qemu-s390x-7.1.0-150500.49.15.1<>, f![Dp9|NscgÔT_\ٚy=ӡ /-3w>;7Ā1c#;T{nG0Pt< 6IJ!x +s>Vh*e߰F2.j^~' f 4ihCqJ,»|-Lg׏h_qe˫e\K-hx ]gRGWVٜʚAzm,vwQ`~"so:=ν[qXƷ>AZ8?Z(d  " [|       $=VxPPP(8 9:4_BSFSGSHSISXSYSZT,[T0\T8]TL^TbTcUdVeVfVlVuV0vVDwXtxXyXKzYYYYZ$Cqemu-s390x7.1.0150500.49.15.1Machine emulator and virtualizer for S/390 architectures QEMU provides full machine emulation and cross architecture usage. It closely integrates with KVM and Xen virtualization, allowing for excellent performance. Many options are available for defining the emulated environment, including traditional devices, direct host device access, and interfaces specific to virtualization. This package provides s390x emulation.f![Ds390zl31-SUSE Linux Enterprise 15SUSE LLC BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIThttps://www.suse.com/System/Emulators/PChttps://www.qemu.org/linuxs390xqЁA큤f!XXf!XCf!XCf!X0f!X0a378157311652ddacd05f20ba8205f78fa36a0b364b7fa23696e72bba3ea3b43a36f3e68670b951d0c825ab211e1c0f61d795caf23d3b0ebd770ddd841ed38ab3746d921b41fb22094d4262faab2fa15a655b89a0dac77f9ca71f5ce64d6f6f1618e3313aacce812fba68425362fdec0f4cb57720161d8ac7e17edfdef1cdaddrootrootrootrootrootrootrootrootrootrootqemu-7.1.0-150500.49.15.1.src.rpmqemu-s390qemu-s390xqemu-s390x(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    libaio.so.1()(64bit)libaio.so.1(LIBAIO_0.1)(64bit)libaio.so.1(LIBAIO_0.4)(64bit)libbpf.so.1()(64bit)libbpf.so.1(LIBBPF_0.0.1)(64bit)libbpf.so.1(LIBBPF_0.0.7)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.12)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcapstone.so.4()(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_4.7.0)(64bit)libgcrypt.so.20()(64bit)libgcrypt.so.20(GCRYPT_1.6)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgmodule-2.0.so.0()(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgobject-2.0.so.0()(64bit)libibverbs.so.1()(64bit)libibverbs.so.1(IBVERBS_1.0)(64bit)libibverbs.so.1(IBVERBS_1.1)(64bit)libjpeg.so.8()(64bit)libjpeg.so.8(LIBJPEG_8.0)(64bit)liblzo2.so.2()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2)(64bit)libm.so.6(GLIBC_2.29)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpixman-1.so.0()(64bit)libpng16.so.16()(64bit)libpng16.so.16(PNG16_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)librdmacm.so.1()(64bit)librdmacm.so.1(RDMACM_1.0)(64bit)libsasl2.so.3()(64bit)libseccomp.so.2()(64bit)libslirp.so.0()(64bit)libslirp.so.0(SLIRP_4.0)(64bit)libslirp.so.0(SLIRP_4.1)(64bit)libslirp.so.0(SLIRP_4.7)(64bit)libsnappy.so.1()(64bit)liburing.so.2()(64bit)liburing.so.2(LIBURING_2.0)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.2)(64bit)libvdeplug.so.3()(64bit)libz.so.1()(64bit)libz.so.1(ZLIB_1.2.0)(64bit)libzstd.so.1()(64bit)qemurpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)7.1.03.0.4-14.6.0-14.0-15.2-14.14.3f! @e,eg'd\@dx@doMdm@d @ccU@c&@c1cӼcӼccctck@cc@cY!@cV~@cD @c@c=qc=qc< @c< @c< @c6@c6@c47@c47@c2c*c)@c#b?b?b?b@bbҨ@bҨ@bVbbb@bw@b{@b^@bL/@bL/@bEbBbBbBb=b=b<]@b; b9@b0b%b%b@b@b@b@b@b @aC@aZ@aa@aa*@a*@a*@a*@a*@a@a@a5aLa@awa`2aC1a@a8a8a0a.a(a'@aj@a $@a /`@`@`Q@`ݮ@`ݮ@`@`"@`P@`@` @`@`@`Z`@`@`}p`x*`u`c`Y@`Q@`P`OL@`KW`KW`B@`?z@`8`/@`.V`-@`+`!'`!'`3@````@` @`x@__T_j____^@_@__@_}_ts@_h_`_Z@_Z@_X_N7_FN_D@_>e_;_2@_{__@^z^@^n@^?@^^^U@^U@^^@^1^@^@^^|@^y@^t@^t@^oj@^j$@^Nt^M#@^9\^8 @^0"@^*@^*@^@^@^^g@^]+]]]e@]@]Γ@]X]@]µ]]5@]W]]@]@]@]?]x]rJ@]rJ@]M`@]J@]Ik]H@]9\\F@\Q\Q\t@\ޢ@\ޢ@\@\ڭ\ֹ@\g\@\!\Ɋ@\\e\\Y@\o@\n\f\ac\T4\Q\J@\@n@\=@\@[>@[>@[o[@[[ @[ZnZ@ZZZ@ZZ̧@ZZZZZw@Z@ZX0>X%X lW_@WWv@WWίWW:WQWWWWW@W~W~WWzOWZWZWQq@WN@WN@WF@WEW!@W!@W@Wo@VbVV@V@V@VVuV]VQ@VQ@VMVMV0V&,VVZVZVZU6@U5@U(U@U@UUlI@Ud`@UT@UQ@U@U7@U4@U.RU-@U-@U) U'@U&iU&iU%@U%@UUU@U ]@U T@TTD@TZ@T@dfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdmueller@suse.comdfaggioli@suse.comgiecrilj@stegny.2a.plschwab@suse.dedfaggioli@suse.comdfaggioli@suse.comhpj@urpla.netdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdmueller@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdimstar@opensuse.orgdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comlma@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.commliska@suse.czdmueller@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comlma@suse.comli.zhang@suse.comdfaggioli@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdmueller@suse.comdfaggioli@suse.comguillaume.gardet@opensuse.orgjose.ziviani@suse.comli.zhang@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comdmueller@suse.comjose.ziviani@suse.comjose.ziviani@suse.combrogers@suse.comjose.ziviani@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.commilsav92@outlook.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.commliska@suse.czbrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.comdimstar@opensuse.orgbrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.comohering@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comguillaume.gardet@opensuse.orgbrogers@suse.combrogers@suse.comstefan.bruens@rwth-aachen.debrogers@suse.comlnussel@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.comstefan.bruens@rwth-aachen.delyan@suse.comcgoll@suse.combrogers@suse.combrogers@suse.comtchvatal@suse.combrogers@suse.combrogers@suse.comschwab@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comolaf@aepfle.debrogers@suse.comolaf@aepfle.delma@suse.combrogers@suse.comolaf@aepfle.debrogers@suse.combrogers@suse.comldewey@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comldewey@suse.combrogers@suse.comldewey@suse.commatz@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.comkwalter@suse.combrogers@suse.comlyan@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comjfehlig@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comhenrik.kuhn@origenis.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comjfehlig@suse.combrogers@suse.combrogers@suse.comschwab@suse.debrogers@suse.comschwab@suse.debrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.combrogers@suse.comohering@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.comafaerber@suse.deafaerber@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comagraf@suse.comafaerber@suse.debrogers@suse.comagraf@suse.combrogers@suse.comglin@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comagraf@suse.combrogers@suse.combrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deolaf@aepfle.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.destefan.bruens@rwth-aachen.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.detampakrap@opensuse.orgafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deagraf@suse.comcrrodriguez@opensuse.orgagraf@suse.comjslaby@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deagraf@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.dempluskal@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.de- Backports and bugfixes: * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019) * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019) * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683) * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683) * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446) * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446) * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446) * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446) * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446) * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446) * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446) * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446) * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446) * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446) * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446) * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446) * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)- Bugs and CVEs fixes: * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328) * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328) * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693) * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544) * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327) * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474) * s390x/ap: Wire up the device request notifier interface (bsc#1205316) * linux-headers: update to v6.5-rc1 (bsc#1205316) * Update linux headers to v6.3rc5 (bsc#1205316) * linux-headers: Update to v6.2-rc8 (bsc#1205316) * linux-headers: Update to v6.1 (bsc#1205316) - Backport of SapphireRapids CPU Models (jsc#PED-8113): * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests * docs: re-generate x86_64 ABI compatibility CSV * target/i386: Add new CPU model GraniteRapids * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES * target/i386: Allow MCDT_NO if host supports * target/i386: Add support for MCDT_NO in CPUID enumeration * target/i386: Adjust feature level according to FEAT_7_1_EDX * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration * target/i386: Add support for AVX-IFMA in CPUID enumeration * target/i386: Add support for AMX-FP16 in CPUID enumeration * target/i386: Add support for CMPCCXADD in CPUID enumeration * target/i386: add support for FB_CLEAR feature * target/i386: add support for FLUSH_L1D feature * i386: Add new CPU model SapphireRapids * target/i386: KVM: allow fast string operations if host supports them * target/i386: add FZRM, FSRS, FSRC * target/i386: add FSRM to TCG - Backport of EPYC-Genoa CPU Model (jsc#PED-7366): * target/i386: Add EPYC-Genoa model to support Zen 4 processor series * target/i386: Add VNMI and automatic IBRS feature bits * target/i386: Add missing feature bits in EPYC-Milan model * target/i386: Add feature bits for CPUID_Fn80000021_EAX * target/i386: Add a couple of feature bits in 8000_0008_EBX * target/i386: Add new EPYC CPU versions with updated cache_info * target/i386: allow versioned CPUs to specify new cache_info- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210: * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638) * virtio-crypto: verify src&dst buffer length for sym request (CVE-2023-3180) * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354) * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec * target/s390x: Fix the "ignored match" case in VSTRS * linux-user/elfload: Enable vxe2 on s390x- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993, bsc#1181740, bsc#1213001 * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301) * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) * 9pfs: prevent opening special files (CVE-2023-2861) * hw/ide/piix: properly initialize the BMIBA register * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) * [openSUSE][OBS] Refine the OBS workflow for 15-SP5- Fix bsc#1211000 - Patches added: * Run fstat asynchronously inside coroutines (bsc#1211000) * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000) * Convert query-named-block-nodes to coroutine (bsc#1211000) * Convert query-block/info_block to coroutine (bsc#1211000) * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000) * block-coroutine-wrapper.py: support also basic return types (bsc#1211000) * [openSUSE][RPM] Backport some spec-file improvements from Factory- Fix bsc#bsc#1211697 * Patches added: smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697) hw/smbios: fix field corruption in type 4 table (bsc#1211697) linux-user: fill out task state in /proc/self/stat test-vmstate: fix bad GTree usage, use-after-free qemu/osdep: Switch position of "extern" and "G_NORETURN"- Switch the packaging workflow to git, like the one we have in place already for Factory. * Patches no longer present as patch files, but applied as commits: Disable-some-tests-that-have-problems-in.patch Make-char-muxer-more-robust-wrt-small-FI.patch Make-installed-scripts-explicitly-python.patch Makefile-fix-build-with-binutils-2.38.patch PPC-KVM-Disable-mmu-notifier-check.patch Raise-soft-address-space-limit-to-hard-l.patch Revert-linux-user-fix-compat-with-glibc-.patch Revert-roms-efirom-tests-uefi-test-tools.patch Revert-tests-qtest-enable-more-vhost-use.patch Update-linux-headers-to-v6.0-rc4.patch accel-abort-if-we-fail-to-load-the-accel.patch ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch bios-tables-test-add-test-for-number-of-.patch bios-tables-test-teach-test-to-use-smbio.patch block-Handle-curl-7.55.0-7.85.0-version-.patch block-io_uring-revert-Use-io_uring_regis.patch configure-Add-Wno-gnu-variable-sized-typ.patch dmg-warn-when-opening-dmg-images-contain.patch dump-Add-architecture-section-and-sectio.patch dump-Refactor-dump_iterate-and-introduce.patch dump-Reintroduce-memory_offset-and-secti.patch dump-Rename-write_elf-_phdr_note-to-prep.patch dump-Rename-write_elf_loads-to-write_elf.patch dump-Reorder-struct-DumpState.patch dump-Replace-opaque-DumpState-pointer-wi.patch dump-Rework-dump_calculate_size-function.patch dump-Rework-filter-area-variables.patch dump-Rework-get_start_block.patch dump-Split-elf-header-functions-into-pre.patch dump-Use-a-buffer-for-ELF-section-data-a.patch dump-Write-ELF-section-headers-right-aft.patch hw-acpi-erst.c-Fix-memory-handling-issue.patch hw-display-qxl-Avoid-buffer-overrun-in-q.patch hw-display-qxl-Document-qxl_phys2virt.patch hw-display-qxl-Have-qxl_log_command-Retu.patch hw-display-qxl-Pass-requested-buffer-siz.patch hw-pvrdma-Protect-against-buggy-or-malic.patch hw-scsi-megasas-check-for-NULL-frame-in-.patch hw-smbios-add-core_count2-to-smbios-tabl.patch hw-smbios-handle-both-file-formats-regar.patch hw-smbios-support-for-type-8-port-connec.patch include-elf.h-add-s390x-note-types.patch increase-x86_64-physical-bits-to-42.patch linux-user-Fake-proc-cpuinfo.patch linux-user-lseek-explicitly-cast-non-set.patch linux-user-remove-conditionals-for-many-.patch linux-user-use-max-as-default-CPU-model-.patch linux-user-use-target_ulong.patch meson-install-ivshmem-client-and-ivshmem.patch meson-remove-pkgversion-from-CONFIG_STAM.patch module-add-Error-arguments-to-module_loa.patch module-removed-unused-function-argument-.patch module-rename-module_load_one-to-module_.patch net-tulip-Restrict-DMA-engine-to-memorie.patch openSUSE-Basetools-Ignore-spurious-GCC-1.patch openSUSE-Makefile-Fix-csum8-to-be-built-.patch openSUSE-Makefile-define-endianess-for-c.patch openSUSE-Makefile-fix-issues-of-build-re.patch openSUSE-add-cross.ini-file-to-handle-aa.patch openSUSE-build-Makefile-fix-issues-of-bu.patch openSUSE-build-Silence-GCC-12-spurious-w.patch openSUSE-build-be-explicit-about-mx86-us.patch openSUSE-build-enable-cross-compilation-.patch openSUSE-pc-q35-Bump-max_cpus-to-1024.patch openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch openSUSE-switch-to-python3-as-needed.patch openSUSE-test-help-compiler-out-by-initi.patch qemu-binfmt-conf-Modify-default-path.patch qemu-bridge-helper-reduce-security-profi.patch roms-Makefile-add-cross-file-to-qboot-me.patch roms-Makefile-pass-a-packaging-timestamp.patch roms-change-cross-compiler-naming-to-be-.patch s390x-Add-KVM-PV-dump-interface.patch s390x-Add-protected-dump-cap.patch s390x-Introduce-PV-query-interface.patch s390x-pci-add-routine-to-get-host-functi.patch s390x-pci-don-t-fence-interpreted-device.patch s390x-pci-enable-adapter-event-notificat.patch s390x-pci-enable-for-load-store-interpre.patch s390x-pci-let-intercept-devices-have-sep.patch s390x-pci-reflect-proper-maxstbl-for-gro.patch s390x-pci-reset-ISM-passthrough-devices-.patch s390x-pci-shrink-DMA-aperture-to-be-boun.patch s390x-pv-Add-dump-support.patch s390x-tod-kvm-don-t-save-restore-the-TOD.patch scsi-generic-check-for-additional-SG_IO-.patch scsi-generic-replace-logical-block-count.patch tests-acpi-allow-changes-for-core_count2.patch tests-acpi-update-tables-for-new-core-co.patch tests-change-error-message-in-test-162.patch tests-qemu-iotests-Triple-timeout-of-i-o.patch ui-vnc-clipboard-fix-integer-underflow-i.patch xen-add-block-resize-support-for-xen-dis.patch xen-ignore-live-parameter-from-xen-save-.patch xen_disk-Add-suse-specific-flush-disable.patch- Fix bsc#1209064 * Patches added: s390x-pci-reset-ISM-passthrough-devices-.patch s390x-pci-shrink-DMA-aperture-to-be-boun.patch- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping linux-user-add-more-compat-ioctl-definit.patch and adding Revert-linux-user-fix-compat-with-glibc-.patch - Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and linux-user-drop-conditionals-for-obsolet.patch were added as downstream patches as they were part of a series, but they never made it upstream, so we don't want them here either * Patches dropped: linux-user-add-more-compat-ioctl-definit.patch linux-user-drop-conditionals-for-obsolet.patch meson-enforce-a-minimum-Linux-kernel-hea.patch * Patches added: Revert-linux-user-fix-compat-with-glibc-.patch- Fixes bsc#1197653, CVE-2022-1050 * Patches added: block-Handle-curl-7.55.0-7.85.0-version-.patch hw-pvrdma-Protect-against-buggy-or-malic.patch- Fixes: jsc#PED-1716 Add S390 features from IBM requirements * Patches added: dump-Add-architecture-section-and-sectio.patch dump-Refactor-dump_iterate-and-introduce.patch dump-Reintroduce-memory_offset-and-secti.patch dump-Rename-write_elf_loads-to-write_elf.patch dump-Rename-write_elf-_phdr_note-to-prep.patch dump-Reorder-struct-DumpState.patch dump-Replace-opaque-DumpState-pointer-wi.patch dump-Rework-dump_calculate_size-function.patch dump-Rework-filter-area-variables.patch dump-Rework-get_start_block.patch dump-Split-elf-header-functions-into-pre.patch dump-Use-a-buffer-for-ELF-section-data-a.patch dump-Write-ELF-section-headers-right-aft.patch include-elf.h-add-s390x-note-types.patch s390x-Add-KVM-PV-dump-interface.patch s390x-Add-protected-dump-cap.patch s390x-Introduce-PV-query-interface.patch s390x-pv-Add-dump-support.patch- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165), bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139 - Improved handling of: bsc#1202282 (jsc#PED-2592) * Patches dropped: pc-q35-Bump-max_cpus-to-1024.patch * Patches added: accel-abort-if-we-fail-to-load-the-accel.patch bios-tables-test-add-test-for-number-of-.patch bios-tables-test-teach-test-to-use-smbio.patch dmg-warn-when-opening-dmg-images-contain.patch hw-acpi-erst.c-Fix-memory-handling-issue.patch hw-display-qxl-Avoid-buffer-overrun-in-q.patch hw-display-qxl-Document-qxl_phys2virt.patch hw-display-qxl-Have-qxl_log_command-Retu.patch hw-display-qxl-Pass-requested-buffer-siz.patch hw-smbios-add-core_count2-to-smbios-tabl.patch hw-smbios-support-for-type-8-port-connec.patch module-add-Error-arguments-to-module_loa.patch module-removed-unused-function-argument-.patch module-rename-module_load_one-to-module_.patch openSUSE-pc-q35-Bump-max_cpus-to-1024.patch s390x-tod-kvm-don-t-save-restore-the-TOD.patch tests-acpi-allow-changes-for-core_count2.patch tests-acpi-update-tables-for-new-core-co.patch ui-vnc-clipboard-fix-integer-underflow-i.patch- Refactor building and installing SeaBIOS docs- Rename submodule patches so that it's clear which ones are backports and which ones are downstream only fixes; - No functional change intended. * Patches dropped: Ignore-spurious-GCC-12-warning.patch roms-sgabios-Fix-csum8-to-be-built-by-ho.patch Makefile-define-endianess-for-cross-buil.patch ipxe-Makefile-fix-issues-of-build-reprod.patch qboot-add-cross.ini-file-to-handle-aarch.patch sgabios-Makefile-fix-issues-of-build-rep.patch Silence-GCC-12-spurious-warnings.patch build-be-explicit-about-mx86-used-note-n.patch enable-cross-compilation-on-ARM.patch stub-out-the-SAN-req-s-in-int13.patch help-compiler-out-by-initializing-array.patch seabios-switch-to-python3-as-needed.patch * Patches added: openSUSE-Basetools-Ignore-spurious-GCC-1.patch openSUSE-Makefile-Fix-csum8-to-be-built-.patch openSUSE-Makefile-define-endianess-for-c.patch openSUSE-Makefile-fix-issues-of-build-re.patch openSUSE-add-cross.ini-file-to-handle-aa.patch openSUSE-build-Makefile-fix-issues-of-bu.patch openSUSE-build-Silence-GCC-12-spurious-w.patch openSUSE-build-be-explicit-about-mx86-us.patch openSUSE-build-enable-cross-compilation-.patch openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch openSUSE-switch-to-python3-as-needed.patch openSUSE-test-help-compiler-out-by-initi.patch- Fixes jsc#PED-1716 * Patches added: configure-Add-Wno-gnu-variable-sized-typ.patch s390x-pci-add-routine-to-get-host-functi.patch s390x-pci-don-t-fence-interpreted-device.patch s390x-pci-enable-adapter-event-notificat.patch s390x-pci-enable-for-load-store-interpre.patch s390x-pci-let-intercept-devices-have-sep.patch s390x-pci-reflect-proper-maxstbl-for-gro.patch Update-linux-headers-to-v6.0-rc4.patch- install binfmt-misc handlers for systemd (bsc#1206838)- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592) * Patches added: pc-q35-Bump-max_cpus-to-1024.patch- install SeaBIOS documentation- Enable KVM support on riscv64- qtests test are not realiable when run inside OBS builders, so let's disable that part of the testsuite for now. There is work ongoing to run it somewhere else (on dedicated hosts) to avoid loosing coverage. (bsc#1204566)- Improve dependency handling (e.g., what's recommended vs. what's required. - Add a subpackage (qemu-headless) that brings in all the packages that are needed for creating VMs with tools like virt-install or VirtManager, run either locally or from a remote host. (bsc#1202166)- Build fails due to exceeding 10 GB disk limit (10430 MB): raise disk space contraint to 12 GB- Fixes bsc#1204082 * Patches added: block-io_uring-revert-Use-io_uring_regis.patch- Due to change in where some documentation files are, if qemu-guest-agent is installed, we need to make sure we update it to our version (bsc#1203995)- The links in the forsplit dirs, in each subpackage, born to deal with package & subpackage splitting, are not really used. In fact, they're "Provides:"-ed by a bunch of subpackages, but there's no "Requires:" for any of them. Let's just get rid of them.- The old qemu-binfmt weappers around the various qemu-$ARCH Linux user emulation binaries (see, e.g., bsc#1186256) are not necessary any longer, and bsc#1143725 can now be considered fixed. * Patches dropped: linux-user-add-binfmt-wrapper-for-argv-0.patch linux-user-binfmt-support-host-binaries.patch- Fix bsc#1204001. Patches are not upstream, and have been picked up and backported from the ML. This is something we usually prefer to avoid, but this is urgent, and the patches looks fine, with high chances for them to be included as they are (and if they're not, we will revisit this, i.e., drop them and re-include the ones that are actually committed) * Patches added: linux-user-add-more-compat-ioctl-definit.patch linux-user-drop-conditionals-for-obsolet.patch linux-user-remove-conditionals-for-many-.patch meson-enforce-a-minimum-Linux-kernel-hea.patch- Improve the output of update_git.sh, by including the list of repos to which we have downstream patches.- Fix: bsc#1202665, CVE-2022-2962 * Patches added: net-tulip-Restrict-DMA-engine-to-memorie.patch- skip tests that don't work under qemu-linux-user emulation- Runs of the test-suite seem much more stable now, in this version of QEMU. (bsc#1203610) We are also fine re-enabling running them in parallel.- Switch QEMU Linux user to emulate the same CPU as the one of the host by default. This is a bit conrtoversial and tricky, when thinking about system emulation/virtualization. But for linux-user, it should be just fine. (bsc#1203684) * Patches added: linux-user-use-max-as-default-CPU-model-.patch- Be less verbose when packaging documentation. In fact, with just a couple of (minor) re-arrangements, we can get rid of having to list all the files all the time - Package /etc/qemu/bridge.conf as '%config(noreplace). Next step will probably be to move it to /usr/etc/qemu (bsc#1201944)- Switch to %autosetup for all products (this required some changes in update_git.sh) - Run check-qtest sequentially, as it's more reliable, when in OBS - Build with libbpf, fdt and capstone support - Drop the patch adding our support document, and deal with that in the spec file directly * Patches dropped: doc-add-our-support-doc-to-the-main-proj.patch- Updated to latest upstream version 7.1 * https://wiki.qemu.org/ChangeLog/7.1 Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * [x86] Support for architectural LBRs on KVM virtual machines * [x86] The libopcode-based disassembler has been removed. Use Capstone instead * [LoongArch] Add initial support for the LoongArch64 architecture. * [ARM] The emulated SMMUv3 now advertises support for SMMUv3.2-BBML2 * [ARM] The xlnx-zynqmp SoC model now implements the 4 TTC timers * [ARM] The versal machine now models the Cortex-R5s in the Real-Time Processing Unit (RPU) subsystem * [ARM] The virt board now supports emulation of the GICv4.0 * [ARM] New emulated CPU types: Cortex-A76, Neoverse-N1 * [HPPA] Fix serial port pass-through from host to guest * [HPPA] Lots of general code improvements and tidy-ups * [RISC-V] RISC-V * [RISC-V] Add support for privileged spec version 1.12.0 * [RISC-V] Use privileged spec version 1.12.0 for virt machine by default * [RISC-V] Allow software access to MIP SEIP * [RISC-V] Add initial support for the Sdtrig extension * [RISC-V] Optimisations and improvements for the vector extension * [VFIO] Experimental support for exposing emulated PCI devices over the new vfio-user protocol (a vfio-user client is not yet available in QEMU, though) * [QMP] The on-cbw-error option for copy-before-write filter, to specify behavior on CBW (copy before write) operation failure. * [QMP] The cbw-timeout option for copy-before-write filter, to specify timeout for CBW operation. * [QMP] New commands query-stats and query-stats-schema to retrieve statistics from various QEMU subsystems (right now only from KVM). * [QMP] The PanicAction can now be configured to report an exit-failure (useful for automated testing) * [Networking] QEMU can be compiled with the system slirp library even when using CFI. This requires libslirp 4.7. * [Migration] Support for zero-copy-send on Linux, which reduces CPU usage on the source host. Note that locked memory is needed to support this * Patches added: Revert-tests-qtest-enable-more-vhost-use.patch meson-remove-pkgversion-from-CONFIG_STAM.patch * Patches dropped: AIO-Reduce-number-of-threads-for-32bit-h.patch Makefile-Don-t-check-pc-bios-as-pre-requ.patch Revert-8dcb404bff6d9147765d7dd3e9c849337.patch Revert-qht-constify-qht_statistics_init.patch XXX-dont-dump-core-on-sigabort.patch acpi_piix4-Fix-migration-from-SLE11-SP2.patch configure-only-populate-roms-if-softmmu.patch configure-remove-pkgversion-from-CONFIG_.patch coroutine-ucontext-use-QEMU_DEFINE_STATI.patch coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch coroutine-win32-use-QEMU_DEFINE_STATIC_C.patch hostmem-default-the-amount-of-prealloc-t.patch hw-usb-hcd-ehci-fix-writeback-order.patch i8254-Fix-migration-from-SLE11-SP2.patch intc-exynos4210_gic-replace-snprintf-wit.patch modules-generates-per-target-modinfo.patch modules-introduces-module_kconfig-direct.patch pc-bios-s390-ccw-net-avoid-warning-about.patch pci-fix-overflow-in-snprintf-string-form.patch qemu-cvs-gettimeofday.patch qemu-cvs-ioctl_debug.patch qemu-cvs-ioctl_nodirection.patch qht-Revert-some-constification-in-qht.c.patch qom-handle-case-of-chardev-spice-module-.patch scsi-lsi53c895a-fix-use-after-free-in-ls.patch scsi-lsi53c895a-really-fix-use-after-fre.patch softmmu-Always-initialize-xlat-in-addres.patch sphinx-change-default-language-to-en.patch test-add-mapping-from-arch-of-i686-to-qe.patch tests-Fix-block-tests-to-be-compatible-w.patch tests-qtest-Move-the-fuzz-tests-to-x86-o.patch usb-Help-compiler-out-to-avoid-a-warning.patch- pcre-devel-static is only needed when building against glib2 < 2.73. After that, glib2 was migrated to pcre2.- Substantial rework of the spec file: * the 'make check' testsuite now runs in the %check section of the main package, not in a subpackage * switched from %setup to %autosetup * rearranged the content in order to minimize the use of %if, %ifarch, etc- Properly fix bsc#1198038, CVE-2022-0216 * Patches added: scsi-lsi53c895a-really-fix-use-after-fre.patch tests-qtest-Move-the-fuzz-tests-to-x86-o.patch- Make temp dir (for update_git.sh) configurable - Added new subpackages (audio-dbus, ui-dbus) - bsc#1199018 was never fixed in Factory's QEMU 6.2. It is now (since the patches are already in SeaBIOS 1.16.0) - Some tests are having issues when run in OBS. They seem to be due to race conditions, triggered by resource constraints of OBS workers. Let's disable them for now, while looking for a fix - Update to v7.0.0 (bsc#1201307). For full release notes, see: * https://wiki.qemu.org/ChangeLog/7.0 Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * [ARM] The virt board has gained a new control knob to disable passing a RNG seed in the DTB (dtb-kaslr-seed) * [ARM] The AST2600 SoC now supports a dummy version of the i3c device * [ARM] The virt board can now run guests with KVM on hosts with restricted IPA ranges * [ARM] The virt board now supports virtio-mem-pci * [ARM] The virt board now supports specifying the guest CPU topology * [ARM] On the virt board, we now enable PAuth when using KVM or hvf and the host CPU supports it * [RISC-V] Add support for ratified 1.0 Vector extension * [RISC-V] Support for the Zve64f and Zve32f extensions * [RISC-V] Drop support for draft 0.7.1 Vector extension * [RISC-V] Support Zfhmin and Zfh extensions * [RISC-V] RISC-V KVM support * [RISC-V] Mark Hypervisor extension as non experimental * [RISC-V] Enable Hypervisor extension by default * [x86] Support for Intel AMX. * [PCI/PCIe] Q35: fix PCIe device becoming disabled after migration when ACPI based PCI hotplug is used (6b0969f1ec) * [PCI/PCIe] initial bits of SR/IOV support (250346169) * [PCI/PCIe] arm/virt: fixed PXB interrupt routing (e609301b45) * [PCI/PCIe] arm/virt: support for virtio-mem-pci (b1b87327a9) * [virtiofs] Fix for CVE-2022-0358 - behaviour with supplementary groups and SGID directories * [virtiofs] Improved security label support * [virtiofs] The virtiofsd in qemu is now starting to be deprecated; please start using and contributing to Rust virtiofsd * Patches dropped: acpi-validate-hotplug-selector-on-access.patch block-backend-Retain-permissions-after-m.patch block-qdict-Fix-Werror-maybe-uninitializ.patch brotli-fix-actual-variable-array-paramet.patch display-qxl-render-fix-race-condition-in.patch doc-Add-the-SGX-numa-description.patch hw-i386-amd_iommu-Fix-maybe-uninitialize.patch hw-intc-exynos4210_gic-provide-more-room.patch hw-nvme-fix-CVE-2021-3929.patch hw-nvram-at24-return-0xff-if-1-byte-addr.patch iotest-065-explicit-compression-type.patch iotest-214-explicit-compression-type.patch iotest-302-use-img_info_log-helper.patch iotest-303-explicit-compression-type.patch iotest-39-use-_qcow2_dump_header.patch iotests-60-more-accurate-set-dirty-bit-i.patch iotests-bash-tests-filter-compression-ty.patch iotests-common.rc-introduce-_qcow2_dump_.patch iotests-declare-lack-of-support-for-comp.patch iotests-drop-qemu_img_verbose-helper.patch iotests-massive-use-_qcow2_dump_header.patch iotests-MRCE-Write-data-to-source.patch iotests.py-filter-out-successful-output-.patch iotests.py-img_info_log-rename-imgopts-a.patch iotests.py-implement-unsupported_imgopts.patch iotests.py-qemu_img-create-support-IMGOP.patch iotests.py-rewrite-default-luks-support-.patch iotests-specify-some-unsupported_imgopts.patch meson-build-all-modules-by-default.patch numa-Enable-numa-for-SGX-EPC-sections.patch numa-Support-SGX-numa-in-the-monitor-and.patch python-aqmp-add-__del__-method-to-legacy.patch python-aqmp-add-_session_guard.patch python-aqmp-add-SocketAddrT-to-package-r.patch python-aqmp-add-socket-bind-step-to-lega.patch python-aqmp-add-start_server-and-accept-.patch python-aqmp-copy-type-definitions-from-q.patch python-aqmp-drop-_bind_hack.patch python-aqmp-fix-docstring-typo.patch python-aqmp-Fix-negotiation-with-pre-oob.patch python-aqmp-fix-race-condition-in-legacy.patch Python-aqmp-fix-type-definitions-for-myp.patch python-aqmp-handle-asyncio.TimeoutError-.patch python-aqmp-refactor-_do_accept-into-two.patch python-aqmp-remove-_new_session-and-_est.patch python-aqmp-rename-accept-to-start_serve.patch python-aqmp-rename-AQMPError-to-QMPError.patch python-aqmp-split-_client_connected_cb-o.patch python-aqmp-squelch-pylint-warning-for-t.patch python-aqmp-stop-the-server-during-disco.patch python-introduce-qmp-shell-wrap-convenie.patch python-machine-raise-VMLaunchFailure-exc.patch python-move-qmp-shell-under-the-AQMP-pac.patch python-move-qmp-utilities-to-python-qemu.patch python-qmp-switch-qmp-shell-to-AQMP.patch python-support-recording-QMP-session-to-.patch python-upgrade-mypy-to-0.780.patch qcow2-simple-case-support-for-downgradin.patch qemu-binfmt-conf.sh-should-use-F-as-shor.patch tests-qemu-iotests-040-Skip-TestCommitWi.patch tests-qemu-iotests-Fix-051-for-binaries-.patch tests-qemu-iotests-testrunner-Quote-case.patch tools-virtiofsd-Add-rseq-syscall-to-the-.patch ui-cursor-fix-integer-overflow-in-cursor.patch vhost-vsock-detach-the-virqueue-element-.patch virtiofsd-Drop-membership-of-all-supplem.patch virtio-net-fix-map-leaking-on-error-duri.patch Disable-some-tests-that-have-problems-in.patch * Patches added: intc-exynos4210_gic-replace-snprintf-wit.patch Revert-8dcb404bff6d9147765d7dd3e9c849337.patch- Fix bsc#1197084 * Patches added: hostmem-default-the-amount-of-prealloc-t.patch- Get rid of downstream patches breaking s390 modules. Replace them with the upstream proposed and Acked (but never committed) solution (bsc#1199015) * Patches added: modules-generates-per-target-modinfo.patch modules-introduces-module_kconfig-direct.patch * Patches dropped: Fix-the-module-building-problem-for-s390.patch modules-quick-fix-a-fundamental-error-in.patch- backport patches for having coroutine work well when LTO is used * Patches added: coroutine-ucontext-use-QEMU_DEFINE_STATI.patch coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch coroutine-win32-use-QEMU_DEFINE_STATIC_C.patch- seabios: drop patch that changes python in python2. Just go to python3 directly. * Patches dropped: seabios-use-python2-explicitly-as-needed.patch- Fix the following bugs: - bsc#1198037, CVE-2021-4207 - bsc#1198038, CVE-2022-0216 - bsc#1201367, CVE-2022-35414 - bsc#1198035, CVE-2021-4206 - bsc#1198712, CVE-2022-26354 - bsc#1198711, CVE-2022-26353 * Patches added: display-qxl-render-fix-race-condition-in.patch scsi-lsi53c895a-fix-use-after-free-in-ls.patch softmmu-Always-initialize-xlat-in-addres.patch ui-cursor-fix-integer-overflow-in-cursor.patch vhost-vsock-detach-the-virqueue-element-.patch virtio-net-fix-map-leaking-on-error-duri.patch- Fix usb ehci boot failure (bsc#1192115) * Patches added: hw-usb-hcd-ehci-fix-writeback-order.patch- Fix bugs boo#1200557 and boo#1199924 - Now that boo#1199924 is fixed, re-enable FORTIFY_SOURCE=3 * Patches added: pci-fix-overflow-in-snprintf-string-form.patch sphinx-change-default-language-to-en.patch- It has been observed that building QEMU with _FORTIFY_SOURCE=3 causes problem (see bsc#1199924). Force it to =2 for now, while we investigate the issue.- Backport a GCC 12 aarch64 build fix (bsc#1199625) * Patches added: block-qdict-Fix-Werror-maybe-uninitializ.patch- Filter out rpmlint error that is valid for qemu, but will have its badness increased in the future.- enable aio=io_uring on all kvm architectures (bsc#1197699)- Backport aqmp patches from upstream which can fix iotest issues * Patches added: python-aqmp-add-__del__-method-to-legacy.patch python-aqmp-add-_session_guard.patch python-aqmp-add-SocketAddrT-to-package-r.patch python-aqmp-add-socket-bind-step-to-lega.patch python-aqmp-add-start_server-and-accept-.patch python-aqmp-copy-type-definitions-from-q.patch python-aqmp-drop-_bind_hack.patch python-aqmp-fix-docstring-typo.patch python-aqmp-Fix-negotiation-with-pre-oob.patch python-aqmp-fix-race-condition-in-legacy.patch Python-aqmp-fix-type-definitions-for-myp.patch python-aqmp-handle-asyncio.TimeoutError-.patch python-aqmp-refactor-_do_accept-into-two.patch python-aqmp-remove-_new_session-and-_est.patch python-aqmp-rename-accept-to-start_serve.patch python-aqmp-rename-AQMPError-to-QMPError.patch python-aqmp-split-_client_connected_cb-o.patch python-aqmp-squelch-pylint-warning-for-t.patch python-aqmp-stop-the-server-during-disco.patch python-introduce-qmp-shell-wrap-convenie.patch python-machine-raise-VMLaunchFailure-exc.patch python-move-qmp-shell-under-the-AQMP-pac.patch python-move-qmp-utilities-to-python-qemu.patch python-qmp-switch-qmp-shell-to-AQMP.patch python-support-recording-QMP-session-to-.patch python-upgrade-mypy-to-0.780.patch- Drop the patches which are workaround to fix iotest issues * Patches dropped: Revert-python-iotests-replace-qmp-with-a.patch Revert-python-machine-add-instance-disam.patch Revert-python-machine-add-sock_dir-prope.patch Revert-python-machine-handle-fast-QEMU-t.patch Revert-python-machine-move-more-variable.patch Revert-python-machine-remove-_remove_mon.patch- Support the SGX feature (bsc#1197807) * Patches added: doc-Add-the-SGX-numa-description.patch numa-Enable-numa-for-SGX-EPC-sections.patch numa-Support-SGX-numa-in-the-monitor-and.patch- Backport CVE-2021-3929 (bsc#1193880) * Patches added: hw-nvme-fix-CVE-2021-3929.patch- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528) * Patches added: Revert-python-iotests-replace-qmp-with-a.patch Revert-python-machine-add-instance-disam.patch Revert-python-machine-add-sock_dir-prope.patch Revert-python-machine-handle-fast-QEMU-t.patch Revert-python-machine-move-more-variable.patch Revert-python-machine-remove-_remove_mon.patch- Add missing patch from a PTFs (bsc#1194938) * Patches added: scsi-generic-check-for-additional-SG_IO-.patch- Kill downstream patches around bifmt handling that makes cumbersome to run multi-arch containers, and switch to the upstream behavior, which is well documented and valid on all other distros. This is possible thanks to Linux kernel commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so it can only work on Leap/SLE 15.4 and higher). (bsc#1197298) * Patches dropped: qemu-binfmt-conf.sh-allow-overriding-SUS.patch qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch- Fix update_git.sh wiping all the package file of the local checkout while cloning the git repository on demand (in case they don't exist and the user as to do so).- Improve test reliability * Patches added: Fix-the-module-building-problem-for-s390.patch tests-qemu-iotests-040-Skip-TestCommitWi.patch tests-qemu-iotests-testrunner-Quote-case.patch- Fix virtiofs crashing with glibc >= 2.35, due to rseq syscall (bsc#1196924) * Patches added: tools-virtiofsd-Add-rseq-syscall-to-the-.patch- Avoid warnings caused by a GCC 12 bug, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98503 (bsc#1197018) * Patches added: hw-i386-amd_iommu-Fix-maybe-uninitialize.patch Silence-GCC-12-spurious-warnings.patch Ignore-spurious-GCC-12-warning.patch- Proactive fix * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch- Build PPC firmwares from sources on non-PPC builds as well (bsc#1193545) - Build RiscV firmwares on non-RiscV builds as well - While there, refactor (and simplify!) the firmware building logic and code * Patches added: Makefile-define-endianess-for-cross-buil.patch Makefile-fix-build-with-binutils-2.38.patch- qemu,kvm,xen: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) * Patches added: hw-scsi-megasas-check-for-NULL-frame-in-.patch- Include vmxcap in the qemu-tools package (is being very useful for debugging bsc#1193364)- The qemu package should require qemu-x86, qemu-arm, etc, as there's no point installing it without _any_ of them. Additionally, right now, the user does not get a working qemu, if recommended packages are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087- Give clearer instructions on how to modify the package patches from the output of update_git.sh (docs change only, no functional change)- qemu,kvm: potential privilege escalation via virtiofsd (bsc#1195161, CVE-2022-0358) * Patches added: virtiofsd-Drop-membership-of-all-supplem.patch* Patches added: block-backend-Retain-permissions-after-m.patch iotest-065-explicit-compression-type.patch iotest-214-explicit-compression-type.patch iotest-302-use-img_info_log-helper.patch iotest-303-explicit-compression-type.patch iotest-39-use-_qcow2_dump_header.patch iotests-60-more-accurate-set-dirty-bit-i.patch iotests-bash-tests-filter-compression-ty.patch iotests-common.rc-introduce-_qcow2_dump_.patch iotests-declare-lack-of-support-for-comp.patch iotests-drop-qemu_img_verbose-helper.patch iotests-massive-use-_qcow2_dump_header.patch iotests-MRCE-Write-data-to-source.patch iotests.py-filter-out-successful-output-.patch iotests.py-img_info_log-rename-imgopts-a.patch iotests.py-implement-unsupported_imgopts.patch iotests.py-qemu_img-create-support-IMGOP.patch iotests.py-rewrite-default-luks-support-.patch iotests-specify-some-unsupported_imgopts.patch qcow2-simple-case-support-for-downgradin.patch tests-qemu-iotests-Fix-051-for-binaries-.patch-Backport patch from upstream, bsc#1194063 CVE-2021-4158 * Patches added: acpi-validate-hotplug-selector-on-access.patch- Enable modules for testsuite* Patches added: meson-build-all-modules-by-default.patch- It's time to really start requiring -F when using -b in qemu-img for us as well. Users/customers have been warned in the relevant release notes (bsc#1190135) * Patches dropped: Revert-qemu-img-Improve-error-for-rebase.patch Revert-qemu-img-Require-F-with-b-backing.patch- Fix testsuite failures by not using modules when building tests (and some other, also testsuite related, spec file problems)- [JIRA] (SLE-20965) Make QEMU guests more failsafe when resizing SCSI passthrough disks * Patches added: scsi-generic-replace-logical-block-count.patch- Add an audio-oss sub-package- Add some new (mostly documentation) files in the package- Remove option --audio-drv-list because audio is detected by meson automatically in latest version.- Remove options --disable-jemalloc and --disable-tcmalloc which are changed in v6.2.0.- Update to v 6.2.0. For full release notese, see: * https://wiki.qemu.org/ChangeLog/6.2. Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * virtio-mem: guest memory dumps are now fully supported, along with pre-copy/post-copy migration and background guest snapshots * QMP: support for nw DEVICE_UNPLUG_GUEST_ERROR to detect guest-reported hotplug failures * TCG: improvements to TCG plugin argument syntax, and multi-core support for cache plugin * 68k: improved support for Apple’s NuBus, including ability to load declaration ROMs, and slot IRQ support * ARM: macOS hosts with Apple Silicon CPUs now support ‘hvf’ accelerator for AArch64 guests * ARM: emulation support for Fujitsu A64FX processor model * ARM: emulation support for kudo-mbc machine type * ARM: M-profile MVE extension is now supported for Cortex-M55 * ARM: ‘virt’ machine now supports an emulated ITS (Interrupt Translation Service) and supports more than 123 CPUs in emulation mode * ARM: xlnx-zcu102 and xlnx-versal-virt machines now support BBRAM and eFUSE devices * PowerPC: improved POWER10 support for the ‘powernv’ machine type * PowerPC: initial support for POWER10 DD2.0 CPU model * PowerPC: support for FORM2 PAPR NUMA descriptions for ‘pseries’ machine type * RISC-V: support for Zb[abcs] instruction set extensions * RISC-V: support for vhost-user and numa mem options across all boards * RISC-V: SiFive PWM support * x86: support for new Snowridge-v4 CPU model * x86: guest support for Intel SGX * x86: AMD SEV guests now support measurement of kernel binary when doing direct kernel boot (not using a bootloader) * Patches dropped: 9pfs-fix-crash-in-v9fs_walk.patch block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch hw-acpi-ich9-Add-compat-prop-to-keep-HPC.patch hw-i386-acpi-build-Deny-control-on-PCIe-.patch i386-cpu-Remove-AVX_VNNI-feature-from-Co.patch net-vmxnet3-validate-configuration-value.patch pcie-rename-native-hotplug-to-x-native-h.patch plugins-do-not-limit-exported-symbols-if.patch plugins-execlog-removed-unintended-s-at-.patch qemu-nbd-Change-default-cache-mode-to-wr.patch qemu-sockets-fix-unix-socket-path-copy-a.patch target-arm-Don-t-skip-M-profile-reset-en.patch target-i386-add-missing-bits-to-CR4_RESE.patch tcg-arm-Fix-tcg_out_vec_op-function-sign.patch uas-add-stream-number-sanity-checks.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-balloon-don-t-start-free-page-hin.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch- Reinstate Lin Ma's fixes for bsc#1192147 as they were submitted only to IBS. * Patches added: hw-acpi-ich9-Add-compat-prop-to-keep-HPC.patch hw-i386-acpi-build-Deny-control-on-PCIe-.patch pcie-rename-native-hotplug-to-x-native-h.patch- Rename the Guest Agent service qemu-guest-agent, like in other distros (and upstream). bsc#1185543- disable QOM cast debug outside the testsuite as the corresponding asserts show up occassionally as top #1 in perf(1) traces under heavy virtio load - enable LTO when we'd like to use LTO* Patches added (bsc#1186256): qemu-binfmt-conf.sh-allow-overriding-SUS.patch- cross-i386-binutils and cross-i386-gcc are not needed and were dropped from Factory - boo#1193424- qemu: virtio-net: heap use-after-free in virtio_net_receive_rcu (bsc#1189938 CVE-2021-3748) solved by virtio-net-fix-use-after-unmap-free-for-.patch - kvm,qemu: out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702 CVE-2021-3713) * Patches added: uas-add-stream-number-sanity-checks.patch- Stable fixes from upstream * Patches added: block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch qemu-nbd-Change-default-cache-mode-to-wr.patch target-arm-Don-t-skip-M-profile-reset-en.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch- Fix testsuite dependencies (bsc#1190573) * Patches added: modules-quick-fix-a-fundamental-error-in.patch- Replace patch to fix hardcoded binfmt handler (bsc#1186256) * Patches dropped: qemu-binfmt-conf.sh-allow-overriding-SUS.patch * Patches added: qemu-binfmt-conf.sh-should-use-F-as-shor.patch - Stable fixes from upstream * Patches added: 9pfs-fix-crash-in-v9fs_walk.patch i386-cpu-Remove-AVX_VNNI-feature-from-Co.patch plugins-do-not-limit-exported-symbols-if.patch plugins-execlog-removed-unintended-s-at-.patch qemu-sockets-fix-unix-socket-path-copy-a.patch target-i386-add-missing-bits-to-CR4_RESE.patch virtio-balloon-don-t-start-free-page-hin.patch- Fix qemu build on ARMv7 (bsc#1190211) * Patches added: tcg-arm-Fix-tcg_out_vec_op-function-sign.patch- Update supported file for ARM machines.- Keep qemu-img without backing format still deprecated (bsc#1190135) * Patches added: Revert-qemu-img-Improve-error-for-rebase.patch Revert-qemu-img-Require-F-with-b-backing.patch - Update the support files to reflect the deprecation.- Update build dependencies versions: libgcrypt >= 1.8.0, gnutls >= 3.5.18, glib >= 2.56, libssh >= 0.8.7- Fix hardcoded binfmt handler doesn't play well with containers (bsc#1186256) * Patches added: qemu-binfmt-conf.sh-allow-overriding-SUS.patch- Update to v6.1: see https://wiki.qemu.org/ChangeLog/6.1 For a full list of formely deprecated features that are removed, consult: https://qemu-project.gitlab.io/qemu/about/removed-features.html For a list of new deprecated features, consult: https://qemu-project.gitlab.io/qemu/about/deprecated.html Some noteworthy changes: * Removed moxie CPU. * Removed lm32 CPU. * Removed unicore32 CPU. * Removed 'info cpustats'. * Added Aspeed machines: rainier-bmc, quanta-q7l1-bmc. * Added npcm7xx machine: quanta-gbs-bmc. * Model for Aspeed's Hash and Crypto Engine. * SVE2 is now emulated, including bfloat16 support * FEAT_I8MM, FEAT_TLBIOS, FEAT_TLBRANGE, FEAT_BF16, FEAT_AA32BF16, and FEAT_MTE3 are now emulated. * Improved hot-unplug failures on PowerPC pseries machine. * Implemented some POWER10 instructions in TCG. * Added shakti_c RISC-V machine. * Improved documentation for RISC-V machines. * CPU models for gen16 have been added for s390x. * New CPU model versions added with XSAVES enabled: Skylake-Client-v4, Skylake-Server-v5, Cascadelake-Server-v5, Cooperlake-v2, Icelake-Client-v3, Icelake-Server-v5, Denverton-v3, Snowridge-v3, Dhyana-v2 * Added ACPI based PCI hotplug support to Q35 machine. Enabled and used by default since pc-q35-6.1 machine type. * Added support for the pca9546 and pca9548 I2C muxes. * Added support for PMBus and several PMBus devices. * Crypto subsystem: The preferred crypto backend driver now gnutls, with libgcrypt as the second choice, and nettle as third choice, with ordering driven mostly by performance of the ciphers. * Misc doc improvements. * Patches removed: block-nvme-Fix-VFIO_MAP_DMA-failed-No-sp.patch hmp-Fix-loadvm-to-resume-the-VM-on-succe.patch hw-block-nvme-align-with-existing-style.patch hw-block-nvme-consider-metadata-read-aio.patch hw-net-can-sja1000-fix-buff2frame_bas-an.patch hw-nvme-fix-missing-check-for-PMR-capabi.patch hw-nvme-fix-pin-based-interrupt-behavior.patch hw-pci-host-q35-Ignore-write-of-reserved.patch hw-rdma-Fix-possible-mremap-overflow-in-.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch hw-usb-Do-not-build-USB-subsystem-if-not.patch hw-usb-host-stub-Remove-unused-header.patch linux-user-aarch64-Enable-hwcap-for-RND-.patch module-for-virtio-gpu-pre-load-module-to.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch pvrdma-Ensure-correct-input-on-ring-init.patch pvrdma-Fix-the-ring-init-error-flow-CVE-.patch qemu-config-load-modules-when-instantiat.patch qemu-config-parse-configuration-files-to.patch qemu-config-use-qemu_opts_from_qdict.patch runstate-Initialize-Error-to-NULL.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch target-i386-Exit-tb-after-wrmsr.patch target-sh4-Return-error-if-CPUClass-get_.patch tcg-Allocate-sufficient-storage-in-temp_.patch tcg-arm-Fix-tcg_out_op-function-signatur.patch tcg-sparc-Fix-temp_allocate_frame-vs-spa.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch usb-hid-avoid-dynamic-stack-allocation.patch usb-limit-combined-packets-to-1-MiB-CVE-.patch usb-mtp-avoid-dynamic-stack-allocation.patch usb-redir-avoid-dynamic-stack-allocation.patch usbredir-fix-free-call.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch vhost-user-gpu-abstract-vg_cleanup_mappi.patch vhost-user-gpu-fix-leak-in-virgl_cmd_res.patch vhost-user-gpu-fix-leak-in-virgl_resourc.patch vhost-user-gpu-fix-memory-disclosure-in-.patch vhost-user-gpu-fix-memory-leak-in-vg_res.patch vhost-user-gpu-fix-memory-leak-while-cal.patch vhost-user-gpu-fix-OOB-write-in-virgl_cm.patch vhost-user-gpu-fix-resource-leak-in-vg_r.patch vhost-vdpa-don-t-initialize-backend_feat.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch vl-allow-not-specifying-size-in-m-when-u.patch vl-Fix-an-assert-failure-in-error-path.patch vl-plug-object-back-into-readconfig.patch vl-plumb-keyval-based-options-into-readc.patch x86-acpi-use-offset-instead-of-pointer-w.patch- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527) hw-usb-Do-not-build-USB-subsystem-if-not.patch hw-usb-host-stub-Remove-unused-header.patch usb-hid-avoid-dynamic-stack-allocation.patch usb-limit-combined-packets-to-1-MiB-CVE-.patch usb-mtp-avoid-dynamic-stack-allocation.patch- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682) usbredir-fix-free-call.patch- Add stable patches from upstream: block-nvme-Fix-VFIO_MAP_DMA-failed-No-sp.patch hw-net-can-sja1000-fix-buff2frame_bas-an.patch hw-pci-host-q35-Ignore-write-of-reserved.patch- Disabled skiboot building for PowerPC due to the following issue: https://github.com/open-power/skiboot/issues/265- Fix possible mremap overflow in the pvrdma (CVE-2021-3582, bsc#1187499) hw-rdma-Fix-possible-mremap-overflow-in-.patch - Ensure correct input on ring init (CVE-2021-3607, bsc#1187539) pvrdma-Ensure-correct-input-on-ring-init.patch - Fix the ring init error flow (CVE-2021-3608, bsc#1187538) pvrdma-Fix-the-ring-init-error-flow-CVE-.patch- Fix qemu-supportconfig network-manager verification- Fix stable issues found in upstream: hmp-Fix-loadvm-to-resume-the-VM-on-succe.patch hw-block-nvme-align-with-existing-style.patch hw-nvme-fix-missing-check-for-PMR-capabi.patch hw-nvme-fix-pin-based-interrupt-behavior.patch linux-user-aarch64-Enable-hwcap-for-RND-.patch qemu-config-load-modules-when-instantiat.patch qemu-config-parse-configuration-files-to.patch qemu-config-use-qemu_opts_from_qdict.patch runstate-Initialize-Error-to-NULL.patch target-i386-Exit-tb-after-wrmsr.patch tcg-Allocate-sufficient-storage-in-temp_.patch tcg-sparc-Fix-temp_allocate_frame-vs-spa.patch vhost-vdpa-don-t-initialize-backend_feat.patch vl-allow-not-specifying-size-in-m-when-u.patch vl-Fix-an-assert-failure-in-error-path.patch vl-plug-object-back-into-readconfig.patch vl-plumb-keyval-based-options-into-readc.patch x86-acpi-use-offset-instead-of-pointer-w.patch- Update qemu-supportconfig plugin- Fix an update-alternative warning when removing qemu-skiboot package bsc#1178678- Use doc directive to build QEMU documentation- Improve compatibility with gcc 11: target-sh4-Return-error-if-CPUClass-get_.patch tcg-arm-Fix-tcg_out_op-function-signatur.patch- Enable zstd compression option to qcow2- Fix out-of-bounds write in virgl_cmd_get_capset CVE-2021-3546 bsc#1185981 vhost-user-gpu-abstract-vg_cleanup_mappi.patch - Fix memory leaks found in the virtio vhost-user GPU device CVE-2021-3544 bsc#1186010 vhost-user-gpu-fix-leak-in-virgl_cmd_res.patch vhost-user-gpu-fix-leak-in-virgl_resourc.patch vhost-user-gpu-fix-memory-disclosure-in-.patch vhost-user-gpu-fix-memory-leak-in-vg_res.patch vhost-user-gpu-fix-memory-leak-while-cal.patch vhost-user-gpu-fix-OOB-write-in-virgl_cm.patch - Fix information disclosure due to uninitialized memory read CVE-2021-3545 bsc#1185990 vhost-user-gpu-fix-resource-leak-in-vg_r.patch- disable sheepdog, it was dropped upstream ( https://gitlab.com/qemu-project/qemu/-/commit/09ec85176e4095be15f233ebc870d5680123f024) and fails to build with gcc 11 on non-x86- Fix CVE-2021-3527 in usb/redir: usb-redir-avoid-dynamic-stack-allocation.patch - Fix issues found upstream: hw-block-nvme-consider-metadata-read-aio.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch- Brotli VLA error was already fixed in v5.2 but the patches wasn't included in v6.0. This change fixed that - Patches added: brotli-fix-actual-variable-array-paramet.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch- For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)- Update to v6.0: see https://wiki.qemu.org/ChangeLog/6.0 For a full list of formely deprecated features that are removed now, consult: https://qemu-project.gitlab.io/qemu/system/removed-features.html. For a list of new deprecated features, consult: https://qemu-project.gitlab.io/qemu/system/deprecated.html Some noteworthy changes: * Removed tileGX CPU (linux-user mode). * Removed ide-drive device (use ide-hd or ide-cd instead). * Removed scsi-disk device (use scsi-hd or scsi-cd instead). * Removed pc-1.0, pc-1.1, pc-1.2, and pc-1.3 machine types. * Added emulation of Arm-v8.1M arch and Cortex-M55 CPU. * Added boards mps3-an524 (Cortex-M33) and mps3-an547 (Cortex-M55). * x86: Support for running SEV-ES encrypted guests; TCG can emulate the PKS feature; WHPX accelerator supports accelerated APIC. * ARM: ARMv8.4-TTST, ARMv8.4-SEL2, FEAT_SSBS, and ARMv8.4-DIT emulation are now supported; Added ARMv8.5-MemTag extension is now supported formely linux-user. Additional device emulation support for xlnx-zynqmp, xlnx-versal, sbsa-ref, npcm7xx, and sabrelite board models. * PowerPC: powernv now allows external BMC; pseries can send QAPI message if it detects a memory hotplug failure; CPU unplug request can be retried. * s390: TCG works with Linux kernels built with clang-11 and clang12. * RISC-V: OpenSBI upgraded to v0.9; Support the QMP dump-guest-memory command; Add support for the SiFive SPI controller (sifive_u); Add QSPI NOR flash to Microchip PFSoC. * Misc doc improvements. * Multiprocess: Add experimental options to support out-of-process device emulation. * ACPI: support for assigning NICs to known names in guest OS independently of PCI slot placement. * NVMe: new emulation support for v1.4 spec with many new features, experimental support for Zoned Namespaces, multipath I/O, and End-to-End Data Protection. * Xen: New guest loader for testing of Xen-like hypervisors booting kernels. * virtiofs: misc. security fixes and performance improvements. * Tools: FUSE block exports to allow mounting any QEMU block device node as a host file. * Migration: query/info-migrate now display the migration blocker status and the reasons for blocking. * User-mode: Added support for the Qualcomm Hexagon processor. * TCG: Added support for Apple Silicon hosts (macOS). * QMP: backup jobs now support multiple asynchronous requests in parallel * VNC: virtio-vga support for scaling resolution based on client window size * Patches added: doc-add-our-support-doc-to-the-main-proj.patch * Patches removed: 9pfs-Fully-restart-unreclaim-loop-CVE-20.patch audio-add-sanity-check.patch block-Fix-deadlock-in-bdrv_co_yield_to_d.patch block-Fix-locking-in-qmp_block_resize.patch blockjob-Fix-crash-with-IOthread-when-bl.patch block-nfs-fix-int-overflow-in-nfs_client.patch block-rbd-fix-memory-leak-in-qemu_rbd_co.patch block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch block-Separate-blk_is_writable-and-blk_s.patch block-Simplify-qmp_block_resize-error-pa.patch brotli-fix-actual-variable-array-paramet.patch build-no-pie-is-no-functional-linker-fla.patch cadence_gem-switch-to-use-qemu_receive_p.patch cpu-core-Fix-help-of-CPU-core-device-typ.patch docs-add-SUSE-support-statements-to-html.patch dp8393x-switch-to-use-qemu_receive_packe.patch e1000-fail-early-for-evil-descriptor.patch e1000-switch-to-use-qemu_receive_packet-.patch hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch hw-arm-virt-Disable-pl011-clock-migratio.patch hw-block-fdc-Fix-fallback-property-on-sy.patch hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch hw-isa-Kconfig-Add-missing-dependency-VI.patch hw-isa-piix4-Migrate-Reset-Control-Regis.patch hw-net-lan9118-Fix-RX-Status-FIFO-PEEK-v.patch hw-s390x-fix-build-for-virtio-9p-ccw.patch hw-sd-sd-Actually-perform-the-erase-oper.patch hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch hw-sd-sdhci-Correctly-set-the-controller.patch hw-sd-sdhci-Don-t-transfer-any-data-when.patch hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch hw-sd-sdhci-Limit-block-size-only-when-S.patch hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch hw-sd-sd-Move-the-sd_block_-read-write-a.patch hw-sd-sd-Skip-write-protect-groups-check.patch hw-timer-slavio_timer-Allow-64-bit-acces.patch hw-virtio-pci-Added-AER-capability.patch hw-virtio-pci-Added-counter-for-pcie-cap.patch i386-acpi-restore-device-paths-for-pre-5.patch iotests-Fix-_send_qemu_cmd-with-bash-5.1.patch lan9118-switch-to-use-qemu_receive_packe.patch lsilogic-Use-PCIDevice-exit-instead-of-D.patch Make-keycode-gen-output-reproducible-use.patch memory-clamp-cached-translation-in-case-.patch monitor-Fix-assertion-failure-on-shutdow.patch mptsas-Remove-unused-MPTSASState-pending.patch msf2-mac-switch-to-use-qemu_receive_pack.patch net-Fix-handling-of-id-in-netdev_add-and.patch net-introduce-qemu_receive_packet.patch pcnet-switch-to-use-qemu_receive_packet-.patch qemu-nbd-Use-SOMAXCONN-for-socket-listen.patch qemu-storage-daemon-Enable-object-add.patch rtl8139-switch-to-use-qemu_receive_packe.patch s390x-add-have_virtio_ccw.patch s390x-css-report-errors-from-ccw_dstream.patch s390x-Fix-stringop-truncation-issue-repo.patch s390x-modularize-virtio-gpu-ccw.patch s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch s390x-pci-restore-missing-Query-PCI-Func.patch spice-app-avoid-crash-when-core-spice-mo.patch sungem-switch-to-use-qemu_receive_packet.patch target-arm-Don-t-decode-insns-in-the-XSc.patch target-arm-Fix-MTE0_ACTIVE.patch target-arm-Introduce-PREDDESC-field-defi.patch target-arm-Update-PFIRST-PNEXT-for-pred_.patch target-arm-Update-REV-PUNPK-for-pred_des.patch target-arm-Update-ZIP-UZP-TRN-for-pred_d.patch target-xtensa-fix-meson.build-rule-for-x.patch tcg-Use-memset-for-large-vector-byte-rep.patch tools-virtiofsd-Replace-the-word-whiteli.patch tx_pkt-switch-to-use-qemu_receive_packet.patch ui-vnc-Add-missing-lock-for-send_color_m.patch update-linux-headers-Include-const.h.patch Update-linux-headers-to-5.11-rc2.patch util-fix-use-after-free-in-module_load_o.patch vfio-ccw-Connect-the-device-request-noti.patch vhost-user-blk-fix-blkcfg-num_queues-end.patch viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch virtiofsd-extract-lo_do_open-from-lo_ope.patch virtiofsd-optionally-return-inode-pointe.patch virtiofsd-prevent-opening-of-special-fil.patch virtiofs-drop-remapped-security.capabili.patch virtiofsd-Save-error-code-early-at-the-f.patch virtio-move-use-disabled-flag-property-t.patch virtio-pci-compat-page-aligned-ATS.patch xen-block-Fix-removal-of-backend-instanc.patch- Include upstream patch designated as stable material and reviewed for applicability to include here mptsas-Remove-unused-MPTSASState-pending.patch - Clarify in support documents that cpu-add was removed in this release from both the human monitor protocol (HMP) and QMP interfaces- 6.0.0 qemu is about to be released. Add comments to the in- package support documents (supported..txt) about the new deprecations as of that release as an early head's up for qemu users. These deprecations include these command-line options: - M option: kernel-irqchip=off - chardev tty - chardev paraport - enable-fips - writeconfig - spice password=string- Include upstream patches designated as stable material and reviewed for applicability to include here. NOTE that the PIIX4 patch has migration implications: the change will also be applied to the SLE-15-SP2 qemu, and a live migration from that version to this SLE-15-SP3 qemu would require this patch to be applied for a successful migration if PIIX4 southbridge is used in the machine emulation (x86 i440fx) block-rbd-fix-memory-leak-in-qemu_rbd_co.patch block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch cpu-core-Fix-help-of-CPU-core-device-typ.patch hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch hw-block-fdc-Fix-fallback-property-on-sy.patch hw-isa-Kconfig-Add-missing-dependency-VI.patch hw-isa-piix4-Migrate-Reset-Control-Regis.patch hw-virtio-pci-Added-AER-capability.patch hw-virtio-pci-Added-counter-for-pcie-cap.patch s390x-css-report-errors-from-ccw_dstream.patch target-xtensa-fix-meson.build-rule-for-x.patch util-fix-use-after-free-in-module_load_o.patch virtio-pci-compat-page-aligned-ATS.patch- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103) * Patches dropped: hw-s390x-modularize-virtio-gpu-ccw.patch * Patches added: s390x-add-have_virtio_ccw.patch s390x-modularize-virtio-gpu-ccw.patch s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282) hw-sd-sd-Actually-perform-the-erase-oper.patch hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch hw-sd-sdhci-Correctly-set-the-controller.patch hw-sd-sdhci-Don-t-transfer-any-data-when.patch hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch hw-sd-sdhci-Limit-block-size-only-when-S.patch hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch hw-sd-sd-Move-the-sd_block_-read-write-a.patch hw-sd-sd-Skip-write-protect-groups-check.patch - Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373) tools-virtiofsd-Replace-the-word-whiteli.patch viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch virtiofsd-extract-lo_do_open-from-lo_ope.patch virtiofsd-optionally-return-inode-pointe.patch virtiofsd-prevent-opening-of-special-fil.patch virtiofs-drop-remapped-security.capabili.patch virtiofsd-Save-error-code-early-at-the-f.patch - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) net-introduce-qemu_receive_packet.patch rtl8139-switch-to-use-qemu_receive_packe.patch - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) cadence_gem-switch-to-use-qemu_receive_p.patch dp8393x-switch-to-use-qemu_receive_packe.patch e1000-switch-to-use-qemu_receive_packet-.patch lan9118-switch-to-use-qemu_receive_packe.patch msf2-mac-switch-to-use-qemu_receive_pack.patch pcnet-switch-to-use-qemu_receive_packet-.patch sungem-switch-to-use-qemu_receive_packet.patch tx_pkt-switch-to-use-qemu_receive_packet.patch - Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686) memory-clamp-cached-translation-in-case-.patch - Include upstream patches designated as stable material and reviewed for applicability to include here hw-arm-virt-Disable-pl011-clock-migratio.patch xen-block-Fix-removal-of-backend-instanc.patch - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)- Fix s390x "mediated device is in use" error condition (bsc#1183634) update-linux-headers-Include-const.h.patch Update-linux-headers-to-5.11-rc2.patch vfio-ccw-Connect-the-device-request-noti.patch- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577) e1000-fail-early-for-evil-descriptor.patch- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372) s390x-pci-restore-missing-Query-PCI-Func.patch- Include upstream patches designated as stable material and reviewed for applicability to include here lsilogic-Use-PCIDevice-exit-instead-of-D.patch vhost-user-blk-fix-blkcfg-num_queues-end.patch - Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137) 9pfs-Fully-restart-unreclaim-loop-CVE-20.patch - Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639) net-vmxnet3-validate-configuration-value.patch- Add #!ForceMultiversion to qemu.spec: + As the spec file defines different Version: fiels for various subpackages, we must instruct OBS to not ever reset the checkin-counter, as it would by defalut on a version increase. Resetting the version counter results in sub-packages reusing their VERSION-RELEASE from the past (e.g. qemu-ipxe is version 1.0.0+, and upon checkin of a new qemu version, RELEASE is reset to 1.1, thus again producing qemu-ipxe-1.0.0+-1.1.noarch.rpm.- Fix GCC11 compiler issue in brotli (edk2) code (boo#1181922) brotli-fix-actual-variable-array-paramet.patch - Tweak a few submodule descriptions and summaries - Fix a backward compatibility issue in ACPI data i386-acpi-restore-device-paths-for-pre-5.patch- Add patch from IBM to improve modularization situation on s390 where a new qemu module, hw-s390x-virtio-gpu-ccw.so, and a corresponding new qemu-hw-s390x-virtio-gpu-ccw subpackage, is split out (this parallels the hw-display-virtio-gpu-pci.so module). Split-provides file is also used to track this functionality splitout. Both the packages supplying the above mentioned modules now have a Requires on the qemu-hw-display-virtio-gpu package. It is anticipated that this change is going in upstream as well, and if done differently the plan is to update to the upstream implementation if possible (bsc#1181103) hw-s390x-modularize-virtio-gpu-ccw.patch- Added a few more usability improvements for our git packaging workflow- Fix issue of virtio-9p-ccw having been mistakenly dropped from qemu (bsc#1182496) hw-s390x-fix-build-for-virtio-9p-ccw.patch- Tweaked some spec file details to be again compatible with quilt setup using the spec file as input - Remove BuildRequires that were added in anticipation of building ovmf within this package. We have not taken that route- Fix uninitialized variable in ipxe driver code (boo#1181922) ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch - Add a few improvements to the git-based package workflow scripts- Include additional upstream patches designated as stable material and reviewed for applicability to include here blockjob-Fix-crash-with-IOthread-when-bl.patch monitor-Fix-assertion-failure-on-shutdow.patch qemu-nbd-Use-SOMAXCONN-for-socket-listen.patch qemu-storage-daemon-Enable-object-add.patch- Switch the modules qemu-ui-display-gpu and qemu-ui-display-gpu-pci from being an x86 only Recommends, to a Recommends for all arch's except s390x (boo#1181350) - Fix qemu-hw-usb-smartcard to not be a Recommends for s390x - Minor spec file tweaks for compatibility with upcoming spec file formatter- Make note that this patch takes care of an OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933) hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch- Include upstream patches designated as stable material and reviewed for applicability to include here block-Separate-blk_is_writable-and-blk_s.patch hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch hw-net-lan9118-Fix-RX-Status-FIFO-PEEK-v.patch hw-timer-slavio_timer-Allow-64-bit-acces.patch net-Fix-handling-of-id-in-netdev_add-and.patch target-arm-Don-t-decode-insns-in-the-XSc.patch target-arm-Fix-MTE0_ACTIVE.patch target-arm-Introduce-PREDDESC-field-defi.patch target-arm-Update-PFIRST-PNEXT-for-pred_.patch target-arm-Update-REV-PUNPK-for-pred_des.patch target-arm-Update-ZIP-UZP-TRN-for-pred_d.patch tcg-Use-memset-for-large-vector-byte-rep.patch ui-vnc-Add-missing-lock-for-send_color_m.patch virtio-move-use-disabled-flag-property-t.patch- binutils v2.36 has changed the handling of the assembler's - mx86-used-note, resulting in a build failure. To compensate, we now explicitly specify -mx86-used-note=no in the seabios Makefile (boo#1181775) build-be-explicit-about-mx86-used-note-n.patch- Additional tweaks to ensure libvirt runs ok when qemu-hw-display-virtio-gpu package is not installed- Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid "Failed to try-restart qemu-ga@.service" error while updating the qemu-guest-agent. (bsc#1178565)- Fix two additional cases of qemu crashing due to qemu module packages not being loaded. qom-handle-case-of-chardev-spice-module-.patch spice-app-avoid-crash-when-core-spice-mo.patch- Fix issue of qemu crashing (abort called) when virtio-gpu device is asked for and the qemu-hw-display-virtio-gpu package isn't installed. (bsc#1181103) module-for-virtio-gpu-pre-load-module-to.patch - Add additional inter-module package dependencies, to reflect the current module dependencies (see qemu source file: util/module.c) - As of v3.1.0 virt-manager, new VM's are created by default with audio/sound enabled, so it's time to reflect the need, at least in the spice case, by having spice-audio available when spice in general is used (boo#1180210 boo#1181132) - Further refine package Recommends/Suggests based on architecture - Remove no longer needed dependency on pwdutils (boo#1181235)- Fix qemu-testsuite issue where white space processing gets handled differently under bash 5.1 (boo#1181054) iotests-Fix-_send_qemu_cmd-with-bash-5.1.patch- Convert qemu-kvm from a script to a symlink. Using qemu-kvm to invoke the QEMU emulator has been deprecated for some time, but is still provided. It has as it's ancient origins a version of QEMU which had KVM acceleration enabled by default, and then recently, until now, it is a shell script which execs the QEMU emulator, adding '-machine accel=kvm' to the beginning of the list of command line options passed to the emulator. This method collides with the now preferred method of specifying acceleration options by using -accel. qemu-kvm is now changed to simply be a symlink to the same QEMU binary which the prior script exec'd. This new approach takes advantage of a built-in QEMU feature where if QEMU is invoked using a program name ending in 'kvm', KVM emulation is enabled. This approach is better in that it is more compatible with any other command line option that may be added for describing acceleration. For those who have modified qemu-kvm to add additional command line options, or take other actions in the context of the script you will now need to create an alternate script "emulator" to achieve the same result. Note that it's possible there may be some very subtle behavioral difference in the switch from a script to a symlink, but given that qemu-kvm is a deprecated package, we're not going to worry about that.- Fix crash when spice used and the qemu-audio-spice package isn't installed (boo#1180210) audio-add-sanity-check.patch - Add some stable patches from upstream block-Fix-deadlock-in-bdrv_co_yield_to_d.patch block-Fix-locking-in-qmp_block_resize.patch block-nfs-fix-int-overflow-in-nfs_client.patch block-Simplify-qmp_block_resize-error-pa.patch build-no-pie-is-no-functional-linker-fla.patch- Update to v5.2.0: See http://wiki.qemu.org/ChangeLog/5.2 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * Dropped system emulators: qemu-system-lm32, qemu-system-unicore32 * Dropped linux user emulator: qemu-ppc64abi32 * Added linux user emulator: qemu-extensaeb * Unicore32 and lm32 guest support dropped * New sub-packages (most due to ongoing modularization of QEMU): qemu-audio-spice, qemu-hw-chardev-spice, qemu-hw-display-virtio-vga, qemu-hw-display-virtio-gpu, qemu-hw-display-virtio-gpu-pci, qemu-ui-spice-core, qemu-ui-opengl, qemu-ivshmem-tools * x86: A new KVM feature which improves the handling of asynchronous page faults is available with -cpu ...,kvm-async-pf-int (requires Linux 5.8) * s390: More instructions emulated under TCG * PowerPC: nvdimm= machine option now functions correctly; misc improvements * ARM: new boards: mps2-an386 (Cortex-M4 based) and mps2-an500 (Cortex-M7 based), raspi3ap (the Pi 3 model A+), raspi0 (the Pi Zero) and raspi1ap (the Pi A+) * RISC-V: OpenSBI v0.8 included by default; Generic OpenSBI platform used when no -bios argument is supplied; Support for NUMA sockets on Virt and Spike Machines; Support for migrating machines; misc improvements * Misc NVMe improvements * The 'vhost-user-blk' export type has been added, allowing qemu-storage-daemon to act as a vhost-user-blk device backend * The SMBIOS OEM strings can now come from a file * 9pfs - misc performance related improvements * virtiofs - misc improvements * migration: The default migration bandwidth has been increased to 1Gbps (users are still encouraged to tune it to their own hardware); The new 'calc-dirty-rate' and 'query-dirty-rate' QMP commands can help determine the likelihood of precopy migration success; TLS+multifd now supported for higher bandwidth encrypted migration; misc minor features added * Misc minor block features added * Misc doc improvements * qemu-microvm subpackage change: the bios-microvm.bin is now SeaBIOS based, and the qboot based on is now qboot.rom * elf2dmp is no longer part of qemu-tools (it was never intended to be a packaged binary) * Some subpackages which were 'Requires' are now 'Recommends', allowing for a smaller qemu packaging footprint if needed * Patches dropped (included in release tarball, unless otherwise noted): docs-fix-trace-docs-build-with-sphinx-3..patch (fixed differently) hw-hyperv-vmbus-Fix-32bit-compilation.patch linux-user-properly-test-for-infinite-ti.patch Switch-order-of-libraries-for-mpath-supp.patch (fixed differently) Conditionalize-ui-bitmap-installation-be.patch (fixed differently) hw-usb-hcd-xhci-Fix-GCC-9-build-warning.patch (no longer using gcc9) hw-usb-dev-mtp-Fix-GCC-9-build-warning.patch (no longer using gcc9) roms-Makefile-enable-cross-compile-for-b.patch (fixed with different patch) libvhost-user-handle-endianness-as-manda.patch virtio-add-vhost-user-fs-ccw-device.patch Fix-s-directive-argument-is-null-error.patch build-Workaround-compilation-error-with-.patch build-Be-explicit-about-fcommon-compiler.patch intel-Avoid-spurious-compiler-warning-on.patch golan-Add-explicit-type-casts-for-nodnic.patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch ensure-headers-included-are-compatible-w.patch Enable-cross-compile-prefix-for-C-compil.patch (fixed differently) hw-net-net_tx_pkt-fix-assertion-failure-.patch hw-net-xgmac-Fix-buffer-overflow-in-xgma.patch s390x-protvirt-allow-to-IPL-secure-guest.patch usb-fix-setup_len-init-CVE-2020-14364.patch * Patches added: meson-install-ivshmem-client-and-ivshmem.patch Revert-roms-efirom-tests-uefi-test-tools.patch Makefile-Don-t-check-pc-bios-as-pre-requ.patch roms-Makefile-add-cross-file-to-qboot-me.patch qboot-add-cross.ini-file-to-handle-aarch.patch usb-Help-compiler-out-to-avoid-a-warning.patch - In spec file, where reasonable, switch BuildRequires: XXX-devel to be pkgconfig(XXX') instead - No longer disable link time optimization for qemu for x86. It looks like either the build service, qemu code changes and/or the switch to meson have resolved issues previously seen there. We still see problems for other architectures however. - For the record, the following issues reported for SUSE SLE15-SP2 are either fixed in this current package, or are otherwise no longer an issue: bsc#1172384 bsc#1174386 bsc#1174641 bsc#1174863 bsc#1175370 bsc#1175441 bsc#1176494 CVE-2020-13361 CVE-2020-14364 CVE-2020-15863 CVE-2020-16092 CVE-2020-24352 and the following feature requests are satisfied by this package: jsc#SLE-13689 jsc#SEL-13780 jsc#SLE-13840 - To be more accurate, and to align with other qemu packaging practices, rename the qemu-s390 package to qemu-s390x. The old name (in the rpm namespace) is provided with a "Provides" directive, and an "Obsoletes" done against that name for prior qemu versions, as is standard practice (boo#1177764 jsc#SLE-17060) - Take this opportunity to remove some ancient Split-Provides mechanisms which can't conceivably be needed any more: qemu-block-curl provided: qemu:%_libdir/%name/block-curl.so qemu-guest-agent provided: qemu:%_bindir/qemu-ga qemu-tools provided: qemu:%_libexecdir/qemu-bridge-helper- Disable linux-user 'ls' test on 32 bit arm. It's failing with "Allocating guest commpage: Cannot allocate memory" error, which we should hunt down, but for now we don't want it to prevent the package from being built- Be more careful about what directives are used for qemu-testsuite- Fix some spec file 'Requires' statements to be accurate to the new model of relying on system-user-qemu and system-group-kvm to provide the needed users and groups- Added io_uring support.- A patch has been applied to virt-manager to handle qemu spice related modules not being present, so undo the change from Sep 30, 2020. Once again qemu-hw-display-qxl and qemu-hw-usb-redirect are Recommends and not Required by the qemu package (boo#1157320 boo#1176517, boo#1178141) - For jsc#SLE-11629, change qemu, qemu-tools, and qemu-guest-agent to rely on system-user-qemu and system-group-kvm to provide now static system UIDs and GID's for qemu user and group, and kvm group. This will make guest migration more seamless for new installations since there is no chance of having required ID's differ in value.- Add virtio-fs support for s390x (jsc#SLE-13822) libvhost-user-handle-endianness-as-manda.patch virtio-add-vhost-user-fs-ccw-device.patch- Note: As part of the "Close the Leap Gap" effort, it's been decided that our SDL2 support in qemu is not worth trying to maintain. Long ago SLE qemu stopped including SDL2 support and now we will do the same for the openSUSE releases going forward. Accordingly SDL2 options are now configured out, and the two sub- packages which are SDL2 specific, namely qemu-audio-sdl and qemu-ui-sdl, are no longer generated, and due to the rpm package conflicts used for those packages, they will be uninstalled from systems as qemu updates move forward - Drop e2fsprogs-devel and libpcap-devel as BuildRequires packages. They have not actually been needed to build qemu for a very long time - Add more forsplits files- Create qemu-skiboot sub-package. Use update-alternatives mechanism to coordinate with opal-firmware (provided with skiboot package set) on the provider of the /usr/share/qemu/skiboot.lid firmware file. qemu-skiboot uses a priority of 15, while opal-firmware uses a priority of 10 (jsc#SLE-13240)- Undo part of the split-provides recently done. We have to wait on virt-manager to handle qemu modularization better before we make qemu-hw-display-qxl and qemu-hw-usb-redirect non-required (boo#1157320 boo#1176517)- Fix spec file, where a conditional macro didn't have the correct syntax (bsc#1176766)- Change qemu-x86 packaging relationship with qemu-microvm from Requires to Recommends- In an effort to "Close the Leap Gap", remove use of is_opensuse from the spec file, so that the same packages built for SLE can be reused for Leap. Some sub-packages will not be included for SLE which are included for Leap. They wil be provided in Package Hub for SLE users as unsupported packages. (jsc#SLE-11660, jsc#SLE-11661, jsc#SLE-11662, jsc#SLE-11691, jse#SLE-11692, jsc#SLE-11894)- Add infrastructure to do package splits when split-off package isn't required and doesn't (otherwise) include any previously installed files. This version of qemu has split out non-essential functionality into loadable modules, as noted in Aug 20, 2020 log entry, which describes the emergency Split-Provides. That approach will be superseded by this planned approach, and those dummy doc files will be removed in time Here is the new mapping: subpackage continuity file provided (files are dummies) ========== ============================================ qemu-chardev-baum /usr/share/qemu/forsplits/00 qemu-hw-display-qxl /usr/share/qemu/forsplits/01 qemu-hw-usb-redirect /usr/share/qemu/forsplits/02 qemu-hw-usb-smartcard /usr/share/qemu/forsplits/03- Fix path of qemu-pr-helper. It was a mistake to move it from %_bindir to _libexecdir. In more recent qemu code it's been moved back, so undo this mistake by providing it at the same location as it has been all along- For SLE15-SP3, note that this update to v5.1.0 is a step towards fulfilling jsc#SLE-13689, which asks for qemu v5.2.0 or higher- Fix some shell syntax in update_git.sh, esp. an issue exposed by the most recent patch added- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441) usb-fix-setup_len-init-CVE-2020-14364.patch - Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, JIRA, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2020-1983 CVE-2020-10761 CVE-2020-13361 CVE-2020-13362 CVE-2020-13659 CVE-2020-13800 * bsc#1167816 bsc#1170940 boo#1171712 bsc#1172383 bsc#1172384 bsc#1172386 bsc#1172495 bsc#1172710 * Patches dropped (SLE) (included in current release tarball): exec-set-map-length-to-zero-when-returni.patch i386-acpi-Remove-_HID-from-the-SMBus-ACP.patch megasas-use-unsigned-type-for-reply_queu.patch- Fix compilation errors seen with pre-release gcc 11 qht-Revert-some-constification-in-qht.c.patch Revert-qht-constify-qht_statistics_init.patch help-compiler-out-by-initializing-array.patch s390x-Fix-stringop-truncation-issue-repo.patch - Add Split-Provides mechanism, using doc files which were moved in v5.1.0. This allows for the new subpackages to be selected for install when the v5.0.0 qemu is updated. These new subpackages are not marked as "Required" by any packages, in an effort to reduce the dependencies of the core qemu components (boo#1175320) v5.0.0 qemu file mapping is provided as follows: subpackage continuity file provided (files are dummies) ========== ============================================ qemu-chardev-baum /usr/share/doc/packages/qemu/qemu-ga-ref.html qemu-hw-display-qxl /usr/share/doc/packages/qemu/qemu-ga-ref.txt qemu-hw-usb-redirect /usr/share/doc/packages/qemu/qemu-qmp-ref.html qemu-hw-usb-smartcard /usr/share/doc/packages/qemu/qemu-qmp-ref.txt- Fix wrong usage of %{_libexecdir} for systemd owned paths below %{_prefix}/lib.- Update to v5.1.0: See http://wiki.qemu.org/ChangeLog/5.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * s390: Protected virtualization (secure execute) is fully merged upstream * s390: vfio-ccw devices no longer require setting the allow prefetch bit in the ORB, but is still dependent on host kernel support * s390: vfio-ccw now has basic support for relaying path state changes to the guest * PowerPC: pseries: NVDIMMs require label-size property * PowerPC: pseries: POWER10 support * PowerPC: added interface to inject POWER style NMIs * ARM: new board: sonorapass-bmc * ARM: new emulated features: ARMv8.2-TTSUXN, ARMv8.5-MemTag * ARM: Raspberry Pi boards now support a USB controller * ARM: virt board now supports hot-remove memory * RISC-V lots of improvements * qemu-img resize now requires -shrink to shrinking raw images * The mem parameter of the -numa option is no longer recognized starting with 5.1 machine types - instead use the memdev parameter * The ACPI WAET table is now exposed to guests * The max blocksize for virtual storage device is now 2 MiB * NVMe improvements * Crypto subsystem improvements * Block backends and tools: Numerous improvements and fixes * Firmware updates: SeaBIOS (essentially v1.14.0), OpenBIOS, SLOF (20200717), OpenSBI (v0.7) * Patches dropped (upstream unless otherwise noted): ati-vga-check-mm_index-before-recursive-.patch audio-fix-wavcapture-segfault.patch es1370-check-total-frame-count-against-c.patch exec-set-map-length-to-zero-when-returni.patch gcc10-maybe-uninitialized.patch hw-vfio-pci-quirks-Fix-broken-legacy-IGD.patch megasas-use-unsigned-type-for-reply_queu.patch nbd-server-Avoid-long-error-message-asse.patch ppc-spapr_caps-Don-t-disable-cap_cfpc-on.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch s390x-s390-virtio-ccw-Fix-build-on-syste.patch Sync-pv.patch tests-Disable-some-block-tests-for-now.patch (no longer needed) vga-fix-cirrus-bios.patch virtiofsd-add-rlimit-nofile-NUM-option.patch virtiofsd-stay-below-fs.file-max-sysctl-.patch * Patches renamed: build-Do-not-apply-WORKAROUND_CFLAGS-for.patch - > Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch build-Fix-s-directive-argument-is-null-e.patch - > Fix-s-directive-argument-is-null-error.patch * Patches added: hw-hyperv-vmbus-Fix-32bit-compilation.patch - New subpackages, due to modularization: qemu-chardev-baum, qemu-hw-display-qxl, qemu-hw-usb-redirect, qemu-hw-usb-smartcard - Configure to use "system" libslirp and libdaxctl (libnvdimm) when available- Don't disable cap_cfpc on POWER8 by default (bsc#1174374) ppc-spapr_caps-Don-t-disable-cap_cfpc-on.patch- Updating to Sphinx v3.1.2 in Factory is exposing an issue in qemu doc sources. Fix it docs-fix-trace-docs-build-with-sphinx-3..patch- Fix DoS possibility in ati-vga emulation (CVE-2020-13800 bsc#1172495) ati-vga-check-mm_index-before-recursive-.patch - Fix DoS possibility in Network Block Device (nbd) support infrastructure (CVE-2020-10761 bsc#1172710) nbd-server-Avoid-long-error-message-asse.patch - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386) exec-set-map-length-to-zero-when-returni.patch - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383) megasas-use-unsigned-type-for-reply_queu.patch - Fix legacy IGD passthrough hw-vfio-pci-quirks-Fix-broken-legacy-IGD.patch- The latest gcc10 available in Factory has the fix for the issue this patch was created to avoid, so drop it build-Work-around-gcc10-bug-by-not-using.patch- Switch to upstream versions of some patches we carry add-enum-cast-to-avoid-gcc10-warning.patch - > golan-Add-explicit-type-casts-for-nodnic.patch Be-explicit-about-fcommon-compiler-direc.patch - > build-Be-explicit-about-fcommon-compiler.patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch - > build-Do-not-apply-WORKAROUND_CFLAGS-for.patch Fix-s-directive-argument-is-null-error.patch - > build-Fix-s-directive-argument-is-null-e.patch Workaround-compilation-error-with-gcc-9..patch - > build-Workaround-compilation-error-with-.patch work-around-gcc10-problem-with-zero-leng.patch - > intel-Avoid-spurious-compiler-warning-on.patch - Fix vgabios issue for cirrus graphics emulation, which effectively downgraded it to standard VGA behavior vga-fix-cirrus-bios.patch- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384) es1370-check-total-frame-count-against-c.patch- Work around gcc 10 bug (boo#1172411) build-Work-around-gcc10-bug-by-not-using.patch- Now that gcc10 compatibility is figured out, remove NO_WERROR=1 again from ipxe make.- Fix segfault when doing HMP wavcapture (boo#1171712) audio-fix-wavcapture-segfault.patch- Fix DoS in virtiofsd, where a FUSE client could exhaust the number of available open files on the host (CVE-2020-10717 bsc#1171110) virtiofsd-add-rlimit-nofile-NUM-option.patch virtiofsd-stay-below-fs.file-max-sysctl-.patch- Add more fixes for gcc10 compatibility: Use NO_WERROR=1 when building ipxe sources, at least until we get gcc10 compatibility figured out. Also add patch for explicitly using -fcommon (boo#1171140) Be-explicit-about-fcommon-compiler-direc.patch and fix for tighter enum compatibility checking (boo#1171139) add-enum-cast-to-avoid-gcc10-warning.patch and a work around for what seems to be a compiler regression (boo#1171123) work-around-gcc10-problem-with-zero-leng.patch- Update to v5.0.0: See http://wiki.qemu.org/ChangeLog/5.0 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * x86: EPYC-Rome vcpu model * x86: vcpu model fixes for EPYC, Denverton, and Icelake-Server * s390: (as previously mentioned) Protected Virtualization support: start and control guest in secure mode (bsc#1167075 jsc#SLE-7407) * s390: support for Adapter Interrupt Suppression while running in KVM mode * PowerPC: pseries: NVDIMMs with file backend supported * PowerPC: powernv: KVM guests now runnable under TCG emulation * PowerPC: powernv: Basic POWER10 support * ARM: new boards: tacoma-bmc, Netduindo Plus 2, Orangepi PC * ARM: 'virt' machine now supports vTPM and virtio-iommu devices * ARM:Cortex-M7 CPU support * ARM: Lots of architecture features now emulated * ARM: TPM supported * ARM: Timekeeping improvements * ARM: LOTS more - refer to upstream changelog * virtio-iommu * VNC compatibility with noVNC improved * Support for using memory backends for main/"built-in" guest RAM * hostmem backends can now specify prealloc thread count * Better Azure compatibility of VHD images * Ceph namespaces supported * Compress block filter driver can create compressed backup images * virtiofsd availble for host filesystem passthrough * Improved html based documentation is provided with this release * Live migration support for external processes running on QEMU D-Bus * Patches dropped (upstream unless otherwise noted): i386-Add-MSR-feature-bit-for-MDS-NO.patch i386-Add-macro-for-stibp.patch i386-Add-new-CPU-model-Cooperlake.patch arm-arm-powerctl-set-NSACR.-CP11-CP10-bi.patch iotests-Skip-test-060-if-it-is-not-possi.patch iotests-Skip-test-079-if-it-is-not-possi.patch Revert-qemu-options.hx-Update-for-reboot.patch iotests-Provide-a-function-for-checking-.patch Fix-double-free-issue-in-qemu_set_log_fi.patch iotests-Fix-IMGOPTSSYNTAX-for-nbd.patch virtio-blk-fix-out-of-bounds-access-to-b.patch block-Activate-recursively-even-for-alre.patch i386-Resolve-CPU-models-to-v1-by-default.patch numa-properly-check-if-numa-is-supported.patch vhost-user-gpu-Drop-trailing-json-comma.patch display-bochs-display-fix-memory-leak.patch hw-arm-smmuv3-Apply-address-mask-to-line.patch hw-arm-smmuv3-Correct-SMMU_BASE_ADDR_MAS.patch hw-arm-smmuv3-Check-stream-IDs-against-a.patch hw-arm-smmuv3-Align-stream-table-base-ad.patch hw-arm-smmuv3-Use-correct-bit-positions-.patch hw-arm-smmuv3-Report-F_STE_FETCH-fault-a.patch block-Add-bdrv_qapi_perm_to_blk_perm.patch blkdebug-Allow-taking-unsharing-permissi.patch virtio-add-ability-to-delete-vq-through-.patch virtio-update-queue-size-on-guest-write.patch virtio-don-t-enable-notifications-during.patch numa-Extend-CLI-to-provide-initiator-inf.patch numa-Extend-CLI-to-provide-memory-latenc.patch numa-Extend-CLI-to-provide-memory-side-c.patch hmat-acpi-Build-Memory-Proximity-Domain-.patch hmat-acpi-Build-System-Locality-Latency-.patch hmat-acpi-Build-Memory-Side-Cache-Inform.patch tests-numa-Add-case-for-QMP-build-HMAT.patch qcow2-bitmaps-fix-qcow2_can_store_new_di.patch backup-top-Begin-drain-earlier.patch virtio-mmio-update-queue-size-on-guest-w.patch virtio-net-delete-also-control-queue-whe.patch intel_iommu-a-fix-to-vtd_find_as_from_bu.patch target-i386-Add-new-bit-definitions-of-M.patch target-i386-Add-missed-features-to-Coope.patch hw-i386-pc-fix-regression-in-parsing-vga.patch migration-test-ppc64-fix-FORTH-test-prog.patch target-arm-Return-correct-IL-bit-in-merg.patch target-arm-Set-ISSIs16Bit-in-make_issinf.patch runstate-ignore-finishmigrate-prelaunch-.patch migration-Rate-limit-inside-host-pages.patch m68k-Fix-regression-causing-Single-Step-.patch Revert-vnc-allow-fall-back-to-RAW-encodi.patch vnc-prioritize-ZRLE-compression-over-ZLI.patch target-i386-kvm-initialize-feature-MSRs-.patch s390x-adapter-routes-error-handling.patch iscsi-Cap-block-count-from-GET-LBA-STATU.patch block-backup-fix-memory-leak-in-bdrv_bac.patch tpm-ppi-page-align-PPI-RAM.patch hw-intc-arm_gicv3_kvm-Stop-wrongly-progr.patch target-arm-fix-TCG-leak-for-fcvt-half-do.patch block-fix-memleaks-in-bdrv_refresh_filen.patch block-backup-top-fix-failure-path.patch iotests-add-test-for-backup-top-failure-.patch audio-oss-fix-buffer-pos-calculation.patch target-arm-monitor-query-cpu-model-expan.patch block-fix-crash-on-zero-length-unaligned.patch block-Fix-VM-size-field-width-in-snapsho.patch target-arm-Correct-definition-of-PMCRDP.patch block-nbd-extract-the-common-cleanup-cod.patch block-nbd-fix-memory-leak-in-nbd_open.patch virtio-crypto-do-delete-ctrl_vq-in-virti.patch virtio-pmem-do-delete-rq_vq-in-virtio_pm.patch vhost-user-blk-delete-virtioqueues-in-un.patch hw-arm-cubieboard-use-ARM-Cortex-A8-as-t.patch pc-bios-s390x-Save-iplb-location-in-lowc.patch iotests-Fix-nonportable-use-of-od-endian.patch block-qcow2-threads-fix-qcow2_decompress.patch job-refactor-progress-to-separate-object.patch block-block-copy-fix-progress-calculatio.patch block-io-fix-bdrv_co_do_copy_on_readv.patch scsi-qemu-pr-helper-Fix-out-of-bounds-ac.patch target-ppc-Fix-rlwinm-on-ppc64.patch compat-disable-edid-on-correct-virtio-gp.patch ppc-ppc405_boards-Remove-unnecessary-NUL.patch block-Avoid-memleak-on-qcow2-image-info-.patch block-bdrv_set_backing_bs-fix-use-after-.patch hmp-vnc-Fix-info-vnc-list-leak.patch migration-colo-fix-use-after-free-of-loc.patch migration-ram-fix-use-after-free-of-loca.patch qcow2-List-autoclear-bit-names-in-header.patch sheepdog-Consistently-set-bdrv_has_zero_.patch target-arm-Fix-PAuth-sbox-functions.patch tcg-i386-Fix-INDEX_op_dup2_vec.patch net-tulip-check-frame-size-and-r-w-data-.patch target-i386-do-not-set-unsupported-VMX-s.patch spapr-Fix-failure-path-for-attempting-to.patch ati-vga-Fix-checks-in-ati_2d_blt-to-avoi.patch xen-block-Fix-double-qlist-remove-and-re.patch vpc-Don-t-round-up-already-aligned-BAT-s.patch target-xtensa-fix-pasto-in-pfwait.r-opco.patch aio-wait-delegate-polling-of-main-AioCon.patch async-use-explicit-memory-barriers.patch tcg-mips-mips-sync-encode-error.patch vhost-user-gpu-Release-memory-returned-b.patch vga-Raise-VRAM-to-16-MiB-for-pc-0.15-and.patch (no pc-0.15) hw-i386-disable-smbus-migration-for-xenf.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-Move-initial-reset.patch s390x-Move-clear-reset.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-Beautify-diag308-handling.patch s390x-Add-missing-vcpu-reset-functions.patch s390-sclp-improve-special-wait-psw-logic.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch util-add-slirp_fmt-helpers.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch slirp-use-correct-size-while-emulating-c.patch tcp_emu-fix-unsafe-snprintf-usages.patch - For SLE builds, leverage the html documentation by adding a link to the SUSE specific support documentation (the *.txt support doc was slightly tweaked to be acceptable as reStructuredText for conversion to html) docs-add-SUSE-support-statements-to-html.patch-Fix potential DoS in ATI VGA emulation (CVE-2020-11869 bsc#1170537) ati-vga-Fix-checks-in-ati_2d_blt-to-avoi.patch- Minor tweaks to patches and support doc- Add gcc10-maybe-uninitialized.patch in order to fix boo#1169728.- Include upstream patches targeted for the next stable release (bug fixes only) spapr-Fix-failure-path-for-attempting-to.patch target-i386-do-not-set-unsupported-VMX-s.patch target-xtensa-fix-pasto-in-pfwait.r-opco.patch tcg-i386-Fix-INDEX_op_dup2_vec.patch tcg-mips-mips-sync-encode-error.patch vhost-user-gpu-Release-memory-returned-b.patch vpc-Don-t-round-up-already-aligned-BAT-s.patch xen-block-Fix-double-qlist-remove-and-re.patch - Fix bug causing weak encryption in PAuth for ARM (CVE-2020-10702 bsc#1168681) target-arm-Fix-PAuth-sbox-functions.patch - Fix OOB in tulip NIC emulation (CVE-2020-11102 bsc#1168713 net-tulip-check-frame-size-and-r-w-data-.patch - Note that previously included patch addresses CVE-2020-1711 and bsc#1166240 iscsi-Cap-block-count-from-GET-LBA-STATU.patch - Include performance improvement (and related?) patch aio-wait-delegate-polling-of-main-AioCon.patch async-use-explicit-memory-barriers.patch - Rework previous patch at Olaf H.'s direction hw-i386-disable-smbus-migration-for-xenf.patch - Eliminate is_opensuse usage in producing seabios version string what we are doing here is just replacing the upstream string with one indicating that the openSUSE build service built it, and so just leave it as "-rebuilt.opensuse.org" - Alter algorithm used to produce "unique" symbol for coordinating qemu with the optional modules it may load. This is a reasonable relaxation for broader compatibility configure-remove-pkgversion-from-CONFIG_.patch - Tweak supported.*.txt for latest deprecations, and other fixes - Tweak update_git.sh, config.sh- One more fix is needed for: s390x Protected Virtualization support - start and control guest in secure mode (bsc#1167075 jsc#SLE-7407) s390x-s390-virtio-ccw-Fix-build-on-syste.patch- Include upstream patches targeted for the next stable release (bug fixes only) block-Avoid-memleak-on-qcow2-image-info-.patch block-bdrv_set_backing_bs-fix-use-after-.patch hmp-vnc-Fix-info-vnc-list-leak.patch migration-colo-fix-use-after-free-of-loc.patch migration-ram-fix-use-after-free-of-loca.patch ppc-ppc405_boards-Remove-unnecessary-NUL.patch qcow2-List-autoclear-bit-names-in-header.patch scsi-qemu-pr-helper-Fix-out-of-bounds-ac.patch sheepdog-Consistently-set-bdrv_has_zero_.patch- Note The previous set of s390x patches also includes the fix for: bsc#1167445- Include upstream patches targeted for the next stable release (bug fixes only) block-io-fix-bdrv_co_do_copy_on_readv.patch compat-disable-edid-on-correct-virtio-gp.patch target-ppc-Fix-rlwinm-on-ppc64.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch - s390x Protected Virtualization support - start and control guest in secure mode. (note: binary patch from patch series dropped since for s390x we rebuild the patched binary anyways) (bsc#1167075 jsc#SLE-7407) s390-sclp-improve-special-wait-psw-logic.patch s390x-Add-missing-vcpu-reset-functions.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Beautify-diag308-handling.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-Move-clear-reset.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-Move-initial-reset.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch Sync-pv.patch- Fix the issue that s390x could not read IPL channel program when using dasd as boot device (bsc#1163140) pc-bios-s390x-Save-iplb-location-in-lowc.patch- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018 bsc#1161066 CVE-2020-7039) slirp-use-correct-size-while-emulating-c.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch tcp_emu-fix-unsafe-snprintf-usages.patch util-add-slirp_fmt-helpers.patch - Replace this patch with upstream version target-arm-monitor-query-cpu-model-expan.patch- Include upstream patches targeted for the next stable release (bug fixes only) audio-oss-fix-buffer-pos-calculation.patch blkdebug-Allow-taking-unsharing-permissi.patch block-Add-bdrv_qapi_perm_to_blk_perm.patch block-backup-top-fix-failure-path.patch block-block-copy-fix-progress-calculatio.patch block-fix-crash-on-zero-length-unaligned.patch block-fix-memleaks-in-bdrv_refresh_filen.patch block-Fix-VM-size-field-width-in-snapsho.patch block-nbd-extract-the-common-cleanup-cod.patch block-nbd-fix-memory-leak-in-nbd_open.patch block-qcow2-threads-fix-qcow2_decompress.patch hw-arm-cubieboard-use-ARM-Cortex-A8-as-t.patch hw-intc-arm_gicv3_kvm-Stop-wrongly-progr.patch iotests-add-test-for-backup-top-failure-.patch iotests-Fix-nonportable-use-of-od-endian.patch job-refactor-progress-to-separate-object.patch target-arm-Correct-definition-of-PMCRDP.patch target-arm-fix-TCG-leak-for-fcvt-half-do.patch tpm-ppi-page-align-PPI-RAM.patch vhost-user-blk-delete-virtioqueues-in-un.patch virtio-add-ability-to-delete-vq-through-.patch virtio-crypto-do-delete-ctrl_vq-in-virti.patch virtio-pmem-do-delete-rq_vq-in-virtio_pm.patch- Add Obsoletes directive for qemu-audio-sdl and qemu-ui-sdl since for a qemu package upgrade from SLE12-SP5, support for SDL is dropped- Fix xenfv migration from xen host with pre-v4.0 qemu. We had previously dropped a similar patch, but have decided that for now we need to go with this type of solution (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch- Avoid query-cpu-model-expansion crashed qemu when using machine type none, patch is queued in upstream now, will update commit id later (bsc#1159443) target-arm-monitor-query-cpu-model-expan.patch- BuildRequire pkgconfig(libudev) instead of libudev-devel: Allow OBS to shortcut through -mini flavors.- Stop using system membarriers (ie switch from --enable-membarrier to --disable-membarrier). This is a blocker for using qemu in the context of containers (boo#1130134 jsc#SLE-11089) - Drop this recently added patch - in consultation with upstream it was decided it needed to be solved a different way (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch - Include upstream patches targeted for the next stable release (bug fixes only) block-backup-fix-memory-leak-in-bdrv_bac.patch iscsi-Cap-block-count-from-GET-LBA-STATU.patch s390x-adapter-routes-error-handling.patch target-i386-kvm-initialize-feature-MSRs-.patch- Include upstream patches targeted for the next stable release (bug fixes only) hw-i386-pc-fix-regression-in-parsing-vga.patch m68k-Fix-regression-causing-Single-Step-.patch migration-Rate-limit-inside-host-pages.patch migration-test-ppc64-fix-FORTH-test-prog.patch Revert-vnc-allow-fall-back-to-RAW-encodi.patch runstate-ignore-finishmigrate-prelaunch-.patch target-arm-Return-correct-IL-bit-in-merg.patch target-arm-Set-ISSIs16Bit-in-make_issinf.patch vnc-prioritize-ZRLE-compression-over-ZLI.patch- BuildRequire pkconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors. - Use systemd_ordering in place of systemd_requires: systemd is never a strict requirement for qemu; but when installing qemu on a systemd-managed system, we want system to be present first.- Fix xenfv migration from xen host with pre-v4.0 qemu (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch- Create files within bundles.tar.xz with fixed timestamp and uid- Add a %bcond_without system_membarrier along with related processing to the spec file, to better investigate running QEMU with the --disable-membarrier configure option- Include upstream patches targeted for the next stable release (bug fixes only) arm-arm-powerctl-set-NSACR.-CP11-CP10-bi.patch backup-top-Begin-drain-earlier.patch block-Activate-recursively-even-for-alre.patch display-bochs-display-fix-memory-leak.patch Fix-double-free-issue-in-qemu_set_log_fi.patch hw-arm-smmuv3-Align-stream-table-base-ad.patch hw-arm-smmuv3-Apply-address-mask-to-line.patch hw-arm-smmuv3-Check-stream-IDs-against-a.patch hw-arm-smmuv3-Correct-SMMU_BASE_ADDR_MAS.patch hw-arm-smmuv3-Report-F_STE_FETCH-fault-a.patch hw-arm-smmuv3-Use-correct-bit-positions-.patch i386-Resolve-CPU-models-to-v1-by-default.patch intel_iommu-a-fix-to-vtd_find_as_from_bu.patch iotests-Fix-IMGOPTSSYNTAX-for-nbd.patch iotests-Provide-a-function-for-checking-.patch iotests-Skip-test-060-if-it-is-not-possi.patch iotests-Skip-test-079-if-it-is-not-possi.patch numa-properly-check-if-numa-is-supported.patch qcow2-bitmaps-fix-qcow2_can_store_new_di.patch Revert-qemu-options.hx-Update-for-reboot.patch vhost-user-gpu-Drop-trailing-json-comma.patch virtio-blk-fix-out-of-bounds-access-to-b.patch virtio-mmio-update-queue-size-on-guest-w.patch virtio-net-delete-also-control-queue-whe.patch virtio-update-queue-size-on-guest-write.patch - Include performance improvement virtio-don-t-enable-notifications-during.patch - Repair incorrect packaging references to Jira tracked features- Add Cooperlake vcpu model (jsc#SLE-7923) i386-Add-MSR-feature-bit-for-MDS-NO.patch i386-Add-macro-for-stibp.patch i386-Add-new-CPU-model-Cooperlake.patch target-i386-Add-new-bit-definitions-of-M.patch target-i386-Add-missed-features-to-Coope.patch - Add HMAT support (jsc#SLE-8897) (the test case for this series isn't included because we aren't set up to handle binary patches) numa-Extend-CLI-to-provide-initiator-inf.patch numa-Extend-CLI-to-provide-memory-latenc.patch numa-Extend-CLI-to-provide-memory-side-c.patch hmat-acpi-Build-Memory-Proximity-Domain-.patch hmat-acpi-Build-System-Locality-Latency-.patch hmat-acpi-Build-Memory-Side-Cache-Inform.patch tests-numa-Add-case-for-QMP-build-HMAT.patch- Update to v4.2.0: See http://wiki.qemu.org/ChangeLog/4.2 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86: Denverton, Snowridge, and Dhyana CPU models added * x86: Latest version of all CPU models how have TSX (HLE and RTM) disabled by default * x86: Support for AVX512 BFloat16 extensions * x86: VMX features exposed more accurately and controllably * s390: TCG now implements IEP (Instruction Execution Protection) * PowerPC: POWER8 and POWER9 non-virtualized machines separated out * PowerPC: RTAS now comes from SLOF instead of QEMU itself * PowerPC: Unplug of multifunction PCI devices now unplugs the whole slot, as in x86 * ARM: Support for >256 CPUs with KVM is fixed * ARM: Memory hotplug now supported , when using UEFI, ACPI, for virt machine type * ARM: SVE support possuble now for KVM guests * ARM: ACPI generic event device can now deliver powerdown event * The backend device can be specified for a guest audio device * virtio v1.1 packed virtqueues supported * Socket based character device backends now support TCP keep-alive * Use encryption library cipher mode facilities, allowing improved performance for eg. AES-XTS encrption * Misc block device improvements, esp. with nbd - See the following few release-candidate changelog entries for additional changes related to this release - Switched package build to be out-of-tree- Update to v4.2.0-rc5: See http://wiki.qemu.org/ChangeLog/4.2- Update to v4.2.0-rc4: See http://wiki.qemu.org/ChangeLog/4.2 * Update the support documents used for SUSE SLE releases to cover this qemu release- Update to v4.2.0-rc3: See http://wiki.qemu.org/ChangeLog/4.2 * Patches dropped (upstream unless otherwise noted): ati-add-edid-support.patch ati-vga-add-rage128-edid-support.patch ati-vga-fix-ati_read.patch ati-vga-make-i2c-register-and-bits-confi.patch ati-vga-make-less-verbose.patch ati-vga-try-vga-ddc-first.patch Disable-Waddress-of-packed-member-for-GC.patch hdata-vpd-fix-printing-char-0x00.patch target-i386-add-PSCHANGE_NO-bit-for-the-.patch target-i386-Export-TAA_NO-bit-to-guests.patch vbe-add-edid-support.patch vga-add-ati-bios-tables.patch vga-add-atiext-driver.patch vga-make-memcpy_high-public.patch vga-move-modelist-from-bochsvga.c-to-new.patch * Patches added: Enable-cross-compile-prefix-for-C-compil.patch ensure-headers-included-are-compatible-w.patch roms-Makefile-enable-cross-compile-for-b.patch * Add qemu-ui-spice-app package containing ui-spice-app.so * Add qemu-microvm package containing bios-microvm.bin - Add descriptors for the 128k and 256k SeaBios firmware images - For the record, the following issues reported for SUSE SLE15-SP1 are either fixed in this current package, or are otherwise not an issue: bsc#1079730 bsc#1098403 bsc#1111025 bsc#1128106 bsc#1133031 bsc#1134883 bsc#1135210 bsc#1135902 bsc#1136540 bsc#1136778 bsc#1138534 bsc#1140402 bsc#1143794 bsc#1145379 bsc#1144087 bsc#1145427 bsc#1145436 bsc#1145774 bsc#1146873 bsc#1149811 bsc#1152506 bsc#1155812 bsc#1156642 CVE-2018-12207 CVE-2019-5008 CVE-2019-11135 CVE-2019-12068 CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 CVE-2019-15890, and the following feature requests are satisfied by this package: fate#327410 fate#327764 fate#327796 jsc#SLE-4883 jsc#SLE-6132 jsc#SLE-6237 jsc#SLE-6754- Expose pschange-mc-no "feature", indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) target-i386-add-PSCHANGE_NO-bit-for-the-.patch - Expose taa-no "feature", indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) target-i386-Export-TAA_NO-bit-to-guests.patch Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Update to v4.1.1, a stable, bug-fix-only release * Besides incorporating the following fixes we already carried, it includes about the same number of other, similar type fixes which we hadn't yet incorporated. * Patches dropped (subsumed by stable update): block-Add-bdrv_co_get_self_request.patch block-create-Do-not-abort-if-a-block-dri.patch block-file-posix-Let-post-EOF-fallocate-.patch block-file-posix-Reduce-xfsctl-use.patch block-io-refactor-padding.patch blockjob-update-nodes-head-while-removin.patch block-Make-wait-mark-serialising-request.patch block-nfs-tear-down-aio-before-nfs_close.patch coroutine-Add-qemu_co_mutex_assert_locke.patch curl-Check-completion-in-curl_multi_do.patch curl-Handle-success-in-multi_check_compl.patch curl-Keep-pointer-to-the-CURLState-in-CU.patch curl-Keep-socket-until-the-end-of-curl_s.patch curl-Pass-CURLSocket-to-curl_multi_do.patch curl-Report-only-ready-sockets.patch hw-arm-boot.c-Set-NSACR.-CP11-CP10-for-N.patch hw-core-loader-Fix-possible-crash-in-rom.patch make-release-pull-in-edk2-submodules-so-.patch memory-Provide-an-equality-function-for-.patch mirror-Keep-mirror_top_bs-drained-after-.patch pr-manager-Fix-invalid-g_free-crash-bug.patch qcow2-bitmap-Fix-uint64_t-left-shift-ove.patch qcow2-Fix-corruption-bug-in-qcow2_detect.patch qcow2-Fix-QCOW2_COMPRESSED_SECTOR_MASK.patch qcow2-Fix-the-calculation-of-the-maximum.patch roms-Makefile.edk2-don-t-pull-in-submodu.patch s390-PCI-fix-IOMMU-region-init.patch s390x-tcg-Fix-VERIM-with-32-64-bit-eleme.patch target-alpha-fix-tlb_fill-trap_arg2-valu.patch target-arm-Don-t-abort-on-M-profile-exce.patch target-arm-Free-TCG-temps-in-trans_VMOV_.patch util-iov-introduce-qemu_iovec_init_exten.patch vhost-Fix-memory-region-section-comparis.patch vpc-Return-0-from-vpc_co_create-on-succe.patch Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Fix %arm builds- Fix two issues with qcow2 image processing which could affect disk integrity qcow2-Fix-QCOW2_COMPRESSED_SECTOR_MASK.patch qcow2-bitmap-Fix-uint64_t-left-shift-ove.patch- Work around a host kernel xfs bug which can result in qcow2 image corruption block-io-refactor-padding.patch util-iov-introduce-qemu_iovec_init_exten.patch block-Make-wait-mark-serialising-request.patch block-Add-bdrv_co_get_self_request.patch block-file-posix-Let-post-EOF-fallocate-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Correct package names in _constraints after switch to multibuild.- Address potential corruption when using qcow2 images coroutine-Add-qemu_co_mutex_assert_locke.patch qcow2-Fix-corruption-bug-in-qcow2_detect.patch - Include more tweaks to our packaging workflow scripts - this will continue as we refine the scripts - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- use %gcc_version for cross compilers (boo#1153703)- Add upstream edk2 submodule fix for creating tarball - Switch to upstream patch for avoiding git ref in edk2 makefile - Fix failing block tests which aren't compatible with the configure option --enable-membarrier * Patches dropped: roms-Makefile.edk2-don-t-invoke-git-sinc.patch tests-block-io-test-130-needs-some-delay.patch * Patches added: make-release-pull-in-edk2-submodules-so-.patch roms-Makefile.edk2-don-t-pull-in-submodu.patch tests-Fix-block-tests-to-be-compatible-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Reduce the cross compiler versions we rely on - Fix some qemu-testsuite issues, reducing known error cases test-add-mapping-from-arch-of-i686-to-qe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Since our spec file has bashisms, include the following in the spec file: %define _buildshell /bin/bash- Disable some block tests which randomly fail. This is in context of the build service build of qemu-testsuite tests-Disable-some-block-tests-for-now.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Add some post v4.1.0 upstream stable patches * Patches added: mirror-Keep-mirror_top_bs-drained-after-.patch s390x-tcg-Fix-VERIM-with-32-64-bit-eleme.patch target-alpha-fix-tlb_fill-trap_arg2-valu.patch target-arm-Free-TCG-temps-in-trans_VMOV_.patch target-arm-Don-t-abort-on-M-profile-exce.patch qcow2-Fix-the-calculation-of-the-maximum.patch block-file-posix-Reduce-xfsctl-use.patch pr-manager-Fix-invalid-g_free-crash-bug.patch vpc-Return-0-from-vpc_co_create-on-succe.patch block-nfs-tear-down-aio-before-nfs_close.patch block-create-Do-not-abort-if-a-block-dri.patch curl-Keep-pointer-to-the-CURLState-in-CU.patch curl-Keep-socket-until-the-end-of-curl_s.patch curl-Check-completion-in-curl_multi_do.patch curl-Pass-CURLSocket-to-curl_multi_do.patch curl-Report-only-ready-sockets.patch curl-Handle-success-in-multi_check_compl.patch blockjob-update-nodes-head-while-removin.patch memory-Provide-an-equality-function-for-.patch vhost-Fix-memory-region-section-comparis.patch hw-arm-boot.c-Set-NSACR.-CP11-CP10-for-N.patch s390-PCI-fix-IOMMU-region-init.patch hw-core-loader-Fix-possible-crash-in-rom.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Include more tweaks to our packaging workflow scripts - Produce qemu-linux-user and qemu-testsuite via the build service multibuild capability, instead of duplicating the spec file and using package link in build service * combine qemu-linux-user spec file into main qemu spec file. Since this model uses a single changelog, here are some historicial mentions from the now unused qemu-linux-user.changes (delta from qemu's was quite minimal): - Adjust to a v5.2 linux kernel change regarding SIOCGSTAMP - Fix pwrite64/pread64 to return 0 over -1 for a zero length NULL buffer in qemu (bsc#1121600) * bsc#1112499 * Since qemu-testsuite.spec and qemu-testsuite.changes were just copies of the main qemu version nothing needs to be done there- Build opensbi from source on riscv64- Update to v4.1.0: See http://wiki.qemu.org/ChangeLog/4.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86: CPU models are now versioned * x86: CPU die topology can now be configured * x86: New Hygon Dhyana and Intel Snowridge CPU models * s390: The bios now supports IPL (boot) from ECKD DASD assigned to the guest via vfio-ccw * s390: The bios now tolerates the presence of bootmap signature entries written by zipl * PowerPC: pseries machine now supports KVM acceleration (kernel_irqchip=on) of the XIVE interrupt controller * PowerPC: pseries now supports hot-plug of PCI bridges and hot-plug and unplug of devices under PCI bridges * ARM: QEMU now supports emulating an FPU for Cortex-M CPUs, and the Cortex-M4 and Cortex-M33 now provide the FP * Python 2 support is deprecated * UEFI platform firmware binaries, and matching variable store templates are now installed * Now it's possible to specify memory-less NUMA node when using "-numa node,memdev" options * Possible to trigger self announcement on specific network interfaces * Default memory distribution between NUMA nodes is now deprecated * Fallback to normal RAM allocation if QEMU is not able to allocate from the "-mem-path" provided file/filesystem is now deprecated * virtio-gpu 2d/3d rendering may now be offloaded to an external vhost-user process, such as QEMU vhost-user-gpu * QEMU will automatically try to use the MAP_SYNC mmap flag for memory backends configured with pmem=on,share=on * Additional SeaVGABIOS patches added for vga-ati compatibility - Drop attempt at build compatibility with SLE12 - New sub-packages: qemu-edk2, qemu-vhost-user-gpu - Conditionalize building of qemu-edk2 (and leave unbuilt for now) - Implement new packaging workflow, includes no longer numbering patches, and having the "current git repo" stored with the package in the form of git bundles * Patches dropped (upstream unless otherwise noted): 0027-tests-test-thread-pool-is-racy-add-.patch 0032-tests-Fix-Makefile-handling-of-chec.patch 0034-Revert-target-i386-kvm-add-VMX-migr.patch 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-avoid-string-truncation-.patch 0040-linux-user-elfload-Fix-GCC-9-build-.patch 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch 0043-target-i386-define-md-clear-bit.patch 0045-kbd-state-fix-autorepeat-handling.patch 0046-target-ppc-ensure-we-get-null-termi.patch 0049-qxl-check-release-info-object.patch 0050-qemu-bridge-helper-restrict-interfa.patch 0051-linux-user-fix-to-handle-variably-s.patch ipxe-use-gcc6-for-more-compact-code.patch (no longer needed) (the next three are replaced by the upstream equivalent) ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch ipxe-build-Disable-gcc-address-of-packed-member-warning.patch ipxe-efi-Avoid-string-op-warning-with-cross-gcc-7-compile.patch slirp-fix-heap-overflow-in-ip_reass-on-big-packet-input.patch * Patches renamed: 0001-XXX-dont-dump-core-on-sigabort.patch - > XXX-dont-dump-core-on-sigabort.patch 0002-qemu-binfmt-conf-Modify-default-pat.patch - > qemu-binfmt-conf-Modify-default-path.patch 0003-qemu-cvs-gettimeofday.patch - > qemu-cvs-gettimeofday.patch 0004-qemu-cvs-ioctl_debug.patch - > qemu-cvs-ioctl_debug.patch 0005-qemu-cvs-ioctl_nodirection.patch - > qemu-cvs-ioctl_nodirection.patch 0006-linux-user-add-binfmt-wrapper-for-a.patch - > linux-user-add-binfmt-wrapper-for-argv-0.patch 0007-PPC-KVM-Disable-mmu-notifier-check.patch - > PPC-KVM-Disable-mmu-notifier-check.patch 0008-linux-user-binfmt-support-host-bina.patch - > linux-user-binfmt-support-host-binaries.patch 0009-linux-user-Fake-proc-cpuinfo.patch - > linux-user-Fake-proc-cpuinfo.patch 0010-linux-user-use-target_ulong.patch - > linux-user-use-target_ulong.patch 0011-Make-char-muxer-more-robust-wrt-sma.patch - > Make-char-muxer-more-robust-wrt-small-FI.patch 0012-linux-user-lseek-explicitly-cast-no.patch - > linux-user-lseek-explicitly-cast-non-set.patch 0013-AIO-Reduce-number-of-threads-for-32.patch - > AIO-Reduce-number-of-threads-for-32bit-h.patch 0014-xen_disk-Add-suse-specific-flush-di.patch - > xen_disk-Add-suse-specific-flush-disable.patch 0015-qemu-bridge-helper-reduce-security-.patch - > qemu-bridge-helper-reduce-security-profi.patch 0016-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch 0017-linux-user-properly-test-for-infini.patch - > linux-user-properly-test-for-infinite-ti.patch 0018-roms-Makefile-pass-a-packaging-time.patch - > roms-Makefile-pass-a-packaging-timestamp.patch 0019-Raise-soft-address-space-limit-to-h.patch - > Raise-soft-address-space-limit-to-hard-l.patch 0020-increase-x86_64-physical-bits-to-42.patch - > increase-x86_64-physical-bits-to-42.patch 0021-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > vga-Raise-VRAM-to-16-MiB-for-pc-0.15-and.patch 0022-i8254-Fix-migration-from-SLE11-SP2.patch - > i8254-Fix-migration-from-SLE11-SP2.patch 0023-acpi_piix4-Fix-migration-from-SLE11.patch - > acpi_piix4-Fix-migration-from-SLE11-SP2.patch 0024-Switch-order-of-libraries-for-mpath.patch - > Switch-order-of-libraries-for-mpath-supp.patch 0025-Make-installed-scripts-explicitly-p.patch - > Make-installed-scripts-explicitly-python.patch 0026-hw-smbios-handle-both-file-formats-.patch - > hw-smbios-handle-both-file-formats-regar.patch 0028-xen-add-block-resize-support-for-xe.patch - > xen-add-block-resize-support-for-xen-dis.patch 0029-tests-qemu-iotests-Triple-timeout-o.patch - > tests-qemu-iotests-Triple-timeout-of-i-o.patch 0030-tests-block-io-test-130-needs-some-.patch - > tests-block-io-test-130-needs-some-delay.patch 0031-xen-ignore-live-parameter-from-xen-.patch - > xen-ignore-live-parameter-from-xen-save-.patch 0033-Conditionalize-ui-bitmap-installati.patch - > Conditionalize-ui-bitmap-installation-be.patch 0035-tests-change-error-message-in-test-.patch - > tests-change-error-message-in-test-162.patch 0037-hw-usb-hcd-xhci-Fix-GCC-9-build-war.patch - > hw-usb-hcd-xhci-Fix-GCC-9-build-warning.patch 0038-hw-usb-dev-mtp-Fix-GCC-9-build-warn.patch - > hw-usb-dev-mtp-Fix-GCC-9-build-warning.patch 0044-hw-intc-exynos4210_gic-provide-more.patch - > hw-intc-exynos4210_gic-provide-more-room.patch 0047-configure-only-populate-roms-if-sof.patch - > configure-only-populate-roms-if-softmmu.patch 0048-pc-bios-s390-ccw-net-avoid-warning-.patch - > pc-bios-s390-ccw-net-avoid-warning-about.patch keycodemapdb-make-keycode-gen-output-reproducible.patch - > Make-keycode-gen-output-reproducible-use.patch ipxe-stub-out-the-SAN-req-s-in-int13.patch - > stub-out-the-SAN-req-s-in-int13.patch sgabios-fix-cross-build.patch deleted - > roms-sgabios-Fix-csum8-to-be-built-by-ho.patch sgabios-stable-buildid.patch - > sgabios-Makefile-fix-issues-of-build-rep.patch skiboot-gcc9-compat.patch - > Disable-Waddress-of-packed-member-for-GC.patch ipxe-stable-buildid.patch - > ipxe-Makefile-fix-issues-of-build-reprod.patch seabios-fix_cross_compilation.patch - > enable-cross-compilation-on-ARM.patch * Patches added: roms-change-cross-compiler-naming-to-be-.patch roms-Makefile.edk2-don-t-invoke-git-sinc.patch vga-move-modelist-from-bochsvga.c-to-new.patch vga-make-memcpy_high-public.patch vga-add-atiext-driver.patch vga-add-ati-bios-tables.patch vbe-add-edid-support.patch ati-add-edid-support.patch ati-vga-make-less-verbose.patch ati-vga-fix-ati_read.patch ati-vga-make-i2c-register-and-bits-confi.patch ati-vga-try-vga-ddc-first.patch ati-vga-add-rage128-edid-support.patch Fix-s-directive-argument-is-null-error.patch Workaround-compilation-error-with-gcc-9..patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch hdata-vpd-fix-printing-char-0x00.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Since we build seabios, take advantage of ability to add our own identifying version info by changing SEABIOS_EXTRAVERSION from "-prebuilt.qemu.org" to "-rebuilt.suse.com" (or "-rebuilt.opensuse.org for openSUSE releases)- Security fix for heap overflow in ip_reass on big packet input (CVE-2019-14378, bsc#1143794) slirp-fix-heap-overflow-in-ip_reass-on-big-packet-input.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0 * Patches added: 0051-linux-user-fix-to-handle-variably-s.patch- Make keycode-gen output reproducible (use SOURCE_DATE_EPOCH timestamp) keycodemapdb-make-keycode-gen-output-reproducible.patch- Security fix for null pointer dereference while releasing spice resources (CVE-2019-12155, bsc#1135902) 0049-qxl-check-release-info-object.patch - Security fix for qemu-bridge-helper ACL can be bypassed when names are too long (CVE-2019-13164, bsc#1140402) 0050-qemu-bridge-helper-restrict-interfa.patch - Replace patch 0043 with an upstream version 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- fixed regression for ksm.service was (bsc#1112646)- Content of packaged %_docdir/%name/interop/_static/ dir depends on python-Sphinx version, so lets just wildcard specifying those files, rather than trying to manage a specific file list- Last change exposed that we still do rely on python2. Make spec file adjustment- Switch from python-Sphinx to Sphinx from python variant we are building with (new Sphinx is for python3 only)- Fix a number of compatibility issues with the stricter gcc9 checks * Disable warning for taking address of packed structure members 0048-pc-bios-s390-ccw-net-avoid-warning-.patch * Fix case of strncpy where null terminated string not guaranteed 0046-target-ppc-ensure-we-get-null-termi.patch * Disable warning for taking address of packed structure members and fix case of passing null pointer as "%s" format parameter skiboot-gcc9-compat.patch - Fix configure script which caused firmware to be built in linux-user only build. 0047-configure-only-populate-roms-if-sof.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Fix regression in autorepeat key handling 0045-kbd-state-fix-autorepeat-handling.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Fix file list- Yet another gcc9 related code fix (bsc#1121464) 0044-hw-intc-exynos4210_gic-provide-more.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Switch to now upstreamed version of patch and add one more gcc9 related patch * Patches renamed: 0041-qxl-fix-Waddress-of-packed-member.patch - > 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch - Add x86 cpu feature "md-clear" (CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 bsc#1111331) 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Correct logic of which ipxe patches get included based on suse_version. We were wrongly excluding a gcc9 related patch for example- Switch to now upstreamed version of some patches * Patches renamed: 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch - > 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch - > 0039-linux-user-avoid-string-truncation-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Create /usr/share/qemu/firmware and /etc/qemu/firmware directories in support of the firmware descriptor feature now in use as of libvirt v5.2- Disable LTO as suggested by Martin Liska (boo#1133281) - Remove and obsolete qemu-oss-audio subpackage. OSS audio is very old, and we didn't really even configure the package properly for it for a very long time, so presumably there can't be any users of it as far as qemu is concerned - Avoid warnings which gcc9 complains about 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch 0037-hw-usb-hcd-xhci-Fix-GCC-9-build-war.patch 0038-hw-usb-dev-mtp-Fix-GCC-9-build-warn.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch 0040-linux-user-elfload-Fix-GCC-9-build-.patch 0041-qxl-fix-Waddress-of-packed-member.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Update to v4.0.0: See http://wiki.qemu.org/ChangeLog/4.0 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * ARM: ARMv8+ extensions for SB, PredInv, HPD, LOR, FHM, AA32HPD, PAuth, JSConv, CondM, FRINT, and BTI * ARM: new emulation support for "Musca" and "MPS2" development boards * ARM: virt: support for >255GB of RAM and u-boot "noload" image types * ARM: improved emulation of ARM PMU * HPPA: support for TLB protection IDs and TLB trace events * MIPS: support for multi-threaded TCG emulation * MIPS: emulation support for I7200 I6500 CPUs, QMP-base querying of CPU types, and improved support for SAARI and SAAR configuration registers * MIPS: improvements to Interthread Communication Unit, Fulong 2E machine types, and end-user documentation. * PowerPC: pseries/powernv: support for POWER9 large decrementer * PowerPC: pseries: emulation support for XIVE interrupt controller * PowerPC: pseries: support for hotplugging PCI host bridges (PHBs) * PowerPC: pseries: Spectre/Meltdown mitigations enabled by default, additional support for count-cache-flush mitigation * RISC-V: virt: support for PCI and USB * RISC-V: support for TSR, TW, and TVM fields of mstatus, FS field now supports three stats (dirty, clean, and off) * RISC-V: built-in gdbserver supports register lists via XML files * s390: support for z14 GA 2 CPU model, Multiple-epoch and PTFF features now enabled in z14 CPU model by default * s390: vfio-ap: now supports hot plug/unplug, and no longer inhibits memory ballooning * s390: emulation support for floating-point extension facility and vector support instructions * x86: HAX accelerator now supported POSIX hosts other than Darwin, including Linux and NetBSD * x86: Q35: advertised PCIe root port speeds will now optimally default to maximum link speed (16GT/s) and width (x32) provided by PCIe 4.0 for QEMU 4.0+ machine types; older machine types will retain 2.5GT/x1 defaults for compatibility. * x86: Xen PVH images can now be booted with "-kernel" option * Xtensa: xtfpga: improved SMP support for linux (interrupt distributor, IPI, and runstall) and new SMP-capable test_mmuhifi_c3 core configuration * Xtensa: support for Flexible length instructions extension (FLIX) * GUI: new '-display spice-app' to configure/launch a Spice client GUI with a similar UI to QEMU GTK. VNC server now supports access controls via tls-authz/sasl-authz options * QMP: support for "out-of-band" command execution, can be useful for postcopy migration recovery. Additional QMP commands for working with block devices and dirty bitmaps * VFIO: EDID interface for supported mdev (Intel vGPU for kernel 5.0+), allows resolution setting via xres/yres options. * Xen: new 'xen-disk' device which can create a Xen PV disk backend, and performance improvements for Xen PV disk backend. * Network Block Device: improved tracing and error diagnostics, improved client compatibility with buggy NBD server implementations, new - -bitmap, --list, --tls-authz options for qemu-nbd * virtio-blk now supports DISCARD and WRITE_ZEROES * qemu-test-suite output is now in TAP format * Sphinx now used for part of qemu documentation * A few more configure features are enabled: iconv, lzfse (for openSUSE) * Provide better logo icons - Made these package building changes: * Removed this token from spec file: #!BuildIgnore: gcc-PIE * Created ability to build qemu source out-of-tree * Added BSD-2-Clause license clause due to EDK II code inclusion * Patches dropped (upstream unless otherwise noted): 0010-Remove-problematic-evdev-86-key-fro.patch 0025-Fix-tigervnc-long-press-issue.patch 0026-string-input-visitor-Fix-uint64-par.patch 0027-test-string-input-visitor-Add-int-t.patch 0028-test-string-input-visitor-Add-uint6.patch 0029-tests-Add-QOM-property-unit-tests.patch 0030-tests-Add-scsi-disk-test.patch 0033-smbios-Add-1-terminator-if-any-stri.patch (different approach used) 0034-qemu-io-tests-comment-out-problemat.patch (not as needed) 0039-xen_disk-Avoid-repeated-memory-allo.patch 0041-vfio-ap-flag-as-compatible-with-bal.patch 0042-hw-s390x-Fix-bad-mask-in-time2tod.patch 0043-pcie-set-link-state-inactive-active.patch 0044-pc-piix4-Update-smbus-I-O-space-aft.patch 0045-hw-usb-fix-mistaken-de-initializati.patch 0046-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch 0047-pvrdma-release-device-resources-in-.patch 0048-rdma-check-num_sge-does-not-exceed-.patch 0049-pvrdma-add-uar_read-routine.patch 0050-pvrdma-check-number-of-pages-when-c.patch 0051-pvrdma-check-return-value-from-pvrd.patch 0052-pvrdma-release-ring-object-in-case-.patch 0053-block-Fix-hangs-in-synchronous-APIs.patch 0054-linux-user-make-pwrite64-pread64-fd.patch 0055-xen-Add-xen-v4.12-based-xc_domain_c.patch 0056-slirp-check-data-length-while-emula.patch 0057-s390x-Return-specification-exceptio.patch 0059-memory-Fix-the-memory-region-type-a.patch 0060-target-i386-sev-Do-not-pin-the-ram-.patch 0061-slirp-check-sscanf-result-when-emul.patch 0062-ppc-add-host-serial-and-host-model-.patch 0063-i2c-ddc-fix-oob-read.patch 0064-device_tree.c-Don-t-use-load_image.patch 0065-spapr-Simplify-handling-of-host-ser.patch ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch ipxe-fix-build.patch skiboot-hdata-i2c.c-fix-building-with-gcc8.patch * Patches renamed: 0011-linux-user-use-target_ulong.patch - > 0010-linux-user-use-target_ulong.patch 0012-Make-char-muxer-more-robust-wrt-sma.patch - > 0011-Make-char-muxer-more-robust-wrt-sma.patch 0013-linux-user-lseek-explicitly-cast-no.patch - > 0012-linux-user-lseek-explicitly-cast-no.patch 0014-AIO-Reduce-number-of-threads-for-32.patch - > 0013-AIO-Reduce-number-of-threads-for-32.patch 0015-xen_disk-Add-suse-specific-flush-di.patch - > 0014-xen_disk-Add-suse-specific-flush-di.patch 0016-qemu-bridge-helper-reduce-security-.patch - > 0015-qemu-bridge-helper-reduce-security-.patch 0017-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0016-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0018-linux-user-properly-test-for-infini.patch - > 0017-linux-user-properly-test-for-infini.patch 0019-roms-Makefile-pass-a-packaging-time.patch - > 0018-roms-Makefile-pass-a-packaging-time.patch 0020-Raise-soft-address-space-limit-to-h.patch - > 0019-Raise-soft-address-space-limit-to-h.patch 0021-increase-x86_64-physical-bits-to-42.patch - > 0020-increase-x86_64-physical-bits-to-42.patch 0022-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0021-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0023-i8254-Fix-migration-from-SLE11-SP2.patch - > 0022-i8254-Fix-migration-from-SLE11-SP2.patch 0024-acpi_piix4-Fix-migration-from-SLE11.patch - > 0023-acpi_piix4-Fix-migration-from-SLE11.patch 0031-Switch-order-of-libraries-for-mpath.patch - > 0024-Switch-order-of-libraries-for-mpath.patch 0032-Make-installed-scripts-explicitly-p.patch - > 0025-Make-installed-scripts-explicitly-p.patch 0035-tests-test-thread-pool-is-racy-add-.patch - > 0027-tests-test-thread-pool-is-racy-add-.patch 0036-xen-add-block-resize-support-for-xe.patch - > 0028-xen-add-block-resize-support-for-xe.patch 0037-tests-qemu-iotests-Triple-timeout-o.patch - > 0029-tests-qemu-iotests-Triple-timeout-o.patch 0038-tests-block-io-test-130-needs-some-.patch - > 0030-tests-block-io-test-130-needs-some-.patch 0040-xen-ignore-live-parameter-from-xen-.patch - > 0031-xen-ignore-live-parameter-from-xen-.patch 0058-Revert-target-i386-kvm-add-VMX-migr.patch - > 0034-Revert-target-i386-kvm-add-VMX-migr.patch * Patches added: 0026-hw-smbios-handle-both-file-formats-.patch 0032-tests-Fix-Makefile-handling-of-chec.patch 0033-Conditionalize-ui-bitmap-installati.patch 0035-tests-change-error-message-in-test-.patch ipxe-efi-Avoid-string-op-warning-with-cross-gcc-7-compile.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Adjust fix for CVE-2019-8934 (bsc#1126455) to match the latest upstream adjustments for the same. Basically now the security fix is to provide a dummy host-model and host-serial value, which overrides getting that value from the host 0065-spapr-Simplify-handling-of-host-ser.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Tweak last spec file change to guard new Requires with conditional - Fix DOS possibility in device tree processing (CVE-2018-20815 bsc#1130675) 0064-device_tree.c-Don-t-use-load_image.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Remove an unneeded BuildRequires which impacts bsc#1119414 fix Also add a corresponding Recommends for qemu-tools as part of this packaging adjustment (bsc#1130484) - Fix information leak in slirp (CVE-2019-9824 bsc#1129622) 0061-slirp-check-sscanf-result-when-emul.patch - Add method to specify whether or not to expose certain ppc64 host information, which can be considered a security issue (CVE-2019-8934 bsc#1126455) 0062-ppc-add-host-serial-and-host-model-.patch - Fix OOB memory access and information leak in virtual monitor interface (CVE-2019-03812 bsc#1125721) 0063-i2c-ddc-fix-oob-read.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Again address ipxe GCC 9 incompatibilities. Previously included patch to disable unneeded warning got muffed somehow (bsc#1121464)- Package and cross-build rom files for aarch64 from SLE15/Leap15.0 to fix boo#1125964 - Add patch to fix seabios cross-compilation: * seabios-fix_cross_compilation.patch - Add patch to fix sgabios cross-compilation: * sgabios-fix-cross-build.patch- Fix _constraints to include all architectures for disk size (fix aarch64)- Revert upstream patch which declares x86 vmx feature a migration blocker. Given the proliferation of using vm's with host features passed through and the general knowledge that nested virtualization has many usage caveats, but still gets put in use in restricted scenarios, this patch did more harm than good, I feel. So despite this relaxation, please consider yourself warned that nested virtualization is not yet a supportable feature. (bsc#1121604) 0058-Revert-target-i386-kvm-add-VMX-migr.patch - Fix SEV VM device assignment (bsc#1123205) 0059-memory-Fix-the-memory-region-type-a.patch 0060-target-i386-sev-Do-not-pin-the-ram-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Remove 71-sev.rules, which modifies the default permissions of /dev/sev by adding the kvm group as reader/writer. Upstream decided to take a different approach for libvirt to manage SEV due to security concerns which I agree overrides the convenience of providing /dev/sev access to all the kvm group (bsc#1124842 bsc#1102604)- Increase memory needed to build qemu-testsuite for ppc* arch's in _constraints file- Return specification exception for unimplemented diag 308 subcodes rather than a hardware error (bsc#1123179) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0057-s390x-Return-specification-exceptio.patch- Fix OOB issue in slirp (CVE-2019-6778 bsc#1123156) 0056-slirp-check-data-length-while-emula.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 - Fix ipxe GCC 9 incompatibilities (bsc#1121464) ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch ipxe-build-Disable-gcc-address-of-packed-member-warning.patch- Tweak Xen interface to be compatible with upcoming v4.12 Xen 0055-xen-Add-xen-v4.12-based-xc_domain_c.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0054-linux-user-make-pwrite64-pread64-fd.patch (bsc#1121600)- Clarify that move to include v3.1.0 in qemu package corresponds with fate#327089, which of course builds on v3.0.0 mentioned previously, and that among other patches which this change obsoletes (because functionality is included in base version) I will mention one pointed out by reviewers: 0094-s390x-cpumodels-add-z14-Model-ZR1.patch- include post v3.1.0 patches marked for next stable release: 0041-vfio-ap-flag-as-compatible-with-bal.patch 0042-hw-s390x-Fix-bad-mask-in-time2tod.patch 0043-pcie-set-link-state-inactive-active.patch 0044-pc-piix4-Update-smbus-I-O-space-aft.patch 0045-hw-usb-fix-mistaken-de-initializati.patch - Address various security/stability issues * Fix host access vulnerability in usb-mtp infrastructure (CVE-2018-16872 bsc#1119493) 0046-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch * Fix DoS in pvrdma interface (CVE-2018-20123 bsc#1119437) 0047-pvrdma-release-device-resources-in-.patch * Fix OOB access issue in rdma backend (CVE-2018-20124 bsc#1119840) 0048-rdma-check-num_sge-does-not-exceed-.patch * Fix NULL pointer reference in pvrdma emulation (CVE-2018-20191 bsc#1119979) 0049-pvrdma-add-uar_read-routine.patch * Fix DoS in pvrdma interface (CVE-2018-20125 bsc#1119989) 0050-pvrdma-check-number-of-pages-when-c.patch * Fix DoS in pvrdma interface (CVE-2018-20216 bsc#1119984) 0051-pvrdma-check-return-value-from-pvrd.patch * Fix DoS in pvrdma interface (CVE-2018-20126 bsc#1119991) 0052-pvrdma-release-ring-object-in-case-.patch - one more post v3.1.0 patches marked for next stable release: 0053-block-Fix-hangs-in-synchronous-APIs.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0040-xen-ignore-live-parameter-from-xen-.patch (bsc#1079730, bsc#1101982, bsc#1063993)- Follow up on ideas prompted by last change: clean up the patches generated by git workflow. There is no value to the first line (mbox From line), or [PATCH] on subject line. Get rid of those - Other minor fixes and improvements to update_git.sh- Modify update_git.sh script: pass --zero-commit to format-patch This removes needless noise in the buildservice when the same set of patches is imported/exported at different times by different users. pass --no-signature to format-patch Remove sed call which used to remove the signature, use mv instead- Use /bin/bash to echo value into sys fs for ksm control (bsc#1112646)- fix memory leak in xen_disk (bsc#1100408) 0039-xen_disk-Avoid-repeated-memory-allo.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- building against xen-devel requires the XC_* compat macros to be set because this version of QEMU will be built against many versions of Xen. configure will decide on the appropriate function names it knows about today. To actually call these functions, future versions of Xen may require XC_* to be set. Furthermore, fix a bug in QEMU: xen_common.h undefines the XC_* macros unconditionally.- Update to v3.1.0: See http://wiki.qemu.org/ChangeLog/3.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86 IceLake-Server and IceLake-Client cpu models added * Document recommendations for choosing cpu modesl for x86 guests * Support for Hyper-V enlightened VMCS * stdvga and bochs-display devices can expose EDID information to the guest. stdvga xres and yres properties are exposed in the EDID information * s390 improvements: vfio-ap crypto device support, max-cpu model added, etoken support, huge page backing support * ARM: ARMv6M architecture and Cortex-M0 cpu host support added, Cortex-A72 cpu model added, GICv2 virtualization extensions, emulation of AArch32 virtualization, Scalable Vector Extension implemented * Support for AMD IOMMU interrupt remapping and guest virtual APIC mode * Multithreaded TCG on x86 is considered supportable * Add a patch to triple timeout of block io tests, since the obs environment is fickle * x86 save/restore and live migration is prohibited if Intel KVM nested virtualization is enabled * Patches dropped (upstream unless otherwise noted): 0033-migration-warn-about-inconsistent-s.patch (shouldn't be needed anymore) 0035-configure-Modify-python-used-for-io.patch (upstream now python3 friendly) 0039-tests-boot-serial-test-Bump-timeout.patch 0040-linux-headers-update.patch 0041-s390x-kvm-add-etoken-facility.patch 0042-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch 0043-configure-require-libseccomp-2.2.0.patch 0044-seccomp-set-the-seccomp-filter-to-a.patch 0045-sandbox-disable-sandbox-if-CONFIG_S.patch 0046-seccomp-check-TSYNC-host-capability.patch 0047-linux-user-init_guest_space-Try-to-.patch 0048-ne2000-fix-possible-out-of-bound-ac.patch 0049-rtl8139-fix-possible-out-of-bound-a.patch 0050-pcnet-fix-possible-buffer-overflow.patch 0051-net-ignore-packet-size-greater-than.patch 0052-lsi53c895a-check-message-length-val.patch 0053-nvme-fix-oob-access-issue-CVE-2018-.patch (fixed differently upstream) * Patches renamed: 0034-smbios-Add-1-terminator-if-any-stri.patch - > 0033-smbios-Add-1-terminator-if-any-stri.patch 0036-qemu-io-tests-comment-out-problemat.patch - > 0034-qemu-io-tests-comment-out-problemat.patch 0037-tests-test-thread-pool-is-racy-add-.patch - > 0035-tests-test-thread-pool-is-racy-add-.patch 0038-xen-add-block-resize-support-for-xe.patch - > 0036-xen-add-block-resize-support-for-xe.patch * Patches added: 0037-tests-qemu-iotests-Triple-timeout-o.patch 0038-tests-block-io-test-130-needs-some-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 - Update includes the following bug fixes: bsc#1108474, bsc#1117615 - Update includes the following SLE requested functionality: FATE#324810, FATE#325875, FATE#326369, FATE#326378, FATE#326379, FATE#326401, FATE#326672, FATE#326829 - Make the following packaging changes related to the new release * Enable libpmem, pvrdma, vhost-crypto features and qemu-block-nfs subpackage * New roms available: vgabios-bochs-display.bin, vgabios-ramfb.bin * New binary tool included (qemu-edid) for testing the new qemu edid generator - Tweaked patches we carry to pass qemu's checkpatch checker - Modify update_git.sh script to enable packaging qemu from development time sources, not just at release time - Removed erroneous (and now useless) tests for tar and gzip formats - Don't exclude s390x anymore from building the qemu-testsuite - Based on current OBS building observations make changes to storage and memory requires specified in the _constraints file- Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, FATE, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2018-10839 CVE-2018-16847 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 CVE-2018-18849 * bsc#1110910 bsc#1111006 bsc#1111010 bsc#1111013 bsc#1114422 bsc#1114529 * Patches added: 0047-linux-user-init_guest_space-Try-to-.patch 0048-ne2000-fix-possible-out-of-bound-ac.patch 0049-rtl8139-fix-possible-out-of-bound-a.patch 0050-pcnet-fix-possible-buffer-overflow.patch 0051-net-ignore-packet-size-greater-than.patch 0052-lsi53c895a-check-message-length-val.patch 0053-nvme-fix-oob-access-issue-CVE-2018-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0* Adding changes to mitigate seccomp vulnerability (CVE-2018-15746 bsc#1106222) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0 * Patches added: 0042-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch 0043-configure-require-libseccomp-2.2.0.patch 0044-seccomp-set-the-seccomp-filter-to-a.patch 0045-sandbox-disable-sandbox-if-CONFIG_S.patch 0046-seccomp-check-TSYNC-host-capability.patch- Do more misc spec file fixes: * Be explicit in spec file about Version used for all subpackages (again, to avoid subpackage ordering issues). Default Release tag is also brought in by obs format_spec_file service * Delete binary blob s390-netboot.img, which we rebuild * Don't provide separate Url for qemu-kvm package - the main qemu website provides easily findable link for kvm specifics * Associate petalogix-ml605.dtb with qemu-extra instead of qemu-ppc * More entry sorting- Correct some versioning as follows: * Accurately reflect the qemu-ipxe package version value by adding "+" at the end * Don't overwrite seabios .version file, since now (for quite some time actually) upstream tarball creation creates this file and the value we are writing to it is actually wrong - Make spec file improvements, including the following: * Add qemu.keyring to enable package source verification * Create srcname macro to identify source file name separately from package name * Create alternate to %version to avoid subpackage ordering causing inadvertantly wrong %version value at point of use * Sort some entries * Be more consistent with macro syntax usage * Minor file tweaks as done by osc format_spec_file service- Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, FATE, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2018-11806 CVE-2018-12617 CVE-2018-7550 CVE-2018-15746 * fate#325467 * bsc#1091695 bsc#1094725 bsc#1094913 bsc#1096223 bsc#1098735 bsc#1103628 bsc#1105279 bsc#1106222 bsc#1106222 bsc#1107489 * Patches added: * only enable glusterfs for openSUSE 0040-linux-headers-update.patch 0041-s390x-kvm-add-etoken-facility.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Increase timeout for boot-serial-test, since we've hit the timeout for armv7l arch in qemu-testsuite. 0039-tests-boot-serial-test-Bump-timeout.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Drop legacy kvm_stat script and man page. We'll rely on the kvm_stat package only going forward kvm_stat kvm_stat.1.gz - Update SLE support documentation to match v3.0.0 release- Update to v3.0.0: See http://wiki.qemu.org/ChangeLog/3.0 Don't read anything into the major version number update. It's been decided to increase the major version number each year. Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package. Some noteworthy changes: * Support for additional x86/AMD mitigations against Speculative Store Bypass (Spectre Variant 4, CVE-2018-3639) * Improved support for nested KVM guests running on Hyper-V * Block device support for active disk-mirroring, which avoids convergence issues which may arise when doing passive/background mirroring of busy devices * Improved support for AHCI emulation, SCSI emulation, and persistent reservations / cluster management * OpenGL ES support for SDL front-end, additional framebuffer device options for early boot display without using legacy VGA emulation * Live migration support for TPM TIS devices, capping bandwidth usage during post-copy migration, and recovering from a failed post-copy migration * Improved latency when using user-mode networking / SLIRP * ARM: support for SMMUv3 IOMMU when using 'virt' machine type * ARM: v8M extensions for VLLDM and VLSTM floating-point instructions, and improved support for AArch64 v8.2 FP16 extensions * ARM: support for Scalable Vector Extensions in linux-user mode * Microblaze: support for 64-bit address sizes and translation bug fixes * PowerPC: PMU support for mac99 machine type and improvements for Uninorth PCI host bridge emulation for Mac machine types * PowerPC: preliminary support for emulating POWER9 hash MMU mode when using powernv machine type * RISC-V: improvement for privileged ISA emulation * s390: support for z14 ZR1 CPU model * s390: bpb/ppa15 Spectre mitigations enabled by default for z196 and later CPU models * s390: support for configuring consoles via -serial options * Patches dropped (upstream unless otherwise noted): 0008-linux-user-fix-segfault-deadlock.patch (no longer needed) 0039-blockjob-Fix-assertion-in-block_job.patch 0041-seccomp-allow-sched_setscheduler-wi.patch Make-installed-scripts-explicitly-python3.patch (we now make python3 explicit in other patch) * Patches renamed: 0009-linux-user-binfmt-support-host-bina.patch - > 0008-linux-user-binfmt-support-host-bina.patch 0010-linux-user-Fake-proc-cpuinfo.patch - > 0009-linux-user-Fake-proc-cpuinfo.patch 0011-Remove-problematic-evdev-86-key-fro.patch - > 0010-Remove-problematic-evdev-86-key-fro.patch 0012-linux-user-use-target_ulong.patch - > 0011-linux-user-use-target_ulong.patch 0013-Make-char-muxer-more-robust-wrt-sma.patch - > 0012-Make-char-muxer-more-robust-wrt-sma.patch 0014-linux-user-lseek-explicitly-cast-no.patch - > 0013-linux-user-lseek-explicitly-cast-no.patch 0015-AIO-Reduce-number-of-threads-for-32.patch - > 0014-AIO-Reduce-number-of-threads-for-32.patch 0016-xen_disk-Add-suse-specific-flush-di.patch - > 0015-xen_disk-Add-suse-specific-flush-di.patch 0017-qemu-bridge-helper-reduce-security-.patch - > 0016-qemu-bridge-helper-reduce-security-.patch 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0017-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0019-linux-user-properly-test-for-infini.patch - > 0018-linux-user-properly-test-for-infini.patch 0020-roms-Makefile-pass-a-packaging-time.patch - > 0019-roms-Makefile-pass-a-packaging-time.patch 0021-Raise-soft-address-space-limit-to-h.patch - > 0020-Raise-soft-address-space-limit-to-h.patch 0022-increase-x86_64-physical-bits-to-42.patch - > 0021-increase-x86_64-physical-bits-to-42.patch 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0022-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0024-i8254-Fix-migration-from-SLE11-SP2.patch - > 0023-i8254-Fix-migration-from-SLE11-SP2.patch 0025-acpi_piix4-Fix-migration-from-SLE11.patch - > 0024-acpi_piix4-Fix-migration-from-SLE11.patch 0026-Fix-tigervnc-long-press-issue.patch - > 0025-Fix-tigervnc-long-press-issue.patch 0027-string-input-visitor-Fix-uint64-par.patch - > 0026-string-input-visitor-Fix-uint64-par.patch 0028-test-string-input-visitor-Add-int-t.patch - > 0027-test-string-input-visitor-Add-int-t.patch 0029-test-string-input-visitor-Add-uint6.patch - > 0028-test-string-input-visitor-Add-uint6.patch 0030-tests-Add-QOM-property-unit-tests.patch - > 0029-tests-Add-QOM-property-unit-tests.patch 0031-tests-Add-scsi-disk-test.patch - > 0030-tests-Add-scsi-disk-test.patch 0032-Switch-order-of-libraries-for-mpath.patch - > 0031-Switch-order-of-libraries-for-mpath.patch 0033-Make-installed-scripts-explicitly-p.patch - > 0032-Make-installed-scripts-explicitly-p.patch (python2->python3) 0034-migration-warn-about-inconsistent-s.patch - > 0033-migration-warn-about-inconsistent-s.patch 0035-smbios-Add-1-terminator-if-any-stri.patch - > 0034-smbios-Add-1-terminator-if-any-stri.patch 0036-configure-Modify-python-used-for-io.patch - > 0035-configure-Modify-python-used-for-io.patch 0037-qemu-io-tests-comment-out-problemat.patch - > 0036-qemu-io-tests-comment-out-problemat.patch 0038-tests-test-thread-pool-is-racy-add-.patch - > 0037-tests-test-thread-pool-is-racy-add-.patch 0040-xen-add-block-resize-support-for-xe.patch - > 0038-xen-add-block-resize-support-for-xe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604). 71-sev.rules- Update to v2.12.1, a stable, (mostly) bug-fix-only release * This update contains new mitigation functionality for CVE-2018-3639 (Speculative Store Bypass) in x86. There are also bug fixes for migration, Intel IOMMU emulation, block layer/image handling, ARM emulation, and various other areas. (Note that a number of 2.12.1 patches were already included by us previously) (CVE-2018-3639 bsc#1092885) * Patches dropped (subsumed by stable update): 0039-device_tree-Increase-FDT_MAX_SIZE-t.patch 0040-vnc-fix-use-after-free.patch 0041-ccid-Fix-dwProtocols-advertisement-.patch 0042-tcg-arm-Fix-memory-barrier-encoding.patch 0043-s390-ccw-force-diag-308-subcode-to-.patch 0044-nbd-client-fix-nbd_negotiate_simple.patch 0045-migration-block-dirty-bitmap-fix-me.patch 0046-nbd-client-Fix-error-messages-durin.patch 0047-nbd-client-Relax-handling-of-large-.patch 0048-qxl-fix-local-renderer-crash.patch 0049-tcg-Limit-the-number-of-ops-in-a-TB.patch 0050-target-arm-Clear-SVE-high-bits-for-.patch 0051-cpus-tcg-fix-never-exiting-loop-on-.patch 0052-s390x-css-disabled-subchannels-cann.patch 0053-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0054-virtio-ccw-common-reset-handler.patch 0055-s390x-ccw-make-sure-all-ccw-devices.patch 0056-blockjob-expose-error-string-via-qu.patch 0058-qemu-io-Use-purely-string-blockdev-.patch 0059-qemu-img-Use-only-string-options-in.patch 0060-nfs-Remove-processed-options-from-Q.patch 0061-i386-define-the-ssbd-CPUID-feature-.patch 0062-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0063-i386-define-the-AMD-virt-ssbd-CPUID.patch 0064-ahci-fix-PxCI-register-race.patch 0065-ccid-card-passthru-fix-regression-i.patch * Patches renamed: 0057-blockjob-Fix-assertion-in-block_job.patch - > 0039-blockjob-Fix-assertion-in-block_job.patch 0066-xen-add-block-resize-support-for-xe.patch - > 0040-xen-add-block-resize-support-for-xe.patch 0067-seccomp-allow-sched_setscheduler-wi.patch - > 0041-seccomp-allow-sched_setscheduler-wi.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fixing seccomp resourcecontrol defunct issue (bsc#1102627) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12 * Patches added: 0067-seccomp-allow-sched_setscheduler-wi.patch- Add ipxe-fix-build.patch to not error out with binutils >= 2.31 .- Remove linux-user patch which is no longer needed (bsc#1098056) * Patches dropped: 0011-linux-user-XXX-disable-fiemap.patch * Patches renamed: 0036-Remove-problematic-evdev-86-key-fro.patch - > 0011-Remove-problematic-evdev-86-key-fro.patch 0037-configure-Modify-python-used-for-io.patch - > 0036-configure-Modify-python-used-for-io.patch 0038-qemu-io-tests-comment-out-problemat.patch - > 0037-qemu-io-tests-comment-out-problemat.patch 0039-tests-test-thread-pool-is-racy-add-.patch - > 0038-tests-test-thread-pool-is-racy-add-.patch 0040-device_tree-Increase-FDT_MAX_SIZE-t.patch - > 0039-device_tree-Increase-FDT_MAX_SIZE-t.patch 0041-vnc-fix-use-after-free.patch - > 0040-vnc-fix-use-after-free.patch 0042-ccid-Fix-dwProtocols-advertisement-.patch - > 0041-ccid-Fix-dwProtocols-advertisement-.patch 0043-tcg-arm-Fix-memory-barrier-encoding.patch - > 0042-tcg-arm-Fix-memory-barrier-encoding.patch 0044-s390-ccw-force-diag-308-subcode-to-.patch - > 0043-s390-ccw-force-diag-308-subcode-to-.patch 0045-nbd-client-fix-nbd_negotiate_simple.patch - > 0044-nbd-client-fix-nbd_negotiate_simple.patch 0046-migration-block-dirty-bitmap-fix-me.patch - > 0045-migration-block-dirty-bitmap-fix-me.patch 0047-nbd-client-Fix-error-messages-durin.patch - > 0046-nbd-client-Fix-error-messages-durin.patch 0048-nbd-client-Relax-handling-of-large-.patch - > 0047-nbd-client-Relax-handling-of-large-.patch 0049-qxl-fix-local-renderer-crash.patch - > 0048-qxl-fix-local-renderer-crash.patch 0050-tcg-Limit-the-number-of-ops-in-a-TB.patch - > 0049-tcg-Limit-the-number-of-ops-in-a-TB.patch 0051-target-arm-Clear-SVE-high-bits-for-.patch - > 0050-target-arm-Clear-SVE-high-bits-for-.patch 0052-cpus-tcg-fix-never-exiting-loop-on-.patch - > 0051-cpus-tcg-fix-never-exiting-loop-on-.patch 0053-s390x-css-disabled-subchannels-cann.patch - > 0052-s390x-css-disabled-subchannels-cann.patch 0054-pc-bios-s390-ccw-struct-tpi_info-mu.patch - > 0053-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0055-virtio-ccw-common-reset-handler.patch - > 0054-virtio-ccw-common-reset-handler.patch 0056-s390x-ccw-make-sure-all-ccw-devices.patch - > 0055-s390x-ccw-make-sure-all-ccw-devices.patch 0057-blockjob-expose-error-string-via-qu.patch - > 0056-blockjob-expose-error-string-via-qu.patch 0058-blockjob-Fix-assertion-in-block_job.patch - > 0057-blockjob-Fix-assertion-in-block_job.patch 0059-qemu-io-Use-purely-string-blockdev-.patch - > 0058-qemu-io-Use-purely-string-blockdev-.patch 0060-qemu-img-Use-only-string-options-in.patch - > 0059-qemu-img-Use-only-string-options-in.patch 0061-nfs-Remove-processed-options-from-Q.patch - > 0060-nfs-Remove-processed-options-from-Q.patch 0062-i386-define-the-ssbd-CPUID-feature-.patch - > 0061-i386-define-the-ssbd-CPUID-feature-.patch 0063-i386-Define-the-Virt-SSBD-MSR-and-h.patch - > 0062-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0064-i386-define-the-AMD-virt-ssbd-CPUID.patch - > 0063-i386-define-the-AMD-virt-ssbd-CPUID.patch 0065-ahci-fix-PxCI-register-race.patch - > 0064-ahci-fix-PxCI-register-race.patch 0066-ccid-card-passthru-fix-regression-i.patch - > 0065-ccid-card-passthru-fix-regression-i.patch 0067-xen-add-block-resize-support-for-xe.patch - > 0066-xen-add-block-resize-support-for-xe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix build failure of skiboot with gcc8 compiler skiboot-hdata-i2c.c-fix-building-with-gcc8.patch- Tweak build service constraints information to avoid failures- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12 * Patches added: 0067-xen-add-block-resize-support-for-xe.patch- Tweak patch file generation to be more git version agnostic. Also change update_git.sh to not reformat spec file by default.- Looks like the right fix for the AHCI issue has been identified upstream. Turns out to also affect Linux guests as well. (bsc#1094406) * Patches dropped: 0065-Revert-replay-don-t-process-async-e.patch 0066-Revert-replay-avoid-recursive-call-.patch 0067-Revert-replay-check-return-values-o.patch 0068-Revert-replay-push-replay_mutex_loc.patch * Patches added: 0065-ahci-fix-PxCI-register-race.patch - Fix a regresssion introduced in v2.12.0 for ccid-card-passthrough (bsc#1095419) 0066-ccid-card-passthru-fix-regression-i.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix qemu-guest-agent service issue (bsc#1094898)- Spectre v4 vulnerability mitigation support for KVM guests. High level description of vulnerability: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. This change permits the new x86 cpu feature flag named "ssbd" to be presented to the guest, given that the host has this feature, and KVM exposes it to the guest as well. For this feature to be enabled, via adding it to the qemu commandline (eg: -cpu ,+spec-ctrl,+ssbd), so the guest OS can take advantage of the feature, spec-ctrl and ssbd support is also required in the host. Another new x86 cpu feature flag named "virt-ssbd" is also added to handle this vulnerability for AMD processors. (CVE-2018-3639 bsc#1092885) 0062-i386-define-the-ssbd-CPUID-feature-.patch 0063-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0064-i386-define-the-AMD-virt-ssbd-CPUID.patch - Replay code introduced an issue for AHCI emulation, where on Windows 10 I/O would stop randomly, and Windows would then reset the AHCI device. The issue is not yet fully identified, but reverting some of those changes is at least for now a workaround. (bsc#1094406) 0065-Revert-replay-don-t-process-async-e.patch 0066-Revert-replay-avoid-recursive-call-.patch 0067-Revert-replay-check-return-values-o.patch 0068-Revert-replay-push-replay_mutex_loc.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Add some upstream fixes targeted for the next stable release 0040-device_tree-Increase-FDT_MAX_SIZE-t.patch 0041-vnc-fix-use-after-free.patch 0042-ccid-Fix-dwProtocols-advertisement-.patch 0043-tcg-arm-Fix-memory-barrier-encoding.patch 0044-s390-ccw-force-diag-308-subcode-to-.patch 0045-nbd-client-fix-nbd_negotiate_simple.patch 0046-migration-block-dirty-bitmap-fix-me.patch 0047-nbd-client-Fix-error-messages-durin.patch 0048-nbd-client-Relax-handling-of-large-.patch 0049-qxl-fix-local-renderer-crash.patch 0050-tcg-Limit-the-number-of-ops-in-a-TB.patch 0051-target-arm-Clear-SVE-high-bits-for-.patch 0052-cpus-tcg-fix-never-exiting-loop-on-.patch 0053-s390x-css-disabled-subchannels-cann.patch 0054-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0055-virtio-ccw-common-reset-handler.patch 0056-s390x-ccw-make-sure-all-ccw-devices.patch 0057-blockjob-expose-error-string-via-qu.patch 0058-blockjob-Fix-assertion-in-block_job.patch 0059-qemu-io-Use-purely-string-blockdev-.patch 0060-qemu-img-Use-only-string-options-in.patch 0061-nfs-Remove-processed-options-from-Q.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix qemu-guest-agent uninstall (bsc#1093169) - Minor tweak to qemu spec file- Update to v2.12.0: See http://wiki.qemu.org/ChangeLog/2.12 Some noteworthy changes: CLI options removed: -tdf, -no-kvm-pit, -drive boot, -net channel, - net dump, -hdachs, -drive,if=scsi HMP commands removed: usb_add, usb_del, host_net_add, host_net_remove Q35 default nic now e1000e AMD SEV support - smbios supports setting data for type 11 tables audio and display support split out as modules - nic for simple creation of guest NIC and host back-end QMP monitor "out-of-band" capability lots of ARM and s390 improvements - Include more of upstream's in-tree tests in the qemu-testsuite package * Patches dropped: 0033-memfd-fix-configure-test.patch 0034-qapi-use-items-values-intead-of-ite.patch 0035-qapi-Use-OrderedDict-from-standard-.patch 0036-qapi-adapt-to-moved-location-of-Str.patch 0037-qapi-Adapt-to-moved-location-of-mak.patch 0038-qapi-remove-q-arg-to-diff-when-comp.patch 0039-qapi-ensure-stable-sort-ordering-wh.patch 0040-qapi-force-a-UTF-8-locale-for-runni.patch 0041-scripts-ensure-signrom-treats-data-.patch 0042-configure-allow-use-of-python-3.patch 0043-input-add-missing-JIS-keys-to-virti.patch 0045-pc-fail-memory-hot-plug-unplug-with.patch 0046-memattrs-add-debug-attribute.patch 0047-exec-add-ram_debug_ops-support.patch 0048-exec-add-debug-version-of-physical-.patch 0049-monitor-i386-use-debug-APIs-when-ac.patch 0050-machine-add-memory-encryption-prope.patch 0051-kvm-update-kvm.h-to-include-memory-.patch 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch 0053-target-i386-add-Secure-Encrypted-Vi.patch 0054-qmp-add-query-sev-command.patch 0055-sev-i386-add-command-to-initialize-.patch 0056-qmp-populate-SevInfo-fields-with-SE.patch 0057-sev-i386-register-the-guest-memory-.patch 0058-kvm-introduce-memory-encryption-API.patch 0059-hmp-add-info-sev-command.patch 0060-sev-i386-add-command-to-create-laun.patch 0061-sev-i386-add-command-to-encrypt-gue.patch 0062-target-i386-encrypt-bios-rom.patch 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch 0064-sev-i386-finalize-the-SEV-guest-lau.patch 0065-hw-i386-set-ram_debug_ops-when-memo.patch 0066-sev-i386-add-debug-encrypt-and-decr.patch 0067-target-i386-clear-C-bit-when-walkin.patch 0068-include-add-psp-sev.h-header-file.patch 0069-sev-i386-add-support-to-query-PLATF.patch 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch 0071-qmp-add-query-sev-launch-measure-co.patch 0072-tests-qmp-test-blacklist-query-sev-.patch 0073-sev-i386-add-migration-blocker.patch 0074-cpu-i386-populate-CPUID-0x8000_001F.patch 0075-migration-warn-about-inconsistent-s.patch 0076-smbios-support-setting-OEM-strings-.patch 0077-smbios-Add-1-terminator-if-any-stri.patch 0078-Remove-problematic-evdev-86-key-fro.patch 0079-tpm-lookup-cancel-path-under-tpm-de.patch 0080-vga-fix-region-calculation.patch skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch skiboot-libc-stdio-vsnprintf.c-add-expli.patch skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch ui-keycodemapdb-Add-missing-QKeyCode-val.patch ui-keycodemapdb-Fix-compat-with-py3-dict.patch * Patches renamed: 0044-Make-installed-scripts-explicitly-p.patch - > 0033-Make-installed-scripts-explicitly-p.patch 0075-migration-warn-about-inconsistent-s.patch - > 0034-migration-warn-about-inconsistent-s.patch 0077-smbios-Add-1-terminator-if-any-stri.patch - > 0035-smbios-Add-1-terminator-if-any-stri.patch 0078-Remove-problematic-evdev-86-key-fro.patch - > 0036-Remove-problematic-evdev-86-key-fro.patch * Patches added: 0037-configure-Modify-python-used-for-io.patch 0038-qemu-io-tests-comment-out-problemat.patch 0039-tests-test-thread-pool-is-racy-add-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix autoinstall of qemu-guest-agent by getting the modalias string right (bsc#1091143)- Guard strncpy call with GCC pragma to disable warning about possible incorrect usage, when in fact it is correct. This is for gcc 8 compatibility (bsc#1090355) ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)- fix qemu-ga service file name (bsc#1089067)- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604) 0080-vga-fix-region-calculation.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Add new look up path "sys/class/tpm" for tpm cancel path based on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615) 0079-tpm-lookup-cancel-path-under-tpm-de.patch- Fix issue with key codes in qemu v2.11 0078-Remove-problematic-evdev-86-key-fro.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11 * Patches added: 0077-smbios-Add-1-terminator-if-any-stri.patch bsc#994082 and bsc#1084316- Add support for setting OEM strings table (fate#323624) 0076-smbios-support-setting-OEM-strings-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- SLE15 KVM (as targeted for RC1) now has the feature exposed. Drop the patch. (bsc#1082276) 0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Change example qemu-ifup script to not depend on bridge-utils. Also update the paths used for ip binary.- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've carried since the initial Spectre v2 patch was added. EDX bit 27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the guest is wrong in general, since the VM doesn't directly control the scheduling of physical hyperthreads. This is left strictly to the L0 hypervisor.- Update to v2.11.1, a stable, (mostly) bug-fix-only release In addition to bug fixes, of necessity fixes are needed to address the Spectre v2 vulnerability by passing along to the guest new hardware features introduced by host microcode updates. A January 2018 release of qemu initially addressed this issue by exposing the feature for all x86 vcpu types, which was the quick and dirty approach, but not the proper solution. We remove that initial patch and now rely on the upstream solution. This update instead defines spec_ctrl and ibpb cpu feature flags as well as new cpu models which are clones of existing models with either -IBRS or -IBPB added to the end of the model name. These new vcpu models explicitly include the new feature(s), whereas the feature flags can be added to the cpu parameter as with other features. In short, for continued Spectre v2 protection, ensure that either the appropriate cpu feature flag is added to the QEMU command-line, or one of the new cpu models is used. Although migration from older versions is supported, the new cpu features won't be properly exposed to the guest until it is restarted with the cpu features explicitly added. A reboot is insufficient. A warning patch is added which attempts to detect a migration from a qemu version which had the quick and dirty fix (it only detects certain cases, but hopefully is helpful.) s390x guest vulnerability to Spectre v2 is also addressed in this update by including support for bpb and ppa/stfle.81 features. (CVE-2017-5715 bsc#1068032) For additional information on Spectre v2 as it relates to QEMU, see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/ - Unfortunately, it was found that our current KVM isn't correctly indicating support for the spec-ctrl feature, so I've added a patch to still detect that support within QEMU. This is of course a temporary kludge until KVM gets fixed. (bsc#1082276) - The SEV support patches are updated to the v9 series. - Fix incompatibility with recent glibc (boo#1081154) - Add Supplements tags for the guest agent package in an attempt to auto-install for QEMU and Xen SUSE Linux guests (fate#323570) * Patches dropped (subsumed by stable update, or reworked in v9): 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch 0050-target-i386-add-memory-encryption-f.patch 0054-accel-add-Secure-Encrypted-Virtuliz.patch 0072-sev-Fix-build-for-non-x86-hosts.patch * Patches added: 0033-memfd-fix-configure-test.patch 0053-target-i386-add-Secure-Encrypted-Vi.patch 0056-qmp-populate-SevInfo-fields-with-SE.patch 0072-tests-qmp-test-blacklist-query-sev-.patch 0073-sev-i386-add-migration-blocker.patch 0074-cpu-i386-populate-CPUID-0x8000_001F.patch 0075-migration-warn-about-inconsistent-s.patch 0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch * Patches renamed (plus some minor code changes): 0051-machine-add-memory-encryption-prope.patch - > 0050-machine-add-memory-encryption-prope.patch 0052-kvm-update-kvm.h-to-include-memory-.patch - > 0051-kvm-update-kvm.h-to-include-memory-.patch 0053-docs-add-AMD-Secure-Encrypted-Virtu.patch - > 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch 0055-sev-add-command-to-initialize-the-m.patch - > 0055-sev-i386-add-command-to-initialize-.patch 0056-sev-register-the-guest-memory-range.patch - > 0057-sev-i386-register-the-guest-memory-.patch 0057-kvm-introduce-memory-encryption-API.patch - > 0058-kvm-introduce-memory-encryption-API.patch 0058-qmp-add-query-sev-command.patch - > 0054-qmp-add-query-sev-command.patch 0060-sev-add-command-to-create-launch-me.patch - > 0060-sev-i386-add-command-to-create-laun.patch 0061-sev-add-command-to-encrypt-guest-me.patch - > 0061-sev-i386-add-command-to-encrypt-gue.patch 0063-sev-add-support-to-LAUNCH_MEASURE-c.patch - > 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch 0064-sev-Finalize-the-SEV-guest-launch-f.patch - > 0064-sev-i386-finalize-the-SEV-guest-lau.patch 0066-sev-add-debug-encrypt-and-decrypt-c.patch - > 0066-sev-i386-add-debug-encrypt-and-decr.patch 0069-sev-add-support-to-query-PLATFORM_S.patch - > 0069-sev-i386-add-support-to-query-PLATF.patch 0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch - > 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Add AMD SEV (Secure Encrypted Virtualization) support by taking the v7 series of the patches posted to qemu ml. (fate#322124) 0046-memattrs-add-debug-attribute.patch 0047-exec-add-ram_debug_ops-support.patch 0048-exec-add-debug-version-of-physical-.patch 0049-monitor-i386-use-debug-APIs-when-ac.patch 0050-target-i386-add-memory-encryption-f.patch 0051-machine-add-memory-encryption-prope.patch 0052-kvm-update-kvm.h-to-include-memory-.patch 0053-docs-add-AMD-Secure-Encrypted-Virtu.patch 0054-accel-add-Secure-Encrypted-Virtuliz.patch 0055-sev-add-command-to-initialize-the-m.patch 0056-sev-register-the-guest-memory-range.patch 0057-kvm-introduce-memory-encryption-API.patch 0058-qmp-add-query-sev-command.patch 0059-hmp-add-info-sev-command.patch 0060-sev-add-command-to-create-launch-me.patch 0061-sev-add-command-to-encrypt-guest-me.patch 0062-target-i386-encrypt-bios-rom.patch 0063-sev-add-support-to-LAUNCH_MEASURE-c.patch 0064-sev-Finalize-the-SEV-guest-launch-f.patch 0065-hw-i386-set-ram_debug_ops-when-memo.patch 0066-sev-add-debug-encrypt-and-decrypt-c.patch 0067-target-i386-clear-C-bit-when-walkin.patch 0068-include-add-psp-sev.h-header-file.patch 0069-sev-add-support-to-query-PLATFORM_S.patch 0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch 0071-qmp-add-query-sev-launch-measure-co.patch 0072-sev-Fix-build-for-non-x86-hosts.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Update python3 related patches now that they are upstream- guest agent: change service file to a template so it can be used by Xen as well. Adjust udev rule accordingly. FATE#324963- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823) 0045-pc-fail-memory-hot-plug-unplug-with.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Modify BuildRequires python references - seabios also needed tweaks for python2 vs python3 * Patches added: seabios-use-python2-explicitly-as-needed.patch seabios-switch-to-python3-as-needed.patch- Try to get our story right wrt python2 vs python3 (bsc#1077564) * Get rid of use of #!/usr/bin/env python in scripts we install * include proposed upstream build system changes needed for building with python2 or python3 * Patches dropped: 0032-scripts-avoid-usr-bin-python-refere.patch * Patches renamed: 0033-Switch-order-of-libraries-for-mpath.patch - > 0032-Switch-order-of-libraries-for-mpath.patch 0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch - > 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch * Patches added: 0034-qapi-use-items-values-intead-of-ite.patch 0035-qapi-Use-OrderedDict-from-standard-.patch 0036-qapi-adapt-to-moved-location-of-Str.patch 0037-qapi-Adapt-to-moved-location-of-mak.patch 0038-qapi-remove-q-arg-to-diff-when-comp.patch 0039-qapi-ensure-stable-sort-ordering-wh.patch 0040-qapi-force-a-UTF-8-locale-for-runni.patch 0041-scripts-ensure-signrom-treats-data-.patch 0042-configure-allow-use-of-python-3.patch 0043-input-add-missing-JIS-keys-to-virti.patch 0044-Make-installed-scripts-explicitly-p.patch Make-installed-scripts-explicitly-python3.patch ui-keycodemapdb-Add-missing-QKeyCode-val.patch ui-keycodemapdb-Fix-compat-with-py3-dict.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Fix packaging dependencies (coreutils) for qemu-ksm package (bsc#1040202)- Pass through to guest info related to x86 security vulnerability (CVE-2017-5715 bsc#1068032) 0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Update to v2.11.0: See http://wiki.qemu.org/ChangeLog/2.11 Some noteworthy changes: - nodefconfig is now deprecated legacy pci-assignment code removed qemu-pr-helper added for handling guest persistant reservations (bsc#891066, bsc#910704, bsc#943807) qemu-keymap tool added for generating keymap files throttle block filter driver added support for a TPM emulator qcow2 image shrink support better support for >=64 vcpus for Windows guests nested KVM related improvements s390 pgste handling now done better EPYC cpu model added (bsc#1052825) improvements in qcow2 buffer handling vhost-user resume issue fixed migration hardening ARMv8-M security extension support more seccomp/sandboxing options available s390 cpu hot-plug improvements misc. virtfs improvements nbd improvements MTTCG improvements misc. TCG improvements scsi correctness improvements SEABIOS now has serial output option * Includes fixes for CVE-2017-15118 bsc#1070147, CVE-2017-15119 bsc#1070144 * Adds KASLR support (fate#323473, bsc#1070281) * Update SLE support docs to match this release * simplify spec file to expect at least sle_version >= 1315 * Patches dropped (upstream): 0013-console-add-question-mark-escape-op.patch 0020-configure-Fix-detection-of-seccomp-.patch 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch 0035-chardev-baum-fix-baum-that-releases.patch 0036-io-fix-temp-directory-used-by-test-.patch 0037-io-fix-check-for-handshake-completi.patch 0038-crypto-fix-test-cert-generation-to-.patch 0039-vhost-user-disable-the-broken-subpr.patch 0040-io-monitor-encoutput-buffer-size-fr.patch 0041-cirrus-fix-oob-access-in-mode4and5-.patch 0042-9pfs-use-g_malloc0-to-allocate-spac.patch * Patches renamed: 0014-Make-char-muxer-more-robust-wrt-sma.patch - > 0013-Make-char-muxer-more-robust-wrt-sma.patch 0015-linux-user-lseek-explicitly-cast-no.patch - > 0014-linux-user-lseek-explicitly-cast-no.patch 0016-AIO-Reduce-number-of-threads-for-32.patch - > 0015-AIO-Reduce-number-of-threads-for-32.patch 0017-xen_disk-Add-suse-specific-flush-di.patch - > 0016-xen_disk-Add-suse-specific-flush-di.patch 0018-qemu-bridge-helper-reduce-security-.patch - > 0017-qemu-bridge-helper-reduce-security-.patch 0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0021-linux-user-properly-test-for-infini.patch - > 0019-linux-user-properly-test-for-infini.patch 0022-roms-Makefile-pass-a-packaging-time.patch - > 0020-roms-Makefile-pass-a-packaging-time.patch 0023-Raise-soft-address-space-limit-to-h.patch - > 0021-Raise-soft-address-space-limit-to-h.patch 0024-increase-x86_64-physical-bits-to-42.patch - > 0022-increase-x86_64-physical-bits-to-42.patch 0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0026-i8254-Fix-migration-from-SLE11-SP2.patch - > 0024-i8254-Fix-migration-from-SLE11-SP2.patch 0027-acpi_piix4-Fix-migration-from-SLE11.patch - > 0025-acpi_piix4-Fix-migration-from-SLE11.patch 0028-Fix-tigervnc-long-press-issue.patch - > 0026-Fix-tigervnc-long-press-issue.patch 0029-string-input-visitor-Fix-uint64-par.patch - > 0027-string-input-visitor-Fix-uint64-par.patch 0030-test-string-input-visitor-Add-int-t.patch - > 0028-test-string-input-visitor-Add-int-t.patch 0031-test-string-input-visitor-Add-uint6.patch - > 0029-test-string-input-visitor-Add-uint6.patch 0032-tests-Add-QOM-property-unit-tests.patch - > 0030-tests-Add-QOM-property-unit-tests.patch 0033-tests-Add-scsi-disk-test.patch - > 0031-tests-Add-scsi-disk-test.patch 0043-scripts-avoid-usr-bin-python-refere.patch - > 0032-scripts-avoid-usr-bin-python-refere.patch * We need the multipath libraries link order switched 0033-Switch-order-of-libraries-for-mpath.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Avoid ref to /usr/bin/python in vmstate-static-checker.py script 0043-scripts-avoid-usr-bin-python-refere.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- For SLE15, it's been decided to stop providing SDL based graphics due to packaging constraints. Long ago GTK became the default, and there is little benefit to providing both. For now, keep it enabled for openSUSE (Tumblweed and Leap), but consider it marked deprecated there and if no one complains it will be removed for openSUSE as well in the near future. (fate#324465) - Fix problem building skiboot.lid skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch- Wrap analyze-migration and vmstate-static-checker into tools from qemu scripts folder, also changed introduction of qemu-tools in spec file - Move supportplugin position in spec file- Add announcement in support docs about qed storage format no longer being supported in next major SLE release (SLE15) (fate#324200) - Address various security/stability issues * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942) 0040-io-monitor-encoutput-buffer-size-fr.patch * Fix OOB access in cirrus vga device emulation (CVE-2017-15289 bsc#1063122) 0041-cirrus-fix-oob-access-in-mode4and5-.patch * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069) 0042-9pfs-use-g_malloc0-to-allocate-spac.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Don't tie glusterfs support to specific arch - Build skiboot firmware (OPAL), particularly since it's fairly easy to do so skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch skiboot-libc-stdio-vsnprintf.c-add-expli.patch- Added the global macro 'with_glusterfs' in order to re-enable glusterfs support. The macro enable easier future adjustments for various ARCH/targets/requiremnets. At first glusterfs support is enabled for openSUSE Leap 42.x and Factory for ARCH x86_64.- Add dependencies on ovmf (uefi) for the qemu-x86 and qemu-arm packages - Fix s390-netboot.img to be included with qemu-s390 package, not qemu-ppc- Update to v2.10.1, a stable, bug-fix-only release * fixes bsc#1056386 CVE-2017-13673, bsc#1056334 CVE-2017-13672, bsc#1057585 CVE-2017-14167 * Patches dropped (upstream): 0034-slirp-fix-clearing-ifq_so-from-pend.patch 0035-s390-ccw-Fix-alignment-for-CCW1.patch 0038-s390x-ais-for-2.10-stable-disable-a.patch 0039-s390x-cpumodel-remove-ais-from-z14-.patch * Patches renamed: 0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch - > 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch 0037-chardev-baum-fix-baum-that-releases.patch - > 0035-chardev-baum-fix-baum-that-releases.patch 0040-io-fix-temp-directory-used-by-test-.patch - > 0036-io-fix-temp-directory-used-by-test-.patch 0041-io-fix-check-for-handshake-completi.patch - > 0037-io-fix-check-for-handshake-completi.patch 0042-crypto-fix-test-cert-generation-to-.patch - > 0038-crypto-fix-test-cert-generation-to-.patch 0043-vhost-user-disable-the-broken-subpr.patch - > 0039-vhost-user-disable-the-broken-subpr.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix failures and potential failures in qemu-testsuite 0040-io-fix-temp-directory-used-by-test-.patch 0041-io-fix-check-for-handshake-completi.patch 0042-crypto-fix-test-cert-generation-to-.patch 0043-vhost-user-disable-the-broken-subpr.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix migration issue on s390 0038-s390x-ais-for-2.10-stable-disable-a.patch 0039-s390x-cpumodel-remove-ais-from-z14-.patch - Fix case of not being able to build from rpm sources due to undefined macro (boo#1057966) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix baum that release brlapi twice (bsc#1060045) 0037-chardev-baum-fix-baum-that-releases.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- For SLE15 pre-release testing, add support for the EPYC processor. This will be officially supported once it is included in the v2.11 release. (bsc#1052825) 0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch - Fix some support statements in our SLE support documents.- Update BuildRequires packages libibverbs-devel and librdmacm-devel to the more correct rdma-core-devel - Enable seccomp for s390x, aarch64, and ppc64le - Fix OOB issue (use after free) in slirp network stack (CVE-2017-13711 bsc#1056291) 0034-slirp-fix-clearing-ifq_so-from-pend.patch - Fix a misalignment in the s390 ccw firmware (bsc#1056680) 0035-s390-ccw-Fix-alignment-for-CCW1.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Add a supportconfig plugin qemu-supportconfig FATE#323661- Update to v2.10.0: See http://wiki.qemu.org/ChangeLog/2.10 - Dropped internal only patches used to support SUSE Studio Testdrive as well as other miscellaneous patches deemed unused and not worth carrying (bsc#1046783, bsc#1055125, bsc#1055127) - Update SLE support statements in anticipation of SLE15 - disable SAN boot capability from virtio pxe rom used in v1.4 and older pc machine types due to rom size requirements. Hopefully a better solution can be found which doesn't impact functionality * Patches added: ipxe-stub-out-the-SAN-req-s-in-int13.patch * Patches renamed: 0006-qemu-cvs-gettimeofday.patch -> 0003-qemu-cvs-gettimeofday.patch 0007-qemu-cvs-ioctl_debug.patch -> 0004-qemu-cvs-ioctl_debug.patch 0008-qemu-cvs-ioctl_nodirection.patch -> 0005-qemu-cvs-ioctl_nodirection.patch 0009-linux-user-add-binfmt-wrapper-for-a.patch -> 0006-linux-user-add-binfmt-wrapper-for-a.patch 0010-PPC-KVM-Disable-mmu-notifier-check.patch -> 0007-PPC-KVM-Disable-mmu-notifier-check.patch 0011-linux-user-fix-segfault-deadlock.patch -> 0008-linux-user-fix-segfault-deadlock.patch 0012-linux-user-binfmt-support-host-bina.patch -> 0009-linux-user-binfmt-support-host-bina.patch 0013-linux-user-Fake-proc-cpuinfo.patch -> 0010-linux-user-Fake-proc-cpuinfo.patch 0014-linux-user-XXX-disable-fiemap.patch -> 0011-linux-user-XXX-disable-fiemap.patch 0017-linux-user-use-target_ulong.patch -> 0012-linux-user-use-target_ulong.patch 0021-console-add-question-mark-escape-op.patch -> 0013-console-add-question-mark-escape-op.patch 0022-Make-char-muxer-more-robust-wrt-sma.patch -> 0014-Make-char-muxer-more-robust-wrt-sma.patch 0023-linux-user-lseek-explicitly-cast-no.patch -> 0015-linux-user-lseek-explicitly-cast-no.patch 0025-AIO-Reduce-number-of-threads-for-32.patch -> 0016-AIO-Reduce-number-of-threads-for-32.patch 0027-xen_disk-Add-suse-specific-flush-di.patch -> 0017-xen_disk-Add-suse-specific-flush-di.patch 0028-qemu-bridge-helper-reduce-security-.patch -> 0018-qemu-bridge-helper-reduce-security-.patch 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0030-configure-Fix-detection-of-seccomp-.patch -> 0020-configure-Fix-detection-of-seccomp-.patch 0031-linux-user-properly-test-for-infini.patch -> 0020-linux-user-properly-test-for-infini.patch 0033-roms-Makefile-pass-a-packaging-time.patch -> 0022-roms-Makefile-pass-a-packaging-time.patch 0034-Raise-soft-address-space-limit-to-h.patch -> 0023-Raise-soft-address-space-limit-to-h.patch 0035-increase-x86_64-physical-bits-to-42.patch -> 0024-increase-x86_64-physical-bits-to-42.patch 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0037-i8254-Fix-migration-from-SLE11-SP2.patch -> 0026-i8254-Fix-migration-from-SLE11-SP2.patch 0038-acpi_piix4-Fix-migration-from-SLE11.patch -> 0027-acpi_piix4-Fix-migration-from-SLE11.patch 0039-Fix-tigervnc-long-press-issue.patch -> 0028-Fix-tigervnc-long-press-issue.patch 0041-string-input-visitor-Fix-uint64-par.patch -> 0029-string-input-visitor-Fix-uint64-par.patch 0042-test-string-input-visitor-Add-int-t.patch -> 0030-test-string-input-visitor-Add-int-t.patch 0043-test-string-input-visitor-Add-uint6.patch -> 0031-test-string-input-visitor-Add-uint6.patch 0044-tests-Add-QOM-property-unit-tests.patch -> 0032-tests-Add-QOM-property-unit-tests.patch 0045-tests-Add-scsi-disk-test.patch -> 0033-tests-Add-scsi-disk-test.patch * Patches dropped (upstream unless otherwise noted): 0003-qemu-cvs-alsa_bitfield.patch (deemed not needed) 0004-qemu-cvs-alsa_ioctl.patch (deemed not needed) 0005-qemu-cvs-alsa_mmap.patch (deemed not needed) 0015-slirp-nooutgoing.patch (bsc#1055125) 0016-vnc-password-file-and-incoming-conn.patch (bsc#1055127) 0018-block-Add-support-for-DictZip-enabl.patch (bsc#1046783) 0019-block-Add-tar-container-format.patch (bsc#1046783) 0020-Legacy-Patch-kvm-qemu-preXX-dictzip.patch (bsc#1046783) 0024-configure-Enable-PIE-for-ppc-and-pp.patch (obsolete) 0026-dictzip-Fix-on-big-endian-systems.patch (bsc#1046783) 0032-linux-user-remove-all-traces-of-qem.patch 0040-fix-xen-hvm-direct-kernel-boot.patch (bsc#970791) 0046-RFC-update-Linux-headers-from-irqs-.patch 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch 0048-input-Add-trace-event-for-empty-key.patch 0049-ACPI-don-t-call-acpi_pcihp_device_p.patch 0050-i386-Allow-cpuid-bit-override.patch (was for testing only) 0051-input-limit-kbd-queue-depth.patch 0052-audio-release-capture-buffers.patch 0053-scsi-avoid-an-off-by-one-error-in-m.patch 0054-vmw_pvscsi-check-message-ring-page-.patch 0055-9pfs-local-forbid-client-access-to-.patch 0056-jazz_led-fix-bad-snprintf.patch 0057-slirp-smb-Replace-constant-strings-.patch 0058-altera_timer-fix-incorrect-memset.patch 0059-Hacks-for-building-on-gcc-7-Fedora-.patch 0060-9pfs-local-fix-unlink-of-alien-file.patch 0061-megasas-do-not-read-DCMD-opcode-mor.patch 0062-megasas-always-store-SCSIRequest-in.patch 0063-nbd-Fully-initialize-client-in-case.patch 0064-9pfs-local-remove-use-correct-path-.patch 0065-hid-Reset-kbd-modifiers-on-reset.patch 0066-input-Decrement-queue-count-on-kbd-.patch 0067-xhci-only-update-dequeue-ptr-on-com.patch 0068-vnc-Set-default-kbd-delay-to-10ms.patch 0069-qemu-nbd-Ignore-SIGPIPE.patch 0070-usb-redir-fix-stack-overflow-in-usb.patch 0072-slirp-check-len-against-dhcp-option.patch 0071-exec-use-qemu_ram_ptr_length-to-acc.patch 0073-xen-mapcache-store-dma-information-.patch 0074-exec-Add-lock-parameter-to-qemu_ram.patch 0075-Replace-struct-ucontext-with-uconte.patch ipxe-build-Avoid-implicit-fallthrough-warnings-on-GCC-7.patch ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch ipxe-ath-Add-missing-break-statements.patch ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix package build failure as of glibc v2.26 update in Factory (boo#1055587) 0075-Replace-struct-ucontext-with-uconte.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Remove redundant prerequire for pwdutils- Postrequire acl for setfacl- Prerequire shadow for groupadd- The recent security fix for CVE-2017-11334 adversely affects Xen. Include two additional patches to make sure Xen is going to be OK. 0073-xen-mapcache-store-dma-information-.patch 0074-exec-Add-lock-parameter-to-qemu_ram.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Pre-add group kvm for qemu-tools (bsc#1011144)- Fixed a few more inaccuracies in the support docs.- Address various security/stability issues * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664) 0069-qemu-nbd-Ignore-SIGPIPE.patch * Fix DOS from stack overflow in debug messages of usb redirection support (bsc#1047674 CVE-2017-10806) 0070-usb-redir-fix-stack-overflow-in-usb.patch * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902) 0071-exec-use-qemu_ram_ptr_length-to-acc.patch * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381) 0072-slirp-check-len-against-dhcp-option.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Fix support docs to indicate ARM64 is now fully L3 supported in SLES 12 SP3. Apply a few additional clarifications in the support docs. (bsc#1050268) - Adjust to libvdeplug-devel package naming changes.- Fix migration with xhci (bsc#1048296) 0067-xhci-only-update-dequeue-ptr-on-com.patch - Increase VNC delay to fix missing keyboard input events (bsc#1031692) 0068-vnc-Set-default-kbd-delay-to-10ms.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Remove build dependency package iasl used for seabios- Fixed stuck state during usb keyboard reset (bsc#1044936) 0065-hid-Reset-kbd-modifiers-on-reset.patch - Fixed keyboard events getting lost (bsc#1044936) 0066-input-Decrement-queue-count-on-kbd-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Use most recent compiler to build size-critical firmware, instead of hard-coding gcc6 for all target versions (bsc#1043390) * A few upstream ipxe patches were needed for gcc7 compatibility: ipxe-ath-Add-missing-break-statements.patch ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch - Add --no-renames to the git format-patch command in the git workflow script for better patch compatibility - Address various security/stability issues * Fix potential privilege escalation in virtfs (CVE-2016-9602 bsc#1020427) 0060-9pfs-local-fix-unlink-of-alien-file.patch * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296) 0061-megasas-do-not-read-DCMD-opcode-mor.patch 0062-megasas-always-store-SCSIRequest-in.patch * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808) 0063-nbd-Fully-initialize-client-in-case.patch * Fix regression introduced by recent virtfs security fixes (bsc#1045035) 0064-9pfs-local-remove-use-correct-path-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Backport ipxe to support FirstBurstLength (bsc#1040476) ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan) 0056-jazz_led-fix-bad-snprintf.patch 0057-slirp-smb-Replace-constant-strings-.patch 0058-altera_timer-fix-incorrect-memset.patch 0059-Hacks-for-building-on-gcc-7-Fedora-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495) 0055-9pfs-local-forbid-client-access-to-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Address various security/stability issues * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334) 0051-input-limit-kbd-queue-depth.patch * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242) 0052-audio-release-capture-buffers.patch * Fix OOB access in megasas device emulation (CVE-2017-8380 bsc#1037336) 0053-scsi-avoid-an-off-by-one-error-in-m.patch * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211) 0054-vmw_pvscsi-check-message-ring-page-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Fix building packages for some older distros. - Further refine our handling of building firmware (or not) for the various arch's and distro versions we build for. Note that if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream binary blobs are used, which may have migration incompatibilities with previous versions of qemu provided.- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen HVM guests got broken (bsc#1034131) 0049-ACPI-don-t-call-acpi_pcihp_device_p.patch - Include experimental, unsupported feature to assist in some performance analysis work. 0050-i386-Allow-cpuid-bit-override.patch- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9 - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9 * Includes fix for CVE-2017-7471, a virtfs security issue. - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Add empty keyboard queue tracepoint to help openQA testing work better (bsc#1031692) 0048-input-Add-trace-event-for-empty-key.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.9 - Enable ceph/rbd support for s390x (bsc#1030068) - Enable ceph/rbd support for ppc* as available - Update ARM in-kernel-timers patch (bsc#1033416) * Patches renamed: 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch 0042-string-input-visitor-Fix-uint64-par.patch -> 0041-string-input-visitor-Fix-uint64-par.patch 0043-test-string-input-visitor-Add-int-t.patch -> 0042-test-string-input-visitor-Add-int-t.patch 0044-test-string-input-visitor-Add-uint6.patch -> 0043-test-string-input-visitor-Add-uint6.patch 0045-tests-Add-QOM-property-unit-tests.patch -> 0044-tests-Add-QOM-property-unit-tests.patch 0046-tests-Add-scsi-disk-test.patch -> 0045-tests-Add-scsi-disk-test.patch * Patches added (support patch): 0046-RFC-update-Linux-headers-from-irqs-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.9 * Patches dropped (included in upstream source archive): 0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch 0048-i386-Replace-uint32_t-with-FeatureW.patch 0049-i386-Don-t-override-cpu-options-on-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9 - Added additional documentation provided with v2.9.0 - Fix build failure with gcc7 (bsc#1031340) ipxe-build-Avoid-implicit-fallthrough-warnings-on-GCC-7.patch - Made miscellaneous spec file refinements- The support documents included are now fairly accurate for the arm and s390 world, and the x86 version also received a few tweaks. Also included in those docs is a url reference to upstream qemu deprecation plans and discussions. (fate#321146) - Add post v2.9.0-rc2 upstream patches which fix -cpu host and -cpu max feature overrides for libvirt compatability. 0048-i386-Replace-uint32_t-with-FeatureW.patch 0049-i386-Don-t-override-cpu-options-on-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.9 * Includes fix for in guest privilege escalation when using TCG (bsc#1030624) * Patches dropped (equivalent included in upstream source archive): 0047-linux-user-exclude-cpu-model-code-w.patch - Fix failure booting SLE12-SP2 Aarch64 guest (bsc#1031384) 0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.9 * Patches dropped (no longer needed based on what we now build for): 0024-virtfs-proxy-helper-Provide-__u64-f.patch * Patches dropped (included in upstream source archive): 0034-dma-rc4030-limit-interval-timer-rel.patch * Patches renamed: 0025-configure-Enable-PIE-for-ppc-and-pp.patch -> 0024-configure-Enable-PIE-for-ppc-and-pp.patch 0026-AIO-Reduce-number-of-threads-for-32.patch -> 0025-AIO-Reduce-number-of-threads-for-32.patch 0027-dictzip-Fix-on-big-endian-systems.patch -> 0026-dictzip-Fix-on-big-endian-systems.patch 0028-xen_disk-Add-suse-specific-flush-di.patch -> 0027-xen_disk-Add-suse-specific-flush-di.patch 0029-qemu-bridge-helper-reduce-security-.patch -> 0028-qemu-bridge-helper-reduce-security-.patch 0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0031-configure-Fix-detection-of-seccomp-.patch -> 0030-configure-Fix-detection-of-seccomp-.patch 0032-linux-user-properly-test-for-infini.patch -> 0031-linux-user-properly-test-for-infini.patch 0033-linux-user-remove-all-traces-of-qem.patch -> 0032-linux-user-remove-all-traces-of-qem.patch 0035-roms-Makefile-pass-a-packaging-time.patch -> 0033-roms-Makefile-pass-a-packaging-time.patch 0036-Raise-soft-address-space-limit-to-h.patch -> 0034-Raise-soft-address-space-limit-to-h.patch 0037-increase-x86_64-physical-bits-to-42.patch -> 0035-increase-x86_64-physical-bits-to-42.patch 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0039-i8254-Fix-migration-from-SLE11-SP2.patch -> 0037-i8254-Fix-migration-from-SLE11-SP2.patch 0040-acpi_piix4-Fix-migration-from-SLE11.patch -> 0038-acpi_piix4-Fix-migration-from-SLE11.patch 0041-Fix-tigervnc-long-press-issue.patch -> 0039-Fix-tigervnc-long-press-issue.patch 0042-fix-xen-hvm-direct-kernel-boot.patch -> 0040-fix-xen-hvm-direct-kernel-boot.patch 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch 0044-string-input-visitor-Fix-uint64-par.patch -> 0042-string-input-visitor-Fix-uint64-par.patch 0045-test-string-input-visitor-Add-int-t.patch -> 0043-test-string-input-visitor-Add-int-t.patch 0046-test-string-input-visitor-Add-uint6.patch -> 0044-test-string-input-visitor-Add-uint6.patch 0047-tests-Add-QOM-property-unit-tests.patch -> 0045-tests-Add-QOM-property-unit-tests.patch 0048-tests-Add-scsi-disk-test.patch -> 0046-tests-Add-scsi-disk-test.patch 0049-linux-user-exclude-cpu-model-code-w.patch -> 0047-linux-user-exclude-cpu-model-code-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.9 * Updated version carries fixes for the following reported issues: CVE-2016-9602 bsc#1020427, CVE-2016-9923 bsc#1014703, CVE-2017-2630 bsc#1025396, CVE-2017-2633 bsc#1026612, CVE-2017-5579 bsc#1021741, CVE-2017-5931 bsc#1024114, CVE-2017-5973 bsc#1025109, CVE-2017-5987 bsc#1025311, CVE-2017-6058 bsc#1025837, CVE-2017-6505 bsc#1028184 * Patches dropped: seabios_128kb.patch (no longer required) * Patches dropped (included in upstream source archive): 0035-net-imx-limit-buffer-descriptor-cou.patch 0045-virtio-gpu-call-cleanup-mapping-fun.patch 0051-virtio-gpu-fix-information-leak-in-.patch 0052-display-cirrus-ignore-source-pitch-.patch 0053-s390x-kvm-fix-small-race-reboot-vs..patch 0054-target-s390x-use-qemu-cpu-model-in-.patch 0056-tests-check-path-to-avoid-a-failing.patch 0057-display-virtio-gpu-3d-check-virgl-c.patch 0058-watchdog-6300esb-add-exit-function.patch 0059-virtio-gpu-3d-fix-memory-leak-in-re.patch 0060-virtio-gpu-fix-memory-leak-in-resou.patch 0061-virtio-fix-vq-inuse-recalc-after-mi.patch 0062-audio-es1370-add-exit-function.patch 0063-audio-ac97-add-exit-function.patch 0064-megasas-fix-guest-triggered-memory-.patch 0065-cirrus-handle-negative-pitch-in-cir.patch 0066-cirrus-fix-blit-address-mask-handli.patch 0067-cirrus-fix-oob-access-issue-CVE-201.patch 0068-usb-ccid-check-ccid-apdu-length.patch 0069-sd-sdhci-check-data-length-during-d.patch 0070-virtio-gpu-fix-resource-leak-in-vir.patch 0071-cirrus-fix-patterncopy-checks.patch 0072-cirrus-add-blit_is_unsafe-call-to-c.patch * Patches renamed: 0036-roms-Makefile-pass-a-packaging-time.patch -> 0035-roms-Makefile-pass-a-packaging-time.patch 0037-Raise-soft-address-space-limit-to-h.patch -> 0036-Raise-soft-address-space-limit-to-h.patch 0038-increase-x86_64-physical-bits-to-42.patch -> 0037-increase-x86_64-physical-bits-to-42.patch 0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0040-i8254-Fix-migration-from-SLE11-SP2.patch -> 0039-i8254-Fix-migration-from-SLE11-SP2.patch 0041-acpi_piix4-Fix-migration-from-SLE11.patch -> 0040-acpi_piix4-Fix-migration-from-SLE11.patch 0042-Fix-tigervnc-long-press-issue.patch -> 0041-Fix-tigervnc-long-press-issue.patch 0043-fix-xen-hvm-direct-kernel-boot.patch -> 0042-fix-xen-hvm-direct-kernel-boot.patch 0044-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch 0046-string-input-visitor-Fix-uint64-par.patch -> 0044-string-input-visitor-Fix-uint64-par.patch 0047-test-string-input-visitor-Add-int-t.patch -> 0045-test-string-input-visitor-Add-int-t.patch 0048-test-string-input-visitor-Add-uint6.patch -> 0046-test-string-input-visitor-Add-uint6.patch 0049-tests-Add-QOM-property-unit-tests.patch -> 0047-tests-Add-QOM-property-unit-tests.patch 0050-tests-Add-scsi-disk-test.patch -> 0048-tests-Add-scsi-disk-test.patch 0055-linux-user-exclude-cpu-model-code-w.patch -> 0049-linux-user-exclude-cpu-model-code-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Buildignore for the global gcc-PIE, as this package enables PIE on its own and has troubles if all use it. (meissner@suse.com)- Address various security/stability issues * Fix OOB access in virito-gpu-3d (CVE-2016-10028 bsc#1017084 bsc#1016503) 0057-display-virtio-gpu-3d-check-virgl-c.patch * Fix DOS in Intel 6300ESB device emulation (CVE-2016-10155 bsc#1021129) 0058-watchdog-6300esb-add-exit-function.patch * Fix DOS in virtio-gpu-3d (CVE-2017-5552 bsc#1021195) 0059-virtio-gpu-3d-fix-memory-leak-in-re.patch * Fix DOS in virtio-gpu (CVE-2017-5578 bsc#1021481) 0060-virtio-gpu-fix-memory-leak-in-resou.patch * Fix cause of infrequent migration failures from bad virtio device state. (bsc#1020928) 0061-virtio-fix-vq-inuse-recalc-after-mi.patch * Fix DOS in es1370 emulated audio device (CVE-2017-5526 bsc#1020589) 0062-audio-es1370-add-exit-function.patch * Fix DOS in ac97 emulated audio device (CVE-2017-5525 bsc#1020491) 0063-audio-ac97-add-exit-function.patch * Fix DOS in megasas device emulation (CVE-2017-5856 bsc#1023053) 0064-megasas-fix-guest-triggered-memory-.patch * Fix various inaccuracies in cirrus vga device emulation 0065-cirrus-handle-negative-pitch-in-cir.patch 0066-cirrus-fix-blit-address-mask-handli.patch * Fix OOB access in cirrus vga emulation (CVE-2017-2615 bsc#1023004) 0067-cirrus-fix-oob-access-issue-CVE-201.patch * Fix DOS in usb CCID card device emulator (CVE-2017-5898 bsc#1023907) 0068-usb-ccid-check-ccid-apdu-length.patch * Fix OOB access in SDHCI device emulation (CVE-2017-5667 bsc#1022541) 0069-sd-sdhci-check-data-length-during-d.patch * Fix DOS in virtio-gpu-3d (CVE-2017-5857 bsc#1023073) 0070-virtio-gpu-fix-resource-leak-in-vir.patch * Fix cirrus patterncopy checks 0071-cirrus-fix-patterncopy-checks.patch * Fix OOB access in cirrus vga emulation (CVE-2017-2620 bsc#1024972) 0072-cirrus-add-blit_is_unsafe-call-to-c.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8- Fix name of s390x specific sysctl configuration file to end with .conf (bsc#1026583)- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Check that sysfs path exists before running test which requires it. This allows qemu-testsuite to succeed in local build service chroot based package build. 0056-tests-check-path-to-avoid-a-failing.patch- Factory and SLE12-SP3 got a name change in the dtc devel package: libfdt1-devel -> libfdt-devel. Adjust our spec file accordingly.- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Patches added: 0055-linux-user-exclude-cpu-model-code-w.patch- Make sure qemu guest agent is usable as soon as qemu-guest-agent package is installed. The previous post script was still not doing the job. - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Fix potential hang/crash rebooting s390x guest 0053-s390x-kvm-fix-small-race-reboot-vs..patch * Fix s390x linux-user failure since v2.8.0 update 0054-target-s390x-use-qemu-cpu-model-in-.patch- Merge qemu packages from openSUSE and SUSE SLE releases together for the v2.8 qemu update. The qemu.changes file is the openSUSE version with this entry providing CVE, FATE, and bugzilla references from the SUSE SLE qemu package to date (see below) - Updated to v2.8.0: See http://wiki.qemu-project.org/ChangeLog/2.8 * For SUSE SLE-12-SP3, update relates to fate#319684, fate#321331, fate#321335, fate#321339, fate#321349, fate#321857 * For best compatibility, qemu-ifup and kvm_stat scripts now owned by qemu package * Build ipxe roms with gcc6 to maintain SLE legacy migration compatibility requirements * qmp-commands.txt file removed, to resurface in future doc reorganization * qemu-tech.html file merged into other existing doc * trace-events renamed to trace-events-all - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Patches dropped (upstream): 0013-linux-user-lock-tcg.patch 0014-linux-user-Run-multi-threaded-code-.patch 0015-linux-user-lock-tb-flushing-too.patch 0017-linux-user-implement-FS_IOC_GETFLAG.patch 0018-linux-user-implement-FS_IOC_SETFLAG.patch 0034-xen-SUSE-xenlinux-unplug-for-emulat.patch 0039-Fix-tlb_vaddr_to_host-with-CONFIG_U.patch 0041-vmsvga-correct-bitmap-and-pixmap-si.patch 0042-scsi-mptconfig-fix-an-assert-expres.patch 0043-scsi-mptconfig-fix-misuse-of-MPTSAS.patch 0044-scsi-pvscsi-limit-loop-to-fetch-SG-.patch 0045-usb-xhci-fix-memory-leak-in-usb_xhc.patch 0046-scsi-mptsas-use-g_new0-to-allocate-.patch 0047-scsi-pvscsi-limit-process-IO-loop-t.patch 0048-virtio-add-check-for-descriptor-s-m.patch 0049-net-mcf-limit-buffer-descriptor-cou.patch 0050-usb-ehci-fix-memory-leak-in-ehci_pr.patch 0051-xhci-limit-the-number-of-link-trbs-.patch 0052-9pfs-allocate-space-for-guest-origi.patch 0053-9pfs-fix-memory-leak-in-v9fs_link.patch 0054-9pfs-fix-potential-host-memory-leak.patch 0055-9pfs-fix-information-leak-in-xattr-.patch 0056-9pfs-fix-memory-leak-in-v9fs_xattrc.patch 0057-9pfs-fix-memory-leak-in-v9fs_write.patch 0058-char-serial-check-divider-value-aga.patch 0059-net-pcnet-check-rx-tx-descriptor-ri.patch 0060-net-eepro100-fix-memory-leak-in-dev.patch 0061-net-rocker-set-limit-to-DMA-buffer-.patch 0062-net-vmxnet-initialise-local-tx-desc.patch 0063-net-rtl8139-limit-processing-of-rin.patch 0064-audio-intel-hda-check-stream-entry-.patch 0065-virtio-gpu-fix-memory-leak-in-virti.patch 0066-9pfs-fix-integer-overflow-issue-in-.patch slof_xhci.patch * Patches renamed: 0016-linux-user-Fake-proc-cpuinfo.patch -> 0013-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-XXX-disable-fiemap.patch -> 0014-linux-user-XXX-disable-fiemap.patch 0020-slirp-nooutgoing.patch -> 0015-slirp-nooutgoing.patch 0021-vnc-password-file-and-incoming-conn.patch -> 0016-vnc-password-file-and-incoming-conn.patch 0022-linux-user-use-target_ulong.patch -> 0017-linux-user-use-target_ulong.patch 0023-block-Add-support-for-DictZip-enabl.patch -> 0018-block-Add-support-for-DictZip-enabl.patch 0024-block-Add-tar-container-format.patch -> 0019-block-Add-tar-container-format.patch 0025-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0020-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0026-console-add-question-mark-escape-op.patch -> 0021-console-add-question-mark-escape-op.patch 0027-Make-char-muxer-more-robust-wrt-sma.patch -> 0022-Make-char-muxer-more-robust-wrt-sma.patch 0028-linux-user-lseek-explicitly-cast-no.patch -> 0023-linux-user-lseek-explicitly-cast-no.patch 0029-virtfs-proxy-helper-Provide-__u64-f.patch -> 0024-virtfs-proxy-helper-Provide-__u64-f.patch 0030-configure-Enable-PIE-for-ppc-and-pp.patch -> 0025-configure-Enable-PIE-for-ppc-and-pp.patch 0031-AIO-Reduce-number-of-threads-for-32.patch -> 0026-AIO-Reduce-number-of-threads-for-32.patch 0032-dictzip-Fix-on-big-endian-systems.patch -> 0027-dictzip-Fix-on-big-endian-systems.patch 0033-xen_disk-Add-suse-specific-flush-di.patch -> 0028-xen_disk-Add-suse-specific-flush-di.patch 0035-qemu-bridge-helper-reduce-security-.patch -> 0029-qemu-bridge-helper-reduce-security-.patch 0036-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0037-configure-Fix-detection-of-seccomp-.patch -> 0031-configure-Fix-detection-of-seccomp-.patch 0038-linux-user-properly-test-for-infini.patch -> 0032-linux-user-properly-test-for-infini.patch 0040-linux-user-remove-all-traces-of-qem.patch -> 0033-linux-user-remove-all-traces-of-qem.patch 0067-dma-rc4030-limit-interval-timer-rel.patch -> 0034-dma-rc4030-limit-interval-timer-rel.patch 0068-net-imx-limit-buffer-descriptor-cou.patch -> 0035-net-imx-limit-buffer-descriptor-cou.patch 0069-roms-Makefile-pass-a-packaging-time.patch -> 0036-roms-Makefile-pass-a-packaging-time.patch * Patches added: 0037-Raise-soft-address-space-limit-to-h.patch 0038-increase-x86_64-physical-bits-to-42.patch 0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0040-i8254-Fix-migration-from-SLE11-SP2.patch 0041-acpi_piix4-Fix-migration-from-SLE11.patch 0042-Fix-tigervnc-long-press-issue.patch 0043-fix-xen-hvm-direct-kernel-boot.patch 0044-ARM-KVM-Enable-in-kernel-timers-wit.patch 0045-virtio-gpu-call-cleanup-mapping-fun.patch 0046-string-input-visitor-Fix-uint64-par.patch 0047-test-string-input-visitor-Add-int-t.patch 0048-test-string-input-visitor-Add-uint6.patch 0049-tests-Add-QOM-property-unit-tests.patch 0050-tests-Add-scsi-disk-test.patch 0051-virtio-gpu-fix-information-leak-in-.patch 0052-display-cirrus-ignore-source-pitch-.patch ipxe-use-gcc6-for-more-compact-code.patch * SLE patches dropped (accounted for in above listed changes): 0002-qemu-0.9.0.cvs-binfmt.patch 0009-block-vmdk-Support-creation-of-SCSI.patch 0010-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch 0014-linux-user-Ignore-broken-loop-ioctl.patch 0015-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch 0024-linux-user-add-more-blk-ioctls.patch 0025-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-_u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch 0034-Raise-soft-address-space-limit-to-h.patch 0035-increase-x86_64-physical-bits-to-42.patch 0036-vnc-provide-fake-color-map.patch 0037-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0038-i8254-Fix-migration-from-SLE11-SP2.patch 0039-acpi_piix4-Fix-migration-from-SLE11.patch 0040-qtest-Increase-socket-timeout-to-ac.patch 0041-dictzip-Fix-on-big-endian-systems.patch 0043-xen_disk-Add-suse-specific-flush-di.patch 0044-Split-large-discard-requests-from-b.patch 0045-fix-xen-hvm-direct-kernel-boot.patch 0046-xen-introduce-dummy-system-device.patch 0047-xen-write-information-about-support.patch 0048-xen-add-pvUSB-backend.patch 0049-xen-move-xen_sysdev-to-xen_backend..patch 0050-vnc-add-configurable-keyboard-delay.patch 0051-xen-SUSE-xenlinux-unplug-for-emulat.patch 0052-configure-add-echo_version-helper.patch 0053-configure-support-vte-2.91.patch 0054-scsi-esp-fix-migration.patch 0055-hw-arm-virt-mark-the-PCIe-host-cont.patch 0056-xen-when-removing-a-backend-don-t-r.patch 0057-xen-drain-submit-queue-in-xen-usb-b.patch 0058-qcow2-avoid-extra-flushes-in-qcow2.patch 0059-qemu-bridge-helper-reduce-security-.patch 0060-xen-use-a-common-function-for-pv-an.patch 0061-xen_platform-unplug-also-SCSI-disks.patch 0062-virtio-check-vring-descriptor-buffe.patch 0063-net-vmxnet3-check-for-device_active.patch 0064-net-vmxnet-initialise-local-tx-desc.patch 0065-scsi-pvscsi-avoid-infinite-loop-whi.patch 0066-ARM-KVM-Enable-in-kernel-timers-wit.patch 0067-hw-net-Fix-a-heap-overflow-in-xlnx..patch 0068-vmsvga-correct-bitmap-and-pixmap-si.patch 0069-usb-xhci-fix-memory-leak-in-usb_xhc.patch 0070-virtio-add-check-for-descriptor-s-m.patch 0071-net-mcf-limit-buffer-descriptor-cou.patch 0072-usb-ehci-fix-memory-leak-in-ehci_pr.patch 0073-xhci-limit-the-number-of-link-trbs-.patch 0074-9pfs-allocate-space-for-guest-origi.patch 0075-9pfs-fix-memory-leak-in-v9fs_link.patch 0076-9pfs-fix-potential-host-memory-leak.patch 0077-9pfs-fix-memory-leak-in-v9fs_write.patch 0078-char-serial-check-divider-value-aga.patch 0079-net-pcnet-check-rx-tx-descriptor-ri.patch 0080-net-eepro100-fix-memory-leak-in-dev.patch 0081-net-rocker-set-limit-to-DMA-buffer-.patch 0082-net-rtl8139-limit-processing-of-rin.patch 0083-audio-intel-hda-check-stream-entry-.patch 0084-virtio-gpu-fix-memory-leak-in-virti.patch 0085-9pfs-fix-integer-overflow-issue-in-.patch 0086-dma-rc4030-limit-interval-timer-rel.patch 0087-net-imx-limit-buffer-descriptor-cou.patch 0088-target-i386-Implement-CPUID-0xB-Ext.patch 0089-target-i386-present-virtual-L3-cach.patch 0090-migration-fix-inability-to-save-VM-.patch 0091-ui-gtk-Fix-a-runtime-warning-on-vte.patch 0092-gtk-don-t-leak-the-GtkBorder-with-V.patch 0093-xen-fix-ioreq-handling.patch 0094-macio-Use-blk_drain-instead-of-blk_.patch 0095-rbd-Switch-rbd_start_aio-to-byte-ba.patch 0096-virtio-blk-Release-s-rq-queue-at-sy.patch 0097-virtio-blk-Remove-stale-comment-abo.patch 0098-block-reintroduce-bdrv_flush_all.patch 0099-qemu-use-bdrv_flush_all-for-vm_stop.patch 0100-block-backend-remove-blkflush_all.patch 0101-char-fix-missing-return-in-error-pa.patch 0102-rbd-shift-byte-count-as-a-64-bit-va.patch 0103-mirror-use-bdrv_drained_begin-bdrv_.patch 0104-block-curl-Use-BDRV_SECTOR_SIZE.patch 0105-block-curl-Fix-return-value-from-cu.patch 0106-block-curl-Remember-all-sockets.patch 0107-block-curl-Do-not-wait-for-data-bey.patch 0108-virtio-allow-per-device-class-legac.patch 0109-virtio-net-mark-VIRTIO_NET_F_GSO-as.patch 0110-vhost-adapt-vhost_verify_ring_mappi.patch 0111-ivshmem-Fix-64-bit-memory-bar-confi.patch 0112-intel_iommu-fix-incorrect-device-in.patch 0113-9pfs-fix-information-leak-in-xattr-.patch 0114-9pfs-fix-memory-leak-in-v9fs_xattrc.patch 0115-net-mcf-check-receive-buffer-size-r.patch 0116-virtio-gpu-fix-memory-leak-in-updat.patch 0117-virtio-gpu-fix-information-leak-in-.patch 0118-9pfs-adjust-the-order-of-resource-c.patch 0119-9pfs-add-cleanup-operation-in-FileO.patch 0120-9pfs-add-cleanup-operation-for-hand.patch 0121-9pfs-add-cleanup-operation-for-prox.patch 0122-virtio-gpu-call-cleanup-mapping-fun.patch 0123-string-input-visitor-Fix-uint64-par.patch 0124-test-string-input-visitor-Add-int-t.patch 0125-test-string-input-visitor-Add-uint6.patch 0126-tests-Add-QOM-property-unit-tests.patch 0127-tests-Add-scsi-disk-test.patch 0128-usb-ehci-fix-memory-leak-in-ehci_in.patch 0129-usbredir-free-vm_change_state_handl.patch 0130-virtio-gpu-fix-information-leak-in-.patch ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch ipxe-legacy-Fix-building-with-GCC-6.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-util-v5.24-perl-errors-on-redeclare.patch - SLE CVE, FATE, and bugzilla references not otherwise listed in this changelog file. The intent of this list is to indicate that the fix or feature continues the line of inheritance in the development stream of this package. The list is intended to satisfy searches only - refer to the SLE-12-SP2 changelog file for additional details. * fate#314468 fate#314497 fate#315125 fate#315467 fate#317015 fate#317741 fate#317763 fate#318349 fate#319660 fate#319979 fate#321010 * bnc#812983 bnc#869026 bnc#869746 bnc#874413 bnc#875582 bnc#875870 bnc#877642 bnc#877645 bnc#878541 bsc#882405 bsc#886378 bnc#893339 bnc#893892 bnc#895369 bnc#896726 bnc#897654 bnc#905097 bnc#907805 bnc#908380 bnc#914521 bsc#924018 bsc#929339 bsc#932267 bsc#932770 bsc#933981 bsc#936537 bsc#937125 bsc#938344 bsc#940929 bsc#942845 bsc#943446 bsc#944697 bsc#945404 bsc#945987 bsc#945989 bsc#946020 bsc#947159 bnc#953518 bsc#954864 bsc#956829 bsc#957162 bsc#958491 bsc#958917 bsc#959005 bsc#959386 bsc#960334 bsc#960708 bsc#960725 bsc#960835 bsc#961333 bsc#961556 bsc#961691 bsc#962320 bsc#963782 bsc#964413 bsc#970791 bsc#974141 bsc#978158 bsc#979473 bsc#982365 bsc#989655 bsc#991466 bsc#994771 bsc#994774 bsc#996441 bsc#997858 bsc#999212 bsc#1001151 bsc#1002116 bsc#1005353 boo#1007263 bsc#1007769 bsc#1008519 bsc#1009109 bsc#1013285 bsc#1013341 bsc#1013764 bsc#1013767 bsc#1014109 bsc#1014110 bsc#1014111 bsc#1014112 bsc#1014256 bsc#1014514 bsc#1014702 bsc#1015169 bsc#1016779 * CVE-2014-0222 CVE-2014-0223 CVE-2014-3461 CVE-2014-3640 CVE-2014-7840 CVE-2014-8106 CVE-2015-1779 CVE-2015-3209 CVE-2015-4037 CVE-2015-5154 CVE-2015-5225 CVE-2015-5278 CVE-2015-5279 CVE-2015-5745 CVE-2015-6815 CVE-2015-6855 CVE-2015-7295 CVE-2015-7512 CVE-2015-7549 CVE-2015-8345 CVE-2015-8504 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-1568 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-3710 CVE-2016-6490 CVE-2016-6833 CVE-2016-6888 CVE-2016-7116 CVE-2016-7155 CVE-2016-7161 CVE-2016-9381 CVE-2016-9776 CVE-2016-9845 CVE-2016-9846 CVE-2016-9907 CVE-2016-9908 CVE-2016-9911 CVE-2016-9912 CVE-2016-9913 CVE-2016-9921 CVE-2016-9922- Despite the previous entry about re-enabling ceph on Nov 19, 2016 the change wasn't actually done. Do it now.- sgabios-stable-buildid.patch: Use geeko@buildhost- slof_xhci.patch: XHCI fixes (boo#977027)- Recommend x86 ROMs for emulated PCI cards on ppc, arm, others (bsc#1005869, michals)- Tidy SLOF patch boilerplate (michals)- Build with spice on all archs. (boo#1009438, michals)- Refine the approach to producing stable builds in our ROM based packages. All built roms which have hostname or date calls now produce consistent results build to build via patch changes, so remove the hostname and date call workarounds. (bsc#1011213) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0069-roms-Makefile-pass-a-packaging-time.patch sgabios-stable-buildid.patch- Re-enable ceph (rbd) functionality in OBS builds as we've been told the issues which prompted us to disable it are resolved - Address various security/stability issues * Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516) 0041-vmsvga-correct-bitmap-and-pixmap-si.patch * Fix DOS in LSI SAS1068 emulation (CVE-2016-7157 bsc#997860) 0042-scsi-mptconfig-fix-an-assert-expres.patch 0043-scsi-mptconfig-fix-misuse-of-MPTSAS.patch * Fix DOS in Vmware pv scsi interface (CVE-2016-7156 bsc#997859) 0044-scsi-pvscsi-limit-loop-to-fetch-SG-.patch * Fix DOS in USB xHCI emulation (CVE-2016-7466 bsc#1000345) 0045-usb-xhci-fix-memory-leak-in-usb_xhc.patch * Fix OOB access in LSI SAS1068 emulation (CVE-2016-7423 bsc#1000397) 0046-scsi-mptsas-use-g_new0-to-allocate-.patch * Fix DOS in Vmware pv scsi interface (CVE-2016-7421 bsc#999661) 0047-scsi-pvscsi-limit-process-IO-loop-t.patch * Fix NULL pointer dereference in virtio processing (CVE-2016-7422 bsc#1000346) 0048-virtio-add-check-for-descriptor-s-m.patch * Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908 bsc#1002550) 0049-net-mcf-limit-buffer-descriptor-cou.patch * Fix DOS in USB EHCI emulation (CVE-2016-7995 bsc#1003612) 0050-usb-ehci-fix-memory-leak-in-ehci_pr.patch * Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878) 0051-xhci-limit-the-number-of-link-trbs-.patch * Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894) 0052-9pfs-allocate-space-for-guest-origi.patch * Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494) 0053-9pfs-fix-memory-leak-in-v9fs_link.patch * Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893) 0054-9pfs-fix-potential-host-memory-leak.patch * Plug data leak in virtio-9pfs interface (CVE-2016-9103 bsc#1007454) 0055-9pfs-fix-information-leak-in-xattr-.patch * Fix DOS in virtio-9pfs interface (CVE-2016-9102 bsc#1007450) 0056-9pfs-fix-memory-leak-in-v9fs_xattrc.patch * Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495) 0057-9pfs-fix-memory-leak-in-v9fs_write.patch * Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707) 0058-char-serial-check-divider-value-aga.patch * Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557) 0059-net-pcnet-check-rx-tx-descriptor-ri.patch * Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391) 0060-net-eepro100-fix-memory-leak-in-dev.patch * Fix OOB access in Rocker switch emulation (CVE-2016-8668 bsc#1004706) 0061-net-rocker-set-limit-to-DMA-buffer-.patch * Plug data leak in vmxnet3 emulation (CVE-2016-6836 bsc#994760) 0062-net-vmxnet-initialise-local-tx-desc.patch * Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538) 0063-net-rtl8139-limit-processing-of-rin.patch * Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536) 0064-audio-intel-hda-check-stream-entry-.patch * Fix DOS in virtio-gpu (CVE-2016-7994 bsc#1003613) 0065-virtio-gpu-fix-memory-leak-in-virti.patch * Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493) 0066-9pfs-fix-integer-overflow-issue-in-.patch * Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702) 0067-dma-rc4030-limit-interval-timer-rel.patch * Fix DOS in i.MX NIC emulation (CVE-2016-7907 bsc#1002549) 0068-net-imx-limit-buffer-descriptor-cou.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7- Use fixed timestamps and stable build_id in ipxe and other ROMs * Patches added: ipxe-stable-buildid.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patch updated: 0040-linux-user-skip-0-flag-from-proc-se.patch -> 0040-linux-user-remove-all-traces-of-qem.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0040-linux-user-skip-0-flag-from-proc-se.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0039-Fix-tlb_vaddr_to_host-with-CONFIG_U.patch- Document two new options, but leave jemalloc disabled for now - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches dropped: 0034-build-link-with-libatomic-on-powerp.patch * Patches renamed: 0035-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0034-xen-SUSE-xenlinux-unplug-for-emulat.patch 0036-qemu-bridge-helper-reduce-security-.patch -> 0035-qemu-bridge-helper-reduce-security-.patch 0037-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0036-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0038-configure-Fix-detection-of-seccomp-.patch -> 0037-configure-Fix-detection-of-seccomp-.patch 0039-linux-user-properly-test-for-infini.patch -> 0038-linux-user-properly-test-for-infini.patch- Updated to v2.7.0: See http://wiki.qemu-project.org/ChangeLog/2.7 - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0039-linux-user-properly-test-for-infini.patch- Use new kvm_stat package where available, else provide updated kvm_stat script.- Update to v2.7.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.7- Updated to v2.7.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.7 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches dropped: 0002-qemu-0.9.0.cvs-binfmt.patch (script rewritten upstream) 0009-block-vmdk-Support-creation-of-SCSI.patch (deprecated) 0014-linux-user-Ignore-broken-loop-ioctl.patch (implemented upstream) 0024-linux-user-add-more-blk-ioctls.patch (more implemented upstream) 0034-qtest-Increase-socket-timeout.patch (increased further upstream) 0036-configure-Enable-libseccomp-for-ppc.patch (enabled upstream) 0038-block-split-large-discard-requests-.patch 0041-xen-introduce-dummy-system-device.patch 0042-xen-write-information-about-support.patch 0043-xen-add-pvUSB-backend.patch 0044-xen-move-xen_sysdev-to-xen_backend..patch 0045-vnc-add-configurable-keyboard-delay.patch 0046-configure-add-echo_version-helper.patch 0047-configure-support-vte-2.91.patch 0048-hw-arm-virt-mark-the-PCIe-host-cont.patch 0050-scsi-esp-fix-migration.patch 0051-xen-when-removing-a-backend-don-t-r.patch 0052-xen-drain-submit-queue-in-xen-usb-b.patch 0053-qcow2-avoid-extra-flushes-in-qcow2.patch 0055-xen-use-a-common-function-for-pv-an.patch ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-legacy-Fix-building-with-GCC-6.patch ipxe-util-v5.24-perl-errors-on-redeclare.patch ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch * Patches renamed: 0010-linux-user-add-binfmt-wrapper-for-a.patch -> 0009-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch -> 0010-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch -> 0011-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch -> 0012-linux-user-binfmt-support-host-bina.patch 0015-linux-user-lock-tcg.patch -> 0013-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch -> 0014-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch -> 0015-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch -> 0016-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch -> 0017-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch -> 0018-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch -> 0019-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch -> 0020-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch -> 0021-vnc-password-file-and-incoming-conn.patch 0025-linux-user-use-target_ulong.patch -> 0022-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch -> 0023-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch -> 0024-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0025-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch -> 0026-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch -> 0027-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch -> 0028-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-__u64-f.patch -> 0029-virtfs-proxy-helper-Provide-__u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch -> 0030-configure-Enable-PIE-for-ppc-and-pp.patch 0035-AIO-Reduce-number-of-threads-for-32.patch -> 0031-AIO-Reduce-number-of-threads-for-32.patch 0037-dictzip-Fix-on-big-endian-systems.patch -> 0032-dictzip-Fix-on-big-endian-systems.patch 0039-xen_disk-Add-suse-specific-flush-di.patch -> 0033-xen_disk-Add-suse-specific-flush-di.patch 0040-build-link-with-libatomic-on-powerp.patch -> 0034-build-link-with-libatomic-on-powerp.patch 0049-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0035-xen-SUSE-xenlinux-unplug-for-emulat.patch 0054-qemu-bridge-helper-reduce-security-.patch -> 0036-qemu-bridge-helper-reduce-security-.patch * Patches added: 0002-qemu-binfmt-conf-Modify-default-pat.patch 0037-qemu-binfmt-conf-use-qemu-ARCH-binf.patch * Package renamed trace-events-all file and linuxboot_dma.bin * Handle building and packaging roms for e1000e and vmxnet3 (Bruce) * Remove ipxe patches which are now enabled upstream (Bruce) * Enable seccomp for s390x (Mark Post): 0038-configure-Fix-detection-of-seccomp-.patch- Update to v2.6.1 a stable, bug-fix-only release (fate#316228) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped (upstreamed): 0041-net-mipsnet-check-packet-length-aga.patch 0042-i386-kvmvapic-initialise-imm32-vari.patch 0043-esp-check-command-buffer-length-bef.patch 0044-esp-check-dma-length-before-reading.patch 0045-scsi-pvscsi-check-command-descripto.patch 0046-scsi-mptsas-infinite-loop-while-fet.patch 0047-vga-add-sr_vbe-register-set.patch 0048-scsi-megasas-use-appropriate-proper.patch 0049-scsi-megasas-check-read_queue_head-.patch 0050-scsi-megasas-null-terminate-bios-ve.patch 0051-vmsvga-move-fifo-sanity-checks-to-v.patch 0052-vmsvga-don-t-process-more-than-1024.patch 0053-block-iscsi-avoid-potential-overflo.patch 0054-scsi-esp-check-TI-buffer-index-befo.patch 0060-scsi-megasas-initialise-local-confi.patch 0065-scsi-esp-check-buffer-length-before.patch 0066-scsi-esp-respect-FIFO-invariant-aft.patch 0067-pci-assign-Move-Invalid-ROM-error-m.patch 0068-Xen-PCI-passthrough-fix-passthrough.patch 0069-scsi-esp-make-cmdbuf-big-enough-for.patch 0071-virtio-error-out-if-guest-exceeds-v.patch * Patches renamed: 0055-xen-introduce-dummy-system-device.patch - > 0041-xen-introduce-dummy-system-device.patch 0056-xen-write-information-about-support.patch - > 0042-xen-write-information-about-support.patch 0057-xen-add-pvUSB-backend.patch - > 0043-xen-add-pvUSB-backend.patch 0058-xen-move-xen_sysdev-to-xen_backend..patch - > 0044-xen-move-xen_sysdev-to-xen_backend..patch 0059-vnc-add-configurable-keyboard-delay.patch - > 0045-vnc-add-configurable-keyboard-delay.patch 0061-configure-add-echo_version-helper.patch - > 0046-configure-add-echo_version-helper.patch 0062-configure-support-vte-2.91.patch - > 0047-configure-support-vte-2.91.patch 0063-hw-arm-virt-mark-the-PCIe-host-cont.patch - > 0048-hw-arm-virt-mark-the-PCIe-host-cont.patch 0064-xen-SUSE-xenlinux-unplug-for-emulat.patch - > 0049-xen-SUSE-xenlinux-unplug-for-emulat.patch 0070-scsi-esp-fix-migration.patch - > 0050-scsi-esp-fix-migration.patch 0072-xen-when-removing-a-backend-don-t-r.patch - > 0051-xen-when-removing-a-backend-don-t-r.patch 0073-xen-drain-submit-queue-in-xen-usb-b.patch - > 0052-xen-drain-submit-queue-in-xen-usb-b.patch 0074-qcow2-avoid-extra-flushes-in-qcow2.patch - > 0053-qcow2-avoid-extra-flushes-in-qcow2.patch 0075-qemu-bridge-helper-reduce-security-.patch - > 0054-qemu-bridge-helper-reduce-security-.patch 0076-xen-use-a-common-function-for-pv-an.patch - > 0055-xen-use-a-common-function-for-pv-an.patch- Temporarily disable ceph (rbd) functionality in OBS due to staging issues.- use upstream solution for building xen-usb.c correctly - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped: 0058-usb-Fix-conditions-that-xen-usb.c-i.patch * Patches added: 0058-xen-move-xen_sysdev-to-xen_backend..patch- Incorporate patch carried in Xen's qemu to get same support as Xen switches to use the qemu package (bsc#953339, bsc#953362, bsc#953518, bsc#984981) 0064-xen-SUSE-xenlinux-unplug-for-emulat.patch - Fix more potential OOB accesses in 53C9X emulation (CVE-2016-5238 bsc#982959) 0065-scsi-esp-check-buffer-length-before.patch 0066-scsi-esp-respect-FIFO-invariant-aft.patch - Avoid "Invalid ROM" error message when it is not appropriate (bsc#982927) 0067-pci-assign-Move-Invalid-ROM-error-m.patch - Fix failure in Xen HVM PCI passthrough (bsc#981925, bsc#989250) 0068-Xen-PCI-passthrough-fix-passthrough.patch - Fix OOB access in 53C9X emulation (CVE-2016-6351 bsc#990835) 0069-scsi-esp-make-cmdbuf-big-enough-for.patch 0070-scsi-esp-fix-migration.patch - Avoid potential for guest initiated OOM condition in qemu through virtio interface (CVE-2016-5403 bsc#991080) 0071-virtio-error-out-if-guest-exceeds-v.patch - Fix potential crashes in qemu from pvusb bugs (bsc#986156) 0072-xen-when-removing-a-backend-don-t-r.patch 0073-xen-drain-submit-queue-in-xen-usb-b.patch - Avoid unneeded flushes in qcow2 which impact performance (bsc#991296) 0074-qcow2-avoid-extra-flushes-in-qcow2.patch - Finally get qemu-bridge-helper the permissions it needs for non- root usage. The kvm group is leveraged to control access. (boo#988279) 0075-qemu-bridge-helper-reduce-security-.patch - Fix pvusb not working for HVM guests (bsc#991785) 0076-xen-use-a-common-function-for-pv-an.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 - Minor spec file formatting fixes- Fix ARM PCIe DMA coherency bug (bsc#991034) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches added: 0063-hw-arm-virt-mark-the-PCIe-host-cont.patch- Clean up the udev ifdeffery to cover systemd as well (boo#860275) - Trigger udev rules also under systemd (boo#989655) - Suppress s390x sysctl in chroot - Ignore s390x sysctl failures (agraf)- Build SLOF for SLE12 now that we have gcc fix (bsc#949000) - Add script for loading kvm module on s390x - Enable seccomp and iscsi support in more configurations - Enable more support for virtio-gpu - Fix /dev/kvm permissions problem with package install and no reboot (bnc#867867) - Remove libtool dependency - Disable more aggressive stack protector for performance reasons - Enable vte to be used again in more configurations (bsc#988855) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches added: 0061-configure-add-echo_version-helper.patch 0062-configure-support-vte-2.91.patch- Remove deprecated patch "work-around-SA_RESTART-race" (boo#982208) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped: 0002-XXX-work-around-SA_RESTART-race-wit.patch 0003-qemu-0.9.0.cvs-binfmt.patch 0004-qemu-cvs-alsa_bitfield.patch 0005-qemu-cvs-alsa_ioctl.patch 0006-qemu-cvs-alsa_mmap.patch 0007-qemu-cvs-gettimeofday.patch 0008-qemu-cvs-ioctl_debug.patch 0009-qemu-cvs-ioctl_nodirection.patch 0010-block-vmdk-Support-creation-of-SCSI.patch 0011-linux-user-add-binfmt-wrapper-for-a.patch 0012-PPC-KVM-Disable-mmu-notifier-check.patch 0013-linux-user-fix-segfault-deadlock.patch 0014-linux-user-binfmt-support-host-bina.patch 0015-linux-user-Ignore-broken-loop-ioctl.patch 0016-linux-user-lock-tcg.patch 0017-linux-user-Run-multi-threaded-code-.patch 0018-linux-user-lock-tb-flushing-too.patch 0019-linux-user-Fake-proc-cpuinfo.patch 0020-linux-user-implement-FS_IOC_GETFLAG.patch 0021-linux-user-implement-FS_IOC_SETFLAG.patch 0022-linux-user-XXX-disable-fiemap.patch 0023-slirp-nooutgoing.patch 0024-vnc-password-file-and-incoming-conn.patch 0025-linux-user-add-more-blk-ioctls.patch 0026-linux-user-use-target_ulong.patch 0027-block-Add-support-for-DictZip-enabl.patch 0028-block-Add-tar-container-format.patch 0029-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0030-console-add-question-mark-escape-op.patch 0031-Make-char-muxer-more-robust-wrt-sma.patch 0032-linux-user-lseek-explicitly-cast-no.patch 0033-virtfs-proxy-helper-Provide-__u64-f.patch 0034-configure-Enable-PIE-for-ppc-and-pp.patch 0035-qtest-Increase-socket-timeout.patch 0036-AIO-Reduce-number-of-threads-for-32.patch 0037-configure-Enable-libseccomp-for-ppc.patch 0038-dictzip-Fix-on-big-endian-systems.patch 0039-block-split-large-discard-requests-.patch 0040-xen_disk-Add-suse-specific-flush-di.patch 0041-build-link-with-libatomic-on-powerp.patch 0042-net-mipsnet-check-packet-length-aga.patch 0043-i386-kvmvapic-initialise-imm32-vari.patch 0044-esp-check-command-buffer-length-bef.patch 0045-esp-check-dma-length-before-reading.patch 0046-scsi-pvscsi-check-command-descripto.patch 0047-scsi-mptsas-infinite-loop-while-fet.patch 0048-vga-add-sr_vbe-register-set.patch 0049-scsi-megasas-use-appropriate-proper.patch 0050-scsi-megasas-check-read_queue_head-.patch 0051-scsi-megasas-null-terminate-bios-ve.patch 0052-vmsvga-move-fifo-sanity-checks-to-v.patch 0053-vmsvga-don-t-process-more-than-1024.patch 0054-block-iscsi-avoid-potential-overflo.patch 0055-scsi-esp-check-TI-buffer-index-befo.patch 0056-xen-introduce-dummy-system-device.patch 0057-xen-write-information-about-support.patch 0058-xen-add-pvUSB-backend.patch 0059-usb-Fix-conditions-that-xen-usb.c-i.patch 0060-vnc-add-configurable-keyboard-delay.patch 0061-scsi-megasas-initialise-local-confi.patch * Patches added: 0002-qemu-0.9.0.cvs-binfmt.patch 0003-qemu-cvs-alsa_bitfield.patch 0004-qemu-cvs-alsa_ioctl.patch 0005-qemu-cvs-alsa_mmap.patch 0006-qemu-cvs-gettimeofday.patch 0007-qemu-cvs-ioctl_debug.patch 0008-qemu-cvs-ioctl_nodirection.patch 0009-block-vmdk-Support-creation-of-SCSI.patch 0010-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch 0014-linux-user-Ignore-broken-loop-ioctl.patch 0015-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch 0024-linux-user-add-more-blk-ioctls.patch 0025-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-__u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch 0034-qtest-Increase-socket-timeout.patch 0035-AIO-Reduce-number-of-threads-for-32.patch 0036-configure-Enable-libseccomp-for-ppc.patch 0037-dictzip-Fix-on-big-endian-systems.patch 0038-block-split-large-discard-requests-.patch 0039-xen_disk-Add-suse-specific-flush-di.patch 0040-build-link-with-libatomic-on-powerp.patch 0041-net-mipsnet-check-packet-length-aga.patch 0042-i386-kvmvapic-initialise-imm32-vari.patch 0043-esp-check-command-buffer-length-bef.patch 0044-esp-check-dma-length-before-reading.patch 0045-scsi-pvscsi-check-command-descripto.patch 0046-scsi-mptsas-infinite-loop-while-fet.patch 0047-vga-add-sr_vbe-register-set.patch 0048-scsi-megasas-use-appropriate-proper.patch 0049-scsi-megasas-check-read_queue_head-.patch 0050-scsi-megasas-null-terminate-bios-ve.patch 0051-vmsvga-move-fifo-sanity-checks-to-v.patch 0052-vmsvga-don-t-process-more-than-1024.patch 0053-block-iscsi-avoid-potential-overflo.patch 0054-scsi-esp-check-TI-buffer-index-befo.patch 0055-xen-introduce-dummy-system-device.patch 0056-xen-write-information-about-support.patch 0057-xen-add-pvUSB-backend.patch 0058-usb-Fix-conditions-that-xen-usb.c-i.patch 0059-vnc-add-configurable-keyboard-delay.patch 0060-scsi-megasas-initialise-local-confi.patch - Enable ceph (rbd) support for aarch64- Enable ceph (rbd) support- Fix OVMF iPXE network menu (bsc#986033, boo#987488) ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch- Fix host information leak to guest in MegaRAID SAS 8708EM2 Host Bus AdapterMegaRAID SAS 8708EM2 Host Bus Adapter emulation support (CVE-2016-5105 bsc#982017) * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 0061-scsi-megasas-initialise-local-confi.patch- Address various security/stability issues * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Fix OOB access in megasas emulated device (CVE-2016-5106 bsc#982018) 0049-scsi-megasas-use-appropriate-proper.patch * Fix OOB access in megasas emulated device (CVE-2016-5107 bsc#982019) 0050-scsi-megasas-check-read_queue_head-.patch * Fix OOB access in megasas emulated device (CVE-2016-5337 bsc#983961) 0051-scsi-megasas-null-terminate-bios-ve.patch * Correct the vmvga fifo access checks (CVE-2016-4454 bsc#982222) 0052-vmsvga-move-fifo-sanity-checks-to-v.patch * Fix potential DoS issue in vmvga processing (CVE-2016-4453 bsc#982223) 0053-vmsvga-don-t-process-more-than-1024.patch * Fix heap buffer overflow flaw when iscsi protocol is used (CVE-2016-5126 bsc#982285) 0054-block-iscsi-avoid-potential-overflo.patch * Fix OOB access in 53C9X emulation (CVE-2016-5338 bsc#983982) 0055-scsi-esp-check-TI-buffer-index-befo.patch - Add support to qemu for pv-usb under Xen (fate#316612) 0056-xen-introduce-dummy-system-device.patch 0057-xen-write-information-about-support.patch 0058-xen-add-pvUSB-backend.patch 0059-usb-Fix-conditions-that-xen-usb.c-i.patch - Provide ability to rate limit keyboard events from the vnc server. This is part of the solution to an issue affecting openQA testing, where characters are lost, resulting in unexpected failures (bsc#974914) 0060-vnc-add-configurable-keyboard-delay.patch- Adjust to parallel changes in virglrenderer packages - no longer "BuildRequires" virglrenderer directly, just the devel package.- Fix build compatibility with gcc6 wrt ipxe rom where compiler warnings are treated as errors. ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-legacy-Fix-building-with-GCC-6.patch - Fix ipxe build script which fails under perl v5.24 ipxe-util-v5.24-perl-errors-on-redeclare.patch - Specify build time disk space requirements for ppc64 and ppc64le- Add sysctl script and %post on s390x to allow kvm usage (bsc#975331)- Address various security/stability issues * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Fix OOB access in MIPSnet emulated controller CVE-2016-4002 (bsc#975136) 0042-net-mipsnet-check-packet-length-aga.patch * Fix possible host data leakage to guest from TPR access CVE-2016-4020 (bsc#975700) 0043-i386-kvmvapic-initialise-imm32-vari.patch * Avoid OOB access in 53C9X emulation CVE-2016-4439 (bsc#980711) 0044-esp-check-command-buffer-length-bef.patch * Avoid OOB access in 53C9X emulation CVE-2016-4441 (bsc#980723) 0045-esp-check-dma-length-before-reading.patch * Avoid OOB access in Vmware PV SCSI emulation CVE-2016-4952 (bsc#981266) 0046-scsi-pvscsi-check-command-descripto.patch * Avoid potential DoS in LSI SAS1068 emulation CVE-2016-4964 (bsc#981399) 0047-scsi-mptsas-infinite-loop-while-fet.patch * Fix regression in vga behavior - introduced in v2.6.0 CVE-2016-3712 (bsc#978160) 0048-vga-add-sr_vbe-register-set.patch- Update to v2.6.0: See http://wiki.qemu-project.org/ChangeLog/2.6 - Enable SDL2, virglrenderer (for use with virtio-gpu), xfsctl, and tracing using default log backend - Build efi pxe roms on x86_64- Check modules for conflicting release versions - Suggest recently added block modules- Bump copyright in qemu.spec.in - Enable libiscsi for Factory - Enable seccomp for ppc64le as well- Update to v2.6.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.6 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped (upstreamed): 0041-tests-Use-correct-config-param-for-.patch * Patches renamed: 0042-build-link-with-libatomic-on-powerp.patch -> 0041-build-link-with-libatomic-on-powerp.patch- Partially revert the last change's cleanup - Indicate SUSE version- Update to v2.6.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.6 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Accept every size in DISCARD request from a guest (bsc#964427) 0039-block-split-large-discard-requests-.patch * Recognize libxl flag to disable flush in block device (bsc#879425) 0040-xen_disk-Add-suse-specific-flush-di.patch * Use correct flag for crypto tests 0041-tests-Use-correct-config-param-for-.patch * Fix build on powerpc: 0042-build-link-with-libatomic-on-powerp.patch * Patches dropped (upstreamed): seabios_checkrom_typo.patch seabios_avoid_smbios_signature_string.patch- Disable vte for Leap, fixing build- Don't drop u-boot.e500 yet - breaks testsuite- Re-enable libcacard support - Clean up configured features- Clean up qemu-tools libcacard Provides/Obsoletes - separate again - Drop u-boot.e500 - being packaged as u-boot-ppce500- Update to v2.5.0: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Patches dropped (upstreamed): 0039-tests-Fix-check-report-qtest-target.patch- Fix build on openSUSE 13.2- Fix testsuite on 32bit systems (bsc#957379)- Update to v2.5.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Rebase libseccomp enablement: 0037-Revert-Revert-seccomp-tests-that-al.patch -> 0037-configure-Enable-libseccomp-for-ppc.patch * Provide qemu-ga and qemu-ipxe for qemu-testsuite - Clean up qemu-ksm recommendation- Fix SLE11 build by fixing systemd conditionalization (from olh)- Update to v2.5.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Patches dropped (upstream): 0038-tcg-aarch64-Fix-tcg_out_qemu_-ld-st.patch 0039-tests-Unique-test-path-for-string-v.patch gcc5-ipxe-add-missing-const-qualifiers.patch gcc5-ipxe-ath9k-Remove-confusing-logic-inversion-in-an-ANI-var.patch SLOF_ppc64le.patch * Patch renamed: 0040-dictzip-Fix-on-big-endian-systems.patch -> 0038-dictzip-Fix-on-big-endian-systems.patch * --enable-smartcard-nss -> --enable-smartcard Needs an external libcacard, so drop it for now. * Drop --enable-vnc-tls * Require xz-devel for ipxe build * Package qemu-ga(8) man page * Package ivshmem-{client,server} * Patches added: 0039-tests-Fix-check-report-qtest-target.patch- Add systemd unit file and udev rules for qemu guest agent - taken from the SLE12 / Leap package, see boo#955707- Add _constraints file (based on work by kenljohnson)- Enable SLOF build for ppc64le, too, now (bsc#949000, bsc#949016)- Allow building SLOF on ppc64le (bsc#949016) SLOF_ppc64le.patch - Add two checks for DictZip and tar qemu-img behavior (bsc#945778) * Clean up qemu-testsuite build/installation- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix endianness issues in DictZip block driver (bsc#937572, bsc#945778) 0027-block-Add-support-for-DictZip-enabl.patch 0028-block-Add-tar-container-format.patch 0040-dictzip-Fix-on-big-endian-systems.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix qemu-testsuite for glib2-2.46.0 by assuring uniqueness of paths 0039-tests-Unique-test-path-for-string-v.patch- Build SLOF on ppc64 (bsc#949016, thanks to k0da) * Simplify x86 fw logic while at it - No need to enable KVM for armv6hl - Add notice about pre_checkin.sh to update_git.sh- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix aarch64 TCG: 0038-tcg-aarch64-Fix-tcg_out_qemu_-ld-st.patch- Update to v2.4.0: See http://wiki.qemu-project.org/ChangeLog/2.4- Update to v2.4.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.4 * Provide qemu-img symlink instead of passing QTEST_QEMU_IMG- Update to v2.4.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.4 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Patches dropped: 0037-linux-user-Allocate-thunk-size-dyna.patch 0039-s390x-Fix-stoc-direction.patch 0040-s390x-Add-interlocked-access-facili.patch 0041-fdc-force-the-fifo-access-to-be-in-.patch 0042-rules.mak-Force-CFLAGS-for-all-obje.patch 0043-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch 0044-hw-arm-boot-Increase-fdt-alignment.patch * Patches renamed: 0038-Revert-Revert-seccomp-tests-that-al.patch -> 0037-Revert-Revert-seccomp-tests-that-al.patch * Package new vgabios-virtio.bin * target-x86_64.conf was dropped * Add qemu-block-dmg module sub-package * Set QTEST_QEMU_IMG variable for ahci-test * --enable-quorum and --enable-vnc-ws are no longer available- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix -kernel boot for AArch64 * Patches added: 0044-hw-arm-boot-Increase-fdt-alignment.patch- Use libusb-1_0-devel as buildrequires, not the old unused compatibility layer in libusb-devel- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix qemu2 cow caching (bsc#933132) * Patches added: 0043-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch- Patch queue updated from git://github.com/jirislaby/qemu.git opensuse-2.3 * Patches added: 0042-rules.mak-Force-CFLAGS-for-all-obje.patch gcc5-ipxe-add-missing-const-qualifiers.patch gcc5-ipxe-ath9k-Remove-confusing-logic-inversion-in-an-ANI-var.patch- Fix CVE-2015-3456 (boo#929339) 0041-fdc-force-the-fifo-access-to-be-in-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches added: 0040-s390x-Add-interlocked-access-facili.patch - Disable dependency on libnuma for s390x (not available in SLE12)- Update to v2.3.0: See http://wiki.qemu-project.org/ChangeLog/2.3 - Disable iotests for now- Update to v2.3.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.3- Update seabios_avoid_smbios_signature_string.patch with version applied upstream- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix s390x stoc instructions 0039-s390x-Fix-stoc-direction.patch- Update to v2.3.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (applied upstream): 0037-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch * Patches renamed: 0038-linux-user-Allocate-thunk-size-dyna.patch -> 0037-linux-user-Allocate-thunk-size-dyna.patch * Revert -rc3 change to disable seccomp on non-x86 architectures 0038-Revert-Revert-seccomp-tests-that-al.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix qemu-linux-user on powerpc * Patches added: 0038-linux-user-Allocate-thunk-size-dyna.patch- Split off qemu-testsuite.spec * Package check-report.html and check-report.xml * Enable quick iotests - Dropped 0030-net-Warn-about-default-MAC-address.patch The warning is relevant only for bridged setups, not for the default SLIRP based -net user / -netdev user setup, and it breaks output expectations of some iotests. * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches renamed: 0031-console-add-question-mark-escape-op.patch -> 0030-console-add-question-mark-escape-op.patch 0032-Make-char-muxer-more-robust-wrt-sma.patch -> 0031-Make-char-muxer-more-robust-wrt-sma.patch 0033-linux-user-lseek-explicitly-cast-no.patch -> 0032-linux-user-lseek-explicitly-cast-no.patch 0034-virtfs-proxy-helper-Provide-__u64-f.patch -> 0033-virtfs-proxy-helper-Provide-__u64-f.patch 0035-configure-Enable-PIE-for-ppc-and-pp.patch -> 0034-configure-Enable-PIE-for-ppc-and-pp.patch 0036-qtest-Increase-socket-timeout.patch -> 0035-qtest-Increase-socket-timeout.patch 0037-AIO-Reduce-number-of-threads-for-32.patch -> 0036-AIO-Reduce-number-of-threads-for-32.patch 0038-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch -> 0037-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch - Re-enable glusterfs on Factory (updated from v3.6.1 to v3.6.2) - Re-enable seccomp for armv7l (libseccomp submission pending)- Suppress seccomp for Factory armv7l (broken in libseccomp v2.2.0) - Disable glusterfs explicitly on Factory, SLE12 and before 13.1- Enable glusterfs and package as qemu-block-gluster glusterfs post-v3.5.3 and v3.6.1/v3.6.2 have switched the glusterfs-api.pc version incompatibly, so only 13.1+13.2 for now - Use macro for module Conflicts- Tidy configure options: * Move --enable-modules to build options * Sort libusb alphabetically * Explicitly enable attr, bluez, fdt, lzo, tpm, vhdx, vhost-net, vnc, xen-pci-passthrough * Enable bzip2 * Enable libssh2 where possible and package as qemu-block-ssh * Enable numa where a compatible numactl is available * Enable quorum where a compatible gnutls is available * Enable snappy where possible * Prepare to enable glusterfs * Explicitly enable the nop tracing backend (to be revisited) * Explicitly disable Archipelago, as we don't have libxseg and it's incompatibly GPL-3.0+ * Explicitly disable libiscsi, libnfs, netmap and rbd as we don't have packages * Drop deprecated --enable-virtio-blk-data-plane (now default)- Fix 64-bit TCG stores on 32-bit Big Endian hosts (ppc) 0038-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3- Update to v2.3.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (upstreamed): 0038-fw_cfg-test-Fix-test-path-to-includ.patch 0039-rcu-tests-fix-compilation-on-32-bit.patch- make check was failing due to a bogus SMBIOS signature being encountered within SeaBIOS. Avoid having that signature stored randomly within the SeaBIOS image. * seabios_avoid_smbios_signature_string.patch- Build x86 firmware only from 13.1 on (11.4 was broken, surpassing 128 KB) - Update to v2.3.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (upstreamed): 0038-linux-user-Fix-emulation-of-splice-.patch 0039-ide-fix-cmd_write_pio-when-nsectors.patch 0040-ide-fix-cmd_read_pio-when-nsectors-.patch 0041-ahci-Fix-sglist-offset-manipulation.patch 0042-ahci-test-improve-rw-buffer-pattern.patch 0045-linux-user-fix-broken-cpu_copy.patch * Patches renamed: 0043-fw_cfg-test-Fix-test-path-to-includ.patch -> 0038-fw_cfg-test-Fix-test-path-to-includ.patch 0044-rcu-tests-fix-compilation-on-32-bit.patch -> 0039-rcu-tests-fix-compilation-on-32-bit.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches added: 0045-linux-user-fix-broken-cpu_copy.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Make test path for fw_cfg-test unique (including architecture) 0043-fw_cfg-test-Fix-test-path-to-includ.patch * Fix rcu tests build on ppc (undefined reference to `__sync_fetch_and_add_8') 0044-rcu-tests-fix-compilation-on-32-bit.patch - Fix typo in SeaBIOS size check seabios_checkrom_typo.patch- Update to v2.3.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.3 * Updated update_git.sh accordingly * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * seabios_128kb.patch: Added patch to squeeze SeaBIOS into 128 KB with our gcc 4.8.3 (brogers@suse.com) - Renamed 0030-Legacy-Patch-kvm-qemu-preXX-report-.patch to 0030-net-Warn-about-default-MAC-address.patch: Suppress warning for accel=qtest, to sanitize make check results. - Added patches to fix ahci-test: 0039-ide-fix-cmd_write_pio-when-nsectors.patch 0040-ide-fix-cmd_read_pio-when-nsectors-.patch 0041-ahci-Fix-sglist-offset-manipulation.patch 0042-ahci-test-improve-rw-buffer-pattern.patch- Update company name in spec file templates - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches added: 0038-linux-user-Fix-emulation-of-splice-.patch- Add user kvm when installing guest-agent. - Use macro to update udev_rules when available- Fix packaging of e500 U-Boot - Don't rely on wildcard with explicit excludes- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches added: 0037-AIO-Reduce-number-of-threads-for-32.patch- Update to v2.2.0: See http://wiki.qemu-project.org/ChangeLog/2.2 * Updated DictZip and Tar block backends accordingly - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches dropped: 0015-target-arm-linux-user-no-tb_flush-o.patch (tb_flush() not called) 0037-tests-Don-t-run-qom-test-twice.patch (superseded) 0039-linux-user-Cast-validity-checks-on-.patch (helper function introduced) 0040-linux-user-Convert-blkpg-to-use-a-s.patch (upstreamed) * Patched renumbered: 0016-linux-user-Ignore-broken-loop-ioctl.patch -> 0015-linux-user-Ignore-broken-loop-ioctl.patch 0017-linux-user-lock-tcg.patch -> 0016-linux-user-lock-tcg.patch 0018-linux-user-Run-multi-threaded-code-.patch -> 0017-linux-user-Run-multi-threaded-code-.patch 0019-linux-user-lock-tb-flushing-too.patch -> 0018-linux-user-lock-tb-flushing-too.patch 0020-linux-user-Fake-proc-cpuinfo.patch -> 0019-linux-user-Fake-proc-cpuinfo.patch 0021-linux-user-implement-FS_IOC_GETFLAG.patch -> 0020-linux-user-implement-FS_IOC_GETFLAG.patch 0022-linux-user-implement-FS_IOC_SETFLAG.patch -> 0021-linux-user-implement-FS_IOC_SETFLAG.patch 0023-linux-user-XXX-disable-fiemap.patch -> 0022-linux-user-XXX-disable-fiemap.patch 0024-slirp-nooutgoing.patch -> 0023-slirp-nooutgoing.patch 0025-vnc-password-file-and-incoming-conn.patch -> 0024-vnc-password-file-and-incoming-conn.patch 0026-linux-user-add-more-blk-ioctls.patch -> 0025-linux-user-add-more-blk-ioctls.patch 0027-linux-user-use-target_ulong.patch -> 0026-linux-user-use-target_ulong.patch 0028-block-Add-support-for-DictZip-enabl.patch -> 0027-block-Add-support-for-DictZip-enabl.patch 0029-block-Add-tar-container-format.patch -> 0028-block-Add-tar-container-format.patch 0030-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0029-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0031-Legacy-Patch-kvm-qemu-preXX-report-.patch -> 0030-Legacy-Patch-kvm-qemu-preXX-report-.patch 0032-console-add-question-mark-escape-op.patch -> 0031-console-add-question-mark-escape-op.patch 0033-Make-char-muxer-more-robust-wrt-sma.patch -> 0032-Make-char-muxer-more-robust-wrt-sma.patch 0034-linux-user-lseek-explicitly-cast-no.patch -> 0033-linux-user-lseek-explicitly-cast-no.patch 0035-virtfs-proxy-helper-Provide-__u64-f.patch -> 0034-virtfs-proxy-helper-Provide-__u64-f.patch 0036-configure-Enable-PIE-for-ppc-and-pp.patch -> 0035-configure-Enable-PIE-for-ppc-and-pp.patch 0038-qtest-Increase-socket-timeout.patch -> 0036-qtest-Increase-socket-timeout.patchqemu-s390s390zl31 17134620847.1.07.1.0-150500.49.15.17.1.0-150500.49.15.17.1.0qemu-system-s390xqemu-s390xsupported.txts390-ccw.imgs390-netboot.img/usr/bin//usr/share/doc/packages//usr/share/doc/packages/qemu-s390x//usr/share/qemu/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33445/SUSE_SLE-15-SP5_Update/0dcafc7a4690375456c36713c432e565-qemu.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=9f295d22b40ef48937e927002612eac6bb0f8b36, for GNU/Linux 3.2.0, strippeddirectoryASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=8ae9256972dcd8f83b6c3c36e7968815ec1be270, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=70d6b429745dae2edfc1782574a88074a95f4a3d, strippedKRFRRRDR1R;R+RRAR@R?RIRRR/R.R%R)R(R4RRR6R8R9R7R RR RRR RRRR RRRRRRRR R R2RBR,RR3RHR*R$RRGRRCR#RR0RRER-RR5RWkppYS̑(utf-8331af5e894ed2fb03b6a652caa8c5894f8d084f5094fd52f6988ff643c959784?7zXZ !t/]"k%K!KH[.W2xs=3yjeїcq#fzQI7G`y]%9}t{ê֓g'=~2Lb-֥GI𝡀xyKGS 3ǔKoHʶ/1ݚ "l_ǵY8*4 bO=S9Tnz/I¹ݢzӓMh%}V~;5\. "IH!mgvޯ񹛇\`XJW{'pVg&vYvIޭ7>j V2}R@+t?u:O . ='Ќe9&:7ɉAQE^rPkKVRPQQG> Tÿ: 8IܠxZ`zcn^GX7i "kJw88qS|o[j³C*]MF[.X:Z(jgx3᦮ ѻww5 iTۜ"[h8S!C` ڄg^s\P)nI_$6B r/"2H@98im6kȍн5}Z(W<%){ R{X1C[PMwtxR* 5_GO^PR'UGCDOFpitʋr ScT-U>f&p7j"Ju0럤zLhUgs"L܃@cq ϸ#?c6gv=634VyDԳ7*%6=S2w; y>̣gHA Fxg Hbei=1rת2Hb`Y㢢ͣ\Y֪3@r(02@c2{bO?!U# DBP7擼V|n>d eb@ol0lyR+3OmEU @+H\  m4T-T ̤Wϡr}QY׼jZ/o bB5oJ/}9pqy*EP)lY//}PI>삌1ǾqaC`dyā2zdQRt^!YeL_Ns)/@S9ƘNm"˞yFސm#7QM`iCɣ wW%\z4}nxlZ (@܁Y$Cmo>x|mItU4\8maٺXLYGo\ϮB$ 10h6([=j[yj~В pJnH+ {4@ெ&w2W0j'I(zvtЭz?PgwR41 ';_58|YF0I 5zK>m7ĩn`ީ׮~T꟰@};¾*'r\τ,uI2\>?doum'}#rČBA2ʥjEf 3UCh$)t jF|/%m,ޭ >v拄x!FC<`! ILb;mM|?.^'Ʌ~9j 'StՉumu(njlKmmP۟|A*_bA[U.q?F%I88A荟HBc=NEf+p3HɃUCػ9?kO#o,̒"XI}-ea7<%d/\MohN ZVF䓿M@@~^K&=7mnc˜c#"wuYr58pJ"īV>Vo79+fPg+ȝdۇ>LC&[GؗVP~N F SqK+g(؞*U耭6 !j +lTO_.T c;좛ܷDnI8Gh meHNu 7FWw2=Svc\h^ ҒGOq)Igj(a3@tj)$p%,Hv|B3u8aK?P=J^$P $*ywb.1=na<'M] = E1/&[NYXn[J *o~3gϙUO}8[-EL:7dzzicRWSc)Mn`H,AJ|N[pY#A.9u ÄI(U .0]cPã~|kn$ k[Lctփ$ַ>s@_ w'qYsY]/C~Qa|o}> K#:Z41=~UDBgrw +/2R%H}OEׂI8 ;[XSM rv< VyNȅ*=+vf+|0h-P񼵾KN44tM^٘Ǧ`s%kY+2:iFp@bRsLo $AnlFU>>uۚ ݴP"KO8\27cM RHR<sjXV -HIsb'E g[;k R+b]$#ZWs-r~pLNrɁ׿fbs->yvܵ[U1:]G~@b 4?93 ަ-y0ZCqlsTW N\C͠ɈDcEVcf=NnZC-80\93t3ç ʤjK ̋q@,@vX+@\u{8Uk> [§͟әN$6|<`Z+- ¸ϛkЇXє9Y&qAdX}19Ǿ⛧7s79V+,fūR3gVCL6ĔNv1Jʋǹ:_[U9/ח^G~ef*>@Zo`3}V'Y`/0/PWC(Pt)g-ct3.%5&CSPѧc:پ)j4 )wYg$9eqRA=c1L/||7U&g䔯uUS%yV3kQ5@#JI g2 aX>mhdY˛Q\~pUA(tqzS[ d1ůӍ4WK>Fr0l ne_on r'ЏZ_Aĉeo{ S $gsKopfv9 `y[Q1AȬ%\W&pߗ pSD/^aVm4Θ`FD41Zɖ9%D,]8M -,Z,^7ʨ8$t6P*yoi2o-Zj艩kPRḄ_)EX2-*ybHD;H MC2-X٭%_XE|fġ9Xr]:@>ыqJ|cPud[}*) /7m;(ޏ!AçO3*QS,ݡ~j7ݜT._tBQjPrb.BBNϤiw!w`ObT_8]3iW~:Lĉno=u3WVFʞRM38=sj!y&XUlV-%yȤ;nu>Uf p e8@ ^)C׾ r{ld[[YYllA3zyM4G\\4cOyu $~јeU5QZ l bB=eXDPmI棟An)QU8_F1j2.qX.DžC3%5C6ix m2lazUیFOc=My_( T* (VRzm@p?*N_B^‰XU]\u;DO] x!ipQ)ހ.:2d A9JGbcR-(փ tƿR[ q \쫪*Q׮d݌Yz^B{Jc5{Z`&Ddvtc{ZE1^'飚u?L4G>;*]%-M]*iNrry |1G{)Ҳ"Ж bvs!372Tdo{[|ݲ؛"InG58X,0OϬ]s΁emYBTǽqqd3R;nbwP}70K7a+7IMd(J̔f8m뉠q۶gc~XaEӠ(eo]]|1̌W|3G<=Stt‰U"[i/L~ZDd@&:<<2vs3fɏ -ūSGCP s94R:?F)x pOUk Be:MWXɕD=euFM<} Er^wro!C"Ep<Gcf?8O)'USv DP{tGԳnRwZZjQr$۟) b h-3fȮXW YW7w{ 2/c2`)y!>MD3nhN]Z"ɪASHC9U='넨qsg%",Ǘ/Z^}T++F?mb>Ji<\%czт7&g໿ڟMSikpB5'e@Qf?#\]HXdέt40֕z6|BBL)5#8?|07PFP z\+>h T̺<[.YrпE5y&[b 2ޣnA30V~'pO"lK=3Iݶ"(~&!|ua?~L9oyO ^ |[L:mipIbh;kz>MԚh&W@(lDv^Ruk,B[Vާ)&r: Ct*V9 $esZ'l;!q(*4=y(ax ǽ_§"#O U@ fL#р|͈>kxX<udNZXnSU|O݋oeē v"0 kxD4X<(, (ܠzCn'7\EUW8N#9-排RU&c 9!*P@30㤊EqΨX)3*|i$B7}Et8jy%w˒2upw dcaDiǏR湬~S> Tզ!Cx GW7Y2HHI` desS~< Ԫ@bk!;ЬA$: `He/wB_V(Yq8SBT?@m$n;wȂbDQ&XpxK3FjdZ ΉJOiQ3ym$M~p]<9Aa c>Z%{Nb_V:^U'/Ȇ6E84q߿_t MJ&=eI͇rNv #~fO+[![wjjKd, }o#\DoULf*_{Ᾰ=e&V8TƵEwi9? bXz"R6sӻx$9^01'\@ԂAq+-Fc$žU-unp:gg;l\ C;ij{;f K 8$Q={$ DisGMIV}m$-d/P榯>5v&4@t;mbS#)C^ G?%,}X  SīN/gƇxuB) ?G;z/wQ EVgRn>11iKD;|`/8#-(+3OA jju(s ?z:׶LkRκ_!á|O)Ưz<$1EREpu6e+h{wL3&⏂53V6*CB7W )ѿ'a=˿TEɭn-}M20-tBѧ n8Z){{G2Յ u+zAmߢ"IoF*f8G섯5h)EIxr΋6TXyql`ɄQό[1-<1NvpdcE\)]*W/X;t0{uԝ, x ZsEK$/$b!U:R[w՛8z 'MK. MTe|H\F섏[{{6j{՞·Ijix(vQ༝5Iܝ.1UJM9Ahw91 l~a@WyDb efq˗v kt->9jjad02F[=i0a:ηv"CL(==+kTsrVH$vWaQ(y*xrk B'\Я ns5T $g\5 `0îDSYv =zR!FIIj E^aI<%8snG.X8S4Xso0"lCP%;]}/,Jx(ڄ7 j$l|ڗh싒#틗f[i#N*aRbY4^Q#ӍG(qƷm\` A$ .π\aWac9V̦q;[){ W&1C1m5Xi=`'wD8 ԏxo` ksXcCDԪ!{l"tzqS+&d(؛0 '#ϔ"3=Ef;_0,vSif]({b궄B-d<^aSd;]ݷzACf\xrTAolvP:k8*>lU( pMe(-qm\¸Ƣ#! ϯQCVmF9 yyUV(}ewRx4H!tR*Wц+ҕm걚'TA\aHE2"BYw&Xk"G$_`ol%SCQ!,J*a 3ޯ~_W?gb@\X[wn%,>#2tXGFwQð,qC!P0P.bACm!{S'k紳b v6?W%&ա,dm)}eN/6Q?m nz2ra{}WܕF5.y\oͪ<xC ~!jUgji! 2fVһz'U^A@y4[:^0{ _6~o:#E~@B\v VI·~KVk=.1HuOuSD 8x!ѩRy@LVP# u #zdBĊ`B,[DA^&]vL-U@ku)H+]?F[/norz]nIy EH+6.L_`"b5'm}CRM +y `ϔn;[&- ea؅^4%zg[|Z}ʪAɸ R_1Drg /† y5-%z'нf%ئ۸5tС@{F1Eˤ_gAηxK ]Ydq{A@JJ+"gQotlaX:mk(BA.fiBb3;n ,jT)[bMNn Y+bs/YC͗dr1OLh'-}]MzZ@]Q҄)\f :/dVލ캍Dy>s0VXSmwe ?l\e%l8bgM\cN('J:EP6dts=L?'i=H֒ymX4KHƒCx'm\p%dcqeb7iYUuɚyo7N,ɸ@V:rnR>qαL2_~/BLw(z 慃K l{Q9v_x˜Ӕ_Exfr>Rk֜溿CܦhHY>"< m-={w@r_˜tn!w5yzozyPdu y)ZYfugƪ0S ĬZBֈ{} E?dEgxK zdO,D;ɯ:icG3ݩ)ȱTZThl^f} pܙL;)qNy+nӹ*njzl Ο[۰ц|fR ^ux߲8y%4@gm50AW<0ϲ?+};?k*Dȥ磾փ{Z!8>1ܥM4c7h}\z(. nsIKvfMeÌ3@#.kCӦ, 6]! 7ܼob^O/{H҉%ˢBdysj}(=7;I^i|xE\6TY,+͕e<|3{`3ʆ.!lJHW\8;ARZ]z{Ӳ\$*v߳Q򸮵ЉL:Ǚ6mfwRRBуMPE4N{4ŵ*ĭ\+N2H+|d ؏B3sE 1n3WQdŀ=T1Y9Z,wy3vmH6(D,i淈'4e#aT +akmzYL4^v=T~7Ĥu`qݯƮ``30* Ȁ)WNC;mevUL`4{4~ O^Lpqk^Xw)XFS|^J3ΙV8K P-Nq"ΰ &oɧkrXN+ - }meWABQ I".xh&4+ 1F0Fv Yj^X7*# %ض}$sW_YjZvO$C([HGY>%up܅Vo%tɀ3"+Jm>8])L{$y0q0J <w-D|lIC"д(8#6W 8tmdX6򻗄hKLm-u3~<5a'&'/iʑܔ~}د[m$ 0#8\4zXnKEfji* Os /y';˔!R Q [ܹ-"G HE3D 6z%_ 4k.QtQW8C0 +cGxyTV5=3Mf>:l(ôSkoe^>VKM3JlZ 8`?PIHvzusVQGʯ&h%*KNLfzI_-aM/'83-=[WXzSA*5ȞxQ6R\e6[9> S#s"O6.u rGT]u|D]8s#m?TaEp :o @//p15PblN ?׳}һv'M$5b@;f]fRϗN3Rѵ-2(/x12hN3|qO 6Hlunq54yU2u],K]M&KBv'Șqt¼+?rWVoa8+m B@n?7, RZ\k`R^"}]ߛ1;İ*nΘw#2|PץD>ZLeJvm8I_Gf:5Se}%I-R͜02RՕv / ,?CQH^ovށ?h%U#VУ"FbJ ϓW8y5_3 ڒ9<(̗pȓ;Pf5ܷ7o'Z}8|#\h䘬l];[>:]6%Xr+mlX~?ҡC>NeNAk=@40Gnznz-o?&G[ [^#WՆ, bq;~o<Y`8aZQq{Er;ZFUcP>zh4=F aE2aOa RlRbSgt@ J:6P%E?.XbSj Z( 5is7i8 tkItDB),"?nIyuIIjXLw%J(wC4(|-i4&"v5bmvpbJ d{-vμe?⫑ITG\c͟Yhƹ?r8'@uV@6<sK6(oZGB`{s {TЍl?4Gg&0ɼ|$ă|tfb(G?TyM^։/ :B:Kq K 㝫qO^U>DMq@@/-^F/#qP8;^Q[!ejL6dz 92keGV$AwD"%L mT|-).=l r B,T^tȥFջM;\AܰA(}x7JBm~\O Xr{W8(ݗzVI6Cu/eoů jvre"@[j7uA> ë$~f,ҜrNy@IpQsL:b|RPK@HiVRt8yCTC{ݰbT$5-+q_M,v>BcE5X]W/>q/ bݠbg6?Wo1[#JŤ?Q^Nza8EOFm0c*APi915-PkvҡJPn 9Tкke1Ǩ)Kgvd%$)sHC㺜|&{Y웃1Ͼ 8Y KUH̋рU@]9Ȯ@`5}H| -=`wx4/K9 Pg)Xt8x_mG6!.1SyK~$9ƖRKcN?6<m"$lXx)TL[Ci ,CuN+fenZ*W;~.8m) NT2sx?ڼ4lTh/ |6] ;)̐C$ǏE7Bw2~>/̍rj2XUE#UFjMUga@/u%1V'ُ3KH|ܷT|v>Sr&_uVjΆL-4rɭ2c^"Hbɜz%̩O y`2Ϡߛ6-.89Q76WoLwH8%=RV Qa+vXuT8XIE #nj}z؄PG~Gw& bh ;g^Dݱ? 2)s<ֻpsg@"'a.[^?l}FL{[V'Eۣ HѭѤ{H8o `3\0LLy4db% (wKt5u`UF} 70pFm6nQC0͕~9=Ӑ54= 22e+TZH<伍w‹PǨy$WKwjEckwSb0ÌR%2OxBјJsKrc?JL`Z- α1PrbdwPŅ&$Α \{:אVbA0+&;e-Z5!X7ݏ`8vZb S # t_"tRw:Ls/ ,fºZ CJ_dE69i5+ ܢ%r!UyQSՆ҉Do,XE6 =g [u1˾(sj,k(ty IN>>rO~Jfy)>& }S'!@:{ߣEa`ْf]ٞ¸:źt;x(NqPW@Lj)z!L$Zc9-ڌ'3;rj#tz0xZGprbaMeDSR= d ~GM2Xd}-+Q}t*f@To$Y͑7Iso볙fJ@z2c?3ElN b*.nl˼Э|ɿY!5u_yZIZ 55_!k;9Z"8_Ve&Fꚃ9ϪJ^hz<#Nq γH{bh?Kq r$5א%Va~z]17$%N %>,D'Z'|r՝Tf~/7l\:"G܃[98 {JF5;99UOeclVLKc\it @Š/(nY}F]w7r|Q;R \4WtEG^Rp6Js`l%nn+wU%jKƁYɄiPl|Jo8-dV5iL :^Dwϯx.xx0`BzsBcmFs+[;jX@$vTeC1a0EwQn;[ģdCB  H0iB>!!dP!kh=ƿ]_#·y%4p.r^v BdznP4Xl;[}lhz,c./ٳ`hWx yqlOͳ>QgeO[|/痌>(Ҟ> M@5PDiY0NhԚURŲ/,ՁS%я~ƒ$x!a'`dߖ&w*v @u!X<@T@!"\ZZjw?QioUMjꁜNgul#/N kvXَ1XaCnH_ۿ꽁B rc6hy4~K`G `ѽƅ?~:%e%M?/^> Y("_ҙuB[15(yEFɃ"\[&n)bDXf>x)$(D24P*˔Ufk<\7^wZ6s ^Dd^+dk(ů"4ZZ" Z?IiyTGF$K~9pghJv8%da [0V0O rBleT͔LR((ѥ=ag^oix̕ݫ1l)N^|4z】S)jR9Pq]| |[r]d"* )IIۯg-.ۚ].@2HQ w[A :ƯQk#DC6D(ք+RMcNl$ Oo h h4I[þeɐV1y ئy)i=??2&IH)@v"nwп|0gX- h5)h݄CCݟ ejFV6Abd9P. (+_던˧bd̃Ĉ^fQz]diWs=ƒ3dis~~8 0{e&8ay'Q@xm/|RRls9m|Shmf/d7;<H^W,k #= ,'΄chˊ}&4)v*gX #N"Jx/d cCl> ai32RQd@:xo.cG۾$;@Dj+^}&5 B᳷qgpY .+;b=Vk$חWQ sGvP9Dzst [EY\Dan-dpϤOh$ z[ƅXePM1y?<i (oYO:yVלĖ)틇1Nfj>Tg[SsMv䴾ds7qgHDyAbA E/'syT( XeD9L>z@&{a{ՠV)&倯ㄉ(+k[ݴ,'  @BF%4{Ѣ϶Ѧ=횄%>O|.ZR)AȅƖ^Lqk_Lf[ P[=+r1Rr| O6D4AvgREBL>m)%8/JECnf݉~:$!m y+M)c ŏ.Ǿ :έIiYg1B57X:f-al?i>un $S_J$v}8hs5VEV&&Nj*֨.[iK֔O,mVG @ff<0dƲNO^?3&sqp"ޗct!29CzSHs=ǭg!4X(7L\v NiE 8oɂlQ%\;'+!E L"~d O="gaޠa'kؒn OUwuH*E)S沗PScYY>r -tdo51]=ѡCkF * w~d{!%Pwz?x3S=vⲫaPO3K4<αyV|۸EJ(rdcX_$ѨI{6<.5&)s[ Պ/2lq% ''/@94k/fǜj`LB/đS,0{ {5|6 f=Fd98bXI_ M_15RWl/r L vɕ`;¤*wĮk <Ⰾ~/Gf(|vU@(?]Hkc$C{Ca+ $V.qZ2K~u W*~?:AM0_a8`rT:J|W?mophw)%EkD+ cvXӗFXoQ?F"}1=RG.L07~\㘝ߪsB, [y3c./f}bsگW__77_QYM%SơAPlZ (H#3q+^uWݏ< JCq uD#QkZǛs /lqNz\lHi=i 9d_Avm[S.3E\d@7+"1/)vG6ֿU9 pUh#U ߅,?mX` 37 !> fcIB^ P{3ccHP"0P eId㶎R%!Ɣa(ƹH Xr0B~6n'4rvJV׭]xxNIEBSr%Gv'6|` wῥvRKD]\&.TERl%-BYID~a/f#{v;SB9or/ ,4!?+Mn\C.ap-J* Neޮ7cy8>-T4cdZ)y9d<]d='%)H3*)GÏ0A@cL8x"Er1|y9w.!BWQ,Fu,޻!TLrc)m@S9!a͸d5'N<.3FW #DZa.@HY-$2*g4?<GM1ggd.S^i?yG"o%y[kSs. Y4 OrT7wz3IPIۤ4CL>aA=SI߫/hh(lD6&K|LsxbrMNsq1:u'1Ԧ$7mi"rFqjyi0֧3*|qV/#O@1w2u?Xz)=^Z;aW:T+}c $ZՈe:]y$& G <&}wRJ#59UlR*pnOn+?mU AB@geߺ"4&kb EVH}HrΣ>ثrA,-YO0tBT+Xa8"sbقGUߠqu UGGcΜ'OjԮϐ(N4nGs*0C İh'ÎmRJpe䩓.HSSo]3_&@qw#ѩnFHHG hZ|0@>ˎh+耣 ʮmQKX$lld1?F 2SdoyDVEb7(}e'TFMVV"W$5؆OX-"n Ȑ^a*Ym ,t.3*D9iejIhiՊKe*'&@x1Jzbd;XBӭࡍlPtIJy("6$)GeU%3e0vؿAW`@#is5^+/"pq[Lqq7}[ >1dw@eP4=oǂ6TW6F/q8{$$tDCQ9S`P1OJB41plǦͷT^@t{]K>Xn;K"JcI8]>F+#[s C~7$59Q-C@+rO2kZu ?*h|2i8t^Ru$-s{-K[xYS=Q P].g!&,)$.(96dVR vbf.`Q:\:GII֢˃P|cvZtoõ#  ٤;X?E m:oGT .DŽM>(WL^l~ob8"!s{.#omdF ڠޥȶBNJ3HXHCQv[#pkeI6:(.Qkq,&p&(!l6k*z9 (v'ARR'_0RpK9TcG I)RfUF Y.)I}^jNɭ쵋|"K[%L{34e9 4M=N&Í ֌;yw~*pI.HJB\ab[}ܰ| > *!4JjFgN=5_ { :V>f^w ^MHǨ۱J,~ƻkYP;:Fl˯sB=PLpY*:ۼR6j/R3UWm}A56E`^Jh?/x $3#lPQI7ռjnH,NkGA|9́$N)+ UWO-|mJ J'XQK OYozPGvG1E7*2w|chKBd,Tss[Z׆=/%ҡR3/cv]q4@jU1qqP-I&sިn$JD!ׇ`>Q7GwU?"czڦ#C$)!3f5Ns+cO}AEdn> &nhKM*D`{p*C,x='󊣊,Z95xY,憠Q9eHmp9X#r΍ ~Mpn2Ds\u] ˃vG!ݵVAITmjClʘ8%+WE>Q~MEl;+к' ۨL R8=a-;yOѣ\D~R |Kw:d\əs'zҟ 'r.܃3MH~ kځmMMIr g,vA0f!'fJpPBk1by# 6 `WލfhYGb*H%l\gwzw5mfin CqEv ~vVƘyJ4j|x&xƎ\[ !۵M_/|[:1CIr `͙S(8ԛ8Z Z=RfOcjAZVioh*GJåq}T)ݻ2<2h-﹛$_& U[WIR$jGZwrsV`!^ k-KKcIJ5_76E3CidXDX)_K|D_dט2V2-+bJ$S*a>2LQ)F4ŃX̌(j&#[ џX $={4DӃD8f@?4 RĿ-z(CQ#˸qSMtnmjC3̴m _ m{QoKjQ  -!TV#iĽ)rG^Sk粥 r.IXs#=|;~X!۹z?Yy2`]nj+ccq g%S8(I=c#b^d}R<v7@ ii`s.15@~>Ux<2 p26,n#*lqഎ̮/V_vX?DFk GϺq/,^d`slzpQ՜$ݾK?+>4 31;4m[ MK 9k,gzQAON %_ffЛ={G+rq,SAsz䨳:9{Y&ޛ8يV.X{ 8^p&45yR$nxYCPhq'\^8aIhXC~&rC9Oe ߧ8<v`AJb~_RL@zI8b{NޔuR93`C7Oмx>ńKֺ$yRmCIg"3G~?e+3wէV9g;xUlEqĽ ҎH[L RGz jJ Z !\~ 0cw\ٖ]]ƞ1r}1`Hq&T:zi8x+kv: O\VkܮD k72j&݅h|n^ A6AZ>U PbNPa1+T)^ɹ)\EL0z6rÍւ(%q|.,)6Ik$P|_8PkiLpr{&#w':@ e"$UN]n:%|/HW^u|ϐsiE\ʃOp3\ ֫TU:T$I SVvO]\qd*fR@7?$­H]R}|.ʨuЌ6{ Uۿ@1* $1"6cg?1% ߾ZԛNl+.7WT'M 袪H(Ym ͬk7G}iXn 8չPJ>Cxffp_mkQ__z4_uU-~4|T"hMȉxG]^<4ږFAwG{> )mY>>"ysj U!`|Jzs*̓KKNlrpԕ'0[0_D'CsB gTQ3#v%tJ,\P~h^C, @w;2cMQkQ?pW;1,vE oۙ(lQk65~zgx*˂(v4R]z:-T@ `'a 7=$P2).[W wwYm:z5kch@Nd /& aDbbrj0`_As2c}$ W)P,wFDQث}VStȃΚkﴄ2nB4ZMP^Ta\pw U6IRpBdC'twy&ALNZcI (ߧCTRr U!TOٝ|긷z |3201[n qxg'ܭYqZKR-imҭ8([_I~Jӧ6˥" h䙘$v_"Zg>&?p e!Zrg};(5[̓cVVzCa{H쬂ǹ|"Y3c UmIؗt^@mW6&T~θķQru2STΌ 9%..9pܡQճp<@!>խ?L;1%~Հp'J*ŠxBVj|_@$@ZT8 }B,r:"*)R2ԟ [2 G}wBwP$DJ*@T3t_A6<@XNsJuiOd3H]\_^9€^ִw%%vyBY @KV?%9u$t{_/aj?i`@Pҏ ,Prv8rV 5Ʋz{Iڵʊ-huopULㆴ >%[5L ="pKUPC~Xb){90dwq^6h EmYH!2gg-dh)1Vdl>0ʎVT"^ّ z%eQ"Sx`Kvv"v!Gq-MṠ'wX;~b o,&.:WknQ y#xw y+gnq@,1`-+)y8~3^PLgF6wCjS۟-kҝmyty_ >jrjXokKQw#a Z9sNVZ&2AZ಺5Hתgc.?<D<2v,>1bBl'/Ѱc#0qa.sj\YyK(*V]_h?V"xzWhqI* i|δ>% m2YuaN`J#[:[Xԩ\98g< .cZRlΡ0o,1 uG&WbQyr 덤L="t2-g t砎Imn%Aj\dk1|qREם7Gy("y@/N+/Sܲ2(NN+oP"7ծ|[Ը&B 9;sa/u!glk؏6,8(;6)`MJzXߑ0L*$KL:%|D~gxuM~WA*S`-gwg|U&6ڭEV 4AM;1^ՀkuH:U< 605䫣uraC!gJTsmkBIʃ3f_㲄9׈ƚalP$ F XDXLTaEyfBvʅcv,U7q'4@7Q#+XsVIYeVYg ]l LZ܆ g8FJ^\B,u1$)>fWEQn3ŻZ(ք0BiaƅxɿWǷQz*Ajϐغ{7up+ܗǐ߉j.>X' zago&ݍAhFQxY~Xk,\N,-nؖ9$0E]:2;1&IL. Q(xƉ( $; =8fl^6g?Ym#8#]_ko/SyaV-nM~xW5A 9چ:?Uet:YQ/q |*Z>sg]>^+sE g>:ū.9r#)HpNbʨiDMP!u@ct4^xomQҖ(Zv O69h ńf0?>kkX݋vo(:Q{]Ot"K_L;핐v;9 N0ȻܔDTXc#y!гc[1717{"A?!n#*)IPV ̠4 yɊ\Ҩ<4lSX#L*$ Tw?8Dd߭S) *: &HyZ6y_h&擑41 lB>k7D=mVF>#L | րʒD꥟s%*62E^ބ+ ,qEsARzI;hqg:Oֈ唍@ RC.U៍ 3jn J*>;NY?+kG0 v17D0g:DUNkH-͑`S8X* Qt yf)z[b3QX!J!q=c !6S+v)Q@gr-awF2؊ak,ct`:%E:߉eo1l]שlcGG4ktpX;2}Zqi&SAew~ j WKO 8h6𥽮Ȼ0.ηKg/}4A$ZP\$g,T҇GzvǪm1UpLȖq_#h#.}3 5 &#>1 |す]pPLnGLBZj( ٷ(> DBiP\x;JC`$%C:dszܥ5d XƽpQV.߁jx%.a <@NI%Yg$3rryie,Xe\:}epny)# _~t,>=fEX[f. , W"FH^TU:NAAB 5EL!{>[]8Ϲ LH&)<+KҴ&z1^uE:}g(ax#吊nSJyU찃b1idVƟ|Ay|aP>PP;сf]Ti9toKu2|-'Gp$2.ӹM +icǸS}o(t si:J'o{6m$7zcV̸ƠviuZcL{İxҒ/=6Ոv+(#@5w'FCv]˯m/;v\yX L./{}F[C3>-OבnL[0jNhhC{]OZڿǾ9I-+wN-aiWh`dMXt4@&-:+wCBOpk=l]@{ 8%ZHFJ:18L_GSN"CC@ob50lڐy)CEhvf}1OOu"3w4πw}^ t#k[6[q ղɬc5fWs~Y Uk] bNDԆ`BAMp[݂_rn)ČXPY3~d=zG.\a6Y׼ |fHDI݇ d'&La aFO8sgs)Yk/2zx5S ѫ ڜ9tiF 媀]a+2Bl1?lҹN!Uˌ +'tJJazTtʔ c̐ݗ,r7u(4l^J5SVK*q Nlc$~/EdR6_ϑ0n` k1 /EAHLy߅+@e>c!f'z~z],->׎4t"){'! wsI?!ݏɬ:`f^W'F$Q7ɳͳe-U?I¥HD+Y n}fcX6I|_9.G6ʷ6OPL+|G؉tWJ-"eT~3RC9L]'K6G $AasB/Շپ16H1/zW2Hëv'A;I@^lӠ-4Cv JE>V>82a|GꅿkӳnC{?2jrqu(!v_&k17!x&[ݫx㰈fwß2YXY'"Sg3.7M|*rj,bi~$CMh![B~X^nnNU]c>o N-;#0Gl6K0&LJ(*!YR3u䢮7 vR M3|) sRUJG33LSp)ABAItIƇI4;➯d!D>/|?گ1s#V<(߷>55'D,/e_C&adK&=zaSOÐ<r$1ኚoRc],40x/2w6|Q!jY@/T,^'`kg!,LQ**0 C& ^{{"8QX.5"N3vw fGutTd)9QԖݪWrtǖHE tG; 9bY`Y9z1@viQY:[OՓb9bE>QQ+85Qk'Ks2CnOՃ[bȼeH.m sNix<by-{Q3ok^6Gvk/J]cƽkR*d|  I5mg$ y|mԄ,˳D|ѧ+`Zj[o1IpO!E ?L(̤/4|'9!$i~cA^y_JIm{oq+jxSH!`f$e 6&:c6?!$͞.,N~-`Ԭ`mHqU.wvߐ3~hj:"=RhX,n[/9 ]  +GR^)M-K ]eTfƠ27Qգ외$ˡtx[ Ǡ|ԅels_OGJHƨruF/sOg. AOr{X%]"Xv.C'F-;[ F:*' Ƒ3~sM!F%+̭qP: xR5|xͰrz+&ԯ0hDq^D'pDGhخI, ]浭t0,z?ѽ2+as%:N:{xBї?6DDGSpaFN߿kȤu`J>g_}3z]g.: >{%lJd E4Tf RYEB]UE\"r5`՘[I4n#-{*JF'<<7xYBY`c'zu4Lr˩֒7zmjRVJ * E>(>FRB =һJ(^wW°ʌN&*Z:En?r\)`޳bEڃ^pVO].j3@`K$\# FF#t宯f, U Z+іS_DI {QϜܦ;eٌ(g3<J|ieEҜv/E]!&;-E=AtԽӣSbHY$* n1tP7'^GO?tXw7} {gẀ4|Sb߉<*UMXgt~.ג].)qU1~X3'${*&:`{j|8 RfF0̽\`up)qًPVF;ܾgʬFR}'m[}%Gzn)?<-R: u; s^}U9mLY|ON <=kKŇ.# zʛĒn,\X-Om[{XA3x;!/ Ԗ-Nkt^`jHϋZjA}%mK4 IvMuvhu$((/Q/1n7".TCyPZK" tzUyLGUȝS:4TWsF?zX4dR FI pu }aPHlzd,tx+GnkE an=l=E ]H #3$I-}f_FDXN*BzjaMf߆(Θ`Lջ]hݬ; [%./zWIT@8e'<_2jD)b|"lyl5DZT姁]D$KEQb䘼Vq隻 %_ -yCF խYq RՉ׻ SU;#٠}%}sSxKR&bH1յTW[,K$hL`9YLJrwgyנ_{0cWCԛԂyț#n sݢW$ʋyrSHpTXڰbB2V[|D}Ը\3boLJ4%ƓJP6>Hە4~ʏ^c|r-[O3d{LҔ `8DSd"a-1.7j {xEʂ_GM?3f֯q^?3 ub &/`; >}nEZp纯m{/ >p`.Vn rsv&ޣ79!ba+(h&Xx>6*'FD {2J(yl kw\7{?B m2NtHQ%>$Ӟґ  Y6N5&L9mU5տtfui%0wÝŋm0SDvsO;52( xt8#$.&d\2?4=2v {bpcq3qȃU\|)P^vx0$|DyK7I0H (@ 9!4?0?4Aekl%]lvTDEDzmP`~]E߽p90}wcR ˏr;R2Y THvʓu6:**64Nc2$VwuG B½ͽ<˂c ,g- ^ ~z UVȼo9$r p'?]m0˱OnNNs\-$mLY?;Y>R}d#5 ioTEfa̶6-vP49)TV5HX9G_s&mgwzv}Z AU;-6#qn(`P'Y3@5wi-)ɷ< Yc.8-}~S|@֢PѺ?0n0X-*MXFWu} w :d7(M.@"B; AyJe .Ma\Y"g?0/]*uzNF k/ro3XwĎサb>ڰ ZR2+J(lPh'JgmxD-> ^LDH6Q' Iğ5ùjriKܔ'B]C֔fuQ ns.G q#7tth<K=S6 R9g'a[U>xP' :0愼'$YgKZYӂlX^z2׳aF Vq7<+tƐd ΠF$('Cd"[:.^Z(6`Һ~YScX:Bp-bI?Sd%5Aa&ȨŶ% gK" E3'6NׇHSeb% _Za@ Lݩ?w۷qt<0 X EBx\ݯ/s2 363aC*IV@o.W[kꬶ=qJêChk#q |\cdqlș' IV3qU$ /_`1іys^!<~[0 xV6fN㎔zzyTW°GqR|b$ J7lƬ"}Bv)I]¨pz _?;C^NX7FO";9ඩjvHtd PTut I2ffJ"Pa~&U pg-<z1~٨pv+I/ț@IfF,>douСM-ߍ,>oV8o^^r939Q6!%#j,N([BHl{GMhq%|4UKx%(rb,(?I+ SݜC4;5/Kf"S}J:i5ERCd[RC0ZwlXK''_Ɂ\沋|~s+us܋$VUuvC.V# T2]EHSQA/$x2bv:B LR.MyJpXW:V'T18#2,U{mf!]/\6o =^H(!򙦊aꔚUOrqPǏHjD"S?C']Gҍ'a5q%gاI[`9#He6bE S^o?ʤ#ռd7tӪ 'Çi:B͗чw:ĤyxcM4N麭6`h2(",ZEW{.g±mF7%^}0ѰhbYnM73][;alԥtys?Lau;'BTA%dT] ӻ\UʉfDkيRm2 E&V&ww1_nwAГQ=Nk<ã. tMMW85 "#z+?*]ә$ `No3&&slK,b?(DԧhO"˅ZUbl>P̢ b1Yz3;E>Ω/X "~6T?9/xȊ*2HU(\)(UTLqWH"VCEX  b *wuWv9l^̴?xy@_V~14[qVJO;Fuxe{$=!Y$b+}(BwpfA(y3I Sߢ7tdQW5zsydbY)%7 ^OזhhpUO4|1H%t;a͐ D& ę '0N-aH"9trV;A>/T\?l|B۷1~$F=Ok 薩uPswo_ɚt]>)]#L7K*{͓#gI54Hn89Hɘ̘.glD@6?Zm!ct˞ B@p?z63tSZՌ`&q5)^UN(̒Rs[)jwB TP\bn{^A$H&yX |~Gq$HlZÌOSdI^ЎRK:}TtS[t@NpeB4&Œ!̘)ɭh@Rm)߅:55-C(Qdž5}:6\IUo7!H :ru#4=rr׃Fe\ sM;p>[IzaX&'U=f$@4_7&r=V'vF,[p Xi|Ds!#D}IM*ʹC0&S.#Q':٭dzt~۸ o4$[\E۱(IwC)-=% ȕݸR- :~  ˬey}K$yUB 7$hӇ=ehGMm:38Q| 9PɤZ!=.:34(j u+}R7bndp}vK(xGSD4!]#]2+[tz 0}eڕ4{Gu,%o*Skb9>\eJ ݸ)&󚇑`W3oHOWZsڐsb[psDVT`gI;gl#X7eqHwOrW*lBW9M ,ގ=fn6䡎.mG{̶DVe qX'vlJb30ˠ$%t>h)pnhƑ xQX!Bɦ*SDYgI@Œ$Av.~bfzIfu*[19ڧf=29)RK ҕښ]$JÉ-dL>xaΛ39.jVT^VqLS'GSªk¾Y!՚ځԮ&Ly×-D@@Iktrqaغy$L R>Nmiy1]eSCZ;%2[ 21Pɏ$f=Q=OfXwƆ܌<{)o:Z` O,hЃw㑋)9S ^* eS,AmtuI/!.+ _LMS[1T4.a#&E6"4Bޖ 12~Y`[*Ӓ $ǜzrdwN~WZLQk'e9$OZf}>m/RsvYM i@iB_SGc9≠^Qũ(Un`B) `_c{mqBp( h[\/J`S;0@w]ɋ=EV? [>+ 5wdtk/1Oqv)aʔIx˴I O84pӄG-x`8qlq _iOX^%,@C)5y/ޖ cc;h#b\GERVcYS~0CHqcw~{̨bkaY&m UmpX%>wɍZM8*7È~W|06cwci.dj;dAb^x?_i>QE3vDtb4*zТG.x6Sē%U͟|;8+V%)FlJcHϊ80)?n|J V uތ~*ra>?wőM8y357f=Wiv Ɏrg$\O; Te7̂W'BOC8e87U`A]Ix}"I\bÇlb(=׳OocatX>PSIR-iy1¥e|*8 y7U}oߗ(4Th"&OCA0b]ł(6O+(a/ .UrzNm^-#}лOu_TcVk)/_@mA.7.~(Lih$ sr:%Aj~('1@(E+W6lHY:.+^[9W>kv,*ZG:xc_,E;G?TAu۰F2+m>!1y0OO碱)^z k%8tFOZ\ke&Ϡ9W*}H9=Q2os&3@M#u\`JN|kOK$7텏NW=cMz8`B# ];QTUEhƑIH"c:~uD&UΞSgcDT`֯hi PVވf3_4~]P MLL'OuBOt%rtVIec2T!D*{ؠ ^B܏4R<;f&uU _$̓C7rzrJ$6N23dž!o4aT%Y\9 #mbl݉xrRRyTLlY2שݺ>4@3[-TeY&7yg㯙0I3StHOM83Ivr@{bXȝ|qCY:hg53ԋ_7n%ѓIF9 ,+m_)Z]`c`&a_¦)Tvp1;-wX<̱B.aPeƲc%-CH6tR/Y`yaƐT,sGlwéѡa7 %5ʰIlʇduaCl5zØо2pi].!~ w4v*hNHsSiov5eT#R~exF mKV6xJLҕWciKOZw+PUxA'[0Կϛ-èzwW$05S;.Eu~;3fQx4ϧ=0$A0R>W: bmsLM[&⣊7ȩ؉ #5&Hl;SQ0j~Bq%2սP,BWԜJx#ם7Б~Jb|8g4d]/K<Hl%, C/9\Jca'87f ^]) GU|&Td-ذo*s3aaA]'OBRK0.pgI6:oۨ,|y0]ov2wk;1^6-7*G1տ*8W`:0GT|v"4XN\R5r[n5m`>+)y?2UW%Lw )z1V@^lY)X|'qӈz8GItӬu`M11\cgywAifVD L4 *nE:u-JsUթRxn[K6Iи]V((F Xqz*09ԈKd߅=AQ=Ii1 SSHjIt47_3n$m$ bu&B4pPt !b{%0rNs6Xom4t'(R,VH)CYe]twm^\,3Z0JpL$ϡ3'[ k}%;\Õo6!bl2UgDQʏܗ=̯7pd{i|HȬ^2Pq.U%]Lbqv;yS9 2#fsI#?V^-~-'Y8*ܠTݽRy3ޖ҈g?7r!1PG.OUqޞ ~ŮB=Ѕ5X)mE!=Ã~\3WanA/\q+G,˦Bg~[sΑ2SwEյYhNQ4}6B 9^{TwM|nWJkt[Gz6D*n|])df1Nލ=$@A>p>_!ؙ0Q7e2"V(5>[fXO_ƨb]sya.o)#4DX#K(7|PУ|b:"R0q@w[e9~w,LZ0$0iyr8 :@ѸZ%Df*fMaV!XN̈́#\57-y5)9Ѣ-v]d{)Q[>˅KU[ET6|FKS;Y j e4ӕc c :LT%ue ,2} mN3G لDeb" f@lLloxa~?t' ?zۯԬ+e[r|E!oϩ&=z_jOo`wE^Sв3u8BMRGqGǸ< jhQ>L1`q2DyL{a^qY_3iXqyNW4quE:#=/ [ΰ,j 1U#|Ֆ`τxOofsUn+u~I ͵I&\UHVJ;ҍ1X2S Uψ`C0}3XJH` NZA<ϊ\2U\W&6 R[&bzYwcO*de5ʶ4qod#K -];dGRT|eNdLFRhb ̠O "$qJ1p;M)(,Q#W9a$e!\qG-2_{WHvOcO=ϓcK=5aK_ą>kRkΗo>\#=|>k2i¨W$!ͳ9HD"}U,|sPGZ0 +Ν\v jWZ(*(.O5Hn{10]0{C W\9M~B,̖wk f>g0dv!C/YmX0Ma (mR{4@< &3mڮ@ruX6IAξfxa a0֝;N_;j=~qd.xڋ_Bdty mϢ9s72_՗.1Ltr1u4827{>OKkVf2My6A$,2jKIUKS” ,ф*wۯpEFU/%n[dNfnXbuI*q_, );kNVsuo'GۨuB!><ڝ.Tm22m~VQ[ِ0H&ȵq%.Ӟ;eFl` oP@!۸P45bwALzs+r ijL:hHWۯ͟D*?aK\ascY;ڽJ/c~j|sA"ťw)685=<&SAcN<׀~T՟YI?^̔l<۪Du Cg.[`@1S uz{` 5+ff"GXN'6)&_svfХNu u5A-_a\SZ }母*!4W+ }둵[סC emNor=s [R6dTW#{ sEb gus-@Ck@X:N7c%^vm ʂN#4+60& #l3n_CJ< w} AnH+mz\]ZG( 0{٦胲Fcd Uהڟ.Tz-jrιfKaN}DŽ_[Ճt:0 l W\`k'Covz*6yeϝ{{ĘUda;,FJ1HMR}EcmP(r"Ǿ<~3Ơ5xNj$\XxXhjbwQwV˷!њ>dfEyj9gNغcT~^u !. e駒cMxtA߀b 'MR4HV1aaV ϕMʋ&{˾ —4 4*Q / "h+01n+)*`smlO? ^,ߓ}lqd2DU/51z>P4f/;xg' p+Ϩ1a7_+/YcS0@iTļ|D÷=]-<佉q1/ i6 : PUgwm CW2g_uʝn$щ-ɓ !gu?~PJ֠$~;BO׫vmy٠ab_ŹhuGvT[J>Ldu*LXD#L,S"v7b ްumoJ9v'ו5G:LP։ {!<8`amgcYxK/t5u5рvUBycBjȾט ONG4b+_o騁w/yGnA+t0ƭ*]JN\:<+E^`1܀f€K mU8\R=H}Gm!>k_T[qeuUEzC$_T\jH{gk+AD!K:E]hJFSHK윩7:[@cWO7=WN*=ϐ8F56[G9W?rSR;#*s%!Ho29Swz$C/eU`!ɢ.Sn>3Lo !C=GIǷ $ARϓW-so5? 0Cʮv%Pٛ!(it5)vNmdA_Xo(1/jX) wqlKmɺ/М p=nxq*]Qa22lThиh'( 9Y)bNd^%"#Лvl A 0tJ3nfWh6pb#st5YeqU[ȑSʝ8yp0F@4"iD`dnC.w%HħE:mA40JVR*\0׬1.[oJy@~Q%! y:~_c^.?>$C+%c'Trr;R a&뿳.C~>l0yb4Ֆ9)j.*OK彤ڳ}L0#蹭❇"' l|FL}q:6ڗ(IYilIUrQ%'FD>`jEX24T@yI-biu@DCkrk &)YTDP7p%y{^8[^ y/mIe=@Y F bpʲg`V 2oHX;D?RT*YWu3e;ᙸ Iyot钵 9`S!1Ig#8X΂Z#vAXWqc] 幦w9Z!٤L@ceI|!C/m$`#l/r@C15h iVKf^khWG^^' R><B?>Ѱ[י4)+zBq^pFlL-qqqXvI'4)Ku_[CYp,hj#X*P ?>3ZwYIlrxst-*;Q꺑lx-/ӚDfm2ky|W PYE4OG=s|AdokP&)y.zOӀKN5,W#S އ Ìġ9E" ~0ꏗƥ#KZlat P>_QPpY1h0Yç\T)g«?FlWb>ɧ}--<"] ^Н=p䡠~x,2bYuR@IB24{]5L ~ ?C:nkQ);6ijWF;8zDk "O#~$lM>^pQe},׽dDՐָ%mr%B{rLb|}r$Wl4l1"zT,kL{N/NkIG4) )It5cWJ$ n)ex@,k0-nbT_NKzTv6GٷxkVqN@4̳2sNC98j9>ol9:ǓUi6OihrNZ}N<UJY|@Z4Kό"  ŷ\1`B%¾[@$_\A, .beD::Vh eDtda1F1.IE雩ɿ] 7) _ӐmDcWx2;,ޭAK6̐ j5dv&"^Dɉ^ކ&DZRl#1wsu7{shq nUkmӄO=*Q_G>i&T=2}mBMpO-%fyt~o mkC8)ڧNiq.巄%oE0*fgc`+5 Uq!abWD{ 7M{e7֭K/JU'STrYڳ_l1-N^0|ydj˕X@{#.=}J!7cM\%L!k쪣Iʈ4ګI9ZgߛW\{&dp /DXPv;ϫ۩.0qoF;\* Ȁ' 6{ b+HSI=}r Jy4ʖ3NC*g_jH$IvIAhr=q7vֳ^^ջ;+۵L0<"W 8.F6ڬbSeȞ 8 .7p4bo 7/4K·DRapt8zΡkkX)]B6c9>Pnr:̟B Óo8VK#i6m5=؎DcRRe%^<oռq5W璀X3BrVb~aZNw)wʩNTmq)9umv?++bk]4a$|V/u| mu1Kb jII;`w[xBf Jo56 03vppUﱁ}aJӂE# n*Қ&K{BNpuX%Վ&t:v][D+qcnPbk gl$4M܎p'8*al64#w&/Q`V^dTݩm`PL÷1aZi@!ЗU~ 1JHyHSU|ww*9@}썙FJ|VJ:! ^_ڂ()K,⼀< \okW?K!* ԝ̗6C! |%BA߄8ΓM^B6NsIeΈo4Wh]VvlR#kq*#h"w u/`DEۤI)Gք9^˪NbNA&0% i؞SޮMN?QSiطj+NJN`*P쉢Jos6oAO+FU!,zmG ߍ0g`량xSB5A,2&]d؆}8':b:GoYb.^mjF QsS=~@dYHu) ߢ<&UsSNHy Pn9,jlD쓆ؼfNh0q.8F~0~$eXLK "!qD3Z=;l{~"k*5ԋe]gN(s$n}Ę\h2`CEl GG!A­?`jLEs>(.B4zx(Ƿ' R~-*$j{uZTotӒ(hz/x^aT4\6%]| o@w-ٱвVcՕNEiZ:>S*M:'MXGd܉F\GEeτuQE 䮘"E=P!FӦ&+7tdd41 UgNheJ*T?)Mb]7ܭ۪T}d,@FJY,N!,A"22.5fTEZ؜6i')%z5)ܴi.E *1'rI߾r gg) [J4(!XfըVbAWTD,/P[:h}[":bw]~&+5YJS!9Qea~Z}Iׄ yOŢ#y CciGC}ӏ6TDLѠs`oќ7@) `&% K)2ʼnPJjh$W]{jdF lB1\XeϤEQLȳ2#SY99Ӳxt=M "HVVS_4SS (-"c&G5LT1ˍ݋VPO"tЪDʋRlRYZ *zM3t KHhj|tL)ʼ-5˓8,rBSaC)^ ir&>7ԡ=9Er#.ڔ[a  C*!E8XXNۅ@ʤÄ.#bBdPH[TY,%(QuͱV;,{-a!}CWeHoXeY\Q vU.Chlu\̛[eeM)H`VRp4Lƴ5-4.KgFG+flrg4dTǭˢ{Da6+xZҒ!צaf[.)H.RX"=A+>5]=udzQj`(ʱkXImѺd3()%eSd&5vc :٤ ȭ ` f `KX(:s3B<-],fTb8`rR䮛scMV"ҿ*1[RcE qW rPWja]>2aOn HHlm()aXv(0]-3EH*rc[:KLaS Ih ڗjQ^Mr!|w"1-^ɋ[b]UCx Vhf hQ]25+n&3d) TD_x$]4 UF 1"Li{(bd-8Ti2$-R-ļI}ML@ϞV1 V X4ԍ N mTRU*mKraτ yB O[J,"Kd;({^*k_4E nU"Жes#sܦ 'ie0VU5{pEE1s89t X] IQC=5kK rXHtGN1 ɓKV2ٌ60_c|6̣Y7GR&B1]ZtRQ3Z; U4D,=4=5@L˥7dS|v _UwÍ^Wv%uvKu7Da p Ę%Kk\F xM+ALhmimvGdp2٩$Kb)4׽Hk`yJ ;IUE"t茲Izm\%|cNnB( <`ㅅ5^ں6Zmr¨ڮ׍Ϊd%fJ8:فK6\mpmkjPU3c(R)^aA br!Ecq3gYb=ukR X(W#cP˱uXo{`R61^3X 0]:8ks> ,GjUCl|8jMwLDmejQB7EEuNjfUDUTEƑpY%2!]M$FU2v Bٲs 3OD1ӑ FMj4ezdAaT9x.<USSlT1͎UIMMkP6> [Դ4"!@Dm^fs톌^@oLO {}:˴Uڬ/7W\m $|m3<i71$!t.Nמ Vh) 4Ls IF@] *6TzU akkFl0y,7( -Hr׏ &CDx\%n_^SnX bZ N؟C_b l0,PQD3JmQ]7뙔ؗ5JV`Oר}tYgCSVE Xc+Z͞ `kN Q+@|;tf\\F)BF,Me6dݬlAh< t }ci*4T+ IͶMJ+/лS>P4Mӹ(5xD4Ҷ[1@i<*AL(C^c餐 -ՄŘgZ@ Vd:h 2 ȀG iP8  2 ߛ83pXBpÆ9Ç9 `08pᓇ8pC'C"G@Ho =~%{[k7lD/E-nbMWY޹LY>@ȊUD<3!ξԦrs*8܋s 8f}n#a}yML2C@ƻ:'.VXAMS@0՗)Dйcs,\:0xhl5XP$&+Qdqa<mO:x'\>k*.x"Xp60+: U4w r Ԁ5c i0( 6, (rFSw&>_-o~`fo}W, 0D [wL?%GƆ^$uԭJmWL~x\h[iSEvn8UN^f@vͤO'/6~)6KjVt"wū5;|j!?E8dV_f 7LQckvrPDM&8?pxoH?g* c:4!?fCV9q{ PM3C(2:O:rsP85Ǽ{۽o7_^LPMé$ng9pyceG>@>P̶DQvjH )9NLPfo=w,fI[KbEpSۧ0I^@]KN&dl'>H e kv?ǧqgQ?T+ZDH{X"?y{P : AOoLhARXF; b'ԗ?3i')UWņ @4 ށ! {TB/l ~T㪿j)4À 0u;lk/Q}?.!Fg-_+-M68í^ 6}hiڀR ci3*YpA.|Ob6fglo.pj 5S@0Ji 'SՒdEEvZ 'ޠtfE A$I&!EKA>ܞuak+ * +3|n oHIG='iYq)ZdFbTn.tފYϘ0B @P̡6feIZXrG4c[%.X` 0 1FOLx.ˡƪ rOY S^g`L'RT9# {ꔅL * ^5#ܹmgHgJ=DA&ߘȀ9e|3sTt8OMdUJLf[ U~d9OtԤp<7ZHQV7 MZ$pF8 C+ n̞ ( p)ca8,b ̢L쭱:I.p#Ȍ3n+1Wɳ8Ǽ$}3gR OB+@^j>`O\}!ʣU-ĩR($s8a0L0+V  H$88 JCP'&B$Hv(~W=ܕ _;1H0p|vIOOᡉC'1p-PMw0W*= D%#&4ŠE -p@DlI!B_ n ,*1@7J$(PB2`>!Dqqט9MM6^&ە% ո0LִW]r0|"C4F%W?̋2jR07I4o(lQ$ K)ҝy i ԴIӵ. 9e* 4GF J\3 :dBiK7ک ӲiY.fZD*4aξ7iia&+0 ̌RR-x F\uB07T(_/Xqc*h!tC}W{hWBοa13 [p .X/ɬ8w O~^O#!R׎|m ?̜Ǿڨl-Яjcn47@(Da[JRj'N 4'lM nPuMhW\]f2?V:\UXw&i`k7>&[!-g|gچUbÂFq9D-҈4E vc"{)y Ш+և+.P ƪiXWXNis$-4;A$O " <%J:X#r9e[>9_QbMgaH4x2FH'@:xHĘPku,<?6Wukp 3=t*M¤\Dž1!;eh zkFfz5!泑mXf-(H~QAWgfs93Y)MeEЁy,vBq8}ʓ MD(<:u)$xdž+_;"r -G:A(Yyoᴙfu.:f=#qr43w*)]#KΐHѹ6; ]w>'kZȂ޹ε0/^EǵLjt9B?/4 zܷ 13\\we mrt>{Ҟ^+0,[ڸ u&7? zH@fb?%ɤ |'0P2uen^¹řYl6{.ӟz;\l8?aB|WL`_[hw~-yH^;2N۔:ϟy4>@9 mR '_wלV uNSeBh cD3(ָq]~\EJJ["Vw 5)Yml@< دӷ ,QVQ7I47%Χm;O dȿ${T<4~lw"#hZ XݦFF*on\It7SCJ$At[aG/4 EJ$kyEk"YtϪF ] /gkuq+j^niC{e uqij5375*duvq+EQ@{.!L"" 5 p g{uYx\o͓ܖr.'h)>%ytNE"! @qRKeD3n^I4'^d L\8j12 ؖEV#7ڵ.\ ^Rar Ba$n ÷F>^2lRCUi^5$Ē]z.!"!!KBQ-kU݈@,yURD-d7%l?aZnQ,=77bJQhNQ-bn"%D,=]$ >Z[*3QzEdx$YXjQ B\#3Ro! ԐǦ|[T8_"}cBwkş//spIi i o.*25:?S[lu_u:=b?xyyBwAhc^Ju};9IY6l13g"&*]@s-r5ҰJqua6́@A[< V`a$dkJ)@@vSM#L1Lm[&v;p"lmn5&Ց;3Y;m-K#;6(EnKk6d'fe"piZ2Qd͚mAu4n-lNk:jkvmb3fdmIlv-ؐ3-mfb!Y$3Zq9ͦe$+nku[ԛKntvkiVvfI6ݻ9me6۳nƍml-۶rP,,Rsm'kkm6fŜMQce0Ӵ1[6$R,s2rec[7æ8ewugۛ5XvQvG6K2٬,lv6 䵵iX6֙1$i!Zѭ34:ٶQ3mi[:mmXebF#ٓek-m64,fɭjfhV6v\g6,m[kvlX&mSm$;m6ӋmXv;"RwaӛogIۡlcv٪sֳls ֳ6ilYNKm;fvv7-.fóvv[d1 lfQ۶ZnK5;j mm4YNi6mM4ٴ;6finat-2C ݒIX0ˉmeZh7mm0hPT,Kۼgt8VkY> id6) HHNCH*ŌQ&$lI3H lC ff0ѽwWKp8{/j.A&p ܵ 6::oקHihk8>ϴ%eU2r.9^EF1|=(0}A QbՑSTCB\ CXFzJv>QOKvϷٌ$-kvpu+?&? _~ײw5uZ[5:M8C&(맾0R݊wdM\Ki 9uߛǘU-?TL!{9@Vkxͬ/:0HF=*:Iӆ>.cMvSc7dF$m XQw !$Kۼ @YiN,+*sU(RKs)qqE \B\NT/NIE'آ f LV$A<@SįKTG_sQ:$ oǀwJRx )")&D 9t U &I5) SPS)tH3wDηV*/J긯/m}FI s:I<1n9|?`ed KT0 TsSB.z)f{"$D€Hx[2u%aT TЙ90!{) v4Ud@K$3BD!atHa~CtL`'Pxr A<j^wF $N)(j ,uT}BqFxr7 ˇ! Rdãu;tAr.bf0ǝ?/+JoqxCpγ>@ڀ%(̶hI[b>.tDAHsd)7ewaACNڊahH dn|A)fRVG9R`3&9\>%}o(+3\3b:ЄMSVUV_UW.)}KȳRv\y;X+ddKyr1Gk_;SV~I/IߩZ`hJ_[R$"G_.*!v#rӻaOu&TxVnA$a|bZm[ڲo8CU~#ԸtIw>F93a+Ҏ׮V'(r$Si,bH/n)s;9VF &pXBYow,io:`"`pA 0Y'%-)YgZg ێfݚI2[6ۜfk3ZfֆE5-mٕͲDjs,čY7-ěc 2ml65vv%6nm;#tE66jslq-j&kc3sm[rPDB# Ȃ̖-lrkv5ۚVc9d۵8գh鵵Zַ3ƛfZz{ݬ3m37mSKdڌ8m94жkS&mNuYۃ&ڳ[ve3r2k֚m ֵetM 0'% ??ocaה 'SLڇ1eR_hs 'C7(w +\v1!U30h pi 2w+KoGфP[v3D\Ѝpoq?&-vuMX*AW0?kiYx= %sXI}cJxףҦ鷹ck_]+vN; 1D>t_0,%ls^Eij]kddGryQD֞`yνr/skKmY;cdq5mkl۴봣MmG 7fLل$I@  @By%m^W%' ҵRw2M%#Gzivdi3d<{ImXA}=w|'n$< $bmVֶ-YY-lݭ67)f `<?Bco["R@bk-׃z >ՍyX4e]{>~wۮ @IH$3m4qdkuj/yW^a}!p%Ӎ$ I_zY&__[;JShDBHA7u?o;k $pwsxȨ%$G6Gw譩]7#jqo9,,4@8Wg8)k%R43Lf 00fBr]_qyt8γcG^rĂSmԮn\~{a;Ƭْ-4DAOm;%|[`{jۡ=bk/YU(TYaUY޵CVo`?5i њ/YV4)zӟ"k~9&WaUy;9y:V$\&t'ZiϟKÓ %SXϻBrψkT!dVg;1Vcܲ5S?MᏜψ땐a>ӽ(@v 8|>{ 4f|ϫ605y}pE(g2n)cCп?2WC9fQ'š-Tkv =ONq(^cOɴ'3o8t@9l+gشdi9ij ~}̉.Ϝ/mID9VL(ķT31̙D  n$I`! 2I%H$&S? y+Đ{<1Lʽ{oq6[<&!OV2w!I$'A H}w+O}[oi.΋tN)`ӜB] (W O@{/O}!!_=<޿w~$')u}w'_^ִS[ *D/36;~c00` =m.s3$94GK\CT_m׿%6]M~4F茈]C<{~V,;`j9vӗv\n_}g@C-d5ljn ] WN"tFu,&A6x :|Gɟn/dD>o.|ݩhsӉDB\KoEV-i^*,if=+^@T_Gҟ:ާ[{D 0EW=*] /$ mғwOy'ѥY9 kY `3%'<:#+oG^ Jbh1k Ф3;$>@-ezd-3ۨGa% æB_[w3p?qiS(#U) #z[#v@yjA ;݁4wiSuƐgoI:S7sO0BuIT'bf}}qVz^f1㧢˻ԡ[0/n|{ Q-:23ũ:_ Ӳ] >C<ܻ Q9b7yM luBwkrK4q5(K30-A  w 2>BHYOd @2d@3=C$"I 2B@ I ^I@HuL!]8l!ImIx@d@BMd$,$I?dꐐ0$ ~l !dH@6a&$C̄\I7 'ܡD?H@$ m $HOCQzH(~BW `$&L! ?ܷr '~.o5X@/I4 H:6@ӰBwoa??Emsթw49,yywݣ :y;~.[=G=~~:=SuI$r v/sq-wY~j*g\0Yh30 7ݖ͍㿐oݩzW}|hU޴qgPCf9ew?/3Lr:U _gc~odRZ׽Ӛ_Cn?l7fx*\w%HD `6;4\\GE:#)0@j!0xaA5 6fVDtտE{^'xfv; pLH(*V /.lT!.#B{Yа=oգiDpq>YRROU{I\_!ԋM;C)Jbl?҂%{]?B_VCKxJYZZ{S]}HvE y'Gs>w6ߩ.Y Η SJ:xVml )g58vtMlɻvk!2flj8E7|XNHjtҾ1@HDAϵ8<;#F `+$gg@NE 4;1'04(A&tTϠA u7EMt -'Bu,j<x<RE!a$[w)'aHqղTM y@dMJI!'nfXS |62Ib;N}$(] ٲlΉ8Yjz$P=cפ` !tOH^4!7{9F|],pPIГ@= rn$a9Tdy(O8N! uLm$0 RoPNFsHiNZǗPS$L9O) 6CIᡲOPqICd:7ޤD:4\'{vozFa yi s z"t,湊sNN]Hn!B{L{$a#U 0="HooDkQXN I) װZN*C@ygޣNnwMN1ǟ.lYnOsm l$a4~inD<ZGft,3p=gy9m򞅞u$)94y'Iu;4`wHqwm2Ά`缞u0r!p'ǭ`.7.z3Ԅv@HwI}?Ki }NTc>B@̇EU!$~!$!=BBI oP>$`I7Nm8 $Hl0$ I n0$$@!h@vd'dHm=BHw:=JY=W uO 7Huk9VC0a֤P!& = K3d09vIaРlI`uհ"}#!~L$Ғv !HxBk2I]Z`@8Ljo$HC|v,ВRyC<&r{s>Z= jHy<$. {;rܠ$Z-f%taXliз>)y+uJj+[yO@Mpo l88&ii8I>ܤޗ:ËOS]4h>+<MAzw̜HpS$=B *I>66vpz>/-7A , P8":éheyWgy()(`pH̎fZ2K9 FƜ7zZ0neRO`:'I``l7a/T:7sR0!$ʤ hI9@XN`JvݰĐwۄ :zsiN.@@$}sV!_Ic'k^@;Z9^CxW< xc>RH;ם =6 5exBi~|o7hHN[\~Z q Oekoa {n$ 87Ws@ǦZn$]Gz_"BCpap@<Ηi$8pzz߲mIt=BZ4]ByWXw$wA$}O/F_  mB3Ccȣ@':X z.==eys}= <]ՠC!}WN;sax{xublQoL30jw\u6>wp$Xiqg0~SzNA4H>N! ǟ={R@kIwVr cHI 3iڒC}}H@{yBwtFlyMrǝ +Bt烫AV #ut;i!{+x]B|~˝ϮsӝX}؁n*)$Nw;om>} x]yWHhO1 $<5cbNM|jx^n{?go %/OYskIWD \/cc`Cpr_{C쫉<篿XHu؀oG{b9oפֿZB~}{|hh!4 ^rY| @3צq2ܯyM@:~j$s:H:Cz~[I9-́ xtkByw'9F<1y|[v{H@x׻,vHI'yϋ }֎˰$]ϊ}mDzIyz ~I;oAڧ`glNc7i0ӽ^3!/'B_ ?Kx9>Ӯ~JȧU 9:CrM#wU*mP8f3Dyj#s(?IG\AtPhPmvi%p`5v~a*.+`h[ÀeG)#][K\Uɇ9۸#R&k(0F%QƖ'@x;-# yuF,J& fUv;$b{@s CZ0Z@4ԬHOCJ'IP('3')nZHmW; Sgٝ/z{$${ M @j~ia'~Ì= &ݓ&dـՓH]hd-$' 8;x(r$L$̝[$2ӲIؤ78HvNQu60:$vkl :vWBdЄ8LXN 1l" $ 6 T# k_#Aӹ1/~Θ(Nb9Lu a#6),E3>/iy;O<,'K9r B.wi'C(XOXk;'H I`x9'$=&HCd'䨓a'2@.]H&2]`ιnêd%ӡ=*lwLa%ЀzFyh퐞$,;CrS N}Tס$Cޤ6$$HBC`v@N+$d{:`I'dN=<9$'(I'HM J$8 !MCNbIOdarCOy4g>ćyTM6Xpu ~̭nY:^25޲s,7Wxs-RTZ+x9~Tz$Pk-|( =ðaG`w~= gnk/ 5SlpD{oO@a-2v|B/D77w=tkfISE@EΡq z^OU}2g7ݩpYC[aٗIU;B+{ u>0E ?yx4y u1Ğ8{Nqfj23\h^ҏA©<7{>9oU-K{x~Mk={'XFl>UNUl Cgf=3ֿz4ãN]0Hz4| /-G<8x2߯?szgH333 ONA4K| ).62HKz1)4sm'>cf/#:>h-& u=pW|N+_=o脧C+e,rTTFVX%,NOl<0sRߴ>=Zm}9o'*@H@IO~uv MI $ $HO`xa_ $[,Mk+!MuP8ؼ r!(]Ґݰ%U@O{hICpk cp8@`P@`Q0RB^?͜!|8O+{Cpmi 4Sd})`t%d)9P LhM֊!PN{nl΂3 !CH&@Y>RIolI?qd}P=B:urʀ,O@"@t Cz)-O6aM0Zy@4H`:~Ib"nh5UJuU$î-@$C;TgwVwn5!yǕ%"#ܡ()3xRY/OSp) 1 _UmER=OJAcК|B-˩NIܒźhq+Fݣ"';Ey[Qy=G7 -(( Z9k ry}YGpu!d#>?!̶hCBY=?89O'9UBa[<)N2:, vs8@k_{ہ:iU鈂 OQmyIC"[hs(%al#f^V[Ԡ > yVy^)[m q8}#pI[Aɻ)<9lx?6[q9ˎ0nab@) ~̜͆;aǭiq}ُ~xt{H( [;1_@ʹd)뉧Yt7I/>O[>%NW[ٷ8=HT0'V>V8@`nჷlmߠj[56Og;GE1"[5?CQ0VwJC/u~U]Q˳-Q@~s~.'˪$:c|#lzV,3LfoK?CmkC<.y [YJ ;ؘmD9TBA'kH"De)glmd.&}1<˝]!DFJ+r>*v@vn$s:bǒHA&6 ր}^{G!r"U}e&oRo/Lll|Zv3` 0 K5 sNzUhJUȌ,6JߪۤB;RWk%@2K_w6s~&Lz%Iv%GV &>+5ٿk7cM@S)yKfxĐ9ѕ+kʭI>S6kꮝ({O*o[rd .[m |㐔k+C@ f c(x1N$t9'puveTo.0 ߎj*Ґ}#L%\Z#T+vZ)Y>RhljN =M]Ȫ3VF>6G0=FA-<伡,>ӗzSł#%8Xc!H'|(- jv}Y(hȀCJ 7Ux%ySŸޮ# iiivI^&c!jJƃ{:Dgt{Z)Ps^-_pGoW ^$԰d_<>Ate[ 0+(&Z"prQh\ YNd GvG\޺%xJ$v?b)A8ɹb j5 _y2ŋƒ?>@G~O1;5EQNl. gt-e8[/Id'ہ?j; 969/q)[0畧Qwr}}G:N_ST&y``oMdN|& j?A)j'2n *R۫.ΝCrNLD ݭ>[v(XkRs+^R__a" ؆:JJ Z/9 _1kr"Ŗ}rևB7K `;/S9KYѱ*^U|۠=X{C[ܑ9\m&9H;k*\,eM"cA\[@{Y"pŠUW<\dVaĖ:eLGX/t?N)p JO.Vcf7)KCԅO~ޠ6p|95ޮ]"@F8_M"x(a[2}޹ЍYD˗kX?>ѦSI~ﴱ@zmOE. թK#ZR5F%0hAYE*+g9#A=g3y$ RX3$,#mΗMq=(f^bJ vXVc#vzsEsˮ(cN~ gzZ^sZ̠ Ar_o3Kf\7*{^tǮ~Xm3W+ۣQF.(8O\/j_=/'dL(iTv н`IQ{P+mHq9_9CMds5ѕ҈wVƶINېMCx9"nM 4>9?m~kzmmO= "iD7X]24%R*^ʫb"R~BR$Y[|oޖ[OvRYn'֎ y>j:;ϾBox_u;oo+o߽=7V_d{E'rG^߯;ھ+4;zM7] & B5VhCggf?'~|^nfu|;)d~݋Zk[Y^ֲ]h~ZXDB|oSo=-ێ{vok; 1dc*(/T$EC$*ŵX=ՑQo7^ߞz8iyqm[a'CQSJ(~j$X,}}}HR, [ep֯MV"QM(:Қ+*jȹ$ZװYZ7ͽ褻J[^{-ݫ΋Yyw}[l&׶.ٶlYۢ/_}?_}]Rbz0⯠4 X{6oO&Z-^>ݽջ+ݹ~,^{fc_J]| ҷiu"de_߮0ZZ˝U2^Y }v]wwdGw^asǯ;(i֊,~m좧淶u'7I^T۳m6qq,̎!]f6+mDv={pwqm^Ëe۳ّiqٶ1|l$̒g-mՖ5_/似"~/{wZ{wyR_g/[VY~Ozn6)ϼ)f]}:-yvwCx羿|yimnmh {oaEqd'}}:ѷO/;5lBO)C<7TQ EM;+ "Cv,줆X3 c: S XrєUPKwM;RWk+PQvmzme`{4j'zi{ZMʊ{{~-Dio<߽ھwwe{`M~{4}Jgyy{^mu脟,yݕY^yIלykntv98/Wgw|to7E:f?.Q^]qwۭ?*'wd=)o{ff)2$NCx媅&"(t%d{%gfۚc}[uDrnwx}gk;8{`4ɀ#&ؔrtIj62u5.՝^Xf;{p\:ٽ-e=vyn(3,G‚.bv(bSʩXqZT5.5;Ok:_^NvG^~+݂QmN=j\mƢhБbY ^Eڿwy\߯z{6gyͧ}kZ{+O[_^#b֚)4ֶͬX[R֚⯛J tʔ%I3fmlqV;/۫>ٷl$-#%9saFb2"ERN%e_c&kcbU*M4"ULCu'y~:խ׷y_;6ׯGO~Du+P:A"f=[yoc{G=VyY[c_M?[|kwK-yOdBt";g-:4*E I#홨({msW_{7jK*{FwzL܌Y7}|{o/~k ^yV6.EdEv)%PYVTSYA? Xӂ&C#2 ;V[~QG&\e%"npHr0™l t kfԊX-UH0*S{^\֓-4vLeX_?_4wkw쳽Ǘ{~mNcwٻ/V!yVf?Z'׻{^ӻr}(<>z| GT3HA%$H{ Urn_Ǭ<1 ZE IUlh!a%#jF*?BLH P2/w{ndVEQUJ%K Vw~ɖY\i,*\b,^dS;qg?lq{k矧|({eVֵ^"y۷‡xv{v_lGD|<{lzmw3/mooW֜QfQtbvifՇgmg+,"#<ʞRfj˾dimy޿5𸊖dsc5]rzBziy~k7mi_^޽"k\5E~|:m(k}z{oWNt5X\6VRMobkyYsy%gy9G[gEĜEYtΎ>Nj^ͥ[漺{^v_~{uik_>$ ̺Na_s[г 6xd6'J-eˣ[[$8YȌҖc1PD9E mBrहJaG OߞZ]LqE=}r}`;fZ ol>yB'gEQy|LCIuu7aLnm6I߰+\$ < j 9gOByG\2MtLYZP~ J _w{٬Bލ&V] os1~kɲڪ?meyC*&938Xe!w/C˖L]4q.3qگ]#m8ͱ5n`c̉ioIy?DnC!]GQ YeS91\7L~L?O|2 rgKyul}L_#G mEگETb'D_#t_ y")4 >o7X@_"n~\ᯮ44z>2HOr|<{mK3lrAJt)<[Hroܠa#Kr>/xDM(ѩ>,Xa,6-R_s&[5kGkVSjwf''̎ i]zF#Fԍ!T3xŋZ͙A, .候ηhtUG1$a?7 Ftz8C)Kqz-1U,˞?vRD{'6[Rq??&B_uT{Ͳr|e~\2zC)YB.R9I@1\C~I.52 (@_QYzqIwqS{w4WV߬o}²&YE$*v7Z>Lӛ5W4ƣxTn 9޳rgTEf 痊2Y}hM(:E|Q4{s8.& ?痵5OIxz.\c̳]@~;w6IEΑ/Ki,帑gKR7 KOVI.1|u0r4(NG_]צN;la.(SI80+^7tGgZ2vuTFn_qΟy d^}&~Nig|>_Uu#U_8km|4E*rot*qAwk.& XϾNH|T-lOl}s0<^̱-N7O"?=~z?XhiA~Huܵ> :ig}L~J3Z CO;=cf(9ύ-c1>f9_kȩ*ʵ=#_Ro'ɿJ7]*,hR3b<&"^ܞʛ_ݯ]*"Q-ś#o$!4u-syq]Qnѹ+=I?&̬hD:o[ezPguMk!xͨMoڞ4l0fXcPlEQU5oF,`^>kΠ7:}=wĮqPbgMKTǣ<?}lˍ~ۗힻKz2vo"~9}ll):.X$.Ƞlg%<5NZn~ehu!C|{aF! #h_S~2-pI-.~ϧ5{_sح1i xNWT/zVvP3BTt?*\'?݊YZkQhcGT١[x &Nk=zs#-| \'GXa񏰛#VKʈy ju]-2g;m:F>F/Ȅ+ĎT l(LݻW %])Ӱe|Lb'T zڹ}4|.\P/?wӦm8m)w $Р`] ky -=3]d;Y5[^M(I`/[S&uFrOS1r;B/W[S@ky$!nO*> nŃ3ӡܲ+"5,! ;y!7:~3^OcJĪ+;,-`9( gf)!Zz+Y践2Ͽ:L-燱>`%?p Կo:薗B2;c)kes‚ɼjy^ Oӵ6!ϚM%zm5~Ԓgev l&D\XN^YHFhk\saODVg:lî_#~eHM~Ik 1?{T_/|>"腤Iuۇ&t\_3Ai"B 54sˮ\!(Ә)[̫4نIDЧH̟SrO`No 8byv*m?Ȍ{7s}p0Gs^2?֞d7^w@?&z4~̨$F~tZmTL@Xe&WL2:Wm>c?=(DUvJM6- آ"`j&DJӔJ@RrH0IyT*4&zJU̳H{m%J@"(@(@$AfHT$ `K L ['Ky ddEBP&I|`L!&xv岽*F]`% JiYY!40܎): \^_g_/(bZy DaaFa5WHޥ1,!a ) "+-.a`!2% *_5d3Z-yLɦQZZR,bYJKn]0jVKepܸ պv c by.a3DbJY,*є *V BR,P( ,!M* 2F)*]!Ba2a&LR  dXlCt*:J$. s8.J(:8㠄;.#tu9BwGARw'\wS%EAq$GDwl:.N.";N).*'.8:(; .뎊:lTF??/?_Cy'q@Ē,C 8kꋿU4a}E1y2dUBYjp3pf Em~YqW'fu_s.츮)˯<8Rz1^ZWHZ]*} \p f ,d\i ]yTڱ{Y!L%b/' X_";,uq㺤Bq[I.] K/,.DQXV6m:IbƊsNt&F)Z]bP%b-ZwQ$}KȽ ލiu * g0eJ@X,RR,:̰Cld$PɁmn(`(D@XE~w(\d2$H K4Plaraŋ !{m{! (ddPJHJC-P#;,^Pv_t;J;KQGu9_wUUyӺݗWW ,+/ir<)E^dغ1"a;yYZQєw'iPt]UW;՝!QGV[pT^UqK.DJ(% KI,"]H<[! r㫥##6m*HY *U $ B,a@BQ`dST # )jY h̘A4!B,%k#/*d̓C"(H0HZ]!RL`E,Z⻎*^MO+_ѳܲBS5a)"%,ZD,XA@@9L "d(Rb !쀡B(prHK$ dAZ <,Il)!zWµ*)ҫyWgQ{it~k v5A mHPڭjZJq/. yI|HnE=8|}|:v w_}rڸmgݾDtjAչ6ljtjTЅbm)S !Kqr/9i\ *Ŝi՜ elXmTWY.no8Y(;*Yr XuFw{t6.*|F@ZUUk߲Bi@áHiS(HBhd1p &)% $$jBS$$.IkݽJ}'=΂iA!H$m~a @,=hͲE25aj4?"bՎ|)7n|-(D{$n΍Jd=XuĄHߒ=_Һ.`G /;\<(D+LmgN~]=r24ٷ׿C!n^o>sgz;B i,Y!ߚ$w+)9}o͞tgzrseky%򳣞սq3Ɓ#F{+w繶 tIR[Mem?~_grݟ%,ׇDcl[lݝc#זD|۾nyyoo˙8^O}ؿK~oe|̎8s-uyy{54Xser^c-lQEB4`E齵`lR,PT*AULaz*aB..Z~aY [5/mUಛ{̜-57AkLsmwz~oۯMzݞ'ZPrhň\`*,qqo[EiTITI2-Sz]))hazɶT1P%Hf2-WC$۟?VGi[c,Cns彲{w[_ƻyŷO;ˑ.:93=o׻ϵPvt9X4JASa6lRM dǽz_-Ye^]{޼|?7wCG}q(;5ݧѝ3)y^[5=ϯ_.u][06/d~ey?;/ BB$0k OG{~jCCx Z|*Ws )ɱ\{$,ƤR61c3FOAbl?;SR,׮ʭ,CAUE6aLw|^Wmqbgiݕd /TnchxOdyܩμD}{;oڏ:y sWd{g뤤c[bD6aEz~}|N;;~/Ⱦyy,~MevaĿ5}|lұE)m^S*dcT-5Y5Sjb67]j\w+ |z^~~>G[_=zmKU׿{mg>.q*Ltaa v !^s" ,d@swI@8N\r n!!@$ (!𠤘 .S%JbQs' (]ٴלyg'~(&bY.ݦ‹ZhhtV¤Kj‡+[T1T( w0öD'BIC p."d' @ 0@y  I l"ד)]WEQБV;艛4% ,KZ./lbȗ쿂~96L,@ivZD}wfKIٚGoj/ 'gae=";͵7킌?yBRR)[6a/EI c+'.mY{xauqgkG||e6jò>ZQC;l=,Ӥ聵fGYߧǶv)ƕVw~^vN_mUzy{ڗy[DLڲWyן9vigtezۯM~g~}:iufwaik8vwֽ݄l^{T[i#B?{z_.;kQM[\9pzw:O͢|UkAV{R%_~6M/ec+\R*SaXM@|&:бt^sjp}!$H! wPa 0BK$,)I"E$١%BfB@a$22IZ $ 0Ad ,@ !bAUdB(@ a$,$! dbB }_{PHd@ZH-7, H]$CrJC B)$!Hf! )BRA@ ,$QTQwvuGttLj. dPU"#Hj@3&h0 H)4e`EY C 2 &K$AdPPXV t0d ,Md, RABI H"@X!*_MIBmBH(_~xu?Ւ\G\) w2/ PRIX[s.ɲ2$FlK X"uBIHҷuyUe{vD"I;]$` AI3a$47ybZ@0qw{^RwIwR%RIdQD'}i$M&dR0v`BDJ`S m!,R2]̒̐C!vHdJdƬZ蹴,Y@XLP.v H"RwihmYqC/kY% U2jBc4QKMܳdZ*/$YBɊ%%^T0/{"'2Ҕ} ̄k%DD|%kv)T>!/RR (3Q,5-5KޮeSgp_4h"-U0f{v1ywX|5EBiк(U5UR XMfbDE@+`* H)L aUf)E(C coX WMJTE[p t;s,֪IFFXPPJmAqseK¢͖kY%4TGeu**+&鄕d/àHRmougFmg?~V#gN,q Ymj5^苺"+ǰT BqRWoJ,4k0"f4(cEi*9QfŊVjnorEcqk&pyPPtT5REb1b*'dDX $b T`nVk FT4$1Em?{8NVu#[nw?XM FSYUFk Qi$U~8UjΔ֤*=rR*UGEd SIA\Q VEc 37ԳItiM#,` ȫ^S 5RR "ȌY')UmQܗ{ۼ;++NyE*n'Q[<dLp @R-f@RE 4XA@P$ wHhB] 'E @Ra K Q"AHDE()dd[nWQ ]!8-K c"@QVb$P $PL0 H'WQITw]q\.JTT2@HX @,$hw\]q"wp]gu2A`&7a/ !!̑rW&xѵL$2@C69U..8ί{IWGGpg@AcEVa Q,"uT,'ӫ8(N8%)a׿uIs "deZrwm:oSa4!02(#"Y jZ0ª2|%$`,t@I HP$XH,X@! άA[ C 2 $HFB !!HB)2@BH $`A"I@XH(!!BI⎮;.X$dB]U$"RI!H N_us6 Ci`PXBE2I JP$nO$#q񽷱}e !m! |^vinHsi8oô'@@$$$*@ը(ؖl-Vi)A|MR{{^7{?(;fqL#{}}|3^iI5g=~j{ ׏{Iug;nfkù/fo׳kv_n~nszL2\& NW 6R5V+>5־Zc3O~}b{~d2:ۯ32f+y{שZk ke3/Ɯ}BDp[o߯מ-#k[hǝo׷6]8^޽~?)wMUP@lZS MUni_Đ+{_#;t8}n_ѽχ 5/߭޷bs͖,K8"+N1PEL%%4rkKbWJh(Yt^6`TS eE1AE-ۺl8/vv$AEN$$amH2 <Ftt %f(֑B2PdJz@$_Nr@r[ /{cAv(QH/j;k;lδIJ̈#{:Î:ͿO ^W{߿^xrk/~ yֽPK8Jd)jdp:.V:w9=o8{]j,E' #tБtkuiŔQ{Y pҘ R%UU,t/+y:͟޴q5mZ¿_kv[}"C3n`KKAw٭+z X5vV4oqpaU|b)FdVo{{{? 0zuVSB¯F\X:w߯y6{nۣ߽z=տknmf}Bi}qWmc.֚"tɍ̑ŬEUz"\a;]~o_~5VYyDX*RЅkf煵\gжi}؈>wˇٻ/AFڮZH@#o֓#ֿOg~mǶi 1e^3ndUG WwrKXƋḰXYmd^VL43XPn4kˌ^{fWĿrOuwzŚ_s;ۛ~c~OmgZV38jQ[V-kacZV.Um3KueCB.s; luGԇăj,Ïͤ,NhCqכ׽&-QaR>Z6^WqFۿM}3msq;o+:88ʉ()ӆwtru䵳7$ZK>Ȁ SBCMSg4 W 0G@Ԣ( tUbB]Q7n" U VQ"M5}%#j"/!F t680K d$RgjՉXvEuLOc&gIʕ>NafR&E*eMsϞa;INVMQPa(#ُ<+q1]^8֨1|'+z<8g9!ߡ4qw~_E <!`@A(3  Y@ᄋ-^'Wڹr} 2n/yd ZUoT,|?gwzh0K /΂A&!0tQtm8!0#d,QXKBaPiK^R_/.]!^>R]c ]}NҲK.A5Ir (5PRRM&[c*%9Sj trΌŊsń'rlrKdٳ"`ʲp~eŦA-uwԚSB ˲ƚP`(c!ٌ8)9L$Fᔀim {S@iO2,!t,ۈAch,u_kϵTE"!\xH/ bs![I} 趀Ɣ\'fHbX B&y߇/ޕZpT0U)NS_l2Rs{2,ٖ%S. L2 lw+ YAJH8rK])!L&(bD ZJҌz/E듓M) K?UP V<~$8y['FygY07,iK0&d*aEQfgKް5V*֊V̫$KP63 )o#+YVBzes[[**Jb2*dk;.쬊ˣՇIGt$GG$\.9:J 9"GjI.Ň~$N{v\tq leiTK:[ NjYZ–{Y)_/M<"L0 RJ̵ZX̔X]&kY] /[ZmQUU)+K{_@fYu{vwyV^VT9{yyG_ktxZq%%Uh5 ⚭F%rrl Ro)P C%4*:5)6&Iuɀ @E%B*Q{-WqYlbmLi،sdgWDJ 2RFH?U2ٰ9XmZ'0HK"krXpN&V(l?&T\V.-80&LYd.R6F~ǵټZf߉LM znUّi{Bl0a̛|-E]g5V 1`A]P RtB"$ۍ)8`/)ڀv4-lRe7& ,愶Ztf1J_*ʢIlZĤR)iz,%is$ɘ?C4.S&S)-ZkMh,+vRŇ304$ b׾Ia)^";(6e oT.ձ]$*FY9:(蓸D{XqQqG%יǧg{ԅYFvwquygGe]y9b_udE|ǝqTw^vitJd  RpCyBi.R ժUgؔ<ѽfܴrQttG6W]iQgaftT\ۻ,K(ӓ9,껯]^_:)"ݕ_Uk,]" mZo519DwnBK^m.Sk6KFqUۍTZYD]oaր 3b޺fC[XX&nW,H+cTigS&$) MC7*lQ^b@iI4 Y,gB&&IB> E pJ;~|&lي^20]&*77Wy2Efjx:t C,YaH)$w6͒ ՓR%`B])1n7ֹ4 .IdRLo6(6IHEC{jɀPSb3IfJaI @ rS ed$`MxgݒhHS,)%3tdI ,Rv`t #@ԅYdᒙ$QB(,P2(fKTT,ْ^OI,,|jK%&CJ^Ʉ2(I4ga$ }%^@d$`0ItiJ ,$1_y/?OI8 (d?I>tGWq>mnu"~;葐.3COkq:,@0%У$[.T\G'-%cW>i>,$Af3|!ֻq%u-,xKsi~6aGA5jf^@(z\`oXAzS4@y_pF?wj` (ŧ$3S<6?KW@L$Z=ù2P^^_.\?s?GW̡uZ;u/ ]XGP}90ue^)5_c]d&?ooB@X ; !0$!CY؄ !z` ]X 5$1ᲈC 9+V@ $Ed&oa!4ԀY4.4!Ngd@B$ĨM& ]Y*HƖ a$U _X_?q$ӕ_wA0nc!')]5TQ1_  }hpu@ƶc5YNF*xm{Oέbiș.n7:uS2iѾ!3K[7 C}HI 2yX5Mba)/qM@{ηquRpϔ-ۯ &-idUދ\. g!8hYZap& PUz % ^]%id-{~P4 hڢN{KVHe8; I!2hhaj Ey\&jIBt% $D2>F2 Xli_W?5t\ ޲7 )%}'&H27T]%oZ.BG#U YQݱ&A55(r@0W*D}ɻb,&.@EXŋkkגVoRR``0X'X-bV vg#YpiCZgíIV9ٖ] )2li׼M&)1XC2A*/R}7*e PX-!L--%t&ƶvT%&qcMl( -T? ^Ҥ:{šҠV1d,W$b43gVǪ?GQ<0 $'brE~1j8'58W1 \(0=!AX[]z9] ! _#@Nq }$!7ӟ5ˠp_ $E6v "}לOs^3I7"ed$M<_fe,I(Vr)WA!DZc:E.}ffa |V*`m,m.:JmWW_PkmY47,d0Xn^  ү I$y 8oUhX/{dɪzU!!BE>AdUϖ0kn"sϛ̯t32i:y˸?Wڮ63IJ ùə$0q(CxVw0N70,PL1l/ӕ*;X]47oSF mkaXҪŃ3XEy# ?ѦoZ6Ig"ؼޤBm8~('S ݑcT\'` b坡(@$j.Jf%l9I+K_*^- @bĊc+gf("e JhXFN!;[Tyk<]p>ݺ}SiIp| , e$[=1x(@xNxfd37 '-~6`8 NN(/4>!ufy1PewR55{ 8 LCΒz*/c3}.M$7Y!U!pzӶT1tDmCjȩ>olv% Zk2 /~)tG LmogL`qNJ)z mliNw{3]@W9y){+d ¿,gJ9/63%,4V|5PҜh&Fgp(0dR 2Bnn3yloPloNWnu2aTQrP `U2.aio o"&5㇐T"Ť%E (ޡȥ% n)%$9Kd],ZxөպSUeÁ v!,+,4B=M?}V6F\XZi5nKbDž.{u'8IzBJ#3F ZO|ObjJvenE {v 툏m=ۇQ%JJ*̿[}˝^e΍l$|ʟW@@VgMtGb!6f@ǼZ7$*jħCͦQ 51Ons Vcվ&`$ƼSRuyaKZLRP\w $kx-j!OٶǓɗY{wkpÐ6u[fj5RiYa9ݚS$.gx]UZ?-,`6\FQ0n'ݵ;؀>׵*R_M㐶3p-N`\K0V vZ0.x;O8mQȹ rԔM9IlsF"uvevon>Ve =-_OWۮf3:N<>ȣsR\aon5J[́V(:&P@a H@$YF Y,IO;97_o}o{!!ز!9 0BIv@$| a! @a$$XC6@R z~$2Hl4H,(]$&G,IM Ca$6BLRl !d4Hl ! x_Y՜BHjd=.%HHB΋v HGIkknyf$d C| ڐhd!Yyo7Vm _YO-~߅s$Wz5#o xoظ(IZ5vBG^,@]3i1ﲙe_ߡ4'3_"L$ @;q-I5ҏe*Iplcњ ѾxB,[Md!nv, !! u!FBV=MI/Vw|@IL!nx^2I Đ2arTHR!֮a,@N*%xBC7lM`ȁIBI 5YܒL0D0& $y$7$ @r;5$jH@ k{Dao,M~M@ҰCk^^CaC/BkobL@IIP ,$P nB1@6 t7I I HC7G/E nX0`q g]޺/R` [pJ1(&W# R^]!󣁢#̛Td0zfnSHoIz@,L\ 2OIH3^m_[O|k()KYćfT=$B7([X`X}t}1qvtQY)Rs7h=/BYOB__W}&ט!S߇'yQh-VaNREYf+U#>|='u$_D8(CHaHBHL@cA$)UBRRB@ M?EYRHBJa$R fii$'d ] @kI3GPIbC@,UP74PHS!UEw<5bBT&L&WNk!2BVՂR7L k 5UgZk`g!; [oؙ @4Bd6bd] +hHl ɐ[ 3`NM4$$6KO%.;`d5~m-PԇY55 d)I @&>F-!ɲI&4]$Y$!w<`S$:dv8.X!Q! gMU1i-`Cq~M$Nm2RҒL!i0R`Kms&B}N%dBqY&L vB/6oC؜3;|$lTxӐ*""smokLSa@U,JKฤG+SPZr~#)8iV% [sqa?k.Z5ZDܨ7}ʮ 0n::U<<eWc_jş:rqNy0&K{klR3^]w?ۡn)kנr]*,X ˭}G/o 0`X@=3/O.`5;W74cgMfXϺWq%qI-%0U4|#} r>I.x&Wǥ91S{ux/W`n4? ?{G4o*bP?:>J.rZmK ?JPURMclGd(ԴԶkӋMGk G\vvsK7BP$M 0C,B퓠K,1U~A=#ؖì=@Ln@lA0[b] LHtxm|ΔaZg۴ J[eOP?LfZ%B$RMXo p`'J4&ZtuqxxrN5nzjꮢmk:w}'̪LjT {]EPܰ.才bȘufc CAPޟI=WT<Φ;Ϻ6d#h%߮atgGћ-ʼ#wa(U}Hr_ yE ǠB0& 2ZIiD^ʔ{ĸ7} _M>*rdD-틵8FX$Iwy_[9\Ȝ}-7l)Uc21npu;UK 90L O]̸1CDU0Cj#601m-H '̀7iO^nE j f4̤UH_Xlc)ht'&m'Ra20CÎ#b(QK.lTѶd Fcwp) R@@f2w(@U篦2zQ:՛) Pd;j13-ƊL {XuHfc윎4ZT>̢l1ԗKFw7[,8R[Z4F,Ge ,E^_"_M $-ꏬ*Uua|{wYvc_ottenE,,2m'3RgdQ.XM=.1w~\d)Jp;T I§Ce,q$o,y]jE= Qj|x U$-TFrҔyqB85 O@\Q$vrE$0qj>Y~Fۜќ#CBíp >(aqԈ̑GĞ+7h7dZ&qwg]=4‚GnٟQ@?s[_l{v a`g4oo.kS{dv5xQ~h!_:$@ZnD`@aC)=ؖ`fh:$r|WIiS5<۔8tiOyM:a5C1%Q[Ezv~i7v||=4oSl?v+6,&.D%$A $2GA-%]b]_gcmG-.iRK_}t,J#5ߐ}352n?O1RU0a_G&*<1M5S!&OS :We!s*F$i n1HD~.AoKWٕl#w>$`(!{u5mqHIM/ET\JnDCH}tiQD#w ij?P.8? >oA{܆ oQ*v**O[xtw笉 h|) !Mm< tMobGf. p܈i.(_^WFk&P|{|jjryX#1EOK@/@鱑LGnhTM!"m$0S#CE)fr*9:[4 (# =EŅ%Xo5! (G3nE*)䈼L;$*nk7'?4.U0MtO(Ν|ۉM"cp! %fmv=uSYsĭc$]gww&jydd5AO)l'ӫ<ȔF6P&^,vͦ[1?9%~G(S@uOtx9&8eе0_,HYf " A^vWr;FhDM  92܀d[abauh6~ME+n!WKλI/jgW'wACbЗf~zcӛ( lVnyㆮK/3j[ oNDt6ztYF?V4FyNWQc1ף_]=bE_$^.XM۽Ep=!ϕ=n0j>՝k>ePTE"ɔvvOn;̳.+++5wgvGwWUWd&k۳3&^D[(o4Yw$n{vγ(NriJ-^ۊW}.kv9W;(Ήtٍݝyv\UDYוD yYؑx9MX񴐗fEDȟ$# ޔ; IBd[ ǬmSa!dP zz44|n>0J~ǹ᚛.;4L~URK0Y) mZ2wD", J_5h|>جKŽr!P0`&R4gILw0Ci%."8UVH"Yz4ג9<3T(303ahT3aLΪ7{P@V&DZn5"& ([q6af5 hCOڣk~i3p^Xa(E?aDișa3gYqiܽKQć檡Kq:5͆<,6@*:k.ο$HoӵeygNCA1U<\5|$zEiK(;r4y7GWa=e .諆݁X};zd(lT[UUqw^y{ȼf"; 8mi^'^q^JBIdO_scg]^YUR9096ͅC7Lcpy{#+OYw|B9j~G1{)(N(@!R7tԦ?Jqpwtb7 UBEɄ(MA"]{wDEI$$$@*O %d?+k.ӎ賻N䊂;:.N-qߍsjN-ۻ::f9ʹV`QYڊ.ҫ29(**"HY]lJ..N肢,KH㌴$b%=+=ZLsNΫlrzPoAįcj!o zuf؟|I0 F_%"10-4!Uƃ:@0Mgݳye#ތ$V^n ! _gW.>h'Up9 ;8ϼjwag'PW~?MVs W( 4$*2AónDzgBSCE$ и7]+M+|g o֠ Y1X 44ya p9V*+b-2?.ْō de՗S=0p ?V5"[9{rcN$B'>xv>/u5񎻰RΨs͑" OB_}6* AT>G;_M \, `MGqAY9fQrIaaquMe2 UX[uM{O5i׳漛b4_Sy48j;!'!.FH0BQկ҉R)Ps~6j 9A@"5]s fN?_w=́0ݤ$?IsWS DIU)Wff -_AVպa#vBqJcRq y>evwfʺ@5QR~NxNWԿՕqgJZCoeMj/x5T ,IAgIW7>P{,`{p۬}Pa Z=hEE:U0D0r}ȓ 󏟙Rʬro>2Pd&n[UȔ*;pߧ;Olę˒ &JceBm5,r5B!fIK!4zY&A}Cń}}~5 X3e_asMCg\]![jCIhpXAH@";B:2ch$#j3vݺ#ôBr߿xuS,>=מyg;}^5M5A+D0!0` }_߷_'dhfKz,Zu_۩nV%%.OsB80B Vu_!(oiCkɖ׮-5)bjdk2D߂pjVo*+qGf\yW3 ᾊXC@;|w)MI`GLd}id-6AoƔ茡4 ๑K9t)eryjÊ`َjK‰] ]ȒVmJ&vmps% $t[}CX] ͪZIw/+7l|S働 RH8qj3̃ėh7wK'l-=dJ)g{[.P3G(W <>e4/xpC憢Z˛]C]db F _ a8)o rwm(R^EPQH~g|Lm"/.վ%m:qdo=B>g͎(?QRqzϗsYϲq7dH5>RRю?xߤEH/r)q],I?px}Ffu־l%ΎrUn'3 ;ֳTSK%.Mm2@DH;/?1..'xf6v{lz_vq?T=cl)}$/ YG{_7նn:v??ȞRҶmu=f994y 7`tjJ=z:'f^z3OKG? 9!mb)ft*|i( {c[.n{)^ySEy^B=AלEمw5u_"`tLPaeڤ`uD' ϼy /%$W.C'6ҶY bD}X=Q)G?qoX_Zl k* <+9ǞNKi$Uג:biV/ݾÞnI٬6 }1Sw]Qz}86luw4)vhHP>UhX"|Ug @KЏ=@?OYGߗxVxufə~YlU_tәHiDRck4khk:}`Ayy*O.O9\YЮOiO(8`{rP\ǐF2 axHuMѷAn(oK94ۡ{J.o3o:6ᕞI=A0DL'|f;qqGm#,UI;] Bn}ZMb<~C𳯉SRBɾ-Ǩ{?R}RSU/`"$۰ q"(,@~.yvpcոC5^$[*.x^xTy3.۽7 Sp"mWuΖdgT7)38  +`{H?H~t_b:m"$\ML*/o'K@018 ( /GON D>|x2_qqE(4Yhi0ש JZoJۣvF5p(̰G6AT2.Dnd}ّZ(0A6֕߈X_K2S< jASImeFx2 xDWPSQT=-8p8n^&nym:0Wqa?^0/mCE ̂^@# )RnEI-DĹ-QEěu9fɧOؒ =2/j ^q=mbӎF'x+gT|70;ng-b_CBŇ9z͔^ԡOHrڑFS?: q>+4DzC^" IڟTj-Igw?BSDi; Lʺqo/}W`P+50|R(I爮_38;%: @K ^YHR~v>]_ ~s3zߧt _g<R޾2BgfhyŌ=M+5|4wdPH?ɪ{sρ965ssye %SS9:C)s30tonJ#,#WŷCONryi؉?>+-͂ײV߲ RM|ۄT AH,AAEEzw2z_-Xv *)|oѣ]k).kKПA#׺i^WU$סɑ^kU?OFfY:śW-0ρ&n|?)`;~Q:7J̛) k+nv:6X$2t.fSiyy1ò{1.Oj"7^rEq)󺘐ѯ)l;g|bs pO0Nu?[0+f8<_J={ٲid{hSc'qp[j| +f>}SxU DZ1Q@“wȳ7*~Oc4θ YuК/z24cS!R8\@pcEzv4twڰu:9[Ey2c|1?!ѕ ۩nP3E.0v ~pwr~EXSA4z>ah ^f~s/wv䯓 R Ͼt 9oqDŻ.Iԫ {tNY2| 'ǫQBp; o&R${^gM퍱55h=6dQ[ ';_BXة ik0JYAb@LhP<_QHS(5qBe3Uq8}mve: ^Yp%0}F2YmݑH2/--+#Sp83mmsn󸣧y D\V۲*DwM~>P6,`ì>y?o 2'1}+Qq7W_4.OeL@e~z@<0OޜBna-~0yo>VE鹗1\O&y[ӝї% hgqD4_E !^1 ϻsڒ#YfGk6it J"sN8Y>(ެK5jntRb>ћy<;'n,OWI;gcp"D `U>۞ěJ?([.'>ݕ{)~M.yv@;Ar8 $3VSquc3 hxٹkjIJ$kF3^A,6#nc .jL(<L|ʑ+ ]lײ/3dIu늎weF =)u!pi+x]heNat]e<-8fV|JB"gxP/ * bΘh4 oP?%Ge/,$U/O1VpODkXAP04Jpl_oIz:˂SyEZZbuIȴwEŠZ3sJx.g\lhX?\ލxv`?okۓ:ԕ.6@zh, ZVRxiN=>" '7,9>sÔ\**{}a6UChF{O}5{`z̓Sщizܾ4=0Dr-rfn}% iq|8@*g#5} aXes"\C΀?M݆<./@ NnȐ\|LP`~n"yț9YZ%8Z̃ɾ(5"l;[r>3mOg}څӀHNEP!eQv%"U"[)AQ+?`KGc9Le~Q{9wvO`\O٠]HI(N$)8dYC$) i!fL5HA`R0, !L&HmD0a,]'?;=׏=ЏIKDCBs_6oR622GWŽ_Ls!`b|HZPoN* !q~Tu!KK6#SX䥲s'p0]׈!V!޸ĉM]<-j!Z^bO~TTb> PGU&$|DV2~I;ZaI]M* @>V`AEoέSw3 #Wdm #VZkytO/\~QW-Md+|`@`zՓΕψhe)P8&]#τw - #ɕv^ɲPdb 7{aŴhJ70$qc(_ܡuB!D/ KM|Zb#QTR){z8W`8'T[8$R0ݒ*`.+WAHidxR à#ҕ>O5NIe\?0kW-(⺮'P lO}#5r6E5suOWMtUVs{}byfF}ol!?17IAk)B>;Uo9•%)[MsI ՞Clv.q2C1^v':<[y3JVA-|ݕ+(J ׍||vdoKOÍF+hO*=p*'*li造gos <Ŭi3ZKbL5Wz#2Ѹ-%.teoh١N\D&OޒK8/s}Z}}Nn6+ph|XzM՞a-WXR>k(X!'uPUvJ\)|NW/#?_ɧ7M\u[;4|Oy$ЪQ`x"~BtW]YEПd]zU:;Wμ:]]-ZRWQ9WGPtW8(*:⨺ 2v|%ی)Y*$lP&[8LKwwvi frAvj:X5ۦhg;o_#oϽ6ÖZmʹu Z{J OvF)vo-^1 !UE YyON H>v*[wI\6lA68jWmb>5 g4i D{̑ Ô6y\x #Ŭ2QAJ[G"8d\U;U$>ʋR\.#u&Zy,߮oajN ;:?#D$ҡR7SPؾlZcd{Cc/{?C cAH?fKm;NG16G+pyu\yo:߲F[qtiLuCUd\"U2p)HD`+ݮ_ZwjW*F;{˘z5"sפ: wޣToQ`Pe F;<i>uODa24?NLКCYmGK"y}dõOd/>h/y$@Ґ0@qښW2#gu@Uڬ#5Q> d2—Wx:@f0'{\Ew8t!  I+⡨qtdWB>_?l^JQ052@4X"t"XMS+eqE~9.:٦@?bYݕKv!7i0U5eJyM%EgW#rwy=!f#NWYxMWqz"s//OFa+jE[d#dYGӄd>^:WeW ԟnkx'j0na9u~[+ɵff >9sbEj9ʝ@N WϫMLLP];ZXScJ@A,rf,7Jd"֖bUHXN Ńgv(=h&jM' d"kl Ʌ!67.'Imtw<:fK\ϚU H9]iGΔisY!P-jސAsu_ntۃU=i:5rs659 p8!?D.fC_v⶝doDkcG& XIJ Z >_GJD" 5UW}UTljTfY7[-([8~b٩o}%7`NUzLm&j۵W\#pA`j8uԷ$\:g3D[Oea#\iZپgnT=htz8[* KHkM[#Y}-R |RQ9:g3Ԅb?}4à<l F~x}ת0H?x\4vW _wWb8LG %/#1$Fݩ.+KSﷇbQb:|0]mOz?czOW]:=Ū[ud<ėI#٬XrE_[PdV?cxl4ܦI~gm45s^a!у?;0l( }aiIw{ۆӥvpƀ65TLL"&=ML4ⴷu@|]3NU[6nL{O% H 2F5X\ HbXfTŀ*W&֜Ȓ.B鼏}Hc "ǩtT"dY^EP []$45y%t)BLn$OOy8(wU !T-VL;aHQm7^&4TL.imrjVªoD:<x $zej5]} 2k= l#TU*ID w ל 5kPk0ֽCC&Rb#_w )ډWSw8Eh%`+FQ"fSp61Ԙla?B: t[,ў]_E@͆<%M)LkZQŠϊ+^3kw8o_ 7 ncQSc^_-BRdh ~d8rʊuw춡rlh-Y 27M}tWD. _- 竴b;z HL #\,©7{K{"e/_7~AҰT#i<7-[6?@pZD Wjc<Υ01 5z?[_{.'acS:aIq Av|0ט KGVtg)$崦ܰ$=JTSkas/X 7BB gm찰Uxk02Id%BYN;}(&faxp, #/ k'sR@Dj<C{sLc?=y? QVI}^]i*6IWʙgZCX&);&k87IEW'~sfX:|?DgG)Koì-+~.=18 + H4Qefd*xA^q[]UNEOuU4tX:d #NX ӏr뢟>T=ЀԘ0u|ԫIԘ!զOUNp̎ +휧&zS,:'Ho2(k[Qt ^݁\dݕܷ RqeǦO jߑ}xUZBͬоZP, Yjf:2+C-a&uPm2MP,8x_Vym[Ʌ .lzk$Fjݝ|w_Ha6`MG@Ŷ;U*rȏgj`t rYx K1[+,G@ aA4#7)2}s<1<6QŢv?|mzYѹ゜ս]zh/z}_}%z%g7Nm+@fϓOc*+Y.6{7DX!P sq# 2g MيB j|8r\Dowb$Aoj KaԛВD$.jϭL,0Tİ{rPU N;<OЎ $ASe۽2[+ l: HC(~Mouo:S(<˾.ʵkc &B g BֈyP% $ J6$8>xo;d4Q=ֈ2B)M!w31o|zEjg>Ԡ&2W'5%kjRy"' dpX2OjҹGv8?>`!'~tkOcԻ;BPѝY,>$]Byqǒx_4%$pv]!,zt~Ҫʭ2pya1f3A8ϫԙHн97B0z'0rcAs-}cܘϴ i1D9~_1wAQ*7mH U$x1qI"fGJklx '˃a@=cjA(5w}zR6Gu}XO>X߮ $C_ÁWzė| ho+313+{Yn~=>DhG~&PvNC~Oܸ"QjH@m]VD/ 6&sVπ_oR?e㑲6|]n&R4Jw(OTgcESسd<&1MHZB( `g]fדȵ ]nu;TCEt(a&PX̺-zP<R̀\sE+a*Lu?WA՜L4U A  [9zm/w%#*hF9Sdc eTf"s;aރY f46Oa91Ft(Z$@h-& 5 M5Z8q5ye"V2uRŠcvIxmỳ0" Nӓ=bFy\ؘzxSQ<%]ȧ3G0 \X*o~]YRX⣎..J$ #'(*s"):#N.:I:"J:B/殲RQ %0Eꎮ1ub>}mhCo mN#)8a@7|Nԃ͊F1nW益wЦ!`\b1>|=!cq-Sn $kdoheg5c\Sm5R{/Yz~q IŹQb篔fb~J1QW}#Ctu3y)xٟ2ohRN, S<8q N~p0̔zMD*bjU)‡oKЋ~]HChͤ:;nosD{L<*O.jW*tUatݕ/7&b)dJr7yې6e*+kW .|S.hmVTw4%/9Fv;b(^{Q/fv.d\r wb\fe%" iHs&(NCTנD.s۷˖P#?JIVJ,_ٍN/XA;?{䛝mÖ`#gIFf؁>6e/BOBhTdו]"WSԢS̹͗{,u[D)C~6OKYR%3k^BTDMv gZG]f|g4O!554o XE UrR( Se9d} ̮A"\[|iv'dֆt͎疔[Sfܦo'6إ=7فQ$$BZ4 @#O/oҽ)w55vf܍ϦʻL[ݤDFú.K-vC.dv+{PQ"}4H HFkUWxyo.v~Lp5zWne6Pn!:Ht<.tz, T'As>|ag~4D&|rZ/gj/)kK')fJP((1x:#mݬK~'Ї+ږ{O7EקQiC'SthnU{RLG5&LP>yU -qG&zġaE>Z숐/r(: !nwDlFu Uu.R f`C KG|`7/xdP[sFtu052m*Nm=茊F)zUP"{ŭȪᇨ"5pp>1 k!s7{z0^˫5.V{ukKn'սBΪIHnA&E%4繃O4sUL؆JlEIj=~{ n%6[:?rSbȌ{zX(SxTI}Vu!٩y0ouqF/}_Rps`EQͮO0'yFh]A0+#ƕ/ɏ?j;>tOr)N3iI!Q㚨Et[Ddԟ%.bއv;{*Dݠ伂J';` P"H$?'@$w X7Ms8ke gn%@yΗ_ t?k4~kxeIV^c0hDYdc!:gU. /h d>ˑ1q{F>,Ï~NC.߭Ro{cl~ v")Yœ+>_KTI@ލ||xþz7}W 5vyA덲%{V |oe&l0 }83|k9??P0pUK B$y(Gd ^ ؜N~AGgGny=fz4A̻WRmig#4``G53~)‘H 4+CXmx,%K bEI|Ap ×+vM*P(S7Qg? !syvC'Ob*-H~ 5:7(|_Vz'=LuKSMAkϷxrJ±B<>6> t*IfxaW&_׌&dKE3jzDIĠߑ5 f X rs}p7yu s +\AOVƽK2EM:`71av Iv:*S+P< ( 8=qȏIMr~_J&QܟBM$uLv*TVіnK]~Gyua[RּgJ'\r z+En%u 8%3TcuJXIJpғq&dIz<e%&J"Do$S }{[V|/^3bOIk[O4AI1!x8=/Kd.1:[TXRvrx+,R6K4'L*:2҂v LChU1dvu06?o9r]sD?FH ,rn.~N;J ;!FRpW6))mLFqvL>{/Z$nvg1*7 e\bTy0Eg8Bd EtC>}"zMODr f RŔO ϶"f2PȬO 0@9MQSҪb86) z 'PnpuRAwTpAI4k ƌS۠!eQ#A\[R)OpXbFgPS佀f6U77$dEJ X ,gyX1)goZ~O=U؈ Z%)n;,^Bސlofr <۹7(8rO۱N|~ߕzek|~wrs/n4wg ɗ T 9vt[]}3u8dQ':GWxt fވL/4FVϊtma-wbcCKnrW$&!CTLBئʽ/LoڨM NC0 }H mi4>J.(a>lY!0~/[/],h#H8֟Lmj)Qn]8ik q*"wUR}ڼy7x`R;L<}j˖K3.ݥPY V` 5,{o~=]  ! Ze`aY^ݰ5 k]>ib l.'|Ko:?/R%@J=”PwPミa5j: InM P52i*v`:Rsi@gW) GyZnzFtqw9Hwwd4^fh&"6!'-<T 6-HjXO}`6u$M({fLeuei:N_nLsc{и 쮋0TC6[E->.|nbײ] 6|a/]CT[z}~M{'4Ⱦ =ďoBt:2/Tir_úS3p`X_5tRDe˚ݑWYT+h$3ʹ)5$rzW 瑞t/q~:Ϛ(lʭ`C#O-ǫx_Z*!sxh1J7,(y r:Xrz2wqЈC2ΎOR ZTvux3)04W>Ҫy?S C(z5#*64}^rbB)%IBEf02f;5!t h,ުRBAt*~-h@RY'%o~OUr "Rn|fP!UOmɣW>Swfp\?>ܖIYrl-ˊhD[$4B ɡ#+/%O܀-k`8_~Eldnn/G[?:DEaZ,Uav޺Hr C1 bG+PȆ֢-VemkrY&+"zц5KlY"t;{! XͫYѷ9' ZLvIL&)~GD f_!*NbB(>+Gm2Yl&y;e|AQxz9 drkvo r)bh!_wo]4,}%2XY fST Ӽw>}wD<|h^ ׉μ~n ʪ$cκ^HW{Snk༎q< 搱0q٠4;9D7ŰW\Qj)]h['fD=D#=%ﯬ o~gӦQ AoJ* ؋1DzPtJJA,-mr/$?b i{@s0,|XUC*E~z/Ou9s}y|`;Нznfqq,f_MH;#_ܟ̴p{p̯`"_ŏfzcÈh#6i?"SAaVgJ(NJ6s\%Vc&Go՟!0۟,bH9 3ڛrO<&À RcuҼ܍G{:"ReL|2M~Hn1cK(@^6{U"#;51+1+W$N7\%[fuH 8LwEg^}iC0#YR`Ք[V@^{ghXr U<.B;m(UV BC<ivizCeoW*6"^hi!yl,Ϛy [M4=~Dz53+ZfEؘSjd{&Z+3!ehmBl` ^2{[+Djh,Wxu'HҿE@}qNW:|ƒ%MN<^ HQUj[is8 C@XPpb)%bȾo!+ρF"0HNEsl ll݆ilح[nMۢ..,M`#f:̶ٶ8fɬu緥vVUr"lhݣa4솶۶Aͤ̍vM-gYZE,lQۍ~W?V𷿱-ï_Q{V{S͑""Ac ރaj߽_?2:T<ٶڧb1{sˏ=gnPTD<?HQվC(1$xDM+L"!Fwy;z`Eƪ"_0}V9`q4W>dIm M}{dه36a5˙C1mؠ6:oA;Nʶ x_ZQX{k;`MRwmpTͽӥÆ^^7͉G¨eb[?e#xtbFm_䝩OlMs)1>05P)D.TYUִq{ VεN?>9U@KXW.BGmsܑ;(~!s LI#lv[Zp0mEYۯTj&H[4shK+`voYYq\gk CTFЁ) y \)C~yenmB5U|ߜlw8Sm؉pws Iڏe#;;{[دLCWx_fHtKp~| x33dnv۱gm2*Ta6f[zBx\~fĿ(bV}A:y|C`L][*fjv;8#Xb)+:/ɉ< T$np oe$n_.}cLOlIsH̆nX;DY~31NF9%1W -W?;BɬM.S5eydJn]دxח? @!p-)"8iNW#| QA/ ydygKX⛆_J%]=6qiO_^lI91hXLGu.gtxsZLi}+ l(a..exexɌ2[NMhpp `R`wYn/佧_~gϬgv{LVJ p\pf]љ9Ysۭ: 2(V,|PX_:ɷvG @vPSވDQQؠ踋Wҹ88R: ˲:<$tu!uMnȻ+mdqdqX)"F(5P8>?1P3-9Ǫv[ZpUw#:҈)pkVO!e\bB D\sS"J9fƺ2m1DV}آ#"rb0& >zҜ#^Y|,r%4\:!L3[C ?J-,A. >biZgJڧb$Di7c\TE˗MWrB"_.ɄY<2؀kCqs"ԡep*X &?wd-1 Lvu)$ PkoKVu(VDfcn%EX'5Q),*JؓpzYY5VP oc?i8JdY1ZdU':":볼u)GI$p >򸿃>V-@͒D9R0Fr[Dn=_g}?cf?}<>*(f=rH,n{uKU%.Ndd˩';`FpdI2P1KAEk+ހ<:ϫUO`@sN`Lc~^ĉB0}Xܪ4߻RdCt& ZOp i<`;9 g7&}US~D%O.柰q IZg+"E\v4>F$f߻6mgTCV)daBKBF.>E٨O} Y2Bhna=1@X $C3pCMZID%pi!%ŮV I Nr{F0Fkn5$w8Tk{<;˹JݲpÌ_B |B*\'mkS6ЖcIg6Omh#KcEr\lP%T8 *X,pDzS:[dF^R(CbDJ8%hh8 eU`z,onU9v'Au*Ȯ{=hcKXb.4.y'M_'0-Q~z: }5C:;*ʥ+o~C]Ȟ}*{{BQF2-'Yoc!? $[ϣ 4[2OHRESDIVoh[.* liTs ft~zL|V{/o er??j ,oBn1&`ZN²};^|Olw#͈y֪~%S'!W[sBAMNt?oTVD-=3JGPt&H'@~1H ܐZ㮤 8̏w&(O"خr5_B+p֑Q9Uvř "okG@'@nvPY.?y $-Iys+|8]~ ߒŸGnԞ z&EE,i{y*HpsPd`&ۗwT[:oL7^hx?MY7ՁsU-vDcX:R.\mK/5M$yl`˖5%YD` x->J8 Y ]#w̹! ⛩0xG|,V7GINGp˹FE(gSvR]#qchyx #Qک:9l>eMhkꎖD?fMB#I8&'Hrߺ8n:юٱ[j}"8^ԻZ}//AUݖO*TRMSqj\wzGh~M:GN|[2!v @96C.#لoDw||T@4#4YؓkQua!;Ռj!2Nlz өcwQZrm>p%x9ޗ1R~Vc" cqYvOV.300 xc[v6]z͞Y?LM'VJoqꮷ#GA@A&$HR@?ʻ]zQzxJHs6{*.3.,'(,. sGzo ϋe*fY,vB/hfQtUyZƦs,=z 9idS}7ijxRӡF]'w΀9:O+w̋VI1_~|{&%ruLoՆ N/֝}/$;~Ml+r^]i^V8eZB$gC7vl:IZv˄Μɪ,salVe@rFTO$ Ov> i'v#mCB4N M~U_VesjX?XSwmr3V tG?H|oЕkrrz ]Km}`΢pOȉp_k\, m=~dLBGpu+GAΘ)}MB . %fda>!1xF /5Ie䚔wm%+A L$(jOJ͚%rxz:q65ZыsNk}g62ws$W4?Hb0T}G.qQg~}<7Uv|Ѿna"uNǮ$,v.}]5-4LsnKr[g>OZ9ziyPӫp@jo4 ѓPz%2N3 L87 ֵ6B` bc;0x>3n` >5%x!7b: (E*<q¡ջx8J rnա |y'U w=Df$ V>̉PsX]Y3:fP-᩻cBvt±?=ݣh)m2r$9IMfvXoȎ]܄VMqQp}[2">C3Y\!oJƏJ?Y.g d9a?wˆznNjW`@mA~F]*}[M 97A!?QG nLh}]]шr$PIZ6X*y~e¸VɖAqDGm,"̗]I#U*뻺rYAJi{M Acs&W)i#HYqbbɬhξ5?ٺm/ |֫E6jM]ڿfx~(}]a楻rJM>rnd01xt[3do+]'Xի_<)%޶Pu38H 2XޏU;p648sI jY6]b@QM!<SqtN2{ansU>L=Ye5|VA>Jb$P8hQ-?__%Kl*ӯT$v im x~##G=/KpNo1R]a. m`m,w~ty͠}["s,NsN[{rI{\_):CCϬ_/eoW73ܝkEۖN?1RBuɸ1]r:28wyd,<H6Blv_E!=7w~_Q>YP#;Ωʪ,?kmJP?U> rd$*z^X{{Wte,_u}yBDnt&Z(Q &__|K56Ddn˓<)xOŦZd[ȩHӀKR]! 9vW~'of0^ߠjZ˩/,ZH@C^CiujWM ApTZqCxHǎ%,2BaJ/@~8wU4!Pzjq/.!]Fȏ +R/nP1٧Y1<dL[7˽h8AUa˜%4dT>X`5_AdVIJ67s0 1k抦mMq4-zo۹;_I/g2hҌ'cDdܬ*vpYd9dÚDE!a.Oh.Up?Er~0'zxl'v1b{ R̡(m7,9;Ng?oP0~޾2yM v\Jr4m_蚁ԾSK+n߷3 [s @K#3[zN`K?A|:3q ~vH!rc^Ӆ]}J:t$ ts!q, 4>D{ڤC@h?j[ј/f~}ߑ ,Ev~T#fJTy=βс hđ(Y^wky|6$hPj1i%=Dpz zm&A T0@cVC.TAto^a;YpBS~NZ zYt!sڐVhᄫ!ËbU60`%I(pJB !2M`^I򶾻Iw )i2!;u߽x#WD@ $5ⓀNсfd`5ʶ0C [:q eu .%+nMW2<‰s|s'%ֵN<|̹TzC2*` ?"#Xƽ6NˏB9SJ>xb: _jN}ˆo{15ꪻu?;T6%ex 8DYCȈuRJT&PAQDp6oa\Ӝɇ^Îwr23m?&L)q8ЗGMĚo(vTDr[$5q ƍrŞ_3T; T@0`yM^H.bjl]}64YSGSv^wO~!x߮N.><rDp­e'0i4SRUg}ׅӷg*OIIk0)2K0yCd1tbrUr'YqYMٱ0Q!Qs|O}__}خg~.#`b{GwfYxwY}#W͂9d-azb8xsjYCO޽!"у(w D%c7gض1y)Fw џZp Oo>:ŽFACc_h,:]4"R hAgtv20)0%CDC0yj-\_q^b#K ~^~QpaF㫿)xSZ9,f1򡻄3=#JJ;yp:_HOv q6)Ҵn-YmCOp UPR8u@pX Y|yB`8OT_?3Oy"B0M?'8,-ʈ0BĹ/QӇ)5>?L!'2]WRP:/7 ){3HVH~a\3o=ϝ)}%{.#YVR^5 g~孰UP3P,$VƢ gcŠ"4Xͽ='# hG، . n\xR l?-j|AT %޿&*B~$Ƭ|888A#kÉ|#ppF7׳7Ki;D7kozw_o;gViAT>c@F|haD"H$ddtye?f;~pW0>{W~!^/T{%Es̖a:Fmj+:oI4" Ad.m '8P$Mpr1zFЂGq=:ZqRU 3/fT9G #8jRL?Q%ÎL=Gl%Y EȀ=yQQB9t mf@|{dhp31qT_tF&va⿿σ!üSp- kZ"aܽE_3&e6GO~;}!d]huځ~|iETł{RL?c/`*Ѻ$h%-e~Ȁd FyY`UVpU?)X pQG`lKXr.5ܮ\aMy|3B>vອ;0 Λ@Km%(2x|ُ Oy,~Zznȝ7SΏ`[їۊ8} ë'`٥-F꺀C30kȲfȂPOb6Wj9WP#\ ɧ>,iodHGLi<ʰ)s?s@ڍw%pa5,6L<%~qyNOܜh5-\Xq_΀@b D~* -|0G>E$1(w_J|X+uaA f2@zD.PJ 4`݃kPz~cD52ol^/aE=b N*#A)ݳb{#(c?b>-}EH9ת^#if^竻q\ đOPibFD=r?h<5ťDQs[Zr8,zY;[XHTXphVQSx(vz~ZrgfC]?6r`O*Jjs~ӱd~O'9o}&zD\T2;9S2Zri$kVS;?SRoŨʟ=]sYH*^Y ELQJŒmo,5Pqdn$%yH/G8y~'9W*G+?,7àZ9yg!q\w:##-"s.Y9/b@>"~uMa\ b r"am.eN;zHow-PcL>eS,'`!q#ӊGwQ@XJ.L:(-П}7T&uY!8/oxڎ5`vzq)z.E`*K[!m^p@2{ ʼ>=ZCGdECLvJ7NrZ\rVb7CLJ&/>&5C mxubdJB3ZGa)*4ߡLśE?{fHvb޹}%%n}J? C@I[%麗 AOwԓmofƩz^<#0wqBV~u5<7~LAI籭[TݩQ}Ng'v#:1~]1' ;hI;;҇ߍ9F*-)B]Ab6f_efѹdqH(廊:# 9WHG(b7lp/QZ\ɌE9Llՠx*ӣ-x6'w4]}m#nA\zP F}ek6"e&x'}# S_%!\0H4=B}<t2r*EXW@jp.񴮕sPM?{3ٿ_2%g~sR7ş@7ˀ~99Y|T>h#\ ҇m{K!B%Y{+c/2ҦRlO@P8;e34+ƀȔ<ΣxNAfS+nl_3鳥 ϛ㞭^!*9tQ338u@0jC{6L)H tdNhI"9&4&&PD! Ġ]Q-EK4 J}ɔ_M(Xw% 3ulZd:W393=6\wtQ?M(< RBR*I22XI7&eP 4cdC% bc""1AP觑zGXӯ˼}nA:Y~FmQ  %Nyez=u~,up2[fU 1"fzew>^ݥ=g#˝# %X+d^"(OY|ޔXDH?n$XbW4G>I"C(d,vc>̩~^O_63 ap~q5(A$/ppL|+p0m44W?*!IT9 4ewF@u׼IS|JF#sDN|7=r#8W4p!?p sI0W+;Y޿m=Tp p{sE"#RU$ W;+y*kra3*\EDן. }؁!W"į{T_m=&"[\$f|[_=L}pp?)" ~($w[l 5r=IBr^8N;o>QY&M]xVbeWnshJ3HbA3R@|axƕܛ}N7;uS?[u+0xBK_0~J]3{INuF쬍U>nօv8P)3+-7mN #tH}Nf[O* x^EdjχBͲFB7fyk&)7bU]@S( ;f$iIOGIr LK\Q4b 4w hLJ0_y{$#6mkal^[ v}^29s 'a &:V}Qգ5fWhZ=z=m; ?hQ~'xg@pi:jP0%\pDFqxgeu *2? g9Xd0  YDI Dj I]mM2b +Yq.#|WnjQ(-]ˀ0:C’v_O\on:.V{ ~xH|tz3]OD2a0蓳ls4!\TV|Xb5"D}|Mw'!v};tlf}OOphS> T'aOg~/ýI?_w^C0 -D='(. =ga?5E? (@2@@nFYJ_%,y.5qߧ{;~9 蝲q':?y}J-IUREHwةv]?+Z?qS7}uQZi :!a'߆!aݍiŃBB%[m-0Hht}"MP z)^ EY٩cY9IޛJBߦ-1Y.jT r '^T@$u3Fw^EZeC˦&_Kn`sMv*:Mj=nRX̑CD{9^ж_AwƼ  i~HڢƠbO9̅ sm d{=_CZ0ֶÏE4((|KGE I'ԏ1JL w(`0/(^p'0y7&>dž%8Wվ_؏6ðXo) Υ DPڒLJ8>fYK)_ջL8 L{hB$0ХCt@0/={t3Z% A qVDj?R3Dn_o\ZNLZ!*rDCOT"RQD)C1a)$ FWX*H^Ew "C(N t &_QZ0a8Qڝ78t0(cD6 S]58Н4U1*H~uM٫QI(1B%3Zϊޭh϶OvʽJCl{Szx7D{n&?;g|G0YP2! "aE4E1ɺ҇HɃFDcvf`ͭ2yEqyet 7Q)ڽq&ئ h\uf0s>w-d8%Se \] @ʰA5vIn~'-:ޣKvT˽>|g ڇ9f75w}3?p玁g&я˚tM ~5}ڞ[i֨'Yto"ˉ{ HNƲv r8л|,Vf+oj4>A~^Cr׫rV2l}>PX]yw)=.aw0?@߿ױ)vu5C&y:%Tx}*/y6f׫6 w؆tv6&S';)qR8 Syġl4%~w2!XBWpsUŬȴ0D;ݑͤw.;Q\AivKCWdu#gC2R3S<( /Ȱ?LexچQ{Pq/ww;coXAoiA9w+[K5U u"ͯ=~eLuV4n6%k+UX4݊k0Q ixM(B3C#%]^o+قC9 Jɦ6kI|!)8WAnj>_jOWR[+RPV}(O9)ئg8K^gȿ;!Za?5~Y9vuu 򋣩qэIZ4ҾDߒ.q1V?@h-MH/n]r3(&q#tu.m{]R_I#?$G_B( Ϣ4$Cg5W%uw!JS~urjssQHx*{aK5Dd9g iHizX\WgH6 MT^4~/Ց^ȊX7yNlH|CU!5)9vUe\PW C3`s\,1珮OQ9Q9: DŽhw^4̩$h1P='¢*cǟ}t_2:gg?ٹ)a+u> ކc%irM N ^? ?tytHI~Z|Y#Mn]ڬZUXLѤPŴL0ItWqurS7\]Cc抨?*ĐdyVzЃHy`#uƒ m=?_68@ &N?&dB`nКbㆀ;P#n9߂ގ_$n|_Ҍ7m;oLG9h^O߬ާQ#? PŅ;8Nd&HTn0 @$x:=9Xb<M /VzMƼD|?%&C{zb0x<#&>Ufuk*QchQ)T$UREх~>鯡0nI.N3?~j>'FVD_MGc4ǢͥE͒v Cj"|EoCTU",J~KF+R(;&hjPwuu7aN)`Gm4TFw'vmSwYJ A ̝ <i]W=Opupǎ2=]|_|%&K0Q|juZ31M/+,v_IB>Rn!^~8:sPkXì:BoOWy'~ISe>t?WX1-OhL& Ln$J"ܚ\N@\pXxGZ0<#6P:9' 8/2!H YnA?uHKKk O}xp@s%G{uhZJ3bch$!b;`*4uݺ5'~tcycՙrs+Rds.s` ;//'/H_.|[$d)T4dOktL7n}nZ<"1J<x2TIM:{nyݖIo!~d>OKrݼS,է[\ZX2t,`Y F  ⃆ 7 nJO~u/W旍^.RAӱMR{^D4{-& `Z2>ݦEj6 *U vO+ۥ˙keڣ:]Dd} GuގTԊ?4*}_Vۗ%Q Znj Ϯ߮!]hu FMt0+Hs869T2u^1-=;oUcN o Z;Q,bCr.j{ayõ!X늞ap Y m5UH6{g/|s3;K_ʵ9yf։(1ms' yMqp2ӈx~*=.KϢ)?B uvq"& Un:Ӓ%ǠAD.H8EES#(оj>3 ٦CVOӊ)êשxysΊz*/K|BFO(9S}dZSKO8sLvӜ'{Mx;!?曶w_}4RmC7LdbjxP=ga,v#g+.smԁvMUӆlYxWyk~.gS]ﭭ%.`Ӽ%dv;a/7.L1{Mh(w?kY#5TP97'}HX[+?Ư7[ "۾G bWK_>nE SiG& T3c$5>$?M`MB"1fYi֤@`n zF+k6`H!@ВZB{ZK?rzϓxoju\ɑl&up͐Mآ:U>`m1-4lziVTrS[[0v ?b@ krd`p7/G_sgҗ]!Ϫ6ɭvg)5l_=ѿz:mveIyiGnQ(#Hq4?+B_ztdW'b u{[re=Y{>|-@cLiܸ>nn p|CRW' X@ݐUc:Wyl Qax́wUD"rH N~(#Hؗxg[LʺAK(l~2y4vfcn.aǯH J-C}>祈E)IAµ@_${A[;J:#\g:C`KQTU!e2 l$ݷ]9ey t2I]$l\3r! SF^C-E2eRb`|k E6ΏSK-T .l唋;߻|bR(3(UԴV{(-u N$W8Xbpo~ [|_0NؤT-]85/.Zo=\#D I9\TJߏգzիsVVG#Ɩ`ǵ؜Q~3E9/p%m#a0sn1qIdl_ghi_ avs#ɷ#]niWGGnf̅7iG\+תo A@AYOŋ QQE`~ 8ڵ}?X_#Ŵ4<ɘ7qe-2I/P!9_P7nVTm]bHS2n$! '0}PZ/θ{*|Ţ0lDK$ :"A;>|9``G9!O`!,Et뫴G:X-. 1!3t Ku3+7ddR@d $TyL-!{|hB^wLĂWZFkL Ns|AE j&"IMJdn1z"D0! )&IEκ5ӸW{]U\"~Q4]F˷w7rFbx]qg=%?'*E}oO/=s7n`X1I|=_(;{\9t BReḨXezڢw!!h[D-|qJ z0rrxHo-}"J _T*E5~>y~Tuļ7!fY4DI&3VXqy%e/_]73Gv㓌d+g gtw_k~|UF o6j~C=2M#gW3BB86 RR8R1D2 @83,_$66^%hX\:  ΖGP }9F/m: J>}/6`=HD>l s iI/n }qp!(Al0! PpSSDž>+ov_A1 >tM?tu'?;,X_Kj?<]Ԙhč?yFD r q /<PObnvrM҆XOsyT4H#8' Լ>A1mo-) Ax}Q O bטe3TCRox1:KN]L޼ҜE"]*YYm!MPƄS5!Rwj ̞kZ w56ļjɄʻF_Rj.TD dYc X*\;[]ok؞r; Ω)=S5ŨovZa<=0hՓ! \|ݒikBC1t'|ZT{`"*Y1^7$L!Ρvw8=yx=8}o1xl8̚%%Ϊ(;o[^pX1 jI_z:ր!}BHq A0%d8I!20JbYdLH]^ w{ÂX̼/I9 $ }?~`hPa4ȭ\ AIU+Dw^0oO&B~ww1|oc{{vD{#Qhbk[(תhAEłQe?:3-%auR'_A_1ﴳa^rhf΢G>&:,yYRAGy0(閬s N(db9ip:yU`߮:;>쥞{"ESEV;rKg<S t vO]l2Ij1(ׯjn"gC1}inf$B J) &Vqmulẹ=@ JROxa(YoS&9RM[_yG2 ٣,xvl={s Fg߶a~A$ :aZIm+(Sh`= v0mFfv@$8ACT ,ʌxcjmva_W]f~5^g=Pc^b7.;"{baPr" A!駏Wj۬8r'H^{xsGk)1~̢sd`׈Cӷ؛ۺ&Z}VT}Q?8mlI_0ݓ 3G;! B<4'I<ֺ4,`z;IK3)1dd<|]mٯh7< #yMǃ &\4S Ù ⨱)É9bۣ|^]@ӒJ/{4B*~rk]G602d'[yo}Bȉi֘ƕԂix QO{SaEL<_Adx"i\r7$/,!ͦvFR*|'.nww5+ǚ:?B?D@K|_>MK}1^FlV:m @//T"I$kMFTNoq&|Tׂ<ԙa:'`tx{Ǥ~ Sס19=tU#*ǎauij׉owj bv "1.Nj >9Shߗԇq`La=ϻ_#6=塣TJQHUL%U_12֒xV>(^b&C8>R?a_?/- &[ =$OjmĿ B[|$ \o=D?GH|,'?I*U:о},.Z?ܲpFzq;t77ImR;/=%Is&ߒ|S2#@)P J'K$^ /gLWkƕ(PO]oPZ~ yʑ\.LL y}=+mà Zkis)HHP2"B ld_BW}ޏKÎ[ѭ@ㅱ N3YAKP Fe@0~aDw~Х]rFDݖ_y×"Il6Ut2c3\"<݂p}]B.k-X#Рj$ 3 q?;+UXR$|WVIɉE`@ΐGoѫ5 $(d 3#Q "Ii?3_]3=i,y#uW=껯'ճ4s }vkҾ݆۫^;[uY~ը< dL] 9J; 1{CbsBѐ@S=HY_?^̧Fy1=?FV[?Ú>>96*sz~O.'Ep,{M]ܣ^>U@NYb6 Q"OBcR)ʣPvWÈ`[[];0AĆa(< nי_S{^HmQ@*Ӎ\fG?>jIÝ ~qGRM@$a*N<(.w#ߣc;Y/A5*.%a;EéZP^fa~5PU` 0ٜ#B3S+b~ ٶ^@ ԯ{է~zZV~%hvEn~ۭH^,_ p+RAdRh謐<5[>/ŷܠK"0El,JzЃPAe C` PhXiEa"e!cfCXKޚnѮ޺Cbf<Ӹ ?Hor3_8u~&DcduzCIpfT' ap':+7[?9ϑ a4jA>t?5pzwv}ޑXQ]t>[bS Rߚ/O3uZ%qK)naI )eҊsGnw&i99޷<ǯ /o}ѕ6^"4$!e.qӝ kOY :l6l ᳯS76龧+t7cXv+D;]4;ؔbC*Wu*U0&ZΑx#[?uC͇Ç=}_[W u h{<H4t EO'$2[8٤ Pz0rԳM5m1-`3Ee")5PU^ţd̘NfZٔcJY2~ݥۘG 0Ym{Rqdw2k![ hfj-$ VTw8dM^|_2g3bj.x/H8Bp9897e>H Ҍn!]8sd?^4:Vya LOW?q1n[h>&UbCTŸPy1"0$+kyRv"(]p렰\ğЯʔjXs7a>A鍜SQ3ljN +!! y_6&XEFaD#h\cs):*\w:n/7"`Mis!Q#KÅsJgZ~ٸ?F7^duJ` HzrѽeVcoF?x ܯ H`P\g#RD*²1,s0|d ?̥]P][C?L \oZ,wԭQi%e9yy8' I?&~.AU*גeCET"vԊ#&lMlmPFNeP(l {_t횵 5v8rؓwߊ[q9mB{{-ڸ;ۿ7L;$hkO=~g:|U֊NaCZ|79xl z7;:h#vF1Lg5.J8":-ߥ0Lwr%wѹa+ ͯ6$H{:SI\nQΉ1'8-xKB1:)T2</9 ixKC`W2k~2U E;\UAIѮn#:E#BA^K^a d1CU DvrB(EJJE}S #\rf2>C/KiN2V46*+"tԯ8[ m8:i,7'w.w vg,b\{_v~/ !}Y^7#HUǡA=m#y=EnRя`kz8|>?`?C&X?;ml2,ߺ}Q3a/T}VeK;UJfi0fu29Կ1>/v+r!gk]WC/[Ö"gKFÈvm/G<{άz 7ɘhXŴ^-,k\0טP?|0:p`tOFB1D3U0ADSqyZ.$1pؿIZRnAyܷKx@}(:d[U!x,&Ff77D>iœ(6_&s:Q;{ LM܇_U#P iF*3kP9]C~lgxgZ̐ZޭSb騲:7n^Y d&b*~|x?zګ3Z)">ejl9$3)77}znza2Ua~IR\w0c7 D EwUaV"{-g! SG}g ,v}%@$ۯ( IG('RhV䣍Os) r#* ;^v}՝IJd3-3Hq]&؋{4GTyabra'YJT@GdD4Hp8/эH{(t5fCi#Ի eM0s4GhG7GϙE^]-zχ2< ;72SnJ$Zd 4k<H4H҆%]g4G0[ڪG|?ݐ5Eh$׳2{7wVoct}`c˨/{X?W!>mhJf2W/e]mza@heɺ:Z~GH@ KE 7 lEj"sz>"ၔ 2#چR«=ׄu!۬.f,2o$wzعFxhY>KzN K/x4Czv4T:߶?Ytt60ky߰eur̝0GEH Q+ )i O/Ҿ7BaakfC?4gz|BR> $F-K"ozeֻsO7]iep'p]ΣGiJV( YN4'M­e[:!zj=n>|aIr]~o4%zᚾ$WAЊ=>2y^1՛0%mKirb0f[HC4 ]:d+mMfpP%&I{8?͂uMͅw{No~Ms<DC5dtO{F}Xw]k[xJ}њd6T&DXe*g{RPdՠkXC/p sr1f鰎Mx#hYk_ApCb|DV@IaZ4_֊~G 047E"iHrɶw-b'"*E:,d%FK:m(y=ۋ3ON^V3kC<5cLۿ.:}O 9Aapjm-mJGڎw_44zLVc5j<ÈVv̐*#>Q O<~vz^~R3>EPI ^o' i9]5t0 #*ǩE<9G, ͟r[z8RRg8Iv*sgF$"BH7NaY $jQ,`O\q )Bivz98?PD#pN=14?R:/؜MK Ld Ш~&% ҬEHAz;"~*CE^QhI<]o®ZXD" 0Ek_8?Cgi7Y63@نo#x =·[y_B?$n[~]yF / V`B>ļ@0P }f b6UY*Ar}ZғRL9ȅX:?SFf-#I|$mґOx%V BDڄǦ)y_P:T.QwPANa,Wz ΒD*Sg2iZb7Fϔ=SC0$׹v6MVgD2b6;m =oTֻO@vVz-, DG%4{v ! Ȃu_G5)'Y"xbBMBT6~#V`hΘ& ;I`LtK،H1?cfeBi*3q5.GLx*FYw1pm<"2Vm"<Uub64!GrFXFAe; ~tEMJ>v&x2z (NNߩt~m)j,Ef}ޖ\6:⒑m0B! 0"uQ" n,!2 wO&UA> 0;׮`Cx6q@==iVe!*ώRVd{Ks­/B*ChHr-h90hKTP"NTqM~}q[ZrUxTn 5R l:o_XJpB{y(AG7V ō+#7&wM^m 9..jjV@UUF,1b~=+$O^BdGZs#ڄt?W ۿSzyok" fEIP ! @ "L8("0 tBoYLs l;YYfCuF|FD>P]PdK ޕ^e jG^ }Gi;۳ftR^"R2^G*M?s<ӳ}u}@@/)'.Ů2MlYl$[1gIb덄qݨ މlop}nm39g7jo2QG Ϲ,5濋qUCc!Ag\F'D;DDK8 E:x6 Wˀ  @S7=י\떨}M2قQD K(A7%ûÍRSD#px+B; >H4E?Òث)$ JOP _D:^ ƍ:mhS+4X_@>a)T?7 <n kYN.%@ /70 fYC#?)a@~3CL9.64 2C3acn'|"((N/r{hgŃ-^TٺEuEv#=oqMLc>ԍ`P_R|YQNՌ^ nOag{ԽSۢХT!Aʫ^~)uK ʟO3-VdU )6*ҔVW+4 0H*9n7~iu <--mr}qSOLz܌=J,\6,+%lصnBA=fkT &kt(Iujm_Kdl/!>,n*H%{=CH"PoM%c@TbCq÷g #s}WWe 8 'l\swq1rԕscDa{7ij全[RC!fpx>8%0~'gd܃7NyQUJ\xhvO[HONS#H]"X F4#~V6M ϔ c""A90Gń?D*8rJ&M(,4ೊAxx%55:kvUf=I2٤~mөTYAWՙXp3[w{D@a8'bWDWraV-;VIt:1*u2,dByi2 wû~U}3 w$P6k ayTh?k`OD`6XwHpf-_Rv:bQ$V631IY~5҄ҎA,bA5"0l|GmK|bKurrPA8Ӵ% Ua D(@⾴W=cMbwh۟뽎_;|ŋZm!f63E@,@%?Lq]פQ7~+?W^rb;º+kN{/ e?lFƜUY 8 ?P~]]*\6e0DT1ZWM+3Oc}xiDu2R>>sc[VKQ ܐᖔ/t@at0# $_~Rc{ZIwڔ| bM$Qʏ "uoFz2Iw}VK@|k_"0lS_EGwBȁOwuVvD)s}^ݿ1t1bޓ؟;RFE2>8=Lhd} *A Ԃ>Iw G߀ң>r5ծ tlg  1!Mk$ aJmR%R"FMNZQ7'yRhО kJ:]Z) h8q9F8%"+7& fVsn@Z~d3(1;@<>1YQ %G)Țv`ڞgHv\ ~(q:ѕ4 7~eK.pb 8A w@; A2yJkPhU=ܔr"`G BU JNFr^_3"R#n?v>>괇٦A+Lg!};F6"О> Qr $|\6i+\S80ّȑ҃,`*N]s߲ Yq>1Y*)b7J2hL\6P#_dTPBk>߷K!^uxY|}HiJ K>-K*9%Bn<}=Q)i4ј$qOu. xnos p5AFԊJ||jH?⮦% % :}ۍ.L8> v`vd4OCR(ʀM4ƙ_Pi+3)wdIAf@~-YMi%o%ᛀ&ҺAY5gT  5 {UQAHR%"!HA>4Ĵ$.h(KiDLTyB ß 4Č9M~`I ƐGI&{ HMwPYifΎC[ODb%x6uרbȼPh4@;zEf# 5ۖĖ sx7sh< t}`/;>M\ַst5aϳ50"#Q*lC mY<~tC* O^ǫ 0^<6zP 7[1P [@ Ɵf˔rř+jC xAA:9W^d(P{A|z6+ XIk8r:g$ʢ>mP{l)d&>4/`#3mPs5`]cN|;v-}s(ɯdw_ܱ$x#m/MCljV,bpN&X%Awz,~u~M;z=[a*+mwA3smjomVXRHs7U]!!bVv-nz */?G)_7ѮpV@#Pm] }d:~mpw>7^ Կ^;.|x|M__&)P?)} SJ? qyrׁ)FslE=Zd[ǀ A\ۊ<$BIwi;A숝sOOP8UïR-yK(Abj_l|ɯ͞>Sɇu9~B$o;|)&4˹ar! ~2Z$8 YG`ك =@f ^dRwLPQU=0Ý햸"pxB~֐MO:3_#Ӈ.7>0fђ MÛ:Dsy6Y62и4!"%B3UR˗kMi3Da. &!"8mNݘ&t$VM8L4ѹV2Y߬>-LqtB!f#1f% -Wخ!ZU:aXrbUFX Zm-*J!:RXgIa=dLI5XCxN!ݷ>a_F&lY3x!+l0h1VJ4qgZ ^@Z$]Z|$ |ou^kswyܯXMe5~qSÃx8tq=wOD>I?u,=2d` >q ofeDd%.8~L0ԙhٿT@T?#'J)7&KB<x7Ge*aOw_h9'B途dnpUPu*¼;z(7,MfY=?~Ӕ0×o˔n7 /=/P4$vs}h~M+YӘc=ӆSI}t24gCpd}εg?^V?^wh7ۯ!Ox5<zO[N~6oC:DGw~|Iz^̼Hl h8CXN)([y7׼ S$,TUw~.ЛR>oˇ8U,m/d辳ŞAԽ yyypSgΨJ%o~ ~NkFsBμ_=&V룭ZNNG|sVsq_B/EiD*،B[jř:KiEޙ4C&J`nGU7/_Od"]=RGP [+mPߟJRVHڦ?Yz)0 8$pw/|g) *zy Q@ga+]QiUH(>f `z&!j,yik~@ @S.  |`@`A>(a1Wc^]QDC),T$u&?+?}f>uEZ JaI\j,ĈpT>;dˉ=Y YȘ茼@.@VOZ$pko((sK.Dג0} 20%L}Z}Y!5̃ ֭B\~'&)~>J򅵠3Cnv~~E-Z>.A1dرt\\ 1<5VASf:өڠZaW/bVmFq|hOP1KHކp.xhOV0j݊3OrӶܾJ)}{%Ӻӫ8c\Z\XIn5WdX~FI~8Ғ#3 ,5 z '1Ga@ ~rǷ$T@mg䀯lbGNucP[y>̳Eg;otZ0ن˜Cg%z (`a39ht H|'I*{˱wBujOylzz=N͖`̲  J-yM1OnVv>qP]C|e@aNI@.gBmزK|SbVeK0!?$<{ߌXyv/Ғ(A3S'G_#ڸ2|4e10ږ #iȵ[S:7CyNQM&[1dD\LV"_llES;ˆrHzO=H^X$LPb vpO @F+?^ߙ;#hS: LM%C[ð9tn9uϦ^1旬P3uW~TKۄ!bSݱ}^jAa7RGЇ*?nVwcB*?{d9ZL1j) ??|&Ծvʁ}UgE x#N9.:'},f#xS+b_gO/~}WEJL.#mq#f\5/M/^ N$d@E ?T&YLIÂ;,}KϘRi ]j{_&JS(^#œ3Jw1Q5LT9j4 򈇆҈'ǩB"!dnN6ͳ;mjBp," y維(=G_6Ķ{Gd윣cӧ.P;)S`d팷 p%s"9M)99liN*%׷؅ nݙy۳ q$w"@IȸP)5mbe'Q |w\*]Tj( TWr߿%c7чs]au<'qq:1g-5vLJ{wƪy>wjXJo`w̉c>J`U\ ɕXt Rdg"h:yDm'"ݾŤRD=:",AD T,W[E]]R֐y)9Fw}5 ]9J*XmUEq9hN9uYD/D"IRv7d2`_*#Ip-JbP,`,%Z&qlLU!\1ǔHV93&H:ULjTcґ_c@eԆ @$.@(3D FgHbzg./ @ê8HIvY ضlt $"=Uִ #3C,J̐^6I #N'2o}:PFֽ^q%{5aŶ-9;:цyNr,{vbş~{{XjnSlBP3 Nh%̭ dion=ݹ'z"A@^['!P 8G[G!}acªeCBXϊH}./EstկQl"b7zEy>sW ϿWYk2V#=~PȠ1~Z5Ki%0(=۞q6\r&ܡC֖ǙNԭU,U"Bz+g٧En/HK|uiX,`~JOҶ>3_"d1QAR_L@V?7tIV(XSW,x 9Dz: Q~4ԛQ$t;Y6ksӇGYβp :h!I C@<'()D@C_do?|R?d67#YH~z/1]ʤ1? Ίm}un-d8*. v/Rd!1e8)BL{(F\cdNڅ2ȐysWc%C;Y*JDȳ/,PZ 1qN!\^#\?m+gB/f|| wỊn{m(>hhN}Υ 9{(!ƪkJ=J IO ;Uݹm8}oEq2M_zQB$ouwض-&ȤK"Ϲw3QJ,]x'a?=n)?W9ϻy7wC/Ru?<asBG=UFr$p_)N^Z2$yZXD}I4Fp=RMҿxQBsC{"JJ+<ܠq}ItB}H'30zJmOu}D>Ih\`{l:$}?RdfAP}8g!LeI2zO5ȴp]F˻,댅.W5{B2k b$\dX]Z} 7j.}Eٍ]jѬVXw8UC / ֠%3^(s}PzK (;h".cJPsԾ,/zD2 ֧~QU-)L6)Oab}c(禯ZQEY7sw5`VQoAAސnњ?_u_x_v# /2>ooݾ GUЙN;;!iWW9tzhZn[gί]db݆;ܜ= _ݽ ;k[1Sҷ^i-L;CTdj^5 )>{דS},6|TF4`@A;G0#>tNuvE}-)?H|j] ι!dmGTi Wn!Gm qb&و;n-dʟ?Ow;Ty|zq϶CXBp,scpyğ?sW.n!+wduض?zţ|1 f(VnX&*smv0 A(  bwgb|%7E^C8C22W[!'ݘ@7e?dEBN&O8^WQV_ԃi\I3y+Sx7|]\>w&Y!Rɣz Iٍ"RG HRS=\Xm$ Ą$ /Ûaq[op_`UϷ|"PRDL;i o_'D:X%>V5[>L/ſ\|UJ hc3_J'}s~P?'h.;]jk$wPBN( QGX{>F4!_%C7_M4^M#7]ArX槶sR3[<>)Q:o:^$Ofɤ$>fMj̡0F2g :8_;{ 󾇭TYeD,^5=TZi}}. ay?֪b*zK}~a@\"jq=^x5ܟBr:U?|]pޓHQY{lg3.-ұNUB$k WM7͖M#/|..>[֪UңEĢ'/tj(3R'z.*a?/m4EqÃ9)ett!x(L܃W37 |??WC5P˻+KXT1<A- IZ DO@lиCƙ_s ׆QG~#b _fհ`Ao-7L?91#Mon6Azr ",[h3:q#cR D@۪Bz=PiAAtYuWV t^(Gn: 0@!R~m<9.F\x VMxCFMF"Q<~?z>c_|?/?c~wtd]- b*$;lo/fpD/.3o+<+QvH˪s8~J9hEUʻϭl:F!1BPcYAϩQ!qbX5)'m"R$=0 rlLC#ݥ/6ڹQ$  ʛMUh&_t&I!d3#yvuR$*u,[@BD8},%r`}}U,|$*>~;,HqIU|fkk>Sb1} J. PX-;!ӥѦYk'sQϝ{4+دa5E0Ls蠂q3 n3N-0*TU4rkLpHxe:64cx15EfB""" .I܎]rG$D]g$qߎÉDe`9/J'_ݝB`gL|*% ѧ,K% $hӨti9__Ǜgi{_{ocQ78гO@>i8QEF M/XE͒'fmO{r(Ki]\\{8w63ͥ4:淩b1G_|j) ٰ,C>G/3n\9]wOFIq]CPKn[,p.p; _y2Qy|;޴3=W/y7W5TZ/W6!vH~#t]woTB&e?fՏOmr\iHgrA%Ǣ4bG0bZGLxn໌h=[ ʆkآd%k BEhlj?Kg.yy[#;msdFI\]#*O|KW>GXشP?l#oڝ;^IO1GӓI2!cc:>W0;o9[> 5) vA'OMiL.%I'-:CO eRK'I( K>-D@>']9)2Ec`Z"Hh|TA-zx8 +rH\ 脿` 9]Ȅ$CqGAB"PI̐wq)95`|v 'z"iyy3[daGw~@f{dyes_l)e/m~C\l..#-R Ze';G[F^ȏD>NFT 5 ʦƪ-6Kܺu9`mghrC: J#8ubՏ!0,\ Y]%QgJ?9B(FG(+=D'DP䵳l7a!NJ$xʚS]+@zcˇ<, }$>f0]vgtZk!MȌb`*r>颏y4ӵR<%ik: ӳ/ҝWeICNch;iG F _K (cڪ?$Zt\gGNοX;STfШcF| l(J&/5Cv/{ x@5Dxd\$C]H.@7-/spw[:|ovu\xCW[/Yfh)tǯD̡Y^#Д(pM`1U mOO}:g?%mRLEYN[7*؍ɮ+QUaXOh6,AiphNX,ʥ&ITÕՈ"hh2*{ɭ)wms3=qUUhUTm*I|̡ |߉W[5U \G(BG<눏EJr8=(sUh[B|E{_E3P |;'¸\v,i02LE{5]D+|(aKK@И{Z犃H$$Cgj3'ebI Ɏ:QBƫ8T͢d _2d1lC :v7UɤDs95b!EأVuQMLEpOBNkl_!\T/WYm<}g+0_w',év@ w G#f4u 1OnlT -AxBeULvfe x. > L.I* 55DEVtYU"(o?%TNO$II6% lu1瓨N .FIeoN ĄȔc]aſɮW]n nUjœrO0u2MKJv^ᵄ8=l׹}rQz|{6Qڸ!y*{qhB6{#i%% >1^_ǎZrG/gGO?9gukO|j~8i- ?tHñ>6tm/w|7~E*j?/ߩ~/ɟwoTbe]D'yb-O#٪:՝J5'{aF/߱vGJc@0$|H>Hú}Nzsgc< ѹƷ|u%H52߉ n<( _8y}vl37}IIDoͫ*'͟aФ.,A2Cu~Z1Jr|`rN]F2gB Aj30` F#:B[D~j;O¯2c, ˯a`btV%ᔶxDl-+$".(gT[^SfBJ&4#/`8 |;V^d?ޗ?W-|+3yףLhQF(4ZB>pҩB)Ϸ?dDOn•ňEWP #ST/p :Gz2/6Q$W@qWg%w1/OV¸q$:~tY#+.~ĈUpp<#ףiM)KJ$[d}}Y-G/U`S$IyHop4yY8/n߳ǷC*U|!i=k9“B*#?oRF Xg߃̒yL~'X p @u̙O:(BNӡN\aMm,~ Dp׳.{ >5g&٠/& ^ҫSeET>ᙠP%;n|-\w+؛vF>#o1|yjI|A9E_:_;|'ᦏ>GE=S4> R|'i}t߀G|k;G[aW'e;e1[Y\V`q`lӂOx=u wW_82ѕD-­喳(0|݄5s4߻(_VN/{3k͔ F^d?Kg\ %Tr 1e>#8rܿ ֈ)A v U*]{OZ,ُ4@\خt9.ףYY t}{khwnn/[W/޽n'yLϢYEkOEG% {k%4"{"@pKsCVdɢ]U B(ȳ߼sﺜ_kԷS__AG[F)ՕorK{UT(&j!klHšZtH-?[N{okP\SXbn'Ԙʬgz=Q>a $6aoyؿ{$AA|?7hDQ_K5T&揖ս]jE)GSwNʌ+]{ڐMA9򹼼'x8"KC8C@]lj|=Ȓ^2`* S:tKӰHLl_&aCvM\h,)L"G/7x9xIy 0 7QEXXgm}zگZX.J ԙ\DDD5v XcfÅy |7,Y=ˍ RÙFRPf ]v H%_ $Sl1vQV՝/; M.1%;AޙfXu=:pݯ"9rߵ*r_ 'C2AHg1 A8oADObs$J.)8jL:Go593]-bU|J93Ű?}%?G'WWNYj? 滸8;{"7"4Ϧ?#'c0.>*)e8%$.(-F 1pA*LZ8 ~BlK'Cjջ윎2 'e?7xN A,?K.eyU['H~.iSOb}1^o אm-B$h!01%2{tT3j+U)soHF3I%KOiJjw/D6ǀ*6{CB@Z4v,A-OH&/W[24Z4@| aH??]}Gc}qY{uZoiZ1j^ە'won4dG3Oiw>vBtWũos"mӻ^]l+u4~ o__9;v&b0F/ &f'M?Mk!hw!&cM6k&G7ZOluaW#7.mM=qMVz0M68dwO\h\ \ 9wO=PpoH?j- XéYj< m#|rt‡ب /{qL(ؽՋAᣧ6c!km"AP,C\gq@PRNLKl}ެQ/X|hZFN3Kb-|ڔ== }БӀK5?Tdَ#Kͪc"䆬?sԔyI/Wj߄޸` }d09@`8q)HƯ`kG (ƋaVunIhb>+c#&(׏9ս"%R@R783핽P[ ԯfw~sGDwg5$j֢Ԭ.={ vjx1PG'eu/B&05/eBOnju6ONn%[d8!5iu|w?y7lXNEbνE,2X9$[uz;X )ʅX$I3,O&}y䴵e@\@A`o 7ܑkyB-C}:ح?ؙC1O>ffꑀFn׽w\*;yy<$%7lzbg&n [A7|.ዂJ9W'\BFa.gǼuVE?gѧXOeRz6/R TBT\:pIo/<EAj60u=3?/\^WrXU}&=z_1bC_e#G ^նJH>إ_?d05pp]tP0?.9r'9H&^Vj!вl_D{)ԑx=OȱiU$gO]=LS%NpG##gR$ZJqpAʭ7^`0ͧvm(}Ag7.]YRFA O#ː])p*iUjn5y}zuU8Ĥ=$_RA)!?sO{2~2e/\{L ru @$>maWEhlt(`6~9Q6RA Z!iB[Nߑxvk`& i=mCaJ k{5< ԳlDaf'km:7w;u"M/(2&9:X\g eByp,@Uibg.M<-RUϙ<%/P ^yD"v/bdTJa PHNݝe Mw@de. _! 0{kfh!GV_֠?!# ⩓̍-.ӡ;KZGtS]aT\oΉ4e+BkD68B#Tp0!Ń(! C)?(N+(zxu<%I&)/3=Ƭ~[{J7*hZ(fJb{'U1tb.M]oNYܲh3hLt1Ue yjW:B006)9N!<0ܙ|/,[v\cc~o@EDB%5MO g6:w[.0Z?V9S=vx/ }+g9qӎxt;;ߴKYĀsm~.n{+r.xVX&}?cN5m. AUg0nꔃ"ۦ,>=?ߣyN)}A:]Mnw)jZxs&ƉA Z΋9BPߗK]&5Nk>;zsOrr!M1L,,{?5դcj8b4gOԄmXzF`_fYWE!87:sQ8ƾU|ɳČ͗,_E!zkafmpgqCg~e'j˝`;_yd $htґd}O'6tɅ@>]~=6RשJNh h=0|~|uP@zJ>bnr3 " tS!bApF <} YS`LAa VM%9̸ ܊ ]9w" MPHZ$?/V1_g*8~n7}oGTb@=u Q]9Hnn9Q>%籜>2WK/4n׏oԣþ eT6&S3%!]7)*1߉pzɢyqڏN:}Cs轮et>wo|YeN4#1yJd$d-5$D(ʄ@ЖfjSuXqΝ?I6vWyLհ5HZkb#v-@v˚/WyMF|pų4 u,3F!\w$AZ{4|h8Oj+ rgmB.%; d5P=+?J^UĀ5\-Wye?Xs#2{ؾ5Y`@#u|cpm\+T6f7`":e9~ޙN'?à4mb<\0b%KBI WjXccQc"T1uʑM4 QXyJ2*OԿt߉A}/dlX{ t"z\fW@7>0gG.Ϡ 5@JIB9D)-0ɣT 42 lj.OJzݨOmAٷO`䮣xd=oibKʽ`q(lwjѯcc&o^!{bǟޛ]Y D{4)[v5#Ckeϛ=\/5F}jC1Q$4 jLl/[ٝ Ø4"?EIy#2" )%J][rh0PH$U`/q`EfcIߟ*̦UdAX`$ ][h ݯ?1[z]꩟1F]WE<;5'^`QXv磝1WUr#5h;_ ʗɬtSmY#8֑tcbjJ$9#BCOۓl:8@΁ ow3e5?&$oz-woqi-Lxpn"c`H]U$c_ǫ ]~rIc)%%=7I$ϑ;^YjIoqH.hC %"44ߣ['-`cAڢ0y ),!\hZ.VC1Szn}vˌQΖݣgN@-^dW~LXT00W ;z,Y]Gp Axࡠ(Dfr̹%:a6{pmSz/UNr6*\+HUtL{?o nc6ۏ3|@ .^41`Wt{ur))<#gG)pɵ^ OQ"'hO:+)eI#?*PXf 6x[hI0m#*]!#!;,r7ccj_b'lSԣшd֩uOTZ|@jU&d,jA;/>酩- ܵO{ ?pq)jEzLXO3׸!~tK6yt})`A rA+(>VE"pvb쑫S% B<*QA5W Iyo8cJޛjRc+*`J˵\/:`TS$ ~WDKĈNPÛ -\1Ԏ`h/}Ej]mm"5{"M |c7oB?H\osLTI%^jb]QQ4I>L^x+ήCAVA ljNZ,`!$a_@veI[@txd,&Ihn=^-⩎o8W!G!\8K 40>@cjvoJY$h.#q9QQL_`9| FG߷淜}.}ej /͔bjp?Wa$LL\| |LU.*gf; yr{t3u$Q(eM uFGZ!1G} Nca2|- =C!lcꝲ>EBR=AQއhUcxJ,3A"rٵ^qKpXC7M- lR>#纏ACN5"0вQ>.osҳJ$k+50^b^i I^$ߵokPC[ 5S"; y>H&>[~rhaѮl=H@ꨈzŗ7Ks~$(%9ds!<d?+(s jH^S3;vwNIDI {CϼDM$ >?V{9V##z5d 5d\ x"v@>j\ܣU8@N"5Ҷs !hD-aPEWDzS#&V-Ҙ !EtS.08T'*C˥ - !a>+ H–^HK19$b$P8ttAAFȹҝWtd^a3 et/+.\v+҈ r}Z7 Va}l|mLLL5YK4d@ty#p3iwAA I]̏7Sb̜}YP PYVKĈt͏!t̾~Nߕ~1.ܖڋt1댎@0 yokN~q{}  0|ȶ:GHD~5{U\ɛ{{w:8K:HYCq9} SOdm?'}(tq;DV#(90 PJyCJaC$e/&zc#0h/h *$-ܶ a҅Oloy*t`%<*ey꨺twA ! Aҙ>d֩S<|P4p?c?x|zi>`yt3KEN= hZcA㚠 ~*Wtq~(NĂ(ퟕ3d)=^VP,D@LI9ʜ}s>rs N@E*l!^߷2@6H鮡mh՟ԁ |;ܠ@vHj]_8v$k JŗvZLjQ<C `@\I ;&/mWj~ktϝ|.gY7g}9"wWsq|1ܕDWYZRWyc&rXw#MJfLky;(pxm4p7"0%,y() @>ax<׃OT.9|Beh=hl9Pkآaכқ;W|7Dnp-8|hBjd0 j|:q)n[j:,-VO;a!兽{ݚ/Y7Mʆ#{fTb&VΊ[fla}Z쒲2?w!EkE#eWOC?[DyAeЗO ~ΏطD7p F74֛wDy3e/ _/c]8  eJT )x+l0H{`،z5|AUgHW}ſӸ~ChgxTŪOMtXf=t[of;  $[|3hq? 6=,wz~ԉ+GZo h8=.Kԧ?emW|of|}~(z 7ڢޱ }zϺ ypJE>z=I=d9% :ѭ#dR}8CȺ#w՟_Qihw_=R,U\6GR|!?1ahx.!`R*2,t?eニr]jiJ+1-.U?e1PRdrK18ޣ}ɺ>w|-oޖOcK<^!?/#GS\AJ]7872D <9-@^n`G\T~>n38q`8\)"8fsz<<b|3!vsAre$= 5_I"?d^a$0 [qT4.y.~K>uwQ T<*~Z=A\!h#{^2zig'2kf6pfܣy:~|ȓKjo#)/*ki`eFIl> U{ O_4'[i lLm:1@=BX#] n(Zč%,$:DU%nv=llOǨ7pdXľ/^IvA{O}P2V?,y)Ul:p2@B|-G"xng l1rIʺqIKZR@q94IdEK SA'0MORN(dSPI4|A@רα' p(r3\u1i~0} n[8u,h>9;@/jBC37:Oa; ջ_]57cֵ.UpLLiëG~z#M%JY -!Z+-/Oqgy>=*O`wCh]^H1"xZ3 i[*KDfB#T6lmd.Su==)Vݷ䄿B)ϺU 'ǔY$b"#!"i'o'aҔǶde񈈽Y٥ Q*1dkW/wb&ٙp,A&<vG0EP~H*?W5¼%bCwI@v}aԚO{#\ߏ9qGnň0u:pީ.DsK﫮(#1n-~s|?}1y}jw 2٧=/= Q dT;p &*CB^葨7_3| Xjme% m(aԗKL350Bgk#aV׉ y٦lCZJUYZ- #sjD|\нL6 I}l:0^5h=D`0@05Ɏ* ueda +'.kSJH&kmU.\tsp߶Jujt qƚ!{mxc N<͆5(հ"J&@C°XI,!ngL-5;p rGu^^)VBBa~&`/ݙulP_a0)ƥ㛐,8ԍ Nߧ6OS8(B{Xq!k IUHT6z 0|"'2&Mk^p`4RK4ƛi3j4)ȱMrM9QJH6vDFc׿;KZ`?"@g"i:yiȑa2L'wo}wJ_quul;WhJ^w l㬷Wg4jP;MC=Co\X/~Y6y_+]z K <[MQط0㯥S|eSo~oiK(Zrwz 7$Po0&ٙS[-(9~I e񪂔YƂfa`!H$qb5C ZzDF[j;bǂ%wc!+3On:69~.hD_UHSfU?(j|D+_̻ZIU9NW$w$"Ca1pʿ89GR'L9.5v@F 嵏.S|9S$|ٓL?VP cB%@`VfK{#߬z#)rdYBjG)iNgx۾F#]-k'LϥlyeqC qU;q 2vIa@ʾa Y^"tNuf8GVGGts[w3S_/zN[s%z" Eh,,ZȰg|;?0w$n/PVyɶYr@ &uDu_aaM U;1#3ȖAs68(N(PҬ<MkwیWx&3=Ԛ C,ĥCMwؤאK k|S5Y)gKGd ˳ABE(ZGjx9(HNX2sњ4][yj\6 `W)IH61 _-`D@@I~(̱VdH:8udOI itG5z)\ӿTEEeYKg-OK]I~kvЖ'h,7pe$ w]vQjHyG\UZr(]|t%9n9Q_zpjP{>Aռ6_z9?׫s}![@ *uvcl6$򳔄y8Dl! W [ 1^FĽq>´܌-VR#_|ܡ+샜A$ ?_CQ{m,4Mǹ/۵>^m?$`ddjq&J:mk>ia 1@cp[UMhyfe9PQq#3@ };{dnҕ̚jl5G<9]$u7syi1ڥ`[,cL!? UD@<Ja#̊ %#k~Un8UDUДfhۙt鱇,E8ÛCCj )elxږ d/j:( PHpѡbDpMh\O7@]m7O$7o+?fٶ5Qʔcx[COS\9e4ԧKc )s¶rÿ?Ϥ>{30) /vNe[lL?O*D%mf:'ˤle ^qvJ':Q8OSN)w4|:X1 y +sͅtn'h#/ 00펾esvݖS_,X٥~$;ɤ|P1֓ CP)a|Ui C4y3|@-iWӂدF"yQKud QF 3!’-Y]D|+Iur&mLpLZ9RQYL*S8خ<$iMT7Dms:EI`="} ^7mL!IgyT@,>GU:d׌%vv[HjٗDyʇK^\}\FF:g;DH4 )ܸ &㡾~H=%3ϱ,CX@#u!Ϥ->DTDsKՇHL h L-j7٨853@,Fj̃C*8p! 7Cdoi~(G?O:PW$eGR~]t'|]@p[W)1k8^9Ugi[Gl}$^?AJ&oJfQKCyj:zHim3i*[R]i %‚êBq7Z ȿ?M/SUUnL?oMy";YuttC2C\{ !$MĶ~~qrp+&Z5fb(ʃ"&Z|6AW5A lsN8n'ZgѤg 7SE:Q//Ө<ɗQ^CpKkt68v#'p6]G) N '_@( yȎAˎV)ZN/]˒,bJby/01R)`di 1̧҅'J4ޣcaBrU@H553?s!QG-KR^7d vj9u}Lk'RcT(\>>cG- nZ % p4!(W$Ag.Amίwvy?rkx}W3^2vIB<. L t*_I)S,ǭ\J#`'-Uws)@A`RuS@B(b7# s{R_VL݋Zl2۾G57Ŗf:{c#ЅsG2 UO"8晙E?O ?h%.%?씠ܐBaoU&%v;CҽWCoP4z5+9ZWAōGS@RC(ژYrO,U,Loa04SWX _a?AԋV *&*Z:Qan xVf$jr k0%4 ښke][6/hjBywSNl(˽E6 x؎ϚL:A |̶X\wl6pL,o}ϒߦIj%^Y5|En(?`:.v` tdW\p5F-?/kX˕t9BxK \uij"o˼r;:_xV#ND912ZYc}b՚1[#r8^{!W3u)h j8LRP㻱T˯9υQ4ۈC@)=PN,#"UcA ÅEd\mkӮ*=.9|AД3U3MadXJ/XRG"=A" 4kȣ=^xrJ]EnBεl6VcH:,!|~񲶨f瘗ruc/,ӽUz?G@ڞw)>#/8Z(wX!4(ɓKTpl)%D[-Fm&hy%t,:eapn|ko%AfyAV;C $Z o\UG)7.Ԫmx&a)G/_ߥѐkF- B !'(qn2t)J{<~~y FX4`v A&ofR|;gP5V?Sa5ӮcAج7xKP%7+o*F 8^`v땧ܔөPL y8ϳ惔,TqocXYjMktdN2S9cw00vSgxu}m׳B9֋l^:Y7j9b(W"s(c7Iy?cwߔ^7 {_99rԸD&|}6_8׳ܢO2~Os@l#9 ._v0缎mz Ǧ)@[>{/aLQ4Ԛ 2/yʇʑx=c`.#2Rl 6B^P{~~ØsY(ˎ4` X,὘4T)oEOղe\ 2~UUp4~p#oq{ODCG:<^^"8^n~+FmrMCehkhgw*'o^M9m2}"Cf: Z?Of$x{B`XJ*.W#xFU$`J-A"Bx@ 0 $6_M]YjQ<7ߐ<>xz`2D`9~/`J$a?>e^f1<V/xvl}]:Uun6z8\I'x>,4.ZU}Ń_)exRHk.Rbo3 }x.zAIuZ̢)j#&q{SCKykl PZ ±)=EE@՞\> ˀ3\!g |ºNI ,:."8voĬ|-,4yb;2=slZx_ʍMCEIT0j^[Mv~8%a-Sg(wo'@rͲ'ϸuŷV]ƥS>ז?%!4sDvrg6h },# 5su! YZ׉)7[bN}i12x4_JibzԭT*^^=s\aH4Cj!j[ oG'WEHGdyG4lMuD\M97G} 9Rg:1C, ȋwM2캑Fw _cDyc?f߃,KZIWe:~#t)FW+eG1P?}]: fkRr nsAY?ҞxTw+5>wDdJDA_{_1OZ%}v;8yлJڙyMH&62¤7!,r]l)d5o#oU! `"VIOyei=GpJG{K4KςӤd@#]%8nc RidJ4aOzf d;ʴ'ܮ8-fhMbH. I(uf Ujoҿ٪BFNYue4FgS2:m#n[8h 2?wj9P @lsT.s{G{[0FX#Ӈ* 5F3j?Қ7ks3(D6v潢!EFQE?+oiNqL9(N(JA;L/fPQv瑯W xdeZ`e;~~~X*#d,_V3]br x d)ma!T!OҤK^$Cx0B``7o/oWz.#;|^=L,e\Ps%Ŀ?nE6E4ͧzr}wߏkU&w{ Ɣ1|$jf' _`;ڣC"ݟx€O*M)` ȘwA7X}]`ZfOvv]CcEOL-B7-)F뒫@R0׬IEdu.VlN] y-xqvn&kGT1l)F6-VZ*gw} uރ^$!ಓQ[|:ôSG/)=@ \o0;R(tKL"i&9Un)'^F2S#p5%c3##0⸂WVj=' U7j#a@,{tQWU%pEְ-$fԎ@fsvT^nn.k{i}s+Wz!2?>[[jUEô KðxecyxJXIz?8.1WNjNEpKQ >xAecFAwQTq bgg,`a.\Cܥh{CONk/[4?Q 1:UwLIabC&8'@  =w %66Kұ;v`wv оSa 5q֖X ao 7CUGK f}7̓b2d Mg) sp_DĖ,jbY<VTB$d)d_eouhuB\ {\1KZCwݺͼa(P*3,1_δYt@IKrGTS8EEu(>ۨ'q,UV>&34Js :(*xa Řv\ tʛv{a SD@*J~kzI:0Q ;:kNXdǧ;HR8Z[i穔>w![R(?$2 o-t2BB+9x=||Φ`9*\ `Y@!x'.u>_俧o=rߝưu oѫR=C^fOu?>b5VHc)k2D t&K x?4tv9b=) OuXF&>HOA@V)^pc؏rDHF2c0ڥ QLG1ѰOf\|<u817~J5 4Y?GL(b>h>Bݔ{MQU|Wͫ5Vxkkv&fǸ?,xj5o͡T*~!HGé_m| F_t"(\ kg\7X.6lMϝ8콇98G| q\{ |$P<rn`io5hs,4'jͬmD3Y OXzB,$F«uO~R!_ְSyf;_ˁRl'B#ϡ|j;t/A׻.Y8LVrmaIӰW4C>!AᴥJ Z |"5 YSLO+tvpH/0tzs- 4' 9n&鴤 % R)ɻ Sp @:V o`&պK3w-!stgᷰi2#TB OM2«}/3_qwGYpt԰7r~siNR&cLaU9:Pc%2H@VAl*zJ5rAefBdOsxcZ]?w2S5gy,ˌ4 rU)v, 1c6wm3T\x\GIzzTUx F dfy&Gܳ64%ELzѧ&)9}EBB̳9%,א0ZŸ7ɼ*/"j96m $7cSʻŜ"by5(ݼ}(<{erXojc2Mm[$Vo-ձ(=zO~kxo幘0u;Ƙ)UC*Y< ! a',N@ӑ"v?(`P0ҕK<E|kx۲ԣ۩7xʖ`:;e؜aQ A/HwlՖ>(ke)Czg(C4'Ҫ%Am`Ω,"fw*K5USM[\ 0ِHJ0j$3֧F.ΘU$E0YD(ni{E|E UJ_yY,lt>qZȄ&X"O=>nW5>sfY{o!lU&*U;}~ڏ9EDM e(,;6wὲA-cm[u79LV~0fgȮuc\n)'q*dIOvpڃ[ykɒoB! |k oB&J*6¦,;Mخ:tuab[d)q~eJxjQk 7UJe5>l^s'V$u6%HJWrnQ()SQɹ%/BLrIBu:  =wCȋ5WPs1 YC\jDU BrE;HRe:ԕ}bˮtP }u '5 v ~‚hbj jN%$>܏m|߇737y}7M|#z8UwMOFM@faB!hbfYNRܞ4VzjȬi:w5tU S:/}Ur9ߥV>݀~Im03zVuPmrlޯĆj=<+F$FD`1i Ml7$+7jjțk0XOZ-C9&A ߮:&5Z#C><"_JA:4$]vu~u-tę;w)/7Xy(BJ}?a?<*r$2vcxtCmfOPՍxLď4K)&r<|õ/'a"ȃT_7´;,&~'X_ Z>GܝyR4 ܼ'8rbB y8vj6\ Մ Sa3^/M1M;] Saznt+ӭqI+2 k}^&5[ls_kc$ HՃD"_MԦA%n;<4\\w~rMvU,Fi7/~,Y ΤŷEǹHZ͆U(8 H(_DA/9%/Kz _7ϵw>ws\ 3`LC%/%+ك4)` 2< Uv"EBnB^`I(қb_wjU{+P !ATg'b4^AsA'́3Wraz/ k y~ե 5'$|?U¾{ o|Mí;lopN"(J(,YXW?z]6ek"=ze?ѮfN =P]8{$?]$%46g}6&_9k*\a*d +T0m$,d$Y3=@@fnp8jȇGK0/SlK'1Va&\% N (VZ^w6:PB/B2ʼn]" lv"{>TU yCNy<:鳥]Z9hJ0@:=iiӇCDmd"i>5_))d2gu{Q㤵gmLu05ls{Aqu=n]aWHepqxEIe1igr+p<=?'G]As*n\u|U0 {rM:._"oFJѭL.ujH X_3Y95՚H3awq5FDݵkͻim;/O)Y+W||d5'` iyY(<2 ISx)>Hp$BA" n>N |D7xHTSI6Cg(k*v.Hš>M+?ѳ4oy/9x*Ks#o6WwP[uI'S!4}M#׃L0BsZ2@-;I+Gܘ~B:ǻK > 5C? ?l#NT#gNgJAO q'xc,D)x(81;0W  L>]B; 90fH|.uEG~s *&?u!! *IK}7j6#"yBCF8̼mu:mb8IoT 9^H5V+-iZrHEvKbc)6UY r;LDS΁gC A# LɠC(UE5eEN`$E9P$\TyJc܋ņuyF l L/dcCYoQ˙9˸9dԅwiI 3<>G'>vM2%HCeOQ$աdA:R9iIزF闝e+֘,L m:^D}x#V@ 5vG=kpaLoF Y Y(kx^{}#DnXt6OY6#t"|/8psk]ʅ1I}Dݺ/?|Ic,}7 $$O!s#^Nx6K|ق3DF0oڥ&7:72Q'vF4G;}͋76 0doA^;: &T:-en @]aj %#,lm8EPs~~bL@6;17?11AeǑ(,DY}.}i's<1&)zNSLg O8>P'4>E.̋睛4ɣkB=z бӊ&foX͟3(s1/Pr -C% ^쾯 9BFH*e]},/.N4཮_1cJ x;?_'XCBOB̤RR H|]A@>P23CO!!a& 3aԁ "" z-߰3C|Oc;~CsþLdH,/'1̠Rڬё+^Bxt@hDL6~TO/󥵑 m 5e{½reҖ,{#rHv־vKNIcZsup0Φ~Ū^P~@Cj2=a|i^x7_R(ShFAcן pR&=ok'ȈAP h(@+$²4KfM^ رߪC1sZE]$lj]EC9H0z,.\BCwmtV$PrGKFr[ZjoPxt$ܼt\B3]n*; %L.sKVl$_(Ѫpn+ha ?]Du]"&qwX qI篣y;xzU<*]mU>o]%T/Lu|Wsú]6̹:)80 $Ws} ,g-~nH!q \|8k.d`:G@s"5~'W FdLg #@/ $&gQ4ATֲ3< %Y\u;X3B1SpTmui_sY7{ mlnl%XQ9\Dr`!Qu0 m:tHQz2q=7_?8e@ 2ڇ?@K.q@0pE_KIy ofA8FiWFu ]k08ba9DXj9ڇ<c?٠8}9: fn|V!=ܽ5Tblh8a}h vM= @_/(Q&z :>l?`e6{K94B gQVIHf'"g9${MPr)UĘfT?>^Ƶ3jDei@2!*,dBpR<Ӛ@fF͵՘\P}GwK $*F*I p^9aX) zS=V0_5xGT= Vk7Y>ÈrV/B9'ܢw}ی<c,MMI<&tlSkW}1RGgOpVK(T%˰~=\Wnƣ_oAnk\FzJId`)֔Vx.&/k%2@ύڶG??'z Ai`Ƈ.|F"!jC3A%Iٷ3%qVmI;2;JS{qdoeϘ&P^Q/W6D v: U Qn?^&yMIQ~4u=J˙N,4$2vyS}MVF︅!H`@IA3-}xɇb E{FqkǷGq3zH0$7[6Y`s":a#=}*q0z0(f>=,6`_eD#ŞӪw@xQ烬|% а!łEB$B9[t#"c:LTSgQ#dDV;Ue-α0OSEh,5/GBB 9G:!+:0eyVTPQk(;y*z(K+|x~J8[gբ HKtTn-[7>KdG3 ϊ߾Z` p*N(\D,P v~OֿE=:~m"wBlr;}bpú%S.]KMXsJc=S6K˓vleVH&DX+:6:טY$WaE^^џCMBVyXM$g_$ 5KVg"0:Y͓R1d %_D`p?"$JEgTodD@pIc1 ߼e;?r[_8-pyW4͚e< 'RT.CֺU*۬R*쯡D]%iTqʕ.o`cH[dž\#baI}? ]mNH&fFAoHn;X*zeoXjWWoC\-mBo[{3_7K6493Eg춑e=hoLа"8 }d+JiGvkrD%~eko' g틊OWKX'n<sDH37Gښ0/D٦@w9XA !ÑI>º]f澿x}  ȳaTUR %kU1rAW=L`q\qX"a&!F|)H}kHrna'F/HBC @ KrCTm?ugbVO"ZP!%hQŶS1xvkykb:e 87EY#D]8KmISi[,C/nnLE5ð[,xg)aIֱa. F"5ǀ#Aĝ&RH@'H<0)~5Wj+"@J) #ZKh+MsH T ngU_,Х5eeP,Ǜ[~=Azj=Oi>?9Nd3k*AubG.ouy.LT7*M!0YhsϖǕ#;"eJ s(Ã: | pt:9 &02ۋ0D5wGg|#Om2?2`vvlۃ 쥳!S;JǙKY +O2b̎o2G72ϒ>4*T e[w#@y4bog{7Vk9H~ XQ%ԕ- 39 ]8}U(,@5.>βz>89n+O;MhaoG\YJkIyfZM9^+w՜qFR&788")qUu Qt-_|u;H'qo>i熎2f7 56y6+y4­%u<%NO]Q<4LGhC!X4} SA$տQ" wfip%]ͼ]mlPjI P~em B4/ Q\PlÑc_^놝Ӷ7jg|ϤR~Z)NXf"$ō't,|^bxwj ӖB6^ {K qᚽST|GCcdo5\K`r7/ܖpe?,7}g.W󎶕L37>S$ۂu *<:Sp_xW~j*T|aB%.(t{+yQ1U U,E1w]].>[Fc2ydE˜V~Sp&6(U\F<.vt0'jN|#ƬΡh!n3ɫ.`(P{VzZا;\\\G;8@Mz'4A)CAyOOyqkcYumJgxUo'ݐRsqy$rn|3l^_|2v0(s8i~ā)sWXfȩ3G]D!DB[EhQR }V8/{nEF/D@ĝKu=`mW#L*;o\@f!b_ p#t G0 z,+Oe2#(Ǐdo|'w"ҽ[tLjVt DEF;g&t(2%)'W'rj2jZhiU%Vzv)<әH|؇%k,j!lljc4ƭy;9JRZ!Uo*~ΫMD)) {-Rz:eb&5o 3٨FÛjeUIlef%yI j'nPᩗh<[4z*a>qHR}?c#p;o֠GE)"NR(AWa}D"ɾQ¶O 1Suu. l:fˆKMJRK!7lș)߯,nbgip&ɤUz3T},(c3Vb2;F蜰bm>!q,HȆJ AdѺnDf3r'欔)dKu W=$5 4AɊGGT G"d+V3uQ&v~S/QH |Nɑ7=v#7fɣrfis#fXvVJ{3gf#M /X v"gyW(HȘѬi8P4IlZfhME0&D]fxʚ&:/4i|eǿ.BZ~<|W[AsGO%A_충)ʆ{+q!i=dEU< 0 ̎$Hߧ{Zq=޼31?HrMf b&7Sן_H$al{CM_ӂʵŸjS7ts6_%ךhaW%ҁCͬBI6֦gy]hBS}?\5C<-m\qnK>3T,* h3sd0-&9z>{7dB}ɠGCkЯNZ#`q8A:D!/jkdp401!ʃ} w. 3f#Q'f]D{մ5@BÉG[HҀB60:$R聱JbERJ@KΫAc, /"!M 4K\F#N4i#?mP \cⶼ`uvػ߿Mm#1gvM]3NFD E)8+!C?&M$- ׂC%>_Ghlwyd{s?̋.9$X lR ;4wZC}x+_9d7BqDsJ,aq PXNr_Bm$Z\ޝr̝>'k&L9ao̥\ s$&o2=2N~N7Zl )3p1p|Ph:;N\JkQ͢|?6l;k{t٩ۨ6KUUarn5Bǰ<ޛ |2e=߳->~i@k#[\Di@o7Q |?ƐMۣLO@/PHN9 D n;G* 6kb fW~g>5fd豶&HfDӡ'/!{,*[ɤJHwyR(? ϻ7a0d)lR$=_> @9}H8Wծˏ(`>n) ;oZ&QTK>kM >?bH#<ױ?o|Cu!NCc2"ތW7i#NZ,~* .OEZL?}@a*vR507NngjuP1Rl%&MZ1fC_F;,0 93 !򠸂wN| ߷d0Ep4=rRl›xD~vt^xKPBo&EI셬 H20ۡ.6.S!6Nѵf[{]a;}0ʏB1|uj Ɏ])f|v/ et-Cױ(1‰qxjD"*345aUF`z;Y0tʁfI`I ,r`![7F* ~ecwMm-Xg~,8"fM6+Tʁ1U, Y&`{.i<~jjeO.ZMf⨊YF@QaP\6/9/ٌsWKa]u~3blӒCD:?Mm('RIdq"% ,O-rhBG. iAdqéz._Yy܂:H(S}GI ßMw~$G}壺ɦ|M50 <Aƀ  ~[*0k4#'DC<24?5+XӋ{;<̾ԅ[[dN%qP0ZƆnw}: ^ʂ[v>|ftj[ߕc= ]\B%J嶥_!U;،y^Z̍zY39Kh5~nZD;="I>gzšG*z΍LۺrHQ,ROFvSsJP@eNNO{H;9 Xbg$eFUc 8V:ݦG{w%0|컮mbGn F} >Iߺ٪SM[y.~NGx=F$R-3Z ,yy=LPHvA KygN/u"2Nk#<ðIV1 -&]iPjG =eaJ4'%~jTgD5m ̴b?q)TbZj1MEHa-{5v~:n!f{N/*C7-Dp_gMIXڟ-qm]b{2?~:OC~~c OCmDP_~4n@m?DZOw=Bs]"?K˜e^ߩڒߋ/Y{_}:={Ǘ"D=Xo7hd=e*S%dj 9ix/ܼ&w=7)2k#:)C>o]-o@5 eCnwx6|@yMOb;':p0O˒ܦ/y;3V=엂1C);d]"n)R .Fw\eH3 F,'2$ `'e8zC+p:VWQ5̘ɐCe&&S^=͏ŶIxOh2 "C^'E.2ˁOav|b1*c(*|Lگ]xb:d${]\ŷc|6((,qd8[P!ٔb,O^ Wövwn@@cD?o``iMw=X D Zq_3ĽM`F;jN='qbE߭ѤQPxg;e4 #N=(G:-Yh:r(N nz,ִ{>S3XJkNwJ8J'9 y<7B |Ugj w!ޏ liޮHG|rnKC5l`%xrɾ(TzeUFGs|8֚ kW0p<%/E-Mrb59 dMLw70ca!HX$Tء|8ݣOv+6tQH ZBl)?6 gdpnӈC!S}m/pl{jTr' GBC!J?<%l5CJNٖ OD~ʯn@ha_8l$, i?[ƶjԘY\^RTqzz3mq`"[ҁxZ6M܇?ΠjiZ; 5mSJүZj:_|[Qk xRD{[=9  |tkwPݓ&ȌFE;=9`o=^2JM,3@ҋi^l-p`0 C:~%}3JHY|l~eCΞƟ%X h󘪘#©|0˧G:d0&3C^,}ϟ\]vYi. IZ8e`< ?u)SZ,Ou 땣Q`zr^1TT6D< gB CJ) 0*..gnp={ydh 0ɭghc:M@4Yyhκu d5`(]ēU-J؜`UzDq[>_4Gxu~sWӣ tӯ5z(~f&2{u 0`2y,FV8Z2&*3 (b4}.2-Ҍ0x-api7 `V K'+N z-4nȌxݳ8fn/V1H%o;>Yq}+Za|2aS d 'bB8]]?O"JJڊ=^##$4dždOU8eOmju0e^l8{^/+}ۼ6 +RjAgɷa/yCUfW՚y}$fc0 k1mW>7m5b52e^Q]ʹf*Ic0^]RLB;0TN /e0>H|)V@U TZo/l}6`3t\xP)8z/X&B{kIQ/W G[)H C!4;@ +n?}bfav;g^n<,TN֔Ub<7\Bm@!Lr‡TIcvr>U~g6>~x}^c4_>~KAL5c$˅*ycFl/\3hȢ㫤;顒j/J٪uu njgzd뻎FֹHwMyb!sIB ˠ} +C>FtfLb\ͧDU YBacW@¢r_][z}A ;%Oldh oU0lO-jgR31sJロb]Jz*.-]C TpLdiH\ecX)hE+,D5Q6 k^|elȜ e.FIi^_MeFN@ `"sdjULb- 0,`Xq -yǻ]H)>{g:yQJG"${`Ɂ}s чBX2VTf)V q09$XL4{9~<)TB I凖JgwZ U^[:hAY^QzډW7Si2I?+it|Xz?jIj*W+_Ink3)/bΏ^wm.SW-BD:V߄Ǒ։?() ` ɑm,Nt)ijr;$.Wf}|o20S4 GP Q>Cؔa]zIK,eHj-_O2gY aPͺW3@ѵlePL; YjOC„Op;@3v.X&-xHo AI%!e TY0Oɀ'"gܝmAtfzB Yؒx@2OmTq !͐ of3yسy_#~[BXr. /M@`* 9yz/2DiH0D0a vwd1H!f uB!!Dcvdj/dމebFPVudJ՝&ۛf! ɬ?Q fNcj~P|,\qh 4B[ FVЁkVz⡸@RHk"' ]zWTA0`MכYF%Z-EY &r:&Hkn8"3.J;l;/s5(vw*%ZoS*ԨŘF0KmG3~5X?w/}"3XD-q'=τ$?hQX,%!]wY_6o߉ jYQ>=vrXs*9p{!(pkJwuЅS9"ߝ`e:XM@Y:WSLd@TII@pnnZثE<ȫUKSajs*E"fG h G~!{^t) yKz?1a.o/rYq-(\꯭HL 1 f\UߐlPpg1uA%Ab&o/WMrWIdL](CSa[Va%-,k?M 2%앮t1klO4oV5VOr\^,*5R҉H-suHX30(xyX@kV2ku60UXzC"玗Yki+\pM5E3`ίn/p]iQ 5>pT2*`Ff赅w&o#-S.mQ[UoǁҐ^_[8 L1`N M;lۘu<{g[5  {mX+ T}-)4ʅ<)ܵ7gJ7z֑_i[BCΊ$.Qk"(D.puqGOJ䫲ZD_eQoH4E q!>=;[菑y_uDjjz˵߇UiD!/ܿ+Iyg6JXt c/%kx5A[uYU__Y3Rڟ@*:'<K34J]Zc!w T)Čdw?kĘKχHg=Ce|-h~h&b֝go\ec~glw[)Z=Aow]K9a" RYJTffO.˳iql>ُ9_}-O7}C.LLռ%C:bJ06fH48sw >A.Xstb*#ۿ @@XHNL[hA(j}nI],K4b1ePyUXT.2M¬?|Gp^,K0cΓȓ^&ؓ*"0ùwĸ\q,F(0Z,܋Lؠ#u)o@F2z[筻萾yXS+!!#msm"X6}ĄE‰Z)38ZXJk g&Ո9á+*1D%'+L'b{裢>Gc_q;L %V-ndjԁ#/0r3aB.ZڥJO@_޺_Wbb$ \( SHfv(Cf'Ӂg~XpY }3jqFEAbOk(Wet* APgTI! |?nz~}￵ܟMz1ڐ 2`;NH wpA.7>%$^"]փCyeFv-,6onY?oꐵ2bEP+.BʅZUwˉ2=tY7Φ`MD#XS#2NO+eO 8j( Xt2_'!*vrDV6l꽕^n1kd )JJRQmEaϣ2^4gC ]^08d D^4・{f[tfcJm$2vb.S1r߆ێ0*bL|@@<8$ۑJUE+%>L@4pc dn,(P!Cj5!KI~ǡMҝ|2fܱ`sؼOVexPTrήgBOw@jRdi3*%$+ce66\V ]de@f@D PhǂV+A 0kTĀ!3K%uL+H&q<PBOڇd|sou0ZQR T(r~vW  d2Cdׅb:|c {3rf @3f3x䆌hS5X[e5Ebs6դqH`ƅ)i(;C>{iOq,OU9˘aiJ$RHBfq9p&$I [~<ՙjrL>ٛIdd1oXYs9U¨jCMPd}4E!yQeAqU)Gk6˒XD:He0ґaSCN_؞d1*)EcFi`&4 ǽ_k(CUV)37]= x I 4):kA Rb`w%51d~}"gJ! 5 P$0]]iq %&Gq%*-%3a%;mJL%ˠy4A&iHCLjh Je0O"aa.VZ ;'quV*&$f3.VR5Y^eAJP!HR[)*,N$D [u Z3bo/RD豒I+%j6)-CL䅲peS)1PޱiSiZd׵8Yr6B])T\QkH:B$D(XJjdg}3Tժ<;*ЄQ.`^S@a6:UEdEl>lg.]T Y0;H"p+%0v#]fW4ܺ ]w%;D.GUs&imkIAeqF;) qP4 oOVrT1|!!Sޠɩ WSӂa EEYq.fdU q@7okqk$#l@UJ b*I &("I 2Aw5MDS\! dJI:pf@ %9^ Z.;Gh%Hf9rJA$€B&ЈAw5b@L29XV*RJqprC)\ֹiաprce'[l*#)f6_D#)9@9tȒfw)+$7Krۇ^x~B0`|!E#ft:ȭf@wzU_>ϱ,8C~b@`pJ:_Xj|n M7fvx]VXv&,X[*{,CÇ#7Z hVRP`X ީ жhe8ibI*a)K(S,C0ZpMϙ06s:(te|" jbs0&;sD LQ`әS JE@w9v;UUaxz޷E/SjǨ*[dP,^X/UL,} #`cx1R5J cS;VDIR}NV$0+MK YK6JD[9d,YD1L$dmo9,Ei_n󯶦Ϳwt5$ -UbQcm!g2R-QεMX\5|K"|LtޥB &K* dڃ){ ŶbVV)6T^%$5NR0*3m2T֣4Qd6e H-y06]7tcmV [4@,XK%xԓ$A62, eeqk9*c ްVlB@&:g*7H8Q Ϙt3C= hsxƬ%V%Jrt8Wɥر+YЭUi,XT)a2O ?\bUu*pJ&Aa#_ 3fyM a%Qe&X \ƾxtN e$,x""N9A9յgS M~ 33fPZ֪*Ʒf/.;8"DT82t U4.ieMlc&Mɒ&0bXa^l_N&BVFg'xb F>fSe |Eѕ3,Z?k*"9;o9y8+<+PPTM@BADK0Ų {,Yz XF_p)1;B3A)_'Ncte'h+rZ?>*| 9ɼ2zaD~~󁐴K[-mwBP V^af;(O1g&l zmβOk2uQ t(08D%*!ATf\C̎}"G :-ɼUzG6 ;qY=B'IX gö́Yu9\=/8/()O8@v =]-Sv~ !;LQIiQUQ}W}=v'Z}d R6 $}o-Osp9\<6# X\2 9Bc2gBuH0EWX?}wζܶCeG{E 5S^RRKEAXR۷U[(}DTE\̰QUb&  6$(,gF.dESbQY9&"JpbH)sim͎o{lIw,,iPXU{ː-y(@(s]1n;C0i46e3ĵꢨ{VIFv@23fw-.S1M8)b2VsdŎDf ⢵TK E-PY}/|2.ZۆTU0nPt:,$[Z4mrf0U+-b)Q?r|ZVkQ:!6!vW9EZ8ծ%,8E!2%*]THUвUKbsTZrVIo sPUF),%ϾīC8b \ )I 銠LX*ڛ _dI1ɵتPz|L\c;Oҩ< 37 `LM3LxR0$oyƅy{@L}Ft!9ZT@A-rX@&ImIDe4fbe66t_3MK<{,h~J}@f*EPU/\DPUUTRYq-*^k~4EH;7yqRi{XQzpDKBlz[b#6ۡI$]I*)H) s੆fͅ˕X3iUQQ*aRB3h"-sعb1ŌRd{l%̨FFC29ViCKIS̻۱{D&Y,ЦYPCzjiIWj"_/rI:=ygZ ߌ {0 avBteґ`\Ytڹ*TSX*RK$_sCf4 ":q6C4-57xA z4۽V#vtMx辟Ģ"? h1 v7,/õ6Jt[WE3:^}YB]>8o;.9gn̪d8HsG 67׻В!f3i8gsb^`}Q!UTlG+xzۢw )^Mݹ b_L4 L_GsUsx-<=dPUռ{ń8 NRu=icf&gc";XPm9"X1vw a$k:zTp.?%e1-J#S^-̗bO#KtG W+ET lF%IDZw>ϡ=149WQi9dau7.ŕIG/%*Y<ӉCt:Vx|ѓg{M52&'/݁<)edU콬*ʯw O- )i4=e) OnMt37xՇVB.qMm3<$,GN|jAKيvp}dh_;ȝz'GuFtT* !2/c1} i0c}xF;Yqn6TfY6?e 0z62SdŔS/DύȐkbS:rMח C[kWC;`)#_IM|c%H4T?S?E站ik;0"*T! ؽĝmrCٟ#U2k\os%BY@]eoMjS_&^7P\L~Ijuinvһ`8oI*5_iv$yޙqebf_'bw_`A\y*0w5[砑K&(M#5;l[.5"sLey5*(1=Yy櫬͜E2jSX0}_RF?naC7⚏OXsLU4|DZF?) [q\n2-A2Ez<Ji|F!؟]GmUCܿύy林[pxvD4ut΋NCR 2qVBMLmQū\Ra9xUSG (!,ybʮ>_R"LOuTeD|2 ӛL{T1-(|=D3_im< Q| 7xAڢ䁩d窶i"N߭@6JF$>ΆP:C35\I-`IYs3y:&DP97+nE5 Jt[^7XgT (ZHhqE>"SRH'e"T>wLV݉ _FohEFlL@.w݅5PtyXb}&D?ey%g.v1(OYw\ER3|ЈȾ3;X,z)Ѩ Uzwo>eI-_L1N)ӘYCf4!{p݉?X=ޤ*]oBeA#F3נWT9@y'zR6tvTEo|՞ei믝Nw]6ƛHt G1D Ggq[yQc!| ^^=-a$ޭrI$!-{B/'B?G{_6 z1-'CzKsx3Q;ţ"gh4.u!m%9a%_jcgx߾+eH;׿*׷?Td9yD8uzeVR .Ե.3_֙^7tXGܜ¿.MWYE ή=F='#5dyIu}U9T#w@G]/֬OV ܉.37[^T{Tx-FL{֒S tJ#fL[O/ːwWOCs䔫Uwy$ngʾ+4~xbU+/Ȯ Pg.Lp*T6%Tt?Do?2|wR t776۪? Ab\$ijek*ʟcT"`*X԰[I H Eg|+=D6#,R K6՜ohe.^KB5(o",T~u^Υ4*΄%QdVMzS+ ddwRcy*@6d:lK7U [¡K,Y;PUe؀n!Ԛ**-\Y݋"¦Wv&,Jjtyg)hdE6q0ѷͪ b҈,4fE| L ,bUOkcZdh245U-**T\LC,dŢ-SRRdLzE_-qWkmQq$% M2&ڠPuM:K$C,UoPZUUmۥ+͚{*IU~<Ԁ/:LR tB6LY)B#*XIK/1 ኊ2(ᔍR,3E,Z#F MP., @4 rvT~o33jb&c@U" Ģбwo4CB4߷T0v TZM[?Qs,6RةD ڛX̀xd ̙dUaUK!f"5\RVm}WI_S*Đ۲IΨTU# b$E* L2m K%PTڹI - N Wמl5뿧{/zґM2Z+}b@w?7X=~wmȏxн  IT*ZְY/ `Rť!/EjTUQ1Te[Eeb OMl@dda\qGe*Z4+U^)0n7_~AOlI$ bD\%mi|QM c{\5-E*ڊGYDQA&IVYm49b%U/FM)TqX/f,`VDf%Vߥ)oǢi$F4zJ5TC}(^9QP%DKє/$@)aNuT.%1w5Czo9 PH"H!p!J[}a(T[EhilR:kSF+q4!v$ o-aFUasQ*ihYUUT}v2CpRϗȼYO3/SU4-UHHhћ*PPV(UR}鱜2 Lkul\~-նz#;L_ƴ~\י~7% "7 32eLְ֢cM +4KڔqX, JRW-hda2Y 9>:dۄy'ب4(!!(wF IJAhrB!:L^wJ LiApm-Xn^2e0iP&ZtikXU61Z{on=9_]{zyc_`3!YNHJN`54L@!RAR(_p-1sZ-.`7VbYvOO._:BHe:*) )Cn0Gl]!2jm2$,wCJI1: 7'{mmߓ_I%O|`m_kGTHf!# *V%0 a:le1 In20p(*TTQNB̔ZժfRyIlKҊ|w|]=80HjdMe v6otEjPҨ+J:UuQ %(lkXP*KiwFlAEBh  >QPv@ɳQQb]V'@1V[A\yMO("hGkK!1`/WM] lQ]j8 (8T6k z<;n@Pm(@ wmFi*nn`QOkWۻx '5e^bE-5E:d f GOm {UP)e4htt{` :  @@@FjaCVݭN)E PP @*-5s{;l٪&6;[mm@5pmvA{r8 *gzruR)J P$>Ɖ ^po^xt嬞gqwgf.;Gl+B d Ь{wz (33Je4T0m`͞4N}mks;eat]cD*we){wyUٺ\.BnZh;϶)ê /m)RT$@ :ן87c6i{z;p]@ ZHC; Թn7wc(֖y @ݳbs2;@l{{L-mk}=_>Uva ]w{x{M{ҁޚ8-wX( \(iqg=RoLWC9_m/ >Aۦ]{.;iuӫ{pݓGfm^5 {{}nnpot]D=^O{ݢ67V\.^x[O{Grc;`{zPckfZ֌Ѯux^pҔZ58n![evze& ڧZ^3mftnܳw{]kY{{ݣwmeM&F=3ْll)h3xNswT+޼QJ$x;,z޴{gmR+nhaCXB4ɠ&F&MM4   ИCA j=&TSғ~j?G(lMLzOP==L?*yУhS4 4@@ 0L&A610fi`L{S2S=2LBdzIy23Bm$?BOSeaA&D @& LM2a F iLLL&ja4 4SMM?Im)،1Oi5OU$ LhIiiz1LS'3QOSŒz&A)dԏH&FS4hzjbmC ='ڀ4 42hM4Ѡ#C@0)h`A&&Lzh2hhi@ORf#N[3Ba dlGiV{fch{B VeƄ]KUJ^Bd]ͪZTa\f<&%o~O"A*A^IK9oz~zX|v:MrZU5'CJ&!X)7ޓ,btﱇ[!nmTD\vFΌ°6*6Q Bi|`PLC6J!^Imɭ; ?xХHfe$J* ]H |O=V`rR`gXekLQS>>6%I߰ ]/a2YhVqLfk~^Em*ʲle~-iOhx%' !?.TQIyؠvqe8d# F;PT.p?vt<$ O2v/Q61*n;۰&ċxIXwHEvCJD},fxOۭ t(e =_Oe՜3[09SOKE(ˉ-(MӃ!'RdmlsZ%5k[O'c|~ *Cbb1îTEgYTG8cwoeb~,b)ks/˵Zjs/ܾTS_9e 2jM1@x]^34%S7^ݾz`^{tpA_$<2zqW({X( iX iC{/4+"`/~HJ,2bWl΁!db4uهaQZ WgYS0d(P^ NI 2`(Z$QJшy6g¡MDĵ!WS3˅.rBGXM]!9$*;P4&9KI\$YRF4Xdl2es"EI-X1E%Z㶮31Ӿlv6k|鼲hb*{J1>"ʓ褕!2AN'/Ǘo&IBZ^"s' {I<* 14krR6wfciT:h,Hx3^4v/2m9U7JD>udHIA?n^凉@.|@.UZv{-bN0b5́Ѯ4: giM)C S%DTDcTY  )w6ݍ<p>Wʏ2E#_$e0(Y*XEV[M!{~:r n,K%b99A6)# dF aUA^<G2Zוvuަ]EhwCDȓ,ƥ}K-w7%X`L6A }1-ho mv575KxY8X$& Y6PLls!pH(M]fᚁ3p28m͙ RcFCAXM'C 9 x!1,x5$3ض#ϴ:FC)7'#XC=\hMs2p\; p43S(blR.٘6MhXu'>o| I9.pN)[Ii9% Emn-1ĺ6g^9Rܙ՜)6|)hvfe{՝^Kd%Y)9"T&X/@ [Ao"R_#LJx vvc1C)i:$1’7_/˔nv{h[d%!E7TL!=4K{כ%mԁm4I.zAk뭷&S!!ȇAGȻ/6}Xٱ 'Ӱ S`\c9!^L=dk{VɤP QP01{gPL(+uq|ݯG<EAҤYN䝟dߙ`MR*VMMT!O=a[~n)ǛZkdڜqwCDK]Pԇ E#F߾#;. d݀Q(ZGR:Ӝ4lV/L 1D gqZetWmJ6!1y6)s JR5 ^]z i@JԕIzØH%%`P?}Lpc1D>m{ YΘVoG2.jlay0“tRbeh=$1flm Yv S^uZr k4Hr8hC{0Bonݒfx[x̌VƩ|J Qc:$)K09Wo,yAP= ة0ԉ;֑tI11FQw~;h0 N$B_ ŦX~f5%H@׍HfgE1 %w"'0Si‚D%UT"7)S\.0!%I4;Rakwu>d3H)4X,$vrR!Ax&ݒMYlAhDZea4i[tl]U ɛl meU4^22!V?-}αuB9`%mFM =pxggkC?_xo?. y3)mˈSrvU":jg"j0R0͡ 25OZۇgoc2e0x#QbbiSUXaZbXQ z)HKL*hhm9~ˉd3Na8aȅ딡C HB_jmNΗ_]ϢoX/`җpA&6Mwԡᡐra@(;`A`MAUɎiH,<>u\aRTK,cX(.)dف i Cf`{j7ɬLFß'|a%GܖH(5_8? R>3.SҨVf\9›*.ɼPE1g X988K4H[ĔJP1C,Et(yڐ++E4ڤ䛖4Jh} szZR{ak\G%χ鑭\FuzˬjG{GiS{fp.K>O'fdZiku{K籠Y, LM ΂bwydgw7C3})n7*o6gUƒ6]6i辎n}~zNQu ]h>Z&g ~RȻА2w*W~]hr2Ըz- I~(Ǜ0`硏$!{l&ҧs:7ط!h򓕩֣KO5kp,r<,,>IU'`lg2UeLOv6؈{9P*v ,B$V]uH 4e*q] eׄh=`~VyfSɲeAN$k~Ŝ,} _u&Z-)1Rb ]dq"y߿?<[Tr?{¯A:M,Q(֔36Y`Q!Ormg&>-c8wkm>rVqX /ibs / /u~#kNu>;nmÆ^4pۈ7ʌdYbJ<}گ/9y* l*HU =<8upjJ|,7ɕCqȐV2<7/*ƈ~!}A&ל_uP ~ͷ/˾6$CZBbk%p֥+%LaFBs 0ض4Lԃ? 7t6ٻm'|Jwap}Pt 䪢'%lz~7nq8:!)? yː ^Xlcew|\Ct48fvǍ C*gj +vTPZQmzAj%=.cgߠTYgjHi"f1$n{JDYЦ'ݓa W:_Cި}0Q[C< Vqojoǒ_*>V1,|W 4uMeSLكmmp$؆Mgz=y_>Gl~ ~VYmaS{?:h}6N ҰwO0@C2:|''{|  xg! s>ՄZ(" W [Hyp=<xzsYfQS<ǔy_dCr |bpdǛWOwFf38ӎ|"0]Br.0r )iDZJ=% /'=m~ =εRψfXu*PȹJ5,PEa Q(QQ#Shk5߆ÅT}E\Q}81dq1׷+SkXF T.&ڴK8\(JNݢR]OO:$sAͦvὸ{,pP(ͦ0S(M OY !(Ă+* z`;!S~Q1Oxke+/dQ e.ʊ"WzfJAI%tDLN jJ䐊faY)ie!fJmGQ[tȉ%Eq("gvPx'aYOΩlRnϸE]Z2eͳ+G#5jAJ-jdBz9CBmʂ?đrآ 3 &*R.<\]I)a6(fYТ QH q&FשJEXIwVN̰X~xց5 b3дD¥Qs+4mE=9 V~kȑ@PD^ku$VcoiKܸFh29Uo> uiӧQL2Ƈ^k0ݼ=.jl q!Dd6ۓ^䷎5]qnr쫊im`T*d [E%C"$$RI55i0\`Xg &F ,XP(T" Q"+6eqQ&LnQ(|17I@ɳěl4(Q*"Z"Ռ X ÅѫjE ZVFA- [ZEj)iaPPsqŎdi#[\A夬,4b:fY &8 $w+k5c`(2]"n. m #WfPtXtG(߱:-B:ک4X\@ =zE(M }<%t0+x mL@*~)*@rҨ"uM}M6Z㱃%Fd ҨSK`nϾaa9aԒrCk` XA!>+ej)լõwiLOg|/=]-˚mXWZUo*[ނ6fۦEh*ռ 5EXщi{MYY:Ēs2 iNqg|/II3nmfeԧݼ#V}׺7,f2 |f}6de7`, {C$ĝL`/bسfI r̖-8G%<䱌,K,r^ht: ,q{=6mbhD/$bFK?IKVcZE-VPXθIM*wT[K{L4Bq @1T'WxqE jp s WHd"i tŃ$u#WhmK5tΤJ;%Nd"skP+Y 1KsUsH CjHK$:Xq! t\hUFQK4| DѨndR\'X"?&2_/oZruZ,QQ _ܲBjEB x- ,X'~=,SA~px#ՅS_T|'a8^ak6،"+=BbGw8{'>DA`ƥ65v*i8T--ܸw/+]k]k*G>٪E7 pO8(d%ĊD8w{fj^:/K HYt %lcg-Yi^c %R0w='Jյ)8"~}0ۑʶ9ȻE:}_bP$dSPRˉ8:>x++cJS_$I&U5Pv RwSI’ rT)a&&?>b."*U QGICn6-S6]''&ɃRJYdoH-)6U JS !@ a Sǂ(;4 )U}XWw7w8WYEQ4^s)kewk,AF=.eJxe7ICI%k*Q,h\y&8\IǴhqn"Fݼ#4KH'y1 M"_Q:;HI6oh*l{H$o>%>xTZ7co2'k%\b pZ7-JIF8&k)RrU v~Fw`0Jj": 2];?3Cx̓E{880W/&$Y^6tiKG8M_ō:FGb LBCGy$~= [ɢ >̼ȍ. #f;2"jn%Xa6^4o!m$QTrW߹ƶk6noޘWȖT3wq~! !$܉gG @/oX&)''V*ejHefaeFZ1,Hiػ&iF/BGѓ$pLW;:f= }2`@rU q<¥[YAtTjIb̼WKǐ$|=ۜKvXy +ާT+- g{fq0Z^˰I!q ̹ 7|H'T0vLvv,63L\8%0ke }͡s0L#ʰ(QyP`0p^ĐB"(IBʴy7yvY`6蕅[JV)`C('XzXG:07& #N\6LI+R0Hz:&P[=XaO Y9[O7yzǭBrgX `=2M!%#N"UzZzgSknL콱{s]yK U ,#'a:p0 'iXǼ{he;ξ|CD+;۱aXáR5B۰U-J-b Q'wH sGɚL}ݍӰ1+ 4֋Ƞ-E歜$iSYY*]qW,CIrb 3eMC a<9ŪLLpl]X*)4d/._Q?;\m/mj;W+Lu˂=5jޱ f  OGhXN&dlv__j&5fݝ"ܑc#ˍXUV.:X \^:aJ+FiSZNnoۆ-Bge!Z>eQR0KG0jyIL 6Q1GUd7nj7F quhҊH!8 cʞ,"Pa~?kr) 31dS$Vi|8 {aΤ$Dұ\CA%`vdQ91h1$OjDxG¥ -)U8֎Z6]M|TMƒ b ύf|Nt1Z y3pM"C%338^n ZjU_W DV羕gH_IՖSad-өZZƥyŧ$9L'O6աF !b%eRO8QeS* _ӱg,`\"auWq\1Q%Rybf|/V MYUnl\$2-Nm|0tVkmpkbx=}Z,LbȤCv6'\O$2&1vDv"6+ LL"@E.2g\T),'E>8ݜ\l.F9)U5:z)~7_F!śs@x'Ɋ_N=4 YOFīWwٷ$蟣c裡rEq z׷I 8TDz1 Sq;0@$dW)y(fJl bV49NjʫzFdhLDTIvp0GEE!"I~N&'|"dSt- W_UBx*FPF,s7f*-E;|B >t ffM%5f`F;b⤏{5l%O{zCsuVy\u:ƀViTy+`_Ysfb^E,Rg'I6@KY,TeqĤUgJV'3Ef h9^Wo =>c^ع~)W&D cgSvyX+OG&,MS*8+Z_%}gY 4euZ dVc+RsnlPJw -`/)h)P),7=ECj57{!(A t^V5`;V݁}6&R3p]77դzOkf,1/ f'O*/?]}br0 C#{)V$R?bG}ӨMm S]kOfGRdaטaҐpk9%I#J"YIxe+, 3鴎);A&,Qc?B&^c^d6paR5fibj!e/AhhZ$i[ng=E1Li%6O7+[Dҫ?dd.!;5'1^#ė,Sdu=IH*|)]Fޒ>z"+t2?Uelr/UzW7 C>@qu{xgL9ڎXuv9/#7Y}cnـ;,7Jx<?.}*YYeHEFY5G 'U /WA 8qyEHO$2G jK,>)?PmW -.?`ɝU~q_i'M}{>yT킉؏wSh>5d;>ܶ12w`RH(+W@speF3Tz2"w{ָU4/Rf!jJIra#(11im'f]L*ǽMl '&TG`M˓h[MA"Ƨm3^hGAw+KSfU B:sB~m+ubSYT]FvD) )9$YF #C'T!qʍL\9ٛ4yEWR|y3n+f]ROՙ!+L jwv58G-?ͧþzl7^ d q #EF ]Hl)1N9V1#ʩҰ9ewIyQNs >UI2qY;猋ƍNN+(p&;jc_snqV!Q|~Qf9-KIJ"dm9uفvUKm,zSe#j %dUSa(:k;A$,[,vv4۾zl!KߩÎɼVdL݆p>DsdxeK^-IJzP/Uye6mZ?8wЬ%yq-.)0YhMV4wld-StT8#P!!kYJ#|H&ℱ?*#=r01Ʃᣀ~ I[*`| t_U-]q8u%8l%F94ZZc g ')X=H(B[^<ڸ# S̠^T?naʗ1O(OR jki f{3)@DD6:|Yc1TƝ. ͣ\ S Dkw@ X8 ͚V9+\R>Qc<!LƞYSbFЁ NM`ŕ ԛFq9/h'ˬhR+/@e ?WO cgAtEͦϵP}> hhd}Rw2+]-yz2LK&2hi;Yն 2+'⣘;u-<%#Hdˢ*3Jɷj nT)(@]ŭU S| j& C|Z*2ͅ1.X{U/CoHU`rz@žtv' UҐ&OAA]%\{V *?"wFeOT.Y\PY¬=LONau!ReTR쒟b*YB9G,,z:HG"mi#,& XZ;G*YJ~Y#CeގJ ڮ_ V Ȅ[uʎH5x=Yj9_~= k9u1!csv&5#)Q% k Gsr2'mм=eR:% L<]\@ [uGKw%\)9붍[H6r/.N]z²Y,SlCrO(=8FF q У96'5Z1{(Ҽ?_\0 6]{C1 78v,lNoʕmis:$BCOX ,1@`5Tai'veuMݗܨҠz6X+jW˛2-Ze 3`yR9oj^cM$Һdb%H u+2 讯 | Jy6.Xw2| [L^܉X Bv=҇%u |fQnS&A8ڟ?}3S#]yN>*͛-PB[/ rzSF_Txv$}*aw,X/Xxt]~YsĠsAiT$!д.1Q×Utq҅\ɏN>R >tʶC9tBe`%"MW!~boMd[|\ =H+"Jo[tr-Kû܍r5LKVSKt9%+, YԂ8S],p@tB'Dp3!$* L+g ӕ`ig҆u|2zȈ5L-ZUZ] S4MJ{3e]5ig"^?D%>[k#~_(ae^ B_PC!Uَ`iRhjpҖs1)BKJ ZRZv^Q+VIVW%[-69s*ӂ3Me=RR¨p)EB ̴IOmtn`%ȆK\ J̚Z*Sjez*F rkl~Uw]D_Ҟs}yZPt4RF9'W)?^uS3)Kt>AWS(-3 sV4 1n%S+peWb7*`lp乖|wB7Ju+RAJI#qzSvf3!!$2dNeaDGqb/rSU2#@o>C,,Yc 77*ɾQYF<D,%7oϿ3[ 3̊cL m1c\!J&Q_Y_/X edKKQT$]MJW\ی{xOV9`DH P8i,'ЏrU #ro3hr%s{erN-.6`%C-t.2]S;L\Dt] Y+ 6Kp[cR9=5H /^3Itp.DŽ!kĉ79[zդOUXƨUv7gpO(f]hZ18|!UT<$xaO &g1>b LN?ٻ*8'莚f)3rh9I8yQ09O}0v9( v:G1FjM5gU YZ$g'54. @u)N"bq*%e+8E w+jIS`\Y|71JnWLL;4i 2POza<,0S3giLVym-Ҝc@s&Ҕ 7QU*TZT#wC'bna֬dSON}|%DtyLj;ywbU]zg,&^ǎ6a͍3j|ƒLS7;ܗa=''5G3J9X2$r$YLJcרydl:Tjee%7cuhVB<v15LY)8x#pٳnpM q@ S;(yj'YNzF®(Ѻ#2"b$sTJ;-Z<m9Y&g^%ɝni(g0*ec 0>@Q2>#O,v%Xb!Fsm):DdӚ`Jv*IBYRL-Yת9D%Obo2v6V;W,6nիaHD^W_\-80ql9ee`iZIy z[9RJ{2uL.D _U2 -P-+a]ጰ`js ی9IBzGRJ$a3Jqhk8Zku%h &KXNniMir1iyRa\c;&gAN%p|C8a>VT\Á0d*zثH,TX*AKu#6Ic.Aeѧ]=d]zR2)pX4CZ_ L*bюI,CrXfXw3p΋ %]}}u eA&;$ f}Y$X 4(42-NWN:Ø&Hc- Z7dP8GFf4"eK~]) #OǧN򎄪iYc޶k_Cuq!R9\!M.0 X` n; )SC !|1j[I)8Rx4',ga^asg\zv&1SbGa>Ys/_f !or9U6"^/kd!dw7+#iy;wƀ(@!NAѝ{_Y4J ە zAFDyȘ@@'g:9* qNe/'Lmݬ3c||W񖋣1L%t W`7$\4hՕ#&QG _vrmbp0 ]ZDt]Tq6&O+pڨ Hۥ]X=@PŊ0F# @ O%ʸ!gJ4]yZ1\8X>B,.kf~AW~~D@vll&S%;lI0'YRZP)b^QX2!͘&0v360rl2fjcMaH3;n4C1lmƇqf yɽoPXU4@xG==OQO{PdvѲO.Q.? -CLNyã,VeRi/P(p\h  WA"QrL1;HWLUR(? "!;یBi1 1&9G9!2&K0ߎ7z:C"O mR9է]VȬt^{nwx;Tx=+3[9o=>E6h_[1ړf#OC "RE wHeK|N5Tk>-,M(8?m} @ξ YD x󉗹1ax(KnYl(.,;뿭k ILŒ(.\)/QsJ|vj Yf iW7mr2sdȼc U#\EmkȘCK?ʹ`,m9:d]4^MUIt{:UDǵ-k3BkU.njL{7RU4XmM,TɁ' lcCM\42 ʬ;SalG`C=aH-+AAC+#*#]nT;Ef.N,\C̢d"7NPI%MmdGz/y&&Dms1}*w=ܻ&MG Aa*2gh ]vH:L׶эS'vV$}qXܵٽnbN\tAig]8降B(f%wHˆTt`60}`nm nqո!4!FZmOνvFDadEbNC򶿔:dܽ 8zV#G7Pv &L@gߴafow}F(Dm[t`HTҥ6y[I>0A t(b,~'ӈbEO%}|/_Z$F{ΫOv< ۝β a9K$6aքO`'!>G;X}YiI7=`"|QF e4DB~~#G6Rvnz(gT⽖ub +dz:m\)-$yZs:9&9:9@A/Txwٜ,&?q[.] ;]0vfg)3Vܐ cod>fĬ4sfяnhgVU)یve"M6DayQCA*T,!$Ly(ps䝁0xWƾRͻ;@[`J.G6=d`XUAi2U02Y |̀F}PahD<Չ$ dMߵi_ZV^¡jMHJ FnxޜWl6am d8uZzy Vm6M&فUNv7yA/LkG{E:Lr#/Y"o3Zl@r4byVdh|@.=ݱjhp{$"Y>nqwؙwMTJT0Nww* ᳉[]NY9Zsa!ߞ%gYa>Du=2_n:i%KMcheIûY [ceQxZu ~!VͣۖUgY_Ц9' S6cQQ1a"Z-UFUSTTlQEL>0AH{EKe2ۖnvӾ>~ zr?:R}ybdզ%LK,EƲE :1I |1:>2_]gm$,}.mxaP䓂zpIS=9-.8j_iiٺ_wk]:en~_0{>gݵXV)R|ݟ?B[:r{9|NrK|JV[`3`1"KNƙpClnwH(8H Qɒ 1. qG/kA'Nak*TKd3>Nwoտo?@</hA(7JMƌ֢9ةg5:}U2yyRAjYqȶw kqM@=x?26 JȪ:4)*.L0Zخ#tqћ'irZZ=m7H׍k *`Bx(/g.$5f{G5ƿg Xb4Ɉ,z{W+߾prU0/ⲫ0ٌ0s6!wģf&sm R=^7 : fhGH#8y Y}~+&]0!NǼ(6j-l0kZTqP\\ ؛'pnE~RE ˪.in,p4IA;SMpT| z'R^vq9$ 8uW9pԝ νidycj: IR _|pjw4/.dI| evQ!} P|oז[ ˍOf},uL,C"XVɴUpԬ,iW$Q)Jes~_\k#PGX}E ĩ2& *ԥF(s(=-p?JOY|+&au/vdym\Lhup6|cF8ˏk5}n}l2}ժ5<|-6sKBX0zL}x.UERzsО# .~os Pb⎯}O]Crr.fjJ,- ֳ*ՠEL"6Lj} G>\<(]I}ѬdO\vʭ&-F6K{6, CށBIۂm3H#Qw^vMh1'0_s> u۲rr+}Hu5;.ϏOʣ59eOeJho#+ ~;@ qHă8:1v!>"+pcu15fYl\:5k?J/X cp{:;kՆG_ݒ3w2(p I2~Ue<ՕC`Od\kDQ/U oh=Z'5<{b CBB>4+Sz^O.CZQ*&VXfL}%C{ǴvٯKpmh lu@(a Ia69ܕyE'Əؑ}_ߤBNEQ9ƻ۪[:Jo2Ի~9Z7c&O$?ႏW}: Ax>D1>@_5 jWqEmdN*U:̍'>#uA q}%%9r[#W#Z6P+,: ޅ5 ҂T:cK`*kDirD)ܞ>W"Z ~BSOܰ=R,qE=]tr1y-Hq{FrdȬx?Uyk1JiiđH'uk+qx_+kDېCK3NqgaQ%+F V8h6Vנl_J`y5"6 ^7\6ʂS3cw>*R1ucD[Eޡ1MȐk>\ e,j]~A?cmC]kcRK(⁦΍E&6bI{ Tv*.CeU\x8W^c[yLv`挖vXzUOCm|InȔU>~OocêM 7;s>/x~Y#O%#GD @4?] #  B@WƗfN3gC[&o|TPOeq@tғY,jjl9RZߕz?©ØE#2/\Uh CF-G#y]ZSy̢1]wmFsCNZz KgusWҨny,]"CfCOwP ߲\|]w_IaIJ@OL? TgM:}:~127󨤥%{X;mnwU~X5bU.acǬU ƜffѤ'`,,}޽ēL.d̚5sxe1^ Uٶv xFaӬ@lG^Y3km8ia#0BBusWH;LiE Hن*7csSdxٱ Qˊh*xv5taHРq\F}z TO/_XA..- ok koX. 4ZUI9-"5\&°Tǘ@ݓZ{ޗfK=Y>c;E/c{]dTg29+Q|Tyߵp Ca6)O7)I_=*@z6 a'!!=0PDT?~o&Eө>ّ7 8I6`xz82n8pMP^!nԓh M[|ŪQ(H%Q@(FQ*VZX%JoL0'>#es}#iWBxr FKp~ݵg?Q]s;W 5Tsdl/\o,fdf3{߿I4JP֝_ o_gF֞JM l.1ujh=)fVħe'_XrR*)MŲ@irMq7Txkfi X,K/|8b߹{: q }mѩ>m;# _t+bۜX>X6m)u9B)pEI&ax᪺N#3҈ѕ3@:˝!czYPyHb=`DAq!Y~u-yy|+RϮ-@*bE~e-~t6 /joTd3y|ua__ر/FEWߣ^_933zqVk_OW&2Qj"%mx=dwɱ=IGҘp67rNAM:)I cfP"zd**Vw{3hF@j "N |4BSq͗n~M|ƖEF+aQ2H^ڸ\YlO g'dZ;.c!MnG8#y\4Xj[lnKi%cbټҳ5X<6[8x~e*' GkUna9FCYKmǮ7p'k]fڈMem,)>KfwD۝P{vUV,ʓ=u/}`vI7Q" 2/lI=cdWS6m8K[Fe cG«}Ւ wW0?'$ͅrzܐ >'qjFn7,LS@,lOȬy ?=I:S-i ʇ!H $Bl[>2Lyo0_㡱|?Ka2n+&‡o<y#h'_ 'ނhب^uD4"{e*dKsx`r+^6PI1F%iךR$e\&U«9jkmjIgSKD]~ &|\K+.a YM:-䪞4^2NACeDz:vd USgAkI!i\pAE,3Y6%r!yHI"=("C2QjL$^ XTOZ-Ii' Rg] NUҥq&Z-THB+n+S>@P㕥tL.TIQyc0oeѫEP Yr#} oW=Bg禫 m@+ki7Ek_}J!B0fcv\TuB2`XF*Webm;&QxE2!p" fNAiV.L՟4f5xN)yg[/;ab\6!7@WKbR1N(cgSW-wr)$"TP&D`@mȪ26,vbrrҵ\&p aCdt#h":i-]RaXtx* ND5 xgrCTp_>_5G)y甸x8G,q(DPP%JH"@"p1EFDH & HFzڠ=J$x>zCV7q Q/^qUyZaJH 95pz:\aBO'P ;s: $" @l=!Q)!CQQL*H2d6r\k]Jc|b21xf pVՅp2 imsDmPIrQ*'auJz͌KTY9-8)X $5J_XZ)V3E<7ߵ>eW0VN; UdsKP|/|*Q]<}XNT?ms˂ʠǟQMfGJc"J!}x,z`Kl(fEFAnlj{[Fۧ=zPJ T9 vYXۻ½>S8Lz) `-ϭGdae+k0O{+;")Qp-wo4D!^E.., %ss_Ƒ̑ eVDG#`uܫ߁1Q&=,vV@<]EE xKwz97(c7oٻyԺШ SoRƐ=?nit}Ou޽M:[:R[wxLɁ)cgs6(u: [+JzC'y5StG4ȘpkDԿ3:<[zk"HùܗRܬgT.b\,CSI{6hfTL5 嚸ۖVl,X[EWܙcp,ko+}Z&t:![Jދ jyꪅEpř=<H3^p#ʋb|-LqMkCtTIVldQFgQ>5d-ԩ4[MmjnW^22V};ͳXDSC*"(\Mh(MQ2dTQF琓Q \02īhG1ŏF+zƗ7 7VMKfJp 0m0I'Gև)o \W*&;lg4V"g+dz6BqQGO%RNQs* HLQVZyIL#S_Jղ̺&W e) X"ZBO"\AJf&=̑3e)mԽ"@`kdb^FU:tĺc|ףF4m9--w7{4*w1ҠtZQ`~`G:pS,a,Ne+ $se!3sfMD✖7I&|czx[UoC4Fط2Y'i/J_Ƭؽ KT#f!GĻᝄ\o՚ uMGyGbSM49t쉫Kk.K·)!( dsֿ3q B#T(ou&¸(}j|$eeTy1f% LWH$jd¶G$Dْ*ue̦b5ODy+&&34P[,#:ZYf7S[X< b/eY R >#۲%W(5Jkju BhKo CيhPDO1z-5z(;Lf>Ɣ6@Km~.N-[#ŮGzJT}jxŁ!+ݾk{8B2[,HLb\DMAtUBiQ4KTb vXk@9߭5֔5yyKz>V]Y dDD "qHbދhsEl)v̩tj,]8M6;j_,DnPL6t jQtWVnZ'$DE:~$@/;ԕUk{&2Hn75O$^1b9R6,z˥I)i*d)KbtFP(([` E ) I (+o~^ ~R2zh(![ovtyLO%9W ҪCRUn"Oj[>z2 E"}7`px[i|G~N U G9=CD.uDh\psz4ʴjqx>5!ʑJ @TPK YDYx fkK|*PLO ñl.<(}QϞ 5<`.0#:D9 85K t+k`U &fR?lR(}ə6oYK5 p}6d)fyPOvR_l*lϙaJ_@>"yLb<"EьԵjV4 !2˜&"I] B."6-6GM<.E12Ke% ,@&$g+ p2{,pm(]8 M-V/e,xH/E+`.ȉ,OaZ%2e _KChLϜizJsZl2~Q6G`B$7\<}`-^*XދLVl\XM>l29% Q-YzX>F@1ARB疔6t24 ON-= +m<I h́/(yWKŊMDY4@I=s&j76 E5Ӈo V'p$S> eJONTTHBH6&fk5/\a+P!$\Ϧw!\ j2Dve,Dm6"b" E!`EZP`d,Lؕ2qt%1Cxl1Ŏ plx!ck9H:Y+[}nHe3"ɕ^cߙ4B0f#34 p' 4y8#!Rm0Ҟ@DAȗ-SƖ*-ԥYe*BV/WER{ +i#DϽ8FMiK~(uf9a~Œf+(6fbSrH [B؇KXh)dej't( ާ|T59`ct)G̈́e(;.[YW`HY&>}I/T~2,#jAI|o▦~ ی֑ZR·V's6=:5˞G] $ٮyVs\FNDu)m~Ħ-{:DvwTζ’hpVzq~IK+뼬_M@@G9~"I"RQ.zfdϿT_zJ aFv^~ϖ{U|^ ȺH/LTn#HnD6z?llrG+iVu նNF2/:O0%@T@=_僜 q9?ޗ"wРQl˾> $<q ZQWLyK@ѱǑ݊s178CQG&h ))'.$|Wr400I!7dPkLegm(Z٥?2 rOQ"r0շod_I-`O$`x dOWG\Q}}lf=pgHj_?ک>QuC4+ߨ|e%M஑-NK&1NپW6PTRa 7.|nOc~RUK~5Lʨ%mTPA#χ,j)Xc5s% eeDabhl2)flL@ O& Dؾ0C&3@ce5I23Rɏ5*etpSXg&$ik)6!"b !Fr@~zFͿg 9:+sd SX'̙)b ,ԐZ˺,=:FDM1>khǔRC$.4Oou2-F(Hg(deS8͙~14T·Յ'4zk]< xI]RDa`YD#cXYH@qFɡRA75rBPY9pE )DJ%$d2eY%8lepP~\c4"4:LD?an&o;gW||Nbyl/J58Pf{iFʛW,~OHi*$lv J͵iO{V{OѼ[“2Tn$K_\"577vr#;Le<B6h;g5J7,զXj]'KBŽ< f-Ʒ%9-Vr,^0r$-D|N!!|jQÿ; F9[^!qFR7υoDٴu(na:PJ\@ ń߹aO <;JD.XC|:+? icyߺVq{ΰXYD4|@Ȍ76N]D:0H^bG Vo>b`?N"/"{qzgG UScs?g]u\G{%q"}ۯ INn5ꏜtR*!dg=Yiz2o|J h'8R$y˘L ބ$ *2GDh ow:*9CC뻅 46aq+78q>(n/kziM>)aJ.@cD&;[^GUʟD]@V/a)ͺ7s<覜4X8/jW_uצg,ކw _uC$>٤ِOK>aC#gsݬo>c1.\|Bub~^?_dsE_AbH ;~/>{έqiNA5 WN(SKǯv{=p<#S?Kz~ B ~B|uȽqu+V\s ;+9;v ԲF03m;4~}KJ6)zl;̍fOi$mpLaD4oT+.+^JVZOUC2J: &ptb]FRVbp2X4YUoƹmzk.u)ZoELR VCC ƔPŵr tѽXrk,D=X(#YW[le~8e6c2 \y?nܻlY72W鞾5\lkq5Dc '{]p\X_򄁯+S[o_?O7Yy6|g^OcsķDݟH'6`f$ ,濽W[cwتeVXgt;_ݙ9%=y˶n+{Sk _H=3NQf؅{ v4˛Vu< "9cj_B109e[mR3YG۷jSN=.W?VCON銸S4^CR79Pim5Ɇ7)MU/:s಑â2rK,fS'@M^ [nO Q'sϧ_lJ* v2$F!y_s2@0 - JQwٷ6`.FzE~Tk.]_hhJ3Vn멍™TtP96u"F@SP ^N\ZNdl<MKM# R;Y&sFO/" et)vȃq4N>J~GM!C5qW2I~Ă-#~p5 0M"aM7n3%}_x]ߝPwdqư3 1TF-]mgER~6kO&J|u,̏׋@7|;:6/x\fFxBVdjYYy'X=X(yb˂Q{޴~~=e-}M#rf/o]%mj;x榈[Zz7I-d$D œ)Q+^w`qnx{†nh.OT|o P!72x;vXY~mՖWێ 7Ȩv8p?=E_{H]9lRsދ]̙iݴyGZݨy9tXy=zU5'ņ-)ϴَceý렷)~OK72YWqg{̀MCNGe{Qwpq-la"aӭ[˾߇Yt57m&pϕ,)b7ޕej;9x8ݎoHkOv[g.[-'2h}P}vy~pWmeYt0VG_ /QyW>?/yo?o}uӖs{=߶Dʜ;aauPܷ?7'ZL4~zk5QKٯ~Dsy_!|eGUvԼKt>w]7)dgxE?z={}ONóok8+tXtu]` 5}?xƻNӥuʄJO \exn/?m\z -;0Wvo8sq쿶}}~ooqMWQ{}1|CCg<606n/[Fke9w,sd~SU}&j|z]w"RN;wy9Or*7]__U>~K fwt.f{\e{6_۶>|mZ_|c5;_P4]Vjǐ=}ڮcng?F56LZVm܍u%uD) r~zwGi[];ۜ# G}k]>ﯲiM5}¬Or4Fᛂ_?8F_:XH]qt7ص`\GN6)—q.ҩ5grO_uޒV;?ʠC?!aBvu+S4idivoP=1,џv#H5c`n=Uʙ^4 $;,w+uz:yyo;ݩeo6fОט>U w9~W kA;Sڈ Txi-9O_4gSOuG¹,}_;ǝ0UFR]>:V;m[Ϸ<;?w &Pea_+؍K[sÔvlmEZ/1Tu {mp>t#rQ\.3uAa?~Mzvߋ篶#'W8LOք#>ȟU|lQ]^ӫS<ώ5Pe8Av}g'. #=Wocnn?g?'+Ca"8YEK{9mW_Yq뭟ozGjF+|^v>|kտ^kw_N{x5]7݅ǮC>kv8ƿ<>6#,/QFq@O8.~}ן* Sn*&7ONJy/C1u?oa+]oK{ɑAs_e|PGyΏK: .Ls|9߃g'}}vF뼓Atz\MGPt:dʌ[^NߗZƙGk yi|tZsdf)$w?sR{<{鳔[Ƌ~5v}>C{cݪŞzqoڕ?%AˮmxzZk=NQ|_|뢬Au{]]r]Tr{W8gkOy%?}"/͵'#Ku/q|sǸAɱruS FN"+.g΋ɗ{XVh=O7Bvcx%?u5[fZO& A]_K>K}8/zחvS>+/̰rG`{lj[H+O?):pJ oy_ί'$_;n+4gXcRuk2;w(ȋ{_@]}ÙO /q"$)s|zfiv?1xn!O?pwJr,|f{y?v WPG\n8]Α EKh0>/\Gha||v߀ecXx}o4Qߚ:oU7Dd?A}^Hab`ZCt'1}\ϵ??ajDO ҉{CcQgy *WS]m1/tT|LE;Nyr׺/6W~C+Q0׹~M{Y~u|[o*["+,?b˫Ի[A5=ٻrsQ_WvD{Yadn9g|'s=ͷr=Oċu߯3梉>~]wTF^7~1~&_u.#Y9?;bL:}剢ł访Wͤ$eKf4Z5Id8_hh6)f'YfTf<%_!{߆tj 8gc%.؃("6Ǩ(?sf=]6?'_}uOW:#0o-Sˀïi\;Rᇊ6ڭg2_|u^G*M=eeW42;ii4;i]AN`r{H~e׻'o/_vυMlIow ԏ#-߾8wo99W^Gwf˽:]hZjYr/y9jvt-_)ܜ ^:r{^t]ݙ?=miBijdbw>>WaڌgcÖovNgD`g8gT?-BuS~R9*5u}Vg1mu,?Mgu;h+qj>橹:uwiPWZu'5_w-ML7{s(Y'ivׇv*٫H>{/![?)x x+{}̏_AwŜq^"DfԮ pi{q^FG -PY17ea}\`WL.:?z1 gY{}왬䋿_6ǰT}pt&pw{vfϴdt<\Q;cޅxofLJOOswAF<_g㵞o~//$ۻHx8z\GK]#}f3>.d㟽v{Wi0~<>MւجnX6'۸|zpy>[Gm_-ݛqG?sr'3IbM=o6۝f9M&ouM$?6{Y-{tu4yuY2V 5!OktOn wXawY mgO߭wk~|Zj/]~Q}E|xY9)Q3!|Y7!!|>cƒUOOM+fł|T\Ew;qûwa?mnchw7#-^kw| HqlQ!Ig5޾{|G;LNQ|_նRϥ}kG_7nGݻбo6X>qOgC-(7JB z[zp p[j*"ѳk]~ s){ڨqKzXBLc[UrvQqv]v֊{T~OQ_v//lC=C_8*@V\]8Vڹ.2Yms[ΫꝎE IqgNORLzpm.ڝVGrs߹v{K}؞am? _AщnZ:)]*2g]TNźMv|CnGm9Z~ wylm43eyW{um .>jNX{ k=LG[I~4Jg1߹Px^>.A$=5sjn;?oȅjIx=yhݲrSaZVn'},+C ŧYJG1ŹWgCodGm _~eGsXU]_.L2=3Аn/ ws'sk}bӥOǦw0 J7&IWάǕYx\J\Lf=f6O|߅8ƺކ'1Eooߗ]x3?}9_ e|NJCM)=æz)g[om|kle㉎œrX* tggto-ofLmIvSn<{Y9@v|#|_ K}5^ջd>|ݓo짃GtRD^OS đ~+,həc1G.?VSGѨݔYN4oSPfn;L}6n<_yLt1$~Es[1lJE/揩~\牭>K#Nz-<>>BW7ʹ3Ym8IX#P!Z{3/u3_r8S|mOFe﷖}ϊnon}6WC{LM=׭uw=`pcۆCOVjq|8Ay.įzʾ\r {go9yr[U{;{,5!_R&|2A=|_}<x}x'p[v(s2gt8fvt-c~_k=rv^5Rv>>p0YT{WjT$//0xW۸9_$n:mq~7W ~y7\1t2 1(@@#4^O;I&GhӡVN?'3H}ٯ-#i_pdl;/Ţ#u&#\Ww͍/w؟w4?[mx]u۫-rI'I +MTob4:g إ~Uo,I>{M[p9>;ֹ_lwh|o$[5<*70wL~RQ}n?VI[W)Y zΆvBIvRme'7~ "OCyTJ#?=ʋʲ%-1H/񬽹+1)o:z驍_뾿uvf?4ܖcnD8?z ]ϲ<̽ύ(4JECK~5zW+~GFZo-Km^S&orZs_g{|vu=]C.]qǜGK,> {&)*=~KK= qqfHP!X.u%ܕw)}Zc夡 `c kG !;%4}qӢ/Qۖճ;K7z A=ks00-,Cϕ%?݈+檀J4|hďΒ 2P?*K̏p+m&g9_f1uf`9JE;IY?2)h3vmֳ \C?R7+4KG̶ڥV?jg5q=,y>cmTW+!UTNBJ {L p@Ng9J aF 7p3Or@"A תP⺧!4{FQ1Y[Ųdw9[o<ݔʥJM(ۑzb[ѷ!bщxKЉ+^1lU|H1A7 xMVnl (S*H*k _eѿb;F\3?2 ıW6s!Ђ3té&L!0'J۳ΗO1ҭ"u-[ 1}+~UN| mEQrq = Vi؎Su nRΔYODa*edb|mx`f@Z$jLO/QnSv_m&Q805l"J :_RLwrur=wqXI]^߭{(\xc C h:޻Zc @Huӫ̻1 & ïI+xH%%W5ywJtb4&k_'PGR7W-Ws3bWcqhZOuqD%M|;q1ے$8ܙ&OJU;mMamek|{f9V9CQ v2sÒ3P,Ӊ+n'iZ ce]wAev3%%^@01ل%==S3 =[MRgh˥StT1"%sc_R%|vv_+F1z]тi/4"ܱrZeB\Cq4#e8ZC*2%oZ/9j0p bSx8NML=}^j@nt NAJ^#+2'2Z9Pz߅57>0{>5RPDQ iq IZ)eK4fCW.w8!O9 rJ9}A"5eZAbuꍟ77ᇖ'A#U(wFZkfVc|| 3b_{xWဵ 6 О 0 33+\@mß̱1s3yW%;y WƘ,]N_= [l{؟` ,e 0bTM?Kuq= .?& fV?C"@&JJ P#nJ8rxDZSOuǏ+(6jl0T!o8o{>VNhGg!Հ{fn{(NSM޻b5 GYFT#]kƒU]U3 HU6ZG1JfbK0pd9F~5%ޓz8#o[Bj᳕ͪdRU,ܽmz)JX0EF[r\@ oI6NPэ-H#;즮'[o)@D@E!s[ p&Yw<֡a1dӣLRYo6_luFsޏN e\PG2\k\ِW5ǝLjfv1=) Tv}e:`4C*$B|,I@9KqKTe@MTؘr}ՠD]N+c\D#c*Se/ذ/ŊG"-YYh_yG]Ӥq$s(7rqپUQ  ./Aa316rV1.boŒXh9MXXzu^GI$-H- Hȴ}7^6 wpv2>l& 5 _[96 : B9x KKdm%=m]~xXTPi&RMز#_(Q(#zWpmG|U[ew[8{C47]0wX!+'<].>onx2oHW7wõP\0qMQh&UK^:CdURbAb]J n^o#QS-wϚ=hw ]ܧlb4%ΰ@0JhpC|xaT>EѾHW׋s٢9|:̪ mXH> nk4@F~"9 s&?E431s+tzhQ'u8|ĆȈ!n o{{C~*͌~< 1*[^NxyW␶4ٺCVT+7LGֹ]\ˬqֶXY akN e TM=} qS;rDU5v֒`z̍m89\Vfd2{f̑{}vK5{rGYf:{Xm|Lj0 >1v5(DA |) CAgazFm>G1̝ZɞykMau^ۼfհ/]fve_#fYj "ܢr7]שZcXwcmnM-3:x_:^^r w9zͧpS:auws߾]4OfS=d k4΁WSWOa_H4yDǞwk紁J|3.(r-i#@GϚtt)C`68(/K2nD{j~UњyknO eʹ\HI/!Cn2؝݅AcIxn:\n$ l%7:uzXau!.sqx7X~C =}PC7&oÔEkC UIܭ-A Dqy[P'nd7Ǎ(t'kObn'Sxe, "'JA3wSڄ?<"Hc۳{\`Wz|޸ LcĂ'BihY=8uμlhƶѾ14SDMO'wv.%ڻWZ nS6/qQn7'ڲwЈҍ8Ɉ02IdfGC:Fo? [q$;L|;ArwkH`42?z~|Cg,- vtnp+a[4QM_h@|v\,ݧ` Ų"EgGY'wg_f?bC.3E>hi_A@4зh3&0v?qY 6 uMn.Ҽ&UDШ/=2|6g }PqI: |˴EIêaQ\X}Eu?׹Qt^A:Qu^`YQ 5W'%(ߌ&^cq5q:D#Gdo6#q=|xf4@PТegtVG#xO3j Faa*jd֝fcX7-/!!x'{W%/hctRdlb]86 º|&F|FpAiΥ kϸģfzx#酙! ;x^uJfjb)`פlо\^կ@j#=]͔iFK) (5jԶ/k0 .b!Ebk쫍~Ɛm6h!%Ҏyrf=z꨷g5O'jF-9>epKOKCacQ&pS*tx`=_A - sJ*F0|0Bc˫1)֤tU~..nbß DCtvP}dI"]>ڈy }/EȮ783=~>߶l?l|;I0qWȴx8Ov$sﱄsswu / eГvۏ{Ta/̔A-˾捕8 9sxi۠DcRJwF?P -#m @YwxJ8tڻ>ʭ~DT4YЧڈ/r4Dotv}""hA0(tX;M"(#:8 K3F|F*HxP0H!S6ДJ->ZWyD6ߞC1 ;F=hso[ï5LI4Ɗd0I&^2K#XV^ZTډ/?G)<(F9$<9٦T;x1too5= K_ITB)7n eM, PR}0# ,o#fWi\[i$yToUs^̙Oճ&Sޏձ7sO%K>ދCy֟7nooۼw[uSiuI &ܓ%`7{gmM} flm6Qp_ 6tn+?4X?xx<{Y^`Beup}`@;.=T'lDFrW9}nJZ@0`2$6|sZ+m#@ؖxu&oJ56=ܻ%;vMx uiKG|T>R\|IR==Z|چ J^$lp;&]|S>&PI)7Zr)&y : ?!ֽJd20qZk$rOaz@1pӺ| ֔qԝ)$Wa_WtpW/y%ͤ5+;$04q@ .W:P$AZC1={uMޯRw)H gp݇z9d&</[c3z< f|al!DD`T[wHfҼp3=ՙz^+ly2$ ЄTPFV`\NZy/7(.no7+UMQdGCIrMauRUOw3Wi <|{czIfM1AI+ 8ǫ&&<4P6}KW0>#Nk !zc{w6|r|{nH{x;{:pӀ! 5dxgflCh=̹WV몷FRa) #Hy(?As.*WGLꀓv;m$ >FҝWua1A\BJ$D@2̷{j홌BNeY`hKS ~(dvze2eAy<[?۞O;/'_@",dX7v[,u)5\ʞ{Ţ]nP`k09':'죑?|_^#>(۷f8$ 5ާ#4ĥN|]bPCWz5:Ӏe ɘ?i[T{dLӃ}h} &+܌f~P ci"`G8twHgG>7sNʧWC#;X?#i4^s94k9E;-5VK!"D>ZNZ4?s76}cq/?}6912jBRF{w=ċa̻ LEusKG#ik/56v J "U"7-9.ոhjmr$}g7FxNߐ!YWQK;q, G}F2.trA"LN$,÷ׅ㈱EdK 4E#!'7?WF`aT^=I{wUGA8݅<]RdAlGfǷO@_#:]v3r 2+vvEΝD/O16EGD9gjÀPHB-6#~C̀yl b7*aNeQ|eqw9NŽWǍ8rJKk+7iAڸq`%q  9^)1NO5鸫_x1oqia\  75凇ٯE<:!V]vMȠv3`ޥF`n[1;R>j j/a&KTfuu%"Џgd۟?O'vQ !3C"5%$~|:`ױg |;w }Ҁw۱#1qYzOA|] Ձ._Y_ܭ3fj8})T{w_"E2]7{Ϡ'|=ƶCa%$H˰|ȾE[Ч{А{{ ۼO!^2W9swH|cBy BbJ NѾ9L fTVM‘ߴ-3VaIFBh-oL-K ${X02w,)BX""kW=>M;N1}K8!. L[4|BDHꡡ7yK֦'kٟ&08:8HtDM!6j:Yռ2;" ҄2g)?+#8tYΔ'x<}95<;u^ 5= ehkO Y ff';uh{*T {VyR{8:,E!%^;`dzzcvg $kJ3 W`S5yR%Q gAK{s*GtvT;,oF[^d)t}7s4'G7j|cMQSF6&.!V,`\)Bo9/HpGD>^k<>(OmB7 d΢󨾾 0D8a\}msW;-HM(,T(z4t'qmJ 7͊ahEDS0uC r(͆ǒ}Jy/E:YӣJV"%$HIh<@y_LPFURDG*bg3Y }~ g*YƏl=yͰB;`aru)ǝc_350nܫw~cWQ0*2@8@!F}T\ǘ{P=/Uqr\<('B/s[?y _*wJI|d>kn`%/>Kn} ؍^3[="B*@(3uCoIw*h8ChOF.0v 2p뺨 ۃ''_Xt,{~<>M4P&o ~1phCCH-R2PP@H$wԭ]E-zO^f^mh4Zon%PL1::ƱPzjYDq#`T_WVBǚ-ăB<]|L@`9WT>Xbc4o0p-|E$ĀͿ[6/ѡ-.' ֲA{4Ia1L7Nff僨>mDCg_cAl<\| (-w\nr";%fgئpt/ $p)$C0;QpK徔!){&"[s (h: OtϏ,!'^Y✕9,Y3v}] =K *M֏*)!GqѸ`xŲ{77ADp6%A_8ǩ[W C2Pd`淃iž:N%O'ys!1&#.oG*H}=uL߳)0|]"7~H&('HԨ'?c%yw>"T+5i|L;yd? Z,5 G\^p{5Xs#׼2-hqg!HIU,Wꌏz@Z|A(anz=_؟>ar[Z1}}"nVvPdB{ӳkPş扭v-5D2ƔY|1񟃰b~B1inM59­{˛%HzqyTO%OFvOJ[Б#@0%c1iړ9N†*x6mObY֗sǖqyAl.K.qm`Fͮ37|UlA@$wI|e F)o7< H@ͫ>~geH! Ñ%׏^{V XYos3$ L~ C8_GӫB.ERRm# } %AI0!ߡ7`, -|Ϙtv:MloglŽAL'-Uev\b>آ,*֫I8RxdHLuն?0`#x*wtGJFJQu*׸rGhoGV;vOޠ~NӱCi0o;HYrhxn~ջy,ѱ(gI|čپ/ؽ Cjʒf8󟄰y7D@җtN{ȐË́{w֜i9YCšvbľ~uU0}PZ+3V0S[z @ґaK)֙<ܣ""!1/Z7Xl$zuOHcHO7o?tٻP8vtB_/OCx>f WeBkfA/^81HXR=![PH@i-T S.J[aDE;o@>&!o=d;tŸ?Z7h9_'o~ AYC\DC䚭wneE("D;=vnS/vCMs%4no(j< 2և';{?'ǏN/c\oh@RY{oLP]lWsFu~zf2h @KqQۡw"d%\;~}6/&/#椩ø|z6M-hhc g×>9Pn70|{5%kM b%$YRϚy% r!W~1/a\FHE iw3Ë¡4fvOll(37g{M>HCJgɪݡ:Vtw˨w+ᓗ+Cŏ;e*u R2{f?/$r nޑ`HY;w /l4rAnO,#$ZYUU@ZGh{<ܻ)~J D֜:ECOFCCd4gNOg^sbKʡ]^xt 8]~\R tt- {|vU6^o_DZ=BD&PŰ0Fã"H?a y.Q`pCE?GAx͠H!"^&g֘gJ;57xWQ;4ϏeUE?0)4wЯ{R:o\|\} 0Z;N^4%{,/rp!Y s2U]貲oi<GTHtRghs4:6&/$#"lP7}!>%/a5Κ 7DWI NTc8/&Y%ťtJ>YGMLry|Q5kUͿh&~P+ooGgg|s>IX;u2DFI Jw䶕x Tx.StҪJ'pG#3zѪ]كη oqr{?˫id~rb.Dd7%.{:?"4"p2$zH1${vE55EFYoǏVG<✠GTNql6xw\RGG<=!/%w3AZX! ۞˩@41yݣW|MŹlSg(kuFuȶ }W؂.i]ٝqE]$.{"u=i\e+㗜, 0fA45I5WʰEXWQ׫O yX 孴nU/}+C&CJoG[}]vOdc8:a9 Jg^sC C,sBr _"e~DmLl)v΍_O  [{TR-1zl٤QBvudʵ"^@I"#H9*#.i/CD ޣ(ޅ>BɏC\.1Uٴx_wxwO^zFmco_gpHdL:Jxv:ي0WD@0֟;gw*u\)6x> K!ҿ!OEgm ]ϞO߫JԘnzL۶?z^׹5kx, !YnW):偏(Zu"Xy|?O  ' r7MzLvI^?Qp$~2TDn xپć9Wo0y/'aT4$Eg'S@nU lwI`|-E-RmWw`˱Ci=i!rjz zynJ> P{xhN@k䇁=ʡ-m&ھ/P>1 o? -/yg\oqWѻ5 np=z8tR /y!=HWN[1叟ԾhI.Pyo( 4:rE{WJԪY770k1CS78؝rtj{U?kAXEEm[ ;,S%qϗFѽ=&e}㔧O#q"]VKE|qbȝs.\: `ލf\Q4f74%]Y{4Wt !3M o0{Ze4xN?] 6?zaٰ7O׳>Jq+<}pE@nHL:/8!,V#kHV9 $>dBZE&0M ü)w=x[[uBԂpxᗑ5Ʊ nP>K07@@wG/ö>KVnr`ܻ]4'>N3bˍD@*W3{KZ W{1 w!o2$ fXy=+QI œ7S/ wK-Yu*78rM]3'ý]Ak}#] 8n(!i|G˼},UmZIT|ňԎGM^>Cܼ{:k~jύ}{׏"}!rؾ%qu6'B nlSrM{6v+0UQhTy#Ь$O6pRǧaj3=ϭ/TXSE(nHvu05% =([Y`~.ɧ(!2ܩh'$纋#.3nӷO@a)_ ,(Qb, >[QBM$M^ZNt%^l PoE{j}IEٲ*G dZ4.dBsFkOKG{on6ŹCGV=4eauxrR8_*W[C9\76n^Ū3I~˼tmz79HxXQx}YU=Dz&GyCՖP!T˖mDzSVdIWHP\է&HN ֱpPg3@3d[~qU>9Op[BRX tH-tb IỎ sGxMQym_$SOpb`ox`>J ֨q1bpVdžu.\*GMtW)4@ dZ*Ge'J ٟ{)|,PArGܯds6h5Ki\oz:ɯxs{XsUܻv >)2Mе 䟘) ,J7v~v\/L)tOkh<}P9<:ٌ uw5o#VuG)큽wnwaF 2r y`S3KɌzySF,=;B4ɓyNnO{<UԩKxžt) *[Ӵ}{ZY@ԅ0ba{+o&%P)u9A݇RQ.Q*Pp$4BΛNF Չ"RfTU%(6!=,%{R95"aQ/&&"ͪ.ʕ&QO KcЇ֤͂! jvqOkep3;m"Zsu]*FKr SǗغ銬U#Ku1T%2<~3&fgfFVg qIb໏^b1ʘ46=`\m)uJ bB&0 =-6B  Q6 qטSZCؒc8ㆁ H~aXlQZΑP6x6 ^do믣{.v%6 rAi/7xyk|R4@+ڗñSʯqyvCW<3qM:ad??բ$ ӓڧvs1" AZ FT !T9}DȢR傀l'@hY (, 'ODLwyΨH*.N诲"24RQ۔"WӭdTa%\ %iZC54 ꭖŲg=U ݛ()~5*Z H"%/4{ڀ?(nĐ$c'6['ʊݦzTOH x-n@4!0VKIXxn:^O~d[>gЫSaPI)J'g'غm^x$ȬaAXBxP#D$WKІsE2F!ɆoN`s3 -ƧqR "D2^skŔJ'&螡Yvך߮t3]sb7 sH@„IO@$!R,YͱW$-MT+uU)ɯߢNUm{ @RBIy0x{^o&{ǀs2|*sԒW$JD˷rv@|W>gV` G[$ `v .!nw-6%,g_\q<7UD"|U|Ե3(Y._RCa\ Kvlϻ?J9>yפh%YT1Hmw8y+%vA`xqT5ƁnQ5l/L>[~c^Z&FJeprgNQzd0-f),+{,n־O1G$[ &έQsknw>ٳnbfq=E\IuE"ՊdWrvg*{h\vnw;{K70W@v4@str:-FƍD%-uk;N$H݄=krXZbi6>cGk4,Θ6qyS>򇚈$@;_4C6 ΐiҨSɹwlX|(d-3tLca|2*,h!$[sxt%,ư&.$b,~)PBHY;IfM Ԍӑ_5zԂ@pJH`+,Z4H.\*EHLCU2~!$$Є$Oa{jpv! I'NCaů!$#Xre|$b I! Ru/a ܮ VKHGBH X 4s0U.UIdħEЊ %e$ I $ 3@$TAֲB݄$*H4>SKHC!$':! ơ DaFd6ј8"V=:ѬAVUKU`tX+ %r #iI/ h[RmmZp $`CbH9d +$!}f$ 0#l3)H $&["(i6:6[ )Uk $eHlx w?s{Hg/boׁY٤=Ɨ0_D/eR F$;,:ef|*:IKxͳb24I=I K`Ą{<>~P K"@ʁ DgBRQŠK\A]ЌAQjHVX@BY*WK2/ڵmhڭ#HHI7OCRfY$gH}I$ղM!!"@AՐi! d$m 6Jš턀(i!mA>tf=PN JL~xi& `RR!*C;7d~Ä͇ܸ*\ PHtCheF _&7e11ZBCb@6b$2Q΋x,  =$n826ZS{'ͣ,T6J$H5`Aa$Ldd0Xha& $I aHɈ $ d j65b턺ud?!ޓFV,Y0xì8 a␂hH "嵱FڷխkCd !HHcUW9EUc[VգWՎͺ͢M2@ _.3Zf@C2lI"2H !DM s $)c!IvC2O$ B-d$*F1g9m\rmjƍ !D3 M[! (AKGX@!$!![®tY+[I\[q!!X(@]YHI $!XinD$֖$XHlLt$Vr$ZծڶH@i$ T@LBdaE +!)Wm%v$aِ YX 1 ĄQT BH٘Be m-̀IHX $$aYPY Hyi cI$" &5i' \̆hɬ." )BlZS2\Ls2tՆ)4ܫu[h"bBJf[!-FŒVY3Y kVD-ʍmm\Vں…`9HN4$. C$Y 2[ LCjfMmB$ Xk Sn$lD 2,q>҇edH2HJ!*@$*I-h[UdAփ S2!Wvte!iw$|lK[$i .f-ŭ1L`Q VIPCήZJָ%,-)2 lT.IP% P*IXHE* R ń )@ 9кI@1) D6J-m!J+ LH>}p#TQR)YܲFk-j$ ^Muh32m[ܵE\HE$ *@T 9q$2ؠI R$+H@1 *( @RK吋%[a -AB[rЕ[B57cXZeZY-RHJTH,!m(c P$I%d$ $V: i$1 5jѪkmVmm I$$$AՁ1b-5kZ@$ /n&L.X<M(IkllXIrQV6* Dq,KkmTŏYUD4DFNN3-YD +΍1UiGgiv/mC~hյ*弅wʪq#PDuupӂlj JqCdӷ zZS/3qV.ׅʼnYb壊"[ P`.e fYQ< "ƵKlإAYڸ*'$LQ0٣"gWKT|F]se[K[Rc`{Xic\mVj"q&*QNXj1U#ٴQ)b*w;c937n9pdjebU8`Q5-]ю+Vem)]jVr.8@B?V$$[նת/$%*KĀKrM7 b?II` ; $U}Cկ=Uڭ[WyڿRF@I$>ńB~@40l@옄c1G4%s˾`#$`%b9Xr؂6_{΀B?ᤐv I$vT m[m+kEmZսmԵk߾ͭ;mU_q H@@%B`Ix\omҮ_(8 i ΪJ|J]uiSD},ӅNm 5JTR@BTad {zwN>M&) aH" *$ v(c*,>s&ئ_TR ޷~NXQJ&]Q ,Pύ/w'ʽ,o7;2rK=3#37:qg%dP,\y/|L;zVlukgIc уhFXFD{'L~F7ﻏkj^&_i_+ogzx7?&$b4T6y$ejnUC҄j6, oL_=dzFbŕDc:|8GVͶ4/9)겨Myg}ʋz&¤\rͯJ#j smHsFӵ>¼\,l,V*3[LPvS$x,*N.'}K6TW7z=kO*z^G$3\,'Tŕ,61% Pu6eBhGXImg bWFu$ e@ħ>'.Gǁz xIHK?q}neZa{Ii: I5⸵#o;17gW73DǓYWc0%p`PrfFE(!>)Z-Xʱܷt `ړvHpdY8lz*H  }Zub%AiFH@W#jyFT-z[QȀsY oVU6 Ygj]Ѯa'$fDYC)YF T)g&HT6lںٮ&$8iYvεP!~G(nwbLupw$Zf7_-8 R NA}hZ4`0EoYJG.B

n}"ƛ&,iĪB@'kܸTkhO嵮\'Kk `@cHB:HrSI) &; 2,XfX"_wFz #jNV a@?:D>]T$>g+6')O|/нM @`wv%JzOD`"" hNHx{xC9P$+$$ $ ) 9o%%=Y*Kjs;VX8KQ56քXf+T>q5K}U7:i`'oy%42uDŶ4ަ30r8e]1A~6‹UE ns(jC 1w8a/_;/d֣h{/JVtF(麦+R6y,xX"wBq@gaPo½ɐX;RVAߏ*eF(*k:޵:EI(}ն dURhh8 T NMhfg_:`+Ro.Nv;JT> FHj$m+;,$/y'2rjLv/K!iNJsMIk|k0ϥ"aec#drtvg] IՇD4gDdI68{pr L2Etd)"+^#Ll*4%h'.aiҀ3Y|;99\;eo?ӈKR2RچK|X\Rky)q W l{H Ru2pE9\xmHv8zPΰ&BJtjX\(QxyE7hdRi)v';5lS`l˪s]`YKY0l'띧( =2y[W_1+ۚRF mL$ ZF3 f㳅LYUN.*${Ky'J(N ;o tk݅s2 dBXQ(QihSV7 р&u}ll(OȍP19[GTKJԡ.~68_}T($NKRVSKBz)l y=F5ʤv9n̨ZY;Gm4l`ȶpdР,1"{yÂI;k`y˵5?0Iv,YcH猸=-2SݻǞ;~FVH$ 5YBVͣzVS*$M d }i955j3XU$Hwe)`uu~ww!VUqS^IպAbifaimd0R%8BJbk%w|K)V{Cct:;3V^$KR1-=!:(r^yG0jP`^Fq]gukk=#i JPD89<3*v V߲fB016qUyEM\hHE4mA;$93ֹ@U)sHd yMBg PMiM{*l+"̺D4@R?3d"ӼhEh0YtqBO!$';쳒I:ykBrc\Id,t/yu٥8! Q9531EZ ߦ=Lxeyw7Fv);F$\ $z u.).U 2/Iw+BJ)QsRfMBB$0bXv]E੮\ ulrmfIdq:mUj/-{Ɠ5nx֔<nY ӷwMyt㩮+3G3A G4Q%ҋ &aZ@lUG4.H*0ClѬCA7a,R)o?$|WRz" 9lNwt0y@$z2 !7TrH"8+Fd;xBOUsJڷukppdΫàggYϐt78rca$Bܫz"L90I\lhtO)MRS;T̡e"!2{ -j;RlLm) Q K 8ԂvUOGFWtil#X@$4Q9H\ʉmeYϸ6).Cx!&7PɜDA$m:0zO-x3 &07kSlpEj=pY2b,T(pViq))3P&0IA7ϰABUC~7 NN6ZVU6%ɫ_SrISzxJ/q֑J伨O$&m1 E . 8!3J8UBgEkL3uaDcTϭsUpYQ[߾drd۫i mL ]L^\xKIڥ< ?3ONka.f|BiqEߚ1ZSMW>0bv^#\/̌1` :`@ |xXŐ=ި&9!m_IHn&GhoR4/fu(.jI/ag}n͇Ճ'ֺ^F^D%r*+{jC\ә]{cYh*}3Fwv0q{=Q?H8"fwJIU[r̝)QNۤ<>mp7_]:VN*T)7֢CC/aQjU2ٹ4k񳫅v)sD+&NR0+}P8>2IeN/?.vW?zFZٿ2MU@6HcI2t&0zo֧ % BP B$K,PPMMrzHpe}>ܨ3pӣ_mN7 =apI轤Њ- 6M{> r;- }\qOe*IetdCSaާq?=Oٓ OBλڇzS`KdqIOQyxyyWܝv=LWCtk HڌD@@~w+zJ5sfhOYd5\`X!%I  C'3|*^lB1 =gB:&$-|s˯B.J%nXMNP;4'x0-BogBmgIM `I2@&PD[L!3?ۭc:+eo{}Mʨb5Zə,LD.M[,(8"[ >IK_wyg%w4"@ hy QPA4ÿYEC)aqHV_Ӣ-ݷz[sz햖Y5O!=Fɦ u9j\:+w澹 94a8<[{pyZQ gfeXH[9}ʾzzO@bwvuTR䳱C4 Y|u m9kМ7I@K Xw5{O8SvHP9[n4/ٜ>ɂ P $ QF%*/D.A`O~`aVE tihR≬G5Ym+q jAE rĉʧcy@6/kY±^-PFbSPagE*TN d9;MGD$#%ErR20Y+sWsmfbʚТP[ ΗIC2f!<2DHY%bM&UB ! iӼ2xؽNJ}9N!I}Z&ʭ4!KJ]Zk&h l YmZEDFv4$[L0&f¤mFk*ҡ̬w^{7HKQTWv-PaEQ!{dFi=MZ]U\tڜK!k4*PawƶemlYH5Nb1 !Pi-(xeFGū1 6Uq 1j"S/ì*ns(hDE55]';/ac.a/=8]SƒC!4>ַ')|> |Nɗ}!βv|s\-2+wq5ǵC"~<$<JqӸped_XmiM'sVM3!a"Pqviïؼ5k*YP.(]j@^,;LnDcIc@6KpA(""/OJxu62Q/g A6ٿw]o&u{c̳yq*HEI6g(Y,@xdYu؅7^ãx~u>-o-B %)vגrbb,'w6w6\g+րo@vpdƝMRِt ;ON \QdE2^[sz'INȵvj#[.%_- @G`x6fIsٮdS82Lz5rz'}״÷*kK34BEwt2w|o/;a<ё)O `؎s56$0]9ލؤ^`LFDZhءVJKc<ȍC4̿>q+eɭ4N,uML 5 "ޔUnF v̔;ѐ&L ݒ5;A@9S:ms k`l S>zeO=5/쉨"Fp9(O*ewkyu+oQ+ aYH(M7qlcCmwy5y|MKת 4y|TB/V>V1'cͼTj+NRx5$E7]IZ К 7b_,1.S=|yگw=H6gNjXg?Y$p<7{_7#~wΔJoA_ӿ]jt|N_Jԝ4&t)I-˸(< INpUj,,q^tU N CLa#sQ6 5j:Tk2 PHQq(fKHqpҤ.9%r8B V?/wuL7. 24n޶_T*iA̒N o,EF |yKB, *B[$uOJ++rO#L3{}*K.:5ƈJ^Yp{ Pehp&D@1@fLgs3 Vk[)u@ArCE5W.~1g,45$KRo}|w}riaL{u`P3az7ޕ$`Ar@Ą+p7-l2ߨp "!H&Uϧ?疦 F@l+M& nf2O3z O|X Lqfeĉw@7⡶<]_B<2<ϸ\@g{?f1`TVMiꏀئ#;j|as9VN_Dn|Zm/Vog߯'A}ZxyyvaS6, Q!m9=3 4m.od8'1Z揮V-X9zxXO{)}~ͺr>x. YsԉY̬ZPNI tOS9MhG  Z\f`_7!p8lse>&K4[Y ApRU- 0J A;'LVb +9~]8~~Ӎ~ԥ.{7}6.LԽ?f<Ƃj H8zZ)ԭt .)f^]c>2T 5-4.a,v`mܷyR,̟h}rmT#d?|C̑_g'㟉 kv8iskz{o ׄ:1:a jǫCMl9l qJ45Mp{9X?ddEE7 _(4j'D 3Q|ݙM~VC-FN͊*P ep Mf5WƚgoZInwPm3 B3jی`L Rmի#c.n͖ OLVŴVϱnh R؁=3sJBbǸD5,t2h22KnJB,Gc>eYBa /7 ~O;ʤ7p-Pg>XZ@1f)׵Ch"H"P@nZ$?_M4'!gVӁlXE?ooYnawB?uike,uƒHr.#tӹu7s*[P)7g((Tes-5L,y2$e!Smw92UpS _MLKw!@B8 ﶦ2FYOcSwooB(=6nj O)|憒2رy[i 909: Qj( XyAqyݨ84+&ҭ✢k!: %S_dApʼnr&Za{їE c^ uɗM R(5hSĸ@zbHȆE!>EgٲZbZ?BTq, 5ǥw|ۅy:4cЮύpvV@\iO51" V{ *=k7 '[VO-ٝcd킃!6 kbB @7Hb$7UKldJY1}|X|vZi^;+݉}KD@Bضbe5@4ʤ*ZV;J+2[ʌEPp(шW@UїitCMմ%Haj'e Se@smB曒0(PGv$uJ2NdƄR(zjÔ홙Z ^[*$$!RT0SfPM%TGZ>{q7y82RBBʧt,0Yf!{e#L=.׸Z_&g2XN9mzB>]L,[}Z-\ۉ j̨5V?> "B6d&@b*@R'aQ%ޞ=[#e7٧mCsEUg:xmZJD[Jv}*s(kT8onϕ/n=q#) CH#h:É(BEǗWVI36(4 \ ,S`/}FUï] `z3ˆכ;p` SRHj2ӱ+>ABmRSoeEUՃ 8ql Y"U\ޗ;kbV_V CX*"|n;޹mt@w {P,:吐 ReW`ˆW>ڎ/9#%*CqZg I=b.:6ݟ#X <Ġ фGS[b&eG:Q+ =i*JZS 7.v:PfНNHdLI І1Tڷ n%,YS3c{7UB ^m]u햗ȱ22EEs-qBv1;˂$T[kSo ~zuf#hհ IEB9'8^eT fopՂrpt:NEF S1r5qkT$kB1-bYBĐP xƓ+EYV(ȅ #kp#[e.",1E_lɄ`5εy}4 6k}؟lқI8( }qGDH(2=/ k}w"J42 q>{'IUJNg}|%d I% /&enht)puKF[;57@5 PC\ֺN)C~;[i\P=Pm,0PP 6ˌ0q1=Qow nW ,[^B|5Tte,<7&"#1?6k|HݭN}"rWeҀ6bJ T$ ESZ(;YTvϕ6tJXqhe6Е)!@@@/ &I , L߅<{=~PCuѝ#XhNT,\+-XmbʴQejc_Ǎ#}=m9`s Ol ŭ2@@,\F Ѓj}k4y;X9HBa<Êk7_%t #^Ոm1qto/s9Ȑ@JcmU6(MռF޹ u'>O P na֦SiLKO!=8;ڻ@RSݪe3X}9u:'HgjS[ `I]BZy8$1 EMǓTvGNT &bs&ЮF|Znr0(#pK܉`mTgWWFF,`lؤ4J8 ۺ şE =AF]B>j(UXfy昚u w5@q=7k'P>u>}K~CՀ>UԌ Qjlk\Yv{0fFV+Xa)0L%uӶj}Zw}7^ٸi?fR1ٮUF.Y8Rg \ :ٵ(<ה("LUn9 =EoМ#Ǩ0;03dPؚ7t٫yO -r s||ruxoYW7۟Ț"@p*ӲkK4'7: T%8/>C!u"@MEdVH7z3a]~tgD$=@ AB&p ǖ]S6/ql1\0 U" ؁!e{m< Ũ e7.a X!ٛIh9nZ85a) p( ^F{dŘWN,r]E *TL%)lCp!g/ J 6 ]}}.4$k4{7` )<34H" snnȘIhCo6R2 ^܇1M+k2rS5ʬDB9`2* ʹ2 +3K(ะ8(.Aml=zC@t$BIP`"1̧zޞ }-xxg?4>3fxT:o(ZnVWf&d3:| EnB2gԃc{y217p9RGN"|]v 8붣BM'&n|uwTt.PMTB!K3 ָ˴UT*pO[{M=M663bxZҞv jua *:dπTX, * /g+׸aL{N _cJ)9 ɡ([hH-HSς R`+ !k*hWS,dmdA&( @Myx>n*uke*ށ$ NJUzmʯJagJ[-|w*W93[ezēouJ&|ܬHon.3A SRzĹ0XphױQPM)-&u 9P%զBz:.nu1DQ9'd@0zMe#$J/VyֶFB+^Йe[Q9'#iv/y7@$XǼwnqq7sV"6iq^[آd!&xd7n 9[5y(p(JHBIBUP1ιFl1Y`&́I`bFUMY :,nH LқX,(/Sz$(D i!J0 ֒̏[[9~GV*୙oo=3qń3-}n-Rqgv ),7 B rECd Ouf lCrOpBe)YVZB.Td[(Eqvx2+}}dܠ@s<ۭi V\!v^E )+6u0q)!eDB $RJ-"j}uFS> tH=x!4v8zka@$Bw67Ta%Y)rT&nSDҏA(!Iƽ:2MG:^GD @$uZQ2ݽe]+:DKSZ >Y+u5$ܞ屙ނzqexe(lPC \)(s+$m<2T&װך@Um"򒛍eRVQ65_ 6JRY0:Y,"ÊB[Lm~C5SBJ9uO)Vp`:= pMo`]R57TLeҀLLvݖʈ;R9m|9WVcbs&y\~FJN@$YX;([$"MʠPdP M#eзfϦ&%\HVRQcO Sa4lRBh"+dLVO=L .R.sSo-cOhsFtK\1;(j̋6 0Y_W [F+-M]TLƘ3w)?ǿńk3G}bvA')H̊IŨQPSMjo;<0FVgI~=8R@fˇEIijT*QC$:+1p0U`u[r轅x1mp}9)m5H7j5 DEJLf,}r!`$l(RE2hw pɺpmTW,uqn _dK;&wr3j-3{ $6.Bŝ,0 0~ȟw=M*MY1c;Zo'ALd-uEƒ2y6U;q8mJXNO-!69pZguLd .ʲ"2.A#;hJڒ>c^,]=X%7SMkTeT5Jp0uPl׌s<_~AI2,a2GraOid75rB 5[fV保/N*(D^?mGU^&2$&w iCxZ(]!cp5-o4B{k$p>=G&O.wLՑ%Q$4gkE,/|{p:geeM%N&wݱya[ڞ4 vL3 |knϗlt$"B`,/'ͷ6|>DZ] A;{SۧfCRQHR;6 MaibP_HEYPVY 0\Ls2]-.絳bB "QJdp:jreV 2Hj6 AQG.h.>| QU$ZR0e"H"Ydͳ-l+YX%t@wf 9SגPݕ`*J)M{afQT@b=uیTIMZ)FbH5!º~ج ``G#QqGt%cKj= (-0}۽vA@}G5CuTB30M4@tUf4׉EK!%< &;,WA>JZ6]^Q+v`t)a{WalʳcPc~Ӹo9Ku*ʎM:TXܚ1#70ȥKIHUcmEyOg/E9wmt/] 4v,ݗi" {xdݺa TAC3+*4Q*"埖폳\A {G9|Ga1$dJAnc8YЌZ`*N0IPz]/LjĀjNZ %c5$"3Ō̌ 1M&b^]=?~;A*},,\BIh*RrƩےbbDy´ #fXmo'ч@HfȵieS~GPı UBd` pm-h-tiЎ % PQbȠ?'nF%Xif9xdC yW0n%f[ׂAul٨dޖlܷ=!`T_G.WcM&^Cc?hdavߞRB++o!aei eI]⼋z rqI9 ]=\8 ٽySWsehJAѱ [Vpgp:$ cF\ %v7G$Ær HBJQ.ו1[!$),qSUY@kyjY1ki_;RcȀ RkoikREAFH҂Ajnkc<$GWgZ͓홒p.fPwbD);*n&nQJA0)a"CBa ZPfK [PT!5Zm[Eps{K 9,lh9%8h߃lgŗ65v[Ǩ({&k3uSu]*;/m[6rJ"1 6k]޽vΡ΁$!"ھhյxkX0洌mf[MuK ^z4!&`ASDK;C2%Y2(1pne4%62a͍1-V[щ#TF,}~_\/H5y{;!o_Sq 6О7ھ'F@ UQwYufdB8򫛡$e!.˪a[{l8 ˲s0!}qhaQ8Ae:q36Rղ)'h Ìv[\:*w]ZPyP;Iw>牟1p9J`;ѳ.N퍒YZЊY6ڮYzq-R~\z͛9T9A+v!@Tf02b5@IAa8e rga/IZl H巯}@H|(^,T/3 $z?fSj[[Z2@F;W@8(_f7S CiD;khϽvQz vPDFe@ , 澧_Hq'a7=`cBcdmX ]XFfN~Sœ wԙLaZA*#^.]Ydln iH?y* PV2sf1[hF:L! J_ yyjeb0䄣cU '5Wd֮$H缸Uk/ͫS3pj{[(2W暂TBL8eq4,2##)FəF*U3(JƤVY'2 LbQ8=i)ؤ?! bCB/*7\+F"Ճke~5[ 86f䥤 CgB@K j&D-ş¨oت\m3oT 7m)C. &FDsLK5jݭ(/4F~P#@m^qKõD*Jq "=$RJ ^) ;^je|+s$.)EC-0C,T*Pr26K+'&KHc֋Ȕ?#Trd"ގFPhx7 cHW7[Hg)NK֦ t N7P"þ4 _mPR.BBUxB uۋ+{51p|s^#hq:_&vRxQt nzl@$Q`nFp]l%Mbt m92I"q~F?}_^S,WX OmB@[m+\sgII ?HvjUvtf8+d.зÃnH4!V!jm-rvqřS΂ f0.|.(ot}<,H"^priIP F)(P[K@uxr!ufuz m|*.utHB^5刯5޵ɹXr}uE(;_xn6=qbMO r# ^=q+ F1b^(x8"oBه6r1Z[Ǫ33fM* $ZƳ&RְQLH-A75Ͽ96mԠ/@E!H֑cݺr$ȨʓGN p{K8Lf_څn^O4bB;ӣB! (BL` 駘H-ɯz_=l|M\Hm;Ma-A:t)!:7k?Rz/ñ $`1)$WnEVno&?C^V|Kwig-+b1\(GP1 -gWf'! I"HEʍ]i֓m3bfK6J("0W?<`v@0r'AM PY6ڣZ6MɬZ }?l1ٱv)I߫N?8^b1r݊[ѧ6.GM|zp 8Mnf)^^Tӱ|NNzמ޷~۳~-:x`vgU Ǫz!b7aN=lq,{,ӏxb T<H  V cX/Md E"OՔT&`n"p?l.앟)&}t0<=7ounkŜg$MԪIИ%w_Jmu-YEvq?8poi߻qvʿxB>/ +#A!F!$`CGlT4 ]Pƚغ*%uD[6kq8D1%2}Mk(a߻Ö>75z_n%ɤPΦ0JI:^j{ε^/.73!^, eNd(]˘t&UHc̴+O!0@Y @?HI $@BHmZƢ6嵣ZūdblkmkZ5ݭ\{Vp/ml +uTqKT:4\T 3DnedSUn!m`%[Eb)0aQ֏ ݶY>QӥHXxto#EZsrv*N壁Zϋ:`;zŚݠ *`a61IB s"jFX@ &B`a=O4m-=i3c9i׮վ%J=<˷!&[S=ڨ5 -"d D`J [*fQZ@/5,++lտ3mNLI De #X@x4k~d% TAfRK>. !Q@eK}B#Cd4b±n#2*mJ?ِݐܡMER*w|͙6j@JXKɧwn+L4;p!f;[&٫3a/* ab5ui>IWeM܈FG}/aOm?YܰNKml'1RHe=Fe mi·3$-v%&je{Ur5ņ %h EVmgv)GbUv7֧nBjBBF)1X  P;HDZ96*HAg]BO1 WIF#3QF?;%Ҙϼ8#Ftb v ʵ+SWE[R @t^jv8o;{Yy蠇@tό]QsYerOI:-^AQԡ HW浱ȭI^rLkQ}$=t/WYn̒X\3 @ H(rw0u]BOg3(fY1OU)"4>߯+ô8դ̌Q:E]ʶBg~|ZVWa\J?5hMzkJأ!E=-Yb򫙥F?&#Ǧ2Az30F9&XA@f3ۆKW$Z$D B)R?{,*x|Xl,Do@)e~Hm}}TҭsQuELB$%OȰm_Eɔ @F8ϴtMKR2fa,; 6Y˷w5mk.lF#eqFm&)Â97[hזw$#AjX ]o+o%ĈK_muDJ4ԍߥG~~ݘT?|e!qQ U PwQp*̲ز~U/n5o!0¾0VlKḑz$ͨ6L iR"ʓ\2@$h-@gSRO8o U$Csq!ts\Fג$͵Tyvoi; NV~}d\ ~%$hY24U?^s.NIPu65j?EN :{V+gyG>rlIw|ӽ{dQi x5w /!@<#17i0%fkfy2@&}e"Aoz=-;%?LqE_l_} ?I^YOg8I̐{&0( 1 '={ @42IIߡY$P&XvaBoo7":ԬY 6fouܩ`5qfI 4*PH*ܯ#wIBv%Q,K]Zhh(%1XEtTcT\uN%2+hřH JlM{{j,"Є}{-&C2X/6ZbY]c) QTTq_v\(/O<1j)!98[a3L4p7~[&uk{ 0] hE H~WgdU,.Oʒp(z.j`;&r\QG !,tqU!/E^5 Q_Y4Y4kW#R@@ok% MN@nhBG ,S9%['yݤ)h,+$aTh+\&+藞u||'ׂFUɱgeǿ`/A] Gb,1v\rBԩv6A!U A掛5&Z3?2&j:'ǍrY_B]ۍR߿0M ղk$d4c/1S7^]_ю &PHVpءhb40 1 @b!~7|==d,9C}]}N Zag $bBAօ}RH,T@X"DO3:P~k(>=yGΗo{SӱrR.>#JW2jB<-g>(N8۬ !͹R~-=Ɨ|}jjeHZJe2%{ɹE M¯sN/SGkv,yS+o1|OҧH !?;HnJ(Qk wCֹ*DZa1+ߐ7JN,;2ߪp>9Ml: W'o>Xzk?Q࿃^Oi o_ͺrc2G2q[ȩK`ƴu dϚG͛dN- ~4 .^~?W.3_"O5F{Ҁ 1;C$L55bd!~ ؏d Ͽ q$6[N P~.s6ϲw.e&EJ"{D3:(im/p` xȓ(AL[݋m|-'h\DNp/݈(4کJw)BX[o^\6]v&4_3AWU73i4)ë+W/|.;+z|KXhW$jw9%1Ձ6} bc[n`#9uyd&]ո^eR;ȾGN_m8Xtŏ:!q$^B+)`;2Z/{is.?Յ?X^sD$>BT>sQniDVBYXEK h3jޔ@dp~gؑ9r̔e-<&fi+ͣZ-^󽏙p-FJ! !( moDչG=b0NKT^["&ӱ0QS.Mpgt@n/bA|W$/SnXa'N %(IH( փ.͹UO|mW U2Ğ۷_-dct?G;Lclh3? }U2kdlV?m)ٷ3GjKGBh(YZ&vZB?Y_LҙsG  (*fuoaUffm6(q|hJCcF ݗ9{plAǼs-Vch)7@HH1H#@hX>c >yl|^Vuǰ-gLBc < HD#/; +zФ'߃GR<cCYx\OpLL Yyn#{kZ"Jp$ | ;復KF8U!rMQWt7nĠ0gmZ" @[4 vRrĻP"ayZy7B-UB~ꄐu_7ez*E[f j&bI"Y=>Fbg3)4 H!(vUL,(kcjIZQ@ Q RD9kv<2P3 xwvnnC&`"l-t԰F;́A̛¤p(޴–c3^U UBDdmtBd1>l3nlg{(nW,i%Ԉ6wq[K☎ogfetw8.= +x|˖w5 o}7̶Jd-_bEmi^WeΨJG\9W:+]ߒL Sꡣ|۵|*-Hh1@PO1$v@ @!@ 0L# Vٕ{~mY6ѻZ٠,$-Um),Sr%fCBR@"yj6x ijk4:mlQ*]VB+f] Ʀn5|4$6%|o1P&uϷM<|Fâ5MC&TWx[I4z\3&@ s-5{9v9xޟc}i7 RK/=lx67fDK(6DҚ^DOr  rg>{23d}uS{ֽL}:N-dٍÑJ^݊6UoyY@P1ebI_j)H#4Ι(`$_+i{pl]~'{"F@)]Icx%?3MJ#lS $ #s*r3( _Vs 7(9>=Nc=6®jrO^Ss|zk)CzѪt0I{z΃\,U }M4)Q:j|'P@S3J0%A}Ӯȣ+U(o.?6 xpgvVESt{ث$fwUU_{_*2vN$!Kȁfp̵WoXaPR: s$b-+:aӕ+n˺ JE; 0M/Owm(ɂ)< EEy#Q血̨#Fn HѥÃV.)1U X$k͈t 0ۜRl^7xfjŧ J `ֻi8[!-0v)oz'a>eX$I]½i՞: Ien M`-0@L̡A DM؏ýcZG}U/NUDVjp ſ/A +kSӓëWCѽVo?Oaw> Rh߇ ! -RPaÿ!Wad\E| U vO6o@!(_ڳ3y tgo 1J]ɛ;*0AL6cLh]Q.9 {@잝\WHG HH#a<HC{)6=fZEAJO^/mfj .8Fz}XeD+cf\IJRi"JS0OjXӗV9?ן #!Ajt,vXv0)R̰.}cm6Ml׸ C3-d⩐-6Vc=#$&Yۜ3ɑ S2ni<exv @*mfP&qٷk-$)%1 y),\AaR$b&%c [GKm[ZXV!{58age,6'jRX 8F S&,*n6Hնx^k^;}RM4(D+MmMVWItӠ6LXӮ-tZ ea"$ލd '["7/iyL5KYd!ޡ6@_+NůsCv1f&s]Yƒ ΔҀ0Q5TGC@P@E|vʤHk{V֕Ⴈ*FFIPtHV &g .т^vtNM݊;bos,Mc,4K*$Igx&ܑ 򯓓$FkXPPudZN8O}r={RO=zDSErW Kj~N֯ܺuSK|5%,&HP!2ˆ!IY䳫^{n[Ƞ)b։[iOE(ex0ox]F>Cv;P*[*lE: ]O!06\– oj iW"H@maCԇ xqu,igqبi!kX-D-.r@D z_(E/.8J-#T J%dϜ sUH2&%5(T IOenݳͿ47S~PM-7I;>_rY]MG!ۅ>++\~œ4OsdAffpfO[|JMA[a7Â>D;V؎'2dua?|"Lc1.xͺŹQk'  Td 3|K !H. vF U6ZM]*{~u=&ݻ M*HEz,GΛ'9\A<|S(eG:PY`P& %" ?/<}/M܆=w5 Q?~ڋ%wvoMQISjT#!HC*)0z_r} u3^baqDC !hE%j65 K6by3 ^4>LJZ/ܨY_aqMz hÿCu+]5[>cNr}28Hqױ5nPCo^PzeTJ:҉!KVCfѻeϯb;&oGm?^y-cBl~|1c%!3G~s?^4NJT47XSW/E ;wgHkrvDfI8IwJJCK jRe*[XـV V( \󪄂*eemQ R ;,&#MH\F؆# @9NT`kFȋ ɺ}7;HxNdIˁ朖"A`.bQɱx-f4CxѿgOg#pwLua;hl4) 9Ǥ1NCod]v@"(n HYX5W pgCmlBBP#uuvi`n9infM+OZȉnȃ|at.e֠EELI!vnߣ1˚X" j3 F $}Ŕ͢,6H{מ .eI(so>9i:lcm=͋'e3[u&չ+lXuaj1t.3T=S YBI6=2eՔDn@IB%DrYXI.aqaHcQO(B fC5ai36Z$m\3gUD!\"NhӣdqkIXyTRT@%dS|-W]գ$Y! N1?DzJi$.8mSFNHhFEG<`z/3 (}(\r~V.7"MN/5vv/bݨfb,6@MԘ 2*E{=U:*diiB@8p!  #d=6Qi(2S.XlϭuUJ(d*޶.g6tgxuA:4"^־6L 2,̐A! X6TNr)Z;2;*p;v¦RবP ]aQ*C흎Lo}}:aZ)9yu?°YUJV[yU&MDu`(1 :ؕBp29QW%l|Ɏ>T2,d䥱&R6S(P_ԹZAE"0-ͰӰa&g8ajWYJ&PTJl˨ | -6uu* ϩSa LwT H򰍂'~7䮷am58c8g2k=]ϛEcSκE OP%ޑ)lLS#Nu͓Vȡif>bEFᬲbkm \0!3ipUف:B\V\%B~BלMՌIv;Nos[#Up;7O_SL7ܓpZVL@ڀ@ o%xXjK|rV4#[4{liHIEud$|^BbPoXTnF2!yHVRJ6TjR[GlxMI>dv[zf]ƒxߋz==S?ئÑ]bKٮsǜgMS]Nj",4Kڔq)4$^ipᒟYgCYװw0R#Y7T{ kց~'cx]n{y*ld1PC>pi8(7ыhIjg\Ƙ K|> _BB$^n`1'!)fZ#/.JZ&Vf>,a:K"Kߍ32޷>NׅrF O28)2?%k;eƢz+Q$A )H)^]/1u45>X@1չ(s#HwԱݎf) >!L0t^V"Y<30*%KtamDw9=n] :!l$ ӠJJ4/p1Xd#Gs2f2E1E,n[fyeY3 ӱOzbeE7͝Xyke0^ױHMuudOC"tOy~cܜ}ԆR)l&~@s”A5Bv JՏW7.j$ ͩ(.-S37f22v۾;Յ_\+&D6iOmDYNucWc?W禇RP4Z.ɛk\,-92ް8dYMĽ B'R7Q .Qu,qu8%8*Ѷ*HHHRI$jmX|4LaR왈qcᙴIC6'ڲuI1*mST%IAfEAAȇ{/V̥c#%k|MXRRaK_HpSUaP.[n ;Y;vVHKݺoקOt8#[Ɔ5d@OUد`oݳMV/y\aeYH_}2źVurN8g@\yû ⾝wW[3C/%tB>ZE9 vEݲ,} .۰x[pC.3HrLLyJgYtǁ* (޶Py~]҄iO(jD2Kh]$qp?h2 RtBr4ٸ&M,Ep(]hT;V -nWK"kb1@Q] ܐ& ;X*,*`nz*i]E:$'IP^"2#_ݾ3uk}?\&ͬWy"6|n:TjQ }\[RJڡmSuA&5K*K'Rz5p#y%O6j⹦3|Pq3Q e4?N@j+LCL 0Ę+UU$N5LPGPV[8 DJ>o,0pЮŠyF֚F: qEӯ}/<Y~ےxU=2^&_+L'.AWƃ71jVzQę V͓f_yZ0oW"l-ù+} dW3.s,``57]h=H*VXcڢŨ(]2G׻Eqx,uYXtЀ졛OI(4JƤ5Gŭ_Qٖ!#yFP ᄈW{K+TFkU25_;k$[1~Je*:vEnW36M}ᵹZGaJ$bϴT(I(:DfʭkJ-eM3U:[b3X/=JfJBHHm [H~|_k?#e@"x~pwx/}5.EDBj[Z&Mܣ:өav)O (q (\ 3!+Pcir|7OTuif_͖ى[JwTa¡Q[Y'YY {GtinxĠ R,iTJP`갇V~HvS:g5ri@k!;b{ ?LBj5lkmFۻ|cmEm\`a&BG23Ss{>.&ZE?y֒* rkbDBMH2ZBB2sH'Cd idi$BO1w 9N &2*,6@5^d'_M}JW² =!il9=d!'8 @H H $6BDtʙs;.>t:-m.@1pA*4 sWZ)A&g|D7᝔/{}lʖ(wѳ3y7G}JI$RX@N$@!!:X,saf~B4$ ,@;K4!!4$;Dg2h:hIVn[s>rIوBFBb1k?rWXը~C`$$HHg5dk,C$'9!ra!@$8~YI4=Hlv=F%/)h<@U}i_iw3 ޅxo@ w]64Ubع[5qG$<0m__keg d $ S? *,ڱ2ꘞ}J n BX$;Bڗf!y<n&gs}U=tLeE>3B$§HDePs^)g1կx5&[mԵWH@4/ v}ېRgHX=%wԓf[QɦUe`4w7 ^; fCpv֪jփhbTjj66/aBS_4L[cT;*O TYwsqF !9cp![Z `jl!uΆMPTYVI꠫ذw`5 *~QH{!gUܤ,IL^i ` "0Qus~]d\nGSvb0y{$GZgj;dug!b}^^i"%wc58ƈBP0#!0Â5_u gXIKn[s+T$Fi*}J+aS"\g| %iz~D7ȟxn+ZuR8l8Z7yr,J/F mFlAjtt)ΙRV>N` d%d_$ IÌ#~tD&J:6!E1IV,&Cn/hDN)Ɍe:O~M<8fL"#zu5,B*\,#y#FP Ei2mX.[bvG0ᕝGk 쏊ұ-f!5'E&A:gB|jvj} 8/kWs N~6lB>jhw~?WMPվcf6N}>Oӡ<07YFxc+}dzc HƤdQ" 4u֞Mrh MkqmFh6+*"V6RcQj*X*kb _m\֍FEFTZlbPhbVōjjQjMF+UJĕF+6-Eh֋h֍b1ѬTmcmm*,mbV1Z6FѭR[ckhE!j-+F"QU*cQXԕ1[1FD!mzfVѴEhFTmmkVW j`>脓HHvI $kFVklVq$H(Hc$ AV("6&_A!6,ky3 ]TcUCqV(KeV&,F,Q!ѶLEdF lXXbJ$dh!Slc]MfF\j5*XF b0 wc$ښvI09p'$8f]xŴFMm([,j*X kEhزcj"ljAQTEmQlV5QhƢ9rj+n5IlEFMֱhcbq\lm0XPQln5\TjŢj-AQXѰTUZ#hڊkDFTMQZ6mWU6"-qŨmFتqqmōi6؍hڊTEF~3wUB]B$jI_M3y w?&$:qdI1j-VMlj-MMT+QV*m%6RmFd6*)65%UbiR4IfVZѶm%m26kblkF&ض+%RZeE-dRYa7o $kۡ&#L %2C Fom|t0&B 0U*al w:$ gza ?*̻s_?DPBH\{IN)`(Aw5HFٗ46rq:h?oN{uz :9moѮOc|}wo>ߝ uv8$ DC!-ZMvrKC)kR{ML3]I7fгBPxiϭ}s)=}\aC'~;;VE37π$w ߰`nLsj}3$#>Pk<[Y8U:ew7U˻l0_ y|V#xВWEBKGpY lrH!dO Sqy8%x2F?j`lnarI6q3xY. fY$I!A> bD` 8PfL"Qkiюoγs~´_r[QnvW"dLcǨ Ԡv5 $pF dJ!u}lbCXW~?IU~ۀ_&OЧ:jXs>he!6p'pu6pD|ڈu(׷O(},7VߚO~SReGHIoՀ*~nY IO얚4 y]PR ͪ"%8y+rvhbH+3f)F_])\X'%V?vOܿzW^|[SӇ3"ݧFj6 $|:=-t>[C)evt(ygA$yq:eNݧ0:.4!, \?&4 x?2y&)i(QJaL M?dQA5`L)b8S&bF٠8F?Iݛ NHH/ս<Վ6"O~am"_fCk7m闷]$-.zڈ9F I*5Οk=[}͇?}dw=oq;+?kPH0Bbc`_;8UjACPR Tx gjkrs\(D2ʚ0Vi|__c>z:G huyYXr0U2NU!Pa"ZI_dY6N+N}F;NIP\LMy0{W2)kPhs出aCR1.r8QFn8rCh(@ ?cy$Toy$H H0GRfE|I}q X1L$Jٔb!a4VS4 }F[byqHsnw/z{~4T}_1}vg1 UFm4MJE@Egȩ؛s^{knҲ0 k4Jʐ=$ ̲ocĊ /'b1iےT + jH)q-ۑᜎjfj!!ua,~do $JZXZn6-- + ".%ʢT:{۝O=UA10 YE9% ySi)3 ڈz\Y,lRh2|&d4hWƙxSkAG5i`NWõ X)bΧt+bC6=^o?;VB@tĄ|JF{9sU?L>|bLAbr޽6;|` l6Ň[䊯pđN AOQ躬D"&ʀ*В= GUt9kCaCwщbL߼ѣ;L3O pcۑJD1? >_aQ#G~\J Y%#2e=Z ufd}^FrrU Dfo7BȬih/gi'0iHH2:Cc}>D#9S8b$>gb++ŕR{^e,I3}/n;e E,$?7#oXT֭i{{h̩=lJh[_&?"xr\)HlC#FU"U{om5,\M;YSzd+(0bypPākFbABu(%U/'Пkλ Y{să2@n܀f<S! |{Ia4 '>Veڹ>L؛^b v%F$Sk+xPD>*6{FzȲ[eUOFŐ y⁖NS?Rf\PQ1iZR{F1ߙ'Woc q]> niri<՚џe`Ҿo>9{yTݳr9f:^C3;]wVrH e:@ %c&-- õaN "gxڕV= 5r}jl{*2{M\-pDi4++΁c;8 g{%gyzqf"@<;l Jhڻ.j5QB>QxHGDj"7DȆ6l $@?pµKff!F;΁#v(ڏVsK㎇`q P <'uȱxeZʨ h<iAWpz;bDX!Ӧ, )Ԝqw%td/oi ?V__Ѻ _BY'١1XAb}T"H ߱"ɖaϵu0m7? #Aaֻ˾2-X؊uM]4\jDaf.eA ]M3QE85Elj,PDTȳ{q2d J5 lۚ}Cn!y!2γ+iPWM̭lt ,Q XH%˯nr)X,6Je1e<| u{?y͗!Q|@MB!|\4|-Je6rolMrya)8hءd3FCqNQIYa`Qwg8NtR2d.30Qæ\$YT(kW$2fT'A' ~x^n_QPWrqGm x@xM AhI/~3^R%*6d ߣ*aܴIڶ|bӐ4lv0|#@ ^BOa.$ KIݎ|Kx[㟎h FtYh05Jh9m5մi*m 7,J9/$}N? *qNM qY^}wr7]z1/۶>8cGn}wW@NO?]fsL’h= ŗ(3]PBZ@A+Au "OGiO>w#}irS-=[-2]͙ I ~=1<$/,;1Q{PtԉS)aKy^d)emj2Ո99ZfEvXU5ҹ;sW~Kz'y\k,Ņ !*Hm?-6*|F֮V*}T1Y>EӂŢy8;3%V({T@}Ԁ=wj*eGϽmxG30I?!3ߚăQijz-Xk벨./^J-E^bDz>Օ#}l>`P*a9!74Ƽ䦭*#1=ͦ^ͧrӝ !b^DklQ×s>ɟiyU o>k\Ӎp_͍ <ݿcQ(*҆Gv]]?Clcu#@&FD&Еp׽kPt9 -1tOB0 x m_%s6#kPl1:PՂ׿jI_i3Tn g:1xiPl,CHWV¡^=(jЄanc9@ajY9_}d+ 鰩PaPC Hǩ%ijJv~ؽ2L"L@0cdK ﭞ5> :r`EX2Y`DBթIdua`F%e l> ( 2c AKK\Vc<:,0fXU_*VE;@d d6L\׼!!4Xܹnlǵ-_8%s&-̭77bmhp,(M9)#;Y[p9ŕPiubj3y1 zSb>Ǚng&p_ݮ\r@ ڪo]u}lm>4]JF#d2+ Y},v텥 n#xrr(28& j a0"..*lG(Nv&jamP(iPī-%dfArjaQkDZF%6UUX%`e 𪎤eZX񿽭:N N!қ[x*i;fviP}Y{0(!-%&ˢ^}U_2A۸jWVbE:R4P_ e~dZC" =gپ$ {͗kԇfeQ mz( JB3LP66 bUvxzλ{ڞao>tG+p+gmjicLB}/?vƜJ_qy$M% ؆yfƃR(S{7l,Dy erȌ43C&](=TS@V!`1iPx#p:= &c&!͋rʅB1Dffbb=Ȅ/`rJDv#3xMP4$yQJl7f}}6$b0 IĿxVV;XYם9gTgO) $Fl` EPI E,1X4A/Y+1c=~;آ|}zbVuڧg 1uᄒMM/&3ձl~*vm h@gA<8Qg>tj$O3:S7=coMxNF\QB|A6O+Y(v&1;0&chWZ|洈pF* n>qyߍ` YMN{H"3bO ,4Ÿ󋀡䤯!ơ'::x>Mz˝$^p%\OU>Wqr÷)4)]Qݼ#Uµ,ZnWb;}|<>Y_ĒBm 78*+ɖ1{ Lޝҟ*";*9r CH0_ g= ?sТ&< ܍5o3vjúsEdڦDqR_3l8zXU I2Ur1YbQZQ&*&R`"Xb" $yx.[&Id #Ît0S2]eTcDXBU$SjF1J0QQW1luf"b" аb*$[ed%cRLAjaQҲ*Ƀ GYҳ J+PXmCVI\{ΙKӍf%Je6upYbYCV}~H@>NOu^`!pfݶڧcAh(;" `zIM!!3y?\RKIKOX ŕH?@k؟;Ov5`jɔӍ\㈮.(W3qE79 m7%!798nm5$(s Aq.V(,hت4es1E&0cbe)B$s( lF66eIIEFq D$F .Q" ѓ8\\A 8ىf 1)YF%9!.8qϼX 3n)NXӒ*2;mZFA8J@3 {VZ,Zil\kG)^U.37HQ&M똕VbOj ҽ7[f`3,L/H?/f:NG.ޗ}pM0r>_pigUgnlv9h9: l?/k!)ES=QP! :l晴kkh8sg]EcFw:<ߕy]XfJ}$ DO!w<+̟ 7 ޓccaC)4'8sU@Ea)AYk=-.'] ~m-ZAo`ݪ:wLɟn?;>;{]W!&M{A]\dR1) m# %bAb (IS ?L S?w"ǟF{& o(Y4eHaЀ(yeqOjD~ÇOC'J @ALYJNgn͚DIzx=KQxҢ N%9^fo]@]tEXƐɞV6׏w0B3<-KfK+]{JK9Zk6-/ul|] ~&kҡ$eQ`lo%CHIဟFF7 \_s'yE\HI^^AI+KP-$+t6'}nҗ7mhW/VxWWsXPn,Rq-*BtT]_nge9ZS[ϪIsoO(U8;Jğ0K 2"+pC)~u+;5=׉//bbH\4f<Y~4ϫ:Uq2&_ɰ8Z*PGs(A$wYOӈoKƀcH=fdh kC~}`ְ kg>FXgkg.FP9l_0ClbRE y}?xg#Ϸ 8\/ۖ6yrdpL9GXKv<7ެ =5ebؾʟ QD,f-cb3ċ0Cnx~-1$Ym,X(baZܷ?|T^_dR”pRqxortzޖCԤET|--|"͚ѕDʒXyNӟ0N2,@Vvbn/}L=#'xCXgFX,6U֎z{n)Fvmv]l ;S` ֣È_z$xlIY@r*1bɔrg;bSףL]X#@!4=.P9曣/x`8k/t_[`#x^C 3<67GZE͜!WWW F+U&lkƶTuU :޻{Li}-O?VIc )WnB} ,OA$A۾Twۚ+E9!B +%.:=nuJRcKwV!/}}냾5Ͳ^ ̂:m5B7nl߅ 4bjjxlčkU"<' :G{/>A}k]1(2Ec[ῷ@d:fq@fRM)1Y>ZxYLe0}&|Lp?+C `,\8>WKpXCgp&fU}=Gɫĕf6qju'LWɄ4,Sv^((O>I׺CvY^UaS~C~{]D!!Аٜ4suνY[{3]E*%ZYZt1^&75(@#@R]v,/j1et \b=! sسw7= GȽ'fSf{Wۻ0Ҫ, k${çm>=4❿hbxnNvdvlnZ靼Nw2X' <ȹr ̌@wR? qCfaì ഫFViU4UhXjؔEb%H."6U$J2O;yrg熲]˴ ;]{ Pcma?8:W=}$m,J} ˒# bdء,<@mn8@kGF5lSV?u*]oŨ,KhiSZx4j_^w's+( @!9/3As'Ν-5P\}cÇ Xp^ Z )`[6Eߣ\fqp(\$ |Օ䚍/@r w0#/(01E @q I`r#M| B{>?ȿzws5_/]-h&Xafr°UD .,`:* ( .QCUJ2EteEV 4㘊Y1іLER8;"hwȈp[1G{ Q: akf b`bQs') dFs U7V?:vS`ِ(u?3MR o@ww;mX a01XzLޒ6(HKA%1LH(PƊcEEL),AQU DQFfd1F6f@1I(Ha?n F1L)1Ab/pVfM B"6-LXآƊ$$lFAiD4E()S,fd(Hj"L%Z4cE{rl2b0Qbщ"H*64&"$ 6"e$)4bѶHR%ŊYA)`IDD H,5zY1RRQ"L$e!lbF&(QR& PiFљh"QbFFF4lɨ@TY0dRh#%X65IEcXd)1 bRj $Ih1`F1@FĘ,@Eؠ" AblY"$mDXFͽF" 5da !H|u- dH&OQ> *y۷TXuF#r$g,;T|7xn 4TA@F*;a>qǐ9m4c>+Y-t (b >k pAjA~0m")+xsѲl"^oFQ&ЏcVD}'+~"lğS3<Әo>zy{Yy<{wvOt`c὾~YTwLϤdWm=f`6$^ 3',^*mnk4V9=+5>ǜ fϩBd^# 4F;8-Lgڧ2zv9**Z(U|\`!צlch (LI6 4Q,j",#Xԙ1LЙ6)5HcJ&ԅ EFHm$Q4hѢ&hѢM&1c4b1cMiȔ8{kv[^ש>ϛ/{|?мQḦvB9e߹@J(D ēfu񂁀%fGˀ]χ_r55瘵~Y^Uʩ?c3 OQAk/zk/<˝zN+dʸj*8;䮁ɔѠG)Pr&=oc5c!mLP!"ѵY @tg.hˎ+BL@'2ImϾ# h1s*9tОx?EP*lI樢[yw-- ϭcjq_ (.3md{6~w6``dDkuuѶ{j\# Eَ2p5J&Z/;7j6Eg{D):fH+e ?* <ܓKŏ:sZш3CbC"Z=-C6%WMfk&VaK5M+=.ff5;ڒ07{b?椣/G;?;u,+9(EZ:.o_}L UEHhQE:ggysud=LPic1':O&ۅ!֡_YlQ`cnˍqInqL)XV 31ELxr[*QT'f۵ۦ82l-DJJD1ְ{;muzz,w4ⱄX]mm<2Ҋ(i( kdrÎkU6K©OV Cևn  H2,qثq,AOAw RMɩdݥZb}EV/HX6lSҡr¯)[S ёDɶV48 S!QZ wj ga?bգ%P}͋[ni,弧aCK gG?Y'Y-]ۓ}5 طC/}pZQnYa㹤~ [;] D_hB}>e?FjXt9ļF LZcLqhly &_j Ei>>2]uѭՁ:) ! F(f~~e[=,~ O5@Q;rmcj9h{WtzXa-(aJd@BjDJWV2g΃ײq.h.bB[Hqzts6s%B)f@RHqa6ٛ{$ynhtUܷb.uE;{wd$$E8R uO} EC3<` xx< '@) cUamm wӽzϣ=1GV|bk&ԡ=egK(F%ؤ#\I UyC@h?Xj#Fc~"<ȫ@[ht?f{cevz=+o,b_md?OCZ' (B=jMNI t0~\]K7̭XJxڝ)!_8= B-(MLAAÆ{{[ʘ?7.90ᤤEn3*VfHZBA14k6ۛyPՍ *\9b< g޲즡&m=/o5Djxnc >v3 <>gfoوŖcb|-8)Z_11ƛߋ3gJ M=Y=}\ =U*l4Bt&e,}T1Asm7J96Zfϭ|7~S3/†faϡiǝ)p})Yg_ir* dVLْ*DPx!:5zxhphk`imF(1:iviY*옖լiσqCz,|\vUdѦ2FU\?FZ*A\}aPITZ, |zJNTL/NXHC DlCX9 GAc!S!F!f5yRI%!j?;k^ y! 3j}l^Oq/T\TzΝ/94P>kssݛi#,G>ߗoKct?nÜlMӭg!Ԑ$|`Ldl N1^>DDdS9v ioS%% ;/L]nlm]R d6 $`mƘ TTb@:0(M"-QEaXPF7BJA1vn4!:]1UjTšJ屮U֩sZbĚ4a !]SiiS5VcX##)o ^ 12c1&C9E*dx_H]X8/jM{ AȌ>0_wB8LYuBcLe}#JVCi3I F1 x~F$Sγ31+Ys4 D6Q9}0ax۝ήGܗ7z&vL|%G <.eFV1GcT l8h XW Ip;"/TS*4TdfQ+@q!Pa@Y8AH)JgQVd#9S&<{#%::; 1 HbaJX5#V̪f1^Όs[3ܟbl*x G+s#g?`l=&N({Uٯ>%oxFX[LɌIdblF[p1r?}mpulSdgN7L*i*tYvDdc  va3а m}4{nd!~2A]K6xm h41' *>);RfRmQ=9&$3  ?o;{;깟A [`DL舌4iz/ ++WgȠ?E{2HĄa1|+}(ۇo7oF?\DGYMc+8TBCӓHKQrD~7J8wC&a:ُP\=6KM >_3'@5*wݻ ' Iʩέ ~|7,_WvkAI(PDzn$D1hqrqd(umx'[ۓL9]٧84v;եTbQ1##9˜6CcHVQޘk k,f]aRK7N]r v61,vL4F70߁Mq sX4(+2AQ"2#Jڡ/i@q<9%81 >k~Wq"TiV:#HPE PA[}fX0i >gISi7 #6 m0hV8__W]?}`11%Q٧XOkFVWj~a@'h_^@,'\U"ūdmBefzr \Cg@w|K~ k蝟 B1 2R0x-YJ61A`kKTx<sB* 3k^ez9(|b |Ɓ=3_Wxus^s3WV\M=oOʺ9i$j|')}or12W2?"9F#\qBs&oqqޛx|F J̀ Zt=(0g pZ0ӝ )Q![NF %dxfddo Ps' pptj5Fyy:PR4}0;;+Φ.Q1"aLHBdD&12mYza(My䟑A~07|ÐYK |fSxXi+;řʟKl)OȲƗ9=yŖP~?Elñ~?RZ/\#_|7ag*#ETIbF1$CLa<4pE%?1"09CE$ d3%crTD)id`#lG %eJ9VMm,3 ,U (&V[6emU2>IiՆ "Saهvi28PU-.0)])Kb:Ji-hPF*3"*(-iŶf%n.e0Tªh6&mfLب2(b$ȢB"%$Y&XB,-4`Ţc:mjF6T*Eѕ$X%"lAb%LSDPhс2bXeh&aEF 4dC()&lRH-B cP cQCVŁ 1E#&0*c#JXŤ`*Jfs۫RIJi&h,IF؉IIDh#2Fib!L V1eY&F@ĖD@0+QSc`M`hJ#FC6"Fe2Z0i`a $Ѧd(jFRAYh&HTjfBH1TXƲ4I)1AJ"؅ @ ب2PP ‰#FJJئ2E-M( Ail1dEA JJ (,* ьDe4),&S%!Ebww5k2Zmu4mwFEd5N,]d!MDP`<*V͂jw{%ʙa"AR0(l2y|a.m22q&1\zhr(ċou47U;`i(/#aZTDɀ`!8.5vLv ^ FBشs! {Xp &|_O@θ &BC(%mT7FsVWHVXwX>G0]Fp|d #ឪ;{S/J>?{j>--\, =84gW7\6S``;^pytSmTQ! sS %8 % ʿiu$tԙ:4 A/|T'GqO$&_/G縚צO8/#>VF;0vN\8GP>\=.=:+yl [JÔt%]1QZPXm+O a!15+Tr|s)uZʼn>+^F@1$vB/>^Og2*gA„{ҹ?JAgj=TK1$blQ6*ñ=KˊFu%ER_ð!7&e/,ioV5 D"aЏBĿN(f$Yz+#[%ѳk`FϱIhf;(eG3KT|Y1oe׹8(\ TMҒ(RwoFvgr,;1 %0潧O?YgfޥUJUAD:nۮuF&h* Uv:cf wU@cdYQnٝ[|IÜM "$Qp9QTU]khdUb֬EV+{]#u ꡣxή):,(\.WVU1 ±Db"(E9p0ǡ Jb+B )lͨ (5[FbJADSrCip:17 L5c:0kz5ШЅq\5(ty@#es޵=/^Ǎ018)6(] h_n!焉#@H0@m:́@.^i*G!嵇XO#"CqLԊ`OU8*/RŰ~']G[q:`X7JώF;2)WfwjiA@j@ǩ0ъ]8DγrRW1Z@`7AqD\*֖hxBF ژ 3I-2b [)aąqQf! XM7>?  [I&2SdVCcv+ϻ;!z1\t]V<<Zn˕p㡨TZ zu =n.#ԯϱ Ou}U)KrMM3pfdd9zS򮵊{!"͕a=)wuD7 AQ +RFK길wNZP%k]@Z[[`ܚa{Xf 뫣QQ.<(91X*FI)XWV1=dzχ, H)!#U(Ҏ~\o o{g媐׷Da5̜1l-sda} 'HJJ2ik RPۍazLt6؋$H 0Lބwg}r}\@% F@ 7%CYmGf'~[\QzTˇ8?j?ΕXJB1@2 VݘLM@! H)fz^*/N^ << &c /5>ΪR+̪HWZ aJ%؀8Qc4{Qw^\MZ m#L'1/Ѱ|^~~Ҩ׫qib>~esFNZDRAm?|g/2GUWOON߂IBaLN{m]x3DEMҟ#gB3mK׎/~y}\ y]+YSjx'fT}i/{Ze]Nn;;=a:!N8j`1ZW%(ۮ*c\74 +flS=8`8n`Q% ` Oz*\ @I*"]u9:ߟFJ-˯ -H՜qfnj#7NQj⦇r{\r+ow&ݣ3 n(1APVDɐA# 12dˤa&4maҺg:4A$ߨ܌ܻL2`Dр09f~o/Hi||9]QN6Ŀ'>+-Ƙi6_+{ZJ` ^(ݭHϕt?3n<t15qrsdbDIH!RQ*RY"R(0БLdLHIIutQK)Ld30DL,I &(b :M{ M"AԧiM\4hJ4ȣL#.vnw$2D$D<(`m#IXq‹mX"ьU4㶄¤ATkd/6֕Se)`TR*ڥeXE*Kx΅,0Wڜfps^fE9M[,Pb"*-8.PhwK s2\EESNK?gkp087&F !@Bgx5V1dt|-eN.M~¦.!$ H>?&PL4z֝&1SV%"%4\A2f|*$]MER1]uir0FBsY K&a]u.YFTVJ R(0k0CTr4QBQ+¹X31LY[T ekRjW ق (RTjb%FF12E\fEM9L0-q2Z3 [neۂ99\ie5QQiJ*4q\Zc)jϱsNO:z{=H/?>B,;Y $yQVG΋2V$7MQH4/ DeyRp$m:O* @@!AT@[*sEW"Gʠ(i]HA*I3ВAP֔yI'3\_^xr&Ty I)+zVTijrV.ЎRW#L)L&gwM=cydf^k:\"ŀV|oMr]YA_-rN ۅ9̖6ŐA (Z=^m+w{ݍ@{ &;T7H[٘BdƂ$LXѲDB$)H4F$c )3^(\^vlKͅW2+\0I1fA% b `!ڦz #vjK,v83 &ؔM@@9;1,ormv|18*\,XlA- TE+Ld&8ʬ$np}lr#=F|. (T4Y2#Y-Uk!uPlEbW6MegӇXyPkbURC%M/E'Le@=aDã|1 ~M-9BɫrZ@bfV$DUDźxCĶ ***rn$H&JF4?/yMv%{8}Nƻ [kTfR@3-۹&1cDhEeu3cWb ҶσCNu:Gl̅ 6)WF-.`530}͍i\nFPUQ8:Э-n)WX..#gV-ˌ5i ѻq4`iN.cc =NvPKh}F[L\";euWj 4̉$r9a%JP2MutnCYU2\)n8\*d ` 0p,) 9]؆Y#URC=/~F*?J6P nGSLy9T *;*ʉ`7>ByJ53ٽ3 @?3=8ݸ:x y)e UI-L\#6ZT>-zP 4(fim9sUA@?ykx;:~f"#hZ1LmeeJ&i],BREG,\rg]Uz`DXq.r@BU9M1f\pj;,ZֹLBbֺucSJ#.fcl.#J㌱5T)QR"ᄡX#r664L͝dܠ,v0^~3<^DlytP|v WYu-i|g/]a ƾM[JDX]0k% I yd ޤ#w*[JmQkFp[EC*wK#Rd@0>f*.2ˌ*ʔrX2:j?Tr<[\^j7;J &ǬBO-rh4٣7Eph'VR0D.ID}H=NSEm#нǏp1^(R_. E D1ƚCub:M̱/SW>L_64}fNNs#{-1Џt(e q:SfN~ nsw_ǹqZ@b rM4K7|xfsSp?ofG%\"{a.F2oɹ*+hX8NԤЯqMWM yDdqaeJ,}OsP %mdbÖ!)Nu7DBX6P<9@SRtO(>NK[M"c ,mz蓆Vazqߋ ¾d7:m7[ra: N V-թOޭc0ÿzDJ'0Fu9|s];Ʀp|ǡMQ7Lr`G-X 6l-;Y  S{FQܫSsi5%4;[Ȩrx;-[Gg>#iaJ ټur}:oBLg~דi"1IE)jI&Q, %,0"g"1gߜ{daf~++9)Ǖ>` 0@8͍r {zX~ص;p$GQ}])A@8A qFSIVVi_ qmyR?Z2ؽsIܽđ&0l^n/β?m>d5:]HOt+_[knynwǘVo & iw֖9S4W䆕$*H \ĠBƜqSW^}6.G> 2zKQJ;1dvWG6JO |@=ݰXJZm >Q#FezN_D,ǽPBU,JlѩGkXt@R!Q :X3AqFhЉ73M6]m~ʹOAdak})e ^mOѫVlI :uقlo_2y봵b?),;_;5l q_ԾQHGuK^lE17٧鍠 dRxQgCO#W4]nج{y1rܠTg| r.Z2N3( !l$V8Z&8Vʵ,0F36\DDEFbpjTR ؕ ұh iGFUeUCʼnuo6ۆ&kE6@91ٙjVc*aAĪE[LV婢 ,*O?M')x}^ο!GIêw! _rCUV ͐*m=9FZGFnXaqhP3kU,)YUEz "?Tq?LB~w0#*m6ntFaXZ.2΢afgrl48ێWG%O6Uc"7 O-}HOv} 2i aADi&#cA-h#&K &10XI`IB&,ELTi,PP`")Da" ТJI4i$Fib"2HHP12D# SdaPBdDFhș,ddm&Pbie@&6# 1Lٱ 4h1( 1Q3&c 0 Ha$ѳ@ $ iK04"X b0,CfR&d416ffe21&C`$I$HEMfi3nJ D1bR bPI#1I$$X3"IIR!!"Y,Yd$HQ)@C36$ A4 X_><]e\x%[C.<\|z)& c!bfif2cD3A"$6i24Q0M &0edLM٩(CO[+7}od 5V<9񞅇_i]TϏBB#Py HY:V)ha};fo~3UgslC`66?0%z6٭o!|EqUO/)O b8!qNh k&ˢo#QSѶQ >ֽk~.2>|O|Hzy2rf#gŲNOZkѫh0R{ضq3Ao}Cǃ-MK"NӇ0tͧ%7^1xG۾y9Qz>2uA$P3q^üM/]~O}s=Dy#o  1 hnRcaXnWv1o> E+,;<:lIc2 ^O81 c @0,FH?7o}qó=U:=C[ )z/o ,ժJby]O;}޵KcmF;؜UJgr RB c[ul\0nC\۰ H ƄYGǠςbPxU\ki[~*b' 7ZRy+G{{~M_MrWmhc` 1Ch_f`>πxvγcpb{S0|  U~ 7I'Wq&{kc h\]k]dw,`QYױ~^Ի6x.]cOLDP Z4(6|]!@T>(0Tfm ki)1o:B%ρ/Y@YQU]>S٢lDw+6nݺ.WPeA{Qsm-G)pbI(8gsQsd@Xk2bJ\m{&bوL2lh:2BGޞFG|"f|%Ku}"9{EV@{MjD1”Ns^}-yDLK) "Jtu݈iH M˜c1T#e "R5Hd*"R@WuUW_rMؚ1'֤ܚJ\ a[MkF֜h 5Y9?0o.b*EEDD#M/4yyDRVmTPcɪ"pڱQƊ嵱UmWUEV aTE"jZR@yH~3:I$C(,䟬PA4 '*Cn1Pޛl'VۗALޝ|ۛsCѶ6\-q"*4ei˚vx˾mWZ.QVVxt~r(+>qڪMic#_ ~Gq*FfB>uuc5HAfxnݤ(j29gl0☢2 ګ I(2 ?_# 0,a2襣 z2~;\Ӳj@1dу=gjbm&o5mfSɑq_ޛNSa۲?ΉYvDlG_Z:3y̛c(rԓg̻7Tw"0$oa2C φja MQ@EpyL]&!jzI//j_z.YuZ&YGm9\#9F"_A:B?[Њ`5mF,@1d1 SPaMν?}^[ W >܀w0B|!}?5]|7k5_#G0ܰ&0#hHX=8 1!0b|m [ ;-wgEmy(5yI)^:sD}`pC[p\ v.~7*)2ӟ]> ~-UYCʟ,0 a B:Yk MRCa$H__l'6|S59CT&PLH2{䋋_΢D5Ugq #&7?5҃])yD>f±Fk˪jp}YB 7gbW!G{[Wk7@1cK4j =n7flo9_= B?V9w(T= m㏿=Kph2瘈 20QV]f&ֺhTUOq# 쪠©PbV)nG-E7Ȍ[I1,hJd\vdqpXQ, kq4fA9Co鹶nEӛmKRC-ťp82Qb0d(CGF#E#aA&l02>59#efb}i8XO!B#vT`Pc!'lV1-\) Z̷v*,e0bĺd=ͪ+bcd?>57^ڰ&1ICpb?K[K:iknsF.${wN^͝$6X> <3G hѾ,ݪ>:m]`Ӽ}k1KɅZrrӭGW Y?W\d\'mmK?|]mOKq+Ke< m&hnQb۶db1!CAA~Pz.}N7KkjGxÉ^>) OMN1?9*]9 *Aa W?> }]xu+<GUʵұPҀPD r(8gy}SCd+0pF Myy5m3!/~_aD{yS1? D95G6{QTx+D@5V}[ kkst^R?x7qpى0sF4h'XF`c bɾcZt:Fvt/_?sс $YtL4#[EEV3RRƒ*$vԥԠg <5]” F6#D1)0utuֺ]f,QXdϕZAN`[g@%h'RkW:<@=e&Oku mVs'+Y~p w4$i[ 8<=7e"R1=cH-=-F<ʺKѱBsOwNV[G. QQ[m~.bȉW>#A>zCc_eț1usMxcM]!`c@^?! ጺ[%Nz HmX߰vA5탚{$!=d\4) E׿)OBf{VƏcV?Wek/Ћ`DzuXg|顔e^}?Kp1pƆ06Ѵ/|}6 4fLi6Gӯ(~VOɧ[gӥ{OSv_ʔ[! QBIE ft2SlSLUT[8:}򒣍k.LrԣjVQ]& (lرUb"brs}l!T TTڻgBe!ˉݵ㵮T34 r8h>n2GsGn@Sss[#Ǐ|TupEmiiNְ#"$Imh _Gחnch XN5y^ِkDGms2Q&}2W oD$`ߛ/:B_j*jf h|Iogϣ='csJ^=N~IrD^+ vm gsNC bc$,(QIfؾ?sOWoOzg 'bְwQój73:آơJZK9^s5nsȖp SYRPJP[rX0b6C.A(֠Da@ӧ(ʫ`@q˭+({$f7CTo}6h!7w#G;wVP'7&HQ * l`TX-<̈4CE\M6﫶>s@nCH˞Z1cWtA%6 λJ bch=2̵ ϕGsvwIz cM1O[< Mh"ph11Eug0 bc+|VrKUpjR$ƑQjphҁjF!C. * 6iMd@-W{mȠ"@p4OxUM^P5?߼}ἷ!ftg#R&ݽ@EB\1&)! #l5R?r:An8Z+->V_Mm]?s?7Y?446loYN]TE2(0 m(=v7P\Q{l[߾Ew6w#W})[3Lpgq 92HjΝ}~E<9&JK.`9&e ̙hÖQeDQo-c Ak*5J kv8yR.WqSjM%,Efei>˓a, 5z Juu6ݛE`τ23g5H#R%A J cFp &nXy܁'ʡ*oGY:a UK2N "7sz U>~`$2F^_8u?~ܜ)vbb!ϣhkfDJrw}o@Z %4 \]%(xq$+mMZf֌^p`3vN$8 ?gT뻊gC6M5 cax~?͏lBh06>qͱe,6I*460T2i `a|1!12b;z ؽӛ cwč?Yة,:?U-u7*Yrqm#G@0VMwOs(ժ#ArnXӴ"kI1h)M`-}/1f} UMktpݛJ_Ȭ3˿5AaLbPZcm6eٿKUoA" rYO_ 1b!c,k$$܃LkAcGbiMu3[#LvXjou@;2tlQQy_xao߼O&dAUAbK%'דgߞ9*nj\/n&rQv +PJdW&3J4m~Omfήd16.oft֟8R@'ccbH6s$JJņ0 HPQMxIdV!DGk Yoc+'#{}>W'o7Ʀ$10lcc1{jRiBtp,OD8PN>}SY21uoy:Np"МQQ?PeW6L弃Dt,Wbꎗڦp`b@ѲhwӫAq#qx/"Wm*e?B[_J =]lm1 7 wS8m]*4s[ma"df6bS# t12 T%?_|ߺS`~ߨkѝNl ? B#/^j:g. T0<D d1Z63ߴzu,L111a3 *QBX4$e5ʍ2IQ$ Y4F2ZTXC)DKFI&-4js_H-w[lV[W7m8 Ŝ#^L(R"D7LPk֠jpL{Se޵JaY]exMl ]qR6)T j˖E11\Z-AaVڇp˶o "(P.rPskmͼEUPb,UZ^ɏ 5)-+:lzZZ yF `X11_ϛ/﷜yҌUalT㿕GfR"Ɣ(A1vLAXl |iW.1`𸺗q 9Q.er^g+ʊӥ!M$]: 2[.حS%H JHBM)S in \~>ݽ)4AޜK&XM  7DcJg-Vq +g$+`J)Ex @BՃ7WM}+Z{o~_~ݵpm~Ykf߇ E39qd Z_}߱O줡RmJL`>Y ˇ%-=5~^vX%mƕy8u>y!EwM0H(ڕޘQ+p!av G{dvOUuL=3D j57pplt2Te81sjTe:ŧĢW^ x:a9bjpAAAH1rbXܷ&aTQٱ(vڛkgglī]L;.;'94E"cTW/q8rn˴& ,k*n[ 8"ֹZ3ՅX S&^M7_QE .}뎝~f .ǿiioz+cmYXPs@LxzWȴȩv៷jl;'ygo7 ~dOZ (*\/7_ƻ)B Xtc }1 "]4g0r(higa!\=q8ENcZbw &"Y@AAoR񽾮!ɕgzA㑙wk!q?f1P)|} 7=ftB[׎c{˜9~6dV"(1Fc0wa󛵐Csyghvj2u#/oIhWPpW͛::vs<=F(ԇ˟Q4Dc2(ov Bd1L%xڒX)cm͎N@s"s;in{E@Q@Qb(h`aaûKX񭰗\ֵXPe@64m[6/S~f`~Z;2FkCo:Vv\u'j z[h5&Vpo ~,]!b)u =베^6oܧ;BV QHgm&#{$:4ߋ: qʻᙕD.ʳF"]S H\_uoaޫ3/}ߝs<RAbMoIQ/3 =b0)d <2e5ɧ5c.4 $MIT\bp %DK*oSx۵._W9MPt/u[i JNNk\t0$'qO!ct6vZ0@֌A-~~_TbP_`f8ǒxUWy*T(aѷyf5& BH7Cjl_BQ+b}MNDr_J_''C6l`"|md|WU6V^kMV\nJ؆y38/3-co#I7J~`%x06$cHʂ(Ha LIcfY&JlAca6AHؠ-EBY%4Z&4Yc $RR[ 4M- DDeD*i+(,YE6 *Ca %L HT1"ز@ ,jCX ьS$Fh$A1h`*fQ$ѱ& ,0 C`6BX1(f(@F4) FbɄd2K,Db R&Ȇ0,DE)ifdѵ|qM w۬5o!6_)CBT~1Wl~?PňE~Ѕ @֟fֱئe]& +/w5?ϛ#¶> jԪw &p&JLfmEHT;Zpo89&@,չ=z/7}Lȧ^!XWJ(&4$r;1nҬiMd78Xp0 PDY5=xkz%ϭ(CI4*SGzF=m+ޓ/*;[;=|26d;\vsHN,oENcj]O}cbEHSpCgҘ f+H3eV7B,/}Nm~l^_Y(㑬.d UEqUն& ` %cr(U) #]bfU%j{ִiAwU CR#z*N#.S! X sgtq߃N_̋æǟ?ptŭaP.(ҽV(T` d&`Ɋ5UUq2ТaQ13Rsֿ׃՛x RsFe^asA2pú]ZX22#^N$Rr}^ J0x^ӌ/|]j>?Nx6*n@5X@{_7Bg+)+dE K XaO%R++,Ύ|+/*\E%7ORtKXX_ ldpegT^:@ɑhXcثZ-#42!2V,'C ?]M{4yU(GzfI`ȤiNvlX^͟}x:r#/J1FW;db(D<1Vk2+][k[`EEL0](^=&BѼ靵LPg[~'6|IBb1E&(c`EcF(ѳchmm6;WbO_ Xyo>mp@}XC`}-ƵI( ŬgvZ$ C7t')Zcp޿7^r}hrcN-H0|d!@1`1 zTx?⁍Wyw,} !`1ˮ_+Y^r?-SUsߤu'mmh< e0Wj&*'"Du)@J(1$ߣKh ~< uƽi'[̲'tNmV$]BEu[kgiOxpLH,zH޳7 i}W1b MXY Ȍ%2az F(qC䟢8>>ڇggY sPT=W!flC?l'ytVH A6dr¿W=W]/\>5y<Pllm -NC)cٍw||B 1{Ez_Wcg}/K$}I%|攇#$,U0㪷WV4iX6m-\Tù]3hYk5vRb%bV$MF?_D>/E/SS9 3D49?c7}ᅄ s2mfӇ ciþg؜~`q?&;b[Pmh׽ӡ:㳴ɓ98d` C093a8K@A):^'WR2d;oBp՛Qe^R,1Z]6}x}t!$bp~%"œgmtڳg~Ϥ^:M.0O0fGL~w琻˺yHDܑ&3n{S=2+猱`:o*Py e 'D!]Ew v(Gv2nR!,Ư{%dJ"YUPM:k{U*q+vY40Y΁!8!2C6 (x'83 ss^f?dzl*!O +9uVO]&mc<b[ٲC-[-`&2-FVj d@[b(0" 2iAb0 Or&S_c'6YҦ3w}p$II%;pCZ,2<3Z\FAZ(Ӂn՘] ,,_mf Y`AQ7YyMxuo0j/))ֽQjOK"PpFl, ;HioTa5{=Hd5uީZ !2]ʰ bXgh911by K&'ٳ2v)6қY9a$5_ŴwKt:o~uko6WQIID-F1FH""BDX,J6i2,Hب0$D,U,QjJMi`#cE eFX"(ԑX޿3}vK_??<}ݔtȿ:YwvwQXj4  @1$ @I->B88?瞮uޜcz⁃xrpz~_: =MXګ4c "{< s̰(1cSjS1&|q$~*k(Q%'|}=,E N=*)"qMZCnhb oIF3EA!O[T{ֻowyyj)ƢD" X(#od!H`MBǝ}g^ ,JA}hB BS}Pg,)S#}.]ᚤDqv^Rf,A^)ɘE z;)$И$z-98  lJjN!:jW-qzz~~I 5KP;3L 0u#4]vy N!*ODrQBojS8Q+3`Ec!WXlcdI2X$#%YRdэ!%%KQdEh-,IF`cM2PmE5i&,R"b0БCRAFJ*6)1Aa"FJ C11?e6ՔA1@`cH؋`u8Pg΃=*!Ȕ8y'AeO~µ rNse'*Qz a #A<N5w+ST?g]6Ygܺe(`eg73H-gv*+sfdt{7Jk)$!Լ k:F``C`X3" b!h?f|3-z)[M9u~]&$e.Yp2nWvv #D4iԗ-Y)/ \6H.jlFk ĕ\\I-þC_sk۟y7w~_˫ےj!V_6B6~{(( F[./̽]aVuQʹ?5_#9<9 YZC8|4pa1a>,ov6ɶC|TGWV϶Wz}fH}6RW^ԿZ& uC~ɧ@R@0eu{w(wyNڤ Z\}vi|X|X ?m_蓋0l(tKrcZswC̛3زrx'Y;9Y`}qPh ifJpXx/rw Zȳ %f$%dIVNqpV*9(1! [&/Oiy^Oɺw|#2gqZ*2.$~7^~y( Tl (Ƥ6)-Q6\Et)ň͸3At")Ri-Kخ/5n"" ak#d+ʛ2+)"ѱPillD>jcmf{Shv+\ۿ;]`m͜( 6M$emX*y,[};YoH3M^ kZ:[w( `$÷PKBDYHl'.o~ C ^۸9|T=/bo6`ZlcUG},9Akf5ژMaH9ƍ3,A)_ E᪍'JlBb%Y},,k@m}P0lK^,Joi}gۮ ; \4cy*n$q ~tw9akv;Mo1 JH*N(hߡkZ@C փ l V'[]V[DW HX9`N!$\51QͧŔZ#Mec?Tᘄ/Zz-Ɲ`! G"}3f`b+n0.DF%dDfZSluiTEk%& pEF`3lv@[`n&mbpiÃl4C**S#S%Ya6vF4&+*1J2H3(F em;G M"v6'>'?}5E#8bƛn81zJ|^k\~qB`%dSF+ig?AeO/ SyRi`6tDš6M$cX2RZ5V6ɐUbc6)(4h#XcL`gy8{uNS~=m pQ{W}%⫡=)aJYo&2#K%oXe_Ϋ}ъғWHgmڕi TԐj']~'x7p0q.B%#G2Hloq/?-s܀$ӸVWMK$HIeZ(խclyran_{MR/ܵ*oG ݾ d#ߞLF-C#8ޥңJש<Gײ{B5Q~̯S44f簷n1uTy/ם,E^D6A>i̓Fmɳ]d) ՕZi_~R|~q;$XY-5@#riW؁u^|;pWߑ(tD_GxHoLjSg  bF>f}5m I7hZ6c(Ke$-!Nb0QPAFT+paE0E CPMVMEp٧Z&3Fb+MG7b ;{|}xngu2?wٳeː`(w&:p7>1FOjtp Bu&W%t2O|D@8!uCq.V RxnO &?Aћ.uO(ߦNŀ5 #1Eȼ+]ͧOym# } k?x~7~?^IH(-~8Sv\6JPEKhرQF^^((,^'qċw(#1 ׃0UC66AbqL7xAdxUB JT^?ü6vhfC97r-UP80R n XB1%FaLtꤏC^sow/J";/`01_Y(p4,J łC}Dշ*TneE]mk62I)ΗB!/f߳Uxkwc%"ِ_7@όD!LOzEc]2poWșiE4>N'd;LFiʚ[j)Ɵ\yt,-U؂XB;v(y;Ikhu]OU#Kߣ) \B5xծ'5_`tuEK])xe}ϋG8?!Ayy Z%qcEGHR]{\7]ުs;S`bn2qd*w`NL0"(g,'gxpb-־%s,%"z *{rPԗS !iȪڨ7wѧ)P, :2l:T}|(j:(L|᪞/̽$Pu'&VZьhYzWvL6^Ɋ(ף:=/T RP}ow NsY;[uGs7 z?e`ՈŴH)k'@萲~m{M EY?ݸ#`Q|GGGy-2IO~3: 78bp ʳ^f3},Y՚M5u$`ƹ}f?b}<7L,ak0qBxm-ʼcPCѱ*BFsmz+i/E .2D }G?m?{fzm= q2nk: 'v6R(|K՛來)M TOՊ!1;c@pl~?V)GѰ5٣B f`Ard 1~I|y1xFѺ]¾9y勆LI8Oqɾ/k>Wr)lw0t_ PÛNeF8ݭ}e ,tzhb2 0ጃa|WZOZ:/ 84wtDOk?a= 07Y~.d/岒E5PAw1 ^甠:r+A: V#p3ވ 1&lOb;T}5->ד 0}G^;mZW/NÚ(-\(s{#V֋7M;vL{VO) R Ƅ(QQ61F4ѴZ UefEIhRb~&I@'B[ag64+VZ \+7_9P1F4E&qo?hero>ip=oZ5~ϕhX  l*+FjY"$Ս&ˍRb%$mbDT5@!4X*1 G'5%V<:Djl)0pD;?z2U؆"b2pU3;z5-UH'a<F"pmAцSRQQg?gci,ݙ_Q4Qm`(xM$E"f\)J=j} `ou/<ծ]D:ݞ$0l[l6#{oCBKB/p b""l~mocJҽt](߄Qx {Y@' !:3lF 1Y{Lj aocwcQ*C_ujv-61T6BQ&z8Bd~6I07$5$W[x[y ʏP`N]k81$t^ϥ/%z l@CF"_dܧ}fM+%6zPnӍ H3աF*i5:-QW< 믛6,{5[ŸCWVOIYv3$@EuVS,Ȫz[Xbu ɱWk[q9nPl/P1z_?w?&SjvDJ1otܟE}38h[S C;PuVYф5y')ۦ8*L̺X88 $,c$נWmws1 C" iLdRK`R zSq~.N``ԇa5Ov;E9㔜>n3)M#\DÈV"wf%xZwPnZڿO35e$b[Kiުf0yj,vM-󘜐S@m+lg:W[oi^چ@PshЌ|quO)PwtchPj:%u9ua, A,`- h-XhNT= ƑM&&UD,9RޟExbMMegڦ:IU*l1w%AYB5$煮E9q =^WQ}pM7y3u,h^{ Xݻ\H7%TN6#RB%-+",!d%ݕ,]Dm_aݼ=]$I]((LD`QҮjlmQړ9 *5~승ާuQWҖ)]b;0ZP֒ *]KhѲSM]\<-aP\ \Q0 FxCúFGcH, G}};Ckw]" {kḚBX}:PY_fe}aryV{Oj1yFG wZ&HAa2ثב%YÎ֮5MLO9M(Γ5Rߡ[|FM[Rmz-j$.kv^[g؋ % H8 "PXI/,d;>2YRS|D'g{M$U.dbFX4+C $>X½,Kg~C/VeYK|>n"tڊmӥ-}W)hQd:P+g-h36BCy*hӜ:,*h0j~zPAGq;}Xm %d՝#)'ƒM =ĻK_IJ2ٲHz==?OEcMߤ'V~~LWA.pi@n#j2e֖.G;%K }h5t9lX6 kfkEj| wK0% dt_K4o@>87PZZ I!vL:>#6IhMBO);\O5Ea}Ziλ\R*pXJ:h( $['ɥBUN]ne ho1pMS|S;lE=o[q v9#38ab4a!=X~3Md^ĴI{ 6wQ^I)}qFΉud(K+ЩWϣՠoz?ػQb:lB&leeTȪ-Oto呴D{<ӁHUAƥ?]hJ#4А7"G ]e촉ר{0d2mBB5z@63Mh+l(b~q*:T8 |:?]'Wlxfс !Dzq S4DR0^;1=kD71Ow# yi!R)ҷ|L$uvsN ĶSV \7?XB=a;W'=_ ƅCCPqdp^\>/q/̖YkmV\WeW)?KU: /:y5NXho=gрקo.R\TkBcnt,Y&PS͘2P2C~evO0Ԓ|.`1We&Fr_æ<%55{==^6M^e%no'?kp93q>@/us UDn)}{0-v24U5e5z mĶʂ}D\7;<.6ގI1``a6-vGEm8;E9ě)imN '* !:1C^@0 k%~f~ 0 5L'#-z//W}xe"xy LǠ??DQ[_n6&bj{?ZtX2lPzH6Âd6xf3RkTY"˅/ժWhn۳ ȅ $! jb}q C0:27W%U,z֙TӺ}?!ԥp`RB#S@a¤/4ti4nvA68Qs3O yhi˦^z  ˔THl7V//BQutJGO ]׿itHGvYK7d+1??AlCxIC0pbJOwX6!k8}';&%w5>7E'̖دZ4X٢7a4>x_Hi!P,DjYb:ؖ)H5 _I}\h*tC\`_ːMao;LSy= oP^mK_#z7bѻ;řbKa%iW?q2勶p)5WtI;1W[”`D`|_Z#޿fK.q[&*5..Id4XxFeYR=ʣԢIqaʼ o= E A0 '@`<cCJ> f¿k"!i6ixQ]^yZbki-ظm$wL[thKՌ+/<<4!xSϼmNgY/3}7",\z4uėc?a;?Jgо坅kiGb@ӄQFVBB4 |޽SɡiUzlDŶL@ s>ЍTu|4MRFu~WV$@Xal{:o ɑ`WWi M Z`4+֐к,?գ r:JI5[ `Ńl:A:h5qb9BH_NNdP Mٻ1v~% s'^oӝL}T!@Rh F#3zKƂףT֦dJpW3*TH< =9V)2(زOa & mEm~oTzP5KVGeWל{_Z6ki,Z+e-i1j6kcQWM06Mm|R!U;Կ|d il-MS,0T>*9=ebN~?B+92! 5 $̚Uk7k)|Zpe,=cmj_ZR]6얝2m&x :1O%on#sd35& 5҆yɋg|ф|<€G-Ɂ8Pe4m  +4g u|8#+sS=YB D EDf>:"`@(4Hg_M?u'ܧiHV ߵDT $ U"\YpE(g?ka)땭4 н)VV5gkEKا)BYW!ٝ?Ȭ<'&k%V֩4R01Xb`Rw3٧[wj)''|zK7%I_s#$nt}'A?E0qLwPɬ`3̋mK0be8f١$Tal4a MS8Fڇc(u~4Ƅ @1i*}h[&4挰9$U=}SdQsrơ_|tvس(-n]ܓVuk&ς_^ ʔj0fjT Ylٯ.Pl,~_[nYT ='UhU ^V!08F?ѭ=hUVB-HL ݺX)<݈3>N qbY|{(mxf0zzJ{ΐM @~0#v17j:#^z?OR,Q'_8,&uoΎ~Ngh5ϓr>/"/\gq ` V7Hha8︘6=¾iMy{}ϝY%Ff;FLWRo󾠝OO3IP_I>E1_+? -YgB'a:! JLb&DAUbT.Zu|8o~ ,,daxXQ8F(W?6S3%/#BG`OMFWA-`P|(9ʒHP$lCY0Hjwy&CU.$?(TNG}=_J>=$%2R i:Ӡo..B ,?w@4Zj7dO?/_'=mA4BG.;BUZ?5'&I3 } WbBvrЂn ;Ι:TU X_0A]w=ab%ZˮME'g_bIfh@ٓyT B*۳r=zR(Epd4d{ (B)<67O]۱ǮЂCɉH N|۝CYY!g{ɐ@82MHs o^5݊Ia4.(4;"Xu\j˲Էzɀ{%JYmp\hBbW|>+ƕ)hFWF+Ju {,u>?7iu}# O|psdl`-!#AA[;&kQ_zn>&VK%qg@ $Ғ 4MҧRjimf혫鈽b 7MXw]lWk纇ac%y0P'1o/*a%cۅ@A./R2a0XbJ8Zkp EXCBmb^T?X͙;HHw :g+l&'M')])98 Xw[O+: |D8*J꘤pV~dDOPm BN]6`=޾_njwRtiWs*j}) WI  POnOk뾵>%6chM!Lڲ:W=&KݙF49>4m)8 8$h0 ]cxшcˆ͊$OlYBQgj ]2զ'aVn,Gׯ! Ie?K; *l%8+nha(0 ]f () F̀x .( X7C|fbzG:V$y3 x@CV*=UB">7"SjDѵ@B*T<&!)&+6_^Df|_jʋCڞlR15زZ=l~ .>qM;)&QɴXNEZnc ՆIJ t>|}aZhMv{mkƟ=>iF:0Ѻ84d\[ݿ|7k2>tY<'j߹GWʞqܖCЭ*bLE]nWPd$[Z{gmUlt109[%Gz3hfհneFaaOs <LG"ӻ;OCDd.蘐(cJoj`Ow*c&Gl);N51VM$ .`u俧!h֦H۠sMSq\ߴg0iJ ,_{sJxlBLd'm+xwXfxk>\{l@M9{>N ˄[>fE h5R,5\;{']`+w0o'欖vS 9d;9rT7Z gZaMȁ喢Hv:'eݚ"Mf殃.oue#jti#N^fFǯZ[)`e.'@!-<32)ENur;ֽP8^P TԤ0!970`uhސ-oH@O吧Rak'e|h?,~ 9!H0 %|mN' LxIc!wՏ~/<:U`mr /[哳Dhv4eDz٫ew C֘Rj$zRgԦ[sܻE%iڰR7Xf |ڟ5Q7 Ѡy;ܷe V(*J"6Ż:n^j5tɴk25W}UѪO+uE dŦ$UcF+ҘӾ~ji} *$Y na+"4l,%4)}|.ɺGE.n(G ̫-6s#%FsdݨK[Es (ܗy ivֲ;6~y0jk\ȏGӕփOu(+Iu :SFaN"@C5\[!)ʷWஒW`0s*Un o;yUM:G 1L?L'( خ륫Eh^2LjOM`P?mPF~:/-fHf$lUќ0&֤]O㲄zrQ *- J @&zжY[oJz?މ:cA#"=aԋß8B$bAbP.Ԯ >! n? mt>[Q}ۀێֺ-LK[1HDXJe:Ul]];1n:_'oT܈De$hbz JA:?gvO?ϧ4ox4._pOO6\>=P?L_@Nz>|;׾ӑyHL(cb+p|.㧎yـP"fWTz Fdb%h+y-F}VsyVXNZa).ɸ̂l(@nd]قrJ/%_@9A薛:-KζV^Y%n_?m:'@~c2O:UuӣQdɴ0Œ)X $/~cK~]Mei#ape/.Jj(kjwTp#NY=p8;tu=9)IXo"K#)407xPseqjyh,WV;|j-%uCQ{3_,eB=60,wDkbyFCϝIbȬB8 f,ֻuRۄM3z<[ѯ)@VTm6.'p96 n^##2&$z)P@23Julދw f'[bfߜo#ϭ4VnPM~'CyŏT:·DlGI_i)D9RHEJ!,y 2M7Bb !x~_>TQnJW3eڿ Easή 1/m`x^cٲ$lfk;UAiYؗr&^HrLB.C 숴jָCɭ2iI] +A ͦ!XiQ +GNeI er膅67t(6?S_+JkN]M~rD`7PU>{NSy6DE*GAHrD@r2gMd2[{;A4=Ľf䩎?]fh:":#ײWuo}g SawC ?}ZY2j52wH=}]f]m^XphK4 72WmL&"Er_((_lA.?:NJ@04pvEaER>e& ſ=6{xתv~OFן^=Pq:-S=L?D^4տҗ~U9(wJhұw.!ÏuDk4mJ`\ DzBǀ`5 sO2,:dsO'Τϥ[HHBLbz1iSx΀%2 r.+^PNo,U'7Nz1:yPݕ ^=&Nh_pVVP73qԲ fnw;67n-EM ,.}4W;æy4wp )mt'x@"&**^NV3^(5r[s&*]uUKZ \&tf `ɺV{9"@lrJZYL\{hX >TE6.V#_ i/ y3*\\וɁ.}NCLd u'hqjts='qOig.l8V l?RNƒhuKUA{j5.H+HS!0a""B:=4[0Y3@mf!2ؘJ a } icXfhqNJ}_6Zg('$ɱA@׉.uLwk2GjL%S",bMUX[' d*|*'%DHۢ)71PƺU!fC,6+ ܸr} $XXV r-YƩQj *K֚$jAVeR>2hPAL))=KKCAړ{b0[ VFAo]\6]ϷP5URH8u?)%hHC!yg/.Pդ'Hq _;;bϞj̔-jܬKOE,ïd-sd(n:$MZ'`qxq+SAGvTE.NHP& 58[[7iȰ7qө$Ρ;L,xt\Sny|uft@NZH\-r6"#|Ò>m@bxaT8%򼃈P$Qu/t r%Ƣ֌a5|:Ը50rnmLV3 ^cAz6,6+G6{p.md ;Z`)'Ji}t8HG \*Gu/A VO| VCs&#Rg&g\@0jBw q'VG*RD4Q,}m۲|9OTb#V+C/ԟPʕLᆟ]W.,b !/df9Kw%~}uؒrtnb3DH) T[A <}7οKe>aE}얂Akvęk/IYv,X+k:X wܼGB21D+ ,!4x\x~Ρ !~]ptɩiOnr=R)^zZ"& "0 }Zn}0uA>Ŗ{ɺ5wATf6DY)7xtIꚬc}OEW"lllZTHfc zU, :?}7ҽ鶁 gcuŃ}82a+~Odd,K^|E @)8R{]̆X#$waR3-zy)<ޭ*G\l{36{aś=zޥ-]p8,oh#e@rRZ;SzQm^5$6}ھyfw>f볂zJ;QZ6˿ҘMvEývZueCCO_ iw:<"FBTa|\QN&0ɐHHa) N28&զ/U+gM6dXwOmI(K􉼒EZ>Z3רEB.n;P(p)2ߢՕ'hweᯈ}-9Nز׬z=fh% m"m&~Dj( ԟR}|̡'%,aڹW ?}; mx쑝&Y; Dk?jWѿƹ0~i;Ca״sBSj TbOL%ZAy^s46Ki,Y {.` }Bxf vTYA/m(mv7Xar!]`m>LQX\˓mI G zEGnIafYF+ $⦤A^5EPM;_  i')ek)<~s Ą {= g| 1@$}HH-Li|$x~݅qS8)EL} G> {zy{ewZmv)Hc,)X~"RG/~1 ƭϧBy<#3'Kb,:m:ٝ<) B5l T%A Zb A-}C*>?{Rpu5~F{N׼jTDNB<gKԥdl YxvDK [< t_Θ%&R3;bg5:Xu#~L,ĵAļ#FgKzV t&t+jj*0kTD b1"4'ކO/{?A"Jf@cыDeyJe7hm\`'ϩeU,nOE K BL޶П'OV58eFIH5T !VD2ˎ"]BE'7@r9SV=yQmd4dHոNHRlSU;M>^15tB` ^\oGWMP\H_t[ LO~7uxt?. 㕛|z`BnZ沏?7sƩU!%v^*PC]QR̹ >b3ieUE5鴎Sr/t}M2~)fB2lRV6[ws=r!@Ҵ;@Һݵ,8 yçL;GxOoC;l׶{Z;2zc܉4F<^m7OOHw.[+fu緹=Sm}>Vj7{yUO>lwϫ\pLw=Hdo^@vF.tz< 7=O` IT$P^ DsW[>Fy}ݷep@ j N-kx=R7rھuUMǪpGۢ8v@(Hy *;gޡ<w3yeJnޠZAʠϞo}n H}( Po[o{;H@7fb!6ttsouۘPsǶ ,­>OoQR<={ |g|v/wOo{ݸE{5 zs;\T 0wϖ Hۼ޽o[ZTTc 45۶ocL(ʀRخ ]iKeG-"%΁ U@jnsO@ם˶iҢ FvGiD@\@̇z< ϸC<4&h L 44a2a 4M4hM1O@dJ{L&mڌ@@ hL&5dF"44IQC@hh@J i1450eOҞ?FQOH &#i范F4  dC &Iꔊ"iD'Cŵ@I6G?;zBΎnv5t=%ӿ;C>F~|9q2Da$%nE ,5x?IN}^оQ"/~!Cb (RJţEjS" >?W]husQ [i]r<^4RRę:'ng$Hjd$Is!qD#d Hy}>T|~ x_<.B7,2V]5r8.1\ dP8[nL:M3C3SpKɷ.b&(/mBL^עofKs500)̓9LE 0o Jw3|"Ctr ЏӔGHAU[kif0$$ )L@Q`"HJ uE3u³"6f: 9%+"ɞ39Z5wm4(Y"* Gk1'S \ s6p6o HB&dv\3L񡎜b6h$/`bQqaPC%7xeRy,!8H7с@sMPyɀ RR.жg/V\: 'f;C>/ TSUR_On|>27t"|,s~v|M9 Ɨ]3.hHV`֫Vl~BD@00]zv]SBS""(*TEC# c+e MXɷKh6&{nL.\i&6шF_'|<7F|;;/QՈÐQAz;S]2,"$!? RD'T k&J0PȤ.r̆Oʵ+R#X*zmW99fS4kx)Dp!6QfV2Oz=7W(wj.eIlBl4C,I Ȣqcʼn]nÄ 6E!1crE۔m ~o0׍Qxy}N*%)GJt$1rI#UH8r&&`TfbF!C5B@xIkƮ+2HA\I4o;$"~Inv'8œ#Tosͷ"PnY^D5zzjʫӗ516P&$P!HHr !ԃ!0á .ޭXL+bk j j@5hf@P4`|5n)J]BqSH Ta30p"g grںVCj+rU L7k{P- s^^ U \ܚUߖ όpPS z y|`JT4c񣆧N.Q^[9!qRo$OqA&ƷzApTB'9g x{-ʝd05"D Jpw.$2My|+&7!˖>4+ɯ*Ósy}M}) "o";c*VܠNЎ+ЂQtc<uXF_{oюysKgZ#2̢vNU|4DZ~~}"fG["Ȩ@PǕѻMt_]\掶'jM2u[FO(?LfTXvcѼf?,IK'Z d I(FQ mh d^nCh˥uH#; aF񷥪j5 Epb*A.eC\L+PȮ`jKl m2Vf j }V CTmh-QXchZ6ŨF6ƢCC$@," Zd+D2;ahEV ĘѢ7r(yvsmoҫ }gךjAIbj5 p<%GetF2 ̶"Ƣ QZ4Rh-ccY+,Qi ŋc1ZKDQEQkABk{jThdэX XEFQ("J5EQ1ll$PQm}Ux/NUlZ=Z kQsW5&&C@ҋrUEt ru:2MS N%CU-9"EAbz^`rM6`odxLd?ǽmmclqSdFpۑQ `g pj4lBȂ eeS|b CC]tzj@=uNQ_@A~?\fa{z'G|v0mTTb@!P@7?q0 +8:*5~Gf?+wyGTd IM)Fh6FHAHA#S0I#!ݤ4:MIXuo# )a Tʄg;%q'Ie @t*Gizǫy}?uOUG"5צsSmH2\V !HB72vccA8s|l1V9 ahb+n'qTT91;LΞٵ'SdO&{>{_x#tBr`Lå+- o `r$)%0hӉ(8wH;*{16NdkG#\:{Fp$Vw01EUbT*6hInQh*ZdRz~sDUCD$g}_6>ph)0ȓEVV6jdBPBO $嶔ruQ̓,LCb3M!`cF#lTTZ+F(&N$u&Zƌb1F_mhzUzX܌Dlbm\uu(bb 7%bD{z=`ӟ0¾g_f J'i o aJZ5DlmFTUF",bۉjdbBvΫX]Wok`8|BxWG??ItAO[O1} vD P:N; gci#{v;KFG ?s'PD".S u+ʜ;"YZ٬$m7+:E÷p;!{5J䄋Ç.Z䊊$FKIFr,49{js\-;$R["jݚqnpC]TAMjdfV 1ùFXqHT#֒q2e^" T.c29;Lm}uφBBm$QCF#E i2D-[| 2rvXaeG-nfI1qBH#,qtp He CwWY߉ȫ/zˤ3w1I<ׯ CqnkCsj0y`o~o_|V=O}#Y;]ߩ kkk#(<c?̀9G/},6g7FvxWӄU>b5uK + ;:V9< W5#4StD40>@uWhq﫠S@WcJ=oc1;0Cδ+MlOa}V:aL6>`hy+$hAk )HBE&DMJ̶> m~H(մYrO=&1Xx:$In6W jR `>SgQ_8F{1V\&)\% j^~ˆl5-SEOaj:F(ar;:ru, O^b(W#P Bַ1 }ّ I=.eI>}`J1 " SljQ ,z!$:aO}1cnfHbBE,@UP)B ,Z543{PSTP sA|ۿ"; ǹt&ADJ4ϼ{МJ6oq7ޏKը<;}( ?@<[4B,̊ ?5\ Ɏҍ"g}Zv`=N/7`DYn=V .ϙ{csGW}OG`aLnn0z* Dcz_?v /qd4^I0έ\ذ L4luAFm&!MFn ~ԍwȿ7S79>vr+)M꺯 qyo E<0{){܌#ԇ=ܣMܧwLf {ev 8d!"힥MQpX0fX5&@mSSɁ튞8\h7^;95ȇ^yoTmwĘG&2 jQrB@存9($a&-!b??jO/r'&JPD)i&DbnO-aw2sȵϖ)Jf׋r1ΚUrMnnmZMpZqsBI຃$C!h5fL7+Ϗ5*_i + 7L%BS!(V0 [hw2Al\rCxn V+1KͶK6W<|۷@E2\{Zj Ɵ# s>}6Lتp8h/n)LCfD8ڪЄ3b82B().geɃ!Ֆ0'9z&doN1p,`^N VF$f<r̙;%) `# .\d!Y ",k>la¡<]&qm;PdHL!!qԁ&W3"UnMjUM*XMf&Y&E#G_~i| Rf3I>1/|[Dp|a@`( E!J $f3+Nb|~ X`$TFJ0Q%!9-*e BFG"IλEGvLW$x2>k5%fq6⋅X&RIeȪ# Dg>ϯ_JYiUDjJhuMpػ@,}86 GGWSW+7tqx[\SJK'<TR6aT\grr31m52[m2S7R臋#i@M;x͈K|3vZaٜs8C #R$ s[u8)CPDlMQe- <7#i'#QA 0qfg00)\& t uûsS&k\sQKSAzvֺäjLH

/,|+ $(2(h!Je),6k:GI7/K]f.W:=y_Ř$SeN-, 0κ&nj> vRT_%Uca6v!>"D!ɳj\ mq G@U~"k3Wt{w#J{$\[TN7hv&;DE'xߪMˡ`|s7x2a`@E|v Gt߶ws%cq)0DNM&๾ooNeɅ(9+W6vEB-}">Ћˊiq,a^zH*oqٺ||9( D) =b\!0B%t#@@D10JtL4f1@L1Ł.K'Ȳ"`f +y^1FkMJ,;s9xQ8\|FIMt(oxXFՌAPH|i{*}x ư ѹ68$ c\w3:*g_@9a4"NNssvu}th d3|R",O~{}{3xNH^"˜¯k<̱Ȭק5t+׬Gc'uFwfǮHe\NlS9((Z^H&L NY 'l Od pY q6(crs+zӘEdc# pOzYd5DPOTR/;N@/$ԥ 葡8d!e2&JBc _N/6KJunfDI _Y_0%F %~!P!Òۮ4㒁VnlOoo8zRJl+`X 6ѵXڋF ZESNBP@H#Hv!APj(E0v'S ^/q<&ΩS-NW8l@4r 877IN 9X@u܈\ U7#MIN&' `y㤜͊JB_e ×R2DO6ήNGA~~De!].ozGQc1d"8(BPP7 cҚ܊JTuEUxdKZ CUdY{/0faM!ÛjMޏ'if CqR9W&Pk}P- X^mm|8P9d!|lpoL-S+T-Ĭ5D8х?Y;=x.3~D!b* .%"/`PZ )}=aI6lGiuq찒Ei/oeC3\NXP`6W<րeSa@Z =S-0?g_K:}|(! KXX/Z05F!$Oof!n%!AKQ-h6=IDA=۸lgp^"fh#Zf/LQad%*)z]wߕ6+>dPTlrL7q wK]!^;F˩MDu@B2 ^ *VQH ~>=T{fz8PS8uԛq--"PQ P3WUy(r}S}b{d_Ծ∩}J [6:*r{S @6 N8cowm 0ז}G9 йUX1'myd{b$pZ4a PapC(" .+fcgB@:w: *)meUX@5 I(g8o߂eClkM1 RejAs9q/tR7L8R118ysw'+#c@nl8UPpۘTX` hH#_O}Ib:,l `־P]>6O N\US2̇IMYqPxT} ^u~?a;49k@@?u]\ |˩/;:$H0"^p0aaf 3:ٞa{Gowz<3D 25iÝD (-6a k 8( 81 F"Z#$B Ѐ4D5| >M'~ w1Gf ֞8,I§漫H:0"WHk@d`kCCB J%m;oӷӷ0rm9W=n12S4 WUUG6S PMj/_A)ThR !|' 3A C  Rzyg+dO;u귶z/iwS,c݀tb_5؎Ώ~[V[ 2~fg׏Β+8 ӫvajrZA# pZվ0`g~dAL+WJIK6 8b&*/qôߠρ`bdJvd84hpȤ zyFRIj6*3-~uRXTV,6R$ SdMxl>im} '6.g Q̈[2=c:Ent BBp tXOIyPE ~>΂;hh hTBB=A^op,hRkF8e7*!ȂI ʘ9CuJNAϿXā'('>|A L>ӗI3[C{)O^擺)$ZrO{iA/grY`|<~~>`dGѵ#1ӎ8gg&:AJv!!SF RQS4myc@+(SF o8YX%I^HÅ/ JiPPPj%ÍB`KɊ ܁֝#؉%!1+U/5*`v&flF+;y(~?/686E/ wD s)Ʉ>͏ 0pl~-{b?^`I3}AbChw]~-hUŅNXlx:rv_c*OΝW>t}|8&흼.G30%v/=G?E8|:6eE*" ! 0j:YEDdݽSΞEȰ0 `]XJ1Q[h60ʁ `sI~CB B 󼗤=.>wTQ+!?=:mM+HO:c};g3dzaDygnW\;$,e@Y/X.BM %*[^jM:ڔӴ((c-7 .zjۉkџTP3 b \Z6TDbXsg^gew՝Rz=}_ x|.?u#$EE2 4a$P@$fPCbXlTXC$mLQXS gYdnclHTAlҗ_wO<;Z,]փ5b ^:L%^os_@'f׭wEB{ w=v(Tw{|do눒@"-@^"ȃ.&潧5Z3[Z9XzMqn : J`l]d8**V(`Ԑb#ބ5|4t>8$NQ|H$O΂;` ] 1RU8 )(1q>$؊+#PI X^ qvc3(*K(d5.}0ŚA,mONy@_Ega3ymu"!h@<5;нD&#hx{! &w{Ν>-6)FH0sOv(aB(HNB{ z/ѓohAIe+XHAL##<|qQ$Y-EuVqu *?7/doug%$2#?>MB]QIQ6ٵ- ZXiI98BE#ӝgdښA1) (gl⣄e<3UA0qq9tu8/j"(%k+JA {|}x`9 A#κZY0LA|\U 0C5jZRMΒaDX sbW=DS҅i|ٛ\$ Y|k{҅P 6n$oH®5^yc~n (Xo_ X 7daߗ0A74ga$U8a,ZA53oie XC0-~V8׶8 "B)2`'uZ.T"#[x }[.N-66GcG>j5#wn+;C˂ `R~}u=n@$9؎cH ~[iG]~}Dx 6:yVof,HutHeR˜׶:ZYfN4cHр>qbh3\$GWq *d9p@! BE00v Nfhc B KAtmUrrvjJA1Q^@A$9@xWK52҃s DE9~ {3GZC\b+Abs RC bƙ%ӆ;c Pu)F02hn" :34IͿX)MoDCa쐠x &I#zo6/Nhu%!Aߡ5NnT"1 K`1T\6fE3obnvdy&t]ꉪrx>@V>Hn;hS2D(@]Fs'́ǍAʻcZ fT]x.^#k!;ؔfΤXD\BșpHYR\=w,̈́\vm,^ܑ A @$~}@}@K06}.Pa1iO &]0qoaY4}ښAXCEr1`v<]CsxGkpӱn=< IV2-9ęKF\Uԅ# h+oR8C^IK+Zrc*@P"?פ' Q1%֏_7}z8gG`ӎen{1J((j&- wLTPqW!>HSf+"tf 7 IaX5rFfm؉@oM$~"㿒f$-ZDx;-P v)s 3/8,Eⱌ ~)! sqJbkq(lU-  (XCq€aZ m"fSj{ 2 yzp m`~.^v]vj:jtP8b`0 !PtgMmD"}^}gxaO{} zqӬ8tv8Wumߎ^GNǕAD IP&# #Q]2;3l_ywf8幾q bX@$]uR D|E1oL Cpiu#aʧO*hey|Tɯ`vv6O;@@ y#8kl.+/&hh~*0D{Tۿ>EmFwB$:>4tS$jï '-Ri˧ja;q>vY+zlݟ]k5r~?LX ƁhG m (59 1ӄsK5bJ|b(21 13`6CGQLr&. -doi`.kaPJoþZ$$R^ "hH'%c!gt#ZrqA^-czތ^ٶF *P 7k - N?#4DBTϐqBqA@Ū_QtM|+A-gBdX$!QI,E|K Ѥ (:Zl 0*4Eje F N l`Z&ء=H'InFMݤAd5gj#&; l laDI:h;uDSU]MP~F#漄õCbj79U(s0GT1yK' >0%v/AFhFvBUZk =6fYZ6ȿy# 2WOCryi*k88kM&y>C~;ƚ~uc[[Tʎ D!cB&ˡ dA${;S5iՓ/)3t(ph 8]AE)R*4б6\+@aڠn"8Dufx}$Fc|>W3;=If)\UL!c â{s\L'˳i@ј36r7(6錴g#AA4l\e|MuuCuԆ@Oa9uY "bw*XrQteU@zg=$FWu6>OG߂gYb$+ cA&9"Vd{מ6"޳Q_}{g @  ᧫͂ģ{=\ֱMһl=P&"x!A7~9(p<puk0512P (` Aq @ MiC@DNX&r2TMn.޻!'HսBqNϗ(OpUp }=+(L7a ,O^4rIFsO9cZ;;fߔA Y&iu93R ) `RkdrI!]zDfYaF `%nd/1 ZЫr/Μn#$[z@m5qe18"UWLX*&9 DCPIo<^v49؍~wX,1NcA˒xZp euH2F)(QJ1,V!:]T%Q"\gF9%ʏ(&-Tߞ nt;33F>f/jJ:@ ks`4i4?| Q>(~p~חs\92dIjo]sE[ @ʣ`l6)%~kg;m;t{ZNݾ|:~b.VR:,y@a?ķ U2$*?q9# f0/@-8Q*ټ1pBH6S]||i Rayǽ;/9|ѫU\ ܌cA4c9j|`$* 54)($on@݁+$ܨZ;ϓ况v|&Kt}`S MVMXi0 .P޼Ly|N}4ݧ0V=RNOVOXHѪE <}V#Ӡ'7 r #Cua=\VCڋ{0 IEZO6GFwN0D"lD^"Sˬ5qjb]1Lҫ fAgw <׵t(!VJ\^_ N S ^W1ه5S#p[Awp[r`GDTcv:P+,SޫshjhQ.~@2Caa(éZg|,ܝzuZ^ITґRPQ " HޣuX[ 7ƅ̲ Ҵ`{"=Oﮇb`Z!N߄#K#60o=wpEL>{@ny"!%)3 sn)ldю* 9sBA|_b|x>Ӷ|}'x{xIN02 bRip׈$vA_$baV`a\HY ϓ{2fׅ%Ic]6'p ƅV(&ѿmQ 2iKm`a~?Qm\xZMe)7kBZi=VXr4" q5htCP>wDž"0]bpk&PEL`WMK /n< QLQ׻@C6BN PS%*oͶ3d (Ϳ-ݧ,8Rq'ODQVhl!Qi` .ܒ6A;pEIჍ~ 2Lbsaذ L0$ lx2! j7_zNbs# Mխ[8:ǵCֳI`&AFghۆ\,^\zJ9$r$͇P fAv>hqG'&460DQC& sp6lwBЛ n[WVE}+=ŤKѦ)@qɒH 셰a@H1Ϭ6 9& s Rkt%u6 ¼52hm0 ^8{žF'AFL @ Pr#KQrBao.LaQ !!?=NT~-dOթ_GكftH]@SZ,w?E|r҄C| `M7[o 4~Mλh\@$xar8wY4-ɦId rb(3,a3Xpk+!fyQMMSJEP-*Xy],qrd(Qc2 UfؒsPk.F7Љ@!:C+ְe@" #3{@ s6-ZV` hmH >,J53sZ!QzΩ A:~(&11e/|(M^*q2eQPP)cЍ6@35_ (It!33 x4)$=1Ncd4U]dP PL@&[ ~._06DJa`\&@:V9wF"`skK\g^6"<2>}?b{JWoҺqJ#[__?rqM=ν4'f#viO~3dO"zx?F  믞-`o.2~қmh?u3< q~҂!Z ocL< 50 Q|W,˃ȯη9˸n:-k[l`_Y:^EP]蠂H  +q0"nS;rⲩࠤ>}&}={s/n2 #%lsBd)[l|@O~rcƤ &j06D,5cK9Q$,L^ Q1B勏n1 `1H,σUQ012[Y/ oa|Ǻ^Ѳ!KɅ1gzjǥiA/l8||AѰ}E7~~k\rJkM2rӬo$J=84#>)oKf7Zk%km'Y\T;ݐIFLP'h;^;rX 0f~NK!m9JVz(.G#yqH  ֯'A"GKqp^ٞ}3Ɗ ϺL5(> 9h؛vE{ @ԏ ᆰ@8qBWDHp$ T_'SM:\us]xˤE1Ŏ~89sԁDAtփx[nW![AV;;q\NB۝2:oρ9wb 兄x @΅+Gom hrž>_N(U j{1Gޱ#0nk d-=T狵bb!(h-"dWӑ裊 q5 -+ȶ4X^KvзŶ3=\LzNcӔM 'lxmݳycDیV.+YQߛm 83`H fdEW'k \:>dYzA^c (}#M#Kȁ?CYY>) ?D Lߕ#u0u| FfaFKCwnR; IG`[!֙Q-4}3; ۀ>Yg#wK qYԿk?~>CL+uf"0ş0{ %i@ Hœ˖Q~x {{jbdۙcoW?/. ξu#Odž)Ewul{=ERU4QEcIk|mzuXҲX, L^rB3f kš(NiΑ]5B~q` a&LZܽ=>Ag .]<SC2O:m أv#܂f:JSq.xLt<0ՠybs#;4 ,.U fo#&0n T~dZw4mx ]r[&S!xs0/{Q>wL?^kb\R^^$VZ8fGδis` 2% F[ h.8OEb<4"_tA^˴&q0s;@ci&)d<IÌv}eIepe$C< `r"חiQ+3q8H=?b܉2;@r~m7 K AKK[{PI!73$ aӇ/^{aqd>]xΫm$vMسȏED5T 9 *) .YEȱeDܸuCVp")0CGn8ڦ!"D؟S\A沸z$*l}۹==BaM8es6L `"$Ժc7هG+Иό'^:n?c5!TTz"x,v6TٱFؾ:?g;K%ڵf,XBĕĂ|8EU (?{1P U*oL) (* v3f޿;;}^ m Nv+o6x!Kd<ᖬB_V"v$ц:VpL=/dk$4=pCLbW!d\_Aw-qZÖ͗ DK58O\34P z[DM4V귍 x+e8UvJĄEhV˨6 ԊF`,ibc&Ssalݎ!=ݾ7uoࠨrCA(xz("Nox燴v@J5 C"RJ0`L)jC.9>ν梐 dCUTH}&}/bz5^ntÆ5el%p &my$,ǫt"l׶=WG^ϲ E_d] -^~*2cٷ*((hDDY&VqDȷf'4`PVzۆ#ꩦL 75%Wن `1vl2FԳ9b 0cmQܱ,6s=,a\<7Ӗ|ٌ׽]w%V{ײWqumw=ǒO_ۃ^[\=-P#?kʪc3$d#v̱Y3[NYn91} ̀㵮t8oeI!,s[LPPD W%Pcѓ3g͇.f}իT-玁@D vZ' bF|G!0L#&mzOg_QY {|8<];{=BC쫡{W%N VDR 4.AC_EkNnGn*91ӗK@{) )kz0\SEkr˘.,~|4d˅1ǚW&85fiu7M.f'oBP]#g92f_v3e36V%.< ̡VhcY  ::/CV{|P%~xqfzJafMB]1]V & YoE *V VF`bbY'/DxdUe,d,@ MK` uvd&VI%9+1_X}m/ϋAg,Gy!Y֖.p,VB 4gPσ k(tϚY.\$3L5dZCo͗~8q^^dt=1ncA?9B#mtO>u? F,Xs`,O\- YFC6G#j4Kކ:Fj11m+l PڡAQQm1deM(\dm` uWzƲGwُ0<ze'X_ Ϯ1 LٰQPHe834-ً 貫 -qM$RԤZ1BHsӒY]+rb֠YDE13߯,Q4 kDC C, U4ohycBJ((3;OsZ"%{O]xͱk KlxDtB5q~\'`2͞\2 n+3c@# I zFHOkJ $hs@ z^nz&=n#:A*-nWV|:ӛƴk5n*n=N`^> Pp:9$rxqaq61ƒD0¤]{ ”H;‘U _dR3,k\MEm#n4g|$"a'lbV$  &m(v9pO=Y`˗\f1EKp2>0Sad&"cw޸gvCqfś: - 2p}Ζ/4Iͯ9o\yZx.|J"y 44(/9vq+8lyg8qE[{: #"%-Y-0H*K$ʱ]cCEP4e0Ms#eoof^3 $l]] 3n\Sʸ^h₼]mˈŶ9n;=ߋkw^^ώt`/Pdbiz ط. 9^54]S:`\d,O:\<*7O5EZ"" Y ڙ,hp ϊr ksfچ$ $R' C1^꨺]sדkN5^Tj'bEUlVNVZ黹%K|hAuɕQ;xDp&i8 ),4Α9K=a9mӋ4WDga/c%ca` M jθi&96 F[$۴k{F[*P]p͘30kG?ot׿y.( 'SDfJ&r@3eÔeT."f9iCgk5A}On^g2Pd^e0:oU`Jp5fs2U< ^t =Ng<ፐ&K*1;\{ZwG-ߠ Kgo,@Owyx}-}yۚdGI0I )J!;u{7eO% 0`W`~;r@\$YwLшx+[},N׽Yt88kߡۧ`07p>|$`16BSmE"DMMz8f^9ߵo43V#'[ Oy6@qʞ)nkM:;^PЏI1{Pxw~,tf8 &%.NlPpn\U֋sGZЖum+itdޱVTE3ERtϕZ%- ɉ6l}¢-Jayh<5nm^&$<)=);QD25㷶,k#ECK] mx4X=L'u͞]lDq騹p~3\.׺8ֳhUeU;ANT \8d\8sǨ.2fb\Z直{^~Q@9s DJxH$:ࣹRYRaP<ݼv&r೨d.518'l"(3DAU-2}_oy 3 xt;xt*袙DY"ga&l,h^:0#kn) 2"jqc+0GMt˕;d;V\P" EzYh$2W^u\2Z)@ b@6]W Ü d>Ƨ4m9=1g& I vz4͐%PZ5,$ _~L3 -lY3E #6U%" @f*o/}5O饨$M66e$Qc0$H2%H&͎chD@$D "e٧DK1k+y>Q=n1޺~Z{`o*<׏P~PNvn880$՟ i"wQ~G)~acm_>;xDS͛о<6cRPvWc!0Λأc ]\0QO0b>S6 v< 2NGlU0g6޴X0Wdla Hp]MnnhِDDVFusƼ8A3)$IU+2A,ASq{q86͞'[ )Y 2 eBF`۳ּ̰ҬC0-s'_6`}~'48^AC#cϯ<@3YU \ΏW.|`MM:0y 2{HéuݺUW!$HPqr3s<|@@E8wvj*(33t]ɶíqpy3T3|ZhZNmŘYgg.O1bf @`i7j՚铨Fǰ>r~GM˾? _~"y!u7$ϐH܈0GF$=0ۣ1bUѶ#|l\&4Y̗8y·Qw ڇuup:vY|wv9:z-'f;]m8 6KE8!`4 hEcv0G濞5=@ [~ưr矷g>~wsXʷ@0DJ`zZRPfa0f kh Yׁ랢}1tmRc8}0.5Rd ha.@ᄆ ouȁ/wGaw Hr! ƭu_m4ۥcyA mT"ti]W n&Kkm9xЀC¼^hY5ֺyZښ cź;O@!\;"@=@a/z}tSFF430DEdζYQ2$pyf'n't75/ekO)D/~'[4:i{sw`hdIɃ`Y% Ri"D"$Qͱu:3S]9khKCb:)1;7ɭGLlgF"S%] ʹj%WKyM ->Vl"+]^>]9o"Hȷ{ <$c_c6cEB1y_}c1= )vRCm b A'Iq@¶*wMvs&Z6y,Jɝ3=eUƛT $`'L+<*s54Cn|OviI6טsMכ|8ߝ_]ya¼b*. m|l:g95w}wT-/H1Ѧ_+ :"!3a#o|M+x%E c;,f>"kJ(0< sƲu8:LNs-nnDdo!6 9$b3yN8{Sju /\%H]ix!f{7!mvfbJ&dvZFMK V{ #+2,1,d&HCi|4lOG7!w,K&+b E@FGABB(or}| @!!b&%ä޶*nA^ 70 D!.}md$$kAF6){M%sY[ao~uۋ # H$V$hS<^ D$RwhGNpeb>;}A_ϽNwER9ySV*م% oΖֱSXy*A\Ʈ|yS9E~ 6lo\-][&Ž9>wbBQ<Π-"(I0枒}w`MP `1y4o]hYޝԾ)eA ;rj^;'ˮfY1dũYi*+" E TkHl}]OH?64ύzfQoMAXơĂc{֏2IJVڴ=dirC:RdtѶ@cWVAIÏ̓7w V&Ir=vRbX-fgHr}Ζ9ԈRRH$ů"nZiG|u29&]:D1/s`!p=;|mtomѸuFHYH 4͜>t*ʼn{G]Z[} Tn\$96$4'n/!,{ӟ3xv}xru Tb+;YuªdGq=,\3٘(HL@"Ҩ0$"Ă@ $ 2B $#"D ($0#JRCBR@gfk%j_Dmɷ#eTsSI9/Y8q0o|X 5N(k<?' @tc"f@b &HBL$( |a&G]Ӗw|$9^^PեХx:Qst0f 3vc>I&K~GpIm<F6zHK K2C |NꞸO\?'|>~}N$ah"l&^hOPITW_U1qOzB[JC 9oX"fJ_Z*c2vgwxG o<|a $|S Lѷ܀w@{B{>_ Zְ|U:! =-]!g@Ad#Ás#G}{:vsIc>(sŅ$C=eBC=> $Õ%⬠Ti1v)=Ԫs{5w}ȉ˕] (3h3#QKPP3 L,C\gow_[syE^3wo֨ S\Vٱ Q@7 P,ͩm%֭FUZP)AEV`hP_D@ԠhB#J dԓ =/@QaPS ('jUDTNT"y "xd?OĀ@@'!%S QSр!D Ha#m){/_cx;~˗;h;)6&s~߂ԏ> n8M3t)$3N IAPoe vۤump`ޙ;Y732@: c. *YƑG_ ⢡((@DZY?g~ogCְO7?u*UdAQ֝{0~|ph쉮#񑺗pP 5l= ># ɀar~? 2Mm]_;#v(?v-ce ' B׹bE:Ze5O_{[n.AG=k?k@O#S8(72ᬫQN}}gw T {$ = I ZrGnbzrQI)^E|6IN 'kQ0 dBVzpХ"J (#v쓧= t$C* r6! HҔHRҿw&dJ+vC@ ʜ~Se%@{WNQ)~ӭ?nf.k? 'CXuuFG4Í\dVP)42>/hE$H%Qɬ\xQZ`_`9.>i DՒ{7+FD,b0]紎9 67;(׬.q4O0ѻ3ћ_s=#im&B8?Sy{C!8L }V2أ9NIHtMf&wR>/W~;@|;z9=<'?<}6_[Z/!DY4b|m"[B&S{2V@ ɕFžjEm!NE7zEHڭYųF@W SMZ.b`ot+FfsWpHf#z9~M)x-qC9F/y0g64n^{[@ybeLmK~/ xO ;Xu$#CbeՔZyYapz' =^>D=c~ +DWzo8j< PEF.5,"l=9XD6,z('!H:*q1]h?; h~L>%WF՗Dqɛfn#0c;%.qk&2lB'D@$R8ǧWpS*C%[ǥx:{(3\aeW8 j=ʼn@% Cp0P.JC~xmUWG69LžӠJX #z,p o\c|k&W~?'BKx9˻~W_>8rBmrQ`J#QiNA؉CHaNj|x偉 OxVƼ粮'F(?G~mޮ{ia±|13Уݑ;_m]OOǭFJӃ^_v w3r1}+a@Ozӳ/_{Mڹ&s[p@e;\ O>%GOycZ!d٦oi{xkŸ >ʧ#ݘ|MY<^T"'/pn JQNB5|PS_'BG K=Hr>+}疺vgbv܅h`|ʚ~K jgjpOI{%#*LE\ڶؠ{"{պ9d|[#N{_$ BIypPn}Nр>r'~7K 6VEZ&B ߑÅ gృyT~?h[SUA9s>쏢Q?WS۰t {&CW9ru:nJh`Xrx N&!᳷d!B#$@[aiT':s(&]Q!m79Đ]*? ]eG G2(fkɿ:^ˏ9/o885*|tSqN0a,:tm}©(*<.a"o@Oуb C7rYO{޽HSlGx7<>Qt%vO1[>U nȷڨ_ůg:ܨ#_@|NozO%8Q#)ݔB]!BYdǜƐv,oaPduzߦ;yW6I0}#iXaAj-j@IAF䎩o |_ס5&;Ūأo_u~O{:H]]FM1[7jg!IX7Y{̡ |UOiE܆ym;ٜnPsB^! 0@R!(1a@]~{Ku#P5*Pz9ݼMҢ0Tfky+J! |mMM./F11HƩ7Qd eЬR5`oI*w ~FI'~ߢzj;OpVSe۳T|u`DIxqn=#cK(2-4ND_g6G+~2Y}ǖhe *ۋ'2nMpzv "?\z/yv{OeKؕ[HY~_ eUQҬ'A|ˢ:ɉY)߿f|@}x>QX&kA6y4'KyKZJ-]YWG˅P|ymc |E="9#ǎ~Y=0ˀ,1 _%ڠ?\(44Qr. ^^EJ0 cqt'tNMj1Z16!s#C%/DL#{j\ӈ$0A}F@Y]-v4[B,vX33y2 7ڶan|-lXqU;,gy^Ûmk;f%PeݣW19-sU?H.u=UMw!A)+pM9`BZ1C2aIߵjP{\rY C6Md! Ⱡ)J ,X`MehXs'*; c socCɇ* dRВ0ZOc_욛[ӊtwvwaW4LH,9}8+{1Ĉ+HRn3ucGږ `&%{,1*f algEcZc][ן& 0ViGȇ;Z?(5:E:Ȃ5|:4׈;'N7l2x7u=QK3\hĠN_.bHI*QyzOCN;k}5V^mbge~E:=] ˟3@@n|.눾NҦfK\m0fvv w\ɍFqu\k9r3mԓ{,t&agq&8)nvN6!T6%k *Ρ0$jYzaTZA8-Њٺ'(ʷҼEw/:>7wu׃6v#7j$ ;[HFKL {+ eCVMTSIEcv]×:<ݱys7D#%]5ܻR.f4xPNNXw38Y=soLk19Slj?I@NU, [}*o= %jrXX"}6e`3J*]G}׎#:YfH3;6!;J,?iַN5cF,ؾ0Sgg' UMu$Wi29F"ǣE2w3E:Fb$=йd_gxN-*3M3zxӖGHY;\''=G\ t#^ޑ%o[>(rքzE~fbX{/d6z=&\7;yc\@o2hO~6 (&9Hn vd(GZ DQY4VFu7FB^#'~@dj ', `DDň K!Z wH@,A|h/P"tIA,"־9,v,qn(j { 2D/00Ӯ3, P& d #ެD kQULߕEl]ٻ}j >Hl B#v}}Ơd:s!z08#2l7:zsGckJǙxLzHhfV GQ 0*Bf6"pc@v̳z~T ʉP=@BeLHO9A>NYG$ /ٕ"jLRT}5z _%bK,^j][Ú^ߧm}?rI=l^NC}wwT{kޛv"VS]}m#?RϾ?ˎfpӬ}Qͣa0V߳!,7RFL~]ʞ83rƇ ѝ> %㛯 ݬ\n>g__wk뵽wzz:"~OVԗ*}_3x i03rg[$Q4 G3qh7 H:$m,60AbKŝ64|M5 xF3G$„ b:F: H~$vϡ9R=;bvڑx}+bsfv #5Z_e3j`&k]:%"U/=>`Ͽsu(RHETgY l˟l1+x{xiDn, 9Ǥ$0+8KqnMA/q$3^͢Z77YeoFTT{nN2\[-Vǒ*z4958s*;[^Enp BrFNPMXkT:f]pu/W.xGr=9uy8G+'zyhG?sw1X88-ag{`,j 8rwاWwB.&&KOkݭճn2Z;n-;t%~Hm+@Joo pHDT0dmkssbzb.u>þ0Փ ?Gע}Q_=lUA(AzmgI(4#yMkfO0χvÿF^n6|)W={BC4 >9_?N!obʼ>wgi߄7b0@HlQj.p $@*V~6N+E@;o=ܰ8 zB\wk{C3^{(,۽Ȟ⏾ًj8u ]zOGٖ&Xvf :6 !# MX6Usx1~Nwf7f NI){XTH幌5\<%#+p U`$Hq|*P Q,jO\ZMXYiϥ0Fas~okd:}y !yϏw*õpt)wCDI*X2ʫT5!(%**SŻ*{%WA{7J"B[X,ޙ8zKcVFC4fW eJ<:+NG^ ߮ B_L,W1QaЕ@ JX)mtBn)Ez J?{cD@ @$$\3>FJ`>!MBUrajBgy `:B?d0uo]鑖4wm]xnP9d&bCU YX0dĐH;])"B[8+D; @(,IxeFuP.B@a(jѯ%p%qO# {Eii]ՕWx.%IFxڎ!;>]8l,ZUmY_J"&@  9QᓱguCdp@NlqGt=ĪpOHK:dk+א=ІJ=:f~1 G?5;{_u^C׻}j~ڵsgkDRV6۷ # j7yţؾdxPB}dwG\DPCYϱ?u`{;%(jQ954klTE`G~v}0nm.VLFB2+ #{OZ6&NY*1E:Eܸ/PD)y<g6N\{OB: <^pC9D%mZAHI2@" Ll6I>R^͏6mތ#Q,y"6kYS0(Cn1rx8B/4¼Uf*F(jF?2}B%L8,Q}GķՅ킼3FATS]H[ߣqvr2A4SpO;]5&* DhF}~ VI)kt>9֝8_KXW3NO>4E0fE-PRf0;#?/d]Ģyκx1J@%-nqanNK4F6~;)%) ) Rf!m偢)zsZQQ;BjKl_ ஻S 2x3$8JesӗSg=&T9KX~gmP/dn}@Z_ ΢ @RRƭG,ԨQwOM.p"mF[#ga 0 S9B!U%fH40[ *xI.28bcc\l"8H=u0IdZ6m*ӹs" " e_c9p2;4P1>ꪴ*l``!o^'ECFB,^كD#Ëfބh=j:71NjPA;t.#6"Dz2SayJH(lur!jc$U|O=H%j߄CP{?ҰO0Tn%g3 /Z.S_k,P,&2 5^,Gçb[֭v 7APL?Ibw1YgI,,jh=iFCLjX~Wc^Vͦyf>eK#{~qޱb.w~^_.$zUފNRw\ c9u9/ɣ?v|O]Kv/}x__>cn7+cm/gڇW--}/ n8~*r<͆*:p׷?ޗ:z$,Qaio|YHs⋐Eלݷw,#j\hhuȎq0樵k83z(JE./ܞt"ńb9y|Z c#18pNtHRR *,1$ -.rh7AnwKmvնq)J FªaHY{`kν=٩9JX >^لzwZrجqFH%o0藉z|fj.Mo~ek׽w~F˩߱U ؑ-B}:cK;I s rwt(cg#}̾paq" V;/rE(DTW=<97ݶo"@ ^U$qpKHSP[T'@YC>g(o ѝ|c?oG0;9'yd)2}B NkH3" tRʪ!(PJn0  + Fy0menKN?O9[Lε{׶6¼N4lDǨ"E1ߖ䕏c/NH$nNMX/c;惟r B\<#$zH} |#(z+1qҬ? =hޮ;!]^_^$wyIynϴ˯fEgOn-ZxgWޝz؊3%x]rN=0?-_xQ\_1zOYR}>䎡_B'=1mr_;XtNb h`w`|j=.kvk-~|'}{èT3ߦ*k>꘤< KnG$Fb">]LӦ6>:FA$ X!0C;\]_%'r7#hB.hN91ۋ_Y/fqE5|HGO(\-M׌L[y{\ Ep˛fn^)b[/nA!$Yi+~W^YǦF`tv5.jJ3ە$~@mE' A<-k̭?Vk/,:fLt\Azh 4t ~={WEkqEC P,VC BvMVEL%M)hlVo.jf*aknmbJ}WkYk.UńSM}&DCL?ty)׿w(G" X z2h90~ˋm0A࣌EM38.Ȁ OmW͙٘ʰ- .$72 |k xk"AԵoYH׷ vTT88F9b+wNb@JvN\9F:]3~12ɓH{e]_ Ÿ,Ev.0zx^re]י -ϵ|;5q9>m%nW2 ә߈Y?CzN4,Gn(魏_&= a`v3S+r9=VȦ\mh˭f,}0Šf9q6u`a좈OݑWo6/cb\hp?Q<4K=5k<ƚc3'נKSj0TfTgA| 79 c:u\g Gl } UDx3طbnC:8dzǷmjkn\:\,^T5uz3Em=P@fT~VKޅu:&ՇOqZo|ۍn]\|m*t剱Bv`?o,%uZXM.hu qﱪn>{+өҸMx_i`>gOqp7[B?u0ʸ(@lbX:<`ǎ1B5 DFC(~|P]~ViNo7hHTOwaou ) w&_6wodX_t- x4k;SI ?wafZ>r}|=KIN)ĸ3FUO#ĀuZF@E'dpK?Z>j]{7~XHB$+vJ0E*@rܵ~c"Qߪy胼v"c)HIZzGŒ*qnA(9y*&(Ug$e"u&8ۜC(Ctm*D+5; Pl^_E_a30 Kr//W6_ty~>`= -m:Ȁ"RSD8 R7ARqe @0KXK`sy^e˗o9me[.TSwTk%?gǭu\\"1P &CU@JV!(f6RT(o6dԕ~jmeIK9>g Si-b5h0&i%3dDlfDwŪ/*Q2 ^g+kRP-K奵rj`MF[mAm(t5sCPhLb& ,'j5"YLC aW-q8@5 8Cf9@Jp MY H8:)'h |]-7f-7=;!4<~ep2vl~uӁdC{5o;U;Sy=}p~= pz\8b0}ȷF37zrgg^^uhSl6 ǝPzqI2>[SdJHR"(vwĂ (xF c<3õ/njB B;Hdph6NV/6T kaS45(KL#ggy3j|=S@MC lG -YV G,/*@, ʖ0r}) "9qS6*h6;w7mf绹.Տb!H Mnd)G4\Vmnپo!\O ͚XZ_GW&330D":O h* ߡy?eU֫JBH@=*4DAL{Eƺ?Q= Ri]|^]˰cGӯ% x=ް\D}[? 3nS vchoQ-?~mŵ/[_cѨM"TZf~D!~9 y ťpPr;vt7c9Ə9+ӞTr 4AbZ8Qrx' xhLYqW)Z:[ ۃIŧ<\ *HPIF)>3Wú_ex̠ Ũ+^^KK6~r%8 LsUo phSQ]UӄR6PW8l xh@NǥS\}.4t;\0>:+}T຾>4ykL~뵮("b gVD:Ajzs?cǬkO-) @) {|*+NZ{N2;jLlep~pOn萀"ON8ˋ~ߍYI:"Ȁ$n웮z&ngMlrPj0ǁ͍/¢CyBcVK!^׊1adHԢW~Y!X7/DN( ;x$2%gwqm}[-x_~|whG@7=Ծ- ~Wfrxl:8g>>בkμL>?nסoɿ[/f[HD rO.<`Ͽ0`kF1=1jHKw]\i7gl!;]ݝ$Sx(ihX(@JE"o HEm8DxĆ66{a67 !ÖL @2s0# A)G9\9rz'uf"bq&388ő?>m׎@5 &JRaۤ %zS@\*w3v!ݗ{R4B-}$$#hFiM=מM8Z>m)`t7s3GW='':w'Ç4wiBR8C>8K|H /497yѓx^/8{R`Lk.lh=f78is7`[x_DR |ށ@TC11It|_ +HIb'v&i8svekH@Ύgw|o MƽNOc|xr1D0VCk%zRrkԼ%(/"o[5^n.M,~r9Y:8û ) q-Z04me0*/#{WNo)ãf Bן-٢P꿳c+qDKOWII50rԗ|t$}>L~)>?JsI[kЁx"v;մjSw ']ZJ!_|yQk:^ǿgxv:K&qס$'r" h100oK'kn>epnGSv>3o%uy?_7?}߻wpSjOc. z=nB)BQ;ֿ콟Ox>*g'8CTZ낗x ԉײL_TS<3i e$gXLkeOk㗋+mL% rǿ(3chX7 idEэfF$%2\?WC=P۷@&Gab r=v   V6SAQaY|<t_S؈; m:hj ˏ*c5{"Z (No ~=%cz}dŢQq @&õ) "1m(naNT#`B ]_к 6~:7%+n㉷!9W4 ( 5Y!? jq P IG75$єzM ݌Q@]x 8ndVˊDu 0WR8|I+GXlJPjF.񮪊25?6( My?" ܪv9QAGfr KWyYnY[ao]$|H?! 0ZduwȺ~t ω1,L|j.ňfz_A O|f ؈Ow'_}9PKxPUjֿv2 Wו"4J51$5A?f2@aC n+Gs?Vέab v(8}ue<ۿHޞ}SEЅKs7Q/ꆈ߷kB1qk k+!a.ޣ,"^Wݳ~n]Z[XWG{??N(;\xmTvY8s tan>(z} EGחswUZl: okŎ)H(se ŏ33;|ly?(݂n7{~'2Y>` U!@42kwkt>|y/x_%@prw^k}-Z? xZ?Þ/\NL]ﯾ?ډ}3Bg~}y7i܁^w(O޿"_vm=8{gՃ;+57gwa~7s~%/W>ex_{<~(x6;ݟwA2tE7҆kǫV<8PwÖt @ׯajc>׬An:s헺+!un)krA"аEses ÷^X)W@Lv bvZ5d-Z#& 6䴱a0r3$9VgQ$5މv4p1aej ]yFjat:f{ DlbK ;{4kmn>ӯ(i11\|.l7e#dֲ2dܥ 5g{h eG.+#; \A5:ny[vŗZ-+,ZzѼ#VN~9'>w5 []n'V&zvg3v}mruٶp=S?e9}_?hwD!¾ h[Tvމ;_kchn[*lFdf$!@\vқ3ÉN"3 $0nt9-@-RB5M>;;*vF@aNLʑ(Z =G{ ukl\Q:p$1sC#ë Ɣ ( mT ׈h|!ԡ1Z20"OLj8Pν_j>A\~гduDsi}d{e1dB u$9s}HSSoep/83?jw׀囹u}_='ږLz2[$LpcP q{4^FV VټC?`Y|)Z0ݳH\ϯ+?c 1(-H71N Y2 [wҁҹx_ɘ&VA$v8ƥ: tNF݁m5SBOfS:(Ebg<&z=mސޗ ;#:KŇI^=#^]|#.p+V}xUQWÜix0NUun3r_95)f a̭#u|߫=zS>UAV&Us5OMiÎ&k6?/?|= ACDM3Mgv ٷn9m`HQB2I['vXo0H@KÛlz5ʪNpx۷hXjBb&֩8Mù)KQN³x)q;**n4;R bxbA2,vMVy d+J &cm Y0vXLI+1(iڿi &=R (c]r҈ 2'I_J%!@!*gK_ǻӨ:=Ws*\*qʧ}7 E9v:_s_Q`@u짩y9Ow&G-!CC E_ߢ1L:|_s:@lzM3NrEs+D\sVj#P*q: !{"h=iOOh.h >o>۫$ 2+R_"dš6 XW?iXqNw~)CwJFB*J]g.X`>K(.8)oB{q t@$RSqĄbݟ+WLq>kCxo?<tpmRj$&p$O\EyM͛g"$v!S^\wl\rkbIةC>OqP>$+\>Źe>/C lL i_{ Ԥ{}_x@JoPtp)1̴iL;$}/2?;пvb6UCICRa1ouκ˫ ~LV~Y>Y?EZoR8T;ٺ}H{o  *Xx kOO΅C0r9Uf\;oN7T?)]I(ɉ#3SQ$/rO~Zx'zy|!S*E*V(vGxl 9VeY,$U7+.770] $ ]1 ?nFHF,Q.rɓ1smD 2`nhY{j]H~>4ɞ׍?sDր a͍Qu U uO5-␨đ=Sý#4sW6yv/xι5Ac E8F8TuMrw"5v3raj40B- !TmbQ;U>v]Oy̫sS #H:4Qmi{AT+9<e='G7&=uA1s7m~EiwnhO-O1BRUʼbn[ؙ[*6j`U%L%nF }±o՝B)gExVQ%~\J!H`g!Ő &xn-Zg 'wmKk^`NL`w(8~d (4S"+aWĝEdP5 H{p+ho*: onz>(GwOS.)?c@He}G6D h>増Agm'cF#/ R7K-V0͉?{˶ IQ´/Bo0I+~qa*4s`[9{@H:FnsGhݏ8杹h~jBFLB& 35vre:?8̍&xo}{ìEhU\AΥy(st@=x5lzRxN.. UUcq-]EmUO ;.c*VnZAG~^Di=w؉ __hT8nIsq6.纪ɕ]>ٵc<-C9mÿ%{-9w_>,~ޥp>ћvF?4t_cz5{M붺QU%6Ƴ&l^&V#HfޝFa·֎Z[Z^gә}4)Cgc>y3홋n*ES_oD^he+u:QR,,UCS߮vkO/? #^Z)LV(] ϏjRy-mP҈u4}+g\Á9pWh5s]or@"J" Hpy#[8jԀ/N}6p6wAO*=ηe 8(c% 4ʇ\y,=[x_lb$ĸ/_x4S{9NIpj300|.볍zWCrKA*Zl=^e^Jb/C= 3âWg%ܝ8WO257͗7֫>O'2T댛Qz10yۋ?i.ץZn34m?MUh_n2;^<$nN鳺ϒQc˝_y;Z15VSm:Kƫ[C%j˂foyCX(-+ڀ#^ rޕ ^Lʩ:ZȊ{>ߠ{}^#Y=#3ouM>sK %'95(ԏ-[Ndxhص՝(@ߩllH /`7Yw鶙)<3{!UlT>yˬ9 )4gy&(-<9!ʘq*RCHgu˷]mזw8zX7#pGt*5֠Bᙃ7 nR"?}doHl2J<á y5"T> UcZ6*ƨ5/@5J iJcQljTklQ؊5Fѵѣclhj5j*"+Q[Y5lV6mEFTj ecU5Ousj*-&*Q jD~m }BjJJZ(B7?ٿrٛ vf1x(RZlTUcX,V-Ѷb6*bmbJ-Q Ƣƪ1QX* ŨƌZŢ1Ƣkh* @O3aAR 0(}, `= IFbٓ6e Alh5V2ɠ1JY!kHm,dԚVZ6Tmb[EhRIHmF*bQRZD֌bگڂSAY%'tt= HN8( lZ VƌHƨX"+FdcVJ-YjMI+F VVV*(W55XҕhэLj+kEIV56@jMũ*d*P-ܻO'(aQg/Y R1Po2X61L"9RRI]$BP!M}wu2u{XW_^qw:哮-W[mgD ]WZpn+EbۇI4y'ҵ-5mi= `Hb@$1ҷsox!n1qI5f:MDzL;o|Η7`#ݨpaO;Z{i O4@W 9GQd7xj| pO^!8FI.jMF\ᓽvTlQlZ,R .b"Sn2nm3Xj:zЊk@*>C~=k|kIw|}ဂj ͚,[ut)Z"h ϣ:-vm3ovX Df(ڻ<=.ۛߤ\Eg; -ذе9@ f& (;bmwB~~۾#\l?A 4=q?ZQ`~E 9uLpo5[okCQ9o䶇B%- ϋYYEɊ%/3v6#[sH[?<0ࣺuKKm3 h$5.BH6qw~mv{H|Z:2Ns8WB$ w$XQgzFQ ZөY+mg$̣ؓS=Ye"j[5b~ގY,3/Y.sgv/t<xCy jJ"QG/i>O;wZsGK=4wG`H e3\Y%Aѽ'kb" #%y@%HռҲtfO7֔<[ԢϫSӊys&Q8ʇwYasL XX; Yi-g߿haH{w{,Xb)&9{^R'c8M^Xke^n+HWZ Y2oʇR\.jdY-Gk ݫaҰ6Lb~GH'[;F0IW҅3ZqnN12@ɊBOD܍UҤ 5x35ߥ7QDh0$;="5SĈWvޛe?:inW9/:-۸|ƯZWm;_"ozcͲt¸#*)[]nh?C<6g8"N딫}{ kا;9mәp>z".yp FV&s*sdA`( _lvqqaGrukd=܌Z_nLr]qutR.9/xW ߮1@Hb!o/Jbӛm[  Y߉'7Ч {N9 Ę'RM|LpCnlOk9ְs6mn3ӥ-ѷ-qqW\DçYtڥ+5}1 Ab`,ı,ӗΐ{ć#St, D Š"֑H f(TT`I&Qk|\6)5$5Fld&ŨZ!(`ƢQQb(,m-D"k5cDZV#bQlmkTX#Fѐj00%(0JUn5&dz clX(04.6]bLơb6:L bX.b#x_Wf2+teYdh:K 9.:-8n[;Fdk.(~tNLE]|n[ Gq> -?:xwnL #b%W\7QGO̿wn.rbUCi_'vA$f@bYĈaQm姍frd{K9n/zsfp0f֕Hj꽱A#Q 2.CXZ8ֹD;"o{s1$-47kaE8{B۬_F)2G"xFj:mvRZ))lDV(1 K*& ȡǕEz"JHzb@͹ɹ2oD}Ъ Ob(էxhi"bYoKERKTXTZ4kli)llm-iPk~\{-tM"(**MHlElImS4k33 d(Xf4j,fjiV6п{2^T#W;D@TM 2*4"E"WC 0d>ySk Rbs /5/>װx/~#;b>}:}j*t~C8ִWwơ/ѱh:z2-QQ1!XARC64XљYQcAi#FI,Qf4Il6H(̵FB5!1AkŢ)*M%a1d1DdTdlX3cQieEi4X֑&6EFأm(1)FFhTT1F)L4P U8(P2(4iyJ_F'__}=TF#33?U[g6gŽX噎LELCm՝ۥd;Ƴ^mC*!=.-?Q*ϕE(L1"Jơl J݉1@LMIId1gn mdlZ"1(QFDHJHe1~X.}o22(%1Xe*Eh̍JjD,6[IhfQ`PDb@F%FH?t1FJɍbXSh IWtc$1̭E$Ւ"MAPb,_k75bDRchPh)b_ MX)QAoŮfhj#h,0DLlXԖ,f`#ō2ɘHIf3#PbٚaCMƄĕcFd3(U#+ Fmi$hPK4XfFOrɱJ!me4 ,XQرDDE3cFɤ ŋ&fdň4YQ2f Q`%16I ɤ%(L~b>NHXBhHѨd@#XcAce0TQ~݊5f#FEFHPݺ64"T cDFDM4HFأ$B@(ϵu(MeƉ)) )2LbfU(-12IQi 11 bMƉ*БclD6_/mL13 ^6-m]h}O}|}TJQ԰M/>wdܖ҆!S"/I6d3Oy2"Y4dwmrUW9@ n6EF^?EZhATg;b²O}'u4?gvkY 4@"zSXPo5wIoIߞS%6!WrfsJdv׍}tյ[i$W!l Q]u]7)Kͦg#)R @EdWes` z!ҝs-rE3ձB3n3!lq9fGo'r`"D)p@&Zĝɀhwcw [Bx7JR:uvX@7E,Nt6CS$5uNKC'49:<l DnFw{SW*BĕHin븽bCHp@vsPvy,v䳒$bD腁`tD Ɋ0O$<XHQ( /QQPk1Y;"9=uJݝ1T9!M!b|7ܓQ*D"\j<4w‹Ʌr8.75qyN(=TeAs14YQlcZ6XT&& tQ, 8}lFI;DO5˓9[5׻oxv`Sbw\.r !@}6.oO;,=s#\EXQjW$ԇ  M8 l8pIx\J|6m^l-u1t5NqW|\Vjt+BPG'[\[B2?7{G"#/' m=S$@ႢCRs=%ލd3%ťQ.Y"r⅋'AbT\k~0@|Ar]f4/h $dT%DNw\!F) pM`nS@Z:\K:')ԫXt@RC )WZ>mJR 38$A)qi Sʨ{pqU ri'\G g]^S#XJ6xޢO(>ov/\@kVa 4>.#!͓A{l_9-qiF%ňEZiKڷ`뭅n7tK 7-^qBP<[Ǥ7:w[τAz#\HlzZ'WER6=o~k+UUAӞW|&@\Atpfy8Oc =su)6|ۥT : hSW&Dm^۾ű]c붧jU#ffm+sKQkgj/\EyqNة u*c$5¤N 4GglMYԇNXbDw!x6=۶*t<8m^22*|mNe<孎_$X6APxZ|Ō Ct^-qGw,+  NuIlaV#LZX<Ӂ!-GN88 JN'58\LB,gu9朌IBe&A/x_[l,&2LwM ]ˀ-r(Zw"o|S zT;$;f<I/2A@?L=S 8~[)2*;,8Aۮ-p0骂¯&:Y!W &r`V7׮IIlK#Pv8fHG8Hi82[C;;СmWHml2!r!_A(h( )E8̐ DDN AGmLkYbF|:*76.AӶ_RzipYRx]%ǬY.Ib&ࣇMő.s4BFlIAf/7ƺk'XɌU=EF}k$Y6KǬk zt 2 bMp;Z(,Ca쉼k@V{Z4#LbW3= a`ʘƴ7dzI{o8dCB$dz]3*^9HM @VH0M䏛(? cgs.׽#eֵ\<6#)apL?$-4NYS-y9LS1udKD;֐# b&c۩~I{[RMVZAܐCgګbúJvpS.Hv_ Y\)Mm; ˎKs8<\w6[,܄X,R 2D=XxuD%bM;xv룄Țaܜ!1ޮ.[n=6@h\rEUQykDkbuXh{Re+H.] wFL%$+$EqvL7J9$$"$' }7eLDwpXxqp^ӀX%˴ DoTf{IHmq;+sL /E/)|olWу!EdE:.l5MUI]9*QUnpq8;\Y ;)СHB\p fN1T L Y@#55 ;9gemHƺ֡isD03(y[וVV聯{q\<'wNMRRɛ1iK*yRC7o>jȝNf[׍Xo3W恪4.C b<SMZgCZT9S3Kmu8QP()$5{ÙM)/QEŠ؈EdVZF ?zp&}H,> ^4?;{My[mP}j{"@@**5ѶԚƢX֍D !*&"(m(дc S%4"bXFQdIJ ѢPlh6[#) h1`M l`6-%JHɒ(ɣ&4F"#2(cFCb()#I3Hl0&2"F$IM $Rh%$XHb*ڍD4*(B0bƱlbCFEcBM ) )f$#!Rɤт"HcDQPj4bcє#IE"A#h+Z(TkF[ L6Dj&Rh &IM&Ɖ4hBlIlk#2̴3LشF61J"`$Z(BKXb1H" Tcd+%h1BH2)#&& QEF4`Kd"d3BEQB"J"c` DfE3!F#D SIb1hRҙ 6,dTTKh20`-2&h1DF1Q3AELE([% ,6 XPDE$ddԚH3-ģF6#h،FF60P$4Q42KHKD b#I)EbKJT(Ѣ1ELAJDQdRT5JbDce" Ć0 RT4LIH4A$mbH  VCHI)E)"HMLc,Fa @dذ 3%1$2!0&f,"I(cXFfMEd$Ɛ%,FDf4@DZIDRe4X1cED(h))($3M(F4lHHdXFRQh2h- 25H2S+4҄(LRV$0a5&,Djd`@D(MXC%I&A1DY4&4-!"ɱLHb,@C l44F$2f ĸ`8<~׿]y%l(;W{Pr9 yٲ&;+;G4g@Ŧf=8xL!0oZ'`:BiQ?<@!ѵhڊi+lk-ɊZcQbъ64C(آQl`J V#XAB-"^` H0F"$ &1Q"[EAQ^?skNG f!(v4|8pq`"i1V%-Bn-Mћ1bPG1΄l2Z ܒfII05$&Ʊd$$% C!(ƈ FI $IfS lBLJcɡQ(#e ƃ"4I"&1F T4THѣPl4V" Pc`Y-BTP,[(LlcMlbI)$f̈bH% (dAmFh( &HjM&MI@TII 2m1(I(A"bFVKQ$EBPA Ѣb5@ ,E5{q^ ͖ Hb 2 $4j*5!hJ1a14b1ID&m0*3a~y^QIQ!DQbE-I IDj(f([Ay5ŏ{sQb[{Qbb=˿.\"MTce!ͼYStp½N9YƪIZdI(4< "j6kIgV^tADCUIIT IJ!fQ?a l Dѣ6+!ěbRA)R"Hd(2ƃcJ&2h F-%-EF0Uj*52c ifi3XňDѶ2E F&Jih&DDFٱ**JMdLLRb(b$iZhS&J*)23LIJ3H$ e &lIIF5 LҒ̱"R%بZ4iMQhѵj$a֣U4&+F#ZQ61aHę2ĖiIl(j-QI"" >A{֪)RXDyp RQEɼwKۃʢA㤂#,Q"y[_Sq<]In7frT?M: 6Z*2p^9o"z\k]kytJ/)cTMB"fˮy5:MH9׆A"Y j\T+ZV$D ^7BuX䄧rEA;79s`65$$72 J'RG^,1MۦxxQm7n۶VB 9:=8Nkx7{_3zPR WG/-qoDTi*f{d% ZB/>\DW3R}|<8{x!TTM36ݺډثoL#i Z_S$ZJ+-_{~OחA@ر3 doȞ d}$׏y^H31wtƀ$%+oM%zzWk F29 ⌊]ޗ16AmRF4םݦ[й75X-&FѬZDE$AGSw8P\/oQ!FÕeqQIp4S&1 "9a!95P\ʡHK5 ȄBTK&po;) m4mI4!F㴸1JAXEӇ?VCKq.Ґ!$ʼn0~^n~zޢ"c"1L_[~3H;yda=vF AZKFC4&`l:vPZs}y>n}G_MTE?qHk>*rô2*!`|>ֵ:eG-'MCbđI C8oq݆kPCѓ|< $>wtF1+fIȓk8\?wfzjc?y)DoO:/aɯӇΈ9Ā,]ok9 近c ( 2JC HF DP2L dSM$e, H~=^}C1MA1pBH=w\FN뒈pTjE| {s{t5m" 8a= ۍ ,b?*e6!Rpknpb"LJ }7l0Ǣ5qpR;!ė("$,4 |"cT㪁:A6f!<y֯iyQOg't8/r5W?/8kL湟|L&am{e_HٗH+—R U =LkCHy5!` * ~beCw=|4d*ZBAbmMDjF(ɵ5bfZ󼢶(XEmɍ`l$D[FlcX#hF1iJM%$k$Ũ5Z1& -b5tQ]&2RJn!ci#AMYfX١ IyEm2 Xƣ׎dIQ" lkb2b%LEJ(m!ihJL[7u C2%ЈD!f"I$d)1b&c(`%I$$M۸Y 2" 4d[dI(I3K}^1#bؤA6YdUFI4 BIZCTUD[&L0S"iz]v0cD FJJ#E P*(3HlD-$ؑ4)L"4EmKלL$Qh # $b652f2R$F$Z("FKRPZR I $Pd]a$bH˜#H4Q(̦@JLfC DbSQEƢnfɕ41% b@Dh$L ()ȥM M c&"DfidDidb %%Df1%J"@D&he1(`3 7vi IPa!2aI2XĖFh)B4aC!&]vI۴( lH\\T%fLRFI &h$dQ;vAi1!&BH&1r1dw1&bFd!2#'$2 "n,LdI3K"i1Lpۊ.Ĥ%KL!d,S ̲FfYInsBj~iߧp8X,TE\UQ0DG MPrfRu#ۂ Ri `@7}.'L "w[#׷lJ} f*:O&g>Ss^&~SK^%ei.E 6s;4bDGnP&b༆M Be"H ~O=ekxhQKx4sDM&u.ut=aMy̥6HǿO<;8"(3Ҫ{LPA1)B$7'Ga\ Ԁ3'}>S9gO;j<9Xq}xceRDB4wpĒib(x?p =u<A$1bT3Ld$#&}p3)o|.>G%! }rhNg9? KW&?tHyrkρ@<\ >OwfrCkg}brB@(ÝI#'58VBd#J ?$㟖c-d>||:J7W@ϋ/cܲB"N) 0)Ӄ8d\of|-X@̣0/5w#3|?-iU+1>g,j^ƫH II0 RHŔlDh#1 4b2$Ĥ(LP@h14jM"2H F($4&HdDBl`@l)E}E+˷\KEΤ+EL,iz˻Q "Xg1cɪ"i|I\?O6>-oժY\Gr zF mTJl=nC.5@l[&J:/f-ĉ(EBMYՏ@ @|f^G|h{cYj>Me:g+4i{Os?XfTyY7I&1&f"U6<3vn>NY;\78bhL{L?IAAf%v883{ϭ:"0MC- zxR(Qz w^U;Y{k`辨 dq=S_#]BpIݝṆ<-:FI%U$%.>:\w8TO5O-Gv'ιPr#&ۡ08 '?;R e4_J #xw1l)!k#}CˀߏyZtILxO۴=MucVゟ7+"Jg\,A˽wE6."((`c8{]h"&׺ܑx4Ohy "h,214& %HictAI J*4h)e@1Bl r9t$l@" 1)ʌk3O{To~uK]oM$"&SIJ4X"T&S(o37/ U5`&Qh- b"hQ"aSQFdZH0T4ڊ"R!F̱LIH4II#Pl46fZLU)MZ6mIҐƁ. -̨."*#+I4QhkEyDI!1@D3ED&b2Ŵ6[b&b]8ѢM4albY&MDMʐQQIo[yD(V#0M`#),RIL@fhcN׌^yQ FJcQ65y[Ha$^Gxyfo%ݼFm )FEJ FKW (y"XxQS%#@64a||)x$dKX\EV)B4QK`fJJ!͔qIB(r0A}wQp&SKcIQ;݉oH#R+1uʋ,&#E1&KI(-V*V9znͺ=)(j)^hz$ K{ #b2`Ɠ]y/77myđb Fha^[nGصEUL02d-L TF4 ƙIɠ"61Ip+;ǝ]r+xuxɌ+%\G-l-▬#2r.W"U\.,ʌ,l\Lla*ںԒ;GNŽJ!Ka,%+S;7 FXɄJVeWppJ4KIVF.EY!!1,ٖQ͒Mcqm.H$-\5Sd!miihԅebֶ2̶YlB[ZBYmn*IٙdX1%J FV R8 AjK?49;#9~#P&LIdlcI14"S4V6)#b )-HREL,CDIHS=/s1_Gi#k|Y,IҤ6eD>\TAd&#cIJ`h&P(XLC(4` űi A`,m jdBhL LXkd4hAfE%EٕűAF-%c!_M(.bRC$x(,dp}N"ߵf!#iP$FB1L`RQTm$FilX 1"$=vԅ&z=uۯ>͍%HcRE6 6\C% ]$ҢHIE/^Fk5 㖶f)" MHJ DQLaJUzLn`Zo:FyxL^UH u"*CXh +%$#DcA2R,`,wFRnO<^5CX0IdL]MyμGJrHh(iWlo6qaJ)L))R&* ݲZM(4!!HXHY`XK UYMJya#$X,% h%b(l&"ъ#`b%1{~iȊɠ""x7͚ V ú2b2fI Hb(J3m hi1ET- Hs>yx‚TE2X6|GҔvG'/UzH1n|}7@'I%QY>Ͻy0Sҽ*k\>9xŦsqBPGC'7~7xclsdɧ@jCqsÖ"x^L z"4y_9TŎnRzW߷|T[_nc0DEP?!,׽yx(DhSZ? CAGbsn.h|81s|vCXt-9ÙЊ` P P=H7vKvpofqQ繃l"? K|І; ,5) AggZFOBP>%IBo/_ՏMZ6,$ 5 eu$0jOսϧ'}d)GrwCZ" СM!FmXlQhڌ+AJ)2 -i4PZ 3 T6FFƢ"IcIV-IJ)5Փ&$Q$$Ec*R ^7P,Qmި/pЩ9ǎY7FE1C* GvHSzy()݈ф(F1`EK4Qd sM$f/NݹQ(PDQMfZ4 @`cUDmd+׿I|ˤ sEFYjs]CgyIX>\:!@lOuxZ$G#;d`z%P[G| y2 r <{ p{aq(RKյI[X\*?yC-뷕y>NwW9brtPCJ#Tƞ)x~ߐ{+D>7Kʞp=ԠtnqqBs Ǣhq> ~IZ?{[knxmW'v"/#YfZ\6-@l(E%SJ,DlF۟Iy=WbLHE1pSd ޓLV[b F/V^U R&!X%EQoK16FwlI$QLjiFře֋d LUZ@ 1TID j c 3FYHmj騳k F"`nݮ]95wqIla0d*h) p7ky{P-_1Z ),7-& hڋj+X+jEX%\UnUX"Ѷ@ hŅ+H1!@IBZ3/ |p%b9D\1EGoj.6ƤV616-2)F-FKhhw|u{.֤xjS"r)k TWrADC\@L|/|~R_ `xXbэEQbRF6ld6*ŢX,lشZhՋI2IZH>{ۈz2Hi~K0pz%(@H@< σ".A;ah@=:E JMFH_7@˯NBPחhỲbC)"ZEzM"j/~QEQ_25adPDDȃl:nC(ECT152+njL`{!0甦O204Zd 쟢Zc<(Ziy7B0$eFڷίԘiJEm`^űD`:鏚C(iI9]/Nr\ &І9 lIbڝW-5bj6#xF#"lm6 WL8.s7i^RG5DQ2b36 md Fӹ(s9JtF*ck%oQ?+xnZS-!M jih^Sy^<.K2"z#8*w@uBu}:5zI*y`ʲ ݆)Bm kRj^rzMQyrۯG厒AM4NTԾR5'&G]ԽOs%|9%0ʐ7Hhn) u1t4@BF`xI}d!.>RIuo?A݀tԞih5?&iL\9Zgf;)22!31Mu@!f)OT]wQRKTR&@P {" WmD4 }ч(/`޺~՗^A)*K^~<7:f+% JXo{T&53@+Lfma0q$0 D`8-Q6^^QE1lT<ĕQr 1{ͅ?nZ].k\ h~67w]W:rZ#i4][_HwA,{s p. y?4w~a:z^'x,UJ!Fz|䧑)eC:~^9Noҿ^N;? THkyjC;\:v4 }slB{֔86Ȕ>>_J;0PM%Y"؍E+_rluRP5$JŀD&6,Uh[kFch65A5QI4kh1l[f4F%mT(hiR|Hwdd'fG/HbGG MK ^{  HZ^^]<P8aInuՑD';냺U= }0wz`Bk׎6;uGA5#EB:z݈y/>$@v+P/=x GB9Pn(1%fx.)`x`*ɟP6@o@ȞOjA_GPR3.M༿/kw>{ХbHɒP桊l Pc_,nד4)ZJE5ESׯ+۳zF[? W#`Z b6whJl $s1;۩4%'~]rM"V*wmrUFQbƋcFQb,Z6-J0AUs`8ewv?DS LW%9EB9:#X?~^#Px AgG|=_ VsGv7/w~>%I(Rɬj Uѭb P҃H% S$L+E!z$SNXnEvHn8{>b&X_+o8֛n_ o ^/|-hCg/?&$74Hgn.b*EcZ 51[IkQn]vXW(Z5-h+S%iRM$(ᩳ2OqAP;?.{)o8wi^cQmooBlxܹ;vs;M~bQ۔S~;,wA{Qg)*@N}©ۿOrCڐDġH:@hALf[1wDY -PHz5C)1CfTvr8SyPE_hJQ! /Q[vdC!BC9C">XR]gdoGh>zꍯ (,E i[Χg;xҁҗ$ @JӚҮ3]՞+r+~9.mYaDHZ&Ѹm^}qJq_cx( ڿ f7v5{p Mv[_ vfջ_H ) b]lbTډDQ)0ETu38XC5w`EC"+>o&8mֲPX=3oy{)} ȏ(~.Gd \ekS"Ȧ۪{ /Pm5mت4khF=rwyR"}(ʮ.\9awI!LҏY33Fr(b׻We>_?wst/Ñw6k'V^SXD JDBQl[\W-Q[5% }GP?;OrNy&9TA @`4r~EF0TFĩk0#P ŽY Bl2$LP d@yB/ۼYt`$J%?~ *SYT2\9%??o"?„䜟؂™ CgvxըW-)TR#"(h*R"` %IIb[[j$ &R!HPT*Ҙ@(`a%!ϑ?I]8S$߅P Hj\!d P&B/H*4*ĆJNJdr=wyw_tu=›|?_+<.mO0qz^?r"OowE*阔HQNB4*@(H"D*HD* "cXW-/eJHБ g]%!Ȕz oH#cob!:@>iFh SA@hMXmj6ڦH(HKa8@2klcZlm~: C%0 2  @jhkF\-B[~ ׅ[jRC!\k!H `R%ZQd)JU31U@ ( ( B#H"'&dPOS PQ '%c̾9FT=9L@2hB2A U 0g$?AN(46(ړQd-m\cZ9@h"D !<}M%vHh*D-Nh5Z` ڑtCԓ%=9j sűZ+DʹڍkҴCmFmlZ EEhP\Xn6ɵr-jX&#@ۛ[\5-cmFJiF`)4\i@O Dԁ?o@d2NTVQj͵嶨Tn&Y:n+c[kTUMKIA$S#0HI #RŢ̡ljͭt5fPF$%i"%@)XT&(U((AJU P Q rINusmlRI%2EJPA(UY@JP2 )S!rQ (hDW$hJQiGA$\JP%C%>O=٨{y7UZQlr'淸͜>*\=O۫(iﶃzg\p_#ߟCN^DMޟ pymy0v®`c۽EN|Q}Jy]/Y7J=t * ҥS[5s6QkQbF)Ѧ,V-%\.fk(<w^+9S'B26%2A2@;D.%FJ",nkr֤ː*PD(3 c=5:DCJP{5`QX1VŨ$єjڮ465[RZdդ)\w}>_wڗp9UR? [*(xF2ITwѐ~$yrhH ߙ84~6l^ww/t\,d66pv;|JD c`k|]",iM3p ^t[ϽC Ğ9@ aiT9qd8@*V}/I_䩵ϔOesJ˱o˲2oVjM03!b߅e;^jיlѲW[Cd_+$f-~~DU*?DWJD .D{U˩ɮbJ *Ńk۷+$7/)7q.8 p(~g*QW}E*\V> PwqExNAK xu 򞝻 5WG^rlt9l /DZOUxA)c_ 񵙦oy5g4;7<䚷°X)wS1bҾl q?"λG7Dzg.dޖ_]#.$/Ğ ̼_f!Q{'J?n[4ދw~ed^a0Oft΅ Qĕ~k~VVb{=M.<ބ[%cq{u.GwHHvqvέVƋ %NEwy慢8,A`P3@ew9#W8>ݠMNf :$tXK r9|z[%Do_z6 #B,>$iro_#q[a ϙ(>ڧx>LQy:P} =/ #29Dލ?|:!CIcbZ(}t8[/6ug~Coх7ýT Mn`rB_5U.8H_iE}LqѦd|Q,iSuэ*jС}3PO}Q^B +t5;GB>es, X``c.n9ĔhPGRYxM~+Pᅀ(yn `""Y&#\b='RWxCz3{? Ҏ kFRio H򠯈-@.\)"(6Y="~o:;򋣈N^f*F_Y/1 ]rR0H#GmGLeح &BG<ab68c/5` FT,n9G0IMn7|y ^)^61úaԋHg.,ŋƛ=y@_}#KXnOg˃tǯ y `AY'-0 FJFBl0Y!?1Pҥ9BL"4J q[#{Vz˨WcPlj]7{&oZ +"-WˣTgA3/C^=LѱF^IFE Yk6eVv޲Ez4tjEh% ~s('gMtR@hҐQDV\UuK~HFVmOh;KצgZ #a}y<ygz?fc[KdwDǶtYD=3ô5Ok}aG]뉸<#O!,3d}N:!Q?NN/yi[@/Q|.8`:x gHYrf G@.0uukA霽8l'0Hw Cc~D#;mS{D:j;;Y]gMd͑3J^I:Θl9{TqKb5-m~MQhNN2J mWй# OY2&<<1O3[?j9= SOFL.Kfk/ce7X duxDՂU|%J_ӡ2ԙ?eژP̭ NYXsfJQ2}^$dG8<@}Uj3H,vF]RCQx9rI:}lWlV'r_p ;D~M{؜>Gd%r. n0 *"|g/JmX!ke# RWo5{WMDbZBe؀yJ.8^]ʐM(ý뤾P3-G y(/6zቴBs$uW}/׹ QI>j9 fqm (Ü Nhc@ wȅ0F% ⡨ :0L%ۏ٦K +ب)%nH˃=#W|VӐi5S;?)K)s eˢ|W7mIwURs/I֌Z WvФqS_:o]Rai)_Q8y ˡi)7m 4RY&Q,^ [Ǿ 7_I\}3(G UW6iLP~1|Vp͋yƆ֔pg7hWeO+è$9TI^2dV[LH$v7`Lnv Jy2O@tD/qy+Q(j㓘'*7P R) U0Wn]b:#}|kox)c^1;f*BgҒ~GfKTI.oR<NIk2˲FF&8!^;@{wZb2{.B% MmY}ټ_&J!N7LtV"e8[Nt{ҲErG8ie׬3ǿG[*n)%iF3a*ܬčhZֆe9束t(\a8c s*|ӕUUob]nWcĀ4$zm7-3.LQ  uvmy8x$ yʼgbAqR(ڤ2{OFɶ` 7/訓.yL{5WN{<7(3[SkZ{Ze_1д٣bljD('tш.dQ~0F(6B\!zV_ؓ#'x9~\ Ԣ"+v(7! R Q"NjV1z&> -%ahS  〰}ξRJF+PVK$bTxᥲv!P`4T}0#^M_wstVb`-j6T8ܞUWPUO!uK{ r%ސ..5f Yqq>tWBTee=K$4NhI_Z9vCwpkbu|3kCCsj5"gmȁN8k=zqַl5* 'v~d¥;`YE_JYrLPSe~Bz0Z}q'o] n-@/4܈'P$CV\!㬘w??'HƮOLhxR\Tx G&4q|BWD*{N6ޚ}@JSS}Uā@Q.CDMKv> 4ZLc H]a\FU G.Q3G!WIZAC'2`pU t$RHiVBsɢRֿx pΨ4+U"TQc]O:LX Q~ƒl:h Ŀfbtoc{]*Қ1V1w."4*{<wL+U 4dSz?J;tX8I Ά"Az{{ m}w2acHHWEqYHؐo[Yɽe+.RˆL1v.筳g58;8Vh}TnLq-̮ogm\a֮Veunpey|iұɴ|i-!rf-c &H7 $֓< ^H)cNezBBŗ) + CTyU_5Cm ~-#ѫON2<ȩM(O"2'צQ|$n3JQȏK;nTƆcpg)DF*&ɤ0,aNoYI%s\Ɩ#}E&wXz﴾gz!4{C|lG 3?T|yh^}tϥe7 eрsJjvRz&w;.rAl ~haT΅bd3qLb&h^Y*†F`i,Q'^vИX7],3Lxȡ.9H|%Y+lVR095Dk-;zTDZSD׊]G𕥽4|s t4![Wrv}SXi0uvtS@wͬ+R.$@>GLUYshEn3>NO:OKvyɰnX +$g؆ֆ@VA n<^Ԛ6!ƵaM\`N`; `kјY-_Õ=b!D=G`jv3ֵ8oTr48NֶJt*tyP^眇)%QQ ;Qqz6C:&~.n>)L8Qt aˍ\Z:g[ב 1WIw i`zH嘮Aұ^!I 'YۣpG1`H) ~wc,XW-Af? TY Yp$C`u3JKlP1 pI瀣\b"eWgVIk9fX>YIj2OÓ=mD* ί ;P}4 {R S\mMjs$.| Y¾ئ{}hӒغ"x5æv]Zn"T)&X#o~׌mH, +f-um[;hl7], MH+cb",0 Yo5,hX X 'A\Y~RÊ+OY@3TW9lROv3+,q;e'P,& @$VP(<:m&p}K!lL‘9n[`6"ΛE|D`\F? ]J^q] ]fڹ/b3R2Xu=vl @pr{:=#F [5_mdߣQG*kngԸ⼁1K4k"Ľd, Q811k'z ^ k%zo))nJɲ276LF»usQ@L/wnT']Z, >:?ވ8HGz gWa(iJk]/=I=*Lz yהP# 0:%6\͜N-aI֔m<; KWB Eh@ A߮S\@b')a-9Džv(au<S EA_.D}ц=v3|{8?w1"% BƴR *ѻ+,A-lk42Z ɏpG[R_;H,G[Q'< %7T~}mUL%.=(po#VWug4) AB#3ݹ1#p-{SVc';eg2^7d4A0)pDQEk0 l.;Ňϊ4cV~ҫwFl4঳Vc2!vb@?LgG8~\D5|l*(fV\U/(hSZRryɃ%.(es7ʺGV>f$/(7}C,f \à1cIq#?#YX5C2\'hxDnN U٩.˝~F?ɿ .ǖ2j'G3(4jmQ,3p<`y 1pdݾUDP%RxrPöRbkfC'ɴu A"$vES^aVa)>/@@TJn-ty;6C" ;>)1k捾+0k;tǼjڮWC,헊Tl˙(ʛ*a`'`'ZN5D?9)렒8R@7XCj6X|}X`x~( 99 HueM|Wק}z; !=pЇ<"a  xJ<}ej˃!yh.~.;Ǜ.7 s 9 8ie5"f/rFo,WLqsE_DdaܢU*cke8Jwj&9-q}7Jk_)*~kbD@ طtgPPhTT2`=ս&b7ѓ''u;HD)] pvʂ6yEarlqKod0RTϊShF*UIܯÐnu|a5MyQ2$}ܑ%p[D9#e {}A=' +:gQSfLMubY,BR6{ V[%z*jJVqֳk]p9DwD }@/gRG}ã[|p~rw+9 'iت 0<(.Z 1-hX>_N/Ŏp:v^2-tRja#)kny4ub*\W\M ֬w텇޾]ob2(~QTo4{}9nh! CJ{Ỹ7B(/ydTi~jwxa[wPqW@PBRc?2Gcl1 )VW5$a⽢aM6:Hu7~3Nadu '.*fZMtąT叀+)j~9#-@mDfq"qhqȦJ#䏳}6}LyiGr -z&w?,.d;=Hg) pvXE'7cGR;@W%~}/7 bXމB!P'ܻކp UbløL?H մAn2-ۗsKɡYp试_[%c!4 CIǔLa]J:B(~jXsIZ( fOb1H~_|6\U>fUWd~ V|y Nara h2rD{6Hݚ-ZAZVH(y\aiH6õk.JopK C{nUDxIVC|cإD>,XYu,|nH¨@JyNE&d#+6!\B֔5&SƨsW)W-f׳ԝ:5rziħV'Ϟ`unAB {/pG"@PpHc,a<$[s W7>Y>G)C̙g:1DNXX,%=Z#:{A#UBt}FD+ͯH{Lߜq!>c7 Dg˹1L \ *eVhOn~$L vyҍSR!R5 8c nnӓJ8Dgoͯ_퐴XGcFRjBF<^56RA;\OH7ϋa',O oɵ13~i`&e] 5gRGyV}UuCQwX3_$:^-\qVccFltvd)wqoQ1nQ>DUHC7FёXzB`P~'|7*mxM?|l_&/|RT>BKo;ïIMy$<4qDnb:&9z+"E9}qf -^gYM`HݜhspS ԜQ7[йIQO%>C"wGӾN@ݯ}9lh>:RzPW$ͬf%S|Э1q8Ԟ*lM(MXn65n WtXc D*ZqZ5zbn7R@6ZчoI(p3KeO/`ê=0)hty oR:0|ˡ+UgD;.:U^6#SW;!`b]H"Y7="׌mDUL~ZW:S2`e=a^ m_sxϭ^/пl3IgINb[aZ z:Zw&Xk  0`a]t? ˏ%R'Nj7R4 `"Xajd gzL^mZ&H+ X#ovvQ.`((2 ͱYߜm]gbUznLS"MC0b=\5WYYb2FW*yI8ߡ3$@σ 99 ;}aJkhXĖnjjK\3q$8Bo1Xrw?'GkK١J ` m`GOo[iH¤x+~l~NiB Jh F޹0[[O1ÿ\JI%`)| N!b$zKVFsS3oqgZk޴ltEBY4)aT@45uö+M͙.{RDO> F;ؿ(ajN$z#8IWS#ґR*NqhX=<ݼj%bo~7 _Ÿf9noER.Zxπ@8TC ebC70eYN ALjBO4ww@BJإR#U/z\ R?b^ ; 'Y8gu 5E2@Fgy@p)!i+8b f|kf.9q ~6,.,jRHeڔFOk CUjuuqGث:> 7gfM\scG89A23ՀZ&BN'w!c.uՊL`9c85HM:}#cbxbO QU#'P!_Jۼyot?&D 8CtA X πg!ޥ{wO8+K_Q̾uxl lB.$u*.(U8r`,5%_ˌ9IkP ?j\.,߷iF M"[.~b7J;,TiaTh&vM?{YechH4UtqIK*04z(/#,U"z,p]唱oMR'u'I'\:HdATR'3$9- k^W&=[f @YްJ[Yy7SBTOȾpN`Gc+{5<%֦Ŀa}T̠J{}sj-9ҳIK怢! 辏GH0B) *a15N.E:ʼn[,FƮٷO'Fx1๎U1m~5T&5ԳMIڷPE7"7Xv4@1 œOEʒ1xH``\=]0BbIpW6HiU97h4Nʠ~ b m.UD. ~yh4fQ:W񽗢I'^kyn]֙ G;EzsaB|%p50*Й0(D1̊ЉwI8S7]1l&Cylw,d!*{*s +q3{JһUU`9WJ&*=9!(d4Sh,)ܘ%tkiJjg3Q9{Jx@킄N?af+jPR{疩MmeժY!@/v-1Ljlv#bLhJ e #L^b9#DZgjrɓRkpzҚ #D(-u~iFK伉uQj 4oK,#rdc`q~ 6]:Sd&',/T-~j?nqeHF8yhk{ݍVőuuȧ̙nm\ѦhJR4QA> Yu=F!0K@ ,zSϢ}rL%iUm!IB:[(Fp(KKHܡbVI_eju}1H9 I&  ܮ&WVس*I>IC%PY >(;evZn^Ծ]r2];vd WS%DP$@yC/r.Uw8-n !XL$y4'xp%iY`w8L $ ,\q BJ:K цԱ^rNrUw5BC2Onyo -[꩒zckaڙ^gX 艞Y!8 $^ŭ()4pcy N=4J!5 q^Nťf/PDwkGfz҈3B.CUk?y&"梇)qOOXs=md&QA H,, |hj\z|7m@F\QD's\{M2" \ bP}Ļ^3ſrD$0]g竖,ҙ͝ `*%Ź_>8w,ᘡvBP 2>b0t`ImHEt禓6̠L)Gc%Eϼ𶉫zuȷ3r)ogukV2RV |PC"lX26%"%e^ZŨ[tE('IB 7B ~+zɷ@-.sb@8 @keX,GB4a4LjPW+G57}{©sC-uVt ygy 5F{$ (АI^`t=x" ~Lk bw+/+wd3¬6"6i}ieDKwqWhw\haHKPǷI{ ׏*(`YZwʱI?]9Ͳ(cd_;qbS|ޓ"Z ,Z[Zu' V m9ﻀًWYÅsptp43rcwD/٩P8O!սbLf! Tl< vedՇ(ߠxjv_ ~Mhi,²˦E֌o>OXe?Sn(\a,q `\LȀ`ۯP8jȭۙF/!E'JT&߂(B9DEzp2̒4ݛ>Bv9bF#T焔n<p}"IR2@ QSyؑc,^e"JtW%+(.EGW&qQ]h]2<e=>rRVNMNE]v˝%8|MqxsǏt5T}TJtgfVsP٧͵ 3IO{74Rxe*Ҷ Sd; )4gf8Ƥ@$=6T@I0Ř:ʦlSL|!\% {wJƻha;l]+<їЂSDsqU-u*S$pSjnLNQj/pSU?U-3 <jJa|vrvw[d^&1@@ç(*}~É*ynoZըN`B|c8Sk'ꅷ; BxS['o>`[ND%rdR C|O0`Rl:L~05P^DQ"f4K_?yМ2"8CA:-l]ɼ4ܷ-Qt~F3"1xw,)B7x2Iu PfpEt}8O) 0Ɩդ@)|j>R2ca pA8CBjȉ{/բ03h=Dc/eDH9mС7?ED6u"m,mz\Ͻ!BYPl񮝑gx$VX %Oʶ'fG@ 1XϪqS-aoV5Z S?S"PQC 'te iVKl4i͚?ae!M pVT:ukD>E%oג㨺F E!`rfeuN6!2k3ax`ď^uϘxc>Z65yaB?૒ Fl*77#llD\ /7;}#Q@ bs - ?䛝xmterW2P2!4qNFnv/.ٜ\n2\8/:gA^WgS K & 79&c-S3#p˔=qY2p>U 8J` s tWkGNks9gn@wPF^r}VYh;1̿3쮶~;9D|7h3Rny=P<J̫vϝۢ81i{0g&,1D/ P#276v3cPUEbK$]a=,. ̓٩iRɔgON X,`j4nݴ0hz!(xa(t\mkRjݾQ H2 !4#’7ɭגM+F <ܧ@S|6Ql+F0(Eq+.4(̥1kr.T˂ Ѿ@b8,.f`Koj'ۏ_4.k؄7ܴW}x*?e9v<6.Qj*Te/Dq"2r( :_6P$~)QiC_߯ҨKWZ*V>\v`[Bv-9nEo}7B <9>kN*$d3 Mv=Ro?@mhxx4@3e(92Rf7j>a9\Dp%;|U͈("= \@ٰ@s;z@ "3 g;>+tmj/G([Rp)m`!Y BKPlAM1G} H~E8>DVUͰ$Q~ƫX'vyWZ|޶+rP9|9Xru?$_[i vwctZZ`mrL/:lV>*Om]S7ͱ/߶EHhT#} T8 e*k}iO&z_hwH΍(ƽ⭐bNa璗r(jmҪYFx9r.M8|xN)5k~U,t~VН,?T\VݕOyY?_RuCKV /xH,"f7n)ηcxݲnH{>&D!$rg'Z.mv5mY2bω QBp \N=~4r!44@kX\Vc.:*:jp8 "HLWq(_eA"#@[: YZ