qemu-skiboot-6.2.0-150400.37.26.1 >  A efp9|LD<+>fSӝG֕Yf6 >jBt`^a1{kdtrH~XZd7/*DSpiBMTޓ_`3olMT>hƬ @{@&#.4f/lWepiUG\ _m7^@'(@՟h= -[DLv r>džT= R 001e73a07940c8fd2335433c40423623c8f68bd2e539f38217d2912633e93a69fa21b3762b93739c5e9e535e595b8360526ac7aa0 efp9|6. 'n p?h?Xd $ c| 8    J | <\(8 9 :'>?FGH(I@XHYP\h]^bcd.e3f6l8uLvdz TCqemu-skiboot6.2.0150400.37.26.1OPAL firmware (aka skiboot), used in booting OpenPOWER systemsProvides OPAL (OpenPower Abstraction Layer) firmware, aka skiboot, as traditionally packaged with QEMU.efh01-ch4c&SUSE Linux Enterprise 15SUSE LLC BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIThttps://www.suse.com/System/Emulators/PChttps://www.qemu.org/linuxnoarchupdate-alternatives --install \ /usr/share/qemu/skiboot.lid skiboot.lid /usr/share/qemu/skiboot.lid.qemu 15if [ ! -f /usr/share/qemu/skiboot.lid.qemu ] ; then update-alternatives --remove skiboot.lid /usr/share/qemu/skiboot.lid.qemu fi &AAefefPefPefPefPef0c1ce504ddc891e0502ca3213ca08d20b0deb8f3db75502b7288ce8d0cf95726pkg-split.txt/etc/alternatives/skiboot.lid@rootrootrootrootrootrootrootrootrootrootrootrootqemu-6.2.0-150400.37.26.1.src.rpmqemu-skibootqemu:/usr/share/qemu/forsplits/06     /bin/sh/bin/shrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternatives3.0.4-14.6.0-14.0-15.2-14.14.3ee@eddE@dE@dx@dxdcc@ctc6@bVbbbbw@bw@bw@b~H@b^@bEbBbBbBb=b=b<]@b; b9@b0b%b%b@b@b@b@b@b @aC@aZ@aa@aa*@a*@a*@a*@a*@a@a@a5aLa@awa`2aC1a@a8a8a0a.a(a'@aj@a $@a /`@`@`Q@`ݮ@`ݮ@`@`"@`P@`@` @`@`@`Z`@`@`}p`x*`u`c`Y@`Q@`P`OL@`KW`KW`B@`?z@`8`/@`.V`-@`+`!'`!'`3@````@` @`x@__T_j____^@_@__@_}_ts@_h_`_Z@_Z@_X_N7_FN_D@_>e_;_2@_{__@^z^@^n@^?@^^^U@^U@^^@^1^@^@^^|@^y@^t@^t@^oj@^j$@^Nt^M#@^9\^8 @^0"@^*@^*@^@^@^^g@^]+]]]e@]@]Γ@]X]@]µ]]5@]W]]@]@]@]?]x]rJ@]rJ@]M`@]J@]Ik]H@]9\\F@\Q\Q\t@\ޢ@\ޢ@\@\ڭ\ֹ@\g\@\!\Ɋ@\\e\\Y@\o@\n\f\ac\T4\Q\J@\@n@\=@\@[>@[>@[o[@[[ @[ZnZ@ZZZ@ZZ̧@ZZZZZw@Z@ZX0>X%X lW_@WWv@WWίWW:WQWWWWW@W~W~WWzOWZWZWQq@WN@WN@WF@WEW!@W!@W@Wo@VbVV@V@V@VVuV]VQ@VQ@VMVMV0V&,VVZVZVZU6@U5@U(U@U@UUlI@Ud`@UT@UQ@U@U7@U4@U.RU-@U-@U) U'@U&iU&iU%@U%@UUU@U ]@U T@TTD@TZ@T@dfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comlma@suse.comdfaggioli@suse.comdfaggioli@suse.comlma@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdmueller@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comlma@suse.comli.zhang@suse.comdfaggioli@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdmueller@suse.comdfaggioli@suse.comguillaume.gardet@opensuse.orgjose.ziviani@suse.comli.zhang@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comdmueller@suse.comjose.ziviani@suse.comjose.ziviani@suse.combrogers@suse.comjose.ziviani@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.commilsav92@outlook.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.commliska@suse.czbrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.comdimstar@opensuse.orgbrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.comohering@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comguillaume.gardet@opensuse.orgbrogers@suse.combrogers@suse.comstefan.bruens@rwth-aachen.debrogers@suse.comlnussel@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.comstefan.bruens@rwth-aachen.delyan@suse.comcgoll@suse.combrogers@suse.combrogers@suse.comtchvatal@suse.combrogers@suse.combrogers@suse.comschwab@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comolaf@aepfle.debrogers@suse.comolaf@aepfle.delma@suse.combrogers@suse.comolaf@aepfle.debrogers@suse.combrogers@suse.comldewey@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comldewey@suse.combrogers@suse.comldewey@suse.commatz@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.comkwalter@suse.combrogers@suse.comlyan@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comjfehlig@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comhenrik.kuhn@origenis.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comjfehlig@suse.combrogers@suse.combrogers@suse.comschwab@suse.debrogers@suse.comschwab@suse.debrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.combrogers@suse.comohering@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.comafaerber@suse.deafaerber@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comagraf@suse.comafaerber@suse.debrogers@suse.comagraf@suse.combrogers@suse.comglin@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comagraf@suse.combrogers@suse.combrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deolaf@aepfle.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.destefan.bruens@rwth-aachen.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.detampakrap@opensuse.orgafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deagraf@suse.comcrrodriguez@opensuse.orgagraf@suse.comjslaby@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deagraf@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.dempluskal@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.de- Fixes and improvements: * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985) * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367) * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367) * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec- Fixes: * virtio-crypto: verify src&dst buffer length for sym request bsc#1213925 (CVE-2023-3180) * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311) * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750) * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750) * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750) * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663) * block/nbd: Move s->ioc on AioContext change (bsc#1213663) * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)- Maintenance and Security updates - Patches added:: * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638) * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354) * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)- Fix bsc#1212968, bsc#1213414, bsc#1213001 - Patches added: 9pfs: prevent opening special files (CVE-2023-2861) vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301) ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)- Switch the packaging workflow to git, like the one we have in place already for Factory and for SLE15-SP5 * Patches no longer present as patch files, but applied as commits: AIO-Reduce-number-of-threads-for-32bit-h.patch Allow-bdrv_get_allocated_file_size-to-ru.patch Convert-query-block-info_block-to-corout.patch Convert-query-named-block-nodes-to-corou.patch Ignore-spurious-GCC-12-warning.patch Make-char-muxer-more-robust-wrt-small-FI.patch Make-installed-scripts-explicitly-python.patch Makefile-Don-t-check-pc-bios-as-pre-requ.patch Makefile-define-endianess-for-cross-buil.patch Makefile-fix-build-with-binutils-2.38.patch PPC-KVM-Disable-mmu-notifier-check.patch Raise-soft-address-space-limit-to-hard-l.patch Revert-python-iotests-replace-qmp-with-a.patch Revert-python-machine-add-instance-disam.patch Revert-python-machine-add-sock_dir-prope.patch Revert-python-machine-handle-fast-QEMU-t.patch Revert-python-machine-move-more-variable.patch Revert-python-machine-remove-_remove_mon.patch Revert-qht-constify-qht_statistics_init.patch Revert-roms-efirom-tests-uefi-test-tools.patch Run-fstat-asynchronously-inside-coroutin.patch Silence-GCC-12-spurious-warnings.patch XXX-dont-dump-core-on-sigabort.patch acpi-validate-hotplug-selector-on-access.patch acpi_piix4-Fix-migration-from-SLE11-SP2.patch ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch block-Convert-bdrv_get_allocated_file_si.patch block-backend-Retain-permissions-after-m.patch block-coroutine-wrapper.py-support-also-.patch block-qdict-Fix-Werror-maybe-uninitializ.patch brotli-fix-actual-variable-array-paramet.patch build-be-explicit-about-mx86-used-note-n.patch configure-only-populate-roms-if-softmmu.patch configure-remove-pkgversion-from-CONFIG_.patch display-qxl-render-fix-race-condition-in.patch doc-Add-the-SGX-numa-description.patch doc-add-our-support-doc-to-the-main-proj.patch enable-cross-compilation-on-ARM.patch help-compiler-out-by-initializing-array.patch hostmem-default-the-amount-of-prealloc-t.patch hw-block-fdc-Prevent-end-of-track-overru.patch hw-display-qxl-Assert-memory-slot-fits-i.patch hw-display-qxl-Avoid-buffer-overrun-in-q.patch hw-display-qxl-Document-qxl_phys2virt.patch hw-display-qxl-Have-qxl_log_command-Retu.patch hw-display-qxl-Pass-requested-buffer-siz.patch hw-i386-amd_iommu-Fix-maybe-uninitialize.patch hw-intc-exynos4210_gic-provide-more-room.patch hw-nvme-fix-CVE-2021-3929.patch hw-nvram-at24-return-0xff-if-1-byte-addr.patch hw-pvrdma-Protect-against-buggy-or-malic.patch hw-scsi-megasas-check-for-NULL-frame-in-.patch hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch hw-smbios-handle-both-file-formats-regar.patch hw-usb-hcd-ehci-fix-writeback-order.patch hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch i8254-Fix-migration-from-SLE11-SP2.patch increase-x86_64-physical-bits-to-42.patch iotest-065-explicit-compression-type.patch iotest-214-explicit-compression-type.patch iotest-302-use-img_info_log-helper.patch iotest-303-explicit-compression-type.patch iotest-39-use-_qcow2_dump_header.patch iotests-60-more-accurate-set-dirty-bit-i.patch iotests-MRCE-Write-data-to-source.patch iotests-bash-tests-filter-compression-ty.patch iotests-common.rc-introduce-_qcow2_dump_.patch iotests-declare-lack-of-support-for-comp.patch iotests-drop-qemu_img_verbose-helper.patch iotests-massive-use-_qcow2_dump_header.patch iotests-specify-some-unsupported_imgopts.patch iotests.py-filter-out-successful-output-.patch iotests.py-img_info_log-rename-imgopts-a.patch iotests.py-implement-unsupported_imgopts.patch iotests.py-qemu_img-create-support-IMGOP.patch iotests.py-rewrite-default-luks-support-.patch ipxe-Makefile-fix-issues-of-build-reprod.patch linux-user-Fake-proc-cpuinfo.patch linux-user-add-binfmt-wrapper-for-argv-0.patch linux-user-binfmt-support-host-binaries.patch linux-user-lseek-explicitly-cast-non-set.patch linux-user-use-target_ulong.patch meson-build-all-modules-by-default.patch meson-install-ivshmem-client-and-ivshmem.patch modules-generates-per-target-modinfo.patch modules-introduces-module_kconfig-direct.patch numa-Enable-numa-for-SGX-EPC-sections.patch numa-Support-SGX-numa-in-the-monitor-and.patch pc-bios-s390-ccw-net-avoid-warning-about.patch pci-fix-overflow-in-snprintf-string-form.patch pci-let-firmware-reserve-IO-for-pcie-pci.patch pci-reserve-resources-for-pcie-pci-bridg.patch qboot-add-cross.ini-file-to-handle-aarch.patch qcow2-simple-case-support-for-downgradin.patch qemu-binfmt-conf-Modify-default-path.patch qemu-binfmt-conf.sh-should-use-F-as-shor.patch qemu-bridge-helper-reduce-security-profi.patch qemu-cvs-gettimeofday.patch qemu-cvs-ioctl_debug.patch qemu-cvs-ioctl_nodirection.patch qht-Revert-some-constification-in-qht.c.patch qom-handle-case-of-chardev-spice-module-.patch roms-Makefile-add-cross-file-to-qboot-me.patch roms-Makefile-pass-a-packaging-timestamp.patch roms-change-cross-compiler-naming-to-be-.patch roms-sgabios-Fix-csum8-to-be-built-by-ho.patch s390x-tod-kvm-don-t-save-restore-the-TOD.patch scsi-generic-Fix-emulated-block-limits-V.patch scsi-generic-check-for-additional-SG_IO-.patch scsi-generic-replace-logical-block-count.patch scsi-lsi53c895a-fix-use-after-free-in-ls.patch scsi-lsi53c895a-really-fix-use-after-fre.patch seabios-switch-to-python3-as-needed.patch seabios-use-python2-explicitly-as-needed.patch sgabios-Makefile-fix-issues-of-build-rep.patch softmmu-Always-initialize-xlat-in-addres.patch stub-out-the-SAN-req-s-in-int13.patch test-add-mapping-from-arch-of-i686-to-qe.patch tests-Fix-block-tests-to-be-compatible-w.patch tests-change-error-message-in-test-162.patch tests-qemu-iotests-040-Skip-TestCommitWi.patch tests-qemu-iotests-Fix-051-for-binaries-.patch tests-qemu-iotests-Triple-timeout-of-i-o.patch tests-qemu-iotests-testrunner-Quote-case.patch tools-virtiofsd-Add-rseq-syscall-to-the-.patch ui-cursor-fix-integer-overflow-in-cursor.patch ui-vnc-clipboard-fix-integer-underflow-i.patch usb-Help-compiler-out-to-avoid-a-warning.patch vhost-vsock-detach-the-virqueue-element-.patch virtio-net-fix-map-leaking-on-error-duri.patch virtiofsd-Drop-membership-of-all-supplem.patch xen-add-block-resize-support-for-xen-dis.patch xen-ignore-live-parameter-from-xen-save-.patch xen_disk-Add-suse-specific-flush-disable.patch- Fix bsc#1211000 * Patches added: Allow-bdrv_get_allocated_file_size-to-ru.patch Convert-query-block-info_block-to-corout.patch Convert-query-named-block-nodes-to-corou.patch Run-fstat-asynchronously-inside-coroutin.patch block-Convert-bdrv_get_allocated_file_si.patch block-coroutine-wrapper.py-support-also-.patch- Fix bsc#1180207 (CVE-2020-14394) * Patches added: hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch- Fix: bsc#1185000, CVE-2021-3507 * Patches added: hw-block-fdc-Prevent-end-of-track-overru.patch- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788 (CVE-2022-3165), bsc#1197653 (CVE-2022-1050) * Patches added: hw-display-qxl-Assert-memory-slot-fits-i.patch hw-display-qxl-Avoid-buffer-overrun-in-q.patch hw-display-qxl-Document-qxl_phys2virt.patch hw-display-qxl-Have-qxl_log_command-Retu.patch hw-display-qxl-Pass-requested-buffer-siz.patch ui-vnc-clipboard-fix-integer-underflow-i.patch hw-pvrdma-Protect-against-buggy-or-malic.patch- Fix bsc#1206527 * Patches added: s390x-tod-kvm-don-t-save-restore-the-TOD.patch- Fix qemu "block limits" VPD emulation broken (bsc#1202364) * Patches added: hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch scsi-generic-Fix-emulated-block-limits-V.patch- Fix bsc#1198038, CVE-2022-0216 * Patches added: scsi-lsi53c895a-really-fix-use-after-fre.patch- Fix: bsc#1198038, CVE-2022-0216 - Fix: bsc#1201367, CVE-2022-35414 * Patches added: scsi-lsi53c895a-fix-use-after-free-in-ls.patch softmmu-Always-initialize-xlat-in-addres.patch- Fix usb ehci boot failure (bsc#1192115) * Patches added: hw-usb-hcd-ehci-fix-writeback-order.patch- Improve the output of update_git.sh, by including the list of repos to which we have downstream patches. - Fix bsc#1197084 and bsc#1199924 * Patches added: hostmem-default-the-amount-of-prealloc-t.patch pci-fix-overflow-in-snprintf-string-form.patch- Get rid of downstream patches breaking s390 modules. Replace them with the upstream proposed and Acked (but never committed) solution (bsc#1199015) * Patches added: modules-generates-per-target-modinfo.patch modules-introduces-module_kconfig-direct.patch * Patches dropped: Fix-the-module-building-problem-for-s390.patch modules-quick-fix-a-fundamental-error-in.patch- Fix bsc#1198712, CVE-2022-26354 - Fix bsc#1198711, CVE-2022-26353 * Patches added: vhost-vsock-detach-the-virqueue-element-.patch virtio-net-fix-map-leaking-on-error-duri.patch- Fix bsc#1198037, CVE-2021-4207 - Fix bsc#1198035, CVE-2021-4206 * Patches added: display-qxl-render-fix-race-condition-in.patch ui-cursor-fix-integer-overflow-in-cursor.patch- Backport a GCC 12 aarch64 build fix (bsc#1199625) * Patches added: block-qdict-Fix-Werror-maybe-uninitializ.patch- Backport SeaBIOS patches for fixing bsc#1199018 * Patches added: pci-let-firmware-reserve-IO-for-pcie-pci.patch pci-reserve-resources-for-pcie-pci-bridg.patch- enable aio=io_uring on all kvm architectures (bsc#1197699)- Support the SGX feature (bsc#1197807) * Patches added: doc-Add-the-SGX-numa-description.patch numa-Enable-numa-for-SGX-EPC-sections.patch numa-Support-SGX-numa-in-the-monitor-and.patch- Backport CVE-2021-3929 (bsc#1193880) * Patches added: hw-nvme-fix-CVE-2021-3929.patch- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528) * Patches added: Revert-python-iotests-replace-qmp-with-a.patch Revert-python-machine-add-instance-disam.patch Revert-python-machine-add-sock_dir-prope.patch Revert-python-machine-handle-fast-QEMU-t.patch Revert-python-machine-move-more-variable.patch Revert-python-machine-remove-_remove_mon.patch- Add missing patch from a PTFs (bsc#1194938) * Patches added: scsi-generic-check-for-additional-SG_IO-.patch- Kill downstream patches around bifmt handling that makes cumbersome to run multi-arch containers, and switch to the upstream behavior, which is well documented and valid on all other distros. This is possible thanks to Linux kernel commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so it can only work on Leap/SLE 15.4 and higher). (bsc#1197298) * Patches dropped: qemu-binfmt-conf.sh-allow-overriding-SUS.patch qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch- Fix update_git.sh wiping all the package file of the local checkout while cloning the git repository on demand (in case they don't exist and the user as to do so).- Improve test reliability * Patches added: Fix-the-module-building-problem-for-s390.patch tests-qemu-iotests-040-Skip-TestCommitWi.patch tests-qemu-iotests-testrunner-Quote-case.patch- Fix virtiofs crashing with glibc >= 2.35, due to rseq syscall (bsc#1196924) * Patches added: tools-virtiofsd-Add-rseq-syscall-to-the-.patch- Avoid warnings caused by a GCC 12 bug, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98503 (bsc#1197018) * Patches added: hw-i386-amd_iommu-Fix-maybe-uninitialize.patch Silence-GCC-12-spurious-warnings.patch Ignore-spurious-GCC-12-warning.patch- Proactive fix * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch- Build PPC firmwares from sources on non-PPC builds as well (bsc#1193545) - Build RiscV firmwares on non-RiscV builds as well - While there, refactor (and simplify!) the firmware building logic and code * Patches added: Makefile-define-endianess-for-cross-buil.patch Makefile-fix-build-with-binutils-2.38.patch- qemu,kvm,xen: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) * Patches added: hw-scsi-megasas-check-for-NULL-frame-in-.patch- Include vmxcap in the qemu-tools package (is being very useful for debugging bsc#1193364)- The qemu package should require qemu-x86, qemu-arm, etc, as there's no point installing it without _any_ of them. Additionally, right now, the user does not get a working qemu, if recommended packages are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087- Give clearer instructions on how to modify the package patches from the output of update_git.sh (docs change only, no functional change)- qemu,kvm: potential privilege escalation via virtiofsd (bsc#1195161, CVE-2022-0358) * Patches added: virtiofsd-Drop-membership-of-all-supplem.patch* Patches added: block-backend-Retain-permissions-after-m.patch iotest-065-explicit-compression-type.patch iotest-214-explicit-compression-type.patch iotest-302-use-img_info_log-helper.patch iotest-303-explicit-compression-type.patch iotest-39-use-_qcow2_dump_header.patch iotests-60-more-accurate-set-dirty-bit-i.patch iotests-bash-tests-filter-compression-ty.patch iotests-common.rc-introduce-_qcow2_dump_.patch iotests-declare-lack-of-support-for-comp.patch iotests-drop-qemu_img_verbose-helper.patch iotests-massive-use-_qcow2_dump_header.patch iotests-MRCE-Write-data-to-source.patch iotests.py-filter-out-successful-output-.patch iotests.py-img_info_log-rename-imgopts-a.patch iotests.py-implement-unsupported_imgopts.patch iotests.py-qemu_img-create-support-IMGOP.patch iotests.py-rewrite-default-luks-support-.patch iotests-specify-some-unsupported_imgopts.patch qcow2-simple-case-support-for-downgradin.patch tests-qemu-iotests-Fix-051-for-binaries-.patch-Backport patch from upstream, bsc#1194063 CVE-2021-4158 * Patches added: acpi-validate-hotplug-selector-on-access.patch- Enable modules for testsuite* Patches added: meson-build-all-modules-by-default.patch- It's time to really start requiring -F when using -b in qemu-img for us as well. Users/customers have been warned in the relevant release notes (bsc#1190135) * Patches dropped: Revert-qemu-img-Improve-error-for-rebase.patch Revert-qemu-img-Require-F-with-b-backing.patch- Fix testsuite failures by not using modules when building tests (and some other, also testsuite related, spec file problems)- [JIRA] (SLE-20965) Make QEMU guests more failsafe when resizing SCSI passthrough disks * Patches added: scsi-generic-replace-logical-block-count.patch- Add an audio-oss sub-package- Add some new (mostly documentation) files in the package- Remove option --audio-drv-list because audio is detected by meson automatically in latest version.- Remove options --disable-jemalloc and --disable-tcmalloc which are changed in v6.2.0.- Update to v 6.2.0. For full release notese, see: * https://wiki.qemu.org/ChangeLog/6.2. Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * virtio-mem: guest memory dumps are now fully supported, along with pre-copy/post-copy migration and background guest snapshots * QMP: support for nw DEVICE_UNPLUG_GUEST_ERROR to detect guest-reported hotplug failures * TCG: improvements to TCG plugin argument syntax, and multi-core support for cache plugin * 68k: improved support for Apple’s NuBus, including ability to load declaration ROMs, and slot IRQ support * ARM: macOS hosts with Apple Silicon CPUs now support ‘hvf’ accelerator for AArch64 guests * ARM: emulation support for Fujitsu A64FX processor model * ARM: emulation support for kudo-mbc machine type * ARM: M-profile MVE extension is now supported for Cortex-M55 * ARM: ‘virt’ machine now supports an emulated ITS (Interrupt Translation Service) and supports more than 123 CPUs in emulation mode * ARM: xlnx-zcu102 and xlnx-versal-virt machines now support BBRAM and eFUSE devices * PowerPC: improved POWER10 support for the ‘powernv’ machine type * PowerPC: initial support for POWER10 DD2.0 CPU model * PowerPC: support for FORM2 PAPR NUMA descriptions for ‘pseries’ machine type * RISC-V: support for Zb[abcs] instruction set extensions * RISC-V: support for vhost-user and numa mem options across all boards * RISC-V: SiFive PWM support * x86: support for new Snowridge-v4 CPU model * x86: guest support for Intel SGX * x86: AMD SEV guests now support measurement of kernel binary when doing direct kernel boot (not using a bootloader) * Patches dropped: 9pfs-fix-crash-in-v9fs_walk.patch block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch hw-acpi-ich9-Add-compat-prop-to-keep-HPC.patch hw-i386-acpi-build-Deny-control-on-PCIe-.patch i386-cpu-Remove-AVX_VNNI-feature-from-Co.patch net-vmxnet3-validate-configuration-value.patch pcie-rename-native-hotplug-to-x-native-h.patch plugins-do-not-limit-exported-symbols-if.patch plugins-execlog-removed-unintended-s-at-.patch qemu-nbd-Change-default-cache-mode-to-wr.patch qemu-sockets-fix-unix-socket-path-copy-a.patch target-arm-Don-t-skip-M-profile-reset-en.patch target-i386-add-missing-bits-to-CR4_RESE.patch tcg-arm-Fix-tcg_out_vec_op-function-sign.patch uas-add-stream-number-sanity-checks.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-balloon-don-t-start-free-page-hin.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch- Reinstate Lin Ma's fixes for bsc#1192147 as they were submitted only to IBS. * Patches added: hw-acpi-ich9-Add-compat-prop-to-keep-HPC.patch hw-i386-acpi-build-Deny-control-on-PCIe-.patch pcie-rename-native-hotplug-to-x-native-h.patch- Rename the Guest Agent service qemu-guest-agent, like in other distros (and upstream). bsc#1185543- disable QOM cast debug outside the testsuite as the corresponding asserts show up occassionally as top #1 in perf(1) traces under heavy virtio load - enable LTO when we'd like to use LTO* Patches added (bsc#1186256): qemu-binfmt-conf.sh-allow-overriding-SUS.patch- cross-i386-binutils and cross-i386-gcc are not needed and were dropped from Factory - boo#1193424- qemu: virtio-net: heap use-after-free in virtio_net_receive_rcu (bsc#1189938 CVE-2021-3748) solved by virtio-net-fix-use-after-unmap-free-for-.patch - kvm,qemu: out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702 CVE-2021-3713) * Patches added: uas-add-stream-number-sanity-checks.patch- Stable fixes from upstream * Patches added: block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch qemu-nbd-Change-default-cache-mode-to-wr.patch target-arm-Don-t-skip-M-profile-reset-en.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch- Fix testsuite dependencies (bsc#1190573) * Patches added: modules-quick-fix-a-fundamental-error-in.patch- Replace patch to fix hardcoded binfmt handler (bsc#1186256) * Patches dropped: qemu-binfmt-conf.sh-allow-overriding-SUS.patch * Patches added: qemu-binfmt-conf.sh-should-use-F-as-shor.patch - Stable fixes from upstream * Patches added: 9pfs-fix-crash-in-v9fs_walk.patch i386-cpu-Remove-AVX_VNNI-feature-from-Co.patch plugins-do-not-limit-exported-symbols-if.patch plugins-execlog-removed-unintended-s-at-.patch qemu-sockets-fix-unix-socket-path-copy-a.patch target-i386-add-missing-bits-to-CR4_RESE.patch virtio-balloon-don-t-start-free-page-hin.patch- Fix qemu build on ARMv7 (bsc#1190211) * Patches added: tcg-arm-Fix-tcg_out_vec_op-function-sign.patch- Update supported file for ARM machines.- Keep qemu-img without backing format still deprecated (bsc#1190135) * Patches added: Revert-qemu-img-Improve-error-for-rebase.patch Revert-qemu-img-Require-F-with-b-backing.patch - Update the support files to reflect the deprecation.- Update build dependencies versions: libgcrypt >= 1.8.0, gnutls >= 3.5.18, glib >= 2.56, libssh >= 0.8.7- Fix hardcoded binfmt handler doesn't play well with containers (bsc#1186256) * Patches added: qemu-binfmt-conf.sh-allow-overriding-SUS.patch- Update to v6.1: see https://wiki.qemu.org/ChangeLog/6.1 For a full list of formely deprecated features that are removed, consult: https://qemu-project.gitlab.io/qemu/about/removed-features.html For a list of new deprecated features, consult: https://qemu-project.gitlab.io/qemu/about/deprecated.html Some noteworthy changes: * Removed moxie CPU. * Removed lm32 CPU. * Removed unicore32 CPU. * Removed 'info cpustats'. * Added Aspeed machines: rainier-bmc, quanta-q7l1-bmc. * Added npcm7xx machine: quanta-gbs-bmc. * Model for Aspeed's Hash and Crypto Engine. * SVE2 is now emulated, including bfloat16 support * FEAT_I8MM, FEAT_TLBIOS, FEAT_TLBRANGE, FEAT_BF16, FEAT_AA32BF16, and FEAT_MTE3 are now emulated. * Improved hot-unplug failures on PowerPC pseries machine. * Implemented some POWER10 instructions in TCG. * Added shakti_c RISC-V machine. * Improved documentation for RISC-V machines. * CPU models for gen16 have been added for s390x. * New CPU model versions added with XSAVES enabled: Skylake-Client-v4, Skylake-Server-v5, Cascadelake-Server-v5, Cooperlake-v2, Icelake-Client-v3, Icelake-Server-v5, Denverton-v3, Snowridge-v3, Dhyana-v2 * Added ACPI based PCI hotplug support to Q35 machine. Enabled and used by default since pc-q35-6.1 machine type. * Added support for the pca9546 and pca9548 I2C muxes. * Added support for PMBus and several PMBus devices. * Crypto subsystem: The preferred crypto backend driver now gnutls, with libgcrypt as the second choice, and nettle as third choice, with ordering driven mostly by performance of the ciphers. * Misc doc improvements. * Patches removed: block-nvme-Fix-VFIO_MAP_DMA-failed-No-sp.patch hmp-Fix-loadvm-to-resume-the-VM-on-succe.patch hw-block-nvme-align-with-existing-style.patch hw-block-nvme-consider-metadata-read-aio.patch hw-net-can-sja1000-fix-buff2frame_bas-an.patch hw-nvme-fix-missing-check-for-PMR-capabi.patch hw-nvme-fix-pin-based-interrupt-behavior.patch hw-pci-host-q35-Ignore-write-of-reserved.patch hw-rdma-Fix-possible-mremap-overflow-in-.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch hw-usb-Do-not-build-USB-subsystem-if-not.patch hw-usb-host-stub-Remove-unused-header.patch linux-user-aarch64-Enable-hwcap-for-RND-.patch module-for-virtio-gpu-pre-load-module-to.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch pvrdma-Ensure-correct-input-on-ring-init.patch pvrdma-Fix-the-ring-init-error-flow-CVE-.patch qemu-config-load-modules-when-instantiat.patch qemu-config-parse-configuration-files-to.patch qemu-config-use-qemu_opts_from_qdict.patch runstate-Initialize-Error-to-NULL.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch target-i386-Exit-tb-after-wrmsr.patch target-sh4-Return-error-if-CPUClass-get_.patch tcg-Allocate-sufficient-storage-in-temp_.patch tcg-arm-Fix-tcg_out_op-function-signatur.patch tcg-sparc-Fix-temp_allocate_frame-vs-spa.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch usb-hid-avoid-dynamic-stack-allocation.patch usb-limit-combined-packets-to-1-MiB-CVE-.patch usb-mtp-avoid-dynamic-stack-allocation.patch usb-redir-avoid-dynamic-stack-allocation.patch usbredir-fix-free-call.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch vhost-user-gpu-abstract-vg_cleanup_mappi.patch vhost-user-gpu-fix-leak-in-virgl_cmd_res.patch vhost-user-gpu-fix-leak-in-virgl_resourc.patch vhost-user-gpu-fix-memory-disclosure-in-.patch vhost-user-gpu-fix-memory-leak-in-vg_res.patch vhost-user-gpu-fix-memory-leak-while-cal.patch vhost-user-gpu-fix-OOB-write-in-virgl_cm.patch vhost-user-gpu-fix-resource-leak-in-vg_r.patch vhost-vdpa-don-t-initialize-backend_feat.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch vl-allow-not-specifying-size-in-m-when-u.patch vl-Fix-an-assert-failure-in-error-path.patch vl-plug-object-back-into-readconfig.patch vl-plumb-keyval-based-options-into-readc.patch x86-acpi-use-offset-instead-of-pointer-w.patch- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527) hw-usb-Do-not-build-USB-subsystem-if-not.patch hw-usb-host-stub-Remove-unused-header.patch usb-hid-avoid-dynamic-stack-allocation.patch usb-limit-combined-packets-to-1-MiB-CVE-.patch usb-mtp-avoid-dynamic-stack-allocation.patch- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682) usbredir-fix-free-call.patch- Add stable patches from upstream: block-nvme-Fix-VFIO_MAP_DMA-failed-No-sp.patch hw-net-can-sja1000-fix-buff2frame_bas-an.patch hw-pci-host-q35-Ignore-write-of-reserved.patch- Disabled skiboot building for PowerPC due to the following issue: https://github.com/open-power/skiboot/issues/265- Fix possible mremap overflow in the pvrdma (CVE-2021-3582, bsc#1187499) hw-rdma-Fix-possible-mremap-overflow-in-.patch - Ensure correct input on ring init (CVE-2021-3607, bsc#1187539) pvrdma-Ensure-correct-input-on-ring-init.patch - Fix the ring init error flow (CVE-2021-3608, bsc#1187538) pvrdma-Fix-the-ring-init-error-flow-CVE-.patch- Fix qemu-supportconfig network-manager verification- Fix stable issues found in upstream: hmp-Fix-loadvm-to-resume-the-VM-on-succe.patch hw-block-nvme-align-with-existing-style.patch hw-nvme-fix-missing-check-for-PMR-capabi.patch hw-nvme-fix-pin-based-interrupt-behavior.patch linux-user-aarch64-Enable-hwcap-for-RND-.patch qemu-config-load-modules-when-instantiat.patch qemu-config-parse-configuration-files-to.patch qemu-config-use-qemu_opts_from_qdict.patch runstate-Initialize-Error-to-NULL.patch target-i386-Exit-tb-after-wrmsr.patch tcg-Allocate-sufficient-storage-in-temp_.patch tcg-sparc-Fix-temp_allocate_frame-vs-spa.patch vhost-vdpa-don-t-initialize-backend_feat.patch vl-allow-not-specifying-size-in-m-when-u.patch vl-Fix-an-assert-failure-in-error-path.patch vl-plug-object-back-into-readconfig.patch vl-plumb-keyval-based-options-into-readc.patch x86-acpi-use-offset-instead-of-pointer-w.patch- Update qemu-supportconfig plugin- Fix an update-alternative warning when removing qemu-skiboot package bsc#1178678- Use doc directive to build QEMU documentation- Improve compatibility with gcc 11: target-sh4-Return-error-if-CPUClass-get_.patch tcg-arm-Fix-tcg_out_op-function-signatur.patch- Enable zstd compression option to qcow2- Fix out-of-bounds write in virgl_cmd_get_capset CVE-2021-3546 bsc#1185981 vhost-user-gpu-abstract-vg_cleanup_mappi.patch - Fix memory leaks found in the virtio vhost-user GPU device CVE-2021-3544 bsc#1186010 vhost-user-gpu-fix-leak-in-virgl_cmd_res.patch vhost-user-gpu-fix-leak-in-virgl_resourc.patch vhost-user-gpu-fix-memory-disclosure-in-.patch vhost-user-gpu-fix-memory-leak-in-vg_res.patch vhost-user-gpu-fix-memory-leak-while-cal.patch vhost-user-gpu-fix-OOB-write-in-virgl_cm.patch - Fix information disclosure due to uninitialized memory read CVE-2021-3545 bsc#1185990 vhost-user-gpu-fix-resource-leak-in-vg_r.patch- disable sheepdog, it was dropped upstream ( https://gitlab.com/qemu-project/qemu/-/commit/09ec85176e4095be15f233ebc870d5680123f024) and fails to build with gcc 11 on non-x86- Fix CVE-2021-3527 in usb/redir: usb-redir-avoid-dynamic-stack-allocation.patch - Fix issues found upstream: hw-block-nvme-consider-metadata-read-aio.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch- Brotli VLA error was already fixed in v5.2 but the patches wasn't included in v6.0. This change fixed that - Patches added: brotli-fix-actual-variable-array-paramet.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch- For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)- Update to v6.0: see https://wiki.qemu.org/ChangeLog/6.0 For a full list of formely deprecated features that are removed now, consult: https://qemu-project.gitlab.io/qemu/system/removed-features.html. For a list of new deprecated features, consult: https://qemu-project.gitlab.io/qemu/system/deprecated.html Some noteworthy changes: * Removed tileGX CPU (linux-user mode). * Removed ide-drive device (use ide-hd or ide-cd instead). * Removed scsi-disk device (use scsi-hd or scsi-cd instead). * Removed pc-1.0, pc-1.1, pc-1.2, and pc-1.3 machine types. * Added emulation of Arm-v8.1M arch and Cortex-M55 CPU. * Added boards mps3-an524 (Cortex-M33) and mps3-an547 (Cortex-M55). * x86: Support for running SEV-ES encrypted guests; TCG can emulate the PKS feature; WHPX accelerator supports accelerated APIC. * ARM: ARMv8.4-TTST, ARMv8.4-SEL2, FEAT_SSBS, and ARMv8.4-DIT emulation are now supported; Added ARMv8.5-MemTag extension is now supported formely linux-user. Additional device emulation support for xlnx-zynqmp, xlnx-versal, sbsa-ref, npcm7xx, and sabrelite board models. * PowerPC: powernv now allows external BMC; pseries can send QAPI message if it detects a memory hotplug failure; CPU unplug request can be retried. * s390: TCG works with Linux kernels built with clang-11 and clang12. * RISC-V: OpenSBI upgraded to v0.9; Support the QMP dump-guest-memory command; Add support for the SiFive SPI controller (sifive_u); Add QSPI NOR flash to Microchip PFSoC. * Misc doc improvements. * Multiprocess: Add experimental options to support out-of-process device emulation. * ACPI: support for assigning NICs to known names in guest OS independently of PCI slot placement. * NVMe: new emulation support for v1.4 spec with many new features, experimental support for Zoned Namespaces, multipath I/O, and End-to-End Data Protection. * Xen: New guest loader for testing of Xen-like hypervisors booting kernels. * virtiofs: misc. security fixes and performance improvements. * Tools: FUSE block exports to allow mounting any QEMU block device node as a host file. * Migration: query/info-migrate now display the migration blocker status and the reasons for blocking. * User-mode: Added support for the Qualcomm Hexagon processor. * TCG: Added support for Apple Silicon hosts (macOS). * QMP: backup jobs now support multiple asynchronous requests in parallel * VNC: virtio-vga support for scaling resolution based on client window size * Patches added: doc-add-our-support-doc-to-the-main-proj.patch * Patches removed: 9pfs-Fully-restart-unreclaim-loop-CVE-20.patch audio-add-sanity-check.patch block-Fix-deadlock-in-bdrv_co_yield_to_d.patch block-Fix-locking-in-qmp_block_resize.patch blockjob-Fix-crash-with-IOthread-when-bl.patch block-nfs-fix-int-overflow-in-nfs_client.patch block-rbd-fix-memory-leak-in-qemu_rbd_co.patch block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch block-Separate-blk_is_writable-and-blk_s.patch block-Simplify-qmp_block_resize-error-pa.patch brotli-fix-actual-variable-array-paramet.patch build-no-pie-is-no-functional-linker-fla.patch cadence_gem-switch-to-use-qemu_receive_p.patch cpu-core-Fix-help-of-CPU-core-device-typ.patch docs-add-SUSE-support-statements-to-html.patch dp8393x-switch-to-use-qemu_receive_packe.patch e1000-fail-early-for-evil-descriptor.patch e1000-switch-to-use-qemu_receive_packet-.patch hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch hw-arm-virt-Disable-pl011-clock-migratio.patch hw-block-fdc-Fix-fallback-property-on-sy.patch hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch hw-isa-Kconfig-Add-missing-dependency-VI.patch hw-isa-piix4-Migrate-Reset-Control-Regis.patch hw-net-lan9118-Fix-RX-Status-FIFO-PEEK-v.patch hw-s390x-fix-build-for-virtio-9p-ccw.patch hw-sd-sd-Actually-perform-the-erase-oper.patch hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch hw-sd-sdhci-Correctly-set-the-controller.patch hw-sd-sdhci-Don-t-transfer-any-data-when.patch hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch hw-sd-sdhci-Limit-block-size-only-when-S.patch hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch hw-sd-sd-Move-the-sd_block_-read-write-a.patch hw-sd-sd-Skip-write-protect-groups-check.patch hw-timer-slavio_timer-Allow-64-bit-acces.patch hw-virtio-pci-Added-AER-capability.patch hw-virtio-pci-Added-counter-for-pcie-cap.patch i386-acpi-restore-device-paths-for-pre-5.patch iotests-Fix-_send_qemu_cmd-with-bash-5.1.patch lan9118-switch-to-use-qemu_receive_packe.patch lsilogic-Use-PCIDevice-exit-instead-of-D.patch Make-keycode-gen-output-reproducible-use.patch memory-clamp-cached-translation-in-case-.patch monitor-Fix-assertion-failure-on-shutdow.patch mptsas-Remove-unused-MPTSASState-pending.patch msf2-mac-switch-to-use-qemu_receive_pack.patch net-Fix-handling-of-id-in-netdev_add-and.patch net-introduce-qemu_receive_packet.patch pcnet-switch-to-use-qemu_receive_packet-.patch qemu-nbd-Use-SOMAXCONN-for-socket-listen.patch qemu-storage-daemon-Enable-object-add.patch rtl8139-switch-to-use-qemu_receive_packe.patch s390x-add-have_virtio_ccw.patch s390x-css-report-errors-from-ccw_dstream.patch s390x-Fix-stringop-truncation-issue-repo.patch s390x-modularize-virtio-gpu-ccw.patch s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch s390x-pci-restore-missing-Query-PCI-Func.patch spice-app-avoid-crash-when-core-spice-mo.patch sungem-switch-to-use-qemu_receive_packet.patch target-arm-Don-t-decode-insns-in-the-XSc.patch target-arm-Fix-MTE0_ACTIVE.patch target-arm-Introduce-PREDDESC-field-defi.patch target-arm-Update-PFIRST-PNEXT-for-pred_.patch target-arm-Update-REV-PUNPK-for-pred_des.patch target-arm-Update-ZIP-UZP-TRN-for-pred_d.patch target-xtensa-fix-meson.build-rule-for-x.patch tcg-Use-memset-for-large-vector-byte-rep.patch tools-virtiofsd-Replace-the-word-whiteli.patch tx_pkt-switch-to-use-qemu_receive_packet.patch ui-vnc-Add-missing-lock-for-send_color_m.patch update-linux-headers-Include-const.h.patch Update-linux-headers-to-5.11-rc2.patch util-fix-use-after-free-in-module_load_o.patch vfio-ccw-Connect-the-device-request-noti.patch vhost-user-blk-fix-blkcfg-num_queues-end.patch viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch virtiofsd-extract-lo_do_open-from-lo_ope.patch virtiofsd-optionally-return-inode-pointe.patch virtiofsd-prevent-opening-of-special-fil.patch virtiofs-drop-remapped-security.capabili.patch virtiofsd-Save-error-code-early-at-the-f.patch virtio-move-use-disabled-flag-property-t.patch virtio-pci-compat-page-aligned-ATS.patch xen-block-Fix-removal-of-backend-instanc.patch- Include upstream patch designated as stable material and reviewed for applicability to include here mptsas-Remove-unused-MPTSASState-pending.patch - Clarify in support documents that cpu-add was removed in this release from both the human monitor protocol (HMP) and QMP interfaces- 6.0.0 qemu is about to be released. Add comments to the in- package support documents (supported..txt) about the new deprecations as of that release as an early head's up for qemu users. These deprecations include these command-line options: - M option: kernel-irqchip=off - chardev tty - chardev paraport - enable-fips - writeconfig - spice password=string- Include upstream patches designated as stable material and reviewed for applicability to include here. NOTE that the PIIX4 patch has migration implications: the change will also be applied to the SLE-15-SP2 qemu, and a live migration from that version to this SLE-15-SP3 qemu would require this patch to be applied for a successful migration if PIIX4 southbridge is used in the machine emulation (x86 i440fx) block-rbd-fix-memory-leak-in-qemu_rbd_co.patch block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch cpu-core-Fix-help-of-CPU-core-device-typ.patch hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch hw-block-fdc-Fix-fallback-property-on-sy.patch hw-isa-Kconfig-Add-missing-dependency-VI.patch hw-isa-piix4-Migrate-Reset-Control-Regis.patch hw-virtio-pci-Added-AER-capability.patch hw-virtio-pci-Added-counter-for-pcie-cap.patch s390x-css-report-errors-from-ccw_dstream.patch target-xtensa-fix-meson.build-rule-for-x.patch util-fix-use-after-free-in-module_load_o.patch virtio-pci-compat-page-aligned-ATS.patch- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103) * Patches dropped: hw-s390x-modularize-virtio-gpu-ccw.patch * Patches added: s390x-add-have_virtio_ccw.patch s390x-modularize-virtio-gpu-ccw.patch s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282) hw-sd-sd-Actually-perform-the-erase-oper.patch hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch hw-sd-sdhci-Correctly-set-the-controller.patch hw-sd-sdhci-Don-t-transfer-any-data-when.patch hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch hw-sd-sdhci-Limit-block-size-only-when-S.patch hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch hw-sd-sd-Move-the-sd_block_-read-write-a.patch hw-sd-sd-Skip-write-protect-groups-check.patch - Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373) tools-virtiofsd-Replace-the-word-whiteli.patch viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch virtiofsd-extract-lo_do_open-from-lo_ope.patch virtiofsd-optionally-return-inode-pointe.patch virtiofsd-prevent-opening-of-special-fil.patch virtiofs-drop-remapped-security.capabili.patch virtiofsd-Save-error-code-early-at-the-f.patch - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) net-introduce-qemu_receive_packet.patch rtl8139-switch-to-use-qemu_receive_packe.patch - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) cadence_gem-switch-to-use-qemu_receive_p.patch dp8393x-switch-to-use-qemu_receive_packe.patch e1000-switch-to-use-qemu_receive_packet-.patch lan9118-switch-to-use-qemu_receive_packe.patch msf2-mac-switch-to-use-qemu_receive_pack.patch pcnet-switch-to-use-qemu_receive_packet-.patch sungem-switch-to-use-qemu_receive_packet.patch tx_pkt-switch-to-use-qemu_receive_packet.patch - Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686) memory-clamp-cached-translation-in-case-.patch - Include upstream patches designated as stable material and reviewed for applicability to include here hw-arm-virt-Disable-pl011-clock-migratio.patch xen-block-Fix-removal-of-backend-instanc.patch - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)- Fix s390x "mediated device is in use" error condition (bsc#1183634) update-linux-headers-Include-const.h.patch Update-linux-headers-to-5.11-rc2.patch vfio-ccw-Connect-the-device-request-noti.patch- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577) e1000-fail-early-for-evil-descriptor.patch- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372) s390x-pci-restore-missing-Query-PCI-Func.patch- Include upstream patches designated as stable material and reviewed for applicability to include here lsilogic-Use-PCIDevice-exit-instead-of-D.patch vhost-user-blk-fix-blkcfg-num_queues-end.patch - Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137) 9pfs-Fully-restart-unreclaim-loop-CVE-20.patch - Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639) net-vmxnet3-validate-configuration-value.patch- Add #!ForceMultiversion to qemu.spec: + As the spec file defines different Version: fiels for various subpackages, we must instruct OBS to not ever reset the checkin-counter, as it would by defalut on a version increase. Resetting the version counter results in sub-packages reusing their VERSION-RELEASE from the past (e.g. qemu-ipxe is version 1.0.0+, and upon checkin of a new qemu version, RELEASE is reset to 1.1, thus again producing qemu-ipxe-1.0.0+-1.1.noarch.rpm.- Fix GCC11 compiler issue in brotli (edk2) code (boo#1181922) brotli-fix-actual-variable-array-paramet.patch - Tweak a few submodule descriptions and summaries - Fix a backward compatibility issue in ACPI data i386-acpi-restore-device-paths-for-pre-5.patch- Add patch from IBM to improve modularization situation on s390 where a new qemu module, hw-s390x-virtio-gpu-ccw.so, and a corresponding new qemu-hw-s390x-virtio-gpu-ccw subpackage, is split out (this parallels the hw-display-virtio-gpu-pci.so module). Split-provides file is also used to track this functionality splitout. Both the packages supplying the above mentioned modules now have a Requires on the qemu-hw-display-virtio-gpu package. It is anticipated that this change is going in upstream as well, and if done differently the plan is to update to the upstream implementation if possible (bsc#1181103) hw-s390x-modularize-virtio-gpu-ccw.patch- Added a few more usability improvements for our git packaging workflow- Fix issue of virtio-9p-ccw having been mistakenly dropped from qemu (bsc#1182496) hw-s390x-fix-build-for-virtio-9p-ccw.patch- Tweaked some spec file details to be again compatible with quilt setup using the spec file as input - Remove BuildRequires that were added in anticipation of building ovmf within this package. We have not taken that route- Fix uninitialized variable in ipxe driver code (boo#1181922) ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch - Add a few improvements to the git-based package workflow scripts- Include additional upstream patches designated as stable material and reviewed for applicability to include here blockjob-Fix-crash-with-IOthread-when-bl.patch monitor-Fix-assertion-failure-on-shutdow.patch qemu-nbd-Use-SOMAXCONN-for-socket-listen.patch qemu-storage-daemon-Enable-object-add.patch- Switch the modules qemu-ui-display-gpu and qemu-ui-display-gpu-pci from being an x86 only Recommends, to a Recommends for all arch's except s390x (boo#1181350) - Fix qemu-hw-usb-smartcard to not be a Recommends for s390x - Minor spec file tweaks for compatibility with upcoming spec file formatter- Make note that this patch takes care of an OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933) hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch- Include upstream patches designated as stable material and reviewed for applicability to include here block-Separate-blk_is_writable-and-blk_s.patch hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch hw-net-lan9118-Fix-RX-Status-FIFO-PEEK-v.patch hw-timer-slavio_timer-Allow-64-bit-acces.patch net-Fix-handling-of-id-in-netdev_add-and.patch target-arm-Don-t-decode-insns-in-the-XSc.patch target-arm-Fix-MTE0_ACTIVE.patch target-arm-Introduce-PREDDESC-field-defi.patch target-arm-Update-PFIRST-PNEXT-for-pred_.patch target-arm-Update-REV-PUNPK-for-pred_des.patch target-arm-Update-ZIP-UZP-TRN-for-pred_d.patch tcg-Use-memset-for-large-vector-byte-rep.patch ui-vnc-Add-missing-lock-for-send_color_m.patch virtio-move-use-disabled-flag-property-t.patch- binutils v2.36 has changed the handling of the assembler's - mx86-used-note, resulting in a build failure. To compensate, we now explicitly specify -mx86-used-note=no in the seabios Makefile (boo#1181775) build-be-explicit-about-mx86-used-note-n.patch- Additional tweaks to ensure libvirt runs ok when qemu-hw-display-virtio-gpu package is not installed- Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid "Failed to try-restart qemu-ga@.service" error while updating the qemu-guest-agent. (bsc#1178565)- Fix two additional cases of qemu crashing due to qemu module packages not being loaded. qom-handle-case-of-chardev-spice-module-.patch spice-app-avoid-crash-when-core-spice-mo.patch- Fix issue of qemu crashing (abort called) when virtio-gpu device is asked for and the qemu-hw-display-virtio-gpu package isn't installed. (bsc#1181103) module-for-virtio-gpu-pre-load-module-to.patch - Add additional inter-module package dependencies, to reflect the current module dependencies (see qemu source file: util/module.c) - As of v3.1.0 virt-manager, new VM's are created by default with audio/sound enabled, so it's time to reflect the need, at least in the spice case, by having spice-audio available when spice in general is used (boo#1180210 boo#1181132) - Further refine package Recommends/Suggests based on architecture - Remove no longer needed dependency on pwdutils (boo#1181235)- Fix qemu-testsuite issue where white space processing gets handled differently under bash 5.1 (boo#1181054) iotests-Fix-_send_qemu_cmd-with-bash-5.1.patch- Convert qemu-kvm from a script to a symlink. Using qemu-kvm to invoke the QEMU emulator has been deprecated for some time, but is still provided. It has as it's ancient origins a version of QEMU which had KVM acceleration enabled by default, and then recently, until now, it is a shell script which execs the QEMU emulator, adding '-machine accel=kvm' to the beginning of the list of command line options passed to the emulator. This method collides with the now preferred method of specifying acceleration options by using -accel. qemu-kvm is now changed to simply be a symlink to the same QEMU binary which the prior script exec'd. This new approach takes advantage of a built-in QEMU feature where if QEMU is invoked using a program name ending in 'kvm', KVM emulation is enabled. This approach is better in that it is more compatible with any other command line option that may be added for describing acceleration. For those who have modified qemu-kvm to add additional command line options, or take other actions in the context of the script you will now need to create an alternate script "emulator" to achieve the same result. Note that it's possible there may be some very subtle behavioral difference in the switch from a script to a symlink, but given that qemu-kvm is a deprecated package, we're not going to worry about that.- Fix crash when spice used and the qemu-audio-spice package isn't installed (boo#1180210) audio-add-sanity-check.patch - Add some stable patches from upstream block-Fix-deadlock-in-bdrv_co_yield_to_d.patch block-Fix-locking-in-qmp_block_resize.patch block-nfs-fix-int-overflow-in-nfs_client.patch block-Simplify-qmp_block_resize-error-pa.patch build-no-pie-is-no-functional-linker-fla.patch- Update to v5.2.0: See http://wiki.qemu.org/ChangeLog/5.2 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * Dropped system emulators: qemu-system-lm32, qemu-system-unicore32 * Dropped linux user emulator: qemu-ppc64abi32 * Added linux user emulator: qemu-extensaeb * Unicore32 and lm32 guest support dropped * New sub-packages (most due to ongoing modularization of QEMU): qemu-audio-spice, qemu-hw-chardev-spice, qemu-hw-display-virtio-vga, qemu-hw-display-virtio-gpu, qemu-hw-display-virtio-gpu-pci, qemu-ui-spice-core, qemu-ui-opengl, qemu-ivshmem-tools * x86: A new KVM feature which improves the handling of asynchronous page faults is available with -cpu ...,kvm-async-pf-int (requires Linux 5.8) * s390: More instructions emulated under TCG * PowerPC: nvdimm= machine option now functions correctly; misc improvements * ARM: new boards: mps2-an386 (Cortex-M4 based) and mps2-an500 (Cortex-M7 based), raspi3ap (the Pi 3 model A+), raspi0 (the Pi Zero) and raspi1ap (the Pi A+) * RISC-V: OpenSBI v0.8 included by default; Generic OpenSBI platform used when no -bios argument is supplied; Support for NUMA sockets on Virt and Spike Machines; Support for migrating machines; misc improvements * Misc NVMe improvements * The 'vhost-user-blk' export type has been added, allowing qemu-storage-daemon to act as a vhost-user-blk device backend * The SMBIOS OEM strings can now come from a file * 9pfs - misc performance related improvements * virtiofs - misc improvements * migration: The default migration bandwidth has been increased to 1Gbps (users are still encouraged to tune it to their own hardware); The new 'calc-dirty-rate' and 'query-dirty-rate' QMP commands can help determine the likelihood of precopy migration success; TLS+multifd now supported for higher bandwidth encrypted migration; misc minor features added * Misc minor block features added * Misc doc improvements * qemu-microvm subpackage change: the bios-microvm.bin is now SeaBIOS based, and the qboot based on is now qboot.rom * elf2dmp is no longer part of qemu-tools (it was never intended to be a packaged binary) * Some subpackages which were 'Requires' are now 'Recommends', allowing for a smaller qemu packaging footprint if needed * Patches dropped (included in release tarball, unless otherwise noted): docs-fix-trace-docs-build-with-sphinx-3..patch (fixed differently) hw-hyperv-vmbus-Fix-32bit-compilation.patch linux-user-properly-test-for-infinite-ti.patch Switch-order-of-libraries-for-mpath-supp.patch (fixed differently) Conditionalize-ui-bitmap-installation-be.patch (fixed differently) hw-usb-hcd-xhci-Fix-GCC-9-build-warning.patch (no longer using gcc9) hw-usb-dev-mtp-Fix-GCC-9-build-warning.patch (no longer using gcc9) roms-Makefile-enable-cross-compile-for-b.patch (fixed with different patch) libvhost-user-handle-endianness-as-manda.patch virtio-add-vhost-user-fs-ccw-device.patch Fix-s-directive-argument-is-null-error.patch build-Workaround-compilation-error-with-.patch build-Be-explicit-about-fcommon-compiler.patch intel-Avoid-spurious-compiler-warning-on.patch golan-Add-explicit-type-casts-for-nodnic.patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch ensure-headers-included-are-compatible-w.patch Enable-cross-compile-prefix-for-C-compil.patch (fixed differently) hw-net-net_tx_pkt-fix-assertion-failure-.patch hw-net-xgmac-Fix-buffer-overflow-in-xgma.patch s390x-protvirt-allow-to-IPL-secure-guest.patch usb-fix-setup_len-init-CVE-2020-14364.patch * Patches added: meson-install-ivshmem-client-and-ivshmem.patch Revert-roms-efirom-tests-uefi-test-tools.patch Makefile-Don-t-check-pc-bios-as-pre-requ.patch roms-Makefile-add-cross-file-to-qboot-me.patch qboot-add-cross.ini-file-to-handle-aarch.patch usb-Help-compiler-out-to-avoid-a-warning.patch - In spec file, where reasonable, switch BuildRequires: XXX-devel to be pkgconfig(XXX') instead - No longer disable link time optimization for qemu for x86. It looks like either the build service, qemu code changes and/or the switch to meson have resolved issues previously seen there. We still see problems for other architectures however. - For the record, the following issues reported for SUSE SLE15-SP2 are either fixed in this current package, or are otherwise no longer an issue: bsc#1172384 bsc#1174386 bsc#1174641 bsc#1174863 bsc#1175370 bsc#1175441 bsc#1176494 CVE-2020-13361 CVE-2020-14364 CVE-2020-15863 CVE-2020-16092 CVE-2020-24352 and the following feature requests are satisfied by this package: jsc#SLE-13689 jsc#SEL-13780 jsc#SLE-13840 - To be more accurate, and to align with other qemu packaging practices, rename the qemu-s390 package to qemu-s390x. The old name (in the rpm namespace) is provided with a "Provides" directive, and an "Obsoletes" done against that name for prior qemu versions, as is standard practice (boo#1177764 jsc#SLE-17060) - Take this opportunity to remove some ancient Split-Provides mechanisms which can't conceivably be needed any more: qemu-block-curl provided: qemu:%_libdir/%name/block-curl.so qemu-guest-agent provided: qemu:%_bindir/qemu-ga qemu-tools provided: qemu:%_libexecdir/qemu-bridge-helper- Disable linux-user 'ls' test on 32 bit arm. It's failing with "Allocating guest commpage: Cannot allocate memory" error, which we should hunt down, but for now we don't want it to prevent the package from being built- Be more careful about what directives are used for qemu-testsuite- Fix some spec file 'Requires' statements to be accurate to the new model of relying on system-user-qemu and system-group-kvm to provide the needed users and groups- Added io_uring support.- A patch has been applied to virt-manager to handle qemu spice related modules not being present, so undo the change from Sep 30, 2020. Once again qemu-hw-display-qxl and qemu-hw-usb-redirect are Recommends and not Required by the qemu package (boo#1157320 boo#1176517, boo#1178141) - For jsc#SLE-11629, change qemu, qemu-tools, and qemu-guest-agent to rely on system-user-qemu and system-group-kvm to provide now static system UIDs and GID's for qemu user and group, and kvm group. This will make guest migration more seamless for new installations since there is no chance of having required ID's differ in value.- Add virtio-fs support for s390x (jsc#SLE-13822) libvhost-user-handle-endianness-as-manda.patch virtio-add-vhost-user-fs-ccw-device.patch- Note: As part of the "Close the Leap Gap" effort, it's been decided that our SDL2 support in qemu is not worth trying to maintain. Long ago SLE qemu stopped including SDL2 support and now we will do the same for the openSUSE releases going forward. Accordingly SDL2 options are now configured out, and the two sub- packages which are SDL2 specific, namely qemu-audio-sdl and qemu-ui-sdl, are no longer generated, and due to the rpm package conflicts used for those packages, they will be uninstalled from systems as qemu updates move forward - Drop e2fsprogs-devel and libpcap-devel as BuildRequires packages. They have not actually been needed to build qemu for a very long time - Add more forsplits files- Create qemu-skiboot sub-package. Use update-alternatives mechanism to coordinate with opal-firmware (provided with skiboot package set) on the provider of the /usr/share/qemu/skiboot.lid firmware file. qemu-skiboot uses a priority of 15, while opal-firmware uses a priority of 10 (jsc#SLE-13240)- Undo part of the split-provides recently done. We have to wait on virt-manager to handle qemu modularization better before we make qemu-hw-display-qxl and qemu-hw-usb-redirect non-required (boo#1157320 boo#1176517)- Fix spec file, where a conditional macro didn't have the correct syntax (bsc#1176766)- Change qemu-x86 packaging relationship with qemu-microvm from Requires to Recommends- In an effort to "Close the Leap Gap", remove use of is_opensuse from the spec file, so that the same packages built for SLE can be reused for Leap. Some sub-packages will not be included for SLE which are included for Leap. They wil be provided in Package Hub for SLE users as unsupported packages. (jsc#SLE-11660, jsc#SLE-11661, jsc#SLE-11662, jsc#SLE-11691, jse#SLE-11692, jsc#SLE-11894)- Add infrastructure to do package splits when split-off package isn't required and doesn't (otherwise) include any previously installed files. This version of qemu has split out non-essential functionality into loadable modules, as noted in Aug 20, 2020 log entry, which describes the emergency Split-Provides. That approach will be superseded by this planned approach, and those dummy doc files will be removed in time Here is the new mapping: subpackage continuity file provided (files are dummies) ========== ============================================ qemu-chardev-baum /usr/share/qemu/forsplits/00 qemu-hw-display-qxl /usr/share/qemu/forsplits/01 qemu-hw-usb-redirect /usr/share/qemu/forsplits/02 qemu-hw-usb-smartcard /usr/share/qemu/forsplits/03- Fix path of qemu-pr-helper. It was a mistake to move it from %_bindir to _libexecdir. In more recent qemu code it's been moved back, so undo this mistake by providing it at the same location as it has been all along- For SLE15-SP3, note that this update to v5.1.0 is a step towards fulfilling jsc#SLE-13689, which asks for qemu v5.2.0 or higher- Fix some shell syntax in update_git.sh, esp. an issue exposed by the most recent patch added- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441) usb-fix-setup_len-init-CVE-2020-14364.patch - Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, JIRA, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2020-1983 CVE-2020-10761 CVE-2020-13361 CVE-2020-13362 CVE-2020-13659 CVE-2020-13800 * bsc#1167816 bsc#1170940 boo#1171712 bsc#1172383 bsc#1172384 bsc#1172386 bsc#1172495 bsc#1172710 * Patches dropped (SLE) (included in current release tarball): exec-set-map-length-to-zero-when-returni.patch i386-acpi-Remove-_HID-from-the-SMBus-ACP.patch megasas-use-unsigned-type-for-reply_queu.patch- Fix compilation errors seen with pre-release gcc 11 qht-Revert-some-constification-in-qht.c.patch Revert-qht-constify-qht_statistics_init.patch help-compiler-out-by-initializing-array.patch s390x-Fix-stringop-truncation-issue-repo.patch - Add Split-Provides mechanism, using doc files which were moved in v5.1.0. This allows for the new subpackages to be selected for install when the v5.0.0 qemu is updated. These new subpackages are not marked as "Required" by any packages, in an effort to reduce the dependencies of the core qemu components (boo#1175320) v5.0.0 qemu file mapping is provided as follows: subpackage continuity file provided (files are dummies) ========== ============================================ qemu-chardev-baum /usr/share/doc/packages/qemu/qemu-ga-ref.html qemu-hw-display-qxl /usr/share/doc/packages/qemu/qemu-ga-ref.txt qemu-hw-usb-redirect /usr/share/doc/packages/qemu/qemu-qmp-ref.html qemu-hw-usb-smartcard /usr/share/doc/packages/qemu/qemu-qmp-ref.txt- Fix wrong usage of %{_libexecdir} for systemd owned paths below %{_prefix}/lib.- Update to v5.1.0: See http://wiki.qemu.org/ChangeLog/5.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * s390: Protected virtualization (secure execute) is fully merged upstream * s390: vfio-ccw devices no longer require setting the allow prefetch bit in the ORB, but is still dependent on host kernel support * s390: vfio-ccw now has basic support for relaying path state changes to the guest * PowerPC: pseries: NVDIMMs require label-size property * PowerPC: pseries: POWER10 support * PowerPC: added interface to inject POWER style NMIs * ARM: new board: sonorapass-bmc * ARM: new emulated features: ARMv8.2-TTSUXN, ARMv8.5-MemTag * ARM: Raspberry Pi boards now support a USB controller * ARM: virt board now supports hot-remove memory * RISC-V lots of improvements * qemu-img resize now requires -shrink to shrinking raw images * The mem parameter of the -numa option is no longer recognized starting with 5.1 machine types - instead use the memdev parameter * The ACPI WAET table is now exposed to guests * The max blocksize for virtual storage device is now 2 MiB * NVMe improvements * Crypto subsystem improvements * Block backends and tools: Numerous improvements and fixes * Firmware updates: SeaBIOS (essentially v1.14.0), OpenBIOS, SLOF (20200717), OpenSBI (v0.7) * Patches dropped (upstream unless otherwise noted): ati-vga-check-mm_index-before-recursive-.patch audio-fix-wavcapture-segfault.patch es1370-check-total-frame-count-against-c.patch exec-set-map-length-to-zero-when-returni.patch gcc10-maybe-uninitialized.patch hw-vfio-pci-quirks-Fix-broken-legacy-IGD.patch megasas-use-unsigned-type-for-reply_queu.patch nbd-server-Avoid-long-error-message-asse.patch ppc-spapr_caps-Don-t-disable-cap_cfpc-on.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch s390x-s390-virtio-ccw-Fix-build-on-syste.patch Sync-pv.patch tests-Disable-some-block-tests-for-now.patch (no longer needed) vga-fix-cirrus-bios.patch virtiofsd-add-rlimit-nofile-NUM-option.patch virtiofsd-stay-below-fs.file-max-sysctl-.patch * Patches renamed: build-Do-not-apply-WORKAROUND_CFLAGS-for.patch - > Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch build-Fix-s-directive-argument-is-null-e.patch - > Fix-s-directive-argument-is-null-error.patch * Patches added: hw-hyperv-vmbus-Fix-32bit-compilation.patch - New subpackages, due to modularization: qemu-chardev-baum, qemu-hw-display-qxl, qemu-hw-usb-redirect, qemu-hw-usb-smartcard - Configure to use "system" libslirp and libdaxctl (libnvdimm) when available- Don't disable cap_cfpc on POWER8 by default (bsc#1174374) ppc-spapr_caps-Don-t-disable-cap_cfpc-on.patch- Updating to Sphinx v3.1.2 in Factory is exposing an issue in qemu doc sources. Fix it docs-fix-trace-docs-build-with-sphinx-3..patch- Fix DoS possibility in ati-vga emulation (CVE-2020-13800 bsc#1172495) ati-vga-check-mm_index-before-recursive-.patch - Fix DoS possibility in Network Block Device (nbd) support infrastructure (CVE-2020-10761 bsc#1172710) nbd-server-Avoid-long-error-message-asse.patch - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386) exec-set-map-length-to-zero-when-returni.patch - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383) megasas-use-unsigned-type-for-reply_queu.patch - Fix legacy IGD passthrough hw-vfio-pci-quirks-Fix-broken-legacy-IGD.patch- The latest gcc10 available in Factory has the fix for the issue this patch was created to avoid, so drop it build-Work-around-gcc10-bug-by-not-using.patch- Switch to upstream versions of some patches we carry add-enum-cast-to-avoid-gcc10-warning.patch - > golan-Add-explicit-type-casts-for-nodnic.patch Be-explicit-about-fcommon-compiler-direc.patch - > build-Be-explicit-about-fcommon-compiler.patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch - > build-Do-not-apply-WORKAROUND_CFLAGS-for.patch Fix-s-directive-argument-is-null-error.patch - > build-Fix-s-directive-argument-is-null-e.patch Workaround-compilation-error-with-gcc-9..patch - > build-Workaround-compilation-error-with-.patch work-around-gcc10-problem-with-zero-leng.patch - > intel-Avoid-spurious-compiler-warning-on.patch - Fix vgabios issue for cirrus graphics emulation, which effectively downgraded it to standard VGA behavior vga-fix-cirrus-bios.patch- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384) es1370-check-total-frame-count-against-c.patch- Work around gcc 10 bug (boo#1172411) build-Work-around-gcc10-bug-by-not-using.patch- Now that gcc10 compatibility is figured out, remove NO_WERROR=1 again from ipxe make.- Fix segfault when doing HMP wavcapture (boo#1171712) audio-fix-wavcapture-segfault.patch- Fix DoS in virtiofsd, where a FUSE client could exhaust the number of available open files on the host (CVE-2020-10717 bsc#1171110) virtiofsd-add-rlimit-nofile-NUM-option.patch virtiofsd-stay-below-fs.file-max-sysctl-.patch- Add more fixes for gcc10 compatibility: Use NO_WERROR=1 when building ipxe sources, at least until we get gcc10 compatibility figured out. Also add patch for explicitly using -fcommon (boo#1171140) Be-explicit-about-fcommon-compiler-direc.patch and fix for tighter enum compatibility checking (boo#1171139) add-enum-cast-to-avoid-gcc10-warning.patch and a work around for what seems to be a compiler regression (boo#1171123) work-around-gcc10-problem-with-zero-leng.patch- Update to v5.0.0: See http://wiki.qemu.org/ChangeLog/5.0 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * x86: EPYC-Rome vcpu model * x86: vcpu model fixes for EPYC, Denverton, and Icelake-Server * s390: (as previously mentioned) Protected Virtualization support: start and control guest in secure mode (bsc#1167075 jsc#SLE-7407) * s390: support for Adapter Interrupt Suppression while running in KVM mode * PowerPC: pseries: NVDIMMs with file backend supported * PowerPC: powernv: KVM guests now runnable under TCG emulation * PowerPC: powernv: Basic POWER10 support * ARM: new boards: tacoma-bmc, Netduindo Plus 2, Orangepi PC * ARM: 'virt' machine now supports vTPM and virtio-iommu devices * ARM:Cortex-M7 CPU support * ARM: Lots of architecture features now emulated * ARM: TPM supported * ARM: Timekeeping improvements * ARM: LOTS more - refer to upstream changelog * virtio-iommu * VNC compatibility with noVNC improved * Support for using memory backends for main/"built-in" guest RAM * hostmem backends can now specify prealloc thread count * Better Azure compatibility of VHD images * Ceph namespaces supported * Compress block filter driver can create compressed backup images * virtiofsd availble for host filesystem passthrough * Improved html based documentation is provided with this release * Live migration support for external processes running on QEMU D-Bus * Patches dropped (upstream unless otherwise noted): i386-Add-MSR-feature-bit-for-MDS-NO.patch i386-Add-macro-for-stibp.patch i386-Add-new-CPU-model-Cooperlake.patch arm-arm-powerctl-set-NSACR.-CP11-CP10-bi.patch iotests-Skip-test-060-if-it-is-not-possi.patch iotests-Skip-test-079-if-it-is-not-possi.patch Revert-qemu-options.hx-Update-for-reboot.patch iotests-Provide-a-function-for-checking-.patch Fix-double-free-issue-in-qemu_set_log_fi.patch iotests-Fix-IMGOPTSSYNTAX-for-nbd.patch virtio-blk-fix-out-of-bounds-access-to-b.patch block-Activate-recursively-even-for-alre.patch i386-Resolve-CPU-models-to-v1-by-default.patch numa-properly-check-if-numa-is-supported.patch vhost-user-gpu-Drop-trailing-json-comma.patch display-bochs-display-fix-memory-leak.patch hw-arm-smmuv3-Apply-address-mask-to-line.patch hw-arm-smmuv3-Correct-SMMU_BASE_ADDR_MAS.patch hw-arm-smmuv3-Check-stream-IDs-against-a.patch hw-arm-smmuv3-Align-stream-table-base-ad.patch hw-arm-smmuv3-Use-correct-bit-positions-.patch hw-arm-smmuv3-Report-F_STE_FETCH-fault-a.patch block-Add-bdrv_qapi_perm_to_blk_perm.patch blkdebug-Allow-taking-unsharing-permissi.patch virtio-add-ability-to-delete-vq-through-.patch virtio-update-queue-size-on-guest-write.patch virtio-don-t-enable-notifications-during.patch numa-Extend-CLI-to-provide-initiator-inf.patch numa-Extend-CLI-to-provide-memory-latenc.patch numa-Extend-CLI-to-provide-memory-side-c.patch hmat-acpi-Build-Memory-Proximity-Domain-.patch hmat-acpi-Build-System-Locality-Latency-.patch hmat-acpi-Build-Memory-Side-Cache-Inform.patch tests-numa-Add-case-for-QMP-build-HMAT.patch qcow2-bitmaps-fix-qcow2_can_store_new_di.patch backup-top-Begin-drain-earlier.patch virtio-mmio-update-queue-size-on-guest-w.patch virtio-net-delete-also-control-queue-whe.patch intel_iommu-a-fix-to-vtd_find_as_from_bu.patch target-i386-Add-new-bit-definitions-of-M.patch target-i386-Add-missed-features-to-Coope.patch hw-i386-pc-fix-regression-in-parsing-vga.patch migration-test-ppc64-fix-FORTH-test-prog.patch target-arm-Return-correct-IL-bit-in-merg.patch target-arm-Set-ISSIs16Bit-in-make_issinf.patch runstate-ignore-finishmigrate-prelaunch-.patch migration-Rate-limit-inside-host-pages.patch m68k-Fix-regression-causing-Single-Step-.patch Revert-vnc-allow-fall-back-to-RAW-encodi.patch vnc-prioritize-ZRLE-compression-over-ZLI.patch target-i386-kvm-initialize-feature-MSRs-.patch s390x-adapter-routes-error-handling.patch iscsi-Cap-block-count-from-GET-LBA-STATU.patch block-backup-fix-memory-leak-in-bdrv_bac.patch tpm-ppi-page-align-PPI-RAM.patch hw-intc-arm_gicv3_kvm-Stop-wrongly-progr.patch target-arm-fix-TCG-leak-for-fcvt-half-do.patch block-fix-memleaks-in-bdrv_refresh_filen.patch block-backup-top-fix-failure-path.patch iotests-add-test-for-backup-top-failure-.patch audio-oss-fix-buffer-pos-calculation.patch target-arm-monitor-query-cpu-model-expan.patch block-fix-crash-on-zero-length-unaligned.patch block-Fix-VM-size-field-width-in-snapsho.patch target-arm-Correct-definition-of-PMCRDP.patch block-nbd-extract-the-common-cleanup-cod.patch block-nbd-fix-memory-leak-in-nbd_open.patch virtio-crypto-do-delete-ctrl_vq-in-virti.patch virtio-pmem-do-delete-rq_vq-in-virtio_pm.patch vhost-user-blk-delete-virtioqueues-in-un.patch hw-arm-cubieboard-use-ARM-Cortex-A8-as-t.patch pc-bios-s390x-Save-iplb-location-in-lowc.patch iotests-Fix-nonportable-use-of-od-endian.patch block-qcow2-threads-fix-qcow2_decompress.patch job-refactor-progress-to-separate-object.patch block-block-copy-fix-progress-calculatio.patch block-io-fix-bdrv_co_do_copy_on_readv.patch scsi-qemu-pr-helper-Fix-out-of-bounds-ac.patch target-ppc-Fix-rlwinm-on-ppc64.patch compat-disable-edid-on-correct-virtio-gp.patch ppc-ppc405_boards-Remove-unnecessary-NUL.patch block-Avoid-memleak-on-qcow2-image-info-.patch block-bdrv_set_backing_bs-fix-use-after-.patch hmp-vnc-Fix-info-vnc-list-leak.patch migration-colo-fix-use-after-free-of-loc.patch migration-ram-fix-use-after-free-of-loca.patch qcow2-List-autoclear-bit-names-in-header.patch sheepdog-Consistently-set-bdrv_has_zero_.patch target-arm-Fix-PAuth-sbox-functions.patch tcg-i386-Fix-INDEX_op_dup2_vec.patch net-tulip-check-frame-size-and-r-w-data-.patch target-i386-do-not-set-unsupported-VMX-s.patch spapr-Fix-failure-path-for-attempting-to.patch ati-vga-Fix-checks-in-ati_2d_blt-to-avoi.patch xen-block-Fix-double-qlist-remove-and-re.patch vpc-Don-t-round-up-already-aligned-BAT-s.patch target-xtensa-fix-pasto-in-pfwait.r-opco.patch aio-wait-delegate-polling-of-main-AioCon.patch async-use-explicit-memory-barriers.patch tcg-mips-mips-sync-encode-error.patch vhost-user-gpu-Release-memory-returned-b.patch vga-Raise-VRAM-to-16-MiB-for-pc-0.15-and.patch (no pc-0.15) hw-i386-disable-smbus-migration-for-xenf.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-Move-initial-reset.patch s390x-Move-clear-reset.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-Beautify-diag308-handling.patch s390x-Add-missing-vcpu-reset-functions.patch s390-sclp-improve-special-wait-psw-logic.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch util-add-slirp_fmt-helpers.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch slirp-use-correct-size-while-emulating-c.patch tcp_emu-fix-unsafe-snprintf-usages.patch - For SLE builds, leverage the html documentation by adding a link to the SUSE specific support documentation (the *.txt support doc was slightly tweaked to be acceptable as reStructuredText for conversion to html) docs-add-SUSE-support-statements-to-html.patch-Fix potential DoS in ATI VGA emulation (CVE-2020-11869 bsc#1170537) ati-vga-Fix-checks-in-ati_2d_blt-to-avoi.patch- Minor tweaks to patches and support doc- Add gcc10-maybe-uninitialized.patch in order to fix boo#1169728.- Include upstream patches targeted for the next stable release (bug fixes only) spapr-Fix-failure-path-for-attempting-to.patch target-i386-do-not-set-unsupported-VMX-s.patch target-xtensa-fix-pasto-in-pfwait.r-opco.patch tcg-i386-Fix-INDEX_op_dup2_vec.patch tcg-mips-mips-sync-encode-error.patch vhost-user-gpu-Release-memory-returned-b.patch vpc-Don-t-round-up-already-aligned-BAT-s.patch xen-block-Fix-double-qlist-remove-and-re.patch - Fix bug causing weak encryption in PAuth for ARM (CVE-2020-10702 bsc#1168681) target-arm-Fix-PAuth-sbox-functions.patch - Fix OOB in tulip NIC emulation (CVE-2020-11102 bsc#1168713 net-tulip-check-frame-size-and-r-w-data-.patch - Note that previously included patch addresses CVE-2020-1711 and bsc#1166240 iscsi-Cap-block-count-from-GET-LBA-STATU.patch - Include performance improvement (and related?) patch aio-wait-delegate-polling-of-main-AioCon.patch async-use-explicit-memory-barriers.patch - Rework previous patch at Olaf H.'s direction hw-i386-disable-smbus-migration-for-xenf.patch - Eliminate is_opensuse usage in producing seabios version string what we are doing here is just replacing the upstream string with one indicating that the openSUSE build service built it, and so just leave it as "-rebuilt.opensuse.org" - Alter algorithm used to produce "unique" symbol for coordinating qemu with the optional modules it may load. This is a reasonable relaxation for broader compatibility configure-remove-pkgversion-from-CONFIG_.patch - Tweak supported.*.txt for latest deprecations, and other fixes - Tweak update_git.sh, config.sh- One more fix is needed for: s390x Protected Virtualization support - start and control guest in secure mode (bsc#1167075 jsc#SLE-7407) s390x-s390-virtio-ccw-Fix-build-on-syste.patch- Include upstream patches targeted for the next stable release (bug fixes only) block-Avoid-memleak-on-qcow2-image-info-.patch block-bdrv_set_backing_bs-fix-use-after-.patch hmp-vnc-Fix-info-vnc-list-leak.patch migration-colo-fix-use-after-free-of-loc.patch migration-ram-fix-use-after-free-of-loca.patch ppc-ppc405_boards-Remove-unnecessary-NUL.patch qcow2-List-autoclear-bit-names-in-header.patch scsi-qemu-pr-helper-Fix-out-of-bounds-ac.patch sheepdog-Consistently-set-bdrv_has_zero_.patch- Note The previous set of s390x patches also includes the fix for: bsc#1167445- Include upstream patches targeted for the next stable release (bug fixes only) block-io-fix-bdrv_co_do_copy_on_readv.patch compat-disable-edid-on-correct-virtio-gp.patch target-ppc-Fix-rlwinm-on-ppc64.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch - s390x Protected Virtualization support - start and control guest in secure mode. (note: binary patch from patch series dropped since for s390x we rebuild the patched binary anyways) (bsc#1167075 jsc#SLE-7407) s390-sclp-improve-special-wait-psw-logic.patch s390x-Add-missing-vcpu-reset-functions.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Beautify-diag308-handling.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-Move-clear-reset.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-Move-initial-reset.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch Sync-pv.patch- Fix the issue that s390x could not read IPL channel program when using dasd as boot device (bsc#1163140) pc-bios-s390x-Save-iplb-location-in-lowc.patch- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018 bsc#1161066 CVE-2020-7039) slirp-use-correct-size-while-emulating-c.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch tcp_emu-fix-unsafe-snprintf-usages.patch util-add-slirp_fmt-helpers.patch - Replace this patch with upstream version target-arm-monitor-query-cpu-model-expan.patch- Include upstream patches targeted for the next stable release (bug fixes only) audio-oss-fix-buffer-pos-calculation.patch blkdebug-Allow-taking-unsharing-permissi.patch block-Add-bdrv_qapi_perm_to_blk_perm.patch block-backup-top-fix-failure-path.patch block-block-copy-fix-progress-calculatio.patch block-fix-crash-on-zero-length-unaligned.patch block-fix-memleaks-in-bdrv_refresh_filen.patch block-Fix-VM-size-field-width-in-snapsho.patch block-nbd-extract-the-common-cleanup-cod.patch block-nbd-fix-memory-leak-in-nbd_open.patch block-qcow2-threads-fix-qcow2_decompress.patch hw-arm-cubieboard-use-ARM-Cortex-A8-as-t.patch hw-intc-arm_gicv3_kvm-Stop-wrongly-progr.patch iotests-add-test-for-backup-top-failure-.patch iotests-Fix-nonportable-use-of-od-endian.patch job-refactor-progress-to-separate-object.patch target-arm-Correct-definition-of-PMCRDP.patch target-arm-fix-TCG-leak-for-fcvt-half-do.patch tpm-ppi-page-align-PPI-RAM.patch vhost-user-blk-delete-virtioqueues-in-un.patch virtio-add-ability-to-delete-vq-through-.patch virtio-crypto-do-delete-ctrl_vq-in-virti.patch virtio-pmem-do-delete-rq_vq-in-virtio_pm.patch- Add Obsoletes directive for qemu-audio-sdl and qemu-ui-sdl since for a qemu package upgrade from SLE12-SP5, support for SDL is dropped- Fix xenfv migration from xen host with pre-v4.0 qemu. We had previously dropped a similar patch, but have decided that for now we need to go with this type of solution (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch- Avoid query-cpu-model-expansion crashed qemu when using machine type none, patch is queued in upstream now, will update commit id later (bsc#1159443) target-arm-monitor-query-cpu-model-expan.patch- BuildRequire pkgconfig(libudev) instead of libudev-devel: Allow OBS to shortcut through -mini flavors.- Stop using system membarriers (ie switch from --enable-membarrier to --disable-membarrier). This is a blocker for using qemu in the context of containers (boo#1130134 jsc#SLE-11089) - Drop this recently added patch - in consultation with upstream it was decided it needed to be solved a different way (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch - Include upstream patches targeted for the next stable release (bug fixes only) block-backup-fix-memory-leak-in-bdrv_bac.patch iscsi-Cap-block-count-from-GET-LBA-STATU.patch s390x-adapter-routes-error-handling.patch target-i386-kvm-initialize-feature-MSRs-.patch- Include upstream patches targeted for the next stable release (bug fixes only) hw-i386-pc-fix-regression-in-parsing-vga.patch m68k-Fix-regression-causing-Single-Step-.patch migration-Rate-limit-inside-host-pages.patch migration-test-ppc64-fix-FORTH-test-prog.patch Revert-vnc-allow-fall-back-to-RAW-encodi.patch runstate-ignore-finishmigrate-prelaunch-.patch target-arm-Return-correct-IL-bit-in-merg.patch target-arm-Set-ISSIs16Bit-in-make_issinf.patch vnc-prioritize-ZRLE-compression-over-ZLI.patch- BuildRequire pkconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors. - Use systemd_ordering in place of systemd_requires: systemd is never a strict requirement for qemu; but when installing qemu on a systemd-managed system, we want system to be present first.- Fix xenfv migration from xen host with pre-v4.0 qemu (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch- Create files within bundles.tar.xz with fixed timestamp and uid- Add a %bcond_without system_membarrier along with related processing to the spec file, to better investigate running QEMU with the --disable-membarrier configure option- Include upstream patches targeted for the next stable release (bug fixes only) arm-arm-powerctl-set-NSACR.-CP11-CP10-bi.patch backup-top-Begin-drain-earlier.patch block-Activate-recursively-even-for-alre.patch display-bochs-display-fix-memory-leak.patch Fix-double-free-issue-in-qemu_set_log_fi.patch hw-arm-smmuv3-Align-stream-table-base-ad.patch hw-arm-smmuv3-Apply-address-mask-to-line.patch hw-arm-smmuv3-Check-stream-IDs-against-a.patch hw-arm-smmuv3-Correct-SMMU_BASE_ADDR_MAS.patch hw-arm-smmuv3-Report-F_STE_FETCH-fault-a.patch hw-arm-smmuv3-Use-correct-bit-positions-.patch i386-Resolve-CPU-models-to-v1-by-default.patch intel_iommu-a-fix-to-vtd_find_as_from_bu.patch iotests-Fix-IMGOPTSSYNTAX-for-nbd.patch iotests-Provide-a-function-for-checking-.patch iotests-Skip-test-060-if-it-is-not-possi.patch iotests-Skip-test-079-if-it-is-not-possi.patch numa-properly-check-if-numa-is-supported.patch qcow2-bitmaps-fix-qcow2_can_store_new_di.patch Revert-qemu-options.hx-Update-for-reboot.patch vhost-user-gpu-Drop-trailing-json-comma.patch virtio-blk-fix-out-of-bounds-access-to-b.patch virtio-mmio-update-queue-size-on-guest-w.patch virtio-net-delete-also-control-queue-whe.patch virtio-update-queue-size-on-guest-write.patch - Include performance improvement virtio-don-t-enable-notifications-during.patch - Repair incorrect packaging references to Jira tracked features- Add Cooperlake vcpu model (jsc#SLE-7923) i386-Add-MSR-feature-bit-for-MDS-NO.patch i386-Add-macro-for-stibp.patch i386-Add-new-CPU-model-Cooperlake.patch target-i386-Add-new-bit-definitions-of-M.patch target-i386-Add-missed-features-to-Coope.patch - Add HMAT support (jsc#SLE-8897) (the test case for this series isn't included because we aren't set up to handle binary patches) numa-Extend-CLI-to-provide-initiator-inf.patch numa-Extend-CLI-to-provide-memory-latenc.patch numa-Extend-CLI-to-provide-memory-side-c.patch hmat-acpi-Build-Memory-Proximity-Domain-.patch hmat-acpi-Build-System-Locality-Latency-.patch hmat-acpi-Build-Memory-Side-Cache-Inform.patch tests-numa-Add-case-for-QMP-build-HMAT.patch- Update to v4.2.0: See http://wiki.qemu.org/ChangeLog/4.2 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86: Denverton, Snowridge, and Dhyana CPU models added * x86: Latest version of all CPU models how have TSX (HLE and RTM) disabled by default * x86: Support for AVX512 BFloat16 extensions * x86: VMX features exposed more accurately and controllably * s390: TCG now implements IEP (Instruction Execution Protection) * PowerPC: POWER8 and POWER9 non-virtualized machines separated out * PowerPC: RTAS now comes from SLOF instead of QEMU itself * PowerPC: Unplug of multifunction PCI devices now unplugs the whole slot, as in x86 * ARM: Support for >256 CPUs with KVM is fixed * ARM: Memory hotplug now supported , when using UEFI, ACPI, for virt machine type * ARM: SVE support possuble now for KVM guests * ARM: ACPI generic event device can now deliver powerdown event * The backend device can be specified for a guest audio device * virtio v1.1 packed virtqueues supported * Socket based character device backends now support TCP keep-alive * Use encryption library cipher mode facilities, allowing improved performance for eg. AES-XTS encrption * Misc block device improvements, esp. with nbd - See the following few release-candidate changelog entries for additional changes related to this release - Switched package build to be out-of-tree- Update to v4.2.0-rc5: See http://wiki.qemu.org/ChangeLog/4.2- Update to v4.2.0-rc4: See http://wiki.qemu.org/ChangeLog/4.2 * Update the support documents used for SUSE SLE releases to cover this qemu release- Update to v4.2.0-rc3: See http://wiki.qemu.org/ChangeLog/4.2 * Patches dropped (upstream unless otherwise noted): ati-add-edid-support.patch ati-vga-add-rage128-edid-support.patch ati-vga-fix-ati_read.patch ati-vga-make-i2c-register-and-bits-confi.patch ati-vga-make-less-verbose.patch ati-vga-try-vga-ddc-first.patch Disable-Waddress-of-packed-member-for-GC.patch hdata-vpd-fix-printing-char-0x00.patch target-i386-add-PSCHANGE_NO-bit-for-the-.patch target-i386-Export-TAA_NO-bit-to-guests.patch vbe-add-edid-support.patch vga-add-ati-bios-tables.patch vga-add-atiext-driver.patch vga-make-memcpy_high-public.patch vga-move-modelist-from-bochsvga.c-to-new.patch * Patches added: Enable-cross-compile-prefix-for-C-compil.patch ensure-headers-included-are-compatible-w.patch roms-Makefile-enable-cross-compile-for-b.patch * Add qemu-ui-spice-app package containing ui-spice-app.so * Add qemu-microvm package containing bios-microvm.bin - Add descriptors for the 128k and 256k SeaBios firmware images - For the record, the following issues reported for SUSE SLE15-SP1 are either fixed in this current package, or are otherwise not an issue: bsc#1079730 bsc#1098403 bsc#1111025 bsc#1128106 bsc#1133031 bsc#1134883 bsc#1135210 bsc#1135902 bsc#1136540 bsc#1136778 bsc#1138534 bsc#1140402 bsc#1143794 bsc#1145379 bsc#1144087 bsc#1145427 bsc#1145436 bsc#1145774 bsc#1146873 bsc#1149811 bsc#1152506 bsc#1155812 bsc#1156642 CVE-2018-12207 CVE-2019-5008 CVE-2019-11135 CVE-2019-12068 CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 CVE-2019-15890, and the following feature requests are satisfied by this package: fate#327410 fate#327764 fate#327796 jsc#SLE-4883 jsc#SLE-6132 jsc#SLE-6237 jsc#SLE-6754- Expose pschange-mc-no "feature", indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) target-i386-add-PSCHANGE_NO-bit-for-the-.patch - Expose taa-no "feature", indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) target-i386-Export-TAA_NO-bit-to-guests.patch Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Update to v4.1.1, a stable, bug-fix-only release * Besides incorporating the following fixes we already carried, it includes about the same number of other, similar type fixes which we hadn't yet incorporated. * Patches dropped (subsumed by stable update): block-Add-bdrv_co_get_self_request.patch block-create-Do-not-abort-if-a-block-dri.patch block-file-posix-Let-post-EOF-fallocate-.patch block-file-posix-Reduce-xfsctl-use.patch block-io-refactor-padding.patch blockjob-update-nodes-head-while-removin.patch block-Make-wait-mark-serialising-request.patch block-nfs-tear-down-aio-before-nfs_close.patch coroutine-Add-qemu_co_mutex_assert_locke.patch curl-Check-completion-in-curl_multi_do.patch curl-Handle-success-in-multi_check_compl.patch curl-Keep-pointer-to-the-CURLState-in-CU.patch curl-Keep-socket-until-the-end-of-curl_s.patch curl-Pass-CURLSocket-to-curl_multi_do.patch curl-Report-only-ready-sockets.patch hw-arm-boot.c-Set-NSACR.-CP11-CP10-for-N.patch hw-core-loader-Fix-possible-crash-in-rom.patch make-release-pull-in-edk2-submodules-so-.patch memory-Provide-an-equality-function-for-.patch mirror-Keep-mirror_top_bs-drained-after-.patch pr-manager-Fix-invalid-g_free-crash-bug.patch qcow2-bitmap-Fix-uint64_t-left-shift-ove.patch qcow2-Fix-corruption-bug-in-qcow2_detect.patch qcow2-Fix-QCOW2_COMPRESSED_SECTOR_MASK.patch qcow2-Fix-the-calculation-of-the-maximum.patch roms-Makefile.edk2-don-t-pull-in-submodu.patch s390-PCI-fix-IOMMU-region-init.patch s390x-tcg-Fix-VERIM-with-32-64-bit-eleme.patch target-alpha-fix-tlb_fill-trap_arg2-valu.patch target-arm-Don-t-abort-on-M-profile-exce.patch target-arm-Free-TCG-temps-in-trans_VMOV_.patch util-iov-introduce-qemu_iovec_init_exten.patch vhost-Fix-memory-region-section-comparis.patch vpc-Return-0-from-vpc_co_create-on-succe.patch Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Fix %arm builds- Fix two issues with qcow2 image processing which could affect disk integrity qcow2-Fix-QCOW2_COMPRESSED_SECTOR_MASK.patch qcow2-bitmap-Fix-uint64_t-left-shift-ove.patch- Work around a host kernel xfs bug which can result in qcow2 image corruption block-io-refactor-padding.patch util-iov-introduce-qemu_iovec_init_exten.patch block-Make-wait-mark-serialising-request.patch block-Add-bdrv_co_get_self_request.patch block-file-posix-Let-post-EOF-fallocate-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Correct package names in _constraints after switch to multibuild.- Address potential corruption when using qcow2 images coroutine-Add-qemu_co_mutex_assert_locke.patch qcow2-Fix-corruption-bug-in-qcow2_detect.patch - Include more tweaks to our packaging workflow scripts - this will continue as we refine the scripts - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- use %gcc_version for cross compilers (boo#1153703)- Add upstream edk2 submodule fix for creating tarball - Switch to upstream patch for avoiding git ref in edk2 makefile - Fix failing block tests which aren't compatible with the configure option --enable-membarrier * Patches dropped: roms-Makefile.edk2-don-t-invoke-git-sinc.patch tests-block-io-test-130-needs-some-delay.patch * Patches added: make-release-pull-in-edk2-submodules-so-.patch roms-Makefile.edk2-don-t-pull-in-submodu.patch tests-Fix-block-tests-to-be-compatible-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Reduce the cross compiler versions we rely on - Fix some qemu-testsuite issues, reducing known error cases test-add-mapping-from-arch-of-i686-to-qe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Since our spec file has bashisms, include the following in the spec file: %define _buildshell /bin/bash- Disable some block tests which randomly fail. This is in context of the build service build of qemu-testsuite tests-Disable-some-block-tests-for-now.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Add some post v4.1.0 upstream stable patches * Patches added: mirror-Keep-mirror_top_bs-drained-after-.patch s390x-tcg-Fix-VERIM-with-32-64-bit-eleme.patch target-alpha-fix-tlb_fill-trap_arg2-valu.patch target-arm-Free-TCG-temps-in-trans_VMOV_.patch target-arm-Don-t-abort-on-M-profile-exce.patch qcow2-Fix-the-calculation-of-the-maximum.patch block-file-posix-Reduce-xfsctl-use.patch pr-manager-Fix-invalid-g_free-crash-bug.patch vpc-Return-0-from-vpc_co_create-on-succe.patch block-nfs-tear-down-aio-before-nfs_close.patch block-create-Do-not-abort-if-a-block-dri.patch curl-Keep-pointer-to-the-CURLState-in-CU.patch curl-Keep-socket-until-the-end-of-curl_s.patch curl-Check-completion-in-curl_multi_do.patch curl-Pass-CURLSocket-to-curl_multi_do.patch curl-Report-only-ready-sockets.patch curl-Handle-success-in-multi_check_compl.patch blockjob-update-nodes-head-while-removin.patch memory-Provide-an-equality-function-for-.patch vhost-Fix-memory-region-section-comparis.patch hw-arm-boot.c-Set-NSACR.-CP11-CP10-for-N.patch s390-PCI-fix-IOMMU-region-init.patch hw-core-loader-Fix-possible-crash-in-rom.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Include more tweaks to our packaging workflow scripts - Produce qemu-linux-user and qemu-testsuite via the build service multibuild capability, instead of duplicating the spec file and using package link in build service * combine qemu-linux-user spec file into main qemu spec file. Since this model uses a single changelog, here are some historicial mentions from the now unused qemu-linux-user.changes (delta from qemu's was quite minimal): - Adjust to a v5.2 linux kernel change regarding SIOCGSTAMP - Fix pwrite64/pread64 to return 0 over -1 for a zero length NULL buffer in qemu (bsc#1121600) * bsc#1112499 * Since qemu-testsuite.spec and qemu-testsuite.changes were just copies of the main qemu version nothing needs to be done there- Build opensbi from source on riscv64- Update to v4.1.0: See http://wiki.qemu.org/ChangeLog/4.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86: CPU models are now versioned * x86: CPU die topology can now be configured * x86: New Hygon Dhyana and Intel Snowridge CPU models * s390: The bios now supports IPL (boot) from ECKD DASD assigned to the guest via vfio-ccw * s390: The bios now tolerates the presence of bootmap signature entries written by zipl * PowerPC: pseries machine now supports KVM acceleration (kernel_irqchip=on) of the XIVE interrupt controller * PowerPC: pseries now supports hot-plug of PCI bridges and hot-plug and unplug of devices under PCI bridges * ARM: QEMU now supports emulating an FPU for Cortex-M CPUs, and the Cortex-M4 and Cortex-M33 now provide the FP * Python 2 support is deprecated * UEFI platform firmware binaries, and matching variable store templates are now installed * Now it's possible to specify memory-less NUMA node when using "-numa node,memdev" options * Possible to trigger self announcement on specific network interfaces * Default memory distribution between NUMA nodes is now deprecated * Fallback to normal RAM allocation if QEMU is not able to allocate from the "-mem-path" provided file/filesystem is now deprecated * virtio-gpu 2d/3d rendering may now be offloaded to an external vhost-user process, such as QEMU vhost-user-gpu * QEMU will automatically try to use the MAP_SYNC mmap flag for memory backends configured with pmem=on,share=on * Additional SeaVGABIOS patches added for vga-ati compatibility - Drop attempt at build compatibility with SLE12 - New sub-packages: qemu-edk2, qemu-vhost-user-gpu - Conditionalize building of qemu-edk2 (and leave unbuilt for now) - Implement new packaging workflow, includes no longer numbering patches, and having the "current git repo" stored with the package in the form of git bundles * Patches dropped (upstream unless otherwise noted): 0027-tests-test-thread-pool-is-racy-add-.patch 0032-tests-Fix-Makefile-handling-of-chec.patch 0034-Revert-target-i386-kvm-add-VMX-migr.patch 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-avoid-string-truncation-.patch 0040-linux-user-elfload-Fix-GCC-9-build-.patch 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch 0043-target-i386-define-md-clear-bit.patch 0045-kbd-state-fix-autorepeat-handling.patch 0046-target-ppc-ensure-we-get-null-termi.patch 0049-qxl-check-release-info-object.patch 0050-qemu-bridge-helper-restrict-interfa.patch 0051-linux-user-fix-to-handle-variably-s.patch ipxe-use-gcc6-for-more-compact-code.patch (no longer needed) (the next three are replaced by the upstream equivalent) ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch ipxe-build-Disable-gcc-address-of-packed-member-warning.patch ipxe-efi-Avoid-string-op-warning-with-cross-gcc-7-compile.patch slirp-fix-heap-overflow-in-ip_reass-on-big-packet-input.patch * Patches renamed: 0001-XXX-dont-dump-core-on-sigabort.patch - > XXX-dont-dump-core-on-sigabort.patch 0002-qemu-binfmt-conf-Modify-default-pat.patch - > qemu-binfmt-conf-Modify-default-path.patch 0003-qemu-cvs-gettimeofday.patch - > qemu-cvs-gettimeofday.patch 0004-qemu-cvs-ioctl_debug.patch - > qemu-cvs-ioctl_debug.patch 0005-qemu-cvs-ioctl_nodirection.patch - > qemu-cvs-ioctl_nodirection.patch 0006-linux-user-add-binfmt-wrapper-for-a.patch - > linux-user-add-binfmt-wrapper-for-argv-0.patch 0007-PPC-KVM-Disable-mmu-notifier-check.patch - > PPC-KVM-Disable-mmu-notifier-check.patch 0008-linux-user-binfmt-support-host-bina.patch - > linux-user-binfmt-support-host-binaries.patch 0009-linux-user-Fake-proc-cpuinfo.patch - > linux-user-Fake-proc-cpuinfo.patch 0010-linux-user-use-target_ulong.patch - > linux-user-use-target_ulong.patch 0011-Make-char-muxer-more-robust-wrt-sma.patch - > Make-char-muxer-more-robust-wrt-small-FI.patch 0012-linux-user-lseek-explicitly-cast-no.patch - > linux-user-lseek-explicitly-cast-non-set.patch 0013-AIO-Reduce-number-of-threads-for-32.patch - > AIO-Reduce-number-of-threads-for-32bit-h.patch 0014-xen_disk-Add-suse-specific-flush-di.patch - > xen_disk-Add-suse-specific-flush-disable.patch 0015-qemu-bridge-helper-reduce-security-.patch - > qemu-bridge-helper-reduce-security-profi.patch 0016-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch 0017-linux-user-properly-test-for-infini.patch - > linux-user-properly-test-for-infinite-ti.patch 0018-roms-Makefile-pass-a-packaging-time.patch - > roms-Makefile-pass-a-packaging-timestamp.patch 0019-Raise-soft-address-space-limit-to-h.patch - > Raise-soft-address-space-limit-to-hard-l.patch 0020-increase-x86_64-physical-bits-to-42.patch - > increase-x86_64-physical-bits-to-42.patch 0021-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > vga-Raise-VRAM-to-16-MiB-for-pc-0.15-and.patch 0022-i8254-Fix-migration-from-SLE11-SP2.patch - > i8254-Fix-migration-from-SLE11-SP2.patch 0023-acpi_piix4-Fix-migration-from-SLE11.patch - > acpi_piix4-Fix-migration-from-SLE11-SP2.patch 0024-Switch-order-of-libraries-for-mpath.patch - > Switch-order-of-libraries-for-mpath-supp.patch 0025-Make-installed-scripts-explicitly-p.patch - > Make-installed-scripts-explicitly-python.patch 0026-hw-smbios-handle-both-file-formats-.patch - > hw-smbios-handle-both-file-formats-regar.patch 0028-xen-add-block-resize-support-for-xe.patch - > xen-add-block-resize-support-for-xen-dis.patch 0029-tests-qemu-iotests-Triple-timeout-o.patch - > tests-qemu-iotests-Triple-timeout-of-i-o.patch 0030-tests-block-io-test-130-needs-some-.patch - > tests-block-io-test-130-needs-some-delay.patch 0031-xen-ignore-live-parameter-from-xen-.patch - > xen-ignore-live-parameter-from-xen-save-.patch 0033-Conditionalize-ui-bitmap-installati.patch - > Conditionalize-ui-bitmap-installation-be.patch 0035-tests-change-error-message-in-test-.patch - > tests-change-error-message-in-test-162.patch 0037-hw-usb-hcd-xhci-Fix-GCC-9-build-war.patch - > hw-usb-hcd-xhci-Fix-GCC-9-build-warning.patch 0038-hw-usb-dev-mtp-Fix-GCC-9-build-warn.patch - > hw-usb-dev-mtp-Fix-GCC-9-build-warning.patch 0044-hw-intc-exynos4210_gic-provide-more.patch - > hw-intc-exynos4210_gic-provide-more-room.patch 0047-configure-only-populate-roms-if-sof.patch - > configure-only-populate-roms-if-softmmu.patch 0048-pc-bios-s390-ccw-net-avoid-warning-.patch - > pc-bios-s390-ccw-net-avoid-warning-about.patch keycodemapdb-make-keycode-gen-output-reproducible.patch - > Make-keycode-gen-output-reproducible-use.patch ipxe-stub-out-the-SAN-req-s-in-int13.patch - > stub-out-the-SAN-req-s-in-int13.patch sgabios-fix-cross-build.patch deleted - > roms-sgabios-Fix-csum8-to-be-built-by-ho.patch sgabios-stable-buildid.patch - > sgabios-Makefile-fix-issues-of-build-rep.patch skiboot-gcc9-compat.patch - > Disable-Waddress-of-packed-member-for-GC.patch ipxe-stable-buildid.patch - > ipxe-Makefile-fix-issues-of-build-reprod.patch seabios-fix_cross_compilation.patch - > enable-cross-compilation-on-ARM.patch * Patches added: roms-change-cross-compiler-naming-to-be-.patch roms-Makefile.edk2-don-t-invoke-git-sinc.patch vga-move-modelist-from-bochsvga.c-to-new.patch vga-make-memcpy_high-public.patch vga-add-atiext-driver.patch vga-add-ati-bios-tables.patch vbe-add-edid-support.patch ati-add-edid-support.patch ati-vga-make-less-verbose.patch ati-vga-fix-ati_read.patch ati-vga-make-i2c-register-and-bits-confi.patch ati-vga-try-vga-ddc-first.patch ati-vga-add-rage128-edid-support.patch Fix-s-directive-argument-is-null-error.patch Workaround-compilation-error-with-gcc-9..patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch hdata-vpd-fix-printing-char-0x00.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Since we build seabios, take advantage of ability to add our own identifying version info by changing SEABIOS_EXTRAVERSION from "-prebuilt.qemu.org" to "-rebuilt.suse.com" (or "-rebuilt.opensuse.org for openSUSE releases)- Security fix for heap overflow in ip_reass on big packet input (CVE-2019-14378, bsc#1143794) slirp-fix-heap-overflow-in-ip_reass-on-big-packet-input.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0 * Patches added: 0051-linux-user-fix-to-handle-variably-s.patch- Make keycode-gen output reproducible (use SOURCE_DATE_EPOCH timestamp) keycodemapdb-make-keycode-gen-output-reproducible.patch- Security fix for null pointer dereference while releasing spice resources (CVE-2019-12155, bsc#1135902) 0049-qxl-check-release-info-object.patch - Security fix for qemu-bridge-helper ACL can be bypassed when names are too long (CVE-2019-13164, bsc#1140402) 0050-qemu-bridge-helper-restrict-interfa.patch - Replace patch 0043 with an upstream version 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- fixed regression for ksm.service was (bsc#1112646)- Content of packaged %_docdir/%name/interop/_static/ dir depends on python-Sphinx version, so lets just wildcard specifying those files, rather than trying to manage a specific file list- Last change exposed that we still do rely on python2. Make spec file adjustment- Switch from python-Sphinx to Sphinx from python variant we are building with (new Sphinx is for python3 only)- Fix a number of compatibility issues with the stricter gcc9 checks * Disable warning for taking address of packed structure members 0048-pc-bios-s390-ccw-net-avoid-warning-.patch * Fix case of strncpy where null terminated string not guaranteed 0046-target-ppc-ensure-we-get-null-termi.patch * Disable warning for taking address of packed structure members and fix case of passing null pointer as "%s" format parameter skiboot-gcc9-compat.patch - Fix configure script which caused firmware to be built in linux-user only build. 0047-configure-only-populate-roms-if-sof.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Fix regression in autorepeat key handling 0045-kbd-state-fix-autorepeat-handling.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Fix file list- Yet another gcc9 related code fix (bsc#1121464) 0044-hw-intc-exynos4210_gic-provide-more.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Switch to now upstreamed version of patch and add one more gcc9 related patch * Patches renamed: 0041-qxl-fix-Waddress-of-packed-member.patch - > 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch - Add x86 cpu feature "md-clear" (CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 bsc#1111331) 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Correct logic of which ipxe patches get included based on suse_version. We were wrongly excluding a gcc9 related patch for example- Switch to now upstreamed version of some patches * Patches renamed: 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch - > 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch - > 0039-linux-user-avoid-string-truncation-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Create /usr/share/qemu/firmware and /etc/qemu/firmware directories in support of the firmware descriptor feature now in use as of libvirt v5.2- Disable LTO as suggested by Martin Liska (boo#1133281) - Remove and obsolete qemu-oss-audio subpackage. OSS audio is very old, and we didn't really even configure the package properly for it for a very long time, so presumably there can't be any users of it as far as qemu is concerned - Avoid warnings which gcc9 complains about 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch 0037-hw-usb-hcd-xhci-Fix-GCC-9-build-war.patch 0038-hw-usb-dev-mtp-Fix-GCC-9-build-warn.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch 0040-linux-user-elfload-Fix-GCC-9-build-.patch 0041-qxl-fix-Waddress-of-packed-member.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Update to v4.0.0: See http://wiki.qemu.org/ChangeLog/4.0 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * ARM: ARMv8+ extensions for SB, PredInv, HPD, LOR, FHM, AA32HPD, PAuth, JSConv, CondM, FRINT, and BTI * ARM: new emulation support for "Musca" and "MPS2" development boards * ARM: virt: support for >255GB of RAM and u-boot "noload" image types * ARM: improved emulation of ARM PMU * HPPA: support for TLB protection IDs and TLB trace events * MIPS: support for multi-threaded TCG emulation * MIPS: emulation support for I7200 I6500 CPUs, QMP-base querying of CPU types, and improved support for SAARI and SAAR configuration registers * MIPS: improvements to Interthread Communication Unit, Fulong 2E machine types, and end-user documentation. * PowerPC: pseries/powernv: support for POWER9 large decrementer * PowerPC: pseries: emulation support for XIVE interrupt controller * PowerPC: pseries: support for hotplugging PCI host bridges (PHBs) * PowerPC: pseries: Spectre/Meltdown mitigations enabled by default, additional support for count-cache-flush mitigation * RISC-V: virt: support for PCI and USB * RISC-V: support for TSR, TW, and TVM fields of mstatus, FS field now supports three stats (dirty, clean, and off) * RISC-V: built-in gdbserver supports register lists via XML files * s390: support for z14 GA 2 CPU model, Multiple-epoch and PTFF features now enabled in z14 CPU model by default * s390: vfio-ap: now supports hot plug/unplug, and no longer inhibits memory ballooning * s390: emulation support for floating-point extension facility and vector support instructions * x86: HAX accelerator now supported POSIX hosts other than Darwin, including Linux and NetBSD * x86: Q35: advertised PCIe root port speeds will now optimally default to maximum link speed (16GT/s) and width (x32) provided by PCIe 4.0 for QEMU 4.0+ machine types; older machine types will retain 2.5GT/x1 defaults for compatibility. * x86: Xen PVH images can now be booted with "-kernel" option * Xtensa: xtfpga: improved SMP support for linux (interrupt distributor, IPI, and runstall) and new SMP-capable test_mmuhifi_c3 core configuration * Xtensa: support for Flexible length instructions extension (FLIX) * GUI: new '-display spice-app' to configure/launch a Spice client GUI with a similar UI to QEMU GTK. VNC server now supports access controls via tls-authz/sasl-authz options * QMP: support for "out-of-band" command execution, can be useful for postcopy migration recovery. Additional QMP commands for working with block devices and dirty bitmaps * VFIO: EDID interface for supported mdev (Intel vGPU for kernel 5.0+), allows resolution setting via xres/yres options. * Xen: new 'xen-disk' device which can create a Xen PV disk backend, and performance improvements for Xen PV disk backend. * Network Block Device: improved tracing and error diagnostics, improved client compatibility with buggy NBD server implementations, new - -bitmap, --list, --tls-authz options for qemu-nbd * virtio-blk now supports DISCARD and WRITE_ZEROES * qemu-test-suite output is now in TAP format * Sphinx now used for part of qemu documentation * A few more configure features are enabled: iconv, lzfse (for openSUSE) * Provide better logo icons - Made these package building changes: * Removed this token from spec file: #!BuildIgnore: gcc-PIE * Created ability to build qemu source out-of-tree * Added BSD-2-Clause license clause due to EDK II code inclusion * Patches dropped (upstream unless otherwise noted): 0010-Remove-problematic-evdev-86-key-fro.patch 0025-Fix-tigervnc-long-press-issue.patch 0026-string-input-visitor-Fix-uint64-par.patch 0027-test-string-input-visitor-Add-int-t.patch 0028-test-string-input-visitor-Add-uint6.patch 0029-tests-Add-QOM-property-unit-tests.patch 0030-tests-Add-scsi-disk-test.patch 0033-smbios-Add-1-terminator-if-any-stri.patch (different approach used) 0034-qemu-io-tests-comment-out-problemat.patch (not as needed) 0039-xen_disk-Avoid-repeated-memory-allo.patch 0041-vfio-ap-flag-as-compatible-with-bal.patch 0042-hw-s390x-Fix-bad-mask-in-time2tod.patch 0043-pcie-set-link-state-inactive-active.patch 0044-pc-piix4-Update-smbus-I-O-space-aft.patch 0045-hw-usb-fix-mistaken-de-initializati.patch 0046-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch 0047-pvrdma-release-device-resources-in-.patch 0048-rdma-check-num_sge-does-not-exceed-.patch 0049-pvrdma-add-uar_read-routine.patch 0050-pvrdma-check-number-of-pages-when-c.patch 0051-pvrdma-check-return-value-from-pvrd.patch 0052-pvrdma-release-ring-object-in-case-.patch 0053-block-Fix-hangs-in-synchronous-APIs.patch 0054-linux-user-make-pwrite64-pread64-fd.patch 0055-xen-Add-xen-v4.12-based-xc_domain_c.patch 0056-slirp-check-data-length-while-emula.patch 0057-s390x-Return-specification-exceptio.patch 0059-memory-Fix-the-memory-region-type-a.patch 0060-target-i386-sev-Do-not-pin-the-ram-.patch 0061-slirp-check-sscanf-result-when-emul.patch 0062-ppc-add-host-serial-and-host-model-.patch 0063-i2c-ddc-fix-oob-read.patch 0064-device_tree.c-Don-t-use-load_image.patch 0065-spapr-Simplify-handling-of-host-ser.patch ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch ipxe-fix-build.patch skiboot-hdata-i2c.c-fix-building-with-gcc8.patch * Patches renamed: 0011-linux-user-use-target_ulong.patch - > 0010-linux-user-use-target_ulong.patch 0012-Make-char-muxer-more-robust-wrt-sma.patch - > 0011-Make-char-muxer-more-robust-wrt-sma.patch 0013-linux-user-lseek-explicitly-cast-no.patch - > 0012-linux-user-lseek-explicitly-cast-no.patch 0014-AIO-Reduce-number-of-threads-for-32.patch - > 0013-AIO-Reduce-number-of-threads-for-32.patch 0015-xen_disk-Add-suse-specific-flush-di.patch - > 0014-xen_disk-Add-suse-specific-flush-di.patch 0016-qemu-bridge-helper-reduce-security-.patch - > 0015-qemu-bridge-helper-reduce-security-.patch 0017-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0016-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0018-linux-user-properly-test-for-infini.patch - > 0017-linux-user-properly-test-for-infini.patch 0019-roms-Makefile-pass-a-packaging-time.patch - > 0018-roms-Makefile-pass-a-packaging-time.patch 0020-Raise-soft-address-space-limit-to-h.patch - > 0019-Raise-soft-address-space-limit-to-h.patch 0021-increase-x86_64-physical-bits-to-42.patch - > 0020-increase-x86_64-physical-bits-to-42.patch 0022-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0021-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0023-i8254-Fix-migration-from-SLE11-SP2.patch - > 0022-i8254-Fix-migration-from-SLE11-SP2.patch 0024-acpi_piix4-Fix-migration-from-SLE11.patch - > 0023-acpi_piix4-Fix-migration-from-SLE11.patch 0031-Switch-order-of-libraries-for-mpath.patch - > 0024-Switch-order-of-libraries-for-mpath.patch 0032-Make-installed-scripts-explicitly-p.patch - > 0025-Make-installed-scripts-explicitly-p.patch 0035-tests-test-thread-pool-is-racy-add-.patch - > 0027-tests-test-thread-pool-is-racy-add-.patch 0036-xen-add-block-resize-support-for-xe.patch - > 0028-xen-add-block-resize-support-for-xe.patch 0037-tests-qemu-iotests-Triple-timeout-o.patch - > 0029-tests-qemu-iotests-Triple-timeout-o.patch 0038-tests-block-io-test-130-needs-some-.patch - > 0030-tests-block-io-test-130-needs-some-.patch 0040-xen-ignore-live-parameter-from-xen-.patch - > 0031-xen-ignore-live-parameter-from-xen-.patch 0058-Revert-target-i386-kvm-add-VMX-migr.patch - > 0034-Revert-target-i386-kvm-add-VMX-migr.patch * Patches added: 0026-hw-smbios-handle-both-file-formats-.patch 0032-tests-Fix-Makefile-handling-of-chec.patch 0033-Conditionalize-ui-bitmap-installati.patch 0035-tests-change-error-message-in-test-.patch ipxe-efi-Avoid-string-op-warning-with-cross-gcc-7-compile.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Adjust fix for CVE-2019-8934 (bsc#1126455) to match the latest upstream adjustments for the same. Basically now the security fix is to provide a dummy host-model and host-serial value, which overrides getting that value from the host 0065-spapr-Simplify-handling-of-host-ser.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Tweak last spec file change to guard new Requires with conditional - Fix DOS possibility in device tree processing (CVE-2018-20815 bsc#1130675) 0064-device_tree.c-Don-t-use-load_image.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Remove an unneeded BuildRequires which impacts bsc#1119414 fix Also add a corresponding Recommends for qemu-tools as part of this packaging adjustment (bsc#1130484) - Fix information leak in slirp (CVE-2019-9824 bsc#1129622) 0061-slirp-check-sscanf-result-when-emul.patch - Add method to specify whether or not to expose certain ppc64 host information, which can be considered a security issue (CVE-2019-8934 bsc#1126455) 0062-ppc-add-host-serial-and-host-model-.patch - Fix OOB memory access and information leak in virtual monitor interface (CVE-2019-03812 bsc#1125721) 0063-i2c-ddc-fix-oob-read.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Again address ipxe GCC 9 incompatibilities. Previously included patch to disable unneeded warning got muffed somehow (bsc#1121464)- Package and cross-build rom files for aarch64 from SLE15/Leap15.0 to fix boo#1125964 - Add patch to fix seabios cross-compilation: * seabios-fix_cross_compilation.patch - Add patch to fix sgabios cross-compilation: * sgabios-fix-cross-build.patch- Fix _constraints to include all architectures for disk size (fix aarch64)- Revert upstream patch which declares x86 vmx feature a migration blocker. Given the proliferation of using vm's with host features passed through and the general knowledge that nested virtualization has many usage caveats, but still gets put in use in restricted scenarios, this patch did more harm than good, I feel. So despite this relaxation, please consider yourself warned that nested virtualization is not yet a supportable feature. (bsc#1121604) 0058-Revert-target-i386-kvm-add-VMX-migr.patch - Fix SEV VM device assignment (bsc#1123205) 0059-memory-Fix-the-memory-region-type-a.patch 0060-target-i386-sev-Do-not-pin-the-ram-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Remove 71-sev.rules, which modifies the default permissions of /dev/sev by adding the kvm group as reader/writer. Upstream decided to take a different approach for libvirt to manage SEV due to security concerns which I agree overrides the convenience of providing /dev/sev access to all the kvm group (bsc#1124842 bsc#1102604)- Increase memory needed to build qemu-testsuite for ppc* arch's in _constraints file- Return specification exception for unimplemented diag 308 subcodes rather than a hardware error (bsc#1123179) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0057-s390x-Return-specification-exceptio.patch- Fix OOB issue in slirp (CVE-2019-6778 bsc#1123156) 0056-slirp-check-data-length-while-emula.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 - Fix ipxe GCC 9 incompatibilities (bsc#1121464) ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch ipxe-build-Disable-gcc-address-of-packed-member-warning.patch- Tweak Xen interface to be compatible with upcoming v4.12 Xen 0055-xen-Add-xen-v4.12-based-xc_domain_c.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0054-linux-user-make-pwrite64-pread64-fd.patch (bsc#1121600)- Clarify that move to include v3.1.0 in qemu package corresponds with fate#327089, which of course builds on v3.0.0 mentioned previously, and that among other patches which this change obsoletes (because functionality is included in base version) I will mention one pointed out by reviewers: 0094-s390x-cpumodels-add-z14-Model-ZR1.patch- include post v3.1.0 patches marked for next stable release: 0041-vfio-ap-flag-as-compatible-with-bal.patch 0042-hw-s390x-Fix-bad-mask-in-time2tod.patch 0043-pcie-set-link-state-inactive-active.patch 0044-pc-piix4-Update-smbus-I-O-space-aft.patch 0045-hw-usb-fix-mistaken-de-initializati.patch - Address various security/stability issues * Fix host access vulnerability in usb-mtp infrastructure (CVE-2018-16872 bsc#1119493) 0046-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch * Fix DoS in pvrdma interface (CVE-2018-20123 bsc#1119437) 0047-pvrdma-release-device-resources-in-.patch * Fix OOB access issue in rdma backend (CVE-2018-20124 bsc#1119840) 0048-rdma-check-num_sge-does-not-exceed-.patch * Fix NULL pointer reference in pvrdma emulation (CVE-2018-20191 bsc#1119979) 0049-pvrdma-add-uar_read-routine.patch * Fix DoS in pvrdma interface (CVE-2018-20125 bsc#1119989) 0050-pvrdma-check-number-of-pages-when-c.patch * Fix DoS in pvrdma interface (CVE-2018-20216 bsc#1119984) 0051-pvrdma-check-return-value-from-pvrd.patch * Fix DoS in pvrdma interface (CVE-2018-20126 bsc#1119991) 0052-pvrdma-release-ring-object-in-case-.patch - one more post v3.1.0 patches marked for next stable release: 0053-block-Fix-hangs-in-synchronous-APIs.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0040-xen-ignore-live-parameter-from-xen-.patch (bsc#1079730, bsc#1101982, bsc#1063993)- Follow up on ideas prompted by last change: clean up the patches generated by git workflow. There is no value to the first line (mbox From line), or [PATCH] on subject line. Get rid of those - Other minor fixes and improvements to update_git.sh- Modify update_git.sh script: pass --zero-commit to format-patch This removes needless noise in the buildservice when the same set of patches is imported/exported at different times by different users. pass --no-signature to format-patch Remove sed call which used to remove the signature, use mv instead- Use /bin/bash to echo value into sys fs for ksm control (bsc#1112646)- fix memory leak in xen_disk (bsc#1100408) 0039-xen_disk-Avoid-repeated-memory-allo.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- building against xen-devel requires the XC_* compat macros to be set because this version of QEMU will be built against many versions of Xen. configure will decide on the appropriate function names it knows about today. To actually call these functions, future versions of Xen may require XC_* to be set. Furthermore, fix a bug in QEMU: xen_common.h undefines the XC_* macros unconditionally.- Update to v3.1.0: See http://wiki.qemu.org/ChangeLog/3.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86 IceLake-Server and IceLake-Client cpu models added * Document recommendations for choosing cpu modesl for x86 guests * Support for Hyper-V enlightened VMCS * stdvga and bochs-display devices can expose EDID information to the guest. stdvga xres and yres properties are exposed in the EDID information * s390 improvements: vfio-ap crypto device support, max-cpu model added, etoken support, huge page backing support * ARM: ARMv6M architecture and Cortex-M0 cpu host support added, Cortex-A72 cpu model added, GICv2 virtualization extensions, emulation of AArch32 virtualization, Scalable Vector Extension implemented * Support for AMD IOMMU interrupt remapping and guest virtual APIC mode * Multithreaded TCG on x86 is considered supportable * Add a patch to triple timeout of block io tests, since the obs environment is fickle * x86 save/restore and live migration is prohibited if Intel KVM nested virtualization is enabled * Patches dropped (upstream unless otherwise noted): 0033-migration-warn-about-inconsistent-s.patch (shouldn't be needed anymore) 0035-configure-Modify-python-used-for-io.patch (upstream now python3 friendly) 0039-tests-boot-serial-test-Bump-timeout.patch 0040-linux-headers-update.patch 0041-s390x-kvm-add-etoken-facility.patch 0042-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch 0043-configure-require-libseccomp-2.2.0.patch 0044-seccomp-set-the-seccomp-filter-to-a.patch 0045-sandbox-disable-sandbox-if-CONFIG_S.patch 0046-seccomp-check-TSYNC-host-capability.patch 0047-linux-user-init_guest_space-Try-to-.patch 0048-ne2000-fix-possible-out-of-bound-ac.patch 0049-rtl8139-fix-possible-out-of-bound-a.patch 0050-pcnet-fix-possible-buffer-overflow.patch 0051-net-ignore-packet-size-greater-than.patch 0052-lsi53c895a-check-message-length-val.patch 0053-nvme-fix-oob-access-issue-CVE-2018-.patch (fixed differently upstream) * Patches renamed: 0034-smbios-Add-1-terminator-if-any-stri.patch - > 0033-smbios-Add-1-terminator-if-any-stri.patch 0036-qemu-io-tests-comment-out-problemat.patch - > 0034-qemu-io-tests-comment-out-problemat.patch 0037-tests-test-thread-pool-is-racy-add-.patch - > 0035-tests-test-thread-pool-is-racy-add-.patch 0038-xen-add-block-resize-support-for-xe.patch - > 0036-xen-add-block-resize-support-for-xe.patch * Patches added: 0037-tests-qemu-iotests-Triple-timeout-o.patch 0038-tests-block-io-test-130-needs-some-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 - Update includes the following bug fixes: bsc#1108474, bsc#1117615 - Update includes the following SLE requested functionality: FATE#324810, FATE#325875, FATE#326369, FATE#326378, FATE#326379, FATE#326401, FATE#326672, FATE#326829 - Make the following packaging changes related to the new release * Enable libpmem, pvrdma, vhost-crypto features and qemu-block-nfs subpackage * New roms available: vgabios-bochs-display.bin, vgabios-ramfb.bin * New binary tool included (qemu-edid) for testing the new qemu edid generator - Tweaked patches we carry to pass qemu's checkpatch checker - Modify update_git.sh script to enable packaging qemu from development time sources, not just at release time - Removed erroneous (and now useless) tests for tar and gzip formats - Don't exclude s390x anymore from building the qemu-testsuite - Based on current OBS building observations make changes to storage and memory requires specified in the _constraints file- Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, FATE, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2018-10839 CVE-2018-16847 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 CVE-2018-18849 * bsc#1110910 bsc#1111006 bsc#1111010 bsc#1111013 bsc#1114422 bsc#1114529 * Patches added: 0047-linux-user-init_guest_space-Try-to-.patch 0048-ne2000-fix-possible-out-of-bound-ac.patch 0049-rtl8139-fix-possible-out-of-bound-a.patch 0050-pcnet-fix-possible-buffer-overflow.patch 0051-net-ignore-packet-size-greater-than.patch 0052-lsi53c895a-check-message-length-val.patch 0053-nvme-fix-oob-access-issue-CVE-2018-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0* Adding changes to mitigate seccomp vulnerability (CVE-2018-15746 bsc#1106222) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0 * Patches added: 0042-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch 0043-configure-require-libseccomp-2.2.0.patch 0044-seccomp-set-the-seccomp-filter-to-a.patch 0045-sandbox-disable-sandbox-if-CONFIG_S.patch 0046-seccomp-check-TSYNC-host-capability.patch- Do more misc spec file fixes: * Be explicit in spec file about Version used for all subpackages (again, to avoid subpackage ordering issues). Default Release tag is also brought in by obs format_spec_file service * Delete binary blob s390-netboot.img, which we rebuild * Don't provide separate Url for qemu-kvm package - the main qemu website provides easily findable link for kvm specifics * Associate petalogix-ml605.dtb with qemu-extra instead of qemu-ppc * More entry sorting- Correct some versioning as follows: * Accurately reflect the qemu-ipxe package version value by adding "+" at the end * Don't overwrite seabios .version file, since now (for quite some time actually) upstream tarball creation creates this file and the value we are writing to it is actually wrong - Make spec file improvements, including the following: * Add qemu.keyring to enable package source verification * Create srcname macro to identify source file name separately from package name * Create alternate to %version to avoid subpackage ordering causing inadvertantly wrong %version value at point of use * Sort some entries * Be more consistent with macro syntax usage * Minor file tweaks as done by osc format_spec_file service- Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, FATE, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2018-11806 CVE-2018-12617 CVE-2018-7550 CVE-2018-15746 * fate#325467 * bsc#1091695 bsc#1094725 bsc#1094913 bsc#1096223 bsc#1098735 bsc#1103628 bsc#1105279 bsc#1106222 bsc#1106222 bsc#1107489 * Patches added: * only enable glusterfs for openSUSE 0040-linux-headers-update.patch 0041-s390x-kvm-add-etoken-facility.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Increase timeout for boot-serial-test, since we've hit the timeout for armv7l arch in qemu-testsuite. 0039-tests-boot-serial-test-Bump-timeout.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Drop legacy kvm_stat script and man page. We'll rely on the kvm_stat package only going forward kvm_stat kvm_stat.1.gz - Update SLE support documentation to match v3.0.0 release- Update to v3.0.0: See http://wiki.qemu.org/ChangeLog/3.0 Don't read anything into the major version number update. It's been decided to increase the major version number each year. Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package. Some noteworthy changes: * Support for additional x86/AMD mitigations against Speculative Store Bypass (Spectre Variant 4, CVE-2018-3639) * Improved support for nested KVM guests running on Hyper-V * Block device support for active disk-mirroring, which avoids convergence issues which may arise when doing passive/background mirroring of busy devices * Improved support for AHCI emulation, SCSI emulation, and persistent reservations / cluster management * OpenGL ES support for SDL front-end, additional framebuffer device options for early boot display without using legacy VGA emulation * Live migration support for TPM TIS devices, capping bandwidth usage during post-copy migration, and recovering from a failed post-copy migration * Improved latency when using user-mode networking / SLIRP * ARM: support for SMMUv3 IOMMU when using 'virt' machine type * ARM: v8M extensions for VLLDM and VLSTM floating-point instructions, and improved support for AArch64 v8.2 FP16 extensions * ARM: support for Scalable Vector Extensions in linux-user mode * Microblaze: support for 64-bit address sizes and translation bug fixes * PowerPC: PMU support for mac99 machine type and improvements for Uninorth PCI host bridge emulation for Mac machine types * PowerPC: preliminary support for emulating POWER9 hash MMU mode when using powernv machine type * RISC-V: improvement for privileged ISA emulation * s390: support for z14 ZR1 CPU model * s390: bpb/ppa15 Spectre mitigations enabled by default for z196 and later CPU models * s390: support for configuring consoles via -serial options * Patches dropped (upstream unless otherwise noted): 0008-linux-user-fix-segfault-deadlock.patch (no longer needed) 0039-blockjob-Fix-assertion-in-block_job.patch 0041-seccomp-allow-sched_setscheduler-wi.patch Make-installed-scripts-explicitly-python3.patch (we now make python3 explicit in other patch) * Patches renamed: 0009-linux-user-binfmt-support-host-bina.patch - > 0008-linux-user-binfmt-support-host-bina.patch 0010-linux-user-Fake-proc-cpuinfo.patch - > 0009-linux-user-Fake-proc-cpuinfo.patch 0011-Remove-problematic-evdev-86-key-fro.patch - > 0010-Remove-problematic-evdev-86-key-fro.patch 0012-linux-user-use-target_ulong.patch - > 0011-linux-user-use-target_ulong.patch 0013-Make-char-muxer-more-robust-wrt-sma.patch - > 0012-Make-char-muxer-more-robust-wrt-sma.patch 0014-linux-user-lseek-explicitly-cast-no.patch - > 0013-linux-user-lseek-explicitly-cast-no.patch 0015-AIO-Reduce-number-of-threads-for-32.patch - > 0014-AIO-Reduce-number-of-threads-for-32.patch 0016-xen_disk-Add-suse-specific-flush-di.patch - > 0015-xen_disk-Add-suse-specific-flush-di.patch 0017-qemu-bridge-helper-reduce-security-.patch - > 0016-qemu-bridge-helper-reduce-security-.patch 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0017-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0019-linux-user-properly-test-for-infini.patch - > 0018-linux-user-properly-test-for-infini.patch 0020-roms-Makefile-pass-a-packaging-time.patch - > 0019-roms-Makefile-pass-a-packaging-time.patch 0021-Raise-soft-address-space-limit-to-h.patch - > 0020-Raise-soft-address-space-limit-to-h.patch 0022-increase-x86_64-physical-bits-to-42.patch - > 0021-increase-x86_64-physical-bits-to-42.patch 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0022-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0024-i8254-Fix-migration-from-SLE11-SP2.patch - > 0023-i8254-Fix-migration-from-SLE11-SP2.patch 0025-acpi_piix4-Fix-migration-from-SLE11.patch - > 0024-acpi_piix4-Fix-migration-from-SLE11.patch 0026-Fix-tigervnc-long-press-issue.patch - > 0025-Fix-tigervnc-long-press-issue.patch 0027-string-input-visitor-Fix-uint64-par.patch - > 0026-string-input-visitor-Fix-uint64-par.patch 0028-test-string-input-visitor-Add-int-t.patch - > 0027-test-string-input-visitor-Add-int-t.patch 0029-test-string-input-visitor-Add-uint6.patch - > 0028-test-string-input-visitor-Add-uint6.patch 0030-tests-Add-QOM-property-unit-tests.patch - > 0029-tests-Add-QOM-property-unit-tests.patch 0031-tests-Add-scsi-disk-test.patch - > 0030-tests-Add-scsi-disk-test.patch 0032-Switch-order-of-libraries-for-mpath.patch - > 0031-Switch-order-of-libraries-for-mpath.patch 0033-Make-installed-scripts-explicitly-p.patch - > 0032-Make-installed-scripts-explicitly-p.patch (python2->python3) 0034-migration-warn-about-inconsistent-s.patch - > 0033-migration-warn-about-inconsistent-s.patch 0035-smbios-Add-1-terminator-if-any-stri.patch - > 0034-smbios-Add-1-terminator-if-any-stri.patch 0036-configure-Modify-python-used-for-io.patch - > 0035-configure-Modify-python-used-for-io.patch 0037-qemu-io-tests-comment-out-problemat.patch - > 0036-qemu-io-tests-comment-out-problemat.patch 0038-tests-test-thread-pool-is-racy-add-.patch - > 0037-tests-test-thread-pool-is-racy-add-.patch 0040-xen-add-block-resize-support-for-xe.patch - > 0038-xen-add-block-resize-support-for-xe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604). 71-sev.rules- Update to v2.12.1, a stable, (mostly) bug-fix-only release * This update contains new mitigation functionality for CVE-2018-3639 (Speculative Store Bypass) in x86. There are also bug fixes for migration, Intel IOMMU emulation, block layer/image handling, ARM emulation, and various other areas. (Note that a number of 2.12.1 patches were already included by us previously) (CVE-2018-3639 bsc#1092885) * Patches dropped (subsumed by stable update): 0039-device_tree-Increase-FDT_MAX_SIZE-t.patch 0040-vnc-fix-use-after-free.patch 0041-ccid-Fix-dwProtocols-advertisement-.patch 0042-tcg-arm-Fix-memory-barrier-encoding.patch 0043-s390-ccw-force-diag-308-subcode-to-.patch 0044-nbd-client-fix-nbd_negotiate_simple.patch 0045-migration-block-dirty-bitmap-fix-me.patch 0046-nbd-client-Fix-error-messages-durin.patch 0047-nbd-client-Relax-handling-of-large-.patch 0048-qxl-fix-local-renderer-crash.patch 0049-tcg-Limit-the-number-of-ops-in-a-TB.patch 0050-target-arm-Clear-SVE-high-bits-for-.patch 0051-cpus-tcg-fix-never-exiting-loop-on-.patch 0052-s390x-css-disabled-subchannels-cann.patch 0053-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0054-virtio-ccw-common-reset-handler.patch 0055-s390x-ccw-make-sure-all-ccw-devices.patch 0056-blockjob-expose-error-string-via-qu.patch 0058-qemu-io-Use-purely-string-blockdev-.patch 0059-qemu-img-Use-only-string-options-in.patch 0060-nfs-Remove-processed-options-from-Q.patch 0061-i386-define-the-ssbd-CPUID-feature-.patch 0062-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0063-i386-define-the-AMD-virt-ssbd-CPUID.patch 0064-ahci-fix-PxCI-register-race.patch 0065-ccid-card-passthru-fix-regression-i.patch * Patches renamed: 0057-blockjob-Fix-assertion-in-block_job.patch - > 0039-blockjob-Fix-assertion-in-block_job.patch 0066-xen-add-block-resize-support-for-xe.patch - > 0040-xen-add-block-resize-support-for-xe.patch 0067-seccomp-allow-sched_setscheduler-wi.patch - > 0041-seccomp-allow-sched_setscheduler-wi.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fixing seccomp resourcecontrol defunct issue (bsc#1102627) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12 * Patches added: 0067-seccomp-allow-sched_setscheduler-wi.patch- Add ipxe-fix-build.patch to not error out with binutils >= 2.31 .- Remove linux-user patch which is no longer needed (bsc#1098056) * Patches dropped: 0011-linux-user-XXX-disable-fiemap.patch * Patches renamed: 0036-Remove-problematic-evdev-86-key-fro.patch - > 0011-Remove-problematic-evdev-86-key-fro.patch 0037-configure-Modify-python-used-for-io.patch - > 0036-configure-Modify-python-used-for-io.patch 0038-qemu-io-tests-comment-out-problemat.patch - > 0037-qemu-io-tests-comment-out-problemat.patch 0039-tests-test-thread-pool-is-racy-add-.patch - > 0038-tests-test-thread-pool-is-racy-add-.patch 0040-device_tree-Increase-FDT_MAX_SIZE-t.patch - > 0039-device_tree-Increase-FDT_MAX_SIZE-t.patch 0041-vnc-fix-use-after-free.patch - > 0040-vnc-fix-use-after-free.patch 0042-ccid-Fix-dwProtocols-advertisement-.patch - > 0041-ccid-Fix-dwProtocols-advertisement-.patch 0043-tcg-arm-Fix-memory-barrier-encoding.patch - > 0042-tcg-arm-Fix-memory-barrier-encoding.patch 0044-s390-ccw-force-diag-308-subcode-to-.patch - > 0043-s390-ccw-force-diag-308-subcode-to-.patch 0045-nbd-client-fix-nbd_negotiate_simple.patch - > 0044-nbd-client-fix-nbd_negotiate_simple.patch 0046-migration-block-dirty-bitmap-fix-me.patch - > 0045-migration-block-dirty-bitmap-fix-me.patch 0047-nbd-client-Fix-error-messages-durin.patch - > 0046-nbd-client-Fix-error-messages-durin.patch 0048-nbd-client-Relax-handling-of-large-.patch - > 0047-nbd-client-Relax-handling-of-large-.patch 0049-qxl-fix-local-renderer-crash.patch - > 0048-qxl-fix-local-renderer-crash.patch 0050-tcg-Limit-the-number-of-ops-in-a-TB.patch - > 0049-tcg-Limit-the-number-of-ops-in-a-TB.patch 0051-target-arm-Clear-SVE-high-bits-for-.patch - > 0050-target-arm-Clear-SVE-high-bits-for-.patch 0052-cpus-tcg-fix-never-exiting-loop-on-.patch - > 0051-cpus-tcg-fix-never-exiting-loop-on-.patch 0053-s390x-css-disabled-subchannels-cann.patch - > 0052-s390x-css-disabled-subchannels-cann.patch 0054-pc-bios-s390-ccw-struct-tpi_info-mu.patch - > 0053-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0055-virtio-ccw-common-reset-handler.patch - > 0054-virtio-ccw-common-reset-handler.patch 0056-s390x-ccw-make-sure-all-ccw-devices.patch - > 0055-s390x-ccw-make-sure-all-ccw-devices.patch 0057-blockjob-expose-error-string-via-qu.patch - > 0056-blockjob-expose-error-string-via-qu.patch 0058-blockjob-Fix-assertion-in-block_job.patch - > 0057-blockjob-Fix-assertion-in-block_job.patch 0059-qemu-io-Use-purely-string-blockdev-.patch - > 0058-qemu-io-Use-purely-string-blockdev-.patch 0060-qemu-img-Use-only-string-options-in.patch - > 0059-qemu-img-Use-only-string-options-in.patch 0061-nfs-Remove-processed-options-from-Q.patch - > 0060-nfs-Remove-processed-options-from-Q.patch 0062-i386-define-the-ssbd-CPUID-feature-.patch - > 0061-i386-define-the-ssbd-CPUID-feature-.patch 0063-i386-Define-the-Virt-SSBD-MSR-and-h.patch - > 0062-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0064-i386-define-the-AMD-virt-ssbd-CPUID.patch - > 0063-i386-define-the-AMD-virt-ssbd-CPUID.patch 0065-ahci-fix-PxCI-register-race.patch - > 0064-ahci-fix-PxCI-register-race.patch 0066-ccid-card-passthru-fix-regression-i.patch - > 0065-ccid-card-passthru-fix-regression-i.patch 0067-xen-add-block-resize-support-for-xe.patch - > 0066-xen-add-block-resize-support-for-xe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix build failure of skiboot with gcc8 compiler skiboot-hdata-i2c.c-fix-building-with-gcc8.patch- Tweak build service constraints information to avoid failures- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12 * Patches added: 0067-xen-add-block-resize-support-for-xe.patch- Tweak patch file generation to be more git version agnostic. Also change update_git.sh to not reformat spec file by default.- Looks like the right fix for the AHCI issue has been identified upstream. Turns out to also affect Linux guests as well. (bsc#1094406) * Patches dropped: 0065-Revert-replay-don-t-process-async-e.patch 0066-Revert-replay-avoid-recursive-call-.patch 0067-Revert-replay-check-return-values-o.patch 0068-Revert-replay-push-replay_mutex_loc.patch * Patches added: 0065-ahci-fix-PxCI-register-race.patch - Fix a regresssion introduced in v2.12.0 for ccid-card-passthrough (bsc#1095419) 0066-ccid-card-passthru-fix-regression-i.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix qemu-guest-agent service issue (bsc#1094898)- Spectre v4 vulnerability mitigation support for KVM guests. High level description of vulnerability: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. This change permits the new x86 cpu feature flag named "ssbd" to be presented to the guest, given that the host has this feature, and KVM exposes it to the guest as well. For this feature to be enabled, via adding it to the qemu commandline (eg: -cpu ,+spec-ctrl,+ssbd), so the guest OS can take advantage of the feature, spec-ctrl and ssbd support is also required in the host. Another new x86 cpu feature flag named "virt-ssbd" is also added to handle this vulnerability for AMD processors. (CVE-2018-3639 bsc#1092885) 0062-i386-define-the-ssbd-CPUID-feature-.patch 0063-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0064-i386-define-the-AMD-virt-ssbd-CPUID.patch - Replay code introduced an issue for AHCI emulation, where on Windows 10 I/O would stop randomly, and Windows would then reset the AHCI device. The issue is not yet fully identified, but reverting some of those changes is at least for now a workaround. (bsc#1094406) 0065-Revert-replay-don-t-process-async-e.patch 0066-Revert-replay-avoid-recursive-call-.patch 0067-Revert-replay-check-return-values-o.patch 0068-Revert-replay-push-replay_mutex_loc.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Add some upstream fixes targeted for the next stable release 0040-device_tree-Increase-FDT_MAX_SIZE-t.patch 0041-vnc-fix-use-after-free.patch 0042-ccid-Fix-dwProtocols-advertisement-.patch 0043-tcg-arm-Fix-memory-barrier-encoding.patch 0044-s390-ccw-force-diag-308-subcode-to-.patch 0045-nbd-client-fix-nbd_negotiate_simple.patch 0046-migration-block-dirty-bitmap-fix-me.patch 0047-nbd-client-Fix-error-messages-durin.patch 0048-nbd-client-Relax-handling-of-large-.patch 0049-qxl-fix-local-renderer-crash.patch 0050-tcg-Limit-the-number-of-ops-in-a-TB.patch 0051-target-arm-Clear-SVE-high-bits-for-.patch 0052-cpus-tcg-fix-never-exiting-loop-on-.patch 0053-s390x-css-disabled-subchannels-cann.patch 0054-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0055-virtio-ccw-common-reset-handler.patch 0056-s390x-ccw-make-sure-all-ccw-devices.patch 0057-blockjob-expose-error-string-via-qu.patch 0058-blockjob-Fix-assertion-in-block_job.patch 0059-qemu-io-Use-purely-string-blockdev-.patch 0060-qemu-img-Use-only-string-options-in.patch 0061-nfs-Remove-processed-options-from-Q.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix qemu-guest-agent uninstall (bsc#1093169) - Minor tweak to qemu spec file- Update to v2.12.0: See http://wiki.qemu.org/ChangeLog/2.12 Some noteworthy changes: CLI options removed: -tdf, -no-kvm-pit, -drive boot, -net channel, - net dump, -hdachs, -drive,if=scsi HMP commands removed: usb_add, usb_del, host_net_add, host_net_remove Q35 default nic now e1000e AMD SEV support - smbios supports setting data for type 11 tables audio and display support split out as modules - nic for simple creation of guest NIC and host back-end QMP monitor "out-of-band" capability lots of ARM and s390 improvements - Include more of upstream's in-tree tests in the qemu-testsuite package * Patches dropped: 0033-memfd-fix-configure-test.patch 0034-qapi-use-items-values-intead-of-ite.patch 0035-qapi-Use-OrderedDict-from-standard-.patch 0036-qapi-adapt-to-moved-location-of-Str.patch 0037-qapi-Adapt-to-moved-location-of-mak.patch 0038-qapi-remove-q-arg-to-diff-when-comp.patch 0039-qapi-ensure-stable-sort-ordering-wh.patch 0040-qapi-force-a-UTF-8-locale-for-runni.patch 0041-scripts-ensure-signrom-treats-data-.patch 0042-configure-allow-use-of-python-3.patch 0043-input-add-missing-JIS-keys-to-virti.patch 0045-pc-fail-memory-hot-plug-unplug-with.patch 0046-memattrs-add-debug-attribute.patch 0047-exec-add-ram_debug_ops-support.patch 0048-exec-add-debug-version-of-physical-.patch 0049-monitor-i386-use-debug-APIs-when-ac.patch 0050-machine-add-memory-encryption-prope.patch 0051-kvm-update-kvm.h-to-include-memory-.patch 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch 0053-target-i386-add-Secure-Encrypted-Vi.patch 0054-qmp-add-query-sev-command.patch 0055-sev-i386-add-command-to-initialize-.patch 0056-qmp-populate-SevInfo-fields-with-SE.patch 0057-sev-i386-register-the-guest-memory-.patch 0058-kvm-introduce-memory-encryption-API.patch 0059-hmp-add-info-sev-command.patch 0060-sev-i386-add-command-to-create-laun.patch 0061-sev-i386-add-command-to-encrypt-gue.patch 0062-target-i386-encrypt-bios-rom.patch 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch 0064-sev-i386-finalize-the-SEV-guest-lau.patch 0065-hw-i386-set-ram_debug_ops-when-memo.patch 0066-sev-i386-add-debug-encrypt-and-decr.patch 0067-target-i386-clear-C-bit-when-walkin.patch 0068-include-add-psp-sev.h-header-file.patch 0069-sev-i386-add-support-to-query-PLATF.patch 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch 0071-qmp-add-query-sev-launch-measure-co.patch 0072-tests-qmp-test-blacklist-query-sev-.patch 0073-sev-i386-add-migration-blocker.patch 0074-cpu-i386-populate-CPUID-0x8000_001F.patch 0075-migration-warn-about-inconsistent-s.patch 0076-smbios-support-setting-OEM-strings-.patch 0077-smbios-Add-1-terminator-if-any-stri.patch 0078-Remove-problematic-evdev-86-key-fro.patch 0079-tpm-lookup-cancel-path-under-tpm-de.patch 0080-vga-fix-region-calculation.patch skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch skiboot-libc-stdio-vsnprintf.c-add-expli.patch skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch ui-keycodemapdb-Add-missing-QKeyCode-val.patch ui-keycodemapdb-Fix-compat-with-py3-dict.patch * Patches renamed: 0044-Make-installed-scripts-explicitly-p.patch - > 0033-Make-installed-scripts-explicitly-p.patch 0075-migration-warn-about-inconsistent-s.patch - > 0034-migration-warn-about-inconsistent-s.patch 0077-smbios-Add-1-terminator-if-any-stri.patch - > 0035-smbios-Add-1-terminator-if-any-stri.patch 0078-Remove-problematic-evdev-86-key-fro.patch - > 0036-Remove-problematic-evdev-86-key-fro.patch * Patches added: 0037-configure-Modify-python-used-for-io.patch 0038-qemu-io-tests-comment-out-problemat.patch 0039-tests-test-thread-pool-is-racy-add-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix autoinstall of qemu-guest-agent by getting the modalias string right (bsc#1091143)- Guard strncpy call with GCC pragma to disable warning about possible incorrect usage, when in fact it is correct. This is for gcc 8 compatibility (bsc#1090355) ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)- fix qemu-ga service file name (bsc#1089067)- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604) 0080-vga-fix-region-calculation.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Add new look up path "sys/class/tpm" for tpm cancel path based on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615) 0079-tpm-lookup-cancel-path-under-tpm-de.patch- Fix issue with key codes in qemu v2.11 0078-Remove-problematic-evdev-86-key-fro.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11 * Patches added: 0077-smbios-Add-1-terminator-if-any-stri.patch bsc#994082 and bsc#1084316- Add support for setting OEM strings table (fate#323624) 0076-smbios-support-setting-OEM-strings-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- SLE15 KVM (as targeted for RC1) now has the feature exposed. Drop the patch. (bsc#1082276) 0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Change example qemu-ifup script to not depend on bridge-utils. Also update the paths used for ip binary.- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've carried since the initial Spectre v2 patch was added. EDX bit 27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the guest is wrong in general, since the VM doesn't directly control the scheduling of physical hyperthreads. This is left strictly to the L0 hypervisor.- Update to v2.11.1, a stable, (mostly) bug-fix-only release In addition to bug fixes, of necessity fixes are needed to address the Spectre v2 vulnerability by passing along to the guest new hardware features introduced by host microcode updates. A January 2018 release of qemu initially addressed this issue by exposing the feature for all x86 vcpu types, which was the quick and dirty approach, but not the proper solution. We remove that initial patch and now rely on the upstream solution. This update instead defines spec_ctrl and ibpb cpu feature flags as well as new cpu models which are clones of existing models with either -IBRS or -IBPB added to the end of the model name. These new vcpu models explicitly include the new feature(s), whereas the feature flags can be added to the cpu parameter as with other features. In short, for continued Spectre v2 protection, ensure that either the appropriate cpu feature flag is added to the QEMU command-line, or one of the new cpu models is used. Although migration from older versions is supported, the new cpu features won't be properly exposed to the guest until it is restarted with the cpu features explicitly added. A reboot is insufficient. A warning patch is added which attempts to detect a migration from a qemu version which had the quick and dirty fix (it only detects certain cases, but hopefully is helpful.) s390x guest vulnerability to Spectre v2 is also addressed in this update by including support for bpb and ppa/stfle.81 features. (CVE-2017-5715 bsc#1068032) For additional information on Spectre v2 as it relates to QEMU, see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/ - Unfortunately, it was found that our current KVM isn't correctly indicating support for the spec-ctrl feature, so I've added a patch to still detect that support within QEMU. This is of course a temporary kludge until KVM gets fixed. (bsc#1082276) - The SEV support patches are updated to the v9 series. - Fix incompatibility with recent glibc (boo#1081154) - Add Supplements tags for the guest agent package in an attempt to auto-install for QEMU and Xen SUSE Linux guests (fate#323570) * Patches dropped (subsumed by stable update, or reworked in v9): 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch 0050-target-i386-add-memory-encryption-f.patch 0054-accel-add-Secure-Encrypted-Virtuliz.patch 0072-sev-Fix-build-for-non-x86-hosts.patch * Patches added: 0033-memfd-fix-configure-test.patch 0053-target-i386-add-Secure-Encrypted-Vi.patch 0056-qmp-populate-SevInfo-fields-with-SE.patch 0072-tests-qmp-test-blacklist-query-sev-.patch 0073-sev-i386-add-migration-blocker.patch 0074-cpu-i386-populate-CPUID-0x8000_001F.patch 0075-migration-warn-about-inconsistent-s.patch 0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch * Patches renamed (plus some minor code changes): 0051-machine-add-memory-encryption-prope.patch - > 0050-machine-add-memory-encryption-prope.patch 0052-kvm-update-kvm.h-to-include-memory-.patch - > 0051-kvm-update-kvm.h-to-include-memory-.patch 0053-docs-add-AMD-Secure-Encrypted-Virtu.patch - > 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch 0055-sev-add-command-to-initialize-the-m.patch - > 0055-sev-i386-add-command-to-initialize-.patch 0056-sev-register-the-guest-memory-range.patch - > 0057-sev-i386-register-the-guest-memory-.patch 0057-kvm-introduce-memory-encryption-API.patch - > 0058-kvm-introduce-memory-encryption-API.patch 0058-qmp-add-query-sev-command.patch - > 0054-qmp-add-query-sev-command.patch 0060-sev-add-command-to-create-launch-me.patch - > 0060-sev-i386-add-command-to-create-laun.patch 0061-sev-add-command-to-encrypt-guest-me.patch - > 0061-sev-i386-add-command-to-encrypt-gue.patch 0063-sev-add-support-to-LAUNCH_MEASURE-c.patch - > 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch 0064-sev-Finalize-the-SEV-guest-launch-f.patch - > 0064-sev-i386-finalize-the-SEV-guest-lau.patch 0066-sev-add-debug-encrypt-and-decrypt-c.patch - > 0066-sev-i386-add-debug-encrypt-and-decr.patch 0069-sev-add-support-to-query-PLATFORM_S.patch - > 0069-sev-i386-add-support-to-query-PLATF.patch 0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch - > 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Add AMD SEV (Secure Encrypted Virtualization) support by taking the v7 series of the patches posted to qemu ml. (fate#322124) 0046-memattrs-add-debug-attribute.patch 0047-exec-add-ram_debug_ops-support.patch 0048-exec-add-debug-version-of-physical-.patch 0049-monitor-i386-use-debug-APIs-when-ac.patch 0050-target-i386-add-memory-encryption-f.patch 0051-machine-add-memory-encryption-prope.patch 0052-kvm-update-kvm.h-to-include-memory-.patch 0053-docs-add-AMD-Secure-Encrypted-Virtu.patch 0054-accel-add-Secure-Encrypted-Virtuliz.patch 0055-sev-add-command-to-initialize-the-m.patch 0056-sev-register-the-guest-memory-range.patch 0057-kvm-introduce-memory-encryption-API.patch 0058-qmp-add-query-sev-command.patch 0059-hmp-add-info-sev-command.patch 0060-sev-add-command-to-create-launch-me.patch 0061-sev-add-command-to-encrypt-guest-me.patch 0062-target-i386-encrypt-bios-rom.patch 0063-sev-add-support-to-LAUNCH_MEASURE-c.patch 0064-sev-Finalize-the-SEV-guest-launch-f.patch 0065-hw-i386-set-ram_debug_ops-when-memo.patch 0066-sev-add-debug-encrypt-and-decrypt-c.patch 0067-target-i386-clear-C-bit-when-walkin.patch 0068-include-add-psp-sev.h-header-file.patch 0069-sev-add-support-to-query-PLATFORM_S.patch 0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch 0071-qmp-add-query-sev-launch-measure-co.patch 0072-sev-Fix-build-for-non-x86-hosts.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Update python3 related patches now that they are upstream- guest agent: change service file to a template so it can be used by Xen as well. Adjust udev rule accordingly. FATE#324963- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823) 0045-pc-fail-memory-hot-plug-unplug-with.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Modify BuildRequires python references - seabios also needed tweaks for python2 vs python3 * Patches added: seabios-use-python2-explicitly-as-needed.patch seabios-switch-to-python3-as-needed.patch- Try to get our story right wrt python2 vs python3 (bsc#1077564) * Get rid of use of #!/usr/bin/env python in scripts we install * include proposed upstream build system changes needed for building with python2 or python3 * Patches dropped: 0032-scripts-avoid-usr-bin-python-refere.patch * Patches renamed: 0033-Switch-order-of-libraries-for-mpath.patch - > 0032-Switch-order-of-libraries-for-mpath.patch 0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch - > 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch * Patches added: 0034-qapi-use-items-values-intead-of-ite.patch 0035-qapi-Use-OrderedDict-from-standard-.patch 0036-qapi-adapt-to-moved-location-of-Str.patch 0037-qapi-Adapt-to-moved-location-of-mak.patch 0038-qapi-remove-q-arg-to-diff-when-comp.patch 0039-qapi-ensure-stable-sort-ordering-wh.patch 0040-qapi-force-a-UTF-8-locale-for-runni.patch 0041-scripts-ensure-signrom-treats-data-.patch 0042-configure-allow-use-of-python-3.patch 0043-input-add-missing-JIS-keys-to-virti.patch 0044-Make-installed-scripts-explicitly-p.patch Make-installed-scripts-explicitly-python3.patch ui-keycodemapdb-Add-missing-QKeyCode-val.patch ui-keycodemapdb-Fix-compat-with-py3-dict.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Fix packaging dependencies (coreutils) for qemu-ksm package (bsc#1040202)- Pass through to guest info related to x86 security vulnerability (CVE-2017-5715 bsc#1068032) 0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Update to v2.11.0: See http://wiki.qemu.org/ChangeLog/2.11 Some noteworthy changes: - nodefconfig is now deprecated legacy pci-assignment code removed qemu-pr-helper added for handling guest persistant reservations (bsc#891066, bsc#910704, bsc#943807) qemu-keymap tool added for generating keymap files throttle block filter driver added support for a TPM emulator qcow2 image shrink support better support for >=64 vcpus for Windows guests nested KVM related improvements s390 pgste handling now done better EPYC cpu model added (bsc#1052825) improvements in qcow2 buffer handling vhost-user resume issue fixed migration hardening ARMv8-M security extension support more seccomp/sandboxing options available s390 cpu hot-plug improvements misc. virtfs improvements nbd improvements MTTCG improvements misc. TCG improvements scsi correctness improvements SEABIOS now has serial output option * Includes fixes for CVE-2017-15118 bsc#1070147, CVE-2017-15119 bsc#1070144 * Adds KASLR support (fate#323473, bsc#1070281) * Update SLE support docs to match this release * simplify spec file to expect at least sle_version >= 1315 * Patches dropped (upstream): 0013-console-add-question-mark-escape-op.patch 0020-configure-Fix-detection-of-seccomp-.patch 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch 0035-chardev-baum-fix-baum-that-releases.patch 0036-io-fix-temp-directory-used-by-test-.patch 0037-io-fix-check-for-handshake-completi.patch 0038-crypto-fix-test-cert-generation-to-.patch 0039-vhost-user-disable-the-broken-subpr.patch 0040-io-monitor-encoutput-buffer-size-fr.patch 0041-cirrus-fix-oob-access-in-mode4and5-.patch 0042-9pfs-use-g_malloc0-to-allocate-spac.patch * Patches renamed: 0014-Make-char-muxer-more-robust-wrt-sma.patch - > 0013-Make-char-muxer-more-robust-wrt-sma.patch 0015-linux-user-lseek-explicitly-cast-no.patch - > 0014-linux-user-lseek-explicitly-cast-no.patch 0016-AIO-Reduce-number-of-threads-for-32.patch - > 0015-AIO-Reduce-number-of-threads-for-32.patch 0017-xen_disk-Add-suse-specific-flush-di.patch - > 0016-xen_disk-Add-suse-specific-flush-di.patch 0018-qemu-bridge-helper-reduce-security-.patch - > 0017-qemu-bridge-helper-reduce-security-.patch 0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0021-linux-user-properly-test-for-infini.patch - > 0019-linux-user-properly-test-for-infini.patch 0022-roms-Makefile-pass-a-packaging-time.patch - > 0020-roms-Makefile-pass-a-packaging-time.patch 0023-Raise-soft-address-space-limit-to-h.patch - > 0021-Raise-soft-address-space-limit-to-h.patch 0024-increase-x86_64-physical-bits-to-42.patch - > 0022-increase-x86_64-physical-bits-to-42.patch 0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0026-i8254-Fix-migration-from-SLE11-SP2.patch - > 0024-i8254-Fix-migration-from-SLE11-SP2.patch 0027-acpi_piix4-Fix-migration-from-SLE11.patch - > 0025-acpi_piix4-Fix-migration-from-SLE11.patch 0028-Fix-tigervnc-long-press-issue.patch - > 0026-Fix-tigervnc-long-press-issue.patch 0029-string-input-visitor-Fix-uint64-par.patch - > 0027-string-input-visitor-Fix-uint64-par.patch 0030-test-string-input-visitor-Add-int-t.patch - > 0028-test-string-input-visitor-Add-int-t.patch 0031-test-string-input-visitor-Add-uint6.patch - > 0029-test-string-input-visitor-Add-uint6.patch 0032-tests-Add-QOM-property-unit-tests.patch - > 0030-tests-Add-QOM-property-unit-tests.patch 0033-tests-Add-scsi-disk-test.patch - > 0031-tests-Add-scsi-disk-test.patch 0043-scripts-avoid-usr-bin-python-refere.patch - > 0032-scripts-avoid-usr-bin-python-refere.patch * We need the multipath libraries link order switched 0033-Switch-order-of-libraries-for-mpath.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Avoid ref to /usr/bin/python in vmstate-static-checker.py script 0043-scripts-avoid-usr-bin-python-refere.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- For SLE15, it's been decided to stop providing SDL based graphics due to packaging constraints. Long ago GTK became the default, and there is little benefit to providing both. For now, keep it enabled for openSUSE (Tumblweed and Leap), but consider it marked deprecated there and if no one complains it will be removed for openSUSE as well in the near future. (fate#324465) - Fix problem building skiboot.lid skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch- Wrap analyze-migration and vmstate-static-checker into tools from qemu scripts folder, also changed introduction of qemu-tools in spec file - Move supportplugin position in spec file- Add announcement in support docs about qed storage format no longer being supported in next major SLE release (SLE15) (fate#324200) - Address various security/stability issues * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942) 0040-io-monitor-encoutput-buffer-size-fr.patch * Fix OOB access in cirrus vga device emulation (CVE-2017-15289 bsc#1063122) 0041-cirrus-fix-oob-access-in-mode4and5-.patch * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069) 0042-9pfs-use-g_malloc0-to-allocate-spac.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Don't tie glusterfs support to specific arch - Build skiboot firmware (OPAL), particularly since it's fairly easy to do so skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch skiboot-libc-stdio-vsnprintf.c-add-expli.patch- Added the global macro 'with_glusterfs' in order to re-enable glusterfs support. The macro enable easier future adjustments for various ARCH/targets/requiremnets. At first glusterfs support is enabled for openSUSE Leap 42.x and Factory for ARCH x86_64.- Add dependencies on ovmf (uefi) for the qemu-x86 and qemu-arm packages - Fix s390-netboot.img to be included with qemu-s390 package, not qemu-ppc- Update to v2.10.1, a stable, bug-fix-only release * fixes bsc#1056386 CVE-2017-13673, bsc#1056334 CVE-2017-13672, bsc#1057585 CVE-2017-14167 * Patches dropped (upstream): 0034-slirp-fix-clearing-ifq_so-from-pend.patch 0035-s390-ccw-Fix-alignment-for-CCW1.patch 0038-s390x-ais-for-2.10-stable-disable-a.patch 0039-s390x-cpumodel-remove-ais-from-z14-.patch * Patches renamed: 0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch - > 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch 0037-chardev-baum-fix-baum-that-releases.patch - > 0035-chardev-baum-fix-baum-that-releases.patch 0040-io-fix-temp-directory-used-by-test-.patch - > 0036-io-fix-temp-directory-used-by-test-.patch 0041-io-fix-check-for-handshake-completi.patch - > 0037-io-fix-check-for-handshake-completi.patch 0042-crypto-fix-test-cert-generation-to-.patch - > 0038-crypto-fix-test-cert-generation-to-.patch 0043-vhost-user-disable-the-broken-subpr.patch - > 0039-vhost-user-disable-the-broken-subpr.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix failures and potential failures in qemu-testsuite 0040-io-fix-temp-directory-used-by-test-.patch 0041-io-fix-check-for-handshake-completi.patch 0042-crypto-fix-test-cert-generation-to-.patch 0043-vhost-user-disable-the-broken-subpr.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix migration issue on s390 0038-s390x-ais-for-2.10-stable-disable-a.patch 0039-s390x-cpumodel-remove-ais-from-z14-.patch - Fix case of not being able to build from rpm sources due to undefined macro (boo#1057966) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix baum that release brlapi twice (bsc#1060045) 0037-chardev-baum-fix-baum-that-releases.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- For SLE15 pre-release testing, add support for the EPYC processor. This will be officially supported once it is included in the v2.11 release. (bsc#1052825) 0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch - Fix some support statements in our SLE support documents.- Update BuildRequires packages libibverbs-devel and librdmacm-devel to the more correct rdma-core-devel - Enable seccomp for s390x, aarch64, and ppc64le - Fix OOB issue (use after free) in slirp network stack (CVE-2017-13711 bsc#1056291) 0034-slirp-fix-clearing-ifq_so-from-pend.patch - Fix a misalignment in the s390 ccw firmware (bsc#1056680) 0035-s390-ccw-Fix-alignment-for-CCW1.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Add a supportconfig plugin qemu-supportconfig FATE#323661- Update to v2.10.0: See http://wiki.qemu.org/ChangeLog/2.10 - Dropped internal only patches used to support SUSE Studio Testdrive as well as other miscellaneous patches deemed unused and not worth carrying (bsc#1046783, bsc#1055125, bsc#1055127) - Update SLE support statements in anticipation of SLE15 - disable SAN boot capability from virtio pxe rom used in v1.4 and older pc machine types due to rom size requirements. Hopefully a better solution can be found which doesn't impact functionality * Patches added: ipxe-stub-out-the-SAN-req-s-in-int13.patch * Patches renamed: 0006-qemu-cvs-gettimeofday.patch -> 0003-qemu-cvs-gettimeofday.patch 0007-qemu-cvs-ioctl_debug.patch -> 0004-qemu-cvs-ioctl_debug.patch 0008-qemu-cvs-ioctl_nodirection.patch -> 0005-qemu-cvs-ioctl_nodirection.patch 0009-linux-user-add-binfmt-wrapper-for-a.patch -> 0006-linux-user-add-binfmt-wrapper-for-a.patch 0010-PPC-KVM-Disable-mmu-notifier-check.patch -> 0007-PPC-KVM-Disable-mmu-notifier-check.patch 0011-linux-user-fix-segfault-deadlock.patch -> 0008-linux-user-fix-segfault-deadlock.patch 0012-linux-user-binfmt-support-host-bina.patch -> 0009-linux-user-binfmt-support-host-bina.patch 0013-linux-user-Fake-proc-cpuinfo.patch -> 0010-linux-user-Fake-proc-cpuinfo.patch 0014-linux-user-XXX-disable-fiemap.patch -> 0011-linux-user-XXX-disable-fiemap.patch 0017-linux-user-use-target_ulong.patch -> 0012-linux-user-use-target_ulong.patch 0021-console-add-question-mark-escape-op.patch -> 0013-console-add-question-mark-escape-op.patch 0022-Make-char-muxer-more-robust-wrt-sma.patch -> 0014-Make-char-muxer-more-robust-wrt-sma.patch 0023-linux-user-lseek-explicitly-cast-no.patch -> 0015-linux-user-lseek-explicitly-cast-no.patch 0025-AIO-Reduce-number-of-threads-for-32.patch -> 0016-AIO-Reduce-number-of-threads-for-32.patch 0027-xen_disk-Add-suse-specific-flush-di.patch -> 0017-xen_disk-Add-suse-specific-flush-di.patch 0028-qemu-bridge-helper-reduce-security-.patch -> 0018-qemu-bridge-helper-reduce-security-.patch 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0030-configure-Fix-detection-of-seccomp-.patch -> 0020-configure-Fix-detection-of-seccomp-.patch 0031-linux-user-properly-test-for-infini.patch -> 0020-linux-user-properly-test-for-infini.patch 0033-roms-Makefile-pass-a-packaging-time.patch -> 0022-roms-Makefile-pass-a-packaging-time.patch 0034-Raise-soft-address-space-limit-to-h.patch -> 0023-Raise-soft-address-space-limit-to-h.patch 0035-increase-x86_64-physical-bits-to-42.patch -> 0024-increase-x86_64-physical-bits-to-42.patch 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0037-i8254-Fix-migration-from-SLE11-SP2.patch -> 0026-i8254-Fix-migration-from-SLE11-SP2.patch 0038-acpi_piix4-Fix-migration-from-SLE11.patch -> 0027-acpi_piix4-Fix-migration-from-SLE11.patch 0039-Fix-tigervnc-long-press-issue.patch -> 0028-Fix-tigervnc-long-press-issue.patch 0041-string-input-visitor-Fix-uint64-par.patch -> 0029-string-input-visitor-Fix-uint64-par.patch 0042-test-string-input-visitor-Add-int-t.patch -> 0030-test-string-input-visitor-Add-int-t.patch 0043-test-string-input-visitor-Add-uint6.patch -> 0031-test-string-input-visitor-Add-uint6.patch 0044-tests-Add-QOM-property-unit-tests.patch -> 0032-tests-Add-QOM-property-unit-tests.patch 0045-tests-Add-scsi-disk-test.patch -> 0033-tests-Add-scsi-disk-test.patch * Patches dropped (upstream unless otherwise noted): 0003-qemu-cvs-alsa_bitfield.patch (deemed not needed) 0004-qemu-cvs-alsa_ioctl.patch (deemed not needed) 0005-qemu-cvs-alsa_mmap.patch (deemed not needed) 0015-slirp-nooutgoing.patch (bsc#1055125) 0016-vnc-password-file-and-incoming-conn.patch (bsc#1055127) 0018-block-Add-support-for-DictZip-enabl.patch (bsc#1046783) 0019-block-Add-tar-container-format.patch (bsc#1046783) 0020-Legacy-Patch-kvm-qemu-preXX-dictzip.patch (bsc#1046783) 0024-configure-Enable-PIE-for-ppc-and-pp.patch (obsolete) 0026-dictzip-Fix-on-big-endian-systems.patch (bsc#1046783) 0032-linux-user-remove-all-traces-of-qem.patch 0040-fix-xen-hvm-direct-kernel-boot.patch (bsc#970791) 0046-RFC-update-Linux-headers-from-irqs-.patch 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch 0048-input-Add-trace-event-for-empty-key.patch 0049-ACPI-don-t-call-acpi_pcihp_device_p.patch 0050-i386-Allow-cpuid-bit-override.patch (was for testing only) 0051-input-limit-kbd-queue-depth.patch 0052-audio-release-capture-buffers.patch 0053-scsi-avoid-an-off-by-one-error-in-m.patch 0054-vmw_pvscsi-check-message-ring-page-.patch 0055-9pfs-local-forbid-client-access-to-.patch 0056-jazz_led-fix-bad-snprintf.patch 0057-slirp-smb-Replace-constant-strings-.patch 0058-altera_timer-fix-incorrect-memset.patch 0059-Hacks-for-building-on-gcc-7-Fedora-.patch 0060-9pfs-local-fix-unlink-of-alien-file.patch 0061-megasas-do-not-read-DCMD-opcode-mor.patch 0062-megasas-always-store-SCSIRequest-in.patch 0063-nbd-Fully-initialize-client-in-case.patch 0064-9pfs-local-remove-use-correct-path-.patch 0065-hid-Reset-kbd-modifiers-on-reset.patch 0066-input-Decrement-queue-count-on-kbd-.patch 0067-xhci-only-update-dequeue-ptr-on-com.patch 0068-vnc-Set-default-kbd-delay-to-10ms.patch 0069-qemu-nbd-Ignore-SIGPIPE.patch 0070-usb-redir-fix-stack-overflow-in-usb.patch 0072-slirp-check-len-against-dhcp-option.patch 0071-exec-use-qemu_ram_ptr_length-to-acc.patch 0073-xen-mapcache-store-dma-information-.patch 0074-exec-Add-lock-parameter-to-qemu_ram.patch 0075-Replace-struct-ucontext-with-uconte.patch ipxe-build-Avoid-implicit-fallthrough-warnings-on-GCC-7.patch ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch ipxe-ath-Add-missing-break-statements.patch ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix package build failure as of glibc v2.26 update in Factory (boo#1055587) 0075-Replace-struct-ucontext-with-uconte.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Remove redundant prerequire for pwdutils- Postrequire acl for setfacl- Prerequire shadow for groupadd- The recent security fix for CVE-2017-11334 adversely affects Xen. Include two additional patches to make sure Xen is going to be OK. 0073-xen-mapcache-store-dma-information-.patch 0074-exec-Add-lock-parameter-to-qemu_ram.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Pre-add group kvm for qemu-tools (bsc#1011144)- Fixed a few more inaccuracies in the support docs.- Address various security/stability issues * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664) 0069-qemu-nbd-Ignore-SIGPIPE.patch * Fix DOS from stack overflow in debug messages of usb redirection support (bsc#1047674 CVE-2017-10806) 0070-usb-redir-fix-stack-overflow-in-usb.patch * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902) 0071-exec-use-qemu_ram_ptr_length-to-acc.patch * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381) 0072-slirp-check-len-against-dhcp-option.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Fix support docs to indicate ARM64 is now fully L3 supported in SLES 12 SP3. Apply a few additional clarifications in the support docs. (bsc#1050268) - Adjust to libvdeplug-devel package naming changes.- Fix migration with xhci (bsc#1048296) 0067-xhci-only-update-dequeue-ptr-on-com.patch - Increase VNC delay to fix missing keyboard input events (bsc#1031692) 0068-vnc-Set-default-kbd-delay-to-10ms.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Remove build dependency package iasl used for seabios- Fixed stuck state during usb keyboard reset (bsc#1044936) 0065-hid-Reset-kbd-modifiers-on-reset.patch - Fixed keyboard events getting lost (bsc#1044936) 0066-input-Decrement-queue-count-on-kbd-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Use most recent compiler to build size-critical firmware, instead of hard-coding gcc6 for all target versions (bsc#1043390) * A few upstream ipxe patches were needed for gcc7 compatibility: ipxe-ath-Add-missing-break-statements.patch ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch - Add --no-renames to the git format-patch command in the git workflow script for better patch compatibility - Address various security/stability issues * Fix potential privilege escalation in virtfs (CVE-2016-9602 bsc#1020427) 0060-9pfs-local-fix-unlink-of-alien-file.patch * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296) 0061-megasas-do-not-read-DCMD-opcode-mor.patch 0062-megasas-always-store-SCSIRequest-in.patch * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808) 0063-nbd-Fully-initialize-client-in-case.patch * Fix regression introduced by recent virtfs security fixes (bsc#1045035) 0064-9pfs-local-remove-use-correct-path-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Backport ipxe to support FirstBurstLength (bsc#1040476) ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan) 0056-jazz_led-fix-bad-snprintf.patch 0057-slirp-smb-Replace-constant-strings-.patch 0058-altera_timer-fix-incorrect-memset.patch 0059-Hacks-for-building-on-gcc-7-Fedora-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495) 0055-9pfs-local-forbid-client-access-to-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Address various security/stability issues * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334) 0051-input-limit-kbd-queue-depth.patch * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242) 0052-audio-release-capture-buffers.patch * Fix OOB access in megasas device emulation (CVE-2017-8380 bsc#1037336) 0053-scsi-avoid-an-off-by-one-error-in-m.patch * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211) 0054-vmw_pvscsi-check-message-ring-page-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Fix building packages for some older distros. - Further refine our handling of building firmware (or not) for the various arch's and distro versions we build for. Note that if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream binary blobs are used, which may have migration incompatibilities with previous versions of qemu provided.- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen HVM guests got broken (bsc#1034131) 0049-ACPI-don-t-call-acpi_pcihp_device_p.patch - Include experimental, unsupported feature to assist in some performance analysis work. 0050-i386-Allow-cpuid-bit-override.patch- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9 - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9 * Includes fix for CVE-2017-7471, a virtfs security issue. - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Add empty keyboard queue tracepoint to help openQA testing work better (bsc#1031692) 0048-input-Add-trace-event-for-empty-key.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.9 - Enable ceph/rbd support for s390x (bsc#1030068) - Enable ceph/rbd support for ppc* as available - Update ARM in-kernel-timers patch (bsc#1033416) * Patches renamed: 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch 0042-string-input-visitor-Fix-uint64-par.patch -> 0041-string-input-visitor-Fix-uint64-par.patch 0043-test-string-input-visitor-Add-int-t.patch -> 0042-test-string-input-visitor-Add-int-t.patch 0044-test-string-input-visitor-Add-uint6.patch -> 0043-test-string-input-visitor-Add-uint6.patch 0045-tests-Add-QOM-property-unit-tests.patch -> 0044-tests-Add-QOM-property-unit-tests.patch 0046-tests-Add-scsi-disk-test.patch -> 0045-tests-Add-scsi-disk-test.patch * Patches added (support patch): 0046-RFC-update-Linux-headers-from-irqs-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.9 * Patches dropped (included in upstream source archive): 0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch 0048-i386-Replace-uint32_t-with-FeatureW.patch 0049-i386-Don-t-override-cpu-options-on-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9 - Added additional documentation provided with v2.9.0 - Fix build failure with gcc7 (bsc#1031340) ipxe-build-Avoid-implicit-fallthrough-warnings-on-GCC-7.patch - Made miscellaneous spec file refinements- The support documents included are now fairly accurate for the arm and s390 world, and the x86 version also received a few tweaks. Also included in those docs is a url reference to upstream qemu deprecation plans and discussions. (fate#321146) - Add post v2.9.0-rc2 upstream patches which fix -cpu host and -cpu max feature overrides for libvirt compatability. 0048-i386-Replace-uint32_t-with-FeatureW.patch 0049-i386-Don-t-override-cpu-options-on-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.9 * Includes fix for in guest privilege escalation when using TCG (bsc#1030624) * Patches dropped (equivalent included in upstream source archive): 0047-linux-user-exclude-cpu-model-code-w.patch - Fix failure booting SLE12-SP2 Aarch64 guest (bsc#1031384) 0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.9 * Patches dropped (no longer needed based on what we now build for): 0024-virtfs-proxy-helper-Provide-__u64-f.patch * Patches dropped (included in upstream source archive): 0034-dma-rc4030-limit-interval-timer-rel.patch * Patches renamed: 0025-configure-Enable-PIE-for-ppc-and-pp.patch -> 0024-configure-Enable-PIE-for-ppc-and-pp.patch 0026-AIO-Reduce-number-of-threads-for-32.patch -> 0025-AIO-Reduce-number-of-threads-for-32.patch 0027-dictzip-Fix-on-big-endian-systems.patch -> 0026-dictzip-Fix-on-big-endian-systems.patch 0028-xen_disk-Add-suse-specific-flush-di.patch -> 0027-xen_disk-Add-suse-specific-flush-di.patch 0029-qemu-bridge-helper-reduce-security-.patch -> 0028-qemu-bridge-helper-reduce-security-.patch 0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0031-configure-Fix-detection-of-seccomp-.patch -> 0030-configure-Fix-detection-of-seccomp-.patch 0032-linux-user-properly-test-for-infini.patch -> 0031-linux-user-properly-test-for-infini.patch 0033-linux-user-remove-all-traces-of-qem.patch -> 0032-linux-user-remove-all-traces-of-qem.patch 0035-roms-Makefile-pass-a-packaging-time.patch -> 0033-roms-Makefile-pass-a-packaging-time.patch 0036-Raise-soft-address-space-limit-to-h.patch -> 0034-Raise-soft-address-space-limit-to-h.patch 0037-increase-x86_64-physical-bits-to-42.patch -> 0035-increase-x86_64-physical-bits-to-42.patch 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0039-i8254-Fix-migration-from-SLE11-SP2.patch -> 0037-i8254-Fix-migration-from-SLE11-SP2.patch 0040-acpi_piix4-Fix-migration-from-SLE11.patch -> 0038-acpi_piix4-Fix-migration-from-SLE11.patch 0041-Fix-tigervnc-long-press-issue.patch -> 0039-Fix-tigervnc-long-press-issue.patch 0042-fix-xen-hvm-direct-kernel-boot.patch -> 0040-fix-xen-hvm-direct-kernel-boot.patch 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch 0044-string-input-visitor-Fix-uint64-par.patch -> 0042-string-input-visitor-Fix-uint64-par.patch 0045-test-string-input-visitor-Add-int-t.patch -> 0043-test-string-input-visitor-Add-int-t.patch 0046-test-string-input-visitor-Add-uint6.patch -> 0044-test-string-input-visitor-Add-uint6.patch 0047-tests-Add-QOM-property-unit-tests.patch -> 0045-tests-Add-QOM-property-unit-tests.patch 0048-tests-Add-scsi-disk-test.patch -> 0046-tests-Add-scsi-disk-test.patch 0049-linux-user-exclude-cpu-model-code-w.patch -> 0047-linux-user-exclude-cpu-model-code-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.9 * Updated version carries fixes for the following reported issues: CVE-2016-9602 bsc#1020427, CVE-2016-9923 bsc#1014703, CVE-2017-2630 bsc#1025396, CVE-2017-2633 bsc#1026612, CVE-2017-5579 bsc#1021741, CVE-2017-5931 bsc#1024114, CVE-2017-5973 bsc#1025109, CVE-2017-5987 bsc#1025311, CVE-2017-6058 bsc#1025837, CVE-2017-6505 bsc#1028184 * Patches dropped: seabios_128kb.patch (no longer required) * Patches dropped (included in upstream source archive): 0035-net-imx-limit-buffer-descriptor-cou.patch 0045-virtio-gpu-call-cleanup-mapping-fun.patch 0051-virtio-gpu-fix-information-leak-in-.patch 0052-display-cirrus-ignore-source-pitch-.patch 0053-s390x-kvm-fix-small-race-reboot-vs..patch 0054-target-s390x-use-qemu-cpu-model-in-.patch 0056-tests-check-path-to-avoid-a-failing.patch 0057-display-virtio-gpu-3d-check-virgl-c.patch 0058-watchdog-6300esb-add-exit-function.patch 0059-virtio-gpu-3d-fix-memory-leak-in-re.patch 0060-virtio-gpu-fix-memory-leak-in-resou.patch 0061-virtio-fix-vq-inuse-recalc-after-mi.patch 0062-audio-es1370-add-exit-function.patch 0063-audio-ac97-add-exit-function.patch 0064-megasas-fix-guest-triggered-memory-.patch 0065-cirrus-handle-negative-pitch-in-cir.patch 0066-cirrus-fix-blit-address-mask-handli.patch 0067-cirrus-fix-oob-access-issue-CVE-201.patch 0068-usb-ccid-check-ccid-apdu-length.patch 0069-sd-sdhci-check-data-length-during-d.patch 0070-virtio-gpu-fix-resource-leak-in-vir.patch 0071-cirrus-fix-patterncopy-checks.patch 0072-cirrus-add-blit_is_unsafe-call-to-c.patch * Patches renamed: 0036-roms-Makefile-pass-a-packaging-time.patch -> 0035-roms-Makefile-pass-a-packaging-time.patch 0037-Raise-soft-address-space-limit-to-h.patch -> 0036-Raise-soft-address-space-limit-to-h.patch 0038-increase-x86_64-physical-bits-to-42.patch -> 0037-increase-x86_64-physical-bits-to-42.patch 0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0040-i8254-Fix-migration-from-SLE11-SP2.patch -> 0039-i8254-Fix-migration-from-SLE11-SP2.patch 0041-acpi_piix4-Fix-migration-from-SLE11.patch -> 0040-acpi_piix4-Fix-migration-from-SLE11.patch 0042-Fix-tigervnc-long-press-issue.patch -> 0041-Fix-tigervnc-long-press-issue.patch 0043-fix-xen-hvm-direct-kernel-boot.patch -> 0042-fix-xen-hvm-direct-kernel-boot.patch 0044-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch 0046-string-input-visitor-Fix-uint64-par.patch -> 0044-string-input-visitor-Fix-uint64-par.patch 0047-test-string-input-visitor-Add-int-t.patch -> 0045-test-string-input-visitor-Add-int-t.patch 0048-test-string-input-visitor-Add-uint6.patch -> 0046-test-string-input-visitor-Add-uint6.patch 0049-tests-Add-QOM-property-unit-tests.patch -> 0047-tests-Add-QOM-property-unit-tests.patch 0050-tests-Add-scsi-disk-test.patch -> 0048-tests-Add-scsi-disk-test.patch 0055-linux-user-exclude-cpu-model-code-w.patch -> 0049-linux-user-exclude-cpu-model-code-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Buildignore for the global gcc-PIE, as this package enables PIE on its own and has troubles if all use it. (meissner@suse.com)- Address various security/stability issues * Fix OOB access in virito-gpu-3d (CVE-2016-10028 bsc#1017084 bsc#1016503) 0057-display-virtio-gpu-3d-check-virgl-c.patch * Fix DOS in Intel 6300ESB device emulation (CVE-2016-10155 bsc#1021129) 0058-watchdog-6300esb-add-exit-function.patch * Fix DOS in virtio-gpu-3d (CVE-2017-5552 bsc#1021195) 0059-virtio-gpu-3d-fix-memory-leak-in-re.patch * Fix DOS in virtio-gpu (CVE-2017-5578 bsc#1021481) 0060-virtio-gpu-fix-memory-leak-in-resou.patch * Fix cause of infrequent migration failures from bad virtio device state. (bsc#1020928) 0061-virtio-fix-vq-inuse-recalc-after-mi.patch * Fix DOS in es1370 emulated audio device (CVE-2017-5526 bsc#1020589) 0062-audio-es1370-add-exit-function.patch * Fix DOS in ac97 emulated audio device (CVE-2017-5525 bsc#1020491) 0063-audio-ac97-add-exit-function.patch * Fix DOS in megasas device emulation (CVE-2017-5856 bsc#1023053) 0064-megasas-fix-guest-triggered-memory-.patch * Fix various inaccuracies in cirrus vga device emulation 0065-cirrus-handle-negative-pitch-in-cir.patch 0066-cirrus-fix-blit-address-mask-handli.patch * Fix OOB access in cirrus vga emulation (CVE-2017-2615 bsc#1023004) 0067-cirrus-fix-oob-access-issue-CVE-201.patch * Fix DOS in usb CCID card device emulator (CVE-2017-5898 bsc#1023907) 0068-usb-ccid-check-ccid-apdu-length.patch * Fix OOB access in SDHCI device emulation (CVE-2017-5667 bsc#1022541) 0069-sd-sdhci-check-data-length-during-d.patch * Fix DOS in virtio-gpu-3d (CVE-2017-5857 bsc#1023073) 0070-virtio-gpu-fix-resource-leak-in-vir.patch * Fix cirrus patterncopy checks 0071-cirrus-fix-patterncopy-checks.patch * Fix OOB access in cirrus vga emulation (CVE-2017-2620 bsc#1024972) 0072-cirrus-add-blit_is_unsafe-call-to-c.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8- Fix name of s390x specific sysctl configuration file to end with .conf (bsc#1026583)- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Check that sysfs path exists before running test which requires it. This allows qemu-testsuite to succeed in local build service chroot based package build. 0056-tests-check-path-to-avoid-a-failing.patch- Factory and SLE12-SP3 got a name change in the dtc devel package: libfdt1-devel -> libfdt-devel. Adjust our spec file accordingly.- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Patches added: 0055-linux-user-exclude-cpu-model-code-w.patch- Make sure qemu guest agent is usable as soon as qemu-guest-agent package is installed. The previous post script was still not doing the job. - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Fix potential hang/crash rebooting s390x guest 0053-s390x-kvm-fix-small-race-reboot-vs..patch * Fix s390x linux-user failure since v2.8.0 update 0054-target-s390x-use-qemu-cpu-model-in-.patch- Merge qemu packages from openSUSE and SUSE SLE releases together for the v2.8 qemu update. The qemu.changes file is the openSUSE version with this entry providing CVE, FATE, and bugzilla references from the SUSE SLE qemu package to date (see below) - Updated to v2.8.0: See http://wiki.qemu-project.org/ChangeLog/2.8 * For SUSE SLE-12-SP3, update relates to fate#319684, fate#321331, fate#321335, fate#321339, fate#321349, fate#321857 * For best compatibility, qemu-ifup and kvm_stat scripts now owned by qemu package * Build ipxe roms with gcc6 to maintain SLE legacy migration compatibility requirements * qmp-commands.txt file removed, to resurface in future doc reorganization * qemu-tech.html file merged into other existing doc * trace-events renamed to trace-events-all - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Patches dropped (upstream): 0013-linux-user-lock-tcg.patch 0014-linux-user-Run-multi-threaded-code-.patch 0015-linux-user-lock-tb-flushing-too.patch 0017-linux-user-implement-FS_IOC_GETFLAG.patch 0018-linux-user-implement-FS_IOC_SETFLAG.patch 0034-xen-SUSE-xenlinux-unplug-for-emulat.patch 0039-Fix-tlb_vaddr_to_host-with-CONFIG_U.patch 0041-vmsvga-correct-bitmap-and-pixmap-si.patch 0042-scsi-mptconfig-fix-an-assert-expres.patch 0043-scsi-mptconfig-fix-misuse-of-MPTSAS.patch 0044-scsi-pvscsi-limit-loop-to-fetch-SG-.patch 0045-usb-xhci-fix-memory-leak-in-usb_xhc.patch 0046-scsi-mptsas-use-g_new0-to-allocate-.patch 0047-scsi-pvscsi-limit-process-IO-loop-t.patch 0048-virtio-add-check-for-descriptor-s-m.patch 0049-net-mcf-limit-buffer-descriptor-cou.patch 0050-usb-ehci-fix-memory-leak-in-ehci_pr.patch 0051-xhci-limit-the-number-of-link-trbs-.patch 0052-9pfs-allocate-space-for-guest-origi.patch 0053-9pfs-fix-memory-leak-in-v9fs_link.patch 0054-9pfs-fix-potential-host-memory-leak.patch 0055-9pfs-fix-information-leak-in-xattr-.patch 0056-9pfs-fix-memory-leak-in-v9fs_xattrc.patch 0057-9pfs-fix-memory-leak-in-v9fs_write.patch 0058-char-serial-check-divider-value-aga.patch 0059-net-pcnet-check-rx-tx-descriptor-ri.patch 0060-net-eepro100-fix-memory-leak-in-dev.patch 0061-net-rocker-set-limit-to-DMA-buffer-.patch 0062-net-vmxnet-initialise-local-tx-desc.patch 0063-net-rtl8139-limit-processing-of-rin.patch 0064-audio-intel-hda-check-stream-entry-.patch 0065-virtio-gpu-fix-memory-leak-in-virti.patch 0066-9pfs-fix-integer-overflow-issue-in-.patch slof_xhci.patch * Patches renamed: 0016-linux-user-Fake-proc-cpuinfo.patch -> 0013-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-XXX-disable-fiemap.patch -> 0014-linux-user-XXX-disable-fiemap.patch 0020-slirp-nooutgoing.patch -> 0015-slirp-nooutgoing.patch 0021-vnc-password-file-and-incoming-conn.patch -> 0016-vnc-password-file-and-incoming-conn.patch 0022-linux-user-use-target_ulong.patch -> 0017-linux-user-use-target_ulong.patch 0023-block-Add-support-for-DictZip-enabl.patch -> 0018-block-Add-support-for-DictZip-enabl.patch 0024-block-Add-tar-container-format.patch -> 0019-block-Add-tar-container-format.patch 0025-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0020-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0026-console-add-question-mark-escape-op.patch -> 0021-console-add-question-mark-escape-op.patch 0027-Make-char-muxer-more-robust-wrt-sma.patch -> 0022-Make-char-muxer-more-robust-wrt-sma.patch 0028-linux-user-lseek-explicitly-cast-no.patch -> 0023-linux-user-lseek-explicitly-cast-no.patch 0029-virtfs-proxy-helper-Provide-__u64-f.patch -> 0024-virtfs-proxy-helper-Provide-__u64-f.patch 0030-configure-Enable-PIE-for-ppc-and-pp.patch -> 0025-configure-Enable-PIE-for-ppc-and-pp.patch 0031-AIO-Reduce-number-of-threads-for-32.patch -> 0026-AIO-Reduce-number-of-threads-for-32.patch 0032-dictzip-Fix-on-big-endian-systems.patch -> 0027-dictzip-Fix-on-big-endian-systems.patch 0033-xen_disk-Add-suse-specific-flush-di.patch -> 0028-xen_disk-Add-suse-specific-flush-di.patch 0035-qemu-bridge-helper-reduce-security-.patch -> 0029-qemu-bridge-helper-reduce-security-.patch 0036-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0037-configure-Fix-detection-of-seccomp-.patch -> 0031-configure-Fix-detection-of-seccomp-.patch 0038-linux-user-properly-test-for-infini.patch -> 0032-linux-user-properly-test-for-infini.patch 0040-linux-user-remove-all-traces-of-qem.patch -> 0033-linux-user-remove-all-traces-of-qem.patch 0067-dma-rc4030-limit-interval-timer-rel.patch -> 0034-dma-rc4030-limit-interval-timer-rel.patch 0068-net-imx-limit-buffer-descriptor-cou.patch -> 0035-net-imx-limit-buffer-descriptor-cou.patch 0069-roms-Makefile-pass-a-packaging-time.patch -> 0036-roms-Makefile-pass-a-packaging-time.patch * Patches added: 0037-Raise-soft-address-space-limit-to-h.patch 0038-increase-x86_64-physical-bits-to-42.patch 0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0040-i8254-Fix-migration-from-SLE11-SP2.patch 0041-acpi_piix4-Fix-migration-from-SLE11.patch 0042-Fix-tigervnc-long-press-issue.patch 0043-fix-xen-hvm-direct-kernel-boot.patch 0044-ARM-KVM-Enable-in-kernel-timers-wit.patch 0045-virtio-gpu-call-cleanup-mapping-fun.patch 0046-string-input-visitor-Fix-uint64-par.patch 0047-test-string-input-visitor-Add-int-t.patch 0048-test-string-input-visitor-Add-uint6.patch 0049-tests-Add-QOM-property-unit-tests.patch 0050-tests-Add-scsi-disk-test.patch 0051-virtio-gpu-fix-information-leak-in-.patch 0052-display-cirrus-ignore-source-pitch-.patch ipxe-use-gcc6-for-more-compact-code.patch * SLE patches dropped (accounted for in above listed changes): 0002-qemu-0.9.0.cvs-binfmt.patch 0009-block-vmdk-Support-creation-of-SCSI.patch 0010-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch 0014-linux-user-Ignore-broken-loop-ioctl.patch 0015-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch 0024-linux-user-add-more-blk-ioctls.patch 0025-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-_u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch 0034-Raise-soft-address-space-limit-to-h.patch 0035-increase-x86_64-physical-bits-to-42.patch 0036-vnc-provide-fake-color-map.patch 0037-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0038-i8254-Fix-migration-from-SLE11-SP2.patch 0039-acpi_piix4-Fix-migration-from-SLE11.patch 0040-qtest-Increase-socket-timeout-to-ac.patch 0041-dictzip-Fix-on-big-endian-systems.patch 0043-xen_disk-Add-suse-specific-flush-di.patch 0044-Split-large-discard-requests-from-b.patch 0045-fix-xen-hvm-direct-kernel-boot.patch 0046-xen-introduce-dummy-system-device.patch 0047-xen-write-information-about-support.patch 0048-xen-add-pvUSB-backend.patch 0049-xen-move-xen_sysdev-to-xen_backend..patch 0050-vnc-add-configurable-keyboard-delay.patch 0051-xen-SUSE-xenlinux-unplug-for-emulat.patch 0052-configure-add-echo_version-helper.patch 0053-configure-support-vte-2.91.patch 0054-scsi-esp-fix-migration.patch 0055-hw-arm-virt-mark-the-PCIe-host-cont.patch 0056-xen-when-removing-a-backend-don-t-r.patch 0057-xen-drain-submit-queue-in-xen-usb-b.patch 0058-qcow2-avoid-extra-flushes-in-qcow2.patch 0059-qemu-bridge-helper-reduce-security-.patch 0060-xen-use-a-common-function-for-pv-an.patch 0061-xen_platform-unplug-also-SCSI-disks.patch 0062-virtio-check-vring-descriptor-buffe.patch 0063-net-vmxnet3-check-for-device_active.patch 0064-net-vmxnet-initialise-local-tx-desc.patch 0065-scsi-pvscsi-avoid-infinite-loop-whi.patch 0066-ARM-KVM-Enable-in-kernel-timers-wit.patch 0067-hw-net-Fix-a-heap-overflow-in-xlnx..patch 0068-vmsvga-correct-bitmap-and-pixmap-si.patch 0069-usb-xhci-fix-memory-leak-in-usb_xhc.patch 0070-virtio-add-check-for-descriptor-s-m.patch 0071-net-mcf-limit-buffer-descriptor-cou.patch 0072-usb-ehci-fix-memory-leak-in-ehci_pr.patch 0073-xhci-limit-the-number-of-link-trbs-.patch 0074-9pfs-allocate-space-for-guest-origi.patch 0075-9pfs-fix-memory-leak-in-v9fs_link.patch 0076-9pfs-fix-potential-host-memory-leak.patch 0077-9pfs-fix-memory-leak-in-v9fs_write.patch 0078-char-serial-check-divider-value-aga.patch 0079-net-pcnet-check-rx-tx-descriptor-ri.patch 0080-net-eepro100-fix-memory-leak-in-dev.patch 0081-net-rocker-set-limit-to-DMA-buffer-.patch 0082-net-rtl8139-limit-processing-of-rin.patch 0083-audio-intel-hda-check-stream-entry-.patch 0084-virtio-gpu-fix-memory-leak-in-virti.patch 0085-9pfs-fix-integer-overflow-issue-in-.patch 0086-dma-rc4030-limit-interval-timer-rel.patch 0087-net-imx-limit-buffer-descriptor-cou.patch 0088-target-i386-Implement-CPUID-0xB-Ext.patch 0089-target-i386-present-virtual-L3-cach.patch 0090-migration-fix-inability-to-save-VM-.patch 0091-ui-gtk-Fix-a-runtime-warning-on-vte.patch 0092-gtk-don-t-leak-the-GtkBorder-with-V.patch 0093-xen-fix-ioreq-handling.patch 0094-macio-Use-blk_drain-instead-of-blk_.patch 0095-rbd-Switch-rbd_start_aio-to-byte-ba.patch 0096-virtio-blk-Release-s-rq-queue-at-sy.patch 0097-virtio-blk-Remove-stale-comment-abo.patch 0098-block-reintroduce-bdrv_flush_all.patch 0099-qemu-use-bdrv_flush_all-for-vm_stop.patch 0100-block-backend-remove-blkflush_all.patch 0101-char-fix-missing-return-in-error-pa.patch 0102-rbd-shift-byte-count-as-a-64-bit-va.patch 0103-mirror-use-bdrv_drained_begin-bdrv_.patch 0104-block-curl-Use-BDRV_SECTOR_SIZE.patch 0105-block-curl-Fix-return-value-from-cu.patch 0106-block-curl-Remember-all-sockets.patch 0107-block-curl-Do-not-wait-for-data-bey.patch 0108-virtio-allow-per-device-class-legac.patch 0109-virtio-net-mark-VIRTIO_NET_F_GSO-as.patch 0110-vhost-adapt-vhost_verify_ring_mappi.patch 0111-ivshmem-Fix-64-bit-memory-bar-confi.patch 0112-intel_iommu-fix-incorrect-device-in.patch 0113-9pfs-fix-information-leak-in-xattr-.patch 0114-9pfs-fix-memory-leak-in-v9fs_xattrc.patch 0115-net-mcf-check-receive-buffer-size-r.patch 0116-virtio-gpu-fix-memory-leak-in-updat.patch 0117-virtio-gpu-fix-information-leak-in-.patch 0118-9pfs-adjust-the-order-of-resource-c.patch 0119-9pfs-add-cleanup-operation-in-FileO.patch 0120-9pfs-add-cleanup-operation-for-hand.patch 0121-9pfs-add-cleanup-operation-for-prox.patch 0122-virtio-gpu-call-cleanup-mapping-fun.patch 0123-string-input-visitor-Fix-uint64-par.patch 0124-test-string-input-visitor-Add-int-t.patch 0125-test-string-input-visitor-Add-uint6.patch 0126-tests-Add-QOM-property-unit-tests.patch 0127-tests-Add-scsi-disk-test.patch 0128-usb-ehci-fix-memory-leak-in-ehci_in.patch 0129-usbredir-free-vm_change_state_handl.patch 0130-virtio-gpu-fix-information-leak-in-.patch ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch ipxe-legacy-Fix-building-with-GCC-6.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-util-v5.24-perl-errors-on-redeclare.patch - SLE CVE, FATE, and bugzilla references not otherwise listed in this changelog file. The intent of this list is to indicate that the fix or feature continues the line of inheritance in the development stream of this package. The list is intended to satisfy searches only - refer to the SLE-12-SP2 changelog file for additional details. * fate#314468 fate#314497 fate#315125 fate#315467 fate#317015 fate#317741 fate#317763 fate#318349 fate#319660 fate#319979 fate#321010 * bnc#812983 bnc#869026 bnc#869746 bnc#874413 bnc#875582 bnc#875870 bnc#877642 bnc#877645 bnc#878541 bsc#882405 bsc#886378 bnc#893339 bnc#893892 bnc#895369 bnc#896726 bnc#897654 bnc#905097 bnc#907805 bnc#908380 bnc#914521 bsc#924018 bsc#929339 bsc#932267 bsc#932770 bsc#933981 bsc#936537 bsc#937125 bsc#938344 bsc#940929 bsc#942845 bsc#943446 bsc#944697 bsc#945404 bsc#945987 bsc#945989 bsc#946020 bsc#947159 bnc#953518 bsc#954864 bsc#956829 bsc#957162 bsc#958491 bsc#958917 bsc#959005 bsc#959386 bsc#960334 bsc#960708 bsc#960725 bsc#960835 bsc#961333 bsc#961556 bsc#961691 bsc#962320 bsc#963782 bsc#964413 bsc#970791 bsc#974141 bsc#978158 bsc#979473 bsc#982365 bsc#989655 bsc#991466 bsc#994771 bsc#994774 bsc#996441 bsc#997858 bsc#999212 bsc#1001151 bsc#1002116 bsc#1005353 boo#1007263 bsc#1007769 bsc#1008519 bsc#1009109 bsc#1013285 bsc#1013341 bsc#1013764 bsc#1013767 bsc#1014109 bsc#1014110 bsc#1014111 bsc#1014112 bsc#1014256 bsc#1014514 bsc#1014702 bsc#1015169 bsc#1016779 * CVE-2014-0222 CVE-2014-0223 CVE-2014-3461 CVE-2014-3640 CVE-2014-7840 CVE-2014-8106 CVE-2015-1779 CVE-2015-3209 CVE-2015-4037 CVE-2015-5154 CVE-2015-5225 CVE-2015-5278 CVE-2015-5279 CVE-2015-5745 CVE-2015-6815 CVE-2015-6855 CVE-2015-7295 CVE-2015-7512 CVE-2015-7549 CVE-2015-8345 CVE-2015-8504 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-1568 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-3710 CVE-2016-6490 CVE-2016-6833 CVE-2016-6888 CVE-2016-7116 CVE-2016-7155 CVE-2016-7161 CVE-2016-9381 CVE-2016-9776 CVE-2016-9845 CVE-2016-9846 CVE-2016-9907 CVE-2016-9908 CVE-2016-9911 CVE-2016-9912 CVE-2016-9913 CVE-2016-9921 CVE-2016-9922- Despite the previous entry about re-enabling ceph on Nov 19, 2016 the change wasn't actually done. Do it now.- sgabios-stable-buildid.patch: Use geeko@buildhost- slof_xhci.patch: XHCI fixes (boo#977027)- Recommend x86 ROMs for emulated PCI cards on ppc, arm, others (bsc#1005869, michals)- Tidy SLOF patch boilerplate (michals)- Build with spice on all archs. (boo#1009438, michals)- Refine the approach to producing stable builds in our ROM based packages. All built roms which have hostname or date calls now produce consistent results build to build via patch changes, so remove the hostname and date call workarounds. (bsc#1011213) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0069-roms-Makefile-pass-a-packaging-time.patch sgabios-stable-buildid.patch- Re-enable ceph (rbd) functionality in OBS builds as we've been told the issues which prompted us to disable it are resolved - Address various security/stability issues * Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516) 0041-vmsvga-correct-bitmap-and-pixmap-si.patch * Fix DOS in LSI SAS1068 emulation (CVE-2016-7157 bsc#997860) 0042-scsi-mptconfig-fix-an-assert-expres.patch 0043-scsi-mptconfig-fix-misuse-of-MPTSAS.patch * Fix DOS in Vmware pv scsi interface (CVE-2016-7156 bsc#997859) 0044-scsi-pvscsi-limit-loop-to-fetch-SG-.patch * Fix DOS in USB xHCI emulation (CVE-2016-7466 bsc#1000345) 0045-usb-xhci-fix-memory-leak-in-usb_xhc.patch * Fix OOB access in LSI SAS1068 emulation (CVE-2016-7423 bsc#1000397) 0046-scsi-mptsas-use-g_new0-to-allocate-.patch * Fix DOS in Vmware pv scsi interface (CVE-2016-7421 bsc#999661) 0047-scsi-pvscsi-limit-process-IO-loop-t.patch * Fix NULL pointer dereference in virtio processing (CVE-2016-7422 bsc#1000346) 0048-virtio-add-check-for-descriptor-s-m.patch * Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908 bsc#1002550) 0049-net-mcf-limit-buffer-descriptor-cou.patch * Fix DOS in USB EHCI emulation (CVE-2016-7995 bsc#1003612) 0050-usb-ehci-fix-memory-leak-in-ehci_pr.patch * Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878) 0051-xhci-limit-the-number-of-link-trbs-.patch * Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894) 0052-9pfs-allocate-space-for-guest-origi.patch * Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494) 0053-9pfs-fix-memory-leak-in-v9fs_link.patch * Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893) 0054-9pfs-fix-potential-host-memory-leak.patch * Plug data leak in virtio-9pfs interface (CVE-2016-9103 bsc#1007454) 0055-9pfs-fix-information-leak-in-xattr-.patch * Fix DOS in virtio-9pfs interface (CVE-2016-9102 bsc#1007450) 0056-9pfs-fix-memory-leak-in-v9fs_xattrc.patch * Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495) 0057-9pfs-fix-memory-leak-in-v9fs_write.patch * Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707) 0058-char-serial-check-divider-value-aga.patch * Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557) 0059-net-pcnet-check-rx-tx-descriptor-ri.patch * Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391) 0060-net-eepro100-fix-memory-leak-in-dev.patch * Fix OOB access in Rocker switch emulation (CVE-2016-8668 bsc#1004706) 0061-net-rocker-set-limit-to-DMA-buffer-.patch * Plug data leak in vmxnet3 emulation (CVE-2016-6836 bsc#994760) 0062-net-vmxnet-initialise-local-tx-desc.patch * Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538) 0063-net-rtl8139-limit-processing-of-rin.patch * Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536) 0064-audio-intel-hda-check-stream-entry-.patch * Fix DOS in virtio-gpu (CVE-2016-7994 bsc#1003613) 0065-virtio-gpu-fix-memory-leak-in-virti.patch * Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493) 0066-9pfs-fix-integer-overflow-issue-in-.patch * Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702) 0067-dma-rc4030-limit-interval-timer-rel.patch * Fix DOS in i.MX NIC emulation (CVE-2016-7907 bsc#1002549) 0068-net-imx-limit-buffer-descriptor-cou.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7- Use fixed timestamps and stable build_id in ipxe and other ROMs * Patches added: ipxe-stable-buildid.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patch updated: 0040-linux-user-skip-0-flag-from-proc-se.patch -> 0040-linux-user-remove-all-traces-of-qem.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0040-linux-user-skip-0-flag-from-proc-se.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0039-Fix-tlb_vaddr_to_host-with-CONFIG_U.patch- Document two new options, but leave jemalloc disabled for now - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches dropped: 0034-build-link-with-libatomic-on-powerp.patch * Patches renamed: 0035-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0034-xen-SUSE-xenlinux-unplug-for-emulat.patch 0036-qemu-bridge-helper-reduce-security-.patch -> 0035-qemu-bridge-helper-reduce-security-.patch 0037-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0036-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0038-configure-Fix-detection-of-seccomp-.patch -> 0037-configure-Fix-detection-of-seccomp-.patch 0039-linux-user-properly-test-for-infini.patch -> 0038-linux-user-properly-test-for-infini.patch- Updated to v2.7.0: See http://wiki.qemu-project.org/ChangeLog/2.7 - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0039-linux-user-properly-test-for-infini.patch- Use new kvm_stat package where available, else provide updated kvm_stat script.- Update to v2.7.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.7- Updated to v2.7.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.7 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches dropped: 0002-qemu-0.9.0.cvs-binfmt.patch (script rewritten upstream) 0009-block-vmdk-Support-creation-of-SCSI.patch (deprecated) 0014-linux-user-Ignore-broken-loop-ioctl.patch (implemented upstream) 0024-linux-user-add-more-blk-ioctls.patch (more implemented upstream) 0034-qtest-Increase-socket-timeout.patch (increased further upstream) 0036-configure-Enable-libseccomp-for-ppc.patch (enabled upstream) 0038-block-split-large-discard-requests-.patch 0041-xen-introduce-dummy-system-device.patch 0042-xen-write-information-about-support.patch 0043-xen-add-pvUSB-backend.patch 0044-xen-move-xen_sysdev-to-xen_backend..patch 0045-vnc-add-configurable-keyboard-delay.patch 0046-configure-add-echo_version-helper.patch 0047-configure-support-vte-2.91.patch 0048-hw-arm-virt-mark-the-PCIe-host-cont.patch 0050-scsi-esp-fix-migration.patch 0051-xen-when-removing-a-backend-don-t-r.patch 0052-xen-drain-submit-queue-in-xen-usb-b.patch 0053-qcow2-avoid-extra-flushes-in-qcow2.patch 0055-xen-use-a-common-function-for-pv-an.patch ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-legacy-Fix-building-with-GCC-6.patch ipxe-util-v5.24-perl-errors-on-redeclare.patch ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch * Patches renamed: 0010-linux-user-add-binfmt-wrapper-for-a.patch -> 0009-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch -> 0010-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch -> 0011-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch -> 0012-linux-user-binfmt-support-host-bina.patch 0015-linux-user-lock-tcg.patch -> 0013-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch -> 0014-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch -> 0015-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch -> 0016-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch -> 0017-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch -> 0018-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch -> 0019-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch -> 0020-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch -> 0021-vnc-password-file-and-incoming-conn.patch 0025-linux-user-use-target_ulong.patch -> 0022-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch -> 0023-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch -> 0024-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0025-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch -> 0026-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch -> 0027-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch -> 0028-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-__u64-f.patch -> 0029-virtfs-proxy-helper-Provide-__u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch -> 0030-configure-Enable-PIE-for-ppc-and-pp.patch 0035-AIO-Reduce-number-of-threads-for-32.patch -> 0031-AIO-Reduce-number-of-threads-for-32.patch 0037-dictzip-Fix-on-big-endian-systems.patch -> 0032-dictzip-Fix-on-big-endian-systems.patch 0039-xen_disk-Add-suse-specific-flush-di.patch -> 0033-xen_disk-Add-suse-specific-flush-di.patch 0040-build-link-with-libatomic-on-powerp.patch -> 0034-build-link-with-libatomic-on-powerp.patch 0049-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0035-xen-SUSE-xenlinux-unplug-for-emulat.patch 0054-qemu-bridge-helper-reduce-security-.patch -> 0036-qemu-bridge-helper-reduce-security-.patch * Patches added: 0002-qemu-binfmt-conf-Modify-default-pat.patch 0037-qemu-binfmt-conf-use-qemu-ARCH-binf.patch * Package renamed trace-events-all file and linuxboot_dma.bin * Handle building and packaging roms for e1000e and vmxnet3 (Bruce) * Remove ipxe patches which are now enabled upstream (Bruce) * Enable seccomp for s390x (Mark Post): 0038-configure-Fix-detection-of-seccomp-.patch- Update to v2.6.1 a stable, bug-fix-only release (fate#316228) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped (upstreamed): 0041-net-mipsnet-check-packet-length-aga.patch 0042-i386-kvmvapic-initialise-imm32-vari.patch 0043-esp-check-command-buffer-length-bef.patch 0044-esp-check-dma-length-before-reading.patch 0045-scsi-pvscsi-check-command-descripto.patch 0046-scsi-mptsas-infinite-loop-while-fet.patch 0047-vga-add-sr_vbe-register-set.patch 0048-scsi-megasas-use-appropriate-proper.patch 0049-scsi-megasas-check-read_queue_head-.patch 0050-scsi-megasas-null-terminate-bios-ve.patch 0051-vmsvga-move-fifo-sanity-checks-to-v.patch 0052-vmsvga-don-t-process-more-than-1024.patch 0053-block-iscsi-avoid-potential-overflo.patch 0054-scsi-esp-check-TI-buffer-index-befo.patch 0060-scsi-megasas-initialise-local-confi.patch 0065-scsi-esp-check-buffer-length-before.patch 0066-scsi-esp-respect-FIFO-invariant-aft.patch 0067-pci-assign-Move-Invalid-ROM-error-m.patch 0068-Xen-PCI-passthrough-fix-passthrough.patch 0069-scsi-esp-make-cmdbuf-big-enough-for.patch 0071-virtio-error-out-if-guest-exceeds-v.patch * Patches renamed: 0055-xen-introduce-dummy-system-device.patch - > 0041-xen-introduce-dummy-system-device.patch 0056-xen-write-information-about-support.patch - > 0042-xen-write-information-about-support.patch 0057-xen-add-pvUSB-backend.patch - > 0043-xen-add-pvUSB-backend.patch 0058-xen-move-xen_sysdev-to-xen_backend..patch - > 0044-xen-move-xen_sysdev-to-xen_backend..patch 0059-vnc-add-configurable-keyboard-delay.patch - > 0045-vnc-add-configurable-keyboard-delay.patch 0061-configure-add-echo_version-helper.patch - > 0046-configure-add-echo_version-helper.patch 0062-configure-support-vte-2.91.patch - > 0047-configure-support-vte-2.91.patch 0063-hw-arm-virt-mark-the-PCIe-host-cont.patch - > 0048-hw-arm-virt-mark-the-PCIe-host-cont.patch 0064-xen-SUSE-xenlinux-unplug-for-emulat.patch - > 0049-xen-SUSE-xenlinux-unplug-for-emulat.patch 0070-scsi-esp-fix-migration.patch - > 0050-scsi-esp-fix-migration.patch 0072-xen-when-removing-a-backend-don-t-r.patch - > 0051-xen-when-removing-a-backend-don-t-r.patch 0073-xen-drain-submit-queue-in-xen-usb-b.patch - > 0052-xen-drain-submit-queue-in-xen-usb-b.patch 0074-qcow2-avoid-extra-flushes-in-qcow2.patch - > 0053-qcow2-avoid-extra-flushes-in-qcow2.patch 0075-qemu-bridge-helper-reduce-security-.patch - > 0054-qemu-bridge-helper-reduce-security-.patch 0076-xen-use-a-common-function-for-pv-an.patch - > 0055-xen-use-a-common-function-for-pv-an.patch- Temporarily disable ceph (rbd) functionality in OBS due to staging issues.- use upstream solution for building xen-usb.c correctly - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped: 0058-usb-Fix-conditions-that-xen-usb.c-i.patch * Patches added: 0058-xen-move-xen_sysdev-to-xen_backend..patch- Incorporate patch carried in Xen's qemu to get same support as Xen switches to use the qemu package (bsc#953339, bsc#953362, bsc#953518, bsc#984981) 0064-xen-SUSE-xenlinux-unplug-for-emulat.patch - Fix more potential OOB accesses in 53C9X emulation (CVE-2016-5238 bsc#982959) 0065-scsi-esp-check-buffer-length-before.patch 0066-scsi-esp-respect-FIFO-invariant-aft.patch - Avoid "Invalid ROM" error message when it is not appropriate (bsc#982927) 0067-pci-assign-Move-Invalid-ROM-error-m.patch - Fix failure in Xen HVM PCI passthrough (bsc#981925, bsc#989250) 0068-Xen-PCI-passthrough-fix-passthrough.patch - Fix OOB access in 53C9X emulation (CVE-2016-6351 bsc#990835) 0069-scsi-esp-make-cmdbuf-big-enough-for.patch 0070-scsi-esp-fix-migration.patch - Avoid potential for guest initiated OOM condition in qemu through virtio interface (CVE-2016-5403 bsc#991080) 0071-virtio-error-out-if-guest-exceeds-v.patch - Fix potential crashes in qemu from pvusb bugs (bsc#986156) 0072-xen-when-removing-a-backend-don-t-r.patch 0073-xen-drain-submit-queue-in-xen-usb-b.patch - Avoid unneeded flushes in qcow2 which impact performance (bsc#991296) 0074-qcow2-avoid-extra-flushes-in-qcow2.patch - Finally get qemu-bridge-helper the permissions it needs for non- root usage. The kvm group is leveraged to control access. (boo#988279) 0075-qemu-bridge-helper-reduce-security-.patch - Fix pvusb not working for HVM guests (bsc#991785) 0076-xen-use-a-common-function-for-pv-an.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 - Minor spec file formatting fixes- Fix ARM PCIe DMA coherency bug (bsc#991034) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches added: 0063-hw-arm-virt-mark-the-PCIe-host-cont.patch- Clean up the udev ifdeffery to cover systemd as well (boo#860275) - Trigger udev rules also under systemd (boo#989655) - Suppress s390x sysctl in chroot - Ignore s390x sysctl failures (agraf)- Build SLOF for SLE12 now that we have gcc fix (bsc#949000) - Add script for loading kvm module on s390x - Enable seccomp and iscsi support in more configurations - Enable more support for virtio-gpu - Fix /dev/kvm permissions problem with package install and no reboot (bnc#867867) - Remove libtool dependency - Disable more aggressive stack protector for performance reasons - Enable vte to be used again in more configurations (bsc#988855) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches added: 0061-configure-add-echo_version-helper.patch 0062-configure-support-vte-2.91.patch- Remove deprecated patch "work-around-SA_RESTART-race" (boo#982208) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped: 0002-XXX-work-around-SA_RESTART-race-wit.patch 0003-qemu-0.9.0.cvs-binfmt.patch 0004-qemu-cvs-alsa_bitfield.patch 0005-qemu-cvs-alsa_ioctl.patch 0006-qemu-cvs-alsa_mmap.patch 0007-qemu-cvs-gettimeofday.patch 0008-qemu-cvs-ioctl_debug.patch 0009-qemu-cvs-ioctl_nodirection.patch 0010-block-vmdk-Support-creation-of-SCSI.patch 0011-linux-user-add-binfmt-wrapper-for-a.patch 0012-PPC-KVM-Disable-mmu-notifier-check.patch 0013-linux-user-fix-segfault-deadlock.patch 0014-linux-user-binfmt-support-host-bina.patch 0015-linux-user-Ignore-broken-loop-ioctl.patch 0016-linux-user-lock-tcg.patch 0017-linux-user-Run-multi-threaded-code-.patch 0018-linux-user-lock-tb-flushing-too.patch 0019-linux-user-Fake-proc-cpuinfo.patch 0020-linux-user-implement-FS_IOC_GETFLAG.patch 0021-linux-user-implement-FS_IOC_SETFLAG.patch 0022-linux-user-XXX-disable-fiemap.patch 0023-slirp-nooutgoing.patch 0024-vnc-password-file-and-incoming-conn.patch 0025-linux-user-add-more-blk-ioctls.patch 0026-linux-user-use-target_ulong.patch 0027-block-Add-support-for-DictZip-enabl.patch 0028-block-Add-tar-container-format.patch 0029-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0030-console-add-question-mark-escape-op.patch 0031-Make-char-muxer-more-robust-wrt-sma.patch 0032-linux-user-lseek-explicitly-cast-no.patch 0033-virtfs-proxy-helper-Provide-__u64-f.patch 0034-configure-Enable-PIE-for-ppc-and-pp.patch 0035-qtest-Increase-socket-timeout.patch 0036-AIO-Reduce-number-of-threads-for-32.patch 0037-configure-Enable-libseccomp-for-ppc.patch 0038-dictzip-Fix-on-big-endian-systems.patch 0039-block-split-large-discard-requests-.patch 0040-xen_disk-Add-suse-specific-flush-di.patch 0041-build-link-with-libatomic-on-powerp.patch 0042-net-mipsnet-check-packet-length-aga.patch 0043-i386-kvmvapic-initialise-imm32-vari.patch 0044-esp-check-command-buffer-length-bef.patch 0045-esp-check-dma-length-before-reading.patch 0046-scsi-pvscsi-check-command-descripto.patch 0047-scsi-mptsas-infinite-loop-while-fet.patch 0048-vga-add-sr_vbe-register-set.patch 0049-scsi-megasas-use-appropriate-proper.patch 0050-scsi-megasas-check-read_queue_head-.patch 0051-scsi-megasas-null-terminate-bios-ve.patch 0052-vmsvga-move-fifo-sanity-checks-to-v.patch 0053-vmsvga-don-t-process-more-than-1024.patch 0054-block-iscsi-avoid-potential-overflo.patch 0055-scsi-esp-check-TI-buffer-index-befo.patch 0056-xen-introduce-dummy-system-device.patch 0057-xen-write-information-about-support.patch 0058-xen-add-pvUSB-backend.patch 0059-usb-Fix-conditions-that-xen-usb.c-i.patch 0060-vnc-add-configurable-keyboard-delay.patch 0061-scsi-megasas-initialise-local-confi.patch * Patches added: 0002-qemu-0.9.0.cvs-binfmt.patch 0003-qemu-cvs-alsa_bitfield.patch 0004-qemu-cvs-alsa_ioctl.patch 0005-qemu-cvs-alsa_mmap.patch 0006-qemu-cvs-gettimeofday.patch 0007-qemu-cvs-ioctl_debug.patch 0008-qemu-cvs-ioctl_nodirection.patch 0009-block-vmdk-Support-creation-of-SCSI.patch 0010-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch 0014-linux-user-Ignore-broken-loop-ioctl.patch 0015-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch 0024-linux-user-add-more-blk-ioctls.patch 0025-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-__u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch 0034-qtest-Increase-socket-timeout.patch 0035-AIO-Reduce-number-of-threads-for-32.patch 0036-configure-Enable-libseccomp-for-ppc.patch 0037-dictzip-Fix-on-big-endian-systems.patch 0038-block-split-large-discard-requests-.patch 0039-xen_disk-Add-suse-specific-flush-di.patch 0040-build-link-with-libatomic-on-powerp.patch 0041-net-mipsnet-check-packet-length-aga.patch 0042-i386-kvmvapic-initialise-imm32-vari.patch 0043-esp-check-command-buffer-length-bef.patch 0044-esp-check-dma-length-before-reading.patch 0045-scsi-pvscsi-check-command-descripto.patch 0046-scsi-mptsas-infinite-loop-while-fet.patch 0047-vga-add-sr_vbe-register-set.patch 0048-scsi-megasas-use-appropriate-proper.patch 0049-scsi-megasas-check-read_queue_head-.patch 0050-scsi-megasas-null-terminate-bios-ve.patch 0051-vmsvga-move-fifo-sanity-checks-to-v.patch 0052-vmsvga-don-t-process-more-than-1024.patch 0053-block-iscsi-avoid-potential-overflo.patch 0054-scsi-esp-check-TI-buffer-index-befo.patch 0055-xen-introduce-dummy-system-device.patch 0056-xen-write-information-about-support.patch 0057-xen-add-pvUSB-backend.patch 0058-usb-Fix-conditions-that-xen-usb.c-i.patch 0059-vnc-add-configurable-keyboard-delay.patch 0060-scsi-megasas-initialise-local-confi.patch - Enable ceph (rbd) support for aarch64- Enable ceph (rbd) support- Fix OVMF iPXE network menu (bsc#986033, boo#987488) ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch- Fix host information leak to guest in MegaRAID SAS 8708EM2 Host Bus AdapterMegaRAID SAS 8708EM2 Host Bus Adapter emulation support (CVE-2016-5105 bsc#982017) * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 0061-scsi-megasas-initialise-local-confi.patch- Address various security/stability issues * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Fix OOB access in megasas emulated device (CVE-2016-5106 bsc#982018) 0049-scsi-megasas-use-appropriate-proper.patch * Fix OOB access in megasas emulated device (CVE-2016-5107 bsc#982019) 0050-scsi-megasas-check-read_queue_head-.patch * Fix OOB access in megasas emulated device (CVE-2016-5337 bsc#983961) 0051-scsi-megasas-null-terminate-bios-ve.patch * Correct the vmvga fifo access checks (CVE-2016-4454 bsc#982222) 0052-vmsvga-move-fifo-sanity-checks-to-v.patch * Fix potential DoS issue in vmvga processing (CVE-2016-4453 bsc#982223) 0053-vmsvga-don-t-process-more-than-1024.patch * Fix heap buffer overflow flaw when iscsi protocol is used (CVE-2016-5126 bsc#982285) 0054-block-iscsi-avoid-potential-overflo.patch * Fix OOB access in 53C9X emulation (CVE-2016-5338 bsc#983982) 0055-scsi-esp-check-TI-buffer-index-befo.patch - Add support to qemu for pv-usb under Xen (fate#316612) 0056-xen-introduce-dummy-system-device.patch 0057-xen-write-information-about-support.patch 0058-xen-add-pvUSB-backend.patch 0059-usb-Fix-conditions-that-xen-usb.c-i.patch - Provide ability to rate limit keyboard events from the vnc server. This is part of the solution to an issue affecting openQA testing, where characters are lost, resulting in unexpected failures (bsc#974914) 0060-vnc-add-configurable-keyboard-delay.patch- Adjust to parallel changes in virglrenderer packages - no longer "BuildRequires" virglrenderer directly, just the devel package.- Fix build compatibility with gcc6 wrt ipxe rom where compiler warnings are treated as errors. ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-legacy-Fix-building-with-GCC-6.patch - Fix ipxe build script which fails under perl v5.24 ipxe-util-v5.24-perl-errors-on-redeclare.patch - Specify build time disk space requirements for ppc64 and ppc64le- Add sysctl script and %post on s390x to allow kvm usage (bsc#975331)- Address various security/stability issues * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Fix OOB access in MIPSnet emulated controller CVE-2016-4002 (bsc#975136) 0042-net-mipsnet-check-packet-length-aga.patch * Fix possible host data leakage to guest from TPR access CVE-2016-4020 (bsc#975700) 0043-i386-kvmvapic-initialise-imm32-vari.patch * Avoid OOB access in 53C9X emulation CVE-2016-4439 (bsc#980711) 0044-esp-check-command-buffer-length-bef.patch * Avoid OOB access in 53C9X emulation CVE-2016-4441 (bsc#980723) 0045-esp-check-dma-length-before-reading.patch * Avoid OOB access in Vmware PV SCSI emulation CVE-2016-4952 (bsc#981266) 0046-scsi-pvscsi-check-command-descripto.patch * Avoid potential DoS in LSI SAS1068 emulation CVE-2016-4964 (bsc#981399) 0047-scsi-mptsas-infinite-loop-while-fet.patch * Fix regression in vga behavior - introduced in v2.6.0 CVE-2016-3712 (bsc#978160) 0048-vga-add-sr_vbe-register-set.patch- Update to v2.6.0: See http://wiki.qemu-project.org/ChangeLog/2.6 - Enable SDL2, virglrenderer (for use with virtio-gpu), xfsctl, and tracing using default log backend - Build efi pxe roms on x86_64- Check modules for conflicting release versions - Suggest recently added block modules- Bump copyright in qemu.spec.in - Enable libiscsi for Factory - Enable seccomp for ppc64le as well- Update to v2.6.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.6 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped (upstreamed): 0041-tests-Use-correct-config-param-for-.patch * Patches renamed: 0042-build-link-with-libatomic-on-powerp.patch -> 0041-build-link-with-libatomic-on-powerp.patch- Partially revert the last change's cleanup - Indicate SUSE version- Update to v2.6.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.6 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Accept every size in DISCARD request from a guest (bsc#964427) 0039-block-split-large-discard-requests-.patch * Recognize libxl flag to disable flush in block device (bsc#879425) 0040-xen_disk-Add-suse-specific-flush-di.patch * Use correct flag for crypto tests 0041-tests-Use-correct-config-param-for-.patch * Fix build on powerpc: 0042-build-link-with-libatomic-on-powerp.patch * Patches dropped (upstreamed): seabios_checkrom_typo.patch seabios_avoid_smbios_signature_string.patch- Disable vte for Leap, fixing build- Don't drop u-boot.e500 yet - breaks testsuite- Re-enable libcacard support - Clean up configured features- Clean up qemu-tools libcacard Provides/Obsoletes - separate again - Drop u-boot.e500 - being packaged as u-boot-ppce500- Update to v2.5.0: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Patches dropped (upstreamed): 0039-tests-Fix-check-report-qtest-target.patch- Fix build on openSUSE 13.2- Fix testsuite on 32bit systems (bsc#957379)- Update to v2.5.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Rebase libseccomp enablement: 0037-Revert-Revert-seccomp-tests-that-al.patch -> 0037-configure-Enable-libseccomp-for-ppc.patch * Provide qemu-ga and qemu-ipxe for qemu-testsuite - Clean up qemu-ksm recommendation- Fix SLE11 build by fixing systemd conditionalization (from olh)- Update to v2.5.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Patches dropped (upstream): 0038-tcg-aarch64-Fix-tcg_out_qemu_-ld-st.patch 0039-tests-Unique-test-path-for-string-v.patch gcc5-ipxe-add-missing-const-qualifiers.patch gcc5-ipxe-ath9k-Remove-confusing-logic-inversion-in-an-ANI-var.patch SLOF_ppc64le.patch * Patch renamed: 0040-dictzip-Fix-on-big-endian-systems.patch -> 0038-dictzip-Fix-on-big-endian-systems.patch * --enable-smartcard-nss -> --enable-smartcard Needs an external libcacard, so drop it for now. * Drop --enable-vnc-tls * Require xz-devel for ipxe build * Package qemu-ga(8) man page * Package ivshmem-{client,server} * Patches added: 0039-tests-Fix-check-report-qtest-target.patch- Add systemd unit file and udev rules for qemu guest agent - taken from the SLE12 / Leap package, see boo#955707- Add _constraints file (based on work by kenljohnson)- Enable SLOF build for ppc64le, too, now (bsc#949000, bsc#949016)- Allow building SLOF on ppc64le (bsc#949016) SLOF_ppc64le.patch - Add two checks for DictZip and tar qemu-img behavior (bsc#945778) * Clean up qemu-testsuite build/installation- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix endianness issues in DictZip block driver (bsc#937572, bsc#945778) 0027-block-Add-support-for-DictZip-enabl.patch 0028-block-Add-tar-container-format.patch 0040-dictzip-Fix-on-big-endian-systems.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix qemu-testsuite for glib2-2.46.0 by assuring uniqueness of paths 0039-tests-Unique-test-path-for-string-v.patch- Build SLOF on ppc64 (bsc#949016, thanks to k0da) * Simplify x86 fw logic while at it - No need to enable KVM for armv6hl - Add notice about pre_checkin.sh to update_git.sh- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix aarch64 TCG: 0038-tcg-aarch64-Fix-tcg_out_qemu_-ld-st.patch- Update to v2.4.0: See http://wiki.qemu-project.org/ChangeLog/2.4- Update to v2.4.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.4 * Provide qemu-img symlink instead of passing QTEST_QEMU_IMG- Update to v2.4.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.4 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Patches dropped: 0037-linux-user-Allocate-thunk-size-dyna.patch 0039-s390x-Fix-stoc-direction.patch 0040-s390x-Add-interlocked-access-facili.patch 0041-fdc-force-the-fifo-access-to-be-in-.patch 0042-rules.mak-Force-CFLAGS-for-all-obje.patch 0043-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch 0044-hw-arm-boot-Increase-fdt-alignment.patch * Patches renamed: 0038-Revert-Revert-seccomp-tests-that-al.patch -> 0037-Revert-Revert-seccomp-tests-that-al.patch * Package new vgabios-virtio.bin * target-x86_64.conf was dropped * Add qemu-block-dmg module sub-package * Set QTEST_QEMU_IMG variable for ahci-test * --enable-quorum and --enable-vnc-ws are no longer available- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix -kernel boot for AArch64 * Patches added: 0044-hw-arm-boot-Increase-fdt-alignment.patch- Use libusb-1_0-devel as buildrequires, not the old unused compatibility layer in libusb-devel- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix qemu2 cow caching (bsc#933132) * Patches added: 0043-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch- Patch queue updated from git://github.com/jirislaby/qemu.git opensuse-2.3 * Patches added: 0042-rules.mak-Force-CFLAGS-for-all-obje.patch gcc5-ipxe-add-missing-const-qualifiers.patch gcc5-ipxe-ath9k-Remove-confusing-logic-inversion-in-an-ANI-var.patch- Fix CVE-2015-3456 (boo#929339) 0041-fdc-force-the-fifo-access-to-be-in-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches added: 0040-s390x-Add-interlocked-access-facili.patch - Disable dependency on libnuma for s390x (not available in SLE12)- Update to v2.3.0: See http://wiki.qemu-project.org/ChangeLog/2.3 - Disable iotests for now- Update to v2.3.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.3- Update seabios_avoid_smbios_signature_string.patch with version applied upstream- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix s390x stoc instructions 0039-s390x-Fix-stoc-direction.patch- Update to v2.3.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (applied upstream): 0037-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch * Patches renamed: 0038-linux-user-Allocate-thunk-size-dyna.patch -> 0037-linux-user-Allocate-thunk-size-dyna.patch * Revert -rc3 change to disable seccomp on non-x86 architectures 0038-Revert-Revert-seccomp-tests-that-al.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix qemu-linux-user on powerpc * Patches added: 0038-linux-user-Allocate-thunk-size-dyna.patch- Split off qemu-testsuite.spec * Package check-report.html and check-report.xml * Enable quick iotests - Dropped 0030-net-Warn-about-default-MAC-address.patch The warning is relevant only for bridged setups, not for the default SLIRP based -net user / -netdev user setup, and it breaks output expectations of some iotests. * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches renamed: 0031-console-add-question-mark-escape-op.patch -> 0030-console-add-question-mark-escape-op.patch 0032-Make-char-muxer-more-robust-wrt-sma.patch -> 0031-Make-char-muxer-more-robust-wrt-sma.patch 0033-linux-user-lseek-explicitly-cast-no.patch -> 0032-linux-user-lseek-explicitly-cast-no.patch 0034-virtfs-proxy-helper-Provide-__u64-f.patch -> 0033-virtfs-proxy-helper-Provide-__u64-f.patch 0035-configure-Enable-PIE-for-ppc-and-pp.patch -> 0034-configure-Enable-PIE-for-ppc-and-pp.patch 0036-qtest-Increase-socket-timeout.patch -> 0035-qtest-Increase-socket-timeout.patch 0037-AIO-Reduce-number-of-threads-for-32.patch -> 0036-AIO-Reduce-number-of-threads-for-32.patch 0038-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch -> 0037-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch - Re-enable glusterfs on Factory (updated from v3.6.1 to v3.6.2) - Re-enable seccomp for armv7l (libseccomp submission pending)- Suppress seccomp for Factory armv7l (broken in libseccomp v2.2.0) - Disable glusterfs explicitly on Factory, SLE12 and before 13.1- Enable glusterfs and package as qemu-block-gluster glusterfs post-v3.5.3 and v3.6.1/v3.6.2 have switched the glusterfs-api.pc version incompatibly, so only 13.1+13.2 for now - Use macro for module Conflicts- Tidy configure options: * Move --enable-modules to build options * Sort libusb alphabetically * Explicitly enable attr, bluez, fdt, lzo, tpm, vhdx, vhost-net, vnc, xen-pci-passthrough * Enable bzip2 * Enable libssh2 where possible and package as qemu-block-ssh * Enable numa where a compatible numactl is available * Enable quorum where a compatible gnutls is available * Enable snappy where possible * Prepare to enable glusterfs * Explicitly enable the nop tracing backend (to be revisited) * Explicitly disable Archipelago, as we don't have libxseg and it's incompatibly GPL-3.0+ * Explicitly disable libiscsi, libnfs, netmap and rbd as we don't have packages * Drop deprecated --enable-virtio-blk-data-plane (now default)- Fix 64-bit TCG stores on 32-bit Big Endian hosts (ppc) 0038-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3- Update to v2.3.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (upstreamed): 0038-fw_cfg-test-Fix-test-path-to-includ.patch 0039-rcu-tests-fix-compilation-on-32-bit.patch- make check was failing due to a bogus SMBIOS signature being encountered within SeaBIOS. Avoid having that signature stored randomly within the SeaBIOS image. * seabios_avoid_smbios_signature_string.patch- Build x86 firmware only from 13.1 on (11.4 was broken, surpassing 128 KB) - Update to v2.3.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (upstreamed): 0038-linux-user-Fix-emulation-of-splice-.patch 0039-ide-fix-cmd_write_pio-when-nsectors.patch 0040-ide-fix-cmd_read_pio-when-nsectors-.patch 0041-ahci-Fix-sglist-offset-manipulation.patch 0042-ahci-test-improve-rw-buffer-pattern.patch 0045-linux-user-fix-broken-cpu_copy.patch * Patches renamed: 0043-fw_cfg-test-Fix-test-path-to-includ.patch -> 0038-fw_cfg-test-Fix-test-path-to-includ.patch 0044-rcu-tests-fix-compilation-on-32-bit.patch -> 0039-rcu-tests-fix-compilation-on-32-bit.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches added: 0045-linux-user-fix-broken-cpu_copy.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Make test path for fw_cfg-test unique (including architecture) 0043-fw_cfg-test-Fix-test-path-to-includ.patch * Fix rcu tests build on ppc (undefined reference to `__sync_fetch_and_add_8') 0044-rcu-tests-fix-compilation-on-32-bit.patch - Fix typo in SeaBIOS size check seabios_checkrom_typo.patch- Update to v2.3.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.3 * Updated update_git.sh accordingly * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * seabios_128kb.patch: Added patch to squeeze SeaBIOS into 128 KB with our gcc 4.8.3 (brogers@suse.com) - Renamed 0030-Legacy-Patch-kvm-qemu-preXX-report-.patch to 0030-net-Warn-about-default-MAC-address.patch: Suppress warning for accel=qtest, to sanitize make check results. - Added patches to fix ahci-test: 0039-ide-fix-cmd_write_pio-when-nsectors.patch 0040-ide-fix-cmd_read_pio-when-nsectors-.patch 0041-ahci-Fix-sglist-offset-manipulation.patch 0042-ahci-test-improve-rw-buffer-pattern.patch- Update company name in spec file templates - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches added: 0038-linux-user-Fix-emulation-of-splice-.patch- Add user kvm when installing guest-agent. - Use macro to update udev_rules when available- Fix packaging of e500 U-Boot - Don't rely on wildcard with explicit excludes- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches added: 0037-AIO-Reduce-number-of-threads-for-32.patch- Update to v2.2.0: See http://wiki.qemu-project.org/ChangeLog/2.2 * Updated DictZip and Tar block backends accordingly - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches dropped: 0015-target-arm-linux-user-no-tb_flush-o.patch (tb_flush() not called) 0037-tests-Don-t-run-qom-test-twice.patch (superseded) 0039-linux-user-Cast-validity-checks-on-.patch (helper function introduced) 0040-linux-user-Convert-blkpg-to-use-a-s.patch (upstreamed) * Patched renumbered: 0016-linux-user-Ignore-broken-loop-ioctl.patch -> 0015-linux-user-Ignore-broken-loop-ioctl.patch 0017-linux-user-lock-tcg.patch -> 0016-linux-user-lock-tcg.patch 0018-linux-user-Run-multi-threaded-code-.patch -> 0017-linux-user-Run-multi-threaded-code-.patch 0019-linux-user-lock-tb-flushing-too.patch -> 0018-linux-user-lock-tb-flushing-too.patch 0020-linux-user-Fake-proc-cpuinfo.patch -> 0019-linux-user-Fake-proc-cpuinfo.patch 0021-linux-user-implement-FS_IOC_GETFLAG.patch -> 0020-linux-user-implement-FS_IOC_GETFLAG.patch 0022-linux-user-implement-FS_IOC_SETFLAG.patch -> 0021-linux-user-implement-FS_IOC_SETFLAG.patch 0023-linux-user-XXX-disable-fiemap.patch -> 0022-linux-user-XXX-disable-fiemap.patch 0024-slirp-nooutgoing.patch -> 0023-slirp-nooutgoing.patch 0025-vnc-password-file-and-incoming-conn.patch -> 0024-vnc-password-file-and-incoming-conn.patch 0026-linux-user-add-more-blk-ioctls.patch -> 0025-linux-user-add-more-blk-ioctls.patch 0027-linux-user-use-target_ulong.patch -> 0026-linux-user-use-target_ulong.patch 0028-block-Add-support-for-DictZip-enabl.patch -> 0027-block-Add-support-for-DictZip-enabl.patch 0029-block-Add-tar-container-format.patch -> 0028-block-Add-tar-container-format.patch 0030-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0029-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0031-Legacy-Patch-kvm-qemu-preXX-report-.patch -> 0030-Legacy-Patch-kvm-qemu-preXX-report-.patch 0032-console-add-question-mark-escape-op.patch -> 0031-console-add-question-mark-escape-op.patch 0033-Make-char-muxer-more-robust-wrt-sma.patch -> 0032-Make-char-muxer-more-robust-wrt-sma.patch 0034-linux-user-lseek-explicitly-cast-no.patch -> 0033-linux-user-lseek-explicitly-cast-no.patch 0035-virtfs-proxy-helper-Provide-__u64-f.patch -> 0034-virtfs-proxy-helper-Provide-__u64-f.patch 0036-configure-Enable-PIE-for-ppc-and-pp.patch -> 0035-configure-Enable-PIE-for-ppc-and-pp.patch 0038-qtest-Increase-socket-timeout.patch -> 0036-qtest-Increase-socket-timeout.patch/bin/sh/bin/shh01-ch4c 17012463716.2.0-150400.37.26.1skiboot.lidqemuforsplits06skiboot.lidskiboot.lid.qemu/etc/alternatives//usr/share//usr/share/qemu//usr/share/qemu/forsplits/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31644/SUSE_SLE-15-SP4_Update/04733c0940ba81a05272c34526854e0d-qemu.SUSE_SLE-15-SP4_Updatecpioxz5x86_64-suse-linuxcannot open `/home/abuild/rpmbuild/BUILDROOT/qemu-6.2.0-150400.37.26.1.x86_64/etc/alternatives/skiboot.lid' (No such file or directory)directory * T YD&utf-8a92fa195c288a1cbf019ff6763c4701f535e149e48f5eff2cec400aae2517e5f?7zXZ !t/b] cNŽ,Be.W.{5NN|gy/%w̗?/!: OҊÆmqWoNfx3 -y>nL_ h6x_TaS%'VŢFp}y* pH&C@TqiDH>Cl2к2! >᚝y\3AWLrH8T˨٢`^́ʘLËW+o!Y4n# = Mи ֓ҫpʟ C{Q IߪQc@|)+IpWq74 i'Iz.A˝LVzB(瀭^ov:_oX5|J9bBnQm;'Kenl֫f<.WQ<aŨ.:~D@5E5uI X'PT# E&Ř+*8g$Y}ErO`,?i NP{УMt8;s5Н^toeW0  lئtm<>`Fs+y%$B}O?ep*dHKRJ [5)/7pofyѹ.>!B=d-;:"~kKZ'*%KXh3I6oju%y!='ȇ"A^˔[/`/wCݒ#= Prh<`dHd ς&z^L7i7hž%Fi{=,M|-{]8,XVNsS߲> MceeCx~_A=ASś:ҵAS><{Q8@zC'3Jџ1γ-)PGX i/]?EGxErkƥ{@LJFJIgJ Vf:~r+|n@z;J;I4ZZ[J6+YE>{ǧr7 &ռX8e+jZف|ט0fEի躴E7֠gcGdv^feҦ=k\L|l3i$X ߴ Ke6o5 &*3P\!hȍ7pY>fY"ql N0U{kl72_ 2%nhߋ%;  bkx-HR3r+c}R`[Fe|rnZA8)NHǵ"HJ2@ ~i24A)3E}+P\urUl/9B,oL gMg@f||ҁ_jEz>Yzct3o.Q!OU~*X$< KST ިkӢ<́&`sՙVk-5CAw ^aťo҂ۀ!MLQ,9x+`g]I]<{՜a<(g1C{*\FF't@ SQsME$LsUA'd Pu͟Z>hDs)cƱagt$nPYKT墹p`2dcvUg-Siu>LZ$ "d["sv*NPZ>. #c  f@Z$X%yBEPI#ra":Mt$C (Sjme ڧ9 s_&V,d K) Ul_~FIYvΙ+Ř(;2!KW(! %zg?-& e4ϯP,tCͣI"kp0qh~` Lb8ȾKe !VQ hJ:mꣃ@TZHڇTPw=uiQTM+wkޅ_yY1oyYfi.}9VssP)CLҀ!t QYrp}n\~*G](11,,- q-AAuK $R]y3`u#4[A5$E}$۫:~$gI|ܾխ><>(E1h˲8t+9]esw{ QF975g=-7= ^yzq~'(g-[]EQSvcm0uPGn"!кKkY7=8,6!Z9Ɛ==)P^B'Ǽ۩[u5jNGL;o5 Ai^FdU#G3Hm=V 6@69$j0D~E蝋Τ5wGe_e˒bdZgha\< LYgiU k6 ܪ*zf7$dhrf$&l7d%vCϋi,[ԝiFlĶv+y~槁d%FJiGՂN$f(~GmҟvGnHZ 0FxL|S;!Б?ÓXNOɍ6TZ_} gnjD_x h| m#ꆃ17D:"Xq3wA(I Q okoѣ8Q+1̪٘ /я=r]qu_-s{s` lAH?,O<(1}ᘵ%x4"@dSWbAN1v&IxIOò)|ȲEc>RW*qb^xmy,BͪjӺ2'IhĨOM-J}40ًȳh[^f ׌E N|h 51HX)O8Vs< k#uzm\ IPt Z3j[)@ )SQF,ƸgW Lg~}^c"("A_^btѸ\@c)2/iwk~2ȝ#Z!#:ry\Px T֑DJKi%Eipew7-TzCg) hPwdۿtK=>vSsgr.q_9W˭Qnwq**(A4+0GɎP LD8 cO4 |+a@g;;`0~g$VIF7q󊿏qfv{]ʈ]wcҖ+>0XJ5 鐰Xv#`iZbJTNeMHKF1*)8uS'z/rNMF?OKkBM,hKC7a}_L H$:p9 f icͭ/kb-_Sg8JT<+նY`_k i [guTIFg>Qn}[BFP`╮wH8A8k_ni#6x3uxgՈ;`,?{1RY†O쵴aىG%O]7d"*Jh%H9qK?QGԏ˘λR ^X@Զ] NI|\i0s=\p[Q,,$'W:NIvPEα!tndwIذF#n&:լ>v4$W' 릈ק&w')b @MI}ic{' IɄ1s \vslPi >w?|h F#ID-W04A샘WAsu6 z~oa bP&Az &NN{ BV}ʴgCY4Px;~fsF~ypmnlN % ÙB}.n$6uh H(̉k*]+ YD̦J9~FA hOo@ը[b4J+54)>EW J#* L3X.S~=?kȁdV@p zяo=ޯ+hs,x+b"l+Oŀ"B؛;j"G&,CBxn{\l xIJ֥0iM+#0e.]]TGP~>~g,m*?X~Ra'TzdpB-R/1t(r!'Y72wwPT)zm/ t|RZ%_ t3 ph}B>CJ(+͍ ik\!xʕ*32nY}[vĐ_7s<0^WHD ]#UlV]ʭ %dn"b!Udn7!B@-I?J نC2um* ݌AAgݜ77^B@ -$yzޜk?.ldA,ƃR sA$i ^ʡ5 sQ|,vc ,0hZC2x{xey-:`'uab7 =SV XIgDXzZG(Ȑ=ԕu|CgBw{NPhTZs9uk 4"/ys=Gz^spQr=:1=Ƚ7RZ`NA1u}|C[$<~ tڶbl q_#I yqnPᩴ]=Ɲsazΰ%4lB.7D~3y~|\n @Œ$0KH<-1WěΔq $3@Wyp>S=7ʊ\B/ p@cuOOvBq)tGi_#6N䜦<og0Fۀ E%WrUx`Jyf˽wiU8ǚ}t#u+-@8cKnjDa1.е(^~_aY]JC_"/V]\zdjNfӏ@+S>6t[YnF}:eW/s@d,lL2\ݗ᧴eݨ͢s?tuƔL6} IlRN7QVi(jyEd36ZO߰B% |5M[kTqLV[/U .Ln*?wAJʒ89lق_(6( /~l 3oEQc&FlDXx!2"WߠS$x9υK~ 7gž}vs;fqk+nhRˏ>ۘҥ*t݋߂;,Rwr&K N0\Tm^;kp1'뻔}xﲘu77o^qCy`ǰY,v5 Uԗx&  ]m n̯XSj9vACsOuNxbhr۶%A3qH&;XOpW>=u,dIiF+:]£ugX<2Yv湗HY7=`4tj.6BMǟHEGkTH.pݮwuC4K扁 mhYźzAc^vBDKCoW7CsռYG G5˴5U^M:(ȟ$ T浱/߁8OƲ>^q,a8haQ7Ԙ<SۮvkRI>kEJK9kIk@^)@ W;FqJ)nht) 5bS賞A 1zWWDQND! {G{`#Hu_|-F0˾zL6:QuOvJ4~8i3 QKKB{&+b1K]|iά' ޿H积%S=|n V{;|9T*mKsB:@`:f:3 t+7kA0ɹNia]|OHu+"ȷp{ћh3w4fIklj(i/[1k<rMmjMU3PE7*5߽މ bK/8iQ[J.=Pa`8pp^0pw_y/|z~]LP~FcU7mmq`#7gh.Gy4Kª$0zq=ycX`S*-VGHe↪:Qɦ]eD@ Cv>e$|gR\7gKyO !-.Œ bJe=P(Q^ЉS}1/mI6G4MSO So .uiF7y6{Qŭ`9=+{etQ ƊvDa{"T!&/CeBj}{L6<11"AQy݊/{ƟuIʨP\\3Gӑ}DrɾoIM:ē%5Џ.u _[nV]M2lB8vd{J2Եe=${Pl!KjxrMY6דM۸(28נL@ gԡz#K D/_I:IK%v' ub3k1@KME9ݭ_@ yjq;|P+8E[1Ǧ!UUD.häqD=V{4UT;Sc悲R!(Wͩ+(7|'wMRqHK,wz>J3-v {Euiˮ9OXo\_ Μ?iZ5k+yIg{C v󠉶.Qk`[vͧ&1y/Yk;^RcevhCJ @2u \MKG߰yKh6*}b}W (XNOYy=FA͌w}~_teL) :ʊ+4r'ٿGD@\:[AeL.SCW4fk9X/!|91`l)"{Vc -<нGv}n/=\漝T!0tO : sm8͢RkuϻIKa7t_^'d]2UM3V=3V3(!'W hD䷾g"qN*ɤo䦈KEN.FoA['E8kLL4tb&.;:1!^ Іi;6,dϭS^bjA(![~kGAHԮI$,f^mbM+0qj,̎0W) AƆDZ#|xNѦ"98 =W?-Nt0i),x$0y߰P͓7M¬+rd7Gj8 |!T uDH?`G/Hqw@iƽG"fUНop5Lud|#q5" eE֏MsŲ$cʎcg(y5pW!>kc-zz_lRJk6ݜ+`=PuNDc &&7BY(v@L 溆` |f|hx47 z=+`'u3ksvP|Fpqt9-C]| h%nGks_V7^_@Dki)b {7Fsze . 5x!FN 0 cH2rf$0@5M3.~I#ے~&- OSR;_tB_-Xz[h Mwc25 3XfSvEtӝ"ѓ'"]^ܴI\qr?I#vZ3AD:)jؠr1ώYZbi1DN,t u]n.5G=)0كƂ Rr.$y^b%5=Th Jr UШ(nvb#9.c{7zH9дyRTWmV0{8}-R~&flR ooа} xX^?'mѱ.}2eT7'j_Gyht1YXE5v{9qo}F3( oM7C2B\V,;E- h}^t1sLD]&(IQ%89ˆSrRoi>ɢm}y'A2eEn-^fgPص^Iᷯ|j!=45yySz&*50y$o0'6KlkWI轭[ GWSϊ4heIݍفCUx&yd-lzDyÂupy t":'c4Pn,\R(쌮E51 F2-=Ny50 GΛ_djnmn@rIKL~C6s4I DTYzZ)F^'"6!Hu$,+LFpdHcBT\^H{4A<K(篏j̠Vc^@Ţ4Gm U.r+HQ:C~z`;t0}40&tl:$AÇxrӟ]G:&h,?q>aާ~/gl,[GSN ߷s5Y18﫽FQ<$RzߏǑ`إli ;L-k߈ KoZr3jQR] (f{"#KY>Dzчh֦o~[~F(h}U3}jVZ{͝# CQjBrGTfYޒU`3!;p.Υ^)!7 0XUag Rru_mi<%JԢ{eBsdtnJGuWJ vB2*89VH7c/FhH~Ŝ6)E˷1AbC.ǻ-]~U(^^J%@ wN8iMؔl*Uyf>4O`I0SBWt*Kchg=cW7q]Iŏ4!:<2 \ -!-'8[(u;05]v^¶@!Ȩu$)pÕHȿO{#E%^^4>Z& dbbϡ[|y\(̧2 GswDy G Va\A \.9|e5@~`dɿ.mnЍ@J5T,;~<صBT W@ ZngG0΢dnQ7s!œ#7v e f5$M$3e߇cy0N8q^r|#F3Uѝ{ ;xW,B/QSbzc&L_ )=Я]'Y13}&DdRʃ{W d;Cw/bR"x}?'Q-?g[Ng|DŲ&ɨ}29P%B;xe'#E>]Ȁ$ qֆc ?w6Gk2DH kXz>~ZtOW}3R؇<(D^3hx+JttNP~_7~0_`w0O%*l[u>" R0k'L~G_) qD])ny H=?'Ap2-uW(M5t"yLv3/O[qrg)$^ab/˼;J8HC<&M4%PN4Db:\؟~ȣE*+XHwG_[--rC̋r]x:B!ng3k$-ܶ^ ѡݩΝ^ýwL } ztAё\h6[PjQ[iܶ9S,Ssyӿlo᮶9[$pJoSjLߙ^0R%.E#Qg~{9LWh ~ n:QK?zF %8EjprݝOȿrx,hoXD*^r>ZrV |yWæU]eĉ~*ҏmN𧆥o&yH ?0n!K2jǑ4ئ peO^n XdFfw܍~wڗXIh)N=88O ܮKGpG'a >2cK d$$iY8)qP<(K%~UmȊ\&m]dtȎ,zj?L(!7!Vܒ*ᬌ.,D\S~ZpB u?a6 B(i_zhf8(+Bj_wG^.#ީ .%* z z`KptDf'6$;%з2n d$x3* lxa-EEIM(mJf8^_׭M\;&TPs > *P4tM\[Dow ^$]Pd?4k D7*[#E {h);1jPn!$@*_wͨw-$d!&6V S8OejE;<)zrΦG~  ^RSg/f2(x KIH!Fg|&2o_H&'&J*A+r0QF_]Pmi-5@S̽z&VD2k53t&:oBMolq4[FՎˆF*'S7NPPjgpK }f-Vf}c5 !8-b1ͱm`e`Px. >J1dWkj$F|sWg.pj#_;\aɁ-Xclr*!8C@ME2< DuB^;"?kZ*:n NM՚FxwAű!N( NIuv[@X{Dۣmw?{ _ls s`+NՅ}CTӑX֖pݕ+ʸ7L1OBwK88 mlȖ׃lYG<6\ nOf=AmQ?]Iֿ'# iZl5qep@tSU-t;oF@"PjAxܼ'4Qp'F}$r)mK47BUZ%vpzё&P׽0R]pW"TTlǁ80AMʦŕY/fE424uַopο?wК?+}7݉y(&QQ0l5n2$D 0N/"{Tg)Q+ӊ6) =VTyu\:L )MkQ=z0 WvWKP)6ٍShVU_MfV>fJd_x\sggfsgm_~0*qy=b/gx,༔9v /aXsnD7llI< hB ::f`PY.auJ!nSJP N윢06hQgB}\FY_sf胻Pg#y"jJ3 {_φ&HO&ϮZPNU׸w D&L_2j=qG`e )$\ syL䅹)6tbٔK[l4IV!a o3.b6iֈ *O ST> %0< L}ʑr[o&o+q\cc2t_dz L!!gjc`ɺzhcAG|~fTikB1$ _;Tb">_[D ykyX;yUc9Wi={FhWJ tP1Dq?^hY,\gKN8B v$&Z~",#"znhPLh kƥ \=H=| Gd E&D3_piM;Rv }ߴпDRZV7B$#lT"ɴOVqf L[ٿyX, 7C|CE #~sjy^Lv]B'9;U[8P2RpQBhPG&!VoRK B])_=B8~%B~HV'_BDPZI9)7?oz<嘅tےE\wH(ЗZ~Qh@F=f럪?ؘ.@y'=<H49;gDU!myWQE:G[aۿ1(k\J#ڀP?6!"Tm3.MWs{,Im/1KU7oe -'Pۨ1=+ZuXkАWu\ r<[5%X Jt"׾ѧ09,[fIh~ir,I9 2Dw:2}_#xJ D%}$lީ/3OMS3ĻXtt~ RQbj{j)MfUOE@=eȞ >Tla~I|"CTmTg'y3 '8W~8 ?޾ݽ`:)@!?~WJ t<"89oci`ċ) ?R_ӝ5boɹmF`*m۩67\7TۑGuxSe,_L.mg3[I7 /⡼:\vhZ9V]+]e[Ì' `Ϗ1FF3C9U Ͷ)՛eS;Hs-)Gi}Z- ~Ɏ0wo1bv5.1~XF~Qٷ)EGސ ZeuASc,An&zZWVv~ŞL0ex7 JS ٗ#M=OOr 6쪟Z&-j=Xl{j` q/s &>rqVz |QߗX_wPO(!ܭa뎱},qk,@3.lYaKӓi넭TmTc^"p`ZlC{b%Cuubױsi%Ȏɩ =0ᨂDO>PԌpB7Bi V\ kt~K)>=^({ao.HIЏ!|%򬢇HQfZ8F.c En^4 C߉ 6`hO@-Tf=9:Ҁ?|z("I'nŒa0%qיҖgȀPL1mmzx2.-h:e+6nՂc6xMUp2˥& PM*?h7ڑcbnf|D~n-?_ sBUv>; v"ђF#]w#*0!|\; )f6 -,ǂ{~V7FM蹯hr)pC 7V58zdxmFz-jͳʁɴvXs\͝d㳦к+Wotudő6 Xx̓;\3VPEdƥoGCLv$ ГHC} qu]ZTR/Qӕi|&BEհ?m){*@MUڦGBC3I w'XV^˕13܋B4bh 8#-M O6}9 ̮.!禢G*TVʌ(8* ny҈ȀC? JkiHi5=٬W{O.jiӸHI9Wkp*ӷ?X}M6n=k {,#${"-0o;!ΙpXbη"؃zǝz-:肇ҴO>+,yT(?.qe,7,[]D&^ѣΔR2vRmyfLj}s?Ն-vчzA:3D9zR56 X&uƝLMH#z5+ sG9^;a#{fgi:D2r[(t,0{Z ~rOzrv3 }=xhף~s4K kg n\؃N]]bo(OKSgJ[L ?6',0lpI m|ՠs1OTissK/a:b">6;tN^;w]DJhEA'Qah^7 Dˬ$_v8+򅯷{Kpk^onSMvE*<T+Z ''rBs~U\ߐ/sMST%MsY'4By_;yMo4EɪgbۦX RN*j8qG O!Ba5%@U4?ә#ݥJ?Ffzsqaxף&K0ߘa\5I'MLW X_2~zΘXf[ђf{q%/\":&%q?jJN0R96 4K9cXui(FW?&&ǣ<`[V!'B)lmQT B^Ne/R8bX13Ll@ET3tsnnVu@J͑VuꝇF@\lDyc޿iϵV~~Gί^)=zۆF^5Brh(8+y܌|U[oi~(s]\ᩐsɀL~w S4"$:j7q @~Z?,#!x&ChWiϠ nKg"C.,1 LT{UQyi1`-ndUu&D~r2iߪnM]O;> ~ ?]C#%;MqDc2/;S#'}-,;́VvSyZƹp}i/M~,Yձq.(5I-o2aF9SβQ!A_ii03"ⱵD*L"eN}7A-qA1lR!Dl%m]ucH/SK,wQQpjq?{з\I\ܺmB|@0Y MԌSg.Yjiӭd迀ï=R>}s!u(acأg-o?Kc:H>vY$CA)8FHQgqt!TALܙhǼ[(x`"ƺnbzjVR!: 2>k6GF6a ZZ{ƴ;|Rs@ X&)o/'x6? _ЂbOdܮ[|E#>3'u"ɘ^^zk=)@e(CLjY.aS/Eè6ۀX{֕ g%^26]IYLE#O1Yc=,[H{Ul#X%֧ATa42H%&ƶ0u2v49[> &9EĈFP!XUYU*Pv6@Vģ՛ͧƝ  8`~&˹„.n6;Dj䜮ÿMڣx (NmqC_75-$l#?HjL!&NP.kN9'x3WTIqy }-Tn.I!kxm# [M$3gKKI_@h7ҝ{l(aeLjӌhNk\@n8c3{S!¦s4ڮ%[# *@Vi#QUڜt3jɃrZƸ`O \-͉m FxKBqU-zpt*^~a]֙P5og}͵Axidcm#/O=Yѡo_Uޓ O o%_p6 or<=N#J=1^Qf4)߄phK G?:d.&VpБUHs!EpEK8ɞ_r6U(H8v&+fx"٧9Ⱥ [%l: r!#Ra/:)NIv/KK !__},W75T\֢ϐT ) ڰ`{&P.Ѥbj{b>3q'Po,.;?*b&*^v-5 l&7_f> <'ƱxOn/K#GlKW餝rX2EO.ғaN*T^Ru%({* ĉSP}ۈyZw&@Q>N(ԧA08vz8=:8M7Uh9-Σ۰,2* ^B%@%de!/k fk!\ O|;骺IzgP?|˭okھy֙&p*oR!Uw?/vb׷ B]^t|q,S+)Z_brEsr]rz3! B%|? #Ⱦ{קZ _>n]uƭ;-GL QbmX4IkZ6w5<;n&Nw4Pd:΅9gSsP 0s7DאCK9~8+iJGiR澲m.GwsF0aYޭJ0sR!(/*J[*2_}KK]78fr\vōҺYf7Th9E15LVWJXmjyv9fAdko9-Zs"!'{ y8 p*_(Gw&Q2v&,r&?QH-#;;Y6uMXڕJc.4xk.QC؟Hrnq\).##bOEc )1iNS-D+0g֔qsT)+驳\|sڨ =B8O%ZQ2YMAjς:+ƿ 3x^[ j1mLsg'^!RQ=oPUl|VInw8N \Ե*Mڻ^髛6ªw4 Dtd7QsFxg Q&qܓ9!Al) ~4:O(3aU:A*mi/1\2F'R\)%?/̝d8h)PTd Y1$v"K^]$E׫t:7_!w6Hǩ[&mY,4'ɪNB ?/c@Iz@SGu+/@5, i6nm{!ّJC'd[pvR0ä`w JY.J5Pf5[%S0dW%S=#G X@l&GP6&IIKC(3_S_zX_E7\[Dg( y,]i~s0 b"1B%s,n|}Fb&&n![Wδ5\yS=Q2j‡gy;h(^#̮&~|R^@.p|A-5NNh<ÇCNYODb&pU3&h (Bgflp ItaPrdoDٌPO*\#E;ʑRbta r`I6(B{}"}D6gh3@e\; _@H9G̺.>,ř'Pu@A äp~"QLH=kpk-uLq,R%r+/°e+y 'yny^_͓-ѴLuq2nu鞶PL%ŗ>VcI+wz`/ @yDw>*U2ah̿`5'pwE4/Ozr"gk@dDiNL(hSN)Aݣ`8;jN<Wpɼ%5CG:bmkscEk 0^XG=h \Lwիm7l@c yvzL#y/b;ZxzHq@𻀶, NB("i2d!¼׽@ \@% Un|h*uϛq?G,td8h$rݜBZ(%.(2s岩oL Ykk`ڔ w^>: ")m*H0aŊ^2n7c8JbS G"UTʌf +{,s_ c^ O8y-o~?,ep쓥7EC醐kZUdoE $:ULBol*(wl\ F ]TDrl NH`HLIC?0_~ZJ,J೘VYHKb'ʁvWQ,5wg5&\מDY5/8#̎MY(hIp0:#"l0 $X $ћb_1(8릳1'8)h:eQ f`5,7(Ӿ< .v?> )2X;>;:`2ǂpe;DjZK[(25s3džoH`/곗|B&ghb J@{84G~AN MHy'mF]2hSmNd9 f\ABRNKWd6:%HJ Wz2lsjVBW[WMu1K]\FUj`1oӯ%z:UEPLRztC"P 3ec(HH&ABzzt}trx0 (%Dla{u | Ƥ[::!yKKҾ,#]d#FSV\2]}̅+m$`F2?78iө(qSwԸTn >ωL0uV\U\lƶ,Fy+gw¿+tF$hғ }**Ƅ{ ֗S2zv ȹk=x`R"G1crCK?r3&fHuo8yhf#1Uz*`|q =U ; $@t鯇W!/4R.c tfOk?}0@"ڽH%E»$DFP{1CfVQc'|^H>[DPݿ{ћ)4gƘg]LفZtsA5+H˄\ ӡM)29 *V'fgp/jZ4XP#){^"%Q.Ц p&yD Dd?HzzgLbC_?v&`rOk,Ty蒘]f5 f": ,'2jh]UI=ef&B+Y1S ]yZM%  'IεVP n3"Of)-ִʡT oSU˴e̝5.eԊxytӯCc\t%lf=_\K Y)w| tYy`!Xk`]5]|OA=ҵ6I^5(Uq\@G3qDڰ\ו߰9sZ{#sk f3ñtBS9S/3biҘȷ8^.S Ĵ[pJn;xInG[lg,p+I9kԎ{ P@F΀f%6kmnŰ3~U GQ&Ugv{@TttLx(\1!&fUR<ՠ]lhdҡ)86%=g{|‚iFCQUԲQ $-' 8}ɺed}hzyRY'H{A2Ǹ+kEg6?x?LY95 u6T0A:CFl}p޼ kjn)[.F[?Bg_m2-i˝t:Mt@!t!վBřB͉EXv\F3Һά{u"5|Z!8 ,stR90##1\ɪZqDO4[)$G,μ'PQ#/7jMo,torڗ.mpm6T]\z=%DwuA4K?@ZC4q\%%;`U:}ژ5i:AĉP!R\n.aC{3 Ce-pSDIWcJ5bRrXWƃaoHj7^ BDEPh|f]A[87>kU第Jԁ| ~kHf:=|Js]Sz/B*sLhU3_דӲ[ABW:EgshJfUSmY)ݯ,q.6n49JpUpZ>N&Ps< ŨV pa jڡoD>&Ar{N‡k\a8`jS,O1vފƿPcSOn˻faOM17+v2~1>@ %lК4 0$.hAAwfTx J:+GfI@D0TouJUDwGx>XUw505" H-w=$bn8TY[a?`I&&O&ziYi܉( ~YyFlCXx$դFm A$f*`cR( m6~6#r\y rI]wȆx(ZJQ[ldI,аu9(AK &M”?K}Rt5^Y>_L}Ԏ#<{@@gW@8%l ms!Z5R5:>= \9:hkey&sPԵ(@YLr=;Rsa>3;xwQ:j Ks7 Iw=b)2 СߕM}(<ăU}f"a`\ 8BU]RdK|&%qq:ؑ^b J1Txunҫ mT~Ւ=oP\AYWnӠnre}1 v7' ]0SFm%_ŗ(6Ac;.z*Âg|% ֹq~("p"'!aL7`J芯\V7.A2jKYgC,DžP1ozT$g&[?r2%3dH-:鈫'ܤc^;'-R~i9̧nxH<  GP+0:ըzW]lx,[zPrÈdAmX;Ma{xSj 2f*Zd/Qv'hD;0w`!Qd\cIu &~%Dds"?P34W%:llǓЃ$1 2qs#z nX)<*!.jf3 X5 x^!_[1Իvo"g'j6IAVYj\@oSj_P~dzɤk&zK@FJ+xzQq &SEY A9G j4X t`4mA`cOF$?ge$33ϭO8-B  }_^N/֟Ea;ʦ`X<1 pP| n+m|Ua*=}D:TCVG%A-!{p7#U5|fj =50ֵ(2gtF? 5 VqcHIKhWhkFDp~;}3lb+2SHyDRR;iT'{kWK-:4kY%% ɉU5ɟˇ3"-ZSox]=EbY,7[𷵎 d-SR[fuQLsLx<u{OR,u-\^M۬q{0KG$[2s(fX$tu!(juQN<^1)k6 Cfg+s"DVv 񾅝CB詺A(j;5.)|:טW_qb^VpwƮ=hWe1A_嵅67B7 |0> q4g /,X]8c9@׀kyuKBOP>%=s@ȜӦXѐ5JviN*D. ys*ݧSBɬAw頑"B3;{c;`ŝw-,4"NymD0ftC؏71tr؎st'(p^rt@\f*$ý( Ƃ;)$,-V?}iurPK*7 cZXc+6]\pY=л:苚W9koHk81+qwa\b! H) I>'j13upreuţ>2bgEM =}m [B+IpΤ^_80<4Pkp.o_z}fcB}XQ뫬4ˢza9H6[S)fD𲡟LƦvI{GHC3`Cjh.w( e\)7M0 RCE_RjG$ODsP6alf1ڇN75eKmjwb[y(=j ӳZJnYHW28| sxMHyjlSj2{I>$]dkpPm+W*VQ¯Q1KYsͯ%Klcj{ik3aJ6C62`u{}﹮t`ni巪=ZN&c&i-ap4f:-q̮/;f%)"A& Dћ/#G+A8m G+誗fteOJ-Itœ>T5C܄Q\>[|UbJifTX!J0ܢ#pe,r{A_~B,^yB?O=E[͝DV`6{# BBreDB5I@q/~z:"9Jx i8[ cKϨ٠鿌o?#dfS$i4!UиC<@?쭳Z [s-7WW̝E뵮2CtYw ,Aa hװ;E ғ~q&X^zB ZNԅ۠y#`+Ù=Oyޣ⩌_~t𪢚-0-NY BewAUXA7~s%uoqBeeoz;; ,BhCmSoc8ٝMY%`0 @󞆞(H]NԇDQyɿGݰMb' )^)]:E'«v#R$x0fhgb{7>/Z4P9Tz'RhTy"Ѭw35$-oaR٧_l¿&#߷]H'a=+}^_¶=xX{F3D)6D?pVMťhopY!BrDR9ap49XSEe+ȹfa[] bv kA[FE9i^<\[308-/&cpo<2 ? s ш aQU~ŒOTdzL w&RiuMe\bqY.,cW6uPD! ى{@z6(kTƅFBH\*JF7")^1X]K0}]ubk}^0к#j|@,?i"!,_npUlAD#*ފ5p<-l3C~VLEYHE/PX'f&RtJiG$4R"a(O*e*h3 h%Q.y /B- "Aڧ6-瓩FJ(5\|BQ>:3zJj{@Zu>*N=szdTBH1m'dhprmS #PmBZ@v$qХh!$Pz@)1~/j7E6/E-ű(os sgHT!KI1],:9 Y"E'yMh쁎;h%ĭӫx}c?CK[J)b'5:bPu!@Kåy:ɕFӻG`:D̘p,}mٯ;qO(mOe|hŮWoƍtav9'Єyq/LO|`[ݬNMܚ 0ZSo(qow6JiE/-ɫyQ, IԠY_ ophq|Rb>hӢErһWȝ964 03%-!NwF_,M[ 7Ĉ-a2BoD> +opIzOD@%S~9$ª3FH6Cvar+sL3 g }l_HQou2MH)p(׮ 6)كHχVRjs*c"U, g(,VvzUbVށ3WCd N)5M&L0r? {󩓰 g: bF 52'A3;t ץ6 qeɥLJqrj Urc'PUq^#@!x5kc)"$vpМK'#89>~clyrA++_ lL#T4. Ce-bظX-Ovz}+*Swc]N+GZ9z;x6qU- yX67 c1fs_JqIyyIv/xぉ!2IU/G4 cƻc jdnV$-5AS } )o~qs]"#L\daIFkg/3zyPFպihWC/fTa7H([E*3jVeb@ C7 u5cbQҪšqW+PϪrF]C07XB=j=W M?2ObǷ,AuCP> d2|hOX%92mJr]Af,\7ǚj$LA&fRTI?U75j, ȫkz\4f!ފi04քwP@ΛpI{D%ye#α;jSՒ&?>o5|XZ8MLP1rnFdb3D (+S"A>|Ҥ+_| Ԃajyq7Pϡ,(G0ϢձɫJƈ9P5$G潙H,Y_vVj~ >lftzi̹Q5f|]O}OzH" ̤ ,iC3c~0qr;/"h>mr; /BTMK$%.#e!v);kK O[eMo#+vʪƅ!_sEΞwg83r4/^r6At! fgٳ9Խ:F...oѰV23-ٶpŷRkMg> aLFH)-b,SOT(|cdN[L$П? *mHqP=b Hy`鎦\Ra'0;t۔:q۟^1P[NOG!C2\O$B&ڢY^& pMhV @zΒ^aqػdD0\ eR E($Ϣ>su_- *+ DmCKxYtGgţa#ԭdQkr4Fv8_j3hһݳv͏$`'PH+DpGn#.fx~K{5eNܣhn>;+l?VIx<0z<ܬemttD%y$w]񙊭z_7+N@jלŷ6)n@:H0Q}#r=&ϐ`EBH{B'7QX^S'aun<`SRy )3e:ҩ p7VݗTفo:DZ6bI1oxg`P8a_5()ZNh,*|cͼnRwu,YZ X+E&Gq`+:=w4s`oAEp ,m4N`%$h>t传CH$u@Hm:Ba(>>&ڋ7i^79X VS(q+'%]XXh(BsebB w?յ^h]\ p}<[ ΌpBk~lD2w{&)Bu|QgIE7 S4Ms0n9w2բDg ZQf(Ya)evhĈ:w4 b2` +Tql>^Y 3Iu5:IcJ3+,1Wў 9 /sA0@;0e1 |8JJBA_JM_ќT6- ^}J ƄHDɈ\#g"6HR A*呒aֈi[~KzoRqa ђplxSWDb0 e%JY1|oG @Y3met<̖onXPq!0.zq^|ljn S3UrVS[׫YI\kha0sύ )<d٬!%=/~b'AFxni:۸T rSF#mUjZx%(0iѶR R[.,ߴZ QE  pAOش9x0XdpKj@g,y(vl d51t3S07 lB ҡf3ΊB2¥ OYw7TP<4#O X㞝s4>—̰KQ1eK0LD-cXV_eCvGJQqýIf`!xԵD-gh>dJS_^^zV*BsIX+@=>JS?bbH{\.ưo'h7hϋtԗ+J97e-@.lƺ@%W,ֲ:6< ]nSU*߄:TխS4hah3 'I6ɱx,k5?[t}X,zR=`S7fD{4-IBݩay; ӽ'qq Z n"6! 㬉yt<3C05 Xҳ '--t͇{$Cfl[K&].i16!;!Op'tK}Gs /Q;]3{ĸĬv3ٚ['lFp9˲mZ<םժVqT)&80R2}%Z]aQ`/˿tHRUot;F>==K{c3lxh $Mf7V2?/Q>xR irVcmw`K_CQJ: ќ OzxLHo({m4^dv` _\dk/iuszv|'Or;p2Cm' %LBi_Wr`Rƒ|hBF:!l)J^v @r PԚvV ^i8!?{ȏ K)?  m&ͣ+U\/)q0rKdP7CK#ZBGӬq5ޏG\.~dÿQ;' ~͙ftK>6j} 3z+0~En?溏YJqtJ)f/Wa/] `'ko bt:9J@{;a;xNHΚq㖄j2 Z֏{WO٤@;c4ψw[)y>%{Q3Kjߖ^*2:|b-@BĬ8~b hŋBTx%7./%>5"v߰[,fr(x>y@xP}ֆ!Qw/6+a]/NBS腃Va}s.%uYQpZCqbH.6MIνH?~}Z<$^\LM`kqwVkYҺOT?OT[AjnXR{cix(X׶, VLWvhZڊH Ud+EKO/ɬ߲æu}Tt&m᠐Vզ?HJޢ, 8rŋ/8mF8N\zՕ#B{k}b)X%~ ,I9vUѢr, eW'¸/rbk=-RԐ7uwc@pߖZ;:"(OT;J8݌.ɣdFc8 G[.j)A7_օvf{U 4-J6\ 0K]Mw7L4L1"#GKC Z*ק)(eu-WN&2U<]F*O}+0OR44k$(!zCsF9F ,w~m?Uqܼ)ڴJ|3E!oUD>" ő*Zd?ouPU&nT{z#VV;n::sWN0iW6j!}<%bL'~\h*߸k1rdcޝ Hv\>(Ij.ZZ"bJ!Z,U[E v%(#VJAop?k\N,c[+儿67y \G\(|1|⋓şfp앖lEȏT."_)RM?# Hrz%M_7A/)+ط+WTx+2|`CX>MWU MF(ǻZm-q.kGd\j_:/%5yIC\&{LY 騎e^MtKz|Jp<# ݯn]4R}y"LUg-?)^8 Slbㄬwpd8W M 6U&|4k.caJ)/> ـ5a~zԪ0) x?}[?NR?!L&3'? T"{' D$CBj$wwiU1 ۱@|ܟi9$-h5W/[0Ď;%PCVdyq=}T*je;Uܽ?{"5޹Ŵ"x?zH[cb@hGT^AFRpn,E+[]M!>10ꡝC2p2_Ky4"wnt -=W8u@[W|?کI#& t)gK,(H O3W EgշC< ]NQ=rð o3W)PL߶6*V?m_[̞6Z^]I=i/a06.ˠx8 TD̴h/4?ݲ;!Ɋ>?N, } c /[M /Y3NƷ/+; g)" {f@we 3Zk}nE`Vr PKT@ jUrLΎlVs NGxsNW[Pۗ$9ĽTiw+Տw1Ub/N8]SG\,-Lh< ZnؽF'WAkyE `@~,t$!P2>ɘ5MI]1}P#Hfx8ɽtFw6EooUW',1n`E!&_)'z6Hr8ڱ5}Dw"B7GvՀCawnb aE@3WT l؃.+s5#(1TNԳQW;I?dpt/FwsܳڊpLW+R2 `K+B vS/A).q4:i6zdy/SIۗiRvP~W@nsRgJk$')Rt߅`Kn|,Nc (n[;qhz}(?4$;1 Jɠ!6bmuהD`ǻلal /kw`_2;/bf4Y墳l{W0l:y 0̚w»ʣ :x1*ѱ5bx~`"6O:E)Qٵj).֮"y N Wm甂I0_pC䫦$1i&*ƃR/_K]&dM81&EDĜ3*y%:у:m Qx]Bba?bف h?ȣ;xaS7΍,ZPL/qs)tR 5}Tķ1G+M٧l x\1ۍ`~!(T~sb;NO֠x&-#ŭĐ/lOBO~#9 %OM{,(7ZbK ÌBCxna@/pYqY:Tkg" I+O<lDQ\yѭcV|}.0wFAD%"mBbIf.\L8-࿞YqwpU&[szP h:Aณ"Ixa+<:dAN;Ie+Z, q:~ZlQ#f༝=MLkfO'WhݗBu Oģɐ pr= կwBͱ;Z& mOsT+G]{V֪~mHQݗȯKͦqr&Ò2v#;0k1]a۸ʏQ+_AΜqIM]~{Pŵ d=]: fq2iZG\ᲅ1'}%^PHegRheUgd(dvifp2ea@e!-CF32``1y/ym?ook#0?3q3b-NZΥ>[w+,XA\|s.ʕt{[y3b@xj{Vx+_Ms8pqr`ΐ#0Gl_\W?tjh?YWrVSQ"Nݏb߷2i޼W+:`9}O)lU(mSdlǹHTrW4D|`[1c 9DžÜ dѲ O@3_(G:%`GZO j US[khfF}oRHSVjQ`i# ͪ0kٿEJt%<$߅rSBU^+2IUM;J?[F<@v۵'ǂW0'2uz-MlΩ83 X묕bQb/=|TrSy>b9Rme)u ;e(,25qwr&$gk;QS[οj\YŴ:}?Dnsx-uB%~Y 3|5! G(nhg#j{z[]eʙVci:#b!&xtxi" y!hIbɩKc&iC\ %ȂT}fC+z:uOE Bդ|7 -R6='OHojԵ& S4e#1 ȆF { D>* lr/0'D1p%3JXXRҠ^*Dv 1bvvepgܳC^-Jڝ=X\@{PS_Ol5~i,W̒Cc6y8(ňVV'ŦfwFn&B" 'F1,]\;`M[3U"3(VuE3iq5Yh{ĕJ˴L\MK^"lXTyD[)U@g=K0}@0n2ND!JVY6 `#vgnT˳jm~4kgΟHw\5 1`ױ\-Qu!v/+HӲ$3kJȆhiMcD0*.ǗYgklYe㾙NkRklp'u7=8ozR_Y30?a٬9y_hK,{]3-dⶫ 2NC$tef\'' <=e%h8)Cev ܅D"ui{7KSD""";BhP/D#|?L׹a )faQ5IJ-S"bϙ4Z-^SCXRe8H Ꜷl?u :Z&0sL-K IJD+]gzpG@U$k!|_2"IG@g`.v6p{A'Y}7=TW܎7qLmkUBR0(KhP\դS.d ,p ~y.c8 !|X9E̙Vo'Ɓ7  M'O ZW>lEnx\bN3w-̿re;b) %/Cs!= {0䭸3@)> D>4hX<G3:]zyZFIUGP'Cd٥O [~2 E; 22t=_A){nS1E9 , D-ޓW1du! nAWǦ?(ji * DHDMEn0eJKHt8x7Uy?NR~BlW#bjV.;%.@b4%e+T.l.NTUԯ~2wfH-o5&Zkͪ<8t|0b9M뗞dYuuy1!^LB( !^7gfU!v{H]jM S"5쵭>dY:T'DŔİh?G&IF[]{}(TPӜ!̳y㛊`nY74FCiO#DIW)?YQY`W4G1\47QDd*+A[a`[цv>'R+N#__&sߑ' 2vni"a^^‡6' 0c ?^@iYhBԾq^"N8቗G¿Ѻ=➙ {zU]w?ko ,/b~_p]czpp|a=S1 &;q%$V8PMicBTu1jnkuNz%UhMa|JCVbH(r )}hn&@Z[z!ش>Iƺ"K C+ 2vNOSRѽ/:KEӤYta$%:lv aKc"ibZh(aHGv'{k~=W;7 l[9\iS~Eg-Vf՟ 9Vl|H?,0^^* odVf݆*~)3BD-{{)iz&SO7Hqomm4/D{h0κO(umRE'p3L>4aFGDk_t75 #n_Gkc EYhҚ T>FH8Z>w+3 ~&mFi 3d&IP*HM_/ jKEB57"%.PH);rXPQ3Pnik+L\pj66L'u&A2 JJUdILOj5_0b{x&%8 (;U֕4jrh%i:?->, W}_Öd0!qʶI=rZ$xٜ/)s`b?+m< ;>_8c~򵰼06H tbhu}ReJf{8Z"4osL x$3V;O XM'I;NDX5q<@ŨyC)d5JtHЀ`ٴVe, ߫ph#_ѕh)L̴'4Xry$IJY3]AA꧜:q_d٘w>iNR=<P)}jږ/x~ysWWzgv_)~,XV*/Ӓ|u/ f$F m聛ODߔ{|钑%h4dYlV눱5]'9GJm5|V0D:d! X#0H>X*^[m)])o߮@/؀T!jdSIt9} Zf*V),B`agn]=6bYD4g9Q~M۴5\t(ijesYl*0}e/^w xl={R]=SAiL^8}&gq6TobmrTzFwjHkTLOݸ&U1sXo8}bawc!-p.h_y-Kq%Q,@Rh_3_7VDU0>ZqLߒ?/hc;%Mc\.\ %W+&Ȁ]/8Ѕ.JR~וsIMی#[@9YWJɷ=t1(!or?C[1[+~rŽQՅū|0y+3RebyߡLHnJϑס9.4d kk+qWnR&z$n J`?Z:E')iph/c uPGF )ʳz.zb@/d˒qKbnD *nvao$?~-MUgxSJw'ԓYrXJ VMc2bϬmI/q ? R[.iv›Cnp"&SՌY#5+>Jlk2IUV _ɖ=C.jm -gy_jtd% :M7VP)+CH}%4~KvQrUY.n`R@V5DhhޅPOޔRxNҔQL|T̮ͪ0X5lP&og`Ug]fKpo@嘴vC^L02Ns(Ѹk7}{z匣K~ڟf1f֦ k\q y>0 ɟ'-rj(:sJuw3_d4yoK$5\2[m[]#X^^&8dKm{IF,LUz]Ћev-og9?맿dK-5Ǩlߦs-%_͍6ڪup{;fD=b!eeFٔ@345y ßVu@*FP":bz;GGN]6hRZV5 DŒ{}JWUl0̌Yv'o D&;?15O/1# |)\BEĕI{_lwtw$?4vD@t<%)ʺ|pζ#kY ^`!S*Nѻ (7},:eLeu">ݟ2ϊ]aw-Z'\K5{҄-UM#{X|:;s-}ɬ[j!°ERqi DG@/ɫ?!O !̉|VP3]i |׉U@>ݽ&/jpW:Eڦ#CM>mbYۍB<9GbqΒfnOPnhGoٓC^xn[e HWzh*s!~d]`Zd5_t9^([m1#=K pu>)nd^<Ӄdf|v @M~:ocUlV͉!aZ+ygNcz[7O PETGIOG%=+PNh+!Y-v.nWurtDZgP9XڝF>V&܏.bq&0  Socme`1G ?{9 1AYy:D wO[(/~?cAe( ҧh*𴴯쥃 3ˢcr{pڭ ĉL6tߘEa_/+"2ix"q]=\@y7){!EFIG[OT}9)1 B5.YIc'F C\2OXh sPX;_ kz|ލ}ciEGG#!93E2h.i⑭wx 3 ⩇6o FX2 ;vNGk`IjYt &}4SEZNMb㊡=e: |3XWL BZPi@vvh:DjtK>cf2Gܟ6=juǎ++taO_A(n|QHl գ!TQEvRFѧz(S Eے찉kq᭕aEI arPwf> (Y(' 3ަ_)R8t(F+N~=c^g>s16C2C5̎@U] tw9EMJ pPaR9;{OX A{ k+K0.T۞&H(B&ſcYT݁e([뉍'U5KmMXo x羟~LVAugS4:9|ǗOb|I nB:QnuCa-V h*|4t8/TBs٬VW6;7*GBhby]#HWn ]oNƋ1~dWD닍_Y~瓘m=؏M"1i,S^B65??T 75 z޾F4MXee2kŠ0P/dy| ؈ѻ"N;n.$yLY"+Q sč/ [SEٗPQGL˟fHF/j D遦#VaL&;+Ȱa!?n&^^U4kpml7nEMIZ tvŮd^,"2!׭,*s)*`J@>yD[K;eֺ( Ѫ@ĈKU \&̰/R0L)s9Ch4XDCQ:{@ ~[!i̕*孞GGpGbɅ Ͷ$)+ `Ĥ@ I#Lp6ܣRw`iqezCǭoOb+4+#R96NgbzAO~:b&׭ ~Ͻ';oKhg)0)Nolb'%27j5uicgݶ҆h^@Ogop~;#l'Xc x Vo:3'SJ#a)]YLx'w4`'s◾Jb48z3av̶ңDr v_3@Xo勬>䖡%i^j.S~QV萯_ ~BU"#%#ɻ6'qm@4 yr K.io1)i;2G 7e5F"c3ݣwT[*T5400Dm5(9+*$֝Y8SBgqeiAj..ǣr#V%:OlJdWX~FyնD90ִ@+ȡiRDW) {R2 q5]rf+Y<7JPԁzbr{zBD6Q-Sz3LWx7&S|˺q`ѱ>! u֩6ծA1H?٦L\^؃ H%` _~v )h] g#+؆Y9`tizTvQ I0 zC K#GaZ˜ͥZwVg?{Эn`6ҬX"lڨVR`7$mƙ@ 0T{s ͵yǣ%U0`QMۨ2+pfEeJ9b.o+MNȵu Λrs~ԃaL33͘ƣ6]+b;%"$2ܓ,5Ҳb 홆njHoDpo\ײ-,mtcp"H@#/1+z!P4Yuxk|gwX)6ҧ)Pwbv HHNY8Ʋ ]rPO%1U[p,1ҏU oCdX;ix 6Pz`ODdh6DD(Ϙf%S> % L\WF[!x_0鎼uCgJ^CʮY᎜`L4S'B fkݛs[Tρ(Y68;_|۳RZ[U0it͂f0oGҪMԒ0P/6`X(bUm<`kI9QS5ؗ?1*śMuKj韌;Pa`">ŸnՅA R*p:x$WWz~gbӚSzK}8\}9":0[ LiuW}r- VlYY1eɽְrTWQݠ;kUZv4 a$@= PP-h9]F,ZQhOgF(?}d7PLJc 9ً TdsDn!tvAo^r[zwhj&T1';3ȹ7⍇N:(VFd_`3À^*Ĩ+j0IZ hᜩ[2 r'9dKu9 ?6TW~҃s?}8@y5$R`1Q|K6ʎ퀩+I! Ŷ)uliɟV`Fm_X107Q90.ֳR4Jk+5=$ 0ihS,gm՞nCߛq;خ;Ýi\폸ތ3Gd}ϸ@څ%U\puh]V.t,1 b<+-èǃ]Mc Ĥ;!!udxgvM&\\Qjӱ>5Ea̧50k5%6ɝY V멵/-a NC&x w'IQ-=BJh'Q߹y+ɘkٛT&bFxO8 N2y_pjP4q_&^:԰|~qv{UKDt <* f x`SV/sC~ΥlNo+R2Q3`J_'2jTr!;nT *C}]MYu^ Qs`ݍE<qfp=go]E`BZeլ@|Edvܷ4IgrGv~N«Si"DS9L!+;՝tAc1p}V"O)H| 7QcnN|x4f>qMC_;kY"Eڜ?҇J?` +?j@`w8}ܦsd)9pwm8>:v?lLTKLtw VL;02zSvIa䓠U3/R$]GbMhѱ1rvcF;`q` iz(H؁3֌玂qB/:gz0#0C}GG$qP0o TzuVޖ6oz<.S·187&N%9w%UHɇ@\T4āt]^ى o 7ySf!3|E)TAa)ڪ@&?eIH'\l֞``U Sv/y(Tڅ1IQ0\ aSW.I :hPUADZDKt:ڞƃ@g無,u[K݃*9wc<-AklyMwR8·~uQ"_j{ DUC;7gpEi #v[8 +oF#p ])ݶmP**ڜi\ҌU}mq DV] 0}gThf)|꿤~>"E2Ju(ܐZL &?,J|i%x\mWMԮuJTƂ«3JR;VIZUk>*/Y  ,2u$#!犲{0Y V&V`x-3$+<:Bg-vM#T^%!Jmۧ_>lS1]ooi]TT $/$u>5DV睏@U":7%Q"s:}+PwH0 bqaX4J}T&me\]bZߟ2s0N"o1«}{-_sZhL ~2뙠K=tj*!oO~RsUPdBv "jx{W“;X޲v շA+9o) "Ww#d)W 4M_o{n,XF&%0Bi.iGC40_+Z6cUrկ"h(oyh]A;9+ {~@qWiZ29=TmdH>,(}A~K&SGrNYIU ?Xr,Vh{+H>{g <COtwPm,A"l]&,].AFlD E Iˢ^I1%RwTRvCm3&8oSyqJ-Qՙa(02ݏN`F*;gF=ԇ'm41wٔlu8|)24e\BYyNWÄ3un&E_' cȫ_9T +Gh/%HF?E`aS a l3:%x>+%I/oHh %'W}WC[hMx%o6yA ilD^`k!+moI0^̽qv{|2)!z7\LN&)\(˄еGUj"\>N7=ݷ <Ѝ2?8ńrdjU9V:qEeXYc!0M̏ݡ阾1e.? ~ a'b֊U`.\%w5M"S> 2nKx5^(ߣo1Vl<`$VR R v&:Wqzv=~ "kٔt쳸m``TGHzF7+g7yCpڄ0me-)ܱu̜/Qz -tʛej@4M~i%{4/ dSX.R*L<ďҋn8*^_+ټ󳛇-T A]aL"2b~90btwWnF:LLG[MYeK X =?| I(ֻ$A3Hmq) ;^!-Dm ϓW6Xd.Q\4 " }|!? S"Nγ 0a|Xnk!וK6 CCȝ2vq IOdYz垯 4{:ȭ(}Yt$WIx6.YS~I֙SF0N,HV=ԮWN }=hcYE=j WJYisC|[ZaS<#=(sj*녑t(\tsב@T*^%^vhcO>/RLqI$//( ߵkȦӏ[Et* E2U5e Rqd.SYgfIjɆ-tu_]eVgpIъDjY|o{> mIJgZ6}H XjbV)?6VܽZ;r@~=P^,CmvVznl4Y("Ѭ ?@"t*FZO-}w萈WDcl(r lIpޟ W]\I =᰺hD vy5&:ʉx3,-y$*%|Ϩ -ge5(TD8XtxCnLS207bFoz.^͈p6kV>ZH#2 ]1`,I!\0D"SVy榇]KD%ǹjE(1ؘ Ms*3U}IS%0'z &z`~ }غ*/ -T`Mjozf%s޺|gdK ;O _93IdQÚ>S:"Xuqg9%\N`Ufax>3J]Tp]Y>xxiK/=p0΂c0UѦo[2eK͚V)uF% rLQ_O+*C9^ލv ja9*\ĪBl< _`e. OҶ& r!j:]ƾ@!KSܩhy6 _Cq[>{GD5('a8KG-]0l`:zC=mO1`qHSZ^|5k9<3e+Yܡ&૎P%BA Gfӕݠy`SSԤo'0SEp"яY+"݋&,jhF&Loxh5K<܇d0$T*} !i(>y:ՠ!zJ܈t[]܁'(GGƾb!`) ΂䧺4-gH];A~l+aW5*+hFgFGdZH@"ഐ^$0М\\qa=NxaZ_Qm-@8m)QY~!]L$< S~[(h>ɏ_y9Lv4c\oȑa†.ކ㋫y-l/&*y[y$0?"Fh 4m"/q*@/d#`2[#D3W]dnuAp PjBoe4 vB-9C M|uZd̸j>d`㒷$d*)t EG>pݵb48-n-U^ I6t4xU"Œ'CVxrY +bR 7鯼(߹po&5D%2nJ_.g1kDL~/ݭ-E]qGœDe|^ʷ.vT!зA ~\*76@uEKlKSK%2^yU@VK?/m$8j "yO>]+`炦E`UϊoQHLgV2tyVxt+R@i ^xm9{U7<VTsMrO 4C ג Gs+7OglFOb`jy.2Xoj^IXP[..w'w=fog_byFT2-IJY*cbU9Fz8?XUR=beґR+oʄjFy1rxe -?d̰W0x>ڭvu|%9Mo.1]4Ü 8w=t#M%hν-$/ZxJĵZ?*9:Nlθ%+D~+~iaCmjϚa}bX0 *e;/ϊ*u[*!wD']'x|${w3Wfƚ!']vy"6mx'_t7-AX\;OҮP{(ۈ $7S.|r:zK:^ȫlo߆mV[+ްI闚Ư[>;0aOHmCʐnP3*t6y޷~[[i W wxD0ɲ_t(~&:(jΨBqj ݾk Q,ְN#-䳴Й\v^>T3͉˂(+'m{45{3)aMKB/SYF˙0qwo*citbQg!O(:HŤIhj߽!À($nw\p:6?̆V-PVɤ>c՛}{G7NuWap]/bx-J_m+˸acZ+A]GW6nz^)ڛņgƗ j߱QSZQ_K&3%'X~߳U@{dXF;eum)(NR Jq{g0Sr7a-@!; Uy^};g(!hCڗ+w/X/}x#{VTI={ L1)w eFK.,  m9Q*|1Q3oWٌX[3UAyFSQ)(NMղ9W~èsX%WJ2RL㓽Wbꪴ*ܕ0DSe᪱4py+"ݜ5Aؤ@KնOE CjmɣD7zPsթy#=t˧֒DdFܯ=&򻮾 ]qWjlkfOeJS 7[IJY`_ldۮς(~. t1~"&XLc) ~,뉾fDMƯUMCRMԬ ~g߯}\9m] 7-EQ(F-3ouC \Naqn&{)`ɮy|CƯ>:2_R'PuI wl6QCXfz^~)1G@O&[I٧HdOwl27Ǣ)ϧbȻOUp6T}.+h$Snl^M[+}рJލh]nOE^'y%ݵ8Xkbl߸)iFf_@nu.B?4޲*E>(+OC&ߋژ_/?\/$@8dQ{Z:!+`,Šg9g^3͠G>AqhU q4&pGN."?Bu4÷+c%ki.~lJikѱxoS iL8˙%"ʤqD, Z-©zS-UrH+/d^Jb\Ͱ`olK,S|R@1OyΙ+O(up:Lu񟊨Hݞek+VS6yu5e5:27 [2R.т+yΏFv®1Eg UˉOd5t$dAo<%덺bwSP7R4Zh,MH1եɤJz.+,Y_Bj:+$&69S@m)E Mθ"*$fj NOMȜ_e.ZHSV@ёZCB~|&byѴm""hn~l" nJqly a!HIl+#posm _oS b]USqDe-tz!sXamLQna WUWJS&f+sܮ@E|{}m^i]Ry?;-~ 6 rbu.f!RB 1 MaA4?J-)x {(@nmrV%-B!LIMU-jGa'=`L̝'-̰F,WCY(sY)e-ؽp^9ˬ6KMuP`ʧ^i7@JϵȲ?PF>%31=0nȚP%qRS4 GI0D6'S:}5rvv[ttմ W5j+(D,nWK@t%R;G'&I M5 C84`(YTr qҵZϊrKx0~feѫ>Sph1s&5i*l.-NDeq/mY-}q8RsɩIs68SӃf]E|ȉF#$]ݏw< B84!KC&,2eZYSdApڡNG1Lb?=tv&.\b fm ptd.g#|kbߩ4i|K濢l9f6֏JGX?CBx)KU#|YoC]J6MF$9:Y1=>o0sZA3RG9ʉ5QKr1-x_U\ji兤kn QMԨYk!A .$S40u[ HB X#9]Q%{{8 PDӷt!k7?+G,T/#珉bt`5?:pIfnl9qv{q"VuoeQV yj~n94 &l*A:IܤkT}ʳT5..%BA[ H  h y}fP!luňm`tE`,"B׿^BwՃ£D&O;$lW"Rfd6CPQ%Fl/􆀧SqV#!Wga ;YEQy2$l3ŠKY$Y^IX U:o,UD1 N3ەɪ6UعNz̑x4:u#߫~աH1,Di:CYJG ?H%ȀBhj8fl2#[bES=^z5ypd+R>"T^(5Zm³BA^Fz/fA49]"|,.Պ^ P,3Ocs'ѝ2H2{>5vnԇ[.J" )_Q{5-DR92NB'UYs|NE1lon<Q@q#~Cr Oq#1:7ͦ-# !ύ#$ kA&fv 6H$l$&%1/,KI!3ȷB4Ҟ{+1Yg㍤,6md,vU;yYyM K*k5fzE{v(cŅRmbU 4?-6]BWEM%P0w̬*>8ū~B꨸ 嬛!a*wG凞,u'1K`H,rhF*P?y̯󫅻>RQ?;;h/O~%=7睛4УcCm@9YA)=R^tba]p^cKU%gU>˘݌әMK腡6O4SG{d a㟚Z֋|&EIb <̎訡WUΪ\W8e׌Mdi uj,n1"?ŨsMnYi1bzEЄnSGC*@lM-0FS5D:RFP%| [ٟfvrc27?V*T{nlCіrůƈIWGRԚJ5 ň7`q cCQ] . @:twqjpOb7<ߋz. b| +<-PG]KnƧG|'s`o)c/W$ȉ19 4$1[@pyI~8)e,}Q%p;wh.Fj%0O7X v3+ S׷;|kP4/=b5m#_5p';(uHo|Y $}hS(uL6iqdWi( f?p1|θ?kRKoMqGҝuZ *[ 3zah+PaqE㽩@f>*lh!A(mp.G詷(f n"JPiZ%7nr!~?p] \$gƯU.un{[ ,FOS >ԯB|Ɣ J6t(B{AkZ),P~"5s/@])}xUUq4+A]GD&\3oϦD.O\KЮh-$Y`e&BuPN|5M=ܸzaoʟ`A15*vTGӕGS 8J҈{KBBS0 M,f_jookMաV0ڬ5=Tz Xq.z`M58͋7&Jh:j,e 25ca4 $ւ].+HF>g V9 0!y~ ] c-|DZD~K})Iy]C៵#y,[FX7"i^P .뿤4J;I:3nkf8FH- SxȘѩn)I ɹɀC Oa~3AgwE^8k=ąy(E g9JF4(~jÈ-+c&@!!HS?آ!Oh-rޱLg=f~yvnh1YNO@Rňh;tq"1 |RMҗ/trSS ;Gm2X"IK䮯ަu7QcŀT_dG'%6Ks|ɉ4 .k?-Im+ 0s6:h Ͳ!DAEw,7G:yGe@$CfMbo8\g'3X~ě\I>S, Bµf`#m0l:ym}27aU6tǝ[mjEGkJa/Je%Ή0QطXP-U_\uXNȪ "c6t֋)<'UEuf1Q,pYT4'2{%^q N o*C-b,dCcrȠ+w" 8a``;x)Y7KM@] :fBj$IKˆ71̶j4b榦b8Q)N}0#A_?j? ync7,W-QC,rU7 ⯼4oG:NӱGP}c֎2ܗu0U&061Q]u쌩wg[`Sgrר*(sa\ ;}p9K3Szo%TX uNa0%7Ť>)D7 m,h3 By!|89e+1l !T=r$h#]J>}UhEs3)/3PD7!=^T J?=i=Hqe]VsCwM*]TҘ-F.&,] o> l0CFuu)ܞ>^;p ү󯍂˾1ֈriٖ.w8][ceξ4w>8|"g33ez,gNw#F2oh %7Ni؂<7K^UlБX `4dmIY?B Lm"7&gkz6"a/aZ姰c[g$8L]H* !Z: "TŚiX IiMnwy(c=^XrN5XQ(WlAAˬl)Wo(E-@Le /F5;]bJR7 zs.K8)QlˬR Eenuc}~T`\c$4Jqg$Gy>r,St0 G:kHPOІD7 f в}- [jlЊc4B= X;^,m.♼hxz5iXO@7&n\ݺR"adrۙþbJj-֙S?mcKM{ۨ[s:rOHȍT%<!#Nr%֭t{ί#@^ZDiQ 7`P[(-nKLMO)Fv\c|בݟ;m(#0$6*m$[9(rF*Ctw] fǩH fŰE8,bٔ|+6| ]KA{!BRLX&-=I=-D+c'9NhKk3`RFL"΁eˊ0`=vi=Ko`%0&ryӿNfQ%YIτ35[F|HQh6R| krfM~"8RTـ/_#+P 9ۜCҼ-^b I4D4z Ԭ_ﴣ"? lm$5D-| Mϋa"[2ްi38fύDQ^SviEN{BtQGhy8b6L—tLc;#(,sIW8#߽zz5+n]DX"cox6P B8'z׏R}l-&s 0Vs+\Q'I6i? ] [G`3bŮu1+sk-B՜e[+Q7K#cՆAz ~y\kyS)b9DB/r/V%Vfu3nk2)zDo_Oez#cox/񒨋3!6팚~}Aei1 :UTbb0WR1D1u*څg4~f.A{F5(po$C'\/l6k}<@SFS)Y#p|47czl^ɏJ)>D¶ϳ2$` /x[,,n0ÙLէ0C".'Yq}rw=pv,:̎P<ݮ=Fn3Y+Ǝj>O>)co$XU`"ƕlg񨄸49tYH&3k+NP5mO :?(\TzYlfӪL7c^I۶`<u |u/PX1@C4{Yœ"'xC$H\[2;>1^j >,s:!L N;t6A-kC똆(^;fn⛂P Yo0|+Nk#_Q`_ iU qCUYQ.o0MLZYOgrE Fdv<:B98nX\GY~̧؞#7&(,pXP?7lԝ s{.8*lQ˧[^?Ȃ.wUVy7ʫ2iMA|eo$ 1Kd#4פR589)Q-*o+k,=Z6PB}w5<덣P r_y80W{zIۤ;e/CjPf.jO!@J<[>v$IڿF]Զ31n/paB%YFY)kVp&,ʂiqQ2ҶD َ*}L+M]_w~oh,pQ SEKOg<71?!v/khvXxT\|{y"W9btM\,-l#kF܏+ SBv5?E<>(ŷR$K,GƁӾĥP;r8)ډԅJE+nt4*M qF-NKfң=9UJ{>]Psǭ)C+\dbE?w"]F>B <`p2>WQ2ebIF*c)+:'B 8f٥ؖ!zϽLޯhJϦ=^g+8; D,*M W뿖Ru>‘C0FC_C6FsOLOE &ԃor9hJELПToLֵUx;]G>_\PH\͒ urRޣXJNF$(ejl0pT3 6Y"0]aUSfx@;}ɻQYXK5feYg-q4-GCV+[m.OF1VC`^=NǡvC x@8BY lꪶ"&+uQ2Ás=KqUw8d"6@q@&@x]5ļJc0@as<xz,S& &.NſVRo8IGcWHXs?&eԣag+OR 0ZlZޑQ'j9SjuBWvbxkYƷUNbH_;pwYICn_w@;ɒei^֡SN;\* n#ґ1GYDEǟtT~^#^pšx}H׏z+mk4 `nS 7[&Q<<Ԕ$\=UBJ\U=܄E^Odԯ{oG@^rT('#"r7Ys;rCVhɺ4Com6 P|xж#1m`Ky|{3+|R&= 56 ..^;3Yb0e~.DUw~V9:`yyۦ3zf&AqK,Fߚ"*Rp+Lyhi{C9?[V*?=mW}Ӌ*P[j!5]Ciqv@[w (.ݺv|2^dF u-ooKABCY G)*=ԐuтrG% _0V F. ޝbP!w'ykU~!VY,I"8nMfg(l  ť +2zbd>~|bWwۢi|O^&StV1MLZLŸb{x4ÄH5*Ob]c)TeCe9g[(,e PRbC縣f;o7>vgZ}׭:wDoZ[t Kb1`{`M,WټЄG/h٥; كţdǦ:8Po 'sa)#Eƞއp@oq~O}*o.~zN>&V%gy u\Q2mqȇ 7|[-~I8KoV` rЍBLq_&g2}Hn~Co4\$ *VWqجxb}KR'%$Z= 4ΰkvmqng 2HԢjN?snDk8qSZ@cWD?FxTSj?~&##9ӎE Ml,nX<73@{sA"Dх)M]kBQtZ3nCaKb=!Zu%X#t`F` z4A2rMoӇ?Hfz vODY o$jOm.(eC |6NպI9^>eΩWb&Eq0)#mF5L8|M`tN(ֱ u 2-?ă-K\E󉘞('4S'A)g?*f ISQV e*4cB;0CHA{%oK9hFRC4$}1-t]6="86զڢD;{`Jz.>u'bp Q4,|2hTgu)F ͍NX\hzDUMP}r[PCڔDiRJoUIT--&f2Og)QŦ7?U<`ksnPFT-Cx^{oK-HdU>sL(%4[1MC]0#p:4($pf)ZGLmw?9v)֙aYflx&oT'BvZi}TxyL/1]\kh3{&k/S֏Xϋt>޴H,e\ǧN]vpFo#י"@ І:% O?!bnMRFYrT:> שme#+qHO=齏#qaږ Kd/ßd-^P3 THQMGtp9)(FxF1'FF}䏢CTCeSV'@oN5ܾDpԔ'킈6V#6t 0:΄[Dv_,Em w,D'gфQ!q'UQ5P, o|#ĖQt~XhNݍ$qNeֽ/TaXtFFx9a4vM88GL܃]2+O]kFzf*g% CTA-ZIݴO=ySACI}FM#K _%=. ;E>ň1{*[;e5{?uj#ZL7Wɘ(~=aG:(6L˧uB' S|C^/Oנ ,聦Hf tKXSSϙ¶>3?Œ MZd8zֵ:aC7i-A;(] EGi`4ۋi(s DjAiGğ_mؘ|*530Kvv^ &׆rpB78&3!!|IuEt)RTڄo*7O4;jݕYDHGYY?ZMG;[K+ ~j82)D)t[7j8U9w@:&~#f{rXzAnz־c/.JMZB`xjԚ!<`;3"z" 5oB#ZC,6rfɝXOٚtȹ|G 7uPt邷AJ{ţ,o[GTR075C{(+8]-$ ;4{ ]K]>/AA>ׂjP0ġd Vxh2\ϼ3#Rij& (jĉZvu͋;OŨY`o(Lh{ O`m4G`Wg9'd쿗^1\o;M9)TÖ²CqJ|49ҥ|zd+YfY*_!T&[ )L7GApWC- XO Y&67q6~Nuk 7%5ZTnq=snO7N*G'p'tzI: YbcI" ڷYLWjL%.tb<_Ƨ%q<=DP.\WY{IOώJ fX@37E͖E׻qNX)qSi/Q$_}' n(%fi]jK }sxԮ;htqCMh}_niFh}drt/5+'*Xy7Pe <|N͞O`@ ׀燢K:Xd!'gk08pCM 8"QUIYd3fe5BBiEÕ jmVB!v87,8(7y{DdK/nH e*W ;LI&AdJi.^ G0"jQeXF#(n~XmAPԉkךQ̹1BL[_)8Kѱ%e6c;M8MY% RYz{9lOE>Q Ӈ0Xp'3CJm䊇d8+qޑg($j׹8|]P6SYŇᗡ!kqr򣶊}֙3fȕ-$!"c!0.ሣH6A)4hm,: #^pV>BOUc{w}7wp=A՚25zuAT"j`ލ1[ {3zM4_߮Q0`zlQՆA|=} 5WuM Z[s җe ePtjq1(G^^\.н?~L N/dkV4gQp/ l+'@>tn5\5m'v+y1ac!OkReLimFEּi nF3^XCn/JV<U:cm20U/K0׏Ų'wP.bGftBgv&rΪmw_rt;r!-fܑI,d&/'5RvdAeWKn[a%\U<|t|W_@@S" q/C![{7NJbjo}R1q{z޳_~BW>JA8Eզ.@3 w{H>g}n`3ŚRmrUjZ6?@Jycp!Is9GUL)˟?Ѭߨ>ahtżOa*><œA[I%~x="KQ4{@TYBPh5_/9e~cyF`{;<;Cly yM#P~^u0;b&'z,Oxo3oR~kY9$Xx @f&GDBz9MÈEӲDZ #٭_O qLt`&C$# :3s!7e,b#D̉K1=-mTx;a1k!`? 9,SK;t~^wv`tB $!e[:]?z!q$.f&̭WNW{r̩={zZ( |\7x%P[6w]nm~.>5k!f.S6b?Wg'K?}PQؽv:6|!2h Ή lPzVVől݃NoDe Rt.T¢Pkvj0C2(0Fc؋?r4ѢjKϜ wItOz)PhQIE#NP}|j7/#!e'^2|Ȝ]2>76dNVmPN̛er\FDZxjdAg]1A=ަIѱp(vtOgx(ID_I iQ]12lW2sN9#fw⥍X\L›/qiщurƮ/H[p&F@IsU]2 8bۨoj36yiKu[s h] 4wr-F*?I<[ۚ)L0Ϗ(~!8wh V3Yٷ'gpwZǰNXW^6Ym+- 9.ey+}?vu-Պ:Oi)f%Чp?zJN1UgJi\Vyp5NɣfG´b|Ӻ&d;^SzÖC@ʹ<˨Ӵim8UNxHTi[l5/|(«.A7i6t_b:" =Hdr; 3os˱m[^kfGi= @=rNl~\%Uꚼ΋vD‰glE=(|_MӂNnCy!Ab%km*S3C8S@P:ۆ~h2)VivK%鎟m񁠺&` 27hϞ 9]4|TLUmQd6(կ1z-^.ห㰐oUZ8oU['F a8 2p"ԓ,֬Dzzcϡ#yin6]$cǕ Jm;X3`,vG<|g|~NA(hԾaH_ BN&~ YycyTm*@"}beq1XFpGݖZc0KV6$i %d'gaԋ0CIpҝ2#* e@($ꤊ7*\: 2$,!Z27Irn.&F;aKiCkm9_ G(JDu3ZB_d%ODad2KׇU'7JG)4t3 z֚;m]BO7i1uyXgM3eaCiSfHH<=]BjGIy7Z#y3&pU2G;/* #<@Iʤ9T߷%k&NCbH}5^}svӰj)5:g'J5yg2ŀ#b85|W53QAQiJլ(pM/1g)M@#:#TJh}CͰR aBMlpM%njR;NaL Qz|衕Ae Ղ'cIFa!W*8Իl8*^Q+0i|PYh&@fB:K}s(00:CKL6+Cu\=fF6R<۷|FXy (|Ù21"cVH9с 7שՉt!ϥ6cPp:̬N7_LX!@0NK#Emy͐d1И-nSy)+u=Q-biŁ(sPYfVR@CB+i̮Y".q?ʌWXj{ Ctpԃ::!:o_:N јt!G2KYfNll0+b j8X-Y6iDkM"&,%Q~jՅrU`H!K(`FN/&MQ7RjO;z0`goUu76C_oOf#b2+<gq%' xJ2z E\ޔW?mEESlWn/v%f 7'3,W 5X^EC Y*_8X]samSʯ "Gq[jMV~~cuzLNCd^2Gac3M}( (tـ*XIJAاpE08bX yk"ki7POu{I6rϓWA7$1DW[{&ٝ?=6Kpp0Mw\T5gHd4߳d;LWh y6uC\vuMWe#"R7Y&<K"*v4Cq%28/"BxT) q9m?hou("YC/= $w9gA @(vL9-2a"{(k4Йl)ӵMu*^? j-CȀu4n= Tr*Η[s/ҊS]7{Yga/6hC S*O悲EM\.Y(ձs fv{'TٲTm{p.[ Eڇxj/)yĂj\E?L1` ia6 3|b\)<YCsN!-fuS{WtJ׃6!0` IgPR!;~э7zY@Lrl/20D^O@6?Õmbxe\;Y.(kWƇ_d$qa֐I3 klfǚ_}7n}_maBsM@oc6ęM-RZ1M)N n|{*|Zل5CQ/Y?vjZWۛQ$! rA4gl,s8Ě% +~ah,0L0Xk.&,l<5=Y;BWl(ao~-i*n^9vƪMAKIQ1(6($L.`c YAaƋ)C|?e]>@`cmݴѬ@ 4l@#r"dVg?ς!oQpo^䄧d@Fj1@AK:/Ə8`H(vbeB ߓ6!>cYq}NQBb'ѫдE0ƯBc\Suz V It`S91fb MAP OBI a׀x_Қq >/=~Π&><اv,v4Ccu' Eqr 8d0_O =8l?}53 ګ ]YD8EN4Sd)hq(vs{G^u8B 7,Wu_ !"rl5Y|@ u?;U>i9n;u_WYbQ`]޵yYn]㬌D2q-; 2̘|I[^ruI`xecY cz.@Sl+2|Uq7!RwCE3@DT* ؘCfk<^:// \47^1T^tO2/>$XN3%3+ ~pA.w)3YPԊh;uܭ!1oj}'zG.s|_)PK3*2ٝ6PĦxݓG|;YFt8ٍپ fCt6"ldUz3*憼g)ǪZ€ڃh7qUȉ/xوTdCRbhm K9@GW#_x8nrH3P^ 11< waƺ׫.P˩(SA^'0ec=ᨨR$ܧ/ (S-D@As * K- 3j[]eS0TOYjn[ ݵ:OC^fV٩TK%z)4zVzmnHU2݇3]yyE/RƚAܺF=3ay6#7Hӗ{Xu#_ݯQv[!>^ox֢(|r2MyLQ['iL8j/\]Rr/@:P[-`]{4mA7E[,l,<`QŚ -Joʚ(s"tl5BV^OҀڧ -Oݝ3kk1V!?iϪ.p}Mx (v#$`K?+r^%awA`DEg~c5@-ȢI`o$RS5q@3KÆ{hVP kD 3{&TcKY)0fxr⛼!9+F:K߸}D7_5\l&RpcV@wPTEV{xYQccbGM(C1!C=@؎=\0Auq lF /5+LD*(Y$GShݥ)oixj#N.g+,PK ũLpDlZrK=L&J2EA yEgX#g>!MNQ s$M(/@ o'BI$`]MMkI% 7N  [;Veb!M}b.t+K7@ Ar rNBz}ya> S; #emJɃS};$(Iѫ]%Q7s>m6>*r"(}o8ܠ/X <l> }g_B#X H&7 Lf0$`"9>_i%i[߰LQ5 65£Wt*+v?8{,:\Y`w.G̓I }fjF4'?EQ7?GPaA-/&yn$XKvnˁ-{lܨj-]L~¿Kn4բB*CZq0~2K+\8dy\&.7J=Y3z7_ kU-UTm,+ܠL%X9d5d5+2Oav&.X`: 8OQ**ֵgEQxow)8k@+A1t[8後e^8];W0]~ `ѼFZmmٯitu\VpTP rmO?b7aF2 {<=3^p3;' E"Y{; tZg5Doơoxh~qP~)gge; 6bP+4= q趧h`ZVb/AKuGO1P{vAX30vGH`QN)v0eGlH55l$)'R?Ϗm)Οbƻ#ܹű~Bsvm+'A,(:w j}T)bRjh hrbT#yougqvFpE ܍@W%m ՗U!+mE/z^f&hfДW),>;NdCexٚgODG)͞!87#5m^#i:Ht?lFӧ&>)!H NUѡxy#Ղ]oIC 4ʆЬb$Y/ /R[Sd4‚5Tyu\8*x@tC+Y+Ng[T/E\q(*˫_9&a֝3,?x͖| r V1f@jlF:uT ʊ1ϻlw,keFU#\HoŶ#ؘK#I?AIb;Ӏt=`'+>x0Ol6R(jG@*5^zd31<ѭ ;^gl?G,:f9'oe]Yo&4 97/]n}Ex5CU\"9|@B )oGҚ J_ߙTƵVS-mm4JS0p):f6Y.jH^Ϫ}*g{5J: }Gv A<!{\@^bjBXh- 0H2Y|F 6,])PUw*WC!!NԀpeA_ۑ*lR -#G?JW>>4c 6Fx=YD \)wdB:Bcl$c׈1d<^zmcn#Nb H2Pcԭ$_*0v`CWTլ(2nvЧ/D{![nxtcnT{_%~'芉 5giQ/N O|1}%Y ۉX&Ϗ8a?Zb)T bXCۚ6 >c2w8vL߁3?p1ghQuVb!EI/}}Z`%Uc9W{حU :,R: c#_2:Nx~ NoʶE9uYJ֭^}g4KK N3-D @2.dk3~fо-q]-%G0B0yGa.4h܅.m>h,/z4K= áfzJu(ϩbJ̨]>eLnZ2Ffqz PHr/2bi@Oq2I]P)e\`h 0uqؗW mX+Vik3:-T,.#Õg͡&ԇz N;  q/ ״ 46^hꌚrɩ+` RcXK;]ofaR UCF9q 3 ^ИDf ύbÌtZ[&b ^va/>jȩ:y9x*֎2dZQc͝#'J(߬'b~&@ BКCA蒇S5jcm D ߧp s|z|!vq2 YbiV-Z^ei.t٭Z-/˯t`ݸ4s"YM^)sl%4F dUYcAP(w2TG/puq4h.p#bjvR&{ti{yb%x¼?-āBnQwv=\#(qr}O$AYS4ڎ9stgMś7~^\Ԉ"2~w%*3n28h|f$3|Gs.E#uIųLV>r 7@_ H. XD)w 㬡:.amcFJmUPPsTd:*ږDX}E87s, ߚ(^;dl-2|`R1~i|"ty0f~i/F~hm@?Yf\eC->|R0  sFw &MjGrYZAշAE˸`{M TZ|GUט/ݨ#N|9Er$5xtሯA9ex7$|w$@J{DŢ pvP_'aпW $'vz4Ghci"憳x:J4?LEZ?ZMCsM'6@>gJ'P^wxp:3^}NTT_ `-L@;OEO;֋6C}q^ Ag*T1b񷙤ȁE: n'8}Vh'7Gڤ {[5( '֍23`.ɺC -%Uyp´y-&LJC6"}҆l_ `="2LX$L̽e5T[ >&$Kls6^H/U4&}wLP!`̎1Å:z&#je EB' &oRHnPg0٩W_ij55э#W2F鴆BAOtdu9SF700+T+ [%_)id^&rE9T;W:=/3-UlLOQl3B0LX(YNh1xG 1}3Tg= >M.Tu_rӃ(nO~CFb/K`ۢT-2_o{pmR}|3$u(Col7^~MG B5u_ݤ[Ğc֭qRٻ/+n-RoiBmik!8b4 Y]=8 ^KR|c{m;hq6dIL4 妰WqLN_b2sQDUq˶}48 ]#k=~A6hSNX$~/~]Mz/y h41%Y8<g QB.-mPQ$ކkd&-U?\u 3$ @x owD^ýc#΃|w6@[8p y I'Nv!@g-57O~1WP~3VYPLh3鳿!^Ar@j'M%Ui;NL[w? S/( bY{Y?JkiOXD(@j0W<እUZ'^G a5kb'\ggY !4;u`G~!ms'LG1af փ:Fг=*@ y)I> lj= 8do0ɞ)"PꇳBQ9ܺu鰿f,\X[Ku8>XRq"9;~phGes(o܋.,_T)'kj*E:<t{miQxĹАHȏJ+4?W2r@UrΌ9o?l:z>dݖf|w`rddsqfgro?h9ġ;e}D9Q%"$[p!%R+$Ņ2&2QJ_E, nDLx$TSe0 Wn,Vh-y HPqN&HŢ v ڲ_ӱwnE n+Fv e]ٞ6F+*"_]oo/,.VxqQ17BdK_ꊮ'^`d^8jo[v0QwcQzl^OJL2eЪȪnW|{;Jz:5BCu=/*({yj"1\#/ X5u{ NB)q *HfʔO㡦a[ѢXiRPsy3µ\ 4tq $cżgmX #0^K2R;Cwk1ޱ[G1c;`' {k! UvW|)leL~0g8#e- y6c7HrŬ5q#Z`C/)~HBΒSIjD M hd A(~,Y4bht W(6,1f!K DY/3:Fq>SɽYXUv=Fþ tdG[onü%#"E \GK;ΉOg|G\Wfώyr _qhQXAѡE/fn e')L*fϸpk1S G*٬ /o&.(V0>(\\2Z!ylWcjPXF6"`Ӧ~4Ǻ~x韚Iw{}RScF`Sn5GyۉW[nX'HFVcJ2:[X8 son)e>ه3m"ͦv~>۩p5sBpq$Wo sňj)E@FNLrlA$HY}G (yw0F`u/#&Ypk\ /|HѵUv`} /%V{pvT =9Z"LM t& G)N)T܇4efC fINP)M74ˉfQ=`"a.6_AQ~0"f=]pO_MSTC|\*_LK!%71/i!,r}|-~ydhqRo]-/rS]?Gk͢tY; kI>`c΀sO0azy6rˤ=a 7]l@jH)!O 8|d!ۘZdm_.LG=PBE\RD7  : U۞3!8,Cq@ R<3I 9z0{WMV.-8_" ?G KOLJ])DM@h@\;T ?(?a y#dO=GR7ҡ<:́ fFt8Ŭ?: $}~7e+W?4+Qx{e51|{=Xz ?T7S@C~G_4JgV̅@dgKǫL1Q#$ߎion;-Qܑ![2m|O[#ϲ4BݩJc\1֖RuH H8lxo}JgYUܨ_f ԕX MV}+!~ rCz7@hMO ZKw=OV[! o] YWl$f;P;EqS & v=UZTÃ}&Rti .?Qɨ3#Gc|yw__ e HI5NI9}qxJXUe7igMf)#C> ,;$M{zT6U]U'%+q11Y>&Faoĭ|$Q)ۉ10I|CRyG6 ~1e'u&BiY ٍF&;%e Hqn:y1Bs 1w`]M,&Ҷ6o= siӗԽQHv{!u+QRGS8l_ߝW2=h 6yJm2dό+A'(IʫmPF[zN5¡AҝsƹNb=/2ziZFK6#,jrB&2T3(H j>*udtYnTf&Վݵ{#)Yk)=@撥"PuqEeb;*K/pאH~< _ތF$̝72φ[;*`QqȦ!R5 gqy uRE%ۖdJO%˩ =z> up4$pƴV yzbap`/S歆ΊKHT8JX/Ƅ!RUSC;2H)kL\7Hf`&铣=& ~NJo* %׮1_\Öl KMhK |8YY?Yd8Nw@;h>im,XaBM mNy%gy9l%G|&Ṟo.jDmkP=oIr #k.Zyiǚ0Ok)&wB=eb {ʡ X,f:xBUbYE`pl[F4i>o@;(=?)YD0umsI ʫ䷮j9QafnvS8٤̅UC?y%1wAïD-o‰g _<aiݟ;5X6, bVtZ-:*}hF woe/ا~iʞs1͘|iՇYy=+fs A$ "#Z$d%1p46wveZ @WM)^D&¨cN.rW+] rǻKP"ZlЬSi>$lWA22LKꂂ2Q+ #Jy@>|ŏu5索R#󟕞8ERFb"b tm4+"iFS3C,1[a5 jW[( {J5j7mR aX%^JZ4Uyž66"~yIAzďcy¥s69Ap)C|9^Rv 8',$ˣ{`,XH[P59*|9`IuUǬ*t&3(L\nOyτAoZLCܥ~ ba^!s՘O.q&[P-ʙ zȷ lpXF:VĹaRWOR\Qms)yț< up[ N 4Q Np?Nҹà,\,ҫpUu Wl#G1X[ tkNSHM kO+c*CSWUr8j=1Aִ.`[1rv@x޸C#Z>cf),ڶgЈ2XxKZ,˄jZw'<˰̔FSp3]Tk8| r$("fٸ"%~З܊m6 'MS8,ϛF"+cp[^\+p\~'WeA1C=ᗱbd 0unHS+ ٦)ɠ&_N꺾ﬞ1ZCUY>{Xtۣ;3JP{lNnMiLd_eosT|ܒdF}za4fhBʽÒ#\2iun2H\8l[QE6IkxhnuͿWT{ŐjaRDa qE4͈Szl4F~kIbw)-O"lGٺ rZ`N(".Ow-vBlNosxWpcH$SY^Iƅ|{A',K{ yc+ ĉ aѣ"2m;VZ'qb'Я29d#YTY-$Y6bg+z;BPQ|d|~l{ wZ@åP0񗹕{H|ݰƭg)#>|M$m`Љ9z͐|~yKM~N}ige'^J9./y3zz '[M+P%f E|MqAyp FZg{mi֫'ky*yXq988{UeJHǚ"8E/ٚA0EgR!˪:N'[o_eTad`āܨ%qMx\4Mэ=W`o"M@`Pi镬)_ھ6]xA<M+cpJo5<..fg:ܧ q$}ڣ) ?> eGS@Pߟϛ:nMKl.y|UAB/ LQMB\( pT?ּ|҃2սO#&*whXUYOOka/?U R2x.+ /YwPճLT>dȺ*V%F_M?*r,tʥMu,bFfߦ:vwb5P^ 7tT҃l֤@ Σ81q/[尳 BvCX2 Yo۔i|q7^Z.~;^@xq y0p欍.p}q$`r)cd1UEV  g3aXaam4*5Z+JmNS˯}K*J`ͮ3k{>'I7r9BfLOOh{l#v$yv0g6dqؤÊATi'k- o7rcMĉ$pxp]aH7_؃ՇXk 8GKio\1uV78]LB[*f?-k9T)s2!#>Ρi nj :;Ulj9/EZ/ 1sS^R b`oy@ho~}60/wm;m!oAD$Z2fʹrt)"NN֜Sj RcEg'-rEt=E[Cz4n θ{u砱z~ Ӣܒ2f (`t!n?֠)R0)SZw 5I6 чjTf: XZT8ܴ-O BiQ~_y#3J,\ÂB>IDZ/Ee=[ EW!:n)<+%c|ok1)"`d8  /"E <jA@nrxKOa uio0ظ&J ?zc8I͵^q2CfwbK<6XHhT$}Qև)Y{fvs+y}@uw&P ZUC_ۨp:p32XZ{e/ إ v6L( Ӈ(h"X~[fD`|T\3(H%VuQCgN01Z=NE(͖rYZkeybj ^6V?V}(YLJG@@\KI[]ӫ ;!&ՑN pZ 4('RNyjIF1n߹D|6fej[]J/B\NZp=3! d3G-XoUwEx>q)C6ۄ%Eb-B۬T]vu@{PLJV;[@ıT}wxF1T@c.R kgAʭ?+b{=MHlZC{('^5`Q&:^sO$31JZ/i@Z]*=[yKqHMͰwpsnÓZ1@\a_+p1Aq 8}ҽ_ *X_Oh)@ei^[' Yw/$3el9 #dޥV <b_пx 0LKM^3B%sRx+t-AiS[7w] m1ְpp&}bRH``_"_c'ɋvDFqB? z3N8.+Lrd,h-#u޸޹ۑo\G␚0rQa&o>7EI@!yi0"DAg8%_Gbl^z,n dcLnC/XlGIl<~X mbWUkzkNoN_JR[fZy6*[(+UckW4RLswoFdocb,%(30'z?=2IȮ"˱uIs:ҮVqkA?<gƇ%Mĺso}v}$J+M eiOxS)i>".r=)5hB40.*vzͻyY,zsլ3".xk Mw a=N_&"Z[CXnPC )Nҋ*":.du nڶM`IAv~1bBqDL<.9_9LH-,.HR#2oNHg?Z{vUX*X-S&5~W5dOn]o Nj/\XgX]>,ց??[*cMdYhnQ,f,%eK2r֯׆ <3O۾tuM9J<4hAY]zx;Ť$$9_؈`06%FλfNd4m0]͂>||ELS64'bPɻ G>0jHTA؂0Q @Z%2*a6@TQAawb"S?ȴ/jE"Ju )m%AOEM!M-a +\µmtڶUd}ࠢME`qtHW>C];[npT|$0Ny`~sf=o/p yŠh{)o_TbY%ZjE@vR|In¿y#3:X̡TJjZ&uϫwy24d}mn4Z[l޿:$eZZ`ja !g86%ѵ}IAr >33# rmv@$'Άm ]Q(1&#DxbK}znݗ/!0?6WT]{65P8܂%hRJVQ *ñrn 4sβ.w6+h_6+tn{8mj5̱?|_ z߰HC'7<~t" m<S$𨩣:P@輷 LM m.^`OV1U()uVu}RZoM^D\Omc_AKGϏjOeD1啛'Kj([us|Bn)M`mȕ|^GCkD/SpOMm|4Q'3 b^ 31e ,a~O6|ZŲdNd =fb Q4bI`xYrL١Guz`daD"tΐZ׼=':MĹ^/UxGҡzj;R0 }Av"FTڬn*S0Am@h+ҡn].THot2R1_l#5flUaxWK `͈?F++;x -B#ðtɷ|X"HRCcdء^مl3:;\̆E ֈ6V]oRֵv4!I|@9w gnԶZA$4=ߊ&M1՗A;R!~/,95oU ~n`1eVF'7|Tz}OG(lq/B}]#vٕlt)빁D­W3%}ղMq HCI m1Nѩ&8gvGޕ?F~U|_IfˋereDoEt+;2]!ȧ{a=rL tYq7שQ-:|l8U52~b9'"W=;=m=?ͪcN{_yFhY1>biأ9`pdJc*& 7b3E{j u|xKDPO=Dz >kS}V-Wv-g ®j ~]<ٯiVIfc;j00J̊P k>}K9U@ FghHB :~}gN=8J ÖN~奣 ckW3^ 4V6TPT$oM4hHh rw6)a4| *wkeEb\~{2:@2Ib:ң135હ Oc/!,ҳ"%B]#ߓ\o %D.x(2BG/\㾥q( ~=x7?D_;Q‹EeLm!T%גbD<Ȫ"wz⋜} 7jFzv 2^wGqomzuŽ][nb \UU1$j$ |"=gs,5٦vK,y+XmmkQ&O g}^XEвqifIBTy} ge`&9|eA ͦqx|Lk9Yyi 2)hRJ;TO_W۲ 5l\vi}?nWW(llVټKMkaU/Qe|j >9cÞ&0+h36u譜ZLB'eUe2#f% -tDH92ؽ9x3ԛ-(mE,'ء`|Gi*|,\XƵT m,xZ-T"j&Qs]ҋgwk%aA.[&!HLZꓫc7!6l/.8ݗʄ> %Ke0aY4wmso9OCc\ F!UcG]/'حۄ•؋4f?kҜ_w " 鬔~Y}f8_X&[H2i!BMKԗh#LDo$BN>F]bqqK5-&kCMgA>S\'QL*eTٳVu(,֖bL+(ett;ԳK?$X/Z5.}h:|lCkơ&wp cIbZK¥kEohoWފȗ2Uhujvıf{RFnoE)V>h@橔rvo, N`-?YYy@vS # e^.kF6nO'ֲR06TLdGH9l׳>49۰?l 1d+{Mm<d>g2'v\䳊ɤ_0 ͕Qϔu$+l ,^})6vcG^Ij5m>y&_>OY,Ѐ€NTg%ᔑrjKsXy]ڿXe39_Kuɺ6JqM։[U^*#''ߪDe\=U<+,XLLT6Tg5 mf~U%u5ojO$u2Y_J4ՂGnjUC|a`JĀ% YߧM#)7z">_; 2]Э:‘Sqӣ:.<&ҩ"ɦ.Tp&zl oTJX`?d;v;elb gR7lrot,V#Gcy~%<ڤJ*#GEtwO먳GaH6к$ǿhV♘Hitiٳ R<2@;{(hA 5lm IEKt. V.Kf|`u}Y,1.?jkfxx+OKNzcY1i2Zh$nՄzՂIBةfeҚjA[o-}y~\pej:<}V'leAra u9[Sʂu(P(!ëyt_ nluBiuzH: xE!ے׈]“{vdQcX 繧3ȩ5t 4i m\߹GS})-ݽ|cjo(h8lU(O{IXGZaZhy ҧl7R09%5-O]4cPuXۀ@ar+zTw8H  |HնP?5,De8Ŷv lsbovhy9Eڍiq7C|SVS+y*zLQ'E^s'l~]2C}WF3p{#;6>?HŢWP ,y6Ȱ fo凤. 'Xt1@Jݜ+"cePWtkN(HX8ΰv!wFRntT )z=Su|F)P]wh~vE\ dU"bUX}G@  7">#k!r޹Syƹs bb& 5{^`\zPxV"+ѥ/ҎA/ưя3nҮҁU:Q'Ă-;0.u0:ӗ(QGp Uԝn"dӷ"]tw%:1vEtπBEach A7(/zu}֡{ͱGiHmRR `Ùn9]V.\ i5-.tV\MK-_uQmDӫ[Z]mlk1O8FOcv. S{U{.` `?~TX%c#掊2䇋m[s"‹mN/.(3r)+c";sp>ܧ:pwŸR -~( k~eȩ:#gLCSHLxkIFigW.,['v麷D3\1}x>Zk nL}\wJZZƃ$^E⽸:QW`y/Z0Dif/h)68rY(BT E>w vֱPvEie\&bZy?/AOeWFѫ_rg݂Qʤx%|s@2R)"($'σmlܨ0B[ y,rIҠL_3Ifp'#([/w 4!FK~l@6՛CD5w?Zd%]0ԥ4!!SO|kxʠ̻"q 8~exD.d]+6yxQqZԟ:`ͿZ7`fϵjb4~]PTՠrA%j4FAW8TZ@_ա3k8S}lDrµ6?:&hhm~&j1?=Db͇Xvm#S Ukn}I &/5wSEU/8({_Ht ЃRWls_{ is ƤmHƖ+wK P2/L uS;%)Ќ%̩Z1ȵ w($>GAg0T9&TіV1 _%enyB:k 8BEc~̦܅^!>,'>`}@FBbtk^ 0e3k_ci8j"-BpIk U^ R2:7~OL`|t/w\ɦ,W{: aA#i Xz!h*XէzP 9du)flh۵Z8dA(i43C oFmUvHZ5dzl8 U6H6XsxTS@pDdO^inɅ e!ԇ(p^3<7W4 APTbѳpuPHʆUL| -Snjmpyá qMJܾ#j'Cj[*+ o{:dr)Pi)I+mAeF h"JO@kzlGf|i(:F5Hc8)0 f~N2|lz0}q'"a]S SiU? „5ruU().m_+BAD׈ ȱF\υ#}HTzIn TB"Of_x ~Hj턦 *9*:zgA,d]]/oSYzE@ Vkܟ%)t,m? [yPхh=$E,s`#䲲k:QHNi%|w&BH̖ S ڜKy:2WVkEt8nQ<څi[~5Gv0SπQ /~YeT.)6zuP^nFM fLs, 8gd߲k1 ò\{$0.kk2( 6\ťn\:"6`qqO>-J)'hTk UXywp#N%9OVb)v/ ]QiG6Gcu]H=T_67@]pA"P]O /jO #8qݚ'J+X p|?Ȋ?j)"]KO0գ2Oe-P 9+Jf/?_.Q#$T{'XȫaQ%XtUpK @2i#9=4n=Β\|s:'{\G޾q4pFM:LV/sQpd%m%L艆N>^&5H9}aԄ1ivޯql٩éSQ\{ט$|%bǴ['bVnK0Sp{" ,3Su+:K7n;J%>Qoqb~xz 5Yɵ؁u8RbQ>-:7S ,8jy<> ߜ@EtSiZ9ɕ8]1t dCg FbVKg@:䝀W\4PXleUm0`^.J<$X@Hz.8]AQƱag2a7x+T/Fh%]՚eP0׍!Gˆ>#Z?tEוpvphwBw oNd<`1:` 5Ϲ6 ckYbO_(havY뢚"XoTR6Y Q'[cVgj1#|Gx:7zBiAwt hܪu?-H_R]c-Tئ[m!iMڵ -232eLJG^0 a4[]8 >-kyfHVW |Vɲr+O=UJ:?fz39ȋ[̬Cx +,IzP~B7`O>nkDde"g; T?3}.g'd?KBJ;ȏh'!l #H{J?}d+ކqÜ=v Ҏ;d_kUF}Z2pz6Y6jN:x"D zXg}84Ԍ-Ӿ ENoDfMOt! RO/4u i~ZgtbqF_1$kZ~7jzBWp' *=o b2af#dYc;?>U^iXӤq )I%O :zOV56tA7լdL׽FhM3) ~\XNEq(~SSXZvI_GT]7XfG 6 ,f۴,6qhi˱Jp2a}T\H]AY;ys~TztB IN4-kw4Ե:{o9 ''Vl5.GEm ٢O6$Zd⺯ȴ BD^Ƿjzs%"ՍViʽ"+ T= m%9TRYբ{Z^' de~NʃLxS:_phD|ڡZO{)!ȔA G D vp䈺\}[U5=oӹ], ߖys7 >z+ǯSYzZ?3XjJ 넂Y)I_r$rک2QRd4q|3|EWELH5˙7z^mf|탋> {knnVal}}Ow$Ax(EkB?:ᅴ~F>^}.p}.^m;D\M^39Kw3o 7Aoj>;N+3JźaQF+PEK<*1Fe/,ݱ&չ{,=s" %Uy&"DA NC J)H+\%d}00'{@֣r&}.qa.B|"]Lik敒Ơޅ ޝBN")T<eT9UҳLhk"惴1󉿵߶l0aZxﱩ01`>gQ B{;elP]G}l!B uYHdfV~,|TfJO=3tJ]H%9q6FFT \__ʞ_E^b{K> =n¦:$:*ƫ.KӻF/8zMP %xJLp?g|ŪX_e8΍[z|ZK`} jѸcC@^m%P'R[BHXrJ8aIӱƫ@K47а\Ҿ UCݐV+K6c 䲁P99b%AlRS8VQ՞E#,kSNm Ŋ pqx LL{mRj oz8.h?O$܀ᄳ,bto_R0hzNd| W>xA w 0&N K+1%?ߤS T'3Eucw2]QG77tRmq |6Վ=c9+kԉvH!_? O 9^'ָcܳ!"-P UW[XrսYcx,#+KZ,J) en1f뗠S< 2ڿJ'pov r0_gpGuL7AӬDhw8`escJ&~KPKA[s`W:aM`Aጕc =O'e}$K;c=_/ $ڞ')l Jf*z3x;#>ՙLx.mf.Xm!lNʚþqԡ[A7T |Tʤ*CE\+>l^Mwi6b>2Y 7 Zsd0kfS(Z1)"?y Sf+r*-(Id'Ad^vylcEFh2|* "  T)pg<1a[F c\k!u;L񰾘TwB0)y?r{ru3De웚 bJ4׳P,kv9=s;]ВTStby@eе>KiOo>,'Z?_̾% ^V*ߖ$dxn2k+ڡZX8d*c*Ӈ~oiF ~mE#KˏG3Dw+a|h)1ұ0v\ 5= \ ,=FBCLF9ǕՅ!4Gn W*(RPg9[*b=m/Y45O4S ioܕRW$8: b*hn5Ip'Ng$v3l\oQ!隔\ʺꞟ*&yb@霍e+VwEzZ _̦'[&o*J%׈7$I&BAIF#愤U';6_ƅS#T (xƦ'&]!OJwIQL tPqjO -E/ H'fP>6t{e$ßBO] ^OHTlA-@< _-JܨWmS띶 ܽp@mŦf&Rna4 +-#g5ڛ?V 3ؽL =&7aQ+DTʟ SN8|Ch}pPvKf_ZX' #ɴUwqeXSuOCe ȇQ$MP `$\%q[+ On`Mc.}Dk*'hɇ2J ࡭UUPn%t\2'e\V+b6Pu*t @*@1gr@t7({)kLD`Ss M#[+91xB$?Z9nF4_|wٿ 1h Z=4͟IйC?ޭdGU{y#6-k5`;;:i % IL;%1:kAA"uĚ3n@Y!)Hib^,xqq4`ͯzdUȇCH lw.7r%DVsG+?'M6gGſjTwn_H?3֖Urs \:3_Vp3_$` C ^Wb+z)AqE( Eb$ՅOsԅ o{cK[!SWo9̈V7FOSe *^v/{/qh-|<)[fE\q}ݨ[\{׭t͸u T`mvbW<?Xtwtn3!C x40I96Z Bѣbapyz+)(<*hPQ˚hσ8*N\H~ZK%"QT c_8ťP82ZvTZOnirtGئg%oq<%'&Q $3oBȯɚgXy| =a 8mC)h}T16.ŷRKs^;X9L|1QkFfY%jy|3Bd^w ݆7pZGbb.0"!N_O2sgCdt9 n$=_oq5ioQ/Ƴ~tUB?NMRoCU o8LzuAi&:@%);sXg6/`}4nYlJՊ&a.K}^NL_5@laJ}z?[VntfV\wS-J dY uSH]en)Cʳ۱59ˮ:8S`\ &7h2qzӘ&᭯J(3Y犳\0\ű6lqeulccTUp+2 Tٕ@d t!I ;  $n쩔G;6Lb'gWȋÍ VD\NO.HcjN[mEu)"Uo\|^.&Ոv㉮my-@a bCZ ;6ʺT]}n2~$kp͔QYF\i){d摛4Jm<9w~ ő˫s[FgYʎΈ+ٻ߸^`z&Rv`ʢ.1Mq՝aCϫ&:\H_W٠ \1qag?*LyCp hjI f|&)9\[;5SiW'ܵ|ՠِ(X"\xTW C Sq/ 띪eF"ֈ󟍸onUrg[<|RMM^cTZWݻ*xT,jI|sMFm#enO%F0"Jb ~(dEsd!tN/s ?K?[GRFuUqUqP.&1҅[w)6HmHƤ bX#Ϝ}KXxVooi=ta ľѽ\H/`a0%ڎZr.l_Ur`ß~D;q{AlǛuB֭ǽ{S)Qt|T_ ͔fޤsFf%==Ǹe{H3ee*{@fbu0p;?܈+vPHqV l™i4O( H(6&$x_\Q `;qcFJPt߈NScb^ w#‡8_ҬG[aruwɐ bj~su+m'PP$$+PAǙ,sB|&4cYAuyH ͟ͽrrlh@c)moƢCSP~T<˘N=(S5 F6V]xcQRv7jyd^ %d6ˮ~qvQhoG8z/ә gxhh9STw," JP?25: J\aX}S{5D֏;^owF/B~4Ntaohov33}q1 >J]EutfwoHgBDG(20AqUh:Z"quIZ5fq>k`!;m5x#4Vi|z:#PTm5#}bchP o%>4| TGm< |&*6FS,APJSA6בd5CZ <2kD>ioʑ%Hi'xA|NR:i,8QGPxcd>Eq%*|92#z{&)²vIzwg5/H*$4JKgJ`u[LE8E II|"qIN!5 A#F|lqw8A7hi9yG;.ir@E vG_o +6H 蒼#VePB+:h]Ɯ7rz [jF.t~ʸ ?_ru +htD{b7\41z˷ezJ^ĔɇdvR^uG?Ĉ}HXmc`~ J7Ck'fY1]/tMܼB' Ԧ>BPzР  ReGMQ(lw" EB;4sO[IgYA09ZPg+QөKb+󶫐! +sM .k<'Q Q{,w&^Saؾ ~ }2 @ͣz߆\4Bae͹;?l3jDܹ]a4r:C,ZW AZ)z"OXl+F ŝ'ayRH!|Аں!V|Mv'+}I$c.؏ {gPۙ}(n@o laϕ n&s*iOuTI /I1 T*'m .>t 7 ř|蟃N;۪욯v-ĚDD9[Gnjf`/e4㛲 }|AwxATZn1nszQ7u qkuybsot<ȨȢ| 9Eoů8B "ݚ4zaN@.1IJqa9Wng-sP8_eW.P*pjΕ ùOGG3-g4I*1.+tZIE ''֔ܨexIoI2iwwjeViQxB!Ch:gy$KY,eASPWW˕ ]f>;ٳϢ̛|۠-3$2BQwĆ ˬis8murf=6NJ4uQ1]@"9^WR"ϟQLEc1ThN+mz"F-UfC5H3U+ޱ0ZτѲ@LJGlV 6F_ѵtz_f2v|ցxdYABe SSYr24 ن)L HH-~|]k0Gwf${V@(p&s+QPX1 Ş)u<"( yIl^X®aRߧy҈r 7~CnB(T~Sj a0Ze|ڗ޹0 /L8>Ю%Hh7 !֕R"tfN^a$3ӱ/K7v1U!jרܫڐ%Ea4RM#|;*;#&T۫WBڵ$D߬>"#QϿ4#&9Fi^ysMX`kVB)PNP%3{V"c^kaq!I6UҴ),}cB!|5_T" K 23Z O=!giᢰ:-WJ$y:T9Y*.8QlAHճiAx|TH%L86)R C_ U뽖ϧ;Sy/*زawgԤ>F5HbX4NBFLfJ<15_T_ ּз^ΰ1fC y=X % +*ɹK"awWC"<W,#zzjq.,)`k'ED]((kxo {pU>&N<bo -/9Sh 5 >4@6߭}4‡ x4ሰ׿t & ?r'aaPB0UST [. y::юIh[$>{I)[qi]1{n܄n\8҇qIN%s;뛲vts/,/"R"Iү8^fHh.Z8.ݒ^};@yrAy:g<|'\߱9D8uW~=7p w4Z:"CT 7a64zecͺh=L` BvPIRFֆJh>#D\~MvH&&H&3yUQqKg P'PZTAlOUPG+^훦%}m N_GMS^4q[4_[yo*g>-v@L 9X`ID*+vXGϷ:No$< c6={봹d:J87!^D[Wfty^QS#_V\Pe*2sK5<]X2sH'=E 8*fohu`)\dկnMڭT-\ʚ#BL6'BR{2yCƋֹg0`ŵi9L=Zca62L%pnԓ\nL)<x*2~?ߛaQ:b?3Հ )ސ@@O ORM8|-dga1gSyBM2gw*xa<ݠ TNɐ-3*=&G܏'HAH)(念J)Ű(>OuKm5>Ĩ)Fd,ێ% ԰EؚL˚?Pq<ۂR)n(@V/x ہ Tb%h3O2r,ΉHJz}AG)NX/aȞF噏ߓqR*IL.y04r!UD-|D%H8Kq:m6赇<5E*d/>;N񝏑"usLm/0jޡ (Čm&s$A$T?p,‰!V۟b ]͐Y/@7(FV/„IY_& ǷR?+Ix`꓿Aa)h7E5OUpw}o J)ndK7luiE!o˩4IQ7?)ݓ_Crd)t1+=?uO\Z{[><+O`wH)51/ E Ӣhpi#(m@L5̍2#A9ncct'c5G>@"Ϯ#K/ieֿCkN:$k[H ߇'Q.p71Rn Z$x=yR%spfgsaX] 9D?ǧ©[- ?K5"a` Is2%oE=ׇxVwDK?4g$DN '4rn6dP$":˛ϟH&SpQ0lA8UGFhL}캉N'W{.*MHOY`1}k c;\j\6 +vS\hSFꢱ-mF70SR6I2u-Ðؔp7qa6ߜ+ p 6xrB] 6bzPri"Xy;$~}3pzw+C ](.) Ux.Le%yxe Mju٠kwZ5mi ^h61 "W'R޵cl`"kD r@|Hq] AI,7_~,e{q.#p&ʟ*zV}FaJbnF.l %EP"lrqy$8 a)"Urΐ8# gJ Zmw8l$ 4S0ZryIA"l ٰ:Sn cN@nC;3BŘrDO{/jxi PDhA4Pݨ~r3=ZOnؠkdzӚmw=}R܇= W¢aC<̀4Ni~v}tֵke,Rjuۺ)p6fqĈ0R>_t3@F/kw<@N&OoV;律7m{5 ?1fvI>ϯ LXݟ]qҢ78>ju0ʸl-z.iraFf}7˿yU!:eRg^hӂO"usc>!#v ͳuz"ɛzJ)N!]~o6_$0s۽4B Tm)|C4-,㌖Qb4Q! 1OOrwNU6 F10\ҵiG@@> :MM1@8]#aۿ6C*[ 5Xa% ,$ gJ%vz>m&nG0Iu Si6^N'mog+Ksd֋A4/bd$//!l̟(y3i}rFllm.ԓ,g: 8X^63W{'gbxRW2AVs;]p3k'1`]6 |盷2ٕ}B`Om;Uz5fpdpeMvot|Mj= .М#0 vor%=,YiqbwG^`IA?đ0 wz\S*kPyCujF pA ${ْh жsб'^y/hfNX=Mpr*3X /3v\?O_J>M DTFS=xty) xWF6)/)  3z7&whE*NKnC,Vt\|ږhx4Md(T]*!WPF*- 0?ŚIT>a<MgMU߷*g@¬ 9l8.wt>Aǐ?jo{Io̍YSgǑ=Nqx!-|@Z]Jq<ש B%T=Tz%;=J\ήZQ6\hGӍ>l^nfuʏC۔]lƛЕJja wS6DѤ EB#+c sl^+\Y'IJZvŏh9b uk>LD3'žC]ޚHbB9&Mi+z#)INHTEu`, :]_<~|fFQU %-HQڤʘPe=%B!bgOWUjsuÀ|Z}ior ϝ= ܩGѦ"eO4g V $`z) lKq@e/Ыc:@6MVoh_NBͣw  ؊/ܤyrBIZt_>aYM,OЊS;W2[|"*&1+*f`B4L< Sz%&mF$+O[&S~_¢_4 6.|2 {ݓ})T3eA" Kb9kX:˂BPȎڃV/^ 3rڔ\Ǥ_ϐ>o;?eu'Gf~Ȭ=s\qpq~Puq$,$1¹Rg(r޺EXC aAʧ\M8XXoDjף7D>@ ?:3yvP *!d"W]ECGp[c Dfnq)܀oUZ^ک2MgjNxT[vM[&=#j$6=[&S!/1yq QġזJ 0KD 6x4_b|rݻ XMPw4ыj#* VϢ@k&z.G*2S!׹LIc==Wbb]ur4eʇԤ]"1;ܔE~.kWnLno#l3RҲ`T+soj`T~KKlY?g'A2D]L3{ :Z)7Dv`gg.hs] L}kM!A֢gŊl6HفNڿC 5z61vF<*{ )@ljN )ߋ\2'0 ~`ƼB( )7>h%l}[oSU`KD]0N53 U//`y= `q$ւQm_<\UY^' :[or&ȧp<Ϗx.ek\z$S96O{)qk;j]G@YgSw.Ҽp&B9#e]3Sˉ1ANl:-Luc5h;o|^-p+-p5-[fesW`aC&<꥛7`ƣ9ywS76PA1:^s"ljioI$l a >HkK: #]x4{M”K̑~jwKYnc<&ЧNox,ƈ2DxLDlG{2Z_Lg{VI5saLIiIVTg{-s;SjIJ>Q`Ĉ+.Qddt O&b+%eܚJQ+ C։Y=,4 u 0ݧl˞Yo6!+,W>m{ )US{;ĉOG\67U:"e( È|Fw|+X[0ܥ/䶤&U"^kpKN 죿 ϑkg,Ƶv0Kv߃ (a6x?7犔t\`Wn1/`Sud lUrlDļ@tilzfWH4cX/ܰ_pČ/Rvِ:PAWD$`FAU]><; kh~Cp`zF~M)1B]PwZv HTXE3ghų*gW;MVɠǶ~2W[ʝNxss.,DоZ۩4S<řh1Kcq}~^Q*ЦߠBk_\rj:1ft]v%Л*wɴ"qMc4@ jYav$ P`0z=G+7j0ԤwB?~Ja7uj0TXIoj8=G3G̕$1+#[q@NK!3SLIRy GMC`q]tӵ ~^6"s7FhSEw:xDPv=%Һj=ICڮo8& 1#n& !#;AylF;YT9tև̐4 cjh~~N{0E0*)a",\x8=#D=}1!u͒0蠛 ҃_J^`2_5A^|ũ3kZux@73f)UX݉_׫7 =yo= !M`I=|Ui?&D\XRB*\ʛ˗dhwS3b(Z8'4ʃ!@Eޖh$VΧ)/%+>]hr17>'K=xX}\ I̻x9J~j?4ǀ鷧}Y{ -VboqC4b=TLYƁ LʂV. xCt=(LwD.0z"QĎG1P B7^wk]`W@5#+x#\4KYwÅKC||Q=2f9UHB<>Fva,qe(!~*nWOmsS HCfPYb4N;Pe**li=z&T+Y}z)l6D3`£A%;g|wI!Ngp't&/һ*Y#in ,8@⨣7ZQE<Єjb ]IoV}M4-.CG}tN@c=xJSKaX,(6+FQc<.~ ^Ct`I뗅'$?!WɪbHXg*}< \^_F*Uaq= h7T-ae_x5\  (Ok%M*&ֈ1u* vFg73stmVTˌ2Rͪq2wV/?YV2pN}A2c)<Y}5Q)@UVN[=&KuJ8 BKN$*FޢM:b y.ĸā^F)dJB6L8YBocʨP [3:k㹸 WOD%XaL%?دt%W*mi 8ZeGߢB鬝[aE2"(ZU*;!GG׳cO7#{r*2͋Dj% ?GփSy c+'?.MD еTww;'F&)ܶ mj!;b?QqhcríI#Nei[]EӔ5IJmU@D pwS]jjx_&E}Z@&C|9\*%5\,A,,0&ZX.ZDZD |!ؒz$4̖㝶?>K]r!ӃI2]*QZ3EЬ5 ~-cPv~&Ҡ$. %bgA 7G1}B$8 ֦b>BpTj;!b[ӿ#3#urxWM)f={֖bT#wp;6 EmI`L`a>A0o 55&'>0D 432Jov9 ApCiT(XדG*{>iT>U3/E1y+T@k GtvzJ#̚i|KoqD-!rd:xkVNKO駿~D<"ҙ> YSrB| =6a'Hs }g=Àn{FSR,C^G~SV7gwXᣕG6&ȟP4R;0HGesfĘ`ه<1ԉMbٷ. eXڜkE0~K2Oukc5 5SfS$-fnjeq=a37L]!ȏg\-]÷zQX TjQ"rWsgP0z QV[9)[L{vM7g',)7+K cc̅,׸%o7>(HtԪvnK wuLkUlܣ(5jy"z7t$[ CQ͡-Д ;bh{ cM8&?7J,Q)/6x.ZV+ 1 2_jn M&JM~-pz.PY1P uuƟ%@t_.̩,/p'}蘙~󛝹Y)AmV LThcu3.e蚘iۈ~u z~2{`aJB^ w2k[j;alWTCD!4Yצ2(z-T(cA'bk|yH yo N Ev7=3aer‹\ccE|uQg#:j813ES@3auoSdh֞UV هTH֦'Q}cMZ6Ү1Bw26<]4#:FLSoỀ7N6ܙE-k ̢I:s}_ݷ^;u \1 }G&s+RKD}pK}c|Jw]8`NΐEtx6I~/ f:AyE@:~K$AފsJ# ~VZ"+}+rTjh`^df (7O^\LLɢB)>Pħ1Ʊh 调iV}DRfSKʐl]4W/I-w-]M輬$^  Etv@W]Ipj DRf5s#$:YT\=/t0ܱJ XE7] zoԩR}Ľs /# ]q~<\q9'E{s}yFgPʯ_NkMS Nza#Z:KO.~ۣȍY UR ~kb,U_pij9?c-,C(] ~ m0Nؾ Wu4z[h.zZv/{ճu$% ߩr97WmoSpZ v[ke&ZZmX(=Xc5! Py眹vV u*- "i[;})&on"xaf`ɇ X=DILji6{ׂ<-c܆ӥ++&&mL,)$Eh921K:?T *4X\VNC-du@>/)mU\#C̔ٗ2DZvMSB)Yj8sц>8PR2;gxԤץS!ɇB Z-'9Ryϴ;OuT6Oqw.Z68#_≔,Ĭ`kؒ7DouW,Gq?"ImkƟ #F@+ԹAi F~ h8F7/`!oRae&ͮ6Er1R,;펱eIhU 畚(Ʈ^ˣ 7[DwA\52On7$|i팺sbQ 0IXO Н6feEvLwcTma9T ߂3}OAM Ǎ5e@( ʫo` tlUThB+-e6{_+#5X%~W0Ehe['a}$]UgkKE)Y3pGA6kg'̘a5J_dw(G߲ѥ˼ *bЋ%#식? oap֥VX8l&3޼~?Kfv #40] :OPEhU pWrQp"nRSDޝe;̱&F) ۼ4#X؏]YQ ,yF-yS4nzsMKS)oRsVܳWT 43H*P*0\l"VťSQ!٫&L *M3RVQeύ !5*1,&f 힅ILHPcn ߝDmMS:ӳX/߰w] $3{Hg*RJliĦw`@bRmiT#U``υVF*XѣTQ2&|Ƒ QևÜUo NvMMnn<HZ̞OtHC[)P 5 ,{>[M9P$*'2(s%ҫ+Ix˛ OC4%PTz! )ٽzw@`rYq!;#r["Uo!2hx/j[ G y-ؖ?m8[;&wj5{r)xZ|樌K'mxI]{Ta+(hR ̸8~,tuٕW|'߇a+D',V,xmkg0}w CuK#?0y;&лZB˫Dg4{g ᜛xAvǞ5DD[,Jx+t+p|VQP11pNwI榘k::H"zy]ٻ4Pcl9f0te34IpzT?<ύNԻ#_<p]Lphq5kkK==bbBerN"$9pk;losIsq;4݉#VrI/}T6 > SDz"]_Y^ Wtq |G 09rrk m0Hu;|@kBfw88u>c9Y>ԸkSfx06ǯr˹W&350AIZA1A1C:,j8`| G=^x`?\=4Vr>#tg8LjH6=m/R!N-a+oDt"Rz9P!Mao i  ?6t}tHBat=7pcW1iAFP -7s dTt{%-hÇV(N)+Y{ݼ.yKC P RjLJ'ԕ}{)Åj714VĝI63+lF 6ȰqY'HV -*A$gM! dXAg/OPTLq+3so zxXFKێe W̠,-oc<"& ;8_%-g/L3!'?5ĐJ#+ `F gQIk 7%{#d ؏G WH5A"t*!P 1j ;v [vu34czA 3'PcvP^| d8mɳ-8H'y48 _{-FqG ,4|TdoP= :,呋%_z2IӦ1(ZaHl耬OKZJE[ZibV+'`9 Ɲ |6h ѱOxÉcYm gqgaMxnڑ]#~T)Boéb%^dv,E E)칂5'm%w8tӂdg+)KPvZ8]8HAlmO6YpU?&mQgml̻_~X'9 e &@R lZ"O.,,螌XFK0b+BҜ~B:0kt#Rˢj>df2@ڧQB|A-C25&FDBQZ|qk)KūJ G=]A_JcvS1w"]ս,CS< }dk;:H XRNؓ1a]b?gY?Qnw8M8 C Aɱw)"t1) 1kdA[{7!1,9z Gڔ;X G$D1Bo#"? ?U*~Tw{},2%=f@~ٍTCODƄh|9$f\#&{8hCӥ%v^Z\p]:|k91>Sw۾,m 8Գ7[A^8:iertbh<Y[3o,Ai"牨wϩ쬘fd0q~u;q|7sz`ŋN;o}oX>dP163ر @i!ŚwЃKd-=X, ͎{wҜ~ZmDza_a8-I8# IOL?ӲQ_I `vvE?HWW˻B9Vv+E"UH͞%QPf_S;ӊ[K{?V$\=1@*zN8~i-T_R Ï-r*(.qCK׎g}^0d33os`PS>t@}GlyW(~PŬD3)6$' iTƞohil*+xFN0j/PdYt8э4DJa`LNo1F(mnCp2GA_CSxke)"2%•>(NgVF @/\lcp#bՋe&LA|KcKyCdđ]M>ղs6,dSdn{g݅摸󯓴mF۰0=O"X_|e߃cMkEU MGf6Ԭ^gI{nfJT+EV3TayWƁ]$A(\,fҶW^WY[(/ p0Ơ3ށC~Y)×gS-;i>[\^~E7`?7#&Fk@F'L-f%nň-)-EU|T{ 4fyOj2iQFc.!}y @l)T w)i+=1]℃XlWc«`<;G|a!Uh0-03oP^ _w=ZR':`P7 Bw > H3%/p~ne/"# c$8/-m0M%3XDVLPijz"OYsF)b%rFRFyv Z^F[׺S~6NH=ѰK]AFC,F@2AWH8im#"Ԑ[ٗ4989}E2Eh];JtwcTJ=VSDH''ۈ!j'!&1iGLv,"W@k:#kmZ1[^ݶqr"WRF^ˋkfZ˹߆+Ӣ.>Ah ͜E#q ~ь8#>̲>HIAϒ<ԗ$WӀM!|AU;01BC9m#ЀΔ4 Ƭf!%- oP|[jlw#yR4AUgNy|1_ajߛ^+|B!Z!@p}X1w'sYH, >zg>ǧE`ٿ0+F{uYn[Iڻ rdIzGwΡZoUj+)aih@,.u!â0Z唢n~s! W?Q̈Ly6GVbV@$ T`wL{;#G{CcE؎4kSwEl akvb{P@T}~NRbrN1GeL Q8/GoSD/0Xz ? x6+y}AB&O!#`X~ Ir4Κo@ч=\YRqy{b?9nMRlž˗"\$IPK(#y6 },3ʨ~¶kLNE6RD#"oWPm1I9rʩ- X=?O{{~c"nƼBI@ DK('hFA p_WT*YB'IJ8AqK0r?"/3ü]DzUM WTmX;bun V>uOc%>{Cex@҇]CzaF)[*?NDz lmHƒކXnm*0nP^G!8R)"4aC"Q:~G"8.a]m3&pϜSSytCjy;#xkRX Xqd/FVڭ̑3x,2 -.Ҋ˦ں/> >frOJ-A[V#  >ɡ>0_s]bz!zʼnvCǼF38i&b̭#kJ=4|6$d~ٝEع- smT|췺6P$˛xƣus9i\?_ʷZg!\w#-9gL\V[٬r֜.cÀkZIecЀLk7ՇTBՉ!Xyz~_"Mc",$Ei{}P RnB`ĥL$ P%ֱ Nnm+Y_o 1k7R04={MA//x pW_0W%Cw9h3 li=}蔰F|au RrqǨ0Dl1֭gP 8C.ichTؿ&rKȽ;-sƖsҳce^?kg T4c =7kP1_E! \¾5AÓ͜]|)j+#t$ýT-} h_\3\*qʼ d_4]XwygmeghT&ZS.39;/8 ꀶY 4ZmUd;Kj?$I pF0m1$lNmi}2W$2;#guK t I&֖GT2܈[ ;q#݊_K]~w#%lxxiѲ`ڌxJvjbW}^–tGS L.[a]'Ó3J0MjLޱ@h&$"D%Kj8OvuoCgZ(컭7Q)ժ]Y^B8 \rV݆~m"W 6q+=d-vkbOщ.tc^rZ@BSK f0K8b{/O-g2pT3 5 (ko"v@:8z\Ui[㠧@hW5zDz7J~YYE 6Z .3 v((`/$i96~<GlA(J|f7 BK9a-5s cBp$@,*vWM8Lp34'^ϑ^'J ֑-H~G7b\ak c4օ +Om#.ھ$~J!Jp (Q ^e %a$:5u+*N=yx† 1מoLԯ @a_JxRI ?m U'jfR7kh^Y4v٢\icc/͞j/hLDtpL20fڛF85d*CcSgf>_De-ڒ>L4:*Ԍ9x ZϨay7P Pܱ^[ B kwI(yFM>>+'>5M`1DmJR V(^[$G!G␤Br⮐01A^HW8U{mq({P&wet%.u9?4 )) !OQ<#GX ?2#FT]NCc ꍷ)fk‰ȵ|[@zS+gq{.iJfw 5N1ӧ!宔5*cvq1m.of+Ds}ɞ:o.@@s(IRf2Yz/;$.=t3σ)Xes$xq%zF >` ~<5n0y2^O8.(~\̡r,FJϒӼwD!I6r> u#Ũhkv^^An.TT׶[w$gLU{ᵫ [$ Y-(В{~]\__1ёޖʒ8hL&`HL_D.?++EmAXmEUl̗"B7 ƚiRQ#Ez]PY+?/aѹ zJZe޳TH:\$]͙K=PsN t1mwLҩp>͍Ir呹{7YxM36OYZ+f\r:@}`^*PQ7?F2Sr)%lCKxu8*:WX)[H{tskq'B<Ph&5^7*Q}W{< َ{~7k=|_L[@vUE?i7q?:g&蜦 ~PO9ƙQ(5In(Uω&bQ8N'0d`|E}V#\+RbIJsP`N|ѱ6%*ؼE'~huq:-,Fog 7 w&|mtㄎڳq%X)$EKErvv:L4TzTL c/u)>2NJk,YlNeFlMmWsT"xFezM%gZYr #js-ӅΝ/f0mIgѠ=cBp2ޜaf4 XH fvP+5Lov<2q4&Vh(>!&w~Q k^e0]ZNT\*V4G3DN>`JczAƇgHUd 4 |rZ_|Sr}5'X3|y~2sh؋j[%术Rb,cU),i{a%Wۉ֓Ngn b_^óJ2[,Ή?uWQRG%΍i=dSp jn-]mZs*nʞi?A 5y",Mfi7Q|c 6}M|AT"xҎ@~W 9h#t-lc[ZX'N=bpltAYQ.3<)IM0`,x`h_-;W^(n&6P4Eak$ QL4νkK2:Y5إتP  +gi6r*'%NT"XsAjev4r^١s'1Kd8֜kulUHg37r7Hc8![QO/0&k<_mu1sNt\1gNsz|ߖ]mchCȯD4ji\ ln/*qFtV&:B:^%'b:X1_xUx(BSu MJ?-u]f~k< Q[oCZz~idVN1xK~gFSL. >ڬE`;B'%zr6'`öJvN ny^r߮ε^-8J `Ѵcc-;Ka8Q!vkbQ43EoN]vB_CYT!mGG PU6?/.ybp]Gy"H '_pa@VCR&פZ÷#ؤQ3pHEPR5;FЍRE&"DԼDIm{ [O4vN!/|<߃UMF~HC Oɕ]ГdE!xG <ҁgXa8Y#cap5]Dz+_:B,Al,nmDhJoXouxq9;?6X\0P P|-3PA7Jbv Ԥ8 b?`#)O:d0NL/Y⾱Z!ؽ5hKioUx40 ͨ%^'VE[էsx)R#;ڦ>vA'Alݡ`]V<^'9ZUIsnд![/;HL~Yc?]HgrD@hل@9% 49 p Lw̦s`N12H A=,p؜ &bh,ڽ%& RejHduzeDDPip5g!cE(߀+8)\V,B@ dwP4#Dex܊a,rwiIX(982M,YZl(`&P"CL3^b n8T)!7TjɩnmZTq"$vߔ! J;fӏ&J\ǗdiyooX~ia33caÃf5l(=;]t4(&xTy;=ܲR* 2 "ijz4ж4ަ#|hbwut"ssOobcl#TaN)-= B{X4ǖ D #uKDw™j:g KYSI41O_ Fxf MP!a!)&KZO8 +4=>yb9Ibڋȱ0u.4G/+&zeU VD()+2. Re+S Oq%jP(^cj6[OvF9:~6 ɱ<1`QOe"\9/Cӓ LMhg DcnOzmwsZp ҳHER4 tŒt5 49hIBʢeG #t=Fa%ƹIݎo#N۔}S9Pb&12•eT4zCƊ? ?r"?NB}Q㵳r Zt3PI?jL,GHc>78'ˤxn˨ֆ09TZ"%ATZMu\G810#?nŠ`wĞ~=n-qdq+h?Z)+P\>H~i0Y8ۨ x\w;Ԁp8\-%s@ օC?tWdl,AfQ*CϚӟ)=}˞)dmAg(3@N\_צAB/}Df0."%#b;:>`w /('- f& `\"+7В` %OA fO+V]&4b(؄%3id@B^+{:e9a(1 #6|c y0 i5âDM%^@T9$`WLQw[tziݯc{Db ANWEK;8%3Oak&QD1CT CSז+I!ž~5>A " ]+Q(OZXnFale{öV),AbX`&mSkȲE?:=\S"/0wy}uCn@ 'ޥD∗ۏنsIl\]|FtU] E\0fu%=d|݆xЖ$Ҽ?j6Vc@aYbΜkvp^OԢ{]Cẻ1 phʵpO|r8gڍt(aΒزӃ K/89WQbfNQ(@KHJ#\Tz;} B.=YQB*zA#繀zYZ>U5 sDO$Knw@R t;`?nL^Q;ks EzI_p8 ?=iPAKHM7ښnH+R-M*i],)؂ag9_}>o@%&~PFmO;^$=ԑcjY2ׅ:1V?"XkdoN[3Y\L3nKx@JUoj4F.f^s5j` Rz]߮Ox0YޢgPѐu;|}8($n&) }޹A!h(tS.84k\]<;"!, 6O<}^ &?ǿ+]`eX1Rj\ "MUP Xj kL@A}RiV+|gWs;7xMYsT讵&cv(kSBTY) ).#տKʫn*PҀ} B-Wn[:OCGQפ[@I*KyN0{S_7R awy5MW/z o1|G^OܿzJQ'ShjSM!UYј)l3Gv\ӛ;[sڿcL#p?J JPt˨h,XaJkZ"G+&7_&CM8YB*$ka|:),w0Q0O"4yuH t\N/6 Az=q* a|?i+f5r @b/#'22#ic[!d+]ͿJ7 8,旇mè\bF' öY/Wh tEM% I#г/oԖ`9`iEIJk^s엍zSآ>.Imϰ3.JC_w]|܎BPBZFUB9k ZzRMfz.$]K+FO!0M7 ? #fi|nڱ/> ޒ= ao$j}-] Q1ֆ\Ӑ̭.X;^R?R]'YEE\r=rU79"is y fF#}dmM8ih/D:Q%D8ȼ䤌v3> f-W+×*:WefOngWC)J3~͞i aሮ< k_XX]w{6綿I b5iM!(C:L;SaւX$/uƅ8KlmpvYyJpdiDLxf95|uG~ܛNcMy N!0pk/B7Jq#_V ۵釞vz z#63=G%ߞGDV"%amsx䌖 RwXsiNΓژRP UcO h.+Jd%^]X38}{Eml]hG7BOtu2Wu_ZT":h6-R{|$e4.%7. aw9aD  tsK[V>Uk1'TaiVS?ϳSI3979c `v`q"S3}P 豱3 fIÞ\.<--v5Spe գz&pXܗŘ *X? ]3YHvr@=ssڏ%R6"^+邚4̫(yf8)?I x۞87bv/H3%|{^dI, *@z[z%?J+8.hQi,v[=@X ;{(Y}$!1qT|!n~bWHa6Hqo+_=<Շa%f5E 9Hu&c뿷>=YR_U5K\cF{ 5+JWCZMXt}ߝhK-{OPT3XQV5wE_tGn;k&}, 9OVoMLН` = mlڡdEWhKH25iv$ [&޺I{UBRfM=}s1aU7 \~ )6QSw!l9Aj aEmy;69$&#5W i]#Ә-n^q:c_pC:X<ڭ哼=;aY7y*FZŔkЩG'#t NGtCKD{sB_3fz_O5uW!~fuͤm}þuGIvUt[V]g$xHuVOUs·BR`>q E@r݅r}^d?؊(w=U]tA*oM$ؗ{Jd.ީܕ}O#G=堊)UnQJri!|g%ZV}UTnh]3a#t<y!!iQxѲP"qQ2ReVZPr䤳ʮn?N"/96lmbhA'7E]2+sըcbgžʦ_w$<.(.Onhpnċ!QymopKCA}q/.}%Sa6Ƹ&z(aA2#%5q6 H5ʺd7c$q/^GD}GC 5_MaYbب|nNo9*Xw1M7YPOTmaʳCTj.ʓKsx&25|Xj<}L4e}-6p`ck8\_XW*,us)}cbʅ XVL o&J6ؿd_}tMLf4 A+Dn_u~G\Ph21?䚱aCu^4b˄<|6}$s?c1`ޖ5 bEVڽ<:%Mx3 ~c;/x.͎aZ(aew@1ѿjH`j.jYm,CK3r'0(v|]a aS\K#+,?pPU͙2bϽS cUu`6lCnKejM]7BA9f<3Dn /E} 5dZāD 0_M˄G&<:PxTX2SzB P?aiFKlYgĒ/0+?!&Ok ,=f #ZBO?6XNt .6ʺɷMpKƟ&̰Z)7hX HK( F,yLd~WXH:h3j $u RxXӺ˭24w:>/NKL YǛku4n&TLMvK)?;sڤ!-%0yz,^^je(+G aEuLP}J-#ax4Hy 2fX9"=2y)@mJW] \x)n%;8,Ǩ 4.pw9@^Ca/mEa:^bѦzO[nv brOsu8iMSICn;>SFpk跅ح#2rB~=JƧ\nibfg8-vTJԧ#'y*.xo6Z|gΒjF5V4'wuu }]a.LpZk^G x?P}:5XϛHjU/G!s2Y7*־g|[3~#@N*Xg[l eFΝEAkҦ!gPN1)ʪ8yɄ5CպW \2 Q5B>Iߘ\T:`2@W*fYáO x,CMG):<>(ІAxa$+:RB^/Yg%d91>wNux6t* ?u:<኿*W[]CG\d'}`_ű_"+Ñ:{;> ym0lvѽhmYh?>Ҥ49a]@ً:/.(fWvN tY]#IQk>#똜 'T*f=8NuMIېA4Dо bMLFae@Fѡ]e;9{ ?s'Fg_vu BFQ|yoʮ@}i>{j4C@k}/teD 0#u t}pqKL=<6t6yOk恝4gO%3g)]wd9hS"WłtdR\,Rdx"FQӅ)U\m9c0Ԙ?.Ζ!z6s[T^or)e&vB4SN2;k-x.!8ց-L D͋Tarz=;zת cd$r.HË&~9Р{hՆi+!dÃǢur2NG-24l-L]yD; O+C7H Z2 ->nP?u9~sLH1E5=k '@\֭ݍa,:h.dXґmG+7A?(c~)%x& 1R|sGݴ!`T=|T}+1IGfKUWcuT%@*5 h=63r7 ,n7!hZCTۜBL&7$;Գxܭƨ ne!׊i?5_`oy|鏠<80%JX' -uD4n!?GǙrGtxɂ\ +Sk+\Ef}a퐛s P n@e7jr$.e tӷm镥L?{fv~ɖ{V (]Lr_?[YlvB%YQd_lxdtUDh`agQx2>254<,g, /eΐ8-h~GƠDpq;# 8Q(1AE"7%;\;Wb 4?ڹP;9>`2<#mA$|ፄ ((=7S=gA㰗I80sc{8W9Ƙ[͔3gdo ޵,I;{$}fMRqrsM,Mѣ@ܭûWd]~+C}2+zu`燮XժivXEuQ:Dc9\v|ƾD/ %rc6`|XWg9!.`~2 >PT^EҏNpm/zOx h^ Ӽ{!-#iw<(ypgJic/D>T0V!fb.'ǜZ-> qٟa񁋟V.fj2 Rk҃ዕ=C4FE̳r6nCTZ.}}VFvE2n#046 J3I i%/TB%+CKwG*0{,D}KP ,4]$Q@h_|>Norf.$Ue$!Dq?̷7*W ~Ih~^3-[kBa }(.V,̱Wf>3+Ubckî1QJp.y(`7}_c놥}Cm\?a2adH{Fc!BаLnkd7Qh"A Vru~7X粲 M5>:TŠ5Ф٨BbUzPzׯ D vʓ*j㡦ް~Y^CB8IH4ae'ql{ci6Eĉ4S&7DNqȃӕSWWG2\A 9JT{)j0˗mnǩ}r: DoT&n.䘛` W8(pó&]]A 4mD6jϹoBT$1u[K1}R \dZqDdTP!F}$=9lQNtLVcLeosk7oݒ1g)szɁUJ- N ;kݮ:8twa$ⲋ@- =o5;BIʊMd &>q}$UpLP۩3_}o8:5膘W.kC2)NޟpDW\D4)l/nAc Eiɲ Rva#hM R+^k}m=,O \`{!&s_S)i߾fP%WPs? Y" iLJ0ܸKF(][uo$ TctCPL$si!2c q^vOTDD<[v3J(ot:s]w1B&y&aP p[7}̈́}ST>r6T4Xƺ3 )#˰+{Zz3i\ԕo:G&rWj5^%>tysfk-;퉛sCHtF߶?98\JtRRb  ް2aQ{)/`-_XuJ,$hF2NvVWZ{)JgީCv y?Z8T~ÎעKsBIt*::utٻ;3TX.[H!ן gfaI59r2jЕ 4a*uCc) >Ȏl*9W]yhcI,nu.J#CE1E Lxkԃ`D%A1*?z2/@,+(\)Pm5qwR7Y2.l'NV dmKr*& ?jTL{9WA4-Obե3]iutO͵N+smĦ[ɴC%ʔx_)ɋ%ᅐ)Daxt4Luj"Sx{ EQڄ.y"[GC쨚K3c x}w uaGb867An4ŷPifr#h;;$ 2K[2L!f'lz%G!~8gI[) }=EC~q𦞔ۉ\"Ԇ$[EE|瀎 UB2i?8㛭#zv [o򮙳͘i-$En32ԊxslSH^Pxh 6 Ysm5eQbUm L HhiO"NIjS,RLXwJJӜlSSvhvEXvfuBKy@׃3my f{ *5rfxfGHqt})pBjADͱ*73kЎ#df?DDZq#K tpv?3DV߳;M|c76Arjqc6<+Jq8ID(nyk0h.Y]փ6qۯnDhX_IJ dӯfj$=4I %P"u/M\ȒHZy5ɫ53o0Hg[^[w]уjn8^1 {&+" _@(U8-a!(( ]t^:"&jgm_Z6}YN qZ!6\Y,C-S- 2W׮q-3#A޻xdBI)73k<0 61:+xJ]?amĽ"ia`'زxxLN"TŬR=}i.;euV(3̓*Һk5e  +j@Jip(X„I6p3D/a7$JZ[!4ަz$7qLKa/RŞCzx* p.Q9PDKЯyI=CEnce( f mNzEUts'Y$%*O9$ >.pYuP<@%bJt"gR I?4b]t6Tq WbN=]9(^ G|{!qdAjnyIz80n@Z@` =zM #5x\0Y &te5KxQзvr%]_p*L/U&>-;HyB>ϡTT2\[bh7W4䘸)VF +~Pg$;η#jp3c|}W҉bQ3`vrq+VmDq4 WٖHNu_;ϤB QCLVИw?.38[ =So-IhUdBA!Y}]}s$I0%/ӡc8Byo|\hΈi3E> _r$3rqvĜq;U;;2*\7aHSh4n( :+iztkf`)MviKii "=;K>q e#*^cX k-?_ >@Z? -Z "BÃC_Z9r{f !Ҕ8OjRtMx&5+H.;G;c:pdC|u|+mly&.,]KHTW(TuJ jf'?5.xJJ 3e!{쩬 ~.͡ئJjI2%"H*Bp=(vٕvf\ )mHlóXԡ)4P8Y]Ia4.Vb3f|rNr>O4ب#TI&O a {Ei s:rRE#;ߤ4Uk>V09.ȋ3.h0kz|ӽ9 s#ܻTB. ۔=; 7_Eݬp״o4mU:XuƁ ma3%UF]TC.(Gz|\#d0CG#2™0rO$١8)x%á8LXyRwfߢCaP8Z7[+T#rg.,Tk6$$HJ;jXԤPO׼t=ǾXQ[( /7dx)P"vA03eK-l5fU>8^>##6Ж_iEϝ!%5! ]doB;$կ 犯</^]YR]{MTul)!_u%A4)opS$rMrG_9AW}kXgtg '<O%:&BG[_;G$> zʹIZިmBe×:8mxlEk8kC酨Z6x+Um. S1y;餹3i'oJbڼη7uC]O%uEV ?0|.഍4<~ D&2P}~{Y36 4$'0Y5]#\S5{{:*L=RV͵2iҷUt=bala5> VW< f;ۋ($51Tn('h(5IH<0'KgB9@?\ sDizgMNSn}^䄄 ېżSXU[ˣԟi]6-Rg9zaXCR 2!NJi@b0ٕφNeY:.3 c6^ fzX8"%5[ A{$F t=,,쯃šuܝK_v&"v'[ğ3CyfZpBl7W,س G6ɄI9kDhFFL*օv9G7_[OaE~̔΂ִ!Mlh(N(GI[&/{$) L)CjvW~&Ėcc]JfoQSxRkIPSߓwzԆLq6j? |}?S\oI-akS/Y CR94I#*v-F .it{yÊ3 kErO%'3BN2XG[)]!_@-WX43]#]E#FB\6}tN1P|spVG}{4UXbU0ۡ hрCif~ns5 \,eZk }o^@?h, 9Vez_{qQbrSG.6 WIj V̺u(%C~E=m%&z/DmÜm,7݄ DepGZv*tF<'x.ca-Z:,m S/tXloLoJ 9v u73^Qu~Ix$᮲*RB+C6'qMo]Gfk/kSI!V5-R$ F}B۾WFz +FT~B8+]5w./1K-}UeIY9nd-7J0pAn]= oZ3\g-xTNJ‰{\[K>=SV;H%#?:u(A,RUjN~9К)ܜ^,9!:-5;mF-siE"kuq9[[^p7#̓ةo#@hv)Ǫv29tFT4GQ{3(]IYh_Y-K~Q.b$#MtB (cs `( rvjky-zՉapY$$p:Vф(̳Qq{[41(=[Oȣ3~k?E?hA74B~/!E# /9n'[q Em LYonW czn7ہȈd,t=*僂MI&)kG@Wbp(^AGnjx>!z 'Ϗ{,pe3N ދ8u/8[(}͉ sHz(x $mjK_{i[9XkEW] kW]{5%c$M[7T>pB&(Qmň¸4z`~TW%r4EقîyːqOpU2[]9drYCwL3 P3KVUj!Gc֓a݋hB#g(qx}TkPl`b0/|8*8\S-Bt Pyw{)8HZX^M|LĠ(gqJ'Ƀm(A_m2z̈'FR.t"u[IOJ Y8D?PcT"Y.Cb@/o oiGAUsq&{#H XxeI9'Ҁ28YtG]JuɗQaT$jZVϯ+;'y&qF^5*#BC; @LBY7۝N_(Ps9Of;B>%lНKG]O왷͕5Ry>܃p=e#PzgX0Ct7Iv@?#?OoeC#6HP.'3V-v+*HOC"3(:ѩwK.BFc(`#:g+zր3ن ȪQTf6Bf&JHC+{{A#C=IDD{"Xdw.gFL%~/[%{5tl/f$sˋƽ2Ө=#YLKi]EOZS[ D5+CtT2^ͰU"Q~y,l&bc ~!JWCܴxBRQnv;^mtՇ/ .JHN5ZV $A@hDB2dL L$#)s> XWi/b x{v꨺+ӑû)Ѡc.+0p;˯7f&"{'H#x~?m[v>>ׯP*-nh*EȜת:6:!:Gp[䋩 σ8Sii?>Їz*U߶HKoi:5jd?ս_yPڨ#FXIVsR'$czIϔ[Yס^L<C;zrcP(dhj'(qV#$Jk}Y܊+{maBn0g\ yyLz'~9wݬ0MW큸_1e̻W_{mhE8K86]z\{*[GԤ(Ov͑I~ BN$MNPqASܡgPC+Xuórnpa)wzyٜd۱ 3pWn 7_MzgYzЁ+ԑzЊ \ӻ1Q;j>s<Û\|ظd%-OjS 7,TtCp= (\O-q0N2jUG2ZW=QԴEFDgkVM{1:b &{>X`%!VFhGqT@Fl+8!9I;ufmx <|Xb`A8Kq{Ց 8流SGis/gּYYo@Rs%Da!}&':m@f8,_b 4pډ%"~Uq'5 %w [`c|Gjk/?@ cXo{#% %V$|Ryvbc?/4FV'}S`\Ep_joԪցGTZXޏTЍ!ǭ(&`UUZҥB: _Ś] >>} uT+zE90**ZW,w*H aź9ɉDZcbK O2Idh$LxL? =|nO^ov76!/,Pü] |ģb;h1G"7b}\*3?7*d$^4<r51LbMxxF vU{e;I\uCY5.&ѥzv` OX gm>c<;>>r'$uTx C*ηHC"=nGHt]&c!6[[KũWL "F" QL) O btQ8t`֝"8$)u {B3)s kSZ$WPĵҚlVq]hxYfgdF̍YiTe ͉-Cc{{ }˺w,MBR;닇U}^BVmny/,lG{lcT:uuV#Hԉѡ5c:Cyir <ۅ>!ϔ^4*^I.￿s@/`|yQ,Q#Wc AD队 ]`Q Z19<]m!i[K\?TJS&-j ~r>,MݺzpӅHp\h/_ s{q[pnB+=j<@1t#rw49$ h;CzFxUg& .\ U=Œ~OxV٪Vb?z԰-<H!qX5WNIYHO $2 !0/GPnL T]W]rݬjXs_D/3߶{8zB;I\YxU/t<_LTW۷J{ xgb>Մⱻ 8e8{&qn)yd0jh<"i[>5 Ӝi^/(Iɖ٨Ls&69@$Mϫ @X;*wloj+ aWOd-+2_L۝ p;֛+D|c3 O=.I(;^!/K* '!>M ~!q121/Ϻ4X䷐I?]M6_F~3BZ^ĊڢKR2G7 Zy2C[IT}[WWAmJgzY\utp h TiRmceħje\l2z_C7Mcn57M\]\tk Bf[R,D95CZhh{raIpWM2ZY70MwT0#VyZgLƕr)u~~ ;H`(t47נn߶Ĺ}s'Q;`1̺qvHkʻeޯ,E‚Sq!g5[=3/6HA㨡'YC ?j ]6}z7' ~!b@i97XVIK~M^ sXu+Գno<-ZY{ 1@RxOXZm8itE!7Ma60Y n&ȎHܲ@WΌl@/yj,{Y!6VcxI'zj?9Rl +k " #W /lz썒1i>4 Q ˟\˹goIؤ.ĮZh>L/Z.B(٥8 "O~ ӑ%N0 R*MF $ր!#tLP://3޼b꣛,q>@^C5/Qr,l;n!P3gj%΍<*yPB~fBhfuY]:_ dS X;&gGG gc*C걇*ʓ `7--Ʋ/]е$ͭ}d}"]_8ɊV?m4+K>RΝnpUJmoI*7C$2 NO`L(;I A{怾_0ю7¬`Tj1 kiikڨue +k}vF}pʡrO< \ ,fT%Zg1Z=渰̏CLq :is N U`۱:Jlʟ*݋ҠGF<@1C8$c]z+:oB7a{)X( XZ0.:6+i^%|v E7(,s#t b0n9]~SZ:cMm2@K:B磜AaQki"'4.`jwXn=WϏv9f&x߾9񩾌Uy>"f04Jʸ\'[' WjŻH;(= KRf6%9flS.߻.#q_o~U͖![IF69S_94.A +ZŸy\\3/2V2G,Cy2`+vZk 3P(곳K]Qi @v?9EI(r;?PkaƢ#(Dv">"6qǽ8-tmG](Z2rHVlK :lan| We` x.W*p`JkM@R ,Rֲ8-hZ;LA9zd :j̔(jMX oVô A7\< ߀gj9 baO8 |9_1B AXʕ=TBc8*@r%yw㣄[g`n驻,"w`8}I'|y?k_6p( l )8~@*UmRlt rDFNy/8,]_*wFUs٤Ќe7!{=$X!$׻JOv&6}|SbnQWq"NW2 >s5}AY8q?KRoe7fd<D9i'FP礈qF/d(Bq}!3b=C$(?"p4Y3k$JT4znQ ;]w,A'x ޜ5d&g \ ˑUriY8M{.70@H֠~`[`bkgg@#  s3^må5^8ޮ~AEӄ$hm3Y^}jHTL R׮u|pW )e_%۰UUڐWs#& =ȴT1jNj//OfF'?#ڿ{eA%URfif5LeR.;ʤ#1}:A#2w[˛̰TUL̰bpt# Tatda~͵j,zvE=ntUPC`k{-;i+2+\W:{&s.=ڒGуeYNm%K QWԀ5P(FOJ2[GzCAi,4<W 6r S\ %Dr=~M"ƕ-4zI>ue&~+>D\j'֦ V1𫱩a"ԎoX5%VSS3.",{8# yA2AQ:ƢVpJ6*Ip aNfWb@ 䐭9k5!i60w-uqlϘrzG^_C5{R-fQ8-#jSNT!P6sL{W3mԟ(e[bReE\wZ[C|za `ZYo~yEp<`hSޟ]$>3fQ+7ȃ]$bs,\$ 0V6H 1$x<s:i'–z ;*Z.(bf+Gw26~\1'|c5GF*lC4.?=_ Nֲr:U G3L!O5SF^hOӏT],ETׂ=yڔ3~bGسA1ҿ4lwK%Y`=lu.raq$XŎI\|fH36:>XHX!9w#B>feTKR|I^(l OvmP/ n=}=soM|oQ]J@y1ג=/EI)矿 km'e9(=!12Nre@$ˏ׶ܞP [Cђ`{Mz!+a;4N[|M H`o<5FIѳjK".`m  ,%r_٠kw:N5|i~>eJDz\; |/PMɧo<9 gX_4J4Jh"ok]W{Rs}_ Ǽ1'l r47!C3J}[(B]{;*0MQ E XD)tix_sZiChŵ>}q RI2l;ֵ^a>9Rl Nc{bc)5_qL̠w(NZzQN,.D6808 5וL<]Ɖ`+u9kǴԳ_]j;R]JE45DQiI]qnJ.~#v"7K+ì#=wqAHqM}I>~Oy)l(!R:Jt _`{$O"W׵rS`KQd1UK ʊvΎ>4zYyzӎ]!"C]B_$zŨވcGQNJ/E9 ") d#8eaa}"BrJ7p"/Y+@ go5.,d' #?/l9:hhMhNb&5h:稹+ i _Uyu9JfٳBۗb IbGwsfa5'0]e*#{ Zr@TGO>)/OX*M:x`ei2ZBD=XV/}TWUEA ;.Hj "BعC5Zǡ/e3Uޘ<吙A,2ĽOܲygi$1TUF+@g>kap0+ BȸS)^' wRN(>c @I}-xbc#ڝǀ??@3s\hf܎|1`{)6.=TBCvXy;o{2I`jd@:h„EF~Bu,\GUtxF%0m<uS-tuDsoAE ;{H3B-FswJk{sp弇ʯA!jg׏īGԇH0؉ OW3O$QdyW<v,7 uUSaT 3 b$<5485PE;ƍw0$c18K-ߨmTw*x1|}è])/2y-V3 rX\F3y880n .%dQvkG`]:Ia(ۻnіI'j Y{m/*]\c :X*^z>ʍN6rn vE;J:Rv*ĕ͹Ƒn}(MY&}[y^A cPw]o6ȷ 8S6>X]TWǍ FuNV4$",eϹQ6pэ*N2p݌,S;r M?J ѩKD ^wNPI; ! uҏ:7\2FaRjT]/ ܳ&[5oF"6EpY<5 x}TMV~{+ م"G!FAg쫿,]8k.\XoFN5֟qw,E虿iGB*L:hcDm^t( Gj#Yf]|?ځR]n梏*ĸjZΙt'JwJ=N$)!.Cxnɕ$eR!}^tR>w:8Buvq5W-Ҭ݇ J"Z%j}< ,SJ@>h;e硑A)̇\|jԲϹܴAomILKO3f5&}`խm95{6-܏|uMIb[#Bbۏ4svXe!6n*)!_%h؛W*(ňQGxJ:``Huw \t,z&&y$Ϧ(ҮqZt3a|wz茣'TQkӦzx978%Dv+2dD녀a}% Ak/^9wv&ړ5' S[,^u=7wK؍_fFXP!i=e Qc"WR[po5Gw&NYQI&GS )n{ʇ.5Uz;;C4ek_z.ҙw9z^]N9fk >7`5j1y&uu/߸s: ֎ SW6 {]zT]>DzTN ]LGWF76At r_<'tج3}CsqD˘ҙu!KzNb\#:&-p[6 %IDF| { gltѦdNtl.lz#؂$쨾i=tĖ5SDLeRht i7ŃW{8"S~IyC áHo渆v;Y:r"R?*+k1z֓YV 4Y7-.-pS VZ0<MMY*:9?WB$4l&u}RYnyȣͺp]M] A5xJFS=lzFI©yķ#1-45mԢO/=@QflD"`xEv SIQ5 q\(<=x4xMS<2ǹ|(U2rBu[ > f7޽vȗUV@kůM3oB c4tSq oX7|s+K(F+4s-S8kKSD<4K {ڏ@r \W3[~L~fo8}6=S:8a ]}jz 2)Z["ۂLw5ncvZ#GK 1@+°eFJ.a ? < Z_ GЧrr$!> hXP2\\| c1qZ5k5) +B| f8[z=uG/va͟I ACNj%`r?lC 4,Pih=/ uPQQ]ã *L;yL3Ioc`/>=~eѺwLq*' S*+4#gCc~6/ H7w;84E/|~ߨYm ۀNUI`<(w/?1іrE5MVݚvfD 䲡uehM`G׿-JXt  Yfv;[/ω@pjT%Qo>CO&F8I0'F X14P B?ݥl&S.G#W=Q u(>d±L趵!3.<1z~M_\ƕ-s5ea. `Dž M; 2\f|G[baB\kt(5{^h|֝v04vuL3+bOϜA WMtWgJ7|^clTgԼa($XoxiˌoS!g)yN~OOO2t5WrO*hPݠPG]}d+)15wBgKI#Y}O˘%[}kymb[d1^+r,؛ }4CyA$!;Xԋ?NKVAQ+6ݐ[-۵.?Lq|Dβn&[]Mub s; jx@]m/2 ǠK@3~7E|;W5Mk7Z&Bh &`ɒ۔2ꟃ OԷh/s̷ 4xAܷ30I,jS I)L|?Px&NwNAZH|2(*?屛\\ҫK%WW~8DMT,е I kRv]~XU3_:7. sO&~r^[)L#1LJ6q/:2w{}hl\:^?<:MwVc?vX߲9צGEE y<*0\m|Hр.[f+MQvfX+S*iڕl,wYAFL-U{dj?z[qa1~ܖUHfA.763ӳiۅ Fpcn)]D(tPs6CD De?kh=^f(n-I)<-e!.%9{Op ~S3H31cDƧfe6l- rҙ)شy?#q|a]Awrv衤󝈼Fp146ٶn~h_g?+f7L@7Wљ[X)110FY^3"lk5ԵCE4ROdgbՄLx-HۂT" R{|ӧ*]`?^17s`l w2uf|G8ՅicѩAժilp7_ Ec,%nb{x@EatMO }`NNOjs© t S_ƁjkF׏y[/F0֞m| vix3?5K/=kޥD&BY!ѝN8}{,]V!124f2!rUA ɉu5L9ZAtB E3ܳ=\ERO[cOg,^Dzߩ#."6];K]0$B1{}-d莈moY9OՍ53 /bTQD%GG7q ZoF*xᮆ YVb}4?+Dp ,X'L.vvI t+8[pмgdj /J>GUԤ܆#' t -PW#X#! =TyXkOnL_n(ʌQJlk}[yDJ% 5Nl_ֻ:tqjZCP"UqdJ\C uVBd^3S΅p4YW}9CXxRrFU:,,5HPў=69ŬثVy̳ͣ !;5Iڳ-d23Q( -؞(m'R` FGɞlVe;_3(c½m!XF al $=ۃ!m.Kv9bE3ΎT\K(2 :'- X (lڿ0$neBa1.2ږ٠K=~4 BAcrHʁTo'Tv(<O= MA"Dr(8E\_y@zتf'|[a0 J[r64 -fxmt\>#9p=E}c"@K7qiNR2 ~*V\b]%0$7dj*2JG OeEt O:I6ƟWF4 O"vt =Ġ䖑W|eqacd~~d/4*>I Imy֪(]1%iaٴpxu`C & hZ wWge^Hek^>pYKgeM+JW4qA^̳zu#1斎L*07Q(ʯw O0RܜRo5)eX?i]>ѪĬPZߢUYOC#ćWF85z'4tc'$XF&Mivg=u( Ìb4l9GZVԛPL&g$ %SgOD=Ex I]x<ȄU{%MH匓{?:][)X?@R؛R5Ў]tN%%9^n蜫iB 3k>Re>~sy״.13fY푭U^vŎFü0<?BXdl(=+k9IոjÇ$Rn unH[4?]BfRU,݉DlɕVQ;pre ľc88T0oE\WfGN%ʅ[As4#[GEĊG;ݸg d>wQZ/ 8ʇ&ѳ总+kbeOXhDk"׽W.Vp) ΝF%*]c oTT Dpx*`s J/F'8KE /wL"R6݁r>0AУvدnv@X36 > L$d3,:8,?( SCi(%,TDVti: O h棯!h3AY-Cd 5W46>vJhY|F;Ά2@d!AX0]wp.3 9Hۻa#O1੢LU%>2E/m  OL!={eɡ&vKgR̳;u"˷1Gsn}cL^WA]U_PYιT PяƌHd2r) 7 iNH)2MX#?RM R} ok]-i|OͶF&b%[9ptΫ@VMxm=8k>XG">f]F5E|`I  ܒC&'>+le oZ_N+?pO;tR^Ä͖p[Ԕ7&F DY:$N̜gbsCMfK)^hV1;MҳOW+޻A{~V"ٶ}QR7ڥ1{;~/ W[ ;ʇ,> c=->:9Qg}fA.`h׸ !A߃!߫oǬ 2LJ9OP q;\-#PXSv=C$4!bxM6̓ ᮴G}#kܟS)>F5= s9'+},|1}Cn#*mm+' 9ƆuAjQL y ڮ׭+$>~{=km!t/_@3S1ssf4 ͢XVL{yg$"Hr:Vh2_‚JsȯY:FySE,# [vu OAMjpj}AH^q .? O(,s=٥szEQ5^PoW ibmzhc- @dojm)nfAa)eJ-cRN-1-7zFgz.rf/ZGh~i'=ȳPX30\@/@Z.rc QNS/l ^Rwl}ܘHY="[;<,F"B"9* 2b.G%ЦՒ8og/Ր/N>NYr.}`Tdɶ,Sfgy(s8 eOaG'n?Iwkf b,or>d ,틏NB5W[|:##,@lVP,޷I!_vNzί6[~!MP6=cYg:,śC> h KK)ڜ,Xt^Cm7I=ȱ(-Iik\=|=V:^qKLhPOK20>l \ռsby@N 9ϓd $8c TP2X~ioi3š6ȖiǰpŤݤCG7EC3 0ŰW3; W`9̉Q++aS晻A:@U ?q}Nw-: [\ќ!+ǵ7T fheQz,>G'Ŗ|DQYwT9dx$ir Ԑ0:ƳMD| * ؓ;<&]]La숽F#,oiCpqA|w076W?Š 'dz`HP m_vʥAqo:K#&ICXW{GV=AqMpHUdtFQ-TdYO6#>'LL&L)]D!@ǩN5jᅣτIWw෋j0cڦ PKK$qM]PWysL/VΦ?]-aqhJռ.>w0nTGKڗ2;HT}SΕE(Y>NSIԈbRH~rhЬmd";d"S5\Hpd)XQ13>KD?k;W;%b m}=Q)ou; n?Q)Xd_џ-Sȭ=c "|iUVO3B{u+8g6u(0fF%Y"W}9[ [Ƙ,`&G.LjDJ6i./' AkOT/3E ֐cH=,CQ.CnhbYX]G^9{~M{~U6$%]SE7$> 9:4=LH\.l0+(}j&U =h϶Hۊ78Ucru1Dur,h=I XM3CA 8 GlMeE:3Qx7)gCl<8Э7eMUruc}xceQrEZNt4Ӳ;ߥVI$1.Xfn?uYt`tきnbQ֖GPD8cwGѷt547;_G,͢W4Lq#LB3 Y~,E4kLֳe-*ŎHӨDk2m(uazrzoά3Ovi GU&')w?3X9'rDmI۱-ǸPLRq嶃4js6t~Xvkp?(>tSo`\SR-U k'ԝbT柑CB(ۥ_H*i䏉u$i,l0yqő §`2 W#JhЫI&c,S|%N-6~:ṯƌ>VB`g q3;,K{ #Yy2ie2) v\"KcA@e=ˇOB&F'X)wIbʠUAfz8V2522} B'7c"XT:GhrU^6F!sdtz=ӷՏcU_?엤x?rtFበ@fZ.^Աo(ƪLڪUp^\(6C4 ʭHܸgی#ʑ'Ryň/YaAvbh: =d?E[.b[̒[#!T#k!Rk]>TK^^TlƯ=[FN=OB7v}Q(GVf岻{%C;%Ɩ;?:W&^Np*'vC Y2o շ;-/rm+}>20/:1eRPsA8bC^jꅖ./y4cb`JG8~ 4ϛ}~4h}0h<6.{Gx `UbWv(j !r&FwPFsFb0L <ҳkZp*!2=mB 3 h5+d2* F.jSz+83L 1DcM:yo')Ύ8GHlf &Nq%7w*O)-"0D{ȰbeTC<L1mbQ@ϡ\OM[M| q?NQ;C< : |_5hRjphj NSӐt2{_ȉ@9ZӛSɚHXt(W#Ŷ#T'~PJYw,MClKt&š-`< Yַk&Vpe4Zu7UD ,1;TyRQ=N%%ٵdhh x ?54 ! 466C UV('9 ݽf%rDhϓId|:gЦ9 &"'#>RuVb#t6i6z\®66qy(9-Awç!^!:~l3Wyf<+ϋ佷|Ƥ̊R;,+ǑG=hvS b!ۈ=0apWNzysF ݸ)e |fHuMc!%#T!*T(i;lG `Kɫ&{aI/Ev)gAu?sk?}'f(}fΈE钭,D nB=14q8,^-sb| w숄۸uDfeU:]2xP쿲7)ˢrs3p|l_mCCQ[,K@ύ|8o ,T9ЉL,4JeQg*D ZXx2SizE)fI5SFNF[dBQS=.=pC=/ @S{ʇNP:k<}9㴼]-}| ƀءŽ,̏*8QwMwR_mQ~PƙrW/M@q=N A̓k_ FXz0M#Kьq"Uz08SeP?#Daמк_E5^@ 61{,WI/}t,+fWs;ڍj`S:o 4`Z83oFj>EjF; +)&J[L gq)[F8.j{`E}ȾQR%q01!WmTG1Ľ =Yt\vɚ̎+o]1ǙD2f69i*z:%=N>'i(:8-9XF$bGpYmH$=3|W n2k2նrPlV@i,iTs Rݤ^0|7E1 5@>v&Wm;ueƕspy+dw׸xf%߷ilkZ/W 2 =p^td줩OnsTwu Z!k skFRhr }5oHiכjͽdAE9%|6rHƌ|5;쿩L.YVcp/*= r%Efw* rSҫ < Z⪶}v%Β y*վ ަ絡l)|/ʒrݱZ`,'R#t `S;e ?R;1a7ujI_Ǧ/cRI u__$ ffX!ڧHA@ Jro;T~&6|h+[,fC H[r~dFW|*L"5k1+_e*!M3n=.?kyiX5]6i]͆ t@4U>c^Qarf.=5Dܙ!.9*ny; k" ()Ha7\/ж 5#(b(Scn`, }f{K46W-=0TNb]WhO҄vFъσW{u63/YQ9K83S}* o@4@B R@S J#f0hTDTj M^ i(jR' C8vm Q7:7.AU:tGu ^2ٍeGSZ8Σ̣x̺b'X4h\ݳ$u:pKoќ"2*a[,ΙjMuJeE`D~|?wITQ)9S@KbH';pYD3چE{gGB`.ϜQ#C׍ak;ʻjOZتzC^[$zhDdSWYLUb̈́ Op9KcoB"|1& U zTNj ]8v|W'jiK+GWuʤd+y!_qȬKhIf Z7l}fƚ"N؋ʇ\ *(UNyR7Aieoe~(RŌiip& :g@k,ԹEPsflnB?վb[8uİ~ҫCWN]RYd:sJKM,. >P*\8h! YP;;Viس+dLu&1O/*1163.F=EEBt]/kWڪA, p_d--d)赉'nJau_D ZzUB D>݋~57aLK:Ims`"+{qcZ/Q9xv2y]i_0޽62yc-5z(cPH)#ެ0t%k _Շ y+[T J=l9==[YdpU4?9R-ёsڹ_!s.3ª:쨹G_z ٖ'ӪMeB2qMxNK?4u7#MQ^6o_Jcj)%.e3OHЗ5ˆ7;VH߾F~ ZJp+83:٣ f&w;K!^̛Ww7!tեlYbXZBT-)7GvLE~QD-!dyPؑ[gNesBsP64LLs'/c(4eW.-5MD'a),PosNDDLasYfPI3-![l!epD /+:1&Ҝ)_OEm$)Ye ) [P_iTR"Xj7B'465GSc,vok"R+mNֱq a0<}oruX-0VNF-0##:ENww֖c0GB+oL!'jm}#s@.av#& GE! -hGx6(> <ޙ0ˆWK$ړgacCdQ|飰l%rKrig:~hȁjbٳP[??zbYA1 fk>e[Ke}7/ ,2iN!Zq' ^lyrɞh)4䰍y29X0||/7SEW@22_=Lmyo|SI!O`T>ȑNX4 6[P9,<\mkخB(>WX+eg/רHc^s ܫW[˒EVGb3|jy \52{y0`$-I-(q 0`K.'N#UV7j!Ycl(W} ֠n"`KxSwh~N&BK )YX{&ӥ_,uCyKUg6}Є 6]] %kGftL1܇Mg7)eTPCJySj6 @H ؈p5.&u,-]-{+{vt>:yN¯9IPduu'uR{8JE#- }ƪyjSL9axvI.]I}U+6c'UEؖJYDo&)\0ˠ6,\{6 \%3tM%~ "V~;a@65rYڝvI\ZwPiN!` !ÀOeB,Jf  4~m+ؼX# ➅ 0c%!oM{Fs 8NL>g8ǯXH &mu8c_k:?L~%yM0-,o`SCB*RH#ԺiȞέ ezE#@ 5OryCCA'Zձ'*R2]l7쎖}6}Ka"I-@_@x9`# m)kNf9"_.^ +PXyl暸\\1.!nrAojwMѼ?)$8n55.gZWի|_mr"Xڝ[t,cAYȶhLG%?e+e*QY7fQ,>v`SW'놏`;w|wEZ]2BJMJ>h-x&(|Էʜkit|3xϼRB;:oҧ@DA#.eӠ*LN:pxO'&hZNK}!YӉЄM Z=UVd39>.\"-Zy 9҆MknE|<3[1UދVzz-KnV7"mj=j' kxJSd95U{xjCA"cZ4)sycYl- Df"{;)|*W] >޾ʣoOJ;]P ;x|eӭdF#EA6Eڦѕ'?PbtFeĞP.Y-GnE BySbeib*+oOt[_/8npk97UP'sVbxBŦ.؏0b-Sκw׿mU;ö AOD[EjxTcf$b~O&g8|]׬]'l%%]\zkDOӒP<(m 5q9F|Wl޴׵Ҡr3nlsH%+etr?T^Y,zj-BELr}ayVD:׸rT\!R,)J߱t:JQ'jƖ/XN߱u%]Xoi);I1g,t$X׵={3{ѯ"'1y| 2yncK=bANj&n>9>.b"tc)YSD[JVDŕ Lu"f{1H♁ Olp.iG6[biww|fmU'F(%һⰑ3<MHH޴qw FﲺurMJnex4f!IͳnđFOGO!/%i2C %<fur kшiXjAGcSeum8ssoMl$Y8+By;㬑QCDlx2X~cퟥk *\DG7YݍթHNb*S LJ+[.ogLRZԷ.!V fäL1۶˼_$_51mrÞ_(8s:lm)U0O3eW IaD \8Uўwy‰E[i[ ;w.çY|e\`U!+HzDKW 7Sm ٗ$?R%CRa1FL0~H'#O"_sb(PcdƦA=aUEWƛ;W;! vyUW 8!7oIW\{Ԟ|6Υi{tBUD}%:5s'js /]:1Zt0JHwD.!8n_t1y~M;b (û9'Xih8ǭM&>*} hˑjG"mA{'{~J 6WI{F ( :FU6:n<|h:~#E" |i]%7*z7{eT$%ZJO}dF/?u4l gZl1)Jv>D90`}*$$+դ>=eõčnU^> e/hʘť.BIځ"qLQڶ\,Uj|p}(SYl}&)|I JrR`v?QGF=2*JIZ,{28l<4˺#NG1浼ޮ]' xB"wiA䄿{2 OU-e}[fZ3R#0,@y J=sFkrҴx Im3z,tiêߌ2mXAW|仟S,8{tAר_9{Rӑ@w< , v31!?NmMKߎ=RX6tV붛K&(Gac~`khr;OnkNGV\;UH)Ayp:k{bƏ>Y6"4tHr>ڥ3/YKji? ǒ rjᇜ}r3hFR;n_BRTҰȦ{Ypu_VTԷʉ /㨢p~ 0"5uGGdRT! -Sv#wN5p" 7ifWw0Dx>&!5 ϓul1.֥~6kQC0g1 XIGm1zG|\Z$8+Iw!V*N:X+3 -WV7::a/>Iqf36IdȕԓB|-Bf'@]KbN^SN3$$YqJAP7PZN1)ƠyOt+# ?ͅ2Y"e1~8+ hJ]pr#UW4F]k*pXv0,#" ɦXj'OSim_cch - U*FUN_tahևU,"QP:[oel@ iLhm?FC-B< |wjh6Jθm m\#$N[ 6!իR.Vax"+t@ѓPu[|s̎DR rdu-4{Fx@>P>\͘)Mra/3슘~^ۍs~qƒ} O TpB}377K%/ɤW:L~Sā{Yw*E|uP@_ |E,Nt |'y~uacc _Ў0-lB+iJf=h *&T:[$$ K|TvL%Hu >{&MlLc|QIPQ=ȢmB˵ekԨK^-U0mեoAcQE,&Kw(֒Jew0R@ё0QuԽT,;;5pbtt9j3GW|sHamLsQ @$U\7i5FxA*{C+n|r@j,a$]= W~ #U~/?d/KK%ћځlm+BC%|u?&pWu]/ܺqTCRqSaNv|Ȓ潶 d &## h͛bd+7P e;wEF!*{ f]; VS?זNp3й3*I}yk~\/#9)>ԟ >Z{¤smpp0@4X%E#Zf\$3{A!"VHTeZLm}ۼ ͦ `iIQčV 8:Zj(aL.Ml2::Sj}㝧neaл_]~<ֱ09 :2{_U3u/6?dw|end)|6N,Uh2]u7t!!_Ԓa(dWN9#·F&#TrBNm!."ִaϲEha9aնUtE)]WM ^g"IEܸ.v#B뵯L\6ƻ/p-"18Y+%vĚ=0L7{)x)Lmq< #P eäH,߇8d6< Gv!j-i _9ZvX_ ZP'?$ƢCY['C_"5KU3J$\|ڹg#D,ѝ C( hb7}e]=(ur ˯?j2]N%`*^!T+ -kØeyJ9dy-5&(*>en EWr `]N ٞ.-?(5S\8P܅ChƩBᲲ-a[dÉ%p43\j`|> ߥ7#x[CtvDľ{0H[\-ٲE,K3lXuc 9٬,h{q,La^[:{9Jۈo>\Hw*y?+wJH`/J|dǣ9ͤS{,m(y8m.[iI /v2NuԨҳij |>D!Ԇ8^KMM:ܸb}99AicAʳqZr J$/jlh;Y6l12{TJb^ ԨxЌ-/Fpbf8U7 ؀?h;;K&-XwJtx0ɡi8]!?9aWo { ߑ'+ zZdVa`=m f%(4;"Hs٢HI51 Hت|Rg$_*j@ְW]s}5"f@eu[94ũ&@?G'"ͤ1wC%>+NY]\J-fv¸7 Lv_E=*Eu$F~/Wxm'>{/K[6 ʿ@> w`:R'(aJZHG{2K!kNXzuAGovR, l7 <ͦ1bKm/k?6k Q>uZdĺ[DPk6C!I-6qS,o}πc ={Y4VaWSK*cZ-Mdpտ=޾n-ǹRVawClQhA3k. Z0Q_L $tU }()6cX;;)^[~A!nA yJzO3%`qȉ-C)QI:AGU:EċA{zy4K $IY:p N0;c:'4ƥLUX'%ss9(>P3KI˓m܆YU FWP[8JO"2-0Y[uXޑf:0tXa0TBJ[Ts0Nvb򍭼wO0 N F`ϴ<$hcBiCzUjnBuOltT}r\pg +12Ho&T|&pԒ׎X \xy54aEiRy>6p^R.$D_[k԰#,031T?2{$#7~Iũ Boj3LUO<{zmE{ q>S#Bw.@+=lVX}Em ugA$h1|:=} <(x><1ET3>۬))mfR/q-eZu(!s9fOsJke|h|z;X8sQ` ;yx)fC-˦J4~4-Q$qGq$&[.f],>9o.[@Oz;X ]:_Ab}n2x=JgtU[}Cױ;ׄ*MI ΄{lO4Gm6O>nRHm~͚zvy٭ !9I0z+6S0 JcӜH3z )7ht>fڋ$K;hOMUǾPԤSnܡI a04z'©D&QxISJZ;o|RP=bϑ\QM]'˾r?yim uܣ8LC‡e66T)[#{Lj){עxg,@\x<6#lА=1feR)@$݀EK؎'ѰVj ;4 ŋפhFIUZH?!9 yQu@f(Sv,ԌQ17i<N02{wߩН{J͊IO8[5nZN.~:OIn0B; Vֶ~ V1yk#;TEmI u=FJNό/繣vv ;qC0uqs(sTWY38]4{ԁ)BO}U+.% b2xd.f; (Zդ9YWC.?#"Ϫ"X>tR*֮㪛^S"{8 Kc-@ϵJnPC&Me6*bSqlm;t1xJ`$!/9 2)`B2d@pGm:/u)CDOV]X!Y-E*AZqГ% fp{4Iʃq:nw:jt~5",~s˵=lx tL>گ /};\ߢߜvvI]?VdfY)SCPf/ /J-F_K}o7NFyO]HJ잕Q {Hu֑xc읲R|IcG#Y3ے7Ƴ"^$vgw֢Uz 5&] _2JD?Z23*:P:N܆VNpX[1qj1)+}A3TS]o:_QCdY=.PZFx.h,;)70z,]PHCG5Y=Q@ ^ N`[E6܇bv+TQH|#8'ë{ 6u kx;.~5/T!!=$R]KwBw{G=CV:kρؐce#urx<@f|n&N<5&_#/Ưۻ^vxB +IAse>3J *D tŁi"\Ǣ%aI8^8'*{]Mݦ5pIdu-Po;ųtE]kja JWwƀCtY&^|sVrệF_Kvۍ>Z V=)c @/b 35 pE@ nyq yY#µVg>YvVa{g V슚p8VJߌ;I|/LYߨ/2Ulow,{7?<Ϡr'y^5bpw؎⇑,cf@\U{`˙+7 (ufٵqmbgLBZbm҂YCc类ָY[R՜촤 }Zelzp(׮XZznR*4vi7sb,,"5n(_ PH >*v vօφY[7ujl¶^ҏ&2- òwbՙӫvnǜ/RAﮰ  3ƈVq(|u)J=Vt0n6AѤg ;EMT#x*2*3lLWy\Պ2|vwE 7}ez\XkU{kE*3liؿH_٘cأymwйjK0=\D_hP0q]v>Ԭ}bqk?sCģfӇLpwZĒ1S1zaXfRJ&B媼G̽DOǀ'SZ?>qFߦP_0DfcZZ.qNs^J 2W|nfz`u܎3M={'ˆs EǗ84`ߖGer!:&!K^7kYU^R6y"{2IBf,y¸ypЉne^iVr{) S0)P xZp~MomEu\BKE3?aFTqĩmW൘e1E/57B6-҄ S!lC#i2_M(yo]?+{OnKeTA(×bmAۗ~@԰R&}p^S 9 / CYz7[S7trHHn#`ge]{}8g:!J B8znB沮&~kvDCVAP(Gv]r'.Aod0Jt<~@VHn!c=IGcBUh_KA͍=+yMVR?t5\sҖ*k[-5 `iqg@"`TC*zm_(1㊞IB8o9ɇ oXV9MU1|`EK\g`~L)Ka%tlp59ɨW}w)PW: s_y>J6!L5i Y#,~4={ u^Z O[P6Ү[ Mlh Gt/kh%V֩XS(8(d/& 6d/{܏%LM/KU)ϰ㸀k=at ooaPʸdb  U(_$]/6>}dYEOAFlUGyBTN;䪂{  |ȴO428 ,%xZ"#JҪU%݉V< z9.J9 +&x8^m߲ue& u x@TrMfS, 3"U!fPU~ш|c[RKvun֫xq=^t2 t-^@z.{O|Y\aXzL_ݒFLrcg-'[3!p*~E4Hn$\u ruCY7Tc}np4rݬ5 Oy˜FE@D1Eo(9j9YfP[o3p)#[q~u[? [Aut͑wߥ (;I<(':%) Zٯ3V:JL (D}/Bo kjǨIdcݝ CHύL^93:|]a%Z|޹~3i D8w_2̵tSꈀ?;U[BUiieiC8WEq!^0rF3zㄱCʶ# z ] ςgR:.]0//˛>~w l^.DCnzRAo /tt\Ҥ+a*vUt̵Q}Ҹtٜ+eB6[$_k;f|WMk(eIIg,P4~k~G´'b;tk Hl2JƮmzd5=a/+.^NJv\KFo=Rȹɝ8Kx0Ϫ|MV wӱ \@Xnof1رtE`zߎA&] 4QiX0`cJF0)utu  wpNJ$&- i m0'deU/R #RCZ?8Z85lG6(?;㳬/^@'^.~ BOCE 0{1ǜY*[}XLw &F9Auw$/@[\c,A<vv:GcK'[`8tE v-`yR᳀ǞHmg"Z䫊z&qp,0?:>&dڐ$dm}<ŕ0$0Lӕޝֶ ' s. J1;Y0,ק4)BDHӍ7cq sx䄭Tx[wk0761υs'o'>/C7t߰zk `D;=dк,7I6TPdbyxl!%׈~6*jBiCvFr[z:)WrhN`JuZAiHL޹i_5ڸVw eTEb́m|U%Z8qnB,^xk:1Z*EM`lMT~Np1@[瞍ջ'iA% G>?6YpP܌ZNPhi/.iHO$kT iJy;)Nf:@6ZHteBo<ݐؤcM(1(73Rf \1M<6tcI=;;ux;50Fħ>nA+mk|A=u1"~7}uקj5DQإxw|#؍jT# ]oט7EcJr`~lsm<|W{V兏J(5h_@C_QFE|L#᲋O#6f n~#fZçn O̘$3z} ܮh %P[OFB Au* b8tCà*Pj4F#&#O F3BCݒ֓ʞG`5HNιw DTG+i^4K>$^6]uJm-(by<B9WeɐG[+ 3''sfį@s%Ozߢ9plTU q,.;?WPwJK4嚳yz^Ov{4%[VI|41f폆~~Xy}dF&#Xʘœ-W|^ 7ZYeU*Z")Zv 38W8m0Ԩ <5v2b02-hyf6ƨMLCb4*HTue77#20['=xz-C6mS{l}qˡ\S,(5wЦI(@dB}VΖ{y<a@I?xi-$y+ɲ={Z9J;U^Yzbf^x5jBu$zDpIy^\|ݐFDz[؂dG_Ò\&X zAf]xnF/7ă&`v,B4+O^,JtRUvZ:ӇTB)EqFfn96cVHejiwr:A<4YWQm|upޑ#Ok'n72k 8!`ry$ΟgoU _aw0/d=ĕKxK3c_]B^;cQ^ՎZC'y#ZMVBUO|P,6?fZT `)OP! Y6Mh,? h2"#$يȓ©|ozEzNziF֝`@eb\?PB\‚[1dnj] ^6pЊ*JJAۍZI6 tC nȲͪWX,E(3c1>3al,1wFpp1nJS+4RU_%?s., 'w=rH??FҬ_bY) R]:QBIh&q@u͎ S 40N"\vHM'Y|dqf1{KkYqg8׍3* o)ܲѯKT !AoJu?Ǩr5׾- A(o h~stuᒋtN," 4g7lC 8ĔAManN޾}Sz.۷f*R JH_a"A vPvHѤF_'ęp) RhnpA { "K幏[G| 'ոuO<-84>4&Z}ɝMZnjeK4'\F*?]/T33-T`f}H-=T#GT9q9v_2{cq>C(v2 G44jB|͓=Q) |g*Si&rr\[د_S[5%%!kvOIr;9vH\x%bfEgAFǒ>Ym|(` gi)ż?ywBzK# x2L"FB<rml=+Rʐݗ#>#bp"ؾVA1H3F]lȆw擗B-&DAH+hvv~D=+Uo)9bnƫdGy u_nڳKr*Jſ nb[gKB{',ΆI6AJ&5#1+r@|AJ.{Y ͺ-G@U.8A$ >w'5)_ZZ%< u3? uˉϋ"ŀӕ"jņV WÈjuߣ~* :S}N!WXQ(o2ԎvF.)&밵c/q=0R3)f`Z]Fj-[ŸE#߇c Ѹ^BUzs[+9D((k Piwξ"xoW$ђ\; c_Z@2N[C}Dg~9g P'o[G i{=tl S텥 ,OJtm1sLu@Fk{_S7b_/5X p q'-Y6" ^ wZq/?su|!۶"dL0AhUvkGI^W!'%oh/Yڷ,4EGevb[ jNC1SsviLA|V_SJ wLn [J)g)[~r[\r1b96!YqF]c˓ɚ*HB(T . Oʎvmz6"CAD3)4$q~őLXS=C.Kdbf9=j<";Nt YOûƽ\tC'ƹuYo^JGecjU zw(_FׄQ@Dd5D3:$_8䃝wưmO،UcvpVq;W#ٷDi#)zJEDO`4aUe"ٰF pMkVc?<%r'΢LvaD c'lC̜h"*Fdl+nnI: &g5yE Dnisc`j*3 P|q]`HN u9h^ojRFw씗[,d鶺uRGG@m?6vlhGi9Bw.azF~'0iGR5,g]cKH8Nhłh%)0g=$&L}}~Vj?q&R&+dc}N.2o~pWRO<$K]FErvs?~ 99< OeCBCmD=[]ݵ0WP~2+Y"^|K$+ d.z z % i->xER4N|ܰ )?(~o1K\UDU=Nz4{*&9]/kVgN&./wcϤ=ϑ2͡c_Ap|zz^ R.w&JC05:Tj6WΓufcWBS!8#} [NZ ʏ9z.{Oc 3\Ip#?vYHj?0)SwH/V-ڜ—g^˲8t%Sf}d`а<{BiJ<&ߘI.TBu ' ƂHYY2ߘ{cV Y}6Dc qC=.HoHȣ %jI8E_qu I&8ݍÃd#2[D9x$=//_o$ )͠Nq~J˺G)iRSvSߣ^[Ojvȗxo[щh1i {Zj8g4b/)bD^K 9̷ټތ 6tUi ~ˎ{ٌ%h*TaTI0&N\/(=Dt*lhWhף]H].Z~1ׯM &-Ǿv_WZ 0l 'Rb$QndV#Z@1־.K co`DkvgW] 7{3S1ǻ+9Z!Q7gTwi~{跔]%`b;bћg+sWهvȑNEfgYY[_|#y38஘6IV#kPcwBke%D o,EG:&G.mV'+/ ,u [K5inbΆuh #x.guwe6ןFS; %,[pLH>~] f)GF^rQ֞qы0cC>8׫\$ YkmtKFy]nR=eN5yI.^ q6Ifscd-_ltZ7pS.N1mO Ḅ>n]`[.qmMrFef2%xɵ{]w't̼d%f`0m)$QRR=c[6!o2hk ΐ}AX-`IZT zH! mQaJQso Ka6ysTEywosd+IF:VxK҈;]0cL| _܈8҂"0=189[Zt#RcϨAa4@Du1'#Ԙg^S#Wf@N̡mˮn5TZXp;x;O;+~z'5jDpDeFc7Kz4G]ZK( ACH>o\>8Ӏ5ۊs̚ edR)6俭A[al(ei!=$+ ? _%q 4+p$c']q|D, gɄYWH(zȨ ߓD-43 ĊF3\D:ӓͻ/564g\//xX-7xAi6N;\7%}ZJb z%cBռ"m_)\}N ,),d)ͧ ~ʲ`D+t*"6t=鄜;(a5%[ZȞ0n[x*0ͅ)B >M]]U}됗q+ffy6S毻}jNv^+Ո-:C`IYZp wLQ(d^Gtxc?=+K}|~]nư/>sB0*Ta`~%="so8T `Ic|MԌ!)//&MZ]ȏlמ&y9(Ka_'̹qSg>íK=1 רv([NR*52۫ 6&t~őhTbmJ,R[HM^mo2\'8otr(.)tu2֐Dtk3)} 5íqc 133hd)y:ZhS525YdT5ߍp'jI bۖ¶ꜟ\6*2gOlb>im2 5` ]X$qp īdw> 7jEwgQ.yC:(249 6X̘&ƇzJ@ wjtfqKh"8|]ԧS~c1f̳jhX6lRBL11l^@?^BD-J\-\*X.6: %\9o#-_H]ͥ5t6l͸lwcLS9YDӏ*Y俟,'t,@plz2J~vW8JapOO@.PmM qW47ߦG;-sXg*@|uN1NmoRЊ~.5EQ b\{Kgmb*OqWUQExUnK*#hc.)0fou ^$\u0n]!v;@U4UdwdK|7_Ci!M*3c:QSsr$vvܺaHvc6V~t,\BTl.ʇөPo؞rmyEaYx_g\*>+E^V×Ϗ@¬n˖+n\`jE04$G'Ei  A+o,R*#7qUaWž!z.=%q@n%g#HeZYq*@X%p[.%\HD~P~D6pNΤ@a⾙"g59b <1]@ {s 7>05[X0)P22@&o5%^nϹakRSU}"TݜIw#WK6Hp]Uػ_RjiAG?/#Wy--XrZlC+P\ثM8d\uaTP*5t6^Eyq2eȉ,cdwY7@؎MK ZjС*TԦ+tQowsFŲ =@RP/P"#]H 59@IȒn3Pqu\Fͅ~/Di^r6n[@^lgH(o 1%g*fɄ6󧲉8˺0 ~6:J8m-F5D]U 26:+R0ti++vW6tmzGRO:6tŭ:NEDzr-,QL=4k3(E=H}qԵ q cԺ=@ٲB,96X1,75FۨՋ =t3BzbE %<)nN3\q.AH{0:@R qϖԲdH7o{LVyS! VJ@l\)0R[%q:L-).ɻV6 n(quUOUo^sm$Bd4~u("!yXZ~!v,{IO0's!bU*% Puo޺2E.a5-a:c7>ck7 \M hVn m`[taT|u_CZ6s[/¾yQlpiXaN 9MU${gOS;" њ!A`=IMJdm~R'5~?B Ͻa!Pa;tIR r(_uo^+([S'YxDX+1aJq%beIdQng,)sOе BZnȱK^b4L=@ۿ_,uuR6>W3`O¦mטRX5.KwoMPƠ"AOp&=jz*˟Z WQ̉x'{!v^<~1a? (i v*lֶf1.)hC zfv5рz Xb϶O~i0<B 㤈z_$!J@iź1#Ft&w0WM;exgX؈3X+B` ʸkAA_4Ę/Z/@gxS8]/cL~O K=as]L7IUx ZW^#xfc3\a'8 CAFh.SBރ RWeGE; ۠ ̷= b8lz>\2ZxT I ;h޷.2`$:yGQ`i.'YX{9ED2)nJYh olaةcAB2VQ]gMg s_`#1$%bWyA_981C6fL QSeJC3#Frxr󘈇WH GMyy'Q̃ܠp{[`&GoAW]VQ;wzPb5%,2ߎ7&G!:rV5Jg}>V+qr]$PnZsJ:ވqC:)$iFE]'DSO30u.W zО87ٓc s1FYぴR2v:!RK ̿l`ETN!B9t\u<;FT1ʆ^2uľZD.a^QvVlf|٦\8c`pfЌI"@ }]p K U¨$(G[m)Z%EZyxGe-Q8TئNv~uD'`Bi8swr:eಓK 31h-FdU8Nj/Sa z7 bP Hԙ'֡J%.9_)$Oyl})F]lM~A^ t5eؾ C6LOL\- ik45U&x-${*'Z.Y;ߔ<=tADe$a\s $g m|Fqyv{Ь}h.4)ȡ2/Zr5дz)-r/4ճ3qqgQH~,q~s: WF3tHΞH}禄nH]ywM}@<-V~Q4(K (2 S˚dm,|l3`\ $䇡j3[f X']]R.rOr?:gmg >bRTsK=C>6*7djv+Xk% hSq^nV|Q<2% KRx6kz|u;9>[tR#=y?U-&c^a`^|$8 ucXܤ\:(AU?aLi%P,@xyW2nm Y*-Bʩ w"3զ+By'c@؝182"*zi nzq' N㕻-H"yk 32BՔhF<%d-VPg`8ZuϪnQ#]QMm-]JPm գJ^zo(DBu ȷP 1- 7M?S*rtV| La[I1)EI:sz/xo 8u(?XXޖQ׍ h? 6^qf`*@' jE$y΢^G@ #D,`/N3'O:haJnfux\WMeO΄h%sRL ou c(a@~[MD*B^8B<_M6ցAf 9J <話5'#`"R|ijJV7bYX xSXEM$^T91|R6 Ҷ$= p_=B/&1RmRbeIh F40EdhM6tPav{F sج/HKN,vK)Mm9/ċszW81\eo QΗ0EjGLiUåjJӶ)2Bg'Bs`7@yb}@2$%?SHֿ+b=\hbz1L}&_sB @?BH-EYeo5(*DW{؅·_L8qo_@[A.m]33f/Zๆw}vvgs?'kO!R`8HH׼QI59?AsukA/5P aU${tؙ&yDW'R#HvөQh}uOH=*/=6_qhV(>^( ̳? #p@Wx֩䵒 ;=tlK}.*sP>ڷ!nɾm!UjɰMmyMk7W_>_W]IIV1c R| wgdtߑW~_VzֲiA :x0;4+B@6K [,J'!|}`ن{o` *#t7~y$O` 3YZc ~- n>%T Xj!tll!`ωv'͝zS1(s.Dvݾ<&ƞA PUhDNPZr!6fԋl;yKEPE P JEJQjl#U_T%}UdRZ& NRH1v`*ů+ї!G;M{&<`&f ;fmjVq͕j&Xyְ+Hц}Js6HKvX7MT)AٳS.fVk?B}Bڪ7;IBKf)BQSL?ib;XQJF,[VSSJES!%z2b:<`&.\EbZ<#1zJs#f]RK< y'^%q0:::`K3<8#*(as,9X WhY&$[.qI1']Fp_ O#w Tu;z +dWy c.(_5Xܠ>~#PdO/Y Zn4UzVuڼ0 E%.0֙SVR(IPd ['f?&ޗ4U%<«d~\λԁ1 #Pwΐ*/-Rg!hFq2lգք8RK4Ӯ5w.λqy!ϓ\JC wQvXځ HonD L@ߊ?i`IBB_ӄk0 cէ07SN衉}l?p#; ]VbG?4,8>JxsdX1]h;~kKs^O²܋ɀXp&qh^}9F0#\JJ=\}Gb;RQ({~^uV~AociP}u]W8sIM4BQXm\!#'x ðWZ]$sZz`t*W"cΆSv*9ӢLԧ]~xnӁI(IW\&xA #t`VW nZ#>btF DS S Ȳbz#Zzy%L}6@ETYPV3qvdFLI)`sm @+DD,8N2}Ruc&n.Tׄ\E8"ke=0HEoցSBxhrnjm˗f!Q#<3N6tUU$gYSʥ/9uy gR6=xH˻i@t%oKA WR `b!M㬵*(׻1,tO,(C%QоVE8Kbgq{pc`0 }'^?SIPIx04 nQAT~9 Ȃoө>G}|wh$EfR$A$9 ]ێGN akݲ:0"=mbxۢ^ _o(&v,9-sThyhǪm{OzP쳹[/9FӲ[{&~Mjexs 2Ȉ G+b8Ǘܿc|,r|A{Jg#EIY!d,%{FSGe*_=VK_iJ4tg-@2{Z֋.ZM $xh=G | t TkGSeaԨd@25%WZzmrYNN#jkK:8 :{`aR. ,RHEU*Q+4a0LyndOTPH"ҝWNұe9J~fbT|mCQu4/;>~1!^ _zk> [ҨiI*،K@Y:/ڷ&b1I \^|6~fyeFh|X"w@‰U1'V)'6%IJtzu\.]348%cԧ\ Ś O|O((59L{qeH% s 1TJ|pRL![d0>6@[h}kA5d.jEru.*d$_.v/Սe,Saoy?/wp\cH\Dnc1A (mvɄw۔> ;]WPofh|^.6dHUh'Cm75&D ^yMc9v*u3]`4h,'ۆ t.VR|JRBý `|9Wji:㟨syXu9R z;( ;\*>vą3j41r AgWw* 6u3&dטv:b`7~i(=Ty'aNtu1dO\.|]^h*u_!m0W^jcJpn#L}OߗQlxږl\e|$n~Y{I͍O 9 a5u:6 <_m f%_~'^#z_}FLvw!sb)GTqwu݀B#FTiATfå"TQQEԱk[O1IT@cA]YNW#E[*E-\6nZnTet7?$\lH*xxl%ƿB?3*WóB Mpd儿ԘŠ+cVT3 ] v؛cJfFMJ\K,x:4kERalT.`Y#y*&JViŹiY +PZ(H>鎁~[; _Opvd#;ϘR$to(t @<~pJ$irL)¼ x_Ul=gjCvH6T] 6do SKo{#Aʕ`X&ӒWճ_JvC37`Kc`"SKNǃYXt˿'Ilʎ|i?KQGuiEYj`N<G {}D/憠Wb;KI`/ Fj0Q ﰖ[t n(( `T x~ ]~Z)PHMLkO<9n$ۈP?q~ u(L>g {a=ďDj?hOL){ˌ(c3tޅ6TI,B:SJsV4Ƕ \hO8NFD1 Yv#!xWp0`ňusKV 4`^[1UC<Ā}K:ߔ^:|}ޮdϋm응SMM)m'Mԧ] .LuR&eY<_@)mLqDC/'LJVPL XGn/|Sv.]&+pMiqM}lt@?kmؙ STG(fDRwMNhNu VÄ n';=A𭋮G,_oiTv5iGj/>Ҡ$kyYiч@򂪱M}r(j<Ca{/;[ZN:9Klj_!JLETF ~vGVCn8(q5#Gb\,p>[yUwn-^b2HZss}CI*g%տ,j zv(ΆqV_[9xK_X3Fu"9$QhIL5s &/LW:W2.dy`}{8jC|b$ai荦xGkV,az?{% Ӧ,!Ɂ!(Zu@3HeW BI56D\ 9OYlyt5Pvt_Ƙ6]me8WLK FJpu]^Wi:UITNA5+WAAAN~9Q33ЫWLs"3hsHխaigh6ۈsBZ\^i#b#=STSvǘLИ} mI.@Ad >I?b8g"8DLXKX5;.aWN'wt& ;Q&͎;+y^B} opsvr#Rt tQ5]HgP毹HJó>WXj˓ e6;>"Lf$"I?luEX‹Qd/wR"crS1 .7F66UzIwE6=]Xx E)os22 .t߮E}(\)|&Eb2:hMYxj!WV="N ZڍÎM׀ _`0N3f+v0=%2m*C4swZ*K*`噻ɺWJ&qu}`|i4Pp'_]r!qi/F.BĎau h˲[1];+__R\0$?6U!dUedyI$U +,QE]RHquƞu5zJoАhc#dRˈ;[>qsLkor!+,ND>M U Iuu _jhF2ҩ1-gn E!ƖRX}Ejs7?U/{J(>p!UqJLqXTxUc^D  bZ EۅZ |WRL(YK4bK Ӟw7.p)f/ qd=~(\>b%\\#^q7DF9Zeܤ7p`P͛YuqOKBR WJ̃eZWtpKJ etQ O_xEJjgĒ tPvq_VqQGA;Wpӹp:>OrLd /c݁~5C*-ʨJήAoiS?./h+!!ͮwDŅnmmG!DqQWy1${iᎭƆ |$ZWa6@}ePc쉀՞0R2bE9$ =Qxz~XEwzG6Vv En^G/ྔS.v/al5v%x)dlYSm,Dg v>!or"XġUEPЩ!(d%hH$/_Ũf*lP VW>@f)bXM|i&\RZsJ5MBrSb"^FY 4B%7^)uXɝ|O^fJ飂1~5H"n*O7J [N" G@ți;'t)[zCX[Hؿ@GC `pM\CS?L}U/c$6R>ʫd&4G,2ϧ.>Z Ü5P#fMƤ#l- X-q)M[֎Ecn~mjA;> @[jX,lɖ-@,7jDNQ9 *W"{5}X_D\#n/G"se?Z:s)'F$Z9@zجU.؛XuAz'š]4,lFzx1aFȩ)8UGY/Ҳ g? XBx, S &tTf* (\PKl^xJ|5#oEtKdb+G`Yh\goCCPm5w*kӈW%{:50U+-%OMq޶pK4jE/ \PJFCr q _NDːvW |(mg{O,-Iz)?cOzܸ?=V+6Di!j2츲sE@/6۷>" d"U~$woh'Trfا52-H.)^.]K/Se8wK.i' LmA"% hxq)#Xa3:9I wS삦vmeAxjQ 1Y5 v57>bAS.q8 6νVQIP"YYrzf:il]hO[oi9yf[\e$mU8φK(~KF̎,B¸T8fk̪2lގ_BQ$MFH[#MC^-9S$@MA (j]Q]qƱFp^_~(Q9w%{4gz@]N$nt*{!}.g->*fꫠo7*H} kJa>UĔ'"aU,"vqbq2 Z_>WF{TwΙGF\6K2G $͸C䥸Xipөpf4p|رYBV7XZBoZgH DJu;wHz (vϏ=4rB=wAkC좏e0aQdLjU8]fJkrruKWDc6h8uw2׺לb!lBLn'S&;ݪ9&8f́|ݦ4 7]Wjmf+aWF7M9FAnn߇pYq,y2ps:WQГj5!TY)^^_װ 6@话m@{6TD],뱸mKtcc>.fHȆnj' @u #`&- SW=J䚘m9IFl qDkF&`EEH:ہ#2q z WZQ 8&7".'@O(A8mIf K <w'DoEKE~Rۡ@󡎌|aM#̹edƈKJ5a_^^5mCH!ѥ٭Ro[0HΊmD*nG_ {c Yq ^k\?vb$W8޽x5MH{nDۨO ܅ i~IYcd$]A տ$ ۟*RN,҂Bq(d"b/%8Q-&vZU>[`[c *$K|`*mJdLyTD,/f)xXԪq13x !n.]zkkPJ+3!Z2;C**Pxr}#Y(6U1S:Zg8iʅq(-6ߒn[U:]ϖpuLE>#̺vψT`u++O BWz(д5@ԃBcd4FW#'mSI_Y׃ bS?N;DѐL{DD77꨺5@0BDӗ@.. 2i.Xq`mE{5g*HX@Zmh;RM3LQl.UcrJ4K zawvʞp9E9T"Da,BYGūiRM`m‘K9RC=\p@غo$׉|,nJA>H_qTJ>*d 6g*]_[AEq yA* !pfK y9*R+A54QJj95ΐݓ"HI - cGcT B=2`&FR!"X}J}\W|0]wN iҿSRKu7,g Txw7Vuf24BZڗUm=RY8o*r8ΗAD&UA5/KϚNơvU7mMAy=)/%vdX#Qc. ~it Dvo*r@Kx7Z;kp$- 2(nBoWk dxfH%@U!w o]}Y 6$MI4Tҋo}j18ߒ8:>dH{A5C@Vͤ\RmF9 zs h{;[TgF[5Aί#,`Qq=KG%*A){KX#7vK)\J{BV^r[2RTOqqܐ[i xqR Gb3A.vzK6GV|3C}Oxb2cA( Dǜ-T}"eZ8R#<,+9ok,6]HԽOFR㍃l ptwY[6=[\P3/};NGKi旵z:cLKL\lo!`Hr/xa>ZD-%9琾\f,)1icmE\FZAY ڧa}(@|ԲTńi7\ϻP0+m,][vvEs VTfۗ㏁;dyfRȿ04KQ2%#2-p#ɳGRO~t',])4ou Bյ4U1?R8ѱ9/E[̋MNsR PP^L ,I02r2B`MFeZWxKa0dرQ"RB57 {\ag\`[:. #=uDNHCr9WS)@9r1\~ 8l)H>l !TjFɬ#g ?0C\P~A$S}h9 4Os|eK˃n8_ͳQh ]xK\g[ঘ-֡% e-hP|y`)g.~'0Հpq^~WOǼc=1kdJ{xl;&:8*IJVת6WDR!Ȯ]O# RABN ] m-NMoFuL7=6Z׋(q;oaJӱ鏸T"Z)_٪Ҧ $ a)ҹH_'bQiq2#&ԙWLkt- ,82im u 86ܢh9BR&tÆ7`k5qxc]FT)jz,FHU=A O 9 *ˈm$nD{v#nٳpӡ7B j$8*3b:'=ƞ%hT(Qx2!,vgdtcLy!B9`'sM;_ؑg33Ї,D9ڴU}(;B+݆K}c7(8ܴ")&EL~I= 򎷤aٔ&LK]A 4o`$jxMW6umdFuN,0)5BfeAv㺑Ze>5oF ^d>J VB6̾U+쎒rE)G]qwiebtÕ8~Aݭ.sOKώA#!\z €lJ~laJST3V)qr)6٪ۅ5˴Lj/ޠ['"Qe;b`WU#fN7wDŹt$ӏon (e+MjxtObVi;濕w@I2{\lބZ9VvI@3֕Ai h%CwADI[ SڟezH^}z"sdns1Ɩʆe{GgmOX 9o|Ų~Ez#oJTڲn3<'w9]@>q.)U؋Ȕq"*a/!zT>zGn}\: {F@ '?QjZ -bc ȧ4q/#.̂y}ϳ[&xv9K =}%xޢl{;[$N eNg! ,!,X52| Leng:^!VSlH^sJ M]Q!n6@UrnmiK?JIz6 'ZZphL[m-݅d_?߅c+! <с1!'<2LJ Ep22 Aފq`<`t5e_4ExNuCӈZG%Q] /i5ݥ8( aȸT@]aS/0 k79# Qcq, UA a[s/R' 5g"ߧRЁecVZkVF )~ԻѫSY |/ܡɈ?B Gְ1 o!hb|*JG: O 4(XdQ<>a+K#M5$; #%:zl] k%6=pt;' M;3]r`⎐x,W.<[|sC`PkfXAx[4V`6ϑՔ0Eq7rK H{g" oxi$#\bn0ާ:yztl9F upn5TL}EeSghmv&y}-D˞lP^#rr?K$3د$8UZeXWYR.LVC>u\l8}>e^HEqH;#3=\I_S; CTZV:w.!\q;:)$ی*3ŶC{=/Pm[Ox O=4\M~v,*HUF3i]Cw\KpJĈu a~1v#cWSOS'وDn('KC` ՟qY1T~b_.ˌo@&h:FN$3vvMYuSpl1u=j4~{őHSО+QwpҏZic:K 4ql^sVbzO Р3{&0qW$a}.p!泋L͙jZ-EH kW3oV5z5)14?NMqtC`VONV{noTڼ܊R:w|02ߡX;DXẗ"V1<4B)x7\S|O|4qz"!srQa$ۿʞ/r=yl#"Kyȕi@:k!N^Cږi`Td O;<"|6&Ȋ)Y8L8QͬA4n/[U[ fQOJMFRQbN3%*u1z!b բĻF6\CJn[rDI"Z#~@cΰAlE HL7c7ҘMpM~.6K._IUSYK4Ӥ-Ah-'fIK?J@}O `7jä4YV5C?pCea5 p뒷D%LFXtwB)MY#t\j++-z񦭤b#6CкT%jcr*Ӫ][ 4zQ*̱BÉaXcPE%ᇟ.2T\f ]=*z"%HJUw`& %AAȭ zo& I0*}i ) w|Wr,Hט ՌF6ҵ[wM[!FVT$>Kq]v&)*].6&"zL.Myv$b+ɤ#4JnQ炻vcO)ْ5T6Aғ 7zP-I&f uF2&[6mLiCsL6e`jtII6Z"\r LݤүHRQBg670xoh:0\ἲA6FHIF8$5<%dJ=7&{pQ+NGT3-cQ݃ԝ)b%Tvag]z-^dsX%[+q0MֆXFHFfWNR}E2W12 hsq]AфƒBZtyՏ=8,6  ?ӎ1GPq:qcs~NS9Hɋ*uW b+ cor G)6`a ~(7z3FJsKXNDJItۋU ږbXU NN5{f'QL #R(mᵖ;.Nt$v*4Y= g2W]̈́rv|TWzsg!GiHǔ~SCzfQ\!a}:Acx#>n\MJi` ڍ/B^In))%PR"qbAI'dGzKEJ ޕF㟞MA$Tz9l)EV̬3 ^Hi>3MSkGCa,üy`fxgʜwohwzRݎj^>a%*az|\2QFЊ#]X"HHmfJC>6{g[[-eJbiM%] _bS~em vʌpLyh$@ 7EXڑQ;͉`S9,_漨fWLsJkXm)ڋi3ܪ2N'|![' ?.BQ$DhUKqz<{C~ B sG('^6HjŚD0?zF0WWzOIC+>VF{!ŬDO;N AmJT^r[^wy8қr2;N<)Yk薡z կpF$'3?M#Xg-%4QMTrd&V̓c$IzO$B\z rLHJjn,g8IpƯ+E6z*ovĜFus|IIknE&ʋVڰ3wPuhT8eGia:Lcn ?e G>ʑ(u|,Pŵ({(ZF_?$U2Zx@ls5sӾKe}jYz{*"֗n7v[F&@t%{:^Tc Wi9 -0!N*PO?{+sR1qo4HUr3F6ƁB{'.H8\"{ᜫiRU `=~C|uduo:ϯ2UD-̜JMJ^zLrrZhvYcOrSr@ݛ>}Vp?v7t9sv#ɉVҨ )\(<{&_ArE Rp kd-2yb%ٱnKk{xS.T7H0ۀڊiX|o g{ L4{43'-m9whΩzo|a@,WCQf$Z+~'=@W $pF+M؟mrCpV30X)"cop&B c%du?D?LO\oͷrX_ oh*\%8N݌ijʏ yd^{reQ$EޏmaqaAD,%>[BnĚβ/ sd؂F&VH6v 5o>;3yb'WCSRW$w1K#T. 5wo_ZǮL&&SVifǹZSL&c:)?,NDe|?G^pZ_b5=FCh@l" 䫄ICQPG ߙjH~;J`6X*{lvyبis綵=۲׫˛R/T[s}mļӊ:)q$7)1B Hג9E^P9t#/W`TtPJ]\.C/gX׏2>g7#% ͬroU$Q6JZ|DŽwx5IKF*0 =ihq ^HYie`u?@Ԩ:1>pr7l4}!DGH0JU"hiOX"vFR? foLޢ;.owк4֐C%vc)y ܨgE~̮zbN7Tr]R@E[V0Ct _EuNBIW V%'lrPvR6.L,t7tҮ!otj/&^%D2D:ol1FMXҲi3I^ iek!v&CݔszPEs4}y'}mC|gp+ԭ%9sq6RoYFmy1SYU.MH|WmEWu B4KH7'sTu0- 'k噁1|^?敨Α0pr~q+OבR=<hBD!F2ጻ6z#KF(Ma=2:{it`aD;+p}¿Dˈb1A0KNUApÝ 0rY</ٶPK0(鐐-gn3\ܻpU›l-vIP*\GlVzhݴG.Xv(8)ǽܻkjG TVw0sX3ݭ'CаТ/&tE~Dw%T!foH6oQаjt*euXFbP2)8O¯.Րns`%nN xnT+H>  auKDoo.K]$5l rE^ 5=y;srsU^rNL{=»Dr_Bh,QS) 15i OepZX-Xnf\'6J^P=٩} EF9ֆEXRU?TUZ05~F ־J$hp>ϝceϳnAuIɊZ+q"bxcȧS:UcB1mMT<1}}Fcm۱vgBY\G 2@pɨ^Av$}`7.ecA%>owe X֪"!@woVkqg&gSD,AK0+TRHÀzKA2}Q? ?¤QHF"Nf|$`6Y B,mtʋ ik/SZԒ\g^` Sb uV/} GJc%jg1p\yT Ϥnz~GY0"݃G7"i͹yo!V Rw݇eH,ӯ"93sT:qdA!Z^!G0Mᄣ` UU䕘mLجd23?a{`)q Xۤxz6m%Ui43WڄPx7**r˟q΅?ȹj ܡ[U)hXy ]OrݭhytF^gLWg BhgEL`ST%-+=/uESLҥCq+E.XN}au{Ln +jP KQ]LO' LC92:DpmڀRђ9fk-‖\ϮTп2T𬙚omōFЛ:pZUXz|Tz=9ѭ(y&N(uAR`>AҬRt׶`- ejtSzҗ&ЫSN{0M꩞"p0qՍ VJJ>8gi߀U%PE~+s>8Q9zJoS <׶ !Ea6,2Ī̅ǽ*OyzFOu Gq*HF#~"DUXz% d0K+U?Ui Ӗx0y*@'H grn47 .L5tilm6M235ypςa0<:Om*ôCw|#̜ox5hJ*e\@/lکYtLMvw004X<ވp+eiͣsvSldT!zgΘOKe5G2K{3ږRA.3Kc1RSF?[Ϧsƈ%C7>@ C)\3=v_uӕyV UգP7ti:i*)*ӽdG8kև*؈_PGEݛ(R:&nFL(\vKq:1&l!-=qkTT:Qک#@&U7S27^F־ `Zƅkcc[gHɟ!Y^]=ZW}p حJ=rKb^}xJ b::9v,ϕgW(tI!'& |^z9lDDmv;&By \Q `.2%})pQq]BF?_T?__;w?QntJ^=q`VIm-`'TG4Mw5?Gg)݆VloYm&#+ #rЅ3ŏ\wO0riy( Yǽg\-0 O2cvUK^7y&v;y1po_%{cj_ xC#X1zTE8"s<&SP $Qɭ5F X ~&b#XvS96Ơ-lr:wi =91Y+(v8_t59@ނ- k$TՊ< 9fu0<K\1V4bWq3lVodT<׋:NIXo%1`J;FZ&3BHaQk-rVb{)]!?+eɕ7[?yǞXiL~!٫Id19&7a|56ܶhktMX k(S- J𣔅@f$UٱsY %3 ql}Ny?ԢYhxIJs7d c!`VWµHW⟕~"QNmncSyڰѥ%vaZ$Ft99Z0*tf?>  ce]}] l|:\[ߩ'kv[$!_a~}( ef"3[ oPX3/RD(dvbW9Z !bNMh,IP?9؍~L>w]A%!f~UfO?S'tnϞY,'"hR1t-=WX#hfhYt*A ~S^<^^;19q}qwhL}L h-i,uSqaf{Hr#g8ę0X͑,[Pk+}Cv=KuPo2-&$|Կ t6R͟M'MT-tףp|N{WIfTHg6|6pc<zދqeNL!hCzӼ<,%Xۚ#$[,z| ذj'F(qktrLq)Cz/l]eu X}? Eżƌ~6ӛP|RrᜏtSݬGI;9L:gEWCf*&#CI[57m{e!IUjT/$|t4 ~+ep+DeSsZg?yd|wlkcuVMcC (f$jx7ћNm4.pY:bd_E:I$p9)~, a,cP@^C6U#fq6#C*/PW~_)]zP>"^4 ]JyoآTFݗ.6~ -ܸW |ݰ]wA*=O<'73/ ƈ Wn[:(Uïvׄ;Ģ貚H_!|:5i=ֱV7=r9pgXs+ټ@5])159@q_%6!/vew)G™lNzH_%2)S%e 'EΦc~OF+c ր?|+VqP/KB yU5hh'KViY=G1p@@7}p3}̇^ìn-FJ !+#].HMzNzX@3-/:nVV .!_{Fu*0Y}K2..hH?^' &iF3R=ܓIzo2p9 >8AWmzAUTqrIBe}RH $ 0%tls~$ؔE"O9db2%-lhڝR_m[l e"ѦL#92w]3|ҷxy~4pm 8ܔe LK BN\dGq&>o!,BxxA8@H!ȸS4r ϙykɴAvOJeqmat0‹S 8pK؋sp1e"v6GsB 3:Pj?Ig!rf!W()U#+N~7O r=_7ԕ|J%gtxT6aPo79u$BywRPs :aC69f֕/Ekռ-_R>PG kL꧁Ee5lIQFa)滻O˂rQHɝ=[)tִ=AV6*/3\,BI[]4Q{hTmjZo!TDLyw#;ƽP!@p~#VPd?pD|֩J ]aE"9 AțͿ(0+OƵ[C*=:<ェp&2(2҄U쁝3}nզeu&q- ~Rx; ( 8J`iޫ;-J,t6Kq71m)2T|U"36WRZSкQH]ǀ"A1‘fp[y}CR 1GAVђ]AZ_dіeJAmڪhJN/4bG7@YvZh'c'OpC?5]aFaT3􉵱yYM!arF ?( 8Ϟ t.u>rz˫xׯ"!s]bwa)ЩI.OGDUd3BKBŕ&ssMwAte;;E\°Vr]& FqSi Y-ۻ`dgvPj9Y%"`!辰ݑ 7Uzq8#^"WXތ~1-G 2^Y]00.h7{UD⯴_MGM(V=Ws95Fd%I@9dw]̒dB5_u}k cbֱh4CT{3v-N]qi~h OyZZ~8!HR i 썫ĝ=WM TmQD[^ JM)m=u߽Q|+kK]kX  A U9gy7J7W8o 2jWR!`2r4˜}P$D>C#qy$ٮ~"&sD{Qk(dIkM06q3fګ:1ɂ*G)FN~XNͫaf/e$H T}ԹG~kxKQHEj["r.⬾WgNP^%ua70hfBe@;%:^l=u@rNA LDprQ9dzKuPRMJ@ 2 frۤ0n#OphK!RuQ\!_X}-j -MVhq ^}llCwg(5#U䢮ԾW@8 Wʢ^ô2nC$ iDq|xƫ{*:," ?*f,4 Lbjta Ȉ;z@,-,7}5bJ0Ɠ~+LÈuOvVU{M1dk\BX=[@,g#փ֞1sИyiM5Hәn-!P]4-53Q:U;fdAmI/[9ITA; P.Ye "Ye z+ڂ`YK7Omyܰ:}C┐EaǿrtZ=:Ō6/~Uܮb,svؠQRL^Y]Pd2h-3p%@+Q(*澔;̳c;ꋽAx)'*Bd1!}Lz/x0954ӫƮ90{^7f\]9ׄHLIxUS+t]D:OqW3$tj䜠u8MyVڃ:&3$8͑/G+X7Y̔2ĀٲĔC?z'H=CfgtXa#eQ=vkH&ܮ4oVةg3c^38u+(TS͉ 98e;h:520KqxVњ Iϲ6hZ1G feIe>7ᶩ]~>CeTg^],PjV\]6aw:!rI  X,gn"OI?(86=?g-xÑ;DDy[:`:Sr0EV x̥SHN|KXѦͽEΚ w.EM 0Xէy+ (=C@W Ӻ*v#VQ}@_?5YhޛVX#.L(dWF!0!7 ^WG;24Ha֤E1Qp[O!n/VLQo=aGwW ՞zMG3/H0VTk }a.>$^c\KOz 8 [P|5:;BIx2ѹl]q~^ۏDz-QЭJcәN?cM%D`s]괮HϘO5ÜP%&b'kFVg g>&r}`4@-Z]lk+o:}=oO5܀M#m\}a:(Ժ467e ^gMܿ/sX^-'?c-?}6?S:27A|&2omрW@M!}jۀb!Ƭ?&\4#}$$$PxZL~|j5MpD h7F]:ڤko .O=E{F㢑p}Kd^l(]+>DC(9ZdOԉ.}Y& b-k:V=jDi(#*d&d5X1X$6 ;[w=%ÚQ'́gYpKS& sempJ2#fbjanD@?K tMav&x#~l,Q`s *NFӛ~Sc !P{qi}bt1Mmqhfחy5&yf[r q/jj>vyFNZ!wS3c R=X&51} S[O ouJ1Y ~BpKBXc3ͮ^ne[wܙi[CU:c7j? h׸]~ȵr5+! 3f%2CӕB\1=o{unR9tx &w"lt=֋QT2S"\YK6:@KeBEE!-V~NXR44Q3Im58lZLXmS9q##:T77i:͔Tp} z7Ч*';ቧ->)-)LܔN!2vbm)!.bⷬ4jaf{Ǥ^4eg,i :mF;/脧5o 'O.;BL-HEju0Ӽ0s;Cdm2nX Na!!!xIEpEW_QWgS3@2tN&,j_a.<D%/T/@2lc[2DEW5&1)^Fx<[I~dsSXs&;rZ0]Bh<|#p-؆{ uY~5?YH~F ٳA(9A׷S 6pn=T<1=igq}lj*_v8Kc-gG]MQ(Z+ 󇍗"Sy0r?e_8-舲|"Y9hx%X&pqtO4)k%JrB iǫ$CPnPn`Bs\s#5OvB%IΌ^D1=Y"dA&XN61ĄVV޽|qevjiG(򑤞`_d^4Eό}Vfv.A*ۂRZ,va G@S7A {Kދwy U,([yNA0c.vPavx%h<m &Ö/FSnZ)Cq}}ܐ?DVU[L=VCDs!F{LƄ|ST-e D2;S6 mݸ? tKV%F8C:U_Z4K?)@LOmT"|&dN͉򝘸w[XŹ2LÈ}tmS PЫGs-xb~ޔvumlqv&n44@DHT.otlKҡ$˅2 "f;::hX9&EwCA2v`V@@^z P12*4^ΜAhz zXNldTZͅmsPZ?NʊuE FƦ)<ըNRq.@BC`* Yč!SG_BXJU6 ڤfw6 E߂ <Z>$qEx+UCeȗ, >զ)n@Y5rGpOzrJwlOud)5"O:wpP{g?vCs6 N4Kw 6c; I2|6 Ǜ)<2tx< qZ| j=C[xYMViJp1ED)lk6ldٰ_yD;_al"If(7cާ/M6"y3 0TTHXݟȒFlWڑiZ ZdW`Kh:1o,{bH5#*Խs Ju5Ȟ@O#ޚٯFbo͹% J›O7XENkntu\% ŜB.Dڬ(ěI1{6n| x=ZQ1wٞc7(z$( zo=Se(QiNcud1 A &j]'Pb k! n*yl^xARçfl`^t4.RЗU-`¹m21fGWDygt)f40wr-p^>xl @ˌZ>yRkbQ53Ȋ1$c0 <`RpD8&F(QhԶ7G'5f[EڕmsW`!Ƚ4UL0yBj$iCxْ|z x% +W fTb_K5*TAjsrƪ c8! "P]\|4C4ש?"ʚ7» &=uE ?`ͩYj8bBK;{ Prć7zDY.\̩淹`_5ij$򳟁 ,C%"M-1d[mY}&bLB*Tt3KwbN$7QZivѹsǬJ@Y]pLbm y4_ ?Q!OK ]Oh1?)R#A9PgUݭD _HrjMIww)C>\Z+]XH~}MW{>0u÷:CR$[t^nuD;GqȯN?ZAk ]O Y'0,; . yB?'[UgO8|?6k<`H_ Vkܤָϒ"nJ#yJbr`%$,d7 #8+G3iw޹)UJ0Qڄ瞿z }4e2K %ރm:XS=Y@jVz_dvSב-v\<LN Y^M1{8W@u|ܾJ?+Lic٘gο=ƀdI-v %Vb3Lhlm(ƒ^F6%_ }@ZIJ'Q(TzX+d$́K{ʻ!%ghWz)|ftd;n7Y*Jvk kt*HUmar&2-Z/:@WbzFKk6>d0?M]h d[:1YH3pN/X;gbz1EV+x#ƹM>^ERgE= BQiYA#JeQejh37-Â=KT])PP*$^'E;MpB{d'dOdL<њg)1j4]HXy[SQωwj̟}=V =˂!jDY Ti8\ lc%IK)YG^DLQVdʮ2ֻCY"{Шj~!YWpG5g&[YM(PYA&iFy^":縝bǓ&8x8Tيd& 8 )o8sտQ/7$ImpCypm0Ϲdhs)N%l7tJ`M#ĺj A9( h{'(s!aÉHf$+Ryp/,.mZ8с4%=߱f"蜅g nU:%V(=uÓ@s}ω61-F $EH`|_Q!rɑcO^M̠ ncaa0gb /MtطщZŋ.ћaۣ:F$l`JpYmvק u M NPhr2w}%50I"f)}-~>u2qO_ouL4WgwU1!9uV? }3`dH\=8-X'4f4瓃P$#}O Kx' .2Ld!Ģ$7~/KNfSUm8Ai'pS52ۄ9NЭM{>fA@+l5`%[&^Y"T9&'s܃'x/MOe#QRw鬩3%sG"|v =Gɡ%»E1O;t= h移aD WH JZE}\ipC6ԥS z8mHJh+h!Yi9 "YscfbWӮ75UKxy%KڬuNFۚ2 ߍnT@i7r'v1qdζ$鴭9}%luÑD|6$\^ez+-l&tV.~$ ZZcbu?AU?T=J ž @0({h89rDPח>6t ڹlFa>vDr :3 <$GH7}HίN;!zvK1%T20Q!8mkr_OD#ʧM-א$Ѭ=(Gf@yKIpN5emދJi qˁ14 g|֔5VfLaO6;mQ \ûka[ )x-v@vѸ8fQ%/z)|@dn`0DKNQrê(Kr'׬>HG *i{ TM:1.l<22Y`|VdU43˴DVjCji z̼v beDm:FˏR|O~0hl#x2c Ai(LS>5 Ҥi#I6I%-pp(R$/Zwh 7Dl#]y<)=qu|`-,|ۂsnj0 ,J"w2:Dk jFctUǀʥR|w)%QmaYu$ r!= 1HCoY-UFƌ̟3C%vAvtB;'x4daCP{raϹ923,[~ -ýp도=@=6ڑA- ʖ7/]S[ hse'ߺlff //w1`L]̄[!HI:t' gy0vYY )Enź#N*sϞUd4jQKǯNyOZ &~N^b麛M?W5 Ozy%+h4@KZ3.͂YȎB QEǣ ْe,F>[B,Xp=4 [5ڛ]J=mFiܱK#;^#P4׊1Y;g٪~R!Lآ-Q> La=> %#0|SmmQ\13c-E CtrG8} "ew'?L4t]1[H$5jPo{N^0 q|yzq@_2ŗ>8S=X"8 &v* zݛTbf7雤ϙq@E%ٗ`ܺ%^ qswɈ([N5Ӹŧ @Ufhq.@ Qg,)Q̎G3fO v}0z69܈1gʱmϥSʂV(C.j26B3^|D?.8QH*)bg)o{>Uw[ V|uc.1(Ѵv_S뜃@2Gɢ kcܚ|s-/ FW8m1.m^n> :2 Om h(۲iqv܉gA.H05.Lѯͦy%B^#| zyCvF86;2&ߵX^Bn9!7^\e~|-ϔxޓ?lu\PK`{ Q7Xi0~2KkC[=d_lCՙe v'X)n![b߮G j73qDK~I1bUoq xWz#9Z!fV10T&JI ^w[ HjSfۣD4moQѰ†c%ׄj>P tWh_] \ \_~FZZvkRDΘ/0)~?6|i9 +8B&1n6~!#}I':v՞yZ m܍+tlbr%InU$uh=e$&APU\DnwADR):Xg3MmK@ȝhG&rC%"}- l@NqT#8A*Lˣ뾦`<йz/b}qEAJ0>6Y0bҁM3*m4J,7d "`sPDgl@ʉڭ(:J&Kdt4юa>[q˗$o(Ld)qN\N0 fխI􊤀Z3 ̖϶j PPߛ* FFc![S/iZ8?uOrֽZg۫̈́nnIm {B;kj'[=T|ݙJ{' B?QrQ4gJ  YľfLBPr#8Yܭ2teZI& | Kգ>_;d{_P7:d|(8J f]?WұH`LO95eO`Kȓ)zaǼ|,"\{DPO]OR}7):S;!,wa?,:+"tyPB JS"/l?4t)It$1ˆHD5w7-=izTk3KAeV"1 k3T%=Eqd?ɰFa߅Ok5R6kۺəFjߞwM} {HcG#1)P9K7+ ;wc@T^" TK<ћE4S~rC'p><,![.̂QDp/•:$Q2@LtE&.m} vtY-[<U'j߫'jVJ09cj7/P A-'r |5q=C?4Hf EӓjaO3dakb__sЎ`O.*gfmhmq*z;ڄggrR!5xpԁy8R]5U}$asE> zg)HC.;zY{3P>nђ=wR V GIBAX|R"?e'(dCJ[>\@ HIZ˴/HpF~Wv Diؠ)(" G\ެtz‹WG),p[--W757nۼs gF #D )1Xrf{ve%yڍWkBN*55 =~"VТ,(Zrܑ335[vM<_a{vyٷUyr?om/A‰ `&rc,O7vI}b'97$>2gٽN,;㘮7j8f:x =L T0\ VwCa~aIS⒞k&b]#Z:=!Sz A7%d[ߩaЅi@/'٬Z P`N8LDݜJ۾)hZJ\ tTe#aJ̇sp~˸H{Є.&?*9|yqЯ$y 11 |URLcKMXj8DjeBTf>HUhC=j\6 V!U41" ]UI"GlecH;4V )uFf@ K4\>O4vJ)իbTԜ7P4wf} >-+^F.yy[\$+k[>*9z{]^u_MS=qڍAgR~B}_,`|V6x1Ƿ;M9g#P4R I3 ־: 629s首YPj~;F&j|Mambn}f=4il!$㊮ƙ9"ۓ^܉N@E7SұE , EphOu;bAaU? F-a%U@LHq#IF%N@y:&g4BdnN4 n5iҠ? #O Eoضko=O1t`N|),e25wuV{lkm9Z9s-hrKo_wI(p*g;t3^N@*1oX{C oH%`qoWa5ӯyY:oq0m+qzO{CG_4`r^ Ǧ $2 Ez|߼"` 夈~%)tsM0_g Q蒦 eZf<'Q'zD#V.dR׉V 4ivDj&2$tyxzD X V:ȸpE] @ pXqHc xi6'M)0>NBi)I}T9 qR{$т*FS4ʝC?ZxdT9SnwI( zn!*֧!>Cwj$^MV&"!&i+ȧMmF7ĝq(x68SxU5a^w5VG:ialw uy~)/xBV81Ad7sAJXí"?qG[J7.yGA5yhn5"9aay+_$_4.$ VTznEfpطUϘqNZbM*?Lƈ! GpVv-\2W3%g\ p)+O.EvE;(2PT3nC< %f9!KЂaϓl>~J{N]>Aw{ayӾE9CdYF>ҭ&3'}ɭ֣I&/(#K~h b&dΰ/KiH"c6JD}.%>2q/(L9w0 鉽|&񧵌?o*{G7 trKu|S ,f%;,AAXp|g221HʹNSt`srǂmѪxS/vUI`-Pkyn^xz?:K:#1gGJ "8J9,.FB |-۞Ϋ [_ĥ!b`KQ 0J,ב(H@Y3&m/7-Ru)Z~v'VNWيΪt= jpRc@sE%;^؊!JQHER<>B gsL}F};9p u\. }ct) HG&8ɮ?wԀ鸏gsT4S*a7`8A +}JI&/pmS;ΕERmX8dx].fBEJSmoۄP -žDlte~ 5?(hel^I925)de)=1oW-VUz?0P  n\uù"*.IU41P٘ZpQ= i`eBğ/% r/mLSTLDtYib(lt"}viw+ݭ6I)36s.q ]HbH+PRb3q=RjV_u֮ T΂1zH_??L% X8?|SҖY4z=FTЊxPI#︁_ Zg{v!ܕ0J2QDEeCƃDZ 2`eOP N{V /" :8NH)]%vXrWP'˶Rn FU $4Hzn->Ej} Nqg‘-z@i+~v]0x ku"'ma;cπj*IU֧R~ ӼJ,zЙG=D Moo[tw1h."{%"#KjF̀^U#ԑjAv3~V eIӖ2~12ڮ^{gC$ fWbķ/z ]"Wppεd1jxMJb)Ȟ+|e_MԱGIN؁"cĪDe_ ( 1:b\ UjMX,% 8D0Df|Dd B8`т핧֎Ūסk3uބ~ǭ~L3NmC'F%!vLȮ/aVd_8438&Yea_ N. .%Syc퀍xM5Y~h^%I=Eb H >bAo`_րqUנLifjVٶGZ¼"$SZZPh&[ „Fv3IkWWKjVS8he1=cΑg.fvGĵQ{@J`jGhٳqHJ&U\x13"#W}#&a;oB t jɩ3ё6} ɀmKLUZ 7y>c4Qq XO}|Bw]^ުeR 3`/ KfR NZe {_ i16\C^,G9{ȀIK@ 3HIJ6s#8@Vs 1H)^o c|ؽ< voA-#0T&_p/yچZe=ڷ-9kf?q\Fs#^p=/fT /k. {u;9Æ,_&zXk:5={ Frw^p6K^qOi6#6-:~5PFA'OIiwx%.8Y@?Mr(=/@#zI# tRxWHQwKG'aب !2A"A]]qA^D|N8ݙ [bR'X]Y8/0EǠ2ߛ&2*0wn'`[^_8._T]>Y忕Wi|Pe796q_ Y/YVιdžO`ldc]m\?/n!渃J2@w3gy;nLQɥq.>:a2]KKn)ezFcero Η0k,C^.RT2ΐiQ R!3U{lg\ƉPw<,4}P־r#~M1['"lpS99aY-B4Qt OS Ia{x:lXRSj]=Z9 rj02' \A薬hA;<6ʴv_S ^;xq Er#0кUeh?B\*+;B5+)̆pc*ԚͧEA@PC$IKLߔay!"LANlj]rC{@f]l51-#ɩ#jT+tr%)fb>+u @z| :漪u۲4VzTށ> OR ;ݲ>8YA|=p&h:)iW0j9hZk9 jꝵh<KJsQHOI s/|ʯ .ӯ;G <:`vB{ԫ5˚ۏ$Wb_ |äM@AOA*!6wBGIvQA(b^JPI1qTŠ# {(Dk8˚VN# (xZzMp)zz$3D)E0?-}9rQ@z9u@Q*4D3H1[kx:#hU=sIF>Gb$C Tv^2ىIlX<&!;mˇ59gpF˱zi=)$y;R!7D,P#?vJ`>D/p[rtb( `JbT6p9rS?Ɗ;iHS bі۱ϻы(yy+#vYFnLWj7>ͱfI[/GȫDn`i1*eH% /!1XUUփ$ #p'))gN wˌ8P]ÅhQ,XgO73.D9#DGe;n3Ҷ4_yT m9O)N6vj n="N쫚nq텳m^xll;/w%*+h蔌V;ZҡIn$$>6^\Qp߾s>G~r+ov (pT) =d#.c=C?_ b4plۺR~!(n.H>7¨@gd8QR-cǨYiA _#c$5O]aig z?2¥1"qשozwfy-4bBKjo6Eo*$*uuim6[D/0@\o[? )`"ͳ;"EVӔ "#fFlؾYB{"C- SŻAA&ܡ?W܁3V0ڗc HnD)7(6khO?C6y !`5}:[,q;c@E Z}V ^ݳUj߆i1J@gX>2u,rvdaQK +Ll&Y|{ҒzXa-nD2/|*L0z#Rǔ4i^ў1n66z^;{헺'Pë<QίrQ2mi-#;^+ofa[dHujփH=`ZKVRUЭBpBg{-z3fRpewؒ 8eEw;R Hh`VPF"@.UgAZq}JYH_gD¾6W؞mk<4'S x0)6Ē ȸd^r*M$с^a*EA&˄f]8IIOg`z*'Bt>#r ?|0]5(}[r!Ͷ$ rz$X[We~V9#Jt`RpB##WȚ$7Fo0)).cKR`@. ϟgBFf'i!@]ȆI{L"!ZvtQ_B-zIqQC1̌4׮֠,%{\ Klk G8pQ7"U6=*l %q/R/'W|(tI)xI$Ǎ-D2kKf_KhbiC|IS"KGhD?1*2bj <֩uĽ.7xSc7KWӨ2&j-AM5K2 @vf,0n]Eia>(z <Ո {;5dEy -n7Pu;uS5x&`d}QX-̓Ec #|[[oK[!Fr])Vl⚨IqFL:v\_9V!ξ gx+) -r&1:hA-t/1/:ɒ[&glAd˶*#Ap6Ӽy՟|f&!Kp>&HYc/f71W怤oUB-f*"VN1\ Ԛqk=a Dul)l9冖H,PJk*?N BNxKO{G=ryܜm+}dP[B-EmU 3"iƞݓRYo0Ƹ%\t𹧘Bhй (QHwV<;b -cau9{ܕQku- ar*[>Pu*14Gƪ73Feh1agSuQ[n%Hj[PL`wzTu@ax@%=ZL(I[~gԺLR.5r:JIW67P*ߒyftыm`3 ״-:Ӈ?ͿĈL~k^b yOnI̋4V)ld}J:+J)w{?#LeCv{7^J=S*1sO5"vNeăިI].;蒢s?,%17mN -Kqy$3#j| ;t_lsA`+U5-%66R*v-Y'\w*oHqc\T@sZ}έ{|Mj/Ы&4_S?z76~c/Ĉ8m&b) E^1nS)r7;pph{g)w$KpgB%ʧaPAe8Ro3RG.W̿7Aj*n^HsĢO޳uLKZ {5yUƟٻY RegH_}w끂YRhf~s8AfVH)s 4s}EK(A0B56Gت|"=a%M79.`ƞ*8ٻ^kiw]y1Z3_5ӃH ୰azM'  rbh{Dg*eXNϼزEgR۞5eϪj̚H^C*|FJa5ΨQK,%D8E)*{w. }`մf`֙f l"4bcr3LcweYsU|mmʹ7X;\lTx{Wgʒ&SջC7MhP k7]#$2$6CַBhbM*ׄ^M&fa' ).Jl܎ SEIM|D$M}uGחeW/ [gx~a3]^/rrܽ~m-}e,Bsq7j3-Z~!^ U}L})CszFaFݕjwg}o%@eBgi"˖XxOG?h+lإSy<^< fQ nRv|P,`$3^y+ARб;'E>INw3~Ci7KR0Q4sr7MW;iّe#\ØBgɋy6FW>[ra}_b'a_󳏙 N2A}{zenINs!]t$ԆPuJώugxHK JN&RPW;lh0\% GsѴ+ͼdK  3g(xuY}a׃+Y5Kz_yHҵV䣛ZKԤ\b$G[?Kb _%~ҕ >%OO;ګ[qRT1bM).a&հ^|X15Xv p`o~2QG."zv${UM cGX›mFE`,ˉ2ji ]M)]y苫g"ktI02/J͸BJ->&7²e] 5ZKMEҫ#n#⫯-˱oy D :b@ K}%nj&J*HeJo Ǖ=\un9DAdHo8?.%|8[HDWfXy%BB!+ FqWd |QI UO57C,"omnؖ:8M<~QRS`k0XH JNv瘧F]--zlƙEd7XĿMx$=2oԗDS =1ֺ?"WêA`C>C6jLZ!g($>l&E."85ivA29l!YK;m2SSW9G* ~D3Ǽ{) @WT\=&B&{Hc^)5`+E3d6؃)2@_m c[Z^rh ._cc-O[lIdrt f2Bd^VܪTR]GG^iy!3j QRblP}K >=َ b7qM(U;?:1F(كP&ntzŊ4;.u$14s&+~"kK7$hb{认rOdyH0v Y vhVdN 2JG>f:|m4|pWF/kC@3; Hp)G DvwU B݀#̀"Ҕ}Ÿ_A,|oMdsClpN8y0z!n˝;/2mcRt,?cڒzn]!>,|cνbd:նT egls b*PN' AB<73;z hmhtAktMramHaĕo匷w M*YNapBEZ;7'-7ubћT$Xo6\y^wq*U~4RPn {չwڙh5E~FװMW/<ط>g}y $APKh߫{`-mm Oq#MEq#H6`5P?~9~ ?,+\"~5m(lԳv|oE BnԢ6RHOXv#DD61-6Zi&P9UdӍmEf! ,, ِީMMJA9"mB t/+曝̑=]SdN\@[^=n[FZ$>M1kKK|4(b>^HPpsĻUp4m֖ )TL9 ٳ+DKc ڱH-B]&Κ2t0ݎh!3,+ {iqdg`BNnGȴL_Wģ'Q~s;PEij:C#F/V&b:P@{%7 4^e:ǣpShwG %hM@~i3~M<< >rbE̵v#W@r4R,E]VIz}ゥm;DK'DJbآ1`M~MOzj󇙺w/H5{N4RscX_I}3J+ߔ_KPc&%mdQE4^@|WQ7J,JrG^ҢSJU`~<;,.Й}r]q* _phJ4s{ouT 0P4 tMY&/ߴl6e*Hu :=&v᥁)+ă)69 re-"O4I|*2Y,(TUKK9XW0uwI\6>zpYiM"|R QQ_A \e=k5YP*SQp[^V@̚8W s&@(0^Vn9JOd=YהL qO[tUM3$tZ=I$2_/r joS0tdRAő;Z3 JM~ ,߮r*|嫗 ,ք!6q6 {bsxB: 'Q&"KGLY!E Oid2KfS3KR[MiK QXM³k:~Gzd He  ou-Kf",蠆"G-xrЋgwrI Qj0R _IvPTgc/*) +f @I( 5bZQ %)Mm:|?L[G=G?٤‘[ZT*Nol=>a}̯3lVa}EafDbcLuoֽ2{Ս\v(e,l4b@ &~T>X.WN^FKX( Z+C'6iG!,EWEs EOƨ?KrRHCc9Nua6B0;}a22ȩО$a#KplWA7V|zoY/`oU*D6c%\;ă ~[A:6CQyg}­UDUi91Fmz" Y ť-C5<86bpzu5-@QXZ4d}~(,ix!!-Z;-}pтq̎@hA~ 4OE]ˍW`:J‹%2dO4~4E^{.E Xpl)mMZIE-jYI=Y& u}sR T#zBVÍB%_Dˍ_(sK!UM\L`OE fmZb#hgn:#gVZp^|OOєxK,̰#ĢY:Sz.<"}L@4'n+%7(Xޭm$&/c@SMw!J[n%oY_ 圳\LlޭCoAdz(O9fb.o}/@[u |^ha b:y/3Ēhv|ǻ/jp۸3/H)pAI-)Ţ 6Ѹ8bdJ¨R#jeЕ/}ҳ7O# С6Nڦu_vu8<pxnCV<H T G5kЍ)xmISRϦdhiv4/՚jʣ~+D/Q2db%2+DAb. Inh8Nh/WFΪ>g>wW.`=MJ0ZZN8 5BKm= ȩKclm6EcV$l`lwDQG*e}l?+n'~{sa|ap %! $O?Ti5O9BQ)h[ &Mt᥼#X <4+KSPF^O[av.W+ %r֭5@D䏿@(,=~wXlE7ou qxHe9~F /z& N/6\\oECYMUjc]^{7vRSdԔY>+<>o[>ˍs!$ٰ?񏽒iD]$9L$!q8Ƣl>?S`R Bcrn?I7İEZ]{bTIе-DtEɿ-FKalJt@Ism̄{!qmn Gs"\ EzOE])[gʝhX30`Z3V}"fehY)Po-)lэ9OST?|[6LDum{4N]Cņ||l$~vG&Νc@VVۆ(CHYFV #*}³yxS[#sΜF،}/mTn ʵm fLov+CYjr׻I 9Ï#\\|nDw@InMz"؎4㳬in/J,{$r&Q{Qc p9:pZzr23/`9)L*6e)GZze4Ld]@xlc,}Gf6\⃼-c%qt/sv]Kf`d8YWK~@Rp"OZOa-)=ϧzQȷ7hۨ_ q)I)So-c:UKXJpv#ե'(ǩ_OwH5 Ԏ^MB-M[$pvw9ٮTQWo9< dC>lڹ8#nf9Sbm)M4 D+09kM0c򜌺4QkD9`?d5q0+tBV))%=t0挣í0䏟fQ2FXH(57gUh-t9>&C㳰|ݫhSsK*zzzbt[3 J̶jUX̾8E*ܨJQ2i% |}X6,D\eN.SV[bP2 ȵv6a)~zò";.xWl)Lԁ«HH[7NL3rDxx2:JY_}4 t]6w.׷́lsĢe;GS!|g9q,;ro3ۡLj\zI,CRgSOEM4٢Av\Tƶh󉿲&yAjƚK] xO(5zc"K0TgtK5+S 8?\4R@0TkAsg]#QsxCfd2)we4>K)j!|.?p:kZԥ:T MA/k4`#9f̪&5\EZETd̩Vo.5<-#[}#n@<%YryЯ|d@2t\aޝ7m[0g]rwF!’4S~zJWi=A:[զkS3]lcw~D4NJ]E{=$ x7#"۷^}F4"H)Jҗu9n5#u ŸfamoZYº,@M#h&dʭlmXڔ=N_w9xWv!yBoW<=>sF-=4&ݟG.r9PTC7(&VGt¦̕~D{UАtwx[S-ĩdԦqCDX4_$ 6N)TPي7ͰRIWKr{(ZXY$48cZ=Q]ux(*$\r= \S w3$_w NmDքIİᡟE 5}4WGabV7(cB3ߤg+Af ^{Nj=|4|ݞ iucbwч+oHW~=!`kgH> cU/hh̎Zt)Lg"`Mz#:b:٫=)㓱쀒vvbTVW5Cь:)wQ_|"}V26C-Svm.tzRѪM3)?iD>#q-W5oT6X})RAV3Èۢn)Y >'Ko]GiEבl2S[^XrRUύH1mI2~Z6@Bq|&j;Ⱦ*,5=HTRETD輴 ٬r"X,+ '_@n3Z/A8bƤ>j?=}="^5}~<cW 62|*Bs(_ֲ{Yk?X}c-~^(Ml̘P_~{|6B.+\:N?ϰk('\L};Y ͒8Z w'&RO`ڰ[im*\w(uNR?W]#( K@:wp*\=ǒm~J"vک'grgc!uhFc!d@ \Ȅ6\Mܯ\!}^9 ́6{8֩5fO6jYs wv`'pӅX;`}xE{VY686Xǥ,XNv{[453 !rGsy$zgO%HDY7Βhb ^oD?^3:_qBӚ[t.^k6<yDK*IP2 ;^}QsfǻAA*[KQ ք!h[=M-֛?$ED\h\[@"u+~D4%q4)H* 44bl8ز͖,~z}w&| QRSyIUv\v5#9h3 Qvٮ,ϾmE@IQC@r k[wLu 1E{?9==MhH#";W z(QbrDr \ B/b,9\5Ot!{=`!U QbD9cK[ /m8H4!,XؑaN_퓒åS~mp0ޔc4.JuxGr~Bh"CC\ʰZŝٝ!w`JTF=wy:saג2ڪH~Iǟz@#V%>5NzO_BC_蕴HF5 !ft"olbalTM鏺A3l҈m܌SGxَc`rs4/Ke|HV}-Y&=%-hJd"لbXy6~pveЩrKTfckZ=t3f2[\7*Ek#Rz_q5>`ѳQj"{ *1p o$UuxkuwO[81`S"Fq8{.67|Ar4&=Yo3MMS0H s~ Ġ!/y_B{[.8>C6Lj”pӡ7m좳+ @)d}ÿ~Lf<# rb|ΒbPپk`^wfotĊXe(E@vZޝTtN1h-[ _Lboln\Tߜ.6zC!f}ps0 )8h`H-L>M^f?j xkHtQ0mb!@gT,)MTNH`kI sS~_3u;4kNƣf| f0@`]2}t𣼰V< XT1(^M_n1/bbfr{~+:+W`XC=eoAge{xOc ֔%;CaOtq/X ͵(Z",,A' mS.=: M[Ca;?,vE,2 fe!ArR\ԖF&#ؤ9TW 芰3ϚUa|o% R`V7pȚMEHR|Oeɧ~WcoG^k෎gow3⛚871-h:7l(w{Ǐ| YWE\}F( .DoN3 =P $J̀Z7^p1u#B=殂K׫u1;k $I޻WX2~ArhM/[?&JރMo6iTa=uqj܅[W?-+[@67>=ÜJK:mmCfSǚAh\Aidʓdf h=Cpp+\|〪0YcZ|@񹓤nF+Y +SQ>:_1"ڊW]BM{}\1ݯ+#+=c]o uk/J5䫔0ңv#N,D%`Sцd(Bh>QVJ*4YY`,KېB V1?BV\+TxV*=miD_^zBׯVzJ1`?%DDP$e( ?&w=)c%'W|W22a99R1[&er gZ؜*Јrj_pf^qD`\>-.Xnnb( teq +iB蚉)X6_Ӊ(2>^o$ۅ_U^ &Vlf1+Ǡ}*E!`GϦ޴.\Kd6fW 9[#;qzG:hvdT__4uՆPF 2?t/e೻~/,NRF~V8Sd+h)$qs d<R./ѓ=mua`m/6Q&0 %c%R:>?6F17͔컄0^j1s;|.JF⦽9evVfOE#)x?,[7bb}r Rney7HbYާsXJCzvgd:EԲڏ[sHS8D$lƜgՉ тSRHF3n ت[JJnS&179$j?tTW?qjp4PSLb6tV#0Htf)Q8nҖ-9֊MGR`P`Tg W y-Zdd{+]2hmQ3%P!bq \E3{B)Ժg )Yك{O9/u]+rrb\~VdX|%ΩzYs$Q?eq6SI嗪YA<.\A1ˆPpϓGȫ$pcX"5S "3,փs|'ErY=tPFu'.Y_`<$88B%sTwrU}M+9=?NPُjS "7TfAzC]^r H02g]69_ }E4.xij;b'y4:[EX6{˥; h>nXMv+]Ri~[powLHxΚf|FBDt4-scFq=^=ޔ8l -\y `PAT5*m7D:->\f|f3@ùMѪJ` 4,hVYޘfUJN/=!i7d%G ~- )~Ǎݱ R`B>8r9`Jr4 fŒ$oa)t<*Me*#'UZ7.K^H\dS C=GGGSV M^hI3ug7)  '3T [bB;kv!{ZXKuX_n!zsbKgNNI/򡉕3=׮|߬Tүxt>kB$N}1 E 41\Iiѳ98%-ۧC:įI`WR%ϗޖdNģ$cnj-o?xARمEn2^qFMu+gʫuVTš!V[i^6 aD9[:so8m"&=:[USBch8ADG% |4jx=%|#StW-TmZHtPu2ߪX{³H ~d.8JP|nf %\M*1R%m+:G(ܹe55(]ly.U3eͨ Wk\ ӾgY瀭6~I`Dbȭw`)fCN6N e3aH,IOrfh.7E8I.tt]S$_΢uE\X\qQZrZpO~6ܞѱ[_ YHꬬ4l.[^)j`&O!",9鴽5ѩj 6a[sŇ]y0]5!Tp% +<ҽi4NM79K7r :<Tm5vQ;=30sm yam~H'<>ntH &ҕUv~_^- q{%]5#Q)7RG nfgǵlLEF:Χ5@o;TP4/ɋڂ!k9MQN݆FfClqEwONY^UMsC QuR!Lh }TϮN%wL>$fcOlPD3 9WJw" _kj thf7^> tg¾¶Mpͨ9BXi$~2+#ɨ~ {tH^+-[f &Y !+En+Ϝ:YR`O>M4@:jOrN j?H8|ZAuM5# LfrrUmΧދ^s7,CFS/T?թR t8HnFx=64Vߴ ~,.=lj'4WVjD CVsaG=Ue[vU{hf8/vȾZeGN#7jsjPuVAV́-=f&WeW})qE^ iO% U/ Pw7,G(q>tgug1`zTWO^%H2&рc,UXV/)#%W7<[?+~8y-{>Y6%-)ەDYih.WHi -/#~!|15q~qߴEkN\p U-Y@'+ +X 41ո^kl\S*K qG@w]\ .$D1 aD"YxNqСz'6aTX F3 |fJ1}lf@I=ɆM8{Ε3bxB-:)hyW%z[ŵns'hg j\ Ɲ"G! Y֟lr!=Gv/~T%{s~Ä588̏N>5waPPl'i /+\սN\U|=uvq[/iV߷hq~z#&'>1D/mQ`뼓[y_ 9V,3d]hr"] PR@!KhS=|\0F#JS޲%[-14A͠L<KiFj=oz.z`-952kAC/O'.׈k ;mֹkZ@鮙RՄ{4#0LYuZ@`-RG L6VGiiqw#,F=.ޯNjg(Ղ.U{fNEnڸgw0 LC ګY.U~~{jdmxWZ>E:Ί;ᧃ"s>>5):2SIT[AJXPNqɓ/3d"nVCz;5|KU)+ɷr:TZ,9ۺFִ9\mb4}8ؾUֿ7 ^lHYt= >P_ ̶#j 4H.R])`˱:.+wJiHD|ym١o z3zhym_%CH?h!ҊE2`OU"v(BۖW6ڥJ9ߛoMMe}Typ`NqvOPK΢$S3)⛰2_yʶ r^. k ^]G)s҇ԛ#\wݤG{*gyMīiP 䒠P6^X+VIƽ&>moM˕or}5X|jM4gL~4ϯRC&f2 6-)Q#l< (HjޠJM4_31(iC.|M<ceOu$r 2Pu\mҺ OqF-[I]eZ>ž2X VGΰ:}~7/$3aȧ|5}8/d˰1Bʇ`6mt~z#)> hw>}'Ѿv- > ɱ+ZDao8! z`&%5_ʌuNqpDn\@[7ƵW l_ȆgW]y69_I3dZ* nU)|uEDR[8Iُ-[RM̅g[ >n3#VZvN%iIiեVHV{"IpyRQsHaLI' 8y}OaA < 'έ_GwWu&_yOz}7".f!E#ѽA_lBJxQBDfD"&ꍎN.OY A!2ÎmFXExfkفV6P$wwA? ԅUҳ۝)BbjrXabMDD?rH]ni9?X}Y|w,ϳïXg?lS)G `R`f!ܵbeXDW0cC UN3p _).Ayb_Vӭt+3;&A;(&/?J)vu]?zE?a}x{WTE[h/VUQo<.kI]/\FL7L;O?-ʭ=K(6wBi>()3G52uשv1A8)a+MT]JH75t~|=曃|%uLh܁+(Z9?az8P6(4\NA:7wvKr}Q>2ױK킚 YN9 uLFEo6W`Uv]/ܲ\?5uΈΚfJ;_-.ilX+\Y hܷ\$ =*18Dn>YB~kb%A*|qOӦڮ5T?k>$T9Yy}™RnV4r[Nv>F"Ơ,#chW{x]Rja!cutG1h 0LjLq篎}BWUv8NWwпO[}ӭyqlUvګ}MQ'c&v \NYiX/ҡ/6 Φ:\=`@WP@O %MiʹROf4g"I,l =(zzҥDJ 3s=x]U&;T&;mUvkYAA0,&CL鏼 ri\{XAt.Q!!>Y-멮rw I_uִKVIwI/=|,{G^b,H+ir1ioE@ڡArvPҁ?*SPӉ?D>G;ӖsHkfu0UoW>[|r ÉZuqn˗ZtByǟ?BܗxT]0hrzt=2k_/_R?u൱Gszmg2#V nX&6%:fh'6})ŨS;0Cz={svdIBG=d{ji.q &H?nHM떓w M:5PG,]kӛTs3zoqכҢ[;c1œK[oXn]Ht`og74W|B4ҨuK6آ +,z*>Rm&71wm`Fұ}Rtg^]|YQXEDޏtܣ ekT:Pt>M(Ј1 oDH$>:Lȱ!*^z(7,{"]ݱuB^0D~$YW}w)%coF9(ls,vjWPi}@zǷi>Lz[hkI| -܆hړa})7) Q}U^`קb+>-*AX|mtDpFE Ջ(Ϙ00drɻ\Bn0혯.]W5W8/o@p1Ccn?(>٣ssl)z嶂0"~RIgtw|<5vl1mW@( }vijjn( *3CƟ3s2VNTZrmBuc)`Ti\9T@PʒeN^ձmkܤl%hh4]di]8g"ơO)i#R7?u#e^hAYe*}l3CBrȻN 4\K;M{??C;^siƘD@~v6]5cN8!1j6BPkBw2qOymY#>"ԚGDnQ\Z  2'Ww'PZw[2T 7*Tx9I\:7aj\A¸db`w5U@ϯ T9.*V7 ӥ>ghżW˅yH_'be殺d% { Ff;u9 |[+%Lwv 2}jC d% gr# O@1Wwj7ov )Ieݍц$rLbZ1U"E5?ԧS!m ׼*:/s=YL0ɩ0GUi6;d]?QG`ziAɏ$"^w8;̶,(s,+'uS OPclnĹM%; z3rclzi +`U9ΜdK1YN%bYBLS4㶓tnal2Zx[XMžH;Qsl[xELW4LI.ZxppΫxlρ^ʱJq8wɣ4I>܊*\[*# X& PWY d_oA}Y{hlr2 aX3,A=@mN$>A2S*Xgp8B06LiGo4K6Ѿb.tWR 7~ V$nߣ>`s=#$wf*,;*Plǚxl*t(r٬-uׇo[F.IʿХ{ 5!7I[ 1~c}{oH|sd 9F`EU'HZ[sN^gn3 Lc @՞hu+o]|xy& QHJVv&h~47)>,G F7MM?qMNߥBX>Fa U6{Bn#p'Vwzb*(M~ ~oϩKP.\'W|0 Ub֧Όu+F!/C$8.ɝT]x3b+^hMbIgDSJu\ 7%1$2Z\XgYAV3'݊cSvgж $_}`p݅f^fjjsfaB  XܟR5dSx$>rII<2f"u{T; ?Kl, V3|>߯ʴ1K7mCY߭_0"F&*C/7s2?.Pү) hD}ah  TrI$XZteb~XJ|@W#-f!#P+ B $fU> '"uRB%J1%9pp qeG3;rtƾ n((JIUk;1Ѧ,+RVFX!ࢪg ufkye)?=cDv~f n#rI|/ze솾Z{`\ ŔGvl 'ֶ4 \JjoMh|ái~͐,B̜ SZ>:$e~:lv= W.ˈ,CMjJAVH+ӥDΥ.xsNZ QXdn;I))X+g Dw C[;Q.kSdK&ΞY.<ϧAɍ$fE#54j!T^o@,} )SWx)3~bٱRю G[dqdZx0jCsP y.̽ |y25!aqȰ.RJ<"[-qCww[UoW˫?,H,,M=ye=Ku'?_7j.2Ft 9ޛ.w?]#;^-3968 rأłTs d0$iw8  T;)>L欑հ}IScHR_ndGOdz,=F]~9π虗C׿,x۽H$/6Akv{:x'I\"so <Yz980yF{ϻ gbS8 .׆M{3jip!$KKE8xoPKD}̫&tlN6/Z:dĝzZCJYLyK{yI$ ţ@J 84gYDBl4fZ_\o:I- ;9xl[sx ]ni 6킸y _ Hqgl5F+&/Ѩpfy<s$ou+"M7Utr'W*"- a)Sn1v? 9<^QXԕrGiE%@|\uq9XmؑUwz=NLNA`=Rl@@J'ED2yxw,ײ >1}0F1 0hTYF_>I'TD¦&2>{NK3)? {_oFU߈"aTjh/Aۚٹ;2làl}o%0W@!_Wg'BPI[pqAO2J]US߮\CĄJc$'0 &'SSrl5o77x-AjJ`~vUcsi;pX=7͇V"Kb̕#|pyke]\+f  z nlSel߀,tjlL2"b<~IuG!5JqRpӣ i0NOɫxޚC0dk){.|Y~.b][h_!}Kl)礜* 72W|iM~tT^c|W.ŝПTZJ[3+h;Sn{l;'9,*[g=KiM cXG\pwDGK_leǣE`(ڇ^r]X^.J6tJIϤ٣ ϡj}9KAymK˱h}U _J^P6p[XXvb&K(AӺ$pZ'*ԇ0N>Ԓw3(y)ݎPJI&VRĖo8.D ]+m݈q (G)'dZ6>MgSVuVHq<+7Of, M kW87_6X=pvڮտ!Zns11) 4n=:sWh]%Qc p<+5v DQ[kA8+.~̍RܙNXzqR炀rc 7J=I dk\7LV8YX:^w"rda+"z=KSaǏiOVQ򗩉eeX}2}ٴFNnYxz1˱RF|s :LaBӜ#(!'y8w _)K5u$ =Rڻ3/*oro|Ud -}NJ<51,!;)7ʉk̞-Alͅb̪Y"HRܞw#D#Գ)9۸e&.~+5)К+w .6w緭o>mJI Ï,䅘r$5KLf~ ^G"DΤ| kD(L*N%w/t4mI*=_pm0>kxpsDb;r.ͤg;Bu>(U0͚`?|1 խF,Mmq, MR55g2uy =okDePUv(Rl̚S !Nk/- reqՏ=Ls*ھk=wѓ】1}/R A؈>9(DNl֡mmkkyҳŠVۓ" ڡi3zb̜M075A yt GOsv0 \oneO'8,9iSy:GGI%0[?I+茵Id.q]?y%Ќ,B 9_nݮU%뼥z,ىxCS2O-[Gg3'/Lp*eJGcإŘע&ے錐wK 7|'+(v':>k qAr䲎`Bj- q8 tK/|xCubdB(ܧ#KdŇZ¯b-~/s=N(sslTccjK;zy C ֊!ԥ*L-spQKFem @g<镍 K4mPO~ʼnYؼpQQJo79ڃCS'3Wϋo~Ktw ?+<[ays cY#<Ę0Av ]söX5eIX(oԄ?<7,(W4ۯfͻO ~q|r->o3QyaꨄSUM)sU~&i> |帏oʷq**t^iI"CxxHbdžw⬗3Af*Gx=rg#_.>DΗ[Z.}bY0%@c1T3Z>pYZ U5?~BH+'zD4uAs sgt ?N,yڽ?sTt5 |n (&tԕא>,~6Kqu ܷ'qȀǏBTࢀ$_qf6|ݲqOLk@9ժ+{.os"G-}`bpCCL [` I 8ں5OLa^lm cfj80b>(T }3J\cr&\f2@Adʕ3e|=aIq2ZY;dH`Wnfw6yV6گEWinl[T%9YLϋèո=XċMsiwԂ\|(<{p"v11Y-% U_ͪc_BBg PǸeus 4EH^32.hQQA],VR-u\vHlr0k\bBӶVՏ7Ei wbZ͈@D]Lct JQ k*y<\m{m" Qig>Wv"4\K{UQǡ,aAۄoo)H4X .Їv]QSToǙ"83zŋ޿5>7YH/ŭ*O!FiԞzJK Y7J?:=;ͦto%էjD+fQf;^|JL)C~ny;:8`gP5 r)`E+e#GK74xWK &]`lE;ޗ*V]JU+KW#ttA lt%W˖0q50mMff8.&!|Y/WÒLlw}Kŗ\uۑ*Wy)p ijRCp:;kԊLX 7koo.6 1Bte&#FԃC68{!tP.άEzad@ں`MP]D /O믵SvLbV_5].؈mYSػz662狥%; R4|9΁ˆe?QBբ:?/Qkӂ}Ew3w"JTU6uPވeˆz #N4_ ZqDDH6vӡ{mOfwu!򐦐\4Ǹ1l@i9 ۳x[]k%&# ô趨hȮVi%Q8HOށ6B/d7g*tZ-GgɛiIk̰iOz[iLK.ѡD{4+p~+UPKK Lҋ_pysL; wѨUC{I n)>O-ބ^pVŇ$9vNIjԐ5pjGE9)ia(}^W&W:qh^J嵓@;lJ'/%S27[g u~,l3xK&$8:n=b`1ev ''|IgWN֝3,Z4x5:K4}yۛDC597"Wu4ea˭~2ٔ,t`E-R-*p)=ٟ$(4& 5 F X!lW 5waB 1dߨꙿ:"l:} \gFH?Ul`VokuR:3$a'VxtU0BwW1Q˾)pm3( Ȍ^ wfKQEEjpp&jS4xvDU [&$90"1+?G#b!.ԆڑVȑ{!Nk}jsKV/5Ҭm (R@ pfo6#*rZ/\P4Xgb/IDKȀ:bdc9PjTP#7xY.EP Di(5*AO&KZ=2NI;[.u~kS̖Q$1[>cW3ҭqo(cn>+O`=m-pk}%DZ0CNnP8l2{ͩ6 N}l( z·ގ-YR=)X~元$EI`خe4J2";_\eh1tH(:Hڧ!^(q3r0FP,~ x >)ūK⑑/9#Ok~FIo_/µ\X[`DH`P'lAG$O84\@\Fr&%E07nhR+igC =vp]fh3$DvzPVLYlSNZd1Pȗ: үFgx:/@1{EaZ8i|B墅*iQ42^"d<Jvle=0u{FG F>/e{Fy 3]Ep-00XG4 җE?YM~F үQ–i77RRX"ϚDsY>h;d~P"ZIln0nG$m*.4dCUϯ_,+/b]kשզ'kiƥclv ڙ it+߷ՒJ1={3m,!Jre*'wyS]s)96KksK\QuΝO>YU]*T? O{FGS6Uz{b`+)k"g$~Z`>zyϪ&-d<]EŚh {!VIQP96}$)lYkZ)w@ C^ Ӌ,(Dj* -mrv!z'XI-hQKWE]ẆиglO^$;_2UXrxɞbBKb*$Re}46E,'ooHTkgX9Ӊ}lS#'!noCs׫ilf# ")|G7(:[ DZefHȨlk}w qIř56ZreDٷ'̤lȘ,HY$4MpB5DL0 Jz?8 PytbSufl]ɵ3y|ƀx#cT)dUT8˧콐Ω wPR0?H13(r#w _5wy3hFam9!<̧Z_[Jl%k/ OpDP/$R/I@qDhU X"0m=wPQ¿/vd{A7AǸU5Ay n:eT0 ~9[hAPEim'<[_ 9f =XEi{';GH hh6c5h߮Cʡz9UIL㓭i Rl-1yhڶnKn,_ն*ZҬB6>9aVDOA~ܪB|r*1]3hw=ѻP(9:!;v/5ց8aWXJ )[~˦?WGqm!5/~ixnJljL^há~*IO7iU$o# b|rAm1qBl@ecE별}_B.MQwh)9^,g&_wk++xGkE>;{J1*64>HRdX)IB07plZ%~ܐ`yY+fGq%T۵d+LDxşa"a`dpeִ݊X7#P҃/FLHbO a*ԁrUZ/Tp#]ӕ'nye%:-1~^4a|<݅5矦/S3X MM`P_u?@w-M7*5 ܉aHǂK X7ǜ":RhB)#-2; iNGgHQ29V/K4y{d vj 1A ?#Tȋb:Ei7)ۭ? eLƎzO6/oX $Or+ߊwKHIO.1FY~ݼ?YB|Iq;`&翧rT@ w]5$AGApF`yz_id}[S Uzw]s"zZ3F+x8sCF#y64 :?#$Iږ$@w6tS%ב$5Q30D|͑6|<92OhvҐ*0i%eM#C4?tcnxͱvQC_/Wadqv\x&up cdhl=@ *pgp9p-D<݂@.8O$]|ojr=q|#?Σ00[`+_ށ?vggh4snCCnVcmr6mg ^4(;go CC4 aKzsdgJhH lkN )Yq^A&2 Õ;:r1j^Ik ˉyf0|ZQkI qwBtwY8o|VK<-6~? YwdlESK>$:c|N͙FTB!ħQ r =뵀5@NX7Z?YK}XBtc&BUPk[79_nL̏h-L1Izecl7V3 MFn/PSolHAXd)E-Վ⡚T8MiվfYj๿a; @b`mo8;\Eyjs o6̋PnUS}6)rWtۨJ"}4nG>tlgB%y}ڠ _B" OJ\%> THS!PgfkzE yfG;uE$<{)4kfX[6 flhR6lj-I+6?T!fحRmvA+#Vlm[WO~/m} ;DxqN),x";La}~9L"D}z z=$H`4b\Q)H[ej\ XD& pğ.A{h9s\aI IT<)߃!3RKi_wߘ ѻ7h4x{OJNظq+_Z%S8v Zg?7f/OI UCE05VuNJC68z C-1[nZK@tvT~;u24VY2jN#k!=_=9M/DۖgN.rPN}vk]]*[yj#tj20K; !,.=5r~kŝ;WVXdA6mMuwIPו Nj]0nW0EK9`]ۑJB(N&}opo.IYMh]h2;(nsRV40T:>0[q ڨ4VIV\|yCϕ^{i Suυ<݊OP{j?TB&w{@0l2n_b4-[LFnIkwىj57F*_?:k?:reij=#9xzkgE6$uZ%.QP3W2rSI4K|1u+1%6ܞeYyj#'/)d+v=O/<7n'dF 'flY|Y袩Ays 3%Y/V<Bƍ}uLs?]ΛB\8os62.DgX0^O1V;dA @P_ %W4E4}'}ICٴHnM۝>:U;6UDG4uU id#jDJLHIX1FDlП_-8eŅ[lr\|:cF1- خ X"c\DQ~)Abv@ eZe?w߽Ll'Fp n!crVCL= ^x5we݄Ypޣe.M4\$.cx9!Du2Gz]F{.Itci!-U_OZ.Z7;g"^.Jf=k@+| UX F$Bɲ蒩a@W`\)'Oȍ@g }H*@?/>nX}zty-K D7xBLu&\a:"Lw5}D#M,Ǽ.Wֺƺوmir_h/1/6Y ΦWWED}1,9\O~\FZ% X*OQR?C%WkN?%Y]#PI̛mpr6HkQԸlBpӰNh "APn\ ։JG AgaRtH ;i\.DvaW EU t4:&vx+rn %Th3wR &7X0x u_22_Cob\D|f$agWc/B]>d_ ;Ar>]['L{= $&SY7)WuQLfdWcc Ha< uՐME0 }JQYQM$k.ֹ̋ F>kdN=x"$Ǖ#K)<5ը9U~,,|撢JɲA'y `ǡqn{tfWr` ͧU,p*;']Q$hU:];>-vw|2*h;NFkz%ItU0M}_IGpv0ʵhW/l RXbp>?Y-˚ĔV'8LG:OпF *`[-h<, ,q|?d&X9DfI,PMnGI>UjWW$E >k&o)hsaڰʼnPs4)GK1&ac[& Rmp_r"_KӑPЄ9ox> dN0kf"򭓊#lӽ ]}EXѢzT Ҧv}~TЪ; 8.QNO^>R/D<[-^.g'*.z L_ ˎ00wǴFJ\!uU(U=4Y{bGl*y߮Ԡu_@%| _5N^s=ˏ h3 k9_Cf |jAYBP\ +Fy- EX9)6_-et"COOn iI\4dp}X3F/Fg1.Ҧ9f6nI:=Am Y.^m0FWW:us=.A%p?OJ 8)^[/zo`VŪw/#NɰÀ0\,o4kfON-_iu'sNs* t5I׎=kY߮|U|J*k:,C O.*^Y6¬?9Bȉ2 DA7B5:6[6p&~Ҋ c÷e:L*IyDFt&P{6<ӢЈ Kg fG_a׾h?:mٻ֙d+3E]2»lnH~0cܖpX?æ8o8{߈TՔ^7a_sج-b|ݖ ydyZx" }#p08RI!MM ipR4'EmR7º,Fw%;m/h۽W#uy."2i Vs>HX 4Q LnWPjnQ&XŘI &6I3q6"8-GK V}+ğƫq}GqpxW , >ROG(;9FgOx:ΌO aHn["82 0L nXvǢ4YqHΧ~w06ev6B $%Gy65(8Q:BStyjZ<0JQ֓Ei/H{sir)CAOg3̫k?7qRi-IYXIF2(D- LbQp)^~uP2l#_z3P|SoRsYe"M,» 2닮r sVyp 3%l,x?8Ǔ 3C0=P*{+HNр'NP*wk&@4=xiqbye׷Pt4xZ_Slޥ :8M༯̭+VϜ>!0zxFtn4'OidoMjQeǀCRt],L.'~ UC|FLu 9A882kl7ARB4ˈxfp%J 6brwB2V՗ "?W%Ì챢%J% jR/V._iw F wL(N9f2ԝFE*z*xsWG]p-=Go}K`nIJԻ-dNC9Ø$r=q.&mա--ra噁a!)Rxe@vXPT1=}К~TߢzW33\1t? -1 xL7I40fȘ024 Ln?㜃 l#q ѥ#mA.*)?t/p Om%hc#EUrX69*v|{ sasMd]>xHr{y'gkWן6oBeeVqNklhJH=ψ9mӏ'{$ V .s^%zz, "<2TxǶ7cqb˗ Ӵ#6g9_zYѧ=(PW~v(gWpgT &gouE1!g{%Xj5@[`E4J +qF f$} V)b}ţ#LFn4PFWC■Mkop ۫;$R6W.x/l 8Дʾ0'23INjeE%}Yzuz#\-Lę,]loNTB F-b-?/Kk'Yq4յ;K!5 &?(&( F4aЌ K N6uQD#/E jﳣ%!6yz||2N+=|\&#hk=O<*1ћspZX ^0E-(@=*)66~x@ps*v3L mϡFpxVO_:噲{*I+ɷ6} VMI7X3e !WFUvW.@ ƶDS:Vej^/ro{-8`<㧣Ľُb;; ~c-44mv̼)ŲuwAN&eb4=9r8w8͢a|<!qWn-ݍ3Tid% *]Յ@UtԽ}ѓ |p1~fAw #tFg-2co(S?߱Le·|[-C DzSkFDtөqܷ7̑L͐[EgL5EU,/XMYf)V[)dIJI.\ږ7|*C%*y[%Hťk5ps_s"N+ 3- Mf[&Pi#$Ş_-h"Ý>e(qwk*bQ;@" i.EEk띩 [j-9v.fdI6:z[g7~S|N^2`=w\9ټl>cȱOF"vyR~ Wz[a\{g,:C ( !4I[֎iBS7 Kdqd}YCRV{{{#"5=㐉hyȒfgf/51 ƶǻ@򢉰-z.}sZP; S R=p]9z3QaBc4Ś}@{@2$81$f7e?6q0ia^,.rZ) _SɨR_F t1`6Lj,ŏ3pp2=jX,>OZn]GP? ⌿#`TCDB^P8:Lfacs\,%Ðƅ/ܱx-ׂrdw ^ɥFhN$ M]c+n7R6Aƃn9sdThZ5h+eI*{^(\cx{ecdHhkH3jMoVEj+W@UuVr V\#J\qa[ij-d7 B!hZ7K_$7MWNs0@/jURn6nje' IZƵW\fz%ebs3IS.W*sd´v.MIg5j'b/GQQ"/Uy.?܍s'6v?N="ܲLꂮ:0d_|M_;tNx3Xdir23/ {I.ɌBUDǎ uwG卧p'8xp~^m(~C\P>׺9t/E uvg x>tmGOUA B=Bգj9=@%"Zt(Lz!?f2v{/20m]fLnǍ N@7w:/(Dz2D4)x$S{ MJX:Wi%:4w#IQkIgV%%Љvи"uq]Zjil+[fCJVWBwUU>7)"i@OQ su06}aIPsHÈ+k]E'! ՚EuTp0_.ro!d{fo\/ ?J"e@ INpWM;9P7Fɦ5j.>+7/1;r=KZC îXnsX&1iC"eɩPf7ۺSAb>\} Us ҈!u]`ኰKpp;aK?&$yYh>sQ_oW#(Ck*l{ʪ#m !l0i lL0BeD{1<=Kmp;FVU3Ŀ_ %SF؟Ul%"=t2L`V#AP)UIF r[AHPܒNCfmXU^ .SDT/ F>ԓ)tV#T<ΡFr@_ʍEF7Uφk $t= #|rYi欗PL 0Յ` cͶ7i¾1~^u#/^ϗCN3h%X 3͔gr Еk2Ln`sKWiK:urbs#cLtkfe|%ۊz`#Pd=`tknPZ7UBe&N w/<\=kOA@ׁegTm^A=7Dj!["20.KustڶnڼH}mJ0&, 4rLcU1c'ki%XjRXb 7iľDB@J4b,ZRH14YӾz)=,Pn@n 0JgG>[s{ SgbH͜ROVƱ^4 X=P|D;y1J/W4@<_@ :LHH^m[>M?5l!| N[0F?fhCCG˅C6(xE'$U v ̚+Xl * <rmynMx']њ@UEQ8,V o҃F{N^*[V*8nkT$ <'}ڃYM(YR5Tz_-M,Tڄe$p'~Τz}a. Pa&lϧΌ$hx$ѤЖd$dHl㊟'z%:RVZYX2L'%xh^h7ˬOk9Pa)kD+C^Y9kִJҵar`[_!BO>Ƨ U!X3w8@n#YpÛhঈ0L촕I&rh/s_8+wGrե-ȨR:=Te$2;TBTJv?9QyURQ̄vyQYy FK,P\K=nƇ >0Ğl}_4w@8o<9(P E^%*ȾaK JbH%dZS'5,vlqI¤z}P5yrЈ {pPU76|qyMWt bOQ&Г'jGY ,xmNL RM BɳY++dS ^Ǟ;;;ZFå\h3xy?J'fB(Nqy%鿩N䗱oىlke8c5> :T(>bYt' ZJUy<-I+W#Hx`lNpee[<ց08FjxlxŦq{niGyV!ٌ=7xJ4[ɇr\Aܙހ-ޱJKG!ѭ qclt<љ|Nb~5R:vz N/(qpѷ-,P*E G[9g{qc uQ,ЌKh@+5dMW>-lLDf3'EAd/ֆJߎ`!qⲈ?0*6-VhM.khD2}oOV U$k@0>'>:,/dsէ沜Ɖ~_$^@otidGqp(d,xR&}ZGP[%So%fXW{ 3Hr#>DPؾbSޏ9-|$N,QZ(7B$!4*elص(,w_f*  y8$:S̏՟?h WȾ|tLC2dŝԶRl[>the˲ U%*JM'  =!>: eTN Ƽݪ[SflhjxjtFE4v[kpcfh.xJΈ%㫥twWX,Ym] @9}DUo݀hgi?.z:U)?؝+ڻŎ9s Nꅎ, *}rƄ q!{Y|[ %}#ߕZ#մ `w. ~2}z:|`d)}HuN9Z9JgqT90+ k^!Trj4R ˵?Kc_?yH%ST[i?@%ûŒB Y=2#0m" O@yPtبsosSi<&BW =T(e%*E T1/Y& wN?όAqyx*Px?H&ukLc1JrDMI3Sh ICLV7= !⿴>߉gFҐc(hv\{l$pl+Sˌ9ZS$+r:<۹]v^mVт|yד4-[.Pd?Cgg arɟ:!9vPp {[RxKA?ت #rP%XwXLPV늆m0<Z1)78j?$׃%p *x4[zMK<=[B%ô;|wFkEvwH18Fǐ1._fLKC653xR*DDio:GNYQ-0vȓI2>e_QM҆3#>(5˶&nyfLۯmH0jgD:MbPxDwxN6xI*(!Ty?eЏ,RCY <5ĭY fj+tG^=v<Yg4JWB) 7QXOXE'o"rRj/WxoߠM=Q8ΤĒy4ک[/&Rlۃoj-+˜%Fރo8حӂR>1ͮ"rxBbRGlB^ 4?QaqL0,<*?Oёl@KFe;KZ høP׀7̠Ez+iqrQx{;Jw}⟎hfI!;b&m,|D4p7`tOyyt.,1M5pk@/";^n#WRax}ihnr\<+彔Ў{"~/}obl1pAęgj9B5I[zܣ~;ڦ/;(,.Yo8mg;qAӁr&\@DnU3ɂiǽݩ|a@ 5(@ [wFD\02{s]Pڷ#/n$(?̤Ƿ XT$ &#QZ_9yZB{]kgr/bz@T%{‡4F _@D<-o#EF 7ulѫܺHy)Rb{1V'zXXJNH]1]gV7]~3BI%r _,V¡N =NDrj `kB<&xPkq0ed_#9]*-P1J҄hb^."0rHJ2H;>*walZUaa{ IvN' Dbb\;)l6'Z?GlobW lF/)!i|eԂ]=F~*]+C<{qkpp~|:읰A3L*2ՆrUk \r3NAi0`zȝ? sXESv?O󽹤*b.f 3@K\d0#K.bEKJ.e:A>nzmh-tTOD0qIe ~?>2Q~\EEKE` [soVE+"P2Q8&yF3lgAዡGlM`?*"[Np4>"Pht1}s>qOIZ|z)q9Řߤt,hY|=LyK8ŸAiKmEƉVNO>:}2&AoL♊UlBt"Ͻ|[{5a3Qqqj2&Vi*p 'WL)E *!X]z]R wJcd]ܯ2 8Fv8}l̡5Y֍KnCi񗮨1-ieҮ'ZVCC¨;;׫䎴t)"h[ ]=GX1& *w#}!G:ue+k=-^Bx4Y6>1[ #fLKFڧ#{݌E)JtO= ܡY=Ĉ8a,QYBBBڦtĤOtALj>xZڷXrwF侦2v öyJg |BɧUʃ 3l8=ZD}CӠ  =歽 ~鶪AMcx5 X`6ZQB25k DqzL ?w=ٺ3 CA>tV[3 .=p!v\ߗnϋ+B=c=:@ CC}&>2B l74-xH~ FVRTskEUӍhIzcBLuƍqt8ST6/D`aTNl/]]PqH$+18. h F},z-ԥlId2~) x͚l+%lr}}Ԓu︹!%eQ_,v#??t;>)9 GzˋD&YwDk>&ِHL@B+|vTycv5?xz~AH {&N0jaC]BBP(:; 3EuzK/bɥgl>dHgKݘ<7΁#9Kޭ/[@Ī-tC|D?&Y)1)j5NEF< FbgNVo \i6>b ^˫g 5kAy@ lYhlȎ$v- ҿ9 h_:jOÀCHDnDbc^pJy P[ۄD|:4e貮}B- k1IcU^ޓ' &v#.TsV;3YV& | e |Tܹ&^y ||sPYCΧuY=lSVbȱsY > &v]l݆h dyxg;k*h^*9A Ň:dx[*oGlQfY)F p  7xOk/8 #XOSqp}Iz[%Ltg{j po@&.;+_~J5و}=W"9'LevyɻtD^yП ۚ?nq0DH~ԁ[ L 5gMdoٴw.ރ87S#(Qx_Uf}X NY_ZHs8Μs)Aiȟ;iT)] 3[6S9I|6$7gf~ rv"qL] cJ;PH@HWL{>C޲[%UU"u=B.:e6># 5C]oԎ(rᒠ kn};(7FWEp BD[f_9]j4fba$egk6PExe>}73l}%(sRPBڥ$E[Bb()"A Iy`2B^8C9} ]9bIi癲ú f#M)+qZv.'njAːI^MH$zq dsOUs+B5*(f6i'̭NW9Rwpv7dz3.6c&boIw{y_݌z-PDgOao;YP{sr <8 \[@+ beJOѠκ?/M.嬕/ `ԥ0* 9xi)}}N搻eFT՟p#{haT?wwI˪߶fײZt(6>áP\`(?}XmzO $}晝mCO- )ቷvULw+pB|FɄv!&suٱƘ1^$[, ToAS'(K\W W>e><9*(̉3!^ʘȲm~̶z1cB}G L ,ix?a|j]曀J " Ή=x^$UW}v(ԎO^|XG}>lxsQ'/~R5xp]f$$^dO C闿q"5!ӢiC RB"bYM,R6cϬE"+5Y<ZފCݦHИ Qq@耂I#Cѯȅ_r/~} 0ƈ^,};3L \줺`ϔANrIn/(f' ?#k{J%-=0[7Onፖ).ph+]G{ T< (خ~ v}wao4]d?G;]/#\9>S D*n'D -l[*W|oмtx) +S dv.ޙB<@ܜ}'F3E#SZ*œ֬{I>,IA$ S96f 9յU%q,;B0և׏B7B=w ~?]4-bZDTD bx.0Q4/;L?h46KHoaKE!kȧzr>$}DTNdjgH8Sx=f׸nR'6ău7SOM=/NJf ;Nb\Nr ~?yLOPe䡣N7N=}=\QZDܫRTP).8؁mٛm1^. xDe# 8[<*P"0k^)SH3mحǖO~1-KUL(KqwR t}. lҜ;9TB.,!tiiI{OQ=ڠBݪ""nE66>CR3r3G1}8ãk(dARC9o02>e7w[d| svxl ӋH6T,Mtr.DX6?5Z"9@<9N\}CiާҙmVEBpp1+n~:_o.yRn61ʏh$ $$;/}C@rXdË܇b8/kweo6<,,xr|Si%ԑ1 $!.T48 U~0gR_sڠL>mVs0R?i"G_)UO0Dx$ڴr Arq&!-&_0=h=Syzw6b)UB@ k:2 ɺel] @S H{3tjOQu0KM  }{g%̟' i˖Vλ9̩&J JsaGt+sx8nAa2|Lp}R٧C" c:pPL˸l !QզI |1{%{|AjpNp5j8i@ @b*82i)h* e*=J2T2vr2֐54zRAS8:zP_U=0dF9$3|* \{ly2Q]\T]u`"Dff^ ܸi|V=M:t']@Vr}8.ڂ,EZ;=ޒqH%7+() 2au:#^{J@KL1gc2E5L֦`ɯX}Y4#yBf:2KB6z%n&"56@KO{ (#!MDRN%AD4Ie^țH3@/*U"mĭga>U_[L=N,4]}6EPWDdGovK8x2t.V[YL^=m ?b(g\M4tV;i*YT.Ȉ\{TO>x7ȿdzZR>" -&F%8j,ӭW_ےV ^F,_OIpQ{FlSsKN~v%)R妢]0~~u7Kwf=ڜJgrY8Q,0)`u٧Zd`XsGcc٭^ʷ&+?E & OhxCp̀b^Cvb;AR~a[aUl` SZLf${xxCY65Fs(M+ Ua6ܨ_ܮ쐻N>GIUCp.( 0^Zhw=OR6-\̄Py^dܺL:^RqgL9LZt}8Û/I$a+IxT$ % t4bAHts -#GQ{|>Olg,fsJ dXmP|G$ͤΕz-^\_fb 5S9󯏲_+ -t6w[yrb .R7 3DaO'dT|T5Kɭ;ϫ 첟I(,: ^Dw eTe_#ָT4&Hۣ3<ҌF~/7g5J5 H:[fmEC,HoJY<Φ?`l* (GEC^?0_O8Y>4@iSS Ygd cl>Bt-[xOTSWݑmO/ګ-[+VG+Fx`h ;ԲxC:{8(hk8)u=VIZQ,.s4-L?Xt(,yW)646a\LA" a"%CKĨ]v17} D_Th#ZL?TrE$2tio @Z8/Ő; .z[~j$c`̶7c«:ɐR-Dw ADt1iA0O>vp4 _ *}͐ 9TIqgmY.%m^$-uc[Doso?9y#åօUHk#uzĭ@ ux+KBk>FdIMeUFla ,iۅYgQK&СR)Bo8`3t1K,GoNPv|+1Ljz?IP?xbW%{:6e`*%1.bh0_ DE@g/'Ի BMfCKYDҡu O}_h[U x4( PЮ[0\i:v@y\&y/%y=jDn";޲,w#2m`Ir[ֲ',1ک7F*Lf7VܱVTG,zýM Ֆs~B#/^<[;FƝTW-[-B!h3Alxw0FSRm/#VgF͋.i$%kx̤ Lxv+,`C%xЉrU#e;j,E J@Z1`@`HoO~`C]%wcD9grQ.1!bdr-EYe -yMf ໩qhd`_)8"igOTeLM`~/o?S޽zi-;o3FJӆzleR1 D݃^p$QE ]\\ P`~1ƿUhzIv~/-cO!{Tm^>wsk4ERG.CN%wno83RM}ptݛJ#˘ϳsի7w90I?9O\[E"n$X)&KKJҎ;i>0^,x){R%rcs%F(ن/|9/ӻGə}] Ҋ)2\LrJ)c9, |oP$R1U0n\r 1D8fe蕕GK첿Pacjt /v 5,$q^17VC˺xS#UFv9댎-Y 0?@YkBчň# sѪjV^퓄RST IXr1ɉ(#4]-}^ەIR"n6&kh@xQ{,Pc!ΛbuwRC&:%?I8£c},P'1 b=Lf_Yp{iKZ_d>ib|UgMSC0\RxM ύ+op- MZ@L'i44&krDùơeȺw(x%0p7n$p}P.2Ut.;H? hz\ӓ m%$]GBU!pςg_l ysp.$K @Cɵ&ӞO_V_0[zZ]H(L{?$Ɲ6i0.ɦdEW5A܁b<7;\P?mIG ^r/w' v,L` d l"L?ǚw):hWsJÁڅ rSvԻW@HO6 !dN#\V4(#b\W?RSL4h ;lZgn53{;iz[#ùYWpvj:,!&+x8.i| $g(lr*d,C|.E+W.jWc_sgjk@fo=<.])Rъ9lL'rHT%KC`#gXմ& fPMJcZ^x*G0lڐ"df\Q\.RWQqW)CQQ4c2_d5ZgoDrMݥH( 6p/qSRMg~:q:x/d:ݑƺ>4P_W"n_,V*x jvh_P3fgɞ0lggI#=B EKP ]ɩ2w-#<*9UM'%~ELg6' @jTi (`pQSLX~"d2YhǠ!.20g6*b8Hҕ;,aFTǫqr¨5ksX,L[_=99UcqSKN ` A8tCT~TT?Lڸ~9ϴw ҄{UU[j)MD'MI]\{Kv!:p84A puǯ ɕ!\#]൦(xxMq`z롰-twdeڛ rxK XɯTCآƥNP#Q= Yw-6]賦hUNkݨ=,Q<:Ff@+uO~DȠetclˮPxX w.Q8A>~? gzU;Yz<4j, 1#{+OE=*uncVZA'.UD?Ϳ[^or*@NQSOj)f6X^`MLzB0ףBAiueP\… n5Vf4i2z%E ?,ha|( -:4E-rtV З.*`̔2gCڹ0ӫ<r${2t,`дn Wtz]cMY9lCJM@4 rrKѢsMg3f1 -\V1Ǔf-.\KQ3H2ŋNXVm*+ Euݶ2"3Ec*:6^?c) CV!(/f(``Q,XM^>P&G!oR;ˢ~o Lݧ"- ;w_cDXrfv'}]ڌy p$3Ƞ(dWEuMt6-<09 K?bVkp(-)uoi ; { {fHi*I 3I}oU>pËOVbAÖzɌȈ>Ũ5pxq)Qx[B5-3m|zZyv(lB k5)Ҳq79h4R$qna*~8s.j%u{v`Q3ο);1h SDřAoh!w6935/YvO,Fl>sּmkOhBE IkœM_`~^6oWļk*Hؾc+]Y`T<\ s6+`=\P0>}lTSZ5Pv8h*  CdtܫZ˦.pZ¹:_YeB_Q̭r%NmqH&rY o ]IR1H11?p8 R4 miE+j3x|%i3CJogWW65=?o={^+Xt`eWwc:jvZyJRYkY(up9'T뻌FR܌2g"&b6vaٳ~ޑf-ePR=P&ThU_Mx&[Usd7k"CduGh0\ ЁKS67NW&I seemC9./-<#3%D+7|?\A>Z똪dO_Jݣ, }oy& ^DMQc^$U!}“)}^wVP[-!{f(_nke6VoO;Ad:6?4 *{  be3ʢ=!^ `46 h7s@2/$)L\yeHe$ҍBC(FjQI/V(r\:5hKP2LFzDDY\{#~Sjθcjׇ=x~zً%@ qIT)Rp2AHe@dNziHa(N۩b Z #n >jCqIé ߲`H_6sjyc\FC"S;B@u-\y 2rF8'JuT0QQCa틕sZo%4Ϭ$uodF8?e" n5h+l8?Ze6 BYC"d2Xžl@A P NK‰.!0k"βm𐩾'ʱǷawu(rv-#y'ʱsmz/}יCtK[ٲsܔ4N?4_{z|$[~!o(Q󢖷l!j9{o HjHĩ" 3]E<򲻼Lt> r(%R? ئ(j]lӂq:EZ2a>P;-4 6.K+cA_ػƻ*~8t+ž}A30K=BXbgm6=% shC(!?bd3B7TtHv˳G[Gnq]_@MgwԦQ\gHԯUm| aYblk[_{ظKH]^lf-ބ{ }NM1+8O'4 mb@?V{t5\N}'&s&Xn%[@ rʨAD"d,:wEx,]0$=3<׌/> =yrn;?SGT64{uCܪ#:= W= =n6o (c5ԁɓ޹{>݉O/N@07lӷ×ڪ[fKvh=Q ?u&i iI >QZ@MT Tnjm=I7 4XAPÒ&!E=c_GO;g HcE*y{~bl;/  GU?wY'EE ʽS2c巠Fq>ZwWe9 =R`\y *yk7m?遇27tS%XUsS;|4%?}:l/9Q,:dd@skԹufϤA5hg1xn\0UfufbZ &c>)¡o97ƫP!\r\ 1X$z,`: U=NXl̂4 |;+f4k®fBukL[n.}A*.m3 |pCZ3WwsHZeV斝Rk.@ &pFmt GiL:i)_u8.Äq!\.䊳#?pٱ㸇8S LQY\sv?v7 %5FN.1A@˾(9RߚgB FrkGq^lva~EZ]mhޟ\"쫰 <`zg)ِ\Sb<:vժd2 q%"n>Gief'p]vn4.~V[FQ Zum0NBnȶ!|',m@2{  \;aIŗmu`mZZA Ca+ԹDJ⼣16w >rieKM x0h!,*/j VLD\ypHϪrAށQ aռ\=:H|B= KClQ d6eZ+>)]S09e!Dz4s '.e8[:sr'@ 4[L{-7+( A= O@ :pFaR #y! iW-]yQPm*3PCC=Ҵ"֔| 2rtHyE*_c>#.+Kk?vɠ'y%B|C,%ԶFX[ןl$âJ^lsvl׊HR !fg*p2|Ynrwa0sJw yM=(@!G3ƭ'$鴜, TBcK/I>6/P TFEeyGJ }./#_k/hu)+?ޅWyw79*DžR`%/tG}pV Y=6#5h5w 8_?ۮ}逫Cot&b%~ib'.hDRhWZ6/ PeO5.8]\5ejHЭ&=F锩5hC-5& ݹR/jq\ܙcdёdiҳX_V%1Eu]k@PcJDZՓ|ڌ 9qY;3c+|#H#AIJO zq(Sk$&:A$U1 @PS7bzp/\ nRz(&{SS48VJ4$=ж ʽAA+d|b$";ZtANjm5aўP@] Fpibi.jP;~ǰciYm)#U*iCoҶO_τ@;UG< 8n0Ӽ&+t$$}GnO5ow'2Y{Y8\oբ+5僣2ab=h&"OABG ۽ ^8:ZgQ7IJeWsq0kr5xy^ j9On?ۆ?cgtlLUFBFЏp%ot :fUWv#,dDGXZ^X͊ ~R]PDFLOj͡K>t4vt4i8&i0'"VnY 5 q䏲d̹b3:d;P&;;*'_$FVֲͰ~}8q79-:տ9 I!S+I5s8FPAҘQnDT0o3dW/HWj)ʻ6WG1MMt$hG?/ew ܧ_` m(`pDG.f%ݬgJ؅"zFVH*RvkEut+O&fy<[!\ѥ3,9*11 g-5бrj*h'ﬡKq%WݲL,>c84:eiE AeSi (Y ozC)q%M!]*EDB;bAg\l3Uag= [zf0"IhhA5z'? ʩý+ڵl)QAc˓qx=]zM†vE%#-)|7ds/FӼ~BGYD &w)]^Dx$jh>{(s F: # cx y{0΍m'X IuW0@UWbgq>p˪ʿ_qLdQ cvVP ">ASQ .ڃ"NI>GrzO ]A"y,aYrjCӵ ÔV>  bO6]]O5@ /E՘MIjip[0ڤs!FJ(;zs@;tp!/SN lv`_`T;]o_yb&]ޙ.eM^RdNf}#hxb'd؋fݎsCǜa }< 6hIom fRu/sT`gbpJQO_aQKA/+v7w $U 螟֥Wl<׫/& Ʊ7W0H}6f-O81LE҄]ʜ@ҚBf5hF!?:&{`N.R7GS?5n"m`վa,=miEd2%v d a0If +^?l_0;2{l2C]*v>ruΪ)u_ǫ0:"(] dH@$ik/cmIAn|?N#'oM`=uFU?u~iG- qh%M(=<.l4l94e%V9CG:=;:.WPoWigajVHZʾTm8nPeai_`ЬTFD l oVy`ރ*i|frgNN&2/ k; ?jZ&э^S0eͲp)x~.\Ӫo 6qaj竬X~D@M@݆W )P}Ri \mb =Lq<\LQ8Ra& uuM5tp\=zcP@HP~:>2ۭИ}PeӲ U){җ_/86?i%T<6,qn./g"|jf˟^SִzƖNb\ ~1\Į4@SWtG!{ ncmAMKQHhIȜ42|d7LwɅn[ pd2m֛bS+SCN+lt .!9 k-3f)Y$ { pIiÐ2ƯjB"x Ϧ sfK[m2K0qREMiHxca +.gIW Ma#[KXZ&F|V2j1,[j Zܡ/cy%I[c6d.!__ໃ!MGN.1) 睢Yv9GEd=HyLK0b^$~i'V/ c;3XY뽪fHSUL:K,ENSE3 Ş{CZl>[ݫQ^وc+l{Y8{naX3vuvI'0<(x^e5mfx4hP`4eRg謲}H;&߸wƻd8sdQh1 i94LQ,P2 >{5WGXޘ5fbSe:.1 F̳A}f5eP gHIU+Kp\zq-lfIb^t"Ia,.t*,^?_t+<nn ֪haYӭd N8=8A9:UPM` Iwg ?;?yE`lk5*RX*ς/VY |/=gw w*X k̚*V$84pf9H$j,}^匴EaF+k ' {," lVB~@C_օqd)U_ ǖ5"&{s nt?79}Ob!1bVE}) PsF.6tOqTj󣍣Z@tP|T,^,Q2W/+n*.2zAo;NƷ{ǞL 6hFTVx7;\\Պ%HT]! CIPVl1З'~5RIe&0VIvސᲇiIȽՃX9z0z@zF gZmtx#Czo-[$KqЭAePlژ3sD: 涪ccT[  ŧ*(r5{VKP!?!|pWhW^A)9#\RJ)u5:Kf/ ,"]V 8"(< i8y ^^5"qF鐙ǂ*7)0_]2Āgn)\yNjWa4]\B-qag2:lLw]uE 0#)]肳q4Gw`-~_8ph}J"QdP)𜕨AV :@E-yL:VE۵Ql#-#PB?6u=a7l7 BsPCv*Q毩_aG 16EE?z Sʇf PK* i-(Ix@\1 ?s|۹^^r'GÑ^eg%$1el?Do@U[/Y0͇;T^[xəIȯDU:VFQR&]jqP~1d4-&Qo<gmjBm PvC#锕7:-^wP7.!kņɍW]ϖGN9Ӷ\NB Xb= Mus%J@Ϲc6_RSQEx@'p.~:xPF%( !mon ~`EG<0tfRt!iY @W4v*1CN Dk8a>Z%yN%mYq|6/IzMGQ%o5Ձ҈|%bg~~Jfd(C`( Hv$58Xe3)H붪U$F*_F)ֱ/r˯*"b8mD`oP|t^Gom`O_|H۝ ) ƆF?g&#G> fo>ax57LA/3A Oy4o1sȟq)ػI* g5,x6ӕ{r~FƁ[_FpedArF<&l}h~%|ԻՐ~Y0J WUa@Kdl8ZZèwq1:cђնˡd$J\@jB7UX]vϔ6q+g2"eT7``!hڧylx@9:0Q AAlV{'2Dk})p~[)쀡 08*10(4CLo\+PP1iGqz>Z#oAHe9 VW򷇹,SO`Cby4c>k?deZy +sib3qOeE?n3{b=<=р`0xyG}=xL[+r`Arke^!hoL$ $YǢ7H!PFQB ~?lP"mYP zVEэ=.{n.tG)DEoIa̵ba(&0~YXBxOtp~Uٓ%Z\埝u🋬u8k_fYb3<z!q6BxVWW.A3 DA A \NI x|`[ܩkDQmEV]ms'Hm]NX:ˈ|7!>3 7zsRWknL_ _d !ZgXgUdhu0E\d edkPWLHdN=֞1XMU?ö:/~8BOjKQ,]tGHvS;>gSoD@4P}ISMBslU:k>H> /1ccd>B>G^w}%J8izPr3h'@A|jsy"͕Eq{0ݔop?DZE?I]oM\) DƂY1T0͕^# Ԛ舄:zx?+dtcdYZx u5Y>ׂM< JBM c$}Z؍1չS*A1y%0rN9z댝a9W#$)JyV' Kte2 \kڕF0H~v}$4jY Ж=h90~"6_:}ҸN9Y/)kq9qȠW %| 7݉dĂw6Ct:ۻ_L3FGK4]Qc~~JotMt9f)ch[3؄ KE̮^zt$\[Sы}}`Y4QmyV]MK$ Qx4oLJWyvkklI#o5?7z:,#NP# %Vܴa> s%a%}mon ccTWEE _fo!kA ,$=ϭIJ9=7G6:=\E{쿙k5 Mf6iLXeͷ !'_ y ưJ|\[)yCGCڐM YWL?m4_S30KMD!ː1,y+i.,PSJn+i Cm8Ol?eb:jiw^.m~ܸ[십a7I' c~b2D6UzBr"07wm-?dZ[ yr-q*ޘ 5f.}BO?&]ۿ$oףv- M8UIL_3 >@Gު)zT~FS di?@U(#QXsgUb8LBEY5AP˧~&YGSKrt-bwCMs3 V3q\/ kGA{ p3;'F8=~\C<5勼WrQ۳/O "ͳ)ĵ.XUK 0p ;NZh,We`qN L Ij}[J,VTuTv=!_'{#MjتLIN9Аgdj?;{0j -[RS}yik#1 }hpF\l-TFej_G=(¡Ĉޠ$9:e Y=55" }QĞ0]ښ[3Jͽ}SɄ/)%3 +&6zt$X z4\涤hLhYˊp/ |b r 3Ji uioǘ+E#~F}$gX/)縁u`5eϫ{6G'#m ʔh"! EwC^s -"bwtJtW5H/. ̆#@P)1a@s wSmjЗIE6ǰ W}e_gW/ ZeK]tzK m 2LQLxԘ1Kɋ#) sbxZB_*q)8ۅ1'p!$ƶIz0İr0ёx]ľe,`u21dؑ wVzgef e7b!EàS51L Afՠ5ʙ&\*%g{QBf˯C1t<]S?w6aQpN9(|LsW*-~@.wUilپO`9 Hzd6oSni8sS;ׇk6Uua^QAMr ⿓IKp3hnayyy8|yP?_gHVfYDH߿m Fd(^yɨ(IBf"hrѶan5ALxŠ  PL/\w`ύ%p7)W1z!7{mt^>D5_??58lI&9,x| GWG/kW䓠Vܭ J.6?oVhesէ+ 95-<Jbz$ F_j%p]z={bBEM6ߺ ffi BxAҼ#r. pGz;K2"Gœm1MOsmX~f"gx͋>!;^ \qQb4% z-A](]>+@0lB:SH XGQzc€~MUqnh(iWCŜWi4MQ%򚓇9V=A"`.L)M$|f0QqAO_DM\ Ԕo^eڋ}z;)E@JrSdzG:<󪱖;x(eCONϑ.)=nXEzj"A$ذT@UȄVLRX@@l <14-׺KdHf:7^ed_[6H!=]'V )Émj*B^6 VhbkhVsYQa}YR.%ŧ)>ܗU~Fw1S%vbQDև(YjR:_cIwLe^~/H4%@P@Pڒ/HvDt_ Tm WLCX .eE4&jo*OИC@5pEwQs2u[3j[brCjM>,رX*)ȣb;Nznf5_!|,C<-gYz j*+CX'%)ԪyZʬ2K'&N~x*7CG~}xOVo n?ڐ X Az MOA|T%+G-K Tѓ'I ;u܈ @n` |xX35Y؁AKCǬaNt|;9qup3i%6Vbl'984JccP8į} ._:Ͻ;.7@"m ,\zԌ4@Mъ(*y=M="8j"|n)8lJ8/K&)8 K$>ܐ1$Z;86[>HWkg{'#'HȾs5)U;u/EBBOLIλ,tH${8e X,d;-'H n{ UJ(_OLny"bOUgs&( ȓF(; ­:+,{8#,P9df4초R.Acv>- /׎+VFUȺb b`졦y*\8cgXL S#%o?9Ve^J|]o4TچT,ڷ2~*e^!+1/3 Vl `@w`YǠ:l(wgu.e+iu0R$E!1L_p3GůG.dIYoKA{T qn̸bpqزУ4KXxh]I9!^? L\L/:E-b}dUW)1!g&W˾?~b5V5l+]qYTuLQ?`㿓B7fw^ʎRI܂/BTUyFbE*և7fR÷"WQ3%ed,ӯ^Gܧ1BmM}.I=pZ(Yie+2]lHVa'<[Rɩ}js kIe0 9uo/ ɷցf\FLD)4'U wQO;16[}2*®,[pݎ#00+Ϭq4%N#0B!#Z☙VsOGԣ*b%h& Pc oa١V>Z`E.) R:jUd] 13Ƶr?Deo+S,Q[Q#;i ѧb:lc〜A6MO" zOp(_L7KQZ" CwxMf${@YS/A:@dJUchWgv.[nl]1͆sƨ=D,r^ISlӤreeW L_5ugNknD(d?zcF> m/c#Ji ʋ ^0H-'zWBޓ̾w{[ڴI}+R[Q-lK<;]"W'u/&M lyLäXm`5?/kzl }t@֐|BUMZg9TFv$R~i_WENq# -0Ձ߆SQaFt xэh cQ 4VuՎT> k+ - 0%m R ˆ-;w qES~\['/KyCP.m(-E`"Ko'D,ç.@R}zj&JBIeC@"ñZ 2KgCu*`Љb(Z{0s]4MџEǙ?ǐ+Xׇ\u]b6d ULhngl[ s=GF^NAy%ZM49/|>[jkSËd@ܭ!U,'-p/$Z!@HaP:lsGQ 1E=ӫSw  f .ku5:nβ"^|uY dK. D2K~FnZ5`]C9U`FZD/z(w'l`%z}G|. %neCK_p{jKVZ:-ẅo+;e}B& 4Sz137lh9?scuj\fe'eEhi.XKYGG$NMF +8{빰PupJ&=qqj2ݧm) D~w"3{C :7A63Wqx˔vMz| Yu S93:\*mԍWuGOhy+Z47R*]~#HT'fe@CNqޢl=Jݡ=[C)۩ؠRoDU RZ'vxG6sy2M0)?o8opEWJM ӑ;R9Hv.V'# '9("zm}flgؒcVBjeA] Vyu 5Qi'PeEupSrɬDs@QRb=v5N9HFdt4gKKUUǬ0 _M#YE݌0yl"Α}4a~\1Lv{y>jJ iGQawEF5}[b?Ǒ*95f.Ϯ+d.HK=a7gW2ytdL&9ֻr]7ay#EJ&VY'~(j# K-syzI0#gf$Jѻ|40y~&yyA 2`8M%[)Q9.xo=+ T'߷rR{bԏnNB2-HZ:n ] K@9ۦ@񫊵s?ڮA`G]#S9;l!Ξ@ǠkuAHU̝%Zc5F=Y02Hs^%do7#{E, pR TdQǗjB1aeS"j; mEl\u`,>E0IVR*aZ&ɨW uag\۞d:rth\~l"Tsļ?QybRLm IgW*P[U1"=6:`m0NI; rQTO'j5 |#6 O'^HT vIQ, PܥC6eBћmoR%PȺR FJt"KށSܻ;uoRw-GqjF*?Rp`-&{nQ ҇|eFQa|>@Ga{Vi&\{2Ǭ580o!:LJ 0-:kOWn}Êd݊e˶LT4`wUF=uֲ %#+N豗q 56vR;r'K6K׌7nU[4p_`e8fjh U.ms=g&N?uTcJqSu* )@3_,Y1|We5 •caP2#I5 >I cb.xy1VR׽qmϓw=o qZ0xP4bUE} E7GBW3%Gy@Y#<ضΞ5k J%ApԣCb }>=;~:jWLh-B5 <]$wwpYͺ~|{^V_ō͋Bx{kh.F0$U-4Z:jbe?]A]`+ele%w4hpf)'XI]m-i)坪JS[ߎdɳ].Dr07*|՘ =إzL-FWhg*F di'=Г09?t;bEp4Cf?M!>V̊vbVV,Nk+mMm*'-:6"dF3 +ȕ!d)_d,`8SڪOKzBFLҚ\pDkn'8lf߻zO 98(97s{g6\b:W\.|T^>Lv7Yt~VpS܋eajPs1v‘S!1z=ٳ9 F]gÄ@P&=.' Y (5xftO3sӁї >b i$ZQdP"oXiyъ;zC)WpxR"G(1en,||/0b"R!iVbvs'_^ѽ/HY:sI&|?YDWy*"ح٘zOI[wxzD]Iq''`eܜ(k2)#*ZG\N__xf0с]- .66]_A9 !B\DO*U=H7LW G?A/':σtY \փ56gVjDdV1ݺe9R|n4,Ŗ{~rI3z_A $<M @2LJ Jl,ĽmF51YwP"Z 1d8D/Ƀ{wl-[|ҍ 9'_E䗨Nnf9{{_ [8jD+lPM f\>q\Jl M3Kdw1v/A?BbM_Bq/C `ҷܨG_oOU3Uˇ:ʕ[(3Hbbӂr)Q{hw)n.CVV_6+WƪfG|"] ߗ!v8'wéc5R7}b?6iӎl|tKBJhTs1k&[KkP+EMkl[H4w~1SKR̶c4 Ǿ=8  B4o|<7 Q[g/ΡrbîO:M2;ŸF3I!L! p4]ar`0q!.`S@waҠc2r(k ʛM ML :W=hWBGRv2uЪp“ԟ@~*Ժw.z>NNSAnlͪݘpC'-8>yPtKZceU5>!0/| iU <ebv44tV0sbeK ˖ Mt2'oR%ٍcAIyU" ũ {Y{:,ed_6Kܱ%B(4zl}R,~Zs%_7կ|INÃA fM8dڽ~Nhl}X"IW1WMf5+CRD2JEfjU^6anᅧ7g\}Qpqi|0:UQŖ7oѲnB~0x"ePnlUHrD ELVsHXqvVq@嗛#>mǛȐ|kXqϿ.?P Wh b=Az | q:8' :q3e]r;L6ꭇxxtHu;^#xiM=o@?Рd-X(SN6p-^+7j`0Hj Nf+s^uT/j&1N1wKX5 ;OT%5#P @XX7 džF9rfgR a.[d_wݠ@M hl,\]sb_DeB*/ʥz؜{g5ɡ9|g^5{ w&ZΡr,9督L(7ٺO)NJIe@.zR? t,HQ/̓C$,;Vn磁6M J/zl%^8^i%jfu<\H]Vpy8"`ezq5%0d;*;!EHpUA9mJׇ~4_%+n9:ߑ@hy`wWA7ኍ7'82jɋ0p;J9s#UM8 !8_!P:|9N,9%ޒ/D8f.}u0>=BVZfo.vp&a5!D>o/:/nH _G~K1v7cK$ 7;L#UF t7qY}EL"EQvk FzJ=ea"qYXYլS6Cżs1{9':ɋz9XuJA jWӅU@}g&tظa,IR\I 0DSrݳXY'n =79iD:ϐ7\i)/EʐJQX}aub ߚm~5 :JUF|Tʘ}gh 0:)Ok? &z&gHzslev)-M[Ryw 95$LsH$6]!LH QaH$^sI1ٯADXKֳܞD o7ŖUѥbnrֵbٶDR7. Ɂ@@S [}cU;FfbOַ|slos $H= }ipV:z jh>!uu?j򕢻_(=k`OE7Lg`njA{pdkzkt_HbfzrxGr֪-٫*`ӯc)6+Ua5"*c:F^PR%Vdhʟ?/gG⨴t( 6c%,MnWfh.eb>sw`8ޖ ;5Fn0f|hs[)a:[ȯ7"ya 1K46&&,̆n"tX䔖G_j~ڧwپ+wmDDC&8L&!7(ɢ" S3 Jvm"K~UZϊݮ*@$Q͘eUaf yD j(=z!H|,tJ4BueYb0c9s&WA{u̞K3j`w]C*P+fr7 8>"P.o`KWIm GfwCET%UI`$W]T2>A |I)r=1ReD%8pUH ߤBZBu̕?5ˎ!N̅$NS0`Cx&jì3\Hzͬ; r@ kƁZ 'w= (>LAanka =FR?xꗠh`CJ6:wo]AF؝}onCٙ׋%s ݣRgAeϊp }Ӽx pY`('}RauS8uKy:H\Pr.MFjTX9iNoY :)uA#6O~V=M'0#82khΟ:`+ Rc`\FD /r+:dڽ4vj~'%ZCvv|{7G`>WbgD'1VF$)ǑsQ?5R-|\^ K@yB ̕-<+џ'W ǸͶ̏W([[v,m,>KKQTtveRH$!D+x1+̢LȔ02u}lJmتi`'@%]V}c?-ooozuBGw)U[b$h -z~ZٯC?+I.o Z,_I_RLӰN&`V:8;'YU3ڊKpVMm]6Ba]gJ-VH v׀@3SsXK4+H]k$Qym{{d[gc{"}|)qBHj8MImdF|N -qq Χʓ杕VŢҪHgf Z5cڮ7l%-Xh1 -hOaW.m(mV~1Tĸ>EōR^72.R:|/ * ?z h>< QNn7ć} !&a]w~q HM*IƇcbոdsSrzzCEq5,~ms1|P)H W DuPr`s5M[C~0dY 巴"IKg*I%`G"}Qht^nZJ2G}tĚ k2G<0VM{t# :I+Qrs"Ι AgC \+ÍQ,Φ0ټWhhC5ΘsSNYԡ}ɁpDc7rZpj*pSiHV;`ʌu::4Ւ/D޸~UF$@ W:ٗTqOECh&q\9Q-gZ;yW̸XcэU)P+vetʉ*3't5fE^$sPr`qP(nOp>-A$ޢB7)$ ZV8עy C; qI<@Hg@vS^8SfX+(ElZ59Kl&1u!7]tRi#Ie<шa9]O&Q-SX?pft8.HEQ%$L* -af4./ԍdQ;&XPHǖy(O9MD)9/xƓǺ+axe뎿.?-Gǰ E;E6ɳ5ftl:b箱^YkͦmGLqjxb<^l@:{~}Yד4PEJLG59ttоZ`fR'lZ/pxG~Y!%)πW` S"<^\IWkecȨ7cPխ !q CЁ;xiW{v(o+4+h*/J&DH$,,cΛf2S!s~АS9:L%z1V<=i{JAc%u;+xͨMh9Vhp"2>D 2VO5ϣ·&h x4_ & N)x81M\lOBvBlmHafoF-AUcP.]P)"5Bf4[[0dqZ\IPsQ ΫRRCk`ʘ,LUWô;3q1i 8Dk,] $PkMHir@>hKF R?,wHR.LAZ#LQs6'M՝,iYtm0%m%2m,PWYn:KiІCyVuRX5 rr7%n;R,=@1N9 B:@ZTPs#-hmCuXfS?_;rnaG1AG]OY~:Ů]u.&N֞v ?ɐ&Fr/]S9?A4G+=Qk߮x 4z}O,t,\^6J裋GƅHb2_ε3[*JcuEgj&v ,;`ͽ$sQD6q%:i 7#73(ϩ̛I:5` TPoNv+l]fQh$6h'y8˝F#WU4_fЀJ!QTbx_8mIG _"*YnK»&ڮ8s8q?SښtV[C?~N kQ5O8w91Sz#piڴ\tEjRJ4 \q? I⚋*I%6:K_rE] lύT1ڷD.[|FST5@8GŔOu~!^A+BUkvnLs'H5 q=d2 `?Fm7РA+ôLFg}KLG1>/@+Wo@P)S}S3ԺXU& _ Re<-96Z]a@Ҍ|l'9+r 4.=c 1)H"8u '$ah*lK^5Q=ٽL v!XwS9R<ч}mGEg_F8:FnĿ+mԪp)}T[&`bQ^4}!̴f2% FL<*w7l8!{vح|9gr5ꈇ|2tKu1P.-;l J #Cj@E dvOGv _1]A ԁLm~%Y:T~G${={~Ig+Za찒Нm-g7 ?^3uoq=WpV exsW_P֝Td֎BKڮhİj5㞙Lbr13 .`U?]*6&5H3ǒ'-Xnݮ!'Cx0 *:SIJMEP=a< NyA`0 \:Z| v1'4= "<{QoP_|rS{OGjDNQi -p{N7հ_7ʑ!L|0vv,l-meS 53.['6ohiEQX*JWsL!:D8e<0K1MJbn0-4_._I#dbEK.{!rCU|ίPޮ0ްWNJ6JyK 7B!jqH zJA ʄf W2O7[_W=_PSsnfwcˌQ-fMݲrFlzuӗKG>z~{C ͮ|Pu9!"| cmZɝ:RkN2 |h2xʥdmE\]_ |]T|y#^8QȂtf8 v!ʌr@f__T<wŞ n#u '_iYf¯,/[o{@v ?Lz8kV# 1T9ؔI`ZU>2Ҩzsz~9l&EE- |dj,ZhBj`܇̯^+~p9PKF^YՌ%mVwAQKo= ôin& fo.XA7Uj+|4BU'u#&تth̞6{-ɪ"GO}tgFĸ&?l -r׆JFa"ޑ5Mq{= m p5tH IOdOJE`{ecx8ztn#Z] oNe>#8 81ZX|lI3x iaT[%t<<ʆl>C!MS M>#V3Q?vlB⬼ސY@L Ur=B:/2%ߧs]rozVQ(w:Kxż \eN}kT Qe?a Ru$E!A̼CImWL$V X@t.Mm8t%PBV̏FKl. dKK 6 ͡~n 5n ĥz/ /5ktoׇ5v~b^-;.y4axwN^N<_ }xnt6K-` |聑U,6KFi:MUZ}}B r~sHS(H)WvH-#lkAd,naoN_sh OFD\:K5 nJB oLy *D*ROV`G:QQ53Ce<p]HsSֲ*plmmy.S{NW|h` tEf+;䗨-RMLa.|4_(;F#4w؀(Uwǒ>3ձaXItk| eZ4B(pQCn,J|/sާH2U ˻qׅf2bJa$&`?0hI{'o|w~ z݌s:2~I({[T^˭>!üb%>_vp\å0g--~beDa3̧P;^:jk]Y쏿~k }FC-[5,p.VKrx%w>ȋxTFO5m[.o[Ƞ%1,*RŚ6J-4-c[4`Hj=(OR'yih)qz3;sCкk!nvsb s&fNVnK=5o tkᲚA||_Nc>gЋp%.eTu`/G A6Љ^Ҝ t[,h,X'O+eI?NAHLup n랟\֊H@Ouqh!\lfɝ-l5${Ӌ%7JAG |\,=nܿojy#ps^f|^jΫJͪRܞ;XK RϪR- S;Fs;#asM}<aC ؆(fI~yzg0.4"5$.6PV+a4{םU k1N8;kKڵ+.+߻]f}xyX5|T?8c#>NB'd,Hc|w>1vB:WEroOVq?c{OH/C35u;{xjuvYpݯ.JdlNRs32(0(:K{%{"3#RH_ r'uON8ƽbۋC8nȲ ?a@杨{HWq0ʛqa?.?ȱS Jv%Qՠ'E;߷ؚK )/6hhbܯHz.Ƒ VބBE`f2kW !T,n u1"G"޶ኂ}YXx˺t3~;Dc8N> vyQHoC葞,\ y/0jI\إt59D0][1/! \%On I_Xg!s,d<9W%͓33* y [)^;P+=m79.R%i$>Y"`X+mÚmX- d*nj%c杔 5,Q0] 瓴|V '[ ȓg+ QR) Ew% D+AksWǥvB>܋9Jl[vUpugi ݽ\d`✅5fB)Cjŗ1NL,zZq_e&Qx2p6bz@aV{ow_?n*&] DZBxRA[kc.ݨ^u;ssrSwݒ&^*-sI5)LV/ت֙CZ9/zgV[Ha"<3]QW|Qtoji5.Zpn]#%\xm]0C.[^:nKtō2 b\ŏڳAVJxĞa6'|7slW,: 睎"pPG~yj^o[H[b1dJ8ELgۙ9L' dnH+\JDC50}Y]ڕ@gJ{bz+'q.Й87aw5|72mߠYX.YfW+P]Z"U%f nVv)u=>r0]5u0,Lǩ*i^E}tB/"1£&r͸(5վ5Ɔ*l7g<]C>J@azrz-8Pc8Mx=MCгKtP B)ARĘv6JLfG=$ЍΡ8=Ή6@t*f2`#_ 5 <ߟF9"#8xm%U! tk3hLhi1ŽGLoUJ\j 0q7F 2>pf98I 5B dۊ3L>M||w]H7DJK׿M\߱,{ )PX|,nr$NE-C!TQY9s̊ފl ?y5&&]RD `/UR pA *6zҪW4 }X"YDҝ S084+8SJ[ahBJ,sHa{šx6@~&oytq<܈gD58 /TvI浘 InlXPr>R푤x>' FL?1Yx:ק ~7ע$Ys66&zA hwNgW:{%|A]ݍ669;E{_ _l2Q. *'Bn0ha/'?&܏ovU(6rI(TgBqFyY{>QVU aZ^|ȸ,4~@ 8o-Xbܰ ԣR?:2nV!,fs.,%z+Z?tXh@o9ynE)IO4vO:)&o#ōv[u/."]Ly(fAo{},LPNJ_ФUݎJ:ͥWNя u`hiD5' zݕY ☆NTz= `[g#F.c!+ ?C+UBr{s F</*܂GWIQ:ƷQo Jˈ+Jϩ~ۦtJl;m?ڧ{%pRT>ۗLfy@)CUv"%޵;ij` E֐/ͨ?$GJkɚcߧHOyRߔpǞ?&|r-c7;\D.\lYr F0%fp/~ v?un'<1CN¯[ؚ J%_6Y~afvX~vVk ={D? Hltܾ0&2p!֑Mٔ滛L^KR'ϴr_&1Ͱ<a1aoQtDXJ!O\ ɇXaXn/S;rb,+lޚs:3 ݋Tz )' <:K7! ~b@Mt^5*H$04eKT5֓^@2QX!q%N55~ݨe>*u?t-z5@h'x l)z8Z׋ sԓkHHRTw2pc&!S`moM$#lT>jct=5͎z $K_ҲZ8 l/BJ`ЦdA{"_8P^-)#}~3d<ǂt2 ˵<ϰ!+;-#G7ayl3(jq0LoEu-|Z8DQQSugY?vO%U<`Џ_LZʢ'F!GbG [7?b,M"6 .$h c1bԹ!q9fYkAdAu腴lVb`qxBjcaQ_vEԿ+eɋfH*߹0EqcR*Ckó$?\Ŋi f͚¨)G2m3p&H_94[sdq*l?bHpW?FlkG:1kGA"),lOH7d}jɹU4Uþ=322bP1%[QY iDbw.WNulGo '05-BEC\H`~34v}[J *_ڕ4ض)2qsxKftؼ @Ma41v^c ^IB\ SV%+23`U(n}TGPmȲ wߓ+ZjsuPJ!w,!G&3t{օ]q~<݉ݣXp/`hDld[MB [VI;F6;uF:]i/OԯY"^=\XVfAQ69.,#&:έFQha f@f6tՙa ؇/ԽV@ Fi : (@;u@tꇂ"-*+a Ll/(CؠT7[wtgHn퇐5su尺=2g/;Dz}=]oHΕ]&u3ۜ6$9 7=v#{m@zDZOye_eR}e, i R'/\2ʽǺD(XF=w1@y)^C! M^ ȡ1F0ۋz捋{Jٿ0}e?_s 9[2Q'" : FSH.Lj@s_;%bguO] Zlz;oi]GVaOzեD YJFB Dq)giOm<ƗSY)6I9_ocDC"Y> Z8 :C5z䟗t##(7\bH*KJFV^VV6uJJ ԂIlqwgߡ&&nwh<{41b=M 9U1}rrgF"Zw|U>&Et?w4wʽ5 ӗD<͌Ӏ"&LW'C䂋F*>;"C qۓ_Sedk-`˧<8{AH+#DsL½T(3Mr:jIrlIϋiZ2D#'T;ojͺx oLϭB .@,~wYAtlz"k!wqv*H#61YD̆M*@/Zzh?O)j:YWuS|bĻSDAX܃I_0&i#!WObq9wE "6%s*ߙ./_"X\"Ou~t)SA] _/Zk:I+t#q1mZA,O")?Tj@ ΀PNhkg3rI&% `1FLC#C~㵽Eu _?[<xvMX SԬ1 w`6jGǩ^;!'?5q&_A68MVd{QROFw0{4nR gjpY:Z˓q*_XoSd*ncB2c{Ȝo|'cOyBeǴxȀH P<0'0P P,! #.+6gL@jQAD/P'xaZ,*%+>P _R0P̜)G >Aeu{xC\R"y h, kuqŠW2<9"mh\p~'yM9}lDz7zZ@ :nL[ gsθFﰔhTYy i> lۿb ^ V(p Cq43n"iHv1ɞ˟C3C7U;Ǩ=i`#3 K4MܣXFۣ0*/2Y-Bg[ `u띫 Il!nQm*Jb[@%F֥*Oyz满Wݻ4@ՖOQ{?]׫'R Z7jàLʔCMTPŒ!H*}15//juXnDvrfǂB+ָvXa!p 9& qIIyEt4qNrtLvi'pyĜ tFM^+y .Rg%H?B͍,$f1A^\}_1zHBo $`ݴf[C` Rerɳ\D}c% =$dA 2\EQL 0Syx8V%y"( w gQC> R7ZD% vd=|Z]lX'낥5aTUSN31jha7Wѿ`Jɪ}웩W"8}HO}9`+ݕ41tȁW7ͷR۷aw'&(y1j(U&`;̭Oha B w~v\X:S+E?c?tǸ:N~K샽ELiM@iFuBhNteZ>hղНn)x.aIs+~pb= ?k鋦,$QL4[Y+n}Wc͉ZOXS1Z&ݓ|/^٠x2_ayfD+zTqmWf5To]NF#L)S{a`h7{`P"@=H0b=j !"Z !AoKp Z1$(8Y]t(Av@ AHh18Gc ;(E6rE) G^FF@}||+kUa4ՎA^"m0&HQwBY76\"އ4i /_؎r'c5؁Uc`:VX׳_^BJ,*~W\W[57rKkw|Y1Gߓ`')Srv c"?:լw)gF/Q{g,v;'`w.iƒc Ȼr+$qUw8)5T;5 ;=S[@Mߏ5`—~>2~aEA/z1߸(? ;MfR10=V~ZdYt?c>;\ƈs4r"av$j<ީrZzg ]9 [)Z\V mAe+*1n;kbp,(>'z߀>jS>O .AS:5צٯR5#uI%[};Q{H{t/'̰FɴHuF[=~CLiQ)MK69kZ B6bߜ.=uF.3w?$ ~%Zwt40>(7ʿ1-{C8Ym뛫iܫ5H:w&rݒGN/U!\>̠ 婴HB~TV9ɨ| w-}NǸo:ztJ8Zo?>>647O_'nfՆ`SB>ٖ×9׋) VCa3WfdS=զ3pES*w!Lm勉]6zkSU(L,c 1ݭ~]޾Do@׈ @>)nWǺingvYo6 “;F2Iwmջ?]$qJLԔmY3kǿG&xOr~x/>Rg%]zaVF'WD/-:dWOo0U\E(Ҝ"Ȗܽjߑ\lMOD9'(TswZ(vCM@8M*|H.)E6УJO_tSreG"PAwp;`-%'s;/?*IVSw !T!r>1]ܟ`[IZ"4'_;cH*6w,ٲ]5C`xVKmkyܒhWpD{' (,f "`_:FqnFՀDI@YϐRzT7( `mF+\aWGZ̐8h.9i-$DyUS£u(D븒Aӎ .40$8o?k0ʈAZBձ?8 nC*ŬbC}%PC# XL3y==S?sױB ua2ٻ&:@ZZ0VobX.>& ]8"4^}f_ߙA7tD*Ru"weܫ{=E&X0{Py|fWD+3’|XW(A|*2\6w'gUclxN vJ `NȢp&n.P|e୅ᇀS#]rjW翕03~C{tq '-%th)Ō(Ws1@*͒SRMJ%.pΌ*84 WOj"޴D1hi7,;qQ@^ҝ ˪Z2Z!ttǝXS[l3?xUGmiTfrp֯D e\:Y_AHHrS]ޑMm!K0o׌5~ 7<RW;d3[4`N.n%A4=R]n5]4}\,_;J17@I_W!_Sv|yR^s!ԗhp1SyIn渇 (Rו|;mEtAV.˲ 4&sl 3gnK2?d86C[A%\Cq@ "ܺ틧lj,{َc )uBr7Ngj r[B D{Kv[1Oȓ6{Vߵ Osf7$bpq b_HbE3` "Dw˜tiEULcCNeUyP7t.u03;>Ϭ0l{7X. 1Ԃa91 oE5 +sU[{lǶ'\~G7;!-bf-9m~Zz[th Y^Rm(tuنC/pK4vQQ1C(dy9{6߻?\8ɂ`1Z[Ŏx$scv!JQ޽I<,f.ڋU(<!WbΘ˦td'hu,8HFˋ8L'*S*3:3σu'E7YoOӲ+(&iI\2|\Doqha@Y\*5Bto_NMIxY }PzY_3 Yrp5ACނhC߮/$ٍ= ]$;~[sޝoNt(f'}Ӳ3[M`m67A3cBl `c~6la+?$RZ]r@~XyF ;H I waب'T\Wn+`#n TBB'AF9lV:M> /Ք!qmW@mqˆ*K+oO hr.+/Ycsl B3%H/ߴP<`C-@?\|}8R,@п~%sAy\o dPPeTO9[Iy"U4t=(2˄.xNrn`%|QqlfJ+gl *ra|4y᝝1نʉ4LI~3t$>bhco-ߐ(Q48v ;~`' [WғԔA,sRq7ԋ 2F+Qrꪟy_ɉZ+#I1-Է\0?iU ׳HɊ2 9*A3;OS4?;mى3M1|Ԍ拁Ft(C- fdْ"[Q#!q$|⛹a=`0z)Y|x^ 5'${-pC6L%?w+:%?$ &$m2Ef&lNOxhA eDHsLEWَs :3~ WIҔ%%_P-pB}es~E {jXc٦C+P/loKˤ?XR"ݯ7Vg:2@F̣SmsJ3.=DE5 4<)7R13?",AZAM>]7KJ|.}jxW7?5&v4OoBYL7Vct=JniYkc'twAvʏEUEZc8ulSX*̠W}{ze[W{5pU)W! 'an$#@TW@@=ؠu|rZS["kp%xjsJ3CۙSIXW%P0_Og ҇(dM7!ܮ72ӅS24d^hA$t4QMPC A6hAҐ/XѬ8S1|B%FWcp{7Q!SS_Gߔa3>)'`kLŲ}qNF6l┽Lv* ħ*3GQ6MjԕJ =no:F=3f*BM՟4v:I\M}gN<MzjIFCKoÊK:M-v$?+LWsߪ*ʕozF *KA'?I@ \4k"f]PJ9By쪺~-71>%S^^^k\c)xr6n*Kw,ZJ`/Ee9KSȻi`DBx }Zr'i;.鑩suܦX1=G&d+jkGĔZt]mLΥtڞΜZKۑ'2sTW6-ޔW^B祓VJxPekVؓ]!=]񞒪^5~إiTԚv ׷18J{f~IO6N0'3d#69iQ[AL+}!n!`dN9@@mwVuvX3Jg\MZqpDѢZ5uJ%Go0ʼˠ4p=GgpXGu/V]"bڃ~3=Nǩҹz!0Dg-Q:T,6 X11rUc>7\=TnQWqW_w)ωZmoa9LW[@عZ `ay/>e<#T(3=O ,GUTM9GFQ9tP$Ru~Mݫ; />_dr7]%ț cѡCW+_(\ROHo@(R&O˲ tG(%"1l,ֽp bwHo\@&, /7-ב  )Lo% b7Ő٢ǚz8쐌A h,ؚژ]?0P]gpԒ]OYܯ3U&}^wP]xqR=q?9$ghZKDOs:uF®p2PZk>>U'Ě bC 6O<hug NxV1Rp1 ř/|g "ߞ&RVT/h!g*^qcn"ٌ$cn.(P̶&DPLeEW-8cEMOK0v!#\;K 8:qU }!Bf .Q2.Xyy]mW_\9;Ǯ5>cY6tg0=V|DjĿS n} B X$P ʇ|)~EWCFF#lVlfe LmxAV(٢ ok^b[$%. 2+Z"lA7s!Y}p'-op ڻ;W,Eqbv3I>S'恅Hʸ-{a[3 7uaG`x-M15;&Kݫ9'sV w{ HϽ+cE(5Ma^{JP^hi0軈/'O^u(iWrzd p |MwlÝDЈO|mY>Joҳ(sHR>%!5="OOE]"s~vϛ8ľנ 5΢BKs -<|xD#Rin7ϪG[\Ov哻ݫU+SOv! N2ZZE_*_dЬNG$Zp4 q4{Jפ{\9 ^o$s1Kֵ刡YX.R1n؁)-zh-Dm@j8 uF}3Anaϒ,2!^}H==>$~{1C%!g67oe?a¼ܺȯ*6wsV*Z QPˎҭ劣q}d MSP\E,B\&[&EJULh9Ǵi<.8(&ș4:ߣ|gtM=)V u=e΍ u>ByfBy0lP7s+|j9GH pck5XL##\u!/%k'PȝA/LuY 7%^Ūi/̴Zpl!щADn̙ xFngc+L")j\J佲,Z< .F,Ie9[]SУHj҂qڱ&'MEt\2TC3L~!sQ—K t(RMmTCzkrER/mhkMEP mv7La/ϥ]N,f'b vJn( m@@ =t /஀{+׌Ń5`F2l?CəQ=bN?[\/E|i\\}X 6Rs8xҗ)q8Дbcٟ čQ%H܍-[@7&،$ .k xtPȼgD_9gH$E#U T(|tWfVrG񷠺#-<0o(+gmvJ:5F1mIҥGh^U{@394Y+fl )J{P [trg=a|nԞ&uF8 W-Rq4jLѧ|cL[%<ĿrؒZT5`z`vCZ*@WDJ|8le~@8l5vGu 5A$;dr``5dӃNT=fވ>zS,~%(( ׮FqUt7P: ʠ9["(Ǻi\ә}nPgMh hWىU2vVp݊;E?nԿ|&&glTZ^7@:&ҬdO2[X~kOf 7,\EHcQ9u/(d%!o(&]ǒRe|בƉd? }FB?؟rar)ң1:4EՍopZ)rPC`LQ]!3؈B5C4x8.*aڴ,y#a:?2ug&?9D.;B"j)mkNSNJ%ݨKDJ>i}  Y]ؙVR{J̈́Uy9/.w=Kg)sQz۴WAI_镁40/ ]2׼{F%1O(,d/̽9W]Toul^%5LĈ:}oVkr*T?=]N>!4rՠjTc.]S-t1$xv$'Kb_ϼE 2ud^i5Tss&A>oqSnH? 2,#mmJ>r~~}Bn W`6Ett۱½նzS9!VQ=$Hvo:#p3Aհ)DQNbTǤJ$x%"mUXiS$r=&Mjw( 0ЕTݖg y.3Te-]\bP? X ƝQr~\Lr}'dpWC+m:,.^⒤y}o<#t !ՎPOƱ'bRjHϰ;'Oj鉧MԵ>!}B*s?} oS&>W8`o'gUJ8lGT< SΫ R(Lt8vteJjl‡J*WAF(yu $\Ba]҇S[/[\wuQjWhrX`l^BAeZZ\ӌ\}_SQ!}fkr^5سD_`ȱ 7اnJyg2ZCUl(l p8L'yH-" QZ% 9&"buAj3.঺a{2Kjjpq`CLn0xzs㾞_e, S1hX.w-lV3/ ?5-Цҧ5c-+fHUJg {>&{='_X",@|6zDydJIKdt ^4"kkDqDAgGa[ϓ#uͯ ɒOΤdo҅CrАلw@G)ݓXq@N3m_)ݫ*z'8cmk \y(đq$ݰ73aDo&x<3gA1Nξs`)[ʒRc[91)y+)ZwNÀk=PU(nyy95; dɄ7OCc%&jX}'ztӭTiSr7mSsumT{r+ka6i G3̼ŠnnjxD 3j j) }3z694@Y q3OtV3| @p,Fh):E:3gVAҽҮ8Hv;dD ~ ?vyR; ܹSχ5ID"F s݂!8T ~R4Ң|T!\ hoJs]r݊ yGMs wzUݽZҦtK96c%xXg5_ 05$!\.[^͎ U2J8SuO]iVbJIR3yXY7h5 "м3h6o8K|OЁ5XYEͅaL+L5a_Hc2F]b JꟛP.A+my|ͧȱMd׵VA\Cx]Q y\7 aٶ9 $ZuU`RoA:O+J"΍^`?<^|D>NһV>ye}Ĭ;OC]H7ꁁbܵẀ&BzSFW3^?/3'^m>CA$[+%.3r|-i;)/;MBpZNT< ~] a-GU;ae_.L9ZBg~ic4hI___ՕYnq߅D-dɳli z%^5N`XpeX̅,Z[6$6KTL,^Ut"alrce}I%nuY"ʦa%g,vjb$jE HBx7 1pFYGyso&;/>2Q5 d0ʓ=$Beoݸn VуTr -hJkXIz޷|L:vW7[~-GV1t_JҟfD fJJ3VVux Xm"J[EDp f~E;oy< L;sޙrx'S݉>}Mzb ZAG; } y75i2.'Y~&"k8f&{é6):ܤ#efaGIZ2w69x,иĀ4 ?=,Ĕ/|6y Ǘ5qs_voNnVrזG@5}Q.F9_m|]lN@.K[MA.{nmٟ3iGcփFJvXlC ;mXu>ƃ3I`Y9[L,\9z$EP7o8u@|utΖ]^gP QhLdG\7W}Ҩ$0y\4` %yKcJ7M4 /u!$sRCWWR %`v[eߴwռL|d)/ĂQcrw ?-idt,[/ ]IP .O!w"ܡ`EGVI\a1BL6.N6sEAKw(;~yPCwc%Bɴ9'F 0sGWȝy -Ͽ1+1 !'lbfͲiUSL7ΒYe!E'|C=0KpŊr>.Bh<8>7o3P-s0m;zY`¤x_o`(n;GLJMP[`ۢa(x Ƥ>$[V5$=M%Tn'Sp rq}3'FGZRE2(7%˲~}do0}`[{O+u#uo 1x /)N2&RuQp$0DC`ru}nq׼B(c9LoGZyBB2AlmG!3}R<˨~(&f!\R6Zm є&C{uCҙ]ǓRU|nGlhZ}`4ccm"D[rpMVʰN_@Etk(R~qDJp:~dH,U]kXܱu#sa,\,#[Z'/- NVL_ .SωgYAW4ڠ-ͳL}XbD}EckuB\ P } aq$m70s )f;U/\p]KɷZ{yjUqѵC\T֚ǾvDL,2qjŅSˀ-Rq\yi+mݳX=ҢTo^S3L؈?]"|(юMWNΚ6Iq jѫu.wR{4Ř-+X3"6kSVSAIqc4_WU&(-ӼM%14M{`1S',if? P݈xGrh)э9,_)Ĝ( 8k9-{2TnNLΆYTDY\ JN}NxKQKqp.$=!q:p+8WdEUsiByWy6 Pκ 0KKGnf:=Lba,zD[a56 DyV~=Nk\Q3LA|@mu*5$(qByBJd3T d+Ӽ989.fb)Z0 >-CX=#vARnOh7U|ߍE k7&JymAT܎UUURn!AO`S8% U^UY3^3SgeVstTMӂ8N**b͈'ܞ€+ѿ㬣]WNpD5s7k?4 S*;< @ț?Y_N&,"їqMQn@ 4Lқ9$ɿ_f9GO|Zͳ':΀cHחT$+( CGI͏CTY[ɴC1Ϻ^࢖V+VO13+GŸ'd j*߄YOGn{ {_>Vd^}RO? ZrܤB`A&}5Cu^"tyN0")߳GqߤNY(9MV`DНXѫOXO8tSu˩q])jhcP>϶o?azpRج~T aEU5*ZTT0#$/G6].ELޝ@_8ESiCjkGV_;j: t>К#hR?qśeLʉ%41V 18'f!#W#Y e@@ǀ3COtoKW V@=OT8}ԋx?f)Ki) L4bH2^@1[bTp7M% Z`>Tpɋ6䲯|q" F/DZmއ!{w״*1aS6;[orc!콮'|IFX \q4TO`JpM`TSbW̚+J]%}Rczztܥ ];*4pؔo7k(w /$[rӴ*w>eί|~ns(S54؃*Ƃ)ưlL3 `s#yNYx=h O.$-K0[ClYvmI trG\CU◜bTc3 \D@XuYLJҮaYe >hf:Grr "~YVCkA<ǎ{lKRA~BI/}&jH^,0*HC،nxUrݭD,̂ ^|޸6b6u:;J]9Vsu@DW0HU1c QKSNE26vZЯš,\ʳ6IVի8H |DH9>m=yK\HTOXV]~x+ps WonJ8MkrvɞPlt >͕3x0w N|ˡ™ɕj,< _+KNw +M88v# a{d =fހzhIyD)i,,W_6ІLXEg?.G# U@'uz_W1m_t{e1@Ʈ2F4)dH!bYBIԦ#W?PsrڧJؔ};L p3<,Inx']]60G"eEE|'1[XsU9{hņvD(,]0@ | fod\j `aLOp' o6n,u\z!2yH{. VR"핢j@v4Y8mC5*5,:YK pVNEYYaS#\7J` [ʨ{z+ge>s.%xC"Ky=^#-ad13:%VəԒ=POفyi0?Q/dV>~ |f~6ѲOZ(E͊lv}wW2\~*\<xq"/\v_Mk<2<@ iKq{ղ":{S'\멩oI{ĻlQuSsB9^€EHVͅ_>#:{g_[wOԹ kHLe1FX'3uN82 (L5Ģ7=Dd& VCOa.Qz 6QDm$:i*doS, zOnԼf0 SųEaD 5hNlkݲcۅϣRcJOTIM}3hf U8JW-^px](q5##з.^kd?5{mj? to| 3{1~?F7j(*--aK^\㭨q%I6"YbVVsxށƯ'j}P}[~N+4J=h#gMLf.uGil b<+ޢB(4* EE^XOvȚEH;YɾBJl ˅}E'\^P2Z=m(1siG ]o,+BQ^_nL3GװR3ݪ:k{pU @-Yϊ?cNځ81 XeC=l[TJ.;/Yp*TB.Q3ُ4l_nnLYv ;WXhVd%?,W;\4sH_"ߤ*@:˚*F#^VzF$rkmҜ^w CEl bEvPM{csT2U jV8)ZI!ujw/ { T3丐E C9`3 2 ߠ OT&ss7G> -\Ӹ':F;R5tqQp8ɯJ GV<'9?$i+ZfX 8!j#JHe~W~|df'6JT&" A8CD,aOJvDcf$mʄ: ˈs4"Q()03w4Xu^Wұך`)rf.dTѡc*5`[ /SgK'Z{o}w˩J#olga%_Q0cйxԽUR Ϻ@0 }:mЎr\7hR C]\FF3zlH:nתU8#MFa}V \O uP O8M"WՅ)>Ǐd%yu c=>ɢDa(J fao:.|ci!vIz ŷ+ɸѿb~d423U-ߢDIL4`5¾KEѤpg6D7*;cWCVXMW*K.C  xtu*")nj_W>0xy* kw"0`gv K yӬq2vSx* !{uȥ!9iMaQ "ʬu|W}Է خpmEwu x~*үt~VƱ@>TB6?Ӎ oN?%PfO>N9\)R=V +\9 fR̭+#+-^dq֔s EM:N 3.@K `@$֬kojnT O/qjƺ` +g|: jW= \c }鉬 ( CI9@vF| \N FSZP߿76yř8-|eot뢭xXOm$q՟X#sTVYT8=o+eJi1v t 57jkUn RBpKCN۪??Np Vu[մVyi'B$t@ au=8tOTevxp1ד"Rqg&? !W 6Ky ]Lꬮt^ U <=k Љx 50$HYaQ!t4- k}c r];oOoo! ]DTxJgAd3K+w;3S߷ "0pSrRJq!~8ū-h9M\傭%j<+ޖ1KQv6WJ],x1q0e/nP)w(ol'uNftaFӓ Fu{ttQO7r/j 83ozeUQ*eq{,.AD JCۃ7-n7ヶ_ItIR ycųDoxe}w\iWBԚlhF(Ҫ&p`WO!2"ݻmK%cD-O}CjwLJ ,U[c( ޮ!7=ɹn/2*I^oݬb>RLpYr\M _ɖU5#6~ފ_4-2>k!QLCM3=; ^D& ItO`OzÃ֕XJ@񚱜giz)C(zϲ=->FD߆Hqͪ؄ ;/b\g~q 'VU&7(X/!0?kKY>㠞v`EIؒgo mVG'M3&HS ݖ@ӥ,LqծueK&]zkۑ!ZpKS'*x}b T5FIy (C",YuQH`K=sQчI.&˄4G%UϭGn߳rLpwIs `.3L y/H&9~ƭW˯-:3Ebd7NX,5њ+Vg8~I5th&AK1@ΐQP7h>2 FQ[DZ4S?po‘"Mm ۰Nߥ94A9$X_OwƇKQr(浪.IP"*ex]Vw|F!UjFcdmSpݎ<5wbaU0ZgN_ɧIYC֯74_w?._cvB c櫀x! Ci+uUVdp04Ed}r!M$B:6Ќ)8;[P #.=VIExIX)^c]48.Qr@5uO9 #%Xcgo1C@J>+-|"&w{92ɪny ?1-l>Bgj3)Q.[@8aIgJRS.:ԨKvn\j8ydQz,9J0C7G`$.vzc*VN_ sa3°=(fV gzG 0l+/\rW`?V1Ӡ'MTH637wK?=26]v.`mQn~'*q5Oa qu₦ă+]Zç2tןt?: KiqzX9. ^ `3G#%cC[||b3[?5Rh΋HW0\@骼0Y^?_[O;V~n/$W& `e'jf\N VWg]3 'ȬOIǪSN?495f5na6H{A'g syV\e{K2ckެ㔑.ԽSUZ q|tqq}XG6PԼ)"+EtO;YqѱJ~:U@~zN>MMҰk]1&c|-THj9mj;&:rp=ƨrc͹'Is|Lj*qqCj[0=*R?l.P#H:jAS:xڅ,Y/C{ M YcE)dݻHL&jyz]ƪ ގDttKP}ܡ2TKσrN8;>lmP,vJ~c5nhU-q$pt˲6;aPjL+xjq?ljd:v&#)TRC_|i-n3XёRD+\5 /Mk-%z}|bqۮ;&Mdrfނp2]J+OĄdNkԂ\PMzu89((fE<_5XcT36D+>9\AOmmY FCΎ/r; 0ͱ`Y1bRV}wiqf7?OO27n RX.zlڮC6э[>,(Ap aZ$&*@' 4vitn٠ly^ԻƬy&CEBCQZE#|ZIqrQ)C' L'+~=u 㗅 TtD`uuNNmonUə'v_gŕl3!NƤu~ĖpBo@fOn[eQ70zֆ^Ά]PTjM"вpl>>ɔaޥ70Ҩ::Q[7ndbAռIGг 'Kޣ_yfBF΄~9 3^Ky^e/3)`R "N*gֻC`_J ⏲Y!hNY[s7 ps*Ķ޸\]P%)mjL-$9P-dL@5S/v(Q˽ CbAt|0K# lo_MȴaC)^j^EN/i+}|?[p=~AMBtnnн~_\(}WU7],>6HHBGq+dUHtBVwv8dun/Lg0)nWhaU-q4Xe>nϢ FbMu=;]*F,vw[-ёl |4z$>yl):~]y8Lו6jF45lpN?o,(E׺fz 񑭨->Zؐ.Yg|ʔ9*AHddn4qlzꬭyÛ=lt#iKD &>YcwOtK8ۗ\%8f> a\*nxO<8kc=IzFN wہdغ l+3\8U o46>90}; mH}o5x ̧V&3T 4nu 5cx%ٙ . UdMPBV:;L7D-1c1uz ubl8G̻'TԴjN`xwߥPI 2TGf,[zN:OÑ ]cڗ뒎2CC,gcMX+ɀjy MhJ&h%J/tm^P&F'ug\'*WB'7{&žLwKq:]G,(e- 8>x6!}Mr Y"^zbaAtSKt61 Ȝ-tk\V;)W?ˉ%mr%0!Їޛ=>5e(d ډY g*)VFzUiVCam/FnF_w%ksm{jQA"i409Bee.Fj{u]>ıjc(Xh/JyD:2g;gߊuƒQrb@o m%'C\4 N?O7mn];܂DryeD靿Zŋ`rlFM4c'혂_-ˡC ż\G]0r!Wq[}8 2ENyªDVws44dʀF d&>" r|O}[·% S{-g$2%_K '?,1X,q!A٭,5 _Cx)c m-8 VqTX^q7NoId#, us焬Z{н0Kz5Qo|TI[F?7v{l#z(٬hhǂ J%;vvi#Tc`ɽEj<3"7V|pU+,=sQ} g-QNgtYA~Qr5a!0Wbe3~C2VoܮpJML> gKϡ2ݮGR1~)\pTfExA8aoTp\S|3U&Kuل+h>ɭ$XP=-W)mx*_+E7LpA԰/ی`kbdJ0M㢠9+QªJ* eVZB@B\@SDvl2! cu {*g`Q wds >\IǗ㯚|^뀮'At/-"1l}?pm#=ȮBtA*݋#϶6wj>a=QѬgPԢH`m㣑Գ=H'e?#aG&Y_Ϸ'藪4#VnxJ!V 6")6옭fĿsUU@l6pE\IH/,Fb nh?_cٸEbY7K5o@BodN! T^2?ٚJjeVT|KP]7w`*Vy)']7lYְx!bʠ=OI ҕg螇S xU֬bIk, ]Y"+ 9m ZU߸&@Lb2KЬ&c ԙ).эس\Y֝Xl:} fyvIެTfi=8{1Ӑ3[>|#H*:9aQү* Gn).|ֺ۶q D_u,BsY5;TTLsR\}~f{НJ- dړ%( 6JM]eڪR+սi0} h捄\n<49knx&8CN^cXAјb{kG`NRUh:BTϧ I7a^3Q< gYEE{wRcj "c${5~w[u8g)71p|xR}[Nu ==U_XAAI=hpTgN#;F3 N$RYi*vu>pQ*A"/+5s%bmKԾ*[{y`'@"Cx`jƗ_ДQp֮(yZ^ aȫZ?@uA{2 ~rª՝bXQwcw(̞ gTnx$Z" Ң Öriȝ$ + IB$ d1, ʠV:1Y\@WF[$cnbATA;C*MP c6(̭`S k;Ro0Ygϲ"1xOb` [1/մ$*0hWkRoE?Nyqd*ӐG %zZɴq42 .I:쏭}՟⿜QvA~$1ij?ڎE.vۤt2;'Bx[sc1($dD !B zИJ5ߔ\k0wP >7Fm̼ubxaE,qZ"f E aZ;Ġd#~ZQJTFt#3EӀŋ"$B~[H#k!UTuQVM5AMN @?blGWR߱@x@ } X4vitO]kV>*hbϏ<چ^LB,e*znYGsX`"ݭҥ{ D"&s*r36o+`?pL\棁zI<C헍8wqߨO0F Nzܚ7Lah)j틝M˨6­}URi 6pJaSᷖk4s"'':V!nV͆p,5G>N|S]>ޠ)N߱m0?ix>Xt nŸ+3"]Śyn;<5s?}*؋3m7Gr?&˹H6skϬo} w YZa2FZ0ObUjii+km&[kJYb3|ɉ_cpKH]Sj(etBnS8-R8{.k=3#vF TBJ:T<V)DFDzO Zx@ KtU 8w =Dk_5gYE"_I_eK. ζѦ*NpkF4/;2=_v9ܩfמ 2ʶҺ 3(%]?l>,c+e)]7|dۧf/Adc!<[\HeW'*NH `~^ن6? K(zw22pbs.0jsU[y"Zhh9#5ʯW*/DDIF×Ssxvtj\K̀:zp&(Q?:W A_xh[c ^*{#ʜfSq@,T!0_hd=] }ZˎbPOUrzźh$V2c \ǙsWRj"wHɢ|dй!2/+:`5P&'&8ρbq4׌P$j:30CvGx}D[hoKP&G>֥m*ٟ2tvsWLt ?b]\͡6}[eʙ =B4%;^<ӀAOў9IHpՊ5`D_G? JL 4nX3 C5Hyg_SD\.ݺƠnN(V`VqBђ?5,4jÇMrJ#RLh| \hiK]^f* :MǁZ@b_'kA1,j|ߐ!cFӤwO?SPhfeGjU3Zs˹B r@1%- @@M09+0!4L3lG1^lj#'FpƢX9z(\Q ؍#$u3w]ݫ=O޽Ab;+E֌L0[}kH9ÖIllxrJtNZX1 D*P}AYԏᕤ>5bTTҡTNS[EMfEɢo7E2`J8*p3W>Z a6dHp\|ߪlJ8GVIbGua"9ҍ/Zԅf13K F\TX+V+%@{KpWo|0a=^EzA0V{E 8-t4(iO9ǻ})X\T+҅< Z}=CNufAU"Nkj]с2lՏiT<ȎzEV]6 Q.rgs;>!7::  $B ?xX(K^]Ho&LyƶG+bU/ua蛒2ԩK.5S:%W)7̿DU`vNm xQǧNSkI $? 4kvɠ]TrOq}uW֬|t8coeQ"INO~751(iD&hVG'ȯu( ntN6{l.'Cb"a]av]D, .sfG-E&:(p3ga=$S.4%s .FyCr\ _\^IӇx7B{Pǵ;:(eVݷ%Y1kC,EU %Ddo8py/X?wKOf觭!׮9hHKQu3̥ORDS}\kĮ&Z3~"8 6}a%e.E/pxÞA:q, -Q!Sk5yWX :PxY-1Ik%$JU`)AA eD8+iU_;F/7zkw0,d&H2FB2PڡHzt4a-a{"m^K} ˼ x$Tʳ(w2АzQnG=++PgxLN|,oFm&_ 'hP4L;vX!C~LkȪϘMt/|$qAl{i!+KK8-ALNUDVʷY`\=i ._-IcjbLW'9azu-bѠH"`y?-=bIIBbgy9e@M/6yg:o54ýQh~=j.r+J()8G_FXkYUN(dgLi̤9!m` oRE8tAL>`;<Ԋ0 6{^`'(ҹn~1 GӵZPvG\}Yp$aSxМO`qs Қum*e̡BxKfs!A: 8z}Կ0@2n"CH e` hKM}t7}c>D<' )_tmeRUH8,PwWT)VjRzÌenͺXl&=7T6=luKJ`Tּ%ڷ2=Zk8Jxl5T3f MT+7WGMV O֧.  gj"r@ `G ß1x y5-) lי;Udǘ(+'ǛくPT ']׈M,\u%5B0b>&⌕)ɣbi.95 "n+G6LO1a myy]3ZG9y绪$274,UcWlr;+F.c:eKp n=g6 tG6vkIAJ$&wk7;+s=6 3J)mZϓDuhCBݨR(S&% 5񌐁4C ]kc[Ti9ƨvyF8"艷M#aHoOctUhB_/I2YI"{r喼Rj^DlN5B=Qv_ Qᰬ]Ӵ QF5y]oYojf.+ڝZ5tY]S;!J9"|۵{ѧjc x2_C 쿂7;Y$ZpjVƣPf+}s;Mޕ6Ր2$׹S_H kxl?_Y^6"ڏY8F,'{d**ƢVvM!MeiD$ |uLDSeNBV8O6|tنf;'A--=-44`3,l \a t/,ߕE76 H18[g8#'zLFys=S3&G;s ]vW9z!7* 3kƗf[޵niD8 c«W-ꕣvˉfp-e9`6cE#(V'c:._+qt/cRc6v4x:S+Ӄ=:KQ xՊuI_9+Hv {WU_sCelP ~L:st43?\6CҩTG[lo7VQxT iXC!,Pα6gሞ@):,{t2)9{9mKj7`t}xpI!~ar $g~X^|f=f!h7.jAl&dgo5sS3n,,o9UA,U`i] 0wYHY;TM*8Vʈ#!d+Z 8=hLy_KSu]v_Z+[asy,>yHccRH Xxiß]uf?V[5i \C)&zt#W$ E2tqb#0VGJk 7O\ОS ܻh迊kVDj I.PU{,*C̼'rd=tS6YbcBsiJK9@:Oх߭13) { ؠ(>\J}XUa}0El3I-B"0?(Žs *wmvcVr$ {Z- b<Q["jGyQ itFk̏^UNSajjyRL _L'|ޑꃵe#UOVBWf75[\.wy~Q\h)B3n 8k"6z Zanjy^g]Dt\0"C!_q#[3[{~z mQZj^9{&6P"v49cyc僜GB(-[ߗJ TDǂ]3%kG$ƙ -I$M&$6u$xu]eEݣ,fa)XAgip&R;Vwp HZ/ձ++6t|{*ҶN!7- @_+kNO):ь 1̲@,!"X71 "<ץW؅b(I^ B* iLV%C4S&/?h2ŗJX_Bjj^oP#I㹛L$?Wsqss^\xU AX$; d:Cj2㊘-m+qgXZɘ6Hla.FӥReɔ{`lLI]`XУ7WG.zyJ}6FsD%M7ށ\ )>|g!Nd>jM0/Ă};}-mڧR@j$s5U>@lmP)9mB4f|u59Pҷ% = dŰ l59 Yc飌{ ؋ݭ|}0Q,N"wGűI-P1Qŏu. 7t1#н s^葰6$W ܶ,WpVԶV2-Q{y݆.yʶ)AgV?*=LFl8_zJ.Ap 5ګi+ͮNWꎲkrz{ǵV>UK&-ކMzd1KPhqU/jG3cOEzˠ&Z@%vo\~ ]^E, c{`pL\.- La 3QYo!݌ =2Ib2t=vTU;z$˕EpE9p@]6 Eg&Pm}yjL@ 뻠C{u#2;hQrC螜սO3tOjt0ń{46%_CrhԋI[A]H9CLpb&qK  `Gqn7YW(*+B_ItZw]v>Mm'~(8bh|Џ6PCCX{Ȍʀ H%~Г/Z*vXqZtD,*xZS9S"rv37s{m嬂i{"UfH!Qw o̱-N:JlOr՗x:Ф@;JG\qJJUyj x.R2,|× GYW!!F>[8jAbCì/Q^;]*]aإ:h*Ž;9\s9W?6PW/QCOug:@cɟ)Tmg (I#%b;{*~_hl0Qe|zg'Y#I2ܥAXi;y6kd܄2WY9D$JY4`:i`Mm]x0 _ʳ+-Ȗ&&]gJjEU"n8½^X.tף8uhGop@@ <@ܲ Ph{-)C4۶xs6`[plf滑Aڙnp54E'-vԥѳ&"HtNu6\y41,hCd%W%Л9P-TB04" V&r3= ~lWMp˱Rn))íbK)`u3%k_D?M p\?;;ϒDuQ41Rd#ExQtA@Bfu`\,\c k #Bť_u $Y*أIc<# ͛4At.e S1Es!6uud\̥~uAա\Ž}5uuFՈ-wPK4 y8P0r3XXPXw*hDUzu?J,Pڠ ua$W#^fln(pl &-1+ᙀTbcEq5O\x{'anG^,":¸3V 6 JS=u<;VMڦ\]sX.-\ՏX.\'enY7*S*,!\Dvf+Ve³OkCf=\cV0RJ:{PvUu螰*.K?]xR3^`qv;?3ktuLڍO'xGƧO3,| hG-0VV"U\IY?dN0!O?+ _4QpV$/2ɰ+r?nOV 4ڋzmIR#әۋmcAPG9Oc#/՜k HAp It0#oh2eK9O`!7"Yuv{M""dgq-00*r{X< r:f8 %t 2@MBU3!|fm][V )#z)bY0SVjc y1,jf6؃ƒ/`vc/F`]G>sZNcU[$=ih[VcD@ 7S-tϽ_I:׿9߬,M@כlFY|^ۓIkFG T{@x|% zM1}~V۞BD2""--3Ìa,&Êyç~(jH0=W5mAs\À]1ڥV ?7ى:T'm{NδUKk98`c缬r7odFUc-hzdN>,>rYQ*xms+_h)r.cw C oǒxڪK̴>qT(Q^uZ!Nzg7e+‰W6XsMc s#ݥԶ,qQMQ9kܰ?7MK+Awa:(+ي@FO4؏oK`Q̍LtfSb"V%U( '۱!K,kUzMo'O[<9BsC0Vpp6$(.z.N 08q;@g_/k YJqMy\?>j~k1iU> EN.a-m|>xZP-g o U&o U;!\ L Y0F[,`TM$#\h kyg`cr-%1*9|GI [Hy"U3i7ꦢ e]}"^v\zIxd*T>2PkM=*M`C`ed@kie_X 64ҝvߖb!:.Ɵ"X?IsV, jއ܈-3x557[DtbdI~Q$"[E I 9vB@}S3.߶ل@M&JH+Cj*3N:5 MM-!lgQOHhM>*&1YbA@4g$!BS0e8JA|b+~htxʦ4H: 0gJ vkY=I/Vx-f-C9+5 ' (A 0I*yrtH\G8}ap5%r<lco)4\WepxE% .EOK@?/%6R@6-z0hR<1*'cIF ,:>(wKB):5׊*kC#ifj LE<(C@=,Y-[ָ4gHXNaSzV@C) ڜ⡢ y٠8hMVD38 -K r&_+27Us*y םY(b{O*mdv=D,@`QB}gz \ql3 5-Z( r*2)A\<ޞJa?o,?fW)>\T-Ф>WVʭTFx~0C4?4UbU~2<=pc9S3lvq$;4?\]No!9|. m $ɸ4jiJ Y+2KhjԬx|4CQOgޖmKH"]_}!{e'ԃ7I>rX "EL%7e/K[/[*Q= ,&Bd(&k)$H4;Jgm!7A-+4oku1f@ū-K 灗ib:LNv(MK̳J|W~il_8YեMls%x-YT|OFݧWj.* RvF3UjtQ43hO+ 7qR!UeypoF>F|8Ncs$=֖D釼,; @HA%ȌZF{B*X$ jWq ,%:GY_ew`L%0x]! LO˳\L&#=7HѴml8P(tgSMf" T(a d5zїF8x}'sFy zklL\W(G] 0)8a ĶP'A "@3 l KNxdL[^ܤx|*u|XČ>k$"Z+gg4+-4}W  W[L `DE>qcOPb\4ZCLX)H6Q ]]YʎYYlie6X[)b9n7?|}8 ^"5OBLb @ːmZO1FukdX;] Zk9?xj$sGG ._.j xˊOܐQ"$:oX"F/k+xԵO<ʽ@DiiRU%K0G&y̩M8PdqCORCh?UQ <*nJщikf93B /R ݸ+^EM6JxT ph9Uk ͽީjHcg Ig R2Ve~P&!x8)8ޛe)m(a΁le=p$_^D5 8TgN!pR甫YZ="Qdt-[fOc1(aaB|;ڳ&#5 j5h{ȺGJǍ_cBvҮ.CH(wU 9!z V ]g+.֎.ܧRoyKX7 mƵV30ͪ NTېu6Fa 1F5Pɑ +k; p3߇'ђ%Ou)%h[j:fU9_K$G/_B@+1|?vr!4X1{@uQ{{q%+fgԋfT @4pIZCb'^-!O-͍,€l߃9=.5/:6d7}mE'@1/K,s?I- gJ%zIM>^Pʀ/Ovf3XT'C!8͹)7E tq>E'1V j EouUspFFŸ(gdgv;\gklbFl*B&]Y_W=DQQ ao~edܹqgn\ۍXz8WHM U ʹ=&zl6~{>b{xKęw$ܸ-RW?*,ȵ4L>ޝӨK+R8^MZS $p^F: ש IPBӁ9F.eYy궉{ߏ~d^'םx.~9k6tVL.ʰMN@yK!w=1rVKjR a\l4U0seq:*UsGNj <)+8>[Q6^ !*[tbƒ֒v7$ڞd \[FA&+eM5nF VoD*t+i1 8{:N%†5: p"OJ>j4W;7pSo.@v"#m  q8ؘv6s; ib7o5Y:ʻ)A&d@ 5~p[kuو BL(&o =5 xSO& h r_:wyɑ/IT<{xrbhܷHh&]U"+Ƕ/g?%[Hű׳8ftzpk66YdFpoqu3rawXZ]SW `.1z pBNe(Rk.1WFd|RMB0S_jZx+s EhfN.y-uy5ы9pY2*qY e3 |YM7>*nEJm»ĵb0qgHpO)nvsHSp!:lAXY,s _c'?BͧUb?O8ӌE=&CNqJNbv je޿~Y D$bB}頬\8 ރ6n\Cc<[9EVve8 P#'a>Fp 06W3* fh'TAC_Kæx鼚2Y``/n7r 1UĢW,4vێBYkjF\4tn:Nv}*9L [t4SZ;qRqm[)d*.!#i:N=" ?WBkzC솪0KGq IjH{^&hh^EfJΦYX5aE{PtWeOZg63(CrRn<{Jr0>m|MGiL]|LWO`ј*A*dN)<83֝FW݀MA*ZڅTᘜ:<.UL' Θk\ Z~Kr\ p7it)ز G]E^:u`iԏ в%ͨΧwtϹJ\.N$(LՄڅA!)NA7WʄB̈7Őf 4tgio[>*˔'CyanQ2e {Ji6Q,Y-Z`Ӄ׽3sj-g]U'qhpbxpw6l!G"WEgG$jq$ˑ]ě0M\4Nj4S#ij+aqD-Qx: kYr yQ+YD1HhDP"FX]pVfa<nj e k}ʢ2 Y2ZUI2]%9Lښb^AF脸(MA@-{>Yj2 Mv,^L~AZ;bL6=e1kFyPZ1u4(];u) ņ//Izp7>@FnAB> ZCOG?S۲"#՛Ujr0.kV 5#5v:Ө+,A.@%rΡ?x\QNHcKr?nn9jf"q~)t3;θ2ʡSݕWE "%CS)sPV`R:|^mfи4w(}b+9ta^yG N,|@+6`"zHts)ſ޵X4kb(P/vl\Yy%?=p ܡ.klk*IYj,s^Q;⬚Au,@5S#Q,5u(5H#UJ (X*dSD#2J HΎ<447}oD$v$X+/g0 P>Uٸs^e\p6 4T!1^a-3z)Q[խmb4Zʵ" 8p+H2#>,E~ΐPy EDy&I~ t␗%DqݤG'PLxO-o>&G1Ym{e0?T#2 w]PҗI>.Zh˚bҋv,U;@ ka0ʧ:{:̱xp}&nn(R#_LwMA|  [E  z/z1m=:=9rwNg>IVoeCvcioY3 %h5W57Ɯ>b~c?Ca~$^cS:y@ʡZ5*c$\lsKdb٭:ʱ`n76jnd+N1k^_DѥH['ة>ǴO.)Qf=[4pO7$(Cj T[Y6E_../[AB҇M9| 8C!Y\={2jnHDV݉QLR%cW1Sg<]D4 Q`o lX9*3ˌcz2T\gC,98l'|D=堊 ļ׉O9ILoegk$-ɁW Tee~*̢CG/40N(N?XOO]phцVl0!8${Ry:$TC_GVC8| Ct^B7tvNcBcd-1Z b}d2r\I;An|a>,jUɢeؕs`9}? MnW[`2!=| 5N81ˇx^ŀngGOv. h1A ^ dqepo }.n@ q*;cW8SUpdcr5(=oʼnqXbqv0y.X}LGV,KN(v`$bD;_>?B~y1m%9*y^ij2cqw&noE&iҪdV/ZYhK\5:G},BbG.*MHgUH箬4rs(r9zSݕfPe/=W ? Us\W.DT$ព=5s EVW9lL>%^2Ww4£ӛ2 c1)j1{}y&C% hi!i+EPhA8fE+0ʒUti.xR?zrj<5ƾ)X')P -$#Zl4f}j(A{eOMMŌKjx#nhhR$N#}%oW(6V0Re6&(3G>+Z.Bva]!_D%T(4M8 $̡5nj| <^̸g+<@a 2|A_b5өGgrC؍k+!… DsCggYz6?L2.˄Dd:P-J%}ÎalғL %?77[.+%n]0V_!&NO(CZbD))։׷4ysw+$GE̺&Izb^d=ka.+ I=RŔKunaf>&݃`>WDvvhL0)1wqBS g?Kk+2*YgX\B4XkL+f( s({1$mf Hqg6~6D&;O|.}Jl;X :-c:cDaa,ٷsMŕ꼢O5nlfz@mHT}o(ҡmgj9|J?&|]XOO7+|+fF~Z֟4.i7h}!1 b!9{C$ |%( JڏʈKYS8U%l-ou;%^RJ U]OS+Ro% Aۂp{tpqH d0%7erdj|Vq!7Jdh3 zat~ٿs."BTX7)Ņ+ݮх~EʱzbN*d(sQ/a"V::HR8w5x4jqzu{/I5">t`` kS(!BGQ!M ltROWD!L\|wSrŕϙ=,L_ⱊ<]HyUNa+nvܲmGK5 =:fK^gwY{&T$Ƅ"#=0ELjqZK`I:䝠6)@ =bCۨQUwD~jmv2%!Mn VPL0vђoe;֩;ςS2gR[q}SZ% V]_k#4oȸ+H؃v>lCu_b ua4JI,9gGV#}go򛍭?]j>sn)ɆaE=4Ǵ7R֧޲6r 1OKF.b( xKIQH*z<2<$_}ǹ3?$RLƊw{Z? ATR)= ˃?`˕jz ]^y,[7DszWVO)lBHG$}Lᔏ+z 3/4KkԱB{'tpҿkk46c`5eu'N]! oT$5 _| $2 AUi86UNHwEf0II&h<:ɵsWbq)7qs iEk.'Ut"x$ibi0DYC%x6?ץ}! 2cǴ֝?8dT3yI .\и&q'6 r3P;s|0``` Q'p16ˆ#4YsbK_R,F|M$3/.= O7X-ߟηS-;^gOk9̈x[mT84t &J-tQ-7Ki>72.=67 Wtf.Y"S6Y1x3)ǥ!sE'rȿ;ut(I ;TiT8?N]F]+~ωyr\" y0,f%S n` F*2% ,oqo6N0u^|נ]3r7'spF[V@ĞگOqz$?Ca\QhA[uL =yc۳  J3 qū[r6sL6[02WW Z=sX{:9șp;vj[֋k2Çm>P\YM}oey]"WDOvZ_.zF,G0T*}zVT"hF#Wr[D^Z9 )_cd4osbln>}p%jESML *6b!QffN K3P@^)U?[ďW,|W5vaWYUgD`({(2V^(ύz_"YR8^AKXJ)SDmz lk£1e;ҍ?=OP,lDk]/Mmc_Q?n61IN12_~\ӿm]:jA٢~x^t,m<>sl)}%QӽqVR^d*_5m2o MTiNjAI+SxOg7h4'O*>L&Pw"ϡNxu 2dozȭ]ciPzX.R(n(uωDVw!LɗӉ{nmi4zL(u4_VQ(^.56'5lG17 &xK7Xyf%ȐOg+ж-pb 6;% c,Am{+&{Rpc6 o T<=ߢ>扦O aVү\!Tɱ6:yȧ"^HѪvf b2Z&6`X`:5{|=@_ I.&BF";ܸ'Ǫ䑯D$m6։;C};"5B^BC"/^giXcX`L2m[l&*${>WE[}mU:LW#+n:BO%i$et IfAH[AR03pES(|BJL"zRW$  o(X"R>ٍ3W n}v|nlY2#A޵n7$EܹR%ra+0r`P&*,sFGQaLSXBD29?,bG:=x*tFc(ٺ]~{7t3cLF#81]鉎OWC(4 q@vNPYJS{b\\1ɝR"`ܫf&RHb0emVW12 XUlM>#QHl-L Go]{&#G/K"m.~fϱo]qa7YS?g0#a/ВmgӇh[QJy;?Q^?`:gJsZϕÐQD 'A.i#ѽvԧ@}Y͡~[hPwtDD'jWnnuwZ$. {-?^:b .g(? _qQI0r]:SMףvӉ3{@)ڰ^$nGeuڂf9o1q]^[m0> >?!cQez٦^k<`6=炨-`m$}0:쿷t>HWc(S*aK{G'U;JJ619<]4`\|)\pvÇ­F}$a N6o&N-r.sZ 0>8< ;@ˍAu!L*;R~/ή?ArI$EDckDn8Tpm~}7 t hp(Lqe'U&wKbL<:T!⮭A/%MMTZ^#|Ko'+p֟06wP!!Eۛj_0z/ ) oߢH|+,#O;X{)f^]zup% /-t-)%7G(,9 û忊hk_|yB <#\R>^;䁾D^B.x# A}FueO§x:W}DYpT&q3?]S sdj!rчPk&lH#9 Q,R z65 =ImEO&Sۘ-$gG@旟u6聘4c,4-,ï- OXLm,*ûw`U~ ux{?&=`<7{G_[j"[edzM) QÓ824_QE7Jf- ud04^ty1YI4pvy:(j5?)0k2{|[tJ]5Kc_..[h583b=q`hPL> oLNoI@nhu ^\(ly"3˫wL7OBMhߴW-46vGE=@eD\f 3wa]WjJrMm}U͓MOZd`yIy7Xe/TYCC&A{R"Y~TѲa3 Hz&=͓V*qZ!T/# <1VAd@۳]{Ȇ@K6vQأC qVlceά.aL"`WFLƿfH8VIj}= vojCo&NcDZ1ej;Pd5$g=L c:*nD3z&zu<۱/. <]'eNBLe-vi}A7AfJ7m5kА*UQ4aX7_o!KfNG%R֏4mG`I`(ܖ3)^%r+W잉oADqbXQuLs *׍qۏ47d0% 8 C>~f }q&EE0M,ˮ_ق҈ܞgK49g'zbyJԜ_kW;#pbeHϗn%ّ9  "k{dto͙D{F}UXM'h>.r_|-b(2md8i9/:oWOoq-WkR.WNkzZjWzrf0M^6Ҵ{Pl+tO[>v9 ;i7V{Jd:u6O6FLKj/> Lw+ig`Tu׻Q`5SӲ l ^͆R^[wMt(KИa5܊djlM6M-LY*Gg[HBZz+rA,zO _FX:ɥ3 ͠ c"9h'!,T#3'>zCɣc qT茺'0:m߻Bb1|徟["HH2kefTL[iiE^UD ּm7-e 23U~1 d~A4Ze ʜNAt݂:e6_LJ^oHg멩Z߂ 7o>qBKh_qŅMxxʠԱ+hO_@pUI6o'R aZO Ge_E,#k:N`}HB']Jf H"XapoI7s_t@G255k~[aG⭎A@ _;+"\YΖs?V'Ƹ9 :~SU5~th=4 ^9%LQ4uMSKȻr;LRULKQ|/Jq bRGŽa{2t<7VX, 4؞x]ic0v |$=lgh;,1yhRtgKL56+GB?$4i}L;.-3.qcS㊠ՃwvEa_yu + ۙ%b6JoKC,7D(OaZ (c߷9}L!T/.!,u4jpϊ60S˺8si{s2% 6T߶}{ u2z ;\|헏3Th`I(xW}X%/Z4eق~b#?dz׵=_WI^` )kyD;nG.M Ū a8;WB xvh]B~ &xuFTtM UVʋ")=k!}:#K%ؠ-[o3rw/8wV˾b[Qir,zEl~8HyxeR9fD_BɨuN@Hbo>,+IߊJPB~]ʉ{$hX2쀹UJ2:H\[*]m3>m+>jD~K+$l!byBj00MϦTug$Rjrl0SsNU2Jp~K\8k %C,~*]+ܶ|y5 dx,y4s4^6<9 Ʋ*癅喀){FܕHoJX~^t> 76zYƸ8 z*ސ)\6\8E~Ro*J} +gyloJ^P+:TE4sCkwnffoP(+oK8ʽ2Y*F'\Bc=I&!a_n:}!3dƃdv<gMTepPlH%"D"5x7bvw\Jx/5j@:N|UbN!(hY8$ ԙY5[07;r{]v(ԅ9.YneB+2Ta ҉'lZD@I}\w1#e۰ECγR\%g}ɸ(jJTURZ*ӥgN[Fk樴8$*Kjk9e)Ob|+bT H_Ȋr +/-y_? {7b*ÌV" JlkrRkiF+'E8kW1>j$d\MP=@E6硶wEy6 .6z4Hkԉ#Ao^9J^ض9IN$ Ǻ6<.~Grz>+l6f#z{>^ymٞ1P@6 ܀|N5<)D3ל=xXGJ ෋4FX,paQ<)3h?wϟ A.N!CMfAvZxbJ+VMk-)b8걑O'=?ʋ"m44vsє@-s,yN?~6r6= )Nx-Y+F3:sQQ3b{7: O>A8R{hX_qD uAG]^ڜ Ze(>iDs5G{a(w|X+) e%ڈS-GWƦu꼏$19~"C1JzVyVhDK6u1J|Vb]8k &)p#_-2?@~+H6p{52d\ĩӉvh׍jo|GZ֥u_NIr\Eҳb!n.z1r ~ ,aZPj;,9;8Q|?J%jk,ꐷ+5t,܅PrJw9Bܹ7v Qxk6"': GPtnG>ΛWu.zBD6bkC6fOI`ZvoT> Xnc=I4V{t'/7y)tk0k,gt :ÿE]!JXH?겜6V*okŷ/}I-D SļcpchJja0>My~QpbI]{+9Nz|ڬ)[K\HwQOCy]f ɪ0X>9CBU(& L{$C Ox%G`VY;7s+?dtitJu",:3}[qu=so^mC*^Owl. _je"H%QM a@K;9+a;@OLCx3klKiLA l CG=4=svikʸBgzf3]Aigh!8wtȲ1b<AI8LUmq_ Z (:Lڱ|#9Ѝ2X9NUE*1Oy*$f}i]ð{,s"3H՞P>W Q nwaeCf gQb,c܄1Ic#΀$tFF DP箔l<_K^[fpD̬;~sm{zP޻ρpRxij:&۞"ꢟ, >%Cv5Vs^qʨ=$ }G5DSfBNj9\RVgKz(y Y`F8GЕ|㝛1> q0 .I>M1޸㚣4جFJDk'ݑ6NkQʚQg<>)3Y&T5L~GY+ |&cuLQ9v`҈2_Ӈ ([if쁔_)~ܨℵ֊}=}.^ϳ_ށ ۞N]Fa!@76HN.LwtgHuWdmr'w;k/`' ?[Q<(eR4]9nkG6 !4U}w"t<~\ .*p*a4-lݼ9b1xŭ6-`Bz&%czgčlJ t͖Ngt8b鹨}ńVH_,frM: oS==hV:23^h9tіvfCMx^p6]\xFjzܤv \]DGkVRWhVY6 scan޲#ŐӦn̽Żj gVF=eGfi@eɏ>&3֬1cTZv9P6HjHΈ.>+9R$0 ;6-T.-< H$J}䷒y>XVE ?40cZEkVed!,/$.4{)+Dbng $o_w)ӱҰK!cfD"!JC 'HVcIyj.lVH+0v t @"„WY,]1moZf?'c@Fc<({ sE۝S}xaFf 9d0U!Lr)]A_ u ӄ:?u Mپ_FlUn3(To#MB{e|"v¯IçÒ\sé{:x%bޚTYfG/Rɾu_>kO1ekU?l~?x9'>d̚\0,.4 a2%) 1{Ot̍ns0Yq0 Kw{NEq W(CjK`4tlВ>? tO<> ,ַ%Ͽ+gxA p}h7% n8)C0Mml}&yʋFBݩȾ' w|c)F )P0 föGTQ"K>JeKǒq(7"֦fbu2Tu;WdvLAcfrA5Q%+mQo1EwBhiBTJDR4A?]a-AQP?ob=TqzRq=GhQʖE&ח^@ ɥ*%h!(d_)@8`ǞsqE0_-BPs ƌrxD.1|JY{V '7-"YZ4Ɛ@BeѮD9_ە6?%з"ls.GIE1bPv ɦN5 U_1zz{$)X \GHq:y7 p1/$ѳP~OK,SV|Q9DrSW}̸fF!Zz ~9[[StSE/b'`=m~`Bv^;>0Yaw[4(}bh >,+~YKqa3ceD$o#_=R(`e8a u"?mIi%O)>8V]@I{'`=9/Z6ȶ\+t  YV02|]sb;XS\ MG7)^4AIIN.E,QߔJ[y0SGg_n .`2$@q+hK!UAN҈q5N w"< v1fE32h)Ll$ yF"v{Ynbg (~*u#3 ~ߩ]nqe ?KmfKՆ StjHiwtS\Σ9tc;l2 vCxF7sǒ&L@{o\ƥKCC25f&uoFY&c*ZdЃ(L}UrhXRXeHVWEfʿAFmpH&g3_-v2-*/` EPd̕3{vЋ$bIWd eNf7ִ2no)[4o02(p2B+$Sw C?f*67qQs`A^UAfbmKq%IkzR9s5`CG B Nrضqpdr(Jl )@q [& I1!TJ8O;w E 漲n'ϾU-dtKy6]b%X8_"=Q ZڽJa0xYS ga4 J3q%#,sʏs>%5UᛁW?fFx4&LV/hI ;.2 Aw4bŃGsNHIQWڞ5Xnbv9RGQi A7/պyn2 ESͫ‚,p_-_h5(\L*ӊ[)?u@$2__̂|KQ2p<v 1/$ؿV3y>iqPf{ySVwW<;IWs*00bdu|^"Z;u_L|C4 [3F9,0/Jǵx;&}.oǥ\O&tmz#}éx*c-5t^FomP:0\SS||Y,dq"RBgR_ao(FSQ͎'by?XOS5N>;é}&$ r+ʨ~&iA1pXVjjGepfdKnDN+ 4- s +i kaN]Vέ4R$R4Sg6Q#z"9zw12WI_kaT$4[U*sķʇͤ-yx Gko ^`\myԩpa`f-nPֈ6uZ^ͽz_O&講Y# UԒn+4|_e7}75kb:Q&F.! d$HณW _pS96($e Ep[~WG קǿEAa؄gl zQf2ZFhd [<Wk#G7<ډN>96ޠ41$C E^;E(XVGtZHA;#>ݿ"YwEXB*ylGnچY&lC!H з'$ݢ1D e|xۭ#%+*I;qV`'^ʻVwǝt(`t1}E3S}4,zwD/{޻mn1\#j` z_mטzԨo7:~W97vU֕¤r?!U:om}㊔7INĹ_`k smP:B]h2X5ė9.x21fB? 'tTr0\-A)}K6~YSDA)KeTZ@ʠmuݹ,L+۪na*D*?C\gP7Lďok:]f|%K7rȵrG2^Y t,Oݘ&=ZfO pMϹL/[_ƴ̉**־D@Ś-EӽL2AH>}H)r`욍e2V*sC-mpn`IX1popff1MT}L$?be]?fs) 2Esq9|(!b )k"Fhtݎ|'e 9 dݽ/e{˙l8Ow8T&d'8D5=YNrʷlPE´/I}E#8u7 {BM25WnqH)]V^x+7_Cxavz+Z%BqA=4xy5d9nFSBPxN#EDFo zȑz;̘ٗs/-SJjE>aQ쿮W=qUybmaWraϞuDdb,KZ2ۄ9WВ   h~E[cSQhMX  @IA-ʽKfk˰l{BD{FT1׭? Z1vhk@ FS"Dj;mGEQ(K%:4O2o0(gIe7$8{eܦ*#^xXPRQh*FoSS_uMaR95 ;|EJȇ(:g4vs4 dӦyGAf&9e|ՍkfYB*uAݯ@VVUGLČpT)ٖ/g2Y>] vaC`EC@1#?󆵌k 7kZXzXpe5^֔1$KJ$5g%@w<l ʂ1-z6<#Ñ%."(Y:VU TtϕB)ބ Tm!Hꏩ˚k꒗G4/5-Co‰э y%%7Ӄ?#X)c_ PKPJkKK}#Dk.Eh]1lݿ.HfM9x6hx6_q˱ȘS~#_c!pY{^N 4^w('V!̦HDzi/y *sPX*z)+oq{VL]<=jK/ʓVh GQFZ!Ȧ-LD7=]Y$9CȽ9If 5S}W{%7Pf՘7e8@/筿92pSWr"zӀ8d~D=R^H4ur>8p'ss]|pw؝0xܽ QfAM@i6N`pr:5oa+7q:澍=">vR`JMa֚4 ^$ 0W@4y+os'T&'و]n*IҪ{:\ڠ_i Bu^FeBLhHxcieT ` !N}Ø 7"U@dgS*%9$J&=ht$x}UfiA1-z8c, "$$UA;W ^R:S[Z?L Rj1d`Zat6Kfv ֈRjfFճs:'C F\/[?̷2-PX_l6SDƀI|#;^8,o B_%#U.'ڎ_(wиzS!l sUA;Vx:g&Y"epsS$R$cN_]:UTѱ4eLEˌQx el+]r5hѩ ?!.8ɾL!G z0d^E9Y/d/*]ƾ@ Gz8VZlfE A|_R 'WmI2e:߶+9gH­#doe+<#!|T^UG=lP8鿧r/2v[¡r +m)g6QY/EUx3Uo' O@p=Z0r|Cزݖ}~2s^F $]nڀRS)6)| ^RB)&:eR(Ģ6pd׃DwYe7O܀wd@_Z+?"8}%ɽ>3vEs MQ ggZ,GYdWK.JdZ5+v[|A{#BpiݑYXm96xr5nm5I0Ue؛H6;A=BU-] u%ŗ;h^)zp/ǂH'5W{R]UuH@-R0o*GI']jl7V@^ڹؑզc >#Xăx+W+\ZGՊ7Wb¡X-! zs C V3A2N|`~XV7sB1 AZJb6Sm:2'mC( "PcdgH2ؖ}O!q1G&nkg`mf\JzgvƠ{Sts!;!_Qp0 Ic#;'RaOWVۡ:R!i*aTs ]SNU:ޜS&ƀk0e.lWS1@`1=Sw^g})>*lcq'*䛩 A{ܷ '4L|Leӗ|rf%2LNA BeF-z] z368>)=yޝQ@AN(nm9)$574>φWEJădlIߝ\B`&dki[PY:E@4蛻v &h\-k'LnDUvu;JW ,dWUj!fl.*GZ5LGQ]Kg67"UЩ\G$p襨ssYʝ=U6r*79m}O#RqzfM AԳ/mRm٥S{=D`pP{!֜lmH_4qڻ 5t?Z]͆G9e.V2dn4vT$fSꂣd۩ j`/ c}ƛM4cmmG:#>DN LiY[@genk`P*fqL8`?碴Y]DlȾnxsVW/+R(D ȷWiʧ̬2њfF%LVj{ T)xr o *[Ȇ7-!~ 7m .֧@wjnAS|NwAt y^0Ȁe%D/c|M9ҙ*ҍ -hעZo@0r?:>Ǩѧ#Tr4 D4iv0î&/1oBCy 飌?jd-a<QGI呙'V!q?0*n2:h88-agTp%ҐʰdAS8ers4+1hnRA5]mT(){f2]}&} Sl;e cY{,=OH8cn8L5 ybsH8Yw1<#TX Jº|W`` Se!AU9 $L3d),B^$Pw*?+jIrdϠ$ru[ 21TݱS< O+c kvW)k4 !ŕB'\^IRM9EwЃ;JSN + ##GKMtKV UI!? ESH,غ GjMI!#yyh4ЦЇϲm+]ə7 ff}osA+;m Xru5gy,YL8 `E X#i>v]+ S_ o~CTZa{)혠m^XG!r:w_#g_K~<]]܅{y,y~մSPV 04Wf0Ir.سܧ,k͸Lwt/Bqu9;sKppd5_#adf8F~ܔe'8h&3w]ƇubcjL BlWu?s;6yh 7v(6B|*lzJɖ+.AEx"{ 'C"-:r #((P$4jm+3,rB+\FhE QCNu0 $ZM28>A;<nhC'8u'R+'T"g*o~S"6_M٭Jt-QNتvB#&13bHa֖!,;ZcIt Xko% ^pP:,'=Քх@]ߖ/I:#Lae@$P;EuՁ C8gcz9{\c<$F ؖHUcp#Tk9Zyؾֵ(SŬrY\ !rRXYb;:Fi=ĜJ3|ÇF"\EC'`:=yLNV^=weJ]mOuC2?ӊmQ^` _f[&UtÈT)d({x%/j69]$ї}r'\*ߪ.M}Axtc~- \MyBa. ǫDXA4hVX>C6jB^\*y8V'q$Bpj^wh)Hj }:SLMdnsxgff{Ԫ ]_aqBvgY* )F8=b*A~8ơF*B#<; !&"<0`֊[U`۶oxd?a9=%e[ەX!>CvڛHz8 \zj ;CJUfNo(5Q,/;+sk[9zT:ixv2FCSZ;OW__λie=^Xvq (]@Hf !kQ>uw9mm$R#hs uMi,rG%@ .ĐJC@&fe!zHH'cnP}6;1ܙFzNQNA׾"C[.h'J{Mӎ(?hq]8EHL(0l)SЯsb< _wwXtƝB`ɋ!d. I^P89JZ:KOh7W1D[҅gfSl M:(_I94"Fà 7rfàtyˆF0-2nyuS9P#1?|Ҩ* 7~/ܓxA<'?/zip y 'sRI. [}qm<Į1R29 g:BPln4 XS 88;i)Jk,`w:G=-bqI|yŽ_1Lܮ _kT5FG1+cUAvMW>}:Y 1(w<TeZp(ZEn cZt.]ch^8娊Sқ3jSrxڸ(0u`:{j2$5.axVqXʤize^+\jb= (oG/'ί X\f{y 94jVߢw韷oB*C  LEa`$h0rɹ sqp V SrYeo6?mvD:*(R6>}mK[r ;G88^30Y+' cE?t}~K\ /wyfxbd)68[}Bbc8_":al 4I XbS:aE '4517D["U#ݜb2}sGPN/[((#l"6+N֎{uPpx=cΰEU (X!ܡ-5.K~jzԜ[8gQV[qVJ`? s i=.ѷkxT_6qX ( !;1eeY k+\(}^-pbU6'ЇOs{|<|*#Y׮q4{iiQv`m:^&!7SGSs16=\0cq _hr /-SUh&D,6˞c2A[!p >D`sWn栫Žrq)'Ǯ$/.iB C\8qB~4P>%Nr켫eہ쵳 3+ ARyٜ³\G׏ҝŴ"StެKHx5g!NN+[rarluZ r``wP0hC wky3eu'Fw~2jn]\TM=;G5N̹;w޹6fpRHҊ܌YV*m-0>1 olt~BIкK&. mϜ=ۏ`DVeZhKNXoF9v 2Tah,tVo[;$! q>n+YT[b(IbUl{wsyy(<:SYJpv:L6;&*ӡˬrB?`CTwdF+ i$) {,݀RdvXrL$lZ7?2Tjlݗ\ߊ&~sp+Xyc5WvC1v(<>1]ׁ2n"x 4 ޞ=;8UCficϚsqQq ɝFRcA @-&I#ps6r e䵕ʑi#ˤ\+ɿ'Z?[#՟:ls%߰϶pHqvv5 @)$ȸ؛`I&\k]FVԽi ɾ5>Xч]9:j ,Oۦā>VZϧ"9ԝOP-F=KW}a2zT-_fYΝ 1Aå锁2ov^7x׸֭k],#xjeK/2F(;uf,6V>4Ҿ:ijcَ/xSРE\gW-!ښNYdmr|OM뻗WMʋpkɜj3W E: ٖ$H n6!UCZ(JvNe 2fu@(2а% Aeqo&Ni !8J.J.Lf ݂kLi~PvfK"?35jp=K?$>ُr[5/i3˄&bRJ-w=Cn'àὧyN1`r4 HH -iJeWWAeBm)+95M a N/oUk5pW9BpLZz>*:i23e;F(#)]&)O_Vz/rFTmٽ7t`j"K,nNLs__"ʉ`r)LS]v#q.pu24[.z(ć~I="ߤ&oI46F7G{@2'͒e 9끖v\げr#b5NG獰sG$\|uFN*|~3*q/}g:g /HH&dm6,^Xf%gRyeߣ,/*zX]- .{PWb^wDAzǦs^X P/f`|Wĉ%[6XĿ97Bj`Cތ @.;J3vz!<ʦrALJ"MH( _xI3mk 9oL[5Zbyԁw<$v 7t,=# ý榝ǡ&P; R%κ.~$=nyՆ djnψir V715zGȀlMȶw_TVɝCtdF^k" Ma]2S·k?=0,2\͙ Eigh~Iվ#6!E5i2qCdWOW/ EGWR97hF!Qa ($ σxɰ+.hMcD7dMDtd09yf)P\u)*A<_}d]?^5@>$h0~ĆԬ(_H6=Iqi?"Ù ~+^MPֵ.hlqB_%r2;@?BX,/asp@ ߝ±%OH/]bL7u|G"bޢxrnUAO2sq\?;`x2]-T_[ :=# %z6!,aV/0ydwd &3iM+_`QΜxlFe<*RިP%5tݒұaq΂wv},6Z͏ym֋]Ss;ymf[;1쮧W1˰fXgI"Z*Y?B,AP퀟Nx:kƦ30-53? &)'[_XNW>ݻN +~e =¯CoR%c>->O4H@LYX*ڤ"4t[+%pQJ 8#7wA]D2Ĝ$ӹeټdE>9W )pa6Pݏ7̕&@l 46.oyعA–e!]#q걠N$[Q6[s "*Ufwa"rK2nXm!s[|=Lfke&fF|"x()q<87Pp-g`;\1w~!W s} 4)!.*S8dD1LaȑB{hUi+`BKB8AZ;'TƊg^YM.;=t`Q4x@Jb_LUSʬusqvO8!z[@ǠPX\jp\NFhdu 2,Se| 4G:xv97paqG&ȞGm`]4)}':lr缟n5Vwer~,1.CٓK J-zɯ;B=ڔk\\0"{"N,t?x;d 59~]XW/26Ёp;5lr #`u/ E&lɞn0a#TeBP`仱Az2DXTOA5q&|G,$k3]hZbܒ:ps0~{6X^e4;iH ^Ԕ䳽/Gmp|Yu0IOJj I^y Ö#-nč6jOR!La'1C$*튛);xL؋<$Yq1 E'^,'%-q O?S8q?/'@|=7/ -#/+^h@T}x1L͘'{B D{rXLu!~tl5L4x>yLZ18EI7W^d.e\}9ɦH {v i8s˅X˝҂^"Ap^r4W^+{w{R#賾 oYśZ{efU JO fRZ['}X~La=$INyFEI|"`f3?-VA)=8 ^d yg:_$l~uK"Xޠ?I=[yWm 'kIIf;qѭTNɵ}h\zhMԾpIXUcwbV! zu|&#DCGDJg@y9X.`&--$I͢) GMmW$ϐ,`Uld:NǴ- ̤WӓIѹ5m=n+!ů1ZHPljLct^41fH.8AM?6WJVj'͡ ~2Ewѥ}*x74Oxk0%!&77RQgB4iև~$(BV[a7yvWֶKi2r:"c:ia31o׎' )UgDK1Fe?x$f9f^k-s!i Šdfr衎UW/L97,yz«Q{ BKI~!2;t\~kQ&^y{5P'NX[8U08UO2'y\ $2lUb:b_y;mJFNe5S T97gQP=9-([,ɋ 8~x3=bSE&\7rycR+Am DsI1C4 1pkbgp򗿌o2[A,BVTZGO f{5ID[է'|Ck-S r!KNr>!fcT@C/=zS ^uMPOxYgVnN7Tt +XQ;qHmxٞ(P ,+-潙{Y%2m*VuZ> 岺i~r}X1qځ w  nRHXҶu5 c  ykZ'[0C|"s¡my}#^M T* QIlttfoquN<vfu:`T$]WBf,R%GM@15m}h92"Ϭ@5vԤʰ:0Eu+YKlٛ;q)^SO6x(?d&U;ꥣ :fdCܫ&Gdu S:~ud $d҂1t!wLx!i>i-PESˈrX0Ñ 'bX1aêȀg J䑢Ԧ&TrZ>ݣ)Sc!,͑m˼Z'68ULϓմN.(}&D#=|ZkvN s 8kzΛI]'>z}MYIZpH^Gs~,.'4=ⴴF~+I+%rF&7{,,)u<_j<Vy(v%G0d-IK-XoEa9(c62f6Ppe{p<^Zy"5Z>$DY 'U3J=V&6/\4z;"CQ]/ $f)O@E0Ėd^7sP!lB*i肬˟ߚ}<OHzQi,7ր ǏזB 4>t%6k)2:ښ:U>uij/ͭ=nImk׭L& נvj5yNyuQ""mvՒksK}O{U"ɧav2"WX{P;;>(kMFa1‡G$=R+qW]F޲"7ZɲRYMA26[# umUmuܓ(/QV0mCSID%cCYTڡ7+l[ %0dgHr't2fFf*4x0z;sW$gws,**n- t5j%vI |*ӝ^J ᎿQ)gt Dco=ux…խ"]~wU"ӸS6"놀j1(Q!ܲQE9Oƥk +Tcܹy?s p'7BaLc\BEnl5K&2 )/1ÕHlxlk~4VwT>ww=Ϗ 8˟z-5jr r ^1Nִ?O,ۘٳ'(xX`#mwhI,/j0QgA??SbRYڤ5W;͢^ڶP^f"0lф&~(,`he_\)"WnQg&h+yi|F<@f:s#7/]_qWr-vC~{pYD1(\h4NN7[wݶ䂇uq{> B\vU{e "N;nKW-'͕ݚ%ZZ6 Q,ϣd:+sit2>pUhW*CV #6E7 6C#mp1ڴ柩o _\wgȴn!<m^]crD%}@|uRxoDl;sZ,֥=*;,uBςR:JWĖ_>bl9'♧@}E.O8=h+pdCNvL'mXن/)mO{5+SIơڕ,yX9!ܱ6DK#2թ,# ΫDBm?0. <g%մKchfY#By[ˎ /j!j5=&M(!^l-T6#T yoO}QUcH ?wsW Deᅲ&fR{"U[lj;9I'_p5D\gr@_-*8eF#_RJٍ n=Fc$'lVVD^{Ҙ)Kއ XH|)@: 9m2d ٵ _Ps5W xS;4'-]V|>6_GegtF]'"i"WT–(P; PT^2_["cļ-QsHCٹ]Sռ82V[N5c5F߁F.9إ_R Tоcsp;5M.%AV4^`E3^ I>+>V Xe0(,Z'z9+ mGr22[6ێF GīqIΥc({~:꾽KQ([F_\L?jƴp:hpsCu[ u}VkiJ,O:W|ً$F.=^yE\(a ҙHLf RpRpO:A[#[V)9Os֢S`N ;a*OU6) 81lƍ ؂nMJĭ_<[wmOz$1btia^i%|?5|$7ú]|VŠ(.8zh@y6l?byF輧JϾ bA;y{{-bonU}j{/l&*'ػ%45,K`[sА>qh(=0_8n|g*H{kxE|A-v]>]o1fXv`R8BGO|p5#JsXWoSEz%Vl<~@E"#fK&K>!*M$ڢ@=ѯ7#0+G'dG:i4棆2@yOInRžpfsVX"Pfy9y῾pLH˒t#i-Q5ӺRx^9;C> T~ü~Ձ^Ppy 3;k0PP/vFJzYƫ"K)$@Daӕ}{W6.ȣ.fo}Y&tHYVUu[ӯ80X>w;LMaY `y8)I-RWP6- Yj7W" @'+r-Cc0;i&A]KnL0Q$ m , mVcU b>}8nqw?I<i:vX~Lo2-qL +[[Rn )vo?o6q ;#n %$D3Xn=X$ `3}wM;)E(6xշK;np @ҺY6 RTPspzWy b" !dC{ /h 'xoԭb3c~T!Ů\ku_/,:?^8~-^3ơj1qHohN|W<Η YF**2Suі|[҈Y5HrWt]YFrbqm"/κsJ&yEVPyEC=>"YMU)2Pgѡ`8џ|ǣtv ݿur[$o=43{GDw·oRBka}'$[A%N9M[Befw,˹}wӮL/͇46$*^14R`˹4D4J(*G5EhIAƏC"ٺt =Trh;Y%o\ܣDtv),CKy @qUGϩFss$ˮE -Che[D6yGHs@}0Sq< y]FH◫Xj,LEV^yVQ^]wW 9 I>-V}rav<"OB}IJch"s+^O! W;5yV2".9K5I97AzC{jOA'pĿz*'&Dk\k>#pIEC}N.p@Dbh.5A5"Y5OF!FrrG u\%ϔlT#g|Lu6YBdX| A%ͺ> ]e +Z`>_cMEζv%ب/Clεx[~?<ĢgUوqU6j5#)^.Bot묐֫,/S8ev%"]oi)E dB.&XG(sLIgT]b&S=#G?s1xJxP@^>_%> "S*{ V)#8mqFg1 _?c|:U2JٰquuIPT`Pqh[3(FeϹ[$ۈKm:v8&!GVv#CX@pƈғ>_/fhԞF虚k{[ΔgS٨Z[Kӫ *k$pO&CkT+u>2$ۉog-%SJRL+eHO;}Aw)'a є4cd۠41Sn\[h6Y3FRqƗUP5! TbL 'b;pfP6IY5<<jORB7l!=vUbX ?Fer fD+c>쿓=*ͅ97핆5w\{b}Cˋu%,J4{NtݛeW FΜ$Ƣjb(Bc"c3 Q{̖=g1,uʛKԠ$гo?ns왃*E{*Li/^h>FPT#'6( U,.!nw4:f&ظvZfذE*8zdjQw*j DનJWU/*<H+,"& cʲگWiZ?ۧ?tQ/q4I')u>=}%K&.JqW|^Y#׸3481 r fU]Qpk \+7Foe:(9; _ [,@Q,I1V?g,c(2amr^Tԥ4x.KNJAYP׽&h0Q>(i_eޥk?|Ƥ~IM~6tc࣊p۶4;K+\Ϊ،1kf{~w/l"N! G/mb~$M8jc=l9uꧫE268-D7$WҔcYI<(8EwKfPNxׯŗG d 7g.KC[sV0]~[Zm:E8rm5e @|ޥ}ૺK[kɵXZ>S[ki5iN`2(n^t+ O쌟 5 %ѿِfZ]q*Ld/ʽWofO}PHu5.:wZ[E|k$?l{N|D+p`? ④Ҧs+y?i?ס$^.0_M}ၨ6U%cIA}QCm܀T6>*O塔O{@ >gpGd)^OOb;m)E P?*ĨV|B&BP-Ky? b8*+x\{fu)5N7w'O!U".uVSgGP؜R@.6 VӔ&YmaY~P=t >ƻMHv`vQ\rQg(K!TY`tAo˪e.fB9;$:eT3OZIAX|t7hu+}bì tZ0ԟ_JX!PhΊs >;G8 8'ETŤ?q,"ar )6t7}9(n?=jh' ?j AZ?'+5u|1e~!@.~︝SϭVR񑖃hT:FCoު/*x/DcY Ƙg OJYXMϴh`(tD%p+6ha `CHB=t=qmgAT,8{ $vءr?_1*݄Xfzf|GIc֬h%N*pA6\(nekM#iDFU*`K:|ExG̾:&_)ܑŠE O=n΀z@h!(u|.w$hv/3~%i<X{miWعUrIL H2iԽk=ә]8T@,wꘊ˜x͌w(Jǵēe xT'coaGoQs4)q~.>p74 =҄8ޢ"ғV¥ `( ͋pz%ō-Zc~,zfG;$O x<={#f#5q|_l/V$&M?À&q%>tK"d?[}rEUv]lε5gFk&EޟŃ&/6=M[X\eY3{i8mCUˆL4W2WeA)!زhG$x4.ѫ"MFv2, 8YwCZuR0}t 6l`;]SUаPt4?9t259*vR˱imA(⢦ +^%Lt@(Hͨ <$*#, f`bNJ \|5c_3ua ^Ȼ,jɍn-;e 1YJ,q5i*$F&22RKW苯Yg6N9+ȅV%.:"sWtȿA3E@l?O rZFAV]a%2pҺE占q>iCϯt=!W[nbaۅo{=/;k gvqrgraI,)XX*j-isKJC&Sy`-K9 #w)k1xjlDT"F$a9%LN&R[TZl()H=p&g\p.[nzLTzUşjhw+۱\ %(Y6 PR6L}o^oAmHJOt6Fč ~^!}ܽ2Soy, %@Õ9א@B&9_ Lrz]̳}]9|ٶG,RL=9o  }by0nxB>$9OwϞ@r{xO]0ty*$ob.F(MeRxc>LC}7?ٓM&Zv *N/9ׇa:Uތ~р~m"B'M)֭u\Lנuj(m"n6-7A4Z wid9JIL lM辶 靘S7@i7$4R4v6%-F2xӆUnX%IZM8IW D(t/τ{E}68./JTU V[oJ7 Xyj !Ke8x59e<5mNiHD&/} -W;jRL+V#j)|dZVj |Mi|7?tbyV3h f_iֺ;UMI76%6B:_=]YPE)VlzS }$6;a gVhuN,5o 1YE@*v|ksd1072Y#ǭBr_b25{^_5|t[i=d\:CtV8fawS"/dSZbycثOH=F'=Wb̳(CZB H5Yj+AtyFl/,tŌrsQFQi; {< !&z̛2!C'$xxx,{5sAK;Ut0<0ląKĶko%y̼W;-~Sdt^>r ˃nԣYo=q/V 7ە-Wk$X䶋4f֭r)oZ ?0I<VBws{+c/xݠ`Qܥ0[ǒty;5̱L#4ʛu }4 KI^Jo#%QF^~F,pn;V]{m:h%ٚ.'a.~ _X\<0()|j93&SJ|nl> 0}=> Zr| ӥa2xv{X#|@5x8'zw`k~dQd_\ +17@`˩FpX@_+md r<灆0r&h; 25TK3K|֙-dL1"Oad\qdc/ބK(Nus! |!UbPX+G>o/$-6!ST6 Sl`w 쬦һ?~lxpB'ޙX35PlֵWהkBf1'27bUF^֗nC̅Vg <8y $Knt5zzk"vKUPN]tQf! TA Bg]At9PKcW;pDHf7|Q26H.ĊI ޅ7P(4bAnJfx1czCkܐp"w*0[a&@ngA<~/B;WC]4k#@v )&8i$M~@鉲vaS˚>Xf-.Uǧ%VO`HN]` 9j$ V:7MUR9xB ~k|\.H3zPB@N+f<5&`hjSP Z9uO{" 愰;-y며54c]ħ- jֲi{/,g쨧Tmn̒]Bb  l^w=6>sgd%8~[(2A倰-5wXz_\lˇ 6b0Ⱥ & 0xs=wۇg6:QyHQ!S!x'qyZҭn`x4RHXZuՐt CQta| gt=cSHVե䆃%"30I nˏyxiٖXԡfW(*kIrS'DhiD(\H['8^oFk@Bt[Z( :1vҩ@=csMȗ^8 ƚ0Z+M݅eOo?0ϷIl d1K]mФk}{֏$93Ք3Fǰ@2 zV;6 :V 'Q1mϻX࠵ =P(×ԑ^ ] FmMj]Eͷ ^Ql[*̭P$z< L{xҦth8ش:-"<-~<-YTDh`PqVtLHt٧s^Bӗ, ;O}}T6B:KR(# 3F<܊jesťaV K.NB&fE3ڃ@A~HU40bC