qemu-s390x-7.1.0-150500.49.27.4<>,8gbp9|,[ /,IBi D8AL`U ܆׫c\7Д`_Ȗ0mT]kmpت&.,8/(1]zFuvo/$bd(jԝ6r( J˞0_M׷_\=ixTA`L?`<d  " [|       (AZ|FF <F( 8 9:3BYFYGYHYIZXZYZZZL[ZP\ZX]Zl^Zb[ c[d\5e\:f\=l\?u\Tv\hw^x^y^Bz____`8Cqemu-s390x7.1.0150500.49.27.4Machine emulator and virtualizer for S/390 architectures QEMU provides full machine emulation and cross architecture usage. It closely integrates with KVM and Xen virtualization, allowing for excellent performance. Many options are available for defining the emulated environment, including traditional devices, direct host device access, and interfaces specific to virtualization. This package provides s390x emulation.gbmourvedre-SUSE Linux Enterprise 15SUSE LLC BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIThttps://www.suse.com/System/Emulators/PChttps://www.qemu.org/linuxppc64lexqpA큤gb!gbgbg,?g,?3f86f9ce414c2c44aa665add7805a9331aa4aaf6f8131bab320d519f85034d75a36f3e68670b951d0c825ab211e1c0f61d795caf23d3b0ebd770ddd841ed38aba56bf188d65895a70ec4eb3c8f3917e3da36e068f33a803ef026fd36758632590abe4146201714107db1cde98be738b9bd47a5eb9e0d30b512b2b44b450fd9f0rootrootrootrootrootrootrootrootrootrootqemu-7.1.0-150500.49.27.4.src.rpmqemu-s390qemu-s390xqemu-s390x(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @libaio.so.1()(64bit)libaio.so.1(LIBAIO_0.1)(64bit)libaio.so.1(LIBAIO_0.4)(64bit)libbpf.so.1()(64bit)libbpf.so.1(LIBBPF_0.0.1)(64bit)libbpf.so.1(LIBBPF_0.0.7)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.30)(64bit)libcapstone.so.4()(64bit)libdaxctl.so.1()(64bit)libdaxctl.so.1(LIBDAXCTL_1)(64bit)libdaxctl.so.1(LIBDAXCTL_4)(64bit)libdaxctl.so.1(LIBDAXCTL_5)(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_4.7.0)(64bit)libgcrypt.so.20()(64bit)libgcrypt.so.20(GCRYPT_1.6)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgmodule-2.0.so.0()(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgobject-2.0.so.0()(64bit)libibverbs.so.1()(64bit)libibverbs.so.1(IBVERBS_1.0)(64bit)libibverbs.so.1(IBVERBS_1.1)(64bit)libjpeg.so.8()(64bit)libjpeg.so.8(LIBJPEG_8.0)(64bit)liblzo2.so.2()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libm.so.6(GLIBC_2.29)(64bit)libnuma.so.1()(64bit)libnuma.so.1(libnuma_1.1)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpixman-1.so.0()(64bit)libpng16.so.16()(64bit)libpng16.so.16(PNG16_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)librdmacm.so.1()(64bit)librdmacm.so.1(RDMACM_1.0)(64bit)libsasl2.so.3()(64bit)libseccomp.so.2()(64bit)libslirp.so.0()(64bit)libslirp.so.0(SLIRP_4.0)(64bit)libslirp.so.0(SLIRP_4.1)(64bit)libslirp.so.0(SLIRP_4.7)(64bit)libsnappy.so.1()(64bit)liburing.so.2()(64bit)liburing.so.2(LIBURING_2.0)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)libvdeplug.so.3()(64bit)libz.so.1()(64bit)libz.so.1(ZLIB_1.2.0)(64bit)libzstd.so.1()(64bit)qemurpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)7.1.03.0.4-14.6.0-14.0-15.2-14.14.3gH[@g @g|fo@f@fJf! @e,eg'd\@dx@doMdm@d @ccU@c&@c1cӼcӼccctck@cc@cY!@cV~@cD @c@c=qc=qc< @c< @c< @c6@c6@c47@c47@c2c*c)@c#b?b?b?b@bbҨ@bҨ@bVbbb@bw@b{@b^@bL/@bL/@bEbBbBbBb=b=b<]@b; b9@b0b%b%b@b@b@b@b@b @aC@aZ@aa@aa*@a*@a*@a*@a*@a@a@a5aLa@awa`2aC1a@a8a8a0a.a(a'@aj@a $@a /`@`@`Q@`ݮ@`ݮ@`@`"@`P@`@` @`@`@`Z`@`@`}p`x*`u`c`Y@`Q@`P`OL@`KW`KW`B@`?z@`8`/@`.V`-@`+`!'`!'`3@````@` @`x@__T_j____^@_@__@_}_ts@_h_`_Z@_Z@_X_N7_FN_D@_>e_;_2@_{__@^z^@^n@^?@^^^U@^U@^^@^1^@^@^^|@^y@^t@^t@^oj@^j$@^Nt^M#@^9\^8 @^0"@^*@^*@^@^@^^g@^]+]]]e@]@]Γ@]X]@]µ]]5@]W]]@]@]@]?]x]rJ@]rJ@]M`@]J@]Ik]H@]9\\F@\Q\Q\t@\ޢ@\ޢ@\@\ڭ\ֹ@\g\@\!\Ɋ@\\e\\Y@\o@\n\f\ac\T4\Q\J@\@n@\=@\@[>@[>@[o[@[[ @[ZnZ@ZZZ@ZZ̧@ZZZZZw@Z@ZX0>X%X lW_@WWv@WWίWW:WQWWWWW@W~W~WWzOWZWZWQq@WN@WN@WF@WEW!@W!@W@Wo@VbVV@V@V@VVuV]VQ@VQ@VMVMV0V&,VVZVZVZU6@U5@U(U@U@UUlI@Ud`@UT@UQ@U@U7@U4@U.RU-@U-@U) U'@U&iU&iU%@U%@UUU@U ]@U T@TTD@TZ@T@dfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdmueller@suse.comdfaggioli@suse.comgiecrilj@stegny.2a.plschwab@suse.dedfaggioli@suse.comdfaggioli@suse.comhpj@urpla.netdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdmueller@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdimstar@opensuse.orgdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comlma@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.commliska@suse.czdmueller@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comlma@suse.comli.zhang@suse.comdfaggioli@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdmueller@suse.comdfaggioli@suse.comguillaume.gardet@opensuse.orgjose.ziviani@suse.comli.zhang@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comdmueller@suse.comjose.ziviani@suse.comjose.ziviani@suse.combrogers@suse.comjose.ziviani@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.commilsav92@outlook.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.commliska@suse.czbrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.comdimstar@opensuse.orgbrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.comohering@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comguillaume.gardet@opensuse.orgbrogers@suse.combrogers@suse.comstefan.bruens@rwth-aachen.debrogers@suse.comlnussel@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.comstefan.bruens@rwth-aachen.delyan@suse.comcgoll@suse.combrogers@suse.combrogers@suse.comtchvatal@suse.combrogers@suse.combrogers@suse.comschwab@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comolaf@aepfle.debrogers@suse.comolaf@aepfle.delma@suse.combrogers@suse.comolaf@aepfle.debrogers@suse.combrogers@suse.comldewey@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comldewey@suse.combrogers@suse.comldewey@suse.commatz@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.comkwalter@suse.combrogers@suse.comlyan@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comjfehlig@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comhenrik.kuhn@origenis.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comjfehlig@suse.combrogers@suse.combrogers@suse.comschwab@suse.debrogers@suse.comschwab@suse.debrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.combrogers@suse.comohering@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.comafaerber@suse.deafaerber@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comagraf@suse.comafaerber@suse.debrogers@suse.comagraf@suse.combrogers@suse.comglin@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comagraf@suse.combrogers@suse.combrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deolaf@aepfle.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.destefan.bruens@rwth-aachen.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.detampakrap@opensuse.orgafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deagraf@suse.comcrrodriguez@opensuse.orgagraf@suse.comjslaby@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deagraf@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.dempluskal@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.de- Fix bsc#1228079 and boo#1231166: * target/i386: Expose IBPB-BRTYPE and SBPB CPUID bits to the guest (bsc#1228079) * [openSUSE][RPM] The qemu translation is not being installed (boo#1231166)- Fix bsc#1229007 (CVE-2024-7409) and bsc#1230834 (CVE-2024-8354): * nbd/server: CVE-2024-7409: Close stray clients at server-stop (bsc#1229007, CVE-2024-7409) * nbd/server: CVE-2024-7409: Drop non-negotiating clients (bsc#1229007, CVE-2024-7409) * nbd/server: CVE-2024-7409: Cap default max-connections to 100 (bsc#1229007, CVE-2024-7409) * nbd/server: Plumb in new args to nbd_client_add() (bsc#1229007, CVE-2024-7409) * nbd: Minor style and typo fixes (bsc#1229007, CVE-2024-7409) * aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED (bsc#1229007, CVE-2024-7409) * hw/usb/hcd-ohci: Fix #1510, #303: pid not IN or OUT (bsc#1230834, CVE-2024-8354)- Fix bsc#1230915, CVE-2024-8612: * softmmu: Support concurrent bounce buffers (bsc#1230915, CVE-2024-8612) * system/physmem: Per-AddressSpace bounce buffering (bsc#1230915, CVE-2024-8612) * system/physmem: Propagate AddressSpace to MapClient helpers (bsc#1230915, CVE-2024-8612) * system/physmem: Replace qemu_mutex_lock() calls with QEMU_LOCK_GUARD (bsc#1230915, CVE-2024-8612)- Properly fix bsc#1230140 (patch also submitted upstream): * [openSUSE] target/ppc: Fix lxvx/stxvx facility check (bsc#1230140)- Fix bsc#1230140 (and bsc#1229814 & bsc#1230008): * target/ppc: Fix lxv/stxv MSR facility check (bsc#1230140, bsc#1229814, bsc#1230008) - Fix a build issue of ipxe with newer binutils: * [openSUSE] roms/ipxe: Backport patches to fix the build with binutils 2.41 - Misc: * [openSUSE] Update hash of the sgabios submodule- Fix bsc#1227322, CVE-2024-4467: * qcow2: Don't open data_file with BDRV_O_NO_IO- Backports and bugfixes: * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019) * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019) * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683) * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683) * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446) * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446) * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446) * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446) * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446) * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446) * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446) * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446) * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446) * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446) * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446) * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446) * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)- Bugs and CVEs fixes: * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328) * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328) * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693) * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544) * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327) * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474) * s390x/ap: Wire up the device request notifier interface (bsc#1205316) * linux-headers: update to v6.5-rc1 (bsc#1205316) * Update linux headers to v6.3rc5 (bsc#1205316) * linux-headers: Update to v6.2-rc8 (bsc#1205316) * linux-headers: Update to v6.1 (bsc#1205316) - Backport of SapphireRapids CPU Models (jsc#PED-8113): * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests * docs: re-generate x86_64 ABI compatibility CSV * target/i386: Add new CPU model GraniteRapids * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES * target/i386: Allow MCDT_NO if host supports * target/i386: Add support for MCDT_NO in CPUID enumeration * target/i386: Adjust feature level according to FEAT_7_1_EDX * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration * target/i386: Add support for AVX-IFMA in CPUID enumeration * target/i386: Add support for AMX-FP16 in CPUID enumeration * target/i386: Add support for CMPCCXADD in CPUID enumeration * target/i386: add support for FB_CLEAR feature * target/i386: add support for FLUSH_L1D feature * i386: Add new CPU model SapphireRapids * target/i386: KVM: allow fast string operations if host supports them * target/i386: add FZRM, FSRS, FSRC * target/i386: add FSRM to TCG - Backport of EPYC-Genoa CPU Model (jsc#PED-7366): * target/i386: Add EPYC-Genoa model to support Zen 4 processor series * target/i386: Add VNMI and automatic IBRS feature bits * target/i386: Add missing feature bits in EPYC-Milan model * target/i386: Add feature bits for CPUID_Fn80000021_EAX * target/i386: Add a couple of feature bits in 8000_0008_EBX * target/i386: Add new EPYC CPU versions with updated cache_info * target/i386: allow versioned CPUs to specify new cache_info- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210: * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638) * virtio-crypto: verify src&dst buffer length for sym request (CVE-2023-3180) * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354) * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec * target/s390x: Fix the "ignored match" case in VSTRS * linux-user/elfload: Enable vxe2 on s390x- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993, bsc#1181740, bsc#1213001 * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301) * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) * 9pfs: prevent opening special files (CVE-2023-2861) * hw/ide/piix: properly initialize the BMIBA register * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) * [openSUSE][OBS] Refine the OBS workflow for 15-SP5- Fix bsc#1211000 - Patches added: * Run fstat asynchronously inside coroutines (bsc#1211000) * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000) * Convert query-named-block-nodes to coroutine (bsc#1211000) * Convert query-block/info_block to coroutine (bsc#1211000) * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000) * block-coroutine-wrapper.py: support also basic return types (bsc#1211000) * [openSUSE][RPM] Backport some spec-file improvements from Factory- Fix bsc#bsc#1211697 * Patches added: smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697) hw/smbios: fix field corruption in type 4 table (bsc#1211697) linux-user: fill out task state in /proc/self/stat test-vmstate: fix bad GTree usage, use-after-free qemu/osdep: Switch position of "extern" and "G_NORETURN"- Switch the packaging workflow to git, like the one we have in place already for Factory. * Patches no longer present as patch files, but applied as commits: Disable-some-tests-that-have-problems-in.patch Make-char-muxer-more-robust-wrt-small-FI.patch Make-installed-scripts-explicitly-python.patch Makefile-fix-build-with-binutils-2.38.patch PPC-KVM-Disable-mmu-notifier-check.patch Raise-soft-address-space-limit-to-hard-l.patch Revert-linux-user-fix-compat-with-glibc-.patch Revert-roms-efirom-tests-uefi-test-tools.patch Revert-tests-qtest-enable-more-vhost-use.patch Update-linux-headers-to-v6.0-rc4.patch accel-abort-if-we-fail-to-load-the-accel.patch ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch bios-tables-test-add-test-for-number-of-.patch bios-tables-test-teach-test-to-use-smbio.patch block-Handle-curl-7.55.0-7.85.0-version-.patch block-io_uring-revert-Use-io_uring_regis.patch configure-Add-Wno-gnu-variable-sized-typ.patch dmg-warn-when-opening-dmg-images-contain.patch dump-Add-architecture-section-and-sectio.patch dump-Refactor-dump_iterate-and-introduce.patch dump-Reintroduce-memory_offset-and-secti.patch dump-Rename-write_elf-_phdr_note-to-prep.patch dump-Rename-write_elf_loads-to-write_elf.patch dump-Reorder-struct-DumpState.patch dump-Replace-opaque-DumpState-pointer-wi.patch dump-Rework-dump_calculate_size-function.patch dump-Rework-filter-area-variables.patch dump-Rework-get_start_block.patch dump-Split-elf-header-functions-into-pre.patch dump-Use-a-buffer-for-ELF-section-data-a.patch dump-Write-ELF-section-headers-right-aft.patch hw-acpi-erst.c-Fix-memory-handling-issue.patch hw-display-qxl-Avoid-buffer-overrun-in-q.patch hw-display-qxl-Document-qxl_phys2virt.patch hw-display-qxl-Have-qxl_log_command-Retu.patch hw-display-qxl-Pass-requested-buffer-siz.patch hw-pvrdma-Protect-against-buggy-or-malic.patch hw-scsi-megasas-check-for-NULL-frame-in-.patch hw-smbios-add-core_count2-to-smbios-tabl.patch hw-smbios-handle-both-file-formats-regar.patch hw-smbios-support-for-type-8-port-connec.patch include-elf.h-add-s390x-note-types.patch increase-x86_64-physical-bits-to-42.patch linux-user-Fake-proc-cpuinfo.patch linux-user-lseek-explicitly-cast-non-set.patch linux-user-remove-conditionals-for-many-.patch linux-user-use-max-as-default-CPU-model-.patch linux-user-use-target_ulong.patch meson-install-ivshmem-client-and-ivshmem.patch meson-remove-pkgversion-from-CONFIG_STAM.patch module-add-Error-arguments-to-module_loa.patch module-removed-unused-function-argument-.patch module-rename-module_load_one-to-module_.patch net-tulip-Restrict-DMA-engine-to-memorie.patch openSUSE-Basetools-Ignore-spurious-GCC-1.patch openSUSE-Makefile-Fix-csum8-to-be-built-.patch openSUSE-Makefile-define-endianess-for-c.patch openSUSE-Makefile-fix-issues-of-build-re.patch openSUSE-add-cross.ini-file-to-handle-aa.patch openSUSE-build-Makefile-fix-issues-of-bu.patch openSUSE-build-Silence-GCC-12-spurious-w.patch openSUSE-build-be-explicit-about-mx86-us.patch openSUSE-build-enable-cross-compilation-.patch openSUSE-pc-q35-Bump-max_cpus-to-1024.patch openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch openSUSE-switch-to-python3-as-needed.patch openSUSE-test-help-compiler-out-by-initi.patch qemu-binfmt-conf-Modify-default-path.patch qemu-bridge-helper-reduce-security-profi.patch roms-Makefile-add-cross-file-to-qboot-me.patch roms-Makefile-pass-a-packaging-timestamp.patch roms-change-cross-compiler-naming-to-be-.patch s390x-Add-KVM-PV-dump-interface.patch s390x-Add-protected-dump-cap.patch s390x-Introduce-PV-query-interface.patch s390x-pci-add-routine-to-get-host-functi.patch s390x-pci-don-t-fence-interpreted-device.patch s390x-pci-enable-adapter-event-notificat.patch s390x-pci-enable-for-load-store-interpre.patch s390x-pci-let-intercept-devices-have-sep.patch s390x-pci-reflect-proper-maxstbl-for-gro.patch s390x-pci-reset-ISM-passthrough-devices-.patch s390x-pci-shrink-DMA-aperture-to-be-boun.patch s390x-pv-Add-dump-support.patch s390x-tod-kvm-don-t-save-restore-the-TOD.patch scsi-generic-check-for-additional-SG_IO-.patch scsi-generic-replace-logical-block-count.patch tests-acpi-allow-changes-for-core_count2.patch tests-acpi-update-tables-for-new-core-co.patch tests-change-error-message-in-test-162.patch tests-qemu-iotests-Triple-timeout-of-i-o.patch ui-vnc-clipboard-fix-integer-underflow-i.patch xen-add-block-resize-support-for-xen-dis.patch xen-ignore-live-parameter-from-xen-save-.patch xen_disk-Add-suse-specific-flush-disable.patch- Fix bsc#1209064 * Patches added: s390x-pci-reset-ISM-passthrough-devices-.patch s390x-pci-shrink-DMA-aperture-to-be-boun.patch- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping linux-user-add-more-compat-ioctl-definit.patch and adding Revert-linux-user-fix-compat-with-glibc-.patch - Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and linux-user-drop-conditionals-for-obsolet.patch were added as downstream patches as they were part of a series, but they never made it upstream, so we don't want them here either * Patches dropped: linux-user-add-more-compat-ioctl-definit.patch linux-user-drop-conditionals-for-obsolet.patch meson-enforce-a-minimum-Linux-kernel-hea.patch * Patches added: Revert-linux-user-fix-compat-with-glibc-.patch- Fixes bsc#1197653, CVE-2022-1050 * Patches added: block-Handle-curl-7.55.0-7.85.0-version-.patch hw-pvrdma-Protect-against-buggy-or-malic.patch- Fixes: jsc#PED-1716 Add S390 features from IBM requirements * Patches added: dump-Add-architecture-section-and-sectio.patch dump-Refactor-dump_iterate-and-introduce.patch dump-Reintroduce-memory_offset-and-secti.patch dump-Rename-write_elf_loads-to-write_elf.patch dump-Rename-write_elf-_phdr_note-to-prep.patch dump-Reorder-struct-DumpState.patch dump-Replace-opaque-DumpState-pointer-wi.patch dump-Rework-dump_calculate_size-function.patch dump-Rework-filter-area-variables.patch dump-Rework-get_start_block.patch dump-Split-elf-header-functions-into-pre.patch dump-Use-a-buffer-for-ELF-section-data-a.patch dump-Write-ELF-section-headers-right-aft.patch include-elf.h-add-s390x-note-types.patch s390x-Add-KVM-PV-dump-interface.patch s390x-Add-protected-dump-cap.patch s390x-Introduce-PV-query-interface.patch s390x-pv-Add-dump-support.patch- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165), bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139 - Improved handling of: bsc#1202282 (jsc#PED-2592) * Patches dropped: pc-q35-Bump-max_cpus-to-1024.patch * Patches added: accel-abort-if-we-fail-to-load-the-accel.patch bios-tables-test-add-test-for-number-of-.patch bios-tables-test-teach-test-to-use-smbio.patch dmg-warn-when-opening-dmg-images-contain.patch hw-acpi-erst.c-Fix-memory-handling-issue.patch hw-display-qxl-Avoid-buffer-overrun-in-q.patch hw-display-qxl-Document-qxl_phys2virt.patch hw-display-qxl-Have-qxl_log_command-Retu.patch hw-display-qxl-Pass-requested-buffer-siz.patch hw-smbios-add-core_count2-to-smbios-tabl.patch hw-smbios-support-for-type-8-port-connec.patch module-add-Error-arguments-to-module_loa.patch module-removed-unused-function-argument-.patch module-rename-module_load_one-to-module_.patch openSUSE-pc-q35-Bump-max_cpus-to-1024.patch s390x-tod-kvm-don-t-save-restore-the-TOD.patch tests-acpi-allow-changes-for-core_count2.patch tests-acpi-update-tables-for-new-core-co.patch ui-vnc-clipboard-fix-integer-underflow-i.patch- Refactor building and installing SeaBIOS docs- Rename submodule patches so that it's clear which ones are backports and which ones are downstream only fixes; - No functional change intended. * Patches dropped: Ignore-spurious-GCC-12-warning.patch roms-sgabios-Fix-csum8-to-be-built-by-ho.patch Makefile-define-endianess-for-cross-buil.patch ipxe-Makefile-fix-issues-of-build-reprod.patch qboot-add-cross.ini-file-to-handle-aarch.patch sgabios-Makefile-fix-issues-of-build-rep.patch Silence-GCC-12-spurious-warnings.patch build-be-explicit-about-mx86-used-note-n.patch enable-cross-compilation-on-ARM.patch stub-out-the-SAN-req-s-in-int13.patch help-compiler-out-by-initializing-array.patch seabios-switch-to-python3-as-needed.patch * Patches added: openSUSE-Basetools-Ignore-spurious-GCC-1.patch openSUSE-Makefile-Fix-csum8-to-be-built-.patch openSUSE-Makefile-define-endianess-for-c.patch openSUSE-Makefile-fix-issues-of-build-re.patch openSUSE-add-cross.ini-file-to-handle-aa.patch openSUSE-build-Makefile-fix-issues-of-bu.patch openSUSE-build-Silence-GCC-12-spurious-w.patch openSUSE-build-be-explicit-about-mx86-us.patch openSUSE-build-enable-cross-compilation-.patch openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch openSUSE-switch-to-python3-as-needed.patch openSUSE-test-help-compiler-out-by-initi.patch- Fixes jsc#PED-1716 * Patches added: configure-Add-Wno-gnu-variable-sized-typ.patch s390x-pci-add-routine-to-get-host-functi.patch s390x-pci-don-t-fence-interpreted-device.patch s390x-pci-enable-adapter-event-notificat.patch s390x-pci-enable-for-load-store-interpre.patch s390x-pci-let-intercept-devices-have-sep.patch s390x-pci-reflect-proper-maxstbl-for-gro.patch Update-linux-headers-to-v6.0-rc4.patch- install binfmt-misc handlers for systemd (bsc#1206838)- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592) * Patches added: pc-q35-Bump-max_cpus-to-1024.patch- install SeaBIOS documentation- Enable KVM support on riscv64- qtests test are not realiable when run inside OBS builders, so let's disable that part of the testsuite for now. There is work ongoing to run it somewhere else (on dedicated hosts) to avoid loosing coverage. (bsc#1204566)- Improve dependency handling (e.g., what's recommended vs. what's required. - Add a subpackage (qemu-headless) that brings in all the packages that are needed for creating VMs with tools like virt-install or VirtManager, run either locally or from a remote host. (bsc#1202166)- Build fails due to exceeding 10 GB disk limit (10430 MB): raise disk space contraint to 12 GB- Fixes bsc#1204082 * Patches added: block-io_uring-revert-Use-io_uring_regis.patch- Due to change in where some documentation files are, if qemu-guest-agent is installed, we need to make sure we update it to our version (bsc#1203995)- The links in the forsplit dirs, in each subpackage, born to deal with package & subpackage splitting, are not really used. In fact, they're "Provides:"-ed by a bunch of subpackages, but there's no "Requires:" for any of them. Let's just get rid of them.- The old qemu-binfmt weappers around the various qemu-$ARCH Linux user emulation binaries (see, e.g., bsc#1186256) are not necessary any longer, and bsc#1143725 can now be considered fixed. * Patches dropped: linux-user-add-binfmt-wrapper-for-argv-0.patch linux-user-binfmt-support-host-binaries.patch- Fix bsc#1204001. Patches are not upstream, and have been picked up and backported from the ML. This is something we usually prefer to avoid, but this is urgent, and the patches looks fine, with high chances for them to be included as they are (and if they're not, we will revisit this, i.e., drop them and re-include the ones that are actually committed) * Patches added: linux-user-add-more-compat-ioctl-definit.patch linux-user-drop-conditionals-for-obsolet.patch linux-user-remove-conditionals-for-many-.patch meson-enforce-a-minimum-Linux-kernel-hea.patch- Improve the output of update_git.sh, by including the list of repos to which we have downstream patches.- Fix: bsc#1202665, CVE-2022-2962 * Patches added: net-tulip-Restrict-DMA-engine-to-memorie.patch- skip tests that don't work under qemu-linux-user emulation- Runs of the test-suite seem much more stable now, in this version of QEMU. (bsc#1203610) We are also fine re-enabling running them in parallel.- Switch QEMU Linux user to emulate the same CPU as the one of the host by default. This is a bit conrtoversial and tricky, when thinking about system emulation/virtualization. But for linux-user, it should be just fine. (bsc#1203684) * Patches added: linux-user-use-max-as-default-CPU-model-.patch- Be less verbose when packaging documentation. In fact, with just a couple of (minor) re-arrangements, we can get rid of having to list all the files all the time - Package /etc/qemu/bridge.conf as '%config(noreplace). Next step will probably be to move it to /usr/etc/qemu (bsc#1201944)- Switch to %autosetup for all products (this required some changes in update_git.sh) - Run check-qtest sequentially, as it's more reliable, when in OBS - Build with libbpf, fdt and capstone support - Drop the patch adding our support document, and deal with that in the spec file directly * Patches dropped: doc-add-our-support-doc-to-the-main-proj.patch- Updated to latest upstream version 7.1 * https://wiki.qemu.org/ChangeLog/7.1 Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * [x86] Support for architectural LBRs on KVM virtual machines * [x86] The libopcode-based disassembler has been removed. Use Capstone instead * [LoongArch] Add initial support for the LoongArch64 architecture. * [ARM] The emulated SMMUv3 now advertises support for SMMUv3.2-BBML2 * [ARM] The xlnx-zynqmp SoC model now implements the 4 TTC timers * [ARM] The versal machine now models the Cortex-R5s in the Real-Time Processing Unit (RPU) subsystem * [ARM] The virt board now supports emulation of the GICv4.0 * [ARM] New emulated CPU types: Cortex-A76, Neoverse-N1 * [HPPA] Fix serial port pass-through from host to guest * [HPPA] Lots of general code improvements and tidy-ups * [RISC-V] RISC-V * [RISC-V] Add support for privileged spec version 1.12.0 * [RISC-V] Use privileged spec version 1.12.0 for virt machine by default * [RISC-V] Allow software access to MIP SEIP * [RISC-V] Add initial support for the Sdtrig extension * [RISC-V] Optimisations and improvements for the vector extension * [VFIO] Experimental support for exposing emulated PCI devices over the new vfio-user protocol (a vfio-user client is not yet available in QEMU, though) * [QMP] The on-cbw-error option for copy-before-write filter, to specify behavior on CBW (copy before write) operation failure. * [QMP] The cbw-timeout option for copy-before-write filter, to specify timeout for CBW operation. * [QMP] New commands query-stats and query-stats-schema to retrieve statistics from various QEMU subsystems (right now only from KVM). * [QMP] The PanicAction can now be configured to report an exit-failure (useful for automated testing) * [Networking] QEMU can be compiled with the system slirp library even when using CFI. This requires libslirp 4.7. * [Migration] Support for zero-copy-send on Linux, which reduces CPU usage on the source host. Note that locked memory is needed to support this * Patches added: Revert-tests-qtest-enable-more-vhost-use.patch meson-remove-pkgversion-from-CONFIG_STAM.patch * Patches dropped: AIO-Reduce-number-of-threads-for-32bit-h.patch Makefile-Don-t-check-pc-bios-as-pre-requ.patch Revert-8dcb404bff6d9147765d7dd3e9c849337.patch Revert-qht-constify-qht_statistics_init.patch XXX-dont-dump-core-on-sigabort.patch acpi_piix4-Fix-migration-from-SLE11-SP2.patch configure-only-populate-roms-if-softmmu.patch configure-remove-pkgversion-from-CONFIG_.patch coroutine-ucontext-use-QEMU_DEFINE_STATI.patch coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch coroutine-win32-use-QEMU_DEFINE_STATIC_C.patch hostmem-default-the-amount-of-prealloc-t.patch hw-usb-hcd-ehci-fix-writeback-order.patch i8254-Fix-migration-from-SLE11-SP2.patch intc-exynos4210_gic-replace-snprintf-wit.patch modules-generates-per-target-modinfo.patch modules-introduces-module_kconfig-direct.patch pc-bios-s390-ccw-net-avoid-warning-about.patch pci-fix-overflow-in-snprintf-string-form.patch qemu-cvs-gettimeofday.patch qemu-cvs-ioctl_debug.patch qemu-cvs-ioctl_nodirection.patch qht-Revert-some-constification-in-qht.c.patch qom-handle-case-of-chardev-spice-module-.patch scsi-lsi53c895a-fix-use-after-free-in-ls.patch scsi-lsi53c895a-really-fix-use-after-fre.patch softmmu-Always-initialize-xlat-in-addres.patch sphinx-change-default-language-to-en.patch test-add-mapping-from-arch-of-i686-to-qe.patch tests-Fix-block-tests-to-be-compatible-w.patch tests-qtest-Move-the-fuzz-tests-to-x86-o.patch usb-Help-compiler-out-to-avoid-a-warning.patch- pcre-devel-static is only needed when building against glib2 < 2.73. After that, glib2 was migrated to pcre2.- Substantial rework of the spec file: * the 'make check' testsuite now runs in the %check section of the main package, not in a subpackage * switched from %setup to %autosetup * rearranged the content in order to minimize the use of %if, %ifarch, etc- Properly fix bsc#1198038, CVE-2022-0216 * Patches added: scsi-lsi53c895a-really-fix-use-after-fre.patch tests-qtest-Move-the-fuzz-tests-to-x86-o.patch- Make temp dir (for update_git.sh) configurable - Added new subpackages (audio-dbus, ui-dbus) - bsc#1199018 was never fixed in Factory's QEMU 6.2. It is now (since the patches are already in SeaBIOS 1.16.0) - Some tests are having issues when run in OBS. They seem to be due to race conditions, triggered by resource constraints of OBS workers. Let's disable them for now, while looking for a fix - Update to v7.0.0 (bsc#1201307). For full release notes, see: * https://wiki.qemu.org/ChangeLog/7.0 Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * [ARM] The virt board has gained a new control knob to disable passing a RNG seed in the DTB (dtb-kaslr-seed) * [ARM] The AST2600 SoC now supports a dummy version of the i3c device * [ARM] The virt board can now run guests with KVM on hosts with restricted IPA ranges * [ARM] The virt board now supports virtio-mem-pci * [ARM] The virt board now supports specifying the guest CPU topology * [ARM] On the virt board, we now enable PAuth when using KVM or hvf and the host CPU supports it * [RISC-V] Add support for ratified 1.0 Vector extension * [RISC-V] Support for the Zve64f and Zve32f extensions * [RISC-V] Drop support for draft 0.7.1 Vector extension * [RISC-V] Support Zfhmin and Zfh extensions * [RISC-V] RISC-V KVM support * [RISC-V] Mark Hypervisor extension as non experimental * [RISC-V] Enable Hypervisor extension by default * [x86] Support for Intel AMX. * [PCI/PCIe] Q35: fix PCIe device becoming disabled after migration when ACPI based PCI hotplug is used (6b0969f1ec) * [PCI/PCIe] initial bits of SR/IOV support (250346169) * [PCI/PCIe] arm/virt: fixed PXB interrupt routing (e609301b45) * [PCI/PCIe] arm/virt: support for virtio-mem-pci (b1b87327a9) * [virtiofs] Fix for CVE-2022-0358 - behaviour with supplementary groups and SGID directories * [virtiofs] Improved security label support * [virtiofs] The virtiofsd in qemu is now starting to be deprecated; please start using and contributing to Rust virtiofsd * Patches dropped: acpi-validate-hotplug-selector-on-access.patch block-backend-Retain-permissions-after-m.patch block-qdict-Fix-Werror-maybe-uninitializ.patch brotli-fix-actual-variable-array-paramet.patch display-qxl-render-fix-race-condition-in.patch doc-Add-the-SGX-numa-description.patch hw-i386-amd_iommu-Fix-maybe-uninitialize.patch hw-intc-exynos4210_gic-provide-more-room.patch hw-nvme-fix-CVE-2021-3929.patch hw-nvram-at24-return-0xff-if-1-byte-addr.patch iotest-065-explicit-compression-type.patch iotest-214-explicit-compression-type.patch iotest-302-use-img_info_log-helper.patch iotest-303-explicit-compression-type.patch iotest-39-use-_qcow2_dump_header.patch iotests-60-more-accurate-set-dirty-bit-i.patch iotests-bash-tests-filter-compression-ty.patch iotests-common.rc-introduce-_qcow2_dump_.patch iotests-declare-lack-of-support-for-comp.patch iotests-drop-qemu_img_verbose-helper.patch iotests-massive-use-_qcow2_dump_header.patch iotests-MRCE-Write-data-to-source.patch iotests.py-filter-out-successful-output-.patch iotests.py-img_info_log-rename-imgopts-a.patch iotests.py-implement-unsupported_imgopts.patch iotests.py-qemu_img-create-support-IMGOP.patch iotests.py-rewrite-default-luks-support-.patch iotests-specify-some-unsupported_imgopts.patch meson-build-all-modules-by-default.patch numa-Enable-numa-for-SGX-EPC-sections.patch numa-Support-SGX-numa-in-the-monitor-and.patch python-aqmp-add-__del__-method-to-legacy.patch python-aqmp-add-_session_guard.patch python-aqmp-add-SocketAddrT-to-package-r.patch python-aqmp-add-socket-bind-step-to-lega.patch python-aqmp-add-start_server-and-accept-.patch python-aqmp-copy-type-definitions-from-q.patch python-aqmp-drop-_bind_hack.patch python-aqmp-fix-docstring-typo.patch python-aqmp-Fix-negotiation-with-pre-oob.patch python-aqmp-fix-race-condition-in-legacy.patch Python-aqmp-fix-type-definitions-for-myp.patch python-aqmp-handle-asyncio.TimeoutError-.patch python-aqmp-refactor-_do_accept-into-two.patch python-aqmp-remove-_new_session-and-_est.patch python-aqmp-rename-accept-to-start_serve.patch python-aqmp-rename-AQMPError-to-QMPError.patch python-aqmp-split-_client_connected_cb-o.patch python-aqmp-squelch-pylint-warning-for-t.patch python-aqmp-stop-the-server-during-disco.patch python-introduce-qmp-shell-wrap-convenie.patch python-machine-raise-VMLaunchFailure-exc.patch python-move-qmp-shell-under-the-AQMP-pac.patch python-move-qmp-utilities-to-python-qemu.patch python-qmp-switch-qmp-shell-to-AQMP.patch python-support-recording-QMP-session-to-.patch python-upgrade-mypy-to-0.780.patch qcow2-simple-case-support-for-downgradin.patch qemu-binfmt-conf.sh-should-use-F-as-shor.patch tests-qemu-iotests-040-Skip-TestCommitWi.patch tests-qemu-iotests-Fix-051-for-binaries-.patch tests-qemu-iotests-testrunner-Quote-case.patch tools-virtiofsd-Add-rseq-syscall-to-the-.patch ui-cursor-fix-integer-overflow-in-cursor.patch vhost-vsock-detach-the-virqueue-element-.patch virtiofsd-Drop-membership-of-all-supplem.patch virtio-net-fix-map-leaking-on-error-duri.patch Disable-some-tests-that-have-problems-in.patch * Patches added: intc-exynos4210_gic-replace-snprintf-wit.patch Revert-8dcb404bff6d9147765d7dd3e9c849337.patch- Fix bsc#1197084 * Patches added: hostmem-default-the-amount-of-prealloc-t.patch- Get rid of downstream patches breaking s390 modules. Replace them with the upstream proposed and Acked (but never committed) solution (bsc#1199015) * Patches added: modules-generates-per-target-modinfo.patch modules-introduces-module_kconfig-direct.patch * Patches dropped: Fix-the-module-building-problem-for-s390.patch modules-quick-fix-a-fundamental-error-in.patch- backport patches for having coroutine work well when LTO is used * Patches added: coroutine-ucontext-use-QEMU_DEFINE_STATI.patch coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch coroutine-win32-use-QEMU_DEFINE_STATIC_C.patch- seabios: drop patch that changes python in python2. Just go to python3 directly. * Patches dropped: seabios-use-python2-explicitly-as-needed.patch- Fix the following bugs: - bsc#1198037, CVE-2021-4207 - bsc#1198038, CVE-2022-0216 - bsc#1201367, CVE-2022-35414 - bsc#1198035, CVE-2021-4206 - bsc#1198712, CVE-2022-26354 - bsc#1198711, CVE-2022-26353 * Patches added: display-qxl-render-fix-race-condition-in.patch scsi-lsi53c895a-fix-use-after-free-in-ls.patch softmmu-Always-initialize-xlat-in-addres.patch ui-cursor-fix-integer-overflow-in-cursor.patch vhost-vsock-detach-the-virqueue-element-.patch virtio-net-fix-map-leaking-on-error-duri.patch- Fix usb ehci boot failure (bsc#1192115) * Patches added: hw-usb-hcd-ehci-fix-writeback-order.patch- Fix bugs boo#1200557 and boo#1199924 - Now that boo#1199924 is fixed, re-enable FORTIFY_SOURCE=3 * Patches added: pci-fix-overflow-in-snprintf-string-form.patch sphinx-change-default-language-to-en.patch- It has been observed that building QEMU with _FORTIFY_SOURCE=3 causes problem (see bsc#1199924). Force it to =2 for now, while we investigate the issue.- Backport a GCC 12 aarch64 build fix (bsc#1199625) * Patches added: block-qdict-Fix-Werror-maybe-uninitializ.patch- Filter out rpmlint error that is valid for qemu, but will have its badness increased in the future.- enable aio=io_uring on all kvm architectures (bsc#1197699)- Backport aqmp patches from upstream which can fix iotest issues * Patches added: python-aqmp-add-__del__-method-to-legacy.patch python-aqmp-add-_session_guard.patch python-aqmp-add-SocketAddrT-to-package-r.patch python-aqmp-add-socket-bind-step-to-lega.patch python-aqmp-add-start_server-and-accept-.patch python-aqmp-copy-type-definitions-from-q.patch python-aqmp-drop-_bind_hack.patch python-aqmp-fix-docstring-typo.patch python-aqmp-Fix-negotiation-with-pre-oob.patch python-aqmp-fix-race-condition-in-legacy.patch Python-aqmp-fix-type-definitions-for-myp.patch python-aqmp-handle-asyncio.TimeoutError-.patch python-aqmp-refactor-_do_accept-into-two.patch python-aqmp-remove-_new_session-and-_est.patch python-aqmp-rename-accept-to-start_serve.patch python-aqmp-rename-AQMPError-to-QMPError.patch python-aqmp-split-_client_connected_cb-o.patch python-aqmp-squelch-pylint-warning-for-t.patch python-aqmp-stop-the-server-during-disco.patch python-introduce-qmp-shell-wrap-convenie.patch python-machine-raise-VMLaunchFailure-exc.patch python-move-qmp-shell-under-the-AQMP-pac.patch python-move-qmp-utilities-to-python-qemu.patch python-qmp-switch-qmp-shell-to-AQMP.patch python-support-recording-QMP-session-to-.patch python-upgrade-mypy-to-0.780.patch- Drop the patches which are workaround to fix iotest issues * Patches dropped: Revert-python-iotests-replace-qmp-with-a.patch Revert-python-machine-add-instance-disam.patch Revert-python-machine-add-sock_dir-prope.patch Revert-python-machine-handle-fast-QEMU-t.patch Revert-python-machine-move-more-variable.patch Revert-python-machine-remove-_remove_mon.patch- Support the SGX feature (bsc#1197807) * Patches added: doc-Add-the-SGX-numa-description.patch numa-Enable-numa-for-SGX-EPC-sections.patch numa-Support-SGX-numa-in-the-monitor-and.patch- Backport CVE-2021-3929 (bsc#1193880) * Patches added: hw-nvme-fix-CVE-2021-3929.patch- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528) * Patches added: Revert-python-iotests-replace-qmp-with-a.patch Revert-python-machine-add-instance-disam.patch Revert-python-machine-add-sock_dir-prope.patch Revert-python-machine-handle-fast-QEMU-t.patch Revert-python-machine-move-more-variable.patch Revert-python-machine-remove-_remove_mon.patch- Add missing patch from a PTFs (bsc#1194938) * Patches added: scsi-generic-check-for-additional-SG_IO-.patch- Kill downstream patches around bifmt handling that makes cumbersome to run multi-arch containers, and switch to the upstream behavior, which is well documented and valid on all other distros. This is possible thanks to Linux kernel commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so it can only work on Leap/SLE 15.4 and higher). (bsc#1197298) * Patches dropped: qemu-binfmt-conf.sh-allow-overriding-SUS.patch qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch- Fix update_git.sh wiping all the package file of the local checkout while cloning the git repository on demand (in case they don't exist and the user as to do so).- Improve test reliability * Patches added: Fix-the-module-building-problem-for-s390.patch tests-qemu-iotests-040-Skip-TestCommitWi.patch tests-qemu-iotests-testrunner-Quote-case.patch- Fix virtiofs crashing with glibc >= 2.35, due to rseq syscall (bsc#1196924) * Patches added: tools-virtiofsd-Add-rseq-syscall-to-the-.patch- Avoid warnings caused by a GCC 12 bug, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98503 (bsc#1197018) * Patches added: hw-i386-amd_iommu-Fix-maybe-uninitialize.patch Silence-GCC-12-spurious-warnings.patch Ignore-spurious-GCC-12-warning.patch- Proactive fix * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch- Build PPC firmwares from sources on non-PPC builds as well (bsc#1193545) - Build RiscV firmwares on non-RiscV builds as well - While there, refactor (and simplify!) the firmware building logic and code * Patches added: Makefile-define-endianess-for-cross-buil.patch Makefile-fix-build-with-binutils-2.38.patch- qemu,kvm,xen: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) * Patches added: hw-scsi-megasas-check-for-NULL-frame-in-.patch- Include vmxcap in the qemu-tools package (is being very useful for debugging bsc#1193364)- The qemu package should require qemu-x86, qemu-arm, etc, as there's no point installing it without _any_ of them. Additionally, right now, the user does not get a working qemu, if recommended packages are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087- Give clearer instructions on how to modify the package patches from the output of update_git.sh (docs change only, no functional change)- qemu,kvm: potential privilege escalation via virtiofsd (bsc#1195161, CVE-2022-0358) * Patches added: virtiofsd-Drop-membership-of-all-supplem.patch* Patches added: block-backend-Retain-permissions-after-m.patch iotest-065-explicit-compression-type.patch iotest-214-explicit-compression-type.patch iotest-302-use-img_info_log-helper.patch iotest-303-explicit-compression-type.patch iotest-39-use-_qcow2_dump_header.patch iotests-60-more-accurate-set-dirty-bit-i.patch iotests-bash-tests-filter-compression-ty.patch iotests-common.rc-introduce-_qcow2_dump_.patch iotests-declare-lack-of-support-for-comp.patch iotests-drop-qemu_img_verbose-helper.patch iotests-massive-use-_qcow2_dump_header.patch iotests-MRCE-Write-data-to-source.patch iotests.py-filter-out-successful-output-.patch iotests.py-img_info_log-rename-imgopts-a.patch iotests.py-implement-unsupported_imgopts.patch iotests.py-qemu_img-create-support-IMGOP.patch iotests.py-rewrite-default-luks-support-.patch iotests-specify-some-unsupported_imgopts.patch qcow2-simple-case-support-for-downgradin.patch tests-qemu-iotests-Fix-051-for-binaries-.patch-Backport patch from upstream, bsc#1194063 CVE-2021-4158 * Patches added: acpi-validate-hotplug-selector-on-access.patch- Enable modules for testsuite* Patches added: meson-build-all-modules-by-default.patch- It's time to really start requiring -F when using -b in qemu-img for us as well. Users/customers have been warned in the relevant release notes (bsc#1190135) * Patches dropped: Revert-qemu-img-Improve-error-for-rebase.patch Revert-qemu-img-Require-F-with-b-backing.patch- Fix testsuite failures by not using modules when building tests (and some other, also testsuite related, spec file problems)- [JIRA] (SLE-20965) Make QEMU guests more failsafe when resizing SCSI passthrough disks * Patches added: scsi-generic-replace-logical-block-count.patch- Add an audio-oss sub-package- Add some new (mostly documentation) files in the package- Remove option --audio-drv-list because audio is detected by meson automatically in latest version.- Remove options --disable-jemalloc and --disable-tcmalloc which are changed in v6.2.0.- Update to v 6.2.0. For full release notese, see: * https://wiki.qemu.org/ChangeLog/6.2. Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * virtio-mem: guest memory dumps are now fully supported, along with pre-copy/post-copy migration and background guest snapshots * QMP: support for nw DEVICE_UNPLUG_GUEST_ERROR to detect guest-reported hotplug failures * TCG: improvements to TCG plugin argument syntax, and multi-core support for cache plugin * 68k: improved support for Apple’s NuBus, including ability to load declaration ROMs, and slot IRQ support * ARM: macOS hosts with Apple Silicon CPUs now support ‘hvf’ accelerator for AArch64 guests * ARM: emulation support for Fujitsu A64FX processor model * ARM: emulation support for kudo-mbc machine type * ARM: M-profile MVE extension is now supported for Cortex-M55 * ARM: ‘virt’ machine now supports an emulated ITS (Interrupt Translation Service) and supports more than 123 CPUs in emulation mode * ARM: xlnx-zcu102 and xlnx-versal-virt machines now support BBRAM and eFUSE devices * PowerPC: improved POWER10 support for the ‘powernv’ machine type * PowerPC: initial support for POWER10 DD2.0 CPU model * PowerPC: support for FORM2 PAPR NUMA descriptions for ‘pseries’ machine type * RISC-V: support for Zb[abcs] instruction set extensions * RISC-V: support for vhost-user and numa mem options across all boards * RISC-V: SiFive PWM support * x86: support for new Snowridge-v4 CPU model * x86: guest support for Intel SGX * x86: AMD SEV guests now support measurement of kernel binary when doing direct kernel boot (not using a bootloader) * Patches dropped: 9pfs-fix-crash-in-v9fs_walk.patch block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch hw-acpi-ich9-Add-compat-prop-to-keep-HPC.patch hw-i386-acpi-build-Deny-control-on-PCIe-.patch i386-cpu-Remove-AVX_VNNI-feature-from-Co.patch net-vmxnet3-validate-configuration-value.patch pcie-rename-native-hotplug-to-x-native-h.patch plugins-do-not-limit-exported-symbols-if.patch plugins-execlog-removed-unintended-s-at-.patch qemu-nbd-Change-default-cache-mode-to-wr.patch qemu-sockets-fix-unix-socket-path-copy-a.patch target-arm-Don-t-skip-M-profile-reset-en.patch target-i386-add-missing-bits-to-CR4_RESE.patch tcg-arm-Fix-tcg_out_vec_op-function-sign.patch uas-add-stream-number-sanity-checks.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-balloon-don-t-start-free-page-hin.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch- Reinstate Lin Ma's fixes for bsc#1192147 as they were submitted only to IBS. * Patches added: hw-acpi-ich9-Add-compat-prop-to-keep-HPC.patch hw-i386-acpi-build-Deny-control-on-PCIe-.patch pcie-rename-native-hotplug-to-x-native-h.patch- Rename the Guest Agent service qemu-guest-agent, like in other distros (and upstream). bsc#1185543- disable QOM cast debug outside the testsuite as the corresponding asserts show up occassionally as top #1 in perf(1) traces under heavy virtio load - enable LTO when we'd like to use LTO* Patches added (bsc#1186256): qemu-binfmt-conf.sh-allow-overriding-SUS.patch- cross-i386-binutils and cross-i386-gcc are not needed and were dropped from Factory - boo#1193424- qemu: virtio-net: heap use-after-free in virtio_net_receive_rcu (bsc#1189938 CVE-2021-3748) solved by virtio-net-fix-use-after-unmap-free-for-.patch - kvm,qemu: out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702 CVE-2021-3713) * Patches added: uas-add-stream-number-sanity-checks.patch- Stable fixes from upstream * Patches added: block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch qemu-nbd-Change-default-cache-mode-to-wr.patch target-arm-Don-t-skip-M-profile-reset-en.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch- Fix testsuite dependencies (bsc#1190573) * Patches added: modules-quick-fix-a-fundamental-error-in.patch- Replace patch to fix hardcoded binfmt handler (bsc#1186256) * Patches dropped: qemu-binfmt-conf.sh-allow-overriding-SUS.patch * Patches added: qemu-binfmt-conf.sh-should-use-F-as-shor.patch - Stable fixes from upstream * Patches added: 9pfs-fix-crash-in-v9fs_walk.patch i386-cpu-Remove-AVX_VNNI-feature-from-Co.patch plugins-do-not-limit-exported-symbols-if.patch plugins-execlog-removed-unintended-s-at-.patch qemu-sockets-fix-unix-socket-path-copy-a.patch target-i386-add-missing-bits-to-CR4_RESE.patch virtio-balloon-don-t-start-free-page-hin.patch- Fix qemu build on ARMv7 (bsc#1190211) * Patches added: tcg-arm-Fix-tcg_out_vec_op-function-sign.patch- Update supported file for ARM machines.- Keep qemu-img without backing format still deprecated (bsc#1190135) * Patches added: Revert-qemu-img-Improve-error-for-rebase.patch Revert-qemu-img-Require-F-with-b-backing.patch - Update the support files to reflect the deprecation.- Update build dependencies versions: libgcrypt >= 1.8.0, gnutls >= 3.5.18, glib >= 2.56, libssh >= 0.8.7- Fix hardcoded binfmt handler doesn't play well with containers (bsc#1186256) * Patches added: qemu-binfmt-conf.sh-allow-overriding-SUS.patch- Update to v6.1: see https://wiki.qemu.org/ChangeLog/6.1 For a full list of formely deprecated features that are removed, consult: https://qemu-project.gitlab.io/qemu/about/removed-features.html For a list of new deprecated features, consult: https://qemu-project.gitlab.io/qemu/about/deprecated.html Some noteworthy changes: * Removed moxie CPU. * Removed lm32 CPU. * Removed unicore32 CPU. * Removed 'info cpustats'. * Added Aspeed machines: rainier-bmc, quanta-q7l1-bmc. * Added npcm7xx machine: quanta-gbs-bmc. * Model for Aspeed's Hash and Crypto Engine. * SVE2 is now emulated, including bfloat16 support * FEAT_I8MM, FEAT_TLBIOS, FEAT_TLBRANGE, FEAT_BF16, FEAT_AA32BF16, and FEAT_MTE3 are now emulated. * Improved hot-unplug failures on PowerPC pseries machine. * Implemented some POWER10 instructions in TCG. * Added shakti_c RISC-V machine. * Improved documentation for RISC-V machines. * CPU models for gen16 have been added for s390x. * New CPU model versions added with XSAVES enabled: Skylake-Client-v4, Skylake-Server-v5, Cascadelake-Server-v5, Cooperlake-v2, Icelake-Client-v3, Icelake-Server-v5, Denverton-v3, Snowridge-v3, Dhyana-v2 * Added ACPI based PCI hotplug support to Q35 machine. Enabled and used by default since pc-q35-6.1 machine type. * Added support for the pca9546 and pca9548 I2C muxes. * Added support for PMBus and several PMBus devices. * Crypto subsystem: The preferred crypto backend driver now gnutls, with libgcrypt as the second choice, and nettle as third choice, with ordering driven mostly by performance of the ciphers. * Misc doc improvements. * Patches removed: block-nvme-Fix-VFIO_MAP_DMA-failed-No-sp.patch hmp-Fix-loadvm-to-resume-the-VM-on-succe.patch hw-block-nvme-align-with-existing-style.patch hw-block-nvme-consider-metadata-read-aio.patch hw-net-can-sja1000-fix-buff2frame_bas-an.patch hw-nvme-fix-missing-check-for-PMR-capabi.patch hw-nvme-fix-pin-based-interrupt-behavior.patch hw-pci-host-q35-Ignore-write-of-reserved.patch hw-rdma-Fix-possible-mremap-overflow-in-.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch hw-usb-Do-not-build-USB-subsystem-if-not.patch hw-usb-host-stub-Remove-unused-header.patch linux-user-aarch64-Enable-hwcap-for-RND-.patch module-for-virtio-gpu-pre-load-module-to.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch pvrdma-Ensure-correct-input-on-ring-init.patch pvrdma-Fix-the-ring-init-error-flow-CVE-.patch qemu-config-load-modules-when-instantiat.patch qemu-config-parse-configuration-files-to.patch qemu-config-use-qemu_opts_from_qdict.patch runstate-Initialize-Error-to-NULL.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch target-i386-Exit-tb-after-wrmsr.patch target-sh4-Return-error-if-CPUClass-get_.patch tcg-Allocate-sufficient-storage-in-temp_.patch tcg-arm-Fix-tcg_out_op-function-signatur.patch tcg-sparc-Fix-temp_allocate_frame-vs-spa.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch usb-hid-avoid-dynamic-stack-allocation.patch usb-limit-combined-packets-to-1-MiB-CVE-.patch usb-mtp-avoid-dynamic-stack-allocation.patch usb-redir-avoid-dynamic-stack-allocation.patch usbredir-fix-free-call.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch vhost-user-gpu-abstract-vg_cleanup_mappi.patch vhost-user-gpu-fix-leak-in-virgl_cmd_res.patch vhost-user-gpu-fix-leak-in-virgl_resourc.patch vhost-user-gpu-fix-memory-disclosure-in-.patch vhost-user-gpu-fix-memory-leak-in-vg_res.patch vhost-user-gpu-fix-memory-leak-while-cal.patch vhost-user-gpu-fix-OOB-write-in-virgl_cm.patch vhost-user-gpu-fix-resource-leak-in-vg_r.patch vhost-vdpa-don-t-initialize-backend_feat.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch vl-allow-not-specifying-size-in-m-when-u.patch vl-Fix-an-assert-failure-in-error-path.patch vl-plug-object-back-into-readconfig.patch vl-plumb-keyval-based-options-into-readc.patch x86-acpi-use-offset-instead-of-pointer-w.patch- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527) hw-usb-Do-not-build-USB-subsystem-if-not.patch hw-usb-host-stub-Remove-unused-header.patch usb-hid-avoid-dynamic-stack-allocation.patch usb-limit-combined-packets-to-1-MiB-CVE-.patch usb-mtp-avoid-dynamic-stack-allocation.patch- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682) usbredir-fix-free-call.patch- Add stable patches from upstream: block-nvme-Fix-VFIO_MAP_DMA-failed-No-sp.patch hw-net-can-sja1000-fix-buff2frame_bas-an.patch hw-pci-host-q35-Ignore-write-of-reserved.patch- Disabled skiboot building for PowerPC due to the following issue: https://github.com/open-power/skiboot/issues/265- Fix possible mremap overflow in the pvrdma (CVE-2021-3582, bsc#1187499) hw-rdma-Fix-possible-mremap-overflow-in-.patch - Ensure correct input on ring init (CVE-2021-3607, bsc#1187539) pvrdma-Ensure-correct-input-on-ring-init.patch - Fix the ring init error flow (CVE-2021-3608, bsc#1187538) pvrdma-Fix-the-ring-init-error-flow-CVE-.patch- Fix qemu-supportconfig network-manager verification- Fix stable issues found in upstream: hmp-Fix-loadvm-to-resume-the-VM-on-succe.patch hw-block-nvme-align-with-existing-style.patch hw-nvme-fix-missing-check-for-PMR-capabi.patch hw-nvme-fix-pin-based-interrupt-behavior.patch linux-user-aarch64-Enable-hwcap-for-RND-.patch qemu-config-load-modules-when-instantiat.patch qemu-config-parse-configuration-files-to.patch qemu-config-use-qemu_opts_from_qdict.patch runstate-Initialize-Error-to-NULL.patch target-i386-Exit-tb-after-wrmsr.patch tcg-Allocate-sufficient-storage-in-temp_.patch tcg-sparc-Fix-temp_allocate_frame-vs-spa.patch vhost-vdpa-don-t-initialize-backend_feat.patch vl-allow-not-specifying-size-in-m-when-u.patch vl-Fix-an-assert-failure-in-error-path.patch vl-plug-object-back-into-readconfig.patch vl-plumb-keyval-based-options-into-readc.patch x86-acpi-use-offset-instead-of-pointer-w.patch- Update qemu-supportconfig plugin- Fix an update-alternative warning when removing qemu-skiboot package bsc#1178678- Use doc directive to build QEMU documentation- Improve compatibility with gcc 11: target-sh4-Return-error-if-CPUClass-get_.patch tcg-arm-Fix-tcg_out_op-function-signatur.patch- Enable zstd compression option to qcow2- Fix out-of-bounds write in virgl_cmd_get_capset CVE-2021-3546 bsc#1185981 vhost-user-gpu-abstract-vg_cleanup_mappi.patch - Fix memory leaks found in the virtio vhost-user GPU device CVE-2021-3544 bsc#1186010 vhost-user-gpu-fix-leak-in-virgl_cmd_res.patch vhost-user-gpu-fix-leak-in-virgl_resourc.patch vhost-user-gpu-fix-memory-disclosure-in-.patch vhost-user-gpu-fix-memory-leak-in-vg_res.patch vhost-user-gpu-fix-memory-leak-while-cal.patch vhost-user-gpu-fix-OOB-write-in-virgl_cm.patch - Fix information disclosure due to uninitialized memory read CVE-2021-3545 bsc#1185990 vhost-user-gpu-fix-resource-leak-in-vg_r.patch- disable sheepdog, it was dropped upstream ( https://gitlab.com/qemu-project/qemu/-/commit/09ec85176e4095be15f233ebc870d5680123f024) and fails to build with gcc 11 on non-x86- Fix CVE-2021-3527 in usb/redir: usb-redir-avoid-dynamic-stack-allocation.patch - Fix issues found upstream: hw-block-nvme-consider-metadata-read-aio.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch- Brotli VLA error was already fixed in v5.2 but the patches wasn't included in v6.0. This change fixed that - Patches added: brotli-fix-actual-variable-array-paramet.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch- For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)- Update to v6.0: see https://wiki.qemu.org/ChangeLog/6.0 For a full list of formely deprecated features that are removed now, consult: https://qemu-project.gitlab.io/qemu/system/removed-features.html. For a list of new deprecated features, consult: https://qemu-project.gitlab.io/qemu/system/deprecated.html Some noteworthy changes: * Removed tileGX CPU (linux-user mode). * Removed ide-drive device (use ide-hd or ide-cd instead). * Removed scsi-disk device (use scsi-hd or scsi-cd instead). * Removed pc-1.0, pc-1.1, pc-1.2, and pc-1.3 machine types. * Added emulation of Arm-v8.1M arch and Cortex-M55 CPU. * Added boards mps3-an524 (Cortex-M33) and mps3-an547 (Cortex-M55). * x86: Support for running SEV-ES encrypted guests; TCG can emulate the PKS feature; WHPX accelerator supports accelerated APIC. * ARM: ARMv8.4-TTST, ARMv8.4-SEL2, FEAT_SSBS, and ARMv8.4-DIT emulation are now supported; Added ARMv8.5-MemTag extension is now supported formely linux-user. Additional device emulation support for xlnx-zynqmp, xlnx-versal, sbsa-ref, npcm7xx, and sabrelite board models. * PowerPC: powernv now allows external BMC; pseries can send QAPI message if it detects a memory hotplug failure; CPU unplug request can be retried. * s390: TCG works with Linux kernels built with clang-11 and clang12. * RISC-V: OpenSBI upgraded to v0.9; Support the QMP dump-guest-memory command; Add support for the SiFive SPI controller (sifive_u); Add QSPI NOR flash to Microchip PFSoC. * Misc doc improvements. * Multiprocess: Add experimental options to support out-of-process device emulation. * ACPI: support for assigning NICs to known names in guest OS independently of PCI slot placement. * NVMe: new emulation support for v1.4 spec with many new features, experimental support for Zoned Namespaces, multipath I/O, and End-to-End Data Protection. * Xen: New guest loader for testing of Xen-like hypervisors booting kernels. * virtiofs: misc. security fixes and performance improvements. * Tools: FUSE block exports to allow mounting any QEMU block device node as a host file. * Migration: query/info-migrate now display the migration blocker status and the reasons for blocking. * User-mode: Added support for the Qualcomm Hexagon processor. * TCG: Added support for Apple Silicon hosts (macOS). * QMP: backup jobs now support multiple asynchronous requests in parallel * VNC: virtio-vga support for scaling resolution based on client window size * Patches added: doc-add-our-support-doc-to-the-main-proj.patch * Patches removed: 9pfs-Fully-restart-unreclaim-loop-CVE-20.patch audio-add-sanity-check.patch block-Fix-deadlock-in-bdrv_co_yield_to_d.patch block-Fix-locking-in-qmp_block_resize.patch blockjob-Fix-crash-with-IOthread-when-bl.patch block-nfs-fix-int-overflow-in-nfs_client.patch block-rbd-fix-memory-leak-in-qemu_rbd_co.patch block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch block-Separate-blk_is_writable-and-blk_s.patch block-Simplify-qmp_block_resize-error-pa.patch brotli-fix-actual-variable-array-paramet.patch build-no-pie-is-no-functional-linker-fla.patch cadence_gem-switch-to-use-qemu_receive_p.patch cpu-core-Fix-help-of-CPU-core-device-typ.patch docs-add-SUSE-support-statements-to-html.patch dp8393x-switch-to-use-qemu_receive_packe.patch e1000-fail-early-for-evil-descriptor.patch e1000-switch-to-use-qemu_receive_packet-.patch hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch hw-arm-virt-Disable-pl011-clock-migratio.patch hw-block-fdc-Fix-fallback-property-on-sy.patch hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch hw-isa-Kconfig-Add-missing-dependency-VI.patch hw-isa-piix4-Migrate-Reset-Control-Regis.patch hw-net-lan9118-Fix-RX-Status-FIFO-PEEK-v.patch hw-s390x-fix-build-for-virtio-9p-ccw.patch hw-sd-sd-Actually-perform-the-erase-oper.patch hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch hw-sd-sdhci-Correctly-set-the-controller.patch hw-sd-sdhci-Don-t-transfer-any-data-when.patch hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch hw-sd-sdhci-Limit-block-size-only-when-S.patch hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch hw-sd-sd-Move-the-sd_block_-read-write-a.patch hw-sd-sd-Skip-write-protect-groups-check.patch hw-timer-slavio_timer-Allow-64-bit-acces.patch hw-virtio-pci-Added-AER-capability.patch hw-virtio-pci-Added-counter-for-pcie-cap.patch i386-acpi-restore-device-paths-for-pre-5.patch iotests-Fix-_send_qemu_cmd-with-bash-5.1.patch lan9118-switch-to-use-qemu_receive_packe.patch lsilogic-Use-PCIDevice-exit-instead-of-D.patch Make-keycode-gen-output-reproducible-use.patch memory-clamp-cached-translation-in-case-.patch monitor-Fix-assertion-failure-on-shutdow.patch mptsas-Remove-unused-MPTSASState-pending.patch msf2-mac-switch-to-use-qemu_receive_pack.patch net-Fix-handling-of-id-in-netdev_add-and.patch net-introduce-qemu_receive_packet.patch pcnet-switch-to-use-qemu_receive_packet-.patch qemu-nbd-Use-SOMAXCONN-for-socket-listen.patch qemu-storage-daemon-Enable-object-add.patch rtl8139-switch-to-use-qemu_receive_packe.patch s390x-add-have_virtio_ccw.patch s390x-css-report-errors-from-ccw_dstream.patch s390x-Fix-stringop-truncation-issue-repo.patch s390x-modularize-virtio-gpu-ccw.patch s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch s390x-pci-restore-missing-Query-PCI-Func.patch spice-app-avoid-crash-when-core-spice-mo.patch sungem-switch-to-use-qemu_receive_packet.patch target-arm-Don-t-decode-insns-in-the-XSc.patch target-arm-Fix-MTE0_ACTIVE.patch target-arm-Introduce-PREDDESC-field-defi.patch target-arm-Update-PFIRST-PNEXT-for-pred_.patch target-arm-Update-REV-PUNPK-for-pred_des.patch target-arm-Update-ZIP-UZP-TRN-for-pred_d.patch target-xtensa-fix-meson.build-rule-for-x.patch tcg-Use-memset-for-large-vector-byte-rep.patch tools-virtiofsd-Replace-the-word-whiteli.patch tx_pkt-switch-to-use-qemu_receive_packet.patch ui-vnc-Add-missing-lock-for-send_color_m.patch update-linux-headers-Include-const.h.patch Update-linux-headers-to-5.11-rc2.patch util-fix-use-after-free-in-module_load_o.patch vfio-ccw-Connect-the-device-request-noti.patch vhost-user-blk-fix-blkcfg-num_queues-end.patch viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch virtiofsd-extract-lo_do_open-from-lo_ope.patch virtiofsd-optionally-return-inode-pointe.patch virtiofsd-prevent-opening-of-special-fil.patch virtiofs-drop-remapped-security.capabili.patch virtiofsd-Save-error-code-early-at-the-f.patch virtio-move-use-disabled-flag-property-t.patch virtio-pci-compat-page-aligned-ATS.patch xen-block-Fix-removal-of-backend-instanc.patch- Include upstream patch designated as stable material and reviewed for applicability to include here mptsas-Remove-unused-MPTSASState-pending.patch - Clarify in support documents that cpu-add was removed in this release from both the human monitor protocol (HMP) and QMP interfaces- 6.0.0 qemu is about to be released. Add comments to the in- package support documents (supported..txt) about the new deprecations as of that release as an early head's up for qemu users. These deprecations include these command-line options: - M option: kernel-irqchip=off - chardev tty - chardev paraport - enable-fips - writeconfig - spice password=string- Include upstream patches designated as stable material and reviewed for applicability to include here. NOTE that the PIIX4 patch has migration implications: the change will also be applied to the SLE-15-SP2 qemu, and a live migration from that version to this SLE-15-SP3 qemu would require this patch to be applied for a successful migration if PIIX4 southbridge is used in the machine emulation (x86 i440fx) block-rbd-fix-memory-leak-in-qemu_rbd_co.patch block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch cpu-core-Fix-help-of-CPU-core-device-typ.patch hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch hw-block-fdc-Fix-fallback-property-on-sy.patch hw-isa-Kconfig-Add-missing-dependency-VI.patch hw-isa-piix4-Migrate-Reset-Control-Regis.patch hw-virtio-pci-Added-AER-capability.patch hw-virtio-pci-Added-counter-for-pcie-cap.patch s390x-css-report-errors-from-ccw_dstream.patch target-xtensa-fix-meson.build-rule-for-x.patch util-fix-use-after-free-in-module_load_o.patch virtio-pci-compat-page-aligned-ATS.patch- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103) * Patches dropped: hw-s390x-modularize-virtio-gpu-ccw.patch * Patches added: s390x-add-have_virtio_ccw.patch s390x-modularize-virtio-gpu-ccw.patch s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282) hw-sd-sd-Actually-perform-the-erase-oper.patch hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch hw-sd-sdhci-Correctly-set-the-controller.patch hw-sd-sdhci-Don-t-transfer-any-data-when.patch hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch hw-sd-sdhci-Limit-block-size-only-when-S.patch hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch hw-sd-sd-Move-the-sd_block_-read-write-a.patch hw-sd-sd-Skip-write-protect-groups-check.patch - Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373) tools-virtiofsd-Replace-the-word-whiteli.patch viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch virtiofsd-extract-lo_do_open-from-lo_ope.patch virtiofsd-optionally-return-inode-pointe.patch virtiofsd-prevent-opening-of-special-fil.patch virtiofs-drop-remapped-security.capabili.patch virtiofsd-Save-error-code-early-at-the-f.patch - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) net-introduce-qemu_receive_packet.patch rtl8139-switch-to-use-qemu_receive_packe.patch - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) cadence_gem-switch-to-use-qemu_receive_p.patch dp8393x-switch-to-use-qemu_receive_packe.patch e1000-switch-to-use-qemu_receive_packet-.patch lan9118-switch-to-use-qemu_receive_packe.patch msf2-mac-switch-to-use-qemu_receive_pack.patch pcnet-switch-to-use-qemu_receive_packet-.patch sungem-switch-to-use-qemu_receive_packet.patch tx_pkt-switch-to-use-qemu_receive_packet.patch - Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686) memory-clamp-cached-translation-in-case-.patch - Include upstream patches designated as stable material and reviewed for applicability to include here hw-arm-virt-Disable-pl011-clock-migratio.patch xen-block-Fix-removal-of-backend-instanc.patch - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)- Fix s390x "mediated device is in use" error condition (bsc#1183634) update-linux-headers-Include-const.h.patch Update-linux-headers-to-5.11-rc2.patch vfio-ccw-Connect-the-device-request-noti.patch- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577) e1000-fail-early-for-evil-descriptor.patch- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372) s390x-pci-restore-missing-Query-PCI-Func.patch- Include upstream patches designated as stable material and reviewed for applicability to include here lsilogic-Use-PCIDevice-exit-instead-of-D.patch vhost-user-blk-fix-blkcfg-num_queues-end.patch - Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137) 9pfs-Fully-restart-unreclaim-loop-CVE-20.patch - Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639) net-vmxnet3-validate-configuration-value.patch- Add #!ForceMultiversion to qemu.spec: + As the spec file defines different Version: fiels for various subpackages, we must instruct OBS to not ever reset the checkin-counter, as it would by defalut on a version increase. Resetting the version counter results in sub-packages reusing their VERSION-RELEASE from the past (e.g. qemu-ipxe is version 1.0.0+, and upon checkin of a new qemu version, RELEASE is reset to 1.1, thus again producing qemu-ipxe-1.0.0+-1.1.noarch.rpm.- Fix GCC11 compiler issue in brotli (edk2) code (boo#1181922) brotli-fix-actual-variable-array-paramet.patch - Tweak a few submodule descriptions and summaries - Fix a backward compatibility issue in ACPI data i386-acpi-restore-device-paths-for-pre-5.patch- Add patch from IBM to improve modularization situation on s390 where a new qemu module, hw-s390x-virtio-gpu-ccw.so, and a corresponding new qemu-hw-s390x-virtio-gpu-ccw subpackage, is split out (this parallels the hw-display-virtio-gpu-pci.so module). Split-provides file is also used to track this functionality splitout. Both the packages supplying the above mentioned modules now have a Requires on the qemu-hw-display-virtio-gpu package. It is anticipated that this change is going in upstream as well, and if done differently the plan is to update to the upstream implementation if possible (bsc#1181103) hw-s390x-modularize-virtio-gpu-ccw.patch- Added a few more usability improvements for our git packaging workflow- Fix issue of virtio-9p-ccw having been mistakenly dropped from qemu (bsc#1182496) hw-s390x-fix-build-for-virtio-9p-ccw.patch- Tweaked some spec file details to be again compatible with quilt setup using the spec file as input - Remove BuildRequires that were added in anticipation of building ovmf within this package. We have not taken that route- Fix uninitialized variable in ipxe driver code (boo#1181922) ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch - Add a few improvements to the git-based package workflow scripts- Include additional upstream patches designated as stable material and reviewed for applicability to include here blockjob-Fix-crash-with-IOthread-when-bl.patch monitor-Fix-assertion-failure-on-shutdow.patch qemu-nbd-Use-SOMAXCONN-for-socket-listen.patch qemu-storage-daemon-Enable-object-add.patch- Switch the modules qemu-ui-display-gpu and qemu-ui-display-gpu-pci from being an x86 only Recommends, to a Recommends for all arch's except s390x (boo#1181350) - Fix qemu-hw-usb-smartcard to not be a Recommends for s390x - Minor spec file tweaks for compatibility with upcoming spec file formatter- Make note that this patch takes care of an OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933) hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch- Include upstream patches designated as stable material and reviewed for applicability to include here block-Separate-blk_is_writable-and-blk_s.patch hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch hw-net-lan9118-Fix-RX-Status-FIFO-PEEK-v.patch hw-timer-slavio_timer-Allow-64-bit-acces.patch net-Fix-handling-of-id-in-netdev_add-and.patch target-arm-Don-t-decode-insns-in-the-XSc.patch target-arm-Fix-MTE0_ACTIVE.patch target-arm-Introduce-PREDDESC-field-defi.patch target-arm-Update-PFIRST-PNEXT-for-pred_.patch target-arm-Update-REV-PUNPK-for-pred_des.patch target-arm-Update-ZIP-UZP-TRN-for-pred_d.patch tcg-Use-memset-for-large-vector-byte-rep.patch ui-vnc-Add-missing-lock-for-send_color_m.patch virtio-move-use-disabled-flag-property-t.patch- binutils v2.36 has changed the handling of the assembler's - mx86-used-note, resulting in a build failure. To compensate, we now explicitly specify -mx86-used-note=no in the seabios Makefile (boo#1181775) build-be-explicit-about-mx86-used-note-n.patch- Additional tweaks to ensure libvirt runs ok when qemu-hw-display-virtio-gpu package is not installed- Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid "Failed to try-restart qemu-ga@.service" error while updating the qemu-guest-agent. (bsc#1178565)- Fix two additional cases of qemu crashing due to qemu module packages not being loaded. qom-handle-case-of-chardev-spice-module-.patch spice-app-avoid-crash-when-core-spice-mo.patch- Fix issue of qemu crashing (abort called) when virtio-gpu device is asked for and the qemu-hw-display-virtio-gpu package isn't installed. (bsc#1181103) module-for-virtio-gpu-pre-load-module-to.patch - Add additional inter-module package dependencies, to reflect the current module dependencies (see qemu source file: util/module.c) - As of v3.1.0 virt-manager, new VM's are created by default with audio/sound enabled, so it's time to reflect the need, at least in the spice case, by having spice-audio available when spice in general is used (boo#1180210 boo#1181132) - Further refine package Recommends/Suggests based on architecture - Remove no longer needed dependency on pwdutils (boo#1181235)- Fix qemu-testsuite issue where white space processing gets handled differently under bash 5.1 (boo#1181054) iotests-Fix-_send_qemu_cmd-with-bash-5.1.patch- Convert qemu-kvm from a script to a symlink. Using qemu-kvm to invoke the QEMU emulator has been deprecated for some time, but is still provided. It has as it's ancient origins a version of QEMU which had KVM acceleration enabled by default, and then recently, until now, it is a shell script which execs the QEMU emulator, adding '-machine accel=kvm' to the beginning of the list of command line options passed to the emulator. This method collides with the now preferred method of specifying acceleration options by using -accel. qemu-kvm is now changed to simply be a symlink to the same QEMU binary which the prior script exec'd. This new approach takes advantage of a built-in QEMU feature where if QEMU is invoked using a program name ending in 'kvm', KVM emulation is enabled. This approach is better in that it is more compatible with any other command line option that may be added for describing acceleration. For those who have modified qemu-kvm to add additional command line options, or take other actions in the context of the script you will now need to create an alternate script "emulator" to achieve the same result. Note that it's possible there may be some very subtle behavioral difference in the switch from a script to a symlink, but given that qemu-kvm is a deprecated package, we're not going to worry about that.- Fix crash when spice used and the qemu-audio-spice package isn't installed (boo#1180210) audio-add-sanity-check.patch - Add some stable patches from upstream block-Fix-deadlock-in-bdrv_co_yield_to_d.patch block-Fix-locking-in-qmp_block_resize.patch block-nfs-fix-int-overflow-in-nfs_client.patch block-Simplify-qmp_block_resize-error-pa.patch build-no-pie-is-no-functional-linker-fla.patch- Update to v5.2.0: See http://wiki.qemu.org/ChangeLog/5.2 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * Dropped system emulators: qemu-system-lm32, qemu-system-unicore32 * Dropped linux user emulator: qemu-ppc64abi32 * Added linux user emulator: qemu-extensaeb * Unicore32 and lm32 guest support dropped * New sub-packages (most due to ongoing modularization of QEMU): qemu-audio-spice, qemu-hw-chardev-spice, qemu-hw-display-virtio-vga, qemu-hw-display-virtio-gpu, qemu-hw-display-virtio-gpu-pci, qemu-ui-spice-core, qemu-ui-opengl, qemu-ivshmem-tools * x86: A new KVM feature which improves the handling of asynchronous page faults is available with -cpu ...,kvm-async-pf-int (requires Linux 5.8) * s390: More instructions emulated under TCG * PowerPC: nvdimm= machine option now functions correctly; misc improvements * ARM: new boards: mps2-an386 (Cortex-M4 based) and mps2-an500 (Cortex-M7 based), raspi3ap (the Pi 3 model A+), raspi0 (the Pi Zero) and raspi1ap (the Pi A+) * RISC-V: OpenSBI v0.8 included by default; Generic OpenSBI platform used when no -bios argument is supplied; Support for NUMA sockets on Virt and Spike Machines; Support for migrating machines; misc improvements * Misc NVMe improvements * The 'vhost-user-blk' export type has been added, allowing qemu-storage-daemon to act as a vhost-user-blk device backend * The SMBIOS OEM strings can now come from a file * 9pfs - misc performance related improvements * virtiofs - misc improvements * migration: The default migration bandwidth has been increased to 1Gbps (users are still encouraged to tune it to their own hardware); The new 'calc-dirty-rate' and 'query-dirty-rate' QMP commands can help determine the likelihood of precopy migration success; TLS+multifd now supported for higher bandwidth encrypted migration; misc minor features added * Misc minor block features added * Misc doc improvements * qemu-microvm subpackage change: the bios-microvm.bin is now SeaBIOS based, and the qboot based on is now qboot.rom * elf2dmp is no longer part of qemu-tools (it was never intended to be a packaged binary) * Some subpackages which were 'Requires' are now 'Recommends', allowing for a smaller qemu packaging footprint if needed * Patches dropped (included in release tarball, unless otherwise noted): docs-fix-trace-docs-build-with-sphinx-3..patch (fixed differently) hw-hyperv-vmbus-Fix-32bit-compilation.patch linux-user-properly-test-for-infinite-ti.patch Switch-order-of-libraries-for-mpath-supp.patch (fixed differently) Conditionalize-ui-bitmap-installation-be.patch (fixed differently) hw-usb-hcd-xhci-Fix-GCC-9-build-warning.patch (no longer using gcc9) hw-usb-dev-mtp-Fix-GCC-9-build-warning.patch (no longer using gcc9) roms-Makefile-enable-cross-compile-for-b.patch (fixed with different patch) libvhost-user-handle-endianness-as-manda.patch virtio-add-vhost-user-fs-ccw-device.patch Fix-s-directive-argument-is-null-error.patch build-Workaround-compilation-error-with-.patch build-Be-explicit-about-fcommon-compiler.patch intel-Avoid-spurious-compiler-warning-on.patch golan-Add-explicit-type-casts-for-nodnic.patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch ensure-headers-included-are-compatible-w.patch Enable-cross-compile-prefix-for-C-compil.patch (fixed differently) hw-net-net_tx_pkt-fix-assertion-failure-.patch hw-net-xgmac-Fix-buffer-overflow-in-xgma.patch s390x-protvirt-allow-to-IPL-secure-guest.patch usb-fix-setup_len-init-CVE-2020-14364.patch * Patches added: meson-install-ivshmem-client-and-ivshmem.patch Revert-roms-efirom-tests-uefi-test-tools.patch Makefile-Don-t-check-pc-bios-as-pre-requ.patch roms-Makefile-add-cross-file-to-qboot-me.patch qboot-add-cross.ini-file-to-handle-aarch.patch usb-Help-compiler-out-to-avoid-a-warning.patch - In spec file, where reasonable, switch BuildRequires: XXX-devel to be pkgconfig(XXX') instead - No longer disable link time optimization for qemu for x86. It looks like either the build service, qemu code changes and/or the switch to meson have resolved issues previously seen there. We still see problems for other architectures however. - For the record, the following issues reported for SUSE SLE15-SP2 are either fixed in this current package, or are otherwise no longer an issue: bsc#1172384 bsc#1174386 bsc#1174641 bsc#1174863 bsc#1175370 bsc#1175441 bsc#1176494 CVE-2020-13361 CVE-2020-14364 CVE-2020-15863 CVE-2020-16092 CVE-2020-24352 and the following feature requests are satisfied by this package: jsc#SLE-13689 jsc#SEL-13780 jsc#SLE-13840 - To be more accurate, and to align with other qemu packaging practices, rename the qemu-s390 package to qemu-s390x. The old name (in the rpm namespace) is provided with a "Provides" directive, and an "Obsoletes" done against that name for prior qemu versions, as is standard practice (boo#1177764 jsc#SLE-17060) - Take this opportunity to remove some ancient Split-Provides mechanisms which can't conceivably be needed any more: qemu-block-curl provided: qemu:%_libdir/%name/block-curl.so qemu-guest-agent provided: qemu:%_bindir/qemu-ga qemu-tools provided: qemu:%_libexecdir/qemu-bridge-helper- Disable linux-user 'ls' test on 32 bit arm. It's failing with "Allocating guest commpage: Cannot allocate memory" error, which we should hunt down, but for now we don't want it to prevent the package from being built- Be more careful about what directives are used for qemu-testsuite- Fix some spec file 'Requires' statements to be accurate to the new model of relying on system-user-qemu and system-group-kvm to provide the needed users and groups- Added io_uring support.- A patch has been applied to virt-manager to handle qemu spice related modules not being present, so undo the change from Sep 30, 2020. Once again qemu-hw-display-qxl and qemu-hw-usb-redirect are Recommends and not Required by the qemu package (boo#1157320 boo#1176517, boo#1178141) - For jsc#SLE-11629, change qemu, qemu-tools, and qemu-guest-agent to rely on system-user-qemu and system-group-kvm to provide now static system UIDs and GID's for qemu user and group, and kvm group. This will make guest migration more seamless for new installations since there is no chance of having required ID's differ in value.- Add virtio-fs support for s390x (jsc#SLE-13822) libvhost-user-handle-endianness-as-manda.patch virtio-add-vhost-user-fs-ccw-device.patch- Note: As part of the "Close the Leap Gap" effort, it's been decided that our SDL2 support in qemu is not worth trying to maintain. Long ago SLE qemu stopped including SDL2 support and now we will do the same for the openSUSE releases going forward. Accordingly SDL2 options are now configured out, and the two sub- packages which are SDL2 specific, namely qemu-audio-sdl and qemu-ui-sdl, are no longer generated, and due to the rpm package conflicts used for those packages, they will be uninstalled from systems as qemu updates move forward - Drop e2fsprogs-devel and libpcap-devel as BuildRequires packages. They have not actually been needed to build qemu for a very long time - Add more forsplits files- Create qemu-skiboot sub-package. Use update-alternatives mechanism to coordinate with opal-firmware (provided with skiboot package set) on the provider of the /usr/share/qemu/skiboot.lid firmware file. qemu-skiboot uses a priority of 15, while opal-firmware uses a priority of 10 (jsc#SLE-13240)- Undo part of the split-provides recently done. We have to wait on virt-manager to handle qemu modularization better before we make qemu-hw-display-qxl and qemu-hw-usb-redirect non-required (boo#1157320 boo#1176517)- Fix spec file, where a conditional macro didn't have the correct syntax (bsc#1176766)- Change qemu-x86 packaging relationship with qemu-microvm from Requires to Recommends- In an effort to "Close the Leap Gap", remove use of is_opensuse from the spec file, so that the same packages built for SLE can be reused for Leap. Some sub-packages will not be included for SLE which are included for Leap. They wil be provided in Package Hub for SLE users as unsupported packages. (jsc#SLE-11660, jsc#SLE-11661, jsc#SLE-11662, jsc#SLE-11691, jse#SLE-11692, jsc#SLE-11894)- Add infrastructure to do package splits when split-off package isn't required and doesn't (otherwise) include any previously installed files. This version of qemu has split out non-essential functionality into loadable modules, as noted in Aug 20, 2020 log entry, which describes the emergency Split-Provides. That approach will be superseded by this planned approach, and those dummy doc files will be removed in time Here is the new mapping: subpackage continuity file provided (files are dummies) ========== ============================================ qemu-chardev-baum /usr/share/qemu/forsplits/00 qemu-hw-display-qxl /usr/share/qemu/forsplits/01 qemu-hw-usb-redirect /usr/share/qemu/forsplits/02 qemu-hw-usb-smartcard /usr/share/qemu/forsplits/03- Fix path of qemu-pr-helper. It was a mistake to move it from %_bindir to _libexecdir. In more recent qemu code it's been moved back, so undo this mistake by providing it at the same location as it has been all along- For SLE15-SP3, note that this update to v5.1.0 is a step towards fulfilling jsc#SLE-13689, which asks for qemu v5.2.0 or higher- Fix some shell syntax in update_git.sh, esp. an issue exposed by the most recent patch added- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441) usb-fix-setup_len-init-CVE-2020-14364.patch - Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, JIRA, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2020-1983 CVE-2020-10761 CVE-2020-13361 CVE-2020-13362 CVE-2020-13659 CVE-2020-13800 * bsc#1167816 bsc#1170940 boo#1171712 bsc#1172383 bsc#1172384 bsc#1172386 bsc#1172495 bsc#1172710 * Patches dropped (SLE) (included in current release tarball): exec-set-map-length-to-zero-when-returni.patch i386-acpi-Remove-_HID-from-the-SMBus-ACP.patch megasas-use-unsigned-type-for-reply_queu.patch- Fix compilation errors seen with pre-release gcc 11 qht-Revert-some-constification-in-qht.c.patch Revert-qht-constify-qht_statistics_init.patch help-compiler-out-by-initializing-array.patch s390x-Fix-stringop-truncation-issue-repo.patch - Add Split-Provides mechanism, using doc files which were moved in v5.1.0. This allows for the new subpackages to be selected for install when the v5.0.0 qemu is updated. These new subpackages are not marked as "Required" by any packages, in an effort to reduce the dependencies of the core qemu components (boo#1175320) v5.0.0 qemu file mapping is provided as follows: subpackage continuity file provided (files are dummies) ========== ============================================ qemu-chardev-baum /usr/share/doc/packages/qemu/qemu-ga-ref.html qemu-hw-display-qxl /usr/share/doc/packages/qemu/qemu-ga-ref.txt qemu-hw-usb-redirect /usr/share/doc/packages/qemu/qemu-qmp-ref.html qemu-hw-usb-smartcard /usr/share/doc/packages/qemu/qemu-qmp-ref.txt- Fix wrong usage of %{_libexecdir} for systemd owned paths below %{_prefix}/lib.- Update to v5.1.0: See http://wiki.qemu.org/ChangeLog/5.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * s390: Protected virtualization (secure execute) is fully merged upstream * s390: vfio-ccw devices no longer require setting the allow prefetch bit in the ORB, but is still dependent on host kernel support * s390: vfio-ccw now has basic support for relaying path state changes to the guest * PowerPC: pseries: NVDIMMs require label-size property * PowerPC: pseries: POWER10 support * PowerPC: added interface to inject POWER style NMIs * ARM: new board: sonorapass-bmc * ARM: new emulated features: ARMv8.2-TTSUXN, ARMv8.5-MemTag * ARM: Raspberry Pi boards now support a USB controller * ARM: virt board now supports hot-remove memory * RISC-V lots of improvements * qemu-img resize now requires -shrink to shrinking raw images * The mem parameter of the -numa option is no longer recognized starting with 5.1 machine types - instead use the memdev parameter * The ACPI WAET table is now exposed to guests * The max blocksize for virtual storage device is now 2 MiB * NVMe improvements * Crypto subsystem improvements * Block backends and tools: Numerous improvements and fixes * Firmware updates: SeaBIOS (essentially v1.14.0), OpenBIOS, SLOF (20200717), OpenSBI (v0.7) * Patches dropped (upstream unless otherwise noted): ati-vga-check-mm_index-before-recursive-.patch audio-fix-wavcapture-segfault.patch es1370-check-total-frame-count-against-c.patch exec-set-map-length-to-zero-when-returni.patch gcc10-maybe-uninitialized.patch hw-vfio-pci-quirks-Fix-broken-legacy-IGD.patch megasas-use-unsigned-type-for-reply_queu.patch nbd-server-Avoid-long-error-message-asse.patch ppc-spapr_caps-Don-t-disable-cap_cfpc-on.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch s390x-s390-virtio-ccw-Fix-build-on-syste.patch Sync-pv.patch tests-Disable-some-block-tests-for-now.patch (no longer needed) vga-fix-cirrus-bios.patch virtiofsd-add-rlimit-nofile-NUM-option.patch virtiofsd-stay-below-fs.file-max-sysctl-.patch * Patches renamed: build-Do-not-apply-WORKAROUND_CFLAGS-for.patch - > Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch build-Fix-s-directive-argument-is-null-e.patch - > Fix-s-directive-argument-is-null-error.patch * Patches added: hw-hyperv-vmbus-Fix-32bit-compilation.patch - New subpackages, due to modularization: qemu-chardev-baum, qemu-hw-display-qxl, qemu-hw-usb-redirect, qemu-hw-usb-smartcard - Configure to use "system" libslirp and libdaxctl (libnvdimm) when available- Don't disable cap_cfpc on POWER8 by default (bsc#1174374) ppc-spapr_caps-Don-t-disable-cap_cfpc-on.patch- Updating to Sphinx v3.1.2 in Factory is exposing an issue in qemu doc sources. Fix it docs-fix-trace-docs-build-with-sphinx-3..patch- Fix DoS possibility in ati-vga emulation (CVE-2020-13800 bsc#1172495) ati-vga-check-mm_index-before-recursive-.patch - Fix DoS possibility in Network Block Device (nbd) support infrastructure (CVE-2020-10761 bsc#1172710) nbd-server-Avoid-long-error-message-asse.patch - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386) exec-set-map-length-to-zero-when-returni.patch - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383) megasas-use-unsigned-type-for-reply_queu.patch - Fix legacy IGD passthrough hw-vfio-pci-quirks-Fix-broken-legacy-IGD.patch- The latest gcc10 available in Factory has the fix for the issue this patch was created to avoid, so drop it build-Work-around-gcc10-bug-by-not-using.patch- Switch to upstream versions of some patches we carry add-enum-cast-to-avoid-gcc10-warning.patch - > golan-Add-explicit-type-casts-for-nodnic.patch Be-explicit-about-fcommon-compiler-direc.patch - > build-Be-explicit-about-fcommon-compiler.patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch - > build-Do-not-apply-WORKAROUND_CFLAGS-for.patch Fix-s-directive-argument-is-null-error.patch - > build-Fix-s-directive-argument-is-null-e.patch Workaround-compilation-error-with-gcc-9..patch - > build-Workaround-compilation-error-with-.patch work-around-gcc10-problem-with-zero-leng.patch - > intel-Avoid-spurious-compiler-warning-on.patch - Fix vgabios issue for cirrus graphics emulation, which effectively downgraded it to standard VGA behavior vga-fix-cirrus-bios.patch- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384) es1370-check-total-frame-count-against-c.patch- Work around gcc 10 bug (boo#1172411) build-Work-around-gcc10-bug-by-not-using.patch- Now that gcc10 compatibility is figured out, remove NO_WERROR=1 again from ipxe make.- Fix segfault when doing HMP wavcapture (boo#1171712) audio-fix-wavcapture-segfault.patch- Fix DoS in virtiofsd, where a FUSE client could exhaust the number of available open files on the host (CVE-2020-10717 bsc#1171110) virtiofsd-add-rlimit-nofile-NUM-option.patch virtiofsd-stay-below-fs.file-max-sysctl-.patch- Add more fixes for gcc10 compatibility: Use NO_WERROR=1 when building ipxe sources, at least until we get gcc10 compatibility figured out. Also add patch for explicitly using -fcommon (boo#1171140) Be-explicit-about-fcommon-compiler-direc.patch and fix for tighter enum compatibility checking (boo#1171139) add-enum-cast-to-avoid-gcc10-warning.patch and a work around for what seems to be a compiler regression (boo#1171123) work-around-gcc10-problem-with-zero-leng.patch- Update to v5.0.0: See http://wiki.qemu.org/ChangeLog/5.0 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * x86: EPYC-Rome vcpu model * x86: vcpu model fixes for EPYC, Denverton, and Icelake-Server * s390: (as previously mentioned) Protected Virtualization support: start and control guest in secure mode (bsc#1167075 jsc#SLE-7407) * s390: support for Adapter Interrupt Suppression while running in KVM mode * PowerPC: pseries: NVDIMMs with file backend supported * PowerPC: powernv: KVM guests now runnable under TCG emulation * PowerPC: powernv: Basic POWER10 support * ARM: new boards: tacoma-bmc, Netduindo Plus 2, Orangepi PC * ARM: 'virt' machine now supports vTPM and virtio-iommu devices * ARM:Cortex-M7 CPU support * ARM: Lots of architecture features now emulated * ARM: TPM supported * ARM: Timekeeping improvements * ARM: LOTS more - refer to upstream changelog * virtio-iommu * VNC compatibility with noVNC improved * Support for using memory backends for main/"built-in" guest RAM * hostmem backends can now specify prealloc thread count * Better Azure compatibility of VHD images * Ceph namespaces supported * Compress block filter driver can create compressed backup images * virtiofsd availble for host filesystem passthrough * Improved html based documentation is provided with this release * Live migration support for external processes running on QEMU D-Bus * Patches dropped (upstream unless otherwise noted): i386-Add-MSR-feature-bit-for-MDS-NO.patch i386-Add-macro-for-stibp.patch i386-Add-new-CPU-model-Cooperlake.patch arm-arm-powerctl-set-NSACR.-CP11-CP10-bi.patch iotests-Skip-test-060-if-it-is-not-possi.patch iotests-Skip-test-079-if-it-is-not-possi.patch Revert-qemu-options.hx-Update-for-reboot.patch iotests-Provide-a-function-for-checking-.patch Fix-double-free-issue-in-qemu_set_log_fi.patch iotests-Fix-IMGOPTSSYNTAX-for-nbd.patch virtio-blk-fix-out-of-bounds-access-to-b.patch block-Activate-recursively-even-for-alre.patch i386-Resolve-CPU-models-to-v1-by-default.patch numa-properly-check-if-numa-is-supported.patch vhost-user-gpu-Drop-trailing-json-comma.patch display-bochs-display-fix-memory-leak.patch hw-arm-smmuv3-Apply-address-mask-to-line.patch hw-arm-smmuv3-Correct-SMMU_BASE_ADDR_MAS.patch hw-arm-smmuv3-Check-stream-IDs-against-a.patch hw-arm-smmuv3-Align-stream-table-base-ad.patch hw-arm-smmuv3-Use-correct-bit-positions-.patch hw-arm-smmuv3-Report-F_STE_FETCH-fault-a.patch block-Add-bdrv_qapi_perm_to_blk_perm.patch blkdebug-Allow-taking-unsharing-permissi.patch virtio-add-ability-to-delete-vq-through-.patch virtio-update-queue-size-on-guest-write.patch virtio-don-t-enable-notifications-during.patch numa-Extend-CLI-to-provide-initiator-inf.patch numa-Extend-CLI-to-provide-memory-latenc.patch numa-Extend-CLI-to-provide-memory-side-c.patch hmat-acpi-Build-Memory-Proximity-Domain-.patch hmat-acpi-Build-System-Locality-Latency-.patch hmat-acpi-Build-Memory-Side-Cache-Inform.patch tests-numa-Add-case-for-QMP-build-HMAT.patch qcow2-bitmaps-fix-qcow2_can_store_new_di.patch backup-top-Begin-drain-earlier.patch virtio-mmio-update-queue-size-on-guest-w.patch virtio-net-delete-also-control-queue-whe.patch intel_iommu-a-fix-to-vtd_find_as_from_bu.patch target-i386-Add-new-bit-definitions-of-M.patch target-i386-Add-missed-features-to-Coope.patch hw-i386-pc-fix-regression-in-parsing-vga.patch migration-test-ppc64-fix-FORTH-test-prog.patch target-arm-Return-correct-IL-bit-in-merg.patch target-arm-Set-ISSIs16Bit-in-make_issinf.patch runstate-ignore-finishmigrate-prelaunch-.patch migration-Rate-limit-inside-host-pages.patch m68k-Fix-regression-causing-Single-Step-.patch Revert-vnc-allow-fall-back-to-RAW-encodi.patch vnc-prioritize-ZRLE-compression-over-ZLI.patch target-i386-kvm-initialize-feature-MSRs-.patch s390x-adapter-routes-error-handling.patch iscsi-Cap-block-count-from-GET-LBA-STATU.patch block-backup-fix-memory-leak-in-bdrv_bac.patch tpm-ppi-page-align-PPI-RAM.patch hw-intc-arm_gicv3_kvm-Stop-wrongly-progr.patch target-arm-fix-TCG-leak-for-fcvt-half-do.patch block-fix-memleaks-in-bdrv_refresh_filen.patch block-backup-top-fix-failure-path.patch iotests-add-test-for-backup-top-failure-.patch audio-oss-fix-buffer-pos-calculation.patch target-arm-monitor-query-cpu-model-expan.patch block-fix-crash-on-zero-length-unaligned.patch block-Fix-VM-size-field-width-in-snapsho.patch target-arm-Correct-definition-of-PMCRDP.patch block-nbd-extract-the-common-cleanup-cod.patch block-nbd-fix-memory-leak-in-nbd_open.patch virtio-crypto-do-delete-ctrl_vq-in-virti.patch virtio-pmem-do-delete-rq_vq-in-virtio_pm.patch vhost-user-blk-delete-virtioqueues-in-un.patch hw-arm-cubieboard-use-ARM-Cortex-A8-as-t.patch pc-bios-s390x-Save-iplb-location-in-lowc.patch iotests-Fix-nonportable-use-of-od-endian.patch block-qcow2-threads-fix-qcow2_decompress.patch job-refactor-progress-to-separate-object.patch block-block-copy-fix-progress-calculatio.patch block-io-fix-bdrv_co_do_copy_on_readv.patch scsi-qemu-pr-helper-Fix-out-of-bounds-ac.patch target-ppc-Fix-rlwinm-on-ppc64.patch compat-disable-edid-on-correct-virtio-gp.patch ppc-ppc405_boards-Remove-unnecessary-NUL.patch block-Avoid-memleak-on-qcow2-image-info-.patch block-bdrv_set_backing_bs-fix-use-after-.patch hmp-vnc-Fix-info-vnc-list-leak.patch migration-colo-fix-use-after-free-of-loc.patch migration-ram-fix-use-after-free-of-loca.patch qcow2-List-autoclear-bit-names-in-header.patch sheepdog-Consistently-set-bdrv_has_zero_.patch target-arm-Fix-PAuth-sbox-functions.patch tcg-i386-Fix-INDEX_op_dup2_vec.patch net-tulip-check-frame-size-and-r-w-data-.patch target-i386-do-not-set-unsupported-VMX-s.patch spapr-Fix-failure-path-for-attempting-to.patch ati-vga-Fix-checks-in-ati_2d_blt-to-avoi.patch xen-block-Fix-double-qlist-remove-and-re.patch vpc-Don-t-round-up-already-aligned-BAT-s.patch target-xtensa-fix-pasto-in-pfwait.r-opco.patch aio-wait-delegate-polling-of-main-AioCon.patch async-use-explicit-memory-barriers.patch tcg-mips-mips-sync-encode-error.patch vhost-user-gpu-Release-memory-returned-b.patch vga-Raise-VRAM-to-16-MiB-for-pc-0.15-and.patch (no pc-0.15) hw-i386-disable-smbus-migration-for-xenf.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-Move-initial-reset.patch s390x-Move-clear-reset.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-Beautify-diag308-handling.patch s390x-Add-missing-vcpu-reset-functions.patch s390-sclp-improve-special-wait-psw-logic.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch util-add-slirp_fmt-helpers.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch slirp-use-correct-size-while-emulating-c.patch tcp_emu-fix-unsafe-snprintf-usages.patch - For SLE builds, leverage the html documentation by adding a link to the SUSE specific support documentation (the *.txt support doc was slightly tweaked to be acceptable as reStructuredText for conversion to html) docs-add-SUSE-support-statements-to-html.patch-Fix potential DoS in ATI VGA emulation (CVE-2020-11869 bsc#1170537) ati-vga-Fix-checks-in-ati_2d_blt-to-avoi.patch- Minor tweaks to patches and support doc- Add gcc10-maybe-uninitialized.patch in order to fix boo#1169728.- Include upstream patches targeted for the next stable release (bug fixes only) spapr-Fix-failure-path-for-attempting-to.patch target-i386-do-not-set-unsupported-VMX-s.patch target-xtensa-fix-pasto-in-pfwait.r-opco.patch tcg-i386-Fix-INDEX_op_dup2_vec.patch tcg-mips-mips-sync-encode-error.patch vhost-user-gpu-Release-memory-returned-b.patch vpc-Don-t-round-up-already-aligned-BAT-s.patch xen-block-Fix-double-qlist-remove-and-re.patch - Fix bug causing weak encryption in PAuth for ARM (CVE-2020-10702 bsc#1168681) target-arm-Fix-PAuth-sbox-functions.patch - Fix OOB in tulip NIC emulation (CVE-2020-11102 bsc#1168713 net-tulip-check-frame-size-and-r-w-data-.patch - Note that previously included patch addresses CVE-2020-1711 and bsc#1166240 iscsi-Cap-block-count-from-GET-LBA-STATU.patch - Include performance improvement (and related?) patch aio-wait-delegate-polling-of-main-AioCon.patch async-use-explicit-memory-barriers.patch - Rework previous patch at Olaf H.'s direction hw-i386-disable-smbus-migration-for-xenf.patch - Eliminate is_opensuse usage in producing seabios version string what we are doing here is just replacing the upstream string with one indicating that the openSUSE build service built it, and so just leave it as "-rebuilt.opensuse.org" - Alter algorithm used to produce "unique" symbol for coordinating qemu with the optional modules it may load. This is a reasonable relaxation for broader compatibility configure-remove-pkgversion-from-CONFIG_.patch - Tweak supported.*.txt for latest deprecations, and other fixes - Tweak update_git.sh, config.sh- One more fix is needed for: s390x Protected Virtualization support - start and control guest in secure mode (bsc#1167075 jsc#SLE-7407) s390x-s390-virtio-ccw-Fix-build-on-syste.patch- Include upstream patches targeted for the next stable release (bug fixes only) block-Avoid-memleak-on-qcow2-image-info-.patch block-bdrv_set_backing_bs-fix-use-after-.patch hmp-vnc-Fix-info-vnc-list-leak.patch migration-colo-fix-use-after-free-of-loc.patch migration-ram-fix-use-after-free-of-loca.patch ppc-ppc405_boards-Remove-unnecessary-NUL.patch qcow2-List-autoclear-bit-names-in-header.patch scsi-qemu-pr-helper-Fix-out-of-bounds-ac.patch sheepdog-Consistently-set-bdrv_has_zero_.patch- Note The previous set of s390x patches also includes the fix for: bsc#1167445- Include upstream patches targeted for the next stable release (bug fixes only) block-io-fix-bdrv_co_do_copy_on_readv.patch compat-disable-edid-on-correct-virtio-gp.patch target-ppc-Fix-rlwinm-on-ppc64.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch - s390x Protected Virtualization support - start and control guest in secure mode. (note: binary patch from patch series dropped since for s390x we rebuild the patched binary anyways) (bsc#1167075 jsc#SLE-7407) s390-sclp-improve-special-wait-psw-logic.patch s390x-Add-missing-vcpu-reset-functions.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Beautify-diag308-handling.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-Move-clear-reset.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-Move-initial-reset.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch Sync-pv.patch- Fix the issue that s390x could not read IPL channel program when using dasd as boot device (bsc#1163140) pc-bios-s390x-Save-iplb-location-in-lowc.patch- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018 bsc#1161066 CVE-2020-7039) slirp-use-correct-size-while-emulating-c.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch tcp_emu-fix-unsafe-snprintf-usages.patch util-add-slirp_fmt-helpers.patch - Replace this patch with upstream version target-arm-monitor-query-cpu-model-expan.patch- Include upstream patches targeted for the next stable release (bug fixes only) audio-oss-fix-buffer-pos-calculation.patch blkdebug-Allow-taking-unsharing-permissi.patch block-Add-bdrv_qapi_perm_to_blk_perm.patch block-backup-top-fix-failure-path.patch block-block-copy-fix-progress-calculatio.patch block-fix-crash-on-zero-length-unaligned.patch block-fix-memleaks-in-bdrv_refresh_filen.patch block-Fix-VM-size-field-width-in-snapsho.patch block-nbd-extract-the-common-cleanup-cod.patch block-nbd-fix-memory-leak-in-nbd_open.patch block-qcow2-threads-fix-qcow2_decompress.patch hw-arm-cubieboard-use-ARM-Cortex-A8-as-t.patch hw-intc-arm_gicv3_kvm-Stop-wrongly-progr.patch iotests-add-test-for-backup-top-failure-.patch iotests-Fix-nonportable-use-of-od-endian.patch job-refactor-progress-to-separate-object.patch target-arm-Correct-definition-of-PMCRDP.patch target-arm-fix-TCG-leak-for-fcvt-half-do.patch tpm-ppi-page-align-PPI-RAM.patch vhost-user-blk-delete-virtioqueues-in-un.patch virtio-add-ability-to-delete-vq-through-.patch virtio-crypto-do-delete-ctrl_vq-in-virti.patch virtio-pmem-do-delete-rq_vq-in-virtio_pm.patch- Add Obsoletes directive for qemu-audio-sdl and qemu-ui-sdl since for a qemu package upgrade from SLE12-SP5, support for SDL is dropped- Fix xenfv migration from xen host with pre-v4.0 qemu. We had previously dropped a similar patch, but have decided that for now we need to go with this type of solution (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch- Avoid query-cpu-model-expansion crashed qemu when using machine type none, patch is queued in upstream now, will update commit id later (bsc#1159443) target-arm-monitor-query-cpu-model-expan.patch- BuildRequire pkgconfig(libudev) instead of libudev-devel: Allow OBS to shortcut through -mini flavors.- Stop using system membarriers (ie switch from --enable-membarrier to --disable-membarrier). This is a blocker for using qemu in the context of containers (boo#1130134 jsc#SLE-11089) - Drop this recently added patch - in consultation with upstream it was decided it needed to be solved a different way (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch - Include upstream patches targeted for the next stable release (bug fixes only) block-backup-fix-memory-leak-in-bdrv_bac.patch iscsi-Cap-block-count-from-GET-LBA-STATU.patch s390x-adapter-routes-error-handling.patch target-i386-kvm-initialize-feature-MSRs-.patch- Include upstream patches targeted for the next stable release (bug fixes only) hw-i386-pc-fix-regression-in-parsing-vga.patch m68k-Fix-regression-causing-Single-Step-.patch migration-Rate-limit-inside-host-pages.patch migration-test-ppc64-fix-FORTH-test-prog.patch Revert-vnc-allow-fall-back-to-RAW-encodi.patch runstate-ignore-finishmigrate-prelaunch-.patch target-arm-Return-correct-IL-bit-in-merg.patch target-arm-Set-ISSIs16Bit-in-make_issinf.patch vnc-prioritize-ZRLE-compression-over-ZLI.patch- BuildRequire pkconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors. - Use systemd_ordering in place of systemd_requires: systemd is never a strict requirement for qemu; but when installing qemu on a systemd-managed system, we want system to be present first.- Fix xenfv migration from xen host with pre-v4.0 qemu (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch- Create files within bundles.tar.xz with fixed timestamp and uid- Add a %bcond_without system_membarrier along with related processing to the spec file, to better investigate running QEMU with the --disable-membarrier configure option- Include upstream patches targeted for the next stable release (bug fixes only) arm-arm-powerctl-set-NSACR.-CP11-CP10-bi.patch backup-top-Begin-drain-earlier.patch block-Activate-recursively-even-for-alre.patch display-bochs-display-fix-memory-leak.patch Fix-double-free-issue-in-qemu_set_log_fi.patch hw-arm-smmuv3-Align-stream-table-base-ad.patch hw-arm-smmuv3-Apply-address-mask-to-line.patch hw-arm-smmuv3-Check-stream-IDs-against-a.patch hw-arm-smmuv3-Correct-SMMU_BASE_ADDR_MAS.patch hw-arm-smmuv3-Report-F_STE_FETCH-fault-a.patch hw-arm-smmuv3-Use-correct-bit-positions-.patch i386-Resolve-CPU-models-to-v1-by-default.patch intel_iommu-a-fix-to-vtd_find_as_from_bu.patch iotests-Fix-IMGOPTSSYNTAX-for-nbd.patch iotests-Provide-a-function-for-checking-.patch iotests-Skip-test-060-if-it-is-not-possi.patch iotests-Skip-test-079-if-it-is-not-possi.patch numa-properly-check-if-numa-is-supported.patch qcow2-bitmaps-fix-qcow2_can_store_new_di.patch Revert-qemu-options.hx-Update-for-reboot.patch vhost-user-gpu-Drop-trailing-json-comma.patch virtio-blk-fix-out-of-bounds-access-to-b.patch virtio-mmio-update-queue-size-on-guest-w.patch virtio-net-delete-also-control-queue-whe.patch virtio-update-queue-size-on-guest-write.patch - Include performance improvement virtio-don-t-enable-notifications-during.patch - Repair incorrect packaging references to Jira tracked features- Add Cooperlake vcpu model (jsc#SLE-7923) i386-Add-MSR-feature-bit-for-MDS-NO.patch i386-Add-macro-for-stibp.patch i386-Add-new-CPU-model-Cooperlake.patch target-i386-Add-new-bit-definitions-of-M.patch target-i386-Add-missed-features-to-Coope.patch - Add HMAT support (jsc#SLE-8897) (the test case for this series isn't included because we aren't set up to handle binary patches) numa-Extend-CLI-to-provide-initiator-inf.patch numa-Extend-CLI-to-provide-memory-latenc.patch numa-Extend-CLI-to-provide-memory-side-c.patch hmat-acpi-Build-Memory-Proximity-Domain-.patch hmat-acpi-Build-System-Locality-Latency-.patch hmat-acpi-Build-Memory-Side-Cache-Inform.patch tests-numa-Add-case-for-QMP-build-HMAT.patch- Update to v4.2.0: See http://wiki.qemu.org/ChangeLog/4.2 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86: Denverton, Snowridge, and Dhyana CPU models added * x86: Latest version of all CPU models how have TSX (HLE and RTM) disabled by default * x86: Support for AVX512 BFloat16 extensions * x86: VMX features exposed more accurately and controllably * s390: TCG now implements IEP (Instruction Execution Protection) * PowerPC: POWER8 and POWER9 non-virtualized machines separated out * PowerPC: RTAS now comes from SLOF instead of QEMU itself * PowerPC: Unplug of multifunction PCI devices now unplugs the whole slot, as in x86 * ARM: Support for >256 CPUs with KVM is fixed * ARM: Memory hotplug now supported , when using UEFI, ACPI, for virt machine type * ARM: SVE support possuble now for KVM guests * ARM: ACPI generic event device can now deliver powerdown event * The backend device can be specified for a guest audio device * virtio v1.1 packed virtqueues supported * Socket based character device backends now support TCP keep-alive * Use encryption library cipher mode facilities, allowing improved performance for eg. AES-XTS encrption * Misc block device improvements, esp. with nbd - See the following few release-candidate changelog entries for additional changes related to this release - Switched package build to be out-of-tree- Update to v4.2.0-rc5: See http://wiki.qemu.org/ChangeLog/4.2- Update to v4.2.0-rc4: See http://wiki.qemu.org/ChangeLog/4.2 * Update the support documents used for SUSE SLE releases to cover this qemu release- Update to v4.2.0-rc3: See http://wiki.qemu.org/ChangeLog/4.2 * Patches dropped (upstream unless otherwise noted): ati-add-edid-support.patch ati-vga-add-rage128-edid-support.patch ati-vga-fix-ati_read.patch ati-vga-make-i2c-register-and-bits-confi.patch ati-vga-make-less-verbose.patch ati-vga-try-vga-ddc-first.patch Disable-Waddress-of-packed-member-for-GC.patch hdata-vpd-fix-printing-char-0x00.patch target-i386-add-PSCHANGE_NO-bit-for-the-.patch target-i386-Export-TAA_NO-bit-to-guests.patch vbe-add-edid-support.patch vga-add-ati-bios-tables.patch vga-add-atiext-driver.patch vga-make-memcpy_high-public.patch vga-move-modelist-from-bochsvga.c-to-new.patch * Patches added: Enable-cross-compile-prefix-for-C-compil.patch ensure-headers-included-are-compatible-w.patch roms-Makefile-enable-cross-compile-for-b.patch * Add qemu-ui-spice-app package containing ui-spice-app.so * Add qemu-microvm package containing bios-microvm.bin - Add descriptors for the 128k and 256k SeaBios firmware images - For the record, the following issues reported for SUSE SLE15-SP1 are either fixed in this current package, or are otherwise not an issue: bsc#1079730 bsc#1098403 bsc#1111025 bsc#1128106 bsc#1133031 bsc#1134883 bsc#1135210 bsc#1135902 bsc#1136540 bsc#1136778 bsc#1138534 bsc#1140402 bsc#1143794 bsc#1145379 bsc#1144087 bsc#1145427 bsc#1145436 bsc#1145774 bsc#1146873 bsc#1149811 bsc#1152506 bsc#1155812 bsc#1156642 CVE-2018-12207 CVE-2019-5008 CVE-2019-11135 CVE-2019-12068 CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 CVE-2019-15890, and the following feature requests are satisfied by this package: fate#327410 fate#327764 fate#327796 jsc#SLE-4883 jsc#SLE-6132 jsc#SLE-6237 jsc#SLE-6754- Expose pschange-mc-no "feature", indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) target-i386-add-PSCHANGE_NO-bit-for-the-.patch - Expose taa-no "feature", indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) target-i386-Export-TAA_NO-bit-to-guests.patch Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Update to v4.1.1, a stable, bug-fix-only release * Besides incorporating the following fixes we already carried, it includes about the same number of other, similar type fixes which we hadn't yet incorporated. * Patches dropped (subsumed by stable update): block-Add-bdrv_co_get_self_request.patch block-create-Do-not-abort-if-a-block-dri.patch block-file-posix-Let-post-EOF-fallocate-.patch block-file-posix-Reduce-xfsctl-use.patch block-io-refactor-padding.patch blockjob-update-nodes-head-while-removin.patch block-Make-wait-mark-serialising-request.patch block-nfs-tear-down-aio-before-nfs_close.patch coroutine-Add-qemu_co_mutex_assert_locke.patch curl-Check-completion-in-curl_multi_do.patch curl-Handle-success-in-multi_check_compl.patch curl-Keep-pointer-to-the-CURLState-in-CU.patch curl-Keep-socket-until-the-end-of-curl_s.patch curl-Pass-CURLSocket-to-curl_multi_do.patch curl-Report-only-ready-sockets.patch hw-arm-boot.c-Set-NSACR.-CP11-CP10-for-N.patch hw-core-loader-Fix-possible-crash-in-rom.patch make-release-pull-in-edk2-submodules-so-.patch memory-Provide-an-equality-function-for-.patch mirror-Keep-mirror_top_bs-drained-after-.patch pr-manager-Fix-invalid-g_free-crash-bug.patch qcow2-bitmap-Fix-uint64_t-left-shift-ove.patch qcow2-Fix-corruption-bug-in-qcow2_detect.patch qcow2-Fix-QCOW2_COMPRESSED_SECTOR_MASK.patch qcow2-Fix-the-calculation-of-the-maximum.patch roms-Makefile.edk2-don-t-pull-in-submodu.patch s390-PCI-fix-IOMMU-region-init.patch s390x-tcg-Fix-VERIM-with-32-64-bit-eleme.patch target-alpha-fix-tlb_fill-trap_arg2-valu.patch target-arm-Don-t-abort-on-M-profile-exce.patch target-arm-Free-TCG-temps-in-trans_VMOV_.patch util-iov-introduce-qemu_iovec_init_exten.patch vhost-Fix-memory-region-section-comparis.patch vpc-Return-0-from-vpc_co_create-on-succe.patch Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Fix %arm builds- Fix two issues with qcow2 image processing which could affect disk integrity qcow2-Fix-QCOW2_COMPRESSED_SECTOR_MASK.patch qcow2-bitmap-Fix-uint64_t-left-shift-ove.patch- Work around a host kernel xfs bug which can result in qcow2 image corruption block-io-refactor-padding.patch util-iov-introduce-qemu_iovec_init_exten.patch block-Make-wait-mark-serialising-request.patch block-Add-bdrv_co_get_self_request.patch block-file-posix-Let-post-EOF-fallocate-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Correct package names in _constraints after switch to multibuild.- Address potential corruption when using qcow2 images coroutine-Add-qemu_co_mutex_assert_locke.patch qcow2-Fix-corruption-bug-in-qcow2_detect.patch - Include more tweaks to our packaging workflow scripts - this will continue as we refine the scripts - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- use %gcc_version for cross compilers (boo#1153703)- Add upstream edk2 submodule fix for creating tarball - Switch to upstream patch for avoiding git ref in edk2 makefile - Fix failing block tests which aren't compatible with the configure option --enable-membarrier * Patches dropped: roms-Makefile.edk2-don-t-invoke-git-sinc.patch tests-block-io-test-130-needs-some-delay.patch * Patches added: make-release-pull-in-edk2-submodules-so-.patch roms-Makefile.edk2-don-t-pull-in-submodu.patch tests-Fix-block-tests-to-be-compatible-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Reduce the cross compiler versions we rely on - Fix some qemu-testsuite issues, reducing known error cases test-add-mapping-from-arch-of-i686-to-qe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Since our spec file has bashisms, include the following in the spec file: %define _buildshell /bin/bash- Disable some block tests which randomly fail. This is in context of the build service build of qemu-testsuite tests-Disable-some-block-tests-for-now.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Add some post v4.1.0 upstream stable patches * Patches added: mirror-Keep-mirror_top_bs-drained-after-.patch s390x-tcg-Fix-VERIM-with-32-64-bit-eleme.patch target-alpha-fix-tlb_fill-trap_arg2-valu.patch target-arm-Free-TCG-temps-in-trans_VMOV_.patch target-arm-Don-t-abort-on-M-profile-exce.patch qcow2-Fix-the-calculation-of-the-maximum.patch block-file-posix-Reduce-xfsctl-use.patch pr-manager-Fix-invalid-g_free-crash-bug.patch vpc-Return-0-from-vpc_co_create-on-succe.patch block-nfs-tear-down-aio-before-nfs_close.patch block-create-Do-not-abort-if-a-block-dri.patch curl-Keep-pointer-to-the-CURLState-in-CU.patch curl-Keep-socket-until-the-end-of-curl_s.patch curl-Check-completion-in-curl_multi_do.patch curl-Pass-CURLSocket-to-curl_multi_do.patch curl-Report-only-ready-sockets.patch curl-Handle-success-in-multi_check_compl.patch blockjob-update-nodes-head-while-removin.patch memory-Provide-an-equality-function-for-.patch vhost-Fix-memory-region-section-comparis.patch hw-arm-boot.c-Set-NSACR.-CP11-CP10-for-N.patch s390-PCI-fix-IOMMU-region-init.patch hw-core-loader-Fix-possible-crash-in-rom.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Include more tweaks to our packaging workflow scripts - Produce qemu-linux-user and qemu-testsuite via the build service multibuild capability, instead of duplicating the spec file and using package link in build service * combine qemu-linux-user spec file into main qemu spec file. Since this model uses a single changelog, here are some historicial mentions from the now unused qemu-linux-user.changes (delta from qemu's was quite minimal): - Adjust to a v5.2 linux kernel change regarding SIOCGSTAMP - Fix pwrite64/pread64 to return 0 over -1 for a zero length NULL buffer in qemu (bsc#1121600) * bsc#1112499 * Since qemu-testsuite.spec and qemu-testsuite.changes were just copies of the main qemu version nothing needs to be done there- Build opensbi from source on riscv64- Update to v4.1.0: See http://wiki.qemu.org/ChangeLog/4.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86: CPU models are now versioned * x86: CPU die topology can now be configured * x86: New Hygon Dhyana and Intel Snowridge CPU models * s390: The bios now supports IPL (boot) from ECKD DASD assigned to the guest via vfio-ccw * s390: The bios now tolerates the presence of bootmap signature entries written by zipl * PowerPC: pseries machine now supports KVM acceleration (kernel_irqchip=on) of the XIVE interrupt controller * PowerPC: pseries now supports hot-plug of PCI bridges and hot-plug and unplug of devices under PCI bridges * ARM: QEMU now supports emulating an FPU for Cortex-M CPUs, and the Cortex-M4 and Cortex-M33 now provide the FP * Python 2 support is deprecated * UEFI platform firmware binaries, and matching variable store templates are now installed * Now it's possible to specify memory-less NUMA node when using "-numa node,memdev" options * Possible to trigger self announcement on specific network interfaces * Default memory distribution between NUMA nodes is now deprecated * Fallback to normal RAM allocation if QEMU is not able to allocate from the "-mem-path" provided file/filesystem is now deprecated * virtio-gpu 2d/3d rendering may now be offloaded to an external vhost-user process, such as QEMU vhost-user-gpu * QEMU will automatically try to use the MAP_SYNC mmap flag for memory backends configured with pmem=on,share=on * Additional SeaVGABIOS patches added for vga-ati compatibility - Drop attempt at build compatibility with SLE12 - New sub-packages: qemu-edk2, qemu-vhost-user-gpu - Conditionalize building of qemu-edk2 (and leave unbuilt for now) - Implement new packaging workflow, includes no longer numbering patches, and having the "current git repo" stored with the package in the form of git bundles * Patches dropped (upstream unless otherwise noted): 0027-tests-test-thread-pool-is-racy-add-.patch 0032-tests-Fix-Makefile-handling-of-chec.patch 0034-Revert-target-i386-kvm-add-VMX-migr.patch 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-avoid-string-truncation-.patch 0040-linux-user-elfload-Fix-GCC-9-build-.patch 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch 0043-target-i386-define-md-clear-bit.patch 0045-kbd-state-fix-autorepeat-handling.patch 0046-target-ppc-ensure-we-get-null-termi.patch 0049-qxl-check-release-info-object.patch 0050-qemu-bridge-helper-restrict-interfa.patch 0051-linux-user-fix-to-handle-variably-s.patch ipxe-use-gcc6-for-more-compact-code.patch (no longer needed) (the next three are replaced by the upstream equivalent) ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch ipxe-build-Disable-gcc-address-of-packed-member-warning.patch ipxe-efi-Avoid-string-op-warning-with-cross-gcc-7-compile.patch slirp-fix-heap-overflow-in-ip_reass-on-big-packet-input.patch * Patches renamed: 0001-XXX-dont-dump-core-on-sigabort.patch - > XXX-dont-dump-core-on-sigabort.patch 0002-qemu-binfmt-conf-Modify-default-pat.patch - > qemu-binfmt-conf-Modify-default-path.patch 0003-qemu-cvs-gettimeofday.patch - > qemu-cvs-gettimeofday.patch 0004-qemu-cvs-ioctl_debug.patch - > qemu-cvs-ioctl_debug.patch 0005-qemu-cvs-ioctl_nodirection.patch - > qemu-cvs-ioctl_nodirection.patch 0006-linux-user-add-binfmt-wrapper-for-a.patch - > linux-user-add-binfmt-wrapper-for-argv-0.patch 0007-PPC-KVM-Disable-mmu-notifier-check.patch - > PPC-KVM-Disable-mmu-notifier-check.patch 0008-linux-user-binfmt-support-host-bina.patch - > linux-user-binfmt-support-host-binaries.patch 0009-linux-user-Fake-proc-cpuinfo.patch - > linux-user-Fake-proc-cpuinfo.patch 0010-linux-user-use-target_ulong.patch - > linux-user-use-target_ulong.patch 0011-Make-char-muxer-more-robust-wrt-sma.patch - > Make-char-muxer-more-robust-wrt-small-FI.patch 0012-linux-user-lseek-explicitly-cast-no.patch - > linux-user-lseek-explicitly-cast-non-set.patch 0013-AIO-Reduce-number-of-threads-for-32.patch - > AIO-Reduce-number-of-threads-for-32bit-h.patch 0014-xen_disk-Add-suse-specific-flush-di.patch - > xen_disk-Add-suse-specific-flush-disable.patch 0015-qemu-bridge-helper-reduce-security-.patch - > qemu-bridge-helper-reduce-security-profi.patch 0016-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch 0017-linux-user-properly-test-for-infini.patch - > linux-user-properly-test-for-infinite-ti.patch 0018-roms-Makefile-pass-a-packaging-time.patch - > roms-Makefile-pass-a-packaging-timestamp.patch 0019-Raise-soft-address-space-limit-to-h.patch - > Raise-soft-address-space-limit-to-hard-l.patch 0020-increase-x86_64-physical-bits-to-42.patch - > increase-x86_64-physical-bits-to-42.patch 0021-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > vga-Raise-VRAM-to-16-MiB-for-pc-0.15-and.patch 0022-i8254-Fix-migration-from-SLE11-SP2.patch - > i8254-Fix-migration-from-SLE11-SP2.patch 0023-acpi_piix4-Fix-migration-from-SLE11.patch - > acpi_piix4-Fix-migration-from-SLE11-SP2.patch 0024-Switch-order-of-libraries-for-mpath.patch - > Switch-order-of-libraries-for-mpath-supp.patch 0025-Make-installed-scripts-explicitly-p.patch - > Make-installed-scripts-explicitly-python.patch 0026-hw-smbios-handle-both-file-formats-.patch - > hw-smbios-handle-both-file-formats-regar.patch 0028-xen-add-block-resize-support-for-xe.patch - > xen-add-block-resize-support-for-xen-dis.patch 0029-tests-qemu-iotests-Triple-timeout-o.patch - > tests-qemu-iotests-Triple-timeout-of-i-o.patch 0030-tests-block-io-test-130-needs-some-.patch - > tests-block-io-test-130-needs-some-delay.patch 0031-xen-ignore-live-parameter-from-xen-.patch - > xen-ignore-live-parameter-from-xen-save-.patch 0033-Conditionalize-ui-bitmap-installati.patch - > Conditionalize-ui-bitmap-installation-be.patch 0035-tests-change-error-message-in-test-.patch - > tests-change-error-message-in-test-162.patch 0037-hw-usb-hcd-xhci-Fix-GCC-9-build-war.patch - > hw-usb-hcd-xhci-Fix-GCC-9-build-warning.patch 0038-hw-usb-dev-mtp-Fix-GCC-9-build-warn.patch - > hw-usb-dev-mtp-Fix-GCC-9-build-warning.patch 0044-hw-intc-exynos4210_gic-provide-more.patch - > hw-intc-exynos4210_gic-provide-more-room.patch 0047-configure-only-populate-roms-if-sof.patch - > configure-only-populate-roms-if-softmmu.patch 0048-pc-bios-s390-ccw-net-avoid-warning-.patch - > pc-bios-s390-ccw-net-avoid-warning-about.patch keycodemapdb-make-keycode-gen-output-reproducible.patch - > Make-keycode-gen-output-reproducible-use.patch ipxe-stub-out-the-SAN-req-s-in-int13.patch - > stub-out-the-SAN-req-s-in-int13.patch sgabios-fix-cross-build.patch deleted - > roms-sgabios-Fix-csum8-to-be-built-by-ho.patch sgabios-stable-buildid.patch - > sgabios-Makefile-fix-issues-of-build-rep.patch skiboot-gcc9-compat.patch - > Disable-Waddress-of-packed-member-for-GC.patch ipxe-stable-buildid.patch - > ipxe-Makefile-fix-issues-of-build-reprod.patch seabios-fix_cross_compilation.patch - > enable-cross-compilation-on-ARM.patch * Patches added: roms-change-cross-compiler-naming-to-be-.patch roms-Makefile.edk2-don-t-invoke-git-sinc.patch vga-move-modelist-from-bochsvga.c-to-new.patch vga-make-memcpy_high-public.patch vga-add-atiext-driver.patch vga-add-ati-bios-tables.patch vbe-add-edid-support.patch ati-add-edid-support.patch ati-vga-make-less-verbose.patch ati-vga-fix-ati_read.patch ati-vga-make-i2c-register-and-bits-confi.patch ati-vga-try-vga-ddc-first.patch ati-vga-add-rage128-edid-support.patch Fix-s-directive-argument-is-null-error.patch Workaround-compilation-error-with-gcc-9..patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch hdata-vpd-fix-printing-char-0x00.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Since we build seabios, take advantage of ability to add our own identifying version info by changing SEABIOS_EXTRAVERSION from "-prebuilt.qemu.org" to "-rebuilt.suse.com" (or "-rebuilt.opensuse.org for openSUSE releases)- Security fix for heap overflow in ip_reass on big packet input (CVE-2019-14378, bsc#1143794) slirp-fix-heap-overflow-in-ip_reass-on-big-packet-input.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0 * Patches added: 0051-linux-user-fix-to-handle-variably-s.patch- Make keycode-gen output reproducible (use SOURCE_DATE_EPOCH timestamp) keycodemapdb-make-keycode-gen-output-reproducible.patch- Security fix for null pointer dereference while releasing spice resources (CVE-2019-12155, bsc#1135902) 0049-qxl-check-release-info-object.patch - Security fix for qemu-bridge-helper ACL can be bypassed when names are too long (CVE-2019-13164, bsc#1140402) 0050-qemu-bridge-helper-restrict-interfa.patch - Replace patch 0043 with an upstream version 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- fixed regression for ksm.service was (bsc#1112646)- Content of packaged %_docdir/%name/interop/_static/ dir depends on python-Sphinx version, so lets just wildcard specifying those files, rather than trying to manage a specific file list- Last change exposed that we still do rely on python2. Make spec file adjustment- Switch from python-Sphinx to Sphinx from python variant we are building with (new Sphinx is for python3 only)- Fix a number of compatibility issues with the stricter gcc9 checks * Disable warning for taking address of packed structure members 0048-pc-bios-s390-ccw-net-avoid-warning-.patch * Fix case of strncpy where null terminated string not guaranteed 0046-target-ppc-ensure-we-get-null-termi.patch * Disable warning for taking address of packed structure members and fix case of passing null pointer as "%s" format parameter skiboot-gcc9-compat.patch - Fix configure script which caused firmware to be built in linux-user only build. 0047-configure-only-populate-roms-if-sof.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Fix regression in autorepeat key handling 0045-kbd-state-fix-autorepeat-handling.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Fix file list- Yet another gcc9 related code fix (bsc#1121464) 0044-hw-intc-exynos4210_gic-provide-more.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Switch to now upstreamed version of patch and add one more gcc9 related patch * Patches renamed: 0041-qxl-fix-Waddress-of-packed-member.patch - > 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch - Add x86 cpu feature "md-clear" (CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 bsc#1111331) 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Correct logic of which ipxe patches get included based on suse_version. We were wrongly excluding a gcc9 related patch for example- Switch to now upstreamed version of some patches * Patches renamed: 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch - > 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch - > 0039-linux-user-avoid-string-truncation-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Create /usr/share/qemu/firmware and /etc/qemu/firmware directories in support of the firmware descriptor feature now in use as of libvirt v5.2- Disable LTO as suggested by Martin Liska (boo#1133281) - Remove and obsolete qemu-oss-audio subpackage. OSS audio is very old, and we didn't really even configure the package properly for it for a very long time, so presumably there can't be any users of it as far as qemu is concerned - Avoid warnings which gcc9 complains about 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch 0037-hw-usb-hcd-xhci-Fix-GCC-9-build-war.patch 0038-hw-usb-dev-mtp-Fix-GCC-9-build-warn.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch 0040-linux-user-elfload-Fix-GCC-9-build-.patch 0041-qxl-fix-Waddress-of-packed-member.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Update to v4.0.0: See http://wiki.qemu.org/ChangeLog/4.0 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * ARM: ARMv8+ extensions for SB, PredInv, HPD, LOR, FHM, AA32HPD, PAuth, JSConv, CondM, FRINT, and BTI * ARM: new emulation support for "Musca" and "MPS2" development boards * ARM: virt: support for >255GB of RAM and u-boot "noload" image types * ARM: improved emulation of ARM PMU * HPPA: support for TLB protection IDs and TLB trace events * MIPS: support for multi-threaded TCG emulation * MIPS: emulation support for I7200 I6500 CPUs, QMP-base querying of CPU types, and improved support for SAARI and SAAR configuration registers * MIPS: improvements to Interthread Communication Unit, Fulong 2E machine types, and end-user documentation. * PowerPC: pseries/powernv: support for POWER9 large decrementer * PowerPC: pseries: emulation support for XIVE interrupt controller * PowerPC: pseries: support for hotplugging PCI host bridges (PHBs) * PowerPC: pseries: Spectre/Meltdown mitigations enabled by default, additional support for count-cache-flush mitigation * RISC-V: virt: support for PCI and USB * RISC-V: support for TSR, TW, and TVM fields of mstatus, FS field now supports three stats (dirty, clean, and off) * RISC-V: built-in gdbserver supports register lists via XML files * s390: support for z14 GA 2 CPU model, Multiple-epoch and PTFF features now enabled in z14 CPU model by default * s390: vfio-ap: now supports hot plug/unplug, and no longer inhibits memory ballooning * s390: emulation support for floating-point extension facility and vector support instructions * x86: HAX accelerator now supported POSIX hosts other than Darwin, including Linux and NetBSD * x86: Q35: advertised PCIe root port speeds will now optimally default to maximum link speed (16GT/s) and width (x32) provided by PCIe 4.0 for QEMU 4.0+ machine types; older machine types will retain 2.5GT/x1 defaults for compatibility. * x86: Xen PVH images can now be booted with "-kernel" option * Xtensa: xtfpga: improved SMP support for linux (interrupt distributor, IPI, and runstall) and new SMP-capable test_mmuhifi_c3 core configuration * Xtensa: support for Flexible length instructions extension (FLIX) * GUI: new '-display spice-app' to configure/launch a Spice client GUI with a similar UI to QEMU GTK. VNC server now supports access controls via tls-authz/sasl-authz options * QMP: support for "out-of-band" command execution, can be useful for postcopy migration recovery. Additional QMP commands for working with block devices and dirty bitmaps * VFIO: EDID interface for supported mdev (Intel vGPU for kernel 5.0+), allows resolution setting via xres/yres options. * Xen: new 'xen-disk' device which can create a Xen PV disk backend, and performance improvements for Xen PV disk backend. * Network Block Device: improved tracing and error diagnostics, improved client compatibility with buggy NBD server implementations, new - -bitmap, --list, --tls-authz options for qemu-nbd * virtio-blk now supports DISCARD and WRITE_ZEROES * qemu-test-suite output is now in TAP format * Sphinx now used for part of qemu documentation * A few more configure features are enabled: iconv, lzfse (for openSUSE) * Provide better logo icons - Made these package building changes: * Removed this token from spec file: #!BuildIgnore: gcc-PIE * Created ability to build qemu source out-of-tree * Added BSD-2-Clause license clause due to EDK II code inclusion * Patches dropped (upstream unless otherwise noted): 0010-Remove-problematic-evdev-86-key-fro.patch 0025-Fix-tigervnc-long-press-issue.patch 0026-string-input-visitor-Fix-uint64-par.patch 0027-test-string-input-visitor-Add-int-t.patch 0028-test-string-input-visitor-Add-uint6.patch 0029-tests-Add-QOM-property-unit-tests.patch 0030-tests-Add-scsi-disk-test.patch 0033-smbios-Add-1-terminator-if-any-stri.patch (different approach used) 0034-qemu-io-tests-comment-out-problemat.patch (not as needed) 0039-xen_disk-Avoid-repeated-memory-allo.patch 0041-vfio-ap-flag-as-compatible-with-bal.patch 0042-hw-s390x-Fix-bad-mask-in-time2tod.patch 0043-pcie-set-link-state-inactive-active.patch 0044-pc-piix4-Update-smbus-I-O-space-aft.patch 0045-hw-usb-fix-mistaken-de-initializati.patch 0046-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch 0047-pvrdma-release-device-resources-in-.patch 0048-rdma-check-num_sge-does-not-exceed-.patch 0049-pvrdma-add-uar_read-routine.patch 0050-pvrdma-check-number-of-pages-when-c.patch 0051-pvrdma-check-return-value-from-pvrd.patch 0052-pvrdma-release-ring-object-in-case-.patch 0053-block-Fix-hangs-in-synchronous-APIs.patch 0054-linux-user-make-pwrite64-pread64-fd.patch 0055-xen-Add-xen-v4.12-based-xc_domain_c.patch 0056-slirp-check-data-length-while-emula.patch 0057-s390x-Return-specification-exceptio.patch 0059-memory-Fix-the-memory-region-type-a.patch 0060-target-i386-sev-Do-not-pin-the-ram-.patch 0061-slirp-check-sscanf-result-when-emul.patch 0062-ppc-add-host-serial-and-host-model-.patch 0063-i2c-ddc-fix-oob-read.patch 0064-device_tree.c-Don-t-use-load_image.patch 0065-spapr-Simplify-handling-of-host-ser.patch ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch ipxe-fix-build.patch skiboot-hdata-i2c.c-fix-building-with-gcc8.patch * Patches renamed: 0011-linux-user-use-target_ulong.patch - > 0010-linux-user-use-target_ulong.patch 0012-Make-char-muxer-more-robust-wrt-sma.patch - > 0011-Make-char-muxer-more-robust-wrt-sma.patch 0013-linux-user-lseek-explicitly-cast-no.patch - > 0012-linux-user-lseek-explicitly-cast-no.patch 0014-AIO-Reduce-number-of-threads-for-32.patch - > 0013-AIO-Reduce-number-of-threads-for-32.patch 0015-xen_disk-Add-suse-specific-flush-di.patch - > 0014-xen_disk-Add-suse-specific-flush-di.patch 0016-qemu-bridge-helper-reduce-security-.patch - > 0015-qemu-bridge-helper-reduce-security-.patch 0017-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0016-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0018-linux-user-properly-test-for-infini.patch - > 0017-linux-user-properly-test-for-infini.patch 0019-roms-Makefile-pass-a-packaging-time.patch - > 0018-roms-Makefile-pass-a-packaging-time.patch 0020-Raise-soft-address-space-limit-to-h.patch - > 0019-Raise-soft-address-space-limit-to-h.patch 0021-increase-x86_64-physical-bits-to-42.patch - > 0020-increase-x86_64-physical-bits-to-42.patch 0022-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0021-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0023-i8254-Fix-migration-from-SLE11-SP2.patch - > 0022-i8254-Fix-migration-from-SLE11-SP2.patch 0024-acpi_piix4-Fix-migration-from-SLE11.patch - > 0023-acpi_piix4-Fix-migration-from-SLE11.patch 0031-Switch-order-of-libraries-for-mpath.patch - > 0024-Switch-order-of-libraries-for-mpath.patch 0032-Make-installed-scripts-explicitly-p.patch - > 0025-Make-installed-scripts-explicitly-p.patch 0035-tests-test-thread-pool-is-racy-add-.patch - > 0027-tests-test-thread-pool-is-racy-add-.patch 0036-xen-add-block-resize-support-for-xe.patch - > 0028-xen-add-block-resize-support-for-xe.patch 0037-tests-qemu-iotests-Triple-timeout-o.patch - > 0029-tests-qemu-iotests-Triple-timeout-o.patch 0038-tests-block-io-test-130-needs-some-.patch - > 0030-tests-block-io-test-130-needs-some-.patch 0040-xen-ignore-live-parameter-from-xen-.patch - > 0031-xen-ignore-live-parameter-from-xen-.patch 0058-Revert-target-i386-kvm-add-VMX-migr.patch - > 0034-Revert-target-i386-kvm-add-VMX-migr.patch * Patches added: 0026-hw-smbios-handle-both-file-formats-.patch 0032-tests-Fix-Makefile-handling-of-chec.patch 0033-Conditionalize-ui-bitmap-installati.patch 0035-tests-change-error-message-in-test-.patch ipxe-efi-Avoid-string-op-warning-with-cross-gcc-7-compile.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Adjust fix for CVE-2019-8934 (bsc#1126455) to match the latest upstream adjustments for the same. Basically now the security fix is to provide a dummy host-model and host-serial value, which overrides getting that value from the host 0065-spapr-Simplify-handling-of-host-ser.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Tweak last spec file change to guard new Requires with conditional - Fix DOS possibility in device tree processing (CVE-2018-20815 bsc#1130675) 0064-device_tree.c-Don-t-use-load_image.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Remove an unneeded BuildRequires which impacts bsc#1119414 fix Also add a corresponding Recommends for qemu-tools as part of this packaging adjustment (bsc#1130484) - Fix information leak in slirp (CVE-2019-9824 bsc#1129622) 0061-slirp-check-sscanf-result-when-emul.patch - Add method to specify whether or not to expose certain ppc64 host information, which can be considered a security issue (CVE-2019-8934 bsc#1126455) 0062-ppc-add-host-serial-and-host-model-.patch - Fix OOB memory access and information leak in virtual monitor interface (CVE-2019-03812 bsc#1125721) 0063-i2c-ddc-fix-oob-read.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Again address ipxe GCC 9 incompatibilities. Previously included patch to disable unneeded warning got muffed somehow (bsc#1121464)- Package and cross-build rom files for aarch64 from SLE15/Leap15.0 to fix boo#1125964 - Add patch to fix seabios cross-compilation: * seabios-fix_cross_compilation.patch - Add patch to fix sgabios cross-compilation: * sgabios-fix-cross-build.patch- Fix _constraints to include all architectures for disk size (fix aarch64)- Revert upstream patch which declares x86 vmx feature a migration blocker. Given the proliferation of using vm's with host features passed through and the general knowledge that nested virtualization has many usage caveats, but still gets put in use in restricted scenarios, this patch did more harm than good, I feel. So despite this relaxation, please consider yourself warned that nested virtualization is not yet a supportable feature. (bsc#1121604) 0058-Revert-target-i386-kvm-add-VMX-migr.patch - Fix SEV VM device assignment (bsc#1123205) 0059-memory-Fix-the-memory-region-type-a.patch 0060-target-i386-sev-Do-not-pin-the-ram-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Remove 71-sev.rules, which modifies the default permissions of /dev/sev by adding the kvm group as reader/writer. Upstream decided to take a different approach for libvirt to manage SEV due to security concerns which I agree overrides the convenience of providing /dev/sev access to all the kvm group (bsc#1124842 bsc#1102604)- Increase memory needed to build qemu-testsuite for ppc* arch's in _constraints file- Return specification exception for unimplemented diag 308 subcodes rather than a hardware error (bsc#1123179) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0057-s390x-Return-specification-exceptio.patch- Fix OOB issue in slirp (CVE-2019-6778 bsc#1123156) 0056-slirp-check-data-length-while-emula.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 - Fix ipxe GCC 9 incompatibilities (bsc#1121464) ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch ipxe-build-Disable-gcc-address-of-packed-member-warning.patch- Tweak Xen interface to be compatible with upcoming v4.12 Xen 0055-xen-Add-xen-v4.12-based-xc_domain_c.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0054-linux-user-make-pwrite64-pread64-fd.patch (bsc#1121600)- Clarify that move to include v3.1.0 in qemu package corresponds with fate#327089, which of course builds on v3.0.0 mentioned previously, and that among other patches which this change obsoletes (because functionality is included in base version) I will mention one pointed out by reviewers: 0094-s390x-cpumodels-add-z14-Model-ZR1.patch- include post v3.1.0 patches marked for next stable release: 0041-vfio-ap-flag-as-compatible-with-bal.patch 0042-hw-s390x-Fix-bad-mask-in-time2tod.patch 0043-pcie-set-link-state-inactive-active.patch 0044-pc-piix4-Update-smbus-I-O-space-aft.patch 0045-hw-usb-fix-mistaken-de-initializati.patch - Address various security/stability issues * Fix host access vulnerability in usb-mtp infrastructure (CVE-2018-16872 bsc#1119493) 0046-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch * Fix DoS in pvrdma interface (CVE-2018-20123 bsc#1119437) 0047-pvrdma-release-device-resources-in-.patch * Fix OOB access issue in rdma backend (CVE-2018-20124 bsc#1119840) 0048-rdma-check-num_sge-does-not-exceed-.patch * Fix NULL pointer reference in pvrdma emulation (CVE-2018-20191 bsc#1119979) 0049-pvrdma-add-uar_read-routine.patch * Fix DoS in pvrdma interface (CVE-2018-20125 bsc#1119989) 0050-pvrdma-check-number-of-pages-when-c.patch * Fix DoS in pvrdma interface (CVE-2018-20216 bsc#1119984) 0051-pvrdma-check-return-value-from-pvrd.patch * Fix DoS in pvrdma interface (CVE-2018-20126 bsc#1119991) 0052-pvrdma-release-ring-object-in-case-.patch - one more post v3.1.0 patches marked for next stable release: 0053-block-Fix-hangs-in-synchronous-APIs.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0040-xen-ignore-live-parameter-from-xen-.patch (bsc#1079730, bsc#1101982, bsc#1063993)- Follow up on ideas prompted by last change: clean up the patches generated by git workflow. There is no value to the first line (mbox From line), or [PATCH] on subject line. Get rid of those - Other minor fixes and improvements to update_git.sh- Modify update_git.sh script: pass --zero-commit to format-patch This removes needless noise in the buildservice when the same set of patches is imported/exported at different times by different users. pass --no-signature to format-patch Remove sed call which used to remove the signature, use mv instead- Use /bin/bash to echo value into sys fs for ksm control (bsc#1112646)- fix memory leak in xen_disk (bsc#1100408) 0039-xen_disk-Avoid-repeated-memory-allo.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- building against xen-devel requires the XC_* compat macros to be set because this version of QEMU will be built against many versions of Xen. configure will decide on the appropriate function names it knows about today. To actually call these functions, future versions of Xen may require XC_* to be set. Furthermore, fix a bug in QEMU: xen_common.h undefines the XC_* macros unconditionally.- Update to v3.1.0: See http://wiki.qemu.org/ChangeLog/3.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86 IceLake-Server and IceLake-Client cpu models added * Document recommendations for choosing cpu modesl for x86 guests * Support for Hyper-V enlightened VMCS * stdvga and bochs-display devices can expose EDID information to the guest. stdvga xres and yres properties are exposed in the EDID information * s390 improvements: vfio-ap crypto device support, max-cpu model added, etoken support, huge page backing support * ARM: ARMv6M architecture and Cortex-M0 cpu host support added, Cortex-A72 cpu model added, GICv2 virtualization extensions, emulation of AArch32 virtualization, Scalable Vector Extension implemented * Support for AMD IOMMU interrupt remapping and guest virtual APIC mode * Multithreaded TCG on x86 is considered supportable * Add a patch to triple timeout of block io tests, since the obs environment is fickle * x86 save/restore and live migration is prohibited if Intel KVM nested virtualization is enabled * Patches dropped (upstream unless otherwise noted): 0033-migration-warn-about-inconsistent-s.patch (shouldn't be needed anymore) 0035-configure-Modify-python-used-for-io.patch (upstream now python3 friendly) 0039-tests-boot-serial-test-Bump-timeout.patch 0040-linux-headers-update.patch 0041-s390x-kvm-add-etoken-facility.patch 0042-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch 0043-configure-require-libseccomp-2.2.0.patch 0044-seccomp-set-the-seccomp-filter-to-a.patch 0045-sandbox-disable-sandbox-if-CONFIG_S.patch 0046-seccomp-check-TSYNC-host-capability.patch 0047-linux-user-init_guest_space-Try-to-.patch 0048-ne2000-fix-possible-out-of-bound-ac.patch 0049-rtl8139-fix-possible-out-of-bound-a.patch 0050-pcnet-fix-possible-buffer-overflow.patch 0051-net-ignore-packet-size-greater-than.patch 0052-lsi53c895a-check-message-length-val.patch 0053-nvme-fix-oob-access-issue-CVE-2018-.patch (fixed differently upstream) * Patches renamed: 0034-smbios-Add-1-terminator-if-any-stri.patch - > 0033-smbios-Add-1-terminator-if-any-stri.patch 0036-qemu-io-tests-comment-out-problemat.patch - > 0034-qemu-io-tests-comment-out-problemat.patch 0037-tests-test-thread-pool-is-racy-add-.patch - > 0035-tests-test-thread-pool-is-racy-add-.patch 0038-xen-add-block-resize-support-for-xe.patch - > 0036-xen-add-block-resize-support-for-xe.patch * Patches added: 0037-tests-qemu-iotests-Triple-timeout-o.patch 0038-tests-block-io-test-130-needs-some-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 - Update includes the following bug fixes: bsc#1108474, bsc#1117615 - Update includes the following SLE requested functionality: FATE#324810, FATE#325875, FATE#326369, FATE#326378, FATE#326379, FATE#326401, FATE#326672, FATE#326829 - Make the following packaging changes related to the new release * Enable libpmem, pvrdma, vhost-crypto features and qemu-block-nfs subpackage * New roms available: vgabios-bochs-display.bin, vgabios-ramfb.bin * New binary tool included (qemu-edid) for testing the new qemu edid generator - Tweaked patches we carry to pass qemu's checkpatch checker - Modify update_git.sh script to enable packaging qemu from development time sources, not just at release time - Removed erroneous (and now useless) tests for tar and gzip formats - Don't exclude s390x anymore from building the qemu-testsuite - Based on current OBS building observations make changes to storage and memory requires specified in the _constraints file- Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, FATE, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2018-10839 CVE-2018-16847 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 CVE-2018-18849 * bsc#1110910 bsc#1111006 bsc#1111010 bsc#1111013 bsc#1114422 bsc#1114529 * Patches added: 0047-linux-user-init_guest_space-Try-to-.patch 0048-ne2000-fix-possible-out-of-bound-ac.patch 0049-rtl8139-fix-possible-out-of-bound-a.patch 0050-pcnet-fix-possible-buffer-overflow.patch 0051-net-ignore-packet-size-greater-than.patch 0052-lsi53c895a-check-message-length-val.patch 0053-nvme-fix-oob-access-issue-CVE-2018-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0* Adding changes to mitigate seccomp vulnerability (CVE-2018-15746 bsc#1106222) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0 * Patches added: 0042-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch 0043-configure-require-libseccomp-2.2.0.patch 0044-seccomp-set-the-seccomp-filter-to-a.patch 0045-sandbox-disable-sandbox-if-CONFIG_S.patch 0046-seccomp-check-TSYNC-host-capability.patch- Do more misc spec file fixes: * Be explicit in spec file about Version used for all subpackages (again, to avoid subpackage ordering issues). Default Release tag is also brought in by obs format_spec_file service * Delete binary blob s390-netboot.img, which we rebuild * Don't provide separate Url for qemu-kvm package - the main qemu website provides easily findable link for kvm specifics * Associate petalogix-ml605.dtb with qemu-extra instead of qemu-ppc * More entry sorting- Correct some versioning as follows: * Accurately reflect the qemu-ipxe package version value by adding "+" at the end * Don't overwrite seabios .version file, since now (for quite some time actually) upstream tarball creation creates this file and the value we are writing to it is actually wrong - Make spec file improvements, including the following: * Add qemu.keyring to enable package source verification * Create srcname macro to identify source file name separately from package name * Create alternate to %version to avoid subpackage ordering causing inadvertantly wrong %version value at point of use * Sort some entries * Be more consistent with macro syntax usage * Minor file tweaks as done by osc format_spec_file service- Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, FATE, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2018-11806 CVE-2018-12617 CVE-2018-7550 CVE-2018-15746 * fate#325467 * bsc#1091695 bsc#1094725 bsc#1094913 bsc#1096223 bsc#1098735 bsc#1103628 bsc#1105279 bsc#1106222 bsc#1106222 bsc#1107489 * Patches added: * only enable glusterfs for openSUSE 0040-linux-headers-update.patch 0041-s390x-kvm-add-etoken-facility.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Increase timeout for boot-serial-test, since we've hit the timeout for armv7l arch in qemu-testsuite. 0039-tests-boot-serial-test-Bump-timeout.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Drop legacy kvm_stat script and man page. We'll rely on the kvm_stat package only going forward kvm_stat kvm_stat.1.gz - Update SLE support documentation to match v3.0.0 release- Update to v3.0.0: See http://wiki.qemu.org/ChangeLog/3.0 Don't read anything into the major version number update. It's been decided to increase the major version number each year. Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package. Some noteworthy changes: * Support for additional x86/AMD mitigations against Speculative Store Bypass (Spectre Variant 4, CVE-2018-3639) * Improved support for nested KVM guests running on Hyper-V * Block device support for active disk-mirroring, which avoids convergence issues which may arise when doing passive/background mirroring of busy devices * Improved support for AHCI emulation, SCSI emulation, and persistent reservations / cluster management * OpenGL ES support for SDL front-end, additional framebuffer device options for early boot display without using legacy VGA emulation * Live migration support for TPM TIS devices, capping bandwidth usage during post-copy migration, and recovering from a failed post-copy migration * Improved latency when using user-mode networking / SLIRP * ARM: support for SMMUv3 IOMMU when using 'virt' machine type * ARM: v8M extensions for VLLDM and VLSTM floating-point instructions, and improved support for AArch64 v8.2 FP16 extensions * ARM: support for Scalable Vector Extensions in linux-user mode * Microblaze: support for 64-bit address sizes and translation bug fixes * PowerPC: PMU support for mac99 machine type and improvements for Uninorth PCI host bridge emulation for Mac machine types * PowerPC: preliminary support for emulating POWER9 hash MMU mode when using powernv machine type * RISC-V: improvement for privileged ISA emulation * s390: support for z14 ZR1 CPU model * s390: bpb/ppa15 Spectre mitigations enabled by default for z196 and later CPU models * s390: support for configuring consoles via -serial options * Patches dropped (upstream unless otherwise noted): 0008-linux-user-fix-segfault-deadlock.patch (no longer needed) 0039-blockjob-Fix-assertion-in-block_job.patch 0041-seccomp-allow-sched_setscheduler-wi.patch Make-installed-scripts-explicitly-python3.patch (we now make python3 explicit in other patch) * Patches renamed: 0009-linux-user-binfmt-support-host-bina.patch - > 0008-linux-user-binfmt-support-host-bina.patch 0010-linux-user-Fake-proc-cpuinfo.patch - > 0009-linux-user-Fake-proc-cpuinfo.patch 0011-Remove-problematic-evdev-86-key-fro.patch - > 0010-Remove-problematic-evdev-86-key-fro.patch 0012-linux-user-use-target_ulong.patch - > 0011-linux-user-use-target_ulong.patch 0013-Make-char-muxer-more-robust-wrt-sma.patch - > 0012-Make-char-muxer-more-robust-wrt-sma.patch 0014-linux-user-lseek-explicitly-cast-no.patch - > 0013-linux-user-lseek-explicitly-cast-no.patch 0015-AIO-Reduce-number-of-threads-for-32.patch - > 0014-AIO-Reduce-number-of-threads-for-32.patch 0016-xen_disk-Add-suse-specific-flush-di.patch - > 0015-xen_disk-Add-suse-specific-flush-di.patch 0017-qemu-bridge-helper-reduce-security-.patch - > 0016-qemu-bridge-helper-reduce-security-.patch 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0017-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0019-linux-user-properly-test-for-infini.patch - > 0018-linux-user-properly-test-for-infini.patch 0020-roms-Makefile-pass-a-packaging-time.patch - > 0019-roms-Makefile-pass-a-packaging-time.patch 0021-Raise-soft-address-space-limit-to-h.patch - > 0020-Raise-soft-address-space-limit-to-h.patch 0022-increase-x86_64-physical-bits-to-42.patch - > 0021-increase-x86_64-physical-bits-to-42.patch 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0022-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0024-i8254-Fix-migration-from-SLE11-SP2.patch - > 0023-i8254-Fix-migration-from-SLE11-SP2.patch 0025-acpi_piix4-Fix-migration-from-SLE11.patch - > 0024-acpi_piix4-Fix-migration-from-SLE11.patch 0026-Fix-tigervnc-long-press-issue.patch - > 0025-Fix-tigervnc-long-press-issue.patch 0027-string-input-visitor-Fix-uint64-par.patch - > 0026-string-input-visitor-Fix-uint64-par.patch 0028-test-string-input-visitor-Add-int-t.patch - > 0027-test-string-input-visitor-Add-int-t.patch 0029-test-string-input-visitor-Add-uint6.patch - > 0028-test-string-input-visitor-Add-uint6.patch 0030-tests-Add-QOM-property-unit-tests.patch - > 0029-tests-Add-QOM-property-unit-tests.patch 0031-tests-Add-scsi-disk-test.patch - > 0030-tests-Add-scsi-disk-test.patch 0032-Switch-order-of-libraries-for-mpath.patch - > 0031-Switch-order-of-libraries-for-mpath.patch 0033-Make-installed-scripts-explicitly-p.patch - > 0032-Make-installed-scripts-explicitly-p.patch (python2->python3) 0034-migration-warn-about-inconsistent-s.patch - > 0033-migration-warn-about-inconsistent-s.patch 0035-smbios-Add-1-terminator-if-any-stri.patch - > 0034-smbios-Add-1-terminator-if-any-stri.patch 0036-configure-Modify-python-used-for-io.patch - > 0035-configure-Modify-python-used-for-io.patch 0037-qemu-io-tests-comment-out-problemat.patch - > 0036-qemu-io-tests-comment-out-problemat.patch 0038-tests-test-thread-pool-is-racy-add-.patch - > 0037-tests-test-thread-pool-is-racy-add-.patch 0040-xen-add-block-resize-support-for-xe.patch - > 0038-xen-add-block-resize-support-for-xe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604). 71-sev.rules- Update to v2.12.1, a stable, (mostly) bug-fix-only release * This update contains new mitigation functionality for CVE-2018-3639 (Speculative Store Bypass) in x86. There are also bug fixes for migration, Intel IOMMU emulation, block layer/image handling, ARM emulation, and various other areas. (Note that a number of 2.12.1 patches were already included by us previously) (CVE-2018-3639 bsc#1092885) * Patches dropped (subsumed by stable update): 0039-device_tree-Increase-FDT_MAX_SIZE-t.patch 0040-vnc-fix-use-after-free.patch 0041-ccid-Fix-dwProtocols-advertisement-.patch 0042-tcg-arm-Fix-memory-barrier-encoding.patch 0043-s390-ccw-force-diag-308-subcode-to-.patch 0044-nbd-client-fix-nbd_negotiate_simple.patch 0045-migration-block-dirty-bitmap-fix-me.patch 0046-nbd-client-Fix-error-messages-durin.patch 0047-nbd-client-Relax-handling-of-large-.patch 0048-qxl-fix-local-renderer-crash.patch 0049-tcg-Limit-the-number-of-ops-in-a-TB.patch 0050-target-arm-Clear-SVE-high-bits-for-.patch 0051-cpus-tcg-fix-never-exiting-loop-on-.patch 0052-s390x-css-disabled-subchannels-cann.patch 0053-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0054-virtio-ccw-common-reset-handler.patch 0055-s390x-ccw-make-sure-all-ccw-devices.patch 0056-blockjob-expose-error-string-via-qu.patch 0058-qemu-io-Use-purely-string-blockdev-.patch 0059-qemu-img-Use-only-string-options-in.patch 0060-nfs-Remove-processed-options-from-Q.patch 0061-i386-define-the-ssbd-CPUID-feature-.patch 0062-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0063-i386-define-the-AMD-virt-ssbd-CPUID.patch 0064-ahci-fix-PxCI-register-race.patch 0065-ccid-card-passthru-fix-regression-i.patch * Patches renamed: 0057-blockjob-Fix-assertion-in-block_job.patch - > 0039-blockjob-Fix-assertion-in-block_job.patch 0066-xen-add-block-resize-support-for-xe.patch - > 0040-xen-add-block-resize-support-for-xe.patch 0067-seccomp-allow-sched_setscheduler-wi.patch - > 0041-seccomp-allow-sched_setscheduler-wi.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fixing seccomp resourcecontrol defunct issue (bsc#1102627) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12 * Patches added: 0067-seccomp-allow-sched_setscheduler-wi.patch- Add ipxe-fix-build.patch to not error out with binutils >= 2.31 .- Remove linux-user patch which is no longer needed (bsc#1098056) * Patches dropped: 0011-linux-user-XXX-disable-fiemap.patch * Patches renamed: 0036-Remove-problematic-evdev-86-key-fro.patch - > 0011-Remove-problematic-evdev-86-key-fro.patch 0037-configure-Modify-python-used-for-io.patch - > 0036-configure-Modify-python-used-for-io.patch 0038-qemu-io-tests-comment-out-problemat.patch - > 0037-qemu-io-tests-comment-out-problemat.patch 0039-tests-test-thread-pool-is-racy-add-.patch - > 0038-tests-test-thread-pool-is-racy-add-.patch 0040-device_tree-Increase-FDT_MAX_SIZE-t.patch - > 0039-device_tree-Increase-FDT_MAX_SIZE-t.patch 0041-vnc-fix-use-after-free.patch - > 0040-vnc-fix-use-after-free.patch 0042-ccid-Fix-dwProtocols-advertisement-.patch - > 0041-ccid-Fix-dwProtocols-advertisement-.patch 0043-tcg-arm-Fix-memory-barrier-encoding.patch - > 0042-tcg-arm-Fix-memory-barrier-encoding.patch 0044-s390-ccw-force-diag-308-subcode-to-.patch - > 0043-s390-ccw-force-diag-308-subcode-to-.patch 0045-nbd-client-fix-nbd_negotiate_simple.patch - > 0044-nbd-client-fix-nbd_negotiate_simple.patch 0046-migration-block-dirty-bitmap-fix-me.patch - > 0045-migration-block-dirty-bitmap-fix-me.patch 0047-nbd-client-Fix-error-messages-durin.patch - > 0046-nbd-client-Fix-error-messages-durin.patch 0048-nbd-client-Relax-handling-of-large-.patch - > 0047-nbd-client-Relax-handling-of-large-.patch 0049-qxl-fix-local-renderer-crash.patch - > 0048-qxl-fix-local-renderer-crash.patch 0050-tcg-Limit-the-number-of-ops-in-a-TB.patch - > 0049-tcg-Limit-the-number-of-ops-in-a-TB.patch 0051-target-arm-Clear-SVE-high-bits-for-.patch - > 0050-target-arm-Clear-SVE-high-bits-for-.patch 0052-cpus-tcg-fix-never-exiting-loop-on-.patch - > 0051-cpus-tcg-fix-never-exiting-loop-on-.patch 0053-s390x-css-disabled-subchannels-cann.patch - > 0052-s390x-css-disabled-subchannels-cann.patch 0054-pc-bios-s390-ccw-struct-tpi_info-mu.patch - > 0053-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0055-virtio-ccw-common-reset-handler.patch - > 0054-virtio-ccw-common-reset-handler.patch 0056-s390x-ccw-make-sure-all-ccw-devices.patch - > 0055-s390x-ccw-make-sure-all-ccw-devices.patch 0057-blockjob-expose-error-string-via-qu.patch - > 0056-blockjob-expose-error-string-via-qu.patch 0058-blockjob-Fix-assertion-in-block_job.patch - > 0057-blockjob-Fix-assertion-in-block_job.patch 0059-qemu-io-Use-purely-string-blockdev-.patch - > 0058-qemu-io-Use-purely-string-blockdev-.patch 0060-qemu-img-Use-only-string-options-in.patch - > 0059-qemu-img-Use-only-string-options-in.patch 0061-nfs-Remove-processed-options-from-Q.patch - > 0060-nfs-Remove-processed-options-from-Q.patch 0062-i386-define-the-ssbd-CPUID-feature-.patch - > 0061-i386-define-the-ssbd-CPUID-feature-.patch 0063-i386-Define-the-Virt-SSBD-MSR-and-h.patch - > 0062-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0064-i386-define-the-AMD-virt-ssbd-CPUID.patch - > 0063-i386-define-the-AMD-virt-ssbd-CPUID.patch 0065-ahci-fix-PxCI-register-race.patch - > 0064-ahci-fix-PxCI-register-race.patch 0066-ccid-card-passthru-fix-regression-i.patch - > 0065-ccid-card-passthru-fix-regression-i.patch 0067-xen-add-block-resize-support-for-xe.patch - > 0066-xen-add-block-resize-support-for-xe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix build failure of skiboot with gcc8 compiler skiboot-hdata-i2c.c-fix-building-with-gcc8.patch- Tweak build service constraints information to avoid failures- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12 * Patches added: 0067-xen-add-block-resize-support-for-xe.patch- Tweak patch file generation to be more git version agnostic. Also change update_git.sh to not reformat spec file by default.- Looks like the right fix for the AHCI issue has been identified upstream. Turns out to also affect Linux guests as well. (bsc#1094406) * Patches dropped: 0065-Revert-replay-don-t-process-async-e.patch 0066-Revert-replay-avoid-recursive-call-.patch 0067-Revert-replay-check-return-values-o.patch 0068-Revert-replay-push-replay_mutex_loc.patch * Patches added: 0065-ahci-fix-PxCI-register-race.patch - Fix a regresssion introduced in v2.12.0 for ccid-card-passthrough (bsc#1095419) 0066-ccid-card-passthru-fix-regression-i.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix qemu-guest-agent service issue (bsc#1094898)- Spectre v4 vulnerability mitigation support for KVM guests. High level description of vulnerability: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. This change permits the new x86 cpu feature flag named "ssbd" to be presented to the guest, given that the host has this feature, and KVM exposes it to the guest as well. For this feature to be enabled, via adding it to the qemu commandline (eg: -cpu ,+spec-ctrl,+ssbd), so the guest OS can take advantage of the feature, spec-ctrl and ssbd support is also required in the host. Another new x86 cpu feature flag named "virt-ssbd" is also added to handle this vulnerability for AMD processors. (CVE-2018-3639 bsc#1092885) 0062-i386-define-the-ssbd-CPUID-feature-.patch 0063-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0064-i386-define-the-AMD-virt-ssbd-CPUID.patch - Replay code introduced an issue for AHCI emulation, where on Windows 10 I/O would stop randomly, and Windows would then reset the AHCI device. The issue is not yet fully identified, but reverting some of those changes is at least for now a workaround. (bsc#1094406) 0065-Revert-replay-don-t-process-async-e.patch 0066-Revert-replay-avoid-recursive-call-.patch 0067-Revert-replay-check-return-values-o.patch 0068-Revert-replay-push-replay_mutex_loc.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Add some upstream fixes targeted for the next stable release 0040-device_tree-Increase-FDT_MAX_SIZE-t.patch 0041-vnc-fix-use-after-free.patch 0042-ccid-Fix-dwProtocols-advertisement-.patch 0043-tcg-arm-Fix-memory-barrier-encoding.patch 0044-s390-ccw-force-diag-308-subcode-to-.patch 0045-nbd-client-fix-nbd_negotiate_simple.patch 0046-migration-block-dirty-bitmap-fix-me.patch 0047-nbd-client-Fix-error-messages-durin.patch 0048-nbd-client-Relax-handling-of-large-.patch 0049-qxl-fix-local-renderer-crash.patch 0050-tcg-Limit-the-number-of-ops-in-a-TB.patch 0051-target-arm-Clear-SVE-high-bits-for-.patch 0052-cpus-tcg-fix-never-exiting-loop-on-.patch 0053-s390x-css-disabled-subchannels-cann.patch 0054-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0055-virtio-ccw-common-reset-handler.patch 0056-s390x-ccw-make-sure-all-ccw-devices.patch 0057-blockjob-expose-error-string-via-qu.patch 0058-blockjob-Fix-assertion-in-block_job.patch 0059-qemu-io-Use-purely-string-blockdev-.patch 0060-qemu-img-Use-only-string-options-in.patch 0061-nfs-Remove-processed-options-from-Q.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix qemu-guest-agent uninstall (bsc#1093169) - Minor tweak to qemu spec file- Update to v2.12.0: See http://wiki.qemu.org/ChangeLog/2.12 Some noteworthy changes: CLI options removed: -tdf, -no-kvm-pit, -drive boot, -net channel, - net dump, -hdachs, -drive,if=scsi HMP commands removed: usb_add, usb_del, host_net_add, host_net_remove Q35 default nic now e1000e AMD SEV support - smbios supports setting data for type 11 tables audio and display support split out as modules - nic for simple creation of guest NIC and host back-end QMP monitor "out-of-band" capability lots of ARM and s390 improvements - Include more of upstream's in-tree tests in the qemu-testsuite package * Patches dropped: 0033-memfd-fix-configure-test.patch 0034-qapi-use-items-values-intead-of-ite.patch 0035-qapi-Use-OrderedDict-from-standard-.patch 0036-qapi-adapt-to-moved-location-of-Str.patch 0037-qapi-Adapt-to-moved-location-of-mak.patch 0038-qapi-remove-q-arg-to-diff-when-comp.patch 0039-qapi-ensure-stable-sort-ordering-wh.patch 0040-qapi-force-a-UTF-8-locale-for-runni.patch 0041-scripts-ensure-signrom-treats-data-.patch 0042-configure-allow-use-of-python-3.patch 0043-input-add-missing-JIS-keys-to-virti.patch 0045-pc-fail-memory-hot-plug-unplug-with.patch 0046-memattrs-add-debug-attribute.patch 0047-exec-add-ram_debug_ops-support.patch 0048-exec-add-debug-version-of-physical-.patch 0049-monitor-i386-use-debug-APIs-when-ac.patch 0050-machine-add-memory-encryption-prope.patch 0051-kvm-update-kvm.h-to-include-memory-.patch 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch 0053-target-i386-add-Secure-Encrypted-Vi.patch 0054-qmp-add-query-sev-command.patch 0055-sev-i386-add-command-to-initialize-.patch 0056-qmp-populate-SevInfo-fields-with-SE.patch 0057-sev-i386-register-the-guest-memory-.patch 0058-kvm-introduce-memory-encryption-API.patch 0059-hmp-add-info-sev-command.patch 0060-sev-i386-add-command-to-create-laun.patch 0061-sev-i386-add-command-to-encrypt-gue.patch 0062-target-i386-encrypt-bios-rom.patch 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch 0064-sev-i386-finalize-the-SEV-guest-lau.patch 0065-hw-i386-set-ram_debug_ops-when-memo.patch 0066-sev-i386-add-debug-encrypt-and-decr.patch 0067-target-i386-clear-C-bit-when-walkin.patch 0068-include-add-psp-sev.h-header-file.patch 0069-sev-i386-add-support-to-query-PLATF.patch 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch 0071-qmp-add-query-sev-launch-measure-co.patch 0072-tests-qmp-test-blacklist-query-sev-.patch 0073-sev-i386-add-migration-blocker.patch 0074-cpu-i386-populate-CPUID-0x8000_001F.patch 0075-migration-warn-about-inconsistent-s.patch 0076-smbios-support-setting-OEM-strings-.patch 0077-smbios-Add-1-terminator-if-any-stri.patch 0078-Remove-problematic-evdev-86-key-fro.patch 0079-tpm-lookup-cancel-path-under-tpm-de.patch 0080-vga-fix-region-calculation.patch skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch skiboot-libc-stdio-vsnprintf.c-add-expli.patch skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch ui-keycodemapdb-Add-missing-QKeyCode-val.patch ui-keycodemapdb-Fix-compat-with-py3-dict.patch * Patches renamed: 0044-Make-installed-scripts-explicitly-p.patch - > 0033-Make-installed-scripts-explicitly-p.patch 0075-migration-warn-about-inconsistent-s.patch - > 0034-migration-warn-about-inconsistent-s.patch 0077-smbios-Add-1-terminator-if-any-stri.patch - > 0035-smbios-Add-1-terminator-if-any-stri.patch 0078-Remove-problematic-evdev-86-key-fro.patch - > 0036-Remove-problematic-evdev-86-key-fro.patch * Patches added: 0037-configure-Modify-python-used-for-io.patch 0038-qemu-io-tests-comment-out-problemat.patch 0039-tests-test-thread-pool-is-racy-add-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix autoinstall of qemu-guest-agent by getting the modalias string right (bsc#1091143)- Guard strncpy call with GCC pragma to disable warning about possible incorrect usage, when in fact it is correct. This is for gcc 8 compatibility (bsc#1090355) ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)- fix qemu-ga service file name (bsc#1089067)- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604) 0080-vga-fix-region-calculation.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Add new look up path "sys/class/tpm" for tpm cancel path based on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615) 0079-tpm-lookup-cancel-path-under-tpm-de.patch- Fix issue with key codes in qemu v2.11 0078-Remove-problematic-evdev-86-key-fro.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11 * Patches added: 0077-smbios-Add-1-terminator-if-any-stri.patch bsc#994082 and bsc#1084316- Add support for setting OEM strings table (fate#323624) 0076-smbios-support-setting-OEM-strings-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- SLE15 KVM (as targeted for RC1) now has the feature exposed. Drop the patch. (bsc#1082276) 0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Change example qemu-ifup script to not depend on bridge-utils. Also update the paths used for ip binary.- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've carried since the initial Spectre v2 patch was added. EDX bit 27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the guest is wrong in general, since the VM doesn't directly control the scheduling of physical hyperthreads. This is left strictly to the L0 hypervisor.- Update to v2.11.1, a stable, (mostly) bug-fix-only release In addition to bug fixes, of necessity fixes are needed to address the Spectre v2 vulnerability by passing along to the guest new hardware features introduced by host microcode updates. A January 2018 release of qemu initially addressed this issue by exposing the feature for all x86 vcpu types, which was the quick and dirty approach, but not the proper solution. We remove that initial patch and now rely on the upstream solution. This update instead defines spec_ctrl and ibpb cpu feature flags as well as new cpu models which are clones of existing models with either -IBRS or -IBPB added to the end of the model name. These new vcpu models explicitly include the new feature(s), whereas the feature flags can be added to the cpu parameter as with other features. In short, for continued Spectre v2 protection, ensure that either the appropriate cpu feature flag is added to the QEMU command-line, or one of the new cpu models is used. Although migration from older versions is supported, the new cpu features won't be properly exposed to the guest until it is restarted with the cpu features explicitly added. A reboot is insufficient. A warning patch is added which attempts to detect a migration from a qemu version which had the quick and dirty fix (it only detects certain cases, but hopefully is helpful.) s390x guest vulnerability to Spectre v2 is also addressed in this update by including support for bpb and ppa/stfle.81 features. (CVE-2017-5715 bsc#1068032) For additional information on Spectre v2 as it relates to QEMU, see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/ - Unfortunately, it was found that our current KVM isn't correctly indicating support for the spec-ctrl feature, so I've added a patch to still detect that support within QEMU. This is of course a temporary kludge until KVM gets fixed. (bsc#1082276) - The SEV support patches are updated to the v9 series. - Fix incompatibility with recent glibc (boo#1081154) - Add Supplements tags for the guest agent package in an attempt to auto-install for QEMU and Xen SUSE Linux guests (fate#323570) * Patches dropped (subsumed by stable update, or reworked in v9): 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch 0050-target-i386-add-memory-encryption-f.patch 0054-accel-add-Secure-Encrypted-Virtuliz.patch 0072-sev-Fix-build-for-non-x86-hosts.patch * Patches added: 0033-memfd-fix-configure-test.patch 0053-target-i386-add-Secure-Encrypted-Vi.patch 0056-qmp-populate-SevInfo-fields-with-SE.patch 0072-tests-qmp-test-blacklist-query-sev-.patch 0073-sev-i386-add-migration-blocker.patch 0074-cpu-i386-populate-CPUID-0x8000_001F.patch 0075-migration-warn-about-inconsistent-s.patch 0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch * Patches renamed (plus some minor code changes): 0051-machine-add-memory-encryption-prope.patch - > 0050-machine-add-memory-encryption-prope.patch 0052-kvm-update-kvm.h-to-include-memory-.patch - > 0051-kvm-update-kvm.h-to-include-memory-.patch 0053-docs-add-AMD-Secure-Encrypted-Virtu.patch - > 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch 0055-sev-add-command-to-initialize-the-m.patch - > 0055-sev-i386-add-command-to-initialize-.patch 0056-sev-register-the-guest-memory-range.patch - > 0057-sev-i386-register-the-guest-memory-.patch 0057-kvm-introduce-memory-encryption-API.patch - > 0058-kvm-introduce-memory-encryption-API.patch 0058-qmp-add-query-sev-command.patch - > 0054-qmp-add-query-sev-command.patch 0060-sev-add-command-to-create-launch-me.patch - > 0060-sev-i386-add-command-to-create-laun.patch 0061-sev-add-command-to-encrypt-guest-me.patch - > 0061-sev-i386-add-command-to-encrypt-gue.patch 0063-sev-add-support-to-LAUNCH_MEASURE-c.patch - > 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch 0064-sev-Finalize-the-SEV-guest-launch-f.patch - > 0064-sev-i386-finalize-the-SEV-guest-lau.patch 0066-sev-add-debug-encrypt-and-decrypt-c.patch - > 0066-sev-i386-add-debug-encrypt-and-decr.patch 0069-sev-add-support-to-query-PLATFORM_S.patch - > 0069-sev-i386-add-support-to-query-PLATF.patch 0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch - > 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Add AMD SEV (Secure Encrypted Virtualization) support by taking the v7 series of the patches posted to qemu ml. (fate#322124) 0046-memattrs-add-debug-attribute.patch 0047-exec-add-ram_debug_ops-support.patch 0048-exec-add-debug-version-of-physical-.patch 0049-monitor-i386-use-debug-APIs-when-ac.patch 0050-target-i386-add-memory-encryption-f.patch 0051-machine-add-memory-encryption-prope.patch 0052-kvm-update-kvm.h-to-include-memory-.patch 0053-docs-add-AMD-Secure-Encrypted-Virtu.patch 0054-accel-add-Secure-Encrypted-Virtuliz.patch 0055-sev-add-command-to-initialize-the-m.patch 0056-sev-register-the-guest-memory-range.patch 0057-kvm-introduce-memory-encryption-API.patch 0058-qmp-add-query-sev-command.patch 0059-hmp-add-info-sev-command.patch 0060-sev-add-command-to-create-launch-me.patch 0061-sev-add-command-to-encrypt-guest-me.patch 0062-target-i386-encrypt-bios-rom.patch 0063-sev-add-support-to-LAUNCH_MEASURE-c.patch 0064-sev-Finalize-the-SEV-guest-launch-f.patch 0065-hw-i386-set-ram_debug_ops-when-memo.patch 0066-sev-add-debug-encrypt-and-decrypt-c.patch 0067-target-i386-clear-C-bit-when-walkin.patch 0068-include-add-psp-sev.h-header-file.patch 0069-sev-add-support-to-query-PLATFORM_S.patch 0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch 0071-qmp-add-query-sev-launch-measure-co.patch 0072-sev-Fix-build-for-non-x86-hosts.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Update python3 related patches now that they are upstream- guest agent: change service file to a template so it can be used by Xen as well. Adjust udev rule accordingly. FATE#324963- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823) 0045-pc-fail-memory-hot-plug-unplug-with.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Modify BuildRequires python references - seabios also needed tweaks for python2 vs python3 * Patches added: seabios-use-python2-explicitly-as-needed.patch seabios-switch-to-python3-as-needed.patch- Try to get our story right wrt python2 vs python3 (bsc#1077564) * Get rid of use of #!/usr/bin/env python in scripts we install * include proposed upstream build system changes needed for building with python2 or python3 * Patches dropped: 0032-scripts-avoid-usr-bin-python-refere.patch * Patches renamed: 0033-Switch-order-of-libraries-for-mpath.patch - > 0032-Switch-order-of-libraries-for-mpath.patch 0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch - > 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch * Patches added: 0034-qapi-use-items-values-intead-of-ite.patch 0035-qapi-Use-OrderedDict-from-standard-.patch 0036-qapi-adapt-to-moved-location-of-Str.patch 0037-qapi-Adapt-to-moved-location-of-mak.patch 0038-qapi-remove-q-arg-to-diff-when-comp.patch 0039-qapi-ensure-stable-sort-ordering-wh.patch 0040-qapi-force-a-UTF-8-locale-for-runni.patch 0041-scripts-ensure-signrom-treats-data-.patch 0042-configure-allow-use-of-python-3.patch 0043-input-add-missing-JIS-keys-to-virti.patch 0044-Make-installed-scripts-explicitly-p.patch Make-installed-scripts-explicitly-python3.patch ui-keycodemapdb-Add-missing-QKeyCode-val.patch ui-keycodemapdb-Fix-compat-with-py3-dict.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Fix packaging dependencies (coreutils) for qemu-ksm package (bsc#1040202)- Pass through to guest info related to x86 security vulnerability (CVE-2017-5715 bsc#1068032) 0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Update to v2.11.0: See http://wiki.qemu.org/ChangeLog/2.11 Some noteworthy changes: - nodefconfig is now deprecated legacy pci-assignment code removed qemu-pr-helper added for handling guest persistant reservations (bsc#891066, bsc#910704, bsc#943807) qemu-keymap tool added for generating keymap files throttle block filter driver added support for a TPM emulator qcow2 image shrink support better support for >=64 vcpus for Windows guests nested KVM related improvements s390 pgste handling now done better EPYC cpu model added (bsc#1052825) improvements in qcow2 buffer handling vhost-user resume issue fixed migration hardening ARMv8-M security extension support more seccomp/sandboxing options available s390 cpu hot-plug improvements misc. virtfs improvements nbd improvements MTTCG improvements misc. TCG improvements scsi correctness improvements SEABIOS now has serial output option * Includes fixes for CVE-2017-15118 bsc#1070147, CVE-2017-15119 bsc#1070144 * Adds KASLR support (fate#323473, bsc#1070281) * Update SLE support docs to match this release * simplify spec file to expect at least sle_version >= 1315 * Patches dropped (upstream): 0013-console-add-question-mark-escape-op.patch 0020-configure-Fix-detection-of-seccomp-.patch 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch 0035-chardev-baum-fix-baum-that-releases.patch 0036-io-fix-temp-directory-used-by-test-.patch 0037-io-fix-check-for-handshake-completi.patch 0038-crypto-fix-test-cert-generation-to-.patch 0039-vhost-user-disable-the-broken-subpr.patch 0040-io-monitor-encoutput-buffer-size-fr.patch 0041-cirrus-fix-oob-access-in-mode4and5-.patch 0042-9pfs-use-g_malloc0-to-allocate-spac.patch * Patches renamed: 0014-Make-char-muxer-more-robust-wrt-sma.patch - > 0013-Make-char-muxer-more-robust-wrt-sma.patch 0015-linux-user-lseek-explicitly-cast-no.patch - > 0014-linux-user-lseek-explicitly-cast-no.patch 0016-AIO-Reduce-number-of-threads-for-32.patch - > 0015-AIO-Reduce-number-of-threads-for-32.patch 0017-xen_disk-Add-suse-specific-flush-di.patch - > 0016-xen_disk-Add-suse-specific-flush-di.patch 0018-qemu-bridge-helper-reduce-security-.patch - > 0017-qemu-bridge-helper-reduce-security-.patch 0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0021-linux-user-properly-test-for-infini.patch - > 0019-linux-user-properly-test-for-infini.patch 0022-roms-Makefile-pass-a-packaging-time.patch - > 0020-roms-Makefile-pass-a-packaging-time.patch 0023-Raise-soft-address-space-limit-to-h.patch - > 0021-Raise-soft-address-space-limit-to-h.patch 0024-increase-x86_64-physical-bits-to-42.patch - > 0022-increase-x86_64-physical-bits-to-42.patch 0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0026-i8254-Fix-migration-from-SLE11-SP2.patch - > 0024-i8254-Fix-migration-from-SLE11-SP2.patch 0027-acpi_piix4-Fix-migration-from-SLE11.patch - > 0025-acpi_piix4-Fix-migration-from-SLE11.patch 0028-Fix-tigervnc-long-press-issue.patch - > 0026-Fix-tigervnc-long-press-issue.patch 0029-string-input-visitor-Fix-uint64-par.patch - > 0027-string-input-visitor-Fix-uint64-par.patch 0030-test-string-input-visitor-Add-int-t.patch - > 0028-test-string-input-visitor-Add-int-t.patch 0031-test-string-input-visitor-Add-uint6.patch - > 0029-test-string-input-visitor-Add-uint6.patch 0032-tests-Add-QOM-property-unit-tests.patch - > 0030-tests-Add-QOM-property-unit-tests.patch 0033-tests-Add-scsi-disk-test.patch - > 0031-tests-Add-scsi-disk-test.patch 0043-scripts-avoid-usr-bin-python-refere.patch - > 0032-scripts-avoid-usr-bin-python-refere.patch * We need the multipath libraries link order switched 0033-Switch-order-of-libraries-for-mpath.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Avoid ref to /usr/bin/python in vmstate-static-checker.py script 0043-scripts-avoid-usr-bin-python-refere.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- For SLE15, it's been decided to stop providing SDL based graphics due to packaging constraints. Long ago GTK became the default, and there is little benefit to providing both. For now, keep it enabled for openSUSE (Tumblweed and Leap), but consider it marked deprecated there and if no one complains it will be removed for openSUSE as well in the near future. (fate#324465) - Fix problem building skiboot.lid skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch- Wrap analyze-migration and vmstate-static-checker into tools from qemu scripts folder, also changed introduction of qemu-tools in spec file - Move supportplugin position in spec file- Add announcement in support docs about qed storage format no longer being supported in next major SLE release (SLE15) (fate#324200) - Address various security/stability issues * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942) 0040-io-monitor-encoutput-buffer-size-fr.patch * Fix OOB access in cirrus vga device emulation (CVE-2017-15289 bsc#1063122) 0041-cirrus-fix-oob-access-in-mode4and5-.patch * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069) 0042-9pfs-use-g_malloc0-to-allocate-spac.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Don't tie glusterfs support to specific arch - Build skiboot firmware (OPAL), particularly since it's fairly easy to do so skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch skiboot-libc-stdio-vsnprintf.c-add-expli.patch- Added the global macro 'with_glusterfs' in order to re-enable glusterfs support. The macro enable easier future adjustments for various ARCH/targets/requiremnets. At first glusterfs support is enabled for openSUSE Leap 42.x and Factory for ARCH x86_64.- Add dependencies on ovmf (uefi) for the qemu-x86 and qemu-arm packages - Fix s390-netboot.img to be included with qemu-s390 package, not qemu-ppc- Update to v2.10.1, a stable, bug-fix-only release * fixes bsc#1056386 CVE-2017-13673, bsc#1056334 CVE-2017-13672, bsc#1057585 CVE-2017-14167 * Patches dropped (upstream): 0034-slirp-fix-clearing-ifq_so-from-pend.patch 0035-s390-ccw-Fix-alignment-for-CCW1.patch 0038-s390x-ais-for-2.10-stable-disable-a.patch 0039-s390x-cpumodel-remove-ais-from-z14-.patch * Patches renamed: 0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch - > 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch 0037-chardev-baum-fix-baum-that-releases.patch - > 0035-chardev-baum-fix-baum-that-releases.patch 0040-io-fix-temp-directory-used-by-test-.patch - > 0036-io-fix-temp-directory-used-by-test-.patch 0041-io-fix-check-for-handshake-completi.patch - > 0037-io-fix-check-for-handshake-completi.patch 0042-crypto-fix-test-cert-generation-to-.patch - > 0038-crypto-fix-test-cert-generation-to-.patch 0043-vhost-user-disable-the-broken-subpr.patch - > 0039-vhost-user-disable-the-broken-subpr.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix failures and potential failures in qemu-testsuite 0040-io-fix-temp-directory-used-by-test-.patch 0041-io-fix-check-for-handshake-completi.patch 0042-crypto-fix-test-cert-generation-to-.patch 0043-vhost-user-disable-the-broken-subpr.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix migration issue on s390 0038-s390x-ais-for-2.10-stable-disable-a.patch 0039-s390x-cpumodel-remove-ais-from-z14-.patch - Fix case of not being able to build from rpm sources due to undefined macro (boo#1057966) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix baum that release brlapi twice (bsc#1060045) 0037-chardev-baum-fix-baum-that-releases.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- For SLE15 pre-release testing, add support for the EPYC processor. This will be officially supported once it is included in the v2.11 release. (bsc#1052825) 0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch - Fix some support statements in our SLE support documents.- Update BuildRequires packages libibverbs-devel and librdmacm-devel to the more correct rdma-core-devel - Enable seccomp for s390x, aarch64, and ppc64le - Fix OOB issue (use after free) in slirp network stack (CVE-2017-13711 bsc#1056291) 0034-slirp-fix-clearing-ifq_so-from-pend.patch - Fix a misalignment in the s390 ccw firmware (bsc#1056680) 0035-s390-ccw-Fix-alignment-for-CCW1.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Add a supportconfig plugin qemu-supportconfig FATE#323661- Update to v2.10.0: See http://wiki.qemu.org/ChangeLog/2.10 - Dropped internal only patches used to support SUSE Studio Testdrive as well as other miscellaneous patches deemed unused and not worth carrying (bsc#1046783, bsc#1055125, bsc#1055127) - Update SLE support statements in anticipation of SLE15 - disable SAN boot capability from virtio pxe rom used in v1.4 and older pc machine types due to rom size requirements. Hopefully a better solution can be found which doesn't impact functionality * Patches added: ipxe-stub-out-the-SAN-req-s-in-int13.patch * Patches renamed: 0006-qemu-cvs-gettimeofday.patch -> 0003-qemu-cvs-gettimeofday.patch 0007-qemu-cvs-ioctl_debug.patch -> 0004-qemu-cvs-ioctl_debug.patch 0008-qemu-cvs-ioctl_nodirection.patch -> 0005-qemu-cvs-ioctl_nodirection.patch 0009-linux-user-add-binfmt-wrapper-for-a.patch -> 0006-linux-user-add-binfmt-wrapper-for-a.patch 0010-PPC-KVM-Disable-mmu-notifier-check.patch -> 0007-PPC-KVM-Disable-mmu-notifier-check.patch 0011-linux-user-fix-segfault-deadlock.patch -> 0008-linux-user-fix-segfault-deadlock.patch 0012-linux-user-binfmt-support-host-bina.patch -> 0009-linux-user-binfmt-support-host-bina.patch 0013-linux-user-Fake-proc-cpuinfo.patch -> 0010-linux-user-Fake-proc-cpuinfo.patch 0014-linux-user-XXX-disable-fiemap.patch -> 0011-linux-user-XXX-disable-fiemap.patch 0017-linux-user-use-target_ulong.patch -> 0012-linux-user-use-target_ulong.patch 0021-console-add-question-mark-escape-op.patch -> 0013-console-add-question-mark-escape-op.patch 0022-Make-char-muxer-more-robust-wrt-sma.patch -> 0014-Make-char-muxer-more-robust-wrt-sma.patch 0023-linux-user-lseek-explicitly-cast-no.patch -> 0015-linux-user-lseek-explicitly-cast-no.patch 0025-AIO-Reduce-number-of-threads-for-32.patch -> 0016-AIO-Reduce-number-of-threads-for-32.patch 0027-xen_disk-Add-suse-specific-flush-di.patch -> 0017-xen_disk-Add-suse-specific-flush-di.patch 0028-qemu-bridge-helper-reduce-security-.patch -> 0018-qemu-bridge-helper-reduce-security-.patch 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0030-configure-Fix-detection-of-seccomp-.patch -> 0020-configure-Fix-detection-of-seccomp-.patch 0031-linux-user-properly-test-for-infini.patch -> 0020-linux-user-properly-test-for-infini.patch 0033-roms-Makefile-pass-a-packaging-time.patch -> 0022-roms-Makefile-pass-a-packaging-time.patch 0034-Raise-soft-address-space-limit-to-h.patch -> 0023-Raise-soft-address-space-limit-to-h.patch 0035-increase-x86_64-physical-bits-to-42.patch -> 0024-increase-x86_64-physical-bits-to-42.patch 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0037-i8254-Fix-migration-from-SLE11-SP2.patch -> 0026-i8254-Fix-migration-from-SLE11-SP2.patch 0038-acpi_piix4-Fix-migration-from-SLE11.patch -> 0027-acpi_piix4-Fix-migration-from-SLE11.patch 0039-Fix-tigervnc-long-press-issue.patch -> 0028-Fix-tigervnc-long-press-issue.patch 0041-string-input-visitor-Fix-uint64-par.patch -> 0029-string-input-visitor-Fix-uint64-par.patch 0042-test-string-input-visitor-Add-int-t.patch -> 0030-test-string-input-visitor-Add-int-t.patch 0043-test-string-input-visitor-Add-uint6.patch -> 0031-test-string-input-visitor-Add-uint6.patch 0044-tests-Add-QOM-property-unit-tests.patch -> 0032-tests-Add-QOM-property-unit-tests.patch 0045-tests-Add-scsi-disk-test.patch -> 0033-tests-Add-scsi-disk-test.patch * Patches dropped (upstream unless otherwise noted): 0003-qemu-cvs-alsa_bitfield.patch (deemed not needed) 0004-qemu-cvs-alsa_ioctl.patch (deemed not needed) 0005-qemu-cvs-alsa_mmap.patch (deemed not needed) 0015-slirp-nooutgoing.patch (bsc#1055125) 0016-vnc-password-file-and-incoming-conn.patch (bsc#1055127) 0018-block-Add-support-for-DictZip-enabl.patch (bsc#1046783) 0019-block-Add-tar-container-format.patch (bsc#1046783) 0020-Legacy-Patch-kvm-qemu-preXX-dictzip.patch (bsc#1046783) 0024-configure-Enable-PIE-for-ppc-and-pp.patch (obsolete) 0026-dictzip-Fix-on-big-endian-systems.patch (bsc#1046783) 0032-linux-user-remove-all-traces-of-qem.patch 0040-fix-xen-hvm-direct-kernel-boot.patch (bsc#970791) 0046-RFC-update-Linux-headers-from-irqs-.patch 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch 0048-input-Add-trace-event-for-empty-key.patch 0049-ACPI-don-t-call-acpi_pcihp_device_p.patch 0050-i386-Allow-cpuid-bit-override.patch (was for testing only) 0051-input-limit-kbd-queue-depth.patch 0052-audio-release-capture-buffers.patch 0053-scsi-avoid-an-off-by-one-error-in-m.patch 0054-vmw_pvscsi-check-message-ring-page-.patch 0055-9pfs-local-forbid-client-access-to-.patch 0056-jazz_led-fix-bad-snprintf.patch 0057-slirp-smb-Replace-constant-strings-.patch 0058-altera_timer-fix-incorrect-memset.patch 0059-Hacks-for-building-on-gcc-7-Fedora-.patch 0060-9pfs-local-fix-unlink-of-alien-file.patch 0061-megasas-do-not-read-DCMD-opcode-mor.patch 0062-megasas-always-store-SCSIRequest-in.patch 0063-nbd-Fully-initialize-client-in-case.patch 0064-9pfs-local-remove-use-correct-path-.patch 0065-hid-Reset-kbd-modifiers-on-reset.patch 0066-input-Decrement-queue-count-on-kbd-.patch 0067-xhci-only-update-dequeue-ptr-on-com.patch 0068-vnc-Set-default-kbd-delay-to-10ms.patch 0069-qemu-nbd-Ignore-SIGPIPE.patch 0070-usb-redir-fix-stack-overflow-in-usb.patch 0072-slirp-check-len-against-dhcp-option.patch 0071-exec-use-qemu_ram_ptr_length-to-acc.patch 0073-xen-mapcache-store-dma-information-.patch 0074-exec-Add-lock-parameter-to-qemu_ram.patch 0075-Replace-struct-ucontext-with-uconte.patch ipxe-build-Avoid-implicit-fallthrough-warnings-on-GCC-7.patch ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch ipxe-ath-Add-missing-break-statements.patch ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix package build failure as of glibc v2.26 update in Factory (boo#1055587) 0075-Replace-struct-ucontext-with-uconte.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Remove redundant prerequire for pwdutils- Postrequire acl for setfacl- Prerequire shadow for groupadd- The recent security fix for CVE-2017-11334 adversely affects Xen. Include two additional patches to make sure Xen is going to be OK. 0073-xen-mapcache-store-dma-information-.patch 0074-exec-Add-lock-parameter-to-qemu_ram.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Pre-add group kvm for qemu-tools (bsc#1011144)- Fixed a few more inaccuracies in the support docs.- Address various security/stability issues * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664) 0069-qemu-nbd-Ignore-SIGPIPE.patch * Fix DOS from stack overflow in debug messages of usb redirection support (bsc#1047674 CVE-2017-10806) 0070-usb-redir-fix-stack-overflow-in-usb.patch * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902) 0071-exec-use-qemu_ram_ptr_length-to-acc.patch * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381) 0072-slirp-check-len-against-dhcp-option.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Fix support docs to indicate ARM64 is now fully L3 supported in SLES 12 SP3. Apply a few additional clarifications in the support docs. (bsc#1050268) - Adjust to libvdeplug-devel package naming changes.- Fix migration with xhci (bsc#1048296) 0067-xhci-only-update-dequeue-ptr-on-com.patch - Increase VNC delay to fix missing keyboard input events (bsc#1031692) 0068-vnc-Set-default-kbd-delay-to-10ms.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Remove build dependency package iasl used for seabios- Fixed stuck state during usb keyboard reset (bsc#1044936) 0065-hid-Reset-kbd-modifiers-on-reset.patch - Fixed keyboard events getting lost (bsc#1044936) 0066-input-Decrement-queue-count-on-kbd-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Use most recent compiler to build size-critical firmware, instead of hard-coding gcc6 for all target versions (bsc#1043390) * A few upstream ipxe patches were needed for gcc7 compatibility: ipxe-ath-Add-missing-break-statements.patch ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch - Add --no-renames to the git format-patch command in the git workflow script for better patch compatibility - Address various security/stability issues * Fix potential privilege escalation in virtfs (CVE-2016-9602 bsc#1020427) 0060-9pfs-local-fix-unlink-of-alien-file.patch * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296) 0061-megasas-do-not-read-DCMD-opcode-mor.patch 0062-megasas-always-store-SCSIRequest-in.patch * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808) 0063-nbd-Fully-initialize-client-in-case.patch * Fix regression introduced by recent virtfs security fixes (bsc#1045035) 0064-9pfs-local-remove-use-correct-path-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Backport ipxe to support FirstBurstLength (bsc#1040476) ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan) 0056-jazz_led-fix-bad-snprintf.patch 0057-slirp-smb-Replace-constant-strings-.patch 0058-altera_timer-fix-incorrect-memset.patch 0059-Hacks-for-building-on-gcc-7-Fedora-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495) 0055-9pfs-local-forbid-client-access-to-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Address various security/stability issues * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334) 0051-input-limit-kbd-queue-depth.patch * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242) 0052-audio-release-capture-buffers.patch * Fix OOB access in megasas device emulation (CVE-2017-8380 bsc#1037336) 0053-scsi-avoid-an-off-by-one-error-in-m.patch * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211) 0054-vmw_pvscsi-check-message-ring-page-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Fix building packages for some older distros. - Further refine our handling of building firmware (or not) for the various arch's and distro versions we build for. Note that if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream binary blobs are used, which may have migration incompatibilities with previous versions of qemu provided.- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen HVM guests got broken (bsc#1034131) 0049-ACPI-don-t-call-acpi_pcihp_device_p.patch - Include experimental, unsupported feature to assist in some performance analysis work. 0050-i386-Allow-cpuid-bit-override.patch- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9 - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9 * Includes fix for CVE-2017-7471, a virtfs security issue. - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Add empty keyboard queue tracepoint to help openQA testing work better (bsc#1031692) 0048-input-Add-trace-event-for-empty-key.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.9 - Enable ceph/rbd support for s390x (bsc#1030068) - Enable ceph/rbd support for ppc* as available - Update ARM in-kernel-timers patch (bsc#1033416) * Patches renamed: 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch 0042-string-input-visitor-Fix-uint64-par.patch -> 0041-string-input-visitor-Fix-uint64-par.patch 0043-test-string-input-visitor-Add-int-t.patch -> 0042-test-string-input-visitor-Add-int-t.patch 0044-test-string-input-visitor-Add-uint6.patch -> 0043-test-string-input-visitor-Add-uint6.patch 0045-tests-Add-QOM-property-unit-tests.patch -> 0044-tests-Add-QOM-property-unit-tests.patch 0046-tests-Add-scsi-disk-test.patch -> 0045-tests-Add-scsi-disk-test.patch * Patches added (support patch): 0046-RFC-update-Linux-headers-from-irqs-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.9 * Patches dropped (included in upstream source archive): 0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch 0048-i386-Replace-uint32_t-with-FeatureW.patch 0049-i386-Don-t-override-cpu-options-on-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9 - Added additional documentation provided with v2.9.0 - Fix build failure with gcc7 (bsc#1031340) ipxe-build-Avoid-implicit-fallthrough-warnings-on-GCC-7.patch - Made miscellaneous spec file refinements- The support documents included are now fairly accurate for the arm and s390 world, and the x86 version also received a few tweaks. Also included in those docs is a url reference to upstream qemu deprecation plans and discussions. (fate#321146) - Add post v2.9.0-rc2 upstream patches which fix -cpu host and -cpu max feature overrides for libvirt compatability. 0048-i386-Replace-uint32_t-with-FeatureW.patch 0049-i386-Don-t-override-cpu-options-on-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.9 * Includes fix for in guest privilege escalation when using TCG (bsc#1030624) * Patches dropped (equivalent included in upstream source archive): 0047-linux-user-exclude-cpu-model-code-w.patch - Fix failure booting SLE12-SP2 Aarch64 guest (bsc#1031384) 0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.9 * Patches dropped (no longer needed based on what we now build for): 0024-virtfs-proxy-helper-Provide-__u64-f.patch * Patches dropped (included in upstream source archive): 0034-dma-rc4030-limit-interval-timer-rel.patch * Patches renamed: 0025-configure-Enable-PIE-for-ppc-and-pp.patch -> 0024-configure-Enable-PIE-for-ppc-and-pp.patch 0026-AIO-Reduce-number-of-threads-for-32.patch -> 0025-AIO-Reduce-number-of-threads-for-32.patch 0027-dictzip-Fix-on-big-endian-systems.patch -> 0026-dictzip-Fix-on-big-endian-systems.patch 0028-xen_disk-Add-suse-specific-flush-di.patch -> 0027-xen_disk-Add-suse-specific-flush-di.patch 0029-qemu-bridge-helper-reduce-security-.patch -> 0028-qemu-bridge-helper-reduce-security-.patch 0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0031-configure-Fix-detection-of-seccomp-.patch -> 0030-configure-Fix-detection-of-seccomp-.patch 0032-linux-user-properly-test-for-infini.patch -> 0031-linux-user-properly-test-for-infini.patch 0033-linux-user-remove-all-traces-of-qem.patch -> 0032-linux-user-remove-all-traces-of-qem.patch 0035-roms-Makefile-pass-a-packaging-time.patch -> 0033-roms-Makefile-pass-a-packaging-time.patch 0036-Raise-soft-address-space-limit-to-h.patch -> 0034-Raise-soft-address-space-limit-to-h.patch 0037-increase-x86_64-physical-bits-to-42.patch -> 0035-increase-x86_64-physical-bits-to-42.patch 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0039-i8254-Fix-migration-from-SLE11-SP2.patch -> 0037-i8254-Fix-migration-from-SLE11-SP2.patch 0040-acpi_piix4-Fix-migration-from-SLE11.patch -> 0038-acpi_piix4-Fix-migration-from-SLE11.patch 0041-Fix-tigervnc-long-press-issue.patch -> 0039-Fix-tigervnc-long-press-issue.patch 0042-fix-xen-hvm-direct-kernel-boot.patch -> 0040-fix-xen-hvm-direct-kernel-boot.patch 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch 0044-string-input-visitor-Fix-uint64-par.patch -> 0042-string-input-visitor-Fix-uint64-par.patch 0045-test-string-input-visitor-Add-int-t.patch -> 0043-test-string-input-visitor-Add-int-t.patch 0046-test-string-input-visitor-Add-uint6.patch -> 0044-test-string-input-visitor-Add-uint6.patch 0047-tests-Add-QOM-property-unit-tests.patch -> 0045-tests-Add-QOM-property-unit-tests.patch 0048-tests-Add-scsi-disk-test.patch -> 0046-tests-Add-scsi-disk-test.patch 0049-linux-user-exclude-cpu-model-code-w.patch -> 0047-linux-user-exclude-cpu-model-code-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.9 * Updated version carries fixes for the following reported issues: CVE-2016-9602 bsc#1020427, CVE-2016-9923 bsc#1014703, CVE-2017-2630 bsc#1025396, CVE-2017-2633 bsc#1026612, CVE-2017-5579 bsc#1021741, CVE-2017-5931 bsc#1024114, CVE-2017-5973 bsc#1025109, CVE-2017-5987 bsc#1025311, CVE-2017-6058 bsc#1025837, CVE-2017-6505 bsc#1028184 * Patches dropped: seabios_128kb.patch (no longer required) * Patches dropped (included in upstream source archive): 0035-net-imx-limit-buffer-descriptor-cou.patch 0045-virtio-gpu-call-cleanup-mapping-fun.patch 0051-virtio-gpu-fix-information-leak-in-.patch 0052-display-cirrus-ignore-source-pitch-.patch 0053-s390x-kvm-fix-small-race-reboot-vs..patch 0054-target-s390x-use-qemu-cpu-model-in-.patch 0056-tests-check-path-to-avoid-a-failing.patch 0057-display-virtio-gpu-3d-check-virgl-c.patch 0058-watchdog-6300esb-add-exit-function.patch 0059-virtio-gpu-3d-fix-memory-leak-in-re.patch 0060-virtio-gpu-fix-memory-leak-in-resou.patch 0061-virtio-fix-vq-inuse-recalc-after-mi.patch 0062-audio-es1370-add-exit-function.patch 0063-audio-ac97-add-exit-function.patch 0064-megasas-fix-guest-triggered-memory-.patch 0065-cirrus-handle-negative-pitch-in-cir.patch 0066-cirrus-fix-blit-address-mask-handli.patch 0067-cirrus-fix-oob-access-issue-CVE-201.patch 0068-usb-ccid-check-ccid-apdu-length.patch 0069-sd-sdhci-check-data-length-during-d.patch 0070-virtio-gpu-fix-resource-leak-in-vir.patch 0071-cirrus-fix-patterncopy-checks.patch 0072-cirrus-add-blit_is_unsafe-call-to-c.patch * Patches renamed: 0036-roms-Makefile-pass-a-packaging-time.patch -> 0035-roms-Makefile-pass-a-packaging-time.patch 0037-Raise-soft-address-space-limit-to-h.patch -> 0036-Raise-soft-address-space-limit-to-h.patch 0038-increase-x86_64-physical-bits-to-42.patch -> 0037-increase-x86_64-physical-bits-to-42.patch 0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0040-i8254-Fix-migration-from-SLE11-SP2.patch -> 0039-i8254-Fix-migration-from-SLE11-SP2.patch 0041-acpi_piix4-Fix-migration-from-SLE11.patch -> 0040-acpi_piix4-Fix-migration-from-SLE11.patch 0042-Fix-tigervnc-long-press-issue.patch -> 0041-Fix-tigervnc-long-press-issue.patch 0043-fix-xen-hvm-direct-kernel-boot.patch -> 0042-fix-xen-hvm-direct-kernel-boot.patch 0044-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch 0046-string-input-visitor-Fix-uint64-par.patch -> 0044-string-input-visitor-Fix-uint64-par.patch 0047-test-string-input-visitor-Add-int-t.patch -> 0045-test-string-input-visitor-Add-int-t.patch 0048-test-string-input-visitor-Add-uint6.patch -> 0046-test-string-input-visitor-Add-uint6.patch 0049-tests-Add-QOM-property-unit-tests.patch -> 0047-tests-Add-QOM-property-unit-tests.patch 0050-tests-Add-scsi-disk-test.patch -> 0048-tests-Add-scsi-disk-test.patch 0055-linux-user-exclude-cpu-model-code-w.patch -> 0049-linux-user-exclude-cpu-model-code-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Buildignore for the global gcc-PIE, as this package enables PIE on its own and has troubles if all use it. (meissner@suse.com)- Address various security/stability issues * Fix OOB access in virito-gpu-3d (CVE-2016-10028 bsc#1017084 bsc#1016503) 0057-display-virtio-gpu-3d-check-virgl-c.patch * Fix DOS in Intel 6300ESB device emulation (CVE-2016-10155 bsc#1021129) 0058-watchdog-6300esb-add-exit-function.patch * Fix DOS in virtio-gpu-3d (CVE-2017-5552 bsc#1021195) 0059-virtio-gpu-3d-fix-memory-leak-in-re.patch * Fix DOS in virtio-gpu (CVE-2017-5578 bsc#1021481) 0060-virtio-gpu-fix-memory-leak-in-resou.patch * Fix cause of infrequent migration failures from bad virtio device state. (bsc#1020928) 0061-virtio-fix-vq-inuse-recalc-after-mi.patch * Fix DOS in es1370 emulated audio device (CVE-2017-5526 bsc#1020589) 0062-audio-es1370-add-exit-function.patch * Fix DOS in ac97 emulated audio device (CVE-2017-5525 bsc#1020491) 0063-audio-ac97-add-exit-function.patch * Fix DOS in megasas device emulation (CVE-2017-5856 bsc#1023053) 0064-megasas-fix-guest-triggered-memory-.patch * Fix various inaccuracies in cirrus vga device emulation 0065-cirrus-handle-negative-pitch-in-cir.patch 0066-cirrus-fix-blit-address-mask-handli.patch * Fix OOB access in cirrus vga emulation (CVE-2017-2615 bsc#1023004) 0067-cirrus-fix-oob-access-issue-CVE-201.patch * Fix DOS in usb CCID card device emulator (CVE-2017-5898 bsc#1023907) 0068-usb-ccid-check-ccid-apdu-length.patch * Fix OOB access in SDHCI device emulation (CVE-2017-5667 bsc#1022541) 0069-sd-sdhci-check-data-length-during-d.patch * Fix DOS in virtio-gpu-3d (CVE-2017-5857 bsc#1023073) 0070-virtio-gpu-fix-resource-leak-in-vir.patch * Fix cirrus patterncopy checks 0071-cirrus-fix-patterncopy-checks.patch * Fix OOB access in cirrus vga emulation (CVE-2017-2620 bsc#1024972) 0072-cirrus-add-blit_is_unsafe-call-to-c.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8- Fix name of s390x specific sysctl configuration file to end with .conf (bsc#1026583)- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Check that sysfs path exists before running test which requires it. This allows qemu-testsuite to succeed in local build service chroot based package build. 0056-tests-check-path-to-avoid-a-failing.patch- Factory and SLE12-SP3 got a name change in the dtc devel package: libfdt1-devel -> libfdt-devel. Adjust our spec file accordingly.- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Patches added: 0055-linux-user-exclude-cpu-model-code-w.patch- Make sure qemu guest agent is usable as soon as qemu-guest-agent package is installed. The previous post script was still not doing the job. - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Fix potential hang/crash rebooting s390x guest 0053-s390x-kvm-fix-small-race-reboot-vs..patch * Fix s390x linux-user failure since v2.8.0 update 0054-target-s390x-use-qemu-cpu-model-in-.patch- Merge qemu packages from openSUSE and SUSE SLE releases together for the v2.8 qemu update. The qemu.changes file is the openSUSE version with this entry providing CVE, FATE, and bugzilla references from the SUSE SLE qemu package to date (see below) - Updated to v2.8.0: See http://wiki.qemu-project.org/ChangeLog/2.8 * For SUSE SLE-12-SP3, update relates to fate#319684, fate#321331, fate#321335, fate#321339, fate#321349, fate#321857 * For best compatibility, qemu-ifup and kvm_stat scripts now owned by qemu package * Build ipxe roms with gcc6 to maintain SLE legacy migration compatibility requirements * qmp-commands.txt file removed, to resurface in future doc reorganization * qemu-tech.html file merged into other existing doc * trace-events renamed to trace-events-all - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Patches dropped (upstream): 0013-linux-user-lock-tcg.patch 0014-linux-user-Run-multi-threaded-code-.patch 0015-linux-user-lock-tb-flushing-too.patch 0017-linux-user-implement-FS_IOC_GETFLAG.patch 0018-linux-user-implement-FS_IOC_SETFLAG.patch 0034-xen-SUSE-xenlinux-unplug-for-emulat.patch 0039-Fix-tlb_vaddr_to_host-with-CONFIG_U.patch 0041-vmsvga-correct-bitmap-and-pixmap-si.patch 0042-scsi-mptconfig-fix-an-assert-expres.patch 0043-scsi-mptconfig-fix-misuse-of-MPTSAS.patch 0044-scsi-pvscsi-limit-loop-to-fetch-SG-.patch 0045-usb-xhci-fix-memory-leak-in-usb_xhc.patch 0046-scsi-mptsas-use-g_new0-to-allocate-.patch 0047-scsi-pvscsi-limit-process-IO-loop-t.patch 0048-virtio-add-check-for-descriptor-s-m.patch 0049-net-mcf-limit-buffer-descriptor-cou.patch 0050-usb-ehci-fix-memory-leak-in-ehci_pr.patch 0051-xhci-limit-the-number-of-link-trbs-.patch 0052-9pfs-allocate-space-for-guest-origi.patch 0053-9pfs-fix-memory-leak-in-v9fs_link.patch 0054-9pfs-fix-potential-host-memory-leak.patch 0055-9pfs-fix-information-leak-in-xattr-.patch 0056-9pfs-fix-memory-leak-in-v9fs_xattrc.patch 0057-9pfs-fix-memory-leak-in-v9fs_write.patch 0058-char-serial-check-divider-value-aga.patch 0059-net-pcnet-check-rx-tx-descriptor-ri.patch 0060-net-eepro100-fix-memory-leak-in-dev.patch 0061-net-rocker-set-limit-to-DMA-buffer-.patch 0062-net-vmxnet-initialise-local-tx-desc.patch 0063-net-rtl8139-limit-processing-of-rin.patch 0064-audio-intel-hda-check-stream-entry-.patch 0065-virtio-gpu-fix-memory-leak-in-virti.patch 0066-9pfs-fix-integer-overflow-issue-in-.patch slof_xhci.patch * Patches renamed: 0016-linux-user-Fake-proc-cpuinfo.patch -> 0013-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-XXX-disable-fiemap.patch -> 0014-linux-user-XXX-disable-fiemap.patch 0020-slirp-nooutgoing.patch -> 0015-slirp-nooutgoing.patch 0021-vnc-password-file-and-incoming-conn.patch -> 0016-vnc-password-file-and-incoming-conn.patch 0022-linux-user-use-target_ulong.patch -> 0017-linux-user-use-target_ulong.patch 0023-block-Add-support-for-DictZip-enabl.patch -> 0018-block-Add-support-for-DictZip-enabl.patch 0024-block-Add-tar-container-format.patch -> 0019-block-Add-tar-container-format.patch 0025-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0020-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0026-console-add-question-mark-escape-op.patch -> 0021-console-add-question-mark-escape-op.patch 0027-Make-char-muxer-more-robust-wrt-sma.patch -> 0022-Make-char-muxer-more-robust-wrt-sma.patch 0028-linux-user-lseek-explicitly-cast-no.patch -> 0023-linux-user-lseek-explicitly-cast-no.patch 0029-virtfs-proxy-helper-Provide-__u64-f.patch -> 0024-virtfs-proxy-helper-Provide-__u64-f.patch 0030-configure-Enable-PIE-for-ppc-and-pp.patch -> 0025-configure-Enable-PIE-for-ppc-and-pp.patch 0031-AIO-Reduce-number-of-threads-for-32.patch -> 0026-AIO-Reduce-number-of-threads-for-32.patch 0032-dictzip-Fix-on-big-endian-systems.patch -> 0027-dictzip-Fix-on-big-endian-systems.patch 0033-xen_disk-Add-suse-specific-flush-di.patch -> 0028-xen_disk-Add-suse-specific-flush-di.patch 0035-qemu-bridge-helper-reduce-security-.patch -> 0029-qemu-bridge-helper-reduce-security-.patch 0036-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0037-configure-Fix-detection-of-seccomp-.patch -> 0031-configure-Fix-detection-of-seccomp-.patch 0038-linux-user-properly-test-for-infini.patch -> 0032-linux-user-properly-test-for-infini.patch 0040-linux-user-remove-all-traces-of-qem.patch -> 0033-linux-user-remove-all-traces-of-qem.patch 0067-dma-rc4030-limit-interval-timer-rel.patch -> 0034-dma-rc4030-limit-interval-timer-rel.patch 0068-net-imx-limit-buffer-descriptor-cou.patch -> 0035-net-imx-limit-buffer-descriptor-cou.patch 0069-roms-Makefile-pass-a-packaging-time.patch -> 0036-roms-Makefile-pass-a-packaging-time.patch * Patches added: 0037-Raise-soft-address-space-limit-to-h.patch 0038-increase-x86_64-physical-bits-to-42.patch 0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0040-i8254-Fix-migration-from-SLE11-SP2.patch 0041-acpi_piix4-Fix-migration-from-SLE11.patch 0042-Fix-tigervnc-long-press-issue.patch 0043-fix-xen-hvm-direct-kernel-boot.patch 0044-ARM-KVM-Enable-in-kernel-timers-wit.patch 0045-virtio-gpu-call-cleanup-mapping-fun.patch 0046-string-input-visitor-Fix-uint64-par.patch 0047-test-string-input-visitor-Add-int-t.patch 0048-test-string-input-visitor-Add-uint6.patch 0049-tests-Add-QOM-property-unit-tests.patch 0050-tests-Add-scsi-disk-test.patch 0051-virtio-gpu-fix-information-leak-in-.patch 0052-display-cirrus-ignore-source-pitch-.patch ipxe-use-gcc6-for-more-compact-code.patch * SLE patches dropped (accounted for in above listed changes): 0002-qemu-0.9.0.cvs-binfmt.patch 0009-block-vmdk-Support-creation-of-SCSI.patch 0010-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch 0014-linux-user-Ignore-broken-loop-ioctl.patch 0015-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch 0024-linux-user-add-more-blk-ioctls.patch 0025-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-_u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch 0034-Raise-soft-address-space-limit-to-h.patch 0035-increase-x86_64-physical-bits-to-42.patch 0036-vnc-provide-fake-color-map.patch 0037-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0038-i8254-Fix-migration-from-SLE11-SP2.patch 0039-acpi_piix4-Fix-migration-from-SLE11.patch 0040-qtest-Increase-socket-timeout-to-ac.patch 0041-dictzip-Fix-on-big-endian-systems.patch 0043-xen_disk-Add-suse-specific-flush-di.patch 0044-Split-large-discard-requests-from-b.patch 0045-fix-xen-hvm-direct-kernel-boot.patch 0046-xen-introduce-dummy-system-device.patch 0047-xen-write-information-about-support.patch 0048-xen-add-pvUSB-backend.patch 0049-xen-move-xen_sysdev-to-xen_backend..patch 0050-vnc-add-configurable-keyboard-delay.patch 0051-xen-SUSE-xenlinux-unplug-for-emulat.patch 0052-configure-add-echo_version-helper.patch 0053-configure-support-vte-2.91.patch 0054-scsi-esp-fix-migration.patch 0055-hw-arm-virt-mark-the-PCIe-host-cont.patch 0056-xen-when-removing-a-backend-don-t-r.patch 0057-xen-drain-submit-queue-in-xen-usb-b.patch 0058-qcow2-avoid-extra-flushes-in-qcow2.patch 0059-qemu-bridge-helper-reduce-security-.patch 0060-xen-use-a-common-function-for-pv-an.patch 0061-xen_platform-unplug-also-SCSI-disks.patch 0062-virtio-check-vring-descriptor-buffe.patch 0063-net-vmxnet3-check-for-device_active.patch 0064-net-vmxnet-initialise-local-tx-desc.patch 0065-scsi-pvscsi-avoid-infinite-loop-whi.patch 0066-ARM-KVM-Enable-in-kernel-timers-wit.patch 0067-hw-net-Fix-a-heap-overflow-in-xlnx..patch 0068-vmsvga-correct-bitmap-and-pixmap-si.patch 0069-usb-xhci-fix-memory-leak-in-usb_xhc.patch 0070-virtio-add-check-for-descriptor-s-m.patch 0071-net-mcf-limit-buffer-descriptor-cou.patch 0072-usb-ehci-fix-memory-leak-in-ehci_pr.patch 0073-xhci-limit-the-number-of-link-trbs-.patch 0074-9pfs-allocate-space-for-guest-origi.patch 0075-9pfs-fix-memory-leak-in-v9fs_link.patch 0076-9pfs-fix-potential-host-memory-leak.patch 0077-9pfs-fix-memory-leak-in-v9fs_write.patch 0078-char-serial-check-divider-value-aga.patch 0079-net-pcnet-check-rx-tx-descriptor-ri.patch 0080-net-eepro100-fix-memory-leak-in-dev.patch 0081-net-rocker-set-limit-to-DMA-buffer-.patch 0082-net-rtl8139-limit-processing-of-rin.patch 0083-audio-intel-hda-check-stream-entry-.patch 0084-virtio-gpu-fix-memory-leak-in-virti.patch 0085-9pfs-fix-integer-overflow-issue-in-.patch 0086-dma-rc4030-limit-interval-timer-rel.patch 0087-net-imx-limit-buffer-descriptor-cou.patch 0088-target-i386-Implement-CPUID-0xB-Ext.patch 0089-target-i386-present-virtual-L3-cach.patch 0090-migration-fix-inability-to-save-VM-.patch 0091-ui-gtk-Fix-a-runtime-warning-on-vte.patch 0092-gtk-don-t-leak-the-GtkBorder-with-V.patch 0093-xen-fix-ioreq-handling.patch 0094-macio-Use-blk_drain-instead-of-blk_.patch 0095-rbd-Switch-rbd_start_aio-to-byte-ba.patch 0096-virtio-blk-Release-s-rq-queue-at-sy.patch 0097-virtio-blk-Remove-stale-comment-abo.patch 0098-block-reintroduce-bdrv_flush_all.patch 0099-qemu-use-bdrv_flush_all-for-vm_stop.patch 0100-block-backend-remove-blkflush_all.patch 0101-char-fix-missing-return-in-error-pa.patch 0102-rbd-shift-byte-count-as-a-64-bit-va.patch 0103-mirror-use-bdrv_drained_begin-bdrv_.patch 0104-block-curl-Use-BDRV_SECTOR_SIZE.patch 0105-block-curl-Fix-return-value-from-cu.patch 0106-block-curl-Remember-all-sockets.patch 0107-block-curl-Do-not-wait-for-data-bey.patch 0108-virtio-allow-per-device-class-legac.patch 0109-virtio-net-mark-VIRTIO_NET_F_GSO-as.patch 0110-vhost-adapt-vhost_verify_ring_mappi.patch 0111-ivshmem-Fix-64-bit-memory-bar-confi.patch 0112-intel_iommu-fix-incorrect-device-in.patch 0113-9pfs-fix-information-leak-in-xattr-.patch 0114-9pfs-fix-memory-leak-in-v9fs_xattrc.patch 0115-net-mcf-check-receive-buffer-size-r.patch 0116-virtio-gpu-fix-memory-leak-in-updat.patch 0117-virtio-gpu-fix-information-leak-in-.patch 0118-9pfs-adjust-the-order-of-resource-c.patch 0119-9pfs-add-cleanup-operation-in-FileO.patch 0120-9pfs-add-cleanup-operation-for-hand.patch 0121-9pfs-add-cleanup-operation-for-prox.patch 0122-virtio-gpu-call-cleanup-mapping-fun.patch 0123-string-input-visitor-Fix-uint64-par.patch 0124-test-string-input-visitor-Add-int-t.patch 0125-test-string-input-visitor-Add-uint6.patch 0126-tests-Add-QOM-property-unit-tests.patch 0127-tests-Add-scsi-disk-test.patch 0128-usb-ehci-fix-memory-leak-in-ehci_in.patch 0129-usbredir-free-vm_change_state_handl.patch 0130-virtio-gpu-fix-information-leak-in-.patch ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch ipxe-legacy-Fix-building-with-GCC-6.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-util-v5.24-perl-errors-on-redeclare.patch - SLE CVE, FATE, and bugzilla references not otherwise listed in this changelog file. The intent of this list is to indicate that the fix or feature continues the line of inheritance in the development stream of this package. The list is intended to satisfy searches only - refer to the SLE-12-SP2 changelog file for additional details. * fate#314468 fate#314497 fate#315125 fate#315467 fate#317015 fate#317741 fate#317763 fate#318349 fate#319660 fate#319979 fate#321010 * bnc#812983 bnc#869026 bnc#869746 bnc#874413 bnc#875582 bnc#875870 bnc#877642 bnc#877645 bnc#878541 bsc#882405 bsc#886378 bnc#893339 bnc#893892 bnc#895369 bnc#896726 bnc#897654 bnc#905097 bnc#907805 bnc#908380 bnc#914521 bsc#924018 bsc#929339 bsc#932267 bsc#932770 bsc#933981 bsc#936537 bsc#937125 bsc#938344 bsc#940929 bsc#942845 bsc#943446 bsc#944697 bsc#945404 bsc#945987 bsc#945989 bsc#946020 bsc#947159 bnc#953518 bsc#954864 bsc#956829 bsc#957162 bsc#958491 bsc#958917 bsc#959005 bsc#959386 bsc#960334 bsc#960708 bsc#960725 bsc#960835 bsc#961333 bsc#961556 bsc#961691 bsc#962320 bsc#963782 bsc#964413 bsc#970791 bsc#974141 bsc#978158 bsc#979473 bsc#982365 bsc#989655 bsc#991466 bsc#994771 bsc#994774 bsc#996441 bsc#997858 bsc#999212 bsc#1001151 bsc#1002116 bsc#1005353 boo#1007263 bsc#1007769 bsc#1008519 bsc#1009109 bsc#1013285 bsc#1013341 bsc#1013764 bsc#1013767 bsc#1014109 bsc#1014110 bsc#1014111 bsc#1014112 bsc#1014256 bsc#1014514 bsc#1014702 bsc#1015169 bsc#1016779 * CVE-2014-0222 CVE-2014-0223 CVE-2014-3461 CVE-2014-3640 CVE-2014-7840 CVE-2014-8106 CVE-2015-1779 CVE-2015-3209 CVE-2015-4037 CVE-2015-5154 CVE-2015-5225 CVE-2015-5278 CVE-2015-5279 CVE-2015-5745 CVE-2015-6815 CVE-2015-6855 CVE-2015-7295 CVE-2015-7512 CVE-2015-7549 CVE-2015-8345 CVE-2015-8504 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-1568 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-3710 CVE-2016-6490 CVE-2016-6833 CVE-2016-6888 CVE-2016-7116 CVE-2016-7155 CVE-2016-7161 CVE-2016-9381 CVE-2016-9776 CVE-2016-9845 CVE-2016-9846 CVE-2016-9907 CVE-2016-9908 CVE-2016-9911 CVE-2016-9912 CVE-2016-9913 CVE-2016-9921 CVE-2016-9922- Despite the previous entry about re-enabling ceph on Nov 19, 2016 the change wasn't actually done. Do it now.- sgabios-stable-buildid.patch: Use geeko@buildhost- slof_xhci.patch: XHCI fixes (boo#977027)- Recommend x86 ROMs for emulated PCI cards on ppc, arm, others (bsc#1005869, michals)- Tidy SLOF patch boilerplate (michals)- Build with spice on all archs. (boo#1009438, michals)- Refine the approach to producing stable builds in our ROM based packages. All built roms which have hostname or date calls now produce consistent results build to build via patch changes, so remove the hostname and date call workarounds. (bsc#1011213) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0069-roms-Makefile-pass-a-packaging-time.patch sgabios-stable-buildid.patch- Re-enable ceph (rbd) functionality in OBS builds as we've been told the issues which prompted us to disable it are resolved - Address various security/stability issues * Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516) 0041-vmsvga-correct-bitmap-and-pixmap-si.patch * Fix DOS in LSI SAS1068 emulation (CVE-2016-7157 bsc#997860) 0042-scsi-mptconfig-fix-an-assert-expres.patch 0043-scsi-mptconfig-fix-misuse-of-MPTSAS.patch * Fix DOS in Vmware pv scsi interface (CVE-2016-7156 bsc#997859) 0044-scsi-pvscsi-limit-loop-to-fetch-SG-.patch * Fix DOS in USB xHCI emulation (CVE-2016-7466 bsc#1000345) 0045-usb-xhci-fix-memory-leak-in-usb_xhc.patch * Fix OOB access in LSI SAS1068 emulation (CVE-2016-7423 bsc#1000397) 0046-scsi-mptsas-use-g_new0-to-allocate-.patch * Fix DOS in Vmware pv scsi interface (CVE-2016-7421 bsc#999661) 0047-scsi-pvscsi-limit-process-IO-loop-t.patch * Fix NULL pointer dereference in virtio processing (CVE-2016-7422 bsc#1000346) 0048-virtio-add-check-for-descriptor-s-m.patch * Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908 bsc#1002550) 0049-net-mcf-limit-buffer-descriptor-cou.patch * Fix DOS in USB EHCI emulation (CVE-2016-7995 bsc#1003612) 0050-usb-ehci-fix-memory-leak-in-ehci_pr.patch * Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878) 0051-xhci-limit-the-number-of-link-trbs-.patch * Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894) 0052-9pfs-allocate-space-for-guest-origi.patch * Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494) 0053-9pfs-fix-memory-leak-in-v9fs_link.patch * Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893) 0054-9pfs-fix-potential-host-memory-leak.patch * Plug data leak in virtio-9pfs interface (CVE-2016-9103 bsc#1007454) 0055-9pfs-fix-information-leak-in-xattr-.patch * Fix DOS in virtio-9pfs interface (CVE-2016-9102 bsc#1007450) 0056-9pfs-fix-memory-leak-in-v9fs_xattrc.patch * Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495) 0057-9pfs-fix-memory-leak-in-v9fs_write.patch * Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707) 0058-char-serial-check-divider-value-aga.patch * Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557) 0059-net-pcnet-check-rx-tx-descriptor-ri.patch * Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391) 0060-net-eepro100-fix-memory-leak-in-dev.patch * Fix OOB access in Rocker switch emulation (CVE-2016-8668 bsc#1004706) 0061-net-rocker-set-limit-to-DMA-buffer-.patch * Plug data leak in vmxnet3 emulation (CVE-2016-6836 bsc#994760) 0062-net-vmxnet-initialise-local-tx-desc.patch * Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538) 0063-net-rtl8139-limit-processing-of-rin.patch * Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536) 0064-audio-intel-hda-check-stream-entry-.patch * Fix DOS in virtio-gpu (CVE-2016-7994 bsc#1003613) 0065-virtio-gpu-fix-memory-leak-in-virti.patch * Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493) 0066-9pfs-fix-integer-overflow-issue-in-.patch * Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702) 0067-dma-rc4030-limit-interval-timer-rel.patch * Fix DOS in i.MX NIC emulation (CVE-2016-7907 bsc#1002549) 0068-net-imx-limit-buffer-descriptor-cou.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7- Use fixed timestamps and stable build_id in ipxe and other ROMs * Patches added: ipxe-stable-buildid.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patch updated: 0040-linux-user-skip-0-flag-from-proc-se.patch -> 0040-linux-user-remove-all-traces-of-qem.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0040-linux-user-skip-0-flag-from-proc-se.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0039-Fix-tlb_vaddr_to_host-with-CONFIG_U.patch- Document two new options, but leave jemalloc disabled for now - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches dropped: 0034-build-link-with-libatomic-on-powerp.patch * Patches renamed: 0035-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0034-xen-SUSE-xenlinux-unplug-for-emulat.patch 0036-qemu-bridge-helper-reduce-security-.patch -> 0035-qemu-bridge-helper-reduce-security-.patch 0037-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0036-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0038-configure-Fix-detection-of-seccomp-.patch -> 0037-configure-Fix-detection-of-seccomp-.patch 0039-linux-user-properly-test-for-infini.patch -> 0038-linux-user-properly-test-for-infini.patch- Updated to v2.7.0: See http://wiki.qemu-project.org/ChangeLog/2.7 - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0039-linux-user-properly-test-for-infini.patch- Use new kvm_stat package where available, else provide updated kvm_stat script.- Update to v2.7.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.7- Updated to v2.7.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.7 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches dropped: 0002-qemu-0.9.0.cvs-binfmt.patch (script rewritten upstream) 0009-block-vmdk-Support-creation-of-SCSI.patch (deprecated) 0014-linux-user-Ignore-broken-loop-ioctl.patch (implemented upstream) 0024-linux-user-add-more-blk-ioctls.patch (more implemented upstream) 0034-qtest-Increase-socket-timeout.patch (increased further upstream) 0036-configure-Enable-libseccomp-for-ppc.patch (enabled upstream) 0038-block-split-large-discard-requests-.patch 0041-xen-introduce-dummy-system-device.patch 0042-xen-write-information-about-support.patch 0043-xen-add-pvUSB-backend.patch 0044-xen-move-xen_sysdev-to-xen_backend..patch 0045-vnc-add-configurable-keyboard-delay.patch 0046-configure-add-echo_version-helper.patch 0047-configure-support-vte-2.91.patch 0048-hw-arm-virt-mark-the-PCIe-host-cont.patch 0050-scsi-esp-fix-migration.patch 0051-xen-when-removing-a-backend-don-t-r.patch 0052-xen-drain-submit-queue-in-xen-usb-b.patch 0053-qcow2-avoid-extra-flushes-in-qcow2.patch 0055-xen-use-a-common-function-for-pv-an.patch ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-legacy-Fix-building-with-GCC-6.patch ipxe-util-v5.24-perl-errors-on-redeclare.patch ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch * Patches renamed: 0010-linux-user-add-binfmt-wrapper-for-a.patch -> 0009-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch -> 0010-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch -> 0011-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch -> 0012-linux-user-binfmt-support-host-bina.patch 0015-linux-user-lock-tcg.patch -> 0013-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch -> 0014-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch -> 0015-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch -> 0016-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch -> 0017-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch -> 0018-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch -> 0019-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch -> 0020-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch -> 0021-vnc-password-file-and-incoming-conn.patch 0025-linux-user-use-target_ulong.patch -> 0022-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch -> 0023-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch -> 0024-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0025-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch -> 0026-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch -> 0027-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch -> 0028-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-__u64-f.patch -> 0029-virtfs-proxy-helper-Provide-__u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch -> 0030-configure-Enable-PIE-for-ppc-and-pp.patch 0035-AIO-Reduce-number-of-threads-for-32.patch -> 0031-AIO-Reduce-number-of-threads-for-32.patch 0037-dictzip-Fix-on-big-endian-systems.patch -> 0032-dictzip-Fix-on-big-endian-systems.patch 0039-xen_disk-Add-suse-specific-flush-di.patch -> 0033-xen_disk-Add-suse-specific-flush-di.patch 0040-build-link-with-libatomic-on-powerp.patch -> 0034-build-link-with-libatomic-on-powerp.patch 0049-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0035-xen-SUSE-xenlinux-unplug-for-emulat.patch 0054-qemu-bridge-helper-reduce-security-.patch -> 0036-qemu-bridge-helper-reduce-security-.patch * Patches added: 0002-qemu-binfmt-conf-Modify-default-pat.patch 0037-qemu-binfmt-conf-use-qemu-ARCH-binf.patch * Package renamed trace-events-all file and linuxboot_dma.bin * Handle building and packaging roms for e1000e and vmxnet3 (Bruce) * Remove ipxe patches which are now enabled upstream (Bruce) * Enable seccomp for s390x (Mark Post): 0038-configure-Fix-detection-of-seccomp-.patch- Update to v2.6.1 a stable, bug-fix-only release (fate#316228) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped (upstreamed): 0041-net-mipsnet-check-packet-length-aga.patch 0042-i386-kvmvapic-initialise-imm32-vari.patch 0043-esp-check-command-buffer-length-bef.patch 0044-esp-check-dma-length-before-reading.patch 0045-scsi-pvscsi-check-command-descripto.patch 0046-scsi-mptsas-infinite-loop-while-fet.patch 0047-vga-add-sr_vbe-register-set.patch 0048-scsi-megasas-use-appropriate-proper.patch 0049-scsi-megasas-check-read_queue_head-.patch 0050-scsi-megasas-null-terminate-bios-ve.patch 0051-vmsvga-move-fifo-sanity-checks-to-v.patch 0052-vmsvga-don-t-process-more-than-1024.patch 0053-block-iscsi-avoid-potential-overflo.patch 0054-scsi-esp-check-TI-buffer-index-befo.patch 0060-scsi-megasas-initialise-local-confi.patch 0065-scsi-esp-check-buffer-length-before.patch 0066-scsi-esp-respect-FIFO-invariant-aft.patch 0067-pci-assign-Move-Invalid-ROM-error-m.patch 0068-Xen-PCI-passthrough-fix-passthrough.patch 0069-scsi-esp-make-cmdbuf-big-enough-for.patch 0071-virtio-error-out-if-guest-exceeds-v.patch * Patches renamed: 0055-xen-introduce-dummy-system-device.patch - > 0041-xen-introduce-dummy-system-device.patch 0056-xen-write-information-about-support.patch - > 0042-xen-write-information-about-support.patch 0057-xen-add-pvUSB-backend.patch - > 0043-xen-add-pvUSB-backend.patch 0058-xen-move-xen_sysdev-to-xen_backend..patch - > 0044-xen-move-xen_sysdev-to-xen_backend..patch 0059-vnc-add-configurable-keyboard-delay.patch - > 0045-vnc-add-configurable-keyboard-delay.patch 0061-configure-add-echo_version-helper.patch - > 0046-configure-add-echo_version-helper.patch 0062-configure-support-vte-2.91.patch - > 0047-configure-support-vte-2.91.patch 0063-hw-arm-virt-mark-the-PCIe-host-cont.patch - > 0048-hw-arm-virt-mark-the-PCIe-host-cont.patch 0064-xen-SUSE-xenlinux-unplug-for-emulat.patch - > 0049-xen-SUSE-xenlinux-unplug-for-emulat.patch 0070-scsi-esp-fix-migration.patch - > 0050-scsi-esp-fix-migration.patch 0072-xen-when-removing-a-backend-don-t-r.patch - > 0051-xen-when-removing-a-backend-don-t-r.patch 0073-xen-drain-submit-queue-in-xen-usb-b.patch - > 0052-xen-drain-submit-queue-in-xen-usb-b.patch 0074-qcow2-avoid-extra-flushes-in-qcow2.patch - > 0053-qcow2-avoid-extra-flushes-in-qcow2.patch 0075-qemu-bridge-helper-reduce-security-.patch - > 0054-qemu-bridge-helper-reduce-security-.patch 0076-xen-use-a-common-function-for-pv-an.patch - > 0055-xen-use-a-common-function-for-pv-an.patch- Temporarily disable ceph (rbd) functionality in OBS due to staging issues.- use upstream solution for building xen-usb.c correctly - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped: 0058-usb-Fix-conditions-that-xen-usb.c-i.patch * Patches added: 0058-xen-move-xen_sysdev-to-xen_backend..patch- Incorporate patch carried in Xen's qemu to get same support as Xen switches to use the qemu package (bsc#953339, bsc#953362, bsc#953518, bsc#984981) 0064-xen-SUSE-xenlinux-unplug-for-emulat.patch - Fix more potential OOB accesses in 53C9X emulation (CVE-2016-5238 bsc#982959) 0065-scsi-esp-check-buffer-length-before.patch 0066-scsi-esp-respect-FIFO-invariant-aft.patch - Avoid "Invalid ROM" error message when it is not appropriate (bsc#982927) 0067-pci-assign-Move-Invalid-ROM-error-m.patch - Fix failure in Xen HVM PCI passthrough (bsc#981925, bsc#989250) 0068-Xen-PCI-passthrough-fix-passthrough.patch - Fix OOB access in 53C9X emulation (CVE-2016-6351 bsc#990835) 0069-scsi-esp-make-cmdbuf-big-enough-for.patch 0070-scsi-esp-fix-migration.patch - Avoid potential for guest initiated OOM condition in qemu through virtio interface (CVE-2016-5403 bsc#991080) 0071-virtio-error-out-if-guest-exceeds-v.patch - Fix potential crashes in qemu from pvusb bugs (bsc#986156) 0072-xen-when-removing-a-backend-don-t-r.patch 0073-xen-drain-submit-queue-in-xen-usb-b.patch - Avoid unneeded flushes in qcow2 which impact performance (bsc#991296) 0074-qcow2-avoid-extra-flushes-in-qcow2.patch - Finally get qemu-bridge-helper the permissions it needs for non- root usage. The kvm group is leveraged to control access. (boo#988279) 0075-qemu-bridge-helper-reduce-security-.patch - Fix pvusb not working for HVM guests (bsc#991785) 0076-xen-use-a-common-function-for-pv-an.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 - Minor spec file formatting fixes- Fix ARM PCIe DMA coherency bug (bsc#991034) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches added: 0063-hw-arm-virt-mark-the-PCIe-host-cont.patch- Clean up the udev ifdeffery to cover systemd as well (boo#860275) - Trigger udev rules also under systemd (boo#989655) - Suppress s390x sysctl in chroot - Ignore s390x sysctl failures (agraf)- Build SLOF for SLE12 now that we have gcc fix (bsc#949000) - Add script for loading kvm module on s390x - Enable seccomp and iscsi support in more configurations - Enable more support for virtio-gpu - Fix /dev/kvm permissions problem with package install and no reboot (bnc#867867) - Remove libtool dependency - Disable more aggressive stack protector for performance reasons - Enable vte to be used again in more configurations (bsc#988855) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches added: 0061-configure-add-echo_version-helper.patch 0062-configure-support-vte-2.91.patch- Remove deprecated patch "work-around-SA_RESTART-race" (boo#982208) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped: 0002-XXX-work-around-SA_RESTART-race-wit.patch 0003-qemu-0.9.0.cvs-binfmt.patch 0004-qemu-cvs-alsa_bitfield.patch 0005-qemu-cvs-alsa_ioctl.patch 0006-qemu-cvs-alsa_mmap.patch 0007-qemu-cvs-gettimeofday.patch 0008-qemu-cvs-ioctl_debug.patch 0009-qemu-cvs-ioctl_nodirection.patch 0010-block-vmdk-Support-creation-of-SCSI.patch 0011-linux-user-add-binfmt-wrapper-for-a.patch 0012-PPC-KVM-Disable-mmu-notifier-check.patch 0013-linux-user-fix-segfault-deadlock.patch 0014-linux-user-binfmt-support-host-bina.patch 0015-linux-user-Ignore-broken-loop-ioctl.patch 0016-linux-user-lock-tcg.patch 0017-linux-user-Run-multi-threaded-code-.patch 0018-linux-user-lock-tb-flushing-too.patch 0019-linux-user-Fake-proc-cpuinfo.patch 0020-linux-user-implement-FS_IOC_GETFLAG.patch 0021-linux-user-implement-FS_IOC_SETFLAG.patch 0022-linux-user-XXX-disable-fiemap.patch 0023-slirp-nooutgoing.patch 0024-vnc-password-file-and-incoming-conn.patch 0025-linux-user-add-more-blk-ioctls.patch 0026-linux-user-use-target_ulong.patch 0027-block-Add-support-for-DictZip-enabl.patch 0028-block-Add-tar-container-format.patch 0029-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0030-console-add-question-mark-escape-op.patch 0031-Make-char-muxer-more-robust-wrt-sma.patch 0032-linux-user-lseek-explicitly-cast-no.patch 0033-virtfs-proxy-helper-Provide-__u64-f.patch 0034-configure-Enable-PIE-for-ppc-and-pp.patch 0035-qtest-Increase-socket-timeout.patch 0036-AIO-Reduce-number-of-threads-for-32.patch 0037-configure-Enable-libseccomp-for-ppc.patch 0038-dictzip-Fix-on-big-endian-systems.patch 0039-block-split-large-discard-requests-.patch 0040-xen_disk-Add-suse-specific-flush-di.patch 0041-build-link-with-libatomic-on-powerp.patch 0042-net-mipsnet-check-packet-length-aga.patch 0043-i386-kvmvapic-initialise-imm32-vari.patch 0044-esp-check-command-buffer-length-bef.patch 0045-esp-check-dma-length-before-reading.patch 0046-scsi-pvscsi-check-command-descripto.patch 0047-scsi-mptsas-infinite-loop-while-fet.patch 0048-vga-add-sr_vbe-register-set.patch 0049-scsi-megasas-use-appropriate-proper.patch 0050-scsi-megasas-check-read_queue_head-.patch 0051-scsi-megasas-null-terminate-bios-ve.patch 0052-vmsvga-move-fifo-sanity-checks-to-v.patch 0053-vmsvga-don-t-process-more-than-1024.patch 0054-block-iscsi-avoid-potential-overflo.patch 0055-scsi-esp-check-TI-buffer-index-befo.patch 0056-xen-introduce-dummy-system-device.patch 0057-xen-write-information-about-support.patch 0058-xen-add-pvUSB-backend.patch 0059-usb-Fix-conditions-that-xen-usb.c-i.patch 0060-vnc-add-configurable-keyboard-delay.patch 0061-scsi-megasas-initialise-local-confi.patch * Patches added: 0002-qemu-0.9.0.cvs-binfmt.patch 0003-qemu-cvs-alsa_bitfield.patch 0004-qemu-cvs-alsa_ioctl.patch 0005-qemu-cvs-alsa_mmap.patch 0006-qemu-cvs-gettimeofday.patch 0007-qemu-cvs-ioctl_debug.patch 0008-qemu-cvs-ioctl_nodirection.patch 0009-block-vmdk-Support-creation-of-SCSI.patch 0010-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch 0014-linux-user-Ignore-broken-loop-ioctl.patch 0015-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch 0024-linux-user-add-more-blk-ioctls.patch 0025-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-__u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch 0034-qtest-Increase-socket-timeout.patch 0035-AIO-Reduce-number-of-threads-for-32.patch 0036-configure-Enable-libseccomp-for-ppc.patch 0037-dictzip-Fix-on-big-endian-systems.patch 0038-block-split-large-discard-requests-.patch 0039-xen_disk-Add-suse-specific-flush-di.patch 0040-build-link-with-libatomic-on-powerp.patch 0041-net-mipsnet-check-packet-length-aga.patch 0042-i386-kvmvapic-initialise-imm32-vari.patch 0043-esp-check-command-buffer-length-bef.patch 0044-esp-check-dma-length-before-reading.patch 0045-scsi-pvscsi-check-command-descripto.patch 0046-scsi-mptsas-infinite-loop-while-fet.patch 0047-vga-add-sr_vbe-register-set.patch 0048-scsi-megasas-use-appropriate-proper.patch 0049-scsi-megasas-check-read_queue_head-.patch 0050-scsi-megasas-null-terminate-bios-ve.patch 0051-vmsvga-move-fifo-sanity-checks-to-v.patch 0052-vmsvga-don-t-process-more-than-1024.patch 0053-block-iscsi-avoid-potential-overflo.patch 0054-scsi-esp-check-TI-buffer-index-befo.patch 0055-xen-introduce-dummy-system-device.patch 0056-xen-write-information-about-support.patch 0057-xen-add-pvUSB-backend.patch 0058-usb-Fix-conditions-that-xen-usb.c-i.patch 0059-vnc-add-configurable-keyboard-delay.patch 0060-scsi-megasas-initialise-local-confi.patch - Enable ceph (rbd) support for aarch64- Enable ceph (rbd) support- Fix OVMF iPXE network menu (bsc#986033, boo#987488) ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch- Fix host information leak to guest in MegaRAID SAS 8708EM2 Host Bus AdapterMegaRAID SAS 8708EM2 Host Bus Adapter emulation support (CVE-2016-5105 bsc#982017) * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 0061-scsi-megasas-initialise-local-confi.patch- Address various security/stability issues * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Fix OOB access in megasas emulated device (CVE-2016-5106 bsc#982018) 0049-scsi-megasas-use-appropriate-proper.patch * Fix OOB access in megasas emulated device (CVE-2016-5107 bsc#982019) 0050-scsi-megasas-check-read_queue_head-.patch * Fix OOB access in megasas emulated device (CVE-2016-5337 bsc#983961) 0051-scsi-megasas-null-terminate-bios-ve.patch * Correct the vmvga fifo access checks (CVE-2016-4454 bsc#982222) 0052-vmsvga-move-fifo-sanity-checks-to-v.patch * Fix potential DoS issue in vmvga processing (CVE-2016-4453 bsc#982223) 0053-vmsvga-don-t-process-more-than-1024.patch * Fix heap buffer overflow flaw when iscsi protocol is used (CVE-2016-5126 bsc#982285) 0054-block-iscsi-avoid-potential-overflo.patch * Fix OOB access in 53C9X emulation (CVE-2016-5338 bsc#983982) 0055-scsi-esp-check-TI-buffer-index-befo.patch - Add support to qemu for pv-usb under Xen (fate#316612) 0056-xen-introduce-dummy-system-device.patch 0057-xen-write-information-about-support.patch 0058-xen-add-pvUSB-backend.patch 0059-usb-Fix-conditions-that-xen-usb.c-i.patch - Provide ability to rate limit keyboard events from the vnc server. This is part of the solution to an issue affecting openQA testing, where characters are lost, resulting in unexpected failures (bsc#974914) 0060-vnc-add-configurable-keyboard-delay.patch- Adjust to parallel changes in virglrenderer packages - no longer "BuildRequires" virglrenderer directly, just the devel package.- Fix build compatibility with gcc6 wrt ipxe rom where compiler warnings are treated as errors. ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-legacy-Fix-building-with-GCC-6.patch - Fix ipxe build script which fails under perl v5.24 ipxe-util-v5.24-perl-errors-on-redeclare.patch - Specify build time disk space requirements for ppc64 and ppc64le- Add sysctl script and %post on s390x to allow kvm usage (bsc#975331)- Address various security/stability issues * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Fix OOB access in MIPSnet emulated controller CVE-2016-4002 (bsc#975136) 0042-net-mipsnet-check-packet-length-aga.patch * Fix possible host data leakage to guest from TPR access CVE-2016-4020 (bsc#975700) 0043-i386-kvmvapic-initialise-imm32-vari.patch * Avoid OOB access in 53C9X emulation CVE-2016-4439 (bsc#980711) 0044-esp-check-command-buffer-length-bef.patch * Avoid OOB access in 53C9X emulation CVE-2016-4441 (bsc#980723) 0045-esp-check-dma-length-before-reading.patch * Avoid OOB access in Vmware PV SCSI emulation CVE-2016-4952 (bsc#981266) 0046-scsi-pvscsi-check-command-descripto.patch * Avoid potential DoS in LSI SAS1068 emulation CVE-2016-4964 (bsc#981399) 0047-scsi-mptsas-infinite-loop-while-fet.patch * Fix regression in vga behavior - introduced in v2.6.0 CVE-2016-3712 (bsc#978160) 0048-vga-add-sr_vbe-register-set.patch- Update to v2.6.0: See http://wiki.qemu-project.org/ChangeLog/2.6 - Enable SDL2, virglrenderer (for use with virtio-gpu), xfsctl, and tracing using default log backend - Build efi pxe roms on x86_64- Check modules for conflicting release versions - Suggest recently added block modules- Bump copyright in qemu.spec.in - Enable libiscsi for Factory - Enable seccomp for ppc64le as well- Update to v2.6.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.6 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped (upstreamed): 0041-tests-Use-correct-config-param-for-.patch * Patches renamed: 0042-build-link-with-libatomic-on-powerp.patch -> 0041-build-link-with-libatomic-on-powerp.patch- Partially revert the last change's cleanup - Indicate SUSE version- Update to v2.6.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.6 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Accept every size in DISCARD request from a guest (bsc#964427) 0039-block-split-large-discard-requests-.patch * Recognize libxl flag to disable flush in block device (bsc#879425) 0040-xen_disk-Add-suse-specific-flush-di.patch * Use correct flag for crypto tests 0041-tests-Use-correct-config-param-for-.patch * Fix build on powerpc: 0042-build-link-with-libatomic-on-powerp.patch * Patches dropped (upstreamed): seabios_checkrom_typo.patch seabios_avoid_smbios_signature_string.patch- Disable vte for Leap, fixing build- Don't drop u-boot.e500 yet - breaks testsuite- Re-enable libcacard support - Clean up configured features- Clean up qemu-tools libcacard Provides/Obsoletes - separate again - Drop u-boot.e500 - being packaged as u-boot-ppce500- Update to v2.5.0: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Patches dropped (upstreamed): 0039-tests-Fix-check-report-qtest-target.patch- Fix build on openSUSE 13.2- Fix testsuite on 32bit systems (bsc#957379)- Update to v2.5.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Rebase libseccomp enablement: 0037-Revert-Revert-seccomp-tests-that-al.patch -> 0037-configure-Enable-libseccomp-for-ppc.patch * Provide qemu-ga and qemu-ipxe for qemu-testsuite - Clean up qemu-ksm recommendation- Fix SLE11 build by fixing systemd conditionalization (from olh)- Update to v2.5.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Patches dropped (upstream): 0038-tcg-aarch64-Fix-tcg_out_qemu_-ld-st.patch 0039-tests-Unique-test-path-for-string-v.patch gcc5-ipxe-add-missing-const-qualifiers.patch gcc5-ipxe-ath9k-Remove-confusing-logic-inversion-in-an-ANI-var.patch SLOF_ppc64le.patch * Patch renamed: 0040-dictzip-Fix-on-big-endian-systems.patch -> 0038-dictzip-Fix-on-big-endian-systems.patch * --enable-smartcard-nss -> --enable-smartcard Needs an external libcacard, so drop it for now. * Drop --enable-vnc-tls * Require xz-devel for ipxe build * Package qemu-ga(8) man page * Package ivshmem-{client,server} * Patches added: 0039-tests-Fix-check-report-qtest-target.patch- Add systemd unit file and udev rules for qemu guest agent - taken from the SLE12 / Leap package, see boo#955707- Add _constraints file (based on work by kenljohnson)- Enable SLOF build for ppc64le, too, now (bsc#949000, bsc#949016)- Allow building SLOF on ppc64le (bsc#949016) SLOF_ppc64le.patch - Add two checks for DictZip and tar qemu-img behavior (bsc#945778) * Clean up qemu-testsuite build/installation- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix endianness issues in DictZip block driver (bsc#937572, bsc#945778) 0027-block-Add-support-for-DictZip-enabl.patch 0028-block-Add-tar-container-format.patch 0040-dictzip-Fix-on-big-endian-systems.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix qemu-testsuite for glib2-2.46.0 by assuring uniqueness of paths 0039-tests-Unique-test-path-for-string-v.patch- Build SLOF on ppc64 (bsc#949016, thanks to k0da) * Simplify x86 fw logic while at it - No need to enable KVM for armv6hl - Add notice about pre_checkin.sh to update_git.sh- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix aarch64 TCG: 0038-tcg-aarch64-Fix-tcg_out_qemu_-ld-st.patch- Update to v2.4.0: See http://wiki.qemu-project.org/ChangeLog/2.4- Update to v2.4.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.4 * Provide qemu-img symlink instead of passing QTEST_QEMU_IMG- Update to v2.4.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.4 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Patches dropped: 0037-linux-user-Allocate-thunk-size-dyna.patch 0039-s390x-Fix-stoc-direction.patch 0040-s390x-Add-interlocked-access-facili.patch 0041-fdc-force-the-fifo-access-to-be-in-.patch 0042-rules.mak-Force-CFLAGS-for-all-obje.patch 0043-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch 0044-hw-arm-boot-Increase-fdt-alignment.patch * Patches renamed: 0038-Revert-Revert-seccomp-tests-that-al.patch -> 0037-Revert-Revert-seccomp-tests-that-al.patch * Package new vgabios-virtio.bin * target-x86_64.conf was dropped * Add qemu-block-dmg module sub-package * Set QTEST_QEMU_IMG variable for ahci-test * --enable-quorum and --enable-vnc-ws are no longer available- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix -kernel boot for AArch64 * Patches added: 0044-hw-arm-boot-Increase-fdt-alignment.patch- Use libusb-1_0-devel as buildrequires, not the old unused compatibility layer in libusb-devel- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix qemu2 cow caching (bsc#933132) * Patches added: 0043-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch- Patch queue updated from git://github.com/jirislaby/qemu.git opensuse-2.3 * Patches added: 0042-rules.mak-Force-CFLAGS-for-all-obje.patch gcc5-ipxe-add-missing-const-qualifiers.patch gcc5-ipxe-ath9k-Remove-confusing-logic-inversion-in-an-ANI-var.patch- Fix CVE-2015-3456 (boo#929339) 0041-fdc-force-the-fifo-access-to-be-in-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches added: 0040-s390x-Add-interlocked-access-facili.patch - Disable dependency on libnuma for s390x (not available in SLE12)- Update to v2.3.0: See http://wiki.qemu-project.org/ChangeLog/2.3 - Disable iotests for now- Update to v2.3.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.3- Update seabios_avoid_smbios_signature_string.patch with version applied upstream- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix s390x stoc instructions 0039-s390x-Fix-stoc-direction.patch- Update to v2.3.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (applied upstream): 0037-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch * Patches renamed: 0038-linux-user-Allocate-thunk-size-dyna.patch -> 0037-linux-user-Allocate-thunk-size-dyna.patch * Revert -rc3 change to disable seccomp on non-x86 architectures 0038-Revert-Revert-seccomp-tests-that-al.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix qemu-linux-user on powerpc * Patches added: 0038-linux-user-Allocate-thunk-size-dyna.patch- Split off qemu-testsuite.spec * Package check-report.html and check-report.xml * Enable quick iotests - Dropped 0030-net-Warn-about-default-MAC-address.patch The warning is relevant only for bridged setups, not for the default SLIRP based -net user / -netdev user setup, and it breaks output expectations of some iotests. * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches renamed: 0031-console-add-question-mark-escape-op.patch -> 0030-console-add-question-mark-escape-op.patch 0032-Make-char-muxer-more-robust-wrt-sma.patch -> 0031-Make-char-muxer-more-robust-wrt-sma.patch 0033-linux-user-lseek-explicitly-cast-no.patch -> 0032-linux-user-lseek-explicitly-cast-no.patch 0034-virtfs-proxy-helper-Provide-__u64-f.patch -> 0033-virtfs-proxy-helper-Provide-__u64-f.patch 0035-configure-Enable-PIE-for-ppc-and-pp.patch -> 0034-configure-Enable-PIE-for-ppc-and-pp.patch 0036-qtest-Increase-socket-timeout.patch -> 0035-qtest-Increase-socket-timeout.patch 0037-AIO-Reduce-number-of-threads-for-32.patch -> 0036-AIO-Reduce-number-of-threads-for-32.patch 0038-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch -> 0037-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch - Re-enable glusterfs on Factory (updated from v3.6.1 to v3.6.2) - Re-enable seccomp for armv7l (libseccomp submission pending)- Suppress seccomp for Factory armv7l (broken in libseccomp v2.2.0) - Disable glusterfs explicitly on Factory, SLE12 and before 13.1- Enable glusterfs and package as qemu-block-gluster glusterfs post-v3.5.3 and v3.6.1/v3.6.2 have switched the glusterfs-api.pc version incompatibly, so only 13.1+13.2 for now - Use macro for module Conflicts- Tidy configure options: * Move --enable-modules to build options * Sort libusb alphabetically * Explicitly enable attr, bluez, fdt, lzo, tpm, vhdx, vhost-net, vnc, xen-pci-passthrough * Enable bzip2 * Enable libssh2 where possible and package as qemu-block-ssh * Enable numa where a compatible numactl is available * Enable quorum where a compatible gnutls is available * Enable snappy where possible * Prepare to enable glusterfs * Explicitly enable the nop tracing backend (to be revisited) * Explicitly disable Archipelago, as we don't have libxseg and it's incompatibly GPL-3.0+ * Explicitly disable libiscsi, libnfs, netmap and rbd as we don't have packages * Drop deprecated --enable-virtio-blk-data-plane (now default)- Fix 64-bit TCG stores on 32-bit Big Endian hosts (ppc) 0038-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3- Update to v2.3.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (upstreamed): 0038-fw_cfg-test-Fix-test-path-to-includ.patch 0039-rcu-tests-fix-compilation-on-32-bit.patch- make check was failing due to a bogus SMBIOS signature being encountered within SeaBIOS. Avoid having that signature stored randomly within the SeaBIOS image. * seabios_avoid_smbios_signature_string.patch- Build x86 firmware only from 13.1 on (11.4 was broken, surpassing 128 KB) - Update to v2.3.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (upstreamed): 0038-linux-user-Fix-emulation-of-splice-.patch 0039-ide-fix-cmd_write_pio-when-nsectors.patch 0040-ide-fix-cmd_read_pio-when-nsectors-.patch 0041-ahci-Fix-sglist-offset-manipulation.patch 0042-ahci-test-improve-rw-buffer-pattern.patch 0045-linux-user-fix-broken-cpu_copy.patch * Patches renamed: 0043-fw_cfg-test-Fix-test-path-to-includ.patch -> 0038-fw_cfg-test-Fix-test-path-to-includ.patch 0044-rcu-tests-fix-compilation-on-32-bit.patch -> 0039-rcu-tests-fix-compilation-on-32-bit.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches added: 0045-linux-user-fix-broken-cpu_copy.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Make test path for fw_cfg-test unique (including architecture) 0043-fw_cfg-test-Fix-test-path-to-includ.patch * Fix rcu tests build on ppc (undefined reference to `__sync_fetch_and_add_8') 0044-rcu-tests-fix-compilation-on-32-bit.patch - Fix typo in SeaBIOS size check seabios_checkrom_typo.patch- Update to v2.3.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.3 * Updated update_git.sh accordingly * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * seabios_128kb.patch: Added patch to squeeze SeaBIOS into 128 KB with our gcc 4.8.3 (brogers@suse.com) - Renamed 0030-Legacy-Patch-kvm-qemu-preXX-report-.patch to 0030-net-Warn-about-default-MAC-address.patch: Suppress warning for accel=qtest, to sanitize make check results. - Added patches to fix ahci-test: 0039-ide-fix-cmd_write_pio-when-nsectors.patch 0040-ide-fix-cmd_read_pio-when-nsectors-.patch 0041-ahci-Fix-sglist-offset-manipulation.patch 0042-ahci-test-improve-rw-buffer-pattern.patch- Update company name in spec file templates - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches added: 0038-linux-user-Fix-emulation-of-splice-.patch- Add user kvm when installing guest-agent. - Use macro to update udev_rules when available- Fix packaging of e500 U-Boot - Don't rely on wildcard with explicit excludes- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches added: 0037-AIO-Reduce-number-of-threads-for-32.patch- Update to v2.2.0: See http://wiki.qemu-project.org/ChangeLog/2.2 * Updated DictZip and Tar block backends accordingly - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches dropped: 0015-target-arm-linux-user-no-tb_flush-o.patch (tb_flush() not called) 0037-tests-Don-t-run-qom-test-twice.patch (superseded) 0039-linux-user-Cast-validity-checks-on-.patch (helper function introduced) 0040-linux-user-Convert-blkpg-to-use-a-s.patch (upstreamed) * Patched renumbered: 0016-linux-user-Ignore-broken-loop-ioctl.patch -> 0015-linux-user-Ignore-broken-loop-ioctl.patch 0017-linux-user-lock-tcg.patch -> 0016-linux-user-lock-tcg.patch 0018-linux-user-Run-multi-threaded-code-.patch -> 0017-linux-user-Run-multi-threaded-code-.patch 0019-linux-user-lock-tb-flushing-too.patch -> 0018-linux-user-lock-tb-flushing-too.patch 0020-linux-user-Fake-proc-cpuinfo.patch -> 0019-linux-user-Fake-proc-cpuinfo.patch 0021-linux-user-implement-FS_IOC_GETFLAG.patch -> 0020-linux-user-implement-FS_IOC_GETFLAG.patch 0022-linux-user-implement-FS_IOC_SETFLAG.patch -> 0021-linux-user-implement-FS_IOC_SETFLAG.patch 0023-linux-user-XXX-disable-fiemap.patch -> 0022-linux-user-XXX-disable-fiemap.patch 0024-slirp-nooutgoing.patch -> 0023-slirp-nooutgoing.patch 0025-vnc-password-file-and-incoming-conn.patch -> 0024-vnc-password-file-and-incoming-conn.patch 0026-linux-user-add-more-blk-ioctls.patch -> 0025-linux-user-add-more-blk-ioctls.patch 0027-linux-user-use-target_ulong.patch -> 0026-linux-user-use-target_ulong.patch 0028-block-Add-support-for-DictZip-enabl.patch -> 0027-block-Add-support-for-DictZip-enabl.patch 0029-block-Add-tar-container-format.patch -> 0028-block-Add-tar-container-format.patch 0030-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0029-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0031-Legacy-Patch-kvm-qemu-preXX-report-.patch -> 0030-Legacy-Patch-kvm-qemu-preXX-report-.patch 0032-console-add-question-mark-escape-op.patch -> 0031-console-add-question-mark-escape-op.patch 0033-Make-char-muxer-more-robust-wrt-sma.patch -> 0032-Make-char-muxer-more-robust-wrt-sma.patch 0034-linux-user-lseek-explicitly-cast-no.patch -> 0033-linux-user-lseek-explicitly-cast-no.patch 0035-virtfs-proxy-helper-Provide-__u64-f.patch -> 0034-virtfs-proxy-helper-Provide-__u64-f.patch 0036-configure-Enable-PIE-for-ppc-and-pp.patch -> 0035-configure-Enable-PIE-for-ppc-and-pp.patch 0038-qtest-Increase-socket-timeout.patch -> 0036-qtest-Increase-socket-timeout.patchqemu-s390mourvedre 17345139227.1.07.1.0-150500.49.27.47.1.0-150500.49.27.47.1.0qemu-system-s390xqemu-s390xsupported.txts390-ccw.imgs390-netboot.img/usr/bin//usr/share/doc/packages//usr/share/doc/packages/qemu-s390x//usr/share/qemu/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36771/SUSE_SLE-15-SP5_Update/eb9ca7bc49af1363cfdd82537287f4f8-qemu.SUSE_SLE-15-SP5_Updatedrpmxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=afe3f3992d1569b6cc2725efee7a8bff8f299f5e, for GNU/Linux 3.10.0, strippeddirectoryASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=393a3ccd66d5746d945ba36e8ed3e9c59f96f59e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=db51c2a8b492ea8e95a987262f2d69218e522213, stripped@A@R'RRR9R)R%R$R;RR RR0R!RR6R5R4R>RRRRRR,RRRR R RR.RR*R7R"R R+R=R RR1RR R2R&RRRR/RR?R3Rr{@Ϥ| galcf 8tFP>{ *_b)Jlub@􋬏g(ys.G&dAUr\됥˓lB},f%(NB te|/-ͯ_ WPK[̱֦ͻ=#;q̊Q=h 4/7-sf-_[6L>OBEmU8^oVQTPE/#v>2wFrU^>τ`Th]SgzDv{9,~-j]*|I)?u?qǾfm>ʺQ >oQV0ZFjrߵ 6%9<Ѝ̻-/ZLGTlZ.O_5]g@XGG돓X'YrC'qw͆Iki67?U5\*MyҔEQ5^0(~h-tWn EB!,x] s\4=HX7 ''noԟDKdG=9.J#R#j7~ƯcBA 9ޏsc̰"`h#^P=Qss>>PD;*~~뷕?¥4qo?fVb# ̸‱7|z71)(j!$OYubVwQzT Uk9ّeXS.9+5=u UeXOi6J(F Ь!Z%`*k&| Pre4$"RytH r^щpM C#uHRձ_4aR4+uH9oAh_dΨ)uޞv.9n'yzq+Z\Sag i.?Ɛb_D,Hyr 鞶pjF\˜Y1ƂLg*[B_x} Oa-fp]$'}֎c\eHʏ*MϣcԽŭnA沬v[d'!{b :nJ Y"'NbvTj} ,$cm<}St۪Z3Z/4L"\?޺)X/(S=39y[Üg1]@yT)KO%y/G CRڻsV#1a:6^L6fasSW sÄ?5!6ؿS:H=)9tN6l.i=tA}c8 SRgn)R`W=L$58ޗv^3D?3(K-@Rig0R^_|[aA4%'J$7՛p_l =.Q7ehf$Zs_a˛"RR1#t:sMmO`d.yqltvlI4Z'huGY¢ǝ5=塹߂%; s43 L%q W)4ܱηs#wWCg:/ު]Eؿ#|<ٳh-]sM<2@.}:`O.D| u<(Z@E7#2SC%`Pr@+i(:WWJfeElAq 2G6l9Je'/gSO^RWZrhep`A䑎Ə7G|@l?:"o ݙϢ:+bB{{$`!vU>n(CQm[!&Cې% W. KQQsF2ǨKf ]GRE& !EVL_,?y0it e ൨O?0 ^)S+-~+qBMG)U>Ld\@-PNS)nO1-6)+e @͸ x+(2ȴlNUO-@NkF6yr~S VHEMCg̘\QgcXtct%W&"p INWgA\CND'!w=pm%].<}R@:ϫDKtĈ5=XW2.2?Zu%q:I M։M+!{ jMyW.7dhGVX= ͧSGޏG4HfO;Df.gZ"S 1ĵ!P&&/ yNi ;]p~]l?q?_0{$i}ťozs3t* 빃1q@4/,&%GD!ɰ6mXDe{{ybXtHQ<,RiPdtkP/ Խ?5Zo_݅km2F#grvjEoX̅#!6 ^˝#Y -o4 cqcPToN/Cg qr\ѐu$^Qt '+ t ʈNB!ё!71j<dM1 !!o6Z1.<QryOwI75UڜR DͻU3 м^ \J2Z~--Y}n$t~JN/1N'-{fhȡL1 FOd,wEÛb=G!rf;)(O,`mɓ' L*>^`*7TdjN|C[26QŘfZl$нbk@D߸`$zقga&F'BQn 7|~kv RYtiDD~#Zmd`]utw>KXco~kA c#ݧt;׊Mo M+0HHUߦGlo[^"jB?.<9ݧ\@י 8 tpw6͂>n/_aF'*F>jYۀkdŜ (9]mrBmDVpcʜN a~!Oa2.pvf{FGv10Cߐ$z6 ?|V!H fսp zlRz5xʂK2|vzm>v'7̓:q%xW~"p\x>9˺a\2'j ;]=N!ŋgJH 8`21Ώj.pVt9515 # }JdR{FDCAX5^)$EApN)C' &ɂ̩&0#w%>'oY(}R9 ?Z)C} }y\0bi*/J9;j#O\H뢜nT)X鄁Z :wi`dh'Lvr5Pe$ -`PկW[)Ly>t>wO'K]KWrPMpyiÞA%OywC[ÊOdɲ']ٛVSrU7 ^2XtiӱD|P\FbF?޴k .b@pu=[ N|5҆m.m8M L YUVHN2yDMUI|M+aǶ?kQ+') #'Q=IZsPF)Y㈮zVFߎ쪘*ٌDo XBrpj8ԙc|}Y0`c.;bV0Z9땲,(ZB07n ~NM 6*^贾&~-MآOr4vx+1* cT֏Ed$N.1'ypC1 YӠRD W{HN}3w=~J^`?DWò'ٴ~r D{ kt;c{B&ZҼcVI:6A0[QAdcDt6{h0]XP7l׶詵3RMA#iwaB~էȗzf A4 E8u[{A桝rv]̝Wt)PZaw8n -%ٵɓcYb kLOv$I|~tIQpvMz_iM dogP/{vuB'S~k|bF;VOaTܷ&_$E,mbOi4w"]1\4_,MFt U56*fPӣސ1旺_,/LYھDҷ7QefM _bH7~қYp?\*gCƾRDr8s4yyI:Ֆ@mmQ= kvKo$d53WPŀӨ9W3,UOqJD 4!T R :{m ]0Y?Sqkީ)ʡ2 룺UV0ź5뷽T::x[{qkv7ⱜ[ij04GB7 [|s"61 F⽱d>@v?'Md@OZXM(jKB!3vYE9jw9Nbd`ͺHu'/{F#ce6K@UϒFYx79OJ.Yc"{@uٕ@lED%4֗ZՄRD!IVnս[Պ+sPJp߯Ml"ω,D">N0' T#Vٛ榪۟cxA\ܹh7b)Ãc&D4)V7icd2lWBK`]ri Jw+riey"q);,cZFrUDǗ <*2OV!(ؑ/YUr}N,蜭&Xr0Z VQ _,?!=ۤ)#ԑ)Y"ŝj9e4g KLyjt.6D43`وXSO?즋xkq*8D%ؔX]iqds}0s(ۅf;cf٫'AjϟoDLo7JO]Yv%cmDc&O݁6b d^2pW12D{dg)Sgt=j",Oc`#8xF vyLr4͐2ܹB ݃FDUY6&m6Eb,xw)c40B?/<@]/ФI:Ip l =A-&IFyHNxzc٠^Xz~V+8Yo{nyt7/c IUQ5.XJ/b.2BydmIv5wY%ubJ_*$&eL9ڥZ'*_ɤgV#Y@-lf:#V^RI3U .MGc^n0idc(J2"CxZ;~H،yF:9v.!@z!-@3mb׵}gN䞣@W&65n#Q^ p0x)w&{!tSnIk8U#Zʻ bW&-:I$ӇeL5k#~7 |.WG<E.F?F7x,HM\Oǭn"8N؃v<*0/RRM2$@ L elQp潮!fᦃ"7d8r_E{ˋ?ߑ@| iII@B ҹġ7kiY*Zf 8ե!W`/ i s ۩nֹX4LvurL#SQY>GHR[+6][X1|kuھl(g#f{ܥ=cU4VX¸ P,%}=Qu>1nkѶh<}mFF*9PF/1ofiT*ц|c5iՉ1#;+k--gA:5F9 }[ )*:w]H]EE;f;#nO!VΦIw&'{$Ik[t='OMӢ>juk1|I:OSǀm-E WĶ%?ǻ@ll zIP $p 1=\x@K/fJ# " 5N}Ra^VRZlT@} sg6ؿ,n+u4M'2B3z( IT좎;l\fe ([xwd!z\NG*~G}j[RU7S.=I Kl\v˹קz2L?&(ePoh|\4ǂH2D2;G:H2 /JAe()X ]͝@/t0aʒL:֡{ևCt8dxC^ PSEN!3+Z%p-lhkN$%aׂ8{5J 2O{/A:.eӽ.|R3r%_N:jmԊKlhAOzUݸҕ%Q<J>%FgS?}]PDp叠}j VHNt.Thv},{~ҽAnf@#Q1eLc]DLW?D`0hoi5o9S>̟݅A*H'2ӌ^;H)m}e?yK#@bc蹔&I#" D ,2 ]$75GФ hy-kAYN`x'b6DN2'C31>j'd yv0C/$=RV EDH 0}s2$5AG#R݅6O /Q?}ԝ.UdT!T_| @r1 Mpe4XzkPV_ r5E5\dgcmb#t8ev0S6:R֊|>ꢥBMz̃YV7ttIبmcL']5JO!%گ މ}{-Yq,;A.`^٘Eۮ(eLl?d/ 63`0 јefRqь#U=<Î.rS1@|75kT R{| `0dQv9 YW*$+? DTr(N QrK--O!"2UI. 7 Ѷ8Ն$[lEA"g o̺o4td/O r&;(hclV ); .>q uLZ5*HjIxȋ,w[mNDB}7[]o3{ 7 ;b]\1lzsx׈|/^HTYBr *]CJplO~'8~dFl}an>pH|ިtFIa )wc=>p$Sθ=#(uX# h>ZӃ#լKDO?8A PaȄ0+GmQ\$"aen[g$3"֮wR/>)eֺ8J-!߁h EBŚ-~c!i]NƩ)DHuF0ZReii@-gAC0+l<ԳSB]IDHpIdKǾ8AAkl2;`׫ K|zt({S}.Xv„x|"K7MJML3k,">9SVվSp7_wP]&7O "sڂ7.S%a(c(9iE.Xz[o~0҈^Mi4*.c߼CP^k?@|}8-Uv*.",|bPTayGH=e.JU0  C!ܒ`V* ^oLT a۰APASGreko<ܳ<jD_N]?H A\ןJAK[߱٥c#Homcݜj=li=vn[^H|?I,i ^weaMTJԋGdxY8`4&{XGuJs?o8hrkR샥 opy)LTGxs@kJ0@WDfS"H/AܺtK'~RxR݊x'"Ƈ cΛe={g J)ÿԳBWފS"|Y7<.X)@h536_t\ q.8" &U9iMW}T<"ބbMC=I;.hgeI3sGev5bPʦF_ !,w- G8\^Q C]APўƵ;A5OaB5v 7,5$4ְ,w[ʲ ʅGh5z2q-2Ȁ#FYa7KJgcŖ; ,y2 C8b,VSiJU."j9E)6:uڲDXMhb W w_*faAOn_^ld7ʼnʯ CG%p:M/ãx XE̺XD}ʳ癿g 4]E,G!dλ~9YC"(W[vt.c*iM&7]6sd⑓qfq*i_0Yh֒GiEF?TYr<4bvA]?㋃-F3|aEJt`?R|_.@ Lb=a3{o<~f(ߡکGh>ZG?OH3d:@0Y Ugiu{bpQt舯ɤmY% )h݅#z%к{Q[ukKs.+pɁ`9p_&οN5{E`4LzvJ|]|7Ա(Csdn|"?J:U]e~9.ϙO5cqt :ϻG%DP8l,i 0|Iw h}LZSd[Fkޤ N8l$$bAHc+73MrlE,b탴N'֙,ߋL0HGFSA#ƙHbgnsxP!,ezfGq/ocs%G_E)n)|ueUQ:2ZUann_ WN5993 tbBMBˡ@~,P)3v~ ^P>{oW(anxQ<^~y3tn•1װJ| ڻnw_`rܸ_ A)E(gF\G&(4[ʚtk^r ]RdrvS}敳1Y!/K5 Ft>CowuqHHBoL4rk#LgmǜV?Bow]4k|6e.6&,EL/܈;'yŇ]|CYgY(AÎ CV4A!*u 8A0iǍ4܆*P]+do%DJ36Ѯ_{־ wZ~\N) 3>@&\n^ 8Euxdl$=RБu"%} `GviQFSEznen/+ҽpRNK@% *obauHDE=LZYR `_5J#.7U?zޱQqeĀs5e- __٫3 )\u;NrV{ĺX>sdhTs<J'"焽:9pDE7ҵ_;B<ḟO_AHvnPhpyǎYEj 2<)O /'D9 --҃ֈ N،,ԨхQ.asYKs\Z8;0&s.~@)qw#qNH‰rDJ $BNxQL$9srBbF1ӌ&dмXlÙXSBZS3pԉ&WAC Qvͤp>cCݤSc\@qs" AL[a鉰RەȌvL =; C.LbloMΤl~5 6c+I~>%*Q^ReVQсLVK&R1UKr4~CySʎ(Wr)U=4ܭ)n"[ G#&UH1{l>36%'M g=r Xgے~%&|5&q(e HR *2N;Ih)BǞoşFJy~Ŧo};k hn|`#fZ_>^H%ZZ>);JzߪhlU/^H8/5)n)gA{VOScF,) n^N{/VxOˁ0/x!hd-"p-z IjGѷw7G['v ZG Wa OplyAz#]0^^HXc "3WKZ1HQd ^y C>*mB~\9rwj]ht 뷸1]~NGcO9p~KiKf@eDK_, r ?ܕrTdm>|K[t5ILQb&tX`}>$ƵWr E( ]d`JaYR:ecÌ򺆥XؑzUdwksh"O7pا5Wj K^b 7='"ZBN#5)in{>2O]$F]gip]=c#Ц_)pζU%@+Wa(pgV8V\kG^͙ek󧶚L<~< ƀ JoG4 h;E >]Q3hvK>c$~}|RCfŊ(철G$4 8탃+;sވj[ e`7k z2 *26P{-]ݮhAYn"Le]וԌkfܹg7'aKsE^Ť<{/_JABbk_TQ5hytƐ5v\z6nMMޙ@ߤFt)LK[S['CFD q_o"s[ ewR?l5Os4=qԨVAT󆹮hѭƜɖ}(28Fk ɥ[N§r+7F@A9#>my %RsPMhK{i_z |6-&> W>SfpT+~Z?oP. =SS|^D37＊cE(DeN?17 ItCkT!tʋl}{AU瞴ge| -]nE۹8Pv !9(_5S4؂~eC6ĻR#/TH pp8?)ٷe>5%'MD"+:4 1WԷ ]冦|}3oQuKHx&>[CT\rTL'崳Z,}CxDȉ*m@$zXx%'gg8@h= "Mp Ř%Z6.C%)n' Ue'+CVEsGbA]B w&-D=RȈ a3OR5L-Alj!+q-Ō&]9R1O[7'R筴٬bGZqLâ `TCfla׵}MV|rgO<(,9x]nZN7+%Ct.Ĭ,N[1I4CS!)\|a1+LRqlQa.7r$Pmz@= F/ ! *7UKen>O}6 l=sg\Y.+6hd\Yv$/iouo˜O_J8X+/NUb@sSM4XWDP$)ȶsWi:owm+W(ћvJI  M$޽a B[[e2S, XV m^0zd{[c'q`Rpn)R>|/<|j:DoA af}ꖋ#Lu{3Z UNj+·31)!5J Yj], ֨qa7:6PشѢ-ڵgt-[$ Y7my زC;XOEdf82~xggb@E4XS]=99=yOtqÅ$f|3;zđD)#yfis<~nF@Ǽ E:R =_4'%)Z՟&#2P"U:z`3$&O+1lQϣ'QϦ-(hei%t L_UGu$GWF,Bg%w0}uwt$P{ED+w57O^R8Xl=Y)\4Ą>(7hwQ=:֞v\jc\N.Gx+{Hu tWHCorn_.HCEe"gsDRѠP'=ð$Й~}=ľWeŶt. ׂҦQ'u9R)ai4[!ׂ &(*xTV.ZMy1G[h3(^m4+Y9,=g"uo-?&cYAR ${m,f!q,g.ӯkc`GRfg<吤42J?q}d*h{4t}c`V40 YmuKNgZ&K2l@ 瘽rIC'+>ߒQ姞'%]l_y7txɭ\u3] Ե'}濝Xϲ^ .Q[ഢ`Yr7-5 jC}6dcc>ƫԃP75 ؐNx VR8jd RutlCud@HVƜƉXX5=<`i䱊Xyх${ lL;͂ՋyO=&G%(ndE<).jN"KRr~W?ٵU) nP6(M7en:Yh:ٍqB5ZxZ]&#&(pfU}χUFh"f,s1l=f*U#\j3'B2#– i?TQi̓?k3(Nj1,MCڜYr#2^8&5+,8.䛈KґcvnRDÅ`"G@(Gvָ!($DݠB3ׅu8a"iA7aZfɃoQǵ,z+An:vz̺znKvcSwm'"PpKt&@EMA_OM>•JN焢l[&Q]UxjnRӖz1gv}äάD"SK)@@}о!\2E318%׾e0y7@{s~tj QcWp5Ƙ ax,7`hC0Ts[nL\wq02t,):RO^1B޲"sU&cK-쇝K$\9C̩l.?s2ogR+^4?k, rEV <g7 _[}\Jy;`:icX <)Md_I)w6!ʵbl50Dx q1RAӍEgK~Ǧ,R' UQboҝœO!0Q'76Fi:jĸAUj8\V,@2)7d+GY@_ }쵢U=R7Y34,A`33 y]DA+ɣP9AS5`C5"9̀Coȱ$p'.&}ku MT\NݽF?HCG R]Go4 kZb|Gs%EejSYrUYezE0#s&%q$Vq<KiNu*>_ "i+Jo+~wN T! o$wHlG$sw}cJ@Xl/ѵ3 /?lE!&P^ +T^)ڛSٟb*9_rߵӛt.ǞyMa2.Ȏ\yj-&3oZŕQ(-PD(ܫi6LLv(.+T?=pP&]i'cnr&Q9͸e53bt 1҉0e1Gl#Y^C&^RZ=RBx7QG !L i~dIqu>%$*)ox#M [)|;=?JaEFf.$6A5kW&^&_8p' 2N`} Va z(vEPrn]S_kǿx;*׉B[Ktbjbc]X.ｏ 4R2ro.i9 :u(3#EdTCgZ+u9ns"GadzNyB `b?x2jKȟ% "L'c8BvՄmr0C(^a+p"CekHI [>7#/tT J{Wf@9o6:=Sk"^]M?悙d*OjTl%ՃjUrͯi;>e|'gCE Tl. @/?QXө܆Jz\rf;csҾx]ctXPƇ^'x\yE_dHfrF%?dOZmz\:GRhk5 YB{ЕESjlR$^ "iq&rڙGt(;ynsTp %8JbaĊLU6FoE_ T ?(jPš^^;9%[ ̪qo}j`<ʓp$dߢEZJo{ 8)&A))3Q Ή==AcDv`Y']Ǒ{V}}~*ع.ܗ/@%4YHv}R),7EA]RO.+SA{M`BDQ 9 ؿgOO9IgI\ d[ ϣ{B€"4n^?hUK$]ep_p{?õ(œ1.9LUxG^a_v7"tc' oDyNcJ/Ith2p K@sEpZ#_ zU7i$QyywR ТEl֭VD4h&RҐL"Ssc[LJQ 7Ha:(ϛ1OCYuρ;fOuF'[B\v{%c .Nn`DQoZ[yRbd.< (%=OnCp*PJJɻsF~G:и"D%c2 蟽]w)ahYڲ דUB]/+32T_G+$\jgqN?we0 -c"fiu%J񰷿qI8 bOie]nKFX4zgœ*=Y]OPqo.xU8Iyvmr4/]q51 ۿXHQ~AJ[ >hALMK.?M6m0H-SHpXTN]*R b9 H2&Y30i["j'¡'fՔS(>5VFL@g <-B/k#WnNC9lM~v$27F ,L#z ,sO؆= f` 7ݜ@cLTw)sD@tAJ!5#ȬRwӛy, ,>{2ohT\("3e{Ὧm6k WTx.֔cc[?.=A$t}Qqd I@pǶD_B~&s2oDKI~2ji]D73AѰ!H+mn^j)I^*N_MZeu2?,l*n;٦Ba(qKѾ>>&xxnaP70}[|n'W*q[07!S&=?E*nJxoKVkwa +RQ}h{pR*DŽs X|-bd-;ЧT dR6%jv*ӵ:2@`'!VKmzZ/7U0\=ڙ1Cs.4xu_JQ+/* QjҚZ@dY<<7^G6 o讽b*IҰ%DXqhs j 7JG3,֚hi|%6u2n'.PBhC3s"Zϛ XTsH:4f Jϴ%ZkDL;x0Qx$;2*k\wo`#Mm@?+ɀ_kG"jVYO݃σkW<)5bjOM1Ga#uC3s/e>/\o'6nH&m`Ze_D;kҕ^f,&y:~$9)ia \²:x)HMߘ Lkb@͌ 4 VPhmID?Դ)ahal5Ҵ 6Ԝ js sd:?(te x3Lx@EGPl{zOb3i㿔!3|_ADYAek]/0>eƗ?h2* ύfbt0yz{.})DrDe1?}e, EFs Pxv&àsfz=_ K]@WRsF&P2<݃T߰8`omO#}#<.gJBKRNx.SIIu:ij@PבP':jʺ6.`ę\.x{2$ ЉlD̰ I-*i0QTF[]e |KуsW; 敝jX-FCt/[bpIOŖ ^8ȯ ap2#iVzͼV+ԩwb ["9s鵚4LQ?,STدT,wXaC(f/ ;̬XL5ܲH.@̣>-dx# K4int$bl(Z0DJ:W"CHM7L =IADϬȢ qV)~iz2n7DSkU'#"9  [؈jPϪzZ3?¿Q6Cp_i2v*@6s) 6z"FX Ws^u=tz,l_"n];ԗ̴Rn=+lZ8 tǼ1nBc&{ Glu^2mb ,3S qp^ oNa :l H dӹ:es!=yGv3š ;#Q^(Ǵ,_ ($A3b]TB0UYۉ%{$r'if=8aq)Y Vckd<ֶuN1_uLOAd߇W#0qҋ <9 J]5BT#[xNBm-Y!>[3^!Kxw@ 0V7p>Mq7O2m--xcO|8&lĀ݂.FǤuˢOđYO> x5|B) jPxHa|D~T*Jרd-}edLJ50ۖcSx!EGr/@`@.{y~.Ə`+- f3#<>Q-3Z&k(EvoF-?/wJeַlROvmQD.t[Bo7*f.9 hv\ }9"B Ď3-pkU{/=eueSXMWr˂CVۖjXl!IJ= V8h]Ҽ !tĠPed))}O29OJ/ nH 腼C\{8Y[#bCտtiw.1ҋ#5Fe&OWVϖ؋07eMSj:zaHK$܂zUg9EYޛ-*[BVSe;/ѻ˃s) LG8(j^Ai@4aD3})CR7:Du$t͆64dsPh>lF/`E,`& -xYa5*=fpHmYWĩcF&[a $ah! SsMUVYO.L'cuXg;o=V3z︚fUJ5)w t)NkG*N FdPQuU2ßRv>\zޡi+ iI#nP snB[+=/ k1͗98S6 < T{B3ЛFU)bﺩh:C̷:N O CYKU%dwU>d7eikM q7JvP Я|2Ӱ|E`O4cICg%sJ+Aovm@@:%/Bf&+$,_LՃS1熎m >&'Δ*iDyM>϶McKgvW~ְo‰cފDG}hwJ%aHwI{%VDM_4e&ZEҞڑS>Kt 'qI:o_7#vv ΀e Myt*Srus?NWR"p(OgZI4t>n.b(obSO Ƽ!)WM@=,ZeD>ES޲WG_f<<3 =aWVEyv`D´V, 1&{ceTw+07kEò ~G>e4sFw8ޠpA6&W^ cW*zx2y }E.FH)'myDS!wt.(Zigf*> +Wؑ`].kY*2MC8?kfq!5_#GX+>ٓGq02@z{x`AvCx}%2@:<V|:9+=x^RG &O2 6oiJ{M.<nipQpuӃV(>}JOnl`h3ͰnyLjBN;;)T$>R(Ua8O58iܬV"G3Ob۵ Ish7VOH%R[2+d͕ښ< /"_@K60@s.K۵VPQNIԾ;΁Vt*sZKϾQ QK{*NB^G7t7&:nxrC|\ Tb^hAQn>"v[$PUIʪq-N>Ԯ/۞4zۍj<;V\ǂ٪sMvDAoDjo >\`}o]VQ~2mYyqe ]vY^P6JSHLG9w~$V+JˠxĊCOq΀ä퐦ܫuH xvYߎ> Se(Kf<Ԟ"",])P.P4(z$"!PczC-p# O '(KSBO1Iq+/TuM E$3X[*3 C<󯤋;PFeW ."-T̷G݀bl "`hj=@[<9'QXVu'2Z.4q")Z`Ci!xKyɾ[z2`9śO ZU6;ԈM(J2Ù!#7O9U8"t cCRY͍j ;?6kל)X❯GiDcA,6 u( ]dL:oB͞%֫\)Z$JXM頻4HƼ ~! eQ#2A~64_C`5kV?}LF2&hh*z昶?@k-pA98ǯй=cZhu1nPQ))T4 Gs\UIJt[_ރ׶aGm=}og#rX{YeP6h~] 0MUA,oXy0 I 1EӱKUv J([|%.z6Էl7#[@Y6&wxMM[RB/^#EqlL-MijJTp A 6u1]r5%"f<~T֝5j4Y1"_| HN}(7Jcn<=[Gs2q)E!ʔܟe N|9Qixќb (5 *(esb=t0)~UrW`ǕL0F{)GA^w8!NC);ޓpɆ4Fd+$nf! *gqhl4銝j0ꠝ2oRmn E0i ā#voHh%0q}u釤pQNd;QY̚ըZϤ 0=\rչ(5 P=2V#tN'Y3減֞$X#ʯ͑|F_F} Ï[->,0ڮ`%5-Nsvl+N{>jjp8i_,Tz$E꟦jmWDžX\wwfn.c;{[BzCj/1'F\23mxcϙچ]Ͽ &Rl!a7tkɐlTu&l /J< X5fm1|&|W7Xy?.!M*tBHhvDa2 ^Cy\\!wy IᎩiiH^AzڇNy\[ y ģѢ~BM"~_L]Mwj7 ]L"֡k@yw>8z@[41 J!LZ$)]F yb+e7X*ETR?}}՟7曂&NWx< KU?ӹ{m,# lOL֢~St'bEIђf qé]:@f֐Ek^+]!Aycq3 -ǎL?5xȖ YÑAۃ'o#A:h&xNd$hq5Ɋ*(bt4zfDi0`Dejei,T^OMkn|iمYY]h@CBC[=9+ D5:3edDe޲qu\:Y -geݠ]I ?*w,ۋu%= &O`e;2,!_$Aoa(ݩdN / fڇ$6vzV.w+XV].1xjlɜ.u8Rg1F4Sg_~pWȋKK1 XR0rf@6WJ1<)l5QP:;.?|E9( ;S8<4 wAX`1!̀0U2$rHP!m/KΝƆI+YV;87ۮmhQû%`0jQpRn :r q/ɻ̤EG lcRn]9rhQĔom2v'I ̄`5 U**"riZbc'oB^"'=şsimqyЫ6қ9_2 miq*E ^=#*wxpKqG3 6|i茎<ՌA旂\,U]3"4?㾃 ]rAKjp[*)u~UQiͨCxTX$X"!.L4κb:>  v?0|2u[="ڷs}]N,yun)V( a/]n80`#R*P~ _MrˡRn|QTG>6">nqghm<`*>8HmEC u5O8$$!,8٬@?9ǶBJvx&i40~qqֲqX&=X#@څ}Q}F +/-Òܓ^4@xAAt7t a|@/)q;Wԃ3F)`ߐQX*PGZ7ޖTM(E:zͺ/8GE^q UO0KeTCG P JȎʳAYm{-f$7xm! s;`<8&r>S??^*\c4lz`Y(ԩLoAY;[2;yytZ*8fTaPo΄ByUTN4~D¾*ߦN0`}NT;12 tâ..H*u{`T7kMP_-jYj;#\=;*Yv!OLĎ @ɍ.#U#b=gQCmzzF3*5AA\} h-XeL7ryJT .S6iyRvY93pcdPӼOES]ku:?oOMت6K~:v|[~&Z S{_вKKolWx >Ƹji"DPB}J7lhEКşZll\܅ )UPu//[e!L1znyA,EcKzSm 'ߎ`zC}Ԩ뵛4{92!O%q&c邾hIZn}Ta,$7?uNQtw<1e!JK4_Q)Ĝ!Ѣc~ZaT#2]&տM!JY5IA 25 P(D%Ov J7j 4M7.On 旛1#k :NDyb:c\B+H?ױnZ4Eڔa)R*cj.+ۨW[msq[6RNH veU6jGxM6VpsD oՍg-,.RGgrΐMv ZZZwI 9< @m :Ht qQ<,|˕`Aw{}vIvחRTZ=*#`TkXt(@*Q?޸͢z(1BAE dx'җ_ gmЩ!4\Ж綧fqtו]kZ J!}ݵar>2ɒI;8K+/[o.q1P}pd-@( Rm+_}|l&L?*,F9zu׭t9f<:-1D2{=] H1s%0 }N-5Xܠz֝ȉ#6ēFpP+6ŽЫ~F~JPs3IfSIëH2e3Cv8zw@HK$+?"2[d4aͰjdkh(]Ưn8~(f<T75`'tCL۔i!h\Vvz#G+ BKCoWDKb>M±M%ɋŦ%i՞;˄nl> $o8Em/Z+CO l PgvʘE0U:t_'ZD9fN>Ʋp8?9F{#-{ysy o(VmʟEP8^uLtE2jj[J˶z 4MT{M1}VU;|FDS`2Gs>Gʡ2`]='3z`ͪXRM}yB14EB`Χ,j:|Yp= _,ﳷ*\ T_r MS=YKSU[ϻ6]JuAŁ|R,- p]ZByA+ӪVzR(d3אԩ!GO2{T>Mm@u.rOXe,a6Yr{%uXR>M:RL."ZurzLL0W r3x~A!Btua#sxCVadR!QG7'sXa-Ehj3yw[ge S낆-ob\gG,mDc(&"9Xs.zH]U&:T<i$mriu[)gS5JU/U6IRjyqX#&I/zO g],g Pr+'ZfKEG1}0Wg`k`iD uPs1ʣ߁7t֨%G0'Փ 2|QǍ K(L21PcC"Xר b:EX׿xaHgДx޳{j.k }Ub cw_ "Kn)Դjù ,""לklWTfMqLn FO"`ϔ|zT0F1Ac'̦أ2/9rQЫQ7T`j(_= -(o?.mj'ҙ~?I-yG41 ̞2f? JҭU3l3"9k1iPJo-xB:}XSicSUF #oZ$-['O{UY!ߙmc3^u_ٔ}^'Gk} JVVGBX Lg0̹Ux`3FS9 K%S3•2enj~;lTDBm6#&c(P0t:{(_,ѐzEy}U(|$I{({3b@1Gr"?l+ѝ"8]YYgaGyE P f含֘Ma!<_$vv5XQ\ hhXJP RSBe{7^|+%`moT&f`X׉W@0QUɐqî򫙱Kv_VΰkAH'G<:lu3&UNqd&) 숶^ [#|VA, ڜ~ڹ5TmӔh~*Ӡw{/3_f00$R\D4I@e\9_(]2la8[ qPktKz20_4Zx{~bhn Q}42r@n{+*}Za._%v: @ \8޷!ͱs,Q Z]u X>xqv12/P*MX%/!N(IG&+giJ'Rc{&yj[`^BF[8Řxhx->H,6o;2n j{sudB?3@ۇʼe@]S&V,0Dbv'(..tvrfJ̴w)P0GT0X6TW4٨QNs"K#R" xDpVSʁ(5 cԛԁ ]Y D|'`{Ow ](k#]ളrؽt8- ^D(d|3_?3GEv5wdJ0mxyq˞Oofn'C});<$~.{('F6Ck}J8cR/qùɬfϔ){vH[PGiog&/ߕd.7uhop״3mHB")O^c:&l/ˆxVU o_NΔz)M9*\YrUq^)mM=\l0iE"8wZλ֦YAxT^SK\gF?#٧!dN7"Y$'eELq<^gdKɓ*J!K"~#X]HCY.$PW(3iv,Ҥn)н)@t`x?,Y42ؓ M{X T44_aOrl?O G..o2}AS34 jyGuTr}Ɗ-E6}}by 1[ ky3͸O濙BnBLcn]o6ٶ `a J߾nJ6MeBwSiZu0yKG6?BN p hj791+1: bYs:7Yz/łԫȋEKnw qyHzCj^-$<ː8t`AYE@; [q H#qX @A{-A:`:xne}XvǢ{O*Ȥ qS %J G|a]E{D)/@H/.p:90 ԛ{ҘM1- *P〝+N6o!opxOP$5|f$b{S;Uo%9I‚}PSAb0 '0i!غ2trbs--UY- C5)忶n1/p44\ߦΚtL5'FHB@Adt,(Tk<'fh,Be;VK ًNj`Il t!O ED;ٍa')E6\2jc&&)" LJ͇È^ȅ)Og20P6$Ip>ʖ^4Yd*E; s"wjMv}ݓuj8x̡]T5K8їjh]i} F{+Wi``ƙ.Zl U,n纟D;wtQ3[] aq%lr ~U Y7=]/1O9ʒ왋+54>1 :xdwmV 3BD5K)IaB/WԚ\zG:#6)ՅȒqfΰ^(FTSKoF: = Ԝ%Pκe.4(Wk(WzDekJ?SJW*u`W5rՏ*l3?Ͳ^ٶ EAGݎd; DF,lA8r"BtJSEDXfx@/^Hyy(m Ό1HS^ :kEK4c3͛cĪ u%ؐPz3 ‹OfI<UF R`UiEB &[qR&!PAPlXtTL;^쟡eE{ ,Z=ECˆsDm]m6~ֲpENnT5WcbzU,kb-Ƈs>iM+#-q ̭9;7ף3QlRݾ!HB$9>%Fq)`܇H+j`a≄М1u ɉ%!pc6*A!h=`bto%";?a:ºh.ԵܳjsKBg !coxD= +>%N1Y*cNXL+dT}qv.;HÜ.{ 04] %~ҠjzϨ.{WʗQa1W^`Z(ݝ>ɯZmGMQVݰvE^ U0ah|*tBAC)X8odeG'YU{PW/&@ ^7AXR:Sen)D%DizD C:'')mw)GfȐ{ZH>1a W/Azrbw9(d3%jC w96d_9OE[ϐPPed?\sG$XԥGL=p=BraݯQY)9aa Z;۴0z`V=:} ߚLIS;$NEV ۆ芚h_#N<4deq({`UQYC(Z<еo\5RكܬmK{<uзVWhD,(8P\{,ls lv3W=gTs#Phmto+سb9Nލ %蝏Ϟsq==Ԅ)ۋ>>Wm9o[I8OAx(}cOaʃcT0<~lacS ,FK) ӌ$oXE_D#zd5XHXi٘QP1')K&,G8WѮ-~}V ݮRo P.>tnlu`{pI.mtZs9c3N=V^(:?lPCRݞ]8#4?S ▪Rލ }.DR|<*8ۓzڕz6 Kyq;Ԛl @ӱKȪK׵Ik.K:WdO&UY[_Q?_zDhwnZރ;3ڻܲtsh Yq [d7TY3Ju=Vz'f\ދ~ny"eD̼S@KէIa-E\P`ą"#ޅFMy!G2ݚ`38&z"z(Cgb8Uxɨ ib29OaXFT#{de>8z^u3qGcjU)VWmDw.:^ %ERAh= 0 Nݚ*vu+3&` pu+rc6l7ΐv~u)݅B"z|iKBzUme+*z(d6u 7%'&k(& Yx0 {:4wvtIYl&A +)oɦ\P |"׽2 zEײ'u^M:)g;F;. K?kҴOkuUΙFQW.͋ z!:"?=N{JL{}1@i, I?6oX‰`&uicm"jdЀqdj$VC;wj ?4*"[0W]1'hPt^% {.hszͲ p DWqp[I2E$M^^uLD¿mW67աe3 K;3-c.$f Э \ؒyDG-a},"Ħ]lq#'Cw{a8YSWHqRS@3RGB=~3Ѿ l:"&Ԗ'U6GL O~ݑIꇞ߸vj͓O݉olcH+SX4IƋnpn bѨ3wUd&Igccgp^\@uDz>CxO|h uEC(NJ0WCBT/x_2%"Xax `eLpllAT%TzMv9Kz|k5ؠ Y^Pqm..({\*[qst]' + D$%urapwei37w梣h}B4 X8-&u)<ΘL5C+)GD# j2h+|qKg[ɈB]H;

ڌ6 g8` %GӦOp 305/H%~Xu l0=4p_Q-ٝ?g?-nJ ¨ebz2Yε <5+A]D qa,N & AKqI"9oShzzGd/U KHq@]Xщr !][]H:,Z .)۾ v'FTNP3ph *GP{}8(Oy&_6K<0:\*afZ3 9/a5luw]o\J{4`oⱖ C=޼AY  $Y,O( E&M)-l;tτ&+&RT*48+0lfǢD㍁ ,\@v)S'ͪi !]$bL2YMmb;f;2~9pv_0B;V+3`km Ǫ9E;[u=~ c%3+Hvuԭ6OClTR)⢿I (8h3id]giW!\Z#P Ӭ=&8x:>Y;ꮇɈz'ApB^%9N~<7-X.HFX%"r0:aPF$ߦw\g/gREy!n.4"e,PN s1Dgpg>_ _ca'Ja 9cvIk&֓j2A%DG%S+)ɦS?2yiCo*κuГ鶖bR)3VB =iҲNjgVεs{3aR[4M8t?68\Js%Aװas۷~Fx-!US O" 4bKŵ 'v݊)֥W*;%q"<4 tCĢlnw Ez%GpP))\u$:E.0YZ` @K/Mpk;MCI7Ny卹k#D#Qyjnģ"<{Ư[uzVQ)i`ՆOM kU-/gRֽz:~1AZy`4 (;_}́M[9 lLnE.Dh/'6Ru cQ(ۿZ$]}ŲpW2Q 1up ,µC1ȿ@o7^nXD^mXP=]bny{N4@lWh p%16]WܫCemmX4n1U\ثzzCV~orRV5qH,{*}gK'JNec( *KWG Åؑ7:9CA4B%?6VX]DiU¼R8fd[Hz8UU ӎfJqd&0dU&Y}pjg{nR.XkYQs:?3D }Hy\VrH|\_L~z"Zj?Z6_[M<"a Og8j!::_|~;;f+]V9t3 nǑjbyxtNYy00&E+2MԀK02 cie2]_zNy~%j39Fl {̪Pnky01?(yq;-RipnFy,w KX8̞KpY5m"Ȟ D@Z!dE-Η!(zt8FnQ@ n+F!vӏ<9~|s)Bw5rmqx% \=^ݞ= X܆_5 @lq7{.EsNߝ6HՙO]PC\mziaB)2,)A7# Xq7#>խdA,@˙JVz`Rq_%/QlN~c^$A0Ii%W\"rNb-UwT"B[R@̻.|7/e~24 -rE8+Q]St&b/" NOC}"HVGjkvDy@}f:E˶?{z9NtDU* ȃ3w}kEUEJ4vѲzž^݆i7JI]CeS |R(Kz!k, ?pF1f<]wUo%s,tfַF1@}AA{(!=J'T 9j:LҿбUx(wQ'7 l dB:Ly``H8Ѻ/|4GGGhPT. SO J2f Hx܂B}rCcs\%QLG3r=S؇13Cއʟ?n"Pq.r\j}E0'”mYJGM^2_~ ,rfш q\Wpe1Wf7B<-yF F> &Q:K">*֞ե+Lݣk'%Ҽr3ƨr5M]%ڮ S_e#k4!b6mњxtALia.\Pf &ρbޱc< gÖBrT_dFnB̈́Ϟ#9؆>Q":_7o:5ɾ"'Lҳhv!91(IsK7/$jח" 젙vAm2!> u]@"R;}K> &rY1x;n޾qCTלQɽ߷F*ƽ p]tOfK˺/_HQ.יɕx f%Jt?pL]7Rx5ȪQ_Pn Y(N::FD]#x 7hǹuJAR9PJFotI\bР&CqO69DVPbȵMN)Ɨ0i*޽Hegaӵ|L1,?RҞ}0|^K͸XGS0`4g#80(c6;a#9??G.Ra; ~rZpUHL&EC;| s$u CSeia`Иm=BS_aTšx1̀- R>!~~"/K[IqB/BVAV|hNA<9,BN:('L-/ M/qZ徐Zʃ|?zC f̟۝V0<;IEes_C7ւͩR@&%1ksm FRvIvnR[7q{[L Z˪9{>u{$6Wn%X|#j(FgO`% xd#MPTH`E eӄp:B\.6~Is2F9Pj\!zI*ExlQTL!EF`W*څ[tf3A_8Ȃik؁:$rGlj%&uL' W:S Ѓƴ+z;'`0 c1LRZ3M![v2'M7(qaOՊm[@tgV3y_0g:nd)2 Qe+r8H8 7RwAJOhsԽ7;[5k[ Wqb 0R9XukJDcEn~ާ": ?s|qAr2γ,1bV M b YKUQͲIĔIPL]uEҏj%h|~D:$%G"n%AEn8QZ5ͨInVJdy6å ;\7wv$6 E. Qp?3>RUun+)Zk d2=ũ|)jPpݮ\=Tlz0VlA'\xCE&{ޛI"ӐFLL9;l_oQ&@AeVA#c;dœ$yޙ5D@>) #d$wC̊[BL| eKh`цZVt8k+C̬^{-rϊezjI}rpY4AFSr-H(|;VxOLaO&ugK{wlP}d{.=cKyAplr^|9 /ɃcuX56,Da+$2_د͘~M:+5O8`|$1 8%S8.(%)\Պ(6@B]4 sF#߿9]wSw.بa[;z $1r{2qCq$`GFı;vp@UQ'T._=x #"ۮ:nv"~ukrKRo (5a.5Z{$'^I }{NMVؾO9>(GEa@ùO,)ɟne3Gǖ5:CѠD_Wfʠ*}~N!U{CG1t9J) MZ)P ]  J{1>q9~4xVतf*܇tU<mlցޖza >ŜP 18&%i%eX`I}ܜʹ%;uC2{]yfX#\LR ~@Ɣ`wH03Mt#*:|W ~>C.l6`ӏ(Q0`r'gCpPTFs5#s/Uj'WZo }:v*%=z{1Wk׏ WJo!x\M4pr|։;reJg$jf_ܾ",aն/sv_^q= wT4cT}4:*k:r\\{!c#C+>0MGv6u9ck 妫v$p܈WM^0mF';- ~=CAMo8Z6y!㐃8bwC^ ~6{HE@);Byr믞GRbh1҅)]$ĤkqbEI^}Y\p&tbh [ҳSN$1o*dliy]mRm<Ѭn8v̚fb' 3> '_!CKG=$ fHCC Vt+)NSީBRs#ExԵ#cVĢDڰ&$mL5!g1̩_(U`q>wmKv8ys,)޿, $Ei k%1]M%;)?a` N2,+vuEAԛLDyj̘2=hϒO* |ޕySj| H#ďMm9BbK N1ͦM6L=ڵAC؛z@.r$J)Mj> yj9#NG`] Y:gl6x5<ⳊSI W DaD \z+P ;KZ']A#x0x]lGoFf`//sWǍ{e2:6F_ҩDqS8,T +Mq,]uk/v!2LUZ/[F4/|֝ϿR>BMo7 >j\fgH gF6@_f+( *w?9 ;Gi vS֓zv@"'8 WX28E#+/NB1`fq ĥ 5;@vXF΋]U_㼾שEl7F}sxBFy+uC ߗ>X฾Ř}gdϷx gOcA?y%} &Գ TkOұxVI= }@z̕3bQ#II>!1@Pj5~sAL^ksnV%U`^K࿜/y܅Na#˃O",Nh\i7*ӽEL z+f:qm VPd0>nuͲfY s}[r4F ݴF>Cg:W =7CeڻP~Abk6u9OSo!QNG(@f#mF1iZde$ T1.zhCCvw)N/ӹ(g;ˎZSF_471Qvݿivu0ce.z=MvZ{vP{ SEQ. ʅQӍKZOنۿ vusJ2`{l $T=v8nU,$3-+,"(W԰\8\$vn@wїL^}8  Ik!esW1Zo{fҰfqƺ"Jh=r;(*~=}C5F,(]UJp`HoˉK"<9y;JPVpd9r1=nQe;tIU`7Ou,|7 ')B푬~ܘf}֛ ۲Lٮ-<JPFS[L@cZL4fa nwdI1ru5'|@ o{H<&4蟎*( g//C dnXK⎝)mq/XE1VƪNbD)R 8AhxyUANo.,ջAɍz 8PI ܴ8յ;{UA0XT bfk\~r쌴[IKm灢D^= UtkQ60܄d_Ua"vս[H\^Bt+^~"wPnpjԫCPx̌S_2RcugQCCc(PdQbK|-WKlp^ AiڶXz҃𵒧a)!`Jzqfb|h%JDQYD0"'58-#gxｳW\/\PS)bkp,N/>)H&ƽa&~)R SIF̍6 \-0T dRC0x <*0A rsnj>Lj%ܺeI ?'XRQ@d82m֋]P}KaT41C@N|=of_" 8+h:u}qVau[ BSc /41 #k?83(%2"oo SI"#[.zhN6G~5KL1H$PA\s7F$AG\IY e;N6. n@d3>O+^0𷮙c{1!羱5v]Gu +(yUE7:&Y$֙>יj{D #4Z#<qeڊ6,ƈ@c!/KS*'6pjb2|On֕@VL[$.TMI:WB8a)5; lvqci3"WW7!`l:S IB9w'[^=xƩ^%;)eH/̌cu>\CM+kڒ.)gѸT Cǫ+UB#xwArHe薉"MrCO^=:Q~[Oysj%(#u '`ي5Lۜ psҬN+Djw8r]g}-7+f][1XT=s-oӞh6PWIt){\c01 ҝ85 x!?K6-!T@0XmpKݎqd<!CLaQ03LC ._h@)'^mE\(I&  z4n%G2GfZrkx?HgdZ ~WfH ^ؓ 6 |AR N̸> #ڻ"#U@bFrhA۱úH9$LD@Sa}<"l3\y< @XMu"yt&Fzgb$ad*o•R*–՜>YQ39&eWNOϡOި^/Z{Nhɖ/Or*IYbgXbo]Q{*Oݾz_P'(38㼳Jr6߉_iTO+z?̉^r??{rCjܴȤKLr8kM9rm xt9JKb{6{X 5*4bEåd&* X[JrUPm\ֶVTj*@)(ϺN,<uXr'!ѐFڴmEmEWm\bZ5[ZmEUՋlmmh֍-mƭZjXklDing?g}vwԐ\ŵlmre+[>Q 4Ə{#|_Oayfg2@'fw)=>@+;|C t @~>& =#^簧Sس>ɐTO| zwuKD.W([F : vli;v7Q;'qGIU~nSFZSNO#f5ZP9#K$px쭋c)IR4 @-лML\[Vk!6uOYru6px8TᓍK"Ggc$\P3 ZdPr@XCV!iwW9<$$]T:'Wr4)L gZ?qɷiDmyP%l?_3Aiu2疧]z:! >ŎVWQﭸXUns39<_'TNJ?tG5mwWzZ+&X;x+h|= ZR3 A9WU2ˢⷱy%35Kys/pFaWZXx*ʵ0U){| Kq&;S.K.09^c1qƖAF %Z b6 vA}RbӫͲڌ9ڊMw1A("Ė$ yaWR99}N%ݒA5$D_Eu.d2dpԅcَV75tmǓ/0Oc7:6kNrsbdu gşeS%([AE_3{( z=Y/n֕͌ϥhϿ'cKskŊVn Cik/V˼8fpEɲ\LKfhM.;oeQwC-xbbdTm2G&rƙ0\L2l|?i.y͎Hݑ'uv$vF< Y.bo,g6tQq`hR@ƍNb 2V67WgϮԳƴ STYCʭM]OMVgc:ԍ^ml3qvllmobVqem5*F/a@]čG͞Tt[|m%xMyC]Ûȼ˺_]* +22, 56Cf8x ވGY[J6G>ƒ ͌<v{dVhe&9@F.8'I6$ 쳉ô0ڑ#4*c6!.uE28(w49tĎƳW?N/kI긛 M[o06P Ke8ơioGa/qc5#ugBmu6xe5qQw|7MŮɝήU}y~N6"6FK]L%fy7%]oOթ,vܘ Beo&qJfAJ- +7z 5V{wW93z2ZFk ½\X5w86{hL).2JڙYmS.d!IdzZFPPUQtSWJGF~ ^?2kg:}+pZon?ÁT6zv&S5{-Վ4ֿ;˩rZFԅ[`3 OZEo..#G hU`J^l(gԼ2xLٺȧo%iQ!o7!B^${ͬ\s 4r͇#?K '8TSѵ>mh=>vgsK` !o@P$,V=!<pYNi% FΪB}ܞz;S+qϿ*bvms)o9sbI|#z-pd~/B~T+<'78,}SfL ƏEoOoI*3.Gkے#gL23k}5mżVy\8W-*$-i02J[k74Z|x53X61BcVģKZtmӋt1r!T^Tn4jO1%3V E{(uڑ;Y*Qs%2E\C| ӜGP@r3|gCj >i/%|Jqz~I][s E2\Ua 8VnJM3Agn-{ =JY$\֋Fړ {z}u/60 5؍^7Gca45Ф"!0y12$8S(XHѥSN Q,mv;vLs2nWivNzCaI)z[ܜ5gos{=߇C.ZMidGm%5MAiYK- |j j햭EyJncew?q-[so]Fg&"8ynUU , Sb%Qi[-.or-p_6g[\SSa x ֦C4:H( \Qn,`W^L-l}e&bY[ݪzʙ'hpqsTkc$$=͔֓*MO/vr{AùApxw0httRclkC`)"u#3G4\4ƍ=C̷޾FJ軉 QL[YmwT+[iT+SuOVKuk1/o 0īì̿eQN+pWqA-#q^zTXv7Ǧcig=EDK'eʻĕbQNݹTbwow-8)&CfZ[[*KM$L|6m eVib`wy*srvZT+lO6Fz73”R9 =7bQ q>fU@@tĈ .oMq0vQ/vdMHˬ8021.o\NSk1+̔M7j@a7i3aA1p.Oœhe55j\ <a'f[i˜뇑/>RmF=']Z,&735{H*jrsgDqihQ䰺 Zn0t pe`sn֎f{ǙNwm5M-b.nik3 -R~r]\kfS%~DY4[Upg85L{kLK=tYdo&Vȅ5Md^4IUQV{:ג5pԊ8DP!@D4VYiW:E1FgtiUq[.MޝRtp\ԵhVMg{W޴aʰgđ֭~m +Mto!uLwվHrgD=Ek3lꩉq[Ifƒ ˰@2~%6Qbh6^oR5,|Lw05k;]||Ēx(Zj7UH͏$hpUz7R n3q#GFYɡˏ_ނȾ}s,,.])5xU_@|(?A ~-;)=*1_i]7(  "s;~iT4@l-^5?ɃZV]JHhdJ^,^!`rxt:>kH Ϗg CF5מAϠ znIGK6_;wpɁAvnC9E ˁq26QH1z-a]rq y/Du^@EP %rqdY8E\[',^-r7TsZ鿜;ɱ㋎)x˃fh'UA)1c`l6|iE TQNc>IVOm`!'+>/ir7SH¤x,nVܑY"B⍘vaωI,4(\f1q7à4 $,&JۃXn8+80-bnE(UOli]C:! ]LH1qP: Uk!!zYol2sZZfne7TNc̘gHcKہ:Yj]m˪hiIȀIŵ6*d/y8 y^ d]@KQzy^L鉚S ֦U;-*$fDh% **UeYZm=8w:"yNlnxoρfݸk(ѱZ!#_laH' h.)JE68 \D}OOvuD(^bi&b5'e HM @LI-vD0hxQ)*R,ZX>y@$1N;6 "@@.E3ɏ(6$"(.tŻShэ,M s{EhjG o:J@ޱV52*H' G`K @Z C<^H]$7^CEi4*1 dX̎YʺcEߌbf/6wU@!\Nq IVũg}+u#t#.V{s]FcF&0ըfMtYM'UWeI%-TV2O!|IX%8U#lA2#e2ImEUTגxvNLCFa 1M2 `h] * <*85 ^!`TyvONap&.7`ǽ9g}O 0xU6kշUXu 9 \ULki-"F0Ůb7T赆Ŏh!I>jEh3b$I+r%Qx*}32¤sr.k줎Þm}qCa#,!\>kBF\2#:IO  &vȦMTFFd!h6a`H,mD%1m@+\n}*RIQW6c8#!RI $ɐxcvy]Th/Ⴂa'Ytn 5S UOeQEV@6D޼4^ 4Ppo}$X-Tku|g #;*9X[ry4]eBw(mβºE*9hlL^4x#Q:}+hta=$>ږ$$1uo%+㌯Dʖ/rV"RKbqs#4&^ C:)[k]@Y6L x[ⰂQHV&pdׅk,amAœHB$Ѝ\N!PE mCY[\F(L¨J0y݌QXlWѶ5Vc/8AJ\܎qHi9_Q8񬮨ȫiFk2[''`3F4t񪬗Q3`bh1+ Ҫ"=](pge0m]^5Qx9juIԐkl|J}`DHlLd0,D4 =;F>:L(,XSHuVXR (9ׅپ]E"ak[eskP`gePD(e<; Mi<]G t#uҸ$a  mYvrlƢH^$4 s$\"Z[жT:5&'{X+*Nˣmv͸F"0ιU9$C30b`X,eHVp|c`̚ K;5mBl66T *,xB{@!D)`1.tCʪ.s`K B6؅,&D ~ 9]U]|\ЮXWbAQC *%0 tA.`͢olH,!qYvH`J7M I(f#̮"EZD@ɂmW,q&aUdm[ q[T*}SI dQ)NXF+ ,~X29kQ X)60A$$Í5R.)c`ibڭyŰSoPbW4^g70KWWSEi24;S;{G+.D7g7;G:.Iӄ0)ι#nBbBaq0#;l,\Z]RW؎\ 3;)06鈥 GɌTslb0ts w. ;oY-)ఈ)$$` "{H+(sv\ e(`pԄ(QҜ>#omluYBR0ǰœ+}g60A&i<$y5aTT;*0vMjNl`Y%68b%KQ20d&`DkTO3j='#kr[umddt#W}ޓN˅mma 6TݤH|@?u$| soIw~N~+_GYeUqƞ:,^Z7Bd# L눜|+>$('2/1HFÑJ27{&]tuM6c˥*6$%tD]4JwT:\eY'zX=7|JK;Bno5w"jZT5DCS< Ok7k֯V\kS^ogornH\*R[W- ݅jO:X5:wOE/DV:L˞RgddEm +9TirCq#Z{^y]vT>G!]PuA<Τr&J:Y֑$}TYYwor QCjJ4!hBiQ|98ģJ69\+6S"Ү$^Y;JEӦ\]+kE[IVӬ=`lY޵UM^dm.nionCKyEL|i74xvVms%mqpN%hw3!Xvn"!qᣥ 0Q`wA;H*YH:bdSI*1@M$w3h# l3qW-qXHWr :Dnf+Z tXWQ(MTr]HUl1E \܆JFeS%< ,IT9e$&E313YNn@{a .눹.n^ֺ{°ā٣1 4 \5C2*k$gLqDRI!2'sr J%0Z4Z{U JD#rBHQv9N",JA^#ZG9]J21xAa%o7JΞblCZT$ջe&).5FbLj"=|,I4V$"R$d;Wׅk5A) @ I77nu*Naw&*)2O$;!t)f&c,lf]og - t^ndC[T4ca;&l1M ٢ DT]ԆWƑ'gáVe/nÃ$T4^'LYYg:7mh[*Ub gW I \ӪijT9 ն6sCYM iMk6CDPDA#Dey9t]1KdRBTTJU. 3zh1dqzu$I+@@#5kKLBi]pu\QM&SHt3-a3LӶv-hN 0L:@#BlJBq"J(=LUdQ$ 6l]Y$x,0PAuHgbKP)+&Q.,5]`CMU+ Xtn4MX2HRV {HdadxhӊPI &O TdRD-3 T'|ntU&c3a2[U9޺H&P'aNm}R/2BjLǙT¤BZ,~d n}W9sX())g#OyN6nƸ%jrq,]և=o4ttVnέCʣ-k5'RWU\[Sƅ6uNdo2X"_5yq|sPd>o߻nysxCL`J$HIrd$ \$uڮpN|MN#{yaƸywxUZ]tL]SK|j+B52g:TSGsTL1GVB_:+*-spx} FRҞh/6X\e q94R]t9XѷhL33+:w7MG!.svJ7s*nUNkUf_^k[1]ti]M1FZY(M ػzj^J%:fM;뮇5uM#ԩͱ3Z{N:]ծKy nzdI=*ge.f 1ht;cSK|s.f|anWJ m+9#kfeq<w]--css Z:#W9KfEyLatTĶI@3*RV5;"ٜeh>xNfYvA1Vknsu*KQWU+o >M:yӳ0yRFBou(5ӓH9ԪR֣rOuJy޲ӖZֺekzo'K[M)ʍۺs޷0,ڮ >dqtOlٗz2t<,۹pIζI3"'J&PQ%e(]6bq"IM$<̊Uj7i=i89ɳ$oNAt2+O3jn/T:k"DI^<LԔ+r#$TVU`.84: 3|HGz&AmU¥ 53ZQW5(h7}orl>&e-cnui){{{iVnk s_UkU{Zڞ=+W7hf /|.hqUg8z;f5:IVZȢp[%X ]u#.[* R6Tc7ٍvfȗ]+b \޸xNnNZ Gθ* qS(N$[3bS!DjmX*jRA*()fbVp8#˂'lmsxAnxh B/_?W!В,v cȞ==SSCH S=h8 #n;,Zd(0˸6$Df9!9!St3*RI+/C,b2|~o *y^8;Xt8:`gr_W8녴;D翵LD*K:?hIhg"EPXOiGߡ3}wJ7G~[J8ic @@"10WKͷўw6#B &~y=\X'ʎv mf`_eBc^)R)?yXYij*Z6&2;Ji"POUgUYAQ B͛Gwj;5<߇ꮽE[ Mr㺺Pd_>\SJ,qguWL&L2/<#+z1-wİ \ՏYJ +UZS >Õz̲ek24Z2˻NͶVõWZ EplNQԬWɄLO:U= VG t.w [USKTEX1ާ^u[m`;_͕ue I2]U"m& "&1 [{K47ۨV,>.xmZݾȈ~Ph# D !cUGT¤B=|^[{M6Xv Ɲyksjxe`aa9U*U zx۵NF^O` DD :)ОjC֖Zch|*)Ow8#/jU1eu+]MT>"\(!7\, 0<- %vs#O/E c`n T1uw+T_rSGU=$'gB]Lh9J$莗܅Uwzҗ+j櫯 )qTvf)~GqN*YZ}w[:ɪ#uЙ$9<鮁oB'CVm9sot40d;蝅^E:Jg'|gcAw edލJ 8$riڞw˳{,iSZYgJൎDL 񽬺7mov $ctm3ZΈzOy|jZx2'+)a8HaR*3&UnF>]|.fs tuNakJK͋.']RWB'3+h,2;!dBf AI&eM7<[u[5;__k(7u=<]Tؔ޳GLx S}rbeL60oHk'luIsº]x\VZ5= ǀ"d'LHoY7)JW6pͣns18g1&+[*:ᶛN.R*5\Yf\($M4"c&rKήyg{qvRV%G›=Xkby)Ӷ"jѡ[ +I2ĐqI%lBm _B]kBu#/ٰ97'Ic9{mn۲֪"$0 )JuXY˴e&fH%\Nj"%}7,(x05.cKziUcHf4rqRZ"&K̤>쀄Tm127mٳʧ>8R zS4MQl̐1g0Y+b$e2"dT1 r''.] Y%%/΍]/gvpa 잶mkS vv4Rma7e0+ќM]\d?9OFZI>1#=0 &ښ]yC8ѫ p9&ZR4U I)~HA% Iܳu9,Iy;޲Cјn,}3%--3_G5a}J/38[z|Vo\孅sZȤ+F䓽]KIB 9{df\cGxHTϾ~fͨmʹISi+oC+ѫG$:UFq! K73V^gGYzI<\M.go-y9yf:s375,fKAn&D(*1YjI<|glnwUBl)Ïo9[V:&@s6K9q $(Ԡɬ_VRgD+VAV\^QiH;ow_u& VGHJg}Wx]g,߻A:ղڢQJ BX[; c+`Q>+XYSNs޺l DCU7>{DT.9īT_iLD%ٓ$)q 4S ƆpStxAoO\EF]V5*4m$wn75whƤ{͆׻W&zѡ/%5Fûr\\E/ٷw7+8fњ2nƹv]ڽy(wrBYnWw\/7IyɊ(@ل5':Ę5%2( Ac5??O9ݎ;mEYPPO,0˒ɾ-\$ eL椦fe-#-RUm,]ḵRQ{w'Z0CfM%8+D9I%ؙ]\7NV_aaNX2&(mmt-mEkA ;/oY-psB!eő,2wLJ"Lג\2 !$@Bo_&(X9HD7.L5sF<,\ww.^kq݂{$yhWIS}1f:GCח)*̸<'9EI_f+)wvNm]E-tCyn Qę$]⅁M'uzL.60DIܢ)7uvdSAJW?+$7ǧWȊn뻮%kryq$W.(ܒ4ml,h6.mȣ[J{vcFsrQmk~G;?Y% !plE&(SidZo5i6׮`RV3~||ov)>nRA-chxVcT`J,TJ=suiu0tF7-(u;}w`#PFî{&7:{ޯ-2#<6+{riIbd1mwX ]q)W7"E,B)s:{?5ޠ{~v_1E e`c&3lȻ4mMR &1]۳7%(:nɈ"-V,RM0FF*i+S,,f1^$3s40oMy]z"q%z1ģ~퐼%H XtǚVR61q0<ubVrIr%wm;Kf\m`֌eJr}ݹXƬTV.W;yKtAbED*V)~o|gtY`tt (aWd SHS5h6E-"5`f, מ!6sc.Qn]G`:@;Ÿ~+=x]QMwvi˵^ g O2QPKIh)NI6Mw!`M"TdY:*s/_cݸEBsnj͖"hX6Ig٧5rXڊHF ΔPQ<ɨ6QT.\Ƌ#XX*iUٻp׾'v&b5c]IcecKLH,qJy|϶sI gBJ1)pbDH=۩Xm)XiL[ibuLf plfK$PVXs %\ sw]KZ4k1/vns_rp(wW4qvwk#n&ĝuuqW&NKnnV噭[ݱ Hw 0Trxéxy&p|neKMnb#UMY"x*Zv} MZեxy_n{ nФȸi9P5]+SF`^R 3nbJV6-FPk_rcr]ls$ӭcR HQF%|E|O{^ɋ^0F~ 5*)hѨLa*Pe TLTrhtso5uҍɴW/6Yɍ t|onnq-9Fۻ4dSCM,Q3\hSY30B cWwln$a3%NIyu\s 4̣Y(Ţ+nySZ%9u[;ŲFw\:HhMutΤHlrWI+JX˓EdV(x!vizTtvf"KL{{ tn|NhN5 lX m. CӜp*5QW3]puRx5YG,TX,W:bJQ 4Rώ{tqs{bq6RiDgmwsDcZYMM3mTwnW&\fD=Om T ,Le^k_yM&Df2\ܚԠ̨7'wt驕X$ܢQCl dE!Hk.f w/ۜ5ҹULĢf QAbk{4f#=(e )yl .]Ε%i2\l$N.`i65QLMrGmu ,LJŵ>w{o6PUuyƚul6JIZeE6MT6Z.4 !1Juۺ:"Ӯt5$fQ #H5ݽء\UX- cd[F[ek[AE-9X%\ˆfb6CQks&Ӻ뗙S e1!!} .jse(%iJ-Rڧ@PlQA`_ G?[pEdZF&(ɣieoVZ(JM$W4$L1 + cbh,c6 "=++tܣ2I9i5V,mAryJ':\WAEJQfL6wk΅O{,SI\ݮ 4C9swwwI sq*5(,[qn~/w8)⼶uKÀ_ot"~wr*9(*ЬmwR Js3,o(1ޕXV^Xc XTPY`+FHض" 0)X2uKo1X$17+ˌ4W1V-"ݹBwtWn<&3l\nC1/ޔkmbꂪ"FHyqN^}<}/eNyk\ ֗ [wK1~ZKck?EަbV`Ff\j´H2a7vQ&Е٦-&6(P8XX2ث}edݪq.E.ulvF j&VS4$1[i-^QF"7ټ:{W$ĈJ 9ssn_{\{0VibwWX(}wsݫfD&G7Ur2Ć&rynlNQx Rc2;Lƭ˫)=%Wd'msW[ Ƙɿ'wdi!{d,k3Ȭ_;S3iQK|c g:J:/-?ª 嚒|iCsOM7Y1\rl7J`dʢ)T]]e(HV 21;O_٧b#KOi4H@yQp-]'35bKyz:?ԝq=֟vD(@ 6 s4ndbq6ІJ" [`ߪ&6g4Zp"-,}q%*`É.8!f9/%w6S{9 *p7V1b~*+\5b,da񩎭Yp;qc<:Wاe2uA}X=ݓZUFHCHR0HgzʔhWN{dN듚|/!ϥ#2 fuwd+3{jE -_}Itڇ{|O>Oj݂Mc!e{~ ՙnGGpIO9Û9\Uc]B+{^6z}GCɟ]_ $2?] 쌪9%+Bxr(ߞOecu;&Q.[i7x刐>p~_e6)*F͡.8.Inor hܓ7l:i orcGyƞtq/ASSz =1ݿ~wh[v9#}z%dl(˫(ScGJ7 j.)USM.iw`}Pl?)3oIܥ1QF?0\Gzg(?ƞet7!AbPEu]>#Fn| NS<"b /EΥќmU(A,#!AH܀/r F*C"([1"#e֘@/Xs"àDDYâsIz$5f̛5z0+fh%`XmY8rrC_e9+ f{(Etc(]q2yё#$#Lz&.*ifFV7f.\46zu%p* v:c9ƈ+rJ!@Z.faYb*`,MQtk r<5r TKzX c0O!zkӶo@̝(7nV@Ԟ`[¤LTSL3U{+nk1 dx6b\*vNoӖ2IJU2<s\FVwhw (WUUa;w1?=5R-Ҋ><)4h' -⺲Pma2}\!x0$H]Tx>G@ 똲jd[s.:5b PhjxFJ[cu7X6I+8=3d!Mv.ZGV-<)\ўKhWySXiLj$n ۷oE]8"47©lui~tiׅ1Aځ|zPnU+5RSQk_\mn6Ҵn-{+B8Jƕd͔jȠ7U'Ьt2I+ -nYnPp,jT.Mӻi1 wVy1řHHŴhܻWvWy#IXjfz(Ra;6@jɷ9+l6dK(I`--Bzx hda8jV+un;x -,;kf<84kQY=NU^7ݷMl%O^$1.԰ q`SuU16f#ltd[WjmmW",s33WR'Y W0}X F&8n`#5JB-<,ۂA`HN/$ &$c T`U l4Prg ڮ1!; lC87~PC f#Iݙ͜W&\iN-//\uqqdۊn[L X:&14[mTM:kJmI2&Ҍ&1pnZ# Eb}Wm3h ^Pl{ܻ12x:֖ю1dq;,_j ה*lm0k촪I)@M&c@6 ^xir^)4̉`9N]|Zڭ*z,1XL~zw, -8Ik-. R!ڎUz8Bg mc 㡀Zqh)Bo il-xk1n"VjAjJ"tV( T'%UW 9tư>g2  &5AYM1k[H"HD ̖LAz$2q7nו̧z(on:*ˆz gsw]\`,9z;pr~۲o:_,*kd^뱵6)dҥ[ĒZ4askƂrBLk"i՞vVU46 zu^d+:<\cFu&“,+Dmj5ЊFNsn][[=/Ҳ7JPv:ev4jn5WQO kհ=δ{mQC-nM!AngScuFga븳e{F*kGܱZtݮZ *jiEeppcJT95UL\qI7nt-NY:Z9fVrd)6Abi2VfûKSL@ i4e`[@`@#WdΥyzYmM 1i RPqf, S0ۅ60c*=܆Ɂ聯q#&馍\=5!M/f2*B \@%0 >,` V+Z5hг@L]djxl E` 05_ d(4,LbjhREP /ic(RMIhf38'1ɑ8]zӴdu@[-A2t]Rgg hsYaFXNvKS뿏 'g_lH=4 ֈqD8K iTk +#R+e'a# U~gRl+%8:ѵJN2n:jR*مǙM>xYb.%NoL- Q $RBS|0=bsTDNB%iEL`g-Zuqƃ `ͮq!'FJ^ױj6mJ*DI-N|t!S25UVx<v]y0Dm%ٸi6a`jemm:ԅJgUr>CXGPanA- C^ua=.M4i"ѢY9uY)L޳(pd-ji/X [KlLJgƋ Z籣 )j"*VŜYm"@inL %Y@cXZJ =! ɘے 5-{N]ۗ^;\݆Y$$Bool `r6v).+Nj߀ sl7婮~lq[g;St8g*`٪% v[(ƹBS4p܁ߧRN!^mVRW6ӝBzyUU>zA[{)<,mjGotl Sf]I =ֻkmH\.M4v8lB8ܳ Fϡ8+Cj 5@6q?k ;2{!VNf0;*Vk5 guңxmed7igtIGfÌ0ƃ;ZFdtY7Lh{s2҉(3[YVگ}!}w v *e(T Ѻ4LXd04mem$V9o"=a+qͷJQѝCK}8S(;cnl04cC&VvU(i kfzX&L͆L̐PA0)6էtpm]UBtZ1=2t(̀@ljܬ 0 v+8GuBwhk˵fH%;AKn۫V9jsu^OKQ6ԲW[V{J詌{Mi 0UFZsJw\ 55%V |hKl0O 4u@KgR=UW~ģugUv:ɌUzE[.^F9YfngkdՄ) [l g3,FFVrki2Hf[@ն}g'ᚫ\5UG>hyɼV4u],whb1Q>cZEw+845WV%>7q/I-⎌wN!E¶f`cekBl`Y\ kb9L1;wJ i-AT[dwyBzk.;U6ʁRAp h6I @MPPmd{TPA`3+ X 1kf-Hm%u LvgP̙9^%E<*'V` L ,9dV,h"`cOKrvvDUsm`l5Auϻ]z;׋en6C;Fx.܋E.5m{3T sZIerM@Z  h$]X -kUmJBfKkYHr,`ó:ߝ44'$aj% ыR^=Ņ>DFa/0d.]cJ ! `x`Ѻm4܂K6G|ywlts0пɣm45D5RnBu$(F%7XYP2K]!$I ӗ75)5"D]&lʪ&YiEqޚͳl-ʗ;L (bk?>p(sx}On \v&#f+4 dxqԀ)? +X~Vߓs4>2G!a( =d)GK8 l5nSE\|u4N?CR)wTzgQvQ%edM2}>~6 R qO}P7jR-O%uZ%p40!c~ 5ddLŗ:/O~[瘟J%4Ae?xʿd]" ["?/5t(>=3] ^|2٤${JǨW_z6" /=?Q>BgL@yʤb .Ģ RXEdžܴ1!^-w,*~ m35϶'ZD=h4UX ӭgQNVsCr 㪢X^6C|o+{\@T2FXXu֖X?_pP"Ma[S`3haffB<TJ{'-)[ ih* z/^!d2>xfTĐ=_;T@4 u,d *wXF/Hu" :j 9[Ǎm:Ls&)bhVŖ(h] LgЂ(@.*\G8&P\sU}),/Px=òD و >#} |'?͇ƠZ[MҿdBo= yĄ Ҁ(u>έ̿IտoՈ%Sw17^?dwA0{{b}{\=9isI}Jf0ضo|{6^t`ף-S@s޶vWBpwԒү8j&`㽅y#qwu\s6?\?$&!$lHA"l$@@u = ƳaONR*nnfde5 f{b~$&f ibQ(E V7m1kxxJb%i)&hBCCE #y7u 6v'kevtrk]31+㙯4~<^4k:ECjּgov:ӘP9 (7Y+e$/}E_~J'7b49dFf KZw6:܅gmW FFR ! oAplȯ=!z"-;Roq1!+͇ eZ5EYU|.$ : ξ#5zQ6U&5|T#UCk[P}PH\;ètӻ\&r4ld\Lb׻9ָ\|]=q5"]f"{ R3kTKmf[3n=tQs75(1ɚ.1qT}CrÅ","2(~ƆnQ+4kvf[XoYê9=k c*"%Fv`tiw6mX,@ iUSFgW nt` NH?$u vWQt>oy'S-#G6xKpz/חGz!*@@<<Ǘ7͸`U6hf W3J70 +ii4ʨmҹOܣ1FJ(mB ꍺfeTB#h%ɫf s) f6f#h]b͘`mWtny wt2r.k nVAJѕRb`TX)!uti;^m wp@gޝwDMAEJ@˘Zc c mJ±-V"ouR>v{{X˯&EZihb8kf5Z"E]7/?8Qal@MR%hiZTcB\e+vf!'w(rs\"F}v{;AGG(6Elo 1T+-[JڠB.մը,S(XhEM6y?^-%fO/uo'gW`>]Ncr~SJDC#J{C6?{hR|KbɭTXWI?n(鎺`wdl$z94gJVsI1]p2bJM.^xU ZX:|9;- 2be^7OW\E0T`1 fF$^υbR|Gҋ,}ND<QpYSk{M}uڋϋlN,-FRψέtV+UV f5b+~bPOD^F!r}.U1߼ @tvC9)~'*n_wK}+۷%V׫{eXe&وzr}ULoxxӊ{)HEHv]m4vEgp1C0AaxDhC}[bﳌo'=='o]1De°+Tՠ2_/}4:WPhbxR,E˕r 6E7u!u(j9Qǣ`_tga悅,aa!s _va jwٔ(qWB:(JcbҔ򳝝\+ tMx%"9Gf.PɜWt_+,͛wm0zN8DmKbWc[Z͌@( EM 7\\b0m\3;-kL|nl㮍f.+ 0h Nܰhiw#cfzZ.#ÏNL@?E/[|ş Ȝ#i=)k4ʈ: BgW(ʆ-հlӪ:~Z:jr MrYOT(1271"9blH7n.]NҳvK-L/`.KپܪivG`4rNt h+hMŶ'uIwG+0`:5i%oƚ8ŖKNY^xӕuzeYkǕxxHDKg̛I|'㜧Q$K[7-.N4LVPn6 !3ѿro ^|5I: ѸJ@7L`7$'~q5͡fUFXJ/ʑfmŃfo*E8x'qAV8HHh=5Nmii:, $E~;5&XӆLi{# ibAp\X_s׷N5lswIц+=~{""ܫf[ti(  .o^ 'e۱jTLs^ϳT{/BN:ޒ|QݨO2C^W} N $!#$IYsj1,O!Pl $'\&HjА'ޤHO쐝d !'eҲ5BLBZ ! C , L$ lO =ْB I$u b@ }2@HIݐ!PB㰐1 yI 各7Y$ d&@HBؠM!pKky:CBCZ@M2Ca d#@e'ԁ/9rr$a!I$ $y i I8 ^v{'rwܸnA,z8G|( .ixЉۦ@C3#k* )m?wGI:ZS>~ U1`HA xi/Ev+ںJ5I9Pr+g ;Mr>G̎E2KI(WƮD *yzZi7Nb׫Ff/ |O~IlfIgcK7C\}*>=~FIQ@ez)& XbLw+ e[@ # ZIv(ߧ֥L#J}qD2yg'U͐ۮWv ʲ9mλ-61YH AAU>5@ +3'~R T!$gHL{xҷJj [0vu(ϳ=^gC"tK$X~,FJq{m #1E_Rt5b]=N5b\RW̶w*ܑdPqv'НB_q@)Kƀ@1 laL ? Sk?Ki8 $,)Oo=ydp-|\sG뻱H6E:L8DkM5>)\!xӹ4_)Dt*Y1BboY4krxyXBĨ"lv3I8)'!8|A8\ṡm_ /sMa$qGumy.3]īGՕ oGl#%# %.F2FODwn, iSWԬS{*,]Zݧw"Qr)IQ)EXjUjxq@A, %G몝V/>2g5(f5Kѝ;cEQMwTѫDL Jox8?hO{}2 wjr̶wמFҘh&!hG !bC%|8(J٫dKAaLhwcss\wW,yb[m29h-ӗ4˽%G-q9sn%vܑӓKTg\ ,XL~_߫ `eSEX`%i6wtpO5bt'~r=1,SkC]JT4уn>Q78;4>䱃_E u_] Ri^_RW<\摎vh2)ŋHRR $q~c$ }{}uY8:su#*kuzXl|{Oƪ^U]d蒾V GҞ9%сzϠh DTo67oyciO4yᜓ'ŧTgW%퓟Zo]Z]=M_|i \~G;ڼ4nQ҉I s)YU3 Q>?$J*ؼzn Oik|n?~O/3}]gR•[KuʣVy Q7bNܛf)c#~JQ3tbLXIx'/[j;y!-֟Ʒ^cHScT2-e0[2. 5CrBWtG֣_jv\?.,4¥LVF́؊#:I~,U=N?KG]3XyOjm4Ϧy8HR|Nle)2pN7Ƹmgn\m |8rO ~k9Q>﹩dzO:nNsӕ!m; tIcwT{ػ+lTsme)`֞ѿ⢐l64wMx]5Q$/!DS?[.rb u?֦mԽet%e5M{ tqfA_KltJ[ 4^@Vj\![|+ikz`3+>Tݧ[s xEm'uDzcÓ'8XDp5ne|ycvho~oשutQi-lMpzvZɂmP?"~PїO*JFl<|2턕i/bZ8pղ>zVk5vϏ Q+sfD6 `b֑#M@0}qĄ?]f$HC;} 3oNC@!/ssn~;/f$<2_K{HZHUiHHc$FI'M| C 4e$<@ yNu#b@IyBC{ O ڄI"q$s!6:S'aR6BI@:̄8* C$L$Zh@$V$2@!dAI$,!ʿ oٲSBc;UQ43zLc3!\r]ѦHzP;ǸhUC 3zA\lN.(7s<**@Ɔ#$XĆ?yi]Q}Nmps"T m,?gF-JQ1H$4"V1i(_E~T +H)-IJgH=OMhUw6\`=pZ@4%}G\R8F{My8oԅ/2ێ A!7t>vf6}vχ kum-ŞH^wi]@#Y',ۜol;ÏjYHvkq{QП.ΛO%/ LOՉbiM(o[FK+i(XpԲEh{ݳ4=?*eRPt|u,Rϟ,DnW@jV:S/WҺW/a&w[A͜u}zH'gMϔx^ŞvO;lGUףƦхCEBEDC2_SHV"LN No&Q IG@ZfT@񱧙vmnfSWiMG{BE樠Uy]\x?v/WYvwI9XYOFgw_ݷEy\|royG+y)(TRk. "*ó5Td1+laksRUZs+*Hlrٌ S}oو(ڃFZ[lذm1D+&fOKGԵaڡNW#507A沢VEXW(ҽoI){` $@ _|Jƅ8A2JصD)gW<џ^S߾C@X] ]&šw7w\/{8Hں[IRc#nŋxwSeB"9jYEkD-,kM``ƶ-AbC1:PXFHn^\_>zpƣ;%"CFM=F96޾y̖>#62T Xbmn2%鼇/ߩ+|\R<ҏ9Hk;H936l([;W!,q^ {LUv'Y5 l'~tj.6S(&%1s(/}I0¿HGY]/y59Tcpo,hEq"~?*S j>az;u` $) *꫈ɼtUq[kęˈ9s%+8<Nn -uNo myCŝon,5}wd6*oFQ͡m +fCSpjό{C~M{$DE -Q> C˭M>Af&tP[o_VD&?"{%;VvIrn?_=?k+C|'?sts0l7ZvT;r;tuk{__[}}od-{Q8>=yBA>f!  &FD!I,ɿyZsU.XPLi&g.e$MEA'18|.`P~&0;rH,U-H E9Lyxpi?|>ԅf#Dz/HXIOR|svN~%b'@}-, o_~+{,1 ,lG0_v(}{)7'1U h :¬~JΔ"B_JP !6Gh:a^J֍)H=c(S|%$󿵮,S؏ 7&@ާD~3z=i.\a38}#Ė&~;K[tZnT,[UΤiۿUnk~ 1Q1py}(A(`@8i׭XgEa(;oÊ,V@F*GΞj~[^yjw>,:6}x0"2}T͛ݏpx Wk Myg>~O}WeZ3%/*=k`Ip`)t$sG6K41̣e6Ds- h,R*cik `U[dfʕ1 Jam(,LVLH Q-eiP}u]QS>_]v×Ʒy{Gs2ח#Ab|^6Mw}>{2nRW s;|h1.(4r]|~s|(׼/K> wt@`4sqU˕ǸmJ5ZXKj:kA ~&Im_hҧ %wnW$A]Xؠs" H(mgUBژPِ 9Zy!UPq%SZpێmmar9jf\\Ŷ-eY݊wwn]rء-(h_>\}u\JDBeBYvۮs2Fc6T A2%IZzzhב\:^^Ra.r$qo<.ec6*֦8Z#i 1251ښaTQQCEhw!N9sn6ARD ڕt*e3Ң*#Ws`7rA5A j,#p2 EIDQe%pRUJlE;rRN4Qbe㾽ދ/f,]Um֬SW[^6SM99˦7dkouxnY;,NouTUV,Ze6m3%k+ 3In 鬺z0E2TƊlY)Uf%eJ;'eHl0Qdh1*,UXf&cq1Ƶ ͲfE}H}*ÝBP1Gx| Y_Ud㊔2 LV.jE7wLRwUw(beMQ (%TiQ٢ ];cжƙM/&(/|uƸu ghߏ>ct'%O(J%dZ;b!|S ׾!Eľ+檑#OZjT%@ 0 flwYqb 7PC&,~<L:~7`w+PvњκWqKz~vL޾OXB1h!ܯ)jYx[w%xNr9hH&eP ^$C~e*yqAX/YLs)4'IgfV) Rw.2UU[gmo!/Io8PC1( HI]GRcSa4Z&c?H;=u:6/7m:*Z "W(>bDFHԻvB \ݡ}Cq_wժ(D;zUo{oFUS=Aցa8 BnNW/_K{.^'eE o~ou?٨ '|6LY~JO'HqEC t6:9%^"=b&@";y1DZo?~^-򰥫_sn2SZ8ի%Eb5)iJ|sd8$X?ik?CZB~an=6iuDݻc>ۺn.Fr2*#9[,*VR[rf;6cjQf5uj^i9dW ]I=;k(f7TP>}}Gs~y?UZ[g?|C%;]!=(EoLxZ>]]*HzbQrjI*U6Wwar&ȴ">f)'cj?_{ΔN |$c!Nk¢ve #$#=KVb 齟BV 9q׸&Ee9L7W w8U}ۓz<#~4sA| 6s洼?=M ׈@닉8D@;2KwGCӡ!Oa9AN'I1RC!G2o~' P87dT> 'xLl<_r l ܅*(}[ 01d VH(j!Y3d$g̰;CL7?!̐P gUl*wY!,9r3_ûOBaXO7vWΩ3 ߡ [|,/{Y{;X*nI٩Xxsȣwwt7ļ+λwF^{E]uK˘{ۇtM,]f AES@DL(Wyֹ۰|_^zBO*S$y9(J'J8%溹իenoc]2M8eGb 0ZEJg!5ŵ@x?,'@$oM 5knݩG1BO}׵#Hu8W}> N2BI3'X<Ǵ|{p2dhl Όg>tpB=DcHS%dbdA ;5Mj->mvtuq?FSoϟXQWz0FFF|pQ:8Ȉb~j2]AuHqG˯Ӱ_*auS^񥐱ߑR*Z(JUMEzkXYLȋ43i/u;bP1"=ΜN-)̛Gy] pT0 4UeUcly4>X6LL"G6dV=?_}NfeY{D#("RB+;}a1616 ]j+u۹κ݄ɋ-Hi qVΤ i(˫Ož9stI8Y0DEM,1VFYx1d!]![욚`[G.4(fdJ8AJYb>GYcN]ebgZm1 S-ɌAFУZ\̘#\&""q*rM|GWJK3; poǏW9PPBTqlq^zSkz_-- AZUd&*@|~[\zn8gu]6>Gzw.?ࢣF+jKR3D]u{>yw ? _@H+&}G`[Tޕ S#Or ޵cZno?a?'|jNSZtv?McGM8SBpLhQcs4t$gwqCN^L0.S9mX0X ޲(M\z᭡ZE;N=YmAg/Fq\:Fʙ DRDɼXW0*R5 wtp^ˑHM0^P(L 6;4%.ɝоHwbk[Y/*bn}7dccd8~a4ͭ;d.0X;Yb_c=|rd<.mXT}%*iT 0J[*T]eHAqjB/}w }%1Prnjew TϰtQrTZ^-hՋāu6$Ʈm 7Rveկsa(\ɻ8C";J!b`VV n4rd80RU"[%a0sk!q̳z[=ܕx|lYaRZ5u5,##QAj9hZDV U5;-P&.pyyJnE[i$rwI~.65 )iH,&*:bqM0Ji jj!Pk5Ukz]z4Y1YaO+&B2IڐNRE^-0 ¶z:dI &L(AORƘ;W> wc.sRɫCIt%³3s\w^rskc*CEqƥ>u ըoC`KmES?KݸqBNF-*j;Cv~y'ݻ ntbwWF(VT-- 0k8;(+w=9pWk((Zd"*<)Zj$WZ֝tk""*I2Uso9W3ׯA*+l*Rپd+P2!6L+mECgC-X9d-i t(-(CvPiᾚbdf[Ve(M;c U}{ձ[e@S-S-Q0vCX^Dds^W\-7yrҰ{#X7v ue]Z[m)9WƼs>v` (IK+V%T+bV11ebn&b"&7뇚({b5t0hubhGO&m6CLQbҼXlJ˘㺽/q(wlD%}O'+K .E-s9^s%z(/ QD2ښeʪmW+VvCՀ`b)K{ \ iݼhZڷ,h Z[ `lm>|',QLnjIXM0P˝YӮ ˓ss΄oJc|kucpƇw}҆^Cs:뜈\+˖s9tGӡL(Mb ebXVemDӶW,,&} ⼷|E5 ݩ6f.|G?݁g[ wےjӣ|0lmj֡j=/9`{?o/G}83|^J6b)7$7{K}ELvpwG*4[7$\XgQÑ.Iٿ[!JNR{o_?=NR}^}} $o9>9 Tr[bxOpoH$I ס:%BI8`@@ X<E@w>|׷$'u9@RrBBB)FI AI$|}Jŀu$ M&!R!1}s$z4 BHTI; !jÉ;OvH s[Oo4s;MHN6s!^1!u{0s,?go*~C]8t5`QA+jq98ì%POK6n(?qO5[`~ @;>&W`G3QgicѼEWr!ݺq\ !0 \jW:>Wx+# @ cPCH`H~'EMngR႔T n""]yםz!ib ~3uW$!wI1Чy&/霌WK0O|Ldۻ)z_AUunoO qqU)fskCW0*ow=Mq{#Ơu2wD8kC-A+?,t.d\r͑#I@d:TMB7'GNcr8I6'tLQ.ĘTؾ|# 6'OŶe."b2uVX,^ɾSz]Pܹ] /ZѓH]R([`ɬ*[Z:ëkAthZfAy\>)m(5aIZɉU˜wwJ9Ld]0bnq&EBc -PB(_4E] +`%d^sqʌ[hyynd|wڿh庅GWN'Skhc]01|١XՓ'Rb>ì[uܟxt2H(rkl t;nLP]NI PR{Ρd0@ 2E YI!$[&Pc& H_3`DܔaGҞX@* ^Mi岻H)m_GKV^mCQ68oK`Xǚ XK@ q29(+HS[uuIs\HSlok^II 0 !\ ̳o[-CZ0?WC&$n˸ 1~ߥ`&UfXdhMII:O쿼%ŕT41eKJŬe&2gQiaTD^z}wVEM٥l ˩(j6-pݩ}rUw(>3;wdH-zvzH0 I̒d?c_i>}Oϳ]|Io½/aݬ l@OW6 ,h3a!2@$Ls`~(@fК 嬦A dHf3"!hWf8*4,KKm[[Q@`ADlI %P/^t$Y&&V$:0D^0UuH&J;]HWG,V¡Ya i?Y%IVQr`0"P[Q = =ajgm>[\dEVH%3PtH * {Bs &ѓ&0)O~ouW~   F,JZ*ŢQMU66"XmAIQQb,jJ- mbj*صX1Q5mhZ5E(DkѢ"ƌmEki@P ^~#dѴ~z5TaX6b0t'Gn#Vx(PH@碵m.>'#?TR7vMeߨ{@EI}/H8ͅUvo>Uu=_O#VF@oB]-&<IG%&4(?;l4n Dρ]!k#ٗ* 8ӜJǸړdJϓ940{y2҈ЯYRUxy3l s_`DH`5 +t6˰8B 2H֏ I~OMX/9~kO >d 7);T*,*'װ4,4.9 9l9n^k I)AaRM5 5JȰd>(þߗ?Pr{6?0yU8mszdu?s>?Mp" an664bQUQXhFV*kRbVDVf%UŊ1MQDQ*"`h-%&4BY66K&dPXmB( AiF"kL_NKۘ 3:OԮzDE2L}(ZDD"H@ >%=W<O~?wpB/L~8gČqǿeM0?|X}֬'\wm9 _tX]+Uhyst}oi}A\AP/ U}٤;B:A uH#~"8J&6IQ5TL`@V. RKk>`_\,+B!7ʐDh!hh)bcYEDY`#"}Ⱦ@Q_G k ^*TIpSғORb"{ژWb]-;i&Og\Q9Zr<<]mXoЈ̰Jj9,<"wgЄ% )Hfh&vavBБH}^>~i=Prʞm=>O(% @P"?#,-1ӑִv9svя\N{U4_W=9w?OSS6z[|1Vw_չD:ކGE!W=%l?Qq漫dÍ# Zz3jh,VVUmY:~yg8sl?҈h!+K1ATȇ(RA[{t ;ק> }?tԐ?='=}ԢtI/E-ͬoK}76}mbڗySo8'hN0siւe$ly"q^lAӄkHЎn _=Cˈ"Vs Ě{{ZOrc.N6*@$8zL\gױx%7AkԛzL 7gu$Wܾ<ʍ#xI/,1 2Vr":FYk5r AoeG3_,;xCQr΄LQycIL*֬:@: *w溽\CHyݬ y`C(( kKIW<;K^nwH]^\ rgwnpɐcd38C#ԺȨ ~9$ BE@t C< ݗ?3!٢=}v<ژaz= NrO[&5!VV \HI M1f8Ss5aP4<ggCd̚~9k鲠()eG*֋hi*"}0%KR$qB1BMVʃmLEc%@ e@Em m v5+ch5mӭ"̗mci.7q2mearNXhLA7 Ž>VX̯qeRZ*UCHҚڛ;lG.;W?7JYh҂ѵQ[q +zۼ7mǾ&][ef[Wgt\T>ݺC \${ <ɑMy LJޟn4I GEJ*)^f3fKh7^f I2ԣx+HA{P) E,kobBs5@zPU6ؐ#TF@4>8JAjFqbS6i\'^!8|r 1 M?iJFS:{A.[ 8dUPArD!"K:ET&S(KjH>ñ,G/zM5NA> oUuVE+l=,h|eurL=۹=p;IgBlF[ZXol{gJZAs 3&aQ!zB7|zHK @HF>3磞`D?]W*wj{jgz01gz{7Ic?nF.]s{h6AhCv'j@'F X/X * n!H~ y"Ҷ\[$H̹dsnHU0ڹٹ8걿sFIb_ho;%Qi3ӚNyCN PfWf#sdzozY0#3j+SYU+ >`}qb /go|Y)h2\~#J=f$Gܼ᥻)kR@"pߚ1ŁP;t:\n}'A*c" o`(4 bc=}FS_#`MQR@ }1u5EU'۟mq+}td]ˇ'RsN T {$ێ NS$>._0 3b~獩a1lLzv"IeG-6_7Dy*7\PP>wʜ?λ:U_[w&`{B$Rs9]k̋USydⴿ2 x(Rr;Oy})y%C7wyz$"D )jKA R]n%τIs#6LPWl kkgPA1@Rjnpims^`Ywz'n,$L-``j{g(It1Ukž H`$ΆCRz6zcɱO?$\$! >@"\ n )x\:đ(Dpvx<4Ń*\~knvmsܮ'n]>䰅 S8٥vlIB>!J"1e @Se d)휊TQk?cb,}ybQW׀/Ydl. WCN-V V0&ps^aL>X~"~;iނ0cQ ]8DéHݔ +AhM>A)Aa"KzkU}8qur}9H_]Ii.CrNi:ĀAEڛ1"B\\P\=5H#!̽]hGDFzIS"*B5/0Ё?61G?>Ze 7_D|~c!ǵg=@X`|WTǕz2E% MѕƶTw}Hr$'a*RO +=\\Z=7+Y +Kr nsW[Ji9(Xo}ox吀Ia t8u{O:_#!%aЊHr~O}}.pƳUm^q^[Y52$ k`X]ڻW~aQu&i쒤(EXd Dq?ؕ!WZb+\|_푑0~^fqrJ9)Js,j"P%koyƜ;ܕL>_,N7۩0PPvL˹QPۗϗ8"xj(-YiĄߩC~m!'yσ޽E VO3~_¾ 06vX~ⵟ<&|yh0FBc2dPOu2\j2YdqJt+HHDX{A!a!qTguf7"\49U(d [q\u}`$gMO;i z';&L6f /mhL1tIZ=yޣʃDA!FLd> _8嚾o]v.2mQD8[]iV@B<{ˆ^\_i,/λڛ9N9gf9K3USbr|c9 ;R^a^\Gr j`PR!!RO2!0$=7|?~I?;זt1=dL9{o$L6WB+/,`z-Ĵن%BMH5{00p!aRpxamW %0 K 3‡3H1t?SJQ }}:~ۊ/z@=GQk+_}MlĄD^|ϗL|lنE"jK䩏_? X'~K4F| Ch[5qӃ=L]&y܍""Ylv)\Y^~ͰuVo%vI.USK:O-S\." L4 e}H9ڥV?(D E 5D~u#q'<]a 49uRN4PcL` ۗYCO/O;3@S(8#{#l|C_iDrpM|1>r 6פkhם;Z8Y9a AA@_ǥUek^O?*QEavc?/<^M)R.Uz_\7M.\wS 4V֩A.1}_CU9w=Cz9   _溓y C0 d$VmZѪ9wm9K?gO'{̓{:F뭭G3m0J RDGQp,5pd =}a４e20|$4%ߨjT lu.ostz_1A~aG-wu )$]H`/]5Y7QH_wP6j DEI-PUtUC-#mӭjiT9vR?#q3TN3qd5hBՇ-)6Jv%#z 指ڲoaV0k A渊.!LB> :AP7ux.~/xGQ04(G~t8r((L͐in+6Ó:dEA2nX"--ߵni N ݄ vh?hreϞbgCCwDYC_OgLzctŀ3IHaaF =Ƣ?u+U^i~mqNے0^nĦۋ_n-@|@@ I]ITmyp;O;SF+̇#$ 2rLyD=B +!Dq:2Xe#>n[B<[C7gD󁡙sZ[Jo |mwiԌ_†E:iDS9A!%"̑ r ZȾhfSr2l\b8(ܐB<^gC=]+dy*m+lF~m٩ljtY?M>¥TޗuHgQ#lS%M|c0>U2eψ J\/1gSzm`x$Oo}8(]} }&AIq˾DfX89 a-x  <- 6KIUcϣRW˺mѨ-`*lÔN$aʶFHGA-%Vx__>U-1LEcwG& Y ;|'w{w4.X6ӺZ\yMݍFe"ͪ-]A]qÖPw_uizQANa$˜УVsr]}g[1C;`ok; ? ~Y2 (8}q{mWz;#_F=S?ё,,7S?%̟?͞rb̨M%j5q}US1Y"dh( 3vMŨ^@AjdQtЇy= >C@)TFd/#t+(mNϗ=G@[Uҫ6i88p? C{c1Gx>V)O@w8')_vC7ɏ!}<-3C`LY UIAիrdj2%㶹`l"ӍA3qdS/[~̸1&Ywa$wbW ttZGb iU]S )>ȯ?/Q[ASpNR(dpٙn UG^;}}ޗ_vuPW3⇅e#!]f.5{bh8;}/#xHAvf$@F8 (\E=>=O]O(T)vn4b[WTo.l7]i׃r0"qqiu\-@b߸bVދ yZh؋IǾFհ[\Q- ee NiCFJ1XMUam궡^x_6Fٮo8Q%'֝C2ɯ9if8vkW[qNc<~~U0>c;reT;aL0*7ZzwwHa h0g#hsXi3<'^^5( B$vQ|;Z]Wz|?o{]?ye°@cMv{OUVfN *,SEaɄ &EƤ}_+(~ |?;35h7?}B]~!xy^nOryt&R"注7٬7}zAXb2p~7)ܫV);?cmc͢sh?\'o= _{.aoie¢$|m|\Y $)$eݤfљ *UhNZy8Zkh;&i c& @/!/;rASHT:b?Tt xk]um.;VGFƽ'/qùvFc YV3ذ$7enuƒO3ǁ٨}ؼ֊)n${g>Սw"ڡG/r J2!JHQC2+(BBuiz. ,D@A (Dn0VqfBJLBvk^:f|rVӒo\y-4Rwr/?yzTc &:=͗,OclADγ* ^?*a>N8ʏr7pO0c^;Kۿġ]教nJIR_pTj]ͯTʊ(.OTt| sV/Q>VMVzgK-j+;p]+CˆFRɽ;cр>;GP"”*쟒Ծ`~bYIŗqrے<"a>0Iɤ/spHuK%P3jh%J b-y1TZLs!2Zz?TN ~W7gWTj`Ãl<_e t 0IYfS(&,_ }eLoeROw[;I ,7'޹7tem.3I`caA 7|gHmt8mU&Q]z{`7J۞>Wi$A;bȳ{u2D RA-MYsX)|w=J B. J\Z8f(Z ™mۨ6kJ*f G2c1 e҈K㺂)̶6TMK&D"%dXpJ1KͭV T'K^Fk{yc [~.s1f&.1mT +3.r`0`ܔȯyq%qƱjKqf&*; Qw{^Nݹc;6%D̳.bY# ALnZ=z܎ۼXcbm%2rDO8^U^G+䪣a Ьԣ" Bљ_!F'kKmɏKB挩_O7{6ɂ ae︐g/K,&x?Wrz&Y8*|zblnmkrADW|Zv-4qTDq^ͩ7-5[_z d9kex|eY<.\ӴaʊAplӊeM[3k\bus#v͵A]*C*chf*eALd!*n٢ #:vn2EV*cn-|w<8mg^j-baI{IN+ҹtlPP8<+%ABm^12Svt-kqΥդύXBdHJ> 0 `P7(H|S^{[=v_Q;7lݐNaVx'xv%h2$;3;C9x@T䘉ɂ3 `hQ)DA l9J0@R.LG?OY7MEcA͟QPwO5MPAQ@|Uv﹞/.Z 7(Ղby"ʹ 516-a:, $ex9[?XST#%0n^oퟑ %mZdb>mG_Ky\yޗtȸM}Tȅĝ:wIu]1<>& b5s6=F_w_?֤ăD'._5vlޭ1zύ|gO>UKy;Θ/ *"[7H*d";lz{$2?;zO^JZYϳh?: zԋsfCRv02}NȢ_AbHdžzE$K{{3~[牄?cYf/ND{y<$ܸ1fbr=:+_aD@0M$)F`bĦEF"h "Ly/n>TbbcyCv;/Cpy>w|N嚽'@ב,t"ĪbS**& H5+aL+HW&N )BnY+tNA QCJ8T.F*mQ .S':Oa$4r!đz7 (Var1YBrPldX!\(C%-;zmyE\71k7\ג]8M[!JsNctNԛ) ׯz%t7`R%.Qh%RJ[ FQ'B*%(TJb%p )Fe,61 Nt qfF,Bҝ sy^V%m[HEr[!@Ez{ka_"' w5յt/gNQln_ػLp#Wd#mD /l7]e4ߛߪMei3s9'~}7_=7&89/EyD/fix<1opXLp~mWlMnu9%̑I{cqGecoWd`{4rLXq߃c_!|gufON$roskҡY*VZEeHZvwEhTTqR\JY[ANi^;4{\uO<ׁ޺/6wҒ.4c #JjԘm}GxA)aFUnRkehgo??}%_\XWmn¼}3DE a/1ՏNeR/WlZHdɗ#C~|id~PcJ'P>1֟>Uy6R ϴtJ!bN%ѷڏOCj9,':U ]yAUPq>za[EI'ː"4?/2.ؔpt$|(3EKΚ&!2 I[`soy2*@u/:O;Oˡ3&"Yi/xFnQj N,!yQ ƂUk+ʨٞkvn'7!AVm!㒕 VGԣ9AfF|Ǘh7ؒ\%^t r>%TjDz_$A9cʫ[@mݑ( ? wEwUs x7T'|UDLys_E(Z[8v¡+V_''|~|%YJ[j3j1Jlٖܦd cq1 -imP+u-t.c9LbyMz+# (T bZx) =Y/.7`p'ˬϹ{iu:B_$z_ard DCz{B0'pGΌHD[>h9C|MFk6Ņt O@P@zӴ@wNAPPn%B^)%YNBg/$8YNOs$/9mj!Z >ʜ4i!"4z`NyU&?Q#~g]TM"=r0ͱJt#%C4IY, o|F,\T=ͳWk ݯjWG}GckRpi wY~߄[/ C#CAKQe}gy^~D[I}Zf֔'+/]I%߀eN8+ ,? tjn -fl%V upU H}8.%/+P}<)6v\E,OAJ5}w93( .UØA~GY d^UnG`a9?OY``2O!#EwK#`aL^@R\7`3B Lb7i8HPHvg &.EX bN)7í*$77Cм~73"3>4ĕU'<Ն$ 6Tuέ+u?_h d>(&gw"1;zeA|XtyQԫ:0l~r ,֟kηفZ:Un#!]ĸWr{΅ī9\ɷ7J Z.b s8d_mD LX5ȳl^7D#=W/} # (s\\DCFIDgkN(CH9x(H AkJ-w)EKTZ9҉34nO"idyr+Wu-|5K(7AqQ&" Z^TN&#*gߟGnjwGM C%&#&0P_֘LYN< 4 "+ Q~) GSyJ n\ppD(}>su^ĨY4 \S!p=\6@Q˳V~69u#1W!}+5 ~4uxķL$yfT?~G~5t˻U*oD'ZZKzuƒP]Qw9"o pHN^g{ga5}G]v@/ 55l1Js,"0aLZq -W 18OF FE`~7e?a?m[Prz{)NfarRұŬTXZ!d‚}]SZط]ntݤXt[}O(Ӽkt@?-gXVQ*<R]4@dx5=Z|wWgV3xG㐸ȽIx^2_ux_lU$ 䃮R#V!a6zfU'InߜEi6:) σ„/KcHyAՕ`CF8!|[Im(FhZ"6PY/[ VW%rbKDZgFo_n݂Z 7$&{J)Ԯ߾0 =E&KNT5K"(d9G&10ؐ܁ HoAC"Ew.'\TdrJcYlM 9gJѶxcHA{s n3ͯKmHPLj M"8Vltf_2IUǘG6::D3$fVRhCTq"k!;{ސ?h,S[ R]D栰\ƕolUy kS_t/cb.KQ$u^}ѵV[_\+&7.Y8`o:ci? ;, \_\AȀk̈1܋>lHqO(AIB1L7M +RsجYxtNbzM#9d0gk'4bFC"&,T3TBo#6ѝGw{]u.Y)nGr/fdS'&OFQ:ZHz vcC|#[ᧉicݽ^z|Qq 856s-\]\(avr_7nR86 DԫɃf(""ppn )X) P WK^J8iېNP Aza'obC^]M"@p(||ZD?/Mz) Sw>.X] '7(xPPD ']m]H8lRc҆Km=u}1nj!7D(`khW>eS|w%&|s"ݢouGB YMwQec6nQ^o4j3|]i7_̅ssQUq=땲Чمn҆)$qĐGږWY)b{*-^tG~'M~򼨗jH|P!\s aC,kzKC1/`6]Չ|և鄹@pMMQbYnUMHQ7y"ՕQ+{0_ 5~;?Z1o-TrU 0[PVU~WLNK72_˃y>2ۙvxKqv._7CCmYUUPc;`ul6Ԃq/RZyZҸn Tv RSv@.P3#q^Rzz̖Wz9Je7yə~Jar-:viyFL,D-#3(,|stFD@ZEKBM蔧Rhx!2Svz=Fg-x}g6:DD۸{>/{E ڙwICWS}N2wQ?v6r'M{ n-AiNBC NΓE{~#g 5-ՁaTqCQ=/[\lr$-pyto2GxI՗qPǿ6wk/3$HvL $n!̕HuBf%1%"UEyY @ztQB q>Q,Rx1e6|1>rXCv*?'DL tcCuh%"z%[_^WrFve,3Qea 0a .Oъ(x|'dj<&S_F+>SGs__nq"UN@@ Ph`  *,5|N[~~/ %I)~/mt?w;l)6>QZe܆nB=Ø->u e eչ_fiLy>GȺ)(z.]"B%9uk8e6e-  LQZ\"1GlN(ӵݎi?MUEN*jݓ)։Oq}Qfc-kθk\RDуI%jiZPA$w?MJ JbclOpәҹ.7Ͳ営-CMJTmXSUGK3:ߔгdiRu\]n[ \ K_^+pa95Dw{:RE }&H H0-6I(l!űMB+Kۙga޹mQbR79p2rj9왧JGΦ :}5~|m7"'ͲG&mүp='}Hz%N tgAW^*U=S~E/8#o#>as"z"KB.s_m7ZQѮFsA1>A8<9\*+M95( ulMzFw.oz/.Nk8Wms.t H&C&GĎДOŚ/?ue|dG;.&R=8vLFeͭcZmq!!OA޷R9^H~7g z$ahB0V*gn;Cυ2;/z;Ds/[GiP?K+/_kY~2?uUS^NޤS{9NWâugH01fֶسT 2͠#0sUi P`~חF9Y-~q/5I$mCNBx{JKIv[p~?D{1)W\RϏ*,d_56vS!L{LU(lE^LtM> XӁG@$P:x9#^fӄ8uO>%܏vCJ |~ï%.ma9ҘUJ?3 H͊Oqw*H(=; K$.瑻4xlz;Oȯl1pIByסupnPw. $/Ѓ|ePͿ^1uQcVD#K(HL;3M/E7^!r[cWt]y}\&珺 b?߶#1P*J.`D*DisޞL HP8:pOŧkkש\+Sቌ!A52&BPR'0{`3ˑ=_<}kc|[D>컨LПoZ?WѴh&i%R?͞Ɍ$'-Ƿ( :""!i>~ݔS F(xb-?wݐ /HbVW# `fL#|q2&ԯ_" A0-ykDaWڞɲ.*- al?q^ XBC|81z{UF5Kn7Zk5l.LT 303}bN^?mY{Vlvu5N k_3>% Jcr9}$?7D1y?km@€Y7wb(l(pxmi ڥZ>@(̟al=_ku:_y)#gkw5:=it||t'+BeMPS Zi`m|?VChHK(bcKY'&P޿njÔu]N֊tnpoiX޾j@\^̙؅pC9!ru K-z-R0][W.gJh%:(0^ P y"d( 3C?{70"4ߨH 0(Yzϡ߽/OkgbiF1Oj:FGXAeDa<Ͳm0E.wJ4hjϺ06h?SMXQ'v]NK*p{pCe n$ Y0V/WXEgwXh\.PD ~0,ݶs +΄S];$l'i?ݎ[xTCC }V $SL'p6" i(2w2v`!Xbwi\waG ț0r(_wo^w E6 bthEa *%dS/+͍[eDaY]jk>I~? % +GdQ֖T/6>o^;p3³0o{/ܖ-}>/luέH! aT$$JYm"\5 $L$È fU|J^F'z>|%RGm}^5fO(w]\w2 :ŶU,?WC}^ZƩ >ZtMtay'.p|}#?E@ŻbM#U R9<†dn:#7P@8 6B[q*gRGwqP^իs$Qy&|C0V;=kFY}3n7 "0ʳB{^G͎W8 NAGllڣao529MGd n}E1H9'z@%S'dNbMvȥLj/n3"v}kGH ̜} `N tXig.VNo?rerg xIV @-Z[քٽNp66wn+ 龈 T0f -kK(@&#]eIUoPuӭ.5>j($#VhaTv ҮS "X@4D"ȥ 59HNNAU#hjbN,X HDKoB?j6)dž0_Lt+SH >Q_PutUtlȶqE?qi„^7:"]gG~P=E;rBb|ٹFl9rE?kOPG~a2ѕDYUw,ͥjp$]( ρXzfiI'f0}l S&T/`TNLIuRHј}tibAETۙS ~wU |h׌Hoj~}C&G)rՔs~|Xu}Kn(7<;#խLPO_G=0p#^RhJnV"IH[3n~ Jg/Xi"~$AL/w |{;~{NơH^\JqXt?,vlNk%ޗy޽DkV(!2Q@@DN=M\]la,xA`2w:q$ps:m֦WP$DcUky-y#cmQ-A*8<Ԫ Tm~o~r3~G$9ȫ"ŀO[w{ ~o&?K~86}1z{wmx[N<m[E) n6ReqK]l`ɹ&BmP Ԥ ̋$[eGuQj͚ʚqbKJVZmZmB*h7L+1DfZmLEjS:ǹ7%1}~qg-R6Ye9F},CB+lk(:8lvI߻rA$Ȓ}P' Z$!ܺBU\ܚf]yS1^!w29$Ҏho[F[eF[QM`QFԵ+1n<}4%k>5iYƅM10mcd5NfhKjt݁Yi:ߥDm;*Z7:4VjTLK1 a&?39XT*(7lkn^֭*k2ePf #IE$0R܂ez") l&T".MAuq>;G2__B;X?d[MFo}o]`s7 C؍*n HG@AL[BȄw;THIG Vqeδ AOa?\;FMvP@%2tnYM=bu.i}bӼ壡OބT~JT>(! UK鳯=ދi4|}.3o5W4P,CI#G/MPMۙ tNvl1 kӗg R!ёLMKɼE dM?s|a[%6=4!ؠJO1Gwy%>b7ԁoq!Rs4½]'տ[<,J?Ui|ŎC24# MU~͟3uFl?Yzp/ yechKS"fy8`x*;3}B{r;z1eVu8T⠢ ._'Ȇ|ʌJvr'oh"1_ HA 0 xBg.ӕ? 7m?Nyg̀TL "c.}dǶo·8b[s1-jp&E{Y( SZK 6Ct8YN 얞c ФI < T+U(|qq0}Z0Py\ړHR,O? d-,Ռ{L`?Y/2łD'/6~C/{5:Oڥo9C zТl|oj٪^g1cR/cu^vj6)g!)^#."DHS]א^LG}Ua"DH[5H@$Ǩ6@nZ".Խ4'hV-ĮP &FbD)&W#r6cJ!8fǵ;_ w YFkN>*x<4Py< r?96{bV}HfN|.y|֞ujC,fz@O s6HNhaE2HD 80Y{{fRbU2>b~SEz &GCC@˭F '~ēCprPŠ~{}R /Ol3D:$[+k|fO(cNJf%: ;ܿUvRuV)ߕr;{?M >$؄@hdZ?njw1 lzma_=Hsrq;[:I>ľcxBtAV9Eg{%(LxƯrځ=eh M0/3 @ fEFqabld\6E /{$F}c;L&XS!WDK'cqq|2 ӞA$g߷_=g)w|N՟ψW?&Q>96ӗh\}}WmKϢC"!CؕxV!v1 'm1,@O-lxL"sΊ[m{T1 kKu.eny܇XCJt.\Ag@Th@Պ GҨ)ouf*U" .S ;[ $6) @g ȽE!4zYVI洫zQAd,\t.1ylAnGˆQb/\_:HG9M:4#A.r=g5:6 ITдN͍]$RƭfaarUZ5?:O;F"ͳܹO*.;$Y=cC&.N7jϤ&$YkytSUp>H&5+‘A zs~׳Ô!NJ]}w3xRجP@ar3 l=^,K.69Χ~Wo>uW|@>($jRd+0A(YjLݕ-2uvDBԠO}*gwvU鼧]wdl%}J9ԥjV+i f㸲j>j Y;ASYuj,UkWD D7ůud8t_#_$~827"pox"RXr> 'ss\@<_W]lIyֲXg-{+s5vڈ·ݺ Sa!W~ m]y$b/2eMeBNZA MH@aTj3ڼEZYP|{l:qS儉$[)_3#LVyTrnc,,%~1eOij\y~ &|eNW 0!$NVOLMg] E"p]a=HdKn.'p'l_-9 4cO<[KZARfĸlEr~R,BawT^G.+?zgnq8QW蝃r ?{ld@ >h!Ayi;E~Vv"ް3k!Ds&r  H[^㢴a!dE%*:r:c i15hrH؆I;s9 LjRyYG2rXWo&SPN<:RDSAA|mx>w |-xϽ|9~Emn12"Sq.Hd ŋEg q?.@E[sz@!+\>-I7jkǥ@{2D0& *!IHwO'J715sIAAs2# _TnH&+ߌJ(޿=bbsM;l4J\uc~YPT$Tb|m&uDKuiI)ؠKýhv-?p&w(;!@qtgL<8UWWw?WOKÖ=,9EZN+*ǃ&#elpԉqlf+2R53WǍBjٳʔZQiS Nƃ~O.Ў L.ª{ծ׀y9tq^A,g5ڛ<!b&+=q=wLPR25({`;k[/(v(&ʯJ򑀡YoW(߻W~c-&׵1ixF8y.|,jz~1 8b nD fVAyq`|jx8[=Gn^mJBΏJ>X N sNI~ z'r"o>\#4{/;_^wsfrOʎw|vA8r0aKz vp0oϧ!vZSr:,p6cΧ*D0$3XE5RdA@!x蠉!lVb:bH?F'aH,n\ `R! P $##tuGKRKϷ+#).>Q.,(}&Tz? UKVѴ5TyZ۽%;^o{]5ـO걌[W]gKEi"9MZsltNƺul+-U%o|;#X9B>!Pj (ES쬓&McJui/ɵ=(ySvеjjA`^%wX}r:(ğьʊE*u{ /Fk\/5^>>K/Su g+K@&&4]9;G虪Qii6~bRaiZmM0%x/ d s#eJLƷ]K͓RV]rD[6XjK&)D1i-IccEblj4m7;&6MPXV˛F}#O|H'9 ("4Te\깦40dWwi5Le6.TTM#!FM=oNNm.qh >-dY4=i ai)߳sfgE V\ִfYQ10+XXe7ͤb<&`lvnj%aS)`*LKiik^wz7sO~; uDMM eLը`7rI_+HA@ /saI /+m͜)5TKi9씣[NѬ7:rQ. )Qf%S9 V1]%8$(т`lIDѕ;1YsS=c>֭sݵq) ul cXHcg/(aK3ku&#IFJN_&-[niϓUm ##MP)IM,q|N췓h<" Zk6(K_I8Ph=3k *J11Q 䈈3b^Y_uinݴk%–. fOjmpJտ&x=P_#Q9U {pS2A3ui8{ڲ-BA D:JTz, /V{E+x Dtʼna VDbpSc*PrgVc%^`RmtdQK(}yա6:7}Xstot˘7ma #'<^IWpX YsK۴Q~UE_}ScEgT].;vb+5L:Sa 'JP+i[w4sS5$c{rxI.H* t[ QFhНmG$A@k"DH1ٝQDQ CFtS#3ߊ)B"(SdH+`G$4'`sHMG`s"4&(G `(N@nؒrW5 ׳)~ ̩qZDRyscGIDwCA.`zЌ@[SHqPt ʗQSܑ\z4[gk@]kguT}XB3RA=22oUHMzf80sݮm!|ȅ`0@onlA n; "xb%r\Gc/T L!6!@qĐp`XSk },_}Dx9bC\I!fGa!@ĞTJCl\ez;$ȯNާyǞjXwt GѢM;Շ) LgMjɂ 5f(" GϗFִzA5ƸAX~5顼Oڬ  0 @Ђs||(ުſ<;ѮW\Hg(ǁ#ӄ{ډT\?'.mF&+V:#~:]mRn-?.&=VCt'rP% vH2@~;U- ,xB@t5o~Δ ҇֟_֊L{DLH$7P!tX,[4D'ِ5ԟ}bXT`ϋ88GQJk'8z8`YH:h 9Uw|x>n03iģzu`wx|$9i^[5D.ӜxD%IJndZr~5GYy;D5"c07!dc,^lW3/Lп?i&YCLcДJ7-&GhV5xB00p[LX]CP {kXmi7 7e y-BCR3=YyLʁQz|?6rG: VS+K ձ"{Im~`8.R 0LI')sd~~nL Љ>sW]'KA" ON džӬVQD tI0TE  "2;)|4$FL՛gz\QJ o ;2 @grt[5 LM\ngj ώ,(6ƛ}n G`tHãsɘ[%K^A00('e骪Hކ]Ds#ȏ=H`,1)j/5aYQ jXB]Toܞ*O5YOoYc?H{'PFdh^10wp-k~TPA^~}C>6Q~W=ෝI]\Iyn,wF)an`{ B P mtQ]XcX`ps|}ox3Mb(g8d@b"ǵ5DT ̿8_?Oagr^o?^B&ws= >1!>0v#iUdYaDXlB<P;Ek77 aoOϟ]n~ޤJ6 7e}2[!Qm0$ΞECXL;wQڃ[ic؅~, cqa=(*\^擃*\âGĈ|toFPxc\k q*+e&p;3%v3FyZ Wە&Od\- I4e8:%e's x%4q,/MzW}JMClC~ w~^q+km]E%us_pQ a`)r\û3~+H}ؔ5 suk3 GN]4@ъQb-FV hƣXm6ߧVj~U}k$ ( EEEIQ"`7m~<>89"b:Æ_+mP&ܿ$J(??ϣ,Qd6RJAfiӈM_O[*rW*=Ʀ> %zV<`[t:7 n !#]Q{զt=ZlBd"I:1>s@>vdINI\~]P !&' |Os3y7mⒸԪ}%ژڒ!mm]ӳTZw)تiJfcjqڕ HKmyT-Uûv˶ [*Gfi62a)S56*/t.TWSPJR}םB3\.2ϟQP$(r7L$wxHzY@kRy320F?&`#$x\r`QxRʤif&8SJ[Qж% uԫ:M@(qxmNd)˶O]3OOm=z8 M0Hy!cT_F{,G @H`">S X!A((2110: Dz1~/{ӸUXȈV1Hb,N.qDεF\bHYt z A" T UvtX͉xTgw~r? BaAsk]t$ ѷ˟11qש=+.z6Fo[;nOyjjh AzAQfIL\x !b2lK_KGɋQ S:a#͑5L,ϣ񪻗Ro۠|`z{buM1f/^! "E ^ZP9cLy樏K[vz"Sϟ>W D)`5uX{u m՗OLKԴI?yK|i/c\v3O?2pdJ $#]{fÒ5RjU^7C0Ƒ/x/㐰1"HMbթ;5lԣDk@C$@:te蘼H lUL=ͰI:P{_G.y "dIDeqN\O Fj_Jfu7GH(bX0< s٩ȪTJ<ɨ_ja6kM@E !\7;l6HdC @bë;K1ha0|wQF( ̟c>Y /$~/jH>jcG׀I˟.F]|*LRq(xBAJAd@dI ԠxEXAnb1e9uvᩙr7=wi. 6"tг2aݭ+(8Bk"Obz}C12ҝ{I*Yɬ eD@A wm }ݲ̚bP 'C@!xCI|r`QgʲJdb5~[m$S&&I"Ghl+R[1SrgE4A5i+0S=2 ˵`XMYޅ^浌lU9ad)jbdGE**?o]dJ~RH'#xŴT o[fYӷPքTyv{rM+Iʎ"Q 4 A ~B`Mac/]HIBAD##Ec$7}( R >#f0" l9"%J;~0SU|# >k4:J<<_}㿐Zb:wBG2D4ը $@O/y-7iR_IYAq˵/2UED3zt{ Ra#$֍ |(rQ34Bg^";0RIʩz Tb$R__$ 6kwc4UЪ_gѣwJҡ//1?+쾗Z 'uHj Au/F}|sԾ"["Ͽ}HO9*[^))4~?gYJd %Q:ѕ>#U^ rC#J Qvq,tơȈ1jIvzvUĝa"bf+ u5~,o_>l_BPׯ*a}}o,7C:;qP25>I)KҊA,b@j!4(gD1xxy^ * @(i ,=y5fW`@8^9.4q LW; ' |iy+߹$)# Fn >օF\0$D9dIhIY?7=rxo T?;L,)ܐ40'aך}zaǟ@.Gi}T Ɇo&s\A3@AH FOCKΎlqqe֥P)fExUwZ`'řd$( e2EL[@mKcd$&;Pg"#>ejnјڻ` fxj{"2vG\47=ZLB.ԙM@ߵ>sgI [K+=w[rUm'RI]:EݦUMx8JiC)?( ĩE%{\zkckMpf' _k{Ux P@$j5R%[Ud$74R3א&((6 ߻jdI/ۚ* gk2-մqy*w 241 ӥѿbWzqg Iw~P^qR{>u+%}U-FL"99uӰl @tiDO!z(0!ܰjWng(eOԢ9P Ηv^B k(ЀҞ. !U-,DT@z)<(0]SU+;Z5ԟW77z6[?j|;] 2or#@)}bVY`:!d74<+`  P =W)B J2yD̏@SC$QO z/\qK=6#$;Sp؝'̛wc=Ӧͫ.fC` ,E{ `KU7R~R@ϯ|g8pUw/:d(׾ LH^_-3 %}ݹK+N Ȉ*ox i  ;٣HhtT߾`@dՠ3{bvXh}{ͅm1}{l$IT=  0,V'/;0:FtxpLKmDF) $^@IV]kSu0#\zf3==W]֠3u]u P V -Ŕ[2{ٌά1'E 3SsX>PuQ]z׼a#F3f_TtX%D0@_v{pBnH"A`-QKZe[1QbXjشaAE *E,|EG8q /m E5PhiJɪ(lmXT ŴZ"l[d/zzM̄| }FI?CvDZ}&䳜ədI1$al͘zLյfɴcvc&jr[)ja]9~B4h|_O@C8:VWL| 3բѫi*{rdiׂl1>)Czu&Z6^Z[zze 1ᵚf"We9a-fZ6tJU]f\ %`SaQV\LJʌ'ys .젱vlDՓLf&R6՚5rTOR-\hYX?ps- ʡm-i feu'C lD2+"Թã:['_u0zE+׳I{DjZXm6v;k&WqT+=7]9mM یe*ZE33 [Psbc|%5֑pA! | ]"<#z|3^<")4 T5C5j "Ӕ ЇEGP4wdƔf¹u_J^0wERgg8Gm OTyKI\ @A9P~!LJ͖G۰|fLbfH0 NP$H`@1\G|;% `.tA"+`ZjFgTCy<yXw;hCk?[ B[lj SIg󥱜Mydb6lrJ,x0Fwl\AAs=NׅEjT,s;cݷڃwŻ~=MV?M#7pB/(!"pngO b? {;ǹ>d?J}9puLw)sy<8^'딧$"xr+1Tk ρmHJAF2 no.bDJj*0=…%ag8cڄMqc8In.[},ذ"aKseybAZPPfhӤ`#u;AIE/!ϫq~Tio;%J(D8IS)-4N~T-yJ|+K%+/B)<Li0J_@}ol?w8|o -Œ ͟fP=8B\,-oB 'Vf~a}/k<|f)3E訁7yPE0̼?q\KDա_0|fP?M4:C{5d~FF !QYҹt*3RN=dY]W /3WQ #*"y<@U, V+iٿ_䍽;JnRh3(I3[oA\LDP0vKy[w{z󣭝fBm2Z}ƏT;(GkI& I$ 6@lzs2I~1щ?]K‘Ծ)`-JҀ:1n.I;d~w㗱Ofq~]w,XsN=}/g{@˂6w;9[$4=3,T>kc:}!`@EA_W{,ѐs\")Q\\w[Y}Zٷ3~d0H$B>uwa.EDh( M9cu8ى eɽsK5)j!r鄭q7kV=7҃ " "J[cj,NJ\بQxD;YƹS1qZy|D \o1:r#LoT2mw2[#7{"K smO% >G_r D0>@I#"ITZXsk%[lͲdh)IXI4Q6"-4,e65ij5b֍ksmaQlPF,[g_KO~yq[FcTV[cUMZmh+b-`հV%*U2[MMll՛mj"ThMI,Y?73po`?'L ؚ$?z4R@?, hвĴG67[:6*0/5alKYkWZ-J 9[4nu4 2"W3XX Df梓>3, ȄɂDI7e\By@ֶ|ӘAjuҢ4wș״yDfLh|IiѴ}8YF;腸:7X:#O&  1S{r'ZYWR-^lvks;0ȉFw eQ.uxwB|@\ $B gu{?*G]r+ LD40=6&"rvJ≁oV&?V[L.ٕ| JPtPH$0: ! ԍH.{"ʽHME.L >:3o2C\g.owF4 U "~#H~?}QtH`pbO3ro~?yHy[*1b+Zhw+A0'TkIk輧Wy?S|?=QEX,t#Lrus 5&jݨ:<ѢOW^ϧ$,UEPO_/x<) Wp{oz8L0Zgx8P>f={a}OæQxXZ^x[ ]6M5h-2Zh*hxr38 Xw"?YSmlCT(2 B5ɂcHMiP(%*8HIe+ iFIkrS? 4H%l8"'",ݸpx' (HZ;E^T@㻉.B?+0x3O&%{{FB r]ct[,?'?^t7]w']BPWg^0]%:6j>5nC@.%%E %?vdǧM lm-^)qp|,6{#LR`&N |Ĉ/=rL/;{ V+U"o1@\+.agj M/FI5JF*wMRI  6r oY꽇bz{KW=Jp5f1(F/ܺx0WiY8p}: 3OJ?7_oH ul3 8A802I 18xB @dM޿Ƌ9!X) JLams ;e-,ekj TۍM2Yhb&ZK%B)3"[ ܡtfnGW K^ʼ^诲*ˑ#S`PCg1{/5{Wnup /7B,43/0ڂ&Lu 1whfpw ȹXh6e1ٶaI[LJ̴i@]輘II%t˅K&V;F6̮R=\M>,SDܛn[Gb+K(V:k2KW%-in[MfL7n渇LL2Qæ'= "X==Z6[h$RQeK\\M;L]{o5 S-,* l0 P̽c՘h&Yִ|\ŐH'Ș2Y`n`O]6F8_}*C ZQeo.+jAS(s,FimLt<{e|g|5H,8_-rݰޕD+9be|mlр֕$̤2PlƁGxk=1=O?iJvL# ?!0A8I1&?Z;@h@B 8"Aѿe9BW#%xL ~x_l<^ d-p;sQ];([?,~Es䦤}1RG N5x¼>W?3nlr8$tƧTZX8CL:+p`pa  :#=p]̢ #,h= q ^`ˊBA. Z8:n.jOE[QnǒuLАG^Y#pXk^Vյщ#{W*r;)c5ŵfZ},P]ȡ~/tՒMN[Iwˡ~nPYkH"zD-ԷG@ˈBtU>+'עڂEUޝSc}~Y;f4{s0iw>DOCQq=r[IǞ c!HoO)\4Y9&!0E2 P@~,EmNw󔾽R #" P6Y1[TdھW;f-.?`A$^1*F=Eq9Ҙ"_Is%U"F5^;14QVٌ" ;"!/Ekyts?U> {yCI?HGuFi?YOy|SɱVy !aslGsxŊB6}X&Ӆ꫋%D$c7;GKMJ~~:/Х\+7!pM'g9B.}?;$|(;58H90ΐ5H:ȫ\uZVSEu[%px$fW(>&uQ-.%kа&]IтV^L+GT*X N{[lcϚCE]?14Bm5.QZt@T|Y!c=,VQ*)c )  EuUtS* {ͬfo4&nnFI:Lzl_؇2_n 5$ ob3MG b0D&Nu4ٵq|ȱ"{?­FqDnQgxVC)8&GbrƐ)BmV6{2 Bn5{w[Y119RShoC)BǴGtd 1GI.f]q2*w\l9I&g֎( @V'a}NHJoD?N7it33R<+ړ/~?oGS"dUDFe0KӮ J9;JPH+JO'܄a@/[)&5st3؊{6z[>vfZ(f\hVO'OI2fXD2[( bH`;:.xIzH0H1G0P W5z6=fcuݓA+ ̓eӋ6,_uxo&( EY%m?cd{KOeSD"uRwSw1f "Ǖ]v۱9*>A`8WT5f1Onr!lQVO=C[h钧\bˆ}?ᶉ()ņ5cZ}hV xLg97vw^xE|s `-/]Ac<=ҵ86'Jc:yb|/|v۷ txYV(<,HAA9lV0TU'hO+]!LTx 1ώы9XWl:iڥ:]I 0TԆ_? z~` h_^>uM X K ^El;_sQV@8;kߴah`'+%>DW}?G[/`H0y+s%n>| ;}D>y>XɪG]:⚊byiұ0ö* '!z9f\'`$k=Q5 J X*u^\lq5I/e4Pa@k IXms #ۻ8ל[Z خj @!㔀 g/}LPx+7qĚt9Q}:?Dov6G޸ Z& A?ظm@_/Df5c1U1hHa'{2F"(+`2mLc4i3 io2QP&?4{~GsH\E@2GoLwzt[l"=A}֪'U#wwwFta ő=>Sc>d$FRCB΃^WRam p׺WT1,}'VFߍzEJDvc_ujOXQH}s$n …3T稟dOI3yQXKB- {\8¯Ϡ[\(=S (DLyП)x#@n_U1vsW4 O%MklG¸9 y[iFFGzՕ$g1A0d/zѿy+/XsW>KwQfr## *~%ZbvUG'Rj JP^3+- D{+M7v 7vQJ,ٙ$*)^@ UW)GFl{%M|/7N/xqCa mJ"nϛiȬC ɒ/IE`^*/5/aNi{ri۷B{(O 5kƒMñO69"pu@{_,<\xX(L30:&r,=*bS ^.շl vH SƂɱN }R9ҦNeQ6oZ, $d$1*;b:dXH(3Z/Zĺ`\ O# sD8ۘ%C߲X (RL\Dl@E7bB6r¾sӭ1ڊ%o:#d 0;R; ޳<%6u=|('~͢_G T)<H xQaꩂvZZ$a5<{;ob=B䨉]@DwܿE~C4>xQ^P%9wh s%٘V2&d'4WNKqć nU2)^B.#IU-SKt/FpaK)GЕ}˭omU$!" l'P$oYW֦N9%( jMr K $llw>Z'*bl85b + ZtNBQCI+$Ddx+Ե[0~%`)bq򹪄h`|֔d?|MmXI1wu" 4a RDÄ&H sEbq1̹h ƾS_eeȀM˄ Ȣ)""!6%Ri[~hq A1YSKZ4JecM`*(adF(H)aR$+c EU/Ǩis:RpPbfn?l7|gy _փڤ6+ aC-㝅04Sj3pũE!tmh'LՖ3W;}>r{|&S}9 [q1iF+3*D T-hV gk_eZk.c77k;݅?pA_?s;l jZr_A y2Lz,Al<+NhvUMʜ)-in2Uպ,&9DUJ-!AHTURy1 Ys̡߭]1R %)ocx⺦(%REoE7 %J+7]sv쬩*tnMZ{1Z#/:1[mƶD tYKiX,14:@ކw7;.\(܇G,'eλ`]CMl-rֲM3J*ݜ4BaX=Dşfokq!p5V`0hgѩ `2]H2Cv 9NOI9ؘ@:ǞV{.9\.G_|F%1O|%?}0u#u ,2{k!ca y2"v6Νt.hV窸7Bƿ; 3 T(ԃ"E(-2bO@GbĴ%Y.|<!t`Zi%F-YRܝ 1eK=McGXuJfQ(6 (') ?#Nֱq_\5g=lTSx 1[29¦:Dcr PTC_M ?AOkȫN9?`"F7DBu”J hd\tU2;p++[A&`svKڛk 4^;7}d: $[?4@ѝ6EZQ(u{ ?*>4Eթ2SoL粗W&2_Ѝ  |8X?:)dELʩ&u2ޯhT c,iө6H ݶIW)}AK L()I7斓k;]\j~~nix@ۚ)Ca] =J'M,Ttr_>V}Va0A-:̚/ț~ߠh@H҈TȐDŖI^Oz0/M/k@ebr*Qע9P ̖!Kѩ!̯s%:>"$I2-]U+%4Ni7שq];s5Uz@R#Z"bF"?}BlcȳlAX%¤m7Y_7W>sycN&j2B!Z2^Kc.,.:Fݹh)o$`OWy=X V)# ԆƲnIɑ&.~/<xNA$ek&f+&4F_'"D<6~?F˶B神1_7iMIɠ>[Uf ײ' ǿ13SIjxpb1Q}7?hSCBx}$'.21^DX2ySBԎc V( HU*y;EFڌEaMjث~3)'tN# vp6m5PIA:sڒ Xc琫Bҥ^"uLK#= >}Α~vy:|N/XcPi7]¸[1t0^"Fi)| Jy3>Cym0q(*h+Uy䣊3jҠxTZU?uyC%"@,&5:PӿcnSV(eիjN7K]j{Ց ,!H.)dJB_=I~@! ]Ƕ>'KBS'6E=L%!#wr.>CO&$d O'N6Ll?.r @CH(|@?;̸SE|aV%Al}ľI*>>NI'\HDD >acQ&^4jwmڰYDI6Y@A0K/z7g< JoI[P:B1#,m^hcynuBBǯ˟#PGc= B@-[KޫvG!!ןjD4.,d\"YՐl$1~3F* ؔɇB}l4"H~.  L9HTH5S0F Wl?xfpX7>1"u GJz@'>dmd/Jy d6=lyCf;]jMJ/x?%'B±*(IF+&uja:K{J{[%۱1< ^}R%& " !-;gt.+xmSRLCmw Wb:{8,,)h(>4 =C|_ FqPkuHC!{Ɠ'T򨄤j&Vg?呃C%Rԉd[z:`.?ޯDʞ+^S90A da H` 0FRdC` H@7CjRQTͣhѢɭPU*?5}WyM|9QX",XҢX'_} n9'\,%cE&ƨ6ĆJQXɤD[TM֍hֱkhѫTjzK7?~HH~3i:Ǣ˼G^c ~1 @c5)>'q0!`j($}mӅ(4XWzI$&o@ 6b6]]6c ٶ:l=]>ǫ'ɈI!ܷNGpj5J5qj|] M&3LMkHOӑMtP$?c20ٓL S#AFst"/[΍f%#lղSeeJAeLJX%#+ߊk=nꡕ&Ft%]+ T9Em|i܊WH)A/3%f\EmH{f̵f(*}ǂQ.5i֓*q $"Ws45ykV=2{{A@mII \j4?+0~O^o_#GUIH@jXF.LmȗKrBpΒbLJ{ssymx+qƜV6 4D3|IwEG~ `KXL.BrC@PB{W}SmT-y1zX_|U"]bzZz{ل%9YV iqpZ媻"ÕȇMXUvی3ߒTl>Ol~ fo־4'~'wGu@T#R/yy3Ag{A%LRH$HHwtץ*T6xp}I"u;KHՏ37 wWuo"'n:b .TΪ/Q)U\b ?볝#S[HVa맄cn̑YvL-ٹ]Xb'Y.ᦈ[Ĕ9X w^ʀ˵>.Va?1 3gz3eR] m!PAvY! J bۂ]uhg 8^ [FvVm< N 阓+~ P*5r@d$r7 dz/W+d{mǽ2³7"De֘3ϻ7֟L5Bҩ7 a-2I(SH;ꃵbw܅kwV_Ju6h4o``H.BLd5"$ɤLttiW[]wnRDRhh]ëZR"ұmB}[o=w/~':D`u1EBDM #IT)fJ %7 Df#&& dLQ3#$DRn\.W,u~ݳ{?*5!g6dnW(/F!H&+m-+ 0 \y7QAS`́a0DRՁ@HAes)y<hgewo{H>& ?Y˦ Bz~(nUy %GC@P^B@쨖9X]cܷ]P:6oͲ:a)ZM"  (QG#ke0AN㇇=,Xw:i FH<~}F=C5(7yؗמwvBRJ7:/ u)&HL rC% M,~t }jvG3⽮=+T]je |6a9'*$0$*(x5@KN͜:\OWGe~fg $O-u޵UyN0@=fbhAFr P批,V2r0C=lx.WS^L*wv">Ӷx%)DD/C="aZ(Ul 4R&Ȫj_!~,lǏ{{FavU/g4`ҧÁC2ky \09` BLPDޫWǧCF X,ٮd/FVo &䅄+@?FfVj>ՏZGUqrI#_uǯ*ۃɀ_-4a4I}g;f|RHGRiȗ\l=c>,jwM&s%~5֗Eiv&эSUʫ%V Rݔ H%iӢKHήFT;("H|][}WeԫflhA*یllI@+7L~NYF?."rQ;cr#TϋiӗKI4b"jnv><Ϙٛy5=2ID P0z ,4Y4)V &>^6 zש6i.#4Z:ːNQss|e0x}ο7<\N狒IȩHOٹF0*4llʘ6)=+FuS\\y3^|"O.Ɲq^F9ӻ;wOs$Fyõ")Ptz!!z?=+üNޗ>sj']eCmcNjiĊ si&MچܜkK5g&UDAQGkbfduj051O ?3{fCdݱXͩRv)Ů7[nJN1bMuiXWV#.YLp۫cuz8!v׍Jd`(jЩ:)6[{>7 ãw 1aj37FwZaU0%!w Ym}q70)}!@ .aa&"aTFe1e+M@9z0Oh#bݾg>̈́"oe|L5AOXYe$!B[u1hW}0!Zm_^V$s%N#~2߇;_wr@Q՝^uWSEO_M *w:/h7LfB.Jn؇%8Uva^PR^5z }٠&b'tr$t:O3@6/!\?f扴>iL%R>!AI@9e4Z+hRk{k),YQb$x%Z#QQ\]%|~/#2|"KCntVHQ> QOzs'vò}k~ib$ھC+,~ڥimg{D A]yX DfCf%c|4c#n;-c;vyKHB*@۵(`Avlv`nw,qr%RwD9oyK[210mҤJ;đ᭺27Tzdc0,Mll)A.G,O|R*Dȯ7G 8lLQ|<_ - ­4  'BB8;X)^=EsҤBLIKg=_l*'aD^Qu,/sl^(SZΉ[Iz^1h zVUq =gOV3U跎dSuCBJV+PԊq+Qe^96Lb z#NmE( %kUw3gMMQڙq=D/1Fu/KU^C7uSVTfa{jޫ?7S7;"%Q17eGvA22p =N()V+@G#cf=?qJAA#]C:A.+-e݆Sֶ/̮qg ]y?q,sk"" rau $}|D l} A.}7tq z=N~!ٓ.^#J f" "bO#Y{:|).6w :OXKBx2Z)k=cs.;W<5A_A Oe$Ɗ0u4aCI]=VKj$#y>8^2Lʿoȿq|I%U>p~TlZ_8wwa@7=Ocۊ 䗪gDV~u?^Bp\ 8MK&nqY9#V[T9Gԋ90m^rZ :(MZ˟Ղ5cmf޺h` !d/AVuj{COoׅ_in8HhqW̵)kt6}7q6h>wCyರ-p(22KRq+g2m1zɔM(♓!Gy(KY&&l%[".U\ Fܸ%Gg$b:HCϰSJ_/)w?ZmM>MxIvؗV:}e)Z8=cE4W^g=x:ƹ9ic KkK#oAJfskK쿳k>P̡Yq ` 0RTdXȱI9 *H-h؊#X+Lѭ=+Y78@HHōTL@6 Zi+T_(v?$A>[#Xly`F jy]&`:3kLɌ6ƅYz&H!*"Mk8\;^Jlw^G~{EXmP&)S_% g-*$&j@Dffɵ'KҴD uk3Eh~'NLl8LI?j406kKV[  S6nڷsL q1hBkk!it°r֥Gs ^[3%mSl_[mb FG C[vfGy4h`s]&|_փ7MɎ2qkVv.o2[E<fK"KFBi.EGy6 Ozs&xHEL@A1 D<†Dw;H?O"Wi_3OlXIkKg׭̴?ӊ8.# ?]skwpߵcpnH+&9,Y9A(-R_REtH;eG{ PJk0~8T[.\$0X2_k2E(AZ2bLQ9@?KLH/Pԏ??Owy0s'PV ngnqE1#OFFc! FQe+ȃY<|;g5/Oؽ0xr3"ב_ WUϣnSzOe.N6yZI?ovw-|98WemqYwkq(b+"i$d \q(i4돖  __P7}FSݏ@u|ha2O6cC B)GUU'#p2,N%Q2::61z%d:7!'qQcPm7}[1f~r"0Y(~iA$o*ZIwq1yX`:@Jb@9ΐW&QHA JZ9,}J}tO5tG'hx#%+9q>AA12ARUԤf" &jcVw2;cm^~㹁&3 T?O冷ǹU]Z\ * pt'y~/o<ДͺY&ϗ߮ad]D3$QC${Sw⋴#X~b8|ӽy_$5VE9\8/w%EƎ">}9W 'r3c-R(oϾuITdK!>^1(E8,vЋޤ H$ajX9I|ыN%NI-峝;_=jK)=P0(AͨɑP #g[&oSsvkxNǶ@3'$  "(0adY OO8M^79H $!IjEѬj5FFhMFC}o:{5@+$Y(XE!@΃[s5 _Gq?_b{]7 =p) ;"k)1DI8O-qPFHbBd{]19e/)i1A5ksX4| "P94s?\sgIЪV!!sbD)WHvYbZmlj浠_'ɛd*)#ãqwڣ\,"*(0S]Ou{l޲g}anW d(0.T6M4V,x6.q{V'齁M\9"`?r񽔁w5nwt[3v7}@Տª)W8 tu%c:SOqn{k jɼ~]޺,<˵/'y&1q~xYE,3Bg&*M06p4\y$7箛Q&N2{=u?A;PD9H{OC<% i&w2''&=y~b{u^W'm+Ztڎ!O`LZSC71̞P5A̙/P∳QC0EV #tvʇdOXޚϵyjf`97$3=/Ej;T4hFn{p }Z"&fx2+Y򌴆QpdҢZlE]p`1i2G'#aJI%oX 0@sOf G&Ou0"bI!"S':dH֎JCݑė"5 ݢ$k S(p7@ )~SJw_"X-M0N>YcW ʝmH4}:?.C?7q9UV"㊿ ˦l2Ԩ]2N~\$GΉ~3^g3Gg ?Ly' |7ɀWKْ A.}ʌIH\Q5T==>7#{PJcBAsH$P('. [~E?~Mcǖ)^$$c)1bQ1L~G+dAIDt!#YʗC=6sk{g"FH ̘Fd.$}7cۡ4xE}4p]N6+D'F3v.8橙6}mYdWa;*=\h"D R (b3o[@WQr1t?e`2^IuZ_c $G>GO5ƣۛRyu}@D"=9U=دdO-DARd/o0W$遬j"a1DbOo'Rh#BQ@I K[7&/8&\++~%9ss?$@?cbfVD`H>?"舍GP)Nm =_ 8du0=ލ~+ *,=0zv6JDLP !qހ4*VP= G, H%eG"Cqv@r6?5*"DPA.[rwyYQx O_Q8f(Hr/ !9`ʮa\؉³2Ex^Xf^iV1](~pY† yHЭ+Y9C&P^j@/%c>~Dzoc?Q`ǦCr, xg*"}mPoLEMylM)吊9pni,^v}Gd"LH.9ƻ5 MSmC(]iq;t3gN@bDc҉N/d/PH ?HozF,:gMLـ`nTɃ`v7H=4;L®k{?;a{|Ƿ}E8dNR}{Q\qR1'+7&x -=Bg2%hfD @2$S9, $Y%TQ.ص_1 9uf7]ZΙjIfizG;~aG xRҏy1,T~?*QIoZۍ [0[(H G!^Oި'l }v~gP鯐(o+F /?6!K<.^46:Ǧ{/C|N' w!a2 p4$7dsÂꐋAöT7t8Ff, kqvVW]5j"2 @{)u^q'LwCxLkY&qjV?=8l|m-nVŦ<>_]%V$Y,9Oٸ,s-?Pp{jiQ:cHlQXtvtU^2(/rR^zf'KL/uR|ş^x̳KvcĮ2iΛd P(wHd1%}<ϕLs5>kѨE?T: 63(pڴ?@rsƾB^M]\wq -`7`x@p#ԄvB~R(vA?(LLhj.)y{ʑnM -5fE\, b{ҹzo3 3,"?ۚc QzEoSz^=(nSpdxpfF|Jr,&"|{,>k'~")<O[lc寃QF̣T` `)$X/g|ױX[_u9 a@NE{c ^m?]y]:gi$> Ah;um72ER]$+!!P%c \2$d "Qd6N&'`Wˆ @@>>Mr-nAw]챹%bQ'+p 0h "K1? ̇qVRcGTEY7\mgd+r5<-V`L17dA$Rd Iˡ(Hl(T1Rjӂjerp v76 jܭeR!l̷ r?o;v&e~@rDn jPm+*VVóъ!w23y$B1GtP|;D4q& ɹb1ee-> >;tS'9Y t f;0!8A}3l)@&,ڠR[eN46 ĕc=ȄS0jjxL݃ͪo!1yն$$Lkk=omׯ|)<~y,`6vx׶81ak'Mj~`߹ߠۺ~[nj.'YGڌ25}Z7F\lĶcq߼q|SW'&-2GW{ɦJ/g*ɳ9u_O\ijZrw>"Sz u)2n\4^ )BwB.~*Fyf 1^s%/\BH *˂e_sҧQ7.^@A,sr,tޏ8;ǂcA_:xu uNԭ&;v#SiܛG'XJ^A0} (7'֓3?j+{.wޖz%|_W+"ŋƤaH|v_pᡏ'˜0L!$y aDkfLWDD`/7VO bwy-|2)ol~T+O|^g #چ^3(ܪa\:H pS_l,u^ '!=8a$/13 |.l\?A*!cM`DH$~IG49 .:ٻ3IE30]3,ۙ } {obQ]ySLHptnH.M YGמ~ǻ?aOhqEעY6|Mn*qENyB[K\g^EUljQDнϺUf_|&^j<]UK'ap1ݼq.;nlsӣD+7$^+XRx&:$ʠ BZhiH^gnuzR-UxUh=q'zԏ45Hu6׃1DU _}h8B!QA}M?'6{fR s;R vM?{ͣ{RԨEa^d7݀>G驌n<0KfuDd/0{YC *ƒY~dc̀_+{a@Xz}WȚ- $?e]E`ĦQ&W[ٿh|˲vZ5>fJ){?CTzil;ĒTF00 2 Dg 2 p!A|sqC1̘6he"m2~sbhhUxhCG "-x'trIS>֎ejzQ?v>!~w|5;%8&]#X~=a^<23~CW5B)AYiڬ|ڟVV3Lx"Ekle/.|xtE(5xnVi;=0cn!㜤v1_96U@Ԙ$ŬXmc_,h|~/+/Թ%h(~jF'?+z7GX>i }M&` /,tԭЀ:K1\ CR:FgI;{Mb;h;ΥF$JS0 8 KK`oK =6Ϧ ѮUO_Z3⪿ci;Q,vm*RIֶT ""Ĝq˚O:;dz=x%=~UZn:F#-ڟGEoɪn|%eaD7MȢOF1~j+(~3t{ z!rܔ%P)lH4[Pk$l,V`X.qz&|υl^ӉuGX$0e ρiS S@s%%𿠄`,U")݇e<_{)gUUAV9B6$0 S  d.\Hw]Hw;u&HfR0!fNbI1n <i=/|ϴ}Hu"F*Dj-EDlZ6 A@?~oI"~x> amO>I'zf\Vx Oi +mC4k0L]g[''$!Tُ-* F/ U4Z?1#i; yd<[UOsddJ75Y|d4*۵&ݍ 9N.ͶҙiZ]Rêw'2"n)iUjZFu)MԼ[5{'17 EěχJj ]a7l1c_ * X?wd YeC$x' /o3d&]| Ȉ\Ph23>=)nsZ;I)֧*RxA.GHbrl4!쪐kSGѱ|+ܒܬ/eǒ I%kz< [[ZWB9ɓZ|;zc+sUJZ7wh\"tUgfKNQ.B r3KG߭DQA|)[WMlE|"&?;/x޺ Ĩ̙o'i!ݓP \.\RmcI"(@94<ԍ'Bg?,3€EF! v_/\|wڶGR+㩖$@9fU}s^/ҨB!/Xz}k<6̸>[Gf2C~z;=Bi(#"t[4F9`Q>A6\FN3an `ozu|kkPHRyC#^.1^*faw.6`2}A-$_ўgH 1gf{c !:,n2'h؇5Ӣ'YYPۗ9x_Jjg"*1  DC$.-EB&n5@c|oةWP*^yB}lv: s<6J]sY$j5>ZQOܯl`Z#_*^(%Ԟ fI 4'*/KvS[ݳyAlFRY._Tc 7)_` “Y䭅يO)T!ky[mSMT F _pF:|ą70(@|_Ϡ]*dBRQ?s{yxYIm HOrv̨n;1}2Gy@ $AtSneA@Ǚ{Gz2_ipRkL35@<g BUl{}$@bD] :^_1K4hAR7J"P Dp~4}::-:ڪېX)j_!{q7_.@uwZqװcPW)0s^G̑^* *c?q_R?{^EԈcK^Ja$g @C@9|DRԤN;eJݾL֐Y>?QVAQh*HRߗo "0cy;6鰹uN=s{'MDH?:9`-}(3ܦ/80\z9rʛ8*amnN^>z>Q>B+ڟmojbf(:>=<ݹHqr 1_|luK"W˙(i/W$)ې7B 07FQ5"1\H&P~%Lp3,2 ԋ|n|um 8 I;s{bZ5TWY--鿭'B/ނUNH2$xf6h=$?6I~X88,NtS"؈OĿO:mJפQp5}͜ i<, &gCX.T}'G)P` 0a⯑A_eտ h-^䶗~uzuo+FjWO.2!ߗM0aT$$= 7Cfq5SZRM;$ -32Gk#Zɹ oF}\]hL0/^ u'WVJ}T0:y5 yL4C8qiYu7TbҧҘ+f&붵pS30T; d7[+eV]Yit]1mK}MX }tul`iKհȘc~ΌWDEyFI(fwE )ZmRd;b9rDD# $ 3l>{~z'LO_1lPGKLQPC30\VzN<2Ͳ'*Ԑ.+i(t4+N#ms 7$0HSj^ݽ=O*o?5n̓VdndSTL10JE[\x(Q]*lz̠_~7RxXTw 57orq49́ksNSҳ:::]0J:"9GuPtILDkM ع$m[qX]!9M݋չ"^Y)›ՒA8&!-> HO=j&D6*݌u3Y&f{{], x5Z(>"%vcq:x\ňTP`Y^+8~lv._yhc0\{GElde ?!D;i](W\UTih&X{d^QiH{co=ؾzbV=( МkoL˘pKzy ~,d;:\_<_R|(gZ4ZGfmL)[oJb4"q)<!›bq%<$+`rxnwQ {R3m-1/h]wt'1o~}o}^aKɴ|z/ezHHH$;VuJn?v :jQL1sB&H$RF^G \De Żt]Se^Wwl²Q -<K~=^Wnҝ Þ̨[ )0<@=>dei^_~QR}Fbun•RwכwWՖDdh|[ٕ:/3eL4b: VNg{Ia(@:+bDŽֈkw'?~. ,˟}IOH&u_♑_?׏#\tuͅk̄|)&/)4x _焮 Fu:ۓ:c)]V/@nF~3nc_ʧe. ngP>)ח<0vWgcb"*"9$bRfhEDPRKq-tyYKV yDcuίZR aHt]=h F=[2en>H GUŧz snr(㍜Ϋ'' y<"e^ j^W-\9kLHq?Yյ @.ѝQ0baۜ6 r "ʄU A~E?Eo9eҪ7pDp0uV~| K [3*F%;=*2s6-ak5J cvH˰gcakSecxp@a8ÄKIow{(Ul3Iw PDl 7~J Omg[Sj4I>H69wEڕc@&W :|ďHb` HG!c$~_,-ߝ!z?n?P-c֖g]byw$FFm=z)Gߘ }'q==)#?!ŷLK_sФ @0Ӽ?F;7#dc% J("Ɋ#Y4WB֎4oQ: $߽)~%3qe7fW)$O{Ҳ'䥺:*N*і(u)uKjڲezE€³sqA BdC=*>Fi .9(t6.JGmε(ħ'>eP=ا {ϸ޵-ƵBBD]}YP`HԞOU-lYhwNn4s 4Oc $UYYuqp/Nih}6Nk8XN]ʨH>w>g]wW_g↎ti !4J R_8f^ӎb̚{+< ͧ,ms[; ~_oۘLqMMXɮpk! GS֟yS{?QO~n;`cF*g-Eci"-@$=!>~/᯿}ŵQ[mFѶV5bX4md5*AjѶkت jb*T[+#جV\S3"+HlU-ZFVO㬈0"!G~;,rc]~ HG^ ;& %a* kfThopS%gյוÆًW ?tTSkE?dM`=|na{!{sj}3X~& xVV #hCRV@XND DDE@P!۵lO7 e挖oCβA|+O٪3i*wmGN1lA-݈ףZ]8ځVhM:%WʁE;-H`ՋC7A)u#,& X %Rh}23V__xH3 ]L>BH׆Am_dzs+Zn<th~־( Nbٷgq%H$@@D/%b:ev9ZB7&7 >K7"#*[wO翏x$,?El̲>f`WĂDVQV(ᫀ3w^%j3ZY{ ?) )k;OyԷ`[{Ei5٨Hqg~RM'0LcO"41j2$e[[7?XYEŘz7bw"WZvYM)| f]35]Oׁ'Swc"zqG_4~eKz<3+y}JԱ>ͼ͝3bC`zۀ*)[0j8Vg3'?;ȃO=_ ]*3gau[{XPb/?<_$8tc }?'lڪGfoe,?ABiꖓ7ˤh&6Jq]鄙q[6x hnGO}NYVQ WVo|}+>1b隳˫laԪrc - C\By/`M[[wJ~z_cQ?y:scd>A&G*4]ף#Ԍz3Uhot**%Ns:Nf/; 3L߽gǎ/DPضryAee;9w(%(.l ~u^r.*‡! v˙<H+@"%Tp8 ׎ gGdLY dha#qf:FZگ/u_ $uY6C1! 1**tC{lmj_j91Ҫ30Ph@aȹ|?I- n}N4 -!:̈́1"" WD^JuuO ;2a ."! nľE_$8U.uu|{FɿL,F`A 2A|563-+F3kւ!Xb" ox̌L,L gYZ9npVs'jعelU`',8؆xhVݼQjȨz3㖷N6mf>6jn^f ra2$avOݖd-{ kk"TgYRs-Ec<2gUu,Ֆ]GZs .V Ete;sSx[kȗUy_XոSrf;KW?w ^>!Z777\-p]51IN]{P튯#c[d3uL37v*{}7,+V[9t$0i EL|@9RBSL;$a&QAGc^i|(C{ x݇vj<`Xbt}pCE2(;{WK-3z/IHAOLɩ 3_R-F&$!f1o9m65!V9 may6>Mo@,x uicYjE:٦4ᨡa\;~TT}.dm:6ouş:dBsR%UGC ˎ'K$~*vi-S<{܈w?cIn\݄Q-Q4u=5o(%@(,5MWNS0)J!.B7?5pe5rW[WN*ҞHĝZ]A6/l;Auw/IF6uZ0_\/adXD{+ŭeH $z;[Y l0О ‰$/%wܜA"9TM|l\㔳nM'7ŇD~_Ljk ش=lJL9 a]t{ wM^E*?n_O#VJhH/5LL27>#Lqq$ŔzFGXU "}Yk(v^[g1zGZaxzĦQUi_$\2gw'~'xCsTR!lxCwbm '$- {l2@DW?_!]!g»]$I"ǀXDи)U*A #z:ZwShѼ"RO4j8ɦkcUh"C`Ђ eXm8>?7Pdey=Q.CVtf-OH|n$b&渍*oiV2NjRWP>UpTS#+)Q\8Yb|"IvҐɮ *.S-EݲZTwV\eCo A*CECoJآbU_1 b\SL-z))\;SO]nԝS_؟**\wrCyҼZ֒=y 5uA mO~OGͿh;OB7}ͿlPK'ln$%J"Y-@y4C@{ PJ6u`"6$"rZ{O5?+88j.fg+;kΛv Z3i+LƏIykH/Bbq>ﺙz! dT5@.X{|dHN:+65QZ;q}=)u!)!R o9n#ckjQ.He܂|W ]99~Qꩭ;>  } N9q+!*ZOAKG 1O&A5'a~8Fg.xSaA` #g}C[~x",*F֍khڪ+mmZڠf!yow/S`0Qcս,kWwo8+!ǾraTڱ s]58yjSO6mY5fL3͘ʨIXX[ `ۑf4Y`|ɰ@h cxIc$ q1Պ-[}k-Ef7meZkKkjcRhZ3-aZ۳Qf;bgZv&n87+ !sk?]8:\+jɲV@1T30Z\f2̴Y%I~O"sW\h)kh"b~+} Z Fvf0g}f--,OnZSm3Yqw9 Wf_i 5 h)RS޲V,sn~ݔdw&2r%rj(4a H9G tUכH[JSbK0t9SHj]h,Nfmgbf*AGɽ֚N@YX1 Wf3?H[OrA_$gbV|b!F;0N&(@{k_ƅDmr@ 010C,8줔LH07粕O|gOh)_KɃt:`IbyU@ŀk55-@ @]wb]vU"X5 ckd~rH}#WpM퐾Os抆/F6/r˽ρ,$fB9z`{l蚦@ en:ui/!$rcV$@ 7.п&Ta ZJfIؿ2? P*rxo7wQ 6>+/Cu 9! ˴VG$YyƔ|꿧,S"kM VJhrL ,{R_7jD'Mb-|m‚\&?o6C[)]Fq3EYMaJ%ruwW5z~/߬+1/ Pa@U0B!7“H*{bOÐBCzBBNm D.> $?|P_z߮dwy}}HWB\G␲{E3V|G}D̓Lno>O@3)x̐q6_IJ{oemc>8UDu e4~ـ$x.:  qtw=iÀ! Ǐ䍲ŋwzͻOW9PnEG-yq^S9mЪ*Ï|cnlu@()*jY-*7_gV[Rx{l3 "\1i-$ Wn|WCbi׭2DF1 }a: 6o_jZc=J JOf0#"=EJ.LwEDEOF3iWGYMA"_q#_v^咎UT<dꆢ'{u&^H6GJRe{v^"įp׺f55E'/ouIn\F@}!5/$tIS~cڑՊ>Jπ` Xb} XHPj]Y;FoQۉ]k {4loqǓCPy$hOKĦH +SA#DD8W-pЀ.@>}28b,u1"{\7hgwo{o??nv@g|4!@t>^swDO.ǽkefm<{Wswk-$E Ѩ-[Anbl*EXJ>%b 5xI.M.!.|E 5gJH° Gf,B6ع׷m3}.SE3WȂ%Kߟdj9V~)?MN_T$R'&[b 3n y#V!v> 6/^{3>Cs[oDar-"5w0jc8 |adbAȵ U_7-}rF:fQH+b)H\T '<\ʸGluSEG"W\,I)T*&AN9q/L3Hw"UcT́Bڣ֕ *x^$pag00\.M jrf973|;äMx?+h='wk/$v7=}G"O7%N [vga + _@)kflT%3MvEe-c?K"6I.L%!ޟ SC83s*CE[2Iߍ?asϡWO5W{IiFb&?/RwyY@L]3D#6|rhvz*:uV0޴{*oZGڛ{[.'C@a 8CL^gMxG)GrR B)uW.%-s!NV 7%ecȀ:uGJr9/c u龸du~o0g@C ~,uM]s T1 `ݕ5ޏ`)Wb/7w3;aװ7صzjkݕ:걸y>&sw:qn̡$E/B=UT@9od'~߽:x\j_cyhDD`DsO1xA< zU j>_/rd[=SxD89fϛD @ &#D IJ'N_*Bh@1c ,D^XD._ dtb( %5ʽ>V#qRg؂wGɟy2d,Ϋr8\23-G Qc2VS06 =`cpx&9lO܆sW-kUͱ}m z١e'&00 @羇wv[}a±m@1 Iъ[UX-b [ʊhmUѢQUlVFQZض,kcx^wf&?Od9/\&S{+66M[E+I2fY9.~C„:zOYƆ ;虓nZ4w\_̱Sӷ劈(2TwkA&Z?W):=_C6"9BVYœ+l?C$ I3S}Sjkk)a* Cav]mk=(7&M^{̇ nZ"+4@5Ѽ5Oa鳊D;l0VGzU8 C\IDmHN0án){!_~)}BeC|" h@ 3= L;cvW׳Vף2lt?Ysl,Tm|h{- fbp[/6ݱ i'0i}zգKKDAT  +WR aXn7~]u-FPBZ|-M~;=]D ۑ RԜ{>o+HRD$i2`h,BKe"S~L&C&I"SBP$  (>=~g}|՘s(mDu=g۱c;Ve {P0?(a<)R!ztVbZDBD@[b/QՊm;RD}ޘH#.a̧^'p"fa{i9Ch Q;#9!7\l՜ \C;{y*xCř<1ޒ]"B t.e^C8=.4QdWh~R:$>"ϰ_0?wR9gke0H%9RzVyWd1R'xPNƻNRrΩ)fMv7ƵwzkQ^*73a\vR1>ԝYěЀD9$Xf-,iEمu}/^ɻ7` 5P~3T R c$ mP bb2$`03'?Kdu:Y3}׶HvG~*{uVK}vl a[T=wU4 \-sc!qbvik:/L:W͐v5LJsށ+9==Gzb2o?)ɵŒr52^i*E41_BEy< $w"s\D V'o]8ֺ#ܧ <¥n[1GD[t5騇6K-O.ySX齻P1$JElkԂgؕ5i xD@L|i&t(&xCM'aΥ~2a "Q= &#xbEWpP"MdlDYeWknSeD۱MgӐhAq@Qc{jڼSя\ХUy\u#Pu;뚯E}Zp-v5KIľ!KZ c C;㡱H.4D (=Komj`izK >5M論(#0J)BSr ] 9}!?#[D"\5拻."hnu/3^>CD, /WTYO' *_z!lB4  ?<?Gݪ~Onn;$-b'p V d7rqC~o/rLwKt!W41]?\Oe?ǴGۖ H`"No$Z&F㓼&T#@S AV):.46d&Qur ȑxr"w|e*/Q2T("{g!GH om :"j׍O\͝>Qš{)Rw?i7׾[]|vo`wVhoSPtS r)HMR&"<DbW]*Z]tnY`xd&[^RY4 `}?xם^[?XoYUOo}[}UC-pFS"C4)ʈ;s[:@9ȉKd9"9Bx^OdֈdFwB(i0Q!7J +@t)E6pgE&w{h~f%GU-s۹ҳBla^2 =4w4aij[S8 |q-lv}'_>-z^B<,j]qN"<6EQ0w֣j>ڗ%#!z nz2OĶvo'^sAً]mJ$+<0L ڣTä$E^4HqP'_k 39B<;f 讅 nbqׇʑ$}%-,I]3'䦾!B!Yľ gU/D(9?Mϩ+減@ 1Q& Q!bKBYY m( zC13>k vvړӿ{/8B+j1o+Sɶ1|ZS2mfls(|mR>ڿWjN?_HOS+ydH_<~ډ , YTzkȊ2'm@<3['[.TZ8mBa˙ PVmrֆS<@yv'tfY`QI |Z.{o|y^\KlZ$JȶdI1&%ܦ(%^{F'7o8;ЦȯJgvt gC u-W(?( pA61B  'QFA4hJMZdv[Q-l>\s WGZoPsSr]0s蛂ݠ,wIQPlme}ÁD*>M b#LNݯVDs˝Ot~^vTfX83.HI􋁔NiNb zq;sA2T u,\b4&)$bDbyq=F@"Inj4hAO˔`w32LN w:$r_A] Z$+N*Dxd*EI꓈:~ﱡkf=ޡ0,~Q/'p!/ah }:nx8OY+X.s@{1ftm7K6׽;5A  DRB:H+Rz`]ajc_CP .ɟWju4S,$YG+}4:gU'$ ёʗ3gȚ?1ƫ(TsB&N\p{ޕF/k"ӫ_Ve?͢$ssKeei.~=麜^5RJA/Uwޤo n)JW!P *u* ng[A =8S^YCQ:QC~绝I՞TPdGQ C糭ļl!@d? 7ac{^#p6jC$% Tg5O66IG4d|s(p1+MK*q›k1*H ѐƾ>$F 1/[Y6aiC-uXțfsIń"K~_~}G;)7+ $&ɫcQ6-EccEb(EmUXQEE+lVh Z ъi64b6-*ch lhi5lhZ"bIE(AEd6lY*Xƴk&V#}|z^=$& D6BeF-5$U0+En<|^z"( Y 1Y)bRnLLhAB)^3oMLsi꺤|!tIڣM%[,/\J"g*UlИic(ȰddS@D$,&@jU$?-58p۞ſ(wBwnqHjb =i-#&KvjDP@ _3ast.$rP>t]G* $q+((ub&*45H ~qTb 3(%WlC<m>ƯEb̅*n84Hn`M &66T}#:ª@9A  " XS4itLjM4m**XB9Z$ Kj P|9wP&<_Oxd=Pz]!@Ѐ "6"-E1V51mFV5ciEmRQDVѱldɱ5X5sQDFV1TFh4[F4lj6 cFb$*6U%+Eh4műE d!j?Y&S` *&cE RJ{T7E8V̄Be\R>,=MHqnē!{U{]>qy}.HC\̈v^%@3U=i`\uvHuk|${TdM~e` F'%@κmԇv [u[Ud fC!>A7i(Z *Rq!~(ݗ8`gw, Edk7FeY4GqU_wH܉vf݁bG qNr[>ߋDQhA}E^{1<܀d 8bqA}=ϵ4Y0!#TiW~DA؃+ AnoCɾ9^7Cȕ5I[6g&6Ssb$&ȚSR3Ss+#fv[%r#Y%~^>6ȶs 퓣IPSqK2IҀAБ=}}S4/fL"aHZut-gWy CՃ\sٺ??ur߉TU9;ŵL!̲0rP,d=e؜4Uj70v]{%; g'4N&g8#(Q"]6CcTc:Xꄈ#PFl"(ZHGPGSc O=fL +=J́PhOO,`<" a j_Xac7D&n~aE Ij1Qxɧ%WpC RJv)y''P*ZqnS+0-z 0BN,$ÑkCQ@E@xPg~ 4>Mj@&(BM%gT>> :|&zQf>Bfk@? PZPng^+9wLF{Jg5Gw 5o1> i-5ߵ T6"El)DʷQ,ӣ؆'.ZluhB:h;-çnAFΝnG.Xyy'47 ~GŒnd3%HƤ(H$E2b%`23VRTAxR_&@JaKT n'Ta3:!}^G:+^zHC%{>3[8ewM*RBBMSF Q^UZ+KVVW"XXs/Хǃzhȑ=J&kTNi~-aNVzr!F`<>< bX<z/ O0"z>Ij{&_C([!xCe{azlww>?zkSFٽu>PV0[Gm @3`@y:+?5o6;Yǧ!m{p  /u83`3Ȑ=l&C&Od173'g<>G&!PLi@al0r[#6u>}%LI{@C7ΐvj!G-bZG;U Ȁ#Լ1f7O WZU i/|9帳G"Hl" %J zՠV ݇1k NլI_[%/liPajU1>7s4{9H`J5T]x7tZ%ihx'Hk0;fv:(DO5/-k`L+'j} R*w6ȌDޒ"ۤ "H@N)=Lv=?_foҏH~1/ $c΀!_#y&n|Q)ߗżjKJkE,(7zdj:q4ݕ|H4l#06bk1@ T4>F^dm"Bv!:si~qd63rE,40T6Vl&~E6m"<\VC'Y·Q?~I'Ox\4=Vpן^dE!jFskx{$e]TN}g2{`VR& Ţ:/>7R{q9n-+pgIDzQ%b'Gdtp;Ħ}yTXpIX EbGHV^Oh~)G+&/2%k.rv60 pؓA{0E2Dj&,XÓXA8bc3A|o8h H>=F+fz/Mʺ@;z<C:GÆUL'O>: oenf)%*Si/^jSP olv@bC ,ߣ\CZԿ7qG| (a15𐣺uk;wG#| dalHDނ @D=| oپP%7RJ{:R}FH"# Mk[3 {,&7G'|o{0Vax%P}p}OeO0W)Ə(*= ;Z~۬>BbK"K6tY@ڭ͖~qeD>ps<>VojK?NpNH Ђ7+? r O虥Aj Z\\Z͇n뼮߁-8koIʈס (zRvbYoÛw0t*KZ0AyϱS㑀ǃF>@^)?>&k=+_c}O/U_pxD? d#;f>?t/9N, z1unj P9|b|*_AȖMp'*GnpWaH1dɌ8>\SrEQe8TǬK!l?`Wu(WʃZnUbGFdQ@A! +/J",qEٗ*Zk^R_Ө\ U=A[εHIuhB P+=_/w}7?UYv/$ӒCEpxk2CīZ*WD"BcVt ȥ(| ٪K4H8@WjS:}^5|U+RL2]EjdЌ#6?-B(:h%./D qQ`eD`0-r޴J,Ə6?5*cE1t[&DdzOt9ѨH[I % R JH-"D3$"D0ɤZ\]E!t8K- DE!̟ءZ  N k푯-i0ol0n$2cD HN'|vU/O^)L țWYY#K#7sO--9>/f ~< H^ߺ<{f}K2+1!EEAT/no1"R=>3+ RH#V*N@竷.7.z+$b*'ma .G|Cm^;Te#܍@;R.{yB2 ⏋XɟZR{>Pott̏-x%ZH'xs^#bԆK 5[(7-d1$pQ}Q^N[6ϯa/D#W8w#H3mFaoPm&Pz8HC€'`iɏݪ~>wcEie[Lg)K(bH%dW)+r_%g%+'x ܫ޼$’BtW.$>0DE/Lqɲn)rz5 j N -NԿW4qIGcmw\;d"zKYߴWc6 p(YʙW@P1tRU/TQHOߎi- ֦ jyj8 s?C<ǜRO{?}ф NXX4&/^L :yÕ(ŊHz^;o{?/?!} M!}7̘1v]][ʉMۍ)Mka JAYPXz& dJH@ݨ|\義/k|lXF xG> &֘}OV_ŢŰ]]scSm3.ֆjIHh@ݩH Ep0 0(z gq1!z96D3<փ[dDs?!22b]M-X!p{ݰ4MmrhE}MuiyQzZ5ޑ۾_Ql1&i^o~+uչ.5iP{i5ȁ&2hO[AP@<ܬ=yGç;ui0QN@@? ( q s`^_һ<5Y ):.s씉^`ozs/?ouڅ 4G1}>$r5;!Zp$ea4e6Wa],>_S`}vW*~wS?+׳8YA$Nt1 Ąvap" ?%?ｷ?9Ԙø[1gǤ;SCyП}=R'CϲF2M'cv߷x֗?!wME kR531Fe{>Ȱ30  GYG$u#XY>e %A?$/٘+r=@S]-S*$,DJ$ %b`#;"/R XE9Ýn߻] X|cDzGQ$ʊQ<%+@M 334TT{W?)a{*ԞWæ82( \rڢ΃ܼOdb{n];xUD_?o>ecs^!J|!9Ps+~y#BaA5OyߵCHF\{@* ,ϴ=}>1T96K2M :Sxm;΍voa/p0еj+s.$p-=ԗ_e"1 N14ww)iDDGr/if=![j*.!4}}̱)%}KWa HάY&$zs;4xW)LOj@ WGL` p:H, 8 Džc? 5!C ;5Zdtʋͨ+nkītGk!bsHI0^̴Sx;ʟ% Wk>Ӈܰ=Mu.}О212]]}\976n'/rXgSW>q&l#h%H7кpu=ˏ5G WU(3< ‹tT/fȫQ?V\3ڄA) s. DƼw[ARE 10v`}-!KI>-K$ ZNy_LηK'QĞWqE|en|juWkB:1ᖞ*Q/0}/ܜZc-pZ69NjAt j놴1Z(OI ܎~lP_,&W4.QNq87 Qy-^]*.da5L.Q]-a)c^M_6+Wx5i󅸲YuVj5!ghXMbq]"76Lxz"'s%^s|" (]<#fĔ8+ xۊD_uTI( Csrsq5_69[ZҼ[(.X~[˴RcԬa! WiΩw^aΔa4ǛҮ Dt@ܪQiYH7lu\(=W\$cw/pXPcKgG^ pcDG ˺ȠiJbn,,0w3t_gBe[UPHp< Tb];3N>= vl'8;jꬔ fx|yDoyD?mJ_5/P'jͼdht"PcPA.EJV`HTI_iח~tUrF=(Xː7v[S}}﫾ԝ#p_vQV.ǡENN0_ͺomƢ],M+Dxԣ`XuQ29 :IX ̨_W?ИL8Iv}W(r2 '&\>򻿸~z][(}b@H12AVڢq))u<Džt>ʦ*xsz!eX__ߢgr>63sB_DwW"^018L[ojj$O2c7l gUO0>ڪ M c&y5_dm.^Hv g_KՉQ8%Hx@4GjtTgCmhq2)5Ahi糊@AYeu@_F&j Hj$v6Ohwiia*]V*NU`+$H =z0}w!~~ q"PR~~{,Q6@"6Kd VT$B(4těDJ5Qmc|JE~tiֵMR(0` HT$+J}zT않Wb$nS e;1p&E&Cb+}ķpz~P,^Of^!y WgL1Cxo x+%)HHrsB那aVg]s$ 6f[9xU/-l!̬(P}`[EĈ'8ƈT]Ap*j#xPnc =E!E+:3"Y=, \?D]'2>hz(捡$81oZ Ct`7yASb!x&&`)d!cmCg;7qb C t|ƕ$^ SB7^rk ld[b1`/Vjwۢ6 B//(hˡ-3IKW! X L K#xo28¦&ᎸޔG21@0 "ꊆ DY֮| ~ݸq_ބWQQyD;a-F&>.WA`3:[ CkI"_CjNM =ax:OD/!z,Q?n$XB++NKsÌ24CwoW4hݒ)L{zܒ8~~hY2),B,(l *E&&=zEs4'HM3m@cM=˞\zX,fhGa~ݧ*.>]vXQJ)1KƈTI% dW]_gVohב1T䧬㦽_%|׷62V~6R'n!xaSStnݑ8rޑpPǢ{NZ+=[o}=?oozl{}W/Sy[2;?-&4Ҫ&GD#/7Sy9D}\\S&Ŵ*WG^i䐃5WwMiE&UR.R)5-gycͿB/0>k87[κ$(rD"qUa} \':Wu//5qyUܿOg4vl`mEq%2VǻxLNc.oaO3;,ZAdokL!%_l w0suyB1vȭ 2Vc (*;S$N; nn/ Mچ*ߦCq)8LR8_&0%29Zai2+sEBWp7MV..vbʝޥrP?!b/8W*[o /k53Z~ާobr|/0,>gwn~x&}H/t=sgC9#;/e%\) ~XHlC!ڐ93ߥ,&'kP}qv80?]Q?GvH-h!Zjץ! ogSp{P{.eE|.2A_V,RgJ)Oc7?%P} \z5R_scDC5^S_p>t4Ԩlyڴa׈BguHfHa;zw'ݏ*o٥j3bw'߳Mj;ؼ8~^Mi*t!S+؞\- <'Ͼԑ|9k:p6魭M!sXzo[S*=κ/Tg%y}P!9^U=QStjsH}}U=ͅK-x3g5gդS7D"')ɥ n7'k؝j 7dA}qs U܏"& 2b[,W`֏/Yf!N wP!zJY|Ra?ޓ^!(E(;@H>_z]\z  K^Q"FW콉 *GA%ʿ1Թc;>2|iw$!lќvc) [\a #0tϔGf^da d:鴲7lP"<0 F!KQ+oÐG֔C9AHyA)@Y AN?C NO8!?!v0س.~;x(~–//{\r?U ` oA%qgsd<~Maj;0_(ӦOt?PLV:wleJ[ Dg6-gG7{GF4)-St]nM&DPz"B1}_ \x_ڱq,Z\A5sLɩYźjN amyx13gFUUu-\vt[K/Fs=̔&Fi$3xם_V_-CA$ϰZy{7A"# lC'\n}嚺[?s1IFN)Ƨ3DO_yInr|ޗЩK7&ߒj΄\y]eKoycYl/qC#6ee[XXiP^G:dnl~>{劉 A];R|de=e@{W#:}VK.Iqy%Mfq[E;X/C1I(`;?ƗY\n$\4bTLM&F#/?{PzrEC @}V넅Jo@Y0oV 5@H L 0L wGxti; 8%E_³l-L\LH LGZEc&s gGfӤ\J qNp KJ,zDFRZ!BFmsӳ$mnB$4!!ۉJB). :\:۶:V ؗ a?I(dcg;J';oeIFDϟ\Pis +=X~%Z&,߮7O֊ ţ|oБĕj&sr2C/bi^MzC*H:zR\6nO٥Te1'rnIA|9mlg_{kb w!|k׬ c=kE>Jt=vd?Ѿ;J sYDj="|xJHeT|( ~)5v.Ep##1uO2ˊ6o/b[fS*Crۛf=v2x^'GW dƺcXsBT:(  !(uV~o"k~ĴDzbqcP]_o.?OM" KʘBK]mc86Bޏ}zy|(\Rc$ה1B.B0gD*~sHNjѸ?Z&e{$dCZ)_dǴvvaZ2<>ATG|~GL(cޘl58=̨߭Q=/ST07hKX>E jpyDuLKI`%!F:bH8+_guw\֭">'x5Q Dt*5肐ϣk4jr"<=]6ڧ/?b5?+ӝ]ĉb]u840:j(K Z!/p}eדyXMmĽVCqHg@Uԍg(OY⪘j}h o+YI y<* YR('ޮB7M /w#1eh/9z4'H0N&V2s0Tm'wèu?bwU'.8RX1>u dK5ϣ2ZADeĩQ)3L&'If%7\00-H,pwyf spwFz;v&'%%Ђ[#\՛볷nXG)m~u^])&47Z'Û+?]\Ń P?sǽ=`fNᡓj9ycx*׍FFEO\nkť$#R[EC.boc2M\ٔa=_ݬ#:+{/q2\iĭX̱J|6[5PidE v֏{e?&[dSk|q%Oj8}{ɷlQ@w_+(\i&pp6{߶aQfޚVEP~_cݎ<ijۺs/V!sJܬsꅲumL*d2{y-o$q>XSFDc._.)k!SOW s"xlZPTYؼ`6>>. kD_EE>tIbIf_Dc> 㿪d*)÷uΣeb{?G_؍|OH ?0+o߿_/%зVϧW#@ߣci5^F_H٨6~.~^fz똑)"$ No%s40tI[&65O>҉1Bmqa'xq7=X{Ixĸ~jS+O%QP uT\"ƭ-~9;}>ZX oIp9? Ct!!{S]PJB+$P/P=dmb-9 ##g0j8q$qhi^BOb5 QecD*b|W 2F$|Z;O{gvfv~fxJy- s 㵩=gKGZHh6{7Q~}xo?Xv<,19M If}Ҏ"@bZFK۪xPCc?˦LOG 6xW~fQEBAؤ9kV+4m(q y.ĵ6:ҺQ޿ڦN򓴙٬}&cF*T%^wpRQĭ1l+i?,FR }#ȱ~T8RL_ݍ5md =92n"ge3յg=W* Laʷ.n, 8ɓ싥/#\h`Kʨ1$\ߧGWYa"Z`.YOG#5\yג%,Pԭ? F7 uvS5M=$obFD]l(2CN'Z gJZ[ij^0*dBɕ@eWѲϟx>R{Nf-^{]T]sWTw9 gqGʜc}L,gP;c\;wW7җǢ̧kM~]dz'^Ty,lIJFtqYEuDV0eܤyV=XG |xuS} uD7Q90TNAoj՜*z9ЭE-z8[}FI6]bn "BjPZn{tV{4}v4sleκ̕KBdsm8jEW%V'Ϊ[MѤaW%_iTm2P%[/à%*:Cwbvޥ<)ok-!XNU'Yo~XRfKJIXo5M)8R<]/}7>ܝDr%Y(_#Ž9>ܿL# f6Z,ũ=OF Ab}j4xؚ ŞťwX>EOoC9loEg{BxS7퓋~8>eo1' :CB B}j퇾R:Y{Z?\<қHMnϋݔєȂWw:Zbv]L+0p_ ־97j=0҄ " -f?R]b߭oླJ 4#|W M9zGE}%7 / ):o+ 3 MXt'ryRe/3@ʃ@:C6.Pv߯_X4g!fͩԩGz_qkn_^y}ܿk%{|7-!MWliisf .8uhms:&47;zA+ (!=1LwbNna!OPVI[1՚ގ|<Ǐ;@ *@A*(x@4A&hbaKkAa qj{zl=^o[: E/7wM}y}=R+krsىGKVZѠ^] 6{ TzvH;c۽.ۧ nPg\mB/g'>uՙ;wSlY{Wp I5^}g< }ӘHf*DNT SmFiAhI_v)_c^ƩMJ(:`(FMd7n(Y}07～7 }`bG҂ l[ÝBH$=md JQTѯyU ϗ{{<.cvReB@u(P$ PPSB\] PAv KޒE}yi uη}(PANvno`:P.䯻}wNWozG9l 54n㮻w6 `&u^CMz>|/`w `8@{ݕ&>ϣ_8^y PR-  }쉊lLkxGJ{QWgƽ`_uGz|>Q9{ ]>7wsawu>Oѧk}:oP{,`9+9)go{ ;|#w|^Ukw;\nWaz {t]7{+փ/q{n2HR{Hǻ}u gܽ dIyl}@C c|to9RLzoxwG G5N}󳫳óhn}_n#c[}ww˻A"l*ѭ}@go}һ_GҐzH9̡ &&` F4ѐd!hOPh h4i ěL&Lh i53RvEצ a eiٷF8[{~ u W[cs F@FufJǓλ\=2,Ah/DdLKlgJ՞, ` {,t'1C:&L`balt]65^X[pSqoajM`Pb)D?((;}ND)Z6[ fH~t璒vQLgAt'ܣF-+&űHR+njּj݌["IPX[Ktl_6wo9 Lo,=+_QQP'S:vjDUu 6ݺpacWZVζˠ`#V_` bQ*Hf  P4^KEÎc˧ɣ]kmm`BȂ"pHJ!Q EFKM eP"E$ mGҷTl~Q%[!+) 2}rUi:n߫mv; ʓA1!}Z(頡I"$X)HZVPWJ=j,$ 2/Ȝ]Tt<WZLaDEB@@;!XHH H T* 2$$m⋌pX'~'@/=a{)C@$CE"$ ҡ j_fn (AFG~tq߰(} AH4RʔaE2;$ lI-"Y &\(vVDh}saI9/3 Hvf֡}lYic5Ko*>q![Cz;+hJ?db5y;-sL<{~7„ChH= +x CʘIҒV@ʔF /}~df?tb~.ws շID0F`2 TE&͕WosUGb !Ɗ%"1VE!@U8@V1j 0 $7a/M Dd *ʈH A[2|^kxȄ!@`@X7緻 i55 2A LɞP dUSn"Y1x*e:8(n>:;f/0 l샠.I\_獉btN/pKX򂉨@VDL +0,PAa$,H [1q*eŊ0  ɧ  @7vgh1${bξsιƸhyٹUX(w%bm>ٟdÁI7q"?3 bۂ)f-.\T:#dteˮFQ0YkR}acB$T(!,U y(j)aI&QlKe8D:fC -4'p i&g>sY&SQ H S#ybfք-lM) d| ꘴/Pq/{۶ss+QZ)b7yhj!vJ #*IwsV%TZYrZp6 jf 1ƚˊω?M/h*`1W0774[Ku0$]MhC4URnYV' 99LWb$wNgv"0 \Vύ(ýZN<:hQCfbh5f/V닫g~^<茶^CX!-UT4hDT.9\Eg\N@ISvB(P'`;*"^-{YKr¦DJdWy޵wr?9*͘qESQC"s)LIumx2ce i-Х4y2mS9,9sTPѨUx0Lo|Vis%Rgd(a" 蘪577}*V\`a ,͒Yb4G3##,#yfA#5Ki,W{uzd.)" \Uyқrn ;8dgkm!f S`ݢ8#NFg7,^'#|M Vh5J43j5Ӓ|zyq%Q)%U`o>W}\A򫴼M8mGlcL|5'|ns<>s-TH[h7* 2:9' Î^HB[l,+ ;$SMX\H+v:lF݄]cN2UBgH=eyKyϮCdCl\ZuqTHbLe$Y Pp] PSI;8YNk<ʺtĬY s@Cs]fcţ|ۥc_.f  ¥2ݭܖrg[bڳvy{$9xQU# l;WBWK`oX1,3VwEָYR>~{kk?垭zMF>SiVeK(DoVdQmD40f82c8F\Aѥod6/NQ#jEy;<ըb"oS˩]Yes yhnjaZ \ n],oU0lj2gYO71&PvRew-6Fr1d}nUJr{+Mr rCyk&;[^.cŦwsB&"=pL".FdEX{)-of9b O~.8oˊZ.L/;OBLecz=s`փ?u6(['|M R J һ eJ>_a) ܙk]B;'raFeic&jFٺ+.Vrnr N|-αh"L4v: FkJ\NPh}ikJo[qևf?!#(r{cHrU&03TˏN]nC]q^DQѯ ou $EqBm(!q8H*,w]Oɷ=ސ%PA |$I)~񟏚.()I;;3gaNݣG7}Ok:x$1kzS*Bz^ǤDX꥾Vw R2` ]۪ u,]T(1_s:RG·T"^\O{K]1(}ҋT0 &$9ZAʝ&:rg:h qŃjd cG1\ZS8##i29%< ]|/=Z̨E圤$-sM qRrs1 @AP j8^ gXau ^TWJ,u e%Fv bPEЭdI:M-h̬s:vn-! /A^YeW%} @2Ulz\xJԫnqcҼc+>ipol<=w6nE umkǁfo8/kݭx=64} 碫2}o^+њ68Ȉt%7q<˽b> 9fݦE HwqW\GbU@5pc<٢#Z4ׅH Fyr<;`\pxX1Q˹f,4k/Q9NUl.ho>y vQ/ o,mVm6*  _MT+kcc!|i%UIc/EN_E* mR Db o7t )! cd}יM~d7LUYLP1xERz?<*:{9Vfvim  rG#Zs$+r;Č nçsIaP|z^^UN0FHŐ#[_*.9Sw럭U՜cҘ\V}_ P7ha `İsNyLK-Ys ]7r*͘1AR?fq)>9぀](/aʹ u ]d5惷1{u7I)tC8d`c%nR'8s_ryMzIcaHa؈kVѮdj.eU!Iⶹ$ ٕTF`7q*P‰d#3ƨ0`@˅g8iC2BpƳ&K|/SN.̀g2(asȃ9b$7l`ހwߵu͖}g*)@[+ğlA!x3;Y0AD}gx↼{8@HNo];=Bt&>c[)u~_wg``rŴ S쩘fF hֹ#4­5BP^l>І A;IbZӟ A^Gf lVb<;~ ڄ;uA[~nBw+`{~{$@|s5û8Q!-fײ6 ѥqHĽ}'ύ>A;B͖q=vG9ǏھlڳU+c3Fc\hۧ'9}e\YSK 9ٛE'HGL- Al8Y"&f"ٶUq ͐%FBߥ4 QťY :kTv%R<82z|ih>餵lE[!4p`MRuKYUU}BO؎\4HoWEyߎ4(T1MO2msezg}THaY%8nYr0˅?}huh )YqSLw UǗ&W3rrJ=>& |ج֏IIéKshq4-\K,@n.3꫙31Ĕ<ゼĨj!ς_ٔ_MYTGy!w+i69y-{#RYqjQܪ C9x`NLykw˕G)zfvY`4E(OcI-2$ΕM[W//2NYi9ltC`dg^<;\˒shi \`]i,4BUN>ͪ!ir](ti892Ư53˜TW`xnJ5#r _*MWi}> >ieq~nv Doso" sK=7vh'/ʬ,\RʽH0t%p_e[7ρЦ0;qh!TYiV&N6ؙĸ?DKl-FV Orӻt%˲C a#O\^&rNW1E!BytW|4-emWʫ57bA-֜M;ym7B<zj۷VZmU݊$UEq`X._uZU+4 kդg^9&0I0(0 D@`ǃϗo6yPy'QI((O'\0phX!wO !*3iM*d UcMZ6Vp)%8Igvh!ň]/2 [ugfV#k݋:<.Udso6=UM#~&XҨU'Lcvi_>We3VhaFt7eY݀!Ƽ-MF9'KVRXWz-Z>F\vC1lܛeLҖڪɢUVyDu58D\,׶Tx(qt!k!/Bg*ӱ\0=ݵ#w6 oQѵc1lY\pF)M\"\4ǵ:uFa5D2G=0wP`퍺B 괐滋u'8U;ZlӰ^d@28x>딕W$^x:{/}-:yZbQݼY? 49Ӂ+!C0K3t!O]#"cRM>v9˜eapDf?(.H@=Dl yV+k8y]xlvYTVQϺ@G"C}eX$០A$8@7^ $ z9:뙃TJ(HgY=ovNWI .p`d[A ̰2>s(G,*,5mP_uT!cYy|MƓ,ݮ8WЮUv\}WNDQ%x+qD#)؈f2dy>; kb!iAYkMre #='Z>chAwyyu_EށS)Sd~:4Wתּx9hiN!/7܅a!v;L<"|vGXYGG$yzpPu1x D|dIr2i9.f 16雰}~8e&/b$5~\Le^YFVx\3j Ȋb)4z d؅r fU:㫟VG[k྅r5Fg|pu|lFj %p|9\bt с<kz&P4Ć9RFtwҪNU%*0 t+t <)JB?XCR ~D 2+52M+F3/Ns[11:G0NO/ geYlְqjv$")qŜD^p7e52(澬̇A7 ]Z:m>ʹ%kuvQS0^+?udc/ @A#Ң|-"V+V@A4#@Q""V_YZ{I$&GD) _ aT yWo# `+ m26Xl f+$\`/_wؠC%R?#c ~y U(QCմB,W%LF '\qMMz;;{wE=;UҚLYr+P% I-AA%UEGm?j.i'v׫M)nuݏ]&鬑Z#&\zkjTmDΚy]Oq=!CI'G&iw0vy1goumov`^3=EP狔r&2Ԗ3 `T|:^`ff|Er j_fti[X E$\ǁWw.a O:sW,8' ;d^bd6rȁdH\͚Y޲6pީh >md Q.<[T.G/g2Ň Z}dϣ 'RlC;$4?%Pa* OB:Ԋffk?glnh@=q;ǧ0*"# Z*SsX|ADJ^4:'28`85ǫPx/gvhUJ]g\cg]B HF ߢ|Gd;.(/{+]ӊ],s4b2W5\heH6?5o=YAPҝ-/[#s aE pI >3wz> 3OFԭAJPёV{ `C(^RvL":Z$kyjYj%cpaLדڠ !rӿ}gnn?t<{sۛ1IdmԔAx:[TyL `8"Nokz%^e9JY.ܝSfPZ(zeޙʣky{5ͺm5@`E |aјʗ)BߣZ5y3gD""z@(5'qϋ-a=sZGy$?4I ;>'lqK uҤURʪT!'ϗg-c 2Ph@$ $wJU_HqWL k5D%6HiUhqpނba  MQ: _O{L ~j`p~̪|N43/>*:GK-zOw^N&^qRxqy~0YIyXuD[19۷6L y*(pȉr( XXj%h{-nIb1jQ1rBH"0E<ߟ")m 讱IC]GdG6 vf ֪@,杘<̊)13e^6a\\&Lǖ_k4 4$fiB7뻫wa~75DFGM8>7ྫ~ݡb33J Tv+MF{MrBxwx(+a}@>.|. ߏ uԵCosAks@zy+?D2 嬋P%(?ݢ< 9sAV ŗ9"@L!50?uT+]ECTcb/4/^_v:ws!9ZUw+ZR*"3Xjzɴb ,߻kq1:Z:ֺLYt%qP8qlYqwF@&t9|@^.v#{ Qfz0a _W4#3ѭТ 9S! Q{n EI|eXB 'yЇFWEC{^!KEb @ g×+)R !kNǓ='hu0%($!*l/-}4z6Ԫy!jO]N̜T*6FOubfL< &uzu/4êq7sat1*:D6v]I{[ ysBQҥH5։|,G20 ?݉_blхsi:ebJ:!.TەW>Y4gqi@2 F# TM1r?!Թ4Qw}VEZ6RA>ÏG5{Y[QOAugg "H9{93~gDf`ŦY 6 м-lb e `~QT2-A mm=38"2.'>9=Ȋ̓"!@rk}YM=ed!T&G'3Zp/3#6P@?FQdQӷ&ʚªB ^LMٱ6Iߞ[ޖbۄ{xM0h)OI]Xc$xm/PA[$9a&+$?/l ueBwH߬ӿf4 N177 ti@V %ETQٝ#X/&d,:؋ FQJb R +Ov{m|P2*9g*e)p4 嫴h cBd#mh{C1AN*0PﵞMuE\I 2c@uc%2Ԏdm,9`5aÜz2QbCR6b"Er݂JVʶ[PelRC1G 'EJ:t*9ܞNySgi>i6CqFHBp~^n~d& #BЏgj܍}nb6;#؜ GKhZ!9Pӆ8N(ëϼ=b HO+>:gX gNhGWw%,R1%$5H \SKXXLb:¦gu$fC]su<{u:r9UڻPY1L1%Im B'٦RR@΂@vR,gc@=q4Ќ ֓C!ݵ_#ci3``B(@)M:h`$tAs -z8- B53FyuiQ\}}l 3PA$M FdCSHqb,~:_3;OGٞ0u$!HB XZ NM 4 -̘\UYSzH3̐sRO^|8%B,>Ld!OFqfi_~D#'c[7]C M"F*L= O `3䶿ծxϞ.ZD!X,W^}C?l}gʯu8D]$.R'GXL*IEGU*T%u*6!,bsM {)1;7>8 x\N3$`:='{=%Zlo  q=W؎~kō>3>/TQj696 & OF<(`=Dfg31/rj(yT4TF7>ˡ]&dŷZkǢ}*X%cQe)|-&lzEu7j|HӪ%{9vYg#Ѽ n"_@?nZ;xxvK\0wϣstؘv$^2l`lb5%~^!5hG&.ߧkjq0/bE%'XUz\%=q5n兽k/Չ ̱ H\xd ɔ_f&=sTO5Jf8N#ۧjQ)d3[8q:jiN']& 4rBN2eY|}%j{FUq\^u6ΗC$zO_2Ȳ ڨpqA`-pC~8QRtr/v!ܝ Hb;^Vfk8#6yzSG!@rcpz{}$[ u},}wˉ[_+т(?[=ίǘ{̑qfB>ϗ˹Mq\d@habzpPysguo?zcc ⧫jBQ|- WS.=0;l>*>N @"vñ~ ;BrhՄM Cu@I`;dd(1o2 ?$RP||4޺H'#w6t8$.)0EmA84# W=uva{5^e+ yH *md>OFB Q'2^`O1H}A y;d{;CUHJܸӛwl_ qu !uLUş\[w d6gFI$F[ |NeJ7>#|*F{a[K;j!FE"82Ցd =l|x|{N=NNMfvS$:gXXՂ !5(8ɓri3 &~q6⃓FnHpqDY$Y!zbQӇǥ:qTˎZԍM I샍r"@VT'W*à{7ٷc4㸘,`Q |~|[>,6(aԲ؋gdX+2٢?Ճ5Pj;wdhj xu|Yb8Pp0:O`"A7 I 2\z+zQysL NdD|.KW>hF\7EĔA&> v_ <4bf I*t0`:Ďzָ9]6ðR ȯ>]d]H58G]A 7?1Yu @<#>3pQAPGiUEb3u|LGUEFyLϬ4d"1(i v$# ZršKHpT N}D@iIX_HcMy个kߪ}9V ?vZGIqj,hY2~TXȾJQj2s~)xCiy/^z@R)QSу>si{g͜.$N}W&Wp0bو]O"DTv/Y &UpLds͸lPCH!Ў80mKPVlk5BNt)8),]+a>J!"m( Hb\9fǔ^L_`gqw\ʤiCŭ 3<}[{1dm?-eLzR`+AFMӶCx&$$琠U'*Cc^/&|llyq7=U,jD3hb|{A \ȢLA hVV"l V`>Tz(XX1|$HHN-x(ԩk-VM}z^%G~K!َlE2.`=v 4UG;u>,9&$e0pxbfDxweh8~'%n FJ ` {.ʐm;Ƅ.S/~#x,X:a'  Xo> !!X#ި%\)ÐeQ& ;l=/g;_omX gDq_ ()b7ivMT۟Ξœkd@M%(u+}yB,˷L!u D&T;OE2[N SgSJ\.bug$>֐Iy, BljZp `'g9tVl8(FG xHG#`{3t/H3;} ho6ɦ 9C7d;oIxz^ZQ@unyI=#08܈q'L,XDv&fVRJQi"fjƐvٹqqY"z5aN9 Cu(Sym88Cᨸ YtB譗C~<*su[kn,Sh%nf& LѶ !7aׯI^rE>LdWݮ7'3'ǭ>z`N-X &갶!x獣."Q& ijךn3:Qb +n "h+͎[.k*#OAʻ3m )$'MZ$;v 'S;ig'*"o%,EES0⴨T`A)mTH jFB)k$RO]qNEA`A|49,m­bkTLz\*Iٓސ@#=L}1K+[V0Z4Swΰc0`FD+>0x _sQbfh~,nmj?IhKTD³!g)8?MgqϘ.nT 8Z1:lA^f0O ƮX7u_ ]GڭjܼL ;ct;ٳT/8gHD}oޡWvi\1i|.XN^Yݛ,4kg#C6΀쐊*2HI""X"ň 1H`0FY1XE0FF aHD"0Q@gAEZ ;R7XP<# "O]eer\E~66Cu'443cDG;EBݔ./놪h@d@"E群EGx8lǾ\"T;ew3Ҥ)lmQGpV(v5ӍZ uT $@ʌDb QG gyy g9њ]%cGjg"$X͂ Ô֎]1_7YܷyAX? Aq_z衠9L7SVh=ձdy)Ps!L/D-/kRPfhVO+z0Щ@T /;xKL oZnQ-㑔EܛI\DkzjLvdRTĤ%4:P@PH4Zzr5>C$UP[+/2e (jHECP4DIɈIHN%/@[;:ktgp̈:)@`g=v쒃퍔p\2Яp*4$*u#W`kح!FH l, 7E:WU@8Pm-(i:KR Y9H昍Kc oj8?}Zߙ:w/s )qwh(? cS}@G+)"h68^tywt!\=w@R5zzE]Fy15whn o=KŽ QGc " CX88_V 9${nh~q yTt3Ԛ\&DO;!;hFk$G0ULg#LǻP$PLDÒH`2@0V8R#;ӆtkUKCG~2k nrMaɞ2& 73 jb0xkC}nkbɎC"vV2`AQ'B`fBSS}W-`gV?E!*To?Kh] r@gsZA/yawh9;\1A Y 6nryg=k}Q@ gfUJ d:7ry<|o4Kч˫eqPB3l9r+!py42X UR! =%dU " *]_\Yhz d>:CPGS"ſk[E?M?M>;m"! 옏S@EFH H2( ({_'GYرi ?]t)j9*-ë:QA@ qheO2H P P߷λ.}=c:cvpU`#`YA$u(ڄ1{mYHˍF̠ZNUb|Ov߶5u>Aӱ?> IcLh߸TI%?㑀<'C^rX~a[Ȓ$Ďfx܂2m~rG|?CoH6}ODE%m(j&* `Oe^_deș-az1DmA<{2~EWoPfznz B:eDZ)fTDÓWC_leq{nZEۣ+9>P^5ՍUC9ŜSxe'SyΑœ˗c0 [3 0XePț5Nsƒ;tIB0@Fe$h7/:zRrb{OK={Dž/Ά"(>x׎h(t=q{e:b6Ҫ@2@d E@ 樝 ۝]kEAL]Tefa$忉#HN`LJdG_ǗY_?/+@F߫"aRFB>Nم.př|61D7zekjρRV5)_{ilٮ{+ l^RTϝS8yZBV}f~'4c lI+g*ȵ{pt71[3=%)|wü2ZrтSFH,(+!MQ`8&I 򥟥NK+D b6 -74U 6\;)Ϥ5V|N>Df= iރ O&:0 lz{b10 C#zP[cKmWy81?~ eE(=HQNI#C1r.y{ ΃vt=wXrk^.S@bU.wg63kMѪ>}#.@Lzl'^<~~ $a}Z=1p9aòG iYeZl:Aak#ӷ12x|ab !Kԭ=.C3r' Znc46=ߠaʄw5)pi{\Qm/ƼMp:,>O8:/Wr2b97/BvmwO]\iUf8{>Pd |*#۴F4'uN*;&F_o]do' m.4`8ZcIѝPl$ #I$n`_= S{lg)]`.1NeO& IOf?Am-"[Ezg$/'L##slLbԡ޿ujtc*=PH&MSOSyOkP\HT1y xc9" INyk8X}CbޝY >)jS;3 W)- !mv⹗Y(b-: r)1'ǻjXC깝?mimk*I; )-c'l˽Nzb q<$*ȝ6+j &L3v 6f ,AG_ չAjkXbH )1dDb0R,2ȓ <2~$c_^=307KM;L M|jw 1i(}?1 W+!YMf!g[ea*Q0 ƽF?NjV C|J{l0ƣ45=o|W⬦ Dyr=QsAz% μPܪ~ﴵ.y-ZιLBM cmN=E+i1ױtU"4aki*w1E/_ E}l>mj`n#4Uhk>}O0E]YPMj$Q#W*=߯c{xU\D[3MR c(J W }w.xyHQb`?~=^l#ՔA :hZUOM.L[ڣ Ts'-vqI<UɊѿmXdDfJ*f?7 o@0螣PCq7?&?3ڰ!,|利nsq$>=3Yb٢C̠vo3;z<,A33=`O1 S]!ZS:ekڣ@O܎͡*µ45+*n7cB`"(AjiT|fy r#L6cyPaŮ4D>+>6JC_]ÛJz3qCl $\>H@V[9bCjsGOv?@]<M$|f1%#8UE6k^Mq{ BĒV9+FYdS,NRJ}q L?v.cFprx_s7;Xx:>d#bG T*-Q*6C>#ޡ V 8$mB! [z}:2KJvv?ѷXp3w::WaRowYLgy !#ňMl+x<ˇwDλ/,o m F*,fe\ `#frSӆZ/n,nc +cxXyEFN2O1Ӄ&P\S@B 3KC]Aچsڊ :y\D>FDf@$d-!zN=3Y+(qW 1eYsIfx>oS Ren{rɭ %2L6( b{r9'T`O%gNko\;cmBԁެC4}'{XI1Vp7k~_qK4Kvu&d6gCC-=# XDDD[` I(1(őXMfûLQ xcq%kNn`ޓ/ݫDdB}Wg>~D;z SSV 'UT*d@l5>Q?w&"" 5 C6"9f̹נ]QrY-gSɞ-:y{Ttڞ_s[; RDr)q1GhCv^CECDn';%T$ή͒gKrߌbUɰۜYG[my_dx6y, |kd-0x0—&&|u^q?@B.APsߖ sgp"3!=ƒ|OD6aR"8zA@ z &_<j)W.CmU6>FZnew,ntѢ聙f$\)Y($7|:<ي54s Q]VF=6԰V.dsnC ERFadT@F # u\ 6 0ZOaK NY,,7ε;Γ!ص2X6 3 ܇)6DwV0H'gnzeIAaBquND2^ZFGY :LN `WwvA@Y{' ienp-wY =|r rz9Q'm  d=K9oơVbsBDMyr 2_Ok'}%8TMcnwk0z Yy=KkeF #:E΂տFsA Z~YT Yj gmB.If>%Ͳ-H@`Db+# <èzy`+"`yB6T}ц0D9@.ƃE~w_ONv99Cu.ghPh7Տ@EJ*/>0ˢҼrg*fF~݁jbw>\K2-+S'Kƃ),kԣ>SlE\ 9 ̕8b;OPtP`R F`Ѥ"@ U#xR ŷd0]~ f=']N~ݹ u_McM98< (k?'%w 2eXagl4[6eH jMq<5;p G$./cz1 =Iնk<]^@S bg/Q򘼯2!yYjCʐ@4ϵ_pȚ=c *=\}ZLq }Q$B]d5:o>Iiզ&E1M8/F, csv?_[Eh#4VqIi`g( ҉1rSv'*;U/Oh)@?+qȁ=h+W,C/&xN0KooKaޝӭL,;h'o˳i;KKӦB89;=/țMq [0;w=8^glY hVD.JEyyo3r?ouIveݯQkYHfUe*'[Up|%lư}#Z e kW/tq+c3 ^MA%11=l5[jPD53я v{e8!Dg.q x%zn+ta:MFpCEoˢ_f3:XDʚ;TɽMNvvhKsg3f7 -_C]Fk+o'2W(RSUH}hZrmoCߗ)3ھ4$o1cRW^R[׵j M3SpFFhSJdz5[!0C)NK_dCpԁ^cUT.=}1UJ vaer nͷL :_rsQ4v'3V`躨YfChU+R#%>h5E2Td,aȑSC6xhdpm`$0mjBV3q *$^^C8MHMh#Mkac(WoIG$'bWJ~[wY$cE}o~UnSt4\}1%~-tW7>9 rД;"f!7GizeETMr dvU*|b#Lv*V[Xvoy\K謁J]/! Đq,raF({{"& cAȥw#3KdfS1`6Y{gL%wj}!ϳ/एz۷^ Y^IğQcּbtWldn5jCwvԏ nz iVmɇ)$yˢS$pr AY,xA8[6S_Smch]'ՃuG'Pī*\ZOH;58^ЅY-6 LU/yTC2x3N|\T3v]H~ i-g\3k7ݿm7K1tObw6~wM+hi`^\']fMtaڲ,%ㅦ. hO}3> ;`Rﯳg5-t'll8n]wsaWej<:S^au9AC;16t<|ϫ[@cDi|+=’MJ;hn*\zݙ끞C3u+G ߛ"; 8&8nA;V%g/:T"_)S.ze03׺-ge.iNlnP39tG^iQ|w P֕r֝'}uAeO0 .Os rXntsԼ&KP |v|07J0MYx9woӮÏ-d"ÐztYnA;Gy(bw~ѡrvߜh ]K:ƪ,}t:D]T)=uA;zaY8TUXU91* 'e dB0H杫ҫ(*G0pqrCXގXcq dgO&ZDM<..PMP'{Wgz{d`>50QԦr{坉b!!~s9R( }SPGV"FE, ,a"B6V|Z²4.2D Zm2I`YF*)@FED`,EDP`*t+|4͠i=MXA!+&#>&g@ 1C-! EI BDEΚ{TTyd %$l#y3/w FD ` 8<钉,ڡWϲfx_nks9K5&(=%x7CE,i'< щ2+6ik@Ηz(pҪEZS:p1s6aYFZՋmz=e9Lap9,QעDjaQ ysMjgm+'RfK/NF&MVy4wEXvzKRPAx; #b|8 cpuj(XKVٝod<"gʭVYᒯ"" ?쾊+~po|n4Ҳ։@@B<@FBƢ@"vxAC` Q) (d |誂qd$#2!x. x `zF-H솶B@S0?.F{"qj^:} 9D?[ՊCNC@ :+D (` PD`'N(15^+c|C] Q !*9eܭ=縺&آIR@qp0% fI'"q}6BdHC7d衠EV tB@ޙ6*\DMՀOd.$k$vÝqB7$3rP65d3Bw"m<8p@OkI02B=t|>\$4"3b Z&bI 6`Fys@ 4$UI.`o:P 5p޲)"D"(C%Oΐ 7Ajq@1I?xU¢NW{dhdN"ڪEJua| y[Jdieaq! 0ʘ>Dpb͂:=d~/w@ =)I \L )"w&0'2 ta 5nw]Pߨ(1RXUPDH"PN0ˇ\e&{jSnBkSNMì3M_Lޏ?'qO%k~ & ɐAaC.>kEbi)E!D=Lqxэ|h L7-/5.5bA-P/}ợ⴩l9}ú47kѕ 2\ Ȑ&bF-=g.h ݹA+S }C`-AkSpp4SL##ɑI ;c8%C+0˒'ɉ&|{θ,k;g bT jjjQ֬ 1_Dq&ТO5R*cF g9(ERwuɒmHɤ0fVY d $ 0) dҔ/#Lw:SATaxXqzpR d/[5wHRe5DAãSn߰``#$(f\@;{.<&"7 ];5APMPhnӹQzoYL9:j[CCF`0,'d@Kȵ6=`jRFiRs4a@zM&Hx siF'cBh`` L9AXY5vNrNILfv2"M/D5d,3i ήaQYȔxJET4ɎpաXR,°1 R) A""Դ (ENSZp#&ebBkFpq8gn ^ \f%3 =n̝DhPagp/TM$8Dh0#a L1mnnr,bX,!³H3 ֧& KFHf0Ӭa2je̮IMChR5.2$Dx.yr:eBL`pdEa`ʰDȆ #!0%;8)գN$1jiCAdܴ\͛ѲȈ0T#`7n{6 Fhl ^mi6NS| XȦQBl`)ӥ֥mVH,(jfFNN7Cۮ'4I6#<@̯i x}\oofY=~BT @&10|/n[]N׳8).L uYG\k4 *)xOȐ!x~0?:)0_QFTTC>JFOLqO|Hh˧߿oGɠ)lͰY9fD- F$V҈XcRuO?@CTDgI-IwwMrs|oׂʩE$F-b{VAHEdSdSY$ Y$XD y~ɚea~Ի3*$*H,dR "p`g{PP' ۼ"EY)sZVn6LZڬE*d'GJz>A*5~]kh)#\ObNY RK!;/zI:GvuN;d%CNÔ_7(I.H/d#߇RAA=tpO4QI3=ʖKhݬכێ?ٞuS ~Cb!onQ!=тBUq؞OLU5nMae{ t'' FXF,욖NL}ew厷0P#,o3 "&FfZY0Ecṳq[ol̯ VD{df+Q6f,RU0e,ɵ4%f[@bH 4kRL֫:[ PΔt)Uz(PEDU |ʐ ]uYgmͳI䨄~k(+)P+ `$I /y~sia,  qE¶amyNç8泙( >y?A~ҼP| EP=uY_}*ŨcnסuUUL){ᇫOއU6.duqw[NP BjK%Yuoȫ-#iџ0ʆA3EyDd]?ôhrr!CARmhJlKL5OXêRHFFe탞'(STK9]zX8ҔxM''1R%1}!u5 _$Jz>nr1iu;^nw8yl{bs*pUvEFuPdjYQg jWl244ZxR @d,VւΧx@F庨-Frt4Zʩ% s\=5EͨʍP1(׵Ȉ.Rz8vBN ӱNiQĘ?5%/>ka vŒ(w{e9b"K$dJyDdPc  k[hMGޘ.FB~6='bHX51.?V!;[%Psd C2| $n:S@!㺝)f췼ΓuBexG=v8< 000!SDE hI*Ԫ媦󪸐(Sa䋔wj$K*ѥK5?eZVakm, kOv?(<3eڻBTôjϕ"{C1i) ' +zj!}t&5>k>7pQ6HfރoR@i$*F|X?z<~Yھ(R|O̩?ϟ |l9͛]oJC>! STbFwo٠ b\uUdX "ɗd@3va^yST2ёvv \dd|.k҄5iO[ٕWG V ~X T"&C?2 '©$#!"x;=gފ5!;hswWw.!$CƼ%}ބss-:߰HO u%/KL!RLfj%nhݙL BPm#劔U]-%N| Ձu<_[Jz}sБn\ߩ]i>t$E$c?- ݮNbq}U]]a; .* "I΅ScЙ1`go0>\Q)WBC ;뤕7'ċQ巇ݹ" fOjDVۋ =ELOM: wW׮8}3a풡WhHsfIveFc7q̄iRrc5:tg06ҎJ8auH񐷹u\yfwa*b]-)`hnrGi;E*_nto.4e^Q[ t7HR> Qs@0^sl9/˜G <aRD_w\j8G'b,Eq(=zJlLFSrc~d*%mnC;F,s˗Es.5a1k_s_>ԇ~eq1JT*nj CP#?, Ez^'% m6룡ɛk\>>C~]v93Q y4AQxc,+.[qP xQ%m'uc|n|L2@CGk?"GrnYcў3 UYilBJ #oQq~rC}QPS~? TO.4(o1ǣ#Y=V㌗@R7O+I؏\EHZr RD}9>X/,-RU *I'ɦ7͏սk،W,cOzG q' > 1DQD `csx)qh>>NuM̶d"3VPhD@[' p8Iv`,6`b0BULPoLlKߞ >xׇOtݾecUi$֎{[MgN*5cUmY϶ݯL?9u<9˧iOOKec#RbZ? GK_;~iyוUGm~ϥ e4[?ږj}D\۶ 4VB"eT,$!0?٫@6vٵ:]loQ\80b'grŹ)RE^w;{l3 dApaQEI\59ŚHHؑ*78hUO5tr$ rKD٢H0ը$ 0!d#hy}9{}owoPa4? /7ۿ\Dz>zGdCc~9m8~';'h3uIY" ʼn=~_Cz0H4}J,$u鰼 o~!:Oa36@bjGYV<-*I˼R>u.{,,u uܜƦJlg3~9WA>\>/-fl|g[ڿTYFUx!{YNoxX6Jk kvxɺKOxJ+g ~]ӹ 6f]ԝb~݆ÛeC{=%yo=^D>t+7w:?.DR+҂% !n.AhڋIDXmYEuنO/}=~ܕ=kGP:дMbThOf`}!Cw?2`Qk֗,pO?ruZҢD,c-R""` sN` %/xa/ѭmW-z˗>sgo[f7vt= جno!\@D@ڼ0уj7O7C`|QpN^j]u}E&n=<({r'GEOFHл zҼmT^oA_HxZ6BbX@-̜(?{AM 0~\^Oظ)l HZ~l@JfzMd7ESPE-T0J2 ^E&"Hj"H!>@7A9dAB}OQ Qy6x)d "'\ P0GƠ o`P$!$ct8Åo@Q&> QA )@!Ǿ.>f> / %[B (KAOj("9㸞LSǀ;M@CGylr QF1PtZ! %hrr"V(ʱ$M:;x&T0A@NJ=DGĂZ4(F c AڄPIGEDP]`UZ, 8uk _lR#q#LdD@SNzo :5a b`j8t:4W 8̦,9Phj2w*4J@d X޶j&<\PdZV2֦:ړi mH`0"sŒ  eEsXcSDT &V#YY+nT!hT @ KyNu.iADEiP֗ί(^2\c^c"(r{w[ח3|@4D$MDuS@ & =P"( 9*4SS઻x  ?)" '$dEDς b*uqEET@Gd҂)ԨH.(("90*"*ȧw?hu޿}\R"dm9;S2A@PV!`!B: @<#APvqx1TË]L:8ЪtQ{eANO/}&KnWb>PAW{=̷iw_l|X ҌqGV?FV$N_kKuxPS~+b=g#?Ǒ'}~,V; LMg10 gNaֺz,@ĿKnـ` humY!G~j OR8O`eLþڵ"*o-VZ|s.|7?oq }GKչ_ߦqc}3z c<(YLVi\5Df,: d)%մoH8H!W'3_LU&);z;}$ 0Xc@D` A2,X GϏO 0EX@FD@DPDY! 01 dF  BDDE!A>~Ga3^ !`$bTH$SuJ- Ab,_iX 0)@FTb0$T# L}@G!U3%A~3ѐPdQ 1F D,D*QXVĨAX-*$$ԉLPFDY"0F1" C*UDI$iL4*)zLO?hAa俒YMc`U<ҪF a`dD_FB;%ѐ$H0^vc2c؊(AwY>)1~Bš+#"q(bLo}fV6HcdBHHĄq^.1ҏTEMM/hP;v1W3-!Ā"2# W_?F<5./u$tZZ4=?"H9lA(y̫o` \%ȬT݊$ND)gfAUJ S=߄'Lpsp,?Ŭ۶1fXF-7iGw}oM>8(#ţ LʎWlu HdjBL1=/.v _V`T0+ĸ/.>FI$(w}}_ ꧮԒFg`i@l^鰡*,!(2>^}(iȗkhX(,d$ER"-ld}qP; IÈ3:|u80PS:gDv2Q+ #ng}j$'H\|S.~/7hp%D)ΰ1>gN^*u'*ٜLi.4 0}$Đ (O.5|N oɡ>gd;RSAZ횒34Ug#>).U)/nJA_B]_HIg, H"H O]PĨACN$X Fj1HJHJ1USTPȰQH,dX"QTV6ЬۦVLE*bk ±JX ` d`"!4rA $"k" ""B")EB $"*d+ XQ  %jEH(TղJBPRT" ,TH, E$U"( ,`+0bQRADbȰ!*A`VL5ĬE(NVJdJVQhA` &2ZT$R( TPȐaY>y{, H( B1EPP@*D`,1V$UDb )RA`AdQbȠ @QEPXDH DB, ,X(XEE`R H RF$`(*)"( "0(R $EXD!,H1",$(E AafH,TEH)!AAPDA`H@Q a (EXEE`P"(A@Q@# ," #`U YEPXAdHp j %aXQR6 PTUd:2c& EYPd ( HȨ1UF ,X,$H "HH( (*1`AIa QA`_KY E``c `((,ŀbQ@XB, V,*\q QV SȢ**# b,R)X2 * "DB Ԃ +$Y e !,R$P`d" $UUEb,c#,UEXI@Q`dEE$q  QU9J¤m$QBF "*V $EX*,A`H,"AI& c!HPU+"FB !XEHa"QU$ "PALdJiDE"U ,EYPDX\ jTJ%b (BVCBc$* i+PtEP i4ňF0$,$Q@X(A`  )  * X)$H 1APQ(XEFAb$HPTUPAAX$D-ʄRD+8j &HR$ fm-X* -BXia"1A,@EX# ,1("aXD*(@XAĀ,R@`Q Ad "1V#$dAR $@Y AH,X(""0KZTPR,DȰPYam Y+"VR$YZ"H(UXa"YQ- RTT!B@RVR,XZEP*DdX+$E XEUb0@ ²k1,B1R*U$b-*1A,(A@H(c XQEQPY(I)," H @ ,`EdPHAHAE EXIHY!Ē,*"EAE,B A@XIX"-j," LHJ PEX+{ڐІ(,)T%$"AE ŀSFjVAH)$*,$c-FDI"*ŐTU*F0PU DTR DqHD`,aPĕ$*HY X0XE(*ŀU" "2YX*s QBAdT 1bU(UV X*EUB# `)dX H(` ` 0"@Y" aY ,((H, R, ,R,Ő"X   R!PPdYXX* TEiXI )#E+, Ab@A$*P".5 , RH1±AdPY""+ " `EPAIHE*EX@a"XHAd5@T*HHdPXEH ( $)@DdDR "*-dJe,i1P\eE (Df2RXT )PD+" H)dPAdƌQAJE(*DV#,"%`,UkJ ,PXY`,FE1,dYXRETHcYY+ "AQ"1YE*$V,E(TPHfY(BD` J"EbX k, C" E,U)"A@XH DVH bB Dd1I"0U10"P,$XTĘH`ĂHYXEFAcF`,D*IYV *,E *$R,D"Tc+ 6Aj*b°Y ") XE*(+1$YX" JDbPA(DbAUQ`# (, PA@X(E,RAHE X(EI`E",m+ jD"Ȍ R#RHȤPUAA@E"Tm#+%AQjHPF ZVm`LT%P ` AXQU@`(Pc4+Q`,P I$ `H)"BDf!DXdXEŀ $PDb,U ("AbŊ!FD`TdU0QE!$!$! @b  H*2 C C*GSL0@JX *J*( HE,YT*NR ʀ P$BXAXA`(Ab*()`+( (JT*,#JE` AdUQH,UXbAVIC%L1%HB"2(AXEX(QAEI A`+h,@XT`Jc Q$PA@U"EXr+ ,d" 8+*c,X`[H)"XEAAHX B"^xXƕBguLrpC g(1#5(r.P~t=^nb☂ RkD 1es!&a08ZFgc;.3U*hd/f}F YΆc+<|i[1US1ar,kTZP$0[38 Q]#SAƝ:Lj*!7QƖtk<C  Mh7t'Sj|SFp{]N͔k@<)71> /,t+ VUpH-3,54ʅ}Wln|Ox_nt482 àdiی e3#sI3om(MKb%ivg~RT ROiɃT8jRϊ|?-c7r/g˯1qT4:*ffEڗ򝋢>'@A5_ќaT7i\|woǯ Z Sqۦ__\?GDNaʱfsUtiwVđ\:t<$e`qrgNbn=+T7EZ Sb%M9/ʯl[DثaT_y'$>yei?oow|uHUsU]iȍsi46^aQ0|2|ꃝ9S9WT,i$ԒUK?*5Zw=knz['>n=G+"U+ڢdn3g[Uko1#U8jΨzZ{w؞Dyof]o?޳ab^~D '(4uU[Ңꁚ?oÄyWfd3aWI̛c˥3Er>@` E1Յα5{J?5+~$.sSOntktjUtu?TK}ߪU/F}x5izʾٺOX4NU_ ThrD 7!<+r,SPV+^U[pQ翅oJYJ._t]ڹa4&krpqq[>[S+wm骪W?B˪y l1MLC5'' PeVژ '/E6^uR>6-h;/2UKw$;!xm/;tx}KjE?Iޮ=ӄRB B'vCp"&G' +d;zʘ>O,f?qSR~}_v CpkƑ۠[YI h{i}|{N*S M:Fj]c&p7#b@B`nh rKpt> ^)C+|LANwpOt~o:&7oz9& A~<:W.W<FRe[#i>/evyOߛ .۱qjcozX*;+S0caǦl#~\_,V6~չ즫m+jnρ,|e"cUFc۸1z{|рnώ5,R _׷|brt!iv@_G-Xd]I?e׭|oӧ} ףG>N2%"".__z!o:- n+Ѥ&td֪.dj#$]z{u9ES!4:QQ!`fv:=G4UFFc<Ӄ2FF-d,j cG0vR'D%Laj=x>>iϏ`ň D%E")$ǏcxC, ͦoْFq Dp몪 uȧ# ʶLY) S)Gq{yTq U@=Wzrci;~;2 'p@5)x$/`V]%8J1(lgP]Q8jmFDh]7Tvq5P&T*KVQDD4Jkҕ@!B(9w4++ ʚ`mh>gPVEg.FpsGB:W lUr/VϖNy:fBҊ%NTw[]U#ݟw&ٲ:tCs⩫Ȫn{N)%ƫ Y9EI_ׄ:S+9! $Ԋ#mA}vSe+?Ckw`і[SqUoqO ,qlݖNزjˊ݂(wgsw"[O׏*3Z03Ib1兰ک-$:MD3At4]l˝vq9}cݎ?gV ˦ O'O[{p{$RZ{IjIOݏv/0++럕X'w;v[DdnA r:?}RmsmNH|QK'o;`#s0 פ骈SB!1`ivۋVaJ3e4LǹXƗ% H#kn:O@  @h A`HTH9 OHoOwx|%=boާ=!"G=J扑2J`ԢPg$Mlv2qzO8xN)irF.t8"&+4fX;N%sSALXwn66sMYa=6D(lK 8+: Aͣ|ȫli}l6㊡ 2R'M#/]d"@~|]YȚlvicIJt"v&V)!ZuTd3F^0uH_Z7'p04 (h2]ˑԡtG5ϊB0`C q*p9O }zo6p^CBwHHՋRۨ-(UEBIg5iMrwcLU|:“keS!@Ʉ(ã4,)u8,RXc XTpXnţZ )\ㅡB9-pC-Az ƑU- XrH:6KYLu,49aj^ {1$L-4s!mPAn1푋 ;]vHeYC)<BPݧ38+yup;fwn[, E)*TZ66vZ, 4cNFji@rLZ5R0 UsQw7y1a$۝&Q(I l 'ZC;h ģ!4eBfhR uᗃxĉ86%u85ƆuEEcrݜ X&Uh泥3nsvΗekt,@0g^'GƸzߏYx8L*PUk*011 D+t@ѸO<]E +:^DHQZ&x(Trlð46c˜61$,@B1C< l/*yfA-(ULm! EXS4p M7a6E:MZ0:L+^iQs-U8fU9z.Rtk8*2Cj3%d#sqz91vb"Θ 0qe+ZJ>*Ԓ|sJxVxhA3=zV\X  ִ6nhn% % :Mxz`XL -]J&l䋚^.83çMTp&|xN; w'S5ђo^2#BDJ:V0rh&H0DȀ!1ZXj ޳؁tRBV_faMcAFu(h$̛RLfbhHXKH0׎ob$߅X̦QSt =ukcm q&f]kJMYC-2t$FeYB&,lY*:ondrPe(bDI#}Pք7W &ZӶĖߖEB0T+DGa @kċTdaငԩ Di,TcO=DFb=D;NsG3<l`l<Ƅ^;Z7qP[ @@F&qSuYzbsJE+;NcLB8C Uk`S(0ZZ40.Tx-w9ZclH 1)$sѺ6>R[,\ǃE<+IigDR6elt{6<)ϔ9 \{\^ƒ:ɹ@v)gPSDV `wYT&ɗ|+DUL NV(( A@;օXUM`n-k'M)xڨ5r -M1NЂ6/)XdΨh Ƃ\9" K:e/N#c5& ̒peR0Ë"j*e`9E*Ԓe(Z!ˀR(k*<:[n8y`xO0H'eb,^//~7 @dȁ/"#B #d:s*i9YTc8#{rD8&th 9駊sHkKjRiOi@VT^2."kL2rJ5hq@b(0!BctV,I2sG=kR )i停8KYst4krOր %t5Û Zs3A ,) &ZSXښ9лDV4"hm٘QopJæ^ztxw2+[y̆E_Wo !Ćw ̐H}4%p ;>Ge_rhEpYFCibhCtVs͟ A5L@GF8HZ !q8B1*6`01pHtY Q.XGzbe v@I lBD'Ynm.Ǒ=JH9!H dZCp,Xuo9u6v]>\yrt{җ9XRXWf8V;єqP8/%L@Ƥ:{FBA] P)"A / α5a 8{ E'Nuy;'ZLJL;VY$]Ҏ% RLF[<u Ej3td:\ZR7]oqx+yܰ76K]Ѻ(bW|rt,/U[1$f]DzQĵ]ScBCu4tPiwFy+DY>z#+v[1g2LK FU\14,c\jq $@fc8WVe\0*frV(^<)B g:e)ZePҦk"<-OtPTq]W`$!@.鴌i'@9.ijf"A12Q\Qai;kEdx&jsxjNSK7tjś:;*#Z @ ]%J;l5d0 ڡs,Q B@%,!`BcY*rFaH@N]YD*x4ޮ4"AJ#r ukp eޞ=NmT9鮆4xng9UlX )SWUtӜ^ٜ`)#53f+OHVLcI K ""a+q HR"] 4u ! P+#5Q[gÔV$̋4RT6fTk|.%'O%r`Sy"F.)Z tri=É[lI 85~Ԃ)>Se Wp[5>0=opSGz젂%~|D@TN7WǏ=-8te㺢p@9>}Z^Ę"U#KD \s)S$G-VTQ e1ž[uCbQQfjɈ4AwLf VֵnLfT(0DӼ&* "GAD.6jrŴX"cX*0e QPB%)UT1 )Ukb&2%f2\h";"JUN.PYRt*"ĭ42VK"j*!U+XZeZ-JkPuJFqeGq&V*f%-X`k-aFvTm*9b3. ۉDѭoT[kRc I03*oƱ;5໲}RjQfhlLv "RG#6#iӫq*ѭ̅t̸L;+3ǯ>nlTC[2an7dt>OHh[_| bBF!1" "@ϙ=ԥ?s: QַM,8#dJhR0ZR3Oz3&+ph/CkA|>1 8rOxAP>Ä[ zݧp?T>8N?7ϫTx+t ddDAƊH#|RYzSRik*g⛛ eR.}*~$9Ci3!'^ wBf7{Q3~HAB @$mm&qϡǎx2w$l8d'AD+SexkdRLyI;$=VT%ReUb- dBd1y P79xdXC\%fJmf!'C,<bR'V C^Qa 1b #ܧ$:0WB7*Swua.˫sn8l*r?y3/[Bg+V ((D:XTD$}~Bxy\Da.aTD1G2S-kTV`z%[U]У(akABRjPB#OWcGu5EH ! 7 &@O8'PQĩj4*?IgNݻRlW334}o:nK0@U?bmMRHwa凙+&q:!|'Ͷ+vlb!zv[9+Oz"!$ Dkd|oP6Sjg N`؉\(MdVޏG~bN~me SO>e&~L0:/ dT1R.D$3#ui.?} YB&*4=yL69Q@yiS,/ rQ년;>ҽsNWzBёk)h} '/އ HaYV ǕT$P(yu@)ߥewϼ\5&e!GO>Tɔj w֜(~egPH 5H8dG!f~?I(nᑤ2  +/{iBйL;qğL/޼\(mޢX8ه@ ba %A ,\\԰.f}7@Օ9xMMCƠNX(n u\sl #9QV@G7mi~:UQUHJ-18uq(R[1g E3d 7/Bq:q9K>#䃨\p*p3:hF0b8wJ0Bi53 2$7@2c6׳5vnXG=aoP)!rȡ eq40`WffbIvS7n17DIO_dv{:vfvii=Nc{Ak=@)Sp F@$'_~j } |4G7GErqZZj1b{H1Qp Iܮo~qpoguQ1ǯ[C\ X5q]2!cW䢺$&40QDJq1R lnis&(Fa303sp74$mp#QDI3#籼"QXKni켊} lU؊XqHc$ ~JHtՔJ$kDo# Zo ܵi>Q\ET4^odunq<z܂Dp|牦T=_m _P.0OgV]]'P5 g%.Fbb3YE+9^1t\#5Ox.f8] ~Zu&'݈'agf=0PV2_Q{;&j}'50%D9R|DUU`f͎쥡,6sj1yZ `; CGڎ̏K gi_8aTbӲUuLj22YVd n!yŔІ~#al&"DaTm z\QlZ5D|̽W9J|sZ.'WVGxo/£$f2o8M Pc/"b_Obh$Wn>u\/`3IERIq#l)5#?0jŪ)juʕvn#GU&0 8[~ %δleZU @NzK]%S F& 11#A9`0 #}/k3JUWRޟa9PZ%BƖ7ZiM|>ڶzyCҸgoT8E{Z5?zD=p~Zu?Ɍb|vq"<`4GتOtbg4G~8:XJpl ]2ep`eӶX]* qlqK#Wb憁zu{ KgaXzJO?0+ߟޛk>.cB|fj,5V_ѦX5FmZTLid^\ޚnCGAEQQbrA{DILcN_-_'w<8ʮk¸/?0P3i2: ]i[@prUE@!t3 -<\:;w^6oS<AG2 "#" xQF@^~t6;xXȹ,w89 RBY0pCma|L[mQ0&ӊdܙ@PwyB8_?ys r^'-߁_P҇go|e6Gφ25 |z6̞j1*C~h 0m '&.ngg/4v\dAe縶;xT8Uha'!I@ !_jNgȧw60rs:bfi~ʲ`c܀\G#&&P\mWM#;eD1HʯP&T-2=K}G`0ǀBtN8y`B˴uy1CE6#0JwPjf!ٽ5[x#eDԈu鋨 wَ(1 +gc6JSVS-iM?o8Ku0K^0W">vksm "@}U?đC3]q2{? y_,7ym3??V;8-OB"EXU'N-o y&!bgLK&' kSHx>5bH#׫'4z? \1TOa[{-{[K =Pv1[|D*􁙽L 3Wk\ڪ ô5TVV74t[x՗^`u,LnPcdP`z+G1£oüBgsӉ svmt`U^q_OԃN\v 4W'K^lF!ŊϧӊGmˆ"ul:q=A5%3h4z&pZ!gd*g^1P-냜f.1}$T}T~.mW<9 UUzlPަizEdO:0`”Y$u]@/Q^iIx}H|xx̜ HTsu5OW z[e+s%0 4XU:'f_=%jx1rW'S@gR /VOnYoع:uucӷI`n#K\|ڴW y}ZjHǣVJB!Tvqrid-ŦWT'T6@gY{x3;Fo }JĬ׆Vu;uVjoqv& UL`Euj$M'+v^b 8sus†湕󊙝_%T6wh.Bow݉_22Ux$f7>\qVSۄO3 yOa5P u#\1ʌ&@L $!`P,܃iHj)dwd"}P#PҚ9ݿ{v| ֊:W<SQq}K;%4cbdo>qY}]. (l>hӴwB0g!kp$ð0Uwϑ*hj!=Q -ˎ"Qd 49ut[ؔeUf~'/!'4'+ivaotgs2@moHo?0, ȡxR\+iῃц9aȼi C>~faa+YQvՕͿݺX-=OW js8b$eynUfg7̃'I^篁4a˝/"7J>U#x1wdfȀ7!O53ߵĆ @Z0W(S?ލ2&8!?yg_Wnߩ/K8p_̆Y!Vse}ob7߬ 킾$32d&YGx3aęMH((=}; j,m=״l~';_ܠ4iU΂7KIfHg1dA#_]EKsnH~j]0ZX.6O9.Cib0B y8f6\[0z 7 vVG!2\<>#K 7 fGk'R D>|SdB] iI e tE|e"|z6DWa,dBRDPO+V9D^bQ lFIK ^4jB@HUIk&G{}0$$HY[o i2|C#K|~BIAQDQ_TA;fk5?'Q1VL fe=[@-FAހư!Q66ANci1Yu:i:DT0jogDhjGK @1, Wlos/EpV,W3f? rGzˣ[݇ΈGdJr,ǐ|MwOgcOO٬=w:}N2̨hjԵ#x0]C=٧}s~G[>.\Ww_xl7Olfd@E] i| QSP s>q)S·u:ci,2rOi`k:*&汩5|mE,FWklO\Xq)r-04S9;a(*9 Ui;246Ǿ` `Y?_l&LNʽv>:mLڳ{坺F V -9{ }oy5\w{N+ 4&W` _?#Ծ!NKHګz!,Nz@  (DhjC\EO-Dg?G'ϒ#>p06$& 8:$!gfZ.#򯯺y 8 ?'/\'6W<maLRFq/Rp!'׻;Ȉ" ޢ`u W kDaE}6 ѕF:7(IƪI0,3` 4FފA5ǙYҁf-ش44m3q/ zZ_)WJHE,LIwN;8\@r/Եh0I pbCW5{n:aw3煮wlhT=17dαBq@&A99^(\H'iS~=cu'tM,< 6Ӭ'S@N È49M{1*O3!ӭ۫xhqF߹ppe]dU̅׆0Hpz:~3U U *80CPk{wdi()9幨z#z;]XDpTYI41Ubf%nNlۗfxbcua@BԶ͖LPU"Oa"=N0=5T5ÖaDd"nr?PBi<,nu#n:MQI>s ωtN v~2ɱn2$Pȗ^su2C9  >[j>KI:ș@&T`ԑhT$ ?{y1DqIw\.Q# ȿ1Q(}/'fpOz4xʛ!)@0C0_[g@i#>3$f/QHApW8̃bjl|J xu7 {nFaYWkvuǙ+:\ux@wP;ԇ#2@6`Yz0>wBr=r2ߠ}΃M"öQ/ݿ^` Y!`޻>gjQ,1ն5|.HHPA2N;4;ux2#~yvBC pKL!ݑj!_"̀tU;} FvLETy}vN)`Eb" +D9&V XЪLThu 83a-PX oWcTNgq疌7ʌM;vs%5qe|.z$9R5nF j&õ8cw?1]D=k:2!NDk->7]&LFc0ʈמz78Y7Im@AvDӑ9isoNk+B| 6BTNGX[!Kbɐ5Dd`YD+j·l*3b٪ Ś X1c79cfwV{:ma*E{斸5; P}f(& iaA0ID^ʿoŤfp歘3f&G$aD Fn_FTTu['Y L6jDv&JIBZ 5TjzMN$A72<>?]`}n۠mHh!91 ^_5uM]_d2qzvi^D>+_,jh\~w:}?Qd`c؂KS:LnM(9mCQdYGi_ܠ^}EČDΗk^oa][? a. \ђlfv H$qAAYiJN-EĂIE80 hZ 6haOSP0΀Ĥ7'(M ۔ۜ5!SBL1$].0ǔSe,hI' /Y*rSF)fx{x0ȴcGpn>;<\a9/NPqil[1W5MG0Deo9qyp'iPN-c1LTj%*:Zj;j&^gDN8mo~y k<#g2mw=ޅݏKnޣA~xW^( E J [}`sD=|y$~/ʃ_c`@sY E O>> UI<_޵~=8?l" BH֧ϧF_#$dCKkCW ~Qs'CʸА73ALBEu3i9 d8rg+[cM]*ʺKQ)O3E "d!zO4*aΒQhLx'^.teی'4 t$8B4!d2Cm> \a șHbd)'p \u&j`&mlb4"60 ؓ+Ws~|ftu'/5̔P $`dHz|}B{#T~}<#6y&YO_?moyc98_:DI5+}{j?Ō(@Okzҳ^Eij?[ZxNh{?:qz'3'CG5S-z$fdNTrG>qi2]էkz'Gm%k:MQ)$t L(A\p-_f#L "T|p@4`, UCY߈s3guEATf[Áa+#lf)`2J!-332YEMUB" 8˕%QDDeR*D .e9e|tVKjWXcP*0JʮȪbTEkAFTV nhh2@$mNmQª|=.37Kƍ.9p0 v?l@j8wښB79M rI>ǧn}qW͔54fha@5ֆ9]bԡYY7WI6閅֋/xpI s/&sxvi+깊Ttцۚ CA׍ qa!Wd[yv}/K~+ZӱsIwq%'fk3i"n\FH ❗9!JR-$袣zیO7j#Y{t9a@8:f+0˒@.%j."(0G>S[ƃ>ޙaI[ D[uhٴha ).1+A֒fDX_o"!ƒЙWa,=q}'g22B@E8r.!`0Q,;f25,v&GHwwMЁ5su+GCW6S g6CR8a ^ZKCe:I3W{oZvXýU2`"(H*ˆeXH_N,d1%b9!Rm xo4Q}WW7ڞ+mb{BRSuB#"{J- ՀEM=9`T(Q)Rv`bC7Ŗ{ڻX)^}ٳ†tvȨbvwk0EE$Ʊb`(".|2ݧ9UE -+|֐U"xT^CJXz_37QcoGش^W?I,GAi 8ifB`9Lc-6BD$3ʠ`EטBS3W"owyg,ana^0g.z~S,5] gV,Ø @AaU 9?+7~W7@P$QFEQ!1Mwt7Uvt:ڮd.@9u_Bdlvs-9 62"{)~,Y RAgIg']A-0_qHj@ '5Fq2ж4yzkI9{%#ƁNp"[a@ȤHD܁Y|wjw97ώD렝4>3I!,Koͪ~Feyeň#(1*` DD$!68gt܇ëqߡ+D@dD DΈXw5||?#q|e(HCBڋvniݓEmC6|ZnxVwxԳN}j_GwssI]\mS@ݷw-}3U4/s%z|.N;3΃O%"YYR 21aH?z:G]c`ݱuD#/2 'SJNRNW.6yE΋ukMz9wVZO8|w/W[f+wY=}&~h.?)>LJmng}T2yzv{ 0I"n>>ƢCw$z:S׾wKqنb-"?wz*C\xMg"Ϲ} WzgQf!(R VH&tFE8seWHNòi QYhoH>R)Ԙ!OzO|- @:+/{6?.7mV벴H20_ ;%ORڳ$pŌ_5N4y?%ܼ7b FbAM^h6Cí6cE-iAXJ:58DI8\=u! HF{J@D)X 8BtO}uyPrrxX+hx)Gimޕ&dxIMrLV,Vå=I?{ =ݞ7Zd@ DD<2kOnڒR&B[>8;2^;oxikGLzB08[F/: үOX䫜<;I .6?n¸>a2\`,,T=NkEq':@Z)כ>ɦpȘgvhkefjkr fVv٬:Z)DOry\EhZ0C;g )\$Xg0| O!7:o0M(}m/%*̝*鳧W8:R)o{{{zgkSeNqHn]hW:2[hFږ9%T`_l |7Y9}EZnS7:3VnbcC6"^;^ReVy1[9L&0@uA zk>;9d/Fd!ӭ!b3PO8|sR0q(q1d[d/ݷ?Fs~"[ɏP{Vo NrB|Y0V%wdiAC x0q(pr3#ª&n( U3)H0A #?8۟f{n(LPFr>=ұrgV=,hXǻoغvГ9MHEV7&_ 2R=bkb`x1@B%HX{{8}%r%e5ϕ#E_D,G֮"y𥢆 "ȽQL&!1 PP9pG8n!K*0c`j kAe4W0&ߧ7>׿TÉ8s``̌n܃8gK'Zm"&"КBU%1 QXL$- Di.4xÜ3>nj/=?,F_9 &n>݃~"vJ¹7>D}}IյV#kC my[wE`{O=>g_>=ÁED5ڽ®zL.K"@t> ]m^V1OesvɅϸDYoE/#BnH IL`ww;Z8,dZJx&MA}֨ v'?6A"3 B>@3zgV: FgJ FrzT* )E1r&>/fucZ# .âlO0j|p`D[–Im4#`;ia R=082&8n[,16mVZT}˩~ÚGJB٤oߍmsf,1W;]1 kO.AMցgpgga p7rO^Kz 1UM BEދ89`v f0`P+*Ls &&oQx!Iqo#,)2Ad h$ϙNx1t>1q|Y_s)~R0߻ >5VwB:}dN-偻sh3m֛/JQ˺eZeݴ폹v^(!3ɋDyݦr֞nή^?}Ð,hO}kHNqQ8-qsc4uOYzrsSsQHg>i_S;stx Oe9p #,*oB]W{ok%7ʒkOSuޗPkq׭)(|5y|]Qu=]QĦ|;ELv"ό_cL,\Ӭ>>9 ʾ' $|G$%x lk3v(Zp0&4ʩRqx4me0ެt6 Wk}4:G[ϩ$Ry0]ߵ EC" ^I!y(DCo 4I2-`.9E l5M c%cGZ.ǫzeq]6X;h49~/ѮRUT϶7;C#?\n181?Ƈ2ޯ_o~n'7z^zm*'?oG{u9sR/wy _?[u\uG kFdU!Y+$Q  x>%>#}l@GO=:hlEt5HXA9z>ʥJl8ɏZ:K_<ҁ& %ZKVC?3F.oWI=k֚_nlGw9Acz>Gc}gr_|no~zoc]t4Xoezz|?]e7wKg}N\/%{7| ۪Q׿=ew>IڼMArMF^qn"oc6ΗKcq]F?Fj kv_!Xݠ5r=ߏXD;FVhdq"@ArZq lV+ Z5T"5Y~V\kOPoq`xlH`Oݠ:MYBw'6gN9Cg:?xWfu]!x|=&]j7ml4'#;R{Zx!f 2( B "M!/7t=GAm7 ]WUb ]VMwWwc{g|ntY/?`-~vrw:G.Zv/NϺIlU"=6im^4x׽5Y?}g?w{v}K* U7V'M_n?=?#>VL?-ގcF7'YѸ*+t7Pw_ؿdwSdeZ>@wp h>a՞#z0 _t01'3XI`e;TH<7fcw>i>QaMu7^ݲuHwY.~[מͮۋfnJW#,wZ?OˍL%VZC.Uכ_T7稷:_X3K>^gU>Xh/ﱛmggoߧ)Ğh~nA3_+#?Cٞ9/Ьv~o?c{2;_V|[/ӵ>:{ugiSs=_[F~pI-ۨ7_IpsSz KAC5)O^qQp#~9-: I ƋY9 ӼךO؂1EiŸOa.rJRFp 2&?\`a3B(Lbsfĸ|+]FҟONlf#7x Y[9 nv\<|`>TiꃚX%nyigUߓtĆ*)4`D5Y-Qm,V|isE%g[1 eltv 2eSVM#>y%ժМPqw[Ӻ=2;=zdQBEo~b~7YgSs3`ǫSua{{0n  BE.qlO:{z)%@zI䝧~=ĖA=1; .׉ZMaIc:-_[Ggxl{Mtջ\R^i߃ǍgaOw۝w81O}}gɿtokI|[{o߄77Gu?Ƌzٞ=W/?sG#r{cW|ˋb,o swmosY=>$@ `cCzqy& mr|3uXDavZVz˴ AGeoL5z#c7$MQE&ڕ2\NnLsSu^3'O?̲ĤaQ<]c~޽Pt9ow~{Z-zߖh~]c\N"Ri7iEgfƍ|z7ćA%7Ϝ?l lhfAA; (3(_F\pq"APGB,x3heB \ٓ'bF dOJ*%2%G5JZIŋ:8sb:.IR"+sХR?FS]GdH&4G6~3͡v23/tx?xl_3_du{[Uc |EO *H,>q"e|ߍm/8@H{*Ȉ>+>no5Q0\Ӿ|}>W5X1 h &m(M _AF|Uu;Ϧ{[c?;HWl٭b|Oj2yYM3.]{Lp1͸C[j3f#ܦmga@u7Ag^on4իkwם_ixvИw⵻byqtAz5C6Qb(izm#l+N wPqoKJ__>v@RzABx*}hpzփO[}fA|>l=^?#ŹCnSltY1*V&w-gm>?xhOcYH?拠W\N_}e#=Z#d 5&HŌgL5^~ ?tԊVO LwI{bdv8NしG\,L=?wN`̀,YX0V+{?gqor%ds>pH f0첏5/W-fФ7lBww. P0}Kx-vRN"XR11*067}6n<+[@ǖ{(24.+`fc?p;οƧ_<u #;-&ˋ8;>n!_-gF &ljswRjwYms Ňa[4sNM.rhtmzm-m D1wzr{@N>dVޣ ]{nt3xmi#bh!ֻ+,}z$ ΑKD SqAAwS "%f=3㙒J$u`i-?=z!.V0 6-1Tȃ(_kf_uOI {wH)K-sщČGnx^yLcm`R e Q`$j ={~N Sti:09Gsc,# c*CMX,t^ۙvT5';-$#_:r4q9vlr9_Q:x5c[0bO\\b=\u>P5ێcA,{Oo=fs=Efz.bD"Rf#Hݼl;z7`tW6S=g#uʫee6~7rY[WO~'YmHcd6>/l2"":IwW4sP`F.Umxօ{~^^fp-lQ׋R1b @O##w%AƎF2$ `˫..#ۍ7On q{s1}9eeɐH'-Z }7=x=-]ίkӱ/s3;'-XN`C\b"!bĀ蚞⟯ ?i;s7#2&cWUyԳwQU rb3xoWPđb=-l.qLgƗV>sK^p=GyXaSe Adk5, zW|e@?TPj*;(AKt/.=m(eA1]epUv\K#?-hCQ@n[c87 K> ֓7\i:nT-:)W00,YyH9P1w(5IT/! 3ok榢 N*nPcR975/g5V(yQٯ}_7e!E=yC&z$Vs|eݺkm6Tb縋yE ~HxAF+qKC<)p&NV2^2jeDfYӒs4r5bA0H'0Ok }>j^S3K0?ߊ pB~VNDbjUgJ*o6V\z8E~GTdC-@փn>dLtqp䅳SvN̈9Q3F)譇(k/*2^7,I CU c $Ғ9@0D>+i>P_z'9ΎygaHM 6Z&I&ݟiV{=- ;Vh@ `&W$Hͦe[9o5bEt~h:ٕyȾJ>N6-lk˒јW*¶ǤSk 9/M wi|?_ϋb )!=O {lVG;i9ǸF47p7{VEVc]:hQ/0yUV38wc Bc9[8߷io{9W8!+@np=]aIMEyv[f.^E?c h Ed}w9 bb$"`#IQ%\c $e>XQ")3fe+dɿb1i)&ĽwSScPY,:4$͌ܝ‚n/`pDNBgcU ]ɿgl#uge#ʦ I$B@@]-NKems2+K|ˠ9U0i@_OX'Ŵ,wca{y+$Hɑ7xF#f7)Iq2P#is2;|Y.Ƽ&DUE(]졶C?G$>;ʆz"!SUYm\c4^ cc=z<*`U0CL*;uk7۩L`pvĠڞΘ'l$D➞XşgF~O J?8hݸ\+F\ݼ S3IFGH1ҵld8nG$qHalyV}o)XD H'Anzr}~R- C?g92 t8hGǰ:ܓ\xW!v1 FXQbs-se9s!t֚+cU4A@`' Eo1 `rlR0DFdH,!B p$z%~+`yu&鱂19yֱ=j tC7 Hq ` ]lV^Gt)c /6 v; m^<]s%`v/ r0fF1 '@ΰ6@3'yY= izoM>$i,(H+6]{KYlfӁ7@" ~@%f6-ܥl(S{/EFeBN VY2?8#Njz{͆&c8tĎR#iȱQ"3zI+KzsIr3 $5)SFcoM)mcګ $qJSIs$WОV) kbjQF4 FyXoֽdh2Rϳ%635=s6 `ۗH1zUoj]4}ug[dxEn5V.]7f8N:kNNkB}1H(֯"D2ӬǔH1Ћ\"A8!5 #9"5|oݍxa=0ЭM(9Y\iTxpSoJҸc#FL.L13$"OJ*H~6JK4pTpq336ZiG,xOW\V]=Y3PM҄idMR#huAbh?NQ^1M ozq݀# ~q$!ug';Gs!`EO1csnRm # 'cŒW% 2:sv* P=1FUI,]OA{wJBpj- >:R'6&]g4 ]sH r}2!331#5{)n9 2aM[!@֖K:}VyW8SYbGju³TYїB#J0 ~ps,"M!;ZɅ5T#G^x$ }4D*o*+g }M6Kp+ TaUut=>gO|Odg: XA cUL '"JYfBzT4΃8Ph`%.v)Iy`V2uQ9offOO[ 9HA3RtNߍ['K"wMj j7 R"3@8}3?kP@UȔXtRuM<U]|ABeg70iD5ʹe԰{YjU7p T+?8SE7,72?2lkq>w U'Di"^?a <>?u?4`0񻟃ջY${ԵCSs'S)%wXߎ?;#kϣeLpן;IɈ,G(CV`dۓ)5.k3A}BݡJ|7AMbb[}|4O)EڠF$eJf0dj'nO[2ՂGxg^^NvvzWSy<<]5F-]U.-?D/t{Q31jxM.4tYw#U3͒:Ma9d.O? .[E,>o{:ѐq ?tp0^du5hU)pdZj&צR4ZYP2(BcpPxTlЋHLQUU>d`oQM<׶1ܨ"Iz#`89ȁنONۮ3{R4=i`}WKZ\ڙ5]s| (5kY\ =LqKMI! dz7 ܐ [Z>ǛEzNSI % H'/k=$(E1dH@EVF$&"% C$31{UUl.>VGu/s %-“1^Sϱ"3""0AI: ٖ m鹞gSluYTFOC HRkZ 濑ʼnFɂnc=~\^'@;M'Mj79HۿdO1q:f0 q|HIj^,-}ܰf,N9+-6dd?kO-cKT' *,`pJ7L(͛g4{}lB8niT8̦sq0 D# zjSy0W2Aʉ8@ 1,5nfC56I 6:O9̀k`Thq"#>/M!X<ޅT bU,R¾4$& X7MJ:ˁR Q.KH^px]v_WK $m^5۷`uo1ç@9uCk O0BF_B!@YiJIԿ?=ߕ+YVd:82R:|nލ;HU 6Kp'pt02&f'q+Cl}(@8oL ަ{űeW[k{p~:_WY!sUsY?-Uр0 #ȄbCJئ B(s{!B!^a7ϖU@59np/]޿=; eZ(,_mzvI!}>[^d rq|& bdeVu}u[bW(He8頀M<$%F/Voʒ} 0}'9JֶZj5D ( mgnB>y*@0?}/o&_5C27\A=u:[.|뮿Hƪ,/pY)Ðh?[ݭ]7vN:{UWuPqCv Oj }x|=i{7cN;66\u5iۥ~ ]m{Ͼ|vMUS^*KI*MCuXznDvTK¦m$ZŕK_KyKU vi5܍S 0t%.9e[\͇we>/Ո&6k WWl%G "{N_3Cܵsi枧-Q6NxkC*ua1PAˉ/!H|{ej8r)-NBA'!{çx[X @>V +&䑘F qÀV rN6ugfzB2Xw]n p??= r:MЈ ֟(7(JVࡊҧ8uGt|Z𡱏PS[KZպl`l>.'Z;g>C@:,W>G &8e 'X|gxI:`(bXR,T8dp S>ޜkK&mUN4b ~,aDqTʱaIqK'yw(LN}6A6%5M}0+WH/6/rcy{7*!;7c2Nyߥ)&MvG75‡SXz*oxzWeG_i*P3\|!j+jbZrx1vaDioL"{BjƕفøXɊޠv-1ؕD -ID˖bN(K!@M'z[t&HbsGA:u&Z7[|j=6#; rFh(G敦}'5\J5K|b E`\&@>!azir$ cRg >5!Q82AGl&%@+CbީtjE[tdyt[#׽RɊ`?Z2L[΃RB,нi\6 N mn3fbBNEBkBqCBU9%L@$SyMz8懩}Tz]gz_Saq7~cK):x]LLdAA152'%d #vXNZKȠ/6#fZB3Y ,;PÿǷxPڢ]Q/9Pc Ӈ"3xç@^+÷ l0`_RIT{/ 8<5LrIqs sP Qb.݅"Jx9ն:)Ĥ\^Д :uߧ;1쬻FD?y t.s4>+ `JA@g/w!ʽAF+{&FE n"t<`#l g0f,|7TkJU{]8XtZa+2\K^jA7z'}h;YUY/aqbbrLJ?izLE,MjO̟?jedbNy`ѼYӔ_{l\*uQ:BpVCNuIF$'G=O }좱kLPbӬ^[:Cj1)SWbu-D gPW?}?pG nj܊ <fw|IbP}[| 3߼]Ib/tI&-R8P䅌)/}$P/L,2w+@4Z&Ł.z 5 }O\A=ySo;w+E,r0V_,+5k ֋S2xX6R0 2A.θ46wK%p3o+ bB, L2755EY$9ӂ@SU@6 {;PDAQ^v\[5«!KȷѪza˧!%GN^\kqϋ)Bԡ@ndS Sc~^}WB T~]} ?wǖ᫭efLPѦ ֪RXS'ڪj# :L*%@3 d]2ℒ ]wc.[,b0bTO>\#P]G%\#KdEp֍h6( `<G\$3G>wn\{wnuaڀU߸a;ES wx0C22ݺUd y'⇛7j7h][Gh3Ǝ.w^ʁbbHL :0%/q`A<8k^Kfٗs@ݺ:ӉV SD9" & S(_^`lnϪ)*^(7t\.\+_i`7K1j>{ >ԝuv!0awto!b {kR ؐPWa+ŧrL>;W^6Mh~<3-a 2sa;J C< ui;-Г>C0ۃJandx{!&7*j"8 M\@EY#gd4<0T'O^d}%ܢ&L3(h9Y*7^vƒc9)֑!5ͮgnNE_'LuzN$mogΑWM>5vܞ{?z9~==/<r:}č$"y/,:N1{gK0c3 7tU/[vxW!7 ^An:s9EHlQ !be(fGRx3僶]9HGۖiQ\In8qyWn XYNڴ3]ٴ~ ng]q}aTP4 o3~U;yh@f6]H1ߤ46; uޱ-0\47E_yt/Dbk]* (AWzϴS#˚nnv+N`(MV圙١ |U0ZU-,dqqeL&` i.=vaa ԒC'7'頨NaK>B>+>^N 8|F\kl͞mG<2sƗavP^=<{1/ĵW娤‡c2[Y"XKLLxDr\qSNRC.b&CAɺiB6 B"  יę6l BD{]Y hdha"7jh+Rʐ-awħ$6|7)Q6h-mV" DYIֻ֚M]hX/!RAk-2cF&3Fc#u5`RHd9 ٩[c+9柞&N̮\L$ԈD XjyCL.cKO%5$tV_4'}mSL;ѶxSt'"R]\kͅVDR6ml徦Cs7 5 r1a&2|CӞ<=|D@s+pa9R@)ط DkCC\xNCHw?GT>t>tق.iH-S`k͒1,+FI3,%a$C3lk֨p ppNff`H.f]qmĺ2&/z6 4yDD!OE %k~wN!OKS*WnŢ}bS٘҉չId|ؖ-E{G,!3/%2d#ފؘ_/+ ٮ l AM1>*j0͠!42}8W7gS%Ȉ e31JV8":5o9Wk^FKr7Av$ D{C1"! U)͵_m5R4h}]~Q~Ϊ!ҷf@H*ڴX P4 [BE XTc H J:/(]ةq -(=N;;pgRKlO>Bt|Sr?Ժ203+Q6q 4q@n>r;ˀiIzm}fʌhQCE d2"2/J=袯 uS0mJpk2yuR 3*HI!#$BG>xA 3:n5n:hznǪ}^4u%(/~2}0`|OlJEvy'm 2"@i4<}1ݩ 98/ epK`tqT [|TUAB<鿣ۯx_IhCIx u}~P,21U_ܳdv;OKͮ_ӖS7n gatU*?]s\NwI9 43W 4(폢$Nsʍ 7Zl5#hڒZb#d\˦Z\aҦEy{g: ~OGZ?YCEzEmz_C9M^y$e+(#lIpS]iJ٫NΜ.x&q™g= Mc峍sth;*ay@q1P} bÅJ?J_@'N˽XNۺݽd w?(LJ1I+V;e CZkGf]TCϘ 4轺_C:)OۢAyb瀞8S?ZJ"q@ OvqOvqኄ LPVzz7O=?bD؉D fr:|ySBD6 Ep$.Y2%K9-A)u 3Fs|~LfZ3:V.f? ,P3q@ڂHbD0D"`3jv3uU2P%i8n=rVѨ qe3cW J ,Pѯw&(] csc-Rx@R\8wq=rr9Lz<_uj7"V8U 4pl~k 30>ϪVZ`dy#'yy,,k|F:qAB`ʙn>u4瞪=uW7Ww{xȯ 9<IKOivHr@MBPx^9vJYv 2=5فijoֽjףvυlegzutYu No$K'pw,Zn)ID/ʏVx7gn6|+~,l$({`>?O f 0,Bh9-tI YH۰6MY>SJ[ϷΈЍMv9}/gO{y75w M7R'דu+>7c B4<[6nkwrchӷD@a_ SE@5 03(U>7e<^Z8b@IEz2wYv34:#amJ@}#Ú<B%M-}xÖ*c ^5(`i0\s t0*nx] g.)n`r]]=+o_ay(9kV]y2eDe DtٿwGw%۾$+K @[Bl/W/.})<h]\ymqS&L&Fz<0q0 rĀ ^R=29.!48|4onµfbD;t+1@ |X\=>BV+0b&#`WK& PΞyH2}؎kWwTEH0q1ދv)d`{)c DŽ6]pZwBwrAeLY- vM{*szZ@YD>G ī ff`ז=eav{GڔV,D!C5g!v>?f4Ӛ->Md쪤(I>.qɚP|~ ;L@L~14cDМ@%Xn n@Ƈ9X7b (4F|q;P!ocI7ұӱ=՟N{ֆVg9ݔKYZt@]{VIg&=Xtulac F͝׳gԯ ܦk}N^0=l*^c' u>LN%SuoבY99Ԙͮb|dm*峯pht{F24*:^Q }65i$G‰5Q7P,QuLU˔XJ4$<<4]\8Gcƾod-PFz %U=\e*&L37Q ?rPqd{i/'Q;WR[/|>NlG.Ŭ7ty!Y<}U8Lp2O]]%6ԥgjNSw2 LZT6w33. ui Qs:0m ȳClxȆt3eV+[D[go%#2,Lqr"DD BB9f1 h+fs69}/ $)*HU֘J rUm0H30 fH`G>`=l i5I&0@&S}p}.Z 9OqG\;㳦2jʃem腶Χe lőnoxZO)X[Q Z rD㺈@$QZW?[_FTߒg wsG v޼J@@ hlƾK`z(ϷOc%j0~F^n52z >3UF@`B =80~xdۯ zUI_(EZU3# H3kE5ۚ&Q/ѳXNGP54ʑŊɥ5E[S)8kNZ~ MC`;:?߅c@=mwN{M'gx>$ `OåFd*Kp=UwOnնɗ L0}a ٥_)MqX$%R= :,iW!d+oA4#~q` D % T-b8 $8|ms\T5Vƭb}kj Dnu8"NZ 838b,tSD 2qcevp9y]~7l'zM! ̀1x،#)nO&߯!kNkpKWqSub_MfFǮ7"!oP0AqqE)t-+̤`3G,k#v8o|[NwvgenVVXeqGGpʘsk۶4_ݻXv‰ 2(HTzȭ̡l}]d$f0XpƝJ jq Ŝ{Xk7VC֍`LTH 20-=\7tigd7ݜO(j1;l_]gQ 塩L1~EdBkScB[^c:k^&.^bJ>AB(6Dqo^qXv"xf|aBoR7{ 5P|(#"@-UQU TR177(ˆ<8 4jP5LӭMh'# dmlրBb(ŢPo#qߟ1>PSrmH΂ܱfqыÆ"VMȯF2HˀU3:qM 9-{L~f@~4~=.,q'~E2 Mh0bݒ[ H'1IyVJX;$S MX:Y,QI_8ar;q7` # 0Z|56WTXγRX5ӞknT2]b !P쬂y@8{1بIu>ecKn揊<})|8ETɡ6:oͦqs0ŴqhjZXE~yH=3>V1qkʬ @G QM/Xv٢F i uu|q;ӓ]w:)fαR.m>RX>`yKh#HA"Bc2( ޥ\պΞOknrYxhpMw-Zl+}#d1B0@-d*O cn6A⑓\`u=Z*u o5b BΝ犯O|4{E,ÕI MQ[vB!+V [t}&Bg@d26A`B##_:>6>9w5t8o_s5l>2+u-f3IX%ʮo4.uɜS(_'ai{\̀ |rT b @gvvwl0j7u%p~Y/)9_퉐I/Pqq2\xcX0#J@u(%V3_YV3ގ>gdE@غa&Xe t!or^G_Vv2x_?="!;1lY+E)AlW[SڜtRgwɋo6s `ksgGi TPH, P(JX ,<{0^wV=BCh<2ؠ(C9ƾwJxVNH`DŽE-hy&jp XO/Od !&(aP%-FUs:^?[kcaYs\l檮s3OGQ]bKQťte2POX1Da3 {˜L0j2M^*bE$V5TCPY( " ((r # ;4I7c]Uf۫\(տm `qn[ȢwJX I5$$jEӎ~!}ֆpF!4LnjCýV3꧐@@x PZd6t!>O}oD$U|PXFH$'`|pɦH$TDdJZE VT, Z `*GKM ;oWRVL% YǛn޴{Y,^ fOu}~nNX@4D&@ A `}o{>gڎMZq]\) 9AhU (EU%E*!"hd@ /k{.'źڍN?2d:tZ.e6s:ϒ}h}ʝn Ԍ`;#ݴXT,>ʂ"1P^AJK& Aܭs]NyPڨ(`" Ҡ,D)*g^ƁE4[o?20A.zRЬ)+Gl涡l;M"cU@Y;W%- !Mm֞N R9p\g8%y15l/"iNaJ~G:8̝Lh٬mi~n ^IMn5 F@a!D"Eh6^G{tk)!{9p3=_gaQ=s:jhYrR63=5a6^5F uD䗃FF 4D `rZpc#{u2vWYdQLh%wBunOX"[eB}8̾//HDDE+(X1F1F&f'51XFcl{ݷSt2 &+!]:p)u2Vm1!}tѢ3A10\x f=cbBYQū9ZLSlJk窷Hy˵w$Gh [ 2?ZOE?}{.FiRw\W%=ec[mtkcr2ydyU[RӛS-Xu?ǦhGn`"v>;ݯ;[Õn鞞N]J HH|ϒ}jtNZt]ѕziPA }U5K~BHbzk9J#W^@>]fأNJⲊmk Fb5׷sU:O/ܼ]! d: ɱS:~L0T܇}o(.QJe&H\iǫXμIkNpLvsT ȓz25-09N&2B k 4y}nbș[ZXv;aCWkxdIuHd<$"BPxg:iA+uhqe)i1p$# r#z6C,65B,.t.75d0A!ըˢIZ{g+8<+}!%+ oL03u\x?Smz|'tvNBDPA^,@"o %]BA_w14Q{9s.Cy +eƭA #Q22Q?4Oyk'5,]"O6.aza̒y/><LpMhVj*JϋX [pwW6?ܖ|~)Yn>Lv9A0m]"zRn=8$`çMN{)՛e`dvJY?O+/Ԧ&w(:oX/L2iN>j{fO}Z1)hj"b +txx)&\S3?:#xv+6R=.u<mSah+vDyyhu;}C+P7Ju!\rLɶ$dO>/W+Y7[Sw5yVsVz&Ԫ~D%&,l5W`jang4mSpev:'';?]?usRhZwOاΓBi;iE>Yo k'B~˘سDO3(OOṡ7ǖed?#&xY/=v6q1FڈaYP1Sr4XUҳ~j2Pв8R;7a&V^>edW@D9Xo/cx`GNk2 Uzrb8vGik:p'yRZ:UD~e2-ǡp;ySe2Qc#0;&>/WtO^Oջ1 I2mTIG=p8USg8Kʕ:YVK*m #56_1y> ( ꒫ugr6έ4&{\|)|^~&"CU᱿W !ccC8pJ>㶮ܔmߝ}+槺_ᇏk#II$IEqSe$eq'%=+cQK_a9.`O)LDxIb GVl:5uqTL ]ƝZ7`11X>fFf70 y~HDEmC?,i{zkZƧ 31(%Lhhf\QJX4itMPve`vrVq NJh<` f-Klǝ&Ph<Hs"nSM'2gqdt}47y|tܲaY}zC?Y]5#&԰A̰&i8hZ- {pnQ}x^Kz;F@@v6A=C-} =n|v~M.1$hVPsߗcak|>۟-Rѯxx4 ΌUODzVb L*-6L]0`ar]67twΞm?B>'cxڙ,$|R Pf{ cF44I\)ZwwS3sgxS*PIpjpm>כ'&4H VÅ'_.=8#Aj00=E+s S'(iZ[6bfwKKA=2 엉߮P *EsFALmT2PܳV))icTW8UgAJN$k|̹|Lp:w|*,%PH4FCLaBi9z)/;E Mg0#>~}u^1İl,{.y 2f!ɚrIrA%D-)#$}ƫI~e}_Fc|žzw*,Qk}_LC,1p J۵CrRL_H]n8 9 u9[uecWVܹ lG뫨iR:TXUA<y" s*FDAQOHTm-̯zhd,?kWY/jf`FV2U n75.=Twyu]oG,( #LTk\݂J @xƜneČӸE=DGQ21"8 YܣuI~K$ \h"ֽOSŃ_=2 D+ ɀI b r8; QlT1s{}Go{׾梳g-8E;qw&4BR,PBl"XHHΉaL] QTTSw50sS w0(0Oˁ6y&UK-Oۮ lo[PFdtrivOBCд^l^cwAAS\יHЖ? V6l`D$ry}KҭIpk2ΰlc̉_A漌!02zᾯ+CUCDr3D߯g:~vO+ a`޲̄5o[3nƂmDIt8i5&N\Ѳ3~{#>%'~vz>sZOG:;eO;,RT . .ǭX͊y,.I;VO`"YX]lX/l&+VkfёcY%KJVDш|$]-MV"$L'b9lA40%,L@" 22Ȉ yiݝ!%_>x>T˺w7XHzq|?kڅN,mK7-6ժ7YEAEB AH,XU",XAE((ċV@UEXDH"(  ϳPC01`˺Wm2"E NmO2T۵ m;-Cv[v8ڲ`B/0Zvh1t_%+ԌcLQkmX_ W 8?܈~}1#"1c$27H多p2|fpࣁƹL7g&q*E aỬKL˭I ;r] fp 1ɳ%@ 8\&@8"Z@&H4v].c9W@lޅ۷L).d@lA3;spZ 22=Nӓ7FCFW0CRW4]&j"7,E 3{awټZ秬 t>Ú: #jj8Vao?kI; ,yqs'@ `FwF7oW_27wN9θGO=BI~)o iR6s}5 m^e^~dϣHksuAʮ!]6݌rr0""!!) >|>Nw76Ong8RD b# F S)ǗE?gAh.e\w{TR#9"1LًfP"?CnT?aRiSOʆZerqxa]NyV^妝q h>M܍y1wAV8љ!@!QЛZK)ҸU~jh:Y8Frz|uJR!=l m=П~|nng=W;Ds"~מnS}o}}+6w~|ȟCܯ?誺?è>#6 o)c_1'KZ_.^~Un: I]-m܈}c!X4sX,D**Gojn+g[]QRVmK_~k]_yUUEҚE{jl2VYTTaqvV{<|DZU6)*.m+/tXjK[k<qEuoC?iiii9qfʕ{aXGqu__u_]Y55]^\ʴ7sn-a[[VVVVV^Ͷ{YX~U# Z]ZZPYX_NW]^/,T4++M D˗Xi)VU8kWvs3 E :b\Rⱔ|=/ q2 m*+_yu]]]]\.X\]]b_`W]LVVkpV.k\\;]yq_]eMMMUUT=ME j٘[LT  ںgggg8K++) T2[aVVcea1늦UUV.qWU56VUXڼբrh[WWckeco+g'n.BX^Xq???i;;g:eegqca;__}ayawCy<f/,lp&Ͳeed*͸YM²7kcopwuѣV[ []mumzm]]SVLiٟuqk{l#˙sz=gaM$~}?i;&{{흟WJRX2:i[}}o]__c ez} Eoo[ 20xA8o5Әs- *stMXrfperꦤM\Ț(:7^ S"3]}/tQX51O J˿ټ*/#~sϗj#ye:XSSY9g~_t߿a*t QF{KKu.Q>CBJGOD}1 #OI)wFo"9tTSk#͑"4YfL2$!LUD80$@zzLIS%JM.$aʦ.E*Ht͉6zzr\mʑ; 9mBz-ȳ&G{HxK"R6n'7/-7exW b9 %4EؤuE2&槳~#QtI>rCg {SwFw_+޽~q]J]> ɬﵰ6c{R;G?Wے#Nj8m}WYX].[;G:o?p;ov;?mCNj|@-y[HTᇛۤ$=#|e*S$aOc~Wcn;R/cFjdc/H- #n#=5?COvgJW'2 1;LwS܎}]wXgٕbV˝_YvZƝʜ}i/x?{sܚ3#Ϟ~Z čZ{Fy|9]?:?d>+oxo=+NkO{(Xw>q[)|;9{7q5O0, (HBb00~&u߭ geuU>˖(6_m]@g7Er^W“*>*߭km`^e}ܣ?{y߶qt7-/sN- ȞfvղHTfĤFajZ_]=2)]6&Oyo|gzÍSY:l!~;Nvbרz?;gqٯP;Oc~񟑭c|J/C=j#zSy~àvy+5о^ݑ~K(9R\Y]_f_5_r/?/{qW?g:EwCV>g{99? ̭mi_sD;U2xs~sE)u9[u=andΏ<}? kuxhshi3DB`XDˮ5XJe 4Hyl<=5Bݒ;LF1U\KqS{PߒJRʉ\YkYT8y`d21۱y\豆}WHIv6L; d#Ŧm*?<}w'괩w=!31˂_L vE)0J'<%Z $h0vՑܑՎs] ]!yrF`FDET @I E@ {DZ㐈gM FGSz*Z^1?.C"jBä"m5-ƍ+%[2 X,!hR(X?sz] j?rC:Y!tKBK0"X0H +ŋ+X."h"(iB57D܎FZ߆x8;>~p> qP I5 J6ߞsmhDžڸ<u^oK>uy勷X_oqgr݇K_T݃vv5_Z:DuRs׺zui.@'?:4MiQyek}zl_W +ctoyO8vFDvE|5CbΣ u(f-W>}ocyg~̉U0>Z]r|_vWߍЩȋv-\,n#~lZ-W!~{N\6Ju]ڲ"MBF I3>kS,%:ݛF?"Q [yGnVBpp$ FZ]uAdB5imF)\jI (f;WR(h<~o:_5sQ|8u]>n:g-}ߍU 'ފ5^gv>g>Z#ݻ#uqfi;^x&#~=#?[i9fz7厗gOx~} =I@kI_V ]X ¶K)/;1Py횻FC_d/C{; Vۻ*ǂ- BqY]ϱpEg|B?j{5n [JnJA^U~ؔ۞C'.Ӡ}QcA[!`DqRARED5Av&٧\w0SyUĪLDC)ѝǶ6qYltz.Oœ̉1n潞E3jC!ե$" NPPJKhrսc];Zo2ۢ-JguY m1<ʶI@f{IqNJ=8"3dN6HuJ+y ^?R7ͪz{޷{lۼMgsWpp2z?_핗a/O'x>Wh-3<7QgQⰱDcev}/sN=KWgMӸ++=\^qro!1PdnûC|*_͗:&g37Aq`@~ b#A k#&ZU(x5zV+ f$ !?Ϸjj͛L/11<{F|O5M' THH1dk:5,.xq>q4I;Nins|=!T[:L|}XDjAEz5]0zh8ODfwcew?Vd߆wL.ZF= K IS0a/?KPypIVJ*@d GM?"ce:n᠍=M܂\x鶧T|ޔoʠCg51|6بvRhjox,-m,)"Cu5dbt96 xtJ8az@vnԂ@yȹs%/DNG\˒Md %ca$doRsb`(UY5֙tAH ]0z`MèC>ᤓU $vI_z׷wqCџۀ@}g#E&2Px|1l*w {:x! +Plais]8:~Bő)b*?{st? p[f|S뜉 9$hiq94 ߓ›P kYk!)eV2bwG.{ 1o:.::'Q C}Fk%ZA4s8B\q[GWac 8 ($G`\vW1V9C bPH#4ou^]/P qs'E6 wS1Mnc^mc^açOe8|APIA$QVA@$DFA6(WJ@Ba;#,`dTv O.~=] jgA)\P,V0f*hns0(?l$h(_!pqY^K'J{>-]gP'>l}ӎWy [DD$עdoD`uҦP2LJ<+<eæxP!gj?'ڽK=LZ2W)&]/gQ,ՍsU& =6gY-8(F qL}<7zZ!yN(Nr)"}{myLJ!Zz6t9kτ\j$F; ڥ˄@ ̣h'}_UMۅb F`Ʀ"o$A!iR5 "ecY̰ʜa}n/СR S_pggg+6IZgY6 wLljy?bOLi#"ynǫt;qv{I.; n,ѳ~j m:W vlp3 @} ` :[7olmvɄ?3^mQT_0!Y""H]w㲓8t}^nFf vd@sxs_å^-) lB=j@E`#:+ A*F@Y FCX6nɴ!{Mʚɘ~6^X q!V,Q1]XFou~Rݔdɓ'ỉZֲr=kSHqЂiG0nYWSAA$OC?Q@IE DD$d$QPI UIdE@$X@a AdHDPPRE$$*Qd "JZg ȇsZWHEL/PJD=Ln?ʖ8PÇJfpXLYfo.Ƃ(rdHX(bCĊb\iR:7KܳoVL]gl冸0nj"*Betp9qɺjO ((@DD>p& t".afS2qـ陫h0e 6D@9$PՀi&&BAmXQVTi(/E1Q*L7Pւ7U jS"i3P% BV 45V˧>˼ԯ qkBUdmXF & N;Ya-{oGю74[47M&SL4Q۹)V ե6Ԍc;9.G.Wx77ͦ48m|y#%]jxZF%gh12+y0B<sP$y(V6 RX7DK5SU@:Ϊ"_==dX5O,6&BlvMO8%j0_\|ZǥÍ ~=o{] mqYi1yGv2UHCN-cm, +KugQޕ01QZkn I" ,rNXNH1!;niwϱ(ۿ_麤113יFHe\lIꪪ=M{Z4dƍ OP 9Plfލ秣u6V1˘y 6H( Pem ɜ#_uic uoiܟo߼`aJW$똹Q|vMam ̖+\.pm9ɡETՐ?ް7ܹzzv|wC}xtr:?Ql]os3-#ؔEE $,hBV11"05̉=W)8t@Yɡv^HXV;w" H)$P EP d@BD$D$Ad$R@ ބbD`J{[\7S#cK? P a6b18 s!=,^_GQVP!O/sLℬ PJ8XZ懓gI<à8vr86K0^ek0T!tr@Ks|eTDu6S9YՕ}iyrjt:#vujB1P,d( ȉ#B~>~t.7p%Y`iOA{vˎS\qy96p@#jsHI|9Kl[jJ!9T#kQt[Y"bJc%I1TRUX,Ȗ]$!s ͼ?ngGbl`!Xcf]aUD"@ ~[um=I콷|{7]:vx;|K j[.M<`'U^~>rZ4b;zJp@ D'5)+"~Q![,RK3}[W\;tP6t4[ /íVb[n)7b.>Jz6N4Irn=?ze`dybs.D -A#9]ҦO*sW_qE3SPdƅˁD'4WdQ8|J%x_ga4!p?ޏ|1>F>B_3nP!Ƨgz?Ð  >wg[Ut='BZԡDMJ fl*2@4τv]|UCPY)(>H-AP*g:~X:M x@f-*xS6;LCh$6N'huB{ QsJಱP0A\R)G1֠ԾO@Bwe>9ܠA""ߎ;FdI$H}Gk|S7M,gz/m.](BM@:TԠɻAڗᵍn#E~&h摇|yʏ*~~w%ޠ JA0TZyURϷ)^ڕ< Gj@w?l>tA*s!jQ1/ ("'׮H`T#ZvA7HAмWWSd`#]P`iJ V+#lHAI1T  ,FEDC8Y 0Yʨ•[G~>m~ E|4~?N\;KN\ޠ ;~@H|<3 }^ <# Sgju@ߌ(]s NIÝ_E_ë><uE5iڎBk/L~\ cgd$Uc,dy{=+ s݂;dr`}gNȍC;i;8:):@Z`GR'MƁÉ^7{/g4;ijY$vi uN>?_+>q 2"pW: )e8$(, kd 8fR領vʮj041ujh`@z@5!nfYvEyV(2-Aa%z֒ۮx7^IKa.l7v0zFop՚Ci] (h0/%5[Ʈ19]ŸfHmf/ rN2 3M@ h RLᒼ#L˧\$Ɗ:@GvHw-!19՚HkGΥܓqt$!t[b4BFm1+$ fe$K)&(GR"\d.BVMBZ$h@ճ-Y fC5@YuISVHP][Hf$:!딙fYJD+QAnZɃD9DTFBñ8zfOOe P4>mB)jquCsol0ywE`wqjxŌt'9=&f":q@`+)t 8F޻!_W+tp=Ι 3{6쿺Grt6#:a#/z-Vq`ޛcKG`z&!hs͞ ~s^ٻ$f@m)F"-] hM\PBD[@G^MN#$ b~HLn&ͭ4$ɩHjkB-6is@ 2LI8tVkFR6cLS737Eosk2Z\+"V?L͓VtwWVz!,aUF*+l-k^CNw8T3f1ݷ^g0I`e u1B4 k#)d2(,e@(!) lj4Bow-*Q^(at&لqje1‰E%uNrk[NI2ia3TB*4\,FiILJAn(4Rc3un- QjX4C 5}7jܱݶZ ?Wa9 "89=kyt}kZ MtYz]_$,,ßS0#LeLߡ1&!siq4~-·b[t5zڟz7'' Se]B Xp"X,0Cv:naץ55?Ms6ˌ+%)P]-MRɓZ5 yhac#6f֫~bTlS#u,Ye4 Q2}JWJ|**H2ȯD[*͒m.x4&kb$]ZT'${H"H+ ") "ȲHB"Fdr\F"P*j5 *ۈ\DLsӉ5|x[IyD&h0EJ4=/].[bdȌ8 ˽A>tRͺm{t-g\ .OjO6ݹ=-O T?ZilcHelBI_# 'q8-T%YٔɊBXX%ntZ6f+z Ne;Mv(`"1w&4{6S8o@gcoFgG?%vKYrơ9iXtܠ{8M8B"*^b}?mد;o:zJt bIeJdh2 Hv#W##!t,&W8%PK }^9|=1˜9zx2CG&%m@ |8 ̨ W0T='Iz̾!#Q 4 0HZUIaCtz4L$\.#k{`q"Rt驩$ eޠ!$H(*A LMJG&J% P:6SM)"8d2 8 qѹCbd.cap:Yt(u,KxnrQĔݙ:ZYf]4rјѕX6*ԮunU2LUL)j&t>72`+QA%Xi,D:<ݲj!Iam}yGtBģj'j?v|='x{׌1~*ZydCsf Wk%qu܌tI_Dz=o?7 PB յ+QOBֲwڭCzwD+̤RQ{VG_I{Wt= L@~?/ZwAT"U PU(XŐTb ",X  U'1*ŐPQVEF,UH) THE)PYH)ȲAH #XEH,F(AHE1`( *AAH$D@E@Ec ,$U EȢ**Q( "dY*b,Da,YED9HF@BV'9??ku5P]RW+I#UU?f ,ZNqoD5Q<:u>vQ(ٮJJ/)HI:bfM`k(y?EEg(lCvJztR ',^ۥ{8A~T6<V_]`}U" OOUT>C8;w=6HA{>͞uP$1`|/Mo7S/Ioql9YPAAE+AUdQ" $QUPb(PQdHHIAz΢ǜk0v^Eϫw)M7qAۤWgحx~.sYxwXMk@ѾS7.[E)qze7j`}]'!|_Nk(߸tz']vyK D7rTu~fy˂̩:3wy;Kp8>G[AӇzW)㐰RXVUթPDwO9]NK2(+ǗfųV`IO.Ig듧'SBHhXbxY*J>g!A#~E͎V$$0zi u/ CԸm"ĵ&VgL|Y^ۤE+\q-V4`?p lf5[m~Q&L= nsz) }}ӛ߿=-%R50Xx!'Sl%g!yi>1<B *v}A_ɵHI"&\ˏ;rY!8"`=:">,jݤ02^u 2{.8~&/ϨH1 ;Y7<OXŏZs\jWu pɦ@eQzazs>+Ʒ'^Cf.J$xl6!q9Ί7$2סXS̞\bSUGg~>S2jA[fC-5 I1sK9ľ KCG-s2`ERxPX_f0,COEC^M1Nc:H4tr+Hue5a |hOA zCï&Z*Gq7y|Я }ώԢISt 7IaBMcS}Ŧ/ V AǤ):Nl`51vgO<d߹Ѳݛj`t~t3-G}[v|L`2!Q?lVR*ylLK㑃v_D*^b(5؋$D @_"VIfo ޸}i y{r~$ч{? pd5[ L X_rVHk6$NRGں<*@?6X2ہ>{_S<+P{|I)se3h`y II@lxRUgBP0s, '})c[~R;m}cܹ1wb$]~jN|>GKQ nbz>U܍`h~}%2rk*}Lϱd'@ov8Ko7є3 hH^0f"hH ->Zk݈^60<C]t Y)zz$@tۼ`6_T?7ݳZ ~GTu4QE ;dGg.ˉk-οw;e JbO@ ʲ#H:DU 6R8]#L^C:p A2ziOl1Ҽ{fu( c7{X$.daf leǀ/}T21>0`},\z?D\ zş;ÿ́ݑ4?3\D氘pNr2жT B'Ri>>CXm_Ұ;k7ν>=)Gd1chx¥(ńwZ[ ʇ_"uu-J p hx.G߻X_mϑ]8z1yECǧ8\C<žY8ӏ3x@Q0S/;| u\!jG{a VjXwG=R2⏡V)٘ P./ ֖;6dUO!3[_'.=las2K%{~P9ǣkcrvr}r|Pm)"QA㨕ť7wDfaMLFn ";[q.k@cKd'̙Q*@d Hd/{L=`O9q0 M2:|?J ٧i13?܂x¶zR}hUGV,9bC5[c﹣Q~F!W}~~C@ǒžQ =od|rc<7w )NCD@ʘ0is ^v1y7&%C alXŘ0Yu3ڗ٤vhH0fqC#M@}&uCeK MGf'̮ -9 %M젼e}rF$g&UÏ X<5YFvٙ#%-K5[¸gjU xnDx;Ɨ{%`a;}'H=T =Kk4u]̟u<? 9{G/*3X'Jakf%İM C =Xּz[ޓKclЭz' (gy\G /wRnHڹx_-vm%.-K^vH sܞ@CP@u˯Zm7Ntӿ-2LC ņR;;&7)0Pp/_qM q8y?^ó?W%=j)%PsGqV  asd:1Hҧd{Z31yd-2jJdcЫz k`:gIx<}(& `AA)egUy>Sa=|yFEeX^^7cs'!_9g'큪XKђ4:ӽp4lqP4b7=|2#A3С?'1*]b4Ԋ 75RpP!oљ{%bz(jپwü`%0˔I%7FVTg7Grc=菋6RS%Ef;=iX(,Ӿ BG>ѩWڷuhJa ۫~:̒12+u QtE"eb_QVk㑁_~D4,AI~Cg2iHI6tTaSTOM(@1qAJlil꿟DGDAA;DKԾfU@?ũ2U U?F(UU }!$XX (cOm0EX?NZr*_1UYCLU`HStl6DV 2e `X@Y1@{^4n0dXǽI͢by.?Ep;Fc! @uCTʈBB"[i^]/#>1f*_󰭖O^TH[yTnݹ|tZ TMDVhc+Ty&^CrƷj R?&f[v<I~_\Nĥdy D=t2t$b9E*ߚSEwilQ|kǴ[L(qOŃ0ֿ;IWrnqCsLJ)U& P{_8ۏᆨ!$H *q@͢=ƶ>Q1Z/BH1t TO`;QDO9'޷7f6g|}'fOJ,~ɂL,H2Q5NO~;/ԣmNo{)t3AK~H?kȇ% Uj?O,? 1aYQtEdCT,`~X8A&3eH$%Q̵҉ "jk(?XR_ #29pfY{Vt]=K .Cńxd$-G7??P x9: ?  f6u pZX)ҡY,H\kaK{MZa^ˣvK5SSΐ ѷh ~~ R~5]j|wH YZnB|׫GVI$O_-t}q;Fڏo Z~β*ԕ0k׸#Dse )mBb"c*td%CZ*`r@p3^sԓI3`;1IarkX)A2Mzĉ»soM'Y`_ @TzsBIU5̫>imd#f3jq63wTAe<ѝXI@:@28M0]>>k,s׵ھ|ٴoUӥ" 2:|X!qSE?FS<V6n}߮^|gկZQWx0{'TGbw[.nVG6Z6_$AP"N::"Ii @@dFAl(V?_4" 'o«!ڶu"s_笯ي3])ou0y"lp 8R.B (m8y|hq H=:1 ۓȘo"rb2_cP-fO4~m`FD:8 %׉¾&ܕQ!0D˪ZeEE>$׫dOdb p>:\rk>$* R NzB`q:99[P1_j>yFr cܨb,?nP6RL̈́fKzIJh KVǖƓJ&܅.oMrA~{ws w wE9.8خ;ni=7Ah '5tCӔ(2q*fZZ.8a@{j]$M GdߞvTCwBCGd7@ǧA(E:rSÌa8ΨȥtL>|<~n4WٺY6FB'9)$H{!bԇVT:hyd5j:<{F|S?0cFg(-t21Ĝ}# H|wXDfCCCiAq[T D C:U~,s8,G%@'ctx+I-zT׎7&6;pw8=qqnZD2(è޼}X5?  { 79/P- c;ᙲFRn ̹ƞXa 󯀁O!K}@쑆P"qw|^=qthǷgG]}M) 3ƞ5_ K=!$ʧ?]N4GtGsIn_.k-nV|y2(@4 hy(LF)عeכ] ܞd ͆axzӪCe4܂I;ejf.<3(;kWqis|W ub|s}>N9[3!#L6)Gn Tu*Ήݡ=\*LF&3m1^ WN_hz}V+Ru~+CE/T>&2Yq29;m1{ X>* yj_c81>mRplz&کw^{ʱ'$//Š gP7m& E|55bn?Y;[s6"ii\ AG(wZX^;1 @C ە,B T NWTNtЩGǔrM$^*rr0fW0v,1Rws뷿8M xX\ ȑ+ǫzi/u?8";.z+2P()^G d햐[KɌhGsB ̨pT=s7%#B/TFKg^}cӥ"%V%q $Q^=x^YוA/STڂejθ='_QgSR*Pr_a6CZxXO{aV~YÍO+ګ ݟgCB%@HL2_ vuq}.Dp@U?_OZoIODӢp\&ItQA\]܁ ϧQ$tv5LR,?W*Sxv=x(,2,ǀJ>;6rNZ&bCo<ỲS )VpGK oDž*=8oB2>W83 ;璩t eb;wq٧޴ 0  UC1&2OֲIބ&Qa _BkT$ e ߒuLg6HDS{'ԅ][У/MF;LG:`z@{$צP Th]@ aYU. =^̱73PA_Y +Ҍj+JkI :#a5ؔHAlhx=,:# dubhx];7\;DLPG$‘w[]@ G~OGz_c3||Fe|eq+uvF7jqrcQ^X'@HP#QUf~TČ>jם.sYI$l:i{GZ s7I4s'$탗{Ռi 9^zzդuڹFэaR0htXq$>y' ڛ<(I<9<.@đxd/ՠ}Ƃ{&%c?Mru(4@BScTV}S` B"%{&&hu\UД'[<"m>s̻GO|eSaz: AV7~F$*b1 p{cps 8`MsӳleU#Ʒ'N>tp1MgP+u6w5lmƢ}h(8 #[(`QpsL:dÕv%?-Јkm] ~ٟS6QQim Ơxåw~}=BRq(JJSXC` aC}Eq1?CȥNxHP:7L@]"mNvmN. (_gjK 1)*(q\@8 UOgsW9Kr%1'395Hf 1"f3^;p'8sA];G?&$e+8r YA&ÄTMA76TI !j@97V1- iѲ+ɤ6Ψۮu4> N5uڨz?.3(/_L)WS`k.'GAJDj _xw^%mZ|($~"DNI2C0#1~Fry `@j)-l~{xҳE6dӨm֑>84D?Kg.e+ZkhH;E~W[XwU._;/b&=CoWШ-k{iy81b|xK1PUzKy=׍@fAQ7v@\o ~=c2$c6/rAGasl6U^>e }̍knۏ>qea$!i/<ʲZDɫZlj 56ɭٴ0/7BF4XfaD”QQEIP2z0Nȁna+PR)mik&p#*Fߩ@Ҍ߃6;o-4k>ˌnJ+7jիV}ԙoQNd&,9bzy`uS÷~:~*M>aӇxtjsn@F 4:n& !𤠑’zkD!?_ t*@Лvq̢)@9#oʜݠ g90 B?BŢp60d8J&W|-7_Uzt'_)yOz? 7Dc.B#ݫ3o%g KȫVm ];[ߗ Kҏ;Ww_7Ѳ*W8\sj$I}],3yߜpO!)$2I9op}MH4-5|]-%n93$r|GE*4Y׸MF 榮2AwU~kRlD/ϥ vl.,f R* fĀ#dȍ=*Zi6fnڟnJqz_#eS?l'AQkT}T-hal/>U0}?Z O(]f$m\'1{x_N'qwݥ:/cj";s7:р!0Xo`,wa-0/مmbOgōt+:Ur&A*Á0 kZr%0yfU0OpXħbHz?[Q_lO?Xr:G1mU8E.ɶ;M9?U'ALd1EGCVo7ͷElpD,)y֫P6_J2(T7nnfsfuO)MGx|p8L'-8Yќh] rܹB;iQN$C(@JJOKf] Li4z=I0)ʤ0fg, n1}TX=Fv 2^ٟ0@"6&jD5x=&ix|x?z{jyGy=]njbMbd/$8[[ k>ӖTXMij v^"OWW-d[Q墯xj%T;*|vI)'tϪb2 _÷0=HfqFsAlio_O{קU= "X9>^}hu[sscֻ}0J|}l}{oFmҝ_szooO;_qK0;,Z{[-]s@gi\^w[ϵ|J7C钓nmunk-R'kv^ea}4j5AAF`EP*BvS*Q U!RH;- H"AufRJU@R ]]}v‚} ѡ|5tmYP֚5ﾾR@P (4ba-Hh@=l_`Sס#Ƶλܻ)tM IQ u =}=w_ q=qۧwތ7G]T7JP6`PHU *N}/(nys>G}{rhѮpQ*T%]ͱ*@eUk>S[ٻpWswaDkK((!  /}[vx|^;wrƾ(;Kz| ^ZO|W>s;W7/oTj;}ʟoN4T5=yԂxyԡ15=( E;l= NOxL7)],L|<}B|@7[Nw b5S*Tw;O w( !{7]o]v7 X*>|xyW׸uU(*݀m{z%|>=o8+z_u{iYns9 th+`E)>GwݰC{@ HӟM6H;|] p|+_8z7[hﷺ_Yj i@N_{zGJ><[;ݺ7lܞ(W-vn>}\{Wg:*%<ǾꞞn#}o﯊7O5^< <}vݤ{Y{٫g[};qi@h`&@h2`4@4OMROSLM bz50 4 2d @& 02ɴ4کeO6ުyBd)OmM=$b&d2i4'aL#bLLS6eOSeO))LTlMGiM7"FFzP3QdM$D@!@Fъba)Ʉhښzl&IҞ= S?yOHJyCO)䞡LfD@@i2h@ i Mi @04dh jz ` ih!hɔS4O"<3S&L&M'=OSG*~xjy(DMGzQ =FP7SO?R='#z=LS?~}A;Y &wh9bkVe_# 6uȷ9eW7o{eõc#b :o,H,AETS`*0@I֨[wCGiZ-ri9}O#NN=e}L a ~?7w׀ }xe&ep4?׻tska,̔BBbR13:0|4&ql6pr}P8KP 32}#AmmljiT03Ċf(J2*4dEͨvo}1F(&'fvf7e]I (Y?"ɾiˡ(Sn`DTX*e~?>/=Ν.zoo3{T=~. fz@N{e9T`A0 d^8-dR`Lɼ" B{y?ά[Z/Sk2세-dhO{F+n(qdj.i8Y[^Q0dʨZa_ މ^ޔ:4 4\hX1j*)dgqhfLÐLB2sA|6:pyAp ΢6#hQXRB&7B`RSmPsqO)F԰5Gg'@!}W`H*Y6"⢫,zk('8uY|%(}͡EǾ}HṕCJ~*X \Q&(`{~=.+\?N%GVjZ# |-R^BMz L3+ߺ0SZ(S@A5cyg{]gq,fQsi28Da(w@JUG@!4H/ǯ&u~ZJQ$mYQԯ~fd #XbWs{~HAa[xl)vi5:'ЬoHU:wfN!NFmMlrL˦d\8p4M˲'!`'ss;uO iU浻͞=nI<9YIfjy<ߵ b Pc_{9txbpIl%A@ Cl:f& >{{C8)̷ RI%]P!ǁA앤+|QBܥ_*@FG?7 OT|Å+?W;n`V 8YbF1 U?{!a#&σQM);͞f-s>^34Z⧧7Y~4D%a=P[m5V,$ͯs^ɣ85`$oaZ  Dê s" SK]wk<0&O{3&o:eX_#Xίeq!4M߶u+ 鳚^Y 7!=pYf$<]}S8'A$GSm7dYjXOj>v` os}n֍Qm:b i0#xmȣ>24@ oX`*& ?oT`?TÄv1@8~"(FT$s1h!o)`^Wb~ Z>3b]M1Eq{~ǯ dgc]w?W?qFm?exڧ0_zTGYڬ|,A?GoݐnިCe">ioްƍy g'wu?$v2eI$O F Z^PЋb{K2yc@$&r*)I|/ᆬTx̷vkHiv$TT5ꪾW~DV;d2hnߤ<00-F( e@Pg $}ܽT*,p+QZU^Ɠ+c8FW\3ؖQB8!bL ? =ogh7WX=7;gfv=qo/v v~޳te c>JNMQz8c.JhTN,ZP?LX|(:b+:|_oå_8wOEp]g,#bQW:H)7-dd}eg{ Ba A%R?*~2^:r?'Ƕ8 GĮ-DwU%փSVGQj?]o~eUP@>Kn  57TpEhl0|py|[۔%t"L *lI1oY; d $}9U^܊qaE[}_v)X OV̻G4Iae PEb0iVR_UFi9+ Ha!)T!&j~+^7]sǤɯj?'/~S ݐ6.uwD}@]Ã{B髡JFoZ 5:-1^ \ Ms|$N?0OB6۝Pd9W7q@Z!C;.[h`"ݟAewkG#C+};#@\)(T[T]אa&-D$B #tf7GWd WIS@Qa) dU9g6qCuzgF^t }(PMC.fe.E,T+BovkkA"DR,^hCem0-b Y$`B2[~f"q 3K: {5?(׳ќ6088-4G,>m5M3: q/wqRTBd{>ɰf5 >מK8Ӵ%-.!eRA0ɠ$=O C!ARBbN@@#By3D$b R0IP`I*. /Q,U 0+Z8QSI6F],M &\2FdyǷ4HMڵY,U#FOO3eNtyPffI*AĀuBGk$š$ BVA`2]5",ɒF((đA`dA"H " H*r L٫͔MD6]RF1ჾMo 0EE"ANgf&=w$!Q5Žp".Fi$F]Heoׂ۱6p"46ȼ">>B9"YMx67-e9T*tZ39i )DR| c`)z{Yэ)3 o\p4. F>m(\FE  u~80҄V):co&5% >qOφPuMDOTM{.deVTdh /`C"^?!&9 /= ! v3e*c:k 6DAum+ lD |h^,-x0vKoUy*5E&9ǰp#!{Ӕf.NKrz+o zR!34Otŝr̽"g4{Eo@N~F񴅁DD8f2yg'δQ#PhX>l=6>4 76kՏg" SJKבcY 5 UW+Nd0A+ X' >2ulب VDIj(Vv|.GgˠNE@m;ckzz w Unj=w+}rZv6IxldZz=*HRh *;?&p+6"J VЄȫY7BT @AxR萤dEtA`0e#=-҆g?jm(j_OSc^qb= Xt/m"1tUPy'r*f%E>.?ogݜPڧlϢR[:VW6S,Bj,l1OEL^5􋅒X.gVg-GWVݨ[Rs<+&DHS)5򛬃Q,R]AngJ) }g>w0*~/ν~AA|>| -4*?w6̡?n(c86E׿Ħ 4͒q SB@kA Z*re(#c3>PZ,>~7rr~@z~7 I$AgO h!(Z Z1搴ާ(d(P?]U:;F6A_/,kd': 6`` `"ѱ4R]9dNVTH;,')I{Cl_jqtWV?QٯiqT%}C(P_{T/rB+VJ\QH!7Y&ֱ6o$7AT?єQITOJ0s@zJ,GQS*eXCA_:TzrQwN05FcW@bmVZƕjy#o/m鴤5yNjtvXgd4;9Keb;gD)O83iNOjJ ~'%pڎZҕV>X|. ?M!aUP43vx4ÆM} çN=0 ^wEK)LiQmOK>ϠQl|3lyVDꐷ;2Y44󿃊?NP?dž<R3}O P+Yg=w?x `u`'ٸ/FMV+n9G|X3<:ZOiP,[ڃ9?B8% u6eILPi"|(,,ऐ =6 YĢ:88!xϻ@|҇~3sEvHH>RQY!E=01J$t~mԤ ;;nGGWw02|uUظ1#_wAA+i_fu2Y,n. N`31ӏgr 8w59fs ۴4sS-ۙ`Di]B0UHe}2UjE^jTTbXţ^}*mV8Q!hibp`sת5 ]@Q (d2#!R>֔67 eN l2Fc( \Xxݿv8B"! p'ruh^yTݐ` q pxN\fLn)VnщU ʣ-Ƭ* `9wN cCjm/lxMsЭ{pR9DV$0< XTk?)KFdJ QyH k)aKg#>j5o#\iւ(#/`9xv|*`ψB[]^iIt ogԏTGIrp91Tw}!Fd xL %nx%d^.btgý #ߕ~ĮEC $1>#I)b] 4yTH܋}J !j.îy%n{w**T`@gpk$4F r3sƹdT=其[bw?bw-%x%\9FbcMQ &~}.vb=C)f 3ӱƂ]6ud54~kXȢiz]ד+I#.th]ծuoUMLByV.c2#EFJ(UdMݣSR뢴[8%jZyQ _CzolfHj]W1iȚ5w+@Qc_U1bPH] @%M'"2D8p88sf r-(ӨYDK_v{o #N* P:<N+#tyYi:L'# Q(4 Z֤EI:l#:m1e3b屇 Mde^`AD(h}-aiIYU A# kC&Y<ՂD C?. !̓ kŅuX9c `;?Ivfm왙r.v(nnbI3ՠ5I6q ,KAlk&YAQ`1dA'\#bjdX$"} 4l9KBNaY9*dS2IBxAt"(x^4A3zZ0),`IN u4REAQdRdX"A*EDF EUd[#HȬ"HEXX $EDb *PX#k%_}N%Kg2srmQjHH,4oa":#NĄ̄)}9x#H{!L5K0vz뷁!_m׏<zt ^FE{.TC*kժ,Z18qS6 W(Oo:B  Cwvrλh<9X{I@KE$U% "^==A*$H$0>H)xIr5 N+XHS ?!7%=:0Xl( pI" 3zJRH1dm,- f|#%T$kg/BO[C-N,%.N-Emnv<,:j!F*إOs)PɽkLPFwu+Վַkt[)(C}o\n6E^lXa pmER *$Pb$A` H(, b)$"ȫUE)H`PB)XH"(E @dIwϓl_zHBP$̣;t A F q'REUjATt9qȕR ndOf{})5Ǵ#xcA{F ,Q|o|JsG杺>A߫fwHC79[VNsԖ (yŞ4ZhJER)O @#G$xHg?u3| a8=zgOHיBn޵],Qx#u}4%/LkpZQ~?~Đ }U 2 `l33cl+#}d32 3VQge5W!\ppYYso^m.f%"\xʥϞcn6BP!X4u !/_(2 dATi#/cE2S[Z _.pm5TFgڅ@},ewE16z+,qx}_GoAb*T`H$X#g`vG[r0親Y1~j"lWylS !.#TC}O9BdɻIrAc~AEB*ɏtk:~(S-T|O59P}x#qӳ ȧ/{T8)G_[?W!EӔPh.@(s+v܇"{>^d@"+[-yB#Y_`&'WD Z '|F(AB!qRFIrvGJ3:kD7W}Yk~wse{eZR&1O|.>CѥR`=^n Qt#%ڧ=7 7;XdIE6@$U*Ŵ!gהE,gNCx nM,)Ռ ?-N$F!ZX2mK>?3Sl{9h ݗߥ˻ -šED kZW{= Sܗcw{bIܷ}Hq-ytq FRl1Qx5I;WbeI%bZ)5&~kkgT* ^/wv(ҕC+@6 Ut#xzb4 TS Y ‹7.FxF3$ 7sJFA]pmi|o Q^SR~̚=hpy/`%X$~X1g ϫdo`+7@!}:@>90Es. .(% `^U)u0Xy_^K'6=0/Toνd* S8cG# D%:U{靛5%(vr&$AH$k4p LC)xe?gB$U&;lQB<駔Qz TXr#H4Cp|tAj7H/yRGi6i)Cے(-4+v @6 dpGLI`|@ﰨQ-Wȥ[S0% CUh9PiHu~5?5P[";)KKF*ǡRCސN6w 7( YM2 v; ,iӥ_R-$N̵w^n> 4N̲VGJXX,$BBi$$$bVQJ.hBD3|ښ*A E7VOw"p0b|UB@2[C}`h %TǀH3'1zÍ)G`9Hv/Kef0pNa0`u,0 ](\&qlnZc8 JV+$2귡ag2(BF EQ  QS`LpU{S ak.qpkX])-h֤mwqoW2 @.2;ZcdEUP_&<'2~?Nʉ<`ہr3^0A"{cl5GnYt0֪TE`'D75T@\}Džot.-Ï>E2FV7;pWNe7kE)P! y_%C郈7Q_E<&MJP`(JF tk2U.Rj41/7]F)ZQBV{gcZٵOmpC G|JJll^-OT$aד2Hv콽}QN>  *CBמQ[sRExqѓ:sEFH⇏c\^0MtRn1,Oa0$;Y f(=?tK$JxI7ir!65x`j2. C>W<>r20n$QaOW=0'$g;xݞd^|{f)oZ$솀zASgnjmydDIW=5؏TcIϣYrXeXsj[|dd,Oqk 3pC߽~S 7DI46 ȃdʐVI6SÀS=)}7)RF$ޤj (b2uАG9~qrp3&$Z|&2\uS3sxpV$aE5~aDC (kqSm ÃˉX _iB([ǁ@⠆=TP%L}_K7dQTa,PȌTAV" H,|,SbAdX E$TX, "$ XQWC|$Ңc@/BB$ )y2xzOi[v΋xv~,1E@W/ l-~`s?(Y5 DI9(N2u~Ol)o0JYsǣ@p;"d^)} SiFb rz{gC6n"P5qWS_5 3(*SbRH`\ 8ny#Q}KnM{3TꝻ+HdPO=_ Ki<6t)J񱩝=hR:j0"^Ǟy>ɣ' 0 2KaF_ϻah5L7Ƥ_ЉD. AZTe[?vvW!T`}ru;XiDE /c8z,5w<xW")2Os ,H^m٠?T }oA Wd_u}m36a1آo/񷞫eg>>xӁj8sM@ZHVv.S3LYK1݁Ɨr;W+bhz`I ? P)vȊ(UHКتa󪈊d @~^7ztKC, Mr(O3yuex攑7{W[sOTE(8Xݖh?+s Hx|쨜JP3jV6NiUڝ~̈́ȼ"]_䞶/Nj~m׵;d?|DžDΏ4nI X '" ;Nl/y=h}PedA!L" 9ѓ]sB#U)YԈQ2cINTJʧ  D\z;~a0ߨi*$m9[E_@v>$ՐLåxr#$z8QT ",B(N0&̓Ra/P% rKglPYY㕝u?NQX 3qݕBal (*8(tM $d!|,vP?JTFA87EM]'~&& "XYm!XPPDEXݢ$JC8mk}%a4Pu9#"tPdM!'x]N:5ه˝}f!TeelEJ>L@*MK<2ch7GD#Q|@;w.H!lf ₓ^&=myhB1۝z9dYyYbTŤVO &CK0/שC[L4,MԧR({Z]JwI_>H Y>/ ,G3_Q8t:~F/mRDNE9 HHد$t,P%7rd@=G^HkgyA-%d\`迁& Hd "dDHo;1, 9HAn_t0תq #À $`%-j B0t KFz%"QZGݧ=!=LE;(L-Ĩc=m2ɂ2a>c^ DbFn|DY@O /*MHpJT-%&(&\j9NLP̡7 a"ڄBX1XЧc"-ǯ x6̝D9 )z 4z</4#o,g Gy:mcԏ+#m*&9s~]>:0m&s/Eg~sPu ECl" txO opz4\{!~*p݃|KQAN z\a-pMk`ڌx ?Rه^ØR>Mi1f =I1oLeB$1s[Cv4y:XeHYqGYpJ|Azo(ʝx-yпF$A ĉ`#s^"֢ɇLA{ClfT[JɎڈ>M o,C|g?KRP>^غ8 s,?9B{9s+g#f#]7;ymPpe@ל d %Uh'Yl+,O;Maf&DRBOX[/-mp$5?\ók'_ ^5xSA~KM~ I}3C+h`*2+3§ y$(c'fQ7_dY92g2&\{G #}hOEG߳І"c)B@$"g{bGd 06j㧳f˛qui4!! (tox{ɭ?!"VG2~#:( ,fWܷd;Ύ6OωmO|Mh3tU'+R=yd I@R`WzbDe>OlJ淖hsj΀V+- پ j$+*x yaG{2g/Բ߂xe}DکBA x+&0%s4* m7l8^ }=UDxX+B@9v#PJ&qd$hʹIbAtAEREPSb<ԑ.#3 ^lv) 'ʬC58RgLB%XsB O!gA] Up`qrs@{uDŽG ߌ5;RM>#bSL]YPXEhu|FM|35SW#jMy4S9 a݉q`O[3/ٸ@=Tŋ-3׾yqy-Sb_Si^a> όN>t WC&&SAW'ې([ SMG6v YZ& `ck缇'ȸےI`fZQ &PT6HCֳ`° B)UX)0@C-2eB Դ5Ϸ#4Y $!! I [dw&8A^GG9$c'6s5QGۜ=Eq3bvF'Vz&uEss0B]=5]n?|N 4k [?@lcL(&*I uXx4l,D BA %unm|-Zܮ6ۃrH` U1(NaQoNg8KW(/ Ša JPTd R w\l*p> 'A&ń6?3/)"?= ’T ~>s4XaMBCnz1"$)(H>OX$?+~(cuo,tfrnH* sduw} GK3S&F%` j\%PQҩ񘶍RL~v}?\t0CMyY\׹2. e] I?a~iGLwu zY ,8 k@<_SVn6wߓa]xO:Ċ*ο%>[" Q D߷})ٶc6>@$K=7HNt$(:L\tՅ؍ɛjRb{q"F:Hx I-^ .]0Y@!'8yeb>7@&v!Mdž@ ֑t_%(#Scc/16*s1IHbCvg] )Y/>!&IY:HT<(dtcS&v^Ps:6y>'uyeL ur\$^ 䅚Nxv!kBg36){j;|UA@K@`W)VB go|;sŔhgQ=os+0`fv/G{E=Zxd9 hJ}3XˀHKA˅"(cmY`I5bNgT\8;Ņ/onl^Z!XuB&&C_O2*pμbF1P=`I*䤤W+SA8vn sK2@P,"NHs?$ԧ>|ܩYvz7ͳr$up>@YnJa*o.ӊ'2=2ȟ"ןڹGU>)I? 4H(H(01"ar DL(2\ FW)ܑ|ؒ[>Hn ZPlH8g䛲HcxP q\%*D1W=?1_00]Ng{= k-IdϡpMlb}Q_Su+ #8 7q0sٵ@3IIĈBՂ#UN71h`zgnʨ/h(lT-UpkPҥF:*&B J}j¦C-ac/fa؝5 H.0aq8kHa3OtfH)e` d!S>qGN]jNU85aɹZgs> k{ 잮5Ch;.lև?.-q!],a*Ѡ: KdqXs^xxI@tBDd[Fr5 No FXBFڿL 1t-m`͹̀ǃ 6Jite~&,nf 6Y@@ $D2R\Ƕ,LʛY$)D օoN"AydzJ/8"ka}ahvk]߄O lr7i~Fso @+!I#FPwY6mY͂`qiyo9fL2Y@0׏r ?_"8*÷Byv$O?)7,CH> ֋" JjD bw\Ac6HGa@7C7 D fUPQ(d$_Wf?{#9Z_Ofp!B #0O"^jU2cfׂs:2pQI%"  UQ$D+w+|f D-z|gz«XH I TEE}9}.Cos/8'( '˜η0rJK-6vBRedaI,X651BqV'.Tj[tZQ֟^B(E")$YPg4 DC $Lrh JL Ɓ15JcRCo5C D^?iCхΩa!ԁyn˝d̢!'H3bVLv9EkUh>P $+vVŸ=NgI#rȌp ɔflN`!8!H(JcǏum {z̼^Fc5F&M^AINB,r&)^L"ƃ5,wlVT@c nf\T O0Nxwg=/!$c}aa$x\?aFW(!HmuEesZ]W>,!SY$B*!7"ΎEAPffӭ9am R"IGÿ||߼>~8U,U=m&\e=!%n2p(HB((EX 1E`1"`jDI_lQ/ocuh Hأ0"͘% v~FΓ(l2#ت1 , B3x`H A(3ԩQX3XΒȩj[Khc\t _*C'qDDNh*.]sǵ $E0D؜d]hQ]"Q+*8Y`7NRUػPڝ)N"YMDZ<-|z.i<$Noe``R)1KV!bk)hH)eڃ;P  (_V~/o@k -"ut|(qTHH"* EF .1 b >{eI N;ۂ2 MlW_'xt>19L# t:|LW+pgr❍qƩ8jIݦgAQֳQ' "TI/_ ]kEޤvջN,hS PHGJ6Q_\m;j-*=_6.7FM)۩ [2]e}^>$Ta bW)$dVJ#vz4[g5? [=7Δ9'}s z|=3L1.{6eFWe0-X_5v 3ᤰgk 03f3܈S `AM26׼2"Oξ}%[П$_RVz͑VC֚FBHW;,YB0d@!!D{u\D eK?*/opvm@X!l}ZsV c8=v1wv4n,Vj93`U Ӧ|5N{qXY~TFMwɺixHE fq +]3LއdNz>:CKnJ'0ZX۠lB&|"YAAy<ٗ8 #`]\OOLsiו%mhg׫,@;Kp(?h`vF4,5|U4 Bx  %fs\- їI&*|-".{}ww8`|߻Ho;Ҷ̈́cV݉ǔ[vWeWUYW  (t cfפ7Z;Qܲ4m*VQP(EddTHbQ`j_L` Y6||wϤD*RjLj: ȀkE  A}S7<*G{躈 I(Exz4MNO՞` >_oG ٓYYZ5|35GuU!PDOb84z9Ւ`CIű.&e1r9 –4}OhgmB4:<~;uW#z'OxZ,ػxtLJKXzCV+m0ak3sйK,>VhW!>J|d@X_s? շƶ85W9jVnFՎ>+Z׆2 |8$$DQkr$'fi?}@I&(Ȣ֝Z=uo㾵J8Ӝ0{F(kOƕ6`T2ӷg/s3VyC\HQ*ѕ_l4m]9X`x:.aִDM'Db)P!DS/Bx筲och M9@#>6Bf ff󓽨,V }(}g- ʨT!q|>䭟=~KoNlLt>:\% NHbc@8B\ѩH {ic|g:G ?V(f)9<ɔNv0,i6,Ђ^>q֔&6Ocg. <4!L ˰Uf& 驄"Tjj1Qg~觇_ʪZTEv C֭?Xr;r2`Om- "! Aac VsR5:j$4_-FZB5R+ "ŀETU$RH(,%_Q"ڷmopR{ X:&zفJRP3U:=fp+lP;LANCw ),(hg1A]F, Haotpn!ȭt۬.{HQ3j  @@#w)47oqsK3 @ K3811XF+YdnG_o]hE5G,$_(*>|8>y7p1g|Uo>YضA$r2C>0~S^7uR9 ΚLoyGh^*+5DjC o*3(k s>*p+kv`sAi&7he+5]S+<1])Z E;U Trgs$b-C^wsc!uO.-gc{Z콺~= :V#MtAIϼqyQ3K4.{=L3n^u2 ҫ+yӻ3,ap;2_ax@ʉqڹ3幱>f1n ~xiO;lV}<~~&O5_DaGIiirG§ؼX :2"J!10 P(u)(d3;}Kmm{{ EnHE00>\#Q)&l4 aZ]eՁ5;c7 sp'A<{4ok/We2uXAwX"X@_s/s t=ٟ_aJ9T)Kr!Tg(0 5ynVe?@(=UPUУw=XP:>sz2ݬ%}i?҃dJmq!47V9atz3N2gR 1ў<1TuDdzr7u8k.²{DDPP5W+=2"DkHYؽ {TBKq]kM'sINnblEB=6ƱZ:$%FD_/4^לDPTB)CYTBfl>\MTJN\y#U@s2m|L~3ƘP;[@+$ut{ANxl:d>@3YȟI`!C9ʿȼe5ܼdюh2_U좏N}'A%|Yɐ9@/r|ֱ~'Mgg- ^KT^C(LA M45q[QҞ@H"*Df+pfYjϯybV LaT5by{mC*N*C_d]?Ldp\1=#ЃZ^ݮر_P!˴)v) ;W pJ5 @(\``ws/B 6l,eћjxy49OY¼eQ]FlVe6K:J=/oG)_Fz{ іMh'>wVl/!h(հ4oҫq$QYmR|)U$##  P$a ( (H(O!v"3^.?ԅ+{q' | E*IO։ր>ǎe o9DzMi/hGy*9kLfޜԍzmV$L|6E-ID%@*xdd<V1 Ԝ3HKN [g4{zI*D2*nwVemE{V] H>7*:^`%<M^~yTL.XzѫĴh eb@[b7.Ual,_c[X;I+y&l8-"Z&;Gmm Ē@>"  xw]fOJ>E3oY&#!,!`9AfznSmt&p !eV-(:N=pXO{ !YA")%i\ꮆ +Ϲ"J )kW pbM! `ZC^d^ 5*X,OsRÒsJL4QJYDd:Hwa[/uHCH.p<")Pg:akUmAG!R6GЋ/_ɏi(Mq$*`"[4NqލV볿Ih>B/3mWP X5;ͻCɈ/Y4lX=ҌI'VvbQЊ9fWē^xrgT懂$ZI֭*V+IE ]/ KP!! LH (H+/kESeD QUHXOA폇?~H71l(z[Dd?yZQDX9neUUG 0"W!RW{.&PW6kϋLYƝ\1ӂ,6GŽoCs+. \oUTdOh Q=@Yr>0ڍ.- 2B+@6ɩP%ED_I!D(" JS+,!It9kV9M.84y>heu;ɑi5S)y8A%k s݁[S8ÃWֽ)NS0j,$##Cg҂A, {qRo#O(˺t-5f(h8}JMs$Wlٰ1:}C6лri5d5O[ w.jPBR中_όs’>+Dr$0P?%9]xܶguZ!-ݖa6ECF>gT>-W J>=P4\Bw2=lSݸ'qTVγŲS=lm\l4E Ǹү.mXH*E)rV\EMJV @$"[, sGC6!VUZ]DQB7J.gUɦ KF߳-=ïq }x%q2s>mI!M̂/e{Ƞ͎Ir-fIR<%D꭛90~ r:ɏF-RxsG> $ t@f+[ԊTp,*BG6u7wX ~e^:{Ȇr0UA"8߼ux8.z^)FV8!<}$gKGА32.89KA((D7n玉% o "}h iS=dž= A-{屝!%,L,j~ &;_pX4x:|1_ 0`ow=b?3q$Ew;^w? =Mt?[ŲoW.l ?t{.tF/`6%=2rwHM[{:5FcV^q54 c0a.PrEj?: Lt@K@ EΠ 1_hXiO̻ 6%)h`^qMh !f{m//]ۼ҅0Tɑ{7W.||S3Ng!-B@}AEZ(kY8D"AL,J9oFT$;x4‹to9|B͖Z-љ td:Zxkv=!~9*,y0V! Z,}llodn309p3);kgVz}v3"}ro[1qly갋1Ul@uڛW9D1P)D% `543+U>1i!z٫R O4BA#06* 5 8kIHj} Me jBے7&k#ڗo7ҭfRS;V.˩N)HNŏ 3f^ϷN0-c8nXYSzrʍapDj늑V"$ "MPOgiD1I )Jj(j8M1(TJA [MX.3IZT.§=;̴^KǻT8RY\ኙco%LA$mQ]C&ո)˓劝Q1+قfI $%aVj,R pW (Bp#p.GSF)Z48Y=2^mh,CdQVdVSFT$_5e^tc3E@ rx<5/hKV*eks35}nG""Ekg. &0X{ktc]ˋa.K>H:LҨ7j)(nҵ%|_Wn8mOPhbAJ\po^Z/VlcVx2{%}EɇH(#O4U+J̶Awn}m/I_ +RQHg S�"0qKyAQ`TvkYzLB: ]qo*K=9ڛ4?e>zǡfs9b uY 9,2V0|Cdgu7q-^ͤ&MHRH BE*svg_5 ZRk\ت4' `Ab1UUDbPF(DXUAU/鰂Ik IM}Z$N֒0Pظ#B \M%(c^w-wdG >}h6%=~FmI9CBex;R30c!` Fls\zF0ku//Y{X@r;cr[`NA5|;"!#V"Pg$+ |$EW;cX-q [}x&6i/øo[*;pBHf"Al3Zݪò >)5xv Jf`ѴksEQjg{)NzM3Ui![4 wD'ʕNX}&}p`JI5WuϨt_O=|=UTUO_|~ytEX1`w9V?.ǜGeo< ϸHFƓ{tE,n0?/N[߭CL CUum|Wf[t< '|-V tbceXCSiۀ !klS֠ FQDyodZJ\0;J&߀.R=(oB\ k5X̕DLi+pΏvOv<>~cBS+tH e4NFwΆ$ BQ4ݹ'XS>f#8bUd5~ѫr6|.Li5ܨ8?"5cY{So/z]mWgIN qK4@ 媮Db^6fP' ":hA6ׅ-0\15fqz)[nfAIC0c22k* "9bE/տzy~zǥ :MXs+;q!zpX\!9m(J-I` j2J@%m1[,N)7X!o9T,uk5.YWSb<9#ߖi$d\>;}Eٗ$_^%,Jd!% |?Fқ-Wϫʭ*αӘG^gSXՑ5sRH{Nu٧WP)@\`!W PgPQUuڥ>UHF1.32 ;Q͈>Uu. `@uŠiy2WbݚDz1kb ]̹FQ<]zLw]产%sFDn9"=c߸eb ZC ]>ZgMbƅ=,wz= }:t2$a<\l~JQHt rKmɖx+tcb@@5֢4Lf w 㹧83OBu]C?;; oXXOb8zUgymP9@݈fbQS>ɺYЩw/, ,Sv:K0 ;*k_JzqDDBHFYF\gbZlKWfU,:id>-H-Gw'kc֮=O/FZ{ ~--mē͑z>ȏ(n:T#v8a7麢SWᦂHcAOeFL7a J2+]%wmUAhhwqcAT[u9'W &J-LKթZys&qJ}^|jy8_neQ2+"$4@I#I&F RgJ]nhis1+L&wL5S|3+Pd%,cI¼ 5 y_:ŎMv ǨuTGʲA{r#.S%e=%X准=7ԯFj}z-w:EY~i_OB@WAv`laU-3$#Qhh`ŊcQhLwMmpRap^ ў-c TMFK6#>X _PnЭTxRb)SAkKI|= S5k>"8>++]iJHlAA!I˩N8*عg%Y췍7L,ٲqS3d-\NYM< xW^0QPI@$a[C82fqy6 tUૅ#hޝ/,끌 :\Nh蛚.\nߏBi0f.Z B8tX4R}zihװA#E,'KRɥbwŝ |sۛq 1PەN_z=5`h6~"^󀢈"9҂ffDYќгGF}vdǻD+*W~X-#a1;{@Ϲϯ`;3n]ܗvԣjn<៣b we`͏5 ^O^yYdm̭L|oűiwe*Xr Q07NK"ͨg .;cw*)s{֊b #ojOa @ oVX/> y9sBFGNuH53 AE*DT=랑_ge!nAOvCxn!޺ѳuʑT`QpFZ6ZT| 8v dɹSBQvBثG s,J.Pr \fvϊY%7l-FvRٙ#6xݮxH~ͺ5$ek@@]ڢ{D@Fqf R=oّM֦E: fq^3X Rүl\*q[T*o "2gێq.wܽ?yR8%Y@ o {W_rtβ}[\x]MP,p5k D*E7Up6˓ jqٚi{t\ĞoteE^{Ssl`VBUBU89( }ECk*`l|l_8cՓ1VY 53HI'[1p) _JC5\*S 2 g%WI,erx ޓ+`2q &|8YoGIljpf7d}< }YKÙӒj&eJKptOn CUʴ9V0ޓn>E4d̿T10+v c{cQG>ϳ 'pbs <0 K((T*rl[Կ F۪Fev K} F- Bf з \%kóvsl֔i˻dszgll*][=.~[3r=y.> pAwu :xQ` dx"z`ZM%ָlPnJ44Ov7K4P)P%$$ KΣ/RKRi  f ۣ/%e)Tōӂu d SYWtÉet֥nh)5p5iͼ&lA ꕭ|4޶F4#mV˝Jҍr hr$r@3BR[JԦ uNςٲ~ItOۨBM !WCQ`!SH-!lU<">=ux]>XB_9a_)EŰYjhYE ]]E.pinĨX 5&@L̀5 RntE]PaŴJ2o/+"-G-{^[7wK302vtYn ׈w&;l+`iW\ -[g,>BcU#Cך-ck> jtQ-"% 1: ]YڵNK; )Kj'Sg6x}m~]nrZϸZC}[k̀s4Rhゾ6\kcM%^ Y3-Sm:[5Dtp,tB** O#t߭x3/|y0mٹ1{hө]E*D%BQ! @:p8kcu1;Kҹf-K7 +gow-(t<3,_V݋r^Mg7nӿv.n/6\xpy!H[kv6&nHۮzd-$dRu4e}3:3"dK\34X̔(( [WH] Sk} *DSBAK8(]m[)b rqXY6cHlH҂!q-n@AF7$mh*- l,4:Nʁ41NiLA3cE)@F&p{സ:S3 ٳJfZZ˝vbI49Dͷj;fptREި^en0ī,M%E&}}^%e㶎[mC-.'h&LEfƂ}` ?Q}9* S$d(O@HC"/2<26>DU9Q @Dta6rgqH(+jQTMY kp?)EQC8#1sKڂDA%IQm^hJ0K^5EW()TgES?֠SL0Oi 2 iǨ+N>H1S]A0g [C%4Ϝ" W}&l9ߥenjpDGd\%xIAF-faqE@hc}r gb)"J.2M1ǖf,`O_@׻4Ǩzl,D"I"b҆zaG6=M$\"@j5)ŁqY(X{ц#C N{ϲ%Н*/(&}iokhђ[*{n! #"2H ܆).!8PLhpz4h!6<2d]kT-@&7p&'uV憄#EvpMd6 NK*SIvry< JsE .jMLnUđal&4*QvfJ)`DfCSu*:2'!q>Rj@ ? "T)NMI`rywv}P՗h9"(nxs`oN7Hz{+~"ȡFQxTR@~łv[N6)w(1NpYd%@$1zD A$FO"(fӕB(iul%P\ZT)/TD\APb:7 H)GTgڀS#(dXmD8c\/`u#a C, Pw;RP1+X=,qtQGz 1('~Tܟ2+E;$ #lʪ{^J}HmH ¸H *MG0Xb],S8H | d17dPEXGVJ"H 鄢Ha &p(YZa$wA ebG'zp—14v/|}; m̮Bk݂s(`\a˸B!XӍ;`Cd~'GCy >M<'tzg t Q7 euaoc,֑}7d;H˞ڿlyCĸWYET pC<+iA8|_B}:o\ ׂ-E3,x zj/縿=oʫ8#Q6yxAn5c-) N( oc`P hҁUV n<"rXVZ>6m%y /Լ"U C29.FpJVڡ΋Q1bA+VX1*Hd(GqOIl^u+4jjg;vGq\D5<,iq5!z &12OED$e3 ӪAHIe+dd/2(ʃ+͛aeFfzi!mvm!BĕNѲ9.c|T#ԟ$-NhQli(A=]zGq @B<LoO^6R-*23VܟB"H"H1$Wr't@hINjܐ+Ć}x?Ceq,4TϤB|>wTGj>.ܮ`}jzH R,P scJZx .5+]~b}NPtf 41G l,}0HuY|2Y 9 $5`%FI!B [0 3,!$ S, 3bx)A*P h)f"6!D$d$hm A`t h!+ɩi`jd!lp(xPL0h3)n3C. c Hf7n6Mn HiTaDbSʙȉCFB1P*JYag)̇`dܖXf05 rؔ`kN C^=yMJDCr6rd!A# M2i2AZhd3$Zxf S"\f*"jAK&`k4W9r8j(&.C3 31BM!aih^3`3mwJ %jKR!H> bPLE 7{=SHAg& #18j@!unR E.!HqD!55 )0PD0(A%ńF hY%"KHF `B`r2Ͳ&ZSY7ֆ) )B"4R6%[%ZY,em )(ġ*E L*0ib6զPl sPXeKi,o\8$.\4gW>O#` iI R .3JYFЖ :뉭%`̬PIrj!؁]0:s`V AT y,ͳvXnTPxɒ$ 3[;͑I>C&q518aII4YxyuE-vk\IbSPCxƸnG0JC]dӠ2W2 patP3`40M b9.g8&y8 3ɻ<#PomPT "DZZ])iLPpe!Bɧ)1!қlbҡs0 L)tvlHHhN2jt9(HO'ѝ!LG"GA;D!qxeO_&)!,D 1H(,DEUXȤDT` F)b(,`**,H*EA 1XQQXE+EX"1TTb"12*ň*,*"(Q `@aF,U ,0A ) dV,YH}'(T@󈨀lV#"A(ĈŌETF1bTăUc1EV $H|r=o.P\5)8XA2"錨E*Q1 箐S{yz D@hLh7,( {_{a[~d⤇Â>wOxpf@߂g9HpOJS4QU;O@-DcG l@Tb\!v:?37:^p蠄FARR}n2>Qo7_nRi%U2[\&j`_ESt (;3]$aK! .?8 O&22HLD:Ի=g"~<@HaDa#  =K8d6J |?;E6z 20=$9ת?U7 IN LQEC0## UTPXDA1XF*#P>= Ow>ڪG.ZMN)PAL>0Pb 6{ڄ|AA7sqK04!FwcXJ _Vlhl`>`^shoNF%-4 ?mH&JDeJQEWDUA蟴BHRBf*%j X(,2 )",H-Dkԕ lOg8@$/ab ֚͸F%0V1 vSޚ,և0O@ͰOEm FK.G̝z_m@$$_ƲNH| ^}qjt,Vh ! 8%H~}.[|{W[?lH@_Tư )cG=&(P>?!ߑܤ̣;ؒKrʣⰠszm]l~΄yeUM|9xwZx>+߯VDI" @[O( h6|k& f\8_òf|\OnA3ɦkbY%O<?@M Bm0 +rqPmshٹ47N}il\s![Wg {Z5V$,&uQᶳ4x~^>ePqY~gðF|3j.3Շ~Ј64v{>**Z: ]a#&ɢQ?54xr ɲ+TgWq\*l?49M7ʏzZF~T\8śu~}ݘul[i{~ѡ)_<|ײ]SŸyϻ7Czb %bj"eﮧw_C`zxQPa{p^ǯK5mDciBA~swCM`,@O?_^\!PsSFI@r72V<͉`3hN6^5u6_'թ*28Qݶ/}M. $$$$`EFa YF" A(XX(*V#1bEF(EbU+ X #+AR($E##DXs|ͮ %"{3Ǯb"#DCS5?VTD,䄄H~pΓpppa( {1#<<}0T=)Ut?o1+)*XJw!屳 d ɳ"v@R>?ѵV l^oKscoǏy_/6+2G$$"m`_8B)o!_{6l/.vpx0 )FEY݅xDRTvGdC8/]8brh: @b (*# )X " $3Ѝؑ\Oxc6]Lto혧sKm~707I?=6 }%$kKpw3 "(Tb@H OjChI?&⺴@$U~Rhc!+)POZ$&oEd|+y?Rm|?o0YmPTQ:|wUOkPYiE  JALވ"Ѫ$'I!! $OÕ+!(.Q_*{\IhH\֞>a ((H,ȰEq` b(ox;N7]0]TWB Ǫۨ1$V(;d\g- ݦ4b _0(,%UQ,BunS%˶K! "N#$#A## ?[S^Z!!yTdBDI$I$T0p-gzz₧(#SYu 5x$'g~yߘwÇyGY$ҔK`ë?uq{eEU*ĊF0I ɷ>~0K9b0s 1@rHToni6\ / qbZ3r]/dퟳgCz˓ JX6fjjT\ZHb!U*'(`859sϏLCa!RHg#Ο)<(:t߂YX&~K%ϥ=5'vmd n#>b;,VBD#$?K I^U@S|T'kyq=l'b4 jpl3`#J]elؘ6QHϟd' NAA>Gqf7'c-0>NLjšB\$!_eh#)zqQ!G@UK?`{Ez3ȼs\)K*(h?b1N~x&5<=T{2Db$#'MϻE%`@ d(d'O|DS )TEHDPF"FĈ1AU#QUEQEXV"XAPF* ,EbEXEH""( $Q#F*TcQTA,b"*Q*"H?a* Ζ%r't<ΊcR"nlN j CM⩬+iuoD0 e|R|Mgsc%<#%Is*mwH"R8NY\U)E78q%W-LK9ҕТTUX@4Uը1ke*YJ'X6U(mp1\g{CybygM{:^@Wz|HG0, 0} *!ɺIl֞E-4ּ[{`#a^:B&sqXI%l'p @KC $ԳHIM@Dş!}!DR*6Tj~"3<< }(X<{ ]V,ZF $cߊ[5.`` 10⁼@ɹ:@dJH (HN ̰q'`|n?QY P l!c H! (dRE EPd@ EI Yğ7$XNdiï߸8=%@kO|/TdžUQjMl=O?[V.5~(6\绣s>PA ?Ӌ7Z_{oP3(m.%c7YȞG[8ѝRU4el/Hx*c<)@uM8Ⱦ:kpxGr,"ISW|/S sYuA8ywO_:8D$Ap2aƲ"yFM%@d0cśD68D5I"ui 'C)AV1c",1"* E`"+0U,dY` `R A##1H TQXTEUbEb#AdX UH,QQPJ D w/qH#Oy~8aXa4'g/'s4/Y?d.=kł>ԙgW($$$JAV*2(}o7O ^]):pҎ|ð|.# pTz $1(+[Imߟ삄wP ɬN>?|7*CCJcNxֆ v b%7ʰs> f;ǛOĜ˝-7ox;DTRJF6֓])j+O[r,?҆qDbS(if1'^P d?z p>d%bh@h\6uMlܕmf\+M^Q)K-#עN:?{ I; !g,2B?8kB%W:tpȾޜr19~brݎUS)tEэ)k9d7:-R|q9-v {t8m Y~`3k+yp1߱j`UOp칧٩ʧYBII $_NRúG`nR?~xq F C}UUY9cA1zﷀ) 4mM_oTYVh&}OV!m{U,OkU T)@DDJG .XZ<|E4xHp|>]!KY8`%i&1O'X8,FuKdK$.V:kt䇺={ĜxL~ 5J-L݋#pw"쏠~^5j|BHyFry9u#jP$Br$F#~9҆LNu0i2ѭxE`^ngR֪vp%ڌaI!ZX̫6iAu [%LQ'ejhϟhmiں +9\ $:Af\6Рf2.ڜN1Y:/m5&5aϋG=~jʨX""(QV+I][iSPsr!$U@s`c9~"2?RIQfI$ j'[(s? 4=QEaxVblLqli#߄#ݰ&uS-EF# (n8/ˠ H+AE8y+&>&0l՟d@>)1W҄&D@8*^಄R鹃O޵=gSтca:+,fFC 2ly)ϣgXƂvq]쀐"aLE$M=Ty)U4SmӭY^uT)7TZp ' f8~ۣsm)l*[~_KnX: X9άBj$gdHES#A I ZId+)ER!:yG_P,=p62n-4L w'wtY]:zv$涳?PZim?@DT(`ETF"** TX**,UEEDUT,$ I'ψ .޴ymE\(I]yĥk?0?3Z~ψQT4ъOPUebEUPa[vE7jAվ_Dݣ8PgҸ~5S߯iQu1 HHBDX(Q Ĉ(EUQF#`1Q! dFI<.9>wG? MGeKy=JdQߏ:$k|f$%~A@;ˁ%00XdkhG;(a}[UJ#) __{Ҽ0Rཀ()QES'1K7 !sBg$X!J@A5uhQXF}\.yX]`tv7pC$[;ȩ(ss=2F3!]_xZ]c="PRҽԋ-&.s$f?1Ahloe[eIKqM'!%k Z> גY _i-d0@y*g؅Y\$%ޑJ5O(" &uXL:)X$PxEQ*g~ M|ff?7BZMS.B9d88"HS6)J ڥen}|OKhŃAulҠJ^lR2WQ"{Dž'o6;8I9cܧ7!"4aqW촖{ ?Sgi;“ӰIY,BC(*%XQK>1FjDEKQW|]jfEMaN-"Q'=; |Y4t({*K9E_OEMUh7ٺߤ;h)|? @O/V',̺cE9=!;ڪ.8!{ WOBPXH"A, EQBdD""HT I AT!!)RD  Y TdH,`,"X EȰ)X*H#"* EB,$Y"(X`)dB , (E,XA@XQI , Y !"P $X",d * EABEV$(X ,+rϼd=R렐dn3Й궮`tS>՟CY[*}NW|L3 ݦmY=JRJ!Fs<;a=>{73γ(J`@"{3mD{70@p>/̅dY+''?Eb0piDJ1DU-r1EbVS9Ro85~@HO*Ed a"E_R>iaEw_s2>vnG~I u)]R0S"}ȧqM!Q;%"@nl22L5G0J%bV@߹G\>EUXζ KeQKiZX(,U#(W*[l*(Jj:1:OKCf[{J5;ɔD_@'$U Bޢ{z:ԁDw#kFq" EIr6l7~ˆ<?*DU@6#b'C&h@P`cа("B@> P5RDP5o 3dj#" AADBrt Auj6x^'WyA&~9igkc=QKD "+":8OK& 9"t4qUtP0ONK@xXAĽxvApMŊ|Ngـ' SNJ 4:A"~h w\6`YaH@oR .*&oل<շ%؀)AhB*.DD$Q/A$6h&H Ύ*I$ n "_Q}T$c0(   E)D $ H"  @P TPADTPED` dFB,  #"#EEA`( (D@EPDb1ER b*"H2 D"TF1d`*UȈQT` (H"*V(cQ`X" "*#Uc*PUb"("dEdUXA"ER1F,TdXE0b+1QYTX"X EB0X0E,'PML@.@=OJ7s UP  ?ȝKLOxE3K%;YAt@5)ٜ,DO֟k8*?ELh)EPpfꡇ9B<^7y)9eVDLgAO 4Ԁ:6WA`U ф=E1Q DUMEPFE 8**UP;HDP/?OZ !($T "|~ b* *6dȠ]"!`b jTS@"~*S""(4D(dTAG"(>}?; ͊iM"HAs2(;b QAH g`"KPMsPC@=TSCQ EDT8 XP P1AU 1gg{8fyޤ[|)`Kgu=Сo-w,)_Aɥ#gnF{^DLl 2R+b͙[IqPCK Z;LAGr`o5:%t$$6Q85P5O:DRwYq ԯtdMeh2- ؁HƾKBAo:n"vP#A&!֬ac?3N bljWZ`ZzdzCrGGt╢ ـtDG#HE7=:Ö02BisCQJtH 1Ce5lS809TvNu)sMY5Bp]@QQbCvx90HpkDH).Hbt@_'V+L"MUA|(DZC%{RWVYr |JJaVXI"HkVIG#b EJQed}O[V(Pd D& 9nT$I  <Ɓ9orASLp\?e]|߼[N'nRԧ1 7EFUk]dgg@\( 6WIc}CT3v%$MBg }@r HӽUL;ؿ (+XRL0C@є!$2l翡DSRi^α+:0ɯWC`zr*D KS扃poH o'YDPb aсXCyGL$@וbs)薕gKan5հ@(% Pj+CxBy py*C7[ Ĕl#ybXJTS xd**eW+]1a*#SD -V E2)+JXd%, YA(IBYbJTPieA eHB2 X)-c(!bQ()Z\dVa̶%EG)3%!jRѠa b2B@1RPW Ye)2 [J 2$!PY P0:ֺ퉣&cmym/Ʌ bM/xH9C !$#e3!FmbHTAC(b6bӁWUn ՊA &!mwn=eq|:E$zimC(#BӳL\՝l=L5RGgUjcbBbrU 3 |S:Ɛ FhM&Z_ !*@Tڦ@$-," F {^4aUʅȨ[7f[{u+[^oFC*|8ĪI}_?~ISGvȓ63,*l#;Ofh B`.W:O),O? 2?kNotf ʠob4'0_X0j,e _1B2.7`QMQ0dGI"v:rWׄ//'fkdX#]KSeP'yx{Vu+Iz]T1<Jו,(pc$6p*0s i mVބں7 "#|4ZM]$;(w!Ԃ8VEaUg9HpJߨ\{]8Ӓ: HlP% L0JBcDb(I~~^>8JWXR0W|j f,SO[~692 &D*'5XAXi6F޷9ZSp&.0r>O7"fR{ )SlWmd" xrz,ISeJ89fj#<[[HsC>jD i΢kX'5J됨zNflp߿qfi<)R=a;["oYD ᡤV "+]1pq+j|jsN'd)j<`+tu&Ě skyeq9rOAd/ [<0R-6W]ZqZrgӛc 6 n4.wNSGaѕ+9Ce€KVQbY^/Gqxſ}sE r 8{)R).qCUQÆ:Y5E9_Z\L{mVqjTFe>F[ oE}goo.Q6r՛DCqMY qz0ZQ8H"f5ۺ׍0 P$r(#Xj2C@NάiR F? "D!K,NQP V2(``D^(.57'|.{F+[iY̪%Y2 &8 A*Bυy9SFǑN;K1Ǫ7H @$KۦbQpquBa,2FHHdiVτtj͉&Un{I^ d+L?im<>e|AՆ"hY*wzG^ !dOkVfx}>{;FK pd=xe/I*偢Od\ ?V'/kmyB_vvcoH{Yi`yWZ!d?n)&h[%Nx\QMRŊ_ކZ.Q^b&a:*f9@pEՊ[vf5i}a},_Ae='pf W~uiIP- ^B,/;K.RSm|BhH(`JaX\8x{?u59o t4uE4gqGSH $j>Y$41q!}I.Ky QnV抺haMBo]v8aoObh7DM1}5EmLkp?u~Egk|d,z nx*wr!ÇG"_2쬶2SF8Gǵ.o~^BR Rr^ΙE k=MSe<% ڗޙW7?R8䶺Y \.L,0v9щwpa Z_oܠ 6=cꡲAmlֿ#\p\7ρ(Cǔw#[D7$`u XXzq{.B993 `[FGgDf_uxqRV]d /2$f#N-nUXg{F.4Vw?ɽ iҕ$w\/UXV{ȏWcivrm=>{Kp򦅺 r;(A݊2w*' Mb +An5k.uDSoCkFy/&^#ЗS?NOeQUqobPUK}y>6qP*}2Sv#*^Q=K[ iKPv6B d3 Tv7d5^)I0Wx QL Sr;e)`Paq6zh{JZ+%>zhvQ'}7E\|7!Mhti:"5J) Vi3y'F38@ing+`J;@9aj 74-D$;5K yAjst1#5˨!~nt 9[ K7V?_5m!uy7c~HTF6Ed"v Tꭢcguq@ Q/YM\ Y|FF=! v.c@[Ru-= ٭MVdAf C"-σÉW$@GRG)wW:7yi4dYG~!<>)t|wao K>v>݈rP9QUKxzO8:>Z*]5HN{K;kZ<ɖN*–Xi!]YUmr Th"*Yv5\dMRޏѾocaEÅ+[z{7NGzOjw҃9_eY&GR:ԷfU-=*xPX{$p>=ƦA) q(S1Z?-LA9Iԁ1q5^Q46~Fnh/FzgMҋO,s[|.;b)$ AY Y9<*7S#JZMv"0#͔)Wy=6&;R ^Q(kwlc:Sep#useċ ~Z>ʮ|0qODT-fzKv\J>=5ķZ㝛-4qOuL^cxsMܻ;N$FҙB_nÏ𘱜7bxU$,I?CzFڟ]ثER(C {ERA-j׻OBP,?:a !| U 0;uĵeVOk}Yl׽ 2"mxoNP?߿s< mA#/red e(Al8;.o )&AQF=˅ٞbb BB !Hiχ)kI "]+d5+EO>t𞺺5EU\͂Ƌi`~G-rΙdGÌSsk+̅aJ urʓ2]2Χ%ES\mjc ҝЊex,7P1 \jEJՊ@Iq{0dtY]b3ǣyGwt; g}.]~?%O-]xln~M5Sjb_j{tTTOU g7VW ݭ;BJg!3[^_yy7U.LwO.FskU굮-ɤ^7_bļuDyR'FWvNRVJ VYL!@VÔVHK ,_)( 87kE5lOeb u/;Q}Q?=~dD9~ (:3E)lغւAZqLrIIVQ@ y;Qjޖa#]YL{& ja^0D@P @/ˡ%7BrKm{N=?zZa? xN<-"u^whT5,NN=dM)XHPS]YT\FVH7KL_ e2g7A@*r!C^= %JՊq5&J* $-P媊[!E#7Nz`Cs0h6dJA:lyDt\gu\T"v>S>^WKτo}қn?;Xs9UfZ|Nڍ *;~s+NFڱqBޒc}Ε$ UV[&op^B}T#otoAm5s24_$GXY` ɗwWtU )`3GQC@S aH;8I0_ R4 2p{ iɀ'i1!/Ud֨SQWg^;?8kQs@zel;61(WV=7c6wN6YiE^£nudž<ݔ5rf%ڕlwsj5 GO'R[U0er^5ſk,G+Gx،-KcS䀨*AnUwiTNR+zU )F[=v*1u(܇=R\I'byi?h$J_ù&k߸v|$IJ@y8K! _Fo;";vlN3 '33R Azl8f6}\DEHg-NV vU̴48畲8vi@ $`W$@QB3*mfZagp÷(IoivIvqoð;"I"cY7Dyөc=&0G&Ewh~W"rJ8E ;ݩXBeٞ\,0L_L\:·vu @xy.ZaLٔ]X 3-R#8xx]CjdNӻ} e#/{nQMb hݍ6'H0lL{.p1֑6{$4ql:/'dwi{m!ٻ2EިԀbN)n V1 6#=GL˖43P۰332E1,y~&Ka{]Mf7gn[1d);x" ! 0"Ƶb!\zW@XtgM5@mAVNJ*32DJyz&otjv'.1e ԍ<δ@@'"PI[QFD;ñjJFV^rpm %pʅɮwXe(A-nvKhQ7&*؂u% , M<Qؚ(͗C-0E4ז,(Kxh@JD\@q; !$!mյmm\"bu6&1⡍T^5Q;g&:4(gn/oi㽘:i8%<Li)!h r%J)B~4Wlн'L%8Gs&+q'Vh&2Hc#ZǜMltE |f+p?E ^,9^}=T9`0HFY$QEE 'iz3z8 M-;t-ep~T.֮@X AaNpb x#E%*B?)py2x kֵŋt)~TxoB"7 "s&dM9V=۷|Nnc,E@$aؓODF l2.!Pylsof18iͅa8ҿJȁ{+@{~gY5[Ҏ_s֓b(`;\\]̢[R֖]!ˢ8yo=Ki6'LtPsٯ&ϬfNź h밦΍J+%h[N!q8Jwck'=lZ'e[+o/9k*>*ٔ;Dx6q6#8Qmͤ@ AOfg Q#Y39p認 Xc Y. LbߥW@fv6&\JgsdBB_V v>Kq28kX1mtXvĨ"nw[oG'>us~"DyGbChF&>m%~J]_|oJB[oQ0?to҂2驒CH e!Pi[° ps 0+~>JQy?5KU!ĬNȞXD"Ty8q֓_z%.ĥfWXa >7g~y<,Sc0|u!H?ج΋2lˇr0j^+,=j4h!bl>kHw pu ÍӁFs=(S@ =þT  /+ĝ ~4tJX pMniO2+Q٨1]O҄8$4UYUNcCĔRC3<H,ơJMo~z4c׬HT#鐤EOd@?# J%lsp%)nneMHA4JPZO 馨ї`+|IxQ5zX. i[5|dHD,l~pB"2A@^hKW@ O]VhAIp@F(0ac)*Ly^*=zP`Aز X1^~ =vP_bqٚiLNsч9ŏճ<[ wo0AGo3,`Rx@Ξ[vM#GJW9/Jkku7ܨa0 ppݨϡ/&쟑6vecOrXo{M7q\ N ; ҌFѮ  ~R7k'׀'U0Z;j19Zj^֫H:?\] "ޟkְ>~S/. -11 g"%Z7i/-@>R|ؼ~[;؝rx },Ia=ޕ["Eo$Oc}Td*EH#"wYP~Zȳq$a2'РI\]bRJx~pYb@Lu,⿣yC4Ĝ] /act0 i0W ŃհA.Ac:nuQn|4 >WD%? yn.6St +KM,'kػRl%מ㗼+BnXѪ iYU_9٭03ֈZI!ƧWUXv߮g]<ۮC-c #'a&Jr똘$/t\lwڝ{d2e 4>y#αJX\;[@CEM?Oq~)qTZCYz-︠G|ve@Zo"=]Ec3 |=mQ|F~da-)B=vzҢ!~}FtkˠX@B"<|!@$/ b7{H( (A &!Ţ%=mG[^\G:muF卑g Ϣd9e!lq`P]Uҗ4xz]~q%Z6 "A (ˏUWPݷb:LKQ{Q\Ue>.6̗: wFnpWϷ?c!fT)lD~ı! D"1–$DoSDNC puq<j4ЎECAW@CWm[ea>u]9?WnDS #UdrA!ef@Cd*~tc?ٮ% IVj V 0)d 06ψk! 2H*"R T@TR^Z݊~tT*Ka $6&e*=-FB*VYV $W08*iIg!oX;xHNg|GK^\F%z:i7̤8Qc8DM jщD[A7Z@ @]U3+vTD%DR`ŹSϔa$IW,)nbXF5zcah`.GMU mlQMuONˏ[mɕdú8'u(իi)!D#?߃. ܇Jv M>:CNs:w0!'7B>C{̞KGʖ̄10e"0ҏR##ɟ*:jXѼ/J7& nlB[GX-`>fuP뢥Dv Ĺm&җO єG+(MRP;r(c# o^-T]ֱq&AM|5z;y=nm>>}hEY27DVܪjvXWQǐt^|7ūV'EZS 缓o*H)  cJ9˹;Z՘ɠFdn lb[Js&V=eaYX.uwwn-@:G&0^;˅`ִ{ ]+m1Wc_C]#׮{ڎ}i@ݧ?&t!F75s l- K^sN4,uV؈ƴiI`Y41\NcS>Kc 3 ]nƯ]'_i̢fnWQc AM BWiut'l|vƛ%QZVՊ5 >/_r$nO%3BgՇï@cԒ깞ݢ}gk/{sFh [Qd]k@-u#|#&9)GsI ѽ\%>!敛1YLΏL)vfR>; nL:q_ՙT|<0&fA+K+q7٘-Oa;} dXR,]ڶR6@ ι ώ_wJ^w[ƙ{}#mS-v8dyW s:q|2:skrilS ԺJؑod(F[S.0G)D^^$#`e;*=/.uR;9U @wS€OPˤk~.&b]d9ʖ9(9̟S¯]J{zӃnHȷ˴U~Hn'=:v7<8Gc# nsUaM)BJ5ZZ L-F m0꘲8<dB&'s:tb#)HlOKKGTTn'jEE[{F-s a!<'Sv廲{MXRhy.ǑаƔ}wc^!CiV9wBiq5ЁWf4L7kslp5R1ߖ:$T$4bp8M֝Ƣ%<_$N2 msp‘)yvm*PXERVj/VjC3lKAqٌ t[# WĪ f\^4:(a@nТ2RF5P!-蜌#kg,uYSd`{M8e3N3eC@2(Z"ȏ[H@S q|C'CsH0A:WDvY%ҕ`$$ AwWd9OGGv3RfsFX3mi:-?gX:+*#Nj9[bg9MյnJ%aGERF9Ziz!i_aёx߀)DE1*SA?DE1a1A#]dPA"UP6~hnuҒPPnDtT'<_Yн/E+Q 9}mUQ8`TQȞn ňK-{l-t7zo;IŠ ^mb]8x49fYoIJ 3Ib=l%_4(#jd>^Jh <}فMdvuV|SP2R/0i oc:g|7vti5Ihpi㑥 Nc CTff,wwiѠ:a JɦTP+9!Gr(,z7IFfdHy:ӝTc2#8fcfLNKz^k؎8V*6‹ UUxx8U5 1E~煀29`4ne'B#0cT^eb U ~SI 2=xlW\uAdWKF$aFn@ r$'F46a×[!8Z#PDXwL?A_m1`NYXT8i() d+"(DraA5I'rtI@BXEepd)YX^.Md&0P,``KU;)d5 &E"p`ºBatņNXSM bvjɣ}bo6jzd s6$xzNΰH0Hɟ0imT;:VCГV,;RPIzAMjkHI((hr A4d6h/kE]-AEmhuG{3is2gޝrZ ~ [9e[}·KFFB;So+cf{[R։p0gxAXhSӞƘ*Q 㶸9~a6 s)rY~voi'9'})ydR`Λre<=X/त/KQj!۳K`![A%@sMly#HM65E.ρD֎ ~P#kU2L؈f1!y2",3G"LEEKv6sWp PXa2C-~kS-h\bcg"k@9򛬕!^!`;/=˜V+]E tS(7{Xfh$SluvWt('OG ?^ /.A6v鐂P@Ck':.QQdw .<6 cBn݃4cV*vN . e*q) ;i4W[㋏T)3:]\2¦K҄K@YZ`8SyF- bqE8vqS!aF$DfBZ@(瞓cd}ˌفH{*C1DnA}5|W~b~~ d#ZHQc2FK|^5kN[2 J/]yURlOvN=@I2'E ނ jc)+{:xpy1 3Թo7T:+ēE_gbY70pV$v27DUwNq= fX!GJIK9bU+Gy-FRҸ!4̅J- &î6ncZ1K@%`.E ;%57@Akf he mEC`樒,&rdDC̵;Gj1Cԣ p  B c_kȆN{lm(2FQL(Sv*wLgXFń"=Q`ePk-2robܥFŇ5R6AKU NΧ쑸I"2W6Y%psEItRJsH$WZ:.@41Z-T(V +񿉰)܊D#zM@[]:D#LX[5c7ihZ`>N@Wl,̕qVa֑S*a i2|3Z *\j8ݚ8ӯ'Y/AU[ lٚ"R0J֥Ycr$J]Z?'M2_f{J""Z0}Tut9#9Kx#`?Fq2LW$ ~(֧fJ,MpkxkW=kz:U"ufr?ti9c侶^D!G*ƀs5`Ħ {&UК1a1R8X lrϯ|Ќf۬Tۉ<֦/#G]--xHgg9􏳍8q?zx)ؽM-G$`20CyAc;>Н}=O;Ӻ[܇E_\Nӛ0B`JSX =/(!ٴdU!/nVlFEiu9BLNQ-?sLS')hoF*r OpһI8a&7n[2[IK1U޵dq 1}:M <4;F\2$:!ps^UVCoYjT%:kJg[U_w_,*}-d,ڔjZWj (ҥ gؿvOJ8ܶ߬HϣD,~~h(:^@QJI3, ݂X$( Nʜ]0-3!g\,!'!d"i3Zi1TXҳ7bْ?;$.%*EFLouɬ{,3%ҚH+@hZsE2B(nPTDD(*7#`9`PDQ{`S`'tB&@*?M pIMƏ7 u⊚YP(ک[#) ڵT5t}`k8 FV5vrQAh4͡6t̛Չ'hۏWecOiC]dkV-UT"G}9L% *yds]rh%[[gϭ<@ Rȵ^YoM8l5BGeíi?^8_Sjl<**A^4[cdu,h#ئTVj:QVkU? x>y !>x2QSY`bZt>T/5k_=} idtQ\A!w uAFQ#ÉM#2?i)}ְх ,+m]I5i6"h`u:1j)4#h%p-dqgYӦVeè"&hȸvKn?mB@')XIs/fv5AJ΍f"P!xLK&nYc6vu.p u锡FTV )}0J8["TkOd{(N #"0`Z%Q#*I) q̄Bʻ_@ThQ?*n}u6KLlorf,QY Y 0"l@,d8d@`hXb6ax+%Q ){'y؍sN3.Y>A>ź!_xIJ5aoƿ䆜x3  gҀ"H%Y럇ok* ZJ!R 04<1x\7r~K̺'F{jU %àb {TPbP}\T;*|RSMq=>f/2hc* u\,A'! /!1ڈ{ni!ޚze"ER=ǝ+':wA#tVS3*;!HȐymh>C-] `MV9 ຍx^nnj&>vˎ7dw <Z>)hwvoߺ9c R5:3% 'cq*n?ԔN6v3* uP\t@{%!Q{̄At8qEzgd)^J?] vF.Zqw^|pHz-j8oυ\T6Tr|t/apTQwA;Gfd<׻zx;p@0HxNĖ6??Cz{IȽͽMdnI^4} uBs%{.웕fλ~ot[ImL |G Yu]ܥyѽՃr75M s׃d*r!/lϢF'-К+on/Jˣp{= ?Wx* h'e?W3gˤ2[ ;='C*: (HHn^أB6>uE+ͷ[' y^ˆi2<=}x֊drC1b7f"0{M@ IrGtőw*FHa&8T<|l*'FC'~M +SoS|3CASJ=(\sudMM=AAd` ( E!9]EE_Sm4S{ P\x%"#IX6{{f Όl҉$"Gf45Tmn:!?YLDyyi7U: ˲==+y\nYS6dƘ(t @kT75,@/$B&1WԶ̭Hڽџ7 ',sKl 0'VQ4iWLD}۩Bst+}rnPg#V86ا SHj6gKn9xK{= bPٰt3\ݴz{-L$ hxtN)PvDY"a,MIk] #wA&XӂINٖ`QrS k[E7ʀ;=>9@(C;ZoPO1?r?z;@@3Ĥȣs:Ee,ǁsX?Ymrqt`k.vd`7bucMa'PbB]*cyvk۩ovJd5y)2s޵3*"ă0 1F+EAȊV d!0I8sw-G(ϣ] @wiG,O!P'9CR+qe-<m2,lwԽQӳ#a:] [*=.i{nXq$eI>nJ3no)1նYQap] lǭ$˩ltҊ<5 DAiȄOoֱQ”A"c?SNB~NEWb.\Xy< -ɄBO40XڴK{Rsc$P|W}:2UcUfc;ON H{RLW9uf-%'2I&ʉ)ʲe89zJ|Z;5q T[ջф8&hD`g^# {{֛ff=~Z[ӃP~/5znz/ՙ?OGwjLLиbT/d | =?eCW[M?W.kn5ϯf!2"w:9[Yx!պg釱{\C/\e]z4RWC{ƶ\?/ ͯ-?93}{zG_*|=<Ij!uc[tLLw2ʲތM݊Nh.I>=_ Nvtë]>^%'q F&h=s/͙jʩ?Vmv`.|DnZ .#} $7#lVdwH/ڠYVEv>t\gٗGʸzf> # 8<=I42&OsUsÕسMK xx.P;k ÿ㿟̊7)90opR_΋2ȃ5d)$j(J#1oT1TfhӲZe z2[н=SfG.љ0zak}&FNvktֱsq/C> H;i ne2si(jQaatvPvKҠv؂I5mA;Trw눽"VJ8@C|U=V|\<3[wwk+ #;Ȱ 93ZX & jK zuID61ֈk12T T3[ק~wzxC5d 5-t<pF1!.†|M'䫓sDc ҿA$H%ۮRU};2&Y0,YAA4" -2hTǾR. YUS36>nF J}r0;ق?pӍw)[εxۍYH.X"!FZGNs,Y8jY]pϠe,=vt4?I鿛=?Х%Ai8UZeɖWAVL{p$EQ7]ݖ$>F_\P.=><'W\ի`MվFi;Zy43Wqc`EUX1ANff>~^t[o?Vo"uM(;,nߏYؿhNovHN]nCvOU)ԯ/8sno i>xb4q:|Ϳ(?v3svn֭ݛ9\;?̍;:~twPUTGy 3 %v`rxyh3闉U}1΄) 8߷'_"=} . `ȟ=а6U nۊ%d(7riQ֩(C1c_/i$+Q,زޤPJG7NlaW9nsw%$#}O޲HXgb󽌌>(EE^lG@z>\E %g=s{z{c(ԛ';I}PFH_AJ@W6;"R!-kc>[< iL}Pyk<ѭpĨ2b+[ @"`2)D Zs2_lyIB173&N815g]KyXc-2xuf5w{l12 }@'_llN/F|?l17&gX׸wx͙"esƟ7];|Uh)nfj:x r)B<ߏnD$_l{aM2kkըU;yQ;+QS? /%j7Z_~fv/;^.IY~˺w6  4i{g}T+t i4wM|SoLe3D|R=k {&7d%-^ sEl( s.)xB3noK5ߧlQ?7#3# khO[Yze(fڸW1׹_-+Ȓ&GozsܒPކ LWA[ǚL% :R]<>6~yZ}~}sh竾%v˥`dܛV mehJlU=xy!–ז3}[ kEqncxʅmf8V6h.].~YBudj{u`z5wφ)TGޚ> X'ٚ}wٛ3N{o4hHKf;Q=-d) bqNG45RNRʺH\+"A:hlfylPPt/خȵ/(J=|ܹО\Q,LB2jH"P%^il>E_,yv(o!*"m{p]9xs`tq$'~|4׮|P͕Emz?]0̓UeSmaGkP\,?N8yފ4-!kH>}zݞ]ݭ)gJJvϽ}Ȼ;{>%(z PJ2D`,,c'O"? 3{>(R|h ЉثŜi.iO4- 1b4m39mQf9G#njW[kZ~>kdUh #D_J[ְ]ȏ__1ߗ`|>"*,<svFDwj5ON16Lx5$ 0/uLZLU!Yv*(+Ͱ\gE˂X.f>蚯@Uww:rRizGOQUk]Bʜ咫Q}zE7a+._6F|[a~wQٗ-}=)`| ⪵sʶ*n5btKZPsyV}O{ +ח亶 |U\!<~׭QK6Wיµ^cb)s)g>܆Cf3= Br/f UqUORS#EE @A@h: l0!-(M]+ݭa8YqMOټ|9 A AÔV*DC;uQw.*lBr,*5TAT ^?SSNȈF**?{3v@Csޡl84/U 'Ez 4WDydl`/PUK:EݹڴF~]!=Tlyj`yB~4jkQ,?d< AkPF@Oxu ̤r(ћZN؃Yfʲ3r8tXN+ٸKwX=l*Tq s6UT7ZșBW{rl9>~~뎪F9/Tx '+]^͗;z1{;6uqen*e[9[ߑ]u>tB6jgLX;%F#jd^Ȩ߄qw%yұKHܿ9~zqxXoVm2Fj(8<ԯJG"~H;¦-ݯIC7(Sx&*n%?WY ucN00وefw N o-01yY B@N\hR6\FFCND=9O6T*&w o+|B=F[8%)[˱$e7OpDw \$VN麭Rg*%$JJJZ** P-(P`Yl"%hYK,!l=baJ} L3,)!@?jA@B(* ߰7 V L, J$J" 1`z|o_ u4X2S9;Ih)(5J;#p^Lkܯ{q$&;6G㖣"8+%R`! ! PF@ NqE Pg˲ BM!+$BJA ( hD-9)h`aTڙ'&kq@3F*!OjNE>VBc'T*d#˧\YE=S>xBTH&](5OoNUlm$OzvDGt$BdM%B@tNj^H8j W19}KmFu9ljoH#kD{(&٘ZOZ\Yrh#aN5D?ǧ eegrg*PQ?bxe >teS{ ὰ``̸҃#uV6^4Xr~ ꙷ#t<4ٞ3W0ePiS l[TJҎK2c(Ųf]H 4n2V<Ʊ,eP YX@Mrl^Okeɴ*DITgԞ!phNA.LxSO41E[Wizs`1*gOT_?AE*J2w AL-wdl~n x#5$V#8pFWeêViK~vsp*WmD!{VT>Y1/pý0Tr'>~}Ն5e`콌:]ǚ\Asv:˽e.AhF0Sol)us69cvlCZ]鶚J?!VZeρ) _g;0H3~l-1fZ<%#>y*/7 зswʖj~4;֨kIsK]iRioĬDDBb0Պ+=, }Me|aI|Ey_bs71C˝7[N8yGv*bՆֻyS݆jI2~+3Hdr*N BB&*wh?ط=*Y,-X7^Yo[[+%JS`Z}7GNeeUNF*&r{WGͮ-( { cO@($ʇ~E3 QJHZ HVЇ&p/M\W6Ʉ6[]T5#g!Ϫ:* HsUpzyog;p]yfӹC"]>=p.7xd+Z.WYb֭IQq9x|p[f` ,mسFT}QޗƸYͽN77 LAm&kj}|YDZRK(2n!DlXvXbBt'jilfCPMZ fbP C4>ԉz$u.mdI nLST r@Dϳ]_ ĂÉ`(gSc$am. äGD<)fz=;~;:A*PCO:M%E~U#c@o$k 4A*NQQJP1 $ e ?-@{V{m~av)^~qqqXow0E x:OgĹg= )B캚")!#Wo+u+f)"im 9 u f?N>K>{3M-O_ xǏ+Dwyen. { IRa$@7\I6e[NN~Хqҩ$d+Vr9HuX E8X( / I&2ܥrm*|׻erNzPȀZMV,ELoC0.Y'D2(6 3urq 70(O)퉏2Wïh<FQVs 1>m gbOEs Ri1DRqh2hyN2sNXYka8a4VޝlH!(eIqRL5AN@Z'ZOEx5Y d J*oDr铑(Te"H IjS)A_T=ϧC .k= VpA0R{Lj X1P.2~`@r+4ȊV!,=W =B󟎪hu7,9  B~k۶αSw/zWgP(5YhMax.. 4]l^G_qc|VC 2+j]'VeED?Ab0!$Y"qSKB;|$M=md+FBeg|MoH*z և'}.& k&IwQ>^W)dҷ=c'id L GS'ɹ&˿PE/dX`)dyO~lvڛSX}]|~Q~?(r ͳ~rFCR\ $9eDN:ӿjco1Uox@{6mIڏD}S<>9 X/onTJ(~n9ߦևD( cWΖY5}$M#.>V|=1ϤgG<*繞kMlSv4+[׷[μK9eHr|rWV߼JzCK:Y[xpZ=xc>xGx.:exj ]UR`~I𨨕>dn 3MI>+pOK V[Җ@ hvpyku@g_fs7xݩu8oh+K9/iT>j(&qNuZ'3t*Yhת鋡\d[O15Y-ȶֹF_>W'hkPArd%#dBEtLF P6UUⵄ J9 |a}8!8@{vco H[3hfY_:vCvyCa(! ;r:tM(ve U-T$;if#q8uIgIZ%ts @@d @"!f~Jom``3#a$=ZqLEC0;c$ E9vk\߲ co.]J7,cXkLƫM_Mnf3_8Xe˭JG{^ܰp4?u{L=`F}wEf8) $a \h쐗f"lےJU(㯇^۞6 ]3]wch`,qm&ѻ߭XA"DO᥄(PR1H?꣏Di;8yyz Qy[ZV̷HhP@v|Ià#BMu! {mY(Ph ߚ"o0!<$*OK*K)ӉVEJVRl֤e6jSg3/XN?ӼQW/ ǐ#V]Lk_11UFEXD;ڑ<9P/tXqtE{;~T}fXV&"K̬pXT0}ob5ۺp诋bӿϢO5@g36yz-hEW;5*ƨ;: f|n9F|~vɯO=5_'޼(>떯;26z TA%c6ށuN4EWN>ZABLihŶ(S|/79 q0QU!fV8H!ٱLSɾ8d >OTO'\'nB;Y'b6tL)+>;Y1PPF@Dsg~>KEΩiHvL!0Ν/fZANՂ$ѧ4L2I&eC]p#^jۂgNC"[$`TJw$u*EPޱeR̫Jl QR5$Bfu2ت1ys~i!SdX*tF.Ojtr'eQQt(1 pSQ5 Y,C$`+laSB '(D2绫 +*B%ThBd !c.9Xj _FCkadq(rB ` CPb QK yc4΂U*>H2!HcJ %@`J+DB|^ܖcQ(Ƶ6hiumC!5-e2q E~ K^뢢<|Dh|JajgZ20?s2`0 b]?x]E!D@.߆~GLNT^J@k'D\~p4Nt2+Yu21CM%HQ}.C;Z]l$w$9sgd|47BxwjCyH hnBf\ەl!^1f4$d&9_w/Y?CM^%^M+XD֘<{:W(BH-?:>35#\乊8]JI;Iώ7XSVٱ 7qq$3h|R>G /oS8"qåofzt"˽C:?P7W $C+̲X>o7WקM(z/IZghӸLD@5ƙE`R'<.ǶzrQJY:w@Ĺ+>).w5:4O+ev~kΙQ§rbnW'c#CFJ,]oFd!7R,p:<#-PD$N2R*I:$yHChiGBGZ–5J]fj &qTi{\+1@i BY4쬤'c+ M23sq=TSTŠbHȒ=q?o32RJŰAF #~vkKtda#5OU$?`]:iòO݇XZѬ&Zm@>7 'lXR'=;rLT] (r%i[U#VH+8 1XP`̤FJ@WS;glv7LAb;Ea3A ?fzGd}.micQ.x& @ l_RÈ &X3.^EZD 슬(x q7NCp o >qo Nn{-Nlo2 >?I3\ٹ-eb]` ,Ӄq;2V<Z W.}&T,HKySŭ2d"A fPҁ+6.BE/`Bc,`Ƨw%!o ЌouIUY?H?O4Q=**rĐ#(,i̦8%+'>qv6Y.I!پsld7Et-69n$`f4A˼5fhc]6;l+L2$H2%LnBalIs$+43RgJ&/LeIfC!k= qgr*~\nJh}9fR?oaj IOCL R/c݂~}V~Ru]içP@|~ o#Zͺɥf'o,T,iN^94F )Usu-+J)M^J <_><:.t?g?JJtIf}FRy,Wx"Yw$ˁ7>nNi]yd*y6 xvHu۾?5>bWJ&8U-oxCFGC͉9bňsgQ5 }FHd[N}.6PFJϧ VZcp I3Z"Z]L 4mI17ݨ{A=7vsZNn=<PJ7KuG{|(!/oȻQ,jB"v-lk&U rR(N,W^e4*[_7cӐ i\Q`lxׂ9:in d_]$X!yA.#(*RTA$U3! 汌Y{ZZ p,%o(+YK|nB)ӻ g!gb`APSMS#6A^dNrև VcI'x|w|G6mQzX9'3dzL8uLBx1=@BϚIj|;ag^0Յj+ReMIؖ8!@.-ɟ瓲75gDsf,, ۣ.U -ʝ* T}60sxk+bPz9VvLu>3󿅆!܅1H4 J)b&/|!*hS&sT*fHtI]֬gd4x]egt6` 9 1J滳wu}tϝ{7= O7d]éqG_?.,SMK7 )?ˢuq؀oz +K\fq\ڹ:թgN:\}/9 UQ#Kq_yWoֈK~^1QwopJo+jga+-ܥ~QQlMڔ}全Әqx[0鷰1ܯ[zΎV\L#uq .˼_Bުo0|gneb$%ڪo13?9^=(̧EGt=( w o<,IP"ٺD =_OŁ dC{x;g;P؃ѥ)xoTU"dw>箈'IS.ЌM$^9E[iBҲ t%b+޿sri/]G:WT97ʵVWA#s9[(ջAimQ>M6Ea,NX LxxFJN{:ܕ LwBj2rԐҩCI0}:(-#fe*oKWktⴄ:VnUzW̍ܦ>COQϽ]eƙrO;to@=(_e?0+zVVP>j 3m:g):!8C6 tR\r.ݲ%M3^UI[Zi;D۵f[ ^EG\n@S4ntZ "kfS>`E;Qt\VCR(025aMwNC?l\ ?؅;!jZF%7H+JQK (i9\eAj\rOCGRc$41OtRpUܔ0n!> k5qsƄe1F' 4A>u!$bŬ(EZ}y#!_+uqxSRh j&j1bDF,E6Mp!.E 2*>yfU@ot7MT2"3&.f2Qx+CoJ#5Y9?4$"(1Ƅv?`Gz)s߭'` )X RjiZAf,ܹsi4qJ /@1(SsCq@Cz^nlX%$r˫t)TmkI/ Ӏx, 2PxH$)Dh_O,~U׽g_WJFX(V!A/ (E*{ Hx GJs&ySxha: .yNT`@a /:^N ^;RXy#wͯȪc嗺?}!TwR6o;u볺ݐ hEՀPңĺr(!nr a~40Kȃ+/ oاQg~䃮FZ)^ ,qD٪=ѹUL/"ŊfI ZTE^^ZgNtwE/TMZΫ"*QvD75Dٙ~xIwŔS 0H JD0;cƓgb 76ތ 5A>-49Id:Gq@p#+m EK:F4*f |9{ Q̴[wQk2frDMlԝicP C֠%B`45u!ABAbTrXue:h)20w:-Fx^6aKmzN#Q*T$Znv3œè<&# |v>T5aNzS{[ʋD@i{d[*w<؀@$ ڱC|EL\#DW̆TH>qLLFB!¥@m5P0fM# [ttZ,pkOm9> J% |\|b?gPZJڨʻGB|"T7v{ Gp,FBTWUpAQ}jhY`>9٭(m4umEumkFkZaݒŸW*!o3jUUsE4zm9rD(,8Xߒ ON~..Z\*) P3 'XnE--%C(h5EP lTP[)Fv/(rV0Zp1u@޸FM8(ŀ 6Y̶2 Pd!XE:F-e`'CEe$͒حW9gмS88Yl0n%UKhC, x0is̖>@! ,@ƀ'E ރ@ @  {m,/Y E ^;F0>G9ۚ9K`-Owlo P?c#eP=A4)2}vҀi8i'ogvǃ ML*%czKH$6@FYm4$2\I֦ '   /̘mϓZ_raqWl)!ۑ_9[󲑏Z>wwtg P uJ@nk"߱#e!t8$+H,+B> 7y>l lq1F``6L̖UO(sѹGue&`מ+M+="[57 Aݖ=ygy 2+M/l.ʡc<=)5ڷ?CAYl*W  z_}qD@6qvdmm궘OJԪT?b ňg ǡ& ě;] |qȦ3N|@D*K!%#­Ag[lP,-M&"!6_HآEn},~۽!^i1; '_ߟ\gk3EꜦ&\D@SMМc"@"O Cwܧ-P'·D4w @q#h#ހ㏫j{z$/nW;_,9}.zs2osb@R[jK:)AsȴP%ʆIح[O x⒂ ;|unjqpp/p{7,>3Sb]T wC5VhѬS,rt4Y-2YL5GU==m%G3ᣥOA&2adcKj/D*m X,rkTqha˹,VXv]1hm4m3jʥeR64.w dS#pD6Q* aQ1;lCp6@ M(6K& @}l~%` ~سi!$!>[C`}J3kֿ|0f{(fbbSEIE _KaWv@ ۠f$D3p4*@I((E^`s.<)Eh D@|:D<dQv8CL@}h@Vx ^* P;`1v0L D#C ՅpA[wEDCvT @U˕ 'D(<+MwijE,:qHYY5zAi굲G~#b*Z;쨢 ItEF#Pػr.dY%|}O|l^kj}aN6UMR+^7;̫}uKwq*G}Di@l@ˤݾEpƢe[GsNXanr:2|_f:- IXneq2I^dT[W3vw0,Bl`]`fp{}},srP\>'T[uiD a{ ou_쐼/7`;.J+ NZ CNV0D; "{P]^fctP mNOm dC T V0ʩ5o{d9m$[Ef$#Jqjg^h]5@0L$hiBA:3xȘ6#MaۂapUfiT݁QE!iiFQD̂fK-aΕ˄Js PPjMi8SLi@MV9quGif׋!q q 2q&toD oy+cFUި] BްpXBRwڽZz#_zeljUZP<14"5$`XIcX3r/xz P!"BB=|;g-։@Ń3޴,Be!CQsx*MLeap%!`wI 0D)`B/S˺k[s:Ms/ֺS&&Zb,I2TXVEI"$N~ Z"Os*Ps2&ckm0[MuC* -i)]#)Q,ʷ.->WO'yAM &!A;ktkyǑQobgEU $O !_4PG^ qtfj#՛wni2GH9;Y F4lUH`6Uh]qhtNT{gLP6H~,g}+y7KݿeYkDddCJR)إ\\״?{|[яNː=:d+ t}m[V6#n5^,6^3đJR1Urf܎=i~!O$+aדz\SJ74I-ۻ*PGi'Kz~Ww'[O~;yV9Ftr*>l'?+>caֲnBv_;UuI0ZD/'+8~OV+vo ]OwfWMqNzRd 5ZQ&z=s~ t,/lYt!ӝyeA؇uOtk~g\ؗӹ*shC:ɐ|\RjHԤB+oS6aVT?QAvcw5 IZ֕ :nz:,r^Ɍ ȶMW3 gU:rUZZt2ezN7b3e:8+umVk-fІcŢVnF~x7PYņkkqNaֹi[~'7<֒ }W=VeT[hii̐*D ƣGAՕ4;&yA͋/ǿvueZJ㐾Cg':oSިߛ}g|ĈQWZB]ꉔݑv$ڮIW{u(U_ٝBK.0Bssxbn9~t*YnS~6W_VA^:đIO ֍*`;]9>I RXRS*GvqF<ͭG8R=sF4Pʶ6@#͙U<3[cP5׿)V.xP1U-mP8Lqapd&n7U'6dDQYLLq#k^Vy\7Vfb$')ICL,MаIϭ"?ZQSv*Cb| ?ab_< H P&B`)`"(P*" "#  1UY0M/⇖AxdDD(@W+`eDRХ{Ơsyxe0!)LA,+PvkS]qӉ);A$,ӑJ̇I zm o,*q4PNpCr2x:h*gL b"$E!b$`RĩPdb% /Ze cVaRI&,EDP!q^&[0{84tM3w2@;[FWD2˸Zl# ٴEĺ敛xuβ ¤nDPJF2`J1" A"FA$fI40KRF 0`( z$(RY!2-߾ZWO>#mxd(Q4ŁN.(J@G0SMSI0߹sԪsg;l7+bñ؄ Ҭ8Lg6rD~2ndKM>N4ȑDvT npGzصBI*aMt72U4 ˲1v`J#&A'^&s;<<(ddlwۆ/r:@G۽BNmopd@;u``KqYʲ$Z@ydZO=F3H$0-$_zKKzft3ښʵ<{:uorML#zToU*>e)hZg,ڪz^؋}G|8O,^io!@` oۺHDtRxI|8ܪ^=?J)^IYql燴_Rv-3_|;çBoh 5T;ف}'0kQ3S=/r@v.t&_lL@D1+Wˊc&2HqAItWoD᝽ۭE5dH(j7&O)Q@q` 0v6R`r[B*?+)|iƶ6X$AZCDD8`1 i1IkiQ/5 ";g#n(w0440wXw~ߠhN-WRjh-5350F9LFrD"Wa =P$RjVgZo|v+yε@˰BKJRų؜Vn!9BRqJx2;S`^]4| -w>W /ϕd챩Ef]G  d5K.(v#׉;`pU9uI{q;}5=T=Ysh2SFzj_av; w6.M#`"]7}f;. ^m'ţ39:Z?M-#]:뎞u.ρ`G([/#Ѣx;|oF;Fo4G⽶7;8QW8]CwciQ gĽLcWPxpe1E̥nonR7e LG? nO\Ue:\7V f_iPsLMf; e>~?TF@X]Mfn0 g7K H*V0v2q ʢgGp}1*X3!p~HVg0R%G/(Ѧ wrOW9s [ZXItg1U54֐L!`(jJ_]I'ݕHs $K$v)XSd m:eouw1m'0ήk0nL>mhta0}'`ފs`DAU'zjz %&uB O?ԫ(FJfFV^TGdɹ}/޸K¬yb^R:*rY(-kSd2\ FӚȭfCHlZP$ei&o>]o"j\*cLìטeQHaGH` }I-ypKaOmz1J W2Bc#]L{ ;|-]Kߟ^sb4D6P}4zfq?7.wzN*&z=L@ idȁEr+Q"60cFFЪCTD @h4I<ܩotùB"PHKhdz٧@o}b9k P2{-EVx[QEIZ&a B}lK[bJX 1lz*+w2: gZ $+Fy~oRW4B 2̎{&W`rdɃ.IىEdUŭoW4O Ū-DS\?& q `i wFPع8"B`g\*(h loR/REejMѭȩG4&XPs{}3ĚitBı\c.Bt(0 Jԩ{OeGAADy+Zhz\S'<J[v'\KezI3,0:A16]KN3ѹQP@)pHIVSbKNpeS(lndL@^1WL&+No"ὶbi礣C]7nlh "FH_m %*l[,*]9FvK;Opebsov,cJܕ?=7HP/u'0I"͌N+EmҰS")^sU٪Zćv w)Oasͪ*w7!ՠh* іȣ =Hųߚ#Sw';$Է)0#:wut>ŢqÄtVMZ19'OfFFQPZU[II^uR͒}#ʼ.{ G!D\CzӊؓzMpv7ӓqҢ:P&X=&'Vw)uGg}~^Yမ&H;|C 3mtdTz2`c}G*wYdl<8%Fn8 hx nަ aIA S?kŪ&#Q! @1(ryלHUcCj,XB xmN)CB %\e@lfZ`IT`B,JcF &{څ nd2:`mĢP`V`+)+ZOy@fzr)|W"4-,ի4U4⚫Hr b8ikj\aV1%m('j?^B;j# 6اှHPC]7}R[5]FzCHH M!=2>~u=e@*8%6/s6HbDڹz ㄎ";xH~]E .;:sl_њr%sU]6Dk(hO&l!"i}ٷYFFk/昭a6j,}fw>k;!}V&][qmQjbC.?!vRN3&eS<̾['VQנvdg2`#$ }GHq7^JQwKU܂*TXBe8QCv4{6c4Xrd&2ӥJn %4F PJ@%IXh*) dU-a6%@x˛7z&lNoE&G̶7KE%a3ք6@Ą!Q}&wvGv yq17å*=zGْV,ۦ5…\/Hl6Cz']m:qwȷSxd̑P9Cf"8ᦤ xaқg9kF7_m tx5h1bn\]ƴHNCG$B 7bu0UCWV˵X # esa"٠=pl_~lgI;CB"K)Z5KĞMnx^kjneI' {,:GKc1:" : N?CSsrFg}X;3|$QXV10Q6.J*ݷ'Ɖ៏$lql+D\hȠ$.:pSH#xF%0VuRihM\O?=Ju\ 2*YYG-Ot(~Nkށ>4'9ENW?o^fq>|*$?14> ',SLsoDpYreӳlFtv2kB+ DXZlȑD@ CIL :C)nLB686!->W]Sb8(m`tc%¥KkY0Cc)PRG>$hڸ\JE^}͇)N8 hRظjFw&`q5 A[@ t7h3Da` WHRl0@C2Q0O<;DAlkEbO gf?X_ftk@ $-{qW+{5"@$ś${MLjȈ T@hU8Mok|h7{55`gq_\U/gt]:fL6rm׷d&Ԧ*}؉΁aȘ҇ʈkч="w? ji;gn5 ^uc#~!bBđ91D1ILE^Iv0 jD5u~L֣~hI0y0wYG<0x>*凭`4EY>ǡÇId RXDH,Pςd}őҁ*(:@jkRY~Ba)aXY HTUfDpROh:k⫈:B>L Cs8D(Y1hM\vߕ^fW)k"nH:iprVquڜMDfuvT"Qqc-~;7{M8;tJC&ա4%G?{,RA AڭP FiGHoAnm;׆)Uw9okw{T_ßt*Tq#n8ɇ)\fBPТ*8XC H[`WDzڅR9xNUw30<'g6`JzWB, k_l{LXTݺI22v0+t0 )4jѓ$WVDN(FHu#xĄP+5}݉hFIV-5l],$ %Nܭ$ BZx9K'"ngǛ2sm0q@d6ċjBLnEXpYWCZ.]a|TѹM; k,zMS h)yVu3)Zc\5:3qޥa)H4Ŏ`$0~Cl"eP.L۩cEեO$ 䚫1 Ze>YJKP /κ>++K S'y=RyYSWhoWש.1ؚeBAQemn}UAH&$fL3CfeEwvh_r-F_ڙB"$k/=MB" K+!oYF W;]84i>s.^ +p'%M3ݢ5G3aAc &l!|WߪYoi"'m+tEezdi4Ta\V+[(j g/&*MNh4| k|G:2Oʇ-Ff(_Ɂ YڷfpX  G}fㆴi!)uM' zt?{8=sQ mǝmx.:LQy+ڄui18b4\ng^_$Y/Ɔ6[Ծ o{3X! K#bgmp[vw68,L)9 ; ZGEsUf,.J y9jePZ0.[}Bg3" H/eJJCLƼȓ>)zQ:e Ve$y*;Lu ؛>~P6 ը0|1 IۖyA+Qbhg$G:{j('u'\0b@t "\ֶ%j !슿n(Wt\"!3~ʉ3@Htmk<ʜ_K5*20i)~׹ Q_4ZRWɿ1:w/)3^QH DC#e/t5 ͵LLg',7Hy dxVv=JC41f y9o HL{HgK6FC#L-m,>=Lz ~-:]ą\|mfI+rVeUOSU>_.9-Wtm>Y{͆Z쉐1@Ma 3檀Qcg N~?nj8T@`Ts4:_ŭ5ʝ]|W:YunNj(=NoN ؿ-W֫lG)z- [>kknJ,r!>WlsZYZ雧.yB8*'QmD#w*=W8ue:uIf dLD3Xt+ >/nOalk4R]v\DNU{}QYdarCx?.W[vMCr-ۋbYGDTzE[$DSbqLK"o03>L+ k%.I)bXfGog]WzC}G3pK8x7YH*2Wyqn:poObtr<Eod›\iL xaw޳!S'mvXOg*+oAM*B4ӟ;#ͧ^\SLi(ǻ*:t /i4>{"$mg4pd5⩘[YQ(fR1ԇűg@<yl:"|o~NusM3-=|Fy{qP)Zޙ#\;l8 cpx|<}.p9ݸ./i'+e龙M Y19Y_]S{HCIjk[{DWv-_%t; ImV=h/}aj__t]}m 2|^̩Īs9^84{ V85OO}߬>{4OY{ɗl'=PugC4B$X>!W<~ dN2j_QrU@$ $Gdd_y].4PQJEg7\VIBPvPifQ :I ̶!a.Ϊ<1p`ke@a'Os iacm` _/@{N}'B;V M#Cp`/2\31Raۭ * A D#VDS 9Q D&F]+fqs> ]XC 76?7fG,U ̓([785g, jzÈzHs^id D5҈%Q6s|nZ")H5* O<2M*0W.] QGnk eI*U4*DH~RD D'#q$VHDOke(gkJe[&!pSoLCtǰFR !P1R4OTAXx|O€Vl>HߕK"zPbdXLJZ3ʺIXvΖtgKyΖꥣ}wpz'(L-;fcj-Jz2Upsc5Ī5%j)/\ ]05u^ეyAY[JM8q&BkUwl42 ЊK>I3!~3߿1p$JDDJ 0cq  <AdfI&.e`ZY!r{XFeGS_B.0MD@PrA r~q }sn;v$Жt%sY"uЯTL5=$?3pcL-`!~P1QqŲ(kw&5:dy5rTC{[f(F`G'mI}9Ӆ< LЀ(n/7=l}'zk 2Q r8쑮=.D0+k7 P< 4DW[7/U }>a9}ǐD6W!Oxr6N@5 |kPPX2K)%⃱~%W&rF`߻Uk3^88ej["V7\_*L#Nۅ0;\`~VUrLuvŪ 9/qy.aa bo6 r"[Ǒ{kٹj2On27wOf\Bk:3 ,`2y,<2ZE1Ey>2^@')bH*unIze0+^hFUy)"6CZrp%sgI짓> '@8@}&s#q)ߊZ *.LQNJI `TnJ{H$톑; ^P{ ^px5}:tM`N3*+"+`T]TEt|M2PpX(`?.x'\-Id i =.b2 ";bmH d@_d*sh(|T 8b>I^h?:QV CUPP4dHtB"Hp Y"JE-?*_Wka "i]#G^GH>81MER% ܖ fl.VI%P;ؤX)|V)x2^AE?+xo:qgJKЖ{݌ O`gaxܙVBQnX5F8li]*r\5[Bw*emĄܪ+{emHPbu )2 (4( c1wOb.(n_ Z ^>_O=0!iU2lJjB$қmbgnƉKbJ(&$Krɒ$HXٻV+eVkS "Yhu߆,M 'vfPĺe iVt,奥(THȞa$}MPD>kPt//h6>H1٘gקsOoolou@hQf2;>5"]YYؼsLs+2CNt ]<0Ѽ.̎Ndx=3VQpUzpA?ciDNy9/sF?~7^7S4@Nd^rg:[kfMo.BlrE]jŕ]`]Uud5C Z. xgr3J! +Q_BJC]j=CZ(cRڲ@v$ 'rC8ݐzNoa&D@NPE"&VO HbHrL @j0$R,$6NP4Y$R *H$d4!d3T,V?>^s,B;gP4P65) z *L,B,H%dqtńz wNBd힞ڳh,Q9 A0: weFl q[vaװ,P3o#+`; L azKܼmnTEQ P?Gx`ȆTEfY t'O<1D}d `07@dX R(sKixu7NP Y  s,DS*C͢}Kky YT=އЌAvP-Βwȅ2/3AuU'W)ʑ8 M0"P;psXv;HRƒ+PE`)"wp4& ;= zkv@  C= F8Å iO*C^€ #@AWs `,%$7mw@Cj%Pkd$z7n.nrp`6NÃzqbn7;f6ynZݻSWQ6!g6lSIiUt!7V+"Z&Mua 9͎jk m6&́@jD&yc L(+ڹx:52 f8p38@s2@4FX Li nxcvd[R2IDJqlBfq9ʆ)3oq۽іZX֖8C7csW':)LSZ5Y hDP'RW88a^](5˹3z>qj?fŪ9\ވ3B4de8*9N`,aеM22oH Oy004Đ v$ )-Xm~EҪ6pr(rQ;>_v?AC_/³?ϧc:jf?k>RƏ}8zkY?u2cuBi'S;g?M3z_|~k>[ۃG֦&!t*drFNWau#"L=_vJnXC]OY1a_Trnˮsߌ9eBbHTQ4ߞA5qA,XmL#7iac㞨~:/Xsg6_t %Xb\ʳ= -pȏс?"&ENq?zCtn_e[)-G@FLY7!k+ ,!*{UN;g)ǹxcdS1əG* -(,l!X[K=M$37?y›G`/ R"6䅌)pfDL0 y~ ,`YR~"R*2Y0)٬l"OIzWWa+kɩ́"a:.`,BZH Ez~a,J "@SKQK1FH@R7Q P$,4mq@qoK JZȭIQtpb7bscR>Nt g1&Xl;6 Pl !!rVTf'<@yRVnmN;2릛f7zh@1\tG Bf@ Ow<ĪS܉A\ Zdφނ  hR l3+ͪkUJ]'u/p- H io5dm ajdq]ͲU?OE2:i4~i,MۺIllC];+Ii!,[JmO`8lcؚtϻFar\M/n(+tn0y8Y[eD4E5h|f4h@OVhx ޮVkY/5]VG4 t 6̖/ڒRܲvwS^vV|QB3WRt;ZVt| {OziCONpVTEB}4eքb 2-qtֵI9Xr4DF"叓;ASo&?g]fkh)3n oou}Ytv޺| !N/dsVgX{.:pXPE/Is/7Pnq4"ho1P\G^U qɖY9rp$@IGfY*Pdz .(Ƭ$d. ۧŠ  0R`Rܑ&$A" aoWI4 qJ0FMZXT)|EnVE|in'gtЁQ! ѡaRg/w|"j}~vzƂHJ~(AEz*'yT畝4d3X??op~ITbI86S_'DdI:V!J6E2 HTX\"EO_72UFLH L.zn HhMeO5@$NhT Ҹ J̐ VD"DYs Zj=E?=k4OY1mPx `(gVwեpwIq|@ZoV&asXkH3K&xD7SLIfT([LaB-=KSLb7>g+5'ܩqKCBRpyH /(=yuꭣ #5` }}YtC  04=kdfPOE w\Y\bsUF ӌiSXC٘34c`m͖{4ԩZ:ߡ@dII:*3G2521` LfHH.s Bݠb X.̯ mѱQ0d1PFJC`Zpұiֳ;ٽY.9kdJ P܎jKr042p:i˪)@f+sΌ1$2SB2r jC%H &tusn?@\> ٔXñ؞./RDWԣ"~.LWԳhQ j5-BIV,*iJ'k@"$ B C 1SfÊ_.$[F)=ٝS U- * X4-c"EHn!%-Pt NgJ8*Dđk$,ee}B@YN$T _BUꠏ/oO/g477:;/ey VHc)v~HrP^Uxf`f0M=zȈg!NZErә$v3l; ܛU•tCWh`$r/i`TX74pqm{ڵɹtfI`D8YF.څ1`L0LPTW-@A.I0/!`89йqQ 7f8KRRpMIs1fHAb77CY۝ue7 Au V rk Ô 2e$mu:("t\IԪ)ppsl%h'3>{XT3 _3U<1 Ø Ba '[Ɓ uf 08`kPOqI!A!h.Uݚ\@҅jLi 9vc"6hepKbOt~| -K!êS7!& q&\vxnRBN0::Ɇ@ 05 5TUU$]˨99pbsvqasa-*ad,ɡ8JEIķMa$Bt\ ъgD72q9 &p ؍D!9BDഈ2%bc6ݺibM"T( )h5j$匘pd4֍8l ;*wm7'AREӆփFlC Imj[ᆋ #PUU A5^Ta F-MMT\Q8Kuuxhw:1Wz9ՆK;O!q}AoɈ~=h~xy)[ڷCwCnvmLxAjnd<Ǚhmh*2G\<f9Rbt5QV°'k6w{sxN1@ 8!ㅔaSC52+*iܕ]L4a!ft6N ZΎ&I nFVs֭N82FB:ec"h Me`fd&c6*tj36ʘPB٭2k6&33S ɱ, pPYi$`: uzo iŠݵC\kQ&tD/hfl /IrKa㣲frZle Ѯ$EA[ drrא:1z_۾G*۟!HT"$ @F? =_~fvH$\hAwEzruN2'o$ZJ(g%ڽ3!߬ R>qI0BEAeL EPOLq'od.R'?aӁ\$KDnJm'r]4 ZJo`۱8C&1x{rΝfnrl/!d]qP(@2e8 `4IœI hKLӥĕ:$Xɤ+:sEvn4L "v:Kom+3MPhdi=0̝KBf6jpH~ 8E̡R%&U2& m"،f.X89I[cR| rSV/L.i6*V `"k3WB}c3+>0DH$;@]@`hZIu͢_T-eZ@Mfir/FTd@XzLmIxTs TDZ7^:_ 0@+&x @"'p*^t @ӣ{ îa7M? p#-țb؁_-A# tH%T THܦ69攴!{p-3\K!ar)YOfY3Bbo,TZWSZM E늇(Mr33( Mc(/[E.KKHV#=Ybio~ӸP`tm#AI]&n(01'VŸ)6hQAQw e9;.CZ=/WH;=sh{wY~R ]L %"M5l1ϋm9o_2OVStOosLm{@Qݻ)< S6}8&ZSZQH 6@gW*SI%TdhuqzǷxPNmvdl6]}5_Na6E0F"A%PnH[>x%d88MP>T[rSVFG/'=;fܨ{oLP@a!!$) SH<>#k 'oQ=&jF~$(_=>^onUDKxnN$O&&/ ٍ/3"}+b([ىm8ۮ̎xtbAvDQoc#ƙGHn{DE=~Gͬ(1kAQ nxR-t$گ]nm3I)\\>d^.\jGbS! >xO~@@P8iҀPLhlG|f@ AxsI `/ߥnӱԇgj_WpYԥ=~۵}o|>k0 v#im2* 0tqT-(6?Ȗ*kŌ`?+b@ITڦf: ƱaX,ٙLfޗ7i* RB1B!% / fW/$UOBF<35&0cuW'yȸw95f\^۞oR~k:~vYiJl []Onw7"elkvFdJg2aaL_z(eZ h@s:F|02$aH>j(Ubڤ:X&)`[:c\g%"j%y o{=mZaǯدQ;mhݤ9o[s5LE_nz1z|~~H_>)|,7ig9u$8w$X[*iŜuk|Xzʾ$kLl> OVlWNp˹d+u^U[dy`C7; vKr Ӡ0d7XIgw[vE[N a =aWOIv U uP j0B1U Wv1GGT*7{b^5@*!9S+20Јy`"xi鄈yX&FךEpYޟ5s҂=0͉d v6ٯ$7Pu2w;I9sNZQjY ֠ ~M\(S;!OLMM-+o @ tỉ\"|LA<[y \}'ed PȉSHXӾw6q3Pi-|U6`MB]TlhTOgRt2fC/HvyL Toaۮՠ>?f)QkF)ugDM]Q[xX6j::ա뿮-SWTɷC, :4@BD\ﺵ0jRKg|rwONWs~;d Fm(J zsmaU sNNَrt.UuŒT,D"*YTW6(Lɡ?z9-pDDD֯@@mʀchd eB/@ rL,% 2{ܘm=HiLI!+ȓOvH*xTj" {{2P%%mud8͑.ⲶzdxF]+O ݎHQy d?;lӎC5F ӲwWnlr@ ٲGNV2` s} ,3067y^;|ږpx:*~{\ﶽ{e3T\P~}py'GWe6M#l6_LkPƵqMh e=[Ծ]62Mw<\&-llAW$ΐKc-(Q&o3 4&|xlJ0tU3hAG$lNТJMz8^DG |J%Pu}ce\iL[h4"$bv)<9G$Ml{[76#`w m'rCH!"pQXvߎUM _DROsU6"hAĞaKI-BUzyMSW/" A`)9 -*bq8 li 3CHNUp 0 h޷0hdʬp^/v׎ uActMu1Ko'|XE3x$<,P;un@DDD6_OL,OϹyWuyW@f=]z@k f#9 :L *)k"&og{)Ӵ6˯(x]CZ$%  h,M~l^, qJ ƉR 'bǵV׿0~OL0dY舱L Pd,pKݣS3T:gFgWϾ{~tkx M8^=R\_**}-iJ+:2 )ObnIhɄ0vQ\4FZg ?6c1uLIJb5tM}o4I n[ 3#hkR:yQetЂP:L-;vsc&QW͒ V - X "[ [T2 \ Q]Y QW R;L *HӯSѵ mpTCߦ˄;7ƴ|6q!ų)OM>gkTk X]H}㦐g\9\,B(] PhL}*$ ё&ۄ:? a6nuv<@ .DH@ `&/+\xLSYCGUnKs4&~5/ϖ&1! XewjoR/J"B@ )LZg7}FnZ bfR"4ݯНia%a2' 06sfZ|uz'#Zx;y"'ߩ?F*\*fTؙvTW*|D;Fi.!6KwQ7V<r6q~_W3ݐ'LM76Zw95"6BroKO߰KS$kŹ]MQ3 -3ou{Wü P:GXq$7Dh"(8B=99}QN3,L*ռJ D\bye"ippncoK+ks cG)67*ٱѡdm4y+Qt#IRBr@_t, 偬9_tuv'~"D]Xجoÿ]p'zgh:$YJ|ozùKK5 :$ =@{NEӃp׈ Q'{fS:[d9CwmdLj6' A|t'?)jK'pS D@ 8,@5D[m@v| XGl>y={1nI$9vmjwP㜭Й{7;c 7ԍ&Tk͏K6Pq|=SC\ҍo3JDnX֗R$m!Uq W/_W[V{Ŭyyv_Qa<8#26nI:2YO{Mv)>#9nF`5hċu=tYS|mfi׷a^\ͳͱ j|F2߲yh?K#.ҾG>6O$/sɀ#[9oƶ:&mNhU@~&U99t(n|EN0;}~[BYg7S X 7:芘Dx9@ q[gB"5`c7dJ&sFdE+R ^ k0r8JCVMiTNTQmTa ]bvjZ enAZVtt]9k|#cH $96fX{[[,FK$Y=RPԀ͚I<uU3nEvnР'%2 MEUk''UEʠ n}UhP'C:<դGzlAGtBzl އ :\Ԛ8f*p kU4|r:`~ KnvVe6Ev <=־f @)!T0@B!2߶&l4,&zvݖdE36S{!b:[ɺam&S^ty9ޯ #0U yI$wW_ jl?rt?x"~4_;P3P0pE`QkVg =MSӁqѼ,)Q#ww;RotL~ jFnݬubi<ΊG\ÿl&s $&i EK-B[ Ek|!"D&1ڣ/Nb oF2#@:ӇTOBErRB~Ö)wn$$ \S/͕6V +lWZm=5Ka$B*g$te?)X ]-ͽpl41 D!̑rjZ>xrზ01rIbF9OA&RH^},/,B㈣X'E-0`>rx{\0dd 9/<[m$1v-[4D&@șōa±A:+귳^=pm *2?c]--$adlD}<ΙB*:@hӁ$.S4 &qfvEXea}$#>gmz@)ȴ" )k.΃p=:W Q'b2V@F͘[$E+ Dį<ЌpHuo?XN(4s޵|G: O_g<0dQb#ղ>=!]?bm]{ [:(ᤘ/یϢbFҹ(lzYכ%T)'0',zJQANV(@R_D; z *TEl1$H "oց4/ +}x?gW|Ω1"uRJ~=Ҁȓ]P SG3\(hWxD"U ow\Da|t+kw^ןZT8;mH+t@Ёӆ皨|7+m)./d+E7^F|_̬Jy\9\`(YmB{{ م]F)^٫bL} Z!;sʤ~?强-h!S[U::MfZwtg^O7ogQaI%FLPHX_aa>,? .!aM 5WWPvN)MDY),p/7i v=N9f(&mmZesRٙaL*--Vy`0ᅨ&3eI諍f@-ma ׇ<-5}mk[#H;-]!K9pNoM.凪D,#ͩk6yZlV^`o0@\\m6w,=7GQbt5c"3+ \v bykAA ,i]ֻ!};)aH\ r>:".ƒgq&眫-H{[{B1,#1" ;eq5HYY,*WN'V" [(~ ot;໱rg2x-jȚC.p)[QmF%_]8LXv򪮿0X@Bު$loU&0DIkYUÏxpu@hDE5 Q2i.0tR  @8h2%Dˑݕ/:wv&:aFtY:wM'K(:VhæԢ{Δm}]3 BSAMϠF>?",?t} lNK x_Σx8v{hԌd_҃%fZDM1m*GnQz'Zӿ{=^ߣ#ޑ7A;DD 5|] _G`$0 zS=IηʰٰЧZ> ;3@Nl Nޫlyl&%D R*D@`x#g(ND}֖></Oz4PzJK3: YdŌcbK;R 'j̀7Z63C d;iBH0CdP y Ԅ4yn5t6xÑw;D 9p`w4q^'g!?PRd/oK?영/xmiQ`xi (e Vd SI}r֭(GiVll7H&G9JxD-Z@0 H- QD9e =}}`s @PQ^_^"H|ȷ;;Dž,H8qK1w~#P~iL@w#B!"0es6`lŵ$߾pEGPX>k!} 鐐mJ@Qn |th) ,G7l9.$)5 `u~{V a-[}N}jCSkhuT=ғGgb EG8ik~'s"ds}/^Ag_(vgCEuUi UPRVH.fZ= q~yXҏ--h*#P.v49BU2v?@6@rϫ<00o@9 /"g<҈fi D=C@jG+ ݳVȩhP ,oy!9}>D _h:~'Ft4BT@/32gE "8B `܇1 ,ohSfe @ n0/<>`:YpC)iOE$ʧwwVU`X@E0K4S$Rݺ[Ozw>'^ >R 2?3sBcEEl_|*Zݲ-6$a"V!1Y-hFuPs865CUla{o2;@w]%Ν gv[ -l@ؿaEv,T],/ NgRwN>쐳| ģ,ܙPY!-:"HD]҅Q9T=FKJbrs2zzTE"ȝ[؈%]Vd|*Z 8y^+gY9!oOkGl:sͧX V F!%lҎr9 Qm߀ atP=(͕Pŗp 8J LG`ژ~UX)n1- -"cKjFBiE ϵW,Nve)zVBL?.$#M=$.tǗǟPx X8d(x32,??SysKջFu60] `l8LAV '+MtTK|R2 ]|?HY:]v\c¡5NѺ;G?pΗ[!uOPHgoǗ4.xE\sF>}i bk?~ڢkTd7^ת*& #x. Hq>J1x:0òEvX+->ztJW:@ɆeXOggβ~>Be8R[NZ#]E⚁ ŇqrQ *8> 2w(gI{v!98IK`iFgy7J -Ŧ,wg̻غr* dQ">7ɥ>经'tdS^Tm!rZ~_!=n;h$Npv$>RC:sj50 fEG*aL UWtS]kSމs+.o~@ 6;_?$ xh{r!`k[6 |za>q Oe qOE}C`&a8g X}~MF=Ӝ>e֝/id/~+./, =i#y[}SêihvLӴ͘3@5lFIX=gYoc1.?ߥk$mpRvڤܼ~b:Z9le5^p >f_ＤϮuԗ>}\)ӝ=4€ROZ t{vs}չ`ـdϔP>ULm]j*wK4훻zO4{w+@Tw{`6ыY=[G|>_z[SVmFTU/3(A=<n7>xoz7X ^C+ls[7Ye}}*}}޽uZn |NVl]5w[{z)E3G,z]5z_3s5W`; tZyMiMe@c|=I\-os(ү [ovhJ^{oBP(۵\ȧ Ҋ$zQWLR:U*B5lDT;^ -뾑Uu:c67]69wٞ78 4b._Mg}w|*]{\^: DzDo%=<`:;޾z|d'5^nxw/n;.{={m\yk7mOw;훷lzަz*v݂xw{s \GoXyH}h 0&d4j4h@`L&&bib4 A&A@ dFM21f&h4TDj1=OASSzhe=O4OII)OjmOL짓$"" 2& MLM2xMj4di3&{SjjldTM i?I0$iMzjx=_MB?݉HajOIAp?*et6ĺR 4Nj^6Ӱݲ%@FR?|Dgw,mv(ffz*>EѦhܖtj0~L?y!NB{JF['LOdStk)aA,n.hL&T.C:{ $ʆ-Y(,heKOdbAEV[ |MbڴбoK hi)Ա,/#Qb7fQfmżTDcj)Z/:Oql\Q(ꬨ'kIgi06 Ͷ]?S@5 )!+zb~ A#[D}(dq4L鞽42K7gIUFȴ-5V>OYr8+INOgXބwş.TKy-TL>}iog]R'tV6 u)12.HLr? ЧZ* A #SjlpIA,,KҢ'sp>VmZe E 5*+Ɯ +vug![Vڻ3;8tEUSUk[JdƟ 5_L|е)B(R'@f@ҋ1Q._ΎkS;H<痤eLO N@3!O&|Q L] bi'0{Qo AnhÀs( 3Bm)@cf^u 6 )Võrz:-W*őQ;>iJq`ڐLNE|Ng|BJF1D.֬D[ R|>gufSң:55G|pg8xr @2@ @dGBrA\Z!A@%SPc1 w^V6AHfRk{J*/Kewsju( xnד7IՐv$ 8Rvåp_{L'QGFR('h.;2,nlcw8L&BV@oRNuj,x&"Tf4S[kQ TbC]cxhD͇\_!Ga[" P 2I&eDM&h=:fKjk%)^yP'XN:'QUeu$3t6|>qlQ2&Pc7o-E1dZ|eu*vI6m[:"'l'Jf^c}jŤG!Ժg;V&C\E"DF";wCqְ\fs䫬kY]VaܯZ|KJѝ<+2PZ87f.H5T [ g @Ƭ5Tt[IdQx&,0t >oFN0f 88T{^p=4y@f)yP G~j@Eu}DѲ7l9hī/v`٦YCzy͝mȚZInC=yZ<%Ww&ӈDB-^q2UbQ,QFJSd\:? 'ތՕZpNy0?S90ե@Ԝ( j陫dCHٙGHYzNg'w6tmmX1 wZ+tC\Di;]o)lCG$GgcdJBxܼݭ] EOʟ}aU9 id jQiMāXN\LI%-Q,( KC@fK+,Ƒ51_=O $^XҗgB:t>wabb jHz48#2g@'T hdžSVG>n&7 3"i D#LNFm[癀k(ڢVL4q<#@!;B8Ԍ`s@* *m{0{·w2>kq͔sor (:VS#vH êҤs4ˤ,0OD8CZ"Za=z3=}㧲&.!(v.،c ΩBR0SϪ~Z@K'9ʉĦ.MjdGUdGxI]hҜfO %@PET)QJ钂m6CeqiD*ư槉t0u$RNr%OKO% ɘGHebֱ[Ol͝TDH ^{fΦfEE f爾:(k0eq{8l;cۆ\)2MlSM#roQC-UMx&Zݽ߀IDUE BgӭҎw^bZqPGO5pzE#B:В'!@U&iݱ~V۫dKQ=J9 G8lb\`:`oEsr~o2ڦyx@ w'g]RiVwe*9qm @V9\LP5)Çx`F'`vgzMl_IO5S4jjX9תqiJe9"k1 (;^ ˼yww6E1-h:d9G^==u h+,j 0BhG0 5B,ʅ@;fr|9[[iɳ^BJ^VωRHo78uQl@@ơEJ&T!QZ@@$ݤ,#NǢ| |zh:d!.rt4O^iņ 2,ހp^vpO(1S Ivud "ѡte;=l￣W=/~z<)CTja@K E.y{U.rvyC\r%|v\)\aUX2IZLfk` <" 0V+(/4!LPՄ┑~_C@a? w{VlWgQʂqi j~ ^vkݑ]у}g0ReQˢ$(z5?:1(747P({Wy6"Jf0-kZ=fNc>QVu"ΦҡƩmŠi>J=XZ4t/^pCI鈰O93O5 OܯgVw,p&8=3 r'9"Х['QF[W'.`bMs8l`z|U<;5Lg&ѵ;rotr4Wqr0]t PC2dkYz`x,JyDxs }SIeD/S<4{hYeA|yE( >wVw!5:IУH”nm-~n^̏k uG9C},€W<+T6sYIH .V^w̴w(.v59:F N.we}Cª6EoQ8r:|pv#";뫋󛇊->GBOJ`^Eоgg)h/'vΆC}!& ;gV]$`DI \5Y|NDZ*EXJQ:sJ(D|9 $GP">Y3Ur@=m)m'Y̙}GclUb'qE$:jJuHq4MKdkb6buUݻ/ %DhtJ(DHU"8 Isf (H+x#C(UNp|ۿzF:Qҝ@}ihr[rD ifE{{`Z$s=qwpOYyks7:kk\؜Č 4u@z8קAzN^6ѝ{]^MIpN*oF!uBp1UШD ׹I}ZIt*AW!D2k6e,+ ^`hyL<Ǡ;SZ@[ƠAåahh2D #Z4-r4x 6C,=wO NףJ &Q;:x r$ND 2n99c!g> ߝp-I{pQgt MlyLɰxmX,7b$ gmf/7LO[XU7(,ctMWJ'1/׍ʲ]z:v&ެE5caaI:q]]mmNn`rFyyI0I'qd:wW!w1DL\~o+tج [7/}ӤV:4 -KZw;lx<&d`oэS\ fn ^Aj2_6ۻ.jd5 5k̎TmJ=ةxP|eM{{{Lau|W_Xw'Л|rqaj56k4Ͳ.L) >^p؃(2 IIskwSdNom  _ƈ:&te_Uk80S8<|=wHQG%khʉH `J#Dk|-|/}O4⦻}4{M4M<{}/9beNj#8ʪ)Ez_Fiu~؛wPqRC(TP譀. |ɔu=) (m>C~1hƱ5omuӿ<)Z13 ı`_}x~"FQF0m,m2j֊6 [m-4E%$)T Fl)Ͷ+ lj&kZ*6;jMI1ڍb(֊(T*2mh%  &{o>hB J8E o5m{5[nL,?󵯻% H`{y_1U;#y덥u&ÛAH @aEZ2P"QE|KwFkae}44b$@Tʚ%`B3eС51=G"( Px`APQŜ s!VbXq+?Ij@R-X- v(mߒCDut%,22eo*ʓDԪ3o35E7__mgO& p]:Mukh(dIܽHSL$_ywDq^:+TBk(MsyS}**9 $p;,+{qY2h֊0Sf()e)DI&AlAEh(4TlXom-(I6BY$B@LM#fA$ `ͽMS놸k51isR`(cc%Xνz6a E@zࡡb5O~ (FCK{3p_ ,E|JL1{iŋ\Xmq|kF8oM0/!NZo766\`"˻;èqʸhW;N~EhK/} 󔌈RT"Dc;R/98,ɓ0U$Dpfګtt5F;$hqF;\IrԵ&Z*e.6xJF;);9^GmPT;I֍{@d2TLa;B]t zۂl pxc:ߑ\!*Ar?Rth枌>7骈|9okH>r.O[P=Q1 bz9h8axHSx&?DO|3O3 ΎBۡ:a\~b#b7Z?lvg£KZ@M)rĎxPڌP l!(V=|3|~Qre"N}B? ԝC$%m5#PPg4f?LCTH26dLq71 |c"#[XD=;$ lYbOdj,>1NvA@z=O;g1~cRdSq ^LJf= 3a>qF!R0|P99yG9`Q)da(C:Pgq?~"X}#Ϝ0Ghz:`؀?q7H0?M8Lj (̶("m0L \yJh_C M"14O֘-߳\~lE] |[j&-_}v%`j}[7Y̌4:v0"TmhXŤv?V#/K vkoi *蟋Ɏ6,cycAm$5N Hk@$wf rd+|&l \sJ#UlqR FIq2R{{[^Z^UYGJFʸ_}/Gפ#_]xd CBmwW4ui!@ٮz+aȑ' 0SLU jžMr4 j&e[4%"#B Д4Pw\ 6*~<ߐ9ŒeR̢HH=Q.\YE7jeUju Hd#p[@o k _ ΰmkXx m )޴{nԓXfUٙsvkXx<#/&)G, qe D[ +^{DzP(mҔtA(ՔGLwZ F#r0*5dTcHl n6UB3hI" VW+;KE-U*h;D[7v7Cc ƄIIKi$J((a8)R" RH,@ P[ҝs1pq.rf+K H' ( Bfv"Qfahd7D. ,8 P#A*B#L+?ʻ ~xCܼ &!ߥ@MPW 'x(q4J|脦baF4#0ul<' l)C:)!{[@H_ ,2%JRNvcK AtFôk|]R?nmL<D | a 0) H٥f--5{w j~{˕5rh,ZV4Jih,l֦mFUm*)l(BT 3 L銹QbEh5 m,l2RQY)JQhWPJJA Ȩۗ%mf-!mV?\uHl6f՚2J&Ѫ64a& ̈a(ֲfQ"ڕTJ2(&jռ]m3b"].r˥r3wq˽ycI%3UhfI&2EKT F " PE@fVZ:znKHApj8XT0xD*cDt p}#'fΞ3:;Ѣj)BLL!4U(3(e^i5yݻvO U;wz:A0 _7 . QYTc*BY^P@u>ky3Y % nF6UCM:?kK2s|s0d=$Hg7@6]GS I$ޫVw,~#S;F44@cFH hJ$B"" u: ДQ9s8$E#9UBTU! k~IEQD1d`lي"?AڐPA&d}O!_WFH *V Ni2ыvm3,Ptb`[A||Am?(G{98I ϼH$R U 3{_{/sabyS@pM44HajcVR3t5ENyn.UiZuieӵ LiL0^ӵ'P ˜Ȁ@7T"Ζo1Y2([;2ncV$Wlg=U(t72igsKgMxcGocG +FneF{wRZ{ŋ4Brm7nlcrUF t Zu>AQA5~۠KdBj#fO1 b-=/Hާq<`fMHS=)rQ24=M%'"XAaEJ@fY ą2I dbE){UP|4 m1Z]-:E[mI))l&Y$Qdh Hզm%Si&b-$S4VJ̆ѩ5!&$(Y,i#Z\qcFԚCz9nmCV"Q&ZWDXbѤFQJ%Ld$TX,SdDf/$2RL@r@ќS%sCk1M\-hUlCŔmi"w(ʎf8x K!@JPL7ѿ:kۥ͠c"CkhqhA's3XA=WZ1d6-xLQE9%y^{Q0`h74Ñ~;cɋrͶ]|Mw`-4ȼF')v.]SM^V$TfRX6dX f6kJccF&cE(@2ljC$Fcfm0(""ؑѱEbA Yv bZ i)tT yv =<Lf8k hKXDD;d/;H<'q'v2<+yx̐S֔|ը6=߅x\"(2@('TKQR Us,;o:ObswWh}֍W4w̙fp0H9tN2g(A n9C1$6]ѹwqݻIS1$t2%F̰0Ϟ+.t؟~q+4siAȣDlDqwcuwW ]uw;L]WrA9ڻvdnuk'spɺqκ7-Î'm|ļnt.;KQj깵cuݵۛsh˘w9;879Qp;p4ljwuQͣg7u3" kv5G'unbErd܍K.r뺇%f鮻߇wp.nݸtúq\;5z/7(;E+0&iŊ5UЋJjI_SE&jXFu( wwwuq)vM9;vu)tÌBF۹ӺiQw\S0vw7w^y9,d#sr9Ër9r"H$di Dr) 5;vA$I@F؈]P:`䑮'wsݧE&7H=:Sl !JM$LafQL$%uӺ#bdw\}/{{}/,sadg3 H %MTAAW:]G;N;WJ&Inn]gN\nrI]1[tuH.E.N]NE)jlnl*sQ3,QQn019ij1ML S (ˮ`.:Q :?6tu24%^H+@JЃICJ-~诶Mw߄) 3$))(2]SPɸݤߩ^v 'BI Y- XQUV#iJ@LtCYL21bƑmᴢnΜy{vm7߮TcuuԖ125mm9"Rk79ԑDGk6[:]jP jd,/tξ-?VSyܮ~u. -i)hifADeE2)1IbąI9Im"IIl41Q&#jJ -TD*SWmȉLP}W{j"eF^A/:}ﻊR9 MF&bH#FZV-. bbA\3*A')e̡0(ĶTTuMy cciӃGMUEoJ\Ydž/˞Y&.()ɔlN?y}̻})M=Ch)y?nZ9hN.ڨQ3!&2b2L&@NCrbɪUQQfh{ۭgkLDGv땈xǀ^2 -i\7dn 5_goo˜I0 V(9LPPdEdώihܽ9H ~i F ?@6'Z ;@ $(o[^~012QD2LDF,d/-oko[Vlr\yHgܲ)%i5Zʎ&Y.(&@5Dh )D#,HMABK1`А fLlęY&,FP)"JVI$#P2fLR2!`/gJ Nuw~m|uDF"ƭMD k̀#^jj,h{m|X 0BM 4bd5QL(.(dY?ѷPWvW"k,w~#>J)61볾Yw}}}}XM V"ʅјvcfΤUr6sqӻʨgtfc\@E"q lr f2&D<_e}_OzS-$]cK%7g.a!K kQUT~)-xb+c}^k oCx\xcI#u@"RsQ + $CD>wYL@ؑP)4@b˕SnN.-i59F|H05ޟ" c ۟w;;i3iAf޸S`ИT&b8mŶ&hkӎ]I5qUMNbNnRc7˘1$613AXMOo{-m63Z6cFt`, ,)pcTt1g3I7z[Nlqli8!b RȔ$AR}f z]`-Pȑ"3VtaV,MZu1ifQQF-䫵PJ3,wS)at.Mq,q.j4P ET 8"s *J#Mxm3nŴ\lrFshL@4^ѻqAi4/xiN d0bE'bW 7PNASL4P&ӛLjr~t@+FNڠ*8^h}ㆰe](pc8(!)^ CDX#/U r6RMvpZ3h.5E"'O|>4WM|/2d'$,bH`c1t2\Y{ *xiIx$ơrc},͠j"Md6 AE!EEX'ծw`*uB <uonA Aw(9"*$pH[BG5iܑ ".cq*ZĒE0@!Ff`:0nE39(kFQ]jWp|t"%@_~%PuZ$*amF z@D`OYخRqއ(9vO<:GL%I 9GXhqg(bMaHդ4 JISDٚ2vǣLKFakn.' j+GR GKM;˻p7$N]v3uaɮ:E1,3T1ţPE*)HLX Hbɢ,khciLXY&c[(($m KA5-2m,Cj6YU0yDY3q!Ŧ_h[0B]R{ \(_ay&H[;q̓`u hV?2jV&38@ 5J>M'{@%P+;rm-qԷ1S?;bD?|^ݫJUфkif{kX&E̻jb෺ +T'5)} U mƦIobl5-mR=Go5+,EhOșY&ohͅx.3YB*Tڥ8xf[/8AVRH33^nxd񰟏#鰋kL7mkq I_2n#ov&*x%F: F$7r=mȵw6ehBᔉE%Jp4 d±_u: @>&cw-^?Ñн59T;VRW!$s8d΀Eov'Z+A/87DL67 Y~A:JVY1=r:}+ 3R$8Llz4AES[% 3gĐPK$º!5ƯS+8٦$_88̱UiU?#ffe% H=čS%aT.#nP:b'q@y]I)@Q"g6-M}aK[, 0bW8_ڝ; ѩBZH+GäpqQQ7/f3àK)=Ai5Ro~_ÿr~kHt FzfѸpa]nS+BEZo?Pc~m)Y-W;i-M^TB1mP"*w?;j 7k I0愐,:,`ɉ>)}k&lr8jRV-rYw^hGNXl7_b@A 3J>xMa(9=}$*ͯjz|iΑȠW!\)R^=E~ɾoi@*wkIǘkJ`̀Q? Թ%4C%KnC0`tU",oH**X7u'{vP~(IȎ(pAp+XR[6 %7[_~"NοAM&N#B5>sYgAbْCӺ_*fqDc؏*(!FJY6UC ;Ie ۓ3#YίZB@+0:oK:K}$YՙK5 GsjLSnLNXElXIgWrݝIWKwZ-2 5A`AV^2Q/k Bi548{f;ckG:΍fv쵕+Rԭ5R?duvî^jdtʼnMW^@ks tb FD'Gu7J`L?\laV'IA=nj#݀QX(zCɧep1y+O;1nRU۞Rvӿí-izwR2^fe Кp<>އ5H? l JqC[K^o ;S 5u:(೷aa@cu= oB*Ir34SZ`G;^CiU# NYK~ 'BuKPj{&bw&(n`R}/-YzL h 1ZWrFeI&s1NadFnfP۠QFoYiYџé- Or(D0M7.!WR+ BRX CFwq][3ɠCI/2>JN!yc$CTwxom5NCF9 ;wԞyR^ ?L(q3ɕAO75tC`Q,Y)9:DH4R0S<@GNpdxlۻ^ǴmR#d:vU| *P;2:T"4cղdRd4_p(?Q7w5e󔿋Jp"cS&HI^n2ҭ& cH]]d DIu><3Ċ64f߄嶝B!rRULv›G/nW|aޠA>:rDyO\M9a1VD %^ 9"(dinyYJL򴣪T_,S}ӥt&IXYX ÌMjt8pu@1R/VGsX#vj'61SZ#gW!L?4Yk۫e]1>^B"NJxt5NH 7͘)BENCu"hkh8j`ex+rئ#}lYr1; I4&k|^ixWry9*Ѫ]Qw!_#! _rHU&96q18~fAw%O 4C"kFJ "'z &|>XoVm8&\ojj`2(Q{{ɬdnq $KdEeof}ÛbNl=O'؎š%?!/zS$&,|Z ~Z*NŸ\׈WTkggs4ЫUYK0HB&=|jp棶tyE>r$0[Yz3A'wlcCn"rsi\K Ac22AjR X2jeElh$pnG"j̿ FLaq, 2˘yAX9, ~ZB1gon% -i3SɐЌ)󘍱V1c~Am&mtti<#zYk6tSl\SuF7GI?w} X=MOJ5VBDb$ &ΒĮ(֝ c "aI-e$^@9cSHwk,gZ˳``f85I øSu.:$[֚E3 w;o+D-3H/.HTJJL6.Yg-V$ା0rD57on5t(8KRWc1w*r>U1z荃rJ#n- R )Fs/[b L/9̪5ڙCrt{3f0拡ƅf60ɵ6 *qO}+[qam1O@M0/9挟wo(!Gv[9H(v0lY*]'bVVhv)oX.#?ٞ5 Wʝy5 L54B}:ZS&Lu!r&wbS"b~ex3{˧*YD-`AB &W7VgEoQS+p@i>]ζ2UM+I3:nH8&ӆF|VhHX ҽ 6dְZa#'n xlwWDxZb/5 Poݎм'jB+VKɬa'g *E(Wo$A91~l%gAL{|7䊄큅AOR'V?N+6hջ ߴa1e,;ap&Pymo*`cb>~2i{xgk }$`>` o4:3V>#d4,n-Jȉl2,c2/Y +dQ$ ͨ*MD^@_"vðw1V"ߙ[(ilm, B(5׮ŧ^adt$`:hmE{Dw`EyoI ~=R4gEd0G/(phn ǟ.kUq`4jlX !tEEj9!|e`6p6UI .‡qmg{WGet6;"nޫPTUD!mxtEG$="?f}e'<%5Oͤsvw<=U.*,ۅ%KlY76fn(cto|gm #N]f\uSTK Ȃ(#QUX&Ur'ʷ}S;:|pW2LW21&@0\N?V~k2, *B~Y7!kkߌROiP EŒ1l5{ḦOL#X]>I&yZ%!qb T2lϰDQ.'0] +bnP!+p<0‹P](k.3)7/~간L&tEhɴf!C0Y;tLdZ#\7d`#6 RU6'mA7nK-Sc3&}= Fss_.)hrwص3;UEgZ @=󳁻;_{`לUq`=1q<#%%T7NTYna5#BЯ4|̂X(LawiAR((kϑU&'|@rYT[]˝=cR7ecCX q-g.Gy3T󧴓͆n5vA¬;V"PgO9[m q% 9[4*_(XИ-4/+#N]؝H;|O>G9HqlY˩8$g,2/Ay'ieLdpf$GɆgE=ׅm4!&" Ud#t'yҌszvR30€̈oO@h8};!^wۆ|q`0hX+lM.ױ < y7H"jc GeW]_G= 2TOq;} ?T&+5t`Fq#ӱ!"sKUJ_k֛=OE\%{zsƀP QT̃\ME jsSk$'m7%Km!YQ"'wALΕMG^5Pe{mI&% >gC/m$} EG6gF3kLl+PQ OG&4=AK켖Ig?&PZi!v|&.>.|~Z\}v`3V/1h+K$8Sa\A&]}7U:zYX}Da\ wM0zkc+;T?t373=UBHğH*h,J3KBV=#0K}Q,S1%u{ KT3揇md=~OYMN쫳!2{OC5eS(oϣ1w ;E鵡 ' ie.'aOj;PO*I}^Zw*3y6RXiy2-ԩj+Q^f* 1(:TL t9%!&gP0]zq-\ϴJ4:zrX>w|ֆ6|k;fBEY36hi݇09m`F9bpfG TRWxH*&. ُ5%ja,jbg6!ĩ75O), HS<9o:8,(ΆQ+p |\mu˘{sXM.**lG#|!e<lX~i YUeCC3rT˘7G#H}  faA'bkz,&85IϞBa4n7=]2o6sv$xCLdf嵣\cx%kQ^#+7xI̎^ƿYjyג)nOz˙Ch@i ziPJFM ŪF2lEGFU%;?ʍ͔9K[!r[3H~OۈJLWNoU2|;b"fxO̧J =7,3d^.yRoa'Ì7" R HT n[#kk& I J*݃WE"c$Z6iA/"#>WӬU 3p̌ntwWJ8.| YnpO\9|#=,O!4~MӑI o~%!)Ƌ_ȬnOV|-ݼMa*p{<ڂ;d⥔CYG;(*Y!H!advЎڤ,U鐤]򌭎xW8\T P_=k G:INѵ5&w~ТƁ$cCg"2~*FT8xsa~d)hH4btCWxwfp}6Wؖӹ,Ã9@S೘)lGzhӇݨGN۝T7jMKާ(C~ i<YKWsƵCX]>"NWtAd1lE^) r-adV?W2Bu[ޘ, 6ݴ]?Ŗi6C+n3.$]|PT2b <^ G!0<79D +:V aKWf֢5?s,D2$}p9gQԤ(J_݅!?N7CHApX8XL}x45`7y¬iiꑬAz\|+=oo jٓm=~T.0X0>: p,ZK]MԽ }w|k0,Բ~o1sҎ4B~9.p0}KO~9 P'\dwLi9Z~ecXUlW_#IC(}^{ɶ[[$1~?bzsG{,o8 pX_+/w ߓmDS84L3Z=xk4Tml+-?ѶFc=;R>xF*{y^-ھZP#:vǀ0`Zfu8Pwm)ڢXo?Pam*j-YJ,3!oܣt3S3Dg!9-Hv }RE{/Tzyb31RJ5ɦ0L k쏒#c|]Q-[ CQb?c+Es}@Cք[Nnd0c΂%|\%ͷQ ՆB6E:S3n \qȆ<JM>*ǜ3V^D|l:85챭 wo`z-z$!9[V{N`I(Dϳ &h KV)"2=er 7h_>òV3SU(ԊXܒW9Ǚf Ե5y ֵ${mO,P\%vwaݏ}"xL\^BﱽO Cw}kiDS"3%4V8%D'NF:E QrL!8}M5)' D,aq3;];{ L1nra6;T@Et^R>ÅCg'Cph _4w8yiZ\GKD'4l_xIȪe;S5V=v:VSYZY!6LQ݂*딭~t6q͐mm0Sǘ\Z F"R"h 04h?`#4Ɯ uсZeGc)<쾞܉GMƠ/h6=bbH^P̥1azƝ5-*0w4%͡FnQ+k'LȀ)zqAW/&z&v@G"zMXgΩZrzsӱt~$a?>5wCev`JFlX^5tp<4p!DZD$h *f3 _ dZJ{{LG"1uc/(1]{eaU]'޴œn]"pʩ? LD Rq Pv1~hJP4CDֶw&4ZBJA7>K "[DŽ2I`aG7#s򊗀~1Ǘ >##QOΠPϙv {GJDPRQnO*>;%.BмVC.1хR%|vbv tu쳵_ǮF.E*<抈O {'ׂIYR^Eg.%#&5&>nˡR_Gv-ץH\yXw6sו`dϑ&ӂGL"NZVc)I63*[^D{_+U[T\͐O3jj>wa0-pjzsC[27~;!};jj&RKzq*fb$ĄBN+~Po\&!AvikH - ~vIluzz陨oe{fV~@j]athP~oQI =#+(jyI|a[0AGGryrkfP'Ku#3Q ^K*ʒ#Hq!Qη@Z|F %M gL,4IyLl62ssz!3`n'F'` IixG= lڌi̱622pdߨL܁ v.P)-{4Z4G'ˡZD@pl.4SVaΰi{h&?^+7i <\s^4*bnPpu9+L߽!xw~puPf%/; | *o6hH;2x/QSǑQ%)ٳg>^1-@McyVtb7)蚞 *#xoy gU(_+8CR}x(DC꠪/$A@Caސi n(xl,e/^4T &I0\ tfvGoV&DN+2B-TLF\+9$p1n v?Lb)'΍m;[1u.<pzPCrfU|B4xd'4O)#5U+4׎œQ?HW.cYSU\htszJo~s2XMGևEb 5ko?65D8Ʌf^QE! U͟a[2<-~hh'M/ު݈41%cYPۼo|xdtuHr[I]d,"7:QnC)-xS*# S_2vsnH1\'ۢe~!:Kl[8 4S!ӢJKm<Κt'`HtJ6Zi[@ j{W0-iy%1yU0ȫkK}}S3}> _uf|$0);Mo.Y.bc+ux0щ_ Qqj)opfAI|}j)~I/Z߮b\J ?!RyL?8(mmuC]WS#ט:y_K Y1M06"Rkv+Yy;q>!-1Ó\%!LKƏ\*onIrxxНET:1%kB'L a ZաM 6Ao2QǑKo8E<(>eeauEn^B2<п9q2HDxEBءB/n\/qC=|:*"ɜwfwmMK1yYL"@ݡuj阏>W7Vwkf}w*b0h@gyq) ge=POX&*R%\Rb{@s mQUTur1Wë5ޡMPdۇh/{-3p{ 3H0u'i/n^LgS([6q'RV%Sg.:x _ , ?bx}R^t-"O٧OG=$?酂r#2t> ~3Gm&3˚\{^_߰[<ؔULkiD|L `H[sATaѽܒ` i}Z"'s>Q?pReZoKDZ)'}[pՉ /f vqW#;icl ɇ'皻jwS |~2:S5DwS-=sE#3Cʢ5nUQ:d5n4ZXTj?܅ES].o6u'׵W6 'Ro;&ܡ&1d4Ӎ\IfΠ <3لxoN|vkLlB:y0i9=7]6T5 BeL4V=7,j2-)!c$7Ds.dO-`K]z9^);x[`SZFDg;qUk٦ewZ''%I8σua2<2{X =Y9O9U(BliSI,& Gɦ(  C¼Uml2FD18%jǒÙī#.؄ONFR«@w dȢ j, `P s {g(Si+BZW*۵9=Ǫ͍CE/;2J\j8쨏 b|be9_0Q=DH+eV}_aS)~z/ڱ 1:/i;pb?xnR(]UVej,4$ϓ3z>SdGC7;@/!m8[ :|o7~}Nцr&|c佫 ?GgcN7D^ГК2hkcgc~ځ7r _x\:{K/f-j;XUR[9*aV[9.jN6L֭e,D4Gi^T[Qju88 ;FnPN]'m׫mu@M`-5]nUd852?9*=Ɍ:to0ȳu!CnTXo)Py{F15Q؜M?]OZ%tQsC&V/G]:M^,֦ v$JYųtp>DEjbVT B+|]2Ժ)YP>o65C&\g^LRx(z(Pu^(9f<>vaEɵR(:OMC^HQCf+¨{|q]@<^ fײN^O_(?4zHp1|II$VcBn%n^ *ЄɂISeF gx(0ڮnk9TizS{P>UNs)R0 lN5١ d0H]NV[ns `s-jMcvC5ʻ4T+'M$[[xc/{6Wr0W5 }QQ,)Ndz(@[JD\KG"Zxiˆ,0tEx_P#R')'b7*Ε^ߴ#BO{Sv%|V,G~-)4rH%M鸅sЈM.Ը=ë7=~2ϔ8"΅ XL0ύb@ $nRZ5qSjeLL[VH* HLr- Bj4›="!j$4yN.5( Jm}_\(H_-Y& p`xatkqdTޙJ=NSBќPkjŚEքjqf5|ooUgV|^BSԠ) ïC q/tmU|WQ*\]ūN)ex#uI@8ƛ2I; Y Re9 #L)'POɘɏڶ7Cx#wL^safؔs(p5\/<baQPu\ԞnGz8,YJL3pӻru{= rʟ-,c4O&YCΆb]ۛY*LM֕6z9_ğVcT)!͑ZrVѧ{4z+Mּ+!43 ')1b(m2~׉Tyx_lQhm#ެ>TƴAɼO3jR8(\ހHOuMQh2e6oԊG,ABD٨}7d YAEcm(!(\mLj]?(dZ@}!=MB,sRgm)_Q;3Q4J Q&bZY;n]!gvv3;ވdW I" 7r^MdKݼ:3yŠDTV)u]IO}sB7!(|ɞҞn Yd]HTOBəbh, ${d2G^| vGN}FLX"NP8\׷R2#ܙnaxb(s~\>H\/Nm#;n!XVOOj=p+m7^Z|*"khDه%[`VotN!ͧ6a"T>^hazj$FPZ+c|­:sr O7&fa@՜NI۴v6Sx O >P?QU=Ws8<e+vyhDab|=Rr3_LWJ1W+ўޭkɴ66Q+s.]/K?0P/Mr$9/V ָ# :qgD2z]J}Vv&ޒ4LB#=CŠ`gMsgG{"zLd䣻yfsj<&̹QO^k)]{LU>&Wu3ڧ$߶+|~+UG* W`iE -6p& rr8VcjzS*2ۂ|wtR+`??kXH*SA8 ByۮƇ%SwÝtRGjcRD <ҺX'"?XGĈ++h=\n.?Jfl y]'+ s Z$s1ev!Z.pJ,mT$TՅ=-vC5>w7N,xNy]u/:gW3 G M>'UREFb- ,[vr~8=DDhq&{?  $ž탸NfՍE.%ZO'Eg6 TZǹZ=+A]25ks?+ 47u4$|1 +柚7nW8T7I^~.K3!!t>hcZ/>.˞Yϳw%=*׾ʤK FV^Gִڀs|珧W2 <&r]YQ qor.T7eMIk+J׬AG6\oËXH/0UeQ:K>E{ɡq/t'Uʆ Kb@RB\k[=nO^ڐIWp> +4D_OZwX)X~Jx䠱a=ziWgb5+ ;E':,WwX%{ēΪZzoDN Z·-=F2!wJ?UZz?_Oڻva["SX|z3w;_k$!\KǤZ3-=K<}^2eФ< usPS |P3 XK8 X?h"FH)մ UCvg<ˬ +[Av-ۜ28zTL^5?ě~N}p(";GYՇ\tKPa!AgZ<޵XT.GX޹qPh#);PjnILq+t/#PsBz?)̓ ApIr D#zKBש*fpźvf7%,OZWNze}T_ЬqΆ1.Lإ;Fz(0y=NJ&&  }6JN':t(?$pVn.8vQ[Ayӕ$IAy,ĵX!mX-XyX&6h Wh'hS^ t68s,-HPOAŴx`k~`kAhhY* p['{qwgG'[1"VbI=wlG7 i`%-~{2H|g5BY/w,/I'J[nNH-붎˖9yaqt=ْ6;z`w#t VS [AM#dh5g°=ܕ}p5^lދ3DE$>Rl*FG)ˇ#uS@[ʫoQJH ][u8B/ s0%HIsSMi N>צrn2)byd]FN&\0UP(ϣFb nʶf'$f^r9wj`@\GƻWP݈mغS8KD"{aRD7M*M#d~uU%BX)kfZ|IOxsd  +3sް^u嗺ұFi),saM4 P+ZcY]#% m3SG&ZQO$6jRIek&}kr( a$H}bxǫuIuŢI BUg'8fޕS`hK-Td[>=ď(a]v,2=yUC2Vi@RD!"eO:`rYz&v‹=Іh5Nuv:4##c zܸ6U1[gkT45#υY Тz]RZ3nsr`!${b3_}M\CRliG1"DP`: 9qraKL|P.rT՛/ `0>L)0Fa4CZf.Kv}X!X]m=$68YtQ xyh(?-\sy ?&Rn:჌"Š92v#so'f2x0EӼy}~4ws4ïyoJuy_"wL-g)E2CFhYW۩ +tf#WBXpBK)NfT Esjҧ̜vG=vb>8s=_}zl߱ ִנEf~2YNv0k'C'"mdϜ}S()`ӮOх C{ Sٌf raʵNyt4C{W0qIC@PSWoo2IYhR{{7F"R8GXތ$A;.^a]UX F*:^AтJmBjIܚ3E5Df!|Jl8=~Ţ%,C8hk_ID *!!6kWXƔMvp56"3O}v'<uPctD$/T+ѵ}TSL \g4S5g}[HHՂ_e\rHȢcePХeh],VF=F4}%m{bt 4lE૮сap%ü=`iNYH7r?e!dwp@)-BXϑ}){gh\\Fдqؼe$L6ct/i}8dfai"'Jx W[D] ^ V9>0E`2:3m$HTo?J+x^4xdOi8Lh(qUv(Վ ި-4ix+59yv8OAm;30 נ¸O\"Tڧ. ]7wغ^UZ*Pa6IݎG<xɣ5a:bdL/\cF14m<]``>Hgfp/?#Ֆf*KsȀq{hfS_.lr71oxG^|u%_VaٽfLҞfl x媙!!7PJⓥRGUo0ҊY=fLsN/Ba=o2Xˆ]X6A4y|- IosJ /jc@c@ťc&}Fz!|D:1(SXA#EFSM97(=ܸ]'R?^ Xå @%:Ga4j3b'dſ^c#< 1CP}.O g!6)~ϼ `Z,T秂`;N,ueNthQdycOU-[LQkƚDٰ79۾B_~x3rFdhf.`)m.8D_Upq9*&su #.eX0._-')_}#=% JH2tNqEh}Z 'Bp|z#.7̗ฃ7jp,kAvj}hyXX́68ҷy]@ĝ;z?C1љv(U#vAs["dٰIڝ?բlliN*Ox1z0+X!.S05b.-Zs&T-d!/7 8o|̀W%l\aSVH멿þu^W-^oT.Y3P#dQ7sֶMw#yDӿ|֞5lWҫ7!^,*.,ۛ09jm2;sʽsMlQw>ӑ_ G.9oCg|3dz^و[NiKUFyoN_eZ`_c&; IL8ĚilǷTj}0 >B& -geI#*DG~; d(i%var!/CcOhuy;.[/{13pĽQRgD[msK3~عe qEv:KDzϩ/s Cu _ ּ~G' MKgb{o5]v d "J~QШ 0gx#{iewkhj\g%9IE*$gs$DeUSsiSW(FÞB+1{C zS$_絽J 48ij DLYgLr:8} P^qb?j.>tq/f:)Wmk8H@pX+hFA"~՟Y&dx'ye&|B-qi6L.;Z׉rKb~h@JǐIC}{RIQa׊ m]6SZ0kk/7] FT~" U[>qet^A Kn֞,-[QQ umC@G$_Fɬؠ۟G֌zW~i)󰇯mDK\Bbz. )$)rsB2DOXngI13 N@Fd0JC=+èӞ za Q58"`Ua"-[! Be^yk]8c[$YRH5_')cf,Jo@|m(hsT^Tժe^'E) 9fYU+]5?MLA_VbӨLZzp$z]*U*7ח?<& Bdu/saT nnOA,9X#VJ?X7# H$K~S"NF 27ro$;\ /))=| ].Jw79d{LL[Xu底ǧS6,@(f-{0KD;qکk\`Rw ݤ1Z.;CSĪP;m `i OsOH22-WfSrSO=ab|(rET=0䫍MSX5oUezxӼ:șu(99nNŴ j3'N,{,x}23eG=fSl aRm J{'YL;)΂\V^AzK-?OET2|"8ï Ƌ~\d fxxC =um N֓FCw#e*H[}N0^.![OZҿr9C~,}zr»]1I5bϳcԺwpL`o_U95lXK7^l,VΕm-+wmKh 1_{;av6!1]{6@~Gmў]m)Hֽݚ}M2P+{j -+eKV ?dfu&JOǴCRM1 "PdqWQJ65/Kb߰K,WܞL592"% GG2&aS IsZhx@^5B{ Q!W u}n9? 7u݃ɕ|@Ky2lPh}'j>v9kKGj w8֑AJ3SwzaE~*kٟTY&e=g/ 3&)- F$+pO6cN7{I(i w=A[ `Dư۰-9xKu|ua& 2XhlcgoB>@fcɝev=á2[[" HLhS}"5n !LSzZL w_^4+sn>E{Չ-J)ma/6!-4n5.Fѽ*TG Adqߡ<A߀*ܐ`1vt_T {bBS?Є, ( wN+{S *I|r,C%;$Nk>NX .syϤҦE{0ٸ #n8DfX'nOJt qq>FEGE[;w) km\0Wehꂋ֐֐q!>[uZfR8 9t)h(@q(3HE<%f}bЕ׼R4%*,SD3MR8_T=47eeمX[^[-)M)^frX]4TObGay "|eHfV%$n&-V:$ܫmDt$^SOݨ@Ek/Ѳ%CĜWhVz}Kd&9 1@z,Qf@Ihu}NJxƋZ Q]:2>IRS((h_G!u+$PWy\K+$ oQ&b̈́ozOAIhQDy"EHAH缘_+!/j6o#ks=X,rgi?yxr;h a"[0s2ϾJ .^agPF)YFRG)Ѵ/.\>UoZؾ,-&Դc3 ^t[DzM}j}D~ :hgc`~4 ApkD}<9Dݼ5, 0B&xǜ({,C~yYѧ{~n~*cSƇyQuU18۳/s*D! seH5;6ibm.}OT5AȴSiDzjBc{fSoDP_jx(>U#F6![EMD04 f~ɠMVMpf'aK.٭Zնd4|\Jw\Roד=;)acM951~ݦ?p+oVce9B6^!R͟FBda_ ύ@[[ Rxsu7&sw7CUp38ʦU-I%ґIΰӡ L\ G"Ձ=slhvD*?OpQpo%ǩ nPE.]C,g,#㸛7h/+JT~am B(RQt[ȁPL>ڟv{!X^eZl{cc풺]{u8'RXrHѬ?=1;hi-%5׬KfI+c%dJa;iA/u;ec铦-GſN3mmsXt>\^Tt" w}7)>RpJ7•FXvFvN q 8Q̮s>(4`y-l^ZPWR0yCI=6FNuFWt*@1wUsauD\+0ئUY:{+;%2;)̥W2uU8{uDa%<\xe;j}偠T/0; 3vTm]J[aZMShzS&Q%tYzQ qiqa '7 I.ꫯ ˗YvԜHmn{S*#Rsiur k  ւʓ|M 6C+f^2R+mhƅs㩬خph#FAvu|˱U6ae>I@Pp *ae[,%tHY.)+ͧ+ܨ2h`Ŋ%Rf=avK3L6@K 7֤O.UX|Z q|^xyȰԁ5rZh(v>2j߿|ÆHkDs ض*YYCX[&7? ߥ:G>oST(`OV(r&__=z0R^OX㕴g;N3P -:wiī]K+U$XLmqddoRX6箟^yW*,ܝco] InATHpm;s(:FוȀEh .>Cc w9B_4=XΔ6ju\y3d.^9g ۨAFO,7K9zRixP+,d?x|_yG/AL95(c$ HZ"K|@.}li\Y\ug<]@Śr&*.*|F GA/iԱ$/LerEHq4_wbO*mX]!Xg/wDgU{DeElϬN7슳DjBP gT N"VeE=* bNtỉ5S׊S0,&&hBrUU?kX<|/7Y;bú0w8? 3<ߑ~!\C;fe*:FI0;-_&RUƤ6vvz, 9&+A򰒗l|={F-]{RO#):]ޅDrމu@5v;ƏŒXG M#h< BA2J&pS8~&'H1GBj]"y@.53S#DlG +ʮ]>l&,&XV3sxyۢ+c.voЃ_7bB:9ܔ}PJD+I O`/ߘ_;%;,' ,=5bci0ft|_nWEO|k@_p}9*\=2Puәǁ{5C ] .% @9 WvJаK_E~8Q~+qZoxn^ik2 O(2EO֡yq)D-=wA|\OFo0ѡH3Bsc6vy` o/dVg,Mzd]u9a Eelw@R{-{(G<$OBɺDiyQOu"0:;)}i{?Dr3@yv ·N0rRF}ҙn M'X 㻧H\H!KQ`_V2#1N B2bֆ}P~g;atuC)zS18J<>J#<` Fr7za/k:5JG`՟05MbUÈp~}ë6RAˉ!I}]5HT7u.Ȣ77y=L*$WDz[_ M;Tح5] qܞkpVP ch )[i 0:Ϟ}ߢu5=J@3O`hW&w?- 5ɼ\*B^S$mK"5B.!} PkDh[奆=s$Om׆uӕzMV5mdvl*L?̝DȼwI^*PKH꤅[ܸ>|@u{$#Zh;̈́w oi;s⻉ȹꪆ-ǂv^N!&l?r.՝5feZ ֹHتO >4㷷 #T]BkVWquձAf)-}A#ОHΕ q#3ϨKQ^It65#VQ7e 1>1KG-qb|PU+Σiaw366(jp gk.pkܰ.ԋamEWi2WLӸ2!0P@ޭ2VmjzB&!;[Z!4Gcbj706z(BlCĦOӋ'/OB:8W#˨aY4 UR~W'%=#ZI1=0 xhIFY#Q8qUl8.)3hZU;8EѯkpxAxPFu)OTh c;+~ _1TǦH!}JVRRyn"8\m[`ñyϱ@} ՘ wܿ :-wލ=K7$Ne#kU,S]Ϊ~K*֞)Q(^&Attu+N86ESY+p\ag44r)&3'Z*#PNW?b; a=)2s#0<M+댾S]bMڨ'6o.e@6)6v[.9Z68Rv; ֙=gE DZm¨T/K(%so(v'!9+T8~t_3`%W?#w{ U۞rESf)NĊK]^W* w$ǝiH^dDa$-"]c >Ǻ;3YIs=OEOu +*$_GϮ./%R-W|7n4۔sj\)wu& {_ sE-qdb2gV/ϦGgR$_>ʑs+WNr:z9cw4ڊW!w(_EqU/\]6Q78_ 6] Y+݈~a]E l_zTXh |{P$r彥D|]Bhw@J)!0) .Q橓FG"t?BUFR.\s@^uD#v,,RaB/5Q8H`+ G cV}S9RϒD3v!vjMp0=%KAqY9KQ//k$k^a|]v#@QEQb7"kO2 ~pՕQqB@s_f1LGRU:iݦ<A2E~;lj@P*dGoea/3LfM#*+_{DQ]V޻\C#os%TZ3A{do7i2[w@*^58Өn zbP#n% v2 s^ͦ꫅56Bw3Y_qB"bin؍#_ΐLX$Q闹Dqz79B5E TVxB"XJ ղ"dٜN[3(#~5;-(H<-\` dGk*&:|aOgԻBhm*ջgIU,_7djSCv2 4 @b o%CR,r^ej0 Q̷"s[eY8o?wwQFB$n'XwK\m D'iU(OI,rW4vg'eԠyn UNW͔W*f@ L =n^:ф,:W`*j+ ڀ(]w254'sguoSXXJ`Y0HHaK[-\p0͞Q<ڥkD(L5T۱bУQ Fh]ueL5} c G[>?~2IӢ 9KRNJ9d\J\䬃+  1y7H>S7'ֵLuAΝؑ/å7u@lIяb9cQ[7򾉤RYQ'IRcJ+&M{q.MoJ F 5^* ޕF&ozvSZs]|^=sFmuޅ{~#^0xn8|G !ӴhG3N&~ME1aq+ޢQWsR\z&ޭg m;Pǯϙ?ݲ(U^'z (:HL輀ˁ'eN]F\!;ʾ z| /=(_פ|8zU{0+j8LK:@ʫC.Io4GQ$VAƯ0h*LrkN ;U\OĆT4W,JK"ZwBbɚ黓@8{_-1 3oWvhe̊[T$q[AgNC_h-5~y x ѷVןf&T:(ʁ=H|b–8B /μa~9* lp"=Xk-7 'G,Wj p6$ڀt鉹2F36Ap39r42ozN_T{OBH}jDm?~io)`R6dr<;Q)oƖ>}b+ Ej\A,~DYqP>ubg̽lƔn kUdirh?*gϽHjJRvZ,I&U2tP\@GdK ֊>:鉴}jL2j&|/mzC<+ mc^*}O 5<:؊1maERhyL%XJ6l-|".eX GE| %BF"a cƖ*m As5 \2VN}2#*Vm.SvN i ^NiAԗ/> 31f{/֤,t^WZ6J&ڢeT쮋YQtTxROR+S#Aft<O|MBthAxV@ $Cj)Rix}4VsG2!Bz ;+5em4?q#"~8-v˸p 8R*~M=0Q҅kngqӚoI8WG KK6{Ez! 'l@&c>@ ; 1kaSh%3/Gy;*f՗JMYL8*W AZ3h9lj8ǔ*K|F9&$`TRFgp_ .:/wI đY.pFj䀮b˾pKsSv!}#DzE9dQqG~s :}?"=6xAX{umf9U11z6Ty-yϽ9bxzk P}q<-T>pc+v;XpVvdMK ~XE;.\+yR2TSYwD2O]Y*qg"r.|nTK*L]*,$h Z&׍=C-MM, m{Q,0Gl(sb"}z[| l!縕ԣS2 cw|7zڟ<;M3fDQ5Kﲨ}W3Zqj~~}4Se?<'NX*&?P:\6r5*C/8J nb"e0yMKlU갰 )R 8vV~cϡTMIJ;}at,$K…:gO))}n\W]xfmaB+U_ 2A|P,dɄz@n@gc Hn@'$6fCR*YOQJuyFtޙfeflZXi+#XYE}opјEtA- x{wvv!2<5Ǘ(W-*Nim> ZＡTT'BkLl?z@@vTQ;7=|6 B+W0MLkXUPK)܎"I:>P8ˉfCatڸ3p@pa1;*bxr.J e,,/6ﰒmWg]P*5=ŶA 6M!9SHP!S:d qc>ޭW7y[y:(=Z\ö"uq&ulJ =sM7%8a${+kI*q3("93L) ]Ͽ[k H2[+slƾ֣Yq$|S 2YLYpP!TYBі)hZ(A7AT]p8Q?V72dzT2R^-77)mSjA}ַ`9>L2j~)KL$$/ҥ|H@+?K-d@[kMmBnoy>Jak̭)BKj dU6"ｇ})?15s,}ɍf2F9.Ftw;?w5%, ʪT=zv$ ʴs ')Y3]*b~Eϓwu+ 2Rn>4%̲b:SxȦ[8q-f B{!іথ6?Hξ{YF|]2s=̽N"_.g/tnj}R LIDO9)sUr49c sK-kmp5mlVD7;j+wL2ZlL-QǚU&ߍCd0\Rba2 e^-4.!gdQ<-v'Qo.R;WЋW"?rIwF:` 'w,ڨUt8 \qnM| :#Yg<+Cl; ?'K-1&؅uGࢴb3ةk{%ƽtuwdoa4rr{ֶ^0aA26^LR2q!U1ଋwLe[K&=N y(tAߞJXIm""˜NV(H4=&_ѷl&_%|uIDHC9Liyi(,v;og@P 6 T6>W,aOjk!ox<:e \]B?@ЧsB2Z+yJK;a/2]ݺh{N:?Zx RU.aj/7d~ &fX Dr.E(b]Ty]_ ٓqu)K-RK(9]R-rӍH^<_DJ>h> FzEYa2eCk\ Ḿ/[@#A X+'ΜHu4]TWp%Єj$9UlSz(O9PWVu͎6P6|_9{5E#Q|L?/ u\"Q;}Sܕe#١ : y4tȯ0 HJ·e#mE.H6y+d6GJ wʩ"d(=葦;{bmp \M~u}; 76QǂL:mjIhl-%:m;3`W|R@.%%aGW)ͽ?7%aRG'"1@ոbl-n0%Jf <]i;h8䄡uO @n7Hߠ`ߵǴփʹ}:Kqcfixs[[hfljZ5m9?H;rRHSa˾Zj(6Cʕwaph|.VR&g7yml*f*E@Mp&-ukLfT!) 7 Ɯ&(ZxzFWۓTW'/7:J0c #$J#viw.qzmV`Y⑶z0c(2wa*azF y]J[ň0z~hMb(K"Mx'/2l?S6)-*:yV h 9QD;Le{V,ϔGt1w=O@&A͎Űs֦:I?N`lɺu#՞?ӞYR(qn1|m}RL2i\[C")cky9 C 0?CXq4hf it ͸trMwS_G'M#* ;,Z"ZxlG!1㴳cx'"6l^7Q/4+r% (~(,I*k?$O%h?3dp؁&*O0 }Kա h`>E)76JE"}ƸЅǕѴI3GT=Aѓ;îOzPܡg/Sc20cF;њ$~ybog'8xrDJfvs}mSA#t8شSo Z3}n*3{lH;H  }uI'aYVؙ=]EHH ('b]!ס$LL)'Q$=E_., cm@8ke'eLc#p>srES> }E-7Xy q,1ͬT8>6Y$K5=o2A]/ it=5B\HMFp1JǤf3a~bXBkc `Eϛp?jK!2~A AEx.F_j+,#zMF٠Vw](9XE[Gaوwa-J ۜTZ`HAMM/эut.EP3DD]Od!x/(k~S:nBV+# 6a7Eb7my _c-M(dS34GHi`[4 W 'fΛUI}zTR΢S%VVM #yۙ[oh4G\B!<~E7rgN"bqM#47w[_᰼i b M[}0wfrA鄅ggѷ-0աZF[#^KCz& oI\4Peup6#K[EgNI+1/_:׽7ʔԺRQQ&6jI/IP qQfALkTʠ`4y9⧰:cHy,+;vj9ʽ'4~pЋ$r- J{MGnR- =3mH+TØ}RovAT|}Bm+,y@!C`:4BOy_VYw|P!nqHqLOP_D=TGs&xF-*@Țdrg4,u׍ /V)Pֽm 5K '"xE8Z??ϜB&_,|0 'pxuTTw4J:i9jz4Zi 1%,\.jA[%Mom^;'}I.nfHBHeUbv]na^UjϮHrԤޞOivo񳤼 1{X&&S0[`M%-A)*& MyeڳRiyJ{J8LX[ZW$.eco!XuyFLO.a='kH7ށa7_'/ KF"̂騶DBKݞ(5/!f@dIPH`8ԣaDZ{3;yŅωq8P]5w~"܏)%n޾AM!aO 6*>ifEVmǽ9Bs\0`1`cgXcH/$H}m2KMdȔp8֊u\ "Fz?;^rP'"& hwyv}Bhh 1b"(2WQWUcVa 8WnGQUj-Oޚ&9s8@Pzߛ C(^6߰)MD c3PC{K.

ibn,N,{b"=% ΀; K+Q{A@,MZh0/-9R6ja`d ~D4Y }ӼioqٶZ &/(qNy* hf ܳEk:iŹDyY cG`TCz&VKZ|da$gn\qizCJ,ӱf?E! T餍NR,{EKLU:cY|ވ)OqMZăGUf6W ݍ и31;iR~(Jm"eG&ppD` cˬ<Ҍ+N,  zlB$W ,&>͗k;,7U̼Z^ ("->u11 =z9/]BI2S:S7JIJbͤSHe/qV9bI$Ũ=~ ̀C 4?o3\\pǧ!;YWT2ʗG֢jxq,}ڰa.=Ve~wp"/ٻGI4_ݲȊr1oVP\Q^1'@=@54@Ni)bɁ~=kPp?X.|j-6uic72w5a|@ŵ' %h8OmB?ipBW8/wWa,Ofq َ@`A qNy]4m2LJ=H(a b30gdDOR7/:!du6EaeO, pqkR캵vl{`g:a_vo t@]U'GP yr 8(jK0 ;.wNQk"Q9M(fc/j"Z#"F~=ߊGG,d,n 1M{pAoqq={m2ɺ,eJRb%+K{mOD[2y֦#]"5̒e˩ݬ71La':mL;mD1Mlӥɘcd3Nu""{oC 2=N|?I@<,Zp'0J_Yq$6\8bF`Qڐ2^8@oioY[285hH0szmήD(q_Jެ$/؄4F}M E->Qx)+5.ZI*`ޤ8?9 PNl1: '7P|`wj'yݸL@Ca^V? ?Rj\KƾOGяS08IۚEܢ)jK?N@:D2p:x (~*׌΢鬩,?:$&`a%dޫ˳oy IN ~>q*aH$]48t.K x>d|N_} ?crˢH L!bkw(u n.V9~6\@ /;Fpٯ`:IbU.+>p6,K-&㩓iY$H"MP=z@D7!~* " ŕ_) 5+9v {Q hΆ\1Mؙn󜐛['%F5fŽ_PsN\Ajʤ@4FR(!P%P3ԈuRFRѫNOG%p5S\/ו\/rX`KTdg1/vw]S]f%SjtS3ޛ\|[VAqm-Dmw eNrY/z67K" ^q4PtlRxRx:9g pԁ\F}ɦZ .]6R/칢@/bycm[V\ .L ͍m;eʗ1#b)[Ǽ KMqdSϲ&C4Y=53[ ]Uy LjcDtؿ$\"#lk>4BYlӠq-[&&-1 B7ϕ. E;a-K9])&:$ *Tcڲpw- sߓCX0(K4$s e"Dܣ⊥zJU ) 6+YWn_ntVK|L,YY;è7>fNBIZ9˭vcM-2hB73nC:4ߛ`7RAOL To.)* [#Fim`?(,sL>;m:j~bF 7ݚiyP F{TCb[Sx P.l1RC72) ǗUJN+N}78cKvWvQ~ S#"Z-g>'ؠR8 ngo:N}DŽRm1ĬrK"ok~O(Βܓ)q ./ps1B4C%dz{5GޢW,kȤ8$^?8 @KauaKկuwnio ~can,*AO<x ş}trѼ/AwTSQ({?@&:xbҳ\EW;VAlC[LUE' l'ōݧ/߅|MwkىJB#aHTontT-Kq% "oKρ%< do]rK<:^u"{ͭ*8L<ܻRgöW}g{\Q ڔA G\ QPrMWpߖX#P+f%BƧSḶ$B"ݮ-2F9lx=L62ɠ<Z-߂#kB؆=V;C\aZbעx Z|yY~CXޫ_TbϻI,f'uRia1ѱ1IcN'yyW -6*"G!!m.$eM`Z+`jNôy&9p0+HY=8v(3@#kɨRUwH׸һ%>0TXxzcE~=ERک+HërGhH}ʣ(y.#1/ IFPeuoުk=uwFk+"=+n{s$O89F {k9gq.r'ᬮMf"t-pۇ:q 7*C )@[ҦmuU^E_]%emvzVOVbrd€G OިW_J7-@y͆gFC`f={]̋omItq6.A(ٔ~)&}yZpYfƀT |FAƵXm$V%WL!BÚ5XI=Xf12A u*yOFr\!Z7^@bC߭uMڃhs+MRrc V/PGGwѼK]*TV1t tJ" ;;d spkiд0'oeX.#.W3,szQyQnvrtJdܤe| RIh]\ WێV2wȭ{J+ʃn 6﮴›ϑZFzsBpmn[sw#ϏQp`lstzŞd@)x[* jJ}<.n?QkK%@1 5K#7)hrun+!I =f{AڒIo_~rXQ_0e 4ʠr=!l]-^'?֔ I읠%D]Y/z.p'EĶx*ռE{"m !Y@e8썇ݐ݉ȫPM q5+llNqcxa%>gE|px'hs0vmWg5`rk?b'*bjR/r6FODȚ!^"ᶿI[`gNUlTk?/#zj=X]1K'q!%b$}|Z4R3:gDHQt'$2ĚB-*8M0ik+*G'plfYG'{W rqO$ DK=Oo:*u7ڴ6 ezR;.'vɽDžOu¡!1lְ/FPd&{uNpq sLi z8t^Zž G !vF(nȓLt:tV#|= *^/ Ga@%! s HuTZP> {"G((V:,Mn s/nq.R`1[ߛGq}!ƜͭČMG耹pg`.*u1Un<]Τp/^@ j]Ï<}#^n Q> ]XDVGXBhn6>[׮lu˧ rНIG5A, k9I|O;x86BPE3bK3ضۥuTgD-8^HUE;׍DUhG%J F[m%ӛf8(\PPij!OGT0Xuz\|2&c1͹zwZR^:%I^4ߘ)6 zHIJ=N:d>QwzmwH!bMp #;]}:,j{!*}~`@bGψtzSLt0mލG >:ߤܶuv\y |5*vuPϘ~TR?4;<Y"k~N֬;zsFyK9ɿx -P :T0S'JHҥ+I݋@0xҏQiu }^r9!$>#ګI$I_4e_/2sObmwP6B_u:׍N}N|t1EneՍTm?)1PDQ6ufkkGi&JZ+@$CA$N9t"LׄHn~Ehp]8/ >g/W-gv:Iyyb8ҁ<)FlwGT(Ҟ{Qc9mXvۍHmWX\(q>0HĉPK#u̦Z\}3=9&T,&Vw:!nx^Xly}|%:)|>rT&-I}Di\=O:j%X3V51CCk#;9RV@^!&ѕS-(1XYPh1l<< Q8`* 'tĹN#8X \˹;$ypEek ٻK{IDiMhy=C}`v5IuGLǝ8;>y Zlc<)e̎ȕDY @P \UgeSO~a&!ыZ6@I 8T /2~mU dJ8 |N\ځ8c9syӗIŏh7zgp"I&eʗ;1A4Ә8C-[۱(.m+@͇N B;#3 pJLjC+׿9C64!WN1ϙۧLSYʈ9f_7w."'~5j*;>ԩ9jy4ؕQ4Вu5m :[fŹ>MFbAA™H!a4AvV<%zp2T,U/jYz 7Dz?V76_"G7} Mrye"؄B}zlܨw)%3ɹ^Vt亠L@PjD!лK+޲{[:PWށڇrO{lTmG֟B"#`BnY(8@I7fl=7WADW'+Z!L8n3(AD{wߺ:&#?KAn S|&ˆEﳆ+e?LhPKdD0(&yV]s6?ਯ'G#4Dl0Sщd[BT,C܀phsPoI}|66?Fl/V]ę͎~{9U ρ#aeBQ6 ւIny[d+IWKp#TwY *7?MFf1qNE Qd䵨@XWg{փ+~-դіRh=AF4@uXK2e9?+N B$I"͊)[M4U3cT]Uh䩞T9c)^"i9`e|$JC\`Z 7WTq+11qFMejwQId%7URb$-u?k ,[HK0<'ۨ;wj]#Fz . K%^ 2%fV8 emw$>aD&܌ܨg55Λ! m8@YӖV={M^X0X(O5yiT!R+̩\1zr9\.lm]A~]>\3ޡ/UNq17%XSYJ?ܻBc2 t>2nqaJ=w6nG=\5Mi7KӨTӳɎ=z; )jƭ)LrMmD)껊6&b,x*%ɘx~rbX,Q!U"V{1_d9Ofʥ $ϧw̶1HQ a%,`$qYWEh In8u_f2 E }͏!jv>>\s \ vhC3^&);pP#~\k9&?X@r"zPKk9/ /$kO3)CѺAYmh}Ϝ~E݌Ƒu L<0QȟE3aOe|HG> b*}W*rq5[|K*$kMыx;C֚&C=l 4txF@U4'p`xpOIl(yS)HVk V&-WjY{uſ'S;zH$F?ldE| Fg*eٹ{n/wV`5q[⪻b( ctgQ 52,e@]8y!ѲDn?1pn$IJ>dr 6%4"k S^+%{ȓ@- !y͸ vn l\%%J8.R]``LI->޲g'u:* [\yji ([Ύq[:f:v\ 9Yڇql[fp?qC>) *L܄}@졳iDSAxη}z7[B ;5όɰ0Q`s S& ;%O}lݥ~gA[|' &9y> %;# oe C$pF {JRh}i>vB n)/}W6fM_+MEIN 0E2˪gF]}23$>_??hֿ|m{ QL=<3Jj^X N5a?g}~"p(YgE[V J *- vr,՗ l7[#|C+{ vx<ޓ8Oʙj"ED Ɂ,:H}A1Xd\uRL#͆sAC޸"@R yM4xDLc~C-F`gWAK?>5*]['"*pxEUUp/<.oU>3@m&bjI9l.x ⰩK3+˂TټO *Y]]JbdRƾ zLϐLc@_׸ ݊rǒP+Iqz&/w,fdug3NF'.'HdSme0ڵ6(gm/_R]rY/1,d6?-\.a9VXE~}&h3صiyMfmӕ" Rwt^VǷGB=ȍ +ۋ+\N*8ΟEQ6wZ@QMun󙧌it2w>/p SRy")@ic̪vڠTO?EI!ԮKZe =WKt ϻ_y4[s(1-编эh7resGtK? em,âPLNXMWv!,Lp=&R e*%(H# ^Df|œmj C)*AHW^^!P+@4O)DuaʵrOL+Gk!1T w'b?]..sMo"2|6)<_Niss)J8zm6E)Ze]i/w78B bTt=o_$ǽ氍-R$Yff4 x'5^&jS{RE0uM6^UnCH7%9V[kJ4DW`UizqؕBDRc%][p*^N/*ɷQS9^)6(}Y4ֿNhs| q[COgXE[C}yt|#қ]f?րyR $3M"Mn[NJ;'J.jLe~L^slK jwJ" j ߴg;$1cLy&I&=18lHbYQ팙(XlmogNqߦg1,j|$ukX;Iz"-M!PQuKÈC\i}-`q1?NFa3qn6 qTd?tc{aCD+;h:5Nq bl: w3 RuhK|N*뉆6tRZ0g厤A KY1ش$]Z]yS/gr 6&Ӂݗs~eƖ?`N1Ո~K Vc!/Va[Ad&m))R{n۩hoc:Y㮋V..y@9jQI˥KQB V@`RֳȲoC|pS3CtMZ]Np R?9 tJ1a$K >z=sa (ztuZIocx۵ۚ-p_ #D; cbԽz5@/UyO;LBs\t~pp][u{i]I3=һ@݂7fS]ټ6R_2K̂*)' ~!D? cfUiFЭۭ X7a!Qۿ2csڲAp9I,]o [G0Y1pᇽp.mIz_9~C"=iR(%"p8Xg5?žUO>Ҙr_i?4߄/ a!Գ3K12)w5:u2;nɤ@x֜bf sgf`[c1Z_; H/}d6_Ko{5]Pp?iUdm'u72/r+)MKFbo>!iv]JT4:Y9/@=T:L]L `[c'ā<9XkSa(5]~Ԩ ~j}rR!Uif2ʭsls8KCJ_j^F{Sݗkr 8(kJfO9Bv4躒,vEq&GHd߁M-;fKjI'cHqg5iܕJ7Ӈw-"Nzlo-]K'J6_|+&|9|Gr\ pfXẂ7\ɞQyV ;y8S)dCzC`҈JCK/E2+%lH]3,NW}@j!#M;_x>JoQcKgMp5(0'f4 F&ǚlE0I,Sqa&^཯~:\^@Yn)>)JXŲb\IGe_ Ŝ^/c=S{'--j4>!6uu b^Xpzޏ|֯9f_qQ(*Գa:k i?*WcR[o=aw%e ,G(<&ͼoG~tlKtwmEjJ3 >Yడ7קZU]>>Lz?;p"ڪOC cRL)ϪV'h@+#]?jT{BWz-r2foHFJԝ0=5݈=q@j1ʻ cBy Q}3C[!69$ Cu_~꿻}02 ZC.<$Www|Zl=`ξs-'[Xbı$s{NX&ewÙ<8L eh\s*I^R4R~2hP Qă+Ǘ 5a'R h˦_q5*;pAR 痛=XE}Yj~' f3^D< `w;%]dn=Nv!I;n&'ri xh)@ =лrlB cfH1w)t~ (`<dn;\:jφ@;8YeF~j"J:D1٩FL<t² Ԧ9;[fY`Ġln"JrʡOAY@~bT `)<^U9zRd 'ȴ'~z%!Zfq.ñ9|`YPzçPL՗~iR*'j]3\6b.0*<\-'7B;" >/W ^wW Fq|'ruyP iӪ[Ya}vb9/]0x>];fy]ƶm35f_l:Ut; Z&ӆ.ߤJS@_}8\SF--.88_ YoNj#A~e5Tjߙd!3OеP>d'1dYASt3zU鞷> &,*cL? L:-?dr(:limPvÞ!:h aSuڲ7/*6rJ[ظtp:EZVb9n`P4vx&+%۳$S5a+@H҅|Q%m;<@ ?GBw34ݻ8O^ 2_ϥ$T^zߑ .j$6LYw-S|zG) ,L64Н!i)$hURᣲBI>a6 2I^Cfz&n hxjƿ:Ef 9ac(i_c,ŒwA ʨqH8$vv-z @Dw.U!16dⲲ?X\GH((3Z(ymsRiW\Jp0C`]8-G~w9r#YIZ80'7-"(ɯ3W:ѮB QqȌZ/#6YץP?D nqq3QD{^ZwdNGh4@J XՉ%M|=(Bwħ%gpT|c_Ae _vQUjnTC,drȢ䅑3?`*l IYM5L9q8#{J"Tvݦ߶*MEr (?(|D3q~JvG4ž;mVG|T0 Wd.T/Իƪ3i 謾K?9oyg4BJ_t%؜ȴe8KlY:f ġWbrFq[<ˀ/> N75q/VHk?P~ .[ RZ _}~cӫߧ&1CJ:'m%ŗ vsOZg>'J}C]7xb<iy4p8㜔|4ʒїCB)=cRJ/¶)vN!v%1d=ŽF\;}\퟼OQLa:WǸ |BgȘ զQh.y Nm* Qxݿ\%2z#1H|< 8J$aHH &wqLXeTq?&Żyo S^X[;x? >c~a;2(#H?mR)Z} aqĤL244{EsGfq,خ z ~ +oJ#0up T`-:v5?zJMIuM:42sP d@i{J4T;F4: c W[' xjFnw īJc Lla%`SWHtu5[VPhdk}{1Pf.~؝A(MՙS٣x ddy Qሄ0\  ~?sFrQ"go?2xb+EeJ\0"tڝL-!pL]LJL*vQϑoGޟMMb 1Cp^ٌl;y J>#-g@{w4.̺ne-M࠹C& 3E{t!ނN(bL[*w߭>U(|WiцG~靄Lfܔ:ERS%Ik#amdrkOnK& &B:fT7_ϩa"((2㶿T` b"_pp?˜[# QBO-]JIjd7ұY ޒFpuS졚*]cnJ\&g$G[[!-G<y9:7ۙ╃Pf@lo\Gy"kWp+[Vt߫&2}`v%^k\2 aZ>Nv|Eh[(LI6Jdn[гP=H{ຉXFɽ (qacrɯX[gCu3+l]$[ C詧:7T5:2RŌGOѣ2BJ@ +8"M/o9:`iʱyDE_`ٕh?ʦel,||OF #Xu'ҸW{a0ч|9R1"6 e ޽E{LO8, ~OV 0UH1d5*!L^LtJFаP\ڼ"v]"j)YreWJ@S?;eTF#&8$E>\5.r̘d_ȭ^Ľ[ t%IO&pL-0 3za6t{:Х٤S6LwuN*w RELyuu3J9ΧY{'@4a=c!> O70hZLd8@LSJLr0 W~Iš 9X(ždrƑ=үjSb,T ]/ S%oKP#9Tc+t [hau}oQ1 4䢺h#w3s|MGS8]M!>a/iI%GVpP վOSoљ=H* 4.bVTTG&D\oA^!gÝĂ֡PJpƪȗA^i]g^Kw?(ܗp̣]%XC}7p&(-htVK>݀ vPH"7IDu^r(KC l>B`">V)yn6*pO 6*ŕ\`C;/M]EE$ąz m:cA}Y: ./Dϡ|!+Y`*Λ% ~pޮZK/_&Gs!hx !@.]CD shOn ".;W\]+#ZܞY8uF8,C0rxEyNaax"3p#מj㐬22j}%?*܌yBYǷ}=czUPAՋ0l 7!y@JkG'y9"i1f4?>yh\]ZӇ6нRE,! ùp-!R,f~wsat :ֱa?Xel\NM$/, ,0 ;QF6q :W[] aVmvXvI={T:ɛ%v3.T#ZPŒY( oY>f@=*dTKe<߸d9!CkGsѲk_HMN$*gb 0SSB/ןB+ i#Y ًلfU`/a'\D y86`iO=3c] &Qn>,X&K+$!x(䧩Fx)kj9fZWzx'K7=0] VXxhF [3p#kN'1j#"5wke aas?֕@Xu`{I Hš{h$5cnBQ?X͹l$"-w 8žU_B?АCh+5-'*I؞kzRRKr!٤Jhϕ,޺*9(y\֜EKW~@/`GH%qtlLij²J5چO7ˆBz[EOϿQ"nnā z*m3/*"_f*…e؜%|KZJl,3l8kYO9o;'GA#eS ?6"6Aڻ=k+i2$i4:l>W`{v2c*SBRD-M}D]2#Tjg磇r\r*ꍼ_ hhe#0WUF*@a:_=mЋ=i pZ\TzQB,zgr*~ n;Bh^]t#9;Eh#;e1cFHmU|o{5ޮEM_;P-,a6]{!_NRq0݌MbZ@ZҚ* &E8e_>)-VJ+^T4lq\6:Pt;QB ˼k:tvL⤐Uha̫ϑgc[cЭ42FgRҿ9 41er'VBۀ#\= :Wjm[ܕ0yKЧ ǂ\]$=4M`9<@D%mH0"am܊%vK2{7}P"A TL.)⼖*['la"mYBY9 l2S S,DYL|0$5w+Xe!WMipCs,9?^Ҡ- r?ϾD < DAwltO`yZW/ iOS'XMݛ nB*b% 9R~lHsHf T*JsU'vz-;Y̳ќ`­qSᵃ9dYV-ޅUBWT [ط,-A37 ('}"ۖwu `' 7B{`œk?$FW# M,kE@ZEn3{5.m1IHu3NoFˊ@Hb|&I v:)v>k_ZdEf_FTzk,$P!"d#rH>O 2!HiAcD=3.M9na q&~3e'W~Rپ^1biDi.c:*\ 7!7)|MWׇzN!mfSǍ?>`ڰVEmb0=:`e-\igDXc<X7-.KE%X:m(| $fZМps7(jQyW޽*rА-VʣN! "t/i?DteHQ Knf MPV<0?mnr J}%6L{#0h{5/DE𪯚Z>~2l\CU /B~|Y\xAn3v!MD1qu#ےvKiR۷n}_ }(ݦq_,<%Z֯ zw-0:xwѢ*9?'(ye_.ҡoWHom0R#6-b7lVŤ67h/F(R@з6AfUDDMx]ux]՗O: ~=QӉm) gp_HVu7{u`O=6ͽw/tJcn,oKʰv{Of+ ++摯 N ~*[nw/F)gRf-օtn^n*>x)Ĉ|@Dj')4ty:<$x2|$0 PSmG|dae ?s/XypU`Hj׊/`pP9ԾJ$[PrN]6ԍuidH9lFmyM̬=1AU, i7㒿'Y:W oYo/i "B-qrl1Ivr2Ń:ު6ҥCDsyV'Ss2gANoG!M~sVc)qYivtΉaKJs/H+iMӪO]k+%AW18n7Pփ6L7+XW0oI* y :Gx&JޑXonvNPWBYu=pui{35Ԩx17%Kb͘F{c/{ϒeK<2\+ZX,4v7OB.!ܢДNXmII)% x9seh9IQ79.ȡrT'P[dGF 1!qj a)*y(,׼' :~[0Zi'E/Of=%%q1 :#`&F^(A{$)锅U2>ǭ?H>ߐĤڦޠp61(Wv~i j% qs.lGP2΁5NH23|<0^5btX/R MFkx0\Pg iQ8Zc*NF⼒X::ơTɐ=üyP{QSp8? ˖4o]>'Lo`P[Y $WIXCy`[+Ր8Um^Hs-@l ($⸶)Dz3*فWkp{"Č_p9լz<&V>E]) Hm5' {5AIH&:9(gCTwfO\* ȲTiJ{veh7zk4H0&p(|G*ѹLHnT. Aqpc飐rL؇!T6udAH -v!$2TU(0vBSp:殉l"\R$˯ƚ_JV ԩ’Ci $ԙ5uUmwO Y'^ޕ}WR?+Iي3fXV`Vs] YY>-`ӗ&o}Ow6LFzcFVON?3DzX9d8{_7D `?Yi< #P ~)N/4nJeLӟ28՛}DBal?JJ| O `_8DT~Z^*㐀80U^XЁ?oP:-_P3nRJJ^>ldRg4JVvL%d+?|Ml lR4)HbT 1&`^|_?VD䲔K g"P,1_Hp#P  ‹*i\)#K>ν{ɒ{hdwD s5hSt96VԔSQɜ! Q)tX "Nc݃LwC#rĮ'L%qUy†`GY@Nkfl}gg$MSnIKPmw]&%VA_Ųj.2Yb H̬bnob4k!WM>Hðe>8<<]aR1V$|R[f$A(<3ڇr"+)Bon-gKO86l1 I3=eqs֍4aV50O"g:qv*ٕC)ؖ*&~PpCK/B] $%9<؝R)Jp}E󳥑LVOҷ6BV=_oO'n"Jmڭ HeZfٟ!{LW M_v ZQ)4Dʃ PNDaoxD1~UUAXVHV$V&f 3!'t H `MaB\1/U+4m]6^Q0r3wpyb΀@ܜ sbefNE8)i} t:x?TÂ$fxٔL+B)'Ҥ%G"UuNX(3be W!<Ʌ%{:m ;Pf3 1豽Аw$*7WI kHdlfU=AE,vm>5$@a"*yJﶍC:u^񢝆omboˊ|u0-Kd˵OaofPޡZeV1o(_ojL* ՙiu[ */{GOyw!Eȋ)!ͯA[F9]X?Jp4SwiV-!pT9 x庈g6͹i.QvCS˖[4& 10)~Dqсnu}FG#@^qCNb -_h8-Y:qjۡ ^$"qRV>W&bx7T ,hTFQ7!g,S%3p+  =R$K=#Eܥs̅"UcW Xؓm9zFj$kl3t0W2*7l,.)_k-*xM#whR]FA#^=ea D26-[; ~y@1C*X 8VuA8;>7%^0l~[ͬ( `*=#n- )%&ÜMPg/Sh2[^,z?+'pcύvV6OX*, ^@i>CJ hMTjD䡿wƺ '4ciqgӳjA:Z%r.yΕ[tɫZ(}?rPЄArۓ=;w% h¼Y-`n$}*MI7Wx2ڦ0]iN [ya] y&(bׄ@=}#&Piюxc%2# ) M cq&)Dus7WyXYңǠ.H`+rL ~W=6` fDtɼj/Gƭ֣hسׯjuMV=Owi7{4"Ӛ; 8, &5~18 𢼶 0) < Q?;l *z uS^> UIaB_%[wEQ;zlmP"|V ݔ<(og/qJ+pA# \3mL?+B|YRdlf']ySUr",yNHI=Sr?BA&G6O(ݳ&nHI\"_غ#q-;|ĬK _>e-4)̂-әvh=^!XCv2p/UΠ*6(\'oe^ y:2ÂP~V3|&LC94c.AWb 8601}n+ jkjO4!Jc@ƣ5k]3݃bq\SfD 4v^0%jX;g0 0 dU@4Br&%G8\ӧ/<_V.aa4tI ٍQ&uX/t $@_E&(㰊uiZ&HIN1JgK_kqK2hxMq ; c[hce\KPX^*^T#^ ,F :r{Aq6bJ%^Ⱥ[r4B.}uJybZr;.d6?£32Txj$xI.Y2LGG\K?W:3đBkc^3ٓPfE툤$l4TџF« J;%lBT#x)ŕ7+"ppօ0kI㋾aJg{48ar4FShCRb( &je0axZoJR? .^ɿ ܅yhՠ#>=qx0ӣ&4GgbfzUMX͹Df ~&*jAl3p"TOaqi4c(` uG2Zӷ?GXy`=xG[~BgbB%W}6i!7pgoƖd*,q4-fNHf n(d!m-1X$ oxw pPn"YZZPڋCUNw!Q)%ۚºE76!$pЫH$ oS+| 4 /WP?Bn|oaܚE"Q x>?Y:y58]4| n`s$Єb.?ZsnUe̤磊RUѴuՓ' :vhԕ#2ZL&]}Nswnj_ać.. ͭVt:gm!pY >FX遠JN՘(mQ3Qx|;tro൬q(Y0%Ԝ> TjsefU3S#GW ]}L:Qan;dúlteq{kn0b‘U$K?Vlo{w3<=ӎ'08ϩקI y+KCtHOn31l 6 l#Ìxfm{3sE,\7[H5+^9Z8,1%j{+oR1%% (r1\X/W\}յTk1U/\.|w(1jOz4p3 ΨtZ^'q`<>0Z)zl7gYjXMQ#S+h{q֓B>zRR2#)er\6%J \EW!΍2yS7u(> 1f2 $}%΁>}8Ok7ϩ/Ήsh1ұ{6ȅ }IʘyQ*_.=Bni ҙ!އu˿3Qg fzZW<5a5 9 bJUPEb) .l4>`+4+ɛzeʈ㻳-(nm0perоp@`8_䍑GWU80 <~4<7} U1 yƑq܉!7Ve6۸J{3L$އ-G$dPԭyB.(.A9uWkyϑ0ǴOq9{Mo4T뭴[?E"$댱>[_OEUF:52S1(9w_ĉkFU*scHt_E"wO'HKNXsmku _ٝfn|vIITER$kq Х:$xH渚G_w fK3ic&۲ܞн\7ͨC(Ql(bi , msC8+c4$&es7*C(p s<;\=`ttMZ#ՅR(rcd;Ȣ~\?l)/T BTMO+œ <#(f'u|>FLMWAS|0 |#>H Id9OSi=}ţcycY/-D>i{#/ڱeko+;qq]a49U`"/.@lƐK5vKYh I6a5NκQNLAp=fJ+-0ȹךlztx4A:oPij ]^n.[klpũEWrgao3HYn fG|eBSsƔd( pl} h6l)1FIp(mFyeo[m@_zwcdYVC`Zpf.ިm'Jy=xɒFyiJ'Fq8pM 1% ]487E _qc-ݛ#:n =siSLJ]d3.h;\ ( (՛ AO==  3ž4[:ɦ}R@s8n%U]]_8+WOKUBX$ p:/6%X* QI|&By7wtĊ!'_IzgN.yq,h0{TwC=~G3`y#E,XA $E:;To Gʾ·1|SE?+~H(햱] 4P@n}Il|"p/ ≍G2(jwq~7Fk*O?`' v+r-9YEa1%~pG~kW`v  |1Ow#۸VY)>3,I^Ôҵp# oWeI3pҘGh&ƖH[)k@YZ6HR>fX50PbMDC\@ie^DW_r[}- ?xls5dQA1p %SnDtm;=NK\"[meE֑oÀ}uŕ3;ĊE\`K3rabAPآ׈lɎɯr(+O}U@篭 ^{D~)PPYGn!pP\V,Y ؁ $0AŖ%eot\rcNg֗sTj(;l)Z_ldi[ּ.Y؆ S䔲pAt<;?oW{.4 d>u__r%V,#+PEΘbcGm-頍b^Pu >dGHO!4k3[KΌI4p gh0h!b%UXz(/d_K?@SلS]c פB.|rMj_AiC"IePiq12vp &wmh'9GKؒ_rZŸumnC>΍ 斱EB[ RwdX|s#;xGf4705F)b_>tv-tjJsz^_}$Y|U)JyN\*m x{^ YЖNxR m"7T' H$ã>l^"2P^Kp9@([x|OW] vT>ngGA|B=}58B0_9J%O2: 0WOCrUc÷|5&;67:dm7Ɋ:XBOcEHˡ YTӹ.&~]|~!˛FZ ̇;,i$$nZhx, +NˬsNw3_u$S,ci\X^ο]."-'c74A;/`gjulBI{B<i,aL%9qj p4R @s$I*sI0@pLQ3ԠDa*{Lw-҃ys%AjKsbhz7:i[̊3"%whaQ]7̉+  @:ǾWOa &'A3 [`cK#j됎`Y>P 7~S,07Z*Di?Cŵ(xuQ=] c}t:HG2;/`#  "x8nZeq!6A={;SH\ TvLr) bY{KӋA3IzS(_eLZevq _1.tb!cU c}SJ'guE J:s>ojw.ÍsH:1ȿ7rEDJ ;g=Б#]M2#=2hQtmvgT` _b QLz9$7 XrĊYw{^I9S7#Pv=k1T|s# SL:nhIԻ kRɬS3B FjRwl.ZF-`4<4{ D>IΑnZ.l]~($? &~ko`uF/iIj_U~N;U>-AJZ{zԙz$-͠ _& x~ Œ}X1cRO}V-wf1*EGMF+-- ܚN򇑊؄jh3@G{0EfipKMzò!s>qG_LrӫA"GIJ:B ~ޑH{ciG(\Bj#e-+lզ^Ԙ'A^9m"?k _Њ1Z`F#Upu<@΍d @kT1@*lɧN~Uuԍ5:%`aJMHX_fA!s0kh@\ڝBfBY\H뺴&ӊ^ղKMH6}KH--6.Һ܈ ̱փUr09J؋2r_ Td4JfLT+H?%hC{֩S>c#F9jw>xLP/_bn1.м2Ӳ]A/CC܍VF>foD K i̴bK.6C徝Phڎ\<ڶŨc8R:SAqu{]U =[B{' NXʤ,ܖ56)N*`K^XG4,eIMH6f{KDhiV8E|bΜ6nD^/y8ZzJ&65i|yo'=S^^I[cGXqG ]0zK`7Lp{(b>wm!L4(1eV"Z K?N,q&fdm׍߈QY"вA*ñMMbľrF?]=!03#H 'To,Qo.ẩJ![SNrTEFJ |X#1NFDx_1d(򌽯TdIÄu/t5,  zטRg_޽R@@ӕc}b[Xnz׽D׼f8ei EF^C&*faK]T@0P+ D5d+J&[Qw INA>叩IEE"]C? ǥ8XBrR|o\ u#uh7Pƍմ`zj4!&G:b'p聣8lkI`fәis~ \,}X9Ad(GmiBR 750idVZ/oeݨ]izcRq A_Ϧ^o Zλl4{Nuy6;!^쿪<$&`!\.9QgI@:]$t'K {jZ!Ȱ-N'(>+ (A1 P,b@P H4-܎Z|g-G9}RX2fŽc0,@^lBhRONT:6_DF#t+D6_C)}\! Sat­)(g4jց?H Pӗqv!2͛le*-]=R2za6X55f=)|?xAhxpӮu"IU(i *E: oIf͞H[IA,Gbc>eƔ6u6],<)%w,Qpo rF<{9=tiwcfmL컦Ae? )걼u8cyBx/Og ^͘ûtQĹC.#ZL-zpnf9|Bƶ$<҅'kS x(ѓ0bn&jSy2磄̢Rof}dAW=EK #}T713l|r͑#Ή)avp853&EeF*!s1`v0LFN@rp,IBYҲk_-cԒ/Y7g?LYO8ouF']kJ̫_OPEiZs'iT(>tH6ZM}(xZ[p}ȀZU"ShG9F IE dB\5@i=Dr(€ܷt!9|pXeRwm4a zlW +R/t$Ja4K8^v0ې:?UssIi^N3%oݫ5R{8i?3?-|O*S` L!2Іjs& ;S6ʼGJ4ψE$*L f9:~m\TSG#tYT0?`0|0@X(K&$9%&_c~47ddIT~NUOZi v>XXAP )[ bA;F -׫"%w$A c!B/*M޽j|6x ; ItlU늤dF{z:BwI l]QX|/,awΘEݜ~4 kRVyC9}p%mLJKYtRi4^i%3tqܓ]Br^\q}b1M =7u 볱o2@TDG7fedtޑDc^*g6ά^~}72~b-"Y<`V~>X*( &+z%z"kFۭݍ0x:+Tl?TQ`tpwrêHbQ06ѥ60H%8+K6!3t*-*%vE7&&g-*P'rrJL}QHXFTiAZjk[ڝLmB$jOq|]α"xY,f  8*fIG o)8PHB}Ӧ>.xY-W(3zƾ0C4nSⱸ |-9ՃJNnZ+ ,JY$eFEyC~ccձAZ X`AY77%kйE9 fu9,6EJB_Ek(svL <]l7uعUh l8 5VJ[)2CLE49bHI/n'Z$y| bJO&$% *b:'{KZ:NCyv0c A0!Q)ic bk2<>k.rݐ?4/lZ򠬍z0ˣk#JN{W rV~96BK&fj68x r~ |T+t'ٱL(̶䵌יThlǟK4/ >~R<2,L~\r]}߾~t!=DBV뗱/+6 |Hļe /.PaJGOqͨ]qHz fv9I{ "q 4Yx2_,gRfoc gnq9cB%ݲZ8mAS9rg76X~lFl,#L5S<DT40ɀ}ԶL5mH. X0gam}ʒJgq\DVN8/mR ?%f'=i EClת!=T.ú`I~ڰsq m$J=*|[‡Ŧd}n<@ JJCU?!0yqG#|qO4?f{Tb%蠈62K<165Gw*C9~Gr v^KK JT %hv݂ʜ+9Axp-.U j62{' 6!:ugŤX͔hg7NTR\50Ĉ2 8/乤Tġjد-EHR4_b[dZKE|!#6*h <Hk;.j㈝%SnX !X0/`Jʗx%z+7j"MY8'E(Lm ɲt=3IYOs2+3CXa49϶\(C&y=7̒;$H=?w`@ hsf H`1O }Ab%(ϊf'7%mOY> ,ţBAp{K 0X1A9Oa<~94x?~wXу@~to|Mm+iVU{nGj]`NJ.|Fֵ5X%3I\^bl@o $PM&ʹңFBKtR@! J@żVm ~OSlcF >CYg= U;zXyX!e%e[ۉg7#6eU]A+-ȫ2k‡7N%MGtV'_Co!("[8m4ɘi787rL[Ɇxl敛 it옱Ю+} jaCb|M`#yY" p7+r7P[f౳uabM@HQ]dh$CLiv"f heA)b?.`Ŏ2;.n@am {~Vm6uyQ̷DY"'k ڋt{)e"34lI<T:D(nܤ 9qt"-ގNE&MlM67DBکq߆ÁE~1zڽݧW+rQYߺdmO&J\̛>v\Dh]?!jJrCNLIb!:GU~z.|aIO80GYpIRr5 z^b%9޽U̱Q#!*(PĢ ^ YSzI sKP]--m 9`XQNpWgxY<3^? q A~E@ +T krƶo[;> n LS!jAm' 3}Hl΃3x6Eo6k59Z@?4UfAC[Y)g_E'$Qy>r=Qj[B\05H )!]k]$*{8T0~ũKKp1$ݫm[5]4.ǽ܁>k{V ih]۞|x(5u.K:nб W͞oR)5 Fdތ4+u11%Gֽr +<}7t]=h2$׏jVV8| ^:԰d%2Ʌ/[xdaV)Fˏj"vlKXGwX\D=^|.BcP^~)K/_tf ǭE%|FGT)YV(V>r;HdہWp@r`K9.246@r" } [)$@\;Pa |7G}O{$q$ԧנ 'rG콕URs3n }-/`x <:VP?rLk2X.G~r<[jۺW9bZ3L {Ǭ;6%pdԗd+ppC<4עY`h?K XD-]Pϙ8RlBI;{w!pJi/fZ4 h-9*vȱ\PTBNVˍ6O 7q)e <ح(ri)P)zpgP~'exlePMpwjIS Wp*pOQ~_C.|JgxoJǥ[^I2I{\6;FKUhT1c6 IbNVrg`*yl6L&!LdR7 7!z`O+lߧjSz~}> ѽ 9BW͔ 7wsϼ7%+5x&99 RipS0=)MoQ|ir?4%ɪz=E8 ¸mCpb\'Y l#KoX[KgQ MjȦVsq~fz;..Fvu)Js~[ ZxyrD$Gj+%g0 c0ϟ|޻.4+"jb1eќ GG+F |2fI:o>Nd_PYû?;G(%h>2y],Z3D~+YJȅ N؃QOg}pdqbW~|b|9UF῍ Pf$JaKeSe>ܫ̞1?V1 4}[ۺ&zh?ۂ ?U_կ?WLm5:Ji@LΛce(4?\ CiS4c"]29'n^-xU5W]%%",8F@%/mn4xeA%.=ľ̀ J[^ȫa\V;ܟ ߼}5rP*\?Rhv`iPWp)qRz䫺őN3—yqG!o߅e,1r!'7;ش$C=昃 z`?3 >i _$F}&JHl+̩EsB!'=@MY#VGXVh?CϹ;AFL \֧P`lBV0v:85L= @@;fAJ*t:<`oKu)pqte<\9!܆o{Gxee)*YJ[f3n=2lC.lK\+*6mY5esw7R~3ϱu oU0n7"OGJZj[Jb^E^y&z_cIѼ5>h#Wq5 y{cפϽg+<|a"ՉY [_w~@04ߍnk0I#1%T}A 9mY?Xc*Otm;]WɞPM ! 뇦&Hx6&6@<$wQ55O|NЃoRU=-6ESO~:/0$C1Ppjpx洰 L.XVMzc!ξ<6O h^@7I!6j;HwWwT٥3ǦQc膳+ԔcEu &5ʎU|30.`/a܍E0n1~r49PR }IPVrx2mj8H@Sxhlں#:Cp7c} 8µ>t^~tּ6̤Sū\~)s^gj?=YL]H:&9TzV:0 J@#~c~u!^ت&}642F7)d+麹s]F[$d Dzc2U**[?B\i23>u>W 5Ø=zWʞ5NTr it78@Lb`UT)KV+dOzoOz!dE<9΄B Nԩk Gxd!w= Idb9hQ8|Eu9L8$XާY8 F/l_T^MXAB2GWvɗ8(8oq7nEzYw%{1SʊN.2ț&5!c4@ 11HmqqC b]¤R0fQ1߱7pgus'd~mDkgg$ |~aR8>T YW ^N& @u?Dk38o!x;$̈DSTqVLK &Ek2xM0pĈBLߨUUc%Sԛum`ȝGgס>iOܲCin#tw\:l0n]=S ~8:(5`)=5}\5,/7/H*nvAïU'KmLA؜ĞLV2WΉ^U2 ˍu66P%Ԧ3B#$;jO}v,'"Cqai?#T‘&, Sb3ova 3'[SH!FJj`o/xnV(xWS O5-ھˌ!bJ6aoÓѠʅ^cvIKEr*69JV+G¼0Lv`ɢUC?ݫAAlcHi=_c|a]. (r;9oLVk[J?p|o\_F}9QoRq.,Q"8DT fjYɄFA~,j|i>2y)T42:!a oh\_lFǿ]Yk Ĥ)&?tW ѨRC Rєr0 u?u9gk/-L.[6DhP?tU!uqA`V.ԖjkXH"GAڞ.\A;Oߢ^xEtVqYI[<&ks֜O/zuFDU-xzfV/bF*HEf,7Erq끃q3zDn 65șS/!BZL5;,(d(rQmA[F[X׏ TsAP}1'kH&Pf+Y޲̣$B2$߸{rdT5z*S|wRc<[E}&) hHOO ū6Ks"#23ħUhs xjrҶEB4/q0s,sp$OnCDz?\oIڈHOJwSjJ'6A0F=9c+3z"B 8בU aKav{8@6f uiuyey=7Y\=À̒M ՃwM,φ?p3"&5:[OΜHԋ%/UXߴҎSm @.uf˲T EEP7 &G5Z O Yc5TY8}͖#m#NbxVkyֆ[*.|iڰ54 .HQ)p*sx֙V'{TZRq;Wa3?@颼K,|OR͍@!zSOh%(% oY¿~! |@4j;SLt"SՔm(܃!>J/{GvE΍nm0a3JYB^F>i^i3Ǟ6nsq/1Yn ҄ȺW4UڤN>:Jgsz$:p 럨 ײŕk5/& {gÐJnb sy:%[U/|T, `0>pW2CO3KSL.Z+Zp9kUXs B"a\m{CAE%VV |uD);cQgxeXHW5:յ@6臋D\G w0>ur\.J"qx6%tGhGXmJtߥR^ٳ]$7O)~m̌B[%YyR꧀yO=ܖm#8+-s[Kv̚46)|ILzm)VВIYmD8PfwV핲ya$T&q/u̜Cib ,NCX1? B;Q}@tjce3EJ"Ƨa"*⃖Yv"۞>g Uԡ?P`❐rfۥ%.R%Qno1fu,pdMsf`v 79P Bu_w6}hj׍9-wD;^$UuKcgjaD ޫY.ƗMu q&+=̞ߤ00;^QN- $2̯X0Ito.'/աeqLM3 wR;%7>ϻ]0+# \ն:|Y|I)NeE~m[ ?foo[w leaR0 J.1qu|i^Myzݗ. $C9FDNޕuF_7v%⾤J)2ZLoP BR!76&Z!u +d6wO8S i^޶adp EBOSp\H,vk;honO G\QoIOt N"*JZtW3o xYF@d`>+::ChVZfO kXVЈNC;ƳC{adMbp=ͬb\q=\d{bV³+w5gD aG;uw|ЊB( fYgfp:<.gD$:?<_d@!iYҟ¹i7><~P\DZ@Ng3g_UIEfђoEpxuyhkAYoodZRyu*|j®>vk m o SfxCFaSF6񽥢<5,>!,HZ@:~%%K,8"a0`NUyh}Mj懅~+;xJR0:o6!INB[^2n&1EbUBa%`"M̴Cmc ~vG)9yrT2D׫oe@B\eZ_pkki4P7kttB]I͸א3p @>30<9)Z>)]iN-1eܢu `G.et1MڴmڠT{O2&[ZՉTG=!VYĂv]QIC k"8%( }!@SLCHNUf.DtjuS.2 %9 TPƊ"Ĭ,8*$Lh^gB& lt%p'i\>emِ}&y\AagĠs9Z6)e||rx4l 2"̫3dk,>^Ցժ^5en"e }Sb)["+D VJ!fgDH{˒&N.ۛ9{x XcMJȠ% 1?&6sV6JA +"F*kFVf, 55GPlFMrG6ib%#O]8 ֜h '4q_fxX츒vYCVޝQDê 6?sJ?u^Z;2K&WgTl)I=-tq#J_nzX&'p@;3%i> E{։zehC#{JB)܉YGi~UuE p?Q^ J'tm#!~ZF ; !^Lf'iL8;E?sB먺$>$Ǹ8NV䯚{]rr1tw M# mk X[S TqMx_ ^ʐS2R# sB4wyolhb{f E 0"OE#'~KDF?X:Y@ *.ݷ5;z6F OYiw'F<[j_GyAm5K`u}חh"6{ Bb /;O4\|̹ěc YK(K\+~@)&\=-WS$P2E⑽1Ðp5xDPFCM7%9.uE̶WSa8@"4`FC4Bz Bwbk2.âIa:G$ ]H偐φSpAKKVqk'ވ` ;~r3SPHC[ TM aicS'H8 6^z,' @I%^$yH`}_dABA>A>jp#Z ==a^ڮX\}C7v_V^ԃTo 1:B*iFz:O%ȧw+1q.&obӛ OM~cC`U_GTz͒;,Qw/ x/"]qf-ҰlQg?UL_qvh`V!( lD"+$ǭ=QB_Ǥ׿!*Q1Q#C$N;ߣW܀? 3(z~UPLg]m(M(j5St.&˝$ fxOi޼%=ͧn'*P_[e بPABZ#{8RO{<҈_l{mN0V A ЕR-_yDAǾ6ϫX0"y"#9r`'!ebD碍ǐ"а@uhJ"ls=@bwԁnBXA|wzB+I;GL?e˭ ~B͛uf}e>W7,= ^ $4Zozc5HmAgeX љB~>g$$HF)^9FЂQ9\"r M]f3T'1)iz{Gcyen>r\*oߑv]3Crݞs.bi-0Oiɲڸt.Ioa50Y&UhBd[!=Y\Ck)u/CG.^s\WN$.Z5+O^P&| v}3+X7ɬ  f% uQv}鮋}$V0vzM!jgk8V h=q?\"#' Dm{{>ȣj`Lo ZzGݢB2c*4Gݪ0K^6y%[~>F"g<3cVʾLo[w&mE7݁^2LkXk uS!'(EsXT{!N ǯi89WtU*.R*Mv|Nh {ࠠBN (F wR{?O*[IWٺ}u$H57ڂq<)3)z7?@^,bӦ6RGӣB]mTJ2]6ᓭ=pg2{Cr]bL=Ҕ#!}6dgNа2I,.Ht#gU`|MK?jF,mmV4!+hɹj`tPN8ɵI:S Ș/4n vF=fhΎ1x4Y+5 @OX~Q! "hx`?kkP?|f|rNM5Vk`XrR'K(Eh1,wrݣkReBFIC<@ >X9Aʦ1=`gQ^#6@G%Zxajs˭ 7+E=kӢͶ:a/)՘ʃoXj߸ÒRRuG ?録57n5nqZ# t)o=/W3 *ӱ֩vCH8_cu,rr ]>&`&wVUS->T+x][]]z_R>Xp'R-A5UjpTD'Qj4w¢;եm[c ǛjXw# ^$tT4!\vs Ѩ[V΍r->>W3\12xU~æda-Wvn~KIDSȫ\" @E-a{y1:RM 2N8Kv-N^z~L:$Pvޤ9Ӎ%ʽtohy4W3*?]τxvPQXUcdcMyJNU%&>aP˻ʤ ASlS``!#L Mdzy.8 +[%K4+\4Ma D/5]C3WhmzvsgJTj(0Wrj27b!\8*~Sam;/)UٿP u{$3aʜt6:J*3勺h ^i}!8{rԾ4R0]tǦ7谜zȵֻ 'Z4ư*\ܱzJAlUpp1 `i zqG{@, :FԶ=5΍6:ʅn@() dO,0}^sKtjiN#|ddM 7@g>IHp:MR~.ǽPPI:JVg"yR=kt:MW;>y9]ӍTQۛ2J AEnU.CT'9x R~^7́Ri4L妰#v^s.v (JaBkvBLǽ=h%ecB~A>[M-UZ{ly234ͨĬU`(m\ҷw)y>(ګ# {x[[;;Ҡ*GML;qLI5[C'XJrt'KSXӿ<hlv>9 TDbA)˳lH8RbRf62NRJĩ+WsmˤRMHWTA.NV:ܤPΉYLziBECAf)qfm^{:{i-l 03 I:}wٳWA  Ն_.#4:RZvqUP&k7W<7s ~0p.J4r]Fo3$AbNrU {c yj#c1GT|⎨ [sW>$-]t`lGȾU}ݩS ab7_P#565gP17S"f5|B'dQ~ $$; $nΚ&^n6Q'+DǺ-& ԫ}+@zBYH$A׀(7-fn=?W[1y͠Ӄ0h}K51NJR\˵e\o< RqQ;]Xf8$9NSc0 /BVX6M-&֗k_C/`J!b@6eUJ dMuOjvI0` 2$'1zF?:Avow}ʌ+E)ür Z >z&`cR+MC3Ml`=C9bWMA>cƧ41xi<]<\$U̚-EC!?MQ;$пqÒլ˅v-6IA3pE^3&cWS o'i0sL u[ۆj'AЈ - nm*V}`<2ߦe tHNHG5d#'ʊMH/nֻ·1 Xǒk9Ign TJև~gIid')nM^ 2L](>t划z׺ ` !~c':kg+꥝ MA s~P0I8ƾz(ىJeej/$P'!/2y`ik'Yc}P4@KAQBt]NNg!Sh4c3FR$V&nA9lHm5u6^m(g/vq*|{".Bә43(BƓg8*V㠗7x1/lhIJf3?xA OL0}? s$B;FX7}ٹo:~槈͇mvBgJ״M/Xi< H;FLC ws=OBgY! V LAu ߒX\%8 LMhbοAj= ̯c] |&@ eUU^rPH !DGPsP-F \=Eydʴ~ 'U${[X5l8ݍz0jߧ ơ,kNw'H.ALOxF <oJq0>p7r#m{#ds'ty΄ I񁝷~? l4>zZ֣]-' $/Sы4D(!iKY :HkvA7 ZN H?I&D`-hn3zp j!Z6|nub㼹+E`vl@!YKwBSxG Ipy#%?YH\΂G2+C .:Ŗ e&2:{Hs,1) ARnN1VL Cָ.CB\YӽN˥&*Nپj`NGˈ|y2B2EY`*PC\ZnX7$<&l3(2S{'K&ߨjs\S2 ;BA.簭XRXvC wه6,v-FsewQQu qQq΁SEuЇ])%Lˣ Xdt 3'_QXKXo}#gch Ozw_o69Kmj/5;z+ZQ+ ȟ$_ !>LB~F.50Xa|%m|;?=l=Op#WS8r|:d,h jvܪ$yVwO(:@Sم/q]%҄gLuS&I2Hq=.CO;,76H٭;d~bQ]{: H'g;~@GV`/vgx-cނ1T8@ N?` R#Z\"ðAϠӫ$g!xۥwGs2ԵMXVR=m暔wIee]{4_Cq-BuǨRc\N#$EO#񢢩3E .vx|TQv{F][ͣH y}G CW\Qwd@1bwѿ©LY^pїP V/LccڊCwܨA9VkʥP# .V)0(4Km$:3;?1,㮖5Z|)n&s6xa=7CfScf#^௎_|Hj9'2҉9[X%Y0q΀A= tG^vrzkkv\ ~9NBWɟrDžM14/2/zBK;H[cm`nZԁ8١Ȯئ' L wɐ q5 &]r)%&one9iA:/veN^+r4Dv7IϝF|UY ?WX ~9[A2`W`'^xsW?|[RѸW#{;mx"=fRe$U*T*95Q$^gm"7N͡ƨ7 F0mnj˷j =`+"<5* М0w#XaF%ܝ/O`8O HN>_#T"|]yIEϼJˁr~:{|i2Y&(c5w<486[PtU&6wSܫ#za8 8 LR'ZH}^,nJ: Z׼LqhK܎m&|)WUWST@-WIE:KVv ҏzX2Q60ќ=Fk)iq:C$ҿ\& 7D djd"4$5B}l+*R9c ܷ~B"NM@o~!A+?}H}+1qBlbݸm/&]Aia93чFJ+ `f⏬wIr*Zg䩾Eky 驔{)GԖ#I:&^WKϜXh ,I2zZi& v#a4*J4K"xT82ӹ!JSb⡂ -LHǒM16#DL]|{ }!/vG9j4y<ޣN a=A!`IN}d ΐiɤ&pH| ,R^ TWJf3(hMl:sҢpuȞp=y`lu'c^7#);,R׌t4Jɞ?=8@/`xIMxk 4 #vO->o1l:yyÀ&x8jx1հgUP>j>ReVNޙ!=0o"% Hi4xWi@3^+Uj='_Xp&Vsa qK^jeki5y&Arp `d4 TOdFwe{7W>#"҅\VGt ' ?<`#iT/7 _c,pE' Cian򵜴`{|!2>Ƅu$˚*E]+qը ݻrqR NW^ r QNr7$ T)}Z4q{$-k`CLpA1H۫^۶#o$z-ʿ1)_Kym(Œ10~Åٺ޺*L^4,٪E,ixۃKӋ4 }Wǡ@[#T$2(Pr hH*:篑ܑ^9 4̬ `4"fw& 2ݯ0V4kf6Ysߦ՗@FTG]9=S7 [Zq.,%PZB@?bFN)+i29 ew~f@dfY| (ViOZGvq2I߯"+CUԠk$ :je[ho<|G^ڢ"M)ޓ1]- YZ