xen-libs-4.14.3_06-150300.3.18.2 >  A ap9|_Ibj f}Ot$yd]KSC?l^ԕ 53gQ$fHg$K$4_DSU. w`S0at|e8 us # $rKsBK:wm 0%+JSVc`n jz4 :ۓQy(~ D*9ŊN]^SEa&pr^Ue`Fvp<~>ttq3曽!"(~947557f8ee7992b642e7cfab46ba2d2277b4b668a9b1b2ecb5f4f155f38dcb929bc0b3fba5fd935c1cb66d4d3e414671c9c87f63 ap9|t%e;U@csVh-rDg4LiA-fs\"101Q!k!#ZΕiݳN22 #^s0 ~sJ~644{F:OMopUp@4?$d  # A+ AO-D- - - -  Y-  - - e-Fl- &333(89!l:<>@FG-H-IP-X&Y&\l-] -^#bcde f#l%u8-vw-x8-yz Cxen-libs4.14.3_06150300.3.18.2Xen Virtualization: LibrariesXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries used to interact with the Xen virtual machine monitor. In addition to this package you need to install xen and xen-tools to use Xen. Authors: -------- Ian Pratt aibs-arm-3( 0SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/System/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxaarch64 x `HF 0 @@  X88@0 AAAAAAAavaayaaxaauaawaaaavaayaaxaaaaaa|aataauaaaaaaaaaaaaaaaaaa657ab8a71cbb47391ca8a560e18e2672de50d240096e01acf370ec09d56fc9601ae2aacf6aded043f61f9406e4adb25440b57083ee496399f4d62a3e8b449c46b762e3b961774350e9f8301199977567a524a33a95819f10f4f79ad44dd943fac9eca16454ab0c69080348c22b57c925b70c8c3f21d779a7ed030449e7d11813adc4590a074f1acb7c45dbdaf4df06484b2c95a81286ebcde7994665d6e54d2912816916c502a2e8a8d0d85104103f0345ab15f3ff05eceb3026bc00e56ca71ada504cb09a072770a1e092e5395635233f3fb3ec7d64e22562220fe3474e0a89b62622a1d3abab8b918c43cf3f38201c01d53ddf3f5157a698891ab301ec31152dd57800ede059d1ee4aed37fa56290f26c501948967079788bb8780f3eef1ecdc7fa8d736da1d674117a9c82f5f95331d8253d6dead0db186b4d74e429c15aad895f8bd2b8249da520cb16f88edfc2470cb9e423b8a16bdd9e041bbd97c3d9975224b3d15a1cc7247556a1a5900ad8f4ddcde2fea9488d1159acb8519a15dd0d75ffc141f2ba4a83b4b0963837f2113a0abd70994b76208717882b049b901258b498e8845da394483e64013216145e96520aa2f2a5ea3a6834889ae368a8ca0d8f2194ce4de718731e58e424888d8d0ce7eedb65bad071baa729a9d58568027c0bda1917cae3d1a57e648d915e15f2e3d74757f04e446074b02bfc7edd85c02a91d58cc9567aa0b1e21fb935261cb89fdb154b100db9d1e47fb3434dc61c4c7f6b7173244792f9f1ec6ee334db63be918855865fc2ffd0243bfc60086b0df428c14b198e2b965ee7d147a869592ad0b6293e6601efced29c7aa6ff229736ae6c41b48743f34a30e48f541238f9e90951f61a7338ba617f29076449d7f5ca454096c9fb5479ce0134165c2f193537983676e0e5eb45092a9044b3ae1bb8ab3b603097eec86a84dc8bbcf1ddacab8eea40027278e2528b06f83d2951efd4501b5libxencall.so.1.2libxenctrl.so.4.14.0libxendevicemodel.so.1.3libxenevtchn.so.1.1libxenforeignmemory.so.1.3libxenfsimage.so.4.14.0libxengnttab.so.1.2libxenguest.so.4.14.0libxenhypfs.so.1.0libxenlight.so.4.14.0libxenstat.so.4.14.0libxenstore.so.3.0.3libxentoolcore.so.1.0libxentoollog.so.1.0libxenvchan.so.4.14.0libxlutil.so.4.14.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.14.3_06-150300.3.18.2.src.rpmlibxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxencall.so.1(VERS_1.2)(64bit)libxenctrl.so.4.14()(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.1)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxendevicemodel.so.1(VERS_1.3)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenevtchn.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1(VERS_1.3)(64bit)libxenfsimage.so.4.14()(64bit)libxenfsimage.so.4.14(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxengnttab.so.1(VERS_1.1)(64bit)libxengnttab.so.1(VERS_1.2)(64bit)libxenguest.so.4.14()(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.14()(64bit)libxenstat.so.4.14()(64bit)libxenstore.so.3.0()(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libxenvchan.so.4.14()(64bit)libxlutil.so.4.14()(64bit)xen-libsxen-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxenctrl.so.4.14()(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenfsimage.so.4.14()(64bit)libxenfsimage.so.4.14(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxenguest.so.4.14()(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.14()(64bit)libxenstore.so.3.0()(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libyajl.so.2()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a@aaa6aa@ad'@a]a?=@a7T@a,@aGa $@a @` @`@`E` @`` @`!@`@`7@`7@``}p`\{@`KW`F`B@`8`4@`.V`#`>` l___@_H@__إ@_إ@_S_$_______@_"__E@_i@_h_d@_cO_[f_X_O@_N7_*@_'@_@_{_^)@^^@^3^ϧ^x^@^@^^^{G^r @^j$@^g@^_@^Nt^K^=Q@^:@^0"@^@^@]]]N@]@]ʞ])]c@]@]@]@]]fl]fl]M`@]B@]/ ],j] ]@]@] ] ] #]]@\\ޢ@\ڭ\\@\@\@\,@\7\\N\@\\+@\\M\M\\\@\}@\k\X)@\J@\I\A\?\=@\9\73\4\$\l@[H[k@[@[^[^[/[@[@[9@[v[W[CN@[<[6@[0@[0@['[!@[5@Z@ZnZ@ZZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Zz@Zz@Zo Zk@ZV@ZS]@ZOhZ:PZ1@Z.s@Z&@ZOZOZ Z Z Z@Z@Z }ZC@ZYYYY|Y@Y{Y*@Y5YA@Y4YYYbYY@Y3Y@YJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"YY;@YYY@YtY.X@XQ@X@XۡXg@X@XƉX@X @X@X@X@X@XXX@XXXwoXs{@XlXWXRXQ4@XEVX43@X.@X*X lX&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@WbWZWZWZWYZ@WV@WEWBW=W;W3W1@W1@W,@W(W(W(W(W(W#LWVbV(@V3VJVxV'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVA@V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUݪ@U@UnU4@UUK@UU@UU>U@Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UU@UUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@THT?@T=@carnold@suse.comcarnold@suse.comjbeulich@suse.comjfehlig@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comguillaume.gardet@opensuse.orgcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comdimstar@opensuse.orgcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.commcepl@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.demliska@suse.czohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjengelh@inai.deguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbwiedemann@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.debwiedemann@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comtrenn@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.dejfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.derbrown@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comjfehlig@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.commlatimer@suse.comcarnold@suse.comcyliu@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.derguenther@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comrguenther@suse.comcarnold@suse.commeissner@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.com- bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393) xsa393.patch - bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS Xen while unmapping a grant (XSA-394) xsa394.patch - bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of passed-through device IRQs (XSA-395) xsa395.patch- bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1193447 - Slow execution of hvmloader+ovmf when VM contains an sriov device 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch - Upstream bug fixes (bsc#1027519) 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch- Collect active VM config files in the supportconfig plugin xen-supportconfig- Upstream bug fixes (bsc#1027519) 61655b5a-AMD-IOMMU-hidden-devices-flush.patch 616d66bd-x86-HVM-cleanup-after-failed-viridian_vcpu_init.patch 616e7cfe-x86-paging-restrict-paddr-width-reported.patch 618289da-x86-shstk-fix-with-XPTI-active.patch 619b7ac9-harden-assign_pages.patch 619b8cb0-x86-PoD-misaligned-GFNs.patch 619b8cb1-x86-PoD-intermediate-page-orders.patch 619b8cb2-x86-P2M-set-partial-success.patch - Drop xsa patches in favor of upstream versions xsa385.patch xsa388-1.patch xsa388-2.patch xsa389.patch- bsc#1192554 - VUL-0: CVE-2021-28706: xen: guests may exceed their designated memory limit (XSA-385) xsa385.patch - bsc#1192557 - VUL-0: CVE-2021-28704,CVE-2021-28707,CVE-2021-28708: xen: PoD operations on misaligned GFNs (XSA-388) xsa388-1.patch xsa388-2.patch - bsc#1192559 - VUL-0: CVE-2021-28705,CVE-2021-28709: xen: issues with partially successful P2M updates on x86 (XSA-389) xsa389.patch- Upstream bug fixes (bsc#1027519) 6138b7a1-x86-spec-ctrl-split-diagnostics-line.patch 6138b7a2-x86-AMD-enum-speculative-hints.patch 6138b7a3-x86-AMD-use-newer-SSBD.patch 6139f1b1-x86-spec-ctrl-print-AMD-features.patch 6148453b-VT-d-hidden-devices-unmap.patch 6148455f-VT-d-PCI-segment-numbers-16-bits.patch 61532102-PCI-bridge-with-subord-bus-0xFF.patch- bsc#1191363 - VUL-0: CVE-2021-28702: xen: PCI devices with RMRRs not deassigned correctly (XSA-386) 615c9fd0-VT-d-fix-deassign-of-device-with-RMRR.patch- Update to Xen 4.14.3 bug fix release (bsc#1027519) xen-4.14.3-testing-src.tar.bz2 - Drop patches contained in new tarball 608676f2-VT-d-register-based-invalidation-optional.patch 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60bf9e19-Arm-create-dom0less-domUs-earlier.patch 60bf9e1a-Arm-boot-modules-scrubbing.patch 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch 60bfa904-AMD-IOMMU-wait-for-command-slot.patch 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch 61001231-x86-work-around-GNU-ld-2-37-issue.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6126339d-AMD-IOMMU-global-ER-extending.patch 6126344f-AMD-IOMMU-unity-map-handling.patch 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch 6126349a-AMD-IOMMU-rearrange-reassignment.patch 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch 612634c3-x86-p2m-introduce-p2m_is_special.patch 612634dc-x86-p2m-guard-identity-mappings.patch 612634f4-x86-mm-widen-locked-region-in-xatp1.patch 6126350a-gnttab-release-mappings-preemption.patch 6126351f-gnttab-replace-mapkind.patch 6126353d-gnttab-get-status-frames-array-capacity.patch 61263553-Arm-restrict-maxmem-for-dom0less.patch 6128a856-gnttab-radix-tree-node-init.patch xsa384.patch- bsc#1189632 - VUL-0: CVE-2021-28701: xen: Another race in XENMAPSPACE_grant_table handling (XSA-384) xsa384.patch - Upstream bug fixes (bsc#1027519) 61001231-x86-work-around-GNU-ld-2-37-issue.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6128a856-gnttab-radix-tree-node-init.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch (Replaces credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch) 6126339d-AMD-IOMMU-global-ER-extending.patch (Replaces xsa378-1.patch) 6126344f-AMD-IOMMU-unity-map-handling.patch (Replaces xsa378-2.patch) 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch (Replaces xsa378-3.patch) 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch (Replaces xsa378-4.patch) 6126349a-AMD-IOMMU-rearrange-reassignment.patch (Replaces xsa378-5.patch) 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch (Replaces xsa378-6.patch) 612634c3-x86-p2m-introduce-p2m_is_special.patch (Replaces xsa378-7.patch) 612634dc-x86-p2m-guard-identity-mappings.patch (Replaces xsa378-8.patch) 612634f4-x86-mm-widen-locked-region-in-xatp1.patch (Replaces xsa379.patch) 6126350a-gnttab-release-mappings-preemption.patch (Replaces xsa380-1.patch 6126351f-gnttab-replace-mapkind.patch (Replaces xsa380-2.patch) 6126353d-gnttab-get-status-frames-array-capacity.patch (Replaces xsa382.patch) 61263553-Arm-restrict-maxmem-for-dom0less.patch (Replaces xsa383.patch)- bsc#1189882 - refresh libxc.sr.superpage.patch prevent superpage allocation in the LAPIC and ACPI_INFO range- bsc#1189373 - VUL-0: CVE-2021-28694,CVE-2021-28695, CVE-2021-28696: xen: IOMMU page mapping issues on x86 (XSA-378) xsa378-1.patch xsa378-2.patch xsa378-3.patch xsa378-4.patch xsa378-5.patch xsa378-6.patch xsa378-7.patch xsa378-8.patch - bsc#1189376 - VUL-0: CVE-2021-28697: xen: grant table v2 status pages may remain accessible after de-allocation. (XSA-379) xsa379.patch - bsc#1189378 - VUL-0: CVE-2021-28698: xen: long running loops in grant table handling. (XSA-380) xsa380-1.patch xsa380-2.patch - bsc#1189380 - VUL-0: CVE-2021-28699: xen: inadequate grant-v2 status frames array bounds check. (XSA-382) xsa382.patch - bsc#1189381 - VUL-0: CVE-2021-28700: xen: xen/arm: No memory limit for dom0less domUs. (XSA-383) xsa383.patch- bsc#1188050 - L3: Xen guest yval1a80 SLES11SP4 hangs on cluster See also bsc#1179246. credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch- Drop aarch64-maybe-uninitialized.patch as the fix is in tarball.- bsc#1176189 - xl monitoring process exits during xl save -p|-c keep the monitoring process running to cleanup the domU during shutdown xl-save-pc.patch- bsc#1179246 - Dom0 hangs when pinning CPUs for dom0 with HVM guest 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch - Upstream bug fixes (bsc#1027519) 60bf9e19-Arm-create-dom0less-domUs-earlier.patch (Replaces xsa372-1.patch) 60bf9e1a-Arm-boot-modules-scrubbing.patch (Replaces xsa372-2.patch) 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch (Replaces xsa373-1.patch) 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch (Replaces xsa373-2.patch) 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch (Replaces xsa373-2.patch) 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch (Replaces xsa375.patch) 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch (Replaces xsa377.patch) 60bfa904-AMD-IOMMU-wait-for-command-slot.patch (Replaces xsa373-4.patch) 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch (Replaces xsa373-5.patch) 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch - Dropped gcc11-fixes.patch- bsc#1183243 - L3: Core cannot be opened when using xl dump-core of VM with PTF 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch- bsc#1180350 - some long deprecated commands were finally removed in qemu6. Adjust libxl to use supported commands. libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl-qemu6-vnc-password.patch libxl-qemu6-scsi.patch- Update logrotate.conf, move global options into per-file sections to prevent globbering of global state (bsc#1187406)- Fix shell macro expansion in xen.spec, so that ExecStart= in xendomains-wait-disks.service is created correctly (bsc#1183877)- bsc#1186428 - VUL-0: CVE-2021-28693: xen: xen/arm: Boot modules are not scrubbed (XSA-372) xsa372-1.patch xsa372-2.patch - bsc#1186429 - VUL-0: CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (XSA-373) xsa373-1.patch xsa373-2.patch xsa373-3.patch xsa373-4.patch xsa373-5.patch - bsc#1186433 - VUL-0: CVE-2021-0089: xen: Speculative Code Store Bypass (XSA-375) xsa375.patch - bsc#1186434 - VUL-0: CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (XSA-377) xsa377.patch - Upstream bug fixes (bsc#1027519) 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch- Upstream bug fix (bsc#1027519) 608676f2-VT-d-register-based-invalidation-optional.patch- Add xen.sysconfig-fillup.patch to make sure xencommons is in a format as expected by fillup. (bsc#1185682) Each comment needs to be followed by an enabled key. Otherwise fillup will remove manually enabled key=value pairs, along with everything that looks like a stale comment, during next pkg update- Refresh xenstore-launch.patch to cover also daemon case- Update to Xen 4.14.2 bug fix release (bsc#1027519) xen-4.14.2-testing-src.tar.bz2 - Drop patches contained in new tarball 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6011bbc7-x86-timer-fix-boot-without-PIT.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch 60787714-x86-HPET-avoid-legacy-replacement-mode.patch- bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 60787714-x86-HPET-avoid-legacy-replacement-mode.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch - Upstream bug fixes (bsc#1027519) 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch (Replaces xsa368.patch) 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch- bsc#1137251 - Restore changes for xen-dom0-modules.service which were silently removed on 2019-10-17- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway. This resulted to over-allocation.- bsc#1167608 - adjust limit for max_event_channels A previous change allowed an unbound number of event channels to make sure even large domUs can start of of the box. This may have a bad side effect in the light of XSA-344. Adjust the built-in limit based on the number of vcpus. In case this is not enough, max_event_channels=/maxEventChannels= has to be used to set the limit as needed for large domUs adjust libxl.max_event_channels.patch- bsc#1183072 - VUL-0: CVE-2021-28687: xen: HVM soft-reset crashes toolstack (XSA-368). Also resolves, bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl bsc#1181989 - openQA job causes libvirtd to dump core when running kdump inside domain xsa368.patch- bsc#1177204 - L3-Question: conring size for XEN HV's with huge memory to small. Inital Xen logs cut 5ffc58c4-ACPI-reduce-verbosity-by-default.patch - Upstream bug fixes (bsc#1027519) 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch - bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch- bsc#1182576 - L3: XEN domU crashed on resume when using the xl unpause command 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch- Start using the %autosetup macro to simplify patch management xen.spec- bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch - Drop gcc10-fixes.patch- Upstream bug fixes (bsc#1027519) 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch (Replaces xsa360.patch) 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch - bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 6011bbc7-x86-timer-fix-boot-without-PIT.patch- bsc#1181254 - VUL-0: xen: IRQ vector leak on x86 (XSA-360) xsa360.patch- bsc#1180794 - bogus qemu binary path used when creating fv guest under xen xen.spec- bsc#1180690 - L3-Question: xen: no needsreboot flag set Add Provides: installhint(reboot-needed) in xen.spec for libzypp- Update libxl.set-migration-constraints-from-cmdline.patch Remove code which handled --max_factor. The total amount of transferred data is no indicator to trigger the final stop+copy. This should have been removed during upgrade to Xen 4.7. Fix off-by-one in --max_iters, it caused one additional copy cycle. Reduce default value of --max_iters from 5 to 2. The workload within domU will continue to produce dirty pages. It is unreasonable to expect any slowdown during migration. Now there is one initial copy of all memory, one instead of four iteration for dirty memory, and a final copy iteration prior move.- Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch- Pass --with-rundir to configure to get rid of /var/run- bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch- boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch- bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch- Fix build error with libxl.fix-libacpi-dependency.patch- Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere.- Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1- bsc#1178591 - VUL-0: CVE-2020-28368: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351 xsa351-1.patch xsa351-2.patch xsa351-3.patch- bsc#1177950 - adjust help for --max_iters, default is 5 libxl.set-migration-constraints-from-cmdline.patch- jsc#SLE-16899 - improve performance of live migration remove allocations and memcpy from hotpaths on sending and receiving side to get more throughput on 10Gbs+ connections libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc-sr-readv_exact.patch libxc-sr-restore-handle_buffered_page_data.patch libxc-sr-restore-handle_incoming_page_data.patch libxc-sr-restore-map_errs.patch libxc-sr-restore-mfns.patch libxc-sr-restore-pfns.patch libxc-sr-restore-populate_pfns-mfns.patch libxc-sr-restore-populate_pfns-pfns.patch libxc-sr-restore-read_record.patch libxc-sr-restore-types.patch libxc-sr-save-errors.patch libxc-sr-save-guest_data.patch libxc-sr-save-iov.patch libxc-sr-save-local_pages.patch libxc-sr-save-mfns.patch libxc-sr-save-rec_pfns.patch libxc-sr-save-show_transfer_rate.patch libxc-sr-save-types.patch libxc-sr-use-xc_is_known_page_type.patch adjust libxc.sr.superpage.patch adjust libxc.migrate_tracking.patch- Upstream bug fixes (bsc#1027519) 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch - Renamed patches 5f560c42-x86-PV-64bit-segbase-consistency.patch Replaces 5f5b6951-x86-PV-64bit-segbase-consistency.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch Replaces 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch Replaces 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch Replaces 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch Replaces 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch Replaces 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch 5f6a00c4-evtchn-relax-port_is_valid.patch Replaces 5f6a062c-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch Replaces 5f6a065c-pv-Avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch Replaces 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch Replaces 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch Replaces 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch Replaces 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch Replaces 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch Replaces 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch Replaces 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch- bsc#1177409 - VUL-0: CVE-2020-27674: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286) xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch - bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345) 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch - bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346) 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch - bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347) 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch- Update libxc.sr.superpage.patch set errno in x86_hvm_alloc_4k (bsc#1177112)- bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) 5f6a062c-evtchn-relax-port_is_valid.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) 5f6a065c-pv-Avoid-double-exception-injection.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - Upstream bug fix (bsc#1027519) 5f5b6951-x86-PV-64bit-segbase-consistency.patch- Fix problems in xen.spec with building on aarch64- Make use of %service_del_postun_without_restart while preserving the old behavior for older distros. - In %post tools, remove unnecessary qemu symlinks.- Fix error in xen-tools %post when linking pvgrub64.bin - Make paths below libexec more explicit - Create symlink also for pvgrub32.bin- Revert previous libexec change for qemu compat wrapper The path is used in existing domU.xml files in the emulator field - Escape some % chars in xen.spec, they have to appear verbatim- Enhance libxc.migrate_tracking.patch Print number of allocated pages on sending side, this is more accurate than p2m_size.- jsc#SLE-15926 - Dev: XEN: drop netware support Dropped the following patches pygrub-netware-xnloader.patch xnloader.py Refreshed pygrub-boot-legacy-sles.patch- Fix build on aarch64 with gcc10 - Package xenhypfs for aarch64- Correct license name * GPL-3.0+ is now GPL-3.0-or-later- Upstream bug fixes (bsc#1027519) 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch- Update to Xen 4.14.0 FCS release xen-4.14.0-testing-src.tar.bz2 * Linux stubdomains (contributed by QUBES OS) * Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix) * Lightweight VM fork for fuzzing / introspection. (contributed by Intel) * Livepatch: buildid and hotpatch stack requirements * CONFIG_PV32 * Hypervisor FS support * Running Xen as a Hyper-V Guest * Domain ID randomization, persistence across save / restore * Golang binding autogeneration * KDD support for Windows 7, 8.x and 10 - Dropped patches contained in new tarball 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch xsa317.patch xsa319.patch xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch xsa328-1.patch xsa328-2.patch- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached ignore-ip-command-script-errors.patch- Enhance libxc.migrate_tracking.patch After transfer of domU memory, the target host has to assemble the backend devices. Track the time prior xc_domain_unpause.- Add libxc.migrate_tracking.patch to track live migrations unconditionally in logfiles, especially in libvirt. This will track how long a domU was suspended during transit.- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect error handling in event channel port allocation xsa317.patch - bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code paths in x86 dirty VRAM tracking xsa319.patch - bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient cache write- back under VT-d xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch - bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic modification of live EPT PTE xsa328-1.patch xsa328-2.patch- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch) 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch) - Upstream bug fixes (bsc#1027519) 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch- Fixes for %_libexecdir changing to /usr/libexec- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) xsa320-1.patch xsa320-2.patch- Update to Xen 4.13.1 bug fix release (bsc#1027519) xen-4.13.1-testing-src.tar.bz2 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch - Drop patches contained in new tarball 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- spec: Remove invocation of autogen.sh - spec: Recommend qemu-ovmf-x86_64 to provide UEFI firmwares- bsc#1170968 - GCC 10: xen build fails on i586 gcc10-fixes.patch- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation handling in GNTTABOP_copy (XSA-318) 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- bsc#1168140 - VUL-0: CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch - bsc#1168142 - VUL-0: CVE-2020-11739: xen: XSA-314 - Missing memory barriers in read-write unlock paths 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch - bsc#1168143 - VUL-0: CVE-2020-11743: xen: XSA-316 - Bad error path in GNTTABOP_map_grant 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch - bsc#1167152 - L3: Xenstored Crashed during VM install Need Core analyzed 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch - Drop for upstream solution (bsc#1165206) 01-xen-credit2-avoid-vcpus-to.patch default-to-credit1-scheduler.patch - Upstream bug fixes (bsc#1027519) 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch- bsc#1167608 - unbound limit for max_event_channels domUs with many vcpus and/or resources fail to start libxl.max_event_channels.patch- bsc#1161480 - Fix xl shutdown for HVM without PV drivers add libxl.libxl__domain_pvcontrol.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 01-xen-credit2-avoid-vcpus-to.patch- bsc#1158414 - GCC 10: xen build fails gcc10-fixes.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 default-to-credit1-scheduler.patch- bsc#1160932 - VUL-0: xen: XSA-312 v1: arm: a CPU may speculate past the ERET instruction 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch - bsc#1164425 - x86: "spec-ctrl=no-xen" should also disable branch hardening 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch - Upstream bug fixes (bsc#1027519) 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch- bsc#1159755 - use fixed qemu-3.1 machine type for HVM This must be done in qemu to preserve PCI layout remove libxl.lock-qemu-machine-for-hvm.patch- jsc#SLE-10183 - script to calculate cpuid= mask add helper script from https://github.com/twizted/xen_maskcalc domUs may be migrated between different cpus from the same vendor if their visible cpuid value has incompatible feature bits masked.- jsc#SLE-10172, bsc#1055731 - handle degraded raid for xendomains add helper script and systemd service from https://github.com/luizluca/xen-tools-xendomains-wait-disk in new sub package xen-tools-xendomains-wait-disk See included README for usage instructions xendomains-wait-disks.LICENSE xendomains-wait-disks.README.md xendomains-wait-disks.sh- bsc#1159755 - use fixed qemu-3.1 machine type for HVM qemu4 introduced incompatible changes in pc-i440fx, which revealed a design bug in 'xenfv'. Live migration from domUs started with qemu versions prior qemu4 can not be received with qemu4+. libxl.lock-qemu-machine-for-hvm.patch- Upstream bug fixes (bsc#1027519) 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- bsc#1159320 - Xen logrotate file needs updated logrotate.conf- Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware- Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch- Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch- Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2- Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call)- Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch- bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch- bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch- Upstream bug fixes (bsc#1027519) 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch - Drop 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Preserve modified files which used to be marked as %config, rename file.rpmsave to file- Update to Xen 4.12.1 bug fix release (bsc#1027519) xen-4.12.1-testing-src.tar.bz2 - Drop patches contained in new tarball 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8f752c-x86-e820-build-with-gcc9.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Refreshed patches libxl.pvscsi.patch- bsc#1143563 - Speculative mitigation facilities report wrong status 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Update xen-dom0-modules.service (bsc#1137251) Map backend module names from pvops and xenlinux kernels to a module alias. This avoids errors from modprobe about unknown modules. Ignore a few xenlinux modules that lack aliases.- Gcc9 warnings seem to be cleared up with upstream fixes. Drop gcc9-ignore-warnings.patch- bsc#1138563 - L3: xenpvnetboot improperly ported to Python 3 fix-xenpvnetboot.patch- Move /etc/modprobe.d/xen_loop.conf to /lib/modprobe.d/xen_loop.conf- Remove /etc/xen/xenapiusers and /etc/pam.d/xen-api- Remove all upstream provided files in /etc/xen They are not required at runtime. The host admin is now responsible if he really needs anything in this subdirectory.- In our effort to make /etc fully admin controlled, move /etc/xen/scripts to libexec/xen/scripts with xen-tools.etc_pollution.patch- Move /etc/bash_completion.d/xl.sh to %{_datadir}/bash-completion/completions- bsc#1138294 - VUL-0: CVE-2019-17349: XSA-295: Unlimited Arm Atomics Operations 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Upstream bug fixes (bsc#1027519) 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch (Replaces xsa297-0a.patch) 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch (Replaces xsa297-0b.patch) 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch (Replaces xsa297-0c.patch) 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch (Replaces xsa297-0d.patch) 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch (Replaces xsa297-1.patch) 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch (Replaces xsa297-2.patch) 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch (Replaces xsa297-3.patch) 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch- Fix some outdated information in the readme README.SUSE- spec: xen-tools: require matching version of xen package bsc#1137471- Remove two stale patches xen.build-compare.man.patch xenpaging.doc.patch- Disable LTO (boo#1133296).- Remove arm32 from ExclusiveArch to fix build- bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4". CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 xsa297-0a.patch xsa297-0b.patch xsa297-0c.patch xsa297-0d.patch xsa297-1.patch xsa297-2.patch xsa297-3.patch - Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch- bsc#1131811 - [XEN] internal error: libxenlight failed to create new domain. This patch is a workaround for a systemd issue. See patch header for additional comments. xenstore-launch.patch- bsc#1125378 - [xen][pygrub] Can not restore sle11sp4 pv guest after upgrading host from sle11sp4 to sle15sp1 pygrub-python3-conversion.patch - Fix "TypeError: virDomainDefineXML() argument 2 must be str or None, not bytes" when converting VMs from using the xm/xend toolstack to the libxl/libvirt toolstack. (bsc#1123378) xen2libvirt.py- bsc#1124560 - Fully virtualized guests crash on boot 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch - bsc#1121391 - GCC 9: xen build fails 5c8f752c-x86-e820-build-with-gcc9.patch - Upstream bug fixes (bsc#1027519) 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch- Install pkgconfig files into libdir instead of datadir- Update to Xen 4.12.0 FCS release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 * HVM/PVH and PV only Hypervisor: The Xen 4.12 release separates the HVM/PVH and PV code paths in Xen and provides KCONFIG options to build a PV only or HVM/PVH only hypervisor. * QEMU Deprivilege (DM_RESTRICT): In Xen 4.12, this feature has been vastly improved. * Argo - Hypervisor-Mediated data eXchange: Argo is a new inter- domain communication mechanism. * Improvements to Virtual Machine Introspection: The VMI subsystem which allows detection of 0-day vulnerabilities has seen many functional and performance improvements. * Credit 2 Scheduler: The Credit2 scheduler is now the Xen Project default scheduler. * PVH Support: Grub2 boot support has been added to Xen and Grub2. * PVH Dom0: PVH Dom0 support has now been upgraded from experimental to tech preview. * The Xen 4.12 upgrade also includes improved IOMMU mapping code, which is designed to significantly improve the startup times of AMD EPYC based systems. * The upgrade also features Automatic Dom0 Sizing which allows the setting of Dom0 memory size as a percentage of host memory (e.g. 10%) or with an offset (e.g. 1G+10%).- bsc#1130485 - Please drop Requires on multipath-tools in xen-tools. Now using Recommends multipath-tools. xen.spec- Update to Xen 4.12.0 RC7 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC6 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1026236 - add Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs if their expected frequency does not match exactly the frequency of the receiving host xen.bug1026236.suse_vtsc_tolerance.patch- Update to Xen 4.12.0 RC5 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- jsc#SLE-3059 - Disable Xen auto-ballooning - Add CONFIG_DOM0_MEM to the spec file for managing dom0 memory. xen.spec - Disable autoballooning in xl.con xl-conf-disable-autoballoon.patch- Update gcc9-ignore-warnings.patch to fix build in SLE12- bsc#1126325 - fix crash in libxl in error path Setup of grant_tables and other variables may fail libxl.prepare-environment-for-domcreate_stream_done.patch- bsc#1127620 - Documentation for the xl configuration file allows for firmware=pvgrub64 but we don't ship pvgrub64. Create a link from grub.xen to pvgrub64 xen.spec- Update to Xen 4.12.0 RC4 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Tarball also contains additional post RC4 security fixes for Xen Security Advisories 287, 288, and 290 through 294.- Update to Xen 4.12.0 RC3 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC2 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1121391 - GCC 9: xen build fails gcc9-ignore-warnings.patch- bsc#1122563 - Virtualization/xen: Bug no Xen on boot, missing /proc/xen, after 4.11 -> 4.12 upgrade on X86_64/efi. Keep xen.efi in /usr/lib64/efi for booting older distros. xen.spec- fate#326960: Package grub2 as noarch. As part of the effort to have a unified bootloader across architectures, modify the xen.spec file to move the Xen efi files to /usr/share/efi/$(uname -m) from /usr/lib64/efi.- Update to Xen 4.12.0 RC1 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Drop 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch 5bdc31d5-VMX-fix-vmx_handle_eoi.patch gcc8-fix-array-warning-on-i586.patch gcc8-fix-format-warning-on-i586.patch gcc8-inlining-failed.patch xen.bug1079730.patch- bsc#1121960 - xen: sync with Factory xen.spec xen.changes- Replace old $RPM_* shell vars. - Run fdupes for all architectures, and not crossing subvolume boundaries.- Do not run %fdupes on aarch64 to avoid the hardlink-across-partition rpmlint error- Require qemu-seabios only on x86* as it is not available on non-x86 systems- Avoid creating dangling symlinks (bsc#1116524) This reverts the revert of tmp_build.patch- Update to Xen 4.11.1 bug fix release (bsc#1027519) xen-4.11.1-testing-src.tar.bz2 - 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch replaces xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch replaces xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch - Drop the following patches contained in the new tarball 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbe-ARM-disable-grant-table-v2.patch 5b72fbbe-oxenstored-eval-order.patch 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch xsa275-1.patch xsa275-2.patch xsa276-1.patch xsa276-2.patch xsa277.patch xsa279.patch xsa280-1.patch xsa280-2.patch- bsc#1116524 - Package xen-tools-4.11.0_09-2.1.x86_64 broken: Missing /bin/domu-xenstore. This was broken because "make package build reproducible" change. (boo#1047218, boo#1062303) This fix reverses the change to this patch. tmp_build.patch- bsc#1115040 - VUL-0: CVE-2018-19961 CVE-2018-19962: xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275) xsa275-1.patch xsa275-2.patch - bsc#1115043 - VUL-0: CVE-2018-19963: xen: resource accounting issues in x86 IOREQ server handling (XSA-276) xsa276-1.patch xsa276-2.patch - bsc#1115044 - VUL-0: CVE-2018-19964: xen: x86: incorrect error handling for guest p2m page removals (XSA-277) xsa277.patch - bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch - bsc#1115045 - VUL-0: xen: CVE-2018-19965: x86: DoS from attempting to use INVPCID with a non-canonical addresses (XSA-279) xsa279.patch - bsc#1115047 - VUL-0: CVE-2018-19966: xen: Fix for XSA-240 conflicts with shadow paging (XSA-280) xsa280-1.patch xsa280-2.patch - bsc#1114988 - VUL-0: CVE-2018-19967: xen: guest use of HLE constructs may lock up host (XSA-282) 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch - bsc#1108940 - L3: XEN SLE12-SP1 domU hang on SLE12-SP3 HV 5bdc31d5-VMX-fix-vmx_handle_eoi.patch - Upstream bug fixes (bsc#1027519) 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch- bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch- Use SMBIOS_REL_DATE instead of SMBIOS_DATE for reproducible binaries- make package build reproducible (boo#1047218, boo#1062303) * Set SMBIOS_REL_DATE * Update tmp_build.patch to use SHA instead of random build-id * Add reproducible.patch to use --no-insert-timestamp- Building with ncurses 6.1 will fail without xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - Building libxl acpi support on aarch64 with gcc 8.2 will fail without xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch- bsc#1106263 - L3: The affinity reporting via 'xl vcpu-list' is apparently broken 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch- bsc#1094508 - L3: Kernel oops in fs/dcache.c called by d_materialise_unique() 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch - bsc#1103279 - (CVE-2018-15470) VUL-0: CVE-2018-15470: xen: oxenstored does not apply quota-maxentity (XSA-272) 5b72fbbe-oxenstored-eval-order.patch - bsc#1103275 - (CVE-2018-15469) VUL-0: CVE-2018-15469: xen: Use of v2 grant tables may cause crash on ARM (XSA-268) 5b72fbbe-ARM-disable-grant-table-v2.patch - Upstream patches from Jan (bsc#1027519) 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch - Drop 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- bsc#1078292 - rpmbuild -ba SPECS/xen.spec with xen-4.9.1 failed xen.spec- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM (XSA-273) 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch - bsc#1103276 - VUL-0: CVE-2018-15468: xen: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (XSA-269) 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch - Upstream prereq patches for XSA-273 and other upstream fixes (bsc#1027519) 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- Upstream patches from Jan (bsc#1027519) 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch gcc8-fix-format-warning-on-i586.patch gcc8-fix-array-warning-on-i586.patch - Drop xen.fuzz-_FORTIFY_SOURCE.patch gcc8-fix-warning-on-i586.patch- Update to Xen 4.11.0 FCS (fate#325202, fate#325123) xen-4.11.0-testing-src.tar.bz2 disable-building-pv-shim.patch - Dropped patches 5a33a12f-domctl-improve-locking-during-domain-destruction.patch 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a9985bd-x86-invpcid-support.patch 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch 5af1daa9-3-x86-traps-use-IST-for-DB.patch 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch 5af97999-viridian-cpuid-leaf-40000003.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch 5b348874-x86-refine-checks-in-DB-handler.patch 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen_fix_build_with_acpica_20180427_and_new_packages.patch- Submit upstream patch libacpi: fixes for iasl >= 20180427 git commit 858dbaaeda33b05c1ac80aea0ba9a03924e09005 xen_fix_build_with_acpica_20180427_and_new_packages.patch This is needed for acpica package to get updated in our build service- Upstream patches from Jan (bsc#1027519) 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch) 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch) 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch) 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch) 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch) 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch) 5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch) 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-<>.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch- bsc#1098403 - fix regression introduced by changes for bsc#1079730 a PV domU without qcow2 and/or vfb has no qemu attached. Ignore QMP errors for PV domUs to handle PV domUs with and without an attached qemu-xen. xen.bug1079730.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1092543 - GCC 8: xen build fails gcc8-fix-warning-on-i586.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" (XSA-263) 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- Always call qemus xen-save-devices-state in suspend/resume to fix migration with qcow2 images (bsc#1079730) libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen.bug1079730.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- bsc#1092543 - GCC 8: xen build fails 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch gcc8-inlining-failed.patch- Update to Xen 4.10.1 bug fix release (bsc#1027519) xen-4.10.1-testing-src.tar.bz2 disable-building-pv-shim.patch - Drop the following patches contained in the new tarball 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch xsa258.patch xsa259.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Upstream patches from Jan (bsc#1027519) and fixes related to Page Table Isolation (XPTI). See also bsc#1074562 XSA-254 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop xsa252.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- Remove stale systemd presets code for 13.2 and older- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Replace hardcoded xen with Name tag when refering to subpkgs- Make sure tools and tools-domU require libs from the very same build- tools-domU: Add support for qemu guest agent. New files 80-xen-channel-setup.rules and xen-channel-setup.sh configure a xen-pv-channel for use by the guest agent FATE#324963- Remove outdated /etc/xen/README*- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with MSR emulation (XSA-253) 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch - bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch- Fix python3 deprecated atoi call (bsc#1067224) pygrub-python3-conversion.patch - Drop xenmon-python3-conversion.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 build-python3-conversion.patch bin-python3-conversion.patch- bsc#1070165 - xen crashes after aborted localhost migration 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch - bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb: libxl__devices_destroy failed 5a33a12f-domctl-improve-locking-during-domain-destruction.patch - Upstream patches from Jan (bsc#1027519) 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch- Update to Xen 4.10.0 FCS (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Rebuild initrd if xen-tools-domU is updated- Update to Xen 4.10.0-rc8 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- Adjust xenstore-run-in-studomain.patch to change the defaults in the code instead of changing the sysconfig template, to also cover the upgrade case- Update to Xen 4.10.0-rc6 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Since xen switched to Kconfig, building a debug hypervisor was done by default. Adjust make logic to build a non-debug hypervisor by default, and continue to provide one as xen-dbg.gz- fate#316614: set migration constraints from cmdline fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10- Document the suse-diskcache-disable-flush option in xl-disk-configuration(5) (bsc#879425,bsc#1067317)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to Xen 4.10.0-rc5 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - fate#323663 - Run Xenstore in stubdomain xenstore-run-in-studomain.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 pygrub-python3-conversion.patch xenmon-python3-conversion.patch migration-python3-conversion.patch xnloader.py xen2libvirt.py- Remove xendriverdomain.service (bsc#1065185) Driver domains must be configured manually with custom .service file- Update to Xen 4.10.0-rc3 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Adjust xen-dom0-modules.service to ignore errors (bsc#1065187)- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Update to Xen 4.10.0-rc2 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Update to Xen 4.10.0-rc1 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop patches included in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch gcc7-mini-os.patch- bsc#1061084 - VUL-0: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1056278 - VUL-0: xen: Missing NUMA node parameter verification (XSA-231) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch - bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232) 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch - bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup (XSA-233) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch - bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch - bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Unignore gcc-PIE the toolstack disables PIE for firmware builds as needed- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- bsc#1044974 - xen-tools require python-pam xen.spec- Clean up spec file errors and a few warnings. (bsc#1027519) - Removed conditional 'with_systemd' and some old deprecated 'sles_version' checks. xen.spec- Remove use of brctl utiltiy from supportconfig plugin FATE#323639- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- fate#323639 Move bridge-utils to legacy replace-obsolete-network-configuration-commands-in-s.patch- bsc#1052686 - VUL-0: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- Add a supportconfig plugin xen-supportconfig FATE#323661- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- fate#323662 Drop qemu-dm from xen-tools package The following tarball and patches have been removed qemu-xen-traditional-dir-remote.tar.bz2 VNC-Support-for-ExtendedKeyEvent-client-message.patch 0001-net-move-the-tap-buffer-into-TAPState.patch 0002-net-increase-tap-buffer-size.patch 0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch 0004-e1000-secrc-support.patch 0005-e1000-multi-buffer-packet-support.patch 0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch 0007-e1000-verify-we-have-buffers-upfront.patch 0008-e1000-check-buffer-availability.patch CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch CVE-2015-4037-qemut-smb-config-dir-name.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch blktap.patch cdrom-removable.patch xen-qemu-iscsi-fix.patch qemu-security-etch1.patch xen-disable-qemu-monitor.patch xen-hvm-default-bridge.patch qemu-ifup-set-mtu.patch ioemu-vnc-resize.patch capslock_enable.patch altgr_2.patch log-guest-console.patch bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch qemu-dm-segfault.patch bdrv_default_rwflag.patch kernel-boot-hvm.patch ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch ioemu-hvm-pv-support.patch pvdrv_emulation_control.patch ioemu-disable-scsi.patch ioemu-disable-emulated-ide-if-pv.patch xenpaging.qemu.flush-cache.patch ioemu-devicemodel-include.patch - Cleanup spec file and remove unused KMP patches kmp_filelist supported_module.patch xen_pvonhvm.xen_emul_unplug.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch/sbin/ldconfig/sbin/ldconfigibs-arm-3 1643118016  !"#$%&'()*+,-4.14.3_06-150300.3.18.24.14.3_06-150300.3.18.2libxencall.so.1libxencall.so.1.2libxenctrl.so.4.14libxenctrl.so.4.14.0libxendevicemodel.so.1libxendevicemodel.so.1.3libxenevtchn.so.1libxenevtchn.so.1.1libxenforeignmemory.so.1libxenforeignmemory.so.1.3libxenfsimage.so.4.14libxenfsimage.so.4.14.0libxengnttab.so.1libxengnttab.so.1.2libxenguest.so.4.14libxenguest.so.4.14.0libxenhypfs.so.1libxenhypfs.so.1.0libxenlight.so.4.14libxenlight.so.4.14.0libxenstat.so.4.14libxenstat.so.4.14.0libxenstore.so.3.0libxenstore.so.3.0.3libxentoolcore.so.1libxentoolcore.so.1.0libxentoollog.so.1libxentoollog.so.1.0libxenvchan.so.4.14libxenvchan.so.4.14.0libxlutil.so.4.14libxlutil.so.4.14.0xenfsimageext2fsfsimage.sofatfsimage.soiso9660fsimage.soreiserfsfsimage.soufsfsimage.sozfsfsimage.so/usr/lib64//usr/lib64/xenfsimage//usr/lib64/xenfsimage/ext2fs//usr/lib64/xenfsimage/fat//usr/lib64/xenfsimage/iso9660//usr/lib64/xenfsimage/reiserfs//usr/lib64/xenfsimage/ufs//usr/lib64/xenfsimage/zfs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22515/SUSE_SLE-15-SP3_Update/7a2f8adef9970bb4846e4ff6ac853984-xen.SUSE_SLE-15-SP3_Updatecpioxz5aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dc604388a4b7b3126c92debd83d09610cf84ba60, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aceaed25e332a744bc883d8eb06feb9c135595f3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=606e1f28c5a5fc6dda69f08c77be400ba020bd52, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce8a353fb5a176ce2a51454e3310151fb8125622, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5572f25eb9aa1ca6fda145a72698c065fad05ce2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9dc307ce6b2cbe7b361add004e98218311d41d3c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=655489a04eefee12f53539af578fff641f342aa8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=860fca2e247ffc0fdc8ca67d245649b59aef3cc2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a183617d7720533a0eef059b5f3cd55a75d6b156, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0417a14cec70e009b52ce674e078ec11731d208b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=964370d706cee2cedf7de8fdefadbfa18541b5d8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c8544e1c01a8b4b4f1fe8403daeb744474361d30, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a28991a3a25684f5122a671866e2de636cb26a3a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e1808392c0f5e94f23ab4214ca0fc71d5273d4a6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=45e189fa5a44258969a27dc76e1cd3ad01fbe5aa, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=670197345ddf6c50c1d7956aa38887f7c60bf61f, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f88a5dfaea0de1b3c36ade98c9b84122eb7faf1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3dece467d2c9aed0a3b907ba8f6dc7d565b7c3dd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=93c5ef1efa8e4935d5c458799607ffaa20ea3499, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8405b6a367aedc3b7850283dd55e11e00cb5843a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a29e337c57ae7f5764533128a23c4188ae828ef, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d362d7cbb0c9531a15b13ffd78c1ad5fc4c1708, stripped%9GYaqz   PPPPPPR*RR,RRR+R)RRRPRR,RR#RRRRRRRR+RR"RRRRRRPPPPPP P PR*RR,RRRR+R)RRRRP P P P R*R,RRRR+R)RRRPPPPPPPP R*RR,RRR+R)RRRPPRRRRRRPPPPPPR*RR,RRR+R)RRRPRRRR.RRRRPPRR,RRRR+RR.RRRPR,RRR RR&RRR RRRR+RRR$R%R(RRR R R R-RRRPRRR(RR-RRPR*RRRRR)RRRRPPRRRRP!P RRRRRRP"RR#RRR(R"RRRP#RRRR'RRRRR!RR RRRRR!R RRR!RR RRR!RR RRRR!R RRR!RR RR썳|(bO3utf-8bfc16ab827e045f24fb67e339a1a4402638b4702f4bf8a0d1fb4bb6117d4987f?7zXZ !t/:] cr$x#E%ux̙~3m0/j?rMt2=g6r/ ,SN( ^=̖^(_bm#L; J2LiZ90v]m%ߖ3{+h àU8%,9bCF1CCΦtc¦to  ~֏Ӿp4 rw/1|Nl~ /f0[ AdNb+cjp͓֧o{6B'[vrm/$Ohss0WE[5"c0VnX?Gu}yx>1>ݡ5Υ c ƌoNS*P.F5%װ r 1y3>j+rJZN\XreO΄4jf/syq Yjijyk =h9"ZnE܎6`2{\_pk*# G*1Ű3;H;eSQ _".Sw!Gea'~a/#ְqp5l.0Sw}0>Z@yU K/:ZMI3Im;fj+syV90i呻1s:z""^J W >"iR u Q)o @%IY0t3}М2Hr'9 UcxN.4!rfB mյ-5f qMb议YJd _GzE[:']⡮J@9%xnxBGE(FdMAoC/Got$`/Uo $~ի/Ƃ]H _,2gt6E,?%9rŶxoKxL\uSN/TeE]]89 f >Dȼʭ=p'RnlVݛ@:vwh a *Ȥ(Twȕ@fn.Ïl<ݫp5,ƛ!smܒqn w7PG0,dm!ODptyjl:qD"-od)EjIǐhG`aj׊Э4CÉ\Me_ ęSdCT_p8. .bCȬE2 >#8L:ܺ6b%^:CڞCz !)`R 1;kC^?N*j*AmMg׊0[g!;/,Qprex7B:h.fFxȣ4MڒL #3hɟt~`c %*UpgDdH_QBQ(vw/گ?ηGhiܡ&uiPs}D-pΑDzKR[ovaaV$Üw棰?&{r"}WdӤOrmxoY<mVMjBEhem@(; ,&)S>Gͦ{({~pt+P8گwvf5bZ<z# w﷌ ,&Vf([i;y{`"vUq8pa9VӪWE?e+) 9żXi#2_:be8jH*X?^Ϟf}͛ZErB~puC\7`f@$74 v9%wR3  =(n_sFQvg@ (wfB3lmnz IqBgICehKTύ||tZ:C!MSY&Sύ6WF˗@.BPYj$;"U"|`KS$)6Y0:8aN9+"#LV}-YEBB]W0kʧIHZ_#]Ch$ѨN9D$YЌzON?qh]"xb_xZ.cӉa]jP.[?mAV\_JkYTN{eW;#uZDI4<`Retk 5s̏DHȕ%2"*1i]x24z-;-췎tteN_A W=ˣfoa@ I1lYMûv˓כt^r,~aȰ;ih-G5#zIs,4^,DlK| =µA# ci/ wiuF&4O5Rd+Ԋ]A񰉲 hĊKjWSs`?_+جSz9@K6 k.Q"eJ?I%\4@0j:LT@HtsHnD' 8ZkY8(_QUl5)&a{͏nZ1t8' nj EM_K#^Vv- O k Br1b_:gϬZm/Ӷ=(e&CoC^SPDuAĤDEK'`ѕҎ^k"j+i!l_a9OgQA/,|{ĨM5:9MZsplRqH/pz4j&ਫ<O)\Nd#"7TK×KWZR7攣!4\OpPߓgȳv3tJ$PNȈ/߫t;vwwVX8l*8 dlezBzqwOSNnlMw1:zOI-RSY1E=}hhڑgzCxHJ\Ҥ.* f h@TsG  iD`r Θs-mYω/HKZ|F-OgyZ8G&{0KEP0qbD2% =g*5^׉TQȰaj);h=GJ娫%",ޱ]o3V`1f)x䬴sKΧ:b S)†0C9II3 ݻeAbDרt92ncp<Ж+={F&%ʾˆ}-9A`tjhxx ..y.wY?*e(ֆڤW Uhۇ,Ox<28\/㸀qB(tpo&:sνr3ز=M!2?#p +8͞"t&Go_A Sm Vm޿Nc¹@0P:o!EA>N *v.;q&6wvߣ jxBS=KhJ+T,CBp; r/r~_][9K~e /Ti]qϻ!qG._!(hKrU_D5TfL٩uYjEːxG!dH <ĔePʇޥ4WS'3#鯇Tw ݐqb"jލ0HXx\_[i; /58IQJTNJ9;++񼾰G=ȯ &bS\y&c2%{E4NS$p|#ۏÍ4 -p1@'~TG[X)l?(6)̷¤ϿQ[qfr rzŏdа Hrvi5ӐVG myM;X'UdiZ}WB ,ho,B#.KzgI 7mG#@Ò gԅ̣C@Dj#Yy@X?[p6MAthCY5ς؉L^tʜځ撴Di _&?͠ I)Abbْ3t֕(\49eBxsofgڳ& \7=ޙu?6*BIeq"cy^}m vt4w&l)M)bcҜ^3JĽ)hUokgP'; ՌP4@4[{CJ0ոwv߃\t93p( B!qֿۈvvif)ڤ^e587 hٞI^>@MEew)G$ -VR:f(J 8G߬r.C8|i;az` 4lۚ9YHK3F286o]Hcf.Zc3>LPe%*:rIFw7xg _#B`'N $j:̘. `q?bC%HU=Pt>=81ZjP+[j@ &U䥇,T_ K6劀,a̛$җ!@a:W1QJD݈ģC5TƁryl#i#mJ#1H'iQ6, ji0l8| ;uzT<(Kt.9D,N<寬b\Lr+l:oO(*eXVQfgcfo학z3/WʠB:fS1*N^׽]*7y'9F=Yda0A@-Sc'0ɩ׍t"4aGǜ]5E"*5}d-xLc({!8ouRX'L?5[Ŷ$FwcXk2tbz`}TsOX E}]+K| eh]N5X ,ɇAijOfTInlp?B`/%'V&sýs&9ƄIuy{P \4J+75qȐDUb>6*m]);;ߕ7bV 6ū Oǭ$0Ԝ6/6:xj2!6ew1=ot)x[AcZGвc n.:"O[ -{ bMm=1o2]z1ldW_;-E641" 6ZRkfD[,G ؾ4jM;EX(3@ wVUX ؝ˌټ;[.2&>;C*H}ɹvU/x SUg֗AZ&C?m'Ĩ-yvBO. c }Q? |[WV*K8.On'npÔfkW<󺩒_dWoA O_sfR2{z,eR'!-NE k)aB@ U†nj`GЎoMj|E.'#N]]n˔QOjzP_"ŞE&5QIf^4=|mTAu_vup뤑\n#Q?ŧgfOhV}ĽiQgqf؆N+rrVf-(&h8-'#,QЂ˳Df1K:vR Y/0tV{MA%D| R3݌s}/F;k<'3Pj@n#^sP01b J61A$/# ~CmS{ .`?LtݯMI"v/=,iۗkQyhhقBҗmN "ﴳ7CzvdH h/qMxu5pS%s8RSH.4#T|L\q%5Dddtjj:P|+Kn# no;-f*YY>")[JB)SB>omp)W^vTx a$ iGO1Cl=p h01ORkŮ|OwT0B\+DlF5F4sFg|HP뾾i.*fvD`m\R;'ԺF(-ƴd̓[" 僗zd\0I˨{MZM ZLo|?|JFQ5D\14; ?,p>աDjaBЀKz5OXPڎ7 &?ahtO$TmqE0ԓSIA<﮶`7J+(ANV;KSG$J&oU{^W[q8e=ΰbΚM`e/]bv .6FkJ'A&sAKN,Bɚ5B Np) NUUXCve.I z_;!c]+5O׊K8E{=jYf4}R ٹnqv1vi7s.+ ŵx`w؈ Kڧ>{F,-\cAןc5ba"vhQi>B&&o2weaэ:K!c Iz5877!ƪ}d?L>URYb[nxe IAYMJ Uu ~r=~ ׅ3qf0 5 v 1M{jڬ.pS4173cꔆ!{omLذ_(UgU.6)=&%Td8BE?NrJIҬLYG}Uv bsQB\E/\E~/nNg <?(;O~ \隫P]WN?р?R[#!$}7Bt&An ɸm&>ך+ʨӵ2( 59D gϻ]\g5E)5 ~b3d&tɿ"D=2x'RĔ:X^&@DfCLѪm0%,ҫientp{Ur' 'X)v*]D`wOnAvG6ˊHIw񶰛 ݓyq*%ZĉفʛHeE~\ I6g7}Ɇ=Zskuݶ iNlXo΍^|N;}ϲ6:9NE]vjrř+!j kT}ExR >)XF݅oz#s q6Wj~,L;)6eݧ]6F?6p6Z( vψ<5.s<@'N.)ځq&iYs;9ܼ+]yJ(ĝI:(rS C@3:S8t01sp}T$;DM\fr),Y.o|cτz^+b0=cH_WT!=)3_!I;|+2Y9y8)|j ہn2{NM_ZڡXvz1}P3+ >m+ceRc~Cү?xtrٲZ.𥔼3tR]չr pXOW;Y ^%D6JQ'1XqPc鉆(+n6ib0AL+g$g9ꫲ0Bh`$?D.-t{`'b>z1oWo}I z Gzo&t: ܦöH&Hi`JfV7G5ݎ6:;[*W+/nk%\rEi5;z?xHwx)(|X&*x\$Byj@-nf>Se`sTUr^eCߡ:(6 *jsv L>lQB4ӑ`W$D/;|oBV&f^ȯBqX-m>([~t;~ܱDH=Bl xB|Db}:NMAcJԪE^x : tg`i/JS |wo?L^G;BM *'~gna>-M-I0:HL%OIĮ7Z!bإ6Kπ5f7n ٛϤˊ 6H'O-*Z%A90j98n w/+'Պ*RȀDP`k)v-d 3[Ljr OGq7OMl(k&X*g*OkƚeLK.\5*iPRzmfאʓ`=~9lviU4x`!v|&NC75LʬWBz!2 `p'U!qh.!erZhVHZ<6ar'-fE9QhN/ܟ- v'C!cV)u@vun|f8XwQHr|p Tp?EZR ̽rW2[ wSm]|]3Hed!O9dzZYQPEG* `8HEH "A)7C CxL0 2 ^_44~Y[ID5JeayerʗKQY-qIW- U30[&\3mCdjmr*Ǫ~J|ƭ}/%/(0–̈ʌ4%/yW,$Rb}uH /X ;>ER2Wϓ-AS3"(pktY3-ʒU,ۋcgT{"yFD0`#Z*bQ LԮ$0ͦ(*2ɱV^5a\D<>dD7< F4fʪk-!{r}s5T8JL4f3<3I>H;&a-~.}Pk=1QdX+~ @aRO|cRĭ'gŘW&y%Q fSJ##[tU.o2^ui rʕK8t]Y~zUy'cDS ѺuczCk:G:OFB|>E#Nuns]HjWP0CCCw`n.XЎ h,z廵?`yWubxK?o`w7|x>9mtx<ӖhȀSlOO4WՁM-A~m4)[t~]dq2 LςI萚"{qR e) 9VЬ{A7:(9:{^mޡ_ ((fN#0mCƟ.651kX0=tp nVyE/諚%7n44b3dX i6#>IB5RKX@`%h(S/IU GD=sF0S9I4ո0Zqk䦮!7QEg6!؞{HrdD6V`ޢy\ܦ~g~z.n|3]INEBVtP h%R1v%jv1 ǁ"ϒҟɫGظy&;(}SۚmBxqgPk7i{LmV}\Ǐ]Nؐt*U¡/>5 \jK*ڗ!_]ha3@TAl㇕6Om_.gԥ(;.d1Z$:3{ |4mѠ=|Ksi`mP5"em$?BŢfu#5D,i)Bevi >%#o HdwDQ1I8;FKCB(^TJ0rf淴3F(e!S= F{ІYd`L4jnǷEK%* 1øy&kq"7RؚPwk ^ҧ%,։\a]OggJf-kc )CL'[G2*2# -n06= JMpMhTdIR0.F%%k}ͷZG3by bx製͋Ry B_caD8:x7U֢w {[gۏeRYMFA%4JƕpRz*jniK_›}u}Д %&q_F{( 5Ľb~luPáT{r44ODKsFnT>T J=&Ko3y:V@bQ 0ϧC֯rF2|2'4;4z?j{/ 9/|D&nCrnl+ 2] dBNJ+ojz0-ȒtУ_\{Z%uQ3WD{ES1wP#gSvXmaOBI !{I0UkD5;l()M}0F ,bJT L m<0mr9WRbSiz ux!Tsb l[;6-&u9Qu{-cx3A)(|vI;OEu6f,FO}v u.>圣r+UQAH;ڪ V#ƥL1(AYyyْ[i74kE؍c!ʝ-3au2=Y oQ&-Cz} I {XmbQҽVOQ)ք"/ԩ߈Udi'Y7mnm_uD f \U;񏰅cqB}*:u!{5Bp)0֯yhةubrC5CHiC |e'msߑEkvP42¥>!SKY5wBH5D䧱-U ʿ+FD}:oCϹ~-i(V01B.^'tlSj181y[h4Y> g+RuW u#aA7n~&',/"N.p$S (Yk=^S;9zCYnV%t-UDuץ =YLPMw@HB3'{)H6p ў "T_gPh"mbA^ 7Au֌䏄KnYr9$*KܟhyGvæxcvr_\qF꘣;H~~Ln}geNXO.F;ؚ21WHBJC{)lo`n7FNNCX89 c$M X)54 b6 j֖$ًb-Zg&k5 Lw"P*5xw?x͐Br}֣5 RvŀLssQ,/IaıgbC@V'?x(:!P XMkj$ TpԦvWpno͠ ga|HYv@ԍWԍ(L 8;f}/T~BK~99}1eM}#|,#IS?m~T#޶ܿM5š;s|e+n'!h/f^[id Rșx"7Mǰ[B7X{"FE%0FAy~l\g7zxnjEgě1`AԘh2A+{ Pq'j &'m3 r>Ѣ:D= =gb|>)?Dmas\at|D7k-JlNߌ= MvRI8c4#$s7;EKRK 4 Ńj!4ӉdPs^C:B(bh)IƉ賔@px%嫑OHV-|8‹xBH5_u(>`CLjf& [/`(Ŗ*{QP#i;R-ͅN Y#ۈV箯Fehί l^ݜx'|oPGzpsRYPs_;:"IT`a]HYmOrUwъdÑ(P m 6}A{엳2s;+4Ov7{ {[3gtlwn|,|MIeEb >l'96)j!0qWM2}Q D5:eڏ"6 ⴑH7s6&qK F-# e4|^e9)/ Ah*1gCle&1F:5-v/OIe:0Pd Vx$hVGiZ<3{;R!4\McjJ@TπD; Ԏgl][+ڠQyΓp G`XuÐқ+0<}xlKwWl0o)!A%bS-" $Q9.byQKV7Io,M@E-{^ +]U~*wjyaK_p lڋUY}d-Sp$)I;.Gy>`lMTn{9?@oQWy-=([2:x/*(cp)aW*n[lrb3X[+Iajh$V!}N8P(,={P/ ]+&- {r$9 DW+=~@0#g{KU+Pu+4)nzǮmۣs7)Hu@d\ԻokGkq(Zziօ5w<:3/&bIc{ZtsIMHp"M1ǍX3w\n85c;nEZn|Hb@Fiz&ۓ,p/-H-B:,KCi.0EH5+) 8|g$ QOcG-~&*XCI!gő200CalKu4^!ͲCO0 B0K&ƄƲXNl#J"w/si)MsOw٧~QEF"eUʗC/Tг6)54#7N-]v;餙dwu;U6JsqO',g{b=h+o:w+Kh{yd._T34ėJgzly/'kB śd+ۺς n0}PC8-Y\5M_*  '" W2͏ a:9sGN:RB&.Ut.J+ gr/8Tu!B׶\Xƥ"ʼn Rm :N@7icB-18\YE#I\OҐ̓y5eq_)|H5{IGsE?꙲}Rp8B囎is3Q.bRF&h=gRQb9\uB3r 4<˯#MnN Jf?o@OSj:úȾ(r8I-NCMr~SƦnr3 UM0ؔU|ÚqGH5ۣ@$֠|u>hBab4Y` O^# jG9H0Dc]D@o,d*p9ٜf#EL*8\_|& @P V|*O7 Ke-ͺcLp0<*ZJ i+>0T+wlT[X߫`C B{ux.E6Ml%S ֗ ͖(iTݭ Kcz1(VA~5ϭPoќ_,lih i?-"c@ Yr]!Dg.I=ffn5H*|ow; 5P-T۪ȓ("zzq!:sAΑ 0 y!}0by~4ؙp9"^ rn~:u(bzmf*o$Z ʷ k+WZ4for!;$Gm!uw26S.-\MDݱ qgOL]|<7`TPaEt$$܂xvЫE9H6·~U n0w1(th oMIORBaT&qm:6\QxJO [4)RRn%lo{q.0sӥ 栆5u, ݛjEKw katX<+ R ŀq ;y6\bȼZ-۾ |z0!+#8 (?9Sxfd-!$6.CzwIMxJ{eI+$%"Y4TJ". !笱+HDBG C /:H c- mdmZ QmFaUmKGŸ#&Vw/ڱTƂ),Aߡ>.$BW_u3|8d9S~>ϗ8N:t{ۗX̚cu }v@U7Sf5QAB»!%> mQ*/Cu\PR`XWa}A4Eey3:IvGϊpLf7V6 DcC?gm%[M4zʉYc%re 0 ׵PxZgf})iX*qz`lInǦ5 Y$zEhS#c=6owBXLmNnr!8eHHa d"dM \^3ڹs؜gvXzlBAlFE jʰѣcqu)gZ{5 x?+fhKZ<7^_>(%xB#(ȳ5,l(~F2|'vG8(e 5S3hB==`g%v0`a}5KW'ZIy\;O>kMݏH`& 3)N*V(wu Ho"6oK!5U!v?jڳ-!Z;jΦZҰ5{`@T0)zk"ci;)埁2غ4 }7W q x^ʞ?"ɹ yHN";iyC|],KG#xqs:$^F7EVċ쥟Y:9rڊ\uFw^@ eOd07N*];2ђL= D nDɂqUOjO؁+P4eˊt Aw ;v #o~TuJ- ڟxɴ ZuK)M`力`3Ğxp׽$I,h7A:rVY6~ PԖ|db&7^gs&HR?b I!4P]bpkz[lN 4>3U&M:L 8!Q>q-A;HNy\GeSVg6i7 #FCԚ(H,׸̤ܞj$deu؅"k\A cHUK4hтt%[1Ke/GF4UMg-ђL,!Bp$rg>WYLC~YaDa;hڧFef=m>, &ԡБVC{6ݗRW U]63u;,xŕ#&ӍN'{05тZaGH&쁗#> 0 _KKP>?qBd8+䚆7 ͳFY6d(H1UYvo^eM6MIh+ArR"*;,oT/M,Z݈% 8$[΃1ҨW9v;mRFO[L~3 9JZ'{ 8W-(ċCjp@@"ETT73Ko⁜} iw'HK!XLRsb"6m`Qe s ?pr:GARU7~]V 1}j:=5{*]FuTLJ=u#M_?6i*P`%9 [XABL aƽ}eVA]96$߯>VsT^Qcϡk; ^voed(`Έ\I&rƣ<ȗ `kɞfUO<vAPN|{_Ϣh6 la9H&nk@E[ތI,[B?EVrt/U_*l>t. :j`_;筫_Ꟈ#09=cHCJpDLɰbd >a_rO1J={-܇xv>cM[ ˧>%OS U&XG]o 7ʕhRK=<>ǝ`7G)v Sy>,]c4|e]nDP |:* ˗-Z{Dl{'@ϡop )rNS=p2ϓNh=YYG;?po^0,)p,H"ܝBz\ZNpHN& H2_?t?CtJ.`.fc0BxԡM8(T.uWpE6`>DUש`u}#j@Kڦs kcxUq։$$z 784`iK?tR?\\2Sp|ab?dT? 2=[t* TԸ"o Of|kj|.AKm;X<9&!nHj\76[GcTJaexzA&m. 8QJPGۈK7#KjJbqA>=[]I.W^U akw5H[˵$v'  ;!A>K jn8vb=)7JMοo~u6HB]sM5_rHW,`"l$>W4s C2ikWޗsUYpT2B&3GN+ ۓ{ާԧ9vnx Q+ZknI2 쇁$;r˱^8Ѳ;>.ô}^ь8AΏQ=A7Gǻ*GBv_].ĮHiY9ٔ'9C_Gf^bmbi 3׋;]ć _d~x}S8_(;aΏʬd@ 6Фa\ $a %b>gf#_|Pido T%iaDEXYº- AsD@άqc7aמ9PYzi7JNjp0{%#Z\ e1Oҏ{W绬K -,Am0n.!w M1pi'۴E~KRy+P6U#\891MR+t6{҈Z[x&4"tNw lTH'BۖԬPE`mR ".TK 6*q9/Hi+Fu_d>ڬ4 ɲpգ; '>ګe߲?E-P(gT77_;Ը95\3t5ݍ8S G4|Eczzf70N{Љ[&44d@]C~agN,]d3gRo VNӧ66j".I&? 4:^`@4q|;V"ok3&w Ke. 3?K@ZvKҸbmm54EѦJg-cQR/wT} 1HaŧoRԍʋ}?y 6%șEF(6*aMs2]& S̢ :z#@N\|osDiL{:bjxL~ۑ5QvV2nv] d2HѬ.oRܬ X\{( gJ.${IBay}kyZČ ģQkdc )zV._bQ 0w<6m}CD BwS ļ1-'x!0SPCf{F;J%R]'4P^F\~;q=\hA{6PX7R,7_ۗ?t,(=+P8DeƒIcx٨s ۯŢL@-SvоNz *.b(P=_;jFJAa ۊp7Zaa'f-Phyt` V#G6M2SlBIWx0 [($wrODoɜZsg3)p}XJ+"f*()H7h ^W$%ޏK=]b,8CZlQ@93N-C􅾩<f"ܰx3MObMLzX- [= ؙ?N*ְܖцeLnGreT1 #.b3MK#׋Z99V?VW O^"x~M p]bEYyn0)^ﲸrNqr]!})(VOqrYEIbC.ȹu=oKII6EeH> uېEǣ༥Q =zFmZ@?ke}a,(W㱆v>'G@z uj< 9 KCEhpiv?w;8.MI%ApAYgcSs(&\ gCCRwhRB$,#L׼_h*Ư 䝿tsJKSzls[t,'>_žfM㶮*4P*ӫ8R?@o?vX5Xw,R͟AhEY<+  Hu~bOW9O_Y|@oz `7V--3gB[ pH8+!'i6cfo5KE|gmg(N[n`QZqhOU5]Zyhjkz%a#qP&`KPï>v(e!F?M H! IzI+ Gl@!@\ՊYlX"g닎Xyh}]6 a8= ; 議z 1RAW(0ʒ]P i-V7 822Ԭ[ipvW&&X82/a6Mˁl(=A e 2EWiy46{yD^fސGN-&;VO%뿮3Xu21=@-v\{(2f/\VMdVpfq_XǰB!Ry i,OomZEnxd*$%G,I{]Vz-E|HeU_xe$dHnQi\hR.' mt}Hk,ak!jB/l \IR"z=^]$@I7rTyTIWHᔙb$kCpxwN^AJatш 'h&&Uߛn8M2)kn B\^nnEǤ|\`~`]"u3SZkX8 N#4k5eHcU)}!ulv,{3!8.| LbK_MzZ_F].*I^0oNJ J)qSa' {=LP<"MqG9rdzNEcYq_Yz&ۨ1lMgH痳TOCBǪUG}FXUQ.WĊ 0;aD)[v?zKئ˙쉰#'\7;${א,go.S]$$bykY6w}!>f ՀScLFD~~1g}1n%d<UzDs֤da7jSG}U9J€g0b7|? .'@Ie]?q{Jqڞ ǵㄚ\jV(k_aP;vp|galZjC .iƽjxLmBy{ó. h%o|l_( ;`5PA+OAD@wtƶ2-c̭BQ"јm\N[Mo2S/?ƋU30Lt13T0D!rLfh,yrv[XFtHo=$JYu q Άᐽ[GP띃|=@ԑ`Qy#*;wz}Gf89JáYnnDiw.!owuk{{^d/&l긥rOQ>FI=Ƒoo۔,Ƈyr! ץP.-:n\ h(NSsI@QSK=䜻aavĹyѨc N(cS%Qu2,]ԥʼn{,Rzp80t&qphf2(qKsa[2-]1U6w 6=KjIEh2@>`QF80V.]z[\?:FRCq8eM[2VYXof/+Ɍ*%ТW? +,HAEs 2_L! K"nK:`V6!:;z}A=T`_qmQ3}#{R90DD[WtX3NQ9>jNDֿF".jrX$=sf!?&fKnhD1Y7N5,(sTte++zMWr9:DP T$AGN {t ^KFrNezS )еC=78x(~O铔m.?TE&9Ig,@-`RA j.Aww;@0+QS )v-\F~Rf FVz2Q;D ( B0Cm(C0:yךTCPX$V2ɄNۋ1^-CMӯCe-VJ]"t}>uOp;pinSWApe 7"M=XYǯ1%m D#f8"yDu+z#8'wh'UړCY/7_L$M.@a()G~. Bv&Ag z@٢x NgfX`1j7/dN5`ɭӗOC {pN`ܚ >]Y,H=O 2;/Jbgl|v &[y͎[٣i`kQtr8!z08$ʁ-TLXO>WE&>v_N S*ei^qxQR,"_Y#T0w]:ytT]MG ѷS&2[2w78n֢SA 4h;tu~ g'aWx@BFCNX "D  ;*[)΂xNk KS"RslH!vO -n[8q ir& j[}FcpQfc@vZ;oZ@2]$ي(@ga0zH>?dM_4hٌb4#9\*EX%۵eh! 5*DZ Qgfh Ş4FVL_C]⤣@6Z+>uW)@XrG,gCҵ|LX3Zgcaϯ 1MS3ۈ\Y<ĺ…ʧs jB g), f'"90Bc? uZN^:WGtr2!ߖ!ScJHf3wҥe*\tKt[ܛU×5Y D _Ob]%re"OduVs7͠>jj%72׃>Z2kw>lfY4t<2 ojH^S.#[ahl-āO 㸃BCZ86h.1WinMZ:-o0 q@^'K>7´?!`ut7[ BqRP\r:Dng"86BĬ?aR Kg&pjt-W1 iD"c ^z~H_j 6V\-%#| T/|aMoAAo}Jav8$c`EMsٚ]Ϭ#pɐ7ㄥwHn=HD[:-{a9|i9xWZh.rg'OOcrEV)V Aԯ|Թ Pؓz1Y0OIe鎸od<4CCBKVouE6u9vVG xwdEsL-D7$#nAE_3EBx_O%Ն1U?޾>خrM5k}k'SjxR`Є#FЏ5A3Deޔ<1>_ۄYحyOy"osWHO#R.hiU]] )7nM݀_8^]?цsnwBsxd[A&y. ":m^ꉰf8]W"ĬfJc3A1dֹWb)!m9-u&.̲ PpI&XtFT5|LK1Z56ԝKv@U~RQ{ï=fwR[꠵t)jg:Z 5{,HCdxIqg)jF1]|iMἶ)J  BM,\.tspsbD~s9V֪ (;&l\g#z+_x7"Nc(gYV@.yA:wib<7F8ӮH{ .?4DE" ބC*ɘ\0==L]s)̼,crpyF!-GT^o^4N]o'&K3d=lJ7TJ"tlS6= 5)ƵI4eaȩ&lf6-*V; #+X5`If#љ*';juCl7(\ =dmb"o`RϘݢ{rνGj#1{zYOL:ZWyfr/[nc;IڻK{?\;ډi@SIR_iarbP`~6) ]]%ݠ8_CI82 Q'yԸe ;C@ˢv>!>xgt,.E(j1=|> L/FFو9R?ޔ*Ii/$ RJdd̺%_0C/9fmG5Ls{;V=-ydt1t C5& (]2\Q5]NՎkP!sbd}+"$\5ZՊ6ꗣA 7jgCAɪ\A! qgI0nX/Ӏ1( 5C(%tMɇhkjش/ ܵ*ְBw$E:fZyPJ!G]r'iҼc2vZ'CY1!H<n-TkbEP;#dPs ꃂo>MDMFp!6Q9juZY=6qHA1L]f9u LnhTd_ʨ|Wt#}r2vE ^aW#24مj$b_*3֌{Rf%dDFUa^aMd18IdNuq8\0N!OlV'NF bIRJ]2K4uq(*E :Yͳ9On\ 䱭3^P,iV6_ E0it5+a*Jl=GSIU_[Xa 81Ig'd4oׄf.N,7U9pjK]z-Ԣ+Fmk']l=8u/璗EIJ "mt^Dۛh*ZohrM$Ɍ2f+v:d 촚9HySVex@[Vn1 '> pqS8of7w  ٣JK 6ˬӱ& ?_Q׭ݰ w )_ev859H xaE)eC2F>fg ٟX9q1Ddɳ\ĝ 1yEv'CrqWaL _2!{K.]tl9G R:=bCP]IJ7d:ΧyjqAAbgHw7v=S^ȏY9igm]lr; \YhgD2ȮZ `u8fLz> k-r~%[('[m1ZشZhb<k )7ԣjf&ӟ*&AQ_viܪw6DLʪ^ߵ)gewfJj{Ю|G{|@&SMR)$7$.Gj/7<=lvC.3w] U?\.[~Y!)iݒgT0c2"Y) ]F7vvKKAU$fxbN=ry` *O29 zf]/d)d"9r?3T> |=xQz*-!R3Ä4pDyNYѳ=U{y&'~,CĵζްqrOcj2Ș8l.{|Œ_ A̜<3U5l!KZh{zcШQ3p:2PpZߢbf~gdfۇQPl2$@'< ZE_1CÈ2Nj[\| 1$~mp5i o\E aK7JIПG44wpFni\*J-T1 ӑ0ϹTWN{l!k:rz /ާi^FUʍ)d_wGt3%hv,kFMmmoPml"ޮv91u=_"a˘e(s^ JF"ËZgHu=B#?RѼ$ 1`dxI!8CuWc3ޫjZ >$ޜDsZtg-R w&~'F-gP2JEBl"(TAj:q#/EN2A47?,m{asb/d9Xd{ nVc@/^gCaGD/ITv:CfcnTL$/KF ,hWxW0̎z8S9P}Om]E1C3Ф#j"}@C@>;+͒@6()Ah<8LZp0*cѡ~fQrq<?K|%FysGcUP\U0~g4N2d]="GЂƄ&l]4y=ڹiO&} llPlYT)V2"r!WMĢH릯$HqaDmgl ?ۈ\tD\[W 5bشO=/#?) =ˆ_m:?L3XWXREZ cݘD_gug7둇׶N s*27vI:3d#-!MA/3YTaIp/b7e /鹏ۖΉu=|gk݀#İ_W`LWu&i)&gu<"w_l5xB( '{/p%ӊVh4>vqϺ1.h*N){z )AL}L,Ulak qyMi(純]T>gɺGJ't\•nMg|3M&2X3QY(#z,Zkg1v-VTQo;n`eLCO{طYT-pO{ǒ|e-x2u f^S'`0:mE{T jU=խN+(I'VAZ3#Z4k$ˆG%w4Q4 MoHXlʨ&0u(^MqZ-c4>tt3YU)`P_I4'q5"[l5ЂXGXG32T`#2E }tM]ġaug} F>HMJ- @û͛P5CF\7I2 Kxe usw`u;ҶЊ*GU/M9%8 tjFȳrO\?HW*f*ov܉^ص+ Pn{%&UtfWs+Pg0܂J+BG7j{ʣlF'c1 H#j"?lWxǦX"'ՇNo}i,22nUz䖗%6ʀxV'eA_%!جkڧ\ JbhHxK;*?Hܻ1l@ˠjZ^GlB3KSYl̀0ȐO4ΐӈbQeެ`#?q:zSK`XgT줅CȇRߨf!쳊#f*z!d$<ddߙ^FXǯW>I,VPY1 =8kE3԰. ,E;5&A8vƞ;@*x Bg4nFk1.!&<}Re kgdg_k%/>d&m3%폧nݡц)zQ*MvK'fġAOM4lz@ry˸#*MB ĶMQWFyC` wX?2ԗ碄b)3+Nǔ?[݈1O0Oki5dPfo*+hIM*DgQCX!^eh:őZ=;@.#2 U89M8|Q#'%x?eܾS7yV4fNwV"gH_'xK'ωa87g[@"ƸpRHF<4.7k\][70qͰI=cV J0$@]Dx|dQ:\3#NtTKjX˶*O7/˟u <"ΰm,^06q ݠ\ S|kvs؜0} akމ1O=z_cZX N@^CϤF_AF e$1p{Fֻ䌳2#0o?0h~%G 1 [9lumw5:{i$(o}6Ur\ /[y8]CbwouhEEi$;ew-2C);I-v̅#Sw(bJ1 zQȀs$ 0c_CRxM:4ǂ J60 l kGЀxmsg>\!lFОm.1m6mQ@5pƦDL(;$\<\ΊlpKC\Gz=\_Un}3w1qDVN<1c> s*6#f7`냐WPgث**ps3(m6k _ 4C݉'Hl dq!)1>\>J*A1fzgm+3\ ¾KI55@*O=d4V}H.RPco3V^!BqE;:-4k\PȅPRh1ɉ%x>I> eYbPIy AoTw6 "p{]+&q241]N*k">6O9(&؈0nY } Y77WXS¢t,K1e;0aGSJQiW zނS]2\k]X [VyCb>) Ȼ3*EI#Li wҀ>:IPh`V Ր*批)+w]ТNJiyV(ٮag9öV,LJ|?BZo-3N]dQz׸ vzV g취,))t巾` UaL@ʩ[sy^+4iF.V>td;^I]ZB#27S9zU"}1|B86A*,2Uf(M=oYM'MfmZR!NHmrr4+2^J "Bwd/?iU*9B(\:E=1U#5гeTmTmdɫI^8}fZ +I-yiWT> `n`)2$VV\ Ξ`f見[ @@A`ivr)>y lV^ 'MBSo5OyIWJ`GEeh0f{ohQ9ޡc2_9 ;792JWSQF݋ړFiȁZCtt[ƒѣXK*z1J2h`lZ:Y:_'Io=9T)q[4\aƪ<2,Ie4i;%_' _è PF RT\`#gnwQ+ M9-b"vJ+ _X$)Oq0< )I'N ?Iۼ?߬(OAW? UePm~kfrÒ W+̏|!*o")XgtBYV>uuUqL]+hCAyLJ(mMKEDҸ5)Ȣ8DF4DX 0(bq+JeF%*N԰TL56'`v !haY~ۖOC!vJwlXIX~2M7Ҷ,N9)O; '=Xw qCI(ɦzy \6~+yJɼ,6^/U OXobIćق[udgV00޲C btꀎB뷑pvUJāHz{(bT7' uhNObP[PG,BI*wPc,vw16U/- /^L)LJDV{|+v^cˑ- Zz ^+ ؘc-`36٧] &-ͩ.T.%ElMP!7x^3" qC*UG/XtބT`4 q]Gn^{ͼp[KlSs=ؖy!\ "X%2 H ܭYDNWF*L͂vbP:}E8$Hc ySDJ5fzrfMi0KY-[ 8[KΐLE%ɒW{ޡɆZá|yXhnίf'O`:K'nXF38Km yl>:0A!߾x 5^JIrH/.> )P 9䟱p1) $+=aԻ[]/bTnPE奉p{MJHHsGΕϣ:M:6@{e? yh w~f!(M.`oTHoo5huK Oa UUL!t t&n<cD!?e@这d_Nhh*P)NlTX:tD D-#z%o=;5<~;A@ZW3H=8d_\do!,tQ+"O฾͎dx}u[g}|bT5ю%{4KKyzʰ=L80a#~>OWcSj!^w{bTY7OyH2F )C w5]m2HS.H J--^7(1G!X iymJ 'Hz/ *Ed2Fy" DPVa~]-t0y.T{&{ỉ=W$n~tk]e#!)?KܐnɲJ x,f@ HBáWz/Ϫxwt|5@밙 v+ZPW0N[*/A|{/3j/ǕMC PjRVwʦHUV灡k0 3)*̲Doh9TKnDw=/1U䏪-Wq h uBOz|Ts;@_Ьt[8 ֠ QWu5"=^3f1xҁS!!qpS~H*^G[#@RR XCFc9ߤoKKAUP}:[&_?b_醊ǒF7Ô4ęe' #m<5C^Δ'5[-YO|I}C*D+!8}7:n/DHeꭼA<Ѐ1XapYT&!bB˽~,e0<="'TYTA2?j-þ^Fߌ=kJFpEU}+#r24\_f¡aOI۪J2ٛ`%6$llLJ. &+F/'.X*x&ܯJnZF;`-fx7tC0F[.QEns/vp$5j)#$R~ھam)k ",Mx1~vMLA/SO"1bL+ׇjOK/Ś44rZӨ39o17BC^ofm'3srzTf>uknww~X6f3րܿyLmG~ sJ.h j hHD1Xkop Sߠ;+@hgw|F\!z*wRO YK\=I>̣|Pxq2/1)`?/OCJsJ?plkME5˙5|us 'Tij~zUjFUvu{!= >8NNc`>gc5IOU{ujozLsq`1C=֟%opޚdhh>ZFB>T քv2J|YclNXNaV7 HzT]y_&f_ Еrr3@aAl /X*CVTGM1n)Z^Tڎ>ܖkyaԎYL?Wk1]PWQ]-0SH$Mtʞ0b3LqMB r%3O7c B/ZO9z)oȻJ˩rZMD(IwqJtay |ncMf<Q"|1oR;ExodD4axoaHN-KٹvZQ}6WUYzنFDf;-]Gyrfaʑ 9SbAq1yA? \a}W=BM_7gEb> # a+Z5K^fdv}rmvS')܏2|I^>xsr[Ϧp;>b.j<67' A&9>V[i t-cK߮fޭB×(Y[wT5:.L Gc {iCpeG4iÞJ|xkT`\yz@}m\Cn]G߼Grj *pע)qY1U="!]B||_x|QKUYwll~*`emltW-#̗xtq5dPːZZ45$At0z3ǟrx PD)(`RX:P"&k]*EiRPY|vE ɲfD?Ns\d_̴a7. wBv f'tj^flQZ(|oOn&,4nd ;W"W4yVΊ/^E-  = eNOOWznUi6"ai9GξG?YĶ,֋X~VGuά8s4pޟŔYJ0y Opevm9F1l4$]-Fxp4jSC z@qFڝ鶮=/X´^h MYejR$C{]vJLZperCd ǍR^JEF PV#QG89b׼MI<ௗ<ԓmfA||f^ER>b9҇|21/ce-Um$TkC7# ??\aQ!Vt"W w:ݜxΈ%N݂5ir[i @0+oZƗk #1fN scD2$YăNBc ܥK`\͋e5nh6ޮ;"#{HHg4]:=;=&q^0ѷdak=Ԭpeq5#Tz.%b΁evevx3Zib>cPLgY@*;?ou7W!t?Ct'RjIj#WбFuf}>SǙ찓qOtRNxj^(ȑ,_Krj [V"Izm[׼H|iVޡǿ5v}Wn{.A,g)/ce qZ2j\_/DIj$.uYDmϫ)B O@55F6-r#kӌt,c8gd %I'v{8v8oy?׺23]Y]ѷj7KHSN?uYir_uW2 g%T5])砝T}fnO2<0hX5OCԜ]\۬#aNBFhI_F=@ .i,)ER{9]F>ob +[aS]?=m'l, v!qRʄ>Z*acwG^j*(1_6YW_NE=]u/&JxNoQCic1{CuLӿqo]0)T:R/7Wyw8`Z 4,$ sYg+ۏ.N Q0'V8 Nt]H h̜8 nF&*CN,7Ęsv\-UG17N ,ݕhҡ))mEՑTǜr#&d( V3wWcK1hhl)r bG:/{pg>=ǔno۝SI^`7` xhi227 ?&:{? ,ű^hȌ {ՠ22rd&eJCv;,D $xbRTM`{V@ºskn1<:Jﳱ, Wr{?-\O+'8cw/C-3ߐJf"c 2\"FT/W.}̻ I52/ Ռ b6n)8QdfӮ#ś81 Kx#q!G3:$=->Idp_YxGp "Uޢ~IN`l};+DɞA@6-p|dEϗb0?Ua*+~au4%\:&F( A?I[6p)5!N -У#H(:xw#mrPP~0EgtƎn2[?EOdph:~R4϶/ѶTr:ZL^ <8qJil87j 2 x9t?_WNKD*aNs!:ET-8a6sZeU֩P5nvj!B_(EՂg e[Ƥ43=:%@~s,pTg@Ѕ(e8 Qa,=j({t o{eYF# @`X<K~5^CXhK77l*m&^NAIk%$nTdPO56aݞ?COYkВeOx8}Ew\$ϐ݊E`Lv7dc -rq(ZC,w+@w cViws{h7~%fs@ L)gSeƯW {R3X>`y= I5АMjY>buoyhnu-޹~:HL?S!ȇXLnJ~?I^7"'8ťc٬&Bw/4WΛyoG EB*UXc 9dK`Ep"ro;ZSxR R\a}^1紣gXQ(X|_TZkX,R%3$Ny6Jѡ0.O 9G3İOTo$jG04|ٲoal2c^M|wAyp;zl^}nyTGH7Xϳn*EI3zc`dE M9ڸ*ҩ1Xz͊%[-cVJl)߽o<Gfg'S50oRDŢw+Y<5p>Eچb2aLLf6UM9G!7c1 8? 2^d]XY͑`Gݕx+5(j x MiՅ͹ڐ3 Q&YƬn2^n>Kҕk8RH-gS :}{~$ 잂E qh ɑv~J^;i8Ƅ>u%q{ \k)O2(A S5|s rJ 2z#iî[zϒzzjU$ͨ _1sqo2M 242zwD;.gpehx Ӝ)1j73}R*uZj sa$_HG/`҃˷ӯhD8 W Q XkAD'/C;s. ozQAi$gllny~ڂ늜oǺGyr??kM`lHto:7 ^py5r#U < ^{>WC*QK Ma]gh ,Z&lh+TSZ8G5BKށ\M/ncByB qͅ}8E:?udL>F+AH3؝.7a<_<wֳjUbwjpMWvQztxZg(%援<+0˹WCd.q2;m7t7TZۧo[{+4qp]3slI6 \Pa\~pr1aq$XIVR8MB'Y#^C'pPϿr:>eǮ[9Gy" .1ϛ|ϕڗ:%-V"k|u.&LO,I`eG _@Z n3jEGJ҂J|e@1g1-qINj-)̡PNѴ71g˕\jk4ɓI^ӌLxdTiR8UD[~+~jf=76izB$J&Zc!-'RBG ݢc-QLQUWؖap6PZ)Kj '죗:=5 .[i¤2+*(nTDȀۿo xYS]ơ<xD*\nS{-yKh}UrtaaLCI~%{| OVEs$#SX?#T'~ȵM7 >'+)N\L]r>HEwc@'V @25ckc %9B9yDۿKqZL?} ~mR~&A#ߪUQCfu2/\qC>̉2}f65' DD呯3!H;Z ;:xJ^T-KڷFi>¬iۄy^g*v q ="3c2#!|>=1{"0ղxõMsDbv~vJ٨ӿ`$ L& um^^RxxVk^YK#UQ}Fmь.b,p҆t̐ԀW)Y GήX2u]mh{,oPiY(U ~z?Ã-3HMMxpfΝ0\ bt}#%oyvý"slz0 ~+;BҟDqI|t :'!&B.3Y#t= C`l h%cg 6Y.g &kmS%cς|;I`~~a@؝,k(A9w5V@NA[K:ݓ5Z,Q֒&@,y@YZDrvvC@VߝYz0#3'R`MYGn+yܮ{WaNiuUt\d[8q_c9'z'Yq׹W2%xĵ }o 6Ǐlļwĥ j S^'m&X }.bqCoˍi@f!Kd_&6][|-W~=]Qgcb,5n#F#Dq]pIA= MY }_[xb*pڈAyV,ԁ8-D $(!_L4<~`<.||䳳עWh/\ݩUХ\O߹&jѻpL0l{ _bi0صgi37JԡUb J{Gb:@X!~]\&@M+7to/\J$T#>%o-#//$|ɬ[=ʓ13]?a1 ׇf4_LsݩVlo*qK9PDv^,M>a|k,&]Kcsr BiJ'!]`zT"|էG1q8Q>D`&1sDžz|E WdX =E`JvaLӎ?*4H0< gџr?YHF,)M-!͉PC]L =0xU(G;A{`-|ZJdcnFMľ|@-~h0ezdam*(EGyЩ{w7zjtbڧtq0UH0`D;<zp@e#Ho\!%aI#RRujl) 0{] <21ŶiF֜+ Ro>`0'w""#C.65*Lw Dx1Tj/01B~ Y>4@=Bre>{Y}Ü@v}+`[-B:ycZ.e?QK?cto*-{8P`#:N'g~`z:qHssxyH*1\5X $)?B"08LpTaf_S#0𐁞(nA<ϡW׈>2fIu M@Obܱ4>IinEE@w{*s֏<51W$, 'ʸ8ZmF&Yһc$<:HvaQm AoMLx۽| %g%iɶn.M W݈(U]2b&v /;je¿ŒjwlcuQ{boXYjw%>C|9b =`Z^z'{U:c;C O*5#t$P*t/Kn|ʵ4{F"4]r,O GGNč$ f l7Fn"VU Fl?fVtZT,/#uZ7U9q\pvw'VV xL :Is%D ]й˰yjؚ=V厒H6nR6g@A+2+ x#Dd=J<`+ 󸘾hE 7ծQ6z;$ e Y G6z~q<4Bojd)A-,VVb|GLc[GaBt T/Z]Ke]p%f5?J5[ۣcWw<&Y(GIH|صctad$au1vPфw;|T$&}Op1w" &:yvD[auR/FCb}OU: 3 q qE*ZW$[=k Hd[j)#"|ԬrF〬vK~.,iKC[FU1EY?i,8L!$]A슉1W-'lXu)y˰k4FKDQy[ NХ"c|cc/&O_Wn |d ٙKS-\32@,Ѹ~ΓCь{ sF%D.77Vˠy7U}QSAWңT2T9#c²#[HmJ}ű.4a݊ux-p3x7X9=ߪy߱zH$l3ȦC&eI ĩ=F]l4qNHo&l?"K?.u{лWPae 5#|DS&ɩsJl]nVWl8xiGz]d22fxOx%e}b/~>r.cM\"p˜^T2D >WZY[먄vhg?CQ{I8%*\ܨ }NfwW*xgvVoAHؤû8׫Ch5|dysq+ia6g#+e^3s' md4ﷱA կY)C+4h:vpEDUZ/uh-oko$v1zUdp-Hc2 (up*e '86L9x$<%~zWv82` rdhm k)!a 5D5 orZ%-c2$IC4pE?2ڃ/$vk.i;tszdГOryj{}ayW(tx%dq a?r /_W@Q &`Wa/46j (2V(Uɭr%$!0fO|0GR+aϤё*!IU3O.٦:6^zBu=tes%Bbϊ9>uGp}bh&}:sBL37֭~YKqf71CQ֋ @ݧly[|j1*vd@5Bƈ̋NRɲ\Q(`)=Nlk\"jC=#^"d1.uB_&ҥPşܯG4vd6SyO;^l]r 9{4'U~{ض*r0t,Ъgf 4D]o?~SwMz]Ic #e MO9|M؊3u/D ޭf7-OcKpx҃$`mi\?5P2'lBt'tj8"tL$qll6+&xl_ꎅޙ}q!A}~G{=y|DeȜF JDYRD,NQoՠO{T]c [2Hh3V,(Cm{`17,~W疸koW>eSG9bNc q55G"||o{pD|jp cz  y` rf_Uy>eVMaRSa˅ת7R! Ov\ZQ^UpЎ_bsN3px,D&]С&[A)3|6OK21q]zz ڑQYrUL8OhJ _dߟdKzŮG C ;UtŖ? t$r˫{ ~Z<|@&fjw) Id.hsݾ: 8ClsI>^Lն)RXeZy qtb3AJiP$%X3! cJҏ?:sAǎd^؍.VFѢ܀mD1?^"4d+Q*" J )-T065nK*ܖ7ycY7qX0U+گ\\RMq9K&ui)ǥ6ÕEr]Gз X٧UP82͗WmdL>#^!a5G`fW<%.@}[1F gV{_s5)a$h-x 3]٠xy|x^$@kU?.;XH8Bݭ}G#nIC0nJG_yP xHs[t;E(Yhlj A,N)$/(W pr5 _f7ℕ՗ 0QMR1; X^TaL}t)Bq(dƏl*my놽NM,xz4b`P FZ4Sgǿ,gg[*(c<.F}}m[4*KxmbVUᐩ W5[p(]LJ45\! Kڴ^Wn\_R,.4p B뽗 4M&EQ33q4^/<\VJ6ۗ;[@.zϊJt&'?@1mꠎC2Jf{a[EP9Thϋ>QM2)1k=Avy (:`Ŕ5B;נ6uOe j`b:+W ?ym禚ތZ"[:'ڪ^H95 Ɵnӗ~rAP`e|:u's\$!,N-Pp w5M*]zE;Likv%E]lWp~:5޷ ҍ粥CfpD]#3ⲕN~? ZoLQnbJxVy F`QK \3H1n#1 phУG1V򌱡bD+}}V9/s)R &Y^*W`vd&bb 7DnF>S,m/LD'D ͯE9 eO3I>a|W Rq7F3|7Ǒȋ@Ngq56?;MCMW-3\ S3JFp:fAXAa+.I w`4_;-V !~+x:V4U(f<m'H(Ҩ;ĭ0k5 ɁP ۨ r:BΟ`'Y&!{rN}N\6LX6p^>Y?~S ̩8_Ɓ"|c_ F2S `̐ǥ\DN/lp>vev*HԝSo(S7; GT{/e|iaeqN7xI0w1#,dc@y ZbMtf6x4~: k3|zmU[ ~$J)\*g`b xai(>$JYi^dLnBԚO9Cۚ9{VDR pqmW{ΝUʨ%&gsdl0S6ds#8 `r P2z4g۴kKc /zlMiHe}E]iԞ/B NS9sqp6I~h)!\JnIB LO 2fUmAܖPLJGtpS. :篆ڃZ'J塽xbiC_le w4R;ei2GTnŒtt,;[9|P[[Qig޸jg~H>yoex_VN|*9U= 9)=o0nNZ%(HAm%J /Bwa" W-/O/ՕVQ:Iϛ.|J>-rDoZ>,]oM,ٍ  sQ e0X#,mXݠw†Z{4kmLoaxlf^wS㷠3JDAX߾jD 悱=7ຖ$*kFqN̠Β[v?刲@I~OZl hgX0Q1,jr|3Z綖ueM4hrh*uZZB񬴻4.^M yRٙ<5eX/І ;ᚉqqpg݃e@H}8t,¥7Hu[*;pSwb~ hFZ1!Jjw^b;=t(rQ1"R$mQDk}-_.~WZq贝rPd5e( ~lJjM Ќ\Y.2?>Ů'S%gupsUzz-MdX H/栥^ȊTGG򣢗gվll 3t ":vvm2H&dͪ=N_0~mѪb<$*@-+7P{$ Wz86gD(e-uI5#5YtlFdb+r?.G\",4T6($rOd)% J9pAlePR;Y쳴-Z  ŵ\}hE]0X.B/)^.HF͋yŒ(g,e&Vޘ^ ݘ0VHS{>t|<]̗Cһ#"ݩ&X46p#O(d\G30&ΨEsH ˯_Tp,`W1ƹm<=3>´ dsϔnf]p~W4JHmB-2'$ XB'IK[[t+KMyw}n=7I6 hB-)^ ^%?NG$\%Nk4h#Gi]`%k:f:m+px{ .S8 >8?,W)o4*C̡ m Ad9vsjMOX茲KsKejP$, !% UʬqH.tidI֠y`8!S!g}m_X0ǐ,t̠zˆ!B޼tf[XjyՂE et6<Wx/.b |̛@"#T:W_|pIjRkM1{u=qs@'"C<+PoL\:Rjb̲/oD?숹żnxv㍖<_9lAlA/Uh^r%4!>-'R>O,H7GU bGZx0a59W9pߐ=tZjZQ5+Pe_?W/{KbBD{ǗN$B́rL?[禣20N?S'! OVuw<`B3?!i+^Fm2١gq qQgoSaCj+wх-DX vQ`'ZCI8/zl4:cԵ%5zϲ寢#$_ֿ@DUQbOB/ܳ@k㆑pǿW0hWgX2ea=^" 2l:܋:OJZQxfzks5V gb+*g˜Ձ%ǿbCjs:˘q "h9fԘ|/h[f8^ntDFƓz P`b+LF!@w+Y>HND<8vޟq Iɇ l!cW^7x<:}cJyS^@5AY:z*?S[s4^߼‹C,'n…dɗ?M*%>I -T&nӸJ#'%:iE;%VC_.:aֆ„PxzE׫oȂ;* 8z/si =6Rml1`1B}Wc |5 Љg=ir0pE3^hV\;nF}z@An/U_>Ks"?50׀YgFdƚ`N#ܪ#(M}Je'k5yȄC#apKh_ )ôѲ=t~`1Êo;DRY+F^-#RONWc›f`njzuܹIc3x(i6xκU, 4b}Wf9=a: #E>![ھGRJ}^%>MEz!o>_ +P/4&f4`vc2`nX/W#"٠xXێx1m*UP4-:R G0w76D/ p1?46bcB Kb:RfX\).U)'Qs3tK 5}gBQ ,ҏrdKubm+sRs/~|_?KUf W㬒թ'a0qkl n@ y v}Q;|t6Ġ1#!A2_2A>^iDp(ߵW1fp(צ6r.!&EER u՘|ds؇"eVC !6F__P[~ɏ{oEP!:`jxfEDKqôCwRa-9_Le{g"+b+|-3xߩXM~#.y7_,WkoiFm_4CO'hoyD"€)m@fO Ee^jT G*Ї7J@ *Q9͙MsoxVO!XQ5:t{"] ƭ #퍟I+yd1C wZ(S6E=.+-UmڭjU@Xʞɵb[eԱ (`&;(LB(Hsb-0uH^Z:])Xs#3Dx9W=gܶw?=Y)4d2%KItKk ?V"UP/ =lW 2h4.~fE[q)(-  :cUw+mE4P](bKL@o4/^-SSko"_Eͮ&R$ԛ`\S*@zϣU :_cNH!Pq"m fdD;&6'\IRE<)Ȁ ΰ*Zb\&@·Cz_N uEs r_z2/ݥ'ڀn_g(%7o銪i'q:<k Da+(ҽQl|&F-4{hk]< ?2Ռ]7Dv^ܽr=)R]'@=,-8 $ [K/P#> jN w( VrA3YWka %rEO/X/f_+eo=m .ϒ`I"{]sfcw_,uk^[:Wj[HvB l,emZ!UD1ss_LdtKB@oo<>A>FClC#4aQ:!%Ms|-0d6M=;|r _]OI?VK ٜgʱ3/TlrD`qL𨪱sǴlϤLj93Gqh_8eh8?i0qnCPmp77G3酅tQAjtb9L.PrdPkF,hڛZ$F 9O~#UEM$bªDu3`;%zV@:,|\O)e/!7` H'YZ۴C*X:n& 8Z>P~8z?'XOgK҆ Dl`,{ T3eD_rJ~-1OoP|SxݔXQ پz/`s7xoCJ,^6עbF)}f Htw!T`06ӣ2ycn+#@q.xF[ r|ZYY S"aJ$!=,Bz-Znf cK m]ʍEo)ЈC&~ԭ埐35g| #! ᡝLC0Q%iv3g slp_e~ O[2nbgȦ0GO{6]$*^n-[Yij &z'ˤh8M+pd@J|vlC}'xvYU(uT`Ji_IP(N(jTKϑ_um,]gD3vqF|Ҏ)DYP[kUa1#qGUu([U箎ww[GFm¾g`BUߜ62&2L|կiw1P!GDHeRE8;#U]sb& d+hp*@1ߗSew2E~ s*es F"~q:"ʴZm8apjJmcBc9 s6w/JAhUt'.ՓYӪBP O):n`Pz 2/iX;ևf=廻Ypwnשg!3)-},e`Ѽfս8Kϝo8$h/?kG/E\ƶ"]'#" =_"AKt*ㅎBLPH&g\}4PA_}F7!(y6刬JVFr%C%X;z WNMl&C j6Yx U%ܩPUvR4jYE9.')?I]0  R";wS@pX''Ghn:?G51ED նؚD0Bv.}=6_e`DSẠ7zU 롙P_3ܿ&HؼUmƟ\q@'k]ٹUw{n:ˡ&8 1fp5_kL;pkt{7D𸋼 +Vx/,*{G+xJF.>izp @ ϡ8^!kgs|HYp06%CGZ4 Kam^dA 5l{znR)s }zgi\LA4mO"@Fw-qdw㝿`. ׹yB,D@{&e#y$}cҦt|WM{MhZ|J}@Y3ũcC>}$OnG0 hV;_0ݞy[Dw~-s ֚\MWpibe iQHIsN^6EMc cd%C/w_CsMTjJ,u[s kYlT UN$YF >rz]r.BN}tb'碑}Q!Réߤ` )d>vTS/_XaX+z,$8h/vG?>}8=Y)v("< ¿?ť[ճrRSPXR!tE<meD*nI&02fX_L1$ Ў1e1|XbbA!K+(4g!ޕ! HC`Ŗ q$Bq)zkzv#ZM#i.٭Cuփ8e#F䢍S'?$} u m0uo1ڲ_a~emd>P;>\J" #)/@XH]c~Q9ܛɮrw}'by!@L bI6:N#>[3FԹPL;)FI"m~(%9| @*OQ':O& Rp].l}lKcL6{e&‰}fPpiYy;,{poiO\v<lNࡽV%q[F;`NRoUqeq_Ge CA `p_=exHcg}Ņ넖phq6 cNV5]\τD4`JPY-Wgoyetl8GEu? ~lϕ!`j,ѻhumBM(MYo)l:L"0" zx*tqi&-~[O#p/_+3F(g1 _y<qpa Q}0ĆӡS[\Ogw ʶXNXD,ʟň)))lki|C idౖt"Cl'V@6dv>-fu:H0?ʬ`z?C9e"7QF/+Wm'UwX5]J 'h+?~!AÂYL `ve(w .['O>WX ۴zc9U]T@QI[k$eJ44+)Y~"oӁt鈓Xo^0XYڂd/Ava/_=ՙI;߷](J_h7o߉>sԆÚTdOcb/saY  g%XƜ#\ Ql+l)iliۿhblA+>BwZ[o3&QFx[{ PsK!FhI rznU/8e @r6SJ>}%6KS j"J2”xVXۺ}:j){‘;宋.Eٔy'EAQCK[۳ VP\_ŶG=H鍴hр &.Huˡf]>f``$)*_vqh5˓*no1O^ (m|`&ŎGk&4lP$$h70lairowCqH7" lP-AS/˃@&KWQXɕ;#>6#|KUahÀ2@p٭<6,"zO͝H7bb:!3vUm/7cÐy3Xi>yqNe qY;jcR";+-·|WOfC'=5:=LO1|#vCOy^Z<Я|,K =SW=APFBJovVL!12ARyƷ¤ԇo]:gEމ $x"5w/SΊ nKL|MYM@~'w˭vG}^D5|FBLa'ޫqFLrW{>Zr6)K xeYW|I 3Z2Gf ݙ#dExI{8(E˕ ?jD٤O];VLrPШ:g;x{'Qx%ja3fvSl"~~Ȳt锞U?ل[.t׹lK5U6>؋m:*hQ6mi?TG?}2Jdq^H!=wHc1)a}^3 (h:͟HMhr x4H3I;[*P K@ou@@as"%\H%R kX>V|VA9o_ӬPc˱KEyR񘻶!B}-8+$Ɗɜ:j3{^v5:@ɸH{u{1F*WO.c~N}Jlfjnu< ,fk`+"x` a=.FZtѺAI•KGu.w5qˍόx fRXq:= ˾MC*O .yi0yN3D]$׀%YHekZK@N ;pr$M:Xmv I)DNB`S^bvp}3#~:ZfC8>oe.9}/O"fS (ڼ^++ˏj VP; MO %u!;NK0D΋P+i_Z˟Kv9c V⩅T `2Pf8Zk@I_(%D(.)y  `i=hRhMWB^hJ =hV;<3f/+laaO/L>4ސq X:I.ߎ-ԁ@(i^(jA)U<Ǭ!A͆0IzVd"@Ρk T"^N2qE/Tùyq`6wu 5 n?d L ;-5Fl(αşfo$YDtFh?E+Ӫ\j }F5/O%U)WῬ.+fgCu vK*8w&RPq̒Io6!*Ga˭f:uÏ|!!憹PٸU0ao ᴴo^;c\$qWِoT2j%*t-Srob zrOg^@EKvf;ڦP3r^ rH̔Eq#VY iԵTJT4&[AKKd6ai L< Rhi~y}y /?(2U@֢?vYdþI^jTa/;ՄmA>xd@P$;9v$)9%GM7aiPIQpgTۨ`_bMC]6q\@&n0 Ƹ"'KmT7I甄Mtn"ɪًqzC0qA;m OH|"*K?nd޶D3da  EB'/'pi.0YuTۅ ?2OmǢo~\4Pn\[ek10hPЬ Ϥ'qppUu}MWNpxj8@S -#_s$3#HhN ۹M2y‹ltCH 븠3v-$B'Ub}4@ۈx1Dy5G6v}['@[5bB<jc/uەKH܉tcGT="1oX$2<;}9Ī5yǷ~zm)6wU=TulL`}%_9;.>]WLuC3i'E ෇PyM 鐚@GՐbz`=&XK`e FS9G@F;%.Z*Z>^tө$N@e#|G4 h|]\f =߻] IM`UI+!ԏȎȪJ$;MCBT1 : I9wi'5~ܣLo]7p%2|-;ū>7j.w~ q|~ d6}np$RYjg0V 6CR?>BM'nj_kh"_.ea,yyq#^؀@%WKhR \}u%$Cy>H3%UޖBd?J+xF/3orIRh<o-umPuPЋe=h$ITy5 ~ٚ}ob(4#q768G 9qml0+  M<#܂Hȩ)Q%C1QS=_r9{F2dvߗ0hVqa'T׷; εԜEIO%ӑn*~m^Gh̟M+RrOН.aDA`2&-`+Vr'K Z+ȟfime$y?6D&(uU:2Fz3KopT_$lm>{ D6ԣrBᤁt]h܋ 2KUXXl'tw~:BcgF \`skyBue7~nV rj .ʱ h"ّiCesaӟՇEܽc8?4aUOt碛lZH]rݞ./2Ѩg-a|0]!7 Rb 64}:}Nuޔ"BM'M 4KFDJ.`e&nU@IAs).SJE1U"oqą[RV11ѓ<E3I|cCwP]>^pla,96b a9dLHEGJCRFzC'$I݁~7BB&-EIWf>'iOۣ4xDݺ}2SUBAќCY4yvҝ>330~-nනtj(y EVB+F!i_;D1$1<9ig))0vHVJsۧӐЛ4@SnbCZ͊b9* NwAQE}L)!+#̦rLY24VDteORCVq> ʇ|NsȂO. +S,qz^!-n8sfy59+*OD⦶*"& zo;( ZOγRT:k t/$Pe1#gO?9Xwݠh?T3GWKAtAc%µZ^ܫs9D uf:XE:7e: д9y&@Z϶ޢ@%3,xZ[A!ܡ:ynk&%T/$Wzɔ"}Z= @ yVAF:: BU>G]?d(qD68 # ѵE357w6761(I\9y'q}Re!>wݸs]WwNok|YW:t0[$[#7mWjO$!@%QC-^\:Ii4='voy.ҟ07 b1no`•Avf7=e ]s:E^AEf.CW(#Ζ9˄-[he? Gso(i32nK5Wgm Ş#݁vZo@Nd`,>l*?}ҥ"P2 A 4]N <=/d4V `1JjQU_y?ҚWRɷaf q(.G?MY@)?#{l:|Fo(ș `HA_IWՍbGד~x8%'f_G#։CyAG)t%Ub^djW7q?gcScO! 4H`ZĪRqDHG)j{x⾭!ȫVrQ+ 0= RV}ldNF^bK]zG'p핞mfܗ ڲ˺Iп7*M%ЬebqM˕NU'ixp|ЖBoI$ T:Hu|3hU?BRͤ{[[Ԃ΃|-=Z>dh.l7(B B(u!)+z} B<< \ 9=G[L{7d0#VPU`Bf!pgJɂIǍ&FͷNTdQ+ ]x(4#.L8)JOS.4WH6QX7[Io&OC%?ĝAi#Sq2K"ְ~|9:^Qf9^*+ܙK2_VWK紺!3%8?-J\XIIe\@hp 2VԦ'5`D4VG6|#|eҪlB?kOL5a0Ĉ.a\hRb)+S&M`-8sl'K9pA`8>bJ)#LqlXtD@@=$9 "(|~\Ȑd,ܥ[>+^׉J'p0?:~!P1JS8 *}?r_e[T- Uv  ]=AʐkS`3M {c#˛ rtƘ뗈seܕ4 &C! ׻)iIVKr$^O/()heY\¡"ۭb !Lr)T~X9A*E`i34Frep?b] ָ}.jf}T<ͣP>$9;[. 9H#H/8z<Mewp⋤g54a̙Jw҇E1QUIDTrM# 9"xO׽[zn;S&A|A` feQ@jS>&ǒz4tͪ#ںS5P{ \V2rP<`஼]'?zwcĨ<Xp['PB-(ַhaXq[J* mmawkKWpX \BS;af+lX2gHi VɻYtˏ'E*lt8n9߂\+ٔcI.Nw9gdo2Rz}[ ^> gxy@$!6taz+C E#щ;z4Q{B+4F GteIǔ$"1ed1c ^M|f%sA܃`Cu:%,"0Oi-IƇ4>?kw'- AFS[7Bmdp]٩@S%ȉ]MC0|!^{a@ n2S1CeUGf~@>C@zю$"! 0s& 1K.ļ|k]:YjHp` RE?|#C؅E"*t&O$uޚcP2_"̒:>"r3ow9FlWLpJ5+(np &-覍qE؂".!0Iݠ]), g?E| F%oa;ʋl>zPNBC+Xx4l>p[b:4-AfTZ'( &2qfp40-:Ȕ!!~@o>F4>ҧ~D *[?Ku W\|$&öI7`J, CY:|~)H!/xC/ >zdS. CjOPġhN+V5i]_Ցar;!`^9{pWys-^Ҭj'%':DqځMYi 5Kw;C*㐀r&[mdIpCU*\^ ؘ""{Jg14%KiRɝ2"`jpj^Ff×U2K吒&޳XZux}W/j?}^$ !Pqvڷ3ee<1MJUA6P3=~ KtX:5vLgx>O"{4qhPpo!H6&9(TIq-Nz\0P9*XK i=}50i/&>>y9 N7nNihGClEKuS^ @wg-b\k)РQ4MJKK-N* o&YsZ}{#eK4B]; Y*{Kazc@u+ Lኀ1+=e:<\\Ar+}/%ߞaN?Tr/WE[\i Fԑ)EuA1[Z ܿt1ȂK]ef5Ϫ]nÐ8c"{xsE] BYμ:)1'ƿl>UuSՊ]3d=oKg3e-ګB,-o>x C~1?= 4_9)m/{R N,.(;6BM&')wѓ0!.}\a|:à%Z Fה ?/J Vӧ@}3 oe!@4ő76%OmLe*}Qi (G+%|ʽ -ߚ3Oz=ĿDIj.cdc-f{:8KѶEP2 @O;uV>wN{;ʥ+er>!mgޔ'Q l%r-, 9#;w gp >x9u`աN||/Q!rt}/CͺY2Fyʀ43jwũtT=mk .ךQdP-C=h` nzRuZIѽݳNTChT G"hh2 Id.'TQ;GbL*Q畷L7mbEM:%țT]MG2xM6o檳d,s5cal+mב2`6=7HNgTOᆌ4K` sgV"%*y{ʟCi:'T茬q]@tS5k t5_ejԟB֔HoűG]^#W) wYr|%$ č[Cea&)l{wj\wCHhDц)Dl5i6ϵlv,S]<1T}iNZ!=0?7>DJt -J)Y.M=dUzxwa@ pD:[̟2h,4=T3Br5GCRbxB4ĝbM,0Ŧԩ}Waf+SğӏY⧨02i6%iӻf (k NڤRjCWǛԿw兙@a3b kŬ01ㄙcbڔa,l673<12-/E2^5 @D#-wXcU^5TLW{G: MXn ?ƺ3Kt\m8iD9SyKTc(tt D#7fd؟:҈lk9v7iigyφuݨ9RJ' wxemuӒioTs=$]Y2c[ۖFv]WCUOaU糜L]CpqN_ITƜ"õ?dja+/x ~k]~J({p[mkgeѩ@#7MwIV#"<^\Z5@N*`XGvF01'[ﴪsյ|˹\[߅Og[6bC-%Lekv 袠+n*%=; 1rսF?1Yf >YM:dW7_0OY,K6yN  #gqH-wb]!(2=>LХ31_\Jʼnt%`w3 pAhf&=:]M%ga;}ʀn OD]1!ާ"y[9ҷ䠟K( 3vvyP.LsEy8NQ&;暥a3=^ZV=ls%69r]:}0xnu CY(L l#Im0',.ۺW',Rk60{o\vQP8rle곔nh?p95`,B;Bdddj'D@a7O (yr@GVe:fM@lxCԚq >At/l؉̝G PJwOZj/BHAR|6,_[V64ՖR?JUP1C5SsӀJ"x7p Z?@{o\6[Q79rH[+eJ1xոV.eEcCyi rVchrV\'a?PـN2)$ȻU km(ƒ4ww7*9${Ȓg. "=4HYH]44FW WȖv[ݸRkĤǓG H&V{lй[]Jtr]5tQ@P?99fj4whԎrw&:01}+u -6~ZuK1Y kg!P#M/,_*X`.ٸ)6Xu952> cf4),T:Zڶ%v'j]F҂u>N%з&I}f(%ڣ<^Iy`,[\@2+8بy]Y ]. 쌟ZLdI?eI1Ԏ?TVy=.{Sa^{It'tzXFGC5-nmi7bˎ~OK=l.C|4c[pɭOhoF΂IS1瑑.N1HGR I bpdp&\/ܐ=cق91ĈEy%1cXmmUe ^gBy Fp˄ZGGds+oج+?ƈCPب MwE:{Cǒyđ%'5zuY`Q+*Ӡptһ0;GNIł $T]<0pWkɼ*O9!L5MfZ8# Yl :ߺ@I# "ӂ祗S(z"U{ t$ ">Kqa̖cR pVj9Ț޸_EO_#4$0#Gz9YYSJ>6@ewn)%'G=#RH^ X%) K;JMrD#o$,8qAJo;`Uo/iFVk}p\ŸUpA^>ɶpB~1GPw'c;2A.|ڦAƊLɱ-"dޝ\=p19};w~iSOH1zs.R[Շ'nn"WGN-U7=Q1_@<jca)@#]~Ҽ#I8PjVUOl%SVIMiBf<vdYi>@ɥ1w9k;6{Oѝ]`@_VYKijÞCQ|O;|tGsidoQ\ Bpbl?D NvjIEa! 5)N,2x]L7˳L ^޳ ֎m~6sI˾Ywih8_MNkT} ^+ul?\4P8\I"'Ȕ3+e"w]{Vsf>tW릖ᳰ q-Ä=%I$k*QJ͉ˣq΀⬨-lSVFyFԇ:~uj2q\Z%pŘ5{bw#8lfH.3}"y1r0w.1f@S 6g|+d!s37RkwYveD:Ν :s8~f0 C){ҴHJN,z:3]Kiɧ^&ƥBcb$}LL-<)qII_Gc)oŇ@jX;|m15Q"0g@];76-SowP_91!bί|^ԯz&bxw_ _"[>jQI ~bdU^vB6/zt(r`[._ޢ<2J Bн'\f]JHYMgtG8hg&!O4vYW<˥he&?^\ L'.ݐRgYnI DJSqA|Z7Σ2=I&>6mOg!mΈ9~XSݭa0 n^ v^BJHfa|;*qIExJY[0*aE-kZ{̒_z\L0NdҸKz bVhDAU\a\Yl U}-۩ LzcjG8+KDs2>+Ki-l oWd䯞 Ϳ80f*+1tlUi8K(}^l#- `F0&lsGF2?Y ja%o㲧MR 5”^ioʐ6okMrwL][_N0C4w'CGlϠPF L8xv ajeC,"&Qm^blN4?IP ŒV[԰q#V7;TjMh״YsN-AOT$sXSiin[tIA*E;6J Ik\04[xL#m; 0dWKםϛ"]s+3AJ("n6r{lɰ{c]s#++),X4؋hEw)cM3_r%T( @2 0rR8P@.@b@ 76>md: ,Z.N{D;ʕP8po{[MOQ #Zϵ7Sd.,} z fnS](,@-bL5>ܓom]Tڷ=i>W ,ux?֚-ߊo M BRhaV˞fuxY0w* *Izb œeB کB1Zc|d -!VB!>2z#Ak0*I/*Y1wUpe}ٱi;+y)1 +(jiC!LR ;UmlEC${Έ>2Y(!X$¶iCfXVw0ljT/8IGc SM]X4e8L3BT %qv{&sQ5kt7vmξP]3V Ùt=AcEW2 E6Vv.ǚ~lE;hR#t;~Opt`ˇ(#/JA!}v5*x%e'F|Bț. xجJ*ǶCMJ$:NCoh.q&@>ke㼩7rJ}Pq9prI d6 7ӊEB3ч_;._vR;514Ej˭ZE_e>$Ŵw n!gu]AQF0Tg`339Ϝ$Nw^K6)r9v8UEsD8]7VPc##GF;"js?a`FT41옽c3r@_;wcŁ&əQ#nITE6٩b{̻ׄS׼3Gdcfj~`aVU #G$qa2tӑ'&b; /:ZL`H8jq}ctGC$|fYqm4m@d"0{YD 7UNA8@ƣz0 \e~%z WiA;AxU}]c,4̎q).)ތr(qz5hIlڊ  4 bL4Hm B,|d# JȮ8<[e8/g6"4iD{Q$.M^T}u 'ȱhJJ~ibѭgOɮm(wG_;0dDG}_}a9|%*+層!L){T[vWSDP?Gyr2eZVa"!SAw݊n-~GO|' PC;DB! +VΓ<( EW}GK|q'0qE'2Pc@O|V1F}Gkp P>(P)ӢH=XeFĀ,Һ"e|EBnX:z@zMĔf+d26& K, u醐NhyݸoRR F;Q?]_|tR|fH/GO,6ٿ [Ǜ(+]%*JOr!qϙhFeau}p3A$7/zM"@ZdiLsf( C. wJBdk3$eC_a|9OМ=1:ӗ~`$76Hc\h9׷"e|W)͂(W px\(q1{-C]4BEX\'ue1[1U$K|T3h( :CA3U!O3i$<'EDPPQVƊyw(\Qp- Ɔh碦oH#g^R$dCĶWߣCHew&΁G֒z_aRa/Id]FAt1cœ6 9sW)+{'LH&$&1;G.w!+g];do2|كFs)!o宴޵E[Żēd$gwxxa&J݆a UiH&&;bXQe|y4ygwܞ&V '>ek#u"wUTQ@!Z;]RsLnr kP.BDr 2h?i(Y䂶} BMW;FgEcr׊|Xxm]pC)N/MNph8g6c\]\!y~ ѕl1dfѶhtq#bj>Х)βgSgi!wY|<,-Ʊ: x%~.YS ܥˋ}DK LU+Db0TkܸM .hm,_[og;zTn+rDAyA^eƻ;KoI<ݯa8,.J&9D()ig?#AUS//[[Vxxx6cj1y&.XnAa)2wDvo1k OTa^,| L$ߤg"pnC9Ǐ:֎\5HwXQbٱVI(s˓ drMm_΅}soަAPױ XPCHSLB] )2_KٹtMF~ca{9%bR57$E!D>܉y*ʼdJD~1% z{P669YpH:C IDBoMwy2NFPVxw>~JkKmKLӯcͪhTz w&1\)K8tD2 "5Ge(,H߅@tKZaz+&QPlM>D5f;Lne2X[SJHc`&l,{_@ O4$ؤ#]U})FK w~t2T+/2x3ֱ8ɷ10M (8 !9ai5OkEIoN}p+yRNc@M@sםa< /oU_љNwJ MT2f)ÎqѦXv}3GaK62ސQڵ َc";!*:T^hE}UOȉG|j}iii"KzTzZ̥6ϮiCaؑwɝ(ԥm|7xBis/.Bt_t]İBWC8ieǎ@vZ3/Bt$`2G P!P4Kfx(-_' ~' 7&Hu!FgHK"S]}coK˃91-fWWO Pg@V7a.J\)6熻Xy-!ugW  潑( Id&2Ck-kXYd}ik)Ұ}jB=BKf5b ExүYq['^jy: A{+K%;wKg89 ƲsA+^#Wk+xe".8N bo˕cR=L*Dղ'Bx|CPC{Xp9ͨxZ\|T]j#Q|i(̎z:@5jν۹%hhrDׇ6/.UWIucu` ~|v f|g146HV^vR@u]puzR"Z~,t`s:<:6ki^q lĦ|߻Z| hWQ )ؽ@t+@$\YcV"$(ixnt;kDBlZ@~"0 p9KԼalNzlіWwLXE=B~s3yFكp$H/2=?A CJT"-q~\{uUtYmҗ]\v,S2k1oI5 W"DC9$@Jek_"n{͂5,3ICw7G3:ff GD/tUocg/ˠ Gsml ~Ӏ-YhTN:ܩNs6U;qc` KG͖_?<񌉟ѶIP<߽8,Yi0 Q3j&X2H?'>U6"Coe zHn?Dd=FdCzk|w&-nP`66~xcѐ.cܪ e. ixHՍhW]+H<ۏL?9ڍǿ-hhKe! &rFWڞtӧ.$/%:FUtMa/] A'hp+O7IMcJ9i ^$gsG,gPoi[oEO;>X \^Y0<-'#A$DP%]AcM_15e:ݝ:MBw>JC\۸ ZA4# m"M $/Nڧo@&t8z} "wM<_0jco +%<R!3L,z@=?Щhv/&ᐇmdu@}RgzhØkjTP#>LڸY_o UJ<(l5W:C"(Å .Whm AcTpMdpڔ$wL ؓ",an{Qs7[$›6/{\;eO^J Xj{@ge]b١IKsQTke9)Tayٰ?BC4t?GKr9^4eB)(i/ە{HntlRJ_l))#eHjJ3uGopBdebprc1_ pZg2 [&f&@2S-HѰÒvtuųΨ 8X:{&̵b(Y[W…yɈ>Aup.ژpMSp^mE@PHSj,v)^KԽA^ Su°FH7By't BnFB9#/t, L_ĸC,4u-im_Cx{PO k'?>OvwƊ6Z OM{nlf /5bejY s%@m6oDGAIl>4 LO%!Nଦe_L~RX RQG.NeƇdiaz|]6Ljl4AfGZӻt@1L0;!bT KbRuxҾ$ṫiVY mԛ 5u%} 'TYA;vj}jFZʯRGk/O}Gx[悫)hO#Oi,˺ i^`?}c0Nuͅ80;OU mll7="%B#7։"u+(WovŌ> u YanB!kZ/ƻcTmy:5E$y)i_w[]qK;@b՗Ji=>!D .k.\n:Z5Wc=W&V}bU8z"Iŝ̕_dfyJ{Z8 $NYQTm`xyus28&UP-껑L~~Aehͽ8/޽d*2$ۤY^G{MV~5,lNRYJR3>W$ƮvMB׶vvrdYGQ6>*6x.8r]VFF_Hʟ?l_'dүŮ~]Q5]o_^!TMac?6OIķ ]ޭ牾OB9 RS+/e_Js\Q޾%68bɃӢ>J;`|½J1R R> CGX0g6Y{JQt>B>}#UZ#f+# pKw ע0X䋱KG*7ZNn&c"oLF*鋻 ȱœ~UV5 7n-jbُ 2s+Da8  Eٶh*^ #z)0ݽfDYf>! 69{(4tm䶭PߨYQ"!ˈOfIzMm!W!&ox*.L@܌߼r&h܀x58dM-e], O. 23\vN.8id$wSIvҮYJKE-; (UCD;ldT4Fۜyrf@k}P1k1"}6I*׫Zsprc 0iki]Fn~d&Nz^z!*0Ȟiiy,5Rn<+1'>hfdlǮO)䊮8\&),jG#Ff@#d߼U(V1ْ` XRzQamBJ~TX>Nyx< jYAA&PH242q`*Ka΄On*[ן . .@oF=xQM!1t/h_+]nb2/@g]oڽ\=#T*$Z<\?,4Zu bEz- $ i˸:\~!5VVRindQhD,Z~"͇鰨%ʞ߸[W퍡Egr]Sunw(lqcCW] B.4~z&?DIb`ա=&SD}VJP !2JIZ}=7[NfoG!4)`鱭|j95go:iϮ\hWFᕧ3Q(ݪ ٺoN+0O Ҵ.Fou0ZЄ<_LVGKC)Ù K.yzK%Qо`AG6#ZTK3QMC +Cݥa笌bZ[cG;1=:Iy()ljL||Q ^nɈeq}2v#6K\azHz@z.cd(BbEϋ,Vj7QSaFDHԽN{JBDB;&(&8Gm7z[Ȩ5n=QݻI/ST\?+Y\j7> |w}J12ʃsը{g-׭ߺ~@#@H/6t@M'0"w{ӈǽ̯riw bIx;w۶A5 0i~%<[l B/{Mp54+"9P[2He kl'h ɍ {k%ـ8d]RJBp) !c!`;nQ S~|ӶG MZD7((GbΔXD2sx;? [xJ^%(q$Ufby`uO ˊKrg%2]EݔMj#AQR?!,*y=.Օ]sê.udz!prt61-SKryFOF2 ءU<Tf}BZzs?JSo=s{쓲/nva%4[ܧ,]G.,(`7 d}q8@2 Uړhn{=ejpPjI?1C\iV^W^cͰc6ՏgϩU^ Ց |t\ꑵm.)rRL`vĺ{GqDE'2L}iaTOS[0W3*㪭d]>/A3;g%Wp]T1#L!fKByZpy ^) ȲB!h ]۝Q e[mPރ[)GrǦ ^۶IhCF\pHjea c{!&qx\Pգ$gt dwJuk?C(SKCx~?6<]^D=YmhWeGSy8PaUBϸ-|} K]y=!Ӄ[$c2G|x7!-w皞Mdt3˶2jw '`{$.9ߜ-) (~DU=cO@3QJD6_5-{xAvjXVnv4ByODLBV|FŇ/8(Fo i=gyH쫐̮c R RyPL@} N֍:%5Rx"J(Y T(@A0^9a 9M|#5l-V$leCKMYP;,zI0$[Cpjx6$n.zgݬtse`TqįpAK _ >G.XxucX^QX|cBQ!)uR֔Yӡ+w,!u}7;d((3>UWE4Y*HM>Pt6w&48"Mgoy~ݹHx ̋cb`Yc=)U*å&r@@qM3Bڻ!:c¬5xqm?GȽ=Are`-+F q7x$QQvS@yc&u%3oS}prN}qOɿKŪ9uaPt\X(}WtW+(Fw 1a-8e 0ATa+kx x{q 9.Vh~曩5ba0xzVãUb:ku#AƇHU`P?m9ՙowqaQr$|z{T T]_<iuʒ"SxG)x4RYzvu {clqiC_ہF3P^ ~ ߾Jo&1 ފC+C>,o3!fL,Y\&4MF3")(1,N]=oޙ~}|kvj1*i.$'lLR yʅ=_`LJܶN}u6l _ZX AG:Z aâwwh@w*#N!YO0}hܡi2/0)dZ\27]llZB7zsz'陓rk;z.qBι½] w[=~!IܘP:epkjB:mi?jj % ȴ.rxQ%4E*]|1{k\ BWr+Y^fCHNS QBҳ\fePs% f=)НRQ'G,&.:&fp0LL8" Xoˬy?254vX% !7\M+'.fT.Iw/I0}s#~ X04 խ򽙚hpZ|.7?C5ijSPqg1J%pz1<7#*Yv %K^v-;-GH #ֵ?gd<ܖ (,vKʆ|KB/*i:v1PmЁh"d`kD Wƀ÷k1=#r&dH~.qXE0v|M :: Rn@> ڙTڟ`sFge&j\U͝ ^rtƥG ff/cߺUo~ő5X"kJ`[ıL>c`?P:^$ ?Mov7B$ƽ6Ԓ*AA#rBIӮͿR4yz"[KW' HAwfGvŋ< '`'+wp8+%crZl9@L(C z[~;UN8'ZI!lQ .' Beī7"ym*EYp'>fi Z,ν1yNt:GDJY/?ωwY#P KG)U#MzџZIL?PVgjb2z#5ޱwc6㸱~0 -b} u(uqZ5./ҬԄp+Ћ ʦ9!>{UOK^|*X{mv7 (/tɹJt`reFϷC❢|JVcĀz Rt^vNdnzw@G|"<{gjF4"#7,nhu{q1,vi9et&De fW߆#l鮦zZSqm0i)!F2;D3LdDϳDC?҅?UBTF sPk73~>ːSYO6~j՗425cpr<@8^̈́_|3}.2~6Qq L@Z 4s[8JSOG'u1U2(~krG{=ޟ;"_)y{G.B+ CDozFM " @!gʚkO1tb|<r2%TbK j8{x09SZ0L+[!hb8› 91Ә/{sC',<\Tleޣz6AKid&-G !H/\);'y"%EN5V8LJFhas'x|z'il4+M8^>:⻍wv ."}*WES.|Lş9aBLU=HHo~9r"-w|% L2v+4J:ˈ RB&RKj~ 94!U <_x5x#=tIj P|6Y!֟ukskERz#-$DHpǺ[h?֧h:&'ašEt`DaΜj-IzCt{L?>b"*>z҆.ܩaH4ç1Y8 n|&-ub0Ms+z^2S#؂2xG8V\D 0Um\Ͳ }Aj*lfny7WlDhoT+"i Py\?#@{-fS>6oX-K)zS\7|A]; 9YB7& M%LvEa !E| u%:cFvHa&2Cܦ#`w Go6ȡ T$E!'{끷ltTCg<+gYomJ3Vi UdsF|$ y-QŃG^W4A1K#X=Ҕi[ b$- #ImquAS7fƟY{]Tۀ~޼\1ң͋ z>BlhB-:T1q >Kؕ!5 O*2Yy?OAMSxo6js~y:%%2#DF:Iӊ޽ffzIΑiu rr:7N^d`,Îe0$g8U"PMSZd`#;^XEнZO&!ӉO/<2T+e*?rfpSnr(lkpe?g J:gVK9aLdQPA5a6m!:;JJF6&)˭F{X>d07 kJFq!P2fyfH@$ CxASrGcj)"J]5\2E,k}^aB**mgUͫ0DŽ80N Ww5[ M/yd*m&D6ȑ}>{X8Imx*Y0_['TW^E%`AaEQ,:.=d D2eCVJb|gC >$}bU U>7:w6*Q}P&ܮzkp.&j? [@3}A, L/-H[9o;=483cߗN9y8b`Nbk ]hQٽ){$칽nN0J<7J} xK1*>8ٶM2Tx  $]Q0Wh&W6b^{]A`=ב3YZ'p0NSqTL? -3u2wߴo+-#O}`7b='/lJ2ܲ|$/J!d٭4gU3{qXҌ~oQrWXBޣM4- ӦZޭٮQ*+qQZ1M?,j@֡v6RJʏ̍m:* K5~N '歓imtei>yFLԠO>H*Zc/,8ѻ,!yDc*̢ED((&GhEl ` ]LϤ!d𧹋^z[L/rd "n8*kTٓjNɵ" l 6VGul[^7O+wÈk5ńqv~Şc0L䤄.jL3\7zo~w=bΤcŲZJSI\)1S%,Ê\]*Yϝ z ;5]sd~<h6`E}axo(*/Uviy`6wA)֯3K|0r& IJKxbqK1,=m _t o\86 +5 ǷݠbBj1ۍь4Rޡ'ݼ>Y8ɐV: 3}l)msM}N޳<`eKEt,~+| dǯ7! ۥcGzv(*kHLHrL~_]Mל,-:w M`:%Zpd`y@z.ih`Nifux{ _g 4]g}F]yL*Ύ*,Rc ǒqzgjj;nz*z`N[uMgZХ l&aL9@MTt8kGxc+Vv~P(cV}&)&Քjͺ؊^sjmO~UFӹY8P F2r\9y#"-K+<:N5br +Z_lt>iw3x-WLɸ+*. dгNZA|b#=:qwDr=A_X3c-F}T(;5ϸˤ@9~X'W įCsLS3GH ,QQv„8hnl{ы^COrYG`p+gF+R9҄pq 5،/B}.Ĭ~r"Kq2;]yN$6yg?zjᖁ)Vbgla h6,#H>R6РJTkÖ{1t }"Vo Jgٚ 7 FdN^؎G$Ю z}Bz>Q+*X1JY$]&f7x:.}@&ƍœZS@sOE-f1rlj2XOKδ}r]PWHikxx"EEk_dԻg]W sTę=Y+2 ``4q:!:\̈ѵwzQ 3Sƣe;ץ.׷J kOd6.bHF  ֎1&j(\hh|9yyo6} oS6j,wrm/D#"8 LU954aVI0yf' z3$bJ|[Z_^>KAt(I1ɣ7I?/mqDS6ؗ%f*o2A5x!d ]Mܷ/'Z+o;qp EG[;zG<܆1|D#~bm`aڎEt~{?A '-R3OК_ zL˫c]MVD$62RZ>9(9hL1_B.1U}42Xyqݸy6ya,UEGNXA nɃY 32Dq^U^S\Mla==e,ܵ85ݦsq5[AҐ+"0-ڵw$)N?̼D%EGgr1V:!T(=Շ/]3*U=ۊ4usy?`U s-+P%woeĂ;dLη&9GqT/y,"5O 6{,p][658)ʜ~6f.ʫe,%댼v8)ggc lj2tR7 KzAo@Nv~O?It/N)F J AǢDFGBg\YKTWE5 ^p$MV/iqnPWQ IN8升6 ~đ|w)|?U= UV,7JӞ~&4J-^lϚ6n~sކ=SrAP:c!Q‡*GaK<98 ZsǢmdW3C>S-o5S:_6z# fٽ6m7mnX(ÆS7Dvq>T26&V?u`Th`nv T߸؀n/ŏ63IB$07R{cHV#Kč2v ɥ*DKmHjgN9ŅBGS;5/hVo]|UZզM9oHgٸ?_0YH1L Fl(*&e)/Wї{~$a;K%Mn-3vf|yr軽1h~sܻGjJBf׻wyk՚"[n|͌@"I{sŬ`"`+n n0m\嗂e3Y n|Oo`\j9x Κe?uΚ1hEa_ɚtu+ٕx*A5oѤ(`fM (VN-Q-5= (?.d&fp$rRI~PH^c[ds2 D0xEcuA_<-^@˹#}TI$tH̢nSS}Zd{0;.(#_<u. YZ<.y s~Ե!OR~G#ۢ>mORU^Qdk`S.\ Xխ9P,ӯ> J0fV#< 8m4Xv! Pq7(o0e[P {EҲaWOk-z0{ 063aqn)B,V_R|/(L;Rֈj}D "k+9%u[RKk5\)>eoφP.)eMM&N V s=k3EGNXyjN(00G׍aBK&%Xc?&~X/I2єXn{T|ln ldNlŜE[9=e q̗UVi ד?EF4!Ù]فDk!bgt6*HsHW@.4\Q??xQLB$R AUQϐc]l%q<޸)sAdq3ƨpERxEn4zG瓀~Kd tzZc.K5ؠ6Bm@B2[`b ! ,{(_vin`Y,C3Ԑ(;:?}M˛9A-J Zuf#1TټEc`a:'`KA=-Me{ :%֔='2\.YoYFkb 8}2lZ_`#g{Wak QB:$"p*mN|<UK27wOԁ ~xCKK[c4!{12}$Q AgT'WHdUoNn=B h*X4'NnjƓ~?.6V? ίh?Z<11LȈ=R,52nZpX?xts;)拼?2L,[u u{Б1χ;/ОhOj".ꈹ:{];43=߯Q@'B}rKD <IO0$xz69aOj=񓝭հnxYyjrU#JlHp 3R6;3 {+Bޮx졿)HQ! at&>[*@azRgzmbQڃ1@P'aKz5jFՖRfp=%5֪ueګd~#\% ?Z[I}=ɴRSv Q9Aus{x<\m&r0& L~!?6Cz]6ׅJ⁊n<]n][z։MBn9p{sw|ܞlWrBeFR7MlDYíLaa7_-3NZ?x[J_cU,X=J̓r *qI)Z2QAȌ4HX*gH_*-o 5wYemk P3:~#z0 q,kh(.g&4:9ۙ'xquRro3 ?ɶGl#Jxx~9`\_'ꪑ%h@ו ˳!3Cse[W o_ \C*`ݩ5s{dTX6Yѕٯ71*eco޶#|AuKHG]h;3֢ٝrH5hyz[-ڛBtQN&DhcE7m r$,˗#x%+Χ+JL6ag<8# جqƦjתZ3B,z"Dy}xkW]KVVjAh\jAۑ\CSO4 C<)⑶e?mh4]y *5,Df Ea #: >WWiSQoi7CG49W{"jPea4#lVZhV85xWmLGoJDOqtR87қ)+2TAU =$~rb5@֤!U `v!&V鰶z tYG–ؠnE=x|tlGhgoYNE+J{,DzOSVUД i,Jzxt7y ,"٭%pnXG./;/Er|^vCF;jtl sBS?  zjHQ BO uNeWiPM齌ZdD\ȭBOVR|y{|?k ip,2a ~#at=ohF2ei'TLA&0ex Ny/iA_ JcNLhT5N(k6<8B3Ҷ(|@qhǡwtNyB8zfM cQX.u}r$9"j[8T_Tj[Owl6~;<Ӂs~%! Vnx3ۈ(vFg?ڝb0AZzɛ[PHi{WWr<$ZNvJ@o=wފhn=F3bUظ؏rxZoرAT͍8*97Xi1? 0ܲgPyxzmK*y-m{f~t7;<ƏA_H!jE%I0l˚ղצ[tVxqf)_?Snt}IV-w*YQǴ^zZ%+rv/3BV݆a䘿-zMm5o^K"?=Q;%9S*?71#ҽ o7(Uֻ}r=M f+ȒNA揃~ ŻN^e\Vgp[&f5K/ob37ؖt?U :?eޥ._ e>',htB ن taQ%'x~48eu> 4>Jؚﳑ0*$=F1:KSm>υCWO[IBrhד!px_wQ0Z)6@ sMc! _y19$n$rzzk(QE-__@xY:NQ҉SeB - T!E__ņOHQ۪NP 0H׮N V0*09%5Լ\XIwz}(8T[ kd!eݴ8o"N-02ڌ؀Ys2eCӝOB )pƼ$ay),_D1:M5^%+CbHW8//9%[dʏjMjO4-6!%o7GmZEq D&uࡆt1+H&Fp\[HRD򃙀,05^ ;fDK=ĄQ1!# GZ~  q;!XfX"Q&{-뻚PX~GeK9?W3Yu?%Tv~郔/Xcu3/񌶸4g$BN5уaIKu@1 z.Bh%I4= e-%F, ]80G7U*#PgÚ~}Чqz{;9R~|C삆%5 K^5BJGJ[t]*Ohq|N:O;IR^Жp3vL:zA̗A8$RVSJAmRڳ'DZ\o*ʭ\Mm9bɉ + [(Ssd^฾6|&<ťqQsބ0'{Ptlډ1_$vfL&ј1TصӵTtшe֒䨘GPl8x܇@6@0ke da|} YyV,, 8kavKtc x F|av҄z[Eؖ)\sasr$Yk4 w͔y+)rKמWOoڢZwjvyF=ۖrV]*s ȿ=kE ﰵ#! gMbS(}\wJ@~K4. IsFxq'ӵa{߾ns-r pc= ,M'QgU{:˷\X!:pUJ{ҥ"YLB3Udh༔_9kB=e{0= Nĉ i3ُf a>D$EtaE mM3Yc]Kጫ;0t+9T2A*;1}dݔm,i<`aNG㽶xqhPddC_P &نR^zO; Z>RQV >/j ?{ X]_8cРs;yBoaR]Ee+ FMv4IhyP诱{%cV 12\(%4.C -Mﳑ_='V9J[ jEPF B<) 3Ɏ}c[%"OM GvTrk d%({h*F4-bȁVe*rVVd7<봳Z˷R ޯ( <=޳~@@ `!)OŒS\wM߮C6tG"2x\.8-W*{ 0;<#MI?ޘw[IHX̡`RgɄȢS*gHHDD8q g+Q^w#_zv$Rp(Q .aU{9?ڤK J 2"ԙdҵ;m|1Mj^z Rgh0C +tI~3:_HqeN1B+NZ-,?/lۇ#.@<ɑ =>ko [qU.W'-n@_0öSS>,QfA7e:!3F<2^\q 57&Id.X&*.M$RfDQ&#c6rwqRwn!t*Ͼ *ܨ8[=.~ѱmHN2qΦ`-2WpYO) ~6^} %Ծu*r<?Pъ@%jkMae'fKY+kA3c zʀJϘr.0W z>SPj)523s 4k\F:{+:N*l`Ea؂Jg#p;߶"d]pRJ./I 7*˧ajYZι [n2z`IXʞu[)hMYos^>#oa#v4_Gx_f52J^b=UmGmXq< ϋ7 hbøæFd>{H4e3.t{}rwHjZ]=kŇKzV+r ޙo7J?+D* p_ òq˯UZ\⺽^[>Ƭg28J=cwi k>Te;:Ox>.l(d`9)A ȳT0@* < |&8᭄9O3Pj"z "ՅT啋t!}edl(!UӐ͹ygL^8oc0),Ҳ5i95qnŪx 7!MMJ`h&VHo, s]~  :N 7/^@TӤK!Quz cKS?kC:[6e4c !b?J3?6"9R;6; 6E > +AAqp,u0,^W^w9ۡdK W o:\_:B,9 @T2/L&QQcB|8l"oVl{7[]↍{qNdM<1 P{@JlSR+&UU{c(B{?5OtħFMd_harVQ]BF۩nkZP/W9'+4iW7-COJWz-T[4 F Vl} yBNxmA?Hg"6(V}M^=Iy³^,7u -9i>u:]%jSjjV%Z5s8+f{tvVVSsqlsxtfp2 l,=Y md'I D6E5oZBDS:!1qEO2v9C[@FFsx Z~Zf:۩;$6c2MȆ%%7jd!g@^f܉A'r`Lˮ-Qv{ZuRcZt"S\G#(~oQ=`I;[}jUAH\^LȭȁM 4#_}瓜qۆe< To"̢TP=Bízdة 4FҤ D<(E% g/*&o-׺'G5\!yeda#Z{4r(tB%o瓉ߔo0QI䗻;?^zV]g7ù;L~sFYyqK*9)؅)밙 ׍/2ڥ;f?Q+Was7? aQZSl>.cBߒ?[7'#p¦;p8n_{ڷs`YuUNJ uau{h~\bRHE2[v XA&#-a>L?pYZ%'҃N?*'VPSHb׆x=fjIy\y(HF*0Kie^]LUQ-CYfjw:_D=Hupe꠩KHhԖtg S j9ōgaNR^_VWOb[9JuI> : Xwİ$D6YdIMb%`!{kzL $8U$;EQF%"[ohqd9܍~yoKdٕѣ(GvL/_mo]:~u1roPZ@]?9W#uƺ^% FOsPzhf?ǩώ8jq&p։Pr}C|3o ?~Y I6_BS)h_syQAoF30)IYp"8-^Rܛ͎zɪ4vV]Qz̺*kEܓʙO4UG&Ucl٨DdYoW|`y=C=RXOV/pqI_bro Z`E|_eGt yE6XkBꭽ`w v6?h1>#kioQ+/1y UFOx¯7F{_?-H ͋C5Wiex5-YtKAqA&f+)'tK٫ 4m7NStsXP/!U*1S;g[ڴ S#ƒސ6퍹 aṲ@ n0 ,7j-xK?rE][`&ߗ}a,HToLVJ_(oUd(myء_ib@wv?Y>M?=fȧilcb-žǮ?tG#,)z~~-(VJ=؉dz`N[ɛI<+eWO W"D_w{)89sXzj>8#Gm@GfDJQ3oI&3 n@³cU/QנvEB ,9~!%>%I߁=asF;4Sn]]#rz M#Cc=\%EKӛ o,tӰ$bJ l'y 6$-fI_C{ +ue[8^Il 6܎-JuQg_؆ʙwd/ m 52m|s)P&c<ϒ^q e `#íVr)^KY:Y$ foKy-b vV&ԹnőuO] QQY8uvoe7]iT /HI~jƥ峧!Cc`O[eB^QA`oBfO~ /m)Oe{ՄHiB#Ɨ}M1\ Enw[e _ T΋Q!mah"ͳቒu|W-wˉCT󉂮ǕT X?`3?!SVXsR5UEX-("j`hOiyNZQyxM֥F]\VQszbz՝O ϿvփJA)Ќn)bn!ӰRjs =J)Ӫ.E.ًHH-c*}i6,V!tyIRQGaX YqHNh]`PA1ߢD~z(R{0vwvfkfRI5a cZ(-}5t+I9aV^{nF c.C51j}W #Ѻ m8TLd ik B^{v$/ZDƨv:je|j [R5):ɠ$+輙UxXJ=wO,PUojD'=XS-/=gKXH a)6ES_-1)E2F™JȁKk ޥAwH eiH/ {}\wNeo`Rj@I<#ĄTsv3oÞՃ$TmAJ⛡~K[Me;ׂd׀KP,[>SmcYFض|ks c"= .p'_hM..h{rO ߿Ruf1$kte |Ȼ-,&W14Y/QVۼD *rK!;:o…]ھxe]i83@*(W͊+9>\<#x JĠ.^]7x#ּLh9M89ݿ'T! *8@fY\NSbqEˆ臁Tv"-oK:ORUJRb*]Etg6OٖcFJt¯ϛl @C2btg2^w-%IņMJxo%U$_iFSv/׀[XLvh| ,vuV-LHgnlrxFCWJsΗ$VfkIjS] ;"7K|{ZٺЄz{ rk[f!ce\:+h|^w)o$ES`Xmz3.<(ztSwbyxHC=Uj>H@0w_*7H]ܹ,1B+& 'ByJΊwuc0&DSjkUQz*9ê]O$+YXTCf;h]G}ɓT`fK1|;!p9 ypbЖI؉>@D+Us03pw;)k1K%6(RWYmJޏRtŻ9<6;eP:\#E^=O\V%aUz#|ŽnDK%ՔU 3]h"y1Ӷm 糾:q̈́nw;+n(Cu֨TDqsNq3ySȷ 2~,9k\QFO"$P2.c"N;il%%0ˑ"aQȍS@2ו H,P*^}cY+4U΁01dv܅4pۇ3<'ydڷSlcWU*ꎹ^F{z4+,[rr>wvTw_z嬜p_Ɉ*%fi}xfSĮ FaOX~=f*x"K Q1`f_ѡc XQm3C?PwoYZffmG[lgt'?_ 8$'tIe|買U,+y(M(aQbj7;i9΀`̰`(z!ZχL>Np ~tp-}= |g|ycrJ(ap o FZItu@HCm*O/(-?ְjXR\oyFv$NwJI1#{iaJT4¨u?z",Sx,K m{gmvDmjNԇY^P Ght YMSӂtv| r=Iowk_`F8HDP(4ꄺiW;nwaP]7,$v;W WwH VB6w8}/bSWJ=ͳcNHfD. )Q3 w*Y9@zmT=41[iҼm}`ߩ*_:k̍J}U/۳;6m ZK<ҿNϑ#-x/IKQMEdtp\ٌu'PvG{V)r->CTH0E ZQfr ضҶI# B|?ў2p\Ѫ(Wi 0YdW7YL;pSHHsTրEmjDs4{am=h5#1Jݝ%/nJ@G $%;sx+Gi>kn_ )֘;ㆍ+Ŋ>O=5`cVoK0uT֥J_4`F[9V$sa`QUkik_@;}X@y#?@yp]pҔ89DHoEO[Ĺ .K:MaŒ¯6`S0օ5֭qư_4w)JWMB /|mbגթAy#rV@Sls $^xoQ?O01V4(N"7AC+ٶ=jv HOpF}r!8l 8ʱ#bB7O 83 72& %]\h#'.q  #s.v6_:F%?`?<0*KЉ$Y7ݖ,_$hH]֖h62t< Y򝙊|F5]ڢ`hE>f%#w 'iàM 2p]FTH4@ʱϫw}ũ ]VB KB_PhR;)"k!#"H:iϫm!j\@ *q.%B\(sÆ&r![2h#.v~^m"'qݑuȫ f*<6OǡU(x>@RzymD34Al럦mas}縠Nj-.n#kxrS^EN3#cC )\CkBpnmlIfӟP3ժs< U-P-sSxHQrd-tK}2K:fhš#^gKRER kɄ65JVC͏C͢|6$HygT!lĺfmC}-$df+OŹƊ"R~*e;l]CSausW-:HH gl&(|d3`T(joAH|55)R'>︖ VReT6;aU ѕ)C%V"ʟoX+:s`t4-ӭ+VW;2~y [ꞵ'v#]+vaBܷ]<_{\4 ;{ڟhih8\w2\7!%J/{p=pfS(ՉDOŽ,Tp ,ghJDIDߊQ;mCȰ=bgjy "#l 9uBb,z~D$WlRDgGZ yj ?!oWbnb1Z{5:My}át#m.<A{+&[@Ivt/P@ ʒYq;OBeK3Ь;| Uʮr6Cd8'\?)=~z|cMּ2N'B<6R8FZisnT*b 2n/2mV{=*#_ o -k˘TG} 3uX$F:~UAV05A9hm2j;ZUga݊4O^Wlyg9te iDn% ڝI&֒w#Lm,>Z~g#.BΜ@nb6{Q0[Ξd EtYrFf|#økD?X#e2#\bI. /ǒJPFj7T,KE6Os@s]0oFȲx̼(hLQc%5`=~%qWЄX4PL%d uvqb-/[@5נSua[9 QP'?[)հN] Y^w y^\r(%r!I5qќ$hs'yU_%fƿU9+f$J3RFYΰh$XZӘ.&Cv?Jy!dX_ NoE_F2*ԋ^B'P|4@\`K047#a )"%:i|̝n6\ZՐ"؎4K*$`7@17Q4> oZ|p8ߛ(DzM%m?!8:b_`2`2XQ4D8P& Ĵjl"UsKkqcۧd9Z~;HKL<(L^}~ijLϧJyXnS*<  |}֎!jxVRiJDY:L_;Nz *uvޏ ?(e!|qWIցȆ A j7P-}|@sGMěU-%}ٮLns=m}C Vu A:mp #CS)̿>E5 EWk6Q 9$\o~fhf@3;|siSKMڿRc*\ԅ a|Vɫū?S4@55^lʩBX9#~@K)iaNܭ\xBB/ J'&hyX{e3%|dS\*b6a 6"™-PeROS1gH8$#4mL7,@1(dىwjqЉ7B,T/+V8:VT"֯5;2Y3Ooup2Hw cT;UqUotg?T/{,c; #ƕaiZցZC ̻oNf*azS3o"{K~^snli3 MM+AajO2b T{/ꉊL9UE.-@T3;ppʎi"BSh8~H\nS3\p>,X+`ЯXxٹ fpz$[,e73F>R9wTqV,YPijޘt@`l5*iw[=qWx^˟7K B/3QDHӸ5-I6)0Δ+>#N߲ &">W,!zOҬݞxz\Z(*U?ɋKPE4aV͌08{ڦ=\ Mj0v#-qS(QJ\dD(.qE; &2]|R"P[ ZQWN*l^x `OI&y+>oqH~4jQu8ɆuZ]W&'i=hlIKdT>YHiWɧ26զ7P1@@m:BI _χ?~Y5.SW(wPe \rYPbL̽[ni9HU>||Mu|Pr "Ei…X9^]m7sE#yfdpYTL#ޓ3Z.D44{z=eхR);x9"1:;V#@U5ixE@g?m? FkF RaiiKcB-8m~qPBO8eAΆ]rnHrU2 -~qE0!1TlM9DFB|s2{cD=Rr-pli0hvo^Z7AcP]s=/Ze!?p 1!q-s+c+ٚ9SxTXim1w6ZX`T}I0Q<㶓4эR靸 (CZoZ+fF2{yCn:Nt!wdɐt9iU$-" '#9Кnt}YxhܜaqyP/7'7y M_,^gՈ<;H ^(À0ҘZꓖlaw;}჈P%K.h%cr,Z!{.e Gq4aE*,~y3BO&C"' IZ4I~ HreF.҉ ǝT<|E <ƃDku$ki%r=Pؤx:{r(NfwV;Q CN ;O${r]H9ϊS*f+ iri m0)POZMLmC5u ڕ^ݭ2/Ķwr\.b gSY> rxntS&?ެ N= T-6X-VfxF RB"1b9϶\@f^BIU+(4~|j2ʁNWL1W|WPu1ikH#Q;NM8E}*0 \PD$ܡ>}$ϟRFAIeŖ䳠 ~^-?/]!;`N90)V􄌏G\BW+(T8;CZ npإm$p dhZLu+4=:E2o$UWC'1lT)KoZ@(*d5>T8^E>N01@br~V~YI&*bTFs0ϐh-燒bbLTs9JX| "p釓seZ_Ьm qאA6 f7Y⸧ƜzCx >Fs2H5!"cBzBqCzE/2o} al^RrKMpAlO&TQK12ez F1`lcTԠ,ej$_K#ܱJ>&~&@+VW{E(}XUt)^p#?]}Uu ܫ7ņN3z.?wd ZñA\ ZV_,cfX J#j4-gb8n*E~5jk?-/6lKq'aXZ1CĠn%Ic੟t"~q⦧*__oȭS4{K7oec7eBQdR)2b)]YLJyj7O+"42h(zC0}EjN!% zŌ:›Ys DJM~&uq_KhB'|PuѻpYAT\}dxbKQ:H\~s6GK55g{giO E ^@q5/ƀb]D>ʓ)?PwcAUn$ >CH m)itlIU\z[ui!H[Y2K6Mx1[7j,/*c>G`HON̖9yifD[+"pf\sK9=KſB@J^AֹLBi @_ VyA}}/qyS1C@4PEX}9yteI~VElgB&uUwB0qnHOdז8ۡN*L~/MYYڨs(MFhz ]oZ;|u|?|{&3PQz1^5L.׭w;d'`)NnkUԔQ8ȵpU`3/!@PBr{Lಌ֋th ϤЀlt,q}xkii͢1/, akW$DXJM C3"Y|ԬX\rĤ52GQ`nc-l*%CGV"Qh371qe 1HQŎ W岂_:#eaO WٱVO.|? (ŴRMu8F[X6=ww}H:|q꣖𫉼4[SԌe1*$N%~(PFjHaS},WP&Sr\mnH˙q{rP5q;Z02su1A➵^y0,j~[Ұ MͣGxn=QBM"h(aQ(GJ.Ľ"v S# ΁[sGWp͟VwL#Gg0!U؃8޾.yK.*Gvz7.UPo0a4~i"^^ *5繃onvw~d5tDZCD[< f[8O!$Bѷ85sk6X*}eK .5 "}6 7/)rAua0|*GѓT4zz_8(bDi>"kb`z)q,H`ȈZ@ͅzB`}NyVgz_jڡZ݈@#f-@"daFGq>)-4\NVBs %e0sE%\ҕ̸\MOĆ{PeVhkĿؠ κsՓ]!.eL~~[be&*>~DJN6 !zsv- z&L'!q3-ތp,xlc abtbIOVJk0UbHh _Mۺ~3ظ>r1ǯe c e7Uw [7ӇuwC*t945ahE^5/I .G|v%y)i-I#78l'㘸=tc҈/¬WkZvr&g}i~rҾ:ωDja`D粕m/|Jli( N'8NdLҀ܅"lͽKXU~ǁǽ$ו  SB6%":({ r֡BRH1M/}t㩊hep~5"Y}.a"Ɇ*B2js>!ьvZ 9>ϝ#Y@>.$}[H!.FOsn_o߻IPSx#>.:1 [C6º`@nSؠv]HCO{uOҙWu0gV8 bxK @v>:Up*NV쐠ѳO] 9G1TZW9rwbfZ^bjחm:ؖoFt\(U<l#i& 8RzӜFk:$~q|D#53 s(耂4{|+IYQ M+>: (Ir"GWJ${'qa:ۑ_IFv^Q# +?w!Ѻ]PKe!iKG&. nXl*#\l E%:Ҩ) 1s]~&t6~] --яʙ|О,p>禚-IDZ>u+6̚4,IH.3DaN=|T*an^]vҚQpAᑘ\+6^SZ:#2bnL-<(P_( $vXG[UK{aHU[5E{ 3L1ٝGa7Lý2 xuT柬 KssLu% &҉pXn &"LeYlMr\55›=XM(.ep]RԼ ()uN/uo^S2d&޻W|ؖQ?k%eN=bƦ'K֘?qǹM0ؚǁ>Di~*E]Asr`xy]AThtCMڢ'ExdnPFT>VrWBD u_:6&`4bSPݹqB4';Cy]$*G'7mn{+y,y,ROV|겭F`t[~#xF:gsAi3?i>C1K.8~_0xUhVi?ܠ.!PayxŒJłSpŘn }Dtڈ6OJNLj̄tJx&2Z!1/50c4,3Ra's?~OOЁdIZ3=Rn.sLkMyޥObY_sٖc(*ޙ*-x${\jlWǘtC@t@(?"cSt:HI`Ct"s#ʑQA" !=%EBlŲ[lGRL!(V]7C˿x3iź`tM&FE2dt0ֳS_lY7>Qc9O1I>j9ړFz UǺr4'CXap:I}mWN)Kv}2j>1@v*AjߘYI-BJ"KPdZ6pN^\FAX&fҽ1?w^KgHhnhy,չ3!(bohbP 2ܷGB7 +$PARXiȕ0sZqƛ-lMmq?]J'CKnr` ͺ5=@`SkKLGצD 2X Zqܩid`GvMۈTh)6h(ҿ2+J-j\h_AaBc?8eP(dS{{zرF_(s LF5c0"0fy"4* vDFL߮fltrG?aHVAViRn;ٔ΄k },M:8 I1vYUh:f͗5[GKZ"x38:.}qP)'1%cbD@'B O T:c4tPmF3`l9lzc4f'?<|@l:a,1bT$a4Zߑ+qXz;ǭY{V7w{LDSc"ww.  3#":*;yYq sOnuɇwEb̢LO%ڥ. Lp)Ws-Q]DlRN@!rU5>V9(/uNJ̡uYoBh#9_@~%S1NMlэ7%}D~y'̭D⡹H6UCU澀sTLA>|7xCנg&+qܱ',JG. ף$|Yh;)^㪬0Yk mܱ~<2QrNEԖ,pSAƸ_?JgID.Wg: ~5f@et|b溢E4f`|r+|\dW<8QTEM>$ oweKUr9sA›eٞ B%W}B,@/ ͂fa?nr^S a#qٝlU0Ñ`~L]|@_6S'HvE*|sxt/k5:у gFpNeҪHIt,_J&%>W< b!482;6i{M4|{Ѐ|Ji'fC]:\݈h.xa*H$dG = p*6f~*3pdY=xh˼Iާk`S5+4zV-MfBA@(N5KOZXqzᲜweάyEHp Y|Së:wcމCbaދra%6PwW1d{9n6R:-.[ %^p?#VOaXՓ4MkOF0P[`x0aҰ \1R7uk/L(_ P'2e?tہSwvU Ƚ?I*a<ohzm&0l G(C)aYfЙᯅR>Jr8n.}_R%bĘb )9B13AbEQ&*EsK;5N(4}( WO&ʢޖ潠6ry=u%[ ^qV8jt-$FR|K[3!IJ2tТH`|&Hg{{#cNR/$hri`01O<_x<@+x'E \cfCTiˤ^%gMm}U(c:#]5Ҹ1Fֵ(PM/ ߎ&M8:OdLk(cCaQֵf*o1Ϟ+~rIMKzFNbXU3\Zgn )AynVeROX(Q"Z KzXNBzNgPhUoIAl. =CaB(x 5-Js[՜} AQCr&:СPnޖSAZo41FxvII)睾ޑ{^*>'5O3W鿗 ș\LySx2Cd)lj! 8z STNS'}Y6]}/" e[2HgǤKmq|Z@>eapnǟ!U5>WeJR09kF^(yѮ;E@NN[񄣨XEڄlzM]BԇDgZj@eK@Bs-)s.oWx0`l_* XroYOxI0'G1k%=k x.3H+$}Go+,x TW)yYlcnnȋ_ p xA6{@nCREϤsW(M<5`Pn(Y9/K,}"t~.My*FZb>8zRSp%0;Tڢw -8WROU׻3ЉDqgB8TFIu:AG6q]w[jG#pw)j6O}Pzc]œ!0n[4 H`6 6`D}?' ܚlA%R#z%ܰ) k;wz˰S,QDlNOv~tKr&1MA9}b)<| fզf,#8hO+$3^-*f)gQ8"Ag K /bSK/Qj|bֳYHĤ!Gʕ7HVڍjR{/SL\ᚎcoT`wTN1Pu&W&B=#b+pFӪubuMB*A4+Y;Sk2IkY>ZDbYBGTۓZO"r+sChyIgE|-\lf+f5q|L + \eH,\U]ҵoM2=8oIEaB KNx ><@~CߓvtZn4]U~5J8jnI F,anZd,_ Sc4AJt/Ԡp]3G&xO!cgm̕r:sB6E:h%v}cfXz+]` a)QOr:ޗy]X Mc!#GAU˺&<¯6q5I%[oޔoB{^'KʳvZh=%ȂaE3Kwsp_uFn6ؽf|dGW!fG FQSSl"Ƣ.)%L515FEXoüNCk*HIk97<b(?*Z''7*,^-jy5՞ʘwYq*"dWkalVYӮwޱ> hNknf,%]ԽT 5HhԬ2 M j| Fa߼G(q͋,MdחNspV:QĨ筇'lc w` L(cVB㫅cp).+}#jqRL520!NF4Ym YQ?A;mC~kǨ*QݳD|6>jrwUn۵i yQ$Td_F1κz;& qԦm6ZB?lr$ݗPΦxYJaR[YL eƑ و2G49 DXlzrnuHp֫d~/@Uh%Vk˽QdРǺ*LtE;kvdo}?cvոTH25|i'T R㋦n JZ"ךKkala{Vh着*|ߛ 3q4eeBF9C4Uv*4`Te fݠ^q(&%ls1` W=vE›]69p3D$3:g"GN L#<%&J2!+Db@<(}9 (<,z  5PS1q2odS3L$Pw%4*zɷ~QrX :Am [4jAwmX5Qm/Av-&=x-&MM_`洨Qoo9X{-1QW3$pex  ^u3 ?e9ĭ*jveŞ:\Zߺm߇@kap Lb29 QW,P%)0G!,A՗axb5?|\/NMst\,PҐYrVכ_YNg=6wxc't|ykrX5UQ$z]sS?Ï#l{,n W: bM[LԝgK&+F8"uqaNr\&:h]˨^@>(Á\?I̥-"v#RH KuპsD׮Lj%%#-6tKsˌ IS>h7$efM;":-ܘ&ghEJ~jS_֚F|6Gp"4LYiV[Z8wx*?=FUώ 6iotNFN`KN-m/*]Kٳc,OU-7<wR/;Ӏ`^1Ghv#\;TR_|pF +WK| `PE]dȱV)lnAʱ$<6eDg ~ P^F,OI?st(a|]Q[Lv*MQJ˸$c4;X ?|ZXO:QV?nh#"Xq_Su'F kAU?/x 7$9 ^ѴkcvBeTC:c&qcnɃ("=a,uc'HƝNУ} }dۖDJg(ol|DC>뷀Ff|ӝfEp5Q.r/oM.0b\VoZQ'gX E\H S٘AsE0bϛ?P!eSيשۂa׌76~ LL`R 2ȹcEIkliEF]P1!P^Y ԌϸXItc/WM JG `:mVwZ*Oa_SQ<32I Q}7$IǪE!u-!E c/ַSyxI]mIJwuyH-]CQ*~g2m TS=ԭ6>dAZxfWoSԹd[m,r8"z5%W8}k`+|ʩLݕ\W T]e}NgG?:SFa2&q~Z?_Uwa~ykТ=N Vg͆AXGM(˴ aaA.ynC0I>&lL7?\W;WV1@\و5=iA֓JX,z;qIpFɯT5GZ."K&^`V fCU[SEHqLGX14n+n g;T@ ڭfˋsq QkAGj_,ͼ\ډd`ecL7<|<0D zT.hwAUTtpl*הkG ,|WoAiaKߞEfO: Rõ0{=qW K@z+vW,fe`Z}0N #*oQ G!<ȇ C\ cK2WE7`]؋31 ING;D.P '.\b{ϭ+ǗҬG9|iU=)#1׫},ѣ-ڕ3MOA4jƛD ƩDR{3s<'&i-^YRr/ԃcOvpsBJIv>"N~+v c\2WgMR~Dk'.err@ȅ>W$8ϊ7ɥw5zڼvJSXL3z連RNhEԈ;y1(]lq)m䨮KڼM7~x;Fݐ)l<퇚ސ:S][;k>IAsE2lbGdDj"k4vQ# S$@b8T?qW VQuM>mӧrcR+%E*7HP!w\:V&2T)Xo?FdՀ mX7 fg/(ޣs̸`4N$%Z%R`/hY+T-vu[(U[0b)W5]Fbs%,ݛzeΠ*^"/u-Flˋg݂qAg'lVhHxcPgbˌO]&$Y>)Vx%|kDŽڊ po~MQjjY 0R>̶WTpx>:8]Ol"{S117jyNfy4%~!!6Ҏ._ s6Lٌ_w$?fœ:!$6W]>@|[Y+7{^G, M`R=xXhRӾb_w(aQi&Li J}nWoe`)+R&V &ѴBJMoܿX[6Q8! 5 ?[ЛUI0_qX J[oVݥ|j\ :~`,md\K`. ÆJ[|FB+ 3iXYrTtx9+bs ir{G`攃A?֪a]E:E޳W\v([ŭ 0PQ6/lq[D}+ÃlaoS:tD>҈YN[i?rL 4> ;4JI?"ְAg.b*7٨K]x$r$rڃ-.FM=8dWqW~W>D_q7f_q(Bd-J'z;eu'qFgjNK2&R 8 o{7]j* 5o6MW `l$HEI,dX[5+\V^ZE)kjܻaK0b=FZ m?5+2#&TUio׽']VOl(Ohgs1zlxFpTa0: N=h@*6>,E[ASUB'<홹ڪRE>5\2i )l2?B{gb&g`tm隷;+!q+ 3fFsC ^hLtٿ5Z5@` I Gz&X0MBj]#|~Kמd .BtO/%x89Λ*P'!d~5Y]nw?ZalVBҢ.hQORR͂%a6=jw~O ٛ/I0=+>YCfm%#-Qx[6EIfofΝYʋ֯.M{H%C]k&d&˄qIg7:.˜ u +lGWIkTt|V46JO9o"xr˙ýaqΓ\wկKS7vɄ",NӐJҋ:!eͨ;I;HzJr)*lD(!IzHO#<+I!=`I=l*E*cd.@byKPg)ds=2+@TteH?뺾[LӹgK^&r{@yA;5_B{,Ciq'g hA%VPиnK"q*)eOĈ@M?>~m&w%?91Z'x}0rgDGmx1sg|Uxg=Qe8xXG?aHG\O(OeǎwS~4QeO[QUd*Kĸ+} +&&|x>*iPw q 7u$ d16E?% `dJ˯1wtvt_{+T n(#jؽA]-,˓M4:ϼ2Vi na>S7nZ=RXJ4$i~b)Ϭ|Mhu]!e&2lRUwsLE/+Bhؾ'5cr쭰sT!qc.R%Ph^y G0C m>B͐az!_.}_F8w}2xmnC8ČG"AetyM:VKNDilF&`CFk:+f1j_DR*jt Fz Khuw~> 3:p`-DؼCOi Ȼ2( Yvs'Ñ5=S4?|/+aDEHhkm\Y$ȗ'clNX6h&>d\' ]4⸚Ą8At#d6XfR}DtzɈg8iЛj5IN-(^OPݧn{ W+iE@RQe9~8kcnhhg~sUN$x.'lb^TaznKohn5Gs|nc@rCtT A;~%? noy۴nNK@5/Ԋy@mA9p_cXYlSuJG+wKc]=g+BMC^XNeQhuLd&RI`h{טVmnHYju!2D@|ŲZ<^f#v79#.7 )xr3:uPsXВ/3gZƂ8hʱ,A}׵ӳ&@4=X8|5L D+KЕ5M̡6LuE#Z; U@A:#bg|ԊUX_:"1S-zr[¦!GocG"{+D6 d[mWӝF-B]DǁBH2Eg"8AYBĖWjv9*}Q~Aπ ,3IE")n_X{|Bs^;h(GDx7iOJqhېb}ÒZ@΅kLO)MAvon' m VYdk렢\4.Yw`gSО<ܩjx/ݎ>;] & өSkE9oHĀ6oɷZ$9SQ8wxE#AH6<C@ԙ܀Ѭ,nu3qt[C{ESBl&]bfjs)$5-ਇzPfW\jVZZRygSs "ӗ%37v|aT#9( v]ބrxš$[DeU,UfQdGK{;{eho%FD;tҀr Vˤ`EEˬ箌ꆰ =g~?봈& J`%cGCH.3? ftAT(q`H^оUo-mLug1Qխ6845殮kQ2x"12 :$,h ju?Q`D=-Xc1|DDi*~ z[NddW{[PhϥĵB>5P[쨏͑d'C=y^ ~!= ' 8%O@]_ Y,A&wN _>U2bGoİEb6@q 8|Ǐ9.'!#H5:W>/a(-߭>; yhIL"eL<9peARF5; Df2 ?l']Rf5X('_G GjC ͊lYMD\9(f+֍II5uEQJoDp(niCgGNjrp980,.wFsL7_- x^7 PlL+̾|[AGi"*f3WZ4BбD48Iѩ TZY \*\-tn2jÈ4S̼_hm^X%590;Fb URzkl0;3(!O {֖ duV(.c<5w3G˃n "'hα:[lfHw(pfɗKRx3K;4_E䨄7yo_-yEȂ~YxX3i>*0Q^vQCz_yu3n4aMl3id*FBH56ԫi?dwMIGj;u1`R؝iиwaNFC]Ln]8N]kᝮ|,3z>Pu5F&Kz 'yE/*pj˖41E籕G/uB.p)987@A:-psĈr߲p+?Л䛮?{瀩+RfD[9Њ' /gZOZ_p$))n2n򈨝!{*ޣ ۆ9҆XWhaq :G8BJMZ@י nB 'ă5M|89\'\nZWccil;̖҆!Ee4,d3wk!9υ2d|Ns7JDqs @InqBLUNR24g{Ɵ5$!^HR!2AQҥrh; ^ q ƑZ.@d}`3,)A>)NagjGX- =ӎ]E8+%ODU0x6ʝ017NVj.kn#^=~:(XƎM؊ n7[_ W(ݼVp<ÄRQ3k4"/&IYuԞcG0#ASm=^Z3[eM.6+]:L_ZoCOIsCP:k47h\\th\ܻi ?/_AWZ߉r6Y̢llDrDhv2Mu& >#΅W4r"3Mr&ˎSM4<銮g]L)Ir7,9U-3@^}8_ax:vӌݫ{QT|$Ӄ7A;f.ַoDRR*ZIEC$/M wZ"(5FMYLnA/'tBrSgxѾ<<+ d6(*Iѕxhp}fn,{ xŤT΄[978qjQL }taCFV\:ɒ= GY bN)51ofЌ'8,(8;W&dx+MJ_LKs@YM . khO7iiԥLD;UW=nhS egD@'Df'cj%z"NՉ,4K'd$DA@7]QO+_Nji%4Q_E$u|™Hx)HLxŰB.XztK\ˮ " ~P]j}7iLav6a$7|S@be7-gx;G7_'(y 45Ǣ͞Ez2b+(߭|e#Zs:q"s=s&\L cT=? ip̅Wz"gبdϾ)-|?ɸQLHy 1l((, [ČmS)'4ZKR0]C'5ȽTbwt8#t$竰OE04Qm7$*!4,$/-K5^~o<^qYOq+?@6C&L:I& H4ުC:黀q &H%#I$J6_Z+Bp>JiLY.i26M)Ҍ9-_ 9  i!6u\2Z@y 盎i&[08ϗ2 PMw=}_0 AP,,98gH;s^2AW|C:k݇)pv[->}/*&_ܱ$5{H& aKt0/6Z1KLZ+MWbDCKtB>ʊ?DRnp+tWQo@)0~m̥pOᗂG.b55:KܩB2`t9iLa-zܑ# |l5Z~ $V e7Fo̰.Ƣ*@ !l4upkԚ6)'쾷hXȞ?mXkksOwv Ǭմ(4҅}:}qm zPBWRstS԰SK# Wc~c %=g=&z~|ZrO<:!UYvP~`m_u mO2Ɨc袜"j#ȵ A[$ C~V~շ/*ZMo&п6*xB@k"'] )1iç̂N-&X2K[ZMH Sc9r˕(?skNxJ =$_9R(wq9U+MjS1ң:lVQ=*"~VcD/Ob]ß{t)ZzCQ1;t%mA$Jo*iN#0Vĝ!|U X؝Ԋٮl̤%S <,| _?n|Wy6<ɝ~c.2X(VDz5km͖-BcTڇ6!( ENj&p.xjb.T8rвړ_տ]($?Ϝ4Y2?6KO~n#O D"o +߸`"z:kÃV'f_q.fA_J{ KGOK^h2X֞&,ޘXU.oQZ[7$<+vB"0v qAnrqp4(E}ܠ*Fl,dʰ$ j# bd6Ss_6נAND's$Z'#^n-lD<omt6[~+bpئn85b6~^ݒe& pC`e}2RG!ѫG7;dX_ 3Vb 젠5z*#+yM Y{''fEcaڔZG%ݱF${)[d0Iޖoa+GnrM~YC p AOfŜbp-;m@<^T2:f)Iv%ᤲ6kY+s3 o0rLNdH :Yåor?Hx%~YrbV@ e^޲IqDK9Gp%<ծ'e I4WH wˎp:th58o(~mZWXY %!x^۳fֽ7џ/-.Jy(H7ޡsc!)/5AnۿL ^aETxJ:rGyqE{qk_ [a{+ctߺ.v$G55aWx7eB" *}Vc2 c4*6c]]]8RMwV3Mյ+%Ɗ[(iLߋco|]jvY0+u'nI8겲E d@Z% Fv63if{]w.NQHdjTd[tGѢܔ|{l~:{'\kpϴI#SA[:UG/͑#  -@24$0{HB.;VLFIb;j «B >|P_XCgp8HG'+i7q骇b5U54w2Ci}h|Zk:vLE^ϧC7X[^$.XoGƪTj?lyZftRFylLW  (L@ӥ4lgT>FȒ@Ţ,CuVhS7Vǡsjpڋ}WxUW NUsvLfAApif$Ts%Dcdͩ7 3Mb)qPHbPـ/,=*n̫04! o~ *,S=,]T+1q#ah ԉ %֕eql^}N2:c~/4 L-(,ߐjlpJr'Wqkozw{9,s:I]pGCNAܡZܹ%`0C)ê\ᯙ XWG~`hJIqs;4$, bw/f/*JrWcy44,e0ni0AB:Tཱི!!4@v'9CR85ɡy).w*܄^zf̸9t! 1Aڄ4S=ǍN HRoW~wWU|ӟ`\ծ .HMíw3&^frz.p*A YyxW{rPsβSfAl݈EZ0GfJRЕjLtܚ߷X50ُ6lq(-8Dl[4nOsƝL )jJT%?ډ(NfFMX ׼(@wT*f8&^yiؼe}Z! 6o[1K/2f[bǤ~rPsR/Sa ëH!@{ʏA$j >X?T#nF*-زQAZV6yۯvd\)1"V_OElh羚8%<2d'Bp͈P"`Y( xSNOuP>9:+36b)g m2VM8jB NIZyTy=\Z2G)CJy;Ѱg>/ 6>*ozH4'L)H"ڴdp~[` 8$~cOTshA""ZbSne;& g#`"s;mGPm|.SI r(]NZ ǰ>HG;"̀M-} . e$ 5v޺ː<޳.~~th7dF!uv:Ĭj7S55~ѲIY@ ~ ?ftC'-^\(GX|7O."SFa|K%Hu ޖR~yY t_F42ϗÉ]Vluw$VHl$ŀ)WWDM3i^~cv3S !qccM_L(\9"4_ƒOLF27ט 1J?Q=Zhd7}]%tM6]S&ƓΣKм<5W2]x{Y[5$ג؟PqSAΑV3d,.nB+Fut[C&YS2andbdm-`]mUmD.אId]ۑԕ ZVl4u4t9S6ƈ T ϛ)jY h&#%QOEH}}8$:(=IyD1&ة U0\[U LT.|o X﫻lr [*3ʳ5s ɰe˧T|"g($&Oi2q ddQ 0nj;dKz쮡:(u* gЉ0|%Wj[OyXXا!7P.!Ç*7a ((LZ7 ݎw'D+l!dm#jJPZea '=`7èJvʝ[?)L\AZ4p/a*ޅʥ?ܭMT6,vh*ZTJ9dKNϮD, ]Mpq"A#"oj~ 6}ǰڽ+6 H,M{q\j^uZEnxV]@]&F-A{-ϵcj$t:/|<9 {sCj 5FYGtdhFelLfMlXAzZthP=gP b;x*]/O/x';" ȳe/XzRiG c'y^WqU(dP`IJ⩐OwSlrIE E&LZ3=zTӁ8 MhOdw³m䑒WpEn4iA:2 ;τK\92wM#y)iΰ۫hȍN^wD}G:nX9<{ޝ 4;~`:SO{\.jU)v/,GFv8F:0Bx c9+3w~I6}I;:L.;ʦLl춺akC 0\E2  #bMeGeK988nYA~6AԘ$v(}_e}/,F*rdyuN򶠐bܓO+Z?_pE6 b_z./̇ɍT M[EwSeHv("BxGh$)xy`okh֒4jꄩkM ٤g>N1I&ykÜj뮃m҈ϖ,-"1)tbd^t X rC{;qs8rKèy%3S'V 7pR=J= Q2AoP͊!W!K Yn͗rzrK+V*[s%m 52LݎMS>YVĩxR1P[wcܮO/xف ڳ(P2-PV Grx4@>᧠,'Ftx""WX]fX}nYA=Xv =mGxhsf+hqJ&2C$xqa<PPh~+.ƨ&9&pUT}i۽aByP@:r1{f (f蹾4joYw\ME ƊcҞT5Gn`P"yyRDY=>n:٥昋[' 9;o{кG'&r0(FggaJסyAUO%@Dض%KuY1N@}T MD{Wj/2w+f*Z "Xd "4o坏Bh@eƈ/]a>v^MEΫ!s g0'.3TΉU:#m˺|`xyS)A&Q*a3@AK;SSj,],Rч4JWsQWCL+_Ui?@pl}U.x&7אɍnE(^O;(!xYnj_|Ysuu5=/ F[<0^v'Kdgu^vEv|۷w--+UrT 6jCXż2ȫ*fG_J';=T)b:[>,ű3pV}GBRI7meeuu~5T| ˲ A{UIy?8GY=Mq ~A8jvr"^Ԗ] +f aBf!dcCҦmi |-J~m_`6lp]s❗\ YƦq^>81HgFH o{udTNrg' Ի󥊹}A:2J.B Gx»(3ɴ=fiɏg\ה' rTI }BK򜟰^gtW/(lH12 K<~f՟".H Sa9 ԜfG2Fϵpn^I*nӝ@ϱ`cØnި00`;Lj%QY,1"r֗[.3Z$ګCy/q_QSa>28Ԧ4UEps0 c\1/O؝,/-dUFN=ەe9·B_Jl%L]&uS)ho޻ S_/sWMB0)g+E'Sun,֚!Cc|=x-rJBB=W0 "uX_zq9%wVy,(OL "1BlԓyEIiS9DPmV>//C6B?#EÄL+Ie{ Zf1v_KM^z ~<0wp.ڑL!#_U޺',Kʔp rHk%5hlE[W܅Ն OC6|v#[ڠT4 o:gY(I 8@X.꒸7sy@g?.dH)l q9 vG4oョ_zuDemy:z&G[jEu {,e~d ~D9ڠ+LUT8)p`x]BZ (ҷ P36RLB^s>߼>.A7ȮQs(}1#4сH" V0?AZbxPjSgXtG[8X[rV*U .mm{*=rI>8!M۴xq;bgaPڂPۮ vuߓzC^;9\|'PEOqM ȱWjr@7)--jnV7LWcŦfp"AAo f;8́Ky Gr?;φSk`P~]Pҿ[)׿:D;#+L!GKXfIO13b".‹R#q(_ڌsF!:~M}|*6I=Ǫ_rƗxG`l*Yu2妹Z ɬNL<>c~Pr6~A}d,sClqt|ݫ?`H4,P4noBY}D?O'z2v6"PJOfˤ:Sܓá C#ߘNo_nV vR^Gr|Cjۻ w(ߺ0Aŕeܒq\)M˱F1ǓփXgꚃ$J@H"ވJ}B9G6H)y!R@4].@5H$Na^}kJW a>|㽷Β5Gu<Z'Q)2w_ ~q/?aF^#b4HzST~mZsNS64FCD.>>BVcG O /v[tt'KėE*'SS$uN' *`Qi#gy-2I(gQ/.°b4u4$Au)Aq`#Et>[=ҪK4Es)uAje~ynZ E:(vW|+l]ȭ]@`xMrWBveղ,Ъ" => cFP|*C3Ge 8@fW5vE9&x> 'm~.uDhu'Tyd;puB:. lAz ԓE@7P'!u R-5Z@*yY(/18%: ss`b̽GMFıg2[¯8#LK!T\LjBjhx xޣ@$kSIҋb$aj1KH1;R3G4N60l&eC,N9=meʙͲw՚rKbu^'$ekAocB 8u,cax y,'g9B7S,$7HE ffDfr2?`fN[2~_mh|B œHÅG`X~։{>{CtGi{b;mӭ|0Iz3j8G1m3s>@|:vQ"pSi֛ߒOij޷_["1& cDZ9MRbQ^tPG =)ZJ[XV/Rܕu=|R'4^Z6TZf!7"0ݑUОuɿh9UL+5(Y8ār4'8maE\A2zH iĵLe&Xw`<+'[ƺ5{^7 ?q*[dVd{R[Ւ4xjr͓FTTACmMz1d dwJki -`կUf+ڋP=@|!4:s3XF{Ft'閷,:O'{z*jb^c ]j׼\8v -tߒ',V.HstBE6ʌ/5۞n0-`Ja{*\<Z sjX[q ^(gw)"PLsZִ!4`&G*3i$d~wj T;^|5 ) +̹ͤlҧmT-nmMBmn68,yaDdęd (?"8b&̖&E֙'V1+9tF#S 8)fln:nH~C8{fzM)e9{X0h<&xUJBq>ھ2rH힧TrKr^Y)#qH% cR`ia+v+). 50pS¹X 9 ypԀ˶F-cM`jZ{.Vzy27pB fzcwC3lʮ70𡜎A&o6G ók +9x1ȜVFx:E~,tI+ }i1;W-ikF`ZTW&*){ؖsJgdՐO$Ho֌ĀrA5DY^>͡#53ncXƖQ vd4>d O/x#0hp_T(#5Xh=rkẀŪq˗7xj,20٢"@)9K^2ˏܨᖱ^** 0ucώl؊wAE" jsa0GImyPɴ].uc|ju+ ֓= NQ&y6譕 %t]QuٰWnoPy3l 0m py,w7dK}hUb*“Ҍ!g [Q G =ِJUF)&q꼂߰hrs7p̑vvs~kI1$H-'?#WkzDre4([ "bđ@$*NI:N pr X 7ZNz{sh[g*s(Q$$Rp@~B > L J,/EFA>QNe֚ <F8 g+4|/íԈA:IolU}"XNZbjMAxԅΡU>=1wZ& HfK#hg6PdO%ϦI9JY^?南4zѥ (̓ 13}L L۳hlu^10$[B蜠U8ISLܺ G!k s(=+?2?YT΍, v-!5~VdXuNNc$T]:P~+D>$ҵ?+J˸8UcƟ֧3_ū#0(J_}mM@[}-b/D>-($(x։ʚؗPRQ q%##kHpbo-DV}̄Qg,I>Pf|4sSv-Ý5i\VԯD>D'9WHaߕ@4x~IW  PV<_}6ba?H%Dž-XluF`(iG!wc]W T}x"H5 # w_hfnXbCMWѐ`qLqdRk] N(&βERQ#M'el?#oB SDHaeyV XVj Oh؁L.Jm 3RcO 1 Y`0ИYĪiH:y1`ރש.<$[tɽTAU __Cg6͔ChӃX귅!I5o#4x=⮋qk| Q/vZa X`y>NwC\Uk}xЬ \;#YhGq2am.szSт[ݢS!{#{kOPWc4bQE^7Բ * Lu VcrьE{EE)6K;Q&iJsWj4F(vJDs3Kż͍ y&@)x~TX; H6HVU*dl2F w֭m8_|_sm㯳RI㈻,,)mN45!/ܚA0lrF++Q9QI&i/> +LF'dDTWtk\;vkzw9;}"OdKRʫܐ>Ҭ%,.4Y]i{(5g\ĎX.x'EdGp p`cۛbZp8}vx*%+#>xcSSY&R,= uN(=غ}\gR>A VP j8^;\!tvcC=(-v-G8QZĨD!P|X^6rS :ٲ:S[͈ihs]v>+W!FHfJԃKMi±8{dy;^MYz[Cԋ!݇*1"t4|]x;0Jv7$"yk*G0a7` S֊V:x4^뤔9!~q8pw*z Ҵ8q|p~jJxa!1]䓬_: G厀t>ʲSNWrM98>WfSG$ 1 7&RceWN[&|r9+'Ijz,}xPms?N>]$mF#m"n GϏXY&{3[ǹ fQS؄*79~6Fyh# v%{.Jֈn>fڀ&mQv ЬB:rWc?=8@R?oVԤ`̎fڷJ L,V$`fZA ܄ S~[4=-A<,}&.+򊢉i5D){,PK""stwmr܋=pTFTK&~w \@L01.k:JĘ\>#!:X(Eڼ9 H޹YB @yBWIh^osv%?jz322Xz!L:$lw\3rۃ=0NHJEg@Uޒ-=ɠ̵{ljVH­个FlxSRKmǿ\y;)|Z2 )SJDxN2EH:n0Q r;?y.dnιk5z(WnYLXCBw׷,kә ֻ!Mc]1mwK>/R\5=mG f6NI9`&kCĞ4wUo7oײ^$.J Pg\JeRc$Pwt:sPDkK9: 4N~Ђ2j6PiәԚ9Frl4KFoe@T Bb-kEe-'@@|GY'~aa%vJ(M@C ϘpԼy*B2SWuvLG?b*2> ,2|$h4+!6qLYJR*Q˷x,`/&GJcӿ1X/P#a r:V;tLp4Vİ;:V֞Sw9OΦcBJh,V9Oc(mcdŘ e %3\ YccV`RUa $$N[Piftt_= Gg3Pbo^~2<0Ҙj 2s&)Ǽ=l{7Ѷt9;N|x/\İ]BXFrKF7{$'; Y = u_x-s"-C&"'/"/?}z\w7g&P]a%.?%2e͘ q'YvL ˻㭴w4ܯNēQu#խeb=i|%tPf^ ;%253C$Ha}(:^`Ab2ξ)n0a3ѭn&Uט /Php!ISfx7vVX(nBY9[{a8fEZ'KR(DCܠ,iʹBO5퀉_=]8T\}Q:׾6r_A.ךeEaxk) k Vjk0Cݷ%[jtF@H*`Sh8,\v0/@Rő&a%C]<>{ކLYmK^ɐ 1mQddBu5>؆)OeM7-2tqՖ[vVM^U% Cs - :#~kX~7ZG̩)lʪaS794ndfiB׾v4.k9٧U{HѬkpcZp._.Hئ E_ן hqBn)łUX5&{ƺ|D@{\HIw/#`= stfjsMPQNYY&1:KyHz¥53h&Yz^$޿gȡÓ֕v;&3/]DA & ߳hj;+$o*DSod#W|"pS݀efʞ5ۂ2*e%pH^Ñ@%|80v♇ejyy|KG9u9SYN9R\:c4awbXJEn]\.Awm~ذn`?nӷ5fTUZɀ{U%NOޠp{0g3^.g3WX9:XR^bWJ<2 $ry "`D9f #Vo:BzkyL4x)jhvnp)AKDtd7P9LrP9vpD>xU%GX/FQ7O*Ͱ2GflGq䱟kd *AEwJ#DˮϳGrS[d B`^l]Q # t&Eߵ{gv,A+MOJ{qI'[`d{jtA>ѹ 0Ms‰Lަ8,omyLjKtf{DKst%"sl $)VGU@J@`4R K:G۬Vn'2<riZ?1'چL *k9_ۈ%1F Yv(Lߏ}"*(e=BMkq~)]L5e(*[wApnAe8dMEB\9%~0i^ n\bMDM˚JwME]O;dJN#uSH珆^)fxl$B>n?? ->;z(.x@Z*KsbY+wL"<* 7b֜FK(u!$),<\j}fq6t'8:-|s5Z4#Y.L2`w,P1JniC}veۮ0Eh5Wu`3WJM&&`Vr;\. QkJ]Q 4…qy!{v>wߪ|OY{['t։ډY|L@Ѱ]J>e{dB+;}5eN (GIM,?W*c$.+@fv6uNF{`zsk`o+X&~pq^赓wlWKJ^ )E.GΚ)nnɫw|x+#jͽ|bfw#=Zy0j~m|i'K;Ʈ1LksȅbLO>X8Q*_«LOH,YAlfm2G޲qy)Ai2G%v$nVҡ2KqO Ŭؕ*^A\栭RfC5>tpEdɺi>:bZqEylM($Foӵj2EDz U A;}r{ _g|g:PmJu=C}Mvj9@t!@%lsY!0>؞H^e Hި3tt&/PO,͢Hi6ԘxX@D&0>T?2>(5|ʤ,nFV¼;'R5A:uj19lߑD .$ ̫? r1xQXox2o%Jk] LIe)p +7_^.f䰌=_5zFO\Bn/Kd31g*t5HYE UD!N;.{RlrOkB']ii9(O2%l0#biB<1xh1!S3gLPbdGF@kS06 gZ |CVԤyn@S>#bӨEmGƚ FZ3=34-0>V.黔$ӌZ%nY $v] &>K4Pn> (;Mj__ ;&]~Oq?(&OFʓ*y  {R%^Qd06TJmM>4/wvXGG(Ž؞ #wl꼤3NAb:96-C`٫lXɡ2ydI>=:9iJLO H`ON(tQt8{Z>5G R(ˈN`KduLR˜qs M  exgO ftSc}`~œR-Ѕv}{ =; u)ü6VI9pva6e+̯A5tm)&z `ZB3x@EkwbY%b鮿F4iOOr?J\δ@Zl*|OV%ܻ Yo=~MdȩdH >xl2 O LNwQK_~ :>{ݤ_Lrk8U3Jܺd}C{ϡ@J)|x(z+H?7Ms "oݗR;zbgFӋjpÆ4cnJ-U\&j G/軬]*aKnAL[5[c۸G7ת!P1I'\@^> oFul{KV$p'-J*W)萸َyT]{|Q٨ڿdr)r\Vq(LC:@N;ya\I|cڣ%(€oӓʃ#vzKM9.bnPl.Le9AQBYפ#3{k/ * ޔi|7I{|Kgksy/'t`;ԕBpoQ'|ێm_(4`l3<٧)M|ѩy;K ˛Dn$ rwj䛳6[8sF#a;1 ծzkwK[௯`b.zg̬0mn(ID*xm"嬹̖T1) eK<%\c""rrp;2]' G W1JE!=5o/Ț&8^Ez1!GMqO5RHG40Ny-g_b{\*C70b*ë0u!!@(ć {o\0Cjpp^9տ<KF(v5S>c']jD1eq̢9d v}-2AQt&YB8DClx4p[PqΣW7` Tty T Tf/}E]c8]W)u^aϊh!\\@Lն}@IK:"Ŕ?A0n%D2BIxcNLm*%Cp*}1c*.`f]9UG -D)ŠC!^_&S:rW&%A OM"TKɵ58Gz$^S\4-unb"'sJQ<BvK";W2ْs.P ڿnvwx}_|tOo.0~{_D;J7ʢ d"4rvK?p?^cKn_5M~H$z (|&c-1 D^hӹ>uZƎ=5wf:c 1*]cD?uO)( 0H$sZuF|'61dftg1)rYZuX܏rnLi|SG BMf Jx{@iU=eau)tęsbU}%dsodcڨ6"6`u:?@ms]qM&HM-0gm vQNb,/KI|B6^F krO&gr_vGKQvƧghY󫠷d$5(^ krʈx:aHvw#|~bm/^Ka6 F<SҤ @o#)2W FnbndGD+{;cmN=SdChEЀ'*",P\_u?8ͬ o.OL7 tiDr%,'& n(xnxIVT 8JM[dLzۃmVtdL9dsKUwJ2%|uG@3kdSQy̾"%piƈk7o<Gr/٫'qՍW,Ќny{^:"TGKRLoB:.AʺV"j# }"ZE#֩{eVQoX&w4kwS,:(*͹KIt~l*9uC^\7T^Z=*zm!mBr &dC%(*}O%Q:g[\_tlۮ?ה) y6"j@m*5֩9/Ui(.sG~p\%:k9e tQ8ڽASn5A^X{LL%s;zS>:&[~-vԥ`b E.owkOrPF21'ibfH}me}ؾTgϗ,4z Y!dly[)7nOO@֦S43؂}>/-Q|q; 7Y-zȼy$ U7FMqwWoȶZ`+x,o\B`Jt F;?(նmט@F}H'6,.+/79ȡ9p옟)#.5RLst,Еo2\.kV'X$ąK#O„6GD;Wi9ν<=Oaօ)fȬʊfW>븫mwEt"GD#^#+ZL?#͵u5./Qo.!hU)j BYdzjȷolA)2RlbwpA-*c( 1W؎xp2߈)N㷾ʩ ; C6"}Arv\CϦPMISZ+F#7%gQa6ZdrEKt{$dp)H1, $&F[P1{:wg;7~\P3.:Q0!R"Ɇ)t4;ΤdRPPi'E'8o0XW8\I~q ohK,`BxGObgoY0ay tﵻմ8}ƚE]VLxd(2W u~ *n{Wˆo/T}Zoo:9BZNG'!clD沏އ:#kru5p^!=IDq!K=~.o%?|`@`</F;hܰPP=Nr8qN,0ả]ZiV3'@ND*K:RQ{2 PS] ?p j "RČ\Jׇ~8/;›Ə0e.+%KAL(Ƌsy] I U&&O"28G+<skʼn<<]Ӻ<Ϥ l(]"[Q]Q88 ?21Uf*WT)H8YȳmNK[mڕ|$ ک 3/MB%q)MKҖδIo_xq|8VJ&2m:=4O9 F K9m1m)4? {b 'P8ĵY]im:CMU1 a0~tƅ(!`ɊOBjݏ'27wfR ڊ%wvJ#D|lw-~`.0/bkRBEmz хm$>8 15?xXokçD\"pT-X7(I3O|^BAlf̢&ڳ{x<NQ]`rި =Q<6H8̋(HT@ P}jK8BI glX]Z~Ul(} (ō fU"ȧlLC@s+4i>4ԾЙst#V(<MV^W5$ek xr%Loy[Uvf ^ڳ46)O֚2c÷Q&){($Y>zlj2ŝDJNJT8'%bDeS/ btm*dcB c 8}'ДV7C -ʔo 0o&7 $z{iml9[tb;7=Xzf%Dx 4,xR^ o1WݞA@+#l0*wyJBϱĴl 2M4{-P*Pb͕٧#MkL&Xw r쫵HR.Ԓ؇vא"_#nXoe i VG3Aq KvqbB42Jh51]3V(WgTn- &A[6URF nv߮uw) h0r鰾&"a/V7N )Y}λ7 LupR ~؛HHbOKEdY1:-נ&7+cPn q콹Ay>so>b\*Da+8' r9lƒ7\ OoX%=*= 2qϜv淣Y'eXy)Pmi]hVJ{c-=-MaG&Cq\!0P3U7׶9ی.x:9 0۱`)ޕ#œ`ܢ C'Je|AGb&H]RYr \^#̗gu~p} y+*sU3Hb2|ЬoW/ZroK&(1lDY<:CPwT@ՉO#4Z T#GFyQ0i|m@"$0uf3d $kBj~ك廧6/F{4npuf4Ѭ,T#YA&!T}~54HW]vWcr.v!h8l_0ս!E+aII?|+LS. g97^" AYYiǞ܄#+Ž 2-]@{:D^Ss3:3zW[H29_L+QWwk*3q_j8-jȞS5ZvNMjc@ȼ=u:o16 }_ ١{DQΐdݷ"m7 -S )vzG. f= NEnBдA䭺w`^g06r>_+xbnH"#(ȇG0Gس<Qj dꋡ$Ͼ]ڵE#.593V1UۂK:B-Z][W5ʪI쫼Dfͻ z pn5鉝i{J:Mjx|d [",5#dFEUUŞ_.*zGpmi+FrLU:^IkYG?$XŲ5>9dDi B}UֻEA_jIZfP\ K̀|ݴCo-.wnrt+~-=Ne-s?Q[U @B֏JX7(<^ERXkQ=ʜ~\y*IWij`R<+Q8fӽ-e ؋5VP˚|:83g8yv&&*lzU˯P>yVrK2$$\ CFsT~(3Ӟ\bZmO=ফS:As.,}Rp9FdGэсPg&Hv@ESw(|iǟ3&Z!Rw/`s٬z>Z0ZD9DqLMnB2ȏx@&llxEC.!X7%7=z-)kgS /n,Q6;[]O5X&L~xqYWs8*DYUaY.+tt'lF)w't|Bxu`i%$Lqfnh>GkEez_ _q1{p RE6dPlBo!@I܈GY#0s'NṕaѤ5@Tz$4Pf]Gc.U 3X`!!@:` Sh6fV{6[.N\^ eNbos@}YV]K::+ࢌ!}!U+Ьઘhr0'VL:9`.{֠tnMXpU`⌈EpՌxqɼ6nA݄RƦ-3L(D AdmK=Z'x0WTx;#77yl^e5`Rׁ<⫉U,5;FɇVUY~ ϴLcKY扱:=QXbMHP.).L7R ?nɡk1^qdLj]`e Wj%Zx.S a~3?I9cN)6y} Q 1?a b)Yf5D`/l|M);1U ś)E>qCAPKɳu x H,Eo**Lqq#%4 `L퓐#[K"^(@u?s$Jyk~wKT$:mS_઻He*)G~)\* +p/}*<ſ Z!Y.ޚ;a^n%-OtB yIÚ80AfW]:YnX)FҰPmsoEJHgVV6]"ZzFeyfEWLUE뮏OML}0R f5]Qi{2UVj,b5 t%N~;2[u\Y1>+י}ZjY/6b2\(z‹glQx^r I}xuqBZ"T})ٜQ˲$Z_*ps{j\,p ѷndx 4M\kYfnGL@IJqkQ1 n Ts=n6ʶ(n)e>(a^8M1ͫfe1uЙlU!`>A!lvˤ|6m/qNYԢ;9UYZAULزѝW9WuUh7yfFܳ7!_0;DuzID3zXq},XGbM\{%A')|Aj"XOGNOZ-~Lx7oP(]cs)tkGDc(B-ox;T%_KL4 L9R?:Ssg{SwSظH/Q]F]fU\B5Bj\`QNB;j-/ß[0W@dzƇԒd#iM>QG&EDŵQ>N +nN o-6}Eܘ B׹ySP15f%ȵ*5E6IЏ0a4/ ?M!O{=EStS5x#S7B 2I0f:Gha1OnEә&"'`&̯= $^l+:Js k;%ns_~g:ﺎ!H.@niG&$7_s i3ApȈ̟ A~? l%*մ%PwZm%ЍuL|-!zD.ʓ؈HYDBCM4rxdK9LsI0Vvgy"Vlߩi>0ٯtj)=rRXD7fgajPȭӤ>n 4?T՞l5"&sPZ1%$g"!.;[92KӾxCJ!{xrs,??rװᥜE A"n`<>ALXBRgn^ùa,0KZ>&or6jQ5Felͱ8̚йsnI@x( }G>"xWޒEgルM,oqMa]PMM \Hi^nG/BW@k SI2@MHuJ8(b"ObsUUǃLckiKQ>T^;?ׅҗ!3umj2w;iһ5qiGDsM($QF8(,іksx{x .e>o}sKtbť}w(?-5* FڢqBxY>&Tܪ1?M`8p ,wDo~NMy7KZ Ŕ}'2 OU" 6JXzdn ;>a1 d _L }1>KRKV^rnRMY7w S$۟Y|\^!fqmM)4ֆ.b@M*8aV/m{l} Q4-]q2ZJ{[8^cpv4d$L?J ZW`2=kɸ/s 5/V9XX߷sz%ɑ leFyR״K⇅t˰8./jԫDgN=ЍM,U"Ps%ho1N<#PFKi 13p m8LS8`Yxˈo&d-@SóQavC-CdSIi1Q=^ox_ Nlt5qO@guUmVXr7,J "op)T/"1Fm %R g=>R{/vL׺I]"8 `HjWT*`Bx&܉?Hl}|5?izO˴(m=t ϩΨD 7%)FF^l 8.`[GN{yVhiNG.!5}@(0rĘa׼?}ڌCiJۗ&ԠP@[Do[\4{JܥjMXa4` X;:(y,v7>A-z㦔 ldm 8CC7g($rX} YPd zRBi9k6Q&PL-|hD>{,"ͅ}־xW՞eÅxa*A1H-XK&+/cH\X~jF/v[>Mb $gKvRGsXY ^eI2CyG,7 bſ F"jR):r0`Є*\`#4^>!C_ͼ1sal+*6 +YlbY;sLu|1MSW|w"wgD]Nqn$Z^'4O!UPi[eZWXsqs3 b˯/d,kH ӛ1l3]y@ֱk'F$Kvg',ŴJ8c͟|ϸ9|2Y&?^1ٳXx; upK[鶄q57i'I^b'.2(jC#Y2-=hQe(fEin@",V`WB~o`]_1E ±4ت/"cM o9R, ~j=jfOqۚ1ۛ@3 I+n'l)nCTu^VS\.ĉⅫrI}ew炳ho eAoT]rEx3g(;jĞI0RZr;cwأiA Pk/[3Y+t GE/"Os9f˕JOJE ɸT!r'Ō[ʤHO{J*\)EBѼNզ{jץ-WyT3;am*%g z'qGL\w;pjrL^EH;qE  niYI>r?A7U748?o哵4CCլMv3$`|oR_#s;!O`(Sv<;%Iu /39J^Eݣ.~J#24#٣d >y iu>BGI'ewH/ż~dOrꚖ\jĬΆdRȄKs}I!wme8Hu )cߦ['JaԔ K ގܡpK%_QAls#4QJ\̷9HbC"SkS R8_v+J6t\]zbk蔃w' q(\oY\P|p S}Bp/݉Rp:u ՜7޻͔ؗf,t譒)(ޚ 5u, 21uCjnqnz p9gw]mRy_MC$pJ"с^)FH s}Ǭ!T^P[eyjO޾hw UEUML坔 s^R-gG? egv}.R} ixW6&eu!gVRջb8V2il m08GZ"](7U JUv?T@[tv#r몈i͚ A$$""-g@\/Ao"Ț_cJ{hz1F27# ƚO@ Lr];sMYaDsaQOkL3[*dD&_u/j%6xopl0M~@%Ȱ&3EzojwВ12b"۷HUQ- Zk<϶~)n(1N=u3p&3Qp2s " ݂G HGkd8j5?;!Rߥ[#$"Я.A*(9Dw=? NitcSW].RCO9zb>~`~ܴgꦀݨf C~;lge"ͻ,80j˜Ϫ>&0o>&] ~JQ|)>E^E)>6m U6YL#GㄙTeuEp TA6@KkWej]K'Ð]s8gvG>ܸ&@s2ʧ/Cy{MڄNu*}bd{j)Adn!WXZj98[k,YP?"d= ȷ@&Jf尯ЂHkI% ԋ9l8TM) ̇?_ \?b\3+knth6Cu;\k\gσj6GO>&$Hwv}uoT&\J,寙^WǐsvG`Us:ڡ,B 7Ur4B\q?u\ٯOJG޵\ZNrrMJ UK82j`` ;ȇdz1A)V{)[,qzM#^w#0 *[\܎>XE.{yc5FJC ;wj0`ef3A!3C E \RC,MBR jW E(j\J%c}1cܶ4lgƇ\b&(0Ćtnc]8Jw"B^c?Zӥ۫U3r%XX^L iM-lDe>ӎE/3B%UƜ Ү/taM]:$nﵾt-*6JܹdQe,lBy:$nߒk3ϖFyOy? mlQrŒ= *L<2()a<;<+C"ixZҋϓ9[djfQDp:#']0=u0x sO[ %\ gaH6x?ңٳ#(Rը7p_zҕ7,w6݆Ekv6: ~jOuBGfU>Ö e±@ " An6,;S&:IL0t2- Rə ;18 %xugB'_w-Dy 0eTb5lA\29[6TݐuJP"C.g#ຟhYSA:ƵO`2&C7dr8!w3 \0 nmol̀LK\)"w720X+<3e 5nz&+"<1K2Dr HT|.UB-d:fi|Ts% AqMM Jf2ɟ&X2nj5Gx%C6)EI 4O6aw]FgLVx~\5H7Јg{3x[S2 0U{wMܔa&wXiZM| x;]Vޘ~/yiC2Jn ]_B=M\,Jx>+/~Med6:X" qZmͪ2,v۰Đ+wZ@zsAL  @- _^zm.D^DqPKN!pYgYe+/jur ;1ƒg@3I~n#67?Cn%;8oLNC4.ʒ:k})l-=\=y,.\(Rg9T.rLI F8Դ\=iZ쮙bD7(LnjVL b*`0C̴gS,Q2(C/~Aؓ8_%e*` DjF> E8/bn6p|-֫TIM#ןCMtj3.^`e0K; N7 oTv 5 =B2 q<;Fd{ج t/ r/W ]3׬ZXO4DT? @L(>h.Oof^.Dק2-W>ER>}meۂV:oW%No~Irt1}@1ճ zuk]8uqTic=}L~6:Oh>-ZIмd @ay}@PS=;I jHQܦK(wyG6!)e!BPn>8ֈĀdwJXŬF ~> Y/iE0Lp@RLmDƏow@"K.6Lug*q@WJ@ I< {h@Av0=Y,W= _"e7;W<$geqr Qc@m_qn79kz-<GRYjeNǚAޥcazHF"\Jq:5pE{ȥgTфf 43Z@9Vj )Xz Hr׷=*PI!A ̕0n4*9y_rEly1駐Dnf9l$j*aZtL#†X6藝J.9b*y9ś h fCk2f <'eN!]Jeo"ysopݛ̑ !9q([1oy O3{ɦ@IR1NT2ǘV%3݌NmY|kdHU@VA_=H?@Hdز CkF~mp>( 0;Is1Xs-K@W_cMp/w}ޙ9~c2$tAԅ x4O_`kz T32% |`IT~8f\A&crӆTo94j?`@+$.B ΰ,ʵxbAf}2Uٕ|VL?x4@NyĿI"1VmHD6 Q{AB‚ƄK-wIMѓ&^-[~ A:d4mm=le'`xM\j(SJWؠKA2YRCdGK^ʄ8oS?ӛ-& -"8YxeN `/:vywf)샫-j0I–'yd4TB칛l u4s^inƾJ 4"طںtGsnGjmrqh4T̜T2h5 #Vl'\}Nh[*ͼk,nuJ:֫- Wi& 7.^]g]i-5UEmB 󦴅<_$l# Q2%QBۻ2V) tkz3o j&y"TrD 6&bnxlz8p:NT0`_oy|Ҟnc}iJ4a|.q >c#&h[sT is^ (;7}cMJ4^__x+?`8^Ty%CDf[Cܠj, }*tSR]!h#iQ{heSYڼGw'MDیr;0rCJ aA~Pw$~eHӝZymڸ$09e e#o0vsnrFܡB,gyt:J-T;[e  Ht*҇D54`CIw0eW^H}DEAIMiF)LZf!fTP/y^fuKl JսS櫭Xz$qcP0]} e^<.=!V5B4%o:$iGVU>4P@_ ilBm-Q o01;zyW,1w=!i]hV^:Hl7FOvyp8.F,:0`:yjB|z?2E@djC2hyU V]<6j'UaSzO_*Ӥ&FhC*> )y-Tက L\ܠ$rk5驗lbDç +҈ɥٵ*t F6ڻ(ꇁ Xcn.^exݬq{mïpcviҐ^t]x#YAPϻrjRi}Xt7"uFIO|iF&N 4"RF–_ns8fqj&tƤF; ;&xpe]ʠv6#ƒ?ՠ2!ũ%x߉>s/],ub$.k܈`͹s0NBN5zj%&XD,Iw; / GWRJ- E7~ޥ:q\^͂NN%:*粘܃tҰV9sO@kE1`R?Ą7y7 i_Gl^7I"+k̾q Z9 P?w\M`fXpm 8Pw,1ݱR@ yu^K#w>ڨǍ\BQvIAdY+PIN}]! ,$9o>vKޔ]>I+9gDFq/dv'Ld˲,`\ЖhXMN]'jM)F|+"I9zFuWmz^?E7 ǡ+u2#Uv3vZD@vqhu;5qzޣ <4:?ӗX/ݸV92~0 L*5(~) ^2~)GɆ)_`yGd&P R q~ty&f' cX:NR~:˪c{~Tz Fx?>3N~| zT<,2v TJE5ovuy 48`Gggqb(Qyxf7Xl/:3|I>0\rݲ0X4{EU ϖT4B.Zd =ϒjQ(D+aPqn8K7R/D}+=iaMvsVtN9Y՗ {Q)QU~eoB,/s,jb3@RLNL1D)=4_kRJd`^ںh=HГkJVT)LRw Iفr F9 h,,Cz ӅQ'&!j/ۢ'#5e'-3H~,"M'oϨ|1CDDk0spQDmͽYa\qfLWq[Z R$ >sq9\ZaRr=\=]&J0R %$g#؃FwWm.!!?O~+.>mԎHίgԳrxB4W~Cs"?r; d ] S>VdFi'š_>h 0%} R_yz$Ee#@Ӳi6" ƅ;L`6_:׀J蠍}Im)t&b'/cLz'ӗ ;"B>#+M]%r4<# Wjc'?ۺ )ϟ_4q26SDe݆XI+n~Zt꬜L`*>MTwj͝b9P}a'B!Zĕ*dQIx7r 7+RrbqD+w$+ܳ2u:y>>R&}!غә-¿sl/9q>8Ӯ:i[ !6h!-R5$>`Ժx6sԫ3$jkǂ0 GVXEqw!Џ71OigK|D?uqOZm_<jեFǟĪ.ʭıB1؋g\˲2-KypK`(lCye zs8s*zf0:_6B1~AK@oJMe%;^} #{+drF 0%^#?Ό1n-!!Q9mJo%q(鍦.nZFHJ?m:Ӛ=s^!訶%Ɛ"+<=مn=o&A>sm{|H*Y+A Zݔ=[#ς% #Zoօ_0qH[N*S~X{Bڮ ̪ Id#3V\HqQmO| r7H1/vttׂ* } Q|'CC^fA2<]ɼN^+SϢ!J|ek,BU|h(@QhƔH0/}֧0V&n[;ldsˁxŃ/yl'w3s֩MskNn<= >)*۾Sx,Gޑ8IeP 1@jpU!ltI(k UC\H=s10ʮsGA\xY<%Lbɴ:OK ;{}^E)PڳOSώwL蟉dC ՒQ殿6Ĭ_O~/HK&0bwM9Ο8 uS>m:( *|=){N*PC9Qs7 ' Nz [\ p S Wzqŵn\:T//LFwaR*ont61<  }&rAWv,+QO}mg6 -1ePXoaSn~C0ljqH{$L;xh;] TȌv?JWJCW>, á:++7lp T/dAǶ Ps*m*z)-kifwh)SOd>T񚡟,ZHLlFJp`@uQ:dНShV@%!Y+xKh&;9r,:`(X[հ۹#{hiE0d&>.2E\ǣq׃b0R_"lƟoG90࢔nm8Ɇ ¸hJYVdU˞|7ezq|JeEa\T!2/_C5Q,("RVW1j):@ƘpiLNA&ǘhޮ{.T~Z,ZA@dtyA{U NH[J4AeZUUj @ rynWEliWf뺡 ?%6 ;6챶6!}v9*/My&F.уӢukxy'<3{Q0 –:ϑsBԒ0[ӏ3 ͞93=c KîeG\'YV *1G7-,7QlfY ;ٜљE-'b;?` ׹i׀M7tMyus;vY_~fDb4mw9HlyQ$9<]GQ+r37O*ǚ{ۧv,+0-9Pn%)wE KPMBGiګ6wJHFeӖ 1#zӄNP,@Y׭D]hex ^ et: *bq,JNʹ (-)0DsVˎ/w<6ҘC[ y!a4KW@{r:{j<GM&k;Bp,xat}D2Ϣ]Q/\fۣgRv-nQ*G=zd"^Msǫh ԶRqFY' Tד'f^["~kVt\kM"p>EI#W+ N}Xs %̔1Q>-~6 摝jHS6;W;!, `4{)r+68Ջ^i~2 r.Q`!^#O/0ϽhNz-vm#fJtPl](]]N걬6yv8zOl0OCؕͣGOLg>$yY:zanh(>z$?Uczc2&Vz!I 7]IVN"W6*k}6/`![`ד .qJRd|fdB_pDO#%)ìI8a0/F 9Gg 6'6Uby髧-*0PY\3w(̔FWg{( 4qXv A|Op̧TN9jrz_.N^@Sg˳08g5߂ߡVPNMbw "!y`56vGkj+ڛ כ3MuN'7A{D*ZHxjQ-']R:]ƆrU5ۼ>ɝ2Q|2e+e1^(~bW.1@Ehl恐STcߡ2\ux$| 綘.J iic}T8# mAGu;1шt0't~ dptҥq){O[axS!#R*+$'i ǫV|Vp-׸K8ܝOM 29Ka1W7884* j/6gOYd&cFR_;2ule8Ƚ`-^,qNd}n.v֤9_A %j—RF ۀ/k+(? VGfU]COK^ St Y)noyO,=sw0]C_#- 6uJaѣR3ˬAdtnĿjGp؍< $_vk\A'm ю XDYjPiW;p؊Fzaor1iD C : Zl Lb&1yBM\ā)~W•K_c!uYvs?{|ʌf{5A^8%tVΞg//aÊ% 1 m .j(ܨ6ՕΦzxAݑ~45gқM3Mw`ߋIed{b FKsݚ/4iս-0キ- I#8gSx#"σVh&k=Z'jjwY7rKv(-N +1 M*8(aozp.Ӂ^hTGQ8?a:s4:bQj2B%6RSm^K˟cXsiEˈbqg3T+>rLa:tCk׸n㏂jDVM D9Qs0^f7#иn$8d7,P4pm%SD)!74׹^pQdxFKAi0"\N {P7B5^Ǽ6AsMo8 5pځ)ad|j4'B44Yg+Y X{6 [mKj//PάgI`]gDc[Wb>{o5skӞٶ0+<l>BM0UۑH΋&/^hh}}KdfXgoUUiVeqhJKz Ϻ4f=P@gf2Zp@ф۰?8=Q돭?#Calf+@1]W:,KܝMYiU& ٶ z~zۆۚݐ!·wЗYp>XHD{/1;m孶mLS 4; Mu'BoP5|LYQ㼥el+_4ɑ8>/ 5$׆8rō!A/ga`TbL9Qo.vWYZv00#9 ={Êғ(z-cB F 1?8uS!%*c Js b$dތuX5.)\g:+9//-p.- 7טg4/gG)`M"e6H΢Ҙ9=wgv) K+amN[(uX绤$&XZ qQNA9F#(JOarSb>KZ+%Yx~C"}HRPI ن -`jE+Z:ke6)9Cy|co8d?5`3Ńk)[y}YGp@jKoFLSڈdБ#QWCݲ9Pn2hɎB # cU$Ϥ1 *3QZv*<pX+ҩu%mf&~nտ#iVuPYtBW(@sh,|^hXSPcԻFko;] DzEGSZ6n.* HьXu|φ3aElєyNȤD"!SLzM.2pxp"CnBdMk*dlhTn&-:(ÒJYqh́|Ol5! 1e3"x/ڻ:Eyke]Y.^[v9$qx.鴸'W3mϳB<&jf ֢s1J,\ 3#tω47 'd7Փ-]'۝x7#}C%x Q:I]3*3n~[\T򧆙z#DsXoݮ<[|MU[ ^EYa5#m= raө̡)n2ӼNJR.ɶ;)aƄ3uHbMH,Zgn+בSPܦ"Z|qQ*BitGSp 4(3rƓСo4-hdjB!{n{}xmMW˄ֿ-m5! [ e-}7ET0fv6Y*[J |Zbp{J'* ;Z;hD~y$M$f:xDwk/@nj!,?>AEtbC=~xwă٤WD?׀83#!\Ag=jD^Ԫ ޸Cc LT ϼI٭PԯCB:3hpN󋟄H^a9<4uUkq@jų8 }D-^rvH2=i7P!㷀|t\g>{_/l&?"r'җeJil4 _ '/>!ʾh0qocIkw:Tp%.("` Ǭy?~G%\(`h'A#vPЇͶO_ܲyoh|y=\uRFWNȜ[57  4.&Fsdy.G*?uI|1h/zCDT=O!(ZsCMѺ(AoH1>Ri?y)30fA]PDF_A*h?5f=2o@Tw+h3wr[@s/mN̞yA͎J"0\}bu3#N3E`uo 6@~aMU|?+6Vp,} K>[:a,u2}?^urZ?2ѬZF0P4h@.adEfǁFjK]"./ze(}Oym>]ڈgaw,Y*n`F*Es U\2hlh 8璒U&VGc{LsY Y{1Tz"|¶\X}Lv;3cь` V \ QeI BJY5eT;EC |c&a)N/ -WogZ2*EX~OGG˨g׺%ykwF"eQ& /cGXZ1 DAxsTa8VfCևEw*l˵t,JuKs }% ʭ=ov{:)8wrA!\/\Aw;iAWUR3PTz-|ʘƐ%zdWGUEBwG 0K)-ޫ>&>;Oo0Rl !!L$pt_Z*=n2ySceGCn\!v|XK3 6g/բK EיKg[^W{y%*1s 8]-4 ` Bo'%?Xj+%4 7Kj;w_&U$n+> m˔V!^T aT ϼE:C5X3tZl&^]nFe ) l jB`B9%oO 9 @$ XbZ>LRh{iߙHfzr*ga$#հdc%W )cN|eq9A rcY 5&Ȣ0F7?v.]*FfGF i&C^X۝ej-D!h&Md~aC{-,\!DZfĒ1#ouI\Q]nJR=#S^,^N]{_}婆N;ᆣB&/_ezE'kW{w(jklWC`0[ Q'!u֐fwR>7rVְ26};lXt:iFFU !%NtKZP n׵ɺcD2qΉ=$+bPFCs{3xAq4'5"߾@A0-\cMu CV0"c0 0.ʀyNHlq73D|T\ճ@|X &O9K=]dž_:,#Kkx2=^൨aE9z V`X-3.gU]*kXDKK]d֊edB:$? FuY݀G՘m/ᖲljh0gL2k:/hf ֳ m9ZYz |w !4F6Y napbKޛ"L1BKRc=ZFr=8m&"NÕnG6  I*;1#܆pvBŤj kK%{y7*K s6W$y0Q5}/zyiCn* %'m p>W~VgO`.9PȐY "c"t?kTtr5hYVm)S~pzw>L>"ۺ 0F Nͅg.Gt,U5Yiy%㗎h:w3 x=E?x4 /u2ޝ/4\v ē'sbWw [Mܪ,F7.7CQhO'hg'p.kׁxhYw/V9z#VOE˩oby2 JD=]:ڽ>VY;+k}x}öϻ}+4G{SƑ-s܋9o\z*gPkjP~W;X kr %:[D7gJA@AHمݒ~n>oO;noϭ3cͼ!} -&Y**>lN󕈓NPJזL[?zɤ t@EIaNNmZ#i~v68VQ6?kw&\(R=@fErb7RT6dfWč+9WSby~]W"A*AKMbaQkFPt( d{9BNV&]{Nܜ*Ow'&R3c 5 6MjH!ת< ̖P(b]L,;:ʜPgFa6 q+As(J͇8ga~3xXh>c5';aT4a:RJtvb߅wr#kSjdz;RoP[@0M , D4bc%P0qsm}GyAJ4]v6Z*I5czSEiBY\T;WD1 J>bL1ό\h?Vmr)Ġ{(tZP J%}xCe8=d8(Xid<}K b/ƣ:V4x{(oy2h`pWTAPȽ2+2zCiZqAiqJ7IZYRB/Pd"]T:eNpVҜQz2VȽ[ ד4Lm0ʅ+NAMg*ui*̶Ē.j"\q}B[{ v\$Y"pPOͱ`J<Ƚ5&`23dݸϞAsT ~cYn@ۑ#^g/1w-C;1y,WX)`B9>@!9̳ZT+Hׇee/k? s>QN`'?FZ3ƒ>3]E2WoaU̓_w 偑0r N_R? Jr DmI ݎpCy3];rp˻+Cr1%w.%a "*?rLUJJ5S5bM[# oMw #'c 3g7<+^v@/po~>P`Օץ&ЯR @yx'њV NOQ\,P|: p{y7"]83=&culMi`w NU< Xc@'ǼJI4eFNM@[AQ4=@;! eֈoE rNiH,hg՗blVFK|0٪ wv-HmX^lAIrGQK!`6>jĆ& ^O@ױ8Q @rza8~P$r[}G'  1Qߗ`$s&7fL~^ɵ$_Qf}L?L4` UOH)I( rR0w9ж)` !:=LH%t_zjU?`QaJ)8A0L4K5Q?ctbk#JEgs098)-浓.Q֗K(rXp 5> u %}Ka3%Ʋa_:ˋ "orQ@ݩDXV j )}l.!npּyj[޿/S:5F}~$,?R /Z[zQ δIHN;ӞU<(bIp0]Ԥ^cy\+xO\Bq(. (y}j?7cT&YSup ./2QIqiꮿ9#Ύe(3WHt|8x VweftO#(/k{k F+AA$Йߵq#UU:4-ؽkN'a^iM9)-p ӆ,BC9圂nGtCh+P¹-JIS-6DteNAX 4C(Tw/S窫)K)nWm .qT"1oLfajq_rY@?)|#!5Bw1|T@W΍0?dd'F%B>i^xlD)" ]#?DuX f92C>mjRFĨteO hy7#L։zu#+@܀2u١{6@d "C]kS>5L!z_͑AГz~"#`3- @s+6Mh1S|nA=jqVF<7TK "`>NT Rh% WL3BRj%mgZ~cZjzNO"YQ=.qn'(:pF^0yhSWLUkX}Rx^f2>aBSƒLKC~'q $-<"K7]G4Q" b27=)z &\.OĢ!;.%a)|14&8D9iP$K4kB v~X=8.~b _]Vz:LC32%|%uƠ y#ƙ? W: ubHm3=-/W6ANVNI_.槌_ Owͤ#wx>g3I5bsq..ZI *E"MICLT GRc!T,H,d d +FaA=c8sAU|#)Oh!UsW} Og)Uj9bBE1 }]d[7 GuQpjri} G2=pFa_<~ԯY,OX/ϐc|o4:`M="J&&ĝo(qCMީMGGh!MQ& -l*PAX"IU0rEWyع= 25(5;ހ^I-_\ D^'"dGKg`fEšƩ1rma2pp"vbMLAxRa*'I5 }}5!,H)' -.}\WCwS_fACJSoJGnl'`?Zr.10!-/J89]]kq֧9\& x Ӹ"\.w.$kra]JXUUtAO ):URj6<&ωtSrAqwXhɓ-><ݪosC&,wwd2Djҷ!&Y X)oCկRDpm ֎J 'A(-L0YeS(ZlHĄe3zt:x޲Wj18"WL6C >Hёگ| X17yn>ȝq0iɭrrB@x1KR`Q[)WORnPj2,Fx#Btܲlnr|\`5E̾OޭIrԺո?}C7mt(w^q wO͍=Ej!"atL}to mG.`~FE ^# XrgT7"nF}i@VFnnlP3]~Ը МE0%Ad3[Wr=(sCFa_>7c+ u8PY)Ò\ɚ$1?|t>1N/H.JVCs$F  exhb}z/`ǵ!v8T19ֻPzS#Ju/MMqℑuP6˨"(r%: JlV/|+;bS5޿hl`X%7rJy#w{ߛ4f2z! ~(+VhvCandL/RƙthLi""z$H#KJě'DX ʎ[IRPH # \_0C8>[ 4[i&; ͿëEny$j+ Rr9@gԗ'`GZ_~P:jslik_v`L1G_sVP4;yOWA-~R MGVb:{`3?߶U"Z OY n> T vozƖ [A#;wk-<( Ite:չhE$ֵ-=58Eik}EM]aF_zlŝEy)r7c xl[M())TĎ sRjń7,׎9Jpƽ@9.}g!=<0KRRs}{KK.\$aZ70_H YvF}K,U:6ZF'M½&n-}a*ck3CnY2Hoo22tDmbWs >g±I#kj9MLtҘ;lG"Wф}:}Gem$ëhTYZT][JO}=pg7¹*vˀsO;V>DVKV'mz:\[ zGoJ&xHu,F[% $ )z&j 1 Tč}9DW-S(t]"Wٯ^@B qdυKh ͂.t"+*mxP>ԟ]1<͛&ť^#/f'@c4eL2!fO bshMDzPYiC yۘ[[f]-8osH|FxȂ+K@ڄ]'VtE Q5Yٯ;X#i4UZ ^jTmb'Eߏ@IH2ly:l``z@h.Mo`;u`:֞&gb74JԁS%=֥ݜEjQᦃr` Onm UDə_ȍݾ!1 qP< xV +س1r_:ġw/Rqi _3ӂTq5^ wv [j"cFVLh;v2Gzû" %zwبҐe) lub pHw Ōes[zh$NJy0 ?o,zp` >Dz}jECڰ K+Bߝ! D (U.썶Gmf4W^xSQ=eUTQżLmʊ\(/q*~ Vڤ;]of wQ.<3w8cY™%s٢k(i7U4Oۡ:~$56=3ffSй-bnKOȉ{>ゴe-pgew[")صX/OfJbUeLW JG șD% (W{"an||me"]hMaI$T4z%Mri-_%<>?&u F\1dn1{ NQdAɠ>#0 eN( Ơ)1Jpao+ق?SdWܤ+w~T2 uԲrޔIEFoMPuǾ۱( r6 ǡ2 U(;4O=en\o=bs$ld&99#@TI:Lf ޮTjU*6γF1IDX^%,E pUܼlkg,)4%*VQGl}$:Z6y F8`B`v GK] W:#,+3Ó,g=SI L9{W`Jzyzs:4 ߑ5.戵iK)K^?rd >N^ Eȇ"IGGn1Oi2,i$&}/E6gbw?vq/ ֯WA}1M H]tf+C.B2^Jh*R]ޗ~|O@B{$L·[/<8AA{I.IªT < ck%q>`AkA>h:l d6(VV81kp_k5*"6[h4=sqOgJSXwa :'*ҙjz 5M ϰ9.efnte*MGqbjDji#뻣ɂL=&Zu%ƙvC1ڼfa%*ΒIC Zw* EgNE<9W,|y(nOl?ܬS*sQydjIwi*ͤ<ʳneq5",G1.ۯ3Wj8 h8Eda nݾb:hq"ӃŔMڌɁE%B.(%[vqJQϗ|;To8#aN RIL濞u?b2!8<5:ؽ mt}Y"IZ ~hkʎ4%\Z8H|[ȭL<")+XwW+|r-;ٝ:Liek@؛г+yn?*Zz̰} BOZWƣd4OUZ: 0 Rοd6uYԹzu|tFp)M5FٽÝQKṲ֡MpS0=B=]ZM8^}{m ` dvCl9BsqJ0&'PDίͮR[/gb!E#,gCˠnZ`K@@T20j_( H8eR1lB] .e "(C}p!E(5S\˿aT"t&uMЌ<e5 ң)V%_Ble>' 7L%')PxyN!wM5j7SeA,'<`d/v=1ǚTON>9 ,8YR۹`X4g+!&R!=ϰSp^Q8[FF׿QE?۽] [\ a͑Y45XsYU= :[{G(ƷݶevXM./F-DHV fw?XzԳ1@ zYg?AVN_0)trK@?ƃ{jSͲ#s|.?l⿞{kKcaO8q-FNުF&Jœ3Htkq$NN%CJkWNg4ϩܬbTD~0P ۍL/cp™w7/W#*J8eġVInm-q I/e̋_^ErsV>R ibfUcbp ]wk{Z923p27qi;ҭ y("8 Sf ˠ`FU#g072­)1O(Ӱ-d߁E2XVw-bڠIaiW1(=xq kM8lGB-Nbp8ɖq3ğWVAjחĩ|?M|/kXq|OfدM1O b]~<4Դ:U=9BѬOk,E?pQZTH/ d 7Sd/*yoƩ[{mj'QaH(1 5R]۹̒ 5Z`Y]!h!3}F[u>}]Ԗ7U8sJ;oLAj= TOp%z=lA19d^?kB, M\ G7;.Ǹʰ,$j W?+rf]' N>]6@=Koy@YKF7SjE qg&1vvW}_q:ί|]`8ٞxus A?&3 ;5֣$k V'Nx?- 6YPZwDyJp[]\ [#-W5Qb:kQOG.ak|diUTuoA j}s8mkZ~wY8JeФ6% _ ǩ_ f튺e@9e9bP ;p>'/@ȸI-* #AGHlKI/$|$NLA 0 ^U= Yw oC6KBA)LkC,A[&zNBW)]ܚ]f#Ÿ́av\ƛrK P`|o|ϣnGqw~;n<#zX-X'ۅrdh?0}nצּ8?WI\P+M` Ʊ6OF!Z؊g%!ޒ aS~̿[6Bg}\M%ÏTGxKfo<nXE{b_(faZ_( ~"XFu~ηM)8wH+r4B@WHFbz0E//̅߈"$]`.}q#[QŐ/Br´7񑔴\2RR)` }=}Y?vP%b*HnSH$WDn7+UǸlgt%JmM\>cq44jowYI4$IO2v)&ܨۛ8XהO3˶`Dv2μ} 6I*)bn`{THQg(==#zXgΉSd7 /:=> 5۪ccE~a毤َmݩΧ,CJĘbp>) }e[3p@ @[gf/k |B:W0P }6T1+Q $z==.n>s\1_NtZ]g A5؉iIl ^\:T%0Lpz!ľՈr<PJ!ǩȠX9Ӌ؞1O۳EL=wxI739)wM簷 * Eq >geTB[%"|RhՈ=-Lpׯ etb{| ȣ8AԅsyK* @uf[:drφH=aP4 _t`]F͚QOگws4iM[~pK5}H;};h&Dta`}g W 65Mg4mu}xżtٽNܵQIFg9I|IKkL8os:+L_z&}v &8ciw#@ %ˮK '#l* .^,u(nj䷚˥mWp@(_*'nJ)(U@ܶ\kƐML)ys%t(z t h?UǠXn _g-w؆$PRY4rRqD[z$( An !*)- Ӆjlws0kD] <aόX{'C=mMŪ\[MTn500KLh㍱4 RUϙOc0/V4cq'9{]M}k'ȧn"kZXHԚ 钠 lʯ3#iX B~|YS~\tRRUDدIxTiAdtih/{"cjp‰Вƴ;~y\a0zz)wt cWy}=eŢhDǤzJ_Ia; k~$#NN\v0uX=tr@!…jJF7w:̜o<29#5: v!R/XH猬.eάl,Z#Hz|qb'/г /[YTbT:xp)awӃT' J\Yx03SCo%BL>A? )Qʚų-Vvx.@7W'$֛):S';qJyxZO?.2IݱU-2"-t((+u6b*߽Tw&-,OyoD JtǼ"PDžϓ|CJfVL.e*.M$IƕãK/r{'^H|wՠMvO m'e5\兔͚R*4ăLdz=Uq9Zã}Gx# ( v+ǗDdc*8޶4Mu9hH.*RNfI }K3e_سqn5B2>I"xѳ˚d+nl"^cX X~jа3e@0 BcY-ynV#()G"FOtS6n&"̘ar Oȕf6Tt0Rx{Fv,mS4tpFwo'܌ʻ]Cg4.kyr0Bk4u`ҧ̍l_Opf*[_[( ߈=l`$ DgAcÔvsN( P=Ïz*N7ll|YʋngpqtM 3qQy+^IYg[ⳀJu)6ޢqu=q9O9W$4֙;1mqR3l%6p}{s2 J#[D-Mr'D%gvf H☴Ue{z=QO=ʝMfglX`m,?'dgōD>ö?7]z`82o85sj7 Pgvx[L7u9҃]#Cnz-ۓO%E65i Ga &j!n>p\wʡed"vTBH[=Q<7 rzlրL(5( z/ExX xTPJyzNߴok+0 9e~|u.|[Ms3k0%)veNGc:#Dɸծ8`7 rD3i\z!\jD6y-࿋!=(Dzdnmh d-UVej wFf~WT7JV5h8;9ͯZmK_[Q:۴OjɽDA)H^P܈M\(nniRӆZE"؍dn8$͵IBY@#RFJ )ddc V %kTg2l-gJYFP]/xbWmr?g^ݔ)Y7VQDN)C!wwG3!%PM*YZZ3wә"{YI:CV ƅh бВAК =#QpM=P 012> 6^G6'!9&FLje7qa0G"?Ѿ?.9a)Ͻ@!c%=aw(o("ޅW7X売u (Ř ͫ;mc C'x5VAfJVcvX3W\.{+<Ldp.o1p3YԠL$rgsfkgH N͑%"7@Hjp7f[{k;ve8re@[r0} aD|]fn1jqn!ghF. _V)<Te3W$!=;e͖9bGo)*ܰ~Eh5OsFw.މ }yd՝AOǏԑ%{AM]c*µkMڙ>݇kɫJ;87UaMx ]=>y3$wXdqڔ@~lM:mfr9{zmyr1!Ͻ>%&\g8N\u (kqoaZ lĀ@Oۅ~~f2.F?ʃJb)x-@Ϩ aT>.l'Mb )Z".jg61fLx8cLWS5#n&>oT5)BQ6R{\ֿ;IIūL\@UCN"OcرV@8/z DA4"%{_o\DTd:,ߋȜU} a87rILu>bUG"DJj$Łިh /yC:q17rp@sVvqްv$2/"eYgS't86D4GyVV7R6dю;t){[R֯Y^&6wrI@znw;QH8{$F1WKusMDEcMK);^,ș0}NA<VEZ t]^Q #78l1|瑡 H,*<0z9gZyvq ",4sm(85$'?7l]4ӧHYlrA{%2پ$pvvǕiN(څk@.b-XVF"O']UyF$ݭ|זX|}vXё[úqZǦ+.T9RuFjG}i𰷽˧߱ޝq@T _ַ'\Õ/Ux [UCL_0Taunk,R? $e&˜vpђ*gzyovh/M4Ym5g:qo1/!Z QsG],,O<'Ո1z/TvC@gU" Zd^OObL{K28{O_!e_:A/;97?~հ{M`w+[U-bR'r$۹9TŐ TI쪒)T&qG> џ"!j"F,k܀ՊOAv0=fm;sfo{wӰ{OsH Cco.:ʠ?<-iVjA ]pMF-'M6E8QKǚ:mO܋zQLmG^ʥ&-EXbR'бT$ yE? |p-88<ʼ^w, "aeQX7;<= 0* !*B<] ]ýOT1}Թ #]Cd ;P,-ؙU:Jvȥѽ0Oo6%VCxkfwl$2d-cPk>RH:K2u8q?5}٬$rr@Khuݖ ).Vۦ9O-Yc_!JCO/?R-_Z2`tkLN̒󳊄ExH_/d`firO["rb`ӂaDTBX_gfMNYv_Hxl֞CxSA¤0}h*&tw y|]]xJ Tќ{E%Zl;ƞe:6GqIIi:zk(iI4 tgƲ)m|WGV\S=i9"4^IR kB"Dƌ 51-n9od!Dm|Gڜ3!T$?1BPT|d9(tx?+&iC᭑K ZDžCҚEW&NPR lnKYh"phpvSj,gX \mQ-d:K[*w˅enuI_ʦg$8B%0ԒNO[{K- .^U(fiwCj&W+ځs/hJtb1}];>@I%ft@&w>{NUǐڙ8Fx_~ϹUF/anOiۼH: ]]CНi8#Qͤ3e턽̥3# p1h+[P>1QUpd t̫~ޔׂz0ʃal+-Q Z̊A t,EO:] g~CauJ#,a:T=loS?W^}[66fUx#' ʗ۞%N{J@YJRdU©8tD+ϛ>>6kK['r׽2j;+Z{eث"o`5٪[xe朔I*y(qj=x.Up[s"7hM_Q  ZC]|Jʪ9PlUVX:]`cGib`}MH ѽ?'WKt%es>qt(b&\%|Iou۹/HmjA ܻx~m9rJنYUG̛Ry۷0@ %0X%OA䭷a:<%KkkvS$( mwzP냎p3ރW9K4't TB#=57L@tF >#ϣXTIV^z`ߍ&kzyI؋189̯8H|8`7&"C'[a$v裉s> 3cda3HLvELn9Cf̚ذE8`a-S=-E0ׅ0XXL~Y"՚\G|.u _4e9^vIA&1 qW'nnt,wV~>Ea S]LSF B<\` m 'Com'\̕r@7eҁN$[]@ Ô3.5cAI ]JH-tw LvDzsn}j}lkM.(rD\fdS^G3LhcEA?- t˔}3N Xo ~9q{F2NTV$v"d0b +}4iɟ3G.|~я1h-$.KP}FcRpBA0j2QjPy-cbeXSMC1N 4ͫ(^`g_NE1ET#?'LIوΥ:t?KwSCiNs,{#d(LBA(S0HR i= fwp`Tl9 +:,v|v'ﴣ \AP_ OZ➘azQ*EF$ÃŎ`ڜm_Κ>4y<0Yҕl97DJb:kE]N3,̻anI(xt$i)Vz6v7P_ eI?^:"@xLOVm~ OOo#0)"aTiD X(A/5yVa;B*2R;w6Z2Fm =kV%,}!0X ed}+ O'^Q[X*mX!(8%0sbo;M<ćxln񕐲@CYM)\I؋(RkFs+L۱=26م:K3g/;-,y*S0bƆr=z5~SӜx=@~eH;FOWudKTE[(wL}}!yΡFqT\(,.Eá!vp{"\N4JU }3՗k?]t擶}0]MD"GYٛBǠ>d=GJЄIIQ{vvHοkaB.GmGERvp,V@Ю U=)QtqYy &=&pOF&2)%yOShQ Qf4GmI4n5#\hG|Ƌׅ4[`ye6V_࿛ cw.MzmNz 7slkhtzJs+0*kEץҬO[|j q)nC-w&j IqK |,(`TqTYz*j?a"I6v?wT[ܜ3O* S$u/Lȸ +KRGuӏ ]U>(s&t/CP.%KsB3⽲R7!ame&3 6Ía@ Q'hy)`G!g%L>H*_ISal)/ 37̏e)Kli0 *Uy/ isK94K9K)f.3QnfgBR Hz3_\ot3>tЪvG"Tȅ ~f[Wylbv'ȑINe? >/lmzHXߩ9Evc恁J9τuARh깉je@fr'l An Ω Z<6cJUE>d-\E4`п`q>2{,ystmLw//X`p{:<9Cߝc;;AN3`@%"~.$[bᆻo:Q ۥjgxB9GXD|/id:i%L -k{ֺ*Wn7&ǜmGE"U6}#w\-$wAxe@ΖRU*60)-?UcZU BYxE^>ZB-h0aL JWss|)PVB({כ%,pիJR1.p z--P3L@Pm:+\+5  `ϾAsv'.HJ&$J5C:*$sȮOK H.-荖d=b7kDs ~XXgdvd<,R/ y~P^,Sc}c~ - Xzj .&eZ{9+cshf_E5s3V{ֵ+QIv[NU칄JWix K}mEa5pe^SΟ.?)DIB=8Zv1A a}/ƻ2o+f6S)duj?z0A5{# SNN& vh{N9?dt"1$eܧpՠЮx2b 6zg,Vtd:7ztWYrZ Vv1v7̯4~ SC'd31x _̲mCAJ$sUWj.*?YBf'K }>՟괚ʨAۻr8~a8$R#g|׀v[,`N=[::~ Á]*8/Z%=]_|hWΊQq|Y킎%QȦ])y5IuHä [|þ{Rkv!;,٬_qq &j9eJTٟ߿Y>/(uhhbCGHs*Vq^tSHzEXzN<(iz8Bʲъ,X@4V-㕪 zt?t^:&hкM+Jݛa.Q֤lW|J&g[K;[j6I<*WDPx:`A\#&~NOh<\n3~R*@:?s {kp}7ChpeLA' )a =y=< Hy"XJ%TL{76E68Xs`65_c+AdD-inh~j!=-H^ u&{b=!G6#T Sl{ "K(tKL?s(0ȉL5Et \DžJ)jѓe ϾOXnFxvYQm١ݾ/=8}eWx@O#>xjîNhAnk ЧIj /XGBW`a&5ϻ9>x[TIH_6Ffc+r/}YC[J7Y"kh'jTj25V6.Ձ>~d]P,Sy{Od iA=6m,Ϙe/לfY +AovqSMh 6e:8'6,؄dhV-Lh)$I9aD؄,ׯ/ʁ?FCMKvDqWfAG/w-i\GxJA%m dςsC B&mmǺ@*Lw`6=gk)eC~OUcX v\,/e4Џl'ΟH.i1^bp7Dٙ m֏SQ *{́Ď;;5X% zpK]ݜ|m\JV/QW_o/v%ngCj},\1゙b.80ݾm/6tG0a<Ϸ8Fܭn\~D8+mC S+Am2- {`TffX:S/P fe@u)=U "LgBau#pBxF 57G%CNǧ=)]`܏rD]^tDp=fYLRZ;ˆNNvb'K-' h-챇E,L.wCel5ػO'o0@5~Fa5IRzq/)7Ӕgs;l1`]P)^~$UGs3eDa4n_L̯zU:>ZFޜ bi? ac:C搏J $g$tj̕?(wPv-T׶R)k0RJM;圖?Z`Unn?-/3FhVx_]x%0FE,b4űԩEŤdd{$ʥAy$wϳ`HNj9+\څJP/|LhL.+?„5@GM "aQ협 oCI/NweM5VX'dW9Z2m_Z9S64tE\ܞ̫F Wb}\^Hq|.%{:0V%$ 8nJj]b({'(ydX7Hh8h/oL^=#TCR1;MoX>#QK% bYdOqBmbi1ɠO|{0AʇXӄEYLLJ!R2]'?NU.e-4ނ+!kpZ%܃؎ŎX+} ݧZZPυ 1¡ =on cτKv $OC3(VXU&?{ C`y7{?+˚ f܅Q2w˽KVKF).=۹&B8굣P=M#+5-K+YnO$x:1QҌ}ƨY2 b+Cb6F9Kv2]19~d>X3e06{'鳥K:' 6h#Ijjݷ,򼷍% ~O(xA|z-I5X/u*S6SQ7 E\(_6 TcRe=nńj^$>3wk uTgdTmBL R4SFi.#[Ց4_ߋgd$Mdt׈cJ1*פ#x ,T-V*,co0_H04sSJx`M̐`;Ґe~zH[ {xw,%~q{)I7Z| #;aF2lFޭz5$&1-Dc>.;skoJo0/2=8)aJ[}0B/V/8a{.魃@"<"m䲯p]7"(t"D7] R%:ӫ)[JY6_XBYzp쾄فd3HO= Ҏrby΃ #M=)ɦhq3O١}"4]!ֻr2H42?2{N8 /e*iij:i4M(%=Г$ѧkdc$W8Q?8*@qG=×%i;'^*y2<}%)8-N ;=@AqL/!s#z!{-v4'̞-DXmTMHYxO5ݕ> ƄN ~[r"~jmATƱU>^2ʖRXd$6[ò>'W?[# ~ңB_K9^rMd<ݻsHZL$#*|FY`Ѵ~fJԓ<@J>GRac,wPCJ[{fBR%;M1Rѕ4-{Uf|ƒ&AgYr*?QAn8k}fӘ¶`9!.ڤۏԭ#J4b9Ҽ}kA#⽪, p 6)W^@I~^&?!/I5l1R9Q =>kŮf.zɩٳ*DQEXJP;9o`߃ݮ @މ8]#C$XhΆ+D-1SPJg@j|4u}BRN+ⵦ+HvU̖MRRcEg((.f ObLxrzm$IzfM#E6@rR8cѻ7/j.saG12GՁ\3e"-ۭX¡oaFŎ7W|C\rN%3򡼂J*Y|Yd^LVܽm։ g?()D^Ɵh)n(yY  77@+齈k,ZF{ޝVX&;‚mr8 U+r>nV: g(Gh_nED0-||ޘ89Q^wf{~g֕d,M>*7tJámxHiJ{hlX &Ŋ .-cֵ׏<]+o/+ÑQ_}|)^t 0k3aykcIO'R:y'>0h.BuiK;& ͽz&X#jrm)-.~80(=6ʟt+fӫ{G(2.!NQX1td9CtSo 8 :Pa!؁gRh0tU`75`sT9#xc|,f].vћ\|"hPQQdnz:OF$NqtG1mKҏ.)v)ۗV^)L7wgK(\e`mW-j|z.~'^zPlNeȉ1 ! 9IaS-B͙ELzq[ ǘ.f`-pJ|N)TU4I<6P/3`~ʤ LaeZtbÂ-%d 5(11%Qo: &/kL/@k+%"lS͜M5sQ! b7D]Z|*;#kZF` D^b-{ .!1-b m2>}!.y %{ym[zhצt_uo`E>v @DJw(m';G>O+3ri9a( ^s9h3Su}h<'b_b*r`Ze;l0)sz"I;$Boa6VEn|P^@SAA,U ΰy鱯-)lώ)\q+umfuDžK"j2(`|zQ PIo?մ|9O)Bp}dhYI>/1hNi )=P}8h"?0+KnRсXF YP"%hA'͔޹]oE!FB a7Jv.'z";apN9xGZr'ħ@Ka_޸ {,o1ZKM6Di *b"P EݝvNx'6.~Ml޷R,Z>L⣥/'uq8ٕgRfÜ>z,5&|rHɛ_V8"7nVygLHii?a:j|v|N.g87+9˴_ogů49{f#Mn-N2g/5p;y8i4taʔq3l-e/?K 祂_EE%겕2S6݌5hQB[51VNڇn+EFmv"b)x8nw#͛bD߱SL(C`yg @Fk4V> U<>زէ9OΰHn̰fΪV`:|_V.A#Tmӟ$~Ia\xA\n)2b sA^iW  '0mu1SitND#=AtnHQo=n}t#HM” mʝtEA6nUpuVNK]|J? B5ufqU^a"lͥp(+Z^`NoIڈ E[&ՔDuvBO J),߬ 1q/_{s_ɩ gO&UGW(2l+ $}_9" VkoZE桛#Mf>WvBev~{oCܺMaX;*=^ҏtZmrD6Cb0`.'JLJ1!5'_ju1l(uKUBr@0!<*QjшӱjnSj;Yq?a|cGюP"!m]?[C{bx_#(Z.P.EN2K\C ,? k!a`-Jx&kwjh3bM#%\:𭮲xߍ-T!);oJ_HW09: ^p(pW5ltj7D!7scK*өC%5 3W] \YS"cM$eMs=[]ǦN,o}Qᅤ3QȄy9Cʍ./X@&>ėmF0Xʄ9oM vPSB<˅<{JhG=F`sd?T1}*[ucv`6c `z ,l5>ӒNOcZ8Ȃ |c >/8-UGvYIY1HT.(fԋ?yX(pږ۸{>i"cAҬ'i~ߠeI7T9Qc<jIU9l W ߇ٓ{ *8 Nc^o_[Gj65J z g& m U< [D#!uw_޴@z|D8 R}p.l{ht4L;_ǘ_ ?$6ᢌ40v!1h q?sSTq1&=RfS͞,1_A9{GL FtIl+Z'pr:(co,?+5@7um^ڡ4qMQ_[^]-W3͇ 6OdP.hz;|ZtBh5U idTgmX `IX#fsPVw8]?c #kkFLB"Ö+@bMw{E7Jz?k`CQʼQqUWsͬHw((!Sj8-ܢ_ P[ÒCe˶M]^rGOr1n0]֢!XisX{:?Z|J__mhiE5oMY{B:!YLN;r/%݃U75}_ʪ6ydL,~17_h|WуZ@2m Sr6q۩̭*>iKI(8 K5ƏÞN }c1E@|t/g~6eIYL϶`~[֤Qd -% Qt1[3<̓3jdj NGkS΢;Z$Gx}yq6M}8:E G }pTZ5!6IL:R|~[-;8Aak | $1sxʡ6dSң'8X^esbw4gsaϐMFZđn z>,K%wK_N@<}ߛǍޏ!q_u&;~HGGjwd@$A"v{;A-t"޳5r!d&x%(! -={kҲ.4SF-Ѹg,BEdBwTNEbxD~M %Ed[CS3y*xU rQ4<퇆c~ y 9okMf|ťIpHACy"Lڂ'.\HԶ1bXWk9İ?8r2i[.sq Oͻq<@.qnsJ;܏c^d.e)ŭQZw@U~]qb_:Daf%+$N+ A>c_r6.w7P9`z_6 /A4$Sl42O84"Qlj[;/JҞb׿K+:+yfkC:0|^I*Mܢ]n*y~e2 5]=Rg%jR!mp,._HP:N/z [V~Go)hPLS٣@eAjqu2q٧)wKEb X)Qt٤y &>5>j(6X%rj(T^j*LaHqr;Cnr{RBّ>T I`*jSEfl8\jΚ*2c>tإګs')xRJZUlObj ׇb$?pѩCEy6)K*7$},NpR*cӖ2EG}2Xv@>Z"(C3OǐZЉGҴb'(C@t*|Tet;pZՍ̔6gS+2:/Gdm@g+oFku Iך;p0;t]˜ôDęBFEy\K:):V)%uS K <2`5Wި.Lv^.bp=GDS%4zT%NwlNTH55^؍kk ~;Ȧh΍W- F$r?.^]0bԫE6kҙ=_ړ$ 7=WEe;͕r@̠Iy,!˺Wl!8:Pj<,L iE+!=[hGʁ<+լkװmq#/~ `&LqY2u_AD~#S'g*lҺd`\kGd)ʫ!*2)^ [((Wf7Lh5H^(K9Qz#t_^/l F%dޞD>(,jЪ"*r3ހ9Z}v'ʖs:n/Ǵ0HuAډk0uP!k҆u9U)=&4"j:8w >^̇K3!V+>鸥ÒjES>'Vf";ZIUהDvE=.BAE'ܘ2NƑyUI!^0ŕ#R:t3(<[{ԕ(̼j5=@7$bf!v%3"٨ \eX]gcҗ.`&qnCK:Xw%~ߔz30g;/Z8DGN:G`,훻q*XO0~#|TXڴƱ^gA4[[߫~#Ec Q(a^5!Kt,X3%'~ej)r"aУCߦb;M0I Te7c!#}e|DTM67](0)^sR=qt( 6K޽!*9\0S_+OwLL6|&@xEG7yAM#X?gb퐨P ?1ۻ{L (=9UCu/n>.] 2F^!ٵ>S!2LMǵ7= "3$_ƑjCvK=jVK*'wPvU*|{&8 -6ˆQ'AwCPG0F3.ZC2gG0A?"U_@5ߴ}K{N|ّ5UzeݖH7'XJuQGKĤJZHQIUAw~xS:Ƅb#M4,fG}CVhxZ1,*"f5 k&΀ "8淳-=gI¾Y f&kcW>A*ߦslZ/|"NzS I43 ,~oi4:s + ?7""x"+$:\MJۄ&cAeP j- +R6=^`2¢fhAjX{yOI}- e.`>~nj"vC͘?r?Vc>n'g' gbt.ЪN2|N7"0 Fo1ih:$cl2@ow{CHfug&T34}ռr1L툸uqu[6@,iCqnSY 3.UYw::ǒW]6RuI,#lC"_H/MY șL16*§^ZҥObZqQMJ/<)O5y\~7ԔeDyx Ō]4T]VQI8J;fhlos\Gh 7 :%`Vf CϪ56n@JPb^YHoU͌F4 HtK@vsjU? Gr[mf‡gjX+µ"ں)/|KF@a*3<^Ꟍ4BĊ3W4;c`Ydwت1# *o<,ތ,j&5A\-2#:Ms7̉ 0;Ҝ#~Dd"J~M_9VzVJs D)rno?hKg. |{!/SR286:504%aZ#a=(:f]""1<6duL,ݸ5q c71t ͳ{2򫴚V.MjV߱7&t䵉q's^4@DŽ F8x,rrr,% kFFabEǖ YjCVaWEYyb* $upEA=FBM̦LjvAަqd)'8]FivFqg.l? a~6a筷 uẑJ@77BWw<cy`D`9=TsF%T7,l)2p$ @TBSM)pJHgp sQ?oz.tZ*Qf?0b6hy;Qpk䑜?P';,:{Y%Ċ=MzYxKcu;MHCU{_Hjqr JNtow·P2i2! E6& +if k| JV ;[}ߏ;h y|_Y-d#9*˰h%!eęꏾ^jzLA7 OV?3K!Pm 2gxоNekuիoQ!<_okf7}㜽*`ԞIHӧ:SA.^;0,1lW|?!\ XD,‡:gsѩR_Ӗ/]U Ӑ(jપ>{rٔcc9.!-DBȝM+eZ0sv{oP%cPI /Zpy(uD?zB0yc+Q;CNš Y'[0D7)0z:e^,"W&ĮYxފ,,l̖YYp7焲e-9^QݮˋMJҚԮ`2MhřΑyLy帶4!Z:>Ě!V ~_GQGfY=\D~+&eC,$3mH\HlMc:oQ_"f>%FhՁ2miFrɋ ^Yk qk'6ͼI!Hgxo^PwJUJ'g|i~2Gڟ,[!6,m qʨK.lqL֟ vrGtB.~|i/IP^L!D?i[gCvFDžRJJ'7bW+ʣFNj156pE:.H3N>tIilpB.ѝ-o./cԬ3kGoИ_6"*@;xr&>ن9.^]:yW hvh [-i3~ts?nK!rט,jxEM`)־(kDFwB+N4~a4 hLiq yQڢz>b}3Sh^(BэJ[I:02qe h Q ?-,!G)|Ysĵe [ikX;mY64X)DG<8]P܍y':˧}CRYī`Y`F)/o;wׂ.,`N\oNo#\@ >cjY{[>ql+3P 8q-"]aX]%/Xѓ+^3aY*>$l9A-G#R&\Ix]iM6Ǯ=|3P^;7BٞZs0P_z6Q㫇k+ bW0UQf$fJLo.q ^wwNC4w1qk+ Xc<#R!lckk|41wKKu L⪠<AY LtnetP&y0MlJ jޢ_&?{f߫PD(Bn>/ ֮Qz@֩8@I-@ xr]6*5AXZ9Y:tk}wT<)/( 6v 6RHoqZ71u6y8<QyA /9ڧ࠘t K/>^% dS_T/n,//fSBnfR]qW(ٱ2FGs-|G"sc(;kҨ&L{{9`I<:r^Pdl4=KB31䋛]-e)[̹*|xAqAř a1dh%ϬJ >Mq#a$+A+ 2_s˓ 9mI\j}CB S(Nb 8z_U!s܌|*X-u PȒȷ e>k8+]_2T!Q+,-t3=zK[W5! PL6ĺ)%`EH p6ڡ+\lθ4Ω)#KJ9ڲ:?8HhjUF :Iڡ72t':7@,}1eXOh- 5}~y'&\۔{ٝ8tr\$'pCפp֋Bny=6 .ӇXJHdp,n4{ׄfgJkvz#|iG;gf"ޜUD̗Uc !.^DŽ*SN8?p V(E߆#Z{O=N7I~NwS&5|iԂH%G)l $́3 Lm!ނs2~h8\Q'2e]UM5UKhBa9.U7ܪ2BN_rU+Yw#6/J3O pSGd9.ꈪe8 lZ4~$z`#Nv ^+Е`G{=XMwGs VJk)"@t Oj`ETФ$F@8}r.EXR}MNAĘC(?@K!۶ְ0j"xmԐLZLm4J.̵_݌GK!1_{M>rl/?߮`n tHgHkZn0ڊEOƓ){H41>"nOm-Z-jFq8ڈIp4o:<qNRݨp:"jHu"F E C>]XE4+_aqE.=PYܡu@ =- (ޕ5Xzhv+(*i0pg8\&!u/H_G<m);+!Q1lDK^DQۮޥK-i[u)k-|땗Yg Eӕ O,OGHi Fg^KQ8CGv6(qK{>mykHeg)W~{@ͺf'7>(Q_IBGY|wG^o:u4GI⃿fh\E82a/}Dip9b<=Si]Vn9%yu>skSJlPgSQOGG!^7-e:ڔ"}vT@l5 n!̙X4<Fp~jv %}|!^Ž aS=&L+MY;@i`i}k ~| pL2VKOv'ӴIW؎ %|04qȟ$WM5$y݃psg4^3u;b8,lj X}#hٴnHȪm[LQ/5|}$Ypy% -=brrh^VUF(cP(ܿ/Nь Ex _tI0J[1?~(@(i<Ϩ.9ʖitEOLS9e |3bAȏ@uhm*./Y`P$!|+5ƙʷC"1UGȺL{Su=Qe[*uVlID Q5.gs0R'IZq)>t{;Mm$pPbjRxGwy rcV9Dۜ> ^|S.֏w{!9H%4'=e"An0㙸3}9kif'Qs;5!sax+Ý[+L;,ڵLig(vg_'"ȇ"?l! ?'G$5+\>ZI??1AngBoT콁JF}/;n!#y(旀F6F0r>p,|j[|D$d >.]HLEɳ$rƧڢ2'BE"lj9Ya{IKUb= JU6PT'Cl2Fw}\vJH >$ɽ  ZbiXRGYHn~pn’HaLѰE~hX;5 '"јY?հ&F:CEw(^y`vb;5(;N J\3>[ҍ8y96Dba?dyEǎKi *>RLm ,|8fQ ; _6"νe%Yb?*_"\|XXm%+`k"2{_/UHݱF&&:0Ϊ߇.GE%GG”ԬOwtf>t=Ԋ×TV' GPxM?}Fj4ɓB}ik=Dd$O)_ &嗡pƜ-wDK.  @ne]<െi@ZӐW2\}`͐Gp /a0yzX_/?6/W]?HYފlovB/q53w̢:nAtO2 #o_t-jft 1܄T6reբyilۅe昹)x) yh:^oߑR_"Wcu:/*&0}o+R5ݳ痿HI=ty=2wd4iqglB-kڴ ^2esȤ/lvy*؞cT·;'OGB{7MH y"4P& I4g+BI4bGQ IYi QB"NA%")9M( rz56<5S@ZW=sҪH|aăf*f\Eنz @1 O:^S # E3EG6/- ;-Kd{QmK)g*e.@0h;QNė5!{=2lzMy8CN9+4 FCV^Qb(n%A[ WpP!ݭhH8Ib;Q*+ ӡɴ s8EyuaVLva0pȊqϗ>R\!PTȜ8Brٚ{ `rsHTʜk0)QlE{xNpb:G+pgI1'"p"xe@ۮ7'Kqe\0::K||`&R8mv6c%}z!\7CТZ?:vW}uv{y]'a޾Q>)5\IRxʴUҚ dWcvךAh@~FN $*>/s'C@fp(=!k(Ky{.{ hTk #ӱaxs.`Ϫ+I>Vے&%Rv ]j5\?_9gKxE.{B 3V@YE8W!<ϭ( n3BK\eFL#4LeO~>((gt{ehA"28 sB엸ܶH(gtEzEx j ֑#&"fF(sc>ܖiLW0]i&=/];'h,][V#,Z¤56%5 7Z 'QѨV97岄 AR?t>Y!jXh 5$f'*ʘDn*y\M$"l0Άq)jr$!;y]Z̓bM]N[6,AXO(2U_z_b{#oyLw ᢽ߮](wƁ)rgP'ed8OISWOUâҬZVߑA1лH++`G,Ó?$B h 6+Uc a \~Xlibqo5Th鵗јẂ+!׺ ú f5!&Rkefp,^dPo+0A^&##`qݭx5>0t8{ %ߌ*=moGI̙R1 ӽs".- 3?$˂I,@U3y Bn:l<ho:YJһT#DO_ě;ghr,Z;!sXA"kA @vFtYa~thT+j{J^\(!%ums!ѩ~13*Z!!Ӛ#Y%ON0zѪP|!2NZݚÄ"խ["$(z:2/{ʨ-yj2(sy0Tu>ȫ s6bxf/ {b@U \mtLZs7hWzU= Ԯ ( MZ~U/z|?(b]QD04HNdvp V֬vc}%%rEVs|$g'ٗ˗@Fcā)8,,L]s2 . Jjh7J|,OӬA~Ycˑ<*CynwE)_)Z#zK 9ݾ # !%vAv jWRDgyBW-~|Rߕ3ܱsb^ 5_e26P!伶F] L'Kku\b{vں׮ }uR@$+w2:0Wb?לwMk>?Wf7~A O8\EHlPj.̔i'Akx5d燓'c/ &=O$:&)>̠nTW6aGS!0zFDR5Ih(̓C%:֞N~YnǞ;f5xk։5E~80`+(C6BK4ij8M5vFItmDr0VH͖@YuId/Ls\t{'X?&9/Ld a;pnPZQ.(|0X>(:,j//I zUI@>>" ^'Hxk| 3'2|W /NKUYnFx//'!V u0ƫQ*Q&khRlo9!Հʀ/$J|N*JB7;u=s G&eQDu=.A.~XzBϱta,);]Zwc$ߤSW sBn>,T?^3#4,Rv ?TֱJI1?0 ?4;6?{VRL=8S xkݽ puXLI=*գpj /3T@Sbn5*11zԌƲ#u"?-µ`txK6~@F,]Ϻj-hYs *׌[?G{~i޿I6b_bO/Puh<n/IӲv+^xѓ)'ߪ1Y+78@\jrMq)˶t8k3c1fDf|OP5zYQ\Pm@IE~jxHG_Ƞ>9t. >ddB.?Hr"B M= g*J hDNo=K;%iscx(!H3@ɬxސ$'{Kv|H!lPwS`o ^4c'[x%K,ǨK&C>u^"%tdtp 2<8`$bĭǓQk6r.NZ$H9~:UlXpe࿡}y>ft %o*:( "j4L@n)C|Ey6d@HZX h}YMRbWBJXFp`60ʶMS@q 2Lv c/DWs5y p〈ҘD% ui~h92L`W@۰gV$6^ zY - ˨>(-L5q5=fJ~e {_,b@uOw {h *2m7m_n`.g;P$Q7>и9?f[7OIG'LX9sPhyDA ;Փ};r~Q 4v8 Q\i;peOGnMM"MR*ҕݹU DBsi*9M!pu>)B7 䂊\bo35&.ߗLX~SsxeYTF {u-3{ʜ$ O5,_a1Џ7^!v\svZ(/^i( e_8~YVIy_@jW湼ݥ,j$@b/j^+$n+u~输?ϛg`Q?y8YIY|i]1!۹$zrs<6el{9˙۬F qB(*GS`4bG I:WĖv{>m&͒(̂ۥ,=RHK[V}$IqAMШzL) E 8 mLHBi)I+U™buJX VB`Q),;5Εw€[~Kz} GgVp@Ko*xY^I}TM՗0-}ig DiO l#U`+2b~cRK/ Rnj_jZkzlgQL]Z݂v`9 "٥ey^\.2MppSPԦЉ'qߨs:qMxE* aN-V>w(jpT^mQ2@k+deA5psż"U ^78T56QΟhc;># ߙ|?6To F'#p x l1Jװi;,PzuNmMaU, F/X Ayd&4P3̖+I,,а"BRNUnȈ.`y6]'ۉ[ё5L;,? ۯG@tNhclb(I](22|󚷵SѾY,g5Xb $bWG8|<<ѸT6@bKMRh(RV{%U wB}ȩ^YvUn~&PH-MR})"?l>-Ƥa.\!y޻b* fؤbJd]_'vb%L,R'I?[DSwh0#(NTFiby4L2H渇ME*4_K`3LD&T=#F= B_\ ,'Z$'ץϝSaw{fI]I$;6]3Ε =-g2GD%'5#$=L;Rf4e.5cR*ռ$p%Nd.< aXPڭZ2t}WS͓GY΄{\ZfGx~?Qype 3TĹA1Q@C (6_LUÀ >(2gnc ZބSf<H"ɟZ^ݦu&G#!GpƖ5^<@56 #Z<搨C~V~mMwx=,^"{;>Br'_/džS | 7ţ~G2o >R*a.a{M`ёȫ#zk6Y.A<Wu4!AXy鲇}PIY_Ic>eauqR'cN v1.L3('[*ɰ qM~k8V'~'Rҁ9!It0oXߴW#:4{zv H!d{It= ,쩦91+g[a]#Z~B{S 3Go?d W& Kgttg36Ktۆ|^&muǫcD6P?&6R=і e&QYPHse1gۉ'ZƊ1F/tKW7PVL/ว:<@ f'^$ULxYZZۢzD~`i}]|<} Pg 6>9WW[b"ы z~}a[%;!?w262WCk`K%ZAa-F^W(U͕cNA*p1 Us,)AMx'1hȯx_j}`%/md&Xlqv 7QлwE4[㾥j-iF ȶ*'["_%g!n_OO?MADELvZ֜l-կ`K?NM8`r}iD.`TNz̷P D6ܘJ_w:=OW}fTzWeɧm@ fZwa>ᡱ(Y3Qঅ(oo;O-EFi]RdJj2)9hϠY4\x 4i⊙Aar$]\Io[ЋB®"!wԁ|)}"1(2LpMY{xw2E71v :nNA(ןt"!bzwRjv~f?W DX'uX?e=_PX܅ D\~ Ldmm>mrbI6%oqqg玛hð/RV*PJpLq1`PI]j!_46o5x܇<}O }דUP*hJh|+`> B|h&w!\N1Ź|^yU|tMy ;^01B'w&Ij> @|o߶"tj4hG5S&Gf)R҈`oZÔcd]1qCSYzKSVdZ7j[oS!S䝓Rᮕ -o9e 1F^ivDҗZCV<STfOԒٿ\x;g+x69O+dQbza:ulM2Q)E*D,hkUB t̠.0"f`9N߭y餦45%W"3F;­m(>{VJe)ȃ O4x$]1?;mhvy szeDDn@!(ʠ-eCY !ٚԝ #ܭpp]o^ey8-ҸUi+3ې@|Zd+6nmXszۋcS ]9|?"pqmR|q 3f5kT1@8OԵaem1"#<}}b7QF-y?k0YWj&)ޓX؋q ڧ:o!XbٸKLQӬ m|@;F:OXz,;A/2EQ֮ JF'Y8?WKHUNߖϲ_ᢻᯖlG \xC/{֋۠ 7#wX#'d-Lzժ/Qww s%cs^cU9hc}c* j>[i,GFg"qWqZ큕s U1P8 gڣEeS>mlU]2Kh)//#epAgUmE}"ѣWi@Rl^t^ڐzܖ<EH-ʗVeUJ0a5s}[&mi>8i%aa?m4<63~I`!}9 ^SJh]hRuSO`ztb_ +9AsZOd[j'#Q] k [E ]Y(mu͢=j573q~ݤ#W!uCVQ: O";{-nX/A)Y `f͝fCWbžzѱLy/i}k]crr|xSEˈJ6UDJzAaQJ_agW*>.q"TO\kLuKt-=y^&.o&WQˍNYa2kyp%4՘;v ?Hm.c{td/Eg.enUm2{cjZф`1]k&t.x mġNR s1VA]\fPJD}m'PAӉ7}Vp侜>gi;䊖#zl Sh]nF|WgH4[Cٳn0sꆂgQ=\ԸuĜƛ ,OC9?xƼd%o!'蔸a$65fnNsg |Q<^dn#̌Z 7:o?C{-LŸ7֘Wzm GI%YVd+\S4ed*@ rxاIR}P^d>p7hb-u 䄿zx y^8 e%(Z$$#p*|e?zSi4" i븳 ͭSxP<~6$lo#6qz&*ݙb4ےw)LbiaN3x_kjK l`lĢ!Ƀscn-GC}-l%<052n=pD˫0o]? \]NAӎfZ .:瓁ZF(I}w[N-tUVnN啌PD%Ra|L|Sĥ3cs }sc.O ?GZNɶJ1YP%8d6It;rBIר(iUd(VLUЬ^꫋yPsQR {޲,Lkn0Y"`sJS=xW=(vnWʛ=Io)=O_DF~A>?Y?wPss&H$ybS?E<@Ur-s *Of%"FG#ǟc/+ J#Hcvt+px^A*Ǣv[pөzm˯*۴ȤsƠfW gf&TtmᲕdfl-"9cjdFd%0plU(;9M]Xd!(ŴlڿI?!K("4~ﰍm镝dam4 dԸY 8-۝8&%gs0SlXC38)dㇻGݏ&W=$[=ޘ( +8Cd;yF ⿍]#+>!M̄d~Y1 2꣧&>IN/m8Ijoc_-#{n< "|EqӑX)os\}%I4= &re&3xde+諸K"jqB P p5Սߋ*Q(}UK!P%>K*T"r_~60YT3*!@.K_krEne(l#N+ ,0e&O}tC8X1; -H;B6)٨#ka`SWPcU` 8ÉGo_BٚI({y_[q0s ?~H29f]X=KI?)׈ñ__-jte1D9b53о:Hh',l,ʮivݢ@VT4PN]@B=PJrGЙJnB,0W406z!`*ykuѤ\g"p'5b^v";H9/^qC ue &E#'H!YzKe ښ>9qg^,Sv1= #xe ܊z)/Ed">bCaB^%#p͑ l ZAyZ>ڃ#>DZ3CU ʩfAs}FSC~ e(>(rsB *Зal2=wlVTvv [E,{BèGUkkgD(ezP+ o}ƞ_bx+Orfx*_WhREB*B0S4f8h_ GD,>Yj"e,Qȉ frsYpBsrRF6%QncˏaS%sqD}FHL=>f ze1EN$VCecķNHCm# C55%j=E2rRdϤ`g,uxNKE(FFx{OL,fqB''Iyp^&Lm=vPPPn7bڿ)vׄ&{ Gj`Ĭ³A˝eOZ|w771l$n jQY~dj--O#Zom9_wύmch>Mx}yy%V&@ƺmt\;^jYs;sى6mM9M|[Fuђ[S/)SGcAv-|bk2T߶>.IϏZc?ϭH/G$Zx$uBx\Nq; [YN{˟ߊP:oi#ASLyA?;B nƠ};sޫ 8}& Ό3؟3B3>K1cM"8 iVq;HZC"n_oe~_س:;UKJ 7|x^i(__rgC((QHR29if+ń{R8.񭊁Q9}cX>v#-%K(.5aC{V .fIm%O7GTT{-_MJ c`mM (g358"C1mi 1!`.ө׼238=͗<:R C9PLrG\#̅DTsE!™P^SaZsLOo@:}{k觡5S!J(}rU30@w6\Q ndhhUɣk’aub7 *g;]Gړ64,ynSX^7I/B؇>F)Ƿgkzv]x'qu^o8ٓluOMK_s[2S_C̲_qQԬUf,CVg,A#т|y_`?vn(uI=)DQe det}Mv3*&bop>Hr) VQi;q_CDޅY΃0˧Wާ+>>)Gނ<ׇV#KBWiJWDr=_dRZG5!ArQ"@V(\fI[=ջvG(Dϧg aӨW+ȢW)ieu0%C%)_%Qj}h֦aJ X=I>r^✀'r)FF~ހ\h٬#0QꝔxI8} #h_7U FQ%w,ŏ짐g*swMdUw_ ?Ws/u^_&ԛlqj nzjL{G$=R6!JI%ǭAӐ $2묚 5Ǧfbh.1F%Q&ưJQr *,* c%EMf2N4Dkeej 9㊥&gW&[!6}1QT W`Zm K%y،t.}2?9D I&hݏk Q ۳HS)fZR Mի]OǙ`TQ$Bo?i =YG(oEy Z3x!닉Is'Ky1Hީ$7׍"!RVʊ0(muk8rKF@6=U + IIkGhVNau9c&\\Y$#%85tl'l!Q!<؝B%lQ'd".98(юrZot*)0#Ru"= J fdfYMakQjE\k Bd|%φD пrYQΆ? -DٵٱOf$l{0{ꔣK'ՎV;56 JEI(3"/7a $Omw.'P\x GOkˤBmBS|Fy4MB_ j 1NnQ={NtY\ѭc˦s< z`dO՚d0کS:2O{7@yzi*_\*s$PiYi#5A}z-Riu>|5H%BXbɖlk/g2z DTO\iw눾ZI$}!]hL:R4S<&Y8N|ᑾ(Kq3+}}mWQS֓lX3JopE-ٿ.Z*ӕ}i'+R-Y" 5BGԐ'܊ƇN6gQ wY(GiRqE@X LN~I  pȌ0ÆS)xmgȏaA8bӦ9%7촾IdC2[ P3g-M%|D M6稢 P>A!ߢ`,ynbг1̺Sf/ " 迟hHuԔv{IU6s@) @n3c@7/q4a`0f5AMӔQJzJH^~lD#/ 610K]L!}Y :"zJnm&ѱ|;K>}/oia͋:]Y,i!y^_DemRDu0lLGbo,4s(Dnf0hEo:_ܲ4rCBÄ?XOQ9E HnBl2qM:mNVRbS>n _=1H61KP͸l<2~ӪCO{LGFЯPun }^|ϒ7pzq%_:ޖ4~V!8w\Bv oYm/ `4^JL ¨Sڜ1C+-hK߁Tnd51_FWD,>1Ty}#} k5yboIQT&iiN6d.U`y7y30xΝ^˟'4:x>z#-5 9[kSD&l$F {BMʗY,RF/yjR \R=CN=|CU^wu4-^ֿՃIKӽOԃpGNK[l7:A)mN877G^^ 3oT `'zFz!dP3f 1O#F2g26=& adzؓQxK txaAU@GV̧~cxɪ*ϑbV,CPn/'|sTRDbΩBKy勏ER8s\]3O}ғJ*N 3"O]:iA?XnhJsQAS%l`P 9'Po0ˠpDUo;u@`U I"',nf7W rf*i.Vo\3re ֒W Ae.7Їy 2nk\&  PhP-n9=6꼕('}f|4Nƙ: J;.;z*qPtT[F]02%➰NR##[1AqHeu ~1_p= FęhELό3 ?Lv6=(2䗒:!V>lw s6^';A6yS =ދ`wo&r2`M[9 kY3SO:96<3JP)eHF`)e n}vFHXNRhKhgsIg¦l]+$bݒsU/@e:sjt;T_R ^mBŨBMZ捃L ~P HXgS' .Vzu`5j=aB y7ڝqC+ow8cboq8 :x/_ 3 ;`̉<MH`^:&4.)Dͬ\۷՛6?0<3[S8P2fLu]g'Z8FL2m3ޑf+0kdL @P{vKvn ٻӡׂ}q̢R,\n8u`y#j.A1UUk E"V (&NiFuƭ^sXZii΢*VUHԖ2 Mf?p`> "m,xx6v9 mMSqp`޴ 9ˏ }>HXwk{jm1`._ܯQfE) \`tw\!'hp#eb49 ḿNP}Ԏ\\{&b紵e(Xj9tEݢb(_Hmdn0R0m^(rY;01( m7I!"FWUO/}lbt%r)O%ow~ 1J{Qo£HGU+`FEbH asA5.XݮmKA iv4Y+찊?/SwAG-8#V UMπp$ډ!6&@iGYPP.H+xoud &iT$ZsGD=mP:π n3YP(/9l gvWq*{"X(Ϸ{a۳=;Ud +'KP6F'g){6ʜ4pl}T#_+WuY1 ywsXt=MK\+sn|PITgc%䛒cbNK?^,}#CX0'#r`Cޡd u5#0٢X*cf /LF-\ RJMPyj}NZ *]AvyH/ \VYcUaםͨua=vUE TX %n¶[[ F&t$ tj̽Y~/sc8o{4L$Xnc&. }Q 5hkSuOYM? ;I?x۲^}lisvNYm9]=_Q8#]C#"g2{|6{&'T y~þ8 Q7qa+-;'{+su鬩\-7]{{I21jdI44Y C̺(Շ}!vLyrD|O0phuL@{0B`~$sb3Vtx9ƒr!Ib J|óy>REA#SiރQEM)k$3| TT)}c zǹ'-Y$rߠlw.AgoE4Zt{R;=Y73rd5BIjѼ)$-+ hG d'=$\3u1y-D ҩEĸ++~,0Ic&>)ڗ̫ . i(T^cN4Ysܗ/5z! b5 Q5&H*7aś7˥oKFN D Ut#5-4d4e&{֪>uc""=T ߉i=4FgwϓNY^#*R}NJm^b]XY+ͽ'W k|٪pH_ЯL?}%TF8P'>#%6++g= ?"c\Y]¨~JUJvRmwD~R,"͸y+|]-{L,ح]5,|l_Ozm )2BRY![tD(}wCX.xp=(4n$rؓFӑUВ/N[}8:ڨr(a uc8IOc·u!Oc )#(7 `kH&@tVsC&sY@Xd[T ;F=_ GƁm@wF-z~nk;3E_GfIP޿}b$(MnEj&=nIE!-X$1 CK4%d]|# h**U [-?@,5ָ_(rml_o*'ILR$hLS9N{H9y FxPzhWp^DJ䵯=|"R~(@,}Xf;V0d@r_ı]_ '{WIE#zz_y8xzȧ#ҥxK.Rc'9ׁyT͑Tw<\99)Q bv&ܸ8m:#Yg@0!ur*a⣡5 okJ)aG.DUuO3ҧ)g^O'S[os{R3_C?B-N 2?Gf b9+uL:O, :c5>\,A(t26I ,z-2j( R"-ʊmM]oKz!q v+9.s7#P"^lofAt† ]#d Nܲp]락*~ H(Z&0hNΩ,_,.a4M|zzh7ڙ#fPmD:ɺ 5k 'yMJm,Ɣp#9Ia~-n5FX Xl#wa_J jpS#9 .%[q}L/2ywfX[?Ƒ6*$*Y?y@Zi%MPj~JXj*Tb,c_{9}HV%(ˑ8,nGN=;+ Ih~E؞qz_Y'm&Hx E[ J?0?obӄ@;򃜸yq-MݙًO\ԕF붛<D=E'b(v-X0ŏqC;f(ChLhM*3hׁ"j}_6_G:RN.Y;54v~We `9% #n@sa38z9'2j.g.\"PfBbEroŬ,'$;irpZ^KkT*AUHSpXz_g'X70TQk6t-T 1<DWIxJdy%Xн}*qPRs/y~AԑYqHsr(iBP(] .ȰI?Ira3vY"}~AX0jQ edzƓ$uOh&3pZ`/~<0&u/I->4ȕo~Rc^`O T)Rz^2YlMqaEߧwg~2D7\nuq@])܈߱#uGh5³ֲ1_eqM1".fH?C_1OLA)Iv?]'l 7{㌥qd-wC4ABmC~Z6HV{22})7[ >a&3:9IjV f~lTxt^ n{7vo12EBW3+ɓK<(mǵنXr0p-SxӽhD{ͼՌR# ) D-'cO ݍ#ƼyT [Bƥos;l^XךdB-Nȼ$Rj=vD `%)BZ_SBMZӵ-GG&7@!)G{ëY[Yh,өדE'|BCϑ{1w }^+jOW]& W;z{tۓu4$C'>ϼbKocץac235m ' ]Q$,SZmR"ME2Qc`_7DLr6 Ǵ5WRG=%\lF9-\Ձ)D97pym3Sߘ5 rmྲྀWU>r87 0m{e@>Tt(j VƱ K<*pt0\ř7,Ʋ^u;ȳWpg`V^d?b Tu$C^or|iK 9AriFWF8nNzM큄W[pNhX]@<|T;y \uci)1=!U'&U^ͱQe{+̏# ڛ=u).Ă>[Ȉe\~G~ζ3@=wnp>l86/î#w?[93G/B dABƹ05N -=M0-&muq~w\h>36z(E&5|#_qI'2&oo f)AT1P߇!&3w3Jk}ǂ_vc|9n%Γƺ% R+:溱O|_U{52=nCҪA$lQlR&)J} k8{K^\YCsXgGa(]gKa(@~^WUkˑc߬l p Bᒎ-cblW+O?랑SqjU=~^;P,͖z|vN[ G6Y˝XCHգDLoQY RAִ’ ,+1TfU#S\ EBW]۪#xuQAﺾ 6YsfUyMk Axp0#|UNs?)h~re8B*gUB,NU \E N{9Fkb^ݏuSm~;WHHM(NjF1 ݶ[AaA0r:<S}qSuc85M7WcFXX/i"`#q#Gb:_(Q]ftjm6`'\q[o?`VACʇmCF?]/w' ./ybd&Bq(\>Ύ9.lB? 4a쥂> 6JqOku a9}ԛK+ZwJ{CDlOֹ&)m z#r׀Y `siB^B](uPq63TXw {9=+75szz-{WA2;@L4@ *LD3hݚFt?.⊲0<' UD*A/K/U%).opR V zGSs0{D<:@amb!a lJxew8%(AG ڪc#?T6FGF͹+7ҌJg TRFlȄt<Vk;? 0G.;--G* "ڱ#I;v<`m^M 3@Ю$) Q쳂rN!3Ȼմ(P8j$qbTC"9bs0C5#8@]=AkJO ? n{>mR]7j3 s}2(Lҙܔp7:8v+%|tp7z m;{_pymTe;EYs'3[e_nUbb 54c{=G;sD3='%_|5YULZ򙷖G*n:r o[(<~i?V_%w|5Uaنgn}RrcKZ KӌF6ɉZ j췦Ӗ祾[q| gen[H2ї&^/:Hu Xv`Y)g 9P5^Holq:k29L{:'593qp)Sb.䜯8!ҁ~fvuxRA6v:Xmډh?2RH@/[Q2PF0k {9 6Vddowm+wȯ2jX*V5F \ _]k~J\Y΍}ĤѰl/D| +A.z} X 7l x*KMY+ BS q9[yd#a7)T*vv]Gt@.Q$L5 &0xschhkWqH9AQ Aw!`w#<F#'qj$hy>%f|JhjAki\ S*/Z nǙ3΄`%d03Zm2ɇzڷԽ{ƟoR}>\k=J÷OM|߆LxgnI1tuxfg r9-C:K&,GYH Ovz0S %ׯ;ctߙ=X:}П4Ӕ4uX?2 0z@/FOx K*|ݰR/hƶcd4X yŁ3?կ=J`]VC|m# Λ [J86F(NԽJtы\|"ޖ`„9*I 0qPп~%C͊TyÛD 30 k/*7c)?2`Y&ϓS$@Xh͛M*m 9@T~.X )iH)~{xw.f;cHw˨ Ӕ П'ߓJNYg?áMQpQ \}47;L\(=R?Æ}u0G3|MkzM^ahdklO Y!/xdS*MvNT ?|$pڼQKäSoPԛ#O pdk =XoɥHϗUUX DPF-I:kމXRhF 򙉒j=*q4 FAߙdFQtFpÉڋc#x9搤E:'^W-pb\WSJDRD.P6M8jUCso11[F@~ LGL oxchi2O0">EofZK(4DKX[ #F0sܼQR/[6hcތGɛ/3?=nj[GHWW6`WKKƜ_b/Z6IBzki~eHKa`(+XHxl4j(R*XDO;[\Ã`txSTMTvM#!eCĐC(Le;0U\$P4Ϸ-G}3^}Y##'( r\ {"Vk߸ifbWw Zqn>~yjgU~}eJd/>"P?8-0$܇&O L6jDE2%~֒C5Qd.H mX&E2K?Vψ O_mvVdS Px޳ F &!bօJNC@^wud+@hǡj:@X`1ɥ᳗[ #SBr xxuI:X嬶ak2·yD&Ϋf,K>2j3h<wTmѤJלRRrÌRdpƦA¬$d<7ˆLK>p{WA*VCR};~SwY[4פK>gq&৹)8_Sk$ȕ;}WҞlw1Ȑ x^;q%=>GmlWcXlW){u&.9QZ|<Nrpk4UƨMp<}9kw%^zjp#Rْ.$ZcS'3cKMVclL~y_UlDEt=!= _Dպ=waۃH;"2#<Ȳ4@s RU<( 4^D'!% TK1v`PSl& g}Q=w+qZ⊄Ju==C(O9oU~Qtel2#mV񠒱CGi:5%K f/"$ymv![Jy'ۤ1zLA#ߐo1x`<[LjB:z^J~ {EXdq'@oIKv Sr6!%=uiG㠔X߂l3 >b ?9d2uvH=/k>;L.{*.+~9Va$0v%RP=$>tD-p߇2X+0^ nSv=.-u-(F '}މ ?EؑC?B1\ E~/. yY'&OetX]4'r"t#p\"?BYl ݛJ@m]9xNXMꞝLR~YDcWB.U^^qV+ZϤT+:E^gﵕ:Ӵ {z ͌lK0!* Zsm(i)t5QV 9^)B_nW7@];cTpq|9KTS)qLA]{}r\h XeIyQ}$5>NjH;r_lކ^li]sDrΞ~غ$8C,">z-g^ *І5$ܕo46I+`}~\4B"5ca$x/Y+0obpF 2*=3Rfszh{DTIW " QA@RX_-e>^ܽ;NJDN YAJ3cQUpe1NN[}0[Ll0xPRyL[BK*y(8#L?3\%~H3۔_i/f~5~5v;)"-]9Q~DB=N{Dk2l R_MPx'9hRӘn6ʁy;) 6kHkO2qg3.S+mE4Wl;D8!%.HCE;'+l1I5191zWL2Dw^g3sf1Kȇ)UM2?sQ8_7dBp8dPH͕Io5"J su: U}BȰ{2Ͱ Rr16|2C?20_%3'-gl  DzM \`ƅd.CoAJVHV|rtBf1>IRm[=,CR+qn&ªh|Ԁ E~Z|nB u fX+};~%x;o6kP%֗Ul YMbs=*t!fqodtR5p_%deq?`7+Ц6CYwP6ff/8p_5g7]#0 r0V¨h0?*^*fw`|zW!gdKQ$/qZn:x/֓m=ۘy|KbaԿ!޷ 5yrO@K'mm)XE_pIf,Ds5Ui)ŧ{q^>bɚM>^ވj"iܴ+~Шo}<1IN[(!+g|Uu~w%{[ocD\I@,gYN ^}Dg*'FkD)&wö' _lPSgMAnc>VIQdxNH3NK] 8J񂳑_M]'4;& jʪ{;Oa!_,,?Z\Q*'=aA' GP<-qPlSBrБ!!JO*Y,}E^cV܇T X홥LJOz1pŜ]28 a17]o>.hd| xN:6p Tנs_P$aP-{QS~}'<((^".@.5ف^j|whλ L8vvtvÓm⛅)cV+O7Q??u,w(EKvn@USАoCR!O>`{)V6`~ &+`ьdtfŠX!Ə8p?w=6;OI%&SD!|^Tayһ+§s`{M`v3RFrK.=ߺ(D<> #=Sj^+/۷2d~&5m'%y>? bKfa#hy&;_IO3D5Xj>uz&I<$ˢO䍈݃knU>h'|p~opb[Lw(,EC<:v$'ןrC9nVCP_fAf~ f|e%IJb{ 4p=÷8EOc24IG-Dw'a); Xzs7\寐iUb FW!O? N=!bd~tONQ_{ʔrfG6bhUyX`ʭQl:[ l;rASf~7TJSSnjۡ>rU/bM9kM \!ĿGyàDA<{!H8y ˆ(M $/xdҼ1<!OCc/5G:ԩqr; -$eLA<3Ab tMDlbThvF8 cY3m\_\0Xr&z Va"6{f'L&L?ˣsynWxzUA 8rYurG z.__{f(g& Wig,ũF>3&U,;+8u+()Lޑ"ˁѥ/q7cmUG#Ufh ~ӟ+8 5;P+8jVa("x8B&M5*A5n,YەUVݱSm.СjLJ0sPhOJ9jzH7`mOWn/D%.MōN&'g,Fp)9 @|P&M7LƧiai|$R,0(_g7orI ydpGk1/B<]{i+Mfo"B[ٙkvpN[ \j򡼨*]'R@I-EZ#yr3CkYRieGv c1\}З  ܑ!0?ON I]Ml]k1 f&>ihP S= k_-=*Zqhʾ69LGFr͙ڳKT(3WnnS&c{rHl{ɠgf@*k+b`t5m#B)qӮ Qi>Ȩ= j6RmdVAųpMwOpz`,|BSÿK nl>401_e>,(\H/ Sj}Ϊ~*ye;=,1*ٰH0NWyV]>^͸aglВ<$ӘJwA55](ӗtBWI; .3k GXUؠ]IF`!M35.DB[KTr,@?0g9fv#>Dcϗ.*U-=)\.&VTsdd:APJA `:UV'eNώM{(ܑf">4s~_,'%鉫>j=8@MqTd%C88jB=vW{B9;8 rc=t b_J"Ӡhg:]tu UK<1I<Ʒw.5A!Ƿ%H!h@պW"xelV1^!D@楪S 䫠rW҃{÷ldPހtM`{nޢ{$n_8s?vPC™*ʹ1}G@)ΞiZ+>Pўc1ѳ0JE CGLJXsTyfڬBp|Cw.{HM/EpCuU LgbtaE.[ڻQT#j-c[6LS4mX86'`|ugdV7_2U]"ܢ&wHkwcEBi)LCj* E ػm;5>fpjs!w`yn zT1^2S2ՉTe+SoP_lI]GW.6tHUKMjTQCS t7)79]x{6h5zA晹q 7xj ˷14>&[E& ~>J؇Ijo[r]vx|;[U%UQ*=~ k^s>)Gen~(Q2!ފ 'Cu`ݲ0RVcrBn'(~ . *j*WpvͪK( +H2'/]6\`Vi\+گ}qXȟ9V{}Bj~n(}fr)k;hXH1 t5ǰaK TˇIH ?k^̕N[裏]2&_,oib6>"t0=H9Ou|99n0eHقz=_dEa0ED7t<<(S:jP)-m}1jdYRAy)Tn"[1^Vi +x2:FlL@3JtQ$$upI=ɀW,= g~}3$6,ʕw#NމUn" 0%P},zv "02"uȎF[' HC|v׮EugJM5 !|m@|my,י#SdBՊEu,8Fre~Nd(+b 6e?0lC[RNX\7,2P,4 B[+O+FNLCX%. CSP\@jgw4P gtMk9dp A 4GDtF.ghS9h!Nj'ӿ*AlTUIg |~0} QMBo퓷! F0!Z5 귯_Lgip=yRz7weҾS[ XTd%EHg=eR$G2CF8WFIVj܀/ZLu3RɌ8ɀ\D]/)>7E `/=TuY mҿ6t- 6,ٴf D/K[ $ɸnᙦnp0ȢBpk4EˋsxnӥT_xQhm|*B=+J2B^+`]#O|u1cG)XXȟ?69ȕ5lz(RGݻBp(nRxd "$LUh! ѹ?Uk$dL᪶Q Mv]]1ϭv'6}'߭vIzu\h-FF7y-)]4g߯m0><:յd8h@Ⱥgey}Hwi, X%ET!C5U✮i[fݐCz&"yڸ۶\ֆ n$$ Iى%bRPD<ŁN94<қ`BTT0H;(Nb0߽sE!HvfZzsp A0YLxk/mS1z:G0 W/)\Qa#w?7 R/#WBIsثDdrm"Q &ma mj +3a-_VDvV>1'-,@".Uy;VTG 32 JWhMKڭCւq< Fͷ +;>dSu5BVPek)ɭ`w]:^}vhgI#BCw^Aǣt**cȪh@f؛E̹2c^/p$QcCf/zz^yȦ!,iJxRn7#nXCFcdNn'ĔosFM4v܈hWBY!q<OJ@|xFužG}`my84fezӯUKW>Yp#Iu'k|ߙ}bja~[V"_E-ZJb!Ac맱enPX{ Ċ?`ef~ix?R%S C'-GZ'amv˹}ļ/c늈2|~?f.fPXʚÒ;\o *Df8(_:z4q|@ВmO|jt+9ښ#M9el*DZRUp$K}`2}t"7^,wZGj_0Y1<(Q%\e1'Ӟӳ1?,f , vE@=5JBV$kR◷o\ٿ6:lY+3Y;xu>H;x;f+_Rҋ} A}PL=5խ 8U0XC`q< dD otǰBhbs:o=:䉄AwSd~^]vkWpKS6WүjDSù=f ߻J=&EvNxx+\]oFi̾*lUŅkR k7/J,8LJwR2Րop!h2a2]0Co!stZ-nGYJ^0;a`ټco1Lc^Ȍ3*^@K/ah1Z\ynME=$ XǦB+p2hi.Me@d`khrE/ZxBZjj2*p0=(-K#bpS@k+/@2&ofZ#YfDC ᛼c^#]丹fM+҇mP :z<b.N5tA`\X2(M5fm+*1In$y:tdg@Nh3%kLwNX8A5 i hs%a=*=ኵa`69l tҪgh]p<e@F[{UȨf,qs^1g-Ε1!O7֤N~[":ߧe|,ؐ X^P ݺRj!"Xq8xHv )1׺X#4B1iEKpa t5. !s^M[<#rG@nQ1+3 Lp\L]Ưt,!tԦSբasb1~bӓREoA⫹IG5*Q^ [\p¹z:V&-15P!ZvYUu2,~t(v3Cߥsqc3K51XؤF|yOLaQU= R5 4mo"9Yt\muݚSq+JI$0L J{(PÐ}> HeL2HY3gRff C&yar_4*U-l{Fyg|yAqIάs9rl+V<E $@a-#K2 xHYOKx=іg GpmxW‘*a|;9F0.9gy's]9@>pb~֖-ΓvDs܌{܄ǷR3r>EбꯇqN8&5P> G['#˰X׳tgw$P^5PS޲8O}jF>P N!v99 ١FV7J Ǔ&өgܿyfaOvԃ x;|71SڇWkyAF3VK>W_ZYoqV-0f%|6Wd)ԣ.P4b60Y BvϖC[Sӳrar2IۛrN<TZkDe |L)ȷ &&ᏔnE$eX59UbL8t|ףeXZłypS?1!CA|swԭH9e<M VNGc땚EM3=nB(P@?pef]PozMڧBap%S{KL_c4t"&8qt)?y{Fw( 3[@fcI&Q\l˯Y8 ʋ=Cmb.驇3(RxNKx q-]b~eN?RHihL*n:_+_PT;(<] ^ ^?q݈ϭ:hMXV*K}a*tb9V#9eH]njI [<ڝx6w.Y8A~Ui'vxls l=_|2:;M(;+L=z!v86\H0J=q Ak'K^[X~ϧkFEʂbSńVU,Il'No^^6H_q#R  Qfes[ ڍ{iѸhjb)MJ6O^*as92P4aܵk-d[Nq.<5x80ٳwW^Kn&>qg1jts]^0rh&e  H',Ԁat^&g )CP?r\2nݢPIС7||dg_'fƞ3.`iRkN5+f YM6Ivlz_ULun=:w%׾ϗpOWE_ c ~iY9 f̢}OqVR $t49ed?CY*CL$gn0[=c1KTy#{V0ra`d@OagS'+xh{Ǽ;O{'Z{;9 ӽT9sǝY=a FR#'yn|&ZtDyfөw?* 0:$ɇEkr$afz!9!C5jm#L{qK|PF㞠h ?)VͣյҔPww `l_yU0|K6Ӌ/D\EM[gTy>"H4[9_p'-S2ۆIX۵K̎M]R?,דE97 _OKMW[:Tc:1KI:TXâppKKP߽;S:. '1>0i,U콭Ʋ#Oe56(سOσ~oג- C&v>%^+ĥ<|sC+k}~hʹzcn୷TIn.%T!P<waBȋgS2|!tȂ upkhG6#!i% "0V}A,6_M3)ꜮˋͰ>$.GmS1O~3xT5TS9g=/)QOV^K\~w?f3K_0D'Ne9ftŵÔ';댓K0I4Y죫hBy Ks&3{맡*diyo{\5] _,XΞyz24+լoZtgId91rqpΖ!V%rp-klѨz:rOt/dx]ln-pTk kMY5gz~ݷ'a |F&Љf uA+a8M@9,=rFB2':݂T Af'TbG$N2 LY!s}?,?@spnbf: 6Tۛj}@e'~3'#0XfuT cx!ZV[ Fn^Y9&;0zQY{d9-'ǖ׳znBэ|Sڝ) .RЬu)eeɨJG_gVLRي:$=⶧pnSf-@V4 Q&)1w>c 1QeO>O~N}f]2c4}NFԾ j5VS4b^"0H4)qQVRi:I?%+)ooMRq{L6n( f~ڕ?*~G O߹953_L&T+Po:.h} ASi?Yx|;ޚu~]ZJNH RlJU+l:g=p|:N3uoć&cH!b\w4\5R-PrPI HsƇt< #전I1@4-r\g Ҁ w^)Ôa N?0 /E-tD4>^'$le&7WZN7l^O3I?/⋎c!6HBKVC}ŦtC-h}8 3Wb)-4m(,/jA4hW'@.842čhhhrcX++xtu[konPQj_(+!=@Bai>]ߚU06KAjd==y$+^j@7hI Q-2;E~/RO0uބϗ|-X %QJNQPʪdinA;6}D y7$Rc8g%4k=# DcaE  "(Ò{NfTî,V${ =I(pj*5\b8{}P-S푬-bd_u_ ޗd!$nqOR-oۙsyѠ`uIwbOʕM19Lm&7ܰ) PSU&= gіZu ¶Z-TD"JxwD16[fAP84&bfayU}6wJu`༲HҨRw+PA4J1nK+}Ȋs*UEdKKbH .E[g< =vQxq˟ 9Q=8ҋt;a rHCϚi:܃E%m D'MFp u(_Ay̓->$+ A x$bғjbWQ$Ok|b+jX O Q8KPZ\"38 p^훹BH;} Yxah y=C@6ضNIlnю+ݸ;*wH.xE<JpprKv|np69OY2B\4JvO':qhr5NsVRT(&i(h(]RAqlT%V`; # F6*ayybj+-'ȺXMBM|%lF`<g#IJ7܁f!ɜo5g &9nϜ֎nM Q4QZ8 {.W?B&Mχ) lb;vh/諾4;tt%C?GN;@ڹ*x_z|uO $,+(R4nN30#;}ƒ|/3H'L."W\[Ƥ 9ȣ~<0󕘚 s=ƥI#Y-9xvFET/Rq.d]yg-Œ5`aVg>{ Z,2V=Q/|pw}7pfu3[daAbT6M"A2 *+1{pp,oWz5)dܥX [pf֬$hU`N3=~Q7_!wt-!@r 0lg%ȃTldv?oKn9rHImUk`pZ}p8rPn+M?Y{ /HQe'I.0{cN|+c7/ϡTz8ێ݄F]J[0ՒZ蛇)֕՝QpUpmח=!&EIwepGw}r}nnؽ֠NZ):Ms0@HFm:!,_$+mD\?M\,#?bTYi2C ?fi G-FdԳV]1$~@EouIje@lp|,@:k?Zr?+ߥSh`JĞe bQ*wsޥP+ĸurضYBVB#OqS)u`A$c<תq_e(d"R @.F|el׻- -Y}S_) oluzT5Hoe9Γ<\w{3nᤵ#QgGlZ:ʶ7R/Fn+Qo݅0J}QA$90F@VHdE߯ 7#6^;өǎ:Sh]ɢ}!l4}T_QZj~%eNZ Ȓ8윌g~gmA؂ڭdZF˚J)iu NX3v`;oӠ D#rLߕ5G ?$ni\lHU"3Ww!p% +0G&({sB )3jo,rj[w7nB@5;ɯC#[GdykTA#\=0!r w!'#aGpJ hnB_q֢ҟxR%b.y.ˆC= )-}Y ?n!z$r]j`l5%֚c}J{3 ? jz8tģHRӓ5%&?Av` q'f=@v/ŦiCaw{:%J 枴SYEpjw@VzfT㊗@&oa ]b r/*(_SӪ~GtlQ~'KAMm;E}4'S+Μ ME۝Ik?Q{؄n*`M\pɜܠWV[Ll<\볈n٨|)\-BMyr 1\2-h!oQejU2%U[5aHwIܨ&FT"8S-ÞEf%w Mnu7nL60E3C Նقd%~ߎeҖ=bg)L+`㸣QFN"'7DJmV o`*O1ɝw2 l&v=˻sұ<5.X k+ wU"l>o}Ri㌈ ^G$ZS5J=ֲqWK;.&d,Ce]6?\sP_-[5\ܜ@ uBqxwL& d)x11lu5O{a[3z.P?վ8%'?,m4SF<*/'6C(垲`o"'l#K&  CXB@,mgtEXTBlyR N0KN (= piBCަ2LJY d\'>?;():RC0G&öoſ(;o8?_T~J-LkkP0k ɑިjO$y{\Z UEflRrʫGm.gY ƢgpcOu%Ө%{ÐDv &6B+?lWPO1b77+v]z=W CpETȓ66_D(v^^RU>y>h,%V^Uer@+Xߛ+3g5vY-_)Q45n궣WW^mJ-}e:HhiF o?.ӕ [֖"IDF<@0|H&lL#dٿ3oMWqrDִ\ D bMMk Jg.t6 ?ߧ_HHQ+2K.o=\u\#˄N ^Piv]>\iڅbrK[|dQ$5pթ)G`I$,c:l_D$Q)b%¡802]*~bX͂~T6huO۵OM;^Ϳğe=% ?y!v½:b2JMe!,:iNWw۾.{%]+k~)d;z ֣ꓚ7C vڶ)Kw18=#ĉP+(qίڂl;We<gH*1A p .^#אr,ϣk"N+(qH).'ǼE0^?hq|_ 7@CPρv;x/r0ʄ>}Y@xߎr R{MKRp eOו1q`V >Jb8̤(60s8#| GDjX87#jnZ\GBh{EIנkYI;<})WO*L Pz,/s}=2k" [{![(&Y"c[o4=&!\ pDTYxsOͯs>8޼k1zEV1p%c}~{.!:][vj(0k?k67)R3EL9A(ND[לoAcQ68Kiq%*4 Q;xe_U9a/ +7CԀ+;eap#cVowUax/]Gp m׳ݟ́!)s̏Hnk9kB2\,z'HttEg! 0@uʤI.AP^SRE}Osڒ :Hª/DUztS5Xt O%d eu 1ڎ!0 Eg@TypRة;}[4%Еu<\TYBL;Y|dYU4S6JҨww_z#NP$ s}Erzю?җ𗈗zlD0kt7>i:='GCV.0Kʨ) ؐͿ#C)J=*9GU8 *j7* *3H 0!qnBQNH B#gH&+ʎ̓"lqӪ(̳pxwa>MT\9-g1#pt q3g5&*ZEEsXfѰ!+(/5 J sS! g1( }!GY<4k=fG>NnQ%U9Px;]w՜=Gf,~ p4u{$ dŋOES4y˔eCsg %H+}[<\0b0RnL!ܜ󵠅^mk<-4p<͸ EPH_XS'-գPerZ|eF`8syFq nKbҀ&VjjwwTGM`Q/%1[/AiI]6DurS:ّ|gTD|x[ [R<-ٺ{|ҝa=>eϾ8fz@1Ӛٲ3Kni>$֤ 43Z=߮78R˕JК'l@X?,U4m MKv>NĚrg۴br_Ӽ+ ">2Uz&nуIٮsBU4L/vg[[xYE>iJ%r1Bj4du̦k/T uJ@U) c>XpzhI'FK3bv籰LHY6o6%78No{#ຝ߶Kڧ ǮlN"wڍՒBA{&]OԪ/[86=kv&rsAXJ(蝬ӆ@-tϊ^ $95mg>„r{]U@&{SVl9|_8/[ϖ/^k11 F01 I8 OT} ɹ/ژ|,b`]D' VaIExUD3cO~ $#X4' &P?Q8+u,ALLC4B4ňΠ}مӂc w<2S@?D2A(-Ӽ*gnh5v- *灾}Qܧ] 倝+";BAk?3bvp-J:eEb()\+kUN? E|up֗wC'.~mn(?"6tTn0O~ꋌ8ina{!ljFg*cL~n*,RNl| L \~ 7U' H❼v$}JL:<辚ncyčC]BP ;o. H&ś8ө Ʃhp-/NB>TxJIiuj6QCF呲>zlujR>p'54vfT?]TBV 8_ՏY(U}dvu+ h @%+&yM)GܤHt7F"fgXF1@!q<$ur"IFP56=tdDuúmsx^TJO]~`i' thP(+f \B]\It-2-\uy[бZ#KҲ-E9l.ŕqLbQ[!CD x;_@mS<nޏ PhΧ &jKVĴT&T+?(V}5x :|urX[wG{U1xb,Ơ?JH6Wx @:[?j'4 DmƒTW@5@Tqądz V`(Gh0`Nb?;ֻ`TVT,”ʌ_?vs,Į5'kAWGzVɷ7dp`bP} ^vYh6`Кk 28+`)O{@E_X3 )Q q¿d}~IOj$-}ŠЬܖŔW+"m3Ep6|nau"( ^{1J[Lnɰ`=%$eZܿOZI1 ͥP<,5bBjfW` ɥH &ʹPYG!=ZMtR_dq MqT:Y2/텅>Po1Bڃ %"!^d/; f&Equϣgƣ_ps \فPf:+p!roi^fQ" ><\A uH m8DFL׽6!{eSUBcaCtUme?OoY B2NcNzeCȚX)L((y}*`.ID^ Z;V"9tvJ6Js< }j}7"c PK{~qTrZH*) J~ ;n#-T6CVcN i|T?lH-o{]^w f*`YFYO0tb3S ۊ[9mbsb yQ2%Sd<4@r>Zp|h1~۫1oW#:߄UJ'^:>0}l@g\* ᴁEj56 h4`Ana \P'bCR[b}fhwm"Y~7`P@ H&1rX3La9n]k,toOAӮ'j8]'fUfW8OgS4q1[yT,Q8Lx…k]W(H.qJ7Ar$!9;LP7c4oRҵThKӎy@U9ƪwX 6X;(^Z:}Ecc>uZr^댚C"Maz2XC Kd=d.$!z?Fn|N~>+oƐ8e]G$ 6>F365ƒs /jpFiJ@s[)tFMӀ/iB0r< <$36rzAc Wu"E"obdDi4k0Ԗ&1 m:*6"ڜp_W hP5_hoi]^ +ӗ6R XKr#3ڝ~%ੋI (vpLϏr{2xm )kud,Mˬ AF%tw翴ǬKR}8ĕ JqA( =`'/! {Qo }E1oƛ fEo gN{c6юOkhqR?6 PpV S Ažxiݴ>̾loVBՋ.ő&\%XR p2*Wa \^CRq\˻6 @}1!gpGo8B ǥEF'v)VkeEЋ䢀jGOȚ kP=OhF$NX?(@4rHDCú |" )(BHbMl%=O$wr3٠ !M\Bo/ WkgIr;i#`S,O,Kq{Ygkߧj %%5% ;ZN2#ilI 5ZnB&\K`rR@iʠ.G4LY'!&#&НyXxc6}ZYNWz<@W'eA#}k;~3/l]35ۣ.x V Ф7f,)fJ[74Y>Y1R wLez"#HBddu#14bE[VfoCNMƑ6 YP/J2Xm-鏼ʙe?M QV45 @H *Ytz`m^dG^wO]'&6rTrhIdBch!o=9JwSy0{ESX Ue8FRu9j'C1Ʃ(e'qXϟ 1J"SN؟g/* >S^E4iuL8|prBxUR+/9zT+;µ3_=*bmf JTF[kA-7YI9BB9umMSjH*H'-d!%Hr+qgyvI˵xYБe+D;!à sB"Pd rE_hӢd҂;̣ANy|X0;灱e 9qgٱ3z5'PRKh+<{Kޚ7A+j)Wfe-yHEASsF6Yr"$/'GxыD g/eY(A; P̀K-$+=h:(wB?Z;ܨaoda"6VD.ۆEQ WQ*׃(Kǭ=('Lt`ʓ aR4{@6ZRT( j:z#jzDy<Py4[wP[vwέI0`_VBłwarC*NH^}G`;:0;e7ׯHOe/Š JP8y@0SYZ/;g|C0[Ƥ[k`葚O W*OJs~/]o]n?iwُ|> q y7/דz-iK 6A j<@K^wQ:犇>% ɖ~)kH7x0p Imk' 40dT܍/9\i-V4idV:Ƽ}qW&;4O[FVnA:\6Qr@^(_6lUo1'9ewU>=Xد0\ c96dE?9jXjh 9p.e3q;?KnjqdZ,7ưgǵ % ;XWOp$'RгB;E3k؂^Xo7`][ O\aRcX%HEصPLz8q׌&Px4JC&Q7%Z/\~Y<>#3D&߱~a6hMSf:+>"G}ݓMS}E@*5~쀏Uh9B^SE*3pܘ]9xuI;hWQ9C?3%A D*lxEk$UJ@ oyVW)Fn cYΓ2dt O'0)c!+-c-sMM,52i6=Q䌰W5R ϟQjȬ_)e$Ϊ}'0 ZG W ۙt8mՔ$Mص p\9joRlW6kG;lZe%9'AbW@je"3<=xnҟ1, k|&8HI?L(DMK /IC3ÁqsBTPghтfNѶBs.!2bR tO+?7c"gX_ZD\=#S*{p)Co6f8܁-'`͟}ӅjgYݥt>χ d9 s$y>Vd=wP=I#3CXElf:ݠL[ SS!J|4'K&42Pε:_n\MIݡc Rıwg{+ ŗXrX[Y|p{u(&JS;@LuIG72-J>B%+ H+*]Gsxb(WC(cAقqZwlsOwds/~eMogW<&$O ;5cYPǫMN歹@ʦBD奆tE=5H>.!] @edK?`7_H ˲Fhot*jqzapi9n|!EدQ/"ȣTeWA-aI3Nw~ᣀQ95ܒc̞3SV`69wzwq~O]+FguYR2N&i0RԐ|?gJS e0y,\ Vo8-ޑJvp%M zF(ZzЭR;^1'?pK~'EC{`afmd!3Wjef+ѝ<2JTe[yZpsۼ4xg |[ۈvOc6Ku)ҴlO;?k{3lk,q"նiY9T+/W ^=*yDd*3eKZ+* 3|dGWڪ1vbJYG'nO<JA ߼RѪgG&Vu5As;02MoUnK ,k{q9Y֡vPkFdq*5^Ȟ +V?8շwp$yq2y2q\2 u 8> 2#'&O\qdyJwNjT 3~ :[ke]w:УWa@q5mUkްM绳n#hut;V|[:Dܺ^X^)N%y,33FZ,c<.A6nt@S" APn#$$,Em[Od~y6iKn'.61 H'|l}2*+zO oY`Ģ )jaxg^na1 v]ߜ$4Sz!'́>#!~1 \A-Ƚ8 i:z*ty'}@+9I!&f^kУtQP=F>HcdR&猍='y<$G.8V=f>惮"p؅Lcx$[yuWPT.{4|LqH{Le w_0p;>ŀZg!&+c_ς" ןhR`V΋iE o H?\:[?6Qz^45y|ЬK]}0h3Q렩_p="ySf2\aQJgK_?GXِٶ9 %rmI_L}iCHSmJ"oE,%jW,`X mSvBt^^}BX"k\,9۬|y%3Sq#t=1ɖKFZ JHu#J]9Ԡ}K%Tu*Nca:V7:7|_2~T Z-wСXXzܓ܊>jPkGV cMd©u,zh@6Hg  j*$`mFAcŷF~1{(/ .SxC̍ }ojO޼!`$h\#% U鿩kY؄eig)vB*CV k]OG\pBp'qYv ,'No_hNZ4BG8bd l1 JFc Y'2Bx=b(mtTEG^LLwIdvl|e.=p0H٪]U%BjL-7zvƙ̊A6|a ߝi7M2, & 3/$'F i|HOZ \ӟt!N"z4qh"!+?~Qwc8,I_"07}X1pC<4 3pGh/V$IM0 F7@|KQHuOf˻"7 BU6&C!v<=k%|Fn$ϱx'|[>4DD~mلD-W; ;rXX>3Pa"x*g{45#s@j/P3;7㗁~Z7UeLpxk-r{7Qod^UDbtxrbq'-/n S7o z;U%ܚREԘ+(<#T`%H,tC)%q Ɯ,aa$(T:A\K Yxt_-Gp \e8Y[F lg  -^i39qs|Q) ڄL%Q6Kv %J8yх?Hb(MfHMu }QDY(Vt Ecm=ϋCD Flfj߸P0Qr1JY;%>Q17غ9OJhtDfp]2_ ̇7Ҷ o"ntJ&h!g@.$$eZ(s\0㩻rL!^H!VX6ݮqڹ`M)sCB "K(AK L0:dŰA[ Yp4$daX:YhxVplg?G[p^l#"_uHu~QQ8`g)WOMj+9~Vr+mh'bHco j${/'Dmߛ}Gȓt.0 ȝW=߁`@꟧w!2{fY>0;t!Z~ZZZL?O;)>/{f;B9IMF)SN#˚W(rR-ݏ.< Zn) dٲ}-Q|lUt?]ouZ7POZDXd5NUPe"% EHK pH\`Ė?El4իSa>YS$-}6_A Fj|W ٔ-xT~\(DCE!0r9MJl &FcJK:=zu X@bCkJm\g[bq@SE*M<(#!PN@WjXcOgCj7 >m9%m4zDK"ۼ"EչHL!Ze't ޒxА##쫭txז㆞_Ċ4g] ÔOdWy%ǎݐp.*Sobchϙ 𻸖#=[ D] fo]aq+ \| } T@ˢFcU!wĞuldqDcZ3IC{O&!A1 RL_mic +ʵҍ)Պu=^fh;>Xv[glnmޔM+jQdp7ߤ}E\n`JW2Gc7?[++$) b9G=n|$w%<"c8Sds80A;WdĴ5lVȭc<Eӫ v{q.41!B= Nd׾jHUaJ/CbKn~w ytviׯhYrka};~̈LhFX\RkjA@W&m~ܝbz-Qq1 Ί*7SUvl8El#ƭ=~#^}}ͤv܌ٴ7W_,gfd4,O9z 8b$3|Ry<,ȷ-X5j3GR.offRϝi?o:?pyt= ԟoY|>] 'NJsj1L+0 v2aR X837m,Tv':MeB*V?,\a`C n{M00P:;IqP趆lWMX_` e9~˓tX.02D(aChlwpt7Elj@Gi\nՍ-m "&17X* -4;=|/zV1ɴύ/(qȗBI4ro;Ȭə̊44Eނ8~#Z.ldfiKxUX7 ,QRK6q0^ U;L/p&̽ YÕǿ[aVczL 5yX9&Bp18QY1J5k_ݨ8Y2y30 ! y㑛;W|QR6lb\Kռ*EbM D ^HV#%p& 8< bs%>*#iS9-ZR j voG`c\~W*qM#vLLʂ*2$ՙKXyM+5:|ts/ af՜Nod_0I 卦w5VAy=.*cqC( pQ\wôbIWKwrUk*DWoc,dg~WDD#a::`1g圅n-鍯Cޅ~bO]ߴ͓k99#᩾`ϔDC8U+bK4FZQ~euMQ\fh+@nދ6jVYϭ_sw#PBBQLT/6pl_޻}IO|Pr  =OC +aT 'MQͿ,;Ԯcx !VcC%盾IcY'WcTZm43 #Ay%}h69wu>Z,!U4䚔F]ԧWфm ^8R&ܱ}:rm틏kIGW(&c-tǍc=Xq6/2J[p/6S;8חL*8d-cqFYGH'6FQ{>\"e"hs@UEp.ɌavdqҍfZtgKjanWnk5Zdセ=7?=o}β*V3t}f?#{9=k*ZЊܐo2J8W97kԎ:Jz"N<vw @gߠK6a\|%Մ?G״; 'IhĖo=N@/AY!ZmUhB sq>fHcYT4128!mM4%#p(:K#LhH1+%o~ҥ\N891J>yc XeVQ!9rNio+>l+@1L fR<:a a`X^/k'ʀT!K[­'jVq&HrT\omjjj䚗p PS6+Y#~5$`E=:с$ZE`N̍~u,_>zl1ދ !4g)3v}"[5w(xVZ .AIfkbC̦ 7=`n@T-.t[ի WI4%9̠fJO2Ĭ*y琀ۢt᥆:M/LEnz_G2X뺟{hC^{ ˉE[Kƿ(ޑ#St냁d w?sBxG< >Pe\R|k&,ߨd7N+_|} ?L2fU-λ8A\5$;I\ŵ|v9JLGaQ] oy=fVN}񿹖cpF܌ٽPP4a-G>]+L\:5t]u;aDj?~wõ}FF]Cï!O$?6ΩW,+?<@YnwDµ!g Eoꇠm$7&,4s$:zbA^AT[֗.تH,1‚䩻r]u0!&= aw$? "ڀ4߰/P~7yRvٚmiRN譶2xh,fU)DЍ**)..A 8ueCZJ.yhn."+ȴ`,<qE`1pO ^s@rLb Gᙄ8P3a@J  ׅaS"n ɇ؛_{nr*jfP̲f\ZըȥZ36< P>LFcq$Ueqx^q@{kYF :bEN4(j -NM6AQ֚ad1O# PbGF|Z{u~lGCuZFoL\e Kc'{@R_f}&[MVvl ']g'DTɸe8^:"-4נŧ3["`,kVbLzWuSE\] s-p\{iD'&dZ0$ĬAS$uBm W?ɳepಿSv= k'*n2t͆ _Kps#=+{!M*7uNnhC wfP^6ө r̈};=jqMD J4V*&&ܡu} 39 =zv)f1䱊g],UY(K`sC%LmWQeV׿QQJE\֢/:AX:׻=2D%B|ɡַ9w`KOJ#4Ԓj*fdfbVohdWL!MwX>Xឃ>'msa(Y0$~eWʥU)G:ӝ'pFʁ8a柞\3ޕ1ViL\B`yUrvݗ X%;yP.l`">0NsmH=Ӧ8\Si?d{ p j^>{i6WJ];͸cuzWw"Lִ\J#ViAⲉJy Px)5ð!Mϳ8OX7Z`ثE%N&X莀`1D]>ԡh091PU—R"7E)Xj⻩ ]vOci غkɯ[{"ʱbm–D:4P 3G@J.T KJƳ:hTHL(^i2[y`}FU͈O ,Ž_]40#/ ,cJYg`';{<20,ʚjә*b#2Vdɵ`=ޭƜ$Є h$&gB NgߡV杢`\ gVG_D/ubp}FQ%;w~MlV7Rt ux05#˔)!FL[?<ǿOFX_O> Sq7]~Sb6m?g?%sG. yOAVhTVS 'v3Jhb:Ř WHCWM|#_ykcvw(nDZ/j<<Nۆj6 ƙk=8UQ`~2yq5llCDVM7 ͅ ˓W*Tb*9_c F B``iN)yY'1ou<͉U&(+ī_Y{ uɊ3ӌCeOg,IVㅒ|?ސTQJ3sFhF*|6ptTP֗qN<ׁƧIǸL)E&)[ x*G):\XI,$FY }'7ˮPaXVPA"I(TAc8OoYBpfpfz&8 cW쩯U!0i-*akQX9VU7B+POFlaIpW~ow~YI =~B1]@M}%vm- \x+dTB,G%33WưV\S9MQLl{eO oNjrhpﳘ#bbPO8)7&F a&oW( \Y;܇lx湷>1%RB@{= B2Qi%8xs-)w ԅ*W=gS`'AɊ┌wfO }/D)!wu^ 7zdGFM(";L’9 XkyO@˞CE:a*L2f•qh1ܳ?ښ>`Lj+Ref9]oOHdhE)pݕ| 'NߞCHbl=Bx.Y6BjaDkD"?ae+>.'Ѱ%A J0TF҅I<x`*Y<9ߛ`qb.),cjm4'F:pdLb|g> X iP+JWD%K~'{Ö &cC,PNm2N}ډfj77`T˺# )'p'jZv=UW.LAJcD(KYu3M g|eO^cOMd&)VopV&τ!A|@N'VR_buJulQ4g]u`TޡJ1mInYؼfDxRJ好'!]HV~M1?e~ w.ՙ궽}-Xml`)eu7?Z⛚a9/3tx#8<ݶ0:MD<85-`8#Ev4=h-^SeL}0z̾4>HS0frM׊jEiG!?nxĄTm}gnG8({gˁzz_ղ{M56'`BuyOV'dI^5AMyLƭ.aJB4-܈/,qQɿn-n|H>FE61> 9$2EuZՉ[G %&_5#֑Avcq뛴a_*0y% wo FxA'(%lnoO9bFašB'I}u[MS;'N&%ϡ Wq I/DU6[ydK 7b\o Nxdѩ(:#au{_G=Ӯb)i$ByIӌ <U3;Q>}=Gۄ.65Iuޜ0rq>nkd)ZZFG;&lqv9?2 $܌_d"Lڣo;>z=c;"CY٦ r<TfQ͡6g {U2" t6 bsDO}H6.[nbv5{`}9xK]IJ3䃀ClFCpIG6PuiR> f+B5^"G2mk s1dX<v͜ y8\'je/ե9xE/,!85I##fN?8m.>u3!&i tFO-s⠽͆HgXҕ;sHepHFy[:BMktXd3kj6dMgyu[6zn%OۦFh}.y%`L]d}t@ULPsJa=eە d?QdЌac3$xNPquNo9 :ă&>aD?h> < | q;\pUpL èaJe؎g(Nb>{BŠGbӆr eʟRr,3k>[~FZ*hTu HmФ X)ށ+0ǚZP8wɭ *0Pg*9'[ŔoUB%g?!H b 9p>9M,0SKOJyi Tf!T˄TJgc&3b8o$Z{\R 2!^`Qw`Fǎab~>4ƸWJ'x?+D3&E[ҕf;kp4|Kj!"׸'slעp6}jk%dX7v5ǸRg8O +Yb> Q'S-KL$ōKk5CfNHc{ęDLZŇfq[lC(ex.ʯ/GuT]e{N_Vnv'afĬl1Sh\rLˑ&«ԅFWX BnXė5YUn& b󀿦`!)vOۗ#OuEirVR^źϠߣǰf_s(fhObF?N^(F3pޭ_czd*0nZщԌeKoL{ݐ;wVd:u!HXF11 zީ W"蛆j1F,m1#SfR71e$rq't6ٕ"M*y3DRNҙE:X~>Z{(;QZí1^SbTXӜd.d gJ.uZ1|j.ufIy܌d YP-~+wr*9c𦪦Q>WE*zkZ%`wY$J'8*5(P\aϽhْ_NƟ=m?~΀~s9c;){DacXJIKҝ$}ʮUmU ]TlryFp =un9D͟D@칉3wX'qv!D2R[!Y+wb@Lf \R-ƶDFK~w7|=a`S8+V}G\AтB<1e*V ;/!)K+iG)F;rkonދt]d3-+C" lH`S,D@O[@0 n=\`B)cTvRoCPb KL]0 B)2AIjcvfKfT zQuCS U1xo`gjm y!kK 1[\Qoy H@Ө\τ^ȓ桿ȓ&MpWd ֢:k`id F~ ߚg29Mc+p7]t*.ڪ1T8zՌj n0Xr]H|"-'-z̫D­FWCHU{Ȭ8a3f+cx" "Iˍ_DoQw/Zf+?8|b=:)[LohiN;;B Wv[ z4 4Eb/IB̙+lZ; H0 F~I\TבN¥t"\S%209Qٞ`;'7/6S`!jmq/j߾˻G.9Ps35}_L*L\&=5 gT2SCZXZdŅw]ul!jT{hxu+!觓_R-‘i("уbY]X5-NYW_t2oɾ+jѼan7B?A)4ęg j$lp/i~=tQـɂPSa55ʂfcaHn)OSq~0XGR GA/9WG)@ :%^%C,˭#E<~/R'WP[ b|OD. ^V,EI"($!|tŇ( iJ< |RW#*xA: {/;☽?J?}c!FcVg^;b V0Bd-pnڐ-^ǵd :;=N),k cCkÙ3q-E<)sD:f֚Aco\.zLM6(W[' 巡Q?!6^}D=[AN5\_^iGy =~ŋF^Y]RsV|Dj>Zqm:\1uAgт^ug$,*0u#iTu5)21E;O0~ 40P(b҉J- ۙnԷHN/Mʸ|&)rzKDgUௌRؔ41դKWki`3.X{:ma;7B`8je'e($ $aɄ,x,V`],`] 7Gdϩs( 0Rߠ~r]RǦrcʑIxqNv\|d`:uX" on)QdrP]٬̝t5\TdWy'Rؙl8ZNh}i熜y"6]]$.ƯkaY)T 55Mﭤ9@Ӗ#7~zBC~ҼcS- atg4 N\ׄO񡕓xAA*X Gp%aafD:l> ي+ۭh Gp|3ĔOf;d]uS6o(3Q=4GWTl>UAF,׾,Mrp 4J6=WA57;w=2m:{ƣ:MCez3t;Bbա%7zqT%Mhػ$-VQ}(s*ب而ϩDiH .mHaQK iq&|O0&ɍƉy/LJiwQ$dynQO{:bLp0g5|XԀPnnjkĽE|rt~ }uH,߻+@^a;"7 öj+s RVN~BV$_$)x;fiT)gp;UQVA u&NC&믢7<ZnzsDžs Dntu~Y`:VL(t.B='[E&(df8:J#5d؂XG?r].\pdX ͧav(wa 8Q]52nzP$^=E3.Q;-VazAR?1ۺmz/ǻ/ ]O1]K СO`Eܕ8םl ЁA\k*p:4M?S>Xp/CJtskl{h B0:x,/􊡶/EbjJ,`1ڤ|<[gmĹ?a>KRE/9ݮ-{<]FV-qjlRW[JmSY€lD#D9jgak`vVhս h4ra k{_d-b+loEip+7!/ P6@p1z9l]`svg6_RZW)TAy`E1lr.I{ ݁(Fn¼JFU.rk00Lo%IBV:?!#ɘ?ƥoڂmx3Kjy7Nqײ^DuB֍S|~V Oa>Qg`C׷ &kzw6BB.+ࣝ IstM^.MzxMp^ @6~ up<ی:dHzkehʋR'J:Rni8 vɴ J5I>mq*DD'zaas*lB@|5]A3sDj~d y~8jyЦt&&*fzSSoh{]8[>h@:Ӎ"ܹ"CSJZV C#f_)l/NBH^}_~b֠Pr&[}˶)"5L|B#ή_66m kǻCX7ݎm+ GLe rsΰ;(IO+R޸o8ENvfg @ i:]F[j xeA=C$bL >}3DQul(ݍCAn6&yfǯ#3\ )ߺ!?W+(0;-#?]hW }a@jLS؉)#Ye2^EA!aCp vGJ;NHXZ 0̝JذJx~@]9̄sW\=Sbx ڗ:v&R鄆[𮵙uv/=3[ʿ 0`|O ,oxyZQWѠ3_ (>5|!R2޻TgSR^fP&X0^~#'h8 <&")jo5>]S*nIٙ5&|ٗ..3~zjNȼyz¸?{Oxs:-FlJ uaR}YwO*aE փ+ Gw6s?B.U;^ ::.2bxpLh=ei#yS4xE.DYxxyR߽:JX(K+AÝrRRٰvƇ A% ,bwǯ,̒ڰ3$+Fu\9Zf"]W@$f6]g!)>IE5ŀ/IPÿjȏSAu 8q.V%Cn,{!@06%8ŮKY fztg+r7+`mR>j:6.&g=H(qe9 R8$+e b@Q^БTKs3/PsZ0 f|Ht4 .s<Wsq>%[&PbiY_gHj` 9qoN( ~]dG/z{C Iqe(l2&Ne<2Z]3~JH. SkV'Z׫O-r P vaOskFX`gXo!9l胡7qxq]KqhBδ`QsȂMxb8>Yvd U OMX.?=$-Z#77\:|O9CRp;gV7.:WUlʺ) ਅ͗)E(!/_{`A3UV;'z. 25nj4$|$ȳ~/[Q't $`Q8z)Dį_|R* f5J5#ee|ȿU%.DzsOٌl6w$~&<6r\$F AI9<0Rm45'4 X77kV|LDfdl3|S$M@6 `Puedj</;9Н  eK>)d%]/ @;n`XPdrY8O )!a2}HnssјM.st0A{E WcRV #- M)<\ {LP˝,2j̧—u\b"6U Ahzh̟{:^1 "|֟H2n06bКfİ"A,LGqlKAR]HCB,aijzY*oOic=5L v,d5W~t},3' .-zHoFyѥ*=o;3\&R)&CbhpN>qόhkma~mz΁6U= BFQbU[5<Y0V:x+*/_iZz6J^9M{` YH=jf, 1FhAXl0c0 Xß$KIs$:MdlĚC #"~O $g{a#cj#V}_gχy{ť`ڍڰ͕4-|P3uTùx ׎faa}5O2TVOq m?)N]U:_?oSX3m?g)xWN[CvUe7+bl?1ԶP./(HEX^c 8M7F rkr*Zaɧژ3@"1'>׶X4(u,C:?᎞m&U,vRghX ja2U@>E9nFBiz"7ǯq_F֭E2s>Veu[^-ow杧oV´U`L & m:`mTvJq7&yh)xzQ(2Isֿ[Y4j~~UԠρ&D~ҙ+/zMP,3E`/gQZЪ!B:\*]j]y*pJXț|\wAڠ?onuE4x%ṵ YA?a}88*/PU8w9M!$jtsp_s wHڂn/D}`޿R;>JŖIF"Dq?_;U$ob]XוZqmF/Ḇ7HZ7:ENM|Dܥ\])ѦMrؠa'mْ'8؍ >_uzs̸/h`GX!w18J ' cI|5PO4ȟX`+><|C[mYɶK@Tcߊ@!1:p=.zˮw(ԬHOt Q3);#>i/N0;^ .g:񜟔L*0&:>hP[[ɨvQzP¥FK#H_4Qq*3Ζ]9 p(]G3fzƎY?|;n>?ڋojFGM;^r#D7+հeQF+BHa8/-菛U)-X?pޗܡ>e$CN"=o"WR҅3z?pxO B|9i?%mƩnfkt}[tw<5%S_Py 1m8y]=4bK¼/?tE"nc"A#DFOMǴC,G J'䳝|06wۍN`{wdZ"E¼ˏT :M2 HD-",Q8wԧ*|lOb0ߎjJGVծqabБDʳF5 Cϧzw"~x+xlؖ/vթbqz) S.4*eي/d ؔޗzQL"Ë;\O nLAz!ٱ7y ܃P5>U{yܔO d惇UPCb9oq7Ŋcb`t w%槴 ՠaPl*͡@XKh|[;ĩa#; ZK(r-zubh]Ÿ%vu 8;j_v[As9>sK\c$ C}I>0oxr5a\ gj\<5Jg:n>Gۆxl_繼6vց1lalIer-@fVؗS';/d/D/x>!_os-Q W{[AZll㜅n|CUź?^Q%s2硝\VJh!s<0?8/VQ, "p[h#"uSQ\ʛ(yMSR|WyPpD1pdnSb >TGPD@ ]pi?W)y\"CNjXOp)g"a 4o#gc'!Oigg3G|e3քJ;}ZԸ@_ii~PW A\;Yϭ舾dmGŘto,Z.ʣ)AHQE{}f5D7ş֯$8Nl \UZ0  fq:79G\ShbL^"L*:- #íǤ2O&u :-])Ptj*0 >",-I&&`}5߃*\=粎Jk֔eTŃ`$ZZMZ'|b *Z}b݅d[!Rf(pv•:|O/hK[>i_$6ynlv.&WNm"^;'5.0#LϔDOm`yק0OF)twsA-zM?Q #BB -+ /{Kb1Ot-%jv(z#k%<$ǟ|z{9hP;cX.ovO !$FѹU/ U7#:kk,= ۺZN>R^Њ#{4h`XU:W8`4_y:n0VfzS[zO|)WF'MCw%qNi#w56X'C7%4ũVWְ6b; dV·q&@ @Wo+TKwL>wBIQR·\*?쥡(iHb9 6rcwEr1[jLRyU:xA[s3r+xL&s*nZOwvqNEe,) hXM*Zi(sDs W3QDsy}i$蕣rɼ>+᜛-rH03p"":>*)*%]žBFn\<:RyGd XIeiOra "I[`ѷɂ0YijQ-hFb?EP['`[&i[1dШ֣r'ͺgtݨ ѻm5Yb\gɟ Lt5P5W|0`9RŰnEwj_sU +mpg^I@풘oFt[Ll%ڀt \sX8H9Y~8E` ,}-ݪ#e'tPKNBw7A}ғ߅Cs@ױ岝,C!둹P&,(hp%z|Y)5\{ ވ$S,B(/.6g\~1=~ x?d2ևĂva-*[,WD'/w-c돏Ǜz}pb:ښ㝊J29n hM`q,?XA#d[;j|4e`zuNQ#ϗޖ=Gj-WX0I?FrcV(mZIiO |YVy~DHDZ;gFKcLRa~%kЊjIje^a^}oq?M`:'n RJ3{g7J8p'{I:|+ٹ-Pg cb 1yh Ⱥ-O%TdW۟LǒyԔLks&t^.eF-5"$1Kߜ%5Ym90exl2 Sh`,Ҵ 2OO2z­C]6i7 D)LF)h`q.<S ,lq<ݺKXBܶB=Q ϩ8&Ze,3֧8l6˦'ӑp)H07 N^U|8߿l><|eg6W(|S:;Iq̍Z1ٙWveO~B ?.Jukƴg,F';o?͠X$Ebq.2vG*˵r:w",A{uvo~ d:Udqߝiު=p7ֺ2wTFnnU#R'T͹Zi [q"M!Dw߫-9kV,ώik#0/%krx"3/QUX6I礪:۩FzUizV``ݟN{4&8ƖSWqÄB3Z{7w>`^E "̗mˊITгtcDKBf'`Kzg`c)GvAdӒh.~ ԟvxlp Wb/7X[a^m6|Lњܘ{|)_TQ:, MPRXӻ#?Cؖ9kǭ^ηW d:8![?GIiԦ`r,x|Or躠1N}D'F|gcx= Ѥa=ѧvECxPFH3n-smCMd!ɸ Lw)Na g|YId73G6cֆ[:gV@XZH -5G#saUް*Ax#`r)Wh_ nșGk{<'YIv%@k!G Onˀ}Eׁa) ` %+7VZb}/вc Ƃ9 П^S-$糬x; Iły-O&RP7GLL>и[w NδvMш"ZQr2^ɣ?[KE7eMvR? ʎKk.-ޯ"V^:hfw>c1`]Ƶm13yNc?=x~v3>ұeDzOvg[uEecjK P'""V½meH), 0Йy| Flds7醤9?2GN  +?bʝi5Oֽ=i3 ƂxuuumŽ2LLMHHytE/s/lU}@Yp)jXBIa.Dsg\ldڒ$7v?ux]/$ڛ]ώԔ`b*2Z^,J J}5-o˻UN|'c]vB}lL7(W~i-mj)%hd,A9;J.zU?96m 8u)S%~: r2 S{KEfŭA)鿰DZ^1Dt|Lζ(Y7f%ecP)F_ˌi g-6R 6v`3bgٵ=~`fnA=|y &O2!A580.@g.!ai=-K(:%dXt5R4djА$7d(N g{ƫm~rE0E&$޾<᭙OɜP&-,,Diȡ`io ʆcGz=I{; .&̲'n=eU 5>.}r_,n'uo#GFaDRUsB`ɖ~7H<g QHI{hJ:ҎQYd;h1Arҙ댸WtF~/:.QYL2oKyTWi~|<(LP>^I\:z!]$jK:49 [I)xNTHMŌI\~_Ә3aC0IQTLsa\Ce?ԡ]N`enߠ=Wum4"5aA U55 35isC~]#٤Nr-o1w] pI zζ܆"23N!_;gǣ;503GJlʈP%2AK=U1ˮK?z;8o ~n$M4}-=(7X}X i0;3#y;\q_L]Zj检I#nv.<:-yN`j%98#NiJJu+ȍ/ &SyP:Djl./?+89k-oGQrawCՌ ߽`YNw52H$1xִ6"c܀Gf8#zު0y}<̟S=H|uh$S$+&Ukc%a/*MQ5Iy%IULzqFnͅ_|ntXxUi2'YL(NwMyzY'^g<HZ!١Ou: k;BP]|e-)ߤ$Κm!F,);ָ ƒ˷nM kVI,3C Owr'ˁFc4rôWEXuF}mGU6ɝƜM/ɟbfm; ̨\􁆩銢EM7!B]BÉ%ۘˊ x1&~0{ȝN'i:IzAQ ]vtb :7LTp=E$18 EJ^޹U{/$V23e9ô)@͙ %F!3ql4 (@Nj˓G;/ҷ3$܍|v'bnIR8#̯mzBrL H P tkpӏ%YC<~~ҿi%sXǴҦƧ W9NSMg z.ߋSr˱R{}KDefOHXڄ0iD= "'/VqᯕWfkb5W Eyd{#̟SF4ҵdP3}y5 KB7,* GYY/bck`p />3JEBcw)o ZYQk+4ODԈlDɍw 윑SX}ޥ܁iҌ--eq!CcI-b6%buV"mxdc^yD=-Ih|r #[aΙzHtok8d(1*Ϸ#1k~ɭ\FRDG_߯OAUq^˹փe~+XgJ- 7ύ`.Șqf( !Plۦ" Ő0_ѻFR #H{|D ߬ol~y~.47xL`hgʍsǼzdns ),Lj dk WD#n٫˦>D@CVY$'8ĚWP鈹19瘳lv5|UNH&qsh0DvԽz@HŮL mR}{ի+,Nu[Y09V^{2s_TP*PA+ħ?2SH舽RL:Eޏ PTuF C#DU,kRSpLvuy#T5>W闺lED}qf%ly`8yRPEqJ/fӘHU~Pli`T[cӥ,= ئ9 $h4SoF_&j-p}e :?߆A}~kS/wJ_%@U26_W1檴8u]WnsM4XenO/ RNCęX1yk`6K+.Af#ʇZjw_>LPZȑBX$BP/fpg`ČeA;Uo;?{u>_YYK~-m6Fo;&sஎjb7-n,g@xE_Caخe@ o#0Hx5_dyÕQ1b’\Z(9h[H0g(ל;fB6Od.ږiTvWӒG/|/6λ-x.}1d֨O\oz0mӚ rw/ qyB|njXVP(|ܹ+^h- Vc@gJ POדx zd+B$0']sa_H ,;k1!I QoSn>M$8jWcNmruj[L*5L'N4?Z]{>jKRL&8h#LeI)Wm_.Lݘq@ ) 6;c7S+ u}8{N_Vt޻2a6kf.A*$q\kCon"yҢ'_bROnLSO"(qWE܉7g.GF:]KMŊ>r{s1U)',x pst{0@OG6/[2Uut%nzi: -H~2[b8r+)c8A$=P+g/19, X J}lbuZOg4X/L;̟w#{c ncƬX)v63 Y;f 5KE =CNQaykZ rrK9ִh9ڧ#M>V0TL؅S8ޮ[Acb=h)wij4#im}NύOfWy|]Ue&@v!ҷҺӹpD{4)˭UŠ裍N︎_9;b8kkfߟ6B0BMWaѬ* obS1HHg']! ?EԳ.l'C;!h uHPMRzT0f9R+15A,[%:샕xE-< bH |9fU՝<>. : lbw`2Х6Np9@킬BC]k WM$+z*^eIT<BFĚ!q26Dy%ixHt|(> ʪ,D2L拆ROC|HW.Ӕ`GܡK(bz,XFC<4Y8TYD\V91烂|_2FY(rǩֱhiC٫tr].F=V,jͶJJQCA#„SB Ϗx;/`osg`q*p*X҅ٱT!kjAиIދ,nlTiT脡O3"_!D:c! G48(ddt FULif,T㻀oUKu $PipVpl}mo 4Ew%rA4㾘D\V~ˇ_bx 4T~:IsGiw"fKo BV䠬I%SPn/ XcN^Q^mps;\t:gulF~)BE(:+]]e]7ןP`(eL5RGg`UFA>ǷymSQazp~!BuBI_ĝ4eY'N.hEm LO vYr+$9RǦ'Y xGyA_Yzˠ `>M^?dpT 폈B1!ɿjw#KJA&\?)D,1 O#1r=xVdHE5TŖLu6t,ݹW<Wq r<؏Rūr[!nlBA 9H" *QyJmN ;184M ۘAHv 5_v@`C%x=1(F݇ݨψ&8+gc FIė'̊;~:qS<8pF濐變$#/Pj7T; e0хQ'抳vMj| ޖٲc;d >:Gh\L> &HsCr/JB@}g:s 9H{bntAr?cI06 DvUz*7Sco0a :.6a7™Yq۹D.)Vӿ̝L^a#Hn`g"jgw‚;.1}7BPY#m ޛYZFoi&,'3~Kk7+Or .6ɐ=RseNN6Q 6{J)>߾ڰ¯ꕀsm`+)PlYWxq`CxXukXe܅GEͤʊN6HpA} CwLn$gޮ O nsLGIyПA]o6l|$曛i$o-0v#M^Qio(b)!蘙 5tH'b[7n-b$S $쀺`) NH`fDgQU߶x$ X?T8WOIc=U4f'H&({pg:Qp5Dxk9u+8OS ?նɥN@Ik5\q,_Yp#ah]I;Z=P&Cy4HYad'*"\)mUwC~lCYsBRKPt `CT窞NPժgne$;x% /=YXLyB#0e8|3oG{ʆ;@XAs=ŗ.G.kнu~@PW/&ʻ[Cj/Pˋ.$/B QZPs~P޽P:}xԦEA;bܺ 50smZcGܡ kLD!TKT0Awޑ!;ݓ7Fp#9Ǿ*H[Vt\^0b!vVe˕]%yуj}Z+)t:F@X]0 LW>q50V #9aCF!0s q㰹ZP9Ǿs5* P鵌 O}Ysṵe!gڼ԰jƁHՌ~[q h?[ 06zrX؆hU/SDs< tIz=b:pW\u8ԞW!8]l~>^ב^^Z?|cF0Eox|eh7#g*ٗWYlpc] ɗ  RA6nѴ_j. 0ob4$,?5R7?w/Ğ! ^@߄(aRn~/p `)6P.LapT7Cl.UQRklS_zᗰ%?99"|E3a$z\yA\XPPSIH-U9&G8w0ƣS$4f*=H u~v_Mc5t0ǾϷ~fUt{w#>H;Drj{-(b0񏿚r_{U 'yamh@@љ(J- 1YP;lΈi:xAgv-3,]pel+z>g4 DKk~-@}%rfi׹v.9#urN?y:E-3aSt-..w6ByV#s .,_IШ])V5Bi]ֽJfNWކ+qb#cyM"uקX|Sf+_Ls\ +Rv{}džfue &@kw.qp\H[M6hoZF ` ӟS,Wy3&I ՖŞboEf42jLE,y0pŵCcp](}adN/C˥VQkv $Nw4t_ %˅̎WkI[D e$w7vJ-"[xGM9EըX[=uzvZͰi-MC/ŸdUW1RvV#˖=XpG~ᚥ@=Ufw hlE;yCnI՟iOW{xyCzwJ޴H%z;ď)e3 3`ݪ}"q|EYlkDPf! vIـηbgtUg\շ'Q t'Y:?Z8{"/r& S^Qaf1+it$by9 Jb?,n84) {fJBhM?X*=xXkQ!HY1/.ʓ--VcolPܔh%d\<"ĭ,u|~onHY] /6Xk X!ce"`ɛ2hT;|Po>ɝgޭneՃĻo7N|P#ʞ7n~>`d1`2i6N2M6_ |Rq6t-W߂7 ̜ć/'٩xK TUxK}(I_ԟ`=4&j[2*ir3* uj~ ps\kXpⲊGQMG8 o#5LwJ WgvDZ~0J4mA [>CCr[?$M[B#I #Db/5PLe\([^fy]z_46N5Ǭ 2toLE5ŃU cYM=4{Fu۲M4Z."560S5gK ̨= jau3ZRW=β'Ԫѧd:f 1(#zƽJB䭈?%Kʗ4H .0>}aMha+ h_|/W$w.RkϵDϢ`и\8zoߝr!rcSPrj{wBNL] sQu)mz W~#DX1,V9~¿|ٞV 30:"Gc˸tGن?0[4oGwj*4r͝&3AUX7bxp^/j9NχIM6ĬGPSGy=.@@:\E#mw)%j +3ԜDk!4Yp]Y>A0N;9@ѧǬۻGy+|]l}^Nz bcNacu*U(TE\Xy:#FAD70ɤ^Q_1dw181 :s%eIE!Il)cFfTWpŅB,t01W|b/8x_,1hssM{1C7\ GoQçh1Q@m EB2e[c`c~'kpriA|[c`$ v}%减mqY ;2h sFyL9~vNy Zv'-ȳJܤ!i @QB* $#˝1=&l`  p Rє>o=!N+@BJLNs4Dmנ8n4VP %]oA},qU:<,LRK:%]%~IOv2Ʊ`9w U!e^ޅwiHJ J |!Di%]3JQeRC]L@uBo0 %*i2%̀}tZdZ DWY9¼ 8f+Xkˀ(%ˬҕ g h!jAA1ѢGveG5B7]7s j ~xmm ɬ&3I&)DS.]׼o##tU$ZpaIǀ=~h#m&%%1iw}:(]@HL[tXgUc%Ngc#ցAUGV_sCW$db*XDy2'Y~{=YEuGN? ~5$],΍f+ewLVH?;HU RmC801Wh-ꀟ.@v3~Zx;r^۪VXպހ y0kse ҋ! &mt+sf#NB=Ȧ&E?Pօ#/OxBAsʍO@ؘ"vo/n|CA¡<ڎ57ԾlssֲdmW']˱s`iF絝㈴n0.mIɍ?<]t?KqSr L8xP#y^Ճ6w_ALzr VNq5. V]s0?U 5P$N+urK4{P979d}0I)u0!\Th@gqSB#}[ԺG .y?L_ԭKo?w }WRLB¹ _7(&‚"Jط"Rgn?bG^] KL؈-MgEь\@ 9?؏\0ersa9ߨ(:;z Ұs,1 k?ĢلM_U bɁO7VFl&ro^M$|:V|K3 mu\ɝ/qMw Wx:qX0[leM}̴ !"9z"K"I㼭*NwM M;SQcàJVr#{) %:<(KYL68?X1|kj v9d%5ܓwb!ewI^cd&s{UΉ31h4kTjv4R{4aKΒȢv$iUOX^ ?pHk>pYɠ^k`+d4kꛑR*;MP;9iuGFK?iXJ=-}譍#M N+ -wL{)Wi6v,X 4 Ši K?U5DrdbkM/+Whu|܉.>tݎQ kdwWzx<<-|zba}ZeqDbYjYti׬3{ҷ+f+{Ѳ9܊sI-Gt{ϔYnv*i`Gn>$CqYmHA֙Mɝ89kml}̷ c/2u\& U T(Bn.o$~iw%^,~Y  ?qң#Ac6ɸt9)n~ZT 喣Q(#;*M\Tj.jbq"eyŗz80^>_3ĵ hQݙoʵfdT`Ψ!sq0~ V_kCMӝ^fv.F-Kr7S ؂̔S*Sz^]W8- >IzQBJvӽ&e,d;Qf!`ł0Z+I0vZ y"O&+fk1pLw42y܌#C$2$ kvAqt{miRU+)Sjwфx}ix#I`;=ǁz/+m2ޝ5LvJ t?csIeX ƀZrhaZ[$Z6b:L!w5_j<+a{kqhIqdZoGjN][hĆx10WXIS[`+L\sP.jVH>:9-U3֭a7%%Ko/c^=4#>:S/wYL;6!~a@5'U7S?ѹ fJ)_JI}7UEH|f{v;Jt%']yMemg\ T+a#İ@2 O }jW>ο(X3OI3T㾔jGRt kxQNÇ & yVn=O>"=)$*RKQc@1^:ቬh< pz {6W8ό6" !)ؙ"AEx/wVl?Eiݒ뷴5aXFltmR PN8tgR&-t۽\!]jHn8΋ msʤC[I1-zJ md* 7QLTJ7dY99M ~X7"bp5#Ɓd\^[Utx1FbYētӗ?a)铹1[7c@urb_k$z-rpKf&Qj-z8}qdw\+Bf,{%Xd&B6~& >O^+ :TeSf⮦ŗ3[[pq{g &Hi5l9=Fצlv&b}qA:`N_K|EOr4cj޵a" |Ѳ\p؜A:$-56$cmH$gM?]Z"ܙ,BKCò#MFt3GEcDe̼a0, \5 .^05`FnV_Mr&qtkՋBT„tdwOLnE"E3q&C7D}+7O^a3cGh8XTU AdՅԗ }JH6Wuk:`NB8q hۡi|0n9 9EA߽;2CRM>:!(+tjZi~9ā\HeQQnUyKl zvhl[C:.IlgKٟ@Z:yH#|܌+ <3Uh*go̻a;a29Y >95\}H,Ε\(jV 6Y 8e#ȩ 0\LQ+I_{OδW)BA"͸*bt v/(UzMLI6+V6)굱Ayxϫq|WS!'JH7lӣd@ro?wS,C軨za:˓Q7KhRa' Gbn&.syQ4޶"7W3UnstVePخ(Fk;5OJROzv#8kv$&Ǩ5Fz[OUSN}{Z{d;yѻF8fԜ3)b9X˰MU xBtԊ._6¾Ɂאp+3cvꁊJ2T=yı&7+Ż~JBcۉXSiD,b㰧>SOg璞ɑ]cbT4!N%ct>.N6w"Bv/|o5@U@mWՔLu g·fFUWÆ7 `$Wo"]qeb_Q"g 1rMS+~VB>lP' 8/M1vޠ0n~իRҊA$ c ҨoF&G[A >}T("VR Ǚ%wlt.բ硑1_wq}qY MF"C7ro*ZuZ3oG.rp$"?Uc~3X^>#@jЍ!k5CKjIj{+PD| VK︀iׄQha0)zB^UXRն|>bJq3NԹt*0EDJ2 T3ٌGO&3+YIj$} =HЁʺֺvexW0$ r}ݻv*rf=WW=b>AZF+JN@+WV!KTI ys |7'FuOIGkTX$; Ƞ/ٚP/>z{7pLty{J 5di'б%"~#TI|E12JU֎Ze$؀yT z@=Ra CzI <ʘ0n,nQhKQ@|B`F/."^L:朝[S߉s/HWp>^Eą9 zZP2*n-y$eB{*&F*4:P[ܝRԦ-2 |zj-+U1W;#Ղr 6hn5duo%uk 0D1ӠsP;Ç-H(X%!@;!*k :: xP8@ٖ/%,^ M[ttUq}jgvQZhUN.0>d"+@ M6tFՠܗKcpڃ2ItDRuЦ)Z[ 3 ,CgxaV 5ToT S7w-K,U]4dL3<{v͝xK~.k ,BcNLڵj{b $B_@V8SS P %源˞ rq @}@ NS|Kf&*Bz~o^< ?z&7y+O_E,K<ӀE'Τ+]}b8e\XKV=|(b#֛S!;zِ]@37zrj*lزE6^(MƑf}}eVYb\D1Xb#鸺#?6^aOu v0Ħ}lE)[V dlX?0:xF*s?a(XJ8`;0Sz r~¤IT#3LP*R䁞}b!s5G}L;l?Vg3`a'qn\KJƴL.^11==WpY<3%BZVFt`ľ]qfvElSL0kXOyk"i襜v·d=`AOb7R`, l;7\up g1P h߄r+u]QMRr0`er%ȯ6dҘ)-P%R.'gh/cKpwN/M82d n_'׉*wݪTj3c$VGB\j{mh,DAzl m6|0yo;VJUk9%`܄ R~ 8qgFl0cbzcͦP)z :4w:nf~Pc}]o}srkˏb,C+y>_ե:+f_Zf`Qd_iۄpF{j11w=ݷ p{pߖ$SW玭L@i%%"+lJ!U>@x 4[G"We|Z!xkgȥ$b oe/ͩ\Yico\voВ6z׮/R_6A L62hB$֖D6-!n3Mak'^'ъ5 7zJ}^vO$U+b[䇠3;Ɇ# \4.`\v9,D3&^׊!`y`Ӄyg|a7v:?s¬ J|# R-یo\a%RswBFc^LOX[fyуKͨ.fQ7p&- ^ǫ$ 'ch!yb'n2M5_k\ۻbk6Z珋H(R{q&NsʺggŮIb;>mB(M\apkfgyZt:f:K0{N;KpWi䗙}v~,h˥Q7o^A,ZB`XJm'b k2su_734jIlnNTjW3z/F\[kQBz/^uh: 4Yi򟔜 m e^"jyvsjJe TV{oETvR[D[pmPGqZ+ Y=X]ZxEPj՞+. eцNCSga` V+C$(, L1/M_|,3r<9$;2Hϳ&eRPIHAyװ~PG0/>\b6dp*- ȝP$$V{V4U '/R)JvG%UwD9T,rO H٘/'SzLxloPO?UǗr6G Q.~Re.q]j"y+@GD MdE$`)}ZgGі"[.jX<0Dw& ^X?M)TIlc쐤Ej#3& v!X@>&UGIob.%{HL W̏AcY;7M%yl3qGs$Yޤ۾< U\(Ü_[mQ^ih} &f!{PO6<@DHe{a=i\R6ycnM(9?̎dsF \,1t5VRd$ c${ Za֌l-$κG~^jw%(iNc4W 7IH3d"c9ﮆ=@⥵ȱ.JMT !iҋ[`!B_0Vz+bD7%|#+ij3g{9ahՐTL;-p)>>蔙fN>Z=Jm*gwC^U̙a[sq6>BX9±77R\S͆Y1F3d_HEWcdN ,H:1{#'}Lw,&`8#ap3:)[W-XR~@l6s, Z2q^+T:_?dS9kiKme>vā]KM2#WK77k {8a{p9vi34 QeET6Qh`٩\dk0rodޠ, *vvk1Ӿ3_!=䊱ںi$>vQBi|sU)gbTݡUuy: 1ʱe1 Cs;nGo0i{mNȍ<*N黺ٲct8)hI cΩ\`zC݁<>˛Q~~4ĄK!S 윖^p2yqur#J2)%ꈚqa[{?4CnTisS4dU"|ޠذUd]Tz@1 .X/oM ykh#cV!i<"pآ?ۼ' c a;u98~I#h%h&Y;=,Fb[zc5et5és̙P7,q91h)"\7N\ja'y :,t\uPW`2@tyaaOmQ&yq`[[u|~h˃8e" &kp%(Cx͈ĆJ y[ҦnUͽ^V"B r@R&0Tb ,EFr;ݏWm%O$x$y531qj1h0{Xuq뀬mxx8r1+|Iט`] ~7ST_ d~T;VF]+OxwԿ_((&6s,N~ulfj{?陈Ȩ hh1D\׏AE|]4SD\C. \^lo[M' Y}iJM'mUIIh.]IQƹ} Z%)|%#JdE@..CQSn H0ĔQZ ߖ?!׺ΕA [T*7mRPF B1N,sƵ%Klj.C)Xsʿv:QDK^?{CԌBd9a䨭z1bڒI saLWd%1W{;"`1TI/GeHf#Ʈh e8X w&3~ܵ_HyG|4\gexzW^#0ĘLv/fdPQ$mVa2 Q.p ա i#5me4EX'i0\k-aW"عrr° ӭ傺 \6'^Yd6&%bL 0U$%?xOGL\SlrZDb5%k4e;Vw?/6܇ Vѣ` w/#BqEu^o]8 ȦQz-/:^ (_v2r?n28ڋ0}Λnl{y Mˌ)Fm22T>P ȹRb ˂|g6HsIaq'HAkmG'M벉u8zv0 Ʀ%پ{ CBF%HɅnUW* 0S0[32#NJĮ _̙cFR` 2ذCNJLgXtw8FR=lau'! 3( ,v8iDڥ򠅃"-h1d4b51a>>@ |7EWFL-CL/9;1&H fV|dSN*hqǘ*^ڻ.^D U^^$;/s#ٸŗR#>qѶ1 T\jxB- c['Ղ " LysB:;,F%}%V^ ) X>G @-9d=u,o&V"ɀ(`MmɡC҇Se dtu'$clFq F$cĝx?;m=e ̫hHh\m?\ݖGDIF\mOn,+̒mzRӲJf>*9,wkU1RaDd8^,@؉,^ϥƘQWI֚T0ecaUJx 4c2{)Q>b7Z=?ȐN?U4Ju=qj/:@8?QEhGGs˽'?iA)ś8.O뭎肉ؽ bsǪՒ1wq ں3PoVJ7cUf!t`h`E{[`.5#SC6'ĬxGl\ER)]a'K>l-*+q|re>!̯3_A2zc!_15{pr#AfLV3s0sja^=LE8h#j;ekoECT<+E]63P۞dps״:ngM7sai`q,ϞzN,M˞-n'3.d+L0u~##`:E8\}6^);fK$ .۠0aXpa^2-f^8LO$ބN5~׷|w.sp޷5Zs7>[B5gڅQCvN*3b|EW#cڔ7% Oc|yxՄ!Y'SHufYޓcjGש*ٛnezȍR jt /5fÆOD 2wbΉ{i,ϦzƼzᴝH'٣C<@f-÷*z[S 'gδ/zχ>l+^E]!o4(t{K^wNwPM"QFq"COLq?ajρ.ZIF(3#+t{Ӿj| GcnUפi}LS0@>lU^tMICݺ55TJ1iT-w#5|hGKiYԕpa{OW @`8H-, Q"-p , I t嗚E^qô+PAGL%L,d\u٦:K*{u:-da؃@N㢺F$OJzm tC QrigdZw|29 ' c?=GիanbyhMf~[$⥉ͅFȅ+ld#ynG5h0MR5;_ѼO>g=,5##`%@d.&bD,n#{L Twְ h]a :4-i眺~5R.kES>ddEג"mr ڹ ws+#a50;9 uxT9/C„5I!Sz@'i𭦅y&iQaծ*]0C4Z<L|c~tbԸQp{C \;eP"(L^D<:a! 1MضoYsF5*?u'pɺ=o0*v?owAia #tܸ} gzT,87kT[kfCb[5[m<%){!M~ gaE@˷cǾLy4gE1VG<!芖0681ocGғ`I~ž@rۺqzPɩmv9_^9UӇn);~0L(Ǵc4xEDQΚRX n絙dmmL mxA2HIw>m*](ᮠdkPW;`*q&0)\TPT14e6v7. !e,<՘羿?X@Af{AoiJ3/MY$|8dTL(PR 9̘5DxI6&e_!l OZ hLlvC֟IU'CxCTvڀWUrn<}*t'B~{۽!I\}.zY ;#&k;aVWäIhJX28"PT^ EޛϨ\>[Zcͬ]wf31 4UuW|j {j6Kwؘ(.*n,˙,qfRB^0@~!u-]>-f-Wȸݜ߼q3ڙ.RY=g$ "{ 'd<[Ar}J0{o+f{-Nؗ  %0p`4PxkQdx5ajDҐyy|S U =V$364#?_ ;7aajG.o\:UV{w"E2sk@#&#$ nӥUIGr>`7[SIUgm/ه-V)w!Õw :]ߗ#g!@.Eē܈5cIKuS! Y  x6g+g( U/"]Ţ{r<έ1jrֈ谤oڶhnWXtYxMTİTVs: 1֘*P)җhOTl*)eC5yͷ̕ԁ}Al[z$Σ-LQx b`C8C2%%>Q`,-h3!ߑQՠ~}yx>Jij)>ڸh0Ryx4Dw1k<ȓPn TT2'݇_ç7p=Za\b [n@eְNRDD=Հ)9PXݜcv[[ZGGսȋ :FY: TZ{aA|FV-ܙ@ej̝Iuqj1#;"Hduy{q `*F{Dx+S.lRS/\sA+ÉwS 3hb=%ꂒֳ(^r$FѩH*QwV8u~3g[-*Oxu$isV^F(q6 NE$T] |_bQP&oXXREiQ.N1J Tːm%6A -T';$"X rک*]E{%qlr ַV9Hd{QS& '2+vrl@9lϡߋ> k3U "Ucv,`)z&?q3eDخx4jN!CQ1 GU=Ĩ+VHz(n54nh"BlU{@"@/wLmȶmiV<':P|6H ފSBOxC-18Fm@q 1X~z&"]I/wiR6ӑޚkG@8<=Q텂vh9 /Ͽ[~&ژwm;`ON\jV` ,?G@sFZ }}7uThvT=H0J7 Gtk^pd892FܗXePH1IZ8m]RwôNzJɘys׫u rYXڮ'7Dyvv_w9UTۓ@c^AJ@u+b9 ǭl zsFA4BY%[ɖqCCU'c1l̆ g1,[ѣI[KxV}_}(CCFgaqMȐ Լ$h'8]Cp`6 @qUhjpoYWO^m|b_(]z!*OUŲT1:@#*2 ӵҼ^<C=/o=n4h"GP9tЊoYyJ7|# 3$QNn}<rlp7i*.B3.&=>ZcH@QM ( Ah%hd;7;@n ]zA}^B]?pBD~x|HDVŠ;M$ 䑻{t}Qw-<\asK~#+hM;1ͻ{H,P*#=0gÄ.z6@`B9M*?vG]VĮn{Y.m]6kmڌV-”`#w(E}Qj<ح>-@v3,$Keu&xp&v6Baߵ lS5sX5)@x;AN$j yӚ nm,99w?vǢjѩh=ͯe\yV򏟈 %<\kP g}rĚ3=~{?o G}!br;We#ç"]#߿%?'CqO4;B](TH`H$>yz)R17IICM6oWڽޒ1X~&Lp F?TGײǣpq3uor^S6-En_Y',:|\{ _+ޤ"vS:IF4KQ 0h;jLM<&[%Þ 1ɢlZRF]UnG6wʠ<2zU3^G*6P~:bϲZjp "sqAeB~yG5_>66LI%a[e;bY+ĥ?bظY.`16B9~.e阈E`Б4~d6f'%3QOEtYJI !'BL䏮!DŪT6K{$XVVr7 ?!▖ g-RF tKn5wdb&xzQXvH_ez؀!ILg.u ;/1&mCkGU(QXqqC{>qa/Q-V򱌊,w16@Y\>&'Zsf 0f Q QVʇ6rШ̎}FJXF6ԕau/?F+) ;,pK^Vd; sXˈm( ˒Z6jvߢ O0.t>>'i+5ztb08%*J&$78#}i &JR ZBdYsgB7]o7ҷ;ֈ43Mgy-֭)ifHԼ|\&܋P~zVOkG١RaSa&'KڐlqLV<$bAx8D~\ |c@q60q\*U\Q!Wm#Oؘ(hĂ \HőF ~JT$?G7(-3B&1xV\V$sesǯ{z'kU82NImBwY3A "js f@Ѳ 'Ú 7iZrZZ_NJ +5\Ԁv, XV2vopFh)qR-V;V x__&'k֌q$\mId-),MٜS*#r{LRc*E}s`R2^ ;|l^ooPk \<F{10N18HDۂ>v/AFۓZɜ3T6yXYDg[ݾ^#q=M_=|sLNEev`(vRez@JI&Y݁2Gd kyj#E?mf )(%UlJ~='/^"&^O2Tl l҉D`Bs&1$^8o- ՛xa!~WO iOZۉKG( !jdN (JG$BGq]KnFJR]5gWa$rЋܦ `90{?$LثG)kC U:›5Hv 35%- P?G~^KUB$"xPxF{clF3_p0W !?U`$I>߆*<ӂSfꅀV%`nys`$0Q%g;\h`&Xk6Bc {2zn:2MصD ʩ^9r- Ao H Xϧ{̐DZ R%.>&(T^w NѢ2Tm]y=Pdl r`+b-S2Û;,|t 43N"qU8tZ'H5HHFӄY?XBd"")ė?w ~:ehi&o#hCFMh'47̣#2&@6d6vf: Q'--ek{ شL)?Υ=WnߋEp\ 3"n(Yd.5J۬(H׿fѥA. 8E`pچLA9kpyZ_*]Gx٩9gb I1ClI'oPzA$tl 0Mv!vϳHZϘ*TGH!AM9a#7ߞX'N ϾJGwId V8Cq7Yib~}v:Raݞ筪\1z'(mT˸ex&c&M8&RetM}FT3bPx~'"!`X~}X2@zZIИ5aYY>/oѸlzaFVjצ8YVE3!ԹOK)Q &.:QVsk .`֝4s?s N/w'NU867+ϐ5J 3"u!r!=]q6zZz@7Q$@!T5}鮕8mӃY,y{qHߢxX#<gwGю{BlfB-9i+5eLr^~ }>cfgүқerNU {R< RLJi͓Su1^b!OSw\5s6W,Q" v38y*Zɠ=룔w5줴iQZKsL5m:dzp0Ng?]ؒEH#/v^&| ~#{X\xXmJL1)/FTU^o#yz-u GI}Et!h#)( bb͛Ojwr41ƼlW͵rS2wk}?(^Jg.M9Nibz ,G4L%2 J mF8SB\1gSףs ]3(CPIcM%;՝~ c4;Z0W?b)S֟du@ϓ=YQ_룱i^A^F$4sR<4P#7_c<~ m}Nv%(y L i!//J 36&! yg2kF8fcDž[.N u^qc"@݂dsUnA759'xnĐ~am qi4ߤDn4EfBMTw Zrh-G5Q%ov)~L5ށrIoKF˟ʃ~:ˮ0[E'uGµ# #c1ѨTqπMXcRBեHsīxA&HƩi̠\c4\1 hTnr;rf:YZ/ݲlBy(i߰nf 0G.]]LQ6̟ ̓9Ya⾿S{BYQ|=vH';ڽ;) hc "!nD UyQrIS:[7*$ozE2)ێccy=]AaSP٤h]-U>1tG%=s9Rf5B:]3 ]ociUJCF ag2ҢE9 dTS0_StX;3߅ug޷L.d)`gBK[c5/LS8zƬ4EttE&!`k%9s0bxbчnټ[S2Wⳃ]Jl3z"zF'hW =}MZ\*c` YV[ s))ĄI_{ HҷmD$gI$"^ "Wbw\+4=(9D GN} wP1H(aM3 z>s!?ɟ/6ɍANEwK+{y<]}\JMڮ M\$z؃i/+\ZxPJk7~8zɲke,,P_Dp&o^8o^XȬ!awVȎ c6Û%a*eʛ?'&u?M 6Qnҩ)rcDz9 |elJ|@7$k.cG ?ɘ] 4úV!n3K/ME6Ln-ӁuiF>+9J]z>z)a1e \$쥊1-:Nbz}d]65RL]y x+SHV"EQB,JW)QVpuSX3UɒhB(f{O PAЊhV[UU 4sQgtH,S W-$vIBR]n%'y g lD~`3? wZNUf0ݏpMOlC4K-ߞr IuJA R-yʹe!*ZQ֯|c5 ȲJ߼ȯa:q"%;on{N71ᖢ,qc8*H0+)h!C*JP\a RCs/%S]&"r&a0?j&]qt/V1m)>Nш0n2WF w752i3}̡z9G0Z_;ո~e Wutb7 sWWwRy;iOݫ]Ǒ^#W瓜֕Gc12>;/i\dC(Xs߇@_EAJk:}I۽=PNǫwo#&d=ased!=W1cN DuDgƛ(B"Բe)aTP@LeTb쵁 /‡ܳmQm:TRöfHȶ"(|3Ļyْξ$BFpt6N6g~RK:ZB 6&wv:746UϵB.v1}LzD d<؛S*kO>l+72 `}ýӼWt ~t-|!3nv} sv2w&e![El~S5!, 0c89W SEJ72pa͗P*[{' vBLL8G.f=cܣfURgD*Ⓦ"5 r( Lolj?܀@J>O, r= _ϥ@MX:'#  V>n/)a=I/Wrq^J1ke ϋ ٮZ*4vg`kqLeE%Yr3{WOGӤvxs]7,e;dm\ŋiBkIf}ܛ+x#ONCJ_Jށxae"U<:uUb. }gB stiKzބ=Q1NhZ IZ k%D$AAUrՌ.dW&Mx[Զ`pǛ]U>>t.P^tz~5pƙKѤv#}}ŵ!53*_,?2[ELٮa6ڎ '='ko LːD b 0@2W!rJ9%cVmOO ň+JԞ&^bQ2{;qܺ,LclgSV17{ AU*0[Tn O%AYkFUETQ kWX O [}DS/3D?'9UT Ąe L'kie e(wx=očy@G:\F_Nہs%!~(oQ u`qT'bcre\NHYcnm 0a=9/5d6CEȘ mH{&tVGߕ`c|`K` [˙U_$Ձ&Fl\>l30j^BS[N h,#.+9}7xq(ICd5=/tNO'x8+fjF#TkQo5\BT*ճe{K^A|x]?hS:[=U_8S1 <Uk8.zI4rwܦ?cKGigo)NwPZ$[*T_bF{ W _]̯ݓ謃x,jT-ޕq(DQ5I eږ4z݋AԨ?I!kL&XgxbTǣJqD)1όxĴTd ]pesuֿܲK8уy:] #Mg@a+ -S(2t 7>޲-3&QV#3<֙k{SWX;0Ɉa >&m䛉2/IG"5)AI%_R|,:>-+Kb7"T8[g<&߿ Q3S5RQLI{) U`0HZ%gme{Bk#VT]fuuuBS{(! 6P"lrkckC$hp'{zȟ.b' cIMSy=//5υ@^kXW,,W$Aaz~lH+xj;-Ap5mLS5$h̜H edmޒb?&ݛ'䭺JS7c}NZÀcrxp2__q(嘆@ @<[h)P+& f[YNdKKrd7VY%R|Z X{X]OM@ ׯ /$E$x0IQ󀡛L<GƻsMSsT\F7vQǐzlwhA/Fv9Z2p@$*W h9׸|/1t,٥RZ-z4S׍AiklF Q.Y9DxXB[I,E-p+K^6ԩ5Qw3A_24KNy'm֍-=b Ǩ[G:V h{k7ܕ6sֽxr ʦzR5 b>LGtTně580WYHgBU9~ḭґ[:#X!}-YVEfx,Y$^izFfZ-QmyP3Iּ-XBr.N_#c=?h[P~]Ormc&,+&E1&PK8d##k,b#(Pۨ. KǸ'=q^D2MV8<P5'}JWY.Nx9~oIPK`Y) 0MqTqum!:n]?!%=žXPh<r`gz.- 6gl0ͤ[5?^-BIHP)ePBbt:@)NK~>V:.Pǯ\<=Rh0J#0w ` Oɟ?|sq:@-DBKa;.fOFy5 3X2Nciw*d(6qR' ؎<p"h Ö;Ɵ*kZѧ%۲(ݐ! U{8mƑ1"qGzK%ޑEiVe×ޯi[MHXeR/.# m&MLmdWJSFƤöտ!% 6-}ò0>4m)%-UC tu6g(aAVYl[,y|*Y OXԄӁY"k`g~;NW3bz7Pp>Bbg(DV :ufWaRZpWyG|2qSye7U^zW,16 !Gwf3c.>VZh<Z/BqyFw(нtw8OE{rTr+}muwg'n2LVVz_1amS[431Iɖ kLeg ˘d3TW<=N.v @rV@b _*B䙞I-gF곮2׭mF3vykIQT+"+=K{\~"Kɚc}VSɺe yF^Jیsi- y 2N>T%[bÍ.)xZ'%k\VYD)i/ { ^z56}bٺsߑXhA((Œc0JS]5u{S=}Čs?yw#"(Cxu [Op'%SfGkECPu!'_I70\pz^FRĪذ;[(2Ɖ1!]Rj`gT**y~!su~:˼q3<"ޝ:5L*+yPL|7ta ;貋.$p)<").X?Ij}O hE!)f[1)3?x\Jz=2)e[O&X`2:b0'qza|;v{FywR;./ ~0&,X\_ $i=t;Ax^" C$JYy]Ɖ|Tl&.ͧ>貳:`n 7y]?3Wq:AZM4MVc42]]œ`CLg6lI'[B5`ǽ럘p݊`Pw.+CZ#n`4ΏR7.~\5p|kyaU},o5,(E1<+Vn&Ճ(OKBvM!-݄V&jIזI"«,ZuVgEő0 BDT?ү{&TRM0ݞ/c}#}}7b.4ߝ@,&3$W:^Q ^#lG9]_{/$cIko.75_ i1d1\["]rHQz ]~pRl\&*aGNZrӤgܣ4=X@7 OpA%X5myh6qMlv׾էr wPUj6!6l {LsE+bk,s7񓞈Q8FiNb-($@#i^ȫM? ]j#-󉲢xjs}4d(ήw7p1q⺣  M p9%<VH(h] i(Z}ErcOq3+H>)M9 rj't'! Oha򆔾RM(?-ecIl_=3xJ@QVSYV<؁mz+z-{}>Uu[@w_e8d`vl'pߔqZfenѵ@ کo?"Zln?cyɌNf\m[n0# $??WIKJz2;7o=8ݫL7 F72cQ5Fx rod) a7㺄oƸ(˶Hnىqyv-kGpLkf#JpMWsn2Z_z.Ղ%{ (%'`>a6ugAhZqp)pnj'Gp>\jz?Ԧ 21z82 |p`R^i0*6OmY"9>% }}H5vXtpyXv^H7Evt1I&K{0T̫J+RJRi,,q60f/0ii\„˅}dL2>6YdOQ~Djp=W[ { ÅL,%K-'`֎ݴ; UW,re$C^ j3g3 ;#!Ppľ-\A ݽRaQ\_ꢒ2K4E!Rg[&ĵGQ!$Zr.f')^qDϱWmǯO;q"^_j+FX'5kzt/q;(c"Dg;D/3XgDT,(’^|FX B>¾/= +V[d%'ޥA.j6pod |W*jލ:aVُ!o_7h9z9BEdԍA >~"Ȧw$徲zK17W*#"IkSRK 6'36CSnͲaioGavYcdX1˙!&;L%dD&I|im&ys%+i7O*?5RV0_^]a4!nvuN6v >NBZeX &(tx!$ߐ.(6̃mS>zv-w;Ӽ:h^/]-~g´z@FS)TnQ]&^<bj['eqssr b}jdXH=js_ڣN9.171a2뙥?@"-9%\"2aAy # v{&O]7`U?ߥ VUS#ܒs]3#S֗$|Rm'z8+v3ARA;Ncx3 ߨiᦀLvϋ>|$LdeJB|^Ժ!GMt?0QHJ3K[$Si`YU351ץ\=}ۤ*M&5'J"׹rbR &Q,Ó"t`[|e>`KC]mZzr/13Q"y 'qf,YFj]Jbhrqaݡ3OwbmVlE a&}6'J-O\I#uI&3b Pۯ֩@n(g'^Ej3uIL Uijv4}z>=$hJ肫Ԃ^ VV3w˞xPgy Z3ٝ-UΨŃOԸ-HjɭReJ(ĖosVoZ? G^cp&C]Ɣᤈ΂f^-* -W>*VDlzMI`h[h?ցB0Ǭ?:%ʐ_@2}/hMP]w` yo A(nzVMO?mqӈ]GΙu愌 ;$.HyDz'9 @9Kk8FCa-\R6NWag9}/AIWgy M*Dז8ǚӭSmaH/2- d8/.uY& oaT< `E#m+jaoc+b*+2J$eTy8܆, W.Buqj["h@.F%{ fV uNW .U{yi:(=7 '{ ;K#貿$XGYO3R@٠t=)Uy͎S|Z`^ݤOq$&>r<3p{f ͽЕdYBfli;`K4RT+dȶoO`=T|qÑ:Lj'^a-;KH#hHvtG W vIF!29n4؅9{ g!oWx Z{E 6$ [Zz^7{{Gɓa[˃$ # {CMJq[-sFCkXt%?H [|' a%P"ۏaSw@@ܙ? NE*p̞n$T?e1Tp3W^;PIb 1B~~, WBz{yG<˷R[ Tй+ķ̓jl!¾mxP98qݔѽ)%U;]8:/T~Ԅd;X bx1&&5fqnW7FZ2=) !O%7nPUaa-aҡhAirg+X|Z~K]) `h1 U4}u\ =A'bP&}5ld )u]:T6z>x17,Fd:N i+v紱>Q QR=r=IpǤqVuBs|F.s%"8L,sCUwˀT/j'lRo&dwcx"XsQ9~ޫ9 ٯEҰ.x/jZ2Q ܏8wMP2#'N5n P\Im۽$IT8VXB2k$X2zX~9VۈGIRܢCly %=x`қO\[ pXRppϿn7l9/QpҬ%fA߷yQm>H G!Dd|'~+!"gIWm[[9S.;|aҤCEikOӀF3CS:@SssI LA=j3ΗO saΪytb|+ tfeje+O()h53 lj+Gv&nnaLӚGڮ=1`]7ʔ;"MXG9VBFjHEr0^ޘ+ڌt{mό꜊2se}³f[fu6W?|D$ٟMDc#RJ.hجݴq7x{vrji?Df} eOC\ u7<2XyF 4Ewxde4@)=W>Q~䢦OFCjg-u?7Qe{֣͚)!Ƒ&x<%Z7tEt8Kf^Uq"̯'u?Jo4r [fyb^@duxu }@Nqwfw^ PPeWad~Y|A%gϵ;PJ"OaXa dT"6. ZUٞ2`)Uhg468-1JWmLN_FۉKf8.؟?,r'=#tKJPQRYD'H>A^0uzB=XJ$Q|i72NJ=Fǯy y]a,͐ X8店u_(] 5$K }B/*bw#߲?Y?NJ8kbt0tmIYL%}$y6K=2 <'?_ME2hu؋@N#Gyq̛wi nV뤐wAXUyjԦ&cNȌTkUv c\jpPÖr0`(f:g͞wAgZu7*a( ) gWa tq"chjm_]|<yynq?o5Dr6|4ZNv)/ZhCA| ]L]E_5-j6enE8Zz4$&&pj$VnR:0@o8F%ƪ0"6J+U%R@J񾠵wJ[Ʊr}\lkC!jK? ԙ(E-)ՔXBThΦ--!^$9PYr9<돤S䄶)^Șc^F ]Ձ5` \F`=(rbh=AZ ˹ޙط=29f(,{vjN+PXF]ϘdOO0{V:z:x4[5NLBVZdKX GmsxU 솦1 9^Q[FDia) IYddZ~:L9їB"{?x℞c/( 'u) >*|Ӭ4ťw0Zu0DcTK [yqGG!\-J@ +az~E8E'8{;:XS.6;cZI̛jӹZ?:b`|{-;/< U: <)(صxX%=V*Y(s  cZMw8HgSyŌ?<12Iw=oNie+ üZ@ lO鑠;G~7 "4)] GNt$TEZ\™g0Ka-A=? :Zdߤt %xBt5jMPcBꤧ0H쇞8*r%A$~Tnݪ|̐b@p!P&goɋ&͞u-\F@;`ˑa+ѯ*VKЋ;jjl hjtE \UY6- 4$Mt&,*׌fMeMx0a&0Udoҳ{/l#+htנ8qoaW]ӡZACOY-#vlj )I1坔ZEՎH{ޘknaթb(.Z~扯791>,G&ю[2[7Q/_X@ NKΌh: p,g" ? jeɄF!=-2Z] ̃xE&ݽAתݹ:W&ځGY8.mڄg`~ t<Ay']\vl,;{@e7~9 c2Y"ەcoUz=<:-B:x.j dǚ]T?S0d@Ԏ)c WF~QLiu5~ 8_@vBS+ ,Vy/;~-ܳf{RȹbKh)h:ʑ?fjdpu&޹VəJI*F̍bSK|'>)9?fۡFV>N\}?v"MuW]%pClo/1|'Rإ5!GY5xT;CgCt ͧÃiѣ3Jp,rP+~@u8l2C@/B[Y8`9-BÛ;V`C lZ\YBYO̍b8i0tK@h*v*C8DmJʅ q]Ue m8od厉g9>M)~IP ^X(Z}ltRQx.3WSN~JPxhgg˙׳*4׈ kk\bwF$Eybș*$ {>GQA2YKƢ[q:׸TDB$jXhnI%οOXw9]Z ܞoSuH p^ wulasz,;S-$XKB~V+BC~ 9ԨQXChj٬^b_p~TKWv~4Jծ9hj3KDjϮ'sq0^HT6ݸYIА޴$:BɼCwKv~ʖˢTBo?K:.BJq\u36nÈ6},\NP,g׶h-[jϚ!d!Ngs˚5a]N\šӤTc% 3uLĂ6hfB/tg` $׹1/^ n}yߒgkT E893th~M_G OՂЃ 9[2RΖ ~pZ$5uUIy SGX@V@V^f9Maqd}6?{!+4WiL2q R{+N9~/Mx(1ypOajL twhM;si!*U(5S޸G|DwdSE8xS6K 5zJÌUHme8kR#7yܴ#|n:Zyڮ#F'\ bJ;ι?Zχ)Ex;@r6`xcmu ɦ[ru2㑩=UCbB"5Jk"цBF[J4MRS^ZK6Q*$nVłd' >ݬF"2m5/!ΞHD JA(N0C4(h`c0>(8ɪ*0!r"ؔ&}wIש-Yy{9t˺k jZVŷ>s{]y--v ZR62G[HHn)3k t%m?"x 2AB59τs6<MUd-{7K{e<.)wtXM^/MJ.)z{2jniF̍*Y<)3aӴr8F=#j8a9c)P()uX 7] rA\%;3]H$Bqƫ #y读 `U@[̯nxF{zAr9ǰ=@܁ ԕP e:5'_OPto?SpZׅځw$r(Y[!thN2@~v(Ԛ}$a>ߑDIGwgP8mSs˿75&ܘ̥* m5Z>m0 ^u}q0F>l)dޓS$/-0wtpz~|*#4\6/yZCm-1s9j5?<0JXqitHL4(_;(\n`)=3RAG  *~H G)boÏ/RUmyTRip"~=|?Z˷~wLfγs%Q57Qc]'[\.ϻyőڃ=&d(Xpb@`t> )@Adpugo2壦eMx>0-$.6DJ(m: &vj$90JBhVݛQcr$]Y9ZAӐ[~hȥ;<( ?sC9-We$5|2>\+3,OLӐ 6H)-K 8MV =m\y̆}V%"W^~O/G)`;WsE(v#]R 5{0Dw~OEGfMD:Կ\UrOwudrf|V*BL`%h!aRs'+d:98GpL ƧH-06}[ ;ב"qBX YדxגVs,XZD8)nI->[q삍Asɰz+7M`a1CGEo%t6AB"ļajQ^ŒɈEE(~+A, 8~QٷwNSxE]ZMwHO={zŽ 뽡!\/iu6"^>O2Fb[9`F2SOxr jL[W5cCXmeFuz|~d[Rmʎhӑ32I[vK}R>`c@WNU|~׆T=Ҹy|}MI3oc}p_$z}8 y5.$/]0){!~n/ ˞s/Ul81^ *HUl]fYSRiJORӷ^rI֥H(?+* & @9D5аB=ҡ"dr@kdɠOc%> oI jOVݼ"9Js,;@V(bb|$颃gl8B 'n:jl@/!eguƶVHxvɮV׮„: O'hNM8ɋoِ"&SapBL1q+=[T -a5$߁UԞhXFM\7B_'ݽeAAPl%/W L$Z^6Qhmz"yS : ܴ}*}q_lsaYd&/l6I*JXrU6I*?!USr8|q䛲?^~GP˚yv\6]B%n-[?~Ϭ`bTc=! b;}0<EgZݼy65Z}MU(:Ff:y>kHiG`~> .z@*R$w ej>{Lkf™]LJـK̪?W+176q._/b`_ 4-xXBjƟ̾n^XXWbQi(_ n)4e*qFӁ _-~j"LC9}rF5$Ky3](>CC7%;}aCBNz뙌3.5̵.I;BS޻d}`Ns]#`?XvZKBQGoE)i/kYC+jeח ʉWMjbf&+bsJI] 4Q{XZARCs T%~D*<@M.8\|e*bcO:4y}X,pFWnYt&dY A8aa< %Č!م:nAI.4dZѺSj;.%_`8B)(swb4VkTdk) }8nʮ ex{aR3b_hGCcH@MxVD6p,Q$k߀(2@~H_f^  G/R0Et ![qˣeQ\[)NpԻxmؘMa z,FTc PabN[? `TFm; Wv.Kבu& 4m;āNr8jL dD9+՟KEV7dyPqD6Cʹt8LJJ3ϏV{? '=ǖ= 6P~%ωšfnway=S#5B7iM{ݿ÷@3qyO߿([5laNK[早ʭ0萘[m޵/Wksx֗PMƝ&'0ts7t=?*0=41:g/,iUiz&@Y/ <*{]82TL*#g\Ͳ)<[D;,4E#/@M^\ ٦,K|HzSr9]wf7ݫf[- e6hJf XFn В)ɫ6-aq#l{b +|| TM^:͟,gWmT &f3e )3i>Jɨ$oaXfq|Qoǝ᣽'[`q$mK7-X@ iyT[WcB/;۲]*_"|⯉S䡹75R29d~a:9MY+mt^#=,7h G| $mCqsgmK)-2;?4\4V}F dpǒCJ 7u"|fIp,mӷ(?w̶XsdAiwƞ돢g|cƴ',,#WQSHdb\a%>`fMyI:QpK uY]( As3q{Bl/]6B&qEUXKR=I9GZ)n]Hc8썚O/(s[N?"4*y`rEu/ݚm|rT"gjŷg/5e)I𺗟oMNpǁ2N/Cz2ku'8 )ӫdѩwi:Ռ D3#]ˆHϙtS˩ b0$"-Pi'5a|%Dp'asp NLq%PIZ%(RpR2-!ѧ'")6ٶ: 6) %柌˧,.~VOn8{1,bY'; t5|g),䗨Qs̚w> Me7.Eҕ~k vS]sW `I41j(9HBqqp%m]@@HM6p_.An_| N\kWT&ܠ+U~mv9`6T8ף򖾔 '*Bn h/ TN!3`df/x!N0}ծGr_ݐ2/L(nC;x #@.a;6~jsEHȄ$x0Uތ0q\ e/1 ɷf7BِnܡV 9 ACC _6N`CšP32bKVqw_Rjk9edȒ0%-0C1nWi"Աh  8aDYeeL<҈@v!XaYFQ3uMvqڟQ.GŅ*Q-M9@ p[$niPb>C-6fQw'i*OΤ%>dHD__E;Jl%WW" \B^@Wn!Yz"60e: db6$\8WRcw^JNm}3 J7t\J;9oc XrxoCS7[}dptx-5Kb9dd霰jlͼ1^끍"{S+cS6sk`}bNϽ/][h8i aq~Gh(,r{Y$MJoE~팁mvYm7U ]$`&+#Ǖ'-J;.bU.ԵG@xz װ Gёf`t>KP8/h^0 J fxHO-:*^q]|njbP__q-!Sli\Y#:f:Wٿo .`̐a%|6M&$WX9 ]xW6|óUAj1}q~ZѸՉ+oMg('L,%2|c{~ *E#H:M[g @Rn&-Sݟ;\qt{n] A϶YuxpaFX&u FfZ޼wNʞO8X!n|+W|f4=-)v(N&k"S^0x`֧^܌]Fm}{iFOf&ZҼ.sKbj"v(tAf>w{::idfP?c  +BSל=-T`ՙSpV\ n>1~FR4IV {p>tFLC&h-TN>>ƀ0wý([ 3αAe-] ݗZQ{qpxP|{_AX[ "JrfN$^!RqzcD'}Aoy@3xMbf>.R˞>'#? Ԛ$i1Hј;d j&TZ cJ<ڡ( k..1( M3K[#8SD:Pu._Ӡ($@ިӷd]u9Y.7Gpـ<$'ߚK"\!n%@XiA],̭:H!׺TEiXV]iϬ, [@+4X=坣8q JiTlXg%6y5el~Ir[ ]X䄳pM83s:I|7(ʡ**l{!q\Hl2d"0ނ" F̜#ԕBjKAnW~vw3g!ym g/=NŅj\n+H΋-eaθMp}}Y z|EҚdb[eO>7v*])+*\u ,8Ҏ}/}1vz!?rSJ{&&B8N͔S-h(dcm AӱDS.Cn--jook5A渠6y(~q` c[P fMg_)D0TX Rs >dŽ`*K­ qlDu~-L7h2N~6]W\{zzJĈraFʉH.$8/* M #3nH3)PCca|V/*3rU90gj@CM9&lxRzp jDCeF?61ܚTD;P֌L}/%p,@>SYuEoO'nr-VP5 \)P55ųݭ1VMr{?/+X (+nrsdd!B| _fS5W܅_0WF?x$:k%zurYr Q!PwѯY l\2%Hz'B1-'-|4N}<[l3cdxƠ0/ w9.ǀ}\\h*̫Dx3t A"?[L]({&)PԵxxk[Dc݌}KT^yf6جlŞo"O(NCI^9+ &Q"Q߭\r2˿P!GxMHXf^^oe`ͮLpͱaދL:$g2o)d]F[ /]JUYM3gK~K̄ &;8{6xDѺnÚAffdV J6쇞PXgyٟۨ WaU Q2ضlUif \uyRV1a FÀ;閵M@)SHh'b9 pF(qY-5% s6 ]#x@ W,ވvTȒu|}%Q{}ے>3~go$I,R#P1] qNU]1pÜV@+O$em`q-,v\G* 8|%3t ՗vJⵇ ?Eu/EVk Aր?>{aF&2$C'FѸzd:j}*)DqFfHMz"'W3uY"O}YHɀ7S$eeubdPA1z$I %| I叹vT`ӄBG?"NuDgTkW#'ƴYсYy_^:%2y08GVD{9,= &PUs/x`J! Z2m=+I!SO D,U$9%C8$b-|h`9c՗;E&lɓ{A_~D$o„⑬<^W/T:kxZnተ:~^L@gE2Iqr;Fj鞯|y_+䭄UKQtPyZQ }xPW>5^1, bQ{Y<$=KΑy|89qNs*N>[@R406J >pMaUR9́G+sS[6jl*`E.j"M|n8VAҍ{8|sM70RM>%9P4ݲ qѰ?b3/.:;ܿ*  v3`YdԴ"lcuoԀ@0ǟv\@)l bbŐ) Ni$k-`Vgnr`ĎX~i_ ヒ',tfIDAlW;gȬn.7gH#jeBea^H![ &[Kj[uF|Zw}!.$<:[x`\!ͪ>qXfz-1%4ULlkC4~K/)p4zob:lѤe 2Ҥb4~b=$H '; )a=<|P" q؞mv/^3V:0OHd([a̹[1kS"@"Btnw6StIpzD"p}58)`h&@bwK"7󅫰K/#>T ]^OR5Vs#uY ~Hwu\eAZvTmgXgWd)ŏ #֫y pr{?XE#h ߟB.3wl.|_$^m1cu=1z" C קpdPP!UCϭ;d[T@b(@ML‹ TӡJLB[4 >E#x~r[/wJbӀf 'Kd6t37V!klvРli: YZ