƱmO<ΠYCbozoLF{~튎U߳Sy[ D⤏("oBtX&KZ5vvxq 2爄^m03rhi>sբ<"-, zs Nހ=݀a@2!D3ti}a%Ͱ f-&,EN{M9%u8_K5$ą F'K󝁶5h:?!`(Zc; 1_m#R\Z%ܤ !Ѿ !rHamFQ˿7HPm=s̿f:RՆE ǘn:]buOo \$<=U4Ӽ&_XMKE/ 2RgU,(=W*JEn oo@:dنVfcFbߣ$2o^#iilRLDڤ)5wJIlո_\$'x'~ɡ̅,CQF-nnv`ZKt'F (kٳ]%Nȁ-3K͓`g+䳻ȓa}.fV}T뜌ucԄGw!`W\<5Cۊ.f{UfyCPr9&s+ȉwUecŇftz^"\>MhO;j]3!n˒o7 1.WD$(*lV;'Qfxl?]m{h=>rPdRK1Խx|f&5"Ku+kpaF2O9GtgpO I&ӘvmDO_1𡩗_rntRK/Bca4|9['yG=1H/pft `sqpֳq%;;'fs\4~zR ^NmiTO d]<(\n')aU6~JkPih+HhFj6|5QB97h )[33tblx~ 8}{_nް ^CMJLլJT*' hL`Bbg !ǣ ()3γi 9?zȩӅTG|F#+TGP,X *ģdLmxz_$VK~ЊTW֕18jES|XD1VOF3RS˜QM0ͳ/u؞묒wz_{o38G@13$%soZccS Gi Hs~)CRW=P79K 7 }]y'>1(⊶ܲI6$1j'pgW?vT0&9XkЧ]:B%ԍ^sHaͫ4{〓%Q㺱.B\m+|~!qǛq]u7z 6(&T)Ο.d i51 M+{n]ZUҐx䏌Zt'BV!!@.S ~6VYYHJ|\/Sf[O [K $kѡX`,N9e3ys2le=٨B³(eӟ*!;,(7ܑ6albcӽ9 P#ֲW$8x>)ShAY˽osU#zkI'ꗆu3V<ֿZ`PL,ÓTubnWZ{r\7p6]A8/Fg"h"E݆wzmw4Rӂ=bR5:JK)|osA<4PwL<]|l!;Q`[E\8\8Vī .dXS دN&$Dr |⼆Rf|U"n!9gl8R38td"rvВ~)>>Ez'>/ھGγU3fmĕ{wB ?Y승~f<<|-/lVpԡ03_xQ  z!>+Rm h-; IL(?V-r?.&wp|F;:MK7$W2f= Lz ?ɾ.bO k(ϟ{* zc "_)(s|_AG]k'*.NbDCs`SA ?ҸHW#nѤOޏuΔ=#bQȻ^?=-1"(*f %ohk 0>KL`._2c ,~ASf{O|_F5lL+TNr) ;ق wd'!"y:B85SXH Ƨ/mutu'*mJ4ԝ}m\{`UΞ"H mԬuB@WS+czU6w==μwMxCRN[&(/L4 Jr 0kdV(6 ?g]@al#qzԕ3 uX# EWU`p2հ=G*iLp7t= Ʉ@>|cey'~#=NHO] #Z-0<ȩA `1eMVT)XpmPkq "" Aoxpg)Qɽ\nט[(?0=fGny~PwI*"3`6X BdF~νOMX2P>s >6ވXytK4|) ;sP\PJwN~̜A62";ߘo2qrKENb~(lUWďwXm{VqLSOKKe͖m°-)Q z`sm7ADFԠEљ,V\н84sUli5,tKxWF3n\Z6ǻY:Ѐ`BxЭc HP$ D^>:cge(h.R'Y<5?ssaGx@3Co}lZ:ljNdq8C'EU,~@ ~=nݭ$4N#Pcgu޶kj {|_8 KҶ^ey%-NyFF3Ey|Ge]^+HȹƦ<+Cb,n[DpqKM+wjdwwBL)c <@| s@dP'>fCPTHM(p#_̕W㘜1CzְYW@Ecjeu&hƴ5zC/ؔ*YA)K?"qw\fJӛCe`xgf]D~;1<5Q6 9*3rM+0@wao!c>Pޫ2 1h]QhqǤYf vʉx~жSE9 SdkvҡN_KM(8њ/I]&FكrmτJǧj#vgxl)獱`y'Z|'{T*=0XUc[T<ڪ?c4fgW0+fz_mr &HDhȶ7v(rEʺ]cwp]+込`X_vLuwރf^<_i3+5u$$8cgN9ja,J|0TqXzS#]1d?*UP@zx)'閬CQkiѴ6|hZeVo|-A{6~e2K6nAkpE jvE̎F8aECPfmqwuaO1"NňɆ]Vp .v'9|ts_o494D[.>Ӣዖ˚ޙ5O9 <k~\nWԅK,6>R)6Ln{#S.*e~YۗW̤H0o4/|ĥ>p\7oiaiqyy;n5EI$?*ފ{DB(mrG5V!$_Wm~1Z"{xsUGGxA\C1rie޹ב1( ?@ c7yОԉ˫Q;o@O?+2ـ=Hqtq/ 3cFFT E,εfsh8JNB],[Dm敄8^UxjlTc2u(8//]pQF|RЉ[dži mTg_RDum u: TRURp{oK U$wO0J48I/䋚mi̎B{8([nϻrKQۼ% jEV,읐C){ 75P=`QgoգPTkҡ} RJ'%fv1{65!ABFՖTojdMHG:hYI{I4IwK)\oyZ>bQr+?/zCVSFA4=>8Fu0hK,~E9x>l|6M™/Ysޤ-D|G^:/-cmJe?b=+L y F+2K):g)|ۮ߀oMf1 3ꂌDs $qcϝL/PS5rEEWY8؇Bh4 !#ģ+6{ VB܂D3ۉdlL `F{~pdb5};-Vskm<= x`:uMT\9Uɹw1C.ɩr'_8?քxxtYkEdW6ÝZ\&8 ~UTpFf2'voQ<`C;U]fY>>ݠG%aJR"N*ˑX pFDlJWuɒcߗSt{Ub0#(bβa Er1d•eoFoKR^N^;KE &+~YpfC( 3t{p r@8 oWny#t>*KgH_@ +=esTO@j maw> H\6]Ҷ+i*lzQf1{x QٕDi6v&#d/q> '_ {j1| {o1xI9Xb@õ1~;lц~}|ǬUNb۽“fb]<;'_6픖e q2+Ê1,Ui0)3fp9XsA5j i.-B^=p5cV[ gO{k n;/skM|oFgmwWDb"*_~˳NZ:)!e ,lOH4:7n[j\zNdi5SD0/o>UfѬ*Bp/ZYRF0]mC$&m/5cf<|j7@.STx~eQɱUx4Dv#^&:ު8t0?؂h,ÀU hJ,h %ү|B@66͵})~䉠l']b:?Ҧw@ɶGy֧9{UsvxPq,] ^<0 SpqMGDģ7aݱf8 pkeyug[6+6e@ e "w| űìS Z8RHMLOe"` ;rJ=Mgxzt7[臘XP`:蓖K2ao7ۨ2I o-ڔzIzkYB[dqaˠRy!lUqqҀD[ 2O\=T, [4rp Y!dh[o|z؀5(8;HX_]8*U @hz{1oBmIk᠝s "XVFPSn >_;+nTIJzᥱ+q\E`\}p^ )N?N*}WRTҡw 's~1\ҾF l%Cz$vٌL,D^UO1T?о”?_[E5vu=I̧e%Ui9r/85.0).Lfመs"jJSdҊgAx°Y.vJ)\YnL#xtE(bߧ 3hjTO5)+|Ntý ~[`آI v ,?Vi%$ǸEe]⁼aywa"(,Hp+&&'o2R $%8T{fDcc;gDG;,1\ת㍃@-Tm^D:rQ]*8W] ^YyId:wDwD\ {B4R6e]R,UV^G`sQ ao4_s61elk^t [YEʭ&Xvma|7 s#f-V'FϯӺWW_;y$s1 Yh3A 38ׅwKF,.lE@toj3>58*+-Kl~l1l (UapںT-7Kn.{.=-;OP밵A]a{ƳA;r<2V_nO bHZ= ǶQҡ l##~ {XcX7pX?.Y /KRW*L+={Y\!`} K7+Җɮb\(m\AMeґM!DpW 6b%h|jfO:%\sbp%<&?9DO$K-~t2!Ce&f?5 1H ;U>׻e34Ox'|쿷Y5nYZY*SeUQ!-__ϭV 5zʾQHcp+h#Q UOu<˅(3Vo&ӱo0N-|V;hcþsjPI!IT&N_i$''{8~]2IX̻!)8VS|b?)Hk*O*=G3Hk# sD[ r6+)M 8;x×ֳcU5iaN1\dZ7-)-`)ZCx5}UsFx;Ky,ŭ.Q^=DKVuPcKR~lFTȣO`jJ`sHB7a1s@lŞю?w^9kqDn3ڟiH9/z5Wޖ%GnOWkKX(D'""ev!ٻ 4aGpܳg0iu`voVq=Kn]ؚhf[ Y}EɿdPR]̋8U3[wN*AYcVLTȋ3ce`Pu@Ϸ×=NFƊ)-E7m1dGMv5,Ib`V s3*r;rƆ{;.CSiI昔 u3+Z xS. Ygˆ-8ggY{2/()(=?.hیTAR #Kpd.a8ϋXT숎"Ш̡hpI /)vG3$5`y9~t&X/0\jo ޅs Xk4s)\~n-r0 q҂ޗ_lI`<s-v J.Ic3M#bMd߅vPvN"Z q'e Lu1i)dK䬑l6$+':SY7!w|-{.[;b4,A\w6Fs{c vP:[N+iԭ_|JV'ACPn7!70D^71?SGryzfQe$ҕl'" he=RDQVUdP>(޽:(MX dY(R`}15N,gi0$ sl_V<7jRy)mJ(WF2ַ=qJsU˨0gFpYE`&V1P`L!@pd=Nu\ 9r&ԡM:+*+/&1 .2BG;}t9$'} t{=Ϗe&$A 2n&]w6Tﵬ_JBOs]Aqd,p>UʌKon=!+J{ͣ۹lTlUG"B.K\n5$,^_VrbLJjM]8o_߽-TI!r$`D mUC 2ڐ ')/X|Fh Zgꑊg{ Y>Qև2'ܖ~f"H4t=A4H{4u9Ƴ#?\|{QO8<)Soּm%|ŏæ,/{6mQp2LNNo&SK}gQFEOiCrHc }DU]'L6h[Qz l;[ij߰0s@k XE71~(2q27;ASSYvR)LN=@x{LhK7<4N /ޞ@9VPc Fu_+ٓK#69WU8G虜Sx'(x/܅, B_2oZ30yϊ N^NP{bZf=ڝv4Z=e]~%hx[ LG!<;!~94c(azmФ), 4O#l\s^~ 9%^][VfS4PHTY={Ā}dW"?y)}Xq~S鄐TcM`W"P5W͹<{!K1`/`yCP=mцuTTvi4\,D1.=1o쑹#ce8RVpeE8\DӃVPHK[ plɭ¼k$.2 Fn·E^f4g㖝wsS$Fw}&̟QV}ŭ1~Mql1<"sCn̿FM'5ecLY[xi2eTT|3;o{Vxɀ>G}(S~~i{uY$oK$ YCQ"TvړuU߄h^S/;Π OD:'%oU;V+TnT? rV1H4!hrbCf~[#WĖ$$٤opʦ5rj?f=C&&6k6 e%4@hgVFQh2sNw{d&:&qD3j9.BW3sRe oI!Es]Wd@1K?3F%Qlmrh% !40@f,|3*&ly8WTdpD`A3"ɵqL@!h۔맿V dE4^+LlO@dgG꘷ǁE▗]4y9u|~Ί.O9Q93l95]MFQ=#ȉ ~~"*P. ˁ|sAL㵁v,@w*,GECwN!8E<<2ʡ3ijZ؇;b4RF.K֜ {USkƅw<"8=َ3qxRӴְƝ'Lb%DFNlÕPSj\ES!JeCBI m1| !u8pAާ:b+ \;1;Lz'ihq׻™A.f"Q6B Dܗ\ /7tzQQw].;yA `w3}E0a[d q8D=Ѩ̑\G~ w:HR GfڪEkArb0.sl/Z̀@6L`{x=9!eƁԠXU3"U+0P>Ȅ!$@g5fPb EѬ o&#Œ+F;ׇLPAfI<[ݦ1rm²0p"SQQT. 鷄+=OV$lU< 9_!VPf&hf *~^ôZBW.WA=+ˋb7p5w_u~KXqOhiNGٰ|V6oޫ i*(8xL/=bg_^ W(dk=]TPSeo1gmP.؆l$,̸Ƭbfh"gF0φJ^;,m臎@;4M\2 )Nlr!w *g[9)0ᆝV%%]5-s>Q]l\ {{ݒs"cb*P-YgLʢLrmoЊ?Ak'z"c4I5mzzn'|ءP΅t}nb zy`FG[Vw,iCI<:L;5hh}:[od JЦ2h,L~y(ÐleMm䀳EAK-[R,h{=H@/-brE[kb pG8ht c\1i`[ɷ?&=tJmYsaGRa:S\},{>*#ښwi%[_Kq-X#h߼2>As3Zny`AL\sEl6JT최 W\}n{hqa̸b m#lP1bu}*GE:mhW"[Dc*/ǫ1M~t>"i J̢nQFsth{O;7| d'^ӆ¿INPC!̆I$tZz@}t޺w6r)g`'LuZ]L.CӠbd93 L:ĭ|OFS0aJ87@f,ja!q8~BdQv`]){69f\Oƒ^  UxR0q.ї9'i`^h$~TH͕d{c}j: 4@+<|sS%^>z#cDҝVK%N#v`]z)c7vYJIuȄGؚCaqx '$ٛBNEq9k{JVF-ڎٱ)ΠT8 .Q8ُ@ &URdk>(B귝=if7}>"dRP QICpxM koXsp uG=Hb P_^M&d>(LnT)>!?Pe׎l~ d7γ)"Q:fic@;z~Q 6!_iT-T"օEMӷoҾnSڼX;*SJ"T,!BɱB [B~?e$*@BchMcff͡q97C##`T3 Q0l`G{Tg6N;`_X #Nٟn-3O._'؟KYvd:w^| 0#U6#ct2ҍ KP,ͧ{vs>/?8mPp%d#:*rx&Gv1dP`3HbtF|` ?@ur! b0C>UBNlu\ۃ ;<u2 BOd?܂NmY1T^`,FCD,)!!#a@I W9}inXC0ބ Gt 9-i_$(ec1 l2 ܾ&~a4x/=lmGUS\D#=#=2G!3ҁkzٸ\A{֭fr `ӎ#&v0'-N9l,#I,^v;AiNQq=< WOcFgz*jbDb==#?#!I nAWB1ϐu#_J0n"%oKbP{$JkO37f)msinhje,v됤eQU(9eTʾON+qMw`9(d \f*i@2/?g-3i5mE7 Sghz,SP_LfQdDX0OZ=@V>y~r )wSgs` ociSg4KҌOPqxLDMa \v/ N¶ngONr.p <UgZ(Z\qEIiiC;A2SjBgmr%ݹE21&O;*|잆?M}wJ*6g":,ڝ9IU))ZD't1n-9# CF2f-p=n \#9TG@N(!դ,UrʋR:CPےDF JQAB{, GP\vѧk3繛~; uM`Qɖܗ8&ݘrQ7 +z}MR&qoz0ՓXQ^(lۇ,=58pgR_ƿ0|waB[e4\ǫo ߟ5#DB)*x9q8d-*7?ExZoDxbs]q$k0ǯdJijCWLBʣ$7BIߋ b-ӯxXuÃțL+3iQ?X_׮էa6V-3=XQy&hݳ2RErH)|Ē π-(x|}569=s8# E6Q'XeVν WiO%"fXU}IKMBRYiYCM2X#tUU̇L &=@ľ0B%P{4P0{1 O .kKDlE?pFw f8:4RnՑ~g*o&["g0NMAyaBX 槡04(u %QCp=spefstm~jp$3o0T-~Ж$px?֒M [e\.q٤:>:/rR J̮!"7YenV| .QòƪK:R7 {_#Rz0cNZ?uF9G;noXyhZI s(B\ܓj5D :iBXAډ B ٬=hHJhۏ07 ȕQ^%:`qyfX"/LI֐b ˋN?U =҄JnH&7~wV/9wd#*}}tm*Rlv4ijGxd'eCI;C ND6(b`t A [X-fPl&Jrѻr .)}ALi1ї~3m&K&\M448ϥ|o=DȇEqRln(]pnh\ыIȸK*$f@Vr IE A(hoYH(oH8RpZazy_'axbPNWIu[@L'NcBc|93N±XR  B_iL+zn I @ aBZ$6 &C]2:F[#Hr`Ԡ9L`^e)d˯jO4EIPIs,X}F{drc HhW;,`Mא?թPÍp9#viğd>#p>h!r*3%eE'IAlRQCRȩb`;,ap/ qP} "k3vpnF]fjzl4OEgNڝY߁>9_D]{)pG9[tsߪ_̛s\@w{޷qxU{417MVawOmt"!<9,{$IF- ! K%ӢM4T'\lRpu$^رȖ`+pЧ9DW"h=xH^6i5qTXj(lނz8/ƵW>k? gw&lG_tLسpȺV=pi*_rѓ䭣3W4,kt,2~#BjL[ETi7y*:;4JevRc1;ElV ut7h}(+Cy}LBZ2,r{S09iT4g-v. 3Ϩ)MdYƱ4ֺ) 8'uDk(;3lQgsűp1^-_ʵL0Cf.P㙤K=Mr$mR7q*lQGt}ڧ -~KV7vĝijp`p9|hF+n-eb53Ar1þgm*ʤDnNY+"/Z ̮/m*3Q]k UKIi`ACHPd1 FmXb;p kF C^jCio_JFB?x F2*]1>~%BN ٩OST))tLxYZH؊HGb1d3Ho*z(O}^6S|ۂbՑn]Nd 폫'4"<@{Xw1/x.dA^ΈD MY$[gW !ڣn 1~Ӷ"+w ㅿ^>+7LP8Y?z0_K]$I% D:Gz2uOÛ+'R*m;Z W,[iJaWCSTr}_т".G ^)^[,VeѴzZ?j`ۣɉDkUsܡ`0M ]*3^>DHt^1d&`Šp-S8ÕO?Ūo7Z~폭Xp@w 3QbmM۟]^{e$:ܢ;"JTL^ “s)3j95+ЕDVB&)x"3t%*ģKypّu6N`:fkeDǹjxnYް'VM1PcF $tG,XXfk +N}c{` IžfFqAkSdX2Gh#+gFrhIvQG5kv]O o-kdȐhqê@}S 7.(R_q QN{0#StlU7q=! \T^+s~#fk-o݆DdMHjda0~1·ܖ0HELJK%ٗ_, aj)ŁT|6Od:2oh)<,N`%x^Òt6(jTm^uZ/x=(O.-Du /uj7QESE/cN73N@~򳜄5T {ddž0h!rET0eNIͳ0^lz`>&/#ssD}37 !|cEyEi"gn)kS%(wR:Mv;ۭ )A .a{O1a;hEԝc--}+-܏&,+Ai[5/Lp(buCV%Os zI;`؇;Đ8Dv|iUĤn3[ͲɷĴ06?*a]5Lӣ'@Y賛TZ?nGgE% kF &-KYgdwڜB IoyJ ȟ<<`A'j/(Ss7Z6#o67-'"{ZJc( Dh{ǻ)8c%0GGv}sǼ>u=c] nQ\RM#9xnuus~/A"p(9-ksmϸ\y"e;.i.*nLgV#Ƞ>}o0:4DmJ~SM߇,0ܥo%թ3ZtqHщ} f('qrP/LK;jzkNj>vE1CE.ԋr]B6BTb &fxΞam/Ld^ ;9[R?FVKkG)QYīV1dۦM^,ր)x>r.S,JВՑ$=[mCΡ1':mpW3WSk壽+tV#M8SR S .@nP5Ƨ+&_Tk\k0.B80ƞt_ك(;"WpeI6Qq"DUƌ">xrl\-^BRN(p e'k[+(sʿ- ׃g]݋ՙz4Uޖsjۼ>l- So3߃,6b'2|̙Lom5 ja[rŔ8>S8(2[*FV 3!FHճUyO_~T"¯e,W}==HZ~2oj>ͷ{^%œ*xȯ#>BxoyCaМ '=%Č82!%VLP=vQAAW-0{ղK+ +_‡f1ac/ dbLB .M`BqX4r8f΁o`3+`?JW*i&$! JbHzOp|R%P.=G$)64NffN4aݲҐM#!J>K fDumuFrbE[] CE&y8j##كȲja݊",q9X{~H.CB,4Q.~Ƚɸ[V <P?jDeYBSg,P "CqCdo̺HFP:.wL9VIѺuSK2}/U] y*՝ꉫb+R\OْЏG@6[ibd;oWcۀzNp"0d`@jȇ=jvC:HO T~I!jC"Gy/k#F$2(G#2Hg7ߵ3I!^kTM2.!\F++zr/S'եlLJGM>lZ{kr,DVfѿN&g/r3(4rIJD:Ԭm0@;.cɀfd]Dt΋ "wڅ`pg:D6X^ӿgveV[0W OW&72dvٮG^ J14YV! *˻D(75/ JNQ\dyUSP7"?C.B=+u!p6O 5wRsA] ʤ2_8Lx}.-; biA+Wc|lĒ駃B٢4>_o^\A3k>i^"^@F[t!de~2 e2?x[?S@z㞓>cd1Sw?ᜂy¢4Yp2^{\*r1iT䐕~ 6r}.򀑃z/ Z{aPG,bGP&zƃAƉ2v=;ᅈ(A?bm#o>M?V7) hT | tKlGxU qm bRZtBMd GByk&MP`xvsl-\5vJ9v-jJh72Ǣ6Yax2.Zk2ӢY4)&Ŕv3c~Yֲ8:I֘2Tfi^GҖ1xt,< VmIG6r*uM iB!A2]W E0x'UE!Wnd2vpo>YV:^;+'{yL6Sf(}p''B'wSF|/x:Y..#fZXAJڄ{lt@ܹ%ugJ]l?E2[J܎)NQOIVXQmU?ۆ>8Q+ff|`*`zjrg\Ї۹.!o¨!'ßB,kޑhCCT{*g'ngWu&<:dݒel$͙@z%ʀF sM%.,KZ'v1*GfVcң/CF`l0U:P߼צ`^(Y9MW ?ԻV B7`!< ʔѱRM5ZQIG٤ Ufr.a lH]FVK?,+jGjY^j1ME8VA/{vHi6PS_g>}uMCel?fuWGSQ1ZUC"h3_Ԕ ]NV'?]{6 D( U%nDb]dE/AǾv5FlVQޭXPK\(Ki4FxGv$%*RB?'@@Aʶdô`5_kM;*z2 G%R*f C5+WU'iQ釭KACX$2W2. ]wa?XTi4еA| O XyeWg@|`Ӥ[GkhSy$9屄A aUg…<#3"С778z%xevKn-N@!&qd!ROhl8@(6]m@~V `baj$᧑JxbR<7# $ֆΰg0H86E.' %\GޙsP[״|ٜLCf`n&cN 2* !Xj@+Py6O`<Pbu{3ե3Jtw?_|8}K; s\GK# )C/Ut! 04oWPf02Y>[?}&D; CL)L|W<+s TD#+i0=.Y., S~-y#3 IU( }J o6^+j}AYn3PA= }9M{7 J(Y#S1&S~ۙr2#!(fFz ?TŦ`:Qꧽ@~)e#]eūP2 ߟV[] :gNB'焊3aSUCĐLpʩFf;ZHP%r˯ ٟPzRΚvST^7%.}sI TS4ݛpgtB\#ۛQq}}XyZB"t&E }0|ZTgvd1n=?ܤZ(<8Q֮דRtOƔsE~ r 4 ɖ_Zg;-S _"ɇ L r9j|pwNJ|b+Uy}ַeܛނ<݊|${1pFs(Gj j^윃2Ypk`Eh3zb7u'j*;VTZqI1A:9~ؽNLQFq"bk:zʕ,a2$UXPZ"Cx_Ԏ4T^;ES[[άJ%FLO{:3`kBOۊ)#x YHZGh?*nnwI\{r_<އAima*(ńy:DUyS2m-jWU᠅4CJ% ;WΡ;FWm8%sF UO8t٨Z6'|ـ_$ ):Yy%CGIH-o8`H 5;sI"_NMUKNriu'},'-.⹱ Q7weZsÃ7ߧPX.ce49#\MEN*l-`>XG„YFNZ`rL*XKRzi^IXZHzrt^Puuß:r10r+2HaQ+VҘmx*> Z_WTͻ;n2$ tO6TpA& fpF !,w WopkjJ1{lj|!Je]jVܻw! >BRcn1ƁͽFLg;[;3k# ػ$gnj.g(bJ}X=O%c霩VzVRGZٯ j9tңdM<6YSHvQN.yP!6;b /JCKf~ m!Ivrwf݀e Z!6Ak3crjBW01dB>FFFfXLqFKH_l>UCqw]>]5ǁzhq0 m3BEh{yĞLܱ'$X0T1^8,!L诒7VU\M%#KH0›#FԏjMU1.7èPd{Geݖ8C1<~q1RyŴsW[{Ƀs[*ˇ:; 1y?2w2 [sooh /T*Sۧ)\_ obzO&_%s+G_?b|YƊFvo2|VOʥQթ h\u{XA,7@!iOLXlot/4岱M)PcY)e?rCeuV,NJ[}vTmsO6ap{0W4O7Vn^զyP{_H|Z@gtB5r)~B|l"\^жr" 97A[HspUZڝeDAv"  0XpC RhOg}(y^RWl9p<!Lr%R_Βpbݛؘ5"5fE~7Hx"BP2m5Ȕ?[\RX c;S\GW#F *hAkc7fE+~]^/ۑg eWUò膒-yji//XSS7{ F4-eD<`w|pp td8:?mեԛoW j0yйޡ쭧*gڝQ CB8+|Wa cǤ qyp1~#׭$B3d JQ: VOEшiP!3f,\wTA[2fڎO{EǵΎi<Ӣ͚8}ٸ#}xNI|2")IW6<k>w,2 hp=dzj l߿:>anh78c.gtY;v=.ZDxt1>[G7,8] [C1~q:i{K3OjLo$ٞD0m讫3GW'8GJWtڼ@U?L8YdVx`jaTζpe`ߴݤTPn:u27&1nvbys?mSF)Cc$3?6շ~&g[+o.g<={ S3bqaQjǐ;'jrflR.ͻE7=K | IsNCܝ@Շ es?g̜!3dw6Q,d*b:`;$ N6#lTIM9ޣ zUԏMnX`+ҳ>LݐΧQ)B[]p8*Scl/ ;{gRhU @m̃b=a?obO kAWm8mqR]/W΃beP)-JOiHl>-Ȝ.0WGK8_g BIUlOeژ\wfB9{X]o]7GoW5Ak1&@ FTq%IhX#}Q%DC^ir ZywY_.hȭ! '"~6Z1&*Z# zX]c{:Nx}[kz5+y} PlSSԒ%#,P%ޑVދMiFaO%+8ð3ZyHn3YQ }l hAٹ:53$LJ*)Sy'Q!+WZ:/rԔ ]Dg;σUpT4COp1z>PO_p)vؾE~?Bz}94 |WKEdp'<:Ҷ"nQ{qvfd=*mdgY,H`UL_V4eot(^.^ hxqIºQ#P5p,႓n2f irwp+JCΈKO"Cs$ZێIźsqAb4%GȑJƎ̍k#B#poO\puBG vievf|vԪeNYCElsdoHhQ`WTNC(oJc|Urc0n0Pr`rWC,qgt|NX.r;;5cz"k/-1ݞ,r# @)67&q~tGB 0) -}PЂ^$|PWhiv+PER\i݋2fCqci, M8- Oɦv3S`@XH\y JM(?JZOȾx%a:9u4?H pt9?".86Ւζ8eLR` (eV^KFTms NgHzg;ɇ׷pM}°4n0I8"qֲk,L @da~9M̔ma멠ep_6EVŠw 3A+r.Pa E%uÉwI%`lp>t[%1o ]:|1$x@c&ʤP,]cz> Ǔb5xGsؿ{+k /W)2 NN#'Sǐ7%XnP2/BY@pJԋKb2cϲJ۹拥107m$X҆ # [@7_wB! 2cEc>iӞOغyph޹^Ywڃ\Zdzma" # arhCo*'cϤIENؖ2sFvAppyJN( s1L[}qj_mL4"_|]No"z{"?C)v\pnu蒡 BP?/y5fixT f>6ҤuaU)drΤr*/#H:վ2}FkGv|W3 ޵T  RtSzc rhA1冞Ƈ[-\Qy~W9ǾWpp~ˈë1#R|f{`N8[G#[u':6 8=s <6ndJLX\lc3 Tel4o!=lY[oVG﨏beDaYhBc奇f!B&ԜɠƇLZ;kj9fD9E pt ^㠺!֕E84%DRJ1UO]f.C9!kz^pO$`AqЧ׏uïbH_Ey{ryUf̆ ]NtVPX0R RJpYvHg-'W;Wq2 M+F &>O9 3t(k8 V#&L|D1ttn䊦l[:/c]C 7ZP' [Yy~ncQXϤ6/uGӱ|bw1j%ǞRh_rw0&n!)Лos4͍ אָթ ~m?dC]yҪ7}^.mu6QM{jl %8 -N(vW%Dw-_>p|Ƽ46ل {Sϛsؼz|u]TMk__Jpo 3K{0DGF jKo/4yDRק"/v7ouO]._O7)?!gK lՔ&**D~^Ԋ?Q;a&:z౔s8ȴ8\O N%]U$Gz2TD! 4=;QVF2J = 3Ի{\#4OLc8ht}! z(J!D1, a'}|KGkҽ,DySNmxgkEyPr]h1&Z%!jLu&fOS\џT(İ*%(t_3?,WӄQMA&_AveÒ<݂dZLP'̗PM%"Mba5/973$л\=j,* _0 {! FQd tGM^jD (8wĀ*d][4o=+K|Lo!4Pɝ4:,hS WM$jK:Fq͢- i+3>qM}!mM||rpف)3;.GD| r2 ‚m=!?v8-?r6_rYxJHT,ھxfM+x '%0* ͙*^}d)Dl;DUdd2*9 qjG\I h(4 ,&{֢܇a9ؕP4-͡YKp7} DPϱD t;"f<96y)7*F9mvy11sF2bǂ̬!{;9!aef,݁n>#'鰼Nák(Iӕ6(Zon~" Q^E~rħsEM6 &~KuBCV΋LiT?Xe]H5GM2r`ZFp>Rgg郵 )8ųVan7}_M;Nbb Z4eZ9بfw 1LіCQIahm,R)SzCD {*:1MEra҇D.ʇ\- 9d[@BXփz2SkRxv`S91E!3epxd$|7p gRSvT -y>9&~t݆<$pySHB閉F Wb75VIVl&)v7?U YV㣪lշxbQ )J\̙' <50VNs¼.T@pţUF͂Ez>:[`ۦOVxn]o#6*X;Z2ӒEmX: o.<뎧 N,Y L_0} ! ;3')l۷Z9$or$wTkFp:~t"ohgz^A< Dž^,]]fK;K^o'n)ΠΡDzKSN{ݽՇ?tvyk/>V=jіFF2^J Lܞi֙^$촿3i:%Xi38Hrc2:ADʾ~@֞`#m3V\O U1%C."o[V+:~ t":RH7dԋ։AK: o|*bg4H֡%;k<2&ğ{IU!֪FYFXP÷ /\V,!}?BkbQ"rGOPKv+g|[ (z@~hB>*Mp{ jǤWG"kU@ c&ʛРTf"A\mU0!Rw]np}2c-lZhEKϗf16ms1HeD:-Z;.4rei2x!]gd 34e !+Z?*6ΐ &3,0U}vTN$&,NuSֆ]ƌlO}xK[E{sQ('JIt1?L$Vfw{K7od$oU9cЌ"Ыi"e߾[ N+$&$pa^@Q 킠?>uyR,] _ʻ%د^t!TG_pwP~BƜP KA,`Sղ` =f+ݐbէ wrEDXr8@Q4D .lߖù}v2?S>Q“*HdPū9fQ|rٱ@.Z~n6Ӎ)bpBоbn&Ê Z>/3wLVf`ܵF/ &IAŁҦ>G eG~0:Q=?9epߨ,41Ϳ9'᝚}$e`;Mg7(AaIs@Hل  eUoE8؈M nR-F\j0TóN9jT.EQJ<Ȝ %9R2R@5֙*@L~cBk! _V<`B 篔1B`iˆ|Kc X[}*X\Q)A 1Jt@+a8r|1,74`Uf9Żu9.yс@{I\sLKu֢Ihf>Q )t$}95:ye=Db{||$T{/5N,zN0#ӱ=XP^82fXgKKsEZ+uL <C#~ ^VێGhm"_~ M)xD ?ϯBh_ 3t /YAф5ס^*RE%0{VBE<-M\ Z۲f(#VZн5(E{:k kjNV=Z%kY2#n,y mvQu;cm$ ӝ\Y=L:ρ^:ͽ: u0qȮn!,˃rV{qF4w[r81T“G|czytF&NXZKP]`.>g76bcXOYf,VgI*9(܇̋tErc>ų{'0.3aS8Ŷ].+|C5kqfBhII[c$ek*PBsA3D,Fvz|\E@Nm) ?F 7/>LSUXޟ6 %CR;u@+9Zt LR`|,e2%L8u:^e!ZD^.OG9 BώL;[g䫎hk:EkOf!z-@L$E iF|v>fG'{1"_.g' iںU$</g4EϠm[*/m63ډOFô##dVWt_ʻ9gZ'Lq"^JJN\mGh$꜆ډeQii!Fm+3"^}QIkH\fQg팔 9uhT#9gمzDKkA"(=$e@e>S2:ewo[HMǿP Be$I9/\n͂WOV*7MR} iņyhKUpAkZSֲIiVclPHy5M0(nr$kքaI7쿧!o0w%%߬q9A p:7%~~Ixm} +.hŴ?r=xr./*Q6Kz8N P%D5ƨb .VjX ?&҅O' kJ;6\[f4}Pa8VS_'iYs?J=:Rjo,O>Q`BljN9}WOqj17\ /Rwe|p̹4Zٷq'7i4AaGV<& NKmU_603Xdv ֲq*7rW+Vl}64$5*{GTf'5KyRn X,o0*6 qSe? 7=UBzz :FTyh_侘I!D𘛑}_o8?rgӊ,Z;Q(EZaʺkCHj4h96Rg`Hm' O}y& ɕ=HHyi*5_[C'D a+IU{ \Ǒݵ\NWIuzIY^aʼ1R4:+VG'0#AM /w|s r?iViʢ|^mCEGׄS:ϼ_g^ƪHҲQL@cZ%ed _(f;BM]qu20TH\|m)c6a^NkJrPΛK/Wυ/żGvS]fKH4't~(vHr1_qƇݎ ƈP浱bG ʼ!bG 3Z!7oW6k|wh&KDžXGJqT}|>qnNףW` ƒm nY9K=b9/GCmcQ2a}ޅ6 $vB!a=M2i5E4IvkQ XݪzVu7q !! ճtʼgOF}=n /Eu+Qt KİC,Fb?g`Ê)ߏ9ܤ'Embzw#k]Z =ߟ8(Cʗ{ Tu+#lDǟªrg?/uŸG1PSf KUZ(GBXuM@_uiY[Ќ` b|/f9/gDMCZ)eJy~L%)FÄй^&@ӥVÎ_lfIpZD[Vu1@=r?00yiNTRTzVt$W$@o8A'_Ά3bL=n?F4p΄;^!sh-GLE -)b#duj%[̤ 'd7gA4 Zd DĽbh H04moavɃ61 D;HOÑ+Ǜa{P&%̝B ęTwyT3{^&9+3T2CeL7;)€Ȫ`u+ɜu<3$PR.6D Hwڽw5>3Iyx<8p{f*-}mGݡQM&161$ȏrWҸ̙ 9qٌ8"a9Tچtbr_rä$I(\ B 5_HSb_U{y3(TdUgy `wc2xZsxVЬXu XvgYj%_iX=6*J%g)wt%ծP(wS2uپNH]2TNuZN5ݍeIIoeį52 2r1I >AT oQǃY6eQf?&8w>0(||^LɨXr!;Pb`ٮx9Ч V6T jAQ``2{UChwڧpDʠ(ߪٞ ~S(ɩc%nq̀9CY8ZxCd^z[rbݢ/xoCA"a%\>IriE6C-5f HRb^݌ ‰(FKQE ŁR+ӀO2>K(nԠKKd &1ք&HeKՃa<@=/s,Sˆ<&P՗BÌzjR|XƎJ{J9)= -9*mRj,5jt8y[HǝY-5p˟tl"^YeMwI(5)-;%ϖx#l>Csv = ʏEEe/zT~P0Yd{_{/RN-K ;cr;dᶣHN>iN'*w;/o׶P !Ykgkf'EEEbM x jpj6؏k+G(ƗKE|I[gӌpM +AAVМ 'Pnw}CeEg[ɡfGXKIAP}P_Ÿ̮WD.>yф` L0 HfH:8Mhσޚ~S2vpb"V=G}30` #QvPcu&uE*c'[db2jPݤ908c/f8 z[h싴q63Oe["8FIdJ*P]9J\靐GDY3vP{B*A3~[&'xqM^7Yɪⵑc^٠xEIv|)~SХPt@xt>+Lmڶ4d 6t5D NcǾG$'GJQ _;p%S18Tz41V2;wPPuBl-<OUa%ppPز>(Pf<Jɥ$tT(ߘBFA' v*^X~axKMf&`*.ũsvDw-B~XZTɼw\(tpTݐx:Fqbj8E.O~v %99^[w , 4KKW%A6Fթ$zը#Gj3|[J D2ċFV 2ho Vn@d_G;ej:>9;‘ˍMБd8lԽ1B"57Ԡirȗh;~`)2eH'1]n^0$2C06? 0ah⽰O.L& 3D`xB]E6힢%IHY>d^fP-Ϟ(|UiwQP/t zu8Bqփ1l`㔼%r\?HZii{Ī+al#O)rNTڔ8vDG4Ce0 FΖ#릻D Ǒ,8T<~E2 l/`*?E,+KB13 wNj45Lt2Ö(e>pbKBFuΛV]ZpK]QTTtpV#=}~*޳k)iD?x\چ}ϠF Č[5C\OAX A$h2N _BABMq%hl %̿svǨrS`Pc}f,LGW HώV4#lE;(+lӎH^ߨ%2F*bY24cg~]ޭ1J\*FWbUHq1pNK,YPH*s™NիUtr֟EҵwCTY= fG#e/3!N(h4o\;%? :+LyoutEֆr"A;c+Bs LT P$?/٬D/C5n$ͷv10G:].}H+=M(<} (NDCrQYC604lĿ|-ňRl/߾ĵcN"[ kgǂM3SsGop0ES*k'lò%캊8Q6T~q8tFIָӌڛ>ׇgG771NcI4vM@cѣu V"r*"T[pkMQt,0jD ksRaMdg0ki ^{Lys Lpsk4Y{ m{"N3,01AɲF$%%xX \f!N\(@>,fj2qS}[ y{~_3V5]N/3Lv]cz)VXzB̔qsso^v˚o ;M˥x'9F(ݺĕPE}Bpk1:̂o6vsC:xgE=X\X;Ch p뙮:4sN0F-m)86wɪ㖡~G٤P[`ឃ 82ߋ-gtRB1<5=+Qڧ#u.4"Ol݃yňlX$~gP@g]Dam2{ ~I| ~LfB yYpk)uuF|$6L<+'-tm[߿5G(¦(!J,ԮtF wSI϶|xmt&$y٦d+ЕZu(2UԶ3i+M JGGboHy#ܯv 2v ښx z[G lSod$} wA% 1&AwŸT4T'Q0>Ĥm.%Ͼdo+vl[J{iVd})oR=)o8=W?E$uwUPYT;J*YUy8Ljvw-lyԋV" HϷb7̭@a}/@4C@ wNʇJ ~~;+H[ҮL, oaSْc40,NHǚy̜ꇿtH;hJ-he 1N>CYĕs!Z7gʸ㰫"?yIʧʨ1F Qc>\ +T!m^ݏ.ѰDl2Qtƒ0Kؘa@V)%Jefm芁Q*'tAn->#^Iǒ)YZ(P`UpŪTc [C$A@Oϴ]A{AxOSZV=aiNݭ~JcU53qS:[K-F] S #- V^mLj !0!sq}[ۋĔZVRgJܧc9y~ ^#ZJ]61qzXV'_D-y:Ij!J/j[)*=Zr)#qk} w lq􄍦3sXmm{UdshT[Ʃՠm2R81wIlZXlevB36]'k\/> t_ s>DqȤj]+T&rb57 |ZÜH:m`Ԥkq#k2gd|m|*e=]:5v8F|bZ]q[bkXGCAVCj/*O tRѪRl]q򮾽w;ozYiTTmҽ*0V7&VoG}6a?Prf̥{9ia2v ۷Yr$CL{p48,:ϬCk]g Ҝ?k.6) vlȕfR*<g1 |# ~I\̠܂ln;!:|B 0-廙H70f[_Z]&xۃP5,J!?OߙkA?Q¾F6ЊJGJ?x3rADVDUYBmb7J ̦]!8?ѺgEަ6Jcԓ8p%XzpkՔw _EɉZwCK|xUn ˨ӽMp Bax;&2XB WZ-H|sl /GbZnį~7<]嶿 8BDDp j ;I^h¶P,PFq*=V!XGL4!6% %Uߐǃ?NpmQM )MGGoƈO/VI#Ls/:^NO fn}I3ڥCIH1lǰTβqٛ{8VhVƂߘu$\f<0'x?[e _Sl aW[J*=UF0ґ\::= 1et9ЎTWG#g-"}P \`zHk]s;3ؠS[JPCIM: ,bZ"Yooj1S{˳xȱ: lD$ۮZe(JD =`Ԇ{cιj,Lmztf3zWh%oxAsq{)b /„|6](Yq ~H\x9Ԑu6ft>4ږvC  2J,Ꞹ>Zqpط zeڢ(g6nA{t| -PW/ikb"פFGS!WKTlV2!{ 9PϤjA_QӀl .GI;J9`&d}}X{8"R!.s tmMqϑ ߒs@kto$EEZ ܚ>U!LIȉmVuVj l\Sp:f60(*."V֢0S^zFj")h C#w}|֟|}~2!?_|?%YWAPFd,o)/]V౬ٙ(8JU]Aү Kh*a=i-mnն K͙ytݷ@͈秌w{L#RѾmp\>cZQ(T(֡3Yla◴NU9DtlnƇb!:dַF{ێ kr4[KM 3Ŏ~o^:Bk}I~lg; hO!,5G8|5U[JFIV>j9a.O)& MGW(_.)ó$l g%! ၃Xx5]c''?V7G5"0ro\60S1UֽSŨ.2jȪ՜~⼻D}Vao[ʂ<"F-t7څKTD;XlL;7Luy0c%1n9 .fq$|gVmmWT9-xR2!MìCi*sމlXC8ð f"ͫMu]8!b a4:% k 8/dRI_edr:V}- ZblۗHv%vYb,u5jSr+7Ѝ:'ş<tQkjcs^=$>;ދɋo |t;(:E9.wѥ0FJm:;}&)Ҟ!Ő ٿD~Է]Wzh 2HeuepePwEIlntGv* LJTҤ'o,^@׭%R2`*(38mIu/dVP;ɲ Fx)$j=A{t'\>|\Ks "RW~#b& 'y`͍PxiM}E:?4I?! Z=5sӊНȴܔ$mwBZp l #G4&<:?Xs!hAtyk||&nRzNN۔o0pR-G hۓ(#6Ti*Ϡ$:i1w>`o m dkT"û6G s>@JkJsʹn #y~^mR À5 /'XR:6rpKj0>$MXJl8T%&.W9W]CոdY^67鲈_eKzaUoNn:dIH!Að@QgcUʚ2Gl BO"}RBq7Q,I2QOmdU[L߭=fGQ]tNkE%!ckN<:>>3{֍,#HPփw هXMć?kTGeݪa\%cwWC,.I7~o(֟&{~apj BS_iΗ4:?kT^Q#\8ԽkK|Yn @s%vy-r? T \VH7dx؁faZm%Za~*6;>R1"j:~K, Q("!d^~ѣƬ6P-Si(jy>;A~Η8S fBlN48fR&[g/=OQnWQR \UMDOA z7Uvv5u Gs=xkޅpH=1&`/xV5ܐЍT QȍE\9uj@:A#;1fGmZaYO`r,=W<-G 8l zRQ\jLRx c2;C'UR MiKXDIjܚƈZ8ɿ1w4=]bz1> =-]AVsAZai/s訔a hOܐ J*N[@d qwo-Z GOY5iCĥ!ɬ7HG̨'>%oK*v\J HX:obZN=$Թ;9U> @FPuCkGMV)zg5|v&ڠx,ݪƪ-g7:ht攬ޏ"4]_~Vot pV+,{bcL7c8T'IidlYQ=|_ XѲ(Al*(0a&j 餳hBǗT\ dnvt^rxhz5}ȅKPcNľ,c^hpl[9|?OtIL۞i6Y+feyRT GVktPTY QgE/,rL/Y@#n i-Dz>̒reO_X H{(؁>w[Kʶޓ#oH W\vUOYiZrd?kcefBfz @!Fa-՞rȟ~f1<ӥH j-*Bay'} hBS hL-?c{҈3W] BDEA2^iDQ^dRt;ro{=4N3F{2Ξ=cf9`HWd"IE,6rGG%}hE94YR̛ MUr?? P2;P 1QQ1U:?IܧlI`Py=!\3-dngk6[E /j@Y}}Cъ f-WRo[4Kyh?ÕK ^nnyç(AL-%"Aӏ4,^MGe.3c~㖛dOydXT,vⱫ>eYޜZqyb,狰5;?7uC'<`Cb>9O$=h74P/ J%i3&亣+l1~Fh:#KɌvJfwlwd).&:9WMiYO_KQTܧrGL0lLw7&Q˔ď(/,JPQ3(l'vV7J@=P/Y5t~S{1.L*4zC@JÒkBwؕ֨c*4!UҚv:%'E;Q酯JeJ8xOvC V#jGB8h L)J!dIpRw"d$8˭3<^B2+.DxUW=6nkoo髚4PrO!s1 y[`@CƋXmZ.=b> (T~.rteWo\y}5a]s;"0%z/㡄|!b1>bau>F:aӅI 'cأxi8n,J@ZΏK+%KVxc I.t Cx ^ 31vz5 e Vvk yQj=_Wa :vK 9<|e]/2bJW$4qjsV d@gw<2 V\qW$i3|!LxOyO/ tɋԤ;=H,ʮ82{xK_ju]otzvmֻxVV~ѫV>g >8$ħ:1q,Xa3})e:ZZ̽ ]KCE ʭVdl,m^B6MJ{77M0W%)zD+}UdhzDS qA+n?FBv{0")DU,_;J{57Ïh9 mZق_hTItb9KI_Kg>t 4%b.ZmSE֬V2<60Mv[~;:"s#3/gNZ* t'!tXxA|$&CG17AI_e+~CY]㢇^?b"!]>7;8 ޝҸ@V:j vJyN'Ljr4YH +kgzK-J,]TE{5^Zn[U m99I=5u'PCHXI:':!״ T=œ7"BWV;n- :pE&+MYfbZayt? -+VD֖@mf?d4`cL~J%*gTgReID$U~{}$Ԣ;حGd{^H;:f:)^BJsR g,j!BխZO)>_(aivϯUճJ͋pOj;n7ƴ_z? ?:߉|zfI\)0~;f ;$Wnt-Y[#RZR/e`_y9=38Rw(s-ЏDuR9S̒s;@&LХ獢2|-! ]׷p[Df%gu2|݅ܛ5CJ1>%_` a\ p;@{^BW!]BkrdOvq{- cQ?AWmUVus:$-c"2WHk#I炪gwal΃TVI]fi֤Ξc=^ k~4p3w]*vc82{\p&^:H00Ŭ@p'Rjʁf1A{tV>)nImEJryJ_ˣ4GuwF^GA?wNsrϝƬsmc~}:KLῒqZ Ͽj#9],½opz ^dcǍvyIePTd$7MILSB!J>6n$C/oes݌fg1dU$3n|>K9R*2rbF%5Zkm*pфoP~{5~DQLn(QX6u?:ֻMY}փo=ɢ=)i=ȿ]unя i6ˍ@Že9>ѯڳxљ#!%4=n !|[ s ̇+\DCҔ yʑ 5 Q[^L=Zaf k&vF k~BŸi㓾 :~ղƎ9kWZKI6f/hzՇ?(vb۟R Ҡ%9:r.|{HZ '*E8u˅&rpJ_ϳWR JFj+t:Dƙk ED[S{\5[`#%TծoϼN3H{8p i21L a}Af<|2dh/ zdQ$= 34-><ߘ2Y貟KP{*(a>1n+՜cs~] V[O &GvAvmE2ǃxحHHSYDhInO]cvTHbu<> *2::K >voȌt4V IE  rcM *ű8 1>ط)ώC-\Uj"&l1f."dJ zۛyt&[PY7{saV ,&=^Y6mB1euvj \iį{JĘ]#%hRf#kT3`4|>0Xj4"5Xxs%k{b d=f6P:q&,[bO*֭YqC䴰W8J".s”ϋ?c7L l e :{xލۘ̚׽EY)3[2eڥ|*D$s]eD[^:#[" Ǚ\5="@0ѥ/Q4&Pm.3XZm|䔞Wqi Y g *0^71` UXA,x#7è5<( Q --Xe >D@*7uW;E陙|0YF$T*zUߞĻ!^DhFl*‡n:4e^qlAcyZS7̷;`bl0z+o\p ˻Pμ"f-SL3ºM !)MKFCoYAͤGI2]:~RU8g?N]!F/fpꁞÉi$9*_'JXƺ^;e;ԙQ@^ 9>ROa |u1?~)hϧ":󞍍J(]2Vot?fƮ MRmħj4X&|ox,,$>V&QpN#( o G OkXRHm]0RJK.+<"3TbW`9oB.r>me'Mr@/6n&T_ /@#pb/}8Pq ^Px(MF 0rX,)slѻ7AG#2,7)f@]Vfp[,< 1m5a%=1ʱ\zT \ \ɰ3k!ߚ*W9mY /!5&3xp^vBa-e6^{IЫw?z&#{A"#ZMvBV6--ʹ5ү|&mO\Q /?:+(P;h'sm['z_ޅmʇ#^MIؽп(ъt$̌/>eί@' xvʙNGf?A ( i/y~y*6\Kj$NMj&{ub,BƢ!JI8tCx'2$Eւ`o`4NGT6>K:6tEfsԚf,@{׫ЬI Ahk=+GPӮNbrxlYhøѤuT\'0i'Lď)NٞЛl+?)i0|aqܛРN׀h,ɞ'׬͆H"cDNF3 eR!8 (5c\E? qUZ?JeY&P5Ub1`jUwW:e,. \cЫ%1}Kd}?OX*,մ:5ż ךZ w%l pגuQwop٣N] "c-G@^r'v/zQ;:IZMgAsv7yia@ 0MUr=x YLUA{%h^j\ ~s4nk1s-*8U?N~NoFj{t2Dm'Jjs^t1;%2vt{hM]>-g<3}^-Z&UmɺG@;tN=hа-/-d;TX[a|])H_=)%ƜK4䬶Z>1W}8.V 6` ΃g@,HB*Y:8g "䋮R6Wmu!|L2r>DTCE :s9?Kfh%9^cs^Y3l …܀ѯ^p KfTVI ^BycLO| פk=. ;&Ȏ{c+blS{W ɢo38m*cq+j ;̡$ u6'^UX=Bd[_o LΧ꺹VAGWt3Nw(OJL4%[ ZΐtT*v^θ٢E.i \x~̏#T%j7. <|K1s؍s桼|0c~L&z{\WX|*^XzM- ޗGt*ZsB{` \30nb7=D<SRV ӵ"I4( rTR64EG9 P05JZ݌JfڊB < JmG+C8-#) c;|xE6AC's?2l7T^; U L~ph?iQ(թyD&ܮ:߸b>X5" Fh`  d O] s)Zدxu nw\ɧ|fJ MܦlHW ^3@i"Q^6D}w2d 0rUN^j&id/9ш6A浍XH0'yא'v3TDG1Pߙv'ݴ :Z6UV=~Kgn%tD33Hg@Zal25lJ-@t d/"6A_LwV~KB0~A f~!vq=w' GL icůIJ+uKg@`Ұ fX*/#&sn;W~[זvkkw9B/@i/WD0L+'nz׺+Q/PU5n.uUKAR_ TKs )b9;֡]:6xb'4?ap"d֍_O^n\HMMaԞhX* ss՘qաs\}j=ʅ.]p@y";{* cAh\NoT˼ONNLy[`JVZ4@ Ƀ#6{21r\#Y3c#zs,Kd q3|.D|xv@<ԜϨnȻ@WYuPL(3(\Kb=X˚X/.{n29Gei"6B̠ݢbi) h'թHt_[rKۼ.ϞbuiN fhLK" `ɖeI"Oӵ$bT/F:gTI!Y>|1ӋydW7=:km,q#`-=EM|хvmIWe;HWt#xC2.8Bf~5yOު+1pqgj&G٥þɯDdUBel]wXƒ(aL&JXJC`9Ȋ535}lk' [QxJ K3;XHG68R#Qi AFE3K[и=^Ɨ*yGU_PSٖ|}9f}֗NJk1սuJj=^VQ s;4m:ʇҖo %3BaG4I_LޖCS/D:y 5'T9j-ji:Ŷ-]ONǑjjtx NPeXMqzyVBw&1WySqN0;ߤ^UYXr .A5dA 4q|T"da)J,M/GMpGuS۲.9*]DY[}xѣBP;Wa:(_4(w*-p12Uk1PR A3}:!OJN88&XG, @ÿ0@E} Sy4;;=5!}\WVvfq016fIE ><_{R;Dmx= ԇ@ȵi "(:ဝڐ2|bbN[% րƣ?@*uO-By K8,)7a_W& 6VE ]CNq-ҕ.IAJb|Έ{[F?QOT܆|927bJ]Ã+D~OEx<:kUJڅ/o%Q@boa,|5JxYJS@ULJ218 }t]O(U[XNSC|_0'!Wy}~3!}!LR~(E 2qvr^Ę!AՒ W\vBCM^k{9Su`BÓWQm7c?J"M/=]*ߪ@Umކ,[ *03nkp*jOh8zЄs%2z?U8%ޅ<cMI 7XtlBnun,_]vj݁g+<ʖH%{1Y#\v` F[&?xi-9$b<(1t_LϠoc2=7~V|Oܷ6YJ{#.}&87~{) 5ؒ@xDrDޚ@T7l ݏ,IӤXU{}L2B"|G2U[ mOԂOx=t-eC8#R!^%` j{  4AW)y#Ű|ˮ%&۪H"dg! y.Π?krtBNB%T|?D?_W+^R Z(JQTɚXa(曷N+͔gG [sօ;U/%B 5&|cLk?߉64Dx?'nFF~a+8ugBnSAlVG 4 %N7SFfGOBk.2iTwk5"־dդ!b4٩ Iǀ`T]la|0f$;iHC)ř'`hw"FC_M9* Tk5'T(5n҆&!D91V>tB'ؖrw4͉ϫ #ѕߎab|hcXK2;8]S?V^Mm@%Y (36U+#n(1 #wUm)(qGXmB5Yk^gn-&0KdhP@d E޽R8AZaCծ`mK1öZgm6YIAkCWz@=„$cLa+.(ʤiø~G`3%xqO;KajL]oO=xo6T&u1n"W(F?k1{ o Aq\3O -OGuXA+ EʑD.SEnXU[ wuVD/R~E0:,^~[Pq{uʏ |Rz5xIa8H2%H,+ZD9  q\mTqvB~jq~FUbѝT4=4ҡ'Ёz=i^k^ NwdfQT*5ʎs} 㧃QB[ lbn)|]duC]pJ(gH8!Tw`62 eҕmt>lYr6y5( WurcGp2 Cu 3`!f-C!y vy &\"1XU ݴ8?-O|ǝVO>Ur8*/W>{,Jd <QOcR=tk~˲Cحx׿Curuzɮ]b쇏!ʮEc41#v8TLf=&]1ȴ;EGQaڅ[Cd@^@/ Ldk, .uW%sGM a̤ Ueb z9EЋSٖF\넆yIb6h*jjWlϋ`P4 s wQVKA Ј;'5 D{M ^ .6c򇊾ƘN;xH꥛MdS Έ|:$h@ gR_ﱍ*y/[.r`Jfrv" ?yzV*(6qxXcYi%x%@1Yy9]'M 'ć%*ŎwHXPJɻ)剌n8|)TxV TɿgTP w;h-~?HJ1z4?⾤F]ň<j3@]\>ݺ.?cn; :j&/^\@K|ܞ#`O@9o~>,Irot޸ ԯCn-0kjv,TivoU nC@AS!-߹Nb䣏͙ztpyS^VݢE-wks#<+aN׀Wc9څ;SZ]n8SVmY1s 2~F&4[Q݀ )uxEa7 GiyΎ>PNM0!(٧^Ae-KN."ovǽ\9tس<R޿p5 ${|i.16;"XpzqD4~͂-wR(8 X;MʎC&j5Y~q)2Vfq|;2HWI[s~+z9ߦMo;bf enQ od hE#̘x?NTAxeOqev';"ж` r Y-N1]h%de?c1b &lo"]8ѳϱ( se\XO8˜|ä5+ώrD qu\Nv>2!fjMpӑ h7jg%q4" tӺM& N}0Zg֌2,`M|ҠSV7=*T+>:''N 'TP_ph:!I싋v =9gq4p1;Ɔ]N7tDzɽIJ&ܒt{61Y:fwMӉMj^~ҍ(/F! 6LjKr ?1W׹o\iLjmJ98H!@\/])%=;\5!}F{mSwa.ieBl/ A1G֫"FAhC]m1V]IՒ*ر؜gSފwy49.*/ԟZLb!mQ"9ǽ5ⴗԾH+. 4C/$99U#Z qOv0[C[ .w]W[q끖#: -#=&J3}KEog.v "N%6l6IP|4_s͝t֖lՑ7W^H[KFY啶xxhq/]'ґc]7&n*J*{µ-rO8Xôr+WA:CbS^ =WLbd$ui}S~Swl]ؑڦ6z yZ[J6վ12%TY; ?튛gMSfe N7nXSU5&Pr߯lz{%]vxP17725xr:9Mۥ|J--}#*։/,Az *]a)R[5+{hlO&ZPBkqBZf<)!kl#: ;y~|`6 b3 pƄIsxG xte.U-n:+ iS4@ s MZlS^TB:XS1sLn]:O1g_d_iQ8(hRlG[6{G䓠*+N 4{ ASFƃ2$g tJH*3DE4-rr!YeXON1@Kv eO ~:="dž1eVy #]""L_8<_/[Z6qelUsZ(];J}vf@UX5w#UTy/SP‹FzꔖY7-_/͔j bM;;a|6puPprh-}0\#J:m.c+.َ/xboprB]hO=B8_T\SisQif)^"Tr7ЕY+~rq)oJ _3jF[lSm+rIh\Xژ#pA] fJrz1 MQ\|a"{R.S%na,E#7AsĭbkQ+MeXv}R?(S: htS.^MmUXvhw^ܯiH=e+>AGNG9 .8k pyk)DD[Q2ۃοɽ2!핐ͳ[(}^(ߌeɴT ΰk̙4Ɵy OߖDMvjo-C hWBFFHSy'We/Dfu#qr&^LKΊ+^[Gg`z  W4N Wmhq=Ό{R|ɅTo7%HXҳჸ?s1jjsc1r]*mۏ2o1ʏ $0w1gEXUDcU{ (ٮĽ`Aqj3f inf)1ĸqSR=˺W->)X .cZ\m<{sfiϟGӦ5fsbY *h;,qa jB'.B;MHTehv0v̸ W\zB0%)2bp$t6*8Cv%Rj#pʻi:lfJΦtQ qcTQ.8Pz(%; FS-5`js7GB'J$|.A( hV!&TkI< M#įc$2kFuUJmO{&^vek&W<`^Md=[=;f\c!\e_wXB22c3VЍtis$ht6%74:pV\:U 5ƹ7A^d P.íg>X}I~ݷU3tMj^ R(S6H- '-o.>tK~ҶVϱaE]U! ӂP5 4 X 4m,6ȝ,6 ĹN a0%7 ޘy 3L4f1|;P5t[L:/VP?ҥ_ bdStFA?>AoF#zt`!6G٧z؆#pus~we7edOﻨ$&)<&dvW9be b# w<}ddIdfH ?fr ӪT\4J-lȒL;TѸXK-ld_JSdl7Pj$1+Bt74z%,1xw"ZꛘZTVn?ʹnߧE$o22( -c\Wʁ2F`~jt@[I>*.BMތ9ϋZkb> %]$ʒˈmǏLw0Bh4.PHHOBl~:B6qݟVO\v$JCOM7XQCBt"F;BowAtEwx*D`E tY41e$ Tjώњ>zQϘ}2 cyg43;*$߃9C\!5-hiEW]ˬ1I@) 5Α Zk^V|I\h:>LݧM-syui%(\o3?/c7$IwTn賈Uuf:|t -eV\=uڤneIxp,E Tt Qީk(J+f`%ɉtr f_SGH/ 'ഠ[Pc@G+*fDM sŗf^O dk(/^Ut]`r_nf p@GpTՑwrՕuO hFi5׽L=#E װ* ךsRp3D誾z,H&0zٮ:[KV%ڽBV6 ,jzG»y,6O+:1{a)tG*3R \c|rVżC`&g2cM[d|Ue ߂T]&=}LTpI"3Grp aJɝkg^|pSd;SNo0Me`K[<[3省Xt$(7r^cKS`" #7 !d4xHȔֵ{ۙȠEyZ.P6L}_+^[.\5-q=jeLpXW6ahNր펔0323ye։ `(5g0 üFa(W5čؔ8*9HzO {MRI n*QX *S02nƓgqov3XѤA0I5#sq҈S2$ \Vű;6T:j.D8_>X̰ &FFr Z[V] `$srs˯Qafh`&z׫@Q nhGVXP%]oSUК-c0FEЮ$%+s '7IVi`-~+N!OBh7 GXK%</;rs$oDVVkֆ; ԞxY"HշKJ'bjgGq9zRqI=.} JykހAt5Qnī/ ER1nԯ< 0A],q/=FPq/"}FaiғaJ=?Џ;$괾s&am!f"r?/R)]$UTކ8a7Yœ,Rh%<.^9gP݋a e~*-gFp&;)=v-]d͗ }1sd/?vu{kky7,:&9̘7MOW}\{Sf <GFx{r!:uK4kp!_l+h[bu`1$œ=dH5IFQ=ל oOӨF{? g%T8B|kTK!%#~ pjwA3E3]aU F=Ό1[*mH;NQN+l̋vPfÀl0 XQMʓdT&E 8LR P&Y!5ވ-k;1X--c:~ VXՉGjMdځ|5_Dm_hM@w擏J%k~E$Ջ0ukZ/}4LqJS?MyPi<.D/OrDFJ H˸?VA3AR=hz0ɸ<`T~eg_Fs(˿胺쨾.~{>ܗ `bOsH{XU@Yk[kf钻f{=h\2o `C{1(ٟUܢbgM iţrzVjބĽ[{!YfQcʾ綽qf345(n;eTu&bF:;Êqī1's EbNX[ͨ$*(,k"8Vx yA޼*R^>2HΈp6PiqwZ={S*'")U/ZpO9 U &7Pn{".`p{7gFt"oyz?'Y$O?n[Yᖜ?amlY+ Vian3e^bB2kϊ$N`?s.*ːO5u-Mv)۰fgXkטI/e2n;\֔/.ȡgY&1eȇS>P[fhG!/m\]r^vypb ޒp;SiL&0Ɓ6lmqĐIo?oɘAn*/_Wdq y-S1jV"d Jlt)ƒ%nI _ oGlk ?^L[}ihpg B Ю7ji?V$ECmO3bIlk{cEb$R d#/,`a2V3?EIWȔo_P7ph<%mCOE딙uu|czmټ'I<}BX?x{o ^HMhJ Ԅ6 v[&x` hX5g? Dfn =$0-WHܯ ; ߒ[-h"4n;YAi7UjT1%10W|X]l$̖)TM3wD&fPT#Fp/EJ)h-#K.̄5 nMsI'C cY /֢ɫ*dZ6Ť͏Jv5gU_%.$apŭ6E$g NpoB6J5idD7$yz; B&D.σQ:s:?\Tp AO55Pqi{Ekq݌"3|m e 6ߨRdZ)(-*F0 vJ]+q14_m?m.l\_6Q41mNmu|j%B6r#w}_##,;=FLXu\RUx? g'{J.XLCa<˳wlҋ](%<C^Mz1l:V d+6r\z 3ěbpμ1uEAfo Zd#Bcʜ`5f `qL6ETX[ rXymVlȽ>/}'[FLxrLZ]5A+aYAi'7vc,Kѷ~a#Ȫ>lRIQsGaZl*m tx(eiug^k JJ[g k{JxL~P`8XgoQvmW,qoBkFtrjm^л4)e;?"&Yv҃_raa/?Ss%7iյaGpԅR lݱLId  uAB!=9xD?kh^i19q<߄maޕic1yӡj]1iD:ί 0~e9GVE1kCКWF~h~u5Ri@w]pdqĻEqq5_'Te OXw"$7%NBT,8 If)F'<h#1`_ v-;:F,Mj@T+]Wߓ `@qqnmZpR&ȉ<$e 2~v̝_]Q)[=f.[,3KdX+M_J镹v[ȼ'I¢$SW6}!Df(]*l u1g8]:4emԉ^;-Qy9B 8v/RpX\!C]nFl59a\Ͳl)R-Ix߅Xt|€ /%@+& \rțe;ȏ547$`"A?~7  RHw`9Eg0Pf06 VMH`HVoԳɅDM-'⤋49EM-I Y#q6P3)Mr:a/%,axy9a>tk䂶bHr+eLcGu% AyTL@&ȜRS:* T&7bB;H K\/behn2nVd)K%<}bUY&.[_q<6 2.MU7ٖJ9x0f_R7X04w8uOr`̵U|+mP_W pk 0Zō8{UV1gf?+IV͊_JFU/9"tﲾ]ŞRDUjue#-"6qAm\!oNPX,N+"6SAID]w$hn.A̱;l׸fy#7˾}T3ND҇E_MΫG|Vf#[7y^Ǒ%)y̒FW )Vb1Ҋ(xbuh'F([7+٭{:bͥ*u $em$7v.[%D1~FI`-#SK;*1!.72uXXȿ'⣆g'a3Ax6'!}O}#KǦJj;c9MfT3ߦ3oҘ'xjw!X 6 n8? G1ensC;y`% dy8d<cwZX D72pkP5hҚ~sƭ4}ܠK͗OdQEQn[| r/HN U̻% 9Q6ro'uΉ Fa]v Z@@W$Xy6iivE`q8xWsTjр}0AQA9-DI[*ht.:^*x5Jnd9]I@*0 |7N_őKC99s<#y4USNA!w1T+v],s`9e3YFyjBI]gu+Y7 9%%s1 Pei"w*fт6ƋW%:|#y'VnJ/Mum?e P<)~{ β)>$gZ$xla(RvwEÛ}Gb(HJX*[z@'rzs-ۢ !FγU4XN,;F&5wdڣ$sv#]`.wd4+E:ӟ z^!m(8a-DӷgvFG 8?MʶEKCW&(": @xV:< XRU=:+^ މ!@߯&Or orΠ8Br0 i)s_ {# QMy?Z!@GIcN**e݀`5k?ŏ>'lđ p^t͝lKfc{`[B4Ҽ~t>f2mE1 jTT&w\︦A 1>GhX~oDZEhx˯ŋ#9Ok'?'0Ns}߷/fXV;V.` S:.;)@+֐͓rtVϡLRaK7%'oZ-@dtU^K^KR>:]t|{[ը7Un2}2}0 gSB 2fC%ݭ6y!~Ynt Um Or؜wJSD"N )*<V{(\y>Ѵ)Y?&wrD#S%hs"E%<2h¨ 뀣Iz1d-:-U[*WT{ N7ġ\pt8c/Kߗ/槳jGcD5Yg_2R\LBg%|(OOwqx1UsI\r27^xQBpsYmf #Zi <,uIs^}F+:% >ֈ wH>؝FXR4 C͑b+UmNm.KƬY#gsXvE@|=r)hw񙩍01nރ cI HDجM`͙J&((wוv~¸ߒ}2 ڗՙ`X ׺=߽BF72n:<-.6B7%ks}6l^[OSpP_X yX5di55_Z ;#fG9_bpS:*Vc \ryau(Wn *,EK뗐*,[4YbJ"{C3G>ˀa/ 4w! %I1GWb[ǜ<;^O(:9bJZex '00xM񽡯.u:cĸ}iaoY7-΀lgXp)6rO=ϮxÉ;DpFJ Snmiy祺]:wL.~My}gW2UQӎP%v0Kόz{1Whp=dͪ}b1_,A&O&'xf% "ܝD^ "\.ccPڵ{$g@.XL/I`\L``$d&I"yU^8#c$-D4$B:R67GШ(2y.{P ;-lKz7s-~z4\h06)~nh+:qEh;X˄R|ٻcҧWԣBosj^o;N摫ʑ/uGD= x矞 $JFu4xCLeM6hzl8B>–$xLc ; Ɔ5 -fk8V1IѩB2`HB[trhßheCũ2>m^>A?'A:F[zZFxdK2{Xt]#!o 12bBO]g(=#d-q}:9)sNѱMEpӤ)Hs!^xI >X,Z#}bX.ܝw JoaNGL5!y<uk ݛ)JO(E3?{̶z2"l1SHfa?x/n'-r ?$т}`ePmUCnhTC+⸹sep 90yѼ:02>q֙S-TulUl4R^cAyQr5sv]؊`% HC^*{o78?]ktp)9!ݏ7X҈I0,.u@m& y (j~XH /fpxE5NZ!kA]f$`bOHa09A fm=G/mXȑ%% {um*b"X?LM0h ʣmJ6ăAc[ |Y*Wa',Ep|~Y~?ꅏɔu.ׅc.H^S~x.~eҁp&=!-3%lm8I{ڈIw4c$9LM'6#QbGt lHapqK'8Yg0eAF7ZO`@)w6Ų0=v NH^.MFbӲ":+/`bծXha-(FxFV05As ҹlnar]Y"~0^^F5K b7Z_Q3&ns o;J|r1'PrmѢfnC(rXVН0()i% %r.E.keՠt0$:zղhMY)=VOp158O_9EVkjR s[]g hr`i) [xI 2 ' *s] (]>*NNoBjo!87XX\N"S{BPXLH_MFqbRY*҅P ,_ q:0}'hhE5A De3tV3A-(c b5m A|bqiו_b^6>!(s42$|%dlz~%uVC9Ƚ|Ud(@ofvbf8r.=px@2REXޠwP|YCkD, PRXʍRgnAi uLw` fq²+a~n3L_3%ggS&8%cR[RbI\#xb|_"ȳ=aA1  >" 3lqQ덛C30~zi.-՛V<\I)RQ~X[y1.gW-L5iX/mKغ Z4PmmF,2afI?jD nn^ֲP"ݤM-W׺ubSi3e/Ewg;Ŕc$jPx:gW!19E]XE N~Śp ,t`*<-354k1:%;1O9  GyBn_ARcAנ .ϨsΌs,R݊[n=<D̸8Z\ 8#L4jSԼ]BJ-Ҁ*/8st|`H/~T3ovK~ ʨv4x&{O>՗jvh v4dV+2q0kZӫVKޟ9u|]:]gGpTwC* 1{W\]'ޔ/+  {d(2+#v)T{_#ֶD@ڣ(tCѵ>&Dir$sIp."\de}`H8S2D YPXO%H8tꮆoInBzr{fZ+c!u3cc\9&/.!(2-clàYw}F$$lahɯ&d)lO3dvTؖbEW˫1h/O eM3 EY#VǾ*:*5Nѱ& 05ur&*Hat#_dCEE,ujŐgTג%(cRtwcsT>?ddg]yFQވ _[{MFdlۙEdhB 2vt?Bi\ۓ^$vT މQtaAcs)rL$𰣇*Z:B{p\:0>TݖU9D #P%H;#6xr`Oh >(P(22)$V>^ft$:(J  %Yi)q@W $*Mvvp̱} &=q>7uI)E5H17~ "9S'q)ˣ߷29!#{)2:E'kd٥As뒐 DdH6id䉼\}Xj3Mܒ:,(-aQڬu77.'N"3qWG@tL8@pXO5 o3̢-dOJu-z1|LwWxDF9!s@y3g/NaWzϴQ8b2h9]{A_Lp\^5O |;8.o^%l@{ %U 0j(4@^QpE`0U0&U`(<6iNҎ)e'ɴ(*ҐHqqLBR-Kt~nw/'/Q*#k KRZߓ* Vi=5oO%d#%"a4Bx y=yz-Doz谏˭xUMܿiPmzB]ƃS>kfւx-yz}]-uϠtC+*qlWRخHUD zHה/lKowGkcDrMPu]jRT8۰fճU Ȧ[u +KN5 ޖ{ g[NZ4 bık bJd[a;>vLJueN30 .2~oNz 囯Bӟ򌗒~XPMa9|ra&85JB-(=dҞｫfukͿvc1F,^tQL!Ka%\ ~ɾ\ۼ_VyJQ;"qˢZrc6{R^z6 5o΁Wa>Oғ(D@by[\14pܨ~G;W.WLE!k3!J43*!"wkᒑ"܊j岻e%Yh$ '3& Z( y$ZUK0R[+B&b0_o ٥SfPl}Ł]}Yz5!Qڽ g$ LƃdjۥL CӼ.t r/+&\ZuZTq,\Gx&)5s4[kvjAW[o?#˚c0Nm_>t#&CNdy%ck6}E,_N&2MbJ׮hvwRWVRsF-"tp'.]BbYtɹ!`SZnPB0jⳀLB7!QoCP0;֓sQԛ&3e 6_ʆ R(C%*<"zL{յ~gc>_*n0fUF6#rgq$v qwȞ-^ O=)ݲe8+ȟګ\ް]L P7Ѭ[zsCgܔ{mDXoxX V< CX0c>o$G >q,5rI qI%?+,QМehqL=yuw{J>iLj%G1w*a{*,Lzطo)j ˙=Ntb.2WL#sf^\njl:PFq[g{: `.'w14J$ќUh %`S}ؔA= +Dz k.>'9+g4tIPt$oVOmM/[6WjG/nBWzx4>VLbgkHָƋʬϢ|  f,0c" Aɻt/'7}Z;|#4xAUO\d=y!2!6/c^#fA3zP s]{F,|9`Z8ܗI!~j˫?-cP^@ʬu)H\ ZF=NNzc\O,,+1iU%R}RF&u{$;kU/WpgTKpA|ƫo<ΡTy9:y#|\ғ̤sv4_t:ARQQpky:b8PWޖ(uS97<Ӷny5j@d:59YҫLXvh%V,7渆=canLB1YhͲ€Aw#OlIxh6Ѭv<٢ʧ5]\>ڙ׼d/ba8;"U&&?!N镑2l K‡LP WFdƢxcſy6xqW4l2>9Ũ͖\Ac39`*mqBK_l#?mDj3>m0o2:paqB LS4 @d3WA}k6) b,`t|&aeo:E^b:h ZHҨ.EDkMU'Abeu?as t%%jTk~՚ Hj HK&ɻf 큎#L~/~ub𰟐 1UG `jl0Kĝޛz=~౦8ױ};}' UTJ+Hq֪r rFEU"]wun r6)dQC[#Zlmu(Oy`"l>v9ϏB=(lۃ> Zmo$C^K'vl=ץ}Yï%oq].[* Q fMQPfDY:;p^Eu3V}+ sYzO }Fu$lXWP_Oܨqw)wA` hߗCpQL孀N<}7;}w3,tBK;m=$ `@Ւgz-Q@~CPX"kLI?.|4f^.6d'UT{>뻏"s"f)iXs xXͺ=qfտ 4`80g@3qn -=<ԗ T#0#ud_:7{?._7o4x!@luμ?FX47kAwAT8<7>r4WWgl.bH캛;[p=ĉL)Fa< _}WFfs7^̍n sa3*,mB w2>%2u~Q'/6a+ڴ_?8[hn8/Or<"LQ ͹ZE IWp:PxʇOR)pZAdU L;2vAU~5{SNl!acQuF)U{U^ؘvd]yDUeKǀ@_tL 8xAf2 +wt͠K4+Li-+p[H=LqN1FdolcKovVc2*tO~|S$vwqAVh vI'>8AW66 Y$?0W b<3#һ2aXMWG*auVb`gAU)v'Ӱ$e&>8pٱ5x=q7ɍ=!␯`BPGvȆ@dֽq,t+eVr89f4ժ@[SP# k?5nz?_SL5|؎8fÊ z%*# o'LOsine~D_?w+'0wh iIMd߫ o^iNUr(k+~J—Pҡ՝Iz{Bu[.JFŋ, G/g$77[P(Dϩ)VCԛv_$G^[R<--G@xN$eguNO^ܟSmɹ ~Q]&<4yS5қZ S2V]!Zkjf4QC%$r[Vc@0}۲xn /y'FnqD}VܲhmC$ƚRy0ǟ>^Cs="r8:B3rCP٠$~P"kE$,U=Ρ?9%f m) ֐v۸w 8a~T;# dQT˯źftϻw%R^,͌W}WE1zB5U2 Q[ÐS3ܞvr6p1kڕZdc|75YNb8+";w qn%ȇ UJV 8]3w:Tre"L+ .q:]#NVA/IJ&$U=3$"iAMHٜf 1e/8 Wyc&W>Oxnt1۽a"?\~<1k:T\ݵK+KhƞJ$Qۮ` v:/"EY4Ȯ8=Qh ȓٍe;DU(֧j9Ƞ;UVP2"Mco7^/ƍS茦eObB.%&jeAF>.k`_JjJTN+ ׈yBx 4pr^=_ӡ[+a nw#-=/I'j%mfVǕmd HϜVUۈƖo@2;MH; CC[$>XM׷5B-s[=?Hs#go ^:Sv5U]jf^ gco2U!Me]gعآD1c&Z* < K\ߢN~g s`'vjв ;$ff+htJ2}Mi-ӤV,.K8u\kd(_zpo S+6ZL^\sFaqܴ?z]nFq33y﬇i8*3suFWR Tji@c, 'g d3Ӄ#o-e 9FS-=n_rP.c 8'dۼ^rTģGTo|?fL߆Bc'} xÍOB!KFF7c$6$)O1܆(ˇ2n!oP==r|Ϸڥ 6bvisܩalagLCϩZxv*kprHZX-@Tk.t?dF+vY͐35A9azeQ񌽺Ö $Ge DKMJ_n l!*U&Gi}KLGS 偹i_q':|ז'_a ^:dtLì-C$ut=}C.:n˖^̎6l08}@d`+4{pjkny\>S }-D<gU>)4כEo^ 3KA5Թsw³ ^C{N3 ; P}ph6dNaU D"{jENV+{}*A$ +GqaU%jT {Rmcͥ: y~\C qU'1 SR%M p$3S[(* 2m{#ñ.,QC!'8vHm7sf)JDf3E> }4[%^|HgMSқ;F"qzFIšCZ쬢mƲChM1Dk.lC. ]C"0(%j{1lzʀ,{Ƽ{k[?Y6'fR6[xˋwK%Q)~ t3`)#Z,Ȥ,|~vϿ]=)&Y oLaop.N,sc,;T*kR[;v /8;/6?f'RC/_Ƹ Hsu&Rs?Fg6"U#XLDfY3~@9ZRЂ7ī_Lpeu0p kԙGR]jhMgG୞ˇ6$&@^ :X¤, 5cn/]qj?$']0f60$DyhҸ&0U+޸۔'IO ȁq_`iMr0A]?OlĖ`;5I > W ͞uHLOo>]1'(#U}sBw楇=g̔JfG1z,BغxBley'$ }SQ2>'pw1ë+Wic/pO*Q2Tc65`N:U)"b0)?*{8i{x{ctz(ru  ¨}}j1'vdt Gl;,(\>IfF廋훷3W0'ncɨc|GG7ZRç̋I)Mwȇ !v~>ޱ UM@ﵗedsJr"uMGB6lDϡMI\9ukJ,'%ggX1|hg'm^&j~ARbÀ(֭+Ĭ9fSyNgJq @ԁRVt09gcf7?bm -u[޺IDD*)vbr*,˔0uԽB#81S-q ur1 Z_c/[`#%"?"FWjHT9:($|*ܕP Q[ s.#oVѮבnb3%a:ms ˟':o\`!7{+ܐe{扙Z (Ӻ@56qZ>|"))[0E$*?0niA?ztdBI8/uIQg'&ylL*PlZk^kxUDD4FyR#G|Jj%{ͻz+|J u-1Sx"lG}-;֪@^%j );~` n7D Glġ{}(Ǯ+|N}bwC)Sp5ٮ^axt: +vr$kQ4)LJi<_ Z 2m3pi9?ZJQx6u6pe0UI&ujAUUQi[>* [5A1X~&JE!l;@Jaۥp*$ ~`ʄ[aV#r(YLoSC,m@ *;a3Yu޺9Өsv[!Nk"j>f1'bHaì;28' c0 JI MwɱۧqJqE&op0JSTFF9!w 9<&tJK~wByۓ϶&C`@ aJrc—Q4!An ؽ]i1&ڬeESg{N'wm{nhOr"hFTQֹm^wguHZt1mT]wnwiҹ"7Cc$g ` 5ǟFLܾ:#P"[E1NLӫi2dטf(eӓU'Fb =b\*% 1\(.S*ԦȖ\Am}vބJm=-N _u!yW&qT+#Tx\%_ ːY&b5 Ax1YƜFC@z˺g5S8wy#V~J/ˉZ hUO]*ӋH5>(̩* NXĒGFV{GxrHztS3*9+3񞱦y=u|E$m0yNw< , !>VkzSn~#i^~I[n1o3˶HB'%iIЕ=L jW?2ӹt"xy)<:fVHT'ٲ& VfN6sOEaz4dBR<%:?Z)@d93n ;/_ez|ylR Uf6cEV3QJR)Ə9-瀰CfUЛPNM- 0uBT 3 %|OK4$6ߗ- 睲Q:q+n'e Ttzy^֢"a^~ΉmlO^n}gNc F%Ǟ-Aϵ{U1.keQ~Ğ^Vx*%˫M7-@ܚGQbBl#ƿ$4F1t>4{.`n ;ς"[鲈\FQXM%I"vyJRop(X3/g]D҇_+eNPԛmB[\(,>5+l7y /Ym֝mlٓkR@;o ;nDuKUvSRr)߾{ithfnXPN빧1=ô*V]%s14=aPRo65{/m U͌g\'e>qr*CB2oo'g^c]k[wq!B#ac0Y:Vw~'-}(mC&-/@4]`Dqs+b b;IwchVCI%?OI4Doa ̐*ia.1=98^$鄟́cƴ癫hm"q*Lu}BRS Lۥ$^u++*gI $P6ډ$̏qQ]ZFHF'* ߴ HJw oܼUSA'崬5FFGP:?3V{-4T)(1W̉ؼ8b84P ~LcXOMM'Thഫz8-tU+YR-vP/UeH9Ns80G{Ecr<.ZIApT(ĮR'qlӬPikrR|w15ӰU#b\kܯBscڃ:/{CRʑjšuxo}k^ `[|ؔA3v$9@f[B8ܒ*ksbs=w̴Y.yNǚqSShVT|~E6y̓&Jh4 MՑ6_FX#&حu\: l1׍E`F^(r;sTc8.mnP5=0w5v؊|XI/1dԮNc7b ?i'"4uH]-:!!p@`)@IOnF.ͯ<jɢG"T |$$hWRMܒ=Uvݛ3ʻ{sl \N_rD@Fme@RK:52rI6{b(Mw6lg ׉ ZBÐD mgG AW xAJ78vdS4ևz·xc7ukX DDw_-%3`pInFqrh!i&>~E@lgC'xY2,e4wx¤O^Cc?O SK/ I^˟b0BաHFFBSBdhK eo~q:A[٦l sj˔۠<_?Ƭ0bT+_WA#=_^/9l?8y>wVEX.A@j9 k(ȅt79Ho F)Q*U-xYMIAw,߄ABm3ay:,{ nF0E|A,.׀ꐡ}s!l%55g ěGwIZ)Ma `*iD"/|x˿ʐ ٘~jֿ&|-6=_2Fc$QElf5 3cN.`Z,V|˨,HyO;[5M ?&QK.sNK?b?nwzQImDPm[n2Y,\Ks79*؟b~8gn;yzg-nN(WFcLc1tz UE0 zC=]v,,RG6ʗhkXb9 amXRtc7NsZlO.j]yz W/RAoEtn Wg}WTV~#A}P"a;a!p ǧ[l8r)N]sc'}8Z2E'G&P>"G9B3uWN&,"?J~1.S!pk$o 6>8.1|߅!Ώmb_YqcB5f`Cy *VіVXA@YJ̱Pi}7 䮨ͿAbŁҧ2ӥFP|H0sq"^^ j!b|E ;h=-l ZCUK3PShYOȄyƆck~0|:k߭kOSi/_ߝngdKLdva; ͤTQ,-b4asV#YOׅyz)#$-U @TW0A-BCud+ڲW͚"z@Sr<5Az=wp)aG3c=K|uU$F4cRYē3u*n5쵌Js^G&u8>0bUF2|/#xÕ ~0'wlI8OsԴCW1%_v?fSc?nUGpgn%lb#}nXFdk0[dXR)AD}M:~@#>Tpln.Ysi"uFz 䲹<̧`C4S6 A ϴ ? iPb- L>u8%NS25lI!ZO_Yj0 !**^#Q>_'8ߑ=m#-G<[6AZ"B }䏱wR0^` :}Ci)K1}PE ݉ٓN3㎞& !H4jAkb=%6֪ϕFqkz`ͨoI6Ƈ#G"ϮF7禨dά Qb񇓮H=w=/?V!Bv? n!;x׉C,C93E XtH$_MQQG!6Hle'#.VM-^1[ L[Z?)^J #`Gpʐ\t]^ܖv O')AXha(Y"j5\pX#>a,kt;3,hTb#NDJ=@]{"W}_dG12K¼֋*MZCgJc!I3)UkUU\28Ϣcn-­(ؗF!ifl@}BnS9Ӿh4x{nS-d=[`{=vuIffK6"o`Ol#avRfGF` JeNmR+$<O6pX#6~uɨIޣgAMk\x[e9m/Ƿj) XȎ0<9i$/ I%E՚Z h]i8 ܱⅫKDΰ+) ng|^7^HRV*'K4͛Oˏʡu+$ Z$Ne,V3+f޼+j~}o/I[j+]?%Lka(&Ce?o iP8bS/M]:|"I0 85]օE( ](ψP =`6Ik%EI4IԐ;H}t9'dc(tt#7Lnc;L͡a =EUkBxhvW{J7+\%y73p?1QxȢ \{Gm?kNE^0Eƭ VC9IB7Ωmen唿tzoδk OqnzLcR&d6@1-j $G9eE:*3m @lL6(c$E-,'c~A<~N7m?*7+/p ym?;ߵplUYN~m"QRɢ}Pd7O97I4eh^J*yMpY\ yL<NM^@Km) ڽ@Oc"W 5oɻԛ6V;V @pI7"Y+]n$XqWۓ/vA h˨]1^Eg/*^ï2|GE7j!y"fPqPZ1UQC`t4O,_ 3rl}BI1nӬA~olIwnֿૐhWKQe*.<*4'6R z_m1 DG^9pMTeBZETrm0~*{1A2m2ya14ZH@rLGjU^,l2dEZ#c1حpH2`٬ a9GV]H@QP ]^ț cޖEv?5E\F!-V ZZBvL9u@SjN~ InC:E΁0p`aqe n0KՍ[ظ/Z^rM,)R qrB}ʐpJK?+Cc ̰]{<4lT1D{1Z`iM+B"# '$As'dvfe`~"*YKg;N %8_3^gì YzAY%`6RXHGFIԿOjg$'a? f / A( BrjRf$A.#moK+%*~cݻ jߖNWRlot%*nا캦E&9vV#$t(JAk@YSIq(Z/z}DbSEXc#1l`{FvkhH=BٛfG9UM}r\Q1ՏhῚYSmȴu 9T2dhӻ]ukл"vZn;IHڕx[Bv۵me!$h+Zse * tV@W<_Ťe6cp)!aډW5)XIvv|B!Z`js3CFZ8&Rl"!IkN<7?- d]~0C)ZL.zb\`2.CאSx6tPsrE r>Oˇ&#1x>؏:ET{=rhkbRњѪequ(E _O9@HT0*qy6_ēY#S׉yw6 ~t̥w!|\29@a+uK74mg] e8f6zT%xg}cn%//8Wj0U3EI1c^b^s+ $,?5MK_O|>׆զ)My}Oh@ѼK>S.]\5ѭTh|Q׫qЀ+vײYM)Fs؞̋~h\;c0wϗ;) 2:,cs ># FP:Myd_i3\N˰Ĭ,Èq,4/aLv-|şsђعlC)49uhMÌGQd7Tjs6O6X5KԾV%Q~x^٠>A/݀@ME$>E:v~\+ wwpϞl#8ey58z>͆`W`Dm8MRR,nb"ww:pNTh2 e̒G~^kZ!z>:WD_kTANxRkasyRw0h0u3byYjt WjÅkidgƬϊrrJ!hRzTͰږ6P< Τ"XWiJ?-q&d)|-8!fWݑHi* b: LJ̸?P67OƜDX[:O84jiz1Xv4Xl(eE>fIiOi)?p/?[0 v7Տ*Mѓ\f|˓K >Bq L% -ػXrr +*"q5JI^4D ?3([/uKslO=Luh"z÷5HS Egz^n"fEGܩ [[Dfaxq^sK~"G[4iS[-d`d/hnȑKSy9ٻ:p+#.EF̱bn䀠/P dܩ"ߌIBQ)7ه1R܅7Y%RWwB@js-R̵Bq?j8.B-Ӈ`BRQqnw'Y [:D%/`oADQ%/ 4!w LoQ*Y):ǿf=m'|{O.F]ͻ=JnQ8Z6{4Q@gTgUp5R:gH X,q`_qTe䢻I7-K*K &4^ӛHxCJ/qe em/1@>E0_+9SdJ?6\sa29OOsq D4 [1rDu;VY >4ki]+#'znfX+]_ELShdSQO9YvYӗɿ0r|'bM ܙ6GwuJ1әǷ3o׬ AM!YhбdC{8ڽfvEI5.{qLȾ=_TV* b$TvPp/F]0ny4 eG+$ kZg' H5^,+2\NPVyMd-? ɊC@LW!'o _e( "h:dNs'h~q{pHT$t6 IoDIqb 31|M;& kg_KsFAf*X =7 \SE:- }<[xyQ +,&ӗjZZg\[Q`+tr4 a2[O\->Ͽi#ՓƔ,->cX1OݥuBQQ4Sin-[$llP&6acl l&yZdL o.)wu9LT3Ӊ|d @ߨ0_rJT  v*Co8O+3..v,H[W{ο-1@gC bprw ^#^y6rSZ!s׵|3cNT4('cUǭMK*Jov3a{x1 YWsl{[g4(\0+),;(AVYU=5!e80rǪgE'b[5,#,0"n.ʷhǷS. LW6J% xv0G==*lfY y8K &k\U&%OmMd$鳻)f/CETm YqvTS}f BԪZfxxG=|hVcOn"<} D96:{зvzߠ-T}|W pC23ΰGQ?ڿr!Nst}ExN7Ԏ@YS+u|lH9vsZuP չף"mvFp xvUhR a+HuQ[ͽz( RCÛtnxAeӅ6藿2vh~X{<2X|'!qʁ嘍/43Ck 20c nנH <}Iꌁ7`!~~ RzS]N1 q`cn8ߔqȾPJw=<e>39Uv8 gf8O XNZJZu$ʠ[P/c93I0?pAd"!8A&`V,6>B0vuz&?.|a~\5Iu*ݼrp:57"dKb(l䶜DW,8d>8:TvKF(0}WVOظgx0u0.Ң{b%7ӛ*@qF?7O'Eb~>TiH f D^(rx,ʌSkPJZU ͆i_f!L,4iAhQ-(RƤ«~v$+Jփ"EYd mf|*˸7[TZP΃`h*U7qj"`;y "rI%<]lx E ` 4to lWjBCfəvfȣc ԧ>Mĉ;놴7'jVpE?pOM΢r$?ZcI8[1aPSqޱ 9rѧ,'n]%a=R+q/Pڼ΀W<9, DXL{=]fqzyo^sY)!bk GLjv8k`ޒ_n}WHFzI.;Wh 5XD2/V\Gi].KM[!k1VOڵaNFLstU1[D5@d47 x*]VY'n\8byHtK.i*l&7cy>)3kCPP:W3,A|4P_^0 td-' 7QtR١UwRִ{K5D̊>H浉C9XD& ~Mͼ1:SilQ7K1y&gA] fSAhڅ;h3ݦc/*(@rSμFur9<k1nML$eΌn<5QII"c/o ol) pyh +jJb}^ڎDƎ"!C`ܔ.]"9?y!9% Bp7K2SX3@ N| ]ik`WJD i6QTu'Cv$ϩͷj{4 #P~=R4ەM\/b5hUGIfYy]W>q9Z C u"3*p`@6Gu `ּ97jδi^#;ףAZIS|\fF7WS)׭a_tC Iwa~L>d /URNσuLl\9%:efY7Jj.*CUJ\;pCY(31HT.)s&;|ZkHHkxf+c 腵~*fv|b$9 M˺m U1ѴO%̶Q Lat#g(֋蚾1.x`,fRU*`*>%V8'EKD: o(u/jĒb mg(wM!dף-l8:JuN`0˯6:g2d_;81'E(_UF3 !XGoCMc5.M:ޑS}>z$->Gۉ(>FG]0 : t+WbN[J}*FL{rd|drwqJߟOm٢PM_D" Gז]?'r/B]Ue1#z9 /JvȳǬ'6quVšݢiT}t8mjYvp7)UzN1EQ+y&Oy[rp_ExmE=[Sb]U.j7b}wQ$YDg+DcT1?t;:3д"ttC?}2޳79L6,mGԟU.A1Ra\l㤄u\[;ܕը+S;׵(O0 p$Tݧ EMsTw}3߽0`52WvjR'^Qy;{v#վIȈԸo'qj{q)m!YjXN3ףT"[{[460XWܪuF[o 2:zݡ7pj+wZC_}S$oۃÛ3nڵ @!> ;DtX(^T/h@4y-0v eGwUIX2jƘUQM!؏ FoxC@5$F=+~}wjo[wҌ-<-y1m/{Fr#Mg3 29(@3|> er`Մ8@5y>.k=~  '&,%⬐Z3[@sEәdn=Dy҅-M< <sa!sTH̻fld7{!TbBb<{2Iɐ:B֙o NP\᭞pPm]!/W2]R(C B .X0,4@$Kh+iok gQA!%mB)h^D8pK0\ L~{-qz;h!:\|y@DVL(ds] sHC^!-Ii\LNJP^q3+ zn7&dupZVۘQcF=` s_HN=}c_S= Kض*Mǰq^Cmi{6v_Dٵ"nU ;V2xiecϖZb=dpT`/mhzL`MJ [ For8|A[hnS/o*#~QdIJ=Oc"p7O]t*J7SIN_ 7tI $MwcVLz 3f r0}P&d1G o˘1#g#FP>L#@vуIr71 Vqjk|;keLzVuPU _x;fkD'pD?l~vtzaS v16>x=\fT=UlR=ϳd]tDCA^SB^1atJ#zWmXk`iA]Es9`^Khh1rO;9NC,Y;VN7VMA>xja9s:BK(D9@tLA`BjX9X\ܳ^a QAgНy|!Bx<1(F5` 1D:>t:e\IʉiCYBiI2c5p PO@Al[7 OfLEi4g"Z鈵V1:r(ך~Mw{G{R3-NwH#Դ{2Xol&RlDC |FkhD6NtdFu,g|fgqJs&Y@b|:' QctC%$Yspx au͡(+B! B<;[4~$z𯭷n/{do'Ideݧն&ܸʰ;$):O3Zp^KtPםȼqꊜ1QQ.)" %ߡ2ڹ_2"Os >c4Ok%\?{.&{n*)ʎ?Dd+Oyߊ.5īGbeT(-W 9{ Eǔ!Ƙg(6A?`\JAe++Kɬw4BX_t#C8e@Ѳf7lpp*! -MM+L.w34n߭+-7zIЍs Qś\?wR2ۙ4#$}x\xImΡkA8W.dI^R[1YՄK\* od5 Ӷ.:us`Y].'VC&O zLh^ aՑP`4mV#)h 8_V9{ 6F@='ѱ~E} Y?+X *mX*z): kl 2CXG Z 7ӿI43)`>""w|uOi\_O:[0yjqױXkm.Q$qʰ `yM79BE|ķ+s ^c3$dJl UUW>/1:kfx}4 ʗl6gǎ"5BN݀9k(ɼCԪoQt5[.JJ> a(\ߘ )?p|j8B3;n I9|#O) ae)Qp/@ 1@=~GBx8yށ?B!3OpA.M4WTRWm*JXe-9̜͗e\r%>/$S hۣχ:=v_[{w)yKgxM^RdB;60-dFG-"ZhvXا.""% ښ'S~en;~)Cfyt_V6/H$0zMg ό\.4: ,]TNI)tf,j@։ %7v2xV^t&|{R0O0gΚd쨩/dC xwydwDFΞV cKI;bx 䆦M |O:X/.ֵp*UP:?lm%!C0D9h깣R0k|ua%3}o.btŎ6M*&m$J{2$w +з LZZ!+N ^.bTi0 m8Y6 MkOEf1ټԈt>W1^۾v|5W6-.җ?Tv2OH"rw 5~' |^9'̠*|OE H VK>-6v!^9T+ܷ&VΪpfj1 Xlk_pEB"q Q&[4cڗ\9yu N:n@N$#]͐3ySO 34 ߥ~O] *2q+5 .&5@빅) Z\(L߶mp>t8~2xd/1Z,WO4uӢ3ҹFV݀<0߄>J}`ط,UD_ BQ۸+wL88)߭:x]9Q.)w%M$Q`{K $ԣ{K}et$b&]g/%ʫMO8'+еNT{)ގ^Ic ?3gm~~Q`RQ2g T+@r1Uʝzy[kZJDmA~fmXTOڛgҿf|;2X6ZؾI(zj}Gyb{݊as{ɔD@Q.֝X?NS6g:P=dhm363Czde͂7bIʾݗ6K<# /9/^@s>V \U4?6u")G%h:/o Z$LIsPfLJg;uMO9ȺX q5nÆ"0Z&}F$ā1!NXfIIsڼ,1u Bޕ-583:^ċi*Is?Lzbys'\:h,K|+y?L\ŗGTXw""_*D|XM_ؾN'R37>OI0iE"Zjܓ-2a(Vы0t !wy3gquFW<< 4n2ИX1l|8 U"8 ,TUi8.'v  RuҤ'ℍd" x1zE8R5 >5SW.M{ : &$AjspGT1 igNX$;u'n}OU#pO)K6O[̤'$cho'Z-qd-]Ӧ 2!.*C{\su꧐.~R(- ]!g^_FN ܟg+n+8fK{tu<3n`D#`p܇{O1h8׳j .&0*,d-50RrwLG%IDv_Ҧ;U,Tbd(- (A_lr4.z$dk!@R#R!#`V(DBIِ-nEѠc2GoAIv8sfAɊwWU@RHO= dlv5d;Qā3lGŏVsWc{W^1^YV#kC!=fv\&1HCx>۱AZڥɣ Re /@ZVzzk xGHr!C2%|ɍf:Ўݕx!ȩT=}O&s* Iܹߏ]Eȏh@}9t`m 44eyw!_ye:$Xi,Xe34 6|~3Y.)=\ @8`I 亓N*J(āZc5!Ju*'#GFE`c }>墴aY9&·3, ,'l.++: te%C*L5o"v~CRkLEKURBM6R8Ϋm|Պ1S&*qW(i;CP_%+ȵF2 %pϐDzx(@Q0&DP!տMq.`8RgwJ@}iRtbesA\Fsg_3 F?:Uda8vsL}t[IBw*;Ro8i .ZNήp$_Wʂn~@V\ZN*9G95GA*@7˦;-|Zx|4Ĥ!:?AZ TFڧ6g3 X`+ϬnaGsvjMsf*(zzϝV%b-SSeS_qrFMNϠ[I&[׋חڸ{UMdQ C ijU? 4n!@x1)_+7>Sf!6h9աJCi}.I ]]/P@1˔0OAl#{me;~SPX3ݥp(?/,Ikv%I7D5_()+\“q pV@% N% b;5!CS_oBN @."*$U]'p㫟5lϖHpjrLZ=7/qY%5}o$Z>FB] u{,jaXv8~:pãT3Ֆ^˔XSWӵ|u9cr. 1ߕ++kO95MšY8tJ 6XmG#6)$L`HOθуW pͧ!d=SKD!hLuGq3sUٚաFjE 6"cW#_ȨoD)V|&h,G `jOiDʮ(E҃"xB0rc_h)ZjR ˴JLG@3NHmVBQӦ:-K Y`UlXŅuW_znfi7à&Nkl <16gs<30.'hyPi*!~_F@ CY^e`g8\%nl\-B{k.ߦ2r@i/}6M6fɴ 2` OHiPBDe%:yrfֈ-â"¹sʵ:w{VF͊kjyp2w~Y0וy_eoKĽ$ q%ِUhA@I_IJ{ЩS\ T __ѥeze$G/X#FRmp7s20QD751E1Ҵ/S|^J#։WwWt!iS y\n&o{EXŤrd8 vTՠ=.ոSZ )(ucXe ƞi'|5WSUZj sÜQ~POt+$e~?oNڳoMo2$9JN+vA+VFC<5" ؒק-H#f6 ðLQ+O6' 1@1l\ECE871ؓU~2Pu֣Cb wL^O_ŋtZ/# }bɉNNPAٻ;'=3a AƭJfrbXyb(+մ|!BvS[-&"D)b}"f /H8(C1@?;'=0=Pn9ڠŧ{ImfXʆdjKYPTT:Ϫղ.AtGrAH_5^ћP$n%R, ~u>"1e?sRcjm(I(48FP n79G=>&fa:4 F9cbZ(U4]qKCw9ޤ@W˒/ ={jB_?@mMqHb bFhIAh ߐ%y10U;DUc?7dUL2o!E/#o.'5zXXkFgԅw/f~yH F5|ߦOW 3`P98mwJ|l,n+ ztPJL3va8V Ԁ#Y=GՓJ3IVM41?Jĵ&}tm*KƳlvCɢPԏ?c*(߾@{* "2p pU_cKT*Z-6k`DŽu|ؠ"yq;"[dKM{%E C ^Tu&/cDD#?Ye{.v~hTƈiSC|`JhX!8h$(W`5|5e=i4sm$7hZ<(`B,<EG"/HPuOI}y k} Gc*w"t]h'mg#QcQ(VtahF"6(#Ymʛ;E$!':2\B۴%%.k4&*<X(fv6m@#6 kv" `X8?71+K 9R8x~M% !&y-A=I (y+5 1q[8;G;'tK1[Xl(BIic x9s_Pm|  ޑ>V0q\FMCaK$ׂ} y+e.ޔfRg4!tNL9diBr Y<"z` ޤd|uʨvd#Qq,:ZJIeѰ {.<"Kf#M%xOCz, ~!!"f"f"ո/#V tQgCbҡ]-g" ]{+{~+"8;DDŽb7,7jMkUmId ~ts3]II4,26gs/㯀 Zv7l{6ݍMؖ֙tNm=PpgFX=$`Gs8{t1ȕn+'Xw)@"ɼUdFwrXLK5G_GeA@SaMhFevޢkT?V A1ڗ߀W [@}H=W+V 7 mhc6gF?LzoX݄|r'8?tdʇkُ FXg{Tuq^b1"D ӑj%B+5B|wUS-H uJyVcGyC8*)bP~!R!XD8}e{R43'Hx%D8#cqA.41 h)FMI鰊)gcRrfWڶ _xKX*Rɛ_ma=Hzu,v 1v(+밉8@oec;_>\$^ r+G;l|\_S &2>S!t|r8Pb>|a&@ ta$r˲a3]˂u7񜑜zo䓊|c I^-nw?)p$E(Cb- @囎'KT Ka'H0ugl5;놵B M@tܚ^,-Zd;nߐ6,U.w\iΐIU*ds7VtlO+FÒzDM$4%}Ƥo30DT>.Ё~oekI@=A(0j|/fR@,rD;gQ6C;lBB蓈B~ G"CDnMPń$M3Ԏ$P:†| ˅3g#YEV*DuZ8x4F*0 #/cQ 2NsP!5t[~9{,5o)V:;Z'BiIN "KB%\?W0`oKOa{?k4|o-ʓ&RuR_9uvhmqӶ>mNmAgWlH&MV/db5w/ł'j؅2m\BC ,!Z0Fܫˎ#y>*߻B+%3@ck¿R ]PviA~ةofUvQ-ryV\g٠eX-Sw6"ΕCVtP=<䊪3e+#aa8Uӈ\?6- rfj֧ o _0HR"Y/lUџv(R_߳>|U. 6Xv4,Lh\'sG2lutt-iaܷ6T%&JCVs;J* r/29$ nN80ka{OՌ*VH@cn?.k˸'RD6ԕ=g3` WY]^:GnPW0̜imLX*9+\f ynNW&#]^ = Oh5d"G]x`+oДR2UHvϑ<2ԒH8KqY2|F]mY )rĠ+`֊OP*'3rU `xH3wǚ<^+]*ȊIV]wOg(*-۽poP{Nu"L ^cKwN{h.T'\N`L;٦HR))]*{_j D}9zLv٦^=E.@>$jq&${Hf*ZwyG3X[^M ٯ= g22hl|LoW9樗@$\&Pϡ.p^18L@3{ΌkͷJiO.*;Qcb~y R,Ht%{Yz#{H!`KCHSh)!fQ|aI Xٺ A,AG^a=zCa[k>v37h*+].S;}Ѣ~DLlQѸ8SpflԜONG+ӘՎW<}MݫU[9a6݇01uϨ"WxWьF*>7ܺdx"塛 xx*1m/_=tL cZ1srDn=2y[R0.&hxZJyX 4PIE;Ki&W<%.J֚:qn?qP0`2~f-+˔h3[˫)ZT"sIzsWJb]]yyPtv޼`ϯ}dSM@TUev1B`]ɌcX{mN=d7-]9 #)_::%LQkK WD1k,Kiwx@Lr/Gh^6y5Ԡ2+s/Wzݶ;pڝ[bT_4GlZˮ RBBAqT $p%>ΐMFu^_q*_9ަyHaTW <V?Fҵ]m˧ۄ\$YKt( =n%r@x $A܍e4}LU mz FrPр,o4P_^=& =NMO;.|d^V~_`v0T0W (džY88lIehofʓT0UާpKM̡7lW?`q4j[3}UHc=t?^!PYJ$ ; x䂗TrwEF"^EH?18ټu"1w^;/׺9j,b-GC}eTSbeCU3mPF#RWML3]"U<]';}p̳-y(CNء~&o¨ g렒;d,-!jύQb;'zb#GhM[͈G`!w1޵R7ee ΍A'ںvT1hVWB\)7ti:1olLe"/nUj17ʜ0loZfuȝhFoK%A|,Y*%9/f\0bXN;gfGU,O$2(| r|Ŏ 'h=l9m$w$^Uɔ:ykP,^`vQK$-15K5}z5 Q\[\w30^sKbnpP h%30HLş{m1]ͼ3tұX2ვΖ%{Rpgl9m՛%rL*8862]Y576F.&S_AY1e 5`]b$ qc":oOBRr\@}| $\Ef:XDtkbp:P0{"ߜޏwE .0e/ \!_z9 do(+dJ'υ iT#Ή|YrT~*U sC,7Tn'>.M0b侤!Bϑ2֖T\k-=j`a:: (E;+#9x}ֽg?n ؅IS[; G>[h&NdWG2.T~ʈ=My:5$.Z:PjeF%{CƗ;͟ӈ>g@#AKhkjo_KO‘^cP^X)1\[` 㧦=!z?2u%kgf>*d' o2eլfDP dyn~%RY9x.lWQ#-%4,HֶI5'DcHނjݐGqJ$9y{"mW}Ju]ۂ)ߟw\,0R d̘t (U{ )@6_T$,bb1e* El*xG/Ć'.9-.;v6f4̏|U5T 7!ZVN_:䱍M0W1cs'>\J @"BBތÕف d$ i^R؂Ab\V=ž(Fp&Zirq0YytSx|?d jN9ْPTA 4R\„&'Y\XG2O-}wH!)!n}/MFm 4-F"<{.;ߺ xp?A(!7h:82[~qy(:z+(|nu9 IWo zLp ok\+Rܾ?o -wg>Q>}J߶pP5-5_m JʉOnqY¨&?yͣ@^:o~Rd"OK hpyOto/0OfVT ۙpSNyr,gY|?-Ԟ\ [ʶmY0oƞ`O14aYc@чS\/h FG#ܕ<K "YFh@jr)pR=$gB[UH[A . C$ GbZΪaJ$07)Q|,% nW.keoPm w`Ux@Ewp,)P7O W7AJQR6HE"K2}j ձ<" b Q2Kܝ,@>aaVċ; *;,Grj'=I o;qm͎"1n2zǚD(" سP/Eqƞg5j.~b4+FqPދ^[* 8`Nu\|^i·Z,OVTB>=U'"X '~;t_*R#x29ħ@8f XY<<խXZ^Я E O 槔;z#`[='>J(}2Aa+$q`wuqp88'L6d,: 6N3`cC 9x.ܽQd;qdЧkh ru7ԏJ\B ]49!ХOӈctTIb:@@V$,'ro)Q <K"Y`IUX d~[o3QX=2kR,j9dZ&LC'/WXf%BIk4%=|^xF'hn[!/[38bLf ^UCPb`5qX<'ݘ,&5`w3b.y$)Є-|9G(=fZ\řl@C VrPr/ Ɩ&q+ZhqIdٟ /2}QYJSyh܍߶|C1 q3KfFm8ehnC.#gކH~!C p'm5 ƕ 'xM}+wmr/9׃S/6͸X8# &-GuĜu-8w?OY8L_U(dpՕU"~1DY%8B2~#מ5NۯzMɈ᳅_ 3WsjZic6ƽYlb3y 34N O_K6lfx^K B@lkqGtY CD!A:mF'jQ}*fŗ+1L< nnFs>wǑ՗0xtK`_M{ xš'`0p ~TzٱCCâڀa?Ϳhy))T~"I`r;GsoR0xsB #b &R1ri;..#Obn `-c+L[c ?Z?Kʧ|ZKdΨ7<`L*3[KaQDoxbKWjsl1 t =b_wvSőwn4x4keibl Pk&֚ !kxշ~NM)͒Qe9 sD/^LxxΈ6cnN%)$ dW4=+I-ᬢoT:n#eJ(S)fx")ճ*n1#UPJf1_}^-֧ԴfYn'gzdW&:4)X+kF CCupv Te%^|ξuo01EI_\IAoL2A uDZLd6h_v[;Mv(?eW>&Bw."JfSO2U=Y-%ɯ0"?%o L=zz i9:kIο$ޔ۷0 FvcL<;01N'H|(k0Ox9N1γr` Q z _PZ* Y|^{jUbCtNjkcd8T1]j[ K&ZA@'YaYNqZCtjҶ 3>Fs}il5#850r$ ֒n\!Y" G̅ǘ@1a+ q?\/jpT-gH6QF\bPJ2_z؋H dnFzAe"2ZjkD6&RVeȖj]1*MT[Rx}g@cj4DN5mQ[ j 8RV+#i sS,!Tҹ=ͽ^EҞq@̉{T_xLBɛIHلaCnsٸ0nYCqn,K:` `}O#5a@ܭ Lv,<91ޒC9yHTdP(Ċ1D?/kN^p`q>XD5ZiE'ڶRu|>JJQVpuPq0YTc#Q9[565R^}k)Ą-7H^ Ky^:LtJdyHjf;sj2Β!{OJn+@kԈSq}k$ mMr}ٛ#,"m#ى'j=3 A4%}*H#"kjL:_v댆E:[qAwn#W<9?ʓ-e =W2e| xxt [)5&L`XwL}Lzo2sE=9[KҋdFafv \vrhNͲŇ7[ro ӻ⒍9j缔0Յ #9\Ј4Z1hAEwY (7$hJ,8Hu0Wan`&!M6,t  5&/q-89 ~tdA}q^"r&5M9=WL`φvQ՘K \PJz6.HXcY%rH[23`ZY\  !vfif-MN߫`Xo[[A(9Л1 ["+ &Ar(8yq`Js=ɠ[i>L=~ g:paNV!M>ÎeGL5W(jefHǞ:^`|lT5÷0[JSSCU64MyS܂Q֐NB^( Dť`-)ha앶!COUf ypdQ+6 @xo͌f}T^3Rh[i\gcj23X=N} r`L,a'zy=Yc=J1d蹰UC~j&t =`J%p8u+bG,5Gٖ( W-TIA*]g}XAjưv*dѦ3EL\[Ѵk2%u[byo&} ću!Gx\i$3v ?n/8 +f%Zg^X"U[@1)' f~\` Fu`nšei"}kٷg꺊TXBa6]DHlSXj@`g/66qo:6xT~f%D5ЙLuO+Vªt^p=n'T]Ʒy[0W̺D LT y^=L>\ps%]>@}%M-2HX }7RվNhj$y-   P͌! _#Os&Sf"n`3EZ00P|i ,wW8~utDN3&0M?,θ^ CGi)Ƹ^Tla8!=7+TMiMݚ> LE'nF^A 'pׄ78vC~T (1LG65Q d$R+jX\/gBx)&/;jwtYf@_ANG⽈)ը.Po9gkߙll,wd*U?.zFR@=WretwR;Qr2|& [!{Zբv&Lp,EE0na,Ca9ӆT%_3@E^H(d!Oݽ0vǵ(ҔLV6:$@'i^ȑ̡b2#D{7LLO]^C?XU./"_Y?0nّq؄guDϛϡLlAkI9e;nMSZٔAsH㠴{2ve}i]7 aΧ#>1VB2rȺ$&" T/Vv7~umhU'qIŤ(~-^y M%uۚŎ@`AϪ"+pu_) &SEc]R <3#e߁cr!¥EC2ZgͪTNjr,?R8й(eOgo n=엄dvXVv>ӭ9&)%ll8g0R[?c4m.D| Ň.dl /5DO$N q3m ''v?kE;!^y,H رLkmq<&ΖͽΜ=+͌ h d?֧SjrN%0&;trG٪t5+'f̃PBha2 SZlw(ԘXV1[4k/L0_ U l9nfk.'UR;IţI*U*~`$NuDž۰Cl*Iq+ ƭ2U`عhd ;<&mi]6qW3׮m*KWN ֽ`'d'oDyѭZC:dqYA8QP E;vfJR&=zX@[O<_c g'+:+ +{m=| o]WsTaA]ʐm7mFU\7 >;aiUqq5Ws6-•ڄw[x$~pǥcF}reՕg +(i0e1mRX.!i;U ՝Ҁ7Ͻcs;~wns m [vwNĖUPch;'|VR  @D|iJF&V?0)/jEZ}-|9pJk=]0}MpL082l'ec0wK)- ё{4f(~M,d~j :B%Yёyxxea6Gg{2ӤBHbi d0"|JXo`kש%ٲ$k*;Ӵ[1sHВqD8Og`ဵ@h=|x3ikf$;Ϥ!rD0܅&9]$|~jq} gf㬙ϚxBhz~׭LyF$҉3~% K za:A-i#ܪrzt&d.Q_=˦d? CCv+D{fFJ=_nVzC}W"(ebtl0c8[6̓͊tD՚8K)EEv1=!8}r8a{bMm^T"yK oZ$ʨH_ UI/Xcdu>#Yp5k$Ey%Y ]]LO5+`4Y Q~'~9lq.wEd0{86+68E Afʐ}٥ʄ1(`aWH4Rң1~Oc*y&=ؽmjUt  hhhC O5ف4D~}Hk#r,af z%CpH["*q:l5L7A#8MrhK!q*zl e)`Cο7{rQZ  ;@4x^^5% !@lsLP.ޘFn[R,;2XR]=(Cfs#6R1՛mJ1 დN OO=o_Hy4YxE J-[EWK2O0l%V8T-, р{)R9g>PYZ$jw4'޿RmI"qu#I5k.<ޠj,~o#i+-t\KYy L$ R`xm!DFXehe/QR[żJ<@!rkBĺ0(D(W̭ho _B a4Ij]Oq>[/"_twŧɈ6Q(lA 5WoD@2v! & \Lp6SAq|X$J_{/wX:U_R)@Iceup&g6&EX`kto&zeYEs X0E>t]n@XpoY!Y3iw2";oĶԢ |gbF_yzLX[8E5(9IĹ_V[k?~5@DuHkJ_"n䕛tM>fZ|9\5Y‰M\B0Z1Ҕ,AU%MJa<[BeָXM&(.)Dچ{F k5s!+J ,SPDt Q%~vL`\!p*V[ Hk :/V8!ɨVqN~*&6*ס!O^*{?.ǴPS'H.?R^wZpI--jWNv^l8[KT9z%s,3CO|m$!nRlXcheRB&c艤d>ȁk颅hZ>)f~ ´W>4R!*cs68DqS{ {w_f %XLA y RK/k4}EdQAR Joh_(SoqT鍽 3 n_>[ѴĢ!?lڳ{UheF$y¿ԀsމžYרּ[&ڥT%-r"J8)lKA "joIȯMq⍃wVə `7 (36䰗| O]LsCj XY gdU`>avk/!$=m~7ށV{Ub>v1Ss_FV6#(2fh/+Ʋ`7VcRuI5~j]/cvN{so w8~IQY`׀&K!QJP n;L})8zk{g 3 xB9\_:J*#]ɩ,ѭ҃7%U^I"maxl2y^gk eU9^Pzv`zJ:,_JdbU9Û`YF6M| ]zo1yҥ*N{iA<} xO6}O.箋ʘ"n^IGe%}P[[.4{Xʞ'CiF,8ݩ8Iq~5;<-Kq;F+lj[ߌN_HRɢ,eש¬RqD ZA|>iDX2;Ae/I9gGͧ/rNhrkn2e 7i@w8^sW>2DrJ[a,Ef0 C 6AP8ZA mf=3ef) Ô kS8D8V +Ŏ(vԔf G@s[iT L1z!~輁ͪRXΐVt:cd̒<+HX45{4v]M0 R0NxnFNVɷ4ThULƑ߉bS`RJ񵁵~ 3Ӏ^nACD֭Ei/xNExx[^}to_1Z Ȅз/x,b 0te$޼0gm;:jjYk+dhPB᥯,LLhw.X92,|ga!?tGq?p33ي/>)v$Sτ<̎^id/}jòg/4zi&-j0kp cmoaT͖"զCU#lzo1VŌFr#?}U79r»tk tTlJmyW(Vx+@Afl0WGB8BXQzscci1cujHS|_1#w얂dNm>bD( xBcMī8m]7L4"^VBv>QiXR:bj/HxW},#CAl;',O)E:NaPpiz‹1BU8/`Z~߽+ q̄ [[3[fyP?$oU3c$WzmzsБ-ŢDlQ&3+ QѝįBxYBCu|lmxlPJ{gdƻZ}K͋Zd_AG ;iҘ/[>^x"z ),>WD o̓G?IB<ÙO'֦ aE{ [DפW1kB-'ԨOm^7}g` -0 #mk^2S-`Up~"6g+n6x7S`ژR'X`KTq.[Ҏf" h-b?AkˌMQThqt1N[ϔMZMAdx/Cu+uꦌՃ(tRI(H\We9 _3zې¹ 7b$&0*EAB s#^IG`ؾF19 iG-vئkV[- oj, _0:;@JZ4W'z8Tժ~AKppVEQjJTzfL@W.ŘN1"#~;<1osX@jpbxh!1hbcOn@5_įf u6x +aF,P5Z߫vΑOn!]x< b#̼Bf pԟj)l廫[;&CL}D>!vEIt3vn͎v Idft<~՗Qe5έK9/dGȱjի'nEE,|}@-0OG2q{5uDIuxVHVuRjm"rG`lh˃u>Lڬ>ݦP*c_*v l{1CQL*,;Ÿr,78j_LJ <,%k# ,S7K}\ }6`YE(_OT(Jq1G9Ϻ%Xp'kM.((G| olez>fia;.6g+k@ҙ^*8_Cqʨ a5fqǨx't7 >©{2L Y3X{ww[P F5vJb<,$ְ6k>z|:GBkE77&. 'S5M_<.U $ŹbBy,V+mTrzij#kGu#ʛTt 2Z?>=g<&n[f?b+^G]EēőFDܜoCEۍb@ZeWȲF$\ c,ۥ T:*2kZչL(0nCo*:ǷVͳbt,NVP`[YmΏV.LH]9p&l OlZUZ =;3yz&g>g3ɷRMQz=Q#1ZDwZ仇Β[g6"'"j1:9Aff*eM(za/ UHTU{J_²Nu 05O.͂ js&0DfB5Kdِ^iy 5ekG]+'Mq`Y2S@f3Q%=:L=ʄ94:qO\&<V&y<@j(Mdh9({NAh ЈId9b+4MV!l(PgtYg\ s,Q4ߊ4@]"o^nJ./#P(5+M;Ds[г]_qޟj~Yb҉ Av}El0n3r;H&r^ќr ׮Ž!'@6!Y;pe|ُ,sZ|yݪvՂKj֛k1 ZCOz42 -Z -4mf^?]OgG7h[H4V{G4ovtЩ4V&]1Foy[ܒ ! ~*`B<5{ kU ΩΆ ˥6Rؿ9zeK#3xFO"'SqK& rT.tf;CSyIzOP)M[za5#GHܼ:2-yS$ 2EN*@2 "}"E n@8MIΑt!T7CЇr#\%|3Ž\yM Z٩!~<]"x-yZוwwGsg1 My7U6:((v_5$x/H)ƤUܷJ27ﷄPV"0n ucDveʖ࣐iuBy-9R׾s%Ě*ڰD@C$!A7]#JXeO15#:'ړ%EJgGQb,ekQ6]և(6Z0خݜ2 ӶL9HGو!Qll`g.aj' n"M'x.r~ఋk"=G>.g_rUUf3cbC?36gܖq'E)hрJxX2BvϠeO/Z[Okq4U'3z '+05"oHݺx2aUqY:.s-UyU vrtf/kG FUsҙeM Dur'ݢh8T+ꓮ!.ͼg3_9c7f:'{$;C҉ш$!84jB%W]67E-O#qNF.`B=C%-BZԷB1(^ /hʐqEQv?{Lj=;0T0zkčgqnGf ,J72V vL5=x8K2E}'ŀԵҝdCQݝӳߎIAܒKrA4}?P2^cC R{_Ap=^]$\.JqueV߾œ];0У!&XIb6hZs^H%1|n>J] HZqOt"Ԅ N"hv(!\E0v aYԅ'=]U%Z5 ފϻPTwN%6ߟmwuF#r@G (zga|$8T]钮LC?\Tmd$'yt"!7D@aпLɮh?;I&]_ĝe1j(NoZw~xGn n]mbVBx|#5Xr$5Jp&ZyF0#n/%C/H1_oh ЬZqK^^7kųT 0UrNԁU`t76  pB' /O{.R2  fCd*8š|G'jidw^6s\^[t s PjRgf=oܴˤyq#BY&8ɽڧK,BѭD5 8°<@>b'mA?g9k t|Js10?n`tK2֕01}s ==ӘxX6Z- &-XSRg&")_S4ٰ<ϡPZT)Gb ]S9;AI.!q+\Au,HK,Vb|L iAya;7Z"s~n!~HypӍP-DFLGaRAE3*1==qベtyh-Bi`(0,(boE%lW̻V _}6_KjH!Y\9&j ;'%^Q@S?xi+AԷ-Gb垪H#ZI]zj&A-G+vmNq˘7uDDL:#SמǮ!^MT˛v烝$Wq#Hcz 4ʪvYE>XqʌNiPGc֠' aqxE)˭L{2uzjC@`u*2&5=?:ne_=rP,]FVchx{)5BW.2>FP=Dֶ/8 c٨5٠ILx&Yvl CvMo᭻sslZD!Ħ;3~\`@ߢ@jQ0/99P D4!nXlLwe 7(䔾5pWxC]D2ހԬ C=,=5\2?n]ߋDZ%@u#wBOY, LVih/7iz[=q;͌XZzaCK#Xzb@q+@S8XS+7G߫}$J!rQ~3G??:1wJEQ5W4m +/qإQY@Ƥy!/xV! zI,ڰ);Pfw fCwt-5!Ǒ?wjpng>)p} )wBVڨq~ҖzhcqVqCCFbϮĿ۬v272%c :EP>+Xߖ%ֲ8(hCor~5}iU{GdFDlWV@9 OgKTHޟ9O"`~~nAW#F;TŖ*փJ#|= |>)E#J' /\v{.hػ~K5q97!ae5߭vr" $2Vٳ`5O/@ÈiY{^_Rqp*w_;m +p o8'HDɑLeaWj Ė4Vna;|ʚ^h:pX~vJb5CJGD8s^nc; .hd[ZE:!?ص"ŗW› Y{;NQvp-7}:,^ka#k~&PQ^yZZa܊7>}Tj`mKmQn-yva-=a_hpi YK+dTeGm@w F XnD-}p7f.싘Aǁ @(ᔃcv u/+ t$ØbaPJ*(taa=pšVCs^=/1>h]g# N%flܟAG*{kGgxw-P>%xR6.pCS"Iێ È! 뉶T-j^;!2H{ޛKiFK@+>9VQU + ҃o, ȉ8I5oI]~69+"lL6i[\J5HfGO"MrfYA\lL /j;*~|_ T  lM 0c_&B ʋ7S4V%a 239gu0kr2PU+=5:j h:zOf~嶏/SdX̮<^؇UlуM9ۙuegy1MBtq>.@s.OCqwr{>˵@:QKIQhXSnhs,-L܈N&tBdeőU{E:̀q}CCفPzIrO^ C|=wQ\g~ myz `Yq 5tLEP 'T:alGApoȢXZ_#ڧNFeczdMWjy'ȍC&-ZQq2@h7\}₼.2^hs yd7{<+=2HkZ_@V2!`gnIOqv\ B)o'ERJѻMU*/+O;r`gJ՛B6ɣy,Sk#a>^v2I@?[bwf$s|m\Je^6CSe,I]3@J B'H.@c uыk&~ 7FS++j 8s?4K%T%\l@[ k>6+ M/ Qa݊-AޗiS#/#VM*c6%AЃ#8U|wF{!X%Ja*Q> PZ. ,ˈ9#A-q .onN,sk. S ։m_DX@K,CNhQ¬:KP|>^,tܕEsuu9k0Pd]Vrr SثY- PCg!DoKL_ \!J:X/q<'uu+ *_@l7= ʐq ?3Ug`v^Q0k@$G ] Gug j}$RNб~f6w=w|7\+݁s&G^Q$%%_ygl*܋QI=DgX놤]o'M~)N*^*(men'zxp'p"iڥKyt>? UQ6 uY 爋SNz6˜Mϒd&^_5tgaKR=Ze:=Y:Nih!E6(5d; ɖdCqم #yp5;#_6Q. u|OAʹ σ,`o+L%Z%llFl!yPPGFMSf%A !( Qǫ7LBR8+bdj1KD?-ӻJbq^~ZXryC#2Ɓ5Do$VTI?s!Ă̈́n1g(gTĒz`F`u(_hIȹүp\}<0.s4J xyIȘE ^ ߞώ.;+'D95j3^FHs k}#[0Ґ^:GjL\$ѝ Z\r JC%XdN9 |; O.29l}~%G+ڰ8S muU1pWO*!$Ƀ$c XMJGEbsa-?~w $ %j@7mDsvR|"Q˗~1$ڤKnY +V92'I܁$yahVdx)7X{rtT~2kF3.1c8&A񡸣NPJieECՂܣ1$H Kɾx5_<%aE`AmR3$6bkpY6E&/$Hcy!Ꙭe3[pVeYay;{V3%( H$8(A8(m9=U/1a}5E!wZ*in!)o w6>O1fw=ƅz..|ߑ#gVt KnGE -P&McCuỨ՜ iM@fp҇ЋTt)%B \'nb.%u&Y! RuM/D$7:ч:#[Iy䳋aA=?K`cI0 24춖tS7Xfl⑾HBFu>~"ĺ Ǔqw1V lwH?ij~nC cm:F=ysa h5f\c?{W{CWM~R5=ct 8Da~b=v`Uyx~VͶW~0|;-pdݪ)n?|tNvC t"[DL)&B~VFLɉylqdDV\[f]zO!!,4H2~[qе} d6#ztdYY ROBsf~!pU\5uJ .7va&Ef3pړ5NnҶX 9+Bf'cQ!,j+=x2sxE J,<Q@?*ÉbAS'DU$iHY>.!vT'SjM>u>Қx.ў3a0;"]8a-#" [cS/YGXp&s#tuN!eBCWd 5˚Al쮚c; FR#Ef2 +ICtg>yz H皗 ڣ쑍>3$C*UXl|Xcx_<GII˱ߛt?, h%8uh8b]JIrE(@7ïE.]Ƥu鏤ˏus~CplmKTXMlm#U7YYjDքhU~3낤Klk}GR#-Y%n l;!tQjn\M?[qHKҤ%f'cLKD3{ڎLXfw@[z@=dѭ9i .#h}L^s@"5:fU 0G4*'L~Q3\`)඘5Өqo&&W$Ǘw;-{=W {Vi#chq⬒:E2q@H5WGPBűJiCiv-.>C凯o(nRyɌu>w !TlSn67X9ebxnr!Qʣu?l~DBoHd [ڲْH7zXЏ7DxgFl- 泊>BUV~455[gȉ?h )oq\ZL5 s.+ lX(.j!j3);xʫAx-+azylJ^jG^w(֯ 3˶A.g9hggRh9 $ ֏-Ի!mT…2Pda~נ.+; K4+b[";Ь\5/0z*͏lmS>2H g[Բtu33 A,xRP\2JE 4ƞ]܏E9s݄ɃvPXK\b%tP9HԡZJ|Z:w.?Vzp]GyZֈ@ $!Ǹ<%(sȺ+dF [T m\iBɾhз7$[Dc4:. 0;q-'R$K&;RCEJXlj St@0I>g4q SvޕUcwbxv!Df`cWyGQg:c+ 4!A:nYC,%(U9Yk@;ⓗxe)\5O+Y5vHHrRyq&ϡf"=D? h%Tw,f5 凾C9oiYN-K69-{kBQ8~ʇ0Ֆ)OA׮7WU$ٵ8öAEms!l b=BN8{|<}qk;uڞjyR=V3&[)6b49[VeBIaz흷)7?m<|D(:ӌVum4PC3<,!cl ~1 pW'cda)%cdۗS@eA$ItOTgݙRyB:Bv*&mOMYE!!jޤֹ zo0H(qn&?ez~ ~-!FƳdmv$[>"7G[ ,D(wssR]2iT]Ea|Fr|C1E{#?7u)Xn - S2.>}Ǐ9d']AU\(Sbr[33$ѕîRcS 7$[ƔG>&VGkLQ>%#V:#Z4{#%$b%dj,Uk.cR2fd|nvvMAd8>vw2n F0ǫs6sCq-ZzlZ0bBɈzF^8Չ#C8(I BL>9_%T&uezLZ;y[eDH:@,fe)fWn;ء Io@oܸ~`N1d_NЦ4 9,sfa=C?n=5chG@6c;uŁ^b^K,֣UB׀lzÏ|,")| T) #LָQ 徉X_OB+e~FʼnSu:6m޳Q+")@q!xĀ_P ֤@pcխdɃ7@q?# 7iNR.{*ԇr#D1nٰ\(&1g^=po^>9Z M~4G[`|MM"0 _!EؓNiZXĎ*"pn&yP~R)VzBUrY(oդo!T 4JFuBOZ"3-ed iQ$>z ʃB@^$oPC6Y 4O2gca`ށf 9` ?^y Qwdኒ%c̢(,N ɴI,O;Er9B-XGЕ7^*({22NATv'cISDr"#̚0Wyms8Z*O[O^0U5MO«+Dhq3ckP2(3+ZoZ\{RP&Rg`I˫ٯWK^ AU |'z%X,u'%F[jAGB"ijݎߗhs Sb;|m:*OWH%) Ќ"]̺;"xMM)CZ(֣O*zT8,yp@c7V F^FAi޳qg6>!i,8`*bos04_/(E)% A26[ 1\i"NeџNcjBK9, X/t1C59`Z3,Z`b:s8ju|NU˻@S׋/ŸtadR|gŮ.BTo}BhmPP؟p3DT59޼7/+#k[mE'9Bb:nVB_JJV+bU`o~ݿ6xPEBf5KV-lnE ~; lMcFX9=y(uV!e[{[A\L۞W`F$\dT1ZwVƬ$+G|[@CUS`+PfFV=+fG\[⃓nn,9Dގ@8Xu9nvra]EHz?E nrmMZ(m`J8.*b/nM.PN.@pIJl%O;2>f6}`P ~-ܟlk B0͢s gwscEXEdAC`a$Ȧ&O܅X$ȍ ęXecA=`K̦x2{צv`H#a":<_gh3]kR;găX iKcwT(rU'#k %R4T=w)Pe5mf)΄'ظi/Q={G2rgMG6=] y%ڙ0`xr*_? kjoibTgP]IӂL⚅ GKks]چLQ(Rq B ?7|"KӋ|vZ~<_gjKF"(wڮ(sTd5Z/.xBDe+"μόrPNn/ʱfa%gΡDӂ @U蜈 ϭz򤘺`Z.v Xȝv9-dze i6N .  ?)G`+}W^we @*{{;+k$Ypˈt 古Sm#r{~ Э}V_Mc5ڴ"em |X.WD0 @~ ɀDUTљ#+|j,o+ZBkT]I6O4-' m{GlftPs#<[ZΜ(mzk8;:yGŸ:?  Hrα 4FؓIkBk7ߗb$>EHkwP[57AWKM셕i蜿Nl=[CLK< TwgC~07̳fV OYbW6_2Cdi,G׹=emsox%H4L<@N t efDsԨrUE.CP_ YǩNg.bXРuQt/l-j~ >d]mj,.TAu6h*'+%NI"p5u昍&qs]6Dӧ$Hg 0W֑`IW0v"@~*?TGVB:)%˪b '^(s5B ù ۜTN>=Q$MC)=yɊxp QSˆ gk2WeĥRWERWYᘞ>k͏*0E&Avpˑߎ]BQ; xeIyd׹785tϑq7m c?XhB&_Lf* ? IE'~lӚB*'2HVv.iURn8S~C";e'TD"p3}VU x;~89 L -Js3}r |eIvEF b_~ Z!R"&ҞEh#晌sc񦳆}'ъnx7'I$iC͡bߝe:'W#P`IOz&s3fuQ Ӎ]"0e^r`).04m@R&b0`n !8_&sY{fmLрN5tjܝCV F?Tv[M`Uz?k,tΪ߲k4J$dخ "okžx7aE"R QlQF+ƹC1c|A(CSpT?^PFV28Lh7=W<=uX*I/sG,rPT.֑۾6dÎWK75Wsi =,׵/jQSʴ=ϐFk UKo~ ak[húkfHG[FU* v~8j*NXw| gn~.K֙CC| H^XXwq '7waGve)lq}ӱL1o{7!4)'7P.8g,F>ߠ E = J$ϙʝ Wgov/pǮ4nwDNHLk;>I3by},j{rr$txlFt^m|r{> w(6Dԟ $45&9M9VĮ}*4H ZŶ4GT`X.՟=$P{ygrVӡ<%Kn%HTѧ6wW=,M^c_ڄ eL퍡tH"!/r{f 'aqyy5`$!E Ʃ'᫪s9PDRuJ1Yޚ9!Wl:Hݛ<5/g/8V֘+ ՔA2d ޶&yw\-he.œKA4 AX(Ety c3Uf7$ U&/ic;Ù7,Jtl;bqk#3: Q= ~)@W\mM NS4wkfY2_^gm!{-!T %Tq/Xg6z@\n!>br<9@=h. KtmZ YvB].rBOpt Rfxt&甍NFdݧ]߃d؜Ċ]uܑ.j#wlO+>NxpO^we?B:J#aziBd+bg7p"@ _.FzL/ו廟ORxt \oa P޴O#?^8 @<7)VMo3apPN8[ʲzvq"}EݤnM}坎>J·4tƢiw`'`2$?rlH aU!͙׬٪_zHgU8u} ݆hb8gnN/˂s+2_a{blaLop@s6 Ȉw&x@bspFnN1ȵ}ܰ8۩ J? PS殗'Q\.EF dxWT E3#hBXq-Z3Զ[pB%h+ۍz GI4v8*y,&y (Pv NP8 }xo^`oԅgZZ--T[fW1WLjKSpXU?s?6&Wtqs2h .y՜t!\}¤d ~Q@sTC`23=k--I5`I,v#82" ߩ+BpV9;A1-#9xmRӥ-Ex>vAL BȜ^DyuD1\oEnf%.jҾ|!/@.uesojS04DN23>xcva%:?47>|{' ,zƫm43o"6'tjUhbi= ,D(2>!%uҳ{@p i{/.%kP`{-: (_RdgA7Ӭ:86z>Ǐ6~ $ Sf=#'B0 3q`!P(O＠mogohϬt+svP4+/QR3٠i`.6*PZ ye&aQwb%zx\DԤ1nFִr,g[Hຕ 34NrF;r!+)=.v/yOm- fv)<x5SxDӼFazi_z}k,wP2K:Uz"x- 0wp(jE ZlQCeR?dFkIx=Toj)dXԣs3IJ-å )Ӹ3lĝ|gDe3r| I&}qNtߛ򋕉[p8'O!\%l (w y4\ض)U*Ȫў m$/kR]QKGȣ 8\6TYt6*F) 9 >L_6}p-= 4Q=2g:r>K _ 6&`+4kj spV^ \o /!Θ,^vT4ϵ'hIE_zٵOLc|5 m7pu‹$mri)]ayk*ȃf>U^b%f.f.c#itwWe\((dB1#I|M_LDG_8Tb2$<-1 g<+iAJn#/p̾ЉC+!"7a ܝc8M=7!!.nc,z%'|z'Qc W:\|̱Rł?=7mWxrEن4o$ndhbQ/D1ZqvE<`چN>©sY{8";ԗBYB0^j_5KYx Maz>8[ԽgÜH7 AnS3;uh* pc|EN{| i9Z4`1MVf_*kB4e; h^<ق"Enr2s)W|W5[>/ v0 dO8m MZ\vsQ/5 !dA3{A55ub D}f7hl[4 W.ks^eѨίtZ@|e$ q8!3<:qf,jʇW ˻[{߄=Ӿ-apWS_Fݩ;WŐ-> 9Vg喇{'z+$}v M*t9fѱ6ϝF5M%JO5rG'<9(oty|H{C }!F`nٚL>t(J5S}WZ s9{iFϺG.{t,P{o]/ۑ/9yuuܒ־HV1ȓFuD!RLxoއs7X0mӇ~'4BP8<<w:QFu'.S9<5~wv:ipE{ !>t>w'EuBѳfv Gx{fݠk` /rEՌ_e- hHNϺ *\0-U&`oQ?XZƘ2Ҩ;Y#]+eN,Զ 5>BIUzFt.=ņX_ ܻq I=DoLoۨx"UQ &{#k:_{;@iY&%2W=g&MAeŃƺ:2`Y[kkxg]& ,_7Ey=+8v\,3NTݶ=d#9NUm z1NJJ{k`ַxqzg2kHD{6XRA;v{j.洡P)3TekF.D@aB4 `&BdIIjELCpR)#/YStJʽ/Bg54)-6![&V'QMu+I;L!1옪8Aץ]hˁ}<@n{}G*K ( aMΜH(G,N4Ϳ2:.Y\z\'xq|ѧvc&TG0.NWFqIDNXK"qXa :==N\,u= KF0\F݁m,sX{rzqDvO̭2i?3E=1Ǵ9W5Ks6mCgdw" t;1i_"tFSM}?f +1`eG|:$i] s?Gq3imMbFKi|:5TޠNEj7"(lxܶQiCfİ,ު31*h5$C5V)FZ$]:dfM'*aLww[k"LZZ\j F#qvyXX.bpU0 R1R +!7XLc#&Mq] Yw<9تڻ ,1qL<%~dҿBγg[o[0s՜g:vS}7H$ddW@Or^>Vw'ʃ䧝mBmU 0j ׄ愣  {4doBN-Sk|_S+*JaMHU{⇪)ob ki0PѺZrlUd!E.Tn:TzEq6OB`ѢsFTXفHG_%D#њgA8+rb8+4ij~J8c7ylsUmXmr^LFOW|T7]:9',I퀵&p5 EO)ʯ[UVL B xTx?r^bROl^2(lr^jq~W?v@gL!l[%,I7c{p5՛p|bc$~T~XnlCی7jؑPV%!^aRӈƁ(a}:)(!эIB!M'EB[n FG꽄)F'X8P캥>~3LMfFR9ՑzCb?ﶡԭ눘X8sHߜ>{/ Eb8k뜶]+ܣ7=3S.]BET1 4C${*4!jVlq{NɻQAf #84t5 l+zt*mE&UH CfJIzsO)pd{3X~"Y)"pm07p9BqȖ*$h})2Ve3rafR(6`3QƢ.{okA,fxޱ.Hup7uɿw3Q{_<*rT8 Y흡ejߌa;+,]-q7!{^2`py ێyR˦r> jh{8 :&쭾MYgN}V$u r_:`GYV!.GۼW0&Pno3m0b '%`'9{-K-@FF[ D϶\9d_sN4urj;G]Z[{3acSw[KXCп1n}]\w=R`(NH+G4SaVapHOz1ihTqAkq'ƶDADRsP y\77*bDµCVHk`yhu=j%W݅J|0C\^Ӝl("y56f01~{I'Pb$P9B{4YtPUqm(5g[\̧$ O3RH6uׁx톬Swŗkc"qAB#xL*?_H^٪CSd{<`$Y8I Ys,{HJ!XkYgP-*ٚXZ5V؆eWNy" WG@J5L*HG֞ P6߮C,J\}: TXԼ m1ܜo Z-%5ue 0nSګxXk&yN4nidoh^TI|#+ŒO"!ksOWZX3ѥn *8Ds\y1re.$~Mktfk|_3(ԬĽ0c1(lN;} 22oQY7P&v A\ɄHʞ֛fC zL 9AJ2D#tniL-ZeELcE (YB^BٹCA1osmt (SR 'LلsH bXsM@: ]A<AphLNz9 Y}lu(z$-: ^bŲ93]J'x ^|}j^s_ϥ4QN_?$F!S2Xp1܎$Lg&C7e:/ 6#p0?_S giAZՏh=c!!쉹Z Ĺ+&ҳ N?le+b3Xgd ^y㿃ή_]?JN.4"F'+Ӡ3(1|Tw*O_ݙm?sj+ARHWɈR|df`,5 ǂt|D8:ets)PfEel#Fk-)[6RpU #Qhcnw:b{UZNQ򚢘N!&(hן|zTqv@|8ը KbZnb.U7 )frLJt.9XQ:5,K{"''2T41Y<YIYgi}bR'Y{k+3%se{C_>*d>F̒V-}|;@@ T$Oo3 #&2+4=?"@ەZWV16,|'7A(~ݝBA "O3 '/vrYf*\:e<.'2z Z!w I؈aܪoi>=6CF:Z*bf+~f{93@nԉuajJ@nO;BGxtgdC5x!`p-5{4ZPtTN@T*[ټ si@4oIE8V,]1JOT*s7=2Q3w}| / ! N1% <ʹxm:0ajHpIwy KDC+13Km9 AXb][20;du|&zgڰ9õOp+i4&*%KY;vitAT!rh8+PUMʊN0*{Z=&U\T[p0kS;3ظ5siN#!jH5|;)zoiĩ0_8oKLlq^乹H)16)ʁ+h9㎬ jd=&D !5GacT[vUN=W)_dk_ $@Y4)!)m@M wN/<&w0rpy3$ H+D7{EMH|h7glJ-U?Y[ *d NfqwؚeW9=bZq 㵐Z [2o2ۧTҰa8FX@!~HV%r'ct{A@BOR갉Jl@uQ$Xg+>Ƴ'b?CVd(sL,{m6>$o턏d>7TW7pk;~iSpvdA & s` ZGJ Q# 1GZ=:Pg6 TTx0UjйLÈAO矏KcI#^Ӈmlم>T" ++`{g2d&ݴO۔T:7.}\ޔr$kDIlP{C #U<4"r3qe'L_!쵶L + Qއʺ~S $+~ԜtFʩ~9ً'`9͝U+ РI|Y5H[|b[ 4'%=RNT3=c68Km ~o#ߺp򛵼Lj֐l>!Ly"K*h*SeDr2)ڒUH jAʡ|ڞN8e9d"H &D|P A_m_@8jd-]6#(ըfQ6{3\^x Jm~)5/zq7[辬|#Wpac ><0œϰM FH\ѪLj9|oy |l#>V{`0 )QriEZuHZurs$nG4"6CPeD#`>*;*y\i FΑ |88Qa݅?ti+6:}(D=WȲt05i$ \Uiߒ\Ii$B;Cߍgj`yij*o2 Ȯ8NPvo{?/j-Nb^ƍu^RŘ>MY:Wܢ|[Ψ-\%8 H/O! :`OݘKIS@~@N"tP!sp,wﱌ\H@/Tpw̖Mdd/ (|. Y5(kb,)t7&Eab3Þ'm*'M Cs-[7ȳ8OY%*۱S1;YYڟk+D@:k׌xոz'd&d=ndT*IB!CB:4U$ϗAkC TKɸw&jȀ+ݼ6W2fq#G8I?57L8٘aJ0곷TlɉC!5l}/ `h IE+:[)ԊLB,]3ĸr2x .A)4&9[lUrџXҷᡅ8g2م`bX|fS< Y3}H=ruuy9;gd_%=>.D-DX)Q rQV8FZLbZЁ-9t!Lm}JsJv}7M_#gGltAE#I.0>>(d 㝧)Ë{2佽:H!i-:%(%rX2HY.?ĈI?T1b2o ]v-8湬"+#š8`Up iq'!؁ކfr@5DN*4- ,Dn8D^N-FyJ ԸFφksqܤz1/-?5Z"5cZArt,hN =O,A$cm թy-HekwwQ+K9P?brU7\CjlIuG=ܒB¹Rpǧ6mKL0ab^D?*Ϭv_sE*_x $L CRa0Ge1+kOӂ.gwyB>*vP2)'ttK%:(=EmseVĪ`}gZE7ca s 7}Э98.C-eJ->fL%Ӫ}uC!]Ǯ4WcTo0zyN=vf,PUZAtӮg -(dMܔ<$vA&4X:L/b|`sβǀrW0+&M໱**Sv1:KcmWIo_8tdäb 0n`HWjpM&9bT771En=‚H}Ā2ux .hYEL6脜4PȨW{zl 9Х2 "qENέ4EXZ-&`~&^0FUNy ~c1TQx.a}%3 AE3a!EB3s@?#fF5U >'=Oqp8Q*q_\F~v@w&Fk)1'8}Y-b7vIUBA4rn+G)_I|zA0d eڙwcIZAYTKy p(^|px.ALh lgNgπx"SFM{h7Qֆ%KKLieS;nshEaK(9bec#|X=f.3<lcDJVwآ { X5Dz ʈeQSPq$䝦/1Sb> n\9pxYaȦb)&4"DEcq`ky?$ )дr:U<,Xnj+i7I<}DS QٮF5}>Q5L YԇSN) Ǜ|5pFN#{׳DU<\i]OǴ)m(3ǦeE佲O 26e@ f/E[.xL #M!c& 7c!~*n wSz꫚I| ֤+K{s M]{eV]t P9x8*hHGl^Oc?z06NMɓ\@80|%RV 6ds Ȧ,Kw]ORM;."fhY!wa&8XAjb[~܈sfD#9l 3[4PkYF(LK.L+ ϶00v7L`߾[K"|Z'_k=,>ĨoL0`䄰Gm!aX3).c#ŌŶ.JŮAp,z8\Oe@(06*4"W"_8rOݺD'gCƒ`6;!1B =3/z=U0܈qt@8b^7y$܈gݺOzәom D{qG0v;Q_W1a#R.Ѐ @_,_ 8"3| `wUqG}f[*Rr%< ZNH=6/[^LZ;(8j("ڇ /tzYh-dG&Ί)#J/ѐ.5*(ot9[\dL1m'Y6fe*D&jx}? a߉u ;k'M6&d!Շ'c&7oxTV֖ (HS ޗ6.s-ez?;5'lm;Eh}6#G4R_%k7mLWBxM2^"(vbX/)F)L*/7n@+2.m*_=JLGY!,'^&c%zf/wMk~ɔ0D\VB2G{ӈ5/0h~nI09TNfo}1g4gMnޑsvzIZۑ0 8vXܚrK5SI9eƸz4oCsi/"d7M^Ll- ؾpa0VIZ)qqi%|`J {N_$$l0 J$j nV@ Tuĝ'wh^|HV{;Zo^Ӽ+5noG>ǝkcRN  PWEr|#HB^Go&͏|+ z$S ;̋A|SG8*5- =_~7.,{. ;LוJG na{ xQEj@_tM/P.eU7v|͋6<2-AG6nL#4a"6o"mkq^2_?ҫUP$r^, Xy=fL)'C0Bqk=ƘxQ$ CTv{ i[=VB <  M㍘ Jdڑ` a Fh!x<7 uHKzCʜ!naj2I`tw/:IE)t;,TzǪ 'b!_1u!.,1E9ְOh^]?oZx^s&P_"tRR7͞vg\ZawۡnFV o@|ێh" ,fƱm2 ~- ʯ ƈe<6鎸eCٳ-P`ݎu.-3:D$DNvlDEGwᢐ[𮮿< &=!Ϡ ~4YWߍu0} SpVLB\9߮#kޢ"XecW8U~@AEAd_.hI)Q҆yfd0J 6 \ Sxya=d,HjG醊;0Z[̚Asn@㩙5Fڐ6k#4vD>7ە.G+^d KwaTVһqSNrFo=hKĒ*x>xs)NIjʚd46Plv o8G qc3d,b8tELIV׼Μ 2JU_K}_^ _VW-(3'nq?*Eϧre(B(:JKI ĕ[v‹Wk^sqmR8"d$5,5el?[\x,P7 crsn0r,=񦋡cJ|R #jQ ~أxvBel2 }]4h,2Ǒ{<߈g)ctg\4&~/-|g$.&\ہtVݪƂz}y\⸇їe*ՃH¶mTaV re( "װ7r~ZCϕy}AI f崬Ծ=ጤ{hSEOiF 6隣-˔P\t2ڤU6v3_rR!oqllՉ7c%1K-TPd%[kc{,}2M/0|5/&ivfIWhQ׺)%\bYV wLRƟ]q2}Ŏ& 5087ΔɃDWDѩ^'f +ǽ5),"El)t#uL#7[j/V, L%϶ΐFcj4 G'2*~ }noaP 8U*GN8 [vP @4:kx?%ܸ&d uC{QgJ н=2!+'ny]pBbk[F/4|Z3%Z뀻9sl_Q^'D.S sC+ڦq&-bS@e'd!bv ^mrJ%M*Toy.W}cڡ7дm zfU\cpPzF((?'Ʌ}.29 偼V:TҝHbo-i+{t0sڨMyeQf|'MQqF?qZ#7#o#Y@KL"c˗ 2.p.d~; RC}PZl]̓gݝ&$ePk/q {4wC˩~a &c0 }XUcґZ`2[8Jè._>l"eC]CCȮ-¡JL4jVLuQBq*+ZN$ d> V̐>޿A m׷ ^!jVĿ2yi~ PVAGIO4A%L}fM2}_H@ 8+tJM,h O+0ԖmdĢLZP\tlUG .^$Ze@\Ӎ$əBݠ~bq֠1/Q7qdOx{h,$.x̻tw yaMuh¬̝;BS_Q<& lX,3跱Llꁘ*cܯ4Y.AP@fi&FD9N>'S+@eqz,#́}7M-X:m+}0:.F~%qWW`(~\#Dl.&죥* AZe{U`k *{RC,Zߍ+J(rƎp=euG.إLUN d=,y=n&Gr Yb\JW #I|n#)0,ղ30jl7ukm罣tDo!#~j?Q.ҟSۇH #MV0*'c%w6xhonH vҧ]hC9QV!.pSb8UB/325Kr:% D|9~vD /,""sI'b"LfU2mB4t%P n].c"iE00KH卬lSl$+j̝N 7TZc/?:~Ly&^ZQ o^2(*+RA*sK~˸Ճ|NKj|Wd[1O5T7جyehоz=zʭҬ ;gmW[/ zluF.3uۂ0HfȎ/ ㋺vfk8 ], CW H-N(a$`[؍0^4fRbhϴэ.8_X* v Zz$w|^w(CqOze#ڀGzAYm3<CSUX(vKGxqD )3n'8+T7L0< 96 w81 f9wx@ =޺y,a!$]'8m flG*ݒǯ./:vkCN#27sCOpT&|}p$G]%DIV.p%4 CbpCL9R9cA,-8>BovZ}E#(u40 ( y rsFFx\QO5==Mm-qU ~|[=;+ h/O pZZH}}zqt1pLtdCGXg;RR]Z %E )E2Hp j:ʂv"leq X6CLZax8IcҋbeOZl?!֨iN\b@kaT޾ɀ+6csVb\_\zr5EL[Ke9'$ ӭf-2.͓T%~=# DcS^Z !oҐHXXK/rd5 .;a/`T$;p6 o88j#}ShP z}6M, pa[7.i 2 lަHKUc "3r||3v=aW<ĘLY {>LA E_<- `\+\sSD3rަ\ͩE_4T^żVP}e/cobg@TtHaJ^Sߴ_ԣ^"S+Ce8F!@8 8 @̡JO4^zIQ@iVTHʟ]]R!c'erKfpj8 UISRTn6|XCZ#8I'>9IY.bN!yQty$9pKM׼Y`eg/?#<?Z=ױu/Oq3‹#cro3EQ<x@tXao7"#iWx;fH^u@sJoII_Lg]򠵑6"KG*J=Z֚hKRmjݠrg7cO*dj366lBUv3+┽ѾjeIAӆۮiZy'P3k(c,y,'$ʩ,}ZR.P?졼նܬ? Oah R8qFFBwl9=tK R3L,HQ,G yM;{KtP*p v}aZq ]WsKDWaF]$zMZtЃTJng4rB&&n}:g "U_5i3-"BObQ Ś..\ڰQVqix^۷TDϚuXP;W*RcX@%k%:f_>PVB[ χЄi|0a3f]g}`pp'$w$P1ELJ"T)c8϶ w'+UxK hu *ަ#a Z$wJdh(|9M2L=VzfZzG+._gX,οM-zcB0ui6KUiTQ?[8}|w="{[VOoa}ށt -h=SlFZ?􁝱OVC"pN/(EwrЯNkG`OT 5zUgM! ɭMXv𫊵Uo(FaWpX8Ok2:9%@#n/D2 BtvSqag%\"d ʵknFHGΝ`RZi,'tdP|5 VTRrQqe:sMQ=xɐ:1IUYoo(ڸS(F^,B:9}xCb{ ᠺXOmp%nC_]jIh+zW8X)Vr@~M[?oÚgfIb{8k ,?ʒ.73NR0w;߮YSBZӐz].vGΌޓIs"^@c GL,l$.d(_5ۙ9]zf_QMz |Hq͂l9WG0,ZLYS:M;<Ǚu;9>R&|EVWjP-BL7S{)9! R{%>|QYQ6(&Yp"jAPA&[-^*+[#Kݢh;C".cF*k.34uZ|Mn#Gx$僐HJ?fĹevt PJ@*y^;<76Ao9Ǘ1m0> " M~DF2ru rͅG<̀,^3W(gW( h+RHS5v '*ۓct6Bz\>O{3r@gk*f{mI0OݝGlDyUb~HGO f@yZvQgNhE_:t/8He!!:t,ay6%=9-?n'HG>߰/&TfOt7pMEf!8t'AӳtRqGqp6&ŎסYF&9V4x|h6Ŕ/?amIj=ѓ^#L7[y3'gׁ0AYqre-N<Jۀ O{g otD5 GZ4US@Uo|7U:"u׳8&Q1 ;n6aՓ\<[V0 / N.𜪅ű=QhF`3=.h#Sꁷ\ΏaaCT6 cm>٘"Cf|}mԦInF{ғqWRH@eUq|v)NVTHlM9I"Z.9]sӶ> R-zmnB#\Ů[$SqDmLW_$-{2d# FS%ʗS",{%NQ9'>IlWBADݷ\tUuR7s} @u2z M۽ԾSAS_&K[~/邁JF(X&/`Zgf Wx3 :Ow3"ǗBʼUa{TCL&U5なd_O{yL[@*}`oVSC3zKY29wlءage{p_Bu_شZݳ몿 \G{\mbkMڊRN,jh}fA*\܍}]~NH".YXYuQ1huLO$;4ذv[7DǦF@2CA4BIjP;{k4bhd͎P6wP'!|fcEi=Cngviق؀NH$ŝ1۬l_l)"g1%c@ph@ɠ(sTc9 n>5"B~W^eə3mdɇTHUW;OV#KdZ0KQc%g |R-uBV%Nr*drOSD>Y> {fP,;xwL>Yd72c6f"oJ*lͨ1 sjW'N7gI%>F H_ܥI`CoT@PDc@_rI$MgƒQ.=xAR-!,R).m 7pLfp\NѯǑc/εf>@z0d"#9Qʧ P|]3f9Yd'o *S&߭!oBN$a"2~Kc./EpK<\[`/P8{S*1pzŽ5χLgZ lE kpYcCMLΡQ xzb}oa EYͶ`={7? !b04[`݆%zkס?BQ-CաEh^hg4E%mWЌ;nIz_l|#uD3HĤɻ0:hhmK05 _ t 휽W:گ*2{w?5f1-× m/ T0ɝIFP+ˍR@[kjXő4Mjg‰Gݿ||T,uҲ=MS,r^#q^!nxLn~&!r̮ŕ'tpܸrlIx=4KJnX5S~Xh4ri_eE? e{`ZjHVwLUw(skQ\[J_!'̞=itWp0}Dr-~'Әf& cvêƙH(3+r;p2gmWYm#!(gZ<;\ DB}xM F (Ā u;I;=K6+N8BQ>*#)A?WA6`FƆDe*/$v`43;.@cxA ~ Ti鯿vмDXYh|"XAB_—qEqJ`ٖͬi2KX*ET]jͧ,B[ᆘ%D'`0Y|.^ol)dB"B$d& bcf䓬TPPQ97mmӪ[:m=f]} mn_?( PfjlUYhra|8EH}RTJ;R2)OSV9Øpzڼnptc)C*25 SifXlRWM.BcU7x|^JF85|䤄=6W x1t>VaBI~("ߞ&-PLp² =&Dn (h>Fq/&A(?&u zJ{y](d9^:)5)jH.!Pv.dTUSt̴!idGi?/]0eㅀ+e /.)x Kl)l0{ݪ^Js-wdS׏vS: nm wnhIt*wVA?sl]zx%Yv)]sTOUЂ>0"Cީñ`F/\QԽ&9/VZūhԧ0rڦ=5 ,jv^=ܛ! ޛ@-#ӕ^ i`G0FpY6XV)."@0~XĄTW5\MBkx-$Dp`vcEY%YGN/^xAqxF=sS IC]fDhgOw_T+ݰ>Ës$ n3Tf; #+ZES@ye _ {ZPHc7KilC%]w.+ xZqEO.q2Ty!')wN ZDchA޼D>عѤg>0.hIfG` 7;g"agrCfC~NsIˋt;л3Kxcf&F(AdgnM Gqwۡ lOK IUʎ"4h54Լ+u,8Qq=.ٺ" _53m[O><(ʿf)mf8zy.#ȖF&g]+?r7Gk |ة d2"MSTI>􃊃nsJh)ҵQ3u k~r|c )+^}Uw ) 2 [06LjBr lMc*$j,β;΍'BNrA닲l~D % Ml4{Z XncRqT 0B8j)ƺ}Kn<@%ZЧ*h[\bͥWX \հA n&OhtpZ^޿aOD `qM||4 `2?eJ.DV7iȍG+DqZ~6+SM;mV)`]xz xsEjb|8_&UFUR8-bNb7(o Πz> 6nFv}܌` >:g=]$M8KinwQHOֺ8o["zw /A ] 󣃷!;-)4gk07mQM3~MFUR|?uB=iyַ шiE_ ]cr6f7ޅd̻ (]q37U#lńmZԈ Y>cSQS-L h\qx-mAWu^c zS#:OoЮ]tE:) אE>fwsR\VG _+kA$>85 5=`6H>"XO\je3<,V)-H a\-]_Pm_+sR};*kiTѦ{9sxUlt)t^Sa+\b8qt'taڻvC#(]桿}^;-t\q78QюBWm|}u9EatQʝwOHK7]^ 8:(.Ekz>t<78V^S0eqqPӧaTTeJa 7ʳ6o2 U|V2\vWKs7P; l-W\!t_2/>/8O߬KU{֯~ix-Hwc{= M̳_2AQp4QstED=3Z o}tBCs$myvRI%[:;VKx l&]oؗ<9`kQ[bfMCacaAˀ,oS8[SXx Uv^UˊѤݯnncó)|r /c2N|E[0fG#틋ν\zWpv]1o*!=_IHs$fY& cOu @܈zVI/9pȔ¤2ѶJ7Ta/dM{֔%rX&ME٧{$#|}&B $=)`a]y6.0"5ɚ(qldÜimtʱc ~`u $.Fu4]$f]HYȒQ:|_|ː䤂 e )!ydй~͛3=2WFƵ:En"Beudh }p%$ZZ2 RD, TL9J)ڭI=9,\pi\-3/*k0>RXTu/-'z+ !2cEgԅ o(M?iuq$3zKm>!WP , {_(SY} ?)Pթ2軜mw+ttMwˑSLSB5ܫx#O\ڮ'Ğ"Byb|50l?]8Ǣi{t:|a3 *(XePx>݃)J W{ pyܞH'i]:ofi BmŘ}u -(\2{J*KtfL%P"ռPcjVX={Dvk& NI .liano9Wr:m~4o:`f&]b pGFaLS_ xNk՗G. f=RA~Jk CRSH'!5͛d13k*5,Xy^]pE8Bg BXXߛ %SzqĶkq wJ3ou@\(14DtG ˫$Hx&;huWV.h;ǧ ^1),ͷNn3XɟD`ۡ~G!OX<*;==_ú湾kB7Y=jzp&f3jn$!K3Phu^-Hğ9E!֨̊I?&V4ࡺXr YXI\ļYԡ䘁#vaS~U t2@O-zzs?*ZN?XC i|Q۩C㸗BFgݳأB3^\;5n-U 3jo3mС:׵L+&NXco{h2_C2eL.4,W 7*r("9:* Z v~ێ gaP|o@CH\>Tt ul֙! Qe3n(/-6O%-]>=hS򐶧A}[`|?9wF߽EO%$^d ǵ&qmpmrudA_Ӭ("q +;Ѐdb^}r:Աr_A^!*91KZnr3z%<ՠ݈qQozieh9fv˨ =Zxxhߖj_9:1Idݵl ܁p"w [_F/}P:N&Ay-)V+oSb#Zr?z:'30!?:<>R88 uI[:K6w,AŽI[hc[)ыݚqbRJ0), }:V@RH@MFy#nهU)n1d~_SPe_LºOo$e3ՂDKmCd2jJ% m1"J'].?Yԕ~U)V$W=褎*Q,lm{՗$/"KC t>G]FP\ #>"U̹;Ԫ4MbKD 1rT=/tҝVrx3*× "ܮ"~]FSjv -0N\Sv&g4Hx.pcT:BYN W(˭DrWKmZ"y%3n$P1qQ47A2s2qpk,F'LŁH'tġgoܚOkЛ]a sH$#`Jj5<{1 W w Uۘ(xl6wZt=D\PYλd\2T qub (-8ću]wҫ@ ":]fE`D1yzkh'"(LN_tąAs;m1dYwIz>zotjsM[{e~9L6ىRߜ2P8 .zMEV"e PL8_*\4nŒ5YnE|oo-o8:OiCa)1Q:;N%:~nZN"ލǁ)4 Izg=I7|]$S8aRd=ف dZl nOl%h~J.RhTƩ^mCϱB̩oh()DVMC[G$5_e"1,&MD1ZK؊茇0npc~|>MU  P2mHZO s5TCCyR\I^'ظ({IE(Fz;G[G7`o=Cp2N_HVE-H# ># vN/$ lM&jTnmFȖS&JE_kHn#mਂb]kw/YɫL cR׳05  +ADR)`M9.|Olvx"D v5%i9?h9S "`'հFN%@+AB/<%)o %fYG9?> O QVBmf~P3/of9n/798ՓnZJriGgcpwo~ T1lYi MS%:fvp몿gv0j(Rlp# fj =d#P*㇢!S g75^84\X(эzqtOPz5z³1׭l'=| =bv~G+F8h/bNz`ӝ191&aIW/UP-`r7pL?gS3յY%6Fy<m^PB1FPEȈb1=?}s㜫Z5/uݭ@Tu4v+/uY0N`,FBDZ$KwbZ`MG?zMWdbdZuwvB>KT)B4e.5qb)WQQnx'~.*:*2] hI 5d>)3mwl4o_HAp.*  bX.ǝfmnM㛽ay5,D 0d[}6I.MO8W'qWStϯUqkWvB-8%ez9|ڄJ./\6Gwptg8T ?4v&KCgRouNlrQ daAFtuKr:#Z[?Et?Ap2QF3WSޢ闥q΂UiApʺxH mf ɥrISBz\Pz58x}I~V\h2(51"%0RE8 Me5qWMv$Ռd}P ]2PyyyV& N.C&B՛QlWoSBWzM z7ϿY,K Km[V4d j譻Yq A0ڭ #;QZ9 ,k\/>sN{60o )02sc1p;K!QUzg'iL C X/淞7_?uc7ednhx!Z!XDQ,8Mן|>Q=Ub8ޯ%𾢪LmyЍHCUӤ7id|oX U_ *BRrxVm+h|oJz:LfoUTJYh73+23Q/[yI*O5m], ѓŴk6/SRpV1wVS_蓏Nb^}ɊGeP@P`޿Fm0b9F1;AVaSCA"3UYL{ L S6$@,;6xʎqSXdU+£{`U^,(?v蛌ERҴa@ᓥF&#toܔroPVGr /:+9x[Pq rW@m rJ5z B%\dPR-Y`:PO;;u Yb+$NK~;ړ2럏kAф⋓$y4k ˎ TCQ۝ 7nwn" kLcLr1 6 -ҝrjWy(0޸5v\=Ւ{jz@Ԋ Զv_c+@Vo;R=wݸOiHZڎwY>Ι)\PGXA*r)3L͖[8h֒$]dJ_5cZ "~eby˖dw*C [ZtġXx0mU!:38`,rO^*dݓN#ǐr3#n3}M& Ŭ}%eni򤃿l$N 3o`+Df-Ly:N`b:dPճQ RԓzA>U號@%\Dw06.: 6ef"H= rGӑc?rD!'/bľ A|le E.$ |֑<²kEc]uC=|GSq1ћwgh=Q~4_t7,a-*`:S@^BqiA:,pJ[AODyCyuV*Qi K^fRR3<-cט}F§}5C5ݘ v5O2ZR.:K|{ }p-{wilG0|X- $-uTfl V0f[ fE&)\C$ٛ]ClngL6q+uadz0Hb8 5o>-1 MF-sTtA aq}LA?d c]6%WsD&Eo;d!V|.+AdDp|w#$B'osv=isˉUv& "V>_V>lhެvGuT5z ~;69K&ZQtX)w־b#/dLf_⴩{Q^wxF買tȂ] |]o سFp3P޽u : pW<j$!U´|G=[DjMo7goW3d!?@w7O!mi&X22pS27a9"ik~eUaLΩc]nᵕDѹ(#=6]ZXd9$r,gmCDRksLC#9LRǹAsSjTn*^|wt а(S~Lz.Y'2ng) _{ZF湱]FE,`?y#=ۥ:]mD9R5h㩮nBbRyO401VD1ӆ? f(6Asci"NկHT9Ô5Il;[ݾ7c2@C8sTx,VOQag{ (]&zz[~!'n4܁@#H+8QuPb.ӷ׺$2+Uefu㾁Jۿs)Z:ǫʻ?$P=͇ s~p.۸VCl䮃4RMkFTz+%%5T3 ҝ+s,Ja^^,Eř/GoF$bf΍wb:I! fVA O&ڱq0OF(&bGLcK(_F>^5\yAw:?l#||tr|#o[q)b7:@LtE,!wBo:]L@1L΄+wSM+^ke}P,N{FkSكahQ j7udYW-nvפU)>g Apэ`)L2MnvrmaBsOGe2PΙR)Tglx<(">$psmDmAbG#.?{92:cTz  ڬ-H;8R9xy")9wsIbjcj\b}HUY6o"s>IбM#TRH.oWЬ* e%fÂ\YdO/|n:B0v] EJfS_`$uݾXcSCա>BNvb^.u'@gaη1#- e:ol$pe9]zc{n} =&4t9&E,F$mU-4P yB\vwr>8p ]-r%1_!Im)C 9pNlszkGt9KG@GHu˸ſRvҡNYɐ夆޸b@GG-]dYp֭ZY5D|êl`1FW>S_^PCVl&!+MREpn9 gz>aY ۉ `CBKYi)3w ))a>Oj.w*Bٖntɗ %!F38. Q(-Kv+r̚GG!U y9Ř58?S=NAM^!1zuHuS;h .`U7kp-E'89e; z``|]:qXUxfO$ s檏Uz;+<2QF!+"/ N6cAJ醛p Fq=_ 4U@L' &ϹqO:rd DF<2C#OIPrƝzFp?7ZA 5w%g]B9WNu}ņ+__J 6&)5BVI յN "܀l>f0I7@@B=ʪI!]!)mїRjcywl^B/z8&ev%ٖ-=Ra8Qs5:]h\FP|{k_|yf.>9#f0p\20'[Nň a4''T^0ES?MY_4<`JhZ6IbO J\iΞx}Mcld ,&*}GbXNm˰a!ȤoRpw=o$|JM 3\\N@K !(ܙGPAW`fᓍQ^9y^"^69W9-*& I~w쉡9'3lc_xa`tDL^I,$PX}j.[Wz!n@v WMH †IZ%%$?es/F/Q+0;OD4" [#܆ IVZz R9V lV"=;Kafaiv@]3d^}tf~P+Ϫ,SuQeV=1iz\֑ԉZ?\3VWy&U-[j^`:A4*E^U=7 {264 حU 4Yg ~cawNpv{ |WgI%c~9[BڥB^Pb,(bBtI)NIs1LTpP:$W!n khJPGƱlج. W|  @ T4^`~ܾ}ԗQ&!SAҐfե:z5XpiAq$(=Ed=M; 6\MII>+|M6˹Ծ%x}-\C^|ka-уQX^ ~, VG/bctc:l`TzxVawֳ&jl0?a&"zoEX|Ղn{/BH43F&L.:6][cTU;k񤳎Bʁ!rm Xc9O@Qyut~d s=7v &"E}Lupxh@#X5{XtTJ9c? 1|"{ɺSZ^J^ɵW@q$'k7/~XN!%hEc)L XTciye \¯5MPȁ @m2dԾ=i fǰBs?OQb飌Ņ/q96 R#bCdXT7"mN€'+9I/cpʮZ$A.)®im5f_ws>sP {¬k*lw jrF Ӽ2',zu67kw{x`8 ӿ n`O-@ W 'l}gRkL I@*h_+fW;'%= 7A"TWP1D5w0,:N{SRY+w-}!)#ґ>l%IOJmxWilđv愒 +[ǫV5$ȜeXktF,H:x`H 3s)|Gk]04^ʶ*As^o oSJjڛuB$) :24#UP4 RN/Ugц$>5a4zD*5Mx_X  ␤FA; iuB"j& t?ͻM~Gu_eMh#;b! qZ$nTJl\Bvd4ps_”vLOʸ73ːZU )~]G}YF?bό]jiQ`){S8>>1A"UeWdJXx Iͯ8cj8l0M琉 I!3bC#a'\h_/+QgF͂XH:|_y\v=8vL"XA e٣MgQE=+';w}!ټȲ}h> >6{u8nrڥ&FM:2=ʟk? ŋr{Z> r'M^qXYaQӸ8Qit' x~GD#:]0t^T"5H6 bXnVvǏqW-8}5m4‚HлlWW\+nLy4lKlul[>P<@f>EzJh;Orhۈq0%sK$m:] 3r07f?{r޷s5ﷵ;c?Κ`ىOML TZJ޴?'%f70+V|.VlSY};+iY8L/}0YS6^X>Ăf_lxl3^ wXxH+ l/|JsWyo6 s[P:3X%q`\6G|8[4ehU0+\yQΚPS(YhVJ:)?DRh9`r=J'Nײ uCdQElO" Ls|bw:9Xlp2֏d"Zf9v,4H_IO^/kN%D%yޔNun1 iQ}j@]gqZm#}% V׃M"N͞B'F̨/xɓjpZ_7CJ]su|IR5`kkOu(ur[|ɃYz9!yg%N$ODbQܸN5R]w2+rDa) UEɺ*%j&}'Uag|2$$th 5U:)C!8I[F61>/҈? bnCh!HzeD %"l :m<Gpy:=N{W[:l6MJ q&-݁_FA箖+NI>b$' zt^?$G^HgC߽ l E^qBp}HYb/%3g3ѯSƬU{uȝhEM7HȻ9D@յѭ998NCly믾^tIV}L v6"MtVԕEu*=%4L'B4%7a29Ev߇COIc1<|@*Fֵmed{W p\QUػH#Mu~ZR'Z JY_<;-TfEqiQ\VUN\fxRV*sٙfRz"h}eFũ3V;!.8"ب[3~pq+x?]xGU"ñ+~Ph yz6VC~41f9G/֤)>XN$&(?$UE.)p.Mϓ%טA8_ϵN\xVt<%…E;(/`52[SE 8}~-&+'ȪPeYys _D'Y.M0rMCp<##f4=۱^ 7)]4feNh1/Tf1(TCV +i2[R,|t@T:۝dG"~$'cE$=D*I-re]m>ſ?b bn"cFaC؟-AU< Sz9EH p9Ɣ✸1_F'k o廦f=yAJ@RC%8RzboĂ&OTb=P=%m5phSC;|uTo#0&ZZ;B -NF͋OK"9zYi] ;& FRd-`6-5BRײ!5Y,/ii۩4;ʏ[AkBpAy1]\܈&x&&o8 )FvζoEOELM*СgYiuQuRѩc] *RTg$jeCW Xh $}Eϐ41y,dhI2{@h!M3EDD% ;#()M#I A﵅i #oDڨ!$̩<''A/cOE:e_ OMjIv$Qqx!glkt}-q@*J?VtEJ9/{(!J\ rԜ ̓+n|`X/\n+LGN,gN>1p(:p!0G DNYT os3bes77)X j1{Yx&}xOGVXG藭+PVAMc ۳I?ƚn_ @T мKbۼqي,-.`ӌ7"i?JOpA9M(g!/J2SDaD2-UDugJ4ipD,t͔o@.Dސva3HͨIN !x g.R:{h1K30ƒYQbwp ѴǐMe4`~3y:A4%2Yfe__p𙢩[Tx~3.  8JS7m;>F k>ImATޝh9v;Caƀ*ދZ o#&O/93G+?}BjoƬ$=slY]:\`r H.~mk|k-a"^_+%?Ȏ0GЊzGBNwdsǟ}|`V8   ץh/J@y]g*&ghқ8RRe8 V6;T@UYQpfU>ҕ< T?Hq&Tq$?Z]K@ #<`eކ]Mƈsj626XJpS;yQdM E}/Ǟ+b`a $O'HEgm:m#v;IaQ>>/͚G:cMSqC㌲:O>N82Mu5=P4كҶʍtZoEc=hG,lcVb ;>XP4n)1DM|.Lu)z%׊1Լqoe⓶[ŔJ叓B3L5rhVޕŹ">Wzĕ; VhSmv!]Tu0D3`N.AkJL}NihF+ E" r+Cb­J\G[l ׎Jv+tZ5S?GdGzGVTݬ8w]#,\tYmZe5kJ9UQ1J]˶xm7l{=AJL/C[ 猯!oj*'rlGHv6[UskҏhF(m.Z`wwE_ HLQ`h?7k_nkKڃYa.E0*|ڃ4y${D#2A}60=>1^Jzޫ<}.ܮ0VѰ( 6%V_M/FqOʵeӭYKN5ZTr wZ83@: @*0 M{!5!GMqڬd\v4z4QI $|Ѐ`8Pz ^.--"w([Wt@&cKn@""9-5l%6Ҡ[DH>.ٔ@tȱLgs-HPAX-9hB~R-X#ͯ4H^ '/b")]: ChM(̊M_oqJY `\1"şhyT2`^7O8oMwunKbXZ,7 Jes Nֶ-vu' Fe?UΆإͷn@fd>*AGy+rw:=C f7VEbw~ҼLA3<^z.2Fҝ [Z5n!0-ØG MaI#@:ihy? n'鉾efnK5-%Ͻo[,zvF;"Xɟ9ʃįDT;g4ϐ\` ; 9Zv#;w.wfQ^gWnˀ<9"xw.< fA+9K7BbǮg1߽5JB`'lQz`h@USn1lR` c9uiv ޼ W/a-8ï(bP Z.±_c#6c"1 n`-yv pK&#=³x\߸Ix|(Aw_&0O,#iP\ڟ>O*zbPe(.`۬h~bSfȲ,Λ9xy k k88w1-nrRȣ`m},_] TYљ ?ggC&ۼqF}s4ߎNG]-<a1,%jJݽf4^ 荫 anK; K}_bb|$Qç0N:?m%ĩ h;,wEFp. +\n 6 yg;Ï_e^BCev/KcEEIe ?9XyzYl3jga+k}Њʎ(s X96XFg[qV̱Nr +(, S' -fZIO~/?[_\eZ(59|hwWJ+G|4(Ly% NG@dI!59$SkhX/&/9G]3;CHW!~#h׆p*+oE-kݞ!% ‡:$13"jryhN(9u?,B+_pߚX٩?E͂q2JW\!El r}fyU/dm#;G:qu@kj>@q|oMrBVSiTdE/n3kO݃dTCv8DZe"ъ Ycv*>~˄9ncyƊ ؒa$g;?]TXzw5:05|f*R|) wuVbFڋ/Pׅ r]!9BAM"`i%s$J{ b?\#>jKh9")K[w!^促#N@L/[JpP%%?bcdtYvQRD@CbTZ0щɟlZ S6Wnq <=/ya('qGjƘt'X-I&L E1gcҫ]j)KLVcņYJQY .Qub4~ HW5` azSigoK]Wh$ʹ_IJCn MQƶ׷_TI4"5f3][@66aCR~V*u5+NBǹؿA%W)1ˣk-!\8$.؁$Xm8֟m +"-{a֩[EEX*j+8ygSK|)Yp1Bv؈uyQnOG 39-LDbytCZTrq1|.ה3xA]owҿ7]wxu1cKc Ċ"M>eDZSF |IH765[|SӅE`74nqbJK'bmbmu]fb{ؒxUAq!H"B=z0o#?tU#"T7"q^A.s&R_S#)]3+KI}u$pj`*TAP*gntܚFr` r="&=rXjF*|SFm o$fpG$o%qVx߀ă(~*+)v+Nx+Svt ݝ-Q&~yu CU,@OQZq {:uy>cH,*#?Sb/}?>24DMq:a1ך{G_}@x׮a[~~ /fdt&Aoʂ^cE4y Jonj $etu<:!$Fh}{۵Sjc﵏J0hؙ$3xY HWpCsf) bzV e=T/}a_!`h(EKhƷ&0 |F:;,Π2N;4䔆&K53 WG-H@(\wݫ]Ÿ 6^H=`J*kM緼ƊDPNtu|-ď}yu"c_!;Hy'[0,z:vGxGxKuzKu4 `!DsZ[b8(v>P*> ė݇} 1ML"|q(+g@J[jvT0Ҋc!Z7xG4Ηe0P5? O(u \E<7D,DCή? GsZ Rts+l_sO~@;Pغj-w0Pqvl2CzdNDmAC|CF#ULգʛs;B$C*ɉ"d-:ygg bc. 6FUGĨCLXDv&2ψK\I'zNŧxYF50/(g ZTJdo|xµhB?xnѭ4#EGSDmgn]aG~ߔ,t G>aHlDMyd >C͕nhr; 2gNʚ:kHN?X'4 pwZ7АCF=%z#J Un٫fU[qE9l4#4֗/Wz&(c/=̮> BhqCr'98?W4y [MO9OD{61_?OMiƐ`O}s1\6 3̪S&w^3C@A4(oUu0^_=(%}ã۴Κ:Rw3odfCA ;{xXi} Tf}vE&A:BMԪyK{)>"CRhk$G^C~6;v=xj/nR#4uxK{ؾ}f"h-vFIŎ+ô4v;BGH_ҽ ;<˰BO:ۄ0̆K@FU$Y Yp~,&4O o-|)) q#l ԥ" )"m!;+ל}F[e;Yn+E S^^Pn(}r$gkfsy+ʎݻGQ6* ZYpa<֘3渮s3ü\uró(xʔ&H"3~srX!k&$cCwDIG |%H#0wҷInHQgfWH;S6橵 z; eS-D^֓eÇp~N6C9fY њֈ$8vTVPCGx,QBb[F'5(:KddD+⥛<_[A] %A+=:ԀNcK/WۑsRYn|LyLk(d>Rq^zJlϦiqFf[p+f0 1$WRN8ߵq [gڻX嫨,PFuwhsB 4O*!\[>TXcRN lNx9Y %G&5jEC`ՑpMAN?HU:7Q *#@gM2!5ԉ~WM<6[+f7n VjA >n+M ?ak?Ѽ3!MQoBiբ:Je+w# ;q|݀oO8"|ǴI꿓, |ƝVtejVh@8W c i$[/+ڔgm3K:U0[ hdA'7z KJfFNNLd]i<pl5.ЧHtH r`*O2|ourG@3cpm:&t!2VƃpjoENAs+,TvKbLn!YX`1iRv:((}H𕣻V#ǽBiaL*,+$(C\\[$;#TxvB\'+ԥVG;*I9ϋ EFo)$ 6aBhT:p{ޮWt9PSߟ;( lwP:+O\#6ӟ$d8N?'g}4]ZzlN27KlؿV?> p95?p,_ 01gLy83OhSkhdMhqݼ?V *RFZkQ,)NOeN9HMkhbX!hOpF7% LAc . T>32/t;9q:Dfl!{kqtuɇdF~hlBk#eKGF4Tqf`+1pP{5ҩC3G_V0qa(w4Z4'D8 mzLyI\'XGwޑ.x^Wr*I6Oqy?{!˛jc$u:8"5%bRٛz :z5gb"I^3C7i<ɎHG@W_S-v:[S,e:u˧qy $+O@;:M%&k巨U~/ f zzԛձ~ĵNDX`gȫ zi0 zey@n8iz)mb?Fn %_uTlY(jX]n*~Wa:Q.NOra5û;YΦZ?}}$$Q3emsV>YH0YQia)L4)k&9PTI05.]+%͑z)ڜ[*1&ARJLyb t _h \rg i6FGB5Mj8]^d#/_=>TTgUHKA,}gA (%68lA Z}w2K຤ʶ3{pR+=M] D nm~zlΧXmoټ*tU?d.-ʆUKZvyqW9i:g&ρ-"'\.59YΨ',R^?_ tI\0?) #G]! >p&L7S1β!.h9 5\resgPvWO8d?u&"'h:NxOHֶ>Ex{TqɥȻA 6 ވi L* nKU~rYrd:?Q,[l݊0܍Scw ? ;#j:E~DđvV($r`!3iu<"T=}1y?I[2j&:~t?)g(9œͲ@\ ǶҹEfYMu5?- GeNrz6E,!PolUC|^L @)Lߏ|y<]it#ˍm~h3`HKe%KtGk{LqBci$(w>y74ҐX,^Hv+l8b* xՁ5_q>AFҭ!DFricSf,[1O$E!g^Z1l0]zt )7+ DUhn1MI/rɄژYBoec%_%pO;8\k]I ~Hf3ZC5Bc8:J1X:΋>,mJỶ$1L(d 2&oe]zX.ws+w! t0lBk?9hfy0ծftۏ b ;{rexuj_{8q ']SV~P%2Y["(78{PvGY$b r$ A&+gPBRL¢^9 as>*m {;jmR2-t둶 V00N:SrPZmL[`7 %pBqJvѥ?.ᝏ|ҪzF@"N)\Ua b)Y.]x]K&o*Am\QmQ`uh\dZl!ԑoexؕPU.;5-Φ W)jȍlllrbX;ݰhHp[b;(:Ԙ9#H{/$ރ;ɊE|N]Hp.)- bBob#,4׌=ٝPMuk. DX'JE~WQPvXsG?mrhnN,+~}9+F$=)[(9`|!:`u+:H7Pvm[ŴP1mT(0 }@&g  9dTkIVL|a4=jYwN<̱;td9p9f!28*gh6K#mX@x:8܉ΐ׈. 2M:#Ɗr\EU56l4CkPWvBk (su\#]>=mQQH OUב">{'{EMd|'A@yq[jW-+A?qoO4L)_ 耣ՀҵsJofU뷷؇LT`5 w %lZx0$uLzN4 FR6ױ󈗤r2)$tm]> CfqzX,> Quc|lBLjvН܈B`-膰`fmʜ4g)-J["´)Η̟ ;qij"QĤ?a`ʞٗ-_,&X>p1HBP^os<+JH|k0""}GM5y>n>$؄q$(Qp rprWAO~8a9!4ÓrWR?;s!,[ũkyt?)dqǯg5GC=+ϡC7Y{+RFU AX E`gF^eL1F6eHT&iqEc==Y]M,:iFm/^eLS \$04Lh!9U|s ]_D:FVpG^>Br[s݀A4dc_ztWjROwi81)r0ł_E{lBtN j3sCX7[ ֖myShcӁI,v-="JꈛVmU#FYu0 hk m}?vT t.Ж; `ޓ,B^p&gR.M&rxZ;:OC>K]yQ40 l"KnUM0k(}C/hԜ'mpvM'%{VT8{þj؝jP}H_q R>k~ ]+(΄ 5ĝ+?٢"L R^Z6HLN!̂i5CQeIPeAg^[zp:3p1!#$mY6ǎyIM%L],v7OiU1vR#)9tRUh@2!eպhuJ6UR2lq^ [I'+YDV`w,y͛-3ڮpLdyhtCa? VB7,: ѬH p6o\ Dž~ي9`F99AfKh _3j8c[_d}<miĮN'si b4wqn3atqU3KV5>ÚB!~`9mIZ(oWOS < h  uN# +z'U +# j$("tC! S`nHbۺOI۷J|'0&M#h]>n J"R~X8SD YK0%B 8̛5ar,2 .>n'>|J18 W#*=')<NIV-󞳉 gḙ'- aTKNg#wzxKpH&_!=,%$e$QpI.ݱDs>l\fK" n4U%&B>=OXC0?¾ቕȡw@qߚR*"k齆\+C"k4u`< %=Z^wOx&`r>Nkv/yFC9m,|xlAhGz^>ōtw}"*TcSTE?3%$+Ndb֯iҌ hVz(\wˑ9LEua:] sŋg_v=Ls;;g]yyuHlZ`gANZMkIYC^4=3V2'k4/7:{G|Hzʏ|3%t 0VKN2'{"R5kp  $*K =o~"~Pg%SPpa⌮}-ؔޚoF*[l%vcǟ4[Z Uـ?MT AmZ.C̞ӄ;* i>XVrn&f7næ0d\]FevB(I'>QyS7sE-oʹ *$.e11X[RZ1AP-qU10j.Zc{BH2gٰh8@iMZqr_+OmP3+;]:+.fED s绊>ף8ILh_稟 %9ÑGAcb UrsKMa~iol3}tzkX`Jܛ4N!XvD'-A-1gb# pf=%;6oGI,)z~e색Zx>f4uˁ{;#lu(ݙ'~H:Xq5ĞJ8,a1;8ȸ\+u򀿁DclyscRsWCtCLC"FP#+%9#/PeAY+d ⓺c㒥H_"*A<9؂t®sx/#]l<"N,_x<Oڛ ש.(:|U:6gu1y^Ҡ39UáG:} AN o&s|LS{-ޮ'yeoڒI.WBcVOfNF:w}RUA}lc7i)]Srzl;FF@=oqY7+5f u.}YRXUaɹ+d|T:,!$;̼DJhڊ-=uqfiJ9SJ;J6ku *"bOaϑTH]\Yۓ"N_50P* *Q(Z_ءY@.e$c&>tහ`A?{Ca)H*%`O 6*1UB87ڽys?ظK aY윦rg:Wxј]_*_kzg+ )SW· Fū[PbL )1rEHX\.p%'Yj# ‚8% / 23찆Pܥ{P_C0/'%ɖV5GFTElL.S:;9dn@~Ə<~*3Bu~֋hϹOmCҝ*m>}dzyO˭<0B4VA3Uq˴V9BjMS̺mm0,83\1w^>{.Gȷ-& :yJ`9&i ƕ ;/ ;Ojs.?ʱl=۩s>?PvDfN eIiZ;O"6ϰ"rt2 ]1dO4 v.;lY/$I~`m SF)&@  7$[^Nstw!omR oH0 yS֭BmH[Ovtetw{"_dKȔU$` mQ݌ [oXx^Zf> Tl A25f⌂Qee⨳B VX?}l[un/=:@q6tsپ"1,Sx'%kx=n~1,;3.2٤ UO윞vtj]kk%ӕ oe9Yu0CJ>[\$$pi=M?c}iD09#0#nf8 /# N_ .ED4H:m&} |f{U n?=k?-sزGE|gHz cX c=+oy_Ts}6a}E>bdՁzn1̶zP㥋YKhSMj1*r+ Hbj>5)8Rpi~ӎRjxd*W|rJzm6 Ch58+nی7=DTzp3ӗQmvfΌhF9W9+X8r>BiMDV`ˌDّ-Hx*)TK -'s$?hyyɛC3r wX8r,Po]#$ڹ=y꬗|g^c507U|'wjK! Hv΅e#L\)(lп'ݴpk/9|`>aj%א:nϾ_W vPϬߧ?O䌲`ڌRoȃW>2vA!-aHԊ[ӐZ =A{lrMnP٘?汅S^wLX%`w0 M2&"s8J ,՝DhX5 sܳU@]þ`qMMsoMJ$ZV\GsZOQ|Ұ]+k+#%{4I9N$[&7?>`[[p[%GZfh«кL \rԭo)W-"R/G@1JX]:T֗sIGW-f}CW SϧM}MdB5of?:/S[K=+g=TK$X@2 QUttecPd5::3B?6\079HhT1lcQb~|Un2tyϵ]WQgK.njMˣěw,aK,v|vbad+PٸHTk(!9vha-3lHk@3/fZ9' %hOG! $믱"Q7)FľjA5xHRᖿĵ&Z_3$ZkЦOl`Q&)X%{XHv{O>d?ӳ30ŷ_饞(7%}_ygBV*%嵻k@Ll6 F;Hv}(#1OZtF-rqj^l>_?4`-A:hlh_K9~(/`rQD]Pq|46&5I*hKm8Fqae6 0S1 fw zyͫvj-GE~a}?\Yjs_r&Th-./(Z fگ͑L]兗N[(#vtIBKc~{AV@^mxw>Xɲ,ھEi€ _."Rz~Qڞr~{QBzKWd#Xvq: H&h./f:6&5_#-CءRun K}3KnY8m81 Ǵ}2o|Y&~ՙ+־HɋmmDmgBst ɬ0CZ[)ygGHSL}OaA1jNڗꕬY bR@>1Z9̴&QΡdcmhg\A)#L: b;a̍f۠AV1@Ŗc%#vj9We6kp{z:hNb=3~g"ska()8<%3=vUNyqN>D;|8͎ډz)]WK*H Rifthȥ1S,ǶҺ-܉ܹy*v+UɂdwSoj1LmR 'PǶ=V*0O(lnr%HحAnGR |o"ar G&2@yCFؒJs1[_汕(xJM`LJ>*h.~ 2xKEW9UDo4 Hٲ x`i1w-ͲOtg#j+?B[bx 7"eH5tUT$ icȮ=a\Ίm qD0'r?hЗ4T.:YMyY;ݗh -n s!P{-Șw#aUu8F=o}6ه[s0K'h\!BT:i=(u[,>sMJ#8?sA`3x]஖s,U.7T\&Ym0DZ N"Sx-uvu8{؞}gjfH? ! ywzm3$ VH/WFKoX"R[h"f*!d=RB⻬i=ZY*IH%c 7 qvn>LU`١W.igŰqu[Y*SG@E2nq)fS!tUs mۄt QD\O nA[MgLa U#r ցm/3OC2t#'pѦ<0BS*Ư,p̾w%XFpR=7w`Fʝ0J4i'MAO=>?El |W rZn%9_RXcs3<; ^Kj}`MhǴAM5M0 TYNg jw:Wjb`/W˿ع֓X-T`c\=Oɵ+܄rޡ2` W}Ѝ7];&%N~"9k!NI܋^֦%FV3g44vkY!*WuOE^)~e@C60 k2<5IF5,{pʆ0[:.Qs.;CUeRI;ܴ7K+[xviltd{lձCN@ݧd8\Wp)mf&&Vqd~D@{gO> e幷!7g9/W|h>f߫1GzA"[~Ϛ4kRPGZ$MdMN3KpQ xu9\x@슚J(m:|Z'mZ[ !.YӴV3jIJ[Ucu{`uԡÔ0v` y=Yiv3~yP G/om{SUʤ8Vr[ǫ*OkbʹG׆-Ķɇ~ElY8{s(ӿFtoG=pOΞc1mSɉ@b2cS*?UR ZBsL lnhſ]mh2 VRf+ *W !8CkKn}Y9'w"XIUбNѩ1r(II>xlG l (&_+=8Ci7%k:?1f[1:`oG,YXjdzynD6sfiT9{|5hZ"%$X^ÒMO7fh!-`bTAWtԥLNH2VNSh{ޯړHѣy|"_v?7,,ocŘT=s΍\L1$MZ#0RPl6hr_66DVnp@t]Ziqq4AU)J?NJ佡{Z\(yj[j5<|h^lt.D=Qj" ZJ;X*g'?LdQa(T#!=`a(VroDCOv~5"!fkw"Yo>ŏP2DZU@4 O{|J~ğBN=e91f0R5ܪ1ᠽV]4Xforf2~cYE{ dy1 O憶x̀٥UW-~1>q!uG*K؀}ҼM_@.bw]R\Nh8=5Exorm B-ؙT6OP5˫ZQGɹN`҂_ rY/eܭ'-cDdb&::!>5Fj 9W8ĜP݇?>)wN9 ΃lvWȶRl:N"e\.(sb[RTvk>z2]C;n 3cd |z^QuL7}7>J26u& ;fWG"[9>UD2:7fJy=X(Go]OA-\_C,t;]G|P_%Oy a`lZrtп*ie@Ыg Qk[FWd?F^x ?)dEJwEYV3h3+8o4`6M*);K) ;"l֟ra7KAl4Y)Gaw}(}eIU:Ӎyx GӹnW}pɺ̫'m=Vkj/:kn, #57̭px."Y'Tqpf=2*p*miPj] mb ,!b9qu؟;BR;s9ФWwˢ7/]~Ә {U^/];+?P\[&%pJ gts+44M\#uCPZf[]җȨK,j}SRDqMZ g*s0$䥤^K^+ײ]e]HC(QƠ0Xwp N{?Fڃ\ `A,2nMØ!' FYntgyRô~.W>2C 6*E72$ӹy Vy1(N6ım{љlπnZyi`i#hՌ =f kp%pc6?C&4OCi7Vޔn+!Zb|63yQGZwPpv=w&gngVO ewcT-껒$=y]g7ze;+(!."BHtУM5f5ϐJ5ﮍ. 0K?8:yb?A|Zr<.DQE[$To" Y0U1v6?Gy{<ʨ,bp7`3?lna(9-:"H)r̼(OmvkBl9.U GHZLw$v.K*pdrFH[^)fo:|Ñy\1'rU28dڒ`30'lWJ'nX8H@w哟<㔗jdנ|2I`Ix^|ͱ0HgS}0 Iw l0#REZ|;Po*Cj4_u*lqǗDAa};HgiQY_Ӂ 5~S Hnit4 `&P49پ̇#΅XhȇYƛyphUXc>q=3lzd'JS܌P2 %cw]rB՗Jv*_+2"щK# 9i] hlI- e=ܘK%j =<.(?3p/;F(8zV=Jk hF\xLv0 DD<8ͥ̿SNWBM>i( eoX 2V3p$Ax[Zwq#r>ph[q @3dݕr ՘XJF24M-KjKL βʷ@gBݐOg٭$_Ӣ\ܭۺg.BAP p$9a8E!H4-jwx{ n/# nז+n5 YJv&hw,H/4M9= <ÖIdu=sv$= ڮ (ZNjڔB*0{c:4הۃ˃a`L)\i= 8Z WSԟ TC "\d{\va{,AhUtJv &b:fypv.O}#jR7 r~E)M)f4Qq0!  w,=TPfhӫnfL}{l_NZvJ+C$k:eSc]<&VDtڀzDs.~h2Y5mc (QCY< kv8|i@´\,f+M>#f5qY}؝Wl&&d*)NMCGM7êzncFk/o~{dP!"T W6} f03^5{AEfy!\Ъ##9C4xHsAp&n -\1kiA 5jesR,;a 15UjYS&!ځ+/sdE@纖C3W)7$t4us[;xIKo‘ԧ[pI5ݦ|RI(AWʖ=hrم#t*q'FoYjq|KN/ל.LrZ3^sfI qo+jP*}m*gK4O}$Dl cO<[&I§!>3I[9=lS Oә 1Y&)ثsΎxo'i#KuT`M= w\z]K$A5 zQaMgyOMW;W]x?N5--b䷌Vv2{ J 7f1W}=.Η8Y*Ee#dp&3Xj]y]!\m:R/\7T(('䟼mTrP3welB ^$D—[.(Zx6F WqlQcZ3%]If#.dBAbY%tCg<>: ?H>x]^sKDWTA&U?d b,AlVe?y[j HBWZ<pSy=wu,]#:i10u[^䠐Nua52&_k&;,CW]X41๽>X 6ްu%\[8r='%Wy?7nSKiqKF,hlP<0Va]nW I#PQBt_*F6fJ&Թƛo 7廓gQ&779]ϝ8aYW_d c6 *p`&M곬 $0ɺb2ii\z?={?e zxόg ]) $M=5phmn4l u<|~?=-˼lXOBHsQ<-i.L ʨ bw rU'ld7.L"_zG$\ op4z=e;1KBݫQJ)whfM4ԐR_VBpi,gtt:ZF^VI?ˠ 9NSpdq:^^G}bR;Q-lHx\\J,K}HxA22Ze >DA =(K~/5˓ۺAF^w.0ЦY=]j\h~98##&y\yWP͠[˒l9D ` L!^0G^Yr;|D'4I94%x]rS 3|CF]Z .ՋC3jA҈9$7YPA#ͅԖZ[uL z܌CR}!V:X'19-QYym? YL"Z-ԺZҤGɛƑ'+d$7@E"3OW¾KpCFK`qIwEʧ wU摼d=QN/0O2ƱIgppL;`3-x9~档Ct.R,+@-ÎA]x'Ӏs:M}ͩw>df4Hm},&E$\پVے@Vx&pjM?d6>X9p^PPy9~w[+\qC &Wf ֠1G?t  'GmE9/6l$}$_*8\ͳNX:MkEG^)C.V3_~} ^=|j`f hw4Nl qE|p}NNGUB9kmhg Z Z O,=[r9<՟4{V֜UIDPf_KJ-wS{ % S~~ږ3%l3d5 k.=+I7u ݓ$t҂:VbVӃ)n̻ڿ=5k@?FdaJB2XJ;b y;q KWF!RMv/T/U']@SV]l .E>g[D ;BL;[WO\e*zص3Eq{y[O&Wr_˛3*Tt4nُLXf=dk^>Z^BՃp>8L@(T0C8c !1¯jVF3EA$2yhIOD:)p'2;0`αk>G@w`zeoP[KXZM`Mٻ b'6@ɿ@y-'~@3 \}[JckC%It?*STCym9ϷWJ /nNaQ=i'QX8W8<HB_rNT({s`{8ut{b~C*%8O `@}dzn`+{1b't9+3ˤקeѿZܪ4^/{V1U,dwk-Kђ;%1~CNynUMH7g-KaD@6Þ{d&T;uy܍Pfbif{4)1|7LҊc- -g*#[,/7P8iW($g^V,?Q!&%qV0TVI_*;X}6%-)z>%ѥFTtj+ EBX6 {nKc'>+Wdrԩ #3mOya!xyHC젓gSz gRJޱR 8Z>a76 aݮb"ca1 axV*̓hh7f2?' <dM侀bP9Le4k1Y̠V@XAլm P˔?C]K)EbZl9‰"O,%RЬ\{G/aa;Wƛ7L]i~A˻3KeLr[ɶYR ;뻁m6>ؤy*@)LDcQxwtȕ5IDrWSp ײAUAkŬQxy/+-']ZA!D Gpe!`V7+aٱUdyC} 8 h{̌^M,G V`Omd8vSouUMV#~| = J:O@i'}:5NбH1}}KGE,4 bc I=rnì ^@wzv.l=x9`N0wY~%xa/co`!|J:{%Y\JXTy&fU#d|\2%HEn9ǽ~N?s @EWҞG F懏;WE'FۜVzkJtL\'leHu\"9a+Ƀ+ 0>ňzM)cM|(GX:pqP5|-tgRH|0yA3HڦB|&j} ima\[[PN"\rIjZE 5?/*@)Aa A!N9#P{3׷:!G }@,ٙ3d.b \o G(@(v}BX J=!PڧCAd \ѓ;xlu:xH ~[_;w|A}ml7o4n2k~k;m[T^9 37Vxj (~vU(nRAo)#> % ! y~a[Ԭ ʠU Z.q!&ݖosT iFWYDH=q@!=p23bum>'{KmR0$׮W*3# : ڥHZ%DnEtixyGZ&U;U%6RgvҔqTk;&s?#~A;`{9TY/'hX qNY?OE:l4r=)Ԉ^Vޢɢ'- YJ[d-E#IS_)6\%lm;'`Tiΐ zoo<"433BFSaHbZvLAk9 "ny\w.6ڝ%pY p;Z C>"g%)~pO>h?lE鿝/>Il="%*\1C"~;ōxx5BR39f ˖8:gPD2&zA}.l tsL gsb+ dH]"F^Ak`]y`gF.r W4M.dot@^q= ]mt[{ڥbn*pi7k/F?|Slf M-VX([PpSR[&`"U. -bpfvG((|?(2%_HB\Q0|Dsύ6N#byH.*M<:XPʍ(!bg䚊Iz2+vsH4Qr-t> r<

n 6eU씛N@; h|N7c4%@XR FVhvp|ӂ+Ed♀ۇ$ ] ѥSpަKa^s;Dܠc~蒳sRhhfMTC\X!ZQ$=$WК9>g!ΜG+i j-Q<]k@'p~,_=EW쎌C. UIc? oGkpfKp`kw Q,Y񄲴qѫ1~-Pf}Xҥ9Z/o0Dj4UY4L$V7xR\5zdeDS(D^AiLDҮ_]{yBĉZxmG$0]ZJ껒_PV@% ZjV*Gӽ)x4h~5<?m: Wu$E81l{T /p Uk*5x)[Bi&{ਫ਼u|IT[?˶Qk#GDx0dA6fRօMcZ+Q0ZzBs_QI>aK7'u® =ܢlX&(t0ÝZ rirw8RRb}\c p1~z[6>4\w/ X m m&e"=d57 Ygި89DgT[?majtgzt"6AcCG촁w4׍][2Y\.0.%#S[vb@bLjͮ:~\D #Z,P6;q̘1HsDp@.+6%EC<3<ǔ&6N'H2:)v^v9q=%Es3;aK82?t 9&!Uel,bLXf;g p֞`q#-]o W2|y1@jg:gcw*qUF/!>*NU{2cW m#I@4Є/P::SmIHK¦ =ʛ\]V`<^W+Bv\!ًmykR [Uwb*5r ? {g;䊁vo<b>mhr4(ɾ X6kDs;q;' 2U҉{'ߖȒ6xMߴ&|oF, ' =As_?ږlIL_z#Zir⦬KbwD%@k0Ev20n?+4q|hjDhbNӋ/7TXֳb$H3uEM <+w#ߕ"> ;:, E"/}!uʐ m23GoM~VUJЬެ\줚qFĴ8 F%U7Fil*b5剳br*}'Hrm!P98[fuKf*jڵ$U'zgky:YfzC[5PRLy *iۭ$&.:9v?KmBd3Kpg@bOY+ʛCH`KH>w۹Gz$C%dlu1άP4}y0Ӟ[o~xƿQ'Kf;/P>%H! C'L$קvJ*S*n*_L *L#_yi51sbފEWT`*\s஗}~]uáSrLqk10S:\7 0 sy$1@/fK}/0ϟ-QNٻl,\vbER>17WGEJ|S-!W{[Fh۱\[RZ(&$|L9s+@4?QYa81†]o?*-jvG]/ճעL}> 3JbVa.GN ($y"_q:={ÞQ3||:+]仦aVҼRqVcQ\%0d3**.vLJЂێ$R6;,sn*--e*+Tư"_q %--$PS3IG8ꦄ3G./q5;M6u38~UcH3l=*s%Ł Y۹C'1 6 )L h`vn/k'Oѹ< [žV(%"DaID& ElDasT956qw$9_%deن{.H(wRZ K/ ,+B|b|e0vu.#8E99f}f +c+(iDPk%%\X9_J<}_Ϊ9uj5*'Mm4_m%{/ua_|&wa7GIwj>&l=+vĕr7:miI$m|$"k~2m\b2ӷ#SO47r܅}`ͻղ1y>/9wrUI`;<5($˫L oT50z~Нj[6O7>ǻp,,(_aUlUִ{(2BiZLDWL#EoIcXgoˋ^&ߒX:~w"Tz3}Q) ~%]az C1+ly6c{Ip-9 Qp4َM軁@Ji6 Ñ (h[pdJ\5'Ք_,v#2$o'J~/yq<CV2Vs3Ue_T1l@09!k$ ͚VC 腓b4t?;2$ xzO B7(Jr#6-!YA";vu"$v\VG\(뢇XήnV0 T;oz36K14Ͳ4cAQVzj F83qֆYً1YWoൢ2Jw,PV>Xbpvz-oe=Μv֒+0.xCHX\-"F: `jT:寄k7|uq;7B#x%bd\ ).LmI (2֗R QfX! ݉j0YI]/ܺI+ʸ[HlVc\tD_f'?kCsHd@悓S,b7Okuw4+&]W_,NA]םo eq))V;ȿlKNvJ} YR2ެ\k"@Д^wk* 7D91lIPMvWuCMο܊3L"~Y~>~pcF~C[ X2lVl排)FKy9f֚7%wf7یf7-kTQsw;`iqa̡Ux`=! n?/1d;Pt#~oĶN4c[[#`ȅLY, ϼ\J%,e.ppɚdcOy2iV1x9I0?Y+- $?}BdbE\o=)I3CE=ѡ Qyh^?N=&y|q->'?4lO&LRVp`:pVI/7o>k?_ /vn1F M%g(|wg'T?=RP[5` S;iуpK3nm$.7*m( _|JMON5Q 'r!>v7X$r̘ItpB_Yj~z㗉MfN? k?p̓$7T\]К)fbFr@;%SO9Ȇ#Fi1fewȨw-(U:zNia5sfh[jn&t!{oHǽdI}6HRQҢ aJ| m 6ryLr6P|FtH7TL]HB llƎ훾A!;}+izp<ۦ6mFgდeL 'Xk!J\ M/*: }#SaBtL"3O}!)3%LᤗcV*ع {GE:o*G ?'f1n:*:鋴owR z0sFV3 H|b$%/^C{fA0[J xA?Rk@J`1@[ ӝ({u=IB' 2Ԛy²cq!2D&Ϙ/t3+{w })rjMe(q}0עxY5=4i]MaO؊ȜRѻF p%Gr)*A |&lԇaNeDչIBs@ ૪>{1X+>C<eߡtHg|N)ZJ$`**rVw,@툙cjR Q{H#H0=;d3t]#yl“v)rCrIS6>8 pG5xNѮmzί3YTdKdп•d3gP'efwtJz#8 =,v\q2KWHhlgs=d T{S&!s XuxnXog3 R@}y7||]^ fXo/tzo-!U2JG<_a Z Pd : |>XA,8A($a{qsgo,"aDJ ʉ ~m1.2\xhlr&bzXak~vE+–7Q>\xY{wx~NmGe+8ksYqmih%oj堠o{Dܮp U kj{kg;~?2_>/~K^* 8\!b9S +K16/CҾAhf@nu[fuvEDyB#7gD id~\WǃИJ 4#aΞg Yk}\|{s92 zNM+]3L*rM˻0{Bl oZHA`zbyus8=Rn0R!jg%LtM2y(TH,"a:T#O-QB=wO/mbdW]ZӸ tVI|_4Ɨ ZD8:SUg:x, H :ÏJ rECmMcM'. lqqv6h:$)g@;̊w뢭4wk-,t6†a%r9I]A)to휱I؋x߱`HscoONy6@Eiq5'aI{M9ΘY$=!Z~_Di9Hu#)ʬ#RgM~*d@,qL yV8@S ^3 Pc%K(4%O70% <{!Vrx{v=AsʁoyyΌTt<<]ۘ7Ǭ*"gɦ]7Y:TC /[HjLK; !ݫ龰\@U 0e4jxmqGo3d#+KŗM9!V:KG#i) &ĚOuf,;oЁ;"׵G ķLt.e#H2s*"1U䔂:-͍_;(x"J  >c#J(8}MB;l:! "'1)yNzƅZGcGVvKmlKcCʅ€@1gBpH02 J#w\nx(52ܹsPr|{DnǥjX[iKu\G2i/=W5? 7G"܊*rNsLgNp0#A%9ѰZ'd;ZP٠$QwH_-fk#ƙ*JېC?r5 8 X')/҇ި@.̵txscc9,\ aLGD!0n,) a}2=Pa|={-&pgqWaVaY)_Cl ,KkʄLJi5r_-d ~H/OJ#b3e1W&u' U]ǕMQKj[_=-rC4ib+Y%D iM3rObIJSUD^#\pdz/iB&Z /'.Pw>3q籞Gkd w8pNd|@ZTɢzD =ͫ$UћxdT.g .({*'U|v zp2+;ůF n_UaB1-lX@(vԒbphUv=8%8d1yo"x-9X><},Kk;hTb:]b[q0m#y>`Fl"MKKE^'yxBЖ&F+ I}K1N".iIRơVb&|P~m|<`'d UԱgmZ-xQj z1.pR2'krhy=LGtjU[eGļ#}nFc͋Eױ2@[.S/#: 8'ZkQV#%{ =`D*y~c"S+iӾ YEfɏ1sa{H tPKv UN Gc݀2s; ]cK @5/i<۟9l@]ӁUƂѻɪy -^(G/z, !EUԘ vMnޚ\t)xp;Z`F y-0=i6vbdX qfgq%h.(YFn8~ xj}as3V;w '+LWsY0zNK+>4!< /g#[dRtt{>_+gll}3ra~b5 :[Hqn'9&#wTjSZA%C{|WW\0Beԃ0-@&[sVC_ktZlފz)!D5!nWԗW*rZJӛ.*]J\ 7^-͵h}*qF;#ÉA77yKՔMLf$NPLiY8異E'{OZ$`XJ]ZN/nV`ڠ,,gAR5w;U/"}u29pZči&Yn@50"ƺhLK@GRؼL)Y̵P6rr^}EM-$CnT0-Og-cXh8`?pl|n9"g`v$|cȄW q5] k|qNqE1˒8V"< ax4k.RI,;~% uef>oeE(]b,i2h( h}E[}(,(\Jk[np4ω)›͊V{y,uq;e=aKGdݍ V!Åvi؋[TPDޅT ~ކ;w(8̙tvнWa=.,sf%I')S[6KF$}|۹T\ lBL%8NEh㽐tb;j,9%.: v#gUOv+R2Jck-|xYtO%o;[5C Z Duyr\˫"³d=svKcк`oY ;@:hz['hH#ݸΡ𾴔GU) ՀƗ>ºRg%QW.7I(5=alg.l b* &@=/A琕x6dU} Z'u+j%aSRտ~Iz]Ywm"ri [!Os vDk mVbsJD?X8?V/+C`i1pqsht=ݗ{~iYȆ5~>(sYV!RsiY?NjUc'KY8t~X>P`IK^)o4/dr@{ŧR (.?bn aZ)aѭ&B(O54]I!3偻˶jA:H^amq]fűrls%ƒ0rYe?w0Uco]G:C U/_p%U?ȣf"O]AߠIxgA t: yՇcHn;QSM50{~Iw oYpA2oy0iĹٗE ʨ 7?eSM8~`epOd?RFytWΛjY8@mگG-\YTTac[Llp ޒ;)aأN:;^tj彀d Ѕ, ^9}?*hSNJAE!ffBEF8ʄusx(zV@RUDZ:6C!PxMX. >z*9}%\Ql9s,dkɜF)YQ= .GRDjk|IB 17%C5CxM32qeLweL9lʉkGʝAr'#eæ5g -Q4PTjO"4Ra8 C~2yJ[Rv[&Lx5eq<)fCq~8cXíq\Y#4JwY$4PFVOF ,,IQfݷ9^fvYI`j;@P3gT;*ΒeiA$я wsf7 z3ėY4ڮ;X2S4Quiub܇ 8MZTI+Se:1r6kaPjYXlNn %FQWD6$96[VͰB튓itċk0{6/_^t[x^R|&(b?ur(⑇49Yd{?D35Dkii0Vo_dk鷗kH XPJϔ$4 ,+MHsR\ RR'=xe"QKYNa /ٺ2UN\a,yrV'﷍c5סQѭJ>Ɂ"p`x~/mO͝=jI.[X'k4-'8 bۏ d3!m % l_o9[  6l 藒DFuT.HkR Zqsp9ޚۡ^u>|57uݐamMЈ Cձ^SzaW2 s~\Gtu )Q:u-" nB߼fASx(\;:jhɨFS=i;2ckqx*wP˫O 2= dNKjhY ѿH>* Cur!blH=N1$Jùa>"U)!7(E8;qXtdRXW(xrae$*a҂r'=Dq=rRe&9֖MloO;d VcsIuh;s쌷| 5v#~tyG g;AFpxDC6:8.=yiA/U{D^~ s঴oV$ډM<LYf H4IgU.ŧLL虫+H8%lzc[|}3d}Ġvκq~w/WY&a-?fFq|֠`GE^n^)Z0n#k9)b_"MMņ|x<^4=xC] eV'~hgݧ3Y'FxŜjڟO_ѯВK T"0 ' 4 =-"W|8[>89tg0zB5XFa`EXJdKEvFP?%7lu&|Zdy,FIEʌ~TSTѫqi.%d{j7z w/|?0Xq}zcEN9?d/nZԵHt@v'e7d5փl#>ɽŗfNJ_p`YJqxt*ҢTL[ yh ]Vj) Bd/5 s7zIjKB^/neo=UiFe͵|%l s5_>lG&k 3T$1 Z'0֐6xpW*xxmQYUHFɍwN*ڽpU!H93Iƍ 65c@Z?zs[4+2(~bF`\9Z[* e.,?JD\HLu55c5]RG@?͉͵a@n<0ϱ-^:/\p+^a.! c:PC*Mn99hmaIUCn$m7"hC(2V -e]έߙ5əې*,nY6YoA0Kya%QہVOqjW9y =p]/4IQ+[ԧۧT=5hVghHGB&E|QsC!Ou&HCD>m7K?*w'.#a-GTjgpv;46{m$r֘Ktf.|jS]l⧙~ ^oD'99@\P< zj|"L8.LRE% Waq6~:H;3C_>?uw:NLJdY%TD5,'.ăSM WM->#^ k'(Cf42 @ʪsͱN(ԣYGі)CO#IŸvN伂: WQI`[bn+FW agx:uDG\eE1=Nj|Sr0w![jR~Δ<]]0;qڝoAM(PL!V* z6 s ٗkbh@d:<^:s%ඝwuQhl :2 >ӱ09Jφ0ḋow6z #͡;LDŽ&wa@ wĺܛJ&u} [̭UQP]!]јG-2] @_lxamwL'9$-+ZZ#0R1%N[ tJLDzSVd&>̑IWZ3 ~*bkwI8_IG !ءW%g2u}p }vߴwumqL"^ƕ]5G"F9d^P웣vp{VbH'ޥa Z;bNeriQn]{ 5Ċ[Щ)ÚbD!Jk|Gc![鳚0Dk^]LatݵưgH Gw¸.t;OU˄ËP,^\<)sǘ*[6wQqiC\x}PS>#^TY#mPi]a!fʎv3};_P!1%8ᜪiD;rL)Yќ&"ހ>`ŵ}XiRXRt,u/swd8Dp3@.S_&F~Р`IJCLS;EDG!ᨀPwj0ׁ^g1+sϫZ4t%\Z }~ [[)?pc攣6pS_“E E0a: ,A_[#kSMӽʤDz{&}B6.L1*ݮ-˖ս<}jX#tf ?cE)Hxp,sY0CH /$nشZ::?\[A(9% 끅ae 9\NDZ K"5x[Jt4ȋؽ?iz/l Fý&F ;B~i̲!lK ϿJ8gng{S2{ )^&XHh50塻;P n͚N؎_]-jF|ЮqcWb qvOˡR΋Bj;3u^Oy Ŝ* C$l̢{ة濢hstEg(b9l~g: %C((- Ľzhi`P$[1(%S Ӛ4Q3) @PEf A8蟎ߟjLd fľ̃԰i1*aT`MF+-[ s!`| ΟqJ/i)E69S5KfJ g O[̻L߿uNx~ UeUQx Ӵf XAΒ .כ:W@0R%G`d|紉 ݲm\TůaX=(┙NJ/hIJR+Q<,eCbTSϥ mp w=BSŶn=1)1us#>oogEܦ4^9'P 44FS "xcd݇hcmtӬ?R^ l(kCHgP7Fzn֯q$ʚKQle[LSǩƟ$2a5Q")T0px>.l,͏x ,؏r$~d?6פ"tNVwγ1x]Ï3X!3EF&|ZgT-5(啺N! N :d%hHϩX _RR=6$ lWS[G, i8N}%\'(O"Ei|d(h9Ҿʛ \q:p)=DJby|jA8U€6l Z݂7xj~LcMp1Ur<@f$ּ;IpG(cNݙ5$ɿ#`_1QVل3[aTga:es̭6o]K8\ ӾQ'(GQFzmbwk)06#l:}cO1g! /PȵtY2' ׍1LCOz/Nq<9"j8ITSYyfkX/,.WwhJznD6SA2 g9 M81xhHqx驌*wǢ@k#lXxg(1Άkɶ eOK@}B+TJ %EKDN'Pd(UL͇U1YR 7|,%fհ:ƍҟ.n.5V+-DN [YP~Pw̳,>DƼB`wjjfI߆ιc T狗=_8 вþ?3\% yfI?ױ㿓R鿃!7j\lkZ,)뫰7k3n-("r+h?7҂ 0<Ƀ߽[%pL=pv6E7;f7cʕ3~?&:͛$xgviD/ _DjI+A7΍29݊،x(d!o*p7u37kt$V$}[:w%jNk5q3;;xeV)-6MKs`h.#ۛah9#^`rşN"0/qӓ7d 5@ aRj : ,O~m?C]W ^F3\P@n!\+x[ވF:DE\W&X'v3z|Vl;o>+eC@aBQq_5,Ä)+ .Dt>u@le%dkTr9" 6 KU+_kgL̘D2_UW׵'ZeHeniPr5}'`Eq ]K=Wu+eKKY㖘+p?h[)5[H^k@sl)UcnU;~BAbx |m …?(MՑ0ik^4|߆_%Yp6uFdȁih!I# z#Q4ޓlJ2^k»t(WX ̧-аz`]~A5Y@n' F2N6# ~$?j="Ū>E_%b4\EЛڢlD7U %5Ey7"zm ظwTqkv8+-pWOY)0!)xWJŹjO⼌ 5sҒ~@~14-@qOПܳJR ~z#Tq1.w4X*)hel`TH8 R"W_, x'Q/xՆO䠂a+S<%ZB<%1nUZ3IOV-ޯS [DɝQsBNpwMs˖RG!'&,m͝>[F-=8>:Aגj3Gabe LNU=0480uuA`hYAnFo0*pRyW6Nsgz% 8 B=A 6Zm3*>r5y qd)TꄇI'K"Hi4Jmw'Sk~U9Nw&D}ݵ Տ:3Iu+%^3~5S}EUF w )a>br/V]AI&)~:!]1oh@_רi; Wyْ 6Gw+<4ĦiH!m 2 \}w`D*2kCPwI:!JzfOq XsCXf T9G/*=$|Mh7[qFZu%3x%.2l:Z.XFȞW8MJZ$]5m%}{'' rv ҫh_gQ2?|MrwB^eZ7ˮn"u(a n))u@ͦk8:& HvxՑ;g4sUg 9LB'?EoKZ ÛhDɾ; x:/ *_l7OjV*bݛ;U YpaAV[6C:%wxoJhl{uO詆`R]ˏj5'sGo/C]K52 7 0Uy6/;7Nt-(*I*~Yʣf}-(j{ea 4 {A@L._ NvTE7I5_G^Ҁr$|"7K#!ReMlW>r{ۄ3T81~T}04mR,t%#K{euDAz<'d…lI0#$s'|֏Ğ3% r1E K?9󔃠hoF2]|e %CQoM0vYft?T:e ḇzsVwqԨ%a"j4$Ȍr]G*OaiF#8_X*c>jvX[M P8 H_ VKj7Y)ezc_EBgШnJyѥ/UOb=N٬'eBl(ZlCBEh^J-D/)c=N} fQMrUfav@T>nΔО$+h9.S%7p!E"6Lѯ OiK]<vuL';S4D1ovjlAj"F^[^" _DGr#6/E0tkC D*zL*RQnM +9|t[h#4ZA4;aPIm+W74H'1>bEf[T6ؙl2pˍ* c@BE)k(F;+F 29fFOג ί4y؞)^݋3׾u ql!R` V-WQP0M. ]h0G5[`@ Qw:ᬊ@KINk>ZiZZЗ#i> :.AP+H`-vC&Kl{Ms]J 4O.wux< 3*miNӾm}(('7 f^dC#DErc-{d[Nap!kjyOkY|"ze:hF0?B Pj:)쎲~ ux!cܶrop #$">:߶Ř-7 R,&86Y줟+[ w4 ړ~g}'5+%h8bT' }IieͫzI%{Ņ2I~2/,"5[;I\Vj >ՠb"?*J%{~-5<~ oӐsԺ"hRn'üL|ިt+ /0=l񶣔7DG+lAR*L\P}P6gd־t#{_^G> tIQc<=h\W";VRϕIDg-m7W@̸ uw/RxXyz'Y5ޣʷauW۵E7"X;LA  ^nׇQ7%i\!EB>{F!cԕ0 U&_9б5?Eá|5 fG94$F,'v\ JUOԆ_jkR'=vw0a18_.:zt|HNyde j0@iW1rM`tB %!ݚ~ϧR~&А퀌+RF**yjz;bsa =y Yө)MtDZk__:jD0 `>3vc"`F nP;Y[B. Ζ-kuP$3A?:@D$8;7|VuٗՒ7 ]2! +k Z|O >4z"@<~TXL!qSR4@XHd>bSڍfsKއW7?y7U@r/ɪL9eǾE|=i//59šfmUN*?T <+~Yw&c::AqF*Q:!Oo4Ī#7lk1tz7GĽJ a% *9m5vTbcv8IU_ x&OHC'\M=ubLzHecMPA zkݩL~U_V x\xҨHȌV9POMbsd3NW^Zgե&ϢWpK@Jk]bVj$wƲWU#* '3ؾ񑃝)w5${hSѤ\fuJ7b#5vRTA TDi!cJBיp:D̃Ih#CG-i]\Trɼ%"rܵfkRk0n 4ON}b}Kceԏ4o<֥21U&OSl=-)g[n4-Y~#^6H εkn19{HQ6~EQ"j~70`p5Uy >zTx?ABb(c8Ҽ:լz  !- 3fJ&U{ +%8ĹE"58Fyp'rlIRC#$jye*{eVfB2n@Ulݴ=(u5(fmMan| p4 97,oN\Ծz0l3y:sodVhl ny7 p9SEioV4r[-xPo^@ն?-<" iSxwlLn dF!(*iHK6 7 QDFu?F}( O$wķKWӂHEj6oW@`(_g 5@htjQFL)x{dъbv?N r>"?פL*eʼn%58rӖ!yd]gVU`%C@U g*B}?A8J,篔1ȮQzmk:`Ifpf!-4M1Zxk`^]Cm6YEot%o?;}HVK\xp,-hS.ufdբ3 (EpۣQkƒRhpCdQ9u)}'}g:7ENa}µ`qDz9t(KE`ӪOOJ0ZRz,aÌv:: ∈@z#dR*S$hTF!"&]/S8+O&TR\I>9[(u{,t.U(-C#zB3ı+Fщ"t[T^A/&zW)y05/&?ĉ"lo}06ӪXPXfϥ F65GA2٬8ϡo_\CiL_9s~ #Y^@F!;3"Bx.8 \`B>JM*JG.:M֣YCYGw,j(֘kaڅ["vQ!3#`l ?7eNۖJxZ G0`-"RBBy ak"rPYfqeEq#F8G9]}D;:x \]ad@w#bu0nC%7˥alӾ W3n4 M XcGptN9ͩx$"t+_lV!30b:ݕN`r_#`Q8-ɦ%]P m!aQ-]3q=Sotnʉ,:(VCUHLyDv2u`4)í $֋ۖ 'jmT+S]G) $=4?a 9 s{Oiz|(jAڧ &<+wŒp-IHƇl11'Fy3`yicyV%!mml}g38DBsߡ&+n֗B}xάȀQc9VYdq\Gm)̆ ͩ3#~r/yOfn:4GKW@O,5J>L ծE-qs RRg $co?mrx7(o.<ʗEGB{\9uUM ĸiVU hf0iLl،TgT7)b8౑hQ.#W H;EIH d94jz!vC*ǵG08='+DP.ԍJh, 5^jEʥd鬟Yͳ_?dkyxn^088'+ACXAXGij7QĦ{?HyC4)I5&ㄞ*QRH׽]);<=esaW^w!;ښlRUU (L=A*L2+Zz<ó7@1R+}|;\zĶ$1" ̛asU2ɞz x/)Xl3rj@\|G{M,8xO~~Bz>gY{Ed_dbb$87+r#t[̫o _2(3)nh}`Ϯ?7vVaM?YL躿2&_&rᎤ-2̙@L6uL:e0xG/ @wY!^Ҕ%~&BKh Q*\RnѰ9$zD: z~a*PW ^Cm=ǹir{QRALBau-2n Tb!wLrXO!\4!DC9f[i{ĩ[xj .`;X_ug4_ME+ۇj. KL1\7ĸ8V%zD~b\U+e0 ļq2.RhCf*Oy?#?D,\.l{eEfLjvѳ9@7X@zx)8hA=T-/v,_H s/=XZ\Zd㈞&։lX‰O?s|]D Ӭu8G薥Ǚ?L&!WDϠ"z?VTOốEXJ{ލh$99*+&2,P9/ [%T-y G&l@]}!;RkZwðv\> H>wvTsٴ;qzh%w/s( |М{іlbXA G aWcS:+# 9-l2?SYƧ4ӽL?dvs&Ff-{"lN)}9t_BK|b; 乽9Dp0W5t}dCΝD*+GuFYV谉_c'%ToO۪-aU%oÈKUr[B;UZa50llΓ@GKeO;T?V'Ql.a?u?ysnccH!ʴ&;UR}jlӬuXg]mc*u62gd i:%)`I.JB\z#h-9TKa ;u1)7m]ɬ ?Z|Wmsi.~%c~ *޹e_tdRX#{m̲;VD@ɞT-ʔi gNHȚ\<;m,oҰyr̽F10z.! rϕEc"Lx_@|M]vZp.j^%ìAQR 9ӰnИ|5xzoh$0GINwYݵA?.T`Y FRF $-=mQ;xLjQkVog!Vq*)C0M 5^p˅D7ΗrO?ogj_i'SV\S)87+DMx_7d2J*:jh/l|a]ʚlڣ(h{ᮑ)E&x]b)ULh&oqh[Ri#1q3kE櫔/kVfQ2I̧v.V!HOΉ&N 5%>Y j#nGfYp{j-A< yn]2ΨY+63RÏqrQpxf_-[E,{| {x h^u[uxӰQ<.8퍗E<QXqj>?EխsYf7Sx&L bI0(/~H;w#kowd|::_vTHS m rhfq ̸d+pe$q+j8к팛 v`SJ{9 "y2꠳^߻'O<.]+! m:7-53Pv,we"w<ArC$}vtc֕@cܲE<ЮÜ6mbm)x 26$Qy>Q1 Gn^Kl-JXN'G5%JE<*~<^>"\?zo؊8QlLdu<6dHx,:8h7\ ںU& C1,Q1h[sn k8Ó4(eτ?#ep~vʞiοE1+JQc"N J ;OH1N %{y3uGdԻxG^F޳{Vz)gnl Mma\NNɐ :\`8ЕaxI>g|tADI豊P'2E k9'T\%iP.xc9 ՋEVՀVi׋w\k_哜! R*pU)N`7IM ]m-06TwjBМ`uJ4Ѳ>ǙO[nx6sTl};(*",*zAHmy ]_ 4%C3`d)uLTQff^e6k Y&m"ȑ GE__6A7L&>MQK&tB:[WMNZKy[Xwa se}JӪiv,>ʢC*]IS_m?eS1 YĝXʿ{ uBw:}.u^yϷYlf)xI͉I{ O+r ;h>ZR܊7+% $h xX˂EO!Z/3 ]˄g{ng[]Еvq#</}jN`-*ZF42sV"|M)Mmwl'k>4ȔϞQA@Aֵn|n@‹JT璛 YgZIl9dQ 4稃bѸ*q şu]h;8OVgz **έt3h_&#@/QvKw ̤:db eIhɅNJ/4ԀJ6H K:.vYiV13ݷG@}b w-Y6}Ԓ*l%a}83x ʇP3my ٢2me U[mHl6L̙~f{1?7ZufX7x p2F Azwt(`B/Z^bAѐȺn45 O37_l'] b_<%?DnRߞ{]Y}f$6/pڳsi&.تg:φ@ tN̨MnP" j&5sǬr=>ل)mྲྀ>Na ׎UW y=.[$ Ҍsp3nx%b,$PpK"5ͧxi|\SOdYM]՝XF4[:^0iG`s] 4ѯ)_\h%_rhm۞!KxWV/ 0ڢI!26~͠u6g_yŌ+&qsSO݀S1ӂ+;|ȿu]ÝfAWv *݅7 vipq? 3ϰWp#7n佔סBXAtBb'G%W\8&wckNGռlIiiBi.44C^ߓVwvq )_!CwQ:[Aܫ;U"ٝtزo}'M3}ߛ^ijn%*pQ iᚘsz7x­Q=FP12cxǂd]C9 HPT І:bhY4~rYY4CpbפP xoܜd>֤ ҸdtJ&BWO[Nјzww{=У -"kf&Li`xz*1#Z!QnV+8t:Pߟ/cV(߽2r_{8{c\'vHmКvM9g6!VmIp2E"w&tLk|*RdEUK~m rdX߸X*Qw*&ct% TQo#ֆtuQɾ&x3>W]̡xYOQqKµ8)q2K`'2/sY3@|A/VÇcp\cnZ.eWppzvkӆB}_.a&3- &Qxv_] Fl'Wl`FXZ̜ W_/KPf]7W;Q~,߆c-/vKf AήE/ U%BaeUIz;ҤD3`! Zk^rNvWvDۿ{>m,i4 hD_=]3zʡ&+2I#XW3P.:BNֵƎ:IUDX]cvhcr#o ͅ+sJ&TKH>F<Cc[L[/\JCO*HNqMlM y#ʆ?=* )p<a?Pk׋)V`y^߳n7uH'ǝH5TA/-cq5Խ>;S-p 1xs09FwbGU;vD+lsU9Vl[ltYSlut"e3&Dp͕2-ҿ[E :o*w@y.'q";Ú1^i%|:-;p1/ΛkjQ7O'8?M,?OQq^E8_ )7!Zq#4W;uء?~; riʷz/rE]f>YSnI.GN^]oe4r"JU9z헳cQ,:ITϓEc*Q9tI7 MS:etgW;<1KeuurXU7S9|BlLXޯI86CiF&CwŒVӻ>O-]̈V칄Ҥ$4>s)U۠x+!?+' |B]e/NH H=w U*WN`l!trn=~+"í^z6ilVN͓ꧬ3L>ܥņҾF%n]'ǃrZi6w@rΫX%zmwzɀ䧧ޡQr#٦Xq2q3åCkt(T:fgRue3&z9dXE("ZF&=IVV:Z+@[˖օ2rʽJ$Ҋ:1a-LdRf'm A}֫f8)Ԓ:?f:&Q`1u L;R@S[ %|yVr:-YX*㤤iσ~!ھN {F0.`"&MRV /fh[gJ𘷆Z-zkvKUsLzb._3W'M+""/$o}ǘ!@๜tq\8YԳ  Ԇ(L)PeyXJU# _<@4@DPtYL7wx. +Ϻٔ(N-4m %uo(Vbg)ii e8DŁ-H %˂Um G{ aGUs"ߠҌ9*0v(nֶue/LӠÏ|&V~O`T֔˶3Ʋw/>"3\W7 -քS9=LNeMLeVW>AߘX/NOܳGqy8$->9r(KPB町?' F=#,yp1BJY* _lp5$N#@&ޕ]NTKW(Qt^:IģNA_.z]^1,)UGiYRb=ϗlT͎,>Wl4mz8K[ήDlTGңvZJ<<B޺Dc[fENa"0T\XqX3)hI\=<瞍lglkb}G/*3ָk6 Y)?{ԘEuꃁFײa#ueQ CGUZcB [6Œwa{oinLƾ:+O[S69 NLjbp3uzގ-k=RgTYF/` @̕?۳I?>6.ybşP|"-xDiGA].\`yL-b|;xgJ1W<Al+ baWҜ܆2$1gէx 'vc2 " d?y 7|ux"޸>VI6% hT@.P`?T\c3o,~ph{&' 킟c~,vڡk#J1C(] $Qw`SWJP^zډd@j *t|pߍ2 J%x2Q8©2I㻻<0[7N99l#a%7c_Uic9L,?m_CD}Pt*J8'^6zc*I6xpAMZ)$LٙS2#|Hpi£@I@lٶYRe 8:ZWyg%r~Β~AMXao QؿY#ѥzsLw d4(LmѴb6>2स|*}ᇜSz![W5VQHmweo=go`g &e-12 )m*iR4!^ УNvr*n */)* UdY*S8?`|ηcv-w:#aSz=a!b2{%ȩ<ͭd1/T`LOdcޞ?Qx[\f jR9ҥv]p 1_bt [,4O] 7+e jEa% u<2%[~u2/WcT`:?}R7u^B^^]cd+3QmT6kplXl;if30ߓ9*%iuV59oxN;,X.Q~wTX%vhpش/BucX\/‹ϻ~~g685˼nn5JrřbN_^J"i (b ކ OJK9;8gşKRYj7|#TI_YD'kFa47r1Gi]w w!9?Gs鷺XkuC[ńƸܧ`-=]pp0^B摛@^ vL˱yH a]Z⋗w:+U!?. WsLh.׬+ rc4/m >qYj0\SQ)D͎Ʃ?x|Û#f4)EaI8:U7"ULӴ+/Fhm|JBۆGe-K k-GvK ]W)1NBR>T<TqMgvmI^hlpf7r ~(]f}WԑOk{~G  CfVү7Wl` 9^DC@ymU= H, 赑USo8AdLF!e02,SWaT&#TP}}`Z"עM4CcE hΦQjͲ쭅.+o͡~79v|φv29 ZD!I0 r35|V9ϰ䷫)Z83m;}?TɦɆ29S_֓(L闫Ny5*𵛈95x'FpvXD76N6ID]Bk"zH v&siHK{9ADO5fpY{ˇ,Cdb:7l](%8hFgК.&4dBNB|5͎{cT%{8ݼ[ɛmz &Y_ELtcBfYlW "p%[֛wDdB5{yFfzI4wD+c(,;ŕD)Fy сOp|=ů4_gnN:*n`|H1=hp/]oQ[lyP#yFBHyy{m3vZK{.cd6n /jƄ9 fMv)xʰ@S `ɎE+XR1XSÕ (>%5;tkMO'ҋ-b}ˀ%H*sS!~ b8E[.d7&9v`}ej(;jd1Rg#vB܃l9sfs_ &zn&~K)D, #?Up#SuVc 0@q, PMی"҄/`ʬׄ;`4h?IAZۍc9)jB\ѤV9/M $s[ERd2_0Յ"Ac+T%N "Iہ)7& i޹AtZ_w:f9Y PtL Qӎr D_ 3,}B1 ,"7V)dIHp0`.[nH}E z FgQؠI;ӥoe!i1TBQSku;>6~9 PsԢD0oU.B|K6`V1p c@$pՃq8_>P"fEnSoD?ZV]֩CD٢Ɉ%hL!ި8Ս(-z-\-݉zrp-z/eܿF_ W6WM'oa2ŶEGM 4iK`{E\D\QC%󜻰`3d he,k< Դ]鬧Ut~]Quե×_!XP.- yӁ 7"2f1!MpyggFS8#*67JRS%of*o@ﭒѪF1"K! Dõ 8+58/`(A@ӎ9c3QQ(H%Mr+Yޞ*ŠSz}*<)9(GZ=rG\{냄ɳ}?:rі2#BHfĭ鸫g5'JD p, 94YCvPz*m)(Djcu\pA( Z.ee,|'I9Bu"jB]a ^Jvj^kB[{u4e7Ҩ|loYܙ<gIUmcW/԰;+큍gORbQ";<:%l;yLRRTv2b71R U byK\˾ŞZGeɈ;Ǣ.y_,,TI@hiS)nRR#ufӶ$fv,:s)! 4Ұآ7p[GYb}j=x#э%lDLhoRf\Xw'pG-D[IAǞgB=$V;ӭIͬK"A̲꒔Ű}Lbn GT=::ńYrƣF8ECKFi*s·P_R Pl MWCk+-iX] 9& IHn>'xqS[h-li|s]?ݒl&1 %}X3q'Qq$w ]GT'{Kg{>!9= > &.(rYn. )[렯sI%S 1qqQ**[e;F/dhhHQQWhRRA`)]cx1@t;MuwʫyGͱV LYymTIj˨xy@Xgn+gDl`"Wi} h1^-~ }|6"^)O E'lgBҬ~>0}=[ȳ`+0ߴۀ) ]2cӴVBtH@'z.|b -ttR@ƕn_4hQ`cH؜m v:wI> l]/l{ME㟾lu"GrV:x>ZbHFn@?XaR[)g 7N_ƜnXPF B>eWv_qϒR c \iy.wC=Z=qi9M{jy١AE7nT?PhKؠz,êu]g:CZ`?å?"qyӆ,U=rL@a`~SՎrI_Ab_2s:/@GY0&r⨤`̜?ݽ8׭"?>_pk6ZQW[nVrľ)Yi^5f}ȩGШS11D!H¬Npm2O!aMqM,](ޞ/,ѥy !, پz1\ˑ.#va[ߝ#@D(m?X4>r"ZQK[ǎ,bf ѹ6ݳң5(2HLm WEj' ̨7S6cwvkVQ-#@-qfECD?y=1?"NsMd޲t@ӗ_\+FSrkgj>}t)> Prf Jx D\dD Y稍 2ۆf~6%j~v_]Ĭ}k$]@/ {]44-wu yk3R eQ WY=M̨eS#Y׺V$u?w|<#y'6H26+)ӬL 7"!7O}OZPM1]g聄_-B,z !,Y@C1@ .(~!H!-:/mEA5jTbci8} (RAwaǔj1DYÃZg2g( &U^E`f00hڝ>)xX_#|A*MӰAWA`CGXf߰fa!X=Yc1T~IW(oJwPRLX2N1Oc}RZ }pڜQ92B.̃6S_@4|Q3,QAmy#\%徙$~Ռ'.GIڵi;U~tw& 2YS)5]ˆV t)1- XHenͅI!7Ltc  0-c|/ 4[nkNx߁Èz- tmsUJo5{إ3`ykMn{ԌK?x|(/ L$2&PVsۑ h<#N%+ğ9kYٔh8j"*4\Bs?q/$ڿno ŵ3zry{7I}!2x&:C.)|0#ڛB= #mn'a֚gDa 6{怬DETJ+SUExu&d{~A,{[ASzl2JvtJZJv@-[++Q\FR#8?l&_P @4Jydo*lB_rQ!^Ï@p I2K;$?~ |oo&p"Qz;*-xPY1\Q7r'bn7mGa2H'lذG12ȃYSH]֫ `{J¿(K2]b&J xCWnBG!:σ119uE*Tv#G\\Xń leAh *[8].2t h V;n2ڇԻYK0%׭qaAk^_@+krc{_#hNMv(Q,#B^5YTU.u`ڜl/1%,∅pz4*!42z`VA~ɳ?t9P'QιIznAI% 7&\@ޢT~| (4tm#SV|%seO "#AQa'c`QKe vޕ3Vn D(6 b5P$r?6h2?z=055چC38pu1i'4v7~řM%Lˤ\qt Z{M)E WďjM EKۿd` agj#DrB} o|h֤H-μֳ^ϡ*(orЃJ?6>A+C.!UG 74F$tF"*3!.ti(a]RowPMXZ뢹'_02ݢn]Jԛ1~};gP:-|+ܙ'WItLYd^?ZoE$JOaI z 2ݡw cLOZ(5A0m !kov`H7ڧdTc mGI`th+qI|A"G*jRX\&t2E[,P K %hk>.ܸn|Vpm7wA3=@M&&#cIꞲ%fl=~YS5jW^uc~5U?]P" oxWH8[9|QdUe@kCsxvGA;q!߸fwyDX|*Ĉ{1{ +yo/1 nUcJ|_Pb4]U+hBNhGJMYZ: \b6&۳/G1jU> 7c_|QسZ mƺѸzRIظaq[RcYř})h%ЕeB=IJXFF({^'76}MC+m$ _4z¤y?9l<)YЋ'b =}M0kE|6RaҬ?T +G]ԃn-m8nnJHRKZ1#R,|K`0s'~/] k?(j7ƑFfx)t9 oZ'{jP߯oHH+.)*9ђKj jDtwm+? mXkN+797yZ\_ͻKB3 ΃"A&ZҗKnOZ.)8 Py~K|?K'cEw׺ud\v: Xޖd6N![;v`(!!s>EnųTľvQN r92#=HewMni'ÍK- 8!Ux.'z̎2D5bAl>#)w?8|ӻHr I6?r'כZwCM|MN4F +:݉2^\Q7zpp3``V .sܦMgxPr(lf7('H1p/ӣRE0.c(S>_tX*4dcuG/VZߜ:gYE2XBs[X)؀[ Izos@c|2) O@c9 xHp*[܏I}ۻ^BPN,|QˢDe(C]n⺰t0ċp)SOi/I 4|=k D,! ^x6z/5cL]̣rg>F^0 6O:v"arYGB!}QOeX^$h$KƳi׏2X`T(Y}mȊ L(s3-$9@I'5i.DTy(l꽴~IAA dˇllHlPA`*bp@M=Nu\*Ipdr o|c3 ','2/~FP˳HSdS\ʏL4j`Hf8}1g=WcD(#*j˦$Ԛ@ӗ:[DwG$ryOwНS&;4ڸL;}Ջ`g sˤDc;^TBNr9Ј &O؞aB#%l5f $hVXvF"vhs"S2Bژu m7LbSȿ\r2g? ~( y. C:#y h!S ocYT-c$۠{ATo l(_. CNdoOu'ٽa9Hjym lc1TzK->1Vx N qh P5là) :Jσ1g±$S5W)//q N"V%S^L)c KULTy|&νV1Y#Y[;7MysWOӍn>vxj^& [6wЉQ dh| -k,ndS=zhr씌vJ2n+hmlS<zk\o(舚zN ]VѪ&Vub2jӖxȆM"b HT 7׊H=\v jJ:˖"P C6#"IȸC鲋q#(RJww"#c œ=]Y5RЃsHNZ7lzJ3K݉@u֛OO;b]ꤒGxQE٘ 8$w#NoV$$sI5gn[y4i>ʢc>Gk̷yՈ+y{`,dsR1R73C".^~$Gϋn`ϢQh;Ơe=$0ϔW%'EEx`7k1J+ЮcГ_U—Nz\y!Cס֘~|ɗjhVC:gp( EpWG ߘF ǺG삍Fv S?l[ظRpKY<&Rɭ ]-SetC.pJj bzS |{h͙gAϣDۀgaqؼah=\6̞o }k<@Ood=T\\Iǔԓʮ U̿NELWuCVi`r0}`nĩn\Jpڢ3.pe%vԔCT^$q!e $Jl9 ڢ&M`B%uT!5 ϡCu#Nbt9:B5$kt3BggӑBuk.C #s4QGUߡ+Ҷ+Z%Ptzur߳b2sIopN_F#/=Ӷ 7}sz3O7Y:5nn V9BИ]62ܝߜ'KÉx<3G`Y(_㨮m[2?c1ʐ_Y;{nؘ%RK`p+ۧǽ4ע v8lF̗ ;՘=E[b8B8?]\ R[;Jkd)Y//ɑs8ƝtnW#]7I~@\ɐ58xqm K@@h3N;L풼fO˧LX Vsq692pƜ$uv'ɯnÃFX95lmk9L~_;DЛr嗻C_r5[#30jb,$W?B/͵["ýf3`Q-IfK_]>%0~i񜼨'믡I_/41BMڈd>6s}#0Ha n6Su8i?ʮKjJ^`zZ#C3%!DǝӍa*C7 Q^ _̜]L杅 %0|Ϸ0?1o#p&@l)F̵\r(jfk7>olN =pȃC>󡸕вr20XJ}sr쪦y(y Nﳛ_W/ʸD#2EcLWA?\GO|ەY'ju= &绿蠕z~f}pu& N/q/Y~jf pGUFoq0ukOOz5W/7" YUlA^_T(FeFJЧokTuىw΃\P D@P1WI"!!yA[.I6k;4_rl3KNM$k1 &/\ EBh)aDܥݑg|癦<q]^4{W8NVFu/²T}a\䍚`i'ϟN#K/侪ҳQeVBL6O^ Q[)I?ѡݩgC!ܯ8 RȁjEdBti !qdgPsdn.4:ȾAH; xIH]%Tgu$V#փiϵƇf*Pmiq-p'h3kQ(b >.+J'( =Ό-|6u8GWapc&}[k!ÌF\4 I޶3GK0xX38}gS=]GQPwab+fj=h#d5>0)Ngѫۅ~ui͍UП=het(mzHdҲuJZDRjiY.:%IPTbwq.9;NxK<%s_̶VhQ Kxl=cWѸz흤ǽ&|9k}&ZO[d:X)ABCޭi%H8ړ'}4qb9\ GK&V} ݇V>1Ujl\-KPy*flJ[ EL},6: fᅥuSBqH^&w U7WV9\*~Y8ݗ-)s:}'HF5#1 ;@&$6TmDw$)üN,o$;nCUH`MuD,J[(\0<^8gye%,D?J/LS\UxO;ḥodq{-GH$bާId'3|Q1@c"Mdg|a##dzm'xG­Yfk5OB]4pTshL}jR`<~R[wG>_1">E;#Pׯ *-;̤j٘rq\C" '2|Ш!Xw Qr.w p#͸~eSSs^´5˹T`Zl:hZeBA,F%1D -l6S:c}od6cY@5}s85m|@ebmM&}qIqɼ4X]7[3^ĕQZdžöfGH㍱?,\6& @M @c矕AФ6EB01zMuwhӍ5*Vr<\:O,GsC*U|VM;w;N8lƉv=W6ĢF ċāřdz{n>PX=X} D6E&T{bж2pm~ĮЖ3~Bv;F߿)Oe?gY:@Zv*e-l%/e,p,@[AQع:v7KKwbE5~:i0PtTl8=d!!V-"}S0,ClPWAo-EjQ>r,ȩb!ۼ-sv,Grv(%%|ܖby CS+xm?P1pGjJ%=l$hNf-M6ܓHlyQ31*`Wu%4Mf d`i`A&0yi4sN7 ?֘Kd G~xwBFm@IJ8o_ %/n-sE ["a- zjkrCKe56oGNPU$.BtF~`vJTI^ԗU < x:%e#ʜr6b':ĹݎE9i$ք&;]a vqyސ!Ie0"/]Ĝ/\!> Pd3u)^_-v?s5hDb:~R|p$j@L5(ytS&_BXq/~n$B-Q`ey(-6Ks۬ZEn/\[Q_1߲[SIxq}_upc7`g3RhJliqd-noxMCX f'XjX \iL^JC( Hwf@;2؜|XX=3dLID~b< SS7bN|r$F _ "a4S~CxzVKCV[nK>)DG'gj&%}J*ErSń+Uc{dJ[OJ^Y"RsgV^gb{\* 4::jU7OcJ  c餵z L' =5ߖx:%zӽeɣ@=r~$17 zlkv"%=n$98,dGdCɞ^7TfQ[%3 ֡r{/ػ@`UN˹aR$wgy.oPXS} #kF i/D&Ȧ9MOrǾyx&Z]l\jD56 a9꾠caio=n7eG+{.4Be6O@C V{9yKQN17Łjgw+Ԩy Ng`V]}jHKB:sgQIF9`JH ZJx>\l`}ӣ Z~s ꀿl:^0r ;`@>Q&x΄3ClVb%tyQiLm_gǍb<#ĂIG8 f9c+Ui:Ra*c魘eN궖'TO\~l5ȩN7O53*vY͒G9dW'V4zG:J3L<\s&_\\Wo/Zf4@Gk(ZĐ47}8v̇~ qq;!.Wp!+M*oj鞨hMd(ﰥFRDӑ`VINbD^6AdʥP'[!]CHı)U1ARoTYq, zI]P< ѳW:/kT3Jծg82Cz^*rU|3w.?TTB;ZLb]Cii!N_X5ϻBoV:*Vq7RZ2f~r& ᝾iau#8@Q8 T䆿Rsoߒx 1uh1u˾FRf}پӻ4Ə"m"d isnI/=zx y6p[t()5s7UAIh .a-RۡXHE+pJ l3tU)3 VJ_+M,L"M+4I-6=64iן5"ETTهs7i5y" ̥96h}u^[ =.`- (SPf**Rֱ_䡾 F; Wb.rU [e\YmCx$#D[~!|`Yl/֘c^m3ZA1Bml#G>GPyrl S+5LeIT'ҵ-ey= LmzQVc @هdS~4287w2l#!s ':5W.i֧(/}Rx⽀͇ yPg[/l D0Gg *,N.bivIۤ =s4 ) < X,zӃ)8 ^v}A..h0&3ʠ{=d?BUw-ᕞy S@kpTXfC*!0R#67ҪѦA&ijvlEWBGBIL([z\_)rۯ+YtTM`U'J6RM_>T9e}9aȴjffLAvk jg9nsiCB_Q3+J$nܱVk״+ '61!R0%f'ۍF>mX[an[lkjzgiP̟eaRFҸE%hs~;3~<8o۠tm6è \ؓ8Zeh`e{crN [`O[ [$ؙ$ֺU>{ MlP|jv'',Y*o2F{X;P›&]k=ymp)aZF;NY U,Zs ek (<Války k>A:ri{Ns}ѹLg1lA$O#z̪Əӯ$BT3 361 Pa[&?kx,9˼s YϦM7^2 B 'Mr$e~/?\\a :L}+G2"!qcM)*.GS10UYG)&KG_̘QV)uᴔ&mV"J`BP ^3(tN* q]كp OwFgd.!=gp s6LTw`MKyc[90i/k\GwHE PdZI@^:x/][!"GВRJYP4,(o^ ek՞sJp5oƅ@h^)s ]:8}H֑q:\|# *bH-d?yU5g;Q \&8CsHp5xkPijOZat>ȉmqxb#q2 ж`:FwtNpX7Ka@M>UXzKL&3GrycҹFw+c gF46us5:Ε 2rTۢ7 *R9R~!bs&+3&ķgAM4XOlAoj3:F׺r;+ 󧄣z>(uXJ@ GlW삹M*a=!E<Ϛ|)BOC@v+r,k7R}´jE o+m1% \1Uֳ,o0OfnSHAwS{ =zYGle1|vU|@# /|S,\&+o7g !H@?E>Dy}Z8ZI[\(Y>~Fn Պ8oڧRAP։*/zF!j3ͷ1b2< c{L%c6SϘ"pZ㖥{>pӝա[KzB3Isޗhod>0SDxm=EA)I5m;.c wtr[fc ULu܌D0 hsǏT#pNsijXv ,x-q0: v8WGaҬOBa0Zx #j9b]& ĕEWc9<-ex"GPg3٪0T;55$,#Dr _ኬ9 ʽ(N~<#Xw3Qcfu0}).ܾ6==|Xd]4q)Q&42Mktha iejj2f{Feb|JZ#Ըp9/N[VI 2k[ґUՏlEtRcgPpxOR4Xpjc*>;|R#4foS7H>e'w[zR]燲!/D69_H*9-!`c_G'*> >=)ɴQ`6oWzFryP:2kJIZ7u*omS8w29]G25 P>gKIHl ;`L=Vo{9B;mto .w#=E2jpkja£W;C0ly'IM2 l]y瘜o/1jLk>H]"&:YޮcX, yV0<Ɗ{D+F%?P LV@3MgOS>^oEqqMbg_UrҞhՉӓ˳1*q# Nkgb|uHVg-զ>T8ݵMh/BxX0Rmfw=rLYVY::QC:#KrX( HGp.mJUfOr]fѸ@So8k.)7 3䭇鿄NԎڶK ̂WduDvx)+zСd/#8') 0N2 %aJI[Ո#Tt׳pWAh4sF٩PJ穑._k/KVA\C8!AqUnD8 |,8 ~qO둁ʤfRMKW R 8JR 0,|WDruZMX̦,5Ib:Bw\p5Bcw~CʱS.tQ))?Ṅ\ I:pA [|,+΃N*maxRD艀uc.`  bUWR5T"Kʘű"FWDʠ*V툎c;Kn=$^E5pf!n' 43Vw8ލ gͰlK MdZk:Yƒҁ0Z+}LN \QxYe㶑PR/ջ&ڮ-]T7fq+IB ea&xmq[MNбBWY^⟄~p {M"G-Gq(7c9pCI5ŠP`cS4ȹfw9wh=e;MwG}2_;Y?!jC-Y2`OSՂx!JZ?J?Qˉ1<RX)[yqK4'`0N%渫s}ovapKwVuTQMf/SCSgaF/{k/ ɷAą<&lx"4vju.~*e`Ӌw1bp̃^E\un9 n Qܠ4IPWREBǙ K1{l[q' E6o=y-8ebwP !X&QJ غEvTL޵Bvc|+Oxb[ǣ+0&%*t|$wry|؉C}u!ȓ;. _S˓k\4C2j?ZnoAX#"x{8yPX g~a\Ep ĈxM?aEa]`ë;}GΆ1r<{ս·jrwEFЉuÿ.o`nsW2@?] NRg6Џo#N![ fVi#7Rq!B6 =[yb Ca`TL8@#!ʝY \ĴRW着LQb}l2d")PoUd/v'V%j~MSd2Xy'l .eL;38j+˛ZA ͸#I`$jvȊ ڒc#$)C=0܃]^(}/JILUZՃsjh^{ <}XУ:O`)^\:j-<| RO9&}6wv݄qعe:29ZdiUM' Q-/2 +;pkzݭT,WRUWt0r0gDzhʋoИlwW.28&l .RM' `$!y^Ze& "D$kn (V(et UvKRnӫSk=^aewk O)v#SE< EtZWٲ7!5Z@&cVK$|Wn@,^%&TѹWWx e$(?Ǡ: q*l*'c&.4̘9=BkIɎRre28EU]M~YiC1> wg&:ˆp!.ڸb ' oy]/=>N"m}js͞3﫛 :YSz$ )k@Ev_J'B#|͖ sS7#W @uWf$ 0 YFùw=x~$kTr ,e-`MA|Sl^UBk gT?+bk{] V8N^)Grwf8Um·$`!W6sE:IyYK؍-yqsS)^yucX<_bKK[*it\ZJ~ U|ύ>;%447 5D Xn5rac(>c}AJN4v:V#xQmPN `PKڎP' A""8_Qut޼[l>AwsBL$ Ty6DК ; $(5]}Ԉ1"@&&hnFsxC+cNچkHCcV׮yPy*"7VguCg)4k+a?^MBc'ė3,C[I ?_$SՆ9Q<1gLaay]Jr% \" K19>([] { q rqzFSp }@hGav/6ִ}XjDؿgWF{|zeꥣGL6$"ёpQa'_[G-ry=BD!l@?`K`pO%E!i̜E ug`Nl 3yXHMK$Gmd nٓc?v؈̬sl}=iiw ŀeבTwzRIWz'1tEHUŴ>sؚip 5\JߞFZ;~Uh=mWŃk`'FGf Gr3r~ŦTo H˞LAa63Ǿv|lMO @t@bIݓ\Z;kV-) k?ZjMt9b?\  ._ 5ue2KKMjG0^GxO:-*~t^2he *uvyhi.s?5)r52!VTtkP˴g׊tym,ꓽJ5>Ҳ[ާ_eSPk' сrb+j*z8rgrg6iQ,9H+hrJIBbEH6̱'Yv/L-؆iDXmA[>ه A;[6]$$(`B=D-90Xڙj 6"rf;L[oYiV$r v#i+򝢧&Hzcݐ¨ӽ54ÊgqpodkQ 0),,?ϛL0Z]|rNchn5TN4έGf _;-4)ީ ej~"Xmk>nMҔ] 1$d~rKW5^b#Uez?sw̘?;b 3Hs;ud#P_&}yQBE ,Pj~:y1)ag},՘wdf/uT#`0Ѭ3{]P>>x1C8I~քf$d=t/3XbT\W.fd NZ^elUf« ՜DKy,*ee!g>f<|;CO0E.bY)̈́ `W 0Lp_/'¶y x bT iʔF5U=4HH&FfݛD*Z5"Df_pm `YN^Q 6gBÌU39pC@LI'C'q*Y1+6T <+$|NfKw=^(@_ZZzHXEǐ7C [nT.ň lU5c3mه*T|'#9'%-BAꅫbh~axϐµmK@ÙE]7:%- &֎e||(m|KV,؅{e{k\ڤ㖉 Pr ʀ.}UK29RC"*̕ Vi5!#V6lGyqB{SsO W}^OffibS\UeTn=6]z* !hc }b8dc\0MrU*⁹a] MƸ[QsA`U }YV:0}XFCA{lR<}C \QiYu1g& Y k%Uȉ1Og |~ G!y6#S1N}B62UI*P<R-7PmY/!ga9Ud؀^1(Q:\vah 骯M9[=ד-A4R(}p~n,IF4.?}̉ ΓUi6/"*s,􍁎[3z@Zry4&&)r%0r;<<Ҵ:  pZA3`*2ҵmd[U[]h<9z2K=Hu %s3 9Pî-ܡܮt&l0s}쒰(yH"U'u IZ  b#vWNTt4 SX~0{1)FaY)v}ȱ/{UHX$^bC%j:,?&wd嘙AtУkn##b3zGOXCNxEEKǜsਤ|B\n|ϊ)݈V*C `73nTqϽ3oc woT?<'Qv/Mhp|ƍ]nk} 垥BLlfC'†折]b d1iiXCzLzlh(qcFFi+`4c$'j) #>XFTV_99-o29inv.  KU1FE7[Zuu/ F/YOX7Q8)AFI@z"3GB ɽGXw F˭zk߳-9?r튽 т/ÈKOq7InTmDcW`qs^dgTU] ".Sr{C'%L ;q D|Rwt)y)d3m=FuF8q{SCᦚqܕ9"6^Y,[p)=ǽ~Nl12OWI=^cX(؊ŕEU?a)v-dC+顐# -[:2H w/F4?ޡ6KDr$e0ZO W;&c&(zLzN@ s6MkXG)fp/-/cG(ns (΢\}Uc?,ٸcIc7z]7>_,J-_:5 aY%.-m>gͥ@Z0yK9^eu;5Ts KoB5uV8/ѪR(<Sd^Q{KP}=/aY򵡠?7<^x< b}5wL O$wu$}bivJL.r-%I JVnph!F5zxгci4Y)RQT=|Vli!uI?4?)!B*@G BelTߕ|M2YvMf6;R-ؼPbv\Ds\ \?0h` jòW!4\s>߈XZ4Yt>/(#n0sd7 \[#0h!}-|[cc_xL9_r$9.%J_DduCKr.%lÇ"98b/9r*TGAݐh5݉B5婒0wv44?W^u&-!e];W+bh4˼ni/=S,/|ECjn5aLiuGIɝ9 jْˇbھ n׃:ZQw/~l*Y^n(u;F@"b!Kd+n<f'pۑXgpp}^v}(,j"(kG{HD ӛP&!Y %]C":UO1T*Ka&8 {J V@PՁQS0^WZT#9;$ / 1pd"bMz ƪeU"T mH~ aijA=\wI䏩huYfX]"✯9Zc@cu7چjfK|CeH,IHͥI qdRS`׫tb# EN)S#j㉴_i"gOsaҷЦh7muYSUX?oE"9}F"2h̠z"};GJtQMF J*o}'cC[2:KS*BZmB"#Wr 4h:8Ϊʪ+`$ <:B%gCSV]_0fZ>F!uTodk=inYƿꉞI@]BMQ3Q^ 9)Xs랄gW#A^\;cRC>iuz莗ipNU3K;%S C.*eBg'C633OA{1”LceGdJ;7rpqwG4i},6t40΢cd_K|x< /?}~O*]ha yCM㭟 ExqQ+,<asuXIB¢6 'hFFȥ(K% )9#d3_H9:/0Mcfُ ( l ^+S-P` pB6b9B3m8n.~HI/GR,[ ` asWوNa]v~24J|ܕrL¢6 -Β$A$EP0N "$=+ xH~t9(N>~(ȎZfJ tg[ZOޛB!rH! =ƸY^'51'_7\CbAOQ+|__#/5?">+2ny9!/ٸH "]$I46<8?j͟ƿT,քUqCH»pI-,2WJ8q̅Q]K]ysj5MK hJu d\]:Uwg#;f8 2>9"[} j+;ln(>X턽g5ʷpL=h-s m P QCF "2DlIT}E?fWFti7Ȃonl`1+H06)'Dy)9"9s,2Jr$s+h}鯾SmʠGj5Sj1 xO^B/ֳWqGagWSN$${lޠ80 9:~KNdV$ZD|'M4P{gX7ݓ4d(,VA)doPAhTe3&9w]S3|!Q/ru+W(g1V$0R5e!0]zh1Hd`V⍪afʴ=ผi亍1{,T9 ~RiiZƘq c U*Dd ko*2'aTtg7Ev 7k$I;`pFG^U[3@?QeC`)~ +%QAsA3Frb\WľNR[ڔBmPD/-3-\ҬjQ~g Yv<Sz1\EېT|<}P {ljCT"699- * c]pGU5Wș([u? yOi)16dYCK:1,.CNɵ~'NU-hz[&5@\x1߰6ƒ JDNfoUс " "\[~fl!ŵ`Sʺ%)˄:öգтc]w(9 E{[wA'FE{=tY=jrl~yMc;IL mJ|sYEʌf=ԼB -3о\pu"Si mI% d8"[ӊqCtڔF#ZZd( fAUz>5i*dbW쎮!SK-j ( W}i0H&.6Nh W\g!yo }>$^={<O/B? K!(m}VW_Dkw*LW'9SFjG|$r L.+MD0CMBL.d?@^yo^ -<,KNɉ6*Lktꔖ"8V;\eg5mXwQx=K5hXEl0JGY(s6Z^abĤB`>x&Sĥy^ t, 0:R$`Q .UBY)s*ς}q'αmjdI& ))S41 +ݴG^ak 1 VG@Wp-D*$=CڽFJ '?*}fycQRB,R9g25!zX;IP?g{iUP8vĎl?1(@(f)ޏͷȠ Tv0RI;wLQY wh=4\_;{  D!ҒL$c4Ye?9ӡdp1UWF] rm.[<`Q5ވg;,+g{?gMitQ ww8yx%c[j7.Q1N#Y_Ec3+/1 x ku=Q lvʟ OPBlf"7qCJ&!kx|̠9QY-" ͚/@> u!Oqx>j U5CnMY(bc ̖[?+K)@P/=F?1n֣zՔd,;%F ^? [@f{ pV= 1rC bjHMccH`ޖ蝑tb|SɲoC_RxK̞:Rk:4͙kxV+h}?秥wm$`6 NrDk0EBbRޯ}u~"A!][ٴ,^}HyUwZ}Kb[j/hM)ez^.}a}9Kj'!A a  Kh3֊ٞ#x{{Vï&"l5Vۊ8*Cl@R}t~ͪFo@/;$(f/C,N{$li{<^pg.~]{]DT 9Rܑj|СhqH#|v7+?XL?У;-ޅ$!S,PV.DA!HKr#z.؈q;8O #F^ÛoSDͰ4nN !e(o/83*I=5ښHm8Ô=gNVHJ˱("Fon\]DވkQٓ{$a{={C#n8/Qn/l@]njn,]U!У'c񝚸m8^ 󭃙cd,7T_n 4iWb !{LgFR 4^M%T,_Z+jt0`BiТ9w@&7}?ޞQ[7qlZ[y\M(8ʿWǦ>׺* /R. Sܣ4^c[}F&~.O^psRn5kE[Z_tamшg ?a%8SjIjYbkZЯb|Ppܬe(v}^fG֎ ]갻 g;xl%}P`.ac1'Ьˎ%QZO%_3k<<6 r YT4#] gϺY(4GaHjs0q>96Q 8Gҕoš|ۖ~VDIw83F 6!)9_Idt/X-HIyQC WQ!Lth( ;1ޛ凪6 ԦϹeFΖU#A;Jj3WgjEO-s8((0$39]:S^P$sI̴7<.o.p+>`( $뢱JcOơwף/aOy ;cSxfjRގ} 7=+y ]BYT@yWu#eAE;Nsdrkx&p5Ch{F 2&_{ --]*}ϾN>I*GDDA"vwm \0Koh-}&dBm~rtB_U+5~BR_ NlMAuI729a~L7ZN?.%gIvL.z-'2a!)b4[mimY+?\PvhwGZ7"7]wc Z8 J)|Wۑc0tWJ?O@Mu.r>`~rP,3sl^@n IBSMrgkÀ9(twoXG]SPS)X !^B:f= Bw h y'd'NR,$)n}̈\xňQacn0ٸT1 QzYOw-ho7bX`M ĩ@`{AݬLf}9Rq+WQŻRHwKUyUc xZ)^īp,F(?lKeh΍'0QvBDC%@/}Ϻ>2ϸ1o'!j4~4kiqnlXi֌q֩+R8/K0*cl*TAlMDM(2,A@!omp;A*Rtw\ο | JE=K7яɝT3L(ѯKmLh8 tb"|4V3j&|y' )LfKzL_ O3e@ pВ~)-Ct- Ó->#F@Z޶%4}m\)[ \]eINm{+sRNm%cyF\"M-Sk!Je{rsE\op?b h3e6R|gUcjPP%9i֏jV fJګR$ $>kaf46[Bnp6vstd{u4 )=,D[T)ZŲ*v/FMc;ۡaHTwy@} uϐ-_W0) ~HYcva aN6Q`kkkG܁ڋX3s OHB@EƚZO=n yJرڢ؀?OrRTqOsyB xSQ\Ê[AiӋO2*Χnm/3 r &%\MtoT_?`šq5qh#%!_gE@#!URʤ>AY=) m=Rzܭ<~ڒ%͆$du U ܱE*sK|^(y6 A˜W3$nD?QqrG1tOysA=e]Ѡ|a/L5ctXEG0p@2:)Ī4>9{Ş~}Kyq!iu7#RGpX,q3X !+?ux4H2EXKK^~hqrX^"қs1OUY[g}|)|,<~xKf`L4-QΆ EB{#%!clQI%ʎN E.\ CH&)Hsz*:Qߍ]39+q^0.͵|Yu4Nzd$Ax~R7L HeD#jUfC_PdD&q^qPa?3|nG0YH־clRx#6 bX? *oo| jI.Sh}mqKɭ~B*ywCKL5ΊxS MKx!9B[Pbn%1u&GK렆hם4l,`F/w[ð݊l% WSxlB .k }U&fz@V-~KɄmx>M!'^vBC"@AEl77r jE6-j\~X_kk>LJS&Fns/vqYtg|H١+DZj0[pjdI 'B%%sAj+>uml:+'~%Ea.{jawㅩX4ҩC"Q<#: țma\qWZ̖E9p3>R &\eղrDŽGiDˌ,xZ5t\|87EUG|[G% )ecJE5YWwqD.[a_d!g#ح8d oD0q_Vgq"PZJ.ݍ:FxkȺiH1dK JWśBIF> _HY}\Jt+C/pb}2,jNIH ^MOixGPO'4o:s?w)L ώS&;fBPtGiUJTc? Yz5qq89jvlmیA;mus CikTj3S ]0'l❓k<Ǥ1!t>>_|J7ϧ xi`dkᓒQĖaq_IGO7} $/u-ԋ/%[хd_>q5ּV2|,zLmװx7F 1K`fmEߔ< >»?,}TbZ4LF8tpqWҭrخz 0E3Ov8_|+72|94]T$D"'&@켶~ME NfΚUJA. O=s6|kF79DB!F#5p%f,.BEE .<6!,}Z6-D_;ԑ;pҥh\+eq?p4`ٽuJo3Q 8emFLް Kk`8_Ղh8bNFz93bNO)u D{>UTG RO\3UIFw * KSnJGWMٵ@w+%Rýy !ld`Qfʇ7Bx6LF-@cȦbT8hhE`5PN1r$\*d-#Z1w~bs8eaYs۞wDk_(_f$ZSog@:bw8Y[gyϪAik)QA{J!d>*15H8B/E4>A,|)p,h^U:ß|£lLf̦Ae!'GWc3SIA[ XF9*kO!-jZ_}Z_@<)5 V pj G\L+CV,6_[OXW!0܉S5߷jbd1? dI<́ s`w[Ԉ*A!6V:uk$0O,g'|/6 ZUD>[y%h֩QPۙu, NJ@PLjv~}CѾo376ef@.MA:ʏ'<{'o?;h F]8Y0h =}wEM5΢D~ \װ r]Aspտ. 8 0a+ ָDEYَյYD?OFL i;qKm~aPoeS ~#_d !VjjlhƞA=DS3 H3p̭^RluGPBt3Dj l8ޅ% a`:Z**h *rsnFpåz <1m AQkwKP1bb!}d`KL6.Yk<2Gu9Lć:ZtU*yA))̚E@W7 W@7w7SE VJˎrڿPEDl22.B}p UHDL\~7h * -?zq/&?ktp MY|W;ΜKsH;5iMka灚fʛI=`UiN^? z O :g~[^<BޏݗRn;TS%F&ٛ(VԅWhfC}L%#3 )ơh[ρ(BIFA'e2~ũ`հ.vα۴!D곅j|ddGU:q{0Wf`jᡈt:{~AS]v˲^}:uL^}_tԅ alspW(t ?`83G`m\KD)jdDQO h< fo4].Mzl_6C,l\™vMZu~_]`㻾L'`7+tɓLbΩl}#ϱZ?5&#+omۗQ^t]\gj4n69dw@U'uX k~zʸWq뿂M[;@ ÓhPZCK4HkpowQf*P,=&cu`ia|{|.5EYgsu;a>ںOUTTkۡݛ +^frfFH*,s|Gߒ~jnD&Ó^F \Uz*ZI7GqZ?ͅNWQ,J<@ $#g?qPW&e5z»ʷED(4=hh)f~gň\^G5m] 0Qse,NɇLlFh\eYN 2R؄yb n9YGBbMiARLYÆLnd[(ʒ,i1EfJ8ky sKөD{ԗg:$MURߵ'&/IUoQ mCg'm#cS#y#!xx?,Bnpq!1=wI" ŧ-hκPn2U Cf*Ջg0$xeJ2[݌~![q]zcQ>w&e5!NRºnpD/\O 6Z:+Gr '?Ԓi(@ue|qr: d&,Ħ汝8S_2Mt_ ͵4f\2 b aF!9j&+Uo[_֓?@ ![-Niqtid wq C=;b(ڍf]uprqA]RlǴ4rӾSsj*?H!pvUXF量/ݫ΃(NC('LXs\/+{ɅPK1A Þ#Cis=_Xg8 -P-P DuS:۸cf0ťJj# W~ۛ9[Y=zaB9$xh h\8#^Zrny̪:>6 Zrnj%22IIiH@El]k12eyDSmdg40|E&$2eLjްd쩿m}Wf0,lHfD>3іħBNLS&1 yěmnXZf0^kxQ⿘d1aQJc U>"'b:@gb_'p2y((Y1|?ZC 4!T# çsx607{c- 琦;e>冥&&WgOGtx $`cFP>S5!er-hm3 570$3 Qգ4m^b'ljO1Kb&ϯu:K< }cѸ@. z=e%`3^zL̔M|QbW КVP(ANQp@ZWjc]KI2fpT]ؒ8y{j {lώXv.XB fS &A#kK.[ E(JMp^ٹC 9҆8Dv;Ҟ@05T ]=sK dL:dvIkt0h#cnWnCȦ  Vxf[ $]n뻦䫬B ׼1 NkC5& 8mphzd@&U].tDhZ@p "RK8EL9u'l?7<"XBJOBD/;ďP}@̹&2rWV\J9S%"p%ZɬNO BC} &X# IKek6x›hJI"3%8ɴg!XtfP'[2_8ַew='J> V~Bs80qp.Mn5ɹۥ76{fzTK\^j:ܦg|5u:7^-#U]" F8Dx/Co/*\!kqT'kq6Ŕ컳wšnDp -$SovyB (rCۍU_4h=%ULSFR7>z*^7{bG*$V&,EwLG7t1~6Hskd)tL(7 Qd}92CG|UN+Q8']8g%_0Fc!,^`>uI'm=^0N+Ϗs̒888hb|Zz߱T`yq m%,6#U_'ܬ0IA@EִZTO|~A̪T-LLNu ;oZ8+#W<&RU%k ,xS=j,2 \Jj.ﰼ3igsy=HO ɍ_3RVit $P@&ڝaX疶rVypF` k7!UpH4Pz{{8x~#nw>{pI&DF؝c&u@OהI t dm1; T* )dgM _EՂ j2$lpH8)$+:!$;ygG2+Cy͟uQfZpWxN}(BsydIsw1fdF8o4w$2mK+(VĶ?SRPqSB;-> r|C ilqЊ90RXj}Wy\啟iyQtzrgztycGUq᤮cRf\“ڃrq5( g|ZJ<Oi]'mf{w Vj NG9u {IY f/5)x%&s{_}Bbpj :mH Fc;GwF>oO5s&!f.S@<+eԅV[ntV0nj/؈}ZV$wf,A)8܌u(q' BƉOJ9(]',ޠT;p: 3Lh& @pE?nǦ.osee[byp>[4ciO_Yhg߅G֪{@#=祇\2n(!o|_DT;~3<ԯRd~! 2yo]5im|;M>]VK^Jٶȕf'7Lm^sXYm t4ͪ!OS,fBR;W),gl?6d_trm?Z1H}XQٿoC"XAlK4ݨB%xeA#TfTJ->(J2lT{F:5LF:l(pf]X+ j+Lp,ĝ6oZHQ?Jh?90QD-ԿuIX? VU"Hr \U670| )CUZJ*.ى`s|u,Y*\C̭}фciPE)xjAǜ?pNwHocoMkkv]X[$]f2β8% 㨸 n*z3OPB)d`z+5_"<KM5Ѩ@ۜOE8d ?77E(HFo2mJG0nYp~#Og;1!pT4xKN1/W١p@<\, hKbSpJd^;1Jƥ;a^ N#hg\KIj ̴<>1%|lNbݖ K6,i! 0!AFOk&H'-$Bp\1"PTKl?stO1Rш8#,܁5ε[]ڍѰCa_T"[e, k35o{8m.LMnzALje1U*ҽ1aEım_8y'tVzAq}W G *tuZ V)ڏwt iъVI/֑?{(߈*Y MX}=i-HTBd܇qP1ܧZZ6#+c6Bo*P5Ç)~7RwCl \n@o/q}ˀkw<k?@,U4vu54 "soL>.SQ 'jYr)}{vc\bJ^c=c 쮸 ,rHRMK;p+=^iikU Fɛf ^ֺo]34K9tdmÌ|H^lPZ^uh %swM^ r\L+/|̄|c:" TXZfI7!]]Nut6&[BfHDrC-VtA@f%:& g܄o>}ԒjF\fo.s A Gb=jVȰyJ "4ryNy)vB]Km`STl@ns{5WGM +pfubLGL [+r.1k9'dqVfFU7#( e8eH#y9+T8)g9bȮgo Ƥ!՚ C #H`N5ƁT@;\؂hx}:ƨsb> c}P`&u8e0G9lP=kZ%ڸMDή*m!ߚmpL%X;I[E+e]ձ AߍJotɸ(Ng^HdkM}\0PG͗^Sr7qR؝z(bئgz-+f])Nb`3'ǿmW46L,-/|R5B_-b)9 dX0AmxsT 0e 5ٞsHv—!Gyqw8ͯGsZy/DשB6~QoF]}j,>; sEsIrlWݸ.J{n^Y@^6qf>qO ]TCH{+tX$Fɣ|7no,9PaNYm=U#;,E_nw-OmfRR.$)]Z{&Bw!bv;2#GdGC;z(t"Ɂ-B⦱hvmM ; 5W;ȼg6ϔ|%VZ]^"k/t!ZkBvE:$+muVNl4z,2U>|"TdjWE'D\{\ɸě[^lX7m9]`+(敨\U%EG˜3})˯iT6, `1ښ쉉Cȣ<='M' äYFǙ*FQl@㴺w n͒o&|FzV_9%%?Enr`3[\fޗ* 3% uO*+ tZt6>PNVѳ)b=Zs_sYswEn"#]Qȿ3qGR#95 ,N1􌺙8]Ut5cWĻjM|b5wSNFRǮBO^i>CTc遳-2&咼jcdۛdOk#4ܥe1z8HwधsB,t`p 1ڡTs0b 0:Hď33#VB~B}DO̫ 1j? f{3(F-]FIs9x?m5 4hL끌]}"93hp*GH=ǚ1\x?yng0'@,0jKlT/K?$O.A7uVܩ}D,uiWvo{pBLY^2H딝I7Ya4_YvOt32/&4uc>:Qǝh|#uA 8 ծ3 1-+_LPGڽqb <~(3{;Bcf|<|;eF|_ @fFM]'țAPY\8g(.r,5pN úĮ< `i3ڟw8,a/Pg]VNv+5ԁ L ݽT15/x]_ܡNcތm29Ԓ/'᧰ۖ$ FAgL/ psaI/_:`2DnZ܏S(cfƲ:aocFI S"8'l5 1I 4abanD)SO.N7+a}'@Xɬu_Abrv_LC0NxT(ݙ>o҅u_&c8SrE5sj2 ^bĐT.|sЬrԠ}7_WND-{ ys5NclY:9mrW`uW!N9_Ud>a,^nY0G;]H| x1:pSs_01hT\Y$Uj>97SPV/u/y:nŹi4B' .yxd}ÕA/K H¯OB@lo#S )*7ytu<۾{njhNk#3ǎ8 Pq?T9ljOuC,`@j&EKf\CxteS@2Wm*+a]x4N|4 6/btmOs$|Xh*Dk@ y}OɑᮘgřmRΰ3+!NTi?Б}Y X[>1F '3hm <ﾣ!"1X'[;gL3#㠕 Xg6 7㸘޺47).0Bz' UȮ.9TeOcUi<|>Ceq*:Ί:^w~kxn㮙u]zKl%aZtShݤ&a4nEY9+UH"'Z k5tKyc,G!8-*; ;9q(#ɘ/o)-"o}kki]SʣL#  ,Dɥ &u!>!ǣM8FKx8B!Rӗ%ْ#kt!n]BwҌIG 5ɈN8E],z̘+4FML)چG{|!yВ+tM\}zCJ1> 2< =^ ^]>x;.m fޓ[O 圬+39rH!ܟX5 33=8#6Dks/jI.P()ӢKΡUl k,4#QSPn.$o7wOheU 0Gk`mYX:V=.':L18(}]*C jsW} = ?"=q6\:Aeb04"YCբJ?Ao7NtA $nsT9q[p)jXJ`&vzz;"ήv5ʛi;e&Ǎ5hQ +?o7Pw@^O /"[~*o>T&rV]$:k)iPlހ̪6M boK39KDߞ hqэ!N28j," H[ՈeXЃHɳ%D꾊6ae-n4R r]nb_Q)kQUgRJzO0nc/P *_k¹P\PqIxGTT݆ r0ߌۥQj,\ͣ e.#X:7UUTr>a-T!\+܎7S~}XPlhtM[>dL%RіgU''q[R'ҭ…\Q43{Q+x} :uFZdR#'?m[.g8AV5na$ׯ;(, 3Ag)iע;!f͆VmeQfx:#i+1^f0i:F]VSR"6 '6R^=}z wkScZưu E>l83Q"af((MJQ27ihej-Kv }T-ێ`jqBZGBy /Z$D|9j9>iW^qoa^q(f_ rp;i| } Qqug-QL;dx2Ӆg=OgT^:ϔ57YoWCc;Ehƒ #|bn†3))\BSO&kG ]sXeTA}$Ƣ0v`6IJfWllg|Ժۡva2Fo,-Ԩ|c;9F^v 09_"Xɹhw^FVnXtM jJ(}r )% F<hO6p?= ͡  DX+CҎ2Y¿Q^n2|2Jno{ЦK.Sf[fl5M-h>&-'+fz]jU麲vcalR9o@- uO]c#3Xw(=\XGfm?qMNIኚ`B?kh.ƐI0Ln ԗ(ӈpH)_qЖߣa;~:ƛ:N) >>D"ȅMxђ3k8{!o[UXd[Hz E\\&'(Ʃq-f TPZjuo\b+Po)&CPT}dA`JpPXpA'㋽5L w8fj#) A;D2ϲn8vX1] n6u4?; v*=91x 82fLe!'t A 4tD/"0h<'IРFLK 5/{zO_'*t۹͋*Slh1ky-͸7p4Ŀԭ_=?ł!AV)ڝ6N^$v](MD|S.J$s0ib>S%ewRmM[>TECz":Km!yFȅ2ᰙ3YUxYP*`$^eU%JOw2C=)DU|k#:m8D BLqc|#j#b5:T1DKLED<;ZzTRa~1SwC@(Ds e܊/ `1vIvك##s ,TJ|=$0Njd}ⱮQH(9R3CT٢zZןŔ2HRof\0lP?vCȞVE t[sۘ,AQٔEd[VZ#q+j8&-ٯS#.g`1!ዧ Qԟ)K$XQk`:EW"SX[)*4~ĸWI[Gn J/Qv;ieJ֫`q"Lhp^{xѰ]#kd5[^! VkPp kg bŽ5Y'Qk|v"f/E6/OH$Xyx:}Y=X͕p~vتpBI0r"|NbË w.S"t|1)dּg%2޾֔U{0hBŞ <XB KOu M%O%%!Z F?qִm1\!/B!F?#7UB}s? @7ymy{RϦ̑P!Q0t#dހʃutޟ^*?]Pu QXTx{ ox47+-]}S&|88VϢ9ܓYq? \1[H o  #ydͅR6XŅ_z\o0ZGnu^HcQ:2pQ^9 _ VJ9K}ijDU#7~F } F}gD^ħ~-%D\lA͠c?}vDnzg~!P=P>GLZR` ‘Qc zOL-*SvTHUˎ˖1?wZLU``5ّN&Bl Z1"צ;3u}XrhMdl%Zb0PZyD"_Eb,o'w2ކ#e&h?Wn!FӥA_8<XY!4$Xx-%P}1!ma/s9CSJB`'IhgcDQ@s(e!)19h~zm&3YZ/#X$b.uNzF^%7hO7fTBzS@8 kul=#X2@`{%,"5{>f]' y+יDk7!Ӗ4?wL i圿 ?:\ȑo49, rG@wbcaJ̙wԔME6z__lr 1FFWs@âQu(=ݲ˂ sCvu T0 R 3W6wq%تZn f6S_}Ȭm^rU\dcOIJe͘wM~{sTx%7YK{Qٺi"9.]IZ&m!^FN7 m-!,pv)ƻJm&'0wM'sOVѹVYBUÁV ŠIA pVHe {Qx:,'nhoXpкk@g !)EdfF _!;n~a'0h՚~4F] ߧf@8gxIDR-j KsIʝRqm 8Ì`Q=GT-zAM ķB{2CϥPޅSi zsw*k?N:c3PILd0 D1w(XpkLߩJ m8mUcWZ+-E > Ap>_ñDTSJ:!pCO{;P8tT'~¢&ӏa[W7cDN?kĐB/_D>jA28ܚp uL;)T GIy%$>+~RrQ8AeH)qWs3% zE|嵐~ƊBOiIQ[#Յ)#s3Õ%>5& \:e;VT \`tr ;~XJY1{'3}q,Qʕ&g|SqV,۠ ` Yx k!i2? ;}Hf4N(_bW0)Бe yV!2JX]FĈ.z6f9$?#當bC^P͋8|8[P%ܱ58c]o F;z*oZ?Ba<"g`E`m@g4m 3"n +9W h6tu-L8 \[^X7{!y f!]A7pr+C'DHata7 6u=7<Nx5w!\c= 7ŖTQҼ&=č^SFʔ]QTK#hK{0yfY(BfKtGЧ1{\u_!9ev5t[h._QƉ3 OŴkuzoSU(\@L|ȶO۪?/c1S+/ xf}OZ̝bs5#&4dnǖsWkUv|HO S7G|dzVZz֔WђKU~JSjZEٽ_JG"|\6%R8MqqKy)/^j@j/zt>1dbP:>yci\~\1Rl~ÆE&%n}ص zSW=V;u=j(#O>='?<ȗeeinFQCE4d^.wCy+NŸ=2bߟ ~ by֐O4M\K霦 ^:i)QkA>[UlbWX6]d3| ׊Li~mC6"\u2hY7@K-! hAdQݎ6Qrq̙fǽ;:Zp'=7E)b 4\<&hww\-y5C{DX xÀ B`I@ݖOX-q,Sd tcے &Ǭu4@B[ǷR0n-k}= X|P#l}ʂAR (w<sZLK $=ս c﯉]r){"Hd85Ũ8hUOҋgMm^KW\ehDT)c^vp)K/Ir3G]p}\MEĝ:~fL :ܠv)r\Me\.P>& ^?8w5H;R]NIdXk.:ꕢ*Yحrcr4)lGD,E8 Ll!I 1?+&(65FǛS/sHHIqvX|Y贬mtX)H UhԨ'c C2dҍSx̢p06 >*Pk{^gقizJyHٮȓ^]5>kg I㨪B|CVGz)j#{K&ECJ~$'rmԝUm;0{c`4[X;}jn7$\AО"A^iC'>S8hźk߻_GB~ηlun#Zht? ՙ+ʺ*%9 08H38mqT\ [0R|ɮƤ6)eR<.Z۰ 7:o3n cY9T"2׈t5-tM'VDa=ʏ}{5,%sAs=pUx68 殅acX0DYPI\&8? d2RoR}_m:S1pr^D3cc^/=QL*jej _ވ<ثt9P+mo!%K>tiZafTD+ҜdNW}n[`h)9c s͌xП+H| =.pҿ%8]%0~FBW9%xn n3`l; V~FL @Z.-A {q`7!G-jດ؅{#ưG2H NJ8MzB[=}!*GiHiFqۅJJ#)8=ݳ󛡚q㼆LȆ&v A(& Xd p_W!OR.١ziߙ-"YQH3 ʏK_NdaˑQx:hClڐڮ~זb@jFE-`(M>e .8RN9$4BJڳ]GS(SjME3a_>RaxCK/ XL?> hg"~܆\?Y_,S]U$wG~8"|Fºk|,z k~v1yZo 6 Zql QwTc*b"CU, 娗vtP y%L؄cX#YyIaԟ'9AYxQ)2`kл-aX?} D4fUN{.'dzX&1J֎3XGt`]8H po'F씻q%.y&οsm-+Ο[ѕCB%֦PQscɣ?&5Ҁhٕ|5K[rC~o?9ist@#tVff5b5Zuf̪>{MH;IPhj<1{P047$w#f]Ytmut+͏gL)l|I(Bg2&g`FA$+f^]BD'.JS /6rx3$.~!X,PRA 92}j6$IAcLb>Qc?&BbYڛ+ɣ*^]wwgظ>ߍ%m&Q1*Oʸ\S0#^&S5LMJuc{d[r\QI!W# .5d8˯yƇwf]ɚO@CڇsT2ī7H}SJETh>΅+:c4j>{IYr Cv5 g;MCSPw飩TG nfezhc"Iy&l}]19UG JSeuJw?;_YSE6;΄jT2'+l(|-H3 ʦs`ml|>ВސZ<o htViAa I_=HMzYz Vpa)`t5^aiC3?쭲!oA?Abe!l(U@/)o4FP2A5n?`=E SwH[ڲ4NjZ/Mf ek7/:W-tl)#Yc^䭘3 T''B:} Swޮ?Q2T]gO$6W56iKi.!v}$,qPa??!/T dQB 'uvU9'( ^#X&Qh\0M0]UX-)J&lcV3mlubvDD`[#,D|`f=Ǵߘ|Mr7^=)!VzXH44'Rff).SMv)[rkKf zaz?i8q[wlԢ-}CPwGdįn:GZu_1Fyn58FWp0,\;>y?Yux 1\wXVf}CAyWўobnQZ+k?z}7!C`X?Mac}*DzZXz#2:g8_OR|x:>=&-rY:bְ_h$ EjDcz=R oS O#g)rZC: 0qB*%lb>*8qקźˇ}kT:Z)vZT5߾?B5_C2Fdէܔ&w ל,!(Q . Sir.vF2Z.@Rb2:ޓ9 6]QÉ %O2T3lLY .J0_[/jUzb5?kWɍ&_#:79USQ&mIfT% 7ߚ׃mu\JIrrq~&BFR^fob͹5Q68%6@'Y羓xR._8DȓbG1Uč:A#ɦW% E,K@D,s:Ov{r c0&|NFR'ɕlᓸ*ݬPYv jQ.jʻntp-{;Q F96 Z*47c#'8|&=iCԊLq.]kp3uE eQ'#Ƅ*:$ /1PPot9_/H9PCW>WjU=tD S%,iHĘ S\О[iBD8?L`8POgS`v lpNXՍ$7shH#5CJr[*.vj!,t~ڐQ3Ta:UdU uq뽐n ʎ )^Vx[uDXjӶ,~WvVDϒK-PIhxfjԦ#9TL׎3J ZkLk!E51(GunL+laJ+D9̙~x{`Sȓ[U\\{p(٣;3Q4/囋bVh'e?<0]-d/MiGZQx:/<8 PVC)̢4FzRq?f1]jh_j 7" z{m`cIojjHɂ!Ϗ&\ce?umy|ieuv>vj  i&g&͵N &xYo.&*ë;Ƃ2*@e8I#DPX+!Qb7bqz[!Pjl <1ۢmU? 7־9vrXN^bԯZw +KAےeb/ÉeJ+LVC L`FY@~ Ǎ\i1)N~I;f1ʻ6&]gUb^1|UL, Hy₭εllj(=W8Owkۈ~B +lDb+ e$FooPmС.-(mײ МA^@a:t%=A>it&hIzigʉv,/Ic_#cf^dُ^aB/a4cbwbJx vFzsUR(.Ǿz-Y|Gab"{z@+<履{C&ͽ==m;g{Yk\J Dԍ]<irmk—Em2Ti 8U~.}=cpV ȢDOtZѥ]=۽['" UԁM*碑r_s g/_aypVOg|fQ}=Y9B]㢫QHxMOu+/p,d[yLtmbo%֦!/k" e8{(۸@l ( %;u !~[{9w Sjz`o=ya'$ R4_rQl2HƘok\<T+4!>6Xz`.'^99ڔFqPFGYBD=xSr)!bz{͎l pn M M$]@oNu˶c^1Y]iۈJ7T,I ji#zQ7pCRz*H"yovB= g׃chD[~0Ň :,&!ڻ-+7@ya8T ic.~A, 㤐h;夭=%8|q1JeQ19D8uw q= /TijVzyq;,zfN(Px,2) Z>"Q0e~:/ocN*_V3ln,gK@A.Kp6$'iHF %UüQvAdNocOm8-9@A+v) hi^/e`$.47U[X%v@CZFf5>VBl+h=s\RޠaFFxE;E!QO\ #(? \4SJ<u/pzj3 *WWWl*$U2 (FV2Oo(%Yi{>l UlFHw]J,ż2~M;:KNB &!MAr<C"a'7ms-#,dY-e Ne.*r=d'H#\_hl.S qX(LylDp/OUz=Ly4?f +k<_T-@|ƶLhUӅC@^oB;64#h~?dxp"N; K%YX+7OҋH7)~CQQۄkM&~%!"Tuy] շT>u&cOsٟ[m /IՕ' GF pfzz HU&Y0{</W[Nq28k (+&{$ܫ6=td`݌} Ǩuo]uϏ?G@ ?|BR-03KovWP6*g RlUM 3]C &rϷR]af- {os !DZ[E]r„>8МfxY꘻j6o)fNk_g־ÎU1(p9hTʴ*7zbT9[D%pϐlbtJ:o-;>gc@#$OaU9h |T|J bF: utķ4>|$;2fT68Gd]1*A[T4 @la&.,wwpe ^zeH`fI.v(Ӎ`5K-s<(R\QH]G-3[ 'q q{ Ún֒!>>yZq8PI\j,$}*r!s J/ǚw)0c[|}!.yb!\Sq8`KZ7 '!8T=6dܻήܛYeAg&])hUw1LKbk w5@s K4όGp*@~϶{(x 1޶ ,! OYu}pFd~h QkQDGښmĆ%Tkk6\_݆VFL) 6=DgRv7bGC,*U}1C0i'#d)h;JRn%hU}m;Fx9(< #S(4 Mb˝Ba]s4ٕpsɑO7f(c}:F2'g4,3&ȭɼ!K.4Iڛg ̠^7R[Hq$x}n <ɛB+D)&"D~KW!9x z2,:Ϻ;J +4z˞<5ʈK MF*Q Yw;;]u/ڕ3{t-ٜmJ4v^o9-.eYPYhxDZvҞAmKe d'. d(H1< 긳T\ƒ4".MZ:j-žMG|,,#iYx/ʗw :TV~0Žگ644(o:/"E)SAKx%YՂVjGQ)=Dd:tgȶ7|Q gFjϕpoU|:ºj/旴}M;fE˥};8FMwU5l~ȓ*=/yr:⹞޴Vq0(ND Cqx0v%K.y~s%)EN?d,omfyO.ls-*>t6"AʹVЎ1RlW; 'q)MĶ]Btqh.koLG m7*O0з^cFlGɩ{%dϥOoPc^j·}Xx΂VַD1[:jLWK3s-#&\_!+*_ = u67jTe^eLZ IHUkgغDѶ/G_$~p2M ?E=F)EtVnpV]ZջjWsoZ*%N~'uLV+%͞Il @;nܿ 1=.EF.$k篻 lV&k|˅]WxDhPTjL]Y:Xg(ڥFhiJ/2tPA~`׎Z;Nu[ ɋpkV^y kf%`] Lj#@$ V7 ي ʲUB~hJ@%Or>p|PRko,>Ҵ:b-^ANuUVC%^MuP 0j`*CK& 3 )Jp z쓢!5s%̽MHs oQR` t{5AzlCCf(cb+u04ȯF:_`4GQWM0`[l~+QuY*۲P6 K*c䙦0 (?#ca݀vlK+ث$j`XC히![T752--YW2QmM8793N1fNkH~lmKq X@?+'!)it5лjq=2Pa8ƌp`t hIP=5X6ڮ$A9D+e?3jen5NHFےv'I\n%3l(ۅ!H*29r+LPyp6DaO͠><6{Q萡Spܖjꝇ6T5W{[wGkVkktR`r dH/ L.< = !0FEjoėdQWږEj@Pj @N|<ԑ0҇k_ ]zE4(GFgcӠ'8 zTW^1V2ImDنd3HR8 c+o/{5oC]M#7-yuVEf:uYrbwxź/GYmb8;2) gD7t>ً6<#_\/49Ŷ~*ڋ8nW(dċ6"J 1WCU !"m::AyQzjҸ Y yK''[.|yTE,9egXV1B}*:Ot~k>Gb$yFR v)ǡf>u[W@VD5Y0ҮOfG!LZ{_ć__ []? ^[aU?J[8Ajx90.q)ŧ41zE m'mx `^Y DA }z4?/+L1׺&8*E^U7 ަ*.rWFEL֫)δ|Fzx*UNg3#PJ37; $jIeʓYEMV\[bfRdQ`U@$wU̜9`1#Lgpe7knziEKy eniN-Uz݈9ZhYOLua|`zE>kcU1Io逥Fy|'?,&t"yBZq|gm9reAKEM}(jw&w%<:δBe͌ כVٚb4_gSYDPs7OOe )]tzKێ_e둑,7v? y)?M, 5(\PR+ؿ7x G 3pŏ]+m_p-a+SVz0z"wS O>EPzMR^@B4Y7x$QbJWP3"_!$O|u[dbW5~V^:MzS"U |[^AMB!L:G 02:⵩~5قj5;1 8'ݿHJV>;KN!J0Sg3-xՆ-(lt zroԬ};s*kM$J.6eKv3NL=z|vDG;޵g="nd1Aȋ>>-μԃ6bDŽj޷Dó <̑Z×w!C5ts=? KDoMQ,K(d_N\m[ѫaMB#z=]} !K={O A|XWݼԫ˘ntqKw2AǸ,#F~biwk΅- QHU7]UM[^Zf@_mWU8s $ 8ppJʟ50@W07?3:,U::U*-^)L珯9ncZU| ڏתAr!G]ni" tS3Pgn2}wL@l }j]ZL>H'@d^[\*+ċ0C#5 R 6-W#>Pe틞rd|yVG?'q؏(Yd fVQĹp}Pjmx:Sm/Y-XsHRpZ(c myrB%9!x`36n2"m8ch4J'ÏtI^.rg<1{Ŵ(ȒR˳*)k }}]u쳗FX_Y=<:bHL) !i|Y}p`R" @W&d}F%7gcLI^tgp4"Y0V@ *k zvSk5-HJ'SܖY1J9@o] yΖ YV0iJxU +1CkD?'36p͇5_Y5-\<75dCd:Үr\{/. ! u @J opgh^'·BlC % h?c#^*Y ['f6l5-v(6v#~H'$En8K:]M?pkcf!aOGe}Z'O)z<{ğHGu~! {8qDc[)cjUVN3&` }qӝ'E[\26Yݎ`.pf@!ӗNuXlI@Xq*Ʃ'?wّ}+rR.@#8]ʵ'<ΣB4XRAOhȞ'JD=sřQ:63 h lU"X]1nƹe#BG| m)oymOf%k|r o|bV%