xen-libs-4.16.5_08-150400.4.40.1 >  A eQp9|vwafZH= z/MMfq+A$EJ~ؠfk/#ZD`~`VF!ݣLX28 :2'lB]\ۥ&OF&Dwvmc6ij&wC$Օ)Z:yw@ʉ>o8r v|&=-~k^rCuQd fM )ݷ| e+Z$|N5۵ːj4#e:QA:9005423acdf4079c0cf39627a895c3d734101d26909796b7c634efb6febb0fa0df66b998cbf202f63346a335f7810a60666c791bc ̉eQp9|{OvYqOmXmT+Rk$t- z2IHRt@qWQT~p3*C,Nx@dJ/'SB '{x 8:[%35nV/yq꠳z#X~p@?td  # A+ AO-D- - - -  Y-  - - e-Fl- 17x77(58<9$l:B>{Z@{iF{xG{-H|D-I|-X}(1Y}1\~L-]-^bcydeflu-vw`-x-yz$(.pCxen-libs4.16.5_08150400.4.40.1Xen Virtualization: LibrariesXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries used to interact with the Xen virtual machine monitor. In addition to this package you need to install xen and xen-tools to use Xen. Authors: -------- Ian Pratt eQh01-armsrv3(SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/System/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxaarch64  hG p `@ H X88@0 AAAAAAAeQzeQeQ{eQeQ{eQeQyeQeQzeQeQeQeQzeQeQ{eQeQ|eQeQ}eQeQ|eQeQ|eQeQyeQeQyeQeQ}eQeQ~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.so.1.3libxenctrl.so.4.16.0libxendevicemodel.so.1.4libxenevtchn.so.1.2libxenforeignmemory.so.1.4libxenfsimage.so.4.16.0libxengnttab.so.1.2libxenguest.so.4.16.0libxenhypfs.so.1.0libxenlight.so.4.16.0libxenstat.so.4.16.0libxenstore.so.4.0libxentoolcore.so.1.0libxentoollog.so.1.0libxenvchan.so.4.16.0libxlutil.so.4.16.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.16.5_08-150400.4.40.1.src.rpmlibxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxencall.so.1(VERS_1.2)(64bit)libxencall.so.1(VERS_1.3)(64bit)libxenctrl.so.4.16()(64bit)libxenctrl.so.4.16(VERS_4.16.0)(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.1)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxendevicemodel.so.1(VERS_1.3)(64bit)libxendevicemodel.so.1(VERS_1.4)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenevtchn.so.1(VERS_1.1)(64bit)libxenevtchn.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1(VERS_1.1)(64bit)libxenforeignmemory.so.1(VERS_1.2)(64bit)libxenforeignmemory.so.1(VERS_1.3)(64bit)libxenforeignmemory.so.1(VERS_1.4)(64bit)libxenfsimage.so.4.16()(64bit)libxenfsimage.so.4.16(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxengnttab.so.1(VERS_1.1)(64bit)libxengnttab.so.1(VERS_1.2)(64bit)libxenguest.so.4.16()(64bit)libxenguest.so.4.16(VERS_4.16.0)(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.16()(64bit)libxenlight.so.4.16(VERS_4.16.0)(64bit)libxenstat.so.4.16()(64bit)libxenstat.so.4.16(VERS_4.16.0)(64bit)libxenstore.so.4()(64bit)libxenstore.so.4(VERS_4.0)(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libxenvchan.so.4.16()(64bit)libxenvchan.so.4.16(VERS_4.16.0)(64bit)libxlutil.so.4.16()(64bit)libxlutil.so.4.16(VERS_4.16.0)(64bit)xen-libsxen-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libxencall.so.1()(64bit)libxencall.so.1(VERS_1.0)(64bit)libxencall.so.1(VERS_1.1)(64bit)libxenctrl.so.4.16()(64bit)libxenctrl.so.4.16(VERS_4.16.0)(64bit)libxendevicemodel.so.1()(64bit)libxendevicemodel.so.1(VERS_1.0)(64bit)libxendevicemodel.so.1(VERS_1.2)(64bit)libxenevtchn.so.1()(64bit)libxenevtchn.so.1(VERS_1.0)(64bit)libxenforeignmemory.so.1()(64bit)libxenforeignmemory.so.1(VERS_1.0)(64bit)libxenfsimage.so.4.16()(64bit)libxenfsimage.so.4.16(libfsimage.so.1.0)(64bit)libxengnttab.so.1()(64bit)libxengnttab.so.1(VERS_1.0)(64bit)libxenguest.so.4.16()(64bit)libxenguest.so.4.16(VERS_4.16.0)(64bit)libxenhypfs.so.1()(64bit)libxenhypfs.so.1(VERS_1.0)(64bit)libxenlight.so.4.16()(64bit)libxenlight.so.4.16(VERS_4.16.0)(64bit)libxenstore.so.4()(64bit)libxenstore.so.4(VERS_4.0)(64bit)libxentoolcore.so.1()(64bit)libxentoolcore.so.1(VERS_1.0)(64bit)libxentoollog.so.1()(64bit)libxentoollog.so.1(VERS_1.0)(64bit)libyajl.so.2()(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3eC@e;@e.w@e@e;d@dd.@ddíd@dD@dS@dJcddd'@c@c@cccR@clc[@cWcOcOc47@c @c@b)bz@bγbγbb@b@b@b@bzSbV@bP#bJb/.@b b D@a@aaq@aa6a@aaca@@a7T@a,@aGa $@a @`@` @`@`E` @`` @`!@`@``7@``}p`\{@`KW`F`B@`8`4@`.V`#`>` l___@_H@__إ@_إ@_S_$_______@_"__E@_i@_h_d@_cO_[f_X_O@_N7_*@_'@_@_{_^)@^^@^3^ϧ^x^@^@^^^{G^r @^j$@^g@^_@^Nt^K^=Q@^:@^0"@^@^@]]]N@]@]ʞ])]c@]@]@]@]]fl]fl]M`@]B@]/ ],j] ]@]@] ] ] #]]@\\ޢ@\ڭ\\@\@\@\,@\7\\N\@\\+@\\M\M\\\@\}@\k\X)@\J@\I\A\?\=@\9\73\4\$\l@[H[k@[@[^[^[ā@[@[@[9@[v[W[CN@[<[6@[0@[0@['[!@[5@Z@ZnZ@ZZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Zz@Zz@Zo Zk@ZV@ZS]@ZOhZ:PZ1@Z.s@Z&@ZOZOZ Z Z Z@Z@Z }ZC@ZYYYY|Y@Y{Y*@Y5YA@Y4YYYbYY@Y3Y@YJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"YY;@YYY@YtY.X@XQ@X@XۡXg@X@X@X@X @X@X@X@X@XXX@XXXwoXs{@XlXWXRXQ4@XEVX43@X.@X*X lX&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@WbWZWZWZWYZ@WV@WEWBW=W;W3W1@W1@W,@W(W(W(W(W(W#LWVbV(@V3VJVxV'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVA@V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUݪ@U@UnU4@UUK@UU@UU>U@Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UU@UUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@THT?@T=@carnold@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comschubi@suse.comjbeulich@suse.comjbeulich@suse.comdmueller@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjbeulich@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.dejbeulich@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comjbeulich@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comguillaume.gardet@opensuse.orgcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcallumjfarmer13@gmail.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comdimstar@opensuse.orgcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.commcepl@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.demliska@suse.czohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjengelh@inai.deguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbwiedemann@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.debwiedemann@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comtrenn@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.dejfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.derbrown@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comjfehlig@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.dejfehlig@suse.comcarnold@suse.comjfehlig@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.commlatimer@suse.comcarnold@suse.comcyliu@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comjfehlig@suse.comcarnold@suse.comcarnold@suse.comohering@suse.decarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comohering@suse.derguenther@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.comrguenther@suse.comcarnold@suse.commeissner@suse.comcarnold@suse.comohering@suse.decarnold@suse.comcarnold@suse.comohering@suse.deohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.decarnold@suse.comohering@suse.deohering@suse.deohering@suse.deohering@suse.decarnold@suse.comcarnold@suse.comcarnold@suse.comcarnold@suse.com- bsc#1216807 - VUL-0: CVE-2023-46836: xen: x86: BTC/SRSO fixes not fully effective (XSA-446) xsa446.patch- bsc#1216654 - VUL-0: CVE-2023-46835: xen: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) xsa445.patch- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) 650abbfe-x86-shadow-defer-PV-top-level-release.patch - bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional execution leak via division by zero (XSA-439) 64e5b4ac-x86-AMD-extend-Zenbleed-check.patch 65087000-x86-spec-ctrl-SPEC_CTRL_EXIT_TO_XEN-confusion.patch 65087001-x86-spec-ctrl-fold-DO_SPEC_CTRL_EXIT_TO_XEN.patch 65087002-x86-spec-ctrl-SPEC_CTRL-ENTRY-EXIT-asm-macros.patch 65087003-x86-spec-ctrl-SPEC_CTRL-ENTER-EXIT-comments.patch 65087004-x86-entry-restore_all_xen-stack_end.patch 65087005-x86-entry-track-IST-ness-of-entry.patch 65087006-x86-spec-ctrl-VERW-on-IST-exit-to-Xen.patch 65087007-x86-AMD-Zen-1-2-predicates.patch 65087008-x86-spec-ctrl-Zen1-DIV-leakage.patch - bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU TLB flushing (XSA-442) 65263470-AMD-IOMMU-flush-TLB-when-flushing-DTE.patch - bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple vulnerabilities in libfsimage disk handling (XSA-443) 65263471-libfsimage-xfs-remove-dead-code.patch 65263472-libfsimage-xfs-amend-mask32lo.patch 65263473-libfsimage-xfs-sanity-check-superblock.patch 65263474-libfsimage-xfs-compile-time-check.patch 65263475-pygrub-remove-unnecessary-hypercall.patch 65263476-pygrub-small-refactors.patch 65263477-pygrub-open-output-files-earlier.patch 65263478-libfsimage-function-to-preload-plugins.patch 65263479-pygrub-deprivilege.patch 6526347a-libxl-allow-bootloader-restricted-mode.patch 6526347b-libxl-limit-bootloader-when-restricted.patch - bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD: Debug Mask handling (XSA-444) 6526347c-SVM-fix-AMD-DR-MASK-context-switch-asymmetry.patch 6526347d-x86-PV-auditing-of-guest-breakpoints.patch - Upstream bug fixes (bsc#1027519) 64e6459b-revert-VMX-sanitize-rIP-before-reentering.patch 64eef7e9-x86-reporting-spurious-i8259-interrupts.patch 64f71f50-Arm-handle-cache-flush-at-top.patch 65084ba5-x86-AMD-dont-expose-TscFreqSel.patch - Patches dropped / replaced by newer upstream versions xsa438.patch xsa439-00.patch xsa439-01.patch xsa439-02.patch xsa439-03.patch xsa439-04.patch xsa439-05.patch xsa439-06.patch xsa439-07.patch xsa439-08.patch xsa439-09.patch xsa442.patch xsa443-01.patch xsa443-02.patch xsa443-03.patch xsa443-04.patch xsa443-05.patch xsa443-06.patch xsa443-07.patch xsa443-08.patch xsa443-09.patch xsa443-10.patch xsa443-11.patch xsa444-1.patch xsa444-2.patch- bsc#1215744 - VUL-0: CVE-2023-34323: xen: xenstored: A transaction conflict can crash C Xenstored (XSA-440) xsa440.patch - bsc#1215746 - VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU TLB flushing (XSA-442) xsa442.patch - bsc#1215747 - VUL-0: CVE-2023-34325: xen: Multiple vulnerabilities in libfsimage disk handling (XSA-443) xsa443-01.patch xsa443-02.patch xsa443-03.patch xsa443-04.patch xsa443-05.patch xsa443-06.patch xsa443-07.patch xsa443-08.patch xsa443-09.patch xsa443-10.patch xsa443-11.patch - bsc#1215748 - VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD: Debug Mask handling (XSA-444) xsa444-1.patch xsa444-2.patch- bsc#1215474 - VUL-0: CVE-2023-20588: xen: AMD CPU transitional execution leak via division by zero (XSA-439) xsa439-00.patch xsa439-01.patch xsa439-02.patch xsa439-03.patch xsa439-04.patch xsa439-05.patch xsa439-06.patch xsa439-07.patch xsa439-08.patch xsa439-09.patch- bsc#1215145 - VUL-0: CVE-2023-34322: xen: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) xsa438.patch- Handle potential unaligned access to bitmap in libxc-sr-restore-hvm-legacy-superpage.patch If setting BITS_PER_LONG at once, the initial bit must be aligned- Update to Xen 4.16.5 bug fix release (bsc#1027519) xen-4.16.5-testing-src.tar.bz2 * No upstream changelog found in sources or webpage - bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative Return Stack Overflow (XSA-434) - bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data Sampling (XSA-435) - Dropped patches contained in new tarball 645dec48-AMD-IOMMU-assert-boolean-enum.patch 646b782b-PCI-pci_get_pdev-respect-segment.patch 647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch 648863fc-AMD-IOMMU-Invalidate-All-check.patch 64bea1b2-x86-AMD-Zenbleed.patch- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch A bit is an index in bitmap, while bits is the allocated size of the bitmap.- Add more debug to libxc-sr-track-migration-time.patch This is supposed to help with doing the math in case xl restore fails with ERANGE as reported in bug#1209311- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed (XSA-433) 64bea1b2-x86-AMD-Zenbleed.patch- Upstream bug fixes (bsc#1027519) 645dec48-AMD-IOMMU-assert-boolean-enum.patch 646b782b-PCI-pci_get_pdev-respect-segment.patch 647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch 648863fc-AMD-IOMMU-Invalidate-All-check.patch- bsc#1209237 - xen-syms doesn't contain debug-info 643e3810-CONFIG_DEBUG_INFO-no-EXPERT.patch 6447a8fd-x86-EFI-permit-crash-dump-analysis.patch- Update to Xen 4.16.4 bug fix release (bsc#1027519) xen-4.16.4-testing-src.tar.bz2 * No upstream changelog found in sources or webpage - Drop patches contained in new tarball 63a03e28-x86-high-freq-TSC-overflow.patch 63c05478-VMX-calculate-model-specific-LBRs-once.patch 63c05478-VMX-support-CPUs-without-model-specific-LBR.patch 63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch 63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch 63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch 63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch 63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch 641041e8-VT-d-constrain-IGD-check.patch 6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch 64199e0c-x86-shadow-account-for-log-dirty-mode.patch 64199e0d-x86-HVM-bound-number-of-pca-regions.patch 64199e0e-x86-HVM-serialize-pca-list-manipulation.patch 64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch libxl.fix-guest-kexec-skip-cpuid-policy.patch- Upstream bug fixes (bsc#1027519) 63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch 63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch 63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch 63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch 641041e8-VT-d-constrain-IGD-check.patch 6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch - Use "proper" upstream backports: 64199e0c-x86-shadow-account-for-log-dirty-mode.patch 64199e0d-x86-HVM-bound-number-of-pca-regions.patch 64199e0e-x86-HVM-serialize-pca-list-manipulation.patch 64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch - ... in place of: xsa427.patch xsa428-1.patch xsa428-2.patch xsa429.patch- bsc#1209245 - fix host-assisted kexec/kdump for HVM domUs libxl.fix-guest-kexec-skip-cpuid-policy.patch- bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus log-dirty mode use-after-free (XSA-427) xsa427.patch - bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM pinned cache attributes mis-handling (XSA-428) xsa428-1.patch xsa428-2.patch - bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative vulnerability in 32bit SYSCALL path (XSA-429) xsa429.patch- bsc#1208286 - VUL-0: CVE-2022-27672: xen: Cross-Thread Return Address Predictions (XSA-426) 63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch- bsc#1205792 - Partner-L3: launch-xenstore error messages show in SLES15 SP4 xen kernel. 63e4da00-dont-log-errors-when-trying-to-load-PVH-xenstore-stubdom.patch- Upstream bug fixes (bsc#1027519) 63c05478-VMX-calculate-model-specific-LBRs-once.patch 63c05478-VMX-support-CPUs-without-model-specific-LBR.patch- Upstream bug fixes (bsc#1027519) 63a03e28-x86-high-freq-TSC-overflow.patch- Update to Xen 4.16.3 bug fix release (bsc#1027519) xen-4.16.3-testing-src.tar.bz2 * No upstream changelog found in sources or webpage - Drop patches contained in new tarball 62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch 6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch 631b5ba6-gnttab-acquire-resource-vaddrs.patch 63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch 63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch 63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch 63455fe4-x86-HAP-monitor-table-error-handling.patch 63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch 6345601d-x86-tolerate-shadow_prealloc-failure.patch 6345603a-x86-P2M-refuse-new-alloc-for-dying.patch 63456057-x86-P2M-truly-free-paging-pool-for-dying.patch 63456075-x86-P2M-free-paging-pool-preemptively.patch 63456090-x86-p2m_teardown-preemption.patch 63456175-libxl-per-arch-extra-default-paging-memory.patch 63456177-Arm-construct-P2M-pool-for-guests.patch 6345617a-Arm-XEN_DOMCTL_shadow_op.patch 6345617c-Arm-take-P2M-pages-P2M-pool.patch 634561aa-gnttab-locking-on-transitive-copy-error-path.patch 634561f1-x86emul-respect-NSCB.patch 6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch 6351095c-Arm-rework-p2m_init.patch 6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch 635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch 635665fb-sched-fix-restore_vcpu_affinity.patch 63569723-x86-shadow-replace-bogus-assertions.patch 636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch 636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch xsa326-01.patch xsa326-02.patch xsa326-03.patch xsa326-04.patch xsa326-05.patch xsa326-06.patch xsa326-07.patch xsa326-08.patch xsa326-09.patch xsa326-10.patch xsa326-11.patch xsa326-12.patch xsa326-13.patch xsa326-14.patch xsa326-15.patch xsa326-16.patch xsa412.patch xsa414.patch xsa415.patch xsa416.patch xsa417.patch xsa418-01.patch xsa418-02.patch xsa418-03.patch xsa418-04.patch xsa418-05.patch xsa418-06.patch xsa418-07.patch xsa419-01.patch xsa419-02.patch xsa419-03.patch xsa421-01.patch xsa421-02.patch- bsc#1205209 - VUL-0: CVE-2022-23824: xen: x86: Multiple speculative security issues (XSA-422) 636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch 636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch- bsc#1193923 - VUL-1: xen: Frontends vulnerable to backends (XSA-376) 61dd5f64-limit-support-statement-for-Linux-and-Windows-frontends.patch- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may take excessively long (XSA-410) 63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch 63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch 63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch 63455fe4-x86-HAP-monitor-table-error-handling.patch 63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch 6345601d-x86-tolerate-shadow_prealloc-failure.patch 6345603a-x86-P2M-refuse-new-alloc-for-dying.patch 63456057-x86-P2M-truly-free-paging-pool-for-dying.patch 63456075-x86-P2M-free-paging-pool-preemptively.patch 63456090-x86-p2m_teardown-preemption.patch - bcs#1203804 - VUL-0: CVE-2022-33747: xen: unbounded memory consumption for 2nd-level page tables on ARM systems (XSA-409) 63456175-libxl-per-arch-extra-default-paging-memory.patch 63456177-Arm-construct-P2M-pool-for-guests.patch 6345617a-Arm-XEN_DOMCTL_shadow_op.patch 6345617c-Arm-take-P2M-pages-P2M-pool.patch - bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in transitive grant copy handling (XSA-411) 634561aa-gnttab-locking-on-transitive-copy-error-path.patch - Upstream bug fixes (bsc#1027519) 6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch 631b5ba6-gnttab-acquire-resource-vaddrs.patch 634561f1-x86emul-respect-NSCB.patch 6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch 6351095c-Arm-rework-p2m_init.patch 6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch 635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch 635665fb-sched-fix-restore_vcpu_affinity.patch 63569723-x86-shadow-replace-bogus-assertions.patch - Drop patches replaced by upstream versions: xsa410-01.patch xsa410-02.patch xsa410-03.patch xsa410-04.patch xsa410-05.patch xsa410-06.patch xsa410-07.patch xsa410-08.patch xsa410-09.patch xsa410-10.patch xsa411.patch- bsc#1204482 - VUL-0: CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (XSA-326) xsa326-01.patch xsa326-02.patch xsa326-03.patch xsa326-04.patch xsa326-05.patch xsa326-06.patch xsa326-07.patch xsa326-08.patch xsa326-09.patch xsa326-10.patch xsa326-11.patch xsa326-12.patch xsa326-13.patch xsa326-14.patch xsa326-15.patch xsa326-16.patch - bsc#1204485 - VUL-0: CVE-2022-42309: xen: Xenstore: Guests can crash xenstored (XSA-414) xsa414.patch - bsc#1204487 - VUL-0: CVE-2022-42310: xen: Xenstore: Guests can create orphaned Xenstore nodes (XSA-415) xsa415.patch - bsc#1204488 - VUL-0: CVE-2022-42319: xen: Xenstore: Guests can cause Xenstore to not free temporary memory (XSA-416) xsa416.patch - bsc#1204489 - VUL-0: CVE-2022-42320: xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains (XSA-417) xsa417.patch - bsc#1204490 - VUL-0: CVE-2022-42321: xen: Xenstore: Guests can crash xenstored via exhausting the stack (XSA-418) xsa418-01.patch xsa418-02.patch xsa418-03.patch xsa418-04.patch xsa418-05.patch xsa418-06.patch xsa418-07.patch - bsc#1204494 - VUL-0: CVE-2022-42322,CVE-2022-42323: xen: Xenstore: cooperating guests can create arbitrary numbers of nodes (XSA-419) xsa419-01.patch xsa419-02.patch xsa419-03.patch - bsc#1204496 - VUL-0: CVE-2022-42325,CVE-2022-42326: xen: Xenstore: Guests can create arbitray number of nodes via transactions (XSA-421) xsa421-01.patch xsa421-02.patch- bsc#1204483 - VUL-0: CVE-2022-42327: xen: x86: unintended memory sharing between guests (XSA-412) xsa412.patch- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may take excessively long (XSA-410) xsa410-01.patch xsa410-02.patch xsa410-03.patch xsa410-04.patch xsa410-05.patch xsa410-06.patch xsa410-07.patch xsa410-08.patch xsa410-09.patch xsa410-10.patch - bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in transitive grant copy handling (XSA-411) xsa411.patch- bsc#1201994 - Xen DomU unable to emulate audio device 62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch- Things are compiling fine now with gcc12. Drop gcc12-fixes.patch- Update to Xen 4.16.2 bug fix release (bsc#1027519) xen-4.16.2-testing-src.tar.bz2 * No upstream changelog found in sources or webpage - Drop patches contained in new tarball 625fca42-VT-d-reserved-CAP-ND.patch 626f7ee8-x86-MSR-handle-P5-MC-reads.patch 627549d6-IO-shutdown-race.patch 62a1e594-x86-clean-up-_get_page_type.patch 62a1e5b0-x86-ABAC-race-in-_get_page_type.patch 62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch 62a1e5f0-x86-dont-change-cacheability-of-directmap.patch 62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch 62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch 62a1e649-x86-track-and-flush-non-coherent.patch 62a99614-IOMMU-x86-gcc12.patch 62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch 62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch 62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch 62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch 62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch 62c56cc0-libxc-fix-compilation-error-with-gcc13.patch 62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch 62cc31ee-cmdline-extend-parse_boolean.patch 62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch 62cd91d0-x86-spec-ctrl-rework-context-switching.patch 62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch 62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch 62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch 62cd91d5-x86-cpuid-BTC_NO-enum.patch 62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch 62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch xsa408.patch- bsc#1167608, bsc#1201631 - fix built-in default of max_event_channels A previous change to the built-in default had a logic error, effectively restoring the upstream limit of 1023 channels per domU. Fix the logic to calculate the default based on the number of vcpus. adjust libxl.max_event_channels.patch- Added --disable-pvshim when running configure in xen.spec. We have never shipped the shim and don't need to build it.- bsc#1199965 - VUL-0: CVE-2022-26362: xen: Race condition in typeref acquisition 62a1e594-x86-clean-up-_get_page_type.patch 62a1e5b0-x86-ABAC-race-in-_get_page_type.patch - bsc#1199966 - VUL-0: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings 62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch 62a1e5f0-x86-dont-change-cacheability-of-directmap.patch 62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch 62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch 62a1e649-x86-track-and-flush-non-coherent.patch - bsc#1200549 VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166: xen: x86: MMIO Stale Data vulnerabilities (XSA-404) 62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch 62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch 62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch - bsc#1201469 - VUL-0: CVE-2022-23816,CVE-2022-23825,CVE-2022-29900: xen: retbleed - arbitrary speculative code execution with return instructions (XSA-407) 62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch 62cc31ee-cmdline-extend-parse_boolean.patch 62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch 62cd91d0-x86-spec-ctrl-rework-context-switching.patch 62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch 62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch 62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch 62cd91d5-x86-cpuid-BTC_NO-enum.patch 62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch 62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch - Upstream bug fixes (bsc#1027519) 62a99614-IOMMU-x86-gcc12.patch 62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch 62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch - Drop patches replaced by upstream versions xsa401-1.patch xsa401-2.patch xsa402-1.patch xsa402-2.patch xsa402-3.patch xsa402-4.patch xsa402-5.patch- bsc#1201394 - VUL-0: CVE-2022-33745: xen: insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) xsa408.patch - Fix gcc13 compilation error 62c56cc0-libxc-fix-compilation-error-with-gcc13.patch- Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d.- bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings fix xsa402-5.patch- Upstream bug fixes (bsc#1027519) 625fca42-VT-d-reserved-CAP-ND.patch 626f7ee8-x86-MSR-handle-P5-MC-reads.patch 627549d6-IO-shutdown-race.patch - bsc#1199965 - VUL-0: EMBARGOED: CVE-2022-26362: xen: Race condition in typeref acquisition xsa401-1.patch xsa401-2.patch - bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings xsa402-1.patch xsa402-2.patch xsa402-3.patch xsa402-4.patch xsa402-5.patch- fix python3 >= 3.10 version detection- Update to Xen 4.16.1 bug fix release (bsc#1027519) xen-4.16.1-testing-src.tar.bz2 - Drop patches contained in new tarball 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch 61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch 61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch 61e0296a-x86-time-calibration-relative-counts.patch 61e029c8-x86-time-TSC-freq-calibration-accuracy.patch 61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch 61e98e88-x86-introduce-get-set-reg-infra.patch 61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch 61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch 61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch 61eaaa23-x86-get-set-reg-infra-build.patch 61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch 61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch 61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch 6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch xsa397.patch xsa399.patch xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch xsa400-12.patch- bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) 624ebcef-VT-d-dont-needlessly-look-up-DID.patch 624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch 624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch- bsc#1197423 - VUL-0: CVE-2022-26356: xen: Racy interactions between dirty vram tracking and paging log dirty hypercalls (XSA-397) xsa397.patch - bsc#1197425 - VUL-0: CVE-2022-26357: xen: race in VT-d domain ID cleanup (XSA-399) xsa399.patch - bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359, CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) xsa400-01.patch xsa400-02.patch xsa400-03.patch xsa400-04.patch xsa400-05.patch xsa400-06.patch xsa400-07.patch xsa400-08.patch xsa400-09.patch xsa400-10.patch xsa400-11.patch xsa400-12.patch - Additional upstream bug fixes for XSA-400 (bsc#1027519) 61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch 61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch 6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch- bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401: xen: BHB speculation issues (XSA-398) 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch- bsc#1196545 - GCC 12: xen package fails gcc12-fixes.patch- Upstream bug fixes (bsc#1027519) 61e0296a-x86-time-calibration-relative-counts.patch 61e029c8-x86-time-TSC-freq-calibration-accuracy.patch 61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch 61e98e88-x86-introduce-get-set-reg-infra.patch 61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch 61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch 61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch 61eaaa23-x86-get-set-reg-infra-build.patch 61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch 61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch 61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch 61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch 61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch 61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch 61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch 61f933a4-x86-cpuid-advertise-SSB_NO.patch 61f933a5-x86-drop-use_spec_ctrl-boolean.patch 61f933a6-x86-new-has_spec_ctrl-boolean.patch 61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch 61f933a8-x86-SPEC_CTRL-record-last-write.patch 61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch 61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch 61f933ab-x86-AMD-SPEC_CTRL-infra.patch 61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch 61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch 6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch 6202afa4-x86-TSX-move-has_rtm_always_abort.patch 6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch 6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch 6202afa8-x86-Intel-PSFD-for-guests.patch - Drop patches replaced by the above: xsa393.patch xsa394.patch xsa395.patch libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393) xsa393.patch - bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS Xen while unmapping a grant (XSA-394) xsa394.patch - bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of passed-through device IRQs (XSA-395) xsa395.patch- bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch- bsc#1193307 - pci backend does not exist when attach a vf to a pv guest libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch Drop libxl-PCI-defer-backend-wait.patch- bsc#1193447 - Slow execution of hvmloader+ovmf when VM contains an sriov device 61bc429f-revert-hvmloader-PA-range-should-be-UC.patch - Upstream bug fixes (bsc#1027519) 61b31d5c-x86-restrict-all-but-self-IPI.patch 61b88e78-x86-CPUID-TSXLDTRK-definition.patch 61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch- Collect active VM config files in the supportconfig plugin xen-supportconfig- Now that the ovmf package has been updated, reset the configure script to use ovmf-x86_64-xen-4m.bin from ovmf-x86_64-ms.bin References bsc#1194105, bsc#1193274 xen.spec- bsc#1193307 - pci backend does not exist when attach a vf to a pv guest libxl-PCI-defer-backend-wait.patch- Update to Xen 4.16.0 FCS release xen-4.16.0-testing-src.tar.bz2 * Miscellaneous fixes to the TPM manager software in preparation for TPM 2.0 support. * Increased reliance on the PV shim as 32-bit PV guests will only be supported in shim mode going forward. This change reduces the attack surface in the hypervisor. * Increased hardware support by allowing Xen to boot on Intel devices that lack a Programmable Interval Timer. * Cleanup of legacy components by no longer building QEMU Traditional or PV-Grub by default. Note both projects have upstream Xen support merged now, so it is no longer recommended to use the Xen specific forks. * Initial support for guest virtualized Performance Monitor Counters on Arm. * Improved support for dom0less mode by allowing the usage on Arm 64bit hardware with EFI firmware. * Improved support for Arm 64-bit heterogeneous systems by leveling the CPU features across all to improve big.LITTLE support. - bsc#1193274 - [Build67.2][Xen][uefi] xen fullvirt uefi guest can not be created with default 'type=plash' in virt-manager xen.spec- Update to Xen 4.16.0 RC4 release (jsc#SLE-18467) xen-4.16.0-testing-src.tar.bz2 * Xen can now export Intel Processor Trace (IPT) data from guests to tools in dom0. * Xen now supports Viridian enlightenments for guests with more than 64 vcpus. * Xenstored and oxenstored both now support LiveUpdate (tech preview). * Unified boot images * Switched x86 MSR accesses to deny by default policy. * Named PCI devices for xl/libxl and improved documentation for xl PCI configuration format. * Support for zstd-compressed dom0 (x86) and domU kernels. * Reduce ACPI verbosity by default. * Add ucode=allow-same option to test late microcode loading path. * Library improvements from NetBSD ports upstreamed. * x86: Allow domains to use AVX-VNNI instructions. * Added XEN_SCRIPT_DIR configuration option to specify location for Xen scripts. * xennet: Documented a way for the backend (or toolstack) to specify MTU to the frontend. * On detecting a host crash, some debug key handlers can automatically triggered to aid in debugging. * Increase the maximum number of guests which can share a single IRQ from 7 to 16, and make this configurable with irq-max-guests. - Drop iPXE sources and patches. iPXE is only used by QEMU traditional which has never shipped with SLE15. ipxe.tar.bz2 ipxe-enable-nics.patch ipxe-no-error-logical-not-parentheses.patch ipxe-use-rpm-opt-flags.patch - Drop building ocaml xenstored in the spec file. There are no plans or need to support this version. - Drop patches contained in new tarball or no longer required 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch 5ffc58c4-ACPI-reduce-verbosity-by-default.patch 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch 608676f2-VT-d-register-based-invalidation-optional.patch 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60bf9e19-Arm-create-dom0less-domUs-earlier.patch 60bf9e1a-Arm-boot-modules-scrubbing.patch 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch 60bfa904-AMD-IOMMU-wait-for-command-slot.patch 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch 61001231-x86-work-around-GNU-ld-2-37-issue.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6126339d-AMD-IOMMU-global-ER-extending.patch 6126344f-AMD-IOMMU-unity-map-handling.patch 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch 6126349a-AMD-IOMMU-rearrange-reassignment.patch 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch 612634c3-x86-p2m-introduce-p2m_is_special.patch 612634dc-x86-p2m-guard-identity-mappings.patch 612634f4-x86-mm-widen-locked-region-in-xatp1.patch 6126350a-gnttab-release-mappings-preemption.patch 6126351f-gnttab-replace-mapkind.patch 6126353d-gnttab-get-status-frames-array-capacity.patch 61263553-Arm-restrict-maxmem-for-dom0less.patch 6128a856-gnttab-radix-tree-node-init.patch init.xen_loop libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch libxc-bitmap-longs.patch libxc.migrate_tracking.patch libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc.sr.superpage.patch libxc-sr-use-xc_is_known_page_type.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl.fix-libacpi-dependency.patch libxl-qemu6-scsi.patch libxl-qemu6-vnc-password.patch libxl.set-migration-constraints-from-cmdline.patch reproducible.patch stubdom-have-iovec.patch x86-cpufreq-report.patch xenstore-launch.patch xenwatchdogd-options.patch xsa384.patch- bsc#1189632 - VUL-0: CVE-2021-28701: xen: Another race in XENMAPSPACE_grant_table handling (XSA-384) xsa384.patch - Upstream bug fixes (bsc#1027519) 61001231-x86-work-around-GNU-ld-2-37-issue.patch 611a7e38-x86-CET-shstk-WARN-manipulation.patch 611cba4e-VT-d-Tylersburg-errata-more-steppings.patch 611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch 6128a856-gnttab-radix-tree-node-init.patch 61122ac6-credit2-avoid-spuriously-picking-idle.patch (Replaces credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch) 6126339d-AMD-IOMMU-global-ER-extending.patch (Replaces xsa378-1.patch) 6126344f-AMD-IOMMU-unity-map-handling.patch (Replaces xsa378-2.patch) 61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch (Replaces xsa378-3.patch) 6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch (Replaces xsa378-4.patch) 6126349a-AMD-IOMMU-rearrange-reassignment.patch (Replaces xsa378-5.patch) 612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch (Replaces xsa378-6.patch) 612634c3-x86-p2m-introduce-p2m_is_special.patch (Replaces xsa378-7.patch) 612634dc-x86-p2m-guard-identity-mappings.patch (Replaces xsa378-8.patch) 612634f4-x86-mm-widen-locked-region-in-xatp1.patch (Replaces xsa379.patch) 6126350a-gnttab-release-mappings-preemption.patch (Replaces xsa380-1.patch 6126351f-gnttab-replace-mapkind.patch (Replaces xsa380-2.patch) 6126353d-gnttab-get-status-frames-array-capacity.patch (Replaces xsa382.patch) 61263553-Arm-restrict-maxmem-for-dom0less.patch (Replaces xsa383.patch)- bsc#1189882 - refresh libxc.sr.superpage.patch prevent superpage allocation in the LAPIC and ACPI_INFO range- bsc#1189373 - VUL-0: CVE-2021-28694,CVE-2021-28695, CVE-2021-28696: xen: IOMMU page mapping issues on x86 (XSA-378) xsa378-1.patch xsa378-2.patch xsa378-3.patch xsa378-4.patch xsa378-5.patch xsa378-6.patch xsa378-7.patch xsa378-8.patch - bsc#1189376 - VUL-0: CVE-2021-28697: xen: grant table v2 status pages may remain accessible after de-allocation. (XSA-379) xsa379.patch - bsc#1189378 - VUL-0: CVE-2021-28698: xen: long running loops in grant table handling. (XSA-380) xsa380-1.patch xsa380-2.patch - bsc#1189380 - VUL-0: CVE-2021-28699: xen: inadequate grant-v2 status frames array bounds check. (XSA-382) xsa382.patch - bsc#1189381 - VUL-0: CVE-2021-28700: xen: xen/arm: No memory limit for dom0less domUs. (XSA-383) xsa383.patch- bsc#1188050 - L3: Xen guest yval1a80 SLES11SP4 hangs on cluster See also bsc#1179246. credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch- Drop aarch64-maybe-uninitialized.patch as the fix is in tarball.- refresh the migration patches to state v20210713 removed libxc-sr-add-xc_is_known_page_type.patch removed libxc-sr-arrays.patch removed libxc-sr-batch_pfns.patch removed libxc-sr-page_type_has_stream_data.patch removed libxc-sr-use-xc_is_known_page_type.patch removed libxc.migrate_tracking.patch removed libxc.sr.superpage.patch removed libxl.set-migration-constraints-from-cmdline.patch added libxc-sr-383b41974d5543b62f3181d216070fe3691fb130.patch added libxc-sr-5588ebcfca774477cf823949e5703b0ac48818cc.patch added libxc-sr-9e59d9f8ee3808acde9833192211da25f66d8cc2.patch added libxc-sr-LIBXL_HAVE_DOMAIN_SUSPEND_PROPS.patch added libxc-sr-abort_if_busy.patch added libxc-sr-f17a73b3c0264c62dd6b5dae01ed621c051c3038.patch added libxc-sr-max_iters.patch added libxc-sr-min_remaining.patch added libxc-sr-number-of-iterations.patch added libxc-sr-precopy_policy.patch added libxc-sr-restore-hvm-legacy-superpage.patch added libxc-sr-track-migration-time.patch added libxc-sr-xg_sr_bitmap-populated_pfns.patch added libxc-sr-xg_sr_bitmap.patch added libxc-sr-xl-migration-debug.patch- bsc#1176189 - xl monitoring process exits during xl save -p|-c keep the monitoring process running to cleanup the domU during shutdown xl-save-pc.patch- bsc#1179246 - Dom0 hangs when pinning CPUs for dom0 with HVM guest 60be0e24-credit2-pick-runnable-unit.patch 60be0e42-credit2-per-entity-load-tracking-when-continuing.patch - Upstream bug fixes (bsc#1027519) 60bf9e19-Arm-create-dom0less-domUs-earlier.patch (Replaces xsa372-1.patch) 60bf9e1a-Arm-boot-modules-scrubbing.patch (Replaces xsa372-2.patch) 60bf9e1b-VT-d-size-qinval-queue-dynamically.patch (Replaces xsa373-1.patch) 60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch (Replaces xsa373-2.patch) 60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch (Replaces xsa373-2.patch) 60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch (Replaces xsa375.patch) 60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch (Replaces xsa377.patch) 60bfa904-AMD-IOMMU-wait-for-command-slot.patch (Replaces xsa373-4.patch) 60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch (Replaces xsa373-5.patch) 60afe617-x86-TSX-minor-cleanup-and-improvements.patch 60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch 60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch 60c0bf86-x86-TSX-cope-with-deprecation.patch 60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch 60c8de6e-osdep_xenforeignmemory_map-prototype.patch 60d49689-VT-d-undo-device-mappings-upon-error.patch 60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch 60d496d6-VT-d-clear_fault_bits-should-clear-all.patch 60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch 60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch - Dropped gcc11-fixes.patch- bsc#1183243 - L3: Core cannot be opened when using xl dump-core of VM with PTF 60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch- bsc#1180350 - some long deprecated commands were finally removed in qemu6. Adjust libxl to use supported commands. libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch libxl-85760c03d664400368a3f76ae0225307c25049a7.patch libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch libxl-qemu6-vnc-password.patch libxl-qemu6-scsi.patch- Update logrotate.conf, move global options into per-file sections to prevent globbering of global state (bsc#1187406)- Fix shell macro expansion in xen.spec, so that ExecStart= in xendomains-wait-disks.service is created correctly (bsc#1183877)- bsc#1186428 - VUL-0: CVE-2021-28693: xen: xen/arm: Boot modules are not scrubbed (XSA-372) xsa372-1.patch xsa372-2.patch - bsc#1186429 - VUL-0: CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (XSA-373) xsa373-1.patch xsa373-2.patch xsa373-3.patch xsa373-4.patch xsa373-5.patch - bsc#1186433 - VUL-0: CVE-2021-0089: xen: Speculative Code Store Bypass (XSA-375) xsa375.patch - bsc#1186434 - VUL-0: CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (XSA-377) xsa377.patch - Upstream bug fixes (bsc#1027519) 60a27288-x86emul-gas-2-36-test-harness-build.patch 60af933d-x86-gcc11-hypervisor-build.patch 60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch- Upstream bug fix (bsc#1027519) 608676f2-VT-d-register-based-invalidation-optional.patch- Add xen.sysconfig-fillup.patch to make sure xencommons is in a format as expected by fillup. (bsc#1185682) Each comment needs to be followed by an enabled key. Otherwise fillup will remove manually enabled key=value pairs, along with everything that looks like a stale comment, during next pkg update- Refresh xenstore-launch.patch to cover also daemon case- Update to Xen 4.14.2 bug fix release (bsc#1027519) xen-4.14.2-testing-src.tar.bz2 - Drop patches contained in new tarball 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6011bbc7-x86-timer-fix-boot-without-PIT.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch 60787714-x86-HPET-avoid-legacy-replacement-mode.patch- bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 60787714-x86-HPET-avoid-legacy-replacement-mode.patch 60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch - Upstream bug fixes (bsc#1027519) 60410127-gcc11-adjust-rijndaelEncrypt.patch 60422428-x86-shadow-avoid-fast-fault-path.patch 604b9070-VT-d-disable-QI-IR-before-init.patch 60535c11-libxl-domain-soft-reset.patch (Replaces xsa368.patch) 60700077-x86-vpt-avoid-pt_migrate-rwlock.patch- bsc#1137251 - Restore changes for xen-dom0-modules.service which were silently removed on 2019-10-17- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway. This resulted to over-allocation.- bsc#1167608 - adjust limit for max_event_channels A previous change allowed an unbound number of event channels to make sure even large domUs can start of of the box. This may have a bad side effect in the light of XSA-344. Adjust the built-in limit based on the number of vcpus. In case this is not enough, max_event_channels=/maxEventChannels= has to be used to set the limit as needed for large domUs adjust libxl.max_event_channels.patch- bsc#1183072 - VUL-0: CVE-2021-28687: xen: HVM soft-reset crashes toolstack (XSA-368). Also resolves, bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl bsc#1181989 - openQA job causes libvirtd to dump core when running kdump inside domain xsa368.patch- bsc#1177204 - L3-Question: conring size for XEN HV's with huge memory to small. Inital Xen logs cut 5ffc58c4-ACPI-reduce-verbosity-by-default.patch - Upstream bug fixes (bsc#1027519) 601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch 602bd768-page_alloc-only-flush-after-scrubbing.patch 602cfe3d-IOMMU-check-if-initialized-before-teardown.patch 602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch 602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch 6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch - bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch- bsc#1182576 - L3: XEN domU crashed on resume when using the xl unpause command 602ffae9-tools-libs-light-fix-xl-save--c-handling.patch- Start using the %autosetup macro to simplify patch management xen.spec- bsc#1181921 - GCC 11: xen package fails gcc11-fixes.patch - Drop gcc10-fixes.patch- Upstream bug fixes (bsc#1027519) 5fedf9f4-x86-hpet_setup-fix-retval.patch 5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch 5ff71655-x86-dpci-EOI-regardless-of-masking.patch 5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch 600999ad-x86-dpci-do-not-remove-pirqs-from.patch (Replaces xsa360.patch) 600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch 6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch 6013e546-x86-HVM-reorder-domain-init-error-path.patch - bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!" 6011bbc7-x86-timer-fix-boot-without-PIT.patch- bsc#1181254 - VUL-0: xen: IRQ vector leak on x86 (XSA-360) xsa360.patch- bsc#1180794 - bogus qemu binary path used when creating fv guest under xen xen.spec- bsc#1180690 - L3-Question: xen: no needsreboot flag set Add Provides: installhint(reboot-needed) in xen.spec for libzypp- Update libxl.set-migration-constraints-from-cmdline.patch Remove code which handled --max_factor. The total amount of transferred data is no indicator to trigger the final stop+copy. This should have been removed during upgrade to Xen 4.7. Fix off-by-one in --max_iters, it caused one additional copy cycle. Reduce default value of --max_iters from 5 to 2. The workload within domU will continue to produce dirty pages. It is unreasonable to expect any slowdown during migration. Now there is one initial copy of all memory, one instead of four iteration for dirty memory, and a final copy iteration prior move.- Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch- Pass --with-rundir to configure to get rid of /var/run- bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch- bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch- boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch- bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch- Fix build error with libxl.fix-libacpi-dependency.patch- Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere.- Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1- bsc#1178591 - VUL-0: CVE-2020-28368: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351 xsa351-1.patch xsa351-2.patch xsa351-3.patch- bsc#1177950 - adjust help for --max_iters, default is 5 libxl.set-migration-constraints-from-cmdline.patch- jsc#SLE-16899 - improve performance of live migration remove allocations and memcpy from hotpaths on sending and receiving side to get more throughput on 10Gbs+ connections libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch libxc-sr-add-xc_is_known_page_type.patch libxc-sr-arrays.patch libxc-sr-batch_pfns.patch libxc-sr-page_type_has_stream_data.patch libxc-sr-readv_exact.patch libxc-sr-restore-handle_buffered_page_data.patch libxc-sr-restore-handle_incoming_page_data.patch libxc-sr-restore-map_errs.patch libxc-sr-restore-mfns.patch libxc-sr-restore-pfns.patch libxc-sr-restore-populate_pfns-mfns.patch libxc-sr-restore-populate_pfns-pfns.patch libxc-sr-restore-read_record.patch libxc-sr-restore-types.patch libxc-sr-save-errors.patch libxc-sr-save-guest_data.patch libxc-sr-save-iov.patch libxc-sr-save-local_pages.patch libxc-sr-save-mfns.patch libxc-sr-save-rec_pfns.patch libxc-sr-save-show_transfer_rate.patch libxc-sr-save-types.patch libxc-sr-use-xc_is_known_page_type.patch adjust libxc.sr.superpage.patch adjust libxc.migrate_tracking.patch- Upstream bug fixes (bsc#1027519) 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch - Renamed patches 5f560c42-x86-PV-64bit-segbase-consistency.patch Replaces 5f5b6951-x86-PV-64bit-segbase-consistency.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch Replaces 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch Replaces 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch Replaces 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch Replaces 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch Replaces 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch 5f6a00c4-evtchn-relax-port_is_valid.patch Replaces 5f6a062c-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch Replaces 5f6a065c-pv-Avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch Replaces 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch Replaces 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch Replaces 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch Replaces 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch Replaces 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch Replaces 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch Replaces 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch- bsc#1177409 - VUL-0: CVE-2020-27674: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286) xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch - bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345) 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch - bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346) 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch - bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347) 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch- Update libxc.sr.superpage.patch set errno in x86_hvm_alloc_4k (bsc#1177112)- bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when handling guest access to MSR_MISC_ENABLE (XSA-333) 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch - bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in XENMEM_acquire_resource error path (XSA-334) 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch - bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating timers between x86 HVM vCPU-s (XSA-336) 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch - bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code reading back hardware registers (XSA-337) 5f6a05fa-msi-get-rid-of-read_msi_msg.patch 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch - bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event channels may not turn invalid (XSA-338) 5f6a062c-evtchn-relax-port_is_valid.patch - bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel DoS via SYSENTER (XSA-339) 5f6a065c-pv-Avoid-double-exception-injection.patch - bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier barriers when accessing/allocating an event channel (XSA-340) 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch - bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event channels available to 32-bit x86 domains (XSA-342) 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch - bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with evtchn_reset() (XSA-343) 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch - bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in evtchn_reset() / evtchn_destroy() (XSA-344) 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - Upstream bug fix (bsc#1027519) 5f5b6951-x86-PV-64bit-segbase-consistency.patch- Fix problems in xen.spec with building on aarch64- Make use of %service_del_postun_without_restart while preserving the old behavior for older distros. - In %post tools, remove unnecessary qemu symlinks.- Fix error in xen-tools %post when linking pvgrub64.bin - Make paths below libexec more explicit - Create symlink also for pvgrub32.bin- Revert previous libexec change for qemu compat wrapper The path is used in existing domU.xml files in the emulator field - Escape some % chars in xen.spec, they have to appear verbatim- Enhance libxc.migrate_tracking.patch Print number of allocated pages on sending side, this is more accurate than p2m_size.- jsc#SLE-15926 - Dev: XEN: drop netware support Dropped the following patches pygrub-netware-xnloader.patch xnloader.py Refreshed pygrub-boot-legacy-sles.patch- Fix build on aarch64 with gcc10 - Package xenhypfs for aarch64- Correct license name * GPL-3.0+ is now GPL-3.0-or-later- Upstream bug fixes (bsc#1027519) 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch- Update to Xen 4.14.0 FCS release xen-4.14.0-testing-src.tar.bz2 * Linux stubdomains (contributed by QUBES OS) * Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix) * Lightweight VM fork for fuzzing / introspection. (contributed by Intel) * Livepatch: buildid and hotpatch stack requirements * CONFIG_PV32 * Hypervisor FS support * Running Xen as a Hyper-V Guest * Domain ID randomization, persistence across save / restore * Golang binding autogeneration * KDD support for Windows 7, 8.x and 10 - Dropped patches contained in new tarball 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch xsa317.patch xsa319.patch xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch xsa328-1.patch xsa328-2.patch- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached ignore-ip-command-script-errors.patch- Enhance libxc.migrate_tracking.patch After transfer of domU memory, the target host has to assemble the backend devices. Track the time prior xc_domain_unpause.- Add libxc.migrate_tracking.patch to track live migrations unconditionally in logfiles, especially in libvirt. This will track how long a domU was suspended during transit.- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect error handling in event channel port allocation xsa317.patch - bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code paths in x86 dirty VRAM tracking xsa319.patch - bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient cache write- back under VT-d xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch - bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic modification of live EPT PTE xsa328-1.patch xsa328-2.patch- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch) 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch) - Upstream bug fixes (bsc#1027519) 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch- Fixes for %_libexecdir changing to /usr/libexec- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) xsa320-1.patch xsa320-2.patch- Update to Xen 4.13.1 bug fix release (bsc#1027519) xen-4.13.1-testing-src.tar.bz2 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch - Drop patches contained in new tarball 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- spec: Remove invocation of autogen.sh - spec: Recommend qemu-ovmf-x86_64 to provide UEFI firmwares- bsc#1170968 - GCC 10: xen build fails on i586 gcc10-fixes.patch- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation handling in GNTTABOP_copy (XSA-318) 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch- bsc#1168140 - VUL-0: CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch - bsc#1168142 - VUL-0: CVE-2020-11739: xen: XSA-314 - Missing memory barriers in read-write unlock paths 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch - bsc#1168143 - VUL-0: CVE-2020-11743: xen: XSA-316 - Bad error path in GNTTABOP_map_grant 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch - bsc#1167152 - L3: Xenstored Crashed during VM install Need Core analyzed 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch - Drop for upstream solution (bsc#1165206) 01-xen-credit2-avoid-vcpus-to.patch default-to-credit1-scheduler.patch - Upstream bug fixes (bsc#1027519) 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch- bsc#1167608 - unbound limit for max_event_channels domUs with many vcpus and/or resources fail to start libxl.max_event_channels.patch- bsc#1161480 - Fix xl shutdown for HVM without PV drivers add libxl.libxl__domain_pvcontrol.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 01-xen-credit2-avoid-vcpus-to.patch- bsc#1158414 - GCC 10: xen build fails gcc10-fixes.patch- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog bug soft lockup CPU #0 stuck under high load / upstream with workaround. See also bsc#1134506 default-to-credit1-scheduler.patch- bsc#1160932 - VUL-0: xen: XSA-312 v1: arm: a CPU may speculate past the ERET instruction 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch - bsc#1164425 - x86: "spec-ctrl=no-xen" should also disable branch hardening 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch - Upstream bug fixes (bsc#1027519) 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch- bsc#1159755 - use fixed qemu-3.1 machine type for HVM This must be done in qemu to preserve PCI layout remove libxl.lock-qemu-machine-for-hvm.patch- jsc#SLE-10183 - script to calculate cpuid= mask add helper script from https://github.com/twizted/xen_maskcalc domUs may be migrated between different cpus from the same vendor if their visible cpuid value has incompatible feature bits masked.- jsc#SLE-10172, bsc#1055731 - handle degraded raid for xendomains add helper script and systemd service from https://github.com/luizluca/xen-tools-xendomains-wait-disk in new sub package xen-tools-xendomains-wait-disk See included README for usage instructions xendomains-wait-disks.LICENSE xendomains-wait-disks.README.md xendomains-wait-disks.sh- bsc#1159755 - use fixed qemu-3.1 machine type for HVM qemu4 introduced incompatible changes in pc-i440fx, which revealed a design bug in 'xenfv'. Live migration from domUs started with qemu versions prior qemu4 can not be received with qemu4+. libxl.lock-qemu-machine-for-hvm.patch- Upstream bug fixes (bsc#1027519) 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.- bsc#1159320 - Xen logrotate file needs updated logrotate.conf- Update to Xen 4.13.0 FCS release xen-4.13.0-testing-src.tar.bz2 * Core Scheduling (contributed by SUSE) * Branch hardening to mitigate against Spectre v1 (contributed by Citrix) * Late uCode loading (contributed by Intel) * Improved live-patching build tools (contributed by AWS) * OP-TEE support (contributed by EPAM) * Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM) * Dom0-less passthrough and ImageBuilder (contributed by XILINX) * Support for new Hardware- Update to Xen 4.13.0 RC4 release xen-4.13.0-testing-src.tar.bz2 - Rebase libxl.pvscsi.patch- Update to Xen 4.13.0 RC3 release xen-4.13.0-testing-src.tar.bz2 - Drop python38-build.patch- Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2- Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call)- Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch- bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch- bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch- Upstream bug fixes (bsc#1027519) 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch - Drop 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Preserve modified files which used to be marked as %config, rename file.rpmsave to file- Update to Xen 4.12.1 bug fix release (bsc#1027519) xen-4.12.1-testing-src.tar.bz2 - Drop patches contained in new tarball 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8f752c-x86-e820-build-with-gcc9.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Refreshed patches libxl.pvscsi.patch- bsc#1143563 - Speculative mitigation facilities report wrong status 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch- Update xen-dom0-modules.service (bsc#1137251) Map backend module names from pvops and xenlinux kernels to a module alias. This avoids errors from modprobe about unknown modules. Ignore a few xenlinux modules that lack aliases.- Gcc9 warnings seem to be cleared up with upstream fixes. Drop gcc9-ignore-warnings.patch- bsc#1138563 - L3: xenpvnetboot improperly ported to Python 3 fix-xenpvnetboot.patch- Move /etc/modprobe.d/xen_loop.conf to /lib/modprobe.d/xen_loop.conf- Remove /etc/xen/xenapiusers and /etc/pam.d/xen-api- Remove all upstream provided files in /etc/xen They are not required at runtime. The host admin is now responsible if he really needs anything in this subdirectory.- In our effort to make /etc fully admin controlled, move /etc/xen/scripts to libexec/xen/scripts with xen-tools.etc_pollution.patch- Move /etc/bash_completion.d/xl.sh to %{_datadir}/bash-completion/completions- bsc#1138294 - VUL-0: CVE-2019-17349: XSA-295: Unlimited Arm Atomics Operations 5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch 5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch 5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch 5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch 5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch 5d03a0c4-6-Arm64-cmpxchg-simplify.patch 5d03a0c4-7-Arm32-cmpxchg-simplify.patch 5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch 5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch 5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch 5d03a0c4-B-bitops-guest-helpers.patch 5d03a0c4-C-cmpxchg-guest-helpers.patch 5d03a0c4-D-use-guest-atomics-helpers.patch 5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch 5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch - Upstream bug fixes (bsc#1027519) 5c87b6c8-drop-arch_evtchn_inject.patch 5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch 5cd921fb-trace-fix-build-with-gcc9.patch 5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch 5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch 5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch 5cd926d0-bitmap_fill-zero-sized.patch 5cd92724-drivers-video-drop-constraints.patch 5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch (Replaces xsa297-0a.patch) 5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch (Replaces xsa297-0b.patch) 5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch (Replaces xsa297-0c.patch) 5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch (Replaces xsa297-0d.patch) 5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch (Replaces xsa297-1.patch) 5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch (Replaces xsa297-2.patch) 5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch (Replaces xsa297-3.patch) 5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch 5cdeb9fd-sched-fix-csched2_deinit_pdata.patch 5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch 5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch 5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch- Fix some outdated information in the readme README.SUSE- spec: xen-tools: require matching version of xen package bsc#1137471- Remove two stale patches xen.build-compare.man.patch xenpaging.doc.patch- Disable LTO (boo#1133296).- Remove arm32 from ExclusiveArch to fix build- bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4". CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 xsa297-0a.patch xsa297-0b.patch xsa297-0c.patch xsa297-0d.patch xsa297-1.patch xsa297-2.patch xsa297-3.patch - Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch- bsc#1131811 - [XEN] internal error: libxenlight failed to create new domain. This patch is a workaround for a systemd issue. See patch header for additional comments. xenstore-launch.patch- bsc#1125378 - [xen][pygrub] Can not restore sle11sp4 pv guest after upgrading host from sle11sp4 to sle15sp1 pygrub-python3-conversion.patch - Fix "TypeError: virDomainDefineXML() argument 2 must be str or None, not bytes" when converting VMs from using the xm/xend toolstack to the libxl/libvirt toolstack. (bsc#1123378) xen2libvirt.py- bsc#1124560 - Fully virtualized guests crash on boot 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch - bsc#1121391 - GCC 9: xen build fails 5c8f752c-x86-e820-build-with-gcc9.patch - Upstream bug fixes (bsc#1027519) 5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch 5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch 5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch 5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch 5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch 5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch 5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch 5c9e63c5-credit2-SMT-idle-handling.patch 5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch 5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch- Install pkgconfig files into libdir instead of datadir- Update to Xen 4.12.0 FCS release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 * HVM/PVH and PV only Hypervisor: The Xen 4.12 release separates the HVM/PVH and PV code paths in Xen and provides KCONFIG options to build a PV only or HVM/PVH only hypervisor. * QEMU Deprivilege (DM_RESTRICT): In Xen 4.12, this feature has been vastly improved. * Argo - Hypervisor-Mediated data eXchange: Argo is a new inter- domain communication mechanism. * Improvements to Virtual Machine Introspection: The VMI subsystem which allows detection of 0-day vulnerabilities has seen many functional and performance improvements. * Credit 2 Scheduler: The Credit2 scheduler is now the Xen Project default scheduler. * PVH Support: Grub2 boot support has been added to Xen and Grub2. * PVH Dom0: PVH Dom0 support has now been upgraded from experimental to tech preview. * The Xen 4.12 upgrade also includes improved IOMMU mapping code, which is designed to significantly improve the startup times of AMD EPYC based systems. * The upgrade also features Automatic Dom0 Sizing which allows the setting of Dom0 memory size as a percentage of host memory (e.g. 10%) or with an offset (e.g. 1G+10%).- bsc#1130485 - Please drop Requires on multipath-tools in xen-tools. Now using Recommends multipath-tools. xen.spec- Update to Xen 4.12.0 RC7 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC6 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1026236 - add Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs if their expected frequency does not match exactly the frequency of the receiving host xen.bug1026236.suse_vtsc_tolerance.patch- Update to Xen 4.12.0 RC5 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- jsc#SLE-3059 - Disable Xen auto-ballooning - Add CONFIG_DOM0_MEM to the spec file for managing dom0 memory. xen.spec - Disable autoballooning in xl.con xl-conf-disable-autoballoon.patch- Update gcc9-ignore-warnings.patch to fix build in SLE12- bsc#1126325 - fix crash in libxl in error path Setup of grant_tables and other variables may fail libxl.prepare-environment-for-domcreate_stream_done.patch- bsc#1127620 - Documentation for the xl configuration file allows for firmware=pvgrub64 but we don't ship pvgrub64. Create a link from grub.xen to pvgrub64 xen.spec- Update to Xen 4.12.0 RC4 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Tarball also contains additional post RC4 security fixes for Xen Security Advisories 287, 288, and 290 through 294.- Update to Xen 4.12.0 RC3 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- Update to Xen 4.12.0 RC2 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2- bsc#1121391 - GCC 9: xen build fails gcc9-ignore-warnings.patch- bsc#1122563 - Virtualization/xen: Bug no Xen on boot, missing /proc/xen, after 4.11 -> 4.12 upgrade on X86_64/efi. Keep xen.efi in /usr/lib64/efi for booting older distros. xen.spec- fate#326960: Package grub2 as noarch. As part of the effort to have a unified bootloader across architectures, modify the xen.spec file to move the Xen efi files to /usr/share/efi/$(uname -m) from /usr/lib64/efi.- Update to Xen 4.12.0 RC1 release (fate#325107, fate#323901) xen-4.12.0-testing-src.tar.bz2 - Drop 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch 5bdc31d5-VMX-fix-vmx_handle_eoi.patch gcc8-fix-array-warning-on-i586.patch gcc8-fix-format-warning-on-i586.patch gcc8-inlining-failed.patch xen.bug1079730.patch- bsc#1121960 - xen: sync with Factory xen.spec xen.changes- Replace old $RPM_* shell vars. - Run fdupes for all architectures, and not crossing subvolume boundaries.- Do not run %fdupes on aarch64 to avoid the hardlink-across-partition rpmlint error- Require qemu-seabios only on x86* as it is not available on non-x86 systems- Avoid creating dangling symlinks (bsc#1116524) This reverts the revert of tmp_build.patch- Update to Xen 4.11.1 bug fix release (bsc#1027519) xen-4.11.1-testing-src.tar.bz2 - 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch replaces xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch replaces xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch - Drop the following patches contained in the new tarball 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbe-ARM-disable-grant-table-v2.patch 5b72fbbe-oxenstored-eval-order.patch 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch xsa275-1.patch xsa275-2.patch xsa276-1.patch xsa276-2.patch xsa277.patch xsa279.patch xsa280-1.patch xsa280-2.patch- bsc#1116524 - Package xen-tools-4.11.0_09-2.1.x86_64 broken: Missing /bin/domu-xenstore. This was broken because "make package build reproducible" change. (boo#1047218, boo#1062303) This fix reverses the change to this patch. tmp_build.patch- bsc#1115040 - VUL-0: CVE-2018-19961 CVE-2018-19962: xen: insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275) xsa275-1.patch xsa275-2.patch - bsc#1115043 - VUL-0: CVE-2018-19963: xen: resource accounting issues in x86 IOREQ server handling (XSA-276) xsa276-1.patch xsa276-2.patch - bsc#1115044 - VUL-0: CVE-2018-19964: xen: x86: incorrect error handling for guest p2m page removals (XSA-277) xsa277.patch - bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch - bsc#1115045 - VUL-0: xen: CVE-2018-19965: x86: DoS from attempting to use INVPCID with a non-canonical addresses (XSA-279) xsa279.patch - bsc#1115047 - VUL-0: CVE-2018-19966: xen: Fix for XSA-240 conflicts with shadow paging (XSA-280) xsa280-1.patch xsa280-2.patch - bsc#1114988 - VUL-0: CVE-2018-19967: xen: guest use of HLE constructs may lock up host (XSA-282) 5be2a308-x86-extend-get_platform_badpages.patch 5be2a354-x86-work-around-HLE-host-lockup-erratum.patch - bsc#1108940 - L3: XEN SLE12-SP1 domU hang on SLE12-SP3 HV 5bdc31d5-VMX-fix-vmx_handle_eoi.patch - Upstream bug fixes (bsc#1027519) 5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch 5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch 5bacae4b-x86-boot-allocate-extra-module-slot.patch 5bae44ce-x86-silence-false-log-messages.patch 5bb60c12-x86-split-opt_xpti.patch 5bb60c4f-x86-split-opt_pv_l1tf.patch 5bb60c74-x86-fix-xpti-and-pv-l1tf.patch 5bcf0722-x86-boot-enable-NMIs.patch 5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch 5bd076e9-x86-boot-init-debug-regs-correctly.patch 5bd076e9-x86-init-vcpu-debug-regs-correctly.patch 5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch- bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even when disabled (XSA-278) 5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch- Use SMBIOS_REL_DATE instead of SMBIOS_DATE for reproducible binaries- make package build reproducible (boo#1047218, boo#1062303) * Set SMBIOS_REL_DATE * Update tmp_build.patch to use SHA instead of random build-id * Add reproducible.patch to use --no-insert-timestamp- Building with ncurses 6.1 will fail without xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch - Building libxl acpi support on aarch64 with gcc 8.2 will fail without xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch- bsc#1106263 - L3: The affinity reporting via 'xl vcpu-list' is apparently broken 5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch 5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch 5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch- bsc#1094508 - L3: Kernel oops in fs/dcache.c called by d_materialise_unique() 5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch 5b9784d2-x86-HVM-add-known_gla-helper.patch 5b9784f2-x86-HVM-split-page-straddling-accesses.patch - bsc#1103279 - (CVE-2018-15470) VUL-0: CVE-2018-15470: xen: oxenstored does not apply quota-maxentity (XSA-272) 5b72fbbe-oxenstored-eval-order.patch - bsc#1103275 - (CVE-2018-15469) VUL-0: CVE-2018-15469: xen: Use of v2 grant tables may cause crash on ARM (XSA-268) 5b72fbbe-ARM-disable-grant-table-v2.patch - Upstream patches from Jan (bsc#1027519) 5b6d84ac-x86-fix-improve-vlapic-read-write.patch 5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch 5b75afef-x86-setup-avoid-OoB-E820-lookup.patch 5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch 5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch 5b8d5832-x86-assorted-array_index_nospec-insertions.patch - Drop 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- bsc#1078292 - rpmbuild -ba SPECS/xen.spec with xen-4.9.1 failed xen.spec- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM (XSA-273) 5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch 5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch 5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch 5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch 5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch 5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch 5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch 5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch - bsc#1103276 - VUL-0: CVE-2018-15468: xen: x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS (XSA-269) 5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch - Upstream prereq patches for XSA-273 and other upstream fixes (bsc#1027519) 5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch 5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch 5b3cab8e-2-VMX-improve-MSR-load-save-API.patch 5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch 5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch 5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch 5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch 5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch 5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch 5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch 5b505fe5-VMX-fix-find-msr-build.patch 5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch 5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch 5b62ca93-VMX-avoid-hitting-BUG_ON.patch 5b6d8ce2-x86-XPTI-parsing.patch 5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch 5b72fbbf-xl.conf-Add-global-affinity-masks.patch 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch- Upstream patches from Jan (bsc#1027519) 5b3f8fa5-port-array_index_nospec-from-Linux.patch 5b4488e7-x86-spec-ctrl-cmdline-handling.patch 5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch 5b4c9a60-allow-cpu_down-to-be-called-earlier.patch 5b4db308-SVM-fix-cleanup-svm_inject_event.patch 5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch 5b5040f2-x86-AMD-distinguish-CU-from-HT.patch 5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch 5b508775-2-x86-possibly-bring-up-all-CPUs.patch 5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch 5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch 5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch 5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch gcc8-fix-format-warning-on-i586.patch gcc8-fix-array-warning-on-i586.patch - Drop xen.fuzz-_FORTIFY_SOURCE.patch gcc8-fix-warning-on-i586.patch- Update to Xen 4.11.0 FCS (fate#325202, fate#325123) xen-4.11.0-testing-src.tar.bz2 disable-building-pv-shim.patch - Dropped patches 5a33a12f-domctl-improve-locking-during-domain-destruction.patch 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a9985bd-x86-invpcid-support.patch 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch 5af1daa9-3-x86-traps-use-IST-for-DB.patch 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch 5af97999-viridian-cpuid-leaf-40000003.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch 5b348874-x86-refine-checks-in-DB-handler.patch 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen_fix_build_with_acpica_20180427_and_new_packages.patch- Submit upstream patch libacpi: fixes for iasl >= 20180427 git commit 858dbaaeda33b05c1ac80aea0ba9a03924e09005 xen_fix_build_with_acpica_20180427_and_new_packages.patch This is needed for acpica package to get updated in our build service- Upstream patches from Jan (bsc#1027519) 5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch) 5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch) 5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch) 5b0bc9da-x86-XPTI-fix-S3-resume.patch 5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch 5b0d2d91-x86-suppress-sync-when-XPTI-off.patch 5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch 5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch 5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch 5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch) 5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch) 5b238b92-x86-HVM-account-for-fully-eager-FPU.patch 5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch 5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch 5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch) 5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch) 5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-<>.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch 5b348954-x86-guard-against-NM.patch- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch- bsc#1098403 - fix regression introduced by changes for bsc#1079730 a PV domU without qcow2 and/or vfb has no qemu attached. Ignore QMP errors for PV domUs to handle PV domUs with and without an attached qemu-xen. xen.bug1079730.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1092543 - GCC 8: xen build fails gcc8-fix-warning-on-i586.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" (XSA-263) 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- Always call qemus xen-save-devices-state in suspend/resume to fix migration with qcow2 images (bsc#1079730) libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch xen.bug1079730.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae31917-x86-cpuidle-init-stats-lock-once.patch 5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- bsc#1092543 - GCC 8: xen build fails 5ac72a48-gcc8.patch 5ac72a5f-gcc8.patch 5ac72a64-gcc8.patch 5ac72a69-gcc8.patch 5ac72a6e-gcc8.patch 5ac72a74-gcc8.patch 5ac72a7b-gcc8.patch gcc8-inlining-failed.patch- Update to Xen 4.10.1 bug fix release (bsc#1027519) xen-4.10.1-testing-src.tar.bz2 disable-building-pv-shim.patch - Drop the following patches contained in the new tarball 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch xsa258.patch xsa259.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Upstream patches from Jan (bsc#1027519) and fixes related to Page Table Isolation (XPTI). See also bsc#1074562 XSA-254 5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch 5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch 5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch 5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch 5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch 5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop xsa252.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- Remove stale systemd presets code for 13.2 and older- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Replace hardcoded xen with Name tag when refering to subpkgs- Make sure tools and tools-domU require libs from the very same build- tools-domU: Add support for qemu guest agent. New files 80-xen-channel-setup.rules and xen-channel-setup.sh configure a xen-pv-channel for use by the guest agent FATE#324963- Remove outdated /etc/xen/README*- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with MSR emulation (XSA-253) 5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch - bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch 5a5e459c-2-x86-report-domain-id-on-CPUID.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch- Fix python3 deprecated atoi call (bsc#1067224) pygrub-python3-conversion.patch - Drop xenmon-python3-conversion.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 build-python3-conversion.patch bin-python3-conversion.patch- bsc#1070165 - xen crashes after aborted localhost migration 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch - bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb: libxl__devices_destroy failed 5a33a12f-domctl-improve-locking-during-domain-destruction.patch - Upstream patches from Jan (bsc#1027519) 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch- Update to Xen 4.10.0 FCS (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Rebuild initrd if xen-tools-domU is updated- Update to Xen 4.10.0-rc8 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch libxl.LIBXL_DESTROY_TIMEOUT.debug.patch- Adjust xenstore-run-in-studomain.patch to change the defaults in the code instead of changing the sysconfig template, to also cover the upgrade case- Update to Xen 4.10.0-rc6 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Since xen switched to Kconfig, building a debug hypervisor was done by default. Adjust make logic to build a non-debug hypervisor by default, and continue to provide one as xen-dbg.gz- fate#316614: set migration constraints from cmdline fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10- Document the suse-diskcache-disable-flush option in xl-disk-configuration(5) (bsc#879425,bsc#1067317)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to Xen 4.10.0-rc5 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - fate#323663 - Run Xenstore in stubdomain xenstore-run-in-studomain.patch- bsc#1067224 - xen-tools have hard dependency on Python 2 pygrub-python3-conversion.patch xenmon-python3-conversion.patch migration-python3-conversion.patch xnloader.py xen2libvirt.py- Remove xendriverdomain.service (bsc#1065185) Driver domains must be configured manually with custom .service file- Update to Xen 4.10.0-rc3 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Adjust xen-dom0-modules.service to ignore errors (bsc#1065187)- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- Update to Xen 4.10.0-rc2 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2- Update to Xen 4.10.0-rc1 (fate#321394, fate#322686) xen-4.10.0-testing-src.tar.bz2 - Drop patches included in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch gcc7-mini-os.patch- bsc#1061084 - VUL-0: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1056278 - VUL-0: xen: Missing NUMA node parameter verification (XSA-231) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch - bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232) 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch - bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup (XSA-233) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch - bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch - bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Unignore gcc-PIE the toolstack disables PIE for firmware builds as needed- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- bsc#1044974 - xen-tools require python-pam xen.spec- Clean up spec file errors and a few warnings. (bsc#1027519) - Removed conditional 'with_systemd' and some old deprecated 'sles_version' checks. xen.spec- Remove use of brctl utiltiy from supportconfig plugin FATE#323639- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- fate#323639 Move bridge-utils to legacy replace-obsolete-network-configuration-commands-in-s.patch- bsc#1052686 - VUL-0: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- Add a supportconfig plugin xen-supportconfig FATE#323661- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- fate#323662 Drop qemu-dm from xen-tools package The following tarball and patches have been removed qemu-xen-traditional-dir-remote.tar.bz2 VNC-Support-for-ExtendedKeyEvent-client-message.patch 0001-net-move-the-tap-buffer-into-TAPState.patch 0002-net-increase-tap-buffer-size.patch 0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch 0004-e1000-secrc-support.patch 0005-e1000-multi-buffer-packet-support.patch 0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch 0007-e1000-verify-we-have-buffers-upfront.patch 0008-e1000-check-buffer-availability.patch CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch CVE-2015-4037-qemut-smb-config-dir-name.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch blktap.patch cdrom-removable.patch xen-qemu-iscsi-fix.patch qemu-security-etch1.patch xen-disable-qemu-monitor.patch xen-hvm-default-bridge.patch qemu-ifup-set-mtu.patch ioemu-vnc-resize.patch capslock_enable.patch altgr_2.patch log-guest-console.patch bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch qemu-dm-segfault.patch bdrv_default_rwflag.patch kernel-boot-hvm.patch ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch ioemu-hvm-pv-support.patch pvdrv_emulation_control.patch ioemu-disable-scsi.patch ioemu-disable-emulated-ide-if-pv.patch xenpaging.qemu.flush-cache.patch ioemu-devicemodel-include.patch - Cleanup spec file and remove unused KMP patches kmp_filelist supported_module.patch xen_pvonhvm.xen_emul_unplug.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch/sbin/ldconfig/sbin/ldconfigh01-armsrv3 1699864981  !"#$%&'()*+,-4.16.5_08-150400.4.40.14.16.5_08-150400.4.40.1libxencall.so.1libxencall.so.1.3libxenctrl.so.4.16libxenctrl.so.4.16.0libxendevicemodel.so.1libxendevicemodel.so.1.4libxenevtchn.so.1libxenevtchn.so.1.2libxenforeignmemory.so.1libxenforeignmemory.so.1.4libxenfsimage.so.4.16libxenfsimage.so.4.16.0libxengnttab.so.1libxengnttab.so.1.2libxenguest.so.4.16libxenguest.so.4.16.0libxenhypfs.so.1libxenhypfs.so.1.0libxenlight.so.4.16libxenlight.so.4.16.0libxenstat.so.4.16libxenstat.so.4.16.0libxenstore.so.4libxenstore.so.4.0libxentoolcore.so.1libxentoolcore.so.1.0libxentoollog.so.1libxentoollog.so.1.0libxenvchan.so.4.16libxenvchan.so.4.16.0libxlutil.so.4.16libxlutil.so.4.16.0xenfsimageext2fsfsimage.sofatfsimage.soiso9660fsimage.soreiserfsfsimage.soufsfsimage.sozfsfsimage.so/usr/lib64//usr/lib64/xenfsimage//usr/lib64/xenfsimage/ext2fs//usr/lib64/xenfsimage/fat//usr/lib64/xenfsimage/iso9660//usr/lib64/xenfsimage/reiserfs//usr/lib64/xenfsimage/ufs//usr/lib64/xenfsimage/zfs/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31421/SUSE_SLE-15-SP4_Update/6619fe44a350c04f98e3369bd21d2f51-xen.SUSE_SLE-15-SP4_Updatecpioxz5aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b4a27ef0fa65d625cd2e69ba1e64fb9c0c3e564, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2687dcb7ace6934bab3adb8767ab80624a57ed98, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e88d2c1e64b2d7697f0ca6a34b00b3abdfbb9a9d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=34ec74109860267393521e11a70827f93596efbe, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=39b146de0db8bee2c57fb7f586519ac70c1b187f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=90cee6252229652ab3204821eb766631e02cf08c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e0e7dc2567e9590755f36a6a0d92a02b1e90de27, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=25a8232a6a14154af429212ed1eaeec00195695f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=db43f0c1d5f0aa8beeae36bb47f922b6e9e95a45, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=702fa5e076c6afbfb827086f170c508625ee6668, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=84ed5fccf22c36fba294900b4a61d634c5af63ae, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=40a32d9e61a87d35bdecf56d5b908b528d6977ac, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7e76030789c12f6a6978fe108965455b8434369, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6fbf248edb96985b8146de82ccc97d5bd9558e02, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0e2d3b8a5f975f9aa0eaa64c5f329b8d1fb33ec5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=84fca346fde42db01df48ae4e1f4f5119cc258ec, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2123a693447d931da5cae2883dc205a04f1941d1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1028cd0afa0234c55b8a991061b196ef6a37a0c4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fcfaf2e3c48a1c2b9c0353d67a8800b2dbb4691c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d99226dbead5ab5d7196bf098fd98395dabab2f1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ccbfd98ae5d90fa069df4b544f4044e18f245cfa, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=67cbfe9cc4accb865dd46dd8fb8e341632d7ab3b, stripped(>Nbjz    PPPPPPPPR.RR0RRR/R-RRRPPRR0RR$RRRR RRRR/RRR#RRRRRPP P P P P P P P PR.RR0RRRR/R-RRRRPPPPPP R.R0RRRR/R-RRRPPPPPPPPPPR.RR0RRR/R-RRRPPRRRRRRPPPPPPR.RR0RRR/R-RRRPPRRRRRRRR2RRRP PRR0RRRR/RR2RRRP"P!R0RRR RR(RRR RRRRR&R,R/RRR+R'R%RR R RR R1RRRP$P#RR,RRRRR+R1RRRP&P%R.RRRRR-RRRRP(P'RRRRP*P)RRRRRRP,P+RRR,R$RRR+R#RRRRP.P-RRR*RR)RRRRR"RR!RRRRR"R!RRR"RR!RRR"RR!RRRR"R!RRR"RR!RR GeZutf-82110b8ac33afd07cd89f88d8a9314b09ed205c6f196ea1910754606519150438?7zXZ !t/=C] cr$x#JvV*S[9,P3jI?>(QL:$iP g5S9\ErE 8 8/澑!ٲSV.^iҷvh8̲Qj&It ѥx`rnam e_T׊*u6ၶҚ Wa`-U:N_vYC"/xaTϗ&7F)ܖKjbmLqxl0 Ѧ3gmYj{[SxHz|F3)]D׳$vTYИA]o].Ԫ6 hcHVh@aUKnWe;B:}CG)w#(3h}-ikNfRҩtSF-6T QJJ7]'RsaF;|'ǘfiV qEwp}Ê]yY73Q[6mX|{m{lĊ:- .[gu2)1Q.||b}dqtSMR[r+QxG2:=)coGz Y:L|ox9> .C} ;`,V$NEi{VEXRS3As5yΖ֔i:.GEb*w'5\4Y2tV=bH1z,ԩ/=/a5-\ᴺI^-?j7R1x3suR.3S- 9l݀JL(%?h~a͵"zi6URXSz=nzc !u=R`Hbr1ZiB,Q \cMMc/;1 !s !!0NY's2;5N-3 V ZZ&}/h$Lq  tA)ie;l!ZZy}vЄXmGWry vuP#q8*p͵«g7B</D~b>&F9azɍSLdاPs$!^%/i@ꫝo38]C2Oٹ&m7zt=kkNB@y fVC  poմ3èm}M~JV*LewTk+QAcsQ̌}ZΔ5/'QـBgrAa$ ŷQ5M잗%_/wln<xd|{B]*":a0Z hWE`\)#6lE \vL;!hdz#.8p溧B)$VtXT,].HT^Hx>Ap#Q?x2%d_ph1 307fprJZU9I^pfIס.ぅ6JiM i3d+*1tfqzpnq(-T&6tK1C1]8$]ߪKM3L`z4}W=<1w@J⹔``f&unD{ZE#"{5$N Ö'dχw$Cak3ݹ?gTCU] U6a#77[:?G,J@bX~sN ej&8My薖&Sp.%ml,Uvdב3V?;'S%9zzHW?|18XlH;TUwbX3lŰ`;/ 5n0kf_mŨx--IH$K̃|D%+\|rG=9ɔ@gVBO#SO}8* ;Dm>lI—puyZ?`̒LC8tRXov0݊x@+KPq:Ȭb9AqfR78<2ŨU|i*5 盂yr5ތ炀ZZ*hRQ hy ixu'T֬òVpW hpxɪ,v&Z~;cMTLMmťch*+{ᱼ>I#k~W%t A)Or-v6 j\ 3ټ0϶ѧDn{v+Ηgb^ǫ.X Jˤ[S qjRUtFb%eEf/v"F5#nbu{P帧gHnkB@#tOY,8E[`[%MVG/ě\iqI O;>}br5 P*pUR<VpIáUce_d?hE@ $ ߒ8Uor`:w e=m$g]b%hT86j#ݰlEdG86'1$7Daǡ;e@ oΎe?]tA[3'gTEw=h$WB1ωAًԦiK%+ɖJ<ę 5,ȟEG1%ۀ% /RGOWfq3Nr6A[ E܆_ 2WI]tF\AҶ2bke<9q%z5 WgV;b[EN1oA|) &T[K`%Ǻz}l6;!Nk?j1MǸR1{FNƗ|'lD@vƂ“H6Whޢ q,J(F'6w(sJ30/_LizցB<ܩF G^1~3&Le.%Ґks/<$^!-Xv]rP hxlLI7Yj)Z/P:̖LptDSwXm^״(TKHb/,&4eVvp^N*b╁yI@D;vT̮?JUZV'C?a:N.,;6lIQa'FU_ؼP2+:HHo .DW:v_GP^Uן*zωV;t9T*_mT"@`3[{Ķg In@! L'Hd06(9kL, Pm.b}m@8ɵ(vgɻ LuPʄsg6`MDxVC\d[=}7i\K=-ÉlUvH%c}*?@bAfvlf?vq?Iz,&g-qD.D!e4&^!USܯ 8X[D1."뤹 P6䔼Ad*i$w!RT= VyU;3xmx:8x(a dq3#3?-CZ aQn|ě 1 qp6@4[*%ܮ(ͦf*llf6WÒ ꋇeChٍotu7C/y^jh_7lT!%Nk_ *U1n5bCי`Kp?0OyRmX_ 5хz穉 z@yFի&&-@ӆ[n6j󷊞 Ye-ްT$H i9hӡO8mQ< }C H dʳ]9+ ,:;Uԝ9hܝz*e(20Uj;`Ģ Lx%YVj;["݊xbkd:q)=T)ArHAUZ~҈LnOP˱6*RӝB JSCFݛJ"%Qk*uM6p]L.o[Ӷ0YDz&|ج}Ctg7J<davNu1Gf.v} $?xX#pF$j0ԸH27@^+r).zqHǓ}v$Z0Pxֽb<_Z%dCZfA;QA'jG uwrwB$k|#Xw+NOI,/׊*zv׎+%-$5iI5S;-*|HQ-8){4%)'+9;fR|X~8JOk ;d5N5sɂ=kx\_/AN`gv󦽵[3`񤩴D}<]~)8:(n=ثk-K^kVs5~N|FM\F{U%AkO7%0uVN!h$.ӞuZ6#u1^S%e)Dh{@n%fB^V*vK@mbj=wA@z}BF/t~L.kA%/7^q[dsׂ.O˻yJB#N@;3.j^@ȄgZsz^?}!*$&vhp::mbʖFw|6%vŅ L:wvWcf}aCigK_5^te BZ]q,{Qɬd@BS2uH9j*qk;P@eDR6 ڼQ\TܓB0I \pg.󤂏3c{LESa݁H?" #}"OfeLB+<S#.kKH CT90q"sQn/F-32ӕnLA o^(:03.]ElϡXkG1_Ȗ5_tLpM~N˅);$$fz b$@AU& e:8vE7vQAm<+xW>;qFѩyxy9#$V MŗyN?F1QGaN%ۺg /kjr42TO lH*H9¥E]2z/1LI6d'\^# ,0bMj+{,L< ʟI:+DsKķّUc š~^*eJ6<:HUB~i#BT&?LvsɜpЅEco!%)> Oدop1 ~LT Y;p $Gʩ[T^p7۴-uMKx ]l陧$i\ `X&e%^.lQnŲhjgyq-DU444 z]  \`H 6]s|=fܹ|ʳ  SGsk?g ހS&PBw W\^yczLWDǰe4>(Kzkʧp1 >lgf5=K| ':MVgO1WVq1޾;r#HbEf;g1'&^ ΑCC !kSRT\` Q_݌DSTUB'OrM0Ϫbi -Nb6ˊ@Ux~Ap= lmk]@[ta*o'b>u軤]'hXSeaͦqj֮փ&3HZsf>/'w® Fz hsqk.NVExM զis`tO!vW,{ɅUJ[M\&wk[9qT]%8^ kM5:% ũqzW>E8~:u&{<SC C5$taUfG'ѬyZNb-\tP?Ւ=mgaGbajm/Oih7yX+5 & @]d.+^2 \S0fDUNL*7[ܥwhm@9s`."u˚;${S\8A>#gFCӗgD|%Cp`J=MkExn ֒ɂXܬq[KX'a%} )웞뉔'"CN;3vN7+K?2t 0Hܐ3j.m@Fk:ϗQ?7sMF.&qښǙr 4}NR7ʭ n[~}V8ȧIm<3=kǸǴo뒹4R?ᛡB8(q{YU|TBw'YeiiTՄQ=%,H&g[}q@G6R(+K{9NI;8’Gpm]u`aEoUOG4,}lGKMAaqٔj*5v7g` ,-'ԜΤu&`1Bn_#2LV W&p@ES=^~L_ q K}ޟ uJ aT'S&%~l/pҚ'uN]qa[j1 พ7GDr{GW >BgG^iN_oEȎJOa-xLm+>>ցjأzy,q8]SLzHGXOU徆(JrTiErd L#*$u0m!xN^ʺdhoep N%?IkQ)S*Z-^wä˞ ؈C*~Zz/NPWkVeDZG(&;NR5N>O,qg]kA;z!zt\IF/ u%Я43Y ]0, d9[kMTvnNd**fppc`.5߸K,]NZiXtn,s7Q93 B0e@!ȍn!%')}{Vzz9+#Me`kWy)ٚ/뛷1iz㭋lgYɔFuΎ޽>[J2 ӳQ(o8h^K(ǜ6oz"_ap(ZddR(pnu-eapiOvl${ [2<_F~ʥ rJ-4HI|heH#Q5?XR:cy Jݎ؝EQG@x}z!Mx}]܈b< ]?YZ4_ctbo2UHbYsڕ,šwA&՗MlUtWļ[}B 29mW ԇSPLjV]|֗_K< dvk[i_)Lcג$e>38iҁE= W2O\+K -fX'&=\p;Ǭ<(sba-D0wrN1,o 퉔[XeEŕ~:a˷[1&ރ ϐ'[](Ń2XD&jh+|D)o#(3] v\|5viA7X1TOT($y{%cN*gXCL7nTہpwD9=g )[zl=LR䡹Q0ݾ{>ha0Py%_L RDiQ|Pt3J K"~ @*n Zc e'$]G,esAbu`y` \CAdrC t?ؤm{xN>|nd70ytvBO:Cj^FեǼ7}bE(w#k"8ȩ- c2܃荳;ʯYWAQ OzK}eRk`^zÂ*-BLFoU*$*cmk/Ut_2B}in_]S'm9P8 c;dZݍg  I刴cAp)om>>==2`:}k|6t5Z80R5n:69GCDtX?l6OYwSs#Tx mPKS]9s"Xk6i3H2tC"L'62Vb<B2PRZHl V_6sQt:"W`̄_z+͔ΈBAj446$ߋ 0r]tKeoc5_L68֩'eųąڢX0& s8`,-{r ;::>9v67r Rl%dYת7JX \s *jb.=k2J-S#֖.|ѵk"fq:gJ"R zNmEfI"qw xQ K)4M7 TDPcjtW͖oF"&GhWc&9/UXXeLb]쵸z_7$uN`L&1ȤwԷ p|G'kA'bL`0oDfK++T=pcrߕ6:+4'=jQ?A1(1>JslMOA kzX(yf_Ngl2 שS<`FvfaxOcd8ED RAY [xܥ(@$^ym-Kz`~ZI;t\1;X=veէtpt<.|wJ0֞ޤ!;%O;t^9 ='vj_is  TO_+ m@ʗ.fd+֚ R8: !|c0Kljd:i.b ^Hwr1s%"z ]1g/*1rȞ])K,wAnT;Q'zAOd}H o}㜛":͒w6ϐ :/&4ַ2r+ 0] DR $N*bˊШsQ(gG]Wb|x;c#P{/mZ7L#_€Ez7@q}i3b+8U%$%U}a/5^eU'&Fl!WPaSi?12 R-Ym1 V}gCo*+EgW8[ȃ+l+VlBŸ0fJF3g"#,NM"e%t ;n'x@,=u.DQjpҺ{ e4HrsnuDxV[0#L )oɪka1un ҤvgPdT 4m Rergol58x ?5kDtm6I/  Ԛ~||]kB*mG ˞>mX3+YJY`Og:Jjc2=GqG$ۓA\vAJ}t7n;",U} a@ӨB?n#0GطJ%Vlb~*/:~8ΣoJ IEU%vO󯟴d36AՀ4IMk&2*KN-0cY?>Q+ɓ훟9Sڊcs?~; 73BxoPO($ Ўf#Up¿54A6yH|ǟf ̈́%yϫ K1,8C@Rtz{xwdZC~&*f֤HiJe.' 3P&8K_rl>.z#4Z+ sһ!OaWcO^ԣG `ϻ xbo|Ux 0nK(HkJ5"kwfĮvT<M*A؈ګǻC6U@٫`c.?PX!7TYxvia*a?["},Kn9@/)- ^R\,/b7K.+R hNU3LPz740j\,TDntកF¢cr=:Z8N[a5aA :w -l̬U)YeUt]Fh]s*aeQġ^L$' ۋOZ|$ʻF˲kb{t ٟڤ;-E// ȱ9\Q=@4dt9 ||pNmN/A/BD~:ߩ260FxTJΟ%aiPQb:M8/Z9}8U$r1[`]z·K 6~ 2Hqd`~S/m%GewYʱqMuY-'׺C"b'cQ3C?'nێ+$RGҩj]+j ekv޼̌ɷe]ٌ'?7'9!XQiD-`Q|Ax~#}_SҺ  9 c;Jthu $\<*ɏܵZUHx Ri -W$'Dy}YI`՜ 5s?ZÑ9@ݨOsq;"F${xX`2=cb.6j O4 S-黛aʶ,Kj HEok-{e3D.a GV⿼s{=vR+Zu6fy7@{T\]W5d54u\^roL d $7u;4heݮ@T$ee5a'{ظ;OƂx-&^M4+fe`={%$(G.@E vB O+[N'jɻy``飄Y&g5L9kynr Nefӽv9fGTj._ H ٴ#B Ec=Gϵ0`eI)v/2?a&Mjp%dݼ~1*?3*`9^œX 0)P\7bO&7wة0JXK;GC_} .qr3C"Mam.'VkbjH%Axzlv:ɰqyy-BcF"hQ-y 𯝅Lb#x-}r9=t+Ce \DŽ=%v+wk9`u})}4l6p{U[=(ھh])*v+gY s8rHJf>r !") ʆ5*)$k_11dkC0# "=$RHqE?ke.||7b[:D7*Qg(MlIoװC70I^0 -1l0.!hy7@I@puQm{pD8k%T@ܕ=mU%M⵻oDžV!$/uO=χK/ zm~1Ptk9G{0u_BNKaּ*c/;bO]ȣh-tTWTQDB4 ϻ11nu|Ah1OkÓj>ۤ:ct0Gkй)w ID;:$d~ 0qDӶ Ylk]Ie&S1M%fHʒiB<6o,wC;Kb9gNnky'_"(Z8e۲|  `8tuHᦻS"zpHo؄ a#a5As cHx-ܨOʮrD`r# /^>mrLmVg^).;c n_[?R\-|7b[GΈ*خ;rCc0/'w|7@c#dSNZmvÞϲtSrezi:˻bȕU}P^Qx 1)ZW7 1:B$~[\KHhju$tOڷtɿ'S:%!Fq0y(7gKѭe8 aNЧuEnh)^YH¯`E>a⚺gnFH˗.]X )lk }FhvpCIQWa;@Ԋ!:p̘0euR1,y~h* R ?G-Z g(MIZ;Wyipu˖4uqln8>r^GN'?e$(G1[*Ǧ Rk^Λ,,diJwMeo7A#f=aF;]cT,ciWh SvA 3pqOFO9哖o)8\ XϣJc}s,˗̹)0tow8˞'5ϙ нfu ;E꺒"r|?4'dG墲!X1mH3C{AcꞋSQw>$*W\U@]fXsyS@M)Te6rگ0񨄩ciO> )ʄ kS,DVqǙQx!i8ܕ :}X|5En׻Jh}t kR`*ߊc`*K~UIxN t߬"c %?=SuF8䑌S7nijf=*2.,QGxԵ"WX,2Ȝ*zSmxtUYÌ_z=>~ar7Wj >/F h3?25]bch=kH]bgnK"*VkSO +Cgtҳ;`D𧹫fװ/^TFwe|Z 2a~CKy3r -g+^N.\W*d3ls,=2ť$W۫s^:[1t]a3+1HUGi}!*8( 0D!` 1$2'y'e;xyX7c%O٧%ODaZԿ_9`' :i^IA̍]uC6`kܙPר{%7yc)DV!LZOtAԁ^?s+[W6MyrH|r6͕YaH3JLk_<r]wtؾSGH(mG9ẐYlZX,84&E8cH1+*0\֫m6`>*xqFB+(Qu J5wJ7 mmDz!Fl{[p@ӣϽ = 21riKr y7doAC$ϤFFQe1s<2sO!L4])s\A Չu1 X?mIpt(lmlakGs0UChCR%%'*L>Ыւy54~7kжB˲yQ'4YFC1Qҧswl]-|^[i֊qh#% c*{˦Mu %n/ClCV?h/ZKl`ϟs|8ofŰL^/{v>zCEEQ.'jC8J+CZx4 U pɌbO:~@[q,w]mi1^r6B7ޢD8C,2׎_a!%WQG6}]E{{hXuz֥p 4jox׻;bƽJ!NLO_(96^zط~*ɭTR3 vh$ D?Un+?Y\!QOG-Uűɋ+ c':VF`M\mCaD'0'kN[p1F ]2U1n Rt|Q˷&=6'_ޖ5OMg+(aQǴmoy6,#DZQbTݒZs'4jAE>x-h1_nڢkWiƖcH@r츽n mqGP}tps}5 !E$ 0LO$ x˜5)=kۨxW@T_so}W9UIz,X^#"# a"5Q%sQ\ڡR#/5J[@"]Hu ۑGg<٧3hГ8G+@edV2E[eO bFW`$4GX~#sPޚUiZr\U,8ȦA{fD$<_zӎny "t!OrBpvXafI4b$Aﱞqa+]5x1URˋ `W^mL1Vd-Xڕь3yb!1V:pt|&_Ǹx׍|h\v\͌ĠHkʖ ?LTvj@5E& -7g B M?>=]05aԼW{?Cr9TjMw<%Yc\h3Vz~[Lci?fvtpZa 9<b+&ū38!g6sYE~L+W)ɐ3pY |Hꍯ(ߜ>Y89 ZCI'ƙmYs0y:Pخo`1ȭ~&cW?BYyDMY*d/_յEo ՝p¸IPm[m,hE\.Dnh is}bSF>"yx vO2 Juezwfh{* [G)caU3ϼNFVq1yzX8j11QґZ gv#1+Nj,& 6iz~Z~G򄠎  {{Z-U~͎~H,2n3`ti4q{KD2MHuGV'zOhizB w aLccq:GZu7. R>iQ'6|b U?qa"lí֒ ī( -~Nga kM17c(5K%'~ m1 7)=9J`QJkˠz|뇊n@MEc%d^`U$q@@  3`j }EgWͩP;;,a5"A{($z78|yQ7Vٚi*\ ǡKV#nۭyؾSA|k e!NdC%@Bގ&>ϧĩ=Ut3rT)]/-;=R^<ʕ-],x>qLy\ ?><ٌ̧WGL{g_Vn5-*\Gpqg(w1" ֫sTMD a5"9OHvո oFA`TiI o~ڲhqs)y+kw^V'ꚪNd%ıtslwV@Cmm6KGm̶~\|Ā!tn>kG*b3 ZP[3I_:3nq#GlƠ;HSY:۪a{{*p.a*m JKp7b &Q?P`(15ji@ZI4yJO5Sa6ybJ16EO\ +4NZ}0XJENZTَX0il.ADFׂ62pixfz!@s~Ѷ#M whpG&Qq\?ޚhi黎h;#u%ʼNWEm>Q(\6BЧ`!Q%v Όs V 4f)l{ KÀ4wR?+OzC+F^1iyL5[ bd۰Ot1A+Y NY)43fs7H԰PYJ&ʻ±cczo~d)cd*#/*}%GL;|a[RY@-ᶂ_ L Vr 1 |퇂xq_B%YQuln/SkeW3W返URqX1 Wq3Fwu4K~:Sԉ,}XhOuerRYm}U} EΕOzT|l1l`֥({k8IDzm&:hGD3-"KD btbB[[4!*vO'>e6Pຼמ}`P0k07P^m8Ȗ?rFB6w6"΀~IWvm \xpbbʚ,R`8yH9FM25 4/<ȶ'`>mWY1Gi:sf5bW4!SՆO['] Tmg/^†ÒE/֔cWBl]] .5&CԂ¬$>)792tAӆ] v8/~6@9)?zGє{&K꒏*εS{kFzIKyvÞuۥQq g^ rf<*(׫9DthA=TK~55noKG\yn|$g[R G53GJ`0,ָ%PQ=WqT̄N f.,/kg% 6$(D{Lƍ>B7hឡј[M)(k=*tXڏZr쉬pP9f? t`nk(w($th ]KiOD%>:nD񥃍+Bޖ5 qM_SRG <3Jh_ϙ^Y<2'MBJޠzҠn.5:%)m}R{eZ©q \oZe2hWɳ]<^nkNڪ6v py-PqO5G);!jA[^,lB% 2f^K n1U R<@=EڶΒ/Y^l" bb+ssM^+n~fGYCoJ[gbӴ"t;G(W0 o&N)V7?'%o=OG@6(D:*A,[-)v!;#XC/$'jąq]No&cT4^J*.vLW:s@1cv):+@u9⽲_^f6OJrх"hNZaW:J `/m6Qwv#x,Vw2$q(l$@$a;D[j-i < xjDtvҮ(d'P#ߚ9 ुAzּٱQ1-d;^Ʈ FY9 /Qv|<퀬*><>0pM;H&pK'drtX px1MŢG7=$59ƴy3ť)5T3IcSHm'` NF]ݍÏ('41g T"`ZY9*lDZ̳,k.(@p0ug^L79&=vL]Iot?ȦPʘFSzT7M 7HaV;L 2`8hŊFbi-%<`n`qr)ҥ- sNO砢b6kw+OPD9m31帏z~?l3i^J5`0NrLHsDsMSPf:%<[صj0nRo"lKȅE5'R%J*5Npv nJsԿҖ.y'Hߦt?3M¡,^`yQ7S#w1nK j[= W5rSï<:X8ާX ޙ fUoQU!zA@贁ŴCkR&xj""  ^I.\v›s FN y[fDNQ2?< `>T4sQ SY/c$4gZqھ)oԏ;=0~L4ԇ\49ч1ž܉[thlwt!@t0(IgoN0 㢃B(޼r|# /% ™+m8Z{LS0<2u [E'wK6} էj"_4s[V{݇9\BbP=Ё6-0E6whX2uv@S}G,Vi0_*">|OsTNq'(B1Rx5TKgI8TyNl.|f$(T$y^y jie,a?/eu&uu ux[9KЫ>pHnf uYFYٺh c>6K]-^6$Ţfa'l$ʸS"mO +2Z&?o5i*Q$ͫ %tH:DAEsqk_5dcJ(q6c)mVId΅ q`*Rs> x>*={/hm\9NveF臗.4+%HFefD`Ō>M:vE]_3!QGz)=Ui k`Y?^}%y&t, E_zBcf߉b-p^!Pjݎ"xFXhS뒁ewIvdp~?{e]#f II0 . Y7Wzꫤ 'Z"ƾMo5!vx5WYFOazo|Ibq k)yFcUXk;`:_: X g3;яQ C1q0.[VVv]ԌCkS_apW\}[qn\w6џb] `l@n ׍+Do>B[2tq Ys^I+t|<])ղ"9/È 7&tO*Vm>uF<ђQL[#3C̽@QK.=^L2Qc#?Orf6V 0IpO9<.?bˊ܇e7?DD#AzroQ_Cޟi@߾fԍa2FI,Q^\p%`n6#r{sA}ztV!N785F  ;}\ɚݐH |'ɉnvqp)Zǭ .Pq^GCNAصٷL^ P!/V4X}tneXԅ1gdL@z yxRGmd7yS*yL,@am )Aڥ=@'+-osa\qUQV`Pk@!KDP:ie>~I̼O"?|+ {<Й5'%_m\˳%R厒_`̊֓MƇ3m>eX /9}%v!fR[Kκ.ZoTsVJ<7T^J9J En E=.D" <#&[KZcU#37XXZ†'[EBdmA^&ЕSoX:=ht?xx0IY` LO=Z1VC@&@%#|LhszV|TMTKudf: gEu&>%jo+m,s^VA`lU"e;l}*ی&8A* bVLeû Vs"fqo-@.v4-6" /̆"$AT5b78'!&v<3ـ2mq.mmA0}bZMcQ &ҡJ'/txtUӼWJL $ƙ~(rY2-M* rc(1x) ܟ_UkPSXz^ ~O5} $BbM<#vu mQ؞8tS~J$I kg+ Cd.`nŞ1aDQ%jheoN3SzL/NM5{< #jo)=e \[>y,gĽSxǢ\fu8\+hq {č*$/ˠЏjP#pxdǮ~QxO-wיM}ws% +nhcr;bvtH: MGL4`gIOPk Es+!"P*ֿĚ1 "YS%F:!YP.(2\IϞ)~˺'8ѣzȐ|4ߍ'yeP ̐|9&q0[o\`ÈMhDʠ|2rhZ %Տxˍ'3\(KD z!?Z1re: g?;gZe]G.?3!3҂{iV{b5EN:yZڴ1 3PZ9.l/&H.1e٧#[I~QGatw c3 e8!7vb g/(K] I"y. !Ivv@xߟmtdPk-xk /F5Qa qkP޶sӠ8u.$+H)*cTWWL'-omw{uSqeIҽR@@_ocË(I~ :C9p-t%t]σ&D4,X2ʖb=Ёkw:^b4L:)9XyIz) BJSU?ұ } ŵo+!@8#AfGwPWyIUSg=XlLxF+"LKrM!{]ԧ1h3r-%,xzW[¨C !'/*iPK \g#yWfu<tHY+ٯWx_ٿzg"sM$!ߧ.vF s؄t Mi%Z?O5cgKk>;AzNu+Nl<[&kPCZ( 叀nֺBwd3!J'j%R,nȜk@ud #J-_Z{!Q?t((Xi:6v[ȲhHMAa٨X=dXȳ`;5t!m/w=:-FaFtڌUQTݥ  GipYAem}[͸dCeG@`?nTe\bdڳ8sѮ"w"6h. ;+ zYkMOgN\: ^@>+\2+% p+O֕ OA7ȎkBY‹>=^eҏ10!-VwrFwpgb".gSH,;Vj<>Ed/ث5;1(/W wYoYQ-(ވ;\BͰKis`J"oTyc4I7 |*(h_p]': j0nߡ:UrL5#ЌM/M3T3e/@ hRM/VmA.7BV+.1g[+31O][^sn'f-xS {ԟ";YFp=lHUF#nהxvPԠD.]FtL' dB74VtruK8oP) N˄Yz ĥ Oy=01 > ѸF "6:en ɮ=!a{Ϟnؼg36>l~=-JpJKlWjݩϮcp8F`dʡhȐK=EGm Yl^JyUN]}7 \^ΌpE&^!CHHC 4Zjݦ D, ]>G[Zfg8.mJ&eMiq9:4uڼxI:ExS7۞}1Ζ]k\`:ia A{ʫ٦Q.1.`]E9%$++C*`8$~Z[\O{ĖG6^'P}Y꨼_6߄1`F{ r(:Ueb\;D{ʎJ!w;?e<>4;%:rB#}_ X@yMŭX)J*xҲqI@#E.m0UeÆ , 7ذK[pFr?tUnp}ƚIbvnQ@Rݺ";7FF5 ^5#jVdMXb zhHĉJ$sT#IgD1J8jQ!aP!:7ꌞr{=ki X1#m<c6˨4n!>\DbMS4G#"c@rhT,s9%@s4Hcoo vy6{6utcGzx;2Wzw&>zxdi2 8[.1xyG@bcP+x_V 7cI-5[pjBRVsEq)-[DkY%Ĝ߆0쉡ld(FȏJW_|8|߫nԅ??g=Dn)KW+?;'~̔(y|(}s8ifb\K튤vMP W)yOe3@Rǖif- @Ce"kFGahԸxxEآ?d\Ylډl, ZعgVU vμ+{gej|O <Ͻ|x^/P'(ws\!Ŋ`Ȏ蝤!uOfN6VL$lx\K I];{ ٶ1Lk-,[!zM.P(1w8bVTu ˰LLLj[\R4I 3ˌD^̥MfhfzHt}j֚} vL+`dDrg7PEڕ#ͥ<sf,LS8;..^+ NxEz7\`:خtLʀ  4)2]d!:adhQr?!,^wnRInxplc*"<Ъߴ+v}*BE@$1+1zg~)#`Mm0)e }2hIM] $rqu$1h 9n&k92?T 8$zvE$=͂uPD3!eMf=:/6r;5^3\Tp)*Gḫa x 6AFm^0򠥪!'U3o :W,ui$6n*1l傢O}Ƴ&88 hc6ܰ} ]zź/Ggxa)0[gWa,zW!T Û)];V>7 Ø"uDU >ziw;~*l>~\&$X )>#N1tsp39srk IAn# hitU . +ADr_wh2M.Tmt.Ii;fAbs49&>T 2sQvkf?;[} lG'ᖐ0M΂up8hsc4-.^{prXq4o~x'[n,8ysU9ɷԓ,;@hSGזdz*; 7şyD` G Ÿw1{  )ۀ[fHǁh ]Mп$f;I}IpOqh ! q4/د}nO 164RDݟ( ֨KP3ҟo0K%L/#/f(ş2AvMx}{wiP˒\MlЮJƾ*iª}<br'_Hk=Ҏ4H,w;3|.`Zyy1 !/^N$?;/OVz N2\ t+;W4N=q 8 )YvF69LjZ\&\o1/['Ψ Ac{X6py‰\{ol6Z떯@Zc#-'lM>ޯBo'!qS|Bf6lk€i]~Ǝ"s1ʅ(wZ(2A\UCѢ- @GLM`tgkH L:Qƾnqc4&kE3 _O)8R3k4#)p 'N%%VJk$4j,Whģ)ˇE ʭ_pаrm=L`8+/Xoѯ9kp  mo0q@l'q>bHh1k2=oj&$Bmu)~ $9̣oN.8sA|H -\+n)-LJ9Eau]w,R򂅳%$A赼CJմ(;y+£ӤEeBGgͤ;u7&Pb2 vV]bߣ{ ZjK9+ Vc^x h l|\;­5`oJ (>H{c7%goj<%./:I+*2=æ3$MyD)4vs?j{r# u7C-%e9UѾiL1fZ-. wVIK(,WRzyI J]py%T.k ~exa]p+-O)tHX<"X[kbxuWS3I\p\90"=7\MZ;Ӽж>o"K{4 mw\pKcd{9` erAM_%alA^22#n [v`he [VxL}YTJUEN`t2>i~4lY|G̏c)v4tCLZ͓(>yR.MiG8OsX8}em"S/ $MˎF 0 /4[Or7L]˭Fzk X:!Gf\.X^t$2}t.x(f^G,vLM)V1L yOa׷'gO1n,,߼f*/֗#I 6n\ Kyxs_|)moZ>JmndvXN̆}Ge~)`z%w v;N5V@\:n I΋ p òB)Oab$"btv/ mU&^a$djtLx_sE[q)ItxjN(| 9ZtKLm!a+7GFFqS8ɮ EDs! PPvYx:2 ݰl:gވwkYQq K 2w.Mf7LzrM oX֡ܳ8 2//[+c INSb^O>7K$bx4(?5 -[,9"X1U-:BStYQA``|q]*. F{9OC{ {yn. @8}'Ku9X/sAϩlTz' PZv>ZQzBQ e$_rE_RfBOZ{%pQ)fRT`%<,[£MCOzm)2='X)4jcC"nG$bRˈ|ۣƇʊh|=tPwV4WzE6'G6aqz5^K~QK?,ZSE]^&Ah q³MIbNvfkeA .@(^g+Wp5Gs`N|K'7 ψp]-_q oh9!}" ߕҲΎ%2|5 pLH>z t*]xڀC ١h{6 aSWh3f3j>1'faP7 FOc,r= 'w_~K|H+Sߨ7Qr&}hYHeHϥ?"k*ieUW5B!K"=NWѹIT~#] ɐHJFvv _h%N31?X[+{JpP !~ {(VρAҠ󽬑s0f(Rܴ3kW󙒇H4,f x2mD3r.qNxbS LÝVyft@ J)&30tp =))9b:gSxT8aHke)DKA>̏&bv-^pFuv.|,!2Ƴje'7 %y޷bLY?bsY uqMڛ0X+Ϲ\ .Iˤ6 ၗ3FQ25R;6hb!TPūdu,j[s-y`Z~G}Z3\<ȱk[1iQY"/$ص~Mp\ݞb II]ois?@(-?uTveb{;_g\b[3yq@28;5t*!*m a 46Q~T„PxYy 8Z{BѰQTOiީV*MiܷCJsFҊc]Q#5Zm S}r.JBJ ΁ CY'2vukJڮe>zp._3} iQuiNJu&5 ^h`;aHK%ӊIhUOv`[3jUcS4qaV M. _ӒYG\BV?nI$x3Ql.QS\Pr37_Z`hlDwCڟHᨌ֥_rAȺ&x+ve<ߔ EdSW}r'䉙O5 _+%PhI X>0(䉘Pc;:KS/ϒ %!%ڥnYK!4ۄ,ĤШ@zIqN>jG˻p5Z$lte.Qycr߷JStŇ Xs)GwC7`57*r FY[Ӎd{3kU܌AXx#ADH8G8>.ݏA*.B>SЗ TmGS E>u(8?k0 bBwEv)p۠TTrЏP-z:P]`wRmQL(ZWcXPyUcO -tQJz?ܳn9 W}JF>>)uI9D_Q\>X8uΆ q%n{;q%m稭E!_B%x8ԧxɑ%-̛;LwTZ5i*LYJŏ(N_ZD`I{?njD?x'xܿnthi~1$] ,j|?f&Dڲbs\laMj^Ylmvڍ^=Nx7Y>|V.R3 ~#sVYKNBb$AMwpv> 7#j2xM4jRvɉ5( =y% +4w!'`:)hl-NСǕhtJ3 [omUJARtNF3,!5R e5L \EkR`&"ՏKҥzln)rW =+s*Y3hKLJ8_2 KVÏpo!l<]>]s%k]-Q:2 KJltkɆ^A~]#&|b; Q'zki\`u[$#1NWU 0v) n&1-,OMV(,jK0jp36xd%U/RcF<50p5=HC 8.soQWS=vZxvv1AodqDcf~`tG)Cf:v(i YFSe>ٶ gĆ'/8)I!̘JB%OCВ& &gVA죔А(j Ռl^gWoR3 %ZNC*KЧЍ,jyzccY VwP8UYZݾ!9CU,Oe~HA>'}LU#*cU-r`FzWe8>aVeC0UgʀM[u_aH~^SNu o95"$y!Fc.k36qw?3oQ/}/A7Mºg\εėă/k!7B;رk;P>%@DJaBزA'AY5>գ[]|Fs GC HhPx[wRs[,O n\3OW 9фuNĵBx<Re%]kr*fx nIM]4b IԨ؞2<hR)ifwC,&(ICz*ߓr5?jУ 8hF}v< {ӡP} \wϜyH再n,b/Yn1ķR|MPcXD-/E@z+v&c$Dzh4a}Oy( e!ND?sy^=_nBFo5#h;T^4(ְE(n`EJ+cY*L l߹RC0 ?V#PXeZ"Ĭ<]7dY2_1tF$y=1a=,_lҥSj'Q/8HlUHkYH31C WZG`B5R)J2G2C- 0 ):u'0qΥ+짰x c!tf!X3OG` Hemr|`'"+P?gHB0Zsy;"̼'qL\lbŹJ}#i3XV_Z},Р˽-+Y4%Jyg,38Wn[ga i,RY_^{60k .FH-=i| 2S7[W'y:yn w 4l oy9&a(˄jjBI 3&;ņB̋/Lڗ4voȋuiYձ Û tou౛]9p ֿ4L*jsDn9t76`ծĠ Ҥ@^~IGDrFyFp9f\^ Dab5*o]n^ n`(| iO횪qjp5pa1 ZѠ.sbP!B0{k9܎]6 Y346zCמL LZ E1Hfz7sr""ƒo )O^@Xe dA +i ҫ#IcӤlgHmrsR|d3~Zc,p?;/Qg|z!߼Z,ev{۾;PYL{I*t?uBδ&.̣KƟXf ʅxtN]5xe7 7 ַV/?#uIvm bbfIAP?}m*]^MUd9h5' ATD;_AjœӀt-`b;OOt4E Ij8ayPfu(˲|]U8>F \7:s;AGR]a_ nQe_ɥ[>1Ehf51\=C!JLՈ O2I 8y>N`PXX9 00, @bψ`Zb(,*씎ֻk%Y!"~A~ .8O13E>!㧽)(mu6pD\#tK8@($fziw崺m^ؠ. ʫ%Zfۺ$Q:bi\U|#THUY&$C84Ps7ݻ|qD{ȳV+3ݞeՔDc]D0 yn<9&H^SLDZ"S(fO.rUD/WZM%>|)$Ɂ9x6%Imt&{4:[3jREd,p$IgU CjTňt!ΏGL@疝s# r4Ivjg?^ q t/(-cB_޺D|nZ~BjǺ86oQ_] AcfB7q <7^P_KL:?`eD6'G9KkfF y!2qΒF5I`eʠN0jʙbHI;ID/P pq#}U| [\ |Շ >%muyΦG+*)p(sP, crzUG{o)ȴ;Gb  )+bkxHpW 11CS'k,e;_qjxHHhblȌ=?p8d,uEŒx@$_zrQ u_~"CzbFNP.yM& 13%t[xغ2 /Tj˃4$"p>|+gRbbq=jbx`>~BYJQC,Kk뚥 @6YF2ڑZpNU(ƬNp(ŠByQcr 2}ۚ7q!($`Sw3JD-F(' ;mL95W{5%!ev>xƷI$0zr\O) @;yÒ2Mȁ#!fhTˬ>hfB6߃h[BJ.$Wgo GnlZ߸:+&DGvA@Y4UZ:y.h'lT"Y~AoP0]۾>H(|.T3%Acg.EU7$KKfFX|vK ڇ#ŘO4{2~|ܾ=gfN[>dw1d]`kxF=D8[\.,ST&"xD "YI ۯx$#rhW=g=IEs!@bL 왃Rl <^{WHcn>\0Q͒;T`r',hg1b/Y7ẍAI0l4}΅.H׮H0zƭT`4ԚrYe e~BV?y&kXLv^$]&Ի`7x&+Zv.s7IMH<3JNR17Ydgh0\Q/Zuf@(YIp GExcC$szCzWBm?niA^ L794ouD.1]ߛp8a-]>+iB b eG"܁ۈZöWhVxj+Wtܣ$0HU0qo0E66}]WP{p>r?%%9Ϋ=Up#O-WS)OpCaI9X) \os_'f_.br[p9$ t4jȟdΨTRHU5Qj;+Dfz)'X=]ȸȣIh ,twħ?cshGz@W:GÌI2&aܻ$(q"nm~ gS?];X&yfY2K)zR`sMr$y;f}h.PΘ3gjSwK %a!TWY;޹}7.HW`.c&HRߛ+WTv@_#Nc٤f,ӭR*]) *gjQD?$ 줈1kzJ挚K"6k]ƒX6Za6/""TKi!v _8&t`˒hʿt2\ Emc zq&F?wq,5RD|V|51{.,]U=} q}倫.*%$y/%RgbShC{Sq@]KxCE ZAJJa()ܔVx' V'ƶ.N|Ne`ECll{d$ݍ;O3nOPr)^3ҁT;cU3B}HqCC`7)4y(`m g\!#eM8J7Kg|tk9UojSm) 4*+QL>Kh kvV2/>sK-:0W̾Q#} {hoJ8˪.|Eg4CE1"$'| yuTw"-͂˞jvbqN0Ė Jݸ%k?P k'ԬyTKAO0TP!SVwjlHfȹ~C?s찖^EyDZMmU(n<)A_ac3>;D hWq:.橊B`) Q0Qn^##40̗4):JDv"=6]!jAp+`%zz*sB$:|;}*1PaKO%]w+󐆟(tF/+WM?nj0ЎI1/hV$mt..i*o.˝~țwg\캭0_;^f(X@ݺ 8׼ΚH Ȑu#v<]V\K*8bU)#@7]n3z jݤw]?x.&+>P zӞM: =!_ Fgj:%USbͳ*5YKI%h0ks~YZX#"r̗GkSc6F,BBMNQuWo/1#i&Jt?ry0fCOvsbcq(;Ӗc\eO#cmW%qkB㿜}“nٞZ35]rrLUD!U ׻(ӒٗUCЩͧ]O ( >Z&?hjٴ2䪷6'ͦy]pPT,*51b$ 3", o`!k*;HK~$5\3-"vZCo lu2 )n"P'ê51$D7=zW+޵dh#<+]9Q-,\\.ÊٹD.t{OtM ZnKPOxY)9[_SW>ڕcؠЕn 2u5".K1˲mV] ZMs,x˜Ʃ a^_`+gErQ6ol'ovyakvȟWQpCk4RZ#.lԒ*h#0DDŋ(uhRLxwo8Ypd͜ @-\ʇEdbܬzI.y{hAo@kD c"݇JE4f][L{ܠҘbȰI2/TM8DjAYavԪnf,d~VA=4DQlG:w&mWtX ʅlиgR <%3+!/\@>bŋ#΂;_'ZYѭVp߅rhs`k"8«ǎ4$& -7@fxRi0ƧjKٶaV7Z4i6xǽ# .oWun%/0K7OZLIŨ :c7h%b<'5!`Lk/|͆T۽&q4.gxv /-={SY,ň"|ăͩ!.+yͻ^`#]Vǔ_Hy"T7 9 1۳41w)-kҍ0E`D٩17F\0ĆotbZg&|_vgX&[F[TLRET"Q00WTy2e2FW&pIESz0"܉#~høOd!dG.-ȒxJZi6%J.(~||g^knBw@Cy:ҽy ?RGSh,gs'k3#& ?Fd@&u+ã(Hn܄U|N%ebK6 jNiirBˎ+o2LԮj1.o>)ʃQ3mkw B#>ZqпL#\%: E7;qs̻*)ht~Y#54+cYȸuRj7׵sC{|͚զi 3+}dA1wQZw+&dp29CEԞ;~#R#Ȥ q]u3yg:} JS6cY7q`B[ςZZY% HjI栙w7p0~d;7{diVR" ql,_lߚW]K>GV:Z*T]$\7Op&2>3 p!٢0i~_VW&vE@/b5&*]dfF` 5閝v4^^ȟ z3lcZ(Jl)wy[BnUeŝr3R.! dzA_t8QP YH5{T@yɪÙ4Ve}*ъp/mD9Z#vw/P\(}Ze"`@CZBC*79Vob)pp֝WSVggz.س=ze{[ބt -2mʑ zF8I˖݃pE;[hgJŗkb0 *{?Sy pW dD p̳wD66c4!=oT+N'ii/F;bda=7GS!hqFuΫ+8 coS5IUc&mȉ&+ml N|BYVØ=d8Ε-2! -&ǯae YhHdPoXŴp9_Ӻ>,nGk;PyR1L!mK\r_? [zulB;*2e#=|""oې*A%" _}Ua)[8!k ea9:J0ڽOϢ0vc޸8J=";vMcVA8y6ȣTb.vHCE/4`w%>!$',WCus'ۀ,;.tD ,T5H{O3bV&zd,_齰6sڰ?5FӤ]BhrLC&OMm^8ܫq6.T q0!4ue'>s4ݻt\,ERۯ-ޟWrӢF�Au#d:DA3q #tH?GNT}%OMFy!=vlI춱/E3(٩΄@<% %qYba5XhAޱM010Ti*;8J`\ZtЙ?o `ޯJH{ތvy螌6Yb2]GpΔ,}@݁uH7SAv72׃nCoID>VH]$UDGz#uȇj_rOy'R2HUSvXϒL|e\am(=Nlҟa + ߿cHaq7@pcLò|񯙷mS+TD3 GZeᎦFÌJq';[Hc1ʗn[5v܉T74NtM;S^ 2L$&Nw*l)QA|fq;Ra"캍dX'l+4ɚkϏErAz ]Mq}0X C̄F~..mzɮnc.WP}[ܓOet"Uz;ÇϬdʶSG\#"},yV,}})[ڻNHզG!\n49(n >F~$Fԃ D.pLIvWE~![]ظT,.!}ci6^u0FBG1Bhx,:XqV ,{B\|5GWFk;3<=`i1='nŇ{ľdn$#"]˧HVz ys6~ c;x]/^BCa=#eDOϣ UYևaN謹lUB)?Cp!> g 7Le6\wpB9e%1~H">+hٴ] ;: N*R~\4fYǯͫ§Q-]j(ьZjoR,dPdꀆLP̞]Hum t[hu8RVe10XGl@Y͹@eȬ8J{J@l;QP`tܟbUwO (c[D>ٳWZMUiܔ#sSPt+zW2|.b PŕJCE19JgLLЕO-Th5׍@{I)Qh478c+)\ZĀ!SM׮?w<4~o|h'k*jh?'YzLr]zbv3`7MjS{Nd,ĐeFLfWonS0%<~N,~,CP0ֻU2[U>8է-p_ ~ e?=e*i_}+-j.@}nQ|k,v/S!ef$25'Іl)oW!bTD| Àn)f7VX ,3".֟XǛ}o =wzzmWz6*6d򩝇/6S)bK' o.dJ)ϊ83ή$.!1|詨Բs/M8ێR_i'g.D7ؕ3}N}AAMMQs1ɬ"a#`a_VD V~'ӲT񺖤bڪKd7Hd-߼M+s_/EFC(K:9~]BqVbw%z*ǵv5vzg\ޏOOfA0ug\45OPR8~nN7.tīyWv~$4h DD3>'?8 KZjZSn]roQf%#~BTZ'&>^ig6 )ϭ{6$VX`2\v`V20PXW5h`{0n~aZnGxm5eGGyFq%T m :3[O)bzTCyI?qJjt!@>KtYWR9E|&'?,#KgQ6qrfa`GJe~Bf,rAڧogK%DK%R[##ēݟ ~abVKk-RfԵa:R~-H-%9ʅ)bL=]C{ r0WLJ7 3 a6]~ת ID^tIpSUʛP~% q<%l߳^.}J }mK֟@n0(7t_ܠ͏h[ɀy rFVHF:BL/1Tݘ,'-ְ ܽd׊?;r2j+W'ɵvU Lm`.oFJ&YqbNj]J"yk޼1ؤCd.UU6JsjJLdXet>.'9ߒd=-BVA>i 3IKͧ-~B-1dHm6j+YP%x)9+8&8 g{z9nZUue hA""Z$18ŞrWEvlC\Y_oRC ;0.8 0l kvv85"5i8HL:A'AN]x"H/k2Ma~J" "sS 㢤Z.# Xq&)@4W>tW'JR&n^K?z=dmb|#jO(=(@ С^68էZ);2bn1BȼmI}C%ʘM e%X\ÖPyxhu-8؎4mr},5qL@JpT1!  ABi4voȰIN-$r?ugCW*Tn&H#S#'m^?J- 䲗[gK{[MR/xul(9SG[TC?cxmqFx#[Jel/ |Ս44o@ J -u"mӏp! L%7%"v=^PHY!Ӣb',Rʧy|24}҇_n?6W o0lhwEs~>r=]> VN-gœ+MRLWw!lϴJ5/6E 2s׉yueZ|)srAҥ]?n=͒C=L2xv7G(im,O#!b!-~!n̷S>j<4NH{TF8Nc5H2rx|\TWZ}IJ PhgT6C~|/Kc)׊OF /+4/p7:a@"s7LEt͖/ Iz͇v s 'RK"lMѕPNML8Qh4r4ZEr/vޣ18,-5hTm.]Cd#tZݾ`H+;ϹIb-´BkYJ/UH9 P'}rU\ -۸̇<tX5l>&Fה H8htEOy~ğL4@+uM5 I^!}Xq sӗ&w!';֋?EpAQд{]|6)̳[nۑ'5nFH_OI>F ܕbwE$Y[ u"Ht2nr{&8\Poz WDVW-.?4KCH=8Ý̮K@w,QAe~?ap;S(DJ8WF}^<URԌ`,տJG $4a6hl*[-|Zo;@O̵Ŕ֮XHS +7!Wh-7{r;Q>bL Jkhz0jiqT+ {wdldUN;wSv.Yb%AZjupZg$(wkwh7uX6h{IrT^ȡ|wJLn`KNn2̛ P@mM17oϛC*(NK>haZe5;;(iޛЏ;x NF:JjF80/{0(z})6m)#eDq֮|TjMleH@!hUp n/ xs:.)Ʉya%t~yn͢;lD)'n_q#!"i u?<]Q q{ l,(OC)}Ҟր]¯~P ?][iDn[_:U߃sTV;]~q/]Bp@ 7.,wxlڽu&&$H ;q knV"z{fPϢ7o=T-"fӔ1t >/BI駀dKq}ބtZUgZ#eٜ}SyaDqY'(4qA1..N W-FA $ªo^` W Аq*hl ĄÜ\hXARk"I"v1и&'EXUI^Qגo|s8,W1C]D&<ҵikcq|l;_1$f]E=.lAf~?B#Q3Btos 'a*S DUF[ ם>į7 iH` W9lptfB;kx&`hQZ<2 @'I ѡx1@lH,y٧06(AJLE sX>H*2~ok sppqzqw$RB"q=^+tr!&=9B;]QOf7ciClm:B^йT`;?nMx>kwKmD\`6fvSCd2߬7-LG_Z^|c+ u5O*lQ_tW 'ߴmJ 7.JLP˶:7wHrux`&Ѵ\;1k}1cH.p&x"I"N"NG1ËEԥS R\ Ey>?Λ0N+CSt^m@'{|WP/`Sx*WO#vT!n>GPzr/}G,Kw1b :DAoeJ _+ɋ-JErQأ~KE!Fk|*yb=qC*k1mA3jc<0Z}\i)d,U0c: gYfc|.gݜRΥkJWB/2R]'~05_\/a}#MhR\\^\Fz@QK֐Y ;kZt\~@E7ipL4~rG|~%|_%xXꘔL=,߹-?{W^qHNtG)L*jgxK̙`ѯ 1O"Zpn>PC@t<÷^T+}fhao_M1" 0ZfI"Qc=4OT|LL{s׮ Jղl?+'_eOn9]4azVhבA}4:+;*C=axaN>jch_7Ja!&řHѨow?Y|֚3vxT1Kn:4YBۣVhy'TF_ڶ)P fLczlC!A:o119"1_UwIaz"%'CDv[o(3u;Os1-|?t3'.uD\c (& E=lCSո:&BP8#<2m8eJy`ko=d64ҐnR"ΒE\ݔ9~FkEEffS]瘢eTϭw0H7KXw#M׎Ғe R6d+3)ݻq,dPuzpQ֡RrQeTm%=26yS!\@0EXwˆ5ߑ?ݤ+Jtv[.1hfJE*7GsGOxʑ(AqsQ*DƓ+KGv %ҼUn:`LBCI:A2LaWRdpGt{|= pXn`%· Y뭘%IJX/b+;M*'-n?F DJBrz!-Bl*W( )ACr!ALs0Ĩ, "4KsИc jNʩ.QL Y/9)7nI`b0Lc{ &mE[B,Elk*tx^eW>p=b|yMD#D);`ZooS1d{ e,ogآG[Z1IYxuh4_ -)+9Φ8QyxgIYi?b-.})?W.*}Hy9}RNLAb1V~  o7#]LJKi-,N-e 'z2nwtywyhh@jHH%qk![. L~c]%`/,P'x}yr/6O{y+9OȂ(*ٹ&pwďS%P 9~L/{^πOCvC7 }I$\4`zi4* ~lgf ԑo66u0(YI&jiډ#,8oMQAظ} H&~mcPSG,Ȃ(Y&£9"4ISA#aWuM:F`:nL ڲս~Y69S^1Z"`A:CCX) A| 8Q Y,T'tᴣ,ktHQiXDljR<$6 e~=GJbxZw!xzl45qS[2dY/TFs `5pH@P `ږiX*˜umE^]Yf-j{ӏ۪ LՉSaii7T o39`kX@oX/ G+I=:mIRL>\o9k?΂V'Dղ̆༂o~s-Pݟhݮ郎jf_xu\'sٌ ѝ)qzj,=:i/r띯}wp1H"XAV(ġSػ#t,ɫ"*ʪ,Qdkw);HuGfyq1SQ6$W3.+VhϴXͿt:}k*zQFךȂVE֌]aTdn@6Gꇛd\DnyA9V"*r38qLr>o6IU/3u`~Szd]M:15{EP4 ('l˗TÕ&׌iܼctt`63U=2nNE[>pQslCo=*m3BQ#v$&7" yt4 QCu :2@F]+@Q$v8 ꩓ʫ1PICn6aDz~@6x%2(l3T/mU|{n^7ONr޳ݱJERtr>0\ =}D]) e ʛTlG=zkչm;jt fbN8^3֑=\Ԏe:kE\$S$viV7,Mhb9?]K09*5EO{#ƌY)0,cu#|{ϻ =l"ƈİ[QA-kv1R!#c:([/M 2rݧڔOMY Yy2}6Ց{3-hPA?S7(ü:#ϗmSkވ)hԣ\7PZK.H'pY]M+=$t/E22P:fnh1n :-e %2`#@3=Ö)gsgEԑBW'#֊ʿjmC9Nu!ʔ Vy}[ӊ ]㗑i=dDNi+c'F3W{Heѿt,W޷"پcxBcbռ9l?-#|tSH%Yl"jw7DLwul~k]q P#uZ:h ĠJ ! "YYm '^2*kMmΏbӛ.V:'HFGJU \+'L͡x,u6Vp|Ceh2EA2#']h&XQ~T, p2H\mIZa].9lZE(:6#Zհ6>|';jEVc#ήT4ɕbCeLD@P$13"o~T5k ,a(88u CXӝ/k& ~sx+'=Է-WBS-gYnQ}3v6Ӭh~x̯6湰J0\' G v*Нmٲt#_;iNx2h1S-OLi@ ]QnG"v9&nRc{)FTAwFz&7ocX[#@+7X"w{`Mۤu4G4$% آ+ mO)SZo q٨ꏊ"n?,* qu`e͡`Mѫ~E?Xdž֚=Fdvxe3Rͻ70G]-k^-9 !\tεe8WoH{CxM?4Ve$^A!F7ޖI_KJ[o֙ 'Hy;TgJS(ii(&Z%2O6q8_uoōLzƴL/A ~mnEG5CQ+m:('~mG-6eknBƤ=sD5с: *$@AFSE0}[vv!,ϙmwFS&`D}]䤭3qnϬ! AJGL_O1Q@ΚɱO,s0x5l=zA6U+SE뽼ID̩i}\=Xf}E7Ĥ&Zb ~I|l /UQ}E'2(A:<[5bЇ":Ky#8G$3wX wx7#˸Y,Q;]?&/J,20AM%nz MBFIBu^# eeJBJh7|x ŻGßgDzvj3ګDǻy_KcABvN6]j%8ֳ ۅp#pqb@7\L̍M:煫" vj Ф|pcKl(\38X!~uIk C]d[B( 5 ضǻU|t~+x9aѳ1? JgO+`+x(]ep-)^He gk)]{3gܯt4,`ow@j Z_Ozk_& 3@or$.#bpڧQ!{zSH=oc0̇+؟ߎ^ Ϣ퐄PVzSO Pzߓ k8QI<)KJ?y]ݕJ$S.2Q+n:PY`Db@"Q A/O\`*F~ZL`q8聬ןilnܑsW@WQ Dj|ŨP,dT>,+qo츤Kw:#t:{Bܲ%EⒷrZ(RYNC@}e=G/|DVsf).-9 ԌgK s] ڜA#j_A;9͜3:8 +MuQ;}|ĨX$}, #qd(\̛v =@ ԤIivFe! 1sP8E6u;48L4XX7P<? iJZ*.[a/C`l" "]\f9( !wh3yfM' ~iɹ4Yy+:5R =bw.`q58fp|O+j7ۈv[Yǫ\2EgMS;cO\;wxwa'aĥ3[lg%K&¬'ޙ8wj( HFf@I0bQުo K`?G,&tdfJul8\?cnkЂ'l9|\uuzp9G ZfTB6컕wivm)Ikyr5ExodKη?{M &c>I9{܊XN4ijSG5D*9A8<>#tWfAb@l[ŻD8k[-{:V7F5h'Fpҡq˪@lt3qxHd}4VQˤQ?Yqh^CG0l WOK1*d+j50@5DZ31:bĢ,xj+N(:4^ճkmɗYIy"'݇sH'fUɧB."CaNDP:zƍ(n/gh("=R/&Q]6tm>íҽ|Q>_׻h/IvU);J1QAzU?|l 9^%2s؞~]ȿ84wH_'-0579 Wα*eV-5&uvs 7e$혈:M߂i# '\k ]hQ"u#Q< +ir܍߰h%[([@enc&vR {&hW`!5/c F@7|$ym}~j@"0ΤqL4m1 dVXC.ѥP7ֳ(|b.Psփ#8 1 خcKf %+}Joڻ4z^Kv*p/ ֲ ry(ʭ-UH`7.͔(oiY!l(j"O%2mI1"nBt}۱ H}>Z=ALgx(iWl^wWqq).KsffZ 2i.Z TA07_@A'4Q`eOMf9㛻n۱7 ekua}<))E J,L;EzW;YCe,o_r>v+KoiZ A(ųhDɥ2e`/2@bzM&ujGE@:aZCMԪ(t_fX}Βuk֑Atn3 Ra.FT4b8薅[㾲ZĒ7kkb-Hf;_A_ -/ r:z/``svU<zX릦fa V m&:/nQYsh+wi^]*~J&~ fX!V_߯ ckgʤMsV" kb_=Ou Lp\Tƹh̶m. K =R s:2PN4)>gZj!ZL\' GѬT4;֪ߤmۯ9 v5D :[B"޿ xU65%5ACLogdy}H&$k[Qm:s1BT>~FUN+μJB <5^;I&8P_9ȾHWCSˋŊYы$ˠbz,\̍}W26nmD⹺@uJYپKR_}r^&g@mSJuK=V iGBcl9O<d4L 'ȋ1p*T*vCbO%3`U(8H=%mpN?3U޹,7(ٿ62L@̹a{bco9(@Ns2 zpŮˆ# nZzѦa\$OۣRCpLs0@]D94Ѥ)=}GaҾA0l~#w 4H q cv;T{out;T (_.~{ XdH 6wUȡ#ȶzp֥reNҟJ,ny4֣>`?&ز|er3Q:bשxAjZ(/Q$UN"Lb/#TVzR ۚ&:h7聈 ctjZ$gƪ1\{zٿ&u}wISzV>XОrzfݬǏ͗{SZz`,,;AãV}6ڨRhA*VI!8=L%i ʠA#gW׵O4k8}eOߥ =(yFNSʍySR nP&zo~KV|=Y`] ț[PC "bT3蒻ʝP|قHkY@ACmV/+f]Pk(9>Gn4ţQ3lxmO *i8fLPs8熹;֑ZJ{  3aSO.3^۷؉3ᮞl>QߔKGv3{|`zsy/,l  IP%q^_`\},VyzJ$N ToE 5ib0<9BK c3NcK5Q7$NKǥ+D}#rB5*MGv::3 CVej{,-MmF1 -.\HM))p} i*@Tύ\ǰF"6@lj4w5g=4ԭC񫶜q둄k=Yb1@ Wx,6WhOS WV oߙ^1J\[ET5=Sm@=b )$S3`"Hĕ6ϥX %wp ѩ{0 Izн !֒`M]O[;(@nxJ.M.#L NgB1t'stUExyuo=uSF'pmKĩ' Amq8^4]1~\=S/ҙhUɱE?"8ftI9}q7h,c9~DSa%8̃cxjddIe,V}t,Mux&:ٿ'ϹoxT)21D]C[{]u{ Sp0Lb˻!~Ǹ|) LXc}W{חXCfO9)F^k 8qwbG˲IߟYwKnit}?#"cŴ ~`@82v.=VjK7ۑev)72myxgێhڕ.!_IwSO#KB*"_9_eA9 ez%S8(=.WA&\0hd fU ׊JWhn NYI{ǰ;3:St;4EJ!:RxHcڹ:(7HY6Y: 7\u%UFʈ;FS,<gUd"v"\ {枴Rz$Z6 ssߌA2n_N\7Og5g76{wĨy8#R0C($Fofy`U7[wsB>M4U֫&Zkr[ nYHQI-_eR)]D ң뻘o؎,=)B:M^L%o=ދWTIZ`u 6 "H~;R9Ά'e1Ɠ,5H"(>^jxtGn8abT k"ތ3*&sO;gВ2e/whPn jevR^Ro^-*Wd /F#oVw"'ߣp8c3yiU̸GI5J5&1!3YQ-Yb1Z7ڰa[6ڔ.GyN7~ !]s, Z͡+g^m,1@ #6^8Ty6q6L#|NZu D`~_DlNvA7Uۘ Goٿ% +2r4H?-(ddèVPGHoN5}ulhˠw^ 1LCg kQ3` v: B8<0h#:(~N,V/G`6B݌W($\>b'H!}=$Y0 ?m. .HayWK0W3͝#+(bgXsv`|qw”ҟbm7wp0wW burn Y5/SXj@Acfީ$[DU:R;tM۪ yW%?51ڐJ- RWg62 D1& o:v,dmsdG=dXBWފr81_3O{g>Itx˔WV;ېuXs/qz?7I$[)xl>7!f6isu45Re5aAO_`<\O_#CሤGv1Z*NRRu `~B[8FUVCCWi}$'5C5hY P,k+^&!I!.xFbWH quz ߧ~;ؖBKA#\깒U r\;Ha] ?_Y[uZ%yev䖢-YjD599$%JJ*|!W1bѡdfN9W߹΢0*^;`i$7l_(EguعҎ7E3L5(W]_R_QH3rwܲ܅7=n HF(j\dT C,Qv//px MhK0*8^?̚lM@o*- Jo7jI{2\ 6B{6"*܎DBSWd-y5 l''& Ůiwb !yd+FX}_YvO>+{kAP'.I Ğ:!V)6.jdW@&0_>6ilZ;ut67fE*&Ɛ=WXd2D' >DG:??S®'$FFG1qY^EVl-^@?.P'٠jego3U{.YC$zWeAyq;IK'ǘ;pIԯz00*ɛ?fzu%CrAWtUM)B5}V_XdXWq}WYsڅ~Tm"ִɝ/ٲ&8(@s79=q9⦸B$b-쭱'}}Y3Q0А3F#I5+:B-vHbR yWv3S`d$޿k&hHn܊ǂZ7Zg*ۑTZwcg16s)F=k90VZlйQaKlD~e`Eg SpSZZXj~߲ى)SΐI`R@%V2ep ]K!; ;~'#M8NVG 'hxZ&|#;ں'w#/RVp> `Oil'[ jkC VPKBXrXD-lPDm$c84mvr J޶AgO&Qqo!mY;}KGeoq495' u6` "* ?IޘVdU#$oT@t7DV:ϟ=ԜAq9=fHLrU€ J#:OcY!iu:WMWsDeʆk (IpJFvۿ}0"y [_Ց)T#M}9f 'yK\q.d#Rn%[8ψѣ +X.z-]&' ?u?\l0((F ŰS4++3 niH^'w әhXY\alq;MR4YD1D@*U-L^c˚*@ِATkV/VK{rrҰz]*m#s ӀDΊMS\w { / `ٞaPJN(3Rr@gp95 f}pA!;JG-)^%s/zqd֜@>fOڴzXvQˆ5(=>f[U*'܇DhۍIkW6{ tŘ@[蜨|ܨwaG DE+NqHNZ7˸M$kְGdբHHoCWunD.?sn?:%"H56pB"39Vc~~75w0V3`|y7|!񶊰`#Q'w}ڼr@[Kq3Vn4*}ǎ &%9iÝ"710Se$l5+y VU }Mf=->:ac%!SI,NAGZwYk"WN3[Ap$*f<<=L<'55.@,Q}(Az| 3>j\vˬf~ mnVo`ay1eܗvhrҟsjpSnIGAM6;eUKyN2pǓSJGTfjq&>@>8.l:fE?^Z^ʹC!Xx<"k=4JA{-=o wt-iGk rΎsӱ.L)>$6i6RZrԾ2&gWQВ:+4n !@z7d ]%CX 7% zsx| + i}I5oTL7d;޴n*r10U(gޟ~(Jaj(E13N^>+ t6{ԂF_Qŗa}H.WďCpj1Y-`x?Wqpfb֐*PC,R#yqTk,Y9veۖM-/SZ&y=ӭ fQeF@e/BH ^Ȫl5EP\szހpLTPr?g8#u?jm)CQ`K:] ś\mE?v5kɵP|9uVNQ1 yC05;N.H76Js/EF:ɂf~)&O0*Bɼ2 qťOmMb 6V݋uD#猅ٙ ˊF PT'v,BlGEQ{/i+ZilD3*Y&a B efFx`:=ZNǛCS呥=Wf9Xla{Шl12Ƅݵ 5[Lct4*NgdnD1#Na3.Tv-+Si{d6%a1oNRC;r'_'~vTwMk dwoƝqP1+P=Ϗ~~f ]ÇoM'*~}=2'~͆GC[vcX" A9S؜,\w[Wb 櫮ktHbɐYީr(h|-_4'"ZͷAlﮗЙ鱍& c휖 P!^ۊsoe+Xf)?{bű%:lG4孥ghg+!dAYJYWhZXqUFq{²xD j%I|VT$e13II Olİ T c1+ڔ(%UoW|\L`َ l< RdM"8UMЎ6:k#hyz>K.z<{.6A 6hxܧ @2WrMξSd;͟@T\H%: r-Z,͟.\@,ao\ѫTc's{M!01ݥ7!{OlL(zv}n;#-W!",`Ĩo{Ԗ? b0蹸;vm #$AaUL]Jo@td{-7T&UAXĩDyvD=Ek--.7_E,(ryl$6,gG3~ w,`I.C0+=Jl/Βàݭ$ L5͂2U?6V2aGwOh%̛tFגl+fqg>Ѽ;\{5r6.Ul8Ifdϖ 6ءcz:[6PᡖaXaT|%3J۞Qn@D>VW)BLJ]s Z1"YaCJ ZET$ood 5+KJ}kH UxB)i=O~ b\/aWŀǧE_"Ӈ0\BZ^e;V>cfM Tk B%P B ]xIaī t\\ # "g~]0,}8S#pԴƭFM564'U3|[m(^rbF3RCmۃl4NbD_:A*X-ЈsNϲyj)\Nvt |BTFT3i - japڛD,}AI\1b\ KO: iكpȔ.z; V\.o(s?…\tw P:ya ckv\fF?n. vn=f `]"a:+X.h6-Pz2k~Q54j'gk~h|7r5Te/AV,|.&~,.lw&H8R\`u3gّ^'Vn T_6eE@d:'.3@e,T%I4&]v=x_v7|ˏI) x?YZV[&nD B2.x9l.85o&?dΘ/)iow3 ˙f s1E?O P,_G9x> ͐k-̙|Ƃqg12UqrNT7n@|L_ְYrS>~+ڤT_mJǫG;HY/`9;I2C'cFKa'?(a+:M3rryqm!U"bՒ 0D* C$_]77*Z}A #mk/F"ǔ$·Jcq(|.$a J3z$vtm#.%PQ(*ڻZv>N'D$~֜A1a--DN7k dJO#&-)\s_z5BekS6wY24!Wl[t#}EAJHe51`"tʇJD>fGlVz0HQK}+z ^/#dX[K Q6KV*0ّcuR׈ 5S8ZvB4#=%q&]P!Mw?5RzcnPpD0a04BhaQ8@?Czq7,I;8ɷ 3o+|$ы.GԊYy>XDDޠcYw}L\J#ﺼ3%^6`' ډ4t$pc€x?-r4z\#D"t7VȝwQU֟ԟ9 4u*u;Y^CH!GITA ;%]ęͬ1}Ƅdq`ڙ+׬!8vB@==S#nXx%@aN@ qYS6b+"@PdAd]q_龷[QsC{׻8K}Jc* ?v7zZ=rcB?a&5S<ᐛ:>x1й}!v̰,݂/2}`$.`Sf&bXE9lIm&}PnrC?_S]9uRnqOrUv=5PdYa3#2cb/ bQ^r\D@@!Ry]P/Px?&S}?N[ml՘B4qԸ;Q8ODMCm/U]g|F=U11,Ě4Sr,ͬxk j>`TνWOЮ#Y 61ˎ+oc0o{C^ݘǻ׏ȅor>*BV:JIHC Q8yQL VSߣ2FCoD!voD,xCh߀[Ox2!|#^NnmOi7/T/K5R>M-~|V_&FHʍw/]&j c&`c:TuDEn\=Cʃ/=c.3Btͨ. XΉ'; k)u/!$DKQe7 91C0[|uv\m'nQGau/i&a,e0'$SS[o==5QLXL8/@D;Ľ NG;D):M5n4+w{cGI" Brc rmcpE@25@.\9a̒PV+8F6?*eBfų) "0A쨕(7Js[aa} D9snz ^c}7296Ia`%uOiԤ"TwD1G)K`~m#~QE+JPd(b|Lv:ɡDSpGnyD:%b i4pMDߒj= :%VlxJ!.݀eGIm+nZV 9h72oX9S6LD^AL@t Z-6:5fɣf?Y6 1H!0Pu$ JAnEBq0j `yn}%U|sq>|=pl9Xss"xwA\* WYYaz e o>$Pޢھ#8 tjaR`M96VfJQXDH.$y0 (07G=߱Hߺqd9G1 ZF~":!nx3=T-<a섄1%~~(22rsA;vU$5\+)1.u/ѭ2o @)re"9(oh9^~l5?ϧKմ795b7wꨃ`m= &FXGlo{iɻN^pNBt# Zrq_| $7-DbM/kQx](Թd3T|{|`=ق0- X%.mP֗W%;٩CQ}Qëdg2cjwA)pDtظǁ3v䘦ճ2TFTQb"^!ѵ3MTj#A\. \&ɞBXw 3!&XCBs M}Izަ`]( t֬gA+CQ r=M~*OϘS7 IlK- ([ϖTf1h `VO&!E)s:euw->@c&1[H0! i*V-Է~ MO<&BWjɶ:dv|72=v%2Id4;]YeX IQE8ஞCoy %x(A6g*/.`=:tXxZPh>#PdBV+8ݒ~)pᤣ,ֵG =Qk;BWbV?#6cj7«rbg[oGP"~k Xϑt*6=ᱬYSTUTWf_o<q_Nx T)=lya9XUîQ d0a|I֫7mGڎ%֣6O&@ԅxdԽ4HQƪT<_0tqoۥ; n :ceǍtyiϼ\AԇFa o+VQ e7k\ 2t5nL(qd[mɀ<'xQ^Ww$"ڬ"TLCᛸԑḁ0cܢMaԌczg{:DJ&=+q$#M~ !k*kP.8m% }q\`Sǎ2*L^ޠo>/lIϠT*M-ܠ]/}PD[Q+/i36}xb(׿nؾ3Tܥ@95{7,k3nX6m(gڒ8:fI7 h4T}-~CN0]7:ӴVrRu8;՗6|_"$,Қj[hg#~@2lSRsZ!(KoNL ds)I6SJ)B3餏1`Ҵz>c"x6*UNԔK B2NE*xcW>zRL(j[|zg2`Ce!HOͫ9MB%nQ/95v"/@$2;X\naG=q$zm87qB{3`L:k,QD.I o#/^x%Rޫ&"@{q~s hAƄڽQ~]I+`cӫ \,xjcat o~ 3an4WE[Bk|݆QvNV.LuK\?7u :,7TS`8z_z2rB!vm*-;<*(#4nЅޱ4uKQb]Pl5-R\l2Nѫx3W{1؆IO mƩ.X}`{wbP3m)}y.v rbE _wgU BԶK%|e@,+" k٨.:M7A1InxG1/JJXlo1XMzi=A/iAB19C=ҍ׀+mKeٹ$aϗI]{R 2קJ _DufG91>` 950OjkJ`荊3TE 3NfZj 'b?JO^!&>;ߺάT.=0KdU-ۊa2ք>GLIul&$8NP\"sUEj%іOfuI霊XRӻt[N ɘ2tn<.wfˏR u>z‰vkދf 12v9Z ,wKIJ݇!Oz]U)9IkuZ k#*v<˟ȽJ#J cś* k;K9mgt+°Js*b :Z+()hc[bB)K4F|nLn%6L sR~w4F_|3:ҕr?x)3Xi ){ _$d:lZ:B{^j*kP8; ëW HWg9gȱug6M4\ɒ7xpYҚ5p2+g@Zk0 5}y"v;^e%^-ہY[X~*'fk`g;ΰ6<ܓD>yBxcM*:ʺB\~G"?_x6xiHx.|aqqtZӘS G}@kMuɪkc3Y}y_G˦!=El MUOp|ic&>^EXl4/Y3NMNnYr:ڿS/6Kˆx:#3YXv(HG̎ 5|\?A=jv8~* hOJQ>C*UX*i^QB x"_soU: ܹI/m4@LGߖI=@{Y QRNHN\5:Blq6% ~;Th٫HRj4*E2'2C0~fּjED]TA0{] .LGq"QVfOG psON1*7ElʧiX#m67?VP&>aN& 'zk-p*!Yѻ{gJ#<x.(Ѿ3\xQꉯVh 4 94"B}(^>zt߅c˜[02o`p91c4Ag l{"|C!/P|8LL;7s7?%y?YYBj2qE_GП2 ;U(ӡ@ǽsw=ewcGƽi."R?sKsǨXT@֮Q"ۚ;up@Z䆁\QM&p_fv3`5Ʉs֬IwᔉOoҨRKs)t;)@u]Fsڹ.M4 R9JLFi\ʑ_X#EVHȸf}UuCnϸ.[0<,%C4+gQ^pٝCQʭlhI˾A3_XЊ6'.=1u:W2M13 C?lύ'pY8񁲥`E9n<߈zw$#iN+{BE`dFDlJ Sia$= 9W @%c:aBSp0_GvHUѡ7 1}"|kfP{HzH[ئ]O۫TT7DL{Xa-jL[> !cg;{mq-t'6U@3+GOj3=@ֈV-.k|^W, k #ҥ\2qS_x? XIo/=?Yhm4v{N[c&ˊ2z ,2d8-es먷%]8UU(2KDhvsG0A|`YeY/UM!1뙉{uKMQO~99| lL:*_8%ciGP.tvS_I+Y3di)p?쾙:J<[{Ubp奝{.n#AW;BN V颻"=~|Lَ=ns3Ujk 8Y^CrB鋩Bc-&Hpgcڮ/^_ȹ )1op/}ڧUV{o񤺧ջ%;9qW+ܧI|t%Y DA =Mxbs}w&.hݦ``nL9^wB`Ү W,8ŕr"r4v 9L GPJCn2NR P?+t,ikIj (շMrZw) 5 c+ ֌ˆb%"YQ$˨\ΞɊ\>K9ν:3يZ:3 XW .AfZżl2ƺ6`:qKB:?KӚp G%nET6҅-ѣ0He=Q,O'qڥU({dpfLB+RdKGYҾ%XrnXGY3l1h)QAh䶳A:Ȳ8R8Tw_`xgbR( gR54²ؒe?n, ,Ol7=J'<isiA’}tӬW?u{ۃe>ڰ\V"/AS(#'3˱*1jg}?9 q5F1mr9g&$r 4iVf*ƟZUWMѼ4A^% ЄOSG>4+7/0YôxQ)CR-WD4,QC;wQ>E"@Hn'MpO)$!B[04`GסaԲ_#g0N*%xVb.|i߸շ/2;$2MthKȏ$TyN(VExrV 0PTeKtqeZ)C U> _{Egr:ïwK\ ⌅ߚL6 ;=^܌|-&dc0Z3ޕBǃF^>?xjv5it0jy7r0}/ھDŽ)LMo@U=v)~DxYH8gD( mA/ۡ:Z5kƷ!HL z^oEٖv%5ޢ$vN̯i0Z#R~YiA,nkQ=V9 ;V]NRV?n_{ 6r Tۗel xn/fM>΁.+F+uJV;?:Yπ>5!Tlm6'Cͱ+aݼ/F! (k-J{zՒy7a4989הgO'C` )K?M;M=^2QRg&e![CċrwmyzWN 3em>Y,%]8g Y>YHe6TSZ ]v''^;V9Ja.mup{`1 ^)^k!A9{{J$8,ltޣ;__ePi;l:)7qOO3X׹iƽ}efAٍ=Knu'kɺv"P歩ގ}ª{LC˖a4o܎ V A卪4CY8BW]q}q r EBZWWX}\ 򌾙 *#ua 3]>Ch,t9(?@9]TG#6}*r%c_wiy|ali-?RXC hܡ&!6ɸL*hCTϚ/u.nDiōQW`h(WQ65xR^.ãL,d28t@HOo w9pEEšx QJƖm^#i&vPň:R:5 !<.b&kt'/∪ asϺY,k;6"uovJNF:& N©_0fvt FnhbC:؂?*gʩ ^`mĠS#]j` .wz׼oJ)!K|v E*Cnaxy_&H=ާͼheFL?R;i6ta{P<7-.[uD*'nRja%FƗDqiITrR4GA^V0s%fFH44qJ [s5b6 쩑+)`|dZ- ` XK:|aOwI},/(C'4laH3ɣ\f\U+(4wUW? W^/6tućP;@L^U.j KldnLeX501ND9`Cp;~V"Aj#ObU[Eg~*:2>jfE&dpzh~cxgbӡ6jŎz:r]\ʐg{"3GQhNShD?$2Nv g* eҔ ]|L튮tz%C_;rL1j+󕛈@;[Dr\O "BTEN5-`{aiC58hzK2pR(cȘCZ =o+2@YG9Gnb0qXTyC|.Jne4)`Jsèfc5Y>/ jɀwZbU*(5(-uz39 C!k.s)_ vNWY"k.=~-suƍ޼*1yffCBl:Mdϩ1H!ѓrF_P=oal|};yPÉ&`#;lmؖC<+ui7[="w.ys&ôP,oܙp/EA"z q)$fȁ5p3&͌ڄi="[1YBDcuL1K4_o]'Yd{'gCyl5S\^2dzK ~5ȃP ` zEtGjdAP4yk <HkG?P SgQ }4xQ.I W~f|4kA}1޲mTVe=1llђ ŲHGqW2)v5;ܸD> Ez/iQ5 6SYՈx^MD'UD9YT +}y8ƯIv\m5H֢zJ1-$HiucH# 6&j=?=߶GΘ#MB5.ZgeA;~[#@1m #}Oٯ{qm氇Pm/.Qu,~ Ҭpm1h8K$ q+G*;q!# NN8I "GGoh5m_R2U *L! LTTHԘ]ML;"lZv߫?nb簽geR}}j]ތίv2R } Q=TLf"MtnXZ[JC9]WV}vEF@)+0P[{"=ԁb]S Q(q(^B :hs,q1 -bnYTW\ۇØ+ ,eB1\%^:W:9 Rn ^U O{G2;ie_ڔ%AY2fiLWdZ{qQ ȼ#f7ʃ$tMD{Q6 TZ G7繵Z>n+u-UA?ݒL+&| o18gGVQlSW3a0w;&`kS2 )R`PU⣗Q[+~m aMKlxuH83y0 9˙w)<|*@eH}+ w[esU2f~pgqλcɥwg%3fFjk_(TEhq>r;0AZ\9rac+o,b/Q OS_.pe¨P/h`R^߆ͷϿEG <_+|(߫iZB%Oc̿3kg ^+DsUԠE[8)~nlV⿯zܠv*^x}D:@ي8xz$J^=N:e)nRSOtGt9_zfvl~Orsa*,R[F^RHj.%|,-cY>~G,Iv~[MWUV׺5id")I,g80M3S Q>XMs ]'%x*8_-;ke3"bZYnP't_Qڵ9AףּZCg孁!f@5: S}915mz7ukˡtсhN#WF/<[V3j=.F_(VvH^|FR C&?u<6UJLN+i׵ /S0H_SEo1\s"x Pi xـ&y3'ĤTB"N C'r Y;WcN) :22T`4VsƞIF7,Wy6q ѪK6 *PL$5(:?J֜1@bpϩfc_2RIA9Dw?M)nP}~gkjmIł|DqŽUmPF-,|F%O}MqԷAH=8T>'jh9j}iR|5̀jY?vbQHͻ̨}ݕ(D4= C<6{X1Lxg1děKf?*a T!Y 2kʨGR[Ή*0pk -ڣ a֘Y+%\^%s%H)5J%W~[AзBwQ5Q4ų(#ڄr}&u ibdZ>y?lǠ}pl */^Fu^}'J@tPա[SX-ሇ-PU,? %{vrZ&2[%d,wfq)u[YNag4'Kv䏽J^'YGt#}QsĪjی4ЀOeb:s, 5g°T;P:騟ŐnBd)8|NE/x#ְ#@ϗ"UkrC{|S9-\5^o.(7SyǻZ_efd;*s1sr0ەS6qIu藿#!$/(؆=[lmU3pxGw40;lyMibM&S` 98V~Y 죇L O?Ԇt-py-S<Tdn$QR;t[cP_l}s+fzvxEG|8h=$yeaG9 5TTn:kqLB= +{lP#^SOF@ZR'F ճ>b S_c͑tG%dE1V$2"r{ђvy%!2G6;)dz'$:Kd jEKlt Ķa3ӯ"B뗛,(Syɵؠ8%l[;F#- *^TtK6$;Аj>8v$q8խ;CpbK{:)ۊj*VƵ9ܧ>j-n><-U$6W :.?"60K]3+կitbH n-{Q}L9i+|L5 pF9$Pu {Zt Q}’A2P1ɥ[cҫQU4^Z~;K[ӅsϦ0T>&- Y6>&ysrD90!'@5>}br:j)ko 1i5V Hjnzbw)DkB1^ӎlX^^N34l|N˥)COd ݎ/C ?((vK]*jo|\zmAKDo+֖4QQ^$X91X6`RĜD%3MI(Sj9Ő`׃84q21-[M9[`bIR,T-SՍNCLi쯐)\`G"zymNRtSqFOZ'Ad|w./gK,4ܞޤ:]VnZ=xl,+nΔ`'Ɣ9`Bz #:6Iq," ߘE G C`JxM*a@Oh2O]E?Ex@6OɃeRL9kw+1]A8.q"BZO:$w_R\'M`de&l.cd3a^m%m bcr&p│ݜ7FQ݌CG@"1'oˋ4v3JoM˺Z */"Q;+*ޅqT*B4G3ՄEmu*6|C%1T4H]=} W ߧQ rPYsO3GMw}F<3_l(2oDn>!Ŋ*`uXI3ynFC$2x U} Dp{(Bg[G1Z `agbWaIakIxm#ʿ ގ:+*ʣ3H)WTaoL < @C3Q;q.F%]qVL`]4axA}2Իxfx ,n^4uqwP1*2>f ` %&a;2Bg84i9AHn1N+bn? 37WBD":k ܲ$:uu\XwPMO!L’U21ElzQquqРWfq}~3toxl6҈1o1\ʑ5u ՟-Qֈhݨ?U89ֳNvn$J|Tʃ8tр\]ZEzrO=ҥ'Ȯ;-tZ`Wq,tWPFig!a8YQ~s ðeH$ FF,b?㬜_4N0n1OG2,SBWѺo P g;mTD 9qy1M|.``U,mFc]z$d1`lH+vH _ܗ,wkrfLH1_E4dL,؋5+# 0 &;65%NC(v/Yy M-jS 8/b\(p{`j0;[;F#Ԏ+ p'gJ%.+.+jK #} ֱ|hK4g:L q:ȴ˳<}GsN(EeKKAnĘ vSpY z]{xz窔9ݽ¼R;IO?xrb*(9inpo"fk M @i?/ t}r)M}0Z“h_D^|m制S==*LNCKV:B{i+[kx=(F6QvC:qBaExJ89*B%gf߃)sg6B]%o=Fx/7KO Ma٬SƤ6šlwVm.) 6m+v⩙[!ڭDQb(ot7N9pckp;ghg8ZDR<|V&hA6ѾvIGWST <NTVЊ l"Y=47e{Es^{hAfp:D@!2ɉ#Geunp"zvFF_y6*qv# )6?/ \eu(֣اXjt;`srGH <$7u,{@7Ll*$U46܇R) NBgNX'=;H F;ṄRx'bs>c7OOJ%ψ‰I* 8}5е6FCO]9wƗB^4ҋ'M^Ĺ_&\j+h@I Ce8"7{lK-Qfٍ6!N]OPf2a\iLf#$qA07|s{Se'7#qۣ_2\E(Ȓ_[h|4 ^c q XP3̀3tU 'NB=7G\^L+:ިΛ9h.6Xm>WP;?#+Q5סf󠲛i9fv`x2Ѣ}VD'6gop= [̈́x8͑+Or"^*bu x:06![ܱW1 !4՟X~+ZP9; pDD %5 =84+v\b.4VABU}Jʹ_>9T5$k5gr=1cj-*VaA)Z9. ]*^ϭns.N=8eu/鷶y`9 7f"'ЬJ/ةͪyzU6`lfѨFRw+fg]B O\X.8fj0'o.5%p5A)kӤ3c܁"|e/A iQxVᗯLCzϐRIeTd?ɪAS+@SF 'ޢbKUbPSHTtЛZ&$Ů ,>OpݙѢ|'yj?[pRu^&q+La #7Ґ!+AK~깁MiaZ ͫN`(P3>ޓ;[hm|pHӛC#FW2_FQ*HMcvmOƂgUp/vs8$網D jzuv23 gw3پ8*oʬA(VOv~4?W2ߎ( YErh:P0Egu&R!7[_$w0Hv".Pt[dOBVn-=J3M&Y2 66ڙXACsmrroy)sFv;MCp#[[Ml$YE^vE:}qEQL2%^xҫ+ _zңǓ~G =L_Lj61Uڪ0Za|҃*yڔS#`;Ԋ$昙T|u.P`N>B{@ӴN|GPv|a8]g'p!*ll~=*>$(yG3d7'7n1=lܣlzq^S KԶj3]F;}9@[kDTmvߔtf4j2W#/02 %b\~|#TY\gKgD>#ymH0âDD4[`(҇+< Ԋ&"; K~?^@]eO?zt\G~c۽_&%c*ơ AZPv\&R2l w '3 92ZSq,:}p1<BJO h)Iy:QOI ] s1$ȼᏴ;}fp U`ܧ:!h{{hiDŽUKB]u1HނBx5a( 1Â/L _% ;h@>`24`RRk= f~|0h0,Ҵ:gQvě`dzpµ&WGkNLÕb]}j F潟fp\olo|URgpGK@ICZ? z& ;  i~LhbKo22dMѐTBadڧJP!_{)8jUZkSy ڝU )": d?tuN|1J%&n7p+\鹭.&Pe0"g ؟@Q,Ȯ7_! oO}uU|klSڳ`GZhjո\8aaizJ YB>a{E)!)mYI2"ߝٟq2W~sm٣ Pۉkgb; |i'}!;zEݢ#1l'G{^>O+xX(:[ ZwwW?iHӲ5oиvx2F'T.mU\rLu @f&=M۫PJS,T !nPU %d/8Oۢ %I}[u( ޷,R sdtOK濢ڏWZSM%gZFdvQf[el OtV1%K ?:Oe4 `0t}o?Zb$rn 4.jX/asSGG8_O[׶u)ď3ZTCdaφ̯+V{XAdRlI_KrSIT '0rutJvxc@sz֣$s猱=O!˵{BT8k :ʥnۚz5o0$xO}{R.-z,ȏoa|lMBS,6iИʾ?Jew͚,=Ql=`bSOĵـT[ <|-Qȶ! 龽c8o{c"Hc+%\@su&C5su戟H\o0#UHI6"ϘQ:Fe2'lk2B]9>|펳n`IJƸ7="?{mkCтSh X[tM)\C~9T;asZAp.䍛u%.~;B/$W>-'X`וvW@x,b$? @Hj/2 !A_RQbi\/RĬy[Ó.2 \ (d52RVֱGbe X/6r5o*[Q/xDX[&%(Tk<-0%?+P~[7)E{ʠn|BCE$*ϤTVOoJ>(n}Fۧv*IFeNDh np9Qۭ˱d8Dg\78 ) \}jv8:S'uP5qx\n(M;~bY:^0כ5 2}I/ydM ԧ8E-[NV`Ao{ͬAKܴlsvďзI-qYnL=C'fْKm=S|",a50mb&}&!HJ3u8͐KJ9/7ŻoasǾ$ip;BҒ*|ҕBޠF\kx퟿2L6mȔs!)NEpyP:ܟIfj`oݛ^vN@Amw=3X#GVJ];`RyI5;N0 PL "g6[j}.w`?&k Uﰞa#ҿR6HWkLCVj05Nk$c[b#%f`Y<&>p2tuQ4I*ݗs akr`_uԥ5ّCVr Oz",A0:f@H'cbʙ'azPsBFYg/+˔eS҆6Łi ~~^!褛S+eH44WV(Au9F4v9Bb9I,-QMZ.wՀ/ gF wEfOs6) |W-2i`O^[G.9f@BL \ _(o9V{ kesLګ +Hr Ԙ:>$xz!V3c+ Ǽٺ737MoJ*b,y!Z &JS95.'^áu8M=KGMuH)!@Dsd؟(w"FNT$?&Gz9iqeA2ߞmㄣz,!u]ڔkz*oOD| qP~.&/u0 p_zaoaZi*h= (7^|*k㭈#@ypx "]l14/GtF.t;K;QbN{sqg'ɗ@9R{8ڀ_ dUoT։ * Rb5i|bZS(>nA{4.VpģcHJiEDW5G4A#VƂ_jf[ 2i)<͛O/iKRݫaX˔%"[(Fe)^tH uv$[ޭy)~*bY9 ;1n#a!QkLR?)wɕz~ -kښw&#:`To+Z7P JkuS:dIM豨6jŤO$9m.-E+ù1oz__13#jY$tiS l9pםG$f pUr&zKy\#IKk^i fP[=3Y$2؋+<񸧑?:jf|W6!L]u_+'H t;>$pAly*3K<5Ўt}qs2]s^%8Hr@M;EtQgU4߀iu JiCF*5EO*܇{s ΉT.=8.>d;y7,B  ⭐TC\>Db&]69dM |^ܔ(vw9 <|Kžw1V %dW`_La_1{={R~eYEiTgQnJHn37cÇ*I.{|n(H)2VKT$w/C?./KC\kc\^=M(=kK=mv9no 20I{%{/]c-me}ʜdd6!!DEER`(*ukBA>82dPS8)%OnUz*E YoӝuaRNT2SWt%7 tum0#e%*luiBqu^$m[Wu:T40z;yHSE?u&eNL!eN¼٢:BfzޜyeбSCS=Yw97ї p~8- rImMArP Uq` &hJY.'9ΩCtHӀ4}#v>9]dR-/U&!m?SƢ^7^izO blaD b:ylwPK Wqo;S|h,T<;D[`p 1?b^R˳u!Hz$"5/2h/K,%AY]DNnY# JˈvCpcD*0Fʼӷquhv: {\en+^U`E#@Ą\~(E(u  #Èj?(Q*820~D_s+1abJ*)LSL%ƹ"-#h;SD2Rur7ۗwXgrĭtjiWgsǐQ ްl<<+HRy4ꢽœXi+@黬V9ޕ#v~D؇Oʶ2QgS yWXSuC8؍.q_Gq ,JْliEbN#F8[1 l{a -,ɐ׍4d"P{ețfL4P)Wq;8nuRe`Ab^G:Z'N]hP6j>~ctR^4d=]x[0cVKSgh!SS,V wv6pb J(<9xc+ӻb;;Ox~H%'s,PŊ< J&4~Em%+ezJY,qavaqpGړ]:8I';?#˾E 8#0E+\R:XROK?<- j4Ru@uTv>'aцߒy.pz=)Xy=ٞ?h-SBEGpU7} %L Ω ;SGZz>F]tst] ŝJCyy:٬a/ QζĈ&ic-/$~$pA^א d{HJ@P~WHj(p[.jq̢Ɣ^@ f}h$VTt4t^Ke~_u~V%Ac>YtKǰaAJ!hR5ѺufW5UW(]Fyd" a!;->XWtm-rtYOA4n TA P{nea N\O>DOcNb|K}A{lEۍ\*iTdZGFX1{dU#nQ#,7}K($`4QГ,\' 9e专f֤ߵHlx#383sSH $iU)0CAQQ$v1- )ƍCF[,7n)ewb}tUW xnV&謀UbΈ~ĪVCn.x^^KҠE#ԛskښEDݾ!}⣾ig3Hw@OVZ7m L0(Ӽ( c'*g9yG`z#47ݼ1ߢBDWl@hdlwNzM[mra2᜸dyY!rfcTO PNwx8z5T6]kzj4&dBmۺҞ;o Z)uP5# ;s = O4>2}U;sUVxe6ʥKUډ^9e(SXƑ +.22L!c ֣|`Z n廌mkz#;5Ȏ\Y`{N|fj(xĊDEG;Vm} .4W0{Z2F$L򊽶Q,u_k 9wRT"R3 mT-ɬbT~-X$B9N T5z(H!=ޞV_L(l2h<{j|=QySSp3,ED| f57Ho#glh$=Ot(]_՝v?k{(MicS5v9(@gMͨbq{ĄB1?y<ԕt9;w 8a%0K$F@nD=GGٷ)1 i58#a6o;Y>9!̶ݘ+5s-q*ܽB,jLb>,oFlJϜ*7{xVx%ym#tn G8r`^o7â΍#4ͰZkC30rSyX͜ Ggl iHX6iN[@aCj8 PTWvvklVsm{jaBu`j',?:^!(n*~{q,~XH+Pl\ڊ3b/9v"- .Co >%c{ !3LK?ֆ}]FOׯ* '8t7r\8oz$>ǿK{tv>4!Jzzт%RA}Vѯki16 H]>ϙ{HՄ5CJYNWEqdu;JAEtw7|) dҤ訰TAYZN9mBþYTScT.G3H4Iefnt刜izV [EONiUa ^0l4: 13n Xone`)`0_HSHg߶]_ :[de,a-!O-_/hr X%4hu5\|zfFSV@N0/m|Pk23vá,=_%YU,$L4PWڱ_3 oSFXbw̴ѽ3(Μ! =V&thKӼpVP|Yc=*q yN՞¤TTk#`,3S=wM^&2`x1dUFE[Z_54:z&5ǖKk 5:PY.LR(r0SmN<BcFiMiT6+8IŖl-qD[<. "c{mNGM|*dYs,[p2v{[joxCmfr{}\3yZmb` }QJhrPD$TaB9/J7qI 2kÙ߄/j eYX! BCFd*%E̢sJX7jUZ@}' ct8Aɲ߄%%Q+l/p(i=SK_vb.hBX/o:U_HPnXkx1,,{;8)ffq"k$cSz4u^PŸCk K} aok*$jE)k4>(%? @@UxO8:QPZ-@>i6tizof|N .{]K{c?=;y^\DO͌`vz~B4ո'AWZF=տZH=ʱFfFV&LQTCYtQ[3#xUxxDK5..9Q% RPᥣgmS\8{,<џQe:Fc5;8b*cO9Dt8ٛ Le`J4:Wo 4v a´դMIO:i,as4X9vUJ3AGjn.T;X&wcmWC:̗"U߅qk<|.adbJdot({]C;+y?N@!U:@X$hjc~ )nzm/5Ǚgo $Duz0@nZ)a6ٟnDU|QM{pl>,j{m `KDR7wkZ25 ԣ2.~ȶ7}}М5XAo%W$x8GwUܨJ\X/&8FZw:1!1{tt` ծbY\orR]/=Jqk\Pobޑ!NEV`/100e97*CtXQ2zUuBEKי)`{F򡋞SyGYo_sPM>1Y)^}xuECtí% MOPܑVBcoB t8g>},Mq& pI?fJ`O* ܾsVýPdwI3j5 HQŶ^t $$xTyP=+-j4}ʃ+S̼z3Ҏ_V`R xo*`vb}9/`oZJk~k2sC9e즼ГBP*XQ]B3sg6wԕ+/N3 :gSU+o[˵刌i _!ģG.ACnsɧ몆J'o6h=Tnx_CrriF♮J܍׎Vks<2_٩h]$7ǁ%\ʹ.% 9k7:vj0:@RKmD8!M.\ G ÎLzs3$H+߄;-%|,7%Z8rOp(ngF%G6q[B@Kׄ@o|Y e::zu'+}!s"~mYAa$q$4qFh7XVLt犈1WPU6'4e Gt9ye2Lu$|qr,U EA/64xXUm28DNֻJ.):& /Pmd x{;'K,SVeDXoGC8)c- qqKx7@o.W#dUg/eINT.l%mf!Ǐ9uȉ]5@̾-Z{b9J/ [Jy۸{d݃@;(950 ?hQRoX~\/^"NL;2FDWe{74j(n$l֌GwqXF7T|Vq^j|tM u=p{tIQi=[-RLcJ 3q!oc3zĜT|6o?abm  [rZK.Dǔ/bP#DUzqatE` qܵwBM&  [=2mm %\&56fAS<װ$4.5 ^Jb#x筄b*F.D!\[>;bce)[/'1qMԋ sZt#LM-;=p ) SSBq(قL\ Ń͢TeL-[1"%o9Yi#A@. ݣu/Az偽ߩ0M9"uvʝVF? Ėc-MY]Z;S"?H?%6\qxtSfmIڛ.;Mv,_ 9;"%)Ш6k5BzL_׋``Y0o~ '236/ZnRsrVԖŌq}`vfkg{3 ~uMƥQ")}pBQ<!]>mMM/"[%ߩmOÖ\/ҥ",lH+Y<h  ȇ\pʐ W:HBMֆRVՐ[g@7Iݼґʳ_/}p'U}+Jj?$O֤Pv_ 8HTܜDu˿x#ecLk&yv-mлXq0v_\jTg.+v 0Lj&s:wnF*L#!|O2+ i@,2BMӥ\#CpPm|99D)G*Q)egqi-i^nB0C7TjŃCjA"۠9"7 `' HY4Hм˅ 'A}1lD5k'0*ua{ fBE:bǪ n"7CX+pai2mUA5]`g:3@ft2˾?{ +4^ _r xۙFdq~apQ Xe<'뚟Ԋ^ EJ.D ͡k RS|³&qd{sYa.|4uSvŤH\Ǒ6SN.*j]'!>v/āfTcoHd՛ 9Yu#x a 5=4調 TG^aVSZy=S<4La%h;[SQ蝔^w.AMg.SE;/ ? N| Z"y$Qb[e || vU6>Ո>r_ES?2͋C֔ݕpIq+r#Wn,Kf fǛEQ{in}:?ӲL4xNg1ƑFy~xĉ|Kؚ7pEc?U<\Eshk&GdX(~MtD!Eno+:-Ȋp/ˇZ I0oe'UTD% 6XTPJpWKjjp O'l`d_) >DRr|2,[9hs^$= C-m\q-%Qu!糄tK몃}nվ\jt*kSJˍi3uwI3kZ!`AHa4f<[ZF좛t{(O,{ iܡҫ ÒRJپ[\_nn8N?FaF6rB:>{~Wu0f@aHpZ`c5ESٺ<gjߌNa4VeC7DW:6)$%sЍQk6"[;0وZ}$:eyw-Bb˜D8q#)щPwttCW |H.U$|-"L4 38 8*sznFQokǣ.\S%u4ä>fe]Wټ+':rJD~W-w#%*J%mTv' % iڒ ox.%ꕧTD$d7KYA`f[I 1[z=o6CՂA6l>gu5]/7% 鋹uǾ{ad)_ ?w$C#7/0څEQkTB6ӿ9Vy14&nUgMj6wswcbBD @ա%QqeRpKWݓ:4\^حЋy)`렠܏;b٣y$:jҁs+2֧~3o `+7E< k.,p{0*F5&ͤ9F iЏ!D9Ztz7Wwsڧ5:!$ lZmiUi}$TVE9䌨oT9Az"%hnꋍ >F\m0kUU^|h^Ryl &? :Hؑc zihE-)eүP5j|hf,:طtl; h>}e!qIN'7Vd7}-ˆp'IO|vC|WnjC:ژ?8KSkCVR o B3S ^ "SmpԹ32 -[ƚ+&[a.Usspe2ƒޓ_-h o+V{whómU"0"(kK#S  "LxcL~H%Vw3Aor ̔Uӏ`0䃽Z]tܽDf(iiOӓ`Q_ 8҅)0mH|_c`{ԕpLFh`N:dI^K M\w5U[o;(%~hCwiY4$֞uȇ}h;SLrwmWKWz@)mq#i /W)U^Ȏ*0bS8<ȏ2ּYdLO֤H>I֎=ޘheDUV*kR/CdXfDS( 3^`޽ړ@xT>^g/NYhQ} =yT4?vDZhdZ$+sDr.sWyZ9"CXxU-I =[_<@x}F2wE !5[fM$nO:"H̩RɀMP_f$&2Sn7=f `z~PSEgK%Uؕ”f݁T?`i&YUZjr u ?{aS}&4brPK}uiAS-1'a12 J1*ulޖFSm(tkjb&~iA";WvP]UWH2m/*r(OG끊uNNzt5o+ dKA^?Fs+kI\s5eτϙnͥH-(u4A)nCF"ˠq/D&]Y),E+o}8jgWǴ*ϲjiMp~0O.AWA(ӳqb =lKTƜ?LF?-`)3Y#B dl=o&35+K$VE¥Hh7_}a׳}c݉S PյۛR=+Rn3t;֙@[:˺ }؇%7k ›y-NЖb M = V-Կ㬿)B#A*{M̐Dc1܌"zTG/57$6lv \F&wK}Sy Y|Qp:[T-xY AjE;'kuKAYERRI ,Q\|HRcc b/xս :5&6Aa70KrFe|hIvt!2̯4'$5?& n>=ν{~XݠPܔPU\!Gd lbm[2R0PŷF$m6vF=R)~tjO;:MCzmt> ZFSξiFgƱb$ΡtR( E6юi˫t'#r`U욭`XJs6B*i"%xăR絊p[4VrҦ9E;r}_(f{׳ˤY}%jho5ӚDEѸŠ{7J_#bFk;ϝE&ctp>DlcAS0%]gl׫M?"&e4x)p*n77U|HyYC(O#5.Tr`/եoFg34.uNy.ՠ4PD_0 YgLbǪrntY!jg ѨZf3a}܎[J.9E)pHCEc pzнRXeX(.9ֱFz 3)L>aZ֎2(V2 'A.F&)sdw'`Z'۪/2m"_mv^ .*֖;JFF8OV_|@M}]٦CAu[Nwo&9׼~OUL:ZO2=!$' ΁& с)E0A)G)שS 7O6`nXG8AGCwg‰ $lݡ8eTt']4Mg+|Y7^Dʊ=oNq2`ܕ I%[— uk^C7OUwŀ$@᲼hMkݍJ}_#i Lm'(.(o֬ 3֡ 4` k;{2+p#!3йZTJs U|AiWǺJ۵ZE;].p,SByAsh\5SUßog(p@ #bi$zzzR;0s=\wʥ<đC'd_+hu|<8@>3g@XZi#[fן<|*սHN hH7z _yFզ= 5/%ȷ5\A`JeoX 1#*6,('|~פk58 NKDDm֯8OM-Kۉ\Xs^v|\,>t'aYW or `ޒw7>}w;#JYLD lJ M쌑/T"QY +J͌ ^n"C軖qz߇ˑxuw%٘7[y|QFE\|?Yq<ޘi΂ȞG$/e`fVf}Q3n' u4w,."sXE7W,xGEF4É".*&d)&r_lRZ9%BMO$' \K{dL|x3xv4\h*%:˵BȌ 7f 5Jh0YSv'NiR؜rweu&2.zf- ;n|K-HS SR@ƣLTߊQx XR3hCh3ɯ{;(8AG"kg+u:u ;󂺢@$:j#f.3_]n2U]1#S1D%N|"ytGeE8@IgpK7g[ THKMf8C?+bG(xK!2 #HɄ헃pN<|dp9e^\H3%q-(8] C:Ng'3@gTCԦQ|4TN[=;}RY-`  ΢ܳi?; $@eC\w0SezNCB9eی)l9t0(_͐CЗqX*X{n|c5iF f݄,2еsF>:z \stko3>Mj*@EV$_>vٓ~ v:~3e޶$SWV3~C.L `Acqi|4d da\N>IȆꂈ憊KQz~ߓ_``!PFʗbs˫X n\n1%,# TL#^tz|غch_a30M*j"l'w*-xD@DW$$Zw,kNEJP޽׮\zg!Cf>^G#qEhI@z94_4KE?cfn *{ rD)U[W#;@(s!QyM7TVfcqP'@/PN^ 35EB)ܾoc[odžCt++ 55WGw(@ StGrpy҃Yic f*`LmmX&w ]68 ڋl'5gW_'O`(r$B*X',^H/85M<2Ozwe`%Az\w^AՕy6p{+0oUƏ\ =gw' Ybr—R@?rbWuA>߼Bc;1nvR0P]Rd\Pi-ڏQ&0D(s:mT&GuZf1a~Yfqm :`7s[{v!B4CO|Q0_&RD[/O,j;4Q1\O&IwCAW޾Rbu|'q"lfMY$B_tNuTOaj҆895<LwT"P@^1Ei X eK\FdKdnZֱ U<`!V;? oq{_ M. VW5 OnH*+B+(*Ƹto %qi&1V4ǎ&.*X]qT߁Ƨ_|P*yͰ`o0+ EUxQ"˥d{)T"HLZ_ >WpÜAr-[M5 V?g% Vj,@6}60^.g_ę:[6&C.Pů!R&ah}K4`3Zm T:1jKX6P:'[S{6 $O,*N=o c/OB% zw(gDN<$d!b"߆ʤۙ3t~)@weā3s,g1ts/M49}=߃&a.["`Lp9-.ƝIzGY)w)|4t.lr~fMYggL#:”  5eddw UwZΚ kMC:$[PeLp6s] _̩E. 9e! _C!_d/5In OHpR֘P#!{*WhZU*q[8b:qu](-?2NDʨ+NJ6;]6; Ż")4Ąe]&SyUfK1xmlnn6 D:=?[~}+J~šk3 ڗ_$>Dl !*q-[cRo>LeJaDeډCp @@O&e`{k,7R9Y-g9}󱞨]< 9)l羳_lpsMɩB \ O ìđe}B*/OԆNdk19_DWEN9iA砣4 PG华Kfm}MnxAE*j$}ERT斐l-)ۗ=yhk-J=AmaoNpe4s"IcTϠ#$#a9U qn,s©n4ѓ9 p;{jS;M ?c e5iESZvТ!·!N.HDwH`ص:93Szp]6e @JtR~Rv610pJ;;wCrLlH9 %^4h9~pi&n`eyt{HC{r[蟁צT3b\;z3dkF>w~vmc V^57ݯVi_gt~eէypِ@̉3/nQ촾J3G)A×$o!ֹ9ƎsS8m,6(ܥUm"W 6>P:ߠD0eT6bd|L̇z3o q48mUPK؅qG.ͫaٴ-}qeSCtaYOd=2F?Wuo{ ;i.=wkzIC֪r,vDo4 O2Z_'X۲ѯ5S̩/v8yc V$۹jgF5b7GVa\{q07Z0tGwnxOi_~n8w, 0R_)! s q\@~3Q񞻥։1WqKhs8 ۀ7c5l_셞#gh9J8]n,iY7U7׆kMd +g_@tzR8^ha(ٿ-.xG5yUP28 Mn7Ҥ#S%°]@?XVq{QG*ϔ}R_hvgt 2Ny}yxnw{wVEV6ybԵs^]E%wZJuYEoV Ѱ?*c# $YJ0Z]:袭+Gv:>S$e7LdY;M@r*GKf͸AHvsWBS54иSɎ*&dXO4Az'K'L pQ՟%j!I?ܞDN)!Z>ԗn6} [7F,,]wc #GJ[|8N/z~&2ۏ%bC3[΁>jJqgq鉣^f%zծ;h(("fOɑæ8 N.b ڼl[f]$빼{Nn|0d9Ի8b\OnfOTOD2ẳ:|Q84}w-V_sU\`H( ;!W8Ѱ;\ZJ1]UmF]IFեj63|qm~VKUCvCN)la>/l*ĦS3Szm3CfCusF%XZy#>?GmDՠϏ{aL#x;ь?ߊPXZ4/QԆV 1>OB`m88c"1v "k͜G` zQDzE 3 oʛGBNT]rIE{Ҹ  q<뤺N8׫Wyqk5d~e?˙d(M.-R45IeI2 .)e)/h+Jz7z\<(F*Lgpw#<_9F.vHy;f9+*]z w-9DO s`s=mO=@eL) BpF} 8~Ԅ^g 1t5. ly*\ fǪ5>G֟;+a"jR\җV ^$zC՗isbU]tϒ;3>T_jۥUOR[ڐGn0ѽ8@tqm|PgYr!KG WS+`YК{^A[e|`_ mS('u,WSH?=IYsT ;AXyLbl۱qo gr81M/99L4+>Eaj=齰|0\E mv2uqnx5_ogZw,>,-*>ECuSRZEM-˟ Z%)?(r{Go6oHG!N". UUflV,Ye)ؾƭtȱ)4Y4Ob2qx=/ ߖhf9b`:j; ;+ޥ~YVB4šCxVt 1rNeݻoZz(#3h@q4CUn-Pr:ĉ Q6yZB`kVo'rERlR9+@:-X^6x:.@&pqEjKMyKXms} R2M#; Tb(:EX?g=g-$׶/-! XBĿG69XOz=)^]($Jː{_IS)rMups!\=j&jD+^;XiX;}#7by1 a;?v@==n/rsy ʄGj BZ&IaȫzjrI${>v1i #azcbc C282MZO~z1߈geo0k]sa N#BB'-k.XqVʜb^`?eM!Q o߳/aKȧt}e[lCPzb꠩w.SOPO 7#ʁ%5;*T†p?.`IT5Eg52O SA1ʓ#f"7!{-r˃ڼFʢX^S/ [ PYl}E $޻>5y>2{2ɥvybߡhֵRii̩`s?[oXaٳYSȴN^ǒu#~{*r3s:-iI譩mP;STCƁذv𻾘dJӆά"Ic2z 'D!Ȝ ̮9G<_vZC<t=xcvFpvnt(9weZ4iv̯+ίG$̠HԿ< !L5H|rdF"cǟU2/|x*!}zϾuS4! nEp>}^"xo"y:}%Qg n0:i |*yUjT+ΛAf^?T>xAgz;#j !~k {J@4Rl6IC⇓f_|{OxIJcxɀֻg-jOJ$TT4%P)S^Z0Gx Iƫ%ȳsᠫ|]!.|]vsڬ"6 'Cv9V ܑX`7oeeƾqF/E %GU"LS/O=~JY0\P܄xxD?Q7Ϡ,7L¿W+{Yoy-*VE 84wmjKQWs~o`/MlyH ԻQkdsDFʮT^dZ!#z(o%C*ߗʙ2?l/_!;}ēv  w m|,%ގQe'~',6:o+~cMe盚-g%XUZ-#`Ԥ^to\㬇!ŋ8莚I\(6pގ$ ܴ0e4 lXL`X : {dPt䯼#un~i<,Sb[HWJt}(ǑI5eaUC]iv[OU!¢m5hJ*5(~u-ǽHy0:/BxU\If#'=(YG]v `bJH8 5d9q JFgmh{`a,FnZO$GpӤ BrW=ԪM3ɿw7kw˨WLR%g_y/+"p?3w;RD)[h '}\ޓo~vxfLHm8=A=M|>8=<7;eF#eEKϑ^q8I XHgTumtٰ% ~j'l9hy(/{٭W 3UJJ,I ٖYnG ?'/L3t"IhXh(;9ہTީ>\5r\ .U:[~o j6^AM9|k3A$z?Qha:L DVMilĞr}^>Qo7>ګ\Z}ՃRkٕ(`H^9is\>VTt2%g$Yײ{t%'K>m[ȞEpmRs6{r`{՝ *f4FMϜ ]&^oSX6`šPP!=O9*aHv}1P\++ k+L6Oʰ(S78EOd^8sMC_cdm?KszfYm(u({rg}i1ݎC?aȖAKHZjѤt$A(.9lA7>G!+1{憄t6ȇGMrRN{5nyJsRIvkr}D*Ξ菢^`(DW u8-!D9Ҿ53_7 K鵽Y.g-{MS b+A#24A/Ui b [ r|%8K'[ݰkLJ(5(rgO]t/F@=hP?( S,x\QInjcxMn&9 ;㰃,j0s16Jr˒"pO036I4d55K5YcQCvv_#@Ҿ(Q ^BhY*:%zJ\YsN.+8Ee3OjljB DN >PkM.#;.N1%>S+~bO'E-&%'Z(> +1 :A/,Ù~Qx]u`|+ן>&bks&R /p:]M|ٸdv`%gŹV@{{Lx) T04Mg{EM{=@?<,O-sz!~/r`7]gXT57:5B1nC\$j D"9 ɀd7^kL32 ?A|A媈WCoT%5 cgBo] ?ȩQaYU ű톣Oҿ">t\^  \잨IK8Vd>0y|JQ@"Qڦn+nti@;4cnjϞLRQ#rǮLI|+P{5_r{mJǹwxKm'4LV_엋gx[45]vY3G do吗$IpHSD]u9i L8maSKlY=֦:\/=)€ɈUV'Œ־w@L? З[0^PFUSoVm:%2UI{pY@8JA?UW먎T^c |KҸN~Jj{5T^ e&FhgBh$񴬈"=ljcA'z Jh"s`C`=ISk M{uj c[%"7KG|H(E PƶCNX4]do  xtw9n=3) &V>B<|`8g3?̽;Ϙ_᠓ +Lv2bI<~uҜΡ) }ė`y"ehG@o0BW|m6~BG~Qd#L:CZ4Foh7TD/JN4(} иРen 5jOr+aW6**Lo,b:Fڡ(rts]hƑ#Ns'*MaHyHgR\AUSC%^cH@c J s;9P:5 [g=FX״_u)Xi 3}X"kKM ^Xޫ|h6svB>swQ $KuvQ4QO@ }HV}D *H1VǏs\B7"pW˛P72[~vо6OHHiZ"VAMp!PPj, g}sA?N$\0tdFف)zL7Y79TbJ oK5 S/1ASjQo~Ƥ,}-:Σ Rΰ3gUkxJW5+ܵv V3s(%+^jC_4 6^E>Iyxml(YTC'+腒[-vH(1}grA—GlhYc**&龒鉺_ r P>U~cD ADU9>ue @Sb-Mbv |d13 N0Dy#n)BakޞQQ?xػ7Q7OɎe|bʥoFؓyqk%Q7=I0+MGCg%y"y7y] 4)wR `jETpu}Κ(jqA}N|&,,]k- Jޜm(b`0x݅cVmWXln0_ѐ5X VC_H/9JS"mTk-]>F|mABx|x*2 Z~z>&Fn-Dm)<)[4֣ޥSx_Z#$6>xA!;5?zSԇtk-\@0n`c|߇ӄ3V`  rRC7鎩RC7y8_wa*>f\÷@ܤ!sOSp?  T -:G۫ %sQu_x2s@z#E67.C,}넜B>CjCVߡlZHzUם3}Btؠ̄ _Tru4Tk|숑pK7DB,8%!ZqQ;mF8/Uu4*֑j K5We`RzKH<14(QG6dCA]Iӱ9l̠b8w?3$|i66w˥ = 8yߧreCx6.}m85c͟u0!L?Y` r4܀Ȝ5,3;(VJZԀAOa6g,-!V 9Qt9KRӇ$]dFxŠMl)LŸQ&vY1^{G-}j.s W8 ʓ-?h0K3W/lrM>muв͠GpBFop * r;w1> kUŽf_Bơg?ŀ  &T1I=lgtV_ ֞qZWvLqID|H Nvd'rI,ě++Q+v:ju5*gs, * =X}^ !Hr@e8SUϿڐBJC{0Ե\i ܵך n]{_)dRbS6]B{2I<(v,;^b$viS Bx+rS|[̈eg*`CaYoqz5VS]UƥE (Y~-O}FM4p+g鐨sK (dW'DNA=~@Z W)rxwmB"ihgzځ@n[B_6[H8Ro;6x{ë&{qhb叴6rV@1gsư݁WҜ)2 i减=XTG9=v_Tn!Heh$=<޶J$R6ШZDQkD NmDta:}E5XXEߧH(&/J<%$d+\4x>naUFp0\ikwzlYo~Pu}blBX8i5um5  v0K#ֈ0gZ Y!`c1Y4P_kIKOf#wbK(f%"k_;t܀ڑo,s;Wmk#bgɤרA +Q `i9vub]oi~鞾8,|:hUY"\pSY !{j0f@t\ݜx#0*lhǬflE<:w~@p!v@ bqPP{,55r4V:p~y*r,ZtxXFdØi;_c%= |a[lȫ5le<3qv3ixw.nssV 9&&d\8kTklrI+RNS]:9bhr#~םiN[3sI筬2,ދ+9kZXwW 0XQV:J;5ոS5 ]/J^Mȹal4LuPդ_jƛ͔*KaH64'?65C!5ڜМv%ZZ E9^#-8&`V)OyknÊ)QWm6L 8Q;d[:qHנs l&t*H+V&VӖ}@ ʚg3S,t)R iǀz;N Tɳ`Y0هx2UK]-X<~C 9,%|MNc`>%(ю'ʇIy ՃB^=#0 X Nz+ (j鈴P?F .:LK<$Ώn*-Uԓ6tqbn )JHݘz,5CR?۔R6T֘DHㅹ"pȚD,6!Pw5 H-"f^vZ љ3{iG.+I=(V [?< n)hZI07F)g]IĕoRJ_BrꚔOI9Jmv. "##`O9Mtie[ݴfUJ]N%dӢuB:V/Bz/59: ';Jl7ŕH lS%ƴbn=2+W>R3' rq5%$^5HB)>83Ќ췇sQ8G}+rU^jUH?K2A yD@bL>;H\.C|:u4cA-Rh\Da9#b_V@NNӵOP1Xt@}Ҏ4ˎsGr,JQ#*1bӈ&רo^I|%ބ4ut?+j3{;bPۤ/t:J&5qXZ:'ˮ_S-˜ݴ L6؟ WWɂ!JDڋQE)ƾl{squjr {}S̖~ LdI(lL'۪,x7,3d$ߎ^~"Zz`_QeyxVS?Y^4,jy]}6OS-[}m;t={a?%+dʄ*YøN.;>bAN{ ِ:3~1m<`lV"fRblJJE@#x{VH8鉣n?Z< xH`S *t-6,] -oxz^KM{ݎ\ kS>#or #+߁B٠|F(Ww)G/jBo]_#1Ңx;_N-;wmw٫ǒ X6݌NQ$ ym6g i֝%Lg --~hpu6!hO4=(I(ڧ-,7X>L'eܖqܠjߤ VJU4r̈́rq/-,M}{D,)(y1wv(ueZxSYڜ(j[΋ݚnv*wJȵ#ZVv}=ruK-J5IP&:Zs݃ܚy{<+BW_]^<r%Fh6hpm/O/RV޲;d e:r]L >͋HJp 0sr|6Ri T 9yy;i7|RoJV#~Ii혢 چƠt,GH8쑋)Eм)?Ym-N=*a$[߽ o'?V!s*"Mu97Fn#3Y"BI|PUݢFܴ\]] nEhPAڸCcŵQ3 #̎e~4ufc\ at8H- 2iO&;wDټƉI+Xݩ:p˜C]'ƅ  Îċvر.SpYZX:h_|tUfxC]lEPt Nw%(`lMwn6BϠRzX`佳'l.ZL̬/9O-xOչ5cs{J^Bee2M5vI1PPd2^Bt֛+o"&_7hR)OΔHy*7&t5.JS2{)T¬e \oȰVu=xw!tMjsP1(-Bo\/w>VDҫ#zCyo}=<@5Q': ;ywC?/}% tpũItDgл|+j"5-b5b\6r`ߏlUp&m)b!~&`\&G(8Ì2 X@ IN]f|5HRML+Lbe@ʓZOn#hk^σKJmgir|xˉ?p)})UJT{XĬS7i+GNjBȆfz%sM3>~vQRڡ01Oed|щ!i7+iR+UbqU TX+,=kukRkA7:Xx}k)D?Ch0*5ֹR=,7PSlls_2~`"h`ꘈYDP-xc )ʔKA&p)}SX1w[X@t=2fb~6;UdgrHYZFIU[o@' s>?⡨[RN؍DwOwG3*ÔE榺6/gzſ6ń<ܲϷY% TOX+8ݘKF b tߘosmISK92xs/ igYta_9E`Zct&&@`Lf_E)K<1~ee!ɒr.+i2R;.v3\vٙ /CH#O!Lr.ۋ0f.~h:b\Rp:T(հ.&κ{:!b󑑄@_xa5PwHn">#>J ?At^d )s7-l;9ߎJfPeO ''w|nyp37YV^Ѵr0=-$?dLGAWR`uUwQ3p$l5?taҞ_uaա^%`x$- GsT]I؏]Q!c@_ Kjd k} ø]q1 8&ȹ˴߈1_CQFb^ F ߈ ˛⬠\ U7OaiE(|adi0j|X̾ݮP2BUO㕻{jd>9 ՘;@⒲AKsG(aC')ϸд47NjZ8lt #LPMV3-C&g/Fp~}X< h2r6F*({o`5 e)^50 7%7@$C޿/.n#!86Cu+Cft6KblaENGn-S-񆌇fè;>́|E>)]׿l#,!;΂!`0P\a=0&*G0ʁTO ipxdFlg1;_j~6]><+1&:l 2#׎'u\< K4?qN@BQ: zrȒ 4ô^8,)3=ҨV|ub&ؽl([ۜ)6sѸ̢%a8/`9Bl iR)ӿ _L~Jqfv $]acX4y:B9!2F̻3HBSS o.f9in1-EzVV)-h+F_-CCr pھ7Ԟcbx]gYFea+wOh6u\|yre PP?J NZ8+ ԩxiM%{6vkolЇwCQ #+_\1uȸBϕdn0737>e'D+Uc8qWqf[Ǽ"5s~;N *G~}mYG6YsӀa5Xf=8X4_m49@:`jNh?-] *&kFT`īj,;BǶs5䙪Y;AbKJfS)+ɨJM|Q'W_^+ӟwPGt$?%$K4Ӛ+RUbcb[ Bw`}E1gل [BZp. _+Ǝ#xm AiL5p`h5c >VUYy!aF*g( ow/nF`2^>*gy]i.ѥ9|hܺۂPXC ˧8j( ,֞ {\:3fX] dDR>/p;?j͑yQИKS0!u И w븿4V'* ??` (G4ٰ5crLCOuי[sh/hrymDg< Ꞙ:18-G3Qg0(S#\Jj3hBKEAd#lOE36_%w;9snE1ppIFٽ ZQfwnkd\4!M7 0*Fo#2QM漏m+MeyGMZ&`_[4>M i̭UGؠ^1!"`DLYd(N7 `XLU\:?f(Y\`x8r/*G g8~=)MQ0x ЖzE[4׍<'[zo$|)󄬄5d;ۃuԝg~p@yX3NYhqsI=̚ JK T'URFP$4zPqSy8# '|]Ҵ/B';"Ѧ_ut&f7l* t5ɧ1tq@6WcF E ֋X`I0AHiR?de>Ow@v<Ÿ$!ߪ@_ m)wXq)˽gQn/ eB0O/s2ITϢ' rj2.Nsgh^K c Y}RWW*T!xAi8bL`YB?ĩg *'49$Cۢ9AK~ ݊*`˴7`@S*6Z 4J SrCJZu[x jFHodYLls-GA}w.9tg'KM` /j{Kړ)X{?D48|Cr`".s22ՏqL3[6 MЧsu^ѶqdH!NC[A Ql3؝:KoxdLy Ywc6EC..仅f~p-MXnOؐ~(>IjxܛADmk ` `d-:WvٳmJtso'O{`&P_#Hk:hiMk6BxJҼ6`nV]B8Gs +LAv'/1Ͳc(>cT,~Z s[}6{Θ.bG﷉tޭGR]^Թ/JhAjaEqǧTtD,RmZ,A+cF)&K̛AwOPL6_n-s?ĂO8d' 0Q:! z L YXRyC6Wzb3S4K-K|u'yaWs\|ɲJ |#1v♲Ed*DV=w84 Fd?m8HŠ (y'' R?40V0;1 C)l{ߓ0 ٦ؕ`fpH7J+hy;O5n3z*PW[01n_M8)|5Æ˟|ަ9_>0VdIh٥iIZg.J`KI}Q~UE"Ts4vt֦g0rsk+G1& :78Q* .ا .c3>tV!:c+& j7)>Vfس5Yg>Swrl Vb?b5%΃*yL?~xiRM,l4#Or.&˙Jwi`Q9 + ,K0[_`ʻK2#Mo@~(#.+$jotU_&(Y}ck""r <uZ>u[ |F[|y2X]BM _ 2Eh/̏]c_.6G8*7N b9<9,7."5~j 6b$z2ܼv8ALgH\ߢ:2_n4@܂ܶ)l;DxUGZ^ښzGsRea'3SKu[O1AިB''s#EHD1[…R ]h'`ȹgpTU \و#qcȂ\xMj&jR22[qj`I%ح(;o p\cT%@?1޻3-+.2hJ-wLa?ku@mk[+&,Mz*2_Rq{Zt˫5*:$t nf$uwbj]p|pQ}2Ġ"pOLOYGLSO70§'ÉWjA@u ܿ[m,X'tGDQBQ(W)9Ko|)#`tUr_"(-G-1K(.ke!R3:]oK@pE=/_TPeAl@}$MTo/[] 2YOslX9X #gvP aK ʨs'Zh4U'3~+6?13}TO2ͦV?aus:l+:G 3 *[L@Od ISO7K̀`hrg-8]Uf: `U<X@NU^:"ǬI 7q&yY#ΉͭZӢͅFGo#zXgY Rͣ! =L1pPǪ>7YYv||Q2h!{9$TQ>}\fk/84!ygu Æ+TkYU.xֈVg;2Z "id:?ծ&!+g6b`dxgʱ^u>&bsgxCQ-wX WvhEU@kX̽3(ܹwtU:$]ZҐxr=ZiXHNiu{>->$1:1r=b7//_LVJ]a؀xs jV7gu YGHzT*De;Jv}AҌU]l!H@}`f%jI<8IJd?沐MI!?4,5 ;]0 ԠF%u(z*LBٓPPL+ ˀNj/uhT]Pv>aֱNhPkpsdnl" fD=Y>7?;!v(A/L6TwU/J l`XsWs'2[okJum`1P?N}V'{MxJr/,2>b!.IPҏ8Vبrbe~BÄ发hTL<>)sBBS 4: 3CPᨀ|gd]\XTC'l>8`PQ`Ǹ7,2\J6 9`_7?UƴH y{mtsri~uJ!ņŧ. XlH7qEBe-wqOך/"Hh1tH㟉AՉ(Hh>wfzrρ{a EЉ\8՝P7a[Ok!~ g!×6)'/.%=D̯*zklf?K]R.yٛ'g麵RAXfOmuh+Q05$%#G2.A#zhdP&,(u],ڡX5j|'ܨ5a:TttOt ^kLmfU)f t>o.~`2"U &ApwCSC`1%O ]3_FT^;`,6`}~Q]V41MuuuT o]"O*H([NF/uL{bP2 #wL ٝ I1z{`Xѻ Уjv "uvҌ^jC QoAwA%En Ȋ#bg`0\Jn q>T:`!s2.:m]@fhJXQ(?E hRIM1E:i(Q_7 NFʌ΋'8k!1(5ph)#h.I׵֖+(|QJC1F>impx7!癫.0 (O#  yܗ`_OO V Rs7T# D4PH=,E`azГ3-9y2Ғc <=oe^Pa.3]qP 1Q['GUâ/'W+nBf59aWϑ]F:|ƂV3BH2*p$DKNw^MZZMCE£Š /ϷDY slO#uֵ6Y0$ էBŠѫelX|zxCn+:ʫMė2/$8W#pyoxW"fZ 89IKssޮy݋ٲciyiO8PNd-A¡k? 62ī(3V= r\)t1F$:xf ѝ pAjڍSg'fMeYO;6Hjs)> `KĽ3B񜧈%#4=M.I$ەk@&4 pR<--`E9O2kVt _Ʈga@aZFQbSU\1ֆ|x7ٓ|TPW:#/J_8'zt P47kSLrr6;v\`PT % ܖ#>U Ա#Op" ͓(.,0}sM;8Kμ x''/ŝL\k @.k\}w;?FixUM J}Aγ(H z,-K+X׳'PM|;vMH> 'Pt4ոI(|Pg[XKu/C]|$#"\v ?~T0?(:UV9vzTHYeVȤEZ }]IPjP9>J&.zg.Ch(!(+$yN` q'Kto[^R[#H,W "[4$zMoA԰>Xc8"{5+',#^[@9CTRu ;BArׅ 2MF f:^4'ͷ(È`r\ n=H-jBE<:/åO9b*n`MH/L\Mb.>uYĥ%zRo8$0]baw3'%`]N&F5:VӰLh@]o۰ ]rĞ4Be3◧W -(]j Y$u>9>#5nE(-oRv#q槠WR7`JS5ّ- `7㻟䫔H'ُ#oGf]Ǝ&JaՔڏ7y|} d%ڡEjLOp$㵚6q˼,e;z9-P3} q5ϣU$lnMl6/zs)Wnj?CtKlm\]>lͯYU(O(v-4OqATI~N3^;pN7N*Y#a{*>=1$JɯZ`\$H.6H h00Hϐa3)d QH~g ء:CTZwգywSʲ#Yrk]r\ԘO*ռD6j r&V8 EP);Ww>ϻ@x{4lUZf>V)dǗ,eqo 45 ҭN%ԓI,ϳ0V^wͱ?) K[fΒRiY\7j%hݓc*ͳ؍1`b[TT؆,(̆D.E~d'_Ӕ,kA8ZwwC03|[+NKgBZZzÌVf+lip9v$Hᄪ nGuUSRuP~xqOk Z($T0 32鍏PacIT,CdȌ#H9+cEztZ$^[~Pgz0}D S]¼&V$|6.bKإ%h=~ JbKZ)0 Fge:S[e7V".Ɵ8mֶT߱W1cLJB^"pZ+k4ܷ@ڷ+ݾyᬝ[)2$1R}[RR|s1>m3WYp =49OO&֎lտwUϟIQ jar}kɨrZRzSS%QF2kGA$rnzԡCAףoM()'?ǟ ]z CZ8e* !Iw8Ca{LTmZ {ٛyFS21b|NwB|1>pp͕NxRx5F[fWR,0P}vFt^»THnT=R4tR^$l[5\)9N {WXRZ )o.cU`|'VʑuRχ1kTlʉYSc.3N2D:$Eur1z=I(znjZ[ש*{߄?$2E-4 )E3 V%|JDg=6qċ&UO-Mey?A$tKtZl")D(J oxВΈ\C||'`xSIH YԟEϵuMg }qKJq.=R)uojTA34e4ԝ]jzkUi[BN7:/j{`[JD/;+uPd/ !$=i/ j{}z,`%Ndn&(qvH)|р"۴=*/4P1I2>Be-!H $w6hK^z~lCE"Dp%xIDQ-HP9ɩ4ad,qy /{og-69xߖƲ{12LAs+ǧ3V|8}3\ Lt[[&!@kٹ4fY o7mCOb8^#^8+IM د>p{{O>`wɺN:_^5莅SD8MgGМ!,ZR]\W{oBח=26(#9]ٺCT,#>"\l+Z zA2*ȶGӯ(@*4RK^35-X]SLm~>YoQ%KNb?FPV'>hCf\6(e Y]M {ИpnBw2nS:5>F :[aQrpƦ'қD_yqu>E's=H1t&1u|ǐft6dmB>']ac匵5)/cߤSr˻9=Z:&=]el$t)0n'h{]-Ř)ti~R .azo@\7hE^WaKJsIkm 57 ,7(g,U3"P}rTu9&e:N.u8)>Iuq{8/8z/&.k's:`~hPCwP hQ͝y f{[c{tBwYf>y{:m<%-sاHUtsYOl{֊ cXezAی69} U\q<&p[H#W%a#R۝㌲;I G~>7ωJWSy:Ӻ[#5&hNt^$ΖN ?8M Ïzx .냺aEV+ ѩ`Ҳ_2X4.7XT ~@YD|Nј>n ~|s`6v)X0ܰGf+!d)90*g%W fנnHl`[xA.[z}7.z?mLAXj>β}N`˄O3?0Mqe۝!j h9P㬐5o,.*9D}=>IIfZɢ+:ȧ6j^hᓷMÅ1 ;ai k4i5(DMnmeZQ %\ (KSܴ+mͦ3mp\UIn72zM9E4]ӴC&*qyJV@/ QЗ_g[ݢ!{QMD>GXـȗna$Qvۺ]ۜp5[n#1,'B)CyGRV-$4v$Ѱd`Щ*"ɛ"xp4`ycL D8x`T3l1<͞T/ $XڷhQ9aisPhnx;S-zK!6 w'WB,YInv;oÉ` RՅWpsF\ 5bR_ zQ, [(%EWM»{iIP]4{(M)q:vIpV.6)$Zh/PƐ*鵇טeM .{x^O`EZzP(ZV'$Lq(^E˾{Z)CL;T"KP8V9ɻ0Wg{Ӓ1 mCGY.1#l0T?eEO\%[J?$1o8icF~xH8h Ɯ׃a&F;="@ 谛-U9޸JZJѩ"d{6MC oځC33-P7uxOū2Z#$U=h\&W0~%?l"f.q}X6N'lqsh.w"I}/*)ɦgWv*ڟdPOd[i4wT6t) *N?Vu]{Ěewgν׀S̬I5t*:jTj4qB }`3޶"՝I.,c"$}n)M-Q2%;:qXN ~/eSx} #hſv9ssgQ4qRY#C\ǪJzrM' \ Ѷ_9|EP/B.l2g*.TsAi~CD`X3jвO~TEʟa؃A,$`'s @uԚPyIwIO4CtlKPiyPQ{7 @;NAL3b~xW%if#?djEKnaC.DT1)MZjSю1*Ȉ_/Y+ (-)tS:jHUnmz9|]7>m_M6SlC1bb; Q>bF/m|j11 v D𜟯|y BCW7->"/OV<4]"wGp h~yIAjJLxxTa96[yDDmΆ! ; 31@tlSoYuISb>Bhu6T?D/LE=\h)^ FkDe zˡ.ɲ++Nqb=Q +{㕞JHvЇEDgq~ Mf 'zc78JwɌXGh2H_Y׬Jl/$J>o7 ^bY dB  : o+**PUDS8_Bny>KЄ9s~n!WWx>|䳼_u6ZJh2`ϐsN49$L'L#9H9Hy<mNϐ95 ƱQԟ/aUAPpbbxZ/1!ZB)XWG"xԕŷ.]OO:70k?|؍5K/ypd sRh3 QPoH1zHsҡTbYCDk/GŠz ,4r9gknUu8fdl I5FzE쿷i!̃;KE0ޠ$8Ec#2}XC*d|SidD%(C8NI?@Xn͞pW@ ڿFDr?oza.*օܗYh "wC9I|ʄA8bxR= Iʹxf( 2^AoÚ[,c fQon)5V5EEڑVaH$َSUpa܆*'Yxo?gr2ױf=3&Ѿڟv;N;Yskzf1~ާEKKˀ#$s/A !u#BnFI߈s#t'54O9CWO"Bt+aBQ/l. #N,Ҋ+~RwtK TBS=/QDPr!t#Z '-";a>)R EcŝfZ*za(8`R[#ԡ_0 x ڒ-Y-M&a( |*u04W D7.|2;*^qjΥ+~V}qw(2w377-ݣҔKCERD9uwaw%X֐wO+9T C ]yu@b'*XW }|}B ,9C!xɚ^ & S%8k.)f0=yċ`t ߩZ- ڃ!mn/ g!(c&4bI|oY;ZNvqbJ٩)ۄ?S6*|O~]<-"-vW g(0oFM: ~A_mN0[sm65Li =j(%s؃ %.﬈[MZԧv5ڹzVR.XdyjM8끂ia9p ^+yY|HNIj@ ^|xWpm n#pMnםL4"8 Ą +Ս;kr3\/t>D2r2I> J74FmǓ, o|s|a9dxI-E7SQLrWQs_,F ux=zGl$לg©q4 q[@+ް>0e\0$"';P mxW`;?e6j4VI6P$ -guX%1UxA0z:xZ5dţP QNZt5]}[y,t1]hc/sŝ[qʝ{RFur ? 숛2NiUlA6b]ޗxR3=O^BeAQ-?P 6?~5 :<97Fg4s+ᥥr9X$JxEz_|Ae&IyC.F&ۆme\\\NIWR- SWTԽp)s@MG>_Z\&4+QTbx[喯e@.;u:,iⶖ9ewɀMƧVZ]iJ\xw)d~[bɍ` uOq fYdqWf\RasO,Ʀwe=yRAAp ̷a8H:\B FE6X#"3i / h^gu;hA'7ԏɎZ8PzRiG`";f!UcD|]JQ5xwYsIv!v83pD7xϱ`q/1Ӡa55Do&dFJӄ{}a@:BEEwMZKe0IMfD\?:b U _<̪I#8jҹjlU|74PĘDY~XRcf1;ȿnE,']cYX;tkn:N0ƚtb8/UCҍ?`Pj$$=#sjИ1WoYsa~ \ O,~23Y7JϏ& ]sW0#W3g0tL;{6v1#ـhI'P E5Yq5YvK)2G;T,o(FO^Iy/XKtcb]~/  إYK\ z.`)/Boy䇺<|VSmݷkfxJvP%h.1MX3b12SꖿJT&yΔKl#^PIy|E쩯!Ϊ\Qe 'PRRٍ F 6/A{&w,.??Mi@ێO] /[N)2RQ\CbL #ڨ˴O{ CU&K@7E7>`Ծ.Wa%gTJטf`Q t d ΡYj!DHD)W3f OC4n/HiQ{OOQ9r3r$9QvͱeC=N+xPE>[]]|aكC<`6mXAgj-XV1^p^ EH鴋"8^7FeX97™8w|:Kg(cn5^kǂ;dcɇ4"D֫;\(0]_+0iĻ4ϔhC4/+ӏ5p aMf,"\"o93VJ2dgrJ߷}/vE;ùU)ܫ|, DT\"Va >+}W7Qi݃_vڱ@ 51kUq$pQDw(΄6wIѓI.(ǣ㳢r-azƒlZii|*KR;VHΞ>gH_jC`P#/wo*g0`̸|2|6%PԌpYyʒľZaYEތ*P~289S`\vnicٱ$eu٨8QBf4̎%]8 z\NoXkh`03:ۀn| ) p g m)|<PU}h+,GŹs 2 M3Z Fc}5f.rg!gdo~7E%=RPux" 䀎K-<_/nEQ&LI>_x^6(b\JS1;ŘG) W Ű剾$cGϴR>8\dd0Dw#]U^7Zy R`. lu$} #J3Mm+/S'v/@UˋG u?jtqn5zr:YyzJ E+<;A<}l`$!):kX4NJo>8W0l $BRnÄ.ߙY^76FswEads^Ӗʵ$m1٘߅C\M)+wTT⫃ =M ^9"+ެNXsn&r$_^qG#w#B5+, REkʰfP+c!MVLٺ §K#SWfJ 3+OXBɵ=~7~p'+ň~} l vNY(|/q6YAs['<8-5bS(*Ց3J %3Xn)7^ɏQBhrg[3j'JMZ.MG77FHQ RʤwMT rBP"9?oVA u+X7._Q{谖SVstRh`>G{WI]OpkZ0-3v?kOkRܛ@ΰ1ң`du*D+--ن<Up9FMq+{kVN˽oͨͯĶRYΞKjߔ8Bk /!1L4[GĖ1~EC,e\֧?5Uk/"}$^Z.zԴ NNrXcQ0>\g6يLŨVL8B7,dn 0ؠGlttb,>rj$qxcs𨆀vi6by ሧ!ɑ_2h uGW:JG"]dThgYH(kv'HN۷Vοꦪ*ς{190䥫IPKfyPsK?9/zYI1^vB6:]4`j6Y}|!=[]_ +㑙y#ZT ިm]r)<g|9;+38f퇚- zN]Gݑ Q}_7ذ$ȯHԌߌ޵_2ۜ}Fu#0UYXj&S`,#PN3Fl6c1ec{C< -'XB{V 'dk152Ue0R8 LbWTq5% Df"q %$G{S:CZQcYgz@y 5`α" nzj\w3"^; ׂ3뢡q72հNB2rfVxመ-$Tu~뾼g9*4 `U1~GuJkx ĩ,eCd;ےB;Ojhuq '"m %QBe ̏-) :5PvP(Kh2y\* :aq<1k18ͩgo6E\镄nc4dsbagږ$ym=.!lH&R{d=_ ./Lou3Epӧo*i^|l[ C Þ6;CAQ47`Mm ps>c:Ng]?ʐ:@P"†@">ȼ]Sγo̬sK[ L9o(Yq9%~д3Ĭy/ ˯xL Ø``Q<f3zw̾^]72lwJ/2KHwvL-dm[XļƶS08|<&,n0#|g;2*\ŏ5+5㶚$f3|s{fYV[)=zM^P~g ȰN_}'WZ8`!9{TLgY{f #p<稸:Z2H/X8KFMqQj13فРT5-r;BjD(jҔBSj]F+=[K^3翖[)Ѭ0<邉=gOaoz&{F&2V֝ZE$So!D1cO[Igr>8Ofw trZHWD{\5ue1!ie ڏEBè 2)~ MU Hõ?)D$圼>,VLO9 M9,(j}'q aFyw8Bn'# adiQVȿ9P2.X [NRi^>^2h`2O1GRa6,R#l#in4D]il"sd̒Ky܎[d$b`ICTήY'ǕsˎE(qb[4\EQT !ZI[nk`ي@H?^c\\=&󝤫+95ǚT%]%s-\=~PL2Lq]~2qư8tqGP~73@8 VVfml`XFX]#xC< z{FLD[+"Y&${-$Yѩ2UrSgz%p3qbXfZ78oR?S 'bcT(YS6+y V Aó!hSj&U=>x_Eq vvmfxO,_rsRΑiKy1]>goGA- r5^'^^ *diu0~,sB˒+=a>mPJ_c^fO!G:@I| V =`AbŃ@'e`J* GsMG/khY^:pC1Ņ]?F73 x )Ir!le9gP lP_F mtVQi|h1|x!^ N\L4񛘱43iYQ ΄/cRI C'_|\n5)jx&7S%#3P]b:5TGs3Wʳ Iw$[fu# .)dBӎq쎁/o֔bP8U%T{6l`=U{npxJtц:zL DY2*$2I7[`5%B4;kφoˆDƟ}ɲ'Ex_&ę%!N.8x7x݄5U%,?Oqꄇ8%9D/ܻI4#<(i &VV_`5:'}k/T5>a}ЈjAkQJ#{կnMʠO=ܟ8,Qic,f';( .݀0OʣjF' ;Ŋ^9UcC4H8w*_> 4'V-.̈́S3!È`1lkҸ`@U1 =ғ$g'j_B)xcM[5sT|V:?LϳpCٽsCƤE(.C2w>J%}?hQD&$pȣ նӃx8Abh9J(cJnҳOxhAj9g< q,:(Ђ'(f(ݻ?+w6=N GS", `d37Qǁ(s8 `WC w;iʄj$H[3X7,o#`o0,Y~VfX8Jdj ]Ox[fY'k qs=UFN]sk*Eh$uoqVmEt" G\&֣d.)+E*h wZ{._]I!Ucx)FUMBhі c9fs]zȌW-O#Gdqƞsk&nLƑѯ^7k=;S@7C|Jiݯw!(6J9l_|TWT d'trySbL4۳ִfX<YOsJ:׵_lMbtL6yZix FqԮJ-Qr_G r05жIB-:q)C3g}#ŭF9Yn${mX+=)C>g|#`Z Zq)T( &7\Mj,Q fBa6Y&hz uzZ\d 9tɥLk3}؋Jՠ?-DD$tvAm]D73Fb-WTEp==u\u݌|-# zrV&%מ%Z˅Y4%NJS)0;.4etA 7۰hqAu`0&G`ˣ p eIYT$z>UkOqc-sW_ƒJJ2 mZjLvzv%lwBrzuϷeE6vgزU ]0;0x,Ɔ tb`}-]6oB4MUUaǝo9q0+N`;39V gǣzFlN6u5-qvp0mdQ\r%i>pf*+.j}]N BM4Ra J4]&6YӸVB3GҚOjMϔ2aTܘNoeDCl\g:2ES/dh LEE8խ6FJD^-l6k E&nspи";e=~t=!K '决P_EST&r]Zdmbm80 NGmQ"4U5ڤhZL_A݊O]9=!cCY 7X4 -mJ'F}Q$\:Ly(_•oG:O^ ㋈q'yiCP9iȠH#s ڠو5M"ܟHQ O *|ݺUKCɬw -ffyz"żjXA[ٖ$XU+_)z!vnbN*ߒK#'~fcrcb݀a@/__eliܪNnFn[*߬LPw8!x4"s-W-C>P}!A i<`zTUX=f42cY!OYiK($C2GX'-?RgsswSY߫Sa= n!r*k­hn t?*SKqšiĺE x5/\ qq{")Sn%Dﲓu8u5E׀"QFi.yܔ8Cu-xա7*xa2y1NSsȇeYql]T1`IR_+nkWcS7;4bth4:c9QX3SՄ҂>yztAb0+6~GGiq#GpJf{ҐV{ghUWHO(P'߃Xe2!L`56\b Ǔ?)2<>>MPB"۾ );^<:wfpj"#.\$'#"0UD %TZV܊zmv0z ŀba4[: @T@{ \'J]@ KnP$NtzKs@^j+^s 9YӸś3ܴ4]~ÁGdsfwIb;wKR 3,amnNQ5_^iYEq #|zj/Ih`Sl1; Eglijw΄4&L"KY%<k,SO[ u|xfc\?QʁP? g d9џ&R 1RProˬenC-~wuYsD0`FpRq~yHf 234bOPΞ%BՃ淊I5^|ĸf@r,`Aʛ>29 ]Fr^|ʧa@͂U&nҜӭ;I>`sSRL vmMc^hՏ/)1˅q<"U?رؿgDpW/f/^|H&9/Wj#51(W?"j&ZnT<^Q;IZ W)sZ:o[b=l|W벓ua ;U 8ۇ6!@w&߷;CY<Mp%^߃0$`(v_r"n < csJ%r/ =՗01 X,>oKpmΒ(9рD.e-/Ʉsi(>;iW`'DskAdcCP2}WFsrG8odv1"XRb'tĪkdU#TS*b> iيy/|0wxfyBN/A 9wDx֎zs|J+P*iiȄ* QѿII }9{;T̀v xK+({(*S$U?Bz#o=Hf35G`ÂƆ<&mQ~<V0>W'uRJmhAd8Ә xF1Fp/r*plqE ntX=4n(^AaO&M6LA@G09ŒGn>1OS,;qޭ쟺Ϗ|^PSE"|=@t.&<Jftm'"Iɇp !C)mMʥo_[{60a1VCt$*BБpWF3 ?r'CRa@Dގ68]$r@n85 8i"Ul+k,GV{+ƻs2\C~x(]zReg&fYr͝Z.)$>l@2K=h\6Rr4ڙsC;r%3@x_x99Ygdr>g RCO!3h?s;ўpn™su;iqŻM=xS=N`\"#": _%R}-սL]nPA8֑5ɟ-'ԩ S[$%Qx7o JD]1?oTq]l?f)ee5>|6ЫCXض* UƯw. C}]L:~e֨AccHױoco17C=#.cOIQ y}aV#}ܳkJpY?th$y0RDM~_jHIW>A >_:z}॓01%,#tH7Ytܮ{Mȭpj\Y*O%mX'd%52.2HZ]:PVk HV| l~EZʁ{h+ѵ" R_14טMg÷}x,jvBLt4̅64j%uH~l~1LpkStrlbqT=l{ ;r&+eQ:*9/&jRX@= ݀47 ‰E`ñؕ4A#%ϟ4}XzMJc.GJxPd;YbV2M(C-xN|c'e~˯u=^eTERT(O TnLNJ8\\li:m4!2S)?¬RLnr)7~ q3 _2# 1~C\ RՈ  Zj$ו_7gAӥPg'Y~yY @,,B 8UU3k<\#iq*yнNu Z/AOb݂TJT1X/M,uz@DC)hw 1KN2{w*!YdR[{ )ST`ub+0J3Z 5$4[5C`.o_ښ$<(RHHK<@-R*p\_!tU7# LUې`w,׻1 (k_kȻ2u^Kv=TjoΗG=G'gONY)MўId}4'貥Lb & @Pd-9[)Z~k{٧K^/EgA&o\YHfAn?!,FJVAk2_]lvm *sͅij\k~IL \f8$' 4ĉLݿ5uzi(O-jS ×^SAl3HD7vl{(Uk/YD֨`h`e *ar>^ .mOΦkzA&9nAWh{z1 Z4bͫQb@AHA Sls۰R^N*_tRr|YOjpekN1<VDyqj !.k9%sL0Ӓ%WT"5kCˡCXF֑J0=N-< FheJ}x'kIjZMf~? `y6^9p|gG?ch^RrK l\LOKԺ{ +nH`wnbhA݃ZRג}9kj*D D7)1r פ58#nxȋ+jXsD}zzCHK@}?D%Tew,g5*s]b50kA۰L$8S45#j㑉ZT4 aʗA'7,nP}f]* ] 﫿kkթ{ѧUF7 |(`d645\ Bwۇ=^=3lZ@ Ew۝cbi\w{t9~!iigmnNbd8`EOM^wh`gS̫wԷ_e5@$4:7bb9 mT!t^9٠e5f,P__ A`9 NaHF8bڭ8k;PGBKRr{TXj\Bs\{@\?bSa^ΞCo8\ӡ|Q G,N,Gbo;7w6 W< 2WO48l' C1TaLUI5^3g`x''CfQ ޠlmpDhdvxew< }-d=Y ~iJovH=qyŶ]4Mhk_:?F`{({ރul+oi} !Jyze׺^Tn ! e'*rBv8bHj[6Iצ ;-(0ZR:RuJ,<KW!wY\mFz&Poma2~[Q-IxɌqK(qȭ0ӄ(=i3 uWRuL3 )9wk,>f>Nwd zu2Wt-C FnxȽHm: Y$oW2[k8%q:I~&[e<)'`22a!)5Wz, LTe !-tB"pސ)pqM;*FYa ۓ j-2Ih2e,,1C7jP C1(@1k1]x(}ަ1}æ$ׇ^]JsHǸHx͵bX>:OIظc!_Yu U϶yhn V!T3S.'3!t@| CK+պ_2q=^IM[ez iCb=ٴfVVW1eZո&#aиc2nu؊­*6STp4pU ę@Vb@ZgxN- y x#nXKV493B ܊i.$ 42N?r i΃ce-Fu Y2H ƿF!ao^:H+'~AŘ [\\~ 9 n(V_v1o_lWɓ=xQބBpx!G:+$ϋݦ֍K#vw@>* 31>=\9r\id,ND{#)Y4٪ GN31Š[qwYA{s:lL$fz[^S"L4G!39Jk+?"Kȵb;[!ߘbx 3epכ(h^S(8qzD 4m;=9>*Iو)i0A :n,,"Hu-C;j:Ga #oԏu?5c5G %=) %+6`c᱔,?oi~$۴ʁZc;%sk,8ir&[˱y 8b  a4l&Ejx'{mϨ_,: Q:O*돌LL~mhS7L2zuTωnBߺ]:r-sr`DKpθZPڶ"u02,^y "Ax#Ec` 4yO#Q ×k]?6#WNs~uIAPU";Ѣ2㔛q >RhF"TqVNUK8?{knK.GjKIk{q ]ńdgц @KQ>wHilX@(sTءsZs NANtTF{l\3oB'ũTgЗ=i@XB{Y뛲ZѕTZ%9P֬6}c[kP2člYٷASx8W "84Iwh};"B(7N>Ȩ%pUղPkCRgg/-hP r c^h }ϛ:o4Q\G8;+C &}Yfxj8f`m}sY5<4|Lq!f141f0-IŅ ܂j-*{ T838UJhwh59Ib^;lxǎ|oCGj@y1BGP+ԚgHńxcoKK.|洑h軫^lsALj!zJqu_@#:8zxyy5'L8 d/#4O "CڦDՇg[t6bm{#SSogڙzZs*~/ȥ߿- :0{gL`<*uEY1U,h=\+| MgsXS'LUN%pB!t3H)<#Hs(2?%VK]rnYIAZ/Sq  R ʩM>?}z#& G 7^lH9 !nے׫{,IflyCmjEe6 >|5Z7]Ibb"7tDw~an8$o>Tr:dgR0q,) |f=3yo0k*Rd %1 Fy8aM۵^kl 921U$bHfbfיyZ[xŁόS:~~]q#peqU{3\W5B(7㲴we-0> f3;M:z5B4롸Ikp rjuote.=T/f _^LIgD梻~#9b)tnslHgC"ӄ;q*. =Ŧb#œ&3 似WZM*w3[R -p=n/^ԷnWLVQz.uͿ3*dA汲>86?* rC|=;תNJ$^_~DDԊl6mA3j4gkK9rcO=98NAqۈ{_q#,;Fp,3 ,tO}^1T(;BcPݓ(uo8qJ<1 A}c"Le;.Z3nؔdž;*5N%;.uUބgHT v=!;fQLf|&kx$5KN,UDjoG3F2X`MyOq̄]XXSJ_yㄿ!'cF}^TJY8^ ʯ!?o^x:*-?bs;ͯ8D.[c>}yR„ldԳѐ**( , 2d\~V(E78^rRdxQ] p%{ςVE=l&ͷr\F*қa/8t%kYS( l;r`HKk_Ę!ԸU <1E 6k{6| !_+ReX Acz՟$׺H  x3%!Ow=Ы;OdO逺z"Qc _ h=#ɟb,)s90<ʋAĽ ohǁEYà5jOjr{uP^U據BTRJFeH[He@PW)mb(3e!)u.n 8X /WeYJE)8*ߛ'BaOѷ}G:bx\CIu@JAl~圐h03 3 #bbNq,Wv7)!%PjʔLM>QիsZ=+  (D@l߁΅" l9C/ k$W(@$k@!KV9fY9KO圽PU]u56VW &>̦]'SAk, {HVܿ56:鱀sji3\ R2hX9! b<6zз_ۋ"Z[؈m0˧ T 33t) }>`cq<#7^~],!@z6ݿltO11={! *ӟKxi#WE=FQEPA BcM/)QKVf^.>9_ۚuaT G CWaƿJ$nsV-#~~E>scQBtn 1̺Fޤy0F%($mQLVld#9u7=#eQ~V3m]cKPF"{ḿ;R_j,e_ 5-cqxIXir`xՖWzG6B?]'gkweZ-o"70iC0D%x Cœ1wxzفr{L#դKxrP\rѴC*5!ޤq| %9+ݰ ,_BbzͰ`̀-iǮ1yW\Dv?pS1s.YP,j6?#tOde}{%q~=ֽ e#=ҔP.W;<="9UJ;bzd*ixzk{ʅ톇~xY<`2boiᢡ\QuWGy _U?a7J/#=u-anOpþ 3Hhp^?,{AV~x.tob^\S,e ߔz+KFnz-=S iqbc1~Г'/T1 y pFUa 6Iʶ/X9 u)'<-\]Z)w $־My)TLGM۷'p59;kůN~ GWhnnϹSiZFY |]B狨Kj3?3sƛYNEi/s?5b/b9yEwewCH'@ϢE1q4aLנ({4XSŮ_O1>L_Tr|p%b/YW\X W,^,Rn8RMNJo\t .:@ؽ*7M0؞08z,0UO\ ;E[pd5"b$JgWRDb~Gq*WHLc]foټP-f1i ~bقCyS# ոȟ}R%FPwfP9ύy*YZ93va3Z˷(fV3v_RrN0Pq7 +u$6#y@B ]!Se n%%˙=`Iv{rˎtIrOH¸tp}s=gۚpCDc?60#%2ڬqHTKfqnVNq;soA9OWR#wJę=@gK[ҽH}їgHR4$ .K] #鋮.+?n"˄Ύ;˛ua~ey6/:϶To+kpi].`9^Z.lG݅(t塑w˝z6TE O@~y&"N˶Z]?ir,VOW|2q-긏fb;[87UO},A˭0CʪM"տtZFq~$Gs!u`vj`\HuFɒcKXAN:w!54f|7!´TjjkN]q2rk( ૜G#/Sza88;2E ]QdsF^ uUx>G+qժ ~MĔ$q豂{xMr:B[ gXTGe'nr9ɻ)"J0 "WIeHK^8 ^|"&q(jOU[v-/V.C)OU@᣻ <$0><giB ]:#Q^nqҙ[=9ZpVQ6\j~h=F{n>#]:cND8I~a- EvF^`u @0h& h:i۰.&$&v WaW᧕BT.j}ˆ;Md.D Úw{ۢD7~6cȊcX3+X) fD^R& Ruw<IôqMoM*~*{e JWOJ VSZ (VlǸcŚM_oM+?B,W{32 '-a!T1Ctu 7P)g]ž|~MJ`FXmL#f{Rv6NLlᅦ5E8lM/|V0Ѿ#f~)wЀ< }hNTp''z;,(ƂSFծ Ny$|Mi tỚ([ sr{VXv|t"Hq#rl k:y)QZ\/|"]-Mv ) ߿dl[(.پ ȦD: @ئ,?GT)o]QihP$#%;"x`Mdy; Av=E6%#UnL D۵ k[8a4ڤ3 90}]iA3y옚3UԜT-Ï]L%:hu݈/E6 &b0+ #"mT\ʏKxm"y+y^㯐^jsp~*|)?~P֌ Jr#S h7"OIPؑ`ָFhWt&uWG# ˌP7*6r;W#C&"m]:3HIlMw,+-\ЬoA*Ց0ٵ5a?ZWz;C30oK$|,ZRfZ J[ ɔdn ?JWIJ]"K&O",r@X9p{ ET;CzuX%sJZ%4wݒ$ֽrJN\ͿC*ʪ.Y$'?3[XDNP`Zv2#2MȆBsg7[ej:Aka1嫚2A@3r"Oj&$j8aa$ ́fJ) DhxRt#ENSy4e}w>5.L[o4Qj3;[1gH,%B?& `3i6 - RHT6VQ? s:dڰG:o$xٚ2{͢P=Pt<=oF3/H/-sYmCyhv2oc}m`Uwt FBBFv!Ɩ'bH_/\K =:KU9^ր!cpW:7B"EsZ='Wr@u0i U$Ki6el{mw38^UBK >@W0^S!<+DnOB Ox 'p>ϙhqx~:)7~pLDh<:m٥_}m]'$ X LID~Ά578ċj4nXYPs4nB<ߏ;C:l>SWZq9Ű<.h`[=.i0xUBmP&_BnZș2>&p!^4A\vtO[dtJ{jiϪtljܯwv$b.G+**+PTV}ks+ k5 n a*ui, 7v%[ʍ,`.6%98BOU&l-uj>?7O{Bl_<$N TŌܦ\XGGߔ'|9'ڮڑEbq(fQA~FQ᙮X6RvA>֗ F ƉZKMS|&.Bs5/d@C=X J#''%s lf48Sgh둰%+,l*-g~ل# KRA)(%t3mfMQ (,+LGuM 0쬇008Cfˀ9zlb.r㫊?eN' Q3'/\:(r3MsjF_A| cK/FƫQZE,T:^UvHa;7]zϋFDf&{"5fsw{~r;{N7gm ux"\:yDR)a/,3\6ң`ZflA >pr_2lD=Pa^񖿖؜I7*6|CVǾ3CT$-,ٕЌ밸VqZ/4ŻiߨǴ5Ja$>,PW!pȸT ,a N>L+AAyZPiIubWewιvu{'^3ނ7o~NyA ";#u%Nm[FpJBJN@k0$UnpH3b#;1'C+U|?H#tI]Oዳdsupo~E<{\[B|F ,G,aװ5'GcI_ ㇓.?&ƳV3aa th AA5+ٵa`n V%v4U B|"oMxN\p1$5U[>QVfuSᴶxL;+c\c R!hnt'L8L3ڕF衚[$ulUq8#OVWM<ScX\10ބej2m dbhUK>!p/NkB+8IæyD|%0יxfpE;Fr9gyVˮZdE)2D9L`=J@{L( οHufBg3U^ǩ 8B/@dɕa}5' z lGXާC޳T-}KժG5K.~9đe|z4g+F[y(#|Y>3~)NUw'*3fzvdiˊ8k1\!`4' ~DD2VBOrʂKe߻=0fttS&ހxk|j՜] z)* Hxz8dXͧ)t0Ĕ%o+w*`ö[ΞZ,f)D! 1( (5 AnTJhQpa[3^2(kAVxR]cJP@>]>~Ϫ S.$cf`=Rq;iI{MS`%7/͍p 'U͂X ᕄ;z>f8Uޖ x%WU G;/E  ݨ2(f F{cZr#fx-t&ak-5}e)mmȫ,N99*`n͒@93nrˆjy4^Qo/@̟uXCiRԪO/T!wFJ{h7_p/0b Ge[6W|A}FSP\T`\cAɣ'uZl{؅Ա˷kr~If?{ DKɞ|Vp&D'*Ubӭ,3y0ԘY^о99 V`\='wbS.BX8; ri1ҪC]QFt_zsxSms߭)ɡ_Կ* MN˺ l@Ha?p89xc}މDOY#5{'IB/fGUmD@P3w8cg RAd/ 3P愭12D}/um9*OIy!mλ$ͻd:` '@K?"ؔ5S'&5pM|J )>`b0'lrƸstxr>=U[ 6c'Cno=9t;{fFr0ف?@*X\_eӨC&;S2ĭ ѺO͓sخ-\)P>]W{Y$Hp쟉2`GU֋jub(fPTڿVެઐz+T}{tҥ!iE7p)"& Ffâ-;uqeyPw֢m#`0L Բ_%4MZﱓhJ 5Ia$ yUR_Λ-6dAhj}ڎop4g݉E{'eaCU[ɸչ64D$2tKQG (:0Y7ư|gk_u tr$nѾ(><Ê71‘\vb&F̪U2"kiSlSڬ7(Vw4'h:6srty1λ#Mtn+ d,v/z 2nLaVԂ+GuR1\ Non<_A!DS Fmx?(LE/`@ʽM9Eva$&X)']S( YnTsՆ,{@ Wܸo6Cn*#KϪ ءoíJ NԢൺ4FjPOr/gw7-Qy!Hֻ;(9^=3r:pcUϛ "rCl'oڮu]vMIUKQ[LaFU#c^vɀ#rJr}{6LvפF~]&p*1l*A8dh[F2Zx| O.I Wog"ldPd*CY(l2ʗ JHp\v.Բ6g2:}P;֟6(c 60^8vCLz>Ւı8vazΆ sg{צ<'r"J!b??So<ܣ[D!pffؼ#=.J8CW>BIe!Iqa=H=Sl['{ϕw7?-x(*؏]Nǩ`;y aeS@ԤY2#ԮG;WuE X\e8cU2ےOz3&9_)gUɤ*e9Oy02̀l-` 3YH m`l 1w2I։Ker';afB`HQ?4JrQ])DM{;h4*v WoUX3@qtKQ_K\H%~Tfy8[pzՎ_gO%-5RS8?_['rن J/9f]KwEaΰlvPq~b' "_@U8IkvMxx+[ =x=N;m*Hn5 u,PL!Aؽ.G.kx؞#JչV}r7Ljj)_=4R)"eH{yQ F o8⁚A)>61~ӥě\l,m)~tBPB:N_X7Y $bVOZ8Q7:#qqr.Ә83ב>ju(c!IQϙN: '@4vpTY3 ߀x {(~^;Bvό 0>~5&ZJt&Q>)yCH lu<\RH/>88oo/_}d&Aca0m˻$ݞYAVAHo0BxXk# #j8[lR9^FI*ȃmڭҥR3=>nw>>@Cz4/`L6-&#oE~F Ts4k6ysC|:|~[c^ ] V(%60騧pm6Ƞ悯 aeV(>1&Tq;zwmgoI4]ÔZ.x_ =VSzTdD;ttIʃWU3j~rx aڙ4W \/{#G3@jK I0yVGleH=Iw^40HdF'L]k4=9 &dE_<˰R\sTDIYfwqK*t"덟"ǨYKmw9 -8q rOJW-դA>~FGe 958;!cm%te- hdHp(@սk+C!Wݨ;vjπCIA4/87Pa;mfᐭA #Q"e091,u:Eʁ Ww UY `PyCuiDfƦZJ5N1]E+tSWplODTX`\+ 1gX"¨ ʹaP(^a =yBӊ2s\|d.'޸~҈z~=_ 5mqkO(U4)T)E2y>^0MBH8yl i{D<6WSh- =姙p6daDeb (i3]bS/ k:H%kCv?MF:djHLg6?PFe5Nr_f޵, N j!͡?Bݭ@%;Kfw7#J}ÚON͋5=u!kI9c+^tݥReFXŊZHD@fQpi-Зy]cn&aWIпs@+L[y]~b!q٤D}q&MQl6,MbzM8u ΀,y{gWz`t{_S0he7m?,5KwmYq‘W;.7=77ŊCowhpX u6t־&B&`WL=v?b>LQM>l~1FD!suClzJַ# QN|]Gqw(䆤$pQfʽK>o<{*QpYTպ9ĈBzVsN6ت;UQz^)~s6qs' qK:Zyh*>*}rZֹVrQn#kC߅Av~/ٻL9FhQ$TmX? ]p{%itEt oC&1 |pӫLM _c_J<0Oi&έUHFdJ_|wW?=1Q0Lvc5Dʮ)ͤA܏ ^i {RLD2ǰJ*&ƾ͕ǎz]rkrpN< ژ&|1njhÆFBFcu+L6H/#ʥ`4WPޞ:nY2]:E3o%S:[ ]!qۍ%Oϭ}%2Oo}m$<鄜>HɌޓ]V=ȷqYh#Ns l[Z8ԔRlBP2{ajZ BTyFkpQD$b8cf65|څ1!g>>z?z)[(6qZik-WĿDz2%%sie0\{MKA޶ܹ=$ƻU[f:L!!j;*l 7w. uEDON(} iƻ_Y$%w ltHœ7$/m^/{Ȓ@_'1&Gb`(6.IM_#\u ;ŠgLoJƾ8WvX!|*kp[D˱ >0[ RB?,z\MZ8O&Y+U_ZaZ_ud>$ ͚]1/v%!5x)ZZ?\~m|ᇅٔ$Pi{$0~EFծeH&{U4+H1ֵDV)#Y^93 .ܿ蠼ф^q>ciT啓9hde+EbnvyhZ69AqCKwG}}N33g'؎<O^6Au%8V[36:nFk #Pi CxFQȍ|heq1F6tkGG?eЀ*g#h0'ohK|$|?泎]k.1jQꇮu Aaz|pEXz^3?7 Yr~knf槊$=pVA;YDw1RW{).IZv 2l1 <ƕpdPqK=?GQSQ^$EwK ې!̅o34#K#AWMLOPջq5w4fT&H`iUF%1H?72T4d*L6FMO̷38CY/~Z._u$  ?7 Xo$誎%"GEAU KT#W`a2c=:ѵ=t€u-9f UTTx1YPofT "򈛪a+!5~^YU=Q-5V`Ӗitg,xs̆ƿiAGa*=}hzs |́Y241smG߾!dqǥY"ōus\lP8I>MXɨB65y﫭3ژnS!2IdXOYzˎ^#u@ƳXo$@Im ܰb*sXz,ɴrMB(ٕXUZn5Ԯ!F뮃 J-˩ ֽAO*VN{5m jVnl}e.&L>5%(il k|<_*~ "п&YW/^1dV{o70eR0ań"D3 F 0eJ:ithIh}qT^$*Sg{gKwާLGV`nrjVn}&~ZyI]yDZa>$ʗ>۲Zw"IױJ0i߭߭Dp\) G:g˝O,/΁qX`YBT Ԕ~az>)3gʿ9 sk'#lȺխ=ˣM>ǛxX#pUg&*ygxnP!gai0̌ubC[6¸J94qYhgqqpy*rЮ5{<Џe:2wdQCrhRrWY_YC]QeYr͵)a'[HMz kPD0d1F3.&Ia}i~5yLQm*ʜrۘ*( ۑs=zki1'We>ϑEӄ6.rGC[(9gb/[1ip Hb[\&KE@W"9ɼnV]ZڇfWJ,rMChm2_1BD<o8ψtv V]yrn)L<=fH{bo6p>9-"#e24:O1ўOH(yU$R\-![|Vp2hP!':*!I"Ę>;Z)G} @H6늣aUSaj 7\5).pUCRb fT qy{7DDR<-vC6.Ԅvq_ I( ^Y1J&7tګy7ӧ@뻖?ڕs,mhOXv L3C,ԑ'ءb hMVd/`uY¬uƝ"YtŁȘيek*:?9ן17b#*C,/FaAK敮7XnVI7{NNV as?-5gvAi&gVgɻaB{ l/[X&d2v\̞ѝ֑밇j|> (οs/\˙(Ttj([8`A=tS@/\5m>SgEOd1վցT=me6r)=IֵHo;_мMhԼ&-&`7B9i5zYegI&0n9$h #tԑ.i¢.B4 o۹ _4;Y5jY\|}۾9WX:ZI|ԗE.`9xTuX's*B kh0;OܛvwhI 50 aޘO@jћX171@$"g;|aLn"/f Oaes2G7=@VF`=\c91dIɼmcq)9Sea&G-K2r Q/j\)CVEHRzv'$g[b,2K1$Yj#wTGym{uO(/0qflu3hxNBy8Y@mz_*L)2dʷ<0 Rǝyv ?1Qwɝ^y5b3o1|Sk &sP!>3 bMw` 䧻͇GpcIks;s9DKM(##bI&q4_BI6lU%j[^sUhaLGZY2/P?ڏ#'#sg`3H|!-.@I,K1d"2$  F ̹ $.Įx→jddVrP (ME޷#A 1F[kak?zc78hHbcJ\PRrF&DSvƪ_?˨` d( J }gKb̍!ġeɬuۭy ~@I.xrT6vX2&GdhmWX'_y BV]~SI QӾ5ƠL_US \y@E$ik_|,FˬA>@؍txoz?ĜL/y81=/nK U} [QM73 /[zgpk4EbE2F\xzi$y(@ҽ&E`dH01P>eؙ5. J9<$|ܯarKqM%&m2ͥ(gy?qlhv$fvv:GqUYz-:&@.OHZ2yp0D8s]LI*/Inl͸jם-/ܨ4A61 H#~=ZOK lЫ@ -$mЫ@"[!uڒ]46uW϶3fk w7F8^r /OfHwWW? YɣoJDE )w+*v O e9o7U grH' ky/I])3e{ &P9_b8~~"yL!z9g5B6a:2R@`D{5ǁe^Hq9?2(+b2ݖߑ1ս X9Ā;kMv6W olVYƄZ" ˀs`щϲ2")Z0D,Z*'÷FL=V8'̤.amao lxEOZ0<$&Şҋߒ9} 䁑wNV@g%{pxYi+LRAR} 2inlJ>X *k`j;YS\kIXTqұnMt5rዹl*.\*cfA'fPqwҔ>x\+7(OoͯLB0X1?f%pYG|>f1ׂUfϤ5. 2]|w #c0KUZq%2^c{t'$+m IlM~UG}RQ\UǸG-5ƲB*#~`?זRbb]㤅L=*渼h! j%10>F0}R9*HsI治\VL&v`2nI GϏ5So!e:  э Lt MeMީE5DV=}GUwMpcjPKŞ~ %,\\ UʛdXיB Z;4@$3bͧ+D&s▣u^؄i G~\*sšo6ߞ!L6% X}TY|]SA2'YN~(J(;ŰKGv2 b2c%2wnɝɈ8%C:@KUAWA"o'D C\6}gCN(!҉ $*z"S,lr`ʷ`dᄗ 2h}I҅Hy@Cb|RQ]%yzȼw[#nP?|#f_^VYᨷ=1H gn*.l9#-16H i\{`p ZBv5/Q^9'#4˒@`Ca(|"/&e 쳡im2KXJRT3Cy|)>P)oo¡,Roof*Lt9E~{fzĘ곀>Qj%i"M,M8#ZfrLCc惞Cu=Q;'A#s5װE0󑀊IGyUX| Mskmp۳&%`fucCd? ؉M~Q d㘘4,\L!Mcـ"+j̄2*Y"ZM=c.pXmMXS=1kTX,i >g^&G,Jx3q΢Oy+E7}"@ktB &e8=Lx=4SiQ.jzlu&cOn0yo)7Cm5~f\[A9ZL">~}GíZSV1?kYR.2p27-y1>{ʤCG։ՀHh=. '%Éd)4?[JN19O}:̙O!UNl]\b9šbwy;|h1 xĽ*TOюDžH/(Q9]z} B pkwS*I;0y|9.ɏiQnV6PkU@ui4nJYѷp,TҶwSXKuSlw=ox;.iuw Qu⾻[-zQgrDoԖ&pڊj* ^(FxRv[}CX]ZQ6e(umJC=3!wyCqd1eum!ڭ* B@&+8=XڮVBj]*Zk2o>A`rīD%”e2d^T01fL^IDO`لOɘex_Ɋ-e0ZTeV=,|c$g|H,W;rרR()j{cD?1RsvJ ea:h.eM=zaҀ&SWZXqoo8Q42G5tH#ύ@P%_ 9cc)*z YU[M@lE,r'v㣝)Sճl1`)m`t}ޘD7j5?Z:7@ kAw[=/#.$4H1ۄn˛Gq ]j)Iq[+9 >6&Iy YLʢd3! l;q]wWhmmxPKD;tZJEH [j˥MN{xQR8bZ k|P9GcbRCEC9? LNgQ|03Xwos?_y tqOngŷ^ӷ{]"%Pu'ͩHլc>ސ҈gT cdDru]N 5V:j?l v?c1zϤ`x&M2(F944okBi 4I9Jg %2, t0NY#My D=_?7+.>&A\7W5K].6?Ws,Ҝ$0Iǚ˷J0.XƗ%;6Hoȯ<Ж5@sBȗΥL8UU8]&0#MC@(s=2~2VooU7#m͖VS WYF!y-Yi۴#GǞ פ%]!kl-0) rGX?̿htʀTw<)u9SjL*Wi#5|s@t[4"#ހ/j|js"\SuHxU"kq8[= lxHN@rjn`UN૙ ۗE60J|TCȅ SWPFl57c )KEce7*9^ hB~A4 6i}"|1  [AXBg Zsw% 6̟UÖFǵ9NB9%ǧm {1c 9g~aǮΓm đrj$t(XgXJRl C{cQ?鷄+#E?'}qD)ph[38H,&X8S!?8ӡ8rKH?u1]fbp X(݁EH>qvWBuaa]@SeJ^f#h8 6 ! fwQ/G4e;*o3NcߓӜd::[mq< *l ҥk@cNwQ/ |<4-fGSG_\h}'lr,ĿYzf.aAV;2HՉAV2qph㪄-Oa`HsjND a݋\2:etJRB:)a~9ivUJHrjFS腹 r>phy #KQ4!* e}H7<D6Q hyfL~CVP{Y2Y2[X `A雱"7 tJ/EG46Q\'p .Wm!vĕ_ЇBc4 d =M׳ Ƕ#=(lCjP EN}(-po`/"e"LX4?h.eF'SGzfoE /h/6?olT5!3f:haʹ?mt 3ņt HQEFfU1KI ? ':p̔F'2RթK{G0r uЮbM:\6G) d@VÁٽjL$uCLmRe#QV:dj[̡">5Y>N壢 hO!.hs_ "HU&+T"]-_ CgܴT35OyɄmubz Z7saIP<A{ \r4 ΰ#Z ǩgM7Y$壢؅ Ա}-?6^2b쀢>#HqUG !j ¸s95Ζe}{#gJ2l'pzrUsND5vs".Ήc8`T {]{&yf-hZaoq wʊuȫ/HynP< I lt VCb^#zp~Zon80z+,{@$aHASpgH־b#!|ZP'/A%cy<bkܪ D4Ť}is6O4T!}eߪXF4X vȧ Ij=c*joUK:-e>YD$H1.rJXni̲ \VusC+|Į-(G<:;v=.f3_{~ E)zȶ?:l ro&k̚PGdS-4\[L1]֦iUrOm~7{Tc lZXR>Z֕p7RxTgef7YʰaLIÂ-IY5&8PCRÇ,b 0t; om@kn4RUP4A&&'r*8QB$ps&xPM Nƴ%}ϿȳZ)WmlZxje&ĝu ҎdBctN"V%aMCw1Uٽf(cEN WLXj'Y(B83W!=Ǩϗ,ڰ+(R/ 'y_ʯUK!,)ݠ K ?'?Gb VP, ہCe Vv 81uռnXm1䈶^~A(1PU=caB+3o+N of`$.z@~<;̀"3D:$_)Oeփ|s AP OMlw*mNGE2<3{X4xMxB8(:(뇽KUc_\$0f=ׂ[b90C cbŗZX>Pp͂B(Ly=-țSꩮDc%p?Kɭ4GiG >mh9 l k o\e|@K`AʿI,;>窱u;&ևSPdhc݅aœ̄DGPNt{x6$X=#څ`" :ĎQ*%9@3V+a~pDLu*V -|u'MJ%6뭛7'A <+] IuCUuOr-Tq͵U *9 鿽=S]-]U22yQ]OK<(D^s- [OȝߤI9u벺4}e_o!r}": rþh Y%SZd0i ˹aʒŷ2(׬ܴڂɑέ&Dϸg>ӦBbѫO;71OfoTI7g>Ֆ\f  %F~)TYӖ&X08f 2 `"1gԼ\n;p+(ɽn|!S_\xnjxgs_.sIdYKqlJ ʊo$j/k#c#ޫi9P""4J0 T!o|[|ה^0A{bWJǨ#$͘2 QCXW$KvbW6hj<ۏaCID1hl>V ΎGꦰW F'K-s=͜J:rCVEr{lzKXnDgm=̗JQdFN!GukHA0dMQH?~'A!/,dq#VQjӷ\C|.Duwj>1]Hb[E]xU$ψelނjnDZno\JXԊa0?d)@Pv~6H&{CŅSy lvafo`g)$kl~kK4& XؽoK:`hY"* 9dlx(uKGtyDg/`nO|-V2{[oYtYTL&E壍m` 㶍HhX>˹;&c_"3URFmv0ǿ*#艵އ)BsroH3ПT=DM02 7Rmɡݦ]蚼UfI=~ s%Rhx^C_oW*QvI7tء_CFdM@73`YB2.ѡS; WH,vΩ-V; 5\emFיU~f{9a KÅx:H3ZȆ*昭MB|'WHˁN(>}rS5j$ Xึ07;EˀP\򈆠i&<UOE—yG d^.2lgO1t젳%z"b2\݃`=+FB*5.-l+H [Y iȝ!8,7eRj <:oֱ]RH)<͐D7[DW$GP YŠ ڒ!m:exQE]t c\4'?Ϣ|7Rͭzw{s}qP< Pm.$P%Pθyn'J̜UWIT_n.Ȼot[ @fΔМ7dF?9,_^M t6zg/ֽ~4eT)WcBydT U'tUʸZnMF(iJo{|bik_-@^^;~`F.| pȪ#`~-.8n<їҨ6\4B]ך3-QHZ:U(_WMF)'ӂ4 ր!#h!o3ࡐ a{Z-{̲D'f[LTXbi| Ypve g'C8\s X$`ʿ xxTvj?0ְ}BqQ<'9Ht5xO]2@nx-RQWGbrdU7(7ڭ S[fL:[}ld6UjS=&3|%o_~ʛf)d ]y+b#lj-œۢևfp;s8st;:g.-2Q'٨}vw%NNZ,Cֻ<.)&|=`MfHtrrЯRGV+]#QY!t8RD(_YuVVo_tսX㪒̞?|G֟'W>U0U ϥaHxDd6͚,I)JA|}iSWPΖ*s OB5=UEPH<[b ].[oP.r}z>p'y@{RK ϷqU T=nt^8o29^;&gjv0$Q1HU!\PI;Ƥ1bz\Nqj!'czvC*JW_T[TC\Uq.B)6j~w2t5*-RH>L՘+bwjR+A 9q-Q c"uĚ^72lJڟsyG$k,)=sr /3F'`2N*xQHd8 PCYb,C0#x@2 Uj4 F fgl_A~@Z\tHeA3fk9BdK5̮W|^5GLRW9RYdt3r)Ix[QUk-@eh ؉i %By?g4Pdc_j*3d><7(oD,6PĤOV:{p+Ck3<" #K&,Fx3?]RD!Bt J)/*,agO5vpFOjY@lm0'CD9*8Hm:#U9b*+;_E 8(.AQe6CBǒ$vL }Bmj@5cPS Lcww7wlfwObGlz>ԀSJ ) Wc0 ;?̕drwIjΎy@@DF4}`߫ K( _{)X*;'A!]J[U|JQ~^[^9UC!ձƁPNkq\G<2{ŎZh"o ?J:|'Oտ )pD,}7YC*EiC<Į[<7ͶΑ.PSG%3Wk[xb*1ğ"\Pp͘2JHC"%fb-SʬVJK+,Ru#q% % -_3Aǡ1Iәe-@I)LR&[1C--]]X$6= tÃ'I:J u7#<԰GwƸu/j2 }+V3s;KkS}rGdw'XW"4Wnae |*P++L7bw9Kk0>z+~dHv^2L6(Y%NbYH~Cqn#_ӛa鐚gáU`&-CCo2cӇYpt\Pl obɐ~dz>w  |:cQx|QMF5OG Eno):jh$i#9g}DZi=~l S.oB ?"ߗ6r?d%?=M88`V*Q2YXn !b4vh2ZR?gH##8\3'ۅx tf $?|dmk\ 9|NqKm6u93zR{o-yM& 0Yy;9.h2&.wLP>76!'*|J% F\RteS{D-JfS@xwB+UCEl]^ u hj/RQ̉Q}Q z^wu{K|T 5'n.-oUgr$KgnO"K|.;vkx~݂ "DjO'NRF)r6 +GU{DF~7תQt5 n_7TYA`"4lNVMyZ29ĥXJ^4 l?^Q}v BpfӪf扯Ȇ+_uFL |GzSLs,,HK7k%!nuޯ 4]\! ,\!6!&Z~|OFNrwUjc씪ԡ*u 3:EgKپVnY+zI$8eԧԦjYO?K۳0[ Ě,'W 6Zd-h]@.ZL]H+d?S8'=׿pUE3ˆlέ9@Ω(/ ݎ+V!=C"GèKpa7.~DPfnJ m8=Shq~q,E}^kɣ9DsvuA(IG? i&:5an(Q 4@?a(s+p'>W4e9A3򉰿c*rg}  h;}ՄÆ1Wpw51 S_{7g>B0J&NAz.Nr1\=xrXu^/|[kDG]4 Bu9LEFRD GBNtW'-ecaE_'qAu1C,2I ($UL8$B&i|' 8 pbYgc2o*uc|gݨ:vxIYi{ܨeS3J:鿑a, )x1Ǫ o7gbۄE; S<}w&/Z4%zK1? j*@m5"6QoH'hoT,! ԳY$o(dr*NΎ r^E'7Ek/8/d djeDGSc¥Yw (!=2^ܮb(=V}{єcX `E CYZS6'w1T%E"4JTC4by,g,oz;| o[NH\D rM3aaKV06ިnFS7Y_lFIɔ[5B]\ŧ}z{-4ֿ#9 Kg ,0(?7gߡW1,a3])..#$5z6Vʟw " az/ m׷y&Nj:9y4RjRWfC)ѠiuY!gV1I22JhRnXoG4џt~J{ {ZQpRQ^XR\ O2t&;']pqi[vUtܗ3;wM梣mm~aʇ&jLv7SuT>pl8_Q:([ d% J5N옹ID~w荷;U)OLVDZ[xSSMgOv-JY!7O*DZIhnS՟Jx_va=_+l/Fy̯m68;/CsZ a/N$S]( /~$L%`wBxrrU 8R1J5x8`Jz “]ZϧHs) p[Ac2zɼj)zk_Gg s ,Վ`t<$&Rڐ ME^4d%9,c~ dNEٿ=+UV-=#p"vb'8sK+\р"ң8;1jIn_zE@jg$A'@-KIT|tC-~SB/6qjjטELH f628UzwQB}CUJX& %4ǚgPl 9&˾u}sL_i;% },T|(SӼ+{>ޔUf8xWk v %a8b=|V4`-(nMGrQux&j `kečv#غPV1>y`O~mM*w4įGq*vmu,E4D<}O4Q-kh"L_= uJGDqi=o{>əZ}A*x!]Q}, A13unk}Ce)WP&L0МW]#!^/H,aO :U7e1ڠNrBjܴoܥ#[5~(& W#*Kab)_9P09u-UpeL5W^pMPOߤ !=<I jIHDT1?zkúÜS/-tg%mo9O!Uw[ p  5;7fIZrڈ`& yfWflkz6W wIo܂ t4˕G1{|-t l\ @9-UiX_]aWh;ÊMⓕ*sSz6¦j< t|!N`\вmuE! iC@Z@CFO# Zԩ1I^8 1[op<ȓL9y 4㿌i7o1$y ~f;nߩRѢ/ cw~1z!HYaOJqvk |^]{eB1/$'J3 hY2'fY.:{>4aLaň'n6PM6sCH2nR|g'6]GJFU ?4oNz4 {C2Ѭ;~ֳuVDNi!3\lmN3aHӞO8ѹBg{C4U}ԁmP5Z{BABh%A ѝGVbz*85Z‹tk}ҴQ䔾[jSQmiTi脹9i'jEL؉}[KYZKI(޶y`530Bęn H F{[[zIw*_i&^JLgOtW<ڛ?B 3ʰ͊4[CRIK/"ly^3vH'e[k$8֑N0쾝=>/ZjԺ&e6>yL f3Ƨ9?JU@N54n޹ "?: 7R4WbH8w'* j!L%)̳+\d.$W~3@utkӳPV6=T>X ,J#Y/ɮڥS*i j5Lb  ;sL7C%j/| /N km JIlDIq@Z&/&j`㡓_fd=`՞>~dV\J^ۨnl44fՕ5%t-6Ȑ wcEkɹjmhy+E1qϨ-{9xbkE7p}&1!n$siɮ{YCcFwDt7@ $(8n4$dI#(5b;m\gLN2Z~K2v<)E<3,M={=ѹ K?gwz5qh~ǫv~,Q #j$% G'#ִ\it47@ڱaƳBe[kJ|2'|Ǖ;|n/NޔOw-hDv9#{Сrn:šY 2sKtj/APA6aQ26{MGyLE/ .6nG]!s -s@U'q`ƽxEg ,׳悴rk@QĠb.=Mx A_j.i2`AߡhfQ>);/\Dqmh7p)B̒e0sWI:88Ի4|(0Vi= U+vͣP"UWnț,]A˓*Fed ")tﲾ5wRYu]|O?/0o0Lۂ+RHpWiz:!RK4D}iC >R%A@3C볿<ȸKGۗv֨{5Zpk=<ϥ|{tȓשϋzyc$%ٝ{M[Z.\x`EAL4z+8֧n3EeP}8bH,{sŵ]^Ї"[)|4 lӺiN.G@^/* 6XY99gi m@u+)+}M7vHJm בoܲk'32ToA-)=b s p|{߹ / PMۺ=1XOim.Ί7LI "8qdAN]{DTu$Ųq_ IyugGQ@ldYVpj#dzvӜ2/c_;IR&#-cnYk&b#YNqqvH#gMaO:&>OfZ$z,*5;R&7+ joOg5sTb]VZ*-nr aFywi[w ǂ̒DMɸ#"Sn@1$}RKiJJheiRNWyZ7-Y?D0 {!,ʲ|02%2Ϟ|E2dͬUI>sd(TnssΟV\sfD]E%ҋ\ "a˴jꦛd߇[@D. _HCMIĿׄk2|og&Bcr8 ҧ>+G{Ň}Z mob ejqfQ''#Fa&_bdYQa.E}sR"L VIwgx`]P){nQ}9vFQ'd2#FAoLc^.V~6y`[(ڡSƈL g%8rKA("Zz rLOZ  żA?y`d6^Ƃh3-ij[yR9.~pM/SUK|`7ݾ a[ЀR2a$0g`f/$Xщ蕋t^֩חM+fQq!;bZ0%D#1y؜( H˨KQ dEшa'Yf\ּR tH,l}1Y{rOvS_w u`6b ),=>fdv}hBX sk9" A& %h@sV:+8w{apޡJd+XCNYYdt\jGG)<ܜ =}(6.!mm;|_3hl)X+.74 ͥ) ?5&`-T%ji + +bzO0'Uf= P:* ΰ稦ws{p+y``Og(Kfga4WRld羻FUs@)9~XHL vBiADK1gJ bB<sYץBEe>u"7v/[D $}؞]FO?]>0EY+ ȥZVЛ~VIjM鷁w/:4+hD'ٟ-*Hd:'(@X) o 'A¡3Bc`KN%[gh4q1[uU@ƀX+d^XeC=V5 +Ib. A 1oLMܶu|_UB9y׸}H{?4^NwjuY~K:Z#C/rvCjq+3WL=$I¥L z?.+lf9##zVO6U OnЙSIG|z`5xp^P"~0 K4':Aevʢ2 2?=ƟNXp%–YU[S\Gv rE|&2Rœs.桛"s5Bϱ ?NM86ku*V'΁ |~FtU`PU^#X4$˛<-r~ӓrK86b#IYM_.xwy5Uh5N^".^mU"[A 0{75\o\<͵CCmY n6Yy,iQ\LeĈDDeci*;ZʺPQ9QЏӺE&S Ay`D??J5vMk4O]_`\yf <>XȢgE(w g4`YDUVZ|V|@/8|SCuȴ9Opd5(.D-͇hs+_I5R gLpBc˄Z'r[kX;dQ8#]{CQV·@\9|$zԁ͐Wuf4^\*+}ѫfޙ<~c(ai2FP,-]-5ҊBˍ.p*<w+6B֨\6QK(gd..7$E)3CZk} |}țO.J# nE bd5W3EJ_ѫ[t[#1_d^'ƻ&Y\'l;/I쪂*q,BxtBi_a Y}QS.y'lꉾQ?5dh뛳EPѾVASJ\AcP6~ŀ)“I_% AһQCK|kN%[Iۯnh(&Vw6ӑ PH"?ʼoӋ\ZXcQV`zcmoKx8xiV#I52k43:cN qW:T 5 V]Ta>kQK̋Zt;Όў&LԗsB|\Ƅh&a1hY$Jm"d[&Vu)Kh79M%z&B8n3 x7ξj=DqԂHѭ=FAP>ab6=_/{aJsiڻ-E if8\ '8kcu]!AR-_AAUץӌ)cL>K6$|9 6JFzڟJq=zn9+H8P}yd:@uul+ˁ>ʺ|B)vҋ s)VβJ-Gg͗gy<-7hềL|~[IEшk1AMHռ L^7}w)u-CY~k%2[(ޅMD ᙙa^X~, ָHLlB zbő\p?QseM9|^}pKeCZ)f$b1zZ Y Ҳ!"I96m zqUHB,puDZp̞M׳I 1#(j;A葻ƍz$_Mfr}fkB:_%H[J@$ăBtAYm˺"sVPOD62DŽn9DG5]+Ӧ@ Bzv +”s rd^Kg2?W~" z{[iɮp1K+1#lЫJXeDYReP7NA6B2գO$m:< Y3V܃2pHzJL̎ -z_2s1jPJ m>#G1baarNWbw¡Qq. ,tT(5p\Z A=&TlJhL_ꝁ#D>ZT:]*pPټf41#dTb6gPs:+ fj4A^m&(,!-̓_l=ô J/;! s|˘02 /q@_T‹\OwV_, :qC {,/j 3saĸwhXx~h]q<2~2؅8y2.!"Wv5: ~ʯ-G8TtXk{ ۾{SkSWaHYPhpS8Y0%H;(|yU2m"u+JJ,KSSZVJ(}~(nz{עћ+Uur1L09"cqC9-(MÜHPX$7znlrI Ib^jC*tqV};ƪÃ?H)y\簳Pb+V_3:h)ok$WUNڎD&;*Cj$Z9@Q*J{ΞR 8gb2OgM$~~>QP_Vdk}?<XG ڮ>jO Ezwsش P>VJ| tU*I7"X\y‰ݽ˫JDj©},pa`rRN :'H+{ X<_Ǵ?\MW:pkuU/b<7<$KYLEA#kM0Hh܇a ^?pJð:`P8. mJ /FXx/ ,Bv*s %|^%R-jD+fϥ(x SJATv1E`}Ӿ+F57^Lm{%ާK[j#oA]@9k~zܿ-uDwA 1b, ǶPaE!`g ZB64J0:#T\Ǩ7Q !&~Ľ\m6;"e~ /wڎ1 ^ oB_c0UTUHo(Hσ3ʄTg * ?4Ώ@`ؙr ʁЯI61{f[QrX&p$l`+$ukڷ5}tDD7K.:{gc36/f-[f2sp.2xI~F lLj`BS'=ATYbdfkQuV{ܵQ,XpG/>( /I_=NJ5cD i~9!k@/=LM6N}w / ϠS5+VP%i_m_?%%,Yy Tl^n˽@&.ƃtw{P)\uMΒw]QRgUC/3~u+ы2OaEV;俽>fߡL !4**>ȇ<Z#tc ڍi r0]wҥi,I¬_sDͪPm{<վc( 3 vm|[ Wo*6NQ93hѩ& xir9w ~^6N J M. 0lsHR (Gc2a .MUB3ee3یxQa.yu̽gw'w|P\ X)P7::Qq"KtCߜOl]xL>Mݝᘿ$|lx$ sH;et,߷ uE5+/a0穄yKKof~hvj#$pL0zr_Ɓ ="hFw!=8 @wWD>Y(``0GFn˖sH+*+LҾ'#Xkܭ^+6]#? C |gIrsگ \7]Fm<]_:BYQRݔ $u|ȫCzNs;ŞqKQgP##M<ӒM⫠HZm*W^3+QRG&cn|Z7kǭV K didž/LUjufL|ІȉHXPn^MDg sZ&+jg/Wb+w`ؗ҈Eey05 <L ϓ e6@X/oV_+y079. x Dȟudce LԼcU&uR#Ă+ӇەDsAJWa1C=>@cǝJO o$06 9Sml.JRG8U\hbM"Qr\ 6L)98l ri~`#r7-pq`>|$%=Ը,Lp7C5N<{IFiINXrqYU?LE,#%!;䒞Y^> Q-T:v` ~T0~Am~sZ`(O* lss7mT , *=mjFO5ZWrorAEW{VGʶO!kR|>ܳ˽5Gn=.K+b[aopn+'L M!)}AT|ibD26d=+Ӻnh)Xi5ז?UXk%hƘT/EJD`dO'$) ǜb~hHЎ*;ZK; ? (2e\;2S<ߖ ?8ymjJ)@zyR>(w{B,~Y* 7ڕL=1w^ 0VsQ?YH"x=U=o-ܶnEΐ])Z*VXW }BM$Ë_dk,}5;u^ah[CAX0Jg$@_̬KNG&eT H_X;G҄Rom3&-MF-;h4;Z3L8U_ Őy, cY75N ugVw}FAA3&j6ZDp-h~tpb`y':=f;u6CٛNl`ؑDc˙Q)vqFat3}VQS;-#.8\zwAjpsTw~W/BtXj?n d ihʪh>@nZ4mh @(xG5ϗV`/$`U=1ι ;LB qLRO 32lFKi5cr_K;_u%}ο<dckӤ,*bԍ/ҥ0}ӝ$@s.+pXLX} HWF9ńᰬfug&GA俊Wdm_8NbVmtՎ/ x:ĺ.?)1Si_Q;AsW.vz^\Y1DK m].`g8~a$qƄȀ6ҌFq#ʧ4";ZF&$bQ#,|Q rLwh`vk*j 4~˽KZx@Uޛ줢ms1G: ei"~:ުi.,W`DቲsX.=""Ɉl^LKpIE~qS])OFfp>}p4|ׯj^~d P~0tu6,FyPP x,CGDhyLv0 4lsh s=2Ÿe/PDlu<j[՞ 8Ng"S66]&Bpq/+,'uiצuĝZX上=#hږ!`Z]s !BCtǍ7Q{YkodqB!P";tksb^,^xHCus VIf{oa;m?YO{eS~Agf[̎<PT䢦r0+whOYKnin$.;i| RJѼz6ܗ5LNPk@Z2/_vٷn$`\ M\i7"zpV⤞h`{ IUYa‘"Y!mo1 7nQc<\EF_=b<Մ3%Q&>0}A~k̤!=S>+t$vQ7їvی8k XρԲu`PF Y^4cja=:N?V `04r9DI 㠓x6 -7rʆIuBm[1~֙NX3?.Oy[`d`IVVkS@da9>8#JF~_ԩ(f^kg;BU|ͅIgaW: S\3KC #1GgTnq|8! ::۩wQ+LproC{J9 eBb%.SNM\*ɀ"MkO``J x=Jx9"HGcP+<ˋa4|h㫊na ?߭*½!3ckҸCP3RR`*OjÏuE--lum]&(!CiyyȾŽ%n\V@WaׅUce94:NՐ4\%HOu;L&*- S6騼RWA+Vbv<ڋ^ w"GUB?eqlcz[r] )g%x@7]ޒw6b}Ieɿ&.34:1'9ܒa?<^5*& znG ?3|kwLNex.iՃmEiM$^+<:%zi0uMTZ(ciDVV$bOΰẅ́,3} ϓ?KVgb`Gv &c&WY?k܌DڭXuSbe%陯*_ǃ.Od /2vG4]*M8 -cѾ>퍯o5HpPߩ9tbNT H/9xʒj,8Yp?= ~u謣1nn|oHQ}AVZ=&i_3$E½]F\BZ%Aʠn h)9mkv")qUs_c6nP fœA1[ӭH) %UH~˝ꮙEakZ0ZwDk漦M_cN3ӟʴ0!|XT< 3)E =ui͊L (y( </fYӰ&Mz9 pqALUKb1?nCP0\!duX0jFlA.L ,,KYc;AgdIqpM"HYB>2u@9=swCl;Ž5 g/vɱ'iUB⹅6pՌi(1ը_ ݘS z2zX'*|X? 3,BT2)c9uѲs#E:|Oߝh}YbƋ>nJ-To^e>6hÈ{QlrsD\AVBq'Lr@|}2vf-M?2Bh%j.39?y pT%%p2!m _{H\WfWtID^I;= ,fo\n:JL GR2v̛˵f["$vq[I]ICгR u6Mmd?~&Y^hkcNnWZJ>uT9(ta\n4_xT(~zF.uiGr}1leZmFߎ %ʰw:U!G&N31m}ta 1pu* J܅bJp(cSSj?#ƒvcrV I1G^;QIE$-OOIю7lkygHLC:񩶂|%ٖ~e6r[[5 jH0D=BƧ?jRy#Nl{DR| Y}P,R˅i)X&f-kL`I+;F ;T(~ oyBqjkT]!r i%?/[v-ANeF];{ߊp35?v:E+t\JRpU>T[f!vva{#.-7B1hMn9b߄P<mŒ@RnJgM8XX"c!,ppE> Px[\Ed1Fă@P"({3vnq]XLɮ=2f{C9.:v;-AM9x`g*+Z@Wr9[߾8<-L}A*'I}c̨mO.q2U&)#RrQj0} 66o?u~) <  jMW@#D~~fy~ai*zo2gDljAE^Z(Y 8V5u)^-B+SU4NtӍ;\l3t"cs)#f|K} ]J?2Hd/P$AHtޤldħ_uN.=!\VmO7+(`3ּ͢zed֬-H΂ $p CrITDvkŮQ[>o %M'] 1D/@~OJ`=#Qz3Ys͊AHY:"+d3o [}fR9$k~ mP(c%TUlq+iBP>G|JTt٧'^x@8= 6*H:[pcƢ\z+?`s.S1+j6i6,.C/C%Hgic>u Y͓,yD3|']ɴ=iAguBPO(+Kᬻ->5x)įOKn˄Qa{AyIayYtw $S30 <{ {A%&uXԟD3q̢x ^z3]fQұC'@UImߕ,%bzm8 ,ּNԍ:*EGl?T%6*xD!FRlj麝@ێ'g{S z@4hO]eW --E^ *B{DeyF3bQ7D9nбOt3~XojVqFj#]t#t 9Ǐp/w[\< _m{Ԝ^lM#-ҍYw-(۾;³BEcmc Yn'z rrU^Ɩ-k>S-oU> Cvk[>Q{8К3L!ȞU}R^7hz\C3lw^Ri}}Dʒn俅E]ѷtI޴lΟ촭P~> &Lm?/S}6zdQȸ|X?>!3}mGI dw `)X|"c-I+Q&4KL8|>qSϱP﬚^["v:C^_?ClRLda`f|XĉGӡ!B*`qgmT]5L.&!Z+D̍)ӛ& LIT HDG1/ul g"oh-2LE 5UZ7+Jzszb (ʎ@ky{qd: Apv旔2?!Ȥ"&<.Nd@%nu_l+u9( k\g&2j qz*OZ[az EՒQGhOuZ\Z؏?ۡO"..c9LH%A(R.1*Rv(xsfߥd\,9F#hơDy6qJ:DCτ94Rw1D6LCTW}19gRˋtogL54-a3"SSli|; UO Žo8 QR&E9'4+k+!ܝ#ꔱCkw-K\,H C4ʏ} V(C_AN=h*QҤ=*3˒ jUkHBpyJ;LZ.Eªԏ~26a dijR32 +o{F?Vw !O!0c5sVT9gdddOtވ>m4F8 V^qX|VHۖ678.STwz?|`nJq{V簾]Y fڗ, 8G:~6 h]>{ixJ99CՒF6gV ӄSR-e67$dAAJnc% :'wXDVxҲСlAԛt찱<L%lQ܊[ҌQbø-AiLA?0U(X&֓PGe[e#tq HJxXm )`F ;A3]f+qjY2}Dd☾ wa`zaiJ%2nىVfͭϽ&9i Z;s7 ,1!7-k*dm +& mȽf v~ɝ9L0>):*o&e8z^9:f]k/q"fdL xЕ'),]?2smC+acj"̸!wlK [E﨣Ԛ0c1qz+1'fVF|f `V0_`S1}Ce7bE1i>u`uKyӪر}%)E0}3~>O7=> ;m28ir/ =/Wp(QBr:T o1g <3) hH& \ rdځ9QpWcslB̒t[ ),2fegSO$s=a S=}i6)4~NKAMQt <R-6?dqpF~km|}9,3wFɤ1٥ d12먛 Npq8vw鬓k{*G &S& ^6N`4<,Fgb =x`mu>8Y Njk,~y1 uܙ/LѮ6?; ޡ;P2[i8jֹ A&&} y+ 3w. h>1]%Vsn®X˧) F)5S(~L[:o+ew (Aئ;M7~_B) I>ns-UuAo*mYu8gU :MA(R^[7Qa%DtJ>y6(C&Dk Od⇀q@}G9\Y KP+ ;cQu~8b Tik#Sb]Ps #U^&5*Rv[x Mf&) ?J+f?\QShzkjQkjNF丂yUP@lo;JPK^IQ!qu e8v:~ P\BS率7Q=/lPOG&n>]H n@(p5Ej|ו] NcRSRlvp#= 7RV)T xceT.No֔* 9J 2iA;`!O]#Oj5 땵@VodOWK˜d֪̐ ~n}ƅS3*4=0"+<72W m|1N6JՕ>bNܕ^;\O}uG<|C!!3mwUp?tp$)Ԃ*l1֣Ǟ=hOQbcּnOfHzGa$.GJg7cQ$0C}˦dϤ .N$-[0T6\>ڢʅP }~jAzg|ԯ|9M7K7XCfV:ϭkDA=u%qHEsw/4?8?l,Kψk\kZ%,[hj%uZ&/=*k=,}뒣 >_@ ) yHUai_eMqVYF_`$w{#7%1SیT[:YAj'NP\~bG W\ % lǿG${}muRݿSAi /C4SY?+M$5e=Չv]ZU. :!$ϑ(an:% ^WM0Y;-xAsL"5cUp!a?6p*TddؒB)JLHeή^=*Dwo<^ &@0rU,lU=5gmU&+(q(I Jc4hЙQܓk“?⚀-1%D&=̐՜#;YPeQ߳-ɋe#^ (m U{]Oǃ::i&V#3֡U9BRҵuT& ="LPѣ XCaI#d0rӤI1(T_g ?됅ӻ^AEi:3r֩a*@_<)Fv BKz}t yT㘞¶ B MATb;%IĿT1h2-#ay 9t3 2 TŽ ef.Aa&7ɲMtF? ~ԔbЛv\[f25,lkf|Z9@2_SP^~ GQADof|$"bf&7Xa&W7ES kc!Y@g{rrvP9JF kz"Z*!s t͛Br? DI22O'Fi' =nO٢dF3l5iM"Ɨ[]TD0m ` 2$qZ^@LE߈>VH*E<^MA9IQɴf΅4Rb^ɖ[:GϤa(yv6۞# DE(#^@FaUȊ ŁX_ ~ C>wiJ5OI`9 y{=YSsBFHz[xe՜R=$0EΟQ-PQ 2v.g-|Xm1f0ju)0y\[xN?mZ=3_K8mZ۽AN12D~331~|r'4h2ҸU;ʞ@"΁gƌ1QLk&)&C8/Rρ>3UousU NE*mFV,-:@w= *2!e.K|_HZX&]PUa:m cGv?xDdRc 8stm%e^ DXo]42^v~BoOxר|W{B"||2ۆz-[g/pT6|׻o~E 09xk9VdW.JDx EfA?wCFYi_bǦlw1 a\^WNb0H1N랛&v'E\&Q/"$#ΩnFU0|B2ɪg7yEYw6ïgg`dmX|#~tD+:$T9NsNh,^?#d[:$ NAQA3(ЖRLf7nDim{< fTpʯ _JiJvxBS@ߦ]2;D#u_2ofTo4T U*wB5#HF ބ"WWԢ5Lҍ9'j@_Q73y!HGRC @b̈q_x%h=c]Y֖-;4٦YY1 GN_4-KNt eOtQjKJz4f|`:sr|X '։kxɠfDn AԐ~WXu'#ހx?{3VC u3vx.ٜ޾! P+7GJ[ᚭ5"}OHNg-Gby[@X%#KT+$+%v؞؊J`ʂvKBf_ͰWnRcxX;"9 l_2\\<Ց؎e.AZ@MP?KcYnDޟ 5׌rBJ|ȍ ,=G;@jٚ/ 16eĀohMD[DȽ&4)R s-'Òb=y\Zb# מo) /= c;=oPW3=s&_yPSGBQQ*a+@ð +KVS(=&Y*hG>4[1rP"U8`$/sEUC,t)9)_F>TeX ԒaҙǼl863]px5hXίN]EЀj)>?Gpd Kу˾nҫ9Ʀ#Oh>0T,2>c$-S"AwO 1ӿUzCW2om?N1J\:<,OfzX ` 5ɭE ()v{C,e:;G3ҡ9zsɏr  ;84B>;"?rB~CBOUsd b8GpA8e9F*ױlQ.ک'XH,B%$E[N? rM~ ڏ#1wK؇EB5`xfR62x˩s hwz ; Vy8 ':8_-=pUhGs.V Apu ;IpPHb;9̸)*TMdE;SsP {&ib~0m]z=Us.~m&9@R<\>0^yN&A,{ ʉsj,B?X&5r m*QbAY.ϻo3tJ(r;~;tnW@sF=v+*Yg3}~M!-xstS;`?b%XAѷs\V΃Sc8ZSGZ5~\ٕdYJ#6z sLpyɶSo}A#0aO:bo2)p䀿<}\KwtN-hq{x(~sEeF%rYdBc^E_usL\h[L)\_G@$Y&NljDզw.8\(%Z@s<?XyaՈZ.G Xdr ^5wgm^IR\ށ|pT0~:̘l\`$n8="iMJ)TO3m~2-SFKML49Zs>> G]N]넲i !%E4Tw |nʻTf< kwvݶt)M^R`Of''h)]Iw5%S՛7=˪ שY۰{Y+6geA3ʦUVKdvI)LbxિZ|(,&mxc-eHv2sV=ZhS4OPnxk8_5&٘_331U`9qpHOy6i͝(6(U??ӏ ,M5{CyT6]E a<& Cɗދ(Crj4A^(CNmP{5"4;pG܋.ϔQ֣f/d2Ed6ț1_1$t-)*7r\[-NҐ(89j &6 q v`]آ=A^)&Tv `zZKd*BȮֵ͜KKcVCs7*ЪpKK*)BQ֩ ɩR]G @|# C -AуY3c`jKԣ3 f8W7Β~dG)Ǝ:624J2XQxAYiz=?!Ҩ2Noå: HYS{?D< G xF hwnJ{rX֨VKj.bKNg=o<,i09l2a`á_£u֬FmzSW͞aծZOJ .EK`GPo[y~f# zM~QO Ixeq+5QYB {mBXAٴmY| }|x୷Zld05eR--qػg&FWrӫzdh65NM_nH dFeM53p0񨋨 @SA-$3gQe^lZVwكº0P7͆HFzU2^$خ_$.9s 紎TP;FJh2DR"7 XO{'3qMwo_ۼj C-|WF nh'4YB=^# S?xQGi2PݳvYsG-fyty6 ͼʋKTI9f#ͼ|~6:>ʄ6ՍJqj$JqLC?Ы}{y hN#̅˵e>s\>w0 & rNlj P2g (imuON2O"D;:a->O-Q;,ɝ{N_mg!$rgct/ pp_Җ@ME AGS?;g_LkH&]# Q #nQuvScM>m.eOy+.D{Rڇ9rtʊD3*I;Aiuq72$W(OqG f:[?r%꺷귋uy_h]8""k`-GPq CIAhQJuhVsiZn@mGKRjVo3<49r9#{B[^R2dɹâe2T$n`WM0L0K,̾}G0J^\C8 GNimj뮍7a4.C^P`#â{Q݇}*vIљa9o^J*a$%cj4Ո*4&Z55I)If&#lɚ59y ֡2 op馁S…d{ |WRsUI0Sn8ya`Ƕ28Sy^~߼@tL..9\;Y++f|xZG>)|j]֊˞BAPuvi)MMbIhQ qVթc]Ʈ5 OӈO*N]MS.KS8ʼt,l3ҽqEs=ZmnTI;~pB#ԁZkV ڮ-.qCݦ/j4,;|,v+:OM҇%7\\/=7OZ#|,+?F;{=䡁w> @y\ʨ=f_5s_?qvqtc˥ZӜiYFC EZ"#CU Vak@w̍. ]Us@  %ヱVjy%(-e[>8 C WsMhq$BVɔ·sL}T>~1O @XX Rᕿ pXˀWЇb˥>",Z BU5DC^+Vn2\Q:NllC>]0S+ L 8[iì|vI͙2uUc65 S@x<tv"J.rԲpBXbUm%`ɫCDʫ ?%|!~5aLU+(W:zU+B=[EHɤ\&m^fS CC^nvvXY;mEZC Pw)2>;z!ϊ ӏ>" EdT\.hÏB;7궀]m:h?dJ ylDh\jqRW.ۣb19uV 6YKE Wt ՠtcs˵}m,l^=,!꺊M!~+-"|R7Q*ZR~0Zv4O ss4dfxDvu^Ibp+10a9LӜlOH[vLMVJ6*8ƙװK&.r<=3+Y\)s ͍;w-\`TjcywD0`Z%uwqŖ *ȸV[Va  e_m59D(d;?Y#: kˢZla6*m,9hbH~_]CD ].|m-~ D$vWȌ`BGO6Bg wiFݺ:_iŭ1P7eTm  [$O( bVS[F&#b0ފ, B^L<#7)ygd (ثshw_:HA=d90=(̧DEu2{sZ Z\?e3Bŵ3$gQFjE]oW5_$5zpLGQ@Ln.3L פоGz'^wrbiXf'޹enJA?/9_z׸y&JݦggH>-gi$N;(w)oQUG% $茋*7E D_'wCmup> Η 66hh XgZ~U**NNK+?:5"M/X2 #V3Jڍ`mǴj\%y0a;\yDH1=aQzKP9t1R3~κz}TR>xm)346p&!6C6c&QATN?㎞Y o]0Hj9#7^۫I,Z&N9A^߈Q]0vZnN=#. @uHMβ?X?݆AL4× ķblZ'"XS7x!Y/A kk+-Sfx3n|;tj%ᣗ <*w%d,`zib)FTGm, x "]n(lAy6IkRbaMG`&`V3z L2Y"ӂ\! ǡ"ozy5!(t <I](9ixFTs"rэf8 F Fm#`&]? aXE S#U@"AA3TmmknIY:>*Ȁnڹ %DGۼi;v:?_G r: %] m(|8Ȗ'ORV)PeVgv32lg`#T t{lDMBrU#`+Q`%u2շjݵQ'Ry1"V*th̉ǰUˀ⩧ŕsg@L[Ө) ߂`TKqc$RղjҴ4x3Ѥ³YUFGI @>Y*OYЈc_- xݍbn9})IEkj׽؞{_bg _DcЄ@-)Y[AJ,x|Ԟ2M_fh<aZ\AH\HIhKo!*9J~Zvr< mR Fԩo1FUK; 'us40ޤE,emN:|9?+C͙` hwWxa݁%Wic)O'QRG eF\/W)?!G*ԻFVlf>aU!E{H:%GEŽ&\% 4ܝg!U.s_+ApJT W}?SX3l$ ՘pC,DZza94& S liq/w8Ndʲ!()OqiiUj>?ڼ`_ftjl&s3p<j_xѴg| ߹--Ѕ8[7\Ê ~.?"YHا-d.j<X;ždז&h/Y%{FB=JJ }{/P H2Dy^=a#x>Kzۭ{b0 ӉF2xR[SQULcOTFkIЋ,|;2Z 6f-a-P>7pvV L3FI }kBϐ_>{Bq5.ܧ ACk\əіVu܌5ʇ-;akE,S0՛felj~.|a| T6pRmhU$N ^Tivrzt8WO |avpd%qsY.N{lӘd aNSKu8С BEܗ*9+ 0m6X ?Y)Q,.YGck$cWyN~`|_ ڰr*o Ap,AEX]p:ƍno[gzSJa#I\r E.$0G~{Ny~ͧv˴`2Iݒ?ގlLR^x rbH-:J7H=;>bRȡ"jV6J#҄j*Nq I99"@؊ wOe>#Yi[Prm@Œ& ׭EۅI>ff? NF%vfhH/\b.3Jc݂d8$aVėJ3< ɵkKF4,3&Px7޲sE׫X|M##ikFw,ER! (%[Muml 1h!h<У c{ KMD'1\#1m{̧&Eps^OrDo}4"A-0xq[cMz2Dw^,>ʙX7@ ٕiۿLo2O,:j:M7= $1 U^K 4&LL[1a;X#qDo9X@'1#!!H!5mBk_LckS5 $ƍܼÓ3>|zF7/`3 ?<ȜЅ.– 7s;J^dFՁvLk U|m]^4+g XW:YR|C)FUBÚqE7"pStK*~WO\uaMKw'ȷhfgL\\hDqQ6WC0NaUGQ%! gKnM:!_t̩dTN˪Ж%qx_鮆6gs* A%:Y:8o,d13Js=+!V<簣<VYvk(U$y_[Uي8_M7ƛN qH]u?Gh_ !Y(Y[ t_|:lԾp[]?j$*ڑ)-&bˑ4S<>غ%1rš]94inP5$R2B qWOʡ64,]U4gS۱?R E3H|Smy˿ͻROicHa=*JIm7Aqd]XV!g\b~7ͭb'&X5h~#Mor@f[W m.+._#9]|Jb{YR @u$$םâ޺r<mm'P%K&Pl5F^W+o`7=٧)ݺ_%`NXLJ5T 5h-2`Zybn8Fl²LdLYz _ 3 hUdATƋ0c~n&. 6Y m˘%Y-ǡ?5P9xrp[T\G=B}қjC+snyr6 YԽcJ!Ot2bP&}+2EsY}$`J_UM{&i JaV~wt BnZ,qJSe \,B퐽Oʕ9؈ +CZsŕp{Qwa:\T.g"9=cXY1|xM ;B_)6WMLsŰ$Չ.exB 80lZUɝ`ďStFs\4~9o.9תoU5VM~W?[?oLcs`]'EiVJ5(Hore3iZc5 $Ń!p&%J ji E*hibX׌írD/\ HH=2g̃F${> 7DUsebv nto6rmT;s* NWZcc-y!TP$vApT[Z0D}W$0-e>$utl >Tu#0XxXgۂsFTžAsx§ a'\Qئ 1jtJlqL\SY(wz&m`v뒜~%-`<MD 9Ϙ/rq:,Q4GJDyڌ`{$v# gƂ@0L[Qns)9#gY Fwشs35(U[ `AW}W=FpO4ɯ9;2ď}+`/A dtOٞ%Cg1BDB!½id)> {EO0in9߲ k,e6M!7l~j_w,XL?Zg|(g[o;b6 "/qg\T4x = 2AxYB_֨dZPP+/0r-f^)Θ/d$^VAM[WS 2R ޛFb ,}ؠ(t^*[vP} E j|s{` v/0P muR:ǭWVAlє##K5 E5RsOI'SQ N"3Sb  @-K9̄X1D#CsmllaIM I 0tՍ ;I0=ͮzf6L(9x#6Re(T 范  g\ܞSjgҨճKǤaH!2]QE(ꪻCn9.'~2>7Vt 9DKV7&Եy?1[ 2grM,{5=GD&& P p_ʀϯĂne'+]u W vފ'Bx_ߕtqwIJ%~O \1ӻ^pM_Y?찠Ӗ2CL¢=5aGۙYT*9@q=/Q^}>&!C-NTKn[Ї&dTF5  wP⦩ DNw>En$C4V&E 6 N+o'I0A%PypU\.!Xcj b9OLZHZ1'Q-<+tI>}XkvKjN1{LNh@F;J:;wұz-N5}Nqcu nw]WTag,7z,iCpIPTW"kjcfANv۹U DX@T7=W C`+w'A^KdAy߉.0~]1Wt+d0+s m3n Nr}ۗaxoy~{:3ȬRV7kD@ {Xp*&jw"4%MIM|Anf+fu WU//w1s>Zj=Z)㭆N29 MJ>2pJj6(;KXA!?p1F-8s2 8,GB:oǤHJ5:7ֲ:\ SS5m<*8w:ۙگ'Fw <2 7*t75F{CD z$u8Cf@)oaV"m|/ɀ# _}@NrF$MRm4ʿj°#Ӻ_J9Fl'Q+HfֆK6)z%y`j+MdrGa\J*) 4ei1;p"G:;AmMiyq11Y&+h b,̪S藔'"v{jPҏɓ?ooP鮓N6CX*2YS|mB'zXұrpF<]/]unΠ(033fZFK+~XoS}Th?FJ!noRs#ܒuԂK޵-6վuo^QA} ȃzz"!ѦCfʐ)6顡rDod:H@GHҫ"Γ$"Qj 7nq95~oqlQt1R'>,.KVg9`j+4u݊cn+#?v&l/ޘa6;܈/|t_eejzyϚZ0'0sxM 9PHxnd|:bz歫t5,ͦqݽ*Bbb{k1}GBWlܮ㩺&ї0 W-җ][1h&o=?"4-j8)Y)P@ s{IEåÓDV%C'Uk͏ z_9| R,NWiK^uwpQ Gc-yׅM˥Fʌh 939#MsA1 \5l8p@G惵դN6JZv'Y8ȍAiʀ|QB`7v9Q4ֶ}X|c;ݎZGzpnWJv/<7~E tf,: <`[Rpn@mNd"4+Wa^%ԃк*e dre5$Kz#ˢнՙ#̐^K'J)')ItZssBAOuK\5PR#2d_-5YsBF:*CtKw&@}M\^bysCPi<]XW/1퇹ӏ/GE^* ثgN6x{wςuњ<420A2)^Ò/cPD % oMh~(C OU+:'0(]W@K]eEN挱|ϝʼrd!M'z'd7I+-@pܸB w`'M@-ϑd 8Y}nݚʘGN,1' GE7Li m{%Qeaq׷1T|V0ADi8ka3shuuZ &qpa]ab 1]yƚj=jђ4m.{@8z9Nd !|}OƄ}oiF@^ԌmV ݘq zcD?L+<ƴo>=1 .([*q`iJ? 4PI +f <ٻd62S7yMzAǣw1j紐q.|C&fƚXYj)TO=y9KB|A#{5QZ$3orlXDPj;Y*lk{ݪy_ S3eĘ{k^D2^Յn7SUֱi+0LvBBYVHd$"F#Gg,4ڻa}lIJ:.;o$*_!D4!_L[u1BTF.oS!hBNc-5.WiQN'VC|/=;:;-6QT2`,>$[4W;R>_- G+0OUH%X"7~1~,`W<2(7 K+Rcj i:A? 1F?.LFȼ.#fMW\]KcB|_s8#E%Ε>;ak`ʱ L]졯t5_bm=,y3KS9Zs1@ۀ2 J[a/,s=#贍%֠K+抐*|&)L , UvIBa Ϫ5W驇`@硞v-ȫ]\@nPtzEer h|KʜUU)*'+^L@HX4S*3\̩dy=5!iV2؇N" $ns@Dp0vֶMLpa7G~zM ] 񾰉h O:VIVc^nn!Ƕ5З#L TÊO_%l ӻeig6d@w~ t#MIO9f%Xl:*3RyzJr>Wj6޷mL{1=xKhnG7DFFݴ P&f8tЃ6a ۳BC3kCwIvg/mv5g ׬QmRog֝77f4<ȽoOn)6- Վ!'vn]xS<ܲѮuٚE$YCH `Q::zڼv$kz*2^Ek%Crlz3ILD&+J AF_Ԇ&wcN!G^yvx "R' ^Ԋ.g,"c!r_s٭ N+e.%ZNx/_+)? M RUw8gMf&rlS7= NxP]CYKV8Sx8?(>q+ИO(|Wheכw*c oXYAB3ZC8 Ʉx=+0ۧyd<62ى,E<븣2O.GDYOfhvХ)\M6b G$z׸t_5ʞ>(S;Yz*^2kYrA )%"`~!G,;E0iZ)f8_NY%6wGyzcYu?thoo{ _F[yC6o%f$=`#̈joAj}fvd $Eϸ*`,]I9W[PAڟ&{.,(2MNhzuwAc^PyYx*]t\ SL dע~JHx2l*/(qn+UZT xp0FAd,?]<߽|gT;]1qIB?5u|7tq9B'ى"Bit|v4΅H-ElX~݉SݵaA=uE|$@[F?]HƖы'`K2-7jhHgE*Ev3 a6tJi) a[<&WyA"vhz c}ܸy uQpIn_仺s+e#Ε3XB:hpJ!Ng7X#$Y >UX]I9Vb`b&?ic=o84}8 5{3 bU[gQ9NJjd0z &R^?o5]iu|e [E lg.YBP %*U5p!jOqm1 V#Ь__Rҳ |P%ϷRXNۍρҐ9R}EApP} 8|4Y1\1A;Ҝ]NAJ#/2EM '#i#lR]}] PSkxЈ5N*u Q@֖%Udr\_֭FHC=(vKMljũj N܂e+_FdWUK/ZY1]j9$7A&MItpRw2]gL$DxMƂPLݛ+ #8@fu 9%eͤ *i*Qq/"K%*%X+UBG @eվ=0<+Yxµq:"͏d0i7vYP}RwR5&ϮѠd$ZPg/%e,Jgյ˴fw4UQog EW)جegM QlxraYAz ĝoٕb>4 J=-SN.N@ϔ{Con(3t8zg<e#q!L B!a!Rfy؍?Bpׅ+S\jcwZ`;kVtӄÏw]{ ho75ρE&KΚټjlb&;nͣ֞.v jQRTƺb8xYo>p+ȍv"FN Qkޏ {?m-W2WwI\bd[yrXM~,M"$QсBEmO}XeB%/Ã7o/BęZ\PX9nuy{o F~y\ P9H-Wa Rdb´"+:u`Q3Ѹ@0҇2P±판nȒIҝ,LCb+ C̳i;ۧ8t/$3H_"H_^+W@,r88㔿bqz`K~/γ3G=+xޏ 'KڂZ!X=8ka+7 F_=u]r.o#eV/0ǀpf 58 RnI++ ]?+šIRZb큵,%.0!RŲJ"q{5d(n5m9}`!@}MrY*;[*n|a9`S@نѿ{flx1n?娢-5_b=K'S=Ս1:mt\(|:S3gonb B00>zݠȇzD{>yK?Pu\gk1;lY{rhiXX0B}Kzhyb\`?Q bƫMrA&5EEN&JYt\%f~o8 B'"ş@ZWn ,(sWV7SYʱ J)ˀD snqEr?F@ފSa!6H6TfJhRo㢘>BvkYm|k,mlRO r' B`,Q0wH.J`O'@;^`EڹSOugK,A|LO/ڔSq^7-kK zUvx:6Pǰ); ]MNG^AqԳ*fOr`_ (H|& 9&t*{럇U9$P@{'ki 2V!KXPS3k"dYS惢pxqRFڦ6\všMyJ  zK6?1g ɐh~YغuM5lŜHD"=}f$F4e{rϯΜ."f|D9>0b>YKgkSP ϑ nI6Töda;6C2 :Y,[DۓZZy M曤]=0g]25dA <!%'1HSM.;9"YKf\;N |+PQI?F4YxRG+Jee~em3M̛4??<4!G(mV|KA`"iS2CA,M?/F^m:7$6?%eq9?lk;fMY%391ˈ֭2fq?;?=25QתYXtOzCq q+>or*&1Oot/TBm BIףygUS9n*S US H% GɆC?w\ rQjiABIDQ\7IQ&zZ\?R),LTqĕjy0FO*tAܽo*ϝ/ioꔖnj]7k+znqKپ[soD21)>@˃L]F]F;*^`|'?0$ϥ ˗o,85qwQ7WPkRY zZr^i^-ic[ X~aw3!m)ͳl)*Ŭb|ݼc2@I*%6=}{u (/]Z'U!ߋvhN⁤o(ME:0Q(=Kˠ?$.+E mChsJ=4s+nCi1S 3S.&?cnr](bPo5#`! INY ťPL?kH7$: O{޷݄p1ͯhV^96GP Qc lXn/ݍV,(8_(<%udh^ij%ߔAB uc8p:36jKuXևrvBa|Β}i_&o6}3XI|O Y'Ux9 Z]#Hά,H8@, dVVe[=庅n !u9S,EP.f helm QN8uG䴄sXꏆ{Eenpt *.t@|W" 4qV} V&@ދK99TumD:4d1wjOVA*^cr%p h=uqX7C+!+f\n<"- PBܺ~Ee͟uZP.oHfs?+ŌPwa.G#rL. ˮuFe1`%M l֥L[fwŢ|o=˓Nk)240ht3hj $0Vtt}[odp8\9B`4 ;u T ^c ^;mVR 3_f~6ᇱ|h]6ge-nIavO@w;p;t?{B1ڄ>lS̥7 VFҏF#U ; Ԯf'Hg쫳 PЫM'1֖wSe^2| B鑄*?iCn.H>UUZwuᑋ10$I>4`crV=L4܈@Ԙ{zaC$}! "EǧΕx&ҧrCi"xJFH]/즯W`HzuARn~JnuY0&}kdoc _:okCGI=bѧu㔱a1w4. ORY_7YRH6a?%:"ÉHҺ(s^1`0GFnT]>@xKtl _J{sqt㍑|=÷s&|8XZmf#a +o8ǪqV?(yJc߼3xvi̫c"JHཪn3Sj~Dj hѸ9$cN{V=ȷG}(tg,mۋ|:y𒾧CKHM7*mׯ"Hή C҃0RsrMOUQOonB%,$dF,d(+|ZYbWjp݁E4'9ZA>;LH1k aYIQͬyC

R8Bq38'_CE gknzCA^F uA{@z(_o{K!-#N.A fߑĶ V<<  a<϶ *ÚQ4"k1Wzv &v,8T?&"v\? \?A&DitfD9XDLE+=Z#S_1qkf \fb%G;zC{t#VdLcmlvdP2GͶ $8I+?ćӣl"Tg"v@,R>3)Fkz!)wd[IĊ ^fmٱ-v1{/$[ytYl=-u8V|-5 R{'yU =@Fr#&{X;B&xm"$48$)^\d LN Olo`"3SJeE ._L)yS_gYGӔZ@=t~.\|a'J~26ł ؎M}-.f8;.$6ѽ4[T$h6T?\ku8- v<qPaE(^/M 犪zEZmi (5 v QV|Mp,VX=c ܛӊivmXFeRW o{6*!B-{E>?zΎ1-k_5"6"I1*>cm5ek&ٔ3O Z m@uGxύհ9{)yЉ~xW}ŸJ$"!?zm5ΝQ`[mrgW9=iɮ3 ^[5_-/@L}K_f%_j m8 Cei>`D(0"R%\dֺ +y~VRH:avǾMt<b9~i/7?E=.kEO._܅nH@MC]*Z90w oZϪ#S7hNs3v+Mg{Qxd= z17eɦ¯=7+4v]wf-ET~q29 a||0{R ݀1X Y-Py؀C<>DcGh)$]Qqb+m7ĝ["y*7!"΍|2rA;TPp4TUXgogUߛOSʷ uWf9+YU^NV p<#2&&aqˎ_xH) az ]@*$3Z3U hDC ų h[`dx+T4ّz;bqweW CV}2d{9X ?í gv4׫V B"jsHg\kAVS >Fi;ɫ,RQZf>w01i;W2@62t9Z7Iv&s _U PG{z4~hAB&-J#4zI\ʋtM> n]I ro7yaAB2-_@0SJRXϭ}mO/TUACzIA*ኃ;񨹠Y{DŽ"ߝmJ w°ߛ[X?jI"1f0l򢫷6:1P\<0!Ydg5s|ϥjYr:0EFa]D1xrFu\K BJ6l *'qln77|_ԇokwҬ`Q@?W]OAtA (M۩#PEYwፏQ ]zбn]2Cu\p S ЩMH#4ڻ*@[aҋ'чШG:Eǥe$3;6(k{xSڇヺr%hKp#y!LAHGI%fDk;^[r4* 9_m%T8ew"'Fa$]28]_|*$۶ fA"4H6Y=Pb:N0603)H~D;le㛬E;|J.D\B]KFME"U&Q"}F.|cR=(R@+]%B8BF,~/{y#eISP 8m oL u@Wq,/LQ+ĸ @^2VcoZ$j(U$pM,€pg,3XiS7FJR£>K+vtvROS+Ofw=dN!IH_GA x׌#y5& FPB @|0>veDOT,PpęiܚfU}Rkl?xvOrQ}6{>ffnd%*<K3ǫLPp)kf ҍNbLSՐ ǐbJN]fAٸsx~g PQS@+ ءh7ݼfh1tJ{,*mP5y) ɡ*.(* uj2 !cs( ѩWW|ͺiVoFǵJFGIbd`[UMhG Np~ӤiwEu|HCr˴]1N~+Fc3T:X/26$|BRFf~E6*'ۍY9{4Q?r&FȎ AƓH ̳&(b-Qm-db8HQHsMIC#iHP 46q;WZü]ޘ :N WDzM4qm  5E8NܦπQURYpZ1)A7N+P]rxix"VzO 3`if|hiGZY^-]_ǽa!([LR;ipa2$'QKPgSެ|2҆]'esx?5oK#sg1U=uĞ=QaX;08[hymHw7$nC!kv/Є3c28Lޣ%diFu2L|>>κ>(A݅؆ /f3)Ն?ņhU헁ÈԘfB͹'םoOS ;U4n evWLbηq,bmpԍz FYZ]WjP%92񇼎koH [\*.f3W3hů v7feIr %0չpl3B- E, Xlޓ0$ 9xCN>TTK)q R˂uls#\DZawl܁;VGJ@$c%9ͲN:%*A0х'YLڑnjN%1G|kӨl=x2eNʵZQ`=Nb(dC&ȣsv5!Plj~s4^U<\hY- 2;C>ݨ/G ]uC2ƾ?45h+ 08 07m KZiK<? S٬p3ÍWIr bJ1@.kƽfeChT!8t\y3@S>XAw5l;e@oﰙ /QL[ayI$|v񣎹x`Q?PzB;#!8o nLQCYBicۺor m}<3?OT l2E\nj u[C@!wkI  $o; W+I7lF.ȪQt g ,!3x%D3on]8v>smj#H HR3Ŕqzm\)قb>,i-:0”߀EWX?:&Ǯ|{CͰ_ yHm@- !^JALqklG7mL*-"2- cNa"゙ FdMQo )IVfE%"jp2f7߄ ӓN#'ŀǶ$!Ɓ+m`Ā$L&%riyY;tϚ7CŇઌ*)F}*'y{q <]nZ=CsBn|gpf!piƕo cnAeO `eV6ާ3V"Uh_x|Dig|i)*=7K~l U]B뒟ۭnFlܣ$| $FfKWfesԢfJk}<(Xjc p~qua ,V8s]^-uDP6Rwc_ؤ0]H+>݈}k6L=%U]0]U{/@+Tf P1d7Hƺ3zMA,GbR:*2r%( M.FNOė&5?n Qh9qYU Qc\8&M4dn͵O!f2P!95E .&Լ\ZcGWPծ4ސ- 8 ȫЪ2KB4 v-:x$ZAb7?%:lī2\\m?_ D?IǠʤAg [79u%Jy\OY\U>t>Te!PHaQ;. }]gk 6!w_"Gvai>YcD*LgmRm!s&Ebu)|;\]R*kkαɶ>"ܰ*% :;;ţ>DDTnl0vt@U׵i F,g ]tkADj+[Jrn=6=q rG tƜBgHvWD/j+Vev&v|I<\v]]BL4pJfZctQ\]e4 +-V\ZCXm@,J6v6W澎3,п I)@Lv:l#Y ̲c,Pi}Hǫ &fա?KSu7jP, ^&M';7`Tdf6\R,gN Ƶr7B[ޱ| 2t[%(J eMڎHpb{[G{cB3#)<2nD%s،2Xn pHgqs\k liϟMsA:B!ws6y3MSKߤ+D"̿-gϯ F Ae>1X({\v \S/lҞ~MG8#,h$ܤO+*o} еN>Pp-O%PP|[NLS")dt(meȲ?nUx"}ItZV:;y:A1]9%hzMkrãzƕ{ӪFh ͼ |IϷZBv15S-eHgZϴyo &ɢtL-BF͸%θU}dʶQ}+aD&CC+HDZ ѴS\L͗H qs zR+',Й4quWeM݈yNR(yz;eNR3}xtn{i̗ɂ !HS[ 喕ϣi{h 7GDh5D瀒r{P!n0\ŒqOm2 jX |z[ArT$a1ߙ/ xXP%0Uoh\5-gECmĄgGB8Ziϗ(l9FI [m=H%%}.*%U8O8W}`1{Tq1SB8:xԸSpqcqCfk#wֱ7fdlwJ}r8s\RPu$ۭU*ȤzoC^O^B:ܙFx/42pAKE4W)%2ZAi"lμMUQÛ(J2tmᔹ쭕 Y9p)\.نf̎cƙ*7 Y+r#n\J3IIJKQ0B3o ?aQD_9u?/mkHIt:fbuހ^[yɶCx%?Vj3ԴwH8n< ΡZ7PCxx>[<#_#A#( f۷[ٷzU|  `[ޯy=5hC f qp[ڿoE;P~E;(v犚"TS d̽g~_1qōPQmXҷto_h# "h z늳' eVPl55}u u)w/kʕN^F#>={]Ж{S޻=N? SjlXMoǚX}Ìaw, ˅q UvT|81t~Red Gm8jq)᭣x,OǢHoy0U:BEG'>e$S@vje֖Y3rp@|oqwO //d6$[yW<{3DPEI .9nteaK]?sJtbp]& ^R R$mޙb\ ~ !zXm#qbZKM㍰X/#|! GAfpleAU3wJG|S%0:wk\"Qwva o l[IjZցlzkd5nC}"ȏn~ȁ5@ʊ>Rv+.J*8^p<C^Ogɞ-U@2RXڳI/*r pYL HDI% a`=xu>?9~ZbWW#aoI4(L ;|{ xe)4T,?|8H%X C"# Ne!!q1y'B+WJYL3J:{8:q#u Maj9Oc%"|oj,=thr3Q8~h!d;I2Q ZyX_]RA+;xU۷޷@la+ ΐUX= hpVS iqG00ՖqM@NVWeX7" a%2 bMku~ܛ봉}S7AtXi+՞ **$9+Ugبd8= P}z#ORF y SAߑkg ymPݾgpyS͓cZIͬXLI8 Gp q#$HJSTv;emKmK6%iXYB$p&B& gȀ#Fc'|;Zs9j㎏,lʵ;@}+X=ڹ*A~ -ڕ5A4l5cN,9}" Yqp+ށY]X1'XNU\.ņ!ŋ'if#aq-u=r8bt+{e,a\uIqwcHF/ խ:(ɎX=߸mLc`M_y> >/z4*|8gX(WmIq_CDMi 휌kެ4w($oʸpa p7͸FvLOKD4Mg>SٓՊugngk)E-?'%%”b5K2GT)Wht~exoB}gqCJ8!CS!98 *ABDW:}dp[)׺$T* $ѠF'ɮ->kG7ɼwo:ÁTV~UA1}TYdrh7sWDINjypx }=uHqP՛>7GUV+yn%ۅ1$ȏMV,\]n̙T]HR$Y5*v6#^4ZEdH7֡\{{QZ @wl,[V^ T&1mߠ8ݼ^_%w-2q~x%Ѻkow$3T^m'ݔgH FE=ͧD;!mK.wi4UMgJ-t-ԁkm :)XlU@Y]{:`2 ?#F hy~KiGia,+LJ1nKBAza  R/ '4K/!{YNs i$ nXB,2BId4}iG;VfK/*@o* ";饤}3%K4Hڼ$c8F'?uvpWc - V|5eߧ[ywͳ1XLGˠmn Uߥq]{n^H/$ z _Vv ȗ[؃LJ1UZSҏgd!=xYn ܟ>X:L5OH"psrABe>)uat<qF.`!,EF6ZX-cVƾ 0qR02&51i4tEcf&N#_ws/* ?2tF6D/V˚jy&;@mKuHʰOE]Tl 0;^+R_Z@6n|GsV&$|1N'wܸ$MDy=Gi՗[_COr8]p×b<Y5k\ Wt]T{b= hN|1gPqOlѵ<4'z"6~ʃOIːOM@ )YxD Bw'z.>.*7y'qQm}EDŔ:JWmhvZ1W1/`؍Â"V`N0h򤂢TQJ,CTOROD*Y_>-bKy(p[ g /jAƃYd|޽38Co53O<*fO .S7%n%A=9B[tpu7T̷˙ퟡ]k7g6lEN1+F/JGxE!} Q:%!fQ7~Lx= $F{uT@[k`9ً\Ћql'`:F/:WqmfaYټ}_ﷀe 7 K mRo)AY-.1IW8wk(7zk-(ef౛ryp# 2k94GFrZ ٳG\C̒14wa%.#&=nzQ|.GsWvb<`{z-E2[V0u;1@,ݳr)W cK&coӠ-@Sjɴѐ,eʂP[PGr\bdUDf!f-@i Gv3GDLηEWDI"z<QOcͥw-VU;4f%G\3P>ÕPDv*pzNQ 1y!M ,*@a'r9ZDx_b<e+&:$HN颊h0ѿ|omw|y6n ? V% 43L)qzM?9(M1e 6/uKEGp`Z ~wq/q5^).@N2C8Y/ʷXg=4s'Ş{(GjyYFl9fkܗ f**oshGΤuL 0,J[gĸ,Ȕća.kY˼u$ ׉.~,֜4kPh֢۽L(Z?픟izuou5Yר`>Hm1}܏5x|zװ)ad 1u b[ }DiT=6G/hW>X}ê`V[m gc ^oeU,;شέyM?{Պ\5_'{*To#k,l&0Yl k^ 0MQv6idu@PIw4h-/?blu[J/# 1> q~?" s`Ap8-NAяJ)9_?=x)>Ks?׌qG5WlR7CN \oAɑH9}A @#AajJ_|<"bi( Kmq~N*!Dvbx* 拫!~zF؊dǃ<Մq ^[-C0d~,G8 N}awh(HnbӰ $cPY&܊ߎ@ rY̧%Ai8t$GĢWnh{cCTP~2.aS9ٲ:es}\2&, [h&Vx.|"EF谈XPj7ş`q2BU߹F\j/$V#t䦠Z40'L^0D96Yn.B%-uuGN? rTˉ?|ѣwD ^R*X%a޿WD M6>vHp=ZFŌ<_|:H %{>O5@}4u>zY;|kCeL?l)UKJLtG\ydOv@/\`u|67,NcɍaM~ ϵ[Yaixܡg4UҲy^T wS7t>$1uz{wN+$d[j&:o%je $L7(#PWФDdikgXF5:|ǒ\,g;TtQgDT@RHUK>JN4j9 ;}SW|J(bj.gVTƷy.-.׵i)IS\-GgNSpl~BJn敓9U:T.aeq= Z+87(f}R%}C _F Hw 3VLJyzrs#f6 NX-M;a<@W2ۈk:hx֖jGV3t z<;Ż9_#ss&Շ9L݄70?y"S㣃gʖA rC@Ea@O\7˼6)}R=(-%|+8rn2IhϷazz OBX6.dYa'SzmGڋpƀ3S%,Ӭjlܜ7u V?Kh{`$O!#i~A[ؕ$k51-5lLHSyKZŔU=)YJ.+BE36J5!;.p,BHQhlxΧi&,!eob؋:My>U&6sGF F9 <:9yY(pu9=eRfĤLе>Q{!ҏ@4U%rBd,Hrŵզ) F2h:8#)n#hC ?`@)b*ղ29<Mс}` *(PF|*o (H y.p^ LH@PS W+[X39Qc؊A.Y ErbKwѣ,G7F5Ɩ/Ɛ6Ptj P>1D蜅 e߇o7Dj *~_}>nx]zY?VCυ37I5گoh@W=A<%}rgzмZpأP`ğl %=A=sJa\ؗ!) DR?|6@gHFyb/=ĝ@"u zQ$-(!*u;?#lv6 ǟB)c+a]w-'Mmn#[Cm85F5~Nje(AcuoWx̗sސ'1 㳙Ey_l/R]$ǭ=7~qMg|}͞$_ vϵ?d2H&!ɍ4tMUq2$i xhbܻ+E%1wi ~̯DƓ5\}22#vѣkV̻w/D16^\9gq|%~I>y=<ϸ/`~U V K|gkȘNTҒfiy}d4>5sOa! RKx#гjP4RE#GROR M}q1QE0&ƛJl0>jǀzCf~І o: Y;_H\8Dk^*eSCo"T],j95M}ɩ%nՊ%i@p})4Ry5m/`Ǡ3Nx7o#L|+(,SeYSG ^+KBAwzܭ0tm1%erm2\#om֏Uw}ʳ! w|&F^?18erMiDߝZ3VFM7}C=ƉuyLуt^B74FqHuھ\h|Q <"WWO@5SA9,%~=fK+{ !„$Q'Nбnfxʽb$|YwR󲍗Gx<{Cm1UK2 ( JS bIӣ}Qp,&UJF 0+E,r!@ujr#!,QV iD Ŷ[8PA4zSBc&Ac,_?g.#T )dks&́9m(J8%JiW&-[:K(Is]@jHs%tX^AWƯIgœ2B:lG }%hM}i>9w6 Do3C]Da|d93eq9`g;I˟Ӯ5 왛+n <@ ߫S@޿ M.8[WҾLR.0_WIDrY#wײOhKw)ʢާ q8,~"P?7^NΠeo*$L/nFox <3e2z*RsBUt~p4֣kSK͓n?nBl8e1flBz#Z[~LA5t?-m40nk?5r\)2u xW fߨR!``xԗ&(á0dSٴsX9 2^n?-e)槝x?G7U:s^Wk\bkg& y7%nFØSٝA+oKE?3` $*Cg!mk{w`? i)A~媡CU)XVSʦl&ggؠ=y=B’E/cO[n^މС4Hw7@{`]@(^u)p<ϨwvҹViTuKkNiTa-MHJ)̄vqR*¼ 6a+hǤsqS CZ{#)ao (w Ρ~9eQw2!/<*B2^JԿIRϵx@z-gY<'V~^(7H 2n] 荖Q`2,Xe:)$A.0;'MHƭpʵ2Gà5i8>ce ૴e>&)!jI/lT{~%e-c+6CJA皿i&w1r@,U~Cd@M,¤ jECW /3~ ceJgE^q)-7PTr3RգAZ7WmŖ\)"e&xZؽFȗE}h`J :%y:74 F^d;lt?JщFj̻Rsj[òO_-ط\$xEc=Y_H`7ePo ,n/`ij $U0,xwOZQ0už*d?1dt%2=n%f;AܬbT@Jk32 }GLd|]XWͯp~[qc snf\AԵb_o9o$fzқ sH-#eFضH `#yc+q Q2ޥ{_?حjoPieUvv\@S0~,2ܠ&{T9=wHyt_d;ToVANLxpY5x/ۖeNCNo&xC=p/ -̄`Jtդ4yigD߉jC B ITyNfDUi~19}&K@ᰋ9-ąW*fZ >T׫< znIg HuA3 !\4tN4i$V _Y㰐D\U*364 *;SΑ=ϛG)ZyqAV $RaPdP g(Dܴ t]ě$!ᐉEhx@O1 9d~u$K$x}9M`BEI>lEAl&"*,~%1:aJN3Ap{'jaA|-6(ڙqľa2,L:`mmOa> @: yT tSM48 DE"ʒUZ&fzD?XZc԰'lwXǙ~zC31|]O}bܷ:{yF5D=}9fCQ^liAHMcaEDJ03C[Kg*qnSEmAL| !d݇xjb'8z};iv´'!hN<įit62] _8qM)Wަg-\!p؊r$85A"4-eZĮSŬ)cO= ^JG7N.UnwRx<9|#`A5g>6QzE5r˛d@RϽM֨-%v^,Cg ̨J{gB a'6YνXAf9Pw:|\\դo_# }ȟU:gDsgw% yTĥ qYR}o\UlC:\&iK%[ib3"סF’䡥-`[W4@B1y/}&ju'趫wTe[-K4yZIz,X\7p3:x5l/UH\l"LN%GTՊ5{9:Ama؛?EݖRpն0K2~2S+@_%pF9'z;k0a^99>9U&0عP;9LEub%q\f9Œis'ZkZUo') >Tbsg2Ap]ى UNiW _cO'օSpl\aj bg}\C#nqJ+2C•evIQ}2 I֖M6m hȆ*Lj^2.8~2ψ om+O; #.7 MwaN@u"&m|m2mCωl0gُ4dSiæ!ſJjY AD>HpS-3X]²pmQ_X9=E]O@3χY#4_q՟3pݎK>Цa8C7]Mw$+uhAWц̆m%E4-,ZCvY{2 Y_NŗUCK/l1,@rO37Ic6гܳ62an7PW% D&IsׯvmtDNeDȽCa䠲*֯B&&L.ra (GBs*t:y%9`Or7iү9Go.!yn5ɑ%%<ܦŏvz;!L ӟԬxwvl"=B \13V}"|S-C I8͚u;1Hh6's\@ ia'"ȁCMeۢuwVp VopO7dungGdٛ5:>ÔAXr'4rA`<78M#J&B&zJA2uu6h꽢m)8 ^&JBU)~MlU+X+gTg "vb-ɧU5F-.?o[^r/Rۘ[o>X.n?+mGKЖ{-lx5u$l `<=U$0-<+ũ66W#h̗lq(tP\ <\-]*+'A%v  ZbfpR!k UG* Ƙdޢpw2WPCR\l \Orgf;[˻F @1oGڤ8>Tϯf5v< R+l˿ BmQ-TX8φpv+S>F}QqmJqq7':@c39Q ~| N@^ݶffW.&FdV A] S:zFx/UH,_bvazV_IlXr9)eYp0iYpb!ŗi/(A)v'nfE? \.xhXM]BbgEySy]G5fYfoofhnP{ZpؿOާYP\.>sE)+\KLNf@:\ӆ;'cwFE4]/k9l U=nMU~O&pk,Wk`ޓf2lTv5S]jFм wTɠn۔jԵu.O`;SG'1t6qG!Ieq/k"9z H{H" *_ӥ6fiD2b?ɵ=žc6zW8L48cT';Nrdc Ѳ# 5 V+:w4j9'RדDz+ &|ƏMTL R;#@: zf'Lt\y{ 𜦭r]R @CkGd9BǘM#\liF|Q> |*^*^z j7^Ĺva-r6#Mm<Y(k dzeݶY]0Ʃh,tk_F#cBGM\E_d@}%SuPTUw:&]9EQ+s<dϘ"HSj~'J5UI:BDOݐo`E^w)8u-u+41r!F_fHZbLɦWкmm*2h$qF`H+A;9֣+fU荰(fIނ0|mnW cg u!o m=.Si||qC ϋ̜ս?ۍ j܅;qdP-joEWV1S9r{n7C?;rh/deykr&?xJz8sLUkw KU=ӕ ]{Ն7E #LY}x8\arоQ45 6. d."Gfp߶AIoq uf2kUnւF맸5:@˗1!m!%اRD\0 We8(~F72Aa3)۽urg̉m i&/ᴑHٚb"_w ZRqf::qNyy?yHEӑ%aZ/N7+gb䯟pLX|D8h77pqM|QN,{.TNp]E7ɝ!>rϠ׺(5Mibdh? lXrmAR+i+["+7bRFKZ O&/di8ݾ޵1hG:HjHsz JW"'N8rcǭ')K7S]@\Ѹ5hOF -}"܃|hCS2aM  un_~]+j{c،$$`8mY/^wY )yQV, Lrc|p@#т6ATB";ᣠ_(1{xf6+mIos4mkb[\HM^{WGD# 6]qrb }G-4oזX5Os31V*lf87w? *롻}G}E:xȕ!0uXxZ9>=rی|H{'l!o=POPFh&QaN \NC>X. P0:TyǃfHx=3-?MBM]P#DhdS{$e j4*}x#(xc>EE="IpHIx&9'j q]ɺ\֜/ c"Cփ(',3' y/NaFՒt5:p?PhߵyБ:UKuc=R@hݻC[5aP24#ogߤCDY09nYxheV}B3-@nij%=JChJ氄@~=8l MD'9>`ADû[RMXyMHͼ3]_:GIm"`@M&2@ʅN%ϝ9f|C}@p3-J0tœGe.Xyg:I^"mZlk1|T;IIFrx͓ox{o_T4-GPj!B:Q(w/5ޏgQHdD),h`F l,s:;* : :]mWp\>$rHYImC5Pz Bo,qܤr?3CHDH/e1OiگȢ林+ # 0N '1̮v_>vN`0+pӁ qfiq9m Y #whX6 ЀF|NX[= G\18/7s-O9y٧ L>daނQbx4 $* PWV9!P;k>| $>]:TB%dYGeZ Nүug`wG1oQf{Xj1 S2{3(Ƴoi\{7M96HZ2粠vl\E,(U_bQDs?H mB{U ;Upj$ъ@˞rGX<+_>ssԘe >*_[J*lʮrJ +l2P305 TwQiݚ89xdw:rx_;HtXW1i0pӇjm0u*U6sn>=”ǧ6ީ6 u"(a(?'X҅k7s XUj B3o$~'x@-S52%:&?|D&(Cn/S}*|OuoB-wLeUJa{ܮ_e,iTؠ|SM-KCӨiRgf`5]wup;3}Rmj&-\BpTR Ŧ5) U|=avqÓ[x[SD5Ʈ<KBz7j{#&%)'&nF9cvIh\c^}9EC,섻a fP^t m? AsNBJф +S+$JdA?YPgs_R:6"ȭm*78;M'| |xY`H䞃f*^:o:A>p7 ]DbJ3׀ݪUGC&ʬ@|AF5eL7n(G}-½զ}5œY4W[nh %x]e3,~OKJR oʚڟQ^θʧCR=yђVxLtRx_-EN9e]WZV?҂EVN,G̤9B3s3!kdgDy7rK‡mS=ܵf.H7y!E Bjo,M?%h ?nj#(~ЧC\|w -iר:#3WLc3ܰM8&^5P q_r1i"='s2 h d? @uJ/NmW0=2Z ש79:FX6'q/6B 8(%OS4ެji4`IK4F%H&)׭gJtsSc4DkX_yB8l.wx7@&^:^TF#e4ZL+-4kb?Kl8u&f@$mL, -dpl2:ַ*0 PSXwO+nM-R>r ~ ,10,Uz@WE]04X6z'[hGXZہZ͟X"V=.?XD>Gy=tEĚ'}.#^(Cap=!jF9Ƭjo 5ʹ]% ;Om k,,r&aڸ#uhI =-A8M>.H?)XȪAoT̻\Ed O%wx;`S۲nd€xkuξw)Ǯssx5%Y!F7=,^ ZuM,]z@:URaSWt\a _† eea6XWۚ%ib7lJ:(>t4ln,υpZr6m[;͝/Faߞ~^{$ɾ%H9շW{ymMB|t,5@jȧ_x"YPc^W6 UyYb4*V ୾AٜMR=6B= }1"XݒVBo_ Kme̸*G:^Jfܾ }tmcL*ĎM_i2vQ -a=2ח;gwԡr+v`g R|\kۣn*;vS n!v(iUlղ>=L6waij+ihX}vx3L 狛ߟ Y.P.W2KXQ 7 l *EK;odCx!\wnTemm}#ާA` K^ڂa .V]v{lXjK,YocW^.+❍ta'}TdtQT@ Ȗy(HB"c5A 7"JàP$Ue@/7Ƀhp0L+  1 2b %MHXS<*eO,6Y9E*]=@EmK$TFe2+U,i_=MqQCa򑰖)zNPnxn5{_dJI]8( ^yRodžK{?єbw&iYHo2njrPЖ< Z/ǧ u8U4~i7bu4F Vn 41uOUWO\tf_WgFu2oVܳuTVRH~XX|FY3ܥt?"./kеu!㠳HVxR̘CLG~Y a<)w%m8Ǒp>>8^W);tT1=[(/H} KH \@2N7Кn)̺jD%Ł,.!O) P}*4ivY$8#]>ۏ ̕긣rgdV!v+h]KJ>o۸#߭=JJ+6k9|K&_.Z~Io<;dJab@,0z<9v+0 AsA"ZˈXJ3 ,j|G=^[۴|pSb6YZFaJqpUePkQ9Ϥu%(8wPC۩ RATK/dj-'yCƌUS}Z՟2oby鲂R[8Ŕv#$s^;P/lzIE52:i fS 1:ԊKzJn$= c\b@B/ oln9u*#L}2|IhwWτ_G3[YѥB!]tG|.6[FiL8$f~?c<3e/ wA!sϊi)2u0 oŜÅiHװXU2l(kVI75"u)?J|e2ÌF3 rl.me*mK;ޱe~-f%q*EtykDx2T/Hj5ҽ|8 (Uߍ^Әe6b!P1oNXftGQbc+BIdsZš 9BR=~Ows;˰. A4}Q!ݷy |8Aڵ sm@-ll~uIa=!Cr7w kbHY\:fzN ̈́ޗ~5PgY0J;'(Wk>PӎQǻl!+N9bA~j^8 )iBDž1Ս"51Vov-xLa |$'@T޷U~GF"e8ATIg5Xeq,.mu/ZB$ z= iM+=PvOkmJ `8*L~ |hI ԷhH;4u4DӒT4U;'L^l<u vKmx' +hQ^ _3jv~Ey F^R95e-Q\حHXllGz؏8xo3C#9?DY}~1,+jdi 78S/б7p8}@*}Ycq<~B͗^WOق1ʱ/w2gr&Ηe` -yܾu?w ׶gKdd DL+{FG( z' #n8qzOzKW!uuh˓Ӡ/G崴r/o@6ͷ&D--(k6g>ũ)zǤ,_dS]FP­te g}ei$NSσvRY~s^_+_,cMݎIw6f =dbp:<բPݧd*Xn6oV~.FRG! wfڹmXմ$E&ieyʷZ-5<#כA~ƟEA 04E_ >؏d}|ʃ_NYV3)+3DzoUqA[/O+LKj'Ӯe𵅰 PƂ|Z5H674¿m9r/xiJ3Ov 3B SF*",or.K`9s''Msk_`l54,d=֚Bbp+ E^׶,2DLaۭq̶P׳R;; PL3eR7q MIq *8T.Vo`-y-nc-Fż"P}%- NTpqkCAŲy^ : ["gAPΈ 0οqaدdlw㋌K&(Ták5W}[$6g}kGBH ߰gjRStk,s&v^!`\dTw?\Xpdluч3E)RW qh2)92ܱZ^s jp7*0h=fAE7(4ĭZv+f ]6V:Hw#VFZ1nj$*h/a21!sls'4_BW"ٵtuQ`FIa=L%HUŚj6 %VÒ%sdѕtSL.]5X4#/NDq@iMx^6a RSԙ[bN6Ds YcpͨF9b *7>4ɆMD tc`ĞuEkS$DhFk}RIF}84xuų2H TW,AClvӠvra]h,z1( A( 9R2>N@xT]J= օܢ.9P?žDT-&OjY쪲RطvZ~}2d%<9×)a҈ef6#V^5!b2&T=9>mGH0&΄iqn DWԽo2Jh:@7`ǟ8vH^K/MP^dqu<60mj7'( 'r.MC,DzWaZKK^HCh&S3e(wjYBfRhR,t`N.KC{wrmuR:9R+_v ҎE||"ߵUZU_?YO֐2 W 1~m`bMH_UǾZo@@$>0@Fna3Ouᇆe9.xqЊ._*k[EBaȴ$OP xY,`UlyC<"迧ԆI35-}HDd2Y jw *arץ>cʘ[x}Q 9@og9 G8MOyTxU=wc%+F\D(9׌kzx5+'7Xo8}L3HԼܴLr>* .SX[ _/TFl[?۫B/koHx^+k>x9* #MT !vˋ~QybW_=\|oq \/)WQ(=J;#p4sعh$+k.O\Y[Eq,%ɯ%" afg=XX[b$0d9VN^n:_N3(>[x6! /Á*q[ >xlZ t׳޳'^_G#>_dbiz뻷˺ou,Q^ȶR'jCE1|hW/NHQ)ّKnXWKZ)+j9C7F& MJ"xU}Oy\9)Ю*-"=Feν61t6Z̽4"ʯ!@hYy6?&8_6SSv/937ɋjMNom\3Ѭ9bJlJ :J&kڿZ4(CgPe>t4;>>B0ʉ(3蓋ExD~[H_瑐%B v߰kWc5d< !k{z dҠc/Qoc2H0FEjǐ &.u+e|?ܝ gy ˼VIvxЯoc\`JAVȥM!J.`U/&^r<qU.)mK*L~2j9oQзWSҫo# 'pFOCH$0ըR!sP)@o<+'} āe8AY88&%W42p6!)@ߥ;7n:DB&6푗Dɦ=.k?\}= t :`C(Z} n0~=H6 X@G)a[`۫ea0o/1X"kq FYrnGaSjRTuƾU hpWR#Oue%nC쒼)ҾO'l;ZQ_6Ofh蠶Oy|oޓ_!QImtgʴo-$Ujn0 `ixe'36[%ΚS¡?SvDe.{n?v^X;O|"@?(֖ 8uh"k N/-a,C޵}77IHEKl+k&<&(|7M=s)mCD@k2vx@A}9 }XQœ<ūg '{XaE#h=X!D@w3B+OpL"P0t '_ Qy0OEu䮳K{JS{KBG(<@a$}7އ_]ܶ\ɂ>y+Y=D1zrH~;죳y6}/4YF_Yѝ:ĹV] QSzp잲Δ8fٹ,["4.9h@d(ү%9G\[R:sBQӾM:2=KZ7b)"0PclЋ>+#BlLS ~vh゠gPkɩ5n;:|#(E :zhdvH /3yQ(%f̫RDMcQ]Xk/F"XfME?1Ke "w<{E.OC58>fo$:K8 kGoY=%F6Ɔ޻0(T00R "M_/4m?IXkat]1/ո~tGiCk`'$|yd}) 8g ƑZQh$M|N EYz4Q|QqhhA9XZ =X2=,OGA=DTɧcXS8"=ᇬm`[j(vxwhpv\ c,+- BЩ? LHK +t_iڼطõxew*gs"ד]?Ɲ}̗QD288n0OvwoEcU[@>}bKP-f]6UT$:(݀. Q J8 N]qKiz=*dxZx#b<7ғ;}R(! cs"r kl)k:q~gT <}ē@w!bt[5LG^-F>$ i!g|hXmzi :3HYd(~FJ|K9Qi# WY*Zt{ l{^Oā*ԈI>'<%Zsfi'D>5-}P v_h_q|+! w;3+f]`r:qpc(:hQP@3c@!jkGK *M(qs t'#xy1w!slRx9AZDf=@n7٣,/]&T'O/V]';bKYřnXuɽ7EP`iW2Ō:*HhDXǹ|G;uœMЧk(>, 3VO[g9&X-h|7sZJ>=|VljW'i7Zr3 #>DO [q=ax:3Y&HJ/A #i{^dʈ%í=Tpr?E,e7ENXLJ!L4VM`< JBg|R2 lRB^G['Orl0%*"3O[;Vcڶ֌Oil7vcSmy۠.]!{dMr ޿BArNdBK>~NNNxd1~͕d0smkHX䭖98&YJ]VkX1cy8m3ꌁ TvG˂0v4YݶFJA|ӛvy՞SZV \vչPJſq#+D6R\"EmQxD SKa#mdŽmp^i_'(షw{f?Qt LA\ x^6 j8+PV3#΢HCrr-zUw%3fK' ^pg(1/FnvkkPlǁ±A?usaՑtXН$>b7xA(Iwc]aТtA_ N!9Rj(Ĵ +>V@L oC][^&s.b!٣Ta8rDzg,dx%s~?)E.iH:l'3F!d"XvBJݽFk2 3Q 8ƞ,2($H?r^[mIP0c",/f^&yGԴv`_0]~GJTw"|:˧hY a, 𥮿h5.]E1Kv=/Co h9}sʵV:0;h:oga"jg~RY,$&EiZj'uJ`261H7擄uSr>f#փl4fPH'NxTsWEٍw w_9D$0@)6YNO P"rZPĿ-hS aK1-k'1S3rԲ4Z+j_1jj E!٢,lu\-a{ȹ1Onc;zY . .\He(yqݰAUù$Q[I*'Ψo b1MV\9rSnfm4},hK7DV<녑_T`feIX^zP={Y73w.z}(7 RCk:Qd3K?@2>xkb 8: {Cp,|mOd8( ry-iյ+4N:^ *u/~FLX33_8ׁu9 ЌȠ1jxZr@zPO-[#S*]-<(fGlLuNm`yP2".dMo QT+ׄITP܍ܓ-D kY^?r ?GnOe&߾Ƨ;isf5D2[P7+Cˡϡ3yb9Fx;-=[-ca1&}sKy*`YQq:>#G[ա/+"o !X{›JJ#R{V@GE.; E걦Йhs3Ny&l-NIh9> ؐTLT.3+Җ@9L8u'MřleCFm9IM4}u[IJjUAIMk*9)*)R'v' zbMI[JBh͚*a#2/]û -y~56Y&x~ aG–Cբ)4;&f9* Hk_ptCB64,iĪ#=[z j[ ڧ7I?J)I~0,7+`~G* {2ic5o5n| f=FvsraT9IzA/;CsQ$0>TTCd|2z] qL[wLT>{lbl{)fN\wL2rmc|?V<ܝn("c;yOO5'.&܀Ϛ tuON"ӮVbrJBףd(Z w|@J0z}3cta1i+== \`QQPSa5cSHW$;=I헻}!I\C*SGMvP TޝHbgvP̫Pâ~ s s:)T{$C[WFb+zlB[ szc)=|#}§X#WLoas#2["f!s[_(OiR\$qк~';5Ɂ>NZv]( E̱.5όA?R~.H-IIPsP/ugTzMFc:LlCRpO; u9@ DEȸ0 FwF&%B2_,=R潹 bxrAJ264R'nq Y%Q?1X#:xft7fmw u /5hI¿U`rO1[CMeM,5n?C@a d#gP*z|/Q5/ S) W(^B%&za&Nda ?B\qV:*%U}+1ǰJ%"prZGbtZȑW|+ZLx3Qӊl!&*3bGoT` y%TO%v(hAO gP0Ì+HrF ,IL$la8/}d3xPi1?[\C-x;4~l퇖8 5ɒ(h5#%R75+&(AȎ"ח7>d}L/AP-k^yfg}T_1A@HJ mAlοVetrvz_A5H!-v"i?بG@݀N6_6-H(]HF !c whQ\ԋ)=#W9S5j.\|:XlF>JUi4,agiXW*sOc7GJsj0k+#[(?bqnuKLy^y}6~d %/6aގ`?%To"}{-EL(dlא(ޔ}~I7Wi ^E ,7t@b@U/T``t_=$%H >!B 8("CR6F[uI5p9֢()=],O{.FO5)XhI%qP DzT/uMԇYuJiTaBe-qUn?86߮*[!vN60S6M,<ʙ@:~!O!qAڵAg/:KAJGߟ xSTpc-Om*jhT/dT-⍸g.a_gyz+Kd ɌBrUzeQb_Nzvlp@6?M;.eڍ-Inx50+_陠q;u/ᵤ-(tLgz 1ei R*|{o`axtZR_?9^Q}W=pd&9 Ut@>S&K$U}u}AUbh$dlX DceW³qc $+g(\*L&ڗx;ƋpEpn| o8V/ {+K"%Ɓ., `y@UJ|J˟I -٠xUvCݽk:EzWLY H8, **پFmrS'>qݿ'6aŮF: u6\ȑ"v/~^XKnoi=y}d\␐h!w,6%| z7JdV08cF9cƥXJW{6õ6Cԕԃ+[noc-W&\\1mwR%=G0_u/93voز0Oн2QL:Aټm*P"fOf,iW̦uI:=+1V<:>3$I/?,JNIv] M+*aި%,6?]Q4ت|@S"irWoSud#/>?QG^)i\/>kyg h6{vYdU#†?iFuܹU/)G.tMQ7le*ͤC$g[_Y%`J<#K"wt Y?$JQ(?!B*/ҋYL%0-Ѿ/?ٜnqH)0 _qCAm#)AX T?bis?00VB4E ͻ$ j"kVlL'oA5s\*jpy\yK5գڰkNj7@MU#MXXGb!plS5`L0< 1OL%b9i8{M[KOL* HI*X?3JTmH WC#n/>=܏XE[׼Njz+ aQߐѼ}/ = ޸(ԼDUaᦪi+`5{Xfc-. oov-pRyd",$XdFC#ƓOUMJN2uM&)v΀fOб+٤[jy$5u{O@yYO ǵ#|6Ο `rοވƚd(XAn,2plёсMZ >Yڮ*Ԋ~aP\䊖,-DD雁^yOdp!9+'H-~ LQqQ \̖'Z(xQE{ˣQOɏ(OuA0ø ]K`GQsJis4p,,?M;cG Q"^HD'ӡ>.hߝd.6~td& *q: Vޤdb9e9&g`HcTSV|=6~c[) /x#p_/&uIغL%;b a~9mDDҝyI\ϯcNQ31},{_]/aSaQ*-&3A4Vl^M_^p(3nQ7MYlm\m#o~"ӸM_7fNiTnqO\u>0у+3nPR5EeSѓpn䠿떢XӭsO[wNzH0f^xaSnp-ēf44IuHX:ZKcJz2FZMO<}do??GX[ oկ9ы, sq zE^ *>E .'2"_ggw1IIb&7 N9:< 0Q'ԊH7B6ta~F*EZ5V.8cTC9 -.KVܫcK.^5 FkޓG oyd+%hJz=u( ԃK?•}협ЎH%˿sO%)KdܫnSR,^8 &|,,GCeЂ D^Vz`wHEGMX5h@ .Q79(XۍN?t!ט- 6YTA:3CqS { 0#{| u_UOk&J Tzฅ\YGXLZobpLN"Ni8yz{e(5k3fQ*n+ d*Dlxߙ9j q#ݲFQB,;maD&liGjdDlBWI^Lnz""vb<\򩡢ipNT3x]g-YFQd{"mzK7) N Gݞ_Qӗa@S]fI2_X^@2mDvSe/3Obƨ9|"tƪx_YF2ZՆ"Fz0NC0>6悃!x/NUd`Wzk$aQP2oT5,RS]EӀ'qUmoƳ}H90a9\Hyv9CL},fsH_Eb#)e3Dl|ٖE6o 5f#~c]Oo"`ª>M۬H:%[sL<΢"e櫪(?PDIxNg8/R@ /63zl)hs*NeBndy9f̯_uԵyEm+D,|w֌*N '"| X7X skֳs391ۢ-2on) <:$Uf3'V[=ುS!XYV?wE0'\+sNͮ'}AQA9s#\2Q>CKq,^K!TVn)3|a+pE#D-9vW?Psjkq :- :)ʖ>&i>Tׯ㳕|0CL9WvxEO1*k-}ltwF(پ5G!Ff Eתdw|BH-R=c:p.{ 'J tCqbUY-AT%9@[`Ab-&'G$'.!!$x>EXӜpYf.D"6J焩{hI`2{f_gqrU^MA᩿J6>N^|krp7u!|;03 Zn8fLOuȈ9{mJ2B!0pJ˟)}m^ D?GH&ML8oA/  hP$`(ajlaj(g/d@Q}P`]B}r6E\]hx !JZf1k9Zo n h0#FܫӢ}Ŀ_7]k|XXЏSQvJ? mn5Qf2ߛ6ZA*wX-UTO?t+zY&w4Bmj7m"no'@7$Ց7['&(LJb^~۪%|nWHeG*|ATs2Խa+Yx/Klg3)|~t/vq`<}3d#JdP 3VFn 1 S=[u]θנIԚ&2s}ADv+,Z}&gϯ!+iTVY%K)SGrJ呭KplqP*~&s.'/R.PiZۋWE*mǤq1TM:X|kzp`s`mn'+qns JBIəsa%96G jE/TTROL옃3OYѵ 2*W> ^Wu ֭գo &BDcZޮ"9&&B1g[sC:1S=<*)/EX}s2`޺j-0]A*L\ib~ƽo\ D/WFj$~M|Jɲ>]2E4G$|4Qu*B](H;1t50cIR_YI~RT$h5& hw^J S_׶3 W@ ƏG &cz(A7sc֪)8P[TI\d?҇9f#FJەRk v]mK*!f9Bdv7w|v.H9EJYOMRLD"`DYOXmmHUFt^.u]T{#|%4Δ +ih.yV n;POG C4bx[s.wKK0jITdW"FTzO LR6/#|{49cUC✗x.Aiw}w',e`R f^sM8Y ԳI79'MpVg絯PzxVAS\_˂Ѳz XpLXFvcKF.9Cbշ`Td/0?G/V#ThpR*KҼh+ӡ ˧x͖ޭ6Lz[!H׉SC)pNwZrl+RRRn9euۊud42#%ꎅóݥ峧 5ZR)8@mX͙'k5"w<@kfrPCpb;*tCmzD!eZX&؂MkN嬶aRLυ_?aa}NZxn.A3= \ER~U!%xeIxO[n|z9je?SuW 7 ?+!l/o8l_.jk_Ž BvwIX^n˱)S e74IUjJEM]- 3drlIOo;Rp@u`;"G}8 nEGySRD^c#tF nIjCNARK1gn<bgv!pNCP;@?گ+:q@2G?rҀZ6ꇻaSw"EJ;4):t@ sPI`8^{yy>$ Lk  n )[cT%_vVYQg%΂YfWţBA&A#0M Wt=UgM⾯x_ :ni\s}YI}T÷3꩷Ձgnf3!X5)8쎳Ӭ*O2vkT%9l$NẄZQ5)Z[tBrtk! T8xra롏\˖IB/lvؙb엽-lс^SǶ W;')q[(HVj. oeq93wvy[Br8jpF-0 uSeD Ň"n6x,GY{` "zFAS{TQRP>&";0.Qn4i;}!gtz?|i O2I^e&d@7 U`m.OFˌ@4JCr3XM,mpb uG%KC Qh(0t0ùY/ŏ vle`и>9Us<t`{3ءf"*_&Ϧ.lW[,"OJ]q(0O37eZWI/moxW<4UcDټ3 zv|Jm ?OO=+ ${N[9_1X0e@ I{7 Ӡ@’vRsCf aUEM~<R/;\*1IYh'ƏN{idQmPOjh6(r0W%z9345o+zmظTmmI6+UjPji}^Zmr_[l_D"zА򮺏q1`MW/;YykMG GRxAuC:25Qݏ,"ۊYy#'|'4$Σ&t{8 *$d2j}5\@뀈"xM#سO4PBB .Ao];S\9%Q?&tv͓RXk'Vp:b~cV&ya`g`H" W_j-o Vɸ&}}OS!P>>%gjhmg!# QM`hR‡uRL!riCUwlTPB\F/& *@D$<:R4.G=W0C;S27X{/G/ amy; R&0*cU >lr(״?>:DQ01 ҍK )D"G)|"^P'/cP5zJ >37Xs0Hv xi|/8%dZ@TϩL4]jU1o782ϛ  ~.KDW~t6ޛn{q} [_ة$wAv?ߟ߱/}Cv`5ֺoB=il$`ÊsvϤK Z70)=Il@RiAXEDJX#]]6V$9e1 [=4s*_)8v;Rd^"aV6UsT<6Q50XPuKZ $1x#A5;&i[Y x,*tUtmܸ۷X,ÎT/tCzߥR>X ȜG=c g=˳kF˝9j O "565[ ꪀ t/WGN$hPIoCV d_ݰ'ĩ%~0Wpv24P*U)6%pG5@Ŝצ*rHN 8ˀH /t`?ljezȈ̡7aSyFOL?Ad-*:;C`Ī2'xMƸv}# D&f|[w%4xcoX z-I D6s1-ėb6t(Ba. ;\:(;0=g{h!0}ECkR 2~f^ݗYOވ*<1WGg%>EsuBĝTOYqE%j;}st,:ѶPS_WV$+d1 Ai!(KJIyT" Q;U&M)J{ӳrN@b.Ϝ' H\y9z5. {@")92S8'QЋ_4?pE,fsL R1:ɑbs74YUŹ@b*h'A([o3@釬gWrO +"wcf&_Xx5R`| LSҳh,r> ܚS_lfR'cqLt}A"(wNS hm],Wv'|Oϑ=co_t!Mf 2p*#07Ddn/F #_e9.]&Wo0.di.@?IESn-vfD"qBкcg{l_/loJ[\lvn<`~,J,l*v;hܲmQ+2L1pTCZZpH'[#}C~_ǿ幘^,]LMT/rLBY;M{ab=1rLs0,z*⼕{[sO ]zM>g=,͞ \(rf6 } ф\@⾲YG9e*!B\*,MuPs %GrqQVkUu(xz'ĖCbγ:SR($4F ~^Uz-YӏV|&Қ?9l5+o^%c~R{b#F(U`Sͷ$,sg5~L3R UU'Ed<'.9A"J8wd@.r60蚂 \g:cJxשY&F95MTT(mDq{m4XS5|?siЧ_- o9mm 2[jU_-bP? \})h\[Ё^VnU)@:FulAC%X= &VUc#3s`1 ycX``Yѿ!캗/38k搾f;5{ڞi;x, kD 1fj/* /t {IȆYw+Ɨ@Ld嶮"8KYpEZh7x۵m8u,,/uYpz:*#t|:!gs\(LT 7^BGR_j.(H-l r(6fw|ͬLPQ0;KJt18JO.0uvӰ&zK>Ww-^('x룭q,,@~M{t];3Pޥ쥔qӉ6 ۹. bl5PEXȐ?-! sI߿߄ꪀk~[>ޘK,vWmԫW"JjG> V/w/6W Z03QFAYOYQm䋑6)]JgI[VMjEBk:ql4&lUVՠ*coF'̗Jyy͠k;+OOz+%} !d\t{Ŝ2x(_XB猛q gt-&y`0:9߅v1H oȉeʑC dEkc4M[XJpb>C~A.ӷQ-2 K 80nf@-MٟrۧsiV 7<mJi;tOQ'dዝWwb'$|z4e6lRQ<KwȽ#?j![(xƷIª +8;lhtK(iJĜ@_\ty&-†v yJa *ZX0+NO#h  U/hmO?]d{G6}$U[wbBxi֨L^x8$w ,ݎe3~  =Ff_U .mJe3DnE>gI 2#ĄG.I62Ǡ |ZS?&)3Cg;"SQV% F҈$"bD_tBRήkb#k8@eO%LC\v?RGތ'IA'\Xꖿ3=BfZĜ&lm(pI53 6g&_Nշ*LI׵]Ҹ/ihmMT'c^Ma`:H/cN fe Q%Ob@H$XS "ݔ-7!sC.} fCp|gV)w3FUYb(BC㔍#lp eyrm6N6xÒ2=9mU^{'"9GP},KU7.HH4ֿcRp#$fSކԏij=gn-inv,͎.3 XW# 2%ptU`*BA2̸Lfξ+3/ygm†鴝1t S GuHk\^}UphƐcŢ<;[D1Ϫ^{@ g+=Thmt:O.|7c"[AZrBOl߁9̙~ׅMzVTV?&cnn=>ՕMI#z+1"=~41f tN^` 22p<.ER70C×)UPR_sti0&5U]E#85gu( &ÉύΡkOEb.]qEu|ƓʎT%*RMZl0֓Vf9_&wB03tdE fZȂ)?of $ p}Ӏ}b~.e-Sߖv R.<.RmҌe«8bcPYALrPrg}rGdb B3I Ӡ7gRt\8|E >ȔedqOc\Ȉ-ϊ-,0ZCM/5W-q)UVqM*0 >ph7%OsI-=QbS`wE15权g f6CRVh4|j]dS ){Uvh 啟L})Tdꦇ5]x uزʩDȭ$v%AjVtD}Lѭ(ʙ1N7-ïmLpf7Bx㪦sQj)s*ƒNI}ڿ3XlzYW w_}E:-Q7{D]E=v/Qhzk.ܳ(d2A&}ȭMpqR؎2̣qdh14SY=z ee4woId"#U3DTX:c"](oK8,~uf1.kc,Cd4 f3.dyׅ#@êFz } ד)&7, '2\V#׹m٢E˴uuo }Ca6GR5D):I.c~;Ze9eS^s{ =ѯ)ʹ0 ESm%~TV7 ] %&9uD#޼,^)`>4GUʭ2eU{VJͳ'Y6$V}澛(Cp!m2J>rΠh>m6j?0<#OҨ!ﮋ_1b&~}rw{ =X]"'\I> hOx{[TjnBC/T?Vs*s**+ye i dZ0Isf; oI|?툸45(BSul`&qff8Y-N2 V^+i>%hyX~ꗣ$QbXyVm[s˱vDA?7q.K%][DoL ~BܾP!^ Bk]GxPBr} x*,X(}c?+3j\[Qg}t)[ lYb9畗gVƦ z&\4MG JJ2^qGMǑF19Iu3[:l(&K{~2$SC *&ej F* O<+ Ŧb(?e} ވ (1)wJr(Sb/"E6<ʯF胺ͺa%-4E}_E޶Kde1ζO`Wv. 1 ԫ;(K$*2xqy! ܒ &tksb<5 `JkRڥB CCw鑉u2:_ e#QS0284 5^xăR *omdټ@ uڪԴl! a;U>eLLܴ-ɦ@>KY `_؁vdvԵgpPT09:zX e$o.=GQLS?U|0~ > "԰s=K cB-R|b:^ !ߝuĕZ m6 &w,^KA ۠ s[@"y7 hwuiV(2𺚬 St*hOV(DϲՅ֝k%1"hٵrSg fH)8.U4[ة쟬eWoӇ' Λ5qS z ZKHsH2aQ]MQq/T9^#.MD˷ Ңnӑ7$D8kXJ`wfr(HIUЉB< M=ha`O @`?Y+,罵U eq_ so HRJnețCD.w$Y$ZB7S\V*_Eu<6ۍ->Ϸ -əqfF.ntdS :v(8v%HCxCprݹG\f^>3J'YgK8&F'$i+Mt6ӭb~ "3 +Z}6e7\Lh,Rr6Gp)*:]to$i[YgN-S BiR)CBJ/' SH72ı6B~|YvgMԚR;vnBb/4ے8VXڜ96Uuz8;*rHpS.[.6{,Pd{P~B+ W=V[N%bٛܓ8%bФReLr/"ZbY,BEಚW7n/ w⎧]}qTQX1sKaHGvwTa^+ }m;1N] o0GGm}l.RFr:,_9):{b+cj:Fq5ԫ($`CiXۥ) ƞlh{&⭵/I"Ύ9Ч_2~'TlqQ6s3tY.GT X~ࡎ4/h㿩?ws ~8Z݆Z1$9^-ĊLQ&`V`":%%YB=Z  {\AWК#a5\{O ppY&Ǜ.WP()ׂo>)~o61pTe_e:-,&c{ւ&D{MפPd !CzGˑ˷{(ˉ. fR~\oasCJxz03=JebŤF`3 &B RDH0Tz+ 9ܖAH0SM<V!#r1F\,}B7;lK I ż@(5.]<`;/\?V'G %u\##ky ?R!w>]}V +z*ƖxYgh[7s2f $vo3ڦH/SQV>%B/680 j乴rƻtW\ԇG]k‰>$ ]ؕ!j7d TB43#PNӉ7x>ɤft{;ɗ-,hx,,-4O<畐$l*ѿ=,Vڗgn46#97Vp 5h/FPϚJPA%RVZ Ie@/o{,+}t}7XsS?Y5ŨROWSciAz I76 I8rC=>%p<'T3zws3Ø{]EJTm#TCv,E,ެ:/Y9=zB_*-Axx1WtDB)1 X6 $Y8ԌJdؓۧTSssԽI{LC88G#AWZԍ_a5p?^hqXI %&J9 P6;~= YeIxL:y )pK0^G7_ l4.1nìC+?SE9MbwP_#nTm,(MB)D03ekzvyjo׫nN-kUCA!4B-pΊV F]IiqOmc_ȕ䎚`݌S{i//J!6#+;?WՌp[[ _|Imi3nMO=,?kIڰ.W'rU9ǦEU::)`S+GӸ6F`|`g(ޛki ODFթ|-4FKJfς8+@w\=O, n/Rr+x,߳_ }rλ~:J L~Y wL7#X,黹CyXj\cybۍ(=S{S6L)yi3#[۹{#RO r_ĆJIщQbQB~|X?$ÕFKx#uᑸNc 6AVfԙ63Uޏک$Y1#6{w-ꢙQCm-5Z*.!gۍGt6P:tbI-U6y`FF'gQz՝㟽3՞mrdf[+?R>ڮta33KBĉ3 p6)I\q X9OmN{0j<4 B1!Ɯg8ܴsMgb9ҍ?6؈vZ.zw,z>8L+wQOد/EHtrl"ܸb<*oo'q uz=z$Hy3ңr58.g9('(e)&iؔUt ̢?8E{spԗbeʙPLQvl6 pQ Vc<( 속SVp9]cW+O Ŧ-e/IE5{uOΚs5QE!n1l/ <=l+YiڒQ${Qfq1~/V=PuUKXW&<]|7Vՙs2;R+qY>0޵#xO+ \Ցk$9Ӎm-/R6\%ZEJڛciVF I3fnZק܈j Uo͂vqfR:צk'D! dJE<&-81犫ɤgOWV#$G4AɟSfbsSAuutG2b&8hsLZ`1 dEi_M$ #\G|h^yfZ]p}TolKցX?WZN允ʦ#u8'Qsa H5\u9T'D&!,Z5nu+^8$r@@2[ؐI\+E=R|yUL26h6;ƴp1"8/hpI`bϹlv8Z#:2v~d n פĔ3t\k/*UgZ-ab #%!?$rOf`?2M6O_{9ށPkVt90yUi;$8QCrS?s$tR^sg&^+.1A4{ oycΡ& &kX@Mgñ&ݲ6}G= bH?JBynQC7ֳvWEB[_D?RMi@A9 Rl9x:TŒZq2gQ$?Y^0EH3b{(;C}VN?7:&P$_zZWa3EsuG0#K\O}"ayДx-5unN9h8=ޅooAt^db}3TL|D82QS6#˅NCC$~[G)j0HI1X"i)~S {_\*JEʈ1rFYs-)COzȐ87 ~řPh(Y R3 eW:=Nq=ҙonK2u^PaӅ*+J&f$hV{6C|@Gߩ9GlbǖX[W^pF]p^-EzoY%Ļ4WQ>kn"6Rz^ԥ p$N^gZtXㅄ0b jXڜe,:nq@$Ǭmε}]0T7{t3@1'>ظhp?=CrD[?K^F[-oSt: ڳ\}B3mE2i:_vsY]{jwʽWH9L; c?i ' $ЏV4c.D:1UVN vOŚsNM*,j~ԀL_EXcBP1 BQ+yYMm՚5yY\~N2WV~gc%^: JuD/ON wrs8/w c|Ic]r#u[đI0L]S4kgX+cJNjc{܅kϖ$]yĈiU`}7Vٶu}>eB=" A}UDˉ|J )b|]\oŭyH0YX֋?(({R1_?Ł._2Q32sPp%9UEhtrO:A/{d#7?ك FZx&<,6 ;rn 0oT Ԫ{uO1Vq yK!MKHŠ)Y*Fo_BENy#)N"`3ї"~r5N84R}ҿd!qGvLe Ļ4Axys{WSDc cL8 w ة28yUQJ '_҄Yzh<3.UPl| d`jW 9^xl4dAd݀Pcsn%zw|(-wua!9]֔v kpƥDAÕkײ#y0*yR}z 6,kB ]:g_-h?`69 txm3t^U0y%90 Wdp aVշ}+1Qࢸ ӤaqA =Ѧ'(8)T[̤l,\D%=S=Lˌ>"+; Htl^q?,4SqXՏEK ߒr_ԇ+¸";Rx P-}ɉK`D*Rj))JWLuѵhڔm 16Ƣ;mlVņw/ |`+9t se7D:- &y٩3%]{/yL!RKɜ?wX~ _bp ?Tgiݏwfn*;Djp)C+>U99*Gg2MfTi4*#e1Yx-ٹ F/h!ˮfǔ)"_nt+nLP!UX$?cz r =%eNƟ"Nv@ IEd}f:3 ^JP{p"/\Ζh"N8=ay9R]{i˱w lO;VGO]?nK̒ 1!n^=е]3eVO0|~utv=cǀ2/|w4HD] vCǼBOG*S #HENaj1ܺd)nh^)L/ZX7ZjA@ m%o𝔠Q!9Q|黇^P(Zz\! U'PF>៕ XJ(F[</H,T 5Ç9Fw=3%ײVcd ؐ@q~Ǒ]Zgm=Tc5e5bdKƜ7\BlƢLfXJ_tϮ'v: @L 0<] 墆(Ez0^v3m_\3ZSj˱K%;F `i Fiͼ:nN[]MnȻym߄&L,&36 .@\Y^Y E5 {A, (߹dfrAEN]߿`ߔZ3 iI2Ov'U⨰įӘZaN@Qh y@1<ٵŲC&X/C*P$Hg"~o*z5m]'dC6w(d=fIe&\= Ar3 >b Q R3Y DJ&c&*?G4\@Й!0JC ҬZQcK,bS24Yks&ZfHf5|:]+Ӄng@?^@^>CJt!_ LYrn̵^f3w%Fx=Y`],ǎS= ^JYcAZq122cS̎_M 4k0,BfYt QCSpg_7̖u/˾G)`(CWʧi-<*23M+>9x (*>Xz_8 *H8և:5SZ58ҫynEY030*4TcQnjFhL!;\ht-%ǵ襶6v.V̤aDI!2E_7SVԗ(G 0| 3DZzՃ GFru` kûHoG$M1ȑcr+tYsOw<"Ű 0sF@΂!h3H>߂hDP0: )`O~E^!Av9Nʌ"| [Ъr kftC[]91/lCړR.~DF[GUzTw" V_87“hO".l/%ķCrSNcc.!B61TsD9A+:ƕB3{pmBnbs\ p]ĈSm+4N }5c^o*umj6e >3d/ ڐ'96vxĐG"d7Ham'x$ȡ;ap|sY@ciT$C+:@x:_)P3Ыچ`g'nm}*gmBQaI)/;>m⿪.I~%sD2::%Wmc8];I I %p( *\p< RyP)j5 Mn5m^-*d9DCX響_DX1n02^Ūw1y=[ P@ 2 9<>RGO[dan lUJ ޅ'|̶&C D=(i.ڊ9葽*;} M Y ߗ U'p4u'E :zZ"P3.\&!0HY 4O= [,H?(}ա?+z v=E1Dba/mIt"'cxIU\P fW9 hx"HQIC69S z"f2>+#DčqlTasegQc`P(iĝ@U>;xWD({\{Ac&qIg}ZW4cFy#'``Q ;QEIu@f ׃ꂥn3xqe9yP6Gr1-֓ٻh?$˹.KԹn+v"+^6du6bs"#oiE C 8P$G,){\ukK+"`)P+#f2 )zNw '걋=CK*i(Uʲ+NWGt_B9&;!aLXӷZPLèLFeVs#L3DX$H8%u>Z`S`B,n(7g*Q_E{Uv?:Hn*g}&6Ku6X!TWGF(|%sR_r$~jhwt }HvB8+E`Xa7 ufѽFJ}f.`x;)(ww.# f5bvKbhQx6wdn;w= n̰ʮJFViuy!m1AbQ1ؕ xn}2*lY+)Kr؜ޙ>̜e.:Σc혀 HJ ̭sUa[ƛ*]Φck)`E+}Q),ބbHu&"[',pTˁڮo=ddHbl{@; NK1u~ZmaqZBI)uh{ E{6fx`IY`\B+ۂeU օ!&>`Y㶕b/1oD}`8݋,Jh/ᑸxolL7CՋk4Gʎs{uC2aCIE}@' x?I)td0Sq#HKћ70 GwЪIFtTPw8=\@NXӍVz(n -؇dx J}*R?-Ĩ@tuuv+5bo@ .)֐tb G%AME=Z^ Te=dYvyfJv)-ӌGǕV!qƋ]Ow>+ :5"-#Gm-Vܜ,-aulL,Wb`Չf;cavs؀J(Һ@Ln)yxI0oq = 1!+(N-F&(NYOVg<:DRL}DDWEaWy u|+|IP(T7}- RZ%-MUãųpr"ŐO 'cNJ -/esYϯ}nR'tF-S/e};q̪NjEV@c6Cr @Wp6ij\}.Ƌb5 #3x&^]2¼ , K[Օё4N78աuН, rSɰr$ pږխD[~l9DWrDƓ ȸiݮYcy?/S:xs)H4"='qކq>%I24tqT:]>اw"[l `iH qfsrkқOx1:﯏@Ǚw,]#!iHK56r 4QtK7#TloN0:֜7 |)Y[O_/Hxw.,~/p^Z[VK Dְw#{&Fx8Y>"!3ypi3OP\^b3n_Zbjg{P,q>k괣PzE!7@F+=W~866)gE4Gظ`^ܾˊ%)2lv%8j61:h%p~uQ^wlc$ʽ"bO~zӰ\`=3H 14-&@ kѬ6?rVPȊZdߠÇRIB?mx򱊩/]ʙ?T?@ J<gBʔ,,$%qE]}l ]ЛN.+^,PydhVD_x;r[ebK0j-3B=N:-zQF_c@w_ ]zSA yGb<<!;ϱy qSM{=Y +vflcC3><MySdtDQm %^ky2@ų>'Vta֏!Vc |o.XLoLJ*&qp=Vӑ-Ǧ^4ɵZN]sS2 )؜e@dl˥ڣ'{[NM!$lFQ}*.KܢPfIp_L?q |w\7J-l3uSv24ȧ[< IP.*l>R'^.DжLF|2?r-02bG쬪L)3qy}TnC bO@?+rت]IJ ڼv9lϠ7~"~nVyt# l'y}61/dz8^NW<.;,z.,@Ixa仹勵 iJW*nt((p2I$NJX}h$3n!FaאHcxȄO|DcBg\.x -CNϬ[;;G?js fϘɤ+I6"DXw;,.zU_Hb쟃JjyE2iHF %qw_gWNс_\Aڇ8( 8L7b܋\惔F{}}LR=I|5Ċ}Dhv,Y&H>~*4&퉍-xM@Sg0Ur#G!-q"XfO}wc{ڜUuc0O-9Gxb9q+^.0p(|TK̠?,qs%H1I$7,@2Yw%[VU|0Wg:[}f ER4 G@@#ua{Er;9-iM(3Ȁ"{=ZE]?o'눨 FN]*BaxW,i| $hJ"uqnF |58oo/.zuׁ 7]+dy~Z]`NS̋YBǤU] ) 6(cÁR?Q>}Jn -l'<#tgwyO5VKG$L7eD~KvOrP}i5E]ZI#Vte"q(^xzv=-R[ ySDqcw uxJyq#[蓂th+56٩qS ˓A(v0MFJI<@;% q; ai@[(#.:.I{uy9j2( 3.>DZNQ]a`S9*§ڽ ݦ:PvXY '5KޠS!qP}6O0  7A֍Ty):>[d PYC~orNy_Rs1a:܂HJ|h(PL?8ʺ_{}ۆdٷAĥ~]n\}@K\9w i2ўD n "yn-(<' qbH,_19_. KOa '#r3MAK'o͢ծc eVn;R:YC4Qb1#Mpe`OoJG|9\bw  -Ib˖Rb,ĔP߈wRݤ!L&ZPBW4!XDV_ JF+%8sZPEszY}yD1n@:gM~u *,[7n= t͋{ ʓY q0\o,u5⭶,6;ԻE΄v8&P3D0 qM_`7 -#;l }2^%V -aںqPk\V!`ɉJ]|KW0n+H}a"ADF5 xrUY-wOʨvqifA3krw kriZz.‹v.yWXwUf\ ԹFX&?Ra6R}ԇ r=c6?[Ǿ6 @,%x]9*13Xk$b뀔}-|?sPLVVVY QO G3eVzyofk! rj(v#tr\C;J`|6.prP#|sk(m .XwGK_Z )BCasY` LOa]j#l.Lxz7y\iG%L`vG/漣n;8g0|%Booe3{Dr3+ h]{8 d-ѧO&6IFNoC+6@j8u+EN8S\b#&yi*мH/EvS \r,.xq3e#*=B1՜SV;@)yCupAzOٛR4O68t2y=b)OLc;|b;P,9|YD˕%ܼX]T3009 E>^{p`Z|}S<9 ̧ ߣgy$- h[8s039[JvH^Xd{ jW 9{'@=sY)s淛('kp'-1ͅ IU `fUs-8zy6 QP6B2e׹/}>L3f3Îs:3*-?I#ï{kjxS3ޖLN-H'ՄFQ#QK@.v3)^?w9Dm<"2n2Tr!X!RIoCC`)8q32/n_4ÓNJ)xg͊,n_tgۛ RwxT3VL<ëT~ ހ' WnuO.1'?[5}ϻ=^fe@ ^:59q>]0*J:5N 2`$Y ٬-ێ;M]{ "9aݕQI%,g+h#>~UX'W&v/j_`h)}U\-Nǁ8TSOذ3|ozgZunKn!3[ Ӎ)BN{_Oؾ4r5j`OSư oQp2Lk^9S("ӡ>g"X/gTGv+ʎ8 Zb 㸕M -',tVt. x \e̤WDh&hzoժ8gEF/-u$5,s%+UEUІ.e[s@/JMIg:gw\(f #fiwI/*gwݴ=Ί)^Wjț~7S)>Xex{a(5gn7hMH(f—/o/g/#p=9qB!5_Nj Uj>1jB鮠t)ϼ#>a,ѴFye黵VIq?#y`rt_o67/ͷ0Cs`j+$W` Rs2oB+Pl(R Q-%kJQ|爤TtMwI⹼WSEvO1?fyi䜥,u(&w{ZgWp#F/:o;/J"bexzQKӀ\IRi9)\I?7w8oJAB%%wQ.UO;r ori~g7yʿαvRza`:,, jeNWŇm\2X%Ѡ%CמٓBVrݓ3#rꄎBkJuha?ܧp)I}3F+UH |-kc `_,)A!&"(+r+.ULj!9 m7 oLDfTp8E`Ӳ&ԌOF/E#,9C_[v'~S4_̄Z_ٳ=/b2%耳UMSef՜5/=6ϝ}C7^rmNWj\ot{3͛e5]#U+@Ό_lTr#cԙoG&hM|#+`֖l,^7 Jj+[{oXԫ֊D23YӬԆ~mԿU?^XgZv O,J@jf4f]yM U mUVNRU8[L}eMdDo6վV|{z4NЩ'ߋۿl집 7FELncg@`(5YmaNFqU)jftBEjL23Nm>˗NiG\:ےDRM$~3&峌4i >U}ۧigkGqAU~v}C-„AwC2 V)4pYӲ f I1ikoǏKgTn^ӹML8!\2pgx0̳C*ŴdR%ZZGnΞ9Fn|@Z M]{~1J,j`(w۔D-]b 3SQR1ͳQF[-eO>ݨ-CCؐ{sA$ 6PV{9Ny$ȑ{3.hfķ籟xBG}Hwh`í G<͑$W-..>tP%)Vѩ>]sG̻YM;1x \ry>$a<'3}~z1p_튄+L@P[S}d`SCniMV 03?@|&vG~e=fak~~}E` e@--[bi ,H+/8E1+U Ͳw72Yg/ #㬚Ta:aCOq A2Wb>y*NO]@rq>N>D_ \cU9^P阻[U~'$𬃢1R{sSץ#`h#E-k3~)˚i5VF?P{OO%-a^hE2Ԉel#6:w 2RWײ1Xrl>Q\FsuHy-P%ώflсvWT601;.g[x:FKɊ^AXt-\'C~T@#J♧"B9ufq>jf\:h;Y{_|i>b1`QFמsk]qK,^PkkTǥ _%òBƊ55;0 ڗ+ PslIk b~t`%GC)hL@ml]/l~ubݼV3]t^,0㼻`6k@y)y{AZj$;{Y>r9#[)Gęcyܡcqb.@o,~s A9<&!~^(P@WmmYcG7r7 xyUO *k{p(Y.R!2cmD,* 8Qϝ ]lŇV類4m&],a9K!sVujneih Uf&xmDVKV+ibIiicN=,+/Y+nE)|$FR>%f0P\h{; UApb6>9D#t"/R~q (3KNiql'vҜ Y0x 4kzрQb%k0m5X24vP]9Q@`-+% _{4ڻ(NgXIϱ,mIo25sTyIcN;Y<̴wM<;:M@7=+`#"%`#s Tyr|J̅ښU_^ܤt\Jx=ȧٶ$`UMNJ I>MK,#Fz0-E jj5-t-sy/]EPfDY& +L1cqłx0,7RŹ ;ߠ4z_6]Ze ^'[5Rh(T,CdcFK'H\hةF% >c႘vr'N6IW ;)U*sgׇ9@Ui} zX$?ޭ_l ։.dӇbS؇8u OZsFC[x[SdzIA W%Y2>}D JLJکV ٨{-X|@anYY$$Uĵ hnE`4xطy^$>Sʋrq/vt*5i`5&ce\J*J01hs[)C?}:B6 M|N9es6=1k,h 'ƺX/$E'+0<. Ai)5m7ޗ-OvPMUc>3DEogg D9)wJ%M{tMdݛnDTsRȇF/0LkAEa &7. X6qً:N #~%Y[&C8Spp$A(C Sl;T4yicoW$ΜnRb]!zD#5ըnB _Sτ?O5hAڠH#%p:[eKq2Q=DsӘ,R [f5qyr7{~B@0#Ƥmd$slڷH_)LWӸ GqdDzH8w~}X+!CjRdm( ΐ,_ũl=ZHRRL  1mEf@e낤4͉iɢf׹*Je>oi@F2KtoHP N*a/ta1Gqu4Ouz#h&OjAhy3bt6b,ˏEr1]tΔžƝ%F'HKb ٢HzCNV9qP=1K7{ XѧHS>L**{ lM/zqqqew.?'cDŽ'z_-NO6؊!I{]7^=ZKRw2!GZ9qfZ- %~"-yx}Sўyf\rH ћ iN1W!ٝ#JZ%JPK C);;)17"W\JL5Lz`*Eh!\f9#t4<}y,j@Ͻ)Y*k&H ӡBzKVZ0zq+QpS>3ZWiXJ]  T w\m009o8Do(uҾIcpn I]NAu {/qq3")` By;w9&®f ~ S\,oj긎$-fNַlȳ_ׅb'I"2R}u e64$ VuhŁw=pףnL/_%W|38iF\8y*Ҷ*ΪϚ= pƅ#t`dX.)BT qP}0J2JOoœ4/h f5¶XRdE%JXrc o7{$]8/"lh9ezx6IZq6ky2Цf+C> = /'׺heL 8Xx2Q*k_X Yto +v F8= ;8pxx> н!a?hs˷]گxbӧ(“wRkyP%|i{o~HTc3a, Jrps,Sp`~cոh9#8n$~Bj:ԣB.&J3 @xB*"1icx ՇUrڒϰ!/81lt^"5@/M9>q @M*,Zуg[VӍ}4p0 -Ɩcn(R/*'uFK f M3]Э|rr.h`(|!nxUX{HH3R~8i L5O4o@Uz];<#5%J$_fX/P - J?%1VXoșԟj s|BT]_dLf;/Hyf왾ZE\cst= _8-c}YYqVUu u)u`]Na18]l/)趭r!Iߗ>3sOh!72ftؒ~at_T `Wd2TFlUb,yi΀\7lB&kv+8, Q>F~/2z>N0@cYam-A]|z_ 5n'A7Ps!8={eA4\j0CY>M } 6$?[uz{Rջ=o:WQ-d_hA{n`n1{ }vVp8M;rhYKy-$w:/Mj)AMLլM 1w:>4z ¾Ů { Zq%~ۉ})\}FaQxk`DW`,2!2LWz:y^G̾)7ĺ>cn"? ba zDwdI=@ضL{rMf`66σRgf2B8[8rs׎Kq+]`(SpuAyg38u׋)5b=E#qjM0 C6Ȱw+µ@TErۿz呉mżW>/ mbC)OWN#=d7eIvi쬫Ơ-J'Cm[lE%8M89&,md>7,Fn o$8 ^jG·?T:Ä鮓88azPAQYˍc?PC_eeBۺ畣'zZ{nBai#Jܵq:XXPi%%O.qI/]VVr*5,<#8/TА0e%B5ei 4(ܧR=KdXVvtxWZrZKm}|!*;YZ_6a]{}.c51¦gO;0~̠U=]a%+ WTqIsA0t}k pfqRB8}=k io @}̝]asTûs `bQLsJԚ`8 YRkV7kx?S 9_%aٯ;o;KQʾGC临F -G\aBHha,fA!hV\P5A8*2t!0 NFкu2typ<Ć F %hcjX(V7 @)}!𠣲%x8n]j oȩfPoX,'Vl0O17v0?<'q-\ٲ7'l‚3E2yq#T$i)><&w[IajWWgn67DO_O/u³tT_}!@(֠sie:/G746f8N1t>ɢc%T,vҬΩ,Gf~HLR"hB}ߍӽޑ, Xxk@+wAV8hdzqN^ۑ5~a (Et*#nw3`1 OY(\_Dwv1NvRKANgqiyEcdOuKWHĉ3/YBf W*'Dn vGKfv/AIQ_(*`ތ?/9S }"$'8=;y (uDcNx5DcκQT`U=P{WbG̕NH"xTIc~qia1]Aޚ!9cG>[qϫ`i VN:]3i#Xx vXmc{+[-89`,|l-薡?{L1k`lW$0cYq&pYLu(4ȫQL͢,,YB DGm?6n6>Sw l{P5"@J*vkP%u_n 0.;u-{3^v8EjYNH>nUO4TqH o: )xMuM1ï+\ONx%yH]\=rt3%ZWg(ǙD\eByPx?klV|A 's8A dğ;j{?:㺲^K]ݤ፸$eQHA_ĆAMK߅m)@Մ2z\/tfG~_v L{7(`0bپ8ԛVN-vv+ڌ#@v#/Dy޹}K4 2Qa85˟nG0y=rme=eR KƆY½xm\Db;U8\ FAѶ!b|`K-@+z lN^yphHhFs > ?^@=+aAqƂM K]x5W?V K`M36gEs7LN)6!M\_қK@&/Fx3}ŜIwR$)8^vW4|zHZC>J*pEZ0Pu~u-vuͱ6覌:R86n N<2dk";S=\M Jr3dr d'dcö݈jYY>G$+"̜f3X,M ' D0s-w M!^1_e4\pSF'EX T\Lt/B/ DvKH9Rs>)Z_Z1G1*6%FݘJ)2`?ͲlB?vs`[r4IX?"ԇ -2.q+g]1vSy˱46xVQ@r }^eF*qJ ")6 ]^E\[u.LyW3s,Yխ p-T&d:ZA Xu{B0kck ijlq+aT-Y^W[ĸ#􁯆Jņz 3yj4'PG&):+ۂ4) Y\}uT O6nj` u[__ ZyOҴ`XґXek{T\I ~^VIɡn32Xy@dp Y7C\jK!R1c4=V1U96OP4e'tyT4t_f(V̳,k>,RaNU q ^3)EQN .C-7#(6ԝb_L:jʩ.uê7ŏiKdO/W/լu^"|Y L^I8@Z 2.*:tp(NB};r+/ΘIP#t7=!Hk}Z H<<#^fSZܐ|N˘4G8*e{e ;%>g%g2[FzcϊFh^ !maVvh< S!Ub9S61x$q4F%RSA΀Tyك(&"-zVDg&P uv*ýv(S϶*}9WPv ڵ_7G{moօ',+m/֓/ jge|&^XR]KM1gO6c@/=N1sJ )*42TEL{XCL=@9w5jKSӦX7n-q,m~–cG{y gno )1`ah0Be7 ?_ UY}մ0캦\X8~Zq;w:Ev0pm(y!kos)'U <-^q&î f낼Ll Tb͢S@bs`6Z7=F#TDg*x}"j$܏}ZY&asZ_ܳplHxm168Dܠ4ƙb^^ @hr+fut F1d,f~P{Ѽv(Ƀ{0m^!G]]@T1db+uVQCPˁ"x5ѫou@wKHg7*Y(g:EuFMBj7Xce3KzWy>t ]VդIz`Ǜ'yǾ xC hf,lH3Ï:s,[0*W迕z % s)J;[c/W-xh}2yְgMjT{&E48`dSp< BvH_ab+Dټw쩔RLi8*zy\0&7b;-+Rj|_V>ldڲAV}JMgS 6Jί/q}N冔-yk(j?2xU5rU%+3üT nޮۗW.…<Ӏ!?iЀ.S߼~D =.إز\rj#%@KYbn_Zάt~ ڢjamt!^T9Ұ69ʏX[F?o %id8 eWY8ʔes];ΤgYG vMүTf}*,!  @.&@ tێF +V6ǎ\,ʼ 򅥚&"WW_:5:\5DO'E%Fà޾14 `E6E,9V ȬQ"@,3#u!K[W,K_h4 zDӀ&Ĥw]OyJ<^Mk6!\xRT EiY+Pl WbzB,55s?1 WۋzZ`$s2H q*Mo+NRLp*lH_eHaG'N  Ecܟ9O 2R־ZoƿE cpa6@$ŕ~UZ)'*Y۵T6f 1 Oe_d&Yi,l%J#<a:m> ^is.;!ԟ~ ZʂSP6w%w?`#hT 8=`F:hw6ZX[Į"pɩ`q/rӓr[3A ݇ٓ;*AQ) p44oPJ{n͟^Ŕkj#Ƞ(4^`!+Ǧ3L00voDSX,Pk&YX٩\9z/QJ._r9/mC1oϟf\mW+&A|1Zh?׽[fIPztg*3c+HشEY8mqXT%ҁAw!]~QZK ᆄŠU40#U\ tSP-ګyB10YQ?!!3E'48Diٍf$7O<2OC֟lJqcλ+ l;F9`0X+./up!(>>Z+Gt/°[jp{K,Yo-M*8#5`3~*ܱ͂b֧:(ozZ!oMȕAdR܌xRr@r2~_յY/ e0X4jϮ ?0MO,_?Mc;BrǓgo+(L .AE +'S0W/y(_7X O@y%v8)~k/mvK X&-+ $) w<Ļ{ִaN/H4A) t^Ջ!)Jh 7]d+\a?rqClX+e$%k}"t^5~BS(ge:nOU._eZnf`%Sb!]r rz\ xB )RQ9g#r?jmbe=(*r>P#׉&G@$εaġv[JܶL x`g '`w[溣2DfZ6Õ؉ڋN%dMKϠ&úz0[w{9bwWb\󴟋8JM G@4X9vNz&pC [yp(LP$ !A%@5ЙNY:o"{\ %NtS6_8npйY[R~F\j妛? El4#IpwV0xUi k_3b5!-  Ӧ=& 7uڢrXuΙ&2Z *w~7sC ۘ aXzEx y s`aI\3cM_[U9`g}بS; (||k$rMҤO{L>]gG-yBԿZFFP~-!yØ3 %eڠ9@‰jBg Ү׷XN6>w92f33` rfRul^}HX"X a!>US5 =Rib2FZdE3w\{v{[P dyɟYj8?{E z+8QVD4TSEF>08֊t`4X aEoTQtp4eR|ٗ&؆w7GcIڜ(Ir_>f-k3s|/_u;>-FywT> -qv\/? }D1} 97Ws[ew27(Ҝb Ƒa'Ce$h!,?hXӦF} vGaa1>1Lj.m V|0Mn#+W;ߎʞ*M p[U{gSiq5F/W# |RELC1+.P4 ǂ,?tg gs7sY{'{4:ʛI$G[uP@}Et)az9N ATQqhskXBebPQ0n01F\E4֦WVB#t<պҝ52 +;qsUp?ԭ&jR 5>@4ͱ3**= ܺ "1>Ce񍗅D+%4Az0r.<4ͺ" Y!Q %2R_zXV&LH^% Kb(?`'I±3\<Çܷ(fdNb2Rc;sxg:n467u .|K '@KsTOɓߍ:yq[ gU(-BܼLǮ*ծBρi+ ;޾I _H8m^\ {3cE/26́udu@5H,'hM?ח 䵝xӪQlIFZl6VEp 8_»<{u h^gXiM .]ZIĬoeOVw/DuQss)BUNf$>j"hs^?C(w"4O%E8C9C\sXD1d: "dhlp\~e&Z %|\:"VU]ws6xQmP zTi2h/ U5 A*H"jatӯ*4DϔYN]P-NҍcHLPX|G1Y&{B) Iś+Q_ܫU]gFw74sYgAPOb,{A0Ag(DgYÉm#*dkK5q5K#_oo! &FBv֟O EEtgk>}hv~'ޖ p#c떆ܜ)MSYOׁح>]4nHg~>nEAeh8gz > ,_奂 7TQꃞF[-J-4qs^Ym$'泋N ]( L%@I@N~)>@O )[K# 4>Ю8Zg/J"(DӞM3/jӁy0i + ʗ6ۺf&)W`Ծ߉# M5Qe% gAWOH` h_P"n K)I?cٶiwpwC3N9}OSᒳ*iD?;G:+(X ĽƮ/|4%7'|Z(l\ʖun+t'a3F`I>4ÂH5 P#uL2@i9<޽T^wj&*IX]]n42i,fLat#F.'A=޹Diڅ/RO]-gfIqtȺGauGIp"T;|N" TW'Ao ճ~:@&'aix̕&YѠG^S>JfrhJ իN2 K/Wreh۲ݎa[fIb(}=MA ˟}hVN,t[{ 1:cafV'"oMYmz*m6 cgW5>9D]*WkmW=5čbPCԙ񾥋TiTzaAC!y #Imxk )e;Mŷi]+]--3gQĂ0O#é4!XؗbF!m`ӌ5Ⱦ9uK>x{Tj+k,Hfhj{&s8IYIVٴX*sRg~\p_,B`;McVNў[vش;Ea*K|z6%AlO₡P'*#k1qM|tK@wf(wl7熉L F=~Ќ4}9QMjpĭWS$`,1.v#{)hoQQt!ݽ5ÃUIx~ V%u$i]'HsDc˧Sb۬?ER/(6-s*+)2ח\upeځ1d)*zϊ3 fw,؈Vt"5K'(pu'y9mФTq$SCM24r$lec1jpn)qXE@J'P${Tij3.;GMC^M&; $smHHno'eV\qะ\!P\# zA6 >%K"]tiU)rѓF/hN/<㈺.bνn)4"$^Gv3]5Q$]fxoɪU &ER5F ekm<*v߲X'?I /=޿JVƘڝ%?7X{.]ѲJXLяdhObFd7,Ūߢy}(Ğ!ߜcxҤC=}.P zUq lfl( F]YQ.[ЬKGbmwKOߚյlhr, m x" IZ!:cs7 O? p!UUMr99DYefpN/́o7-64DK=Ci䜤?А$T_fx+E m- }?ܕTkxwas ojߑ!/rz8kpd+_Xvj(Rxxw,E \\ON y&qk. ӏ*:Qiqg!n*'Ag#0(w)BIe}3J[fO`]'/:+yXMݿ/;UM'}+IH+d֔GGzF7Uݪ6E_mOMiK(qJRWf |ap*aϾfzw hbKKV3&ʍd-TI>2Ki28Gj Y|,[ňd\cnU姧ꙋڋ9qMw Yg?1p\Գ"ΫK09CNm>8mD]0g\mdI MhjB~Upzk{ 㖶7¤@b4XL]5>ߠN @;HL%0ie/%(&04fFQ=&TJȗkǷl967rÖH~rl|g A>]C.[4&FR :lWH0g@VHh:& t? $}0v*)p_$=.O  ̭a]M>띻3@z<:A,O𵰾w;_> }HႨr^r-dpIz{Z0)8w eى 'p+02ynΈ̵roWY5{03XLwSKLz204('55V߹"`kVVx5S:5Z$ZV,X148r)L6#e3?֤<ǵu)%Į'8vo$u&[ &ÊRYXƪ6wQNָP.)جt>P.* L,7%wN{uvHEi{MiI|!'{5Jj(@~WaFԭVTʲ7Oiΰ5舨z4cg7t,5K'n0ܴ%rKvrF)8z ΐVK_ogzFקpک荤&5=#j􉍩a]N9gRJ9U]z<ВPDŽ吐O1ݿר!1fXɷOIlaG)cuH Gպb#b9 sO2T!(am'aa̹S.[.k{F1ή켥sV"THlE-ϔN|Ӱm(7|G>EReQbT[ ^ /u 曦eDQZA.j$;CȭNdfBl>2ר`3V/xWݍ TLϻd 뇆܄*:DRK0PsxwR]{IKHmb)nmWo8'Ԅ'kfu^ht^W`"_وG]o/;{WQoŞA>Q,E̚k`HSS!닒[ː+aYkS;Xa*[<2=j̃QApxw` +2@BJ̩ܺ"51:] "6Nr݆"RZy2HC UtIt \]S;i5bƜ 4]i$<Ɣ5B ^dcKaDµ-cʥ%ۍ x)bRW=^d5_NwOK/chyoKGSBSUl. lsh߮W- /y1)N𕧹g,tlݢAJT#s`flmc/B19f{*>r>)IZnuxtSUSP4o]s_T(y`ydP4ֈ#WNu{!S;jw~CSV?j u eTtTm JBBXg([]M)OZnȅbMT7u8 4L.1P`087N' `A5֌QZxfh:7AQfGʬeI4b{-xso]F ʹI'*OҺ$?ȷR(aƬfU*L-8]_.} 莣O߈̤V?j|˔=cxb0ipO4eXabG? = Z5X1Tg8*ij߻T^]<5v0#|K_"xxP$yn6?:WXe~~zRo1P "Yw >!t#{]ZW!!K@0Ew{VX֮]5gn6FFQUq=gZFч}ϰ5-L|N~S,ckW1O(,TBb,(L_}m a_'x- PR%S?Ԟ7C_a9Tzj ~OH|}ݓ;d##h9* +*YG7%xݧk{Zl2ܝ=h W'Dˇު%^ us+htEC2wÛ0䁫9glT!A5aD{d_W>,`-})%'fupQ-#62(s\c[x&@!vܥ ޕmU0)}e'h ^S3(Al,E|ܫ}}p@8f^0wG:g$֤S}0>ů{F^S#`#sqJ3~65ܲI d q1^ck3/fG#u/s°$Q V:@n4$!@ pui*1q \<A#Dg9vNtR#Q:ċE!U'o<o%`ԟGO2e#Mr)Qco U#ԅb GețNh|5b*S_)r!'k9StB1e1O\|Ow@od*w %~KS.o!F mxsiõ^;£%Qj>u rs5T?FXϮdA8iJ=R ;oi70iIxMGMZUs Q[.7D$ЬVɧP"S8OZ[ S9b℄r.0NR7Uq7筂w5bV= v)Ԭ¢S?r0i|%[Q&ݤT<Ā^RŇ-\ Y/ۄ6oS sBz֘Dc~lW" mr1*; |ހ^v@d^B8l K 4B mGWp> āpzQUV8*iۿ{ìq:e,M^ ;ܤzg&UKoU

;P$z&}jKiZpCAL!TUuc$g0C&_VAN9c?_72> ~h΄j >5K v7Qn'MT!7 p=(Eʛ?9yB9v8zzp.E[XOILd\)}4]3MXz@"e=c҉:qb*oKy3(]T6%, /\{'s5 }`.Y#4BO/LbyPuZLe77EP=q*Y@Or 7TlYX-4kV*!RWtҸtڢu}boHpL6= v0+E\xBZ2ə]hh(.-y}/V!,`Sy7^5P/=,?XrvS{ HT IkFǁ$5a"B`?=>ޱ밶q>mX4Z "+ΐWb3X+{ %A;; &{B6VoB!H|K5j&jf5%ba fqvC{ғ3!bVP(ai,QG :Z~ޅB8Xgzbh|pM1r ̭\?7|^}g@n؃6o-|Eb(#6‹iskWN0$hoԋ[L6XTI,O\>3 g!Йwaɫyttu jMiڝMޝoZyzN•PN`zԞA`vpb3m,r:wmi⿛fn2<}P`WF̨VM1(x4OpW.렗 Ew240[ ^T#B*~:n)`\YCh6!8@UW%DQPRݠB9+!,B!C~vMB y,x6aʚ,kj阱 W1m)'xc[i|^{76c˕IUlkʵb|%ބznfZNҼPbqF=L&5(0i9fLqL:BBPp$`1<[ťX1l\9)Mx޷o$JӒN#1eK0!PwzA[ʇVV A(B_DY5TezS-Y `TwLjp8?Wa߳3悋DP,vs^7 Zi|)EIݹ2l>#CX,1&)se(,كE3OiJh:z4jF8^7̴ʩ/Dς$P 3;e!J%D* C)@u8KmGQ6t`OoS7${TҪH$sMUT2)Fh*,AsXFdOلLPbfʜb8Pʻy[ 9N8!E&֛ =/B#Takys!^@- 7E^S[iLǍŁg1ݱ@/р,3nuɱ5n5)a)RBҢ1:񑙥xvik~&$qsOB׆^{"gnҗp(]٬)LI^unQ)tjYX|h,%PŔXP y)vB=!nz|p !\Jxʌ~{i?TCWI8U?JfI̫-B;ݟQoJj2+) k%U~R` %o,ߴ:^=,oC)R!I*-cDN8;:kcD:͇7菍һ;mvRƫz {=H\׀kP=2?Qa??ʕD=7.mU@  ڛ]pJbMo@ G @1^<-=`8tneP8 mO?k[ׯuY p-?@I9OrVe0LFTfq9vUtx!6ؖrz:!tZ] 06ŶH7i6xdgc<(1='DH4hl9VmRv=&Q|vZxWs3ت,PJƓEz,R{Ûvĥ1GXC]҇Z.KHC5U-iPE\ 0E~v_2qgA{WtTɤ;azVktM4o@]95s?a(O # _W50_G 9*TƈugV7 S Hdcܦ<u/u7I.]c烪xKZ@ԕy-N ÄB}Α4oQ,%%~VՍKl~ O%F2d5:}+/o 7T;W)jrWu~"?h|*<@;#C32*@Lj;MroAv]'TMFB}q oē~sު͇MǤD8KdA]HyWފOY;Q N &]m@u v=}q'Ib)=al\'?z&0k6,H!s~T/)^iQO@k9]ꍂ&; D-V7EZ?pI}E5hdA 5I uH(r zx`CXdoW8CjF4&SӆYB^,p-?W]~Vgb+Y*R6GmӉ1O51g&cDk¦FzXr,lH0ug+)\1ɷՊh# ǁ€Q0$ ]zaL{Dڬ_`z3pN}qQo2Gե%\F{*vʺ?vݫj.{ ' s񧒌>5qpzDZ)^4*8m8V3.7uZ,HESn(-K[:nfFbr4f4xDc¥@ЏW~pN2\@XE8)d_$Vr+_g`ՇY8 2idN2dLł^֤,7G!kc c3XVuW?A5}'WH},-UF'moȆ$ rc8gh|rBr‡UCHAT-RJ q2CFkZ[)uYa% Up΢ANPN?l7m`E11YvGh@D\=K}IJ |}8p/fn@=94d>>p'5FUQ&MM'@ 2m]L*0~ɪh0$hۖ#9fQn`*|^)"pwH.Iώ wC=Բh#P`RWv;mТK_1E#%YsVۺq>]_,j. 1b;tـrvnyIc9(prmß4rULV}/`gf;d&Km \B?J^!Ƒ._t6-} dINqV|Y"$8kkZ( BYb<$AӃ12ȗjA\iU-3btIl\ӏ3')I ]vt-2W%xQhn!\ZPoa5P>8ܽ1܏AzZ}&,vǀM> 'z7򞏏BX`[)T]]ЙvJ^s.=[erh K雸R@Vb*& ϻr % &Wp忶tS&ꜵVZQ쟍X0kKvԬ7.TU _:ݡ&Ú'.+aVi 9hA^po]-b7/_Bn rJϱ@-L -$?<4eQaDF<g6ػb704@}aHnjRԂr).̟;3ͯ¦@P \*Y OuJ3([ÇUN?nʼR\M%лmy(?OIɱjуXj!˜h"($!F$|zLڏy]YPQgeVc!<:UQ/kvȪŜ~=>޺UuViuGqGZ6H~)`m$;$^'SZ4P5^zWz]`,\p-Py291C͉?Rx PfPNV!|P'g-ڡyd*mW `,KJBg 56$<.2-5C\g $UEbc6xClz6Ϧ>6w8\gbh"0rks]B H}ʀ*/<_ AH0HZ>7f}:g^% e`Z𦒟J*G*K?/1;PN9M |s^y臙`9뱻C1#_:y@k*`aG^%@dwgũ`xTB͓a:QE%PnX6A/Ln:Hoo凁g:{խr?g$g)ku-|Mrhe}OmXyN1ҤN0`l Ze7HM^ү,\(_yXUSuuq}GLJQmt$3V}_ӵ 9hʐ-T\T)ƏƯq_s8N5ӝ hX죻"I̅qUd,E"rr"^2v<=bR̺/ }PBYwQ^9F0m'qDd6s :2 Đ -z!ɜhVֈJ}01Y9Vz%O],iWLTJ]Nj`v>+t14.4{u^chM?:M^Ig;е[[U@)T ˊ; rmc 'EpܼSej)pY/j6԰'7cv~tŷ[3P9F]EBmV%g;&ZǙ"$_30Ol\ ;o Da4quVZ?,N`=4b!7j`+P&&8Bx۟VsAmR]4+ ~i4^9kr= ãNԼt}즵/'3w]Y\ewٛEp+jQ返[9°/ϜY.wSY'gND_//X Nl V@N}?N赭 ݁3 ĭuȚt4t::>B1ƣrOen۫=u~0jhyv2@QZ]j?ϣD r8gˆ~1JFڝS Z02nxTp%1r)W+]G4l/.kRk_#;ؤ> .oDIH96Tٮ\ %So,>Ue0ўMUOU.HպVsxAӒT,ITn')ᄌ@rv1rTK ]s p0U YI_W2deM WN;&uPB"?ҬA% ܴCZ 'a&-d(Z'' H%젧 lZ:#Yj5l{h+G%ѠI=$3 0 >q XC}a8ʓXzcvx2ԕPA9ۧwQ'yuCm G0nA|݇y_7 gA8"M}Jp!Q}ђ/PZ9N r:b6-KL{LCanZK<=$`X9q6XÔI\$sRe-Ewβ)h ޷ yO]sD;o#{5)xmSf\Γ]C5P1ށۊJ#e i4Pbݩ731 .&y]]#@\r\qt<&< )vZ^ Fp\ϟyq[UOPr&q?5=N̸ RTL ~a|gGtM-!\P="@zƟxewv#iaT8J0cYYyèSvn䜗];%v|od ~L.WK5l(~ޑ7# \eD3 S:~nC%"Huq42uB%R_}ѧP:bo0opjXȹR:@F]>D'ࣲ%Ø,O쥑D܍k9%HsOΫ$*<ݒoBByU8w^MhhS8'O[\ hg-X զѬ̀u0%1e^$SaA]KeVk'rs-%,Hi+{  `^e&Z- a5Ԭscr7kt{USboNU%)5rXfaYA$wohˇr{aK:4 L| smW,a pxkpۇhk]Fo_d23 {Y; "^>#cܧeHo"mkw#Y>l>$g z nY2r$DkKAT" MC~<|{uFcH7RSIJPx4EaK'35_+xѤgM φf=/;;9'cW)(FY`8>Xs]Ĵ$~a0]k,vLZ_wI1 HnWע(Hcp #.0@dA'5H Òݳ<Tп]3 Z,!}*АB*dt rVK &^QQnIt%#ݓGŴytrIZ |㜉.3 X֚&$*sTQˉ3産[qeFn_{:kuIj(n T}y"JkfRZ, cabU`Ε! >)SGnרϥ+X/t"c [,l 'l"=0I߯Č! ʗs{-[Tɧ2U*[an`2-cm.{öw6хF ŠQAS7:ZTۭsԝ&AaOď=mqe(jPEA[_[:64IpM:3'Y?j"iܵFovbfA4 c?+`!*O=ʘ4IhwR,"I0IMrGgyBڃ*C *cq[WzKjݏ0;05(-q-yL#H 6\qotXy=gbBD{1!8KDž.av j{;WFKOܣVU0@.⭢ṊvȮN=ro|lVYiTppIgJ'xM ]yKѝL/ӑDM)RM&Io%q}C/,ǀ.7 F@ .TT#W ^_vOz3JB;_}JQK9 Q x6W tr ܆!q?@i: /JX`knϻ @hzQZ| ǫ:wge=|gA%^C&J4Faq;.X~n/SS!ؑ͞^ƺze<_a 0 o>߯I8*R[ب 3siV`΍)Xn׫tYwU)TTXLx\LY2NMH 힦LD@:v.hU mJCO] fJ/l/4Z`" gAH{ONiAn{)Y[[2y/"45 Il||6~L5bbAZNSgnx z#>4}|$N 2IbB@ؙbMD^`_G|0ѠWRp*UK HRyd8jS力iXzv}ᦣB&txni JeN+ftP}~Z5 v>N\s^kM^REBj dJ4MCxIm>]_()6.I&6Ωb@f5#=WP:46osvaa*>^loWg-RʱBvQ 7N0FܮY |PZz֜P,L $Xt@a&IW cUg?3FK9~RILx)zup 3_AjrnLhy)@lj)LVpwB~^_Z4PSSyXzӜmKD+{ 2qHHNH2XoCATU3cah0Tr >)<⒗b\XQ L P CiZqB׳U7F*l53ƥRA kHJZCnpk𜪈6J cznii,S}dCOU7BYfa S- Q@G; JA{s_6 ůx7+6BC/Yq+6|72RKv!m ˳78r%7Kپ ۝87`I`@ ٬× &,"P=gPi[-`)E%Ÿ9iڑ&Ypl{*W4p}f8P]>eK! }9"!᧳8O=fk>h!W-ZH&]XD* td@.GlToDM.=:?&G2Vmnjfq+L LC!FDa!l 1Kp|^E]&ul'y~g)[{^A[ \9 2UIdth֭vR6%ؘ(Y<" $ߧ OI: 'laލ΢&ILݟ0Xd/LSQTJt8]Z0-:HUd6) mH1Xvs<sZ.SYLj` @F=[8|l896+;C_]MUjz4j$瘫ݠJ {K$T35roWC$|J7u ɧHc2-≔?n idzF+}@=nxXǓܻY}w#p9%ͱ..&ƪv:GXqfjCgxz=j v =}žRDM `cM PdnCWTb0!*ńH9Z܎ =/l9"egN*rQO(?N0^#gЪwE f$6op˟$>XtP~O4xppwZ jDf)eMN:iL 䚨B-:3cdnWv9O J`z`b>Ky6 XS)fnh}=PЧs\,N?ENE*IŪgstO:ݱ$_THbĵW d g MDyv#oU 4ۑ RKv CY#s} >H)[{ 9er%VFYSC-dɢW@'uǖ1Bi䔎>ev m8E]5oYt}' EaߔAdT5ޅoL \g[KQC\@ʢG9,Ty`#=v{_h>5㿏6ʪ)'J+n0-lTbtv*dmɅZa&Yօ_\"zJ!y3C_CAM Lel2 Cz* v*5)]v[lP\y9l (\2yd&ÃG܀}}cnŷ O#W "EDmĺi4: @f3m#dԩAϘSWt+[ބTZĎD ȐDBcej}8t7 < Gΰ(7ԭXqs)L`Kr!%sCZgA) dby=t%M3P秭=۝! [<`"F~莒Wl#A(iR L}h8Fo= I TQ(D5DꝗL k +o\E'l>evl|Jn1wU4j`8$ *49IZ5~pu1y00Tw I[ vAq%°dHԬڜs%pZ*䓫RR|uϊR0JwHٻ Opn86:>1ݖ $;lG1:yo]  ~i^rKVsV_u^[9K ^a7h4eXۊ/@ɹ@p~Y]5 lT'#/:xECO[FTOXdWmpFO)&k)OL& cj;OHF®]Y6*S Shj3ESiL:6Q^zEV*$Zփ!B&2qL4Y7;p]&Mci?f&ah!cmu8FQh&kk6`hp!%ŕ=s=C`?@,nvSnG"b$~x`6`2}݄Ϝgu;n"z%kίTo_;*yz/a&\_3Dm+K3PT.lU)`*8[9FGAzD˛q,JH_5Qߤ[jP70 o"=U&S؁'>A[tPʼ+p0 :_:zD7!Y?5]9̓*^@s{;k gJ!+6l!CHiG KTyPݖ!N>o=B|Y<|T*.wL$ifkDK&Ыv#;1Zz^z(H1UE:;뷤$RCȱn|KN#i-NSwG3/=ߪ+t})w܌*xzSg[X<割8.rhI8k4k1>6wۣ7!F<MH8_dbhsX柵9ݜHKC1'iΦX +-BaZg91f-lP:<^&kQm[XfOu#)>GWȷՕu\{D*:bW?n|6+@1d̜> ocEpp&Y($yX(qep 嘟1 G*:Gq@v¦Xd+ѷy9_*T~C:zDgQLnibñ N{ Dϓ*,QΐS~;g$ji.eLܫOx1s'< `75S(-AXCo׾%M«r(Θ"oQw(w@mw<-xoX[S7v+=#46L7 pUޅw! /F̖b( 8}u6\c+nIw7"`hYb(Ȩ^a"V2קk5Ejϼғ#ͦqƥs{د޽&f'A3"@5XYz@_uĺЪV*S䚵 PuXktA4Pdbfؤ:*uǁ=}9Xe 4ip$iA?%\?úpau`uj D#QT\P0GN)Xޭ-//NL?Pъg>?{(t0ޭa0K>*K2pSLQ2'}U&a'Bx`-3"HJ|+ZchJ+}4u1F$`4.:*!= 7Npd0R=DDٞ&A}n:י/j#ϔLlK?J30 p(̐z3^yMw}\LP]WրLJl hB++ ~)_-yŠv;iƘX?&ˏLLVXMyuHGڱ! RC&2Ÿ9}eǜB UjT1>Rn0L;WqA0 5Z%(yGv 1lTUJLP҃db*{#Gg5NFїtJ48wO8kW!# DIOHb$Aɓ)Z 0}:!`OBba W#/cu0 ?_*dhN}i]3җ/"H-a鎇⭺ue/O~|-< _֖=hqQ}~t"G619O\qܜ)~Pg5OpLzAvH4c{ҟ>ۑsB)AU>*A?ةu؆h/G^Rϋ|F.4٣Ikp!9!"552FPmRU]Ӣcf5A).N¯&fzx3x)#2Ohw'ؚT}UZ#GR7͊Jr~qնX!aR:b`+ţ\[zt!.{n+s3Z=S9˦iscM)>ӄ 埼}hG :֤tUWu6M ?Io'2 DuK&rY)wGg%$Tl\N#1-_//p]aY1%m>{`md9ۂPqC`&隥Zek7|}a2qNos.#EdqRdVBY}3Σ0|B%Cm۸Y5!vGîBŴ>Hh;ƅl,HO8!^"duNeV>L&mH'Q^׭ׄBqQ)}|2v >麼\r{oI # 3!jםQرʂL!vH.*;{/|cd:3Jr80Q]5.6~f! ?Sc2*(1,j:Wf>1nRs7LlUA P "TS&4?E_>~ÊBkɴDnI~,}GāIY=W&nŃwph'A)`ɡݧ~dKMwXV k;\Ѳr9^3@GEu  €>h7ܹ+% [ryx{n:G#`JoIACTbjU{z3!I)QT5,ܽfSyP4@yTbu̶g^49 D~q'y``5!kuֿhDi ;Ē1ێ1_w0r"q=:G)Mt_8" Xĵ9lgEچzZQ (I ׏HQt4"50D< !Gˋy%BA Z3~'X5 Ă%Õj27GJ΅G[Y, vL{2vA2HS\X}'ohݽyQkz~;=s@RqtF2eCsD!CY@g`cRfV(ݝCu O_cQ#뭟u2(Qe}0oeޡţT:#$<_O{li֯M'y$P≌iarS.g#8h"vuz @qHUjhSp4P~`>:^F|aY`ic15o[a7vB͹Z3,ZkKcsHmeTȮ2F4ʋjݤְ39m)7!O#io pO{!wԻ2vQpD 7~uPiz&3:{=c&ttJ7P3Ĉ/ cP?a?1iWW F!EX傖4~5E*fN (Msu9z^wCA5*D+(]{zwl΋,ᙙYOe9:nʒ)%8Q.20rpòD>ks̑rKV1ͥ(Ƭ 6!0C\͇g~8nXffiWqݸ&PkqަRkىU^.cd=$}FOpZ,zVHiӞl{h_#vW4VcN?{= gTT[}`~Kuuu;q1-a+I F^aG 3.D8Yk`b ^: 0ܬqښ0"B&wh8N^4xm+Q Fw 9Wі7&\5{2 FW :(] ]'xHW ̮5 : D$Co{H{eIh':'wo?iNٻ}ѤpTeS- GmPStX(C/*MIB&UL;V&ePc|e=! flHTK_/j>WeW܈cW~S l7ee#IE!U*A- ~R=R!Q5 9"C,ءBEʂT|LGx Dk7h&ʄgi,  y3c,z8I **_<8G__KIN=:XRRWEw]R$sJyZEr%+J'&sk;8*'4,Ju5*Opt#OE0T  \ȶpFa?uxΒ^y4ux%\-#3KJfC mT]:OƦuԕ3TEɾȊЈkR8zZM{i-S6`ٷvZKs6~n1xx3"*i1#53aN@r VVt^ '~InA#oTo 4~ݾ=1UJo&F m>Fl7ݲguAg_$;x,.p3,r{Y) gh|MkY醩qq1v]eq<0X0(Ra8ħ릫TfZ=k$@$ Q;i>j[;Gƭ3C=1[QRWG:ih 1**;䳆5?-o.z>hX}oP,?5'ˮU$tBNs4z

qApH$GdzX>1Kh׋yuvOr} >{Rp:0qyg4ŏJhUB-[d= KMkO_GL%e̬291db_,kh{WAi&f6q8 TTqS8qe*| 9, k@ή'&-^{]6@0f<~n)ymA;k;OvvcCƫU&}A^VO]r33SVIbM'Y 8D Sg.&zD;A06:~\=6{צyQ-Ag:suw?`P8$t-q"R!N{o9De568)/SdvBA JaUxiiʵi9 [G!q'7دy cWϸ?d'o0r(m1ӯ ]16>hܰJV6=辽xcį:i 41h-vgb]u~fh2K~;AV(f^=A(b(yЀ4!0[n(yL^sW=iGJ$^ݮ5Wx^oiQ"K⤈دgh¤(f-Y m+3b&ܜL'EʄD O_27KɦC/,}%g}@BzN} f&q#[߬k|E=Vyc}i_n^O0GO-6T;[L@V`-s(-I}tejVZQߠN5`~SoHᙦo=ל5,>8:FI XsJ19=[nR6l5ݲ<1{. G?5dj_7o a9*Bx<κIDyik9TVUkg%Z~v$"d?;Hhcb\d!(!&D˴q8\P@7MP}:M'X?agm13a} /'f "'6 _*PIHoIvѺ9shsl/ʧvE<~23Df[U{]ȷO&A[GLEDos`vEaMSJj .Pa_ŀ|/&EIe.e%ߵ 'Tn~^%SkMz˘)+S6D=]^^fLCoU5:$ ;KƀԢ;Xa~I~qAj*G' ogw.H'Ry7\ii^ƕ?,qJI g;N >ux)T)ΟdQW*M.kXiofܧW¶d"Q5"!KǛJ8ċ%'oObJjpzD+Uڸϳ`歰Zc }ɺ({{&z-/d>bqF>L)I &"^T=6'ºh'{%fHvo̔#sޢbum+gѩuIbLs)- 6>ZmzcWs"RG륷R"Js(~^H,hr!rʹ}Q@[c ?Vòqw_ VlxĭWO"h'yq~k3D߶EjOSIhWsQVKw\ZL̸.*{ù7̹ EH}t~2ɯWrr3 ׮^ x܄kM#' BnGPёbU\ ܇Pchڿz4I!؜Kϕ57j^.ʮS!`{ 8/I WʟKŒ;eln,|"FLϛI '$,5087pO&GKMTDxU5phae=?qg>\G}?h?O$WUb#CZ (O{N>b@mv]VHY"~$^F1ϯ2@e(q p`'CpA5䢲moX.{ҙ0PxBܬ%N0Hł[V`{X}2k0ۗx p%槿Xy/#L=q kn:h a ^,?m9HJj\zǧ//ʵ! u#يwnry}ůجl & ʮ}{QuDt2i(UλYq^K-~ϟFu :ri|3.jհؐM6 4)m%݋rve2fd)T3i#WXbmsJmE G/zQ 9񑏣&-@ث*!#̴Ƒ?Q# Hxz>=8ȗhl׻RΡ1tBnFW2DC4bț~9ަ((uizxM7}~h3 JG1\ +!C'͒IikH>(p ig$.^|s'/.tNeѤ 5[0l&Pb-1DA|,E)I䯱KfIRnlHc Q3Y9rˮ4(P+ToK#o9bt \ Fd2Y=H=3O`g_=KLX2 ^elW"aafrQw3ʳ: _ ` "k6P;/]mPrNmDm-%4fT Jv?4d䥧d 16of뤋'u%yKPiiC4%ӇPv-SEv RO`i38 # crF4GܚR&كvF͊A 86%N︸`/Rz 2kcqF]l~[؛ 6U75:Ͽ@jni\c'nΊ4Ô4x$y 1XJͻ?t~0xBc!FC?7>GV\h؄9 54( 4jzw>G?F~8cA߬$5rGPd7K{W0ͳ2&C rpM uED D0=3@K0 xL,KX]Q8==)iid@!l/b0,$!RА)iQ+G-=2mlZ5BES]g 褽5$"DAտHIiū_lm$#h4cՓ|~$Wm(6+3ㄦnG{+BExbƬfR&=" fU. \ܦYyJX!E *{J+ᮋ/yWPia␂uی@"NU,w2RkQ1v;-xY&;J3.i+2[)]2W]o3k_+BLEҽ^MCAݖL ~:70 xtb|3<ƋBME^̺Dt'e+tT NRcsXt!Y%O̅Vn_S,:d\? o~!A{pݙq zH t/Ut <q>OCW[VtO05*?7e|uWz"엽xG}u)F3{_qc=v+Ά5#w{gssN x|~mCs^%𡫃+{Yi9oUph(q}dTv+} )u׉,8ax$w0koꚝMjHLk Ӕd(Ozåbؒ0E0y=r Ӏĺ؃Sz\& UEc8tEuSFKbenKr4't hš~voG"{YXm"Iڗ, ~3`d~[jj2yx3lzH8* _oa1x^'oNUkC#̥V$[oP9I )GעjNlNq?8[u#<7"<V-g:v{60_|;?"!M{HTKtw!pqiQM0K6Y9%~)kNStf[h 1]l9sgqM >™\ V KS^4 M{"P0p|-ߏ%wك\I0尙aړY"`Z.ͤ (kWCV)7 Cu;R Fe[ҳ1E@P9.; A1*X.vɿl*q+B}eh!`gDC7=S~I.~I0:g.Q[YC͵uoaaw]{k @A6TZRG eч1ǶR& ژ$GM {9tk/\%KU yEZp<(}@lhr3̻Ks7" =94J`LLn)P4U"ҵ=z%)6@\ c]Y%q~\0?? g5n0+< b4f"BX*C-fOlCS9D}Qc;(g ] o.ǁ+Lf`J^UoڍjB *gzӅt;h*ѯ6ړ]F퇬;s0m1*A9o`aZh\RCW5T>Bj)N{|Hz{_{2F: :-=x[IbjZ>ȬZ1#x5ޗoq" ZXr֙z>uا&U%d.|:-Z*nsi3=IG\#fuٻ^X G(X 9aP!\ sSp=rɺܨۄ45rib߆Qj4A @W/B ~/Lf!Ya hzH~-YXffYya/AǚƂ{GV1"J , FM "uf_kx%]wax<CaABAo%5)tJZH-cvSmwݒm}Sj =p3ŬY?궫CPӏh"@dM2l/M𨲯w^tXMLy}D15wIץaO{1h=d= Ho( K1-.0X`#75{~=%:e)!j:w֙|d쥭=Z3QE3T\eL0⸲ jZE\a;0CS!$vQNώ^>ŏ]N.6$ڠQnj{:ܨl3zDVj=ƶVx7Wrc~-FT='}) ^$$v7!;|gk^м+˖tEÅ.ԓ|,+8Bx=*DALi^9>"ͫ2,^= 6_LPޔømS|: 'g 3[ض0F <xTiȻTw1oQp1dUt X?eȽj%s6S^^BLST<_&NfLQV[t"蠹g p5o+#6|d()}]:wb 3Q?9CBd@ϵ}D =h4vxZ2ɖM 7la@.+JxjG{֙}m*+_R3GǹY7>^Ԏ;R 6 ܘ`Ɉ |eplD+D]S릹sffIURϹ`do;C_s2Ejz%0'+feζ9ٷh3F`>?Now*6yQ_xnYZ{:9:-/^-h6{嫣;RXl.8*P%mw@SlPrcZ.-p/f*2'/Y-4x~6G'w]<2!컦,\\?8CNnmvs-6D.۸᭾qk.q@l3.8':'(z.tŦyl(Uv|vUobDALjK;ͭ%TC*RHoQN.pݵqW0i)lC"XxqTB35q k9|"u3Ō-n y{)xyc'*^9 )ȗQ%tvBjv!PTFb%VB' _T>OAeta?1|Q]p㔕D|0gu&uX8"[E)zB<-|}2G xB(bq FeQ=Ӫ F]JfHyU`"0=f] u2[8 Z".많CjKʆ Nj;NID Wt6(nO襋y>XZBJJ.9-^k\Ylx$c}ՂM Ǝ@ȷEsW}!w"FTI{ʴZaH7k*ʢǜ%DI'䙯[ԕ̃|rg+Db.;SDTfy(cXnIF'(b9󻵁9! +Ku|}YEOW'I$|KQwE t }`>EJH׻ u&Y[\M>@I8)sR;R0$٣Ξ|!fA1@U+$q4L5Zd{x.g 2<|BҚd}A-E"pQ8I~;mV~n) +TL 앏RO"v\ "gf I$>LՉ+:BJFYH!B*n%9W1ƺ))237q<C=}`1W>p7ԗ08V:Tc(VGEi)vډq^ T-Tpb ҤHPfs;Y[ٍfCx(N04cCo"yyMTX(vt. ҏtJ=}FDd| H}@hD+o?$àptw bC$~h V-Vrd&iŰ݊[ǀ ֒O`&[$ݏeb^' !Q++N_l:9!=%8\s.1bdQHDy+hcڱEg5QOywjo++ 6ls <KE*_ N(r kWi4Sl6sU%Hs`l !aj Y#^1R˖6B7YYhSEͱd0r 1SXgNSl-Ǩow?Nis(ӇScA".f0\ c:q9(miٓ֘=l oWNύC9\}xAfo iUѲܭЏڠp,eB.Zg nm>hzw:aE:}oUi[9#ۃ=gf&x]?<びT;mI!`)n~mVM 'sªxن@{o@C4H^b@$Ȩ9ydճ[ ʱr~s.zPOb6)UO| ,p'D6!R4]?Eare3g3Ca6Tu[ʃf#XWI }[@༳wUB2X _8@i 葈Iqra%zlz-l_e2RnSV߆ \w=Ireb+. Gb7oOI1a4q6ֺ( Ν3*MC0-<9M!O$j)Ꮿ,D+)~13izE+ өlj?pCPzRq04'jNLmcQwuaGEŠ}r^'>MF@D iGL kԚ,J`K.LvQsIT)luPrPk-*K-HLHȒly>~/!Jki6x` k[:SM/~Vo$G_~NGߪD6P}w1ׁOL+ }*NTƘh>)flzxf$=גVaX84-,)#PPAHٵiv)C:.Y{UĈ̌[hHn8V39a]l}o;"]Vdt -d]P| ]?b8w"Q χ*S&"4GPfy`u?O N&s|dxZ?D7Ej𣽅lju Z/3EZ|3+%km [1yП/gN/>ğn24IGH$<8w!ϕ:e]%3Ep+O2Tb1 hdqinf);e*[ }tfcGDob˘Q჉ Ƌ2EG/Lm불6iWD_[+A SͧE.ISԉF%(qdQRGgH  !x1<J+sA $< ٞz+w@Sl R.c['%(>͊SM\ >&ٚ3:qUdp2%=Iěsrف V*٫90/pci5oYjˋsEﻐJ\Nh#'sw4(5dPS]`}ۗ@pՐOQ,_c< =%GQ6Xs``MU4 qP˅; +@6R@VsYRp\IiUC]2:2QzId"Tjq;>Gh҈9\d|YpEj]&vގ=v =ruqKN|Q)O$ R/,pig; !WMzI':e^`Cy3W᎒y'E}ŗQ"^WsLKcɥ L7ĐkLz/_y*SFI*|k둳ķDk%tS^8SN߄P{ O1.r%R:k#Pe3̾^sO_Y`_TMBn|Lը!d͕ b@L$^߳>KGTyU,_a}rU\^ȫc#B, <;`w7u nt;t]EC{.c(#nF׎J;wzυzPnP·~`:\rb| ?! ̦7d mQ2PR wEPdh&tf}OV/= ][mzmU 3q7=SR, Qwe<  (Π͛B3썻NZC(W?.sF%if9zh{&n3Cj2emؼ=>pbQnyitOsMET ,MŔ  sPJeZ'ן*CWj}M)(v^|~TwA iv5a:WzZ$HbQoSMiH׎ǡ$5:˾|E\Pu NӋ2,;Ә"zNX`E# s<-%e)# MDa*Ҭ)~iߒ%dfRD(UEF;wڭZv1k7qV3Cb{ /"63z_>S] c̢wrXԋma93'3dgREweLcVul֎jÅj L8f0w1U{|Q%"j:t, R)}2]!Lii"Ա1c2oPpx;4 +5:tLA“8A@AK<<Lj/l3ĠtQLFZBL_umn&]1F'lo>?AoP7z"8xХ=S-sݝTI5h4|D\{PTۿ'If4_NŨG6?) KbDnٰAk30jBNlYG)ivWfc83k6F`qG+~Еp;$=ըknOc9vn['*T]E&:$h`vϕDQ4#D;ťwi[ ƤYs7[<76 \)]m$ԕ=b`l:EWGOfҧ[w I),{q7맶o9GD ;1:v'BffQUQX3x!7;g0evI2D6eb#sjg]&qQ%M&Pԇ{-y'#0iGԃsKjKYjƉ@ĸ5Oq URqɳܡ6"!%nZLyӮ+\:J;[\ߞ8 2L3R?,wuMr>k%9IdjW͑r aTPMfSWrd<'͗៭փaӎgѨA\\lό/ћr;?%i0,߅Y ֮Z\Ȩfb&hs<aa7]&b{FB M ͎WJ˽SCOmy;wvTT`9g ]Hf!}KM<6$-$VM'-9ߋ{TJz`4~lˑu W,[jl9NT 0BT|mbϵIV̛.`n<5k7'ig#OM|h>bGk 0/[Hb`ۼ]q_TtAb/ŸFy"^[],!C` Ϲ?5סX\,jy,o4DˡE^"mç^T-RS:4ʨ&5n/1;TT1U8!j{2:33}qgxS1g,x#BuvBV?FxO)^\Ls$t ~D=eevϊ!!p!s7+mB l-ӆ.tUHgֱ "'=馕,z-fV;5[v&XNכXwEjᾑXA9>`ӿqy FG`-ᖊ ||6Zu~5+," vc*dYU8DQ )thDE1lf7} ;M臏tk,-ʁfjLzx[[]j93-pJ1)7AیI&6TdK:m>~R ,V: uDY$ ݊N8OCo@|-&"("$UꑃhCᾼkr> 1Z@&{x gÂTWɬ/鋚 $XsJ1(?rNi=rື&V$d5*ccЇSFhq򒊃F;_D,80'$D4~j.Jש [\7^GR_ʖԁb $1MyF3,T%wX*5,O#JWB{$dd;c/&9K<4UCo1CAb%X>+tR3Ptp$ 005Z?ZiBê4-iAe": HY_rWzxc҈WfƬzŕcK'Ptc Α@ŬOAQZ:6)LrE RsXc!J Hv"yԎ&pQԖK?V%ބ$}Ix >0) ҏ66/@5 ^sDѐ >Z'D-6Pꓷ.rLOSr$̘ELe9 '״Z2g/v;f `5D' 6B%YEh/ 9Z&$t7`ƱPVZzNۛc_;;u&(B7 5js ZA2ВVF6HLOc+fUTxEܩ!%Ii]Mlr@''w vwze]%PgJ\癍vr`x3@o Se]␘$L%Xp@QFL$OR g750H!'($$2$kдϞ7m^.aK/g B,xHEC>8tgH5K(,B]==Cwk :^7O>7ZmbCbcg4I懝=DIuCS ztuH0ݣ|B\/i^ew?\?u-p?iG3MLz#u{ڐoAW$D.J>:XDK,g%, lP[p[dG:-g$缓NwФiG|49I@pm+WI$ Hȅbj Ĭee% r6^1R6 LTN#")W$t_βsFD~2JB'z. Du57]*f8t FYnm\)I)ǕZp`P&/ݒNjƆe_tU̧Z䉪oe)%楡RCvr/ R`QL9ID9=oJ;22Uݿ,#('sበߜ U17w?Pa)*Z:.B!I6;M:ݩb˙-qxV/\ ~&>/Ag~%ko+6{B?fgQ'ah"v>K-H4ĦOAAg\"*9ƒT^N[AEoU1oʻdK={E'B^jQ4FR5Ct]S'QNВ70=JQQ"K@c+sR\v.; M]X$%W>?V]`n^ul5 Ɩ@fBq/d,رzrE0HCQ7uS)Џ I\јމ {/`w)&%;ca sqkDw)|PBm XjŒfsd`EzE» ?N >o/;+޾Ժj@7FxY8Զ&4jц6r@q/HlRѸےj K{a!5AaNww>!dkB se"ԙ!a'0 ٹ^,5uЛx w턟Ãcw.t[S_lN2q\#$YVَvk6L$(5AI~Cn`Љ|ܧ7Mxuh.x`H^2p goth@Sb*Y 3?^1n㙰r]h(.!l0XȮ^nGhwHۂ2(r0A nZ-<.yU M2ܰҁn)3'§%רe/QK% h&$HO,m)wv#Ц;d7dQ1o9ԃ |*͐mBu[z8Vqm8)T NO}վcwp#jg-~?⫀H;1ߗ4)*XF9683AF[>{@UR( }zD'3gѻ%j9ǭ;9rF^aX+*#}WF[j%MĽM,U:?&k Rzt{ <;WFGtԷ0߬CB@$u> "gf9V׻4[ =TU\G@!.`r78,Y,,/.DVbU3 fWSM80ĩtY؋pE`J}b[C ֥"*C䦘fHL&1ϙk} Yk Ʃxx<.r3KAi6f?)m?$^{,/>R!a2DO*oO«Z=@Rzk'+"u_k5&h{1 bN 28ɳ ev*v5,VYW84oj9svU'4gӆTTJ{I7uZy.;Ɔ &FU$jႍ=N4 /&{L]5 糃_!~-xsSU +0u!F#VdfA0(X]p`AJgs[es\ ]qDQHu#;WmڕKw懶/,js6$)&oul_Ͳ|CCB'56A2D1kCFV;MH>xݝGN1}M(Q ]&o{^1^w|.ZHH{F:ޙ%PV/WQUPZD-}h4iW˷:ecR;Wː5+`|؆^ףǺqFMݺ=oDXFC$h VǴޫY<,5䤳pg}]3%RDPtìtI1JR+ԣb8n-fLN *Du5Κ3:GuC+оϋ7ƦgDڽ/JOO_`OMڞ:*Izs>ǍSQ0.^S-hiMzg`@F_+~\,AxN<ee%o!S)v::;|ݸz)f 17g6Iכǵ[cE%7;YNx$yV~0•T#yuM1}dȋv"=Ʊ@ʛH7x3ۚ~_Vc{EA"/F V&`:8|)+OEbiubԎ Wox lT)EtLOԧ\ޠ}3(sTߦR:>xK I"«H.L҄ c o~ '(nQXUb׼x1tWrY PBMwt_&G虘Ž ] P#u$Q> mI Q|E 'Ñ|ÈZ@<~rJKm}RϟF9>`Qt^S>*֥d&)ltSBv^ؗ#:5vT\*OFr_;'3" G%/^QR,3Ǟl[^𯅍籓j3V?6 "bPN-/%5fǺO_L,J:ڊg $?0ƙ !Z_ xzS=xF*d<}چ'Vbl,?bq6% vƇ-ј:zp~>IdO{ME[铽IJRG|!ЎS rgdͳaOn A6A۫l-=W8t+`JINwX"- c-}V!g62E<pSQ+`ҀGD hZD/e?5ar(TpQ\֏HKƿ=3ms K!Wk*S*,J;pO ?ޤIj,;mNfP{sn-P}֠'2 V2s^n* AzϦqwl\WaO$zDpvv~* uXʬ$qN$w7X(H v?Hdh-2HE |tU'ޫP>qOͩ4HUanYva9lLj %ƔBN,8u:#ݎ$⚝<uZqu-g8Z ]iOfk; "2ɥ 5=u1>,-f< p60{sPNv73e4oAjY*[6ntfb\곝 ږ+Ydۅ b] %SGaw|Ue%(sN4WR 3u}`ۨ+ig ]q(/{fe`圱rB?ypӭ1 CP^X(qpVMo;%t~r1/v뵺HWΰ`U֝W+ ks}SN=tZ&Ehn`r,Nh+w&8ީUM'QA 3;%_p < }7r ~䍛lSVVK"q@_2Fuu sX+D )5FMIjZYBt5 3]rCƃLvk"j։ddhnd0H7zcB A)Ib&X0袕KFɚشmfftXXMUKT b@i _̘9JtNB-!cgC#(jI+K lysVΖKVM<:aS$HWӫqA I]EUuc_+,0Iu֥ysL_/Y]O]ja1Q0_YWL0VG46>*[[oaTT9Gx·Sp"yԧú>r'j1.!w\`0ِ*>E㝭3,R`#3!Ma|x;@-2䪾{H~lQs9\`I;1zhVL;]^u/Ud&{xFf9J}.N|^p~;f"M|br]MX"d@s á[{hdc~<3vwl^xܙ@v f W n9R/qn ܯ筭mw}Z&'L9 q=Hz^.C#W,sݶ&8wZ!X+hߑ<ɻ0yh235(JԚs̴1an = ˎqL=9 u5 X#aˆc@$ot2M de׫*B[?e:b#ć@6'StCpгRģ(FPiݗN৵YtoʠhYB$̹'*PK%MӉkg2f>nGϯd9oJ8\(~ȦUjN?*|w+3/PkdՆˆ<\B`~S}eYFGS3Mq-4&OgS ޟ$Ki`{l hJndxLu9`N*яpιKfD^f^iQ$$N; A {8002mS' KXE:SoXV 4R{Mۇ0< ZXk| OGM/icPE5@t V6"Z?g΁lR6 Oט M.B&y4KB?FFrYx^0@F=wx飦7 !'u}Kg%`Kls 99~:,?=˴BO'W("uʚD4J4zᔼzwȂgq@C@pxY: r4l0k duJô{W?<.uu[|}.lbZiz$:dQkT\XtոB9p<ԃ<aEX~J')`4`_bH.N3=xRĚ؁T 13?9^bU+;ŀwף!Z5.&r.R-#G;)~D 4RNJK`m f] jf iAq_ѢRjT$~!hѾb!(#Rk4 Ze3֥jUE ƶ"^p9?i͇hٜb>ؽ4Xܘ"|V1 _(I =Bc{]cL84F7ktS[ ׹͊_t>+?1OIb-3f^ !dTtKrј96KoJw&2z1*CSqlcN|2f!2jK'ԆrޡMOV;~:!GJyiv 8=|ه~e`yEЄBI5dy').d{h`zed9cnęQq}2o;F ,EJ] ڶ0olMO6ȼ9λ,#iFnUJFޣX6<(ݓ(0fS\kM=B;L.AtjDuߢ)P0w9"Lr^aV"峘ive\L@Yh;;BX+|1L>G-B1呏#J_9`VpWKzS U%"PLÐCuasq#纟+Q?dzIxxFCv<*ŸKHR<8:0%᷷? kndЮ4N+~楂ݣtL)]5 i~rvD9t2y&6 `+b|!Fa]Q :^aOH0},E0qwC_Oa@y%_%oqQm3F3 [SZF)'f"kH&; q?7:jv t1.Rœ}nV5>ciC%%,sGEkXF|`4ǵ|kQB2zH0K˵vbPM zՠB/Q?: YZ