xen-libs-4.14.5_04-150300.3.32.1 >  A bp9|J(rfi[%5'[O vNuu2iNpP: ' @~乃uq !x`bYq^혦O ᩮ@oK UJs$8a-͖5Yʕ)Lxh ԰ 6:778gҩF%qJpwFzպfP!-:8%y[RpjlID:i\ ˳UŏDYBZdIHJ?EM641f251d2b527ce403025822bb5021bf1f34c8d49732cfdab494e0533efec18d2cd8d27bb1f6721d2271e1bc5bbc46a33063ccc1 &ĉbp9|kd6*˙%EӋC+Dk8& Y1ݻ ƍpqfô0l7a$5iT1V v!2 F}CET,=f+vSmqjJ%m 0ejA`23Е{]0I$)?5c{8;~iɨ`utsJTλJi$Ea,;ؒ!qt s{;jiAVJT((l>p@:l?:\d  # A+ AO-D- - - -  Y-  - - e-Fl- &333(89!:=>@FG -H-I -X &Y!P&\!-]"X-^%[b&,c&d'Se'Xf'[l']u'p-v($w4-x5p-y6$z9: :::XCxen-libs4.14.5_04150300.3.32.1Xen Virtualization: LibrariesXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries used to interact with the Xen virtual machine monitor. In addition to this package you need to install xen and xen-tools to use Xen. Authors: -------- Ian Pratt bsibs-arm-1( 0SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/System/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxaarch64 x `HF 0 @@  X88@0 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.so.1.2libxenctrl.so.4.14.0libxendevicemodel.so.1.3libxenevtchn.so.1.1libxenforeignmemory.so.1.3libxenfsimage.so.4.14.0libxengnttab.so.1.2libxenguest.so.4.14.0libxenhypfs.so.1.0libxenlight.so.4.14.0libxenstat.so.4.14.0libxenstore.so.3.0.3libxentoolcore.so.1.0libxentoollog.so.1.0libxenvchan.so.4.14.0libxlutil.so.4.14.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.14.5_04-150300.3.32.1.src.rpmlibxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxencall.so.1(VERS_1.2)(64bit)libxenctrl.so.4.14()(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.1)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxendevicemodel.so.1(VERS_1.3)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenevtchn.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1(VERS_1.3)(64bit)libxenfsimage.so.4.14()(64bit)libxenfsimage.so.4.14(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxengnttab.so.1(VERS_1.1)(64bit)libxengnttab.so.1(VERS_1.2)(64bit)libxenguest.so.4.14()(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.14()(64bit)libxenstat.so.4.14()(64bit)libxenstore.so.3.0()(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libxenvchan.so.4.14()(64bit)libxlutil.so.4.14()(64bit)xen-libsxen-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxenctrl.so.4.14()(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenfsimage.so.4.14()(64bit)libxenfsimage.so.4.14(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxenguest.so.4.14()(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.14()(64bit)libxenstore.so.3.0()(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libyajl.so.2()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3bVbb@b@b@bV@bP#bJb0bar@a@aaa6aa@ad'@a]a?=@a7T@a,@aGa $@a @` @`@`E` @`` @`!@`@````}p`\{@`KW`F`B@`8`4@`.V`#`>` l___@_H@__إ@_إ@_S_$_@______@_"__E@_i@_h_d@_cO_[f_X_O@_N7_*@_'@__{_^)@^^@^3^ϧ^x^@^@^^^{G^r @^j$@^g@^_@^Nt^K^=Q@^:@^0"@^@^@]]]N@]@]ʞ])]c@]@]@]@]]fl]fl]M`@]B@]/ ],j] ]@]@] ] ] #]]@\\ޢ@\ڭ\\@\@\@\}\7\\N\@\\+@\\M\M\\\@\}@\k\X)@\J@\I\A\?\=@\9\73\4\$\l@[@[k@[@[^[^[ā@[@[@[[v[W[CN@[<[6@[0@[0@['[!@[5@Z@ZnZ@ZZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Z|;Zz@Zo Zk@ZV@ZS]@ZOhZ:PZ1@Z.s@Z&@ZOZOZ Z Z Z@Z@Z }ZZYYYY@Y@Y{Y*@Y5YA@Y4YYYbYY@Y3YYJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"Y@Y;@YYY@YtY.XEXQ@X@XۡXg@X@X@X@XZX@X@X@X@XXXXXXwoXs{@XlXWXRXQ4@XF@X43@X.@X*X!@X&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@Wc@WZWZWZWYZ@WV@WEWBW=W;W4p@W1@W1@W,@W(W(W(W(W(W$@WVbV(@V3V@V@V'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVC-V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUU@UnU4@UUK@UU@UU>U>Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UUUUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@TJ?@T?@T=@jbeulich@suse.comcarnold@suse.comjbeulich@suse.com jbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comjfehlig@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comguillaume.gardet@opensuse.orgcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comdimstar@opensuse.orgcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.commcepl@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.demliska@suse.czohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjengelh@inai.deguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbwiedemann@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.debwiedemann@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comtrenn@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.dejfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.derbrown@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comjfehlig@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.commlatimer@suse.comcarnold@suse.comcyliu@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.derguenther@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comrguenther@suse.comcarnold@suse.commeissner@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.com- bsc#1199965 - VUL-0: CVE-2022-26362: xen: Race condition in typeref acquisition 62a1e594-x86-clean-up-_get_page_type.patch 62a1e5b0-x86-ABAC-race-in-_get_page_type.patch - bsc#1199966 - VUL-0: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings 62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch 62a1e5f0-x86-dont-change-cacheability-of-directmap.patch 62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch 62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch 62a1e649-x86-track-and-flush-non-coherent.patch - bsc#1200549 VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166: xen: x86: MMIO Stale Data vulnerabilities (XSA-404) 62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch 62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch 62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch - bsc#1201469 - VUL-0: CVE-2022-23816,CVE-2022-23825,CVE-2022-29900: xen: retbleed - arbitrary speculative code execution with return instructions (XSA-407) 62cc31ee-cmdline-extend-parse_boolean.patch 62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch 62cd91d0-x86-spec-ctrl-rework-context-switching.patch 62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch 62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch 62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch 62cd91d5-x86-cpuid-BTC_NO-enum.patch 62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch 62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch - Upstream bug fixes (bsc#1027519) 62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch 62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch - Drop patches replaced by upstream versions xsa401-1.patch xsa401-2.patch xsa402-1.patch xsa402-2.patch xsa402-3.patch xsa402-4.patch xsa402-5.patch- bsc#1201394 - VUL-0: CVE-2022-33745: xen: insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) xsa408.patch- bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings fix xsa402-5.patch- Upstream bug fixes (bsc#1027519) 625fca42-VT-d-reserved-CAP-ND.patch 627549d6-IO-shutdown-race.patch - bsc#1199965 - VUL-0: EMBARGOED: CVE-2022-26362: xen: Race condition in typeref acquisition xsa401-1.patch xsa401-2.patch - bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings xsa402-1.patch xsa402-2.patch xsa402-3.patch xsa402-4.patch xsa402-5.patch- Update to Xen 4.14.5 bug fix release (bsc#1027519) xen-4.14.5-testing-src.tar.bz2 - Drop patches contained in new tarball 60782745-x86-AMD-split-LFENCE-setup.patch 6081bae4-x86-cpuid-LFENCE-always-serialising.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch xsa397.patch xsa399.patch xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch- bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch- bsc#1197423 - VUL-0: CVE-2022-26356: xen: Racy interactions between dirty vram tracking and paging log dirty hypercalls (XSA-397) xsa397.patch - bsc#1197425 - VUL-0: CVE-2022-26357: xen: race in VT-d domain ID cleanup (XSA-399) xsa399.patch - bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch- bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401: xen: BHB speculation issues (XSA-398) 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch- bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output Replace libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch by upstream backport 61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch - Upstream bug fixes (bsc#1027519) 60782745-x86-AMD-split-LFENCE-setup.patch 6081bae4-x86-cpuid-LFENCE-always-serialising.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch- Update to Xen 4.14.4 bug fix release (bsc#1027519) xen-4.14.4-testing-src.tar.bz2 - Drop patches contained in new tarball 6138b7a1-x86-spec-ctrl-split-diagnostics-line.patch 6138b7a2-x86-AMD-enum-speculative-hints.patch 6138b7a3-x86-AMD-use-newer-SSBD.patch 6139f1b1-x86-spec-ctrl-print-AMD-features.patch 6148453b-VT-d-hidden-devices-unmap.patch 6148455f-VT-d-PCI-segment-numbers-16-bits.patch 61532102-PCI-bridge-with-subord-bus-0xFF.patch 615c9fd0-VT-d-fix-deassign-of-device-with-RMRR.patch 61655b5a-AMD-IOMMU-hidden-devices-flush.patch 616d66bd-x86-HVM-cleanup-after-failed-viridian_vcpu_init.patch 616e7cfe-x86-paging-restrict-paddr-width-reported.patch 618289da-x86-shstk-fix-with-XPTI-active.patch 619b7ac9-harden-assign_pages.patch 619b8cb0-x86-PoD-misaligned-GFNs.patch 619b8cb1-x86-PoD-intermediate-page-orders.patch 619b8cb2-x86-P2M-set-partial-success.patch 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch xsa393.patch xsa394.patch xsa395.patch- bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393) xsa393.patch - bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS Xen while unmapping a grant (XSA-394) xsa394.patch - bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of passed-through device IRQs (XSA-395) xsa395.patch- bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output (see also bsc#1194267) libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1193447 - Slow execution of hvmloader+ovmf when VM contains an sriov device 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch - Upstream bug fixes (bsc#1027519) 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch- Collect active VM config files in the supportconfig plugin xen-supportconfig- Upstream bug fixes (bsc#1027519) 61655b5a-AMD-IOMMU-hidden-devices-flush.patch 616d66bd-x86-HVM-cleanup-after-failed-viridian_vcpu_init.patch 616e7cfe-x86-paging-restrict-paddr-width-reported.patch 618289da-x86-shstk-fix-with-XPTI-active.patch 619b7ac9-harden-assign_pages.patch 619b8cb0-x86-PoD-misaligned-GFNs.patch 619b8cb1-x86-PoD-intermediate-page-orders.patch 619b8cb2-x86-P2M-set-partial-success.patch - Drop xsa patches in favor of upstream versions xsa385.patch xsa388-1.patch xsa388-2.patch xsa389.patch- bsc#1192554 - VUL-0: CVE-2021-28706: xen: guests may exceed their designated memory limit (XSA-385) xsa385.patch - bsc#1192557 - VUL-0: CVE-2021-28704,CVE-2021-28707,CVE-2021-28708: xen: PoD operations on misaligned GFNs (XSA-388) xsa388-1.patch xsa388-2.patch - bsc#1192559 - VUL-0: CVE-2021-28705,CVE-2021-28709: xen: issues with partially successful P2M updates on x86 (XSA-389) xsa389.patch- Upstream bug fixes (bsc#1027519) 6138b7a1-x86-spec-ctrl-split-diagnostics-line.patch 6138b7a2-x86-AMD-enum-speculative-hints.patch 6138b7a3-x86-AMD-use-newer-SSBD.patch 6139f1b1-x86-spec-ctrl-print-AMD-features.patch 6148453b-VT-d-hidden-devices-unmap.patch 6148455f-VT-d-PCI-segment-numbers-16-bits.patch 61532102-PCI-bridge-with-subord-bus-0xFF.patch- bsc#1191363 - VUL-0: CVE-2021-28702: xen: PCI devices with RMRRs not deassigned correctly (XSA-386) 615c9fd0-VT-d-fix-deassign-of-device-with-RMRR.patch- Update to Xen 4.14.3 bug fix release (bsc#1027519) xen-4.14.3-testing-src.tar.bz2 - Drop patches contained in new tarball 608676f2-VT-d-register-based-invalidation-optional.patch 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60bf9e19-Arm-create-dom0less-domUs-earlier.patch 60bf9e1a-Arm-boot-modules-scrubbing.patch 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch 60bfa904-AMD-IOMMU-wait-for-command-slot.patch 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch 61001231-x86-work-around-GNU-ld-2-37-issue.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6126339d-AMD-IOMMU-global-ER-extending.patch 6126344f-AMD-IOMMU-unity-map-handling.patch 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch 6126349a-AMD-IOMMU-rearrange-reassignment.patch 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch 612634c3-x86-p2m-introduce-p2m_is_special.patch 612634dc-x86-p2m-guard-identity-mappings.patch 612634f4-x86-mm-widen-locked-region-in-xatp1.patch 6126350a-gnttab-release-mappings-preemption.patch 6126351f-gnttab-replace-mapkind.patch 6126353d-gnttab-get-status-frames-array-capacity.patch 61263553-Arm-restrict-maxmem-for-dom0less.patch 6128a856-gnttab-radix-tree-node-init.patch xsa384.patch- bsc#1189632 - VUL-0: CVE-2021-28701: xen: Another race in XENMAPSPACE_grant_table handling (XSA-384) xsa384.patch - Upstream bug fixes (bsc#1027519) 61001231-x86-work-around-GNU-ld-2-37-issue.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6128a856-gnttab-radix-tree-node-init.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch (Replaces credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch) 6126339d-AMD-IOMMU-global-ER-extending.patch (Replaces xsa378-1.patch) 6126344f-AMD-IOMMU-unity-map-handling.patch (Replaces xsa378-2.patch) 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch (Replaces xsa378-3.patch) 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch (Replaces xsa378-4.patch) 6126349a-AMD-IOMMU-rearrange-reassignment.patch (Replaces xsa378-5.patch) 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch (Replaces xsa378-6.patch) 612634c3-x86-p2m-introduce-p2m_is_special.patch (Replaces xsa378-7.patch) 612634dc-x86-p2m-guard-identity-mappings.patch (Replaces xsa378-8.patch) 612634f4-x86-mm-widen-locked-region-in-xatp1.patch (Replaces xsa379.patch) 6126350a-gnttab-release-mappings-preemption.patch (Replaces xsa380-1.patch 6126351f-gnttab-replace-mapkind.patch (Replaces xsa380-2.patch) 6126353d-gnttab-get-status-frames-array-capacity.patch (Replaces xsa382.patch) 61263553-Arm-restrict-maxmem-for-dom0less.patch (Replaces xsa383.patch)- bsc#1189882 - refresh libxc.sr.superpage.patch prevent superpage allocation in the LAPIC and ACPI_INFO range- bsc#1189373 - VUL-0: CVE-2021-28694,CVE-2021-28695, CVE-2021-28696: xen: IOMMU page mapping issues on x86 (XSA-378) xsa378-1.patch xsa378-2.patch xsa378-3.patch xsa378-4.patch xsa378-5.patch xsa378-6.patch xsa378-7.patch xsa378-8.patch - bsc#1189376 - VUL-0: CVE-2021-28697: xen: grant table v2 status pages may remain accessible after de-allocation. (XSA-379) xsa379.patch - bsc#1189378 - VUL-0: CVE-2021-28698: xen: long running loops in grant table handling. (XSA-380) xsa380-1.patch xsa380-2.patch - bsc#1189380 - VUL-0: CVE-2021-28699: xen: inadequate grant-v2 status frames array bounds check. (XSA-382) xsa382.patch - bsc#1189381 - VUL-0: CVE-2021-28700: xen: xen/arm: No memory limit for dom0less domUs. (XSA-383) xsa383.patch- bsc#1188050 - L3: Xen guest yval1a80 SLES11SP4 hangs on cluster See also bsc#1179246. credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch- Drop aarch64-maybe-uninitialized.patch as the fix is in tarball.- bsc#1176189 - xl monitoring process exits during xl save -p|-c keep the monitoring process running to cleanup the domU during shutdown xl-save-pc.patch- bsc#1179246 - Dom0 hangs when pinning CPUs for dom0 with HVM guest 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch - Upstream bug fixes (bsc#1027519) 60bf9e19-Arm-create-dom0less-domUs-earlier.patch (Replaces xsa372-1.patch) 60bf9e1a-Arm-boot-modules-scrubbing.patch (Replaces xsa372-2.patch) 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch (Replaces xsa373-1.patch) 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch (Replaces xsa373-2.patch) 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch (Replaces xsa373-2.patch) 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch (Replaces xsa375.patch) 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch (Replaces xsa377.patch) 60bfa904-AMD-IOMMU-wait-for-command-slot.patch (Replaces xsa373-4.patch) 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch (Replaces xsa373-5.patch) 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch - Dropped gcc11-fixes.patch- bsc#1183243 - L3: Core cannot be opened when using xl dump-core of VM with PTF 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch- bsc#1180350 - some long deprecated commands were finally removed in qemu6. Adjust libxl to use supported commands. libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl-qemu6-vnc-password.patch libxl-qemu6-scsi.patch- Update logrotate.conf, move global options into per-file sections to prevent globbering of global state (bsc#1187406)- Fix shell macro expansion in xen.spec, so that ExecStart= in xendomains-wait-disks.service is created correctly (bsc#1183877)- bsc#1186428 - VUL-0: CVE-2021-28693: xen: xen/arm: Boot modules are not scrubbed (XSA-372) xsa372-1.patch xsa372-2.patch - bsc#1186429 - VUL-0: CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (XSA-373) xsa373-1.patch xsa373-2.patch xsa373-3.patch xsa373-4.patch xsa373-5.patch - bsc#1186433 - VUL-0: CVE-2021-0089: xen: Speculative Code Store Bypass (XSA-375) xsa375.patch - bsc#1186434 - VUL-0: CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (XSA-377) xsa377.patch - Upstream bug fixes (bsc#1027519) 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch- Upstream bug fix (bsc#1027519) 608676f2-VT-d-register-based-invalidation-optional.patch- Add xen.sysconfig-fillup.patch to make sure xencommons is in a format as expected by fillup. (bsc#1185682) Each comment needs to be followed by an enabled key. Otherwise fillup will remove manually enabled key=value pairs, along with everything that looks like a stale comment, during next pkg update- Refresh xenstore-launch.patch to cover also daemon case- Update to Xen 4.14.2 bug fix release (bsc#1027519) xen-4.14.2-testing-src.tar.bz2 - Drop patches contained in new tarball 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6011bbc7-x86-timer-fix-boot-without-PIT.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch 60787714-x86-HPET-avoid-legacy-replacement-mode.patch- bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 60787714-x86-HPET-avoid-legacy-replacement-mode.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch - Upstream bug fixes (bsc#1027519) 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch (Replaces xsa368.patch) 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch- bsc#1137251 - Restore changes for xen-dom0-modules.service which were silently removed on 2019-10-17- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway. This resulted to over-allocation.- bsc#1167608 - adjust limit for max_event_channels A previous change allowed an unbound number of event channels to make sure even large domUs can start of of the box. This may have a bad side effect in the light of XSA-344. Adjust the built-in limit based on the number of vcpus. In case this is not enough, max_event_channels=/maxEventChannels= has to be used to set the limit as needed for large domUs adjust libxl.max_event_channels.patch- bsc#1183072 - VUL-0: CVE-2021-28687: xen: HVM soft-reset crashes toolstack (XSA-368). Also resolves, bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl bsc#1181989 - openQA job causes libvirtd to dump core when running kdump inside domain xsa368.patch- bsc#1177204 - L3-Question: conring size for XEN HV's with huge memory to small. Inital Xen logs cut 5ffc58c4-ACPI-reduce-verbosity-by-default.patch - Upstream bug fixes (bsc#1027519) 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch - bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch- bsc#1182576 - L3: XEN domU crashed on resume when using the xl unpause command 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch- Start using the %autosetup macro to simplify patch management xen.spec- bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch - Drop gcc10-fixes.patch- Upstream bug fixes (bsc#1027519) 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch (Replaces xsa360.patch) 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch - bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 6011bbc7-x86-timer-fix-boot-without-PIT.patch- bsc#1181254 - VUL-0: xen: IRQ vector leak on x86 (XSA-360) xsa360.patch- bsc#1180794 - bogus qemu binary path used when creating fv guest under xen xen.spec- bsc#1180690 - L3-Question: xen: no needsreboot flag set Add Provides: installhint(reboot-needed) in xen.spec for libzypp- Update libxl.set-migration-constraints-from-cmdline.patch Remove code which handled --max_factor. The total amount of transferred data is no indicator to trigger the final stop+copy. This should have been removed during upgrade to Xen 4.7. Fix off-by-one in --max_iters, it caused one additional copy cycle. Reduce default value of --max_iters from 5 to 2. The workload within domU will continue to produce dirty pages. It is unreasonable to expect any slowdown during migration. Now there is one initial copy of all memory, one instead of four iteration for dirty memory, and a final copy iteration prior move.- Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch- Pass --with-rundir to configure to get rid of /var/run- bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch- boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch- bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch- Fix build error with libxl.fix-libacpi-dependency.patch- Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere.- Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1- bsc#1178591 - VUL-0: CVE-2020-28368: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351 xsa351-1.patch xsa351-2.patch xsa351-3.patch- bsc#1177950 - adjust help for --max_iters, default is 5 libxl.set-migration-constraints-from-cmdline.patch- jsc#SLE-16899 - improve performance of live migration remove allocations and memcpy from hotpaths on sending and receiving side to get more throughput on 10Gbs+ connections libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc-sr-readv_exact.patch libxc-sr-restore-handle_buffered_page_data.patch libxc-sr-restore-handle_incoming_page_data.patch libxc-sr-restore-map_errs.patch libxc-sr-restore-mfns.patch libxc-sr-restore-pfns.patch libxc-sr-restore-populate_pfns-mfns.patch libxc-sr-restore-populate_pfns-pfns.patch libxc-sr-restore-read_record.patch libxc-sr-restore-types.patch libxc-sr-save-errors.patch libxc-sr-save-guest_data.patch libxc-sr-save-iov.patch libxc-sr-save-local_pages.patch libxc-sr-save-mfns.patch libxc-sr-save-rec_pfns.patch libxc-sr-save-show_transfer_rate.patch libxc-sr-save-types.patch libxc-sr-use-xc_is_known_page_type.patch adjust libxc.sr.superpage.patch adjust libxc.migrate_tracking.patch- Upstream bug fixes (bsc#1027519) 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch - Renamed patches 5f560c42-x86-PV-64bit-segbase-consistency.patch Replaces 5f5b6951-x86-PV-64bit-segbase-consistency.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch Replaces 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch Replaces 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch Replaces 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch Replaces 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch Replaces 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch 5f6a00c4-evtchn-relax-port_is_valid.patch Replaces 5f6a062c-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch Replaces 5f6a065c-pv-Avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch Replaces 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch Replaces 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch Replaces 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch Replaces 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch Replaces 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch Replaces 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch Replaces 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch- bsc#1177409 - VUL-0: CVE-2020-27674: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286) xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch - bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345) 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch - bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346) 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch - bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347) 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch- Update libxc.sr.superpage.patch set errno in x86_hvm_alloc_4k (bsc#1177112)- bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) 5f6a062c-evtchn-relax-port_is_valid.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) 5f6a065c-pv-Avoid-double-exception-injection.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - Upstream bug fix (bsc#1027519) 5f5b6951-x86-PV-64bit-segbase-consistency.patch- Fix problems in xen.spec with building on aarch64- Make use of %service_del_postun_without_restart while preserving the old behavior for older distros. - In %post tools, remove unnecessary qemu symlinks.- Fix error in xen-tools %post when linking pvgrub64.bin - Make paths below libexec more explicit - Create symlink also for pvgrub32.bin- Revert previous libexec change for qemu compat wrapper The path is used in existing domU.xml files in the emulator field - Escape some % chars in xen.spec, they have to appear verbatim- Enhance libxc.migrate_tracking.patch Print number of allocated pages on sending side, this is more accurate than p2m_size.- jsc#SLE-15926 - Dev: XEN: drop netware support Dropped the following patches pygrub-netware-xnloader.patch xnloader.py Refreshed pygrub-boot-legacy-sles.patch- Fix build on aarch64 with gcc10 - Package xenhypfs for aarch64- Correct license name * GPL-3.0+ is now GPL-3.0-or-later- Upstream bug fixes (bsc#1027519) 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch- Update to Xen 4.14.0 FCS release xen-4.14.0-testing-src.tar.bz2 * Linux stubdomains (contributed by QUBES OS) * Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix) * Lightweight VM fork for fuzzing / introspection. (contributed by Intel) * Livepatch: buildid and hotpatch stack requirements * CONFIG_PV32 * Hypervisor FS support * Running Xen as a Hyper-V Guest * Domain ID randomization, persistence across save / restore * Golang binding autogeneration * KDD support for Windows 7, 8.x and 10 - Dropped patches contained in new tarball 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch xsa317.patch xsa319.patch xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch xsa328-1.patch xsa328-2.patch- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached ignore-ip-command-script-errors.patch- Enhance libxc.migrate_tracking.patch After transfer of domU memory, the target host has to assemble the backend devices. Track the time prior xc_domain_unpause.- Add libxc.migrate_tracking.patch to track live migrations unconditionally in logfiles, especially in libvirt. This will track how long a domU was suspended during transit.- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect error handling in event channel port allocation xsa317.patch - bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code paths in x86 dirty VRAM tracking xsa319.patch - bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient cache write- back under VT-d xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch - bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic modification of live EPT PTE xsa328-1.patch xsa328-2.patch- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch) 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch) - Upstream bug fixes (bsc#1027519) 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch- Fixes for %_libexecdir changing to /usr/libexec- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) xsa320-1.patch xsa320-2.patch- Update to Xen 4.13.1 bug fix release (bsc#1027519) xen-4.13.1-testing-src.tar.bz2 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch - Drop patches contained in new tarball 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- spec: Remove invocation of autogen.sh - spec: Recommend qemu-ovmf-x86_64 to provide UEFI firmwares- bsc#1170968 - GCC 10: xen build fails on i586 gcc10-fixes.patch- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation handling in GNTTABOP_copy (XSA-318) 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- bsc#1168140 - VUL-0: CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch - bsc#1168142 - VUL-0: CVE-2020-11739: xen: XSA-314 - Missing memory barriers in read-write unlock paths 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch - bsc#1168143 - VUL-0: CVE-2020-11743: xen: XSA-316 - Bad error path in GNTTABOP_map_grant 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch - bsc#1167152 - L3: Xenstored Crashed during VM install Need Core analyzed 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch - Drop for upstream solution (bsc#1165206) 01-xen-credit2-avoid-vcpus-to.patch default-to-credit1-scheduler.patch - Upstream bug fixes (bsc#1027519) 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch- bsc#1167608 - unbound limit for max_event_channels domUs with many vcpus and/or resources fail to start libxl.max_event_channels.patch- bsc#1161480 - Fix xl shutdown for HVM without PV drivers add libxl.libxl__domain_pvcontrol.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 01-xen-credit2-avoid-vcpus-to.patch- bsc#1158414 - GCC 10: xen build fails gcc10-fixes.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 default-to-credit1-scheduler.patch- bsc#1160932 - VUL-0: xen: XSA-312 v1: arm: a CPU may speculate past the ERET instruction 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch - bsc#1164425 - x86: "spec-ctrl=no-xen" should also disable branch hardening 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch - Upstream bug fixes (bsc#1027519) 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch- bsc#1159755 - use fixed qemu-3.1 machine type for HVM This must be done in qemu to preserve PCI layout remove libxl.lock-qemu-machine-for-hvm.patch- jsc#SLE-10183 - script to calculate cpuid= mask add helper script from https://github.com/twizted/xen_maskcalc domUs may be migrated between different cpus from the same vendor if their visible cpuid value has incompatible feature bits masked.- jsc#SLE-10172, bsc#1055731 - handle degraded raid for xendomains add helper script and systemd service from https://github.com/luizluca/xen-tools-xendomains-wait-disk in new sub package xen-tools-xendomains-wait-disk See included README for usage instructions xendomains-wait-disks.LICENSE xendomains-wait-disks.README.md xendomains-wait-disks.sh- bsc#1159755 - use fixed qemu-3.1 machine type for HVM qemu4 introduced incompatible changes in pc-i440fx, which revealed a design bug in 'xenfv'. Live migration from domUs started with qemu versions prior qemu4 can not be received with qemu4+. libxl.lock-qemu-machine-for-hvm.patch- Upstream bug fixes (bsc#1027519) 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- bsc#1159320 - Xen logrotate file needs updated logrotate.conf- Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware- Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch- Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch- Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2- Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call)- Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch- bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch- bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch- Upstream bug fixes (bsc#1027519) 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch - Drop 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Preserve modified files which used to be marked as %config, rename file.rpmsave to file- Update to Xen 4.12.1 bug fix release (bsc#1027519) xen-4.12.1-testing-src.tar.bz2 - Drop patches contained in new tarball 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8f752c-x86-e820-build-with-gcc9.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Refreshed patches libxl.pvscsi.patch- bsc#1143563 - Speculative mitigation facilities report wrong status 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Update xen-dom0-modules.service (bsc#1137251) Map backend module names from pvops and xenlinux kernels to a module alias. This avoids errors from modprobe about unknown modules. Ignore a few xenlinux modules that lack aliases.- Gcc9 warnings seem to be cleared up with upstream fixes. Drop gcc9-ignore-warnings.patch- bsc#1138563 - L3: xenpvnetboot improperly ported to Python 3 fix-xenpvnetboot.patch- Move /etc/modprobe.d/xen_loop.conf to /lib/modprobe.d/xen_loop.conf- Remove /etc/xen/xenapiusers and /etc/pam.d/xen-api- Remove all upstream provided files in /etc/xen They are not required at runtime. The host admin is now responsible if he really needs anything in this subdirectory.- In our effort to make /etc fully admin controlled, move /etc/xen/scripts to libexec/xen/scripts with xen-tools.etc_pollution.patch- Move /etc/bash_completion.d/xl.sh to %{_datadir}/bash-completion/completions- bsc#1138294 - VUL-0: CVE-2019-17349: XSA-295: Unlimited Arm Atomics Operations 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Upstream bug fixes (bsc#1027519) 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch (Replaces xsa297-0a.patch) 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch (Replaces xsa297-0b.patch) 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch (Replaces xsa297-0c.patch) 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch (Replaces xsa297-0d.patch) 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch (Replaces xsa297-1.patch) 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch (Replaces xsa297-2.patch) 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch (Replaces xsa297-3.patch) 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch- Fix some outdated information in the readme README.SUSE- spec: xen-tools: require matching version of xen package bsc#1137471- Remove two stale patches xen.build-compare.man.patch xenpaging.doc.patch- Disable LTO (boo#1133296).- Remove arm32 from ExclusiveArch to fix build- bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4". CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 xsa297-0a.patch xsa297-0b.patch xsa297-0c.patch xsa297-0d.patch xsa297-1.patch xsa297-2.patch xsa297-3.patch - Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch- bsc#1131811 - [XEN] internal error: libxenlight failed to create new domain. This patch is a workaround for a systemd issue. See patch header for additional comments. xenstore-launch.patch- bsc#1125378 - [xen][pygrub] Can not restore sle11sp4 pv guest after upgrading host from sle11sp4 to sle15sp1 pygrub-python3-conversion.patch - Fix "TypeError: virDomainDefineXML() argument 2 must be str or None, not bytes" when converting VMs from using the xm/xend toolstack to the libxl/libvirt toolstack. (bsc#1123378) xen2libvirt.py- bsc#1124560 - Fully virtualized guests crash on boot 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch - bsc#1121391 - GCC 9: xen build fails 5c8f752c-x86-e820-build-with-gcc9.patch - Upstream bug fixes (bsc#1027519) 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch- Install pkgconfig files into libdir instead of datadir- Update to Xen 4.12.0 FCS release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 * HVM/PVH and PV only Hypervisor: The Xen 4.12 release separates the HVM/PVH and PV code paths in Xen and provides KCONFIG options to build a PV only or HVM/PVH only hypervisor. * QEMU Deprivilege (DM_RESTRICT): In Xen 4.12, this feature has been vastly improved. * Argo - Hypervisor-Mediated data eXchange: Argo is a new inter- domain communication mechanism. * Improvements to Virtual Machine Introspection: The VMI subsystem which allows detection of 0-day vulnerabilities has seen many functional and performance improvements. * Credit 2 Scheduler: The Credit2 scheduler is now the Xen Project default scheduler. * PVH Support: Grub2 boot support has been added to Xen and Grub2. * PVH Dom0: PVH Dom0 support has now been upgraded from experimental to tech preview. * The Xen 4.12 upgrade also includes improved IOMMU mapping code, which is designed to significantly improve the startup times of AMD EPYC based systems. * The upgrade also features Automatic Dom0 Sizing which allows the setting of Dom0 memory size as a percentage of host memory (e.g. 10%) or with an offset (e.g. 1G+10%).- bsc#1130485 - Please drop Requires on multipath-tools in xen-tools. Now using Recommends multipath-tools. xen.spec- Update to Xen 4.12.0 RC7 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC6 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1026236 - add Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs if their expected frequency does not match exactly the frequency of the receiving host xen.bug1026236.suse_vtsc_tolerance.patch- Update to Xen 4.12.0 RC5 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- jsc#SLE-3059 - Disable Xen auto-ballooning - Add CONFIG_DOM0_MEM to the spec file for managing dom0 memory. xen.spec - Disable autoballooning in xl.con xl-conf-disable-autoballoon.patch- Update gcc9-ignore-warnings.patch to fix build in SLE12- bsc#1126325 - fix crash in libxl in error path Setup of grant_tables and other variables may fail libxl.prepare-environment-for-domcreate_stream_done.patch- bsc#1127620 - Documentation for the xl configuration file allows for firmware=pvgrub64 but we don't ship pvgrub64. Create a link from grub.xen to pvgrub64 xen.spec- Update to Xen 4.12.0 RC4 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Tarball also contains additional post RC4 security fixes for Xen Security Advisories 287, 288, and 290 through 294.- Update to Xen 4.12.0 RC3 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC2 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1121391 - GCC 9: xen build fails gcc9-ignore-warnings.patch- bsc#1122563 - Virtualization/xen: Bug no Xen on boot, missing /proc/xen, after 4.11 -> 4.12 upgrade on X86_64/efi. Keep xen.efi in /usr/lib64/efi for booting older distros. xen.spec- fate#326960: Package grub2 as noarch. As part of the effort to have a unified bootloader across architectures, modify the xen.spec file to move the Xen efi files to /usr/share/efi/$(uname -m) from /usr/lib64/efi.- Update to Xen 4.12.0 RC1 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Drop 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch 5bdc31d5-VMX-fix-vmx_handle_eoi.patch gcc8-fix-array-warning-on-i586.patch gcc8-fix-format-warning-on-i586.patch gcc8-inlining-failed.patch xen.bug1079730.patch- bsc#1121960 - xen: sync with Factory xen.spec xen.changes- Replace old $RPM_* shell vars. - Run fdupes for all architectures, and not crossing subvolume boundaries.- Do not run %fdupes on aarch64 to avoid the hardlink-across-partition rpmlint error- Require qemu-seabios only on x86* as it is not available on non-x86 systems- Avoid creating dangling symlinks (bsc#1116524) This reverts the revert of tmp_build.patch- Update to Xen 4.11.1 bug fix release (bsc#1027519) xen-4.11.1-testing-src.tar.bz2 - 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch replaces xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch replaces xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch - Drop the following patches contained in the new tarball 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbe-ARM-disable-grant-table-v2.patch 5b72fbbe-oxenstored-eval-order.patch 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch xsa275-1.patch xsa275-2.patch xsa276-1.patch xsa276-2.patch xsa277.patch xsa279.patch xsa280-1.patch xsa280-2.patch- bsc#1116524 - Package xen-tools-4.11.0_09-2.1.x86_64 broken: Missing /bin/domu-xenstore. This was broken because "make package build reproducible" change. (boo#1047218, boo#1062303) This fix reverses the change to this patch. tmp_build.patch- bsc#1115040 - VUL-0: CVE-2018-19961 CVE-2018-19962: xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275) xsa275-1.patch xsa275-2.patch - bsc#1115043 - VUL-0: CVE-2018-19963: xen: resource accounting issues in x86 IOREQ server handling (XSA-276) xsa276-1.patch xsa276-2.patch - bsc#1115044 - VUL-0: CVE-2018-19964: xen: x86: incorrect error handling for guest p2m page removals (XSA-277) xsa277.patch - bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch - bsc#1115045 - VUL-0: xen: CVE-2018-19965: x86: DoS from attempting to use INVPCID with a non-canonical addresses (XSA-279) xsa279.patch - bsc#1115047 - VUL-0: CVE-2018-19966: xen: Fix for XSA-240 conflicts with shadow paging (XSA-280) xsa280-1.patch xsa280-2.patch - bsc#1114988 - VUL-0: CVE-2018-19967: xen: guest use of HLE constructs may lock up host (XSA-282) 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch - bsc#1108940 - L3: XEN SLE12-SP1 domU hang on SLE12-SP3 HV 5bdc31d5-VMX-fix-vmx_handle_eoi.patch - Upstream bug fixes (bsc#1027519) 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch- bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch- Use SMBIOS_REL_DATE instead of SMBIOS_DATE for reproducible binaries- make package build reproducible (boo#1047218, boo#1062303) * Set SMBIOS_REL_DATE * Update tmp_build.patch to use SHA instead of random build-id * Add reproducible.patch to use --no-insert-timestamp- Building with ncurses 6.1 will fail without xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - Building libxl acpi support on aarch64 with gcc 8.2 will fail without xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch- bsc#1106263 - L3: The affinity reporting via 'xl vcpu-list' is apparently broken 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch- bsc#1094508 - L3: Kernel oops in fs/dcache.c called by d_materialise_unique() 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch - bsc#1103279 - (CVE-2018-15470) VUL-0: CVE-2018-15470: xen: oxenstored does not apply quota-maxentity (XSA-272) 5b72fbbe-oxenstored-eval-order.patch - bsc#1103275 - (CVE-2018-15469) VUL-0: CVE-2018-15469: xen: Use of v2 grant tables may cause crash on ARM (XSA-268) 5b72fbbe-ARM-disable-grant-table-v2.patch - Upstream patches from Jan (bsc#1027519) 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch - Drop 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- bsc#1078292 - rpmbuild -ba SPECS/xen.spec with xen-4.9.1 failed xen.spec- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM (XSA-273) 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch - bsc#1103276 - VUL-0: CVE-2018-15468: xen: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (XSA-269) 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch - Upstream prereq patches for XSA-273 and other upstream fixes (bsc#1027519) 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- Upstream patches from Jan (bsc#1027519) 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch gcc8-fix-format-warning-on-i586.patch gcc8-fix-array-warning-on-i586.patch - Drop xen.fuzz-_FORTIFY_SOURCE.patch gcc8-fix-warning-on-i586.patch- Update to Xen 4.11.0 FCS (fate#325202, fate#325123) xen-4.11.0-testing-src.tar.bz2 disable-building-pv-shim.patch - Dropped patches 5a33a12f-domctl-improve-locking-during-domain-destruction.patch 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a9985bd-x86-invpcid-support.patch 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch 5af1daa9-3-x86-traps-use-IST-for-DB.patch 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch 5af97999-viridian-cpuid-leaf-40000003.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch 5b348874-x86-refine-checks-in-DB-handler.patch 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen_fix_build_with_acpica_20180427_and_new_packages.patch- Submit upstream patch libacpi: fixes for iasl >= 20180427 git commit 858dbaaeda33b05c1ac80aea0ba9a03924e09005 xen_fix_build_with_acpica_20180427_and_new_packages.patch This is needed for acpica package to get updated in our build service- Upstream patches from Jan (bsc#1027519) 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch) 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch) 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch) 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch) 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch) 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch) 5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch) 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-<>.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch- bsc#1098403 - fix regression introduced by changes for bsc#1079730 a PV domU without qcow2 and/or vfb has no qemu attached. Ignore QMP errors for PV domUs to handle PV domUs with and without an attached qemu-xen. xen.bug1079730.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1092543 - GCC 8: xen build fails gcc8-fix-warning-on-i586.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" (XSA-263) 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- Always call qemus xen-save-devices-state in suspend/resume to fix migration with qcow2 images (bsc#1079730) libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen.bug1079730.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- bsc#1092543 - GCC 8: xen build fails 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch gcc8-inlining-failed.patch- Update to Xen 4.10.1 bug fix release (bsc#1027519) xen-4.10.1-testing-src.tar.bz2 disable-building-pv-shim.patch - Drop the following patches contained in the new tarball 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch xsa258.patch xsa259.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Upstream patches from Jan (bsc#1027519) and fixes related to Page Table Isolation (XPTI). See also bsc#1074562 XSA-254 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop xsa252.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- Remove stale systemd presets code for 13.2 and older- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Replace hardcoded xen with Name tag when refering to subpkgs- Make sure tools and tools-domU require libs from the very same build- tools-domU: Add support for qemu guest agent. New files 80-xen-channel-setup.rules and xen-channel-setup.sh configure a xen-pv-channel for use by the guest agent FATE#324963- Remove outdated /etc/xen/README*- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with MSR emulation (XSA-253) 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch - bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch- Fix python3 deprecated atoi call (bsc#1067224) pygrub-python3-conversion.patch - Drop xenmon-python3-conversion.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 build-python3-conversion.patch bin-python3-conversion.patch- bsc#1070165 - xen crashes after aborted localhost migration 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch - bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb: libxl__devices_destroy failed 5a33a12f-domctl-improve-locking-during-domain-destruction.patch - Upstream patches from Jan (bsc#1027519) 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch- Update to Xen 4.10.0 FCS (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Rebuild initrd if xen-tools-domU is updated- Update to Xen 4.10.0-rc8 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- Adjust xenstore-run-in-studomain.patch to change the defaults in the code instead of changing the sysconfig template, to also cover the upgrade case- Update to Xen 4.10.0-rc6 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Since xen switched to Kconfig, building a debug hypervisor was done by default. Adjust make logic to build a non-debug hypervisor by default, and continue to provide one as xen-dbg.gz- fate#316614: set migration constraints from cmdline fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10- Document the suse-diskcache-disable-flush option in xl-disk-configuration(5) (bsc#879425,bsc#1067317)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to Xen 4.10.0-rc5 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - fate#323663 - Run Xenstore in stubdomain xenstore-run-in-studomain.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 pygrub-python3-conversion.patch xenmon-python3-conversion.patch migration-python3-conversion.patch xnloader.py xen2libvirt.py- Remove xendriverdomain.service (bsc#1065185) Driver domains must be configured manually with custom .service file- Update to Xen 4.10.0-rc3 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Adjust xen-dom0-modules.service to ignore errors (bsc#1065187)- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Update to Xen 4.10.0-rc2 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Update to Xen 4.10.0-rc1 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop patches included in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch gcc7-mini-os.patch- bsc#1061084 - VUL-0: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1056278 - VUL-0: xen: Missing NUMA node parameter verification (XSA-231) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch - bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232) 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch - bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup (XSA-233) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch - bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch - bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Unignore gcc-PIE the toolstack disables PIE for firmware builds as needed- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- bsc#1044974 - xen-tools require python-pam xen.spec- Clean up spec file errors and a few warnings. (bsc#1027519) - Removed conditional 'with_systemd' and some old deprecated 'sles_version' checks. xen.spec- Remove use of brctl utiltiy from supportconfig plugin FATE#323639- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- fate#323639 Move bridge-utils to legacy replace-obsolete-network-configuration-commands-in-s.patch- bsc#1052686 - VUL-0: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- Add a supportconfig plugin xen-supportconfig FATE#323661- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- fate#323662 Drop qemu-dm from xen-tools package The following tarball and patches have been removed qemu-xen-traditional-dir-remote.tar.bz2 VNC-Support-for-ExtendedKeyEvent-client-message.patch 0001-net-move-the-tap-buffer-into-TAPState.patch 0002-net-increase-tap-buffer-size.patch 0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch 0004-e1000-secrc-support.patch 0005-e1000-multi-buffer-packet-support.patch 0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch 0007-e1000-verify-we-have-buffers-upfront.patch 0008-e1000-check-buffer-availability.patch CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch CVE-2015-4037-qemut-smb-config-dir-name.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch blktap.patch cdrom-removable.patch xen-qemu-iscsi-fix.patch qemu-security-etch1.patch xen-disable-qemu-monitor.patch xen-hvm-default-bridge.patch qemu-ifup-set-mtu.patch ioemu-vnc-resize.patch capslock_enable.patch altgr_2.patch log-guest-console.patch bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch qemu-dm-segfault.patch bdrv_default_rwflag.patch kernel-boot-hvm.patch ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch ioemu-hvm-pv-support.patch pvdrv_emulation_control.patch ioemu-disable-scsi.patch ioemu-disable-emulated-ide-if-pv.patch xenpaging.qemu.flush-cache.patch ioemu-devicemodel-include.patch - Cleanup spec file and remove unused KMP patches kmp_filelist supported_module.patch xen_pvonhvm.xen_emul_unplug.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch/sbin/ldconfig/sbin/ldconfigibs-arm-1 1658310515  !"#$%&'()*+,-4.14.5_04-150300.3.32.14.14.5_04-150300.3.32.1libxencall.so.1libxencall.so.1.2libxenctrl.so.4.14libxenctrl.so.4.14.0libxendevicemodel.so.1libxendevicemodel.so.1.3libxenevtchn.so.1libxenevtchn.so.1.1libxenforeignmemory.so.1libxenforeignmemory.so.1.3libxenfsimage.so.4.14libxenfsimage.so.4.14.0libxengnttab.so.1libxengnttab.so.1.2libxenguest.so.4.14libxenguest.so.4.14.0libxenhypfs.so.1libxenhypfs.so.1.0libxenlight.so.4.14libxenlight.so.4.14.0libxenstat.so.4.14libxenstat.so.4.14.0libxenstore.so.3.0libxenstore.so.3.0.3libxentoolcore.so.1libxentoolcore.so.1.0libxentoollog.so.1libxentoollog.so.1.0libxenvchan.so.4.14libxenvchan.so.4.14.0libxlutil.so.4.14libxlutil.so.4.14.0xenfsimageext2fsfsimage.sofatfsimage.soiso9660fsimage.soreiserfsfsimage.soufsfsimage.sozfsfsimage.so/usr/lib64//usr/lib64/xenfsimage//usr/lib64/xenfsimage/ext2fs//usr/lib64/xenfsimage/fat//usr/lib64/xenfsimage/iso9660//usr/lib64/xenfsimage/reiserfs//usr/lib64/xenfsimage/ufs//usr/lib64/xenfsimage/zfs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25152/SUSE_SLE-15-SP3_Update/d79463816ea1dde423fd617731525ef8-xen.SUSE_SLE-15-SP3_Updatecpioxz5aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c133ec357b8feb46f0f08ae24f10681f4f046a8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c07164c5e03fdd1ef8b1decbe85d6591942f98bc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=01eea96254a21be05040d7366e0bbf8969a04b82, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7647f88687ad06800f9c1beffb909bb6b3c5be74, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e645af95827fdd7f645db98d039036598b526d9e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5c2c060f865a3595c75599fd903a7bb8609ed4fa, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a86498a15c76455f5df60a6e63f67981a5b11b6e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8f5654e2707c450836957ac53032e1438242061b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d5916ecc20ff35e26d52266bdd9398c88fc3220, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5b6f9896e9632e5bfed42283c33ceac8fdb228c0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6e135fc3cb5918a232b21d4800c5830fcfb12a1d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ac5db405955a00b510a03fe7e543701c0272674e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce528bd5443c0f1814c90993fe8f513f1a4189ce, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a35eeadf363baba6a90c80d82fd4c5ba120d8011, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7fd4ade47973639a71da17bc0adbac493e047dc9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6702c67b5ad55ca820263d0c5ea25990a5e5534, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=85a4cff950d20d133fa573aa288cb1460d993325, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=32bb977bd4f77f498abee3d50ffc971b8d5158bd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c52f8a12090ff739b3f20ef482f8f56749fa4bdd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=177eb7c3e4d0ee3dcc8f679185205d6afb602751, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4a38470cc788cb6c8a86eb6bc6699c2826f9171, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd4a575fea84cbd7f3009debcb77782616115b88, stripped%9GYaqz   PPPPPPR*RR,RRR+R)RRRPRR,RR#RRRRRRRR+RR"RRRRRRPPPPPP P PR*RR,RRRR+R)RRRRP P P P R*R,RRRR+R)RRRPPPPPPPP R*RR,RRR+R)RRRPPRRRRRRPPPPPPR*RR,RRR+R)RRRPRRRR.RRRRPPRR,RRRR+RR.RRRPR,RRR RR&RRR RRRR+RRR$R%R(RRR R R R-RRRPRRR(RR-RRPR*RRRRR)RRRRPPRRRRP!P RRRRRRP"RR#RRR(R"RRRP#RRRR'RRRRR!RR RRRRR!R RRR!RR RRR!RR RRRR!R RRR!RR RR%LT1޿A'Yf>Wutf-890c2f02d9555122d2a17439a2f7e414cdba9691c5d3ee9f9044c1cbb93e03181?7zXZ !t/:] cr$x#Fԇ(D wU?ֱYWld 'QW@4bᨊ@n30gCxQ 7Eir:_&Մ{n5X0+~_pԋx`f%IwV~lHx~r~=X+>|Mφz*ܣI`'toD) \fvSz<ui<-rGz6ɜB6~.?oګZc9ѭ+LxJtqgЯ#U˙7:ʧ6N <2/@%[q?i 9j;y*1u$/:vB jZٞɉMcvPVp@h՜8?|PmE4onӽPIzY}™ּ 73˦BO"bH/a͚#;!8{DFgz-7Cqj0n2't!뇹Yb0#5Dxϊw0,eJB@AB;5k,ܭT VWAV(HC}[̬X_+ǔ6#w׃EC놃"/6S?u֮<;P_[*ar[ebۦnR q4XϠu{(ǖn"_xyxW{YExG7Cԏn5( 5-Uvĭ)N\+.gEExZ|t' 3N/zXpE2.R)Ε~Y\8ۀ:{xK}t]@ Cv}f'=۔&GLhگ VX-,( _N)ھ3X{(=f1<β7AY Y!%f  ] rxGN9&]pO#wm:ƢEre!L%ނᴥ3ĹߌѻNw~+E*?"y[3|< [9q"/*4f ZvH#:gJlU<_  6ђ:,0j쇚 FM{-5ү7n`_wB' dB,Ƈ1%60ZIxhPF5nuw\BW)ÀY-D~vAk3Ѱ6GƐ:̅^4Ҧ4P\θ/.\C0YP[:g^a(*϶$uݻ tbE!o,'"ťWݣO5ZUV;0;jXh?ѿ(!'J ԓ3(a{,m1=$!X HHG\=g} $y5MWN?ixM*1FM8={m4I@BFJ t3"6L7plji/O(ƙ!A 3Mdrߊ RB>a×âm)F% Z"_5 DK2FJh‚m-q~vP)'RmdR)G폖!q| YS)A Xj?+(Wv'ˤO_\v2 )fO_c` Hduc.jO{{c|_̃IcG41T@Lte3alۙ+)`P/&"#¢ `_nb9b=^}io}mP:v)7YM?rlXo/"ibvߩk#Цf1MW&;K$N% Ҽ];88>\.5'X(Oxa@L` ̯ H\ !K:{IQ;K i "ItOn;.3"PyYG(_]ـ7ʩS^ll3o钫P*_G&=47HH$G+!^Q灜47neAkKR"|܀I=zǼ׵s5oYF K'bAQz٬6U=uQkQ tT$@{~u(%Y>>}bEOk& ӭBFSDL㟹YT Ny)S#ܫRME=0Uf7z%6+yZ&OW R$yMOv+*ߵML+Bq ƸeAo,6 RɅ3 RUx5r%E!f*A^cHI|4z46ݟ3 EfN @aA-$S&m)ζ!/ ;<[T/ ۝n0>Vaυ\LDn&oXx=rd?~j H\|Bx] A5Js*t40aJ3ʵrToH`-%ֽ({5#`F>mJ2Bx,Ȍ0F|L]R} Vp10-Di"^>77rȍ/-íBj s|A2*WC3/S\8vA!D6WSٝ  u{5gil}'"1S`rE%66u_(`L^7QZJ^|EQ̮FZ(CsE_;$gi凴%WGJk/P?|;P"4QXpِ]/w~17C2aЄlGb o\C*K?iKdxt΋Ӡ9qe(R i7=$IeE@E"A@ 8G Ba 0DkD:{OUX鷷;2%. ̈0ãA! L^pJ OHjK>Rt:(vMHڥc'pŷzNܼPشkMmg)_mkVOSժ)eh3@f'noHՕ ҩ2͚u6n A"LP\#$?hhq cxSjϐ-AG VNTV@yd*b3 [²XA6 Y~T.u{TV(bxCRԫW$j,f9 ^Rj.W9Pɉv*ȟTns  8 np fޟePB'N1DfJ/\3|x%· W|F,[EZ{A.63aLˁ*R2nQ-'W&Ժs* agjd^Vo$f00F?Ur+D>WIԦ"ͳ#14 ed&U.&8/Ʋ-;ٰ#TQ ҥ L3Oא$L1UfJ1&TlcVkscPhjYA< U kX]VB=\$dEkbjE?۔U-LԳ֏Q%3RRیn ao%z=RX(=0f絍E"!R9I|͢\"R!IB`vz3h > 8$ OcP˚EFr9eg@Z,g4_!u HNFQ?n3MhqF@Pť{CftJֱS q- (P㏹A%lB2^39w1Ҙ'+N4P@]U;aڗpDbl]@ f)6*g]h4eMq 'Xon7Jvi!$l$ZE54 ~O'ܿK#ZYdexTAgFD\gd" 븢֗CY:a/&ImاD t4SݸX<\]'\GOLu_ҸMHNy~rL#{2ߓc)ys%%q$<~{ȐzG7& Rstgb4/^y_P>pl%^@ CGv$Gb3Ln2hMJ'N^ u:I{hwyUG^?7 J^o3W<ĺ;؊Oݎ&2onz[] ҌzuM/h5R!ѠJN!멄_>dv|D߫i t##ZcTل,<݀T!2:Fۏi%0 +]t~[;B;x!'i,dUvh'[ןe]F-Z{Ylބ bî/RmwWol^Qj+1P8⧾b:sdҥН|աE9n/_Vg9nYT͠aWpѫިxe)u KLåК?Elvņ *v& mW;}KhxYgY@*OsAnِ͠qhݶhX[㄀A]1r芉a I ( 05w[}ۓ)P_AuFčP}# qcgeИWMZDj4\f(xT 1'\tQ\XWYKle*NuliϪ-| zx1+1~>E43iIӏ@y r=o+M g-fML60"B!+!:%3b[A=!p8NWTkoY= _ &HM^d9yz[øﻒaQQ-ghs]+!k YwTh-t44@hi]7L4ݠaPs\ OcTʻ~v%nz1ba gb8gM4*t eRe/]3"mg>'^9>Hb0J{NJĮo=2UANB VvIuHYw3R91qbKGےK@U0f*;v{Eн){7+颀R}z9؃ kVDQ<g~,}B"# %.3-PƷ(!i1oL~)7'Mϵ C+h N$N+U"m3SJ9*. ̀UM@pN({͑h?=EcD  (lv}c]*x!Q;fv15}gfUN2Cn/<488 x@$+3B2?3d(֧^x%5!=};`YP<.Kɒ XGtxqg*{Ԩ'EHսE`4Yɱ\ DꐇݸH$xc?~?sx&-5\]iP`3;N#ÊB=U5fbf՚2 a%BhIAhP!=,N6aȑFΙ/řv.l5ni>@`X$wQ /;>K7gGh3o+}kL&+ٛWqZ`#E> K+U4{% =esTrpʢ<1W@"\9UA3Yp$R /dH89y,i6b)E~SK-N6Zlg\HBCV0:wh2Ce}LS{*I[gp[ܹ['uHsƙ䫳NX+KDEZϓ~^+ۭ7›/.N5NMoP\o";D +p*T%WM@l+pu.,˦&ŗ2Lf9:]@ !216FtUHaAL{XtC=W"hlTS_Eއ7|z{lm[}`1vTQV``RieA\P6~ *VR#ŚYC {g~Vmm},e+wh$hUȭnRG8uWz}V[p&Ԃ89W)g@P"oucZ BIX}KCcڮHHV HY=%tS7.6'.+p'[/dqa~ge䏁9xJIT(y O8ٔ2#dcv5 G-=nb HTy;>ézHDu#᪭rK,=sG} 74f-lP.0mu$#G+*`_Wil $Y>+3dr`c([o"5Cs_K0b_5F &0@fM <?$_=|t࿨v؆Pଗ'nm ր \Eu:5}΢B @Zǟ"C@5a> ~mtɼ=/,fQxZP1c7?UB1װ40O `dƻ;t~,BMyX_zw#$5<Ƚo^MH ɤjiYj@" gDP'OBNjsj<)7Ú.4 ]?O:jNUL[I 8A'?*"hj徆#mu+<%̹TPMR׽{LPucdɘ.Art|93y-DUXMjK9=wm0zd_:p|d­MK܊`kUlbNRMFnª!u|ǵ d}!1mFњ~ #囪4 sQ:hiZXlCG_vSMGovu (ØODxIJ(4 "gf+^`NRctэ_x^ ]`#Y=}o艬Zn~nveШ8kx7-&l}i-+呝 59(WaɃjQO>n:уƭ~݌2a_*v3h1?Lh?aQh]<~_M/Wޤ;:u۹Z̞V1pVRNlv$;Ĩ'@:W&C/?XqCg+K}}qr",Զ9-̦Ut m~AffҲHrMʂW=.%q)pfK~1`Y"c.Op }1i՗<;1^غ)܍=|Rʥ[b.q@`' sy@J&;ZG ֭ AL▽dI܁1?fw_;o hPxݟ`}sЏhG3rlLN%@n- uW?lmer+t7:A&9j\amw_.B bxPW`][#f05x 6b(!Y2 H@tϻD kwxR+^(83]NeS.7˃> vZ Lݤ`y߃isG)˰˽*I6b sGvՌgU|9RA̽>[n*x<ŜPVm5? Yxam%-S*ؤIgt&t"e>gUÓ&$N/LOXgTQdtXo~<ciiO='ÖFz= X_N>5EN(0gq $]EmAO&qtfl9zV>.K,^Ci <,Ŭn<ڂ-j k;H@b V$ ]4Og9%񫼡w |f^G. el(@kUD&I6U-;2yw#e:G b1vQWΔKO郹ԛbP)0xZ^ܧdM UfjQ"OyD%։"W?>/^d XR~@yH:hi>LJ:ɫ]Uh@u}wٷ2Sk>wu"c4N:m{eg=:QCGFXnքEp1RM#[H{"k%42;$="9C4K19c iO<70Hr(1L`2 C'+J&`bk?$A=\QlrC1W`컕@Fٻ<"7G&0ˤI+@ڇ&nHbbU#vnxLKFW뀚\;B+^~U%lO~잧,SM- TIQ`\#Y!vt0sXh?@V|Ad OiF4:0VX$G av]a8unϥ-r/V (ҥkZPndr5EX߫]HXUtgc?Ds8yAv;ȟP}vL ƲqOjTTЋ)|t#DGv]0rkzCJy.a*XqǙ`v` t{ffto;u qtgs2uup"NO|s;hPy+ %u`:'"MSE+JCuxrv0kÈq i!h풾H{2= -||x5Ŗ Ub}ENUsN86ehgPd~"FB}c+鉮/emb]m5̰D/y^4{ˍc鍾nRccIUkΪ^V[l8"8!qJӺX%g' -XA5UѵKc:pNC[ʱ`8| ,Qӣ`^Ȁ.zn%-#N+,3 ejn=֭Ҥfٸ[f /mD/\Zv6Iť@#;Bяۑvz/yn"v)T;aߡȏʳOoz^P9F8XW YYB;kM/:]ڕVF, BkΕ &O^)ҙZ2c]|0Cp;H E]U * 냶zMD~ؖm5?-^tc >.P*zIV;{]2u3̦k6p Yr0%1yN{e[Ek8,]NEcVMeHN2CBG\ ЪqEFM!i wUybKϥqf,=5)Mcyƚx9yO-8o(?bwp /$Ix•( %O:wfa)u Qy}8J01x4o?jRM9t/f`T3J%> W}:`s$ rojJvej83>+n;_]?6E3Ztiڈ %2РBx\*ڶAߕNcYWBO]'n-4jI̋{shpP6N˻:np{nOI 0g'P>x>uEE]aLkx!b@<zۑ\;NrdSWuٓpcF4%lPӞw3j7V"t*.W-!dc{l0Hoۙ9Hqc~*oGI*G1|s@@G`jWZ101k~ʱ= 돦 ,t1U$V/lJ|d6Ã5YXb*7Cǹ{ {Am0ϯikaqEV6X#aF=9߼<[G.b|%`|)n2(L:[!%ժW BT| O8!O(u#隍YD*-;ԫhH^ȕg=l.;\T6}5^qxk|FL)Kj\ty7032pGr2]Z/,W{ KE΅\p+Eҏ24aDG  sazG 6H-3$PN'3GZE*E"VޛAg`3s! .$>P{|P#|B&m~XA KrM_zMMJlRY.]avwxSngCq"DGh(g< II .ia)f=ֆW>(d_c+o8(ְԟ-gzGjE hn5s#eױFXZkfɛ{lp?VZt?B7y'Yݧ1'QZT r] 7d]_{`F{NƍQ)6Ɠ*=6tAMIl)vK V5  D~9xn52SʩB+muT>j* DGq0Z^펐=|$ ,.TڟÎ tJOk^|`*Wē"-ÒOءPܐqD0:Y o/8\\rƗLېHNhB!L}I;ue~8w3n.@9dyD\D(hw&\H'g *Ew!.a0Xc-y!oD@ mEX>xZ/x S15 [nTj S`ը9 " \a^> Pl%PTn <Шbt C/B vnBNSzt,,vQ!͟[=\Q>ж;g҄C iVڡ/F̃H3ј䇺ICm QXPr.n㳥 46Zhu>m3?ϐTf1JPWi7,(s7ɖxl]*4 :v(B|+ :P󻣄^̂kZ-Fh=&,:cFZ kRU*Rujq8v!sYS)`'\/[j _McH=.o0=q q&"#u8PGc!!SΆaWN MRzgS ua?2)-R.\bHO_ Q,&T@ESՌSy2. A*:) Vx#=tv`u}@E)#87z$A,qd .rRiԡFr]uQI2|wA>S2j,oqq`zA y;Yi, ;ƭ%Ndi37I}+?XuNҿ[xz$(mIr]=9D [P.5xb3;{CLg\PAQl&?n`+b|15*/7uIFHؿ kkqܒ!{2Xd)`<eğ{*qZw7Aw_"u$_.6 vK=NtwCo:q;II7 6uivv|.,PY YH&_=־@qout%Oz\ n%tJ ֖emNBYa+QHnDig `$"<ڂii66=^i:j8%6T|*B#8ɟI>5zF5X6I'fJx̚MJwu8D6Z?Fj!39ey#/y2b+lpq9:?xк=Uu[_(xGyܒ8|H問7ʷ&D*OP@+C=mڂUf~a͜vbc>^~Y6h xP)u휀R}exa,])spBWmqAT +VH<3nOoIȠ;PT-KRdWLrQɻ^:6ymew*Kjcx!o uTrGrovAhl?t%HJx\u#VhR@#=B_9VT4Y1mPoݖq,m*b>& ݑxI>٪@!i'=K!sWWG\'Mv?dli5)uÓ x":jh70R.c[Jq'ߥ@ L||GCbHEZ혌!UKIH V&0E0/7(7 zRf?6-MÑT00 0Y756^֖c^>Cɇ- 9gbȹ?dT)Hw3/􅹯+%o8LHdZt뛻J>KiNwEQj9'S6\]QyXሑaw@C`+SsH{sI_cr =MD*Ѿj1G뇟[5.}n !X{iԇ*Qyjy̨SnA;r oc_1ܚ3<2 ;<5x `=(%:]"fPRyEږ#FdY[2`jH_vΫs~!UO}DW'`"}Q^ LhnP"HvRiJ{uvjs/HxKĔab:c#{N4P?X0胉Wďjעv->K2ZU, _+Jzk`睢6ʥ_60mYkZr0͈O!KUMqp V+?cPMOD̡0şcsv\WRPZ>[,uJA.߶98(|=6/0 pr| 79D~=V)m9}(Ȼ>$>k)_/?c7K3>(r;hmJ~~в@L48qE$~Wpʲe=^FҎ຃Zç.)/4A?kT~NqYDxƆV=&<JZQ@^8vQymD=zf6ӷ"z:!ͪXVI4lmoT*X(oe<1%g-߼4#7=>ݰ^NJFG0< 9!I e]NX-1qF =5!=7~@w5nv XsgD#T7D׿b]|1*%A' _ Ț;+|y~㥩tJ/mkbLlU ?o!I5]'3t /bRg] E?=NRtQQ/KbѪ a.ǫ nUF;w"At@ @,'$Ј$K7 SYc9ל2sS*D&ыD9ߵ$\cvDP'"W,c{)-ӽaI еO{e _%zV5Y6V?GYI2~i-hP~GOx. jR7T҂#y]PYcq%k,=teiJ ōB?LѣyBBakvYq,).^4z])1ȼ̑B1u0#ȫfYRw($8 Dfo&æ p7 TXE ތyP_C|8oWVY*JJXh/e(./C͜I,+.,UD!y>Ys7A:(h_V8ׇSM@-dFW`xXZ&QUcZA$A! b}!@6Gs2^2ϒ X)Rtj1KˍFb VFW?q⩜^Xx&? '/p3-kRCFRaŘqAb]r=Wc.+է|ld$B HfY h*mMѽ \+VAT;!^@A^=>zKHdj;᷷DswZ9*4%(D]/f)ZDP߀wJx6 95jSF-!JԔdp^0;RLs[Aӳ(/nkw E1O|Eh놃tFRr|p[uݭ/ vVNͰ9l*Vv^1Md 唠F鎺-0SLD y~R>[UkAʿW\^ :I'm};RvB5me ~ =|9cx6Xޒ"Vy!.H>x| "1=APq|3ȴ?/R]h F|q-uGY]I+}Bky̗Ls*uTL񃂋3vqY&U3Qԫ耺N໮&%Yd^3HIJ?͢Ł|ňS4 ۤ~'H,]%k0jZ&aܑ9Bt?L9 ^eM\V[C@Bz+\1 ëH1/ "*D7G6(b(5xŷ`yK NG<U[Z~A+J wif¥>d/ĒT3M!R`0_U0t}m8tJDZxN*ObyҞS19ɔ!ޙLS!^ U`"KIl=b?]|>nrE2tle4 In3 9cU-* L#e "-g;],Eag/Z䝡mD.5[=,6kIQ(1vS&s jŜ@5k5?pj߸xvU;4٪j7nyħJ,G&m aXvI+tgӟ@еyvEcٯ\ZH8 FCm }r}ȼR$="`>ߊ7YjGpF.6"}(\_./D)e\j-f\}=d t*a;݇ﰇQ4`/aBXS[xk[>plDTXugMN8AY 5eڕͅtOC׳# ~٣$# &Ѩr>_IWl%xq-EYU{y5mcFzurS#]}Բe7Z䔺䟤B -ZwR U35lWڨ!U&M|^7'\TE)woS'>CHJ1ytd ' !+9R@ܭ! $Nm0,OgNv'+7nnBf0U[0?/*RC)-5&%da /)yP-u OTX:/,dK&ߩq4%4MeX8I+1J!o7'*5>Jkk eh;ӄ~CDT[ kR5kr1(я 3ϪOZ߄!d %=,?S!俰>Bڨ?7蘹4*ϥtB~Ds/ĉ}#A(Spuw_бo`{M?60*N#WKXJX=i4}Tz>κUIaOT&9 6>8E:XZtJYxB NLVYfMk %6;0n.9!?dF='tSHFOYQЃ=Z(C]`0''-ƭbOu>rO{< uW$(FYgh1ܛ \m13zaͪ5K+[vǻэ_"kStKP{`TNi \!u2)V!z/mZqVK<&\rΔ/8|ΗX)5{_\zuCBNi-@S|+DT?^K ,g(YLDhVSv}2,Zphxwxuh{дysHEa5? tL8YM{s7&Tf~Kn1*􋃎p~P=-ڸHSKL-Gabޣg3jbY",@!ÝCr>(a?bhZ?3zZڶa:?rNLJ A.bxM7ύM 1 $1#'s옼BjCoZ&KnY|Ss/=SxDS¯Et y,>Q=މݵ ,@yWyx Z:2Ip@ԒܞEy~Nk -ilo5c"G7bj@7lo&7A r|]k_2̙_/:?X%`^j֗C֧2\B6͟#3n!?d.m !i1 :s” 9O~, Dv%X9Oտ%K )Tnr' FX/Z7L }<6q'*q-$cBs;yJ0]LPAH0\%J }O8/68V2۰>PX԰r_n_KP<3YДg7\ߪѫM\NPQ&Fx5y/f|gր(d\`gz&Q ry>1lq ϴQ-n.~}lVDRGvg#տ*M}mGu9έBofJ$fJm";l2i0prnrS]z6Už L} [F:awKU?q1 )~ڪ DkhVt]=<(i- J%ѽ!ױ4(-+չ'A S'Р:' &ѿq6_$=E.ƞ0\E%Ds&O&K4`#>r!%5c+]׻;WCǤ5$`*6mN`71;4޾)C1O;DvXч۟ f g)t |#\9!I{3g.N; *fOwlwQ%ωUtO>m5WHN-]'BԮîLVzmcv9䲆z kA>$I5k0O<⾷369 {75 PA7w;0fz T 򬘰Z9]H7386&-S9!`o[]r1=juWooZw>b1Ykb/xmb޵O ѽ-Pڐ.A(37x%TRTY4aVA\B{FV;wc0. j4P.mVŏmaDwvt?(I+(3^})% };X{yd)ޔyO~u)6 \jBeզ -(<R%Ras*4UJ 4d0M׏_i$ ZK"[UƢxn_oW94jS+4Hq܎<$_tqWqAQ?қ$PBnmzx~T@$1A*c׼w$"YYQ-IY>Ehﱥd4^F:g3MEcҌ4CjA՗-VʐZS+<.³k"R]&G/hN,cތ+E zD*Qޢ<JzM#BR1pxNh)l7 +Bb4_wbrʠ-E,h)mK țCmWޓCsi`SJxX_YfW'==xT6 xXS7'uӷ 54Ӓ) Ix6O&?ghY}{ԞG_5vќf4:gUp<= !Ej!s?D!aw D+e6ɑ`S|4w'B:| K*EGN|;#1Fe  NkoO9݆STiu؝=F-[ׯjĕ$#iQ?WvXO||'P3uI˄-j7??9HE&s?z[|VKQJ7Ndvw]ՇLz=" hN=Ұ%T]Ņ> o4yl AQmmOa0Ԟ}7Ց|nL)P?[:ah>*&`-$* x~xS fd5KZ]ɀT :q(16E-Z\5d1`;K8F38e}/-j7^(}A( ZE$/YXcGwD.Aj[b T}^ g9 e|ug(!Bs*"ty)є+!F4&(0)o)'<6T)jYO&6[GT12- Wm]|=s$w#%rQTuDˊd+sEx L@^X=[`b).{RLBht`۰LoPǛ4Uz/g$6g>O: :僕v7RYW N "XU"f1c*َձ:TRK!)҄4uFLܥ3Iѷd*{FS tHЉ ڄb%r014Q%6Td%E:#pwP陗2/+9)|G%64| CC|wwM>l'ՌX Y7EɄ7mj~ބqbbCZx--d*@M`}Ѡ=*fB뼟6>//iat75*IL|}IjsExoˮD(|7O말K?Ը98q7xEyO("{.uɰ‘QRpm'Ql_jI8P"9h$:5޻;}4QʼvWڭ,%lIZCj0rJ͔3!W?}-؎ͿYTƓcx. '@wr$}"p$jkSϒ3%Us\Jzqh&kD+~?E(mM)9:xd!,k>}"֑lٱ1f toaVnJ, 8%<+ZiXzOʽ'VUW J VM=5DRa6)<&Eáa"ՠ̥&bߩ7a;%yҷ[[|+'>h?(gv>M&$BRE#73I.L\j%D'7{5ĻֶLTkT?*6Lg ¿_JiDp$_m[2Nk<.hD|&9Zgni VR'RF(€uy}`Tnooa>^a^@"Cuf_U' j?_ι1 ܝ%s}LeНVLl))V`ȦZqaŪϣ#0ѽ U'TtrCn$NiQMbwɸ8 u՞HYo2Yr0_:14e`&|Dbۗ_# gĮoD uar+Ix1c1 ȕOGΨʂBu;K>҈Licnud&*fLb=l AP+Oc'H)$Ճj@ؠh=%k/x!74o.94's,-y\*s oj9xT˦~ ; :[p(y0JzƩۺ @Ϯ[D)viSB[XDIGeDK@}[faӪ9[I0}0T ]R:N ϫ'֝1O! \Br Zf?M`E[hW' x,_PE2(yu("^Yķb"|<{$t|6ȥO}qP:$Yא@f T.:,kY d}L s))]ՆQ@eJk.PC|qF,mR56qLH/*phQnt 6`BoB<^zCԕ|V"Y񒔗YK>$_d~Lݵ[#X/hno_icEg?3p~j$Fr3 <r cnMx}N'Hl˛v=]x*|xhZ o0/ߞKFe} 1ʘǝdA͍{"nQͥH$4:tkph|n X<+X3RO)c d8X9xI/hv_c&i!6y .٭j` ;f$1Mezmm\NN"ekՈԿ+mR;/(ԴQ H*RjNTRg`m!Xc:aszPyPIΝzh}ލTaM%c@^Q3{G>+FoؾPB:| U`@x #LVέFiubAգЎ7{^=5PGzyyQI&Y]W힐ڮ!H;+@ xyyᆿf~D@N09kohv<[b?&lbz[7J`M K; /&ԯ -%芴fz[ tb?<0|l FUD)Lږ+ ݍ~*ygd;>,^1BTd(Kw_noVRw#1P\;Yow>_C"ѵ)X嶩c)wYCєم?wx Ȼ7fSVhf.\Zy G>wFcfJҠ3%r-K,P3{( {S, )0m Sp;qA=cM7Wsmm{v+]f9::x\іcSp7E3hka }Z4fjgk?XC+ʾWl*'S8&o(5dY[ArCl]HK&(,*>q T m 갳{1G:gY 귱Se$ @'Ra:n'[aMV*~}DW\f"r<êè#iPV:}$MP@l zg\n=‡ XAri8|jeJbMƁtҡ'䘂Ϙkў|B!UZ]s. &ԃȻ>[OQW I1}ɪ*bV F)KhMs>!Qw&_RԂ>ء-vEzd5gҥ84nIIȓh Z#hH)5D&0,ڂ8#}oK@hK9)EJK":L .x\ ڄpX#1S爍ݎXbI^d&{J\McV|qE7&`0++&0R_c( VX]"&=>:{?OXJ҉ؓK,ӕ_4='sg4x:Ñh&5[< GrtcRHrh~F &@>X ~Жy`2BcQO=>'>j덺1%JӚg?=yG)VBK}Xӫi*D&lh*e=Бp *OV4ز8#<gD,[ρV, V*@ ;<'2FNŅW7%' 0ymRs܈8M3DoȁݥGuI1„" ?Rkg|C6";h6_DSp9 ÷M0)!R{<1@6H[լUF>%r`UQжVTFa__֦t1`ubeks5P#խ$ݣI2BR]Cm^HʂH8⟷[5)fuZ>n-_t6ڳ\ `H"Rp]T'X[մ@>1#(pX }[) )Idm`:Xf8?C:wa9G}VzDH)7CaTMXdkn`g /4Gǣ@H$z~|ZSaƲy)ƕPPo'-u+brfS'H0FO!C$!ì>P!L5- 4egT_3bH`Cطuʋb-!wLmqVωXM@؁k?jO&3N gW,{\bٍYk#q n6E/e;1IpcV qxmo.y^a So9*:%5$E%㜧_!܎r>Ϝ6\dOxl%CCӌxUG^i9zAa4D4HR SGpkaz8`h-څٻ1vOe!AL$YKV|=] Wq В3 ;T'N1!>K`Ꭰ?^\%Q.Qj[j@Hg&=ҡQ: IpWmx4G6ΠFhAT6Y|"zZoxǨdaT*@*mOAU<<ҾG=\I "wh. g" Q`m (s-6xр%d)/[ _{nS 4#1?3"`#cuIotaq)[Njv=u) :zaE _tS<| br,G (Yl%P5\A!OA4|q&Ui+Vy:s ODW'$j8)\gy+=N3 jsV%;$u ,(yf͞7 Ke3N%ƹ%tn!UǫV= E[j-3 $|QBޢxaБ"S(!&Q'poR6Q9fRw%l%V? ]4/txt,H0[ƙZ rwlL!цh˖В?ޤGl]xcUbmD˂Br(xMz(UWۧ%cuۚ\4ՐҼʫ5jdEb3㬱>Ew ?Uc%qc`#P! + ޑ*%N Wޣ Xފښyb aUZ3 )S `~ki:soA(%K} Oф0NmRjv|0V J ٳDZ %dmwQerd(ܣ)8G D!$qUlP#h-7kw~6uTc2L /tLRZl*$Xiuw׌L}8.YBݡcG֯XfxQYNu@{lbne灵svF}Abe*~sK?EËx=sdTT9vX 3ႶU8ˋLv Ŗ^XZ2^Z Ly2nΆ-"XHd,t\0fwz:Xԃp:rPTUQzufP2bTTgcü$t9 hmņڲ^xv <@~&[s:x73:r3ea0%{~0Ȉgz;#0 yo2& tq5sl 0)k0 סutvX~& Q?w ̙%Ló%ᩬIT3 ֪$`9q*Q z 'JP7p1Fp㭖PJ ̐ h)Hw6jq>Af ,TY7`:xqCޝ]%^--A2Fs \n/u?=n#L:'|wq2@!%DUT떈ߝfZQqB4GF+בz ؟P)[82Ga|ߘ񨿥WЎC,.*iCQi+ 7!چ;Oamo =Ưn-]O1A)=nUXG!SA?#X«,gtCv; 31cA 0ʸ߮\Hv(|zfj$lnaeG!_DNC؍hRr֜R5(5a, &dfDeL9s(lc k7qGt]x~1f<Ф*Dsp=Q?Kĭ]5ڜu!H{5:YkNffM pW\%cLdͳ;c7Ao4?g`$s\{7?^z;plleEm=UPs(jXPwٔ}Hf7"D]C)J ]:a!ox`Zs? QS,<΍̙q>ľ_c/ ͘H˞k,1dJNd~ Bz|޽)w&yc3jzr?ϻ9~, ;ē>F?+?ǧԡhdi3Ӧ-S}?8<ȧ|b!eqJoXn{$~t5CѨ`/`{i`i ɱF 'i*Z^Q 3%"Az*N6|2QYH);UokkBxsjLod_M9OtL%Uk^R7!}Y?f6ՕzD>LLydTҫeT.ޣ0jڊ1 .y f*" LPO{\ݙLrDOvFӻrx0$%e;13~t.=_rwtY)Gb؀F~ipt!);'q s8H6 u=ΎK*⿰Kq.eZ<\Jke|4"R3복wPFd.8q´IZ@2es(̨6n_`J6FAV%n7 D:,pY,3mew7hA?|HTDŽ܋{")P| >wTD=;!>힢)wy>غnƕ< N&l%mzXRvGw ڨ1y[39d{IzQ1vfx>Et;D̺3!rW~%hOý޲)`q]6N~Z $"fN`Ib*pX˛,ճܵ@Js5Qnݢ79&`|,[+㑠@/8D N!I%M!T*=h} :9wOiE\5=ʈo@j&rκsDŽ]1@Ԕ<&!-Fw|֔NR}+h77_K/ BI뼨׵=7#=$tOr`-IR9\8Z`ˣ0|C˸Z鄠MuA&ܪ>++xW$?r\ fڱYA@L%ܫI13ur$.Edu6}&'X?nm[Z3iCB/MfMCGa0q]*+TaREwxIjCފA`}SG{S-10U>ոq, DVKտohA On6c`FGחZ*$gL@Plma(_'m|OCj {҆mS:ΕTȍxh<0ɱ'Xg0qQy]Ln|YPf)c3Ofg/mNFՌ8H#2/FQFB:3",#nrרpU\=cZ2iE,h/)o']o9ixCEx1rA0Tn3whMҗ[{Jͦq*{☡'NJ\b p;{v >8"^;FoJ| -ݫVHwcmre$O"<=W0Ҏ4U:t``٧yGᓍ+E EY{b-ZB#s]k&=wHpcqv.Ȭ{BEtEau l׌dqqlU E8/Ȍ5  _ BE%|au" OY"'objmq`SN>UV6SNNXG}c#t< a(ISc@b?mKr@7>:yP9պX b+?ϙK&-@BZa{bZe}mwgqt6n'bn1($Nn< cݫl08BQE?W>bYA;!Bc2FJ]Y2!O.r*SnHoUݗ8 KҘ8desĪwS-H ,#3#Wyjfhnd9f|atE8T6iXAutߢ(eN[a`B*jVKIO:aXB(=tA^BYTƩ8+ =Oژxʋ UC--:(g5WJ%z GRCs/%ZjRh>tGivәxEepzY- >2"D~$z-ԷUL}ԼJIpd' -o-eOô9T6RnAm%ʐ% WkIK0ǵ*V>qӯ!?*Fha'(p͉ 7mcuB,QzCd)XoLx,}Z76%T6tU7,3=IlvÄԨSϽM>Ζ9rm:2@!Τò"S|ڴ`;а5d +g78o|[YuI,\k$>쫁 &KU"R2}FKj%\?b>v۫^98VP4I@rP>*."R۴$,z#?v{Z/̶,.RQI8ĥx;L[e 'e_^cufdȂ&)jؾhC77bg3e]!܃TR 9?77qlcs'eGБ6 sk8JA ݌#8xs _kEGs@ӇQ\%ZhD)LNyΜf z$NU)3}Vm~hQH|0 d:6/F[V8}.PGDxj ~dV%oӪ/AOj4!Qq3) yg͌hDPUCSHDn@eP|-c kzy-k-UP82)Z3>4OH-< i1gZT-2i-J ?ӌ< <kdY҉]Z kzEb+gU6ѫng;Ri}8I]q5[! [υ4-7\*HOw!w-RR䱘vhZLߒ|[9b).%(`&Fw 76$tz9J/ cQyےٶwk H煐c{hg?z|VogJuP0 2FhCp'r L [778LS"n瑃7-][\s%ՓT7%zj7q)L(v.%4&TXxKj5+!QA&vnhllRڙ {(DQ*){سɗPeUh(v7Piͩo!]52%gI(ַ_螸\BA ;pb;Ov|2k]Um1{ډCɑyFJnfXXC{K^嵻_O˶E$Cy]بmf9G] &l0i})"BfgQDVp!_ٴW2IkW1 j׾W&y;k?W}i9/x †:?cV|4{v#Afx(E1nw[ENKa5?]h˄9؄村m}>n.D3dՍ5T!_=Cx&Mҗ- YڄA"Bp3gC9hMl $U7B%;w8E zaMClLc ^Dх _dAk r>W,`6 j-qZ*;Rì/2u$TXԵ *U꾥U+DNdMk,͐XHaEAyA~c6_ȧ WCx˰?n !U4#}ÙYQPLvTC^pBևTutǯ7]G>XPmBX},܇W-{v.B29I_-I^꟨+2x r01{Qgn71$84c26[h"N[~W$5w.Vbi&)БaB آ#Z,?5s[ү~"_@QH%b&ӱ+&[I&2wGUŮg2JZ:"JK(]S졸@CI eUoEN"] 4<6lhTSY΃?όh1#R{Zբ܅Gv0ǨIPe* Ήſ)@ߝtkv/ZU+Zѣ-N[~s ^c=CkBM}I$`N)'rf_A2XWkһ> x T ʊ5 >mr(*$}e(\ZgXx:-yDir5Cy)db7ˏ*i@a"vJh8č'r>*D EUj}\K`QG51&p%gɥ(탸e3 0?U-5m? M]ZݧۑTt%Dޞ9O31_P (~ЅGƆi" B(NXheMj7zWSFSɮto= L+r(2' $EkۥH+w1 Q:Wwd (n:/=0!SG91@2""3,TT^^ (,l,?Y~_'(&n&D_V!'Q5xxuKL-+V'N k2k<yo1lgq t?(N^3˪YNUb2^܎+0$T{lV*2w +iG>D~?^ѭ[K)#|uҚ'Fu,G"bÄ~R+,x0-HxcүWGY,ON%8%,ŸF|Du P7Da!dxJpДxC7> CTCXʝ꺙FNlCh( tzQNc]x!F2c1@ٞ=LH`Ϣ:K&.!Ɨ!,H'}!k'0֞l_ Fh[4 .|VNH"BJQtwlؽCmfngsB͊MBK0W@(R];}MWђ1iG,S$e`_n I8AW`V c9љiX^ܠX_){$}Z>'OQb"Ug~a-R !ǾlҮX8( 9<_@" ʓsCVxsr;5}+ݟdް~$ↇEn sd:YQC{Se2_)t@Ê uQcj !r070-Uu%,g[ dhal7qdWr^O72$_  :mGu W+V/ hO29O_^QBq`ED3 \%f1B>mi\YD)u[GX25fRBNSfכRFRf4{;uWjL4ċܪ0eRW߱`I(';`_`L8`.GRf|!U]qeZB4p3|رYz3b,|M&ٿqBqτ: @3izz!'ދG!o 3]r^@>! 2`$'-_6&O/%)nA!v3ЄGyՀYy$ ȽT X ?B[9cfhd_tT7^lpJ iPwǻt8%$mv-.γIٱ4cj A!vWew e☌s::?!` !ۏ4kHOEb 'Y/ߕXO %{J (8Pߙx=VHn&>dAR?{#Y渎|C>쇦\g,1ف?]Wti*f1 _;H678<],l i D74%oyu6Pʒ7賒-\]Y  t5ljW*i%5x_($qPyQ|fH4bQ[hQ%, Ur#zQ*_ft]kc]8[Wq:ʅSl\͊I0(kI_ٲDl\|c}Q[hB&әnhBK77N ֣)>ۑlNe!%@^DKe^>5Ͱ·7-tup=/@;WYc̫Hm~`M:V|Eјm,YD [ 95r:K\dgYw[dB|xt΂mN2D"߹n>c2_ڗȉCӼ:ci̫7"ʚ2Rn\/֘\Hu_/ brՓ/jG _(ZMxU@hq25-o@{O_,0vn%ab p0! b{(I ŽP%bx/:Ϥ;bl[_v^2 02yBV_ȞXn0,bKgߢUR6L-(Gv..FNlc*n lYQ#vl!]#]FxH&pdeGP^)Sw ?`Mps S8|dLqN`!Fi8 8&H@Q`[ܥGEv0(hå/ bV(캎L{ib˔ȲlʯZQ"yiD&k>HN␛DӖLPʴA|%E5}A:$!)6}c($xwop4^Db9q(,RyHVj%^:'(ZK$s*qv 7qi6tˬ+nkE:S9qNq{ DQoAk|U4i؛3c0 L#"wqyo_6 @ M'n8W+ )%9uqe5842b^7EFzsZS-oF [?"Qr(%?eC!srgV.S͒_!rWB6B:vw 2ɓM$c*nA+4tG6]*W0MAdR*mďכʜ~fP [Gr{EнWgr-] G5IPAxhYsx#11 g02l3ܺ\6.l2w\s+f#vh Py 3$)Y"f#e4Bi-IbҚWRq LYFc ÊӃZY^Ia<8yG~34Ҽ}69'3ZGMzl޺%]n\[GO~leJAқ_ط ה #[ cY97yi|ڈںuhc^ݚЏ%  ,.(G;٦!; Ndhb f6UW1*Ea:SWjsN>\T^QV]TaBD>=nofB3-i4Aעkc˞Gѥ*)t ml0KC锏_3ÞIMw=QƢ+cF fHWM/58Y| !N֘L!Q_9bW G:uh?%Nд>@ -*Z'V )ѤN^=; }$؏˦W[zb^}Wi֤ zj&~`gtvP{s/ҫB\ -[ko,Yȅf` Ӳ*UOA &T%׬)Ǣ'W%T`X%4Gl ŶTZz I5ej,To"ǃb*s;ӔE3Y=%T Y=L)oա K{קD%-ЊQfkt %'vS&`qeE6<̭IRrh<$ob?P]+J:k\f;'jq_sv}S.iFX-O;EUĉEnBDw*ҎoEo)fwﮬ8N6poė|DlDJcGyD\\`ȭf{R ߺEe_jI3=7[[k\M+:n xT3WVOەp|a/kчޝ y:Dӛף{Mol{aCczTZ3QuP~48Gd56: [9moqϽFZ'"k0 ,  TUV艘9船弱jlNlm ݧ/#n%i!4],Ne!qDFqSc/vG*ö,9,FE0K1?0o+27Sqr0 7/CZazzMl onšhg|6V^g駰榌IP'KnAbMO+p"++ֲ9VzғC(Oɫn j%\2.6NѺ0{ybFwIbl`<n(nVC_oUxa`@@CNIoVw'3Cϫ"FcX[~}_)as;A#tblX`Oj%Y=)Kg~˄' ^Gg_?ÍњܚZ*D2r2[K@ׁI}c"&計&P*_o\ܠW^)sD`;fxQ{c֎64'I U&2ۿ\X\PU{oD!-^r7=ʥgd{yHLx "Yp&oJNq}"~R0[ڥY3@ a qmtD'R$Kos\Nz;j+b`&5av-zu)`dEUWnmR⻅&ԥv́%,-|Ó%?[Z+1ZP@&qJf`?L:4 $X1vtm\+6TLD}Eŭ–95ύW_]XxD )&6qN]at rV .Nrxspv'D̴b1yc 85"Ϫ_떸z4< -[,HJDgbl>nje t%;"|?>KI@9XgyA̩"M !u=hIXZMU~" 8GHi^ MXa3n[l B *:*#{ؙ{)#^9OBh*l-9mK]/IUإn||gD,' 6z`5wa6FYg3j5Kk)+S 3e{ 4ɖHO' (MjGk'cS(ad4F_Ia'-hʌIܮ}%@5+}@]'T捔o)Ԯ0XH~CSq8UJT99R̀2"\W&AXG@qtb:z?^U9Rp"賤 H \ nqENB6X2+X`kyFx~.W(; Qh7T tD8Gw7n> =>)=_ BޚT8.%]8Զ> ]ۃeBOA]PH#bjٗ<1kX$1횈 \#r~܏PJ|DmtG$)ڲxBQ mCVБTMF 8E2vH^k940neW Im?<|ܰ'};.$|Kj9"#!X;|HPD SԈߺi_r8\ɰ@/fAxP XId?y{\܇3cm1 8S>wsGzu,ɝj'huH۔R([zt90}JUKR"QJrt#⃈ؕŴnI \o.Th:|  )wȑ?ml>ᮡ(جdq=?ihNR<=lZf]M!Oz, H':MbsP#pƁ$CBeUxx NfmwBhڹ69z^)f$’%O g$v\)eѮ9 cO ‹ ǻL AE"EqıNA}x3/F(eM)~z*3r4h!HU,ˆ Xiov#-ϱ0ZiAaov@@;RjU@E[T%4VDlK]Ə'^v4m92%vlSj %j.(Y\p\6'$4>Ҍ}b7Z|>g TAl`ĴboX_9FʊM?Bb=v.gЗ?dZqǀk^Wѳ[9)m- ǷtCVt^c-(}@}vWo6/b?IfpuW^:y[9t!$@zVB2rIq7ù&%諂J!4<_Bkl/3.뒟gf.g|@rja1(r(ǝrTrA`~mN?\ |S_*36+*$c&ȹ٦`ΚdNWmz8seIi^)82,M`lע%ф1Kp( 5E(OT Saz!+2'ѓ]0LݑJG#m4ֹɬbBSlxJZ9]ȉ9mCUz `zkzeseyk*pŁgp3=W;2i] (q1f[\C񗝟@ŝ;:lĀc^B%fgHWXwiOl3Es[hm=T7 .k]zJl݄ԔP :ȸ$gC8:;6up6n򩫏(fe7U[V 6vmw=J] 7jd8 \>f'^ g-]2 ?08SNeB\ K5*B2LS!hpJQ.i4h>Ƙ jI$r\0`lQ됔3>pyy]>{<%"K~b8cy}ݳ|.!!V&CHLxFK+ބ*0ONO;c0QIÇy{*dݍ"[В>c5^MwԒq*Gz[Eb%RBM TB[&1^x3<@5E.h(?GCX{7 Uo~Rjˊ 6C)[WѤ$XY/2a3yǭyi+ `moP)\,9/@:?D3n苒 }]|"#? vSa+Vrr~a= c;)Mk Fl,}ZuSf%wZ%75dKHMÐԞksIh y?y {8Gg)VQaXk 7 g=Ho7t/T+BC_5y)̸_5~aC++ixZxĞ&h0w|A Vl~nm k' hM#V.Z$UK, ؊"s¯G~'jՔNL4 ѩn_~;+nzVHp2:101[{ B05p tv5PM ]v+cd\1X1`h2xk.}ӎjBv@ib}=X7SKzx[k.I'VN@Ou{ {Vj5DX=|wJ_o\w]Wʠ)u{o.0hKUv| ֝Ck͎\) 5]vQcfErǫ%{w+J=J莆7͜ु Z$AOU?m*K X4$@9uſEHɪbha!צk˻*Z*S~M"ZwR~RV:]a}W;vsIdk|-6LK{DgH2D$3 !(7 Y.qcJa/'d=nͷ36VR)& $I?G jGSA*ٽmwF%윃zb5~sUIڮ*#Gkg7 @+i)K<73zTm[^¢DHY~<8 :1gd&5[C4*\j`M+4 M!:b j#XI^n|eZo2Fl]j T:mSWbIɮ :J*ns6t P| `tz7+/DA[=B],';e,5\Z$q2VzLy7fTej4485'Rtn?fkUiPH ,0Y1+J*PIpϯ#X5naI$aE0L6eb~QEwCЕZZ(aTJ/],ʐd(TsxF$=n6`10KtsCq1iLٿDlv&_ωŮm=) Fh9J;u(@G\$e #ަY[`5WV9HԽ׃'z7;+3ʔǕ7 +/E{Xo@%EOpͼ`£=nL ͘tٖ7 Iu"e[:x6F4+owk;Vydx/B;>Ε3V-G<,H+"nUɞs5B U˅'cZm_$su;&!6d6,dsXڀS R\_q u{+l,;,@K4P*\?˳., =HدvQC25z }eE&UFfKRlr$cU~jQը4݋ +@Fa%MJYp/\PdZ8v^bf<c# ,MSnJWq\5|A] >Ds +V$VϼHR6dx#465>/ g쐣\њa.诓%]J!3-eik/,L*lfJe*&K)3G(8RQi->;!^@lzVnAwy >lHyB+Wle+9~f9S]VE98g]d_kj^kc@WFawLbho?2%u²qjl v$7Tyn#+SXm=Z`-}O-nȽz&˅CժZ4 3Ǭ5K^_3ViU3(QRy{7 O-V@1[5J\ˤWpO7z eJ &f)  m* ?;hgnvYm%I!3QǫJ/)ϳ Oʒ:QJr̓V ҙxT`hvh?T"̨؀,z™fL'h{[yLҶM,#%VgX&H([T4qbZr,Ʌ6.S\H}hBh6 l59 ?8 =]G17O8Xh1(q*:FsVxfo0J6IUq2_CSrϓ}ɎtY:PiW=dAxvf{^ 5ƕ x}N58@`{:XqGFd!-gl8r ˠ9tiߎIhsYx㷯XbdP3AlBwbʢ{VxL>vvZs$NS,wֿ]V>Xo |qh亢MP>Ss rUd80ѕi lӨ}}&qƴ]q,Mš`x{}6̃-%fxdÕ2=L}!lght<$%P5s) C;?JMP )NGސ])MhQr.sN|=QEU|#'W@TO<|VTr{)& g]Wc<X$ma# :kI_M7ԁR#۹,b4RML}Kdu:? *cֺw*w nR fv'rћsx0̺>н`ė,慜+8wl$8R{d>ˊG0R? R'&g귬Z<);|HF5+hy݅.YiIJa(;s:nAM8KJ_@0P\kB՚(Y_ M9Ǘ%{ęwH [Ú7(&_ujX Qݙ[.~[ Wh߅Xs@ QQ!2ENfP5SlMpJMg2.'16(wJ{T]UB6ti!,Sqy#=P(,I= k㥥ط[=Rۃt}@3q{:h@,< !}pGO6ԀܚdbAE40Р #TY Ԛ/K[b2lAU0s#+|OwG69r%jsj$^(g/ӴḠ¾JaUM_4+dYy6+ZՅ,jp#F5smn ]ҫLi^ P:CϿ/ $`p5rNQxm]׌ =A(k*r_{z|y3Gt*r<yOq'?} I(cojZ?ŐH~Dx,Mng9T1z~u눐JQ ^֍x{l:b kKimRZH g<+$-rGbɖZ UX$f hFڈä́iZVchk496uuQ[{[<"K#SaMZv!Ct9M\UjhSqd#Y j᪢}AgxO2:"BY)!u  %89_2-7H|Z ܃uOr`0"݃O׏V^IS%2Żzc hŸe}`O-ocE=T!;5Wo6EW$HNW =%:=HoSKD?qg]TS3*5 %v好U>irk]xg?fOGk\>lølK"Zg" ԙ`%ۑ?28e˼ Vi]5n[htޞqX:bdpj/{2=N5΂Td2|V!A/8װ\cBKE)@&E8W!a1L G(:)!oCXXfdXK/9`B ,ڑBXM|XU y$Dh0Z0ܢ" C/RmuCͲbc4r,;͞CWnF~/ō $6)B&~ܖޘs&uYUD6l{,T> +یcm#~'i6 >$<3ʺ8[_8[7,L$S?!?Nz' ڙ˱4ʼEUR](dr Q|QLr w~ I0k1}![rDbW9hTX%۾ڜ:zGzvͺPzldSb{P=97o0 / 6)szyWvRlo ^m?bRkN0/8 ތLqabUưޡDu`uԊC;E踼ٮێgΔ6Cec:TJDA8paKP;nHA 8-䠾\*jɘa:@t-=BPT)fv"."#LmUא+!BYbԀ+W^'eCqx[Lذ%*(?ӜMR4(c?$o-X4h$ J1:@cF;HMNM qDhkk0^#l0էT""aǹ`Qg8ɶg Egi"Q"S׎ g#›{Z |(&3qlFb::9!߷]PM2#%cx\4@`Wg.] K`"u Q N-oJCzÈB5KQ\1oHvb2s7 (ItQro44lѳSճߊ ;\^x D ќ+ ͙EL-ZYd0H\Fg!fHW j~o׻Cdޏ@8I3f Nݝ:m GUݐ"*^2[Lc`mxӿշ":k%BA!˶|U\ am#`jR`"w%W Si&eOEa dm{:]=\ &@|`lxkwNsd+(%;-gwUiMiN,m7JzAypTGS Y;_O~v}=33QZCZZi ""g:#B[X+cP$ ހ]j`8cq]\o]C/J#g N kN^3SC{$ 6/vM_U9Wᕿ2y=]<`d99]]&Gkς-=۠-y ɬfj6F!%,]? ˮI6Q39u23(|xJՆ D7e LQ࿓={9^Q>@ۙO|KuoM1#S2/K"tS 2", @b˩_14mI猂q4ܟoI3#&wupRMl^XxtcAeld^n0pgHUBf4;Rl%oS5,10c!ހ ?Cѣ5s B5exj$xAvڥPtߩy=}|TFڭ /9R<1-= : ]  uKIpyNXRa6'SvBɁ{QΩ _$dBR'"v *e bS 9$}^+Y*SvQHd}1[ d|=E{mmߔoN˛XG=x֝MAz'/pwjWشO[WhTxԈ5k\F# 6\"/Ek5d}I4vx wv:^"d.{j )oxyHp3z'90cqiu-.ﺆ t QYUG ސ6!u~ꔇ]g"!q{my-LCk)̓6K!4&g&BmfC&Z^K/&q -Om"ՐY\`,%^,j& qaƓ]}kP;m$"&"Dg*V?8 2h`nM')3*U`;G#W#0GAV6~\ɥ=Yq"KAГOITb칁}Ex0(˼ؾBv">‘VaM00gc0 ܒ -^LXˉru\Y i /ŕw]/f.~^I$3kBd4fE7, ƓS6/Қ 'սݛ^ ^wIKS q I`$"%v;cj~fN]hpWwNcKPVmWWɑ~MjpdDѕc̴ VyEIqQ]҆)]~osn]#Qk:yLIҏW%=Fls TrY¿hRa 8M Mc  tǏłXIQ sjPۼӍNGs9ߞS讚2z嫡DP)\n)jdl1YS#%A#mZ=Jvb [t 䧂;:}f q `7wyjj!&͕7w/wƠQ븀`z*-Sz*95!WQu -T@[Y[5KjL!CL2Rňx#U ɷUaFd5I28]40"{-KF)*O"nlӋ]0~CUF EPq*֤@,[\W-G$kb%Bm?% \Q2,Fo% ]#Qv?DVoyn71k01F_Iv*FFN|i 3%I$ Cx4%RG[^/W%Z#,!}}+(2>;vX! NՓ;2p JCbDVO2'51&cos{p ?/^[1CJThC(+JVoug{]TSU>٘~m-į3FMuӋ܆9wUcGGQ4 X.IpjRƉm cnu N:}5-yjR5KP- ٱtCtHÑH&*TQe4]0t:7.&\ZHb>B#kA]wx:G`^ 6Ͼ`X+`,ffɽ=FEN]QpU& ~k?|#(fE\>N-uz,"[s{O1Drzޤt6-?P솣يkD٦:q z m{.: =0_? spS2R#*X Q vݰN,I˔ 4.C&‘)o&vhc (iHЈ Qs5r+#.DgMVZ#{ O_ }hۉP:*,A(Q:eiC=ekgi3 uGp%q ~!`Ck3@ŏ@UAb$;id35Es4P mZWӗRk DRJ!M>IUxg4PC_1TX@+>,4dڪW_ J@uk pLX' jը$𝬒1\SKMAySl~7' ;ibBΗ6 ,/)X^bFO-H/L j8^"MiboK7BSaUG ־#"k=su:Go@21z 9}ndz>:~URH8EeӮ69bilR'rY["MܾR饩E: !G %Ա>"kcV`6b)IHDMH(gzۢBKRMEIo8\=s=j7,]8Q-љmE( 'ftZ^l/Dl4uHsD f%UӅ˶0fJ0 8W4X'4/ "+ҩ呗% ӕ>2;d ysE zf&"vA-S߷s5_릏 ѯ#!|aƩ]Tsm M \p&`diPi.Ҝ).grܴ-qO>m^ yU|$e7X3^תj^ZϯF[_p/qw!MO"Ssg +sfaR9z1N٣@x(5]j`\ʼ#}diJt02C 9] X((Kݖ^\*OsLP3 4猽.Ҿ#3 o%_G0ߎjt 5}]ަ(@5E t~X-R7DsY qhH}MLZW|v+฾e]u:SoweG!T5lTҧfQ߶ܬ)4>4)̵Ye<UޣJNj[&nXc (3V]R{OBPT9{c:W7?IOe53ЎhDXέG:n|]I4.Cωo.ũ ճ?]أaDb*-g/|ݳ:5E']8-|L=Xn)A xut]LB*1؏g]<%8~H;.} ԁ]$wmJ1Z)a‹ұxmW+{K!OhZZMCb32 T[~QN0UJw|rgƴ$^F5e|7\!3I2B=+햱p ?n`:MY_ybhdVzyڽf;5JuRA4nVA>iro< CdENʎ~(9pf?dF^:r犥w/L]& wyy+ kcHt'y]KBg:j"}{d=H L\0mi[Y(P˾?kڙʒj+ XZPj/ir ֥3[n,ҬUJ*6PW_<ٷ\(^t:|"@\Cv,W M"üEVh}Z%hfZ0Z#"֌'{޴F;S0\un3bCjͳFk#n '4| G~ZiЛP&~Sg@[&j񷮜KN:T6`fAjI@.Q5Pce۠gŪ@MBb~C|Pz6'<Ȝ"( ꣣lxIW7˝>ڄ [i]ƘW6w_7U!nnH 85EvɸVvA-q}4:[>%B"1CxL"gbCF.4[#tܥ1KD(BYqz:wE1HM-xF] OAUW܍]1Kd?Ф:xFM<xOJ^QPw̹ @eK;[.gyICw.qcOfZu:\hk{λ ,{Ucr0ߘֿ)Dov)dW)<}w {fgϒKۧ kS~[k*#fh`ieb&詇PL>BBФfp+<}wy%Ї/4z,eꡎ L$t5OVgR$ay9bwuI;\y+%ːP^9``$2s7{>@Xr'jG bnWK]Dr Ӳ_o8ČGĿé:c_QP4Am`!K>=Aw:Y79iq#v!aM;Gd0C IJq<'u<~$Y<QKVKe] νئSF eHS`@rݤOgĶB,~Rb{yyQ$H P`W418f">k=d$MHJĵIMr`&;Cx@VniK=>7G%fq,uo68I u>mZ9-sr=GιCwE3'~M/tLRM܆Mn-M۔зJGT" J&?{ o^lՙB/iI?ڬz>D=Xg%!#ץ aԈ$Fif<2{.5W,h`wJU\#2Uص'ƵFؓ>m)k q!kFtPڀ7Aa"ƿ *7IH-W^0 |'=ˑO,ͣ-n/ذ-Y/Z-HOZ-<8tUh8 :c뾞 [Zl|=QT\,.fj͐X\#j;R?L%[<ߑxû;]3{iƇTL ~Ud0R:Ͽfv`RWXH#rZiEL_%l(1i ds1y5ǾVmkn)Fj\룐s<CcHxַ(S)k$C2mkZZ*+~~漪 miHCa(HgzȻa|՞&g?^sP.<9F{c`\&o^yiezD2-|x4@2G-+/LcJ(r x\KW7$tX.p$_SÅ`\"Y(w,D$=7WvdPv;=դ\PHyS-&X L7҅)zg :|-SuNkn;G fg_DBj )J8MNt*:8͘KM$E q] ցm?b@LLOwQa|mRkE-BMo!lT2dw յbJ3qb*:e 0+Tܘ51ѡ=({ں^Zm a{2Cb6t-s~|Zq X:QRfGDl`hҔJG08Ǒk dr*ݾISaŵSʀA[#0lא'߬HHD_(op=?db:Gы83Ё PXk YX- җPgMcsl@`mJt%Gr&ðkʌn!:"} iL5AL̲ҘrQa2pCN?ףZq,$lP e4nNO踣p JcICG02p֨?Yob7bd]- HMu"˵с ҡ;p<B~47 v0y̽jsCI4lfHL&81f#l|1TPTl={wB2`=~Ҽᤅ>Bp gpX.BRAco\ D// ==,OuD}P3ogb8ԝ~>̎s 1K`4u)#hB3[ @ 9}z%[lr͊CnH_]4{?&c[1=3YI_*1 7"đ<$>Xl=q"euJ8ҢDkkrd姅Xi3d1B *`FXNFssOlzq@lX'|vɚ(EP oݣZ7}FmԈ)Y>?.$Ju~p@Z|a#ѯttKibml>-tg$@Rk/qL4&ԐZŝzI;*7lvֶd s'dBg.fԅ`cVSثB*㫥=YʺOi WSl)@qؤ> qc@SI{^y}1(i%ܖUpn,S·Y '{t-I>ZXzތg_L*`Zeelb'(_7}޳bOf&uEҥ+2#(%O0D3aX5^&WYGO9Ce΁Ú)[)흜(&k_2oƴ{N3ذŤS;:۱6r"65o^oI}x\M ѿT>Bb7h3jɟ/uRLKx(&QK':ǶҶk}XKQG 49F~k@VҐiOSyU#y?XI *ԨB+ D%mFz%5GgeuiD\8N=@e]LcɒOSWiiPpٖš幁QV5K+VxZLx-+iGԦ'6*A ڊ` ) yv.F>Da{_8nMmoNKOew`wQƳ Ҥ/CKeO46!I98VT.Ƴ< pX}(4ZÊۗ>$ԆhķT#m5ßqZUol਎.Sta4{Ȧ*~ kϣjH|+TiSadVvXt,L(!v?宇2mYeS~gM~6(OVi$rwxcM7]3q&_xȗxld@ʊG!_%I;9ij4\K $2H;Z5H*KEhuiLO!d`_zLHB9x'UEFρ0scgSM9iڝN*pÏk=#vm!̎FO,tZ[+)u~(}?qdpJ\on0 O>*Zz*/wKi$ga6˃n~vc$pcu+D9-TX"DŻ "]?='#ɖ="Gl*tS~#@`מ`Zj[lNy6G[)X0naOhx߉plOR&7SK8jt}k5DOf bS@[!.6֡fڟݧPR>,gPx1KA߸N"v5\4W[(|'2x[) `hK]-Q65נ`暁j)C h(-G7>$=~2a]xLz1^Eǁ[eu-ȸ8M'.ߙ([3eZcƎ>ˁ5oh9쁖`X#]j׃EՔt%j&㚾zb"FbHֳ6 [:}FUHhUnpeEU|_l[Xn)ZB}= ]d?l0^z H}W,_:#Q< HkD׈wQuQ 8WTI`r!D|[SfL z\9C8 >g ^uhe76P쪳ogO?#*wl3F ǪeރE_U5v|rn?Lg%d+zw4mцlejGؿSZѤkk 9bRQ֤OI :f촪~xb%LodE>QEkJa.D}@R"+"AJD`%NHo:r8sh@TDD يu4R^ӈ,xyQ\jR6!Ycg< +59?BܖH~6*_O-߰6nmw)~qN0mIBv7)o\.nRF4dڲ@Her8M0N esSԠd08"d' u#5'zgrnsC;*Gu %~65+ld91r.4ToW?xx-xD_EjQUuZ<\eLn APngDZ:K]eOp?ml@{Sqx3f8äF{a o_}/g=b(- nC}BWy%6╒*11 R"jb&8J&yi"5k2<82`rѷFDXb ? ^?u},8gG"  12K#RϨ#Dx4}wޅ-pA"OIѥD#?K)daT`L`Nٕ9wg6IQ%BHUX Q\&h"o{D:Z!_j!;ܞ$m==$EѯZTTLۏ~S/'.Pqzg}D>Olb…UQ w(r$("9KXji=yTj'v_,4׏SqɓFyhXJD ) M3ج!l̞FIaSlbrNb:(0 Tr\Sǜ^@k?,Q~W\bu2KVgj恮'c R’t:\ U?]-8)j7qlssP2BFEzĚ=eI^mJu~M_W3 u mU)3Dty#;x_ 0*ti$rZnQ_ -43duQvsEoև)B8*-4^JAC $=+ sO,ȓ pǝn1 /eĖ‰A(l Hכy+<$ J?&𬃆FL%,RFԑkr/rIA$C6$ pJŽW 6iڗ Y2GD@pw AAc,4 oXXX$j(9`ąl33qpY\qIyq8 ]hWcm@f=۟YE߾NZ x ŏbu9K}{ d0"DnsT=e p!V yVfz5**v{DF 2NjqxILn vlsVb dȫ}.A%5psmS!}l a+w^N8! #:}dκbIp:]h쥌>r`qooM1RhTUx=l;FWf4M5hҞ'Um+Q=|fAz(pۛj,m}m Ŝy{dr8e4p!MLhYXq%Sx1:˞ uN8ک<9N2F._@ս : q{r1$ұY/])ௗ8AR#Ƨ+Q\vN;>XgW֡!8Aԓ)V$ؿ6۰=CvOWU&?/z1vm%j!iBal_ueP JIy 32 ˘J7ͻ: .j fŒ^tȒIƹ3LEAE$*o# ?X Q;zqe񡇉j$ ` |na׼Yz8r~}6Wyhɷȉ.\ r^JuBL%ne!۞ YK̹=AHShEF.p 8.yIz 81G-I0s l đ6zكXy%.g>OY(ZNJ/$|GEQ>I-/dNuhH:zѯ!tۂ]KcIkZAh9Ċ:Sʭ27?ZH?Rmv`X5bϩ7l# %'D1$Ҧ5|%B +0" X&Fhec.z>"뷭:q>?84N)V>v^jь~Z*QRrR-Oí"O1<$.Jhr4m]#YZHa] Cw|T ߮_xYF3 ?!%RŢH@"~?vw*.{hW29 wBqIq&OoeI`fݾ=E'!}><)+6XBQSHikYw9=i' ti#$8>P4$f!e>\Nbc%"2ٞJ]S0T2UP2,3{!aOi!%X;tJUX7io{X~zlTcݏ9xZ귳U|?Vj|uvml]z!~w`6ʢqEj^`f *Fv{fɰ?y TI ˦Eln॔}I؝WR^%ȴ &Cz`ޣ3v=Z-PB_eB\X)Qo,je+E.{F:c?7J.}[Vྒྷ]{vTH&QO\=#)~ 3:V5śic=!P\ Zξu;CCA.-l+fǯC܃244Vӆ:Euo{>) Zr2?5iUPV{7"1V)?.1G|H7j{/\v騺6|Y ঔ\$ ߭p,+–)X8ϘX$ysʬқ0iP"?8=,P=0ЎHwRV+0 sa쯌lɼFxEWiFU 7P7j K& #j›3a:"}m;V(X.'ⴞo US 7 x4v*PFW6I  uvtArXI+,ڷd W~RY25$5եJ?$7nas~{# GYHܷxuKq2UBUu7ev'2)Ҁf0XJEثVfBN:ф'q.s,ST嵣 Na[i4s03<:\&ic m$SهBILUKڇī<1$P|hA^_s"g;DK3W)`UvOaN%r+U A t>[vwbs*t84p(;ZɁfp`G''s-*Ml6\28}TS=KfL3_J٪AG_PV9knmvؕ{QB*d|C fzH|kپd]x HU`&W{BQy"pt(Ͻ6ǎO;5;ϊ6 {2rѿ%>acE)縖5m1- ){0VxD >=ۊ8<{!c@zLYsIJߺwK:Pp}J'%V=嫫y~1RSe907t.?ؤ[/rf#O6 Q0 6Jz(?d_$Ue%hN/PHqhbk`VPzOZMp/; AjƐ`uTѡnuͩ;UWAH++̱G d *{P0ܰhҒ6R5F iOL_C m;Ki&4+Ύx"ZNOBqɿYg:MU*^60҂KKnh&1b{=1El}HzNp*2znLw/8MT[FY3Ww#G4V͖o'}[V(z2;YyH{<ƒY=,W0n'>ǭ~%v{ۤAG~$S*nI2<cj󭰀chD3!++ +bwlG)? uD(0sJk nQGr87( 7kÔ؂_X0_ķORb^xP28M=WoF Q9^ Tx g}4u^FwcY,Z 'co6|7u Lzw<:\a*3SKڎO3Rw_~8E;'jGr CV}%g&xY6װEhuׅlaA~Sd8`#%}i޻ЁdTwL>3zٷ4x"(ehvidr˼LǓ(H{zEo{82.@j͝hࡈ2H5ŸpΩ!FiK܆Ww5EK8eL$ :JpÔ5Z.ԗC[ ;޳Jk.儙{6ӵ8Mq~|a.6S8v1{!K"N ~O}5}!?Xm4!?Dko֝Z"ilX䩴AesATCUB%@amTC=ϫ8N?DW.AmD+8>-Yt 8ɍ^~0q$WigZTGv}b5l7dc6,׫\ qx;0 5M7f.S:[}C |!řyސ Axc gHd뙶q]e_9࣠aK>oC6L!IP]|/uQZcO0bϸᒿ%{*V;rr(4O뱬(yzy' \L 22.n-Ƿr\lɪ#~M?C/!! eV>`OaʩuV1<%`9oOoY"?'~xz;KT@cN %;^"-PD ?>ܪ}SlL룋;/ixf$5\#Eׁ(A.Hf'*lzK1BjΦx9t<+8`uSh T/̘<00@9el*&ޘX؀}mOwǜ=w`dIlnGzޑ&dJt͏o/Dl茤Dž>5򗰾O~G <[91}46mAݳ,f`eV CM(صf mw="3ɠ+JšilDӫQg8|xگHmUO۟"0]qϕkVznviKTE'/BMTw})MUg-"ֻ̈́K#ߔcIJ Sv (@Yk*!YWƗ|iMcWN]JT顰$MV}Sokq( WqEq]1[5Nn R3g4%yXS`LJhILFMe6ƅ K~Y@u cP?Qw*cKԊ~.u}TX$\Bi 8ctlfSt,\p'Rsx)9S^s"dƷ8{?{ͦk}tŐVw@c.M`r:-YJ~NśM.z/"b&:5Yxbvpu£.!S3.Cʔ!"N oPx✸wwB=Zw&uNxYG$+C0[Y[jDQ{)s@* _~kx23, תlh6UO+9fLZ+lFz켯ʢȂ9M~ \>K̄^v>VIb Lƨ8ő*Y G>2;|%a`^mHm_:=:G03ܫp"} tmFLҧ M fyy69H?5 2 ;Ӆ2Ҵ]ӿЖCq+w7uxyvSuFn(l8Cfun&B߫|g3(SgJ}ށ@Hm᜵t|? M @8X5W1=$Jq#輍.7)T?o3gRC74"Ml4k3~≂Nj54:Kۧ \$ 6Kka??Ɠ:dSZc_}XĔԮ-Q3.8_>nPiե1VTNt~~q~ YSMSiAh ރ](y,V<@p RXjq^]y=xuUMb7Ku!o}:b6R|-R)xRoDr{ (-mRi)OxS D5nD۩S{Q_LvI[ul!/x8^Q,݅-&<+"à"ko8@T;/9M5 b&{2|NLYEu;rYFf_?K@E{t_ik`'i äb]d;s@WpÈ,Ox܋bxFį:y$-f A\JϘ}2;מhp^6(dgH$WȂMXi#/xN^(>R`?]6GnǧqC])q"l!ؖ:tvr.{IkUd@O1NL.9zƑeu=J5mr Ԣt-fW%mkRY1~m^-#YB,jp.xo9~YI C҇%uyU$h8tC!k1tQkaHdm?C3`*MrG"xUa24-:OBNfVqz'If@c˒KEL\pLPa1`zҸ "=‰߮aO Hx#h|IdsCG!cDv['IȺiS5g4z{^cN7U0>~Kn` xûAQ6CD{O%G e˵eSd?S 2UղZy9޸'kC{ a{JanE4P]ERջ;.,p|Y#WQԧ$5e]&9d^) CR St ( HPZ=x:C:%f*;Ue'm NxCyz<=*jNCiXSg,xzMO/e =;_`I ,PZ:Auī,RTi o%U3TLgC~7S7bt`ےRƊLLCn5o^@m'jXL 0%>y@0Ӧ/H !$re#c 8D'P%?!<_lySQ/n*p+75&w#[F0e0`BѐOMԻsa}UL}Zh OwXV 7ϥO'>ƁAU9ϱ)^WY$hlG|{8k̲F3ѝX7 `+f O.LmJBӋo3:wëM[1(##y_~! RxaaȽ`x#%V}fAq 3Ȫ2?qxJzhːÔq(i:T \/ xbPi\YN۟YҸJ`Q?Lڈ#"'ɳe+ Bo#^9˾ .aAg^D*JN)"đXVOόQgӭ_eъj{/ϲ~+{*^rl*_7U]OD$D#ǡQ*Ч=IUk0j SBF9Ʌ-`ύ\#<F a5yv/sX3jC畻_fq8`c ;NI|1_nU*$ʾKNkȮRMQ aAu$֥{RBЯ)=솧z$߭_5se^(:>"I&B}h${aVԭ% &N aH2[ 4<M!\66T ҎLaAA3_>L*oW,!p`AwA bTx m~j.{~^+kwYZ(!vw=%o0dMrT74%UTn?0s A4$a>uiA5[ LMPiS׸I@B1yxYUͷRU[8<7_Բ`AẀo^;m@_Cb2BZS8;}NN/L70*M҆ӐdWb%ѣ6 xfhdu |[!79G|ca+Oq0wF&ҭ/J Klj>`W$bmW:P'm:A{W9t2kcmGOQOL;m㺺]ʂNzn~SC. /ߝAAN[6^f0d֐Gtʄg(%fCIz:Aa+/"K=vij[SZ!ړ׼K⥓H{ lqPaWfj,:"4LYĵCs2# x`Ծ AUX\"FF7-*WUdo6֛ N ;>9Ӈ(+zsɈf 0zm}; +I2R)K󢫖@|AbNt|(=zitxrNPgƣ7P#UgR7ąW=il&e#YU=mL49Ruɻ&X+MɉG6Ƒ当ؘ@30 q &ƘŸ鵘ǣb?oAA#-,GMgEW :[nMSSՇ¿hTR23C+&sQE=Q\H`wOw]7HZ7WI=PJN7d MY>%pݜ#WWy.˝F}AWQ@`D Z-O J;`3K N;$ܥ7Xt/0z[@R6mK  $SOe/ɲ_ZƸ˭@ym<_dOM8& NGW>JZ{N[kJ+=x(:w9ȟ״9]&KiNauXkpgߝÜKTcV?~G՚-iÇ:wFxՓMA"{k!OJi$;}_HX:nF#3D/FW-[ eHڗo $5<Җokd* k,m[Ķ`sUe"-P2_*2z(No&i/W0kp^Z JKs5=<{ N.F_K8z9fTD}+/E)?}TYƇ[D&D}S;fv$eKeݪ؀g8(Z/z..6 H"Pgxъ˥;vְ=7s3|H*Mh kSa oӅI_W|z[\Utnu Ͻ27ǜY}wèI<9wUwhgt&?0gsq] <={SAPLwA*_B\;50T}}!}o^Ѐ ʉ{ 6QT! `Zdx H 6v 8P0sGFڔ؈h(4(^߰19 x)W1ְPCTNIE+#۔W5P1Yne(x~r!*Nu1G*\pF 9F@%:Uф!:](;Qeps{9?F}qZ7hhc!d/QCS,YK+7X>bPVN7P+)޼~W/6==át}8^0y+bc9+Z@VɔWk1!wcиaTpEZtXjd.cң%Bm.|= d!֭9w(jF&y}WdY>ZS/,>Fq ??;2f,*0*sNfwd fYLGwp1y*Eﲧ4O=-)6L1G2؏: Oo0c:|?ɒpHݸw:8fCx @pai @gF@KL{X똼T:mOLRBzV&s*v[{gm|{>/ɤiP(cO o&L\laɵi5ʓ VؓΎ(RH?ZG<^&;j#O4V9V(cF~^]z:> w,khM @:LKk78DjC !uGdz'NʮBOA(Hx>Ə 0.,/jڣ`!bW"~4Tʪ!uvp@]tˡo o0 %HkSxeί p>腩->z]axrC4D?]qۇ/8Y n+S"j b4N{VdR@yxc"ά7X2HgdFP r&KG?Vς`3h^> kx IKR+%u!`˜ (aGt/x ]ypTث4. jѦ)Dyq{."@c $A:u8հ\3b rn|62[45xb&8sN+"F=ͨ+j1uwDo^>1cX{/G7duc&;elI gF|JH:'Io2 ϊ!R; s^i4zӫ:1 dz'T@,n ޾*8 &ob,G+"x #j2<ԅSr 5ԃzv`_Q_dΰT3V353Ͼ"A8m(8l/󝝸3A d{YGlI]~.{m5T>th)Fi3پ,{AQ \Bh+KaUkһŞK#.sch/JAц3`Nz[9R#!|jd"fOp-a6 l8 =_[iX5L'(%:䆏ߦ?_}2w~"s00>IY(G!`cW"/BکEz,qO"ll:䬇zJWly:BPv~4h>&/O1Vxͽuj٢aEMOHϡU̎ZYuimLƀtSv6ZWHǠ,Ԧ?}3)C0q2d {C^V^ Q08>ncS[d8d $=7G3{=HQ-9fɆ>w+?uM~"E ?V9n: N8ojbJ[e avwP.hhi7q&B 卤;G:aBW'qїm'[P}Keбׯ2n FՌK٦#?y z) %[:/함=S7כ ;7ſDx$hdýt¿;l&d@Q+-l,bL"#/m}-엁FIP!9Z΋!?x Z㗹 zb 0.ͱ;Eծ猡xBYKF/O{[ mwd ^E?!5{&J֡Nz-z?)͗?$ZDXAϺP!p9$f0OGt&ox`P@} w^6rctl,ܮLk$fb/M}(QK/\zZ\geƚ.D=ukJ~x ҾzA=!CpiVW[s6SXhÁ V,Jb̢ 0e33~^@$L}E=-1~ ,T{:6j[8q?ɉ&hE =hꛉH:+B>\F@O~23 5H~ 'Ykbӟ1?fluY}hZE6ͽǯIi#8oL!0KlN[ ꭭K?&jpq6z~n197uMX%*XMڱj0E*RA&`1/+f֓3U&E@S$bSOVT*qh'>wjxK4VlomKv,- BGa2w }ԀmdwOn]-5\77m'9zs`qq%a캂0 7ShjZ;u-o",<ѱ&GW!x[[r8H9589Ĕ-L(ͥǤ{`3>Q$$ؕTYj3`|1PTó8ߦ5G \l미):.g> @**!D;m.꼑aoDMA "0(s~GS7V <+銸[sZb' x0/œeN (5r{Vg|WJ[}agM{ۺJNux*TXfnfsOJVg(^Ls!WvB$2sZYۊb =]yzUfhup9:`;4юى~^,wD\J!Ma3r.ի.ʢ<&ayN!i1Wt M3`xB}O9U!USJiytZB.p dKeM|*BI8^~.lb5z"ܠcf0ʝDz QUMu&R' ]Yo( ݶgVxS[ҡY3B҈F7Y,WCibWivl=IݰeݏKnzgy|iuDab`vc |X` q*|VA׀w+58]s6D"o Od?y4 <*RGV;= HhB˨Ю0أf`ݴ` E)O֡oݯ uڸ2ė^p|mGo>SIB( GCU|6܁vL<\F,F_D#Iߑ07I[t<_$nn2Ȓ}1t>A[\K ^"a(bu :i.c\Vyhk(L /B)!2|`Ըq$Py]2nol>;|YLʱ _q ,OJB9A2ϩ:{ ߶!SiQ:,Đ]mT$rTZ"ۢ:ery,FaW $)b!Rhr^o{ XiP ҕPE]-f&~&wJZsGUt0IX+C~?{KlhAl8.ʔH/lY) ʆ}8d* !q~8r4CW 7U,":4:$KqO<UVI ߑTo}oܳ:¬tx?KʯD#sXG ^MJrVweޱw-x.T/c9fߥgGN_l<`doΪn0%QZP66 Mh(zs/{=oФgd'?򖀱b$3?00X76hpN5j S2ĞZ!C.unolYL|vui#ۗ3*۲78!:#[x\H,gXRi]L C}B76']lf2~fܕ HyRxވwc9=Ioꖍ2B!Vұ>wp{̃J1!f%sG|_6̭{gĈ YoMeoK <-dH DWh{SZ1 ԩ5ʏJBe1&9/×_Po)t7̊V%I} PτdO\?|"46tjk)MԲ23np7^4חz%Jn&4D 723/6 0OȩՓHBt3 |@kw9*X+NjAT`{,OWqHɼ$ncs^Q6[p5,R9[eyVSh& *2'S`[7ɴ%PjQVYYu >D&!t$7cCb_a-MǷvsGQ`$ZᏭ3Xo!dl`ni(c09DhOxV:ks1l~k)mmPE`9ͦ EjԷ?TTz"r{5N't*Rva4Ll7~}*Qu4 lTXirndVEzAOcsG):ɾ<;_#E脋*+àJ&'_Um%j((cxm֕e& 7/!c:(oԽw2EWWIʍܞ<=`U Efg ha_цSFuvVb#w˗7#\_=kmߥ{V6-1/CDaOot}i<;ϛ!< O{5JBS'dõ:6ޑzҪRýP#fؒ4%Hhρr! dQ4蟗ݔ23~?04^vE[V%it$7' iyC\Vbi$!etTJ]Xo> OujN=Հ=3$-u.R8vik]Ko# fo A4& E},]`_ILdJ\OE PE:KidxH2U:UгG | M7hst9^&Kyx/jܗi *.ҏK(sZVDx5;US4BxKw͚V20wq73  ׽mHYC/]۸]ҥ["K%O M"B\+eJLy >W=`w6Kpb7öBlD8j=4M L)nE).GOlEHK& ^Z,+Lx^z>0Nkނxqi/r#z#kRD4X`# \n"Kڎ28&nVN}`@rFBx7>|dC=gJepohtc/ + fL`P*> 3F@2S ЭY&7q!`8XQr~ӧbµc[7$Y!rx\ 0ĺlLiDY){RfJx~|6W@- F!OiOmE,$=NS"'!b":" q }XAs eg_n-I[BT&֫z|eА3LTq,&[# p:8osT :!߇V1 kbB7FX UP,q"5g=X*tPyH-=҂'+!,QI#vė$f5m A2ѪXО`l `%M.;.Ok9@@Ø)Y]#YDǂk5ź!#?ep?Q>lj(pƲ9Fh?\Hbi)X(z uM jK&]P+ u=hر(;h?9&+Pg;~ 58Hzoj#~&QfQuޤ7ߌ@c\㈟cfT y Hqr6D7/72xKM!gG@N(s6"~\DEyET]!C q6Fǯ[{gCn|[l!j{ VQcew?_ʀlT2ԾRO;ۯyjGtԈӕI~ l>3udka&J6зԌ;%2'aZ|7{~ܦ3v1芔yWt͵/MĦw;D.KKCmKBoaC8AX*/dwZ09 Y6j_ GbT9bľT ZǿvZfJxl׾%f^Iא{-i/P Ckn*]gֿO4eT|DF=ZxDۢm'`'Ku7q >?ISYx#%ۼ2pn2IJL[m͚2n2=ouGX/8=gjĉG3u|70HȺ SSH0=K*rʣdWH鑀2˟@(u_fTp$$iA[H5b$ /hG)]㹃qh7XR׾R`SM"%#n6'X "N kCy@~le exQ7pW䘃쳴,jl7AzD16C&IELe76dEd(&Jd]/@%X=k95c­ٷ?YIɞsm@gҐSֹ-&mg5urVTi.VPPO\3vDZIX9cFL9ҩ)UYl {@&+SFD:iSLH}Wj-Ks'/vC3ÁH΢pp?X)7Gb3a7Alc$m cH cl ~|!6"\!I l5+|ײ2;6&+rl.J{>SW1dw$>?XH.{P~$yM1aH8/G LGx.{98'jzz+m¨ bkb? 0+s@UK㕒][mwXۿ}Z=jqE3f)Ů|-WQQylHۭH,p k)8,4EIRgr+k ۧY-XmSCx@nTXY-, --`nxy;G?sR<&RD>i&y^b7herVnya$`vԊHǺ:'@;tTRS#{[y(ES,Y!P,eTƄQcUa:°f&9& YH0ןnv"*쨛m,I΍#-y,P+MT3wSD 1pꊎިq&LP&춅>ޕ<=599ܿxùyo}_жWv] vU3xKjEAyr$I]Z\|h,qD-090U%CFiWR( 1/Kv]YxJ_eX]M؝beج(rTK G@&vg2)6 @3.38f?z`0>'0yN"\S&*w3}%KoZj_ %#1 9cf&&P1sĀ#7Fs=~ 띭w &0(>tëv*p.B]-lZr&-l_uLAYЎz /I֖&!~ Z̉kL8MOaz+ޏ2^QTGL9KPS8;Q5zBat-koՌ΄xjogbMt~U_|2W IV-jYrwo 廰M4IRUZ]1kzk(fX#c񴹤i{J =sMq#(5`(s ߞ?J@~$v6z16r y#Y-]-v` u--yUͭ/؆2EUTPЫ9 4_pkqeeWF'e*dY{!_䍁$G.<.5f}x^Rm]X|P̹{Hc8;.sZ} P^OoGKSM#8NUB_ӲEeMmmim![Þ;[f#"!=>Q__;7L!Y%CLf+?D؁H !qœ틣W`Ou78N01lRc~ Y) ?zߞOu[:z>f\24qKw)隘"l %v uTeO7/ʦhvڳu3*mH`r'٦K=;Rc8 x9L)]; Apgvl֋ccm!P+j95=01 b $+Ithw5Aj,Ըf|9|0QQJ̥ S~\x!.00n @w"dm30=xN)Py V6#6"O*OԪd)<2ōSk0hQ+0?i;aX,3/[m,IiT2~f=ljj|i,-o8|I>HgFRb[د;&,QnؼÖgSĥUbe):ώnc?B}c5!!fhZ 0 ` %:ʌ]=q4\d,$b<$X;% *4usN&<CB#- #1P+YSXT߁71 &PVJn3#Y5&F9ANHUAp&aX $L%tb}]Vi*B-vǾ ֓gY4bd )ݗ0qi@=UzjWŇ$y}P}<K\q$MbW %*#:P>;"v {1p@bw'u Ȫ?05?{xUuu_Uf_4s$E7MGYAsuZmmxU_3t(#^}?!LV|_.n:vVQ7GKR PG _2LW)d 1+)[%#A_Mh3%PAT]y| qvQSQ<6E.â H ?tbCY'jX:moZF"' Yg[M>řpبr_ NR 'J`,Vpk+(bWȭ}h|:Y(4֯D t Of8[Kd:h͚Diď=ӎvul`:@iΐ4PffHEL&|"Ilr_)SkqwsfyJEʣưYX|3nҗ@Z)??w ]H{e&,ӸlZigȋ)xVeJLk(-=m(yjП&SvuO虇Gf['_ HJQŲ5H _r14irmدg/j|5ӛX1% F13p7Mlv?cn|WfcG gqS/uuG*!ːBTŽwJ)}үDgsRh.V2F (lxMf֖Ɠ~חŚ_9R,N/Z/{2ۃ(>5Ԯ9QXO敼ܱQTو>_f"@"xr~VA,>56>T *W$|K+J0jbTР19:5W:ne)*o% ͥ\vJ"*IjƱ /ct_$C6ww%P-  lfMzQC\Co6?I,h ̓cp<8))P#?0]|#&+= {B 8.4[m30ݗiI"UGI"f_K+'3p6XJc)mR0*yď$m?fA +S;vψ߫ܓ~-9,r yK5#c}\*/X-Y8MLjgUQY=2rm,wjf*/}[qǒR4EXuŻ;-H-S%-Ǧ˼c+IfdwnԀd˦gيSRxF/~<{!m:%m5W[:B3wF3>4Kk@$)ܼ0wi/^J&W-6C 6Ԑ1xfX]KRZ(UK$ҞvMS U%:5;{.q@8sbB,汱:~q5F6K8y0v?e7сx6#Aό^d+qbd3;4bRx`R1sF 2!!UErMG(Y8, IEVjũB=6Ͽw&ngUTGQ)xmbr{ZEJpVX7i vi[a7L<:s#K\>h;wN[#XדrdRn!cfPSe>dݣftPHXE) 2rӆp=+-s`(#A+s@N\o Ay0ݺ_SIQWs} i73*<Ǎ,UR> 544a 釞Oc j,6deP<)Z(ho!haiPL+`[-Bͼ(;wVבykGǟ,Zg~#wNTkF@8aR6=%3XO;cIUV\}=|;0;'rS?lVc6.S OXr)vFRNY]tۜT6YC,Fנc^1޼S@Bn8{b:VbtrYV]7!~>}K΁s/a+-[x򉭆9Àafdi$b#|)xLE!~)6^ `Y'dՁKd4YtGؾ-`J»eg%41:L5U)NϾ{P`@49L(']Jz{~Hܰљָ$B1.ށYTf)] GQ׆| ,zQ9S$B]E֔_5}!:a(@Q:ЇaI'h7&~|؉ɷsBha$.0};ZQ-u"w-=L{!}N )k8}>K@7ln9$ߥ>mk~%# mux\>gvMNOVzݕ)݃)`jec))Ed׫۫$u8Hzм43=1 f44w6A7jx뮳wӇ؊qjTzٟvDn (6f ny ͽwFF@>{zD"#eIO4?GR2r781Il53Y"<lx 7e}ztAlhwiZA '=Hū(V mj.XaG/$09w{OV`FݚTb3A-4hi jR.TqKe<>c8`⽇Ii΃Z8ӳ0A0֎|~\' *y77tR9z=wP>[eܹ) 4Ǔch(󌯼,A]9V ^p7>}p5Dvs^7 ߛtg`mY]$<v@VG,T|jg+:?l^Pt[{z (fPW02&H FU"br+zD!5{EY-+./UG}1g+6G}/V^ٖ/'ub-Jdž=ڈ(_ ڻwJTJ܍6F<Z?۠) Ū fI !`B_zSV;oc0*|̦p;,߽m_oDP U^X%"m''bX[G(qTea^)_sP eA1 ù+)O2R\c+gELͷ:~>Ddkmqrfi?Pʕf1`C4:?ㇷ[CQ- gDy;ϳS贒}q 1:pluGio| *y@ĈzFQM2\Ӓf4sSta" [ nn^jSƺ x<ҙZ>9;s]% nIY@ @#A6k'` mۺȒ}XQCrJek4 L%q8u9U_ Bd Yh<8 -qay YF+ໍ{Y H;3ABR41tacΛ>[z* {--1> MN~8v,-d=9B K vS}+hG GK- im:V5&bnaUw#Wb;l:?;ow (w>: ^Ƙ!#_Dnh?/O|Up+ U/sCVQM=OTrIE;LP9ǚءWvԭV-m4mWݚURn+ɩ˯Y| [i|c`5dӐMvxHR;-)-Gև͘O)9ťTFn¹XM 딐(2%хa:uZGmPɹ23, ٓ*+ENbr*ȯa ƾw7iKB}`WY$͘11d19|t@t_+M}aen? d /[l\!:[p⭡E{(ꠤB..G^Uo5zb/o0,K!#2v-@CֻfJ 9\v>XYR;y, Z=64DK(XLqt2SZm,61GrYbe(!ݍ!v*;۩Wܰ- SU*=NZe uDd[Wؽg0/P0$q({\̡@v̞'06 l;{Ɏlb1xe*܆$0l}>KN448Db  du$V]㖏h)Eߪi|2GbyE ~=JǗ՚k@c`ю/\1/rzlz>s]tBrJ,&_*0ث@b*2y^x1>u\M@$ 7'ѵ۾2o!n̎UIMq"Ky\ℤ>l- =B'MC*}W^^{andb6m/S/2PGNC@8單CDXdT7Cրqj'{iYK:)O{j+H}3éw LobvX)7H??hը3oY ,苧y!h2tݸrOmk !&'Iu0)׺݀B!`68 Ue|6 ygzڈK;MKf9 .(!@:E1: մmKRe !&IE@rאVDy7Wmb9>Lfs2XsbgE 9Y6dEpձ{-ǘ\z#aw&J&EO!fY#&rk4]}ZC+{c{Ic#?"{(~;}\ 0B Y 3BoyV6,f#39gh,n1.^;Jz7pRΌmuURSInu*yz9,Hv"ߎfevKm} pg}rTŸ%'Td]G`UG B~qA `Wm󉉾cNWK۝/l[zA5Ik)[ϩO59g\؀*c׉ YYɩn-eNxbaiI̒QltV˿k)`:%0Ifg8)~AkpUdZɹ=qGԛ37)Ce,!.kA[Ha!,eOx\I5s4MgHON[#\fO`wt~9/r&O +r`]HG c G\E>Ѕ'k Nk*TZ=X0y622eG7%['ZA΍)؟fEchd&N.+>9`bԉh vʚ2dS:Xwb$ ַA$e\ $HS,v̪ޞoVMqcWмh[);AO5)f+D9?6p6P9.?0mi쫲޿ň^G[=Vw=RU랗L@bݷq^_1#)qgPcEdJ\_EXJ, YyZun]C'^(N?yۉ.:ߢaFeu# 44GSh]BW"V1Y_qADC? Ld /U)-^ ܀MpIt5cv![%9ɬ͍D µ7RanAl&[PWCjߛBU{O+:@{S,qe2{$6vp*jaxOȔ-p7A#A+ނ sJhIݗy֑&4sCGyvuP"sH oAb@eN@YuHB{B <<@GC {gt?4oD&UY2fۄQlsK c˳8wbgH'܊Jac` k#~ Kظ32ƈ^FPe> Ici}}1pheQ}4x0%7/(k6W=섢wݍDezUHh-}Ws\L~K͟tI9LRU"#PXi8Ber6uǧz*BdM/yT6NK4)8ڿ2^#2;neC\);TJi |oafI YmO*`$0BL>DP4%\;(O H\1ʆdV@dőUz@d+(_7w}=GVXGn)avTԊa49@| Νd9҇QcH%OZ}[@2\r2N9U'nƷ3$Ps0=!(ؿʌqq[}F's ,Pw7#AZH)$ 7%xbV΢,蓿A=nm8v![i#%1#p=d)c8mQKr#u2"C7 A9Za{[,[rJu G;rz{nHP烩,/XakA&?zFX]Jy?{;"\g9.(z0&JPa2[ioC>mSLD"Mck ]\ָ--{z#=O8|ȟ_rn\ٌkLX$GWdm 8_BpMO$M,40 MCgUlsE:|j;qD{!qPHN(mW@ HO6ඌ[L?.Aн. ,'(aqOwʖW}iw7Ά:Pku4~UƩir\5Q^ EԷCNb|cf6J-÷zCmZ9M ?[HX&"Vl. jiטG"q|)V>[ӵ8&^ڶ-eDuqi*7WH}k]'ySV(CW3. GS!ޫ5>8K4#ۛH'_Hp%u>jiR3>sSR@'ʯ)~b8ƳSD SPA#0yq~9E8%oTٹy1ձ$ rf܆aD՛B,]%Eb+-8AY7^TnT;_PJAQ %SX_# Wrߑd20+Cñ͊!1"VJ n:,s찣}wse[f 8Db(krz2튴dμoSfL̹0{ſ$=0baՆm}] $*Y%M2Tx ET%\6ke |kNUsyعvêL w'ʕ8x[Rw[&a:v7iWSǗ CvױC ,}  };O4lH:~̄N'a֕ফ7{ _^-Ɏh1V{xgWwHm$V#F3ACn~6񴌯= [Vog$o=Fa;0q*\C:-R4.@ ,a`Aq_=m9$HH(ʑ=4v*KK'R`pv ̊92BƂYqUQŌHW_Ez nO|B\aσi(asZB|}]r+S\ur eKj zHlV޷iſكt-<V:;#oA<夂"Vh~[VHS¤b}߶X'[lup+DY1]O7[ +\#yb\>~x"Hzr\pqSd[Jt5g׻/&s&5/ny6/Y#LME!\>D#=>゠ z \D|W;q˯ T טNJ%Ps"k UL5Җ3,̋ "!FrJ,RtX;\uo-vdn\u3x8;\B(;|H 54wƮӬ;xT]Hxx-Zft5[gO7M,W/m ,,=-Xr9^Gd˦+hQzglJ/**Ln }߸j%ukO__VF u8͏m җrL X)|ym6uLK_gML5Ù:bOI =S@9jImRȥk~{<+$~eA`_0fJk,I%47I ?wPгA B#lk`/&8(N4Z,:=JKDwHB.-.?0KWE'0' '5車IWrR Qvl*pg!gyE ݶ(&/ ͫڀRJGh a{نe fh>l:D{!hM9TҾS8!AbƠ;MIyKpQum-Q_j[HdS0 @=יYftc`zK]`&/fG;i|q'#T3s>%cqc+Gc4v + ݝk.0SS|d&Wuɉ^>8qYIw; :U {wIWz3! cs:dJe?yc ʡJj˶cl 3Έ>J_^QKfC<OiCAc%)(m\1=%a }sEyD )wHLX[ >k{~?͙OdeF l V2L*Rk~ qc@/S/%ɼK |PtϏhm8VBhXFUf+)*nOk˸>)>e}Ø/l͋iQ)K9G_XkaBj>nC 6Wy'e0%J[pxZ/lӁ iPwh|NvzmLkJBQ}F9؄o`^4I% %3%1 v AO"OK )"口Un7wB!KDx[ܢ;{ KgD X(u-PIvC]{{  悎az ʇ)Px; kG@6hqml6Ht٘|FZsj&GwCr hhJ?ĭbؐjr]H@V~Yfidsp}946LX3[@%H,6w:& ӗdraA'+~1$ShD "Hp;LB! 7: 1n f2` ZYsrk,~ @@; &jmb, 'Ղ\HFHT)\ ~tKZbxB4hw!i>Yf+d ߝmN{#j!.^$\B?!<^pϺ}y|ohdpm9L莌s 5 Xc99 OdjnGB"SS$a"G- vk8Bv.[;j d<!c9ū؋!\~7fZST6% ŏ>z-T {L^.t& y6 -n7Xq p_}'뽐bj\CO5z  3,bm%YX$1kY*޵H{V;KnL۸qk\s؉ o.,+U_N[c숺_J  Ǜ>H9G7.Š4]wɐش_oWHN| :H|h+ї acv>LO¡5.^P͵>V&h-;x c\Y]<4Fܫ*Q3T@.ǟ6INi$ph !OA ma=bVꛟz1X\yzI"`wa[K1e~m1|^T>u788܉֯ )h0>ߨOߪ|T8WYfy$Z݁]s-C=Vѧ3e9ScيGQM$ LC  ҂Cd-,xB1MY0;*M߳?XߴAIL ךL9'&d4$"BgH0WY$vc R@}"՜75G_`,΢¸F+ڌ!P 5^Xa8ca͓9 +p:WrK(B5QSM5)w= b K5Q _,G^j2$(CNit+r@_d+<>{c Fk_\>Ь| d4M+}H?gnB:$L4j:h/%Y^( *N $ R+hB @Yv%b<4B_ΞFPllF/ 5!m⵨9Z¾;YƄu P׹1R\Zҙ89q#Fe⑎%1ѐ1,9g,]~7w2= B9´9afw:dBmEIpU7X}jGzZrnPj 뫛FWxNlo{>  Y-gB,{If<%=Kc{Ŷ]tOoK,L{{]bCzb|0N&Hl؃5Q\ZP7=.d_L AcV,Łt5\|C,{s3ܰr 15aTZY̎u}fa1U\G Oiðb; ?6- Lpl(n?X=*>8g4>K2kz -s&3cO+"1)cRnap|9udHReJqS'=}ԄĞ@vRæCK({R8hBSj&ΡśPQL\"Q!UV|[ϰZj]ϐbN7\(?-,q "r47e Jnsۢ8pO BF'svS+L&C=ZDLd)apߞJQ >֊-ـbW(HDtGhn?mEҐk_4yjA f5gu#N`є^SY [h c+6lMVmd}aDԚj<@Y=_ KPi>F6>4h^{H-uH=mYtaxڼ2i~ sKLivOgW.() >z4oPCV!er!.^s$D_Gƴj7K{@2@o'hvg+U 7@&)D&ZW J=<^4Ej Ɣ7:u`:ϴ.8ޥiIgPy藮-g-,;r@zXg ,+C^BSGF [V1K>%6GcO@)sdrXr&͜E/d`߁dC{߳,54W_n>;p'ca{QC[?z]itgeW!6YU 9i[T<&!yOʲe71a>!HD*jh$o +I]vB +ZT94s/'VQ .ʃ_@+5lgbתU6CVtVkxؔBzb}6sQDOPB}w Yl]E.ޏhuV@uO8ă, [̈k\yK,u%U$kii$!-NͨiPZl_ /Kr(C_ H]Sh]]D[: k@7Ȋ; ڹ$nLחKϫ G2G~|Wq*T5Fpa?6׭D㚚OKB\!Z:0po'ƕ xiי=7XW29KVj}KUT` qHx>Njo0"{|iUڃ͝&r1AѨsX9*4=QhC̈́No+YӒxj͛^cw1H1,2{YL~p7-W׉z! /~pSJX1VO8!(ej:*!t-!Wku}:|qm6`ո9%yL?Ww5z@=u_j ҽqPs K, L/0zk*'8a1H%lomt$\N٭A.YjUAo@U)!1H`x{\uboNS7#D֠Ӊ ďRJ(ڮBp|2\NE*aau?"8f% 4j%*i1>=i iC)q6$BbGVtRٲCW%6/VKӭ0}ꗥbFg>(2gw4\wWܿcߜ9\e).qFzBA6-VUPObf 31mo H.k=׽K0ٞz'J\D+CKJ0w(Lb 8Ǡ-._ǚJ:5 x^%u45LL< Fʵj/BmxNFypwJbd vMlvH<-SBGi$fLuRc7T,rAJI]R*LI􈺧\+O x+%Z>ˮ[av%a yh]d,ټiB+xreܢ=&F-߫e9plXGYx3L;کTք;0k&ݾv5ͥ%oѩfIxMc"$Lfga8O(U xg:|lbeO(D+hV7 WE^& z?YT]~ D(fg3Kw]SQ*-8T↋΃#zɬ($H6c-Y3$YpUK`*@ ssgMQM6fHs|.otQk@\ov}BQl U~5o\wѠ`$}{Tq]B&K?|r./U8.>R Mqj b i l K誛̪BOEVwoJD1S G}[S C;eV_vl>ㄞ5?>RC X>IB2G f2lHWàHI,,_xBusCY\[[G<ثޓ[b;jDKVČTe3%#;* 89aD$FuQ"W,)33 (k PJ ֪Xno Sj5|ŗ뿗8#fŜ-vRA`O.ce 4VLEsπIK'lIዑL SU9֏F'z(3]!Z4:d>h8c+T,䒀:WrA(mY '{8lդ%RqwRIvcq}.ACRl!u{ bX~\ʩm!@ϻŹo0~d XzGCjAJ,=%Lh7Kdv# 3H z+M͠Y2#kp a}T^3uev0tD*}t)PH5{6iWezf4'pyt\dș /xE}K;>i_<"T =AE[LlBg|St_ڡaWh>M>f_/qw^Zc3~6¥`3Tf~ O50~#2s8,Y?]9%iAw*'rp ƬF(T tPt^yTK/:AA<]WQ "(}IA2 XU:nq$7ܫ˛w@9Z㗩 {WoGg ?kr 02!)R%t)K% ǝ`}o6FbGnн2ͥ'J/RF>f_ozF7z>A<[W)He˘_;&<8=9O !j5i@(=QU[.sTgGH\ Pj [ ]l@4&CTJ&S;?#ACb2,'YM]ޛEAw|~T:QEx"Yս!^.Ĩ/.*JCGOz#]7wfbZ7y۫P'ʗGd].ᳶ؆/8> Ju`KL܉o(?+T͈=QrXUqǬ -lK2@KtE]h`Fo;|Fc( q۹[, slQӓPriT MOpA{;rVo N1=FI'99)7ȫ{r_2bl N PHS|8Zdn~DoWzy2Š*4WчW&ͰEy \9xF J,7˯AEcd3CjԚC-hW{:iMy$h!!bKGӮ#h̪G&=rY}'j`[2^.t$K]#\"p ~Wլ%H S̢k>pQ+< bi12httHJ0*yJ!|. Ki' ݽ l4-K>[i xW smǰ_6 xpܒ:(e8GI 6Ǘ|@yYi}۠‰}*8[q4Fu@Iq|wޣ KQpK`o,%W͇n)~]1:=I2WL_!nD n";&A|#caX.\\+<]biy\ GY (WnR41_ v [d"@pE&+]{/-}*A߇ju#ݦIYE7p- n~]⒫Y'mo<Գ}[*#-yE[y!ωLCD_BE_%k|8rLLk-4>_+7$=,k~f?ЛH=6\]|'ݵPOO(cM/sUEv+2Z?>a:Khg;b%qX{YBj3KV%i!4Y0Mr(QKY5 %5|Msz1hѧls&9rf5F(PV ĕ JŬ|LSN:EJ]#irZRtEH;à)DtжmӰD;>P3 7[q&j,ԉ1znزh$ Bbm+b #"=ls:#U|^x5PJq >XyϳAw23 8+`jC6`UEeAäe,pa~=ȅS d7a2rS$1BPъ1`+IM!ج_/MooX1_ѣ@]r(>;;JI ՗gщ&w+PQoxk[{f85 k#X .kMp%[RWHNOejN;Mِ^ گpܟaRͪ/cGQ|MHAPa N@~URA#*g"&_ÛҸ μ *-LrʨST>{'E*Cb6gšF=eW>~1*mR9/y-U{ DΖLz,pK=ircmOhlq/}Kg"WŠh"f_pے$kC^)5m d#^0EOEPI2<:襬e`z72懤B'iL9ao;i MzQ ŇbrW3(lSd`8O5P@ /eJPT'kGvtW3HRr_Q֠,c ':8F9QDTwXmD+&+°Y\* Qв ՘NKࢍvScbE7Y. 4`Ve*~g$ʠ M ϙJ/APm~ʾXzźs_E)vfDlijrJϯP,F Sq123@,︤SEs,Nu屮'WEW Ig#wcK5쓱.J1{I58aCՂ8Tz1 `ZZTP.Zz+KDodxMţ+۽q񣕫c?(-=xΏ#aCU96cl"!S0XLS_*Q=J<*mWqفTP!̋1zA=[8 ɴ,;bNWEnrφT>B3wff1RfTۉhnץ헭-;oŽu1d_9sۋSJ۷whEgg1x)/ LsXwO^SDGbE_# Ұ͏!)JIOGL;vT]l4CYH봎~, *\ZATR)?OT.R]j*8'K7ΣL&u%(2!w"jTg4eu'SM]yy%wUVO(4Vr0GE>Ym+5,T~It hUkGfQk}Χ 7!kd<5ׄF\+,AU.ȰB8u3r$P(=o+5`Π׫w6NvXQdxnxkz7LOrt|Upkx8 V _X/LӬC,7 9\Mz5ȍnԚܢO׭R!SІCQ*v%9`o ǩU=G39IQ1If"TuY4&̢= QAdɡ4%ތ\ 6.SPtc/Нq=xY70>WiY %Qǎ_QSK2i3µ+UmޑYJ[%hՕW d{+|FjX_aOs]@t_xlC X./u1K5N^W1GKӄE``b[Je߅,W;.]6e kzlޕ0sDe]j~M(~G(Hܢctc ,[*'۠{zpќ.Ahb TH*7:SeK="ko;(qk\'?lm/pb= h>g-\ ru Qwv m{G@2d,?150]f/|5<.Bc/6[ع>| .5z7 XA;^|ZÞçA!_bRר]Zj)~CΙK3åC0cu'ѥϕ9ut*1m`ڤ2ʧ5շ:"ijk;ܨOU)׻S ,>I4T%ކi6v1c V4y#b:@>$dpB5*.LXau~~zN20q}F޺[B~t -!0S|>q퍸! mL.ԲQFě )#nӄM5/~rIF+rS!*HZx G*F$r{N_7(i;N52 o3=9O)^`PdY~M ?c7;`oz24R̀K r0w:eEn67 nnWLd7db! ;5+@<"ʻ8ohL !Z׀!V&p;pSY@(DӚ%|^t9ac)pJޫqFoTeygGDQ܎z?%?a@fI#َѶh X/ 4AV/,5[P!+Ifiެ|] _U N-Fdn( {\sy?E6޳z T22l6!ࢆJs[PޢbmY(Bm<tMB`?=Kc2 hUGH$A >oQq` LU^%v ܬ)5;+>Mbv'},@I@&Au=R9؇:hyS52y ",hWU RGCĶY+NE1]u=.J`˘D;b%n"RȉdД$g*6OVV!`f(0$j1_D^7qj-Ƞ`n% QG+r8C4ğR$؟6PŊBG۱3g3oud!ce8F\hXXm1k2ʖ1]6Z3}B[vk^C_da"?50n}uC~jԂ8#Ko6Q1qsЊ4$Oܮaddb&͔ĝIl.>B*  K^?UgI+u G@=3/VI?}9-B!+FUdii&?=fhGt@+o$LEY/Aje`L"l&wOMN\";zx[$,[ѵBݛPț ?_aN!a GexV)4|O v xW7fa90e<Xq_h9do"~['KԘ`_o{oC "J^.DvfI,Ā l;,Ĥ6Q}BS3~Ls,/*''QeĈqHDdS8w. ۙКD }8oUjMѠ~~ViY̊Bnכ"EJ#ȒÊ!pt~U).)FKS<toPU~0й=T_IkqBA +VˢP[O l1?bv{)~7-$yٛz|A' 26 O쟱c|ʐ'60Ssf&sVH!/s-z;`Y#e6a,Yh2°0wef/ LU #ڞ1 7xS5aĝfCw0qό^=tՆ֐ .KG;TR;32!rHI|Uۧ:ѐt$!/O{]{& yV,8{p66 yVL`Prj(:Ɖ"Ƃ;;bR`xTܪٽ}6 հjkdL]>,~vbQ}1,fpD Vs!]roXl86&Qo-'塅8Uz9haJ2PEfw|8 ! ԰:#':,{ ;|.}7MUc99CZ ؅Fy2RFLe#qy﮼qA/縉h*!0r?hJ,f <9nuUg/.M56*1gᙚB>Ǝ&@Ƞ/XG>e7^|/c 9N0b^A]:(S:bk ]ַ޳)} HMߠv3F^oAbnҜwSuRs C('? [.'`_MM09?JȜ镊Z]lL@WO2@dzm$ ؇eZ_ Gbi7ֈ/>I]-i}n$׶KճDJvD <"Fs꼨v!C6l~T`= =Mb#V0@/Y9~GAG|s ɡDԴ T7}zxB)y|uD69VUP4I=qu/L~"L oChHǥh[92G'Lbg&-.zue-䌫a7 fmo%`a{䂏vXD_jI5i"ٗ.H1cI_I&Sܮ4v7EIaC g"`i}m7 p p0](;! aCm5 Qk(FnDeߧڭU' v4j"Z=gσԶ"vd IEAxᖪԑ=:M9_aW;KtZ i'JA>I Mۀt:nJ{>FqnSRZY*@C$8AF Q!4 rPLSYR4YTdjɹ(_9d?iuˆUu4/d _oSW^qoeYWl#Zf fg4,C{ؼJvsau/&iX5_X>0^4a6 q'͍Bl6 ؀^I'QͶ[L\`'{@]֍?˶ bU.LvhC:Ϙہ;ۡiAq|D-R+7H~i=LPy8/<sx0'u,BC.^;Jq?|C$,i<,j;h8lC4R4ๆP.Ya 1$Ĥ=x+A۶THhxM 3+=i{_!_ېНp"nGsw,$CM$L)=Xr5z8c_V0PMֿWSVzF' gNmdTՕse̖/r}I΋k(Rdj8߸'blx:')0I`wG߅T㱗ɳܥgx,Z45̑BFgrm;^ @ 4pc`t]+_uS_غ&P^ Mɟln4y֫j1rƆ7և3$VALiTfmyz2[wF;t7atS*g"ťZeک@WI"!Vm-YS09`fMZ13썚 L-;_F8^|W+w-g<~J$ o;↧}Jor+w)5Gw/O 1.k@sku x>ȩ( DT_Ke7~41On-塻za|li?J9˳N d֡%33t_&)(hu=;"22xU=oc,?kNCn;F2eӦ+wtﷲ##uf8kV5Vm(QJUƆ eHݢS=\q^>wּՄ9џ\2trB]4w]F0^t5Cj9,}5{zN{$,!.Wp(.d߹G~ji{Nd`hkKO؎8Zip.->_WlfY ,!Meg-a KG4MٳLw%e35F̚\i'޿, ; #{RޓH+6L_a9o4K{ =A'^8Ѿ|)-jT[0DoD8bEWp03kXl LBZk~2 cj4eh/YuyVy-M~C3.5J\5h l񩵇UJ<ئEry,VQtu7l _!T8$%L]pA˶Ro[/&*a=% ׭5A=a. B!e%O>Kdv%HQ|(exXtrzؒOnNryZ_0+%H9J$sn#Ųp|Y(Keq&T=Pc!]dMRho˒FV<>oDX lywƧ`و48.6?{Ni7IuXUu0l|'e8F?-|^bv,5j{USXfy QWC FS<7*",~#W("(za|!;K%{7VGޓG`?u2sƟ3Tk3/E  ET/Yd N7K`g6QMdl- 1O{NTU두T 1f"bI)_MU杞4DuKqЪ@5;3͈Ei2_rm<ւz6@Œ6s1pύgΜfC! L:]ѽܳG"(^M@]Ӝ2lirJ)W"!s4|.dBn:rHxI0&68q\ _gZF>4=_:wjlK ~×Hj. ""tؒbEENFԟ}UjR"?h3"aoeGj[s(j &uɠ4ޒy|/֪]&·ad2u(*̞tfeȿE@9\"UXY" ۘ1͢w*YZeyͳȠ-UX4Z0Heʸi歕 Ug;1Hgoү37o1V0BەW]:]fM8nU0\x| .)<0==OmrRhkĠeUVަ=cA@#މ/qӳ A"]7N(v} .QTv*mGW~VpA_P9-"]y(@z:rFdE-9M^kkKUȷ=oIp+uM J{!VqGiqŜH3VyӇy3p9 O3+1-)E"W9eq/ ErԡAR'(BlED ~"I"zV_xAoZPMsDJ>hPrƱ;T_FT((1K\ 0AFT洈iBvGc{)٫_O)ᑥڰNqeٯdXލ2QD&SwykZʃKWA+7}'ZGL]  O*ԌkD‘X:r݇yz襁aNb-WEq%wf=ou =&Dv:cKh˽rytCP DNҠ%Q[bGK)lP\]'m Á7x&3>xhE C7M<viѴG>*a2W>L-dSt,xlM_6~zSSeCLW*˽2Bh YR圢ɤ]7/am['Գ%Ȧo[JybKlfQ B|F5꿦 WgVX+{P^#ٗ?sh;:zNG]r"~xbDt4%U?)I"5;%t@]RҪ|o)!{xbd)<k~iF^ m-[ن8E 31)<65Y|Sɚ{iu.熥|ÖA /}Mg]:g.+uE V'43KIiTbpbN RwWYLmSD 1<enVav6eY%qRrޢ_L(cstd**AK4_\V)p K?W0e1ϻ]rѾMی~Q04ܤV:,br Uh(O7> gG#%M&8a( ^FC!AֈHQ eǬ+!7Ng3 '~:l6\ O@ 7Xb"'_cs i 񛞤 N6.ݿ4+ozcT*=F[(YBiRs FC@Iޡ_aցei^lsZ-`M)T;ֺf\^<9P3LK~1+4!Cu yw B֨-PF U|# M^Ѝ o" yNot,}J|D2#O\y`Ga -mַ ւq:$8rG)=@ڇ.iL1 CAl?85/_ i›W /R4z./ u#Ҧ;hخ|(fҜ(˰v(Fu\ˊإ6 ꔲlA2)xeԛ1-B)ONV:pi$*8e(-"nrH$LVDȞk=rwGc> Йiڵ J3Q2h5= *ƌU+ho3[>NX"G> F%:z`jtE]HY6s NJ+J1: 6 ю,;n "뵀 I{9΍>ҁ.^z+I]4r8U0LpJ׊NUr'1/  & ,m1Lo˅YnqJ+v:#i ]Yudk 慎^~E?زK&\Lgk+IlSv{mIx'p{7y?册ICI!r[ tڸq]՜뙍?@5VõWCșyi#@kqw]NҊ3}Bj5muz١Epw49\(#䷇f!G~BGB|lk$JQ;=w*D51'i [UƌKr?D椮t]\]hHqKxElʈc̨*} .¿ lQ8ǻD8Ḁjr!1$aYHQ`.Ԓ7)3Civx'ʰA2Dݧ2|!frG Q Ohu] a2 ׸v5.4rlsc `v 4uGG!JR)Y )n,jwGg%&Box4mdu"_BQh[~9-؏\rlZ9`$/LF%di!;w;!JM*L0Z 50\i ~ĩg 7Ю~ײjV^'x#SD>QUK088bs¨ͲV`7~hHj~b+5.!zbg0+?uw{hya?!L9-ٛdp%l}h^V]* f*z2@Q< z2b,&Z_bX̌/ؚm?y*&1.XTR J ux_]fe2K Ha J=?zvǔGNm)u QG \!Ie0C4q?:J4HyedSS%\^ˬtƵb=;D5orM*^{fR ۭCUS;JW vq`񍽢A8jATgyE@1H6yFM!%%]dk_1&ޅE Ln}N'97߄|1($F,ZXsgbVP_͇ ̃@]]ٹ |%[DJ!oEMkA%\9uDN+ +E* ,P8gT!S]svvV,9~xK)DLy|݁R!c AKqkDfýxz8Ouitxe:ETpö0$s kPXb8n9x)= <6t]a8/@d#r2Tl,hWF%~G" mdS'9Ug[r>ѫtH~zj9MZ}0>n&%t[jWL~/6JOy?>Ysl}Y{1\!1X*OY1x?RFHv@h5֨߫k%Ln#Q2RnGeʰdnıRnIAxP81lJ:9?1ru;-ɣu ~R2.}NýcbFnDM6d ѩOĠ@aW BЃT#E'OgEAБCO˷7_݇!uQ_UV8U5Xji1N&~nb?RGrCZE .-ƂiŇD i^ P+; Ӿ'ĮM owɠzF 1kh{_3F:-$@Ev !v#q0d `%_.E&]8=c"t[z }D] Uˍ2T)O;W˓/BK*ʨta'MO>g%; FwFϋ7I)ܾiu ]rcQp$$`_,t(+YTlT`^\^E&(3SD?3l?ci]so'K TV_:rHm^S@BVfc~4xYqCƑ4쐼M69hLNN%qԸ:)[f<9Ћj xThe|͵LIEv`NZe<{@x˖+>ҝrlNt4:O3of|?JΎݵ|arAL."[pE8Ȝ%aHID2崦uV93ȸ8 3o3sRšU V~@NpD}Q5}?JW?kȼD6hbm|?ւo^%*=o\:&[,+ޙcj?&QR{t#\%gxJ*6 M M$| Bvݿs=b)):XYL^3srDe2_u>SyZ$+,?VQ&[AȌ~d#Z*_5;9.3]ݎh~h42!/M88MvNX n8{es;-.o@h\i_mK@+5/tMXfQM_OeE+mmTٴ9ňUYs^@c0n:A,>icg]6Te:a:M TW;J̯EP'ҙڪEIgex1)Yji>Rml B[Z3l4fzkХ='Mt RH4K Oy{_0d>13EZ7{B@P.0 JO!Qus D.7i3Z`fN;$rM 2 -hɅCwкTl_p`=!bqDvr/ T+-1=A9Fey'Y r Y1Y5Y6bY۟;?v^9kF?f^5^YY'{$>.`$#BNiG g/?裯U[4?uF^'af6|_?[3tIq8neϷaU,$G4ZZU}13uG[v1hy6Sn𘿬( ZHA]-2ʣP%,d="7V& [b3M!`PנF,vM{g #@Z*vI?46 ms݁J3OP:qh G~H?H:rrjB!mV,ڹB !HIHۥKq2zQ+$:o(8eL P^njfM"% Lk;=4`fz2; `#ngP ]thu)0M^tԇm~/v߆Id W41`v5>`|Cfk*c_[x .aܹnP~auծd8c^.m/cQؐ@|ȹ{>jսYx4z z{/zC.{z"DmG_*ws$W.xj}pPkl 6_I?K޶ xKy²`w*]"Tʕ"l%0%B;qI~޷;ό@*?AF;~k-w֜ל RH6n }O6ޯ,"Yz~Pt{]HB+橞lAD-58n%C~-[Z߂nV8[fݳaR&xiŇ{7) %5Z5 vTQ0Pw`z߇[H1\G?H96SZ ;]Y5#Ȁy`jݏNfsgp3o@aE:XsOo!5?^䊕r@g 8&N@8HB),1"&sby&1L}HDQmc3?VKenb^H_e@UKFdK<]ȿ$G ]+mhbldqaҀxb<0M;s#t@dkS@[_8-&BC3=νkw3%5g%.H+Ek'5؋c:d?~f&g 'h`"+%(22h |0P6"4xbFQt!2n Gc*pIf}  $%_W|0ܓsQ7e&I^䱣sIRpM!o/ i) gIeA 9쿜^qwc! j~_CĎ㢛 9He5z+rs1!ejy U]UAٽ'&r=yuod$n~>̤9m5ZW8ox]t7T)D_~U,ƕvO\W뉲`g[0lݻƎL\<(׌Z6l?crCJP/@.&;l=| uVIRU{<#r5s|mv0`eT8nV;F/e^a毗:Y)t$X3N^'< ;KgH膄ӕp+W " VAy4;Zӱ$"]=4g^wa:Jc.ijV|f}őIf=!Vvc1ޞ;^˧0%^/Jf8bLk賻[)Js .GgusMHqkG4PM}Yg OݺB}"%ٙ0wH7HҌnU-bUܸVJ="Йi?*rPDR. …݋pU~\&pE'(InY+MXN0^|/e{Yw* P30S2|)Jn % x@9fe3H=U}}ӽ-{sDIQKGF#֍)cML^Z:$/ JDoUl[;Yv4~i;TD `6>9r.? ?1֘'BsfTvq>S|vưզ%z/lq-@6zNm -bp3JҀ Ne|:*sy}g6PY$r7+jLznwg.;,71#'r(xo59/4ɜK*Qmo=`iUyn!8*Ɉex]#޸i~*#a-Ҝ6&?lqŞZhi }H.DGԛzpc78 `iʊG$kUS'+|@G43\)>OQRӿƹQ(P]B<4i~jrfblΞ~ɏ.uC!ӫ,x*W|RfAgv7yJm(_cm~@D+Ѷ_0>:5Ry/Kw^R]Y()]خ^HJ'~䊾*FhڏM<}:2;HoF+[ ) ätg| %qӺ ><xسm L9ں>s#wa/rS!0@lp?. }P;?0^KG{ kRҗG^ϳV^Xa]R;Y$B^>`!Ѫ8%,$;ꏨjMj3۵^E~&M"SeMSh@ݳ-ԫȓK]{/ĊadģzbjȉsBfzaOxJtTuX['n=nSʲG u>??O!.4XniVF5&?c Y?8>iHb2x j |%.fv/ƆINd{o/OcSm+ndr0e TBzo+m^6^|ZG >LX_u nj@~Krt@\& >KTN.[ق%3-!PՕMS`ظ7LR@9:gLt, _N=2U2"Dl^I&u=V{[ikFl;E׽ ]JL*VI1$UBPOٌPމ:e_[l ip5m{]λ˽,r$>aʳlݸv4oJK}uwq'I[GըIщPlq^$Y2\/z3,-͈c"$ [r|ow%Ul&дHr s >`)ule{t!rM YQ\d7ɑ$_*?:]y$$HE;j"PM]äx,B.b%ȢUƃFÕya)*ӤD4}5۠n+W'cƹ:* ։ظE{)y{ԳPe[+1=FT4 rԚ>|292* qA>O/q\˚vfE*G67ӧWMxE')4/qZH'UԟuF-wUH$GW,i,,i\/䲆?eI#STYDDTؑ_tE=.D~{-Yqo_ ƴ:)LH Y,bH7֋gӖ$,Me=RA=3M6:&#:G&bA&mY< 9H@GiJ wpvj IR S-kZ+y̧? IȜ(iZ&G"mA|01Ҁ3렁i:.K3,pS5 _*&@k2K@Ne %u!?$jw="4\XOɦ|Q@51~6~ah9 4[MIӄ5Y̋W+FxeYTWDk_n,C% sV;3dkd;Ƈ &E3ڋA # s`sE; hTЮsR/0\,3.CZ{eo+I. b㩘wK nh JaþBUz̿,RCS=" Ám*{exu|y~D4=R[ ׇpe帰+r>fQ5A ?V,\{`DY@#:l?_@-*yaw+ȲS}&`lz""6G S/n<3GD7;sKN+ {?ĕˉyX^x,Xe}~b&>_FVFS# ^-o鎎hC +.! py>ٞjv<)G;Y^$I`F&h4<(j G^ ?%@aWoD].f[ڂ 'uA|ŠXab9m:"/[&(w}x"¬VS+"bb\MtH gA "I7=8=n`\b5.;cg2L;NfHlvqT oǦc,tTUօ @$ 5سrnÈ%PE0'6$,ByhQk(n.fNρBFʪ-3u- -Q s_j^zMUA^efi9'VVĢVQ!@v^}qke^kۿB6@iml@1qZ1ȧu2r3 sg"tn" Է4ƈǭP2V`Wk91< VE% dvi #ۤ;8x/7'ܐT*L748Mx:._9S-, z[Œ'$JhZV VUyl?x!4ivRpSbWaCUO7h<Ȱ>E(\KpD3v+RZQ9f)Ю:AJ7F`X^9M<*ьC^=ay@~_`(?| &H}uQ_;ࢉBPr,2'\ >2,)[fA%!'J6XF(ГıTmAc˘&Nj3PrY{  ]hTWXmQG62>#-Cs׿\yJ;kc惽8o 9 9*uɞ%dyfiFl[0xU@-4^Ǿj2?K$ ȼMoJR7f[xeUCGIRy k3>V﫥}0_C!8iuO ҢwX& g+05W}ݽ_9c5j-c %jx9j\sS/>I9sMo]*zW[,ujNأVNܐ\ 穵&*@?#kLPCns@6#{6hPjҊ,w:?q}ǠcX/sܽSձ|{V]Ԫۈ%ɹ :$j'MĒ݋unMaDv!嬲X{]yɆIM& G6sAfl $S eFt ٳfcVL QDdS- Ѫ>J\I΂ldA16ٶ%>S̻'}LUldVPzҲ^Ckl9$G,xK9KT} _h fM@U!8⼗W] 6@dF4pT!mLʇ:]D)j7?Cٟ8(1T%P팜6{G2~xTKq>`eIFck]䱝 t=x.Z`1SHR6(6$4q#0|1 1Kr4J{.1:a1yA~zl?aXغ/NVO (z۝ nYݜ'}6:%j3mOUN);'a?oxRTAը X^M@TL?7 i(P Rqoݼ*. mFvɦ;-,6yq #~Abxe4Rv`blN=: EZ"S nW`ľ}&?Nކ NϚe* țTI:N(]q5ښ<|y_5'EU-6[`0d)NVWZcFhћ:g H*_Bߔ fwOmfg <̈[Oj"NCWU;r<,;ݜ4L];y\\3ǷMr4"QֲJx?G'p@{˙ XDc?ZUf #;끣{dfxz@W:|fs}A~&}zj/&ͦ$9WYI .aM8*5333;d ӻ5;W޲Vۆvl`.f?#R^?? j-rh7FJđ?^XWBsy'kZK'Lܳ%vJcJ=}lΝL-]DG$:Y ]&?F)(eV@s<}|Klҳ``x8l cڬMk\〓d'wq4 Sh{_GBI^kM;H{4ݥOP~/7R'/G(!( Js_Z>'R$ܪ#4R?}qpf A`IN{QxM{]_ H_K8DS!DDωe&D#\ʩb?,1:F^v0DӉi2B"jTS.l(Սi;HO@So?O"I}캈Q->[m>E;F$s#p_4CԂ(NZ/;X% 4O;gs@DFӐ ̠׶|vR#hq 9R[tG72S" bޒQ)1t͖~էD< {kexğY`WjQ-2N]5as2&,@#{g&Y:NС:SBHOx]F9if/PsM,^!;e: ǒ[RQ1$0/;p!զ9(8Pkf-/ե8b!Vv 2[%ndL~w~Ʋt5c>z})!ݔ|l,,[ ! %@;`^l쨧ʜ:a@ӎ۲!if1(R=s~F9v55c ɄDa5"odBq, ׾׌l̆@@#"ݚV\tf 4-GAbɂ,_yAҫp2~'14UD4I%;m&J-dbY=BV*,X7M&>ZQu/>䲉#+G%ڃ<}wǠ㒳XDט9/ֶ JroK/^Lɜ@{.HמQL,iYUV타 f{0>X)m+p4"=pzcML\5*PmP4 ,>1!#/vaLwrM>.cc8b v3t9T:VibTHs[Xc(Zxqd@ ;>G &f)mP'Ф`Mp?zxG#妬uQ?nď_]s+sK Kc ~k-J*x}M'Ak>yv5`1(- M@O~aygE$|xysV`\9BqLr8<2 =$08˒,ǹ8Uڏ5,oy݃ԊK>M"C]eOI>:0CU1hqܔ-rKEP] #SԏPd#˛+c0H"Rm*U̵il~Vmz}9m[?/1k >ů8!%F}DƕDH,d/OЌ9bh698z;Y EgiҫL۠PSޡІ[n#xkۙW j[eQnܒzÈ?r $5M.GuMIp2G0g<;hm1u+xMHIbҡS=FagJ E]܌lq@Bm{Ұ579*rcY]`e*T,ek7$}Lv@N+,cζaȎ3txI7pq.&AGrwe$:Ihgة"65k|ƪ7YEՈCʃRcsV"(ED*aF=sn)H4 xNXrPW.9.ˆ%)T("vR8V H `{D $A='H!ePBX>4`;Oh٣=%qAN`[.m#]譩bp%_WL[vuJU~6V_lϷVd;C8u[㻓a®m\'益̩x*( s֜s=;Q'9i }k}~c5BH\qG+蒃2J/:H(( 'o]߾kBC| 0\ tX_tNT?eh܄~EC^UN@=0{Fcկdd7J\z?T %=ݗ!Xm[:[R ׽@Pldu1E!;: ߧH:Fmv\:cv&%Uz$^vQ>@pmc=羉u1{MCM mì #,3n> ˫^9xCITmp!s)px,#[׋€$#-ӯ¥\k0wN/$%xB*Zw G i4A;񡾅FP]c6ilGJ:'#S~]`F?N< , s%eLW-:8"c%"1{n3M]U.oH_p@qYniA8/QO72:}ժgLrvŇ34eU\xVmaGi) Nn=LO̼XV,@Xp0DeROv10"~5(ZZ9b4R/V}L~nP Dhzju,k1E3 oM"O %gԸӣbFkf [@C)UǷlu}07لwomF {HAm:N F:2sca)KВ eCDQ J۞&}#ٜC-wE/Mb B=sx?0Y7B3 ymr3EO8|%'۠zAEӢ9 &RZ(VTFKz~[xX#%.8.-tp'44^o;oYv!Qto,[Oc.AL|OR1٨(z3vi<~$`fV( ӿ2j0fl 1>%O጖/ت}/ρX2t2rE)NM9o,1!w˚%1C{3!7?貔#r/)O9ܿq.sV):d|Adr&cGGS8 y3591D2}c]ZFwI>i) YC032Ӳ3i5ݦTݲ֘qz;(LK1zA;vES}:`tdLGz8e% o+| «~c`i Ƽ(d#S1JqГTvؚ]n dr-=u[v܀l=5YF&zp#>]3 @˶MGg2}.Q ! ` G/y)c>r riv橬R㖥4M+r?3q5ȇ☝ )"KmgVn5[Zž$@o.h~-vwKᬈ6Bo_PU5=:E6u ;K|JK_̼6S -.Eqιtǭ:T . hRŹ!e lq\j$eg!rzm<_3nfw4/"mǺTB 4vfD`ږ7lCC udKc<Ci}b{[r8{v=̖\ۈ% ?JAuU֧M #pba r6;;fW?Nõu!|||`cX1 ֒_N3m(]E܄GG9qVlja` i֔>GvLiezVP 3xIϱYp_0L{$ľ8OmO4ʩ+âxݻ'PVY1{(Ġr3^k\h7Y%J)VAe3^FNXu}0!uDTlۅOwՃ&t)PUE$K祻qMiC8~:э_:W Y7?XP% pK/CqX0n?-GÉmŇ$@oJ9>z;3- 6y)A˸:}rq2M{e%&sUOkɈùe<]I"P,u^(ɍ@\9VG1RxD~w$ 59"7R,͠J Q\X&*2+3j -ܘj8d,W@[ɟ3:X8Y<6oq8!ph~أ^ R3Ӟ:b z;֑繱'5 QRpQ=/X$u:ǒHCv333LygS+>&:)`''?!ۛcp3am[u!P5B}A#oر:JFv%ag&*4Tnqw 6o2JUS>֓Zt[u,:1KbTZv䀟CY`Xe 3jC09k,`$8ڦi]sEfNx;rWP@ZLg[YM V@YLo}m쬨);>rZ듊@]糜CٗM1j\U,L2e`Ϻk`﷡*xѸi΅D֜3R̉n-h4+MƸdKk_O:9uíS,B+TZݯi% F塞[ u*ktVx:8%ro!yZ[ ؔ;`Ats 9d]X<# nD M@Y-(\1 ߽wGܱ1qq9Gxz2qbk:s?"o$QHPt3;P (m'܎DBݕ/YMlh̍9BbG҈ E&\H!"en{UVGO-Nσ3=4˄CR#>> vB_zf@̄ZAFt3z£c~ wjr/s-ArD'*kW[#=f)t-`z7B! L\)ceC?l>#'b;ua]wf>{PD ̤Hs1K(3 -ܰ n/̷-d;,e2cseqJ ( /KRJ-6~(. fSjy)oYw 2X?7T;ٿ423.lPm;u8[(_4R{踔MS?9*(u8MA\S%V])MjoODqBljOۊybk [ ǡ}?x!DNbM5Sj _LmLy.p:$֡D^Df O w,|qLu%.h6 <˾˕7KM"Ro[o#rBWҹt\iaOBn5cqʔ価9h390 厙(<Vul9<π˔u]grHt,Ľ'kPqPϾ^ES S؄2ʕQ;%aZ};,U`R'rg(h퀚+2A:;">fwyؕ ҟ_v:}ّmһrAt4AI6͗P\udqʷIV[>25F_)U !J+.sfkqn4/$X+3O:ߐҤ(7!;VUߗTw,V;/VՖSxо{,Lʷ9xknr<ף~=Tx\|#9f8ЊLGO X0{3VA9sd~xKbޑ 5aԖ9QSZN3'("`~wo 1킗TTXfcDM|$$Vp܏5¤i {lK~(0V3_JD9+m&Pҁ_FNGu*BhJSsڅUU (Qd1\1_yAo?jϸ%A:;-ݜv&zK⥠;f(<-N1.xX<eT#o]36%-9=JIrg i#]C&<ǎe iO߬/܏ }߃7{mIި^f+l9ef*]KNƙ3 kŒ`T$w贁A@lGGΧݘۿ$w Ge$잔q \318Bp7cN}(i:mR0-O6Mw+@5_q&_U̻L#$CanqյMp¼i%ٽAb}5>iCh )pI;Ք{uv T.`M8IiLӂpUndxo‰.CtǼwW;dJUKہ>%!meT͂q;vA탒o޺bkչ*mrM{t T0zi̶{] ~elƽD 9rKyj1 fEK1&)OY~Rs#NߢEM#U6t<^+ lzEgcq}=զ}lmaiH;yLgPP n bvK<+SNTNQz"mZ&AI8hp='礍XOI9/ċ'~/ dglH(w64! B%~x2{,=8sGF'OGZZkE/h4aa-|μ:(2F'&}h-!A֎q~ n4b3CjeFep 7dwF+ct"(=q26k"_,^>WmwݨUuT2I6:Mh/iPS* qghe6[O;f9+|^`XeUd[:ƒZ BImr?Y{F#y 5$pԬCU ePٝ-{gdι8HG6I;+kMq8/]t6|k$ޛ#Ǯ;CϱqZX{?$-^^QؒD +X v4%M]>ⳈS4|ٯh\þN("adas"jWys'fN"KƜL^\&WXҬaAw(Ug #S { T~#ֺ#m+? 7 L /i-Śo}7ƍd|+ϗpb^StTaJAYk$-sN>j ;Rz#W#̾{BrIt"b!dV㿨6/ƌ2O^7~;GhϚD[C?4ǯ p]h2p⷟~ o¦FhI ٓGݛTv-7qE س:d)&d)g wav[Xi+0Eh ?1 G0l7 N.P!At|Jk9b-fbpQF__TDJ ɝ ˞ Wi Nڤ ۉ;${ͲA6^7$冡 +n[0?%Wom*Xa@Vd86(iC*ΥS4<{wN#bu 7E2YWo Wa"fo P۟'"b"iKܙÉj$i[#u +rq!~4rsG.!n4֖tza$<-R}n[Qm8}Ŝyޭf1 dWʖIaeڨz us΋+lZW .Zhy3ЈoHpV ΗJzV|:ǐp.س / r?v!?bCì2|)7]=tnrr^׵Tsa_djWPBŰ"Ϊc;>\5t=&ZaUъIFHj4޾C[eC:Oͬ XmEftG TF4kTPΓ@̲KMeVj@CuO)+3BLO[G1Y(|X:+b/7Dq-l`$S䞵'G0CIJt_!`8d&dʰ2i?~)RlRNs-h{W&<HؚeM=53p6tSI48CZR@ⷼMVDiG\o=G% ]GM+ ZwΏ}gڳ("h+sGf k>lj"WٓxQ"֑Un⬪HY\y2vY &v~}tn4R#t"3L}Tn*4>bsM/SQ.RbP*Xn!K\9QWU(<'uېMBjspsJf4}zEC)tNkcqwщDzڮNS6e+R-0J!r ͅ]dB@tz~N# -89ճ^?,1!WU4mRa@EPPg>[3i8H<wRXNh|FVbKڂ} {54 M)ijQ3OnG߬dQ: 8;@@ܔpvMrKe (&6h_ }EVm 6˲E86Gư^II&Ԗ9wZG~|([j<鼈c@ˋGf./#zGIc=8*&i .4HoG -gPL4֋ <Q'h̻'pSeFM\ Ⱥ:NM8}djoS0 7Z B]sM½,5Ӏ,;%`%ڐH>-O?(!W"g܅NR^C-k KP UNJ4",CO}?v9?TaF/26ji>y%aOZ0α )<և\7~+ĭۧ.)/ģb|kL1!\357nC(:JdI qd)P+7 {\#qvN߷8 ^‘юrm8}{rqNν{Z^X2ס iυS˼SP{@.ֳv] 5U2`.mfE4j2KX.belKB%~3K!Sj^m ZzS7z]O7{X$SCުxTG0JIx8myػvPn14s_n!r* ՗+a]혛+ yV'9nX %y;HL}aرuMs.h IY;!@:om(;p k l:A*9¥e"NH'P$|jDa y\y"$ν(Ƨ%5֙qR m9jD~͔ `\Kyc c`'5G=DL@ϕo K%?pX1lN7tE֜`(ʢW*}vdsXpw<bko b_P^b .ŜYRYS\Iݳfc-Д,>ĩd,k%֒?=E7jq֕+U]Y|;G\E|8mkYKK/|c4c͝yJu7eȚApzmI!2"WiDExU-g-bš! }6OUN1{[aճM|r3'k g7DSW˛ E^*es[&A1\c ." 3I&Dq#9.Rڔ`,\6|X`}Xg(5#R/0hT.~뱎'߰c+sYs{ʗPIJ/}dmk7F\Iqlcؼ vX3RTJ0 4Y_)Éo2R'w(bL憴y;!jXڱŋIpxݐg͗SBݧ3 H\%puI՜vO?_pi' LRKWdk=UBZfҖSΰdRSU+P~K]V3uȃ*);-oS RBҎipA nm/5#;iTA]M<|Sgo;U{ 4]69l vRt,@֋hm2^ySoL({2FW@9vsbm_$_໰mHa%u'45tM.qx=tO #lNzBBQ8nXs}}F-i>+cF>˩T)nXo?ߣEyD1*c`rwhR(cFؒŸ-|}齥go׃gS>[-h N/9VlY߯M@:V b+Q4i(MڡHl"(9u!=l&Wdlb2E6hAGu{FU!Y9%5NK߷xJnN Cg^Cy }!4] a*wm>R'J2abNX~(ƻraj}dka /&&a+b8TjeSS (ֱRLA/)ЈW[V_HGΞzN.T]݊sRfp1o`";hz>]{ I?$6 v$FrY HV~tVģo2Ԯ@=gBB7n> 箋e1LYz1(0c+{,pe]#TN'?? .{|U{-MGdX3!SlBZp T_V2]%u<ke}P1nTuvwۇ82/WUKɬ) byWBEWBmv:ZG[cɥ%BWxpfn˼p ;r:P1 B'żP,$ֺSLg6XRC<@l)+,PȐ֥9YEEg: 7ҪBD_-s+5matO&#Bw3Ľ~Y3^ k*'*+L3v];&rf^dFՋ%JoKӶ"B~TF=M ԛ{ Vh|50҇«ȼB>XqvRǮB}V PrnFL7= ݙ{" ޡ&clX Uq7X5y}1VqEҗF+!? Ӈs 9h^n"[8$cYәx}lmc:`rW\-0nX]{A7Kp|AtviY+ꄈ3Vb`\k5Zˎ*+`[lL x2h q_L.1|\DEhrEmp5Equz:C?@tpF }] M;;@paaANaUY@ܽ( D-{T;4O,8I]In:v"vylpà k>:GwoP Zr!)\5(Eq1NV.>~S4bgI A6TWDLn;z  foFbB6MBz T+.9>@.!L sުvDBU>ݒjF+|/Es.6 eIAE|/T3("5>ssW.ʉoe uL`b}M֛4A,,aƱfQoP-/<Ǯ0PHntavj&~eޝAw$ˣ/il;;hنP6þcM_mgM֓j_|_p^ЉyfA-qSVEAƱSX-}#ͫhQ.Iþu8}S~uмC`9OX?&ݐ4Є^ZTF%W]ChGUܻLa`7>[L$HP-e;'@jywf#[ gJ%V%#`DَEiXN;^O|+qT1~;!W @>S'yt 1w$5q 4m]Zn>>hp#$lN@z5rq\,n+Y0ЏҠ{erḴ-T{LKԃ^P${_\m7* TU7׃. `*bE(kMH3+m;=I/꣣5V3XYXt 5ū0O^W}0}sޗ6%RK3 k^T྆@;l_+ hKDYW#1xc(i=GCz_(jL'x=# Iܲ"qshIy2 fYdžkE.6<ĢNODofUx"8/ZIb-J uÕD~@#v{#B|Z;[ )l n>xW˥ Z\ C91 $ZH 3"a lpI Pjq_wԱwmԛ4PO*1 ;lh**oAtB3bB #s0 H!^GqJrdd4^y}`e{c6u\x\wKl\E?>~>o㣞v_\ax(qMDxg˲7,|}K 6ޫʵ#% gS\ /`rԑj%W^4qG2h"B$_I! LOxz ~. L3YK/)`QSPQ0@KlZ7q2MxA#0*<߮wD+"YPh$2\5!z6JOj|J~zRBeRr"A(8o(6F<ٜ|Uo#$Z%}ԇ $+)IoB {Q-o7?$|wC?=XDOjΰ9ܴĽ@a-I.!zrf$3★S݌OV6娎m3J}3W87mwWC2Cg=N IA {piq~9Jp]8{iJ_ [B vҗ^J!xع:9h@un#8+κM\5z(:?CDڧY~cnrm&&{v/AXT 33>cOa*9\MDӄ_uҤ) UxF I3}$@e?kye޲T0aɱj7yb/3~x"wBsW;>eɄiR"v[ =~9aX.fp׭"+ QH&bVĆ& }@mLN$=ؿ< e*bu5Tc`F9ϔY+Z*:c˛0TfdǓi_@Zig&%Ce5k4I-⁚r7+3Apjlә&Ǝ3-@{+ lOKqCzZЄ liؠ@;nOLIT$ɡTIH.]ډ&Պit<3,WndʘfN_-}`e}XbRm;YO 4̙v5%ϒ% FggE[E>*U_R' Ѕt@%D< cZء4&FN*?E7o3>r8cjoҵ%(3-S%S1׷⧆S#!AK3 bXxO/ !Db iaj3Lqn!A$݇sv48>)V8[#ޙ/TNe[͋gӋmp旳Z5KgRvo <>d1f渑S2[ܩ*I>KwJ6}*a}, ȏK7[g"Sjy0 yX⃗+X#tQǁNJ5[bW\)I73"|@Nm ^vİ]gӆ=}IuxkyUD=[9aUrlm}+uJ Yi{a6xq 2+?|AAT@;CƠ6lz՟H[z9$ g$$x$5qVER6t649.\ C2jƧ:Y|ƈ`?!nGm.̿.L9/B2sԿ(Zu:08n̂߯hR6̏.0AyPz2Ąs蜵C "n l櫟N88ԋRu08[6+t彳ä5#-h}] E1ԑ0Փ2D!ւ'=ʙ6xj`)(r31ʚ,qL$ܭb0GQƸtZEe[B)d_;-j5jw)m?u7*|(O2_{S/,哏ʷ3kpPຂ2}SLM0)1}Ǔ1O0+yYZ%L*0Qvw"Kk؞`~piWRcrcWV;hUBw>K4'Enx?E'X^S q?VLYSj4APi"3),u~ 3`v8*0= 1FDn,ȇס![3q_1:SRZХoz[qV^H5+jӣ]x8uj 1J؊?RRߎt PKTO"U%WF\Z%`Du+L/'=RSmf~Os[9g2# ݵtv|X מ|dpd#ZD 3E\ؕ^,Gez-+a8#K N3Ϧ݈瑫kqfDI,4!'V,l#@i|]CT{zu \H{f= [Xu@aӋ0>Q[/O%:%8~b;%e-,yg WK4K @jyh|EV7)VbQO/g~* Nf%- v/o#tMC ՙűZY9.lMu+mB^l~[my.(N5xH߿PK_<g:i} ɼtYiAAt+c8M7%dp1JheRGuOӆDk"CQPĭ6oNUZ)HLB#rɵa+`шTq*u@H*u8ڻ$8t\CF42;_7rwHc,.һZϴ0 /' SG xbRK~y0m̬DHALA_/HӠs+q0xsuxBO"CiImVqpfz[lbC3^ T^ *,ħ:0L]>k| cm-rㆶQ2cUekF\nYeYk1;{;"!/ ]A< E᤼J1S2Eu6ŹXU C8u1U8uO;L³j4C ZeCdP:M-Z V u6fo<@㶊R2ܠA0Г&KfA@Że;Ænj*vpҮ"-%gruEȲE("6oҡGOf]~&ަΩ 0 $WXu-Ql-_)M ѩ.d,O&bK:&99ED)Д~E+ÝXV/ Ex4ճʴ7Z, _O[i<RT }+j?qCotҀ\mK4Ѣ:C'~?AkŌJ&oj;Z~G[7%9!Glnމ)I!L-΄4/|yjb>_#/TJ ̽KP ,0N)9BUu//cʹ^R;0fv{bd/Vok_&n 'fq"1 a[7Ӗ5 FH^iplyQ}ʃܬbmKfA&d;rH6 S8O1l_DHN)W9B^ɑz3xG;V6@A95ꅗ;q4gi-vwHقs w%|+ZUn{|Kmj\`IGz/8ڰ60Fxĵ"sޘ̙[ec{Uvvl)Q!YSc>^@?y5〒slS{|=wңr S5F5v7/^O"Qږ'߱c"t#|/YN"D#j;ATK =qF&bA'{_@v0/g{fp`/ tB9)H\Dpx& ˏṷOKwޯv jŮgwl 5L %v ׌+'qȜőxydl*?RlL5ĬvPI2)my1%X8`nM/ȹJp-ȎvIIV-ڴAbjѼ>~5Iz}XSyO_ ?ac35]a]$͌gĊR?OSS7J:-ocuo}U"'+UT❸F顶 K.)TZ24|Kv* $CR:4*B=J!|>]˯>h 3 =O<ȉԣZ;^x*z uXK"^Ċ,^&.h.P4գ~/~+w[Oܳ;~w-.`Yd-4Whp庹%R;L\Q5Qw#s7m#aM;4S>#:Tq>†#wM k5]i.I~j*Rx $f^3ςĢ`pMg#x 74vʮcr<=,!V(,M^!rC;GCtn@14ݾ !s@*7֤̓_me ޚ\'kzCiJ`iH^8=xI[ﺄB"iGuv7Z2*4seO: NJc}JN3m2ƶ۟q?!rɠy-RKL ` TEuBC, gbTɏHѱC9mIs3WFjes]j>j #32SxJv1_4G^ji[BqOgW96& 3~ʣ~>;]% _́<7ϡJN/d lc>4@s' zOgƪz{)ՀXHQ 1CR@-V&Iө ˘ &OŬ{QPbCUd?r1ѩa9s|?I$ff*3ҚfnX,}ULOۈY]lң~f>BM^)f\ud`j xb39+Θ~2!5{zw-^XC𜞤|C.ԚISŢoF*G! 7DqGOL-Sr+! (m!۔=[lQጄCc'x0PhMtZa陋X#45 ^\=דvjby6 >}4ZL9CLu^vi_*C]sL7MB~h@Ռ1$  \ܯ#gL>$-iJZdmuq,yi؁\ڧ\j-[ 5){9FfDŚAyʷjF']l,Jl{ _)nĵ.MzE9ij1s00 0I1 K.d$NY3l[τIӚk^J#&fL)MȊj5UFl㌵5$\_PzU32u?x?7D03R`U3xl38Ln=>UXY!5OfM"u?6ܾ{Vgt!#A2.~xw?/U 东jJPdmzk{>,|_ɠ Q!$qՉä+c; ,:[I|2oh!c@nhgfl:Q-{#yE_\{t =y 2@'[d#wMO䐘XU D7.*6k9IZ򶀽I bsQ1tgԧ `iAbDKY59h1}NOVޝ??veV:4wVR;qGګ50|,l0S(sԘ#eJT(w?hvyQI(iId1ݺc \UԲV'{j';+ow* mAEujU^[,^q\/1mГ]GX`Y)eW)iم6o tP<[8<{xɉ=~P:ޒZTUK{SWi`;YZcmt|LatPK}(X)^R3xLU !NE΋*P:[ng%z76@3Q2c_B1-=l!-[^_aeoP@,`6bV'QR`$U)8v6cgigTm/4AfiSJARj/H!M<6 ސ,vEZP1krIm#>{mυ=P?l>8= jV%\ *&Gbi[*!`"9<ة5Z5h|릦 \Uڭ(WwmjDJ:ɰUo{$ZGQ෩(TH`r %u//,t,%i۟{j1߹(APR~;tMYwad6&o_ SiNU=(9n{L '*4(&G,rvziyՇ♉A/qQ5Oc1I5*/שR05C"A:(?h=ФOMgv76x@dyr_C*\ ܈7(<|lrq؃r p9/mqA3!9}cojfXY}2f4s9ǨsIeS `Wha&N;@T|td?] `$ȚU.<'4~I[s&҈+m3& ,t̮Ԣx61^/vLݩ.TM1';p*RPKm:lEZ. I}uF~UqcJ2N̎Q>XT " W $G}L*W>oH0>zէht8M} !\CtkܭdM:cݎXSTCe%xq Wf f)ۤ"vtr [L%$"=9-텍l h3|A?7n SʂiUg 2_2U mEVr?Hqtù%Vk65^$PwC̩}4Y;~V f,LL&'Tac&kI@xL^gwc %xQ\%\k*;,0As!R;̵d3t௣] wP ߑ֛v cLw$5&+"u-qyn^{ZLr$rIhb $Ro홮ITnӬ@oB~R>ɮؔed0=**¤V>'4JHX;odN^KbOGX>&2b2wV s~Gqetp!" /@T[kOwQP}^2F4/z%]g[ʄ犽:wzYz|渷h=PZ ሗ7  4?>t#G>&c = 9OU%\S< d&"De|y:q`8KlHXRd>ZJa0SAR4Wa$9="VO 0V[q;8oτ"W3R_GA{֯HH%2E06ȟջ~)4voCJ @^Y?'OQq7pEPtM'j^!Y( >*l'xʓuVi}|cOSh6^uPB0<$]PIdtg R)^*~Z8zLm%jn Lz3ٵCkQ{'t)FֱhTws;o$tAٷ]EA<4$"ξJ9 c;F$a/bZEpLzri݆Pz/+lJDZ$荢dp6~߯sPj'NYXH/3qN.IU߱5>0I38V B5%A!8<:kxE(Wdb?ו&XUȁ)5y1/ц^etfϢ_7]' x//r!a)iQ$<'QɼAg Q[oJEޯ 9h,LYN Lg X=O="1QFr̳loj%^q rA^n!WWL *:Wr&ʇ0<@v hUqF2zPRx`,%ɺ9Sѡ_k+_*ppF( * f\),g?4.k vU.5l;MArs{QYU?b7z qRnECS` pb_W[kTk='eA`s 6SrzT-"V]ެݿx9."DȚô2?JV>mN;%s-l-|J! &2;v[T ZlY' 5Q#rsI6f>@`-]Fyi0~qԯ 㩚K7sQ.dw/NG07 GR&\SB_s$sM`%GȦQS\7u&49'BzQ'dE4EU[YWL C8iv;ܔ`anilHvQqqHjg-n,βHҷEB/lf=@rqoFp9EM"n,.(.˟:)X7lh!uFnQdLOɢ]4Ђ1fVY7D`|ƺf/s$ۯq1:,)XdWd MS&YFwŗNgo@QU`TUǐ&!Ms4Yd%{%# 10$Tߧ :Ĕg T>_<& |J a`)pde_[gNpeQ;Ta<~m3bֿpc#8:?q^I>Z(u wbƲ6gn2.fFSWbH&g}s7ݾvjlȓfЃQgSCtSC#(Yu݈0Fʛ<&Omm:v o>wNY{ӱ s퀸U#ٔHRrF|?nL&^Pژ!V I!!S,2Ez>uG~0Y)GaL[AwKaO 6KjF׼ͳJYK.ږKk3U,F&w/>rEr U A"yC[7H^<]مc)mѧb [csƭ2^_#V 9z.֨l-A@=s6q^?O  ͂RlQ,ax>vG_F?c"9$B`h Cz3Z -I{?PCw8Oj`(Pr@uNG_M1]04s{t7y7сdbXΉG?,Aw"'trduӒOu|biaْ&bɷ3hL?.ע$U0;E%UB^.dE^n.4_ڸfKLL)pD$NZ$M~jl^|3oI4q~??4a4e#sM9/n؄toG3gBm]CCOBj-"h#L;{txl]ƍ iagE&ѺFpq4[o1 tjF O 0ۘ8P\[X"?zlj%lwsvKmzv 01TRĕ{=la {9Nm EA&PAz6ibt+jˉBôa=w~cC>EGѴX ҚKGHZb"EYDbD# $k )X+mzzSb/zD?u<2ĢA]dfrl|SAvUUHOvct yPB| <$|Ktݗ@xI( X~j=/9Gz*Ι3O7*kIݸ (x Y! Vj fU =H=74$ba\UOxTOmO`l~iCmL59d,׫lO[X}j!-N \c#fJ$)M 2i Y =rDi6{+KIeb%dF!(Ya/lHÛ F5 _Zr,&P^|-xc\mPq}GDJߠq05)(_; t FB#g7h Q MWhvԆlb\R. Ҥ*ӏsg3)KH5 'muPTLiLACcU^Tžt]<*T*)r$Agm#m`̳KFΏGJ. 'AtF/FbCk|U&|];C1In%.«!kx51`t^+g}xp[pU^boI Ug MMEQ7P7cAmDүN"6esxAp0zB])w%[e%8=tN)xjK7<lmkrj]=&.㚬$Ԩb_)c'и " ĖPBvOnHc띭Zӡ: l_m}>\fqxex|</U0zSRBH.4 j%+sb䟘^ZƑHU w^/,k KaxR 5:Xl,مjJ%>tEa,rY|WaO1+JRuX=I\uuK9T=ZfpXM[9/:`j^GPuIʶv^6L?3lEN {`VC8+Wxb'*Ox N˞tyb$ĂxixxdkWS+=;vØD<nuJ#\|~FJ"3QQ1RFj9k]P|n!yZL,$\wqb^xBܕUW,κӨA1% #d NLL4uG56Bo0Q%d@GTx/ا ^5cAxP_\<Lp dtOKXɐƹ ;T讕?m am(, CrA@. :7jE\kHY Q}T;zL.}GUyQp`{mh-wVJUI7uU%p?Uo\\sieoV>ctBacmY@_UjP~K̪~g/L>:~ⲍ*aPP&Yf1B 5?^\a{Gh{Z72 cSS',Pmqr9H%J5OAI=p{nl:-eɋCCnGvry""Xj~D4,vygl083cAlZb{cSs N3 { &cU2^4+A'![ELhqҴ[fMԁE\3`_HSy!%k NL\(aۦ9* 2;ev^ÖP vU~ni^5_$",%1W?Fm-us2uncыN Prq-$p"!9xt]Lv5r6^M𚐰RWS'K"x*'( [EÈ: &9騕 5B,_kTo+v4|Sn rDgK:iK3P\H,ٸjՖ?jЦHyd,pc^gWlYQpk Lxx+PtpM-Le\~XtmU06X0+Ǐuҟ8 b I TIPy[7@nQ,¼l8z}4x ӂ!е2!Wk5 ds~Pbk]=YvkE9S(zr8ާ#%$\(ij؃ z`ʞ =UGcVLߤ[:o@80C6}*Ex< vWz ?˙ewl f*oSYiRDMCxOtХVN.DO"~T䫚)aҌ`q()+n ]8H ?.ak̗!p`y&| v2 &ck9_b88h:4c!@PHX~[Roֈe!G#gN` k˽wZ~+?ƜAyUuuX^ʌ3䢡YK'7O0f9:gUԄF{c u%WQ́/c*ޓ]ӹ`HoȞ9 f|lYT "kAH)4STPuwà 4wV,a.ܴ掰VXl}VCޱU|;_F9Ƞa"qet<8'.Ժm#F)])OʞkT @XO 4d܆!8F,t|uWU[z2iq䴇q@vbY:{bS$SL>))܂Ak˾:7tY )?rtO&l*lE|&i0@%K~q_*]Ȗ4UX ,ĆՓ"Ж[r&0BSv8ꅬ/Q_vOGnKe^pVȌ3VLM2[no/v pW™΃,qdº&|/uU6{!ͺ~t8h$RaV/H"2ԩ K (톊tgucLyTQA;e@Th|4P s}ׅQ3[j33a 'AЯ:^= D:',;ʡ{a-La>0@hN`Tps[,axy}ߡx5&D ʮ ,ƔXR=<Ӎ5O0Ƅ. &?SWAUژJqSj"0/׈Z̸FҞPeHk.gpC`G6tw'|| `^M!,ΈeF( ɍ.2q1hPLWsӇl7";9]5' 2n5eS 8lI Ϯ:ۦ!./,k{sK)v5dgXHf/jRT &: [ڣ@CC ‚^bbn#7P9/10r (8?8;= Gљn5im@fcw3ksR#挵~ - ,s MHh#}le <E~WuO8S.2DL!ocBhi/(r>xk/vYN7_JcIp1๺#!ܫN/fÿ@j~nF%AW75%7ă|3:].x0L:blO<^Pjat&fW=M# 틿MGh{ Y5a/N .g jSeNol˴q={[uA*,7L#ƾC#p!Q=V—Yd5aByoӵM.@m>Kѱ[#4@>:'z ֌Y>. 2`1{⪻ĺ:*$c퉗͈#(@ӏOqn-ϱş:WQl?3ăg&P 1yPLLA0_4/b_*N0txDzK |FOĿ .CibŒ9 Dm\(qӵUp?YScR) SRte}(QBKd-HjAf٫GvU6q$ԈY[p؂É\$ۙ!糁5Ң:k(טiKgwqМ|~^`ZD#/^ _WRAyRa)jЃ +v$ tmC)*&Z&hoHk)2XK ^x>cG"sj~^&/gh j6ekL}B],z C&2w+F5F6S~gmVWm֐ѾA+W0CuZQ),rgA~(S6ph SO|SQ5)R1«\#'4MyV.|IG)P1.w=պa!ȑ [al*juSۏvV⹷%)q$~! ( ;| ic8F!kT; R!пQ_w9t^w4"n@s-ZPR oP)8RHC1DM?+VͲn{wOvLт!A]b.2Ep,q1۟~H38.3< ?<~diL,`fhe;$z-JMQ˖lS"Qpcwhqs6FUxcLف\G]"/kz0dl늪CfU8+&E22<BXܨYv &ޖX =lϢ`o|]}XftɌ_-4[)"4̲#C%t(5f`ޕOUJ&ԫ>XhJ5\cb˜vi&Z%p5֐P ytZ-.5W,a,o@ڎa:ml4 ; ޢR"Y&8lkޜ+9p+R$yt2#?|VAԋD- <5wLGD΋1۠q`c$8L0z:ҶY Tq\JyoYrMr$>g͵ ޟ#P]fGN)J{bq@KnߣMwU(L%cI3v*Q/LA{I?d?l"1 > 2^AX~uXfbg7o@遝?՟?CB'Uވ!sa5,@Wgh\`rel !&Fw\-4pͱzuM[Y56 HjC%IolY.%GD XoIyR SÛ1^K2wNmwam_XOD{MIj6gdӬT Jx{\5vX1؟EG=̵q:SK:!Gk &/vAێ>cRBf|> ,YVDzxEБsߨk?3U-=8ȍ#݌P'rKeUѓb&!.YʺxXCR@%J Jy fʽ9CZa0kbʬ;s7taWN)}艋ڟRzFa=mEk@s:p RA;Tnv/ס%$O͚ 7!l ?FH9u}p 47?  b!p SHE%YO0]la2P`O#;ca+E1$pS[hRXԗ!C8:߱I' ǹtCKJtCJ؅ʄEa'mBģR|qH3ha8GF$bk ɸ dY:uu`7Ѐĭr$Q/v /^|f勛-S]<*z}XUR}<`]r-͈= b8%*I|_m] HH L &jD-.kFmdt}^i֪ ^mMc^)#;>dlUnonE;<C7fl))c~HHOOqi [4З@4`g5 JҞSSQ`r w>(s vs_YemZck;k3 e@K_&7ZБ}\ LbI_Xf,18,6QSUqɺ%\Z>(Qua l;7eRo{n]*bBoA-C1?{ջguENNzcv1F7d]?Wd)Hg 'JGi8yE vmH!@{n"PշbF;P~lyA%.-!sv Jֶo܍}ٖmyCfHAݭv rN[Ng2C;uJ_hk}qDhE*CzvO856`f:DCA]urExEHlh%%k*Y,DpP/iW f-%+kr!UBL m/Gs:@.7<=>!`pn*ϲ:,ikաMv \e _nP>7qEDp(brH!_0.Zy&z1 dFlv@xP f6QА!jRP)C;WDoV;e:%&2QnSrik ~mU@^!X=3)|.QTuFjg^kC^:c2FQZ.hB;#qzE%CA4ݚ؏tl|9ԟTUVhϱܪJ2b_qlH(%-M_Nu jRi;݇kp\'qixdop_S= 6AQk+{k$RuTgu܃iSV"\CotIqD`L(d޶M2PV}YEt- 5mfVs%!nh/kYl!nwBkJFn1M'悯☥1)j)[Lw!wa%IqsGԃbpzS qɐ{`>Ys[?kg쟋(A)c8|ϽEʶ!6Գew݊^9 ya۠ CKy^%|a ž-.Y|9- (E*UτIykY7l۴`_0 {lܘAC@T-eШ>ȓ3S0Ǖe- h;g\BSD6(7MKﺓ8- 4RF}-_2y_JuE 7x DiAPeA}hiҌ{=N jAUbFۀ@\@ٱ>`˄4i]/T#(WScĉNRY& uͷ:T[`wNPGWBA·161ԯ`,C#[plM+:Hv~bubI8~.֭4M:k*4$V ).K3Ajw+9J.( Yߠqkֽx\&rm}ƀa3 _; ?,Rdy%#r?6;R@p"F Yj:}ICF 1ȡ8wg+uKqgˬ xmvK$tL(w];naqoC*.=> c,@qf%X=8,leo)%О8jB/5ޠUv11E9/է{$ļ (o&HExV($Fja./&oqg$y4x;s,tyu 8a|uߪ;?`\ Ha)Gɫ gϥhˣ5Y[ɓ$ oCҎ A)">NFfc4kc"<(x,9 P"da}Y(CR (*O>z/R|#'5wSΊjB]ґx6_2'F^WNYr[L(OspX?ȧ쯎NAlf#n@XcoWұ3K #p8ܺ4*#t ƳhkrCEg1&\A.9Ly lSzrr~"v+Z͎S7:νW`i?q: xVR3 Vx`mM ;J=ؚو\Y)лe2˼Za+Q.$L P4y']JdzY?|.|S-@'d ok؅J͸M4I 7@d$nPɫ[Qsdw4F5q14񨼌ivL>džR);q62Cla! !S|;$BD7{DI'-7JLS>iЙM? ońǦ4D8Ɯv).̚Qۚ6QHI2=ps?QS{T,$KI* hL[v׺6Eʻ)DeW {Brr40Vh}D\=+,ҷf&DU#A M+@N@H۷PS<Q\H9-&i\E]z܂g0gZu3yݭ q#'rWZ=Op@\:'${_١dh߁A%m O.S `D@ewag]eY@Lxru2"W]×I \:NgDz`xV|+>Qgz \8:Ezv/JTg%܇lFը84/vj·ds^A'<"y̶pn,z\㦒|f|!Kݤn\է.d{([NBƯq*R2*R7IఇɜkfTgh'g;e٤/fn;t; Y|˧\J%eb<ީIb_VUݿ1ؚ6Q͓ pDR84TSMVNɟv o;lOvIG/e5f3fq~tKoA )j6 QTœLDj_7Q))R+лKJ=1;/P2n.,ԘTu,\vU\?C-;P)iV!ʁmek ]P/l}IPT ω ӳ"ӆ͈IT->,휈jЃK#VoT^6W l Fh|2W3"?Ulxh}_TX*T>~v<9֭-ڎÀV9?y-{㫥r]}{*>†}(WAxFtt?n놊s u@b/ ݰ4 3/g(niɽZ9b)|Z\Yx:v(v s?l/~uƣLv>-+̻~'B}:$ATᗆQ'Y0ŃQR7 حk,lHqXapJ @qbKMPcSAUXaA 2q[|(:bsX񪯚)d6avI٨B.E dUG{/Uj ݻ%7 >'I+ ގ۝e w(\R#Qa<7QAELg߯6=՟ܸ@Ajar4SJZfBg9&hzYN!X|cB2AOg-g_!Zx<^:8I&ʫ 9(9Y/sXMԤuߝ_`c78oyޮg4&B77Տk* i1=#!P ,6Y >!Mp̢_+m'za'`IݚEfVN.->%SF0&hLw&|5RR<|u:Ϝ;Aql.;}6 '; 'B2P߉oy Ȱke`Nbea>Dku.ׯJ!T^2yđ+L6M.XA'I9=|ܐ{>=zԵQR 5zynkose'|.8Ckj8"$nPnj6E _kѻzp I9wv>^9*M[eopb~7nݞyh`gO|O=jԬW}r5'C=Yb%oZ~})l-_䗣)ٺDo,<5ܤB9S4,˿$mԀyR,ڄqʼnq5[NpXCG̙{\iw.IڨޔD m }~ ٮgH.vp?E}H͞Vc[OI}OH-ykY1i-SdRW٥nQl,H6 E(PLۊėHOtw0{đΕ!;/29x|6 6;ip_qdmZviBlW%G 1 sܦkBȯx'O?bf/VX0 .jg5#=v /"v'S&w|uuHޯpC&ryx>b S-׼={!>1`ZZ~$\3=E-6a#{_AEHF0IH6O@DuR猩'gvF{hiƧǔ$ uU>*gB1J,&uٓztzTz}cq¢^Sc (ݡ='6/|ft؇9#5D;G"5f㑘3FaȕbGPꨅBKB?f#7AҖq'Z~M9I̼i-uKn,ՍkG/6u_bW9ZC*&A`=INhKf:X"*ց)8"Z^si|Eal̳5 cȽ_5 rK%H T$5SD>~OxCPm ͬ Er4SCVy=h?tuGջ,fX>R:DAg픁qdp˛Gx :f1#N`wPYDW^= g;BjtRA 4 HRxT`^%yڠpcSupV Y oB샓W1-;:/vLml #~Q(#A>ݘ'ޝb7sSjCK # 'a8DC1m+饿V# vG4,5i#G;A<ׇtY3fdPf#5ʦ'UH $d =yμ1Qry*sdW ;j4p8Zsz P( QlFrf) r{D8;CX1sKDґ(CPj{djfZ ~BSKhh[!_$ZeW0e}u$Q=yu1MIg1z ^TQ2뙅룘&f@8nv!n Ka*lSryGN;K% ԯ`ئQ-;։n-}ܣwNcS.Y\ٕ7MNLK" wW^O\)!,y)\(5S Z@K^[&j5mFLQk2S LGDbL/`NQ;UOTԾiH1&`?9C:jg W~O.QQ2825RǕ&>5ךFUD𚏋Α@PUg11 }T&&_U9 g,G-m1jP'lSqbqY?n?nW:ï6bȻ0iб}ɞ`NǀގmRK@VvQ!n#'%/Du=&1&Iޔ6_; PFSf(Tla+}pdaF( MM"~1tq?ꬮ_+lD)(LZ~@7Ma8o۩"RG;(5mFa^bJj_-N=k3{$ΉdP+׿s=/a du'Jg ?m3C?_+o)ɺz"ߗ*0gD90qp4ehԭP,b yOVUŻ^b3W&^E pv T71BD<5%@\T{%kh̓WiVZ32T :S Y_)ZmU #C֯mȄ[1 -BrjS8lt6e̿' #7 1aR6ifv(:6a-W.b8x&3ckqH=62&}VBMD c\Z]6G\ Iģ*e¤!mc _)urT69O`B̓%e-9rDjn-SVEQAU}D!8&R,(^#h6C7rI8q3 CICT˔άF\ke{~@$Ph%S_wMA2dW9˞,Zg/oj8^L1i,m TeNfGdUI\fxѴ6E^7U$Z偩)uerwYcc\Cy2Q{_]egį*ݛ8/F-)tPRa,fǻGWpG 41`h82˜vɁ6:`d&C~mv7713h=Q<Q6]O=Cg[5%hrހ EĔ4S$2DLk04z̺8L.n{.,$#06$ĘÊx"anM{hqGg1X~QeG\H5+1DY9h 5LE8t/\X@RMhxP*wv FL dʅpfF? 'SHMxH|.O^P&-{Z=-j}>Mv7``43' ҵ ootsYPqE oT@/>ϼ8bdsgHQD`jQ-X>ʢc`S_Dz'%)!#C_,_n9>3)䏁oLYբmGEADucx7=RTMTTN+_$d_J@Kb$C_N؆ithOxl\E)RjSPc8vKe%+15G'Rq\{ 誵/Ǚ޹Mnu,݂_-@*2S@Ma1/[[@Q χ;3K04OqG 5x%X/7ѭҿ.XfPL̦:=a:b6@YuC)<)8aXjtSN6ʞzʼ6I\>'j|kĆ_횔QqcsfF<6r K"̽154/] \e.Yf&?[R UiaH8)AmkN9[ u)N!"yoۣk#ݾJTF@?)l*""deY4h_s  cl6PrO 7ŸY($2 }ާuzб8>ks#(K}<*#}Hכk"^%pNzFK,^hrQ+Jh֖%#ڑ.,`u6tXgDs< D?mfxy ñ*?yj(DbC=XABY\ğXr{UXY-i4 Fj9bVkI!֖%. p! r 0C(4yFyO+H \SMAxS 1TC׳9jI JE-T4 S*uONMfվJNX6-ɫƲ_W+44#ƃ.)KZ^ KQ9_HDZ$ߗ( 8eOpUn(1DMѸr@Bi2|.6}ȏzaPU@6DX "[t[v'̽hTz墅-|Gr*-fT:1I$k~au՛7\ҦYXuF(4oxz~XwxjHuqG4u`ݼهYMk'5Nwٶ<|V+au¸%XgMO2. ;Oڂkr**3"%aNV6 3BֆXm02sa$$ %<-j:L Ìa9Pv+U8mB_!tfR3Y~B.P#x6%# <Ķ/1r<0Fs3'*&!J>d.Š^z*>}".^8_iFfYz}vw:wκ0chހCEZWGڪQ^E֍Lj:{Y lA̮%؀7^ZgM/?fҠ@#{9fC MQ"\LCtuIk5V{D`ߤQ Y "kLWq*-&l:  @b#p*N™-E *8IyD3$sʗJ%ٗ?)'݊2EMIaňFlu[_|b2Ii|d+YE`QOWh[ sQqlv\2 zg4 %;(]Wbtجl] ŏyx. z9oD@f@-CZvHn6*;Fzap0Tи5Y]Ro䣺h73o䋗w*nu&s7Z&n=:x1qd~)#FM sB(kϧ[p 0eA5(1oc7*n}*uLh޶\Cq ؞BxuZM LȱeCM%wc4%%X=ÞGЬ;*xaؘ~>y W#h`^@M C1+PwUnVUpYnǞ}0 p.-l^(LLs QƝS梟\_&;"ΈZIXT>RiGMD;`W)!xZ;N ,/7A+)iSrjf&XQYQAt}uOrPȜFV)rez(BO/ 0@>bqv9 lu5+ b77XR2Ծ`M\ #@6tK4LTwg& AGƗ36* LlrЫx!;xkmj٥7^fo ^έU-.aⱔ_STNwULk[)=$R( 󪋎qfdS>WچSzϊҡ_̷f~*s#'S~#VLB/6z3#J%RƴGe Q ܂=(}ܯ~3|fW%.)iiٷVRlB*>M5DP5zoWmQ3dM!őKsfRQV@DwݡX RiZۢwz ad&'\36Z2}%C# a'0:$ t%t2g$k]`7Z(um(3jEj}}zz@ .NwQ܋F 9澬#Ctإ?5.:]ʱzW"`1(N‹Ͳν'[ٯq;sgoi'N Fhl& ~"-c>xؔ2 2C2C4PtSeHBth,EP|B֝VoN9;y&55ާqZ=@Ȏ`UiTrH|UB8X^]AkX3OH_?S ă7a;S>Q^YHن[U>-BZs c qmEU`IG*un<2ӥL"R}aґh o5f ]g{ 8i@ T n]Czp[9`5ބ\Hu9e=o0u gAB;ald΁J: VOG6u2y>'f06_ jQ3$qaSn`m c p2:rٝr Vo|:'=6*"l >nA1A+](c8K:~THBE0oRVm5O{)}''h%1Cx1#5Fn[UG_835_Ҧ`d g@Afjsj3SzXïy I SEf%ʰ +L.ENLVύQks5 rch\<]ʕ# ݈R:ْ:Tm,?q{nVC-#=>G'ϥ{g{Yp.o>hVo 7Og]HӨF2-z `#_ +ȩ(mx=Aa.YlG,v\ iyvݽDM*9r$D zϘ5rdӱ;<:Ν{j)$ۃYm%ez4QfL1v,ՓYۺTitA ΢ha~SC>D0,~w"zybDh]^8[2(π2 li V `s--ˋCMCxL.1-cU\j {TJ{S3ʙՕlˆIzI,׽.#bϡY~߿VyF@"&֍iɃk\VIIiv$܃pU*AȖYE ty]i$tj}b(jXe8N"N;(^.C:Z!~_2h Rۘ0rSIs33A`4's"epF5QV6a3<*QR蝃x{-!&{U73Liw*CBp+"}Er$lL# 7FϦV΃\2[Z{>_9 %Ĝ IX'w v !}WmPf_OڄF})9 ) _x8-I/*" @oN;j0UK(V-e{ gm ؃rHL+ع#w UQֱXm|SX6 B{YRML?[~YE 30.1āsJLgjoC\3'€yхSgf{?=}W9S5+ViyGKXp6KbJ${kw;mr _=PhpBw+⋣]{35GQ)@u)H2IǃJ_q6_a[!~5LV2 9ŶbN &."'/I۴׆|bff5؂4Q[tj@tydzk<%8WVmx_4 hEe;is@뗮A }Mr҄>¸|<J wvS_b %5 qLx)# r a%ּAu32/^ l7PɧsNƅ|B=PSO Fd[5x73$YN/KjɩqωnZaH\!ՠ,/l*~, D6+ѴHyH[AADw5P{DV%6ZJI ֡Y[wR~0 3&xwQD^>HSSR@CwV AOX "ið.#]0l6C >WۜVeb֪n4O"zB5 %Sa0dq@(ē`[+쏇8 Jkpr 8<5e%Ʀ&pY2D֓QAnisZgAM[䳇m%X1dv@ۊ0䘥evs6ҧvG[!g9lSf;q L[ z=l:?dx%D-rd9H)/M)%gAM55s)GG+<"6؊gT©IvR,-^=M.M:z*ßAgXP-꠯0I]\-2$Zi!@#soI%~%| 'ŷ Ld YN:̃ /%kFiu[cuK׋ ӄo|T A)]![ɍ^FZ$n/Ry \"|D`p}/ddXeM=ֱ I2.nB@ƃjI/Ү;4AP};SX\>C$8h%{Pfc{2/BC7KF(ȨC\[5To#L\uU] \o!/HEGQ.vj+j{xuH&Hd,C(]IKUOVNkXiOأ2ஏaGQ "Y')aY0Y-h$8$@me%c3uzj*7Y% w]v8a XzR$O{?{\o?%R,h@sLi0rwE0Q2^pKf!~ߺ"u}S\l^T`lתx@=`?_?)Y` ~Lx7IVx|ڹv/>8(VӞ, eT'I')gJ UiRNt Ջh&a" 9J#0+5:D7uENS#jE #R!9T8aNH (80d3T9"q&/KK6 64 1~nEyqqZޥu\}WƭB ,sv fB.hVלfʟPnQ2Ou = sM\NZi]:6KQUx3Ik~)'}+2$ڔ| úc϶uJ*]vt(ӈEMj`~ueR$KdB=Նnc&fQO :gC3"F Һ(̏KjUo}3x$T `JH9\l} RґT#<> A䄝DK"yg%b#  N{l^KşpK9+2ݺ^1iҵ$_ u~ yrI/pޔ*0"l +/I7H5k{"AneӥGSRĨ@U9<՞ SڍO[ߣ+*.̏K'* [A*Y~vwY5%5|T$Ξڠ̕2W榔pl:yy ' ʓ* s=Vȼ0XrnH4PN{"Dam?͎>Qn9Gr\Ȣ-ϟX5 - eD yrEC-D<0<1x1ON]XrMJq#>8ОXMV8աRv FI+ǧz0\2 jgjBhOEXH\A¨9`~@bp^j;N˻*rgV7N4Ͱ΄L=;>nbwAlTwV^gZIX(N?[I/qHI2 #4 `v8~̹r_ X|i Z]?yxZڭ0F\C^1O(!YCTaրѬɼrƳ@E 0 rVbE!!=|̍쩡'qGaI>J| V&0lkS3&m]PU`&f&*%ӡBMm(kw)~_d&-з˩[@jM_K>1gXcv!بjAaֻ ݁gN9Cz 09jBy8!ҀtY9 {wlVǚ"Q " cK!bn_fRMڑ ÿP ?CĖC3K5wFX8Plρ~ݣzmzG}C}qlӒZFaYRWt~iP7$Koۋa |HGۼW IVFnAM7o*{he"kȅ ݎ-Qe' uC全M[,#\8Lg;[gBĜp5&Q)T3z_|C>n-34V5P3zr8T%}_T YAP7PsWIZ@($<<(vJeJ00aҟ^o崫Ƞ喼q[WS;D1dWG{ad.DޛUkê2KQ0.}ز^77a=rbx}_rcղ;W"n|%b$~4og)l[)K[JpѹV;봜<(Bo~^bƚ͈ VaW:C@\u 4~6Xg 5e/u=_9bqUpj_A-'Oݏ^9VٿmQlq4lvm"%umAv IKdJ'I kxaB fqg{1L)%B0^1DKYrcqSxRHu1DF UwQω'(+P f4VU65NYդPrjRR}+]ط Ō}xK&V>{4mh]2$Q5$sZQ+~w /V[qu&C,T&okLp %Mᑘש& ց(8:X`xqoL-wu>LQ/w&e|bx 6r&jR!7yhwt0:c b0$,hLi 9de5淔fC63޴GNi=c2 b3=p ~7':M'~1C_(W.FBw5V`>)w^mB8fxHRӟIsj0~[IkqTka0ns8vu4{*禼:z@;4 mA\ˌxK]SV( T͙HU^,K@-3.>i#syg~H+!КHfX몲t} ܶ_VRէc0_[s ˰\tFHTM̗~(}4|E9K 9QrMt5DzTr-/DIt(n@n>|AC]ph?updӊ 05uKNvlHυCow-wO -6 Hni:#7VA"m:>̽ImGF\BͯO@$x0%Fk &oruzS3vj*XNcJLpU ˟CcykGK5G=i t TzHnKUU!7\6Qd3:B_gG8H LI`]tf咇y 9I{J=glEvԿd1oZCh^BhI]pk/{!K:rMH6~\g ߕ>0Q2P2gxZi?"(orlV[ N!ǒK j+^Z]y|/)G>ּoo)"1'Na^BL}/-LFfARߣ 7s((-ŗn˝:N#P5ݨ)x|0ȏ`KO+%N*/P ; ]FqyLDUSq)2nBH8^7OX^ $helJ>B8be@ Tzhe.#ȪӢ8M~M? @gn:y G0$]!)=쓽yiޢٜ'Irփ}2DFۺr&˞j۲ I02޻O,lyVaym h,G3kT 9$sCB>'5h|)ef _YOI(W@- W_ιAOArF>N ?I c'(|4fX r}߉maW_T@8X-X%#QxaAq;<6'J^+6K旼& g[C{iL+2uUWJqc[apZ\e៺-XҸ B3" h4k :?.Jw~φk- `[J`~HF=SCΑi *د{N+}~tw)nGFg6фlb(0LXs=3E샔dEQ 0[v1N9_z;B@ϋHtv]T3`N@$\Vl_$Ī'-ՑuGH*ۊ7 3S\ž1Jgе;]v 8hll *.:>K$.]!E0G2z6LDDf|/A =q|%8. w-M{8\E[ `y_#H{UvY'^EɥGBs` Byk98_do9-u_I y>:I狊UggS e9CY4,R^ n.V` fBBY!QNZǞ!~v͗Ѫ6"N2xGnyU2 m C&x B"9s%W|Z%;Ko]]YցdcpUcHdd3Vp ṋPZ 3:\ oϑCb}M3Zs͂s^awc+%Y6vSŝi!Iloaݖa9]߰"+H$e@@N)(Uܫ޵ğ){4/&UnaHL>zͶ4U:]M4D:"E?`ABŪfYh,A:Ш;e߱\ZQùl36PEn𒫀ƪbC,%l9T/DR-Qf7ʞOu+.TdE"hi+WEQ Yڀakh'TI "+/?s]: &0!ҋTD{X.,*w0xt~ؚqwPOcD+bVv4+P6uadSLb{2\|h mP5^{^Qhp}Q>-M\fj_zvd!g'Sj:TPy SΆ`@"1Yxs~mW)ZbҎ{fDPA^H_qeJHg@c`ѡ&Z<ή߶AV.gXdf ʣNfjHԺ)~s|JdL^!m ?Jܲ#{YԈ[MML"Tu$@X1B&=>* i zw)(hiMIRՠҭUWߠXO evd$bnWA ͢Q;\$gG*I`MRK3U#=v5yݫU lOAU@5"3C wFG#lǵE$k+Վ+[U@V+muPYz@n*簶뤂Qj}6UbR B]aZ"\O>s4{k\K5i˨X~9 rV `)c'm->7+Hv8WmauЖK5X@5oWjy \LV/EtIb-^cIJj5D VwAS`8&@,zNl͚ˌMdp|@_&Ȏ7XFPU'X6z6=Q. Pdm}2l3MQ5$ v%j"NܙK0y#ᘎ1[wB&4%Ub3ƈsɗF!7K|h#I}0K+,{ի:ԥj^g~g FIR"- ;O7I_0I;,&q[d4qo䈎UʪAU|^x@e1o]B)Y= Kf;|]Uȃ/Wd4_^YRJH2h"W1`EtC7Lh.UIw s-Ts &R0vAY%#9^K#g/n)H?ƋhVv?6YVwOD*vIŹZ\eDk:Y] ؠz=l-=`Xۨ ̀d>t)c6t[he9 i/[Mtw]%aT[3JR*2".]l#'L$+~Η-)1V 4_ܙo.ᩇc\tYy yx>|7Uϧϱ e ȀM^u)L(C& ,U9%{uLx%󊝷J(X 2~o$9?7ېQf%(NerBD%82f첑ڳQ#NOw'a'&|] 駄P=K$<96<ǝ/FmH)c;>p2Y`mI!B'g¸0d.DuW*Ζ|'fҹP.1U6 7X$5 cii7pn8FW^yoGtr+Fݪ^?BNz؞`ʩafbEi҇z*it~t*Q?i?g seifk桵y+i﫧j=Q {&K2IQf S[;:qVW}ͼEzLJFQlE2j)# b 7 GΞ0Aӊέ[kLS(򹏊t՚ QAP`LjhJ^uv''Iw"ʋ8C! jZM(u2E-S&Q#VbQ1^E,Ną9mx"k\?sYC!T@`6:_'`бmM\+ ֱޫs΃y0;IR 8=smm?n  Jmp cWܺ<(I$~.#xН>؀m2y;XNg1dOJkA,hLfDbS _9BĢmKIt '!QqjHDHp.PcMuЁn[$7ke+;!v u:Jȷ l5fFT?}NDau v^ tB%"xc-N*Gnص @N3FC $'p)n27w xb}ۣq^AMy=jI4ނuDJsY&; Q~$O%VCӋ?L!<J83#Oԣr9v?D//OvRH^KؖQ9{G -;)@ u;HdwF43IsÖ_೐WgiUoh0*IGu~<_lp9M 7^ !Cb^h<[FxmQ?鈃zXcMhIN1(X>q^sl&a}u48>>gܳMO{A0Ku쵡~Hc#@H0-)Yj$᧹\Cٲ cCF JL庩sϓ6| "rd.쏈9KaPB`3/;?)+Iɗ/䟞(+W ؕkGznVC2> ʅU/p·ҖxҤ=Q8@Ėt_hՒ ix9?6׌Ԯpȱ+>191&墈=Φ+nG'PDB[QBT6{؜ҋe.Ӈc`&=āB'UM;97ӘK {x0,%Cen-t}Wv 9vild\f*۹-Ҵ@`7EGXR*um”=  lHӗF9C`&Y4בU w{p:pHN,7o/ERϊVO[bբjh[«яM,FՇϠ_QǮW^l$)[K9wJIh"UaCxgSXUԑXSWQR. -i GeR,@z^w3kVo !MUrc,1 iB~ 1GL ۵5g1r΁LųHϽ݄J8bd, uAmR1u $*Xeq4 9P aok2$f`-ꉢ |zho .c~v$|$ջi/E\k*ӫS/Ϳ|d _d}mVżs-z^bT9˱PWX(2ڃ;q&Խ K#؞4Z,OK8M `Jeo+S|N}!~ު>$)Fz 4E9eUMwtMu/',2&4D~ 3!tα3ŮL4g/T' $lS*F2M$#˘),i+upDJ9&8? IqfȠ}s4pVI`UD\8e^wVǹ`WG+2pNz.PУB|KDlc6 E?®2;*bUbd9GbTXH@MҲ@Psi pŲ- ?"*Jń.E^n=BL"cU&S릗`2%OY,+TPe8zE^j9B-:R\`kSB<2 WiPjgpɀ \D ~A L̛fhk2. 7 _K D'F[~-a;rg<gw3"ztA'ߒc1ĈO-x'K$˹LuʌN#Ëu/ڬ )2!%GjeY@ q# X:J> zPʕ9 2O@uɵ0ZL O>TqP_IcKͲ"u_g`*{ҥ1n>6Է6rA8^'lQ})_G Yb%H>{cH I2cE%~%X ,CqO?t -< ]ۛK\<Qy3i\ pìo9"Ė1]J3.f_!KM@L^Yj$ WivUDM6B8uG]kt$:nջ9guy]]:b!*P/ 4 $zr6r A a5hձC$xԳT6+i?yЕ@ʼĈyٴY>#b#[aq,othH&nӘ='dfs(WcP&>аS#i(@"tBV]IV&G 4BxM6ݟ!i#]9!%BCꥱ%v|#))3qbުk3ĮNttvQF],lDFZ|Q)]bmp1F>Os=߂jKrp&ZW4spz!HV[1tJu86X#*;D5.0hG;]!4ӤF8< N?AM(CfrG;sK-+ʝÓDS\Y/dR&uֶκs7^ML`C!k"Q!30ʚ() a(`2>'6xZE?4[X 10" =-ѹUɞ5,7R %J߶,fmQ~]{Kɴ_ UVX~bdwh6*e)T+ޚy\6} LP{^CQokq bJ'|/eniL*(b{/<ܑ 60?lCӶ)FdWQ'|L&fb%pQeHIvA|ܫX!\%߰:W8)P'G.G6B5>NhP}džݸsZWAwsrUNS~OHŝ\cE{NB]N)vˠp],~̽~#\<8li fAE|pCjo9W+p ,[b0Iqaǝ/QyǛ1&^$ɇҪe:dfcd=!_U9U7ܫ$`=ō I­TXΜ{9P4)ա^_7Ń^ouKs.85P+dbaguFL 4QSŧ!kOA-rey )mSW&> y겏zMM'%Rpd7RSJD砍baV|;ݺ#Ҧ9|[D =qjfF$8 us|Fső=ВQ+! TXU6 6Bz2G!Tey♳T#Ob%Ъ  _ڊBx&@V)cIH2̋L瑎HK2' QYdF%p WTEW %T9}ڮyGwh r%jIpA<$HVr٧ʔBHc(cЁ%Ԋ~)i,}urwct-{ɯR+[.>@٫;7vM*D?p&+m1MZ>ꔷq7/XEy5ѨJd ;.$w#u?KUg3`rgͤ0&v69/.-F#F\LRYiRRh/d~e!r`7= <d9/>z3=Sa&_}nV!SY$`sk9 @mN!^7#V`9Aˊfgz=BRgUV> ek )2w+M)( w8檄Ryq~Ӓݒl= y 93Ǚu!ER^Jzk蹏Ks%zʩBywȯm"/ۋ46۶7#c,Ɉ-uVʔ ac/H@-TK u*)Ů˙C-fTol)2 LAGE(L$50k:2$->rß v`ٲ0n7 );bo5Qk;#LP PA&K 0TTK%3J^ WWJ)[YofƬ?[ T͌U~! ᧷ap8 =NQpW-x}?:6)\7U<\-\9$M6G+Ax;pmK}P$n}.NSm*5?PGaWI]RCen7ICT<2,$GL]5[E7 KPO@j\2&|~<_+E*J7A.Qi5XA_< ;剶 "%js,%IƝ+Ĕoj;ϧAەҴWzqS*%1dRCMl߾t5Qr`v~ְNnqt?:5^Wۜj̈Y_P8sPP6,g͚"CU\x@Iԥ%n!K?c8N}`eVT?;X80N~`(]_fJʽ؋@i\"AN_fh-sZ1Φο{`1Fi >WBbcznlKm&2tr=+.󮥂;VQED]VleL~o[Z6; Km_Iߪgc0%C3&, &^$I8s;Vx6y ( Vtܨӂ#{+̘jﲸKPO" RraU"g4pOT_K(0JS6Ѹzg:g:eVeM@aktzH'4},ye`[oFg؁虤-#09C@^G4^u+.7gN< D/.x/nsywM'zT买O9 ʣ׻sJ%e8?xed 7솒 sT2Bf_Ƶ[JhK^nZEF5# E0䃡 j KVMӫ4=~xNβW4z&9n& mG@Q X w2# MLg̮9.NCUWuWnm8ƅCsI.0=܄\7Ct.1e\n`_hc@smuF`"-`þ7rCth>%"9xa/sJ1~Nn20K?.,nd)RChcEe$\&Y \KڭdY4s;y7QGѻ%D+q[}C+WCj_d۞f'(B\'R&B,>(wv޺,PFb*\[]f s?A`i_y f4P-gS& @#"݂KԒ53QY cIL,ԁ|,t飾 &~?UNJ~ŽYߢ֍y,&`aAxBe_`otRa k2cv:( Ȋ̗S%ilE/W$Meg_Z+]2ՇvuɮFts*z44w?H\VfX]0o =J4@₋=v w:(d  DA;)č;DvLJ$3oЎkx(k )n9HD {;BnmX_kЮ`T}% Tw ypr@^QbbOS3|:~KG6QLP1:謙pvy(<BLX.pcۆBQ[:fjba[S-0rHd~ǁf\f,i~2*/jLQn?]6?IkgB\02xi&=dY ]2DfqXI,v[KBomEO+z#F>&*om<FXAs Bsqc,4 'p"6#"9d!e5$SO*yxu jDD/]Yip@8:ɈMADRb~VD o\2KUs_''CTPE,p\WZQ>֡DRl} UKf d|6t,izٺ M)֍ꘞRL*:@_^]BIğh!|:#VZrKa,(g}Y>MmN;* Ujp%Cm(@[kHDR&|n?Az<?y@It& Q X[L<ݾ:~2u ˑhy5-mdDsW3<ੰtD8oY-8Y9!1P#=o#Rhc.ʭD#Oŝ|"as3Ot뾊A*ݳu1TO~RC51׶9+~wemE)pS1uZ#YE$z"H7n /_ʨb/ ~ N&q5hk]:́>xP:4aYUkQ j>af27t}U~BI,Ȗ-;M^^3]gc뼯z\j$錒MEM6О`-$0DTTs>0' b2 ) aJO\Px4nGVI,q+u-z:k[^zFP3 "5x ʨ)A]?Ǡcla`g/L oݞz".߼|/yH7P5)~M$n^ T{lF >q;@Pi% ̘MvŒYMg7Y1D5Ob$({=طTGM%.>d7znPWݱ&a"Ac=,}V nS22ksQveT䃮P־:%uo(*3DdϴXѭku;;p0ϖEvTo]m4q6$ aC(Bb`<!pGI'?nCyR0$+.ic&]yƹAJXKUJ$$T, 7*~+nQ%0!'/: ^σn7T}oЀ̈3ܪ~ާ R"D8 * ]VdZl.*@t @p_{P-7K?#4 i| A  qlj=&/ {}*E00=ݑSW@K /{˒uB(h駣+קdòTuU';p^1m!<|{ho +9mWA$xeIjji/kr7|&C/yW*qX#: 7 _RsU Y9'(RUO|M3gubO5ϖsJd7UE9RH&qvH%ePA,Lj>JƦ,gma6{ae=Dek{PBPmdq1 .!{rwu^pp'Aa!~@$f.v-&^xc%|[޾d/FgKc 04"i>)'1$ܴ/~zAާů~8Q5LkY4Q k߼:h٭+J-r?k *l m7k&*/٫E\}9TrDnov{ժ)Y\pf7׀j7pmf8Vt^qޱJF &8WER-!YAB~F nռY$Kptp烻IC\4~s=B<ԫV[ [?]|/r~:sM {ϣj =u@NzpsQhe'_A'#[`]5IzOtǛ=s̫mӼ<-p0>Z ޏGQBbӻHIzX)]u예FRuy;X\ h v ޙ)ήX,Jj",XyJf5KAp6*:1Lm>L<F*(@i3M 4wY‹ ܱ*X{/q(ǐm ˼dLo$ cU7s!*kVB_Gc/^Q{-R4Q?NH m%4 |k/uD-X `ׁmAgUMr QDFSFoBq(b,"i|IͱH 9/%Y<!+C3X71^ 03}.oAtkodќ 1.I߅j?7 *i'ϴ҃p/iZv0(Ӱ" Gے٤QuU?%tU0 0ݚM=FSC0NlKD~Nɼt^Ƣn_x޴'~E+Hڼo=M?{z 00&ifA;q-Ƶ=j#Wє:\_´G]Qs[R8272O[sƩb>e.kswZj,o^QR]ƾA?A9|~po N2Vn<M=EP|AI Wm}/uBo-~y?KI]603nPZ3CfLtgwx4 '@t@9ZJ\8'NnߺoĠyK\Zj`Ǻ- q9PXo\4@ j~ XXiN>kRR>_`ɦ.*|馩5WP"7~Z×ed.+0tsX":;s MM+e/`o [D] j:󒟲')UzAiQa[ ewxm.?k!.GoC_ ԟW-*FyabP'=wVX;^ ꓓ@4/AGE,,A߰Vq1]f'H^2 .fPK1N+o*1ZSqafF-PzaKtƈ\X-MĔ>dbaORW]xߦ?Q`Yuj[D<D"-gхĶ\X=l=UHLةX {5!f-fqfZ_P3[ 4N|NVFT-0VsI*+S }[Y0jImΠ3a-jj*NRuGM,@2!#tx2}ytk;@qTԟ]\ ;ljrjIc`e;ZxOob|t#v]wS⠲d"Wrs:eVZ'UzD |Nay=gE[9e7 bZCNCdgSc`tWm%k`  i=uQmxrSC3]_]m[.d :: SRr\?SX :d6'In%N$t5Fz>[7OK䏇[l*h/7R"QNY)'-bB,.1FB h9DXjRe{wY s/% #<p\PIUp`5A.!{;Nǫwz5(8D F/WjNѥ&`^vP23kue)qat[wHT*)dBW)%=qq^+(zУUKF7""?b,Qߘ +*x{ ٲcx6E.{c`1ƫ2׮S?_9){,UNf8p}&7]7 U HఇL͉2Ѱ*IBߐǂyb㕴ZL%("~"` [kc?w.+^RB\;Ees`<;H"twj+,WR'jj:>ֿٖE^a",H揑J{Yv%Y5S[U\A^sBv$F@kV(^y,즌`# @Dww+{Ii ;I㹇<)mzZs}(禣'︙d ?&úg1;xƳ'slbU Q5.T;y+= QZ-bxݷ$%1.wڧQOK{/}~Fkդz!5h@A U0HpwyͦH[D !1ꈝyw*R$C>q ~k^ ߶e3>`DhE4&3v%\Bg XWeu=OZ ۸÷UǑx'V-kœ.piEg1rVK aGښMUn0D{4e PdzdIsuU䒔1 2퐟!퇅ákx@$4&=) $-\Z"47/ (vW.˹X - O}o}`*6y]_?^r: /J6HB ֓iLRL@m7^geiggaw<_Ea i论YE<@!l&Lo4 2{޽&guL6U!iK;-='yGLZznGCiyM:(cmٹztZS}e ZȽ HY@溦.{ `DnF(!4^%qI^ž|@.0`t`0oAax s3JUvKVTk۽46\gTjDXkāk諪%M !mHRPkFs[M /uZ'RbG;0%iB(Hg@w\(nkgs'Z!$JU׏y؄/MwXGm35zalqqDaWMwn>֧.ߞPjm鮌=<5 )y#S?9J6w [.gsa9Kp3r ^`cQdO*5fxly>JPb1V6 iUv5u\ltzKK>.r֖ݸL-Ǣc _Vbt]!9oPn$2XK)')9ݻYᎵ >-d?8I^m WLAQ$/#̦ױ E*+$6DZhqozGVcC&܈=P]em62K0 <_rLl<'Z#^͂WADf;sVU=gWO`ejTvV}=4y$,*43)#{FAKpɰeM=M^] oEoU Z|}F*D+w@ҏXZi' 6_A,ak) զbʛ푔%#35jVlb@5<2Zآκ}Cd`fañ[jMGPUy; JNJ6oLgOjH lhJ@d"#HxX- ͏RʓQ{_kvh+Fhb7@ КɶȚ$nFA,*FJ")8QFRnsohR@$Vu7_3Kutk7m5gyaپ垡=ՋslGLuz.$mOX(ïyVxž}fbl偬- ~*J5?q'|Q/5Q γxEòKJ]] X huJΪ66nt/5eF& r4Ym gP=DO+:Ur4ț L+l[|A.66Y; jhLq[R<%9䘿uCwHA>uQ x!r:b;# Kz =UNph,Fze7C1G$Ne'YDgSl#ijW ſUֹ)}5Qg5T?0H 5GD9*DVmNxrfmeP*y?=vZ{xןv;Sg;=L5¹&,02kCKf%̝4:.NĈ@ X?hKGR7~>[[R~fI&'* /@. l$Mˆ[>&<@n&6s#mJ+huzl yVR'?YکNz@镫$>5&d}rj0SuYL8Wk7\(jƩ1F;ȥA+&?JDVE"Vv卑֏|:fG.nJ8EڍWu6I ͅ`'ؓ1~g73YFя'l'?‹o4_MEņwLrjCC^!p¡J>;kI u 8+I˜6'xvuUy)LchL?Nja=Z޾O+a6wq32C P0WUUdr]aN|P@/¬dz77$[U7L5!`kS s/A -@ƾx\j|7f YICI;S'b$o0y2"sjfچ)~&?eߣ`z0ܢ z@2M'ix)?DSQ{^7qdLokѺ__">d3IX#7''B<*;̵D;&q,5Q3xRshUa*vgEۖ>EF;6SbBҽ;OK^)xKӐ)ʫ15mf%L7tX$kQT -_}& *Yr Sb0e^?g ՚7KAlh]r};ㅸ898o.pIАlpzر߶r&){5fn$k΁~<+AyjD28dd!SEY7K@l((wm*,=J~ݮ}&SǓTV* 1x71ƿR.b/mO[} (.ˋ5wPYgmҊ "oшbPഏBYY&In+ؚ,b^,T~V':ȴf8APr՛?)g8#yN}rvc&2Ͼ8>BgevVĖ+d&,8ܘwS0髊?~LtxiĠo(J~Ll)nJ7$O$8|]/C@w_$i(`Xf#pXڢ:4U5W$`eT3p*Vzx\V #ΈLD's4٢q/-Y;/Z\? )E#o(~9>(߭bj~/'!rib Vo.rB 1wTQ<[.£ б:&fnD4vazjʘ@x.dZ]VDQT/IR;c]Τ3H-z͸Jn|ѵ2c/;sLּ5ݭ:lWV}^CSJ7:ɳ<}b<.Z°St-=~њ`%`ΨgcL`=pS0;z"U #nx7fy0̓thE{ ĥ3'`>z|5S o?3^a ^}cު nxI;nsb2֠7Y?ȧm^2e l{֤s-KB)5Zf5BHjvLV%50x{{Q3y Uᄻc{H ~Wn٪0A} . "j_)y8I<7i䑋ORdcE9_p={a]K5+qx1sFzڎ6∖@pnmƩ_C:aꍺW6$Ƞ넿&NF3:H]'iL]LqKRj ̄4|SF ͢$WŠߦ7w硷pÐqp~v yGƷy 3٠sw'Bpn0nYd=whuňQUW_ Oq,}qgZ 3>2*lz,٨ &aW,̥Ka2L=:*/ƶٚz7Dͭyc?LTgtkTCB~3o)F"^4zH/^n6|yAs>k)ʒ_ o`%,Qjn,-B`QQHm$+ޘkk$a~OiOT,B'UחA[u:]1[$\5xGz≌P*ś |9H36lQbw..Nr;Y4r'vR :B-bնNG`gR_uK"w(hA*םS{RZz ?ՈaƨP9ܜ>R.-hSk{\-M.oRON*T 7 D=u<*~۞a&X-%w~HXJILr pNµ1$ f+ _Z}Wt9P.G*➟ 50EtRC9x݉]j,,=A*T=r{|(rJˏ!9X&`?OIY YPV[9!гO!_T 1lRgAo0"2'>A]֌Ua1)"7z̬' 3*N|Y'Jɼ RevJvk-IYPYcw%uG\?2MYy&Ƭwc SQ2]Oak$GuP%hl+=}m3(Gِazb &zB•BKuLRA̩` 6Ciw⩤k_ͮ,bk嶗9` 2"wٮCdKt= ̂1 KlHLv-مgCdd dRϦC+(v ThIs53~罻% gVEe]{K[rSTk]֗J[AY7rǣWM;35XVO+wV}|m @v,U4Viʮۧ+e^j26*w_2f>k7@i'V#ˊ; yi0Ɓrl*Bk3+Xeo-GS4acxWGX#;C>Y_i/EkS7_.qkIT=ykzcaw, aqJdߔ'3Waça?xj8$!#PfEl\8B!DLv2e&=[{{<$ e"D=b |]˕'rxR\Ϛᴘoy?T*-o f`'0:7OЪ1}#n 렂s!5^2JLGZd%dh  'B(NTŐUd)EN.I1/,sqBno?iތbM0K"s/ )kjnb#R8`1vv%#~PS׺7V^Y<=rSz&d>Ay-l\,K`n5?O?ٗ.Ocz" WG9PW) D3fU wm0Xo.D1s [ bwJWo ˨e$2%t^KqB/;U@!Yt }½xZ-<Z6#,6THV{/Fn_rʫJR \ݱՖh9={M%Suwi+6ȷv]BC#KM\ q)"y5u/de·M)f!b3eTפG=%Y\]@ pLUQ/A``Āi(l;TQW&s~1(Jܖ)gsWV BK\DJI7?ĆYu!3o< 0C,Tu_lO'@3ŘpzRʏSndEg0 񝺷eYn$#0% c*G n7醯[AIhAŝ!),SB?k䟓m`Xr2.9Jx)?2A3c3gTzuT-ܷzd7 DhGOzBgYG MvtۛbGسlf5|B8-K|P+cap:DU(N|] :YhH'n%#:Q늗4Pv5f1g"tB90  *)& }k؉ e i|'/=,'񘽴?I A~رq:pNcy]O&bP\?ʩk{ݖ <$Kjwφ6ņv\'O@'c/<mq|C0Ђxb;4(؏'/_lD=3FֶOE'm%24Q"fENy]sN2) 0 T 1lvlxweX-R4C?fHIw^G O/͞D%Gy}hWWDz@:lc5qk ݙ<HTA`Éǒδ~3{I+_ex-WCqM|H̀f 6"=ѫGWE\-|Fz}c\hѹ2s\@_JR b%Y a"&:I>L*fs Y8X`F{ﴑ~}CL8leiNޓMƆb,m²«ĝ8 =ut~if&͹`14uyŵbߋ4XpBӨU="ݰgg(0k;ͤ“q 5Sܪt@0ʌُb $K"/!y-;%' ;ЂYGs1Wf-?d 9g C%Fa<sïTM u-$= E&yu;|K/bؓm'Y`XtP0UMD;~#a~Z["/YıЭ 9!1ŵ_dhD>幬 _x vc>e ͈`/V0%::ʴ5C ~&V)d -NG[ yu[ Vp^ uPXv32 /DhNfӿI0]SL$؀+88yN2lj03;z)kw7[  Q r?'>EGZKkY\66\ꏽ-{<cz~J.8/t>s;\QUn4 !"5.dT1CcAry! &O(rLEB-sۡwPK_NMg+`m :}uH. | Ųx{~AaXu/,=N #5Cǐs`\ϞVW?FJ8a[uj$P %PJp<g-yq'6 d뫑ض(&߈fk| yRu[qi6R `K9 ㅸ%\`qg9/ v@/tм:(1>Sh/ȵI0ϐϮO^ߞ6n`TC3(*#VyׇF؆)v^y2X:*˃2b[lE[XVT(wZ;i+й_MJۊͳ`XƳ3drc$L4*=uѐ#{~K VgQ OpFzdj_-G棾zՄ=o)Sa:qK jU};7 %n0h{Or @eL{%W]8I`}(CLK5rנ^~Hٴ"r0jgB [Kg8W#, ,<>LQ:OpQXGSbB8%JxrP6J= cxLR"5$]vH)cJ;_VyDc~r3V+r S[3cyt\=ܪPIDN8P1ԣhOgRzMػوķY deC3 gRJnLr+MeU$>wM؝=(;t# w!/r6trY5a.Ɨ~zpc*k)0]\N xSJ"r㻂1NC)YXuIHLH3=Nx!9t/̀ IHsؖJl"cW&DfK1DzY` ֵ=Z,[ngQR3f&OiY٨V Һ:4sLP ?ءAڏ'lg2Q'%s})BŃǑka3=?V 777?NPnAa\WdjH'|o,Զb (q9yjjM3K+W\F#^1f2DI1{*0F~n&Fn<"HnY;:P`_h旝+{nj5f?s%MYq4HMDl;pgM Ae7>Ohǒ_quLR ycEfTsOT2j2D4S< Z-V+3P\ebM}^NNw8v<2D*kpe^hi?D@OiVu G,<66D_!U2讑- uB_]ޏjEV4(XRR랔g ɘ,"9I@Xd owD:rVi˝9:~V 6@0#Bc}IKec5BieP8D %.Yz- i-+4Hdɛ'`ʒ[e-SO!(p2ÃL6JKWuiĴ5228Kvl $ׄgRԡ@O^VR ёgĴL T$)Wc̛} 2B+ Z{mPdc*[xT+=,Vyof$qCLC-`am7VtUS;+Na.6B}h*n 64d_~hXf( [.̷jktUA9޽rax!} @Ta}m|X#Z1'Zʑ'ml٨IKNrs K"ڜ,Pٔƕ`FU Ff6A(f% Z݉rѪ: ^T!o!SfkފFzRzyZy;w~n^sUcq-t]l*M]#5q+4(ԨY62tfm>#2Ct0?ER^?fP'rZ9@jEh+K0:!fц'&A6Aҙ (WH`܍I} |݊w:mLAG28j_I`֠K\P9R|RK @+i:K*QaZs4[MR?8l\2!R37D nW"vJ~c^rQ *faގ3pjPh'35ـ Y&2Jyé gbBIlxٶ0(1F̛eA @8ORSanS0r4ooӃuZ *e>z2GF޼ 3 (F;Ɯ()ڎ1[˗xX9Rrg>03&c.rDŽ{$k'=Bxޠ= H6A f*B VOsǎ]$o-iDkмV*`^h#g7d}[{, C;tUҳϾfb\ffQ`V+ҥSPžX5r꿉Jy^Cp* p0`o3TF@eB R8k]dNaq `ۮŷHv)yOCTO LكAVIG Ʒw+CU=]{;}];UAmMwIm^9__ob:XB\4ɦ;C,Q6h@bꪢ m8Y*}h2E}ϔ/ͨ;Z|KG**asl%Hy/pƳ0R ҆M$⨀,}z1;@2 M4].+s*Nl$*;s)qƝŲnƆv"A ]j`^H7_VS5$ah3+ۿ9)xge?f*` C+sH>#ṢїB1݃Êf=ǐyvB+aߟwO6^Ltk3+X o!@Zu0%(pixO Gd" ֛}Q[d… d^ƺ;Af䟺[w7_TnIE|EBR$U[7=krFbd0#1BJkg;\>C;8慣Er񙿬K$ &w}[R"3cC]n#Z@PӫZ[F_E`e`A#_!ӒYgO^Wc^ JIߓ `};D -k4Ȥb/|1;͠G F}CVa۴yE#zq8]g=X$34Tcf,I0j'4 phoӞ?\; 7AyʮŸLE[M~Acd.2D>\0 dn1v0$g!D&Q浹p# ͿJ>iv! ũ'Y4B& -'hH&؇nrΆޝc'v:<)qҔ[#'T5+H+Ë^utKe~7۶O<:hW}28Ì?l4ef _IqSGhJWQ'a_N h#ԿXKf \Ly!6I,'YIdnl4/|YTU?}=L^oȎŴFxa4 >1~x`5.pQjg~i IW^$^`[Dx@y¥[ZS OA#(5Je[txwy/]uO9j^aP+PO_dFpJr~$,pJ Qہ&n?kuk'߷oXk|Q2)b6?(#v>2+ ʃ_*R.aR2νK8]q%\_oY KYiQ Ɋjg㤖PGz*DyƬΛĊicnJ*?|[Z .DT@@QV B$pN7iP$j˗avvb`(SC<D9pAjx ٔ\7&7/:㾞1Á'K>M-(edw#3OũjWP,_h}!{e{L{ zϓ 5Bz^-"]YAsY# 1_sگԘʮChN; S7V0HAE'bÊ~A@W&ڳNJ*,gf?pH{P.*;4~o-5saLrg8F/O kBtA5(g(Oaysft)'{8JgPB1L,{hA#תJ> UymK u1  'AF,.bw#9Peqɂ5nVG!/8nA;rC恞]Տc,?7$сOԍ:pcebO=hp*E b"ՍT~%DeMŲIL'O(@ Y85OI@JoMmn^grE(O6D2:i5G;; YxntARgrDjF8.wr9C_Cw=~o(T,b--BplxF[";>*C*gٵ ICnjL{#4- 7-DH7ԨlZ0ܕ=[" ǐGL",*b ;S |n%9֚˼Izbze !+`4[KQH|sfUȉ[|m'OR[C1쓢ǣ>9txʂJ{S%|@6% sA %< ;5 !>1BV[c ~0LA}lfKסT=398w,:H_Wz&4:) :Jpc_)H-ߎTt\1?ڡޓ/yJv9 P ym.;bt" cjDoM,p+fp8@]_5 gS, +Աvr7~:iz_- oRdH<5ڪ2Z,,KFmeY~6pT' > :B_Fz8]tC+/0y[j,<-G%so1쵍hNħO~r%Kb)q3pF#^PHS*$""Qn.9N2]0lb)+V aZ?+;  |"o6װwG Rbz`wH˲X~H#P!y;^}S.ӗ~3 p`($y'4@P/VO#)$⓫4eXlciq8F]vt/ƙI~j8:n#J sQg|vЌPQ!ETIAي8n_Ħ67TMɺ@{ֽ93;a .=%oһ'HvCVB,JD/@APu lk‡Y^n[ ~Q ;&+\Mk#x넫q:]ljn!^fu <6}!"?R% /j$W9KC`F-Byj:~8Rm;$W#@cx5@UV2h7+IFk$2sz-*/ON`6H8rP: {9PgMC }= X׬\Baq30< D6W=}7êIsg0|Ai%Vmk@'ڨKz^ޕXa#D@nOb^uѱEA^LboScRG?Hڧc fY5tqķBr{fʧeڃTBln^F n"fV9Ƚ8!XV1ʽ Fl~M\u.4[1) Xu8&,HZ䣑fl_mF&#fØW @vtjo^ U`>s ҿ`AҬӗ~XU@Y)AOJ'i?!CBMy$Ҩ8ipn x6n~'7-aӰ/J`ڏ^`F`Ֆ-/bMQPUJ=!+F(Ro63O8;h¥HAD7" Y8I+Aqdg-W bҡl?HB5J堜 ZjV)37J: QlsX<.'dG=י'yToc&A[Mhv6^iS |X*")d ^SX:,GJEmȸjZI+ vڍ.(r1H}ŒQ yEK,1~CH:KOpjJOsTiF$:͊k(rwWEeNU gP1ͯٶ ~f' pől7}E`=EO LcO#qRceBvg(?u7V|FC`Y,Y2K2Zmv%q,a E|M:~O( G^P&4CE:pp!k!\Kyx @.Zw:t'Tߢ5Hhix1\(竫3 {^Cx  ajY2Ӹg a|5,KF&}{ n89^e1_(C0% Gngװ}.{bNr 5X+V<j(PԓomY H+UHpzOe>fmVp4ubZ:^zσ~TXL)j#k=lO̎]J^)_biНMk0 }WF^B'ޡ$œ2Eߣ!RaL9cN+b]PoD7@nU~ \޾Usi߼wA>p{PmئE'ϱ NXr`4y\/#Ĭ$f{L$9\3#ܔ<  N+9ZGR7 y!Ỳ=59[*h݀/NO}6>cxԋ0< $*Uk9 ۉDC !٩f7Cs`Џ-b77d|K1 gD?o`=8,'-y${jUn>4)=Q䕕Cr 2Ħ3hG^3(h%G<5 wd)'DTN,,cc'C[_K8ix5|A7ӌBSгHi= //)=Oj?L/0Zʻ2Ϭ<`SHJeMB Fx)"n9tTPLnղ((h %=63mOHwۘ]IzaWnL˔Eyv FըO.$Fߗ>\$w*]~wHq7m+{~JqsIvt]sax&Q6*4bGW $ŏ\`CRy`g:dq9.TϮt}E`Q 9q첻NPNLRtɃ5`>T-IhQm+!JN Ҏ,^U.g;5K"l4ۏ9&գ$qy\fc45$bgd۵DQ+Ո9P9/sF O`;ښm;MFP2I6Nn *- }mfxlUCTQh!C@D3ٷy Us?1njw&D_=}ҔD@T2'"OtJAEEJK.}cA}K$~]>pCs(hs#8FL7솶a`K~m[J+^(׀~c-̮\M5OgNմӌq$Sr ,(QLBj[?#SN`WPHTHFh֐P$t&!JJR+.-캷MM j́a2e_6Za?Ϥ\:eP p_='':؏TZmQ\YGZlٺBP"{DKwLMdd|jU$V;|q\xx$\$͌|0aE_1GpRDڧJcTM=[HD)"ou_izgzD"WP:c2{O4d(A^^,Hi֏Y޻P;;{ny.nn"TבJJ&Ƹ;3,p@@ЗVX q;Km,C H+uߤ 5 t98=gm*[# a&!c}BC Ӏ՝TFD^-r *Ԍ 9]R@/D+K7s('=npPbtDN?̇xjsr 3DJjl@ƳA`c񌏦6@-f!Q$)ivf&I#ŝ XT(率CA<{38/_R1F-Lڧ= )TEC* Al`ޙ-wzC7Jw /rKasD(q oϳxh#vHڶE<4^ 'g/i.W&WHhtv CB[qa2(ȗ,mսŗa  :D]|hw"5atʰ';^] F)?v|f Y'iZO6Rc3B alŦ&cl5GH0n: nF@uY 󰻖QGuh,^>2<&Eנ@9zmz#_8"@]vfeW(Jյ{X ħ7n:ܯm1[DWd ߗFzmAT+FT[%Zhi$ɗl:'L-TƗeXڗ!7$bű0[,M0mBq`ˤ@Џ.3udYQmPΗSե7lWєko3Ќ6^Nj,9@}>D/9b&LO4ȨroED:^jwD)ٕOdߩqn}i06[1bpㄹlR@5yHp+ʱFNQg:Ԯ`@&qY 157TK DƘ,Xƀal*:z.u)q~5PʡpK(moP b\m?>k5\!sP%«8!6qjgnx@OcJs$~, A?^N*oۦĆ"c>M?W4JsV\g 낇)deyH~I}amUgmYui輨t4(81Ɖ x~.߿O=Z+'U%`S@Y;E ͭzZdod"?g7 ql.`6e>49a1HkDRW}+LZLg&d\gJjyY=<'djkea|NB>m|egy +Y.r;sg[]0% }? %5čW)OrHrK_e0>h/?h~>R3ڊO&r} nQUmSa p\[WXgenh~{oc2RN: :nnV"$>ž=i(bC&]h΁z*NrvΜok,VD/lgn[B_{;2c@[C+XDDgFdɻP$8nF9։VL`|4/QYQD$~ sJ䚹'`yަt;_ Xf Ź`]~?duPlx>WFslg*ѷdFhJY~,H (Mp߶OL*ظA DseW qb/_D0Eiښ{[ KNtxWE(}9+ƙQzmTP/0]">vĈ9-]Ɯ4|E! Oy, JH8*I95I(#{!*5Yt(êf4WF7iJ^S- ͜Q;Le2xD zؠ[|TY7B'+ ҏuA,[M˫dLeh'ؤ7q`*h}S"U/0-*UCsiΕpY( ;:r'GJ'DvfQBN;qc7L7G0˲ N@€|PG۔ "e bz ӶcYn; Lu*ʒ X2xT}T@Ȇ2 {i*[hKKJb) :iI,9 yIӗ@'e4R_ ᚗjуfk''rE[ew$SG<dG[[nɘ[6f~.'!rȀ@;%{4Na9އnĠ?(/P>"[K(mA &K|ԝue13F(^ko *R(;?c`l5ݺ'#gS@7Ůu*ɗ( Ԫ/gb;K[$މ- i-gS2vqvDzb(T>@";ZdPh馕Y"T]=O=f"F֞tt<@rV.D@5cDʰЅ'nuaKJ9*llۡ6گ/XY9ʞu^ !SyS/뫺Xwvmy1Ijf9Ig3YR'9TB߈u`Uf\5  Q{%t5ptx4`:/*r^'Xz'jOyȨ!\+HgdmsޑcjXv N7̓S,^32MɉcMJ4axkz }F*iw0 Wun(01`sz ghĝce=& Lit*rU$^b%Q+ j,DT"qG2BXDe^B\p1X`.(ZPjXCA7rνEy] ^E)} 3L& м`ǹɍ^iLkf7`T\K;hd :i8x u-ܤ5;ZXUV`7 @QW+FV {2nW7`v^FTǠlhBc~@'fl XLyO{vqwſ<*h`jA91a$\;?17ʃG"XW 5G^ȺgҮ&v7'ɡ`TWĜqxL}yg3TN=D<ޝ&ۢ6ɞ?J>B$ ^7]Q5љ. f@$ 3N~L> W"UZ0J.3Hu߆U;Sl7AGJigF6eCl,<-/?K 7/Mu6;yh {rZ"Z xaU"[fƃ W0to~[3ΔkcT ٸֺX1}zj_;e /!~$`U?o(?d|ScJc(O7M}і,([M_}0Pcrut{ZYxj{+fͅ(TMy$H\G \׀ fuPy(Bau@{p~ßra@&^D^=In !S&(ȇ'd 5j8 jdˆv#;6g LqHWåtG΢W}(qȿ6|Ad4#&f|re^80 fIoEm3KϠn/Nc-3U e8N5qa߆vMp[kXWK("WAHwŰφa#|PZ𷁍!0MA!+ꇮ$a>` i솦`gt_{# füDE?ƕަIV6hq7@ݟ\/9f #yW݁VR?&+[r 1jdX53S<(o\[芘^KxP!l;*A-Ď^A<zr`HJ^A-gyCNlzv)W6]$U;z0**>RWGT''C %m%̀RgglH kl&7MiS 9A?+)2˝n;!iUa mE4VPe0忳7ƔgmkY$0S^|UW Z· iؑE*|1iVY]$!ř:eM(~ }Q5TAqĶ 7d'+W qVO _2fSHaWbv< Q80Moʯ*bmկ _,UHH? 3Ѱ8I# Vd ~FqYH,눤q*_|"ҠZ&xZڧ'#8D`UlzCH~`NY~~i!hƣ-0:ޣ9@Gj/'(MU5=` $}%"f{Q_؋Wu +wYF#J+ON4i_#`6nǮߥY;y`Vb˚;I5%G.~4 d_r\ o:~Hl8_RdZ%:o6uOrLu! V1cvb4 ՠLl"h/"Gѕyx(aH)s7#^CF吸GB**w&  : {w/E@Yq >zu U_H}*|ʭ~ V@^r󧠗?;xb`#:$HeWo%ZOt`B5~3` bh9"Ĥ(EϱX!a.Qww܌TNVn.q!th5@ )Z_^ 7l/4_jVv9+}ZG7߀8TVh,a.~]| 7!쿪b0o:mrPAiڗhrybj$jh eBɧ;0(TGFR< #j=HiaSvp{nt2]ϩ5YXҧ$`s$s6bcH(Q[wO|.lU|0VvZ3'!;DY7PK݉ Ũ#؅&SuT9YcZ)>G:9چX;$a3NmBimN"oO燒}: ^P&WE>l5!Iz4~\ W1$7џc< X#]Y1ZI`K#hEA) izy~LJʴkRe>%65\9b]"nj$/^ Y"NI(01stVG󹛙Q?DwZ` E#D&bL=_+C$͠ΈUp;lWb.4(@pp$^|ר!1-LCZƬґ!HflU/ QٵSmCrW|]2+dJ 2)tsu"xǃ/Oob1)7|~p?.@yz5قY;Y6-ۂ.3\P,foud/2Q6j 8ti ɇxC\{]+( Ȱ09HSdǜ d!m-jXp,WpsW=>7y*{N%!e V{_H{}(%K]:1Wu ǂ:dm!VQ݋9Z{%c`!M-dGnCRG{>W /zC !yCn$.NlЋ`TxIbr%t+w )_w9ޛuSD>)"ni]dՉBʪ)C^g9y'=Qjк:;%8ypn#;&9%~4 I>AjZSӡ꺪u+~ˊDZ22( ZЙՅ-Ȩ+~^{bbS} _P8~ܱ :FDS9VK\d\3W'r^EUQ>3`c#yOyA45A6i/_`G:T*LȄt 5ܱzEO!UEp>%7 14P'y ȍ|fal7Vd>g47) w,43XP!|dlӉe8v'ő^]\u0P!Q 'p߶>S$h=sz|5_8 dA]Meσ;ƢY=Uywh O @7iAuS#IGuccٵ`XPh:8b~yZy/lc*|`mS,a ezvfO8k~v'a'NiǃIDf4 e>j!D\Tc Y]YssVBvt\B ;Ja, j{*dۚs.#LlApx&[>e鐐fq2=[Ɔ/pnI{P܀ne,؆dXq_73GQr"e  =5?Qf'*Z^ҩpjY98fCfϣ aB &vίZɏ)ut".SӸۧXm3u8dT&N*^ԛ+{89Boسp"_ \\Afv@ek!pZHw(<,ݵc՛Rbq{7^~ GfA,9!xAW^YH-7cGSvړug_)=g*XxV%ZtR z@)B)5Yr2~'EIMdT[&ǼEuM[r ׌CРwQ^y*߀_-8aL `A@m ަӿ4`C۴}KQ.@.d7~υ~+~y\F _ㅎ,^Kl7+.FҠ6h@+/WH2TCf1Us=4uRGZeb#{v:nh0E0,;zx2/G2;&W*~7HQ?3,KF~ùfAOs,k`p*Z!V2Ǘ!,)Jneh.ޫ|RMD76e|)Wc!4 ssJp{[`Үc~/@+l@B;s9K $ fq~ mC6aK'h><]4 "{iܵ]5@KH+>;* :-SFT|2p[<EiPZ5-_4za,ӎk} %BS—5tl$HпzJe$GgzeE=P+feOQ&~P!w4x>2+ 6I\!= Ns.q} mP nUpoܧIhI2gZa.7ަ~ bY\Z)Y !tSBԡ%~UCAǯXYk;(RO3|< 4p6IɴZg d6EؿAs`ri[pOK>>Q>gp0su(@tec7m71j\Ǻ8$OY1|ǵs0 %FIJq: ŏ@f\Sa6F⹇*];ϖ;&ޝl6:C6j>QГ8|n4/e:oeu;&~b,ܭ aʼnoNz0Wp`^ ~fJdIX'hb`3Jmo;v#uĦ3?fo\ K\5U'_o"; 5U}lrC/y.-ݚLAÔk8@Dxx p H +S/ E[|wSxDY K eԻ-Q O ͟kJ=7Z+5?)|hex .Cjt7G%/Kkp(V(_s[Gjhy #CGk[˪y 0Li\8Q2Bū)8x 7}f|4qr+1.unRy#!d|Id;17X&jר%;-"r>{jZ*ׇH(,*3 i'N2 p5cVZ~T"Yz Ns58"YS/)Lk?,2|,p2uT~)e vTb{}eoPYs5fY:*oum)ĝ0`r6kq,8?Rp ):K=B]$)bUq  r~nD΢:gpAĻ6qY1OJΘG;bSaIO/fQ8c˶y^q՚{JUI˙_JC!ucٹ:8_ ּXR'.QYi߇+&`I˾VĂi~L4Z!ъXȈضN$fٿ?gey_U" \1-N_ ħ \M`kF 9,Y en\٣u*~/ڴ!#˪Vv`O(/#|A/檡xZæYAC;=m8ˮNHɻ%%bIR@[Ҫ{d A*4>dėDgoevҾApZS5%,G rPLg,uA n<6:4P*p&3KH1^i әPb?޼MQK JW[8'wzo9 .$B/8u~ WlLp aASթծ*b jR׌Hԯc|ߓ cjnLWP'iZ*GkeH>*vQɡMF涁' "*L݄VaM>\J6fzb:#wF2j{[3H3?6vo`J 7dpuIp;n r5T㨢Q˹qYt=3M4x /Ti@ nV6Ab,B3!N R\^7]zl>+_SL'~_tLq5rF/s迈im?N|U#'*-eК Lj ^g4|ʙR΄.XuW/)>M.gDGn</e垮Z=Z<{)Q%dzcuhXu߭~z'>7 Uvp \]OwKU'/5{ ZY:w4hu2 3vzMŊ}iTHu41x%mzq 1p$vI(52z d zxՑޖx>N#U2Wb?U+QPDL/h{)|߬CtPv]VYf㔞&8dY"B/K4 [SPtKʘ4@^JXZ;/lX< `K^ǘزh F? ^WyIQ4 l#TV!Bn*l?U3w\U=/R֎ݠw[;닓`ЏSVLf~A'NN5LQ;ǯ/_9%Cn(C+I7)WkO>f0q AX9fƇf!=aJu>)5L)]8eu #)`/ CWѐ>,V`>$1k,U-%$L䳎$/upyȤy:z[/0@n G+1lCbA{0|!Ҵ~Y@HͻkjхXB$k9dRf`8 ʃ^M!|ܢޙig7z鈼x/ĩҭ=9Kr@UGϕZk~t^1~[f whH|q4ڒ#NL2(@Zis9fdGx#2F.z٩:~~y$"~^s0)XɉIlD Q2C-P%0V\ed>d<: {}Apaoj.jEF/{-e#g-wd*\|X!CJХ YCeCX5b̳ךGbPmU뻨p)$%jJEgTV)!lPOfo.I>"Nx˂SQqfV'0Dkx~waz ,;CeNofo`j32?n5(!0)7LV'R=t\jz>RI[Z;0E=#K%%8jpXcHUjVIHԸfH8YKN _ oP Jo?.#>73b VX'@ gц*wh)AYOy"qيϚ>{D&nGI m3u~jq$a k^)S݀m̈́״ 4?c9fY}^@hiMIG\OHE6#۹41E3]&Wm(}'UG[۰T?\ ֬:&[)^9j=@᫭S7F¯LG]h柩H0S'K1`G}Ih [뛽Toi+ \۴[P .UƢ":pVGWp ,#i/_15ɢ f ?EmoD\4x4ڭmo[cz\ *#X.5EJ<c:,{aO Xq?2G](%_,笽~{YG9*ūubǕ5W?^=Lgo#$ r[ IHAIX},Q\ LI(ehY;*Va\R9;n}Li< WtiHZX رs`$ʱtEw@k[>qB}~K,Y ɐB<7ɞԏ 1]]Ul\WFR:ظ` dugTy@#p^S=JDI``Uvl­y@Sw/QZ4:}(Bu24S`%BNm!׶wE} ,^R&@V/TJ"0d-(xcq#Z')Jd9QGXRYCXF yMBM9?;Q%vjfOpe^D*Eĭ+vrI;%4td;:hwz:v抔sy Gx5`F,9B@DM'X))u2/~*ϪX{~eR+(dy`fmg q5-kQ#͔sTu:5%5M6BALzF'5qO09N:O~[吴񼯁eU0K}YpB.]>aH^<H4 !ݤD_eD䧀5x .&^TV-=B[ZNSwbu\}WYeܛL9Чw\g^yZ  ]+}200]UhRhɞLҵAGWЭ$[?J9Pg3^t\MR\㴞Ѓ[G*d'8*EUoޝ>y3쌾Sm|^OQQ6fj/%.XtW1[N&u$$< qâFiH?(v}g PsҀt{)C^Fpn^anr9@RQ(L`LlpHyh퟾p%j-ÛJPHCL^5r ꑱAZUX.]U$qM!#+vsV͋7 =")s^օ~?ֵ`.֨R ")6GYtɛɀ %aDzD 69jTOMC=OM$,V\ '̓$HL Bx_u?Y \#Q֏~&=po 6-IxHnv/:n)]>$jGAlT  a2!v}.N8p9#fRڔh!W5݀6dchwcyalW.0K2JjQئZسw0!"P_\0#IKX$\# Sp UzI_U>AE }T?\lݻYﲩc[y$DB8VFļz93JFzTrmpWQ IT2<1O`7e#o;2OI)ZmTO;E<2D&{b;R!VҤxuՐwu ~;lCVqwɧ5ad#@Stdv6_&]ch0DLZ^>8[6Φ9gx'GF[PY\LHbt"gj) XAyBW2BIU]<*#^&3aF^ȵac ?~~*:ŢQ'M61Ifeԟ~8gr q6_fF0a~֍ʜ)-6?P)jSKM@Nv[ӷA.7MW[b< ^@wc6!8,<n Ӷ_0oJhe|Gݳ%xg%AMB4%X-ܔ/Y$&W}rBy3: 럊6ЪFsz)F읊L]9{θHU)N'x֗@ ]`g"撻#8GѹK<_ClTI d㱟]ٖ8|>H P q/ծ=i'3~%F|Ѡcn*hnWop~pgQC*Ʃ\+ktmR|`V si>_:kԏj존GZ3ȳk-"nF.$XS3 ATG?c5پutflmHbwL[|1t<;}+F Q)(W/Y$<`:f|LvYH%wC-ja*^6M5y%edPSK$]TngqKZeQ'/-Od-nVȦCԚ/y_4nzI5̓oX\]i#;|+K:x BU4c 4)<N wcdf$T`S+JL]EF6c#'/^Z! )]6G 3PoRTWTS@@"݇  ̉~Q;(OS3Cqo$<%YBxitI*jR9 &*](Kv0Du$4ѡ'vm`7OmIg}͍& ̝2ĦHÛw-1f*7@e҅]RatdDW%Bl|?STv WUi+TV&#xR? vRpb8xly?-Eu5Nh1R{8ȱqjWPg c(6a!xCewAn^ʚ||T^摬+CPa'\ⵖVM5 %-mY?om bS'.ȲMäzلeIƍkuW0]Iz q1W)찵RMB*@04,sϲ!UE^gAiE?`߬|ScK*  9}JG3"ײ'ۡuHtSa(p;9HOl"0Nd($Xt Gl0(G&0CA\} ړbI^㑰Ѧ %}'mDljGU <j:-M*YӺfE%H-2n%0?^pF3+FALRv]ya2,l:Jamk4к;@\=+Sl#{0tLh匛Ym|k?ѨnF#YT%GULG:UMzBac UAuT1Ƞ)_ Q#^Stkd"-ׄB EK1d& }%8 zr$Z7P'/qCvF椟i'_P!A2J)-$P’bF)|uu-CRhyse@ "/w)ntLq.قhPx ]4D-ΒA>z(x75>#fx@3iS$vZ w.D#8{ɼdce{ bf4LY"RAcc?"t$ %^v G>亯 `:"X<;[a 8c(p!QEJ.9&ߘ9^"\p≳O|Jm[Cb_!?ݘ~5>٨%a>d2 Pg!sq{\j*ylM4J8<RR|N'INJ"jAG4fn8urIofF"iy؉Y  dciI"K_e"EMώt~ڞUd{fpMr:|K#( +%ۀTO |R̚ g?BΊ[qOW:ɹμ+$Ho(fP  ,nTk/m^*9:E氵I.XX"PV(SrDcX FyfoWN巤d1+ ༕g׀Ay?@VYs4\rSWR1Y*2KE@p=ut]{y>$7i2UdIUY9dZt䱄l> <"z1 E(Ug[w! KUV\Yp.WKqvM[[O0Q)u%kA[HduEPMef4l<BQi\Njnsཔ}z1K tک9G"zs]A?a/ l\.j /#}_ok:RC{p&j}`l71a7i^s9:2ʗ2lrI }hoOkVOj-hYf ĚE#3p33XhJb1e3[9G+.k]\h!UH]:[bPlx]9Y$аlTkgz.0ϳd(tB+a┢ywhG,=u%c*!܉^*5J?Db3U6ax|BBޏJ Cϱ)HrwenjNzo#,k4AJ6}AX3@$meX;*2lyr[UD)RGCÔEd ۂ\M{+#?MƟaERSCs!7{}p]883Nϕeۃf؃`%t-T a!ŎϿ& gW.Em A:gCclҜ{A Ѡ p+^(yCn9*@Lu>fuQ9-%>p;JFh?w|ՠ2bO~1VTB@paYJh^eY#ߪKP`w:DT00/&:R4FeHnlW{=۞]`JQLI_e Z0hsܠB)΄Z.),moa냕~FXF_cy(!3cxr a8ցI_I|ΓTJwm楗*9d,;d7Ezi 5nC-ZKl{ņp iR-]i*.Z@@\|A !{2(۔\_e>rA[y@HGuXb33&0c=0&ɚz??P<3u [+0T!)vnLbq0,0"GY_m*Fuɍj_R#ؘ0N\쨻٥57YB&jƪ5-? &S;a$M3_*'pDa?OScCaY ez7[0lX- /,lô*HaFg;i+.™4Jm3) `ezO q9ǥ&/ sh@?;6mR.KA-{mbsoO5t`,/>F=C&Bi ;y"Pm1ld2+Љeo3tO%d/zlya]j䢻tV_R@~Ɓnr=Aqbc X 섩!qnz(W6">$ ¥#2[d6`?_\'>[{X HQ]")o ԙ3o* momϖUۤfTĕR6qLpR 6f// >&)W41\즨N3P4O H,(fRzxhkQ}G֫Xԭ%xH>$Vm+.MV_1ŅՌ6;p QhX7.-T徭fh)$51GA{+2ciY.ku"0jIu/Y[Jj b7L0ؒ5Α45wR%ib0vPkU _KfHJ̽^CuVI-)FFN~ :So Ãryd(%* d3_{Ӡ66lЉ0"DJAJQq fJ@p6-+T;7nEք 2ZH·^]Bf\ikK!-o)'&)#Yu(?KHl'oUܨD0FjA2Awv1\s^od}wɮIvΐ,So ( u;UNg͍D<Ⱦozg^T/"Y^lnX(v2>Uwq~*7g6-e&Cl[)Oz _O'tX@g0^`ӝw:cB-']Om8dpV Fi+Îψ&O_2$ǶA[˻&-줜*{&2]Ll f<oXlw7<ܺ@~U-f?=]ҋ?] hوx 2~uϗˋj'>)'bwfx"<ӢM Ԁ[ͺ4[\BW`Ct b:=_D:Ld+nYKVc?Bv]`gSx#Q$$˷Cȩ6,O0nՎрK SW&A|0RǾIb)1Ov지r\3Z#[O >0SU=ȉ_Wns7*9U[,N7|Eq@W( .]vn9>9Ÿq=ڃ#Eʬ6<``=_+x~ M0Rxx9L Uw\- U]xCJ-d *tJ.UgܶQ BX(K'v3Qp'ţ0e=c6fo%alX4Ǖ|F?3 ̣ aI&t(,fJ`dc\Xn|ՐW qOL[!+ %m{=0??7ʮԈ{2Tp7j0@Mm ).  L=duk3; P@tV=O4P>щ@BLo⋏kjuigp^F,(vQ1PiFy@-܀:tDv*EE  ~LJ4/׵1XZZ#D DT6H(otH?ߣn]gL8fVOn+$5s.kAv9Oe6ot$Cۀdj_(f;J{Jc7Heܦh0k L8 ̼C)G9) Nd &I[eGЎWGY#7:*:Bpfk4 *I"WN1Z9 ףHhG==޽z|Iwsne-K~G#rUh]o?:ѿl)Ja0KTRo*@x\[΄[7>M؋7Q,m!PBsz<AX3l=ɰQۇk*|VtC1>mh/ޠRC@ץޫ-D 2.:\̣ݖۈ&vܐI\ށJ=7!)G*􄁕(Uhoe{KqAig.E ־* V^'llw$e U_}LՁu`we jKd~ ZvO1 >v{mk] _&$ؤ kqILQL'}T(aϒ)*ܚ˽Ĺх H`/E֐0bkV;㥐ӉI|2 m`Ik%g@Gw 63$d۬Q[ ~NWٍiopr{2Ƥ #8}9-|bw>X>1;M/F?8@~F14Ehmvx ψ7 ̖Vy_Z~;"c>V>?.ʍY^I.2 a^ PU KDg,f_gv?VzKj*6 %|x:7-NxXO 1nI1)//oB½9,˷۴+_5S FcpIq$ZXPq֢I42"y{a9*4UT&ԋح=PV%,vk+{7QEUEc)}tn I7 fW<3:-̅pe )NW},0 bq sfpɕ" $pqpyK[>^t q"Á7 p1(RH |8R`ʎO*c( i^]T)!c9}4"fh5Ōr7kwp|ғފ2s([޽$e Jimy*>E:ɕS؅/ZI r,K6ED yÑrjSDҎszO5Bcnj(4m^4 p/n!G*E4\ hm5Y=.$j_'(g<D*GM"8^/25 =>co#'?X%/[B:eb};46sT' GMbEf`d5Mllђin~MtFl`ls~/EtpF@5ۣ&Wm{sַmí ,C?7go`3r l i;,oc/l\ށTq1hp3CuzhQV p (K>8u XC].P[C* o$ziM4"{TnXoY)g]W#"#u!|;EȯVìdbA$}^wMaG1ɭ!*Ղx&+z m#R@fBkݞ}b+ǚBxҸ]\wo-r4VAGx &PZnw&ΜwH`eMc7)Ԗ_&+_P$zBd^kg4&u0FyL3kIZ:,+lˏɩTAMLv\[$< ~F+ȯn?,,񴴞HEP,@%B\x[тdfvQ LD〒M?lϤyB&{U`Y% #8(ޒKLaEUL\{Q; b!B#e'q`k>n^x eF) >>8A:o@$j[Vd%.`SD# |{d R[\~䕓XP6*7bgO-3Tqt I;.;]D$DWߕ;TwVHgEAuJ: y\Eךly$Գ]BӉیGίo&D wvsps֯B cǏMʘ\Zb=wnTjV&݂ี&a~@Bi= E?\(>\kxfD%ŕ} F`LHnhŻrstcsOmstȏk>ۢSr@\5..9?_ۭ C%tw>,)!LەS]J*`xEvؗ9DFId"7AF ]se>|*3C>yl&f.py(Ks<йA,NhC][=hf5.|Mc_ o}ޒK_) BL-y$V<RB:2cNeI+yÈ@ Zeb{`joɡ[& a1AM κ ȇVk$>@ rS@U;ӍDs>O@efvdjgGk5>r$ze]z wXXn},Nԥ縁`/ o@r\\BG7l>U5J#ճC|HR4h(/7R5w.I0|)4*p=`ۚM-mT 0C("`34v=J3qZtH&{B=|:6w2I,gDGpc0*0D P12N [a":ڹ.4G"o9̋9>ߒN jo3'Ui^I/Վx YӾ]Z8E$^lW4tEfRxوcpUKň H Y1?0M\B*aL=P˗\hMv y6=Ϫ<@3 [D &?Fb-zѰ%4Ĺd ey`{\-~O~q'4?E! 4͔4 9mÜ^6 =kS6BR*h V+J\?2nD1C޵-lԇ@ 7X4sGbB_s5q"](m+HK!µf9ޗLa)%}7OV 1 jFPcqzAR*'N˕G%u>3gW?;c.z7xmwNGAXGdd7ANL"a"/uN@e/4wfMrx"Z.tM˸`uG5!*})؞|ők$S(7vkܞdG~ʹ_aY4OG5*, {Ȗ=z-0af\(*Xr΀_;ȕj@ں؀ ԣsٌzVsBb튏g@r:a&[K^MEZw 9PC8PLC bS8[Skgj\7X5%wt܊ +~Mn]wy.(;Jzѻ^ve2Ub!+4_kL/JOblμsGh$c4T;/蒠b1n%=j]L)Y;IJAn`7ԔΗN7 f#^:N| AjPٸK99`[,,YԛOÈ+2Xv/:)b=eO Q@Wb@Ե Ji6Nh!qL2ae#o N_y*X?UeBRPumc'S Be ?<9R.STQ(6rMڄ9!~uD |=Ccv5qf-F 5_Q[F|we_CiaHv7 IU@ڡ l ż~1Xa8.ۡL'Jb"w0乑9]Z UWf,6mؐx@@H n9Sʠ[''`{ٰ{a->{%cdW!'9Qͥs"Yo*`f;}S- SSx0Z`:̈LY/op4e:켞J$+D^<:]/#(ե=T~_46`;>͎/ fe&?"菮1/PbV3Dcb5"DýCj\|G#+4NcȣU.(WRc,V0WÔGxʮI)C`"Ec=7&4@۰J7W¾;u+6F,6私N9s?>=v:1ϑ#9xtLD Rz@ϪY@ld(Ca mvD Ebn5$`yYnef:-Z/{JمLpSd9'hlD81CFҺ2tXta/MkjQOy~464HHM)xu]i!$Ņ;y;|r۪"t A:4pAzG/nQ'@bw|O55D/qbg(jjBG+e!%1߹"N~:hQ7ɖX^%0<"^Oʾ?Gk|ky+/2~OSsHyaŒ3ošM>[[sN$t9FD ̴M<o9\0 Sĭ~z.D@,]Xv_R }@2@L'䐍̌lC>&z `rWZσI8`&pf hjqFr KBX?951w?q&,(N[xќQȟ;3ZD2{+=yXޔ>u#Rxi[sJXzU,Jk[C(WyƠF΢ƤrH',gѝ:ڈ I>U7&o 6e<#jFoc˗k Xfbq#x> 7| gZ^{CER3SӍp֏5} ?%7|O1A$BB 6+OL xɈ]U9fߕ>(+6Kwz8Ʒ0VALA6 fP&$ I(BqyX9H17[)-k4M̹?(\#_gKgQ#x1Zx@uڍ>QS>,3t2Һڽga&MG?bK3&uD',ÀfMrA%i_AZ3yW^A\1x`BC]Lv$,:sPݑ-wruH{G m{d,Жd12R#KKhQɶ[C{;ӪҫQkh+ͳ[Bz~lKSw2 hQtk+iUzdR֞Q(9c?NDub. O#{wl94YOW+IWt;3ƶsUA>gD!@#<ɻ߰{^RP,P8`(,PI$<|.@MRgPyM7m-1wi$x빍:L$n|xt\%~5gO`L{g.càOmq_SΖ ݜ0izc߃cF?5ѡF,Z$ \q-W=|d m(b0p& 9N>xBn/ӳxz 9hjHiڼ`ã@n6#ɇ O8#R1.Lk]0BIϐV4oSf:YKT*18|tՅE`Z$a^aelLSK[#/VU20lKRƎk1rh?S-A(B2WȠ4?엻կ5 DCJ*xI6WA KZi}p7~\.: Fa19(V %zkAmJJU=uaH(b&CPۓ1[Au5@W\6,#5Wo iQM XӾ ]̪nV!{nRĩCxʴj_` Q"F(?ϙ( D_4n>!LtzY>8՝v d WBr}t4<!QǺ= oeXMY9K=!\O?n3W9 }ney#wc ;&ѥs#8uBpf.+{Ěs*sONe[k>}bxSSm{[0xxj>B6F1(O^`16G1hy6xeP"#yg3|0L=6#4J Ege qeO^6ߡk-V!zark2)cd:hWimrk#xh.w'0f*.hCw+h̸G.u$Rrwo?syʟc{b][Do*w{ƝWX`kIcM6$C52(׎_b`K ldޗx#iAQe|Wц #AW𦆎ABѧO ;7U>r4AKdWLLs<>8Rq_*VS"qr:' >]mz)ypCrZ IV`}iL5B'Y]Ȱ]3'V澞:AET?~dz4݆w)N\8.]~aWTOm+Rl)K6~/$6Dt2sHTT5ly~,4 2#Oh;Jp ʡ?&t(GwNO`Q(C{v> 3lEB`"zcq=Ʋ$hv$=g:#s=tĭ[򪬈Z}Շn*B6a,kYkJ#p0l*e kwEEQOr 3 J'p̒H_ON$sGY?N=3Sfem9qƾTV{s\1JܭU4'e*avQ y73,U{5wS?a'2Oyox>~A"J%g; GhB//Caz=) m:^{ +C|?gж4s!W8ax<@v1F4A `]"7й5oq azډj48%8"8p!@h ]82uR <|'ʧ^C: (uM޶Af|wbSxa#_w X|jE`$obVǬK9)']gO9u}{~HSo{`Q}qVOk-'{4B6hv6&fdW^ ^i0Rn=$'4G ^疇Oo3(fr[~aX:a{N\ $!,Ahn?!u47`zUk91T [$h>qKߩduէE:5n2M\[;OX&ߝGLDL~oZ?t?i.dK?Cdq?_/ZiPmt$ٱT0G '"6M6m,½ A2beu#"~,BM@'.~]$+C36M~64oE, c駔UM%32zҩsPqރ o>$H s|L[|5*ZD;ɤMz*Mg%c0ohX!Lve^;_D_WPȿk)OBbwNZR핳VW>ʎ]:_")rPB#[c黥Y>iB`XB x=Vc3pq2A1آ. g/GKT<,c76lDY}@]_vU/|L{Pl[}QKwCْO}ń͸E;m%a&M;S jfG>NC`S4jr2jb@r^Ռf8.OcX)d09]h7^=ԬMFuK!uaaV~DnnPFvHMFq^#buO5l'ai5Tŝh7WI7*Cbb!iZI!M;[Zy7x`a4zL'W(1I#ߙF݄kss{ha u >'|6h<vɈ7 (d1cdwip[<-M

#cƐe7ڧkaBfnMQA61`w]٢Yz!'؆dR_wIy>(OR܎pKGv`>7B]:<;y'LP=yC'] %ߓC _t,870w9>jVSs\#1Me(f@Tlm_: v:`Cծ` ʎgCFLQ/G4 o KXp98"SQlL#ɃZ0 TXx}ba/]$Uý_.%a/'&ob* o9`ݜWc7U_hZuYp]K;Ueaw`kYS3QಝjmZG!)ͷ:=UawkqyY_mprv(O)GOYۮЈ |&;6ql: .-XoD"8!I/s+/ _6.!1 a8AU3$n՝'dƐ q\# W0=ٷ /:~FQ Ůyf@I*´c/)Fj#\|;󞎴+lolfn!gNvOS(IgN!W-5̧!::VX)d/j6ÛB4XEeA3O% koc;&TK݃Sc~ oTI40ߦd.Jpaɝ5hXLX;&^N%5I_! MɆ+wZy6,ӓKJn:~ Y^ 4n5̸K?')/i_TۃдBUJ}r3Hhfk\gW ͭ^$GU_K70;v3'䚦N[\%ͱ*~=ۑYԅxRCcbup m_^2bXP : (cWkl]:E%Ʃl-[ʓMT%!S _7-BG JK}j胋m'ߤzon "1aIȈ@tCO(n,o@pR3Dm~픭ώAQSb2F N~A` 8qˈT~:>ݗH(GN{fOHFB ȏI_ |\2zXB$i4SŲo[_=DюeŻz6TH$|#g"J"Z#Vis.j{>{hŌlL@U̿O$,K,HfSYɉ!v_$\|Xw.\"*i{haM7 ,Otxٶ4pe4^ {׀v?&3&nSഅ智Z: ASQE3qIG'l֩_bǶ{t$L& TZs'_8lD^=d:s֐I .{4,|T;@,P8O c X+cKcfЊ I, ,~^JoRKC9& őK.+~` z]$JnR}YqvD'9^9&}k!r8"(k/>$Tl7-JX-ܙ|ˉڏǚWW[&O$?42B47Lp5mȬW`IƗ%z0se5pOX_ 7w@f ̒Zg;5~|Xk5/`!Th@߬H}2D,&89@f*LH(n ՁaLK: 6# SFƣL8\o!cZdC9;]_Y]f v-9i2b(dmV^G?#Ɓm=׆δ!&$BIh/t XU-J%d6nQ@QGD ARc, n'J- <q#˚b%|bӏYRy!.Xz'D ho,49܁K2V?FL(ǑLEonq*k%A+ `LQlR76˽~XH ;]{y:pȇVղIYZ8Ɏb_vpr!`V51b]Ʋv]8~}t̯G2ҟy:1֓`\1 2pSXbJsRsP!^]]z3.N+dak‰,%K;}D0Q;iy:v"ǐF: |N";^1ڽm:M2e8n>Z]OA iF[u+b)F* ^f EA<̍Dadv!K]P<CS3 -3 E QU;{6=SM0PVn|lf"2A_VL*UrLԞmBhzs5R'g$>ͽI2Dq+2! bd]x4 f8nB'΢yBtkrK3wnz j6PM2s QAjMwKv[= g)Vw$@>sW"dKA`cEH"pa{R"0MĘa lcOLYUtԑ58mn{WöKzcY\Ec?>lR%5>ڄDNkU,KnM+o2^B݁o+t0򐪉 @n+`( hj=.nf,U-ƨlnǿ%%ٍu%^owACZOZHˀh'@t_dg+iw!iրq0!c)<Tgf!_HjP%ѫvj:怍ʕ@lz/MafOɠ`z0Ž&4v󒳆/R;/.S`t/ ֯ k bdx|WM]m(@ [9j.R V >:TgPJKՎ4aW;VM.[?;񘕁b0euK9JLY,``*\,d`I}R֣ױ1@:rc$#*j\R\rq[Kym`tהyC`cw~<Pkr"nD"C[l"'0<\ANT]bI n5 @'Z^k6q KZE&b,J8cqfzcL3XKP#-fT9$Zh]j{|(\!Gyų7G!n, N BɂzA_Hѱl"CHPf 1f&ERD@ 0j]ɿsDSxʖ,r\e 3:z]K g=EĵQ_3f3QtC8bA vq@ß?7t9h.;̷F0`,x޳jd1e*((^~j((^/sYfK8uy u׶\ƏaN@Ba[ b!ҕR &6l8([gn1:FNɂ&uvaM';wtoe^* `sUM{7D L.f7Jt+E􁳸NŦ9(ogUxPȠf)1QN+Ð;x>wx-hݘܒ ҢS_ͫtp[ kZoXZWX/3;c jϗK`OᣢĘ߅f8ԤEp9L*F%JKES!0@‹%|?#IZ}:rU"&~$9kޏw!qGIIqgoj4rTGN_c 9R?O;!zӋm[ S'lPH "820 EFq;&_}~MjWP1<#pohop3 +qV^õ{=$yծra{/aSy=ZǮ/D"3'J}9m$߃jvG9]ȴ @d7AEзHp뱱.s:#UR@18oqpgjIq&WmźN=rSW dGW yukx Sa 庼TS prn";(}Az"d$ _ eqJR]̷+;&;죎st4zhޔ<0S$ ,gd8-E'1ةrP?H3e97j'")X|!iu1[׷rdF%e>% #n KJq5/;{އDHE Dަ CD~i?'8&.DoKɏZZXJQzй vD ?nͩrά&.?wCnK wЈ#@[G>W0 Ad~ K.0%{8l<Uco*rpI% SS6-xqA PnIl"z[0,`,?Ũ+p-kUmgZ$rk+Ebo~Z ATdf!DUK>|P^4fc㩣]{]Ql7e9Hj}Z7JNaU4{C6έ~G)pV#q[-}چu1޶ϥ^Za'-*HLhGwU3Zd#9n:ӏ׆`擅JZV-sX%.4A^4J UxԮ;.1Kb6oޡ^uEH0AWW核4ٽ4'^g!}%GiIҰJVdug|ual7ѬʈoR*ma+MRˏMY|}@RO%R JE5~Oj5L7™bƣtW:%M>ɲ :&&}5m@U]>r7ɗHAXyB om ] 4ypu2^fY>[52 0Qa1(;+rGVv{d67PND+m~-۸ǻM[qHh6{NE lH Rś "w>W6m,d]E>@R4CeMdZ) -Ez3JHqi"R6F2t:}iҔNU!)&֯#MA%͸?x$6$ 3SIc!`R5rzm0N\ I=/# ƣZ}ҞOk܂s(eF a+/^CҒJQŶ6/-A/R,DQQlȨ@LxrB#GAP9ix I:suob֝ùOii7aļ-eZƾ\#/ ~S &Eu0cgEz9c72;.½CxL!0Va\EySE]/%I#5@;&kC \dڀDDYbSRxC4@ѧ֒DvŹgCS^Ikn {MWS+6;FsЉ\Mlɦg[W]{KWFңA|/RN>rL0AZ60VZ%t;Ǩ 9x^?E astiĒ `O;K[Ɯ|/P .:*I{ephB$BޯaŻYb1V?&iF΃'󷕛I(;&Һi /(FTG?8۷}r(o_#P;"(\9rYn+[Q3OVj9gr8S1myd'ܞBܮ~Uf[(?%3XgC/`>:D Eʞ),bbbVb|zP6=Re}dA ?]E[^ռJgC=$Xf**$GJvFN.qo]fU,)u@_48\2WH*;5Ybs1Grtw;9|`L'vS7S9Xā 䏐Yn8+Ev"3!q+9R?=[-9`V=v=CLó~!Ube/nẼ CQȭPEUVsC\2 < @V^+2Մf O(s>c=bˡmP )7xfC{;?NtݕH(Wz RW|e!ZIy;17o>dt^Iu&wMfB4a-MHH0ipJmɵU!>sm}EUrVe/J> diL')QQ-/)Q[ʾ:TE+ (ykKĄ^?fܚBvlQ_,;^S</tMpK_Y@\T }9?/>& }TOFi`DHHyEM.6K T3 7sAwiFҒ7;~C4`?- q,&BX핚\|g_0*SZRAv5|FeQe"@VPS˛bh}HRʜ]9]u%1'2`Grn) ( eh+ٙxm0^\Oj3cK7ie&"R\% xGZjRDDIc vX}o7-#)K!hR_#h- L7L#3 Z}8mߘ|4i{i"Y]MpNsDZݸ[,$czIo1`"ʎC4?/ Aѽ ''*}Ts9dhr(Un[4ȼDL?0$S;k MS-"X+$Bv t?jlYh'٢dS.QZhU>}P]7Fjm)1yhv%)XOOk Blށv4I\Yy %ue_!Jꏺtv!8]. ǐ?78k`N' Y⿖54hGpuoᦁZ^l p盲T_V{FQ |u&x>(ISWs2fIJd}i0s`.9"INh ,24PgeXyg];.wo$o~jhPs_Hh eV#OakK'ڇkLmJ!U؞\>YTqՌcũq~m$ \:i8?\q&ș`P .vKD 0R|E`h@Q]5$o} ̑1?֠U^  `vL¢Y#pL7oݠc!5OZ)L'\SFAT'i"Оkyy&O u Mּ-|`&|r j3]Ǹ%Q DB[Aqc>웈߸@ *|FYxk*Bb2}CC 娰&r$MZnZb J(BzC))q7Sc=vHaZzQZ##yv(L_ǃPY#T}ȗA#DCq, 0n'nb1iJׂpēXzG,\|&bGwBvcK56E5,|foO$C(N*SMIs51m/gYQE׸g蠧/L_dQɍqn;뭐k)o!F~\[.#tWtĩ 2ǚfñٳ+rڥ<4W1[#lWw1JND2i33{{\i={:o! T]gNѽh"*YsH0|ӂ&wuwl7V;[%:D\BlKI%_$'ǍCrO{s&qRMtVJ~FjHLuX*q!/,F;{lˇP+ V`"p4HMDmϫX:&N`֎Sh I!=Ӹ.ל֩*cNpR*w{.KbQI?BQV+ĐRH3`#,Lok"Byp'U\fuN$hq^x] QCO;}'č2Pu?Ą/WFh-I'[`}?(3n4=I?8knUY:`AlG>=#4N OQy8M#C y&sa^f(y1EṂ]Ǿp]F" bj2kWQ(d;b,媊֒#7<Mfw#J49!Mfg[9qy|Hgp#3j*`}rܥqLįY)JɄ»`a[@JWL G4ZĝEMۢcRE|9|on]9i$ں@lZzGj5n;/8!wv7w '\7IL`SҶ}#[-ȽtijT.عV+As~iox0#^ک5_CK~ՠeF?bDPLw`{4=FY{bRǧ"+TSٺui, f"2QuP÷sx}Zu)'m Ha $XÎpI >]&O'U/ q0SӨ5ަ'V.孆fKcF[#uJħ{czއ7y:{gݏ ci4Xf< 1pQ]ɹ2>+xkiXDŽcS.ܤ axo]]6,8Wz}u=a(_<=wq8{t5 e3JCHo-=;y/'h_o'i|Ch Bx7kUjQU ,Y RL3?YA}~C!R)5l0F<pMoȔTu Fiu9)2?/E"'X9OrT?2iEd5@qn `㠶 <ؤ\_QXXBEW76GsEݷ "zM D:P_K1}qoq0',)D6u i#Yuxfc9YTk-[P+zj* cbsW%FrY)vE@O&ݢ)WE}f: Y3`ђZ ~EA]@ŭПyv6[t7S揿=':,i4$)r{RkiK_`EZ.+183 FFN&hlb)W9젂&8#o} [GZn7tv7,JLqo,zo q;AŒ0[A87#=K%cUӷF"\FbnZ,{xqu/ d],5)j!:%6 )wGV d~+/8;yV|ʡD6L?!EbԵ~F9f pMWBE$ibxGhbOܱ0XKV`)ئBt[f"qq! m028oJmTkr<[]˹ICLμNܷÀ43 6u3y7g:!zcS _yw.hn<#*kFL_|@(%oL20FZSh<pSA2T{Kt$- =ԓ H Z %(q0 zHbtEo,4bn~yog" \%#ʝqZcFXΰtN8%#Mj> װiN32|l>֫xF7:[LE^PXzfu=&,{z!,+vjYҗ;&QtSaqeg\h: Iߙ{h땮I}dP2>فw3f]Exc+>Db>M ,4˫%$qyBDV9M˜唥n-b5E?ÚN]RIB?&X@[jLĎ|Zjo C-`J5̠dH6Vjq 9fzr@L7]T[gX4wdZer: Ke"UZdVyؕKCU+7oQ}Ati^>"GFvZ˴WxG]a勥?>`E1~OͺEHBY?pkY9OBAَ@%ӽ!9go^(٪DnC?L?.ʸnCz{j#]-ː/a(Jq+'aC5B+o%(WD690 ~!a.izBDZȈVRnXkw})t%\27!3 '"T&KUl6]R-VP, bg1v#@$d{ۢj)mdiBy'.|w<^wS.}`&TV $-I|ūk  1sg Ok.O3sL3QN1xS30y:ՕyۦoM-(=V]8VgI C J\ب(y۞\ŹM2OhLȧDR\5ۋFrԲ N&`TdCXCncT,NEÙ̔e"'e i< -Mi(=>nAp#=\7'[?J: `̞Ui&+x?FXyQ?.Z10D~؋8-,WxQ -LGmcOQEwYGT\ÖYWڝ E-;ʮH.=I -!Yx!;/A_(vH} Njxq +(=7)-.>>F7djpVUqox qmP>h~PޝWÎJ%IT:fU. RUF/c-Xɫ&#- \SQ\boY>뢱bx4*L45 x]Ssl~K )Mk7onM)x(d^dK>hoZzb=#8G?Ὑ|EBen}ԍ*=[Ve- {xIQ£5ET4Oue3[ud)Ӊaw*nFμCgr"2c}/or?@5QX"v} YK>D Q}D佘EUb"T{XF_@S#$=*yxLbO" o'S͛Sgu54n{LgDb[Ep$_'C LS9+|G,IIl]ݿ˹/ UϿmT%OOCJ>2CO>!{z%&O&,PxUVA^:,W@џS~Lӕg{ 0/ yT3!QA']'>q6+M0.r92&I#{,_07iڥr`oZ"żVf؝ WlgZ'b7l͈Qk)W806k2oCnf#Hy$)c @)ŬNY~= FWKd Z^CL̶k鵉MB(QJpO| &%Pu>P0:q1K@i uJ+ʩ`[bԉpIVYSN]#M&Ƥf W[%R-3 ġ.}Ԉbz6:qk~1cd98o~ZL#|*_ZV’P IX@e,Hn Bf':cn;=|iShYdϧB}6V:v`X4LK?͓NYPC\ʋDHOc yL4[ A^SI4,x) USxU ƆB*#~nOs^lt`@1BUp6cɞd3!iKB7N_fiɄ/N:!aatliS߻]4o2ƊLx9H{.gPɸferGJNoCFfgC]fv7m Gz|Z3{~wů4EP~8K#_vG/YA8o(L *Le%(.O/*i]SXN@/0urղgH9N#w_ 8ǔ+ P;,ozrR_Z ƒ2N/0wc]f4vP)@ExGsRH40|^#9fE^ORQp4 x/;"p}Gv&?.L㳶􁇍Y@ߗ#= -CWځ5$S;Ԣp^0uo{ \lwIsc- IfUDBS~j(EGo=<Dž2lظWgVJsQc!lZ(B>B9N4}G\XIП7i?u&nd(t \jC'+8Q4Nͻ N:Yrۣ޻uG_"UOZ,Uѩ` b/kkC*="Z%_7ٕqӿRjٖ,A g8,A6"Ak>Sb0g)*)B8-(kZqHPĶd(P0&7lY9].iޑ|V*k4Cf(Mlɞ0AُޝJvxNKx%s&Ε~Đ"IB/VlOص~( ۍ΋( FU-0cI lt\Ef^ȃ43rh̉ 5(Ή(I)87t ·`hh| Z-mr]*9ӬÑ{O=ʭиOǬn %"QrF$$ul#TM=T:vъ*u{Yy$q ΀rs̏ۡ&cCO%c) AK ty_pVף͚Z1@!bC|I_پеA=BzBE!U6KqI%Nšh{-io]gt@lp)rAlİLUX3iYN9熵̉ObL}83{wQODUd^TO'*oEƹoJ0"M_J%ByD~uNjj&y-ݴҟ#rE©$q[‹YxeE M; 7NI}b,ʻơ0)ŏ\8ŗIxMnQX%Lqu?'J$(rɀxq8%c hB3"o?C \-$ њDҴd=pqn >agR7x#-jAUjŹE 9~; PiAb%FԎ#\o+8@ B5&Ƀ"2D!YqJyJ"hN ITK?JA(*c$Oy?jY2@;E;ZL.[ۃPw{G!Y\"m=jr(.c_;_^D eǻ=Vwݎ@Eq}E߷:ߡgM?(cdS,xE+7G᛺.u>Z4dXU$Ze]V0ߓf6Mkw:vkN8 `s(Hw5`u&9v42Ébu^~ Q mϧU>]bRXIAS$WhXb@n> H,OTT=Nѷ0e{* p`SV@ZAgjFJ e@ ԊSt*񋫐*rZU$~ *|ߨn1fx b+#Z F?bY "vqLձb.pRHa1+o`/O_}61[P-]k>15y8]c)Z(9dRûLb{&ujƣSMe' C'b͡DU<({=gU!R}RXlcZKw{ƨ:0f. פn1(p8y;@|=(yPWSok̏gD^!`5s^ya|-HU^N]AIzp()gGcFl 7vz4i( [)*3H.?zμgwެ%QFvԘ6{"*v|D|~Rl*vtR&߮L}xh n c9& @)3N7W2Yx[6hq-^I?e%:]܂ރno%h2P$N~ S6NC*H-g# W|{Q[%{ 럝:fV)ۈ5jN6,gi!V^K%]^P|ME`a[* n>ϕ6 yi)#s=p?ʅj 6+lB#y2Y N7₡k(PLpkGr BU>}ˑT3L1 =lXR"/h e"$\3Vq&-њǟT?m9ٰ@+=$70ŠA%]&? eL0mҾ|tڜH׊* iOSb*vI"Ka8Ӭ]{\_ypGѠlq"~CSv(ȵcW":zT)a~ym)2U/dZψ4bdnCX҃l#}ô xe61鏛7M[Fۧ `C1A О*,qB ,_ɰq*#Ul55ԴSңijB./2lZ$u.2Ɓ(H\0:O33 ]+*3j\Ig S5au> @5;ot~\/=DMcUәΗ0V2hʙ*'\Jl,Qb-#XRh[ O2^HI.u׸| kNfk1F2JM}=d07٦q Z(:5 x<D>|B7ܶFLUKn4!B+C*;9E %WdmG8{e3V!oM-w{;OBŭ?CxKY#fAx1YFh߹)u+FȬ"vWvw{db qPu>=H_1>WCC\14c[k)J\k.fVSɐV/DewwFO㿤=$/Z]l/wX뚥E3gzpO|I1L쀛}qvÇb:21C7>};v?[ԢrYks P%I;T}ii4kI-D`K9ş+M&P^@0DujS$Sqj%NX]#y?GwKza49KǯJaƹ Di4exm<<Yj:2BIux38XKcL>g+V7E,LgofY00vW{0$($p>xֈE*bMar]&>i[,36f)9-$ !uXedZxofǣ_7gXw¹׺xY>v1Ow0Gߧ֝3sh*% fHipu0ATzRv9[X.uc45UmL'+ms*L&jod'NfrA1 ؗa(&2@BF&eLl =lVRޔ"m4;>x8B/;Q%]NhJ8F7* nsgrH8uߒLW:(a ;gm/3' 2i=vB^JRVؚb+]r90oU/-+jsö87N4NۏxêM?,Z7(Pvfc{4N[)l.m-sBm% #D޶XED'f}qlP"1"O$: L꺣ӁFK cg:ᥦZ_zjtf^gb; z*ũMPLȵcEP9)C S)#NlJiS-M#7jЬ,F ID) raB#С#'VPf+p`?owL5h>vEt :6~VuK p\_[Jpm0tHdiPtmJ9?|SPqv 4aZG4SpBk&};{rc%eawGR,>ū)4OlPUܘ6`ݏ#NNp[V~$+E`C2@Z~Sih >QJ?;ˆ%&h{9M [?? XP83#!ԅ\=`. h9G's04&DhYwq&tQ({[ٮЀ\⋜s),m)F*'ˤ˭Ȗ9L{,>r I{ZR24PKA? r#_=U͉>4S8<0 k [{'y;H Yy:< :!g"7mf\ƏH tyJxРfnR!"%g ߑoi=d9&9ywy8A qsvۈ6t…9md+[ilSx0NfOج(@x>U-yQV+@? %o WKݑbG2Y0K܇XulMlZ$PZ=.M2&P%xJR7$?U ۑKX0!-݋>~3_eD}0 -"u2~y#7я»BZKlQ&P;%(¬}YY- I2QG / gosz{usCER.Z%{0) .qKhTnf>aĊ!]LyjՏ^&ҹ X3į%8iB C<8Zj5F͂\k^" tmɄ?Kz LoDK=qL QdJzu|< ):o6)aOmu.ǰ Zi^Da}COXS<@E^pAϸlXۗN2V6e hvCxcp:ZA Vj^ծĠ*=kċ{^-̸煠/o[*W/=FbT*VAR7gHOiYjRB ޷<wbkz$]ݹAuQ $ (`~ON~M5^B@1ntV\>df4t - 5zdn.?EfB! 8]bDW7ZT@X̉fEtU!i}[WD3Jk1f;0<ñK.s{O,Q ĘE垿?kj W`U rbyCzSW읍W ZnbS=kra5jDZRi]I61^ey? ]̖(Y5aor=2k/iz+ib-#*g*??.G|$cpB)x6N'wCAMSƘz/Fo|=tPMiAVƿJD%ۑ=vK9Y7L&1?ތY#lt{ z2ykNmϓ;VvH2+\FQп+H+I,ջ}qwkn&.bfT 2t;%{@&ÄyN9d@!nN>Sɺx"ӣoY܋MY/o3NshS[sT,9a6% s36-|L mE`QB#{ ֲe %#Rhv1o +0(W.T* ECШP1[-ХlLƹzZCmV V4v2Z剃pvJʶ4E aF'Fnj}cet0"cYF?VVEC>)#/S/F\w-*Lhz^_Ka_>Hzcf|Xj|`|#)]}&C9c6UU=+ù'-!IBƐ XWzY_(j!TBU%yNt:$Ϯ.6bТf^[z0QR(kqBL$s ZwF}V"Xh9u<G/ _&DzaJP Hߊ*Q\_VRwpL Y;|ID$ 5أ 4$_BHZ{?u|X.ȰOiU8c\1ZX¿`YcZ6.yrCa4ޗJy5|-:4 )!S xF0Ѳ aYhN7tPHxxGyV44ӠiC3U RaD;cD05HM^UODFEdLgޕ&e4M =SIE](87<^'&2t7'H3] Pg'ZWs$˷_ lN6V=pmު3vY=#V3}Wߢ\3dVΊ BRa|zuXl4$zfEG\8 M=/-1=\L|uOK#VK~^jF fOwOZ)ɗTgTѩ08r~OJ!'z47CD&e!V"#_I2+w]7Pz!A|@J^ |Fi۱ ~Mo[=0GQ*y5,<-~`ѽ){5q[/]GngDoi*+\|ɞ6$!ϳ$i i[^6F[Kbn_P5>tHV`؄ .f_:L6c&mr'~ dhK˘Q:^\<@]wc[8Tٽ\~/EV&#4 pu\^Z9kM|톨V 0#U l AVb9ϩ2R翵DܔCĆ/i[-ڲ>RPU:MW;0Nth!9SRMCV:S]DYVg;#?aY )F h0.Gm;%2*_(_BU=mFǑ}')L@ ++!~/ lVaPqv'dm%7]t&a)%ɪMy='*ɭscn..*8Cdf,N\GLt[E0?L=5 f ~ Zյ Hbmn@Mx k`CfAWE]*aqe:h(4f٘[ ],/ߋ=r. ɚ'VRԠd>zciEbgQ͒Tg/"Lcm bɁiiHԘb[$Wl\zbP['uztb`Z}8^C{$(+>G,0z =Ǣ8=r۶MJ^b/?7D R%,M\^ dže}$ ʬBm ub $ kW 6D5*S[Pyyxfdf]_mΫ+&^uސ9&4ląy5؟lcf{jW`Dp#yL*^KROf 'BRoR4ND/Vi|'g4VZ?tR֨B跅riQD&=h~|9S#JS6:cqT0p$M=fj딖%\gΟuf ڸZ0/[w=h>#/đx8 g-E9í-<5lrr)ߎvG"F&G=/`XgiϰQyx724}uXU) pB{S[Q .cL+57ΦR6yѳbץ+ƹ_j(S@G5(nYөˌ_Xf=|`yg.*_,e>ĢUk 6f*sOW}aZ_Cf ThA%8LQcTiUeIM&*PgϬ|&)N^ p8'[OJa-A4fS*`"$II7c/'T7svx3(t̷x2&!}z+F睝C]TƸב̙4.Z-iP%RhH'y&y5E}} xuz7|A#3YlAosel `4")8jEWuHJ|RN8p6|fVzԃƆ:IH%jm cQ٩](3R)x5Y\ԻƌL8cr/0\U aAhq5A۩/=C١6e`@?v1/::EnIGٶUO\B`,!@+m?ɶ+95e/bTJ2CQ`DH-X0Ě&/eD%h#YOӳ99*߯rZ9`|K!nȱ *AdS/7b )`Jdn'F"͢B0ilyT$ki(4\k$=ͅecTo^拢(Oh ӅN6O+p  ,9ؼִ6h;$3v|m΍1#%kAVo+";f37LT[G}*#`ӊI6)wH ZTd5x6Fa^=qW5yJ"p8DN>=2O84#SөMQb$z+P ~‹x}3A'j9Sl&ŁٰFו.DgIf4*>CXp퐨 s7oc,JY /,:KJS/q!&E2#YhAkDp\(eRA:xg`!9=P K*D^17˻lݟ޻n2ң44I<ƛP8UoIv F1-3R+^Ŀ{mMۑ@\E )E$7h\Y˂N̜˪`RO93[k>t\ ߣnNj7v})i$w^+O!.b#uLdKa+pYDHiC5h:z.˟K-~Wz`n;=hۨo&.6ܬ&.W d\51`G<u= e9iܫfIA@ |o8KHvT)nDsx!;IYب<.X^վ 7u3/)L2Pڎ1,Ȝjw-ƅ 0Ȋ.V  l|M'F~֡X^ SfCi^5 *Ӷ9=1!*v=^DLy*1 [Ǻ,>ڦNy^}x(dD>o!5bSrWJ*NZ6Z}c|U} N|bgx*"5?. a3]1 ΅ Scأ̤B'>bz`B@XؾC6WUuH,( ,uoqQngk@E3qʳhu/@*4>T.)?9G*^@SWl|ؼM-}0PY i$dT;kD IR[ޟ-y![Ɖ-TaH(ݦ)[ӧ) {:~RR?[srnQjnGK]8̭4}RtT6mm3؋~xK< Djb.b3^k%K]#! [k X;pQ#Vn񀶳XoPsN5 a< n\Q0 :*~t&oR!շy sCPo%*'vXyd[޸< FNE`e\HVZ*'E܅:H<=Ie~RHCR=e(ASj~U$4 3m)OYZi*2+VBD국7Ejg6RK  $Sb(8-+z]'傧74z/_~9vErz0OSK-;_͎[SH~xNy%єReUYw\R Ԑ6*o?9t)n I0*|v0AQX8)jn *vZPpQC~p(vП=` d:4txB(Ӫ 9Օi|KW,3;*?-jC s;{$cK3ǹD( W辀o ! 22_Hu.!dB#~䕑_e*D^7MkrCQrKoFRLp{O,?A^g/6_:")W'2e6n1W[, ]Mm9ͱ A`G 6 Tu+߈ERo3`!K(c+(F5)鱻kBd`m1Bp7w&MDnRd1iJdpJg-mBB\S^- B|n@L6:B0𫡥x:0B'ERX>Ŕ)]wH#TdY9YuzL: @}0X`~탦=ѢgىE+PDYG7C4(U Y9A8$hiEN"քpܖ мjW7d43N!%e*d&%7ly\eh#ȐWKa_0xNj{#:LrY8@IXT B%+-*T 8zI:AJIж Zut6/B*CTpCGD|bj<1 e^Ub-`EFzqmEn(ܾȴ 1EO_^Qf-=Մ?['~71G8Gj̓jAސi3pldݞԷ WN;A1? 9jOwJ^tzfQp#sjIqO  ݐrb!r0cхf63+tstk#Ahd`ĪJ?4G?C)8FN?:gN%qU*.*f 6,6(7 I"" KȽPKw 򂳨>sH d̄g[K wv#yYH%t:Eh.|i~>f }W[uܩi?ىXE+\hCaq7Zu_m tD슚4( ʵ48~< '2ӎm^!.|7k(0,c\/f{f+^#j$3 [T#!FBm¨`|lmp0R~ *;Ӓ5y,As?t=i(q/4cҘ9/zxB*~[!T5E3%H\]g׬z81ac%|@9~x6v:nj}֑e}´kN $1!3fYAfG*"c{=SVӾpc@VN,pV_> dOtQ`'w'?BOoY_J(_[{;>an]|b' p?BW1`p!uNlXQʱ&}h(B $xV\2%{ߛ u>`~d2pXpuB]3$I==T<<=ԹQׅ$ǂ<ƈ& *3M`j9>h5 tK$YS{]9@@Pu87>Z*ڸxelG=\i."7˾Dr(0*ǜ7hqU?89EF[@rtz wQ&6R3f PYNd D?ShK5hҊ͔VjWi|5N ~qϓi0@._M: HUn1WwAiƿ/̚f\C>uVF|:lm2C~M,sih>փq()GmZ-xmUY+R7`)g1"1}Qg]M± KYꡠ2umI^Ӫ@ '\Kqb!OW?t SG5"Usn``Mxa3! O=%ǰ_"g͚*< 뽒L}W镊~M Q-2eQ\k𿍔~GV|w_xwe%Q%{s؃Uú6P4Ɏ?79ͯ@CS'VX]=X Kc͛ud^eWo5IkSCyJi:\~4,Xy[ļAGwUͲk`m[ݥ:*$/ HByW{ "D] OG<%f@m|wd\}3HhwؼkqR%l|03 ܤz8dJTY^ڏBdMHN;y]<< m{y+aH]Yv~_ZM73.[oȘn}+?5q)Stv"[#4T{x=m#6ހjfڀtLȇ|:`|8L/\pJ:Z!{3 U{sOE|E̱/ 9IIJ$q0o(pC"_8_HSV 4.Ez gH{l/֭]c3]s 7 Om\a5d\k2+jAho%F}cʪHEptbwqjp2RZHzlF(0#SC $a^'sV󫥁k糢rB`\fΰvʼZ;g=MFMˉDby6G- gx܏'LCe}_ؘ4B^lZ%Xܥ$@g:KTa^WȺV6.' DPpfv1>,{5فwc/el:a3k8O3$2 1Gɔs86_gD!SZ8rָ1u|3fjowM5ZΏAlȬ~Kl}pKK31~Zl+F'ooض0~P;Tx-+ ^I&>+I PQ(|dfT/r} nl εF8!~FZnȯXq- '&G1UW yQ~o2Ae? ໃQ(f]j _Җo",_VL#bd4D'v5)L#?P̦m캊xJSpAYPܪ+lΟe~Co>{BAA̽#nLC:)*zacп7|1@^oO*ew=|tpɻ1kEj =^:]4VbO*PNs6PTQK*@g8J BӨWa" 8w$'aRSW1V,l8jp垹#j9j| v7Ӝ/jva䊝0(uʓԌ7 x,o8_܄ͮyXE:P/Gó;9- t(߷oUYe *ͥz,x S(+&~x5%N5: ;TrLr0ܰА %N6 VfXsF-sDء && |w`$)+wKv1 lTD Np;«LG? UGiL95ɉ A^\>N2[)*~("G!STEW{]0ȅ7ZOw ĕ6\cƞ7o#7h%tA@޴> %Pc}Hq1vhFhCldL= #HBY0G!G+\"R[d@MQ]fCV4_+|X$QVɰ_ӏ/2€7z_V=sJg#7.%YcOMrj;/ tdْ:/kM*J^"_&Ah'*Ԗϭɐ؁eisz)Mv($pWd_ lPȘxғOa*V{ C湄k>޸WC3>U8W~$;jNfjW7u3U fb+XBW'uO'*d=׍7*,CB 潄W MyNk<4-G&,"IiJ3M+( 8G$vEV񚠴IQ cjjU>Q+%[f#D_8E冼Qʭ Ymڜ( ?P`2NnY⡭- "vg2ׄ ~XNu!׫|rGk1lĐpų~Fel:_3F0Y2c6SElW&NB~#)˲  u!') w7*5+%f<܆Uhg{[Ps:6V.I=x9uWF\,q~K.zNEkM&r/1 qti6t^dҌ=㞞l=Z7:sӟ}a[iآH&tO¶^'NqN<ۡM! SGMidrZxL4ٳ_wWc#g\i);~ ވI{ L`ū"1i4E#9NpSqGXT5^E.'a"VT˙5WfuxRh* )ֺTZ8%zFMǕ=fҠR=Ff⪯JJU._rlYuubKr!b圈ώPD)VT ÉYvEU5^YWMH?pMYG47ZNpRw M}Q-6ڽZ6-NF:5fx8 /:$3-؟ow"pB wZU6ĉ)H'R띖EvϰD,2< ۘtބ/DWCoJ \ A 1èF+уÜ Bp?b79X8pShOL7mky8vi6 CgMU #z*F˷vAp8VU>m'+CS>m4#k=ң0hzn )^zx>OԊ~۟m`ׁi&ahc>X2zL ]s]λgf%B_!fdeJN3q@\{^hc1~fxzt[EoT i/FYHoJt>1.C=~;|V}^M;^2L'Qc>em.uK+lWr9xPR 67 խ1^\W)-)m'bFy2 i17 v1 e[1Ju^SVlmk*; 3ARF}RP\k)l8e.ICmeLdxN@[8opkTĬgrER $Q xܡEmUF2!R,y]AENLLHs@n`b9ŹN.}[ͨ^a5sZE!s =l @?xxpEK. oUxՑnWc,2Y%c(D^!ZE5Hh"o;%Kɀt"ҵU~ [b)64bϠ0m ^FBFE&kE7Q] OePuōo,yX9Rvcv%:/]PYzI(!zddJ)8aߍ,Dq,ݵXEM{/^.Gp%kv}LXCaA#1TrUy kaG;O#fL'\FCQ}6=RƵj)MJߝ̶~(j RmQO*lؐOt"=$ Ҿ.rs>[Xe @LdNV9eoC`fh8b< nkÿg!{/u0)\Q |`[K6+[93j5"[9нJs} <ڇLBggvui&cp<k$__DgUV_fx$1yVdYWܘbpnC|f3ȁ&zH4OOhRÐFwdZȪKlf&{ "iÞRbRZmxykkjY :0ZD\lV*r'3ɐUmpG]k陯s Ǵ{nΓx5u;%IU5@qѢzQ6 , A+֯ĊLhg[N$* ranc`¹5'D&XѬ#T;YD,.zce}2X )I72Glk|7݇r[y,T NꩂKU{Ve[ L'r^n5|ݯ+5' Ye܃)06,wSԽ9z;Iwb^0 դXxSy=rT勳Hms_6_MFbԋƨɥ.lY`>),P ^n\]sg";hI#)T+A ϕuP3nD@ܛi,%"`^:zv9>!soM G^DOk[%_,:WטTR oTXO犕ءHYn!(yOxʊ ط:zJ}$#"6 ̓ݢq"|~q KI)Ns7G lŸ|Lj5굙no *11''g>@d'xj1v"U$fɦﶩ;uX=tꆟ7؞Ey"GfWGE$b`w9/[#CGϽ\My+\ߧbO$o% + T"hp Tk%-b]\z/lL+݌שH(:r$M> @bLH}kL6<;//Nʷd= i{#w>dsYAXCl!6 0BrZx50u^Bd>Л^V%s]a6J#d{h5GdU˙YLcU4X/$m۽ Xj}@:IBZ=,X4;QMӼ%Ïs{KQ[!ll(29hQXYJ:i9ne 5 5 6_ $D]~"PEU_j;ӃPwj4*2VN|&8-slJ;HPϔ>o[k1#ȒVYHiihcJHx)Yk(EsQܽ[RrJyS91Gl/v5ebmؗD6?T?抹}_aZ[\s "2rCRQqp|fk{x[ *3?TcKΓQ9ny uzvte_06ޱ=Kd& S4;`<`-~RxfLu'j{I1J"h?KT+bsGM^;n?uk'H+EAVwjPh-1VB档IQJ~E DPj܂\@. p7B;V1yFºl#nU1o,l̬T5vq~آ%m0͊ɖ,dn&Я..R +x RvLeB_t0@㰤{G"#y\OwJqw-j8nx"pXGۃ 1s]6Hl]X:51TΫ0x%f\Ym%ZNKmN9G`OTO%Lt2ft w7 bqcy9%AH#S!zss֛U =@D ؎au[Ռ$ƔӡO .,Vn']e]?\#кJyHq% Įɍ'Qf&.7"cƗn;q+zY/{/q(Uw^\;v(~=i]UwaVx>lfLC;E[ץc˕#'qF<pe(;r;67f-5zc$cIT|Z*z"äGj${#o#Ul.t*C1 x4:^Xړ`NHI{;o?l)=NqN*XP ,þx_T.M6g!=Qf66z#2_zR 㡠J*g$Vιaoh/S(sOOݱ{RՄ]ow hvwsN .D̲p(RTcke)?Wgٍa:k14gIUOsOO>I=8̄*|]W05-N9v÷#5[JN=p-1u,UYǵrʔk_24 ZTLCaLh)=iX ֊eDzU!U3 'ph$\j3U* t8/WH[V2w-2;QJ5ՠՕTU/ ҥ-aB:HKwXC s`ӝ)oΥH nr.kom_{;NR܋ 1niۚ+n-XC/_`Fdf̙ /–Yxc!bJc4AQD҅ Eý PJTyMjl],vdT3,YW9 `:љI^=3k$UWl>1eDTu&TQ"߂+hPA+Zkec" Gխ(ZR].+k7r8ϐjZl_p#;6"u(lr`!/ fɛOEAd"IgUps;֙ۡ@)0n+mĒ'퇖ZZ˘?yl/֫玼YA] +:֛js|._1*BTcj6I۞sk W6}^`=yz'XZ(;St &VQO=ӊIsEac,6( 4 SW U0;K1JU=ӟ]ɣIXVf49e7[WU2 DlKeӳ2/q1Sk lŵ|TJH[^xQz$J@}*|֓?jVQTސu; $yWq9A? RlU;z\指cIP$Ρ~O !š0s ;QqA3j`=uXg㗫ݤC>[ɶ P'!0~sw%A _%ڈKv;Z1vmV'IN4c4`=_$,E]4G ׃Tt޳1w1ynDrW*&, elMeTie:u:\q"X>wᑜqOg᭴ 2 ęɩ)Ĭͯc-߿$\FE\[oK?i˟c$%i 5Xb)™ck2oZ/˷\aq Dțl6RaM=6|o}1?Me t&D|ql oTgLTb85 $  lٵz(4Iwfec=6{r ҏ@AM븛RY2JPRBc$ ns\&"#SEМPTlGh-fN((vSHs9 $QH29˺KZc95+]/S'|AJBm2Np $t ꘁu4];FHR=- =|([v PhYAOHMaM|gF)ͱ/N ͌l_xFӺ @^;~K/vC^W+_fO ASU˦7YWqEZ~)SXմ`{!Ęxu7PZB) -}G 4#PV}ʙQ vu\Ee;˿Wb7 *3]EÖ83oӠ mHXs#2y#x Lo>x^ *8 =0%dF a!}{ehɕHҶ(͋_ި'd2>y\ jcpb@xvQ2Kib;մ9eh(R I=PB?:pY bx@㙗-+F~徃5KR>f.yuaRYYptɹo`v)|}ɓ*Ti*my%3T'X?JB(F*34ROPwb__LCwYMlȱ k 0Zzm훛F"EX+6їŷ#ŴQBC4v-oЅQA_3V(=HzSZ.ڧ% svd6?;Տ)6?wn`!q;b6ĥ|jt&Bq'_ } H+4&!9ks/gEul]i'Hm4YGma!@WJ04z*e♏pϾ\ =/-(oywY>LF_4M[NSDYid A?C52iAxI!},VקթD5 4Aq(.A޽<+T/4䞟vFR((6|QL@ܬ{%Cd7#ߢgƌG0K]bVGoYyKd07K/٢g2WOZ`əPw|S7pu6WI &^l_Lr]|`o] %kNHvW{aXqS: Ȟ|F8',p\VveihȟFOHct aLd<~J{2+>VOW$ LkXsքU.3$x9T3Pq0nq>a)=eo߻Ksp'v$D)NMazQ*M)Uik0LJj I %d}<\}ho\Pp=m%ˡ[{&׉80Oگ[Jb%_]bTso8mawr 8C1W+xb\dHӑnL¤;1pFI=⊤u4f<}S&ѵ{?-ywsjA9?+r[WW_Гaj;$"k2CXxhѰz콺`Š4ͧTI&P6lST9xJ~#.lw8TY!@/9$or. VíIlp kb=˱b`bd+D3yoA{ 6=Ž1ƮUQ!]Y/{Myi_ 8l`'YŦ"uEÝWΘ({bF@ч eDonZ)?XaoGKɶ_~3ԛ%d[lXn8[F*AS#}MhjRgPR,>_S[VhrʧZ ʾ QZO+_md Sh L >%l#X?~[d 4Zf yIRtc<+=4itNDbZt'fWq+LȖVxmlZFWQzj`̂i"dV<@wW̗>?j?mK\ ["ϝSdנ>vq̄hQx~P豰k0xlJyuEP&J.qFɌ최Avp3o@QO8clt!sTψs}ߏņ6YFp(.> n bqŎK71']}L0o/9[Ruեz^7U,iTͦ/4ÖSs[`S٪L[ g񩆐v9q $ytS ٛ '{Eٗ' Rd^32effN*$3 oŴb͍[of\XD ufas"$So`}]&ؽE8T8,lu;W׻dKJ>o}ipCUGd@ zc#d\MWeߤg 概g2NET^OII.ͼ#)0H4K6QTCӏ>~(0ڬ߇EJX\/o hLy%奄_5W/Ve ҊA-YK6dC'*!;7eM߭wgUk1V9e-s&8.(RxzL+~`5WiUYC!7i-|yKC Z62^ϧܒ") ff-3i0 a&9ߏlT^U%40(8K2wolQk\1G[~n>E Rkxǣ=d2YE%|ɥ?B,^w Q$Rtȳ4fMK W$IeAZ(<%~/qM&i=* ٙ7{ eM{#d^E @z>w:sgU w9iA™b6\}0vrc(߇l8t؄]$TY"3=.[R)91mn/BtLlf*|[F %ϔ6WMO4 G8Op~*qɰLkϊϭ@ABq{9q퀬 9_o$`uBGȸ}YT363 ʪjWsHPk* q(]OBpUj)ˠ_Y%d}8q⺔_<|ҨMъaA?l4^+o'٥|XT50 QZE{Gݥ3mګ>'ǞBO\i݄†2ϴ+[hi  _oGL.,nN*=}ɨq`,Sf_C5u,YcodiD Vq Bñ,ZWvt6r@Z8'w?4x[G_EP!PxroGœ@8w\ZI-1*|lc~0%G9sԧu{n&:_-E,?&<)DK…斦d]U^xa ʛs:vz0]So.,[! qz($3OAQFڎ=k[ {ViTkӠe15](o4hDue/3Ò^?ӡ㐩N58"NV@Um("" fѥn#ДJxz+LWQMB00zo=$ӫ(;w/Qho.>1 pz,aP q1S˶ڲe@a)B`uo=egTQy_[1pLw ks3a,MbV1{NR{xKNUTi:VcC߸psf.P{xW 8o_sg{9bQ 4ys<_i2LE4{fA@8怎aiL,L]*]5t[9</k^Hf'2fVR`85qtӼtr˓~~aƂpLR$)O 52 AY1G(n"Z7Uk1 fzQ+~^'+  _bcq\FK~-zƀgM#F!^Ib +CCO`Vѐ䊁e|FvO'T/lEΈlإP~ࢽc?.K8r5J滋$uϚ cCEC>7HE\N2>fE1Ni?@@JR[ ҇k@T`xS#2t5rKWAYdme$G~8:蜧E+N9K@Fgz Q s~uԚvryxHMӋIs"'l K8z*x]ФGw7qSK-AgM9P4u`B9aNB&"9|3UtDp ѫ5O7"_x>z bO>l']VT.rxˏd!O覐ſӪc{ ,_EQLX=v/H}jSh9XS5O߶DE쎷 L8D8W`Y L?z궳?.L;]jcUy$Cd-"^)3a$'ykpsȘj $}my8Z?M4H)IqS[#ru 78ٌH+UScPHw "Ƅ\'픧s•5^k5POdEL̫:\Bgr+$*HgConlm7]A+Ed/A4 fg)_F6!$"ڳ--="=!NcuEaKkkZڹ  {1(|qSW"lJ7 Uh!#q*c%D8oF^M-$,*{N9xwo4{M%3RZ!q/hycGNv>7|G C'mxSW?\ :=y.u9:&77'_gN"$|dmIrhOMB-|֘=,0`]bC&@OFYK}/]4]Om@Gi {;[ÕsѺ19'{D߿SMӯQ h˜Vwȱܑ_lu03x &Q1JSq4Y;{{<\̉ eaT\,BSZ +`)gr խX"ZKUp3PPw:lT8T{*@t'c^-I[QjZ#'noۖ^%uB(McM:i. T$1| co-u\A}]̴[l292H'jzdY8!<NǹzgޙuL/b_ ɣ^Gr YY2qLXΊ:`^D?m^5SO0_TR;b})ܡ>tߚPoC&[XmQ?`̩6I+mXm{&@seb&#Z;:<з]kW:N!܇sָ,J-gx䮯N7+"wiF̏ [b 2{ bzB=F!Zd9]UJ8($h;g=P>oj3l[Kd>J5嗅>45>L<ҹkeſD"A40oY34DX w Lm‹(,Hw،KFh1#{Sȝl.jHu\3>V^{:-l} >-JS2b{"6yRY( HјC} ~, sS2# e"u `<6HiKeM5Q(%wÒ!,/1`J# H+oARȨ~r?Ȩ/TDOw$b眱]* *M< t=W~ǚ='=gV7Λ|)29ЍU!zF1:~5ݠ7`хz7pˎ@6bE?xz+BÁUuwhL\:~33Q9oOBŽ ]b!&MUZ7A;^D2'^Dff,yDwg M;U(pZaS B[sȤ@LGFN4X~V`hCqR(H}R p)sh:I<0;@ "bUVJo^ i.bn@R@68~b^h̥ L=#k[ǡG8u'ݞem`^LTW gLӿ)6w:zަ'xJ[2;ĿnX+K0բ)llqŦQ]쥒ʓE0O0Kߦ'` exLJuau#ѸvcН ՚YHH@#0jQC} mGË QMvx\_zi΂ye{|>tFL*n5U<.p^YQ2C|#¶^w6!qedPyWv[h؈CZȜ1'_W$oTl1$b݇Զ zE6 ѝ;Hǔ:{vde1,1Q^X@`DhE2\3۫HOy8h ރ#Xӝ*fl\bF- Wm iwӛn(#Q+=tg`vd y.Կ"t 8Bj=7 {*|z C6ty F'!a1oqQLrIآc^>W?#=/Vz=jgGb.#M-3j>YiǀlFد4|tdn݇ AQEϽb8ߕ޴&ZH r i8Л9#<=2]+ĭ 5`sv/(施9NM m-P8 j4$Ԑ| p&(IC)v5}pBYiMv}FY K'Qi) hÕcM#@yx[O޲\]Zi"Rv#* h $\eu+`pq^E#‚_mN6?31=OK:j/ȏy}>r /UޮӌљV_Ʈh`Wr8EB=UX!g M%e-a3 8dZliHiM]nhI%gbˋQ8(\{ŲҶ\m/~@=-WvJ>;7W;%dq|K<[̀-Uw޺@1[?׬A#FXORW@J|鲖7G7>Nr8FgxFN+X L(ܕ!#f{C( ќ胐&E APf"gı5 #6ڔ mjkX.'rLs㭷pyI$ln]4o,R%-lϥF>ZFeBloS Iܩ:&wRo?ϫ1|` @~&x c*3YA8XY>!HG:nQ]r23Uzݣh>oPj[+}.)'Vxx6xkNhX5:AHH 2vOP왠q0x~v@SΟzRx|{ݳ9^ @ NEܦ/;Ԥ]IOv:kɸ,x`C]b#w:k%&NT,|B -/*{ϮƖY_#Du ˈf2>:ΫG~6'q { Ql;s|!\ZULWF2 J^;d@'FIq-aڪ]eVH(O mWQB_49au)= EkHD>C 4au]QԻR+VY':K75يq)V*i$QO&te GLh(p˄f葠z)eH!I[h>'@ݙk@yj#2Cݤi\l]n=(>IQ(nԲ hКM?ö(6`ﰍrV=^߶=|3 [JF$us=0К_488tpQf l5f+۸}.%ys0cD=X },xь?30xݱ hR;POྠY^7#&]mIθҳ IyeL%:Uk1 H%XtJ &R܄csAz::\G@| J-sX?gS}W7K㻤Htnee[ XA\1B7{c\ILQQqtEr%$VlL@RwaZI}װ>)G  @ ]-p16d*x$Ԃ9"{H0q  ?c`l^~I6̩0U| f xJOz_7dupK*M@-y{RGgPEX8a +W{-M*Ǣ%oc_ H5{gHtw ]SŠ; B03gF( qB'm;/_AT!/Xׄbʐ{yf{oK~+TZ]?MH3k>vmBjƯ̈́*K=h&p2@pwrtS.Q币?>| .Cڲ.q`L0dS'5M& Ș.;ǖ^A*_6^dΝGda\/a-f8Ucz*'xf!6vj`f~3{2ޘyB^A'%kEm E.*V2)>c71@h$}M S9 ]4 +]Njc /n u@ ֢ h 2hrS|oɓUr|Ghmd !=OkY-jORrR lM"% [=4lA[x;(|#5Usl`tM8xbzze!sr˽b` ;tb|xt@z%hd[2|mEG)FXj} ;W"x,Ņy{$Z揊^իsuemuig0sA9Ih6t##hq1f7^ܹGKIw)kqDj쾡 "LuJkZ [6_ 8CN,oaH,yr".5DbxՓ?OѵϵN P~v>nh0bGnB &-d0 $ 復[9Ggh̎s^hn !ܓW"~󾰏T64%U/!%‰\8kUj h340c\J}-锨(&͵LTHdDŽ0%E q @g}T-9DIʀ٘\0ak8x.gqb:o̓ȝg+ Y 3Ñ@@An[O IEBL#GroiJ_HBMo*؎:u?[O~yI|;ov&Efóo>(>0& ^A]]jilc7 1);scxZ1Z P=P!lb|?;,SX݊/IўDN 8pt6\f~|Q#F$7\hEi%).C׀- C@I+3v2jjIi~N躗5crq ܭ'CꃺlЇi_ iԴM@8^V}NS7j-^rAɛ5=x-J_zm#">]OvȐd0ұIY#Nl.WkM4"\'.Ee뫺zzKg" g1SI,+jwHglZÜ{!u,7r)S7K^-0 OpTJ'a{"D_d-DGJ1~*ٺ)9C@تQwF4#Qv *N:Y8ypKA5'\b&E %?"uҾA~ L2 \WZ$Nj&''GMnpc{gh*1.4rƆYV'~RHxAVu HQ:Vc% #c!'L ̿# \3+E@]`^J4d!}"LH^۳WnK w&R'ZHGg! vXDJQ1%pHyvNurܓ0ݧO؅?O ;4|tVi PwFކœP],7o~:i6T?tg[jޒfJz|sTV'<1*A>ٛJ&e ߬#Z*i?ы%|tjTFvLMKŸHmFAo. k4l#bQ;۰L.3ѫͦA ]k?^U*e4AL,T 0 N* :Cw*+;B,co]:Eh]_f1BZ 'dLh #ciή%hk\8yC磘~nne~<(s޶+d]ɔ('6 xE1p%7۶!@:Tj|Z)%ruOLi~MlmC {Mj,*fc?h*uhbjEP-8`En &֚9PڨV/q khn1*MҾ߮ΨrEcHkH%[BǓ1n{D00~2*յjm;@[{c#"RQL^(+Aa)-$E#4fӱμNG(v!KH~(aoc~竴/d5ި7;ϙT4L,6yxD lް#H]S/&ҩo(LWIdQiߜv;I\f~ơps09JLPE1* :!"樤FT'ML/F*+`1e(뎴C scnB-dKE xk½݉J)K.X]E?Eg "$)%ڔ^03t>2i}ž1^| n&Y9چK縨y@}45_2zuP 8(X#ZDè{l-IkE60o1iE䨎r+C,}Xt=X:Vic}̥a-,3$CȾm.R)WlS $A'>{ݲ-?f]^,GX{'LşwAfj iPUBv*~~1T=9דzV}ʋtUm `"rFɓ!LJuD\cyGH`T,Pr*47cv$63ZЉA9j.7i?)V$"R7il*bW!J1msjOۆ2B,3?jbc2S3_3sPɻ]aB%R$YrY=D/{$#yӤz2;m.Tڼ{b@CD/H&ӱ⯋t[HM@5%e_1Q7 ¶:MT㇀]ŝFgsA?*3}0OU$@|'Q]RE"qVS5jΧz-]exT VbzܳTA5u8ϧ{8S$].S hB:n[%Vʦu?`6Fj[ ׈FYdVj\]A Iq `0y5ELGr:Quaofz[==fԍ 45Ob󻰓pkqN |!Qٸ䒨(IZ JTaMS3r /pp`34kڞ9RI_!nTx = Yڜwq68ֲ\Ҁf'j ! g;\sk&SX[Us.D4s{EWٝ~F4R̄^AsD[[-R o:[s{p9&;X"K:z lJh|z<n,& :eWQ球?CjR HHΉ1RSuE+ gl 7ʠVGsdI_*@ á˽# /?}~/:eY=@|`-L1zm{G\C?#>%È @F u~1ϷuP3KPBh6wܫ!;$t ]r1>"t,;(GقRS y0 EmitӋ6S`xEdI-8c78̢{Q$'w+LZAotG!9Rπ^"B\-o'jW,IQ`yO>v&0FF[P p /n*dzo=Ix R}m<-i*9O{HX=ϜnYo]׃813=(ó`vөIH-fTҖgFQR믮,gz n(']e@-)=ϖR*I}^}& R' l*_I {LkW0d0!WI+}N?@" mBJXpkMFk۾ 0lYOe,s?^y%}JUa};bTƚ~&7lïoˑO f.pW"x3 !ެ92Tӌ&9exymc[&e6eQ(=8zA2-xţxgxk̈:Zmd\yNDC!T M)|PB*7BxNBZTI+Iĉ|6pp |%V_:\,%wlv mIm8UbU m){e-d^ВȂsʚr6Y/akN0d3zFW{40UL¢Yac犰vӠ#J)3"s4)v:6Z4'(?Hi1U[ݐS}T6LB[3Z,YeVdɩ+l :8jq_޸,¡pdν&Y.Y`J'&̯heɢ V-vr>3-EATvtBµXVvoMmm瓤x:|* HzK߷s1L@n| |kWМ?!$02.V:>3{fm4Gt.\pZxY\^+Yv.i>Ddfϫh gVtRBq+}Cy2@pc8Bw1̸>HGVږ vt}6V\' ->"tB0PƮJUAk2kmUV>'G4Q3Y<=>*K 6Fe@c-ior@l8O)Y٘KSOC$O讠bK$CϽhv+cwM+>ܡ~+7r- P&w}84v ညЭ 8ySh>8 mB!XAd=?Y!9Z588%=bƵ"L4ߏrͶMgď!i+d7` q7ÿ"jBXCGg82*^,:XGdzzұ扚w:Oe0BUyXw[[Іׯ1CJӋb_ *׻l,KX1$ s sZmNb((k'uS&>r"֒ jɤ܃5(|D6Bȣwz I#сC루XVo.ᡝ e,&<4㐑İF2={|TXv>e3®Y5{1l*_ɗd ا2g^,uRߔ=BIĮesxsR;oqW#+ٸ'=T2P AC^ ?RB ~w+IRT4dJqU%Zu'LxVz'l* zCcKlyXe폩:T~4Պ? 32o%=X& 2`[7_xL(xӲusOj--`KxG{KuCH^Wɲ|POVx}9RЎ,5>묖t ÿm'GR;e/ܷ WL[ؙQ`$ Ol2&۶**7.BMhV㹄|ozh#d!6hְH*89x*&CD.6Hzc˼ *+>'^]4[]2> W%T4t@6DR7#cIZ{eVfAՋmlqm@XNdȕ)93eл> ^o c1f=$ULn.$hݦ WŗD#BG]9KTXTSIu֊)EJ?9m&NH\O j"IX~d/֎r&w唊<"DMUcz&MEMxZZiӿJn$xa_B͍_ي jx͞co>2I3?/,:ڑ QNm8h ?ǣ\ tYӞFY_,Fkxͽd٠5o.Ro OdIX֌{93DzFlVL$Vj0C,{M3MyfI xY+N!`ki_,{ESWP2tbSm74{GESK f˲D o|PW\yޝ VrQ[肩 n]۲tc>>KKJX=~8G.2N(Kx-$! A?K? [E@ymcs KMk~Qquo""O%h7o:Y ϊk$*6 \XVm Š (AO ގR^q([E6jDFf'@<%@!1k?PZJR(E٪wċO]g,Q\L 9n K P;8VzրoPwF6] \uts6q%4&:ƫ~Hkղ}XR_jҷB<'%Sʩe.V4̯81gg6I0%CT>s['} J':TCK_e?$@Kl9}]c~1dxDc,ZluW8.o3|zPM NRJ-!`@Ug/SY:+k}%HxǨukRtj15k xڥYtQw.(rғ>z_ e; 4 LLu/;EOa/W^h|½^٨o:Ylo1vAa̒7Ri\~6 (G1ۏͶ' }%$-ӌÙ@2p%-HP V%#ُ$L/p]^d  v GN+n:SHY٣+OUbMlPv.eTճ;ATMV<σH>H޿3e2!5?%/(FygU̓U%R'Y骶ഀv"\ޣJ~h!bFEZvzh˞|]<\ܾ:6O? qNu p$->EPgwj?3p;ǯSOl$FG F&ڜ\'4#'ϒ 4|Kt)Ȭo p"p 'O>x?[)<[gȝ:jAqCg϶N#ok~aow?p_sk)Cz<44m,*^V4AMe@0xj$a4?žS}[[&TAtOSdLd@ |E\ YJ 7(.+)zf<-ΙW.dI-0y"MXgY| >vO0Xe^ͦ)ν޿;Dv 4KŭcE 3\K^-V(ˎ&/FXfY_+1%@v֎߇FR7v{ _~SUrfS9|& x;%D_"-t;30 Mj" J|P* (L@eywxѮtk4Z -4-_9m,L5xӞ)eTіb鰸qur- 9gd=?=@}xod<؃rM,]yl~<-;6CЃVh=U7 P5]='<a{ӧ,H4O71ijrYy/㼖O.7GT9q-VWԖQ~Z 鲿ʃHDauy"o āB:#Qna͵O2 _} ̩mN(A$Q@4yh9+Y:_J "W{pDpK̮fw RrP( SRBCF52`GQLRj"̵Zec::@8*g߾f%C? |>1h^B)t Rd\U翛Rx5Mu_̋毜FY`N &lVY% 3]a7^5ssu=e?0ST L^>^جAYͶ =EEmSӛYۿZn<\gܿ;{q̪+Xh [ O7Fqsׄ mbK!ZB+P[ux  'W뭙myW@a.Hi#k76|Y\ 0qh$٩KR؍H)$yRhh>C KOY/HXk} \VUn-AX^tE7FDpۤ}vւu.sjbP*hƥVd?ަ8z1J!y K=͒h$`Nilh@:yuN b->.I$?t vu>ʽ]zLNZJެ_!ZF8c\:hߐqŸ6p^wu+uxC2TfKSSahsA{. |)'Ȏkq Sߟ#q7 īI s<{1rT:"#jdƔ_߭>2$]X3UZ"Xɩ+5:kl&v~[o_;|$lYM[TCؓaޮeHsGRpPKS_MREڀ/m; WZ.3~fJz3 dN\\,5Fi}^,}1Aؑ"S:d|W.6V%|OwiL ^W+ǣ޷n{d܎&zoG?ؽQsVSI^& iTϾ"*ŐQ8!l")S$a ؃<*>jJyI›f O#(9BhMvoonD}-Lmٯ)G{MJ2,ex`!K5xH)W' Nձ5RFڡE\fDô2e֘>^یteWK8cxα]jz8}zQuBU ʆq,r{4iwةy)[>MVX`w(FI7?+Tԝ@]=ZRBWOЗh0{7OYk SZOm{-{{igc-bָٍYqKb@K]R5=.=VߓG Q>ju[vH4Sᛮ&{}\.R)=J1oaVkBodH5,=tcˢ>T{!ei~Eeiź]G2qyZڣhP+sak/LPqG,-h..8iz00gzQ DsAYd'(oP<eL/zQ^`)#Qu/kRp7g]R4?G~@eQvΉ&oGGݧ n|4||f|2U]x*M_q8ÙT-y_l~ nsm0de,qR +`%jWl5Y@dxN@* 3MdtbCj (.2#&$s!-|+GI3 `ݵ|7M"aٍdY$]( xSlFWjGHɹ IUTQ~QEܩ'V!O9{梨a 2\dQnRǣ<@;"?&S*{@@!ל(29x_\,UY7چvmagڷ~qz Srf|; n菷m,"u_M*ʧ7/8ѣ>h# 9KdO ù1e,p~<#>;+N<Dӡ Uf1Pjjo.-P؂)&+譫 o X*CID}.3XZ8YIUQjvߒa0'~0o|{R>g* V-ieFyKV're:$~4ׄbR *ed#PpOx<ŴD3FD"ʘ΅pj5lEcԎ6[K:]zf:*P*W~Y f7=oWkH,1eW[$I;;Ra+TCmPmH2._r$BnÑ౏=Ea0\nP0A^Ek=B++ %.C}J7,Pѓ]/Ԥ"p.)~|.y2IfD+Bk1W|'?kgOlP,32>Ba$o&\J\T6B0cqff.t@0iwBٛo Pw桟]*{ͺumb-|}׎dc}tqGWxx"tJ9v +k/nC);6byؙDc?!IX0R ėTT[jMNm\PZQˁ + gEܟ&̄U=Rd?ba==)pBħ 1C,e k "87T??ş!mj6'Cl7!OA^Qw8i) o({-!8eQhJ LJ:N>`Q_|wx:!^8ԡ־W^(0?RY蔫{M0H}4̂)ۭ+ߓ.aAeь)}l^ዝEV8x˷ pNՍguk#g1{}J/{̙(" ;oEm Q 'Ax5g ՞2XTEqmɵ$ 7nݣ3 ]T}b~]YG*Qj`o֐ܦajˉ:Tvi9$RcB?*94xg8r%ۯ W&sy3jPlH%5b=2`hUU!jμAN:`Fr݃GKm h3TALjlQ B ݗ8 pfxFIA]kHN5N =C8P@HR2rp6_FcD%A4mXX_s8|8~),HdmDsD~7ȧ<9KW=ŶAno㘐Wܞ PI{gE&<;9׆mB[%MIY0nPtKpUM0PaAz4sem/\G1 ws vj(M#!T8eV{HDg`a0)\|*tքIsݏ5b9 p1GoM]Rb#Ԣ1W'ClE5:J_9D./E-O#oکaFJ#H9#kANUQr4U5ouTR'dY..k(-HM g<pV@}jV9eE؟+ʄX'뱀#-U) 0n@'/@zBr}p˫d#C,s]Q[@gBR qUC2a aAEW*{J3H?rQ/Mmׄ9Ƹ=wb[WbS'%&S:i6|1,JAt~ װP̩"),=(䌌a3$AD'GPJJI q挒u 4ƣu|NS??ފ@r!/to,[r;am )nNIuŮ i.ʎ%҇bdn*eY}Pi/%5d +y闖L6)Q5= c.:^LYM1D;; ] c7%­ʘ ;{@ҺOlhE DC$1!za'iRQ31PL!XSMAK'SIP }y4o<7]^P%HҜ. d?xt󨯸 ӞnyphM{CjUۺ>%/uNeiǗ_f5pJL|]F%4:pmM8.BoCǘ>OV/r51cvy;m.3eî' 5vSު:K蓊˗q]ֻ<:+q݇.mP:t_Ђ LuAkX4qX1 *^.#"/$BSN48Xۓ*6 $t&"Ad`wWzey#Ղ: )n;sy?_L9_ݣSZv.E 6ki[禆p#eTxN gr ѭ2:8ޅH# iA}(oɎ2]] BBթ&5SnBd߰nbۥaAG8RV+"F=}z$jUIjWsNgLG6 ?3`\^}41_yJjA4H7a޻[C}Z:;g_$>CpӮ\[S>ȇ by>Q`g/&yovI*v {Ɍ~lD\EϨ؅_a+,h98[CBo_ Gc TlI`dM2jMu_4r#Sl*uBOcuܳ4/~bBċ)jM| Qz ]pt)52@K6G\zys23"kA $ٿ] qlխx=3XGfY ؼfҰAЋR~)uZrwx8`}=kSM6OiV)WdUDi~TY[q2MM&!=V M-sϩw.:8,GوřG{i(aEڔ=k6~UYśwHu E%`vx/N<] U>:pb&vin1[7&|/Zw*:uRBd6ޙ>,car5ݸzN;}^ώ=bD&j0L\(TQƞ(38f;b@S &$6T&GmǫOg~vSyH>{BG2ImA$ iWw?irI_N 5hf3 {W@cgHz v hf5g􃰚-O}A\: ^>HeP-'P#kߔZ|\u( 5,} ZDR(^OιguW@QJA$ZڞKw"]6ziѲģc JٙUVFK=;bzV '%s]ˑa3nKN<`꯿*@hZw۳[p _xd;F| >TuN~W0+c~FEq >8lh3B|yAuG( ԎYz|IHdn(` =%@$9j@;U.-@LWX |(o.o}&YOv\q%n$=Bqi5bETj2S!C%{^g,稺fqw@-: %l['E#ƒR4?+Ѿ^N2=Dh=;{`fQ}Da`0oT@ܢ&Qc-ʣO_*/YTd%uK ; 2H3Lx\Y}S+kj~%5+Td5BьT,RQ9bE9kʃ]EkXΨqDm@nYeJe8-X]f_8"mZe q`R꛷$٨>슢jKTKY= -|{eeW&m-uT\WgXw<#\TQd$K * YXXm>W]tFBذpn΋.]{)d@! JbG_!P,B!5KPEy·Pd$Aarr抃DZBCFByN~3v3+OAx3y$;˂Jr$ %* ІmɖM5CLel}Ɣ_ ZҝT+HuJ媖Pn`޶j<h{ہDFԜx>#'P.B[??afȣ 3kx9#ɽ 3a?Wh_X,Z;1A5 Żf2e~Ys 31zMTuX2Q++jxGc {&0[8WLW-Ns|1W[+pa|! IX3k6#b{r37%LڲK!n, 3=uuqSJSBϟ#>8/wl _uzyѫ{E:ѫؤ^]_tcBa4R A^nR˫G8]yd%bg8u7]&@lIV$V䅗EXg3!R=|[`e,"v$Bt?L#f}x"Ӏ-%hd icӈHB]AZ(3A$8r]@53rJ۾}K0BϑbyU \45aܠIE@ wnUm%LU0KMGfv?7cj|"2Fz¾7i[R^,>M+3#w,/\ JX6.@kX1[)Khyڿ#$â:%ڽ`RA}@zpѼv\k‡Td{z,’'@jܵP~f~lت̞XPW W̓A_$m |݌s,~azHe[fHGE{,~txڔaX e.UpW_aF۝ Q` ;H^^4&KjW+WL6LD4/*R 6XͯP9geI>9 cY".8Om=8@7r(9 rCvHku`]Bi3jѩ]F!|)Xrr ]wj ^NɉH`CIp^[< f<؄FuMSϑRP5#uR8@ Ͷ/;v%3m!*\2Ns$HXӐ)経-CmmX 5}|^f:*X9ߒIڪSG"Fm$$ϞW;Y1'j=leHZ]2AKQ.hx 0'|#Wn^8&[rsBֿԌ;Ss/cAt~~x)xuDw||0/_ҙ!=?\L^'#٫f-UWɑC'`DƧ; ׮ƅJs%C7Y]DE#r/y'P_oCC@y:[;Ts)o4 Sr,YDt{#>?Oc٪ZgiHKLQ&BːcX䥵p}ڜ ʒ&)_ z~XH UzwU>gu,j{ ڕm{0݇Vp7`CpGaϦ4㙆0>Рȃ(pC@8[0̖zx Ag`JXR 9:Y([$keUKbJ>߂AR%Y=ظ,%ע,+X\ 6K` Hr5|%ҽJ6Lsa@H$4D'x R凖{v)3~$شMn-NP~Õ7*bQP0f;ٟj㘔g-޶Gs|q;^lRRpNI sLUZnCX(_^b$V_L|[W_'QK~kM?:ν \pꓩ5{ռaa%ۍOA6o פl !4Q7.90_tkF"æH* Sp7OZR pe2m硿ܢ_ǠK:/l-rdBc.b8VcaQ^缽`q]̔+^EmN;bCwwm$J.Siz6{NFIJP( v*q~V`RŌ*!zbfC> p`q _8 d$QV~ACu=hX7( N$ߢFax~GREsB}'C`J,Ӷ]t*өg+ρsjQtdm#Y,L7eJv s8s)T%!RV"2{Ga,3$Yct Ϟٶþ#?Mpw%MM4 >rBk'טx\.an/$I<(Jgm$k[\*I1߀ѕksSV*aIStiUVi(}rBid݆m#=US\Y 儚/@{F6yZ/v$uE5juV0 gHs*Co|kE[Xd F_)zHzjz.E*^ޚ^`]%a$$6ۋÁ uiſn)ZWKׅB'0މ~+Ïr<DFqN\IS2CW]j~b: rU@7HZI~=q ( š5zY'`reo"EmADZi.]R3 8Kv&tDžt+ޛJ4w=I`Y.>H.ڏbiA,yqXů y YgbGaGn]l]4gIow]YRSG > JF"Vs)w>Z85y+bM[?<77yR{}bbQB?eA[' \wI5>j2] a/>_t|ohʨ w("J3יUK߻O} 2ڟ|ԝfJ۰˔Ю2ҷ^[i/jLc%嘯ϦOpV8dLvfKQ|h M衶2 @paGG.BH=d0 \ɮ3-[&=2t^z~j&egmvٕuaK}pX:I^=Dր!}':O\Bgy_ՕNákYY C8r4gI DG5B޵L2eQ:JKh'XIe bU$XX#Ohf uƭ nM>5))Hc jk{6U6DD+$%[g2 x!WrذFKʒ%"RIab[f{g$ۧCxԘx EtΆe4Z_r)zSY*$|'|Q41p`W.Z0 [D&_lYޭB'Bڰk1Kq6B03[+U")lVKjYzvy)Qz9TͨYLf ۱",uPPG$*ݕcq5eѽbpHn=cyn^kvr愼[.f $xBq &b! L2A\tyXoMݨD$b5sުS@B]o&V\F*li:6JMSk(FxZځ6x>pxV\S0v i_Q όߥ\ *wg&匁xtV+\M  Zv[oM|7)\$BS6QhC0}cWojny?Ɣ`(~ٲwC$R# 5CYvIrT&lhaC )\CpɱhFc|Oxd%I,Qg@{HvC܀vJIJK>@c{=gɢ (F/i?|V`l.8!%m( 9^BSeZ3:y' h ]_trB<jR3HyP;$3<"оU料@%,@;٣InZ^ sS3~:8;BKW|p"t\]#;)P脤= zݥto@(3byn-6OȮyu{u00M\WN YB?tnӼ16I̺Ȑ1дɬᐛ\y qPFpbJT/IF$*#$фzK4VfUpm_=%n`|"BE@v7/ ɋ/LE-M:wEjbV[Js30ACִ8ӨdXLM&}-"5f  .@Z&<ǟtX8c@;Ka.&Wqd17wh; ,O,cr`k㼾'ktLʳI|:ܙYe-g2AUATwVQTs>nf]ND XNDw=p*Cߖ Z 98&MQM yp/uP?R"bӏRkb![klIp1(3&4~>2/o6NOkߟp5w2Iӥ }v¹W {/ј l#րK+V?ziB;' Y^ߚ.>+_ոW9wPpbe`N3{L=OT7P5pj/w@&a£JaշǦK*r冢N3|P&Wr}pe >)\JUǑ}NJlPRc #5fKr^'}[FH r$ݽ^ nBygE4'VZ= X%FiF˥ى(U.NW$,t%=_Vf4 (VH %l~yO*kk5n+U;pO"a&txF6Eɠ)tԏ)i],H"`'V*BVxpЂP6lp[T4Tw.Fb7w>Y370P!HQ|́ Kŷ!PRXb'o]C@m~7qGRBƅ92]Hp:р)Laˎm;w>2;vV@;#E@CaDQsO .7k}3ė(DG]tTsc8; :ywG?Xb͗/PVhkjqIn~7|eUpЊ8 g7VOn4}̶8sNz [(#ţFyi*Vw|MOQbsl?Po5m^)j#|ZTW8^ǿޭCaul޴@៫[]L8Rل| )+yH%Ÿ$k wà wMI&\#dWU/}YU`<_, `IUE:!)FS4%f;%Oxyo$?hPt}-4 Ծ 2\Pm +ŬIh >҈^_v#7؇_yeN_nVkC >iP7Lud8sfhr&ji5o 9 4W!0(Q`5z^/!t鷏 B㨶'K^)CCG< 7LC  nN}3g^#߹X1IbjYBo{Yg#Ɂ)e!-s|x2 Kq|uC2vi㔾\^:hHÞHMo9YG/#l[]鷵gW56]nAߺm8{ &̞UO"9ڕ8dOȤ:I8^j5˙2I*ե׶-@yHZm|]ϊeWP]Ly#:]K`[ԗŻ@iW]#P6qs8+c*%xUNtrv]x b\VӺ ~(֐$4 ,:lJ @awUzR0Cxz#>9еĞ8_XomnJB=>|:vij%,P9 1-óx$gG? PZp1ܝ#0`,|~EGG>߽34xFgHkxD9aG tj!̟uh/S#[9w%;Itp Nde!p+d~LOb,#14OZ @mSһCָO, L)nU !m_)X8:mϥ%KKWAD::qYx( LxHѪ#KcXZ6YOz! ~ Df07*axFTU; s]=G' 25ttfU2rZ?X U*o;>$l-(Uᆹ<,=r!N`U|Ruv)ow!<>aFryo1Gm+6",R}t} % BIUduAbZ#LMnO}Όו'wX@ub.6R mT=%J/.rof5+C2@OvJ SW DtN^t!"Pj91ȉ X!l͒~K _0'6*NEn,ۿ go$HBk3xha}AI>Kux)S)NŹb4PY0݇qWش"f4d+S ّQ1IvfTן4aDWT2 { 46~b}McҜ!ct4*3wn>j &l_%$]:gXcLHn!JHY~wm洇f !G~(%K7}SFZ:*Gzkލ e[(w=z7'-u[*y2h ^4FHjsB`P|RMˉ;[v6E֗2N`";H;k NIyPMx܏ !O!zwA"I6*ᢂ;P_B=;S-F~ olFƈj DB28@NtSi.Ӯar͓({>"\B|k 4ԾE\&9v} Ŋ~ELa nwXa@39wz(ޙT)5yװ㰼E{>DG&c֯0"*8%BLg9L_җ!U)OAb"۱&’$GUtb\aHP#po7^l֡Q g 6RYuЮJ 1r19p 5SB3Ld~|h,txl K0)van!_+Z|AU kh|TaZ*Wl +/Rgv} m64:'o/h;ѐ=lӏ@n"Xe=ȹ60sx&~GMKu)U hr<0?lu=tQkxr<ǯ{Y6v֖ lH5۰1"u{_Ccn)B~ i$-Eb|w AסH|lWLc.|Z3ş&AenNI]q XvFh$yWp[5x<}vk Ŝ6< URcX{iێRBYރ^Iϻߝ]kA<)ٳdu+\Ѫf-mYs]xh D:ZHѾ57,U]N~ɽ~$bV Z-aySăs?U@CzZ-NRE7ݳ{xH ^KLt0;%Ӏ2\̊JE{-Ӎ QV| YNAGy)KWC"p6ς| en`dHS04"(eTOU=` +d1D8O< B6'5*t<>͡%ܙGf&ue7rD!HQM1k~Z6}9"M"f##jo1OlS)A#ʜt gBZq1L:$[Kx"1'B]ME?C7@8NrJ_ː}9oa6=Lb6ȍ(?YA*L~hC>BfA1&?ݎKfU~'n1r 9Ba!/-Y݇N/j(Oz~@LuuC[$\@,=@h=r# us:ƤM.L7` OeS݀_umjM@؛a`N;2kv BL$v % gnkbHH}>w\0W&@[teHEFFZ#j]w{w~@3I u򧛜0q%)k1_pv|24AGC3|<=O P h!,I\ld1}z"6:ݩg|k|}~QSaB\/e6,{j& KyqS _:XoBo ?&&d&h0j,MA;<$sT`&:R ^LөJW" {Xon#l-}0 ߾?U093Ud8KΧl1za/ TMY|qb[Rb1KM͉Ȕ(lYgӓ(kY.W1snQ;!Ndj+oA/Ch_>C qK2zPUe p?+f 6-^E|u3޲FFf:c tZԖwNOSy^ƯcEUo$=PnZXG'Lx`RG& n;ɽXF_ )VGh!bȩ7 ;v|«px ,˔jIks̻3$59'azNv4=S`xnt±Yt 6{k뱑-;Wa 2=h^{~&[qeW-N* ɝxqU&qP ѷx߿'@FG)nRY2fL/$4 l2"nݤs,G?N Me+zWBd}Q&哪*lR2Ѝd &&cVCf),1nx?l/MвOh2>n)&žvR`A+,aؓɜ粉:DF2 ܩWcF{܆BWRƣdL2By *?-FuMjTά?P^(#z4KECAgpC7c矕{1GYAUR:h:Eɤ lajbh4xp\C#^L@.|䑑gU~h O% mPj@tJE 'rcw,0]e1y/8v q=R͹ fVF;HAb3Hiǻ|Wݭ/p! +k58gFOAE(l:D`qRn ;?/ns9Qdrn&[ XhO޳kٜ //{},sk0r9.{,UVgxh ePf^ώCL*7Cmnc 鸞:y16-򒞡v }} Dž4kf,n2Xew(`kD۲-yA6a3&ORp0ѰT]#%C(VS#=dLT İޥ[ ˪B79I!̯YyVuV.7}<N?)B]!fR(Ro?@uC(&Z R׺~>ʐuy:UJ]&A*pE|-hwђFc͜X~9. /*ýmJw2S s[+yWS%/d¶kzL^;T? zdvoy3VT.U 4_1f5/yDNDiçPԙ!aww $\|f=-Op@e M -Ͼqb>|3(c$3'>/xzWX)[(^Zo31+m UW=o6JVß;r*DMrkJW+ImLBKWb y08>}|m%j>T$BũWx8ŷjhJ|G箂x wPN5X>0}ŎXٿT18ckk Kr\X(t,"8ZPCe9~rKU)q 4:9s/\5A^ffVk"E>eb$'(0 ( !ŗHP\pbJ;)m||vxS%,l"d̽g ?%'OgxLR|hp DfدBcºP6Noc঵f%NE9%YB8 J-g˸P  G9#,-ώ)lAjػUzuENA'a; %97_z?JNb%h33'g¥,'轒wt=Bpܩ S2=#2WsPF+ j+I,~(XL'3Zz/rbDrj TאA [(9)5J e|<nвm[!m I&?y3 l*wvFQCĂ=>*|Q)(F,x8ZMe;9gyMp6ALx.א\{ӑI @B![]E[H(K X37[Q&UЎ{lά8(Ot3TU'K\HQ^Sֹ&WhI H:]3FqRwc`)&ҳL%07Af-АP5PHA {Jn9rBܠҊ{žYe|A;ø5Z.=9M&- }\ % 9y-Uvgqq3x{b,֫F)Z,u+ѽ&V c:`ذ]i+/.uR#-Czx؊df#]Z:=]\coLP! &-?g%"B@)+pEN~AD"H*8<"C@3l?/QN H ݥ% X1J_B4<$ ;tVm21$Y|wU'ɦ iz&EͫL8vu>m S1|7y_.ad)=H2cL8 H+i1w=2ƥ8;pҟdE})/a5V6yaRtqޡgm 4ǶNf0t,D9"xZϧm,*/ZuHa-ѡZr@x29165 0d0#6܃9If_X?Xn ÅoJ+P5#&}ъ w58tUV[d6ӻ0%r~w,* AGvxGʯ6 {4?evLO^9VJx*Ţcī)6{yTgʀE[ckҥyaiE&|[<ɛq'r?{MF'f[ m b6cX>U%Yjw?@; +]4LP69AoLL=87.B)qvZ#I#Mm7"C&wF76 =fDJ1^]&Hgz~oegNToG2β kw+Et% m2+oLe0hae -oABy|1w<d]m3bQ<3hP~&Y}iԀ{vо3J1c|l}" &Lxg+=BXˆBc2{M?ۋ}Y::Ff4ueް>}LX zip;B51|*-I˩KU8:蟎U[VD=]m$u"3L&ea֟D HК}"=')}jM  A3dUj'Ak-Z4lNe_8AV\5_{K$[Q)aneW9 ڗ鉍pl>htKKCVIPxi桰ton15T7HDMg(ͯE;6p]OL$n9ϢG=hPj E·݈R(YC&eoBH%wr˸PƐqd$ U]ǞGٿ%: Z~nL J&%Qr snh 2rU\n(<=9mbqżbe{pthN1 rRjR>iN$soݶG^#C}D*^sʜ+bBTfT&dȌ([eIQE渐! lJ4VU o&1" 'D =%pz*uV" Utw  gG %M4@2H&?WթF ‚{*x$b3,s"҆ lߚg&8c„'Cۿ@c?\ݻF-ɪkj1 GBT5|Uϭp{]|BaXX ֹm<$~ŌleBZ'DrwFD gR9={k8N+},"B;%>J8a &c3}BSh P/GXz0kTW& Up)<%*Yn2fQɶAt_L i)R)XVb5~~b@qaבXN@~ s5ptj|eMZ 8:3rq{N^dx3W1c$ŝB͂id$)$.X"7 tџLuCԨ{Uxz8$'.jY`~Zr`is۾p' 4lc~?kPy)ˢKn[$K1pF +oYxo$gI-_+`if:\]N3/:n -r .m=9]=VDF(&5 ^V/#fdc+bzƅ}ѷWetA/顰q!zT:Ex 25(fߤoi\F>-_ UDDgD8X*>U/L~hFK´gzh@k8i4>oqnd]QOĞ`&EHiv ǚ6GJ0nvLTs X r0F 22E #i͆CDm[W+sruMB "pb#051‚bϤj"sac9[ݛ( G0vM06bͦ~wv5VBBU@ 1j'\UiS*BmdM`T퐵W "Xò}gaTR"iv gVև.nW3 r MtOܢRK"2r"^eGvS{X+zѢ"E҂gܢFH}0q='4XR?u\ӅL>8$UӾ/4H'eE|}x; |E5,u# L\·"TbZXvE&[0  6zltƂa :ox!Rw($CII:i3]_lhPQ1 _ɚڎ+…-S ; &M;#4QqM5E7Pfn ,?je4;wçZkQM>ŝܭb(F|LnR)kl& y9?G|H3Ü\T:3oAwy-aE+>EݛPA1J)nufIv g'iSxl8 0+iC?$Y}dWpj?'6";`-nibvey}G#ag݇8 %\ǿnYfh~I.uKRrmQRQObt,N$8=d$y!- L{UW$B+hb&ճ#V,r9jkv|􉵑nEGMc990Rj/:A`v,s5 iS7KGu[B̬ 0ЭH!d9Q$ZDC)]^ PNlc$Wgi4tn1_4NŐ5F'/bσka|̅@$PR;vLxm]5s?Ebb# X{^SJ 9~I _f5n#9W=UcOu6oA{Chm0=%s-+* ^kW ynEK;XyC( <|-9oXv$Du4%c(4@*{^%i惄o/ #T%Пy9!z"i,m8M0@dX#ft~ݢRءaesAJ4=UP(=uG1>eb}yфť @jn\ZŌ) iS~Tav’&N!<]1!Y$)a<қ&v3[\:g7?ޏArѼ3Fg֩5?+^p+yY~dD18H&!nTH>'>W]րh{t&+sm[ \8H{lGם;8%j ]օk;&Za*7b(3r.[ЀఖȽ2ft#vS822F?/w%=J@7EVP z"1CVF8l+!PņȺsP<7gW~EPi˅^`Tέѣ̧9?{rZ׆V:OvL=\J1lySi'3r"W J 3? 2es%"?5P2SI&Lx1}-vj_CKNJ, )s y?`BJ`"a^M4 h8@o-^v^p@/.y#&<|Ÿ&aZp?}=J0MyHJ`SaȮqƜY'!BۘP+>"ORHryoGa%I`do̯q7' d1I\zv4/ᙣ;kZa$*Rq8H9i:V=*^sوNAmU,Y:#ݝh-pˀB $E hluh?C hR4Ȱ <.h=cPF&7 L \DR[gmPx~HxEyGʅDl&,l!i)i%[wnKn.QgxdTVۺ ٴ'ѝW1Rd^׋u-"*-cE&HyH]7FD|4Ѱ u8E3:<ї#Q8ϸ08& b>Ȁ-v bFة:sC]~dA_v_6ɱ2N.qq^yoVj[Gxf0\ .FM,?H;hbsnm$%K/p\".6̩eBSÃ#jp[]X"DN@l<)G*!&"ڵl6ހ]fgG{>cMkZ&l2+og:Ƭ"tMܲޭ./VѢ,n6z H3@8V7X%AJQ !_ü5~vO Q6p^߽@|A%;&kQO_vC1^QɆ3/v;9{ YU ܅Bl̅147 (AAj*P܆PB.|I4v[coKnq$QhL }ѽ Xjae{@>g1'7\bSN[3/t9$yx ubEeEs}|-4" t*|"L1rYrFz8c'4&MB/hS3^ż )9 .YwFj=Di2FϸZ;-2oX>w𽻰]H NaJ2.d?Ja_scCqJB־mf*68QSfvB}͵+bq.,n@ G[&#{ ̙'#Q=q>B;Xѯ)w.7k>6i !K,A]NAT$`y:U / ^w[& 8s{_YY T&h锫dr.ڌnoeɅzZ*Wm.02}cX myʡwQ<֠I҆?}(Ve$-B/tHujYղ,`>Ef y%N&٪F%q/RKdX=U)x"IzJ@Qw|e6Q+SMYꡖ~O71j' :F;\jyVM#ElQ\ٍ'Ҽ+$J KOsPkK ]Kn;UL6H=r |RMo{5+lq!cE̛&$8ĕ[ٴ&#{}K0c+)СH/C`1P r!¼K[4a;=Fՙ 16 x.I$e(oE\]&W4Z uL+&aU(&=Xݍ? 7-RbpJHNJ&k͈q+=rR9 ((k`e΍|u{аޚInU eh?Nj*4B?R8 4܎UF8V=򫈧W\r鱘a d' wnj[$&M:hQcdctFNFlxRߞy8@Y-EΓTM^F!䥾ea X}5sY4jU'o#c˛\Ru0nձ5Ё8]-Wj%L #Yu@p7XH᜘6sRixEX61X¥˗Zʟe :@r\-80Õ">ޱmo>^e dpMi9,u\bX++O MzVM9Mo]*iت.o4Ə_s:0T|$"%7Ko¢+Xn cxJ-w }]oDE$aRi9'V1`6@4vee F_]g~y2m9{ȟ>M2QN pR49bufo"-nu}Á  ޴hʢr2#)ٳC=.ԂfaE-ldeMZ;\^p1T\!ivȯΠᰢ4骩$6,LM4 ض5>_selZW2L@d>?YZopK1'(V94de埖(ݲ*_qzk0'ۨLOs6BJa*\&kXSaO "۴t9[uǨ>f2j2F`0_og jfO9*^@qa"-.3Aha!#u5d/wo@)p9_R 9 ]rg7迀Swz3X'F ߲ɕ OḧF֣EV^BvD\hb"!sHfSgӹJ+n;S+QrV͈{1GnTՊkꌅ*5dPCpG 5.IM;*"y҇/v0giEd wq hwD3a/#|Ԇpdd(A!௉_ sS ΍t+8]2}.]u¡ɞv5DQ=DOk-;>6p^^H/ۏ}bB_*|chddmۄm?5LfމE7TIп?/Z=^()s1gm`l8NA$}I삖c{|r[\[xA?}:DHH#Q!8tbsUˮ. ퟺq0TFԱkU gf5VKSܳD\fb{PjMY@&u>d\D7'|=MߗxF~.&@(p+ʯxSUW4)p-BMا;k-=ĮIgA~A-;Fw1SQ!^KY7U|x|źe.aBI5ˀ2ޟES#+ɻ8ZuM* 7%\5Ƿ#hg*JJyQ. Iq`ZRWU 潳7p&qZ -J#A4[ѨH3VI}xՠ>neը| ~^PrxF1W{`>|CQ0]PiŮ:{^#;Vʤأ7zX<"BhÅ ntTs)'O*' 8Y6k`'B1 y黼Vȭ_ ȩe̶?i%L{T&?]7fr37Tfu|U#c0[:/-J4B koTwxbnT^:CRpޗ=g,4*r_+qmFujLb_Dr|7`FS{3$`tUӄCls&,5 je(槅Hm갾pnS <7J];əi(ܿTdDTo'zdzd{isvZ$su\>XlKDzckLXS%M%\\T|n[fRߏ8*h"UGH1ry9QMH+ggI}#!~]ꪶ>?l$[TxTϥYEt Z?v{(}/X 6Q{ ;,!R=4/]s,!_] 9slN Js"2~01i͡E77[hv/1u}h}Ps6C,?(YWv+vjv9sM]SNP)\+վdoB+ RK^nbu0AֳK0)pO#حdɝY`x0I2!^֘] E=N{xY- *Pk]bNTX2i_9!KkDTo壍n.?ϯ R^c:95|ٴW Ļ28IyN-{LP9Jg8!%z\wHk3g-:KʾFYe8tڀIJa".v˴j`UUԂLmbF[1k~)Pe;ed<_SG"X;]x(Pϭ1 g]@MdPZ{2?lhHzagb4M,aEp-&V{qDWh ͙F2 2,E)8+NOgQre[@%kԨXu4-](Hؙ}_蟵W%{Hf<4`VP-2GƸ>#Ty~tA+v!;;ZWVkr tik4Zdžsϟy8\y+SߴïSv`\1j.];!ihvQXhF$VdI-%$1ٽ=vkq8lQdťoS=!s  +h57݌mˣl8׋©BZTHJ2::dd&*'@L'ٵ;_DuCA D4 q ] ![>艀Lc % >p(@r\A-jՁ8l@u2:f"i~ ԓל %TnjJG+7U˜b3cRPc5[eӤHazC`hq%7qH9IBct˙anPYÊHg SPh\V}R-vHI|Ο[qTuQ~ۮDu>In`@f"0 h.5+lLBnKEjM9#J_OT{:exfx@Q-qܸ Qwt&^H3eܵd@!'*}LM~*gqG(eIjZDBp1SiBi{73AH\4Ɂ#>h qT-V^m⩴9.`T ]'O: wTAמ^a%:8!n P{q\i5cF_ν~eVWFTkKL-̑e<zک&V;ͪH_f_ڬw&\vs%5r+=҃fsҷw#mݳQ[Gs lkY+Q\9* Ԧq[mzK}swY61jFߜ:SyJn vVΕ`6^52GkbDS#Qm(E6Fo ;-(k aWԯPYG28}G䏦n0{Kt=Ntb>haX^b IO^WdJB9#ɂK n:ڛK3.z9~ )*xޝ;pmypVv7@*mp mi@B{W7A.}<)rJ*(#{H\>j 3br*V SMYZomCC{5p6QiL2Һ~kSw" , l)QR|+q0mKԱRg<+%^m+nyȔI<3чĈ9F#W[>s| ÿ5%Ue7{'Da%; n:*CJ7Ym gĻl+kzvp9cM#Xsf ʬɛ, ONDra/^~ez1=< S.9/8v86p =[9ayS)/O_)l$+FװoRRgohUe:D3o &:MQpWP@mGzዂsNQv"Vl_ /zC5 vxGc2kҚmë?К7PRIFȵS,O"5Gw33ۅ9MnXoE;yBj5V1ᚣb=|7ŀ/d]pMUhxp?m!h#Đ< _>&q~O}?jRG#)`$vȗjcc @Zq1h˂G ϸh]"Ǯj;!>.;WpB]h=D4 >T'$Kޢe.9?d<e h߭:g 6sH:@E 4͔l`LRPc] 3܍oz*6cdD,|gc*׈师p9% n#75ͣ;*4T@#E\(.mMoC;B)129;uZv8dCN1#il3*x,l-]3UحN\NDV  n|?#PR0T . bu5?0j |%G(-nF~!qq2#|H!jDa_g+kG3S7g 8CB)7.ɆǯERLv5Q^R ޸N n6t嵷 D$ϸHPIN'` 5Dh.(& {ID(_p"fEe!(w[;mQviK>프u% 26 n10+ kzr<.4ak\]6C1 Y ytUcuҐ k#- F3\:P͗?xYLd~?9$;MF?UUH#}eڰƴQ?ޯG-q>3pmquu aW P̟3bbqleMAxV!7`}{ X-;nL\q*4ŋ}ޗ) mD=GCz<=,8M JWnU= .By-=@ҼvaG+q+ޑJA9iǜeM/^ WB:Gx{LP@v%lG\{0'kР~³ފUL ~W ߰+֜<d> ZPX: _Ì}'H=EcKJ6X謓`*jgR"j1?R)9I=_)F ^[ԅՒ`ĈĮ:OM*qY@Oeϭ%1ߔ%LR73Sg&z/05JX0^ n# )}NV~þLh]ܼ4#PQj 9!e,Uo :Ţ>`T߄MߚX/읽i+X*ϝTϙ/`yXIQ`,^Gt_y `$^j^^-zlZ5ˢ{de0&8Z9I\B"uar?u: 5hQ?3!y\@$_I~ e~oe(>!5|^nǫ`ˍHg[1X ca=."?p*DzTU,5By߱laONuy~P幇 `μ6EeWFna2!Aq8m)@;R HvkV7= dL ȻoE|c5ˀin5v8T r.&,g G h,`0;!cdh}(hV'y=),0@=J-) ?ZvkF DqDM{afR (/1.չhDAAr/gHrQ}*zԊ&"IOMX{ఫf~Xi*GƕI}P6r#Lx8:wNZPVxz|U8 M k΅;Zlw% =cQؖ}g$= ݛQڵA]8˫L&#f"ӱWkƲD[upR}Oc6Jaɉ@C߹w т'e.]ڑ=2v5l$bKBcԟ귣O[k5eÁ @IX G5VW%B٢ʽǟIG!@y 5>+Ac,f(MEhԵDltw[F˴qWJWt[ow$ }8/,n=HLWʳ楹4OBBdiS(fR2}b>(ߗ<]!ɚ>ݽMˍn `lWe ^DR4}dCK-zJj~Ef40x/y[D㒣,vwLo~U:.eyh@Uy͵8x]#R8Qp+|#@ jXv .#*jN96fa); Jf23`cCzڒ8o)8D Y[ x`i,vLBbt2K/9Կp TI(u~b'3k">{J7.8?]HROVe\8}* >=ZHqXDB[ٯȓHI>:{>wF$Zx3Pzu@ 9ʰh;p\Ԩ;$Ŷ$G=aX:U^If~~ (Ҿ\ҡ2flm<;X+A?5jh=0} 'M@Gr#e҄g׷b 9XS؍|q'Ҵ@rI.Gˁ%n=BM!:ĭ-wu߀;v$6b >eޛ{rxP̜'))$ >ٵX}*i\}'~ _ps`|P~0~n nϨKOۡhw:D `FFc~NV  fMfcC#=NG0Y^*5 KOY2vBIiaW; \w@ʅ#1Z?PkݾUMe=m&{NvGC].J&iugGlUCxn%X"uԮn=3ګπaۇƱ՞*r9I:ؘE׽rXz[4$ h`H!)J rfDOI^UM'Umo+4iÕᒮXpwh7lS5 %+ћm Z){|g:c %pRrѱ ?SUo'a1pI!^V)+kHv<)j1O_\+n މ _@$HҊbޛgm0/z8r2) {a~Ru(,6`$ |:,Jl$Hpu؆6dR$|GZb=[oL| #s?!9|,n/a郄BlD}/cg$5XX2-,+wgRէDOwޔ}oqa˶N\ARjt&ePu~,֞nip[-gFY]s' r$O"j_5_tXq㓦Z, *HJn?γ>'M½S2G_ЋEIO> av)Aɕf4ņ.D}o2lYva^4DuWp8fׄhQcW6C$6[o\'mD!bBܻFU3ۋ4{n͆ZDC_0j^J\*l"4,ob1@<T)j+i,^]JyɨG*9]3S)=X. Sfb?jz헰N-Š N xtRK!Q; ı,t2x' cMvܲ.`E: oe(JL]Rs:&;ϊrWզ瑿il u~C@cyU]g6AjG$!ފB9)Eϰ(f$EZ+Qs'?T@pmɬt`,)Տ:[\Ҥ9,%{ōfC#Mjn"1cwk>yϮXd2S+QK#B 8pIne:Rķ>9*3QPm8y^s-smSO^zx}]σ5!+[mOQJzWsTM;o⦋}K8i8+,/Ll5M K}f)#?DG =;"(@ !QÛm\f4J{Bp{:=0DcmC8*1;[7{A}|HٌDg=14}D[/s1*'(XYkMHW 4W\j꩑6lz0,NE5'R mq{;.SG[cZׇq?oJj ͼwx*t8)xHld! zhC|FuCc q }zUZǷ+n;meV%sNp5&kpW ǧ2F\9;a%Z.`Yj=%cj.=.i#9څ9ǶYJcV3ɗ+$O}Κ;ܽik( V&> .m#<ĕS.D!2a:뉥g<5_åV| }Zw~t\9!WUPgl~5G\=7bh #Rr|҇"KX팑tX#%TCa̲,>57mN#Ս .{€.| 6{*4Iv"Bi*(:+rqoqЉyXǤGYL?ap(fJ|q1h^][)bfuw"'>m1"oM@~#9S7bd ($tYU`2Dk #g`Dñad~چ8ːWG0D7- M؉wD$D&1cO(/cLOM;/[n"2kP@WGz';1 7&ԊA쇂AW(q-Q{l)ݜFiU~EFYr *>HPlj#+%㨹 *ӦU\snmKP01O8un. bXz/[3'3 fa/bb(BPlC4H=\zwFVxǼوBXµޮNwNs[ۼ׆⅊=J? PF 94Ё#dqɓHÌU} S,pVۜfvd^o`}+Drذ2J. ')x