xen-libs-4.16.1_06-150400.4.8.1 >  A bπp9|/$I'F2El*LiVۻCWSiK9 !VoXd=yeQЊdBvYNY{2 <~/3߉`o孧rK(!NaR[.q%/W,1KNcBtabG/ 5қKTAȯmP3I9>אNXϚ#>~oD첿5s?8 +@ aByfIob9e8998c9507b5b47238d46f33de7ecb924556dcae01d35deb2c90f11ae16f072b5ebe99fd347747311902767ddbf94890bbf8de J8bπp9|хk#G=Z0@}GnX=ւ%ؤ l@Zn6άiz*.2Yrƀ o qčNDo¿|]Z2l`hrwgey fLu=M ,PtGqO2$1NEr k P:p@;=,A~x)H:Q$7\nl`}J/I]o7r֒'XNSۓUɡϹ6EH+ i[;P(*0>p@R?Rd  " @' =K{-@- - - -  U-  - - a-Bh-17t77(1889#:@/>5@5F6G6$-H6-I7-X71Y81\8-]9-^<b=dc> d>e>f>l>u>-v?\wK-xL-yM\zQQQQRCxen-libs4.16.1_06150400.4.8.1Xen Virtualization: LibrariesXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries used to interact with the Xen virtual machine monitor. In addition to this package you need to install xen and xen-tools to use Xen. Authors: -------- Ian Pratt bibs-arm-4(SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/System/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxaarch64  `GX p `@ H P008( AAAAAAAbybνb|bνb{bνbxbνbzbνbΏbνbybνb}bνb~bνb΂bξbbνb~bνbvbνbwbνb΀bνb΃bνbΕbνbνbνbνbνbνbνbνbνbνbνbν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.so.1.3libxenctrl.so.4.16.0libxendevicemodel.so.1.4libxenevtchn.so.1.2libxenforeignmemory.so.1.4libxenfsimage.so.4.16.0libxengnttab.so.1.2libxenguest.so.4.16.0libxenhypfs.so.1.0libxenlight.so.4.16.0libxenstat.so.4.16.0libxenstore.so.4.0libxentoolcore.so.1.0libxentoollog.so.1.0libxenvchan.so.4.16.0libxlutil.so.4.16.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.16.1_06-150400.4.8.1.src.rpmlibxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxencall.so.1(VERS_1.2)(64bit)libxencall.so.1(VERS_1.3)(64bit)libxenctrl.so.4.16()(64bit)libxenctrl.so.4.16(VERS_4.16.0)(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.1)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxendevicemodel.so.1(VERS_1.3)(64bit)libxendevicemodel.so.1(VERS_1.4)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenevtchn.so.1(VERS_1.1)(64bit)libxenevtchn.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1(VERS_1.3)(64bit)libxenforeignmemory.so.1(VERS_1.4)(64bit)libxenfsimage.so.4.16()(64bit)libxenfsimage.so.4.16(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxengnttab.so.1(VERS_1.1)(64bit)libxengnttab.so.1(VERS_1.2)(64bit)libxenguest.so.4.16()(64bit)libxenguest.so.4.16(VERS_4.16.0)(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.16()(64bit)libxenlight.so.4.16(VERS_4.16.0)(64bit)libxenstat.so.4.16()(64bit)libxenstat.so.4.16(VERS_4.16.0)(64bit)libxenstore.so.4()(64bit)libxenstore.so.4(VERS_4.0)(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libxenvchan.so.4.16()(64bit)libxenvchan.so.4.16(VERS_4.16.0)(64bit)libxlutil.so.4.16()(64bit)libxlutil.so.4.16(VERS_4.16.0)(64bit)xen-libsxen-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxenctrl.so.4.16()(64bit)libxenctrl.so.4.16(VERS_4.16.0)(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenfsimage.so.4.16()(64bit)libxenfsimage.so.4.16(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxenguest.so.4.16()(64bit)libxenguest.so.4.16(VERS_4.16.0)(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.16()(64bit)libxenlight.so.4.16(VERS_4.16.0)(64bit)libxenstore.so.4()(64bit)libxenstore.so.4(VERS_4.0)(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libyajl.so.2()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3bγbγbb@b@b@b@bzSbV@bP#bJb/.@b b D@a@aaq@aa6a@aaca@@a7T@a,@aGa $@a @`@` @`@`E` @`` @`!@`@``7@``}p`\{@`KW`F`B@`8`4@`.V`#`>` l___@_H@__إ@_إ@_S_$_______@_"__E@_i@_h_d@_cO_[f_X_O@_N7_*@_'@_@_{_^)@^^@^3^ϧ^x^@^@^^^{G^r @^j$@^g@^_@^Nt^K^=Q@^:@^0"@^@^@]]]N@]@]ʞ])]c@]@]@]@]]fl]fl]M`@]B@]/ ],j] ]@]@] ] ] #]]@\\ޢ@\ڭ\\@\@\@\,@\7\\N\@\\+@\\M\M\\\@\}@\k\X)@\J@\I\A\?\=@\9\73\4\$\l@[H[k@[@[^[^[ā@[@[@[9@[v[W[CN@[<[6@[0@[0@['[!@[5@Z@ZnZ@ZZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Zz@Zz@Zo Zk@ZV@ZS]@ZOhZ:PZ1@Z.s@Z&@ZOZOZ Z Z Z@Z@Z }ZC@ZYYYY|Y@Y{Y*@Y5YA@Y4YYYbYY@Y3Y@YJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"YY;@YYY@YtY.X@XQ@X@XۡXg@X@X@X@X @X@X@X@X@XXX@XXXwoXs{@XlXWXRXQ4@XEVX43@X.@X*X lX&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@WbWZWZWZWYZ@WV@WEWBW=W;W3W1@W1@W,@W(W(W(W(W(W#LWVbV(@V3VJVxV'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVA@V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUݪ@U@UnU4@UUK@UU@UU>U@Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UU@UUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@THT?@T=@carnold@suse.comjbeulich@suse.comcarnold@suse.comschubi@suse.comjbeulich@suse.comjbeulich@suse.comdmueller@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comguillaume.gardet@opensuse.orgcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comdimstar@opensuse.orgcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.commcepl@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.demliska@suse.czohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjengelh@inai.deguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbwiedemann@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.debwiedemann@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comtrenn@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.dejfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.derbrown@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comjfehlig@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.commlatimer@suse.comcarnold@suse.comcyliu@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.derguenther@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comrguenther@suse.comcarnold@suse.commeissner@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.com- Added --disable-pvshim when running configure in xen.spec. We have never shipped the shim and don't need to build it.- bsc#1199965 - VUL-0: CVE-2022-26362: xen: Race condition in typeref acquisition 62a1e594-x86-clean-up-_get_page_type.patch 62a1e5b0-x86-ABAC-race-in-_get_page_type.patch - bsc#1199966 - VUL-0: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings 62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch 62a1e5f0-x86-dont-change-cacheability-of-directmap.patch 62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch 62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch 62a1e649-x86-track-and-flush-non-coherent.patch - bsc#1200549 VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166: xen: x86: MMIO Stale Data vulnerabilities (XSA-404) 62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch 62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch 62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch - bsc#1201469 - VUL-0: CVE-2022-23816,CVE-2022-23825,CVE-2022-29900: xen: retbleed - arbitrary speculative code execution with return instructions (XSA-407) 62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch 62cc31ee-cmdline-extend-parse_boolean.patch 62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch 62cd91d0-x86-spec-ctrl-rework-context-switching.patch 62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch 62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch 62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch 62cd91d5-x86-cpuid-BTC_NO-enum.patch 62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch 62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch - Upstream bug fixes (bsc#1027519) 62a99614-IOMMU-x86-gcc12.patch 62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch 62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch - Drop patches replaced by upstream versions xsa401-1.patch xsa401-2.patch xsa402-1.patch xsa402-2.patch xsa402-3.patch xsa402-4.patch xsa402-5.patch- bsc#1201394 - VUL-0: CVE-2022-33745: xen: insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) xsa408.patch - Fix gcc13 compilation error 62c56cc0-libxc-fix-compilation-error-with-gcc13.patch- Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d.- bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings fix xsa402-5.patch- Upstream bug fixes (bsc#1027519) 625fca42-VT-d-reserved-CAP-ND.patch 626f7ee8-x86-MSR-handle-P5-MC-reads.patch 627549d6-IO-shutdown-race.patch - bsc#1199965 - VUL-0: EMBARGOED: CVE-2022-26362: xen: Race condition in typeref acquisition xsa401-1.patch xsa401-2.patch - bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings xsa402-1.patch xsa402-2.patch xsa402-3.patch xsa402-4.patch xsa402-5.patch- fix python3 >= 3.10 version detection- Update to Xen 4.16.1 bug fix release (bsc#1027519) xen-4.16.1-testing-src.tar.bz2 - Drop patches contained in new tarball 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch 61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch 61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch 61e0296a-x86-time-calibration-relative-counts.patch 61e029c8-x86-time-TSC-freq-calibration-accuracy.patch 61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch 61e98e88-x86-introduce-get-set-reg-infra.patch 61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch 61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch 61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch 61eaaa23-x86-get-set-reg-infra-build.patch 61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch 61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch 61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch 6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch xsa397.patch xsa399.patch xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch xsa400-12.patch- bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch- bsc#1197423 - VUL-0: CVE-2022-26356: xen: Racy interactions between dirty vram tracking and paging log dirty hypercalls (XSA-397) xsa397.patch - bsc#1197425 - VUL-0: CVE-2022-26357: xen: race in VT-d domain ID cleanup (XSA-399) xsa399.patch - bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch xsa400-12.patch - Additional upstream bug fixes for XSA-400 (bsc#1027519) 61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch 61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch 6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch- bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401: xen: BHB speculation issues (XSA-398) 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch- bsc#1196545 - GCC 12: xen package fails gcc12-fixes.patch- Upstream bug fixes (bsc#1027519) 61e0296a-x86-time-calibration-relative-counts.patch 61e029c8-x86-time-TSC-freq-calibration-accuracy.patch 61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch 61e98e88-x86-introduce-get-set-reg-infra.patch 61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch 61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch 61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch 61eaaa23-x86-get-set-reg-infra-build.patch 61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch 61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch 61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch - Drop patches replaced by the above: xsa393.patch xsa394.patch xsa395.patch libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393) xsa393.patch - bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS Xen while unmapping a grant (XSA-394) xsa394.patch - bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of passed-through device IRQs (XSA-395) xsa395.patch- bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1193307 - pci backend does not exist when attach a vf to a pv guest libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch Drop libxl-PCI-defer-backend-wait.patch- bsc#1193447 - Slow execution of hvmloader+ovmf when VM contains an sriov device 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch - Upstream bug fixes (bsc#1027519) 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch- Collect active VM config files in the supportconfig plugin xen-supportconfig- Now that the ovmf package has been updated, reset the configure script to use ovmf-x86_64-xen-4m.bin from ovmf-x86_64-ms.bin References bsc#1194105, bsc#1193274 xen.spec- bsc#1193307 - pci backend does not exist when attach a vf to a pv guest libxl-PCI-defer-backend-wait.patch- Update to Xen 4.16.0 FCS release xen-4.16.0-testing-src.tar.bz2 * Miscellaneous fixes to the TPM manager software in preparation for TPM 2.0 support. * Increased reliance on the PV shim as 32-bit PV guests will only be supported in shim mode going forward. This change reduces the attack surface in the hypervisor. * Increased hardware support by allowing Xen to boot on Intel devices that lack a Programmable Interval Timer. * Cleanup of legacy components by no longer building QEMU Traditional or PV-Grub by default. Note both projects have upstream Xen support merged now, so it is no longer recommended to use the Xen specific forks. * Initial support for guest virtualized Performance Monitor Counters on Arm. * Improved support for dom0less mode by allowing the usage on Arm 64bit hardware with EFI firmware. * Improved support for Arm 64-bit heterogeneous systems by leveling the CPU features across all to improve big.LITTLE support. - bsc#1193274 - [Build67.2][Xen][uefi] xen fullvirt uefi guest can not be created with default 'type=plash' in virt-manager xen.spec- Update to Xen 4.16.0 RC4 release (jsc#SLE-18467) xen-4.16.0-testing-src.tar.bz2 * Xen can now export Intel Processor Trace (IPT) data from guests to tools in dom0. * Xen now supports Viridian enlightenments for guests with more than 64 vcpus. * Xenstored and oxenstored both now support LiveUpdate (tech preview). * Unified boot images * Switched x86 MSR accesses to deny by default policy. * Named PCI devices for xl/libxl and improved documentation for xl PCI configuration format. * Support for zstd-compressed dom0 (x86) and domU kernels. * Reduce ACPI verbosity by default. * Add ucode=allow-same option to test late microcode loading path. * Library improvements from NetBSD ports upstreamed. * x86: Allow domains to use AVX-VNNI instructions. * Added XEN_SCRIPT_DIR configuration option to specify location for Xen scripts. * xennet: Documented a way for the backend (or toolstack) to specify MTU to the frontend. * On detecting a host crash, some debug key handlers can automatically triggered to aid in debugging. * Increase the maximum number of guests which can share a single IRQ from 7 to 16, and make this configurable with irq-max-guests. - Drop iPXE sources and patches. iPXE is only used by QEMU traditional which has never shipped with SLE15. ipxe.tar.bz2 ipxe-enable-nics.patch ipxe-no-error-logical-not-parentheses.patch ipxe-use-rpm-opt-flags.patch - Drop building ocaml xenstored in the spec file. There are no plans or need to support this version. - Drop patches contained in new tarball or no longer required 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch 5ffc58c4-ACPI-reduce-verbosity-by-default.patch 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch 608676f2-VT-d-register-based-invalidation-optional.patch 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60bf9e19-Arm-create-dom0less-domUs-earlier.patch 60bf9e1a-Arm-boot-modules-scrubbing.patch 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch 60bfa904-AMD-IOMMU-wait-for-command-slot.patch 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch 61001231-x86-work-around-GNU-ld-2-37-issue.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6126339d-AMD-IOMMU-global-ER-extending.patch 6126344f-AMD-IOMMU-unity-map-handling.patch 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch 6126349a-AMD-IOMMU-rearrange-reassignment.patch 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch 612634c3-x86-p2m-introduce-p2m_is_special.patch 612634dc-x86-p2m-guard-identity-mappings.patch 612634f4-x86-mm-widen-locked-region-in-xatp1.patch 6126350a-gnttab-release-mappings-preemption.patch 6126351f-gnttab-replace-mapkind.patch 6126353d-gnttab-get-status-frames-array-capacity.patch 61263553-Arm-restrict-maxmem-for-dom0less.patch 6128a856-gnttab-radix-tree-node-init.patch init.xen_loop libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch libxc-bitmap-longs.patch libxc.migrate_tracking.patch libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc.sr.superpage.patch libxc-sr-use-xc_is_known_page_type.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl.fix-libacpi-dependency.patch libxl-qemu6-scsi.patch libxl-qemu6-vnc-password.patch libxl.set-migration-constraints-from-cmdline.patch reproducible.patch stubdom-have-iovec.patch x86-cpufreq-report.patch xenstore-launch.patch xenwatchdogd-options.patch xsa384.patch- bsc#1189632 - VUL-0: CVE-2021-28701: xen: Another race in XENMAPSPACE_grant_table handling (XSA-384) xsa384.patch - Upstream bug fixes (bsc#1027519) 61001231-x86-work-around-GNU-ld-2-37-issue.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6128a856-gnttab-radix-tree-node-init.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch (Replaces credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch) 6126339d-AMD-IOMMU-global-ER-extending.patch (Replaces xsa378-1.patch) 6126344f-AMD-IOMMU-unity-map-handling.patch (Replaces xsa378-2.patch) 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch (Replaces xsa378-3.patch) 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch (Replaces xsa378-4.patch) 6126349a-AMD-IOMMU-rearrange-reassignment.patch (Replaces xsa378-5.patch) 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch (Replaces xsa378-6.patch) 612634c3-x86-p2m-introduce-p2m_is_special.patch (Replaces xsa378-7.patch) 612634dc-x86-p2m-guard-identity-mappings.patch (Replaces xsa378-8.patch) 612634f4-x86-mm-widen-locked-region-in-xatp1.patch (Replaces xsa379.patch) 6126350a-gnttab-release-mappings-preemption.patch (Replaces xsa380-1.patch 6126351f-gnttab-replace-mapkind.patch (Replaces xsa380-2.patch) 6126353d-gnttab-get-status-frames-array-capacity.patch (Replaces xsa382.patch) 61263553-Arm-restrict-maxmem-for-dom0less.patch (Replaces xsa383.patch)- bsc#1189882 - refresh libxc.sr.superpage.patch prevent superpage allocation in the LAPIC and ACPI_INFO range- bsc#1189373 - VUL-0: CVE-2021-28694,CVE-2021-28695, CVE-2021-28696: xen: IOMMU page mapping issues on x86 (XSA-378) xsa378-1.patch xsa378-2.patch xsa378-3.patch xsa378-4.patch xsa378-5.patch xsa378-6.patch xsa378-7.patch xsa378-8.patch - bsc#1189376 - VUL-0: CVE-2021-28697: xen: grant table v2 status pages may remain accessible after de-allocation. (XSA-379) xsa379.patch - bsc#1189378 - VUL-0: CVE-2021-28698: xen: long running loops in grant table handling. (XSA-380) xsa380-1.patch xsa380-2.patch - bsc#1189380 - VUL-0: CVE-2021-28699: xen: inadequate grant-v2 status frames array bounds check. (XSA-382) xsa382.patch - bsc#1189381 - VUL-0: CVE-2021-28700: xen: xen/arm: No memory limit for dom0less domUs. (XSA-383) xsa383.patch- bsc#1188050 - L3: Xen guest yval1a80 SLES11SP4 hangs on cluster See also bsc#1179246. credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch- Drop aarch64-maybe-uninitialized.patch as the fix is in tarball.- refresh the migration patches to state v20210713 removed libxc-sr-add-xc_is_known_page_type.patch removed libxc-sr-arrays.patch removed libxc-sr-batch_pfns.patch removed libxc-sr-page_type_has_stream_data.patch removed libxc-sr-use-xc_is_known_page_type.patch removed libxc.migrate_tracking.patch removed libxc.sr.superpage.patch removed libxl.set-migration-constraints-from-cmdline.patch added libxc-sr-383b41974d5543b62f3181d216070fe3691fb130.patch added libxc-sr-5588ebcfca774477cf823949e5703b0ac48818cc.patch added libxc-sr-9e59d9f8ee3808acde9833192211da25f66d8cc2.patch added libxc-sr-LIBXL_HAVE_DOMAIN_SUSPEND_PROPS.patch added libxc-sr-abort_if_busy.patch added libxc-sr-f17a73b3c0264c62dd6b5dae01ed621c051c3038.patch added libxc-sr-max_iters.patch added libxc-sr-min_remaining.patch added libxc-sr-number-of-iterations.patch added libxc-sr-precopy_policy.patch added libxc-sr-restore-hvm-legacy-superpage.patch added libxc-sr-track-migration-time.patch added libxc-sr-xg_sr_bitmap-populated_pfns.patch added libxc-sr-xg_sr_bitmap.patch added libxc-sr-xl-migration-debug.patch- bsc#1176189 - xl monitoring process exits during xl save -p|-c keep the monitoring process running to cleanup the domU during shutdown xl-save-pc.patch- bsc#1179246 - Dom0 hangs when pinning CPUs for dom0 with HVM guest 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch - Upstream bug fixes (bsc#1027519) 60bf9e19-Arm-create-dom0less-domUs-earlier.patch (Replaces xsa372-1.patch) 60bf9e1a-Arm-boot-modules-scrubbing.patch (Replaces xsa372-2.patch) 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch (Replaces xsa373-1.patch) 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch (Replaces xsa373-2.patch) 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch (Replaces xsa373-2.patch) 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch (Replaces xsa375.patch) 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch (Replaces xsa377.patch) 60bfa904-AMD-IOMMU-wait-for-command-slot.patch (Replaces xsa373-4.patch) 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch (Replaces xsa373-5.patch) 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch - Dropped gcc11-fixes.patch- bsc#1183243 - L3: Core cannot be opened when using xl dump-core of VM with PTF 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch- bsc#1180350 - some long deprecated commands were finally removed in qemu6. Adjust libxl to use supported commands. libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl-qemu6-vnc-password.patch libxl-qemu6-scsi.patch- Update logrotate.conf, move global options into per-file sections to prevent globbering of global state (bsc#1187406)- Fix shell macro expansion in xen.spec, so that ExecStart= in xendomains-wait-disks.service is created correctly (bsc#1183877)- bsc#1186428 - VUL-0: CVE-2021-28693: xen: xen/arm: Boot modules are not scrubbed (XSA-372) xsa372-1.patch xsa372-2.patch - bsc#1186429 - VUL-0: CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (XSA-373) xsa373-1.patch xsa373-2.patch xsa373-3.patch xsa373-4.patch xsa373-5.patch - bsc#1186433 - VUL-0: CVE-2021-0089: xen: Speculative Code Store Bypass (XSA-375) xsa375.patch - bsc#1186434 - VUL-0: CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (XSA-377) xsa377.patch - Upstream bug fixes (bsc#1027519) 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch- Upstream bug fix (bsc#1027519) 608676f2-VT-d-register-based-invalidation-optional.patch- Add xen.sysconfig-fillup.patch to make sure xencommons is in a format as expected by fillup. (bsc#1185682) Each comment needs to be followed by an enabled key. Otherwise fillup will remove manually enabled key=value pairs, along with everything that looks like a stale comment, during next pkg update- Refresh xenstore-launch.patch to cover also daemon case- Update to Xen 4.14.2 bug fix release (bsc#1027519) xen-4.14.2-testing-src.tar.bz2 - Drop patches contained in new tarball 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6011bbc7-x86-timer-fix-boot-without-PIT.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch 60787714-x86-HPET-avoid-legacy-replacement-mode.patch- bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 60787714-x86-HPET-avoid-legacy-replacement-mode.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch - Upstream bug fixes (bsc#1027519) 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch (Replaces xsa368.patch) 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch- bsc#1137251 - Restore changes for xen-dom0-modules.service which were silently removed on 2019-10-17- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway. This resulted to over-allocation.- bsc#1167608 - adjust limit for max_event_channels A previous change allowed an unbound number of event channels to make sure even large domUs can start of of the box. This may have a bad side effect in the light of XSA-344. Adjust the built-in limit based on the number of vcpus. In case this is not enough, max_event_channels=/maxEventChannels= has to be used to set the limit as needed for large domUs adjust libxl.max_event_channels.patch- bsc#1183072 - VUL-0: CVE-2021-28687: xen: HVM soft-reset crashes toolstack (XSA-368). Also resolves, bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl bsc#1181989 - openQA job causes libvirtd to dump core when running kdump inside domain xsa368.patch- bsc#1177204 - L3-Question: conring size for XEN HV's with huge memory to small. Inital Xen logs cut 5ffc58c4-ACPI-reduce-verbosity-by-default.patch - Upstream bug fixes (bsc#1027519) 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch - bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch- bsc#1182576 - L3: XEN domU crashed on resume when using the xl unpause command 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch- Start using the %autosetup macro to simplify patch management xen.spec- bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch - Drop gcc10-fixes.patch- Upstream bug fixes (bsc#1027519) 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch (Replaces xsa360.patch) 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch - bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 6011bbc7-x86-timer-fix-boot-without-PIT.patch- bsc#1181254 - VUL-0: xen: IRQ vector leak on x86 (XSA-360) xsa360.patch- bsc#1180794 - bogus qemu binary path used when creating fv guest under xen xen.spec- bsc#1180690 - L3-Question: xen: no needsreboot flag set Add Provides: installhint(reboot-needed) in xen.spec for libzypp- Update libxl.set-migration-constraints-from-cmdline.patch Remove code which handled --max_factor. The total amount of transferred data is no indicator to trigger the final stop+copy. This should have been removed during upgrade to Xen 4.7. Fix off-by-one in --max_iters, it caused one additional copy cycle. Reduce default value of --max_iters from 5 to 2. The workload within domU will continue to produce dirty pages. It is unreasonable to expect any slowdown during migration. Now there is one initial copy of all memory, one instead of four iteration for dirty memory, and a final copy iteration prior move.- Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch- Pass --with-rundir to configure to get rid of /var/run- bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch- boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch- bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch- Fix build error with libxl.fix-libacpi-dependency.patch- Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere.- Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1- bsc#1178591 - VUL-0: CVE-2020-28368: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351 xsa351-1.patch xsa351-2.patch xsa351-3.patch- bsc#1177950 - adjust help for --max_iters, default is 5 libxl.set-migration-constraints-from-cmdline.patch- jsc#SLE-16899 - improve performance of live migration remove allocations and memcpy from hotpaths on sending and receiving side to get more throughput on 10Gbs+ connections libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc-sr-readv_exact.patch libxc-sr-restore-handle_buffered_page_data.patch libxc-sr-restore-handle_incoming_page_data.patch libxc-sr-restore-map_errs.patch libxc-sr-restore-mfns.patch libxc-sr-restore-pfns.patch libxc-sr-restore-populate_pfns-mfns.patch libxc-sr-restore-populate_pfns-pfns.patch libxc-sr-restore-read_record.patch libxc-sr-restore-types.patch libxc-sr-save-errors.patch libxc-sr-save-guest_data.patch libxc-sr-save-iov.patch libxc-sr-save-local_pages.patch libxc-sr-save-mfns.patch libxc-sr-save-rec_pfns.patch libxc-sr-save-show_transfer_rate.patch libxc-sr-save-types.patch libxc-sr-use-xc_is_known_page_type.patch adjust libxc.sr.superpage.patch adjust libxc.migrate_tracking.patch- Upstream bug fixes (bsc#1027519) 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch - Renamed patches 5f560c42-x86-PV-64bit-segbase-consistency.patch Replaces 5f5b6951-x86-PV-64bit-segbase-consistency.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch Replaces 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch Replaces 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch Replaces 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch Replaces 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch Replaces 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch 5f6a00c4-evtchn-relax-port_is_valid.patch Replaces 5f6a062c-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch Replaces 5f6a065c-pv-Avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch Replaces 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch Replaces 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch Replaces 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch Replaces 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch Replaces 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch Replaces 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch Replaces 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch- bsc#1177409 - VUL-0: CVE-2020-27674: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286) xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch - bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345) 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch - bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346) 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch - bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347) 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch- Update libxc.sr.superpage.patch set errno in x86_hvm_alloc_4k (bsc#1177112)- bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) 5f6a062c-evtchn-relax-port_is_valid.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) 5f6a065c-pv-Avoid-double-exception-injection.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - Upstream bug fix (bsc#1027519) 5f5b6951-x86-PV-64bit-segbase-consistency.patch- Fix problems in xen.spec with building on aarch64- Make use of %service_del_postun_without_restart while preserving the old behavior for older distros. - In %post tools, remove unnecessary qemu symlinks.- Fix error in xen-tools %post when linking pvgrub64.bin - Make paths below libexec more explicit - Create symlink also for pvgrub32.bin- Revert previous libexec change for qemu compat wrapper The path is used in existing domU.xml files in the emulator field - Escape some % chars in xen.spec, they have to appear verbatim- Enhance libxc.migrate_tracking.patch Print number of allocated pages on sending side, this is more accurate than p2m_size.- jsc#SLE-15926 - Dev: XEN: drop netware support Dropped the following patches pygrub-netware-xnloader.patch xnloader.py Refreshed pygrub-boot-legacy-sles.patch- Fix build on aarch64 with gcc10 - Package xenhypfs for aarch64- Correct license name * GPL-3.0+ is now GPL-3.0-or-later- Upstream bug fixes (bsc#1027519) 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch- Update to Xen 4.14.0 FCS release xen-4.14.0-testing-src.tar.bz2 * Linux stubdomains (contributed by QUBES OS) * Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix) * Lightweight VM fork for fuzzing / introspection. (contributed by Intel) * Livepatch: buildid and hotpatch stack requirements * CONFIG_PV32 * Hypervisor FS support * Running Xen as a Hyper-V Guest * Domain ID randomization, persistence across save / restore * Golang binding autogeneration * KDD support for Windows 7, 8.x and 10 - Dropped patches contained in new tarball 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch xsa317.patch xsa319.patch xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch xsa328-1.patch xsa328-2.patch- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached ignore-ip-command-script-errors.patch- Enhance libxc.migrate_tracking.patch After transfer of domU memory, the target host has to assemble the backend devices. Track the time prior xc_domain_unpause.- Add libxc.migrate_tracking.patch to track live migrations unconditionally in logfiles, especially in libvirt. This will track how long a domU was suspended during transit.- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect error handling in event channel port allocation xsa317.patch - bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code paths in x86 dirty VRAM tracking xsa319.patch - bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient cache write- back under VT-d xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch - bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic modification of live EPT PTE xsa328-1.patch xsa328-2.patch- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch) 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch) - Upstream bug fixes (bsc#1027519) 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch- Fixes for %_libexecdir changing to /usr/libexec- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) xsa320-1.patch xsa320-2.patch- Update to Xen 4.13.1 bug fix release (bsc#1027519) xen-4.13.1-testing-src.tar.bz2 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch - Drop patches contained in new tarball 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- spec: Remove invocation of autogen.sh - spec: Recommend qemu-ovmf-x86_64 to provide UEFI firmwares- bsc#1170968 - GCC 10: xen build fails on i586 gcc10-fixes.patch- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation handling in GNTTABOP_copy (XSA-318) 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- bsc#1168140 - VUL-0: CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch - bsc#1168142 - VUL-0: CVE-2020-11739: xen: XSA-314 - Missing memory barriers in read-write unlock paths 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch - bsc#1168143 - VUL-0: CVE-2020-11743: xen: XSA-316 - Bad error path in GNTTABOP_map_grant 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch - bsc#1167152 - L3: Xenstored Crashed during VM install Need Core analyzed 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch - Drop for upstream solution (bsc#1165206) 01-xen-credit2-avoid-vcpus-to.patch default-to-credit1-scheduler.patch - Upstream bug fixes (bsc#1027519) 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch- bsc#1167608 - unbound limit for max_event_channels domUs with many vcpus and/or resources fail to start libxl.max_event_channels.patch- bsc#1161480 - Fix xl shutdown for HVM without PV drivers add libxl.libxl__domain_pvcontrol.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 01-xen-credit2-avoid-vcpus-to.patch- bsc#1158414 - GCC 10: xen build fails gcc10-fixes.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 default-to-credit1-scheduler.patch- bsc#1160932 - VUL-0: xen: XSA-312 v1: arm: a CPU may speculate past the ERET instruction 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch - bsc#1164425 - x86: "spec-ctrl=no-xen" should also disable branch hardening 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch - Upstream bug fixes (bsc#1027519) 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch- bsc#1159755 - use fixed qemu-3.1 machine type for HVM This must be done in qemu to preserve PCI layout remove libxl.lock-qemu-machine-for-hvm.patch- jsc#SLE-10183 - script to calculate cpuid= mask add helper script from https://github.com/twizted/xen_maskcalc domUs may be migrated between different cpus from the same vendor if their visible cpuid value has incompatible feature bits masked.- jsc#SLE-10172, bsc#1055731 - handle degraded raid for xendomains add helper script and systemd service from https://github.com/luizluca/xen-tools-xendomains-wait-disk in new sub package xen-tools-xendomains-wait-disk See included README for usage instructions xendomains-wait-disks.LICENSE xendomains-wait-disks.README.md xendomains-wait-disks.sh- bsc#1159755 - use fixed qemu-3.1 machine type for HVM qemu4 introduced incompatible changes in pc-i440fx, which revealed a design bug in 'xenfv'. Live migration from domUs started with qemu versions prior qemu4 can not be received with qemu4+. libxl.lock-qemu-machine-for-hvm.patch- Upstream bug fixes (bsc#1027519) 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- bsc#1159320 - Xen logrotate file needs updated logrotate.conf- Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware- Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch- Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch- Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2- Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call)- Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch- bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch- bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch- Upstream bug fixes (bsc#1027519) 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch - Drop 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Preserve modified files which used to be marked as %config, rename file.rpmsave to file- Update to Xen 4.12.1 bug fix release (bsc#1027519) xen-4.12.1-testing-src.tar.bz2 - Drop patches contained in new tarball 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8f752c-x86-e820-build-with-gcc9.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Refreshed patches libxl.pvscsi.patch- bsc#1143563 - Speculative mitigation facilities report wrong status 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Update xen-dom0-modules.service (bsc#1137251) Map backend module names from pvops and xenlinux kernels to a module alias. This avoids errors from modprobe about unknown modules. Ignore a few xenlinux modules that lack aliases.- Gcc9 warnings seem to be cleared up with upstream fixes. Drop gcc9-ignore-warnings.patch- bsc#1138563 - L3: xenpvnetboot improperly ported to Python 3 fix-xenpvnetboot.patch- Move /etc/modprobe.d/xen_loop.conf to /lib/modprobe.d/xen_loop.conf- Remove /etc/xen/xenapiusers and /etc/pam.d/xen-api- Remove all upstream provided files in /etc/xen They are not required at runtime. The host admin is now responsible if he really needs anything in this subdirectory.- In our effort to make /etc fully admin controlled, move /etc/xen/scripts to libexec/xen/scripts with xen-tools.etc_pollution.patch- Move /etc/bash_completion.d/xl.sh to %{_datadir}/bash-completion/completions- bsc#1138294 - VUL-0: CVE-2019-17349: XSA-295: Unlimited Arm Atomics Operations 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Upstream bug fixes (bsc#1027519) 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch (Replaces xsa297-0a.patch) 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch (Replaces xsa297-0b.patch) 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch (Replaces xsa297-0c.patch) 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch (Replaces xsa297-0d.patch) 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch (Replaces xsa297-1.patch) 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch (Replaces xsa297-2.patch) 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch (Replaces xsa297-3.patch) 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch- Fix some outdated information in the readme README.SUSE- spec: xen-tools: require matching version of xen package bsc#1137471- Remove two stale patches xen.build-compare.man.patch xenpaging.doc.patch- Disable LTO (boo#1133296).- Remove arm32 from ExclusiveArch to fix build- bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4". CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 xsa297-0a.patch xsa297-0b.patch xsa297-0c.patch xsa297-0d.patch xsa297-1.patch xsa297-2.patch xsa297-3.patch - Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch- bsc#1131811 - [XEN] internal error: libxenlight failed to create new domain. This patch is a workaround for a systemd issue. See patch header for additional comments. xenstore-launch.patch- bsc#1125378 - [xen][pygrub] Can not restore sle11sp4 pv guest after upgrading host from sle11sp4 to sle15sp1 pygrub-python3-conversion.patch - Fix "TypeError: virDomainDefineXML() argument 2 must be str or None, not bytes" when converting VMs from using the xm/xend toolstack to the libxl/libvirt toolstack. (bsc#1123378) xen2libvirt.py- bsc#1124560 - Fully virtualized guests crash on boot 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch - bsc#1121391 - GCC 9: xen build fails 5c8f752c-x86-e820-build-with-gcc9.patch - Upstream bug fixes (bsc#1027519) 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch- Install pkgconfig files into libdir instead of datadir- Update to Xen 4.12.0 FCS release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 * HVM/PVH and PV only Hypervisor: The Xen 4.12 release separates the HVM/PVH and PV code paths in Xen and provides KCONFIG options to build a PV only or HVM/PVH only hypervisor. * QEMU Deprivilege (DM_RESTRICT): In Xen 4.12, this feature has been vastly improved. * Argo - Hypervisor-Mediated data eXchange: Argo is a new inter- domain communication mechanism. * Improvements to Virtual Machine Introspection: The VMI subsystem which allows detection of 0-day vulnerabilities has seen many functional and performance improvements. * Credit 2 Scheduler: The Credit2 scheduler is now the Xen Project default scheduler. * PVH Support: Grub2 boot support has been added to Xen and Grub2. * PVH Dom0: PVH Dom0 support has now been upgraded from experimental to tech preview. * The Xen 4.12 upgrade also includes improved IOMMU mapping code, which is designed to significantly improve the startup times of AMD EPYC based systems. * The upgrade also features Automatic Dom0 Sizing which allows the setting of Dom0 memory size as a percentage of host memory (e.g. 10%) or with an offset (e.g. 1G+10%).- bsc#1130485 - Please drop Requires on multipath-tools in xen-tools. Now using Recommends multipath-tools. xen.spec- Update to Xen 4.12.0 RC7 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC6 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1026236 - add Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs if their expected frequency does not match exactly the frequency of the receiving host xen.bug1026236.suse_vtsc_tolerance.patch- Update to Xen 4.12.0 RC5 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- jsc#SLE-3059 - Disable Xen auto-ballooning - Add CONFIG_DOM0_MEM to the spec file for managing dom0 memory. xen.spec - Disable autoballooning in xl.con xl-conf-disable-autoballoon.patch- Update gcc9-ignore-warnings.patch to fix build in SLE12- bsc#1126325 - fix crash in libxl in error path Setup of grant_tables and other variables may fail libxl.prepare-environment-for-domcreate_stream_done.patch- bsc#1127620 - Documentation for the xl configuration file allows for firmware=pvgrub64 but we don't ship pvgrub64. Create a link from grub.xen to pvgrub64 xen.spec- Update to Xen 4.12.0 RC4 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Tarball also contains additional post RC4 security fixes for Xen Security Advisories 287, 288, and 290 through 294.- Update to Xen 4.12.0 RC3 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC2 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1121391 - GCC 9: xen build fails gcc9-ignore-warnings.patch- bsc#1122563 - Virtualization/xen: Bug no Xen on boot, missing /proc/xen, after 4.11 -> 4.12 upgrade on X86_64/efi. Keep xen.efi in /usr/lib64/efi for booting older distros. xen.spec- fate#326960: Package grub2 as noarch. As part of the effort to have a unified bootloader across architectures, modify the xen.spec file to move the Xen efi files to /usr/share/efi/$(uname -m) from /usr/lib64/efi.- Update to Xen 4.12.0 RC1 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Drop 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch 5bdc31d5-VMX-fix-vmx_handle_eoi.patch gcc8-fix-array-warning-on-i586.patch gcc8-fix-format-warning-on-i586.patch gcc8-inlining-failed.patch xen.bug1079730.patch- bsc#1121960 - xen: sync with Factory xen.spec xen.changes- Replace old $RPM_* shell vars. - Run fdupes for all architectures, and not crossing subvolume boundaries.- Do not run %fdupes on aarch64 to avoid the hardlink-across-partition rpmlint error- Require qemu-seabios only on x86* as it is not available on non-x86 systems- Avoid creating dangling symlinks (bsc#1116524) This reverts the revert of tmp_build.patch- Update to Xen 4.11.1 bug fix release (bsc#1027519) xen-4.11.1-testing-src.tar.bz2 - 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch replaces xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch replaces xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch - Drop the following patches contained in the new tarball 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbe-ARM-disable-grant-table-v2.patch 5b72fbbe-oxenstored-eval-order.patch 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch xsa275-1.patch xsa275-2.patch xsa276-1.patch xsa276-2.patch xsa277.patch xsa279.patch xsa280-1.patch xsa280-2.patch- bsc#1116524 - Package xen-tools-4.11.0_09-2.1.x86_64 broken: Missing /bin/domu-xenstore. This was broken because "make package build reproducible" change. (boo#1047218, boo#1062303) This fix reverses the change to this patch. tmp_build.patch- bsc#1115040 - VUL-0: CVE-2018-19961 CVE-2018-19962: xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275) xsa275-1.patch xsa275-2.patch - bsc#1115043 - VUL-0: CVE-2018-19963: xen: resource accounting issues in x86 IOREQ server handling (XSA-276) xsa276-1.patch xsa276-2.patch - bsc#1115044 - VUL-0: CVE-2018-19964: xen: x86: incorrect error handling for guest p2m page removals (XSA-277) xsa277.patch - bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch - bsc#1115045 - VUL-0: xen: CVE-2018-19965: x86: DoS from attempting to use INVPCID with a non-canonical addresses (XSA-279) xsa279.patch - bsc#1115047 - VUL-0: CVE-2018-19966: xen: Fix for XSA-240 conflicts with shadow paging (XSA-280) xsa280-1.patch xsa280-2.patch - bsc#1114988 - VUL-0: CVE-2018-19967: xen: guest use of HLE constructs may lock up host (XSA-282) 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch - bsc#1108940 - L3: XEN SLE12-SP1 domU hang on SLE12-SP3 HV 5bdc31d5-VMX-fix-vmx_handle_eoi.patch - Upstream bug fixes (bsc#1027519) 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch- bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch- Use SMBIOS_REL_DATE instead of SMBIOS_DATE for reproducible binaries- make package build reproducible (boo#1047218, boo#1062303) * Set SMBIOS_REL_DATE * Update tmp_build.patch to use SHA instead of random build-id * Add reproducible.patch to use --no-insert-timestamp- Building with ncurses 6.1 will fail without xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - Building libxl acpi support on aarch64 with gcc 8.2 will fail without xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch- bsc#1106263 - L3: The affinity reporting via 'xl vcpu-list' is apparently broken 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch- bsc#1094508 - L3: Kernel oops in fs/dcache.c called by d_materialise_unique() 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch - bsc#1103279 - (CVE-2018-15470) VUL-0: CVE-2018-15470: xen: oxenstored does not apply quota-maxentity (XSA-272) 5b72fbbe-oxenstored-eval-order.patch - bsc#1103275 - (CVE-2018-15469) VUL-0: CVE-2018-15469: xen: Use of v2 grant tables may cause crash on ARM (XSA-268) 5b72fbbe-ARM-disable-grant-table-v2.patch - Upstream patches from Jan (bsc#1027519) 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch - Drop 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- bsc#1078292 - rpmbuild -ba SPECS/xen.spec with xen-4.9.1 failed xen.spec- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM (XSA-273) 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch - bsc#1103276 - VUL-0: CVE-2018-15468: xen: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (XSA-269) 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch - Upstream prereq patches for XSA-273 and other upstream fixes (bsc#1027519) 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- Upstream patches from Jan (bsc#1027519) 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch gcc8-fix-format-warning-on-i586.patch gcc8-fix-array-warning-on-i586.patch - Drop xen.fuzz-_FORTIFY_SOURCE.patch gcc8-fix-warning-on-i586.patch- Update to Xen 4.11.0 FCS (fate#325202, fate#325123) xen-4.11.0-testing-src.tar.bz2 disable-building-pv-shim.patch - Dropped patches 5a33a12f-domctl-improve-locking-during-domain-destruction.patch 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a9985bd-x86-invpcid-support.patch 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch 5af1daa9-3-x86-traps-use-IST-for-DB.patch 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch 5af97999-viridian-cpuid-leaf-40000003.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch 5b348874-x86-refine-checks-in-DB-handler.patch 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen_fix_build_with_acpica_20180427_and_new_packages.patch- Submit upstream patch libacpi: fixes for iasl >= 20180427 git commit 858dbaaeda33b05c1ac80aea0ba9a03924e09005 xen_fix_build_with_acpica_20180427_and_new_packages.patch This is needed for acpica package to get updated in our build service- Upstream patches from Jan (bsc#1027519) 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch) 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch) 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch) 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch) 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch) 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch) 5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch) 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-<>.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch- bsc#1098403 - fix regression introduced by changes for bsc#1079730 a PV domU without qcow2 and/or vfb has no qemu attached. Ignore QMP errors for PV domUs to handle PV domUs with and without an attached qemu-xen. xen.bug1079730.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1092543 - GCC 8: xen build fails gcc8-fix-warning-on-i586.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" (XSA-263) 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- Always call qemus xen-save-devices-state in suspend/resume to fix migration with qcow2 images (bsc#1079730) libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen.bug1079730.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- bsc#1092543 - GCC 8: xen build fails 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch gcc8-inlining-failed.patch- Update to Xen 4.10.1 bug fix release (bsc#1027519) xen-4.10.1-testing-src.tar.bz2 disable-building-pv-shim.patch - Drop the following patches contained in the new tarball 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch xsa258.patch xsa259.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Upstream patches from Jan (bsc#1027519) and fixes related to Page Table Isolation (XPTI). See also bsc#1074562 XSA-254 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop xsa252.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- Remove stale systemd presets code for 13.2 and older- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Replace hardcoded xen with Name tag when refering to subpkgs- Make sure tools and tools-domU require libs from the very same build- tools-domU: Add support for qemu guest agent. New files 80-xen-channel-setup.rules and xen-channel-setup.sh configure a xen-pv-channel for use by the guest agent FATE#324963- Remove outdated /etc/xen/README*- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with MSR emulation (XSA-253) 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch - bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch- Fix python3 deprecated atoi call (bsc#1067224) pygrub-python3-conversion.patch - Drop xenmon-python3-conversion.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 build-python3-conversion.patch bin-python3-conversion.patch- bsc#1070165 - xen crashes after aborted localhost migration 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch - bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb: libxl__devices_destroy failed 5a33a12f-domctl-improve-locking-during-domain-destruction.patch - Upstream patches from Jan (bsc#1027519) 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch- Update to Xen 4.10.0 FCS (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Rebuild initrd if xen-tools-domU is updated- Update to Xen 4.10.0-rc8 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- Adjust xenstore-run-in-studomain.patch to change the defaults in the code instead of changing the sysconfig template, to also cover the upgrade case- Update to Xen 4.10.0-rc6 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Since xen switched to Kconfig, building a debug hypervisor was done by default. Adjust make logic to build a non-debug hypervisor by default, and continue to provide one as xen-dbg.gz- fate#316614: set migration constraints from cmdline fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10- Document the suse-diskcache-disable-flush option in xl-disk-configuration(5) (bsc#879425,bsc#1067317)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to Xen 4.10.0-rc5 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - fate#323663 - Run Xenstore in stubdomain xenstore-run-in-studomain.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 pygrub-python3-conversion.patch xenmon-python3-conversion.patch migration-python3-conversion.patch xnloader.py xen2libvirt.py- Remove xendriverdomain.service (bsc#1065185) Driver domains must be configured manually with custom .service file- Update to Xen 4.10.0-rc3 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Adjust xen-dom0-modules.service to ignore errors (bsc#1065187)- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Update to Xen 4.10.0-rc2 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Update to Xen 4.10.0-rc1 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop patches included in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch gcc7-mini-os.patch- bsc#1061084 - VUL-0: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1056278 - VUL-0: xen: Missing NUMA node parameter verification (XSA-231) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch - bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232) 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch - bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup (XSA-233) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch - bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch - bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Unignore gcc-PIE the toolstack disables PIE for firmware builds as needed- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- bsc#1044974 - xen-tools require python-pam xen.spec- Clean up spec file errors and a few warnings. (bsc#1027519) - Removed conditional 'with_systemd' and some old deprecated 'sles_version' checks. xen.spec- Remove use of brctl utiltiy from supportconfig plugin FATE#323639- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- fate#323639 Move bridge-utils to legacy replace-obsolete-network-configuration-commands-in-s.patch- bsc#1052686 - VUL-0: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- Add a supportconfig plugin xen-supportconfig FATE#323661- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- fate#323662 Drop qemu-dm from xen-tools package The following tarball and patches have been removed qemu-xen-traditional-dir-remote.tar.bz2 VNC-Support-for-ExtendedKeyEvent-client-message.patch 0001-net-move-the-tap-buffer-into-TAPState.patch 0002-net-increase-tap-buffer-size.patch 0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch 0004-e1000-secrc-support.patch 0005-e1000-multi-buffer-packet-support.patch 0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch 0007-e1000-verify-we-have-buffers-upfront.patch 0008-e1000-check-buffer-availability.patch CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch CVE-2015-4037-qemut-smb-config-dir-name.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch blktap.patch cdrom-removable.patch xen-qemu-iscsi-fix.patch qemu-security-etch1.patch xen-disable-qemu-monitor.patch xen-hvm-default-bridge.patch qemu-ifup-set-mtu.patch ioemu-vnc-resize.patch capslock_enable.patch altgr_2.patch log-guest-console.patch bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch qemu-dm-segfault.patch bdrv_default_rwflag.patch kernel-boot-hvm.patch ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch ioemu-hvm-pv-support.patch pvdrv_emulation_control.patch ioemu-disable-scsi.patch ioemu-disable-emulated-ide-if-pv.patch xenpaging.qemu.flush-cache.patch ioemu-devicemodel-include.patch - Cleanup spec file and remove unused KMP patches kmp_filelist supported_module.patch xen_pvonhvm.xen_emul_unplug.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch/sbin/ldconfig/sbin/ldconfigibs-arm-4 1658310355  !"#$%&'()*+,-4.16.1_06-150400.4.8.14.16.1_06-150400.4.8.1libxencall.so.1libxencall.so.1.3libxenctrl.so.4.16libxenctrl.so.4.16.0libxendevicemodel.so.1libxendevicemodel.so.1.4libxenevtchn.so.1libxenevtchn.so.1.2libxenforeignmemory.so.1libxenforeignmemory.so.1.4libxenfsimage.so.4.16libxenfsimage.so.4.16.0libxengnttab.so.1libxengnttab.so.1.2libxenguest.so.4.16libxenguest.so.4.16.0libxenhypfs.so.1libxenhypfs.so.1.0libxenlight.so.4.16libxenlight.so.4.16.0libxenstat.so.4.16libxenstat.so.4.16.0libxenstore.so.4libxenstore.so.4.0libxentoolcore.so.1libxentoolcore.so.1.0libxentoollog.so.1libxentoollog.so.1.0libxenvchan.so.4.16libxenvchan.so.4.16.0libxlutil.so.4.16libxlutil.so.4.16.0xenfsimageext2fsfsimage.sofatfsimage.soiso9660fsimage.soreiserfsfsimage.soufsfsimage.sozfsfsimage.so/usr/lib64//usr/lib64/xenfsimage//usr/lib64/xenfsimage/ext2fs//usr/lib64/xenfsimage/fat//usr/lib64/xenfsimage/iso9660//usr/lib64/xenfsimage/reiserfs//usr/lib64/xenfsimage/ufs//usr/lib64/xenfsimage/zfs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25153/SUSE_SLE-15-SP4_Update/6b3602e5dcfdfa5503a83feaeeeafbb3-xen.SUSE_SLE-15-SP4_Updatecpioxz5aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=97f1fe813e6bfc49dd878318d57a82f4f3a4cc64, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6197cf558170e698147f2726766e38c4dd4d0a52, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f2df3e9dfe78db296d03c46581d460d68f5ee61b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=33cbf07a5f33200d33050fe4d86797f708058fc8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=00e1f3a0690352eabd77ab6a39b8e53d2d508694, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7864f90f3458e098e56f060ffcabbc26945dda8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f71c529da1f25c5e669a7695b1f4a359b4acfe5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d8ffcc6d696560a98293f238c7ef680af822fc47, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=477d587a2c5a1894f34e199041460795e268e0ce, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8306b7079e2433912679c4b133bc9e99ba353c65, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=580c12f037b39c833cfcaf016c887401b08c6abe, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9596a241a471db9065106cdb4196cebb5ff508c2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1d3e36b4e7457c9b722ae82697f1f11555efb1e2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b0f53d091fe048cce7fdb5493a598a50c4011ba, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fbb7c2abce45429618b4c521408b5d7fda89bbdc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d49756cbc71fa59de58dfdf11e813182fe0fae8e, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7bc7ce0cb87cbed23b6849cf9908e51e318bf8cc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3792fcc0f6048d65c8720b1478c0635d82910a21, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=db349bb8e519c21e18ba59d2f47a9e87bcd0ea4e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fe8a22c2106b5322151360f7eb27c2828fb05476, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=667458502130fdfa964ce4e618a22e2f48f324dc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4abdae0253eb1bb463cc23972a27cf1c6375a741, stripped(>Nbjz    PPPPPPPPR.RR0RRR/R-RRRPPRR0RR$RRRR RRRR/RRR#RRRRRPP P P P P P P P PR.RR0RRRR/R-RRRRPPPPPP R.R0RRRR/R-RRRPPPPPPPPPPR.RR0RRR/R-RRRPPRRRRRRPPPPPPR.RR0RRR/R-RRRPPRRRRRRRR2RRRP PRR0RRRR/RR2RRRP"P!R0RRR RR(RRR RRRRR&R,R/RRR+R'R%RR R RR R1RRRP$P#RR,RRRRR+R1RRRP&P%R.RRRRR-RRRRP(P'RRRRP*P)RRRRRRP,P+RRR,R$RRR+R#RRRRP.P-RRR*RR)RRRRR"RR!RRRRR"R!RRR"RR!RRR"RR!RRRR"R!RRR"RR!RRAa &utf-8a20f8a7b86351c794de2eee4d877dc0381edd1cc3936160d69748bb03291cc2f?7zXZ !t/B] cr$x#FԇUf삏a}jmJ,h,寕+E%]xX WMJų2H(wK(h~!CОQ,Ď7Lij]2p8*=~ȭo֗cC~黔|%ո"ZBn?7fJLc lG[iBА XA㵻wiE=]Wab'Kt+ y0:gfSLi X` +Sl#>h>ǴXTr,$`?#K~qzKOvR5xD*$X5>2*+6|⏽u^GnsG摆cZwq z[ J/ﳈN>%"6N+$%p}"BdH@[$rYVeS7q gGL_l1lFA& ǞB*RRQu>hclUs϶u\b1Q4a@j&6'\M?)tѿ"ғA@Rr~WIs X`%#V~o͎1Аi_֖L:RIY^eO*Q)푈TЮ?YɣQc?T-hdnZbe/Q>Ȓ ndWjI-J]㎅vfJh|%B@?T?tZi"jڋ|.>jDo= wq]9$S#. ?'z;? )⓵y-j)'Фă[|/N z켟I# G5NڃubcIQbG`ѩ !!MTE\&x|Yt#4?~>u%.0=vq̘jL"UIhzb nř7wLQ~lH:Hr3˫0C1%36,NWVA7`˕&*T[\gZn4h<_zrin1F߄8ZSf>%$(a_>%ii֐ CzcoteWѠa`DslQ[|ݜujS<(k(Qq [DJ!\834X&t2T:֧ <<0;r6{"EB ·H$1]c0t}b1cG?VSS#QX?cHoգ%GHrE*N;¶C'8uT. pӎǿ^r6/ '9}d*{]XTSlDR7ʋgup RN+ Pp0)5@k[!U#jF-/K|XxZFsmxEQ+N.,QYf($ 2~0O\2fgR 5[3tP<˺$^֘/dNgqg ??zMnq8YY}.j]ے1O(2"HPlBX2YyTw'X}Iی-?wy~VW 3X*qg֤*MmsuX)by24@6'* Ӧm1g:Оdh}\TqKBG ?2'?ۺ)yIMF>>AD=┖~c34怘uFWTs `"#G3Gdr_zB0 m[$"ͳa {N* L[aԚBr =-$r^*Ճ8%W1 /,)2;Zq >0ewï))GwAT+mX.g6 l]KfLG`TCaKTR8o3 $(㌭~O%!;bN!K+I)-#\B.8P`%^zAAΌڗ- ԥAc?UDW~145!o%'[ctH"[J/,ɕ_ҷS*U-\b*G$9*k_ZLQ#gpKX7sN^ ^4ר5bJ@~faa6?_aS?.}"+FdL]<AHP.Qez}} ]Cq`kYH, jLimwHIp=%E_>2K| ]a>moXʧkO}kB;@cϣWw}Z.2*3ƅ2Fa6T~K#oF/I'0a%Џ⪰5n58닝%eAyi7Q"RPL/PB4`p@,"Qe鿟vY6C2'NʐJV{w+ss9i_ȓȷw0,v͜V.I "Mx5!"?[PjP{9S$&d 5xm#BbC3quLx4 jܝ:(s+ũG:B\z[T?Y%zC \~qAM:],$~@j*_z{ #SVCdj7G=4zkL煽 omt ]oVxw /eP:꟭sP@a[q-hHɤ +KH⨒%RCK*| lV=lzmBRpG#_wJ ν#* Í]hA7p+[9ߎOg6·˒kWٗ8*RuidDy4^`;2yE{iCud:s.ԁi; wz1g [^veqݐg0l1*'Cաd/JomUibѡ =U/ Ug:U!Mì@DJC,)ۄ N*ֶT&']mn,ȷ;t=l;;90,CM|z*_kp:j-Hx .Vh"@'⣝6DB (~%s0x>2dž-y ~;@ҕ EhC3-8pPf{Eԍ [ߎV)A!f4=0(`.AL@[rAVc i A%:fIv,LlϪ1z5SO!{hSFsm+8[ֻH}5K{Z W<MI:cde s tSzUk?Jq&Lp+J 8?c/-%]` g25I_q y tQ#117оz8&P ~ $=F^t耗vBjJ܄OΐCJI5~W2bYL-= fں~7>J&8Qc9 n` ŽfpX}oΒoyj+JmZ>e94<,_6h·&Y2 os T,r ;7Rkά ߡ[%9驗Mb9Eƨ[WuJ"THH<=z'C`azv!uΪ,$3g\vf 0xbr< TO]@s΄SMr])sCR5 W rF!P{&iŏkc&aPӭkqκr3%@όlA|~mEWͼO5aGj1~P˺ДT+ O*LbE>]&vu t9MjYʆX?}*uHdLO{EO-ez;tE?Tg΍pJԺA!ߟP8NjaXZ @-fFN{%4]E,Sxφ=b|P-t4-_A^UvG) qs⑩ǘUiyo'UECܻ6Kۓ6| ѾM\{\,ɳC̒AXa&7?IOۀmNjۇGzK/9Q;_._o|GWY1{d}-$'?Jd_5l1Zx0;ePwtPq+4nǜH}Xz[V{F2FyXFMM_\dʋHosH/$K6bK7M>c#vc0y$l84F8ӾI7_N#/gQ?pc~󋙡XZ*Ae:x"?wk)g4JMEo|ށͰewKDp0fI#,An Q+@$sB&T)F5%y NL6g'iR%rV&{yؒrS*U!Nr H@4qR„(+˳f*|ЍqF;}?4oBK #/ Fs ]~’%qoZ}1 |$<ui/T8t,T^MRetM26J\0ɩZ٥甞%Oojڅ95m <-Aq[}^ $jR 5|`uH=; @[4T_׮MU[% iwWѱu}>.G۞m iuGOA ^tv ~xL85pTe;?]$䄚G5cPSЂ+\ߪx:i*^'i/S2h.;:䨽w32Cvx-[-0L?a@D,ڮ!=Cћ k7AR{de1|D疜24SH7N}dZy/4Yi{_OC&j#7]~P!;[\a%z(W0?ʧ͓w>Nby, y p2(2a0ɪ/岬iGτ?߸\H LjUf t =u;}ţ{. =\c#._BxVՀ+z?yk+ךFɿ8I RKjmB*.ś<}祵)3hM,cZF0Vj| P[MIǰn9ıFm_M&zUUD]G,n~eߗ,iR=Uƕ+ gTlo2麛T_G; ٙ4зTc1\Ale5iH 'hf:0llD !чXw-xm"[c1sARrƗCV<0Pc+y@8f;!@S︮zU21zh^ [ZJW 8 {pR7wWhx.N}=T< (~ Pj/L Upzd5^۱ClWuz +{ȋ~@jfLΦz$]g]6<zǝNlew_A5Y+=Q)I.L.M =Qh/m}= .}4R΁K^tF&䳈FD(\*PK SH](e9hjgzu#,oV9>jʴB/I3B*.an,N'1W[Gyr쩢{||aj*/'Cd梟)>t$-61?vwP6OY6?k&#f &byS]c'HO/>|mPGuf\Nc@vbuODCY*D:Dnoҹ6Ŕ{ܒ2WwJ3p#K@XZDcfEOyNZ=~[S~2bvEܞM*hCQ^9)uE;#Z=Zu=#+fXg%Ki?WM+9Ғ?N^-[BiG\lvթo|!4!%T(hq쿡TbHhYq5GI!KLS#;[clD8h@i0\026+MK+~Wؓ*?%SI'n揢HQI[B;hbq3Tq+s'UIS4rGʒFP WkOQ4Z5Ԑ9fLd0q|4)Jus1,'8rK /.?G n&!Rпgɠ4+\.O8K07m3~MPլ]fwg|G4$h \nV`l Xz\xѼo%h /GV6ieѥ $U+ij|KO+VlE0D Ψ ЋoIE<[?R~Y3#:JA-&Ŵ^!#%33?V4,8;"5U;N&CwJH1Pq2kFώHöY*QVʁ!#%Z˿Dc!Mw2Sy¦V.)l/[Vms5~8RƐrF5VSLI{ 4֚4({|+3ZC01\74`==cHsg2sqTOfӤ;d#u>M4sWXDgrWk`n3p2/ /u.f\Yx Jֺ|t OZגؠM"# Od[R e2BͽW֟5koܾǘ^}">\^Xl Y6YY՘=U|$"V/2kjN25J5KZkΥ(;(Tk#@GI>W KZ|  &4;\QVFF+[xdĦvֺ-#:E7KO}8{j֒B\5x !ׁbLڠZ-MO7ݭ-6d4~ăoC)+lrDCi3yRkq >I By!r-H?92pߛ&wg憨h"bZHog 净DAV[KMbC ! ) h+c9:Py|{q wlҰAKX!jAN~(mCj^RlIrw6Bm}'U2g*ɧMq&I@l8vIg I VKa1R+ׅx|Ɠ}>ɥ =ՊZ">k/˔K<)/sN\lqC_gaАwWFRoҠ:Eag#5|*1p1$ ҆oOyJ[NĩY',clz?x+}AFG)n5e|V{.S95_㽆"W?d ]8U_AA[{NWϚ|+LdbYyR)=r)BD/D\~+YԩWYU6cknX܆@hm??0STZJlɱE?y-ȂX N>A -zdZ1i 7yluӯz,G7pʺ$d҉JH%sǚc'UTOIJ3ŻX=9CH1y[HS 5NQnҐp̿"Rș ٯJ] /"m63/P h_[}Ni>ASR3ߟ|{;,Oׅ7x,yx fw#%>cP"|=&h'k%Z+H&7ugі&N$ݤBOhaf>ܫ%zeJ36mv ׃q}ԔˏP24Ō_q# AeḶ[e2vfW0y-1ͱl23 jSAˌ-ZMȒNK_-nSJӚB]B%+9 rs"W#̇?ҕX|"&Ǒakd\NRZm)HJqߋ_h 0x}nLMs%, neamFE>4G8̕-B7k'EpTGs詮Rje4P=1 doM15\:K_i[2MF8sLhQޯd hbi/׫9Jќ"nB%)Ige4'eӖIs[Fl:(ISنv_2lh!H\+]и2]KI냤^s5&k# u&TNUlIoNx^Żkq-2jB\93g&:Ut&(7-!? Fj}WK7_{jZܽ=i9MvvcD'6%P,˘(o帧FYL%ܐ0= BdfZ>jW9{aNiiMDqw t#f86ؑjo26(ФWzWÔݰP\=QK$$lYf.c8At42mwVv긂,Qp TnQ"vQO$|ċ/Ї EL]Ґ*遳NMXGN]]t&x\8{C:Ij/s#aydWCN<@?춆xPU)gOuQ4s%UcDΙrlqf7g$`3=#nN BE/VD=cT2l&$\n>m^\SO[,)xIn6@*-bd[56t86ZrKN`lp{:'oyzR5tra,VP&#Y!<[UJ iL)yJhu *Qcm\ɵc<ҧۂwi44D B2~z+t۳εn iBa\P.6PKzuf1P(lRs%lFr- }1x|"sZIp85tDͪӰ$Ä֯Ǵv)hD7Kε0QR\=.p [i**% !`+}*R zn&?NqqO(!WOG.":M1*,| tgKoV. gYma/y}&3jS ZdǑi~VH}%~a w)0ح85mod?t@@PBڊ3=&+ci˾ +" !t^Ehg& 9/[y-'TD=2݋~)wڅ fzöAJiIt n 6@Ȭ3t[ں 1MZƜ

FcW1خ `NeSRm M}+4|DFjK怤8B4B=Jb@Qt/V+\b@S$֡~?"X| .,#.H p# }h^6qVMS8=2>dte;iWv`Oٵ&'o@{dU7wa,Tb9'Ä@xpCMgG+*y'Sᕈ>HkEEJTw;jq9/%p8:9 YFWۖh(TV܋Me;R`BȚ0-"~@Ege3"Q_g&2;LLy85/~ zDeķiz>c N+蚬5> )z7XMZ7b yYpZIW/&JN|!4?;cOWJUc,7u-@:;FB8 ۺmCpce<*TiU"˥p@o9,Og6ce++*/2̄>ccd##ťA%iɃ"aej0;8?w bJQ+6DU<> ga ?]b$+y90bG-b Tq.GLvԱmDƟ =Ⱥ 1GG+%ƀjioa}M"874~%\ǑOgte{pwv5vW|epCd%lDsLCr$ߡʓM|rbYK7kF !e>9ZxidLȢjG`6~5K;eAo0NTT{=ўJ0< |q7"$' ƊzsrI"1?U97djK3qJԼ32s 9*VYz4 2 {h jy^Al=1;z9s&pՇ hK!_!SϚt \,f2mi+ַt"m>fN!xjiC(kI=x#bZ_(E |Xv{$X ,9:#wdPįo4.X;@{=u6†LE+ܥq1j8% Il9v, p imx=µ~L|87!%*8+S"ٙT.ZKe%I Q#縗 c%sPu}f7bK3hz1Uk0 BzBxQ:0؜sip[ȫ! 쁙ѣ8͵kie>i]mY. V$L5' I2>%6=;gylw\JDEo蜇mV #|A:Ak>;{.NRm-@Rd| b%b׌x EXI?_i[LTmЅV9q2`:蠿&8W4;Vtt4vUrmL 5nE|U2p4 |@het8N?a-F-lR- {j=`9&*]_eνb:97" H+D3r\~UR 㨢ԻƞlGŏ7xoA%I.|&3׀X5ʌ Kos]7-u\%AV>Q&>F\ s-؛:qč/0Gw.V}L$#-jƂV^۴ZWN# S[}Ayg^0->o`* M@ "X < `$GECq▋h׏K8EZ*gHYlS\Е 0:θ;b7p'iۗ&ȍ z0%*NDIAޱS|\{@G# I.zl4kхZ-hvp.D9M=Η㪑ʭ95b-MQNw$8'OI$y8'0s(1 ?C8jD'gFMg xO0\]KyM,FAВ w FA8' #S%{Bѝ@%u;;2PbL\=Pis^){V0A@BC*.K_l m5R!Re|0hvԲL$Sx q'+/5سKΧ`Bb*pu"E爈?i Oy')M/^b/~K}X/|#U,窾\q*T>LoQՍ*Un|ĈY_1wY8^8/gx86,jAVjW u>cz}s2WPЛtv3:3ƿ_vs !.G?.A կFi^tԳm_ZrH/&Vr,-[H|tu (Aoc޴*œe3 :C_tQUC# y,O.?њ\ O&^T}30 ZzglAbEq-%8_e 4[ `̦=ʡ{ EUC1KH}L[ڏ }:ęK*!Y{Y҂}w@Ljdg/}άx! bylB{[-fLrlc#[<3Ǫl:VR°|oh:s)f Xwh|͑0_1ΗdtqvCc^9e){y /0{+n"yTիp!i&Z*[j(MMPT_JO;CtTh'R>M{+3!NpFtS&<]5osst'Uby&r3ҹDa&6%MQR'(02醈f"a%R^*[qOЦrrė $ݔVȚHN a" ~)'4vRYϽg"ȯ8\p ұ`< ڟ1u}1dqf?hհ)"Y_cS[vq&ԉo26觚*"7~\Ga)vL:IœqP_5 & 34csϜ]t+BHF6a8}(QN N]k;p BaXubl*E - GIG)u]:cxހ~#4۳~]Ymx9N WPlٔqpHcUڸ ФK_tRJ6>3%IՃ{)/. I&8#Kʙ^S i/ϽRYa4hjZB*ښ+,IYAe\*P uB$T@rxl}{yơ:srH1w ŵ`Xm0FՐbyS!JmV\68kb^vJϔc%c!؄EEQ`WBXN wؒՊyel]%mO ̬1,QѠv^Omk:4O#+ QEZA-^tɮ}ۘ J bw;Thɔ{U (wyU'D͒is {СMJO5>PY6;F\` TʬϹ]\^FP 7,B.`q2~6Q^L Nu " B)<7Qٲ/9M/c RyM;Jn v&ñ{͒Lp x=ٳOPSn7pi㛃!7bNRl15X8J],Mp $ӂKn1 ]Ƕj۹X(<ϭN0i\ 6Nn9C졖;X_HQ`<#o|^G| 34Q.JX X涰C}J Fsoqy?R<0M"=U @&ϻۜGN2:ŭap(w=@:3B$~/w\sҹ_,;Iiws=-P_yw/Tl cLUSh l ݶm&zEګ}/={NJ{/?TsC&Z ]0sa~: '4HM4[z%ig-fԋ9}j,x^YҳqU17lp*b>CR# ͚cSs,sXeվW4Rk{u]1P#MO) w_ k6ܚSS8d'*|Ot(xr76F N'K@g䥦ORd|nU?ƹ<_H1/}IʝG\N#Ly8&Y^;ޜu촿 &̂ykQMU{eœ܊3RE#iYZ\.%h8+N]>߹b)'XwEvԿ s Y$頜FN$Ld yoӋx.VEHcC5]"[׹{d?yplR6j"ꗡ6ˆXU&PI1A|h.d) .}\:|75l|<7OQ!2݋rh/=vgDB}qg)Tk\(fkp_Yi"U!`B6CntԂAP}{M(hќQ\t]2,(2ŷq9u1(Y?N6R<$#EI_ PlJ]Cg6Xѝ)9JV%:2I hwBrm:)^QTv`2 =KYj%g7n{Й?SK.G/VN*K'gl<-!hW>زR|\w .6EUNGN>YПI"]Qj i_ -تRjy1X'LPʡ tsz3Շoac<o-e|:1aP(]N/Nt5R5Nь͚0j]1M)Dnl#&ragr4:[g. !qJ:J5_bEV3.>Fރնc^Fv & Ֆv` u;}AŐ~(ܓ)drNNsN,2fHbi }!NOq7QL;tn(iͶG9 ק 恱W*bUxM>2u#4>x7(5Ơ!,x)v2 2 L͵%堋C45]jiXz7y䮃sC\H3G1X'%J 5٪&^`p" ~ՠ3tz ~iLC : U,EO VehzHh◷džoIY#)";Zd3TDx*V88.'-xqCciAdqa YA}|PwFa]K)A4#Q!BN'#1ODn0 CtXw[']k0-#yJ*؁TLk˹KI My{Yo.iĹ\3RF)28v`5UxYc;%Nouf&( ()l Hm%7 /-Q#W:Uk'?EW:#DPI.IVa:%~nxky4kNR:w:dLH`x$`ibZSJւ5}LxnW grZp; hZ+/$L" } G[r!fֹ4`J/\7zR G*Ve<' z+ddZ:#O=,f@4S6 7Re۾qp_&S8uFF8 X{{-Z5C&Ai F, QuqwkGF^=;.vb=`B|4@r#7~gLc.pikX(> ]-ZQ w}ݼ>J00 w2_[L#mWh9t'$ -C\2"4 +}WF[@6MZ\ +#A>ko1iQɯI@n >ғP]0ZR4ܑG\}?lG[ = ʏBY//7qs#e<-[.'H/g0:E 0C']Cybl<3xaky8,4`t 8E{ ٪y6BY4g1-R'gyTos*,[}gI*ܬі*X;D}hKGvH_(5FyGݟ옜jWwщ>tryL;l_QA6#;^3l'vv]$lE]f1Kߗ߰y2yԻ8LLCKe^AWlۅhQy :'v^-`iq*` enUc&K{ vkčǥԤm6}^뀔]&GX(&ѸڻAfTe5EOf(s ڗfn x+ꄱU-?_@E﮴#5ѝb<<;ɶ7\ ;!a ?^CX^اAϬ78 Ӆ| b洗IhÏaEY?1>zDr$r_+QyFJdt6~O!7V`}NQM+CSHo;MѼ"mtgaKGfw+wy8"Ĺk]gIQG<ЂԲLL첗w@""L@A=s~\MemH|7xh7]-gS.lg Xһ8+O/sZdݒ,xEpne@`zBm-aĆ9@t>.(? Q­ ә Z]g"685QC%Kn'CڳR~8HKgB\5k3cyrr>Nk$MLH4jy v@)4[JI!kѽѿEhghh[ג8/G8d+˒]G܌# C"'<ȑp7R4KciX{ $=U&c.K~˗b润~G_#· _wMTx'dZ3N/@]dP\I`e2L8t)[᭿5պA2^WF +%`߳J(; ޛ)}Vw; p x8[-]h+:0qOKʑV 6$2kSRUuKxG X]Rߗ$>;>sV';קu_j2eZ.XC#ZɼoVH_x~p_ڣɷmLۤB@"# 0p@&ɮ]=a;FO% Wdm$kݹBSqz~ 0ikw51,Lnѡ1iz>jξ3PT<|{,4쿹Jl;7NMDQk ]40Zj XsTT`;ž;ō"snlWpսaOJ_ xmdWa !|b)߯+ Gx @UZO+CX>M1̺by@QZF0V U\]jiKƆ,_M?>mnQ-^7\/Y<Y"cSa2n7qvHG[oT+_47}̐I[mS:n2n2h.t¾gM,'\Id8NK{`W5 q7#d;efX v 7Vr)@X~r|PL6AH+K]'˴,5 !}y }ָ[߸k p,C$Q[{JrgsW5Z)*#̪q5qCt(f7dɓUHBe$Rq1+-@\ª&V}ˋ:Gh}0.V l4vW Z66Bd}}kSQ<3TP\܋8d{P 1- HR!lK]Lnը4+ -@~uP6 㫫L,6@Pђ%[$qLfmtkPF'm+ON)|%:y@=b6zt`7}QnD'}óJܝ5Gܔl3!Teͥ-yqH6άl++D;qOMo0. eOEuL6Zpvc!Q/7 PS&2d;oq,޴9wy%iHX}NE̿Iܵ N~žeI"8븧N?!+eHȪŴ  {AߚK~qەmME]347 UfFu!ZQZa6N?C0`>8Sr\ώЀě TXo۽~փiVf&|QO[G'e \~űZ -#"e;@Qh\OCh}|>*WVmkv22-0Bmͺ(0<,^أ^_F f.RM)$4q*Ǟ?Dq^ŀO~{C@}nņ2-mtPG2З4+uӖnD!:@mnH|G6Kx0ڞ>ڍþnuriF.S/rX#O MZCny<#0c2Ib $±r <3AnxuZ(&s{jAVi+[M9Œ4ۦkPhVx%v\a ͘+ϱ8W!$}<'bpݙ29G91f`ɜYʟǀ,U]NM_ \n?E "L,qWdNx:Iu.\[$x}+2nVpIݬpP/ذw/y\BG"ߒ~7 Kl[Nī.[#>W轀 h{ϝ.YkW|协^ZmZp6tQ3I/=<ؑ r)YYM:{l~Ы(p}+b7vOVqdKNxK +33E} "ˢMΗp2\`GqgII |PmYy;8'aNXxGznLzt:[K/nv$1-kx2_m4St)=UQH9[L1U~ha$r`t0|qn t# Z&5g \6{^fcT }>?a<<덻U.|}^p-I=hG"%d %{@ ^:yq]=R} >]u /M[[0/ =SRs^`);?gesNFH_yzc(+ uS~`:)/_ƥ[F9i, haZ-ʰhC%9WwOm8g#edO{JxE |i,EVuzcl˃!Ru&'~p[LJ/Ц[34N}dS3(D&7u̐?t}j(LnӉ}HM {M]٫^rq-V.`_ (B#v7YқLГE=߾qqUpΝt S>@T}#X@c:MlKzV#%9Ib1* qK~לi7|WYSG d5cq !ŵkm(8VqrtdhD,Th}a1 B/ԅеˤTōQR5 Ta%}Is dH.d/耎d{ȓ,ED*[RpWҞ|jb- :t7 o=.!QYרA.F&b@~#@| :QWqpPI_eJ?{';t=@.Bݍbl6K?h |Yzmlxi^PwlQIo%: sI= bCHr%Kδǝ٩r`6waW-y&gGmm4?ndN0&0` &d.*;揬#a6r)s鎵5Jm݊~"mer> ̶ߏ#pkH4y6Q)t_9439w~#vG^ꀛd=Yo"wb1L2>H,#x>XBe"YBzlUs Q^?kKA)YfHĐ#-9˨h2AtxMV\DBԂRlu\.;WBDH%IeyA6nW{SE Aί9n=7ɂVycm4)5|x aEQKMbH'R⦫pKQ~A"<2j]7J 8i~.t&*¨{Z(- -;`C\ G3Kpu Z*HC}y ҽ),e|F3y7< Ϋ8U-80`X==G1ĸ=p ZPک;dbَADêθ3yW=fQ:X=,vqiD 7bJq/+mH7s?O0%F "M)PZ4ҐPruѵfF5&[Z hN nL2o<G9!f+ ;rK/Eյf.Cv|bX$tEȭnd}DV]QWTZnfxWP¶yS(~ ܁c}Y3&PBg~;tD6t~jGo`o?@愽(8@T]ڃt(%X\ Q90Y0I1^Il9h/U5aL( { /ƃKVUh%$ )c䷰ne,& 9!i /mUi$P*X\򘩂IIZ99PߗC/)6_oN N;)έ٢ x(=\B+E eToKJ@ߎ 1KdFui^ecE8|/ю.W0 ڨFcs0| w"*f6-{oܯڕ;a(VF_frLK8^;y4CE u,pSFgYL.Eѯ rE77 =5Y^@ ٦٥]ʩ2I[h ܉3t@rRk#%;&|bIU e\)RcR/'g]h8U~ͶLEtzl 'LGfK;fpRƆ٥Q.\6H(*َݿ95jCH+! D_M ѻ&|5S7_x,IX>ѽ :+\ sJ"SNbMHB4 H6]-q+I4s\3C?=H$4&@"nmoP[fvAi%m ۲3&8j,a>F!o@hb7fx[b8M#KT_ct&8MzE𔋯 U)J <|)\,PLV*uK;@ym<0Nt1lHM,ZT&:{VmRO}HYefĝc(0}.8i,3ۤfVIoQgM=&"N{=o R0䈚V`eDŽ&MȤ:- $-gs?FsNYKQ0$ wz&a(kƸw-2SF}nOcɥSyF$XYР]-`lHf,\A.۱.G`6\A;øIN@B\aX?注(!ly\0m]#}S}BMH^3 _[\-'М-ג?*S(֟]ī !Q`e͗m!?6z׸炃4* _=+.V/uܮs9cZގZ7%O^;-͚gg2R{hUV vie5&s'>qv ^L[6^2Q| j=sXh P1&#w {YeBU&䖁KswAX0U@9QϘG0LzLx 8vut#F( *0H']oMNldl!.o|" M 9o$?}D0Em>D.|\ZGz%[RhE%'kB{=PPxOpgnE.ϟ2U[#jDß7c;FqZ144Hwa\_RjˑI3Vr<  orqxVpt{GX_V#J7}5oTcz'hWn҅OzWVC5^23)乤\J+. J2.]KBmL#V}'Im@]WlGq춇:@5Tut7]/qbZmGE2vmjxAۏxAg|0+Y3OAKKJ;(8bNaTE.\fark$б? g٬L@jܠuJ2}fhCfqIC z= 𴱾GM ~΄^!YhU5yl1twѕ*G +j=H}P0_&71:TkH/!RY[ x&Fa;0b)T ;;u8g@LEkkâ4[p|>Y$YoZS\식PqTW(Lw! MEM.DoZ/2jb,80;Ё) 4t2A_fVhs_0XzBmL>j-RZ bN'K&z7V ۃΘUՔR愳)[w Ԁ6sXFzV߶m7SocșYȒ U͚)(Np/vPL36"|\1ћb3$Ԃ췒O\W1ljkN5ksK.˅`=fE02K[4rA5l3 +|ŝG /bw,WI˵o9:b͍Vʩ$*`3k_ց߯uIm)q9^3oQ7;O5)QȝCBoZOՄ>WH ql*]\S6V[Ǵ:cgv(4ASVfE;pko@=Jo(1V+%oP?u/Jw#^HН($ۍk͕X=D +سQ ~;9da#fx\kmg2`!@kkԊA_k݄-׭^8vhi~Lߴ|Vz~SEӭ X{QP8|魍I!4k%DV!l*nPլ +}u8Π}hb=B?B@x ?.RgQ0Wy=1*\kCcy1wkް>3I$X<Ăghw=fn_$jpӣ, +핹 eLmwo_Qg|YsuS@* KZϼC5SKCY5u/Ob-RO܅^1!)YE?,[xy vx8 HfFEB"z]Ѹ\&QWy65LN6GLRJ$Uv$k1~iэ MU;?&ME[P%JptpA-:]Oo28bp-W;۳V0m;7N/!5/QأmQѨ3սC&tKo7.@ 3y3

qǒ  nA7f×ITtku4.E cEMՆD؍*?)sT/3PRqEQySˇih9Ի ]M,iiBBW_xvUƀq*iʣ47q_|t@;"ij41H_$p|S:@q'Z-)2_]i*'t"r u(td=}&e;J V,уיzwN-QX~T;igtd.}<.gӄO#;aAQj%P+t5Wք0MLmw=# )$RR]16%05e1﨔+ GCmH sg1 Z0R7t ӸYCR)w"#GT#Yr(uHfbGO4fn{ F,R6M)C, v e`82}+X8#Hexv;ۅ:/'l˞5uY8t)qۗML|KOwMg #7 Bآ~vb{3! 8F5oΏ@ֵ@l3;F,yWI2)nBȶ9/T5)O&&&Ǽait.8>`R~L`P':H]gp!a@++\g#]+ )!:rjG?n Cʣ c[ UVɐ\ܺ qr(Cj~"d!F".oa5ˋ+Q@O mc;9 q>f#;ӳVKh$/ix kn}eqlQrKOPdbധ1(:`\(3M@ A!}֚cTT56e L{b5wd?$D+C DxcO>"8Ljy#7k5S9wa8K䒶6IVb ˊ#q4E}Z9k<9hąrYU>h\7EY߰[kK\<(Y?KmvbژOFi#EirnMrݏadJfFk r~w9K oAjs0~PZ^FbK&uU&HdžIQG:f$XZVIu7Di`ZQi$B"i.Np%)v'\,ose(Rꫴ$k)a#^1dY5BУlV7.bΌ*{!w{S *֒[~&ON˧v\ %ēr^]ߒ*iVL\etR1vќ&l7'= ({ Ȍnaz6b39U+x9Dman6B#7}aQU;|oћyBlqK.?AgDPPJCn@DM0<=74p+D"Vy=bzFM&S/]Vx f ˻,cje;ΐ!6PXD UKc1h%*eKu% Hs8p>"6yTSmz"[˳_z(}lb..; Af By]}\&~ Z؛dP%NZKI6n<.4$9sLh ``jGn[שW.(mNt#. ltS=ȼ\eO?i>/2J<'M FIujsJN..(qfHWE|s'Q;S6# 㞐;ɗ ߤ;&sļb϶M/3tٕԑ]3*&6q|8 cL6ցl7M& `Ign)p} ;"zS462 m$ b*bʶɜ6@3@Tځ Mc飨gw9lNL,y0cDҎ_*ބuAI@Z$~0]t{O_x<{qAeYlyVFU@CVr#>gUOqHR.)mz%~@X:  S+aM'cPf3)80|UHa~1.6KscF4.Q"4n &|n*Cܮ/iN TRÂ(]$J~~e՗7uABp l/*O`xՅ=z5E{= ?;nMTﶘJ迹b`axoDFBr!%mxh+|VUw(NƸ,HosJ^>a&E;.md\]7馪oNK`T&N[#G 8T WV7yX{m|z$z=|uigWF%Zg\C5$F84GaJEǓ<1obNBP M-|ӹGoL΋4_v6]? Z^!HrUc$اiKh|NB9y,)X* Nl: ܍ 1IMW^Tn4[E4k)ۍC0hמH ٧5 ng }e4C} 5'xo(*I5^'%KSc{=M7IGGMTz P,wZi/|mt𹋺XR(n .S 0ߺG_G`"!&nپ3$S{i5;0_Kӻ\)> SOt --i+;+_l#! oȡ?,R斆so !wQ0c0,+`$*D՗PXs9Y?_M-c<n<%}6{\؏>4\u飄X[L᳢8"0D FΌ\j^'}4?E̡W- n/y|$Ja`²<܏^?RF-u=/(gBK*neQolhW  *3'j |E>nf.`@V6XnQb0N/m)zV`v .EIu" 08̈p?v`iX,ɪm8㜻q5*|^{qjÞM[rAnL{J'? O9$ 1 9es\f"m"y-]Jka9 ?#./і`-/bH|'T[J;>%7++Iԭ/\K6s!ƎآTvQ60R21IĨ@*]TJdxLNb|u8Hh]t &cqD+x{ӱws.R3D{_?l8`ArIӳb]^gK3 bMM{jʟc@XJ R oРd:nSs F);Վ5N:՛H*1tgDlsfw­+C!743se6z`4%M%lpaufԈsᔢ(upf¿lEϧ] tBP CE?m"ϯJ絆9A~NO_RMQe@{̀oxC6SgSM0R&H~sky\ ?}"؂\T,ߺlc̦oyPM39u׭!P*e;!n!7yVZ:U* b $=ȹrL#~k|L/Bҁ?ea)ۢ sKp'SpT펤\緱 W{~9 {ÏdX#/dSuf'Sbo C_?΁/I '][]t1AH<-LQ# C{~oE F''vw2V%MPU͑$"kޝ;5_4SGjVp| K< h6'cJ哊|Cp3P)805SVM]]f,ʖN&XkUr$H)|Mxܡ1wB8oCe)<(<-AϹZA6 1ׂ +&ԙ?.lf-0ZDFm+t'Co]ׁ3wMagu8D n_:{iQZ~~i:?L ܿD0]9HKް=C~|D+h6.CH^GU靋BE߽q0{~܅bDjLHAgz8( PWV>3aվhˬZ'p`q #1{^PczWekrJ)% T܂.b:al;33{cy% ì(K/R;m~'OPۈ?Ȏo©@AC6m<'HeL7)-[ l&tt=t Ր=B݈NNiFmR{k#BLG}΢`;8S%O򱁖8n 9-hը|wS oз Eb oą0_[$*|%}\gʹ[u 7]ت0[/X?je( h|oʬ(si3CW3Y~)Q)ڤ3层g< 5yJו*뗷ziZ&2\dˢbc` F*o.p^R:W$ך[Chk{4~ )cH" vN9ڗ r;94LE݌7;p׍*Izsf.N G~-t+0k'xQw5X)^ʞc!`]=qߴ~B~/h 1C6NN@llVKJ-SC:]JUy~¡np"@^n7]Ă*g빮9hj'i؊x$[p>T3;4'/NOFG/8X[m9Zc;z<6%`涶bB2[=dj\WڄUE\,]MWۊDRL] NE=CZyz܌]dX嵇Hpc̱T5poWLvXJtZ9C1|WmejR aU@a G'u+G@G#ZI*&?p@F <yo Đe!N3@ t+;ߋQCS]iۖhqЄ6 Ł`y^dl1t!oKCT0󴞯Cg/~NΛ6Av<4 uXC.i$Ɩbab뙐kiOrɰB"Ԣ,93EV}R6X [ڦB`(? +)0 m pTzJ@cHwEs̲@_x_j# ey _B*Q>ZDiWzcɀ'F&#%D#˪Ι\c@ݖDfɆPB"ّ)o F拓uюXXȿK͍7jFSq~[x_9eѦ o޶kl^B&2ɗ[|GWVsܴl"U*98ȵ~LaDz/}s46cŇm}4^ _PPeNd8ݵb9flҴTK'c*g+hԎIJZ:e|CŐ﹧G/NڗoR40٩ĞB,^VRb@u#؊.JN<cKQr;U8dŏz:s%OD:|U!PKJd1b91+Fl&CBpZ-߬6֝m#)6ְ6B󟤛UFCLX`ڥO}xBz}16h?mM&KUvuJ=Ɣy;x.Z]V<@GF?NYٌZh}/q|\&@v\OALӈ όNڊH\v&z !'r +Cqw`[ h,^r_`d^mrʾQQ1%yu9L)Q髱Q'dS4JW Ю0ˍ7*0O'9:6^RB/ MsȄݳap\ cZ?ݦ2ZQk,g/7QW@(ծ rsȹ`+h%շ*@8ek%Syn@6}ܶ!]^WN!sB%wRk4p(I .JdM"a?4TC%rեVuY#0e3OH4 3rDU/_u=t/XӨ.p|= գǂs2prSH\{ԭ-~9sU}XqȟyY/@Y#qe:>h. DeX$"%OM֑x.\Ǫ05)4e>%-Kۇ +ҹ8"(S6ž0qYvT&Zp]+@,z5֩xӸM<;SB/Pu..tJ ftQ9|pgX&*v2l4Ƒvnˍ;n tRLtg#x\_fVHN&1GI3U Zز)+1ЯFJ=Vܣ' knf+D54 fߕ `ƚaRJ~wWSOx/H mhڐtqdRTӛ._# JGSYFFs69v'&p$KB 'Ϋ_'Fz߭~(>SGVŽuͼkش%f=$n@e$+„_`(i}*B;:@c0Te 1 89b/s`Aij|saWm i&BtI#v  #\m{{.(Ḁ)pB*?ŭݙdM@*A iF42F"~{=["4AZZwsp&i\5i 袠w@ıZZ' !B7Pj͵/QN)"mM+ Ԕ< ּSO%8!ˆ:ɓTk;FLmBG:3!Ik69OP>ȘaC"V5CwTw-A'V kD7LL}jbl?t}~jM+7ۯNp\xr};"#&Pɕds>Do J|zX/Q#unpƢeތm_ ~Ca K3?ƛhl$ jGrDx9, ?&R 8I]N̈́ADټPL(sU;W ƚ^mkbT*^O\d !SI+ڑ9FZwX(=W_Z-\g1<=ФByIhkPQ-kCh&raHY &kdkC\?CWy؟5b K5A(X r|{/Qvϟ1 q2 <կb̲ nYDVKQ '6auݬN؟ƝNYE\(h*!LM0Njm"m'xWi^(TSrVcOKF5e*}ԠsZyָpXߨ蕨葈q^˴=n(Or3f|a.|R C/>U=. 6!a&F5;Y ghhrzT~.mc ]4=FBu Gw Y'Nt|,Dna#{F/T螊:~TŞ!k* ^iL̋}bȑmsLzb_%[=-ѷv0JcgɐgE*F۪!=Bs!zsEQju>* b}hA#=?3qK`'BMQJMsA]yN kz0}2Yd%n*n082tBB&-;٠؝;._So$l Q{K'D«M5q@th1UܰSKo&yO@J|J,6w朮J>B.^º8sRm}{yw_LVd=닖z3G. 﨡lt^''150ʕm`Їl躍DxfVj}z66Rұˢ}4 f&s=j@=fHjw0;!$FGV9g--qPb\< -@C ;Ah e3$7{* pj$`k#dns+_|q$+o !.o~2|ɸUh?l x)_Pϟۏk\<͈? ,/鄂?IﮮEsǢMT5k+:M CF00 %PJNTfynhDK0MruQꍲjFs:bg랃w E25 B1W΁LLTY0w!,Zg%6n'HHbILS|wdh |I%ٵ}j6`Ph5;B2TzXrQec癲DUFbpgz#F(|@ǎe62PR|1v{d|aۦlc(g2f,اS-?&.5fEs^љg{u+aV,*%UPn& .~ߧDpd숔SpN0O]]-pŗ禂I!p]ONwl5α/^:y}"5;;SS78'ivX;3bguD)<`=9`݈9'Ѹ_J@ Yǣ:^3DQ.Hs3fdfme-Q +SKLȸYT4%ooeuvCͣ۵xq1 g&Pr!^J:Lwvb!~+>uZoȑvojYÌP;ZlU1Re't(8 /-K0*(ѿW5?fj %nvrY VtLp 2Ѓt 6qm=+f}2qq! v0g3!ՙ3Id+i۲g ~(kWf'YP ~kݫX T$>?l_vZދ\v0dԢi9<@pw]ֆà=?GϴM:6mepHQt[I|^q1cZ(H-gI8Rƶ>ܑ/׬m:2zbxrf@QKl1(ұ*qƋja[-WI #nm\Lsd׾L m$%@4H-MM. mh,\zEo{cfDI҆-b1[,UUJ_I<)jgB,θ΀RL召&, %;AiO \ x0 wjy!?|Q%堩2V te.XZj1Zm{7/*IGU%I{HПpJQTY08C8yQk$f~m2ndpqUREe]nUM˚ou̻YYnQFOSd9ҀcfDVc L=/QZ6|N7f%;ڦ]X5BP|3-3Oe7Q2`XrTSd|B 9;Ϙ=5fmIۇFdlkc~=y'XX]Аx>-Sx>'>raCQvoq~UD"⎷T۲e^BǏYDUg8YIFaXf7P\.0TǥLkU;'<ٟf\3ln ]XS؎R x5p έ9әba;tz%~hj%I[VG8WOPu9LMF<93P}9nB/i)c GsMv[/[PK]_$xz,`;2A 6C]'|Ŵ8 co!6E_#YC.xgI>9][yYmSvGF몪}x2Rz) ՚{`!=&rH9x(GV\ۇAp,f rTB i0Ce`=5(Ins aPqkעT-k6!R|Uu߈a~}-:zg^L")kNM'\W~=ڠk~e`F,_r&+Q3 }/>٬}/-Ͻ>F-ctpXJ+[^ϿGg$GgDX7桑q{# &3TT7pgyAv;D"d)і dgv+P 4gHfݩ6פP!c{<Fgs(Y.#@Px@DҘX4ngu'b΋It0SՕ5>`*p VME86T?!{qGVOa\xBa&.:izY&Bb.ˈ*mHw1 A PBGQm)Tᆪ(y4{S~l{* ecS _t<~ &g7T4JĈq9z< LhrA"ŦRͯ%zb22B'xEEEUZy! PlFiO贋[0i.J 0QJCq_SCvI; )IRl+9h_^"l&spJn=YYP6&-4ZXv%jt<E$415ݏhtzm8O]CIb\-ON|?M# im88:¤Vzx(0|oEP˫UM+5 Q\\%Hx<Ñ'_>CdDcByjj89ڰSN'JR*%CҊBz˻UhTNt2 N,3.ƛΙ\PeB=f<'e%gpS|A9Ό7iBK6"]yAe\ !lVI‹:\O+q'Jҧ19n%ŋl]<#We@Z"MQE*X-ӷ#Tֶ Yi!x(|I`U A%]16-SAz9bt nlT;N^<)M,Z&#WSlOCPR]ez)D~$XZ=EnKɊ;i(R si5u,9͍]rZ^nBwnMPբPǘZeJv.n4G7hC-tv q_,{PxƘy@(Z^w.٦s~!5s(F/vńSOM{1 aVM·7r/s_xNƌ)<k5$|=UtE5O~ ^CEy{MB+ !SN*kiǷ"=}籂 \UkT!־>Pef $6NNkrl+.s;b.,/fSn쯘.~/o ыVݚ3pCoq6pOJLs@ ]TٟNa'҂xB4f5PjdJt-F ;WXqpPq<>acFE%K^'fˁؿQ֮v ЌВ;}=sOq=فDKZOy^n`1>ht JRyf3Nv-Lz HWgh$hɽH!v(/`I]6om:ؼz%QQ$C KaJD}!yòpnggBمsŅu 8u`16!1H;D<%摪EPEe%e k2}|\6Sʫf-֋88vW(JaYkCV6L:7F2? ^8S{h5L-j%V [`CLTOCF0Uloi\17j!:5@ ՝UŃw_Z9.؀숹(+\ݏ"[kon م(5qZ>JGt5U-&BNc;*@2ݕp8]LoSLC;,!4dY{ߍlc&TW?W2#!ϙ_{u%oS)ՠ7B T>Ɇɢ^w +㕬Y>syϏL ɁP>R,#׶5~Ii<,:d3v|#_1_W!<v*^l -Ttu_Ȩ@ʃ _C|d^zC'Njp'm&^ىu})$P7`ۮfa h4sV<ż9$OzM-'/[5(]vsAz`o G)=EePN`:;O\"܊`lͅ$`V 0.cw-cmwI$!n&U&tj)rx@!~|U?c< q "s|fB)~^>_itR|sA"?P,8K%2t1ugC$Cf&*'L TM@d{$U^btb[$J*E^5wa dF^LۦbǠV&_K˕qNx3[H{ +$Z:L^ ( #᪏r/M8[bWim8I`11P""35hW,ٯ[1S-p$/vJW:[;A/8K_v +j|ݳΏ%XINoŭ\MiYs8?d$A (xAWףQjorJ-@ƭkv51K3pHKAXR&Sb"W*{h)HGn2 3 Z3 Qgv߲!RgAH$9ճ~/p1lw+4IKx3ӥݲ2)/k_4y5=\H:6?36ᛐŮ!Td'Sޜ| +ꚸ\pAѠg8:g 7Y7"% "L@e}8֗Kq7ф }2sL^7K$<ܽٚ:`Py3 bNQ$ο`L`$yRwpVEPJiB jBV Ğkj%6b l(봎AHUZU\sNWԐR>5l/}!A-2+]#q>4BVX2`ۤnH.NE|$ 5og+rhu|0T ܕ7Cߥ9F(iXjdj%,Zl OGe--)fMLŕDhF@Ë@Z9Z~ . xq5!/͞ AO JE"hmVcnhAabקgxv"B yFr`&86&w8--1j;dz켈l\KhZp}47{! &+Ű4`D UP;gVݢ>7 X?T+W֡*˭ H%#r5A:^TV.os4FzᜅyMc!BX``z7ee~B2wSִ38s7^3S[ D΁ 0^=1At/6&?y\OvO*P}>iu&`60Kq-i|@7qҺiȶҗ9FJT3~mdp۞162uțۧ2-Ƭo=w?\Å YuQ!1f)KQXOHC6J\LeE7`;>}J-Bs;{Uu/xJIBǠ;$ាL \Y(d 8x6.̢nqB<cj:XI6nr6:s6 }(fW3Mɓ_* '8^Eeo_E6n}֬(w)Qÿߓx<=s9U_Ps<-?4?Hޛn~H~QGEG 4=OL:D}h^M4  [ApA"ޣA&Vt>@51Rzo0:j} ÆQj3epTuAPz $FT'd 4eJ*3fU.AtF2>MVpܱ;ekC96ߍSXFmQDv4bP:̔팁)_D"0Js6Y䷔J;;r$~NͽM=wbwmSش~WX 4N`a_b~C }byil' .Ge XXC=pw8)LS]3"VNUl'}t)SvВK[BQbo g@䮇ׅ >th6dέ@U# (EH)M1_Audz#p](#2W{[UѬ~!S,+ |RVW\[og鹀аaD/a?1`bESC_i΢H,hdpܳ}NeSA7.CF d)W7O;a57N.!X&.aw"'M4C:.Yya@hOaӷl)pc 6,\O,EZg Xǩ'8З̮Kpo*׿cYA& [6t\,#\<s`-_@iMz2Z^c`'f M} JQJX9dZf:ƀ|5tSd fEl̖ܺlf"B|! TXėS'k4Vq ߭Uh?yݑ~I;MJ5S[|W+y0&룽ʶצ7 tvY,A.<b5D_4`i:`jǔ\! ҂J9+_2@okRPѲ3Zl27ٱ-5 j̶b7OLrN?U7"dqO藑Rsb"Q!6`*I  C5 \w()hfRm5,^]:DSh/8$P&aGA*ObrSsո hasOZ~399s(2'+`?xO5(y̮b ^\W5G_1nζtH*_ IwV=?;gl}!.mΰ p[#}g& 5F]hyt?{E>8h<:O}ey2T]" ~W τWN4ꘗ9E;~(<)b?T5BWOwRcot%+OuVPZ>m~'0!1mɖc` 9XTPYm 8Y¡mJR<ulZXe{i( E]v=9z8L#E8HF*676V>:-NTQșMx}Ptܷ,rK~^&/ '=dg/a@ٳJ4r4Z{֨%)4dtT?j3?+&j+ KTR_YKLyTyi G*%,d_=mv!(n/~62*DŽ`_zȀg_~˓Aǀ"b 5Rtef}َ3h(bz@ Ql:. \4me#h%)k̬['/d iE5'i+u]  -J Aȩϻr}HT=>qvzZiQ^.₈ hae/=(TnPɷi9i6ÁZIdž0.=F1&^4 ڜpeR: m&+N+BkSٯbguuKf+`,3>t_xԾ9?jwU D `tfsd!12<Ԍ7H~R%9q_{Q1H_i%e.GN,EgUo^%^vh Voz՜mPCۤ+F%U 59@S4QOXc%{u+71RBb=@vl{ߡ?>U\7:͊L9xR= *֤|8/*%ײC#$vzY+,˻CE~>FmWn5 ,oiε}}'WR"o͠YW<-֐yCh[M ˜z9T Y$QoJNګT,1[Ĕ_~X؝yQaޕ M5]*A1VsH 2ΟjxŵcfO `rhi 8a:{b.hIGP9,̋htSg{ s(FãtV4I9~Wg:*e+fwJӸ.Zut ؋vi#5\xx:,$wN7et=lyeIt5Ib-c \*QO40LxPQI6bB bBh6fSo.oMdpj{dU6WD_Y 4IU}* M]oEI]JI},=%zTyc8xs3N+9pSXoj"`k6がf"y-BTOuG#t ׃(@* S,[pIּ98c0sD޿>\kFH9J:mțN [1l\t{Djњ׳x*f8tKL $ae6qd.ӰD'?aH`-Ҝ8YlMh߮ovgtʾ SnhՕ'-@3TV-y9ѷ׉Q.g(գ9@iP0wf!G|ZƲ ,G*Ӣ(Vա_zA-yݾ46`aM!¤Y Á˹H0Ca+^ Fֽ㨶c.DjiUusr k . h ],B ~ 4γk7-,ivJE̙S(/3ծ85X %x wC r`l&òIT٭RxY/$BRWN /t6e8%$}š۰(}IUHs`bcB\(]U QJ튋Gk@ _ҼuA:5' ~yZȵ-GNT%dp^bfQ?xr.rjr]UȌM{42w}twR;ûBpo3j$4ṷzPKxZaC2‡ZI) UMLVCg9H6-7 ]uZиr !A-}v!+pxi1p4vi<uvG('Z3eXvCWUHK}hs` gvi~W>h lj2!A&kc&H~Y_I_]aPIt z4i~Ƨ<8!f җ(+_B_wHgSqFXQ$\(s8>k+>FxdIpI8:rZ|S~#S~Y`|M@UW!"rr_ .-n^Lw%h[fvw??_;Uf1SP.@Ġx#6\iv擼$^-)K ⊀!2OA i''zy`4Jzy4v^5#&YV߾bG Y:$d/v˨<㯚V3l,ـ(UjD|}߅_;CHeEveo6:+`R Pd+,="f2ksM[櫢:U874k$tf7 0 n5W(T:>/lwnP[U i$NX ޮowry!y4^a"YT*i_E},;\S}{ӕJ/#YǕQ$7/#ZZbB#* q: 35! xlI *{-gr^/8D7гì3R:Oiq; ss[Pda0s| #MSg!|0!+lgXwϿ_+e !cO֮z&]Nm"VgEO45wc$b#PA;Ų٢ǜPw!N`N,EPФMgob'2=j5VGfGT ҆4r9@9%Wgi{=2'kއ,hyb"# 4w)9˼(+Dn)wy]$乤\0 Tu|۱*,r)`5/&oI@ECLۇ3m+ h%|\k8Õ禽 p1sOZXw}Ѧtid-.QY:`F[gLܔXMm(zQ(SH՗LKeqp*'lXՏjSLҴtV>&Un vh_49r]iUɖ,ulHLF vt/k/KK2>Fvw1T{AuO4U# 8YlG㼯w+4^r{K7ksc6`l,;H_g4wB{N"hq[8w|N-,ٟz9ו?0aEPh2LY]29M5(>lx ԗ!~țgN}=͊C*a'O&,9VC%/T/mA&Xnz}c.Y⢛8[!I]q;ް]Aq>nȩ^Լ#(P*m}85XOIA_knaׯzV;y~ecA Dt@ `actwF3~"cC3B!WK#2}ߟ*3 (U_3?BaF|3vf.NJ ']S1,jfbOϞ{!)[Bs6W1Q /#s,9_m;xؼoY])t1^=E np.EPOj'9':8oOB!= G'.[Z7Z6oH\Eu[}`Ҥ㟞ˮu qJ,N]0V^EIy'e47T37qz$|P{},v4BIcgyFMUE@-_-4j? UZk= 5%2$79;;$bӮY; K ܪR|s$z!ȲHyBu# 0N`wOj2O!? lpLKt<{Nj%OLk&dğFپw)"ACu9#HDPKFl MC kg(I->\pTm(CStV ɸ,͗?;>uUK:N3 8ӧwYz- X G>[~$6E%GpDPz^esB8F5BDpU|~Ϡ1a R) 0.D8[ׂ&LLr! xe9P-o9VE9uLO4ZGWuE!vlL`^/?iMꠋJq04Lgq[%Mew#J@S76UV!ⷮfZ#^$ʑvE! 3٬J_9hs/&0D!r|޷` nTh 6*Q(,̍9E8kE\cn$St浆d('7,/> @ okfyObͳ8I"awxCb}k<ʛwxxb,ɦt&>h_iͮ[ȡ`7Zt&qm%YRZK,1JHƃx`PbV[e\#v#IU_SV棜&˦Q-bUޘv_{/[iEzX9M}LJ9O@!G+D npDϛsntl!Ft+]z5O}JXc0JlF*| M_2YUf0_lGn2De叵xII?_1`V .z~6^$}Mg>ʶ҉cvb^CKq+4c%|˿A PT)\)9b&Ɏác)iWt)>1XJ\>܄fT5fZ0n;7+]L[G̘&Zn'tD=hǚqV>-qmxcǰCNu{]HvF]7xbfdZQT V@܂0.3]<d)9YX55\ACp/WՁP 2,G2 2 FmuRX#,g[V+T*-_6B[뜣<,M7cpZ'~i ._K nc@׆SƌHmJoE8)rp2]P: s*=#%.ONωtwz| B\}&0% C؋,Lv/57\(5֎v^x]V{DYԳ@nJgJrCZ?*x-'}Hk):ӻJpԼ@]E:ru}YN0 O(o70Qm?FOɭIbMp%q!> Mm"T=zeB2D\xd{Ia!*虯OS87I$ עEx; &<+[g]y VbDA#ub#4sS;)-X̀7Y%D(i+K9Zm=Ȣag)0~KyVuEʙD\1"L-Z|L6C=?BwRY^.Om .7o a1$0Z9r( 7vqscP$4.PB,3uV~@hG쳶`=w'._ 鲥:#M_@b30K/e&F" Z#454~:v;¶a UwƒNAY)))SrnK;

B[i4}ˆ&1茩_cpOi5Ы@xIJHJ]v+[iXstz͝r3902ݢ9cZ1F ClY-* ũPoÉƩ[ A/}5i8ݣ?fhb^0HXԎW%?xK|$񕫀_s=I8l4ZZ"l/bүNcfFPn~y` 9mɄ90t&9 8 QOppue— `aFshܤ #(Q[Nw r-aIxd16ƾNMgA{b9xT*mDˤiNs _%mӨq"pJ%Zopuڝ OmNݭ =D:P,Zi7aT~㗻JkNȍ.G!)-b`d@B 1$Q5P_b[vJ@q|⛗VDag-$CMZYCΘ*J *=KtY-\m3Lt6[ Vf93>kv}| QmM2 egq^{QK}LlsLX|$](O+a~ao]O$( 0M[61t&BSTsL F%W]Yp|#rnOY1V?Kj{8 c (AѨt&L$q0XEW7K.GLG=$0 gk\ /eaR5 v3uܒ$_x@5IpֶaC%P~L{y%WD|K˩UD@d%l90vIԡ)Ex1y,d NtHgOa\$%>^m#j3vOF-ߥ^)ܰHbG;GؼzQZ *wB#v %}[c[>p$%~[98nFBT͔p3]bg’! Y}94a=Py.Ǭ$xF,垽 ޾ |D@ tË$n68=K;G'hy;n kzؠ)hQK&]Qt,T7 ĸC!X?b} F<珳>wɱlfAKi]$hśS*-TVF .Zs;ĺ7\P[wKzfS:2Tי?Bd@"7 J~E*]xh* _&O;pg#"Dze!mث؉ a|1p["ĒQ|FJ'*gIldoYWt=<η$XIq䷺0(Z;&gi$Ω Ncdތ L1jW!az3̲' uX嶮K;/ǗAM,W%}XvÃ<7B1_jC.vgOQDs |6C4J p_fQyy, G6/6@ys2:ߧa}21((Z@3C:p>=yu?O+u+_aNcxİ^[ytniIw1trh(8\NyeX-K N<O'/d`#FTX^,CՏ J8pGͧ\(=f?bSqA-*4~DT89~TTDd=Ȫus_ē|E!\t5jO4^$'W=+@(Yw{;I,lʵj뮀bRl]-TJVUK2Ck ȠdbQAe"e7\ ^ύr|>Z)Nr0X$au*vm JLW5k\ivXR6V#9& 22FZ~dDץ*fe IڅdМL2L1Cn}zw>9#8U6@+\w) ,09 v*xtp}څcE7&b 0)ٿDQF+ 諵g=}rQ}"_gx돏v"9m3b^i0 AbDܓ6&IA zFU,H|ןSMJEsg u3V$kix̿uK v y l2~zj ?d -qQ(\RLХO:ݠamԣv  4tmm> lbqaYAjHp6̌B1w Hjg "AZdu! uc^r7;hW MjSD퐬LTxH+ ƭI'qʏ{oo]%0>-`nlJtؔ-LS;*{;x$ T}fuxXYC/_ @%e0!<[[O_aʴiDywS%RpuēyG,=K *L8X3%;&7>#pkg߅T_ ||1tY{p0.6ݖD4ctudS_?q0yҐHnlCҗG{nN8p( >Q4+;2`/6ol߾ /Hnmc/(cX~<P49 \c' r93c–= ɝ'8Z\E2!0+tvAK5`gr=lrj1H@+|$䱀wM;8؜>/^ '|n0,T*8EpT(1sg[3\dYI:="ؼ֯w,.9 UVŨR$x٘4EkH=uP?m/?Ciobςt-*pu!"t!Щn8xU#J0&^,g!IQ Cd,[/ ; Ș!r3 e&YǕt kfo =}_*/C S1%(M|䌷fX_) X҇w] h](N ).,-M G#wV}R/eblrX?rqP{_9b(<\x_:w2gohi'6rX M{l@i)ՙW2 2*bRً c BNavݚhf]bEa(.#} 0 0~[=v)tb uMoSyߧE?t q`q7(i+ [=Ϝ !ڔ9ӏ,"ڔr'ƾ6QtXEi _3ܓCf4':dy F7$+1"\mW$(@LIOKPD|gr-k_[jCx#7z/V]_.Q^p%5;z52#*Sq;h01y.Ռg!9gFZeya8qޫd$ߧc;!VelǍ͖t|5C]BLSR"IVK.0|qTHGtz'%&_GYPJM^4.#k)Xo!q~*#2O: 3Vd18WLD~yk2}W\о^T?2-M~kUpJO560|쳳#їIAM5#UbM^.+0i&`Bf3%:|)˷>!0MA1&N@[ Xm`*O4aK`Y3 ?=V]-|^l|v]@s7{ ?&Wk3!ً]_74^v4WZCJI s`|Tp"ap(R~Cww5Ye'~s]z6~X!v=K~OWx7-4xs~YZꊏrXl ă n(rVdqwKhc } @ͳDD`;,m"؂J+iَ" apa"cWk%ߒz֋U(Wtr"#x@|IVs m?_^bT$KlG'Q߁Jq3rd'PFX2uFz|ng<'H՟i͌iyAؼ`L}:#c@r&jTзJOƓp5LBXm8cou zH+=}A!MFJ˝ODJ3S\lpԷS`wXXiŒ2p"%+TbC4H8&fēC M+5U~49ȇ('qx]2pgЄ ժd+9$[!UIrlai ?X#|; Rk8F.%Сg@!dq "w IeLpv_!+0}L+ MwR %֖{䞊ʮ܆-gwTf" :c4Gg8{:v5ڸؐTrhd8sX=75Z; 'rK,?MQ:PY3CD}`-jz75h:؞rޚ-`u"9!v0zp1ͮ:eI \z~d9v d;m{SSFY]GDR\'Šq6գL.],ij{&+̬5a5uK-ŽiA'Ϳ mi;mSZ'b(=+(&r&42hqs?]A[G) GVg yІzu1B$XwS˲[Nf:.h@Zofx}[Pr+,Ӯ;ZIcR#U9/>cR6֪_+i4By _Sb6Ja}XT[:Hȗ ~#NzEoGpldڰ_'TA2> qzt# +Fk8Vz8Gۿ#H13I*K~pܢ;գnQ۸6Ϭ;p Y– Qr53\;ݼpyRw dk>#vLɮɄ3DW+7$ yOžU/.h6s04p X%&u,8x94 q; 8C{T:4ԏ` @)M;dQ"(VtُK5/M.U\n0qVUxOBIf8 .>2f%N)*<> X0]&;Bo쁠i4^af@YjHn WCdO[e/04ʟukFdMbcޞ2O9Au~#AK5L+Dn6\yYۛ4 t) / @VBSxT҈*Ct m:%P=%5ݸ38YpmFF 飓w:6ʮ$d:gKQW"09m!&H_K!qtwFA{&N`pY8[ n5a}tVY>Mz_8R168堒E80ĺ߻YCvd0_Cӕ'?;RWQ}XxdVtk:S;oÅYFh |Ƌ۶OF> ,j3͘MJ_(݅DO*G6"|~35ءzHnp.hj)CF Jpmhr9X,F2A!]^XJPE?;:z~[v'vӸоGQx8F #EpwجLw4ͷ,rb-Ż|wS66đNabR3('+X| t`&:S:xzP Ӵ }ZOV1Jli1;P^Ǖtj`(sVKA\\ %uJ\NRp1n7:M29,UqC{!z1]v魿FvuE,oֹFl:Uݒ٪-$Q=ZH0!]z e6u;3EpigkAe0D5%!w z7rw{XNN0"jNPOܞ3j CW[b:}vzrH:rVBOZ`;c4XkŐf(<4Hh&d0"~0?29WzoݙZ,Ց5L{$P9•E̊p}`ð72uIsh90MVOeǨ%:rSGSwI_'snc"dE(rlHB"+Iq+Q%b8YR'+Da&Č?ns;+iځB4E^SuGy3O xaڷ0 oid% uw \3o?%%Z:QSW!z~tCQ-_п[Zy,4DQ'*MI,f\&"N^jeV ]k)pZBO{eO` @R3V˛p&MgG 4rٷ:cCV]Oy0;,vuo{ 1&_/'3',b<1ug@ ?ceǢag=pS^[*ȱ)O4r\Hgp8ˍrڗtFu9P5XW/䈽d$[XUo{B^L{8#`R9gȖ!~"tM`n|j\+I][WjE{#hZ+Q[ Fpqm~%u6u%^@.j=f8.J'_LfX;fԧFBhBucbCHJXo%qt(c@Th ;f [}Iz&;N݋CMcV6 I"2!u`JQΎMOޤ뽸>8زL+v:ϰc2vidvC'M A(Cb| Q)T@P͉{.*Y9+TѺB +'1/ЙFgG0DIPW9+qtGJo GW:m&wDO'Y獉^Ĭ<1/GThBoШOA8˭u#FK fvpg&ސ|7f@924{%\^!͆j@ f l\6gqL=Ѐt*5QMSaⓄ{& RY@R՘6~r婎<Ck[Rp D] ?oQ]ƈɟxI}-R6HqRV75Z;^σz`0-rHQZGti@i:hh'dl#~_d$8 E=y.RϞ@#d+UL{I!֚EC-g;,~cz4U_sѾ >ѥbkO}\7,Es=_fM]@x:FX??WAˊLknfkڙU@ O->ŚaL%@C(VL;JzY_'؜CN2jIYv/e}!}J%nBlHVS/}~d?&t*pߡV}#߃Y}n(LTGl+l˫ =g:f\qM<ı1xٜ{2}-$/= m5 WL&]wzo>"^Ҡ?NqzhŘ潇|j%j 8K^'H?Rj#H%e/c GA|I/T!9[Fx$[[fIu$YpH'Fy{*^xyA;8СZ)I\HkuA?EX'}N#N汹I$Wܞ)5rlj @ I)Mi6| = 5 i4zS fZD3Y|$[XvQD=LU0@rgy}f c`D`(c3?FX`Ry*oL!kKrh}}t4O_kȟ? mxdnϷ},jTXeLDڪsrn}CR RV)QyX/M,4y'!Zu" x-j>nIJDu[&OՍ5Z7yg^H]-Tt;=3 B[sz -*11\q}s5\KdSFkFc9oc4۾{4:"Sk\x$Tk46o(~}p Z`ASUiML'S6|%Fkd, 4FH mmhpyݮ8RjoQN): G9 I*tlԿ-Kz==7c n}G|4n]Q/1s2.N?gYj,2l3 H1qϞ:[w>Os:5eYbQİg @\7tlQ) Mwͷ6(GTCEY@kb|Y툶+ue!X/"2--=y3(6N[ ˑաw?g׺}md,7aOA{ 3.++am[8ڙ&LĎlL'Ş9O֙ܞ;q^nyR#ݟ2vdvJ8[eGOUQ7*2'mWrQL!ʚDsR PU||ZB՛P0>+FVF ъ}YDn #BwؤwrN1\.D%'Fͪ/x*cnv|#.D{_#ՃA vg(jEhmܙe^J?-6R/~h[3 `[46EUYn՛dj*9=Hxrw}tSl❛GW'`6L$d g4L޴y#Gr-#j0 A0[W0BЅg q/$K" VfM&ΨXVћ(Qf7膗ӇВ@NR'A:[Ւϳw">7@BL{+/]& [`\QQI-p5#GݮBho;7(Q = PwN4 B}rYea 0ccij5 5.&5QRH=+k-ѧk<$n6xyr9 p+ @5r5zWfbNC;xjmx Ӫ%mL&yJU_a3nΔJ.2)U9_vW}XU}o"gZxn ΎMh㐥խuwr:вF@9AȚ/X pK- У;o)bAkBïɖ45T 7x^V_z6Dw;3ۥ_ s9N.չ|޺3uY*AX_NslJm8"2HiiiT)~W/&SďFp*"eV$ޣk߄V@!mM#1C%Gj /{0R V@\PfʪR/o \\ós3}C js4!,#Q HURy+vF$:OZxp T6>)A:bӹɧz푔< \<; 8%OЩ[/_uO>> mSa^fagdnCk> oqDi{v}gom)8CgAq I  gSRY{8W/HTqA(H xm峪[Jm2F|G4_]@H̤tzm ;T7KsƸܧD˔B&D3LO$/WFsLauB4>Bյ-KIt;g4V_ox|`Ǿr,e!g\b ypu5y?T,.88x9†π_xd0tcx+Ұ\bL"9Dk@N¼6>vaC-*vt7GZgѠ,2VUT}X3Y%KHaazźLUQ#DMv?PQQt^oQ&f_lc^Մ_# >46Hqw>%uݭ~yn圶 O ЗPe ˋ.l줴3q=f#H!G ٴDv$á.9Hc „=xIi-FPaa,kcLU^ze6ߎ2+'.٪+sJa@-JJv-#~Hk*nYT={} )IkN3<( ceVmB}s p j ]X0u=pAi( / rat: 潽hF0+@]4?`l:GJu!\ݺɶ}%5jx4u2{Waks`!Ԩ\,}c6)m` o,*p9~vγڸg!gh檳b`ؿlCPϹ.5oW^m4\tv*9NK9>O㾌;8,-JGub,U({ By6t98b>Tc}bfT#ꂚ?*x*|k3ʺc B4 %qS`ewܖ^dnmʹhgʱ Ϫc Ui6{r;N(8;>f7K}g{M {nōzz04yH+fډ 2hA 6, %Mz0j揥H}WDbCIMVŖhfMSкشׯ3e?oÜTy+;: )4ZӭB wP< L+@X`mԂIK!=b]CW(TGӠ~IbўA)VNh~L7Z7 bvk]G(+~Kp ,sKMgHmkέD!@Nx+[,ݍ0_Z3 b[}Vwh=]<ήMϫgj;\YIx84Kr΢\q.v%Q;?yUe]z떹 l3^dQ4'ܴQb5׃CKw7fBUh!_Z}U"BK#̗UV(/|2nC1ދL Vrt 4XPc_=[SMez1ؔ'O/!wBŜtb^*A)R&_TQUgHUά̠Z*{v^6i&wswt"N/X>a^6*h=ܰf#A 9Wtuyvzs/Ɂ`x1x∽UFԥJ7$Hŵ[a+jՠklZk_%򃷼#_$6zr,UaiϚy26>a[L9%mlrE@دm7,FPғ['֨+=0:-n}LԮjv闕3ɓS$9chl2 H?&Wfg˿4!&D}(8E,P~f O$Wmԍ8`}ǩOx4xo$)[I|6c~ 8\(f]ff/KKHpl;}ph'i6`4ޛrxfAnO/Z&46wͧ\U(z8vI]n|>"ncϏ^KtZIfX hC"isr2'8t3`cKmݐI)p@srx_d<ǣOYx":x{@߻7ڡO~͕?QKwrƦڇޭC{)! mLr/hˑ}SߛIdcx[ُ`AlB01ҰkK; d-U& v`oBj̠)@|2Wɠ& =Ȼ2#*p#5i(S՛QBD |arR8~h'\s֗i U nFhH t6YNͯ|rϗn!5#kZC~1a.g XW}wPĹ`j.kZ`=Qzϯ/zʹU ŕ*4Ն MY?bWw |{=;z'a M4Y^:+S6O_ȩ<,* R/ݱ!d0vlN2qG7MFRJGmY+@ Cj}CS(K>6AIC[Y y7ѝ^^yJzmonj.1qtֶϴA\\y֧7q7U8)}.ԣUWUj 9ig>e|#e@!o-{1Mط-ܙdV}*)6=F*ՎaTi!a,MuN+#h@бVK}_eICk)nETvqƇ&uҮ>>g"VwceN>C(>`Z fnq dwsOvj*5 RT:K<[?'ksa2rG WW4VkN; \Zgr rY$n"nϖn9e#` ,ےbJ){/T1ܵ/4.YN[:Y\\\D*}޵BsdbqsϾh}aTg)Q|E4Foa$$H93`|Lp*¿o_\൷g+*TO (8"%1^H5POLm]dPi-ۼ}}87y-Ayۿ.gHXTop?oTMK>ֹ1rmxfٸ8%c1@@S7NR^]zTǰr$8q|.){QTWI}%S]rStGBA81n1`ls:F"Zތ̙- ǂʁ:Xcʍ]fT#}*.! +)Fh )uR9q(O/z|8f^\[*R5:<2<%[2ْpOH%6Z6X:nEmqO}#0}Fn>Z@{Sl'/3,fnc5Vw`Vԙ#KQZ{߃rv(j#Bj'GK~P@q/A(/>딕nXp;+ n*BUt'3ރ+Aqʿ|!NRT ,g2=[kgnOT2 3{7M*s{nSQ$B1ƠnC9 JWְ(DmYenQ ylԳ^3_GgXhMrK_g!xYCgjyaghh"ypP$Uۘ{9N+.е;"͋,@$ CXD o Uٱ E&BPM,s*L ^i mVQ5C ycwPpH2Y*8q zb10,xuHAVoeQf74% spas)&KZ ! ^Vn?HN-Qx%"g.!2WPZL֕1X.nd?*| ኘxza` cz@: H+_~sb50O4WjU@.lpgY~n J`t&1qߖ3w,]g~AJAPh(tqY\_\Ii kHຄvd+<(:Oy V k {8c4&c8i%Є0] }S/|]̌m9h(}BMs*=@y% }SU2Rٹ01u\NJ[jeR.en#;^z/ԾPHQmɕPr |#DQ[fܬGcTխX_'f2!jnT6qȀGaA -lJjCFGRȹvTzH|R#knTge^~Z+=_Q\_&OR֩/DcRx"x2-x7nrck3_'2fݱk-,F(=F Zw[󈚢AOw=Tzwz+l#s=jͲJzhDX`[$ӡDT؝_>%cowePtQ0hs$cD戡KumXGGNDE d|3 Rӑ{L@Z@{۸vx$,|i9>E[H< 6zuQ& K@H9kUkVޝqA # BS_єМ O`>L¾x\'rd MN~CdB9ϯMb R;qc**!܊5It<N\G\nAhx݉@6m5UQdDZs`, uHʺ#s'Ad傎,ŀ.|AihDښAu6b")"@Žz?Y,- LYo6INs }!ڛKߘ_ADf$s7aV}o5k^GTK![Y{\jn;՟d QdYqS.@(U.ꢝ;t[-SvA]n> EO&Zg**`nIfm)坋Ly> y$,)ޜ_mhreTiJ~9ݶ;3ɝՓG;5іD3UP0 Sw>ס2>e4?;`E-A}|1z\\}F?[\wigm+uScܞeJo?vl8GU{=ȽbK2mЬb*ʼ;ȚXb!(w6&VuHi7NY誄rt; y-S%[2ۅ ;O᚜z2I#jP'G+} ?`@dWb#&F!69yˢW`1ϛ :jo:SRS 㢔sL,hHWZ FjRШbXN$:·hۖ$5ÐhxOVUdh٨dSl4 f@=4Znׇa1dmcAm2Xjc|d<ߨov-$0n0 2F@d_c^fCV_$'r !\] ±i )-pXfV-8??bp*DŹ?CͱgCZu fQb=h[kl+iF&ƹbɁ*-D)g \Fkj KN-!j #lnu!h a򎽡~ K+j!Ʉ[JEHP {c siMaW ]<3pB%Y{f5; 櫅_"Q4F[48dF]0DZ rƲHc ;˻;A; M>-2=S6B,گRF5c0Y*a<;ʧ77ʫRC, z^oVưsڣVXun#zLHS:Xvy9`EX;ZxBcЛ10^%v)iOFع Wj|`B`:ߙ&h1JE:*6wROr/GZAB&P.k*wklU::vpq(bnh=0pP:}S&k{L@ҒM(B8Uf%18^$6:~++@S@+s3fp茠:0҈d+&wbȻ.d5mPXzV {$D74\rAO`K &\adMVFpRzzh nl84oΝF!8-kHfxԠZTԽcD̥Tq6wGQޯ4_]V\_2gڼ1X(4$'޺⭔H>5!EaŬ(-47o,oT``ܱ@uȱnzeJǼه@F詇Aڦ^u 0|FZ/ >7Jg2a UzW W lƒdp)VeuHlrʝi~ `-HK"`hb`̱qnj%:$% SfAZ?_M*0=>`s츬Pφ^45EUM. Kt$BT9}8gn.(seZTև^`w%Of?a: !|o `mӐӣWL9 BB#E#9!fABC r#2PmQ"*"W|OW28`L/|M~ކ)\ N cs(`s"ʫ4Aqu`Q]XQB)nr > 3MC$A!et -U}".1$]8 ɲBg}%'g1 VC;M1 Zy@yks0JlN'@90bQ ݋d&B]o)s#;~Y{n_PvGq4 i4D+Z:~Mc:P= Rl\-sCR}bQ([\S*gUa9kUP!`rn2Qx;Ȭ2>j?NF1kc9McfbeԮ)Y3־+,yb,A*Y/':&WB,{ۭuga(u,3(lZ:*M/CE {/3e(Ep)dK+8`[.EuEZ篗.=gw<-~^8"@5?s6"FGYpݒ*Yc =0~vmB1iz#52_X^=ЖgP ;|Yd9C<[vqp1▂ᱫ^ 6;H/|;!z*|Y8$4` }T.,@ NRN=>rSM4g]96jѶWJ(dА\+ܡkӲ{nS$>8yĨ$ xAݕj@kыR$áyiKOBz['! ؽ=ּM&#'W".3h}P GK>bVDQJkN?UI K)VC+[@McbUU`q{Uhh>t\2=C[ ?RC=!>q0G_hfJH{#Em3O(uJ<~L _ؽҊ) _xS!+~ xaJ΄ R<'6Lm$E.ɲQK( ưcS^kH#|.J2)]\K|q1:lG`2"79>WQ)%bΞJ'( cKJ5-* T ,TU"_ A`(b_0ܷ7MT1L>FM#~9>RCRQtD´&" NT6 xYP_^ƍZS-b'$yM2,ONGmzLoW{mJ^%I )WցͭOPnhLsAtJe݌%&Bnנ z rE])&@8Ƚ}@rYlO}!7z=+b_À:jm߫\zLxTEH^6x91k#Gq4qx2xf)Peg&?%L\.Lal<K0@JdͬY/L{ݐ&*6H@lH=Z\Qt !Ŭmcj?Qpuhl鲠EMX2t-,5Tȱc 2GAƈ)D:y8 eߵ˗`lvz1tVҰf͚ ;p'QvdK@>R乚D%&10HuYh$uQOz"o7٠XS c}A^wz>_RN|tͮU<#)uI AW@"R>@VMȒ9l)5REb%Cl Mvc8P+s7dB_ ނÛDQ59ٗm1tCȯ"y ytde48,ǖ)`H]>$bsF~+idO;I2$l#}1$c -]c; _YNw/t@c B[nb;ޭmpGLtcoQamX?)Pu S,,\ׅ !;'+|ϥd20|aY#[tuk;Q?g9@wvL+'^=L"DgH!`ڨl )nF^\6G9s'κ{SIQͨZt1" 5b 47} M &$qZʹrS 33o4 N N4LyJV!`黁c}|y#SS&E0 !muvSx(v!Ⱦ*05UsOjH:T5FkS=Na'u~E뼶 9v0.`3iO3P?cwJabaukbUJcL' ȿ^F:-G,s!gN/6-^."QXqc3`-Թ"0z0Z'.5ЭKQ$[Rapv@Gرۀu*2UFe#rV%k; UlQ! i&CL'D=~,ń zs( 17^$Zh쇈`1$]VeQbv;3S2R8 c?l@qM(1piۢa"<3A-kJ m8qzGq$7d]̵~SʐF& <+g܂OVWD=IGFڦm9G'"%9ЉHB2GYJH *$W$0p+,9:(hJ3{dRE);?:>ˠRDh}(KZZ)iBR6ÚSvR,yF -jfKh|zhcE !]DR1m5/:K^5QخewbTaU|z Сh⮻)i(g [E68K/=Tqj=$*$O!f[ru+ ۨBaӤy٦yE&M#1]_k>duYN.±S ]{ƔX&Em$Q rv֓TQ 6aZV -s$\la\KzzӴ1tE۵n<>o(; ъcq@ͩSENgfx)._Ǎ.\}bQΦ=m$`">Fq[]s6M;]n 6?CPYh뢥HP/y: u$KG]tYm׎}yD<Ѳ3#7<Aj H̹PuXz;l4$EdNDE#F*:‹Njile#7$zqDd|̈h3q8#%͛El~v4vdC@VvaՃ$4- |*S+X3cӧCœ#H3f'ZXQDPy=| @ݗo<|bυ\868Z2بƬ[Soqy%Xu;0oD&&%h!+/EZ 6&tw=JBc @i !jZzPs>Ӻv{T*xKDU˻-Vs+84/nY}L!1Zq*>;%Wa} mwh(ƏtoI [SaiAQ̐y0|b]}kOc$#"P7M'(C_R⊕.)g6W{;o(ST)'mC{̳هN\ 姩*Po2ޟ}7/)F9p7[X5Ə؋H{}SC#8]Yy:.~8Ju|k[.&`MR{a ]4*N䫼M?Sg&q9C +Ll¯ ~fd*m|6^5W/ 2Q`ܚ+%{4i^pCmҕhvư$'izڠJ_`UhUxtzh 7 P}?YA.L "45.0V}d/l*Er_2G;5}$}p ?O~P ?`U{aWt/ĭP 1̩zE2@`֭ %%-f,AT-ܪ\"r*+}۹$r_g2HlNkV!}hlH{g@)05XTi瓚$zi*MkoV.Fq D$G!<&C` Vh g`abL 7SJ T5,Н6BUCba;e< ZW$Egc#zǰ/H8`[C~TH|/ǖb~kcRQ}S3xK&Gjo՟S0EBWG1v |$)d8* _&dG'?hs״ #)ZGI>xuUD9\GPTLNIi ]d YR#߭Ud!VZ2%Q$rnmCS4(57H^ȷJuEF E-ì :pXJ&x?U& a*L_?P%#t`Sk2`l,tisu~`O( &;3Ѭz!'P0Eq!Hz'F7<:8p).HjH䞎62 U#k̙Y[Cd׺;hʎf C0&[>b )UK^m#x8tFݹZ]ŗe0-*NEVՄPlxMP֓)@ 8Ju2ke%kր}8{fGCG@S!fl(۲8/VGKU>-H4AI&#/.W)g0 lyIgg!0~WӇK7, Y%s8}v\إFBSQV o|A q(Еq%SR#Dߞt8QldF@O?ZƑ)֨; j( >8#3^+W|;,-hBLlďek%!1׹ =~,-W>XKDGN##7j_jgĠ 2tR<'YKmu)Vga5 A湕}<60ʇU#d.׸2$d-+铝!T7;'hDQP0l-0hu(P2[ wƶKq:X@_"tvG+5A 2ἩQ@_)!M^Nx&-ٚQ.׹ A8vSD3,T#ޛE%;GPq;$80LWh#amPEjh-8\%B7&&m_1ń0MSe#$ " &\slO (~%4 es WTvYcķzWp6qpG䕥 $)|Lv hYK(Je3_3JڣU8ԅ% J0rĕu"ϮZps?w~vRd%<B8A`>?fkwb݌4o莧9=g  !ع1;)Mv=}YV\JLl%"UWJ"Odlb| %SArdcNM MS&0Fx>FߣB 4]C懜 7Z&Nm Y~=m wӆYA N4O?ZR:At(#OuބuVMc̻gKPdPaԢ솂mRbFjm6z|;ҥR{#!)Shm [Zs#+4 xDur9iOJ"#"eOm9?R&C=sjOVz &*NyvETmS9`p1睔I=qc =q=}.=7GV[vϗN?* .ꛄbJ'D D@f oֱ!R]26! aIx#h(\Ýxf?A]rrSB_IOs|I+I"1|iot(PfH~~}t(ʹı{B?p^ڗgh_W ;/sط3ט# *U>yL|wpU= ʞw4-P>m^ m ʅ56~aE8AߟpmvT'ѡ`N}P!T7gqRGz`")"w00iYL=>#zgV0ֿ1,%@Z\ Oe{PdXfA3E5_/M BH6GJZ0cŸl͹.uzߺ Y >7^ Ufp15L 5e)SMon"U+W`WWBEba 9 L ' eE|,thTD{ X?֪Bh9я;SrB+\u.3=u<~(x\|rVsb*x)|6unfzopaF}DRMU@ru*a ъ xZw,[pq§h`kvA;ɐIg6ƭTk-~@js.3xGrJ`( t>XJ 3A-2V.'XM;%30$TE OT[o.wGkKk.~!LX)&to򐶷n/,Ud8'|d3  qҒ<^U|q_9}orގ"j~6]M!c Y8Z(H̚G!(#p؇0ޏ㭦eo@JX^fT_+Lx >_kMB@]O. ͹]լup&aF\ohl/ #yzGBCھh*챉#xfəI@Q9Sց&UTb⥨EzuNe%{l h\ UIT,CG~f:b8тK8{4. Pw\XM˭92Q,HN`=:3xwYPmܔ bH3IDVU`UU+h ɹ<[jl]rD7P3SջE+Oo2Q&NI\h DifQij<&pctFjP*':'QL$_x[,ݛEe_)!R ]I[K >I1xebւW5ŪG2F YJO~s B.ϔ t-gNzf(!M)x)#\^C{3\76ߺ6iRI4Ž3Aow}vp2P:8_SXX.D5w&wxԱ+q&΃&{8wPP[|%`5;g ^9_~9~Gg )0tgXʃ-sRz.:3SvhȒw|`qee3719]jxŸ`ynb<-'*ROxYpW5`PBV4{nR^ M8_S4xng T#K큠h 44hVLm +YfZT4y`A=%am,OY|8=/?8k 0|&f*'{|U%T~/#0иmk_CΛ.笋7xqvV SUx>*4?+A҃'ֽğ-mt? e`jX|2.U0ٖ oZVw|Br0[T32P~r&?{Z7JAԥKFFUf[U!WCi L!]5aG][^߅@KCʓQgʜAr׽[_~R],nDN+RC/_ g:=NId[ )u~mb`\S!l)"$7/c|$&RIfsNv0*F“1 7hDձO]RӨw"ꌐbCů6+-l-<ֲ/(j!Ёc>RqL0C^чU67w* 9&);ҚH}#x?@ %"]a |.gYqI௎U]m;5pY针$̓(W 5?Kstwnld<&ްⒺ4:cq_K@. p^\ZM^*w;bو f.MH a[ڜ }LG lJ!Hmr*NCՙ̀ܬ92X._RQF _7 Z%T@.?I+IC-{Uoa_dJ 郬9*{XUzUd#E 1ݨR$x3[zS|_x7|tCMr*M%WdO)~ (~)lFݝgcsM2Z)l/wgr^ӏrzV(Lddōg^1ni'xDżԑP-{; Ǯ:6=i$ =8e0Fm9i )]:4YlN#{5tAq6gߎHLrZz[W 5qĈ?BTDM9(yмÈ jLv%L˯>[B.\^E,cP6h_4$F<⢊s~`Hh G7wJق k!ZBŦ^\KDyi=us!JΝ=RQO6湃PktH*Z]ѝY>;Un:Ls0&':h>Z r[w}mSss)OP.,|P93iuh!`Q[F#\=2 l cp<{W mm4`{`LDh:?'2,eetٸ_y%V!gdϗWpr|N05[fGF%a񇜣Fdd'4i 8#DDTHqϭ*{[ ֐y_@Y/ZFov&ӱ:4( vp,A˂9n̝ l[GB[@9VsǑ!Ok3bJly8|K`!\R Q$' kA1FѸylpTb/hvY+(lC8Y"0*k[vբrn)UiHF0Wk,wpe k0M/o_Z x/LF{bɲ} L@R&2iwsefOrc{tP+R,A9td28w=Sܴ?=>ݐR+9|5AȔb i Mn-o sF zE"z~-zkηϖ~P8z'κE KpT#M؀uj ~ӼWF^x^/(Hk,~7GB*@O ]U'OI\0ҀqC%A7C}a/V~YɛU#2!O4|FٙåO+,Gw>{e}Pe4dQZ? ;6LmKIuyd5-YmgqӀtȈ23%P/>PӪ?=W վ1{DLNxmy!~CE؅+{~p0wjޗ]X*P jE-GS Yt'%P+*Y禞@կI!Us Z46-oy5H3ntz\0,t_l=2IJݏ/%W4~mVԝxt-~'}#}DU>~RŮڮ-m9DKwP 3e&ט0+$^mM@2MP7ItȂMCc,yo]~4_KN+b5e~S8ATwWЂl"7II[\1cYA& Q}n850ySh%`k}BMǜ]^l#@ r+#k>>I}Xu./MjխՑ#'[ern&YsBlzz->ڤ^*&6a9eH<] ^tONe*Ap)֣+.r.Һ@f#?/^b?7\L%B&ws~'wa?CUl_eVy V~΂#o J ocs37,_ByOg()Ǻ,DrPF>1!)| kф !g(K&}Kͩ,[U ]kD%peOr}2j(x{"(@"Ehms:l~%DZB AhGI"++2|0pI. L%aݰxEyԐ8t?)ڟ0ͼ<<Ҭ †$15) } *e'#Ns d/yISkn)߻C-1cq:k> 'F֌w7ѫt#1Ce"-k>*1.&B h]ĎˤZt_ۡhu :Y!+eXumBF~)@mrax<#5,Eρm;,CW[}喝 ?c١F]t(Oꊙ vhOpSZqƿزm`=SЕm yϜQie&wMٺ<֦i zYEo"v9@HkQ - o[E!v i;{Όv`[-1gHS/зulUi_3 Xs'jLI?C7sO/lI.ɠ,IVKd칛gWR}˥Ǧy 5`qgbXb2帀17MgD6Fc$cex Z0C;M կEmC 9Rg0,=pVS!EقT r=bHEv%aޖ2~2-/x6/ģz(u2exrD gU\!L~wBI:.-0DГofaf&[6l[3;:p 44+"}> . rڡ`U :: kx*;+rv0v%c rhscsCp_,ˌ;pMo`\>7aƿ 9R.le%m~w}MZG>I0ULec#gu7D z_v!lN:(za* CS$~t$uGi򼂉j x.nHNÅsa`t-PW ˺|`:;;s.gKKI׿/T._«m1Uk~af_'|K-up9t9 7 Sqow.o]XV|JZ.jtgJt іUOW6 m_T^HrĘi{8? dF) џ,IEO![ %XwPƞI(gY&pJkAAm% . cj~-yX XC'7$PbR DQD.@03P Dޜ.*/Q3s&+Ց`f"fX5L Kf*5эy*T(^ҕKo'@s>'MOgA|VtcG2]Shȁ-RhwAUbwWZ4VgKMdaD?朾'OSrkl?*{~/kzh&2T3da@xyP͛/na)c˧GS&N/ʏ ڧu)Jvb"E#i7-H'WKX?ToȌc(Q3pjJBJz9gNP\!^!mC4UU6=Soi"r.9Ӑ5BtJ[Btb`G"vB!)bQ e)=to⸒0D ~&C{if!/Y6\/X䣴[g*RK UK~l~W+KG]g`q C3Hݑ~ eAo5uߣ"U\M{T5`s#C@Ő^8"eɟk?|-جFFxRlevgp#R/ ܍h] hi=MFCnl&bϟ#MV8| Mĸ`\ kvVھQgL?_G\6@ fTbE,V Z3#3d/0':͐tZb,3ѱ#8|Im2&M9zX2D (:ܭ-}uՓ#y|B ^lK@ vQ5>ojKD'P-QbljǵP`|K&!}ݶφ5BbriFB`zՒj'~TP|%0,.jpep}d<$)á@ED;LS}`yGܟ6TO&4k4^jlq< _¥!`QvaEj]rO =ʼn$ZSoփ Ty[\B)S}AFi|y d)=h"mx:)&dD4R=(B(IclQ}};DSsJ;sٗ" -~mݯ\ Hdgv#@ 1luϭ!dRx$#͵P %J:JPw[7zzN2_{œƠ서=D;4v@̖<c(pԲ#fk5\[7<n=gq2CUwה/pNc6-5e0 r!GW5ο<,t^g2 jgDs| A6hA͇9ldF,Lx5{ZƖ8 J!a|,Sit:TU{wL;.boP0F#(v8bBEG(JG0*e)i5 +hk2i6Np zFb)RO|~X ϶^Y!;j:'9gq9)`sMKBimJO v"U;BeIa`~rucSl>8'7*-8U#\v`5pmf)r%Ti=U$)6*i1dg6m4f%睪`woѪ"f3Kh&D͸TRzn=:v%؃jsL,cjtoCJkɸ6$jc[rj͏>3S*Ĝ']]?fPd\nyҥXNn%$ih(㝨)ΏOzd6 d!%ViJ w0c.2Ⱦ~j#^G$%EtWaFf ֏)E *sql @- ՍGJ8Kz|GU:Ca/ wdqrƄfYT|IW7X0K>8E1'd]By9g'\7I+kib-Po}2Ӈv (B+Y>sciH_rhnPX=ʤ?xlxq(YoEni[!&e+^:P(` ɢۚ/O!*trJ: E$/`ieA&&JuGԠa_J%`KijRoK~L쓖X5dP%r#Eef7^˔ȬLOnnܞvS~0I"'%k).ii0e*A.<.[W=8XM6S#۩>jD0cZwlWִEyiuA m9avL\].kT`48'{QjФ..dnEOϜmwn M c59vD{'tc]Eoaa̯q] NyՇ (G*.4MboD${סKq 9W|""-0DOq-(YsP/* zd)xA$w)FrEЯ<}x{bKK4`S{uT-IGYU1nLDl`>q.9@L.˪( >o9>ĺ뤻$g:/CUon5 {;L6Yz!r6MwNgYJLtEWSgzZ?%[ F 8e+ȟsoX$PQ4㛺LZk7|+E?].KHJsh-i ߿6[מu>٩Nt=/_[gg¿&HT:5kk/߽Aek'NVm.Y k:V5(hѰ͍}\kOq}X3SiiMG}n1lwSo?t.d:БG(L 6).n{Kn>+/0}6+PxG)zERk-^$(Rc^3n*ғ J.-9'uo\=QЬ\I+ɖ"SSENx7\Oݲ' ͷԡKĔtNH\ =-,!FհZ^ >sK$ s6$@\yWdC7`X[ѯ EICfbu&W7'n2gі=1!s[Wᇕ,J։Y2Cu v}0 ?-5L$8smdQӶݰ j3Z{5(=[w-sjADug~`dnC- wN?L;'̇%CUՄnCΝi㝨7b"Ռ?gIE+M1 )AJXAw-: YR0ofIŖoq͇۫1s&_m oD;M@`KZsZ'cИy6KV|KqY)e#RP>LOE8]zU98lP AsVx=oi>[zp֭/@iWvfE[W/,*FmP1S'm zbUJ ? z{7f%ZGpp G6"][֣ -uуXR%ǘOE]$KjX!+NQ,z7z)yV01WGCn[K-麗.jP`s}xlD~1ćP>Էnt7u ![u; K` ~2[;IE%`k qM0-aiZJ=9;߀aiD 0I6r%‡,.ytsg2`߾XMslf$-܋r8=m} r,h5:(b _rTվ4W쨡Ɛ/^7ϚF/*R:EgA]Ȭ:Gz hqFuX  VT7;`h@# U; ?LdE 4j Dz#:n_|J< {c7KQbS=8$=o#ƹ']*fE"^7d TrI]>AvIu HVYj^|B(86BULJ^[LQiLE38 ob3q;Ĉc&&]Q .pIIF^7F"D%TL~XwU`dD}o?Sc?f9́I7g09 /ԪN^Asl[ 2,@Չ\Xo*Zc-}psNLֲ߬NߠhS#c'b?/@ r 6㰫hh <,.}GٖѬU9kR)m/xʝN 7]:˫ )K1b L:=8KO:2[o7L`HCprTNoyuiW ܛբΣ4]!573'&-/3 M`++=ZpqF|3\ʲdKkWƬTiIDbree-9N!¡o6"DieVPpw0$ ޕyr-Vi6mtg@4kÜYݛ/'Dz#&SQj -ߙ $DĎi"ǃ8FVD]ehM 87EDJ,)oSs[<-(y!rLwhx3 ~}j/"_l}r& )c,S^>Z4k]K&vvYy AnZL4䱳8ݶ@Md_#Z[JjQ'B*OukOv[X|;^2Nؾ#),)s1Ϝݖ҉.ԙRe XDEVO׆.~U!0N}a`m jPQ 2y?y{C%Ե, %ٿd>b~U炢#&u{:v)ows>)ц$3~.  $E)j+LRz F%f2?%l7h eɗgjPyt#'`^](K鐬(b2fB^:0MPk: dObj&wgaqå$GآP P[qA!^mYB#R:ՂW?SB9vvrxo!܂"}BJljA -; DN)Z-C͎lY%xwPݥl ovS^ϸ21TТ!XEשcoS"#UС'NG&L. Ɠ9qs,zחGl#}k"edx0ʅɹȓn$bgo9hVē5wHG@{A;dv7U:*deݖLcQ$]C!#8X4Ǡ8t vqӟʵ7I%,wߕ? 2A|I% }k?m? A#;tʳܐLzi"OڕD'B]e@Q?K3 l?9m19hE`q<]߉&w]>@TJWJ%1~Or{#@Tâ9tf(@E5Გ"w|R|q.{*Ի#W&ryduBbr=m ƑdBv̚AV{w]vl2X!&Ϣg6Ԩnw$0A$.&7bˆ, aWrUAt؅4:Q1zt"^`,״s;B/Ĝ'̩LF#w$qS^B*$/OQDbȭIrUaCѤ=,PH9tԖޒtS(rV- H bi9³EJpIzg I:z%xCrT"z$L>F:{@6/~4HsұWpnR<%P3|Ze<ܭZ-SE/ "ot x#^AZy(MT 8W[Q¹ Gg.F],#7Fɥx v b1p_@ZBDݼ$LܽW>к'0mv.rpH?YL{jmh#<>O.R$L2g;j'z6FP( *!b# 2On)n40]_RiifZ1U;'&U?E~ } q(w*Kb|Qe2-w0k$/ KJ?OWz0?p=P]4_yA,6vY CF-m! +rt3^!^23([őMvH9$%kfJ0+'|bOw1LLa]].|99UY䳻֗Ba^K`&Fm`/*J (2v.&mE;qD GεJ ≃ȕ1װUXL_N\p:o3in0h#̹@/hwk%SivZ.baɪ0lo9\q;S;WQ'ud:XA):smV>&GH^fxD yكE*`̃p.WrLIl|,oAj§#2e= @ͯU>O%Zu ۈ/-r6>!&~)sj$<^y% ;"0`Sba6hB/f%[!?r $OO ޜ(bk.kg[j$SfQ6cSXc.feX@{Ck{P&O+ Vͤ6Ꞁ4v _f*́Rc>StIL,B G`_ngfdʣyzbĄeݪJ_{Bdw5x>> Mjs?4V>,dO*-+{-ҟV=P?=aШ& RhJΖؗAd[D{X> b|YH YJJl%n$^kt[ HE9|j{gZo7Zm(S ,F@/; dM{R ypBʤ"_ Jek~ۺDžs7bOE:Yh \ ftu *~ N"SÁ.Ph?oU!kWv]0s(ʞ̊B+ i+ڵkSRj4LťOU+S?(RǐE8 FV昆,«sk̐]r}9;YГ|&__L4oW1J : Z/CT#͓myz/ OzmK X_Oh'[im.=ymlK#S \q-/wa^m;$It]+hRwǯވ!Jqz*)eد#LKx@$^qpVMeӁWvO 58*~#KP>SU> Icdx#:r6=h G6#Tr)>げV:Qi,i6l8ue^ȕ2N2+`;/k$qwCe2n`N :aWɏځ/>g\HާXUg7zGGZrEuSh&٭~ 'WzAH.nf칻vcrfm00|V26M)7Mm⍉ u*U1i2_Wy]njVJ6맵sZ Ηڟq/#?d.ث=-J܄9BȌUUKݟz\""PFѩ' _bVm]΁(=Zj|ܷ޾ݑ?+ju\T[X1h2B6[.`yCZK O]Mw'̃lqNɦ>6 b0UU[[Iv/C}ݒ+n I~i2&~m}˓7׆S<+@T .δ1"$s%d8a}L1!qۀHZJ#XiU63b"QY|j'wMv!uI{%'EWwjI!rBTGO\zn<58(r=yj; }|3* 4GI`WXn.zQ)'qjgvLQUTEQ5!}h!zL6ZZc7{t͞NӫMՓΐӈmI2dpp6mH#2ʿd :V{bTGD#g>E'K@(uTvekTB2I r<:3H:Q6?vʿbp~߇Kh75! >K*W;Ar>*)K=BgLL<}/Mq^PZi>4eZ;WWކq/$#=#bX^zFFPT0(^=~;~X$ᄧJg{_Hf??a*ః(0Dr%&7{XN40=^\tbS>ؗbH @Ѳ!3Dz҂#|Iwal5c\}Sq`oѮ3W:W_t#Xf[3rr*ӛJcfLNخ'Gm#m{8.Sy2~MYG9V-O5F:ʜեYeRXKѠBc&W<;Z=G`nʮ|urmSV Uw<hJ/kۑ^g:"-@:bLtI\>'?ܸ'F[G-^G|o3Okl/U@RdpQen>kr'Օ]9Zq/yBasNoi="v} hA(DŽr[9(ה|WS+ ')b惎/0jŬש~)U`a!)T&/Cy@ES6DJgɠQW\/PcOo%CW晽cη$K>>-^ƻ9ѯZB*\X2WO"~oվo~XtZүmBq5ЦM&ޫR5\4])APGaqNcl65@wO °Ӝ) 'n.\,ge$8~)/b* tk.$ N3ko E[d\c9/N>WdJn]6"SNn!;z˙7WDKLt|3w(f!Vv\ /'=;ڀ̆?͸S&Jog~)<)%j,{_ ջE,Cvq/~@X #zÙ`.l$cڼ*ӖDvn#h?xP>^֘H2Z<#!|%4| ,ZΤ"dڗ.h( >sJ:ƿgAU'LƝA2 Ir5|o+SN|WX&K gPO:AQW[_z׬h_.wӾ,IX2i? vlƔ1U>_62g9=fҿjwe8>J eA-B&.䉳l`髳~ՈE-5lʕIЧXe)}|1^2eLڤZqpK8>/y옅Ds%/}I<}=p'XzЬM{Ǥhm j^7s@#wRS[CL9#DA>j׻߻-Τҷ["N8E<;e"}WC0[CpVއ\b4¼~rX)tN3j_¢4! =M;'w,%cv2jGFfʼ 9qCVLKclܠj.$">:o,xhioFqiC $IvdE;-*2;iœdZ&]K).{HQCf)Y<<w'ܘrħ(ОJn_Wj+T\Gd^* 'CGPԢ0(F $vCmϿV|jX.]wʉzYέx5_tIGW2Qh'虒"~Xx%GtWs|ݵ1*ɫl@nQ%ώJ12?`e`1# w[?s+6I arƜd@[ubԊ;y'?^  :LG1nv^bY;7={\0j[k7|LsHP~1XmJpI-#<рA{ԗr9mqrB^"Ȩ[}&^+l)7y4p*E.hXH=ٔXdv>ܫV.&@itJբ[w8v ^䒲O~1^Ɔ/c43+*+Zé=U+t.ϊDn+ {d .!"P5'k@xGj\$=d][&XPRQf7%H_9RKu7n.hŦssn 'ܽ >: =M>.孫k\@zC-@{?Rr(cT̸K&̦jO_[bNi"d)_9AM}# L*QĤ)a c Nkc;QFdET/C]c2x%se]FhXJ[I}v*(v@zBd՜=TscmrGXEv]I_@#H8m3 wȰnx -xSOs@N~ŤH`9t1rmY3X&Dr~0?I. ꮍ|%1u4a_9#\Х؏ ' yHopFP6 P3 \FUk ڗP#10Pɶve w=e.σ/S]> ƿsr~î_3ùTTR }夒&~xwhG'-_b5ׇUBY˥đN `)QJIgCwYu T7 B?BkY*"UI YR0Zz观Ϸj<>Z-Cͺ?J׭a^lUpfCT{2H-^~b D?d2XqYm߰箸 :7pC2(d [G &gdkmrCξFwP^GT5ޛ'+C1Qb*>KP٠Ko|?iMPcKe!Bmns+ |\9bhtr)2ٍ:nӖsaū\}fRBE6}ImZRHn@8s4  b%G덍d:TL쾣$!!R}ԗٵ_aa8q.WO{QVݘI+ m%K*;̜чlT kh /rû63kWCIe`C}H0D X}wfsFdwC0 u) ˛`/}3SN^ yraVhKQdv;d;1uq2 29Hq(4ф$0:?im{:L$Lf%'b 1>X2Fob _HFs--Ydʹ&0X vW )W>bt,9m~Y0=FII,m*-YZȅq%e]]Tg10J̢ ڪʴ3>y2}>!%MG7vH!0Fqֵ_;㩤'z?NjoPlpu@(k']h > rwXfRwb׊hm_Ƨߒ;E'd.gb>gI!eՎ9/ƪo6I(ӆ\@]=ۇFEo(6x@7Xfm0.1Sglɽd_P? QyVÌFC,sl@ϯpwy?$ N4o& f*2QSI2"~Q)^DL?3Ea,b'?D?Ьn _S]I5P6ʸ5n׻ ]5vVP2x&~W5q=}W66wd ɹ?y47%&-hND/x lwgқhh#Wn {.zɛ4fPB2U,'D|Ƴ0#!S`n9Lt!wL~g_xDUW^3p)Tsz+#8};㺉j 8hSpbw /~Z@KOW vjiV{CJ豦M,Z4XuM~뼷!C.Ę[m4zQY`yeZɋXu0O(GYZ@ȟeo/.&jiF11J^nh%\^!]Q|@*#mr$c'/fN52 s{VE7k #>?,_C ψnTQk"0f%-h{7h֤`DGT ~d$/xi{`:Ma9tv(6AIê[A,QJ2ҳJv\G =2ɁE|1ȡȏ#a7FPsղ~x)UGgr`\րa-oλ74z]I^A6,B-]wj<*ɒAX/]F)@s Sӗg69KPxP o?~#@DA#H=)bۮRQ7nw>S;yf7 :W 2{O_ZƂ{M$jZ[q8Pyb[UUa,lϧ~v'9k{bpU}5',PdV~<c5yTէH#Е/L&,]>DB](Fëjqqg쁬%=4#eA=9+ݫBa('*royR.51xC Rի{Ko#, xM6PCeCZ̿Cs,1XRt֞#jussoip{S<9kxs{ThGJMkrc/ii;^2fUKK.n6(2]1;VYGOy/E+$=QKDƩ_{4-`(1&|d.n= ڂ]i 1rK6j:W*Y4T)_?4įW.@th aڙD|Z:Ovͥ#49r;?9UrT(X1Ob1R6\=2HGSЁ:&6$T֊ސhmqauF!C48q$ZʀN>] FѨd Ӣ9ty˘cHs^6 | j!sƦ׭kbZ>Uܣ!6P* +s@{l/CTӃ% J9B 2'!r^l28g} 3VKJfR-e7GYK>M^`*>k aS0-HAWʷ0phb:Xl$R"W@wrCkNY BL( #*pf~OvB dkLVwM1|$m6(tMNghgt w/DvT&"Ԋ15Y6˳<ƕ3^.\PKG!@./7iD4f!o%q 6Y,K u @ׂݷsqiJhu!\åtLmij_S,dLO q{!NiNӒqPܖ3-WZCZoEgniƝMl|N%{a6w)G0]d)Ŕ,ݚrPv# sh&|.cMQywya=xV%Vh8%絪ۀR /F6>,1Euɮgֶh$G63U,p~E *?҅sk[wLJJ}&jhS vZzxp2Q1\,M`%`Ü v:~ITWLt^?||o1!g'<-^nWׇ.)7cus߸w,LO PBE0?vhvpDow_ꛚ,gU##n ǺчPZ]`RhJM3\ʮH5z#繴[%f Fv~ɈLDlҹ+WY? 9*C6ƻ[suw:?!6b*Jz_B3!C e".6IiO v:A<Nj5BZ:dul*0Uf{^'w"&^/8b}= ?1?DP6{֫h8ϞP|c R̹b3J&oTs!6VPj?oz4zWӟz>z*2Iߡ[aI˔N64I2B1/G@}4'Y ! cdq+2z`uNbJ84l>a!B'b[`ˡgcKWM~ѭ! o-72&{q+D6oB/b OZ$/s~bs@)lVq*Hbm:Z%L8: X# ǬO*Il\%Ū93yb<<( X?G=WuIC+v>If2ƅBT?MmxR[mhLv24S=R(Ct\yWn&2{g}R hfu]ل?"UTC!/a/rX;Ajiᮐ0d=*ll iێ)_#]֫ҽˀfMmKTf ! %oo㻆+q{vRbM9cDkkE듫ުN¦G-?0QBZ8%}[<,e8회r+΄{GHSA_;L- ¾\AX,kQe 6b++q;NtBD#n}Zg.I~pa !4f%$Uzh )XPs+#-ށ1U:[UD i.[`:1LL,lg##(Մ@Wa{ V(rСܶѾ+v*?C<5鞺oYPC+NZksy2m89.}&0N335=ILo,i1obaW/3''n.6=Y ǥC5m§ b~];NkoNs~?t1Q|5-!{AN  AQJny)BuX n|y{EnD&e!x;$9$kxtb~tCJ M!xR}^(vjyߛ;(ޔ59 FλʶvLe˾@}#kdM8;F h#$w}V*0"rƒnb՝ sgAcT1~kWʏZ|Oۈt$Z͟y$|aI:U(W\但6F4Gw>k Ҷ{ Q[vZ C}rDpߪLWCPRiZzU4iDJe2țH½{'_Q v_lbofex/e5RO֔S*;nvnɝjJmwģSYkbR;9scVMj}c'\)ߍ9A@ D^t_*Z*gdEhf]$k˩WCL:<`w 55wۥ W$ë<]ۡyܷŻ㩏|cm\ր"x\x@8%}'YAyYIh描o#dodŹ2 Չ$AYOc30Ҏq(0;\gH6L4t8 4uI",5VqV&nCc^iXlA114X-4nz\ vE/)A]ts0X(=؍ڑl t?ѱO3DrE>DJҪɡ,5"] N6[2q@4[%_k ^rg z_cQg:gs$+H>q6\DCdK#Cl,BangwǏ__RޖHΔmOdbX_݈~N1sTf"1wi>e^ڤ$]iMƄ*rARIQe`p hv"f.`sF5< ]tqLhՙuSDb  >#Y6 ~PjYO62 "wrߡ=&9ϔ(_ÍZ0!i8?4KRgq%/awBa#릜hح~$S;I( ͓/ ]ܶC5ER8F0VNFE=MxO/g wz:$D6-3âd  E1te[2~"MHC yw<T?@Kbqhˋ0?&oi!R_ܕ&|} - [C"W@W="]?5.@Ǫ_"]J')+Dۙm{1Ywv0< lЧE)s|e`:o; x v\:.bZLY,YU6S0Fn+~Ghh/}jP(/bJX=MH]LO֞pRj@/_V]֗KU~ȯV*?hun(2;??w%j,r&yTx֎8"r\}dtzW,z:t*) 'J_^k-ڮa+<lӖ!;f5> +NƉFCaSMP^t5YS+b(*.U٢D,;v#]q̳9uPd1'Oϲx8{%m(=ׯo#;[Q5u"䗘ƶ24;/4||F"rf/Ԇ}ڲLMɨS<ޭ c-(+3.}M%uE]W 8JIarC?kGU:>UT A}3I[=9'Je Yۢ>vJh;%#Q_X3 g\,P\z"rJ_œd'tGvgSHKE fͼP>Atdf ύb7WF@JE!of+XY7PʦᰜTP<ҩݸTUӲ|[YɖU[m0H4عЉS-. jwY5^},~sl=ADs))qNR|WS<{_Vcʛу |KcdS$!(ЭYnp2 '去Au^Q5m!̕РYpA:Be8Bh3tGd$P!R5}#25#[)e"/| dDGYty[45l|1󧏒kES:uxzwOU$Nߣ/NRxCKlR<˒4Q4kLX8*$xpsy*8~YPl8#2 S5ސg?֤wljȧrrgɪ67Dsd~Cv.x)gBq)tz2- |Fub4Bd8=IUhP@Q0J-M^b.\f3N`)^+,8^1@YѠpx~Q<,Nzxw>>kw6/r,N(nq9~Zb0#4Ñ3&5Wik]-09lw:TnOfJP@p=)KP~8W~*YvĮ@{N$zIF5A|MyhA g뒐mM07{NY*."IhhU@KLI)"}vN)5t36ۭdeM{ RI VȆʅ 2+0wtQOA!X4_6h.17G`rV n#Z&OdK{q oӈҧ3)Ϟ]):*_4W >N"G!!CO4̓{z͛/ݯ;2氯3%sNez.yc"(E SWMvm dB`Ijg9h8Diu EeM TWk@uΣ_=&jny|8ASf8'&Xe%nPM$e?5QƝH;` CQ9-k0V; \W3e°UpK#Ôppnx| shU(W#\KDGBWQ迄&|)yh0(3^z@z-5x%fZp#̌R=x CZۆqb%5%MQ d͈3\}x ]׶]Iz ZްDxC:) F*cN ~I3\^Gbmiܯ}n% jY3@9+nDj)$ѹuDR^X0%6{9呝 wfyC\L ؄=`;lX֙׮4HoFW^ݕm6&"[Y泥͋8~sOcM;u.IbC)5Yc~d Kh} 0g.Uv v|b0 v+Don\F/e`.5gUȥ^@bW_OCyz^z u}4Dۆ)ks^6H)uuֽD2};>.)uwGg?`bsP7M t3oGKi_oWy.OEMeyP(0+[Ap+wRWeMGۧm;66T2;Bf.+$Mqo'S߆Vˣ mg ]%j"q*T=,!ʸ6#8oH\2?iՓխj !̌N3ܬ=Ji05RAP{m?Tm*|^λAQJtF'oBHGhި yIv Ѳ^nd}ߌf.3|a-__X nt.Wu\iP{ǹL'PRⵛRtn8F%ضn9AiE]9CڔY?ءv"4jx91Yw!Q{MoG:NXrMFң.l #Xtu͉J[$V˾qWc Ʃs ҂0fFE=zkTIi;mt),ţPriDKxҙJTšښ́MS'Xfv|5h,s+Prj TD9 63FjlQ'g+fjfH9:ly_lC)!R 4Ѕ<À瓧x z"V}(k`{2[C*ȧo>S7GX [Rw2[HU*s w|^-:47@(.*<\w *Pe`7,زʟbaxTBamQR\VH{ig喧(?>Kd}=yc=D|ծsFFY䃩w/OhwsP4j#СXl f4Nr%4eBo(?w!AGrHTj#r%#<<'ߟL4eYP"RE;OJVuZT/"~Zڄ~\zA9?%. .W=iW|>RZclRe[vfCCm~SK iF7|ЎnjpmA:*#wn8ܨj'T-Y~' Ѯŏ؅cƏYpAW5X"~xlnW8_\tmc5&zW,Bg`C8rҋrQW@2o?]S$d~t6-Ut8Q;vG!@snk!%=[=!Mr/]bsԶ,7- 8182،S/F ?em8- %R椃ύLmHggfM,O{w zM2Qϡvr&wD"|]LqNfgCy GlhO/AǞMasD[^"W&e}Jߐ5^x8vѣc_M:ְs 1^iL{6_xjΙ_、^h=q/ʏ@5WynL0&JP픖2rt|VQI~@CSS` #eY1$%e|uf,`9rRqd9D4ö.(dDUBBp cѩ  ޹Tc;K)M2 #a~fvQW/˩Wnd;i*r }(o zo"U류'3d.pN[v>cyH(yg1'0pqI&G\Re t$ hӃ#n wo:kɫ@ pG}з+;Ed7 xfW# KĄ' x8*j@iaQC j˪F5kS,*M4mr.oPc UaVq!| N\['@SeเbX sA.'1=2rߔGEXi}PR#|]YX.c3UYZҤIE&6o#RMX֖ڏfqWAv$VU7}_P"OV"GAU ^(1y +Լj܄̝K|?<|"LkkŢ Vr#r=ɚ(tWbR/<;ee|BeIZNRur ZR1kH~œAHk鰵 m]rÓ=/ӆ #P[lT=pwX((Tq [\=d`A=7whi|2ub譺|o([PlN&u\} rk/nsˆ*yS焮29Xgk_lji@|6K_:;&tnRGx hyRP+!y]M8v{~ǹU?I4v:]xRQѨ P1Dž c,urN闌,p+ĹbO:3"yf2̫ V~7dL쀀/J \3klCiRmj9%]{#P["$0(Y[:_XKbBzjsW!㎠ b  &؀fX+LTǏwdwɴKa T;3fYx~rrz88X.^4I:XN*Tи¶@cwIV@rD̊jc׻[2pwvQUm+lN%tI=E7 R7{B..#( `UtaUa4ƒHo:|ySf-n͉AF-iVH b uM}ٽj~n<)E5Z"T&8_Ok8{:7?9XTvبK= N;2кc|bJ4p@7f8><[݅>l Q<,)E1ن09tsh8=̐X v!DSMR|޷"C`g /򡜤.)b{xp 2#0 k5FyqWpjm}K"l[?pH]\:? >4rpgZ:4FiQBbN#`O ʢ<| t*Nf4} ֩F ڰk g^&XGreEU$ cTcHDjRGڞHFSTUb:5" B"*.5M]P_?0E?O|FxrV@)[o&-fq{>q؉a#%Gv8i$ZOnQ$&<#FFK]lBt!Vn5:u4.L02Ox=`\.^lnԀ 6ӓzG*OQMr81snqkf7T+0h`y$MG׃ -$F˧c8/MZBѫ`:ū4vm` <"S-svJUOYl*]ʂ`ҍ^)~V]?fCQ 7.ϧ+Yl/Ot4-VBƌp(n{TٜXof0E . <{i܏ciQo2hW\'.~tך@'0aBu6ʃnKp@y(jp_pyo|u:cvu紛AY[ hM2c'i7S9jV膼w$%a(@[\izXʥ2EO`ѥ%iiw桽%*kf.U[嚟zi-:Ѵ3wj<),airsSzgŧ4#/t(MI6WM*K6((Z7ִ=ˑ*R` k& {qg'ABK2՝9A5JPAꃏ/S&\ obGbl)Hl2.^.//,޲(,mo3Ab aTJ-  kƒrjEk Q"PBV' wvU|jL.qo%ƿ·⩚;Y39.u7OS|yG{q~h.5ExeM-Pj'-OgٹR" RL  aPgf!#L3>$Sg<-^XVs̏fW3sog"JTv3=VQ× ;=l:J9"d@.uĉ[ P,-Q-Iߍ?6-Ds : {'DU^V]6H;qܺ/zELjxD>Tl?u \u~P<m` ONVYŁ'DM]JBN&vXso_f(KRcᮓYX.]eKRRkR|?& xpXL.ϬNUa/ƀQ4bJxZrSΑe!V*ˀ,%!Hd<nt y7#qՒLNXTp.^`liS6J)S=vg@HAkkHaFMz9:_ql&k/|xCv⺫&P$@y fWmi,/[$]]uXIλ3O6WT.c=749VmLvf\~a|B˔ O͖[ZwOuoV߲L%ޠԽXE #3ncAҐ5 ^1B攏CxCo, G+nCoBf잆s> ) މx~0ޕ Ab?m[koH23K~YFߑRz&t1Kj _FF^ⲽ÷؀'#.b7SյEM/ʘ4OdOe0Gʉ11zm 2lC>-m~8Y S`wRIC|t7^?^?&?@PvO 䯰㶗MoeƟMlcҘjI `rMZw&7>FQ QZp2&0=X `ġN~Xx/:iOYWufgL P͝*iǍ m,6"4*~&8ˍ ,ܘYH}P0*0X~.<~M7Ǝ"^r(Ė|/X鰭VWJ[QI["=oNOhD ܧ7S$0f~{NqXsQiiPC`FH<FUX@&$ahj_{ @ApIHhBAܯyD'{؊j۠覫*$W},Jȉ ϱ""NTcv(^D8:( fN*6*kT͹K4{Vn9qbc2ó^Xr촬;|6viah}G`z$˭&2:A~$yv|qx TN7_p9p{k֡]VM2Z6חʱL)z8(? Wmς) Hȗ.WmKvx(:pAtanY#[ ͨx7t/XHF!nmC4 nmY6O170B]=֗jgr~~s\OYQlM3;=FDlP3n'?ƷU/I*G+Q?"ƽ& ݕenz[.J鄎adsHcx\U1CH ЍTݞ5 bsSCZm$6g3G&!S(Uq#]/HkB͓}ݚ+*p |zA88Re!*YZ:6 +?cd e{\FFQ"(a6j9~V?2838L7}Aؤn_!O09 <+._0:H}CMKg,k%mHԞs 㮴؎px II˭Qt/N1itӡC1cI?l:K'3W?kڅR``0Gmd Tgz9ۍ-MQ1qN2ߞ]~v+,1z0H5te qGr'/hEIsdw)z t1E^;RanNY2p.ҞjIcYmU`?Цw,Wz$< ْey-0i{;x<`̩f/ "| $5;@&Ax>i Zɿ 㒱gROo)+uZ cޛew(:!M ȁuiY]m*(r=֦LFǏ脟U}^ϱNnOuBT5%e,<O}DWO7njp҄Cx ;ș,u K 9"ݤQ|ZWTK+JfHڽ4qy@*oIsS@Dh"V9 @}=Eu%$eZ!iU{bO 4{54\~!sJ.I!mHke)5TjMM#N` 2v/$'v6X1ߧq|)Y=ʗ1I؂':\ $#S:GKYPiEtE+12q$|<G+kɌ KtY 3'UJKn*&о],WT*.ᰘ(&!3Up]}9 ]ВX-s'UmnVUmI+MUp.,N4mh!N]n%6G`L@9QXԈ9VGZ :"c &l'tpx%vc&׮W9W [~[le3R"kŽ'[ZIk<dڒ`05PǏR@,{HËYGxgp{%{P_jmbM0)6(*is[/2>DN2ݚ<ӊ%CFjÑ?4܁_bpi[*)g=쨓>s^C:Ts|b@kk0gPX:A_/ 9@D1)$]>*;H=%w^M~i? k ŭy8 )+b"?b|AaP?8s7Oi@ψ o2.ssM bx.` `W#9|i#~^&A~}[+2v7g#zA݊yJ",z{!-x~;nqGٮAfҥ|6jnHyRs J@^2iAP(SŲAUB)V>3omB-ؤ1DU.95Hpps4kǒZS̍S N(c$~.mty l s/-S&Dpn*A\DlZ3 O].}-D`d˔>"< V,%_dXȕPŇ%ur[P5 L`f$EiَM m2Qfs_ujMw5I,[Ӻ^Gz_1$wCMc_HEiMx\q+fלc@ $Q6Y0ZnAK?d. $~[7бp&| Wvp! hQ^S! |[ф!8=܅xQx5z5k`餐Rzvukל<$\,#CW}azwq%Mg ͡'IibqBD_sƨޔ[q[˦1$-k?{`6I#lXm9{tP['zǑiv" %L XS4Yb^Dgtf,qʌ&Mzy!Ť1Mpgk(x%-xs\Ezo0˶n A -KǺ*,gwF)}rD ya^&)> <jIOlXkUrҺjV{.ØپQ}/4)e*aJ%xfqB[uhSd- X}ۦH /5WAdyC l?=-.enƞ,ddQj4C PTk;+?Cac<}Lrr<śdid+3hJ=7XdԪrvqv=T櫊xRQ==<  Qdy@\aTC0K4RdK )w6I y ;2~BSI"2;"JX#@:^)Q*f'? ι5DjwVaUmi qQ|;/.oH~;ji𐈃!-}}H ArJ&'#οB}E EtL~.ƪZ34,GBt|MJ̺e8fhE$KuR|PO_x=$wݠ-P%RLcPBϛhƧ)6sYc-"Q^DcE_,jN"2!ʘNVgN\ښhz̼"\N$|!Lq6۾.oFy:).@/g¡.̻CLe!W`L;T77̢w7̃&0/cFdNfD!Fgۛ}(ݕy@Rxnc ׁKiy2ʡZ(oկȖjeVA`xLH$ϦT\3 Wi="Ja3?CgkR@JK݂%Uר3DSZep9PԛktklP3ĉ^H:) 5#;& 2O[f~~S2RV$$錫8/d;ᴭJ ЩzZ]cJ袠4& _ـb\RjuNc:~Ւ|X"Hh.$ HQa]4/iV "M Q:IpK1= QYA/]')M̗´ͮ2hPIg5ц֬Td՜vJߛp)lԵ8rŲqsȳsMםi-M7}n3FOJ2 VaD2`!Sr;ܕqA#zE:ՕsaI<xZf!s]y^;zۋ=$v~l S¯1^3$!•E I28!uLM4@\~4 !/6Ht /EbwHhq4܏jm^NoԽ\@1 u][ǰiӐGMgSMƥ,Ԏjs3_q1[N -9C!RǶ>[i̬3 OzTp@e?Zq;j~b&P-^Zfev$vk[Tu/;nx5\΢P;C.-E2OsA|n=; TRHP/6j0+"3qgfaU>d#-ho"v!B''3XLzю^MO W²:E!iSibأL %B۞'HwCǔY-QTbjM74:gl-1,goȹa }{&t&v{襩R]aG>J੥>4ʡHrS(GnJ N&Q*NGKEP;;@y TY7Xk!(}hs J\yğTxGpJ 2&k'$H;|F :<Y"}y/GN"uߛa.LLQiV\OE$GΚsvl*r5v ySA;-gxo\4xKpZׯ/I\˜ 8v)BÉol hNCr(?kO:UPPXx ?tKOYMB1 &LN:/'[>86.o+p4U}F~)˰7(%0t>&6nB֕,s1YR\ *T ž)l^iAS&~bF@ٛ6gal'+$80>a̦Ɖbhb{5_B>2 -aN5;̮6X` FA5YL%9}A}bb%,]yz\ Ucp&Ok:1& .é_Cc}er1D#$֫]m@96xxghK aNX=(ݜ$Cո?}ّq&6݊F,V⍗5EF0  oёU?rZ&AW|D>.;Rt+Ehui/sQ۷ ޶F+IG*#CPr2;3׎4\CHO[1+κ DI>-@Q)Z"’?|] {zej尠y`ڬɴy] R&uE@16Rz[=3 Q ăA|Zd^TmH8 itj YT)bgyo WKaձWʘ*?DbuhrȖ|\PU'ɀ5k-*孫;VӺA|q-Ű@v)sBabբ9tS$Qww~;|O;#֔sfoih y Ś1fbwW|ߔR7z ws߂JO-Lgk(hIO=Ͽ ξm|o6ZJ5u5(!#^-Soʡ)C:ם @h༬}4o@gU-.aMaᔞC V 1"|~ݭCU$wf|p,r*`Xb5eFBOP9Z R<7woV |}$]E秭8ש☞ejȵxH#=f}O8\1ozm\N{msh`&?.^ϫbG*Lx7.zj^ъF n19,dyQpع,,7`rȷ `! 1e2rgY & 6<(y&o!iu|P\+ZA LdtO=Kq,=a. '>₈\:T1ar%j<|a$贜 B5x.usrpB )L6\ad({*mOE j͇@Cφ7v?L̉dEGh!,ZD;1YQLWxtkFp;z&$,q–1}Ƥ6gRJ $J?pg-y?a_o+)pJ0vnС=m%SOVW6 _fitY>I-RA9i@qoWX+)7AKFNnH۱GUոWOWџlMwEщ[VDW1Jq;V[nӓ *a҉p ܛ]hIJn7SE%2"@Cs 2GNL\qQL6HR?xI*\S |LjH_Y!bd5\A.zy2Ԙb?x+T8x;2M pPy~ޙ!<L"'qJ[{5 rSQ`S.^'j:Vw! p s>_(d֎Ùt7Xly~c8UG$n)cynϼ(;b}ME/Cݷ.9 qc֦('GR5() }{TA\9y1{S(jWR# Fqs捠iӐ`R\0$=MjIwu+ CsL!~iwXw򡨀9wR3د7 bQpֱiq9N{@~i`PEl]FH .Ë 3IWKzb7\pw;VW4WxݖNe9N o](M5P.:x=EŗHJ} '{&JK8/_kztI4$9ME2wHm]w߸pyH1Ň 4Ji}pbYfA1i ;\XXG+ ( pѩ9wlaCC!J-QL20I+YkBIۉ7Q(lдۆE^S:f*oWwAM;+fi8:|4]&U 9Os7h3x;8(aJ'6 >4̂P?s^&d"QL2HbJ 0vR'n1y r1gk.I`=.o%2`49DڪS" ZC~v~y^}os5LDĚlcESi͵JP$bֶۏ&zJF>:HNt.@0<'K( }m' 3oр4p~0, [ '4R͋)Yt.bv-Ԕl*E:aP6YvpG>M_x`$ږib ۽徵#z>m'5/Wn9ͭI=`7J+k$uCǑl!G1{Md56`$B|5^hdAB+$mH&8?.L2ͨ=m#,u)ix Ꝑp4miRFeRm~qo"j21GMS&p!x56ϓ7f{>׽S*ha|LCC׋2ulDpzD|]#x2''xs @6S$?S 4S }_ҭk5buVhju f0Vfz!U|lS;M6J+? X6 f_'vyOM:-l7pc 6Pܝࣧ*tQT{=#jF=b݇ %í# Vjҭĉ!g ԗdxKΜ κ6z.!$@VYx)vn0ogٱ;]-*O=tحMJENٜWoi3TQb$j9dB_JGa&Ϻ/,ÈXV̞MBqݣ g}wEq-rK E^vۊJD*Ͼۘa gUt#]  OqJ_2r4.Ⱦ ~sg%vAp&0&*ː@wb$Z&{D{eXG@1~5Tߤqh!0ԫaˮ%:w0R2Fжgt|(WY ňaMX\clN|Wڅ1"zΘlVl:Akl&mCqXG6cL_)RV\Nza#骜pP!{ ;t/xo=Qp*=jOw lYZYm&tPu wmnA\0M{M}]D귟߆R1m-zp[< fՒ]қFp:ASC9uezBJVJ61t/ƅ1Jcrɀ2⨈yE ^u9:mw'G4Ve}'jBg01mCbR op%-V4E0&EU/U%KrO\0b&랼XJͤWSF|>>OR-kH5L7:RԽRv6ΝpzND:}o1$g%SxQcu6Vh6 9_- vC K=5FE]:KZ. IZS8h{]P:Y#2a&6 _XUHX]œ8Z,\xV\+E(l]ӵ tYM̩hjS%]I\Cd{_]g Ӈrl/Q7t+e ~ЩTA5`, u Y_2%t4B I9noae%AG_gKF=Õva~$KcZD;3̺^B\/ZSOp)s8zbDܺV6nS Q3!sՕ"W2JmК:+]+>.kі<-U܃tr =Ք ϴ- ,t1}X"k`RaǫdW_6ZtXs-bd 7Jתfpގ;>@1SG_p b ȹ6 ;vFQ?sOH| pi^ )ZZ*K#KbRQenzXXy2d؟r{|] QzPn@6-`jtp% z`}?D0xmo(2 2ē&r $8q=_%)ji]I]A~vL3!ԥss1nڶUA1J |\Mg6'h=8|byiENvzdxț3Ge%sB')vhxk|0  j(boda%[c$J1X܃!j[:1\ Vopc BV/- ,Pw%A)<}ΑrЕsOH&뽖ٻo 7TxFR41>5d{nNA:(~NMP2.*D$,E4]=?@P H @vwשA:/\Z(͟/R72'\ X>(2dFH5Ȩ\Ɋ3&Gk2dR,es wWWr i<]Cp D`_gB1piY˓&\Ň=\S<:St fm} ҄ TMO ڈ^aPSkٰeDeypd|vuRu@* {[8Gɋ#P,jvZ| XD5X0>bBe%'0 w^`-Ppx)u䯯:I{)"{/M6,Zl%?P(nel}[Āsg1l(ґb-`ܭs%>v3)-;33 a| cRV:QR\9vC0evl8qaTt%#Y̔ȍs?Lѫ]ZTnlϜY9L9$Ђ|Xc#%mugu9z1meÙGUy0&zVPUs0Gle8P QjJ*͸[ Ki͝]7JWs׮YckD=O01-mRy#ЀpdϊϲW7UqZ 05}:[HBF Еɬa\zyWC[P(|F>f?$8lLۑ3GyNG~Eʱ ӹZע(r{jld[o_D, gԝ/u9qoPkEfh\@h"Pt '{&{H挮B kL# ``a(OOY=RWJp7JD>҃s_w}G]8b $`@Ml*S2i+{3;Q >У%osQ HP - ˼*@Z Z}rR0Fm4[JZǁ3!O<̘j0q#9f[ `UY$<=$X Vm&M_l_\H#K͗:nPr$4}!,s@gj_ ,ASazSChij&H#/,wDըFSؠ\PRO7)^PD%O9Cce;cl!A!5rOڬB {P"xld1y"ֆO0$%4 ^ *Z>sv&IW691T$/m§ρAd;JTqM+u<q$,T95/z xg&+'jGewXA;TSё?\V&fx6h<.|vS4p\]PfHrK2v=vS܄*.uŔ 8`.pFp\#!#pQe<A{8XBLW"8n2[|-m"ҼP4bT:eSoLC"E_IU*7瘤:-M to]v '>"z]D"2'VpktПJB:?Qxa =2 i[15#UԖCl@OKYk+*{ 21g^h4Q5-ʹ*"Bt䤓鑳<"`&!a!/2&iʶa[*R1,o݇yA`}o\x Rqe"\9|Yb_ J9 &)LZW='. q$ 3kWvL"ٗQQ4` ( )E:zLeo֦{u7I粥yLwLЭ>K`6%tnxk?;+7Pѣ{gONc6 ڗ/C^ ȨshF^W}^C#}髥;j%DDm?Ǣix i֌45j-/"Aĥ186U0BJ^ҴBuw{ -m`Ӄ+J oDIJ*˕vn eO5 Qs pcQ ˏP,f:wYq1t54.ȽxRp8L:X?ͼQrof#5ƆS+Ƞ%̱:>*G#},!1)FwN<+mo.߱x"~_q̂//鉨L&&6h[%Mxv$h#AC0ȽpW]˨/9JY$aXG<ڽ4mRirnN,l1 ɅXGbP*(wN]@P}x8llV5%tj"Sw$`V-t /ȥ)^$D̤U^iFs#/PP9j X~42V  V!]J!5_aL{:c:g(=꘼uix+nWa5-t6?WbhB ω,pdK7} 4ϵ[E' }x# HJ^JFPzg;EחImz9 ->!M@x=dQm! 2uvO`\.!G%dFMضtHr>v9Rd*caZ`z+CmE=x/6\(3+߂ӆb[ԙgA.FX輮^Bubj8EGD/FZ˭*Mlֲ/&m=LKskiRdw3OY-6T9@AbcV=tn!zB5O$M 0D (q9z:e%V5G \a8L3B:$+*D:g+'~+dz'XMqA "e_d ]tś4ΪdD_͆hl中m}W~SZ\d"}y$݋A)dߵT:PW4[_ }hH-߶a8q9(DԤ6wAl{aBaH\Kf;zP íLJ\ 1zb-kyj(fj >j&OCW޿mY0,ЍAtd;F/6F=ޤ13-kiϘdUyF1| ɑvWz;PAv!USI ̴t%QC~[虄)q?Y#%QzE`/Nf^Ⱥ7hlϾ"[F=@4N@=9+;_L J.DHפyϵ/^]u]d|QoroKKk/h g&z#쯍\yH6ɭ-z "|#o fUq g2TDdAx3leQ!ٵ|LȐŮq#e9Ÿ" RG٧Mi#ϬmF.2+ճ$XbV~۸gѼ|\WNq}ZUQsuͷlW3P{Mtk|B>q>ܬrN}Wcugikx,2,C~Y)iZ!;!{n-X [GHHoa-3y*e}/m0q-xh>J!ZJO)yH&ǜ"Dx泖_8UFw)ěr /X}#CF*M+emq!l+bdntkP%yu4TLLD1fmpJb@g2=Q|/En6G,|7z#PD 5k`b ]"Ń8H0iIhOK|Myw2|9*kdj ,;Fj|=.s &wd2t8ZtUuFIN[@aMgsN*HKK {ok8ՠ󛣀rk(ڵVeL"*PijD}+Q iޟWrWכ3Ηɫ1&8>tdmmHy!A k=LLOh=ݚ86I ߓ5)KM!QK }(閴]nYj{j$Z/WkT޺}VF Џ_ hy#=h{l&"*t&#aporÉύ03"s޸<6mrgؒk/a:'҉j|r={3:_ԸhkϵĚG{{:8 vcn&94t)Ss z\{n? vp9!6b S g7;!ȋ2j𤉎2 RJt?Z2`ޒ=,}z"7ٻ~VHwmxwʭQ;",kH Qe,MlBBbH pӫ֌ q~9c "v$ډqZ]NӒ-{eX}z_dդo̢uxf1Q܃K}s9$ Ŧ_ђ؟cֱhp_U(&@Xԁw1;&L2Hpq6U:*ºv'0iWi"b٧ uW=#An rhx]Kq jyB1v~1|[% 7(1|P [Yآ6S| X>/p rw?=ds& Fv>eE*Gg^4;3|\W(|@UG>3bS&5g|ǃοV2SVЦf3U,zovS`SYRTQRV0nepz%x>,P+= fLh!:Hw _X3e@:qe|4c˩{tj q]=)c&G4ݬM}B>9 " ׹oe4 T8[.t9WޣrK0/Ƨ~ EA4t泱Eiފ"ʹղ  ˸*ďh%m2K Viiԥ noU蒈] d±*}?kL70ƾ x;P>fO&" kU /6GlIHHI@[5>gv';&Q* KvQ}yL,л J.muL5L=K).dҲ3졞*ȡyTNhv-5,rH=a%`eASLɫSu0?nРTpT5TB tt[.^5VQɀun \Go1&X-ЏJn*] x|lpgٵc+r>.˱ 9*>[Ƹ@fڌt5ua~n!LDYl`,QOL3WCTQHϬAr~#G eaOyQ=Byf+dgr&ɡA\4HA.c5l1ƻS-(4JdðZ7W?hFFŝ"tJЂO<ƀr{$R,dl UU g`r;,ib #ǧ@!\V; :ǺT'4)my+x9d{oI-?t2g`e6RRkij7QUϻo?Š^4D^jcK^uQJ"ش_D=`NWulİN{m)l_x'~OFCȏy}ϬŔ\FlhYu7fuM6"CJ,-;߱M3f`'=mAp/HkISv[=Cmo {zϿA@Zx4E_N>qƢY_' Ix@n4 ($ոՕOlΫ` A >ai m {ω2%< R4`~ヸ:O%] Ԯ}& G#|K[(?i">zw5L QUx AnEGP`>e"bHڗ2~wpY pc*F{t n"׌zLO hQ+RuZũ=&;q?9#Lh1_ RƠV1;%C;ߕs{S,HyD +3P=IJEn +'BL$[9`)hF1kL@"ܜ2KED^Xtw-Ghz{ 9qA0mJEI`HNЏXySOOBQ)@U! fs~c\>PѢ(u ԨI׃{ sa˻b\ \]S8ӆ~D5dt_ss^M%zZ@I2ރdžR[: < -s!3Հ S*6 C0YPFD>fn ߕ-AO! QiXu_V}+6tdcyq Ɖbm7R5cTp{ d©R!TF.db9APٱjWGh̃.r Q8얲mI@7°Y!vaPaQ+9lNl=OFwHGSq ^pvB7#Ӯ9޼yj4$mqŪ n.~27}{ě5a!EQ!yBCV"mi:& /AGGyDAs>i(q8ln@9 ܖ1)PĦ7U~@]NA蓧 0v'.HkA]AzsLѮ$f:RJ㎒vK2 +:xHt FwzBaڑy][OBle70pnO+"|apΪ* 6 t~{X3tRz ˈ b):(*ԫ:(ןUS΅:~TZܭIH31 m1Nd509M& iO 0?, -XMJް|x I6B7NhfE =ϙقgc+#HȀn\{X,=Z 7.a@U n[%5A&&`AE#'bxH^{ 0~6Q@g(P3'E>cĺ:r}dqqUA{S?Ǭ7A矗U [6 GhnfZN0V.PwWJ~h&#C#6tߙcErjjd@׺Is4Xof;LlLd!N<0 #^:OKn9ZHiG&k %栟'ex8}!Q^]-m`Y~EXro gӺ懡L['iB]?>,jQKd=HEp 5Ixř/ݭ@#W)l.O{QC( &5/QlUӶQ^)?WbV6O$!Z^W۹sTиJ_}sA=$Oo\'ck*IDBόONB%eU9j *hglyjn?fnPdpymo/^@ *?nW;!~m){8,h- j^?UC(cÑ`>Tu4|g^:t)Y0' ڍG!~tz'рiKl a/~z}\Mޘ!\ ^:F%kL|^lip>#$SC COO_!ރŽDLu)S_6M^6*-:&C)eUӛ%vW[-T吓;?M<@PdlvLLaH} TC]ױm,`C̫m֛Zoh SZgo gもhc١jYkG,qnyo%,#S/gΧ&+:ot\ULQUk\ƁWiA!V.V~L;X+<>>rfm*j' |zQ,}T;;3(jKŰ[>MdBf\,OsJ4zwK;7U͌Ԡ%ho0vn7'A6ײj=r+ŀ"xr۬C1ixXrT1u/8nS& #h)|~ T|jׂBJSw6CYvft :~#Yb(^,Y ѮjSw ~@vȄ#4No٩e/ZI.d.XC?ɤj+f\SmyZ:fGſa7x8oDԶQOr˳; P[G=7If.hx 4AL(x]C7gf=gQZa`T<;1*uuRM-.IǢk'ƙk` $G}0bEj+UlWҷW/t6CV,D;xJz]xL Ҁ9^"Z0}"wh4S-,"f=i^NԳn(o.FMT<;2; íگP6?Em!4n\AmBӮG z]i7 ڇ̢a="[zMIث_0UE`u~oLʩ |Z4ָ˞]1zg`H ) 3Ogo*SٓdA#O\.6 lʔG9M?鿥7#*!8;cdr#;8 IWdL<'\P{^Tw;ǖTkKs8>IgHk+l["pox1X,o [; 10=ȡL6ȡu̻7DZzYɀ:% IjL?Ԩ{ 5h|?繭F)*hډQGjA"gf<{ Cf]Ŧ+D8In`.[o"Rܴ64AYDK-N9P>Nb@UBꌠٟ`hdZhK:{aH';?},R+!k 6/A\.qqݿl;RfM.[/(te fذwWDx4_^0`[_OC >R&V*C Y viMP+oM k9BA"0‘RRsy'p2pq{<ˇ@}^\SxS=hԉt\:{;\)@i;47siP8IHYv#KNlQvmR$(5F6e˄&JFc[]2somm%6BUcvYŶ y.?k<ƀ~$xSfw؟yά^uBS L4 tPkO^֢0npJgP~if ";L/d$E_/AkRBDx*o XsZڸޥYDyCև s'e^ޣ~0$K Jc1Sv[4VUQV_-X#mY M+ll}D@;6VE+R}fi*Yƴ&yZKd/zu-2s81*]|c?gʜ\ߍP v#j+3[ú4W D`&a[\A)] :zvN9k['e\!`W. n(aJ&XAuC$I \w,%K b ITJInS4EV[p}B5Vin6a7wtIkqS؆\%hXخ^vԯ^jC<@<r&@IQ7|ri,%jL}qy-3'-N8.j4{<v~{'H&#bHLnZ"(+[y?d#zu0֪y^ ӓB-O=% >UE+6 Bv"`UCn1g+UJNF WFS6lP`Uʫpvʧ D)%W tDN Bדqt^ Tv5⸆qa&_!jh-}|`Ϙ30=2*..KAt?[E&+΋JJEgn*~(K&MOIn[k#}}Eiv<W9T=oK7]?uXu!n߿y-V9m)b:J æƵگ)2q9;% S YΩa;&A6‘" $ڝ{tp}6\1?F20 -M#p&y:# Ͱ[HԣXG3vv/=#\ ٱxts3# 4gaJs]PQ 2}-F3 o&a @C:_F3.;a+\ɔھ,ԨGC<'Na'48jY17?^x-W8Pä{]O G H5=;Bgݜ€y0㣡_*氽u>N-4uНeaEǠ+7| #F=o e/r^@\-+d%{nQƲ@-1JXMg9x9GI)TV(WZ3;S1vBI gpQLp߈i)4AM61:UYΒx0DyyVSlԂ)|n Du {!_v|2DkX HOqMf =\ue$?AoOhڪǩjN`oLzN|N KaMp&(Uͨ|Q;)._]ٹwbDl2?[l>|XvLHJ/!ؚm{?Tg3͗Fp*$ghӀuv״YۋmN).*nW:#k67?61=/m/oiAup0^-)ҢU`ZAzJ '1x?)%rfy/ʱ;=\a_iYȚ~3~ȭkbȢ#GoL M }8:4VM[I97 <4*L| JBܸ/Ðe؊QV.W)):F!sBK3h!y_GjuQtQ1,>xj v:} RC=\3B=e&)TZ9Jl^9 L#:~~@wZ鶈zMukbOEoʝlSmL!kݫoH #kbXS IؐzdO2rȳkUBz\6o'u ^q6@L~dsU 6vݻ"ݶ>,4EPrF7l9ӧv.SX+v_\<95{fXuW]}#~-+g5pKՋډd]LrH]6yOU$CƙlPb tzdi~ٔFOOCj,%鿕X⧷^fhXj0qڅ65_Q݀39(*F#GMM=^)WG3ilN[Jwy}9(ċQbԗFY,~H&<7`J+6͂malz<oj]anjl-y$8ٞrEL3z>5HA:^iu(*>3ؖgb) y7îF8b2z\TD _stS—i.} isf+gQD@N)sI k-l͘#x }3 +7ǹd+yzU_mI) 1d2#gjԣATAVz@O)s`^z8CBA۶Ylx#,SО oc@)Y"ײmQ8^nI$~VN\t m'\4@Lb/%}󗇏_b>GLSPfgSdC('@ ]:cvH]Rm}esS0)& %~a r?|ip3|L}7EXn%LU!׾4p<ڮPaLgz--1:jNqeɟwɷqk21a =qƐsDG#]s+YГW7f T9^ *LVc! W Jp_K]2zMO8jQ;**QaTn| 7̲'Cym vǢ < avk6kkxL-6m>W}}@xxp@6y'yfpHAA.n¡["> T*[ ˥8c ia/y03? <=z%wN2^V])Ϝm_P#E ^noP52v=q5^Q85,Y9Ari9`v0OBL^-/z a;f26lÑז.1"m1 t:MPzl&v6yOQ@ǜ.e\Df;%Ѩ[PWfs#  r#/|D[l:0t>n#"wIe'ȋǯzuGgkc#fh@}9z,<{bFԨ˹V5EEyJ.ч+ i- tk&4f1BPD^ "8a8(S*p}$tSЙoz)b5fHb3?;-kyIH cOcKc3OQ @~ՒPqN轧&S-ߙ* vEBd~qɪ]T[BVS3cbXYA ij:y^@q&^Bt7A n?>2؈'&CBj5CMW;'C}*dR l"qa%c9@-N}f}(O\_FZnb 1 KO:Z @C#j6oQn*dfT3*D$ൂJVLĀ{D&&)\w1LcUbd^\M$ bHVz!}|Fc%^ XOHetwW owf]ܜvx 6l^KTE2T!?nD5a%#FZje8Hv Dz~ r'Km(70٪n-ָد){(B:4yؕ<PqV_76d~@7[kN$UulΔp[t V̤ILOAEh5 [%&ewƓsn5@]\<6m79-E(E6ۼ,5GNܓե™yJ۸(IVX5Lj%b=DASkĢ zñTO:#^wcOX\肸D+Bun*Ws[~q?D 3OPTZ{W5IIg)ɣ;qБ m=y B˂u ˀ[c\vh=ٗnWVPoyD:D6(/6 (5:, f3q,S z@6u:]v dVY *$/&Ҙ˻n]bđ %O(~n0m5;'P|t)F%5_f!oZo Ƶ_LMlv7&`o|&zzs23]9i_O dϹPiϠ`Qmo* 6'X8<Tk#M Xrw`i 鑏;lG^` l+zQFخ0!D*ʠsjV,8FGչo˾j2" x~6ozsA5:3X ?LGB5!ވyЦ[$Vq^+6֩Ë\u(FC-6k\N&F-"ISo9Qiw`򀬛RTVg~0H:G;4{vQ틴ZgH13; vPG\f>HqP t-+G)p֒q :eI9a<HUv>X0T9xf5dPN3c.Dm\(}3 ځ/Bۀ[V+-\V_YDr2pqVEh3%h%wO-S35^L-+(FxYn;}.|LY:O m66ZR#),'waxehw\,\q?7%@}(Jhǿp^"{?&-d 1߇֘snڳdc?s|7o#y@|)Hr4TodqU|! ìnn'E2,-a߄j!UQ45r_< V_7Nrl0|z+we|y+K>1;!%+qAiW6@jzR|~eِ2.!Ȑ(M@F(Mi\CxWGb5Wf'E Aq4di )J\O/9uA/*>3ǜK!b֟!SfzY D@-ׇ%4Oqm"dc b8 ~R(/"zaV͈;hhVݰ\P0s7L᠐?9q#0g_&>H/-f7_owg- rF{ YB<czQV",ra? 3A\ x뉟6q¹!aCv=|HҲE9G:=̈́?tV]y",sK_Pdy81UsTT [`+bW:݇Û WŒ!sU $ {#}̝I/r[Խӫ7Fu1x ފ EB Ot'yEY]b܀R1{@.z\gmY)}ZeыWwcF&Ћ-h+m G(aqH{:aCl4;Yv)B] p^Nִ9}wW9FK@kҚ)9RS'k΀Q G)p{=j =AE5lE "] I*?7̣[EvKaӈ; ;x4,ӥoŘ( !NЧ ׋[uY_mo4|u%LGlag/bɗwSDڠ\2q>yDBjs^(K'6 C1ʿS;ܡOY fSsIlZ ?Zr, "Kը *jTB>P> iE:WAöXIHx7 䃂 # Tb^%\ ,1d=M ѫg=J 遬[1CJ"znw ,p+-Ε0x40fe%cGP0AVn4wKaF|M١]_v^57 1 a%RǙ:Nj7GAŒ{ki{y1Fm,1 V]>VḢ8xW 2}ST+1 q,A _ ןˆmsW.yl= \iK*&px0|$=~7/3Al?>a@S04RO؞Kfs\?\=JBL\JV:nbt$VkJZLΤv%Eo Kc|f%R۩X;8_,ҶWbMյH]'$c J(|f |RU|)OO!'I3ص }v[!$^ĂmfR-s ܁_^JjzbѦuoץtLE+MO@0 ]9sj?. MAf%ۙWL!eתyWHx0ќsS1JPUV,ӊ;)KxynY iëIn5A7pJ?h\S^PpUW%R2u6m;7a0؟uӪ 7zOᠧ+;Uh}Dۄތ/f0zZqxӨ&z' pzh^8mD<0:=uL:J==&'Z[=rR=+UвqR#>-OE W֦mGxw6CP֟nB+{`̌NSKQ,,ZnlUqY!].1dT c=rr9,H]w (Ԡ [0B_zmB3#\sUcW++b76" <3[7ٸ3n4VdHq}cld6GO*l9` aU-vϘUqi|+\jj`<]=eҟ]I#ylpJF'U@ūG `]pmg笟a@W;Ttܭc5 ZԲ@';{Jȣut}ˆBd 1 t7P>zgMP0V!ƢV;ƚ?sd,si3B2⁇`m=xp[ԖQbGx< z5)J-t\{!Ll`;H ZP|P.WYl߷X},j4/riY AFn Z\_z8ᗡ)[/K \ZIqψnӻz~1T evxm `=K BCDr?-&"|~nf_z'w2uүj?L+3@S U˱;W䞫>+ɝ|ҳrhcbS >Wb{PBjR-{ǡEz!UI3 +QN4F$q(S sSݮR ~_NEZ-Hh*]5~3Q^)lM͂@$%ԺH ;EoNŋd Kf%涰Ÿ#U@cʗxr-M6"TZGU@^΢LD2aY+6 BYߥUTk}:Uu3PJSubky;H=K}<$2P_Š)hgoXAG&x&(󲂰>To+,LPDlcp-߼y*D|=N=&݄k,-mQF!Ӭ l]d(WrJzQ)sJ,%&XCDr~ D#m!b&SlegS]pY=Q73; `&0' `!X4>a #4`+UpcY BvܷV|NGn%*Rj_CPn{ }w*Gs2OD@|/6} s{5빙oPWh$>T͎G&%w$ ?>XH@e{ObЙKfiy#+0DR [p5眬=N<ӿ˜N=p`lSy{e9')L'}^y͟[emh̪i+l|JwA$wYS۟7)Xf~{N/>eƺ,'k;UYa8˼^/'<՝RxC$5o]] QA10GBp۪I\o{ _hv,,\e7'{h𞝣?+X.&Eh7e {tmg U|Z] kSv ?NTS# cGҜt)͑II-+8]h!h HQu-fjxg폤*DDM9.W}i9 dvܘ݉@WNL齊Jn"ާ"CIpO8p8?}Q)Eb7 7⡀{\Z,CQٿ^7ĕ/Lr&':SNCGq ?&+#F\%1 e0<%{6'e0%EQ, AE%dWJ2@*8]ZBKg[ZgG^#&vō .dvm-Ź?&.bC+K(MfbU>MeNΎZci`o" 当@}瀹ǰeFxlP9Y[X3W |0 :,:sA%"K&ԠʽJU;m*,* k ~ef)WݒGCh 4PS,N+9ý򰪮oyN=+JA@RDDt F"x,axZl {"Cf d,It}"Rya{=YlfWtIVx"i"T l o*9/[" `\YZ}4q#qϼ I-UZ8qCēpe6b,;O }vj1^RD{~ IsйdtMmB3ʡ pUOE7]moofQrf9r+Pj)a_ƭjW&Eqw;NIb8F%Z`(zhC%Bsn@~|;ݺ+` %p/ _,Ϋo]/09}/V =:G6N.`QDbȔ$Iu((Ek;ب8yȒ{jx6FIDN`˒da{LըM:Z2e9\$(Dw [RKq1g167q +r蘥#LW⛉9).VDԈ8bg*y1R P c7Te,ɿԖU~@%8yNBֽ Ў(ά '2ѭ|DjrTIY-' `W%\=T>yF96D+Ɗ[ np|̐vbWr4CGG[7߲`<^QL k*lVfOnb Bf jW'4~wTU1Bo3f6t\o, 6Uݱ$d.P*;a't ;HmZԤvb]uĄFݦҖ1o-q "99x< *npC2 T0ck E v`gN<Խ -?rKOW´JAv+0:%YΡ{7AF(YLpir,ڍxSyu9^w7;7*jF]k x@Zd3[F**ڦvFCS@՚sޮ U]?߽HE^dJ>)K)o'{X/W*.Ч8vI!n]~_rM,*3>*,@>*&i}pw:! 12aU:楆 ~ a?}qx3p󟓡R `w+-;fx( ֟b'[˛Q-+o?lgEϝ%rw_JvΜoVsɐaҴn5uuQmKe}MTM@x,嚏sѾ $E3uxZC'7"):?vG>>ʦZ# _ BN]pDO1+AKxԽhJՒ ].]%o9;̆e(sn}0,4FV g!9Q ԏWpSh{ b| jx1.-+_%4Ejۆ$b`)94'69rnG%hQ{+7r+, 1erSJ"5"7(Q(R{ϠXIΞ.~'7m.6 a D;JɆ'o}w̔Tx;8]<^>):#DOVnEGJ|*sq *iBY lEz{C0 ^.&B9G8_CƧ ^7_MVUv,'HRNLF_ P:Mry2,T°aa:1NoeEhD̆Ez%IPP*]v.jB+:Q%`Z#eNREwJD8kfm//ņ7")PYd\nw}s(f ^ҫ^7s# ON>N(/+ȩ$`ǎ V'/|S81GsD\b,_yx9bӿ_mI)el%=}dgep!VQгU| '7q=>0%C/zXz_]RoC_FCP0[1Nn1vyzj*&!D31Ej;u~b.N4am8x+9$ TQ|D;NnEO N@~] `qOp $:t3#^QqX-!l6 0$OmQ`yj=fGU54laWnVOg(rŏћ2j]iH77M"y-M_m⽼Xp.JkL ࢴf-*LN0ǧ(ÿ1s l9V9g&olw0K+5p|x,6ӫא3;៘X=/Mz5!QHMR"#O H钩[^7Y` on9i >*iv˥ƛhˬ4]Dō.'76 =, ,}i9 _jp ˨@Uf,&U|la۾lyELi6l Cxfp#8,ƥd^3mbD& }L3-~l^}^ϸ0 [ AgZohVf?7{ aKFPUF@$PHSpy]ڳc?-#bbM"ճ$Qq8Դ*q2poҹ.oana'[ g{_/w\PaiZsZQY6ЇGPgJ3^= CU(YKj(hGMԛ#C HlnYsPX"]Qm Vk4;`rlŲWL@]H` 9E`YY [!0%)Kn#mL\J FmK\4 x4D81͎sӓ䚦w"ԵmG>$~4lRvceg^PHTq"&0y;J0~Wj{I>+ʨ00\[Y#aUM\yoǺrFu_~jNne _\q4rE=toflNi2r6U>IH dvJ}pap㴙*0Ц#u`HN28GUI[ FYHv]2.o38:/0ZvˬR ~S+͖4Jb_XZz:&VqFLvHPYo (VBe/l7_w+MwynѡTE AKayMjxVs/ӱ\}:"ƄʍȡJrwIc{ٍ*|9^x#Qm}0h|~T0VzJ }ݪy{J MJiZo\s;ge,&eLY(*:Qa\k#$mE2i~ڑcy?dJ4ͨV'3"&Ca3=7 l5eg.);3[CsL o1Kbxzςoi Usl}ߪGbSict䪣r=1SHľ5Fiq۵^OyHJL +lgM;툂oj9ӡXB"s0W lqaqA$ɦ_OEI뤽"[0F`pRqF>@*l=wN>,#qQMЪwYJ֠>ʹT]_1|UmRDYe8#LTj(H\".ׯoDb3q̐> t>Y?Xc˄C>uHةc%w"oSYrhO2ON*X>F%jybNU - ]4_NEѓiՄ4{;3?+nd,J$`ú2_rz$gEI?{FbXҵ?@睙PՍ;! \N% =Wk$a QŻFG o^t&wn_¨~(*cD7,|rsUHS+gھ* d.I5G5Ԝ횜v}s=a ?*w1$\Y(4B*J;|Pϸ(!56cSZ\<]-TTK^wi @j}WY-+'/`%XC#-U1uio@m"SК77~Něʡ2 *HK"p L `m# ?҃Œ]Omb!J_% AODWxq Uxc -]޾i&r~ ޗUZ6pbmv}7ʬ/f1dEۊ;D{'*fZEٓH␿sEyPx߸Ym[fI~hcBϸy"ݵlGZ ה˹OowA|nnQȄ-POpkzl˘/Qފ%P)>-)NP]#Uv&h& 6u=¶dX6ˤ5R ټH{ :Uאı^:[WFB 50ICƈ;2X?/=>l1XY6E=@BGߏ󍣹m_4f}5+*s&tCSC{xگ+񐿺ƒn/F~yWA?M?7jJ%sioSث1=&!ݥ|v nҮ@Z4(} =j46sQM RHzƀ. eq hK-l&p\Nܯ_#Q1\V kq+ f_̛mkt6GG5aHǎӔo`Ň (cSv%hxTml_+"v #v>q~i9`o?ZM-ڪ0bhݟ\ĂS`A1~)G(q{_qkR@ "ƠpD{gQ%UMtaiKˡX|s*LzR[ [(א2 o[!j `7źGb $ż+DWȴgssI+6XoWr^{4*ڼ\$ǃjŞtI4ȤK%PBg] k]RM_0R\Rk͵EabJ]ftBt&||\ב% Pˇ&æ; \b;E FqP=-vy|`\A9澌K^;͠"ջ j=UQ{$VZwEza0\ԇ-~æx@ꌂ>d.^A,` /&Em=jxR?F,'=DjH#Fayt_Eke@ Zՙd_ec )D$BusY}@(=icrx1҂lLi l\Pn2/6d\չ0T!`S5W8/HD_kS_ uQ9bc2O1/gp;(w?yN т'Ooq{=}˘A=c+(L=[p55gq:{ uS~?j>XM|0NL7-",#K&C~ʉ*ԤJT󌁃,C'xcƑL3'| Kzote ZYZ’~^p E#N:9kԪng5^iŁl#2'x)/ŜG '@LeQt*hsE3WC%2opڽso%#f>FxWWIJc-iM'/^n9:X8$2BoNX`ng5dm-]÷/W>Pr.Oe\Q2mXC6n-ɛG\WkoN*=tKKz[%о!Ē!m .!?~?7CaVgv؅@Y l2ᔣv_ij;yeBc ̥ W)YHa`$ *ouvwTJ&УoMMLg_L$%ÿ ,Vϻ.z= sp ݋3ܦ0/|d>4HU^$8a Y&Vn$#&F5Z *ghR;-l.ݖ[ʹ[”i{W*;Q!~ߕ !:4Ӣ8jeUX7ɯ֮ǎD>(-:Bu.J9sآ71κ/djtVď;(5 `GL'(hU[hť۰UNuPû&:(O{v~IXˤmţHcڄS<~g=wA00OM~J':)ck/\+yecآVX"d cɒ'bL?,>-D6^ :"%$#QbfC:nRM闆 .s*2IY9\} NA<%_ߙc_PKϔX+]gE'rۂ7y{Ar=P}B ͤ!BL{֣UiwB!&$ѫ~,qu?eFu1eg? u+!԰(1b\L7W6S RSO3SE\I}]wN" x TQRF/KofQ]b5t7IX{6sFTt+-65ć@y%Z+}kr gH6khzS8F_bL]ф ZB (l V;zf˭6UL@B9~|JYitml.*Dy?_eR;f-(ɇR x_l(FD"m <4͹a*@jWtw:~\]:rHH'֨nU| 䇾`g%ݒ;l'RnU$M Zu=t9äYL TPB!kw#a%'_LkwG =}U輍4X"WA+u -$'|2IQT=77gB9 wAQۈ--GoF:fv{sYb5K'FXci^B3(b"͋PE-ycee%'L Z!О9ː֑8~PrdL*}XB EZ#+H[\5J0@~4WiGB.V Qnlye4xȝZ'_ aFّ}!BFoA1&x%QHg%wekGh%!E˒g8ys vb_uZ.wDٸY0w18=+'\4c)(J?lL;z{ݗy({"ǿ~K$WST_> X ת\]E1JقY8*"ji ag'Or->~q{hs 􋔬V__0}r2x{"pbZl5:0۟W%2gM o#t *BKzINciX9aނ{?c 9ﱩ0ݩUiG M9/==[VK DVj[LĊC_pL#V?2 8YkCrgTDMrx0S/3 bNqisw`E>Dak9D Cusګ֢r13E[`Z=* x"ّF(vob (7@bU;Yj0|EALg8w8܁o[K+]t/ۓ'g!:8Gz$o;[9,Y,PzIs] "T8/dLqA  >aʊO9v]>G##fΟ(=d#fƯxƱ]NpuuZޅd4=ixjhcn0}=j);$lNwzGx{ @+*‡$CΓ6*MW] ac{ DyAL!p &X7c4ɓfG򡴘hg6,IOWmڬcVIQ.>+^l gVdY{87yZrtY6^ԯP/ߑu. Ѝ50#I02۬k =b+c,?ĺ%d}[LLQP3@Y1 t ,F9LLDeJ~QS faG} Үy̧0ATPf-"P8LOpxfV=X4~Vzf–죪S˗kZ *YXX mtTiY eKqTg[R-HL6tA@&s'Z|R* \+*\`Eyߒn@VrKfrF)>JDv [^6*-*cɆ XsR?7]|bbۻWOC&f/*+?e]aVB|9_j IV!rx+]dDy>@\jo4T%R.Dr-0` '6OaF/8))u Ɔe'f/ll}dzwQ7(YpqY{A,>QDz`ǁ0AK9`J@@cu;$ԃ G0@wK<~oBaL,{|I_:c̕n}o6% 6w|HTstKp*BVϔZ۔jS\Մy1ZcٕP6bv0nV߇#V_ Coc@z#f)=k )6$b3^^@uWXr|٧C+P)u3Jf=@xS4(`}KAWXEEn4t[jAOYyja%H#Htb?FҞX覻yh5a?.y?f#Ny29jhXrv"r%|Ѷ}u41onux.6z2I8Q'kC}zNdI}q#J`'\hktSNoEʷ{aҋLX=mo8pV(L]bYfÕ(J1Ξ&tr[60isQ lHӰs a[H-VGzuzv0W[cLVHMWuU]>HZ|GMr>!cXc.,8xWlR+6iƺUzޙ:_O}:5,rs3uP@Iy]}C1J) gA;0&^ *^99=Yߪr4 K0 g]_n) N2_l䣎WjxZ>vQ5ߵ側8`pvMm?2)L_\9n!zo+eewcש\ylcJ0K` T9hK[p2}5= Π11ċQbD!ĿX'ּb(.-j3cJ*  B[Ys`z,o :ʯ?$ҥneДΗY̏ ѽ(RCkE Sy͠J+[gPpm_2ahpݭ!=fI/ ;#ҰΜAʧ%!dH[c'R&\6)qCm3Q(=[{`X1\&kx{*;7r7lS2`Λ޵*yWFQWpKJ'1SdǮd,vCl+Qs+7rl^-?A*"m>Uʗki닭!C~1QO)bRXp09+j M}.@s2UͥVY},z>g8 Ta.0zH./aKP" U(6QȬ=)6i.isf9BY&zB.rx\ac%d%^Xnӿy+I= ޖ'tmqj$M' CDztWElA@f#'h)拵jJH*KGfDU,~|\ ףfdpM$;7D8K҄QY=.Ĺ\j8`jSXsSV)^ !B;4W"eГXxA3L}*J1&p:͞\^TFVOjQ0=͔% (}Pf5жW{U@cL}@;1MDMm?Q#1.iDhz}o ,`O~sG= 6 A&|Zn6cരJx8IOp"ȹtn`~ɴIv<)@QS$%P ;P֯ ,Bu+^vZs}aQ^>0#W5ݬ<=>WwmtɅņ M91R)`FVnLŝ2 0yؼPv1ITlLcub(:~U݂I -/&aJKȺ'ƣ5Li*hOq?ߚ)=DnJ) m 92ƻW^cj?)mq֗; >mAI ޣnWSb ;Pݳik=T Mjr@7G.)!hT8{ ͖T?:x9>ݺhB{I8Fâ!}i'5?N` \U EF)_EC?t T2AR#nwUPtlIE5 g)}Js{-?dگ4zZLuT+ gSəGBySv8:Ƚ7$M(1UeqXPjk˭spvIjEM|C .L!Y{=ynZJ-7F[7nJ<8w}x4`qM |RJHHjA7d&Q>! ҟ( KՇHF??}^Z(8@2ݶ][ĶD|NKL(O `Fm67S3͸܃TK>Ž wP]*,4VdޚED]V&aou=\afk)$N\f .R'_8@Lg_E/+/27?4m*VgdȍW̚(ںřMB2.6ݻs?mgRV7А>E*CxP)i)(R܌8 ^QpIW~5md` eu1æ@'(à( C_q| MqZ5wPHvtjmW VQKd] J~ٵw:/o+<[&(G̢Z&SC=TIY_@|IDoa<<4J0p .7#j* 57oξ,lm9%@*-U@V೙{FD1~ F 1Ӎ&9k6r]\>EԖK"fMl5T\VozQXAN>g\Y^#lb) Rx*)v uOl4:N9!3& 8%2+lkL--?]@p~g;h xۀqq Cd,/C& tmV:?UW;rDmvWvhbeN Ǔ=!hvþBTgLL;7R߹g ǾQϛ%40_Q"=PGH1cYWQm 9D}&3e?_}aF6DqcÛ *Do<r=*<|!z_,e^(lNKT/lb}(wd< |ӱcMݽ,'+Ⴆr6?O-\ɍ5vhR?>NCnc"\FYxoF:gfe$a(mD}p dP1S FB 6{0GoXBx|߸X2]Pmϧd M}2FqO=#Kjʸ )([`F/3lx"tDpP>\Q&Y[g=&IBR0@ljeKG^LyzM)xkOԹנu,jщϏ/t/0{$_9[X0Bpqkqf1\GYύ€d֙@gMXba&)ٵ5㌽`"mt⃶>3fTuGqM].isK UYqF#32xeK㠞4ܧrû:6qL96+Kr',@l4Wm)ANCӍYA}9Ý&}wVF;֭_.v@ssZfZ cU?iR +*\e;dq>EXnt]1ګm[dZ N*|[gʴ U'^"u))weY+P9xkS̘*{!z ]=ԑkSNƆ_}`jǧ#]t7$#;PV \ xp)x-B>se.v o(;Ae%AMn5n(i*?o`TL8!2Dhř\IAqϹ*-D =^XQfj}׵@JfF% j_4c.ۀI>wnDlZ!6[AdW# 7Ԉ8; a8|Xu6 Hڹ^FnPm?Xܙ|~&z-NqBǛH'q0^F]tbMTPH>W[aJ/@XO@EcܜZ^RZʲ#> -[죷f.,ko䐸vD2+dޅ Vb*.tJNĝ^ ^5z`3Ju%#?m깤f KzWCͳ?ws0Hwhг @AAzqbqJz3b~RF>:AXˆ7, ^26l}#+ Dia9nA+1?#UYo4 8w ӌٮF.KʍT4%>ܫ ~Q=ۓo6hTo~M[fp#dޮ UiA7W|a'DC7Tڦh\PX^[K+yB>,$D %]誒vr4)!aI "l,H4]A 4dh' dNCK]%E}RVfKw,xuH}5H 5[ UD:=ׁjّE%iGt.+#-w9u}V ddTC+Tal} ԟ-tzu,4u›sv0Ey:pfkQJ! tT[x$Q|^.+XrHMOf9#gle'WF,t{WA!3V+s4@a_|y/٘h };KPە9BD8b*jBNDL eMcL 'ylkžo#rw *eILh4#0*_hsf7>HGwwѻE:*Uثm(&F7U PK΋nt%w]bK 9`>RgKüZ2 j躓 by(;*r_ht.P!d5gqwH'RE tCMm%bl%m؝&d&vz MM{g Gd@5XȊn& F~RX0`t:7K6(m"ڬkmChV=g̏|[EAbf"z4gDQSmip7lFN)i aH(y 䩭ipYbd&RTӥ|*B7o\ֻ-\0dY{1Vo U 3b2} g`?(E"tlmq~^!%M DzNI[ H{S,b?7/ywxNI?qfV j2rYRs3k~]:XJՂȮ Nc-$]Xկ9mWA&hE &9ޠLIU&:q(۔Ձ G%VS ׺aA]VIu;NؑAA9o,g7i u9xommH͠X|C}umRЯGNoV3y_NEioUS9jkus}Z R,dm՜rE9s9k nuK.ꋁDž2+q91"uXMD A1& ETxB$5ve&=M^^!#̕$d"|Ӿ0HY#@Zڹ'=e8ڼ7zJp3eglǓ@e>ߠ /6A.!g7"HJRVZ .JQ4H>;VŞ? Ly;pyl636SG)U7H M3TߥҍIⓇH$:‚Lm}>!z0@2| [f绮TIFGuc9+B,]J!b hwCjY`v@ `BpdB׮] &h h* =ϘPӯ-6鯽|9ft\9Tr ĕX6Qx2X"yu{m 3$;' / /`kbgUb[r&ibLMjt'XB!"~Lr{F9ox/LBT.=$V@kE qſ4L΂ 2߾GuJV¸I`YZ#;`[ f ˌc>\)GccSUcTFBavt{W,GsCUVc$RU>zPD 2FnkPt"  }OJ@9F( ]fNAG,(ctYWSLYa~w~Ι$0U<ۥ(KD7 7k: q 3>,I''t:p 4"pG T! atV8*-4c2B?y0YTX2òCDoP@.bGx `a9**!-qC`g1nFsx ~#%rP n ![C?axG>%q{dA4nSqsm4%u|5]"00MUӂ;M-/f}QJ*V0x+vJbiv[MÝhzdD5?h1NE 5/1Ar0זCX*LY “!Of] ZIڭQ#%|S^BM kc0α+OǝX<>Prٷg#l_g%=j*ۏ2WnIrv,ȜO/C*GηQ|kH"ԞZs]etmc7 v"NTU?2|l \kD4$Iw8kG$ɛKn-8pʈ H}U-zEW5\eTG&;gbʭMK' {G}oHa?=]j+$WI~WGV}joD43h1BوH7'h8,tS!騬ig' |TeM.Qp9]D=Ir@&KKlr\;:ZM0- +H^[C2K-}HR+D683{S|n &|Ќn?UB^`OLxgxD Yhkqy_ŮKxCjV{@oX`Fm-m )GY}f~O%ec5VB8$) &S~n`IXYtVqܢIQK[oc𻶶VWسNvf0IXf:ܗ"m!YK;D+&4VR|B%Mزx̆P~ D[W^T=qLrU(<-if`ʼt[;Q_[mvX_(m Ĉ f@Nf34f\WJ aGBӫ0`2QCõ4Ο0CMl52$ t`1 f=.wsdhbEkz|6lnK|0"uw;lD3:`btuI&dc;jE^׹e<1ՀXsXUSAWO {Op11ka}, mz#B%ΒYKDr7;FZa߬(H,Wz|//B-&o{!DkŨkß^7k}@F`>nP4~ ;ЎCAU'&DQȱLNxIpcRtʥH)mрw@ !n_WJg*2d5S)@ĥ4~V!V޻5Obnc ?Ѩ*hFk٥t SƋo8=LAY)*kAҪ5J Н=ε=S%/cr߄h~0GZ:RFS?twQ-Qr/sqf#K2l}SWa3]BS>}]Lڄė+_fîTwHQGƾpp=n4`3tٹ3Շ0| [Gx?2s]"Ht^pC{)h~Fw/~,"d #,~c e8dowTBhaݹ9@fZYPN7e;Զ7c%z)w `Z.<hvF13vu (Mg F+pw3Uc*@ON}ʲeuF;gZcٔ5k9*dX=hX5,߹UcHʌkYm/a}]^F|Ënk]9½Oa p@y8*׫5蹮:/L؆3>y8Fu8@W =8hA $:;GVVio%I/w`7-5y&jct]^hky0>^EZ8%_6;rzO|ْ&AOP0_fY!ae~6`JU,% _@tV3Uy+.^yW$j ==eokzeBMN\ݢw+ =-Vrmkm, = t,I yZԮxh( hqG9-mJl+QU#g[:&F}+X\qr3!\QM۳3cp2")gs&Sݤ%{4}B~p\7mwJ9o3"x xT'Ukz}3Ƭ{B)C M?? ʧH!\F &)Aе)K-dc^"gqGnFGMl,Ḧu b߇%pR*g!e&־[B 1O"a{!_qvU _4)zPs@blAE&F>ؒL)/&[Z_,bhNess3”Խ\xge$;%z/f_]EN""(R7xĪ]Q)N.2SXx7b xd0FTy&FU҈3:9h޹"m$*}85Qϣw> Jh36Jzh tf]>c'䂌a U W4(,轥ݽ#( nXvj.uۜu{rp+5ugUޏ4ye2RVJ몂:Iu9)/: &f Kfu~]?CCy5$- 惱\rUx&Czvt`.H↋P{R}|}mj6MmՍ^M5Se}ϲdzTp7]+VF((iTN4fЃ\ O#>+zҏYhf p!g 쵻l\~^OͲg/?];B!V9Y?bx6)uEur6^L>tN96MO%&j4'Hq۹$r]WSdF05 5v׸OSAƺIA)^ !:QAY VE`Hl3c35^6(w0csXndt%ok`yl@oB Jd%l[ږ T"Pnꍀ[rHˤ@%W\$`{烣tA++M(J9_Uwdؼc~q@Qڎt!B V!cv Ane(T [VE;Bĝk.Tޒnу8Ljx ˽Y?#c lI5ʡ} J= r2䶮;k"a E=1NW&rC 6+[-5|ap;ĆwK 0,!ZHo2!vh"u!gH ӌf{tjtC;~=(nBKLA-n P m5RM6|3jYRo?jT9Ikh\xR+s C U,ti0bLNskj\n3 mm-anL)ՂsII3|  $w7&>*So&^:^e ì8a.0XtB&]Y0@(JnŜWѠ/B{O 1wIzdQ0ܡ2 D 9]2N!2@CZ%cqПF_7@͌@HQx6 t -joC|$ςN-RLHyוn(i\ _{`r0[g7g7KS[kBthՈگelKVvv~eA*o7*['HRo duk%L 2jLEĪ[Vrtxu38K䆮X`E#!Ay*H0jQ%L13;4>3Wu$ V:(ZgUW@:*n-e 5 tia 45vRB/E>34Cik^|F }/2; mPzEe*j?Jy(kԭz:8Yl|@"怐>;yI"| B~!40P-[g'$QzJ}}?1ikM)k1`?&6XgH%, MKh@zDm$bk͟K47<UMo2Q fz'c':_Esucq)%&dUs%m|P ס;F 3I8:δ9iL%D\+ʘB7! ~%6KG hֽ!ư$ N~ܰ/KoWO!}5llG2XIQ5uY6驉DОC[*w-<o H5.ߨϸ>*oٮ8@? m"@kk.TLMLNFl60+.!݈;!Ů/bbW9daǎt$V+R2KחB{:0-M- i`/Ъb>H+)F/27%ȲkO~=>zuN:A]?턡76x)cIhu_PK D(i{c=צS ~2DD<66LqBڭ΁)P(/mN !뙏|U^۶Jod͔ΊkdIl}y :Ǚ!8M1YbO3H9Vq'YQ͑W1cҖG 6SR枧 Zkc(B1QGh8*4emk!8G[kKi.xRB u 4!V[ϫm:3unLʛYv!VE@L 2 z࿷]X6_>P5ѷԹ<ݔGhgzV2ZL>pձ`OKb7@ ùU"{z*AW~Y<. QdTa7Y(=sEH%Q9nzwHby e@q4\Ꭻ*[ &QSoT5fɞq qtih鞑~.X 7T%ڄW/sGIoAެUGL㍊sʯ}ƀ^WCkJU>j˦h,azuIPfkS֘%W3<%m<\tL*"htfv#;₇%1ދ˴940 (I+gC4 ٨YC;}_+_qisM.Y)@/72Ev+,;u!@(}8B`=f<V\CƸbs lY!O :|S|Q=ZIH;a&5& O}dMT,{"f(KuH`plir<3N+6,[.;Ov@1` Zma#~/Y@`I\c!o\2iZ׸|IBf<P?ctǒ*s7PԠ 3F[[+1F,C}v||4h;-9~ k{rS[3'6/sfJ:7"9i@Q #y MeDDb\9AR *N}b@0VV@2Ƿ #5Npj ie͉gKK̓"ө{r Ѧ"*τ?%GЖ *MN@[wFKe CqaH'_@\3xIr#Ń.x U{Y`-M VKP,%@\wv㌷JO#A1|l,YF%; 2ӥ` ('M]9wP+ E 7լuW1E,KZj5)83t軱G~X4)g4'AIjj[dPFDz1 5cjFʮV&REnփowݫ6DIe1 1o(8@Ӈ$0rz^RwN bC x ͟fXٜ-c(CFLVo4<9m׼"Sq8>J]-Y܋[eb=3pA!Woy|T ,P62RCέ ̮ 2bvtx`20(_'Zuh'!A+c.dOJ|헬LG&yW'8n;8Xbɱ,kP A{nKwocU= p4wv):N-5huOvR9台ͮ0(2h-* fGYeF;w臔$ͪ.#;OE^*`㜚:M7P-hJWT9zuɓ>b^yR=u?ʘp.!a£Fp<ciΏ&(z:|F ?:YXi;u+GK7URhCބQuϰ*{hyJU[GZڃ̱l!% f愻MRwsѫl5 ;UW /.4@8Q<Sjz{fMuBUC[e?-.N!]ը{5Ӿ0IL>U[ڃe+HQd-tz00-*b%>BNbN0iZڲv<gGt3ɮsMcG0u[]_"`o^3)4=12u.N5]<3`4{f|.2 b#."F>,~R|d!V|{;eMZ/]iWqF Tjƙ6$4.| 0]0tP[g'kɹZӑA;mVR{,W:n=( ls+ HBpcf[DV&EQ#rUg8hy}֖Ͱ2w7@vWDdE1KU@҃tfl74i)%[֡إ _-xdSn\[km9sEצD%/ 3W2GVi S(cن6Ñu?;zgAIB $SJhNLd5JoV[)ӺB|$ʬWS>|=;RF~#)0K=)1l],% q~))=¿J'K:iS #ܛ39޳?Cv@qfJYʎvU555 i,n{W5p!Bt(k:;f/+%[B$sV~jVnVX{I:%ϝ位#vQ0C?%.6u«;zm.iFy[c$Y@{fTレ MQ ɼ3Gj6*Qv{Jg |2fOs ;Yi܄y(PSB[xq|mugz1 8 Bz9y)N?#ս]njaMo@REi1M`Bj+DjF_2ҩ~0Q}*BkJR$ 7"OmѓF_'\eEc6 ÞAdn؄Påy\9d-guuƳrg3O\\ ؾYUY7{Wg Mw#Lͅ!v}nx!Z3r*I}myvJ]ܨ>ޏRuPwO*mqA~/{R l  x@g \)[E,QvDs 7G9wX&O04d'ׂ..iiK&x<->E7RӋ qz<|=ej zB.F07r xN˓:Q7:] }{_.* Ws9&-έY `F]RtS>Tb6bՄ$_P'oF} hPN]XVg_X|eXXf[ ZFM\ e~>g-ɇw: ImDNix nH ~J[6VɱiBX҄Bۏ(YqDN+"΢or[wt[&'),1P%PO&7wq.—|ֺXWn0evky]+S@j7N_^G$vg򹦏kwDeNM#X3ꓡW<bf!5͊_LY *Ky#ɻ/鉧XXi^ caeJ),|3ّ `Γ?"{e[IK(fY؝s&d't؄5-_`.#v#LΌ|$EL^=mCV6;KJԔ!%aozg/ԣ6p"2[(Y_)[V#AĨeٰ@/KZ@܎rd_xLr!kcvi A,ͧF|j;?_rSfF/)oi9$C\ʖErMi_Ӛ>,맖S])'k--&W0pƦPWkY Pq'fZ8(.` Qމ{pW5}KXJ / D172ch1Z? ߔr#V,R8/2B4&jE0!;X"]y,NG] ,pD{9Z\^-^ef5pȑ<{ PL8Cp82l2-)/;atKk9=oAcM{ܮ Z.ufrJ 7wY垉$I-޷T @<_ooavw\/+wBfK*0*zLY I.H\4NolD HsXL_ulq2 ٵդC8 [ZGZA-g%0Fy8#f"'Z0>&8'Wc>EyV>$WMaiHcI2WJmzr3oh#e#,Xeu?zE7y~ܶB}YA^ ;"1u _F3A@ 3|)O 0KDp[v(S݀&d?5o< X+]9`!l U7O\pT%eb &īOHKu,犷bFU ▉I̗@ 有NM݊⸸0nԾt2VwzB6OawuXxLmvސ617 n 8a]6(mkPg@SX=mGKkYgr$6Xffj_ *DtV~a?6%"_i(92*Agm{sF׮>= AOUHBs\Hա:#[ht+;eК>C W|m`9IԯcVRJ) DrN؈r_}a8c"Qhy6Hb4E= kM;'c؞iEQ}^N/G _]@+ӕLR*/R)êT9>&쵏x,henokFo'P:1:r&15?+Q4w=3ebwd^BGbpBCqο" f)@`k=+ٰ\jqI]MZ'+,n$it7Ù]:ZЍ l=>OTFG`C_sܟUһ5k9|-vY17C@&塍Uԥ1U2 N 2>^o VU5#'IDY:-P9@|1đd]pvY񓄎$^{2lԮZ#h}LG_@< :a%4`jopϮ[o2"⢅[>6K{4ʈ@gdGS3?`k-(;|-2b鲄bMyvuT #gƢ?LkFߓfP|>$@11B5>&=%4G2ppcj"[-X6$]#ojO1- %ow|#vi͐Ø/nq;dOw ǥ_˅V--m{rNj;֗dILۏ55|vP; ZTp׺$8uC/&!Q:Cv[ESMj`Ӄ8dIbr7W.2* ^w5-Dk!AJ/' ٖ)#H "!믌Þ 2BrΓHq<\ ;%a7Vŗ2S`;j1_8OmްTnq *% ui0`L]%qkV/4ʛFxvs8uW #̈́zA~ M4I"죦'  nFb[/.-Zyv&Z  Mѓ dZ>3n(Mo>7٨̚k-ouމ:laS[E y-\s`,~?|/g4m;8.!e<(N\Z$*W,)ݛ#wMT2ۘcH~ NH2i֎X4{n!E^bo-gJR^&KXK6ѴJ(iӤ'B ;=XcycWlaNgteV n~{u"d}*cd*j^G>p wa4P I8M y WVjײBSyq8D#:3 >`|\rݷ~Rt}!S-Jڲ~P yTXxP A+vJS^\=hx)f=res@QfuS }^ IL±mhmȪ%@LA?C BG\ Œ7,{%t|4gQr%YG,Q!Vk4H 9q«%ߥGJuj}PLAԒպ)^찼=,3 H.9%m7EYܐ [|yRs#)W֛9Pg(r.10YIYꠂ5>$L+\0wqHUhN1IZ7)\vۺ' tk:`C0C"bӔZ bsҗh漜 ky4xAk,N+,>vIJ,:;ّ{]ձjtLͷFt*YRuwזK[t_ŊW,*GծML '\9iCKPP6(F,\ݘMhG~Mg_ű{G~ixA z:`lSg"y1ґ9 IgqC.GBCi=~uỌ:t0'1FeQx D j59Bo~NBǯqN:d_=FMr# *rZn'&|U3DȒ-=}68եv:yfp߶zjGqiPx*5n%A(dzس3ͧ-P1SB%썸bkja&xOuI.AM^2/(s,5~*o\kj.:X ( 6;4""͖޿T}-;=}%K_`oW֙Uh2"ߑ1P'cG_LeVK^@*y3(oY'|/% [pXtqDZHϱ:JQt8$-b_ ҁb uN!f-ChQ 9A 5- n`Jga`` )BeΞYǥn5PbYuB/q񀚄Y%xY9lo .jđp>.ዠdmWvMX+=U0Mj&TTEC (1i!?;kL!GDxɕ{,b)xilW'45h }ǧBH )#!mTK ß ;Qjcgǖ{sgݨPlnHv.BJ0vk|w KTm'D2 F0yJ:퐝%ͱ)- (9m&2hljL$GƝYv: 6YiۮHCMe4 g4৫&McC7ST2A5e0(9^9bTg}J|.Ug) [#֋E}UxH M;k='@38XR,fSp=c,aJr>s]ןk2j7婚l& !sB~Y᥮ YGq8;k'dlCؑs'jcS@)U(20E_Kf&u Y}Lw |c>M lk |kӋT; ߰K?[GNH'WysCj8X(U"V?7g(Zֳi(C>D{oDP)&0G9F4"P(1G*Kzj=wµ /-Dþ2 JxDj a> `7)ti"w/ߣ IoفQ7,$tqt)|Kk_ٗX#Qz]Ju|p狄x 0y\A269-4&oByB%yŮNC1ޚq=ڠy@L6W :eAct};aL*67^ېY>\_5[VHʫ{)ޥ/95v|/Gvb#^]25cDJaB4tDO٭.Fşȹ[|,yG2woN+J Tsy&A&܁΁y7M cFU :jZ6x n`VӁoQ ,_,9w ϐr`4Zt[)TJYg={dF!9\>BH+g|ܕ8>US8A'37u^&XDOlNUkl׊tE-'TriGWZ2- Od@Ȏ0 tBZJij1Ǻ#=60\`uxLUD(^C/ʔ3(UR2^<1 8c=Kk ԫH1N){o!Z8{L^zf28Ct(VP;Tj")"<DX.4XR{%$%!TWw(7 1$MCD|OaJVe7ײ՜ZPb\}㽵d?Ksva7"H]);@Qfxq-wS?.ce]8=R`ޖv)eIR9MP|[% 4S_g+7װ<4II}hs i(/+ĕC> gՉD3T{H%+J(W=ŵjWtFJs2=AM>%CӼǐ!oǨEvY**.x] .ǰWHl> tOQ wGUbûG.X< W [ syl %\j8XYT'PjU:=fkK!CBEx|UItݑI$,$mڰD3C3Q/yG~pw.u^TʤCA 'hd0aEɅly6ѭq樗gHGSq.B+{rg I"Zam\62!mC4-0j&g}.qzn跅 [W-rbl7mفzkI]7;Or-,:- &6@kwC.@c_#r4qbjXcI?T1*dǓ?7BŤdu޻&5RL-ޔ.Aho@Lʢ}e}EG'õ\w\cBraX#K'vV; c> ./+HD}|$ -YDlw_荜@J4pA9evySLrtS`<GAStǥДض#8G|9Nzr&9YEOC/ޟ7qw#B7Ҋf413a0ٹONj?hOvځ [@Exɥ1 ʎ7g؄eUB@M5B&"?i#L?!|A/#06WF۸j/$vCY&*R U1+立eP8j2g!'؎:MSM RSXo"XZ| qLn QJfu+J3ˑ=CԔR_ DMA9-6ؿJnDɺMF?7`P~zYI7h,BӋA1+e/e" kZ%&㭊˼~rAlP3oXר \5{.[BIVKbb:("ęEa}Q5 g&ӎweޘl'3V™c"oS":!| ڠަ HTڨN&KI'/?p(wX97UVs9f.1aB L4&g<X2;.4E[p&7Ӻ|Wͯe^п6ߨ X(x^\}`#>\`%<rW<^n*ҽv`kYC7A9[D Ayh-V{36m^j*R@0%\g\)P3毄/-rtjU2"O(;9cH}пc6gc71.4z$r#V>|@CGwkry8Yj5Ŷ70~H\4CK~{cDn rWS#E[[Y;]1ˮ7,Adh`Ϋm:j6`Mn4#.O}t2Pc :Q750P6iWzE)VßCw^P MKc?Ut\i6V#Œ 8bK|mp:H[aUL 8S.5:㥃X̄:˻œpf͂Xo `"3YשvAdNUyIo),'8Lҙt1ZvM%E DQ(yDŽ׈ÇൖU;B0f|u#k!L-9y 'Ǒ=6Ry=O4蛠;ZF 8y%Y [m2U} Ň, qRR~"x^ ҒI9b:v?'XWP].ʤcD?AgJ"bp80ʜGNV5X2&"TJ."e!bI"Ҡ)9ZuT9.(WCH7Ƈ_k˽l"c~F+_ snuYɨ42W0ݪ.FPw,&bT{\BxKj  m!e/%-m &.9!C1R9=1?Y !"\V 1ot}|>>f5T8]+Zʱ>͵x7X=VG{Ǿ05qLDšB5et1̱W V,QCl @FvjٯZuQ mu~;I!sCP_hq4|R#[f?j2;iNFz}p.7*8kIiluPx"l][cdl`IBKyiItJ' KFy~zߔꕺ1 |Nhg6Ea<>˘m>\ѹ%]15PIL@1`\A.)$R49ƒq_IeJ}54&w3n>v#3ymvehnh/1QE3IWϋN )>5X6<~>Q>0F.Is/={. ;Hꞣr%-`#v=HEPc/lDE8)j;zީ|Q$~cUw`` ,:^p-mjc{|C KйZIǮ׺-0؈[,25'BgGzUIۋ{[/=5OvS&{n~YYK'>SuqGl9"|NF}Z◤˺K1j>#/Yk;ޯh S靻X)ϟU7j6׋~R=XJe7 9>ZJCny8xj"F/ylYjlD, ̣BIT;\x:iHi)sPjN}!ۿ7ޘѪ6wnI>Rl?> 32_,UVyK^9-š`9vp ɓЧ߼?GO_ 8WKa*{mDIX 9<PSG9!W^33$UBuTUFCtA_2*$F+?>AjpK±u<;6*_QW뻽96co>tHSeRcO/)U5ʔ]83\w>6E֤Y,\!̫pq17[j*U8!rmT@2C̬@N]E ]β!QbIa3f=>IDz)cu9p ުמ*.۸+v5فS6n?| oY$/VA[Yn6’Cls7 PBCEW칿iH޲ W/kRWk\ta\aIInsjP@!E W"#<*[i@٠]{|V+ mS1²?P #ښ35VY?v=z}H# $OԱ;phCgs˯"#^@|3ؾC$]HSƣ2*r̳I/D`6w`c j!ouOz\!1yjkRZTȢQnL|?b gWeE#72Ɓ/-E4Um*>TX|C`H@VSpVLW-$T§A['d//8ݩz#ށ #O%#Y o6=b)$'\ MޭN~7HŒLC_N?$ذ\UzObL]ɪ:bC֍ڎ=Z1R@. 4 pNncghdWÿ-N$:Հ W@nB>2 d['|xT49)Z|(W n&#O r4NCM^×U&3}\yGU|TFdsqxFfR}]bg :~+}v Tm<ÿBո8ec!V>Rv_\Zkn2 ۇ"23FW |Z5U vPZlJ't%okfn/;^(-uIeʛܑ_JzYjboYd>,­ 7rkQVWSE@zH" kdٻV/¹5 ݉/<6lB^p-o$x~ڰuR iR~.=&e(3&  K!wٮuY_ `ly| +ν{,m.JpK{`Ҏ@=VNr4X"|$6 zJ!՘IKК.N~[$`~Kʚt,uec q.}ez5aaF|I1B:u "Vi )*՜؍t,^G~2>ގbO:jaRM9r ʆlSrdO#h@r+Ev'X'YEI4<)tvoޛnv;@lfD=;Gox2[k3/]x LJ5}+3qFԝdXsBʑ‘[&٦q}~xФT}RW'O)*e|I'mUz B^DP>T*.Q#|^FB1K [Ԭ:Qw7Z#5.Q9z ԃ WIn! XA4'Ϟ>˓hԖQ;1[mWhIv!`yBXd%',FPKOaʃX@l`ISd%>1AY#ݝ2ݕ~䯭_Q=fG/mcnɳ:J]#$,3ς.u+ OX:QqxXqRe36l,,2?͊ou$Sa; αzppY8S]fZzT= ZZU~lPv2)UvTuAЙ )i"&HeI҃'. !#klU3 OZ{7cOS\yT3U/~>@Ɔ;d7G$ȐT ad@d)(Yo+˺],h4Ϥ_Ba%kBR4ҁd{8,ࡌ%LV IE)7xMmGMo?VTq[ qf0N\{ELzZp)?[>J$DVEy^=(@F&hQwz+!x~+ CXj]ㇻVMrvlSls_ <՘Z^g4y |`#`]uPe}]e` sԍSIq]/fuoo{wL=릥gL -o~uOԆ'ٷ;^<aC&Ndpv쑍4N_;1E6RrOr/j*0)'UAmp-uC6g&F ^}VSvD8+kVOfRMt{`cߦi!ߘvsjU՝Qs,}-pgJk#`jٲM-pIPs$&Z+ԼDE$ {'d-Y s]! AV]g[, ߹^ه[ !|p5 b)&'BQq1 t«8 YjĹKږm ڜfzbO|"Ti^ H\|o(zo 6O:'Kw%|~?ӷJ[ՉF4/wlx Y=FA7PAx _Ȁ1` Y̞OB۵cim㚬BG¹ b,UTXSHq1MǙL-G5*f^ ttӅXn5N*>( ^C*"1^R?Z1R(<1e4wEW15nሠ/Ǒ_~qHŧۙ ed6O7ذڢ vn0PmZb{ڬ2K|e^g BlyIaǎ3*f<UTla.9D&ɓS`iٗ/¤+ϻ =Mt l_bpcUʬ~IKQ+L^̝•b|l`Uטj3D_]Ƈl-DCaVY\+mZsQPۆb0]7cRD0+k&Mq`pbƻ}z99 0翱LeW s4Ӛ5vu<ґU9.PC2|\Jj& o߹-' Aky /aE]|-PE!4n6XވS?U Ahzb[ө.ưU[W~]WUguZon*hzC,b~ߛozl?YlB1O xqrAe3y3Qh1/}$!|a6Cr ?hԺ޾{x4lDtczV4n 'Ok3_DU%M;G'=r%9 '$T!G,^fA場<L+*X%Vq5VgӺOЬª :w 9/>''RM?>ǎp`<)MLNPԵ)4~q\|toy!zy7L&+k4DR!9d"B*s7w0IZZ=%=O+,AxlSdV97dG.EMB֪k͢5W ^*SNA澳?;=/U?DεE _=|_iJd2ڢrڻk[ϐ{΍_)U03Ļ$zO&?fV<5ADF1G_F j0<^h@܁zT:# ms;6.?kaj.]i8vT˜B~K ppee/lvAŴ*׽9ERpo/9ЇvT3n/Li' '0$?RUKzUy-nP?AMGs-eWX:KaqϬJ[ح# Z);:!vqɝ(%.E:Y:,dʊCb C,\S5ӝו&e<ʑpq7ZBrw6k @U[!c3@jג21ty!: ";V~M`и~Ry!ݤlČ­Ufyu9CqO_y+uԗr"I`[w5Z`8"W{H)b|SQɰۻ;m|7ω5dO T9K!8b3+AMp+E/W*aqd++o򪸬}Rn~nm xVZ]5_0 o##w~H<|݊tNS`+w(RNHçE , #Vy|~E!4ekV)aQ& W{-^ N6|SIVmgM/*%dG s[OOt_Rnbyp `缮$`8qxyIDO%Akv0ځrpHK.|$X2P(R^~}Irxȇ֍׼ݤ9lFGBD5%H䭓[$"4|]|Ԅ[F[R|a!!9Ylc5җu/7{N nf,bduTP..G"ťFscNE)z8Ùl::"0&S9$l=4abޔ4vzdk'oh2^o*Hj`#lJ6*@1ׅ9N}!6 hD[[y\*ro*%Ʒ ^4\IYdbTRPH4&>DJB".%a(a)#Gدq; 09,xx;<\(*urG*!aٱs54'xj_F) N3-{SK&7C+ Z"~K߸I ߇y#r?PjP^]t< =z2MYƿ'U؝,04Cv ;&(V*M:j'oxB |Qaz6!158={A3 s"4smF#k7dɗ2x;l{՜f|gqmQXQw0VM<~VHsgy[Hs|Gذ OG{<Q>SBÈpR.|̊ΆBŸGN;+$A-5BUA7WEsM[6dS6x?Ɗ_a8Ndu"q OQG@5Yq]CU/č4km{.T0(i$tGͣeKߙX3ņ9 ap7PvML z/3E*$?heI.uQ f5Utc*Fm6`ʺ_M7!nV$Vb5qL+W/,,ʔO]6u5LƬMҊ۳`w5R6Ш>"N(Re!#4u3%9]SW.z>$;ZIN[/ qBªo+kk iH&z+^LEq_.rsϯܩnD{bXK2ٳ/ہCϵb'bG$ 8 !;f:2[&tP oCߒTqvP. O*oq&6@AmCtUmaQ4f`:T'^:ۃW &?g^~DTģ%q X^FlN M o-72_gHL V~QpnĠ٣* :_r"L-XM+ZWf,qzxfxTJ),BIo^s&A S;M:Bho@ 72 #|kLiddRkTԝԍļBSNNsaXK| msCW$*@WaJ=k囆TR)>Vd!(O1æOCź;85lLRp(W5SԳsk=ϙcrvh*~x/Q1Wmmp7I *34'=YNN`H ZjK~(Ѩٙ'9=QtuƆeb) 6b9 &N &ϼK!552E0Ar^|J2MUbL ' =Llw!EHIӥfշNޣHj oÎ陽mĖrQ]p|$y?AV.HKppO7Cjt71Ey -s<1.>*<035+9g?IP؈KW$Kx>S4[-v;<}@LrJ9pܽ uSsh Ieďh#Krg`<:/tz3?WBݧ$ ?z౞s%Wkog[X\_40R[r"]PMMl(?ۈ(j=kKBZ.Zc^8Ja{eNǫ3c:is?3DJYg-q|$XpK;;cNL ?Hܯck ?"̎)Wvآ1[!~*6qpNּv0 OuDXHT .WvDZgٟ-a]B.ϥ NjW2]G*jUzyJqn4nJ5=6nv~ާDw,'ă,m[H EQBڱ.eZ;VxbTQxRrhWƻ|\0\aܘ.M"zs;Y)x|=q2 ,=\a[T?z2W=H; {l0gy_ C]ՇQ0 ?p+r|:M,VlPI,@HA8 Y!I4vN~QXHkn*<"C2ڴHttכNH#rM%#[?rs)#)vils8rgyeu6O8~cƲ7 v<߃}?3dCȺӧ3Զǟİ\O뜓^%uŐ GRCq;7?ً[iPBrflY [K3LZq؆u$"z _d鏃K2+ONGpʋ5ue;C[237,*1::5+2hBШ$1&-7hvu =K,H$$gsI0>27qr 'q4QH;؈]5qF#Iͺ,*R}~8I௏J`NQ ȇ5I6f>%.odžY t[y `tλ~T~x/bN3FvGӨQ3 &Új K9>yQ|Ej`5{* +[dߓNч{am('ҵdA#Sdr2*-x\Z:x6q(f霷z(MM{? d/s`긋'ӿUw ;*߾$4cACDqhW_5O%\xmqF2V&MtMjz%R5#<yHUx;AchϡƗ$CDǪf_D{B82c hI\K=u{E[H`t Ż oL&ϯuQ7MI-!_fñ[K)2RDE{U/pyz.tL3_&p @=S13qdx?،+ŵO'b2DRu@5UNzs{tE8ɳb U̲X ħ];Cl Aڧ_P\ǑҐ/<nX$f <@PӠ xY-72̲c.6ng @Ea:+AU*\Vt܃ =@V~z+j-&9}ieȼkL. 0y=8,B[B F86toXNuv@x sc1Ö#EI% ƥ(=aVk6j)  nU tWC >ZNf Fm2}lBBLP] QC;ؼOIDFF ks<5߁Xذ`6D=^[8Q!#$?xv%CSQpdډ,M)N;9!kmy mGgw7_#ؑ͌kW('XeJSX6.̅Wuo7J#W<} rp@%gl rѨBbqw7z, ^rmV1Δo09DnME ^e{"J,  Xe{r˜T1 ~K `ͳTM[Ay И͔Mfb޲)53+>8ׇiA.;>$pΐ C|]@;mh z~e!ך `jMa4 y_`+Ly F%0\R*V>Z4DbtG_fB"YL>jJa%FC*Rܜ'^Ar vfCmˆ ( thE:CD $dRcy0롱]8HP՘o҇ ȕ.J?Im<e99ҵYqm+WkXi^ J&Gwzo_w:φ-E#35nDyܲ7)3p3aYl 꾞;bR7%(3V~&kO)&{>:|sF1aEP蒏d)/&X$Oe$V\{2ӔPoh\҂&τdTrt2cRMBa~?__8lJ۽g!U2sʁkMxq>0~E1憹5Rl8@qL2~'tS-x UƒTNgj(I[Rq]w`E·SV0bB+t/d WRz/B".QI [uec PCē3@K#ݴ3rȀˊ! %K24M2.*ϳAmQxk%US*'1ミe釙FIn1!)dUқD x)ZZD.VQYs@AleKy қF 炶4Z|k aE&_3Tc-t2~54Wk6j*^Cu R y`6]+ɐ"PQ^zKAh-Z=104vlp߿r<ƼDx3ؤ柽MY0$** \oPwn2@HWM1|(2nضE# fP%ƒOZ)q**J"U\#_M\~%U^iXݔAXѫsBdM20}]ϏIZWZ |E OPО Zͅ瘝誃B/Ͼw]JUp)?!\]7tw$]e)A` Pz$PL.Oz"ɞ_+0"SD =OMT$ =)h .hTrlGt\"K؅5n%i:$ U{gKF4hT04%$eHQO +"E ][5w6o`KwmUZHZR;0D/,OdV ݨ\wZ;FzRv%Z af mbv͢Qw8!4ҧ$&"FԤwBk5Տ b5奔A Viέ$*]_>8g>&{A4`ƨܤf_l)LK;ב^gsOb6 \zdRr[ QNȄD|FXƛԱ{=]zq79Oޡ b53-`l7J#/UqJ9'=`;wr ߽3v۰ 60.`Zi\ Ȝx^НF+> 藮3tlsYj'Hȱ\΄9]I֣`|b* f0/XH;et 'šoQ^Dմ-cdwS(V.N/|v1ջAHE}ōvq0y%J<2Tg{N-atKa{@sgƫKvT1+t|Gl1d=}fNj }7F S}; A/4l4o)Խ-FӅѶؘj{HRZSTcמU>'SaD5 f1kכ㟠Y}jr2fs~:ҟksUbKҕ#zX+P4&4@jkmce2&8ר ,^9bZ' yWMV/-O֪S|@k#Cs q}AxK5z":-V7r+(\'RZd u&jqu Me Af<9I-rJ[-LBHAUc ro٣h1<97֩uC0'`\i?!8T\Dvٳ3j $ٓð{+A^[vyxql~`b%6Y}Y\3`3(]4l?3(_VJy|J5GKUM4MvF2q}T k4foôtP*Yx 9rN~ݸ_T]rAoyާJ* Fhbw| 3m* $o؋4`х(v_BQD=# ;ǁi?Mڃv8!,7mT`܈xm]<keӧ& ?0(K;[3 !B ޸ XU+".(C7uĆ=/{W})$)\gLT-& & m0 ;Dsܷ%V1KK6:{* scA̓s?{ղ`};P{t*/!ϐŸU\siturzu"kPqjL3E䒜4z>CD X!VEzbN@j\ś]6F8ĺYolZTA 8!v? DDx{aPlwIJGj]gBE{?[Z6_Cϣ8=_147ݺ٠K;eE"!+._mΣiۢ>Gփ~i9W6Ŝ} Wz0*pqv,KVgYQ<~VBwSISJ*?&OHsg5~BRfQHp[mY]~ץU ,b;\b m,h5+m3kAd0/ڞŊOH'U}2ω{=EvC: |PJHZPǒp矕i S6/V웬҅#uAz8,'ZeO+1㫡 lp+7:(ZSLmOiuVptDT5(V /_Tq""oqe͢t3{qeI-+tV`1(j!5j$B9";&0TzU !w75֛lt`z}o4[Q \n#Y.*eۉ9(팈b gbY prp"ʁnt^07y&H{^b$jbdr}їM8rn"8ҷΐqᗇBXrlD{*w!awEޭ!{{sy[(kUy -<yb<,h:um|W8Vsa -zT7HagG5s@.a>gY:.yXrOdiݣhsC[T9ks{!;ۃe>:6?@u)a"=5o)vÍso@V![%"{uuZkZU _%"T~,3&W1%+r5@Df_/*LY<Sf?/f ~b{q״ʕrX"Ȳ0@ӎyl7dIm^pKy@K52  T U~vd:\~O\KVX1y۩!57}.Ѷ8Z!kt*D$۫*V9Z0%mq+Hm %Z'bKo%a!_Mhv 㘿u>yG%&Z>#׫FU?j$`c[ުXuI`)-h_G"KAb w:t:L\@{uː ]I:~t*Vj3 [Ssc} MGVBi(.nɛZ7}6a QJYT7 gł @6 r.'{+Q5 *E猂wIt{]ߟQX{g o.f7{QnjFxZ}jSG0.T21 y[x bmF<;HѮ 7I&=bGgLˡ2{^kΣC3u7ag >ro0P;TWEtGقdO \r%&V葅w̘&} FOx`j Ɏ۸6H :K{p|4O€M5ElKo Mb_FI/{QP1qےb#w]@/1u[__tJx:Kpt짰Х)TāI-YIoa)z.3HP] g?*~_:TpEWL8gKlgb$=4JU (yoF_c=@sQ{RJ?Vw,~m0ޖRQ: ȥMUF~zᖛ$RE/ K2( 0$+ fdT fxBbB4V>৶C(_J{sRc= jF;2@\YFrZ';k惍.&2\~#ns?hx7;/@D"7e1gD lP׎I45 GC6aAE(/PISl6,L`6yuW.* 5ns7MiJ"#]IKkq fBS?\6-/K7NoqX`*/!t9=Sڵ9z 9WIuRHBQpe ˙lZZo HQ$d5ؗ{5 (ܵn ^u?=y40@_v:4j "DM?/- F(?6;I&j=D{(JU6C5^`'Di Z7N3*untNi,/Cbk+<EGzirDb/( D ]<0j]l#ǮRv:di:)88ke!0`O9E<9$< lJ!~*}:^q%f埴{b~wEr-Ei,w|][PlqK4.QG:aheY88@6~(`,:\I;j59+!wۏ!&`:6uGy &&*,hW*_sM,7*"LζοF_H.1l~!\;4(iw註oyQbRm<ˆ~Jn0+$P!6 7p9@=ez=Yz7Ĵ?ѐ2UH>|,u$19S 5J!r!a7=^$b9 V HIvQ{lo:Z1-3ڣ#fy\Fd69Dxmآ.23 9$0ʣ,x˂$h'ľ_(ssV#}'Ԙjm ƧJD r?݋uhYkgX í<{[#YtɒRƸ7<hku16IBldg$߼24zFGO%ƄK)JIɕvq}D/ DL;_FR1NLJOwqT 4jzMz ]6F$_]j3u fc;V0dJJN *m7pc*h+` l<ߝc\Z&8RWyeCѺM:y;Ҽ]<,fi0o=gPW'fOl:$y~wLnT//S鵎!9Yh>Y/K]ĩDtKPiCk:+dlP}dW'; E5+Iߦs^E7CUG6]MT,GH"THot=Nv' .rmBzIl((94I;{jۼbN o^ I?y'"P)чM/oc;v=vFpA=FSTJY_g[jH|ZD5AlQB~h-ЪwT mihc'?@0ukj}?'lћ ,R_ʇVF*^b0[Ei),ZG%v*(Uf}]4Cz@;4aU 5Nn}6ua"(# c/WLXbet^S:Vcwږ-L-%&B4PH'iPGh*q#̡5%5jdv^N n%:Ϯyjqh- f˱Iq}=$ط #0a&o҇D.։rGc Uj7^`XpV݊kxE1XRmOɓٿ:<?"*uR%OR>?GG:OiDgc[Hr}Q I❋,"}bgjK7Va8T덯Ҁ ew:,7SVʶ4kP U܎x@W ?ӏ(FFn眤HGAxIfq2q}icQD[R&rv!3Q]!ihN;'ϙSl^:e"r#ykTv7C}wg*ڗPb_#rE'l6¾iW- 40AW- @0|G 72H+xfN o\U-ؽU1N!NG|p tS'F}PC@ jH1x~oa_zXRxG | ]9(>qJ픉8nʕF 5 S :as)4QLo%V1R&Tt_@T2+Qc_y]1V$S^+%jkrAAЇ?,xU:WO'mO r$Eūu N5{C!Bv泔gRw%~Z_LVߩ]CmB,f7(.^xHGJרJ+(7PS{@} JpZX% |b~^: vAXAIxlsp7$o\}m|TbV,egKFDmE0 JWYQ1dh]0pl_%[|7mt %1%'ݮqG! ):D%^:^I]lOM>Q7'9X{E& WZ$fyT]V֧Ukm jJ񚜆ژu"MvFݬ!OaŷH c7mz0sbŜҧFA!^@ CdfO갯aɏi˚5ݚ$ym] j.v8HD /= zf\-{&u!QؔFYC*q?e<gTl,:bX 灛uT>M&a8uΛ&;,|!p#צּQgl3pwhL@ukY EvFX:x-]VPvNB wYRU->m]Mz8%In|I M^ˍ<3? 5e ׯ"6x.yt4^J"[%4mQzQnbMs]Y&"EΖ6QNv x\*R1KRV~f;DYd}7g+j/4oa7~(/!dED:T 騍k(l/DJAyZT'Q?tXe'o,Rɤ%\e7R8*}c?z1m ؾb랒vRGFAȂ2Zʷ~*B8M0]Q"5.d<6rz(A\I1ݹ_rfqqzJМe-g)okJ:WߚHmP, ]_/\)҄4ok#Į18,ʢ0xN7>tYJ9ѕ$B894WU!G:o;w^M77Yωk\R hp$ 9 SS|@@a;0nl{lqߟp-48&¦ss2rXR#DK+H*Bs Yݱ]+z(Һ4й2A5/BNgH_S1,d 5.lyAA92v!2Ȇ\w$BNEe_A0wz>ڝպNq/LYQܞ/ S<$ @K"ӕF6BTeޡxx]u-Ut@ԍ(&cf[z\$D얔b {ZԫMv(bA=bDґ<9{ K$s+" sptJ(iG%hT%R'hbgd5ŵ6r},.љچF%a.ܹ_!H&ż{) #I_6VywA'$i82q$=TBoR:u sΰ!\1?]~]i4ޠWh۬ҷ.7j9u ^"5O~EfXX0;e+I;- yD0CJV|ʙjE+R&Q#V_jP0hǗb3yΊ]Ub*̀1skyaTDG2N3ٯ/ Ql<ĆL#?l$BM]\e=zQb|!( wZkeo*]Ne-r~N e4ɹS,6:h$lJ}zD؞檜Rr#l6uq}lᣓD[N]|ϮgT.VJi(<@V~Gզ&o{+:UfB;h2̞K -- sY H{xJRڤ.w 6H ELV/d\`n1fa>PC(YǧcN D_ˋJulY͎vxsŤŝ~J EH)OZ+;] h0p_WAfoGhWuON E $kR u^' 7KRyv+l[k#Mif {BZ'."qT Ȇ"2!U G=snlaKިCsEG5hVI[d԰gV#UPoZԈx00%"ne-kj*,F>`tp+EaNOPN]0ݥ aoҁ][bQNj'*XOD`ϲ ƴ?2'qY?1gR Z[ R9/Ԑi6KtTW)Q|uhPN: AyYY;Fbl}Wtz8yx KyIV&׃vl#DV1FXJ`^ xA[LuudӪWzi  C 5;B*ziw˗MuMslމP-& x_^U d4~~(~sHnHj! c|zܪ2:2pN<7M썔'[s0?Hn@h/i>BRA_Wjy -3XYp6fQEU{Rp'˨U 07G}H7e"vȈe$ ?P]cTrNvz}w ĝ=^X[/'K ( 1Mz77 @fʺt*매J1\åßGPX4^_VB4(/o:cSxqr%'HUq Lw$#SyJ!8ʟj_X9{RȼbjX cHm\Ho /:e뫊N%mPImLzh9hCBqzmU[_v8W9'o)@&(t~ 5qK\w+79A|MN' w ?K>(ŸR<!(q4[#˄. oa6BtQ.W"dL[|dE̹j^ 8 Oc\4sb#iT#62T & ,yrO9IF<W>u;`U8lGi}Oo3댭 }Ca<o 0p5 nG_QRdjk!ܺռeWG\MW\bb/EMC+nQq=k ;y C"օ=)2h N >p! b  ] {c}-$jMuܥbͭ|؉ І͝tM$n NEpCN-|eczsIQF6@YFET".)dcE\)ֹŅE$Z3<GOz/kS<U][n!L0GGmQwL K1v@;Zҁ@s9ihV9:7(SpWO^̚B:ql_Xx+&>Uhcx4ՈSwkwszj l{|l K֯'e3)eoe>=ÌFv09>vSq /Ǝ5뢳2NS]vטrAag/h98ץa 25vRc\XŖ(ȒRǪa` fC#@?7d\+=@e}v!,4 ׻/"2hn&~j?*WYGL9ۏ=V>М[YbSUn1,Ee:$X..FF)'&/Mm&c-rM\`.GL}C_4: {J \7;(1cAb8~Y+1%BNBHpcw{fL\RKgi\K4 ", <ⷤ4"{C\Dmm[HD=)MUPT[ tޒ?UBv49e꿿GR {q^yv,Z cK VK8YHoEٟ1{,#c׿Oh߽)KB^n`VEd$8)b:0 a/^jVMX!/BLj٥ʼnǼ2 fFeǖ [bu7bl` uL8%X#.DCV/32;]ih )h'\֔DۨAIbB(+U>X> _(R(H@YNO6$9Fv?mx%r orMlhcc%^5n-#lMLmzB_DTzK'52I(sW9*^KU3Av TdZ}AH2/ŀS'>(K](<оqEvҮ BndTDN &oqGq3O*f_WP㙷\vӂwkdjţu(TB)ìK}v\Ǖ1H%x)J}7QHtP8ZoD8>|D "ݜ oRK|?ն< ٻ.eqeR gr xJ$e*],bu̦DzirߙY!U%چ%VlͰVn6+ CCΊ:ff!}x}=K:Lϓ!9N~ kŸL>q[y\T%@Zxu>뎱c36 xo}Qw?)BHϭ֔CM" %noOå fqK3fax.$jqti}@!m_;߯PڅcAQQsuO|;z5s<nFHoO|oMԲ-~=y:ZYS4[rX3>:|$ŏk^#Ky^ pP.`?$nxx}Y9ղRZeS! I|~34|͉M~7ZMdvpIb3SytASGWuH@'P$ =Rwg^@ ϏsGɀ"_[3UH1$o. vΏ1[JIcژP6 seڔ 9ăT%pCgȓoc媪Hѻ\P^HUo'XeU^?ަ|@s]j.d8-ґ7՛e˟+scв'vQ%WxrT9=EʎH_|qJר }+Ҷ'"dx|([%hF`ha  Ȣ1ez!3ſSqxѝQI9.gyk7dVTܫ(XcVo,2 Z Y;{:Wy(62MwHΌ43`dzP{/ШvIՇ*#g4sT Mԁ|@)E5"OMh'1&ᑱQ,-g/ͤY`PHs5SSh$~uAv "_R[fXnjeW2 #[?>K}'Qx[*U#t[J1[?$Ԛy1J(v̑ _v仸:rVr T6`k?Q҇_96(?& Y,.en(Ur6>0ձsInt_!bkid?Y'T?\Ytd&Y]QN 9 4.[mCx+/.L]aCoF[8Gsb^^k/BgU@eln%̢~̎<-~`rbʅ^mH&WY<qq?^ ’-`khRq_}3—6s>;KMQ0sj!z[h݀1+/gHSȏx[x|bD-dh35UY(0%ӭ6pT)7!\ǻ鼬' <8gxn!e ǎw r0i9ٰ$rt*I-}?1䰳,+9ؒ @K;fmV:FOhW}Uwp07";ɔ 5"$؈!z@F7wG37v_[NH-wK!4=jQbdp@~#q yl XЎӼߖj+`q;+dK퍥PU `e]죅A=~pt8U;K y2*izY5X%.֑aIwc`ogtK4 L{ -Y/?t_vWʳ2;rҦKSbg,FM 3ږ<СHJ6NNANDIr(:R PoTCܗ%{wl;Ӌ;͵]|\(2I^ ^ UFy. Ҁ<;t3iڱeL§G3bSEya?0 00P ߘ6FW_ơk-^%ᒾ^L2a||D*&y]b9fݍ<~GaY/zjݵcؘ:phDϦc;-4ؗG(RiIa܅?E:[NPڥnAL)ÖNdjqKR+~,Oh3ՑeOAr;CBzqqa \Xd*8]сa@զG/I`;ef8~po YP^Dΰl4@EI`~` `6S|>8F]xbyZQRBVy F]b)Ȩy?F /DJZQ?2ur b6'i qړ5Yv֙Iy?P ķg~,o7X!e j^ȗe] oʥZ8CgoO#]~2KwWOx*VM ZhШ}Y q.D.9O&|o`C7rӐue'f8iZekd[#&(!mHT{nOJ3}nm&x%{?HߕbYK!X#S\{8 o]x+=5S25$ȮSBE5MfC"Kqx=6[v_1FL̴ K}!/ռ]~r[0+cNuk?ВJdG3HczҧJegMOCd$ OD{8agNZ ׸'|,ol! Ii> g>!L .x`2 |;  9y%+Q?6uU{قDSNwlorqIxR]g7G_BQ}cR zJ)i5V'-~gb bE2N\',1 '><)k BVgBH &rЌ,+_g!!i&\6z K4`a>qBG }6C䋜5~>{su0q q"EmLw`(gӊVXO{H!gErA.Ϡ^Kxų _hRt DףU2e+vMiAL gmJ( "עV HP̍nGIy=I/eb̩C+i>uO֖FW(Xgl80$pkퟠ2J؅@I?u}C cZdy]??^hPʏӪyr L$h_NF_)' 0uO9]ׅMoIFZMrBU3l"*smz 4Xel٬ε* kiCΜ@@pөkY϶du"eUKOdw% /8v[oF;HI]K$n%U1"k009.elW4A=gCi($-=:ҀjE3AdL'rrJ9)lh-8lbu"$[\cu>QXB޻V~VݢCjM:tT@]t/R2x2j>iLdL"@2i g<(Ef.p,3?SW73G/HԬy5wkbx̧xs>ٖޖYwntڐI>;:cPEY%le:㤺FJ?3MՂա6:K3i {Iʍzq 8f  +4?ѕ/qcdͼO:i+eg8çeG:ٓ#EuUjRHlnO6JWr:ܭuj#p2MI:{_iC9/DFis>o]Mpq ` t!+ c"4L:%6a5渕RtE*Q iqʿmhFRuȕDowD^+{ 7:VԒxd߻>D&YptۇQ ʖ0l%~3Mr5zR/|[> ŠNfϟl|P?X>dZ.ԇxoo xy9Tjbs\&r.+-6[җr7waLoˏzF3Gn6rGc?&HJ'c~ 'mדA_.bbP> a LX 9lTL*K3=sUhfM氚P9sId2F¿)b<-}(4Y0R` ﱽ{)T;t5t$ov~xF$FYeq@%sm֩޻W e?6{.|@U}Nh:!b^$կSV sy[d6R*G꭯2wC\Q%oM[d4!;*.#^}M)I+e*+4A.{FfPM2'PD<(-+헜浜ud o3?o0%F oZ8b5,!Uuk!Ib?J%H>'b8R}P˰BPtۘbłoi!\ 䅿V?zա" {$PG/y+3A&؉`d wYG{vah*fx )u^e[BS<;Jf;?ŏ3{yō"-S~wu5+ǵ.0fqBe嚥Z,:fG;ɏO m#^u0 QL_"2w0|-]KS'p=1o"NF=NRY$&l-OJԱ h0zRA1zlpO^i]aHTrU,6YvcZMR_<kL9LMujL7UޞGk+5D0Z ߹e:b*>Ҡ^(C gܮOha[J+%n5Pem "IC;%sq6Y`4Tyon_|g &aH[9ߝ蟌JO$9ȝ?齚s߃(pC:@Iq+A~{p@U;)ɿ_H^+󃺐ckE#CgHC7xI1XTt6A8E\p$Q :|.ʉ5 +OЅ"13`B7 3&O>{^z@?oDkuCKh[I˄֑'V SS"DS7qT5'{O"0~z,jNE"% =KBCHm Bqs^~o a(Q#{~(I"JSb]V>"bWDX1<$s5m=qXO} zl‹cwOCd <55Az¶^cڇR^p'#@F{Ңv,iK9xg긂1FKf 6{fLӑMmQVkdĕi 15m'i $HQr1qrFYu&P&֔9oK=f2r:bⲖsz?Gg,{ aŭ,ŗ9횢0޻S[̦,pOg!<⚊yCd>sfV +4  .M$9O]53p I 8wXVHzbZv1*734gD/.>"n] Զ˶x6(0N،V>'F* Wc߮&p-11/BC@Mra3&qdJeq '4qiLT?İ` A}7;zO*Js[ɤ%*7~%>"!67Zm~-,:ܹ|O)\rE x„mbT"O钦L`V&QϿhSI/ъd(!tLۃε&@uoiW^JڅB382'Oc.簷dfK!ǾB~ǝe6ۄ-.V(& K1zКj j[e>. 8Z5|gɞ"!u9mKp-2rt]^gxZ+ٹnx 𺰟r ڐؐoE@a2C_xHbm*Qq!CwJї\r> [s/5 h##\S~ѧLϭ39%k[GFJDlh5!ڎamf+gE.H6^ kB]Z襫p\ط1+Bm*+> 9ԉɣǢc,=EK:w:X:fx)yG\WR "KbxfgxzF UU-y  U}fX zٹB'k3EbOnOXcl'vQ̓TOW AˆPR|aLZoCtzqWk(UūY /nǁ ƻ>%E0jQM_]x.)ɐF9?q=F<'!;5"ؐQ$yg-:_/k7L"؄-C\$жzGsUq' tȈu|LSMeEܴM٬.MeVXuB%zE-/㛛ݱQ$SjW8.)R,y6ڢbva͵u_´&}8s(H ǧC[:$PQIPI;D{^XS81$n9-NmYаAR `tLZgvb%>LPJ|:]Ծ_=Q8̎ Kq ςN rb{S6PmW*,ޥצQkFr+hTjQ gk+G>[l)hcaE4| fpkKeTbppDŽ:lq6k=0IM ?LiY%V 4Ԃw' ,.<(N0Upӏ2~ުz=FbW 5W&1ovf{"z={lp!p콢@܀v+ƒVio{VCL÷}-~~e$b(HZ4ot_!0dB=a.oCP/vr꺞^P9qFG)40AX/ͽB!_E)d[5fDFZʰ}sC8%Ξ GG((Ϛ&]OT<ɳohC<KE!QdrPdl5 6GOzvG:-=BjI˿S~쥄o*I^_oT#1K.E"%Ĵ-wP ⾾ݙkdX kkIgZȣ&rXVs-(;kv9&6UAUJėjv+5PYN*dsbf"W0:eɜ-m-]O9X/EGe2aK}$#:W[ȮvK@]o&bk]n՚J&?2v*sцbV,6MuIJ]CJӼ8t81AvX]C< *kzN1J7f L)fMzqr V X0nbXAbPkB0Sùu|bOTK`'[ .h(X,9TՆ&%a9V3Xbl-!raq|NE_b\Yy _ܻAft E}TC8K+鋎ԈPȉ8dDQW n|\6ƿ܄\nlG4*xEQzkZP+u)^ jk(&QKjJ_JB%Rۣ(1h 6.9iiؖ>>,o186-1}O2u>%fK/0b2R_Pu'Nu7 ?dh<  =ی,FSHJ QX|D~;кEQPPo6JBmRk(miXIz_ ٚK:|tDbԲL];1A .'JSLṖ7. 3:50# <61^dk)IŹOiK)nR#> UB+qƵ;6*Oa~]j;KTQ"*z@nN#[$繧aai&}rj0d"SؽkhO Xߕnuȳe I[LCcD/5V2̀LlJ1ܑ)%+7_jQ 9y]MTb"{.Ch!}v5,rJg}`f M`6KDk<$JN?ZϽI9< Sf@? c9Ԣ =+Y:S9sf;׮TL*#_`܆L-(mls;>[`S5Fc=N| h^G[T5k:M$6"ʢIx5a8cbqroT $=bMw@^z%WD_<+V䷅d/tt(q().`sXc*@BxCD<ކ,*>bjɟ&KN)in]<(\b;uꆬV|ms{ U;A]b0~ԣnPg#1|__}L.v04Afdލi}9գ?esOcbh (S܁෪r Ȏ &̄B)eQ9ReDq+L~32^xk]ׄE͠ 1DӠe(p@Jz/Ѳ΋\VT~kK("PC7 014BT5c6C[G#B;o}V4aTXv9ݷzϾ蟡/$Lt ܻn_]i`ME7W$`EWƤjU {c x:-I?X #pn")%qhG/jLlbXL72TzJ|71{[%o81j4IA pR1=7>J rw8ߖQנ;I#v Q%Pf(' su& x~G~ )L2||@PCWyeysmvNc! "-TbdŌ}hT nS)rGmөT®>:saLZ(y]Abak[n}Ugz=WeA]OR6PzⵂЭ,W[5(:zNr߱P<1J-,V/n?2&.;>Xʾ~h#ۄy$tԉ=5'4YWk:q3qK-> T7)!ȅUC:t?O wEjUj$n%"ֻO] }ڤrA꿺pC8%ccdž }6K 6Dϙi@H;#,Pqk2֚ 8&azbx)'ZӊIgj2w)䴌U:r璘ֿ@6T2,u{:ǖe(o hc1N?G" YlgrD M׵zNtBތwxAZ)\-\Ivz7֑)!LT#8&.X+Pe&Y`_ԏ5_ϼWqԈ<-m~XN oz xςLR%?wA%4,C IF4<м ?bԊrYÂξV?_Ӕ=: JFŅX5)FLP ItWItG:ACs:80١hΛQـRa7P)AǝK`PgY=]Jf'jve3bJt*']B|!0i:_:ĭL#}|9 Zp:\[2n, W%`/ܗ&GSBbuuN6ވ8܏9_rq(#_(8rCӦLmhʼnZz`mWqfȥ2z4!y+[%VL.P * =+ ^Lk@au{PELns3a(_N2rr]=JO)E;؊g -rbqkxqUނLDߎI4ahWo# -NkM)ɒzQ@QͧDԫwK.R@ZT>󣉘 ɜgF5j)B焟+n{9rջpb™4~5Ě)qFʴV6lKAGk d1$θ[ PO Ng?C )DzBE|jW`B ϪɲV3vtO;u=-a!*t0x-ymWkJ?EZߋ:X.Ia=XG,H,p*4{h,E4CsfkLʄ \\Bz0 :+7v\́jA{0r%V5oVC ,y^M{ }La/=yP3L`X/ИK+.ܔy ZfZ0 xfq2hCNdkXp0h(CS웽Q{jOMl>/q#?x[ߝ jꊈtme;u iJչ` QKU #ŵ rR-yI1 -ڛ""؋Ŀ CNi[kg k/ C<Җf_ >\ uX~ L]/mƦ ˋ+Cڜ5d tMnExLB NԶW׽XոPL0"7bx(FhP`,Ic)r*V E t1#ۯ[dS> $dT j(mbӰ3q?Ld k˻?pi{4h=Fz:|?".Z _ś}w5d??/A2'X;J:`.P>QIn<%ZZ 8[pXpO 8"u9{9/d m;x]9]*1ϊbU`L ~;-D?FQ(+h3 ҄<M`M{Qmէ.g\>u0!R1d gEea2 {w•Jwm j#c\.̷M|h8ӂtNW1<˰FgCzе>RH>(݀ &G@1MHIBM@)7%}H҈ ~}B T,jp9 `*$ezgJb;‘g.T s~?|͉5a}}[V:F4ilB_Nb7鸕hd^+-lы9eB>xEg,a89 c+x8:u~- ALI"QjiWґ%aѭ';T67- FN}ZH䀆d K5ɋƣ5コ%*%NRE5@OSx+[mjH 8w; 6";by[:|j8desЦݣf !F2Zc9W2B(:8݀{šڞVG؈pmT?r" ìPR-S#%[`. C m9tf]|>iJ)CTj/j] govO95bKĊ|U7bДtsw _pk 3wyH'zb3(=R^e.]U30 J%˺o DdS4t2"&sҩjp*ѼCoakktx0_4[_Aui#]KܵuU^|_1C?HoPd tvy:G6Naw)V`qLǘhN3cu>̈́z>̋XnzQEu0*L/)  :KTOoUl9!|t24} E:XEi46q\0ʁ%ƅreb@#i(8-n0޾j^atzڦyTjwN؄+F^܆LDU= \]FkVJp~=ep>_ON{%N?Vo=- ]C\OGx6ɃKQ!A; u5 VOطUky6|pta7SGT 4Q5{':Y AoxwE 3@G0&G^ Za1}5VAɋs[ش<\#BЊ*mʰ"bOD3" ԢInj9-,숟5~=% ʺ:y_nD6\SSz7% :2Da5V6WGicU56oQ~.)}Bg?=n2I[`@WD~|Zn䄋:JI,L4 2Z$= j*34P3=-߆ h@Ő:dbuߠ0^dnk9t$&+L%AVقiPĦ n4l{/(qќ %vQNU5grup2 (}DcMY`0HKYFY3̓Uxߡzk[ yYH_3%t_P5_f]^:<Kΰ1<sMgIocЖ;{q)N+e,:zS)  gϜ߿)1dEߤxp ū8t3j[relụXgv`$mZ齍Gp.U#sG[?}? B+zu񵾴)wܗ;N$Muϑ<ɄGLSKȷG?fuz$40xSтlgo~e!2'=Tޤ-t&(K_8O)fxdW N_z_)ѱ|qɦhs޽*D<3ѺצÁ=#2gXs'E~1%DŽžoձE2~[hVFS&VJvƓfQT8]u Oo3Z.aV~o<64}[1+8mϟ׳5TЖ4P&pqǥ6b6QtWx^<`k {Т' V3@B @01+n?0a;6r> Z>|+k:DEHj XI "#)BTjۥLQvμ1J:>*L ty-;)({RqV-3'eve IM$Y4~d:g%j'ڊq^fˍ3=ly~}@7ܮ' KO͜fF!8@d8utt Ə6%K/Nϭcּ>x a()! J?w6/:).ÖLVOu-UuN.'ϸ^u^eU#qҮgLX>5bR/v8XεpdH~˘+̨ JB)T>x6>sW="q$N)1sJy,ʹ"w#E&īsRM\>I0&4aݘaSAFBC/Е%ں;:"FtdǺq YhyYsվKgЏ2G?bpE.+2 0L EY}\\`5-wlh^`)Cw a&*8Ed`06!5Evb#\}! }~`= sF- WFu⏸̳l?V0BuQcd[괣)@:uO BSʛ_ɵ F% |ӏ& URV6n3D,9HoX-2?vo9|N.YP#DQ\;l6rPXH$hMU<`{o y ranwX#SBgˬA˴<", s4$Zg>30[ʹ!<.# 7q|X|(4t? 6{< iܝ:SQxASYhTYõ4$ڝva.`~#V+Y(p*b]v.s߃i8/$V^iJk3 wdTu?GpHn|.rW)v?/3`H{B9{ԞVw6wn08yM=9b/D=9s5}0tkGsq-gp 2ޙN%d_m|dq_rS/ikoJMqɿy|b$r5K|EÅ9%cf?x_w/H#Q2c+\0e=Ӄl} ҧٚmfyROR|7ǮC$/Dʨ-ad+Hjq'ޤ: yP,^PsO xB֮d_^}͉*[5C`}1ypa0}E2QͬoqyΖ+sժ%l]/*ɟ aAl8(3@j6F@&~\qV!JBe k{VIvH^8v|+B~HaB7[iM S0YT1%$73NO՗ / ԅxԼ M)C8"u8z}Wv|9*2 GM#OűPQ22ƾdpj"{۟ISD:=b0j@K_2?h .Oi bmi`!*g):*6ثmmoq 8^e?bR iFS$=DP(?*x$szD|d2K)7os)gL?"Ґ䠒{lA%:Ú 94[ë *+C9DYiWfGٞUB! - wo܍Jaz;F +bp>7f^VE9xrFG2]=vkvvzhdùHQzzqL؄>(9g`)VKb`J&~@ևmŧ%=9- _n Q},|ÕU`Wι<ЅQ}*Nw= si!8[qL 3u.LF!7&/)Lf}m%3;X/3;b׉6U=R5Vө_F!᱒ fjlaMn{d6顁]O{*hvp8R 9ΏӳV ߐݥEQlţ[M֌0Re`gB\1(v1-'ճdTL!(aP 0_E/ 'JX,(7y7/O$.y|Q'iazR iR)g1,jjD#$iD5dgӈ^nn {&e`4H,_P ~wh0hpOL4p"SX&Zdu yuI2?iC~3 lMM)3Z 6 MIJ!~N*z]-\8{ Kt!,p 0jBTfSs; %Qg9aڂl6`V%ndK2~mM8쏿>MsnVxql={qvZq.&9,M˜kꕃ,>eT-rON<[iyt$ƯWNsǛ䰵ApXTk(ku27 &Q?@=a?l SC~cf $8s'W38ooID3@QO=s/ti DeK ԙ5o9$ . xP:Wn,j`fkUfO=gj>nDn yS?# iqɓY:D#|ANm@֣7=$7͚Cc*C;)FhPϚ֎n;ǷV?g)l@3ٿ^6u2}ؔR0Xb%>)ꚗ=FARU4u} NZnTվ_PaAv<9C,!, ɮw(`˴wKLz{Ϊ;mE1h7T0*y,w+nV𻠬yi 4G7Ec9㒙M럌¥_Iye.`r~ĵu:lPbnkqt0؍e/5Űx`ϥ>>.bVh d_9`ȶT1V!pH?TPbOL3 f aRCpN:9fP);ȗH^i t}(ۭWHR?wjaatuV]T|hC9F$#o"0S2s5 Ė=iicQ.6zCmjOg .,39lxz"Wmqν^D6zUfYw=mgh{ "z,<bOo877 a3|!:`=|sўL\ڣPKjC.?I򨠘jϣB7CY)^5(F 0Z|JHePV8;ZU"#{WqVi/*떏2C܈C~8J(]I|g&̧O+6ugeCl+ґ(%+{݉6iToeh "W/)FO2Q2wP{4E@4:E7MkM-fD$$,A1[ =0vz ,֐UAp<ӏ+EH9[};Hzg ̞31B Ia\ʎΟ1r81qi. D Ws4= #R~Pȳe/#V % agj'.1-&~.٪^S ׭|c5(9pSEb*}ׄ2\[I@c-yr)OyIyFO?3,?{(۩0O|s,iWtQVw VJW 6480*f`׿]ۜV3#4LBv7DpL.=O]訌2.F+Е^%8,f-R:2ܱˮUb_<'5{eӀwx;)Dqm֛ c8%A2MT^.&/JrPjp 7NzF7 7I J]] ˰ضV1?tiװUn 8w5 NdEmrnvXw/of2*|_ώ(>hom܎;7}{4GNf|$S"*I me<«3f +."š{+`uQ2ӕBi|n+CYl3\Ɔ1O<9%E&HR.8dҡ/lŷ6%jBRc &fN|&fYVim -|gܨPn|Q]6̸RnF1 kf_U߰0p/Ia%]Hp6Tmp1 挙yqHnΒRU6m6ǿn'V M{0. ZʰWc<|Nj!(kލ}㏇4=Ϛ 1c,.9Rru`cdw#gI.s4h8q#PkTxHZبyb]/yRvr>W$@/i~q16RDm N='V2.=,o@QC|w ;>9󉕰&@‚ۍY'~ .\wwc:wY#̖+XPjrG$iTj>l, 82!9Xz {`A>m!p*: c{ݢ)5%YJVdH)U+9/10k`U[B.8N-xj#ɯӁ,$WUt'7`!r8"94]8hQS2"TeH39 e0ILF_n6fBzO~`WȻ}{o̱BOcS. !xhq_Vo؋>źc"4_>poZw'I8)<7\$o2Xn [iWd%-qjhC XROgYxi/$D|{i>r0Ye%gL$_۔O橋]Joj”u%V)]KwHb1ȗ|ɕ׉Z׵.pK?m1N)wMB4zvEDq~o`cE =^Uq 4e3!'![\vζUI0E8\-9Q8N2y]qޥ+'t$IH[Zwu[.y;Iw{6Y cL|MZMpxL uY'zR:"rW'w&*Y`ohVԯU {:,&3Ip+3o&4}sUԖ(3c]R7+'h Y.M|C.7&vlluآoqh뮍v/J"vo;'rV/gLho+; *R2:1D@胜r?D6c:ϺJ s,.QL+Ƙ^۰+!wcJg5䶎 uX$߃= 1y͂4RЈӐq#S7nKk NN_u&42feG10q]^-S}:Il%-@wԱg#ub\4A7ږq}- 52OAbԁ+w{V?͍Yu*.V D0B&珄d8ٔWgf?3;hJ`[~=ȧ%*/Pv`G,HxqVhi (%g왈 s ]MX Y>fMctoqdא( n*\u@ƒ)_81~1}GGEDJ,2{ic,Cml}@:rb\ڣ; ֛33w{? @zBq 1cVv`DX `CQ35Lz&\K/녩~H k*Ǹ^5^ ]%+dGn'~@q1Td+;n\"a) vu,j:c*sr[x_^ uQB0?!y:!(Cӷ=?;PwpLYgU$*ȿ DhjIY9MsK6#۫ lJ2Yԏ41;PV1rb23pϽl[ʬ.?Y75O4(ńJ>.t$,8#-GILlIsL|OV;_h xI PӘ|q۞dD`7/X|O gQY#l 1wMb`m[H1b0n7 sl6wg"̌ ,ϜI\p^jғoueܖH/>KOВI_uKaUbgEZIƎvUX QbTx™`\vF?5dQ BmpDykǪsxuF~mO:Ը(xL4*Э\'/,Z$!}# pʭmIfdϦI7=';3mY"+>a0@o Tb,0GJ7FG @0 e r Av}X%R Y ^s@mCoC=nv4j϶ fbV˿_Y9yW'=̻v7^6h.'&WWuPɼs썊Q)KBDNs% EQ&@eӹ0:XM*06ܳ/IEp'J3Ti Q*87gJ5(Ї !OnA(I-hB}H8- 8|D`?p QJcrfOCaO$.l;,XӾ.P,@2YFù<&\)xOS3hUN-t\TG]d<ϛxN+<`GشoD? (7eqYN >񬸉5ޣWY"{4_5Z{w~/lugDǐg FTK6YSs:9> 4U6bǚ12}5*vwcc=?;X[at߲rB׀fZo{`(+T~10+EjP9/[w2=UܓJ(F*v(S|>M]%NyҖ!Dz" 21UK"CY*pIY`Pjl4=:TOd":>n6ѦjR,KZ?er(!j7ꢖVmP)1JΟIN#FVAñTOv-6/4tG($q0I>Fq㲣s'5gz†1,,Q.bW_HQJJAL͐7Dohd E ZLXQhEgr6qhaGW4B 0+AumlQNOh"S}UB4yP)J&4SF ٪c(wT /|#5 coI 6XՓfjF(GIִ9KPl}}*،%/Y8*U*".%y(۟}~TE wu\e,zwCm[(XT4TMY#[[vǎq(O]b*3(SUyOzƮ;L3]y&'*8 bpFrU:HVBp{./5>LFT§vl!`o( C%MB93!8=pSحPΩ[L%J54(+blRAZ|_@-(YVj$x. ZS|х哃DH:1u]T]K+^ BޔHIo ROkxϘƓo?Li.[p2~T^J'a!lx8[)V G3T @TMx\GoL0Zjz gp#C3&eFA2p>&80,$Z kn`E8ghxL繆2ӣHW mr:Ј3LEjUMk-~vC~^,fm!f>6ˡk(?F Sf@+RhNӆ9+^0+W St*Jݞ9O˷ #LWӤniv:dZ=ѶGh"G{դ2q55km{W @֫;$_Sy/b}C,ɪ"}|fa@3j#U@){'œ%bT32c{qʽz__ŲʮeTN86AzΪ]DdЧPqvr֗0YPr6zd͝i!=%RkE T{%Qlf9yzBogDϱ:h ON|-S)9r>ií34Ii5x@N$552p-c!W^n1bt;=,dGƪXYCb;Kn,I"(ߎ? -rRYrr\ZXY`O+v- ܄@HeݓF:5m8ߵ$uh^bAS57~&Y'cC{+}5yߊh6axhr'UL?hU4blS/[EIu&A/µH9!&6ehx=#=˘5d9Ac f/Ty_5&FJ<,)D4$<5v\ 7bcvu"Xáq3lLm!hXZ"gRRC `3{2 1V^I-4+Yk)i[fsڽ]CF\lvui~^5XU6vR3h jiOā`/#5cu>Ȁ]`'?O1'ӐdYZ␁8bm_k~gɢ>]hO[)0ɜ!UUatОɍ'X}hgH4gԴ `O؈>ʠ!q)S mEǔgVäkJڤYE b$1H;&­pXdVΣ1۸|OW@EWu"qM2X; 0#7JiL+YV+~_Kηz`ٙ<"Pj4p3m"N:eWCLqk\?T;:LWVk4IJıe-8w"r# sʜ 8Ӯdw Hu7>oj XU:-K?^Emgԝ)LPⱒi>:;(+\VʙĈ6d %r D.^ "ޔ8.i[HiIT޿fŬWi^4$Xy k=h| /;ҳS6pj_g֥/8kf$V*.x}@2Q83s&^u!7BK=;R[^X1eHN19-f,c N"N>iV\ i0ӗlxuY\$]`\@ѵW'ɬ+QJ %Tn k<]ʃZb[]O1&~Dܓ3-y!Z3"Qhci*V7yR0nVAcPIο HL4]0!L+xѝ0gsSpMVt3";rE֣w{dH_PvوXo厴5q:SW : K1!nS3 l)yNy!WG\͍*M&_)E )Jr:nϨ:پK`kp%V#e9(%}UͮUcT6]䍢Brݏ7#k][8fAKXX_Eiry~ؼB{&2:{;ic2}Qx>- ã%b!`qj5ı ,2nLS03n^zxFrTFA~~hڷ^mnjE7$F́2/YP+Io2IwM3W1~2/ Rc). -q| mϸ:8 4=.;Ι3lD߾ufme*{Gy WGoaI~i,li<,3jtf;ܝ:Wx8\xo=B{'-a]GRjw@.!go=0D)jʭت ZfzM H1#S,"YX(NՖ/42puD,r]̵նp1I{lΖSg.Pŝco^8W|ގ/%}6)=oc;ڲз3[ D>tc?#8Tȭ Dӈ;^Q)$ ܟI[v[+u|sZ9|H)C:+4 j)m ~g3)n.~8Z2}ZhoxvKX&k|./co qPV÷݌k/K. !J`HY4) "(ZS! |] ZRwt= ›z&O +8r =>Jir>5bfa<Ű|:ŵozm!q:!B?swֆȞA-v>9#ڗm%fI~#IU\.?aW'! 5c mFD*$l 5 $J.rXK'7H%x͈Ca]41B[aS3erIoѫqft 3 :۩a<2rQamTBy"dyҰޔ Gf|].QА6~O$٥'O,%fܲx2@~a/v ? !B^4]pO)֯<%p4,D|`v!י̾5x Ͻ#VX)U{.4Fl/G3lhⓐG̃w,Ҳ*£OvPg0hd»Zt%wA,7JD0 #aMA(9OJR̼?QIi@e`zH 3 ="h}YKpc 3vusaʓ(7wq\\:xLwgnY|_cQz-nHpl4vS܇Pv$[Xm*f} JΝaƲRgX#+8OjxC0+|f~؈ZvoO7n Ajk/HڠUvu&esTH{=p4E& QFk%1 K oe F,owX2 *GUS"wv:jkMu3 -hɷ!tiٌf=SF툒Rp{y Lv;"hqå-Ll3JVJaԫKJ2 hG3ٛ=} shnt*0h\+`A4,HW$p:LY:wz Pq>Y5 SkNR/lqV[~; `4Ē44d9~t0"e9>w0N%h\tp=YAjD0#/[i8m}^y G(Mkxv4:mц56b""S1*O_AKZ"qzX+1 %S^my8$ȅ뿥$t&+$Y:AhjZ~a;H0 y]X/hN2u8X}GAvC2Rj|54l h8v :i`j9}۩r&b0IV7ً RwDb?%1n2/a]W7;|\/TRZs`MQ9ڴkvaMhQt̂WƄ9—bRj%C֎:D[E΍ۅw}3{Y\xow0Ϗ6"\P|3/hW6ePsq+Q%\X ǵFR\4[N> [I3~8Y+'/N?DuMo'UDxh9& U13%4 Ruq JLk7̉u]T9z`8bltk W]?!,+ZBD HO^ol̓&i?F?Y-# TdrF_q}W\yk%'>y(L+YDڋMJ< !tlS">Kdq!*A zۍr7,7L8?8P>fcN |1oŰK𓾅scqI##u:Qe{=KHf(wyҟCK4u歎.[#椻b'ȅY"m4^yFd>KAxF8Zb_6T/aUCRtΈvs3Z]Kht8C"ߏDsqE<!b^VlM20ə:s)oQ6J$ּƮ2l=\i+4R Xe5u&R\ȃd~Yspy<`dqmHUՐVh&C7zlٚVwz,R:#vjm$P3N/)i:ʑIL őJ(K0F3}he=)NLY3Sc:9xsITg$7y9X ‰. P 2 T,wWuB '^@-)>hYd/G1,i/\ 34.S35}wT+uHUEZNǛcӄU a@&|\jò~#*bv+\K1?=]6O(ZWaFH PD&Pp7Up3q[d[ #LÈ\{RMwh4ϼ%gtFLP{[.'(Q ]u(x4D{ U[O53f>#/88zؤL8O[ Ay:./VT-[n9/~G26olf9d' 5oJ2up{Q }F5x fXѣ˴/kiˆCO(AA]$D% d 5A4 dXmLwNY$qHrE& ,^().>fcQ +d`|N:|wxZ*i21Qb׷hN#(mcpKI]dfXn PʪSw[ 65I qfJсFRt=by2Hɱb KB &d* & a]%R4Ȣ=n.kxǭkwLaIS<{@Ԇ$ҍ3^Tp!E2CNvxL-Dj]ƏBI49IhS3ׅ"yQbejd2Ya"vv 0k+3+FO$$^=.Z뙓M&Ymf9e%bo{蛽'!_74}"t,Qrx3"}6<[A%)[f(K˹ZB,:>Zio ̴m<9Wz镫]4ڮ7 (4jq,yZ4Ro)~}Uˈ5Y 7{_rEX3&`+ CtW|`4NzKOK{c9y:@?Jf/ xy^Þ{cjleLΦL)%ګՄ'feelB*5ӌ|-xYcVC<=* Y_@P bw~D҅t4w ʂ2^sZPV:ݠE4Az }pI;ImŃ( qpx#rF )L#g*p +ښמ4T)*<m碫yDQ4TO9Dbze4 bpZ:K\[Ƴ  siJU;AU#us?$.HuUFwsuKLIbXq{ow D?~g߶dPlC`OMq%,,YkvQ~NԬ< +;DBE'ษ,4_4`Id֕Ha" lva HfsJo!Ĝ8+b_*$]$h9i;ӹv)eQЉ}Ix_zEWi^>mʉ2V'gΩ*qЫj,zgYg@k_F<+%j_=CEϤxV2G F9CROA :(˲2(eIb= W!^k=C/?3->o[V+E=pvV熸@y@#݌/êGeE>MZOwD;a9vw{LӮg{QF*"<=q8RLkrIo"e uYsb<uiޖd1 噫ZVM/AE#F~mJ1%& ` ̞rQ.j6=6rri(hn@hCPtq !_x4^H5ڀ,w7;;Omp6V Bn~Ϻ.≨ _5 ~;5*X_Frhw|sX7nR`cfL|f=A:eCC T%54qNg9;bc(k!?h6߀t[}db@}37pǺDS[h胀V@/ Z>W}.MiI( %?F~QEhZuo)~M VP/% خdP"?'f'پ9ͯ'+ODϺB{l* xЕMSC5O/*F꽽Ms'\]P5INir[Jp!{+4zQ) W%j[`/{覵J͍vY$heZo}):ш,ڎڤL3.&Di?m ~-[NU`a/4O2hA~>SK^kEߏбJaȞ^x`2H/Hf2c}n[9\zK#[2osPzMlvu,dsgl_&&bbI2ݩ)0h뵥ŖӤHBVRcl[$\t *76t@tŐ':4r"!Ai%Dvn1'6Pw3aLNIH fl=]bBmʕps|qH7X}raVPHjeK@:HأAA Ȣu@Yr=SprVeR&~skў=X8%žPn^x~;;nj7lJ@3 [hZ0oQwV?9DHR-n45G4D?n%g$7,uń AAש5:Y5iMD/CW8?7CZ."8lO I Jr4 !7ԖjATУk}1`&j-د#1AR`dI5;-x{*b&WoO*ߊnJ8(r9 aC:1➛RoJ=?72/Qo9I1Nj OtdV:;UB$SCΑ%Op*{~`Ӄ=-#bcjxǷC%ڬ.?*+J]q֙ ABY2d"GkV!Y}! <$:)/@ѻx  ymT`_hiF hۭ$Z}D!N+ }P2v!AiU,7t;>UC@اMLZt2XC j :el 2B>RYem:Y/m~*lߊa`[Pedc,1eepS {qH5. ̇H:r~7 6FW yQzù~&N)Ww66ih=L̞-]fqjXBȟS' !STuW\?)ռИ=ڟDDqd3gP}%]Zj7PNU `%@_qaoQ͟Q" v-S6JYTs՛+0B'֧am̤IHXT0Kʗ%cFҤFZh׻ň~~N`CznO&QH$7װ Q4P#Vn1VTJ]%dJjlk ԷD|ԄqMI|O# T_)jfPA橭Lk\>[Zœx1],̟n9037)9VՊ:?2v/(PhԖfM}D us|i4bݸxӘ~Pd5YFX[i)hxU̠sD6/<27c¨z tQڋ}!B>uQ+5hXtgz BԋTh\FCV+H(5i׀JoqTzcaxJOWEL=ՋatRsgToRj)C%k]tT.Hc~vA`Lyd5V ekJkިB#MdwwIR;6-S\q O=)NJ><nsSO *آ?5c 5[Vf/ݢra "w D-vT:KN;0SW6Adp},LDv BR*+VTʋ ǽ]E"Vtxbod @ϲ>{kX,5MSt 9G[2:, TNZkzۧVY `aEiǩ m}s/gjFQ+1z3EU\޽ͣB#an]|*Q?j6wU/-WB cx&qf&n|^鶁DO@JF[UȤ&VTeˎ'ǽZıJֶI;sMĜѧ YZX{9I<-̥WH:,gDO^إ7Id~/z&jqg 0O9&vlCNrr`*KѪ~(*UV\=|f6d[.7U6>e[}X|֔|hacJpb $gqǣ!egV`7&hdC'h] i:$D  7!'+uF%=j^ U:(&׺yfl@?H sR=;c0V#?)-F=;?f#P%9ƣEŏPVF#v+?ſP=sZPVppgz3.<-182.M$,.)Ɓ+Y{U$G s_MsojSd:>d[hHn{_NVh̚Oo-MaZbe'cSoz%L"$!;bor4E` ፎ9`[ӖZm@y* 0 \%Kk' )nk_6 МOE 0B 9un{M~ {eZ+}]nSC"dYϿoRw ^7Xj&+) p{vHYtU2riG-a鐄 No2<* qn)l9M)<}РdA PB9]rQzFit;^l7@BVtQMY.lnG=șЧ GpQJ3/-꫋(ly:ga:q2`s@'=w@'H~P[܂ " ED-]tb& K_Ψw<" cN` Xo)y=w`$U*Ie4ɴ˂+ET:S(i<\V(ʮ`Hs,`S{ͦ]Eۥ!(oF{P%:O"ZM~juZ arFj.K72}ߕ7g"7v%{_l"q MD0*y+7i "2 jrO`qmA!m qa=| _F[ e=p|\EY y>v4QAE{luR.<HY KFR[WYs_ /;c{Z(;CBk -eZX)+ .ƚɟV;FC#/c e*bC*PqGwN]\T: V,/%aÇjh'{TcYtmHK^cDxiS̸9/i> D7 /1H#T,tD#oLX oJM'l'n֖_iqYa5N~_RTL'NdL*FY,rski޼<1H(. 8RPy-11 2bE݆.x"mkr&GݖPZM|fJ0տhPڥlw/^ Ia`F `EI.\C h`WRë% VM}Xa,4YgR&7B6\.DRuxJbZ~,yž )nނ+t=H:׈2S`AݯnKd_+](h*^n3ޤC!:Vkl:Rx%Nר/K9ݓ)<.|,49cn0lqřKu&)u0+ZT[@gO+R xt&!Eoz˽"gWr`;^M KR MRew;/csWkMSvd,exhYUOHtbNCa7}{$o q8&W;jlFŸ=- KiOI}[J#zQ◟;_@l:9,ַ@%iY!P1Z)%نJAi(2N6yLWXS E>#ԗl-#7-gЏdht,1.ăi9bfbhqI0SUN"@c(egY/7 qdè1{6*:s^N9R+Q.A~o|8GEFvvuPewIJV[g$V!4^'M-Oz~5D#HYgQ'ꮮB"-kG%0ĉciB9/j4+K'9`rRZ9 ?a^@l`=펨nZI uUFBE[2K,(7߁d !E ǩMno0|pVyZ1-n{&QJ)Ug^r8 k[.njgc*YZT|?TIfˌlď噞?܃VU^3aap_kCA܃X|=rlcѥgHaKDVo!!Oe-UoAyꗗhF-^‰tpzi[[\_f@U8@~1%'SG[RS_O"4\|CS痗M2u X 4RPrCWBq3 K)ŋ&pڔ._5Q[ݺN,vFO5"j_T%4]橇|)?>3  "g2cפ,}C&<ULlr, TiŨb $!I|ERk>D2ԃrNu' | Vrj%*\Ӟdg1+Aq]= Sh,<'i;$=vynܝ(Yʢq"Kl>GZ֝M=\iR2'¢=nD_kߘVB![$n3>ķBzTH\uYah7fX}EA"7X/nBz^ϸOa4юTu(fe9ے 9T%'smNLs&sQOCw}S ޛ4-So82$l|/?b6GDsn"6nOM),kۙBzE\K=zzMӡ nJ# 'ّlFCbPB֞LE07joJO1)pܓn44.]UYCaZ-~,#Cҕs:ނ4j6nLtC)t(!5zM^>ҡad`qbעbm@$AG~"vX 'p?l#/vM)0%i'l:ɲ{님3s4[x*OCϴN~0x+s/ L,Udͳѐ^yl:Oުrmn6pDg[Y)d ބOV ŚYIē ?T/lmGNZuB( dE}#=N/+ S+* ew¾t^rJ/.U2kiQjKsы2K-!N nrkk9AQ ^p'bӁ8&)uR6YFE×nwm/iFXwx:bWdGڏ_dGGjym _˂G51Jx <5 T:^q"i ZuP)\NpG-U4es4ƚ;ц; x L&zz_kl[wrj-nqa#=uiVv[5IŇ~;ucOHx9GuÊ20( W8X#e˵ls]ep|QAR+B^Y^[ا t)&3*UDrèz=Qg9q{CXWDz-(9M֖N;~[DLk;xivAo+9uF9~e-v7h=8%pd$6/EaO7kjE^%r/r3bҡ`"cPJ-6W;e& d*SQP2OM E5%0j9>׍P咼l.D*٧?CO ŨY?;)E/A*1?CGKTƔ=བ֨SvM`)nJn{ؐ*PвG}6)e1a(DЀ;~.&?t YQ@ГəӅjTE2HW1sU^ܼG̶Qҡ0Q@ma) \9я$F#DS c^. ,͑s/T;rȳ٫y"J@[uH zDw`uimeOl6زֈxm&,їx#!"N'7/ ɭ%BwhKQ&է1{udK7_;pﶯ8wςYem3Bxw  uiDR n:Ai0 lj'pa Ln3/qM#sյ~w ⡽r#6FYRd(*mL1 2#/'WA0 ZD:.J½_D}ubi l/o9yhCL3usR;A6P{jVd\5]E X4tfu "%{t|^qm<2nV5;Qr/1; gWMK7t-5^ 3s䚳Nsm]ǂ,o9'5%0|b5hƐin!h>ޟlDKS,ŴH]8U:?Pu,KKfSާ Rusfz3B ̷SN7ȀU  i$F'W k(9׉j?[&v] 7>W4j)g^ɉFRJuO΢X-"cȉЉ'E[a4%({ jݮS6خ{Ba5^t{߂ߨIl[p<_,WG/:Vב.3&Y[ѲpÌ %) oMCCzf1ZKVq*@m&mbgq+B&. #"EF}t'!7z]2}̙ߣ-">uWUrfN5!J 8dX6V,_- m-:CغMٸD]ePbπ\ࠢ;R.~. 4 a/gVfYpcq2ue6 f~csV@ h8x-W "[P3o.\VlE*ٹ0 ue|D~]k̊`6_ߞsE"TF=F5KyyuTkx?$< kVdzTwRas(5 sbp-'2Ds"dC mPaL2z@͆NZ0\>ANLOs[Ȥ 1[ pn@־G&d\tBprdŶwW5qZ<Hqcig̃WbꎴLy^d*>BYI_}᧾9&IR. 8-v!įViG6vUޥ|5l reֻ s ?{ܓ΀"jq̙82ǣϜ/T?YaQL`/Δ ^ ;Uw-R20G9,f9oYo(pBX`0lj is=?Jl PPC8(e梧Xjr$4I?@䔟C)|؇sR/S<,uI?W sR@%OyϑRg+HUPTE<(%*tt c/d.v%4+{;zZB=ΚؓxySV4 L'wyxilxJ7OJH2sd{zyE&SKFM/sԯ<y:cXIw#(sޤ|Aau+$1Q<^;S8qƾ&NH1CB+"|+KI1y0n7 7%E+T#bf6KԌX@"iBdh Yo#kITL7uR uSWGN"O_A b%ÿɦxoȩ߯ds/>W<\{C4HV)r^OW@i"É1 U7R">Q~C1S>m)\WБh߹7`cHW~>Me!\)lxȫaa$|JgFZk%io$ŚE{CR7⡯\@85B*DV% {1ߋ>v]8jz`5.lk(bAȷ>{wχԳċ5?AZ2j+qQ^ߔ'7εǛj}ZR31?՝V/W"Un>`qvUCeFEKy_z_U{*St&k%~'@ˬmJ#"1f*Vn$\Lۃ4<0Kgx[~ʀ/^a<ǧa8d dGƫ9(IoD^@;Y|h'"ВK[n )\.'oɉAqR \L༠n$*^` )\X3iRWB܊DtGoԗD_V 0wW 4nr/N[ȡ1ۢNP=S>&fp1nu|^)"%-O\qt ,klQ}o@ 8HJvN`0#P(i%Ǧ& i9zIE%*qVjS0< θy|Fxdgra#_UHlv\{  ]܃4fOcj 0ZwwXUDOG(bf5we%T_!?I1P 5K^& d;J v?`>ԀPY_ƀڜU+xKU>}둀'sV~9+L&uIփ#OKχ$Ju;>?V.h&j,yL'=}T, ʛ-rhu*F[my~ FMHsRYB)i&] !v"b0Uqqbp5[A07PlVFxV N|'ž2('e.1\"^@ȳֱJ}͓6G $(z ݀Ḯd(H?L-:/_pHTi=WG&{ ŠJ5+`RG6ffZ19**~wGķAkAP=Py~ *_Z__{τBN:=F*FɗeC?%:UN ʗ8M֘LǎΡd|J>Y0+ӾRܘ7TUt3DPlw0PL`=( ^X`]T*+bRKc7l+&ْ6X$fVG'wˏjoSk\RKޯpU\sŭnzEف/efm0iёQU|6YN6_VlX5P!}"Lj^y N[y;3V~Op5J ln#pH`8F[ξ쇏\p5]D )b{ީVػ`oE*ne$d'7 ;/YE.k]dƻqyڡ By9(eEj0X2 &嘓62gw0) 68ƪZ+i2(QGE97p ^ ՝^L%o<(y:tD]&:@++ HkD$κZF$jSC&;4:5^dW|CDQSxkꭀ±jp)Pbs&<寬u- ݱ\>p̑j!|*o #_#hOpOErk&o1E/"IVƍ8 ێ1#KR+>/<ϱT0Z2 T )Eoh ]G<6A+} k**,p$T]'On(zVp1 /NK?PH#Y5HȖYqSv.bD@@O1lpG]71R&)KAb}\W\y[$$_妕f]z>KlGp?IL8^kA- A;0}r4oװ}.o C>qp|0iV_& hrLS4Ks|tl| %uetd&KG@Yu<.f8:? !ҙ[UTpVڿl ][}Q7oaJ(JcKYs1և_`y:ZMP{t!|d5'nH\FQg0> : ODn'YPd#37dh-PU궎&]Dbي0#y&<0G;v~%{\Rk$]\68(&IPJ|0 sj )Fy>LgV])<8 ڛ,[6-lg0`8%ʿvz RAeNo`9Kgl0Z9bN m^3;!-4жK5j/J;2_֝\SRm롗4 Ds%Dk^a:Nj{>؜ׄyꍭco*,ej+~y_3 Fq7s^Rw%>O|@Q_H$YΗ t{Ca龬= !hT+ޯYn*H@O3I)^nXB58*ܾ̤x(ԢNCIalxS8w-gݕOLXhñ}]Eԥjqs${t ~niTL;)~ŧp:vvo|ؿ-%fU!P.'[[9wi^;gChA{[&&xz&T WcjƇa0^Е6Je W#f=/d UZcQ*tߚA,C-OF`$cV~0v6^6|&uϒ%ێz{"vruP)MCC5a@"8^*N\V5}G4N: Ɋo.߻c͝V[@= 4:mn߸'MV:s~t&^-R|·"6}ĀF uw٣Py>R (Jү nq "*F۷XG6G`v&|jiRq]^C>_e}? UC54A7D㮑}u4ٳλ$h/+SKrP27@aWo 1|`; I{ȗQN!T4 X4:xP+"q|0ar[wYsc32Ս CMeΰ?ᵐ3%Kԭ[NM|KP:3D*(-W^T~k geev+m>Sopn 3qҜ1#Qs]H(01^r|r=S7+ӥՍrPoٻg6jpr[@2ɷ Izć"zS؝[exuSy=+, .79jb(З.OoÐ$QRY#|ӄI2ӊ;yS}'0CVh -2c{B=4deWz=o됥mޯ%z5QX1?ƽlB! "7 U廥LN0ȩz~Z<'VUF2%@/]O\gE)xzzWdŘt-}Α '~9|i@%(i9f\)SrfWRhi0­_Hh`k96A g- >ځaiEoL蚘?/_ eR1Ƀ500/@K ޹כ Ц"1; "eLMSD`'#JpA&CƛD6<;ȇN6 RxDgΆoxucO/4H콜(̅*n WL60oA תc7q֓b6nӷlK0pAyegrKxƐ" V` xOU˼v`2;ۡ5%W\@'3 E6&}޷Ę8;Ke<2@l.^J)MUamɉ/ N, 1zNָ# #J*FYoT4ufH|XS;J"&FB??ٵa)U $8ЇfN<G׳0 GZjXVXm@eTt]3aMV<2FkL1'?ԝeh"N ̣Iqz1}ǀ SAt0j;ckFp%Ƭ<ϛ];9L(k^.LGia(LE4c0ֵظ/zƢ,7V zJ;9{ tsdʢ:*_eju5y-[EJiXUH fjOaXiv$_zM pp7R>Œ%H =l/b< k6 ^hQUQJ:D%SF :b~~ZAC jܣ ӿ9O NLToOE9ܺZ)?fH}7U{|@CB0;;Uz;wKMxriI(ieqGBobmr^S HwC>&|_mC,һ G}M[Ewc0& B5eRОq+K?e`k1 >jChFz@F%$L? 39!Fl@?#4uo^(-(h}b^aV$C+hsr}KoLXH>bNwAr >/A-ǺczÒx䤇-i[Pqs8щa<= tIRl{6px#fϚya&.AUTo[6B h0K5TDGRt[?M!3KݽIT*&)Zlښ|<@$L 6]}fdkSS`nss|WFu[R_`H^BuUG#XY*z 8G&-Efiِ"X,] R'8 _GMˌD/ 1O #C˕}FH<;f=%7$hաL 64S2X˷D#ljHiF]4{r@4tCu yftFݫ y,n^F +YD7iKWY$X$e5R%; :RD5vK3MG@vs'!,Ē4cW8A6c@φh-a_79%]G5/QM\hTnۧdj) saRwP=ik@LւvfQtpU(7t/ֳm,bm3͓Hg'qK KgP%f\q ,*Dz_舄@ |KoXL# &,;>FXi+KJa j &k$̳~+-O?f`UEzqÅyOięSC P{}Oz"ݍmK)=Y P_~[EF@Xy9eך_ pDwKET4?ꮖ 9m}άyG\ @/*{Hqie03l~XCK C=ej ՕCAO~s>[U <Ȃ]*%k:M]})ABcyODXtC:xԅ$r@9Hvfl}u}N=VtI LjX) :V4$./j2)֐D95y8vTf<ȟT7~TXWQɎ$/mOmV]H%v%dˈaO0g t{D>=9r v5t~ wqdBq404/j1wAG@2o2<}qo(7'' oi7`;!4~5L۶9`t;d3p fbN5?rU"9ϓ?LT?('9uyXZk5ΌT_ a~1?%cdWo5AY`!v\E%gSQ57٫V!=zA-؅~?]4ÅF`(dA^kĕQ\_$;(/!U*[fɑ9>L'Fs&ö(}M>=wE =Pv hhYdT]2~87yYrx/;͈VJW3<]uzFt R=Bk  QL CI~ ,=]b#J`UlD +|lBY$hR[YE,^˺ñ9z׆7AOAK݂ +*xje@A>rM.RȤz廃~l1szRf'KvީG}T)!Q.2{.L,jK,5OQxg!t5ݳ߫ 6ng %P) 1e(# ڦΒYR&ze)^83kCܞ ڻ RÝ)sw@rߛ1 hz ]",8 w.7 M#'S264Pf~ԎPSqA j$C';×#sA?$Rrd3N"[9> Yג B*riv طpj95jnB;F#{K#;E.m5%J]Wl]@~xEHϮg~܄ gdGC^=+ ģAA2 &WCv_f4 fs+A}C&n:t~YiQEC{:߅"*(t)_d#H'|Jq1 .iS],!Dn殱u Pډ2s|5 (ax[2m$5COqQ}Mp,-KY6AԠUv偰O wf5IJШ$.�oRQ!y:s~"8#nLI8Q5D*w"j]餔wv#kt8gu5A<ėSjmOCJ9, jC{ƻiY޴Og|nAݟֺ*,DAf/0@=z`Qvˆ@9_F =T4_T.[*fT>T [5hԦ[0xYkӟ>eriF>,$yo[Q{z}ig:wD\A Uq:$3&40xZwE$%ƩۭA!w j/JiA|}_b~Ԩ*ΔW"S1frfwH_*1~Ś0Opjُ87s,_mI.\/hLXw)+,W$J7N5֒i,Ke]Nt(?42Pۜ!Pץ` 0ՁNôU84B> I O4Bz|.Ek"?Ξ.y81ԗ ÑPkP7VY';:{>ۤe+n張-س0~ 1Uh%_6 q]Zr*QB[AK R6F—\𧩭+wWiA&ֻM߶*P~L& ruOIRD$@U޿T92|UR>5sr - M[=$>onβrVgfq5:DK{̗EXaosKiu\ReudOqyFTYsC@'ćճB_S7Frhi] NaOQDH ʆ]bO/x Wa" ATBQQ‡go LA,w\QteLѓ9f%jJsPQPiQ:mUZa >t^fifޕ13 ' sfG.Xd0o0^:޶[ Coerx|A1Π Yp8kIGi>7ً\IعlAMKѾEPsׄA2HT(HЂL+g} ̅wKd07KcB7Cj"lQ$fbɯ4np>!_^A)*'R8?pѣe=mR{Fxd\t~OAinae Ҷ}lA?3K}@;i4N>DfO>cQOPɅծ_btߐ.Ŀ\GJ"_i{1֦g+\LYv ) Cl 9[tJ.H8>k`!Y=E>$,j(!+׾:ɖ J Ztꊕ,裭ͥO>[3c;}_E2ܵrE82, JGl$QNb뿤@R3*zܐ1ۇPph %Ǖ鱢 N޷KtPG(<Y[ro9|o\Ɉb%iPTh_wc(7aPͮw!z~ RLإ5g @t.8 {TPfYH No{(Dm aē^X{> {AeӰbm D/ + Nb]!P+K!L֥ʎ'@( ItN {gLfN =ѧP@zd 3,~n茂pd08v) F@^3G L@FEhqf D}H `Js\T4mӾ&1"bymT2d;{)rqiH<̻:Obq#OO9! %?_v8Yd,Wr7lkl8'P>ܢbQiDE 5.L-w^|I8Y;鶢܊-1j0Wuh}u<#$E_,{X lC@V2=,4ZדDgk."OؓQ(KNggFej3LnTd\-.B^`/$lYZ7eʖl0οWtYM+NS( tKdp"C-b$<zSz!L9ƿPyMR,a"1pw(_^`7Vb2:| Ҳ͸#1+ĖixtaM`)+; sۦP-\vI7m ryо<DKwh8Fq=CA|h r*=#cP0;^FV0y[kHZOd0s#%]Jku62/~gnj읶JvBgpt",+S2rɪ< fe-vϾ+!CdXB:K0r&0&Z{LD7*/v`.1+p4Moqi(ǑOv;w=WSZ!({H{*.#)b[H`)Edg'`w*>[_/ŷ!Ko0dL4?<ԮOaἺfJЛaV^;O)*oAr WBkQUiQ˩a3s bn@)vQgLz sK_T ` JyR3d)9RMOb>狽0qܓ41"}Ժʺ։{wL^MY/XP&.?D vmUQфR\pNON ,"q0{>i~;RD|NGf9IMa n[1sgmʠuSqE 1G'r3_ "y'H0NtMf蓡{ S鋛y/#q/Ƿ nn7OcsCZo0qQΪm F낤VqԨV*sZ?as@"\=h]Aea YWI(Uݡ]!z䳝ү!*_xl:Wz~7/} ej$COδ}PL`.pdBg`|n^0wAc(ZM;f5"\d; _֘%, wJ )BLi?R'pB ֑;#L"(iҶJgv4Qj*ת);^X.u\%8WQv^a 0[%s$SIWrpK}pˉ&+GvR6pZ}D?2ع(_jP k%Y !J&oSӅTv񅙝M"y@@!\W)SM*YcωD_ڞϗdz\f@eQlfůNR {>o4_MI^Fz^b"K9!OAC/ZHM9[ u^O@?@1,1E7>$76,5kB,G0R -v(xTYIm|[ M%e\VU {Q+q"EQ@^PQHoV̸*8`+jŭB_"[@Ԧ-- 6]˹amce Lg"fn@CǖϪdh;Z-ҋiK&\ѣI g+^Fu[<i\|vn=d/ѹEd9,6a{y #۝KD:`Q+ك}޴)Oq[[QD캗A]a$&3&U:1moO[KSԢHӲtɣ<UOAU2\J(kChJ{tIڞ1kYpPɢa~1Z5Bն )dF\`b쿲J~CqIi%~N:GkaP_Rj &@pQs RWndΚir}H$9-N\O *Ef#* :HO=hG݋}+mQMr#^hEҧBf$ *Ҽ <ߘV چj~t*6BtcjL6rc5nOm7/.$Q?e!eC t;"-=@?;<09u}q3@p4dKZDba(PsnLcjnaqXfM^Mb)SiُzK[i#~f(\X%Y=S~݉0M),vǁ~S\'*84G_o OPPɱW ^SX1Cy_λ_Gl$ĻZ:.uV&J_Ik#SX7RRT{ȉT ]tu2͉ ΄&m].t=PMR1Nw p*CƐzW\Ui-B&2-:3"{Mq|@)6_^YXQkie ^'o5ylfBt}yk6Z:Զj?&38k `k]k  >?aY-_M6,X6>CVQ9TcԥЬ눅^YL}+ޜG2 q}8xvWzC5q\'2Η/nVj!6Tˣˈް\aWԉQH{.q-rzM? jH<8yٚ<@%)nLiQ9mZ_O iO%zn穦Y% <,APEl(xh+\Nc*9nOKb41qPt= -=ǗGY3Wo=mp<2w`&7 B3yqLZw]75Y"Xm 5Fێ<+;3GjL va?s^^\l;U;>5k5 ]W" W; rnrB͚"p!dHJ Uz ӒV*Qs31<;{.1aZθ5̺<䦿tԊ? B ׉B/@o=6n_۪xZ:"F2t~ה:Nr{W ]Y}j!`&ĭ! /7 q3 FBM,g]M>"( D>˗8! S־b#Ό ˙.ker` jn>9w;?zpeت-dLWH,?Ye*^IhTyX@󆩃6jV #?c4hQ2#Cp({CG#JEU׃{S2;S0@yJX4[y%(c$T7,@8(W p9$z4bu(<e&T* ŷNI{PF jR^MkIE"^>!J*}P]鏙ΤC s AS{^8ȢӒpYğ1dbӹ>~t럤Q\ O~=}dAF=u7czOC ohWN9Nc,rC]ձN gԦSmϘ[vDP?+# H]{ bz/D?yD㻪꠩ХdžĤ!,<"z[#l fLqؐ dv UޜavK(~ a#4 õC T44V}t K1:J%XA.|mF nCTTq'1A䌂JUb,~~&2RzEq>\{8Qj"򛀚ЦJ`#&;i^fo{,JtzJd.,ήFV&ǖ%iVDm$JEC#S ;_>?0/q^iӣNyFj@2H%L~#vwGW'$uEcbM&'XN9-/ԃ"P`PMɐ%jLŮ[5=0J]ƻ_\T4TVϑ9ť0 ;YP큋1% PwsA#/g +$D<=8m4ܐ}9Q[Ld$š^Hi(QzNҚyc%qRArGNq' uDBϬeOhI|!2ܜzk|!kw6]$t! ^)nL`)%Jڥ_!=ZubB%ŷܪr)"̠Rrq=:٘O<-W4@C$X̵ J ([jmf()ѰWn QdbCa.&%{N6 ^ }ڢ,b`rY};Ї8lN3pݩ'(~e ! 6]sa:s-uaӚy{VTё.D\ CV^51Xx^EDaͰ}yV %2H%jE΁~J5dqgu"JI3ɝ8y4Cud$ ɭewaa-,(T"Z<}&^R&O X8)GN@db WǏ WOqˉZ!ؚ6$RI%y ;qce;:-w)/n-ѿuE2å#-۵% I`텯׫!nq~`vk jSp~ /vސv 7P;/8N9nnf<4_&6" l /캄unsIOe0\ku܈!J`Ř4N&ӦkV QAw8N), ?e}ʼny/< Jv>XrBJ,+=ɣ_Sg65FDEC_#oS(smW) hؾ{q/6lF`s_xZ{s/35=[Hޛczպ\ kPbIil ]3>Z .O}uj?p^Dq=f{L_kLZek6l]'%PCicvz4 IcrƾFpKD\w؎>D]U%-WgQ\һxr]WddžkqA!$/R%kEP3i⩹,?RKf4 3Tx!lֆכ"å/v|#*T ߓddn$8-'R @&h ^Jk?Zm',u߲z9|y;Ql#y g3?u"a! θZ,,*ROW8k j@:[w!EYKQ`W"$ |Ux9wNPf|;ŤxLkw-ç6A t*Tt1EIꢳ?1HM2md%ߒJVy?Yŏ(*& ]Io^}wpV4:;F1T9\FIdHnu ;@ B8.0pQLG$|m%h"qZb1О?E%L H&",&wl`Ku^I 衛ө:WgƖcMö)t /hŰ4 |؛Ǔ ّ{g@،zsq"* @< "/0qF6LBO'e_Iyc_&9pkY- S"4/o]Vѧ\vω! &] wV5)wF/ұnrė` ʣjSI"`O쩮ľX?)įji\GG叼8K^)WRy8+SPrB85ͷTyffm)Ć_-G{Q=%`0=і?{!s[.ԅ94롙nDu11b [Abv{+Y&-B/]iz^,lL̴ "x/jW*ʱpWQx9&_%S= 'neD0lIͳQ,O$4xd[27|5"ϯRddԪ)J$5y˹2%}=`0J,xL`FLlyE!97 E ܚ"MߞѨC҄S}fo_Ygyδyt Ouхj<P&4nnOq!};-EX1HQ[,#.wYFJ0FvLU3#,,̓Y(t b6f_F:aj:Mv}T—arCK[67'c(OBqCS!3YD3&\4? K )G5u;T"fcREȆ%7yPHpձ|l >W}M$6%Jfqv3KD6p8eӣvs}!cƈTj*wKG[$osn ;"f.ӧZǁMa!{Fʷ0wY+nW zjtm'%@÷6#6d`ٮ6◝ %boCl$(/a#N1b!rc3U9k*ѳKU$);m<{# w\p80t_^M*O j SR;7PXͮ("c2g"zqV:KQD=y$IglQ\v (RCYV_!$A_g"Fm&P)ٌ{=׼0Qq%/% p,7v,9HhxmI3<NV;"] g)aֻ:\~ULn:^n /i|Uq.i%|(쭢wym}xz7J%Ecz pɊKcTx  \ Kc! >>5"|SʉvJ+Sp4쯯6si3ekF\<*?c˅r ܌,jn;c/ (@rcX=!]Z-~ 2WѢ[ia9\IcؿrN WFyLJ R3j[HR]I,7= 0RXwh 4ճ_Q9AȮ )2?Cbxz k'$;%{Uڷ,\!9 \4Bxm4ѿGژs4NhENsNlX6m*?3'}jߋmVDZ9:'wppUfRo9+<ɢU yi+YjsXnkAT޲ws !Ž'!iz83$ d%'͢ [1F,V:șs f{Ggd(g}6zu|@]ݟde'¨_Sع*}XOD噓.t*ʹa6L=/?'_X$3·G}>0'nk?#جE^ #1L#NYPKanK1w!^U6ZQ8ٕ3&AEDd5_Beal G Z^0/yWRRHoL@c4Rw ? !^$Qjk[XإmgoEn_PR/uk "IfF>^ƞ~#}Om{=/@ݛNt -kϠv!ƭv oD=iR}hŘ D$ܟ*Bi<[ O_¾[ɾ:R`*ЮգTgqZJFs](eɐkLVҜAX\T᫣BO/:(2섒ή*odH(1ED8x,f+5KJ آ9]%2׼*$8s0-i rDR=X<cD7?zԶrL[I^*KI1m;AKInM+sӶEIQD #Yd/^rTb:wՅo2'|@ݱ$ӯZ- rxxC8 VCZ tosn[W=[#O1Xn*/I{7YdO.*+QC5a"#r[_־zNnE-Vܭ?…׷z-%ydŔ-e[jU>Φ&ȝI$r@f4?q:$qWX|[ԗ1rG |c$@: NCoЙdY7.T0SIyKq)A86U?)  dx$i-Q&o)1Qj7Wft8ŏ7b ^ ψ':"x/=c]"ˮ=.~kStL!tGCNJx_a8kg8 m_ ci9)hJDŽҠPy5禌{AJ6gt禹?Uf뽆kVpM6;m#NTT5y*w;tojksDz>]2hxǑygŕ'^UxSYСr~a8Ub+; ޹2J”40+Ċ\ݶI+-A41e"֊=O hOKC;JƖO ȯ:o^ɩW,X iѧ1ZLӶ%.a>{ PUowm9IOjs?C5KlV*+|oSV֐yP"kEȪz |̊o%zPJ7%[d7B`[V`,r8vlz~;sXތl\/o ) qw[~/80%J3 ߀²X v qe o@>{q ߎr'2eө?9.pK$ ]  hH+g|ƈk.C !1i4Fj"`_3u)aC=UνͩZLy1j M6lS@` "<8$ Z5D]Zbwh@c0җ&ʁݧW5<:)Pd j~RqQ_W +M^ pj*Lnh}Rk ?T#+Ju2yf0^UDeLl? % $0ѮG_B&[F!^0Ǹ*H$o5ԋ ľzOqR.]`5RjB{D.)Fے4=ӏQRЅ. wcrZ&hW@ ݥOpp2pcp7ԯ$( ye8?ǒ2ߺigYu_~Gc*RHzzPQ7_R4>"*j%aҗGGAG ;$O~~|YE6 ٍ`' zxɺr֝{v7n>iҢO렐(X'I%9nO/:ݙ hˉ7$L^tyL gUNrePO49'ªVx#XDuQZf4v̳ J#jld | d6g[kCD)y{Ɇ@.nGl+6i燫֎D5nn&(&y 3j5 Z xĕ pu+4'=-Nϖ 5[Ȋ7ywFbk J`UED}Îq超Ҥ,֫Ԛ8Idmc*"@^Ц r%{ < Pո2s4YC@PޑJ4{?:85a#5'q4"~"8B7kT, uEX]-t"s{g$D.}7x^ƇИP[&x$Xa ;*( Sfx^ ~?GYs0 5meFaj7=dwNY`apUN(" E%KXLM{nqʁ^zq1>e'g9Vp*7UB~9|C:wUyӅLc}R|^Ȟ ]7;UǡXJ3e .౗R.|ob ẽӭB4 mUݕav zmB9Z)HZrKL^>ҟKI{V^KMpM:ӵ"Ԓn)}2[ 柷"%{ 6T"G+D[bn̞gUMl}:B`zrGj]b&nWh \֘WG/>7UcT|౒(e֧!k_'D\RCb0j,/p8_:vT[]벹=]ȿ·CK_A51 f pN4R3ڊ v,**O^(svXZ.C|?lpꌷ#T 3'"1Z˩Ls =x{v~|ȴ*=I wȥM4V pjݸy P+va;NÒdAeJ OTqoc agb ;}66t[oa<70@ԗx:˚]5rKl(!|HQ:ʹNul1v>nL -Kvt|x7c E5d+W3t*^!  a)_öVis^ݰbQe>-D|:;7"C43 q{վF W\5#Yá0˝{$&n\䮳:2Ejli\ w sCA.kxFPyPe dOw׀)2+ APՎ ۮ\'%X}~Q QP{}fXx[$$qj"GLנmD`ꄜ!_F.!pر4S.3/݉uAqyL=é3IP?n/LH,D^T2Se낍"cjȕ%) sڻFx!é֐Vp͔Po΍͕~RNnS꿍;܄R qgF>h$1Lﺑ #dmNmC1aN#YLP$F?r-:25]1pPO_TLI>f NZ2Éd,HMXmIT.꧐FU{&2p|k )TVh tId"5L'HTt-@t ۟?U:aC9'  Vd#)A8 bc.8gtdC0*IJVg$Zd)#an %[rxXs=9@VUC u֚D*gM%2b8~%ЂK4ktQ:ˁT.%N& p,T9MA"V"; f9Ps ƣƂ<Vd;m,!-y!6Wتi>>f^fl o*~iE@2(_@;GT35hg.d7qwcĊrt0f<2w$sO,4VAb4x=դkkh,\uZ djϹZCkmyh=&)TѤRIb܃=O|eKgeY>ɽh[{^pRCq7{ۙn)4!^{YAsE'Mτa?#-3P}1*.E֪ >* }]xF4PR0Ј  dUw~-h8©7어ϏZ(x߽[1pW*56D8[y|9(m$ea$4T5V懘?G/7~u6&Cg )%yQ?B^?[*5q;lȲ:R!|"aA}y5;?ZO8S x+h\]e鹓e9ۏ,D:)$fv+Qo e%3 DBR_[3&]L7_dM0nBĊp-Қ BA VE5fl B+yc0 RD+]¯24fܺߤaTU)AG@hr蛼63᥾L]D8EWy]v:n 5s܁gN1W@o["IՈ7$~-Z64NoRxc+afٸ> 4*bцW)A0 I %$^+$OǨgI6LȪAMkrFZIY|˧ՠ1b9I1i{3TqZ14eԜXjمؾ.ޚieXYy8$Xoo_{0F] L:LJS2#g;I"|?EzE@@bKw/:jØ臧G6&b}5CK̓C6G)A2:RSG\{ȶ3w+zQ:JV\{O8AgC>`PPd"@0BTd^<)b*rp8JlhSZy_Ȇ|hM{WtkS)!y h[ XkeJ[~0bkF3ظ]l c&jBoU.fz)k~][@ [~h0D C] m卵?|SY$Ljp ,}m8~]M[9EV%eFG`JEG4~&nPFy#mp\Y%ZAvG>KG,Ô*ZG"ޡZu}?Xs*뉆<SZ!pr?}=DDs.l] GO=wJey7q(jʍ{/p VLErCnP)@ QFy^! RZx/\F'OІ%k|srPX:0 _[n"h@kG'?W1hBnYmh Ei0 K}_V%맃~(B2^y„w3AyeY#VTs*M_"ґEm6QLF!cXH-qimNOe*QHʽer;H%͋s`G?fBfjـ/FF.彚 "^ `$Ӈ ċѓM!5_o(f nAu 'gi%5y]3;6{áY ٨M`kP/t=zfS^a`&C/+$fUY*Sm:~S8E?j#Hr/`@FQ>1ilЌl.{J@8qVAh"JciW\ :Y 7M@kIu{+ eY]Jd60eط{5N(6ќW0hWʉG\N?(+ڛ\Yw2 X76@rqj$&c'ob!p0Nh*~m7FVR[ЄP!hvFh+&׮Y`vsHPkXĢ*:=Oޒi) /zFeM }Ob|4$ߌe0J/XJyfLo'N楂Eއx"st5gY5 84rMgVj$U3W\ _|Z@&UڍM LgCyP/kQl4Obꁍƥr-Q 6'-xmr)A+ [?a%UPkУ?q(EdpQy igSmg.S[ܩF~xΆ,W#\S 6 #ư.u}NvW)"?GɆ.ĘNmuo(.n+]@ǞF{i,e d~'"cx?mL0 oPRuqt bYKU r5:.mJ^C)2eS U|)%\Wt4 ~[/Jkڌ]!Ͼ,7(G uHktʄ JxV.Xjb ̸91緃i:P_\yj 㚌d׿\FIntw±wJ6%nb4wüŽx*N+=`z˴by"~a/E*Zjφh6ye{}Ӄ3L4C2y^D" \Ep,\5N$i^[y Đyrm[vaMz;e\9hs)Qu#O($qLh@8UÂX$}?uRFiCJ6)* ɯ81f᳥KY#yaX޺ JATW%J%,JlsG r%mW3 &83z 6f~|i98 <7X+ˤ骒h cŧCdxX;8˫*v#B>~jgJSFj:F7y_sr% m'=qZ`̇d-۟%Bjl\P9>>Dy| qt8pT5nsQFgѿDLb3k?Y&I,b{X)un_$I5Q@ {!'hKm)gKx9%n^173I*{Wr blvF !^;e8dzW®\V=67]ީ%#fItGeDZUg0#pTl_"x:#7pRLeNB-M[b EC8d%Q9? vFhQqJX'].)HIhטh\Elw6_L7m,ZkYJs n)5N:&!wa˟ u_HIn[xü eu̙wzFvu`}Z .ֿ$I`Ĝ]xWݩ.E`D]EL!vZ& 543 >٨MV2 ÍG༦_(fk+6 ҌW"iYzzjC=p|p =sDN\VڷjPcς y}Ef9 T*>p]|7+6L<M]wDS|G6\W&8-\w\V2}ֈ!cY~-Xg?Eo\Vlj/x7,Eq4(bѓ$(gh&xIud?==⾞ PVF%*"O`S-6u)L9XPV80.H"f\O>l>Z 8o݅|sSJʨ9)AC[>(_%F̟q,{dlEĉs7:.1Ӕ`u1*.)χƯYY- :16CGN )pW@E)t'ӸG3\eDI VcvZZ2y~H@_F_%(~^_m+uYā?%o(=~'oOq4$isn,XsaE%.S_ɿo/LQ.6)/뙝 o0Q{/{I I#OwQ3%Ke{vCCzA Zg6y?ZֳL۩1j,~7#^POOޱ?8yopсS( #kcb[w5DfIPhA  j2'] .X|kY+3ä~Dd[r\ 6pڍzb x"nM*7;%WNrIiwibzH'Sng OcL3:LaLhgYgo2Wj#vg{FQPc C_H)8v.|8 B>f l1VwAqO`nM) #35=^' Ǜx:vjR+a(iQ;wHV<*؇Ң) OETT2g+6N\fM<#^ mgTX/ 9 ?,F(3Cˋ?`RFL|/ѱGO\cOz137 ;U-C«{Qy8mOdXtҧAzPC-;p^iQ/EN[̱7Щ Pw w7)f~5ʼhIeB*{ aRAv=niH0 'عmb6ް3S<&,s6*KDtz2K &КęF#O}qn}1?ylQwh[zMԞ,,'DFesX 7>۫s,Yq:Ä,z,k tvya-Kls {1ЏEOyڣ?!70.O,s+ SweC ;s;$4%(+vO:X=V\pH*1ekQHet6E|5xX@qaE<23zoCs4nr y#Qm @Y`2wӺ1V_xivrIJc+㿰߾'r)1bO<,z 4pԾw-96#"8K?o3@M1-$1o ?KOkM#)b(b=SZ- Rm.HO'Mr HZ%5Tf5f~iNSfL-H1Y*F=NLd`ɚ c Oz"(7|P: oK^"st?LԠ4R\Rgo $ފp^EH ;}'+wqˈ[kUf5R76*=6SK j=,=4G*^T*F&3)hr<=h ̊Ơʨ~E !h& &[k;-,6tBRT(#ҭ8Գx.!umׇERCsMh iET$Ʉt+z![ ųYDT2U?}&Q%:eL-EiGT$!Nb**#~x&sⲧۗgA?к_z rJ0[VYno9 ֻHQ^, l d $,XYy?}Z+ALS( N*޶܍ ]QpCot5E7NK!erg j 9!K={r^>]KAڐ:!TddۊAx풊͍05=ْG84h)SM!ǣKm/uYx t:_/;[8vu=Q|?ӡK("[dBjYdx"RQD09sq @]]SV c"wPOp\ǺZUfp{Zo$&J,V5bgA1EW'c㥏OjklmԂUF:;XA>chW"_z934F j e;cjY.j|CI%c#DN8&#`(R^W}E2N[Bb;*COa!8} 7gcxs㛴 RF3cu+|KRu=%~;18h.r!BJs@N:2q ?gN4eRhXRd\oG-̐dN^;iּpԅ#͕4l+i}i$][}/[\3D{s4߯?Q :֥xE6"G֑9 ʪH+:xDwE6@dGMOF58"GdC+/M7(˜ 띓Ip2Vs>ȻYp*QkӱB+%.T쎷F,a3ݿ,i{y8 t%S0%PVgpqO%4q\,p]}ŕ`GV!&xeA:x}i\=]3hHy~R'_we I7?Jvq(X;E@Ezm_oxZg+!H=l/"|P|x5{=UI>@HIMF!TD王u@bhnE)}S(Ǹin"7;#(&iOS *` f7 z 4hWKٗDTMGjE[<kٯ˯~9^lU2Y$.2=}9:(TY[gU08W{U;vQBafZ~oj-.2QV7m!Ll"o: G[[7YkcFW6@HڬUmr#4 _N!i;* c"&Q썊{Wm"tϩUxaN/bP6i($MH0(hJ=ZW4տ!0z#_ *=~Y8K!w0Jzhk[sQ_ 6`]JuŐ{Tk'ԝ!(G!Q"NrF[1 Lm'Dك*>ݢycnlbW/)$X5#J"/\ EIjn{3_ CPS)IC5Z qqYS<̯!U.Q# 4:IM0J7GFz}p`5k;WCf,b+#Dv0ލ1&1@hz豮-vu*p| JpL].GE,5wPj XLv>PB.pjHfđۡmG& 1'-N#-t=n4L;GrD҄}̓z{Ei2lP hGX+ ȆJb7t9#B11&gFXӓv~:CGpX;/m0G?haw?@ʩlg:!#&挃?%L-sJ1 r*Oi8~ `0@ynM=:t aO^ >aۇ%3YbfVcNDX7,-YhY@:L-]?C'U- #դsOEB̟&wr'5 -#M]!sDv&Fp4+|F-cbš6U¿ˣ3F 101;*b&M75]skFq/v,ȀhkgZDfp6ÑUy~ `/X Brii2;95=b6N:q,X {E|:yp;C235BSχ2$uhdm0Lv[Ko62kgtQq#5+*'ž وν '4[ D AD|K@p.,pOAJrvi>@ iH^$OIoiԆZVS'&Q GΕ/}qBFX0Ô4X uD_AvAK!<аu)Q ?*6y 3Nk\fkQkz5{Z ^ +A\ΓJRvPTGFal%ءH)9!"}7BE/Ƹ'GHAo$潆gi7A HY Jiy2qMTz֪iL-NҰu\m6Q'{0zB"摅樂 JP4 mtrBrƸPuZ߇zr[HWIw%W&L>fgJG~Ňztk tJzKx]CN(A/yJp3`B,O0`u<^[G0.I*Nڣ߼y{ꗐ&+s.] 2>N6Ggȑ"cA?V߁]'D W$kZap<,W?tQDgF3"%"Gl%5 Ŋ泰h͈HEyU'SBew;/`iaGSȬENi7Ft_[>rk-ȬnPzz3}4^ȕ<1G7JhBc Czo9cOũų֔}ázMGDA _{+Txǟ ^ ١hx*ؑ<xP&:ckYCvTN$QQӣ;i>'5v"ڂUPU>vi˓{.mo^I^%8ӯ͎sؒCyV(H]† /;Ό͂#Y(cId?辗/9XP3[B^ Đ3Ee'(sE(䨳0y/ps{ +kxܺg]0MCY~߁9ܱf}FOF۵}b<^Cݾi w^!,lva\d8aoԩns62n43Wn" |* 'e0>0Pey+I`?C r%k]FHʲ-Ckxg VE9ou~.{FQ0ǰxy4nޚ9sq/wJ;`&P+SOAyܥ2\1}TKa:Qе2No&B&` "s`_>0">5<\>XWIo{ɢS4z7ZRyH#'083egO+<~upwk Hor61<衅 \>>OOy-G!qlV4փi-UН s rcQ%&| H 8@yrz 9Ki$3ڂb9$cg0ʪpEu3/"mFFkf) &M` 4 @fTO"ė, yr0dd,F=TPl5GEӏi~zòSlQ53' ]q)A[+mP'b9Ks_9J{,WN;3 B>̒A* X`nRkm2+U߱喨{':"9hz><_3B9Ut6j]%C=I~[[B*xd[Em60!Fkv3*}LP(IsYe23 w"[F/9L3VO$lUeS<<.T;-gyYbbU^1Y63u^:>`"yNз?Iu6vs J֙A@w0㪡vM<"DCP &|.}lbYBt7F]Q>n;N 9p6ZUo0.R,U,7'IP~H 8)W*:]b6G. $*% Qb@cc[~Pɸ꧳tWOgFY Kk;bdlƦ ߐ| :+ThM݊;$jۚtsďL4gn`hJ7Z[tu@?,1V=AD0 <,Ivndu _(^U=t!wr+j[~YK'Dqbߪץ_$ḛuMS]ya36 E{wH3%Ly]w*m;wɡ1fW`6!#Ub 0Wh`ujX1qP:Nc D87o %U\QQ򢂈QAX<+{m{"Y'rX+­޲rYqlu`'wّIi*ߖmw!R14z,ϵ깣qV\<8 3a~TCRE:j]wWkMz+d툐MNd{8ʣcX/ӆDN/0Ei qtrTw;I^l4JQ4;uF#BΓp̖LCE&i%KrT9KjZ#7&?nm'8 B}PȏJgd٪j__|_Kq{ZҥM NQS,W0K"Vu.:&U1bQSw ~,@+NΎVy.I7!nbIC֫O'hoY4}ꀿ18 ZU6!.d04M;{gidF{m MlTx/!4.y$I0m)JM?o^(2,/ﶧ&zn&VR!OWƈ&">SX mw>Шҝ(s,ga}-QXΰi8PoRa8)I"3JIȹytsLQ+G57&UC̣-H8}sv^64F,%.y6r9$3˞_-EIHޟ.>LC+T߼*П_ߺ~1l5O}r4fFn?L@L3mԻdYѰedWǪR ]OkߍOoB4+ AdBz5'5g!eYeiha)ey7nZV-x[erdQC#Xs j3r )~'rVyI -jDo[za4-8Yxr[wUNa/p*z7lJ$*I935{*@tIJvlxIfW#/iyHkE1@l}A;'a6?!]K'k!zHQ0@0XϝeRpӏAE )ܴL1fI4vPC8|=gˌ ǻظ'Jj _|{5 ĿFf̦u#翍@#JJ|?o~Q 2"/AtYvjg튿zmҔx|{$L{ߙ jOK%v:]\L`H~a,&n<lӦO:]u ]ro[OSEM@=q}w JO8Amd8}.*ZӇ$`IΗ!bt+-o; D5&9G1x-i\P-gR'0$pV=+5"b)vYsሐ3TUv(9Jsd.Hhp:g.՜U}KUCr(f\?DRS?:v+W 7g9Tz]',0}ͣZ;Zhjl) JJxy8 RP,rkO( : R)4 9->EC6q1:xƩo'z#}]lfUR-o#{CI )\Jw$2{U&o\4&o2IbO,AbIQFS [B?SEU5ESPFbY3] 4^qaڋ:31g /y7>,zB`?6rx.o||MK9 2͐(d(LZҿ-b.P$-74,Nn ^ ] 3w[/(vlo>"pZsϦє!9 tsȇ7۬LZ\ԷH/.jT t|o*a}0PiE^ss9/6uv-~/՚e.6 9v?= El<S:j$8{M@&-_HO{vXz<:0#enC#!Buv' <*H4*8֤M~Yٍ&T8"n`c5 39?%9B1 Ͳ#thPϠ>v_i@QL:q~6+2@ x/+6Ü.w&p6>Eٝ:RqL皓/uU әL8 R|Ke4S`j }rXQshNHvfK /aJ\)ה M[;BMEVJ0Q} Ț7ǀm dY Ѧ/7S&P෕׹h TmouKVPܧzϿvbZCդ[qa2;̵_Ѿ*O։óo/B {: =snp@bkȸ`L jxl鍏XXO9혝PK|ך| -3~S31EqVodzima;+;g c1lE`މ~A4:Uye;q <46\ѴzyߜԱV(?ziB}A {amy>_"e "3)܊\gF>GVa==WW##fYOj؜A\"FN;OD>9PF>T{AHhqzrNs,o,끨uQ pobH+.7]*t0eRjקQB>p崁è(f!Wo;v8V/2K)<!pM@84ߕI<[!a@ǘJ Mui$]`qA"s\yD8'_{ch(gRG>&@a*f$n͔e+q}^Pԑ1~rK>h]%_@OK衂0S^kv(kRIl᷈8u!Vz{HJ"TYԌtnw>0'͛ 6Byvᚙ:~PpcJY(zj4alW|^#]6q.agqGl~0CZm+=[Ƅv]sB`?[ݽUEA :m ?޽g)b}lyڹT xycI+-O,o]Gid*`,Ԡd0UF1 -÷DËbiS"])=[M2@TO5z^n*h{??Yjc@r+x^YH2Vx,йhĬlAP^$0.PKisqv%2v2u؈emAv-R@~<| Jb ʅ 4GE{e'rA×x'˿f '/@yW% c$:S2m@ܥidkImLU&N .îAgQCT9T?kIn7&]BI|"πɀ Z$uC/N#)CĝJ[C4ڂF$.e@$ڑ #7 k-z4*wf, uQs ,D!:0r<-S*~ %|9'4rEHQ51U*Y!8b: #+_"8ġKN7?dtaR`*Zh%#KJ: Esӭ XC^y >oMdI. ez侂̼[>AA_l1$ xKG1ݿS>$_Ƀ{OB3( Ӏ(E4x5?†1kZE^@ 0s:b0???G K)4y;`6K:lȸrHK4MC| X&g دWYy-;+}%9S2:e)(7$u5۩ (>1~LT[^m;>w5*1f ` ~]0'y[B)J/&xP{m~?E1?C( ?o fSZC\oӘxG{ Q"f22SzQו=Gَir*8(I#V{ӈ\TNKZXzV1ClB> jTvhqG{h >\?^['RSFbYg0um>=O޹8>|aX5vӊsCM2\f#UH[%TF? Olkc^n\\bun^Z!O)$ƠK?$LH ՙ ɼAtO uP YDZ^VUŠS"rb7e=;HD1Yҍj}jFh7MN0|zD>!?{ϛP}ugA k'Ԫȍ wk+jߵ@ >g˳T:jyt:aU FJ;I~O u9% \P4G6G3'#rV/" :h˄P [Ä}>(X4go(.]-:ۺm6z? be^JpYU;80Y(F@,EzҼH1=P+N@]Qh|QKr_!HyD@ёC8Zb\%K, W4Y*n2@-piCENzГ #&BMQ\ k̳- \)&t&iȟѰM ) ʛ [wBr#.ůDzQhթD01 Wp1}jZ9/zxMx`gXȽ4?xqEu^iHE)Y-SG[r esM"|' #"3iV6A.6CJ*o’p1޺;% )MtCFU]C3߾|(b5i8D`ܑcy0Nj܅!i쨼Č (RNi>ܺpDzv=~mExprPz͓*_wwWm4ݼ.3~>y]`߸6ly#tqX$U0nxY4r?(e&RHn}c`n_Xɯ\_jP2X[YOA hKkjglxhDSnc4 KF>Qt.~ΧYhuYo"gtWO 6%j=~q;L2tq%ڠ4)lD#4tL(7rua(r?k} y> ds;M2!_e_+d>LM]JT39uU@izƒ;:2(}?Ѡ3ٹg[7A,v kDz4* 8 ]?ۅd(b.`=/~ȡeElsCxE!+%2Hfiԓ{Xt o~)LكI *hpW`(9'$#%E_xyp_9wB:v ٝN;)g.XB1ծI!h,c*9Xmo9-.I"O? զ}cPt}?Crq>Y^Q9/: }>Vls( ffM MBI..L>J`L 3u۳; .c{iGzƂe^` 3=eT?^̳naŀ .\8xM$HAԈҕd˜/%4'iw)2"cI|:cţb\|IK}v2 I=:.$gܩvC&VLF"wVtmL;8E CvX(XLMsQ&-(6ʕBx5g >nZ+8[$k[g.z+(| b@"ξX!iqzsqaz\#ёl%ҁ}&MH ,Wz'ɻn )oj@oYa3 :Z) UGf:7!:GvD2DaQhWq.1K0O0ĉ3)3wfj2z Mf9r6kMU6+9ǟ .*jny##֊# <,AQ xlgߊMU!őY|煂.u9ԇPx{еOˁ׏)AWW8҃ ZzIYiiSJvF:*^;Snze*VMgtU8,?AyPw;3n}k@ i0]Xg>g9ƒ5Bb9vOxXKhӄǰHe,mykR38>b ݸXxİ~s֤Ec-_}F݉d,?gn=|hsJ ۍ9I/\hlw ]6} %=@gw.:#yƏ#ɔ'0H, lf8y~8*6-j\wwVneMָ +LDoCy< ]]v]f_\rxSJm:X"TgrX8jG6c!DmG=5G5[ځ~/e3+Ǫ(MGIe f"V56u Ys*;?ecT {ԓ%*~-C7&+PQK i$'嘟>mh)'YέLkUda{P*i5zla`ԣν4:r%ۘO 3gku$faG_q k AѕU ٳ^uYXf7…POyN7:Q:s &tZ 5^ӏÐܯ=^PZJDjYrpzmHI%X/5K8łj.)->^$R[Pc]#8"Η_MaU-O sϛZWفc\}ecE!|1ڐODt½i/Vt+H@2~VDJ-OH#Vͻ2=9cLhNYQ4/ 0`|/dDIR=k=98U2)KHg-eKQ\vy9,og+1Iw]cۃ,fDs2m3A&{ԳUw\E,*5j0dd-M1%D8f"d]_ȑ2|\v6#z`>9)/ziv/g⥢5,/#8CrzV}&6ہesPñ߭o$A бg0m9}Ez;]t]0q5/]wBۑ'+CJLPV2Mk\umi?'[.j`CZΑE=Cۍ:ބI! 9^Å<1U W%mbdE& L%nD$%pd( Y1նANֲB8ܣF Rn%>Gl\\U>a""w 㘡P{?`oJZ*0&馾_A/Ўn̈3j!{EQwռWKq? [ejYgj PaK[hHU>*=X;Htn7rA(i#ן\\#Dl#KBuH,sJCc&Bm]lc u~#% +s% 0 Ωea{//S#{; tF5+.[gYHlm=X-̛)(ZLu?47Czڙ]d.?|-8K̹h)аZ\I,Y-n:N]\  $%,k5KBRdF,4YGx(Qyl?f!թ2LĎN>9ġA'`ɦ?C [)Q<7ňN+[M~Yf>rgo^M7\ZoCY/)ݝWBQ2NF@*6{shڤ2R KKԙUР74ײYĦ{h @BEHU䖵4=BwbM73$ 3@7,?LTUEOEwY>4N2 MsL>{AK!#htΊe 75vtlh#ڕ*O7"_(XmFlCZ(4ы02ޟ6qxg ap[MI"õ|e!~(~]:]kjQ{wPEbq;#V] ]XM3~4{)y^1;_uV0Lz̿たf8a)3rjkas氘0sMԗEw"\`I)>e.p3<5#ǖ=hA`Y pkN姴ܭF/i;hA;L*}&ĈFT^;0ghn?BάטIK)q ѽzU)$Nd~ Qd@+=ⅇw2ZCx ǐ sC>ڪ+j=m7B鮪rZ%oDmafYᅚLoNy<VV y>ߑxL]TJ;(Y?ŠqNdԶF(XXrĮYU\,D+.mTRz[4*6b=Rd42.Ne][CEեTEJDH-u0nsr [@sNr wcK̡kf2gQ>;4:I9rBNZ; Dt R{YR[}.H TzW:צ[! X߲;Z) 1?լ}_Vg1 lXP#$~XߒS j$zֳe&!ĸu'ފW$7f~@ NyjsAI.lN01/"iqy2ݲAuVO%srէц(78z -'>vu# 'r9 +G?C~I֓?wM I1TqOuy EeHVHpN ݵr(rz \y͗;c9U@6@%WH3/zc-HD%I4.]K cᎈHY0V^WQ,o7r ؽ_4(ɾ(VB?|93 >|4UQfƿj>Jgv&=g+=oDƌ̙r7Z `0* ͌#c8MMj|6p[_hD Z悵&#D|t\xL‡}$U_5q;:n t6PzB l83Ԣ]i͢ QoG &Qю͕R DBևpړSjo/Qz "vMѮ#nv>;ܚRԉ* i%zcz#V2y).fbyP!Q`&Š!362!,Nq,cτ-ѷƺ7伩 Ll KeGhߘC1Gy \T2@(o9L90gtv W噍o-QlvGaRHBc]Tdt&2\]GGpÁ`AH[DrE%H&PB˘DW\!(d:JqHztw^k—u{Ng,w) \@C]bm_9hûg V&; RG$-<Ҙu0k\iR0t#X |meYxEk0"JIDgc,3e5]t R BnY:.-) ?f{jlAGP ԓtKrA7 ds7|(,е ?R6Tr'$$-#`EMսpM0yջ*s4X̩{TtO9χ.c_]U4 =[xHj%qP]HaEx-ޟp8J_BM"?|f?Kq q;k{U{ j81RgǨZ(GTW- tI_<];X fB M2$>(zN1e&<&6l}B*]3ȹ~~f Z@ߦi_-]*IQgfqoX#hӗ% 7;Ӡ}TЋZZ6Pyՠ 5$I)Cw ig荀GĒqC_v,/uqNFDm!:me-}9c6Oi NKc&aM;'/s2[_dzIn](td9/,M#ĶG#_ yu~k }4 Ùɏ/iU}BIa0wFcc  g'!ݑ|Cc w s%Qj鎥{9^~eGH| l쀊J7tmA|ZS8q6f 'wPwg6X" ଌ;Snj_+מuڄ;P{p x>V__L񍗮 ܹ^&?R[]P)NT]R؜X`o4.~[,g 6kzC 1li A[Bǘ<=ܳ0?,V-C.aV,=BkyG6T>ĵGƏ> 8^<^` #-nRm P$ݶq-,{RR_V"S OA;L{.`$cFzOG#0*\PKN*DGBM(rMVc)5i$),..p [Sڿ{Hkma.M7Dg2P+6݋pM"؝m3ILNbjZ %-rv/eŮ=QY9lr"&E$R[t/PmOP;a>t8Z\!TbmiK>•>SEny?}(H0MJ},u(?^1Ϧ̸Mt"P"k}-]ȍ%\u #=1'5i=w!pXkg}M;;ָΚ Ƚ0Oda.e0F3tto8^٨I˷AnǍfH_tگR%6H!i%ѫ]?np.u~u5cK96[1=5._ߘhȸwu|ckVc}CGV.m%{aW7V9(Z!V_0p[EuvR-PU$W"rհzA`&2={tN\1?$4XnZH"n,X/jkh0ql>rIz'%EV.*VOlPeG nLNwzY3e痭%IoY0C Id)[e2Qྔzk R/$T~΁O$B*C6mW)xai14B<,ш=1@IW{Nf?F{c`W+u{ @ߣy#Wؾ֩+|3#f@]辷xȦP|ۮA_ ɧmްG1{lN~Ͻ>)P2Y*mñ-7SC c"s?pE')ahYRzSzz-4w#KCrBg^a:FIO$ E}i14czJTj3=djNs$ί_ 1mH&6}_˹*]'!u'^B9fxv(%ZB XM*r Gu`czgSg hyg_˕fEM)_I" P_.X}+e؜1EvV~%S2%;>_1s.~(p"gC0|B;>HNI5A'T2 K-eCk[ PO'bFcF7CfX V Q5u"iS^ Nb#f]zmdp{L`mat=@E~L1"OЇ&x&A"oSR9jH v%yz15=B=btEXmA!NU<u'c|7Hhm u()}&tJ{(FN R$5nʏs My#bx۩0eq`v K*Qf;hD ~/B]xY"OwsmyǬ*oh?/ǏBGdnO OlqjQOX>ET\n b74b9."o."(P~mϼ=M}/%8Xa3<h1mp(7G:kLeL_ ԰¹K6tp*–JJf^10++:0 hQhK;U8$65|[HoZf+$mn"eVNozUcз@i)Y<(ZgI :v 8F|#tIDiEOI3`G8 zW~#XEɴxo19Mfi-?XBҜ&ul0KnG|W)3 \@вc"NdhE'0dϔH}dT[ RVP(,&iQo9>ld+k7"}T(|d 8K@WФO@Vq`ABd_㒐Dն<k2HHm띥2AvF WOdo7k fN+EB 2r|tX %ݶ):/pv 1o/%/0$18]Շ"*:P9>wY.a^˄A2RHN>?˶1mmq9B9Mm"玁:)כw ezBe3.yƚy>M;9.e:hx!lL;N. vrbѵ shQxY zԄAϳRݨRΰѮs?UVNf#KoOC=B1d$ao rpRo+},g!chԟ: w,Qgyg9SS3/.m<(Xvj|,xA4\ɂ s}>1f p(hVH+e<ٖ痀 HF.}#ԦбW)c}R{F_SR b#.OL4d޺8SfbQsk90fcy_txv;k6++ 3-%`eK vTxwE/{/]yhbc[ҜN૬F_Lkm[K}gDe,AG^u [߹Lc6 AңI!/Z|\* {a2IA5H4Ul'+uIjXIEm)sa.TN!ZRW>wZ0K2Yv]2/!P4T,w٩&s14w$צYIhulI:n JT=r-O\,tW~!5}:KDQE>VvV*9jNiZa̘?w[bۖip(@wU2?MqƷ4旙q+=VF^\0^&3L>u$>j:>{r[0; p4* %pR%w PCJSB!29pZ2 5yI8ucu[S7$15Uv/wXXAnxF燤8>/9z֩&2< ^Sw~9n!wTw,p܀O6/Nʓ;y'l 4m˸<޾ =d,~#%BbaZ!Q0Q;BsQӥ˾ *evhQ +;Y')S9h6^P2! n~PK-׼*J0U䕱 xHr,,r@f0'~2 z(/z,>`x8n{e(| g}Soޘ68Kۀ[  sZq@w3ˡ{Ҿb:/&qa~}H/Zy%0Y\$"t(@d{sϑhMފ |1V%fa2L6h1ꀣł7^5Q|(s<K"2_@fpt6gB.__ =Ï$|_TV1Jc)jIv4 <{Hl!vT¤vWЎk"%z,V}?:=eӜ_SM@%fuf΂N.c3"Ey\9c69'$"Ȭ%lSL*8380i/7~K21l3}%&_糜Ufl?0V_3\?Kj-Qḇ)l3Uf,Y@TGd,^'t"1FX>ku(ԤvfZ9 'Л$chpT)$U0 1jė(<iw1+ E;:gn/A2ݻ#lFB} drf'~<XuK-Ktw!x36nz8Y$C'fvy@9A3xh[R:YeOBgJ6yO8xWk/*qXc1ֺ0Jn5o :vHH;/9'>,1Y#LiUEn*l~g9hJM/}Nf8 R0vZp-">XoBm5|_&&%[`>LĒ0z[sH<"⡠~…˅5(#V[`!3hwB{4l-SVZVGvl ^T B{+Q @VRSY׏A!$Ȫx]WD&Ӻ&҈Xz hC13˃!"!g1l#dN2wdgoV,,/_;J+jxGFe`tH޴^MJg v.U߇#U4"i3U {Urc^Q719}Q*BX.<ٵ5Bt޸Jb-KzabAŗ.vB6u|^FkI X )YWzE9,(`3/+&EP nפADΣ;YĖ)oi1|i987cP%^JʊM/X@yDC3Q=n.3[o3G ~AaASAwL3qck].(\9M 3C :b/i^LR#`b!zB vn 5opْ %&'tXQ߯mÙ#6xs߼/1ɾ舷0&ˆqo%؟=~Ͽ$U}L} 1.[=& x&lwdkΪq+ϰTT,R|1HŔbC" ċJ0*U+Hu ^w3k\x W1o:=6>\8raOYE \BDeX`&:aFN|}j 6ȪSiNs}O[Wk; MUȎl"wEȋL&MDt|vjѨB,gvr6ŝ]` <*luK:+Bdhs]VfrąˁpTGb`@-EaϠj NX(g.IPH\_ˆtbr̪z3iN %$;\9,ȕ,gPBrv %44jCLEY&hg9'R~!$o՞JHoGCT3p6| d)2z8dh|tj}$3qWdW+&4b<HX:C(RmtITE&֨2GsͲ>{cdMoF&RdAIә ia9)ӿƒ7rxCB<6N )nM=X& $J Yh!DhLD;u õʋΠ@*'Wݖɏʽ-w bFD*#1c%8yn~ny#6҅vZ5yEvBĬ8إrPI-w qv?#ܚ΢)v{>'[R_hu"4մ~Ni0y?=Al>$U# >.dls>%vnu?lSXhOኟo WF;sQվ, WW$_*=jiks5" p킐|txZiTzSIš(89xt6C`H=xa  L`BAJ_Y#9)Dky-]`=E]SJSos![Mn- "<~Aog@UR&Z`q* S]=D=j``#ubz<х^LUEp3U3tNr+2Fq=8\HkӘ;.k]p3nN!^]p 3py='cpeujoG)a2+%/&w^*ƺ\[>!@dn ;'p-$Bn?v['<=s k>Bٻ"i_9= x9/]1HA3F#Cu :չ{D4ތH6hO!#wq |32΄pJ~K뇰~7',)kݥRHdKV$׮naVf\|^jGz0-_7nE~M/vؘhԸoe(}F ?!`XJ 4 $]Z9: ʎUH+\Yx$T0bDM᪾_uyFVu7NN%H%r_5 bdmC :!g AzI'Ҕh]`Q˗:p^j)Q IN4x߄- e79~}fㄛ%XgM<)o/ML)~%t4uD(8*Cb8< Y_ LZj~A E7z y-#sȓBˍc3`4dmMGl j<.c,06xq~aG 'd\CHTr`*dbp[!p@]3ZĐEc(J2s ]IjJ{-[a\ [/AxLPyN XW_?N/weO@Lxq~|d՗J&sK k?}"1K3bBSR6ܓg\;}l ۀc+C xڀb. Of`$8Ft]U(q̍wO\DM#b5uhxB @٢k-9=TCY ݟ:/B O<}S7h(%+{IIuXHD`esEW44ED`=ySd=WU9M>?{v: (/3NvdH>GCA(f%ϗݨC akPnpA1 xbizIիNW-J_ 0"R|@;,R*[+(o4Ǒ}jpo&ίIuNM⿃HP#WXzp +Bх|YA~BbzMw -[q&K*8y{JKZ m_]ODTy,)1a%G,ŖUTiվ/P!X$#kEJ[r" Pߕ?a: DӧHWNi1ႊhdf`¯CSFV$kN7= Q,%9 H`5`Sh23/bY˪1.'5L)Gi%Švw|a35g2YZ8'?ZK=`{KcMx}WgS)+/Xx] J'*9I<6qb7٦9&17x6~oHe6AGΜf]P⻂24򓆈d# CO| "%SF20|f?y2CL@ U0o%ek!ooE ' ˓ ;tp/qu-`4nEjָF~r-hImKSI bF"|u>.p[nUCkl>׆P$wX%ʠm`bc@ٴ'Eld0]{fRߺlLQ6ߝ#\n[rMIMMQO`S%#(} ۈ1};_S©vr #dx,%;tT=Y꣢ZtM8W`@4 t^ M2QIX~/Yr>DؤOV2_]V |"۴bv5} ?7Mxrpiʤ=YPMUqB:3,ҍU?NF/"δ-/t zq:2Q&e.Y1g9<*rGfn94bױ`!/b0v4íq2 Ӿe;xdt*ƆʼE;OkƱ4};Dd0QId-!>(}I%o6cr^ Ӟ{< R5_hP]L{*p} 1et'm5<9V5eRhJNGq"j;,@B( A[Fx>{@iO('S5ROzuK6,Cӌ< caƽxP\Wg6Vǀ,.ܦp[[NBH~aHg-KT}( mz??3x,>)h,&`pD7>d贩YEkXN275V̏ҙ--}n j!$ TDLB]95<ߠt2.[xYW([X;=uX^śˊ31+|[VMhTn?1 #a =a C36f{d6eV^$,`0X|g~YR0,~|d!)fo)}!e\Je9DdN |^q4S| 42' ^Q6V(g6g ey"j߄8]ʕd`DmaHfGqLĤԲXx3q)ɔBF}3]'d R]sps('#i?.}_J$ i|K-vЖCU.‘Yg{lDud5ǮKR0Giw o8%E8OO8j<@b܇JCcvǔ-־&`Edwaٿ` Puiڠh OCXҵ8OfV n?w;//I?K[S5CCsLT-}LK W$BCVPݥ61H4VvlЪ 7si)7C~DaR:Â` imJ]g@ս> i.֟)"Sv޸pɉ\f!b+J2[fJ7wN{Z̲+a37Ƞ',]?}4gea׼K*r:~ĜCru!Xms{vE Bԗq忊rU|ä}fCNq.WϘ]dXWL>Č:kQGuҤe`z#R.b3{ws)V%9;ilt _EKHT.-ʓLC mH5 W ^m=Z s/ėyEa2 NY#Mp164eu-}.jI#Hac$ɒHϦkQIE~d~T]l9`ac^!XmOҖw@͓it ' @E+FiqVٹ;7VR,fqA">F'Uߢ݇diE`ӅBY)^t2FJ4U"p]P3_g5* 1| NO?ih[:]̄<1˵B>0O΂M5cܫƉO MZg_6zb^HUH2BaTiqPW뿩ș٣*p MmF&dn;ΐ};.+  A7& N+3- +V7+I\Y>v 鎨C<\)W=+1d+c0-rZ{ PҩDF9q3H<*%&;~ݨ/Ic"6.ë;8}Cޅ\^6\8r"+4 L\aw}(u{L?$%vb @ R\bɒR{>D(`Ί1r+)oU\}Cu+ߞƒdEHek7ZBv4G+u UfRQ^~c*@jܯ&ޓD3IG~z,ZJs0 `ÚqqO @ oW\-D"i2'pm\{MJU5P6D'Imh۸zIwxoSh *~W|wNwKd7Rys6&\Bz؛@4f&r%܍I h`$˺^h@fϢ/2Y$K@H/xW¸@>! l P5>Xpn4=2O["f2/Urw5$pjӷ8Q\n]! l)5Y@TV>t$$ 41Fd2,ـw_.&p1dq<:!#XrQ$#ñT"G?&û/.A`yLARkqaT  Ɔ@x<{g1#Ugy7u] kLb]F6bġ?(*4ZZ x I*љl?|oãE_XSh=9A!PAQ0#}9۠:SyӘ m2ݑ*:ph3eF8U` w;jA= &8K jPcZ%C?1|^Z19BT-' x=f-^|>ZOTK11y4u[m.2'YVv8bŌ{uFy4n +wYI 2if >BCD6sSMNQB8a\$Wa$ƥ'>̽-7buXx_Pv7壋"b`đV16lrh80aw$R?LeHp ?b0WI/sW)pKeU6RI AIC3|90܍{<]5/br C9`?$!چ7Sk &N#)LL=x@bO}3/ǟhviBuAV8ˬ #^5n미ZL S{e`>'/ bgC9naM54ՌUnj'MQNcR&(~'?59ȯh85c *D񎓭PKw0k Z#N)4z:gZ.M[ƧPhO+Ȍh{bޅ?h a3r#2rFDd^&d.p^~!*m yWS}(&bsIuQ(OaŋW67ؙB rm} a9Gl`QVX93! `q* eL=4cӟ] )ZG҂єT7{Q7H-[xm =Wh\=KHjG- -sU+_[ tZn7(ASZR $ӛ$Ob0pZ T]#p?PkDջu{/g0x{@(+yXK|C_a1oʷBHi;O(G\1`u.qw*bY ,cM O2; P p 0cp|8vYwֽHNOD`Jljds'5P^ɖglO8[U;B\FJNF`٦<* tSҠ42!,@L@8y)șWݚ3CɝL+Cվae`}_1b*:XvV9o.ZT""XĞJj5H#bg+V ?"3#ZDd@Ao;.L %V!w^Zn7xL%=Hjϻ6u;菰cFS B آp >ٽ 0ЄVg6D\;Srn:׹$55x˪Ŵ1ͬNJ\q0A{9 6¨^r\nf1 F|Vy}a#[çM,ir] ȚAp1GVgB?W;&5j9ؾ7pvT c2\Bzlۊ.@hsNpu e۞"B ,OcE4ww @\ Z eTCǭ+efR,\`(P 6Z۵6 pv: t6N`{q0Qک2S/KTmL0i!0j來q=Gl݋+V . zZ@DVxDaԱ{ 5v$4t4`$RSWe @'ˊu!&'1yκ8]?q^_\O6A2^z<ѾUնI_R"S6p%/5NY'ac+!kbL#_Gy=*d VCJM5-!<66/ɺoT4Ę#?: lm&rxI~j @ u yMrkL S%ٚ\rnj_iǽWI*9 FD#pLKVvL !ȓ|uz?sUsXuO2ĪB9\W bh)QOcCJH8Pϵc{֯2Tj܄+񚸯Z l>@|2t6Q;TGKAĄ1eқ[3&ik|l։eU@erVt DhcwFG1"Ye9rU{4v$SF@HLj;k/+?WsSAy?k3OnQw9%|I~n.$22i=lZ}'ByrйGoYu4q&'؂̟O]PP1kWkbobj0 S Rt`ksD|xgB ^LjimDTx4@ \>G,|'ydqVm*۽s@=:';?wKy-1wQ3뫕؁/=[q8L8:A;ora+t1.^Yu|Źpn%ͺOֆnB х"}FyUk(nL Zj<171n4U](R3<ڔ cֿ]nq (uwPPBJg17jN,CG'@v[[>Y5'B!P~=$ 5oraӉGV+\o *օ5|t#_<@&"U a7!"3ScY 凍lVz}B?S|>oh?Kqy 8s%`Wp&:-1֎29­p9,Ԝ}6-IDm`q:>g/w |Hy1 #DA8j4)ZWy㲚E!qKj-lw6 8n} pziYGe >}:sEy>oX]pj jڏq >Qj&1'+g@Ƙζ\0D𐆺.<"](fH[{%Z`*1G<_$4i<+;S+I^g |P`AmaFahh>LFo6-,;!쟿z\h)d׆"]jWd!׷RgiRH:n)s;+|p /b={AF&a/Ou ܥ~SD4f1"+.-pܺēGbiUʳ!G3O "P7I,]1?t8pSw-e|3I)iqS/yyb- R"5iMuO[m{xb?; I%!ZO%"!txf7` mfzyTi5di5V6w^YUNo1ب<çaj-VkNgR%"]~s'- Ic= #1Z:ѭM>HāPNû`%\e\A}>{TU};| B7H@ԛ>&|?,3F%3SaĆ9Y %O_y @s0C7o.W3LWƒ+UݘýP3xUTL h4F#+r+Fټ59>m8FF2vq@tҖk1`K2?U43(-PŒ #J\c瑓U嫀9R/< BtwFn] ll0Y} bOW ܫxD K #b5EPZ r1O]jrlYi[$[LQ {x_)ҔgfK璍w\p/s\N'S1S$Dj[Y6SP/)ÔHcgj ήefҲSiM9qOn2[cSgWrQ.ueovnhml&EyBW#3skoΤw!3LXW=QBo85@ٜ DK,i͆f5n\)Fۡ35}9Siڊ3' ;&ƒE$ B\[˥ivyӹ-~",")\R!ZTKU9(ZBzY58^fUc1{{4q+3ż({MUCbq-Ow n_NJ/ +*]'%|w4̦+L`&쓝0]?t: =(g<4 NxSB sploɧ!H@mjנ owT;xnaYs'2#qC[iTdeMpɏA8η#h"AOr0"/kR0^M_ќqtw*#[HHm<ʢNMY]hLd+5ϖB~` =(ax4O֕;z6S祐Ѱ};o y,Z9r8J( DOh S|Wb0힊ED˒퍈3"`0Yky%zAdZ!ZbFe$M-j\GmFt!.1H"Xr[d) %ZI7_q/{42hGKsܹBVtsZ/L\PS0Dl%qMi&@CQ_(/!QltQعjGao4QOxЭ+>?G"ą6u¸>YbR6 Q޷@$;eak&Ȗ ª'gYM9#d;xN:#&9,J*' _Z}ԗæنąP?J,WBh7_#8BZ_>Q{7l (, xWf'oPr۬l㐣cwZٿ+ ˝U8&(mZGQkWL}&Aǜj@uEDUD@xON,rG*}'K-\P@#Ny-;5J3e agGR⹂Q~Jx ri@}%IMvGeRJT/88]d1J{5}7FIw}abhcªEz(%ɭiU6@ѳZ(vT9JQ"d͖7fj,=X[[6h E_H5F6ϙ6Nj6p$7DBo?(0$-.r ;ײg'` uJeǶ.{_| PY_L{بOi.&\KEEELS@EƅȈ%hXrȏrE&Fr}u.=ZvDf1_D=cbi('jMe A*S[HA1DSe=V3-#pa?_TByt!yCym DC'`6shr7$ᬲ F!ٺ~ RͫWbw>@0(JWn)#An@jq`w ROOs'Aa΍ܦ&*kbEMċ'H{Й̽_%6]ޜOb,3)lce+)BΣ$oCVnŴ>C0#As Pv0{rY[A`y;?\՟}PBʸ~]Nǜ" K44t]SEY+s6?WZ _%SnUH M0fײhpPÞfd24aJ$~E fy} r0Ļ|z>Efe,auI?W4{RquÁ3րSa`Hlo (9[l=h4KZӳF$d@=72lnm.<9|JQ֐AZJIlO/O`<, ,h*pU3mQ.@v+y$4# ,4$eWw'Q>ul'%K͋>ހFvu]uQ\._a7y_%!Sܫk?Z,Ȓ ?OU |qXR %咉$.::xàHΛ6Z<8M3{=)G75StLNU/q>0Ƙ3{S[-rulD; 7vNf/*. ;3hc.,[sVmӒnATE4"+/K:;C=mbotUG"J'_c"imVLĝX⢲JR?g;hK8Ilgbb'T UcЌ;ZIhp#bCxnj2zX j(xfM?1G%9%&dw\W+NW'ӆ ~[|woҘӋ5 T~೒km? TejOLF˶CNjF:&<ԣ8%"s8ȓnJMB2k1d<0~CqbޏOnUjNAZ|m+"GX']!%M!}X9 Գ,?ez>' uKͣdd'~HlyHռ fy) RGnz' R4J$L2a>V)!ZbZcv!@ȢrWBXIq@JM!] g|87苩}e,.gZu>U}5l?_v8YIJy0TIdBgn2+DjnЙFq_mnvsdVY;mwV"6(K$Zb8j`&R@НtB2Ԉ֠iz[;{wOD6Q AɁ+%-.d!"hMߍ,bPˑDB;sc@"vX#3y H-h_OxV4g8(68~K>re4rb+ZA{Wmq,nuxceniήE?Ȧ!rm2I*=k&%YWV,X4NwQ-37m\ õ4QD֬M5Vq>!.;HhA-U$|-nh>Ja[G*kb..OHQn-AXY^k4ُ(  8T[eYꄪ4U=EfGIo!w j! e쇅qКxV@VM$leM҄Vj]ɕJ0["N|%62o6$2L`0W[- T˛❙DZx$ ObF񠰸B nXvrmfiF/ݵbzgxM!ВR8!.(Nc Ň` l>wVxy?Uz)ϴx!߉gI6>ENJP aUx[j╔`O{ލ9ElYhj7E/dNG!g/͹lP'v&m]Ip{e?.P?Oi׼>]?c+C+WyCdĢ_c@)1>obᙯd!%EYГb?5ʧ dWR գPC{9Fm6-3˦viAUT CqKk͕Ǿ+>:7_]OruGΤ|"s7U>a9n2!ðEPMWq[$Ùs& oJroj V[KEA]L,~D`bcR2@3#wD60L$ՌyEeA\'E!ւ'`gQKʤ)|uLS}V cҫ3P, UJ~c@G hc4yŚzLWx1dhT>f_?ȭS+s<}EEuy|>YRqޑ؝ؒz9 C8x!Ĥu9{{/M?|cX>NLm<_Q+v bZV2K^vrÞ(ת`y_~=] H/'}jO6߮*wkS.b,gUnN\zykMAbǭ,Pg 7\Bg)w8>\l}RՃ_;"~HH`F.T̒mZz` -c|t9#/fP.'XbqnFywaCz}k N{ Q~g^$s)5epjnܴ-EFEpF);n;g8zR$fEn :c˂v gt} %Z uY6gCGNmvA}B4=oWKaˍEÿ)z6(rAMxE H,_?/?uX#MYgHyVbԶBbM_3?.ڎjFtak1(?TϔXamXTݭEN2H T߾"+oim$6 Sd} YE(;jbkQnMMhhctVׯ׎v]/cwkċlK&> I*N7jE$wA"d'uذw kX)GOM`Uh{Q/?ZbW[5^~"έzA9OIs=oX2ie=HȺY (ɺGRײ % {wx$:K5y bH2%: UsΣKr֯3ޣBқݬ,Z::{_Er> 6xm*D>$* 1nڻal&WW!QJ+T!K}A J._zV$ (5;&8 5oÈ>:2AR kM\PqCM=̎!g1B\R0ND!i?N㺢rsXAla n|A13UBď$ˇ\y4!H/ 6m_.m$SP60`餌$,.;*0lM^`k˧v@Y6{Q}F[DڦR(㗽X8@sKW\ f{ Hсu_.Oɕ>hh1tNF]#d]]4HxyyZDUҀ2&H`/|<y)v0,(!hӋc[1;9 t!l>'tJ6ehAd?>7PoltFe4 '1iZvo@:JWg'z<*kʞ~Y͐ =nEf>Lj 0+nH5X*~ vPe;pKgjk:fb*B}mEQ'Uwα*|kkΰv>. Q ?6#(9eS7.{%vy8ѠxE-f*tIl*qd*x_C3:h7;DF:sr` BzrrbBqB5e\!G!G` Q(5e Utʷj۷B Fi֑F=}3L FWb2tX\8)>(n&U7KǎYq/G$*(>>=AjmQD׍mY>HDF\n#fa:SJ}9Wqa7+$%uC4t CWf @/\AK=q0%L&95jY- lk9:!"աQ9ml|&buܡ@;^UyP9KYCF )m\$P\ef5S1D2tB!ʲ4cƠh RGBI; nL1j IpPP` O'!4%U#gٿy`UmZ],#in$ uZnU: k$!uޱ2t???5բc8f=|hG/7./uLJ2rQD7GZ*h*D~ñ% .B٧CuB('Ouφ4358>F 0#m; XA c-EEĥ9lٯ૿sӉ47Ƕ#@W*HAnDQX&ç̊n.-7.ث7B2u+*&vS_ ŕ_D8ēD {Ӫu)nnz-3zs tW]xoZOK8rNutqP*8>sѝҪQͶu PKULn kkte*FBKn o*RxؼpF(b@;%,("q7'зn\Kui7W *lU :6{,]3)U {>׽mJE%Q0*`!0˼g/&eN̽h-jhֿloP{5~#Ga*8Vm#?T6  Zfq_H0R Gw>ƚܒq^LG5Or.Qʈ7uΨ6dMRZ9ph4r̜~TGx%EP\JNe糙zC7{`LhEhxTU.~Ůj|2۠Ŏ%OgG j);%@a "QH# &lw4;k.UUH4g)9&K{gp[IP(ΠS#3GtP諠" ?7X@Ã;Ww4*2ZFc@$"3[du_H‚u O{gK%:gZ3S-ʂcnq/2SmW3$y2l9 0ʗ8 µudž3N3)JwwGӥ+? @onj[3B1gћ喆.%P~ZƥD蔈QCiM.o ce|q% W:oi )!q=d(\sЅ|-*(㑱'h0>xg/o R=5|Ӎ bL#̓/kiԕV׉ ]8<HQjX);" u K/TZٌY& 42hU b?5|A}U%|~tȚ%ѣ CoG1O|ޞ\lO!d-FBp~\&XNb#P/)tw +@}٬{k!#a.2 $WףsuNXQhGWe`y׌ML" aK_>3M/-&m-R.9 ԕWXXb=o{`j9i${A׶AqS<ʍ>hCzyg0_?=N=d e4a<.RvoiT<Ծ ɹy5}ߐ]sBrMɔ:\A/}pZ~cdV_&{ϐe EoM^]ˢw!FyqM#D@R)`Q De RZs,oAVդJ3Z4^ͭ2lEp3j8tϜR=d ~K[ot8cKfI{TaB /s⁣[E*jlaׯ%bh;|;ؤw#ufM`쑋:е52C!S{g]c{sϯ־}K~IDž:L4?.TT/XVgՊOoG$SĽxĠPiFP[ީw%ǘwNX_tF6Br^-zví(;z QSd+'}^נgyH,||W 8;ۮŵ/G$;'=+ڋJC4 Z0BO}2e h y;y4Zz#7"#t1_:U3upJ{;MZiXNac"Do HqL` ;]."pd齠;w*7MF4uM ,~{%xhoVW \<$؆WzCk_Bjʒ#y_[פ/hITE(_.mV* O) 7%lǗgx;]1HJceDѨH-4 .Ѫ&؈+j,$U'*f:6 B 7r.QD* $- w9cA'/&mnZ_)dAe(L-AMLe.qmD jO_.n>TW\sb/5 SA]C̟jUaH;Y9kx X`56<ғNo6&yJSըƯ fȿ?bc8(&HcзlzQj@ ZupgPb`#>BHS}ARx/ /;sO֍9.Mc1"yo':ok,>J tS?Ddx^M (o͑/F0K2;C QЩDQběZMm# HT-pEbnn[ϴ}ivQ<ԟKi1glXŒcZ#^ZI57 #@E >WSNrB"$ $1l'msBģ(*81Qvϯ.%e!.(F5v\WnOL?KܲF{cַTzi|K^n) JAE 3r/N}m;2,p4F>iM>CM,t'O5BKI`x+`i<^Q{t|MH0j.W0[ њSqI`B\z=bcRȠ ڤv>!r-efEssP ÏDA {]MѬML8G!DkjxZqNF f3sX3h9$"tbz(u%m$AP?>ܸ8P= ό 1$WUusKHs[~-ՂV6nҦ)pDm;7eSÐf?`s=#260m+4KZ UĶITlj,̄Lik@DѸ_qb Jzb!"xWT l\ X_p3c{ N~0-QC ckI mA8Sr0= ϰ+âohBiT<Sq&[-Aë́%t%f &!:e2JiR.%:AРR W?=(, +EL݄FY8N3si3_X1Fے8&T j1hv3tf?CwXzf<)r{;N_n%$ӥcGbg-MЃaV<⒲#Laōȍ,q8rw*"LFc2`nhd>I1|CbHGa+_52v<3?6ٳ@O{?+oW0Lebed|GwUx: tnG@WBN#Lop'ĢAsjo NnK/Q[jmT;\N[R$<"8[-Qn$xl -!P).L-`"1Y3>v˾c.ϡ߱gaSjV&ibg[Yu;ɔJm"TN6 &lJ- hb9f\" %(_%(P `ۆV: 4L2@DwI9\6n Y(OгDSIxN IGԆ*|bɐjbOa5?ڄ^ƌج YestT%^iF}SqnlMiVדf_q>_n,0M0Թh<NBVwE+A\˘\i;t{ەSP{{$:hP&\JMi f.= JOKֶDd~J6>v- p#tXRX41ӝmj95S|DN#u|%_mU'YWh{hM y.d1[XUa70{OH&>f^χbإ K㝤Z]jFcdҕXv[2rHu Be+_F[29.vίPKm|d M9QPbS>+7*JZkEH(9ܴIQZVSNg4ո]4:5S;2(ilWz~8\]˯;HW${gSWc4K ,Z|MD ES"܏$5gwc1n`‹gznBM` J?ZV=G![ SQj#}Ԫqө_3f>k&ԃeL"ŴK?wjL4T{ʴaVtDXu'S]X"F.?ԇb {(&T&jlr-SI[ɞ8Ҁx]u%Mw_U1>Ug{|A` (} hքrPBK! r_sgEj2,A_Bzځ L4'HR u?|rD[D5fYZq0 l QP+1s#’{50@~}Bڽ"az &O"JUocpZ:D(CWǐ,rwK?Y%MVEQT;s4MV([DV)zwC(tU3˅`r5U槚l!ˉ̃8P>ih`6.u9k̤̩ToRgHW`!b"ÅǢUK<#q/:l'FP-Ɨr?{|NWE`_[؁_YDPWQޚ?@SWqh((>$O2AlDj2B9zc3lO==L(Z'aу&jexr$S[,p%$8m܊+\jpQgߚz*MxRc@]#GMއ Hu?IqN^Kcdr츊ף.<_:U݆i48ne?|㞩i} Z_ l ݕot2w{ I|^qʏȚ_߁'RʮULAfi yX{uM֩ĺV 3\=wJzN<]Ϣ' hoϹzsԐӗ.~5=# 3uyeFvl$$@U տ؋QLU"ti:!鑈Fz)l9[Mz/0Ն5|eLVM9Rܭ.n=2{rˁGuƍ &Sj%'y'yAtWgARxzF9ei[K&[szz-1UWh^*aC$V/f78/?{XLB6v_L]X/O{Tyr'`{slA؋j-ƙ2K/:-R C"7RQ p-{TN !<`  =l)Bvf3;}ԘhqzM##t c`OM.Uyi2qʧV*ΐ8B:dCx}ZU_ Iw5ZQztG$D٢x#Co>-O8lUcR`;9otq |>ӇV:gև.H٢Q4}P%QzgVA](k;rf XlͼRDȍB-<@fXJu3Mѓ+@bX\<}sv4E_]<|-H.65j@B֋t.*|>.5CˠOM逜Txc6*Y%5B#XYi՞m [*8 Îa "2ieJ7h 'YhG3_o>i=gz49x%pgdLރh΅đYX(a9\C?+j.YxԌ-[^c,ผ4bmL}>a ɶGkbs`k $kB*/fܓ3.G?:E,ɫ*&QAN BgI|T5noYqH\647]r2<~5ICd`L&= 5~^u!"sjC 7n܌B+Ao"iu+Ƀ(fDy)+G8񬂔s_Yw^f1wp |ԏ) N2K;-}ŭUKY#fa`$^`Tv_+MjJu]׋Ē"Zzeyc+GR쁣I2{! B{wY1g29l?2?gE7͓С}a2%\69-#&SDS(?=~ ;7d\6@!hD^8 Gٵt<˫PS`%E4nfGk vL+c-t ˧ ŬsZf[ia)+ aY:&J\fYKsp=@%jdb4hLly@8"%#W&9+Le#Q\Oh[tMAGNwsԉc/6iT=H(§k8/y!X}p' ^a@.Uu}7ZHg¼gi_tcgUKSOMq7˳Tԓ3TT_ڸ% zx/m|àHݬTgkqZCH#L3GM5D+q]Ežpx;?CXշǃѓoMReN\WDEEm$;skх/*Qp}іrKOH&]( (pS!]i[YV׵FMH S& Rz47P ڋNm gŒrDWe}'N8OBY鱩=z,oE9_Y)A6R`~H8R~ ^Y{ 4T}׈pTo^Qwl*^eȬ-up͖>d)큠igʡ%V6R]p)IVBӈ씅H}kO0g zSi3޵[L,vk8~ ~Y<Oq۝Oc_63rLz.AHQag7=iP^ dMApjdIN~U8k`UH4u+ܶp:9XH B3g5?Gմ08e\YH).y3`Ò8٘len ޚ#MÍğD뀌vp}#Dѐ o<ꆳ w!^J3 qnk {BYZf  JXy2e(} Qul;wH߲Ъ1mQgqNJ~2t(J`TO㔸0N*ívYNC@%LpXʗݝcR5qo(aI.#o̱3w_BъR'!@ .NKʨ_ aD XgcҦ,N.kaLwh "*Gl !Bfd#M%zj}]>c[ç{L_, >L4";gI@Wbv>2R&1!%FaaƳpn1=OKu?}8/Fb}rtp6- ]a5A_8Ea$wedd B+@jl`2h̷{ v"+r@:QV]0\ 5y0=hF6M5*hz;1N+*As'x@ NHkb?[>r;zgC,6OvIڴ Tjv ӸA3C"x}f.$Y.-׫*-G֌-^¯Km=-ﱲ}~43} n3 -ȖCعy^(^#L-@0gT ʐrf ٓۦFWa**%s/ߢIjO $.e>t:cu9Tjic3JDFMPC(6] /{AO-/hufK8-R7 ުx(jTJj`y8Ri~`s ǬAT0z?bxvRO!55`N؎Al3Ϲ~W)N|s .qMwH\_[=څ !2*:qc'9McpW֞2(AY/<pF?Yb,BG4EgUDk7\߬nuTV]+>"]@ى8LVL~7CD Kۦ-Q䤝X9ΨZd25~d¯rT/{NYba-x)^v]nfǟϭDO`eSD nnY^5?]H.빫 f< +Fu~׃*S(j j M.Ob}CF+b:5R2b2gY=@_q `ej}d;ѧ֐kt=N2ʢJ(uzB7`elx+T92Pmy01aFn):_M1bq-}:!kܣFTI0'3}奪C6)"rT¥:/Wr5:Lk-m`Dh+/YJ$6o'߂:D7^SM&b6c PypxiA "cZ-|Oj!a `ˀq[֩շ{>?K$P1e +$ XG8:O_FX 9a]e#as0N/XT0ؤSnkFd5OKqFw6]ՠ)hP:'%5]vۗ{i-$])lI5ƛֶ ,h/#UԴh@zRi%[WaTs#+j{'+V1 #I1[WC (9uV (dЖ$T,h`tH}rul#њĤUۿwHڸ "gAGX(  6e ^E(.g 9ӣxN:2IjlاAF|x_qIՂROX"b^Q2طn1YON: _g 򙅎I˷'WU0k4iXx۬5B L 9)a<RVim[tEIQQe@]'X* 2"H.՚KD۲ 4ͻp+ąԻ8+w7XFZ+)2-~ob{ѹש 9b=a?^p⎝s) a~@IYd<2)Z<#yBgmVr:/<>[[۱P3IQӂOD^|)@o YYCT{N|66WP S ߞ@p;Dkj38 =k6H=jG(Wz/6w+p7r(wuZIr-D. $ekU$#kܬå Zdjm eu7mQ EJ|şw@(y(wOH4puztnhJA͖^IvͯI7WӞIy(%U%TV Tom7hϥtBܕf:w[ws`6E]slQ^t@2*K|H;GYٳ`@N'A\M̋I+SkLdMDB#޳dBW$^F|b''yeY#|QWEʸEdTAW5 _~hW.kn, \9оbc6Jf3Ȟ8KɯX ̈́6RL:#1VBIPG61  J֯؟RvH KGKP禁_w[DV'XA0A`5Ϸ(" Q:H6|I4\=;0ZU`9SYn PRuLFPNΓ8xh@^(_ v·ڔ ]B)P[#IR}Td*yRކocH ؐ'Ԡ>KիPS0j+YLo%R*tsW$k'LFwٺޝn9W EzEy+b 2\.vUN6KHڬ6q հDm_vHX'>di%[҈Ga,-߄TGW!OAxБڢ`p]M5Ca ܢ 7Ϙ;zwf/#>2CGL{%"d8.xnaA2-VBP7ӣڈسXACo8vʤ 6ٓ *!\Qu=1l}ܑdgՈ֧|$]S@Nv\nȭʬU/Tx2"wQu犝B )AOiNB%)䁵3*Jzu+X>ߎ?#5wjP`vQCO吘 T#8P,wgJv^Lvqѡ)b`xz d*[Wu{La2z$[بbkoC?!x;}SEsHFkհ>-Ke˪[sʌ|"Z4 L <6y@)խW=HeKQ.w}m0 -&"u /gc$|dF#lԒ&pa S=jRS`HTJsv#|x"?d<CHq5+wYC0-cs{]`Hf /~^HvTyycĞHYpQx7'rcǏL'-o8u2/:r7ɑ!KѾ*fR2fG,!ohEj{(ke䗅'#Mc,F7uZ[ja\Ib@zW\*"ִ2z8yҤ_'6k }QJqS =paׄe@@tSa0R0(q^1tD#.)EpUn՟iTyjiٔ۷aV掠x{酇*O03dtjKQY&%j`2 f` >̟AG#;)$!Ljw6@ws7,s_>^X&WG!c]M6)}Ac2ӑ yN*Reלym+hi/r Gt FkىY%2Y6ˁdV?sf42+({^ݵź B Mfga i\{3zTޖ8mwMu`b:bBTV6tљ +fҏrP6V+a̳YQwx!lɳri G.8-=sgn? {%@%y卑qusٝEŮI lٍ`zg[ĺ\V-{QcDf6> W+ߑDόD#_ӷTM穃io[/ҸFl!'_H B? JP̲!P-6=co2i=0bK9ׁImHȋhTLLdP`.u)dx[.phǶ?Aiʊ½4MX)nbY 눭2^$$BTC,Yw5mAs$K'G{8#b0CtZGpz+Cr儝'ϬѣUcZՄLCXi)?8}bWԟ˿}'hn{#xJw\)-(2Hj:`߫=G'&lx#F$xEH)lX )!H5nl]wd&$oA=/4 (L%UCrwp7>d0_6U\QKH"l@wuƚLֹmoK5StF<.t|gm {aU8I ĥ(J(H{dEQg9,<⇅m_B֣NciŎi 13\*a㍔ TzsuPdXKm\s_BFt'dloޅ:_@`ZŻbQ%O8^J#z6#35$"L EQ9p]yfq/CjV#;$ӖukefwOB] s@ld˛qA|նȘf_k*nǠc'NmDsR$U8_ U;;Hv"(ϞlO+s$vkxH¡{$fm[<'_AqIhY~"H$dnjϺ)98&%A0L="mf4Bt0˳?guxC)nbq%ɘW~rO o$ }i:0D2$3+1K-Do;;R<0C+iSdËg_Yҭv¼n*Z`.E!MS HPvj V˻gt< Q ;t5wO}cڟaL,ɦ4i}rəl&^n'76ފn?ՄdrJzvUD@HAJ^3}s#(s {*51D_sTzԇ4e܏JE qE2-#V)!2H"T T 3wDِuEI7 Q@]/<"ڎLD#dw3Xo9IQm$ڕǾC ӫg&/[[ߐDb;I$]ym/GR+Lt;͏mZC*bo{6\5!(U/9|˜F~H,oLl*n'%My?+!u9OJ"d]VIق/0_iFr?,ɲ@͟nMMNZ┑j啕HzU߀|VʪیbgcM^Z}\n;#>'=~yۨlX2MHbƭ.vdvq ejk[T0lիU47p#z9N5Кω~1Ϣ )sUMUqO@BR¡D!)fv.:`q*dv^ 2}ejS}_Oyҙ&IXZ8kAeBm0,陥(%x'Ǘ!{CJ&[.oJy(vg\匤.zvVmp6z vn>libMok\i J%mF.!0foX4Ep D.QyAmĐ_ZGgBe; }ǥ0;gPή y/;֙Ry%B#օĸKU+')[(OF:LCkM8I|/dkTWkdԶ!ϦO}kd% a]P %-mn ˊv[Iceu 2k1^m᫩mĂfw%4sOHɃ_!v8vDo] 6tB_.Huo:hËwa\{ NrUv9;hס *̰$/U)*)i)1_@8*0do6vA" ;GYD|k֧$0n^c "q̦X\$Ŝ]ڌ5S73 0gm:neGQ-3{CA3mNe.m6m v6Tk=G@qwehs,2Z { oh?#6S1Ӊ"V\nkRoriⶫa@xB\6WpBRWS>;\=߇ %tw,c xXO((n R\j1GR X"槼t 0BWT#f|D)&K=if|z,DLڲ27m͏yX9 IRyTj^ĚO `b4 fe.䖂^P) F}y!ՑLT)-`"X#v=zj'$5MO#>t~z[4OuR/c1Cf$Q>UIq|M2UZOBjX#% QUx:^GfM_t87:9^'F-S|/0}uUepQQ)7OM:^g)q[^ޱF E;wul8$8=C1zM۵:_oڷҤz6>ixiG=he,z1 NQƄo3 Tw}E6$`(81h jQ~az3 V=1Oҗ?5;u3 Al;"=hBd\3 .Aw3j 9{yN2~kd@[8Knc n1d*QMM=n Mex|Fo*`/4?p ;k {,Qd#`Ƣvg7=u gx!bHnܹ6 :/69=['C<0{ȧ?|ߔ*=.[f(Yq#SXAWvxu /okl )%_vJgHeΎ-͵26N)ɋ۱^8dogs9b55qO C2|TmtVfK tk63P=%Xa9DBh5ἹynT_"=H8LZV/M`f*N MՁ|E -k(D~h_dvG)?3O,1cZZ%SD^Ž[ 5++KI7DS,]#MBEL2/s:+)i8+D(RLp_#(}O#yFV(Y6q,Nh1|5n`I}w2,N|8R/Fj9QIVNIfB:{GZ7@$s<yB1WF `cJodQh|YA!)t ޡȨڛc4[o|cTink뱨R{EW3)Z0W"LS'l4D&7&m(g ¨ دm@li-F^rưm=<\H`)Cޙ pw vy! 8uBtѲ}Og LӲjA'\hE?l7w;{eamt-3"/`kVJ}4c ;Ryz6ةR{:3*mU]e(W]AyX6NbG xjrʭkC-@iإoJz,.q=&EI[,KōTa= !qADrHSL*I㸩A*J-6DlNn>$=@`rvZ @X9 Xvd?!Q 3 UKbeI)%WM{DYrxmS:oHW(hRVTyhk3`u<@. -A}.dی_`05[l73C73@.vE<ڇU1#/#^YA>7]i6W.T?64⾠!| aLg+%+ o`]FJI;_(4-?v2YD%ܧwXVGb߅J!aр%);8[Pf*4y;5C˵|ã 2)Q6*NF<0{F¨P?唊l9*#JEk Rl&y_ ⾎QJ&?E: LhUX8kKG=aީ5~ᩊ6Dc P.6^9DdM55>Lih Kpib#6Ygs?qPcϮc[)bfusF57)lUh%|oV#<y5\%[uM9)`-L=Zvi@qGD^/W I)1@+}gl7D8] Dspuϊёk5{Qkבi3Y9+;1_qpmn`#e gw22!smr_|<ϛK0%$)f~Nl&!iХ\ݿ9aqp1iBҹ[v'֐IKH!kA31BEscRڈGQP^Ğɹ{Quۭ$~ m%U\256qB oK:5NA99lgw1cq9⚉VQ/+;J~/[HXhӐ@ Rւ֥]gkYQ=^ވLךeۖw2@IwI|룶lň\攓cO۽Q _^M1zyENjGnHm[[CH2rL}]l&JdIeۧQ`7hgb ؛!nR4Ġ)v{'Zrop̈RE7#xg'  u&3 Dž Uc_5J}pڧ 0f݄NΨ?[{hl[|9CVBi@>^:lu)Y-ngUv\[9 FF2$[ܗ/_7-[[6rhaN=s,68;/~P/3l3D! ;> ,L!(30٪G1F%L\tHXx,n #a5Go #313ez0sly`;I/*>1vrha . ߦ!7x|DiHq]~7(q*'Vll ʵ6{g#RZ6zm9OH[mۅ#|׼ĝm)+sղ+#=L$Q~'u~APXp~sz u#Z2O6e7h49gADtS\}48>#*ۜ)yJޠקuQ_Ѽ3퇎tb\]O 1w‡Tg;FEga:ME"3_ X<'+.V9 )w4 ÉYhl<;a3n1erfv`LUXlcpRB\iDo@`rQU:d Ӫx;[.QߓE,!E$ǢMbCh)? NF3?'*16i!نUb! `[TqE*H{MLof !ǻn©s{!VIrS`Ƃ/Eԕ:}QMEV_^Ew"æ+CT^ӒoJ8`[NA?!!ѮڠB%^/xux%A{{qK M25+Y4l^ƗZq08c* q-s%[>_/m6*#X?I9QzW$ EQ *V%Z8's)ݖ8q蜝J҂tqlzU~&fq^ .c^l NjȒPߴ킛Gc@u͉X:.Ӑ>݁6eLjR>UUVlcƦghQ`r0$#Kk3.@-H=A HNw ^iSѝh?(t}nB{ XMK,bW ֠ľOJ^G|nPDVyU֣Z͟w5i\1D\RR=YE$*boQ[M== {YĿ!]IsU3y U]Dϸip/gwC^HQmN8ֹ:NOQ/+faByGnu !Y0Йhx TI[#LS dmܝ͔4:V$|vzRXW$ui~J@Y["pnѯg,[: 4iJ|Htq]{B,!5a:FPmpt0Xu HeG /TN{UIDt7S~4n Yݢٿюa0W|S-\2^=Y}qrh,Áv'd*/pyZm{SRpE2d?v&}J-@8[6 fi m@!Q˜<0ctE0?(3 +w,Ni'r5(oxY`}v߽#2/ '#ΫsYʕkPq/9IOPf:os`%F yX>ZմrodY_7 qLSߗGցè 傰dNNrȞϪY¨/x8e* EDcb%? ;F_M>|oRjLG%q2YOe#zXC|qK}97YY9Jq Zz8:9Y)ܨL:`Pȫ  #9i`ȴEFn^bMџҌu `?ۚq%=K+'b]^{h;SO)&7f W <m_j l8AM9lu˜$()FVS M:NA6A n"Z z7y=И%4?2B*z䥵DbFN5LE{5$TM}(uI@Zr/jʋ\$SF( @sMh31GsT Vug<}^}c/ Q" L}bW;lPl׺̅A~Ya)˾Dɳ9Wʨ<45 kZ]˨0p)Jr<'*HYBK# =;(NQq=%y,r決>zMsQy8/z_ ̅9P +D_lw\ê:Z`YzUK,Z%Kp~Iv)S'RBKɏ 4ЀFJPƸ |{p2B7Þ{tyTL+^ߓVg4_@|'d#!fjSV&?; WEP>4h}<wn#hxW$km>Xd7\5Z4NUZD%XYChs_ɫP5lP">oy < W;(.gJrO'4uf527">di0-g)YE9{-x"0q[Ґ$\ۭK 6k Q(#%U'jfpD@}!`!BY kPO͛?@ \lŕ)J':$3C]8 ;sdQ%-!a ?@p~'0{_}1 XIl޺I n/dydtx:~.(t`EBW/C~'[+2+Ղf^Y4DJv0GAIU3lxlBq@ x#GOC6iQ M'SMxmBKb=ѥ+M׾wU ';{64݉ICE:JEӜyw]D3fU'b &:YO6 t J2Q2sesW!V,Ff_{uENJ2p!LP\҉]2i{ApCڂN(9Dj=uI,Ѿ IC&qH$cݷȎW w}S!?d#ir<~/L>833uf(~M? Q z%\o@ ^_BADqX *#oW $?y7H\o僎9r[NTu(xv=iNOS4E%Ok][%„Z>㨖 iMB9îPviJ\O.0sN$Rn` ^B`\sbS̀2D3`&*Dk#Lz ӡa_۬*#h~v%ڲKD$KC ďjηyO8Ta,_0Je$IMܤUOZ =5CUh\psF~~mDr  ‹|Jq*UC v)K@2GS>!([v-6]|?11-8}`}y4&p 9wt͝U ҙ\[;[!"{zYs?|q턴ƌpu''ԠL`: YZ