qemu-s390x-8.2.4-150600.3.3.1<>,fJp9|=]35). [M8G:FӠipmIC3q >N%wqI5EzВ8*kjT1`4# 7vYS4"//: 3*[o a5 ^z qs;=>f..]jMn)kDGRH6Э%=Xr!q\ʯvf+(CvG'9"ik+|84J-H & qDQc>Ad?Td   Yx       $=VxHH H( 89:6BFGHI$X,Y8Zd[h\p]^b%cdMeRfUlWulvwxyDzPCqemu-s390x8.2.4150600.3.3.1Machine emulator and virtualizer for S/390 architectures QEMU provides full machine emulation and cross architecture usage. It closely integrates with KVM and Xen virtualization, allowing for excellent performance. Many options are available for defining the emulated environment, including traditional devices, direct host device access, and interfaces specific to virtualization. This package provides s390x emulation.fJh02-armsrv3eSUSE Linux Enterprise 15SUSE LLC BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIThttps://www.suse.com/System/Emulators/PChttps://www.qemu.org/linuxaarch64ͰqpA큤fJefJ\fJ\fFfF97bce8cbb9bba1faba45fdcdffadabc849d3f5708b74f3b28d075f4d65c08d2aa36f3e68670b951d0c825ab211e1c0f61d795caf23d3b0ebd770ddd841ed38ab0985865e94e3a4f2a4db9c62a2cc2cf32075d4df8e7ddf641633e92840683b65ef4ef1630a8111dfe132be467818f121537c7e86c94238273a2073b114ab256erootrootrootrootrootrootrootrootrootrootqemu-8.2.4-150600.3.3.1.src.rpmqemu-s390qemu-s390xqemu-s390x(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libaio.so.1()(64bit)libaio.so.1(LIBAIO_0.1)(64bit)libaio.so.1(LIBAIO_0.4)(64bit)libbpf.so.1()(64bit)libbpf.so.1(LIBBPF_0.0.1)(64bit)libbpf.so.1(LIBBPF_0.0.7)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcapstone.so.4()(64bit)libfdt.so.1()(64bit)libfdt.so.1(LIBFDT_1.2)(64bit)libgcrypt.so.20()(64bit)libgcrypt.so.20(GCRYPT_1.6)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgmodule-2.0.so.0()(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgobject-2.0.so.0()(64bit)libibverbs.so.1()(64bit)libibverbs.so.1(IBVERBS_1.0)(64bit)libibverbs.so.1(IBVERBS_1.1)(64bit)libjpeg.so.8()(64bit)libjpeg.so.8(LIBJPEG_8.0)(64bit)libkeyutils.so.1()(64bit)libkeyutils.so.1(KEYUTILS_0.3)(64bit)libkeyutils.so.1(KEYUTILS_1.6)(64bit)liblzo2.so.2()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libm.so.6(GLIBC_2.29)(64bit)libnuma.so.1()(64bit)libnuma.so.1(libnuma_1.1)(64bit)libnuma.so.1(libnuma_1.2)(64bit)libnuma.so.1(libnuma_1.3)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpixman-1.so.0()(64bit)libpng16.so.16()(64bit)libpng16.so.16(PNG16_0)(64bit)librdmacm.so.1()(64bit)librdmacm.so.1(RDMACM_1.0)(64bit)libsasl2.so.3()(64bit)libseccomp.so.2()(64bit)libslirp.so.0()(64bit)libslirp.so.0(SLIRP_4.0)(64bit)libslirp.so.0(SLIRP_4.1)(64bit)libslirp.so.0(SLIRP_4.7)(64bit)libsnappy.so.1()(64bit)libudev.so.1()(64bit)libudev.so.1(LIBUDEV_183)(64bit)liburing.so.2()(64bit)liburing.so.2(LIBURING_2.0)(64bit)libvdeplug.so.3()(64bit)libz.so.1()(64bit)libz.so.1(ZLIB_1.2.0)(64bit)libzstd.so.1()(64bit)qemurpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)8.2.43.0.4-14.6.0-14.0-15.2-14.14.3fE@f;i@f0@f! @e8@eeqeeeBeПeN@e@e)ee|?e|?eg'e]@eTe7e/e/e&@ee@eeeReRddd\@dddx@dtdldkY@dkY@d[@d@dd@dd @ccU@c&@c1cӼcӼccctck@cc@cY!@cV~@cD @c@c=qc=qc< @c< @c< @c6@c6@c47@c47@c2c*c)@c#b?b?b?b@bbҨ@bҨ@bVbbb@bw@b{@b^@bL/@bL/@bEbBbBbBb=b=b<]@b; b9@b0b%b%b@b@b@b@b@b @aC@aZ@aa@aa*@a*@a*@a*@a*@a@a@a5aLa@awa`2aC1a@a8a8a0a.a(a'@aj@a $@a /`@`@`Q@`ݮ@`ݮ@`@`"@`P@`@` @`@`@`Z`@`@`}p`x*`u`c`Y@`Q@`P`OL@`KW`KW`B@`?z@`8`/@`.V`-@`+`!'`!'`3@````@` @`x@__T_j____^@_@__@_}_ts@_h_`_Z@_Z@_X_N7_FN_D@_>e_;_2@_{__@^z^@^n@^?@^^^U@^U@^^@^1^@^@^^|@^y@^t@^t@^oj@^j$@^Nt^M#@^9\^8 @^0"@^*@^*@^@^@^^g@^]+]]]e@]@]Γ@]X]@]µ]]5@]W]]@]@]@]?]x]rJ@]rJ@]M`@]J@]Ik]H@]9\\F@\Q\Q\t@\ޢ@\ޢ@\@\ڭ\ֹ@\g\@\!\Ɋ@\\e\\Y@\o@\n\f\ac\T4\Q\J@\@n@\=@\@[>@[>@[o[@[[ @[ZnZ@ZZZ@ZZ̧@ZZZZZw@Z@ZX0>X%X lW_@WWv@WWίWW:WQWWWWW@W~W~WWzOWZWZWQq@WN@WN@WF@WEW!@W!@W@Wo@VbVV@V@V@VVuV]VQ@VQ@VMVMV0V&,VVZVZVZU6@U5@U(U@U@UUlI@Ud`@UT@UQ@U@U7@U4@U.RU-@U-@U) U'@U&iU&iU%@U%@UUU@U ]@U T@TTD@TZ@T@dfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.commliska@suse.czdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.commliska@suse.czdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdmueller@suse.comdfaggioli@suse.comgiecrilj@stegny.2a.plschwab@suse.dedfaggioli@suse.comdfaggioli@suse.comhpj@urpla.netdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdmueller@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdimstar@opensuse.orgdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comlma@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.commliska@suse.czdmueller@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comlma@suse.comli.zhang@suse.comdfaggioli@suse.comli.zhang@suse.comli.zhang@suse.comdfaggioli@suse.comdfaggioli@suse.comdfaggioli@suse.comdmueller@suse.comdfaggioli@suse.comguillaume.gardet@opensuse.orgjose.ziviani@suse.comli.zhang@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comjose.ziviani@suse.comdmueller@suse.comjose.ziviani@suse.comjose.ziviani@suse.combrogers@suse.comjose.ziviani@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.commilsav92@outlook.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.commliska@suse.czbrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.comdimstar@opensuse.orgbrogers@suse.combrogers@suse.comdimstar@opensuse.orgbrogers@suse.comohering@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comguillaume.gardet@opensuse.orgbrogers@suse.combrogers@suse.comstefan.bruens@rwth-aachen.debrogers@suse.comlnussel@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.comstefan.bruens@rwth-aachen.delyan@suse.comcgoll@suse.combrogers@suse.combrogers@suse.comtchvatal@suse.combrogers@suse.combrogers@suse.comschwab@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgbrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comolaf@aepfle.debrogers@suse.comolaf@aepfle.delma@suse.combrogers@suse.comolaf@aepfle.debrogers@suse.combrogers@suse.comldewey@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comldewey@suse.combrogers@suse.comldewey@suse.commatz@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlma@suse.comkwalter@suse.combrogers@suse.comlyan@suse.combrogers@suse.comlma@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comjfehlig@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comhenrik.kuhn@origenis.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comjfehlig@suse.combrogers@suse.combrogers@suse.comschwab@suse.debrogers@suse.comschwab@suse.debrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.comlyan@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.combrogers@suse.comohering@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.comafaerber@suse.deafaerber@suse.debrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comagraf@suse.comafaerber@suse.debrogers@suse.comagraf@suse.combrogers@suse.comglin@suse.combrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.comagraf@suse.combrogers@suse.combrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deolaf@aepfle.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.destefan.bruens@rwth-aachen.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.detampakrap@opensuse.orgafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deagraf@suse.comcrrodriguez@opensuse.orgagraf@suse.comjslaby@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deagraf@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.debrogers@suse.comafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.deafaerber@suse.dempluskal@suse.comafaerber@suse.deagraf@suse.comafaerber@suse.de- Update to version 8.2.4. Full changelog/backports here: https://lore.kernel.org/qemu-devel/1715632914.382233.1013785.nullmailer@tls.msk.ru/ Some of the upstream backports are: target/sh4: Fix SUBV opcode target/sh4: Fix ADDV opcode hw/arm/npcm7xx: Store derivative OTP fuse key in little endian hw/dmax/xlnx_dpdma: fix handling of address_extension descriptor fields hw/ufs: Fix buffer overflow bug tests/avocado: update sunxi kernel from armbian to 6.6.16 target/loongarch/cpu.c: typo fix: expection backends/cryptodev-builtin: Fix local_error leaks nbd/server: Mark negotiation functions as coroutine_fn nbd/server: do not poll within a coroutine context linux-user: do_setsockopt: fix SOL_ALG.ALG_SET_KEY target/riscv/kvm: change timer regs size to u64 target/riscv/kvm: change KVM_REG_RISCV_FP_D to u64 target/riscv/kvm: change KVM_REG_RISCV_FP_F to u32 ...- Fixes: * [openSUSE][RPM] Prioritize PA over PipeWire in SLE (bsc#1222218) * [openSUSE][RPM] Hostname normalization (for repr. build ) done properly (boo#1084909)- Fix a build issue on riscv: * target/riscv/kvm: rename riscv_reg_id() to riscv_reg_id_ulong() * target/riscv/kvm: add RISCV_CONFIG_REG() * target/riscv/kvm: change timer regs size to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_D to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_F to u32 - Update to version 8.2.3. Full changelog/backports here: https://lore.kernel.org/qemu-devel/1713980341.971368.1218343.nullmailer@tls.msk.ru/ Some of the upstream backports are: * Update version for 8.2.3 release * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS. * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs. * hw/pci-host/ppc440_pcix: Do not expose a bridge device on PCI bus * hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately * virtio-pci: fix use of a released vector * linux-user/x86_64: Handle the vsyscall page in open_self_maps_{2,4} * hw/audio/virtio-snd: Remove unused assignment * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum() * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set * hw/net/lan9118: Fix overflow in MIL TX FIFO * hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition * backends/cryptodev: Do not abort for invalid session ID * hw/misc/applesmc: Fix memory leak in reset() handler * hw/block/nand: Fix out-of-bound access in NAND block buffer * hw/block/nand: Have blk_load() take unsigned offset and return boolean * hw/block/nand: Factor nand_load_iolen() method out * qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs * mirror: Don't call job_pause_point() under graph lock (bsc#1224179) * ...and many more...- Backports and bugfixes: * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum() (bsc#1222841, CVE-2024-3567) * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446) * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446) * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446) * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446) * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447) * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)- Update to version 8.2.2. Full changelog here: https://lore.kernel.org/qemu-devel/1709577077.783602.1474596.nullmailer@tls.msk.ru/ Some upstream backports: * chardev/char-socket: Fix TLS io channels sending too much data to the backend * tests/unit/test-util-sockets: Remove temporary file after test * hw/usb/bus.c: PCAP adding 0xA in Windows version * hw/intc/Kconfig: Fix GIC settings when using "--without-default-devices" * gitlab: force allow use of pip in Cirrus jobs * tests/vm: avoid re-building the VM images all the time * tests/vm: update openbsd image to 7.4 * target/i386: leave the A20 bit set in the final NPT walk * target/i386: remove unnecessary/wrong application of the A20 mask * target/i386: Fix physical address truncation * target/i386: check validity of VMCB addresses * target/i386: mask high bits of CR3 in 32-bit mode * pl031: Update last RTCLR value on write in case it's read back * hw/nvme: fix invalid endian conversion * update edk2 binaries to edk2-stable202402 * update edk2 submodule to edk2-stable202402 * target/ppc: Fix crash on machine check caused by ifetch * target/ppc: Fix lxv/stxv MSR facility check * .gitlab-ci.d/windows.yml: Drop msys2-32bit job * system/vl: Update description for input grab key * docs/system: Update description for input grab key * hw/hppa/Kconfig: Fix building with "configure --without-default-devices" * tests/qtest: Depend on dbus_display1_dep * meson: Explicitly specify dbus-display1.h dependency * audio: Depend on dbus_display1_dep * ui/console: Fix console resize with placeholder surface * ui/clipboard: add asserts for update and request * ui/clipboard: mark type as not available when there is no data * ui: reject extended clipboard message if not activated * target/i386: Generate an illegal opcode exception on cmp instructions with lock prefix * i386/cpuid: Move leaf 7 to correct group * i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F * i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs * i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available * .gitlab-ci/windows.yml: Don't install libusb or spice packages on 32-bit * iotests: Make 144 deterministic again * target/arm: Don't get MDCR_EL2 in pmu_counter_enabled() before checking ARM_FEATURE_PMU * target/arm: Fix SVE/SME gross MTE suppression checks * target/arm: Handle mte in do_ldrq, do_ldro - Address bsc#1220310. Backported upstream commits: * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs.- Fix bsc#1220799. Amended commit: * [openSUSE]: Increase default phys bits to 42, if host supports that (bsc#1205978, bsc#1219977, bsc#1220799)- Backports and bugfixes: * [openSUSE]: Increase default phys bits to 42, if host supports that (bsc#1205978, bsc#1219977) * vfio/pci: Clear MSI-X IRQ index always (bsc#1220275)- Just "prettify" the spec files a little: * [openSUSE][RPM] Cosmetic fixes to spec files (copyright, sorting, etc)- Patchqueue shrinking and bugfixing (actually, more of a temporary workaround, until a proper solution is found upstream): * [openSUSE] roms/seabios: revert some upstream commits that break a lot of use-cases * [openSUSE] roms/seabios: Drop an old (and no longer necessary) downstream patch (bsc#1219977)Update to latest stable version (8.2.1) - Downstream changes: * [openSUSE][RPM]: Install the VGA module "more often" (bsc#1219164) * [openSUSE][RPM] Fix handling of qemu-kvm legacy package for RISCV * [openSUSE][RPM] factor common definitions between qemu and qemu-linux-user spec files - Upstream backports: * target/arm: Fix incorrect aa64_tidcp1 feature check * target/arm: Fix A64 scalar SQSHRN and SQRSHRN * target/xtensa: fix OOB TLB entry access * qtest: bump aspeed_smc-test timeout to 6 minutes * monitor: only run coroutine commands in qemu_aio_context * iotests: port 141 to Python for reliable QMP testing * iotests: add filter_qmp_generated_node_ids() * block/blklogwrites: Fix a bug when logging "write zeroes" operations. * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693) * tcg/arm: Fix SIGILL in tcg_out_qemu_st_direct * linux-user/riscv: Adjust vdso signal frame cfa offsets * linux-user: Fixed cpu restore with pc 0 on SIGBUS * block/io: clear BDRV_BLOCK_RECURSE flag after recursing in bdrv_co_block_status * coroutine-ucontext: Save fake stack for pooled coroutine * tcg/s390x: Fix encoding of VRIc, VRSa, VRSc insns * accel/tcg: Revert mapping of PCREL translation block to multiple virtual addresses * acpi/tests/avocado/bits: wait for 200 seconds for SHUTDOWN event from bits VM * s390x/pci: drive ISM reset from subsystem reset * s390x/pci: refresh fh before disabling aif * s390x/pci: avoid double enable/disable of aif * hw/scsi/esp-pci: set DMA_STAT_BCMBLT when BLAST command issued * hw/scsi/esp-pci: synchronise setting of DMA_STAT_DONE with ESP completion interrupt * hw/scsi/esp-pci: generate PCI interrupt from separate ESP and PCI sources * hw/scsi/esp-pci: use correct address register for PCI DMA transfers * migration/rdma: define htonll/ntohll only if not predefined * hw/pflash: implement update buffer for block writes * hw/pflash: use ldn_{be,le}_p and stn_{be,le}_p * hw/pflash: refactor pflash_data_write() * backends/cryptodev: Do not ignore throttle/backends Errors * target/i386: pcrel: store low bits of physical address in data[0] * target/i386: fix incorrect EIP in PC-relative translation blocks * target/i386: Do not re-compute new pc with CF_PCREL * load_elf: fix iterator's type for elf file processing * target/hppa: Update SeaBIOS-hppa to version 15 * target/hppa: Fix IOR and ISR on error in probe * target/hppa: Fix IOR and ISR on unaligned access trap * target/hppa: Export function hppa_set_ior_and_isr() * target/hppa: Avoid accessing %gr0 when raising exception * hw/hppa: Move software power button address back into PDC * target/hppa: Fix PDC address translation on PA2.0 with PSW.W=0 * hw/pci-host/astro: Add missing astro & elroy registers for NetBSD * hw/hppa/machine: Disable default devices with --nodefaults option * hw/hppa/machine: Allow up to 3840 MB total memory * readthodocs: fully specify a build environment * .gitlab-ci.d/buildtest.yml: Work around htags bug when environment is large * target/s390x: Fix LAE setting a wrong access register * tests/qtest/virtio-ccw: Fix device presence checking * tests/acpi: disallow tests/data/acpi/virt/SSDT.memhp changes * tests/acpi: update expected data files * edk2: update binaries to git snapshot * edk2: update build config, set PcdUninstallMemAttrProtocol = TRUE. * edk2: update to git snapshot * tests/acpi: allow tests/data/acpi/virt/SSDT.memhp changes * util: fix build with musl libc on ppc64le * tcg/ppc: Use new registers for LQ destination * hw/intc/arm_gicv3_cpuif: handle LPIs in in the list registers * hw/vfio: fix iteration over global VFIODevice list * vfio/container: Replace basename with g_path_get_basename * edu: fix DMA range upper bound check * hw/net: cadence_gem: Fix MDIO_OP_xxx values * audio/audio.c: remove trailing newline in error_setg * chardev/char.c: fix "abstract device type" error message * target/riscv: Fix mcycle/minstret increment behavior * hw/net/can/sja1000: fix bug for single acceptance filter and standard frame * target/i386: the sgx_epc_get_section stub is reachable * configure: use a native non-cross compiler for linux-user * include/ui/rect.h: fix qemu_rect_init() mis-assignment * target/riscv/kvm: do not use non-portable strerrorname_np() * iotests: Basic tests for internal snapshots * vl: Improve error message for conflicting -incoming and -loadvm * block: Fix crash when loading snapshot on inactive node - Fixes: * bsc#1218484 (CVE-2023-6693)- Try to solve the qemu-kvm dependency issues on all arches (see, e.g., bsc#1218684) * [openSUSE][RPM] Create the legacy qemu-kvm symlink for all arches- Update the service file to use OBS-scm (by fvogt) - Various fixes: * [openSUSE][RPM] Fix enabling features on non-x86_64 (bsc#1220011, bsc#1219818) * [openSUSE][RPM] Disable test-crypto-secret in linux-user build * [openSUSE] Update ipxe submodule reference (bsc#1219733, bsc#1219722) * [openSUSE][RPM] spec: allow building without spice- Fix a build issue of OVMF caused by https://gitlab.com/qemu-project/qemu/-/issues/2064: * target/i386: fix incorrect EIP in PC-relative translation blocks * target/i386: Do not re-compute new pc with CF_PCREL- Update to latest upstream release, 8.2.0: The full list of changes are available at: https://wiki.qemu.org/ChangeLog/8.2 Highlights include: * New virtio-sound device emulation * New virtio-gpu rutabaga device emulation used by Android emulator * New hv-balloon for dynamic memory protocol device for Hyper-V guests * New Universal Flash Storage device emulation * Network Block Device (NBD) 64-bit offsets for improved performance * dump-guest-memory now supports the standard kdump format * ARM: Xilinx Versal board now models the CFU/CFI, and the TRNG device * ARM: CPU emulation support for cortex-a710 and neoverse-n2 * ARM: architectural feature support for PACQARMA3, EPAC, Pauth2, FPAC, FPACCOMBINE, TIDCP1, MOPS, HBC, and HPMN0 * HPPA: CPU emulation support for 64-bit PA-RISC 2.0 * HPPA: machine emulation support for C3700, including Astro memory controller and four Elroy PCI bridges * LoongArch: ISA support for LASX extension and PRELDX instruction * LoongArch: CPU emulation support for la132 * RISC-V: ISA/extension support for AIA virtualization support via KVM, and vector cryptographic instructions * RISC-V: Numerous extension/instruction cleanups, fixes, and reworks * s390x: support for vfio-ap passthrough of crypto adapter for protected virtualization guests * Tricore: support for TC37x CPU which implements ISA v1.6.2 * Tricore: support for CRCN, FTOU, FTOHP, and HPTOF instructions * x86: Zen support for PV console and network devices - Patch added (from upstream stable tree): * include/ui/rect.h: fix qemu_rect_init() mis-assignment- Some packaging and dependencies fixes: * [openSUSE] rpm: restrict canokey to openSUSE only * [openSUSE] rpm: fix virtiofsd dependency on 32 bit systems * [openSUSE] rpm: add support for canokeys (boo#1217520)- Rearrange dependencies and subpackages and filter features for ALP * [openSUSE] rpm: disable Xen support in ALP-based distros * [openSUSE] rpm: some more refinements of inter-subpackage dependencies- Fix boo#1084909 and create a new qemu-spice metapackage: * [openSUSE] rpm: normalize hostname, for reproducible builds (#44) * [openSUSE] rpm: new subpackage, for SPICE- Align to upstream stable release. It includes many of the patches we had backported ourself, to fix bugs and issues, plus more. See here for details: * https://lore.kernel.org/qemu-devel/1700589639.257680.3420728.nullmailer@tls.msk.ru/ * https://gitlab.com/qemu-project/qemu/-/commits/stable-8.1?ref_type=heads An (incomplete!) list of such backports is: * Update version for 8.1.3 release * hw/mips: LOONGSON3V depends on UNIMP device * target/arm: HVC at EL3 should go to EL3, not EL2 * s390x/pci: only limit DMA aperture if vfio DMA limit reported * target/riscv/kvm: support KVM_GET_REG_LIST * target/riscv/kvm: improve 'init_multiext_cfg' error msg * tracetool: avoid invalid escape in Python string * tests/tcg/s390x: Test LAALG with negative cc_src * target/s390x: Fix LAALG not updating cc_src * tests/tcg/s390x: Test CLC with inaccessible second operand * target/s390x: Fix CLC corrupting cc_src * tests/qtest: ahci-test: add test exposing reset issue with pending callback * hw/ide: reset: cancel async DMA operation before resetting state * target/mips: Fix TX79 LQ/SQ opcodes * target/mips: Fix MSA BZ/BNZ opcodes displacement * ui/gtk-egl: apply scale factor when calculating window's dimension * ui/gtk: force realization of drawing area * ati-vga: Implement fallback for pixman routines * ...- Backports and bugfixes: * [openSUSE] Make Sphinx build reproducible (boo#1102408) * target/s390x/arch_dump: Add arch cleanup function for PV dumps (bsc#1217227) * dump: Add arch cleanup function (bsc#1217227) * target/s390x/dump: Remove unneeded dump info function pointer init (bsc#1217227)- Fix bsc#1216638: * target/s390x: Fix LAALG not updating cc_src * target/s390x: Fix CLC corrupting cc_src- [openSUSE] supportconfig: Adapt plugin to modern supportconfig- [openSUSE] Add -p1 to autosetup in spec files * So patches can be applied easily (might be useful for development)- Update to version 8.1.2: This fixes the following upstream issues: * https://gitlab.com/qemu-project/qemu/-/issues/1826 * https://gitlab.com/qemu-project/qemu/-/issues/1834 * https://gitlab.com/qemu-project/qemu/-/issues/1846 It also contains a fix for: * CVE-2023-42467 (bsc#1215192) As well as several upstream backports (list available at: https://lore.kernel.org/qemu-devel/24dfb1c2-dc40-4841-893d-5d530638b684@tls.msk.ru/)- Update to version 8.1.1: Upstream backports and bugfixes, among which: * tpm: fix crash when FD >= 1024 and unnecessary errors due to EINTR (Marc-Andr303251 Lureau) * meson: Fix targetos match for illumos and Solaris. (Jonathan Perkin) * s390x/ap: fix missing subsystem reset registration (Janosch Frank) * ui: fix crash when there are no active_console (Marc-Andr303251 Lureau) * virtio-gpu/win32: set the destroy function on load (Marc-Andr303251 Lureau) * target/riscv: Allocate itrigger timers only once (Akihiko Odaki) * target/riscv/pmp.c: respect mseccfg.RLB for pmpaddrX changes (Leon Schuermann) * target/riscv: fix satp_mode_finalize() when satp_mode.supported = 0 (Daniel Henrique Barboza) * hw/riscv: virt: Fix riscv,pmu DT node path (Conor Dooley) * [...] * target/arm: Fix 64-bit SSRA (Richard Henderson) * target/arm: Fix SME ST1Q (Richard Henderson) * accel/kvm: Specify default IPA size for arm64 (Akihiko Odaki) * kvm: Introduce kvm_arch_get_default_type hook (Akihiko Odaki) * include/hw/virtio/virtio-gpu: Fix virtio-gpu with blob on big endian hosts (Thomas Huth) * target/s390x: Check reserved bits of VFMIN/VFMAX's M5 (Ilya Leoshkevich) * target/s390x: Fix VSTL with a large length (Ilya Leoshkevich) * target/s390x: Use a 16-bit immediate in VREP (Ilya Leoshkevich) * target/s390x: Fix the "ignored match" case in VSTRS (Ilya Leoshkevich) Full list available at: * https://lore.kernel.org/qemu-devel/d0d2ac8f-313a-c937-dc3a-88e45fce933c@tls.msk.ru/- Fix (bsc#1215486): * [openSUSE][RPM] spec: enable the Pipewire audio backend (bsc#1215486)- (Properly) fix: bsc#1213210 * linux-user/elfload: Enable vxe2 on s390x - Fix: bsc#1215677 * optionrom: Remove build-id section- Fix bsc#1215311: * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)- Fix the build for SLE/Leap: * [openSUSE][RPM] Make the package buildable on SLE/Leap 15.x- Fix bsc#1211000: * [openSUSE] block: Add a thread-pool version of fstat (bsc#1211000) * [openSUSE] block: Convert qmp_query_block() to coroutine_fn (bsc#1211000) * [openSUSE] block: Don't query all block devices at hmp_nbd_server_start (bsc#1211000) * [openSUSE] block: Convert qmp_query_named_block_nodes to coroutine (bsc#1211000) * [openSUSE] block: Convert bdrv_block_device_info into co_wrapper (bsc#1211000) * [openSUSE] block: Convert bdrv_query_block_graph_info to coroutine (bsc#1211000) * [openSUSE] block: Temporarily mark bdrv_co_get_allocated_file_size as mixed (bsc#1211000) * [openSUSE] block: Allow the wrapper script to see functions declared in qapi.h (bsc#1211000) * [openSUSE] block: Remove unnecessary variable in bdrv_block_device_info (bsc#1211000) * [openSUSE] block: Remove bdrv_query_block_node_info (bsc#1211000) - Fix bsc#1213210: * target/s390x: Fix the "ignored match" case in VSTRS (bsc#1213210)- Update to version 8.1.0. Full list of changes are available at: https://wiki.qemu.org/ChangeLog/8.1 Highlights: * VFIO: improved live migration support, no longer an experimental feature * GTK GUI now supports multi-touch events * ARM, PowerPC, and RISC-V can now use AES acceleration on host processor * PCIe: new QMP commands to inject CXL General Media events, DRAM events and Memory Module events * ARM: KVM VMs on a host which supports MTE (the Memory Tagging Extension) can now use MTE in the guest * ARM: emulation support for bpim2u (Banana Pi BPI-M2 Ultra) board and neoverse-v1 (Cortex Neoverse-V1) CPU * ARM: new architectural feature support for: FEAT_PAN3 (SCTLR_ELx.EPAN), FEAT_LSE2 (Large System Extensions v2), and experimental support for FEAT_RME (Realm Management Extensions) * Hexagon: new instruction support for v68/v73 scalar, and v68/v69 HVX * Hexagon: gdbstub support for HVX * MIPS: emulation support for Ingenic XBurstR1/XBurstR2 CPUs, and MXU instructions * PowerPC: TCG SMT support, allowing pseries and powernv to run with up to 8 threads per core * PowerPC: emulation support for Power9 DD2.2 CPU model, and perf sampling support for POWER CPUs * RISC-V: ISA extension support for BF16/Zfa, and disassembly support for Zcm*/Z*inx/XVentanaCondOps/Xthead * RISC-V: CPU emulation support for Veyron V1 * RISC-V: numerous KVM/emulation fixes and enhancements * s390: instruction emulation fixes for LDER, LCBB, LOCFHR, MXDB, MXDBR, EPSW, MDEB, MDEBR, MVCRL, LRA, CKSM, CLM, ICM, MC, STIDP, EXECUTE, and CLGEBR(A) * SPARC: updated target/sparc to use tcg_gen_lookup_and_goto_ptr() for improved performance * Tricore: emulation support for TC37x CPU that supports ISA v1.6.2 instructions * Tricore: instruction emulation of POPCNT.W, LHA, CRC32L.W, CRC32.B, SHUFFLE, SYSCALL, and DISABLE * x86: CPU model support for GraniteRapids * and lots more... - This also (automatically) fixes: * bsc#1212850 (CVE-2023-3354) * bsc#1213001 (CVE-2023-3255) * bsc#1213925 (CVE-2023-3180) * bsc#1213414 (CVE-2023-3301) * bsc#1207205 (CVE-2023-0330) * bsc#1212968 (CVE-2023-2861) * bsc#1179993, bsc#1181740, bsc#1211697- perl-Text-Markdown is not available in all distros and for all arch-es. Use discount instead - Patches added: * [openSUSE][spec] Use discount instead of perl-Text-Markdown- Update to version 8.0.4: * Official changelog not released on the mailing list yet * Security issues fixed: - bsc#1212850 (CVE-2023-3354) - bsc#1213001 (CVE-2023-3255) - bsc#1213925 (CVE-2023-3180) - bsc#1207205 (CVE-2023-0330)- Fix bsc#1179993, bsc#1181740, bsc#1213001 - Patches added: * hw/ide/piix: properly initialize the BMIBA register * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)- Update to version 8.0.3: * See full log: https://lists.nongnu.org/archive/html/qemu-stable/2023-07/msg00086.html * Security issues fixed: - 9pfs: prevent opening special files (CVE-2023-2861) - vhost-vdpa (CVE-2023-3301) * Use the official xkb name for Arabic layout, not the legacy synonym (bsc#1212966) * [openSUSE][RPM] Update to version 8.0.3- Patches added (first one is relevant for boo#1197298 and bsc#1212768): * [openSUSE][RPM] Use --preserve-argv0 in qemu-linux-user (#32) * [openSUSE][RPM] Split qemu-tools package (#31)- Update to version 8.0.2: * Stability, security and bug fixes - Patch added: * [openSUSE][RPM] Update to version 8.0.2- Patch added: [openSUSE][RPM] Fix deps for virtiofsd and improve spec files- Update the _constraints file: * the qemu-testsuite package does not exist any longer, but some of the tests are done in the qemu package (so "transfer" some of the constraints to that one) - some of the builds are failing with OOM, happening while the RPM is actually put together, at the end of the process. Try to give them more RAM- Patch added: [openSUSE][RPM] spec: require virtiofsd, now that it is a sep package (#27)- Update to version 8.0.0 (https://wiki.qemu.org/ChangeLog/8.0) * Removed features: https://qemu-project.gitlab.io/qemu/about/removed-features.html * Deprecated features: https://qemu-project.gitlab.io/qemu/about/deprecated.html * Some notable changes: - ARM: - New emulated CPU types: - Cortex-A55 CPU - Cortex-R52 CPU - x86 - Add support for Xen guests under KVM with Linux v5.12+ - New CPU model "SapphireRapids" - VFIO - Experimental migration support has been updated to the v2 VFIO migration protocol - virtio - virtio-mem now fully supports combining preallocation with migration - vDPA - Support live migration of vhost-vdpa net devices without CVQ, with no need of x-svq - virtiofs - The old C virtiofsd has been removed, use the new Rust implementation instead. * Patches added: [openSUSE][RPM] Try to avoid recommending too many packages (bsc#1205680) [openSUSE][RPM] Move documentation to a subpackage and fix qemu-headless (bsc#1209629) roms: add back edk2-basetools target async: Suppress GCC13 false positive in aio_bh_poll() [openSUSE][OBS] Limit the workflow runs to the factory branch (#25) [openSUSE][RPM] Spec file adjustments for 8.0.0- (Radical!) Change of packaging workflow. Now pretty much everything happens via git, and interacting with https://github.com/openSUSE/qemu.git. See README.PACKAGING for details * Patches added: linux-user: Add pidfd_open(), pidfd_send_signal() and pidfd_getfd() syscalls linux-user: fill out task state in /proc/self/stat linux-user: Emulate CLONE_PIDFD flag in clone() * Patches transformed in git commits: Disable-some-tests-that-have-problems-in.patch Make-char-muxer-more-robust-wrt-small-FI.patch Make-installed-scripts-explicitly-python.patch Makefile-fix-build-with-binutils-2.38.patch PPC-KVM-Disable-mmu-notifier-check.patch Raise-soft-address-space-limit-to-hard-l.patch Revert-linux-user-fix-compat-with-glibc-.patch Revert-roms-efirom-tests-uefi-test-tools.patch Revert-tests-qtest-enable-more-vhost-use.patch Update-linux-headers-to-v6.0-rc4.patch accel-abort-if-we-fail-to-load-the-accel.patch acpi-cpuhp-fix-guest-visible-maximum-acc.patch ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch bios-tables-test-add-test-for-number-of-.patch bios-tables-test-teach-test-to-use-smbio.patch block-Handle-curl-7.55.0-7.85.0-version-.patch block-io_uring-revert-Use-io_uring_regis.patch configure-Add-Wno-gnu-variable-sized-typ.patch dmg-warn-when-opening-dmg-images-contain.patch dump-Add-architecture-section-and-sectio.patch dump-Refactor-dump_iterate-and-introduce.patch dump-Reintroduce-memory_offset-and-secti.patch dump-Rename-write_elf-_phdr_note-to-prep.patch dump-Rename-write_elf_loads-to-write_elf.patch dump-Reorder-struct-DumpState.patch dump-Replace-opaque-DumpState-pointer-wi.patch dump-Rework-dump_calculate_size-function.patch dump-Rework-filter-area-variables.patch dump-Rework-get_start_block.patch dump-Split-elf-header-functions-into-pre.patch dump-Use-a-buffer-for-ELF-section-data-a.patch dump-Write-ELF-section-headers-right-aft.patch hw-acpi-erst.c-Fix-memory-handling-issue.patch hw-display-qxl-Avoid-buffer-overrun-in-q.patch hw-display-qxl-Document-qxl_phys2virt.patch hw-display-qxl-Have-qxl_log_command-Retu.patch hw-display-qxl-Pass-requested-buffer-siz.patch hw-pvrdma-Protect-against-buggy-or-malic.patch hw-scsi-megasas-check-for-NULL-frame-in-.patch hw-smbios-add-core_count2-to-smbios-tabl.patch hw-smbios-handle-both-file-formats-regar.patch hw-smbios-support-for-type-8-port-connec.patch include-elf.h-add-s390x-note-types.patch increase-x86_64-physical-bits-to-42.patch linux-user-Fake-proc-cpuinfo.patch linux-user-lseek-explicitly-cast-non-set.patch linux-user-remove-conditionals-for-many-.patch linux-user-use-max-as-default-CPU-model-.patch linux-user-use-target_ulong.patch meson-install-ivshmem-client-and-ivshmem.patch meson-remove-pkgversion-from-CONFIG_STAM.patch module-add-Error-arguments-to-module_loa.patch module-removed-unused-function-argument-.patch module-rename-module_load_one-to-module_.patch net-tulip-Restrict-DMA-engine-to-memorie.patch openSUSE-Basetools-Ignore-spurious-GCC-1.patch openSUSE-Makefile-Fix-csum8-to-be-built-.patch openSUSE-Makefile-define-endianess-for-c.patch openSUSE-Makefile-fix-issues-of-build-re.patch openSUSE-add-cross.ini-file-to-handle-aa.patch openSUSE-build-Makefile-fix-issues-of-bu.patch openSUSE-build-Silence-GCC-12-spurious-w.patch openSUSE-build-be-explicit-about-mx86-us.patch openSUSE-build-enable-cross-compilation-.patch openSUSE-pc-q35-Bump-max_cpus-to-1024.patch openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch openSUSE-switch-to-python3-as-needed.patch openSUSE-test-help-compiler-out-by-initi.patch qemu-binfmt-conf-Modify-default-path.patch qemu-bridge-helper-reduce-security-profi.patch qemu-osdep-Switch-position-of-extern-and.patch roms-Makefile-add-cross-file-to-qboot-me.patch roms-Makefile-pass-a-packaging-timestamp.patch roms-change-cross-compiler-naming-to-be-.patch s390x-Add-KVM-PV-dump-interface.patch s390x-Add-protected-dump-cap.patch s390x-Introduce-PV-query-interface.patch s390x-pci-add-routine-to-get-host-functi.patch s390x-pci-don-t-fence-interpreted-device.patch s390x-pci-enable-adapter-event-notificat.patch s390x-pci-enable-for-load-store-interpre.patch s390x-pci-let-intercept-devices-have-sep.patch s390x-pci-reflect-proper-maxstbl-for-gro.patch s390x-pci-reset-ISM-passthrough-devices-.patch s390x-pci-shrink-DMA-aperture-to-be-boun.patch s390x-pv-Add-dump-support.patch s390x-tod-kvm-don-t-save-restore-the-TOD.patch scsi-generic-check-for-additional-SG_IO-.patch scsi-generic-replace-logical-block-count.patch test-vmstate-fix-bad-GTree-usage-use-aft.patch tests-acpi-allow-changes-for-core_count2.patch tests-acpi-update-tables-for-new-core-co.patch tests-change-error-message-in-test-162.patch tests-qemu-iotests-Triple-timeout-of-i-o.patch ui-vnc-clipboard-fix-integer-underflow-i.patch xen-add-block-resize-support-for-xen-dis.patch xen-ignore-live-parameter-from-xen-save-.patch xen_disk-Add-suse-specific-flush-disable.patch- Enable again LTO for x86_64 target (boo#1133281).- Further fixes for bsc#1209546 * Patches added: test-vmstate-fix-bad-GTree-usage-use-aft.patch- Fix bsc#1209546 * Patches added: qemu-osdep-Switch-position-of-extern-and.patch- Fix bsc#1209064 - Backport the "acpi: cpuhp: fix guest-visible maximum access size to the legacy reg block" patch, as it makes developing and testing OVMF/EDK2 easier * Patches added: acpi-cpuhp-fix-guest-visible-maximum-acc.patch s390x-pci-reset-ISM-passthrough-devices-.patch s390x-pci-shrink-DMA-aperture-to-be-boun.patch- Disable -Werror as it is very sensitive when one updates a new compiler. -Werror is fine for upstream development, but not when it comes to stability of a package build.- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping linux-user-add-more-compat-ioctl-definit.patch and adding Revert-linux-user-fix-compat-with-glibc-.patch - Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and linux-user-drop-conditionals-for-obsolet.patch were added as downstream patches as they were part of a series, but they never made it upstream, so we don't want them here either * Patches dropped: linux-user-add-more-compat-ioctl-definit.patch linux-user-drop-conditionals-for-obsolet.patch meson-enforce-a-minimum-Linux-kernel-hea.patch * Patches added: Revert-linux-user-fix-compat-with-glibc-.patch- Fixes bsc#1197653, CVE-2022-1050 * Patches added: block-Handle-curl-7.55.0-7.85.0-version-.patch hw-pvrdma-Protect-against-buggy-or-malic.patch- Fixes: jsc#PED-1716 Add S390 features from IBM requirements * Patches added: dump-Add-architecture-section-and-sectio.patch dump-Refactor-dump_iterate-and-introduce.patch dump-Reintroduce-memory_offset-and-secti.patch dump-Rename-write_elf_loads-to-write_elf.patch dump-Rename-write_elf-_phdr_note-to-prep.patch dump-Reorder-struct-DumpState.patch dump-Replace-opaque-DumpState-pointer-wi.patch dump-Rework-dump_calculate_size-function.patch dump-Rework-filter-area-variables.patch dump-Rework-get_start_block.patch dump-Split-elf-header-functions-into-pre.patch dump-Use-a-buffer-for-ELF-section-data-a.patch dump-Write-ELF-section-headers-right-aft.patch include-elf.h-add-s390x-note-types.patch s390x-Add-KVM-PV-dump-interface.patch s390x-Add-protected-dump-cap.patch s390x-Introduce-PV-query-interface.patch s390x-pv-Add-dump-support.patch- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165), bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139 - Improved handling of: bsc#1202282 (jsc#PED-2592) * Patches dropped: pc-q35-Bump-max_cpus-to-1024.patch * Patches added: accel-abort-if-we-fail-to-load-the-accel.patch bios-tables-test-add-test-for-number-of-.patch bios-tables-test-teach-test-to-use-smbio.patch dmg-warn-when-opening-dmg-images-contain.patch hw-acpi-erst.c-Fix-memory-handling-issue.patch hw-display-qxl-Avoid-buffer-overrun-in-q.patch hw-display-qxl-Document-qxl_phys2virt.patch hw-display-qxl-Have-qxl_log_command-Retu.patch hw-display-qxl-Pass-requested-buffer-siz.patch hw-smbios-add-core_count2-to-smbios-tabl.patch hw-smbios-support-for-type-8-port-connec.patch module-add-Error-arguments-to-module_loa.patch module-removed-unused-function-argument-.patch module-rename-module_load_one-to-module_.patch openSUSE-pc-q35-Bump-max_cpus-to-1024.patch s390x-tod-kvm-don-t-save-restore-the-TOD.patch tests-acpi-allow-changes-for-core_count2.patch tests-acpi-update-tables-for-new-core-co.patch ui-vnc-clipboard-fix-integer-underflow-i.patch- Refactor building and installing SeaBIOS docs- Rename submodule patches so that it's clear which ones are backports and which ones are downstream only fixes; - No functional change intended. * Patches dropped: Ignore-spurious-GCC-12-warning.patch roms-sgabios-Fix-csum8-to-be-built-by-ho.patch Makefile-define-endianess-for-cross-buil.patch ipxe-Makefile-fix-issues-of-build-reprod.patch qboot-add-cross.ini-file-to-handle-aarch.patch sgabios-Makefile-fix-issues-of-build-rep.patch Silence-GCC-12-spurious-warnings.patch build-be-explicit-about-mx86-used-note-n.patch enable-cross-compilation-on-ARM.patch stub-out-the-SAN-req-s-in-int13.patch help-compiler-out-by-initializing-array.patch seabios-switch-to-python3-as-needed.patch * Patches added: openSUSE-Basetools-Ignore-spurious-GCC-1.patch openSUSE-Makefile-Fix-csum8-to-be-built-.patch openSUSE-Makefile-define-endianess-for-c.patch openSUSE-Makefile-fix-issues-of-build-re.patch openSUSE-add-cross.ini-file-to-handle-aa.patch openSUSE-build-Makefile-fix-issues-of-bu.patch openSUSE-build-Silence-GCC-12-spurious-w.patch openSUSE-build-be-explicit-about-mx86-us.patch openSUSE-build-enable-cross-compilation-.patch openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch openSUSE-switch-to-python3-as-needed.patch openSUSE-test-help-compiler-out-by-initi.patch- Fixes jsc#PED-1716 * Patches added: configure-Add-Wno-gnu-variable-sized-typ.patch s390x-pci-add-routine-to-get-host-functi.patch s390x-pci-don-t-fence-interpreted-device.patch s390x-pci-enable-adapter-event-notificat.patch s390x-pci-enable-for-load-store-interpre.patch s390x-pci-let-intercept-devices-have-sep.patch s390x-pci-reflect-proper-maxstbl-for-gro.patch Update-linux-headers-to-v6.0-rc4.patch- install binfmt-misc handlers for systemd (bsc#1206838)- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592) * Patches added: pc-q35-Bump-max_cpus-to-1024.patch- install SeaBIOS documentation- Enable KVM support on riscv64- qtests test are not realiable when run inside OBS builders, so let's disable that part of the testsuite for now. There is work ongoing to run it somewhere else (on dedicated hosts) to avoid loosing coverage. (bsc#1204566)- Improve dependency handling (e.g., what's recommended vs. what's required. - Add a subpackage (qemu-headless) that brings in all the packages that are needed for creating VMs with tools like virt-install or VirtManager, run either locally or from a remote host. (bsc#1202166)- Build fails due to exceeding 10 GB disk limit (10430 MB): raise disk space contraint to 12 GB- Fixes bsc#1204082 * Patches added: block-io_uring-revert-Use-io_uring_regis.patch- Due to change in where some documentation files are, if qemu-guest-agent is installed, we need to make sure we update it to our version (bsc#1203995)- The links in the forsplit dirs, in each subpackage, born to deal with package & subpackage splitting, are not really used. In fact, they're "Provides:"-ed by a bunch of subpackages, but there's no "Requires:" for any of them. Let's just get rid of them.- The old qemu-binfmt weappers around the various qemu-$ARCH Linux user emulation binaries (see, e.g., bsc#1186256) are not necessary any longer, and bsc#1143725 can now be considered fixed. * Patches dropped: linux-user-add-binfmt-wrapper-for-argv-0.patch linux-user-binfmt-support-host-binaries.patch- Fix bsc#1204001. Patches are not upstream, and have been picked up and backported from the ML. This is something we usually prefer to avoid, but this is urgent, and the patches looks fine, with high chances for them to be included as they are (and if they're not, we will revisit this, i.e., drop them and re-include the ones that are actually committed) * Patches added: linux-user-add-more-compat-ioctl-definit.patch linux-user-drop-conditionals-for-obsolet.patch linux-user-remove-conditionals-for-many-.patch meson-enforce-a-minimum-Linux-kernel-hea.patch- Improve the output of update_git.sh, by including the list of repos to which we have downstream patches.- Fix: bsc#1202665, CVE-2022-2962 * Patches added: net-tulip-Restrict-DMA-engine-to-memorie.patch- skip tests that don't work under qemu-linux-user emulation- Runs of the test-suite seem much more stable now, in this version of QEMU. (bsc#1203610) We are also fine re-enabling running them in parallel.- Switch QEMU Linux user to emulate the same CPU as the one of the host by default. This is a bit conrtoversial and tricky, when thinking about system emulation/virtualization. But for linux-user, it should be just fine. (bsc#1203684) * Patches added: linux-user-use-max-as-default-CPU-model-.patch- Be less verbose when packaging documentation. In fact, with just a couple of (minor) re-arrangements, we can get rid of having to list all the files all the time - Package /etc/qemu/bridge.conf as '%config(noreplace). Next step will probably be to move it to /usr/etc/qemu (bsc#1201944)- Switch to %autosetup for all products (this required some changes in update_git.sh) - Run check-qtest sequentially, as it's more reliable, when in OBS - Build with libbpf, fdt and capstone support - Drop the patch adding our support document, and deal with that in the spec file directly * Patches dropped: doc-add-our-support-doc-to-the-main-proj.patch- Updated to latest upstream version 7.1 * https://wiki.qemu.org/ChangeLog/7.1 Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * [x86] Support for architectural LBRs on KVM virtual machines * [x86] The libopcode-based disassembler has been removed. Use Capstone instead * [LoongArch] Add initial support for the LoongArch64 architecture. * [ARM] The emulated SMMUv3 now advertises support for SMMUv3.2-BBML2 * [ARM] The xlnx-zynqmp SoC model now implements the 4 TTC timers * [ARM] The versal machine now models the Cortex-R5s in the Real-Time Processing Unit (RPU) subsystem * [ARM] The virt board now supports emulation of the GICv4.0 * [ARM] New emulated CPU types: Cortex-A76, Neoverse-N1 * [HPPA] Fix serial port pass-through from host to guest * [HPPA] Lots of general code improvements and tidy-ups * [RISC-V] RISC-V * [RISC-V] Add support for privileged spec version 1.12.0 * [RISC-V] Use privileged spec version 1.12.0 for virt machine by default * [RISC-V] Allow software access to MIP SEIP * [RISC-V] Add initial support for the Sdtrig extension * [RISC-V] Optimisations and improvements for the vector extension * [VFIO] Experimental support for exposing emulated PCI devices over the new vfio-user protocol (a vfio-user client is not yet available in QEMU, though) * [QMP] The on-cbw-error option for copy-before-write filter, to specify behavior on CBW (copy before write) operation failure. * [QMP] The cbw-timeout option for copy-before-write filter, to specify timeout for CBW operation. * [QMP] New commands query-stats and query-stats-schema to retrieve statistics from various QEMU subsystems (right now only from KVM). * [QMP] The PanicAction can now be configured to report an exit-failure (useful for automated testing) * [Networking] QEMU can be compiled with the system slirp library even when using CFI. This requires libslirp 4.7. * [Migration] Support for zero-copy-send on Linux, which reduces CPU usage on the source host. Note that locked memory is needed to support this * Patches added: Revert-tests-qtest-enable-more-vhost-use.patch meson-remove-pkgversion-from-CONFIG_STAM.patch * Patches dropped: AIO-Reduce-number-of-threads-for-32bit-h.patch Makefile-Don-t-check-pc-bios-as-pre-requ.patch Revert-8dcb404bff6d9147765d7dd3e9c849337.patch Revert-qht-constify-qht_statistics_init.patch XXX-dont-dump-core-on-sigabort.patch acpi_piix4-Fix-migration-from-SLE11-SP2.patch configure-only-populate-roms-if-softmmu.patch configure-remove-pkgversion-from-CONFIG_.patch coroutine-ucontext-use-QEMU_DEFINE_STATI.patch coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch coroutine-win32-use-QEMU_DEFINE_STATIC_C.patch hostmem-default-the-amount-of-prealloc-t.patch hw-usb-hcd-ehci-fix-writeback-order.patch i8254-Fix-migration-from-SLE11-SP2.patch intc-exynos4210_gic-replace-snprintf-wit.patch modules-generates-per-target-modinfo.patch modules-introduces-module_kconfig-direct.patch pc-bios-s390-ccw-net-avoid-warning-about.patch pci-fix-overflow-in-snprintf-string-form.patch qemu-cvs-gettimeofday.patch qemu-cvs-ioctl_debug.patch qemu-cvs-ioctl_nodirection.patch qht-Revert-some-constification-in-qht.c.patch qom-handle-case-of-chardev-spice-module-.patch scsi-lsi53c895a-fix-use-after-free-in-ls.patch scsi-lsi53c895a-really-fix-use-after-fre.patch softmmu-Always-initialize-xlat-in-addres.patch sphinx-change-default-language-to-en.patch test-add-mapping-from-arch-of-i686-to-qe.patch tests-Fix-block-tests-to-be-compatible-w.patch tests-qtest-Move-the-fuzz-tests-to-x86-o.patch usb-Help-compiler-out-to-avoid-a-warning.patch- pcre-devel-static is only needed when building against glib2 < 2.73. After that, glib2 was migrated to pcre2.- Substantial rework of the spec file: * the 'make check' testsuite now runs in the %check section of the main package, not in a subpackage * switched from %setup to %autosetup * rearranged the content in order to minimize the use of %if, %ifarch, etc- Properly fix bsc#1198038, CVE-2022-0216 * Patches added: scsi-lsi53c895a-really-fix-use-after-fre.patch tests-qtest-Move-the-fuzz-tests-to-x86-o.patch- Make temp dir (for update_git.sh) configurable - Added new subpackages (audio-dbus, ui-dbus) - bsc#1199018 was never fixed in Factory's QEMU 6.2. It is now (since the patches are already in SeaBIOS 1.16.0) - Some tests are having issues when run in OBS. They seem to be due to race conditions, triggered by resource constraints of OBS workers. Let's disable them for now, while looking for a fix - Update to v7.0.0 (bsc#1201307). For full release notes, see: * https://wiki.qemu.org/ChangeLog/7.0 Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * [ARM] The virt board has gained a new control knob to disable passing a RNG seed in the DTB (dtb-kaslr-seed) * [ARM] The AST2600 SoC now supports a dummy version of the i3c device * [ARM] The virt board can now run guests with KVM on hosts with restricted IPA ranges * [ARM] The virt board now supports virtio-mem-pci * [ARM] The virt board now supports specifying the guest CPU topology * [ARM] On the virt board, we now enable PAuth when using KVM or hvf and the host CPU supports it * [RISC-V] Add support for ratified 1.0 Vector extension * [RISC-V] Support for the Zve64f and Zve32f extensions * [RISC-V] Drop support for draft 0.7.1 Vector extension * [RISC-V] Support Zfhmin and Zfh extensions * [RISC-V] RISC-V KVM support * [RISC-V] Mark Hypervisor extension as non experimental * [RISC-V] Enable Hypervisor extension by default * [x86] Support for Intel AMX. * [PCI/PCIe] Q35: fix PCIe device becoming disabled after migration when ACPI based PCI hotplug is used (6b0969f1ec) * [PCI/PCIe] initial bits of SR/IOV support (250346169) * [PCI/PCIe] arm/virt: fixed PXB interrupt routing (e609301b45) * [PCI/PCIe] arm/virt: support for virtio-mem-pci (b1b87327a9) * [virtiofs] Fix for CVE-2022-0358 - behaviour with supplementary groups and SGID directories * [virtiofs] Improved security label support * [virtiofs] The virtiofsd in qemu is now starting to be deprecated; please start using and contributing to Rust virtiofsd * Patches dropped: acpi-validate-hotplug-selector-on-access.patch block-backend-Retain-permissions-after-m.patch block-qdict-Fix-Werror-maybe-uninitializ.patch brotli-fix-actual-variable-array-paramet.patch display-qxl-render-fix-race-condition-in.patch doc-Add-the-SGX-numa-description.patch hw-i386-amd_iommu-Fix-maybe-uninitialize.patch hw-intc-exynos4210_gic-provide-more-room.patch hw-nvme-fix-CVE-2021-3929.patch hw-nvram-at24-return-0xff-if-1-byte-addr.patch iotest-065-explicit-compression-type.patch iotest-214-explicit-compression-type.patch iotest-302-use-img_info_log-helper.patch iotest-303-explicit-compression-type.patch iotest-39-use-_qcow2_dump_header.patch iotests-60-more-accurate-set-dirty-bit-i.patch iotests-bash-tests-filter-compression-ty.patch iotests-common.rc-introduce-_qcow2_dump_.patch iotests-declare-lack-of-support-for-comp.patch iotests-drop-qemu_img_verbose-helper.patch iotests-massive-use-_qcow2_dump_header.patch iotests-MRCE-Write-data-to-source.patch iotests.py-filter-out-successful-output-.patch iotests.py-img_info_log-rename-imgopts-a.patch iotests.py-implement-unsupported_imgopts.patch iotests.py-qemu_img-create-support-IMGOP.patch iotests.py-rewrite-default-luks-support-.patch iotests-specify-some-unsupported_imgopts.patch meson-build-all-modules-by-default.patch numa-Enable-numa-for-SGX-EPC-sections.patch numa-Support-SGX-numa-in-the-monitor-and.patch python-aqmp-add-__del__-method-to-legacy.patch python-aqmp-add-_session_guard.patch python-aqmp-add-SocketAddrT-to-package-r.patch python-aqmp-add-socket-bind-step-to-lega.patch python-aqmp-add-start_server-and-accept-.patch python-aqmp-copy-type-definitions-from-q.patch python-aqmp-drop-_bind_hack.patch python-aqmp-fix-docstring-typo.patch python-aqmp-Fix-negotiation-with-pre-oob.patch python-aqmp-fix-race-condition-in-legacy.patch Python-aqmp-fix-type-definitions-for-myp.patch python-aqmp-handle-asyncio.TimeoutError-.patch python-aqmp-refactor-_do_accept-into-two.patch python-aqmp-remove-_new_session-and-_est.patch python-aqmp-rename-accept-to-start_serve.patch python-aqmp-rename-AQMPError-to-QMPError.patch python-aqmp-split-_client_connected_cb-o.patch python-aqmp-squelch-pylint-warning-for-t.patch python-aqmp-stop-the-server-during-disco.patch python-introduce-qmp-shell-wrap-convenie.patch python-machine-raise-VMLaunchFailure-exc.patch python-move-qmp-shell-under-the-AQMP-pac.patch python-move-qmp-utilities-to-python-qemu.patch python-qmp-switch-qmp-shell-to-AQMP.patch python-support-recording-QMP-session-to-.patch python-upgrade-mypy-to-0.780.patch qcow2-simple-case-support-for-downgradin.patch qemu-binfmt-conf.sh-should-use-F-as-shor.patch tests-qemu-iotests-040-Skip-TestCommitWi.patch tests-qemu-iotests-Fix-051-for-binaries-.patch tests-qemu-iotests-testrunner-Quote-case.patch tools-virtiofsd-Add-rseq-syscall-to-the-.patch ui-cursor-fix-integer-overflow-in-cursor.patch vhost-vsock-detach-the-virqueue-element-.patch virtiofsd-Drop-membership-of-all-supplem.patch virtio-net-fix-map-leaking-on-error-duri.patch Disable-some-tests-that-have-problems-in.patch * Patches added: intc-exynos4210_gic-replace-snprintf-wit.patch Revert-8dcb404bff6d9147765d7dd3e9c849337.patch- Fix bsc#1197084 * Patches added: hostmem-default-the-amount-of-prealloc-t.patch- Get rid of downstream patches breaking s390 modules. Replace them with the upstream proposed and Acked (but never committed) solution (bsc#1199015) * Patches added: modules-generates-per-target-modinfo.patch modules-introduces-module_kconfig-direct.patch * Patches dropped: Fix-the-module-building-problem-for-s390.patch modules-quick-fix-a-fundamental-error-in.patch- backport patches for having coroutine work well when LTO is used * Patches added: coroutine-ucontext-use-QEMU_DEFINE_STATI.patch coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch coroutine-win32-use-QEMU_DEFINE_STATIC_C.patch- seabios: drop patch that changes python in python2. Just go to python3 directly. * Patches dropped: seabios-use-python2-explicitly-as-needed.patch- Fix the following bugs: - bsc#1198037, CVE-2021-4207 - bsc#1198038, CVE-2022-0216 - bsc#1201367, CVE-2022-35414 - bsc#1198035, CVE-2021-4206 - bsc#1198712, CVE-2022-26354 - bsc#1198711, CVE-2022-26353 * Patches added: display-qxl-render-fix-race-condition-in.patch scsi-lsi53c895a-fix-use-after-free-in-ls.patch softmmu-Always-initialize-xlat-in-addres.patch ui-cursor-fix-integer-overflow-in-cursor.patch vhost-vsock-detach-the-virqueue-element-.patch virtio-net-fix-map-leaking-on-error-duri.patch- Fix usb ehci boot failure (bsc#1192115) * Patches added: hw-usb-hcd-ehci-fix-writeback-order.patch- Fix bugs boo#1200557 and boo#1199924 - Now that boo#1199924 is fixed, re-enable FORTIFY_SOURCE=3 * Patches added: pci-fix-overflow-in-snprintf-string-form.patch sphinx-change-default-language-to-en.patch- It has been observed that building QEMU with _FORTIFY_SOURCE=3 causes problem (see bsc#1199924). Force it to =2 for now, while we investigate the issue.- Backport a GCC 12 aarch64 build fix (bsc#1199625) * Patches added: block-qdict-Fix-Werror-maybe-uninitializ.patch- Filter out rpmlint error that is valid for qemu, but will have its badness increased in the future.- enable aio=io_uring on all kvm architectures (bsc#1197699)- Backport aqmp patches from upstream which can fix iotest issues * Patches added: python-aqmp-add-__del__-method-to-legacy.patch python-aqmp-add-_session_guard.patch python-aqmp-add-SocketAddrT-to-package-r.patch python-aqmp-add-socket-bind-step-to-lega.patch python-aqmp-add-start_server-and-accept-.patch python-aqmp-copy-type-definitions-from-q.patch python-aqmp-drop-_bind_hack.patch python-aqmp-fix-docstring-typo.patch python-aqmp-Fix-negotiation-with-pre-oob.patch python-aqmp-fix-race-condition-in-legacy.patch Python-aqmp-fix-type-definitions-for-myp.patch python-aqmp-handle-asyncio.TimeoutError-.patch python-aqmp-refactor-_do_accept-into-two.patch python-aqmp-remove-_new_session-and-_est.patch python-aqmp-rename-accept-to-start_serve.patch python-aqmp-rename-AQMPError-to-QMPError.patch python-aqmp-split-_client_connected_cb-o.patch python-aqmp-squelch-pylint-warning-for-t.patch python-aqmp-stop-the-server-during-disco.patch python-introduce-qmp-shell-wrap-convenie.patch python-machine-raise-VMLaunchFailure-exc.patch python-move-qmp-shell-under-the-AQMP-pac.patch python-move-qmp-utilities-to-python-qemu.patch python-qmp-switch-qmp-shell-to-AQMP.patch python-support-recording-QMP-session-to-.patch python-upgrade-mypy-to-0.780.patch- Drop the patches which are workaround to fix iotest issues * Patches dropped: Revert-python-iotests-replace-qmp-with-a.patch Revert-python-machine-add-instance-disam.patch Revert-python-machine-add-sock_dir-prope.patch Revert-python-machine-handle-fast-QEMU-t.patch Revert-python-machine-move-more-variable.patch Revert-python-machine-remove-_remove_mon.patch- Support the SGX feature (bsc#1197807) * Patches added: doc-Add-the-SGX-numa-description.patch numa-Enable-numa-for-SGX-EPC-sections.patch numa-Support-SGX-numa-in-the-monitor-and.patch- Backport CVE-2021-3929 (bsc#1193880) * Patches added: hw-nvme-fix-CVE-2021-3929.patch- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528) * Patches added: Revert-python-iotests-replace-qmp-with-a.patch Revert-python-machine-add-instance-disam.patch Revert-python-machine-add-sock_dir-prope.patch Revert-python-machine-handle-fast-QEMU-t.patch Revert-python-machine-move-more-variable.patch Revert-python-machine-remove-_remove_mon.patch- Add missing patch from a PTFs (bsc#1194938) * Patches added: scsi-generic-check-for-additional-SG_IO-.patch- Kill downstream patches around bifmt handling that makes cumbersome to run multi-arch containers, and switch to the upstream behavior, which is well documented and valid on all other distros. This is possible thanks to Linux kernel commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so it can only work on Leap/SLE 15.4 and higher). (bsc#1197298) * Patches dropped: qemu-binfmt-conf.sh-allow-overriding-SUS.patch qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch- Fix update_git.sh wiping all the package file of the local checkout while cloning the git repository on demand (in case they don't exist and the user as to do so).- Improve test reliability * Patches added: Fix-the-module-building-problem-for-s390.patch tests-qemu-iotests-040-Skip-TestCommitWi.patch tests-qemu-iotests-testrunner-Quote-case.patch- Fix virtiofs crashing with glibc >= 2.35, due to rseq syscall (bsc#1196924) * Patches added: tools-virtiofsd-Add-rseq-syscall-to-the-.patch- Avoid warnings caused by a GCC 12 bug, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98503 (bsc#1197018) * Patches added: hw-i386-amd_iommu-Fix-maybe-uninitialize.patch Silence-GCC-12-spurious-warnings.patch Ignore-spurious-GCC-12-warning.patch- Proactive fix * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch- Build PPC firmwares from sources on non-PPC builds as well (bsc#1193545) - Build RiscV firmwares on non-RiscV builds as well - While there, refactor (and simplify!) the firmware building logic and code * Patches added: Makefile-define-endianess-for-cross-buil.patch Makefile-fix-build-with-binutils-2.38.patch- qemu,kvm,xen: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) * Patches added: hw-scsi-megasas-check-for-NULL-frame-in-.patch- Include vmxcap in the qemu-tools package (is being very useful for debugging bsc#1193364)- The qemu package should require qemu-x86, qemu-arm, etc, as there's no point installing it without _any_ of them. Additionally, right now, the user does not get a working qemu, if recommended packages are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087- Give clearer instructions on how to modify the package patches from the output of update_git.sh (docs change only, no functional change)- qemu,kvm: potential privilege escalation via virtiofsd (bsc#1195161, CVE-2022-0358) * Patches added: virtiofsd-Drop-membership-of-all-supplem.patch* Patches added: block-backend-Retain-permissions-after-m.patch iotest-065-explicit-compression-type.patch iotest-214-explicit-compression-type.patch iotest-302-use-img_info_log-helper.patch iotest-303-explicit-compression-type.patch iotest-39-use-_qcow2_dump_header.patch iotests-60-more-accurate-set-dirty-bit-i.patch iotests-bash-tests-filter-compression-ty.patch iotests-common.rc-introduce-_qcow2_dump_.patch iotests-declare-lack-of-support-for-comp.patch iotests-drop-qemu_img_verbose-helper.patch iotests-massive-use-_qcow2_dump_header.patch iotests-MRCE-Write-data-to-source.patch iotests.py-filter-out-successful-output-.patch iotests.py-img_info_log-rename-imgopts-a.patch iotests.py-implement-unsupported_imgopts.patch iotests.py-qemu_img-create-support-IMGOP.patch iotests.py-rewrite-default-luks-support-.patch iotests-specify-some-unsupported_imgopts.patch qcow2-simple-case-support-for-downgradin.patch tests-qemu-iotests-Fix-051-for-binaries-.patch-Backport patch from upstream, bsc#1194063 CVE-2021-4158 * Patches added: acpi-validate-hotplug-selector-on-access.patch- Enable modules for testsuite* Patches added: meson-build-all-modules-by-default.patch- It's time to really start requiring -F when using -b in qemu-img for us as well. Users/customers have been warned in the relevant release notes (bsc#1190135) * Patches dropped: Revert-qemu-img-Improve-error-for-rebase.patch Revert-qemu-img-Require-F-with-b-backing.patch- Fix testsuite failures by not using modules when building tests (and some other, also testsuite related, spec file problems)- [JIRA] (SLE-20965) Make QEMU guests more failsafe when resizing SCSI passthrough disks * Patches added: scsi-generic-replace-logical-block-count.patch- Add an audio-oss sub-package- Add some new (mostly documentation) files in the package- Remove option --audio-drv-list because audio is detected by meson automatically in latest version.- Remove options --disable-jemalloc and --disable-tcmalloc which are changed in v6.2.0.- Update to v 6.2.0. For full release notese, see: * https://wiki.qemu.org/ChangeLog/6.2. Be sure to also check the following pages: * https://qemu-project.gitlab.io/qemu/about/removed-features.html * https://qemu-project.gitlab.io/qemu/about/deprecated.html Some notable changes: * virtio-mem: guest memory dumps are now fully supported, along with pre-copy/post-copy migration and background guest snapshots * QMP: support for nw DEVICE_UNPLUG_GUEST_ERROR to detect guest-reported hotplug failures * TCG: improvements to TCG plugin argument syntax, and multi-core support for cache plugin * 68k: improved support for Apple’s NuBus, including ability to load declaration ROMs, and slot IRQ support * ARM: macOS hosts with Apple Silicon CPUs now support ‘hvf’ accelerator for AArch64 guests * ARM: emulation support for Fujitsu A64FX processor model * ARM: emulation support for kudo-mbc machine type * ARM: M-profile MVE extension is now supported for Cortex-M55 * ARM: ‘virt’ machine now supports an emulated ITS (Interrupt Translation Service) and supports more than 123 CPUs in emulation mode * ARM: xlnx-zcu102 and xlnx-versal-virt machines now support BBRAM and eFUSE devices * PowerPC: improved POWER10 support for the ‘powernv’ machine type * PowerPC: initial support for POWER10 DD2.0 CPU model * PowerPC: support for FORM2 PAPR NUMA descriptions for ‘pseries’ machine type * RISC-V: support for Zb[abcs] instruction set extensions * RISC-V: support for vhost-user and numa mem options across all boards * RISC-V: SiFive PWM support * x86: support for new Snowridge-v4 CPU model * x86: guest support for Intel SGX * x86: AMD SEV guests now support measurement of kernel binary when doing direct kernel boot (not using a bootloader) * Patches dropped: 9pfs-fix-crash-in-v9fs_walk.patch block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch hw-acpi-ich9-Add-compat-prop-to-keep-HPC.patch hw-i386-acpi-build-Deny-control-on-PCIe-.patch i386-cpu-Remove-AVX_VNNI-feature-from-Co.patch net-vmxnet3-validate-configuration-value.patch pcie-rename-native-hotplug-to-x-native-h.patch plugins-do-not-limit-exported-symbols-if.patch plugins-execlog-removed-unintended-s-at-.patch qemu-nbd-Change-default-cache-mode-to-wr.patch qemu-sockets-fix-unix-socket-path-copy-a.patch target-arm-Don-t-skip-M-profile-reset-en.patch target-i386-add-missing-bits-to-CR4_RESE.patch tcg-arm-Fix-tcg_out_vec_op-function-sign.patch uas-add-stream-number-sanity-checks.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-balloon-don-t-start-free-page-hin.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch- Reinstate Lin Ma's fixes for bsc#1192147 as they were submitted only to IBS. * Patches added: hw-acpi-ich9-Add-compat-prop-to-keep-HPC.patch hw-i386-acpi-build-Deny-control-on-PCIe-.patch pcie-rename-native-hotplug-to-x-native-h.patch- Rename the Guest Agent service qemu-guest-agent, like in other distros (and upstream). bsc#1185543- disable QOM cast debug outside the testsuite as the corresponding asserts show up occassionally as top #1 in perf(1) traces under heavy virtio load - enable LTO when we'd like to use LTO* Patches added (bsc#1186256): qemu-binfmt-conf.sh-allow-overriding-SUS.patch- cross-i386-binutils and cross-i386-gcc are not needed and were dropped from Factory - boo#1193424- qemu: virtio-net: heap use-after-free in virtio_net_receive_rcu (bsc#1189938 CVE-2021-3748) solved by virtio-net-fix-use-after-unmap-free-for-.patch - kvm,qemu: out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702 CVE-2021-3713) * Patches added: uas-add-stream-number-sanity-checks.patch- Stable fixes from upstream * Patches added: block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch qemu-nbd-Change-default-cache-mode-to-wr.patch target-arm-Don-t-skip-M-profile-reset-en.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch- Fix testsuite dependencies (bsc#1190573) * Patches added: modules-quick-fix-a-fundamental-error-in.patch- Replace patch to fix hardcoded binfmt handler (bsc#1186256) * Patches dropped: qemu-binfmt-conf.sh-allow-overriding-SUS.patch * Patches added: qemu-binfmt-conf.sh-should-use-F-as-shor.patch - Stable fixes from upstream * Patches added: 9pfs-fix-crash-in-v9fs_walk.patch i386-cpu-Remove-AVX_VNNI-feature-from-Co.patch plugins-do-not-limit-exported-symbols-if.patch plugins-execlog-removed-unintended-s-at-.patch qemu-sockets-fix-unix-socket-path-copy-a.patch target-i386-add-missing-bits-to-CR4_RESE.patch virtio-balloon-don-t-start-free-page-hin.patch- Fix qemu build on ARMv7 (bsc#1190211) * Patches added: tcg-arm-Fix-tcg_out_vec_op-function-sign.patch- Update supported file for ARM machines.- Keep qemu-img without backing format still deprecated (bsc#1190135) * Patches added: Revert-qemu-img-Improve-error-for-rebase.patch Revert-qemu-img-Require-F-with-b-backing.patch - Update the support files to reflect the deprecation.- Update build dependencies versions: libgcrypt >= 1.8.0, gnutls >= 3.5.18, glib >= 2.56, libssh >= 0.8.7- Fix hardcoded binfmt handler doesn't play well with containers (bsc#1186256) * Patches added: qemu-binfmt-conf.sh-allow-overriding-SUS.patch- Update to v6.1: see https://wiki.qemu.org/ChangeLog/6.1 For a full list of formely deprecated features that are removed, consult: https://qemu-project.gitlab.io/qemu/about/removed-features.html For a list of new deprecated features, consult: https://qemu-project.gitlab.io/qemu/about/deprecated.html Some noteworthy changes: * Removed moxie CPU. * Removed lm32 CPU. * Removed unicore32 CPU. * Removed 'info cpustats'. * Added Aspeed machines: rainier-bmc, quanta-q7l1-bmc. * Added npcm7xx machine: quanta-gbs-bmc. * Model for Aspeed's Hash and Crypto Engine. * SVE2 is now emulated, including bfloat16 support * FEAT_I8MM, FEAT_TLBIOS, FEAT_TLBRANGE, FEAT_BF16, FEAT_AA32BF16, and FEAT_MTE3 are now emulated. * Improved hot-unplug failures on PowerPC pseries machine. * Implemented some POWER10 instructions in TCG. * Added shakti_c RISC-V machine. * Improved documentation for RISC-V machines. * CPU models for gen16 have been added for s390x. * New CPU model versions added with XSAVES enabled: Skylake-Client-v4, Skylake-Server-v5, Cascadelake-Server-v5, Cooperlake-v2, Icelake-Client-v3, Icelake-Server-v5, Denverton-v3, Snowridge-v3, Dhyana-v2 * Added ACPI based PCI hotplug support to Q35 machine. Enabled and used by default since pc-q35-6.1 machine type. * Added support for the pca9546 and pca9548 I2C muxes. * Added support for PMBus and several PMBus devices. * Crypto subsystem: The preferred crypto backend driver now gnutls, with libgcrypt as the second choice, and nettle as third choice, with ordering driven mostly by performance of the ciphers. * Misc doc improvements. * Patches removed: block-nvme-Fix-VFIO_MAP_DMA-failed-No-sp.patch hmp-Fix-loadvm-to-resume-the-VM-on-succe.patch hw-block-nvme-align-with-existing-style.patch hw-block-nvme-consider-metadata-read-aio.patch hw-net-can-sja1000-fix-buff2frame_bas-an.patch hw-nvme-fix-missing-check-for-PMR-capabi.patch hw-nvme-fix-pin-based-interrupt-behavior.patch hw-pci-host-q35-Ignore-write-of-reserved.patch hw-rdma-Fix-possible-mremap-overflow-in-.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch hw-usb-Do-not-build-USB-subsystem-if-not.patch hw-usb-host-stub-Remove-unused-header.patch linux-user-aarch64-Enable-hwcap-for-RND-.patch module-for-virtio-gpu-pre-load-module-to.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch pvrdma-Ensure-correct-input-on-ring-init.patch pvrdma-Fix-the-ring-init-error-flow-CVE-.patch qemu-config-load-modules-when-instantiat.patch qemu-config-parse-configuration-files-to.patch qemu-config-use-qemu_opts_from_qdict.patch runstate-Initialize-Error-to-NULL.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch target-i386-Exit-tb-after-wrmsr.patch target-sh4-Return-error-if-CPUClass-get_.patch tcg-Allocate-sufficient-storage-in-temp_.patch tcg-arm-Fix-tcg_out_op-function-signatur.patch tcg-sparc-Fix-temp_allocate_frame-vs-spa.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch usb-hid-avoid-dynamic-stack-allocation.patch usb-limit-combined-packets-to-1-MiB-CVE-.patch usb-mtp-avoid-dynamic-stack-allocation.patch usb-redir-avoid-dynamic-stack-allocation.patch usbredir-fix-free-call.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch vhost-user-gpu-abstract-vg_cleanup_mappi.patch vhost-user-gpu-fix-leak-in-virgl_cmd_res.patch vhost-user-gpu-fix-leak-in-virgl_resourc.patch vhost-user-gpu-fix-memory-disclosure-in-.patch vhost-user-gpu-fix-memory-leak-in-vg_res.patch vhost-user-gpu-fix-memory-leak-while-cal.patch vhost-user-gpu-fix-OOB-write-in-virgl_cm.patch vhost-user-gpu-fix-resource-leak-in-vg_r.patch vhost-vdpa-don-t-initialize-backend_feat.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch vl-allow-not-specifying-size-in-m-when-u.patch vl-Fix-an-assert-failure-in-error-path.patch vl-plug-object-back-into-readconfig.patch vl-plumb-keyval-based-options-into-readc.patch x86-acpi-use-offset-instead-of-pointer-w.patch- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527) hw-usb-Do-not-build-USB-subsystem-if-not.patch hw-usb-host-stub-Remove-unused-header.patch usb-hid-avoid-dynamic-stack-allocation.patch usb-limit-combined-packets-to-1-MiB-CVE-.patch usb-mtp-avoid-dynamic-stack-allocation.patch- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682) usbredir-fix-free-call.patch- Add stable patches from upstream: block-nvme-Fix-VFIO_MAP_DMA-failed-No-sp.patch hw-net-can-sja1000-fix-buff2frame_bas-an.patch hw-pci-host-q35-Ignore-write-of-reserved.patch- Disabled skiboot building for PowerPC due to the following issue: https://github.com/open-power/skiboot/issues/265- Fix possible mremap overflow in the pvrdma (CVE-2021-3582, bsc#1187499) hw-rdma-Fix-possible-mremap-overflow-in-.patch - Ensure correct input on ring init (CVE-2021-3607, bsc#1187539) pvrdma-Ensure-correct-input-on-ring-init.patch - Fix the ring init error flow (CVE-2021-3608, bsc#1187538) pvrdma-Fix-the-ring-init-error-flow-CVE-.patch- Fix qemu-supportconfig network-manager verification- Fix stable issues found in upstream: hmp-Fix-loadvm-to-resume-the-VM-on-succe.patch hw-block-nvme-align-with-existing-style.patch hw-nvme-fix-missing-check-for-PMR-capabi.patch hw-nvme-fix-pin-based-interrupt-behavior.patch linux-user-aarch64-Enable-hwcap-for-RND-.patch qemu-config-load-modules-when-instantiat.patch qemu-config-parse-configuration-files-to.patch qemu-config-use-qemu_opts_from_qdict.patch runstate-Initialize-Error-to-NULL.patch target-i386-Exit-tb-after-wrmsr.patch tcg-Allocate-sufficient-storage-in-temp_.patch tcg-sparc-Fix-temp_allocate_frame-vs-spa.patch vhost-vdpa-don-t-initialize-backend_feat.patch vl-allow-not-specifying-size-in-m-when-u.patch vl-Fix-an-assert-failure-in-error-path.patch vl-plug-object-back-into-readconfig.patch vl-plumb-keyval-based-options-into-readc.patch x86-acpi-use-offset-instead-of-pointer-w.patch- Update qemu-supportconfig plugin- Fix an update-alternative warning when removing qemu-skiboot package bsc#1178678- Use doc directive to build QEMU documentation- Improve compatibility with gcc 11: target-sh4-Return-error-if-CPUClass-get_.patch tcg-arm-Fix-tcg_out_op-function-signatur.patch- Enable zstd compression option to qcow2- Fix out-of-bounds write in virgl_cmd_get_capset CVE-2021-3546 bsc#1185981 vhost-user-gpu-abstract-vg_cleanup_mappi.patch - Fix memory leaks found in the virtio vhost-user GPU device CVE-2021-3544 bsc#1186010 vhost-user-gpu-fix-leak-in-virgl_cmd_res.patch vhost-user-gpu-fix-leak-in-virgl_resourc.patch vhost-user-gpu-fix-memory-disclosure-in-.patch vhost-user-gpu-fix-memory-leak-in-vg_res.patch vhost-user-gpu-fix-memory-leak-while-cal.patch vhost-user-gpu-fix-OOB-write-in-virgl_cm.patch - Fix information disclosure due to uninitialized memory read CVE-2021-3545 bsc#1185990 vhost-user-gpu-fix-resource-leak-in-vg_r.patch- disable sheepdog, it was dropped upstream ( https://gitlab.com/qemu-project/qemu/-/commit/09ec85176e4095be15f233ebc870d5680123f024) and fails to build with gcc 11 on non-x86- Fix CVE-2021-3527 in usb/redir: usb-redir-avoid-dynamic-stack-allocation.patch - Fix issues found upstream: hw-block-nvme-consider-metadata-read-aio.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch- Brotli VLA error was already fixed in v5.2 but the patches wasn't included in v6.0. This change fixed that - Patches added: brotli-fix-actual-variable-array-paramet.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch- For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)- Update to v6.0: see https://wiki.qemu.org/ChangeLog/6.0 For a full list of formely deprecated features that are removed now, consult: https://qemu-project.gitlab.io/qemu/system/removed-features.html. For a list of new deprecated features, consult: https://qemu-project.gitlab.io/qemu/system/deprecated.html Some noteworthy changes: * Removed tileGX CPU (linux-user mode). * Removed ide-drive device (use ide-hd or ide-cd instead). * Removed scsi-disk device (use scsi-hd or scsi-cd instead). * Removed pc-1.0, pc-1.1, pc-1.2, and pc-1.3 machine types. * Added emulation of Arm-v8.1M arch and Cortex-M55 CPU. * Added boards mps3-an524 (Cortex-M33) and mps3-an547 (Cortex-M55). * x86: Support for running SEV-ES encrypted guests; TCG can emulate the PKS feature; WHPX accelerator supports accelerated APIC. * ARM: ARMv8.4-TTST, ARMv8.4-SEL2, FEAT_SSBS, and ARMv8.4-DIT emulation are now supported; Added ARMv8.5-MemTag extension is now supported formely linux-user. Additional device emulation support for xlnx-zynqmp, xlnx-versal, sbsa-ref, npcm7xx, and sabrelite board models. * PowerPC: powernv now allows external BMC; pseries can send QAPI message if it detects a memory hotplug failure; CPU unplug request can be retried. * s390: TCG works with Linux kernels built with clang-11 and clang12. * RISC-V: OpenSBI upgraded to v0.9; Support the QMP dump-guest-memory command; Add support for the SiFive SPI controller (sifive_u); Add QSPI NOR flash to Microchip PFSoC. * Misc doc improvements. * Multiprocess: Add experimental options to support out-of-process device emulation. * ACPI: support for assigning NICs to known names in guest OS independently of PCI slot placement. * NVMe: new emulation support for v1.4 spec with many new features, experimental support for Zoned Namespaces, multipath I/O, and End-to-End Data Protection. * Xen: New guest loader for testing of Xen-like hypervisors booting kernels. * virtiofs: misc. security fixes and performance improvements. * Tools: FUSE block exports to allow mounting any QEMU block device node as a host file. * Migration: query/info-migrate now display the migration blocker status and the reasons for blocking. * User-mode: Added support for the Qualcomm Hexagon processor. * TCG: Added support for Apple Silicon hosts (macOS). * QMP: backup jobs now support multiple asynchronous requests in parallel * VNC: virtio-vga support for scaling resolution based on client window size * Patches added: doc-add-our-support-doc-to-the-main-proj.patch * Patches removed: 9pfs-Fully-restart-unreclaim-loop-CVE-20.patch audio-add-sanity-check.patch block-Fix-deadlock-in-bdrv_co_yield_to_d.patch block-Fix-locking-in-qmp_block_resize.patch blockjob-Fix-crash-with-IOthread-when-bl.patch block-nfs-fix-int-overflow-in-nfs_client.patch block-rbd-fix-memory-leak-in-qemu_rbd_co.patch block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch block-Separate-blk_is_writable-and-blk_s.patch block-Simplify-qmp_block_resize-error-pa.patch brotli-fix-actual-variable-array-paramet.patch build-no-pie-is-no-functional-linker-fla.patch cadence_gem-switch-to-use-qemu_receive_p.patch cpu-core-Fix-help-of-CPU-core-device-typ.patch docs-add-SUSE-support-statements-to-html.patch dp8393x-switch-to-use-qemu_receive_packe.patch e1000-fail-early-for-evil-descriptor.patch e1000-switch-to-use-qemu_receive_packet-.patch hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch hw-arm-virt-Disable-pl011-clock-migratio.patch hw-block-fdc-Fix-fallback-property-on-sy.patch hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch hw-isa-Kconfig-Add-missing-dependency-VI.patch hw-isa-piix4-Migrate-Reset-Control-Regis.patch hw-net-lan9118-Fix-RX-Status-FIFO-PEEK-v.patch hw-s390x-fix-build-for-virtio-9p-ccw.patch hw-sd-sd-Actually-perform-the-erase-oper.patch hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch hw-sd-sdhci-Correctly-set-the-controller.patch hw-sd-sdhci-Don-t-transfer-any-data-when.patch hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch hw-sd-sdhci-Limit-block-size-only-when-S.patch hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch hw-sd-sd-Move-the-sd_block_-read-write-a.patch hw-sd-sd-Skip-write-protect-groups-check.patch hw-timer-slavio_timer-Allow-64-bit-acces.patch hw-virtio-pci-Added-AER-capability.patch hw-virtio-pci-Added-counter-for-pcie-cap.patch i386-acpi-restore-device-paths-for-pre-5.patch iotests-Fix-_send_qemu_cmd-with-bash-5.1.patch lan9118-switch-to-use-qemu_receive_packe.patch lsilogic-Use-PCIDevice-exit-instead-of-D.patch Make-keycode-gen-output-reproducible-use.patch memory-clamp-cached-translation-in-case-.patch monitor-Fix-assertion-failure-on-shutdow.patch mptsas-Remove-unused-MPTSASState-pending.patch msf2-mac-switch-to-use-qemu_receive_pack.patch net-Fix-handling-of-id-in-netdev_add-and.patch net-introduce-qemu_receive_packet.patch pcnet-switch-to-use-qemu_receive_packet-.patch qemu-nbd-Use-SOMAXCONN-for-socket-listen.patch qemu-storage-daemon-Enable-object-add.patch rtl8139-switch-to-use-qemu_receive_packe.patch s390x-add-have_virtio_ccw.patch s390x-css-report-errors-from-ccw_dstream.patch s390x-Fix-stringop-truncation-issue-repo.patch s390x-modularize-virtio-gpu-ccw.patch s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch s390x-pci-restore-missing-Query-PCI-Func.patch spice-app-avoid-crash-when-core-spice-mo.patch sungem-switch-to-use-qemu_receive_packet.patch target-arm-Don-t-decode-insns-in-the-XSc.patch target-arm-Fix-MTE0_ACTIVE.patch target-arm-Introduce-PREDDESC-field-defi.patch target-arm-Update-PFIRST-PNEXT-for-pred_.patch target-arm-Update-REV-PUNPK-for-pred_des.patch target-arm-Update-ZIP-UZP-TRN-for-pred_d.patch target-xtensa-fix-meson.build-rule-for-x.patch tcg-Use-memset-for-large-vector-byte-rep.patch tools-virtiofsd-Replace-the-word-whiteli.patch tx_pkt-switch-to-use-qemu_receive_packet.patch ui-vnc-Add-missing-lock-for-send_color_m.patch update-linux-headers-Include-const.h.patch Update-linux-headers-to-5.11-rc2.patch util-fix-use-after-free-in-module_load_o.patch vfio-ccw-Connect-the-device-request-noti.patch vhost-user-blk-fix-blkcfg-num_queues-end.patch viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch virtiofsd-extract-lo_do_open-from-lo_ope.patch virtiofsd-optionally-return-inode-pointe.patch virtiofsd-prevent-opening-of-special-fil.patch virtiofs-drop-remapped-security.capabili.patch virtiofsd-Save-error-code-early-at-the-f.patch virtio-move-use-disabled-flag-property-t.patch virtio-pci-compat-page-aligned-ATS.patch xen-block-Fix-removal-of-backend-instanc.patch- Include upstream patch designated as stable material and reviewed for applicability to include here mptsas-Remove-unused-MPTSASState-pending.patch - Clarify in support documents that cpu-add was removed in this release from both the human monitor protocol (HMP) and QMP interfaces- 6.0.0 qemu is about to be released. Add comments to the in- package support documents (supported..txt) about the new deprecations as of that release as an early head's up for qemu users. These deprecations include these command-line options: - M option: kernel-irqchip=off - chardev tty - chardev paraport - enable-fips - writeconfig - spice password=string- Include upstream patches designated as stable material and reviewed for applicability to include here. NOTE that the PIIX4 patch has migration implications: the change will also be applied to the SLE-15-SP2 qemu, and a live migration from that version to this SLE-15-SP3 qemu would require this patch to be applied for a successful migration if PIIX4 southbridge is used in the machine emulation (x86 i440fx) block-rbd-fix-memory-leak-in-qemu_rbd_co.patch block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch cpu-core-Fix-help-of-CPU-core-device-typ.patch hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch hw-block-fdc-Fix-fallback-property-on-sy.patch hw-isa-Kconfig-Add-missing-dependency-VI.patch hw-isa-piix4-Migrate-Reset-Control-Regis.patch hw-virtio-pci-Added-AER-capability.patch hw-virtio-pci-Added-counter-for-pcie-cap.patch s390x-css-report-errors-from-ccw_dstream.patch target-xtensa-fix-meson.build-rule-for-x.patch util-fix-use-after-free-in-module_load_o.patch virtio-pci-compat-page-aligned-ATS.patch- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103) * Patches dropped: hw-s390x-modularize-virtio-gpu-ccw.patch * Patches added: s390x-add-have_virtio_ccw.patch s390x-modularize-virtio-gpu-ccw.patch s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282) hw-sd-sd-Actually-perform-the-erase-oper.patch hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch hw-sd-sdhci-Correctly-set-the-controller.patch hw-sd-sdhci-Don-t-transfer-any-data-when.patch hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch hw-sd-sdhci-Limit-block-size-only-when-S.patch hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch hw-sd-sd-Move-the-sd_block_-read-write-a.patch hw-sd-sd-Skip-write-protect-groups-check.patch - Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373) tools-virtiofsd-Replace-the-word-whiteli.patch viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch virtiofsd-extract-lo_do_open-from-lo_ope.patch virtiofsd-optionally-return-inode-pointe.patch virtiofsd-prevent-opening-of-special-fil.patch virtiofs-drop-remapped-security.capabili.patch virtiofsd-Save-error-code-early-at-the-f.patch - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) net-introduce-qemu_receive_packet.patch rtl8139-switch-to-use-qemu_receive_packe.patch - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) cadence_gem-switch-to-use-qemu_receive_p.patch dp8393x-switch-to-use-qemu_receive_packe.patch e1000-switch-to-use-qemu_receive_packet-.patch lan9118-switch-to-use-qemu_receive_packe.patch msf2-mac-switch-to-use-qemu_receive_pack.patch pcnet-switch-to-use-qemu_receive_packet-.patch sungem-switch-to-use-qemu_receive_packet.patch tx_pkt-switch-to-use-qemu_receive_packet.patch - Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686) memory-clamp-cached-translation-in-case-.patch - Include upstream patches designated as stable material and reviewed for applicability to include here hw-arm-virt-Disable-pl011-clock-migratio.patch xen-block-Fix-removal-of-backend-instanc.patch - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)- Fix s390x "mediated device is in use" error condition (bsc#1183634) update-linux-headers-Include-const.h.patch Update-linux-headers-to-5.11-rc2.patch vfio-ccw-Connect-the-device-request-noti.patch- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577) e1000-fail-early-for-evil-descriptor.patch- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372) s390x-pci-restore-missing-Query-PCI-Func.patch- Include upstream patches designated as stable material and reviewed for applicability to include here lsilogic-Use-PCIDevice-exit-instead-of-D.patch vhost-user-blk-fix-blkcfg-num_queues-end.patch - Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137) 9pfs-Fully-restart-unreclaim-loop-CVE-20.patch - Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639) net-vmxnet3-validate-configuration-value.patch- Add #!ForceMultiversion to qemu.spec: + As the spec file defines different Version: fiels for various subpackages, we must instruct OBS to not ever reset the checkin-counter, as it would by defalut on a version increase. Resetting the version counter results in sub-packages reusing their VERSION-RELEASE from the past (e.g. qemu-ipxe is version 1.0.0+, and upon checkin of a new qemu version, RELEASE is reset to 1.1, thus again producing qemu-ipxe-1.0.0+-1.1.noarch.rpm.- Fix GCC11 compiler issue in brotli (edk2) code (boo#1181922) brotli-fix-actual-variable-array-paramet.patch - Tweak a few submodule descriptions and summaries - Fix a backward compatibility issue in ACPI data i386-acpi-restore-device-paths-for-pre-5.patch- Add patch from IBM to improve modularization situation on s390 where a new qemu module, hw-s390x-virtio-gpu-ccw.so, and a corresponding new qemu-hw-s390x-virtio-gpu-ccw subpackage, is split out (this parallels the hw-display-virtio-gpu-pci.so module). Split-provides file is also used to track this functionality splitout. Both the packages supplying the above mentioned modules now have a Requires on the qemu-hw-display-virtio-gpu package. It is anticipated that this change is going in upstream as well, and if done differently the plan is to update to the upstream implementation if possible (bsc#1181103) hw-s390x-modularize-virtio-gpu-ccw.patch- Added a few more usability improvements for our git packaging workflow- Fix issue of virtio-9p-ccw having been mistakenly dropped from qemu (bsc#1182496) hw-s390x-fix-build-for-virtio-9p-ccw.patch- Tweaked some spec file details to be again compatible with quilt setup using the spec file as input - Remove BuildRequires that were added in anticipation of building ovmf within this package. We have not taken that route- Fix uninitialized variable in ipxe driver code (boo#1181922) ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch - Add a few improvements to the git-based package workflow scripts- Include additional upstream patches designated as stable material and reviewed for applicability to include here blockjob-Fix-crash-with-IOthread-when-bl.patch monitor-Fix-assertion-failure-on-shutdow.patch qemu-nbd-Use-SOMAXCONN-for-socket-listen.patch qemu-storage-daemon-Enable-object-add.patch- Switch the modules qemu-ui-display-gpu and qemu-ui-display-gpu-pci from being an x86 only Recommends, to a Recommends for all arch's except s390x (boo#1181350) - Fix qemu-hw-usb-smartcard to not be a Recommends for s390x - Minor spec file tweaks for compatibility with upcoming spec file formatter- Make note that this patch takes care of an OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933) hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch- Include upstream patches designated as stable material and reviewed for applicability to include here block-Separate-blk_is_writable-and-blk_s.patch hw-intc-arm_gic-Fix-interrupt-ID-in-GICD.patch hw-net-lan9118-Fix-RX-Status-FIFO-PEEK-v.patch hw-timer-slavio_timer-Allow-64-bit-acces.patch net-Fix-handling-of-id-in-netdev_add-and.patch target-arm-Don-t-decode-insns-in-the-XSc.patch target-arm-Fix-MTE0_ACTIVE.patch target-arm-Introduce-PREDDESC-field-defi.patch target-arm-Update-PFIRST-PNEXT-for-pred_.patch target-arm-Update-REV-PUNPK-for-pred_des.patch target-arm-Update-ZIP-UZP-TRN-for-pred_d.patch tcg-Use-memset-for-large-vector-byte-rep.patch ui-vnc-Add-missing-lock-for-send_color_m.patch virtio-move-use-disabled-flag-property-t.patch- binutils v2.36 has changed the handling of the assembler's - mx86-used-note, resulting in a build failure. To compensate, we now explicitly specify -mx86-used-note=no in the seabios Makefile (boo#1181775) build-be-explicit-about-mx86-used-note-n.patch- Additional tweaks to ensure libvirt runs ok when qemu-hw-display-virtio-gpu package is not installed- Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid "Failed to try-restart qemu-ga@.service" error while updating the qemu-guest-agent. (bsc#1178565)- Fix two additional cases of qemu crashing due to qemu module packages not being loaded. qom-handle-case-of-chardev-spice-module-.patch spice-app-avoid-crash-when-core-spice-mo.patch- Fix issue of qemu crashing (abort called) when virtio-gpu device is asked for and the qemu-hw-display-virtio-gpu package isn't installed. (bsc#1181103) module-for-virtio-gpu-pre-load-module-to.patch - Add additional inter-module package dependencies, to reflect the current module dependencies (see qemu source file: util/module.c) - As of v3.1.0 virt-manager, new VM's are created by default with audio/sound enabled, so it's time to reflect the need, at least in the spice case, by having spice-audio available when spice in general is used (boo#1180210 boo#1181132) - Further refine package Recommends/Suggests based on architecture - Remove no longer needed dependency on pwdutils (boo#1181235)- Fix qemu-testsuite issue where white space processing gets handled differently under bash 5.1 (boo#1181054) iotests-Fix-_send_qemu_cmd-with-bash-5.1.patch- Convert qemu-kvm from a script to a symlink. Using qemu-kvm to invoke the QEMU emulator has been deprecated for some time, but is still provided. It has as it's ancient origins a version of QEMU which had KVM acceleration enabled by default, and then recently, until now, it is a shell script which execs the QEMU emulator, adding '-machine accel=kvm' to the beginning of the list of command line options passed to the emulator. This method collides with the now preferred method of specifying acceleration options by using -accel. qemu-kvm is now changed to simply be a symlink to the same QEMU binary which the prior script exec'd. This new approach takes advantage of a built-in QEMU feature where if QEMU is invoked using a program name ending in 'kvm', KVM emulation is enabled. This approach is better in that it is more compatible with any other command line option that may be added for describing acceleration. For those who have modified qemu-kvm to add additional command line options, or take other actions in the context of the script you will now need to create an alternate script "emulator" to achieve the same result. Note that it's possible there may be some very subtle behavioral difference in the switch from a script to a symlink, but given that qemu-kvm is a deprecated package, we're not going to worry about that.- Fix crash when spice used and the qemu-audio-spice package isn't installed (boo#1180210) audio-add-sanity-check.patch - Add some stable patches from upstream block-Fix-deadlock-in-bdrv_co_yield_to_d.patch block-Fix-locking-in-qmp_block_resize.patch block-nfs-fix-int-overflow-in-nfs_client.patch block-Simplify-qmp_block_resize-error-pa.patch build-no-pie-is-no-functional-linker-fla.patch- Update to v5.2.0: See http://wiki.qemu.org/ChangeLog/5.2 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * Dropped system emulators: qemu-system-lm32, qemu-system-unicore32 * Dropped linux user emulator: qemu-ppc64abi32 * Added linux user emulator: qemu-extensaeb * Unicore32 and lm32 guest support dropped * New sub-packages (most due to ongoing modularization of QEMU): qemu-audio-spice, qemu-hw-chardev-spice, qemu-hw-display-virtio-vga, qemu-hw-display-virtio-gpu, qemu-hw-display-virtio-gpu-pci, qemu-ui-spice-core, qemu-ui-opengl, qemu-ivshmem-tools * x86: A new KVM feature which improves the handling of asynchronous page faults is available with -cpu ...,kvm-async-pf-int (requires Linux 5.8) * s390: More instructions emulated under TCG * PowerPC: nvdimm= machine option now functions correctly; misc improvements * ARM: new boards: mps2-an386 (Cortex-M4 based) and mps2-an500 (Cortex-M7 based), raspi3ap (the Pi 3 model A+), raspi0 (the Pi Zero) and raspi1ap (the Pi A+) * RISC-V: OpenSBI v0.8 included by default; Generic OpenSBI platform used when no -bios argument is supplied; Support for NUMA sockets on Virt and Spike Machines; Support for migrating machines; misc improvements * Misc NVMe improvements * The 'vhost-user-blk' export type has been added, allowing qemu-storage-daemon to act as a vhost-user-blk device backend * The SMBIOS OEM strings can now come from a file * 9pfs - misc performance related improvements * virtiofs - misc improvements * migration: The default migration bandwidth has been increased to 1Gbps (users are still encouraged to tune it to their own hardware); The new 'calc-dirty-rate' and 'query-dirty-rate' QMP commands can help determine the likelihood of precopy migration success; TLS+multifd now supported for higher bandwidth encrypted migration; misc minor features added * Misc minor block features added * Misc doc improvements * qemu-microvm subpackage change: the bios-microvm.bin is now SeaBIOS based, and the qboot based on is now qboot.rom * elf2dmp is no longer part of qemu-tools (it was never intended to be a packaged binary) * Some subpackages which were 'Requires' are now 'Recommends', allowing for a smaller qemu packaging footprint if needed * Patches dropped (included in release tarball, unless otherwise noted): docs-fix-trace-docs-build-with-sphinx-3..patch (fixed differently) hw-hyperv-vmbus-Fix-32bit-compilation.patch linux-user-properly-test-for-infinite-ti.patch Switch-order-of-libraries-for-mpath-supp.patch (fixed differently) Conditionalize-ui-bitmap-installation-be.patch (fixed differently) hw-usb-hcd-xhci-Fix-GCC-9-build-warning.patch (no longer using gcc9) hw-usb-dev-mtp-Fix-GCC-9-build-warning.patch (no longer using gcc9) roms-Makefile-enable-cross-compile-for-b.patch (fixed with different patch) libvhost-user-handle-endianness-as-manda.patch virtio-add-vhost-user-fs-ccw-device.patch Fix-s-directive-argument-is-null-error.patch build-Workaround-compilation-error-with-.patch build-Be-explicit-about-fcommon-compiler.patch intel-Avoid-spurious-compiler-warning-on.patch golan-Add-explicit-type-casts-for-nodnic.patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch ensure-headers-included-are-compatible-w.patch Enable-cross-compile-prefix-for-C-compil.patch (fixed differently) hw-net-net_tx_pkt-fix-assertion-failure-.patch hw-net-xgmac-Fix-buffer-overflow-in-xgma.patch s390x-protvirt-allow-to-IPL-secure-guest.patch usb-fix-setup_len-init-CVE-2020-14364.patch * Patches added: meson-install-ivshmem-client-and-ivshmem.patch Revert-roms-efirom-tests-uefi-test-tools.patch Makefile-Don-t-check-pc-bios-as-pre-requ.patch roms-Makefile-add-cross-file-to-qboot-me.patch qboot-add-cross.ini-file-to-handle-aarch.patch usb-Help-compiler-out-to-avoid-a-warning.patch - In spec file, where reasonable, switch BuildRequires: XXX-devel to be pkgconfig(XXX') instead - No longer disable link time optimization for qemu for x86. It looks like either the build service, qemu code changes and/or the switch to meson have resolved issues previously seen there. We still see problems for other architectures however. - For the record, the following issues reported for SUSE SLE15-SP2 are either fixed in this current package, or are otherwise no longer an issue: bsc#1172384 bsc#1174386 bsc#1174641 bsc#1174863 bsc#1175370 bsc#1175441 bsc#1176494 CVE-2020-13361 CVE-2020-14364 CVE-2020-15863 CVE-2020-16092 CVE-2020-24352 and the following feature requests are satisfied by this package: jsc#SLE-13689 jsc#SEL-13780 jsc#SLE-13840 - To be more accurate, and to align with other qemu packaging practices, rename the qemu-s390 package to qemu-s390x. The old name (in the rpm namespace) is provided with a "Provides" directive, and an "Obsoletes" done against that name for prior qemu versions, as is standard practice (boo#1177764 jsc#SLE-17060) - Take this opportunity to remove some ancient Split-Provides mechanisms which can't conceivably be needed any more: qemu-block-curl provided: qemu:%_libdir/%name/block-curl.so qemu-guest-agent provided: qemu:%_bindir/qemu-ga qemu-tools provided: qemu:%_libexecdir/qemu-bridge-helper- Disable linux-user 'ls' test on 32 bit arm. It's failing with "Allocating guest commpage: Cannot allocate memory" error, which we should hunt down, but for now we don't want it to prevent the package from being built- Be more careful about what directives are used for qemu-testsuite- Fix some spec file 'Requires' statements to be accurate to the new model of relying on system-user-qemu and system-group-kvm to provide the needed users and groups- Added io_uring support.- A patch has been applied to virt-manager to handle qemu spice related modules not being present, so undo the change from Sep 30, 2020. Once again qemu-hw-display-qxl and qemu-hw-usb-redirect are Recommends and not Required by the qemu package (boo#1157320 boo#1176517, boo#1178141) - For jsc#SLE-11629, change qemu, qemu-tools, and qemu-guest-agent to rely on system-user-qemu and system-group-kvm to provide now static system UIDs and GID's for qemu user and group, and kvm group. This will make guest migration more seamless for new installations since there is no chance of having required ID's differ in value.- Add virtio-fs support for s390x (jsc#SLE-13822) libvhost-user-handle-endianness-as-manda.patch virtio-add-vhost-user-fs-ccw-device.patch- Note: As part of the "Close the Leap Gap" effort, it's been decided that our SDL2 support in qemu is not worth trying to maintain. Long ago SLE qemu stopped including SDL2 support and now we will do the same for the openSUSE releases going forward. Accordingly SDL2 options are now configured out, and the two sub- packages which are SDL2 specific, namely qemu-audio-sdl and qemu-ui-sdl, are no longer generated, and due to the rpm package conflicts used for those packages, they will be uninstalled from systems as qemu updates move forward - Drop e2fsprogs-devel and libpcap-devel as BuildRequires packages. They have not actually been needed to build qemu for a very long time - Add more forsplits files- Create qemu-skiboot sub-package. Use update-alternatives mechanism to coordinate with opal-firmware (provided with skiboot package set) on the provider of the /usr/share/qemu/skiboot.lid firmware file. qemu-skiboot uses a priority of 15, while opal-firmware uses a priority of 10 (jsc#SLE-13240)- Undo part of the split-provides recently done. We have to wait on virt-manager to handle qemu modularization better before we make qemu-hw-display-qxl and qemu-hw-usb-redirect non-required (boo#1157320 boo#1176517)- Fix spec file, where a conditional macro didn't have the correct syntax (bsc#1176766)- Change qemu-x86 packaging relationship with qemu-microvm from Requires to Recommends- In an effort to "Close the Leap Gap", remove use of is_opensuse from the spec file, so that the same packages built for SLE can be reused for Leap. Some sub-packages will not be included for SLE which are included for Leap. They wil be provided in Package Hub for SLE users as unsupported packages. (jsc#SLE-11660, jsc#SLE-11661, jsc#SLE-11662, jsc#SLE-11691, jse#SLE-11692, jsc#SLE-11894)- Add infrastructure to do package splits when split-off package isn't required and doesn't (otherwise) include any previously installed files. This version of qemu has split out non-essential functionality into loadable modules, as noted in Aug 20, 2020 log entry, which describes the emergency Split-Provides. That approach will be superseded by this planned approach, and those dummy doc files will be removed in time Here is the new mapping: subpackage continuity file provided (files are dummies) ========== ============================================ qemu-chardev-baum /usr/share/qemu/forsplits/00 qemu-hw-display-qxl /usr/share/qemu/forsplits/01 qemu-hw-usb-redirect /usr/share/qemu/forsplits/02 qemu-hw-usb-smartcard /usr/share/qemu/forsplits/03- Fix path of qemu-pr-helper. It was a mistake to move it from %_bindir to _libexecdir. In more recent qemu code it's been moved back, so undo this mistake by providing it at the same location as it has been all along- For SLE15-SP3, note that this update to v5.1.0 is a step towards fulfilling jsc#SLE-13689, which asks for qemu v5.2.0 or higher- Fix some shell syntax in update_git.sh, esp. an issue exposed by the most recent patch added- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441) usb-fix-setup_len-init-CVE-2020-14364.patch - Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, JIRA, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2020-1983 CVE-2020-10761 CVE-2020-13361 CVE-2020-13362 CVE-2020-13659 CVE-2020-13800 * bsc#1167816 bsc#1170940 boo#1171712 bsc#1172383 bsc#1172384 bsc#1172386 bsc#1172495 bsc#1172710 * Patches dropped (SLE) (included in current release tarball): exec-set-map-length-to-zero-when-returni.patch i386-acpi-Remove-_HID-from-the-SMBus-ACP.patch megasas-use-unsigned-type-for-reply_queu.patch- Fix compilation errors seen with pre-release gcc 11 qht-Revert-some-constification-in-qht.c.patch Revert-qht-constify-qht_statistics_init.patch help-compiler-out-by-initializing-array.patch s390x-Fix-stringop-truncation-issue-repo.patch - Add Split-Provides mechanism, using doc files which were moved in v5.1.0. This allows for the new subpackages to be selected for install when the v5.0.0 qemu is updated. These new subpackages are not marked as "Required" by any packages, in an effort to reduce the dependencies of the core qemu components (boo#1175320) v5.0.0 qemu file mapping is provided as follows: subpackage continuity file provided (files are dummies) ========== ============================================ qemu-chardev-baum /usr/share/doc/packages/qemu/qemu-ga-ref.html qemu-hw-display-qxl /usr/share/doc/packages/qemu/qemu-ga-ref.txt qemu-hw-usb-redirect /usr/share/doc/packages/qemu/qemu-qmp-ref.html qemu-hw-usb-smartcard /usr/share/doc/packages/qemu/qemu-qmp-ref.txt- Fix wrong usage of %{_libexecdir} for systemd owned paths below %{_prefix}/lib.- Update to v5.1.0: See http://wiki.qemu.org/ChangeLog/5.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * s390: Protected virtualization (secure execute) is fully merged upstream * s390: vfio-ccw devices no longer require setting the allow prefetch bit in the ORB, but is still dependent on host kernel support * s390: vfio-ccw now has basic support for relaying path state changes to the guest * PowerPC: pseries: NVDIMMs require label-size property * PowerPC: pseries: POWER10 support * PowerPC: added interface to inject POWER style NMIs * ARM: new board: sonorapass-bmc * ARM: new emulated features: ARMv8.2-TTSUXN, ARMv8.5-MemTag * ARM: Raspberry Pi boards now support a USB controller * ARM: virt board now supports hot-remove memory * RISC-V lots of improvements * qemu-img resize now requires -shrink to shrinking raw images * The mem parameter of the -numa option is no longer recognized starting with 5.1 machine types - instead use the memdev parameter * The ACPI WAET table is now exposed to guests * The max blocksize for virtual storage device is now 2 MiB * NVMe improvements * Crypto subsystem improvements * Block backends and tools: Numerous improvements and fixes * Firmware updates: SeaBIOS (essentially v1.14.0), OpenBIOS, SLOF (20200717), OpenSBI (v0.7) * Patches dropped (upstream unless otherwise noted): ati-vga-check-mm_index-before-recursive-.patch audio-fix-wavcapture-segfault.patch es1370-check-total-frame-count-against-c.patch exec-set-map-length-to-zero-when-returni.patch gcc10-maybe-uninitialized.patch hw-vfio-pci-quirks-Fix-broken-legacy-IGD.patch megasas-use-unsigned-type-for-reply_queu.patch nbd-server-Avoid-long-error-message-asse.patch ppc-spapr_caps-Don-t-disable-cap_cfpc-on.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch s390x-s390-virtio-ccw-Fix-build-on-syste.patch Sync-pv.patch tests-Disable-some-block-tests-for-now.patch (no longer needed) vga-fix-cirrus-bios.patch virtiofsd-add-rlimit-nofile-NUM-option.patch virtiofsd-stay-below-fs.file-max-sysctl-.patch * Patches renamed: build-Do-not-apply-WORKAROUND_CFLAGS-for.patch - > Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch build-Fix-s-directive-argument-is-null-e.patch - > Fix-s-directive-argument-is-null-error.patch * Patches added: hw-hyperv-vmbus-Fix-32bit-compilation.patch - New subpackages, due to modularization: qemu-chardev-baum, qemu-hw-display-qxl, qemu-hw-usb-redirect, qemu-hw-usb-smartcard - Configure to use "system" libslirp and libdaxctl (libnvdimm) when available- Don't disable cap_cfpc on POWER8 by default (bsc#1174374) ppc-spapr_caps-Don-t-disable-cap_cfpc-on.patch- Updating to Sphinx v3.1.2 in Factory is exposing an issue in qemu doc sources. Fix it docs-fix-trace-docs-build-with-sphinx-3..patch- Fix DoS possibility in ati-vga emulation (CVE-2020-13800 bsc#1172495) ati-vga-check-mm_index-before-recursive-.patch - Fix DoS possibility in Network Block Device (nbd) support infrastructure (CVE-2020-10761 bsc#1172710) nbd-server-Avoid-long-error-message-asse.patch - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386) exec-set-map-length-to-zero-when-returni.patch - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383) megasas-use-unsigned-type-for-reply_queu.patch - Fix legacy IGD passthrough hw-vfio-pci-quirks-Fix-broken-legacy-IGD.patch- The latest gcc10 available in Factory has the fix for the issue this patch was created to avoid, so drop it build-Work-around-gcc10-bug-by-not-using.patch- Switch to upstream versions of some patches we carry add-enum-cast-to-avoid-gcc10-warning.patch - > golan-Add-explicit-type-casts-for-nodnic.patch Be-explicit-about-fcommon-compiler-direc.patch - > build-Be-explicit-about-fcommon-compiler.patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch - > build-Do-not-apply-WORKAROUND_CFLAGS-for.patch Fix-s-directive-argument-is-null-error.patch - > build-Fix-s-directive-argument-is-null-e.patch Workaround-compilation-error-with-gcc-9..patch - > build-Workaround-compilation-error-with-.patch work-around-gcc10-problem-with-zero-leng.patch - > intel-Avoid-spurious-compiler-warning-on.patch - Fix vgabios issue for cirrus graphics emulation, which effectively downgraded it to standard VGA behavior vga-fix-cirrus-bios.patch- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384) es1370-check-total-frame-count-against-c.patch- Work around gcc 10 bug (boo#1172411) build-Work-around-gcc10-bug-by-not-using.patch- Now that gcc10 compatibility is figured out, remove NO_WERROR=1 again from ipxe make.- Fix segfault when doing HMP wavcapture (boo#1171712) audio-fix-wavcapture-segfault.patch- Fix DoS in virtiofsd, where a FUSE client could exhaust the number of available open files on the host (CVE-2020-10717 bsc#1171110) virtiofsd-add-rlimit-nofile-NUM-option.patch virtiofsd-stay-below-fs.file-max-sysctl-.patch- Add more fixes for gcc10 compatibility: Use NO_WERROR=1 when building ipxe sources, at least until we get gcc10 compatibility figured out. Also add patch for explicitly using -fcommon (boo#1171140) Be-explicit-about-fcommon-compiler-direc.patch and fix for tighter enum compatibility checking (boo#1171139) add-enum-cast-to-avoid-gcc10-warning.patch and a work around for what seems to be a compiler regression (boo#1171123) work-around-gcc10-problem-with-zero-leng.patch- Update to v5.0.0: See http://wiki.qemu.org/ChangeLog/5.0 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in the deprecated.html file installed with the qemu package Some noteworthy changes: * x86: EPYC-Rome vcpu model * x86: vcpu model fixes for EPYC, Denverton, and Icelake-Server * s390: (as previously mentioned) Protected Virtualization support: start and control guest in secure mode (bsc#1167075 jsc#SLE-7407) * s390: support for Adapter Interrupt Suppression while running in KVM mode * PowerPC: pseries: NVDIMMs with file backend supported * PowerPC: powernv: KVM guests now runnable under TCG emulation * PowerPC: powernv: Basic POWER10 support * ARM: new boards: tacoma-bmc, Netduindo Plus 2, Orangepi PC * ARM: 'virt' machine now supports vTPM and virtio-iommu devices * ARM:Cortex-M7 CPU support * ARM: Lots of architecture features now emulated * ARM: TPM supported * ARM: Timekeeping improvements * ARM: LOTS more - refer to upstream changelog * virtio-iommu * VNC compatibility with noVNC improved * Support for using memory backends for main/"built-in" guest RAM * hostmem backends can now specify prealloc thread count * Better Azure compatibility of VHD images * Ceph namespaces supported * Compress block filter driver can create compressed backup images * virtiofsd availble for host filesystem passthrough * Improved html based documentation is provided with this release * Live migration support for external processes running on QEMU D-Bus * Patches dropped (upstream unless otherwise noted): i386-Add-MSR-feature-bit-for-MDS-NO.patch i386-Add-macro-for-stibp.patch i386-Add-new-CPU-model-Cooperlake.patch arm-arm-powerctl-set-NSACR.-CP11-CP10-bi.patch iotests-Skip-test-060-if-it-is-not-possi.patch iotests-Skip-test-079-if-it-is-not-possi.patch Revert-qemu-options.hx-Update-for-reboot.patch iotests-Provide-a-function-for-checking-.patch Fix-double-free-issue-in-qemu_set_log_fi.patch iotests-Fix-IMGOPTSSYNTAX-for-nbd.patch virtio-blk-fix-out-of-bounds-access-to-b.patch block-Activate-recursively-even-for-alre.patch i386-Resolve-CPU-models-to-v1-by-default.patch numa-properly-check-if-numa-is-supported.patch vhost-user-gpu-Drop-trailing-json-comma.patch display-bochs-display-fix-memory-leak.patch hw-arm-smmuv3-Apply-address-mask-to-line.patch hw-arm-smmuv3-Correct-SMMU_BASE_ADDR_MAS.patch hw-arm-smmuv3-Check-stream-IDs-against-a.patch hw-arm-smmuv3-Align-stream-table-base-ad.patch hw-arm-smmuv3-Use-correct-bit-positions-.patch hw-arm-smmuv3-Report-F_STE_FETCH-fault-a.patch block-Add-bdrv_qapi_perm_to_blk_perm.patch blkdebug-Allow-taking-unsharing-permissi.patch virtio-add-ability-to-delete-vq-through-.patch virtio-update-queue-size-on-guest-write.patch virtio-don-t-enable-notifications-during.patch numa-Extend-CLI-to-provide-initiator-inf.patch numa-Extend-CLI-to-provide-memory-latenc.patch numa-Extend-CLI-to-provide-memory-side-c.patch hmat-acpi-Build-Memory-Proximity-Domain-.patch hmat-acpi-Build-System-Locality-Latency-.patch hmat-acpi-Build-Memory-Side-Cache-Inform.patch tests-numa-Add-case-for-QMP-build-HMAT.patch qcow2-bitmaps-fix-qcow2_can_store_new_di.patch backup-top-Begin-drain-earlier.patch virtio-mmio-update-queue-size-on-guest-w.patch virtio-net-delete-also-control-queue-whe.patch intel_iommu-a-fix-to-vtd_find_as_from_bu.patch target-i386-Add-new-bit-definitions-of-M.patch target-i386-Add-missed-features-to-Coope.patch hw-i386-pc-fix-regression-in-parsing-vga.patch migration-test-ppc64-fix-FORTH-test-prog.patch target-arm-Return-correct-IL-bit-in-merg.patch target-arm-Set-ISSIs16Bit-in-make_issinf.patch runstate-ignore-finishmigrate-prelaunch-.patch migration-Rate-limit-inside-host-pages.patch m68k-Fix-regression-causing-Single-Step-.patch Revert-vnc-allow-fall-back-to-RAW-encodi.patch vnc-prioritize-ZRLE-compression-over-ZLI.patch target-i386-kvm-initialize-feature-MSRs-.patch s390x-adapter-routes-error-handling.patch iscsi-Cap-block-count-from-GET-LBA-STATU.patch block-backup-fix-memory-leak-in-bdrv_bac.patch tpm-ppi-page-align-PPI-RAM.patch hw-intc-arm_gicv3_kvm-Stop-wrongly-progr.patch target-arm-fix-TCG-leak-for-fcvt-half-do.patch block-fix-memleaks-in-bdrv_refresh_filen.patch block-backup-top-fix-failure-path.patch iotests-add-test-for-backup-top-failure-.patch audio-oss-fix-buffer-pos-calculation.patch target-arm-monitor-query-cpu-model-expan.patch block-fix-crash-on-zero-length-unaligned.patch block-Fix-VM-size-field-width-in-snapsho.patch target-arm-Correct-definition-of-PMCRDP.patch block-nbd-extract-the-common-cleanup-cod.patch block-nbd-fix-memory-leak-in-nbd_open.patch virtio-crypto-do-delete-ctrl_vq-in-virti.patch virtio-pmem-do-delete-rq_vq-in-virtio_pm.patch vhost-user-blk-delete-virtioqueues-in-un.patch hw-arm-cubieboard-use-ARM-Cortex-A8-as-t.patch pc-bios-s390x-Save-iplb-location-in-lowc.patch iotests-Fix-nonportable-use-of-od-endian.patch block-qcow2-threads-fix-qcow2_decompress.patch job-refactor-progress-to-separate-object.patch block-block-copy-fix-progress-calculatio.patch block-io-fix-bdrv_co_do_copy_on_readv.patch scsi-qemu-pr-helper-Fix-out-of-bounds-ac.patch target-ppc-Fix-rlwinm-on-ppc64.patch compat-disable-edid-on-correct-virtio-gp.patch ppc-ppc405_boards-Remove-unnecessary-NUL.patch block-Avoid-memleak-on-qcow2-image-info-.patch block-bdrv_set_backing_bs-fix-use-after-.patch hmp-vnc-Fix-info-vnc-list-leak.patch migration-colo-fix-use-after-free-of-loc.patch migration-ram-fix-use-after-free-of-loca.patch qcow2-List-autoclear-bit-names-in-header.patch sheepdog-Consistently-set-bdrv_has_zero_.patch target-arm-Fix-PAuth-sbox-functions.patch tcg-i386-Fix-INDEX_op_dup2_vec.patch net-tulip-check-frame-size-and-r-w-data-.patch target-i386-do-not-set-unsupported-VMX-s.patch spapr-Fix-failure-path-for-attempting-to.patch ati-vga-Fix-checks-in-ati_2d_blt-to-avoi.patch xen-block-Fix-double-qlist-remove-and-re.patch vpc-Don-t-round-up-already-aligned-BAT-s.patch target-xtensa-fix-pasto-in-pfwait.r-opco.patch aio-wait-delegate-polling-of-main-AioCon.patch async-use-explicit-memory-barriers.patch tcg-mips-mips-sync-encode-error.patch vhost-user-gpu-Release-memory-returned-b.patch vga-Raise-VRAM-to-16-MiB-for-pc-0.15-and.patch (no pc-0.15) hw-i386-disable-smbus-migration-for-xenf.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-Move-initial-reset.patch s390x-Move-clear-reset.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-Beautify-diag308-handling.patch s390x-Add-missing-vcpu-reset-functions.patch s390-sclp-improve-special-wait-psw-logic.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch util-add-slirp_fmt-helpers.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch slirp-use-correct-size-while-emulating-c.patch tcp_emu-fix-unsafe-snprintf-usages.patch - For SLE builds, leverage the html documentation by adding a link to the SUSE specific support documentation (the *.txt support doc was slightly tweaked to be acceptable as reStructuredText for conversion to html) docs-add-SUSE-support-statements-to-html.patch-Fix potential DoS in ATI VGA emulation (CVE-2020-11869 bsc#1170537) ati-vga-Fix-checks-in-ati_2d_blt-to-avoi.patch- Minor tweaks to patches and support doc- Add gcc10-maybe-uninitialized.patch in order to fix boo#1169728.- Include upstream patches targeted for the next stable release (bug fixes only) spapr-Fix-failure-path-for-attempting-to.patch target-i386-do-not-set-unsupported-VMX-s.patch target-xtensa-fix-pasto-in-pfwait.r-opco.patch tcg-i386-Fix-INDEX_op_dup2_vec.patch tcg-mips-mips-sync-encode-error.patch vhost-user-gpu-Release-memory-returned-b.patch vpc-Don-t-round-up-already-aligned-BAT-s.patch xen-block-Fix-double-qlist-remove-and-re.patch - Fix bug causing weak encryption in PAuth for ARM (CVE-2020-10702 bsc#1168681) target-arm-Fix-PAuth-sbox-functions.patch - Fix OOB in tulip NIC emulation (CVE-2020-11102 bsc#1168713 net-tulip-check-frame-size-and-r-w-data-.patch - Note that previously included patch addresses CVE-2020-1711 and bsc#1166240 iscsi-Cap-block-count-from-GET-LBA-STATU.patch - Include performance improvement (and related?) patch aio-wait-delegate-polling-of-main-AioCon.patch async-use-explicit-memory-barriers.patch - Rework previous patch at Olaf H.'s direction hw-i386-disable-smbus-migration-for-xenf.patch - Eliminate is_opensuse usage in producing seabios version string what we are doing here is just replacing the upstream string with one indicating that the openSUSE build service built it, and so just leave it as "-rebuilt.opensuse.org" - Alter algorithm used to produce "unique" symbol for coordinating qemu with the optional modules it may load. This is a reasonable relaxation for broader compatibility configure-remove-pkgversion-from-CONFIG_.patch - Tweak supported.*.txt for latest deprecations, and other fixes - Tweak update_git.sh, config.sh- One more fix is needed for: s390x Protected Virtualization support - start and control guest in secure mode (bsc#1167075 jsc#SLE-7407) s390x-s390-virtio-ccw-Fix-build-on-syste.patch- Include upstream patches targeted for the next stable release (bug fixes only) block-Avoid-memleak-on-qcow2-image-info-.patch block-bdrv_set_backing_bs-fix-use-after-.patch hmp-vnc-Fix-info-vnc-list-leak.patch migration-colo-fix-use-after-free-of-loc.patch migration-ram-fix-use-after-free-of-loca.patch ppc-ppc405_boards-Remove-unnecessary-NUL.patch qcow2-List-autoclear-bit-names-in-header.patch scsi-qemu-pr-helper-Fix-out-of-bounds-ac.patch sheepdog-Consistently-set-bdrv_has_zero_.patch- Note The previous set of s390x patches also includes the fix for: bsc#1167445- Include upstream patches targeted for the next stable release (bug fixes only) block-io-fix-bdrv_co_do_copy_on_readv.patch compat-disable-edid-on-correct-virtio-gp.patch target-ppc-Fix-rlwinm-on-ppc64.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch - s390x Protected Virtualization support - start and control guest in secure mode. (note: binary patch from patch series dropped since for s390x we rebuild the patched binary anyways) (bsc#1167075 jsc#SLE-7407) s390-sclp-improve-special-wait-psw-logic.patch s390x-Add-missing-vcpu-reset-functions.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Beautify-diag308-handling.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-Move-clear-reset.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-Move-initial-reset.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch Sync-pv.patch- Fix the issue that s390x could not read IPL channel program when using dasd as boot device (bsc#1163140) pc-bios-s390x-Save-iplb-location-in-lowc.patch- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018 bsc#1161066 CVE-2020-7039) slirp-use-correct-size-while-emulating-c.patch slirp-use-correct-size-while-emulating-I.patch tcp_emu-Fix-oob-access.patch tcp_emu-fix-unsafe-snprintf-usages.patch util-add-slirp_fmt-helpers.patch - Replace this patch with upstream version target-arm-monitor-query-cpu-model-expan.patch- Include upstream patches targeted for the next stable release (bug fixes only) audio-oss-fix-buffer-pos-calculation.patch blkdebug-Allow-taking-unsharing-permissi.patch block-Add-bdrv_qapi_perm_to_blk_perm.patch block-backup-top-fix-failure-path.patch block-block-copy-fix-progress-calculatio.patch block-fix-crash-on-zero-length-unaligned.patch block-fix-memleaks-in-bdrv_refresh_filen.patch block-Fix-VM-size-field-width-in-snapsho.patch block-nbd-extract-the-common-cleanup-cod.patch block-nbd-fix-memory-leak-in-nbd_open.patch block-qcow2-threads-fix-qcow2_decompress.patch hw-arm-cubieboard-use-ARM-Cortex-A8-as-t.patch hw-intc-arm_gicv3_kvm-Stop-wrongly-progr.patch iotests-add-test-for-backup-top-failure-.patch iotests-Fix-nonportable-use-of-od-endian.patch job-refactor-progress-to-separate-object.patch target-arm-Correct-definition-of-PMCRDP.patch target-arm-fix-TCG-leak-for-fcvt-half-do.patch tpm-ppi-page-align-PPI-RAM.patch vhost-user-blk-delete-virtioqueues-in-un.patch virtio-add-ability-to-delete-vq-through-.patch virtio-crypto-do-delete-ctrl_vq-in-virti.patch virtio-pmem-do-delete-rq_vq-in-virtio_pm.patch- Add Obsoletes directive for qemu-audio-sdl and qemu-ui-sdl since for a qemu package upgrade from SLE12-SP5, support for SDL is dropped- Fix xenfv migration from xen host with pre-v4.0 qemu. We had previously dropped a similar patch, but have decided that for now we need to go with this type of solution (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch- Avoid query-cpu-model-expansion crashed qemu when using machine type none, patch is queued in upstream now, will update commit id later (bsc#1159443) target-arm-monitor-query-cpu-model-expan.patch- BuildRequire pkgconfig(libudev) instead of libudev-devel: Allow OBS to shortcut through -mini flavors.- Stop using system membarriers (ie switch from --enable-membarrier to --disable-membarrier). This is a blocker for using qemu in the context of containers (boo#1130134 jsc#SLE-11089) - Drop this recently added patch - in consultation with upstream it was decided it needed to be solved a different way (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch - Include upstream patches targeted for the next stable release (bug fixes only) block-backup-fix-memory-leak-in-bdrv_bac.patch iscsi-Cap-block-count-from-GET-LBA-STATU.patch s390x-adapter-routes-error-handling.patch target-i386-kvm-initialize-feature-MSRs-.patch- Include upstream patches targeted for the next stable release (bug fixes only) hw-i386-pc-fix-regression-in-parsing-vga.patch m68k-Fix-regression-causing-Single-Step-.patch migration-Rate-limit-inside-host-pages.patch migration-test-ppc64-fix-FORTH-test-prog.patch Revert-vnc-allow-fall-back-to-RAW-encodi.patch runstate-ignore-finishmigrate-prelaunch-.patch target-arm-Return-correct-IL-bit-in-merg.patch target-arm-Set-ISSIs16Bit-in-make_issinf.patch vnc-prioritize-ZRLE-compression-over-ZLI.patch- BuildRequire pkconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors. - Use systemd_ordering in place of systemd_requires: systemd is never a strict requirement for qemu; but when installing qemu on a systemd-managed system, we want system to be present first.- Fix xenfv migration from xen host with pre-v4.0 qemu (bsc#1159755) hw-i386-disable-smbus-migration-for-xenf.patch- Create files within bundles.tar.xz with fixed timestamp and uid- Add a %bcond_without system_membarrier along with related processing to the spec file, to better investigate running QEMU with the --disable-membarrier configure option- Include upstream patches targeted for the next stable release (bug fixes only) arm-arm-powerctl-set-NSACR.-CP11-CP10-bi.patch backup-top-Begin-drain-earlier.patch block-Activate-recursively-even-for-alre.patch display-bochs-display-fix-memory-leak.patch Fix-double-free-issue-in-qemu_set_log_fi.patch hw-arm-smmuv3-Align-stream-table-base-ad.patch hw-arm-smmuv3-Apply-address-mask-to-line.patch hw-arm-smmuv3-Check-stream-IDs-against-a.patch hw-arm-smmuv3-Correct-SMMU_BASE_ADDR_MAS.patch hw-arm-smmuv3-Report-F_STE_FETCH-fault-a.patch hw-arm-smmuv3-Use-correct-bit-positions-.patch i386-Resolve-CPU-models-to-v1-by-default.patch intel_iommu-a-fix-to-vtd_find_as_from_bu.patch iotests-Fix-IMGOPTSSYNTAX-for-nbd.patch iotests-Provide-a-function-for-checking-.patch iotests-Skip-test-060-if-it-is-not-possi.patch iotests-Skip-test-079-if-it-is-not-possi.patch numa-properly-check-if-numa-is-supported.patch qcow2-bitmaps-fix-qcow2_can_store_new_di.patch Revert-qemu-options.hx-Update-for-reboot.patch vhost-user-gpu-Drop-trailing-json-comma.patch virtio-blk-fix-out-of-bounds-access-to-b.patch virtio-mmio-update-queue-size-on-guest-w.patch virtio-net-delete-also-control-queue-whe.patch virtio-update-queue-size-on-guest-write.patch - Include performance improvement virtio-don-t-enable-notifications-during.patch - Repair incorrect packaging references to Jira tracked features- Add Cooperlake vcpu model (jsc#SLE-7923) i386-Add-MSR-feature-bit-for-MDS-NO.patch i386-Add-macro-for-stibp.patch i386-Add-new-CPU-model-Cooperlake.patch target-i386-Add-new-bit-definitions-of-M.patch target-i386-Add-missed-features-to-Coope.patch - Add HMAT support (jsc#SLE-8897) (the test case for this series isn't included because we aren't set up to handle binary patches) numa-Extend-CLI-to-provide-initiator-inf.patch numa-Extend-CLI-to-provide-memory-latenc.patch numa-Extend-CLI-to-provide-memory-side-c.patch hmat-acpi-Build-Memory-Proximity-Domain-.patch hmat-acpi-Build-System-Locality-Latency-.patch hmat-acpi-Build-Memory-Side-Cache-Inform.patch tests-numa-Add-case-for-QMP-build-HMAT.patch- Update to v4.2.0: See http://wiki.qemu.org/ChangeLog/4.2 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86: Denverton, Snowridge, and Dhyana CPU models added * x86: Latest version of all CPU models how have TSX (HLE and RTM) disabled by default * x86: Support for AVX512 BFloat16 extensions * x86: VMX features exposed more accurately and controllably * s390: TCG now implements IEP (Instruction Execution Protection) * PowerPC: POWER8 and POWER9 non-virtualized machines separated out * PowerPC: RTAS now comes from SLOF instead of QEMU itself * PowerPC: Unplug of multifunction PCI devices now unplugs the whole slot, as in x86 * ARM: Support for >256 CPUs with KVM is fixed * ARM: Memory hotplug now supported , when using UEFI, ACPI, for virt machine type * ARM: SVE support possuble now for KVM guests * ARM: ACPI generic event device can now deliver powerdown event * The backend device can be specified for a guest audio device * virtio v1.1 packed virtqueues supported * Socket based character device backends now support TCP keep-alive * Use encryption library cipher mode facilities, allowing improved performance for eg. AES-XTS encrption * Misc block device improvements, esp. with nbd - See the following few release-candidate changelog entries for additional changes related to this release - Switched package build to be out-of-tree- Update to v4.2.0-rc5: See http://wiki.qemu.org/ChangeLog/4.2- Update to v4.2.0-rc4: See http://wiki.qemu.org/ChangeLog/4.2 * Update the support documents used for SUSE SLE releases to cover this qemu release- Update to v4.2.0-rc3: See http://wiki.qemu.org/ChangeLog/4.2 * Patches dropped (upstream unless otherwise noted): ati-add-edid-support.patch ati-vga-add-rage128-edid-support.patch ati-vga-fix-ati_read.patch ati-vga-make-i2c-register-and-bits-confi.patch ati-vga-make-less-verbose.patch ati-vga-try-vga-ddc-first.patch Disable-Waddress-of-packed-member-for-GC.patch hdata-vpd-fix-printing-char-0x00.patch target-i386-add-PSCHANGE_NO-bit-for-the-.patch target-i386-Export-TAA_NO-bit-to-guests.patch vbe-add-edid-support.patch vga-add-ati-bios-tables.patch vga-add-atiext-driver.patch vga-make-memcpy_high-public.patch vga-move-modelist-from-bochsvga.c-to-new.patch * Patches added: Enable-cross-compile-prefix-for-C-compil.patch ensure-headers-included-are-compatible-w.patch roms-Makefile-enable-cross-compile-for-b.patch * Add qemu-ui-spice-app package containing ui-spice-app.so * Add qemu-microvm package containing bios-microvm.bin - Add descriptors for the 128k and 256k SeaBios firmware images - For the record, the following issues reported for SUSE SLE15-SP1 are either fixed in this current package, or are otherwise not an issue: bsc#1079730 bsc#1098403 bsc#1111025 bsc#1128106 bsc#1133031 bsc#1134883 bsc#1135210 bsc#1135902 bsc#1136540 bsc#1136778 bsc#1138534 bsc#1140402 bsc#1143794 bsc#1145379 bsc#1144087 bsc#1145427 bsc#1145436 bsc#1145774 bsc#1146873 bsc#1149811 bsc#1152506 bsc#1155812 bsc#1156642 CVE-2018-12207 CVE-2019-5008 CVE-2019-11135 CVE-2019-12068 CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 CVE-2019-15890, and the following feature requests are satisfied by this package: fate#327410 fate#327764 fate#327796 jsc#SLE-4883 jsc#SLE-6132 jsc#SLE-6237 jsc#SLE-6754- Expose pschange-mc-no "feature", indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) target-i386-add-PSCHANGE_NO-bit-for-the-.patch - Expose taa-no "feature", indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) target-i386-Export-TAA_NO-bit-to-guests.patch Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Update to v4.1.1, a stable, bug-fix-only release * Besides incorporating the following fixes we already carried, it includes about the same number of other, similar type fixes which we hadn't yet incorporated. * Patches dropped (subsumed by stable update): block-Add-bdrv_co_get_self_request.patch block-create-Do-not-abort-if-a-block-dri.patch block-file-posix-Let-post-EOF-fallocate-.patch block-file-posix-Reduce-xfsctl-use.patch block-io-refactor-padding.patch blockjob-update-nodes-head-while-removin.patch block-Make-wait-mark-serialising-request.patch block-nfs-tear-down-aio-before-nfs_close.patch coroutine-Add-qemu_co_mutex_assert_locke.patch curl-Check-completion-in-curl_multi_do.patch curl-Handle-success-in-multi_check_compl.patch curl-Keep-pointer-to-the-CURLState-in-CU.patch curl-Keep-socket-until-the-end-of-curl_s.patch curl-Pass-CURLSocket-to-curl_multi_do.patch curl-Report-only-ready-sockets.patch hw-arm-boot.c-Set-NSACR.-CP11-CP10-for-N.patch hw-core-loader-Fix-possible-crash-in-rom.patch make-release-pull-in-edk2-submodules-so-.patch memory-Provide-an-equality-function-for-.patch mirror-Keep-mirror_top_bs-drained-after-.patch pr-manager-Fix-invalid-g_free-crash-bug.patch qcow2-bitmap-Fix-uint64_t-left-shift-ove.patch qcow2-Fix-corruption-bug-in-qcow2_detect.patch qcow2-Fix-QCOW2_COMPRESSED_SECTOR_MASK.patch qcow2-Fix-the-calculation-of-the-maximum.patch roms-Makefile.edk2-don-t-pull-in-submodu.patch s390-PCI-fix-IOMMU-region-init.patch s390x-tcg-Fix-VERIM-with-32-64-bit-eleme.patch target-alpha-fix-tlb_fill-trap_arg2-valu.patch target-arm-Don-t-abort-on-M-profile-exce.patch target-arm-Free-TCG-temps-in-trans_VMOV_.patch util-iov-introduce-qemu_iovec_init_exten.patch vhost-Fix-memory-region-section-comparis.patch vpc-Return-0-from-vpc_co_create-on-succe.patch Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Fix %arm builds- Fix two issues with qcow2 image processing which could affect disk integrity qcow2-Fix-QCOW2_COMPRESSED_SECTOR_MASK.patch qcow2-bitmap-Fix-uint64_t-left-shift-ove.patch- Work around a host kernel xfs bug which can result in qcow2 image corruption block-io-refactor-padding.patch util-iov-introduce-qemu_iovec_init_exten.patch block-Make-wait-mark-serialising-request.patch block-Add-bdrv_co_get_self_request.patch block-file-posix-Let-post-EOF-fallocate-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Correct package names in _constraints after switch to multibuild.- Address potential corruption when using qcow2 images coroutine-Add-qemu_co_mutex_assert_locke.patch qcow2-Fix-corruption-bug-in-qcow2_detect.patch - Include more tweaks to our packaging workflow scripts - this will continue as we refine the scripts - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- use %gcc_version for cross compilers (boo#1153703)- Add upstream edk2 submodule fix for creating tarball - Switch to upstream patch for avoiding git ref in edk2 makefile - Fix failing block tests which aren't compatible with the configure option --enable-membarrier * Patches dropped: roms-Makefile.edk2-don-t-invoke-git-sinc.patch tests-block-io-test-130-needs-some-delay.patch * Patches added: make-release-pull-in-edk2-submodules-so-.patch roms-Makefile.edk2-don-t-pull-in-submodu.patch tests-Fix-block-tests-to-be-compatible-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Reduce the cross compiler versions we rely on - Fix some qemu-testsuite issues, reducing known error cases test-add-mapping-from-arch-of-i686-to-qe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Since our spec file has bashisms, include the following in the spec file: %define _buildshell /bin/bash- Disable some block tests which randomly fail. This is in context of the build service build of qemu-testsuite tests-Disable-some-block-tests-for-now.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Add some post v4.1.0 upstream stable patches * Patches added: mirror-Keep-mirror_top_bs-drained-after-.patch s390x-tcg-Fix-VERIM-with-32-64-bit-eleme.patch target-alpha-fix-tlb_fill-trap_arg2-valu.patch target-arm-Free-TCG-temps-in-trans_VMOV_.patch target-arm-Don-t-abort-on-M-profile-exce.patch qcow2-Fix-the-calculation-of-the-maximum.patch block-file-posix-Reduce-xfsctl-use.patch pr-manager-Fix-invalid-g_free-crash-bug.patch vpc-Return-0-from-vpc_co_create-on-succe.patch block-nfs-tear-down-aio-before-nfs_close.patch block-create-Do-not-abort-if-a-block-dri.patch curl-Keep-pointer-to-the-CURLState-in-CU.patch curl-Keep-socket-until-the-end-of-curl_s.patch curl-Check-completion-in-curl_multi_do.patch curl-Pass-CURLSocket-to-curl_multi_do.patch curl-Report-only-ready-sockets.patch curl-Handle-success-in-multi_check_compl.patch blockjob-update-nodes-head-while-removin.patch memory-Provide-an-equality-function-for-.patch vhost-Fix-memory-region-section-comparis.patch hw-arm-boot.c-Set-NSACR.-CP11-CP10-for-N.patch s390-PCI-fix-IOMMU-region-init.patch hw-core-loader-Fix-possible-crash-in-rom.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Include more tweaks to our packaging workflow scripts - Produce qemu-linux-user and qemu-testsuite via the build service multibuild capability, instead of duplicating the spec file and using package link in build service * combine qemu-linux-user spec file into main qemu spec file. Since this model uses a single changelog, here are some historicial mentions from the now unused qemu-linux-user.changes (delta from qemu's was quite minimal): - Adjust to a v5.2 linux kernel change regarding SIOCGSTAMP - Fix pwrite64/pread64 to return 0 over -1 for a zero length NULL buffer in qemu (bsc#1121600) * bsc#1112499 * Since qemu-testsuite.spec and qemu-testsuite.changes were just copies of the main qemu version nothing needs to be done there- Build opensbi from source on riscv64- Update to v4.1.0: See http://wiki.qemu.org/ChangeLog/4.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86: CPU models are now versioned * x86: CPU die topology can now be configured * x86: New Hygon Dhyana and Intel Snowridge CPU models * s390: The bios now supports IPL (boot) from ECKD DASD assigned to the guest via vfio-ccw * s390: The bios now tolerates the presence of bootmap signature entries written by zipl * PowerPC: pseries machine now supports KVM acceleration (kernel_irqchip=on) of the XIVE interrupt controller * PowerPC: pseries now supports hot-plug of PCI bridges and hot-plug and unplug of devices under PCI bridges * ARM: QEMU now supports emulating an FPU for Cortex-M CPUs, and the Cortex-M4 and Cortex-M33 now provide the FP * Python 2 support is deprecated * UEFI platform firmware binaries, and matching variable store templates are now installed * Now it's possible to specify memory-less NUMA node when using "-numa node,memdev" options * Possible to trigger self announcement on specific network interfaces * Default memory distribution between NUMA nodes is now deprecated * Fallback to normal RAM allocation if QEMU is not able to allocate from the "-mem-path" provided file/filesystem is now deprecated * virtio-gpu 2d/3d rendering may now be offloaded to an external vhost-user process, such as QEMU vhost-user-gpu * QEMU will automatically try to use the MAP_SYNC mmap flag for memory backends configured with pmem=on,share=on * Additional SeaVGABIOS patches added for vga-ati compatibility - Drop attempt at build compatibility with SLE12 - New sub-packages: qemu-edk2, qemu-vhost-user-gpu - Conditionalize building of qemu-edk2 (and leave unbuilt for now) - Implement new packaging workflow, includes no longer numbering patches, and having the "current git repo" stored with the package in the form of git bundles * Patches dropped (upstream unless otherwise noted): 0027-tests-test-thread-pool-is-racy-add-.patch 0032-tests-Fix-Makefile-handling-of-chec.patch 0034-Revert-target-i386-kvm-add-VMX-migr.patch 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-avoid-string-truncation-.patch 0040-linux-user-elfload-Fix-GCC-9-build-.patch 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch 0043-target-i386-define-md-clear-bit.patch 0045-kbd-state-fix-autorepeat-handling.patch 0046-target-ppc-ensure-we-get-null-termi.patch 0049-qxl-check-release-info-object.patch 0050-qemu-bridge-helper-restrict-interfa.patch 0051-linux-user-fix-to-handle-variably-s.patch ipxe-use-gcc6-for-more-compact-code.patch (no longer needed) (the next three are replaced by the upstream equivalent) ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch ipxe-build-Disable-gcc-address-of-packed-member-warning.patch ipxe-efi-Avoid-string-op-warning-with-cross-gcc-7-compile.patch slirp-fix-heap-overflow-in-ip_reass-on-big-packet-input.patch * Patches renamed: 0001-XXX-dont-dump-core-on-sigabort.patch - > XXX-dont-dump-core-on-sigabort.patch 0002-qemu-binfmt-conf-Modify-default-pat.patch - > qemu-binfmt-conf-Modify-default-path.patch 0003-qemu-cvs-gettimeofday.patch - > qemu-cvs-gettimeofday.patch 0004-qemu-cvs-ioctl_debug.patch - > qemu-cvs-ioctl_debug.patch 0005-qemu-cvs-ioctl_nodirection.patch - > qemu-cvs-ioctl_nodirection.patch 0006-linux-user-add-binfmt-wrapper-for-a.patch - > linux-user-add-binfmt-wrapper-for-argv-0.patch 0007-PPC-KVM-Disable-mmu-notifier-check.patch - > PPC-KVM-Disable-mmu-notifier-check.patch 0008-linux-user-binfmt-support-host-bina.patch - > linux-user-binfmt-support-host-binaries.patch 0009-linux-user-Fake-proc-cpuinfo.patch - > linux-user-Fake-proc-cpuinfo.patch 0010-linux-user-use-target_ulong.patch - > linux-user-use-target_ulong.patch 0011-Make-char-muxer-more-robust-wrt-sma.patch - > Make-char-muxer-more-robust-wrt-small-FI.patch 0012-linux-user-lseek-explicitly-cast-no.patch - > linux-user-lseek-explicitly-cast-non-set.patch 0013-AIO-Reduce-number-of-threads-for-32.patch - > AIO-Reduce-number-of-threads-for-32bit-h.patch 0014-xen_disk-Add-suse-specific-flush-di.patch - > xen_disk-Add-suse-specific-flush-disable.patch 0015-qemu-bridge-helper-reduce-security-.patch - > qemu-bridge-helper-reduce-security-profi.patch 0016-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch 0017-linux-user-properly-test-for-infini.patch - > linux-user-properly-test-for-infinite-ti.patch 0018-roms-Makefile-pass-a-packaging-time.patch - > roms-Makefile-pass-a-packaging-timestamp.patch 0019-Raise-soft-address-space-limit-to-h.patch - > Raise-soft-address-space-limit-to-hard-l.patch 0020-increase-x86_64-physical-bits-to-42.patch - > increase-x86_64-physical-bits-to-42.patch 0021-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > vga-Raise-VRAM-to-16-MiB-for-pc-0.15-and.patch 0022-i8254-Fix-migration-from-SLE11-SP2.patch - > i8254-Fix-migration-from-SLE11-SP2.patch 0023-acpi_piix4-Fix-migration-from-SLE11.patch - > acpi_piix4-Fix-migration-from-SLE11-SP2.patch 0024-Switch-order-of-libraries-for-mpath.patch - > Switch-order-of-libraries-for-mpath-supp.patch 0025-Make-installed-scripts-explicitly-p.patch - > Make-installed-scripts-explicitly-python.patch 0026-hw-smbios-handle-both-file-formats-.patch - > hw-smbios-handle-both-file-formats-regar.patch 0028-xen-add-block-resize-support-for-xe.patch - > xen-add-block-resize-support-for-xen-dis.patch 0029-tests-qemu-iotests-Triple-timeout-o.patch - > tests-qemu-iotests-Triple-timeout-of-i-o.patch 0030-tests-block-io-test-130-needs-some-.patch - > tests-block-io-test-130-needs-some-delay.patch 0031-xen-ignore-live-parameter-from-xen-.patch - > xen-ignore-live-parameter-from-xen-save-.patch 0033-Conditionalize-ui-bitmap-installati.patch - > Conditionalize-ui-bitmap-installation-be.patch 0035-tests-change-error-message-in-test-.patch - > tests-change-error-message-in-test-162.patch 0037-hw-usb-hcd-xhci-Fix-GCC-9-build-war.patch - > hw-usb-hcd-xhci-Fix-GCC-9-build-warning.patch 0038-hw-usb-dev-mtp-Fix-GCC-9-build-warn.patch - > hw-usb-dev-mtp-Fix-GCC-9-build-warning.patch 0044-hw-intc-exynos4210_gic-provide-more.patch - > hw-intc-exynos4210_gic-provide-more-room.patch 0047-configure-only-populate-roms-if-sof.patch - > configure-only-populate-roms-if-softmmu.patch 0048-pc-bios-s390-ccw-net-avoid-warning-.patch - > pc-bios-s390-ccw-net-avoid-warning-about.patch keycodemapdb-make-keycode-gen-output-reproducible.patch - > Make-keycode-gen-output-reproducible-use.patch ipxe-stub-out-the-SAN-req-s-in-int13.patch - > stub-out-the-SAN-req-s-in-int13.patch sgabios-fix-cross-build.patch deleted - > roms-sgabios-Fix-csum8-to-be-built-by-ho.patch sgabios-stable-buildid.patch - > sgabios-Makefile-fix-issues-of-build-rep.patch skiboot-gcc9-compat.patch - > Disable-Waddress-of-packed-member-for-GC.patch ipxe-stable-buildid.patch - > ipxe-Makefile-fix-issues-of-build-reprod.patch seabios-fix_cross_compilation.patch - > enable-cross-compilation-on-ARM.patch * Patches added: roms-change-cross-compiler-naming-to-be-.patch roms-Makefile.edk2-don-t-invoke-git-sinc.patch vga-move-modelist-from-bochsvga.c-to-new.patch vga-make-memcpy_high-public.patch vga-add-atiext-driver.patch vga-add-ati-bios-tables.patch vbe-add-edid-support.patch ati-add-edid-support.patch ati-vga-make-less-verbose.patch ati-vga-fix-ati_read.patch ati-vga-make-i2c-register-and-bits-confi.patch ati-vga-try-vga-ddc-first.patch ati-vga-add-rage128-edid-support.patch Fix-s-directive-argument-is-null-error.patch Workaround-compilation-error-with-gcc-9..patch Do-not-apply-WORKAROUND_CFLAGS-for-host-.patch hdata-vpd-fix-printing-char-0x00.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.1- Since we build seabios, take advantage of ability to add our own identifying version info by changing SEABIOS_EXTRAVERSION from "-prebuilt.qemu.org" to "-rebuilt.suse.com" (or "-rebuilt.opensuse.org for openSUSE releases)- Security fix for heap overflow in ip_reass on big packet input (CVE-2019-14378, bsc#1143794) slirp-fix-heap-overflow-in-ip_reass-on-big-packet-input.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0 * Patches added: 0051-linux-user-fix-to-handle-variably-s.patch- Make keycode-gen output reproducible (use SOURCE_DATE_EPOCH timestamp) keycodemapdb-make-keycode-gen-output-reproducible.patch- Security fix for null pointer dereference while releasing spice resources (CVE-2019-12155, bsc#1135902) 0049-qxl-check-release-info-object.patch - Security fix for qemu-bridge-helper ACL can be bypassed when names are too long (CVE-2019-13164, bsc#1140402) 0050-qemu-bridge-helper-restrict-interfa.patch - Replace patch 0043 with an upstream version 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- fixed regression for ksm.service was (bsc#1112646)- Content of packaged %_docdir/%name/interop/_static/ dir depends on python-Sphinx version, so lets just wildcard specifying those files, rather than trying to manage a specific file list- Last change exposed that we still do rely on python2. Make spec file adjustment- Switch from python-Sphinx to Sphinx from python variant we are building with (new Sphinx is for python3 only)- Fix a number of compatibility issues with the stricter gcc9 checks * Disable warning for taking address of packed structure members 0048-pc-bios-s390-ccw-net-avoid-warning-.patch * Fix case of strncpy where null terminated string not guaranteed 0046-target-ppc-ensure-we-get-null-termi.patch * Disable warning for taking address of packed structure members and fix case of passing null pointer as "%s" format parameter skiboot-gcc9-compat.patch - Fix configure script which caused firmware to be built in linux-user only build. 0047-configure-only-populate-roms-if-sof.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Fix regression in autorepeat key handling 0045-kbd-state-fix-autorepeat-handling.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Fix file list- Yet another gcc9 related code fix (bsc#1121464) 0044-hw-intc-exynos4210_gic-provide-more.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Switch to now upstreamed version of patch and add one more gcc9 related patch * Patches renamed: 0041-qxl-fix-Waddress-of-packed-member.patch - > 0041-qxl-avoid-unaligned-pointer-reads-w.patch 0042-libvhost-user-fix-Waddress-of-packe.patch - Add x86 cpu feature "md-clear" (CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 bsc#1111331) 0043-target-i386-define-md-clear-bit.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Correct logic of which ipxe patches get included based on suse_version. We were wrongly excluding a gcc9 related patch for example- Switch to now upstreamed version of some patches * Patches renamed: 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch - > 0036-sockets-avoid-string-truncation-war.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch - > 0039-linux-user-avoid-string-truncation-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Create /usr/share/qemu/firmware and /etc/qemu/firmware directories in support of the firmware descriptor feature now in use as of libvirt v5.2- Disable LTO as suggested by Martin Liska (boo#1133281) - Remove and obsolete qemu-oss-audio subpackage. OSS audio is very old, and we didn't really even configure the package properly for it for a very long time, so presumably there can't be any users of it as far as qemu is concerned - Avoid warnings which gcc9 complains about 0036-util-qemu-sockets-Fix-GCC-9-build-w.patch 0037-hw-usb-hcd-xhci-Fix-GCC-9-build-war.patch 0038-hw-usb-dev-mtp-Fix-GCC-9-build-warn.patch 0039-linux-user-uname-Fix-GCC-9-build-wa.patch 0040-linux-user-elfload-Fix-GCC-9-build-.patch 0041-qxl-fix-Waddress-of-packed-member.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Update to v4.0.0: See http://wiki.qemu.org/ChangeLog/4.0 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * ARM: ARMv8+ extensions for SB, PredInv, HPD, LOR, FHM, AA32HPD, PAuth, JSConv, CondM, FRINT, and BTI * ARM: new emulation support for "Musca" and "MPS2" development boards * ARM: virt: support for >255GB of RAM and u-boot "noload" image types * ARM: improved emulation of ARM PMU * HPPA: support for TLB protection IDs and TLB trace events * MIPS: support for multi-threaded TCG emulation * MIPS: emulation support for I7200 I6500 CPUs, QMP-base querying of CPU types, and improved support for SAARI and SAAR configuration registers * MIPS: improvements to Interthread Communication Unit, Fulong 2E machine types, and end-user documentation. * PowerPC: pseries/powernv: support for POWER9 large decrementer * PowerPC: pseries: emulation support for XIVE interrupt controller * PowerPC: pseries: support for hotplugging PCI host bridges (PHBs) * PowerPC: pseries: Spectre/Meltdown mitigations enabled by default, additional support for count-cache-flush mitigation * RISC-V: virt: support for PCI and USB * RISC-V: support for TSR, TW, and TVM fields of mstatus, FS field now supports three stats (dirty, clean, and off) * RISC-V: built-in gdbserver supports register lists via XML files * s390: support for z14 GA 2 CPU model, Multiple-epoch and PTFF features now enabled in z14 CPU model by default * s390: vfio-ap: now supports hot plug/unplug, and no longer inhibits memory ballooning * s390: emulation support for floating-point extension facility and vector support instructions * x86: HAX accelerator now supported POSIX hosts other than Darwin, including Linux and NetBSD * x86: Q35: advertised PCIe root port speeds will now optimally default to maximum link speed (16GT/s) and width (x32) provided by PCIe 4.0 for QEMU 4.0+ machine types; older machine types will retain 2.5GT/x1 defaults for compatibility. * x86: Xen PVH images can now be booted with "-kernel" option * Xtensa: xtfpga: improved SMP support for linux (interrupt distributor, IPI, and runstall) and new SMP-capable test_mmuhifi_c3 core configuration * Xtensa: support for Flexible length instructions extension (FLIX) * GUI: new '-display spice-app' to configure/launch a Spice client GUI with a similar UI to QEMU GTK. VNC server now supports access controls via tls-authz/sasl-authz options * QMP: support for "out-of-band" command execution, can be useful for postcopy migration recovery. Additional QMP commands for working with block devices and dirty bitmaps * VFIO: EDID interface for supported mdev (Intel vGPU for kernel 5.0+), allows resolution setting via xres/yres options. * Xen: new 'xen-disk' device which can create a Xen PV disk backend, and performance improvements for Xen PV disk backend. * Network Block Device: improved tracing and error diagnostics, improved client compatibility with buggy NBD server implementations, new - -bitmap, --list, --tls-authz options for qemu-nbd * virtio-blk now supports DISCARD and WRITE_ZEROES * qemu-test-suite output is now in TAP format * Sphinx now used for part of qemu documentation * A few more configure features are enabled: iconv, lzfse (for openSUSE) * Provide better logo icons - Made these package building changes: * Removed this token from spec file: #!BuildIgnore: gcc-PIE * Created ability to build qemu source out-of-tree * Added BSD-2-Clause license clause due to EDK II code inclusion * Patches dropped (upstream unless otherwise noted): 0010-Remove-problematic-evdev-86-key-fro.patch 0025-Fix-tigervnc-long-press-issue.patch 0026-string-input-visitor-Fix-uint64-par.patch 0027-test-string-input-visitor-Add-int-t.patch 0028-test-string-input-visitor-Add-uint6.patch 0029-tests-Add-QOM-property-unit-tests.patch 0030-tests-Add-scsi-disk-test.patch 0033-smbios-Add-1-terminator-if-any-stri.patch (different approach used) 0034-qemu-io-tests-comment-out-problemat.patch (not as needed) 0039-xen_disk-Avoid-repeated-memory-allo.patch 0041-vfio-ap-flag-as-compatible-with-bal.patch 0042-hw-s390x-Fix-bad-mask-in-time2tod.patch 0043-pcie-set-link-state-inactive-active.patch 0044-pc-piix4-Update-smbus-I-O-space-aft.patch 0045-hw-usb-fix-mistaken-de-initializati.patch 0046-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch 0047-pvrdma-release-device-resources-in-.patch 0048-rdma-check-num_sge-does-not-exceed-.patch 0049-pvrdma-add-uar_read-routine.patch 0050-pvrdma-check-number-of-pages-when-c.patch 0051-pvrdma-check-return-value-from-pvrd.patch 0052-pvrdma-release-ring-object-in-case-.patch 0053-block-Fix-hangs-in-synchronous-APIs.patch 0054-linux-user-make-pwrite64-pread64-fd.patch 0055-xen-Add-xen-v4.12-based-xc_domain_c.patch 0056-slirp-check-data-length-while-emula.patch 0057-s390x-Return-specification-exceptio.patch 0059-memory-Fix-the-memory-region-type-a.patch 0060-target-i386-sev-Do-not-pin-the-ram-.patch 0061-slirp-check-sscanf-result-when-emul.patch 0062-ppc-add-host-serial-and-host-model-.patch 0063-i2c-ddc-fix-oob-read.patch 0064-device_tree.c-Don-t-use-load_image.patch 0065-spapr-Simplify-handling-of-host-ser.patch ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch ipxe-fix-build.patch skiboot-hdata-i2c.c-fix-building-with-gcc8.patch * Patches renamed: 0011-linux-user-use-target_ulong.patch - > 0010-linux-user-use-target_ulong.patch 0012-Make-char-muxer-more-robust-wrt-sma.patch - > 0011-Make-char-muxer-more-robust-wrt-sma.patch 0013-linux-user-lseek-explicitly-cast-no.patch - > 0012-linux-user-lseek-explicitly-cast-no.patch 0014-AIO-Reduce-number-of-threads-for-32.patch - > 0013-AIO-Reduce-number-of-threads-for-32.patch 0015-xen_disk-Add-suse-specific-flush-di.patch - > 0014-xen_disk-Add-suse-specific-flush-di.patch 0016-qemu-bridge-helper-reduce-security-.patch - > 0015-qemu-bridge-helper-reduce-security-.patch 0017-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0016-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0018-linux-user-properly-test-for-infini.patch - > 0017-linux-user-properly-test-for-infini.patch 0019-roms-Makefile-pass-a-packaging-time.patch - > 0018-roms-Makefile-pass-a-packaging-time.patch 0020-Raise-soft-address-space-limit-to-h.patch - > 0019-Raise-soft-address-space-limit-to-h.patch 0021-increase-x86_64-physical-bits-to-42.patch - > 0020-increase-x86_64-physical-bits-to-42.patch 0022-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0021-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0023-i8254-Fix-migration-from-SLE11-SP2.patch - > 0022-i8254-Fix-migration-from-SLE11-SP2.patch 0024-acpi_piix4-Fix-migration-from-SLE11.patch - > 0023-acpi_piix4-Fix-migration-from-SLE11.patch 0031-Switch-order-of-libraries-for-mpath.patch - > 0024-Switch-order-of-libraries-for-mpath.patch 0032-Make-installed-scripts-explicitly-p.patch - > 0025-Make-installed-scripts-explicitly-p.patch 0035-tests-test-thread-pool-is-racy-add-.patch - > 0027-tests-test-thread-pool-is-racy-add-.patch 0036-xen-add-block-resize-support-for-xe.patch - > 0028-xen-add-block-resize-support-for-xe.patch 0037-tests-qemu-iotests-Triple-timeout-o.patch - > 0029-tests-qemu-iotests-Triple-timeout-o.patch 0038-tests-block-io-test-130-needs-some-.patch - > 0030-tests-block-io-test-130-needs-some-.patch 0040-xen-ignore-live-parameter-from-xen-.patch - > 0031-xen-ignore-live-parameter-from-xen-.patch 0058-Revert-target-i386-kvm-add-VMX-migr.patch - > 0034-Revert-target-i386-kvm-add-VMX-migr.patch * Patches added: 0026-hw-smbios-handle-both-file-formats-.patch 0032-tests-Fix-Makefile-handling-of-chec.patch 0033-Conditionalize-ui-bitmap-installati.patch 0035-tests-change-error-message-in-test-.patch ipxe-efi-Avoid-string-op-warning-with-cross-gcc-7-compile.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-4.0- Adjust fix for CVE-2019-8934 (bsc#1126455) to match the latest upstream adjustments for the same. Basically now the security fix is to provide a dummy host-model and host-serial value, which overrides getting that value from the host 0065-spapr-Simplify-handling-of-host-ser.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Tweak last spec file change to guard new Requires with conditional - Fix DOS possibility in device tree processing (CVE-2018-20815 bsc#1130675) 0064-device_tree.c-Don-t-use-load_image.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Remove an unneeded BuildRequires which impacts bsc#1119414 fix Also add a corresponding Recommends for qemu-tools as part of this packaging adjustment (bsc#1130484) - Fix information leak in slirp (CVE-2019-9824 bsc#1129622) 0061-slirp-check-sscanf-result-when-emul.patch - Add method to specify whether or not to expose certain ppc64 host information, which can be considered a security issue (CVE-2019-8934 bsc#1126455) 0062-ppc-add-host-serial-and-host-model-.patch - Fix OOB memory access and information leak in virtual monitor interface (CVE-2019-03812 bsc#1125721) 0063-i2c-ddc-fix-oob-read.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Again address ipxe GCC 9 incompatibilities. Previously included patch to disable unneeded warning got muffed somehow (bsc#1121464)- Package and cross-build rom files for aarch64 from SLE15/Leap15.0 to fix boo#1125964 - Add patch to fix seabios cross-compilation: * seabios-fix_cross_compilation.patch - Add patch to fix sgabios cross-compilation: * sgabios-fix-cross-build.patch- Fix _constraints to include all architectures for disk size (fix aarch64)- Revert upstream patch which declares x86 vmx feature a migration blocker. Given the proliferation of using vm's with host features passed through and the general knowledge that nested virtualization has many usage caveats, but still gets put in use in restricted scenarios, this patch did more harm than good, I feel. So despite this relaxation, please consider yourself warned that nested virtualization is not yet a supportable feature. (bsc#1121604) 0058-Revert-target-i386-kvm-add-VMX-migr.patch - Fix SEV VM device assignment (bsc#1123205) 0059-memory-Fix-the-memory-region-type-a.patch 0060-target-i386-sev-Do-not-pin-the-ram-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Remove 71-sev.rules, which modifies the default permissions of /dev/sev by adding the kvm group as reader/writer. Upstream decided to take a different approach for libvirt to manage SEV due to security concerns which I agree overrides the convenience of providing /dev/sev access to all the kvm group (bsc#1124842 bsc#1102604)- Increase memory needed to build qemu-testsuite for ppc* arch's in _constraints file- Return specification exception for unimplemented diag 308 subcodes rather than a hardware error (bsc#1123179) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0057-s390x-Return-specification-exceptio.patch- Fix OOB issue in slirp (CVE-2019-6778 bsc#1123156) 0056-slirp-check-data-length-while-emula.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 - Fix ipxe GCC 9 incompatibilities (bsc#1121464) ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch ipxe-build-Disable-gcc-address-of-packed-member-warning.patch- Tweak Xen interface to be compatible with upcoming v4.12 Xen 0055-xen-Add-xen-v4.12-based-xc_domain_c.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0054-linux-user-make-pwrite64-pread64-fd.patch (bsc#1121600)- Clarify that move to include v3.1.0 in qemu package corresponds with fate#327089, which of course builds on v3.0.0 mentioned previously, and that among other patches which this change obsoletes (because functionality is included in base version) I will mention one pointed out by reviewers: 0094-s390x-cpumodels-add-z14-Model-ZR1.patch- include post v3.1.0 patches marked for next stable release: 0041-vfio-ap-flag-as-compatible-with-bal.patch 0042-hw-s390x-Fix-bad-mask-in-time2tod.patch 0043-pcie-set-link-state-inactive-active.patch 0044-pc-piix4-Update-smbus-I-O-space-aft.patch 0045-hw-usb-fix-mistaken-de-initializati.patch - Address various security/stability issues * Fix host access vulnerability in usb-mtp infrastructure (CVE-2018-16872 bsc#1119493) 0046-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch * Fix DoS in pvrdma interface (CVE-2018-20123 bsc#1119437) 0047-pvrdma-release-device-resources-in-.patch * Fix OOB access issue in rdma backend (CVE-2018-20124 bsc#1119840) 0048-rdma-check-num_sge-does-not-exceed-.patch * Fix NULL pointer reference in pvrdma emulation (CVE-2018-20191 bsc#1119979) 0049-pvrdma-add-uar_read-routine.patch * Fix DoS in pvrdma interface (CVE-2018-20125 bsc#1119989) 0050-pvrdma-check-number-of-pages-when-c.patch * Fix DoS in pvrdma interface (CVE-2018-20216 bsc#1119984) 0051-pvrdma-check-return-value-from-pvrd.patch * Fix DoS in pvrdma interface (CVE-2018-20126 bsc#1119991) 0052-pvrdma-release-ring-object-in-case-.patch - one more post v3.1.0 patches marked for next stable release: 0053-block-Fix-hangs-in-synchronous-APIs.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 * Patches added: 0040-xen-ignore-live-parameter-from-xen-.patch (bsc#1079730, bsc#1101982, bsc#1063993)- Follow up on ideas prompted by last change: clean up the patches generated by git workflow. There is no value to the first line (mbox From line), or [PATCH] on subject line. Get rid of those - Other minor fixes and improvements to update_git.sh- Modify update_git.sh script: pass --zero-commit to format-patch This removes needless noise in the buildservice when the same set of patches is imported/exported at different times by different users. pass --no-signature to format-patch Remove sed call which used to remove the signature, use mv instead- Use /bin/bash to echo value into sys fs for ksm control (bsc#1112646)- fix memory leak in xen_disk (bsc#1100408) 0039-xen_disk-Avoid-repeated-memory-allo.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1- building against xen-devel requires the XC_* compat macros to be set because this version of QEMU will be built against many versions of Xen. configure will decide on the appropriate function names it knows about today. To actually call these functions, future versions of Xen may require XC_* to be set. Furthermore, fix a bug in QEMU: xen_common.h undefines the XC_* macros unconditionally.- Update to v3.1.0: See http://wiki.qemu.org/ChangeLog/3.1 Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package Some noteworthy changes: * x86 IceLake-Server and IceLake-Client cpu models added * Document recommendations for choosing cpu modesl for x86 guests * Support for Hyper-V enlightened VMCS * stdvga and bochs-display devices can expose EDID information to the guest. stdvga xres and yres properties are exposed in the EDID information * s390 improvements: vfio-ap crypto device support, max-cpu model added, etoken support, huge page backing support * ARM: ARMv6M architecture and Cortex-M0 cpu host support added, Cortex-A72 cpu model added, GICv2 virtualization extensions, emulation of AArch32 virtualization, Scalable Vector Extension implemented * Support for AMD IOMMU interrupt remapping and guest virtual APIC mode * Multithreaded TCG on x86 is considered supportable * Add a patch to triple timeout of block io tests, since the obs environment is fickle * x86 save/restore and live migration is prohibited if Intel KVM nested virtualization is enabled * Patches dropped (upstream unless otherwise noted): 0033-migration-warn-about-inconsistent-s.patch (shouldn't be needed anymore) 0035-configure-Modify-python-used-for-io.patch (upstream now python3 friendly) 0039-tests-boot-serial-test-Bump-timeout.patch 0040-linux-headers-update.patch 0041-s390x-kvm-add-etoken-facility.patch 0042-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch 0043-configure-require-libseccomp-2.2.0.patch 0044-seccomp-set-the-seccomp-filter-to-a.patch 0045-sandbox-disable-sandbox-if-CONFIG_S.patch 0046-seccomp-check-TSYNC-host-capability.patch 0047-linux-user-init_guest_space-Try-to-.patch 0048-ne2000-fix-possible-out-of-bound-ac.patch 0049-rtl8139-fix-possible-out-of-bound-a.patch 0050-pcnet-fix-possible-buffer-overflow.patch 0051-net-ignore-packet-size-greater-than.patch 0052-lsi53c895a-check-message-length-val.patch 0053-nvme-fix-oob-access-issue-CVE-2018-.patch (fixed differently upstream) * Patches renamed: 0034-smbios-Add-1-terminator-if-any-stri.patch - > 0033-smbios-Add-1-terminator-if-any-stri.patch 0036-qemu-io-tests-comment-out-problemat.patch - > 0034-qemu-io-tests-comment-out-problemat.patch 0037-tests-test-thread-pool-is-racy-add-.patch - > 0035-tests-test-thread-pool-is-racy-add-.patch 0038-xen-add-block-resize-support-for-xe.patch - > 0036-xen-add-block-resize-support-for-xe.patch * Patches added: 0037-tests-qemu-iotests-Triple-timeout-o.patch 0038-tests-block-io-test-130-needs-some-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.1 - Update includes the following bug fixes: bsc#1108474, bsc#1117615 - Update includes the following SLE requested functionality: FATE#324810, FATE#325875, FATE#326369, FATE#326378, FATE#326379, FATE#326401, FATE#326672, FATE#326829 - Make the following packaging changes related to the new release * Enable libpmem, pvrdma, vhost-crypto features and qemu-block-nfs subpackage * New roms available: vgabios-bochs-display.bin, vgabios-ramfb.bin * New binary tool included (qemu-edid) for testing the new qemu edid generator - Tweaked patches we carry to pass qemu's checkpatch checker - Modify update_git.sh script to enable packaging qemu from development time sources, not just at release time - Removed erroneous (and now useless) tests for tar and gzip formats - Don't exclude s390x anymore from building the qemu-testsuite - Based on current OBS building observations make changes to storage and memory requires specified in the _constraints file- Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, FATE, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2018-10839 CVE-2018-16847 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 CVE-2018-18849 * bsc#1110910 bsc#1111006 bsc#1111010 bsc#1111013 bsc#1114422 bsc#1114529 * Patches added: 0047-linux-user-init_guest_space-Try-to-.patch 0048-ne2000-fix-possible-out-of-bound-ac.patch 0049-rtl8139-fix-possible-out-of-bound-a.patch 0050-pcnet-fix-possible-buffer-overflow.patch 0051-net-ignore-packet-size-greater-than.patch 0052-lsi53c895a-check-message-length-val.patch 0053-nvme-fix-oob-access-issue-CVE-2018-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0* Adding changes to mitigate seccomp vulnerability (CVE-2018-15746 bsc#1106222) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0 * Patches added: 0042-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch 0043-configure-require-libseccomp-2.2.0.patch 0044-seccomp-set-the-seccomp-filter-to-a.patch 0045-sandbox-disable-sandbox-if-CONFIG_S.patch 0046-seccomp-check-TSYNC-host-capability.patch- Do more misc spec file fixes: * Be explicit in spec file about Version used for all subpackages (again, to avoid subpackage ordering issues). Default Release tag is also brought in by obs format_spec_file service * Delete binary blob s390-netboot.img, which we rebuild * Don't provide separate Url for qemu-kvm package - the main qemu website provides easily findable link for kvm specifics * Associate petalogix-ml605.dtb with qemu-extra instead of qemu-ppc * More entry sorting- Correct some versioning as follows: * Accurately reflect the qemu-ipxe package version value by adding "+" at the end * Don't overwrite seabios .version file, since now (for quite some time actually) upstream tarball creation creates this file and the value we are writing to it is actually wrong - Make spec file improvements, including the following: * Add qemu.keyring to enable package source verification * Create srcname macro to identify source file name separately from package name * Create alternate to %version to avoid subpackage ordering causing inadvertantly wrong %version value at point of use * Sort some entries * Be more consistent with macro syntax usage * Minor file tweaks as done by osc format_spec_file service- Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, FATE, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2018-11806 CVE-2018-12617 CVE-2018-7550 CVE-2018-15746 * fate#325467 * bsc#1091695 bsc#1094725 bsc#1094913 bsc#1096223 bsc#1098735 bsc#1103628 bsc#1105279 bsc#1106222 bsc#1106222 bsc#1107489 * Patches added: * only enable glusterfs for openSUSE 0040-linux-headers-update.patch 0041-s390x-kvm-add-etoken-facility.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Increase timeout for boot-serial-test, since we've hit the timeout for armv7l arch in qemu-testsuite. 0039-tests-boot-serial-test-Bump-timeout.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Drop legacy kvm_stat script and man page. We'll rely on the kvm_stat package only going forward kvm_stat kvm_stat.1.gz - Update SLE support documentation to match v3.0.0 release- Update to v3.0.0: See http://wiki.qemu.org/ChangeLog/3.0 Don't read anything into the major version number update. It's been decided to increase the major version number each year. Take note that ongoing feature deprecation is tracked at both http://wiki.qemu-project.org/Features/LegacyRemoval and in Appendix B of the qemu-doc.* files installed with the qemu package. Some noteworthy changes: * Support for additional x86/AMD mitigations against Speculative Store Bypass (Spectre Variant 4, CVE-2018-3639) * Improved support for nested KVM guests running on Hyper-V * Block device support for active disk-mirroring, which avoids convergence issues which may arise when doing passive/background mirroring of busy devices * Improved support for AHCI emulation, SCSI emulation, and persistent reservations / cluster management * OpenGL ES support for SDL front-end, additional framebuffer device options for early boot display without using legacy VGA emulation * Live migration support for TPM TIS devices, capping bandwidth usage during post-copy migration, and recovering from a failed post-copy migration * Improved latency when using user-mode networking / SLIRP * ARM: support for SMMUv3 IOMMU when using 'virt' machine type * ARM: v8M extensions for VLLDM and VLSTM floating-point instructions, and improved support for AArch64 v8.2 FP16 extensions * ARM: support for Scalable Vector Extensions in linux-user mode * Microblaze: support for 64-bit address sizes and translation bug fixes * PowerPC: PMU support for mac99 machine type and improvements for Uninorth PCI host bridge emulation for Mac machine types * PowerPC: preliminary support for emulating POWER9 hash MMU mode when using powernv machine type * RISC-V: improvement for privileged ISA emulation * s390: support for z14 ZR1 CPU model * s390: bpb/ppa15 Spectre mitigations enabled by default for z196 and later CPU models * s390: support for configuring consoles via -serial options * Patches dropped (upstream unless otherwise noted): 0008-linux-user-fix-segfault-deadlock.patch (no longer needed) 0039-blockjob-Fix-assertion-in-block_job.patch 0041-seccomp-allow-sched_setscheduler-wi.patch Make-installed-scripts-explicitly-python3.patch (we now make python3 explicit in other patch) * Patches renamed: 0009-linux-user-binfmt-support-host-bina.patch - > 0008-linux-user-binfmt-support-host-bina.patch 0010-linux-user-Fake-proc-cpuinfo.patch - > 0009-linux-user-Fake-proc-cpuinfo.patch 0011-Remove-problematic-evdev-86-key-fro.patch - > 0010-Remove-problematic-evdev-86-key-fro.patch 0012-linux-user-use-target_ulong.patch - > 0011-linux-user-use-target_ulong.patch 0013-Make-char-muxer-more-robust-wrt-sma.patch - > 0012-Make-char-muxer-more-robust-wrt-sma.patch 0014-linux-user-lseek-explicitly-cast-no.patch - > 0013-linux-user-lseek-explicitly-cast-no.patch 0015-AIO-Reduce-number-of-threads-for-32.patch - > 0014-AIO-Reduce-number-of-threads-for-32.patch 0016-xen_disk-Add-suse-specific-flush-di.patch - > 0015-xen_disk-Add-suse-specific-flush-di.patch 0017-qemu-bridge-helper-reduce-security-.patch - > 0016-qemu-bridge-helper-reduce-security-.patch 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0017-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0019-linux-user-properly-test-for-infini.patch - > 0018-linux-user-properly-test-for-infini.patch 0020-roms-Makefile-pass-a-packaging-time.patch - > 0019-roms-Makefile-pass-a-packaging-time.patch 0021-Raise-soft-address-space-limit-to-h.patch - > 0020-Raise-soft-address-space-limit-to-h.patch 0022-increase-x86_64-physical-bits-to-42.patch - > 0021-increase-x86_64-physical-bits-to-42.patch 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0022-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0024-i8254-Fix-migration-from-SLE11-SP2.patch - > 0023-i8254-Fix-migration-from-SLE11-SP2.patch 0025-acpi_piix4-Fix-migration-from-SLE11.patch - > 0024-acpi_piix4-Fix-migration-from-SLE11.patch 0026-Fix-tigervnc-long-press-issue.patch - > 0025-Fix-tigervnc-long-press-issue.patch 0027-string-input-visitor-Fix-uint64-par.patch - > 0026-string-input-visitor-Fix-uint64-par.patch 0028-test-string-input-visitor-Add-int-t.patch - > 0027-test-string-input-visitor-Add-int-t.patch 0029-test-string-input-visitor-Add-uint6.patch - > 0028-test-string-input-visitor-Add-uint6.patch 0030-tests-Add-QOM-property-unit-tests.patch - > 0029-tests-Add-QOM-property-unit-tests.patch 0031-tests-Add-scsi-disk-test.patch - > 0030-tests-Add-scsi-disk-test.patch 0032-Switch-order-of-libraries-for-mpath.patch - > 0031-Switch-order-of-libraries-for-mpath.patch 0033-Make-installed-scripts-explicitly-p.patch - > 0032-Make-installed-scripts-explicitly-p.patch (python2->python3) 0034-migration-warn-about-inconsistent-s.patch - > 0033-migration-warn-about-inconsistent-s.patch 0035-smbios-Add-1-terminator-if-any-stri.patch - > 0034-smbios-Add-1-terminator-if-any-stri.patch 0036-configure-Modify-python-used-for-io.patch - > 0035-configure-Modify-python-used-for-io.patch 0037-qemu-io-tests-comment-out-problemat.patch - > 0036-qemu-io-tests-comment-out-problemat.patch 0038-tests-test-thread-pool-is-racy-add-.patch - > 0037-tests-test-thread-pool-is-racy-add-.patch 0040-xen-add-block-resize-support-for-xe.patch - > 0038-xen-add-block-resize-support-for-xe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-3.0- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604). 71-sev.rules- Update to v2.12.1, a stable, (mostly) bug-fix-only release * This update contains new mitigation functionality for CVE-2018-3639 (Speculative Store Bypass) in x86. There are also bug fixes for migration, Intel IOMMU emulation, block layer/image handling, ARM emulation, and various other areas. (Note that a number of 2.12.1 patches were already included by us previously) (CVE-2018-3639 bsc#1092885) * Patches dropped (subsumed by stable update): 0039-device_tree-Increase-FDT_MAX_SIZE-t.patch 0040-vnc-fix-use-after-free.patch 0041-ccid-Fix-dwProtocols-advertisement-.patch 0042-tcg-arm-Fix-memory-barrier-encoding.patch 0043-s390-ccw-force-diag-308-subcode-to-.patch 0044-nbd-client-fix-nbd_negotiate_simple.patch 0045-migration-block-dirty-bitmap-fix-me.patch 0046-nbd-client-Fix-error-messages-durin.patch 0047-nbd-client-Relax-handling-of-large-.patch 0048-qxl-fix-local-renderer-crash.patch 0049-tcg-Limit-the-number-of-ops-in-a-TB.patch 0050-target-arm-Clear-SVE-high-bits-for-.patch 0051-cpus-tcg-fix-never-exiting-loop-on-.patch 0052-s390x-css-disabled-subchannels-cann.patch 0053-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0054-virtio-ccw-common-reset-handler.patch 0055-s390x-ccw-make-sure-all-ccw-devices.patch 0056-blockjob-expose-error-string-via-qu.patch 0058-qemu-io-Use-purely-string-blockdev-.patch 0059-qemu-img-Use-only-string-options-in.patch 0060-nfs-Remove-processed-options-from-Q.patch 0061-i386-define-the-ssbd-CPUID-feature-.patch 0062-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0063-i386-define-the-AMD-virt-ssbd-CPUID.patch 0064-ahci-fix-PxCI-register-race.patch 0065-ccid-card-passthru-fix-regression-i.patch * Patches renamed: 0057-blockjob-Fix-assertion-in-block_job.patch - > 0039-blockjob-Fix-assertion-in-block_job.patch 0066-xen-add-block-resize-support-for-xe.patch - > 0040-xen-add-block-resize-support-for-xe.patch 0067-seccomp-allow-sched_setscheduler-wi.patch - > 0041-seccomp-allow-sched_setscheduler-wi.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fixing seccomp resourcecontrol defunct issue (bsc#1102627) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12 * Patches added: 0067-seccomp-allow-sched_setscheduler-wi.patch- Add ipxe-fix-build.patch to not error out with binutils >= 2.31 .- Remove linux-user patch which is no longer needed (bsc#1098056) * Patches dropped: 0011-linux-user-XXX-disable-fiemap.patch * Patches renamed: 0036-Remove-problematic-evdev-86-key-fro.patch - > 0011-Remove-problematic-evdev-86-key-fro.patch 0037-configure-Modify-python-used-for-io.patch - > 0036-configure-Modify-python-used-for-io.patch 0038-qemu-io-tests-comment-out-problemat.patch - > 0037-qemu-io-tests-comment-out-problemat.patch 0039-tests-test-thread-pool-is-racy-add-.patch - > 0038-tests-test-thread-pool-is-racy-add-.patch 0040-device_tree-Increase-FDT_MAX_SIZE-t.patch - > 0039-device_tree-Increase-FDT_MAX_SIZE-t.patch 0041-vnc-fix-use-after-free.patch - > 0040-vnc-fix-use-after-free.patch 0042-ccid-Fix-dwProtocols-advertisement-.patch - > 0041-ccid-Fix-dwProtocols-advertisement-.patch 0043-tcg-arm-Fix-memory-barrier-encoding.patch - > 0042-tcg-arm-Fix-memory-barrier-encoding.patch 0044-s390-ccw-force-diag-308-subcode-to-.patch - > 0043-s390-ccw-force-diag-308-subcode-to-.patch 0045-nbd-client-fix-nbd_negotiate_simple.patch - > 0044-nbd-client-fix-nbd_negotiate_simple.patch 0046-migration-block-dirty-bitmap-fix-me.patch - > 0045-migration-block-dirty-bitmap-fix-me.patch 0047-nbd-client-Fix-error-messages-durin.patch - > 0046-nbd-client-Fix-error-messages-durin.patch 0048-nbd-client-Relax-handling-of-large-.patch - > 0047-nbd-client-Relax-handling-of-large-.patch 0049-qxl-fix-local-renderer-crash.patch - > 0048-qxl-fix-local-renderer-crash.patch 0050-tcg-Limit-the-number-of-ops-in-a-TB.patch - > 0049-tcg-Limit-the-number-of-ops-in-a-TB.patch 0051-target-arm-Clear-SVE-high-bits-for-.patch - > 0050-target-arm-Clear-SVE-high-bits-for-.patch 0052-cpus-tcg-fix-never-exiting-loop-on-.patch - > 0051-cpus-tcg-fix-never-exiting-loop-on-.patch 0053-s390x-css-disabled-subchannels-cann.patch - > 0052-s390x-css-disabled-subchannels-cann.patch 0054-pc-bios-s390-ccw-struct-tpi_info-mu.patch - > 0053-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0055-virtio-ccw-common-reset-handler.patch - > 0054-virtio-ccw-common-reset-handler.patch 0056-s390x-ccw-make-sure-all-ccw-devices.patch - > 0055-s390x-ccw-make-sure-all-ccw-devices.patch 0057-blockjob-expose-error-string-via-qu.patch - > 0056-blockjob-expose-error-string-via-qu.patch 0058-blockjob-Fix-assertion-in-block_job.patch - > 0057-blockjob-Fix-assertion-in-block_job.patch 0059-qemu-io-Use-purely-string-blockdev-.patch - > 0058-qemu-io-Use-purely-string-blockdev-.patch 0060-qemu-img-Use-only-string-options-in.patch - > 0059-qemu-img-Use-only-string-options-in.patch 0061-nfs-Remove-processed-options-from-Q.patch - > 0060-nfs-Remove-processed-options-from-Q.patch 0062-i386-define-the-ssbd-CPUID-feature-.patch - > 0061-i386-define-the-ssbd-CPUID-feature-.patch 0063-i386-Define-the-Virt-SSBD-MSR-and-h.patch - > 0062-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0064-i386-define-the-AMD-virt-ssbd-CPUID.patch - > 0063-i386-define-the-AMD-virt-ssbd-CPUID.patch 0065-ahci-fix-PxCI-register-race.patch - > 0064-ahci-fix-PxCI-register-race.patch 0066-ccid-card-passthru-fix-regression-i.patch - > 0065-ccid-card-passthru-fix-regression-i.patch 0067-xen-add-block-resize-support-for-xe.patch - > 0066-xen-add-block-resize-support-for-xe.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix build failure of skiboot with gcc8 compiler skiboot-hdata-i2c.c-fix-building-with-gcc8.patch- Tweak build service constraints information to avoid failures- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12 * Patches added: 0067-xen-add-block-resize-support-for-xe.patch- Tweak patch file generation to be more git version agnostic. Also change update_git.sh to not reformat spec file by default.- Looks like the right fix for the AHCI issue has been identified upstream. Turns out to also affect Linux guests as well. (bsc#1094406) * Patches dropped: 0065-Revert-replay-don-t-process-async-e.patch 0066-Revert-replay-avoid-recursive-call-.patch 0067-Revert-replay-check-return-values-o.patch 0068-Revert-replay-push-replay_mutex_loc.patch * Patches added: 0065-ahci-fix-PxCI-register-race.patch - Fix a regresssion introduced in v2.12.0 for ccid-card-passthrough (bsc#1095419) 0066-ccid-card-passthru-fix-regression-i.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix qemu-guest-agent service issue (bsc#1094898)- Spectre v4 vulnerability mitigation support for KVM guests. High level description of vulnerability: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. This change permits the new x86 cpu feature flag named "ssbd" to be presented to the guest, given that the host has this feature, and KVM exposes it to the guest as well. For this feature to be enabled, via adding it to the qemu commandline (eg: -cpu ,+spec-ctrl,+ssbd), so the guest OS can take advantage of the feature, spec-ctrl and ssbd support is also required in the host. Another new x86 cpu feature flag named "virt-ssbd" is also added to handle this vulnerability for AMD processors. (CVE-2018-3639 bsc#1092885) 0062-i386-define-the-ssbd-CPUID-feature-.patch 0063-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0064-i386-define-the-AMD-virt-ssbd-CPUID.patch - Replay code introduced an issue for AHCI emulation, where on Windows 10 I/O would stop randomly, and Windows would then reset the AHCI device. The issue is not yet fully identified, but reverting some of those changes is at least for now a workaround. (bsc#1094406) 0065-Revert-replay-don-t-process-async-e.patch 0066-Revert-replay-avoid-recursive-call-.patch 0067-Revert-replay-check-return-values-o.patch 0068-Revert-replay-push-replay_mutex_loc.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Add some upstream fixes targeted for the next stable release 0040-device_tree-Increase-FDT_MAX_SIZE-t.patch 0041-vnc-fix-use-after-free.patch 0042-ccid-Fix-dwProtocols-advertisement-.patch 0043-tcg-arm-Fix-memory-barrier-encoding.patch 0044-s390-ccw-force-diag-308-subcode-to-.patch 0045-nbd-client-fix-nbd_negotiate_simple.patch 0046-migration-block-dirty-bitmap-fix-me.patch 0047-nbd-client-Fix-error-messages-durin.patch 0048-nbd-client-Relax-handling-of-large-.patch 0049-qxl-fix-local-renderer-crash.patch 0050-tcg-Limit-the-number-of-ops-in-a-TB.patch 0051-target-arm-Clear-SVE-high-bits-for-.patch 0052-cpus-tcg-fix-never-exiting-loop-on-.patch 0053-s390x-css-disabled-subchannels-cann.patch 0054-pc-bios-s390-ccw-struct-tpi_info-mu.patch 0055-virtio-ccw-common-reset-handler.patch 0056-s390x-ccw-make-sure-all-ccw-devices.patch 0057-blockjob-expose-error-string-via-qu.patch 0058-blockjob-Fix-assertion-in-block_job.patch 0059-qemu-io-Use-purely-string-blockdev-.patch 0060-qemu-img-Use-only-string-options-in.patch 0061-nfs-Remove-processed-options-from-Q.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix qemu-guest-agent uninstall (bsc#1093169) - Minor tweak to qemu spec file- Update to v2.12.0: See http://wiki.qemu.org/ChangeLog/2.12 Some noteworthy changes: CLI options removed: -tdf, -no-kvm-pit, -drive boot, -net channel, - net dump, -hdachs, -drive,if=scsi HMP commands removed: usb_add, usb_del, host_net_add, host_net_remove Q35 default nic now e1000e AMD SEV support - smbios supports setting data for type 11 tables audio and display support split out as modules - nic for simple creation of guest NIC and host back-end QMP monitor "out-of-band" capability lots of ARM and s390 improvements - Include more of upstream's in-tree tests in the qemu-testsuite package * Patches dropped: 0033-memfd-fix-configure-test.patch 0034-qapi-use-items-values-intead-of-ite.patch 0035-qapi-Use-OrderedDict-from-standard-.patch 0036-qapi-adapt-to-moved-location-of-Str.patch 0037-qapi-Adapt-to-moved-location-of-mak.patch 0038-qapi-remove-q-arg-to-diff-when-comp.patch 0039-qapi-ensure-stable-sort-ordering-wh.patch 0040-qapi-force-a-UTF-8-locale-for-runni.patch 0041-scripts-ensure-signrom-treats-data-.patch 0042-configure-allow-use-of-python-3.patch 0043-input-add-missing-JIS-keys-to-virti.patch 0045-pc-fail-memory-hot-plug-unplug-with.patch 0046-memattrs-add-debug-attribute.patch 0047-exec-add-ram_debug_ops-support.patch 0048-exec-add-debug-version-of-physical-.patch 0049-monitor-i386-use-debug-APIs-when-ac.patch 0050-machine-add-memory-encryption-prope.patch 0051-kvm-update-kvm.h-to-include-memory-.patch 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch 0053-target-i386-add-Secure-Encrypted-Vi.patch 0054-qmp-add-query-sev-command.patch 0055-sev-i386-add-command-to-initialize-.patch 0056-qmp-populate-SevInfo-fields-with-SE.patch 0057-sev-i386-register-the-guest-memory-.patch 0058-kvm-introduce-memory-encryption-API.patch 0059-hmp-add-info-sev-command.patch 0060-sev-i386-add-command-to-create-laun.patch 0061-sev-i386-add-command-to-encrypt-gue.patch 0062-target-i386-encrypt-bios-rom.patch 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch 0064-sev-i386-finalize-the-SEV-guest-lau.patch 0065-hw-i386-set-ram_debug_ops-when-memo.patch 0066-sev-i386-add-debug-encrypt-and-decr.patch 0067-target-i386-clear-C-bit-when-walkin.patch 0068-include-add-psp-sev.h-header-file.patch 0069-sev-i386-add-support-to-query-PLATF.patch 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch 0071-qmp-add-query-sev-launch-measure-co.patch 0072-tests-qmp-test-blacklist-query-sev-.patch 0073-sev-i386-add-migration-blocker.patch 0074-cpu-i386-populate-CPUID-0x8000_001F.patch 0075-migration-warn-about-inconsistent-s.patch 0076-smbios-support-setting-OEM-strings-.patch 0077-smbios-Add-1-terminator-if-any-stri.patch 0078-Remove-problematic-evdev-86-key-fro.patch 0079-tpm-lookup-cancel-path-under-tpm-de.patch 0080-vga-fix-region-calculation.patch skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch skiboot-libc-stdio-vsnprintf.c-add-expli.patch skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch ui-keycodemapdb-Add-missing-QKeyCode-val.patch ui-keycodemapdb-Fix-compat-with-py3-dict.patch * Patches renamed: 0044-Make-installed-scripts-explicitly-p.patch - > 0033-Make-installed-scripts-explicitly-p.patch 0075-migration-warn-about-inconsistent-s.patch - > 0034-migration-warn-about-inconsistent-s.patch 0077-smbios-Add-1-terminator-if-any-stri.patch - > 0035-smbios-Add-1-terminator-if-any-stri.patch 0078-Remove-problematic-evdev-86-key-fro.patch - > 0036-Remove-problematic-evdev-86-key-fro.patch * Patches added: 0037-configure-Modify-python-used-for-io.patch 0038-qemu-io-tests-comment-out-problemat.patch 0039-tests-test-thread-pool-is-racy-add-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.12- Fix autoinstall of qemu-guest-agent by getting the modalias string right (bsc#1091143)- Guard strncpy call with GCC pragma to disable warning about possible incorrect usage, when in fact it is correct. This is for gcc 8 compatibility (bsc#1090355) ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)- fix qemu-ga service file name (bsc#1089067)- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604) 0080-vga-fix-region-calculation.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Add new look up path "sys/class/tpm" for tpm cancel path based on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615) 0079-tpm-lookup-cancel-path-under-tpm-de.patch- Fix issue with key codes in qemu v2.11 0078-Remove-problematic-evdev-86-key-fro.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11 * Patches added: 0077-smbios-Add-1-terminator-if-any-stri.patch bsc#994082 and bsc#1084316- Add support for setting OEM strings table (fate#323624) 0076-smbios-support-setting-OEM-strings-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- SLE15 KVM (as targeted for RC1) now has the feature exposed. Drop the patch. (bsc#1082276) 0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Change example qemu-ifup script to not depend on bridge-utils. Also update the paths used for ip binary.- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've carried since the initial Spectre v2 patch was added. EDX bit 27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the guest is wrong in general, since the VM doesn't directly control the scheduling of physical hyperthreads. This is left strictly to the L0 hypervisor.- Update to v2.11.1, a stable, (mostly) bug-fix-only release In addition to bug fixes, of necessity fixes are needed to address the Spectre v2 vulnerability by passing along to the guest new hardware features introduced by host microcode updates. A January 2018 release of qemu initially addressed this issue by exposing the feature for all x86 vcpu types, which was the quick and dirty approach, but not the proper solution. We remove that initial patch and now rely on the upstream solution. This update instead defines spec_ctrl and ibpb cpu feature flags as well as new cpu models which are clones of existing models with either -IBRS or -IBPB added to the end of the model name. These new vcpu models explicitly include the new feature(s), whereas the feature flags can be added to the cpu parameter as with other features. In short, for continued Spectre v2 protection, ensure that either the appropriate cpu feature flag is added to the QEMU command-line, or one of the new cpu models is used. Although migration from older versions is supported, the new cpu features won't be properly exposed to the guest until it is restarted with the cpu features explicitly added. A reboot is insufficient. A warning patch is added which attempts to detect a migration from a qemu version which had the quick and dirty fix (it only detects certain cases, but hopefully is helpful.) s390x guest vulnerability to Spectre v2 is also addressed in this update by including support for bpb and ppa/stfle.81 features. (CVE-2017-5715 bsc#1068032) For additional information on Spectre v2 as it relates to QEMU, see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/ - Unfortunately, it was found that our current KVM isn't correctly indicating support for the spec-ctrl feature, so I've added a patch to still detect that support within QEMU. This is of course a temporary kludge until KVM gets fixed. (bsc#1082276) - The SEV support patches are updated to the v9 series. - Fix incompatibility with recent glibc (boo#1081154) - Add Supplements tags for the guest agent package in an attempt to auto-install for QEMU and Xen SUSE Linux guests (fate#323570) * Patches dropped (subsumed by stable update, or reworked in v9): 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch 0050-target-i386-add-memory-encryption-f.patch 0054-accel-add-Secure-Encrypted-Virtuliz.patch 0072-sev-Fix-build-for-non-x86-hosts.patch * Patches added: 0033-memfd-fix-configure-test.patch 0053-target-i386-add-Secure-Encrypted-Vi.patch 0056-qmp-populate-SevInfo-fields-with-SE.patch 0072-tests-qmp-test-blacklist-query-sev-.patch 0073-sev-i386-add-migration-blocker.patch 0074-cpu-i386-populate-CPUID-0x8000_001F.patch 0075-migration-warn-about-inconsistent-s.patch 0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch * Patches renamed (plus some minor code changes): 0051-machine-add-memory-encryption-prope.patch - > 0050-machine-add-memory-encryption-prope.patch 0052-kvm-update-kvm.h-to-include-memory-.patch - > 0051-kvm-update-kvm.h-to-include-memory-.patch 0053-docs-add-AMD-Secure-Encrypted-Virtu.patch - > 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch 0055-sev-add-command-to-initialize-the-m.patch - > 0055-sev-i386-add-command-to-initialize-.patch 0056-sev-register-the-guest-memory-range.patch - > 0057-sev-i386-register-the-guest-memory-.patch 0057-kvm-introduce-memory-encryption-API.patch - > 0058-kvm-introduce-memory-encryption-API.patch 0058-qmp-add-query-sev-command.patch - > 0054-qmp-add-query-sev-command.patch 0060-sev-add-command-to-create-launch-me.patch - > 0060-sev-i386-add-command-to-create-laun.patch 0061-sev-add-command-to-encrypt-guest-me.patch - > 0061-sev-i386-add-command-to-encrypt-gue.patch 0063-sev-add-support-to-LAUNCH_MEASURE-c.patch - > 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch 0064-sev-Finalize-the-SEV-guest-launch-f.patch - > 0064-sev-i386-finalize-the-SEV-guest-lau.patch 0066-sev-add-debug-encrypt-and-decrypt-c.patch - > 0066-sev-i386-add-debug-encrypt-and-decr.patch 0069-sev-add-support-to-query-PLATFORM_S.patch - > 0069-sev-i386-add-support-to-query-PLATF.patch 0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch - > 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Add AMD SEV (Secure Encrypted Virtualization) support by taking the v7 series of the patches posted to qemu ml. (fate#322124) 0046-memattrs-add-debug-attribute.patch 0047-exec-add-ram_debug_ops-support.patch 0048-exec-add-debug-version-of-physical-.patch 0049-monitor-i386-use-debug-APIs-when-ac.patch 0050-target-i386-add-memory-encryption-f.patch 0051-machine-add-memory-encryption-prope.patch 0052-kvm-update-kvm.h-to-include-memory-.patch 0053-docs-add-AMD-Secure-Encrypted-Virtu.patch 0054-accel-add-Secure-Encrypted-Virtuliz.patch 0055-sev-add-command-to-initialize-the-m.patch 0056-sev-register-the-guest-memory-range.patch 0057-kvm-introduce-memory-encryption-API.patch 0058-qmp-add-query-sev-command.patch 0059-hmp-add-info-sev-command.patch 0060-sev-add-command-to-create-launch-me.patch 0061-sev-add-command-to-encrypt-guest-me.patch 0062-target-i386-encrypt-bios-rom.patch 0063-sev-add-support-to-LAUNCH_MEASURE-c.patch 0064-sev-Finalize-the-SEV-guest-launch-f.patch 0065-hw-i386-set-ram_debug_ops-when-memo.patch 0066-sev-add-debug-encrypt-and-decrypt-c.patch 0067-target-i386-clear-C-bit-when-walkin.patch 0068-include-add-psp-sev.h-header-file.patch 0069-sev-add-support-to-query-PLATFORM_S.patch 0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch 0071-qmp-add-query-sev-launch-measure-co.patch 0072-sev-Fix-build-for-non-x86-hosts.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Update python3 related patches now that they are upstream- guest agent: change service file to a template so it can be used by Xen as well. Adjust udev rule accordingly. FATE#324963- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823) 0045-pc-fail-memory-hot-plug-unplug-with.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Modify BuildRequires python references - seabios also needed tweaks for python2 vs python3 * Patches added: seabios-use-python2-explicitly-as-needed.patch seabios-switch-to-python3-as-needed.patch- Try to get our story right wrt python2 vs python3 (bsc#1077564) * Get rid of use of #!/usr/bin/env python in scripts we install * include proposed upstream build system changes needed for building with python2 or python3 * Patches dropped: 0032-scripts-avoid-usr-bin-python-refere.patch * Patches renamed: 0033-Switch-order-of-libraries-for-mpath.patch - > 0032-Switch-order-of-libraries-for-mpath.patch 0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch - > 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch * Patches added: 0034-qapi-use-items-values-intead-of-ite.patch 0035-qapi-Use-OrderedDict-from-standard-.patch 0036-qapi-adapt-to-moved-location-of-Str.patch 0037-qapi-Adapt-to-moved-location-of-mak.patch 0038-qapi-remove-q-arg-to-diff-when-comp.patch 0039-qapi-ensure-stable-sort-ordering-wh.patch 0040-qapi-force-a-UTF-8-locale-for-runni.patch 0041-scripts-ensure-signrom-treats-data-.patch 0042-configure-allow-use-of-python-3.patch 0043-input-add-missing-JIS-keys-to-virti.patch 0044-Make-installed-scripts-explicitly-p.patch Make-installed-scripts-explicitly-python3.patch ui-keycodemapdb-Add-missing-QKeyCode-val.patch ui-keycodemapdb-Fix-compat-with-py3-dict.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Fix packaging dependencies (coreutils) for qemu-ksm package (bsc#1040202)- Pass through to guest info related to x86 security vulnerability (CVE-2017-5715 bsc#1068032) 0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Update to v2.11.0: See http://wiki.qemu.org/ChangeLog/2.11 Some noteworthy changes: - nodefconfig is now deprecated legacy pci-assignment code removed qemu-pr-helper added for handling guest persistant reservations (bsc#891066, bsc#910704, bsc#943807) qemu-keymap tool added for generating keymap files throttle block filter driver added support for a TPM emulator qcow2 image shrink support better support for >=64 vcpus for Windows guests nested KVM related improvements s390 pgste handling now done better EPYC cpu model added (bsc#1052825) improvements in qcow2 buffer handling vhost-user resume issue fixed migration hardening ARMv8-M security extension support more seccomp/sandboxing options available s390 cpu hot-plug improvements misc. virtfs improvements nbd improvements MTTCG improvements misc. TCG improvements scsi correctness improvements SEABIOS now has serial output option * Includes fixes for CVE-2017-15118 bsc#1070147, CVE-2017-15119 bsc#1070144 * Adds KASLR support (fate#323473, bsc#1070281) * Update SLE support docs to match this release * simplify spec file to expect at least sle_version >= 1315 * Patches dropped (upstream): 0013-console-add-question-mark-escape-op.patch 0020-configure-Fix-detection-of-seccomp-.patch 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch 0035-chardev-baum-fix-baum-that-releases.patch 0036-io-fix-temp-directory-used-by-test-.patch 0037-io-fix-check-for-handshake-completi.patch 0038-crypto-fix-test-cert-generation-to-.patch 0039-vhost-user-disable-the-broken-subpr.patch 0040-io-monitor-encoutput-buffer-size-fr.patch 0041-cirrus-fix-oob-access-in-mode4and5-.patch 0042-9pfs-use-g_malloc0-to-allocate-spac.patch * Patches renamed: 0014-Make-char-muxer-more-robust-wrt-sma.patch - > 0013-Make-char-muxer-more-robust-wrt-sma.patch 0015-linux-user-lseek-explicitly-cast-no.patch - > 0014-linux-user-lseek-explicitly-cast-no.patch 0016-AIO-Reduce-number-of-threads-for-32.patch - > 0015-AIO-Reduce-number-of-threads-for-32.patch 0017-xen_disk-Add-suse-specific-flush-di.patch - > 0016-xen_disk-Add-suse-specific-flush-di.patch 0018-qemu-bridge-helper-reduce-security-.patch - > 0017-qemu-bridge-helper-reduce-security-.patch 0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch - > 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0021-linux-user-properly-test-for-infini.patch - > 0019-linux-user-properly-test-for-infini.patch 0022-roms-Makefile-pass-a-packaging-time.patch - > 0020-roms-Makefile-pass-a-packaging-time.patch 0023-Raise-soft-address-space-limit-to-h.patch - > 0021-Raise-soft-address-space-limit-to-h.patch 0024-increase-x86_64-physical-bits-to-42.patch - > 0022-increase-x86_64-physical-bits-to-42.patch 0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch - > 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0026-i8254-Fix-migration-from-SLE11-SP2.patch - > 0024-i8254-Fix-migration-from-SLE11-SP2.patch 0027-acpi_piix4-Fix-migration-from-SLE11.patch - > 0025-acpi_piix4-Fix-migration-from-SLE11.patch 0028-Fix-tigervnc-long-press-issue.patch - > 0026-Fix-tigervnc-long-press-issue.patch 0029-string-input-visitor-Fix-uint64-par.patch - > 0027-string-input-visitor-Fix-uint64-par.patch 0030-test-string-input-visitor-Add-int-t.patch - > 0028-test-string-input-visitor-Add-int-t.patch 0031-test-string-input-visitor-Add-uint6.patch - > 0029-test-string-input-visitor-Add-uint6.patch 0032-tests-Add-QOM-property-unit-tests.patch - > 0030-tests-Add-QOM-property-unit-tests.patch 0033-tests-Add-scsi-disk-test.patch - > 0031-tests-Add-scsi-disk-test.patch 0043-scripts-avoid-usr-bin-python-refere.patch - > 0032-scripts-avoid-usr-bin-python-refere.patch * We need the multipath libraries link order switched 0033-Switch-order-of-libraries-for-mpath.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11- Avoid ref to /usr/bin/python in vmstate-static-checker.py script 0043-scripts-avoid-usr-bin-python-refere.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- For SLE15, it's been decided to stop providing SDL based graphics due to packaging constraints. Long ago GTK became the default, and there is little benefit to providing both. For now, keep it enabled for openSUSE (Tumblweed and Leap), but consider it marked deprecated there and if no one complains it will be removed for openSUSE as well in the near future. (fate#324465) - Fix problem building skiboot.lid skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch- Wrap analyze-migration and vmstate-static-checker into tools from qemu scripts folder, also changed introduction of qemu-tools in spec file - Move supportplugin position in spec file- Add announcement in support docs about qed storage format no longer being supported in next major SLE release (SLE15) (fate#324200) - Address various security/stability issues * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942) 0040-io-monitor-encoutput-buffer-size-fr.patch * Fix OOB access in cirrus vga device emulation (CVE-2017-15289 bsc#1063122) 0041-cirrus-fix-oob-access-in-mode4and5-.patch * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069) 0042-9pfs-use-g_malloc0-to-allocate-spac.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Don't tie glusterfs support to specific arch - Build skiboot firmware (OPAL), particularly since it's fairly easy to do so skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch skiboot-libc-stdio-vsnprintf.c-add-expli.patch- Added the global macro 'with_glusterfs' in order to re-enable glusterfs support. The macro enable easier future adjustments for various ARCH/targets/requiremnets. At first glusterfs support is enabled for openSUSE Leap 42.x and Factory for ARCH x86_64.- Add dependencies on ovmf (uefi) for the qemu-x86 and qemu-arm packages - Fix s390-netboot.img to be included with qemu-s390 package, not qemu-ppc- Update to v2.10.1, a stable, bug-fix-only release * fixes bsc#1056386 CVE-2017-13673, bsc#1056334 CVE-2017-13672, bsc#1057585 CVE-2017-14167 * Patches dropped (upstream): 0034-slirp-fix-clearing-ifq_so-from-pend.patch 0035-s390-ccw-Fix-alignment-for-CCW1.patch 0038-s390x-ais-for-2.10-stable-disable-a.patch 0039-s390x-cpumodel-remove-ais-from-z14-.patch * Patches renamed: 0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch - > 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch 0037-chardev-baum-fix-baum-that-releases.patch - > 0035-chardev-baum-fix-baum-that-releases.patch 0040-io-fix-temp-directory-used-by-test-.patch - > 0036-io-fix-temp-directory-used-by-test-.patch 0041-io-fix-check-for-handshake-completi.patch - > 0037-io-fix-check-for-handshake-completi.patch 0042-crypto-fix-test-cert-generation-to-.patch - > 0038-crypto-fix-test-cert-generation-to-.patch 0043-vhost-user-disable-the-broken-subpr.patch - > 0039-vhost-user-disable-the-broken-subpr.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix failures and potential failures in qemu-testsuite 0040-io-fix-temp-directory-used-by-test-.patch 0041-io-fix-check-for-handshake-completi.patch 0042-crypto-fix-test-cert-generation-to-.patch 0043-vhost-user-disable-the-broken-subpr.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix migration issue on s390 0038-s390x-ais-for-2.10-stable-disable-a.patch 0039-s390x-cpumodel-remove-ais-from-z14-.patch - Fix case of not being able to build from rpm sources due to undefined macro (boo#1057966) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix baum that release brlapi twice (bsc#1060045) 0037-chardev-baum-fix-baum-that-releases.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- For SLE15 pre-release testing, add support for the EPYC processor. This will be officially supported once it is included in the v2.11 release. (bsc#1052825) 0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch - Fix some support statements in our SLE support documents.- Update BuildRequires packages libibverbs-devel and librdmacm-devel to the more correct rdma-core-devel - Enable seccomp for s390x, aarch64, and ppc64le - Fix OOB issue (use after free) in slirp network stack (CVE-2017-13711 bsc#1056291) 0034-slirp-fix-clearing-ifq_so-from-pend.patch - Fix a misalignment in the s390 ccw firmware (bsc#1056680) 0035-s390-ccw-Fix-alignment-for-CCW1.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Add a supportconfig plugin qemu-supportconfig FATE#323661- Update to v2.10.0: See http://wiki.qemu.org/ChangeLog/2.10 - Dropped internal only patches used to support SUSE Studio Testdrive as well as other miscellaneous patches deemed unused and not worth carrying (bsc#1046783, bsc#1055125, bsc#1055127) - Update SLE support statements in anticipation of SLE15 - disable SAN boot capability from virtio pxe rom used in v1.4 and older pc machine types due to rom size requirements. Hopefully a better solution can be found which doesn't impact functionality * Patches added: ipxe-stub-out-the-SAN-req-s-in-int13.patch * Patches renamed: 0006-qemu-cvs-gettimeofday.patch -> 0003-qemu-cvs-gettimeofday.patch 0007-qemu-cvs-ioctl_debug.patch -> 0004-qemu-cvs-ioctl_debug.patch 0008-qemu-cvs-ioctl_nodirection.patch -> 0005-qemu-cvs-ioctl_nodirection.patch 0009-linux-user-add-binfmt-wrapper-for-a.patch -> 0006-linux-user-add-binfmt-wrapper-for-a.patch 0010-PPC-KVM-Disable-mmu-notifier-check.patch -> 0007-PPC-KVM-Disable-mmu-notifier-check.patch 0011-linux-user-fix-segfault-deadlock.patch -> 0008-linux-user-fix-segfault-deadlock.patch 0012-linux-user-binfmt-support-host-bina.patch -> 0009-linux-user-binfmt-support-host-bina.patch 0013-linux-user-Fake-proc-cpuinfo.patch -> 0010-linux-user-Fake-proc-cpuinfo.patch 0014-linux-user-XXX-disable-fiemap.patch -> 0011-linux-user-XXX-disable-fiemap.patch 0017-linux-user-use-target_ulong.patch -> 0012-linux-user-use-target_ulong.patch 0021-console-add-question-mark-escape-op.patch -> 0013-console-add-question-mark-escape-op.patch 0022-Make-char-muxer-more-robust-wrt-sma.patch -> 0014-Make-char-muxer-more-robust-wrt-sma.patch 0023-linux-user-lseek-explicitly-cast-no.patch -> 0015-linux-user-lseek-explicitly-cast-no.patch 0025-AIO-Reduce-number-of-threads-for-32.patch -> 0016-AIO-Reduce-number-of-threads-for-32.patch 0027-xen_disk-Add-suse-specific-flush-di.patch -> 0017-xen_disk-Add-suse-specific-flush-di.patch 0028-qemu-bridge-helper-reduce-security-.patch -> 0018-qemu-bridge-helper-reduce-security-.patch 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0030-configure-Fix-detection-of-seccomp-.patch -> 0020-configure-Fix-detection-of-seccomp-.patch 0031-linux-user-properly-test-for-infini.patch -> 0020-linux-user-properly-test-for-infini.patch 0033-roms-Makefile-pass-a-packaging-time.patch -> 0022-roms-Makefile-pass-a-packaging-time.patch 0034-Raise-soft-address-space-limit-to-h.patch -> 0023-Raise-soft-address-space-limit-to-h.patch 0035-increase-x86_64-physical-bits-to-42.patch -> 0024-increase-x86_64-physical-bits-to-42.patch 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0037-i8254-Fix-migration-from-SLE11-SP2.patch -> 0026-i8254-Fix-migration-from-SLE11-SP2.patch 0038-acpi_piix4-Fix-migration-from-SLE11.patch -> 0027-acpi_piix4-Fix-migration-from-SLE11.patch 0039-Fix-tigervnc-long-press-issue.patch -> 0028-Fix-tigervnc-long-press-issue.patch 0041-string-input-visitor-Fix-uint64-par.patch -> 0029-string-input-visitor-Fix-uint64-par.patch 0042-test-string-input-visitor-Add-int-t.patch -> 0030-test-string-input-visitor-Add-int-t.patch 0043-test-string-input-visitor-Add-uint6.patch -> 0031-test-string-input-visitor-Add-uint6.patch 0044-tests-Add-QOM-property-unit-tests.patch -> 0032-tests-Add-QOM-property-unit-tests.patch 0045-tests-Add-scsi-disk-test.patch -> 0033-tests-Add-scsi-disk-test.patch * Patches dropped (upstream unless otherwise noted): 0003-qemu-cvs-alsa_bitfield.patch (deemed not needed) 0004-qemu-cvs-alsa_ioctl.patch (deemed not needed) 0005-qemu-cvs-alsa_mmap.patch (deemed not needed) 0015-slirp-nooutgoing.patch (bsc#1055125) 0016-vnc-password-file-and-incoming-conn.patch (bsc#1055127) 0018-block-Add-support-for-DictZip-enabl.patch (bsc#1046783) 0019-block-Add-tar-container-format.patch (bsc#1046783) 0020-Legacy-Patch-kvm-qemu-preXX-dictzip.patch (bsc#1046783) 0024-configure-Enable-PIE-for-ppc-and-pp.patch (obsolete) 0026-dictzip-Fix-on-big-endian-systems.patch (bsc#1046783) 0032-linux-user-remove-all-traces-of-qem.patch 0040-fix-xen-hvm-direct-kernel-boot.patch (bsc#970791) 0046-RFC-update-Linux-headers-from-irqs-.patch 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch 0048-input-Add-trace-event-for-empty-key.patch 0049-ACPI-don-t-call-acpi_pcihp_device_p.patch 0050-i386-Allow-cpuid-bit-override.patch (was for testing only) 0051-input-limit-kbd-queue-depth.patch 0052-audio-release-capture-buffers.patch 0053-scsi-avoid-an-off-by-one-error-in-m.patch 0054-vmw_pvscsi-check-message-ring-page-.patch 0055-9pfs-local-forbid-client-access-to-.patch 0056-jazz_led-fix-bad-snprintf.patch 0057-slirp-smb-Replace-constant-strings-.patch 0058-altera_timer-fix-incorrect-memset.patch 0059-Hacks-for-building-on-gcc-7-Fedora-.patch 0060-9pfs-local-fix-unlink-of-alien-file.patch 0061-megasas-do-not-read-DCMD-opcode-mor.patch 0062-megasas-always-store-SCSIRequest-in.patch 0063-nbd-Fully-initialize-client-in-case.patch 0064-9pfs-local-remove-use-correct-path-.patch 0065-hid-Reset-kbd-modifiers-on-reset.patch 0066-input-Decrement-queue-count-on-kbd-.patch 0067-xhci-only-update-dequeue-ptr-on-com.patch 0068-vnc-Set-default-kbd-delay-to-10ms.patch 0069-qemu-nbd-Ignore-SIGPIPE.patch 0070-usb-redir-fix-stack-overflow-in-usb.patch 0072-slirp-check-len-against-dhcp-option.patch 0071-exec-use-qemu_ram_ptr_length-to-acc.patch 0073-xen-mapcache-store-dma-information-.patch 0074-exec-Add-lock-parameter-to-qemu_ram.patch 0075-Replace-struct-ucontext-with-uconte.patch ipxe-build-Avoid-implicit-fallthrough-warnings-on-GCC-7.patch ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch ipxe-ath-Add-missing-break-statements.patch ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10- Fix package build failure as of glibc v2.26 update in Factory (boo#1055587) 0075-Replace-struct-ucontext-with-uconte.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Remove redundant prerequire for pwdutils- Postrequire acl for setfacl- Prerequire shadow for groupadd- The recent security fix for CVE-2017-11334 adversely affects Xen. Include two additional patches to make sure Xen is going to be OK. 0073-xen-mapcache-store-dma-information-.patch 0074-exec-Add-lock-parameter-to-qemu_ram.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Pre-add group kvm for qemu-tools (bsc#1011144)- Fixed a few more inaccuracies in the support docs.- Address various security/stability issues * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664) 0069-qemu-nbd-Ignore-SIGPIPE.patch * Fix DOS from stack overflow in debug messages of usb redirection support (bsc#1047674 CVE-2017-10806) 0070-usb-redir-fix-stack-overflow-in-usb.patch * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902) 0071-exec-use-qemu_ram_ptr_length-to-acc.patch * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381) 0072-slirp-check-len-against-dhcp-option.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Fix support docs to indicate ARM64 is now fully L3 supported in SLES 12 SP3. Apply a few additional clarifications in the support docs. (bsc#1050268) - Adjust to libvdeplug-devel package naming changes.- Fix migration with xhci (bsc#1048296) 0067-xhci-only-update-dequeue-ptr-on-com.patch - Increase VNC delay to fix missing keyboard input events (bsc#1031692) 0068-vnc-Set-default-kbd-delay-to-10ms.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Remove build dependency package iasl used for seabios- Fixed stuck state during usb keyboard reset (bsc#1044936) 0065-hid-Reset-kbd-modifiers-on-reset.patch - Fixed keyboard events getting lost (bsc#1044936) 0066-input-Decrement-queue-count-on-kbd-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Use most recent compiler to build size-critical firmware, instead of hard-coding gcc6 for all target versions (bsc#1043390) * A few upstream ipxe patches were needed for gcc7 compatibility: ipxe-ath-Add-missing-break-statements.patch ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch - Add --no-renames to the git format-patch command in the git workflow script for better patch compatibility - Address various security/stability issues * Fix potential privilege escalation in virtfs (CVE-2016-9602 bsc#1020427) 0060-9pfs-local-fix-unlink-of-alien-file.patch * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296) 0061-megasas-do-not-read-DCMD-opcode-mor.patch 0062-megasas-always-store-SCSIRequest-in.patch * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808) 0063-nbd-Fully-initialize-client-in-case.patch * Fix regression introduced by recent virtfs security fixes (bsc#1045035) 0064-9pfs-local-remove-use-correct-path-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Backport ipxe to support FirstBurstLength (bsc#1040476) ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan) 0056-jazz_led-fix-bad-snprintf.patch 0057-slirp-smb-Replace-constant-strings-.patch 0058-altera_timer-fix-incorrect-memset.patch 0059-Hacks-for-building-on-gcc-7-Fedora-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495) 0055-9pfs-local-forbid-client-access-to-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Address various security/stability issues * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334) 0051-input-limit-kbd-queue-depth.patch * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242) 0052-audio-release-capture-buffers.patch * Fix OOB access in megasas device emulation (CVE-2017-8380 bsc#1037336) 0053-scsi-avoid-an-off-by-one-error-in-m.patch * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211) 0054-vmw_pvscsi-check-message-ring-page-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Fix building packages for some older distros. - Further refine our handling of building firmware (or not) for the various arch's and distro versions we build for. Note that if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream binary blobs are used, which may have migration incompatibilities with previous versions of qemu provided.- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen HVM guests got broken (bsc#1034131) 0049-ACPI-don-t-call-acpi_pcihp_device_p.patch - Include experimental, unsupported feature to assist in some performance analysis work. 0050-i386-Allow-cpuid-bit-override.patch- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9 - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9 * Includes fix for CVE-2017-7471, a virtfs security issue. - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Add empty keyboard queue tracepoint to help openQA testing work better (bsc#1031692) 0048-input-Add-trace-event-for-empty-key.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.9 - Enable ceph/rbd support for s390x (bsc#1030068) - Enable ceph/rbd support for ppc* as available - Update ARM in-kernel-timers patch (bsc#1033416) * Patches renamed: 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch 0042-string-input-visitor-Fix-uint64-par.patch -> 0041-string-input-visitor-Fix-uint64-par.patch 0043-test-string-input-visitor-Add-int-t.patch -> 0042-test-string-input-visitor-Add-int-t.patch 0044-test-string-input-visitor-Add-uint6.patch -> 0043-test-string-input-visitor-Add-uint6.patch 0045-tests-Add-QOM-property-unit-tests.patch -> 0044-tests-Add-QOM-property-unit-tests.patch 0046-tests-Add-scsi-disk-test.patch -> 0045-tests-Add-scsi-disk-test.patch * Patches added (support patch): 0046-RFC-update-Linux-headers-from-irqs-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.9 * Patches dropped (included in upstream source archive): 0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch 0048-i386-Replace-uint32_t-with-FeatureW.patch 0049-i386-Don-t-override-cpu-options-on-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9 - Added additional documentation provided with v2.9.0 - Fix build failure with gcc7 (bsc#1031340) ipxe-build-Avoid-implicit-fallthrough-warnings-on-GCC-7.patch - Made miscellaneous spec file refinements- The support documents included are now fairly accurate for the arm and s390 world, and the x86 version also received a few tweaks. Also included in those docs is a url reference to upstream qemu deprecation plans and discussions. (fate#321146) - Add post v2.9.0-rc2 upstream patches which fix -cpu host and -cpu max feature overrides for libvirt compatability. 0048-i386-Replace-uint32_t-with-FeatureW.patch 0049-i386-Don-t-override-cpu-options-on-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.9 * Includes fix for in guest privilege escalation when using TCG (bsc#1030624) * Patches dropped (equivalent included in upstream source archive): 0047-linux-user-exclude-cpu-model-code-w.patch - Fix failure booting SLE12-SP2 Aarch64 guest (bsc#1031384) 0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.9 * Patches dropped (no longer needed based on what we now build for): 0024-virtfs-proxy-helper-Provide-__u64-f.patch * Patches dropped (included in upstream source archive): 0034-dma-rc4030-limit-interval-timer-rel.patch * Patches renamed: 0025-configure-Enable-PIE-for-ppc-and-pp.patch -> 0024-configure-Enable-PIE-for-ppc-and-pp.patch 0026-AIO-Reduce-number-of-threads-for-32.patch -> 0025-AIO-Reduce-number-of-threads-for-32.patch 0027-dictzip-Fix-on-big-endian-systems.patch -> 0026-dictzip-Fix-on-big-endian-systems.patch 0028-xen_disk-Add-suse-specific-flush-di.patch -> 0027-xen_disk-Add-suse-specific-flush-di.patch 0029-qemu-bridge-helper-reduce-security-.patch -> 0028-qemu-bridge-helper-reduce-security-.patch 0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0031-configure-Fix-detection-of-seccomp-.patch -> 0030-configure-Fix-detection-of-seccomp-.patch 0032-linux-user-properly-test-for-infini.patch -> 0031-linux-user-properly-test-for-infini.patch 0033-linux-user-remove-all-traces-of-qem.patch -> 0032-linux-user-remove-all-traces-of-qem.patch 0035-roms-Makefile-pass-a-packaging-time.patch -> 0033-roms-Makefile-pass-a-packaging-time.patch 0036-Raise-soft-address-space-limit-to-h.patch -> 0034-Raise-soft-address-space-limit-to-h.patch 0037-increase-x86_64-physical-bits-to-42.patch -> 0035-increase-x86_64-physical-bits-to-42.patch 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0039-i8254-Fix-migration-from-SLE11-SP2.patch -> 0037-i8254-Fix-migration-from-SLE11-SP2.patch 0040-acpi_piix4-Fix-migration-from-SLE11.patch -> 0038-acpi_piix4-Fix-migration-from-SLE11.patch 0041-Fix-tigervnc-long-press-issue.patch -> 0039-Fix-tigervnc-long-press-issue.patch 0042-fix-xen-hvm-direct-kernel-boot.patch -> 0040-fix-xen-hvm-direct-kernel-boot.patch 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch 0044-string-input-visitor-Fix-uint64-par.patch -> 0042-string-input-visitor-Fix-uint64-par.patch 0045-test-string-input-visitor-Add-int-t.patch -> 0043-test-string-input-visitor-Add-int-t.patch 0046-test-string-input-visitor-Add-uint6.patch -> 0044-test-string-input-visitor-Add-uint6.patch 0047-tests-Add-QOM-property-unit-tests.patch -> 0045-tests-Add-QOM-property-unit-tests.patch 0048-tests-Add-scsi-disk-test.patch -> 0046-tests-Add-scsi-disk-test.patch 0049-linux-user-exclude-cpu-model-code-w.patch -> 0047-linux-user-exclude-cpu-model-code-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Updated to v2.9.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.9 * Updated version carries fixes for the following reported issues: CVE-2016-9602 bsc#1020427, CVE-2016-9923 bsc#1014703, CVE-2017-2630 bsc#1025396, CVE-2017-2633 bsc#1026612, CVE-2017-5579 bsc#1021741, CVE-2017-5931 bsc#1024114, CVE-2017-5973 bsc#1025109, CVE-2017-5987 bsc#1025311, CVE-2017-6058 bsc#1025837, CVE-2017-6505 bsc#1028184 * Patches dropped: seabios_128kb.patch (no longer required) * Patches dropped (included in upstream source archive): 0035-net-imx-limit-buffer-descriptor-cou.patch 0045-virtio-gpu-call-cleanup-mapping-fun.patch 0051-virtio-gpu-fix-information-leak-in-.patch 0052-display-cirrus-ignore-source-pitch-.patch 0053-s390x-kvm-fix-small-race-reboot-vs..patch 0054-target-s390x-use-qemu-cpu-model-in-.patch 0056-tests-check-path-to-avoid-a-failing.patch 0057-display-virtio-gpu-3d-check-virgl-c.patch 0058-watchdog-6300esb-add-exit-function.patch 0059-virtio-gpu-3d-fix-memory-leak-in-re.patch 0060-virtio-gpu-fix-memory-leak-in-resou.patch 0061-virtio-fix-vq-inuse-recalc-after-mi.patch 0062-audio-es1370-add-exit-function.patch 0063-audio-ac97-add-exit-function.patch 0064-megasas-fix-guest-triggered-memory-.patch 0065-cirrus-handle-negative-pitch-in-cir.patch 0066-cirrus-fix-blit-address-mask-handli.patch 0067-cirrus-fix-oob-access-issue-CVE-201.patch 0068-usb-ccid-check-ccid-apdu-length.patch 0069-sd-sdhci-check-data-length-during-d.patch 0070-virtio-gpu-fix-resource-leak-in-vir.patch 0071-cirrus-fix-patterncopy-checks.patch 0072-cirrus-add-blit_is_unsafe-call-to-c.patch * Patches renamed: 0036-roms-Makefile-pass-a-packaging-time.patch -> 0035-roms-Makefile-pass-a-packaging-time.patch 0037-Raise-soft-address-space-limit-to-h.patch -> 0036-Raise-soft-address-space-limit-to-h.patch 0038-increase-x86_64-physical-bits-to-42.patch -> 0037-increase-x86_64-physical-bits-to-42.patch 0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0040-i8254-Fix-migration-from-SLE11-SP2.patch -> 0039-i8254-Fix-migration-from-SLE11-SP2.patch 0041-acpi_piix4-Fix-migration-from-SLE11.patch -> 0040-acpi_piix4-Fix-migration-from-SLE11.patch 0042-Fix-tigervnc-long-press-issue.patch -> 0041-Fix-tigervnc-long-press-issue.patch 0043-fix-xen-hvm-direct-kernel-boot.patch -> 0042-fix-xen-hvm-direct-kernel-boot.patch 0044-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch 0046-string-input-visitor-Fix-uint64-par.patch -> 0044-string-input-visitor-Fix-uint64-par.patch 0047-test-string-input-visitor-Add-int-t.patch -> 0045-test-string-input-visitor-Add-int-t.patch 0048-test-string-input-visitor-Add-uint6.patch -> 0046-test-string-input-visitor-Add-uint6.patch 0049-tests-Add-QOM-property-unit-tests.patch -> 0047-tests-Add-QOM-property-unit-tests.patch 0050-tests-Add-scsi-disk-test.patch -> 0048-tests-Add-scsi-disk-test.patch 0055-linux-user-exclude-cpu-model-code-w.patch -> 0049-linux-user-exclude-cpu-model-code-w.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9- Buildignore for the global gcc-PIE, as this package enables PIE on its own and has troubles if all use it. (meissner@suse.com)- Address various security/stability issues * Fix OOB access in virito-gpu-3d (CVE-2016-10028 bsc#1017084 bsc#1016503) 0057-display-virtio-gpu-3d-check-virgl-c.patch * Fix DOS in Intel 6300ESB device emulation (CVE-2016-10155 bsc#1021129) 0058-watchdog-6300esb-add-exit-function.patch * Fix DOS in virtio-gpu-3d (CVE-2017-5552 bsc#1021195) 0059-virtio-gpu-3d-fix-memory-leak-in-re.patch * Fix DOS in virtio-gpu (CVE-2017-5578 bsc#1021481) 0060-virtio-gpu-fix-memory-leak-in-resou.patch * Fix cause of infrequent migration failures from bad virtio device state. (bsc#1020928) 0061-virtio-fix-vq-inuse-recalc-after-mi.patch * Fix DOS in es1370 emulated audio device (CVE-2017-5526 bsc#1020589) 0062-audio-es1370-add-exit-function.patch * Fix DOS in ac97 emulated audio device (CVE-2017-5525 bsc#1020491) 0063-audio-ac97-add-exit-function.patch * Fix DOS in megasas device emulation (CVE-2017-5856 bsc#1023053) 0064-megasas-fix-guest-triggered-memory-.patch * Fix various inaccuracies in cirrus vga device emulation 0065-cirrus-handle-negative-pitch-in-cir.patch 0066-cirrus-fix-blit-address-mask-handli.patch * Fix OOB access in cirrus vga emulation (CVE-2017-2615 bsc#1023004) 0067-cirrus-fix-oob-access-issue-CVE-201.patch * Fix DOS in usb CCID card device emulator (CVE-2017-5898 bsc#1023907) 0068-usb-ccid-check-ccid-apdu-length.patch * Fix OOB access in SDHCI device emulation (CVE-2017-5667 bsc#1022541) 0069-sd-sdhci-check-data-length-during-d.patch * Fix DOS in virtio-gpu-3d (CVE-2017-5857 bsc#1023073) 0070-virtio-gpu-fix-resource-leak-in-vir.patch * Fix cirrus patterncopy checks 0071-cirrus-fix-patterncopy-checks.patch * Fix OOB access in cirrus vga emulation (CVE-2017-2620 bsc#1024972) 0072-cirrus-add-blit_is_unsafe-call-to-c.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8- Fix name of s390x specific sysctl configuration file to end with .conf (bsc#1026583)- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Check that sysfs path exists before running test which requires it. This allows qemu-testsuite to succeed in local build service chroot based package build. 0056-tests-check-path-to-avoid-a-failing.patch- Factory and SLE12-SP3 got a name change in the dtc devel package: libfdt1-devel -> libfdt-devel. Adjust our spec file accordingly.- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Patches added: 0055-linux-user-exclude-cpu-model-code-w.patch- Make sure qemu guest agent is usable as soon as qemu-guest-agent package is installed. The previous post script was still not doing the job. - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Fix potential hang/crash rebooting s390x guest 0053-s390x-kvm-fix-small-race-reboot-vs..patch * Fix s390x linux-user failure since v2.8.0 update 0054-target-s390x-use-qemu-cpu-model-in-.patch- Merge qemu packages from openSUSE and SUSE SLE releases together for the v2.8 qemu update. The qemu.changes file is the openSUSE version with this entry providing CVE, FATE, and bugzilla references from the SUSE SLE qemu package to date (see below) - Updated to v2.8.0: See http://wiki.qemu-project.org/ChangeLog/2.8 * For SUSE SLE-12-SP3, update relates to fate#319684, fate#321331, fate#321335, fate#321339, fate#321349, fate#321857 * For best compatibility, qemu-ifup and kvm_stat scripts now owned by qemu package * Build ipxe roms with gcc6 to maintain SLE legacy migration compatibility requirements * qmp-commands.txt file removed, to resurface in future doc reorganization * qemu-tech.html file merged into other existing doc * trace-events renamed to trace-events-all - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8 * Patches dropped (upstream): 0013-linux-user-lock-tcg.patch 0014-linux-user-Run-multi-threaded-code-.patch 0015-linux-user-lock-tb-flushing-too.patch 0017-linux-user-implement-FS_IOC_GETFLAG.patch 0018-linux-user-implement-FS_IOC_SETFLAG.patch 0034-xen-SUSE-xenlinux-unplug-for-emulat.patch 0039-Fix-tlb_vaddr_to_host-with-CONFIG_U.patch 0041-vmsvga-correct-bitmap-and-pixmap-si.patch 0042-scsi-mptconfig-fix-an-assert-expres.patch 0043-scsi-mptconfig-fix-misuse-of-MPTSAS.patch 0044-scsi-pvscsi-limit-loop-to-fetch-SG-.patch 0045-usb-xhci-fix-memory-leak-in-usb_xhc.patch 0046-scsi-mptsas-use-g_new0-to-allocate-.patch 0047-scsi-pvscsi-limit-process-IO-loop-t.patch 0048-virtio-add-check-for-descriptor-s-m.patch 0049-net-mcf-limit-buffer-descriptor-cou.patch 0050-usb-ehci-fix-memory-leak-in-ehci_pr.patch 0051-xhci-limit-the-number-of-link-trbs-.patch 0052-9pfs-allocate-space-for-guest-origi.patch 0053-9pfs-fix-memory-leak-in-v9fs_link.patch 0054-9pfs-fix-potential-host-memory-leak.patch 0055-9pfs-fix-information-leak-in-xattr-.patch 0056-9pfs-fix-memory-leak-in-v9fs_xattrc.patch 0057-9pfs-fix-memory-leak-in-v9fs_write.patch 0058-char-serial-check-divider-value-aga.patch 0059-net-pcnet-check-rx-tx-descriptor-ri.patch 0060-net-eepro100-fix-memory-leak-in-dev.patch 0061-net-rocker-set-limit-to-DMA-buffer-.patch 0062-net-vmxnet-initialise-local-tx-desc.patch 0063-net-rtl8139-limit-processing-of-rin.patch 0064-audio-intel-hda-check-stream-entry-.patch 0065-virtio-gpu-fix-memory-leak-in-virti.patch 0066-9pfs-fix-integer-overflow-issue-in-.patch slof_xhci.patch * Patches renamed: 0016-linux-user-Fake-proc-cpuinfo.patch -> 0013-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-XXX-disable-fiemap.patch -> 0014-linux-user-XXX-disable-fiemap.patch 0020-slirp-nooutgoing.patch -> 0015-slirp-nooutgoing.patch 0021-vnc-password-file-and-incoming-conn.patch -> 0016-vnc-password-file-and-incoming-conn.patch 0022-linux-user-use-target_ulong.patch -> 0017-linux-user-use-target_ulong.patch 0023-block-Add-support-for-DictZip-enabl.patch -> 0018-block-Add-support-for-DictZip-enabl.patch 0024-block-Add-tar-container-format.patch -> 0019-block-Add-tar-container-format.patch 0025-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0020-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0026-console-add-question-mark-escape-op.patch -> 0021-console-add-question-mark-escape-op.patch 0027-Make-char-muxer-more-robust-wrt-sma.patch -> 0022-Make-char-muxer-more-robust-wrt-sma.patch 0028-linux-user-lseek-explicitly-cast-no.patch -> 0023-linux-user-lseek-explicitly-cast-no.patch 0029-virtfs-proxy-helper-Provide-__u64-f.patch -> 0024-virtfs-proxy-helper-Provide-__u64-f.patch 0030-configure-Enable-PIE-for-ppc-and-pp.patch -> 0025-configure-Enable-PIE-for-ppc-and-pp.patch 0031-AIO-Reduce-number-of-threads-for-32.patch -> 0026-AIO-Reduce-number-of-threads-for-32.patch 0032-dictzip-Fix-on-big-endian-systems.patch -> 0027-dictzip-Fix-on-big-endian-systems.patch 0033-xen_disk-Add-suse-specific-flush-di.patch -> 0028-xen_disk-Add-suse-specific-flush-di.patch 0035-qemu-bridge-helper-reduce-security-.patch -> 0029-qemu-bridge-helper-reduce-security-.patch 0036-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0037-configure-Fix-detection-of-seccomp-.patch -> 0031-configure-Fix-detection-of-seccomp-.patch 0038-linux-user-properly-test-for-infini.patch -> 0032-linux-user-properly-test-for-infini.patch 0040-linux-user-remove-all-traces-of-qem.patch -> 0033-linux-user-remove-all-traces-of-qem.patch 0067-dma-rc4030-limit-interval-timer-rel.patch -> 0034-dma-rc4030-limit-interval-timer-rel.patch 0068-net-imx-limit-buffer-descriptor-cou.patch -> 0035-net-imx-limit-buffer-descriptor-cou.patch 0069-roms-Makefile-pass-a-packaging-time.patch -> 0036-roms-Makefile-pass-a-packaging-time.patch * Patches added: 0037-Raise-soft-address-space-limit-to-h.patch 0038-increase-x86_64-physical-bits-to-42.patch 0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0040-i8254-Fix-migration-from-SLE11-SP2.patch 0041-acpi_piix4-Fix-migration-from-SLE11.patch 0042-Fix-tigervnc-long-press-issue.patch 0043-fix-xen-hvm-direct-kernel-boot.patch 0044-ARM-KVM-Enable-in-kernel-timers-wit.patch 0045-virtio-gpu-call-cleanup-mapping-fun.patch 0046-string-input-visitor-Fix-uint64-par.patch 0047-test-string-input-visitor-Add-int-t.patch 0048-test-string-input-visitor-Add-uint6.patch 0049-tests-Add-QOM-property-unit-tests.patch 0050-tests-Add-scsi-disk-test.patch 0051-virtio-gpu-fix-information-leak-in-.patch 0052-display-cirrus-ignore-source-pitch-.patch ipxe-use-gcc6-for-more-compact-code.patch * SLE patches dropped (accounted for in above listed changes): 0002-qemu-0.9.0.cvs-binfmt.patch 0009-block-vmdk-Support-creation-of-SCSI.patch 0010-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch 0014-linux-user-Ignore-broken-loop-ioctl.patch 0015-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch 0024-linux-user-add-more-blk-ioctls.patch 0025-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-_u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch 0034-Raise-soft-address-space-limit-to-h.patch 0035-increase-x86_64-physical-bits-to-42.patch 0036-vnc-provide-fake-color-map.patch 0037-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0038-i8254-Fix-migration-from-SLE11-SP2.patch 0039-acpi_piix4-Fix-migration-from-SLE11.patch 0040-qtest-Increase-socket-timeout-to-ac.patch 0041-dictzip-Fix-on-big-endian-systems.patch 0043-xen_disk-Add-suse-specific-flush-di.patch 0044-Split-large-discard-requests-from-b.patch 0045-fix-xen-hvm-direct-kernel-boot.patch 0046-xen-introduce-dummy-system-device.patch 0047-xen-write-information-about-support.patch 0048-xen-add-pvUSB-backend.patch 0049-xen-move-xen_sysdev-to-xen_backend..patch 0050-vnc-add-configurable-keyboard-delay.patch 0051-xen-SUSE-xenlinux-unplug-for-emulat.patch 0052-configure-add-echo_version-helper.patch 0053-configure-support-vte-2.91.patch 0054-scsi-esp-fix-migration.patch 0055-hw-arm-virt-mark-the-PCIe-host-cont.patch 0056-xen-when-removing-a-backend-don-t-r.patch 0057-xen-drain-submit-queue-in-xen-usb-b.patch 0058-qcow2-avoid-extra-flushes-in-qcow2.patch 0059-qemu-bridge-helper-reduce-security-.patch 0060-xen-use-a-common-function-for-pv-an.patch 0061-xen_platform-unplug-also-SCSI-disks.patch 0062-virtio-check-vring-descriptor-buffe.patch 0063-net-vmxnet3-check-for-device_active.patch 0064-net-vmxnet-initialise-local-tx-desc.patch 0065-scsi-pvscsi-avoid-infinite-loop-whi.patch 0066-ARM-KVM-Enable-in-kernel-timers-wit.patch 0067-hw-net-Fix-a-heap-overflow-in-xlnx..patch 0068-vmsvga-correct-bitmap-and-pixmap-si.patch 0069-usb-xhci-fix-memory-leak-in-usb_xhc.patch 0070-virtio-add-check-for-descriptor-s-m.patch 0071-net-mcf-limit-buffer-descriptor-cou.patch 0072-usb-ehci-fix-memory-leak-in-ehci_pr.patch 0073-xhci-limit-the-number-of-link-trbs-.patch 0074-9pfs-allocate-space-for-guest-origi.patch 0075-9pfs-fix-memory-leak-in-v9fs_link.patch 0076-9pfs-fix-potential-host-memory-leak.patch 0077-9pfs-fix-memory-leak-in-v9fs_write.patch 0078-char-serial-check-divider-value-aga.patch 0079-net-pcnet-check-rx-tx-descriptor-ri.patch 0080-net-eepro100-fix-memory-leak-in-dev.patch 0081-net-rocker-set-limit-to-DMA-buffer-.patch 0082-net-rtl8139-limit-processing-of-rin.patch 0083-audio-intel-hda-check-stream-entry-.patch 0084-virtio-gpu-fix-memory-leak-in-virti.patch 0085-9pfs-fix-integer-overflow-issue-in-.patch 0086-dma-rc4030-limit-interval-timer-rel.patch 0087-net-imx-limit-buffer-descriptor-cou.patch 0088-target-i386-Implement-CPUID-0xB-Ext.patch 0089-target-i386-present-virtual-L3-cach.patch 0090-migration-fix-inability-to-save-VM-.patch 0091-ui-gtk-Fix-a-runtime-warning-on-vte.patch 0092-gtk-don-t-leak-the-GtkBorder-with-V.patch 0093-xen-fix-ioreq-handling.patch 0094-macio-Use-blk_drain-instead-of-blk_.patch 0095-rbd-Switch-rbd_start_aio-to-byte-ba.patch 0096-virtio-blk-Release-s-rq-queue-at-sy.patch 0097-virtio-blk-Remove-stale-comment-abo.patch 0098-block-reintroduce-bdrv_flush_all.patch 0099-qemu-use-bdrv_flush_all-for-vm_stop.patch 0100-block-backend-remove-blkflush_all.patch 0101-char-fix-missing-return-in-error-pa.patch 0102-rbd-shift-byte-count-as-a-64-bit-va.patch 0103-mirror-use-bdrv_drained_begin-bdrv_.patch 0104-block-curl-Use-BDRV_SECTOR_SIZE.patch 0105-block-curl-Fix-return-value-from-cu.patch 0106-block-curl-Remember-all-sockets.patch 0107-block-curl-Do-not-wait-for-data-bey.patch 0108-virtio-allow-per-device-class-legac.patch 0109-virtio-net-mark-VIRTIO_NET_F_GSO-as.patch 0110-vhost-adapt-vhost_verify_ring_mappi.patch 0111-ivshmem-Fix-64-bit-memory-bar-confi.patch 0112-intel_iommu-fix-incorrect-device-in.patch 0113-9pfs-fix-information-leak-in-xattr-.patch 0114-9pfs-fix-memory-leak-in-v9fs_xattrc.patch 0115-net-mcf-check-receive-buffer-size-r.patch 0116-virtio-gpu-fix-memory-leak-in-updat.patch 0117-virtio-gpu-fix-information-leak-in-.patch 0118-9pfs-adjust-the-order-of-resource-c.patch 0119-9pfs-add-cleanup-operation-in-FileO.patch 0120-9pfs-add-cleanup-operation-for-hand.patch 0121-9pfs-add-cleanup-operation-for-prox.patch 0122-virtio-gpu-call-cleanup-mapping-fun.patch 0123-string-input-visitor-Fix-uint64-par.patch 0124-test-string-input-visitor-Add-int-t.patch 0125-test-string-input-visitor-Add-uint6.patch 0126-tests-Add-QOM-property-unit-tests.patch 0127-tests-Add-scsi-disk-test.patch 0128-usb-ehci-fix-memory-leak-in-ehci_in.patch 0129-usbredir-free-vm_change_state_handl.patch 0130-virtio-gpu-fix-information-leak-in-.patch ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch ipxe-legacy-Fix-building-with-GCC-6.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-util-v5.24-perl-errors-on-redeclare.patch - SLE CVE, FATE, and bugzilla references not otherwise listed in this changelog file. The intent of this list is to indicate that the fix or feature continues the line of inheritance in the development stream of this package. The list is intended to satisfy searches only - refer to the SLE-12-SP2 changelog file for additional details. * fate#314468 fate#314497 fate#315125 fate#315467 fate#317015 fate#317741 fate#317763 fate#318349 fate#319660 fate#319979 fate#321010 * bnc#812983 bnc#869026 bnc#869746 bnc#874413 bnc#875582 bnc#875870 bnc#877642 bnc#877645 bnc#878541 bsc#882405 bsc#886378 bnc#893339 bnc#893892 bnc#895369 bnc#896726 bnc#897654 bnc#905097 bnc#907805 bnc#908380 bnc#914521 bsc#924018 bsc#929339 bsc#932267 bsc#932770 bsc#933981 bsc#936537 bsc#937125 bsc#938344 bsc#940929 bsc#942845 bsc#943446 bsc#944697 bsc#945404 bsc#945987 bsc#945989 bsc#946020 bsc#947159 bnc#953518 bsc#954864 bsc#956829 bsc#957162 bsc#958491 bsc#958917 bsc#959005 bsc#959386 bsc#960334 bsc#960708 bsc#960725 bsc#960835 bsc#961333 bsc#961556 bsc#961691 bsc#962320 bsc#963782 bsc#964413 bsc#970791 bsc#974141 bsc#978158 bsc#979473 bsc#982365 bsc#989655 bsc#991466 bsc#994771 bsc#994774 bsc#996441 bsc#997858 bsc#999212 bsc#1001151 bsc#1002116 bsc#1005353 boo#1007263 bsc#1007769 bsc#1008519 bsc#1009109 bsc#1013285 bsc#1013341 bsc#1013764 bsc#1013767 bsc#1014109 bsc#1014110 bsc#1014111 bsc#1014112 bsc#1014256 bsc#1014514 bsc#1014702 bsc#1015169 bsc#1016779 * CVE-2014-0222 CVE-2014-0223 CVE-2014-3461 CVE-2014-3640 CVE-2014-7840 CVE-2014-8106 CVE-2015-1779 CVE-2015-3209 CVE-2015-4037 CVE-2015-5154 CVE-2015-5225 CVE-2015-5278 CVE-2015-5279 CVE-2015-5745 CVE-2015-6815 CVE-2015-6855 CVE-2015-7295 CVE-2015-7512 CVE-2015-7549 CVE-2015-8345 CVE-2015-8504 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-1568 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-3710 CVE-2016-6490 CVE-2016-6833 CVE-2016-6888 CVE-2016-7116 CVE-2016-7155 CVE-2016-7161 CVE-2016-9381 CVE-2016-9776 CVE-2016-9845 CVE-2016-9846 CVE-2016-9907 CVE-2016-9908 CVE-2016-9911 CVE-2016-9912 CVE-2016-9913 CVE-2016-9921 CVE-2016-9922- Despite the previous entry about re-enabling ceph on Nov 19, 2016 the change wasn't actually done. Do it now.- sgabios-stable-buildid.patch: Use geeko@buildhost- slof_xhci.patch: XHCI fixes (boo#977027)- Recommend x86 ROMs for emulated PCI cards on ppc, arm, others (bsc#1005869, michals)- Tidy SLOF patch boilerplate (michals)- Build with spice on all archs. (boo#1009438, michals)- Refine the approach to producing stable builds in our ROM based packages. All built roms which have hostname or date calls now produce consistent results build to build via patch changes, so remove the hostname and date call workarounds. (bsc#1011213) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0069-roms-Makefile-pass-a-packaging-time.patch sgabios-stable-buildid.patch- Re-enable ceph (rbd) functionality in OBS builds as we've been told the issues which prompted us to disable it are resolved - Address various security/stability issues * Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516) 0041-vmsvga-correct-bitmap-and-pixmap-si.patch * Fix DOS in LSI SAS1068 emulation (CVE-2016-7157 bsc#997860) 0042-scsi-mptconfig-fix-an-assert-expres.patch 0043-scsi-mptconfig-fix-misuse-of-MPTSAS.patch * Fix DOS in Vmware pv scsi interface (CVE-2016-7156 bsc#997859) 0044-scsi-pvscsi-limit-loop-to-fetch-SG-.patch * Fix DOS in USB xHCI emulation (CVE-2016-7466 bsc#1000345) 0045-usb-xhci-fix-memory-leak-in-usb_xhc.patch * Fix OOB access in LSI SAS1068 emulation (CVE-2016-7423 bsc#1000397) 0046-scsi-mptsas-use-g_new0-to-allocate-.patch * Fix DOS in Vmware pv scsi interface (CVE-2016-7421 bsc#999661) 0047-scsi-pvscsi-limit-process-IO-loop-t.patch * Fix NULL pointer dereference in virtio processing (CVE-2016-7422 bsc#1000346) 0048-virtio-add-check-for-descriptor-s-m.patch * Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908 bsc#1002550) 0049-net-mcf-limit-buffer-descriptor-cou.patch * Fix DOS in USB EHCI emulation (CVE-2016-7995 bsc#1003612) 0050-usb-ehci-fix-memory-leak-in-ehci_pr.patch * Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878) 0051-xhci-limit-the-number-of-link-trbs-.patch * Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894) 0052-9pfs-allocate-space-for-guest-origi.patch * Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494) 0053-9pfs-fix-memory-leak-in-v9fs_link.patch * Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893) 0054-9pfs-fix-potential-host-memory-leak.patch * Plug data leak in virtio-9pfs interface (CVE-2016-9103 bsc#1007454) 0055-9pfs-fix-information-leak-in-xattr-.patch * Fix DOS in virtio-9pfs interface (CVE-2016-9102 bsc#1007450) 0056-9pfs-fix-memory-leak-in-v9fs_xattrc.patch * Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495) 0057-9pfs-fix-memory-leak-in-v9fs_write.patch * Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707) 0058-char-serial-check-divider-value-aga.patch * Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557) 0059-net-pcnet-check-rx-tx-descriptor-ri.patch * Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391) 0060-net-eepro100-fix-memory-leak-in-dev.patch * Fix OOB access in Rocker switch emulation (CVE-2016-8668 bsc#1004706) 0061-net-rocker-set-limit-to-DMA-buffer-.patch * Plug data leak in vmxnet3 emulation (CVE-2016-6836 bsc#994760) 0062-net-vmxnet-initialise-local-tx-desc.patch * Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538) 0063-net-rtl8139-limit-processing-of-rin.patch * Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536) 0064-audio-intel-hda-check-stream-entry-.patch * Fix DOS in virtio-gpu (CVE-2016-7994 bsc#1003613) 0065-virtio-gpu-fix-memory-leak-in-virti.patch * Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493) 0066-9pfs-fix-integer-overflow-issue-in-.patch * Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702) 0067-dma-rc4030-limit-interval-timer-rel.patch * Fix DOS in i.MX NIC emulation (CVE-2016-7907 bsc#1002549) 0068-net-imx-limit-buffer-descriptor-cou.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7- Use fixed timestamps and stable build_id in ipxe and other ROMs * Patches added: ipxe-stable-buildid.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patch updated: 0040-linux-user-skip-0-flag-from-proc-se.patch -> 0040-linux-user-remove-all-traces-of-qem.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0040-linux-user-skip-0-flag-from-proc-se.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0039-Fix-tlb_vaddr_to_host-with-CONFIG_U.patch- Document two new options, but leave jemalloc disabled for now - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches dropped: 0034-build-link-with-libatomic-on-powerp.patch * Patches renamed: 0035-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0034-xen-SUSE-xenlinux-unplug-for-emulat.patch 0036-qemu-bridge-helper-reduce-security-.patch -> 0035-qemu-bridge-helper-reduce-security-.patch 0037-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -> 0036-qemu-binfmt-conf-use-qemu-ARCH-binf.patch 0038-configure-Fix-detection-of-seccomp-.patch -> 0037-configure-Fix-detection-of-seccomp-.patch 0039-linux-user-properly-test-for-infini.patch -> 0038-linux-user-properly-test-for-infini.patch- Updated to v2.7.0: See http://wiki.qemu-project.org/ChangeLog/2.7 - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches added: 0039-linux-user-properly-test-for-infini.patch- Use new kvm_stat package where available, else provide updated kvm_stat script.- Update to v2.7.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.7- Updated to v2.7.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.7 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.7 * Patches dropped: 0002-qemu-0.9.0.cvs-binfmt.patch (script rewritten upstream) 0009-block-vmdk-Support-creation-of-SCSI.patch (deprecated) 0014-linux-user-Ignore-broken-loop-ioctl.patch (implemented upstream) 0024-linux-user-add-more-blk-ioctls.patch (more implemented upstream) 0034-qtest-Increase-socket-timeout.patch (increased further upstream) 0036-configure-Enable-libseccomp-for-ppc.patch (enabled upstream) 0038-block-split-large-discard-requests-.patch 0041-xen-introduce-dummy-system-device.patch 0042-xen-write-information-about-support.patch 0043-xen-add-pvUSB-backend.patch 0044-xen-move-xen_sysdev-to-xen_backend..patch 0045-vnc-add-configurable-keyboard-delay.patch 0046-configure-add-echo_version-helper.patch 0047-configure-support-vte-2.91.patch 0048-hw-arm-virt-mark-the-PCIe-host-cont.patch 0050-scsi-esp-fix-migration.patch 0051-xen-when-removing-a-backend-don-t-r.patch 0052-xen-drain-submit-queue-in-xen-usb-b.patch 0053-qcow2-avoid-extra-flushes-in-qcow2.patch 0055-xen-use-a-common-function-for-pv-an.patch ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-legacy-Fix-building-with-GCC-6.patch ipxe-util-v5.24-perl-errors-on-redeclare.patch ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch * Patches renamed: 0010-linux-user-add-binfmt-wrapper-for-a.patch -> 0009-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch -> 0010-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch -> 0011-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch -> 0012-linux-user-binfmt-support-host-bina.patch 0015-linux-user-lock-tcg.patch -> 0013-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch -> 0014-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch -> 0015-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch -> 0016-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch -> 0017-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch -> 0018-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch -> 0019-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch -> 0020-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch -> 0021-vnc-password-file-and-incoming-conn.patch 0025-linux-user-use-target_ulong.patch -> 0022-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch -> 0023-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch -> 0024-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0025-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch -> 0026-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch -> 0027-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch -> 0028-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-__u64-f.patch -> 0029-virtfs-proxy-helper-Provide-__u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch -> 0030-configure-Enable-PIE-for-ppc-and-pp.patch 0035-AIO-Reduce-number-of-threads-for-32.patch -> 0031-AIO-Reduce-number-of-threads-for-32.patch 0037-dictzip-Fix-on-big-endian-systems.patch -> 0032-dictzip-Fix-on-big-endian-systems.patch 0039-xen_disk-Add-suse-specific-flush-di.patch -> 0033-xen_disk-Add-suse-specific-flush-di.patch 0040-build-link-with-libatomic-on-powerp.patch -> 0034-build-link-with-libatomic-on-powerp.patch 0049-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0035-xen-SUSE-xenlinux-unplug-for-emulat.patch 0054-qemu-bridge-helper-reduce-security-.patch -> 0036-qemu-bridge-helper-reduce-security-.patch * Patches added: 0002-qemu-binfmt-conf-Modify-default-pat.patch 0037-qemu-binfmt-conf-use-qemu-ARCH-binf.patch * Package renamed trace-events-all file and linuxboot_dma.bin * Handle building and packaging roms for e1000e and vmxnet3 (Bruce) * Remove ipxe patches which are now enabled upstream (Bruce) * Enable seccomp for s390x (Mark Post): 0038-configure-Fix-detection-of-seccomp-.patch- Update to v2.6.1 a stable, bug-fix-only release (fate#316228) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped (upstreamed): 0041-net-mipsnet-check-packet-length-aga.patch 0042-i386-kvmvapic-initialise-imm32-vari.patch 0043-esp-check-command-buffer-length-bef.patch 0044-esp-check-dma-length-before-reading.patch 0045-scsi-pvscsi-check-command-descripto.patch 0046-scsi-mptsas-infinite-loop-while-fet.patch 0047-vga-add-sr_vbe-register-set.patch 0048-scsi-megasas-use-appropriate-proper.patch 0049-scsi-megasas-check-read_queue_head-.patch 0050-scsi-megasas-null-terminate-bios-ve.patch 0051-vmsvga-move-fifo-sanity-checks-to-v.patch 0052-vmsvga-don-t-process-more-than-1024.patch 0053-block-iscsi-avoid-potential-overflo.patch 0054-scsi-esp-check-TI-buffer-index-befo.patch 0060-scsi-megasas-initialise-local-confi.patch 0065-scsi-esp-check-buffer-length-before.patch 0066-scsi-esp-respect-FIFO-invariant-aft.patch 0067-pci-assign-Move-Invalid-ROM-error-m.patch 0068-Xen-PCI-passthrough-fix-passthrough.patch 0069-scsi-esp-make-cmdbuf-big-enough-for.patch 0071-virtio-error-out-if-guest-exceeds-v.patch * Patches renamed: 0055-xen-introduce-dummy-system-device.patch - > 0041-xen-introduce-dummy-system-device.patch 0056-xen-write-information-about-support.patch - > 0042-xen-write-information-about-support.patch 0057-xen-add-pvUSB-backend.patch - > 0043-xen-add-pvUSB-backend.patch 0058-xen-move-xen_sysdev-to-xen_backend..patch - > 0044-xen-move-xen_sysdev-to-xen_backend..patch 0059-vnc-add-configurable-keyboard-delay.patch - > 0045-vnc-add-configurable-keyboard-delay.patch 0061-configure-add-echo_version-helper.patch - > 0046-configure-add-echo_version-helper.patch 0062-configure-support-vte-2.91.patch - > 0047-configure-support-vte-2.91.patch 0063-hw-arm-virt-mark-the-PCIe-host-cont.patch - > 0048-hw-arm-virt-mark-the-PCIe-host-cont.patch 0064-xen-SUSE-xenlinux-unplug-for-emulat.patch - > 0049-xen-SUSE-xenlinux-unplug-for-emulat.patch 0070-scsi-esp-fix-migration.patch - > 0050-scsi-esp-fix-migration.patch 0072-xen-when-removing-a-backend-don-t-r.patch - > 0051-xen-when-removing-a-backend-don-t-r.patch 0073-xen-drain-submit-queue-in-xen-usb-b.patch - > 0052-xen-drain-submit-queue-in-xen-usb-b.patch 0074-qcow2-avoid-extra-flushes-in-qcow2.patch - > 0053-qcow2-avoid-extra-flushes-in-qcow2.patch 0075-qemu-bridge-helper-reduce-security-.patch - > 0054-qemu-bridge-helper-reduce-security-.patch 0076-xen-use-a-common-function-for-pv-an.patch - > 0055-xen-use-a-common-function-for-pv-an.patch- Temporarily disable ceph (rbd) functionality in OBS due to staging issues.- use upstream solution for building xen-usb.c correctly - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped: 0058-usb-Fix-conditions-that-xen-usb.c-i.patch * Patches added: 0058-xen-move-xen_sysdev-to-xen_backend..patch- Incorporate patch carried in Xen's qemu to get same support as Xen switches to use the qemu package (bsc#953339, bsc#953362, bsc#953518, bsc#984981) 0064-xen-SUSE-xenlinux-unplug-for-emulat.patch - Fix more potential OOB accesses in 53C9X emulation (CVE-2016-5238 bsc#982959) 0065-scsi-esp-check-buffer-length-before.patch 0066-scsi-esp-respect-FIFO-invariant-aft.patch - Avoid "Invalid ROM" error message when it is not appropriate (bsc#982927) 0067-pci-assign-Move-Invalid-ROM-error-m.patch - Fix failure in Xen HVM PCI passthrough (bsc#981925, bsc#989250) 0068-Xen-PCI-passthrough-fix-passthrough.patch - Fix OOB access in 53C9X emulation (CVE-2016-6351 bsc#990835) 0069-scsi-esp-make-cmdbuf-big-enough-for.patch 0070-scsi-esp-fix-migration.patch - Avoid potential for guest initiated OOM condition in qemu through virtio interface (CVE-2016-5403 bsc#991080) 0071-virtio-error-out-if-guest-exceeds-v.patch - Fix potential crashes in qemu from pvusb bugs (bsc#986156) 0072-xen-when-removing-a-backend-don-t-r.patch 0073-xen-drain-submit-queue-in-xen-usb-b.patch - Avoid unneeded flushes in qcow2 which impact performance (bsc#991296) 0074-qcow2-avoid-extra-flushes-in-qcow2.patch - Finally get qemu-bridge-helper the permissions it needs for non- root usage. The kvm group is leveraged to control access. (boo#988279) 0075-qemu-bridge-helper-reduce-security-.patch - Fix pvusb not working for HVM guests (bsc#991785) 0076-xen-use-a-common-function-for-pv-an.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 - Minor spec file formatting fixes- Fix ARM PCIe DMA coherency bug (bsc#991034) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches added: 0063-hw-arm-virt-mark-the-PCIe-host-cont.patch- Clean up the udev ifdeffery to cover systemd as well (boo#860275) - Trigger udev rules also under systemd (boo#989655) - Suppress s390x sysctl in chroot - Ignore s390x sysctl failures (agraf)- Build SLOF for SLE12 now that we have gcc fix (bsc#949000) - Add script for loading kvm module on s390x - Enable seccomp and iscsi support in more configurations - Enable more support for virtio-gpu - Fix /dev/kvm permissions problem with package install and no reboot (bnc#867867) - Remove libtool dependency - Disable more aggressive stack protector for performance reasons - Enable vte to be used again in more configurations (bsc#988855) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches added: 0061-configure-add-echo_version-helper.patch 0062-configure-support-vte-2.91.patch- Remove deprecated patch "work-around-SA_RESTART-race" (boo#982208) - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped: 0002-XXX-work-around-SA_RESTART-race-wit.patch 0003-qemu-0.9.0.cvs-binfmt.patch 0004-qemu-cvs-alsa_bitfield.patch 0005-qemu-cvs-alsa_ioctl.patch 0006-qemu-cvs-alsa_mmap.patch 0007-qemu-cvs-gettimeofday.patch 0008-qemu-cvs-ioctl_debug.patch 0009-qemu-cvs-ioctl_nodirection.patch 0010-block-vmdk-Support-creation-of-SCSI.patch 0011-linux-user-add-binfmt-wrapper-for-a.patch 0012-PPC-KVM-Disable-mmu-notifier-check.patch 0013-linux-user-fix-segfault-deadlock.patch 0014-linux-user-binfmt-support-host-bina.patch 0015-linux-user-Ignore-broken-loop-ioctl.patch 0016-linux-user-lock-tcg.patch 0017-linux-user-Run-multi-threaded-code-.patch 0018-linux-user-lock-tb-flushing-too.patch 0019-linux-user-Fake-proc-cpuinfo.patch 0020-linux-user-implement-FS_IOC_GETFLAG.patch 0021-linux-user-implement-FS_IOC_SETFLAG.patch 0022-linux-user-XXX-disable-fiemap.patch 0023-slirp-nooutgoing.patch 0024-vnc-password-file-and-incoming-conn.patch 0025-linux-user-add-more-blk-ioctls.patch 0026-linux-user-use-target_ulong.patch 0027-block-Add-support-for-DictZip-enabl.patch 0028-block-Add-tar-container-format.patch 0029-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0030-console-add-question-mark-escape-op.patch 0031-Make-char-muxer-more-robust-wrt-sma.patch 0032-linux-user-lseek-explicitly-cast-no.patch 0033-virtfs-proxy-helper-Provide-__u64-f.patch 0034-configure-Enable-PIE-for-ppc-and-pp.patch 0035-qtest-Increase-socket-timeout.patch 0036-AIO-Reduce-number-of-threads-for-32.patch 0037-configure-Enable-libseccomp-for-ppc.patch 0038-dictzip-Fix-on-big-endian-systems.patch 0039-block-split-large-discard-requests-.patch 0040-xen_disk-Add-suse-specific-flush-di.patch 0041-build-link-with-libatomic-on-powerp.patch 0042-net-mipsnet-check-packet-length-aga.patch 0043-i386-kvmvapic-initialise-imm32-vari.patch 0044-esp-check-command-buffer-length-bef.patch 0045-esp-check-dma-length-before-reading.patch 0046-scsi-pvscsi-check-command-descripto.patch 0047-scsi-mptsas-infinite-loop-while-fet.patch 0048-vga-add-sr_vbe-register-set.patch 0049-scsi-megasas-use-appropriate-proper.patch 0050-scsi-megasas-check-read_queue_head-.patch 0051-scsi-megasas-null-terminate-bios-ve.patch 0052-vmsvga-move-fifo-sanity-checks-to-v.patch 0053-vmsvga-don-t-process-more-than-1024.patch 0054-block-iscsi-avoid-potential-overflo.patch 0055-scsi-esp-check-TI-buffer-index-befo.patch 0056-xen-introduce-dummy-system-device.patch 0057-xen-write-information-about-support.patch 0058-xen-add-pvUSB-backend.patch 0059-usb-Fix-conditions-that-xen-usb.c-i.patch 0060-vnc-add-configurable-keyboard-delay.patch 0061-scsi-megasas-initialise-local-confi.patch * Patches added: 0002-qemu-0.9.0.cvs-binfmt.patch 0003-qemu-cvs-alsa_bitfield.patch 0004-qemu-cvs-alsa_ioctl.patch 0005-qemu-cvs-alsa_mmap.patch 0006-qemu-cvs-gettimeofday.patch 0007-qemu-cvs-ioctl_debug.patch 0008-qemu-cvs-ioctl_nodirection.patch 0009-block-vmdk-Support-creation-of-SCSI.patch 0010-linux-user-add-binfmt-wrapper-for-a.patch 0011-PPC-KVM-Disable-mmu-notifier-check.patch 0012-linux-user-fix-segfault-deadlock.patch 0013-linux-user-binfmt-support-host-bina.patch 0014-linux-user-Ignore-broken-loop-ioctl.patch 0015-linux-user-lock-tcg.patch 0016-linux-user-Run-multi-threaded-code-.patch 0017-linux-user-lock-tb-flushing-too.patch 0018-linux-user-Fake-proc-cpuinfo.patch 0019-linux-user-implement-FS_IOC_GETFLAG.patch 0020-linux-user-implement-FS_IOC_SETFLAG.patch 0021-linux-user-XXX-disable-fiemap.patch 0022-slirp-nooutgoing.patch 0023-vnc-password-file-and-incoming-conn.patch 0024-linux-user-add-more-blk-ioctls.patch 0025-linux-user-use-target_ulong.patch 0026-block-Add-support-for-DictZip-enabl.patch 0027-block-Add-tar-container-format.patch 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0029-console-add-question-mark-escape-op.patch 0030-Make-char-muxer-more-robust-wrt-sma.patch 0031-linux-user-lseek-explicitly-cast-no.patch 0032-virtfs-proxy-helper-Provide-__u64-f.patch 0033-configure-Enable-PIE-for-ppc-and-pp.patch 0034-qtest-Increase-socket-timeout.patch 0035-AIO-Reduce-number-of-threads-for-32.patch 0036-configure-Enable-libseccomp-for-ppc.patch 0037-dictzip-Fix-on-big-endian-systems.patch 0038-block-split-large-discard-requests-.patch 0039-xen_disk-Add-suse-specific-flush-di.patch 0040-build-link-with-libatomic-on-powerp.patch 0041-net-mipsnet-check-packet-length-aga.patch 0042-i386-kvmvapic-initialise-imm32-vari.patch 0043-esp-check-command-buffer-length-bef.patch 0044-esp-check-dma-length-before-reading.patch 0045-scsi-pvscsi-check-command-descripto.patch 0046-scsi-mptsas-infinite-loop-while-fet.patch 0047-vga-add-sr_vbe-register-set.patch 0048-scsi-megasas-use-appropriate-proper.patch 0049-scsi-megasas-check-read_queue_head-.patch 0050-scsi-megasas-null-terminate-bios-ve.patch 0051-vmsvga-move-fifo-sanity-checks-to-v.patch 0052-vmsvga-don-t-process-more-than-1024.patch 0053-block-iscsi-avoid-potential-overflo.patch 0054-scsi-esp-check-TI-buffer-index-befo.patch 0055-xen-introduce-dummy-system-device.patch 0056-xen-write-information-about-support.patch 0057-xen-add-pvUSB-backend.patch 0058-usb-Fix-conditions-that-xen-usb.c-i.patch 0059-vnc-add-configurable-keyboard-delay.patch 0060-scsi-megasas-initialise-local-confi.patch - Enable ceph (rbd) support for aarch64- Enable ceph (rbd) support- Fix OVMF iPXE network menu (bsc#986033, boo#987488) ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch- Fix host information leak to guest in MegaRAID SAS 8708EM2 Host Bus AdapterMegaRAID SAS 8708EM2 Host Bus Adapter emulation support (CVE-2016-5105 bsc#982017) * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 0061-scsi-megasas-initialise-local-confi.patch- Address various security/stability issues * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Fix OOB access in megasas emulated device (CVE-2016-5106 bsc#982018) 0049-scsi-megasas-use-appropriate-proper.patch * Fix OOB access in megasas emulated device (CVE-2016-5107 bsc#982019) 0050-scsi-megasas-check-read_queue_head-.patch * Fix OOB access in megasas emulated device (CVE-2016-5337 bsc#983961) 0051-scsi-megasas-null-terminate-bios-ve.patch * Correct the vmvga fifo access checks (CVE-2016-4454 bsc#982222) 0052-vmsvga-move-fifo-sanity-checks-to-v.patch * Fix potential DoS issue in vmvga processing (CVE-2016-4453 bsc#982223) 0053-vmsvga-don-t-process-more-than-1024.patch * Fix heap buffer overflow flaw when iscsi protocol is used (CVE-2016-5126 bsc#982285) 0054-block-iscsi-avoid-potential-overflo.patch * Fix OOB access in 53C9X emulation (CVE-2016-5338 bsc#983982) 0055-scsi-esp-check-TI-buffer-index-befo.patch - Add support to qemu for pv-usb under Xen (fate#316612) 0056-xen-introduce-dummy-system-device.patch 0057-xen-write-information-about-support.patch 0058-xen-add-pvUSB-backend.patch 0059-usb-Fix-conditions-that-xen-usb.c-i.patch - Provide ability to rate limit keyboard events from the vnc server. This is part of the solution to an issue affecting openQA testing, where characters are lost, resulting in unexpected failures (bsc#974914) 0060-vnc-add-configurable-keyboard-delay.patch- Adjust to parallel changes in virglrenderer packages - no longer "BuildRequires" virglrenderer directly, just the devel package.- Fix build compatibility with gcc6 wrt ipxe rom where compiler warnings are treated as errors. ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-legacy-Fix-building-with-GCC-6.patch - Fix ipxe build script which fails under perl v5.24 ipxe-util-v5.24-perl-errors-on-redeclare.patch - Specify build time disk space requirements for ppc64 and ppc64le- Add sysctl script and %post on s390x to allow kvm usage (bsc#975331)- Address various security/stability issues * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Fix OOB access in MIPSnet emulated controller CVE-2016-4002 (bsc#975136) 0042-net-mipsnet-check-packet-length-aga.patch * Fix possible host data leakage to guest from TPR access CVE-2016-4020 (bsc#975700) 0043-i386-kvmvapic-initialise-imm32-vari.patch * Avoid OOB access in 53C9X emulation CVE-2016-4439 (bsc#980711) 0044-esp-check-command-buffer-length-bef.patch * Avoid OOB access in 53C9X emulation CVE-2016-4441 (bsc#980723) 0045-esp-check-dma-length-before-reading.patch * Avoid OOB access in Vmware PV SCSI emulation CVE-2016-4952 (bsc#981266) 0046-scsi-pvscsi-check-command-descripto.patch * Avoid potential DoS in LSI SAS1068 emulation CVE-2016-4964 (bsc#981399) 0047-scsi-mptsas-infinite-loop-while-fet.patch * Fix regression in vga behavior - introduced in v2.6.0 CVE-2016-3712 (bsc#978160) 0048-vga-add-sr_vbe-register-set.patch- Update to v2.6.0: See http://wiki.qemu-project.org/ChangeLog/2.6 - Enable SDL2, virglrenderer (for use with virtio-gpu), xfsctl, and tracing using default log backend - Build efi pxe roms on x86_64- Check modules for conflicting release versions - Suggest recently added block modules- Bump copyright in qemu.spec.in - Enable libiscsi for Factory - Enable seccomp for ppc64le as well- Update to v2.6.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.6 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Patches dropped (upstreamed): 0041-tests-Use-correct-config-param-for-.patch * Patches renamed: 0042-build-link-with-libatomic-on-powerp.patch -> 0041-build-link-with-libatomic-on-powerp.patch- Partially revert the last change's cleanup - Indicate SUSE version- Update to v2.6.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.6 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.6 * Accept every size in DISCARD request from a guest (bsc#964427) 0039-block-split-large-discard-requests-.patch * Recognize libxl flag to disable flush in block device (bsc#879425) 0040-xen_disk-Add-suse-specific-flush-di.patch * Use correct flag for crypto tests 0041-tests-Use-correct-config-param-for-.patch * Fix build on powerpc: 0042-build-link-with-libatomic-on-powerp.patch * Patches dropped (upstreamed): seabios_checkrom_typo.patch seabios_avoid_smbios_signature_string.patch- Disable vte for Leap, fixing build- Don't drop u-boot.e500 yet - breaks testsuite- Re-enable libcacard support - Clean up configured features- Clean up qemu-tools libcacard Provides/Obsoletes - separate again - Drop u-boot.e500 - being packaged as u-boot-ppce500- Update to v2.5.0: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Patches dropped (upstreamed): 0039-tests-Fix-check-report-qtest-target.patch- Fix build on openSUSE 13.2- Fix testsuite on 32bit systems (bsc#957379)- Update to v2.5.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Rebase libseccomp enablement: 0037-Revert-Revert-seccomp-tests-that-al.patch -> 0037-configure-Enable-libseccomp-for-ppc.patch * Provide qemu-ga and qemu-ipxe for qemu-testsuite - Clean up qemu-ksm recommendation- Fix SLE11 build by fixing systemd conditionalization (from olh)- Update to v2.5.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.5 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.5 * Patches dropped (upstream): 0038-tcg-aarch64-Fix-tcg_out_qemu_-ld-st.patch 0039-tests-Unique-test-path-for-string-v.patch gcc5-ipxe-add-missing-const-qualifiers.patch gcc5-ipxe-ath9k-Remove-confusing-logic-inversion-in-an-ANI-var.patch SLOF_ppc64le.patch * Patch renamed: 0040-dictzip-Fix-on-big-endian-systems.patch -> 0038-dictzip-Fix-on-big-endian-systems.patch * --enable-smartcard-nss -> --enable-smartcard Needs an external libcacard, so drop it for now. * Drop --enable-vnc-tls * Require xz-devel for ipxe build * Package qemu-ga(8) man page * Package ivshmem-{client,server} * Patches added: 0039-tests-Fix-check-report-qtest-target.patch- Add systemd unit file and udev rules for qemu guest agent - taken from the SLE12 / Leap package, see boo#955707- Add _constraints file (based on work by kenljohnson)- Enable SLOF build for ppc64le, too, now (bsc#949000, bsc#949016)- Allow building SLOF on ppc64le (bsc#949016) SLOF_ppc64le.patch - Add two checks for DictZip and tar qemu-img behavior (bsc#945778) * Clean up qemu-testsuite build/installation- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix endianness issues in DictZip block driver (bsc#937572, bsc#945778) 0027-block-Add-support-for-DictZip-enabl.patch 0028-block-Add-tar-container-format.patch 0040-dictzip-Fix-on-big-endian-systems.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix qemu-testsuite for glib2-2.46.0 by assuring uniqueness of paths 0039-tests-Unique-test-path-for-string-v.patch- Build SLOF on ppc64 (bsc#949016, thanks to k0da) * Simplify x86 fw logic while at it - No need to enable KVM for armv6hl - Add notice about pre_checkin.sh to update_git.sh- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Fix aarch64 TCG: 0038-tcg-aarch64-Fix-tcg_out_qemu_-ld-st.patch- Update to v2.4.0: See http://wiki.qemu-project.org/ChangeLog/2.4- Update to v2.4.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.4 * Provide qemu-img symlink instead of passing QTEST_QEMU_IMG- Update to v2.4.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.4 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.4 * Patches dropped: 0037-linux-user-Allocate-thunk-size-dyna.patch 0039-s390x-Fix-stoc-direction.patch 0040-s390x-Add-interlocked-access-facili.patch 0041-fdc-force-the-fifo-access-to-be-in-.patch 0042-rules.mak-Force-CFLAGS-for-all-obje.patch 0043-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch 0044-hw-arm-boot-Increase-fdt-alignment.patch * Patches renamed: 0038-Revert-Revert-seccomp-tests-that-al.patch -> 0037-Revert-Revert-seccomp-tests-that-al.patch * Package new vgabios-virtio.bin * target-x86_64.conf was dropped * Add qemu-block-dmg module sub-package * Set QTEST_QEMU_IMG variable for ahci-test * --enable-quorum and --enable-vnc-ws are no longer available- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix -kernel boot for AArch64 * Patches added: 0044-hw-arm-boot-Increase-fdt-alignment.patch- Use libusb-1_0-devel as buildrequires, not the old unused compatibility layer in libusb-devel- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix qemu2 cow caching (bsc#933132) * Patches added: 0043-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch- Patch queue updated from git://github.com/jirislaby/qemu.git opensuse-2.3 * Patches added: 0042-rules.mak-Force-CFLAGS-for-all-obje.patch gcc5-ipxe-add-missing-const-qualifiers.patch gcc5-ipxe-ath9k-Remove-confusing-logic-inversion-in-an-ANI-var.patch- Fix CVE-2015-3456 (boo#929339) 0041-fdc-force-the-fifo-access-to-be-in-.patch - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches added: 0040-s390x-Add-interlocked-access-facili.patch - Disable dependency on libnuma for s390x (not available in SLE12)- Update to v2.3.0: See http://wiki.qemu-project.org/ChangeLog/2.3 - Disable iotests for now- Update to v2.3.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.3- Update seabios_avoid_smbios_signature_string.patch with version applied upstream- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix s390x stoc instructions 0039-s390x-Fix-stoc-direction.patch- Update to v2.3.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (applied upstream): 0037-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch * Patches renamed: 0038-linux-user-Allocate-thunk-size-dyna.patch -> 0037-linux-user-Allocate-thunk-size-dyna.patch * Revert -rc3 change to disable seccomp on non-x86 architectures 0038-Revert-Revert-seccomp-tests-that-al.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 - Fix qemu-linux-user on powerpc * Patches added: 0038-linux-user-Allocate-thunk-size-dyna.patch- Split off qemu-testsuite.spec * Package check-report.html and check-report.xml * Enable quick iotests - Dropped 0030-net-Warn-about-default-MAC-address.patch The warning is relevant only for bridged setups, not for the default SLIRP based -net user / -netdev user setup, and it breaks output expectations of some iotests. * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches renamed: 0031-console-add-question-mark-escape-op.patch -> 0030-console-add-question-mark-escape-op.patch 0032-Make-char-muxer-more-robust-wrt-sma.patch -> 0031-Make-char-muxer-more-robust-wrt-sma.patch 0033-linux-user-lseek-explicitly-cast-no.patch -> 0032-linux-user-lseek-explicitly-cast-no.patch 0034-virtfs-proxy-helper-Provide-__u64-f.patch -> 0033-virtfs-proxy-helper-Provide-__u64-f.patch 0035-configure-Enable-PIE-for-ppc-and-pp.patch -> 0034-configure-Enable-PIE-for-ppc-and-pp.patch 0036-qtest-Increase-socket-timeout.patch -> 0035-qtest-Increase-socket-timeout.patch 0037-AIO-Reduce-number-of-threads-for-32.patch -> 0036-AIO-Reduce-number-of-threads-for-32.patch 0038-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch -> 0037-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch - Re-enable glusterfs on Factory (updated from v3.6.1 to v3.6.2) - Re-enable seccomp for armv7l (libseccomp submission pending)- Suppress seccomp for Factory armv7l (broken in libseccomp v2.2.0) - Disable glusterfs explicitly on Factory, SLE12 and before 13.1- Enable glusterfs and package as qemu-block-gluster glusterfs post-v3.5.3 and v3.6.1/v3.6.2 have switched the glusterfs-api.pc version incompatibly, so only 13.1+13.2 for now - Use macro for module Conflicts- Tidy configure options: * Move --enable-modules to build options * Sort libusb alphabetically * Explicitly enable attr, bluez, fdt, lzo, tpm, vhdx, vhost-net, vnc, xen-pci-passthrough * Enable bzip2 * Enable libssh2 where possible and package as qemu-block-ssh * Enable numa where a compatible numactl is available * Enable quorum where a compatible gnutls is available * Enable snappy where possible * Prepare to enable glusterfs * Explicitly enable the nop tracing backend (to be revisited) * Explicitly disable Archipelago, as we don't have libxseg and it's incompatibly GPL-3.0+ * Explicitly disable libiscsi, libnfs, netmap and rbd as we don't have packages * Drop deprecated --enable-virtio-blk-data-plane (now default)- Fix 64-bit TCG stores on 32-bit Big Endian hosts (ppc) 0038-tcg-tcg-op.c-Fix-ld-st-of-64-bit-va.patch * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3- Update to v2.3.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (upstreamed): 0038-fw_cfg-test-Fix-test-path-to-includ.patch 0039-rcu-tests-fix-compilation-on-32-bit.patch- make check was failing due to a bogus SMBIOS signature being encountered within SeaBIOS. Avoid having that signature stored randomly within the SeaBIOS image. * seabios_avoid_smbios_signature_string.patch- Build x86 firmware only from 13.1 on (11.4 was broken, surpassing 128 KB) - Update to v2.3.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.3 * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches dropped (upstreamed): 0038-linux-user-Fix-emulation-of-splice-.patch 0039-ide-fix-cmd_write_pio-when-nsectors.patch 0040-ide-fix-cmd_read_pio-when-nsectors-.patch 0041-ahci-Fix-sglist-offset-manipulation.patch 0042-ahci-test-improve-rw-buffer-pattern.patch 0045-linux-user-fix-broken-cpu_copy.patch * Patches renamed: 0043-fw_cfg-test-Fix-test-path-to-includ.patch -> 0038-fw_cfg-test-Fix-test-path-to-includ.patch 0044-rcu-tests-fix-compilation-on-32-bit.patch -> 0039-rcu-tests-fix-compilation-on-32-bit.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Patches added: 0045-linux-user-fix-broken-cpu_copy.patch- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * Make test path for fw_cfg-test unique (including architecture) 0043-fw_cfg-test-Fix-test-path-to-includ.patch * Fix rcu tests build on ppc (undefined reference to `__sync_fetch_and_add_8') 0044-rcu-tests-fix-compilation-on-32-bit.patch - Fix typo in SeaBIOS size check seabios_checkrom_typo.patch- Update to v2.3.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.3 * Updated update_git.sh accordingly * Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.3 * seabios_128kb.patch: Added patch to squeeze SeaBIOS into 128 KB with our gcc 4.8.3 (brogers@suse.com) - Renamed 0030-Legacy-Patch-kvm-qemu-preXX-report-.patch to 0030-net-Warn-about-default-MAC-address.patch: Suppress warning for accel=qtest, to sanitize make check results. - Added patches to fix ahci-test: 0039-ide-fix-cmd_write_pio-when-nsectors.patch 0040-ide-fix-cmd_read_pio-when-nsectors-.patch 0041-ahci-Fix-sglist-offset-manipulation.patch 0042-ahci-test-improve-rw-buffer-pattern.patch- Update company name in spec file templates - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches added: 0038-linux-user-Fix-emulation-of-splice-.patch- Add user kvm when installing guest-agent. - Use macro to update udev_rules when available- Fix packaging of e500 U-Boot - Don't rely on wildcard with explicit excludes- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches added: 0037-AIO-Reduce-number-of-threads-for-32.patch- Update to v2.2.0: See http://wiki.qemu-project.org/ChangeLog/2.2 * Updated DictZip and Tar block backends accordingly - Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.2 * Patches dropped: 0015-target-arm-linux-user-no-tb_flush-o.patch (tb_flush() not called) 0037-tests-Don-t-run-qom-test-twice.patch (superseded) 0039-linux-user-Cast-validity-checks-on-.patch (helper function introduced) 0040-linux-user-Convert-blkpg-to-use-a-s.patch (upstreamed) * Patched renumbered: 0016-linux-user-Ignore-broken-loop-ioctl.patch -> 0015-linux-user-Ignore-broken-loop-ioctl.patch 0017-linux-user-lock-tcg.patch -> 0016-linux-user-lock-tcg.patch 0018-linux-user-Run-multi-threaded-code-.patch -> 0017-linux-user-Run-multi-threaded-code-.patch 0019-linux-user-lock-tb-flushing-too.patch -> 0018-linux-user-lock-tb-flushing-too.patch 0020-linux-user-Fake-proc-cpuinfo.patch -> 0019-linux-user-Fake-proc-cpuinfo.patch 0021-linux-user-implement-FS_IOC_GETFLAG.patch -> 0020-linux-user-implement-FS_IOC_GETFLAG.patch 0022-linux-user-implement-FS_IOC_SETFLAG.patch -> 0021-linux-user-implement-FS_IOC_SETFLAG.patch 0023-linux-user-XXX-disable-fiemap.patch -> 0022-linux-user-XXX-disable-fiemap.patch 0024-slirp-nooutgoing.patch -> 0023-slirp-nooutgoing.patch 0025-vnc-password-file-and-incoming-conn.patch -> 0024-vnc-password-file-and-incoming-conn.patch 0026-linux-user-add-more-blk-ioctls.patch -> 0025-linux-user-add-more-blk-ioctls.patch 0027-linux-user-use-target_ulong.patch -> 0026-linux-user-use-target_ulong.patch 0028-block-Add-support-for-DictZip-enabl.patch -> 0027-block-Add-support-for-DictZip-enabl.patch 0029-block-Add-tar-container-format.patch -> 0028-block-Add-tar-container-format.patch 0030-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0029-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0031-Legacy-Patch-kvm-qemu-preXX-report-.patch -> 0030-Legacy-Patch-kvm-qemu-preXX-report-.patch 0032-console-add-question-mark-escape-op.patch -> 0031-console-add-question-mark-escape-op.patch 0033-Make-char-muxer-more-robust-wrt-sma.patch -> 0032-Make-char-muxer-more-robust-wrt-sma.patch 0034-linux-user-lseek-explicitly-cast-no.patch -> 0033-linux-user-lseek-explicitly-cast-no.patch 0035-virtfs-proxy-helper-Provide-__u64-f.patch -> 0034-virtfs-proxy-helper-Provide-__u64-f.patch 0036-configure-Enable-PIE-for-ppc-and-pp.patch -> 0035-configure-Enable-PIE-for-ppc-and-pp.patch 0038-qtest-Increase-socket-timeout.patch -> 0036-qtest-Increase-socket-timeout.patchqemu-s390h02-armsrv3 17161831818.2.48.2.4-150600.3.3.18.2.4-150600.3.3.18.2.4qemu-system-s390xqemu-s390xsupported.txts390-ccw.imgs390-netboot.img/usr/bin//usr/share/doc/packages//usr/share/doc/packages/qemu-s390x//usr/share/qemu/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33968/SUSE_SLE-15-SP6_Update/2cbb4ff649d2809f0bf549170a3496a7-qemu.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=8506a4e5c8242b6584965581c5ce0aa644a1a826, for GNU/Linux 3.7.0, strippeddirectoryASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=4697e12aff48b7461c8cfb51b1d0567c8df7e27b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=ea9801907d53798ce5cd40f65014dd18234449d3, strippedBCBRR=R-R'R&R2R R;RR"R#R8R7R6R@RRR)R+R*RRRR0RRRR R RR R RR RR.RRR/R?RR3RR:R9R$R4R(R!RRRR1RRAR5R>RR?QZPgU1#nz$D:儚Cpˆ$9 ˺AֻȗQbD4Tq4졎zc5nՋ*yklb q9w"O{/W:[! iAYILg:0GT˥Z²Pޡf_X$v2[zl`{ߕI`+ͱ 5_* : *g+{]tƄb,̤y KȰdSo/VS iԨJvMlYhD(4+Fp{ 8bx9-Qڷ@U" oj+!+]&FŕYP}8垨gڶ;zRU',2*+g$-JWRfU gf"E?5{` XR?J,m>w h"⣳'4_"o54 [DWL8v95lI^ÇAo2T"JIG7u^ȱlej'\iƼ13`yscK"k#ZջL X W"#.Ӹc' } 3g࠵}q辻$:n@yvl2nor)]e'_hs\w$bǹҧ~2!sCm%[QRzl2e2 qbW{qډ`˵cN?{I}n*@i)F쮐t}ݹy%N/YҪ0;Ꝇ0#76$0e\RD9VH,'դچu/?u?^@l d^<u#fJt27]3hp--<6)\!&C'گ}%(x瓓N\f\ոƽ7-"LvwA 7b$w9F6lÐT0_F&+˼3kYy6 j ?\͉gf~)`SU첽GIT}T0E|qܐ+vcь&KP)/h`ic>*mv蠁P>>]7tը/<%FL38h;!x?iH6&ڭmo݉90Z3O ]Ƌo9V^Aܧ nPGd$x?RC ) z'k`EP DB)i}yYbjm请IAKɞƛo81k.~dLr1/{ ΂ܨISKD6r1&.Sr>J֩WR bUq\m5EfKƈ JQ1fCFk|hx( [sJ*v%NdyꞏK6!i/! S4{%܅zQsL9ZfOV:T6ߨ[bwl[hAlbGazߊ_LKPX8NK+UU1:*2 uk D4c^%R%z{` v,2MvJ,j%|6W/uy)F%8)iP3E$}dUp[RO=Iץ;JՌ|7nx ZK'C#gZ\j>;y¯4 ezlH#S%C:ˢ΁!߰UL6},$0'->LLk-NV8jg͙ Q׊wP\$QGžDX&;jzJ/wm@U!CiЯet4];[Żjl'&R]AȺWuH, ItBj]͊ayp?;PWj6 0.q ~͂8Pv {eVt#_ԓcJ3_맧ZD{"WV[JIV>"BQwgr}h{6~K]Oo9}j"_3<-Xen=y4h "T]׿prE0n M]UBYb&6˾!WS4 v*V,s XQq]%A[bDTaQf}&l M@ }N|B0rnz j h,E}YomZX.(7Gy͌πEPGI8P,#^/_wh GO6+XgvBq_"}-(tf qe] FP'wӾK*ʏab똉/j\?lg\.K؟ TYmGduyiLN.HS|2`6tCJa"!9.B* b?ˌ./gbq9r  Vds/ޑؿj-m|ayIc\j>t~>S#@%_i{ڝd,ꄽ ?6ܳw d}|P3Ԛ$߭rjPW6bBx/CS^|>+Hێ6`<`/fyTJP0&9;UE |-\9MzB)djs_?g2t&ƵܜB0&̐mJl۱9,aI|'窻f¶eP"ӭ Fxe.9ἲ Bi_vȟ;It`epYYEj4C) q1PwNEgl"-&TȜr`J':vW*'"29{oa7=}2B/BǍ?~Mܠu"d%%&G*XRԪ~Cn| ({0L5+c 3:ufQY~n$-(t ;?xD'7~9^d@\'@'JﵱߑE^W('Igxi]=e3R/7qoA/XTRww'/a7+@"N炯@VaX1|̷~rǐ-y)'r 3oas82Đlp"PcqnA?}K!fe*:X>@($be?RBAw2gv^@Q 5u` +;ӳܾ[^kˇ XY h;l ,  zHu95q6kZ o n!>8}"oZ{D}k 5%)v+S$a.yφŽ.J3Xpz+ 6}|OedLՎU<y! 9q*IqD}~v(U׬5_(Hv®{c + 96{34ۻ`d /­NڼO*l{-Slkpc/ۃ[֒='Mu3>͜on:A8KBwXaj CNÏ!Tz(`~tЯ~7z X |ִtw$? zݘfg󃋴Kτ)p߭}~[f†۱=-/!9VۈKyg%d9`?F (]ySRj~|ځ[q[UQU7RF_ K\”NbŦFU??x,_paوA.q5Fd.zA ]uW?r#`ZV7%OR(vpw^S Q'!-#R, vt=C_W&i$u}}eu~ ,L7BѲxnV%ʷ[RJX1&u ji1|!pipE{e]M$|c nT!{5&G?8{zwOM wOH  0(<tT[=ht2Bzifʅ!Ęo5d/k?M4\-:g%U\$ 5 I8LJKaiNc31!3E;pP=8D(RhƵ '%,DTįneILʜ£}K!6t40LRwo GLyQ2={opAPv OD|d~|TWh-I~aH ˖.|]c l%{CUO<_~\{ yvUE6 6\bb;GĻGʴ+u"?G\9{@=X܂!.q߮QB/+? ;P Gqaep`:V7D\3v[7#_mramiq#a2?X D?ݜb?6 Y|zL>sԤER]axE1W˸&x@؄jlԭΈMRѠPZq'lួA!iX|mG"dKq!AG:~k]!#lQe//2?yck%_AaxZ'Hz}}*m ,-_L4RDl'WvbkH9eK1)YcgJÇ??8^B@GXte~r3R@V>Aj*vl`Hsp$~9? w\0޿VDDf烟ir5蠳L0qͷf](CvqլMt~;񝾝,)Yk΀fb+{bcZݡ9gd<4c7T~ +[hƮi&mÜ|e8p&0B:&G}\2le*#^֌,y¬fOUyzA䒢Ĭ('>1G=/oEl3C| +()A _^4,YGMVg6PP 7xyw9.N%uBHj;`sUlE!2iͯk(~}~JĿ\v"qT;+͟%+vIƎ[8-!fhڒu طpdyhFAeDۜvEOxp< @OAq)fU;WR,hybB,@zVApA+yw@Ϻ`fnH[dd>c?"djhoV+YABOLdyH'4ܐ{cg@ Fhmi*XJ 4[!zQJSf\p&QWO:ڨ =rK;@Tiqe%~3߅>᯳'- #LL=jb7ΤbE'+BA,sQD,X wT`> V*ץLeHMlFPUa<@TtyXbY{@Rq0\G ' \QLDy?0Z֎@D36L#U-ߘ  )ʃz@(W vܙj[/CX.=!WnN` &50<Fġ)⤑9䱠G egD .,t?Ƒ|2-رpd}1̻Q,LQY4Į Yjjd9`{:͟"1mǽk R쉩 xBOId0Uq爵ǟeTL O89G,rfiՓimϋ`)˕Љh Ib;~#N nL_w}xL/3B{I.@Qƿ,p&c{ǦNk\b.c܉CNOa_̍:mMh(0a`$2Smf{ I`$b^6e58񍶉C"[+Iϻ]KI}+fc-8v:uWF/' Z'pvIVsbY'Hpɺ"LR&{6qMCU[>.-W*H9khVoA&2"1ѧpD_vn^\F{KolajaYѿ&j|éAdÂrə8M޷bnt=㗬K*IRrr梼8dtI=u#b Dģ 1*@#ed ikLs"5H:PrO- n2Gv<#)H}[yOKg330M癐 eexP4>!`1Rџp2Xī gDSHr25MjѳC@n|}4MnZAkg-0.wf?ͪ'>p{l2η[[ Lиs xBȐU6qYT@XqοkB(8h U=US۝ڜH K% O+kxIJ0|F"A'm"e ^,p%zI7<*{6ڡ]$gx|f&JR(,ؖcL×MbbByfFL7;6ٶR?~2K5ØȐPy{cN^B"{M6.d wt{.ؕ,OZ&0]G/[ctޟn^Hۢ.ftI-sbQ"x&l !- jtHz芨c}>^= -] M^{je%2gHx| @ أ$b8%C`S35ѷ3^hmPB&Vjx V@,(UJXj>[n$6!+*LI@f3*uJ鯾rVۄ՞] 8]ǩ]ʀ>hhbsuPd>qv"Eܥ(^}]%^D*a;{ja*-;TMWё V*+˜Dpc)nsJGoG%֦VyXp s?$ _L*Ӗ*☡mU.jGWE3Wl,4pTIΆTB)=PPtPezB2a{DvWp3e5rLdA-` wa+YM C\ElBՕ#[:Dml'v18,+,A2ɕAa{u&aN]NdАGG Kk2g sڧPaZ'U0syIN|܀2D\oPttM =YX4؛QevjM"E+Μ?5AI$\ .H2E14^IP=S*lPP6vo hClƭQh2o2]Nۙ34偫3Ѓ=|O%UD7t.VVCp2Wmx};XsPTO'^$5e(=KʹM'D,0 wHIHeRpv&n 79IKKsr\XD{qb(c sIa񮦩%rtpw蟙` Z>X*p]^QDdCߏU% oÁ)NʷrV%Rg:T!X-F3Oƽ1KuD䧐 oӴ(h\%4?8H֖<يW܄[<6KxnRf7pT]I6Y{;>D ē,7$! ZR}w{q0NhVdM}Nmѹ:X1PH+Fxn]f+Y[&B\k&9 G*eO}]g. Hj2.7"b.Yv,B/* 9g)ET'f"2RzRQ$~µsshrg~."f;'Yabѐ2 TPOT!Y m)|8a%+ћ8bd/dE&#iʜ%N_8,$eU~rb"]J|Lq]`5 XpjA.զCHQMyu qvJ9 YZY {NU7/,oyhfF 7{^D12))*oAw* dGr u υP]72kAAiZF+􁄁v ͹y@^[,JgX%]mP'wƂLKQ7zǼ%@"HۯO`wkopceSG=-g.Y(]*WZdb)Ǒ<^C]; ͅt]-}goH9p/D7DkWbx wc_`hKMUe]77s3ZlЈ1/L(8ӠPZ5PԐ&hv.ȚY\`)Ѿ%Ǩqj?g+w5! 8$$R=GkA«K:<͟,@Fk`4Ikt!^Ǚ,c)qIm[K ЍK 'iՃ'v׌ai8I&? &EXбhٲ©D4y8ңx^~sjRmGu]*K:龖-jSP$-& M]}16[@pSҬ2# B}Lh&z\i8~ܝ> k3 El͉4י3¿WuCS=pN{d5=_T|7ڡ4J)$S(THH9,xU_r:aptRC"c݂hR2!] bLIcr)~|kI/M .\[;FUo3';8EHU`d_oЈ9=%e]$r94NǙ]WLP1ǴkB4-*w,^ eKKsGIiCN /}}덑L)fٓ\ -B5I;j~&lظdz?$iorqܐֺA} 1܃G;=jm 7<هk_`졧S7 WC&keڨr!W|jxz.yʶ _F<\(t~Й{39fY%A5I+nr37\»dwCb &yūK 3STq}8zVlcTuWE7‰:"Bʰ)rnfDg+GVa1β$'! ?v*o n<3Yql…V9p'  h4W8䟟}uFI> Qt}[ \5NnTשWe4,-<0(*'ЗtX6(I _z+mF`:bq]*FN rY&%0J\K Ց摏7}UQ;Zܐ Q1K1 GMnȘcb@M"AƱ'ƌu۶@Gb0rPeOƙe;3xXJ'MYh[7޲uo/ ;R2sȹ6^ L#{iNk|th&.$[RAwyGT) tkP@h}@@W{Zm4zJ6n%=h$FEg{N1V @&$i;5Nb< .z <^`_+-S/ZC-ζEp& ƸdU kBӥvU&T{jza"}uOMLT)u޶+h}#97&T1I}zYc xs~+Nf:%.O]:lކ6O^D'=b&kis(=goBO6Vy;LJ2!?~ zzy@\ @}G/*LBӚ0I0QlGyW?vx~.@D'5MSp^/q6LzPs>meA Tuݢz'X7-BUnkzm)\בx= dԡ"p+{se#?AQV-++82RIiu:jCyZ߲>]GȷZk8,u+6S;?N/dɢ_ȫ.dx)0Б?75t* vOcnGIvq5}!#Ƞ+’9u5Z'Adl GX͵hrՁ17ڝ>ѭ<}H+DͳWj2ᒬ7e`Oݓv.;; Շ)e%yEj5tGʪ _y *$^u1AuDSz'ǡϱ>GHu$ͬ!ˤt pHrDJ:l I5z{Ze_e=ZPwR֓ Wv2e$v.uG sl;4}V4rb]&lȌ.T_YRɝw*$'=o<8,8}1B!:p xK37oF?-%<@lznԂzDuftQw8:m`# 1vBWDa<4{ѳCb1cR㚮FS6f\LOAhA] ՚K΃ ՆwǤŠ9istq$[hJ%i_.1 jH~oAL ؔeȖ*2M.tJ66r2)ơ6p>y #AEXm.^W +ڢo|K״BL 0ؤ%AJ\F2C('L$Dk]p޸g4=yZfL} \vvXo=D^tw$$a+#7nNS* T/hai5 " +j30N@/V9=Y#Bt^˚ayI l\UKmfdWKY`4$?СKw&wl@׀m/MOSqv^m|+yP5'_{Lz.BMQ?6^.XUXq##׸^y( "a&l!&G!xI׸_5dW~U웥Va"AN=B[u ڬ?dBܘb:GAHZȰ2:l'}40wd4)<̥uK\/w5+@%U;3raEX29G}Nhwhy4{9Fs:eIuiHXI+ oQMT9;c3R*ý\1*mcݒV̟ח1Z.ct)裵]i7l]!n*wB&a@<)?CSUҲK+ftYS>on]z,yPdy}>nQPweG}k8eVgU}|}]vtA#q]:j6 `BFI?GBx+#88ʐzɘ9n6[oÔFVSi+Z*\*rhٖn+R&b|M[amnk[Qػ%x0^gXM؋$#@#!8_ z?iz He<=`|fc'*ca{Wɘj˙ny>' TSz6=SzY(isvf8bV. o v`KH5WoiѠ#"5qTh\2x=fGM-PjmƉ)%0tΌӵmc߆P=R"@\h?hgv;GNIqbvwẐYh2B C,gt7TaΓD(_36N곲-6YkCVY Zvc>V{:b[Y< K* DinbdI a:WڼZt~4[͙CԊf+ Oѻ$;4-p7pUPVHjb2fy[gy vor˪&&G'Z)!ԅכ>zfA+Y7$jF7N|W/VVVIA-M%9:-<d1_F0m4v=?olvUMSw) F_˻Q܁^aeY0TCT&D`VѲ_1h8_l> yyGKNqn2gmh̲+YyթeWkoRd)b@pJhG/Hỵİs;Gf7 0j+&sH~)uXrMS&&heZc$RXAFw蹙)ٜ$Pi 5D/AN]!Y?{ud6QQQ'Gbm~WR͖}<} w 8X(iZA[WlL/ 7NNtV}Ӵ?ЙªTtYF1HdY:欕7TavUK|Tc1BAPs.\6HRzh:˘K`)z>OoUM#ڭ"[64˲2J{ӳOq?q9d4"-[ǣ Κ|J0!}9cZ.WHyVlHmOR+k#;5LIMɩɶNA#^ћΣ7x68qæ =BsT,&]i4JY',IxM`x`fi*G7} 1MhRq8ZFwˌݱ6W9_n C-_\@~JhcL;";Zi+ڿ@ }&A巍w,@BzfԙZR]}5|0ZG[fC}}H?Xv?#/W uL@1 -'X|Q`72KA̺|j}^rl @9@˕$P@YOa`x. Mve WIJ@'_Qѝp4 ,4- 7wlngw\M{1|o12FӕD Wvu-K9ƫrTͻ !ǀ;f ir\ nTe?dĮlPMX{Ay y!nf66?6|rKVi7+&e~&$tIx_SF%i jՍaY87xhtk ωWpJG>LPF{WsIzͣ㳴޵IN1v',OQ"܌0'(Ǐ$D?ee4 =E=zgyZ6m7!3"d^s/"ĠBx yEI daDo=H7j"ns=sɦhK&Iu(}ʳZ}qHQ-/ t!eԚI ں'\H ʐ] .3v-6uqrY5PN6#Edt~DJ ~,]N=_\D٬&0R@lїdJnk 'X;w3h\GY*i)pC1Q\ZͱY>i\'<*Z5۝4d/ݟ)_+# u%L۳@עT`Һ<7q?l)&J $\ǻҵs`0Ee 3ݥ^9)̽|DݛsI|e!f/tk6DutWG}x`BOD(IzeLW!5N$oUUbtL}6Cz;7~>,^B@?S03jW̘łq"*뻐ej$X -a|qgƄp:DhSȣg6frB1yHAOYd%\V~Bݿ&[W@ZJ yĈ d-<p{苷XK }!;Mx^p6+*w=$sz%q`o߼1*.M sQ(Gv&aa,/M׿[GˬDdE\:3kWKZGn{7Z+u/37egѸ_mz"$¸`z;+aR7O x0]7)&&E)8K:X\թg閱.w@yiqD5r6A&~ R"G@փGFcc&dIڈ>sW~gP]l xP| Qa|}$E L>-s_`zJ%:U<8QRmn$(M%f"nDĢp;2ynb2`/ֽ'ƹ9_Ћ5Cα DĎQxAI [z 10Y{%w_'`(]=6 %v1زP6(X { { V}Y>5fq@1󂩠bhy`7 bDHgbjp%k]Ed|x@ z>oTn!xjB/g[ώvtDd*e(HPڙr!k!W“>r 7& @|IQD:hsK}hN> ĐBi}{xABĝ ͚>Ӏr!tOw7k5q5`]4^SIȢW%u1E.g=J*(kC=8A llzH[dg81kg`T`ERdu) (%|axWx1 aK­hCa;~[iOqD_n|-hCg,Z;< yzBLx~p6ãT#5V,Z]䷂8AWY1IBLca#<vwEX;`>D? ?4u`0SRb9+ .RٛtQTO;9|H>$j+y^(\iQD~"N`,gO)ސ[b/V  UI] +L\|G2XŐ}REe>up4nTkty \ڋM7t.2d)l0G'! *<-N. m$,`|dY:\M҆APH0Nz1+z?w]M\ѧM0X鰭k@6ŗjZ>5o{Vn ^nQJ~ܔ'vѨz: ͪ_F ׭ R~턢#U-MN )[mhGs랍>Ը r|>U98hnWg_R| jiM4/lT&!gJ kK5.#Ȑ; rحvHnj)/jg~4u= PAuk5=AkS3#˃?<&6%8FೇHՕ8. D%).qR qqv? |_e]7Övdlh*oNCt|b&fVp9b fڜEQI=Q#H|([*G=V%tEx\4h>\ܕJDoη1y^ݨ9WQ}78mhP7`?i|*2Nr)~Tkb8Xuԝ0gVS> UH/:d~Wyl]ܪ6mFw#$8JtyP7}K|k+?Y#χ^T;׫ML"Yp+{B.xeVv'pUܺRo}?$ ,[\* b&1ݗ>Xh6XxGzhqpTB>lyL>[5a1-I HnCɍF\yCaz^f(yl.3oؽGPM)e !bJƶ 7JB4m 2CdTy%v zhSErǡ@O}V AQ^MպgrYuo Ss}H .n-eڛxrH;Jޢ[☈>~FJ~_f IiyL)ʜϴCko F5QoxY5<ffVǸ <ףרyUWЊ6>$r k^SP9 'Л+,92$zDy)q̶-ݶtieUKVM(F )Ӈ~{-_ڝFcW(f\xJUd#gGq0^Dיdլq-%(>؞Ĝ,b*rvཽ }߿"lr?dOx3~l/W8=g=Şrׁ]MgDBϥ\3i_ӌDRӅ6wgm`#(-&|SX ,/~(t@X,_]o ϜCƥ9LO|(P DeZ"=0'-%9ಢB 4~mNdO'ؘE!R{Ym%-{*^Du℅t̐ozIAX9i 6N ߷b2i('M)ތiHZ\QryԈ##9+)?e\ ޸B.ʆ9ÆFÄ?Y9g^ܣ#"n=TL}<ݟDz (Sya} o}4D'T<{97X'#HB8?R)ֈ]uipmtQ2b0j5uc<~$Hgтs6ce0T__:HS)`q3Qq؆_Gy\bI[#QM uφvi-t9ea$j* ij Yr}WF!M +~WV ]bG:K4tj gagBxS I@@# 8`ngוh]$+ɋK35s$fhv:$FV-87wUS`F@A9g]{)kB46<pTr=J{"~^Z5~퐭.RYZK{VE,zbQ j:E?3^DLq6t`jUuO5-fK3c4@tqY?/ۯ$Q8<}͈A4(;+"k+in#)Cd1dH侄{ ʎK$|sUnI~7[v^Em(`ƞU#:9-lK:r4M=cq( ,k[(y<;z_Op?z#6ECăܶOO4pBSEre!8f ͙yoJcSK`sGQ6_|eNCp\4VZ*4>pضҫgLCvZ)%t; KbG0XSfƜ{iՆ4*e? hc|?lJ>/kn?čn! 8?0ӎǍgˆ.F.7RFgw؇lxߤ`\EG ٺې]2"4\{vfcUnGinRH'Y(Kآ+w:`9<^Lf+3aK^xyRn"%]MHWC V%SXDŽ7hOGh5g^ҥ dd{qu.Ci_ӧE'ܛ|lϩ:zBCn}SlAofW9Z f~r`/oJEJU~D(r4(Œ:82Eݲ[Ej<}_"FڄW;*+W0=[ /AfyIMqW%]ٟ|V/gS|XE!=ϟP/5Kj˞) G:3PqLX:X^DL9Z߽Cxi'bi"rcBm: &1uBߊh|I9bmu.#`;&@&[s^AiW=b*Iϟ3 !f#Qn>k?ﰷJ?SPk{ȣ}/kꋏqpkK| H\IܮL@Wm)PT{s̰Fobcc@x={<ῘOߛF ?&JpPtպ'ѱ}a0V]A0+5kfѝ ÛcXH!?(]`UG?v\j'NvdAgGdMPTANPP#)z鰭'y5!{svX0WfHW}U:L+?UTj%tF̛4o)Ñ?ܟZ?$j7F!fM9,^4әH'ɟfO_o 7N܀U>7%, g_K=LCC24AuװBh㥅5@1⽁/?WEZ1w س.q^dVd b*)OudQZf dl=bbT3tקƑjswX .! `> Nd.!^Շ{9ҳ}A\[ʖ@Q 78:DFT³i64z+,ʣQztTh Ŧov%P1Lz$o^.dhnȢr!g@{WL}t罈}_Mbpԙn4M)yTİzM}ת}.?x!2Ňc2{ :ΑO󟱑Y&pA-YY+5 5=T( h8Y0?Hqx$uҪjgOt?)2(8판CbKe4ˁX RnA|%}6y%;)n1! Ao3 [lQMkZr)߁a{hqk,' D!kW(K2 1*/6_]f2Y"߾NW]ԮPP"Ҥ;R7fФF׍3t("6pKoER&E˱7qNn3'"CvcUit9(-洈hR:L?a L*Lڰv̩ /23/ܿj`ֵY>\oN!I,anW}di`2y*3~rRP΍zChjVA~vPiJKV!b$~FodgEꌇX; * STѵ#j#Aٽ0SΆ{P:m~݃Dl>1/5i1I^amGo(v&/+`SdS\$'t[3}DE_*U΄.o.59LM5}easMi#mIv4B9rj?p%q^~GzCAELe?rvoi XGǶ%\n-[f`[R3q$ednVb5~ʨ WvrbHE8cq7AN?o_Gh:&P hVt UD6s3 Omc%mK+nAx`ĸf)bpGVh܇f Yp}>#kMqYȚAgg=2Y=MƀA{6{uzuJJ'ͷZ$|whG8@9M‡MBq&5ސRze߈;.A\O {bƁU`j!ߢHytD#肬ꩮ7{AL7SSqM|"1=8R(לo0TZZx#ډ'JDyn9t]>[: G%J ȲA:d[yH'+%L| X9j`f`Ut&ؔAa7BYᦐ^)Z.VlOBYƿ4Fޛ;ԦH *vsWoaO֎֠œ7_|"3m; BWBz̐bY^Vî0t$ݯ¨vgU|P3GJ4\Y†.N!ib# T]6B|⢬TFA?|ƨ{9S.r9O2n IRzuZ鸪lJj#ųcZLﻘp n;3ZDueG$I^(JmT(_w5l׶q{rGrr@U<ʐjN;`Lugh1(%μvxhS/~]7˃%_ӢZ;&8ue˘ENH?;x\2!h`m(<Jf%V)BT>{-XZ#om+7_sYdIU|/wQ?>ف(ps+7r;H{|UrZ0kR®pOmS!yYE!A\b\)BjG&!k]Lҁ]ɞ)yPs.DFwb:Vc4(Wy))wMfHQk:iQYw˳)j Er8h_( ,n~0sWϋi62ݜZ""4YzMT4@cz`CYj2ì0fOj[2XP61cƜ] 4ҔSQiFݕMt/UvBga/=}Zen6e:emo@_oo( $'(!+l,ĤB=^5 IHon=?)ҫvL'2Du#U\qFACr2VB 8xf$'vɲ190WI(^?ZyVCb&4ira$)>ZȨ0s:Xqjފsbof X\PXIc>(5t =qʳB@ H@ 8 wU{nwL+W(%݌,N7Ayip+qYiz*jڝA֮x_S8V)&-Ov(_֫X,nBR~|_~ {) Hp)O&ڜgǾmoD00_`j䔓-a~8gَn_-Ý?ACFZ=z{sմ[S1zRŖ^8QX3rz"[^yhoMVzXbU 2/-DIԛ;IΩ;hE"禮qveb͚voKɐU Xx|%KQe`T!1+'Űx0I p?& +Rtexa{ \@ /w vmfs@PFƜf[NWWAAmFI`&ۣ~e#iZu-Fz@ ֌~rBTq0属>l~ub>ӝ+V( Lg]ocMlJdLy0ђ*b DÔ%/&-5}Lf}1ȹEŀY`m=BrGhh@a T=>?|B!ZPT;01~b3롛@Ud, ^71Wsc)6f&!5dD:a}w_MlwE/÷)a%BC^<&W,oNQzxtμB&A9k_S9OI(n}(›d5-:PV+XI Q "Ӿ6'+Uh琐#OhL#"dzqx}|:ryR)vd2zkr !v6iJP{b~Ez) lx*^_9a\X>x~l| 1\K]'ć>1bݾN,oH' pe(gg"f ꃀk}e!Bd#5e*덴7Xp^t,fmYO/vyfեVOz 8tuM6 }Eʺ cJ0ħF59e)ԄNgVzJz (; 'Saݐ!ァ=V9^@ \d$|%e> ۠;J _J٥"1 f]QZ)p֐VJPnJ1HA1B)7[//|$䏃g+CQP* `x2׎& 8Jff;\R u,xTqkZ򭸏^D$BH#0|7B{Z3ly27F/bsfLѡ|ڰ{ǔk3.D#z~%bX{vE'i<1l}hF-YALLS) --Ld'o|46*~XiF *&Ab٠=_v5 6Q30fkZnE2D2$d%ayhzOw芚~{e.:3#V|pRu8y|l [~R˜KqgYUlh1XrɆo$ ;3Y0sUP0yU :f)P`5܌ ò76}|$F>Kd"+ mm|ȍ .a7)-4q䮸8k`Nc_X:V;Fw;TW!S: |yᆄy'K| zA;oqUʯn+),p(?.G9Z0K$Je]*2ٚ` SD.+Mh[:zݻ@86/e[`ՎG΁yq kiVN.v]XvھC V _2 ϢGh q(DxM)U@יOlI& x2Ę."O_nW)84la ,݇ӚP^K}RB IoX ^~Zh_ӔڈE;[[unkTh2d1{8viK҇SgSVumF*Dxr 纙i6VgWHu+Xh9sK8oғƮ6OP'B9bWbN ;ʞ4f◇go'"fR?eGKƞv[!`Sv?U]X-77Y~:Wp6RXy>0vJ6j]\;n+wp6Y0~HYdlG4֩ƎDc&\@[ۯs|Afněq1V.F팹{` mEd?U+:ͻ#<˖34G+.䫉ВE#s^Mob_D*r8uoxQϩytDW9Wh/h/pOwҀpǵ }t |Z'"lO-;z=P\m2RnNQՀ^lu,Ao*aիv+ `d<;'p㳶VeXxG9Y^7e_-@f7Z#I?Y=]]2b:V|ٸEiO!\6 ^+xvߐKJeK1mU:~K._̝PE8%?¯,8ZS*g_^'2lgXtK[7= {wm*oe-1@$*5:b22K_$i0E00Ug#P}üP&#4%D"(sWʘ䭊kDȳsrg՗!:lWxxi8ne )[*[g R0'9X]^ 9m *NF$&byLc33+`tI}@FV$-?fb]%_wi)aGhSi˘u08^ Q9=8PU͹&G%/^_´L-|hwe邡|%Gپ~ (чZ}Jm+Fe3&gNMभ7g8բX5?~zцAa #S54Yq"G]6m㭃t?" Bq{XgԽ=cf[AmM^p^nvg?кBXz:I X~0;XRt+0[hMI?-VL JnI3&Eyjvs+Շf+?fXt8Ix:=355ep;=ׁ(cṃLic*^1C sfg2*jݐ78dwrXpsCeHBv/`1ZZ-c18'XCYalCh~E<\"f/H-m놕E<7(ođ#+t#)veleǫ>mN3`kTPfeNj_?!k(?ljCi F#BGwi bS-Zdv [?<^&5KW r1IJ[kMo"_fbƂUX>KҖ)r5DDvq E&I|u| Iaq=4Y;&>_!&UUIaZ+B*+JUX3iG3Ϛ1Qs.KALifsb(z&YOWkSoenpF?[2@SGyACZtx* gQ/ ;`+7\[GF" cN%Jؤhmx@~ V.d6yl-=r욵Q!좕Qp'$[Gl(YI#`[}&?n::HGs(42[g߀ݍK8R<AT!Xc{9>kki6d^KZx4׸@5HW2sݍ1^gQCm]""q*@AF8({(c{"Vו+0FGQ>AU! }ΒO63.x(fEwBڒ`)31@.1iT[D% (b›iy/Zò+y9z > ́+n C^8L`eP+Xw#/0z8)@E 4q-$?G[ R_ǍK[t>)^ȋXiR_س{2FR5 $$:M jSn֝)r- \}Tt%o x2d`M_r0_A\r lCZ2Ī>gI&ba&cⳆyVM*qˎ7FJX~+Wz\p;w@-ybx;oe0-䬐pi/2 7} CzMqO2d߲typ1hn@KC ,m#OhzB `үXAO'}Q*`06|NWq zҧ\ֹ_ACD$jO6|[Fx(u=6Z?K|웟̘|H' Asfq $ OAjCjٍh*kyـ/ m8XŶjȟW0OP@)^)|l"-nr+L|EGEbN?2tZY 򪖆sËlQO~~*PDO]-MSpu휏(蟞t-tIPłW%J~\hl;=R儸;LGƑ-C -A> o|a0*k6kʣ0R&Nx`/0+GÙ *-DzA!ZpVfLSų8 XdqF~R˔+?IDȪ-Rߪ+gBq+vՠ?LvE]@Ǘ"o@ja0շqgi `B)4'^ ursNot@ %X %6 .s3W3 Ȏd~X @.i1Icxhy؜c!mֳ|?Oewg.d2 FZ:jX<N׊r7+IZyF6I7r轘_ª#ޮM1+6JHv+2–:N 7ce!C 5nfP@hdđțucl>"ÅF뭀)'ߔ+O>SL)ZIj懺GHin7њVc=NjZ&F.pPc8"6vvC?򩋋u%iR@(Zm* '`ǒ6,U.{Ɠ@I&EϴLqpmCpPLmb CbMݎCa}2,)жͮk(QKpOUj` c5*m֠X 4f|KrLVa i OşJN*Ԟy=/$on_:zKTԔI\ e,qi98c37_eԵpe /3I!T`"@v|!qldA7BG$v] YLT<%'s ɄŬz+/#bꅒZ2#Æ)@uVڿ"QӚ?Z+q`%esvs*;wA,tAqߞ m/E3B*6(Y}Ȏ< QYJ/ \6nFx(w8FdxinG԰Lv"م뼕gAUq6j^pS/1h8W- C/QkU]bQ3M^"4^$Q䢪(g ^5NvB5_%|ߚ~Ȕ|rQ&-n'x 4#0))iS"Z; ewX62e Kՠip&>?^ذv(U]Mr0}Ƿ#8y̥4wShvha:TC=youFoB%:6$C\0J麟O]\Gg/e))u+Psj!H.($: )o$SGeex]dmu³E,bz q v苴ˠJ/[qKUގ\߆\qL2pDŽiG"ou=3֝uL,hM}~a ElS:{T$\QԨ eN$k4 AM1Xӿ%4se})~7+q=Q[z99P^^j/0)=TC<_z?6 Vc.EB.I n:-as[QtCnO/L͕VlvG+EĮ<,~q޴6'haNOo/Ik"#Ni/pՊJj`|11ΰ=]v0H:`wj~ όJמ9~$f Yi =]IgfgZT>oCU029SxzЈaI;d^`K9=SJu9;?yXg) Ku˿ b⑼!,&u \*Z#5)2j*yH%@J`#'^BNȕKcԕYo!KOꚷϣ&+=@2Њ/AلT>}pwKQYv> ]. 5hhTRoܪOSHG9.>DC|V"paQVюWaHmI@uU'(qz߼p 3#QC7R?qfaL~ւ-Jw܄/ayfŎ cb}`cL/`xT!=] VQv&9$43 t?t*&c(*JZF%[`]'.W}5edOupcCX' |12^c- =G|vr$@9nGaN +\,3L b>VjPc?xa_G_m/!H(9p&R>BZn'6]ij$x"{~Vd@?2t *O"h(cx9O?b-A[Ȍ3d:p:eSD$mt[je\ 57(=kl+V%|Xb: ,?< dcͯ{5'&0'^5W'~)T q Cdp?KQAD'eN@҄iwC@CoxZ  k:A,L>`0S۸rPB ݼ3S7? %Ce)LoGC&GqN1L>LL'&I Vђxz_w[M5+PO@x7Vi4Ԫ#Z| +EW iϝw$@ŷ>yߊ~?4K;qh!â;t( oMDն:<5DFO+gZL0"yY-p+i38jjW4zUկU7d5eBLbCS̴1b=?4=4Y.s~8VjvKg @WBm1=H˝:{R&UATh:Zs:GS3| !-ų"Ț#+U nT \a:BUm(Hua2g1&A]&\kYWU$\sN6@5Q>PQaBTs@S6۽Lნ+'#.ߖ7fxmyW&k#猈2>ȊEArN9Ƚ0\1j;0{ӎMY䱗D#h؃PKUBLL4DŁYƑ !q-ˆ4I;ZCh 1$^w5֏⟉Shx+$զU<= |9E%$];q?r\DOeP&4E 洸oԽ6Rp43A'?Nү@Uڥ=X yӗ.50J7joJŧЋEٌHTzy0)oa')Yۤ#[<%K8%(*ˆHa`WNɇ`j%'oHT-!.P>Z)ɶ}s oC&+ E<֤𥡛PJhDnYQZ@/ދS՘"rcwnY쥰§Gmd5}q/uǞ+L\O~˷q19_''@:՘I"ZZ*(RsEeW .7]5uU7}Rt1?*g.d4 Tt4t;i%֜60WO-c=F5*SG+5{~nN- Hy9~nۇiuU+ qq/EaoL[ccfد$u1\pFMJH:*O.id֣W7H{Sԍ!ŏ:1 8Fv 窉Qi {ru5 &C ά@^`ȱY8c8z40`M*vbqRWBSPlK˓U:}FGl}9~4۠yNUYQNUy/D l, &`дCU[ ,F83tÜސ9}]zæ3^/cDKB5Zf%IWJy¶?M'J˸\_BID-\Tp2֐oi9/?+`Xe*pT0qo#Dޟ'̑M ϼ?bLfp\ST֚e#NAlծg;d4fy^ {`G&P4tY֖1͞bd4]`rŬv'e~7(m BQW\dx;փ^N邡_Tk% A9`;UX;!;(^ߥW%Lv$gSm@4فkm*Btۋ;!MIJeE?֦K uQI3k͂ӓCA.͒y9,;wQxJ$8U-hp.)ǘuqߓGoMH㎇wU>আH虁oZ^k%u@!w%:-#4eN֜Mrq xmrbF^+#΃ߊpUŢD+z?03x'N>-LJGK;_6.UT k__<3| Lź&pgK3ֺy e'fhNjidzo3GACaZmԆe)}&c,ʍX34`BSH=o-]lJ76q8H =E$u: Vʁo;P)">j,1z(@́G?q;6 bhC}Vn2%ɐ/iDFIdp¿{ffs&9 ZQ{*g'bvh#OuS')ņ Tf =P\U.SO'ѻLL$w,*{ᮁ=?VBzeyU^҄Q->*!proUxGO!ٞHYPDݾ|ndVa b -oW=k _#-SCw$鳂-NΆ"t D5GBלn }[H˷.`< Eu [?|EoDbeBȋEjcQ {i8sF7jue_I6`j %eX[tm찗O^!Ŭ s~摫hePVys|r^xp6\Feط.M>틮8/8]}4ՑwWEZUoٱ~ D~S} aN?sg8ڌ }@(~P!m; ;@Hu|~ʷ@-Ӏ@F]~LI J|`P0< kcЙ\OPQz~,6Iҝ3`D qFN=XС^*^)w7/M $ѬHEhNC[ȝZ̍ߒ7c4W/\ OtPqcM6ёn)bK?TRa_ gLʉ7vf'kcZw`JlC'֮O te 2>{5v[NhtX0F-VYE!i#Ћ|N-8%e|KϪp(9W, !lsݎno0:araށ>ӎyYVp?a~E hq:L'}w\VrX*= (qn# ݅նV"\m%de2dnZb?0]ŀI?#Ho.Mo"x F&|ۉd]pf}W"_on' %. #[4] `l{:`1o*lmd"t]5ǛOd5GbXʭ?o:MT@kyWs%  Gz]+n;3̻Ha${ 7@AJ纲/{R'eiffւxiM1q/ ȼzn,huXr[1ˮC'>&yw.{ VЌƎjOQ%{~)P Ӡm{xYܡJM+yNfAqLGwOv|~Bnba\V%ΙOv<:Bwt Ķ̯|WW6_OB?/WqR*F%Gu x4/4Rrs}GPw9^hfoc>\f#v-:XSha( [/x9!ww?7+9z!:ӋM귄4„婷*K3K+8l}.i|VNڿ'*& @-eӘaZ"f%Zb{ޢCm,tX 93HR@ E;"pt4ZQ3Ue8DOZj]O#h1{k&ZZax^pM駐 qI!g?K jwzrp\X %J;GB=л TWY}?FޑZv _ ,~5M7=tb([pƇWX&8 nnO睿}߁"J+W췼e:BDfMB?LOvc׸sХ`BkFx/դ JǏ8mrAk.Ѭ+nA^[ ;ՀVZq:U<WE1|r^7~*Rbޕ]SW*CSGDwPOboHsT0p*YA WeLhe oLG 8MUB`gԢC, mKT(|NIYA+k>TO@./CS@*O p5 5j8e5՗ع4XӦDt^^s x C$j'ojnrwdl4*QCX)~TnB~FjC@E}G܋@ly"YPER蔓]M8CN1%͈ucα9 B}%׮W<Ѧl̹Mq#iJ WXv4][h6si-M =n@No,JoMw(inE\ e2shS^w) 5(q~dz#Pj?gnZI>7 5y{$OIjP?YCH7BrgGW{g WKچlZ@$߅v[m$u  $O4Nf6 p-&n4Kv!'.RK]اn n*ٜ>r C/)_ DWϸZC03? #5+eWI*qdM)5`Բ7 #>8K5?a4[i}҅R[i)l퓁 }аA_RLo_S_wC5$vYXu." ̎xJfRGK6nKcU,BFjg Ε߉ Dq߭׭(T8',w<`*}k.lcsѳ4O&jSrbA\%z@ߕVLAĿ6ɉ$<~pqmL&xl+)\pu5 Ԙєe!έ,$f H͙D]d?ic2[؃QBm@j$ށ._4Oc~Ote i+SpbhHsN7 !!DK|ZWMDGRGz. Ν)>nOoȦa&ײ9xD}ѱ"'ޑ;X]JK%Ǹ,@̓'Ro$|}XX\<$2T!P%VƬwH7ƴ>T@uwEĭN!uQB +(I6.3{]ҁLeB| 8GO+M-V!]|a n!9o2 &7݂%CHqj|epI ]xu>}W` F {k!@<_Jt_wC0v]Sl|IIc!%܄}=#v۟U_Rq˨`] 'ڊG\6NudŘ(q_5'졍{G}Ё72;2 j[ʚ IoF{ᾑ pmCc^mǂ(w`[HY8+2K܄S ,GdL` }Bb cwJ[;c ̫YZz|*Mw&:BFX5O^I|N̅R^@)h|-'p9~E*p VYqVQ)ne~MI^?nxo V )Y4`Zje:PF\qeoϯ iUzۺ#֙i; +,_X i-qm@͛;I]B`_Ms+IIzJ1NSlgI>¿rpj֖ e25 ʹ*oc1\ްIcO%\K ϗć"bRcK\3_0t`%+ Mf؎O;TUAN3N_~mtE`%uo[{V' mYӵx,yCjMvV̀&@lOGਸ਼d!N.DA2IEp#@Os*ًmX]BkQx[% ,~t_t ::zgռA c XlCz9GUIv$&A v(b<3>ʨP﵃9: cIX˲hnWe47K7VB;] pmuZƬo!_Gv~$SAyVu4avO/M/L=9#n1n;>Zqw2q Pz_3ín9ɖ; .J*⼴M#Be3Q+'-lKbwJվr}wQZ #ɰ"JqgEsyS;^HU$ҭfgsCa܏;RB= S3>!fJ?{ v 7/w2 4I=q31!tsW}C6.8/c+HTo_bт'.b{pšA4fzZ(#2^Ȳ ms;G`J}Mp=1-@8-UA0-" @53!}9Z3Lv GX-%E|hJwf<)kJ3##ّaWqm@4Qȵ(ֶ| :N ~y+_(9S(2i<,I/(6ܓvPq({LyQ6|rR/ UgYv\␵g~|(GYy6kQڄ;١=t ^g*o8J:}w";ák6{~_rGզzq4"fJ 3N{1\y{ZQ܄B9:^@'z@I2 NdG = vEaJNsKנF Ìa/ 4>6GhwVE, HKjPSFd&3h\缩u-ig%]<ܸwRvʐI_Lv>40FO nGUp䞙>,7:Vq"𡳽0 1Ǚ.}bf`iCKqf,YsgO+r;n(!HhُvqIA^#am[E,2cIM]^cduNJdԩ铨) ";,Gq599)'ױzi^]79ֳamR{,tQbVܮ5<OxkI^?, FrW;Aˇg : !7+c5hAOn%螛2x##E D*/7A2YOcNv%*0<&9،hn{vOkwMi=b7Y7+O;Bwywʸd}xm4 H%O5YCptܭmKTmbb?jeRn- 8EPHѠl21 ' Ҽ}gG갼gfY;|\sĠ#BM1l1AhG8'P<=U ,SoVukpDr{gT3f>f=pX^ EL!HW(r5 k2ԙĞ͞55;_Wn=0̓@ZNw%pܛ/wD~3Buڵ;tu(Y|l+ WrJx$Jl2[iNK>7Ѹk?~".G/!n緗]7>ȉyEρ髄Z#a!D-k5lyr/l=U'!:m3|*lWRi\*kKa!qQԁS\qǒ/ `6<7IL5،ck:Wȧ/Xɔ|èɟEtFa^Iz@NYJuD 6z ie)dMޘU}idL(UBA82=w c-nzab iyg +'+= Liۅ NY?,T',Q]2?t/'i@3MgAmŝI ?ّr+uF B/Wӏ9-A?l.|אl~S@^5|hffKdNg@fO2 %&{ހ7 \2JD ݡPg^`aK,BCsgӰ $VX78q;nּi1O#/ȁdZ^*ƠH8周F8 lEW,!O%ylyWzKp$QP05g?ܚmH4 V{UoL<k 5I/sZ/¹f^fϤc*}q\5,ME6Cu>}UڄC:C8ro Xt:7Ȱ}]QU*K\;[gZ>NasGuֽMJI~D#Yb]E(}MH|>k @4.~mBT(? 'QF{dTؖŗ.*dʥ8M\\7ZW/͢^BnuVЗxPoo5rDύx95wB+`fW<[?+"`kiuZ``i@[:=` @"7Cx'6T< ҆윆^j@xrDŊ$)qqffϑ](ѮD ;\}fR|o-+DJ}f&gߕʒT*)4~^ гJ&R!%LCe0> WZp_ K%WufRl/ !T76oa譢)F&;"Oa5["ּV~oҮbf |z9J"7rzSj*F"D:Ԓ/jqFV;R^hx=ԟ[d^[-G\?)jh>gN:aY+C9qsiفDjUGdvՉ5f<+?8씳p9&-8{{3֖L\O$;|@5 ~Rj6Goh{A2Ƿ~Rcݱ!$rKFdܐO?}sLra LT{벸I k'52o%<F!oЍJ!ӗ4+zK~exYUz{9MKsj"&GݛǪ YpxAeg mls#S4d|+爖2I?)/C0ps&8DF"76O,:M77.=n2poC˻gTd n]')wr,6YvV>ԭ 2tލ ī/j R,ycrr53[W! T!L/{=28ˈ*OjEp [:dKg|-ݟuÜ|騏غӬ8r:K`h~CCۭ6l^渾p,ȑmh3(-/C )In"Clh28cL&/:] Y@KW̘TZVbȸBpaŁ%0b&,%b0Tl%' /iPy?z@a]}d 1eFds!{PjJ/VVmoI4 ]jY*|U7M\Jc5>#o}Vp@DA 9Sl)D(K\vV{|!O 'ghIK. Ձ| m.+&<6.Ҏbn_9 0jr0b*xk4IzԖh1, ]&̈+م-8ۚZJ V؁;k.l~p%\惛{ =2/Q;|H|h}w%}Q~l<{*OMYAKG  U¾r5t3 %աjCqG'4O|ZipLƓoUH͢@$&-Ǖ؊Rя$~,(U&-HeʟRG2_a~U sHAVJO?-!? RU]TK_O9گOL6@?GL7!;@jdom:tI2\H5 U:H=L`|#y*Y~SL}/ؐQ&L=Ň.Fh=:zgaڭ1Ӻ uJ7:Y̭,p!J \)',@̢n| /#O68_jz$Z8xgHU3LTUhT b%dRm h9o(sv%.[QxE_(;pG;Sд2BG*O1ml,+=NE^V|r󤧸I$$xHu c:U}""q$WMyw.|6|EMKaޗ|)'L+uw ~RcjWYM{]sP :RJ] s񬆉|}F7#lݷ*^iFypWދGV#$ Y#Rg/ɩ?~-k%\:5WW ,gquc4w冫r)a(N='y8-t{OG+K+H83qQI19?ųM/KBpvp (hK0DHfi5`5kZ]M7n2YCr4e {|ׂ"ī|j6[T Hq`=E2nmM |M LzIFJlIЌ--*jw,I׊3j:ąuOFjOI#2˭Sp.K.x5}}xjwt֕M! Ѷ/OT32uau2)Ի*5!c=fF(wTF G6OUzrmT9iK L0d׉RR7d:>wo6@ %W,eYU>fIɻ\fc!̐ZmĚcf9-u:IUV|U7`Ӫ5 źJ Mﵲ,6D8--H)s8_cPH7snxRL|JͬƳH{sG2s4i5tѸva/rI԰& 3_Eh1˸5 >nQoSOF PLasU|HLd^Y^ nu43(H#c)y.3)*Z?D>+ԋ(>Ǹ֣˖n׭\.v{#]fHQg4I_ P#.: '|8খoF)4^j W3oo+oZ, FhAOCPqGg' ʜ5ާd:;4 6˒Qo#u~9Qg אƀw-⫴Pu@ KpwLJAߘ_XAU~Igd=h뤠1C:o˘ƷP bc5\O}6p#+SXG D[&(dA@b}.""Yȫ8nG"禥|ډj8?]chu)ۿð60@9h" '?s 5VM:OvBZ ߻=x{lsqً)&*qP+\aNO|"]Úb_)p`&5Fh٠ 1_ܑG-Z?sIJ:Y;.WewҺtcĿ]+b'P$~kraZ$|;&R\b'XՕ$FS?/^_Dبi9Raeۀ+1Qpër6/M㆘Q1Q";'נy-p)nb<B SDa>D|a`=L4 g,qcl'ɹi%/E_D&bHbsM)ѷʼn[ORx+9ɚ |-L>s1)x-G w:cQv$_zǸAɗIxC7!~]Wok0*h4 Ղ_BE7_)w"NscC)}v1o[i`ӵCYoq]ژe\|x4L; awho+8o#iPTMAߐnD _T4FlŅCq=g|wj9:఺q0L=|+g䯸=v;,nzIwB0#D5aG;ë; 4YoP/}k͏v O*a< 47(PS^dJ!4р?.ŗԔYȽٗ hEmFɀ8Ӎ !2VNe^k‹CP-sO[s!;y0NxWUuEyI24қn|o &8aIY 0㇓͔8[T.z6KN#5GZ I`UEX!imha+%KRJ8e[[mŒk)r.s9Մ%ȴ6VAj%a[ Mf!cF%LU,MYaeTՍ`EVlڲuvRڱZ,YCdiJ$8Rů8\2ecr2 ͺCB% e-DmßVuJ"lmIil |o/|gIꕴU c[Tk[vn-aZ!9ͮ0[,h-V#iqq݀Vn&P1.R7U-%,`ܰP%4#.$ T[fXsh [Z#H)dkb !W zr&1RRR_e!+vk8HC Ȕ]yQl|ȮA?'_oQ$H6 cɿܤ Ȏy%?K陋*PLdt/:dY&8*̸@ɍJF*U'gHi>-iƏ &(QI1/lg9&^3|k+t1շ`/*.~#SYj齰 oH u9,D5[KUrVvv^PNkJ~ge35u܆Z>'mBx;WgMٳXmѼ0~elř #E{?농,Qm:s X٣}qz[<鹈q^j&Zd#M}OUS8s6ԾcS1=Mt-G6k]}m1eX']vYe9j-Xj Vaz.(X_xƾ+mwT{Est2r85+,[vX2RkmM?dL;B %p([wߕZ4 b0H3llF}4BVnVXBW.7Qf_۽4w`mRR clUEPƠB$m%zǟR0*mB)al.#g64cJq4bRb DE eIb-lbj6dB$Z,ҤF4_.ͱl҉HPl;t)" ܛf)j#P7lJ Y^J%/DMvݛXcKekjsP͙MEja*΋kMhs>gɈX&,]?@ظ@9}Z4׀z )VZ*%5s{nF"QDɸz!.ScJ"aEODG tܗB8\Sh%vFtrлs3&S#.\oEG; *p9QPNRxg&3)%s^@sm$\BbD,ͳG1"$phHōo)XSsF-e84^?e?/jI_z \oCӓ4S!@`3ugؙi3=3ᓵJ JB ιwy&rZieQ|s^zu2r:ާsh`jƑgEݜyg xz2}^땩.ermQ0nη'D\J|@s(kKzرņ$`|.$Y"V(\?c[RMzs3\}^ oQq| g?y|_qohXlUϮV@bmns Cz_?}/:L}6sb%fkqESX|^v׉EzuEOw"@y @=AGG+(LtfNJtsCHseBK6J}r>GS@|H,#o8 Ie''y8-xܹ_wNQgaL,%$ٝG}xoS?nw)wBB f   Bq~~%TgjӉwrr)kʚ|.Y߅?|L WҾEhڭKȇ_ffLA-)tɑy{f_tBq%{|/,;~jem8(׆A=`Իϝ'6#JM-}Gߒ0O4q u/֑{m+Z[M"} =It%EK YlCEFKTGp}">Od)0&ʹ: ^y\ug08hᗯmHݤNEA9 @N&3(*Іd?VSa@P;/*xy=?1 ЌGy_T[A[9fۆys7KP NHZ_!-UL>$ #\]fpdi-^:Y$!̶P䒗e+\&YV!fB197# hJyZ$X%_V'Iמ goare 06vhu mTN|}wH)8Aʘi8Np$2ii XˆSFJtNI:gi e,2b3, c HiV?\{`q$|Du<GXHQ*={ЧZFyվ(lb%<)t]F;gu`"z ~! R4Q(Өrq+u9}ڞCm9r\whuqp/@r erqeG(:"N$/P:NEo:YlHXD>Eݸ"rRQȋ0!mc$ LD JJ sV%=Hv$W>Ť2tPw &^{N%z)f˃@\W%dwRMY9фùM3@!ى{,L߇t Iۥ4ޙ6p]rk.}X@xɻk!u䋢(Iv_a?\:;b?" ]nu,}<^wz׵aN$q9c W.|[==v=z&Ǘy'k7\sֲq`A,k+۞4-<> <c<[K:ygHp'm /QBI^ :rÖ)Ť:3l<*( ",X-"H2n#\eO-KJzoJq_7`iҐÓ|;䥉˽[az ҧ6dl"L N|DgRi,:T/v0ቕ̕US%&SChQ5ҹֲ9Cͨ;Օ{/Zq)# obB(8VL2bp1q&cv60,]B)7uv"dGAJMde ynqnc) ls OB ޺wuUxKm^mT6U`cm9ÖVjƲ|:*>Ii&Bx8CB;MJw E*:LקT$vfhz4XjL$64 9nOp,[q^O !@RP"&SX":%$ub(hh%+a'S'M;AT;2 8Dp)N9z)U}]C;)Hb@ vpO38=rϬz8^LN!+/OhT@|h8t"U]VN$i9IК{JI,@㧣/"gFvR1o7,%%U7vn\Ē6qBDM$#lB8$`o;'hpI)yl5 d2s8q$1"OuYzW?DU' ==~}  huRR sF9Ti ΅F$(c|RsQ[:!Xsqd^k!w{[?3MZ;߬&tS&7}Srŋ=m6iĵG#Bfى"lRSt"p̈́0eY\Λ9MKwIVUȆb+DUI}ǘ"d|$c41Ι~C38%I%1+bBh`5QCEK R5 hL^2'2+X=Nl"W0%ˆEja rYze'abJ5,|RΞz'#ĉ%Dף:B'SDMv{Jk4)* !@3#폈'(T>x<oWop{- Mޛ{hyJs$8zep1xNSU`g,$zЊoٹXh-KmA01R#һh')ߴõo!7GY_2A>?F'أ.5cה# ЈP;ɓo&ps>՜3&i)!y%?(G}_Ovvj|.GuڗzC@EȸFDB͕4Lcpc^[!oD|-*#a3 4Bb=4k ufT6a%0i"E ˜AҀ ꕠMP @R /(P> *aF;ED8Pw?k P<*QBDwrG@&eH!FP/]+;?׼9ۨN/^  05C  1(=J*!/=tnYq79㸗 i\fh=MbiʜO\jݤ3a{^ &$^, ?}YH2|l%س4ئVl4#i>-ķۍc.*өN mWKH9x5 3Ȉ~7^ׁ,~Z8Sھ8_̉OR;lg0w;TQrylj6!\Fyի'wRYQ EˇY["Qx歽,φV5:ߚ)K+$o;Tg}w_- ;Sx ˸$3E5/tI_d6ɍn6n-j[`7KAg=_MnS,KUIK}9ǖ!ک/Ovk6g&PuĥHNjxR)X`e+ʅj>ȲՐEQ5)j|lJ&߱+cyAs`N V[n Ⲿ i =@OPA@KOn޼Qt<[题#n-X_*k,!J?ޖ~of UZ +VτޭNJG54;뫭g5A|q|W&5nwg3;e 0 (P@>ɼq_#):1~ՠe,gW- 06jPY;N3=fz$7nꙛq<Ή9kv0z'} B4k#GM^9Έr%'Û[䜰MÐ%=e#̛ ٳciY4rrĒJvX5 d?ã4Ow6e'nq%F*F߾;oKt-ͣ24tb7tDTL@ՈA1@OwHRGÍ{ 3up4o @=׋r R#޶̰]<@$==OpSE >57з0-e-觰|$|ūZ;䍻  Hbxyyl!#k_KDge):#vL[7J?ί7#'$ `ʇ9.~8t'vNgF>8]S>)BN?"z NlB`erȦz;a `֑\f}r$EˤN&gT|8f! zn܆eCkz_npzSBt'w>W$Tϴ28ޔ(z>_D]Ap @DP*vL.TAE'HY709JS UAMjadM^>m(>qÚt!4޺7ӝ/ne# D ?(ċ^i޻$3BdԄTnM^-YER)g^G9XFqO"5YW-0.{KT(f. m;FdݜN|Hb)`w}qkGw%~ZdoTYU镝Uɍxr^q q[dr@- J{sh(x?i #Kݺg[?4 n?cooy1yuQq7Uq|,pڪ ҜԒ3%j:'=ړY4^=)Fwb`7$ L3 c]}sQ+x>'W6hvD jut5EFBP~ʵܭho4{>Co蘈hKh/Y/ñ@sy#l"+/@ թYOJh|ʷaǨ9(P$O{ν<5>!A6H*JopkבIL=?+z]AE;8^@dN'{R_p?nxNEG0PvuH)Q? TO ?^DL* bNom@[x^JWY P *"/Đ (RuƒOG!$^_DG@H=g&!jCw"z8Q]%@Q8'k[ #Nw9ԣEzz Qaՠm45bcWϝ'7FG?~5/M^RL> uק/G$ }Rkɼp2F*vd,1{dHQy8~c%Y!ԃ +a4;eu@oӣtw}2$k[2dfK5hC%p \afHEs>Vum5)s(';j^xiэv~Gpnm1tD%׽'Ċ LNEذAonRa{Q]K_ra̍C+˜gxkW sxxЫLk ~U;jWOU9m<#ru%C'aEd|F>@9ex=mCQrWK%,rW¯\o&9aα;R"Ҷf;vav ahuaJ KZ:gXP #.? UJm>mֱW{U}KV? A7 CEQ.*ٙ4fEfWLkbmvLP] Ƭ`vo>~V-_+ӿk 2xL^[p!;; z$GUv@g+lRD(JZcϨ=f)dvٴOS.+ݗwY\]F*Q-SE*Co^ToMz' +ڮ)}J~d܋OAՇ?ϹL~1`;X1#`MA;qv=P} _( Y}j_= )EiVw3[F9W\]ߛq$yrxt :}m8(޿_9+IHY 9|%DE,}A} Ȁl\-9O;QXO[R,|'ޞlhs_7 eEV]'wJ<.x1ea+uz*jɍap_]. .%w(6nkf05Fv{=ڛl0oD>3VXH&5n7 R@}e>eWf|k$ 'AЍ.0aTߵk=g99_pc 0`RvaƇJ}Gc3H~_.Ncٍ.db1 L$MA0dԹ78ؚ&&08(?"P^( ^_ţ֟AznG4؀"hrjn DUgz }0^8\(W"SxO}=9FCDŽ3unz;ᛦ-58lxrv3LnTj ` !xbw<i|`c4-Jγ2aRcy=^}ͅ wyƀf1#?PcG@Qv{͞m2bT\C9ŕE@ĈVԙlpIkײ yW\Y rbv c.b_ iZ:ZiHWĢz/&9K< {!0y #^ zo2ċ<=|,_|YȚFGE6H_G:2EK~Pz683r})ЫzEL-LGO)/$?kNj,2wæ-8/ſK|k&^$ "50k2R7:]nZfX(ărpt8(6QѿYކ&tqΏi*߭anYmٵX=ݍYpʾ[Hǣ*/`bHOB@d*2)/t xyzА(^ߗΠܺrQ?u'eS,uJdxد'\-x8OE``v>g]j?!%IQ뱈jW !DLZ#= '$[x>ҺkkxIyMtfaM; _K<ֶ?yBX֐Dx^;QJsJcv2v"dW4B"rCGXE ɟ ԎaJJ@)D5ӼkcuW?[ܮ / N<'.{n4Lz|rS{ 3a.kc\f?e5F-ⱳ;еB_fucՁt yx3&c(HDI׈7)ww2%8f xEL 4h@] )O?'靋%놁Wŝ? 5I(*s@0Yd mL  X(p>v~:~pBw d0Q8WGb$B~}ƪж»kYVlh'/U?)T5Ou?R*&g(aB \<}F5)7Yy?J'~<~oKݾAPAIdpr5) "DTL;9‚UNRpPQL 5%M q H%epM Q0DDDɇr"dUqM)DTG#U(T) ".;O:?Me2KE"8ǫR-GswWLI?ݾ$/=s:~,! %$a0w'+|gzn76y.T+ !Lu/P~`[yn[_Gf6Ki?ƇC$;]H+; Uq ӡc2Yi}v^G1""\/+zYn {w$Y)Υ]& q͔3ݟW^Oc G}G}ru=.Y.P&B/_L@  WzB5z {Za~kx6'l՗yƟ6iO{O?w>*)$yr] oHG}A@`n #8/oK6?cvU@"aN!|؋L~JY3d\w<[H`2y3W9?;/O?'el( fCYaT]s^s>wnqD$BP2*0'b$:;r(7PqQPnCcCUso#*|#:#|˄P#w1@!Ć"+faaw*|4eW_Bםoݕv6h^A^O[%iJ-ےXA+DV/ೂ5%)K Qfl{F,>Uz*{=#[OW ǡڜA/F%GNJ.ycYдv 'w6ZBz_6ԓ_~]ŷX~7]a@$: K%|]hPt|wA#ރ2HqСcCN:`QxyxyQybanĽ$\!J]5Vx @/2 m@ 9Pj˒).`4+k qou1 Dw 6!{npugu: vzHPhXYBLgv$/˿%g.scZ~E(lJhR5g)gn]?bS_$a 9f5 Ӏ![_jnmp<ܨ AG0h2 /at<X OE:4F5BO@HNo20 [& /0HӅTV}G9負t;}y~6{xZ츾g"j !:)O!@b1 Hy9Mr9|0>.uv{lr**.$о ~6E"}`A ^3p -aD¢ c*'HncTIPpc WU@>Wm @ 9K-sswoow7 :hOU-y7fӺB* ''wܽ G@gߌvTh 1 F7dA@ 3,|HeDAY%C*\ѐz"|o>aSp  0@~B ٮ=k(@!ЖPk)=ɧLڰ> mǧ"cvYU1.#w΅tVw].6mz/z2u{3$'5;N?S-?">uL5/uC)býS J O|ݮ'I"uVm@{09KUR_F8( j]р#Pyxu.Vv+}c<[7%Q"&嘢E"H F\>6w&m[2obb 2+GTJ&o 29ߕyYIi (ZUs~iurU^9Rw_ֱt䳍/OeC_o\_a[즵rM]A17!#o"1|[ nyoӲޗuo1A$c Yy;]gOZ:LhQ;HC" ؒnؾԍê+[/fe3&Ϛk0;4wd!4I"ZeqĂ!(Gv$4Y{إuԡϴ_|AZ+^) qSW[t5ݤKM-|l$#aҏsoF7d4m/~%6fZsKh~SN$iOi7|e^dˆ" }m~ [}$T)NQ96s  >}.٧@?12'Ct)Sg<~gL",0EU¬ 1> 0vѨ2 $ٴQ-C43 t|O|N:b@ 5~Nw"Y}o$܈5V;i!LDWyfYbĕxtDHM~I[ޟS=R2Qe^x~#̙@XJ$L.Ϩ Jh21R<ڰ?yTk<`$~XcVsU,C^M XmoF~e"Z0 RrȄAfjBhĉJ&Kz=-&XM>L/[A,W}>뿯O=%!-@Ylm~;6q!y;q,eKgV|6fژǏ6r0`` 4nW*F/rAȄUVҾh}SCQ3]Kfea Ucϓ@5(F;Ҥ1 QĖ F"]N:mk`D@D"Q(Q֫+eAm]_/uv~~)klݰrn>W$!Luo~}c J@bR@zo#FO?g\&q}DؔoLwwZaM!6r)k9Mիʟ `;,O/'n@ZA8v6gu!P / `!8=ߴa kq1&t*>BG縃WqjE QĦ;Rc|G#i榷]n=$ڳycvJ^ҿz~ $ kꔀ@`% CACI(10IA^~*L)[el\&:?yLWYqbJةz0 z'uuz69AbC;v;Qe1氫=^ =6J;q's7XQ]PP#{=5o 9eUCN?^Bb CdžX󒁳Td=Ln!8E`vȐ8r}ODxwx^XXl%fgB޵Ci/^~VkI(^ğ~g/W 4W }ɓ9KAQqT@G>^o#s@sOÞxCQ T ߚ-a %b /; 7b` Q C3"N B{{2 F|Ga2s;zo@HB}4xշS8 BuZmފnؔ^2dL2̧f.A(.SHt@ (Y&e궿Y-= d+6>AXGcKog=u\Z=bB^-aOtdlU.6y_\>ǁ⯲o)>~ O .==_/Jt@beKsG< MwF(Laz @)bĭOPQ|˞wlaXde8GĄGdRCobрƥ^߿JUAp#ݎ$pW1> 7u"ydZF slVwvsn]9 j_x(]3tuO$jdE&UntB1~9ueGo~W3wߨ_Wz6];|ŹAG>2 /[Kp99Z&@|Lus T~;7Л! 3B%$6 Wno|9C]Na0;M=]RvhLwɋ9wh.ߏB~g`_Kg|l¤5dFc)h'1!÷-W;M<א^q9ΑI!3Zq^ .c2%!5~'PT Rn=/sy8&@R(UμAO(K܆?W~]hU$pzy*Lo^ҞNV%=5~^$rmݷ0Է`<Ұ(T'81҇ϒf~#kv JC[71@&j_@'B%"B@ mn dO_{X(E%8eo&PAf07?Dܦ>w?kٶ&o?c KQD9_ɺEG##;ONO+d̤12!puc) GꮈӜ6:!!8)I!rJ~eI, P)" JgyKm 0D/0.]Ys3rǻKK͕g}64x﫯4''R10\A;m! 1Wpqv!kG>wsZoʰYyU|ZqU`_ktp΂(F "e U{i%m>Gxeב~.MnG;̐?gěPTp]krRݐZ M=-*Mßm:|I# 9#q2`WLS tL>tnqE"x58̸JdٺQ'okJ>dns,[;5 QgSFOfu=2*+V'X77D]pFkWx:lu@ 60}/_k0猺OsGkP0V{*/n.b(^{ k%WzA|NML) BW }*d(*! p"RW.$ РHPI2MXVPRdI !P0f_z0ӑȹ:4,.˭=) |L#\r8bCu$I|Y֔-ʹl!6;{U{!X pOwZD@y= ] dKUb1pZ M³+NGWq(..;lWD"֘=yȄ>yWoVׯcb?-,  N{+Ji1uW־q;zouWc*-|.k驴0&"^a}ʹ>vZ담3QZ{%*dh@'e! s|+S^s;Y) S {/ = x*&|Ry80!f3P!4v{6キǀ[9[ΜdrBM!\ ($,yg?Mr<!}8딀Tf\u'<$)% -*HK'6k!In.$ 3Wr^A! '47}©IU33nɠꯒBcpWQ³]jݻI.GUIT| *O(?y;?di?-C'6;1o`'amypu IS @1gy$W&\UF^fG |C00*b,ѮMsٻ#d0>U3e ]=8-61ܯout @L( E)sx\e,H B~fBXy:?p8I$@I=o:뗋ݒ=7b V,a9P,ɧ`HpY!ՃDt`8&PF Zz̈́}^u0 X*$e_RmU@:'MT`un6;Hu'S,>l t?L)#IAmtmOo|[Gz,[>Ze#hw~烽`9 >֌M.b<fBJ| @߹_bo;͛ڽ!#+Wx.|MG "Kp S(!:ݏ bkd3F},eA2O?]@"MQ|dͥAN:7r/*%>-ƞQ?eaz߷?dd;[ix |PMuHJ;؃ 4V{wöq ^ >;>[{]Ί\??5Tb,D {fy"S#īnGK3ۙ=oZifcZHz$$<>IaF'tcw(|_vQl%È5⇑0/ԧ]^x,(h()&2Y(OB>1/ݬs)b r!p 7.ΚRYs'U# X @!l Og 3ϵI1 =9zaR`*ugc1'0q]82Bw$0HEK$-?ߏ'=SCf}?oC4 # .Q}mMs}žb` .W'/%`khm8\dDWtNA(`cf n- 2Xo-POj:{-5^7|m|O~̷o-xmeVNL})4_iۇqT0WC xx_@.݂c-lzB"D;ϒ0=-ʛˊm8 T=q75[y>_YGOҥ/ D:#E{&Gk=G_'Vzl#ФD!edX^^Fs<Դ=V\Rbv~"G /r-|s鷕qV ;bE\~le:H=J#$YxU=!\47^~TH)( pkѣ빫w>7;X[ݲvۋכ(nlcg5/%gL%0z8K-8osS^yԹCYjK0x?7nlLBܐYw.-|8\x"35 LF[ 1Z}Oxj.4ѣpRb TWQ4ձ P-'!o!e۪@_ Jef|^$%&ˈcD QLT=7 wivuU_'=ْeiPyp@(ʢB& |fv +tF=!A#1L1lq0U8@dQ;͖b.p̒M Eww i0—?[X3ٔI IE3%)I H`OfV}O輄f>u`UYsI!X4=D 7L0[kBKHEv9"@3B}, 6 Nt"pqi7Za{r=!M wjPa 1C}0c{pC*VwfZF F/ TXa0@=8OFxVhg}(*RfVXskՒ󒝏3UjNqqb! (V@r= ĉzYj[ :V)9/PMUL|M8MCu.J?9@\$1E'SA"w bՖ \(>_td?{ݷRoz ~TXy N %zn>4~;ED@}y$oa6ˮBV5I{7'q%K_EpYq080q*o& -ڳx''o4{DkƦwUN_@-`Bi1o4)Rr1Pt>E}F}N.|oNgK祮G7sUh ɛuCN5xbqAU>~Ф8@aif .xCЪY($ghK 9H3hD%Y)9N2Xr= tzIf_Q0/+pvb`HRD+"7F;{u7BFξ\5g#y(/VՐڀ Ĩx.[3褝DOgi| + hh;N~}Dxݞ$v~a 50 ( ) G;^C\aJeaG#㡅;\`>90-')x? dHBD=3yѷ~,w!rO5& ÈiQԍRH}G޽'/N_X:.gMʜ_"$bYU˗.C 9FQvRq; $% 4e1 Q!DD=KPPCfm7̌'yyޏp>xW;q1XXvG4֝@f~nH;)Lv%OqD&|L@pec OSY=m|մB  HX` (ÌjkS)t>&s ^El?ƢM`hd'j~<~3&= 'UGt`'ӥ!a\PZ9}4G*K!<)Qk1H4~\SP;.s,T֧@l0,RvMj8g|7F%j##d ˎ8?޳bg#2G0oL ݿ~~@A@XM+c,%fzsR- :f-YL?bLQtAyc󪩩Qxjp/|^eHm -cjr(9|d|NӐ62~oeժAN$@PD3 47fV2t J ZHG+: ~ʭ*lAAB8+("ܥ":BT<ݯ[}=vSWt 6'(I/$N JGWWbkNU~͗~NYRT"G`"t$;0@Z>@DDDD|>%[u9ݾJ?0k?)K-脰f PAt\ iWű\'`DŽ|H MгFA G 34v+V$ޑ3D rI.P\|gZo?wW0[]yQci;S(wVg1DH6e~Q12f*h_.t6?O8hU b&o[` esB)PE#&^:ēU([}` I,ERiP'E)eeo97*p'l p1ـ҂GD4#M"71PON]7xeu<#$ $H_[@?~n^ƔEf͟i|8X!+"D&1~uٴ‡DCr=~i]CK|k2-p+Ōl/JShDJ AȁDR0:B >$.:,Sj]NJtl$ $ qܖf}mʭ xcF DʀZȜp a 1DT99QyoWo?_~O[~(&ަ1ٛ|4?Ņ 5Fio.] (m ^: G?Rؚc0|Ι#(}pLY̘&+Q8W )پ^+> +Zҗ;)1gEHz )I1ߵז̸|%w+|q45S7p:썇p.B}]%z OƲ!) Б.;[k?O`}\nku3 B^w674t}MiqЮLu5b@|1QG/\zVr˟fˁ~Yrcce$p`dLNh8})]PNHVI}/.ש嫒}גt^Ezs> .%)!i5z]EglڳRY]$#{??ZA/ _y Psaջ20̗f0\bZk0Fa -d<PHJRވ-~-FR_O$UQ>orJJ3(:%2Y**8r4mH.oAW)39϶665@1̬k 1 2M} kH+N[-fd_ag@F&ŋNrTM*J ![>rť῵'{ Q("'.𼦵\mW~*WA2(;f<uoO'Xꃓ&ۈ#~Wn{l(s.dLgdi3C>2td 92ur:}pjmSɆcp 0\~0;cyB@rk(ˆA5;U z.k 4ZӴl :'j:INi)) ^[UhfuV 8+  A0#8zrLV!8g4٩Zj'LDpjA_ཎ,? y@(='SoJə ˚L&\9l>VwE:gȡ>y$I6`E:_[ITT@!l/M[,X~'DGF@\M[M,mp~#Ye`psPjHv>O C|1uO]A튡V5)Nt e^1{ۣtG!Fl^FۧrIOۋ|ZDĸΔ!U$$^IveMy#ܞ7B/̶~.@!R`* a;]rpl'~?y4BOhw6]!;W{qiDw!%9G^l"\s O W-E⒛fQ2j#I1 }%|z(l=>~2שx_'n Fx`jaSnp˻z~f81s|cǺ^Ԋ땸 EЯ0a4i(㸂8"(Le* ͖ͯ2c5h,>tϳrۯVNa 1/W bám_T\T ]Lq{ *u\w}{ǻX"q&ġdgN C Ɵ#qBGDPd0KCc2U$a >mLwB'XvX,%\P2T vݶ1'n ;4Øl " ,e>D*89bR ;-g^Ek.͡7' 33Rt OzpX`sg/y~*շC8d9:gEYANij1T6vzI=zݓayڃ͇\^p~/}HBI}]sDwep'DL hCRqZZ'4n7p7 DÎiQ͖tK(UE}6ț-'LQvЄe N6"FG6 -h\ GB$B9 $ PQQ#EDDDDILU D,DCA2ČE @$e "( 'ii+qrf R3&D M"iW' $ }f(7zd!LC{ɉ+qd@LGLYDNM)K.\9w`,DBA4I<tcYt$c~~Zqgyfڐ%؝Cl&S.:q!f9GN.frMJaE9䢒]η^ʥJeG6I16HE%vEIr]jT-i ;3NF 19rΕ&[DTJLi08PuBK6t @d*@K(RE[r/T7 spJ#L ('AM{ݗ5:;}g]NoU' b4rQy&ю" 1bJH45+C$TYhsQIS'n8U :M%Ys| rAqR*\*,(YNYTj f;xO/S2"03 }絢WQN̩EjcJ(>rmؒԳ&!o0۠L([l19w-wRbySs93W0 b$&МkK[2moA7C4 ek|TVm(9 L: V!4>N4' Ge[?V,!*{]%_HzdUDoGGF3Z͹kb>FP܄PWz=O >d;C6T0-ʪPBbeWoGz`x=%΀ iʀ Df8Q Ee-/7lN|lYH7m!WւP @Τy"6{ho랯-?ƹ9 #byΫ# /kӴBYJͅ]& sAȔtJhHxO4}2#l?'KZAP*rJ$&x؏Z ?zN.\OZL .5I"T1W{d2h?6n~$v辝Z,}RNAksYC0@wX@Yɽ PgS=0+/ Q.`h#TWsuլڼ4kuW}GR[  ?n+G]ţ~ F]H BRuvbE% *sϸYW\  DL%O`xv#sȬsn8[GQ>SѮqs4l9o91+FwϻT>k{^q>l3e󭦐=o"n߻눳NI ! sG|y6I}Mhw~=Z"bBanC )li"|D8hޙ1shS5xO,Ȓ%/~s~Ew~DUBVlƣCk[D'Gxlf}}X{AD1d 4t' vWPoma|ĀۥI{$~X bf'~A -ހX˓<?a_Hؗ #Aך?< !`0P~.cSkIrsΝ%7\=6ާc&i\hIq︜,]9iFVOٗ)YFdOu_FΎ(K1`\k ?{10kkʜz  q(n鷎Vϰ2o _Z޷O<)87>)ڵM@3)? l>oO(& ]YI|7']|O}(|8aW6y %yb$ạMC* zN{5[w{gxBbi~?K^w HGWH AsFm+Q$a+-!aK/hs3uqSH,q QwygPLԹ9(e5ZSmMܰXd|?e"(h@wN^6 s(fD\c !mT8<w:pGv$iWy(O}sj'\R8rQEXМP۬)U5Yt]ԕ L)?Rq8W~I"mtrϪ hwƧ.lO_}wOHs*ژY$U&WNRVL{Pav0 K<;'F& b![xl:z29/b"gB!Vcw3 &^LiDNעF07bkM]©G339M r  !(I~G "a  mFC v?GН@ !%>,9~f~: !VS0mkHrnĽ4bsIjZSL9КkI[+mh}"Ƞ5q֚n6ؕi4*qjdDxoym$,qd΃! XxQS?idf(CA1 Z.S.??g/L+R !O7gx_XiX7Gk&/`x !4ȵ>u5~e]G acWSt>QߋKLVbϻN¢6T4jNl$R _4ٷ\^.:Z,%=.pR*yJș~ %){:e$#o?iݠoZ7]C?}{ ?0暍vZk?<{WїƝvZ9V-DvkT6"U9GEhJ:T0\|["WRU̺S;^cݖ fWաmW` H0E<3,e=N- =~=ޏo[ͮŠd~u2`˨hOo3xp߽yMr{C)8@857NVXd/ˤvB@uS(Bs dHsqS/ϑ5 ,̣V,a~B(x?.kaZ czߺ:2x@Oz7=I[٦"&ҵx+z݊Íwev|R" 0 Lvˌ[جTƆSU- AXpew+vj7Wu2kEFُJDG1I1".YMϓ~|-vJ-Xgb^6(5D6TIs˓09%{dM;&zּ]*2F۔4 l VmJ'/%s v @8 E 3 "U+~l~  o7h>6.旑4=y=σM:@a?~v[S7)vq),cW_kZDuI a l:>L([p :l@>ڵ yLM(ߘ*E zSorռ܅<h?:7%:B1HS5ŷ|o QǾlLNI%Wtz;?؃'gu;-Ahq-{.r*7aЭ, (>BqDM/',vՇ윳?R7#=Kx74J4QƂPeGjx2-|N+TpZm$J#-ɤGg$+hq7=3Xga>Fp|LȒ*WgώESۻ $?O?ߞҷ?+@<OÏk'K EN>HFFR<$ Wu,t U*Ея4~2^U#P+:=)A˻3xcp&a`Bu((x @K!l~A0}E6v{5PfR)#.U<1 (2\%J?rbr E`AϢzg_(¾8Ur/5^H c/K?ߨe ,QFn~u쥍L U@l`*ȍ=-cwSp>hs81DTx{0b A$ A>zk@8i#ܻ\ltiqd@JJuuimW`u|k9:HN!O=ISzRd@@/F%=((%-P`)"ܴȐ,6>HѬtSEGu:=z?]t"qB2M $:˵1/hI?)hw]?|N[_J[$&PŽtUJ/KkIy1. dYKFDI 6Gifr.Tp?uUWJ(b;/\?N| F-]P1Ay$iLG]b+tav 0Z.l}g* 7m̼@/Cz> n r^ktߋln'Pj.+/#'hv@, Mκ^2m#j/֯}HUl``6 hc5.pG wo3P ٟ}E v%:j1%!yKy./K bE70e cr3˫_O6!C{m8SA~fJG'<;|ߣۅrxgA"0⣫ua?t$nW7I ˌoھ:{+ ѽi Ц8Xb qSWk~v77a;2C4P@j`5g>o$_ci[۾U1vpʄLI0VWzX;˻1O ūV}&얒I%;mJPP+zɾ{|m.hPUdlS)$qt1$1}݂7u캿yS1k۷ֿi_xh$I" m3;1XE8$˭-A1O)ް[E=wzǥ1e qª5%VJ#)uĐR0&C`YNL!Qsr+z֨u'HѪ~_jzq8g1DQ@shu`@_K!;F G@`#xd47Ԑ9x(q >#At.j^dH_r"at=x;ۯq9d#U(EgMOp.xw2 #$MMǔC!,O%\7/!]/o7iS!0tV8viKi’-3OU֫c=b˰ېO$C"oG0&tf~'y#<*ܧ\xJ#MGE 5 Ғy8=D)`$cawdwITF *'6ߩ7J#VTWӊ5JVv-뱮)yI/:B{'ytpY.^Ѡ-W=QP8m[ !1;Evwy6E " $B$$?lm|E~sMƟ $DnPutEiUmNM2~f< ~l -XRckLR=\&2G *(0d Ձ,1cӼahċq7]͡m_uی Hk@%oa޸>>8;}`dbXJ3}%J1ih.ZXQ@*{krRؘC/$Stk7㼞r')v᳕m`Y=WmLNnjEPz[YPqvg~yGf9a>Y{쓂LA(cÔRKSISʡ O{(*=ĠElM12~WC~^q;%FjaemtD\ A _/^$6RR_^ޛǾ;?oa5-|_!=/`guʀxR@_{֫1??A/-lC3'%݈YS 'forS+&tqwqn:Ym_ALN'Vn>l_#eL^Xz^ЈizJIs?,9?|$f c厖nnBfP?϶cN_.nkkbn@HH !2b_8  Z.R+h`6`:70j9LR!={5ɻ)ݰHGLH_hǫn5I> @-m (2`"1^QMfU怹b]x\B#]ŖTO(0>odJ a5?A,aH&-~l?_Y\~ŝrz,W!mRt! |0 [K!`sz8;zDZr-D;6r(L\ A؂b }`?`zmGV9t͡ђJv?jguqv"Qy_rH]0ڧzgCUx"B BaҌ$:eu鉲 _#1F>~9Pb ~yUȌz26@T^]ιxd0ږM(>\C6Mw)orG݀"bP7P5#@@jL>Q,(ge6ƂKjdMݥᎸ# >,awCT Xil$ S HB\ڲ9i1i"EbҠc;Buw zCK4M FMSc!]S7bMbsw[Q$a, ĔXIlٺC]-2}qdͭV-p_6~d^ A$I' T"Lr C"jt]2RisG)5l *Q4M4RBi.;uKU"SJ7 >>v]&(8I¸07H,jX+,!EUat \fwivԚd1tQ4RN|Ooq;;^dkngJ6O y%p;J&ݬ>޿@\u(=UpĹ֋=~{ru`A&@9rCIےbhN љF7晆(FIH+h.p bn a۞|IXXhcsOk>ߦ>>e1DpO>PLaJQ@D]0w0fBHCQ2f2"}s3 $M4\9nG hlyRxtX(BBP6uc"dr  qy{oy^,$ fb|K?DЅdNՇ'nh|c۲g+yy֨1mT "q c_F¯ǼHv1(aŕ۶XpX+=n34ujv(0LrP^y :yߕ>z 飺gii53De'^V>iV|""^s񬮟_^يR<%٢K]OxWUj~i+$iƫH(К }V5VtE:cѩh^0%he{uBڨo0$‚!D^H)bDA2p[Rc>_a1)P !$)A>3+~~-BOO*ރ]\-9h^3QWFww4{i8D; ue8|)*ߟ!sg((2<+7ف]0ahрxA)1"CQ\7Ԗ.)re5sdfܻz܀D'|) 9`,7jehaVˠmlӭ W6K\txߧ[mRxN vxzEowlj`EAV61+ ؊l.`\] z=Ѳ%:Ņڨb U9&L$ pfx'Q=B~??n[b>.S\^Y۞Y~N+mnBHw;!]f~QU^wkѡ` l60WͅP~]s?om͠ꪹjhD%wm "VO4bikZݻ~G|h!HpџZG֡ ia-NEDԍ8_ÿ=| v{?=b+qf8P##.UM~_dyM硴Gϴ 9m8q`p Αq“ZESa30U/?mk& /YEniT 081?6Cn\ʉeNW2`L}O\hѣJ~ <&(|̡`.=/5ufzukkgmֹ 3f;tNJ1AX-J A r(>_KVum^USbۼx9}sۇ^Ԙ,}q yc؞,ϥ/Gf'((j8(@U/ 3gHYc4'_M7T}{[/oa`" \(br4 f~W"_4Aj/:|oإ%m4:3Wҧ3*zoK 0%2`vELq >/Vz)FPD.smhozCs0Zb϶^I|bl{g>^.ۿǘ#|m;H&D'&E}?~_r"UćYxwI/b* u qҸҕ>1ӧGA H&"{;JcDR]sARR'.12pΧ7ލ,Qo}*DYx.`rO,dg{=`,]MZ֯#pϏi fɹQ(X/؜ 3<: J㠞. 6;^Z/jq#gĻ%/pOx540)`LXΦg݌ ގ`tаwz$Ą=T`=zg8GGYVϒ޼?h}s$ꐐp,<@v xM#{7kEw=0;f~U ? QEE2t;Ojlcco.-=Fv.?.-]>Z[$g G:DLH!PU{3 ;o}/(5F_;'AJ.,H=@;x1KoĴ:*۝f;hn~e&,qFŜ{@ ;\fnW1ijj诂0Ak!Nt&$?|ʉ[u:UgzG\>聕:%woӺr&oxdE%Rl'eۚ[o|,J41RVuYSn}/99z9un KEFXۋ;U#Y?M~1kkv+{!KD8Z Npd|rF];b- yoO}v;]‰vB=qrw%Kr*1[93KD P=''v qG:y@`!(`n_7aLE q8\\9 \bM.r;@Fh(Q'm~jֶE7t=6d6>.:]t6JK|M],c~37qg"W14UITN*sScRu( Oiz=U| kEVQTDLx+RFØnhSgAkq_R1fYJbNj~T~e |Q~CE'KܸبA  BH8-m[KsHBNi)uO #ҭD3J!w7O]_v$|ed"\{OgV)My>M#Coz'_I뻣3A.1xzOV{$P " tF}WQkm+OUORS[$shm%@|mh{ {M,*UOڏ, u@5A2wiOw88kM5v-4znS(m^;:Fux!t_[3>+F`(^D@@DH$V5U7?׉4X<ی{w}(bC,h^ȪؖXo@ܛ6?rqUu|| NOaяu7nˠ c1p1 8A1@߫NM ( 4]&QnxSȢpDnϼm;qy;y˚};=Ax?3L݁?wExʁ| ,J.D^[ؓڣuU^Zs=y߉AC 8E, &|oP|B7?6N^.Yw2KHr)ᡢ}Sl^ۥ~d #֊XF+wZN٥){ν|ID6L #\H=>4B$VŹb6)F&%ೀz^}nhyJmf 怈72G.'`GPgCו5#浵8>H]#?bJ^-+Yma`2gpaH>su_1 ~'sU_twW]d6Ihn:oRp7B@'UD!1H4HM6Cw踧i3j}g(_z|y5(cFLc 95Z;n/9@ J!tnиQGKU{1n&&@t=F\Mwo27&bxoScv}>Z4J:VR"{ GW=unB#]2W:oXߘNF* ( >AQ *1/ł%Q?S+};q4m71C)2rK1M'Gdֆrn,쮪D`YCt!EJ#$ OPRIIWx<\_2봔k KjtR N64lzKp5&z圙/l[V |)cADPC$h1 JRXD(mEᢗ̩!Ljn":GlInNܾȂFƻ;ܳ4󷎣EyE[^A"A_FfC5"@T.|pkyb+n37,7P~i\{k,JENElYǮ)%dD${sWF=~ >'$;àx!)Gr'(]|W <<5zo>JĂF+~O/0H5]6"K٩pV1 n# _ߥ:U?}"n|mu> +jKJA. iG^ @9o~u<YӦ}-P|2@s,=B=-E' lOD+ΧL7o[lQOqϘ =&@ >lx%k F8-Zib!w*֐I2"D] '{i&C<ʞZ&i 5$Pۻ7fa YӰz7'8ϟhq}^:?Uc~׽u]t࿡9t.*M"C;xM:MM=RL *} .=M9OS^p_L/5ЮZ(0<.~jv/]EUܔ,zֲvt[x)E{'uѩD~}sJ5L\!ݛ1VK!N߯BCZM8)wk} L5Gҋ+O7 cPIXr)0Wh᫬.q-V dkqb6@9ܔ:1JsZls` Pq+?-nQ( riJ\! +iH?2*X;է&cyM[\q`<*Ne\YV'>Ҿ,_7){m!Zۭ;37&pRG7]X&B s7&E4Ék۵U/Nƫٴc҄ps4ԇ9[0@% "9%h 85D!#1uZe5i@b b4)VU(Gw;HQ¯OmH%q.?Pyuêwɉ!SP<'tXC}u+NЋsΗYdƽWkiOXO:f ޡuuGl ,-:0]q"ːl$]LyrVFy=gB3<"`v?}h*ڤLB[Zicۦa})E-!duŪߺ]JͿ;묺/jjIq Ϻ [U:d_euGGyʓu,3F8࿝6{rK@ sL3C@ ;y3D?^4FC !8Ӂ@@ZS=)7\9h#kYY-s%G m-qew+,6DH* !1Z~ș":ߏoA{&eh^e/kIw:})Le?aÃsQ~s.^E@H "B{_Ko$d>T(n@@ ^v)iM[.74v@׬R:ėmo{5z 40]-%[#.4JL*8)5aDI@hHm&Xj` (hHM,),wCR:a@~ߏ'HBjTF f||O/;=bH" 4cS?$r"W¨&PnJbO,`̠@TY!hiYJ!7G3Ր:yvA|?7pXLe0wͽBrЦ0k ֬4 dE#NU'!.a%Qzc7GC\\\zy y_i1бԠ)H6g8o#K[y8P (4@P RQU(M+FLPJ1%@j&q.f$2(a V1`P@P 45D%DF$\%-F;xvBp8-969[i|1V.ʣ;"  1gσ9{_{OI٠= &&¶((J^T q) FRTBE{ܓAd¡p$YȝG T wfյҹS+5&ZՆ2IW9Um]T!r;UA¬s+c o%t~[Զ=gt`cMHXI(AZJ&d?G f"/-aX݊M9 @( SlJCqRAbv"^~َHBRG \(Pvt&G0~*˧BtSxƷi8l PX^gpHQ|g*RzP]ex$~5t Ee:޷Φ6qdgy }KOoa'-%F6Ȕ`oǩ= a `~kz;ՋYfAc=G M"@nYȤ\Iϯ׻{Sկ5icM4$RLObX៘p $.yv#Hr(ɦ @$},ik9^" l!k=Olɲ+5V9I> 0)\Gk>,z+~YJ'ׯA_kq!kuЈ.#iCH(w%;(eu7ZKeo˔p єRDJQ!nԠz$ ޙ^p70wwq.57|fvgJoWH nFi NU՟zM{"hZE- Q[ԅI$L]ըQx#,~7Mo[>&?׈`Vk0`P0yP禁:h=X]&@IbWN`l]n^}yvl2331$MsηMzm֙tUS=L21og@Oc|'9CRl< ħ+>pk:o?o'o9zvu"a0vn<8Ecf۶lFu"}1od=y!4zr |e*%)@o[ݜ4~J Rk@{T{ŋr3O=Ɋb grPDHDPLnԯe_es+W-lI=T7}oZONW\bfLEd&PAmP?D/Br-V/vK>Ϭ#㨘YBl^]}S8J:)@lc3/ScIs]9mR,v59h*R.F$Np: K>RSi+ɑA6@`OW{ >fKOK>BJuн1>sNǫN;箈=6t `@`aaP1U5%Q1AT$qc|6vhβHQ 5jM9;]O}]"kVh?Ѻ_"]f3եM0|D1:j@U۵鴷MgZE >e*o_: [g2I$  H RPB".vAܮ52)2v^_}j}kdgVSzz!;IcYط;u;2#D}V0>=u]({plGL]MFB P]A!w_lV$ S߰m*" o&j&HB#>tZ8dģɼI])r{ޢVqZ6?7*});:kv!VBF?E$ճװ@E E*RFY^mR0ܥ1b HVGb kqUD>I AHQokySx\(~#ڡ yFFAN=&@xDz$+c%ȕ% 0^?yԦIgg 6DAy~%"W<sH@W{m[]f`lﱕ&N1Mb鈚Qk4Z??Z+Cn>6em??G|SC,:a ϩi}?~Pby4ٟ9ttZvْfJNx)iNM}%<M,7 ]ϲ 1!ٟjB_Aϳ?2]5pk9G`DPU ,A8cJPȋ)QiA3z],ռknF$2{"gq}.‡_|f֊8Г~i6D0M9h|:*O~ bCՂL)A$ ܟԏMR\4`?I cf{'J ^oIC>6ԺZIݡd#P(&Ӌ v`M0?JT% E&.c!,XZ,N##l`Ej:-ifesM ^ 'x`~&z锣O,qn[qt:g&5_~=G2\#;L3L|?D/Hǩ";qCGJKf}bR: FۖL|ǰH?<б5:y|O`N#cMrO˓ܱt\{O5ڕ t^1yKv%%f C'J \p/!j\%@alH2;Zc8X48H)28i@pf^G<|@fHW5PSщvlp?8WG+yka1_2>yM{C-`).-8 Dl7*W􂲖ryp-*mNɵ׈&&:T0I}tH^g3 I.[A5iycN?kj! C) دM%F;ͻ4Y)WҨ~Zc"z@uZV#fAI|FM_g~V[2֕PckU=6=_ S3#͐KDJ(X ڴ91Wݿ`#T:91Nwř<R`?ͨi,Z~^-"/ML欝cje϶8$%,`?=•r@n>agddlmFNX  ^D-:PHAK 2$R}H@3XG!jH1GTjϰ@~s~&zS/|QX au{ms*Xwpoty~C/+cfwr(I8"\6Rx $ ?D}~\m6YKTWn;|`up$c,H/ASL(zb+)C|0r[0췙=qH|P~ gD )V "..x۩gͻUЁuT yf/nS 72w5;+(]&c # ""7qYxq{ $MABâ9;\g܀ E范99K eJzXT\ {{vlf`m ~{ٝ /9H֟q c (K~fp3}?ഁql7 [KVlpF2&HbQ$Ȗ|ޞStK 38d  c)'_YlLP B!)4B%@Iݛy:O?}A'NҐZ>qdJd&$L0ȳBb0tYB\!YkkJi@))ID w[Z0Ǒ'$P(/4Ւ5bf!6cq1¸mn,b-ˀ6FKA%;p- j "E4i]n-.D405vAd vXu݌6U#l(ANw'[l|.i*C\h.1meWuH.ۚKU]YAro!,7(U6ݶ́mR"{>/ۡsk;z;' vSH9Wv0(&h st'L`~U<70iiF5ʔ"32P!J4ACH-% 9ۣI# 5I㦅xųcev"'(-O Nl [_m-"&Gߧu Hf&b˽;9D&p![rXEIZrR("2H;ٴqq>3"mDV߃]ftBYV|ɺd-ڕw~=a~Ngg=ԜG9n[Lb0SEA J_ȯ?-}ڝƮvv4 /S_ (٨Ux_?oow6jWIºCW"0L}W-x{j-|l')x+ʢє`L)` V !ER׊Au$@DdϢWTTN*g,S u)쀶*0Qpđ~MVoq+4⥓E͐٨@ &6q;Ѓ[yrmC7'gr>_A͞dK1gz9 4ñ+˷pDZ0ڤ ]uVK : Wa#^lv>P"<&ClI5m}97l!4pzx J9b@^GQb.4϶gOwkŸmCxI%NJ! !.ꐆA08K=냋eꚖYޟO7#ԶE&{M|!QPRD me lFyTA+.O007`T çI^L)3 Z<_8{>٬ߧi<7od!=a;bX:A/霧6 $(l)7Gp*FYIt1֑h 'm"Yr͆ٱ`t۷;Z{-PcזOP Q0Sz,>x(Uиp ke>0`8i,5dҕc9[Q& iI%"F]4a-dD0ckun$M)+6[ c"U&٤ID `"[w)99D^Q^ 4" mg#/^ML#"#f98gO5?A0,Q<0kIoq_K.>y2Ze1NP:T)H0>9gՏyi$PI7(vT #z0/We0h p@B҇+Dp@W*[(#dȤ@;V録` K>8{dP.@µCi#/i~h|Mu4vlT"qq MtsKcT[ 5xX<v͟4.OެzF(HQ{Ow,²s (^@5AZ\6zȪ=kXLt_1}HW3+.Nsz}S)8 /Xv)ը7#tBHQ>غX&o+w0{?qŒv sV;$^E Ԯ*'e]2WNސ d9晦0?JW3ze)tm&gaI!u Wzb1W&[Q_[Nq``IbЀ@("@)rG]{>__8?k_v0KZs`*aD>6 3|ߧmw7m;]j+7lT?y,̳Rb;?BƘT.?z{\ N5F+1?/4 $N[.!\un!k 90HC|8AQ*ćvAW+Em ]HOlRѓZ9m?}/w?շ4}VH܍fْ(< 6Jc. IiBF6+ -P6f&5)FQځq]SJTUac`SI5l*C`C "PCv c "i-aPT`[a XX¹ pkDdjN-B@pV:%6P3pGkUjQksP [.)&!݂rLɔG~y/oA(?GkvZuƎeM +!H^@AniMc8eJe `OwL۴/YcM%4m-Tt'#o܁sYحl&ͥrLIGv/\Z7p%yD|EZBhv4&p !ijs'FuQ7AA3R@&zR=Xxɶ%-X˸x?ٹVK˰VXĉؚn[ѰժiJ餻"<,b`\BB *iKYK+J$+@IzF%Ɉw &;vhJc4,%M KLblۺ,b0ͱ,̶ ڔ4kJ´+KZGx3!%}6N>:&!V#b#FF0mhh@,V٣v*lDMX b8Juk*v6PmF "F6iI4SKr[5  %u'>g׭cTD\b[T)a06߆σuq$)8RwqڵQՌ"a޻o,h]@;jdnT#&+`U_^r6l>̴ Iֳ}:RԻ0]08̶.:FOy1N`HIRk)6rˁb8/K[w줈8&Ivxk3$7ص~~OG,be|%pHH"l뻎"WCq&?ެE#~5Z=B`M3{%wO׌n_mK r!5#WkPcb,,GS:0P $GL"rP?`Y#x]1hݱcL ĺO٭.~z (`E^JrL ]ɴK$ ~:ڟ U63;bV?J=2wXf0̖ J8.3aX9|_)ȼ Ω"yﱧqR?7b=)W="̠M iOiEMhXYt @t J$F;4N׽潽*[{jARE)vHy}rbK 0Cr$ ='("A gna:#W,aY@PSmQLУ1_8"Ng "4h{.أ'32AV?;rf'@ě_h1G*'MA4{~]_PA|}żFj`Z@&j-țGHcCvf^da4(Dg3%6ȇ_6wAS@18ρR(i]iRHFJ#ы-&A7Ў|L`@} 3=T_`Л ]Fl{S`k"櫎M|fZ[Ax*}yF` uz6s|4S~^OvՏ#jc$2ꎅ)bKTD(3BCsϟ@=Lʯ71ɢ0tɦ^ [eNDZF"(I` W|ZͯWX{~̜; Y$S}&Q}>ؤ@ !,5O-κ/FEh͇ou.w'aJc7Д~z$0|R0DHs/jsu`I_Y'34X0B.ړs/3NG汨5s+u-o~T.3JSc|]pW~V3T zڰ!Cn:3qIafwJ-nݪ Y6@ULE2{6 ]G8<,ߏ@?A?.iwr/y?wهSžq)xO31NT% #Tݾ7WCd2ducE׻Z=R$DXPY1BͮNӺkq(oGh?.&rzDbD'&cS[}Wr3ÜԵQq_vzNKbҹtIޠk PCSTֆN>>ۊUEODm}5wCËxҪkĺ( 7$Iw*D|1OwlkG7IBX??%6yκ}C#?oF,Hks_fY!@$ Pcl&&)h*f Za Z"HH)j**&h *&J Xgm@9k];y%Gw|_k_}^/}h7QP>-o*ۈUvS%aaՎ[8Xq6~Z\Y3rVS]=ug7Lxɤ:6W ^x@̘fH% .]'SA 6|o1ooDḏ@wqcy2N+/>p7mݻ{vdhH%hCou_W^[edBIǎ,Z_2p(`ό@}ē~wgqlkW;;]WOy "HP[d+-3*xș>2ekXȦ#:3xE 3(&bSA%vİ6aWIK}Qތ(CE**NkpI~/~gС_L/\ ܒod&ѵY1TV{\^}JF׌I\A;Fwkμba|)MʽB"Wǣ7\qT111 X tp䦙Hw6o0%E!^nៗFY޼me`=7kKD;pa@EKB#@exnQ<ļmZPIxЈeɼ7f% ҡ`}[dPf-_)K߯= 9YwJeAaxٶlC'<-Y)THVT@Iv?5~gt>)6 U)Y#鍪ױA WuAf+e$3rw1FZ{wQg}0y}|?cYX%|m58 WS)gzoeFP NpMT7K A>5xy2GGUh#UpZ-ބW+N})ՄN+'( ʝ`ט^'ґy{V&(qwx $+S40iDB^ f=sB,ΫTx{WXYn<G'd`+v1rQ,3~lԐ]GI3 j&->JN9"MVdHΛ> ,^BScm8vu4bR@- `W´2Sa@_Y /V*a9d'Vֵ< AW-`Ϭw_ud6}CZE--]2P7,'J(yG%I?½7eZW\u}:1'a>oi(@>RM ?ޜ^Le,޾7N _ YnϻS 1  i哵WiͲ ;9be%=DqzTXWcOn?CsDBя)]Pl qd6ֽ p`NfVF&m>&]x]R)dNN)|~-%sN7n^hH;3V hhxPY<\sZ>3F!v-Wɚ"A ;9O=6jQM/%)?~EAۺjZLvbq׏%1nibFɒ]a`|_v.:krߞ-.B 3S@kzI6U?s W3LHv'ʤ"0v(,*eÏyZ(2隃6zr iWc[!X iݸXqzxJ#d]omsFRYf/'_9J;x_~^wOw^'zcc _t c7y-[ OfL'{juɗ y)SWks6qpi?a=s@O\\K$<5/Ϲb ͣ |5%=maE w֠6(d,n? Gf ߆27К;- 酩~oMvaQ+/8SD%L^&ww^{ä/ZEB1((J$af|`kJ J47ay],?0r4ڣ zomު/ R#oGH*]md8ƽ8ҴFliH|aR.+2JdNGF&0Ό:yw6phDp'~[g:Fc0uq g`2Wntޕy]5?bg]$2)f0& [bEj50d"BO%v4R*" ]#? 5Q&ˑ¨(I2SABDL@)KD L~ݢ8d:\s=MZ" ‰Q|rN8" Kh`$`SD-,l8GPg~4fMIL:,D7^0'9Ή!EE?\# JQĜ[>o!fsox9 Ǧ0#lgS޲54e $# 9b "Y=} )b(.f&L ! $K]p`4|Slq¼: x~_,,''V6J]!__+0PRs@RQHET_M7k>S:?W#u~b Day (fYGD% d> ;=Yl\$s. 8jل7 `2MPX蘶汓F@8v'8SEdO`>$`GM9Y:Cq98sDWoLXLȀhP@2-G+cw:K'yoDLпO>E'&->jD ռ %P->?+9҅alR̝e0w NIԚ{ױm,5] de<<\PQ0NmN@'\[4{65CQ u}ƣ ԗz{}<2G6oi92Do9&ŷ>6~a/ K~Љ>fu8OִX#B`]sү 4O AwkfxWd$1bvABKCҬj Kۈ%:Ә)vBm{nFGtB<= ,QNnt^/) nb}߃&quweT0햡ԠĞ^kZ]1" P%As+A;kZj 7Coc>uHHj'g wDS&GUKv{-2SjV "q$8|M# T)}Tw +b[1zJzv{ n .f)FmN[לpO\RNy"_q;$EmҤ:1´J~ >WP %Sr*^۹GQ=jo̳V~أ'F(lO㇘YnLV}(*[,|ltA(O:]wGbN#o{^ "[b/Y+&V0 sr#)3Ɵ/펀}?)~5ʈzNRw8~Ojyn@]nG]>b_'o>ب6TӠ@W$T*&;!}[V"g%Yz1ûM1<%89;bK%0:00Ah֨i|^ś=3tgg~/aD_Ph|;?M_4~Z5P1"0v0 %i̯5^{~׉^B ̾({K!= l 1OYJcؠyeڡ]3%uY7W>__im{<8 /yZXi k}FX&>㑣Jb _0yb78,sE" R_SkOѵ._vR?]I|#J>i(TG-ˮbbAϦu}99C{w/'/*RI>r[])(iH* b*$J"i(H$"*)*hFHp"g)IEA\QCfAȈp4*&D0ED( " @-O2+UGS5 > tg R 2%|Fˬ>gpn$ߩ 7*EI,J*!tW +i(Fc`eɽi22zw~c~vƸbTMmQ)cBSVg,M(2ֶ_ӹ;Ả!O1k 7xX!)s#QN JQnd9GM3dM$ 8HN1 +6B\'+``s8?'x'o"kĂԝ N|QqSsdyDtx,6)U&%$fUe T BWw=披ɔ7Yz->>_%uw>j'7 a ƗfKƷiWn0ߊ=$@K:KU{ն=8B Y$}I'W8 IL*(_6U^/R3[ PjHVD{MJ$EӫL^] H69vnd=Yl]0(fx }>J}).'gc~W*HUgO_b 7=R%`whi.&TJRhr.cLp6:›(A`Xs-EgJ.D9z`^RpcbQ9]rEx\hqvely[e=x'[$ H%wٺ ^'zCTY(LS$  mtT]8Aay5۝V7e£[}B r%FR7AyJTL3 J"UPCxJ(.F$~v2]_ 0h#D ˺b\]Q2ǃ &y`}fI,x/.ϱJBki ƴ=kw|Ih %v景L,ǺbVYiB{QWZJ G­-x{3;6DH3US 8HT*'+Wng>u1w\N>[!  9.]+/~ Ct{_nZE٢a0)hbڣ|MLx<ª:`5ɷtYd\{))Һ-VM/O voH҂XZ(AOm3lj(Tk-d<^ %K޻ckE1!ȜL$~_옄{p,𼺲 <8 XLyљ(H'nEuQpH_00V.M49 ߁ߨXGC%Y *u PBgpשo\;#~t~b/ĹU2d˻MB0+rѱY\eރWѮ{/bkgQ$b}Abԟ)ᡝ}ly Ų>ɦ%9kFډ=j? @}UОvt+Ӣ6%L+%6^ nl⠯U8Um^u:i+9C~fuËi|xqJ׳>ҿUX}ZĴ1LIu=!~6єm0$YؽYp@S$|[ŧh^/>nEfM䆳f$i HP$ *)@ &Ia D +r*Fl+$p 8E -hGeE\&U DrS"#mQB4D%D% QD$34D4EAK0STL Q,"KD&[;|yU_]3>&D(8 q"TS}>,*JZ{I̴ԿG|%?R3,ݠL#([J\'9| o:j44:!N&s߻?IؙEzmV{Kɽ%ԝs:yՌB-XzBݑLх[4\?U'[F < 'E;x_&aK~#}>򥝲K~ H;~йK&̠RD)H#p]ovddąz sتQ0Hbf "i"JB&Tb#`ێ/Xu't'O_e?vn%O FH20Gzfy+Vpƞz-rJ]<z |j6|*|6{3݉ V,Je*S4Wqc7I_N U:'"9!ɊOpr3B(a,UYOzCRI7bQGyAZLI딚6q#~^cfB9j9n-I%3at ])u(KXg&YtSxZ +y nTǼ' v[1&?M2t6OPv.aL?+_-A-:kG߾#ϰ?:=y- ̄/2K [*怡KQ4BL 0 0}lFP$jdZʤ4$5K] -8x=70),zE dZx)H1φ."0 VKb<ЇVQr&m[۸Ao3#پ fr($! j;Yse~l/n7s^/{O9ϵ_P*NwrUg[!DB֘\ :fn|t;WPĹIpw};v1 M;0)(WѮ8M&=W-gqYn֣ƞRcP[ϕq0 Ȝtr@i,S{bZÁ "fP'!y({8);q$`/IJ<P   FEssM|u%+b)Lգ 9b`f$k)\B䜠q{e$\pTX_VY9=lyg|y7FM[#ebF@pس6vWV5xf?S]apn{`Mjr^4#$3cfEA#<@Ub߰c_C?ze|44jF^$񥼟5|m+s|z,PIPƞpO:fP:@Sft4>@:CEj+!VT$C ' Gzmؘ6Ƥ# d6.l Eݬ'JEbvHF$WLM1x@>"ӳS s66$`gt>[ZaPM0R/쬼и9w ߲Z«n$O -U,-̃?Z@*sYM<^D߅BK\/Pi>Qxc:m[ak<8-hV]S"ftC \+:D>=? 8A6)N+f+B򛴖GJ9;|<6= < 4CM SF1J!8E8 (AQ2PE)Soij!&ZR )e b1aSHbfU HBbb!AbTd(@"PF%LC`jb()(cI2DK!JD$!@-s*uu5k{Os:saU[OL7_ݗd銞J+y#aE8k$yoi )%}$o<_:~'ay||='D(*Ҡ%#L@@((AHAHg`E *SJ"EĠؕD]$R6l"gU>$=XqNVc+yTinZ/~:7Y^f~tBUf5-4|jɠI,uyQ[-٧ LT G (j ˋS4ŶFګ}Izձo[ր}ԣ1ԊKV<]dgP};O"n00U/h." J^+mӿqw@]E%h^7u *~11װE^/mB=@l$<;b\ZJ2T͓/);^>>?B84]F7Z>~?mkބƲL.ٯG?7_G,G:25=WlUi2 ղNOMAu+tT JHEuW0J\O}sT8|=# 4t/<^]N|>|z1t,?_79VT둿}h:W'3)<ۭ㚣m&b]fݸYg)gi0o FOh@ 0}LZȽcmhڐAԵ@ okE0[} E"xӼ2~Gr9vT MZ3YUcqW;$\,BΕ_IM^OV_u/Т޲ XHK#y9h$Kiu_, .< z7Jn 3;8 VuWa&kJ: pLH*l] Uj;>OWC2-0x>H0h_cF"Kו%M !*JLrH+_&?Yiѵ7-j{*n9J0>AaFXrw/s{(+R0^Δ"TWTQ=PkI?̃tc3D8kXFқ"cMpj,{-=}}W$"l&毀@ؿ -;&˰60š7-K9,߭K6*BoM%ց'I_CߩJ8qGo_9Xm,*I>FWl(qYe+: 8 rc%$Z!zl=M #d]pjoש=]zL6gY\!Lq?H.!N_q̩P؋?Px;QPTA*i ^ΰ@Y$;F~ A 3KhщK6L1e +J7}s_ D?HqN;h8D@HBl?Lc`8Il'(mٜ!T;w#V[%l}dUo3S|.Ul,n׳-h!:gdPL8+: 0Xk?WjsNx\GY9هj훹9??-ž]*[vDF;96rKИ~v}a1aaJuAAhx[(uSVs =aBp>jlZ4nU'KOBVGgo>S?MTA*>LELaujzCRJi4uL ;_[Bz ic/i;-oio@}Uf9'/]=FmRD烈3^H/Lf<,>?):&S^RP N6\K2kgH{aALŐӰL ^X?+vBm,v ji؅c=VId, H7izEVOm r95l!zsATHO[-2:?4M!n-!OfCK{Qާ#FOȪsT~9v,tHT =Ž(E4#|sFbɐ&qfU7}򬒇e$tsǠ$sQG^[NrRKmMB/D?|i;\?kQ$_V`FTdGޘpEo$[ZpJYܲ?Bw헢g/ތf?b`G8Kvצ;Su P_UC1=x_c"Wȸ݉" .ڂ]@]|qIF=[>kfoNJiB-wx{$=e*ɩ;撼-65sANtgF2DkoGn ,'RWuj6_GMavH_܀kEHF:8>sCn 0ׯ9rQg^/T"G_ۼs){I|Vv ~stj 7nJ`g7+_Ϗbֶ4^aϓz15)۶.r= 5xNQ]_/py4g}9h0U \paI Q @L!6;^Ͷ20)Y *@߶:) 6_{Nc3RM2%_\qH#$I7O+*_JSKkkz\2Z^SKV 3hُ2*+!Р|C&-y۵?n;^zwf^|~_0;w`QcG=#?2+Tv 9e&>\ 'iر Up Տ?7eUb; iY7,sn|CxlYg$Wx|FN?_J%KݠFU"e彬' x3g<#Du/ (*)V<s}dh[n4߭r0x%+ OUɌ` 8?k%4t9da~;tTLi9 OB=N!7:-#*C"Ox̰x9v-e7)JZyb A 4'b2sڧyw^4O(Et*q1NlO%AZ/ex }?_ {E18|Ev7,eQ{ W}ؔT*sv/_jj#Xs x&ȉsEIy|pz}1xLu#5|Uֹ%/(khHn]O׊p=Ocw` ,R;0o BU]ߗWEI aѩ-?.=[F1>@8R^픐.cM ^`H(xeY.7\PQtP8zrP=v뽴Tt~QqhJn5MSA~PAJ FicύRq`?*- g uVؠ[[>(:D>jQsB%I}^ aAҳ1\I[ G.WXY ;o3T)~QM]$![歹w~j'+hƦVRM\*+"- Cݼ/9486ko}P:oHℑ7zwk=3Z"&UOfiY_p͑&H;\*>NZٷO% i)/v~8O[Qc2҇6;WsNNqnr^ Lm`r݅eY>N;T]6u˗Jvyʍ( CBť,WLPL-NǢ23QGj'zugyҞz+a?Rj*d~h/튚Sc2cg)TaYTJ NY-֍tBo˂`۩23(`}< F {:pWמa, |R,S` 7IQ,g >VY?ˣڌDvh723DtY\G./&?g}SD=l*=, D~sy\ AHA1H!b-@Om.ɝwys-6 /}tEh\NE<#9ءbߠܒ#!IGnk6UdT nS?ۮp qƶBNaRy[a'`Zl,ҭlZ'cjǏ:XRZPLɽsu$U 1cOiJ-·)N,S澲)tg 8tu4U@O)58~jicA ;{Ȧ\,}7ѡ':ʱW,< f(~ۖI,T:[* i#͛mpZ1ЃX9fI U_5;&bb+ғaURY\.@ \jf3R%SZ I lv!1WVpO8oD(W[٥ #]DE^+kjb [A!'d{y hf!!|?Z`oɿkw^Xx 9}WAԼyf:_AU,rI2_Fia\jp0(tV#FF YKIdxl_Md1amdʦJ4}0Vw'y%J*aalqgب8iFP#,UEF>8*k^B薱s[SkYcA 7kA^,xJ< 8zU> <<HaZ 1 +jه}s;ba,`QMV^!%0"4"'R X Q=R9(I] ]-B▆ jY{/Y/ rp(1C+R['\},cD[P Q 4HBwLd!BI1V}3=h} S2vP؜4fQֆI\btQgO:s L*PSMDIeD05kNd?4x9T|s5gG6p.Ͱ'Ig  |!TΫ1Mގ$Nw:7/RU衽PVsZ[͈׹ti:r=mIֺDw`M\ )¤Wc vTݎ%WeDE\ B  'Ȓp:ҘnR}$#ޣ5=x"L6a2PYnȔ]ɽ;uӌ۫פ XXtA".AxN1y>4+?L,:6O{ŹO.,]l 踿CZ.L<8O2OL,֫ejOkyGFUq4JyȺaC}KӵqєpV)~L[Yj4cBbTj x|04;\D5QE[0MjilDX6ȣIjNHJqcTzl+HA-4W)n7Bi.l&ZyF&HBѧ{`*;}|&MMũeb6HMiu@!@X,1YlBաPB_7ҟR)!<$ه¹yU1"A 5DŞ#N ,)ztmcU}є1AF ӷhb0W%K 1 :+Z#+4'!Aa b5uUӨԦM8; rzP=Whdއը`A;Q]v;!LnRy)6tN<=MnP3Uէc! WeD\! W !"LE&)"s" H /6O޲؎7rϖkح%g2V=SxtqT)|<> TLL Cssi|u?LCO6·^`ߘsYAnyoA󂘓ޘ$\_Vf :m -{ڎ/S+҂wd۷j~}s5G@ɡ9(i+#ᶒV0gXXWQvrU#ѲٷQ1l-qwwKgIS+,S^nPvj⑮ sY^Ợݬ{ީ=IČM%5 X{DZrO_Zϲw9@DAR!ys0X,!K%ѭd\}>i ~n_z52F `z+֔)?/wxQ_1K%&ZQ_;+,r\dYVL̄[~z|9? K yE/0yz7'd>3G33Me\44mw3ٚr{F*5; m}{c}ccܧsq>۪;Kg78M3'/oo|= {{7WUyr$I|}}@q>@l 1v w@={˷$movmӷ s6 /{{qrlޤ@@TYT5F7R JŁYut>ﻜ}RsQJ ӝywϹvuwtS{(7PI@%v>G@H_Y" ( WD"=}M>w=a2ǧyǨly㞡Jv9J;{p}%(쀥nS}gk/l{}{_w(Ah`@>H * R"@`4&00ɡb 6 2hb 4ѐa3S4?jmOAi11 A)M4'AA! &MCM454?MIQxB1?PAzOS26AM4ښdz4M@OT & 54њaOSSЛ mGM4hzyFLLF4iz2  @AɀFMaM<#CLSiL& F)z6 i($DA&&MGLM&jj~d҃ždI?SڨOG?S6i=OI锍64TQޤS J_bA] L m̏TLC$5LFRƢe"B44$,FVrT) ^gLB,EЄ@%?銥 0ʻ7^Qu11-&t-zݛ(=ex5͆?:#XiECE<_k/8m -8 /,_ :Ȅ-G5^yËqfM-HUpǔT;Lat'}EZA#=kF9n@]8k."Ó#O?Q#Qw=-b‚Bi!Ee8R~fRT^p , iIH4` U%G(%0,j ㆐QI@5TħOv.ܸ%^Dr,YiH5+ \CdcI{צ.C#a9[tVs$BҋDYCzvNz">rìZkNx|tѶyo`ؙ4Yۖ#,=Q_DM/3sl%G=ƞ+'UHo9t`ڐ7x,=&T?dXuSw-oa3tB BT[ϖƏw2d<K>q P$^Fڅst;GbOM`fE2iNWU~byd^s<d3<|zEǪZNV#>x&Yx6ZY8:[l,L)Q4! ՞qɨB` ՘miIUԮ e: jx]<ѡy354rMtBÓ?n Pݾ08COp(r^?N]Tm\4@Ĵ*~]3(}ȍL!!>Ԃ9/xo- S9u]Z:!c#wyWm.F}y>B [[~`H8- ys]5[K1@@ЯD2YިVM焚l Q\Y8J':ё;׏=ʞ (PMZjDܾV$ޕ򏌞I1!A!*](v8f8Bt `z佚#;o&(]<-8Hn0Vkd6CM8^!1Ɉx,TTLZ`A`ҙW*)$Њd"U<.(߄s7y!PA J!G%^hzi_`FZ v@"uy'1B\3e%ZL 30T\C OG'PXOBGU('ĠKZmO?_7o 7 ?Mj)뛵x:as-~gN 8o1#SM!he4t^yßӄywSȧHA*HR-hK g!~a6ҽ;[xt8>$e%9)y!% @|(r p1 cQl[c-OˋqщJ[xDudF"I.)Qd  iP䇀v˸vP|>2<#Lo}1'7 wnwD, }381(Pp1nZ~w4^ @q!.SP. A\A$sngemՁr!rT]BH6,DzC2B!@q .=ak_BQ.K14;HtFM=!S99,H"7+y4F{;y&cs.,6`W+b:bcm&0lBlBSE`fLJЦO_m^r|$2w? tQE%"xAͣle&wxQX5O}n *owC||NRkjێPHQ%6Fچz=jD9aWJy$jA~hT91:UeBh+pEbД4hLH#6v63ϛ2nzQ~#tP  SN_8H,QPByX4P^zX+C g∠@)EF$㟐f ^ϭw?V@5[xIy1YlZ"zLLYT@nSq{nxqt$h^x^ǣb(f%LVk +@31( 0@6}lX/m8;ط{zyM?Z\1@ w_}<~uE[@~ZB zM,KVqfцt/ocRyc[GS/az)&Cj榶g>0%<@{.wb:iRM9 vB9W؞xzyQ-]0wb)z)b,x>|ѥ٭I8^.WOfarȗ\jYĶP*ɼ/. 緣2!Ū- kD$ӥ t"lN|WO;MIu*"G]̪d9=ԢYgtXUoPt[mTi :Bܭ*J;kSӘSZ D(Y<|qۗ&e@FZ".(~L4qPBIFWxYzBm9=4:^fN'[1laa ax0Yd,DC kb7*+Qjbm\ѭWk⾍l_yʷU+[o}J-rEhWNY3I$fxiNUE6I̾M9O=HpwoԺJ# AB{5Ҷ·杼O<2d&H*TnKXG *~i/kOc hFyfz1a̺:g}&%=&tΆ5j~4FBѩ ZQw_p'-9ҸX`uAPtZ&պ|cKN #Bym v[}|.Mu̎GR)#I i1]UQ$R"Bӊ8o՝1-3ɐf*u,]3rkgb 4E8KY קaJ{u:jݠ9>'; sp*dXctZbK\k^\gI)hfRg'gnƷ*^!Y A^$ly5 M{t%:b"mЂy!elgQy~oZ ;ցp5ڢj?^WYcGHKfPm\`C `n kϝaB##D`md3!zbñ فl_t/n@)+חw-P$d07yfTB-DG֮ nG EƮPOJⒾC㝴Kh^8Fv 8-׮\6Hg76,66,C˂)  K#A?]UoUnWq5SmJJzH_\wh\KՍxخ|Ol(fnk<nd o߃{`C&bfvEdR5Br* # ҃EnMʲObN[ԁK@b` )8a .tO}G]S$aS\cr;;mCz睅ˣm u@bێ1tR Q,`K "sO8}2.e)Y9~{Q4KIWv$Kǣr_1Ǐ秩ǾdA9 9yݣC~^9hIu~mѓhc ڛϣN=ZL;jÇY_p"rUmv{1Ch igڕچJ֖*,a$ i#u9oBgPH;=W.XBJqS#(4K~n&tuo+GDTEx;N0"[]Qr(?M~j뺄S;XCTj.f0DI ߞK$ 1baZD(,ِ1xХ4H`,-\DG(FP/ c95-fKءӽ^T7f qΡr˳5?H"讯̲9#Q9ګIp%sՌRaDFKpoq,>ur hp}HF+yho,@_3lEAF q`/$&K%I{wk{ HS6ltDpP{LD}'L5-fԅXLqU`狀y-`1<%$[FAf%sb DJ {ZȦi>֭c<5a4KHx#Fm.'i,B\68nzԳDﱯ6Pc: l=, @P\K5 C :ncozp&e2V^LM0Q} >521 u ͢,7 (nj,I(0WQs]Hl1^,FG/ DhOfڜbI$1`d-ה>2p~U0L9,-7T#E"pTW)ZuԨ4A!+r_P'm^IY:ꄖD^7FDH "^4>T?!9NA<,(KŇx2d,CGwVZ paPRfaoG]Upb>3 X_9a{~^%<4Md=C?Rr#`?B ,6';#3[Hl*6G ,%0\|f׺Nyiű]VEi*:DF.7ԠPQ6p6 6qMrm<w唪9/*-(:Ȋz٤KFvw䍹WVK! qzyK,xx+q PZ]IQ: oޠ A+/VZoJn8v Y-~K"Vay8!lsjBMz#3J+q|Qp9iMc /j  L1+A$ ^"J4XP')2(OO#r@!YM)*%{܆V7nH9SORT@Ju}#?W$ĕwo8ׯe_$KJH$gMqgs,M^?Nm5`16=>=d;LXܯR{7{YOJ52 v0U5ˣ{m]QndlΧ tIt{94 P R`(!>)\@xA3F .RC8DxlF HIwՋeZFX{Aæz,P;FgS}6eSK=ٽJ@Y@QBbxj0, !ϳ98WHh5DqڦOE?`x~R\?| ;tJgd}A*z93x+p'8ʩfndaLy Zr.5 <9u%>'eWr,Qc$hBcItXz{ROrړ&!)}֧`m6%kӳΫ6$e`-i<Uo oV1av@Pշ~@!BC+뿥RkPYhSXM54@??X_,_"+HNJ -M*&il[gj2uWե7$@PT(…AnЈ[OO5~爍|uB']"n޽G (/=XO0!Ervm>[KJy}3zOԐ9& 9=p2k]CJ[x/Hͨ'¤ЪB"+'=P]lji,ez\Q:♴1 EfoV ,4F 6,}jw觺MX1e 7,zsyyc!gNMy e,+ћSڷ~ԓ,z\6yڡt0hcD,KՆ <+whAaӎb%q1!BPˆ 3o:Dg$SR)#z.e3;9,`Ή)CM4SIia{XbvAяp2vG fjJ =Im%0%D$ RL:&ڐ04pouL2o %=oHA;O_uw"?4_#]&xpF,vLb`M_qY==}~o9jƥ Ns?cyQbryrspGHd[1uLk>QtO;Fh)+KQѪ@yqg:bm f7 9KwE!ՄߊF [[׊趝B͖Z- hiޜ$f8W%9#ɓn֖%q[vg*{ h!鋕PѴ=k 'Zk=$ ]ӻ>γ r@w5;k sw[ȏW孀5r$!"bw򓅧}21$$`w͝Z3MN !x4Ҕ൑БIS3#4ѣQqdQWma?D n)h϶AVxOnJ8 pˬGvT+-A^ן]$ Aܒ4 $ upIʧ3!$n3o lQ樒K1 SaG}e BR8'fR3 5hmc|P1hLGD!yr:.z]%w:}5NXN9q"š vrYX~J%L?*nܗȚv_E%twܒ9B4Βvv{b (l2uyVČrkbmm >[QET 1mT@6D}Ŵq>[m6WڽeX\} 6\dA'w.cIeh3;LLuORibPqE8 D:bCY׽VEKJ*v֧Ow=NyRƙkR(UzqUuQ`;!*w_R28"վ4,lˬؗs( Hפ!E%MMrǗ6>GPt[)]YznB^Bَ4p"F`1vBBaA큓wkxwgɕ㸠\r/=> $Y H$5cko%qhU%9_Gty3N d#^&ӯ|O||tR 1ܲː?ǫ'`.7b6ApɕP'@ԥAV9 :LC!NA:6G/薼wrM׮,'ai"J z;^>ƀmPַ;֎Y2je6,ݽ7MlbEQT HgR#?i1Dr*V?Vȸ?#9\4jʄ%kw"v|A}h4IK9KtA ?G:ql_REogn4OYJ1ɏQѿJ sTޱqGwA 6D6С3c/OR 954rN׆޳I}yN3l[i!2(=%A?BxwA[nX!7î?VV(I"OMhB,bw97}ڤ#%lg*.]嚊+,4-l ^ KAgRq,d1%ҵt6-'yH7Πܜ$cA[k7vױY?)-X>OnT|wbQ~ .!~q'VfsUy"Q{ Du/lP޴ 6nlS%[CR$YVI?=[fG⧎i['c4^ި\9#~zܛt|Ye]=gJ!h˻/ }L5@ڝƝx#EAGW0ղ):U7t[볯.j E|Qդ|\\vBXi[BRAEy faE57WC`L{Rݕ.V?iK :::{؏ GoLwp/(|7ۖrHvv a{PbB ._|79>B29 ɖXɎxI% ])kke艩?˙コgyϿ-Il}n(Q8Tn*n>- c { +@$iYdS[+™]7ot19@cMܗpѶWw7ǽkk诣n`ǂa<„ 6rWc=1>B7ܳğ\^l&ANQG a. |3U$ϴG~^dW6M4s"r? z Gv~,'b+IwZ2ZN;Up;æh\x~˲=!?=DѰօ^~:5, G`Ie Ǐ(i[I(!@L6̘igkyO;-ӱMȡ!:t?'șq8`G:&]-Pg=s V"glJDgnMM^|[IS^ #+(M &8C׺xOj~T|ק mX&))ԣa8 eKE,D^h'1JaFĵA+r@&㸑LJZt b<ꯐc~P[b' {F P)s-*5 'Oy&_yDԔڡD5]*5S=wri)`t(Ci*rr$<ԑ 9oLS/Pq?#uNHhw>yghaN xhtA+dZay_@*YǑ 4k(;Ʈ;_9.~ *\D7돥1{I $!IÔhYv/'6Aj]Ism^7>I={چRLAvc/˦RyR _?D}De~=fz]㦊& yndw }I(m a)x/ t̴ (OYo ˮ?7n$*7~%Ԧ?JomWÂi>܇&xn>~[9cVZ}^QDlL^( &k>_q)6Hc=٧b^wpߒoCrʗ+YoH1 F-so! ϲf^XŹ˦|˩o33?+?i߇>ZzIV3R{8Y$% #fPp{~pDY//_kkYBbS2", ɋȵi^LɆWJUVM7L—@TzA&!Ǫ &Q 7дj :k0mN>$g9xGrE[xsH.4 i 8p bBIR&rYKY326±?0dVCi -v\nHLd$B`'E6W׹76{ջjR0LR(c [1wџ8oDiݠz p:تFAk;PH0r?o~ QHk6ϯ &2`Gϻ#g~/muSw89_~I[si6lM&vb︒?g_u&ymk ?y9ܮw@da +$1m"ljZV0HYWrwl4&z3 61 vZlqfjaG)"{?ݖ {ݫa;_=}v?{v3_s~o(TY$!!QmTLr0cb,_*0A;(,G]( .APUNP4ZyC vIAwvG]~/7T:#841*O+3U1=*,775 @>}G%^s.J|EvcD~=ŚI݉mi痩%'S)ɏ`o޹8SOe ;  ZN>^6H ?GhDːIJܩEAWC$Cv4먷jDv-KjAb!(X8?}]7)MLAw{sE"8^c;"!b*"Ɔ*(a D*y \缯q9m( %do}b^33Lnne>u송pV> ?somdKTtp^tw{F.\auL8,7 (!!+Yyꏽgb7A?ŋ7oQ7;UBzy&̴!eL bJ1˧'N3)Ǫ]$LJ0^ k}OsxnVW'\䪕/cHf2f`e9N[k+d0G2\D}?v mXa܄yh\'w_4'.rB٠v1;OK9`}XcV#q,MvE\ ӟH.fvZi` &Ԁ?ЛET/G@7lD HE>oONV8~IjӴiA JC$0-R)DD 6ǞSSj;%)O#5tZ8~6]-+RNNwB`'0o27`iN#, px=/{0=K8/ḩssUM)VdxQQ>Ayl`~.y@Ŭ$|n t*F0aD xx3)PDӋ9M  gR$= SHbq"$4V|^Q1= (2H lwF}IW ABHV.[dZ>2>0^B C)˙#ld7( Jݹ} g}sl B a8ot4$nMyV-H՗\!n >HlcƛM t/q < Lm4@4Rb` Ix kHlq8ǟՃa}47nM'##i+ r=5;V'}z\M,ݿ~$5fMo„ $ГKwsuۼy".F3 >sIRc]w-ŸW`X'@5nZ»wY֡͟QQ3(aJ]nv'`kapV{&!G| e+HB9k+oR%{a| @Q4&Nr)! .Cuj3 Xx U@KU/nbN:r0#:t0vX0<^9r [j!r;4nūIŃF34dԬ(鸜?y>.2+`# DEmuƚJ2|tIuh6 `6ewΛ {FRG6;1 ͐ʯ{u~1]%RiܨeOzl+[@>:w0܋E"f@nß=|ry>%@fmAVLi)9Vf ݳnjs)/iW.#[v/ u7gD::S j6Cߣs~xp2% pԆr2ŜJ"J 4dOyrw|`q=>2s^?w} 0^O u _0& 5鼿\h1L &74ZcV~WNΓdG#Rt;g ...zn\FO&o_x[ր{mk_}uwӖ ZV m*EMBe~X;y{rF;$>]2O/f°^AKНpA#*}5{!y% a!Y`x$-st%j,fU-$FXFeM3,ܑ}ތ"ao7eVR+VnuͮNbW鍴li+IJ ]LIm TJE\r\jpQV4i=8S6Y\^el Bȵ lx+L 'I|Q@0/"D]fԒ_KbTRBfBgV>A}O^[qF>v'ѝ/89z#{8}ޜ\w\OOS{\k+6ȿHg9  ~[U3 EMj~?{L+yq%dx/JWG_vjr P -xQh` O8eN0le!.0b=zoFUkPSgk zaKhZXJ(h%'P68R*YMR'H(cvٟJg&DDAQK7GG,x;*]Rm ^%WaRos8a+}kiXmd!߉VFOi~.LSnu13*sHsBtko;*_}gwKOڕu־΃c8{G|]tVzwɤGq95B?q~&X2̔(&ܵܳoYd UGz~b_$QS]I9 Q5)Nu*U<|8bZ={GJs|=Hz&SUWck^Ox&[1!NJ}Yj垛swE:'S:8r~^3%É;h8*ϿZNo/NsQ^cTm&16ئ 0mX;v\O#w\%g.=-zyNp%\Y"P&fTd,bsy[ MEM@e@5Q|Bo\U㝫;VHݤ^GƯ`aTa"J( Fb 7JH·dRgG_MBLܱ Y^G+4iBQ!PҀ;9-t"OHI xtﱭu][3Cث׿?N“ڊ:cJ MPoA1 }fHPcM!lZAkbhn@o/Ev$6!F~d;^B6>4t6zfΎiη3%_ڥ$+@؀bA @ ~Olon<wM𮎽$<I$I 1lcة Ljb"TfMh(0)ڿk_-Hb؄b@&[//_pV[m HS14*52UfHkƍ!ЦТE@1EزKBj,2E"E*QhhCF-F J4cZ4`)(JjŢ%6ɱE`7[h- ٪{E$]۸K9q5耥1#i97-ݶxOegޛȇ.Cff.³op`6fl\'#r_ؓ=ŀi0vA ΏSs-m&X2˱-;7`׶t.zex#۷p3[,- A-)K[Nj"naIxI%up!.)aPg\Zܘ.f)+xPP {&fn N@*l!" XlUn=b&I _AINmgVx-34C͞N! h#FBB ܢ4!+ 83."BQI6gL7R5# n`-K v޶9b0aWwF0?yA؈N06_Gi^4Wt̥ux&4.Y|K@ 5PjCS\_Qofnp4E1 @([RCA/`@,B b*0a.$XFW0=Ě>+ckt/}U %P^).FeJScP_F\pu9bl0"PCFO=>4g_I&'W1 +`p r"F Mb+)Mc 3cqܭ]:G<#-8ApfK| (`3Bg Ŏ#zGɃI zb;ݔlRұ/2-{ƣjWD16Idv[.1vpӕ/Mk ϋb.PF}<ۄ|I,CP"pUGq:d+dpdFʺ"-Yj9Խ{e~]P;w}̆.OEs8>NjaC殧eʝ[:݈{'2dh$zuY{ƩB pdż[g)i=d]@ڙJPɓ$ͨHߦ*x]WjմY7'v%iN}U*Dҁkѥ[njh,eFωU!bixLN΁i7V.N?e Tg'.^WG4kƒJMq\6a>I?ߺ3cu֓BtȟWGg124rvϏ6gajhI{V#:BbbV!gö&+!#Is~c>[Q38NqqD5U<# $HPxx +Ě=Hv9(۾>nQ P-WwoKߕƂ`Hu=\zꊯgh!F%s=K3W}ukiu#|@! $b@ bxN<`b@6&2-55jmZiTmev)ߚkV[8@d$+ tZ%'ᅱ>3~AnVUK/d<3HΨ(M@҈ |I!acSCIreT =SN:M#*oSgz#}MyLI+[HK I\ĖVuj`/Y&mQȰ뭙AGH?jlU> knNQAmmȀt& @18©\q;+f忬a1I $r-u2ϻRHo_9[gQbXV $8-nIVX ) A^tt@ŦD8C.;NcA!jZ&ͧs*2 V0J]f'VWNvY~ǕC 2ʃj{ݬ51䡠t 46 x䙽Ko my`l Cd'H rn7 juĒ' ?PQFqJ%}XEB\ K8lȷv+=xm>\vŽ=Z.hn]048R;ѾSow $dC%I!6)a$&a" ELv[(Xι|>d"?Ib9D_29%#3#jSglM@H C9.j(QVBĐ'+i!ݽ+lC XmdžlmWB729ň{ӯQԂA!>wVjg DbD1,QNm'ͳnD#V>m'Cne^Ӊ!$CR ə%-X9xK{Bp- 59A E$9]BQ%$DW_$v}"ֺ$bZ9s*H  !jS*c v{geh7r ,/Ē1[m} dv"$9j7Zq`iv†]n ѢM:,`veck {jA!0FуFBD l$6!A5F-F!h&6$ $뽃V :̻5੢HoE~*t> qcS'}]w}qD$|ՠkIلt ZNK>􁟱}~u\84J;uN(TPF4RTk}kmWh32/m@wWԼrґnWJMMGuߵAh_MhК 9swas!51DW{(d452dIasv s ih$~?9 ,:(J|d$:5od5aճNG gH{A^(?sjJ cmcdE{tgS3.$c3 c9&_u~Uoܷwm RJ]}W)=ݷ(݌Ӻ&0k?o|}~__Ow?Ei03?;]L)%sIݻ"#IJiMP&$׿?/_/zL$4Ke"YHkoܥv#4%&)sAh`r#o \qL!$o <^RGqV+ekD9ɮI24hMo>F֩r,Iܡl[;m&ϝ DF4Hc~^ b"iae")Bwv'yْ  udhIKpBA*iN٥M5~g+͹(2@1$ sI3?OHc"6߷L%0^2UݮS@LWSswm.1oe[%X6r)4ݲ-)T2THA&]7+4uCE2BerrzLTdɊ){P +~o̾TH"P*i(s‰af&bA1U{73?oѹ I&2 1BQJKf@ɱDYEWr"J(nRcǕ41JG]H05kckj{ùk(ə=ѷ.&*ȹfFM=f3s7rB Y ]ݓ ipVڴ7w!nĔFAҊYY`e$Sm5jeQp%+؄M$442fۻw?S}VO^}$$ +I2ֲ[lEk] Yd0&M ɠEwicII)mZ2I0SI.:K#)l/ҹO}|IoW)jժ4 DB3؍ISm ڐ<MB80Ypm \IJlQFM$6DV ߷jS hњBI%Z+w7,baICDi"4w]~eznߴ?j1/奵diP IRi_?'o CyrI$ˋ"hJ!$&D1y36SNdX"$cCgef 0B_uk%#& %;W&]ƍ]ݙBP`@N, ߳~{c} 2/q~P1lB"h@#7t&koWkc$F&6oo떔QM$0XR[mo>_f_%W}-Q E1fL;dCHNm5M؇{"9[ BK߄URTO0%H')a^]i3"$ #k<*v?v8_@S'䆋#RZN?s grq9;^'<X  3Fie@V:MUTϥcU|xT\x7mu841gZ!HIU]r.񮸩ff/kzmsWȏ%ȀmA & .lR:/qrm6w;]0Bh)BC.QZ qyc0ڵ{ 0Wn-/ȏlvKc YT`/ݦw_G;;j)]ļ|@m}EoC]ϖsie#Gڦ+CW]rv}6+%pnyZ 8l+ڢ 'H>+M1aljDD;֒5(K5vsByLN+s]bn[RAa8ϖt0䧥ʦS_B-s <4m1#LOqzw4*֟k]p@$T {Pri^{Ā@ և-p*$? ]kKNuRӋ>Zg"Eڤ^ƻͫ^X1}q3QwVQ9mHV Xۖmq+B<׌6(sűg>[[hvEpV~N^[>yW>\ۃ#DR;ϝ8;gڧ0p4'^0oaumh2䶉"Nz'137A!AJ&_rM?2oZ`,=@؎GI+{REz{*iKR5/Fbh;8Xh;+= ɷP8Wzv,Խze mM95rAwˆ24q>h}_B=5iZ fb#:^F! ECļ%O_Y <,,<fiB5;Orq7`I1}@o˵@\;N4Nz`s;[lq'޷Ζomq%1~z=̳ wI霻mutk/+IMs}"" =ux{s[r\Ԟ.GÝr-.zzXKqVff-M&#mD_C$q#`;5N6\MߠǬaycd Icxݍ(zP!fx !+y{b@1]: }CiUaq)/a">-/nVAB}-ah3z|i{c6`kX Ah7"팠g@ki\6μ YrNSBFX \Amy]=lc]\ZlX> :HX I0|V}a1,a)Bb113 4θpЪeKCO*+L&"_˒k[8qprZga+lDהCai &f w9 ^~9|1Yvfa@g&kR\&i~G H ƀCz#`L!YYYQ$9}K=B`;{=o-ֶ:h3m3jZ+3y#_!onl:k{ /#}W;Xfek򾓭;7kU4 DZbڍH$nu vP4`sG'G\Oȼqs^ Mx[Y1]%59?ަC,DJ0/ƶ ]XТxn"5n})D6~O1}V+Y28*& 0ms[7r~bɊ[ڕO_'秭\P|E`ؕ3,:tzͦ\ՔņBONjtVdž.b"93bdp@G 9. 7BRџ7ОBh1q5urGӱ_K8h;/Hh!`xDlQY̼) 9Vgi6~A= ;XrM6 0[a؇=cLyȣYlU7?7I6\qgEJŧ7ү~<|+jq0>"ԫYLn@6h#6~ڵWHCzMie݀эK 7"ku$ H,y_(z@#=scIiK>\kDO]._6jE:'im6sJPh0EV4mEe8|Z:&#n817r.4usd|$F")L<҈ѱ%r.V ryX66 lUĞBymR(KU 4_~qڝ^L- K˗^'P{Au]emf4Kݻ'}#½ IOߚ:0F~eFY\t3|Ƽ&؜S*/Jְ )?ﴟ_7Y1koH:=*wf6JX6<1:h2 0fr)\_KW237=lGlK>OnU)~}uq &|Q GGTk9Pxs4-j)C sm/oT1/c7iAT}~Tgg]co1VvxrϬ#Va%cӊKxJ 0a}X_ ۻ[Z͝M}vo̱`(z, v)BMeu< ro|҅Qx{SPtso:qVF%ܨD2.rDZCnTO[oo~ 0RX5%v-y>eBXŸ X{L_0G/7´wϜuR]gJ:Ų}r0 y-ccNz;-^ݏ]40ƄmVLhIn4~-M.x6&຃oU 6.v6r=՟mfS91oy}"(WyL `DRp0<hZ F0ruc[j2~{\-L.P\RA.H@SB#X/aKµ+4EzoXQԍ'8 HHH)͏-öVku\zd[;SL</3j`9Dv2 6f ɀ ٬"!jR D]axe^e[E\b+(㓈sPhFj({m\'nzui[p*ҥKe b P(eAٙl[Hܶ+ K7Jki]*1];l!/-/XY4T&Q{oP׍K$O)F83}\dm*vP: `yzV~d9OOo}=uFlhh,Otwpo\gQ'|!vGxCADk!كa0`hi}v_4?n/;̗^05d:Û.b<'CciyZ C7|獼$x:_W lJ >y kmp3.T ]R{ m<妕J O&ѴVC淶ab;3g$T]!d'}ljc{)gCZ6+=r[Nv|{̪6hn3 0 2vU (޶10moj:|ajĵs \M| ήnwkt1~DS= \[#]Kh9pj0,1h' _O4/%/ȩƗ[ avE;7Є+TN8Z?gn4K݋ u_1G\6:ڴ$mCg_j_3 %|5x+%aZF6/e^Uy󡱓nU#-0߁hBp5swkь5 ?}F0ELlP9r1=:}[kӋj҂6.o'hyNuZ u3½نAmf&z^Ab:JTuݘ ǎ eTЭ\^0*\V_wjoħ%D:xkbp$ L opv |A1}h#3ZY,7!O}euIm/}WzsJ뮺n3VLeD'Pz1BuK^ֽF{^ҎWKUJd; @J vaK 7|+~Wc]vҾ2ΰy>FpsH>en[ ÄeYC{08AbD4$4\KߗL|L!DԵ)O~ydYlZm1*D@`a(߶f\7\Seʢ7EKBC941{/* qƗ}wf˜g_{[X[P_{[Ӟt@Xs\ߘf` \6{[s ÷XZGgޮ1o-7XQסamJ'ܬ>l2lR{zwR/ڙMm6|xRM[7(As;FEI&AAnvT%n#{:W*&Y%8j'yAǹ#1V pdx `ŢH{ 8ߊ~xbnck]C`?`ܵүŖ1aR{Q4\:q|=(FDkXlʾ/X%eŷZ7xlIAc!ܩyO7魄kW˜l RA3=(%Y/bxe\!ғgwЍ 6n\: ,h&U⧙d$8;;f)(b65W|^VU/-.#O˰8VL$UxҠ+!p“mezHJtV+"suAs@O[_=3ճTtV0XYTr齆Mk=Y՛F hTLKm`~Q׬ )0dJK=^`"Z&ǣǹSs%9ŅG0ii(sS[1s?S+Cxfy^<;Κn0`ß&i-2,4e W l%9?怳|lG7:h3ux䶭HC ai1V_0*375XY̸@D~EiP:sOdXh}\JhJ.bx37IpHW6;Y6԰f,7;nf1[LfPFlRRHOe"u:"`Qý0 "ßehT&m&\@"Uhx;w\*9~]|PWso}+W3I^3z!VPsxc|8 ԑjc"՞Pn櫧L=xW=]Ϭ] %;hP_b/n.5J57qA~/31hڸ;YtԶ96k|v}i}2gMx9 kB!^Zftmso:Z 8tF}sY 16Bm!X+DŲj5zf ^426OK 7#@'V&-[Եٌ_)dXCUZR\2k0t(X$4b[~ٟ=^ǧX !"&si(:|ar9^sR3VK{:a#񥵕*;^ b b1pW 5$԰<=&G?@8"H N_56O]sk;}JbtOMϘz~KzЃlV}2Tt;@- ̽!ko<4Q*Ș0l"4<ټVC~Kƒmb6t?MC;m: J:`L;b$1} =S,#l^y 50 .5;.+qL ]npLoyC1X9EwBiHVi/:Z +76B%ЈP 5#!JP~~],%LJW1" hח%S7Q #4P\վ8lی|zlaDI0$[';Nr_ DtO7f!O]*1b"8qkc #3T)H r"]3Zm1ܪqH;gcRŒ!.T%7#ej's wOa "je >S|س`L~{mvjZae_^ax%ejB X΋J4XL+go.!ӳT 3p;]a4' 1-hmsrQLVA~dݥ7f\s5/Hcpܩv+b8tͪ Hy#oֺڡɒVL]7a2΅0LH0#PJuIhoAE9D%|eDO1 17n_<ƽ71ÐʎR6(KDvW^ (t"'0eH@׍:^]#爼x?>#ӣOg0_cg3Y{4 U.?;"b6NYr4,'f˥1/Cdnh-.Н^t1"OUjx즑W.TޣzضL KX>c$AN` Qԧxg.B[A)[ o4&ƭ۵]9LʚvD'4E@x(= aioz^ũLCFg߅eE`˸2ښLk$*|5[S2#]0!*[ ^>).YBxc!sq׈\+JS0 aA1YlXS^a }#ɠ3i!̶Rdm S&["V.\\2Zl0XݢX#=NZ  "T[9\iMz`)@!LAdSy5}$~ iAB*eNIu|y.F:,O%$ZOI #![GM li5k՘BV! QڨE9*B Ʃrs55a +$sZAjRhYR$@ԍ}+ l *k<[:i Og7_JkdG~\Cΐ`DLjE@K_ph"&bsV249^)°F>UR,Y2;ߴ*;l FZ5u%|c[P% &;C>Q|ǪmtUrN0KݔkKt>T!;GxD˽:+HΟa6 \^#ɬ`*՗apin}we07EivR3H04@n"JrޒHoT% Cc-X+ߞ3u-[o1 wPxacӖBN鑣!7DNt6hRapƘO k̠]KHbeyU~W~a5\@K7rIֿ֔Y,m>|W}Hd‰ki"BN eQ64r zb(>`$V!R "!0ǡxGIT:`YDooYEO1z7wĪil)mL60WF[ѢB`@)G#Y4{6͍lA c9R7jU"(F*K"X% M ]lsU 1?0l }&%kNl VJgRQۂzDϬ~l\\Ho^tM=-ydN/S==##}!Vmʀ l| ym-༻CKbE&WxP˳@ ;[R.~@"Hq򯴱o\ '1ԋdl03"1?a$GƴJXI/pORs?FF$mq}T\`O!&}ꗑI.nti;9B6cp~h"hQ(8 %RZmumiiRIvqPm:t([UDK?a/w xA9X:T-bXbY6)R 8`u*\Z؃iAeR?ER>$zGUuy7H )[4d&n';#Sm;gU?'#Ke/'ib׹ mv>UxAK1P/Ma6$Jj(Q4;rln2M>+q>[ 8zc{,#(%o,i3X"ڶƣ>\N>-V^1ҩ:k[[ $h A0J+T %ӕͲa] "C. TEL,TA&-L3P-EQ=*rғ@P.I76qF1< 0@9 [iiԌ.F@Mm.}B.fs5$sK5;sW+pkxz2NI҈*Cx0"jn22 )[VyIKgx0v*`Q$Lےc nA %(*4D(03?Kܣ^H|ո@K%(|2),rx 5*ֵ|išQP$FI'u9#kr54Qw+#2ɮB阀iv a= nr5}+5`I0,EL'h_ ^+w[}s]= ƚrLmՊ%;k͗:YuW0|t-- :)? T"$h- CZ4y\5Mm;!ؗɎU` +ؒ=W6-ciFnb'ͪ)8A]P)ЍmZ4pU q᫜ks\֋{|-f4_%Qptg3gZ66@M#9_..렭;[?^xƛcBQ]_T"y-R ߉p(%[_'٠fS kG0QXCE0ߜZpKS֗*"!v]r0|+b&h ĸVDgNƴBL)ӡ el9%Z)"9sٻ\ Ut-0#dcթTBФ𲴓뻦Lj0v(wnLR  @eWۢ1큘Y,G:=;ċdܫXk@6M~Ttu|~X?'' ckSn,HlHī2y JPo>cDRVyr]nnI JxMޓ=(! H2@1 B @AeC]Wy~ݱב8R4DDI(?tIpK.ܤw.`cv\4,.PaD$.:)ӦA$K8!:NHN@h$8J˸ȗ3$Q.2~M}>uy 8L:ŊMj (bp2D E ͶGfyfSn(!&O9(n['i{CFG$h"K:\"6ƛtisZP4b9oF/CZo4K홉a3f>VYp0 XfZP K%)FW%i}MQAٺSe2F1Д?$Tp ']K0h̢<{': [q'/쟎~1f'%A r7פL{AK T* !2C%IP'F!="DZKU^l|4+ 9cTBΞ AܪWǕ֒8/sqHחlJ#jE '$ 7̑x29ԔJM#"|~Ջ ~&mAkH#8rՒR-8@z L Q=:wz숊},ά9 @!`Zr">w[dgvI#GU)1dfoFɁcyg50Bа^z{7BA,+{ AlB4{Eȑ*:kjl\T\N)(G{v@~ 7ȝݧIy7}LY*'4,s >)>7,VI<1J˞ys$C eMEbzoII"(X}Z]> kIBثLFY5T7HL;G޷сr GaLV$ ENs^Բ29RD>{\n}$'#ɷ`#Lcp(M&; ӡZd̑v_Jt=|Ylbm#,ga5nI+dw WʔMlT2 1g92v"2)C3 &o<ĜA39:g+O#^ГLB t_>Hq}-E6SiQ o F:9gN xEGIk-\^ʥp8:%n}:BaR!3ɜ!V""#soEg+}"U[6LR0QӥC!3u۔mi>==Jʕg$$! UF79%=R@iA8YPޑ(@BH9I &P6S#;B7ȀEx审(8-ZsLRƴH+fm6i+rg#1SO Ž(YϞF)%@[{4"e5")iH0MDN,Q3TVKS&MFV`D$r 69 kܗ<@Q4DԴ!'k#+>m-XwY3,I@ HA6HDS9XU:!sLE ia iXױo0?X GÔ':`ljp xTQs`j3ԅa_[xX%rd=6sf 6tA Rn|DĪն$͞J)0+K?3)X74`>JGS։L %/Hh4to@'fRAKқL'U'OʐymKHB`nh4hY*YQ9Iؖ,D5%KAG 1RUtta? 0'5fq9* HpkFM@}LJ~Hn"0;6tEVp릛)(3:Q햪F$֊C@11%Ε$>G\C;uҺ!Dgcˮ@PJsZ[)܄48&٫2LXF&v`cljS+$>yR T4~n#(;È ZeF9*ebbx+b;cu80ᓍ &XsSq6ūHh˔a>oCjߑ2zCżOߥJcZС34oD1nF2 Id @lHm l@ѫXI$ ܈[+$! LH $uސߌ}T#p6l2$#d? 9tX#uƀc4 #\ QtդH%[jصnMsָQ 7ⴰChHԭŬk,/澘5)A iϯ](!o@Аqkiy 0p6,Y Vur6}5F1XZ[ū_ӭ|bor4Y6յ{I @b $nt1BPUΥv wJi8&F\!FNih!l@I [irvkYHmh [HAF$ZB!ն%IJ !ƒAă^'EkVXٵ}袹{]9oj1 ѹ^Zl-iFAƜE`}V0D0GB!jgѠw2TI!.$ X7T00Ga0Aî]@$%Y2@Ι~^y͹kڵ%6 mވbBX>[[U_g2-W3Zաt( $ [[ ZZFmjğߢ^!lh,Vmupc!`hH Cha3B%.}Ll ƅGɽeBBѐI$@Ve haF'%8CM6' Ӫ%eL( +(% m@Ma 4^&, d0X!B@y-6mE-6ujZؙ!j Y!bLDzX ք`44%e(Җ6s&Acjec(9M"e)2§" fM!,E1&` `XH4m_oU}ݦH!$5̘[$ԻJ#,C@K%VhPbBȆ0|Ȓakj>uN*U`CB4Oje|*[zjkzdֻ--4[YNGF0Umç,E @@*+MkQˋ\//"BK9P2R&D*L+]IGje;MXDAlRav&^RP` ,~}FҒK` 0XIb` C߶K+}n6 j[_l$Q(S+vuo4EBlZ;$" ARشoVmkiZZ/N|1;,LD4  {Rrjݫ0DqҮ[cQ"n1d$@ :X(40,78[~Z2{oϖ3MҚ&٫F@vPpoD# H|)oUI"XO 4\љʹ2616Q#dD@(Ma[#o6֕l dh -akE;a70,.P5 ;'ﰆЍ,y 7%HȒ6kj:I~[4Zd2ݶr͖ξټ5wʞ6b3*iUit"!Y.bKi0ʑ,QX.( lF!abUu`1 >nrWtW窿]}{~L 2!Q/U慩.F +Cd4&rVMMr>~U٨EUk6T`؄bNhD>JlhMH/~qDZe12mi⠻4(qi$ +h]qr6];3 1@+[$f wU &nBY2'rDH$A}2{ @otE!1tr֑mRio ǃ:I3B9־? {{"XCQ"g~]o|ʱM Y%$i2DH$abp5ȵ#=)VVBpmwas@L jqvH ZJmf/G9`F)4I0LUI6A'X&H !. !-!gB[j{~WFY;ڳD"x@FfI4֌ hT(6)(^+}{| C%)A5"JBTr'RaJۭ`&@sd0"C 8@"$!$(!脂۞'f\\Dq5`B0 .a4 K{$+㕭sx cCmMjk[}˪﷭X1–M1WTzʕ}߷[^fgz㜶uS*V}y[;B cm [Fqau(6jC1&K%"`I % T.̧h'$2Q j浽&!ܺz((@2 ,1i:B !&K ̩`& m%AR)cIP]0sl [$2"|Zы+5 ܰh9 ˳0ǩnR-(&Yd RC.hMBU Ɇ0d5M{N4j562z4U˚(14ˈP+MJWL _}*Lگ[Z$%KtEB_!Tzn],A ] Q$"D_wS24 vD"[xTHELAP!8Hq.d\ċ]Ju {Ceu!0D\¨x/HMLV+etK4 9fj@đE@11!gx1}}{r&Q9.JfqA F]wH.OJ/M?U?_j2 F-~Z 4& !-qhbe~֑~:۝=zѢh`dQChmħYHQ-^7M<޾u%wwFMا(gu I]Lk|W|_cɾu./w\|es݄U6EncK nTX^kUm`b|SCr**/wUj ClhkRb@a7^nHJT:}gHMKi*۫dLT"e̦ۤ.DoaE}>uM=;nW|7(!xD`Q@ D9&^^w w_b/wN;:ɤd`Ɇ|,6)Fzmַbe.Nbrw|< pL lH>Nd[qN߳wCAeÕ;3( ߁ͷs9)rAbI`ACf+GH/RG0o\^Ȣ 6R3"#ܧk @7lMe%P2FoõvZܹzZ$3taC 8^RP ssXg a4mS 1 X2W*L%F#ă}V[[mi+~6*mJCZ5W-ErXysrչGޮګĬmF"ٚ m{׷]粼ko_TZ?($EG4Z 1(_#oȒ*FƑڹSE&B@ ;ZBI4Q$ֽ_Xb7߱qLt$a-k>ϟ>znt7B`ejf.F *E_bⵯ7Wݷ9#s׮>-M_. Az7{ه Mo-mT$ҩ4eZe*#Vik}޶떗kѵk_>#!Uu9|{]蓻\^W|{Wu=[ب_Us|yDw]ڹtηSs]ֺo/Q^T% lK#^m.lD;* K:UEbSyDDAJ2U8XTӒ6tmX&S寥ZbefL+~05@h6PDH4R,SI, ò,4BtL@Bni^юQzv$5|'NuNun]&ikF记^m&{ws s޽zSRuЖi_Oy}}cs;辽[r6eu]$(Io|׮M4Z^ތ빹%>wrzۺ%p_L9XLKQ, AKtoxu fnI-0׷ow?ٽg$6.NHzcmFf7Y?Ku~Jr2)Pr~2Vtnvc&)VIsM1i%]UKh0~,ݑzOhTNs~G lQ3oDc(x,5 z&_sKuë}?9>n aݗ-[CeKgn+K_ ^J+*vcy1*ˌV IFJǬ'd3(5]zݯ%d[:^ mWu[v ,ü^'wjc7Grw[ޮOv=VXՄXV\Kqx6(^" j%p=YբO]%\{j5FM]5X_]*2?ӢOxS=_jC2[xf3C]1I%i V܂JʱXji:<'f9v;qt Y rܷjItaXςQL#+QfΏ<A (C2-~"ܯ PM֡!?d 1roi'">?S8`/V,Id(I1bam/j( 2$3eV7 fV4˸Mh}LNeo ֪IL Lj`pPclV3fϼZ #u[@.#6ŬlZڊjfh^K ^XM*5A~TႶh} _ u6)FW(B+_zW1Ϥ9^_cD< m5f}_u}H_ sonb~>cM6EA/"i˵ţDdRBWMݷ63@6CvK`gnze4-sje)a`voO(RSZMԍVd\[-VZvRrb#?Dh]DP.Ucr7{)&7M${%mU3zya"(23i؛.QZ!9!twzȼՀ2^q7?Yб :KX $mҽJ0x2w7<ljg4q.Y iW9VB{P_Ev\&d}3PUEz@iPNar}XG>u$'̚7q6MLv]Q@.-*wȪβZYBQjjH>؎-T,{QrP.;~a4mx EPb =Yeo}UuuOC_E6skHLF>Ĝa[kGWV4 /4D]2ȉeI,V%Cw>s- htL'k ulmh.9eJFA 3p +WGjcw1Ҏ@Nq4Eu~LpK_i}ɶ*A?ٻEإV,LB "2|U*TzVa3=C eeJ}-H= c|_e h蝾EDzHM6]^}LӊC0~fEWd-i=!pl{M;eʸR咁y~1m@EH~_*BށmD8nz?2x3 lX7Fh7ZJ8ah5[jcz]F]P®0[$.D@=W)UKPӅW1C[<:B,Փ ,x[Յ`ՋI.< 6.\m<.$ɿQhG3;JQCH?uRCTHDF!8{SQ#!&5J3U|\xsӬXS/qe0|i+;}F6Nik؄huFX.9Qb'{Z\Bq_[\@݌1`ӕhmbh$"v^u h0($Ѧ&:jv/|GMjl` HrF 4 ̃DQvԩ ؀bTȡ&{ 9JNr^3q`]CVN]NOG\WA59^48jhAӱq,z:l"XRļ _|H] 15:*)D-Չ( IV^/5(ZD-G}u|{)T&1%%g[jJBوX2~@rPpSP $gۂX@!F5Dq6eAge\ߠ?q#NDNI١kX4w:c4$p|?1| /-<=piGS;xBa`}ѲPWݪ,-4:s|ZZ^VqZS#d,;GBY=(BH@}O ]ˏd+v(-MÒbW{аD[_w\Pqt`r53I3s&x4݈xP?~oYU _x"1z_8K~FM)إHtC-b&d-:V^,i1a4Xh(ޘ>rF"@ R"^=()&ߦJ ӻZӆkd`/M[}^ȥ*d|Wt.ŮJs9ppO E:Ej@ ]c KKkzZ$&w{+p2F ymIJT HyEC7j5JY 0e*Xjy㒫=G=rco{8\ښTVʅ7Eswvshi;Py_c#iUP|IY|7n;%R-4epL] \+ c8lПd(l6k:.چ|TB !*y)*#5]H>OBzQԴs{Gjx,X!h_X7wQ~B 51lXkIsViaޛVLF:Z|Y L{sGl;TkQW2Xݍ ++DBߨū0VؕnlEQ`TI[~Oϑ'X MX ]hBl&yHI;{OMԍ-kaX!,a٪P-Z-Y_kQ#WjW'K=9 jL,zĤ#XҴ: l!WHriuz76\_2 ga-QXq1DDge^Z.GQR"ļ4J[zثw1>@|dr 'ۀ\I&҉fϾO 18bͼ'!XՌ"W lñj M(lD)#Ms&7bq% CF@Iy{gf.ՙb-ern2iJ" R% fGc[6Vı/^\L:ks%u_-_Sl< w~ryIy4',xVsu-XFd<- ŵ'CV0kMd+= H )dl_Ŏ>6Ý$hBWtHtXB 8I&xB任!:տykSm-m%e[M5LcQLSj+VMRif-YlZJ)c7nRKѯ؈Zmkm$S^X&˚.B$ģ! E\IYqSѲhb[mbh; xU"lր 9lƹx 9RʠO#@py+_}&s7x}B"X0 /8E0 =>;΃Ɓ`dyK J"xL3"Yڴ;\s" A$  nV (ci+KEAis QIKeL[s(m^6\Rf_]1"sc[ WC@b`s-< f$B"m! W5Kd,EQ*UY`I-hkk:c.wj [9wH fG5v  ˑ9 W@'͐,fVڌ<g 8pZ>`iH@ SC5O r 0 `\,GR6Pc6Fv2$;la#0.Y7qVRYc~fE:#k $lFq1'+IB(L'B fPɂ 3oc:ږ6{(e55:Iă?ŀb]oxvm$%[D ̄גw eZ+fR`h@v b%w Km<IJ 3U#a4t z@}{K^jF&16M-+37_3(ZPٺlņc~+\~amXvV/rLVsAyz }yBV+ev#r  6v3ozv"p̄EN2kzח)Kw){52dp% ĘEPB)9ux .d/+/ K.N 6(p1smsjE}0Cmz,,%Su~igD @,;BMoZ[W_lT%0#:/ō  @@rmǓxa Zf'''Xa.;뚼O$7i89NLg+D$M~fÇƓ.妋pI#@8E72I*0dIGC?>]BSK. #^M%{NT[euwʹjHi -]BH\܌%&6I Cؐ Z .'BI+X$9,! +I iHş¿ü9 )F8$×o&FI n9$FHXB (`6BRĖBE`ͽ( #EPGw/dB x-VQ_x%iys !K g_5;o |ے.0Fo/W>>\gobFxJ@Re6%b\/I+*LvzR&̕@ڸܭchVQC* `Yt:\GmT0Ifŋll7q)oR mmO(JYY:O-jIy֢XŒ_r.`@¦ 0``$_"(32QCN']͇|֐/3Ng HBk)f б F;W GܰoQKpSI@,WJGti w3~lֺ 7,htm { /ZKw[‹Vy˘S4mK о189_s?dO2xzO/|Ϲi԰45@ ܧa0u_)?1LOE N?$l8H o)h;2iYGN$¢a Lh١3"UsW_ہߤW;֝24+*ҝ1_=QP}nbYdpZ7`W었]pk<sWQvdU1_CH# qaīd!e1TY)&QC($r9f^*RY$AcA4dR|YMaUxaQr5p& Ɨt"QcE[+Q8X̮"{xi4ڐ]PTz M4h8I 't@*a3E-gZW ~|d_`4%bFI@BB{9֯t`M0H7\u!/ݙ1$[j/\Sc6m'6SseAkொetr6tn(TBl""ȹ?ft{xJ7{[|3$%Qp:V,_̭בα"BvUuHέ+oU3#goޯ^ S>9{gj0*sI(R R{qJͬA"Q\ᔣu@%}WJj2lBAD'$nI?6S@\U 75=K7[mEjgbx9\+@yF+ [~Kԡם 2+˽.Gްů#`N @ TR~XW4(8u6";=tiV'S?w[4ʹ)-@Y¬m[Ӏ $Rf-hmRwgGϞej#%wS5;Pk(Pj$e(;,c^W\7#Kx1Uo!xKhAk]Dg믣) (AE=Z5* `iަ}y}P&(⮟e_+eepGZ)\Y0P~~U,=`fR%m#G.7]/{B dۨO'ζX`[w.4~&!$Hȋ=O 4?꘼@itEqA*s-j8Ө*nBs_zA"%Y,jSGWf~pZS31aliC4`ja9fܧˋ}Ͽo{y?J~FLj ƴ PY+^qK RU{n:z3N;. "_l:ܢT-N! SK7O7TwyH\A:%е[] 5TΩQLk%WH@9w F բ 5jӀŗa%=#9SvG֪F= .Wu&{if" l( _yϦ, e@1=K5uM}iwe܄}jăb(hդ Y[.m; ˙̚l)^N1fsnu@l`XĀ@Yf-Kb9Góݶ)hA 5$,9؈1}ӛ_x`)UٹB=>bCRK~Uwr^_CM|bWGFj5.s'qwgxy<{l; b{KxFșDCpj 9,\\9sGN[:8_]\_z/Wa}bMݓaa*v3FM^Ɋ$y^*;`A`c'f}-VZ?C`fų=M:r9ѽA{lY%|t>FmT  G%N?V{&/K6D|asxTCH3<$ͫ+^Z !@J6uJ+.B٦$n v "/$Hր<#Κ&ٔn@6A N"lB4 W,xLeaċݔ\"K*D]wMb xJӭ2eY]أ+ åac45Ŷ[N=빦xzlpH*}nS^5g7vH栌8ݿ}Z(7ݧ!:uQ(?o>zP.ٜT8wF[䦅㩱~K>K,ZHN; \@$6bHJyTgYkgo^6_ƾjF9e2WK 0.33{w+zI.UWfé~]u#7ds.3;In0_淸[ߒɦFLE.9m`kؾ"kSH3|ϝoO %L栒#CG`iF )_蹫7xwjK_A3 !|(2G`n0_מ :HOam`4%0ѣvfڰHp>#}ާFd-67y R0 ;iCs?Z眏|;!hAN۝b]CeJ6}Mf_^Q%R_ ah1>(`79D׭I>v*Z?*z{b96Ȳ^c5l*a#oDն!]&v(/i-L(ۑڱ)`$ bh2J Ebsa'ka6*SVh;UK[ߖMt1Z,,/Vd.̃0 @F9X,D@_?7۰9VLAxy2! #9ZOrogkެd;v=%Jշő-<5urP,_~hg.~a#223Z!<=tEz`TXW <5/0awKI9Jю"3;E?Pa;C Wm7S[\ g#ФԿEpK~=m5pHhHymfl~n% 8  92v{Ti0*S*g\{&1eƛ'|!lz hDgz2?RЈ/ sosoSZD@;X)oQi$DHm! dI(Cb3M lmPj15%Ab!-@UEZ,TVİcE2эb6-`[&جE&KJƣXLmI3mRWs$F%TmѲmH QE!+F$#TY*-Ս~~W=aϵg@/y#:Y ܏†& :ټڭ#{_u41i7ZթV-Tdbŭ Tj[Uحb-5V5nko<(_?w-l+r?;@6iU Ch_ع⚶JEa"}sof4ۥs-A @708G >/\YHl܅l Owټ|5

^snP& ! ÄYaek{oFUc$F HkTͯjr6{Z]3rqsmfA-K]+{fb_G_~v֯Qjy@Yc$?ͷOzIz%j ->d݈ϯqF) aqTnB3$_yoDcm&,O.q[li)!RWwKRJɋṋ*}ZKIwk#Qwl=*r7s9 /-)"5bu$K똶V/"; A?z( 7pP< ̎ QJST^s*;?fy+NNWV1QWP002ef2AKlT:nr0#J[Va)[ l}XLJ}Fבٷ !huZճw]$ВAfvkJ1+ͶF=.0lcm>(4=oO>"[w7hՃwhB9x aLBC̄sO՜톮Bl]SʘzT{>puiގ?ۃN=ӵj6ecympϙ54)ش+ HBr24/vuP' @I!.4 mB64p$^N@k:$΅ f$Ť"2m[j~Uja$$Bֻ9$! FVs^=uBBB4_f+Pc w I,LBI H/ެ5D}?X[iS臕4ͭM a! HdZHYxRGM22uejB$ .J%R bGf-D}b Si3qgs+Iu~Y&Wxz*0:X(>%E4}zZ ?2=P;j礸^U˻K۞_.͕ZMuAxyfw0@td:BG =V :WJ_mM"VK7Fd6Dq5dЛB"ȳ=2F~tRBEM*A[vt^%=_]E b=7Clh%|f1gG0I@_b=`6g gq{ipi>htGOD83KJ)A;84BZ_?u}4lOgè +g lI L&}G Ӄj?q{< D / !he%$i,fvv&/2z'8hO*yK_D=4# Y.J26%+A| ?1bAΗTSk@x 9LAiZ~֜P]fLw'â%Bt},G'K2Qrl2|Zha=*ӮD>DQ{qCA.X>]kϷ˳\(S^vP !CMNhTryz6}>ףclE3gU:USyDF#!X,s-+@! A*PB2֌z?rY_K9O<gh`Yb@XJj6+_+_VVUE[a- ӓ&flb? L#y$H%`@\ss;3U|A1 .p(=OwOC  sp$9rkPH5*fuY͗˛>./o*3jтZ?($QRJۚvkk;&w,#DiZSQ6/aehBc9G&WeÙ3;<=;J<5gwÉ\{xp wq {AZg͛.LxS9>VB0 5$c=s@0~'(ź@(kPq4oEp$axeտBbN7}mcz!$3AEhAQ(NcX R ۳dD}I,T!^D' g/@U-Yx8DBk{t{%gkPp0K|z?u9?Ocrq Juxj' ëK 1NTskCOE/-i lˋ/s 6{p*\nG>A`w,F26Nˢ BvBf!+RRse* 0qa]'GM6lohoSFcD='v$"nI}?ڰχJaмl_np9Ng&C'0[ǩ0u~|k16te>u#l l n#MXX<7(*kd1ٔ rp3PU5cVz&$Ĵi-֍jrTj+cnmvmd[[$b&I[ ul0(-j2M]Z1U5ch [EQjՒX5Aj,Xi cb ]c;kS1Z4Y"QIi%b[4Z,mڊ5kQѣmQmMUBmQFƷƮE_ooR",?D͊7A(6\N}}%sl? -MW.u?KR0t]]w{mdةZE$)>#i+ǭTK2XJZGZcSChVAF[ۦs'vAל.()68bl=-?NȨ&6!z/ 6oGh+wU+1T%D,MQITP5s*jIWƾMEstg|Z%v]]nzsWwtJ;wӫ%9^\}{k[r.nջs*{߭қKp5kQ1N4Zt@(CMܷ퓹;}5y_} k 1&:  < sgcbm|as˱^Ն Fc6em~k9n2۵ovGs}Ey$ﯹWğhlV! H,;N}vw{whxʅ >k;=?ٵ$Tno%01#4j$_gxOj(2K WL1Υ2t߉l6΃؂4%rYy<9{ [ʊӑ &ĥc&!J׏^Kmz˭7WϚޔ'&J&j%Ha3Ix65rMZyom17-{tQ~EMm{,e16g&M5F{ 4$# !_:,Hb[b]^MI+ib9,ۅhiww&X)9eq-|'G`>K:i5nŹ7(1>pa"8v3Oy4†VڏM2ޒ`*o b "7ՋH c>#d{D/Kl=ʙ;4RG7.f(b$b"I"r2ې7z腬̻k2y{w$̰w!(2Rd2({n{%'+&Fy\׽\ZI;Ƨn;{rIPhX,ws$(뼧y̝yI&K4kO<-z.FBd.rs˛)sW6C Sm-Ԛ5jVZk4֬d61LGwMIh6sc,%={{RYQ y +{ݺadM<Μ9JnNmw4ݺZ¤(!DSLI,*66vyܸuhvZj"ou̅,X%DaK9]wN+g8ir )J$L2j-D6JRZk% 4QشY-FjR-5ciel&6&ѨKU59nIH3s7+yu^M¿U4W:rzO: {ّDw] -!FTؤIK)@P YC 2"4&bZ aS6d dRLlI)IldEI bIA(5&1#0fb"h2 bܻFr\$PŐVjA2מ^r I&c'rv{DDRB[{\l9nJ!sƵ QejO swWahMHrd6mmQxMh-y;=Qg㷧[+QȆ66mrZLJfJ2+i36k-es%#9rlIt)c n\RIDb٘Dld"hb4Te4Ɩ" dID7tsW~>ww[!d }?{>[ ˗;V3]ʶdEM(L_ΈH< :Ek^b7MD%%c~o 'aӧ_F&&a4m!ӵJMR/_53wj׮ۻw@Py\*m־E[T$LIxnfo!ӯ/M/צaFQݹOMk|`a\hUj6hJ m6C똗<"2pe)dOJZC72J9.a04|Ho_گݾ{o^A‹wuoGM6};md'ջ}m͐&&ܟi/uhqx<=N;;&qm0 mo*6ԻdmgBlNإ@XsA91UC p1R.~'z ^u5*n "!ӹ쵕I6"bhUߟ|mof6ݚ:z׻kw2AYs:|v:{񞫙w89h_B"Ss4zv]ȟJRr0Ilr, 9ڌIeqiK%p?5?M`IJH++KΦ]K;?Sp ['SVp PW'̰.O뿾(4^k}4"떾쾷D[[mпfaArL2<1Mk6l0l%,e պO$7k2IId5UݬF3if6޻^}bWB^렜R AR^E, 'd֍2I-e X6ql%:'E#LuD-s!F E{^ߧҷu=/WXHt'b o$wEs+)sxWድx^F8W0 :Jd+ۅ.X`T2H)w_v<8 %e`m=źCv%#GڀgF$4 kX͌ h?ج-f6HdPHHoJ`GiCCH)bhSSŷjH^I&t¦bm 56׋?θp@6M@Ă9SLJ],o~pqzqC>;r]_}zL} H4_*?qEWw^1X%"g͵m6Z^~fUBHÁ0Q ƾXLc>u S_L>:}05}} 6RK%(*y:R L>Y2S.{t}9g_u\.-48/<}&{獇N^I@ _/X1'KJ |2NnC|ۮ_4RT7*w45,%O(:IavE0,`n9F0.\1fipE])4{d L8ZkADW׳w < " 0>R`dwT " 4:-MJBUgɴ@MC?ʡ&Zc#~=PtS2!J=# "2 EVE9e10gZҥ䖠9&{{nj!eH8_O - IJ Z :tU xj|wBx!:ОbUY:-`BSpf0V N7ƚ- Y ҩ過>Y2yIpA{Dhj%$|qTlj'vfIO5n%G Cw;Pgx6Ch;6i7]m <؈ EWᢩuPm}qq^5mͯ2(`\wCjG#~6 jѡb5#lZ5j+(VCc+EV(ƨ$UuOO}?{k}EPTVmm)֍F5m$hш2Ѫ*6Dk!cTX,F6IJFڤڸm,Qk9E+ lTPbB HƉ DLi,),dPċV6mEhlm $bhd5QjHe`5chb#IQmДVAXرbQF!cEZ*J`cűjZSQVmJDAX.XŢhhmEI(Y5-Qn\eEMF,-E&`F hm+Q66i6ы\Y*-fѴh3Dmw\bQ(60[_}X5$AZclV6RmaEb#RZj6mbSEZ1DS F Q6bD&EZ0aFM4] h) F0mM6cVmQ&Y@Rc3 Zwo;Z²cNFm69 j=[*cChi`{P,|)>ԋviPڽ/ /0464to![/#Ӿ8$N:ZtמHNIαFRsIڶ.Aswuiխ`t9\R| h#vGRt1E-Exj8p$fͬ(d 0,tkS4[ϯ3v=dwO.Yikc1Gs{~K[>s{3m{{Ze@T89 5z,$PSx8iW̽a~j(AKo?UiƁGO;WohSL pC^bDBD_%4Ak蝯~WLJۓUCs4,9`Hu__r=v[ciߤxwo{`ew $?Jm&z24D 19`X>Y.gE3@Ҙ@ΞC>с^`X^aqTJRF/(ya3-(6)מ&40w1j[?\LXi7@WV_iL<$XX|Ijqb?8ï5z|]kǖPh(ޡ|5b?L%~~qmq6ާ"߲kVa>OC k@0N` *>MR=Rg<:׆}Nc+uXuϙb-S!3֐D9}ԜC3y6n,hڻ-+BH7 WZwɇ#L̻&p>7?jwCEu.VS֊zKlh vNPV@C\W>b/_6xx#u;XsBDoā2$BQpYq;\yq=c]jW= cvi]M~g#ɉ T@|qAϥ:hx7kWrDZ{r-4^󼼘MƓnB)ed#kz(}R7u!Q 1Љ*AH3!jT:By[WXs8Nscrg` 1b,}&*LO%(;f$ANYi SsLs#`@u7tzS5f1$4zì]nmkZYY\&qEM )o1ƛa.,WT7Of זh9mIYUH~|tN,BXRiR[ߧ0A$BDA K-KRC^SQh vך1y?ZUKMzU DЊ7M_8l 2Zc!C3й9 bsW5< wY^w/&lrWe zPScRT"_&f+׹twviKvcIo,m9nk- `ر,Wcx]-ʻ4k\rEҮm-sw](6*!hF1?#G:t5OfwJrIp2! C='`BEk 00% pM*hm uhHs62ZDųMZđ<1 P3~}?T4q[:~Ckzq;~Z[i11畾c10W|ٞi$|2kzAhs\[=D0p85Gfj;}{;gnUX4_a F l`4JQ(Pkv3Z݆j9JR@+{zGK+g~J@Aڳs-ўӞJ@s Υ{O/_Ei?г IR&'<2xfPo\R"@Jl؊z’ssf/(-BB ۺ,ܲ&=d_o066,@83*/RFSXO&J{~ OxKXxnN ٌP(Yl4|(r (sEAw,rrpNNJG9"eD y[zo^]cV]՚#fy~Ԋۇ/e+/. J_ qcz4){t7m~׎(-,7L;סɿq }W&rl길 -qzDl0[W]{|:ls{k Ch4& cJXL)6 $ı0h ZͿܛccIZ4Q&mE(QljCFҚ2b$ B)I PݸCE4m( Ph$% 1!15HTVlQ DFM2jKc6db*14lɴIF(XذBmBưbR dbPԚ)RH#5%Ě53Fb-Blc[,h-dEDʓ5& !h2$F3lV$,TZ,U+d[QF Z-QM2 !kc2$D YKD6K.vYMcFKbMhĄLRflQQbP)4QQ1B-EHhƢ 2lP4j- Z66* iTEd)h616Ud4"mMF6dYŢ- Q*6($LI5+5Jj5B"6eQƢFMbŁb5EED+%RQIDVmEC(j,iM)H"2` "bZEh4X$S hZE0FEMsVwub l[XQ5AjiQd$hi66J-H1h!)DZmbę5%PHH`5caH@bCh`ƘbU*MAgMħg=ߗo0,e%E!LQIF&RjQLEJ2P6ƐSb#m%i4lM(FQmdba´!L&6M!M j؁ ʛaYi M6 SZJZB؛HcKhcVIDKdljLiLؘK?ş}7rfƈir [ 16li0C>%\iZD@ ј iBP(R H$aNY `L;(фÛ_9cas34zbɾ;o;_6wvmLEZ0:EؾQak(dKt)}uF*(^7⠯]#W*hhڊ,FhƱBRM 1k˯U6D1vWkݿy{noq4QU͹/;SzQ,[y{o4g[*|t߲FΛCl;c#RΪ"z<?G@@,hT`9@.j3p9͒M7|ETbnNީ[vL`L{:*E Bey`wOq[nj&q3Y؆?6eS٨( LLLHSMz""+y+Ƽr&*0tܙΡ #+o,}UkXo-a*[S* ;= tȭPL+˴WW mm=Eڴ,kMZ9(gt! ONg(QUiV%=+Mapd֐Pdlۯ`&7&mͰ'rz3>^OGߎ3.88ͷSe͞!vS1ЇY tbN^ke}zB@Ax96vƝ!==֯Ǎ5^2gY/J<$|Й',.8g#_Г\?iJ 5{EMlso7(Bc#hR1DF{l1lGGYt#Tb܈ /bjm0@ߒaƸ?7Ԧv2#-N}χ 8l@\\gw>EؑEFG0BB n'@ʃҘ3:8? ÜY3(kwMhD~~^b/%!VjՖn.?BʫW xˏ.sƪ;6(-so0ϥeμB}Bo;)~Wջ(IhOy㏏{"PusEffaef'N>/2U)gL>)I:p9T%^eE~|/UZjH Iӓö.G$ BkW,nD%gBV"yD\}dƶ;37dInhn(8*`EäB8{!m.Vg5乧3csVBF:Ce-lby{Hs:<_uWUy0y/7޲'\1FGY l37PAB19cQ4 |V kf"LqJBaX+Al>n9capŰlQuŭ G)S$X)܊ EbxabjV" y9++W/A1Az!e ="29/8H 9&C- ;Gpw?\f\.e R ADùw߻?{u[NS$BF$E6 BaBm2&JH؊)j@Iʌ Q ~7us<~ȱobmdëS/h R?}Kh˓>VoK҅,`4K!&a=@n~7$ Ju #FΙr@?E;VzO_b (ѡ(lTZ* TVɵ _ot_+ߍ Hk`r3:AXثaޝ!ţoߗ"F*ơ սKMܯyڛ6A.jw`1onj&ƃSYcwn9ڍsa9]ך7ѫ\ƘF:j MdZi KHIRVoK/`u 4策Cm҆(fai^̊DC`6"IQd9%,ĀyB )drL@ؚ`]t8~/v>O&vgM߫0~~\5?e?=_"v2ܝVctp~._}SmG, #<ר1i79%KѦ6Pom'GRB:%RFE9+1ő q{_RAgu_|ynrBQXX[-/z۵Ip[[8=0WE93=gyDݰ&IBON=;"𣒃zp]y5k.;%GO]J͐/?mך3/460,\[=S87*˼c<]M9Krׁ(Do|L}"C&n`ږ3~$iSk;i4')¿2gؓ#20 GS VGoO{1Qyp)(GfgJ(p??% 3TAOFZxrFٳ$55mMGݶ[GSTpej_'ʟ=>(]&<:8lj{Xڸ1VV&"1fzH;%AT+:4d,DG+\:  (AS`XG7#bG Ȍ+-nxU0|QU230R~w6w>__Z-x19#/ZyoEylݭ$glUxxfR']ʇkam뿾= QB̈sQfqhqW :im\dYM}0>uu#⵵OClSۼ*߻lWL]G OsU`o6ÂU yu6z<HyķzcupY`/@0CL!m/&H WNg5apUw F6{7_tS׉)wUUݻOʐq,+^Kb{mS?潓և8SvyDΉ#-Oyvn5|>򳸞ʹ}V9i2{o?qY6wdҿlmğOҺ돧)୓}F丯-%{㯶lY 2=tKe߁4{tۨ$N (T­Z*sc%"O2>ݺKG9IQp,L`sq(@r (eVg^OEU9euEg-u{_Zɯיb[lV6GQ+-[ZL//ۣ3{ziy R9UO#_g%]WE΄[\#^Z}倜+Vb fC44[hZ2cu>- Mi%6{W:/6 % r)!ZÀ?5w;;iH%ݿ (^0Г38^c^F!)$RqP{x*l?M_LS}9.[b%Oߦ_!{$S=w;:iğ FxrAv6Ϫ/W85(]k]u$=Cϭf^C{h3(]5u='ʄh>VsD& p$Z)>qm 0hICR@'X=J7Iѐڨ9sb]oKFI bD &ȣCL]L{VY@M6Im**%IlRVbߦmRZƢ,XbѨY ,jE6ƵEEQj)#bmIcTm`RdPUűXDfF)6ڢƈ mblCgp_M MIwuLg6[kj~5q_o-d%w! W@(O~6Ye[Qt¢ի$y?̰xW&jU-O;=+mqL;]rŊZ/W俹CdY|VbYi1Y{$^}֫-_@uP.lIAC_vk{ӵ^$ ؘ6 $1F,Zlh-j h m66F81v(;[^6MdNSvz6gnʺErCsDYm-%AFi"ŌXQ_%trvG}vAg6E{kB^n kX;QkZp6a"62BͲ:ᬢYQo*k:6ھE4Ы/iC@҆6&ҹ9kِ!!ntzȵM" n'"%J7 ]\gje*BO|/eGAKfc 3~сh2-H!$Do~Gؼ#\ j lAQ5@@=|;B+ΩrM:dwh?D]?Ҏ+&~2dƙD#}{V Bḁ>;滗+bA]3ɉn'Bۭs63uIޱm_;D^QQ!6oܞz[#^eNk5mc6|/Dp.&f{.{-r];#eҰNGzLrbߛ8Rgf~|744ԂN*))*9k?Ӆ'TLe|0_S`OmӵĚm%r{Cxen*;FJ O%&ζ[Qr߬մ%xXf0حz}U'AZJoJ:.믲PN]n\|n7M`|ܷe6ϓ[mY?3Sޙ?rKIc1Puo$! 7`Q3!b4CJSk||[9f{[9:/`쎨سng:tP3 J?^4F@z /l)whIƞkʓHDF@DZ1Rrq0>g ŵqiOlzëd6-svZT~工T9'l)D"yy ,_clkt;M~Ѣ!饲w6˼~Sf9zt~ޞow]wKUO-ߖ,Mxۖ!6;]gg;>a9SmIǑtnOck P~Q/nܢmEst-l}:vsӇN ]&56s.YNqax:goÁ1h`p qL?/qқ˘ә= ? ( ^:7ɴ@'t:4AZml%^C)9bYC!6 զ)[>vJGRoĩf>wXK>!ͧ=&cY%ht $\忾Gص5.YF(ԺC#<{[72Gv:Kn]5^f?`~lsrӝj=-'#mbۍ"יJy aKKkIQZ|D)?<7 ,%f{,pk ,!MCb}zO.s/5͗8X+}%$L^]*S88(zcT !|͞d\ [ | jm_ ox;NB13||EԔ@PUH1TtƕО{{6{o?9r%t.-Ġ&l˧w+_ic䙌 ?!<8ޅ~<#um,+|}~#x~6ٗOۭvC`j3JG}?K(/J)q*zx?*OUl$,ʲ;/=!TZ)S\?j4Y/Õr;ݏuVQ 혜F_ٳ\s lCEM[d޺fUr=[W`ghיj͛=?q5|E6_*CE1;5ѨobCPTN,ݵF4:G6*Jom`qJAZIVcKG8J6;p-!x/o"`;<3m9ݯ6`W:&^.s,V F x1]g_eJa8\èu^*KZxp^ϕt{ԗ;/]TN>sM(;FCu86ݔso%su~pX uĺJSY)\/Ldw~G?\[h(OEr,<q6~|7Xbwe uCEh3hc K>!M6t522:@I( ?Lܭ')by{#W)TpZ.VJNm àŸ|:|,?'YRe7xxwZ.I;-h}H?Zuq_s*r>;ջ{[|#L,uTY]O!ֈеo(KfVւ׊ b¦ o럆.o*㩦Dr@ag!a)9skhzD 9d^t$LҸ4iJ @-C˸ vy㥭&j(n3 kNKGGǷ}埡2-:^I+Z0טcu9gӢEMT)wQ†$z6=5*ٕyOsj a$QVs4~u+TV4jd^A& +UՍZL̵O1޷wKuP-|Wl^H!ʐo`P , guZzr 9>F,4]\#ZiS?Wث{>~fBLHQbJkz^#f4HI/wKfifQ yt"Q0 뮙j6JbwH&7;-ַ ̀x^<ɹn_~&+`RȚ̶5{":s 3њڣwf-D`GRYS^s?2jLTO.cK}?m^^yWanFđR.pl>@A >NPқfq/Nad{GH>l.r/>jmwi>U0ˁXL4TM6 4,4Ґ1Ac:rSfZKH2#+blOٯcF5$D|vXEgp imFTz\1O^u'Fϥ2MbJ{SPjFUnX:o r1xv1#TE&1ߡ  3oizZan8JFҖC'6qj iҔ&*6C: P!T6" A(}~ϟo_I:=Nt0n_$4nQ|D*0c!ю5.|}:CU v#s|5.睺Q[L¹\ovww_bc$I&Y'R9LQQ\R)JFi`Yp`I)jJ28rj:kNLj?!#zHrt~?Z끬F<\Gb4t$Ĩ`5GzTR[P ʫ}~٫yñAq\}ޘ iqDF!wq,WM w(Ibi11= 腫#%DI6$sro|Nߓ#/z% < S46}sr@L@UƯ( ˯ԭam)_l4b~,}q.~1僋g7Kk5 u?&nݣi6bؾM,b.\ X x53Eqw'xڶ`07 N,T` ( ,,i R }i~<&UpgSYATòA)F` O7-r~'\ܣݘr?A ,fhlY~Vb$ys:X mPO"<YÇ3ISQM=-jaeI =dcGZtƌg]ŚMts6}Ŀow%CV!+xS vfug%=rNܤǖzi)m0ljvi=ق86t:rx+ D}v@֨:%Q}F՞w?Qyw%I%>G"q0'1.նچ6@bGiH2 c %mL@XpA%j6"&SRr~'irޛY%fVV9굸*LcbL-#e j)NnGiE/naׅ]Pk\3`IBe~=΄+ "=Ȏ$lu\*^|~ZϫmM*b;ǓK);A #Bm"nx9ʺЁHL`8 Х! ZАbmrJYW:-~L mP]+M֏.Jk_}'NCl ZdcV׾.\͔a4vhQ}ƬjQ٫ml-5NByAB5"ֆʔ" $1$K-eH\4Ȍ!\Gi >&X!zXa+ EJ4V@b)Zj=p䤗MZ4ѺU `BUSX7u`ӓD1ָ6۫ޟ_׿_I|Q:wκ(#E1<QJDfu]|nWwȗ(^λ#^^{9I7]vF痕'/oϋ󶒛.E{ݧ<>u:̓>s(%G>#||_O+W.q}Wv&hZiB(9N1E$(E@D&qE@rfOkG|ǯ:yݼmwvs\ϫ^PI" uD@$d}rv|Tui[܉=?.\\5{\YX/55GJB`B\yiHrR aj c P#d 4f2{'.^^נynncӴn4_Db TYԞwrk{湹u=IWۣeD$9f$tGGʪM pl┒*H/ɅJg2&$ A5 C `f4F&7H2Z9z{ ENZAԽAC>0Fd$!ey!Ut%4ĆųκΚ^ϡ\<-󎻵^ݽv ɸs C rfqdY[m@*QrL>>Q$.@$A ϛ ` I,ߤ30A$"nHG@~3 ;r bB(\͡ljO5ˊ _40PAB.b$Uu*Μ83.m)R˖vaSB )l@e\=+2Fm1km>tZ^om?܁܂AatB7l}#&cT6W0Bkr4ˆMSHe抽Y%/~x9FeǷֲ¥٬C" [Msג|S=_;FL1^%=ۅsܳ.wq\ q;vb滹|1'\ץ+9ǒe󮛖ws|n^\fdӥۘ9޺|^k; %;ή;Ks.MzQ.\/Qcu3.wS;m~l `H.a" o&wOePkhx#h)2`KX$XÒ$ H.P]v\>\%j"A! ":}ORF꾞t=xq.;rswvO7(@I3A`!ӑ)2tA;I޴=>K @u!.$Hr pBdArRfI9Ӈ/ZϺm7=_1 <\k P C߳v霕34͞ڙ:Cﮯ1 @_ U,h{o9QF "0 ,qŻL k2M!cvhfS1D(9Ȉ%?o-)!8 3NC: -8;,ɇf-u=^ZܓYWB,gfas7){+{m$lww8 yr;[9WOwrY*{q{dsww+/r#\wvkȯϯ=QztsbF9vI?X(b[v {">}{!ryy^а$a:&,$. Py!ۺQJ 侗@b*uڻU--n޼ )w: ~@g?t4ܓcȭd2˿J!y~ WOA0HCeq9md*_D;.8@tnF%3lyI5BzpȾ ;Uoϛ#ZT17Q9Uh-+yƿPs5ty~GkaDA$~%͗>l52fՐXu0#r991ͺyP8QxsKHاdN[s[ ?wxCrߗFY_ʳ< kɧ#>/cc ,h&ˡԺu ~Y_>Vm\Y  >ʦsb+,dzt.p$_JXB0")LWZn ĝ.M3 18Ìu`55 Ɏfнg*d.$@2<`LZd>]M;Gמy. ʮ'c$\nZ2i.fLgDoQkL6nZ s]jd#|SjeM?أ#,"4-*x߅7;4t;Aou f;X(AN\Nl6%akKTqF_Q;S^~ےF'h 5icdIK`c̃c<0}E ,L|6q)ނ]. H{/tWc9 WDZ%8mH20,dX)(1S*f64јѿ!]ݹı cm1$ @HY9iڧc3}_bg?wO[.ym}W1_wxě܊Q b!좇^iZ8آsEZ6m0os lrN^[AWko-rQ\DjO_AmvFxsu>]Etf o5s^%+\S( @6b-CVdؼ@Q:p\CidrcuY|/?qXq+K$ gӏ;7t/@эx|ro^}RBm$iH0|?^zM *&mLNȔXX09ۢ-\Oӧ8L5;Pk-yۚLD4j5ٙ%0+{ fV*7)W=&(>l+3ę;dT8ql|Ou=zzydl ryc/G OC)4qiOIX7ONQ"M^ M;X+d;=Q56\ |H̎;BtNFORRk,VR~cǚ PF|hx6aBA"u2кD=WlUɛ]J1;tdx"]: 8,%0\\7pY7{=|߫-y"^}t6㸍w4qlL} qpBs2'<"W+LrR?0Ǿff,r'PlJn%ETw^^c/pE/{ 7$%woipv5m]ZHN]( uTbd]zҦ4ERኼ]oVR6`Ap%t'"w18Jʳ '8aOM> pQ9d@گhزTA Њ:voe{i3ob4Ӿɒ5hd2"?{>~㶯ݔXږjڋVii+7ZSTƊ?w|>}ov5IX*?rmu|i m[M!6D% $&!xG$6`Ӭ8IG1Z,G*#_̧?w_uažEr5d4cؔ<$BD$*e1S{61w]$avN(s͢دLnM\nyݽ {W6/ 9h9oubɷ-^[r1ur#L"W4c^Z^N%~_mSthDbXV-=UbIE_~?ZbQ?[VZ4m%2(;?3DScEMxVsri6TLM1x1uތ]_lY kϢ 74h?2%I( gc:b.rI[/nbqd]lk4zfswоD:]^E:Z_4fvj}#/hw]Yy=  Q "]DR@zs8Q5F xJ "C󗊂`|_uQ5m漥){@/NT|b4QSneA0Z=R YL1VOYE{qHf,"WKTi>&wh)A'r=?#gj౤9TREˏy s#I(-<\OS^-d e7A50^s%Ebj8WgQ\ Acڳ{7𴅹$hF& Cbҡ0Xzhk8T0E 7i!)Yt$WR^mu]L{e)U|/ul*V٢rV6N22JԩFT`ݾCyH#G?WZ6ȬJ׮|fƼD5ȪouG>+(x5●49if]DOT]wm%p}P|4{ݎ}Drr/0KGQߑ& .KQ뒸eO !&C!Al[$Vǿ|e0>9߾5{'hȑUzd[6d몇P_9tnUxxw ,S6TTm"^͆^okh>rϺ&S| 2~FdnhY1BRVɹI{~oSrp4_lRv]o~#00i]2ӥ*屦(qtӮA^6>}τ,*D/[ EilYXsj t-PD5m+'(/hS>_gtuS?߀3Z'5l6=Ù2mm+'0mZ`78)ޘp~n cqѫ?C@p D z7."EyrB©,l5F!`;퉰/|Cm>Eb듃v=䅄li^o?}E׾/m*3r>}Vbs_IM!"K$hZU*BaV *8=ڣ|էl3crq9\mutm T.Q^&rcCcx`ǭF 1͛:n&~y1((W\ox6g6s~jvܵއZWIwd5SM۝ V5r̶9yvwvv1yyI]}|m\k9}YWkwiכ:hߤudŋl[[Q@bq]&#2mj4QLͽЌUSPKA'} ĝ?~;vk@Im,W[ϔ8@ `l*Krr(xF!(&r[9[ٷYmbMmhjqw]/Ɛf ~^EvcwUD\#Iyգz]߽Wt|Y)@S }.zJbI'*O$W" 6nrG:=`؍l.|ґXYY bqDkْ٭y_C\ mFDq{N?6/Gkcj\WWyfp5$Vr=編=5τKk=HEFcFT6h6G-ux6( bu.=&8cw"-i +w- #M Nj]0L1*NXmԽ$ W֣ ٽՙM.m0 p&o}[-NӰΧyQ A(;a)g_`rnG2AH/$@iL0Q$QHP<< Ui{?7W_GR9$-DђT 4\D);B?pHŪbN\]2v7C#t7 =ʣׅ `yw.LMmt-xN|tyPţzwqٻɱL$@6 ! BNU%-_z-il@11&ݘ6CaL2Q2c6V=:UnajlMa#Cdᣙd0L]@Y7/_>uF6)h4vB bꈽ:X_X/\5]5lV cmQFbY5-&ѭEV-#[T[b#&э*f,j5UEc[b4bTkbђ$m4Jm#1_/vڹ䬕b-RʒJW[|mh;כy£\yW]++ѭ$ G^ۑ;/+))W-iבNr߸'ە 4Zɘ1;]}%X׆rt[ٖ[G֧vJֶچ8h1HF-F]Ѧj(Y7~4?ۅs};b1iWjO't/tnH䷣?4=6punsW,].m\ͺujY-<Ѫ…0_[ c]}륚\(MF"mbwg>[tt΋,]hwzTh#xPW~)Er({\ܚY7V}O4/sUz\[d+뫙s-a' ^#-І:=jVI枨.C#c"SrRRJ!^0]Vvt{S] ΢SH1˲w|ߧl|Lo6o; ud #9VCH3 &,#CKEX_BB;bx['K!)#m˄vɣE{FkVeԙ^[LdPeLJP>1?w7]~ܧ: > ò{$YjD 6DBI-E{صtۓqfz^Q)AnKyO:rE_kcFIif~4Y}ګrE*3 yR3N3EKߌ9cmJvY>Mq%5 u"g'(؛4$7)Xw뚚0\u|yl~vRߎE .]_ǝcb6z^^,jtڅ-|m߿?s^{?XLR0]7bϲaYKoeo>Kts\v^Ev=?;_nymO{bʺwvƍbW-ȹ\4zZwt"ǧ+%`,dvh lo[^r2 0–B s4VSL[~Z֋EXd6b|Rcv,kk0] y'2H@ə+ZJ{Áé1;*fFjO\5h[֕km?}cI/ `ZC$an)M*9댲M'W՚H]8NUvqT3Az"-8%;rMqL4T#md «'B895>]bnO_R{\r#uzTF:dV7xP:By>9wiѮr=L7dX,i 1~pkclM%<:4\Tʲ)K]1ɍ_-®qM)2b\/evsW]Wo6c my__ڶH%b]obauw:=׏XTB HrI Ojp^@ \rN~O'&RI`0_tӻ;dQ ' [^h5||;Fc6W"ߏ}`  h"RRF"b@V 0 Z Wޕu߾uzm4-?~h#?kYu͛﯃V@[~Qm&Li7,G21Z{/Ki'4ʐm/Pi$TA#KbԅL]qa ~*r"pdH$lc&{ʯ;e# ϷyH dEym7g8'xA0Bu-h0G;?F blm ~D(LC`ހaQY|ZAWiD4v_Ej|>W\ U0ŹyQ6`pxn,]:rl'_~V"T׌~Z'ngWthl)qmu $~jݼոsFֿӷ|~ӫZ,jJb2\2:bkNAꄔi!:/ƻFfM |p=.|#!Nn,|9b,iBi&Z` r\o_kH||*/.-MXz4[f=ʀ oms%^̾bB&r+ȭ,[۟6=6rf&ѾɸQ:7 Tчo[oF1(xzbϯDRμw]TAE=Y>|ӯٗZmrY$1<4,f MÓxm79?ӧ^3MEa@#N CL 8$g*#BMtїg8X [yk# D Bm m6BLi'787yџ7؞ѳE3<[sjj&v3ʵc}™&z뚊C[+6 ?+dɟB , &(<59`H$^KћB =Ĉy{2"-%@U8i呕DIagag6Ё0AB5RT&BP†n,6lthcmzhuzAeXuw;healB% G!i49 {50f(.Qߴ>#2ZJ:=ɵCݮsRj+FПUb.In袢*nlDQFir)ъ4WϚ@Bǡvg<+lCzX6&c~6)侧NXP2ē/ۜ dsvhHf!66.7q `6 d̀VBUVFJҷ}%2}tp2ku4Z%AYqWym|y(gn{[/=_L+FؖHbOC&vN?5{GwSYw'+Nظdgu!%и3~N5_V׭_(, 2#WR57K2x?([tT4fZ!A$eȮ l8|ij6FZ#FAFKݓ>72"z($=F*"1C6j ȹ3}s\$NZlBG# *~xRJIG߻%:' ۆH"$ipdVY.+xTٱ[ŷ?iuLW(*akRlYYiO v: R/GDuѷ8,GJP}W5|$ gxpTvo"B1PD5 . ;CuRɈDb`XQ\W\t1RAc|YH!O5ҭe++%F+609j 1M7iV$3!-۷,To)6EBFs$%/ur"={={1Sdyq].[hkR/;M2IѱhQY"3I"X]]t✲،홤25c%m -_}X֍r#7}:).]b#&уbmԹo:h71 =Q -$lAA+8)=:WQ)D@Y08Dou~ [ۦmE".f;\Up-˵y{Y;oxr L3qe =O?=z0koBDtՁ6^NoR~D.{ks\d5V*NJvуqfHos !R %]R]Um3"fK{Lzӂ:{|gU][.)Bo ]~*\Ws/?Vl ֒xnɸ6xgzݥx굪)X#{ M9sj9ѯ_S$0%stεз`(F1*zWJ>zu3dcYFMsi\__Ɗ\\|Ne{nI}d,#e%4J!*nLOET{-aļyܤM_1V&SO:H etnH1QִeżϽx=)Wϭ߅kIve75{|7e^}ON5/E٩7\ILK􆊴KCi!vyh^7a8(dYCⰞja1_~s4fJ-ffMD66ک-QZҴZ֣kjTc4MbleQbŊy޻x9A 3:0g%;<%L(T5\5*KDhMNt9į#\ݾqoo}__duȨK .Ww6]ݷ6ܪ6k`J=yw4Z;<v+{I$~J4Qz%\߰ks}忎%΋DZjhjmEEcj-TaZ0d ?oھ}?wf&dh۱C0-b $X·drIRf g^Y kcመP1V #?Ι)KQab89}Q r"@$[;L mQAX"a,M ?Req 8M5M(rTI5r̄{eL/#^å@P'CLK@gϐ0:0A0a23*pUG07}EmjMun;<(]%D0@6=QB G:|on_Ώs6N'W>|{ E"tw,zR?/+SWTZ?x?<1,xQWLm^7iF6It}}wW~o礪t pw;sܑ<9˚D֝ Ti=HCY!}<*w2u.Ñ~wUFG Hȸ(2l stseo nQpˏ 17h\wk͓7],FB% ;b&L~ lgáݘ?n  Aw:},g@k63̀66 0hsmTQDThOtc1U%bWϟ5,KQQڊl׮,iҬmQTZ*#;vyt7%˻S.ۑy ڞu’7(ܺkӤyp'\~Nܟʋcb+pM$(~c!8˪?xI{a;E"=o;mo+Di+h F4m%lj**EE֢6$mZ(cclU-XY6ѭ%[ѬlVJcF(ɤH4IRE $i1*cZ"j{mli_O_3xiwgwq󷦧TѼEsQ +ͮbW7ep⹽t\ykןƋL]嫁 9ڝYewvBn@Z1 ooT8Nvw7J6YIL3s{_6~50BFbԣ3#-Pkm}=|W_ض$/_jӇMpeqX"X~ %$Ds}K6_uHG5*%YnH!Ԧ=^Ö.~.SIoeҞ*n< s=Ot'%{T|yx-6߿m<vaW٦},FgWgL្y90=Fp\:J6?'e֜2F6˭~.k;ڠϙ`;eעoճ_~uه h-c pf[ή~NN 9vm.+w~AE DY ۾'5O˰*jTh{Jtpmzrf:|_  ?Knڪٕ7{\޲ϿG+zV D U]yąկo(c4t[ $K$ip=҇N{{e[+NkvD[b1dT&Bc.ƛLNjC&m2KY#*)I)U( i}y?,ӯVāwzhPfnMmqQBЖE%E"w^ UA^{{h5HJ/[ϐF+d$H(.NMG(-G~_E:;0QE\ܹELIo2+y i6Vu~%}Z4VlběZQ67jkFCJ.Ö&(fBʄDzOo!dF1 \MQ JAaVm& &˪:qxalv:~}Ӓ~#8׭t&N{lLb< RƆycđl]l),H??5 W=Ucl}hۯN[>s`F#c Ώf u9ǬߪhQN˒},&KŊd\yJ 5Ԝ[&g[6' y3-1lQR]{}T|kn:?O5u 5 {)A,i%펙gB,q۪mn ׸Q{alCo2DC=Az].= lW-nw9w_"ٞ_Ld_},a&6tnA"&aS.Qio m IoXL_AȚ]( __sL9!:ua>@``Wb* D=Mһ!G}1oqAͳ-k!{fڳsB6R +W9k@ AكvB}AX=*.'`*V{)yhzuH>E qO;ՀzcW~\GM6V1ŹfYL4Li`wEhdb4^N=DntNgno=¿J V?V\ޥxI Gۣ6X_uE mGTf']p8)EG).h$! ۪H/u6Ƙ" ;~z d$a>>qyM#C͸q\qX@Lp}pAts-N# G[Nv3צHV j֮4b -KI8A hZulAX `T|迪cN$l&;3 o$jھꪊcUYU5klXskrUjVm6ڊ5o_b$#Oߗۂn)w)4wW)$b1wPwx"@/Tq 祀ABa\d = !( ~~NNfVPc>_5GҿT;b& >J2+4%V .\ ٲdm_acYmgr p >s@mٖ3sS\_`GDۘx~ C)n0PO_0[\o)aPu!`O*`^2;r!Ȉ uS5ۼX(>wY .#JINݒ &I~fX::D,dNwv klѩ>D >,kWCﯽ|0jZmǣ4iC-Ԩtmdks*Gkzi'cGkBc˗OAؿ _JWVb nȎ侞O7E#0gN^7c>׾0vE/ϐvܧ)ZSDϝĘL6MH%IlSB@UcL֋PBEAmcH&0M i4ui8<-iy{ߝ~O1VfȦ+3Mdѫ3mM1lE2SJSYͬhԥ3TmQm2bɨY14cUԛY6MZ 5FMlLQfS-Qj6(1hՊ(6,LDZ1X2*(E# n/Џw_qbmlco^s?rٶqqEOCQ##&*;wYAюtAf5s,KS3~zD\55lu}tB; Shq\\}ƣrtW-⫟x[mm=6_>]FK1Tiw9w)0o_ 辝a?36.ӳY0[aӶҺ%!ahk_VvB[`;H$]!+ r_w[k@K `[8Ԛ~9 kb$1)#~-P,ZxC+k_ 3%'ӅiuګߜuSGhM=?M>y?ng&kWz6&q+Jb{ۡns }_y}?k_,m%}r#Op{>ܦC q.}<?}Ki?xGs豱׮? Gt- 6 "PIE D[dZ d`EړQbKk1?e0?'1mRb(MWⱴ#E*6D٘&ChKl!c-, PdR$ؠ%%5Ղ5QFV,PhѤ,,h[i-&ڍcmmIjɓb-%TV6 QEIFL[Ijj>֟s$  lĔD@(;Q*yǻtHhQ}1 uֈw5Nd mtkRVʮdZmk[l动3\  &cVvPiPы4pq6>W!݆ӨݓYP#P%_&74^Fo9?SFz/)z7͗38mi/5e7K>3^(y F»Y5as2~޺eqm?q83g4ɅZ0گ oZu}mb6iɸ=Žϗn"N!k.ʳlڞ~. !vf_ŽAm#nq=;Ol])h~M<#[c9?ol:Aj?ݿ\uOrq߯|77+_up=;l<.LOɷ7u6}"&qm av߽o΃C(m=hg(߻b0`F2D'؉ fITN:U70)l aeLW܊p1dUz&!2~T]k.3|N|'SY|f3,ݩl3= TmYc7?jfvݣ=dZo߮{jKOmorvre>Vצ]vR};D :}6>|`\#:%]ut՟*v(/ens&YffU3ܙww~sU६^O7|[p\xKhQu5u ?as}ϖ/;*SVvAKŁc~M+r<ˉ\z;}tIZɛ4W|YKn 2(&Lte%|>[h^Ǐ5ϯ7ON}AN.V7q-'hrQYm:!ɀXvY+T/sOy5[?jmhxaն|8{4bLS=өL *֬9\ r=Ef?^Ƨ-cIר~!s {6wv?}еMGiTX}-n'ov~e>y#p:"6?j5|/us$Wﯗh5P~X.3z5ڿEΞ1e گLXn맜EZ}VxLLNiNyWՆ6{4|==?.o^l7=>z?GjO55~|?Ov’U)m`ߎߓ}V{)_g[ +fZ>&N&ز[,Eǯ\.Ja(D*!nx ?)`ynfc,x;IpX_ HyB(c;s,(_kRTjL=r]jVRlZ`jk4CT_- `nodw5K#=VA~N5ΗãZm+W |$}ʏ7]dlu] :lv۳_gDl?ċՈa_w~ʈ[Ei~iUua]>:62 }ԣ FHߦc.ϟ Zw|Lψ8ZoK%tfǮ ׌(ۗ|zU_tbix.Z=ɐ7zv_SgY/M^1Guiot¾Jףa7OvKF_:ye2SP_6Z#t\k)~dDyV;ۇ-7y)wly@X2{G_vR!GLf >Q֑9Ǭx 54V`q)ѹIJ)DH0 -;>Ô_kퟅ( §??b76-s].G[Yߥx =~ٱle!$8wRwC sLJ,pWे掆E7 Sn!,)z ߞ+k^sW7wc.棺\Q{Tl5|R@ĈchV#j-l[FSmw+m𡍃ccmiOvhhZ]:oщQQM=Es=y[/FX_>7NYHYK_:(ݩ]|_;bd˾unȍykɮpcK6Xeb\. {ȑz&A6.b +v5r|_|ݮn\La$Uýͳ^[/fFjV.J} s˽|jQE'w3b?ݒa2RfUPc=>Rt{ًO?~WeͫdsY?qߦc{_/3?Eق͔tE.lbjrZcx/@/kfK_pg476@d/ő-7,?ͪ] ބZVr(j 2%^xM'J;-~o#]P*GF~9DV_a{=V -QJĵo:3m)UCC?m~5?q}6kM~_56N~ĿJu4?OGpDUk˯kp5._ un// oeA$|"sOL;!ME3s)]㇍#0)45  (+-YiJg sp&>>폯 UJw9ɻ6/B-$/oyo|[B2"nϛBon*D FTY`XT]QFoWÆZ1YQ"Wg&'rj_=?1m/w_'3nw1ێ너g簿S2?$ؽM//].[k#V;H1Quẝp̢ʋ)OIb/l!ԟK6jh$,?duK _:kvjVluO콞[c1KzYGm!~\y'0(XZMBhB&)p8!S9 PLU =PF!€*M.*cmi_O4znC"}1q˟~!Vumʟoֻ$=dP*'NЅjz}Ue=Oy\(n5gŏ1].=|:n췢X~?3 ߯l<,3e]n9/Kq0,)"F81 NzbD<_;& &и4bQ. 8:ps("I3=h?b#Ufc=ۃ41T.i3qFƺp6+oJw,{A-1L&|GZ%*GGTIQ2OK!w½ 1tG|urIYH?|T@1ok0{:e%P )ɛfrPr &!3u!PG7q{,<u_Ώ}:o^$6e$V7C}IֻZH_Khf)~}Hڙ\ trGh&Rfn`M˛'9S~gʻe, jj[΃n[IlQV' Rѥy *4V 1ݗ=̥t}rȏrIgN[̽ e W`w^cMJCx,}1M5|K?S ӺFd>$&U1NgXǀHjSY\dXʓp5gֲ 9p)ᵆlQ j PftUݲ*Lͪf0-<2AvY_;Z⶙+"XlS!ʺPl0KC$Oǫ< !akV[睫~hK,ߋe-҉P _4+ u:"'AP68y  6kq?KBWj/^.!F%&&M,ȇ1|z'>:r;.=GYx vNuu[VR ( Ս0X͒$`։P"CY|'m-;[p0K *O|Σv _R`dD+Ɍ #&1-'ec H yAw@va:^ !qlPlqBw2m.$SyUkձPh3?uLD#BaT&RhDFL$#6ZEj-2 &&cH"PO?K\\ /ndM}O/~`X<(H1 =kOCUb٘zG̀R(Ѣj੄jz*[Tblll`5ޗ^FuDW1MZ*"EGQn:Q?]56_Jc[N:U-gr5ރ3F_{(1Mr-sQ~ϹXCެn@fĹ!4ƌ$ K(*I4>Kk/t*RIy=BwR;ŦJ?Y~>NKhhcǰ/ģ}R;voMoatնָt7)__^ .-S YE\1Uuɖ8^NJFFI2jV9yf]|-3$1j[=rg 42rpi@AcuU R_ pz_:EPR^zCHʟk"io}o1k^αFR|,{ l3W^ _GTujh7P/]FAƿ?CjwA+"F +%Y( 0XIJSx`a C0,(@^Q?iך%;@$Z"M&Ďoo|<=cؼfK+ WD7ӟZ$z?w~4]}ꭿɿGa3<_̈ s{V7\KqbBzR=w:(OpRӱ l8rDk/X.aB:=ItV(5fT59XfPR=:Q.ɱܦ饊|dM(pȧ6xZ 7éUxv0t $\z0MZ6+c3oLܝpy'I{%ŘGSղS$*c`ٔ #!yCjx[gU[me*5)YrLE-|R/B]"Ut1UQ1:}=^ʢf7Ws*ʦE FwP V̂mCjݫX,;zz FP!Xm{cۻuߥkg-Sf"jA2rn/#p{{/g dn<b?/Y.*Soz;4g\>~'~<CUcPhn8%F׃X],LNAҒܧZ]O/6?'mSMtriH'd۾ɔv)6[|Sayz}+Ik˽5j^ݜ<۔I22wOAܜ}$IZ"NvRI]cwUg EK" e&PW'z몧L-mqYXOK KjzNd]uF0Hj̀@'(sBAE( ;a!#R\JCxO(~v|?tpֶozDK.밼oe'y7gۇ\/NH# ȵRѐȺop6%C!c8So#Eh>87pCU'ŧ c 79lZklTZ*U}Ɓ6FgLJ Clh4ڨ4q8@[ANYh E`/ 3x>ǡveVX~ْsѓ"i3`^]azM!6znl;΢zbL"Yuj  QF\{r&TP)Som1B`iτ|YLƬDԟdkaI  Dçbo{y.k] ,ycnXu޴/xx!| ,&J+~whSіjrЯ9t=TtCw_Gl%3L,gM?dυ-N_ԌM>3svks_tF&=;;sSE"lAJ4(mXПN(n" m Ō#~Sks5 efaܡ66a !5hSBR$CEJ~.ȅYHrYtu!IQyf$1bQ;Y50co"X0o)%tL10)phBp`!Õ.F=qgN9u8/ǁBGNu"mp~ nUEF[gȵu }0?80BANX߁ѧTpٜVzd-%F hax(g.^y_'Nsۑv)ˈdkn(LprXsOV(3ۡ#3.N+D0ş)\ott:i092ҭ)AnY#S)?w_M)}]Wl8dJ5: Hn`HVm6Y @H@9Ȉv5xrupuj:vuTiQ۝!ڗ3BٟWVc1u[VҿlW>)px@cƾcEѨjQRԝC@ I36lιGU~m>]oXr,zf |@lp/=HB% k!A#fbQCMyyE?&i~*3ng{]Ux4XWPJ/;s}ħq.˵TK6Wߟ$KU X m`ev#*z=P,(2=UQBZ-&dؚbIQGl"cWg&xgqĜ 6MVhak0Adci*q T2Ekihc?_EǏ~}2f/zb8+pKuOCQB#A! $Wd"cheE%QHbm$,.۰A8К r0: Q5}!`⥝ )ܼe\8DĿMW/F0 ~`PGpZK/pP?S&z~⮚Yn,M޾=a C 1$(+ou93tARx*h ZVD41A HV`ʫsRJΦ7YyRxbHnh"[(tН5pT{.E A1 X$*ŻOѵɏ~k,\ר??Ŵ~Ϗ'#N9Q!-W*^6 AW~wK1):^tSCH8"@4 cmqzQW_h0471i\+ܳH=&l_G_>IK?7 dAH?^N~LDP_f~goNtև-J`=/<0y{jl#3K  '%a$Yv/YL-`ퟆA'i*;tv՘nE[⾺XʃrYrx $$,J&d{]w>W#tcc BĮQ(lحlؙcc?sWj?"b+sM~~+n7." i-%p'^,lm#2Dˆ7"ZCiU11l*dl")~%&Q|e3q#o<*< CYwc5Ʋj'׹RAcʹ4}?{ J$_Ǿw\GǾ5wv*4yr|6b3o(߷׽|Uy꼯6#wQ<1F nm&簣[[7۷f[+vߵ}>k[Fkm@i,X߳ s46:JR,C-x9][}տ7o|TZ)|\Ϳ<6%?Ap=RTuxi2ӤO&0i(d#'z7̲A8> "Bm hbU=tR:B蝗Am0oԽz#ׄ #L B`QT@OI) >_~_'lt4c9`=Dhm_˕'ӫr컛oW+}X,)7[I&R܈RP$Pp'M"E UY(jQ6 (`b^Qk ЀAC 7ױ8et{CupsVPñ+y0>SwCì}X1`F,u-9Ak*aҚBP^B>Y•L@ZʛvXOS1FUM2Xۅ9kL$^%ry}qlLA)zn~u  wHqzn#`l=PK?vRuӖKT_tv2V~ت|2z#0lNwZ+eo8K=j tp&F\^Ox~*B臭T~ .,rӎ\%<%bTb܁䑑PI&bRёI$h a]4п>\h'9hmaE^j Z cBW#V޾Esr'Uا}dYYG{~S8qI>9KQS呚~b4ɒp#0ΡZ͕4uxs#&` [}Rb}z6i$ɿx)oB!ˑ_J}Sv eS"bݛLI2^$]f=nzZ6m@z=*fHVLkk %~Y; Z?jVKݿ~ޞbnD@۝ vXM\Fy]CMI\&77 JynG,6wT|ֲPQȜu\'o(u5sx$ڷcdY?nWGB9lނ1(#9dQ:\%%ٲLƭ2|էA{ Q`z Ep,~),@ٔ!.ψ >Ёe]˺`yA8(CD¾EzIKcݩB6B(E/vc9~\pp+(?󿇤$"4-+WN]DK(${Db-r^L'f\vӷTxSsByt hiH$!%<Dzz!RE )5=Nϧoo兀&XE-cAU8nωh*JshݜVq̋v}ZXT(dŪ)s)!]?eh,3tPCXÈ Ygھ~ <9ș90v?>]cSئ1Q(fI #*C$J&,9P+dj`SAE'3#Y:·}z $ ܢH">f=:[`6`br 2Áp"x)0ܡC(s\GvʹE|Oy˯p@F!LAVC5 ) kaCkh!7b,H=EtL8o,]F{kQZ4j5-EkhȨg.+$o-@{dEys^DlEwu_{ǥ+bwc657YmE]1mbh7}nE}^ET_Noו4Qn~_Wge\֍ c$Lo麺u D LmliW&qn-w4PDHﰪ鑄ylviO4J*װ9lj rKw>ʗoky.u=VJ3my>7A;EyC {pZlۥ ZI:+{1ax}k[}?t_ a?mķNѦ?|w9m %F|_okaOq{*oE"?T4Z> ;ƛVV*ޑ_Aq/*$mwK=J0$mP+ɩ1X4 U\b^7EM=Ŷ멒g^ \?1A8a$` j"1 :Cm \5"4y x1((-Կ b|eHB 7d4y_%]d)ڜQ@P~-La7=Sw/Ɵ>8>B};)3 NG?l%Vʂ Y@CCCXC!$;}r g 17q){/=T[8Ō+eJ̄j2֕*I_j4ٌc!41teG|M4"JmQ MUڏy4SxBr1}M޼uS42#پLxb elqP@\1 HnKig شHzLSX/`4a~{4~.pJmmx*-U'Tyٟާe{瓋t y߽!@ ^87$CWi5I=qnRk\y-f\bp2#q_+N]c)3@eDc&-M>WK d7K9,L,tTloϏI}Fw|@5e1(:\2!@q|#R֔x1ImvZ-7:a<\ ޑUO{L2AёJ34`ZȒԩz\C B <.3ۜt?z0h>F ls/rhN]oZ+*)ԁ|:Z9:J[ e)e.H$ǭ-rg`ѢGeJ9soxɪW% -|"[۵DTh"BܮrC0 i*%ĈFlI%و-8Èz%Rt^cpoH! )1$AiD0\\0 CCD0]9.}l{31Ծsyc( Q\tsSh Qg**ZF6[$plHjf~~B2$` GBBLL[RmIVԚRKiֲͶVYQjkn2;_߭m2ĄX"IFe1FEK ecL%E`&36D`Jb,JjXD4f(H3!IDhM)dDQJ$#M 0bbH3#h@(i!D Ԛ@Q &Ȭ1DFaEnSP@I!!D3PJdi7kИD_z"W%SUdqBTAzbБKDOU@j؎ш^#`. RpP6*Y~_M<ɽsmoE W/((>ӴrsTDC " LC=@ƿ$$m6dmwc<)W _vKcl5[3Q)66ŋEAƃF%%&mW~Nܴ"[ot㒜paXK! "bM~ &Ww!yBylԮHfܣmzJ\4n0'|:L6ȅƢfK s0M8 DOOD9%_Nj ;E'ˀh@7*!t؎enXDP% <]+FScW{*.ڒߋzZ͚Fs6&G2ѧh'?@r$i ؑ @LBoZIXb,4%]y׳ɜ&n~-*ư00V$8k1ġ&9!XZ~@j2 &d.6 dD~FDQm*"'T([B&,J( +%Jd)-cm%(5wg=_wxKu)j+&xB$,'uFn[ E=k}>۹s orr睫^\@ŮkRUT~gKMZcHsi/5~:]hsKUXD 4Vƛ`ȇy$_@2)(nєd8_nrv}6E[;R [   m<0C$Z4[(˕lm}?`gǂe@(Hj{1(eaYMFTqʻWGxWwx_?AIi _yW@bFڬ Yd6j]7E ׭eUg-) Bb(Dt*T@WȾ7.ѿʶ/ɍ8E:yZۓhl~Ȣ,DzPNG_y9PP63ZRKuz;2&@^C5J[7DVch%*KBm df6,dtBIIɘrD8?Pɶ[bIl7%!'@4-32yNn] 1dH&^(䙢wk[ӱh|1Z^W1px/C*H)6 mmàcP<g? |9>'lUpQK ~0JV=Zafy6U!Hj-&i~#${0KQA:AFZ#+S3QJc$Nb63)Nq [U.'8,Oc޻gN O7oǕUN<}0@=ן}7xG;Owǟ3~t~O=hꦐlDZL Y /9{Zk`!p #)!@p(#7'ڸ/A" l( 09 - h{\y RnyW= Bkͬ^JW؝F{W iYoQS;\6/۫,h;$qo1%eHõ:Tv2Zv+;xU ]]mB暩K56RoqLy fю[vZqcRDǵ%=\ߙK(xW=s& V A>9}GbiÄ+ڿ7@뤹y<np'̯}J3~Ө܃kIC Pm|nU%pWA. =>5݋8WRs%7C0q_Ώ3 j3֏\lq `5!HjO2R[j}>iG7:0QV-3bVJH$B7}ӳ՚|LH0wo?yx'g֭|о9%S GY@jL)߼q,? \Iz;ki$J٥a[Z-$YhMv?)6nO l#fvwmͽD$.6a9f5kₚB'ئB.\v* rmXN'H5H:SKpJ`zY4*X3wnź5ٍuXmCWO[$RYցJ]!+ wCyHhhwO"^e?R7æ ΃q~ϥ|~|[6.T\+K:ͥҏĭ  v.?o3"qӜQE(sHW*V)nhsYYOĞ(ԥABJT?}/TX>I> 19`jgi"VBr%[QXy C|!޷4Pʺ& 4 qFN`+Q"|^FG331zp S߿)0偲}H1ac=ǡMe[fySCL@IM2FU<&/,Nv~.utEDZgY:W+UŶzr7yxi.lN}6J3^r2Z}_ ]ĠX;FBƈ*3C->[ vDf~mo;M)ZӁh%5tv߀V_3oF.'%[=Æ_҄noa؏LwSILtoYr;`w.Y\IBʟx,]3 bFf݌ 7Y ,8fь `Kl- !3i:Y98*hZ.x]\z^` ]+qׁ_sGiͼ~$)]uBfIwVi{(}?X\G̐TZũgY2i8Am!բ [2l6 –rJʮW4l1@Ne!t5`z&W= ˞c[m莘,ZBfédqTVV=ۧxoPhv^tJ'2G!}ˡ-T",/E Z$D[l 5;rw@uֹ>=xbݶB jI)T9a22d+&aiNv>3DY2~^y_*Hp;c/ռ~7Ͻ̞m,LMMc)gtJvT/|_dR1l2YAI'6RB[F%*OM+u*'yyTx4eM+C$UqC&CGq{DwՀCVWhD8ر6(A^ZMY0ThtJo-ɡ}Ͳ0 f %CyBgxa& Wwya*8|jeӃԮBNSU#[ ~6 H#my4!%  &kfw,ww[ ukGoƯbuCޅOr#}Wx=a3ܲ.F9rP1_E32o pM pNh!\H(R|Rx51FYJ<8?w[nj)-ϙu=u^Ӄ˰rMxY2SEwbP.* a Yבg^X6>9^X&tyvP#}g#ƪ{뵴4/lD$UO|jxUɴ ^@.,q2s2}"OI\47#HZ`A1ūUa*g<0&qacV`hn>s iNu% ]ر~Vf"Dad""SRwBr 'y+)!U _9$#X#2O%Ͽ'Jźِ+@ szy UI<.4 ,$38e\xl´ Ssk9GR}${[xYjGoVtyFEn0ϤJP& QػH!8N-6\Sc-*SK:GV6P2(z[v12G}iif@>?i{V|dsGFS҈2 $ZNbtW2 EUN Mv[뮜`Y2 . tdl-fB\e}([cwY#B *{6!oh}߽‘!6i-\U2ƒ;(C #8ן1N@Tn*n`2+,*DV\k|m}' g/Ytuy*KL\8KliփL" _ǯ%~Kc>۶9fDa#uP4yfdt=5Je>~zuXU<#AY҄$\7civ}/:ݷ_d0qsWD_%wQ{SZKfRsBvJa b*4lh>N` G4vCd SUX=phSGdeɬAU`(u6,ĮV<27_$^I.y<,ʄٶiH+ ^\;Ոmy2FpSdMf-Ԩg<7x>rN;cޒnл4N*;4vdU7^q^b:new^SZzvvu]v=C:owK׮w[^d'ݾ8{YxnQB=ޫzc馎uc׽sִ[{Of=s{6@owԕ}|nq&w׸{jww7>z}N$>yg^ݑ)^ٓxh;޷{k.>bs豽+Ug{}li>t6>LJ(qv*vWV˳B꠺mc{bNOWCJjU P R&ڨU -2֪!P$TJ]BT4hQP$URE(ؔSIXP^ڠ ( 4W(r;@l` mfox(W+lZ7Fu4@@:@;5^* sÔ+0fhSf{+}<(;B(P{=m }w׸+hxq@ϾIh v@ ;,Y@hJP(:70$U@JgJPNRIR(:h J$tg`ԠI6@3MrTYQG%P@hh͋uuꊛ]g({t]րv z!Ыn^֧-mRi@Q"@H6VZ|鞐{ۦ|ۖBn{-LU)RLѳYX|ĜmPv2ާ@F/i&ڭ ^泥QDEI "$(|wmOn羷{-۳}[illzi/ζ;={w]bǽjsq}_6.c!k]7b7X0yoP܎(7asj&e`ˏ)sm%V-{w.ٸ}<}sj*>5PV Զ%P Rͷ%nM*¥P3{UhS;s^G)@^*7{ wl  VN6ﳥtᝦs<ܺn[ίڨھO_{5}=_>غvPqӾ)@>g}N|nX\yk{]M{ͫ`oTU Rk>ϻf}U*_mHMkm=@(ڭ%2J =}c3m_MB 4ѠL&1141M&LL"j6 L@MO) 'ThM40CML1iOM4dPCMLi")GyOS51Bg 0@A1d`!MMILCi@ځjzM3< =M4&"h f"z4jOj) L66Qj`0cS#4jz0# #Ch$ & 2 MM&i#M 6Fi2i1SOTʞ y414SѦzL#L=m)iOU=OzSiPIC@&M dbhhih2z&ЩLTމOjy=?T<&ߩGQdIB=Cm#x4j=M2CFb޳ uI?6P?hqūcR(v(qRhVzџ>o@XXJ9!KȡRE/Av8#'  _YosDɛ֚>n6d61Hx8YN3zrE g0+(4F:,+âؾh8Z,ӯ.B+o|C 0cɼ2Ι'xMV!q((2L)D7L 9d-e6*f[Tud3 I,kh'?^P{.Z mD+ ӿ0]irGDG q0۷R !uUώT8HHE% PӨ^:9xs0t"L3*.߉;pDۃĎptdRc3rkQk321&%Q!/- X]NjXˑ\fPmA,_5U x߹/XH&]wJ5@UĘCgG>n\IT foἛ@]s c"р0ބD? y†#%~S ~rh{ʢ-o##Ǎ5#",X0=I=#jm&"hR6>~&4wﷁYoƶ8G~c]kjg#`fjQ%UWϩ1OxY}i$c~Ñ4 D=DF!|AΧ$o'&3|{vE;y1->rݚDP@#ҳ,GB;,}DAޡ H]H ܈ɫ!PYXD}Z=0Vf0X.ۃ&eWS)UXA@'&"/{d?hZ_1eWݥ7ڲS}0 {ANnv/}D7:PKf}*,9YU૩8 % nvƙM7l79ݎK$ U@8*ڑ<XjgAg=Lvq9AoX¯uPJe-$|H 0r3kMa@yUOnL`,< dY4:nl}WfC]s6*ϣh`DU,%)We/($X~#>aKYd Ϣ/ܝS L8LjCG‘H3V, =Qt"ѵǏnl9Xnbp m-rs9iZыA'aߙj\͖R^*LdIP.}kɑZa{F`4\&1.$sCgKmVCLkեv^_Wf«H(YrF6c9e\E#9ljDKn1eX (Y,7?'dqٰb$ " v# F2[j:؎Jj5”sp)LwRK,[-8xjz==kE\1TQ?]/łպ{~ǻP֝%!Ig]6Ɵ~-E"D6{v.dI@`ync|Ņa]a0(iwn7iQnqugI6v,Jsq(.qSKfV\3 W 5ܫs cFJ"E3=wK('.f*>F/c @雒y8ć?>̨`bhm~8*M6(ƿS_Ylr|>N[q# y@ cl_VO V ($h@>DH!_ ~!x۝UQ#wqqfnrcL0nYa@[Q8l&ؘݸRnHTw7aT,(ew4Ԏ`aD&S : wL9xE&B 2F04 .6ˌR`9eNds1IL"ł% qMLM4MGYc)3jXRLn^AYɷyo t.݆۫1̶"̜ܵ1,g Zd3yZrE۳.Nle6Y3]8[0pk8*ӕ-6&EYYS5IȱIQ85t7sݧ,d7V^rsyv&WqyTAfhwT97N8VST5]Kp*nW3m˔f9ŘNe&Cw2AWP^lEL'8 8W̋.Ҭ[ĜF+ CR*""39E )8i¬)p4nR϶9tUL7*,xDžyk-[Cg"qg&8Uԋ[0n48s)yZW39455lÃM06\+Nmڶs"]1e,]cͷpn\Z01$XpUAue3@h^0S7$p̡ڕÆX榩`9ph&niLlͰl7*nf."L&c8!6Q29mNij 8E2o,L*h3Uᖖ+;iK 4i `É-6p+lf`-ȭݩ2)vM 9w&1RR)ukm+jۙ47L2Tpx qf241lEc*\ en ih9irfn0tG?TXxz;aaEC8K<+t=S rXмњnfs)~LyXE <^ME47SZ)ϕܬ}^S J{vw Qs9i÷2J=b嚙[J$F3<Ӝп|S*5cF6|4/;-p75ez>l8MoH_)ȻG3+$b69bk0X ͺ0#3/%QPF/n_诛&Sq A_w5Ƣ]QVUZj˩̝pbE[vg1f3vA\RB0ADvp>aܤ4y-[я5 5է5-)DŽ5ly8owᩅ$w"*#DϹvskeʻGJe9`dc\% aStv1+0ߩ}oZa6(9ҙPb.7UIb[hƕ>D0ƬoL0rCt"R唀n+J!WӪB:W qt Hc{X `( /33 .z<{E0jq:763n&2'¬}ĊUc^GDJB^ʿ7zķ}b!wEDQig3J*Li5oP]kb,c!r%'e61ӒNtz4 %B%*+'1(ݯ~oV80 L(2dq˺l֜2ud?];.cqR%wFHtqCd].37,.ļp(Rj9sɋᚆ@DlY(ő6aqJlT7ͫ5G|nP‹m&a`Pġ( b,F"=8ȫ$XmAG!¡bKi%xbBpV됧3R^#OyTA*20lo/sQ+<=F[QMŚ"3b˙)TPqEfY25ʦNf̢X[N7*E~S~-_\Qwf"Qm){.!e3-1pLUsɞjw N2]ÐGNzdϡ񇠨 <XD\TOE$:. ]yvx.A+_ާ:OV?]tw.^eOLnT:y>'_)4!c V1,$riT|:JYd[ÛMqA0&zvt莏 zR!paE#f7ޣI%G3Z'zcMp*pcY'~ڵ+%j*QTRV GMаS4VR}Nk2EDUC2+\egUuq';l_7kRlx"] &T'7Uz{3\4Mw,ٜrv@*Is\̠1-6f#Q՘"["P[9ճ+p+ӫ#nxgQ"@hDנ׋h:ͯ|L (e׽pB qfąP8*GE1p2Kա"$$cڽ\ ēk-Ƞg+ӇdWF:BܷF0Szlv.}"হEf{C gKFIRۛ6ؤ43 1 vbcT{k@T~ iM\!@h8a; 6<3)"N+ JROI vkww)$gp|ۊ@0-WB/C 1.gNGR) vca\ OzqSDb_,Цi ,6"OEJ<`хֶ/{HYEs>ܢz (EK:Gv(ꯃ^fcétRtSP˜E$4-ؾm;Y:f(X2{@EKH_CK1rX/v= N"O9Cݙ$?V a=^> JJN$5oBb'%i˒W2ƃ⺴4 VZC#  2CF/rU=K'8"*32ϪTj\x,HsÄh* v|>}ii/^UZW0.K4$0YzSEzB1Pʷkr7Tyz}x T"98P47Slʇwo}m6n\\~X'KY+g_y sxZ)=i> )+U2` Bcc1dFAD3AWt?CKEPW!-SIլO_k% F56eqZ˝Ǜ@Ĕxh=N=[N8={@sȖҵeqAW{诰}P<${&w]% f*K@ QAW#p鵳ԡl:^X.^\(}53F[pJmF!jy{3Irw>F);T!f=u8.Q9׵?Vj$ɽy#F!Fm&%6#3MÎQqo̾9V[Ѡ`]itki NzG8;+EG0R 5:%'-Z~\xUY&},%r`.Z^!VAa$~W#TuDH,b@x;zk j,>1ȗz/eÅJq %F%hIH(E9j lGJQnֵvj7p=`q$q[/3#6mVtlGlfh:%n0= W-s1""08'C3X${]'U?$y[fk?9:n8wv: NyT5]=Kʓqj 0 /H\lZo,j$Jd]&bA( yz ;~] pMXbB$y )8>N|nk Ҥ <}XPJkƜɍlg.0/6rk U31W`I'RiU﹦/tu#1p @(Aa})D6֚YfBPggt1>N6tY~zD!!6BP7LsqIvwN}Xr+Vv7/j)v`C1v@8;Fz6+PeQYHfR-\R,BrQުVO-k4A`VnZN54ƒ 8-6Z4*Pfgɉ b]0a\jinGO0C)+ DO1A,%.n4+4tgO!q8y[g7'(%#ͤ4T*!2jR07vo\ sm YKCax57 QDrnrg4Y#lRR0(h8kZW%?OcZ5j0[A@ E<}-"keD.4ى]zy; E}L9` ۰Ϻ]6s_PsH8Mҙd"7&{83zq:oI=Wg &Y` |4]޻I *{΂Th3e} 29< 1u{fet`$WAdQv2]*B%??,,U֯ޡNry6B!!/hayݞ*T;jڴ+nf8kuR+teaejO>nqje;hyQ[%jl8?o$q{;P0au Ͻ:QaU| ^Fl7pQY ֳ]3:$5BnNWcP}MCbr@Ck)xb=PtX|!B{k?a~*܀I)Wk>Al }nZ[k-UJno:wcm(BQTbѕXROpKgDt@ѾW>$!2ɞ=$}ٓ] ZSIG Y({9qSqw/LC <\u8G_%B0-E'4=Rcv=tuQB=L. A쩓h='l !ʑ&8x9~E3KS՘5M4&$sՈ.4W>~B*JJʄXD}9:}d2 UPX3𲀤*R*ňb訯;/Xt@;F@>]aͱ_=_t$ ٿ+3ᤇH G/w_qO`ѷ%WMƋwtDA(\ԛ`F P~zɟD_kX"UcAXo:`+_KH 5 +wDyK&&o+'ˣԤ|7D/_m ~փ7>dp3Kvn;QNcO>01w53bפb&v8Λ?vj* "Og 9(@3*i:x>V!G0xј,KTiMqk<ks sr.?>{wSU<tK@ `tyi,n姻Jl$W`\Iuoɏՠ^a1 o6ODg;f<ퟅYa~|f*D_ςܟJYޮc]hjh}U< ƥyri8ђs$aj[.RJQ+Z,j?E<o@0RCzKe:gŗIݿI{+1m)1DRHN2?UZ$ g+Kqow'Cb*@[}C=ys ȆIZ:L$|"B .eK+PЃ]#< uVǔz!8=*vUԨol&pvn9Nm=|ٗý0WX@P%,d% mݣQM8rNjiy{c1 Bi`KDp,+{8&mPyE#h8uF635|d!FT޻`9'""|s,zfZfW LNe2Ea{>c)51{80>L>lX<xMA> h1y޲IԶM2{޺';o{yO2ZK\ad߿K'3l[WP0yWoM(MB.ʷanBBHt;v4w-vOBr9c{15krZ-z|)n81 e\r*8sr7 4X33\F;mJ2$mU9g IlaJb`3#=mGŽRxw!z& 4P"‹-pyKl3\x,C$@<#p޽Q(X(@R#EGL7I(jӛiLӉ9y8hl129f^i5]kW4Y\Wi7d-ݕɰڎ#e 5IB!7tA˻ί|Nc_9z.rо4w#Ge]MN dcLl۬]^s[qoDeoIHzWQ( {{U<5LG|X ;b/_sHN-:–!T +%BkҒl^Df-Ȳ&Lj2랞0B3,wu =ChNWCozMʍk 癎@yfއ%vBEYNഀ:>^q$u2)y[c^QX[%p$#bɟ^SHS 25`<V68Y~3Brd|ZmG9 uFn`tDhiKyض道5"G@9~gOx>n,ϔdQ=fE02htO_>:yƁn944ïۿ<׀H}inf e T 7 ' iAmhkAp@!?StsS'-At f՛,Pxlܠg-'᜝ InSY~"z}Rh>==v0zg`+pRF'vՕ!}l0۳W4/Q#6Ϙ.U3-ƌЇj40Bp^þx7 墲 ˖"UR{y23†:v(IXpezkQQRByuG 0`C8`'kV U\"&+둤ŐV3ԁ?_(~ޟf޸˰C`@MWQVXAOv{AWd|cޛu:ŽY5j~ C 7!(ߞ,ʂoKJ{.z`?LlMLL,3f8&,TN ʶ8N9ݘKmKMsCmLM+0P\+j E%7j( cSA2\n[9X.LMv% \R˚"w v])hŪכjUsᕴ0R +"e\\-s.\""&aEQs&neܫfd\2`T"(fŌdAb2䕜8si-Vgx>=]A{.TLTw+IB%d!CzWXpy!8U!J'A-! a+>z0PY[~0% ز=)"B!,ۍw!}۹o6Ӟlm P%-4T9F5,hEIPPX"U+.Z(Z"-*D~G2f\RFmjȐBۋ5ل=]ws|@@^A#Ei`{ZhX/:񐺦ԗt]^si4v݁roo/8 kWQ+²07OK4tV`1P }8m=3qr13yux`!3cɪ?:=ϰ=Nyk۪7T2{׹\Q={ O_7A$6fT-3aZ2lCzw_Xaz+ف )PI\ I?kR)s2 @LvX=fYbAv4>n`5ص F`^OjMvXTI~o 0 uu.(w> B"ʏqruWwy=5 '_; w(&IإQIQT`/}٪w2 X,^WGm\S*Ub YEpTЙ9jpr'Jc2Grn>(Uoa\$B!P\"Z+|]\{B@PH$THDl!쀌rQ2DbH}CD &ySzc5T6ĝKj4j"S$Ydigx}$dR8HH+&D=Q|T\ȪW-aek@9FvF&ּ*I(-Ir;Pp<_zwdyvw|w\;}ͭf*#P ?5W)AhtNBE+(w7Bu@VRAn2*tDjsֻS(Ld[jEqRhZ5GN@mm{ OPr•Ѵ9DVIÑ){0g+qp7%*ieq[OS͚k49y~^ޏyTQ)( ~2zj84 ƣkm%3aJ]H+όag;wA LiX$dΒujr\DKzC^+l w8k޹sAUU9CJ -zLs5Y~[1;vAM wO-h 2uKo&Uhb=!8b8Z/gPudqU@u! FTc1SL',g>@PQDb雬'|`I>ZK(g+IH͉s:"& JJfoQ72^l~cdl 9| T7b}C0[@a ldaZFǬ64 +GTqhҰ EEIDր-ULEh~2AeQ !%,2ŠYpъ\U]3S=ӘxvDzRZ0S=9wGQE "'oOH4T5 {6e Q  dQł%eƭli*fa,Q2]`Y ghr8EGn& Hٟ%.Ss:sf$m;AUB\f4UОkl BS቟=y|50E(}N6QO^._ēXc3ayaOev|=>Atfg4؎\~퇯ӂ;X1BE2,< \8W |JXOAì0#z}? O8 V".XDE(To32uNǦCs8n~|zmGT8YtXiZ..@㫦R1R@j>  }V7Wֿ ^/ 0cjSjgW]:l0BC,$U믻wfMppz |]VkÆ۳ ,AȰX,^V VڿW[Qv±EUTG(gNdCB"$8xh?>|a*$cy"FsQՠh6a#~ӈdz[f aK!D Bz'(4Yj T6-R{S5_a$[O}Vi4~̔_'ml@N+&⒠=`e8E6a:xȿ ]4%wϳs7(iXAr;xݹen \+Z^h✉ƌOs7l{hDUn/- RRI NRGT9Zzզosφ!ԀrngZC{dsuz A;aXj)}YV b˜ɼCgoR#l"Psh_8ri2,e'd/ZNt*< @s,F +C(+">̨-U ʩQFsmViG'dqP"wp#J V9K8hw_fM~Lh`D)DW7w j6BZq&ȨmR)RC2{yN׸V"IlI?-u+9/ƯܬC*Æ$*B)KPPQbT[`9qLhAQ]=3zDeaQSYQcm.Z(TcoL1&>DRsAR^ަ9xܭqmm-ZlyAcD9J ۗ<6"<+Db5 Q1xqJu! g߀; ^&<©p 0P A׏:N׸cܟ;݄`S713*Ip>ozi+v{6tHWugƓbZrqJEv3yyЃZbү"/hRGSK`BsiM$u$l IJso8(3B\U%ŠR@?BTI*^u|~P ȗu|{zt?wYb 8<ׁk!:n!vFvu^, v8.0dž=ݜ^Nedf 9- bx o1 % $%"PXP.8})3rYC} ZerXFFm PN5dY}ń\)p*[q_ :Q8&/%~;Lo>c=y v]y``Eo -Xsy(C|IB?s7ۗ<>a+Q9/IRR`AH8Azb el.|-És YiRAn3 8֖\lɍ 1 d`~_ŢEU]*KIc;'ӳuC2.%}LQdxVpeUj]l0Vh2 S3Vuwtzam0DZigSوQ.\V7sԬJ iJKL4#njq4$~=@\'heGcZPxvC\s4a y"yrаZMk֚\_<|3 E*B.g2`~tD)r__!cR0bӻ[.b OF2YÜCNSnQ<.i2ߤ6R>g #7ʆL0PP TA5IP- 4.EDDL[;_%cԌT?\'dHI$< DUQQ@H \s\8;?!xهbl;FD%QWp?Rv˙=S*$9 1WCq0pv\1D)"LV2XOa#5>v$@0Ri %H+b;7b>e J8vYڡ}Eܸ :{ 27~(f^Dbg0Z᧥%6!86u n)Ƞpp%`:HeQ(7T kt2i`X1W\*(Ҿ]̀"_́2(+\CKR^j8 bz`힤@J3QfLz .0^ϲ5؇c3$q7 _B"~1fFpѽ|uK13ko,2'n"4<^"dpӬ4؂I2gG"rYP2I4Ib -G1ůgku>ƀ } Fd ery/+ɚփ[ӝ:P Ep 8 n>|LUJzB%8ރdZ}í׫5S⦍}oɴe͞dZa2zZBb|_S#&\hJ*G^cW.{~fe=Ư5sW-! ~½+S2 k`Y=;ܗjT:6.X'ZTbUmiJ)kmaQDQ?f<!Ϳs'zf0 E70S8&g9LayT1ɹlEfs*m *yNr6lQEdTRӛw8nd)4ob1VEYpbfAÆg%9ŋnr51+Ój 9ˌ҇3kRKlԣZ[yv<1i%.%5TxƂcS6] `%Ѝb 40d,Vחfu'DiN<)SlZA%(`o{TC #P!{$1 AL7+o>N<H+Sa&!FVVF'!Pd 7S=!$GǏ7ㆎ3%"QքJvT ED_ }ËphǷH 2;wŇ q:o@ ev}$lS>ڇ =|:d;;"9y|}n4c(`Zh{|^7bO (9]34Fr2WwlG(Fl' )~&. zN(o`!!6ݛ͛#HI$ u2ʨL͘ɉ< F: EŝLq,s A18eЪA$y:P6ƿ O~JwLΤ-&|t~hH"T*}O4I B@Ds䋾8b9| D{M%X&{B+ȖF#YdD6cG\9f+xE\&Cx*һovHb]mL Q=ZmJj>7Fޮ3-]m6Tw,T1c*k[^̌[nly4r>kQ-jZnVr?rB}o,"HNk+*<蚒 m:8uX~뛟?x*hlQJ8Zg2⊔ܳ "R.NNA*+>Ӓ8x'/$@FE/i&O7bu!6Iuk6oNn^=q]ֵXۻjlN ^5!)acT(mA OZZײJ #80"atl$o)G]]&Wf!{Vk{]A.Jsqu4s]ߩhطk\Ogyh辞X< =7T* #:S\Vj/cUnc\ ӵCJ)q3BKfh_p"ۣ^X.UTdj±p$Fȡϓ^;mCbq* Ȁro(hD"kITj QMݮR}.&0E `#̕*q8>z7{3]0`pctc6qoXL,%@;N,'V-MAb_@9 o 9L/W>sm"yeoS<< &IVaeO^ 1Q4?:c "K|d`)?^ Ӎ?q s: e[S@G3O|~`\hY8W'802h,c׷=絰P=ð<H ^ȫ#vuUUUpom 8\<'ǭH=86p!Zaˏ8BP(_k'lҰY.PBEFe/8,_CRR^L;|f3%p홆ӯ4^xcQRD6g[#S *3\BᏀv"AĊDfHaN&>re HD>L>(/^T%* QxwǨS<\#t*?'>)_iʆm%"T%"(DuOk4V6<'^-g,uMg<9A!Y_ض>NV3aei(4 FqLüKQ 0ӽ/vނ^V( S~E?Xc| rѷ~BTPRsħґWݫڷ{!N KK*<#_9tQj(* ;6qst`O]gE#`Ē QA"xUwkVsV!jAִ9LaB{FCfq&;6°0oO}BwXpO+`@~?d}(s{ɾʺb?-zL?VS1u|ych*8r +渖"dl7Uz\$Ӈo ]t}V!XFv37xܼzn۩&/ʈ+/70ĨU]ؔWLa"G}0½.a"h[Zs˷@鋱F3'4Z9q  ,RJ,B΁9z~tU1 P٥õ{BIRa/nA{=;̡8dTm>Gǿ6OBg*yͬD|&ebmTM0LC!^yc,$j"JB"H" VJs]-;+M"sJ~r_';vS;.)չ;i.W_=/X>Qo {+*@/c5wmRKcv :X0a/.G:``JBo`i|/^Bn 'D" +q9^<(ɫD;f ev&fp;Y'T zHf_GN(RH @_;鷛 0][ 3ev1:#N͛3 mE`75;E/0 ̬JQ.s84ہ E#)PK&5}.\7dm95Y@5"V:\ c>Vgq+$@"HcͬCﳪVR]O=$&z[N='h\hr{QwẤx|9{]~S|WzFweMs OOqY49ҎLî\Hޗp 2@kI+uEPGzYEuG@;vm`{5*}<?v"*@/ pD ʷI @*k,:CJbv=`e~2VY /渝HOb9y4d961!SFϜ2vLy|?tLRC"{#\y@- (1#9qpwGrݺAU<|])ȊګRE`Pz"YQ P(" @Ië_?#c"8$I\W7oi %cge⠸c6N.E0֠x+ Y",j"DǶUx7iF7^ Q+8s4\(QLJ,y;x^R^ ƹ+y^sCM Z*3k$(V 0Ty(V!l񣖢Ae7GÁ@ FdG,1>.Me05X~ݫM+y/V Ȓ%K8z(5wW:3ցzϑ|Qb,IOk+;}`Aٿ'(l;uZWIjev~+ur}AhZ:t- 령LjiɁVD t21lQXh$nܗ5( J% 1 o`pMmZhqwKwB{ eKѠlA #@VxmnLwu[IF&}G5 }7ʱej=@ѐ=; [srƅX\ U0٦R#/}цoDߍ΂ːq w%F[ خ]`FK yo,,Y n5o l6grmp~{A\-3 wW͆sXLJZQTCMsM4,V(Gzh -~>7X0.{}Uo/yxSu])E(QmO6Ҧf|}jOncHmMS%dU HUٌy3 SRb Ajm(ebrYp:-^%?&#geW[)e*OEx^GR0f'ee+bLLuj3;ᎆ,X.0e0J2`4ƾ+iMWmZT1"fZU-Fƥɬ$D¼.GyQr\(0gRJԿtxGOMHMiB<ʍ"hxqε^ 1ۆp)Qf)箩/G+|Eۘus]@{';|r(.Ezot}@\,GFTMƗ- %ty,bd9tt-MDte`4CV؉- 49==&9:k UN.*ˮ^Bƾ&;eIX.$P #L;76!2,^M`Nm"E|\[_9:9tH QWWבie3<1O:5D.MyXXn/}ˍnOA% Ԝ8۲l~Ɩm"mԂg4` @SvH#i:s\a]ZkC BYr3!rrC͓W>nopkq?l݃ڱ|!<듬8`-%Af;3q=x5%͞,';)aWokk|31@ok@,;lQECYIOtNOUTP+ՇPkMPl?{?"|?w>Vǧ}J1 hL G+ D/L͐`_|u,t6*r g}PZZֈ_Ăq]DtQR&D5=r #E MV{x45r\I#fgJ(J);H*N6#G\|yf u ka(`^L0Z@:wh!SՈSD 0@tIBѭ6MKz>+hkEP $ )aP&OzJG\:ӵqoqup uW-~ EJ@Hng!J9]mP`` '&ͯoǞ7Bu\MN!$((H$HDwfaUW~閱VtTe UKҒRc1֫M~5ʖ)}䒋0R{,B%f0(]{uAjtj|OA.Θ!n楦[=Sh+<<5E*I e<]rp cщ/wХJ΄oXՅr1"ƻV貥 'H.{-aŷ#p@"4 &)3@zH'6!$!Hu Aql5Ma zn7˰[ ?SA5\ݯ*=v] ~?Iwn\PjCڮϾ*L`|ź࿭f^ޓTDbV''|trg6A6(c 2W +p3Ml5 [OB+ Չ Fp*}͎Ķm: \4Bΐ!ItsoUw7F\%*dr9U @Icelu=2D3LǢrG!+]ǃzRfpvהpHz;Z3o{pvv{j;ncn( `qW Ldo9M,¨--!:vENq at RQ~S+ %d!a pg.0*),1}qdSzH$`m]{"qh'"`G*@2*ne2+- 19O̰GQzQtt BrIۼIH|IYg련 0 mV*g;(zұUwO;0NS;r*78SZ8kYsx^󺴁b-oW9Hcְź\.^ ZņP ]nt1QmvB6P;s*@v+*](w;[C`lBZU+1%T+.,k0A|s?+v\A%)h_&U:]A!G. !- 1|ɎIEAշݤ*.8 W5Ps޿t,iPo@#50C@x\=I$3CU7E WEؠ- E$6fff !" #zV&L]EN_Nㆬ4d@O dfzKYVP{/htyXhS")3\S]CgЛSynk$=bFk"c&B:0  C?Vs]ӫ%#x:52 dZH0VNsvٮwF]7|1uM.e`!ޚ13PsASC%DLPTJN^Cj LJ}~O)*srhx%t;ꪋ U<|Ze_)7MC5w-T5w[) qlk5zX'b>d|Fsoˏm>BS1;JJ+oƸh$ )}?8d[P <^,~oʒ *dWT6t#OؔR7)(J/^dbS.e݈ʳ,>G/\^*i0epQ>jR'nuyQQp|p?Nq^yZDDQm*Fag$`@hGmKx>hڗf>!rB@vL0J-¸Bv;8T!!Lt6:޶Զ#"H zi*@y2xj؋ɱC¥J_z}Qzg:]* ބH'lmz=Q7s'(I|.~_4?zfS- 33gs(`1JICz ,V|Ml$|EMР/!}O%έpj: _VzB_TIA.6:]T JU6haÜ?*T`Rs$qGmU5-j 'xa;nMCLf4(Bw(| bC4zsbEӇ1&t58\YHdN)<'8hߤhoĺ& ڟ "@I$fm 2"GnV%o*=٩={NfwyӥryW|J65sn,I*HodžtqCc^Jŭh1UIb0;9237^au)%iva1*%&¼]Ő}EtY96a¼~ q/t ;5'0 Ej q3S$ڞѫZ*a|NK ci5 WlH6M ]tQjŽfŽ;(@T @3D¸_#Ś`8SF֎1XQ9#֐oeDrB)XQ*@6oR50xkPaJ 뮑Hƥ %SYUTv%, © `aB-zmhkj1s9+8jȫ - :;ZƬx`YF'/(Y%z'lHF6˄^SWtpeW=}>c}j{&Mא,X&cHujqlf pBh_I*r!{=uetpVnC wky|<2e_2.x \=n&mpGGp#4V)TquWE] Tn7~xZrpLf)k&&Aqcա;jp+V a7ވxOl߽8uFQ֒sǺ9#ˊ ҇߈la{yuceD^ݨompu>bp@SNlW1!F:GuI^\D `Hj4 |τlR? :lR6)bhY:;= OK 6v~1Qqd"2}MPbTnl י d!NT R<GD^tATv蜺3<ԉHl:đ7p O^B!A@{ы0,'8\w r2 opDwX&CT6{U1@ *λ km7?merαٶ}zg[R+Ko,3W[FLs׶pcW/Ȼw6tIo2d& D1ŝ6TyRB6r?o\qx]:uG/ Ռ-<1V؛|*x.;[iPIA$3*rR*-nj&߷wN#,(X&t!u:1PK p4:~cH/9v[ERl=ĕQo\+K&υf`y" SH5 fςy^ȼb`œ :x]p3$ )6*.s@ h&5g[AGoN+M'h%T.kg6LpT4&gD ǃ_oC6`% A+ x3 \SQnu?57h4ֿUzty]:2'ӻd4x3vH]`2?%Ee$V.>.}c$7YYEdÁp'4Ku[ڔwTkw,;s4 C\X1R B Z>21U﵂=+Q37)Yۙs3]Ӎ"&⪈/Pb ^(| yg=kLq^#5l4 ykf<9Լ++d8B  QY 43ц}N cjNm񃫉AE!$˦MNٮf VVxť +F.kr>zPYQ4 f֪;3x2k䛣3`9"CŷQ!@"snk@K"tQ%V+* /13NtWYn= hJ.1Ϩ('7=n8U ,pn03:RWDZ$ы@hӽ&;9(\F2CMdQOp@.P9Ty[(ۮfϮYDe6.rȑu _&۷Ï/kw~N$FMq0I\͌S pρyj|( G{VYwCUzdJtfͲjR@[w2QA )j}oZY@ ZʮކsHڻ |~!U薌칳(F "0dh<%DW.:rqK(ku|k`aCqG;jߩ~vkuKbP@y BrOD$*O+oD)-&xH8{Z5VfL=X^TAWB׎t~d(eP1Ұ%ҚO iv2a-TZtĸFfT>NvM Ʌ\#.sĩ/h7 A#Y!ocfԮ~fʤcyh.ZHxaJ\nxv E78 >S0 @biGV0<@wD;v2+aws{7fD^CC}r"rf"Q,x󷡟rPܛNB\  t6t#먯7ë=jlBmXJzv%MRO26EP\_%@k3b if5X$&6sir,6嵋qmQt'bZ.6yNJ1mr»ڠ*kyת=}^dP[E]]MtI~J쏫wɔO3) ˌ #۲l{w(k$=u׫-=o'^UIߪ*H%t2Jmh oiW!\X_dd$5*zlv9ëMtoLoޡǓj Wfڻ1Eu:u*Mw동β2$Fz.S{LTa>|}FW f!WG=s/4[Cpk]2xro91h(g6hrkak1xŏlZM:X3vҭvtg3gaW88RRE C5mh񦇂4w)YiɭPǬ%zGķYg˾c_|bGy*8%~ jӚ~0ĂBڕlL&f\ [ ֞Œ [,@ 73f >]8(+\`|` #e #N9紐V,FȌ./{w~FCxʪ1js̭w[&x-?n^'bTZu;1Ttk $rQhS+ ^9틯]1/ʓqkSO72 C qyr?POz uZQ4q1ƚ`mNXPײ*y1 D!OCgwש8Ml֯O>\=%Q+ ! (/;@EmglȂ}^ Yeu)*tvm FH =,t5|cX ۴&0!xdـd^S^R߻%/)$x rP2"JRIю e׵luVR7l z`nY\B/*Vy0ƣ mY`IcށbThmyaj4xKEOGg'>3I \Մv^r;WfcE3ދEb!VI=e$&2Ơ΀"Z1 ^}n/}v_[^˛ȣŧ^޷v6>JE;W$+Jj(^^+"-TeXg s5<՘f-T2R "nݍ1_ q?Fz^ƈ 4{(TRfV=g u1 vKZI*"2Td/.Í,JT!ie';WCnbQGA(86/ЖMHgnV5>=3uU۱ ޴!{Ř)Wqԏ{FUșoj- q<)lA ߎfLo VNb c|V$_z{GWxI rJs2K!c_3\Iwz̄;LيӷLz|IڙQpgCзJg*cf"[Zs8QaыH$]h EdotZZj WMafb2JzT%ZVwnVO MEO ˢENi[m);ح e1 K)3Z32VfvqEon"D}%<҈7- LGAp;dvjT3hRNrzU=IEvy.F׵*CLH%#]ዦk'}9fv Srr] B}G[%=L `6Ь~;iVQJDDG';u { xvdc"\c|rmGXL` 21VU%R`$&Y^FE ϱEX:02♎).@O*,'.ӕ3,"߻UB mCzu܃c& !`Lǿ?oR̆·^ƽWc4L3CE1Y̗*i3dVX)̫+"J\it~Bk~.-W7܎ و9A/q.eQ8ӃL&v鵭N-.ᷨF;]zWnGA<7Yh~G)VU" ˓Aʓ[<>`=8DWa{woC(즦ֹm˹D۰Һt(Lk\MY*\.f K0VN˵^v; D? p]5>7CۼѐtU G +vBu;Wdž'k׫qw7<s5~R1]waףp&[mLZ/l/=Y_qgßōAф%ɍ^/ #rf Aƒ<-c4YDXB]i1 <1&|Z&G3l֎ngZ Jaը ]'y5 16sk25gS&nmyz"Z53w}eGHCmِؕ2',H&+`DtyΝأR},n<(rH}aJ+^RN|/! `޹sWw ][*2`;Ay2ɒʥ*3e\o )"gb>yT|W*jt%vN "`3B2\A V< "vs0] QMt01=~kc;bT1TqSAK;[ 0ܣb՘568aϢqõɩb-vAauGɠUۡcskp,;]'jOl\%=xL tg]Kgt.cCӈ <8"gDI(=h4^]d:x)t,xAP#{Z˕sB={O,QkIiC/wbHP. K*[z_kps6c_aJuڇ+' ׶ nn3c#yF}O0 8J=J\j1'|t-qkXl6ӓV }C^yAP3ޤM<FgS^YW0Oznlacŧwqݾ. C&Pۺ8 X[E7bXƪ/s[:DZf.Z￝X}'6^]/ ǂoKiw[>77iݗ(FDJ{0HIyf#Qc:, \e15uxނ@ `5 y}iǐpCDyZ!;3f-'n8,Op\SF  v%ڻ_Jr;WTf=/EFJ4۟^A[ht;C:D#GoA~ ?RG Xh{My6nՐ*J{xp.l`8q0x3˪q8Zm;z9$S_boc1!7BKa6g Y>r;_;g֗ÃΪ,}W.D堜H/IPn:*Gjxo'|t寸hZ)*]ELB\%Hjڿ?s~"]o>&sszz~\re"1YU5A9"(J人wz` v6ڻP]ݩDQޓ1E-dsk3j~{2jߺ>NN!j\u3r>Wi+ZlRm]Et> 9p`cF YgZz.N1w'x[nZ 7LJ!M#2]CۘI"H|P ԅnеHKkE=Zv6LNc,427To_~=bæsch 9m˗/#9 '52Fƹ{gAXM1ees <9um#Pȍ7'A1V{xF6qmf]xF1LߗN$M˧nt%͵PPJcNąFRzDpprLM "&Lhkw \J_9l_ѭgOU b~fݞ: w!a4Ku[P؀>) ꒞gz]]ȷ1O'4+3NS9oO dB(`*?ZnpJ! .<*h[7v(֫,VsgCr6hxn;.Exi,Mvem5;L \}/_ >bdnAn.]ǍK~}Te뾮^^{cqjkU)--{k%ԹSKb̼Q cdћyHߓ@r̆$Mт!4w$zs޽=C_jpM7T:#n `݇nKmReP]KvKpPi{v)h J 9$ @ yKٗç[M]l!3E Գ iS2rmJCU _! [v,r9XrZr 9ԳCGVfuOaɚMбRmy {ZCyNK}禈6l#P ˶fϑ.mٮKG RL; vNJ혉>ڏ>{^\pWkVbMfI5Oyl^܎|˃pH[NMAFQME+l?z%ٓ#,1X8&7vpbz1Ez !!<6sBִQֲ/=EFaR'L%Rdo2߾ٙ~84,}evFf{3rWzRլ;X.S-$ŠoV۳[Z y ^vnlf-gYJcǒ ÞRjh7.KF{%m*lADGnvSVd2iT*QYo+l# or:9`tiSarPk#`f{ǣ1D>!֌5 ,ZKFaPJ2k.1ABz KxjA4< 0>w-aZEٺ|j䚉cՃi47M:Z=v5`&/[ĢGwne[O>{Sq37 ZtM(s6DbÎ{/K16 gkvaͤH jmrbSIXBFyZMzu ,UW~ *D=XLv Yβ;9xWF*b{sAܚ nsٵ`(2yo^wxߎ{8Gm*MKo.yL2B`+05QYTI=-6&Hk臱ǴK[IT9Αuw k^={GEJ9] ld r?śH&jW扛"i@XͤouyΑ^r/ %E'a'av^F Lb<0_SXUbۡ9Ч tg%t 7ūC'\ЉS.9`C[K6`Z]/F\9vHÑ:yM1G3ףFc#r֊ CMm 7GӛiԽCߓQq e7&7SA()9w\]GiǦ֎;,>{:pa (7:dslN(z5> ̡z)VT#FPPS ᾩҬ#em+)UCj{$$_-md'rEq;]oHߗ~+80}TmX>oo7u5_ξy9vyp.E7EA-,V **BZ0*AjTESllޚ ZX"g8C8\ "u:fv{Ln!o(DI R(_xNoV(&A U%D =7ք4ŎˎcIΎEze,F;AA@MȂ&X*(=rVKB{cQ:p2&:}t]unֵ@ʡN;HAX{iHxm]M2 ľ Ugg+uE}`RsUZf^) ZdB%y: (3c5" 'p -@1]箱)uHu>+1y :7҂`<7r5e}5i&vtV3h@"T젠(Ұݵ9Fܿ5ޤz9zDWz _Obb"Z 1ɱy׷3kuaH}ϾJSX+ #G dhƈ4ed6, ̲3[%JE7*"]kZEc YHF!JlF&)K e ##abRԋDBDTT#ADB E (J Q2P4Fc$ٶ@ԩ. 0]BGV3 && Xm$٘9 DP*()j1$EH,c32 HA$aDr2`QnTawaxd-+2dtܕB4\c -!2"KA0%7KZZUs8]4bCR"(`4ʓ$}ڐIHI7N8Y@$**@FT@AɭܾU.(e@TJ+6vK]tAW Lesf鲣 3j5@6Mtoh}S)RitŠDLDAA3uL\-ބȚ=0ܯo"9@{Jp9=癡d,<̘[6P"o2kF#CZt^;2XCIu!+$n@7 b57?C$'>]gĪ>A |},T D_= (M"Ȁ;T@z mN8u c:jQ>6_ƫjc}U/(>Q2˄ӂdchh4K0 rӹ_~ܻIInPj]+:|]7Op+8\/G@Pq]JޡN$ Y@lKr."sf<(:Et&2 Hl\P\roP cԩE+@i܇,"dL.T*J +bKٔu`UZe#X@cRI! Td~cWSC =_!Leûu9 Cg& &H2C ! HRMF01 !3WxHetbv~[ ·@̏!Bae X\D7 4W/.G諯(K%q~WB%/z韹jghyRH33TXnBWK M`ےKjHbXJ.*c m a0 eHj7?d'kdL?tlgayQ9"sC)`V 2[1T&ZX**F(,UTQ}`(,db˝2D*5yѮ\@:]d@3E x.Hm9l8*y3ޥ$@P%#0zJJ)W9۴Q{eGfǃz,姖iklXǎ' AQp'F;i;>^M>aiR $ATP<m" `$r$?D~*)o2/9q,Mw1:XMfÚn^;x; N57(xeΊmEyNiNwN'y\wctuËjc5̽7L蚘T!Hb#ݘP6Aɍ#lwI&Qݻ" 6id(HnH)ݴ6C dₛ* גv P;c`y`ގ-)#CoUm ɄJycͣtEd@N!nkyyvDD$E! G +;"fʲD7-cl 80_L ."W@EQW@HN0.רpG=S^ ꀰ g!7,F}Zves9K͝ l*j~+ݫѝsŋg;;lnJ`ҥҎsi r&:mY\q<@$ Aє #$ 1"IdXTVDX,Y`AdAE, 4Ac )F #JQ D(D$) YET(( HADcH*X(+2*ȋ@Aej,B,b(- *$b¢j7FE%DF"#{8:\@.v$ٴ) (u@tcܽ=vhBi㈠}!c~?%}K.Y<>I@F2 *VIQd+>XH8"j3nVqL۳dA`"1X0TH@Oz(QG?=UEN|Q(N3p/Uu$$Ze+" P$@B xADA!q\rDuDPMtkVSS)a'A J((B(He gXF+c"X22+$ Q DEY# ,AdXȕ,E@cAb)  -,!dYa"R" , T"DAXQ,*FD-Pd@ " H""A!%+%$! VRc$QR4a(RA #$a2[c@H"E@EE-R1d@B"ȈHX$X@P, d PPHAI )$Bc I # a )X~!f@Hb  `"QEX1Œ" "b*@P H)P B*,bȡ" ȨHI ,(TX !dDB FAE-IdD`Pc0QB0$(ȉ%R1$Q*@!!۵[м|3@r­F_ R) \e^!ح!YcD~aU!i 7S[7{7lH( 䓌TTƫ,$i02X"_t$ Ua".Rd7ނH+"Ȁ*j<輸Ä᭻VMgDf80A ( ܚ}}y6jHhֲvBsMG)DtzD7EDyETaCT.u0R}jDV#Z VYB$$*( DJ@V@dNS+gm=]Aŵw{wrN\+L:ZFڛHɫ'(AV$",$$*#)Wi9w4ʀH ^`BBAU$j{t*&"MŇ&vIBᦖ",NW?"WƗtt2%D|"BGXlJ'4^@X=AD K؏}EU^ ׂ1ʵ\MNxpB̹(tɓ̝[>x֓)iLd N͆=7Bl%"0H)BEO}[W qmQZ{-^"kDGFT${RaB)!1$1(F@(c¤Yt&*ICDY 5TBV $HV*($m@P(+@-hjRF)!!QE)!IXBJ`1@E E$R! C>?qcc 5eMNUCTm=g9(k0E'@æf2nL'SjJ[%]מpjOeR J%y="W-ޢ={ǔDb¸EB q&B4]@4"$ D @N bQj!{cwi(v5:\ tPo)CdxuRfh2j<]Y0]M cE: ڤh-NuUlLu%sAF:XA l,}2p=_5BeXƑDضHϵ0U ۘaxR)阘Fja-XaFw^ nCiipƈuĬ yPǁѻ"DFV\QۜGs QEٞh" 0(le.%¶Ue)֎)Y+*bTF91KYTԪp!6Q†hzNr!wt3@f4ߝƸZxɩ5WHBv |묜}{ƓZuRmŐǂU5%AF[X<3O>]@Y>hR)JU<ֻ:Tmf:%y 5T.JNB$XPK\d̓#6؇!\jR( TZJVJ*B-` dU-U3`;m2(&V =_hxqB~/@FqUF`op4<F^pwmP|Uc1h:{b}(ޱg-zjCD9SO`)SœTpҭV 4!q77lգ6k[eaeB",ӂ|~|t#*]mWs^foƈu鱚LhGP.|,-Kd+'KjF*@ElԢ-( 9~&~E@x"xFnod1ц$:Q}$߂fy3W6 <`HxПJ EA`xo(6v:5fϞpd4ߕa~ \5Éw>aOΊ leȗ) &*y9xGuF9d/Ȟ@e d4 `bY$U  Q*DD1EAD* *$ R1% !rC"*0x TqdāY $aX!X ,* $A 0mF-,*HA@"Jj@@PDQ*h $IF!RHJ2ACh*U @@HBDa 6TwaG*ꇵ[WYἳn c 9-afc aK=2*5p;,0QHymS [J%Z(\FkA \t+HL\(&K NP@"BaFYb1FB, ` R@ * #E H!$bD bD+! D@D"YT2EF,d"0@a#"H(Q0 YDDc"E0>*:] >m'^ϩ/'sW(1eRhd,6ua "[N-؆,x&BnZ+Z7#G+>ݎ\&{ {PhKHѩy5@Mj`Ϟ|ɻeUMc)n'cxࢦ,fm)h ,4탰 c 6!N NaO-K)'!_TFd_.9;ʩ!!XaEdj]@rTPpa:ŵq&f4:ta~_i|hDH e h29a̘Pw2xͣhJUUhĨSk;2{o#,}Yj(-p6* 㧾ۃz_L4Y 'v? :c{/ҏe6uP\1B*y--rsvkq$ ꡡ,dT$I- ő`"(P++Z,A$x&H1PJ1옑\F ]ә/0m'6K+A$܀S"0! d,1D H2EDVHRI,(~ɞ^E:@ZZ*$c,"Ȓ$ A@"B,'nu$ F >uy  4YI(QRKX H!UCv VE xbb&(f%0G1 1MhPFDARE@^{9IU7~ѯg^Z)DA b[[xUUpÌ Wnvu . 5ow}ܹތM؇Ny,mz,.(3MIk1lwN;0 !vl$|R`X X1DoȈu!YS 5'KolxLl )B0:˻W=; QȌe$@_8gB:,$ CFɝ)90#h).fPGbޫw/7 |;(#lPH~*kƶrXJUgzZI8QUq-GVR9 `#6 0^S_޴j9l6=]M@()B;ABP }I"*KXȌ"(0P@AI I"%@ D`k$V(%QHb "DIZIRڱd-R E  !ρ~g> x: &rkeUr}>DvX~cL飋 }db +bʖ-*~6u&] 2ƤAr![6GZv>TV715TZoNkMz3Я+#HmP!}oo7PAy= J"ZcehFF1hmY$0FZA%V[IV[QHFƤBv'ŨhsN8΍֙dWb$Ge>Tr;RU~̥8|EH2MvR4 dF**{z_*$Y7ʱc5@ӈ3 @A9!"2""V2Y%DP@V % VLDN)*e<'PV%Qe (<>yzpovZg0>1HE:;BtTNjQG۶99!EYVLr2gΚbA搼k'>NmR,T+j]׀Ɍ;y8͖!/H}u#0-kxu>+$}<7\J*#@}?VOMբj>jB3{vrbTyD/t58"(,JMne:. oQqP^^g` !ф,5?l+7$_tR 9)J̀k@]P݁(tbtVyְ_J8,_M>aGޜeְkN>׿ҝbQϨ' ںB$<3M B9tM 2~ûX@!jDAasrHrYI|W$ xl ֏sCwLR+x0:0jč&!Vxa0I3:S- 5yuͿL8cVHcZ!C}7;oM!6o6vA-z(|#RcXF#m[JuPN d:&ιې"ytϒBuh Ȋ' U9x|}ŇR,)$9R)T"QaIXUkQQ *UUBfEr@e UPPG p;-0`dhY*54Ơkp"Ģ*c"1B U+EaB!bzTF,Ft ; u΀$QUF)U A`DTTbXFX,X I$F[@8v1!!)uHA"1Q2*$ EUȌŊ*$H,*: D 0^yvDX bàu x!!)<+^ DUQPbQQE"*ň("$K,Ԇ0Q\Cisxk\Ad)LI;Y5LHV)!WIu).RHӖno3pk$!1 1ć'8!M嚆&Fk;5`,74gLu M&RE cd*kQQ*`a8Q]o%Ǚ]07Uľ2bR08;s@7eh[{ uHHPG4j AEQ\GDܭ((LT @$}O}0ft,f N=+!QY@$uG]]d^MFh#ѢCG{NcT%6)#/Cщc0j+&G!#Rp֬X8՜s%a( 0w}{yKH򜀉EC.+ V鲊mml5Fdɋ\b" pD`oE5;@AbD\ߊ((`d #"2`( $$P绑XH),-YEU#ȃ( CbMDMS-EdFEUIF@E1T 1"0 d2(@FF6 V !bAUXb*X#"*E  *H)$QP0!QAR `+,F1PTDb vPDP" REDUIPQ$b!FDQbFAd(Ȳ*EX,QH00bȱb,YX(*" (`V)"1dADdEA$X,"H) $w0Dd"HO46c[IŌ YVHXEpg0ԅOx7VvR}'FnJt t,Y-B˲z6iXԗ)R/]U܀PJW=4&dq+rFLx>l%)gGyx:2I*WSOlx9yWjZ BCBp5\hU_)*ݾvTT1p!$=Tͤ>LlA<%µ=HO|2 B*s6>V8+Io GXEiǒrIъxǚLhٽC>$MOBmp`w,D=cYL(EFDa\CM9* ` 7bBX,dD,2 mh20\$HI,M-rգptq$V%.00Di bd\]yUE""*UTQDͰ1PbJIအ,DAdD$b" *V-eKi,./JTD]肮ک7 **82sQA~ARe'p $'#im-)mq-u0РD]k1XVݤ7 uE B$5I'íL`Fga֚. 6cq-lES.fTT3 Z6ڍc2$(jkn\ZepK⩍d[jj86JTh8\Zqtbƛ a&9wB)stY]pS{]36;͒ewhVumHZY37$ɕ*kVg& ǜ~Kg9/r^,ZH噌 !z.Nx]جj.xkO)!Nx21ցSD #"@hԈF(# QAH*EHPDR@FȰY0@XA@RXPXAHA@X(@VĒ X,XEQF+BE(B((DB,( E X(HTU@QX TE JDbQT@$R b0X*b,Y!@c" TV1F22,UX ,XF$A#DcQDFD*1aQ@1EIA$YX A` "H*0FAQ `+bE"*PDUE uB,D@TV,` R AF$$cD`Q@AQ1DATl$R"DB(PRDPDQHXYdHDbEb #1"!TTTR$X#1dR( # F!!,bBAQY @H 2"B(("DAa"$*YTDB( ERE1S$@b" "E+Y!"*1DH(  `"# $X@UEUR,) (RBa'c$dm@3,I%BSMEMu*R g#9fZql!hiʋ䵛i6)S62D(i]y; UȔNKd C ,``vSw#d #vUw8w4CNC)l,/C*Fܻy*@,N(@N QC-((u+%fT2T)ql')amZW(yqqPDV(ŌEEU+ES)ܧp+'ZSlhb,5Ib1$"TU jb H( +"bŐKh2A`h)Db '~6@|(pT݆3xs:)y [uɑrq zx&X@X)*^PTe, /:2salcigIrg-*#.n^Dgዙ,ozKJݪ5mE'҈e LAjT,S{0"Xf` KͲ0U D-fPҩiV҅*L6ZZ,dUED`APB@Q X # Qbr,@DD y._˵i7+Y,aQG4a "du-z6[LEA! P-Cz1̦.KbĈœ V(uQB\\9sےnMh-bAs#Mqpes02jg%˔rt-HUPz0t7uw{9"0kbx1! Nu&Jn >#:N5 kF| Xސv0:]ӧM뉠*ݐaՊ:;#' ea-T Z K =+wh-x${2˸r 'fUɨ I95~7(xLNpU!QDN^[J"\J%D'^|,kGn1IàXD-RM xmj3"M3p5bTuba']_({a2bO];R*EQ6BPl#tҶ V+ZnTq0wӆpSC&AWrLG[!$̧V $%8zƅ\ATʰ%x\熒)0UжK&Fir\)Zi̳Bϊ^l8ܸcL[QabR 88E6&dۚeBC˭[u,nؤ>is0 MS4hDTeZPeƹsMS0eQ33LZࡵ.YKLKL͂.ʴwNhۙ^.kx[FB<9XɨLw$,$=CFaۤL&R(1 "aX!7i&Ҡn)YŎ&Ҋ覛-TÉ6Lx!]ܒԦ8lB}$E}r$Đ:9=E&9U04Q\n&"W>ֆJB]w).1$@dl+9Koݩ#o2h0Lbejn[ŮQ+mL\6嘶f-QXq ^[+ ̹fc\z B@6bK U[*`  >|uG(T[5AV2*T{U]`GaK$5!leH'Q1~A>g6 Reъ37n[j[ƢS+.Qs`2.@eAA6֖^^^`7zb3ޕf/L̜1f2vBrBKZZZMfJVd'dt<"$Yn('9<[1yFK+"V,_=rsnp!'"w$J<B شQ [T,WFot-WeP҉`"z݈)8ng~0`Y7ʪN<96!-x}K햔?-]re n5̥j-# R2ۍ3%q.[2\-̫QLyw1Wv31y6L2蹆-8.j\F9n9y_ m݉ "2 I#Ԑ"bȢ?R6"!VE$#@Y"*,׷EEI"H$REY, Ta|*0DQUQQb"E``*(b*0SD6AUF"`"""(X::ѼKKoxc1H (CR^Ңx6yE1"AR,FAd̰1Yv̹wG/FH,SmVVwS4gD˒l8p̼FPG7&V0Ȫ,'mQ99JuV+KhdA\db*"Nj sqCƻfWLF)^dXrU;\rĴ#ݛk :k&b V Wte+`1u1ZI&0눡EcsAUe;d A`Y,a2 !/@SpxOE!c3EQ(vy{ky f\09 < "ČE"$Xb Y Dd"ERd1)UX+FXTc "E,D 2 "dT#bA@AB JB((Q`EYHD@J4<*NQDADU"H"E2\(*, *ň1UET [O;<$; wyaC86!73bDihmӬM1iQcU(Ql]Khe̹Wms)b J{fLIY ĥUa@(4E ӳl1;K0inKjk`)Se:rB2#mlےN H/\ H Æ[N:;);٧YQ%a=R!fw$nBP  sD9eRSRb2$ɓ(&Xo4MWJ.ЬUS,:ƙlkX\̬UQ))rQǎny u2#i3+8[ $ogyG|FיR0r-ܜa2N决`0hA)׆ÙF =#<4L1Û ܮĭD5%1Ț^wLYY2iC sKkSΙtEd,'9d&s $w 7]T**vhihnQ0pU^1a2 vRJVq1.&4ܲ"("NGR" $#Qڃ""#`&Hcҝ@c^,R,bY2嬬.nۭ.N+pҢ2+94;qN *E\q1NnE::4'lCF_2AR(@E` I&e ,Ad&5 (%\6Fac7rYS.#0@QH E[P\6 AV iQb`ʨa`,DhPk b9LGA$RHf(M`6l&K 1*bfVW3 6؉"Pc.51v-`c 3J[ZғI`k+g=8v0EHu& Y5`2p:4HÅ"#jـR`o8iGcNp,.C$3 (cI:F8hdՒI( /b.Y nC=j@V1gթ9M)7\BthЀPBD $P%;̿+; 5V$T;X4e|Sg( پw&413oWJHGJEJ5`$L7i$֤q=b|_3/KӐ8!tz*1. b/ yJVф'&I3TK^Uy%+*Q+$$V4aNDF6n2!6,!anڪ:قRR*h@#LDES SVGx"(ҫ0pR"/^GdwZ͸bzH;.{fMP$Z-|ۂh! ,ϫJx8[f&r3-(b.fnIh˝L(⥅UfwuJf\ vDNT@ifZȱqUIXX.avZ\r$6sdpKsz֡yN&$h:ܕLGe9;^^&s;T:m;=)9gnCDyM \uZ3;'S{^n[b0l"Hu! AiJ*&XfEc`ubnQk6! Ì{h11f 44#E--97q^[Q7cʃxrH F .CDZw]vXG^b=7:*Knٍ30ށpL:K1QR/1gc QиN0*"er20$|#B,&I@q]t Y()Us{NM9(_ae5ZjܴV )9w>L*p2w0hf~n|pb ٖQڞ]9(56 ʶTHQ)J ZfTXT1hh ҆+bxӫGcBQԺ.%K,|e/ɚݡ{ A1MMVqoĊqG[{Pgci{"d82NH+!;$VrfhTmm৉zpXJܛ;[r2ZA&i$Uk T"ܳB euM .;P:Kb̛*CZQG %A/c&DDZ7ŵt)/*vC v?$܈e3ABH*:2! $ hU' =TO&sTN6| I0ZH#׆$ı )= 6/smrԭ1[kfHDf7*+Uؼ~վ/f^\"2GA-$R` JH0X) @{R O_/%q|8X Vf;ww:V%ˊ%mB%<``*e:.5*[O T\1XV`E2ҕ}\x ×w`4dGFVXQٺkoh z*8%!w2K0m:n\T>2eL&'Y{ttr\!JVTny~ȒɵP@F&$*DRbcP+JD0[Jo.{pJD]>mߵ9mȣD&!Q"i#'(r)mUCeҊj2.[kq3bVSXo\z+SGO^˜)ʕ^O8Tn~<랍&Wob1y޻X \ąaJyf]~\/o՟e5C^(K / 3`O /o3w$Pٱba!](<<: #p t/H}2_ae"bu6b8" !DetIRz.DpDILf7v^,F i5U^ms~R)β(-(,PM &aнwbgK^TMNSJR(J,MeVәϸA\i̶˗( 7P،L+{V8CԐC܀**݋4cT AQ9#oۊk|4D@FF `+p{VY $ D3LDckViq! I#Q 8޽r#PT)>.GxRBfG4Tͳi$Dխ ۴lC+ėߚ1!ǢB ZE]$gXpfGkQ B~hJem&djB<ˏJ-Bä/:<x7M0MDMItN J/ @K&RV0x +"_Xm- tMÑE\>Wpjǜ@ u x]I]F(n@8jX8XV܁!(S,+9x9:mdrR*YkdJd7jA@<pqA ]+UޮǗCWI5ތQQJQpcu2fܪ;ӿI.x,QkjЊʀ cD_Orx$MSʈ"Qm)\o@5MN0 k޹}wK˷]׎ j+Cͯ tr; Zs[×Z2J猫V7r_~<]Y߆;``c)x>%&wPE`D 0FE"@U`EA$O" g~+͂ς"(zCRc+3媶_n؉Gf=e;#;cZD/y"s( ysˆg?'Y\nlາ pV!ff{KS^j ʐ%z~" LJІ=o.@ .胵勎Kx[p\HV*hKGw]_?S%ΊROߧQV 7<-8ɼ8o 'kh5t:R^@ t̯b`ј|r}66n}Zp,_$k(H3[Y9yC ϟ8TN:a>W{g50˫M"]a5ﭵ[u^\U5a Ðp=B[,y{)Nlk-K Rkmq͋7s4xOw<޿|G»<K k;졁LTK f'uUQt:>%AQg]m`ƒ2,IsGL ~bF}-=Vgy?4d"l'`igEWmx(Ղ%p <zK@~BOwX=C Md{\XSz8Ï/MYfףP}Ϲs?>)Y Qsca ?M!~$~JڻkGEzH<|^*} pߏw{`v&}|b 7!0nzITug!/s}~>zA-wU4huۣ03kO"~2|iLâFĈf :UU^*%߫ܛ[J 1%ұ2]rF]<~o%}RLjvQL0or8 a^0D363,:e`X4<[Qs;1Lj0'mzYg9d?e !2)o)R<H|{TQF*<`Fø_|klBXƛwe̛_!@dT`s dr x8 ^3݄}oa+uۊg8J)>I2q`W%Y`m+}C g!PJ1 E O7ӵSN{sKȒ>q>^/>˭Of+Bs:T\@X] |N8 ߂.U)-K{v]\#ti.'߇(=u _.]h1s/jM`T)7lZpI9z쟐vx`A ň/UtH| 2JD td8Т\,5!cG[xED|x2w¾NrYD]3|hw2E[h,_Ҋ=~(/1D{[b܋tPCS|Eߚ#;@S`/G |ñn#}OcgiB§273Ŀ _oPaPS%Y'؞ h^#@fAd¯P?zA7;}]Pˊ(95Sa2;! 088,<+2GWQ!],(^2Z =N@H2췥#Z;)-t5Ɲ;||HA$욪4G +:P1#O"m[@Ʃ x*.x&8}ёE!5F+ۇ0W%yPHIRDZHCbD qӇ)-A{sFG ZU-"*ii~iaeƄEy4ckaٞGAX_ n7ªH!w?Ci`a"ȶKjre{9 s6b,F"dTޱ09cCןjD%b,?|2:X0۸u z+_ 1.tܘ^i3/B?w7htXZ z7Wa757ؔ}sFsXqyC59E(e"Mx+#/w@^P&Q jʹbێH`v~fݺ#2dZ9 hGZ!t@ d FB<)qVsXBũBAO[E}؀:b*wQI-3nt.OAB}l"<$'jTE! A S1t B"i#zM:taA܊{\_Ţ[y׉n Otb?6?4V=OFhK@euxGQxj'qBB=MzԯV˿щaoZmÅÃ45T0ʛ`?Iaixg<:b!#4(f (70R'QfkSj \"!A[B3=c(:Y'f] N ?&km"n)yD?H֊cf{ G*bdOZu}PuH=%0#Az$~sS1v[n[*o(8#  {2.0g FGHPG4#)4`D+oe{B``R*@NO>'yYEg⇪Vt8+435x91*JS]6F&ɀ DD!̰- Pu-Ct|^{<a-wjOӡThxWq~7UB6ϐvy;|s v0NF^/$#9P;I9 {}ֽa$]W]/~|&<Ǐx+e16xX {lS'Yl$~<Ά8Yb* [ux6呇㻭Q^W6;mQNKj0 J'ddߍM׶5)HJf&/cܛ3Koid[u_W_3m@$rg3w|%ӽJyhjX-mae~s{^? Oy?"ƹ0 %D~k\{*)b D+뢟Uc,*gՄ%֒F&=w^k<&_=B(ė|[}E>F3scrͳUqxu|BwZ4-&KicN= Qb.ᨫ  ~#kD إ+;J{z=2cd;_7OC"Q5uk@O 02 HFWÚ5Kɔb4Unjd} >h"hgSn:xDv I/ɼ(MQ.,oczMjmRv.}LF\ N_V=_KOhG Bw"x@/fsaТj{̕n,=1tR,AߺdVhT^-^w݋[Pxycq+8SfGKӸF}[VC'4(OS W&yS<~ӵ5ZQzFf=fJb"s*՞Guz6Ƴ\UWY~w3^ H_o"g1 t4pYnh2Fm>2JL=_܏G(TڊZ. pRJ/s}t18JVG?My>PPĵ7UskaLu]$c[-\&^X#hѤ$! )Xgw+XI5M0%w:?E*wkqh}p?3fKQ6:c[xw)fS.xIKf7 臩JvOx3ӝ.0犄cl zI4OnXfo\9atFʨ&30؎´94BGm$ D;4 =HOԘ 0֯MX2id"[E|][mz'h3/ԎqT5#AO|Mn}_Ve:#b2F"}EՁU|ܿk_n}yA}+*?}h_#򚙦U4*=QGͮI ^6pu'~ ~eSUPPR mO{]~pEo+|ys|5Ea2ݬT.)@?66$UVPaژ Tazh`syhk %%pqvh엸\@6_S?lVI]{c[ֆK.)V9A|M暚^PyAe쵅WG9ǣozK2Sy(Ӗa x&\^q ?Ё?禉ud bIx˥3c9<;P^&MR 9!x\Pn67C v"Fc޶ar`ڲl:q|ohRUH+\',L6٭n470U!0`$j)eG%4>\a9}΢%E 9b6UAb8FJc%ȌMi PXGH2 m#J~q>> kfX~{Vxgv M5EPA!O \68 +~`Li>y A<~)>/^gTaq-%SH~L Bhh~L fP h#ɸLuN<.W:5IӞXR*]E1x$ D (؂0A8XjOǪ]pmxs6MV/JW  M}l-Wg Γ"E#],| oLy]ͮ&MCh.Zzj2^Փ#kLJD:Jԫ~#̎鰁a985bP\$l<B{ 3;F!LI0ILFi6YSk$H ]_^UQ(<+g|[ gMRŊPU;q9b!u@9%=> D($x{ " 3k "W*Jw`#>J3X\IO #*.0 m}ƓT$pxb5~.аIBE"' F%fD1"?%{L:| p&uBP9oq,BQe %5= 4~ADkПkV|( m?#?R1ȓ ~{FYN[b@PoP'CVMxLͰ7.3U\V0bsPsCD~5 s_ߵD03( >' N%Ƕ'c VC&:r]Ei[)#"ǎ؂~m7*  CTE?@Y}~;D-~.L]^kZ}\_5}5xE[$af1n]U=fc CV_p@~~·r#g{Ξ^=Dү=ݫj҅:;g0p?qԭӵxwV Z,~&"ɥ:fuh"#ATg{c튨O/C Т|8`7Ojyr۶@_+8/쿷_CΪfaТ Bo5 }16zk @prU_M㊭ 9Ck\.k955ʝXoв!?c'dW^nl!;eT-cM"tDYD,U[[K {wT 5Bc"7dPq @ODWB1PSMM N`4(}[-F݀oѿSE};<&DB^2B=凤dY{Cqz 9}@6QI$v)\fyCÙ@2ke7/ޮΝQfˎvf;Dt>KS/6uCGw}z!-dA!uTXZ eSKWe)2ۣ{򱜆+K%E1boBs|Gr^ 7"O׍F`Xv:[<$e qHN`Ӷ@7Ģ߸dzڒ9Fd a??NM!%0cmBL3C9>nҀlnftx4i1)Hh ?0@c41MVlf~pNc_Zb!ʳ9 mc<1os\Wı]ب{2:*`h(8)u." wֶjpP'NL*TȁS(Y L3>fip `MS,`E93U&~L{ׄSȄS* "}W9M y@4)h"tWwmFx_SO۹45mDrC [ggFNIf ӯO&O {X]3d(l  IOm^]Q"7\kJf#%A=|zxSXi<%ILP&ܶLlUl CuOpn1!^>N{RJKb,趱~'\`yǞGg:Y4<B$ $H=g"i5HʲeB|-!QAqw)BصOVURջY _fh24ַ*,!oR2*TvM2 /{v>w w`\@ƲU| QG㉭Sn۴,0 'C=QZ2S>Q_끂+e(!XJF{} 1d@PDq_׬f/ym(PrfX"!'q,O/iȳsݑS?*(QG߼/5ΡB"Gگ?gQ巢RLU[]9 0atr|ʎ]ͩޅAq{e]|Ir8qdRKG"<#ڪI>kB#߯ûy^4t[]j:JfߺO]rCFd4!8VHkZ*:h`~zׯ8-GdP!{)2Ԏ^(ڴ.Ɲކ(']D.lYk0=�x!3yzyMDi%2 a]} oi7/4@}?VEġRu^R26R&M|xG=W*]Iq;a_)*|ݑlϩ&0/~ӱfsrZ#Cp;_ɣ)>3]6tĽqM5_iKQѿ䳑Qa\ wO Q?nj>~3ߕ='(0_e !)LCG+Ϩŷt#hfveR֘Y*Cѵa]qu7Ϣ?~W: $V#+[1+gZ{Kߧ׍+l>k_㥴`Moӽ9Ojm(]k } ݖi_}PP4\C2 ʲ ]?E>ޥ @|miU V`)t&\]JP,kZ$l֎ QI C#86[PDV Hc:t٦VO{nKݽsZ2Jmb'3O" >nh:^6U"ElTH6c_.q(t`H:܌:_U疃}#Cx+ȩ^!.H8fՐ %[#Lq.#yf 5hk#p Wکx @MRR􍋱/H2Vw!+ўSHhyM+6ˍvplSj얒"Z\릲z=_"ox?_֒D 8]x `]Lʦ[=5gYgͼhuvq)?rAGÈ(*Y?vc|q.)ma.$#m]D'QcVK~lj5ϝ/%AyחN@PFn۸")D|JITT}y|?l0AI4j Q'U1V* ;X`f`M&;h'֪Y@{{#! []XRfK4f F< ,yZ0€RY2!]dEsҥ^ th!rvz?1dxN4.(AnЅzׅ{i{s`-FBDŽ8t?5c1HY zZzttĺSu&! C#^$4{YVT7Bhr-xZ_\H3=;Pf䞱K}k7kM`O$Gh{tu_E.=m7b7rfa:Sc=9I>U7/'گ~i8Q򸿬<77bΎ8l`ti9x44)\uX𵆰HeV6c4q&nTY$,?^ڱ<1/R1/r$ <ݡpQ-`qQ' OU`1T^TРj~-m~Y 2Qe}}  ~̓ Qűߗܕ$|,F=ŻQ{R,8jsDj?9# ,d-!AJ*=BE6.ADp:؞;K6`j]w{b!XSe Sc0Sip9FUN5$f҇dQ~.EAAVkI[#xpFq1݂sn*"Yy=P6TʝπI@aS XIm/ k*U`kO(QE eroek&t%Wb <7}Ҍ#R hDhtdi_^]_@X:0|e|{;BiQxV H`(P.]Y( ]\ݝOGѦBCj+77헰b]fAT)D\Dıe|74yUEr.d7QuT醧 ;,wё `8{w"fbZr[thim `׹MV(vbmٓp9hg26 7 3/QKZ*ر D>|$7r2r."`{ZQfvC$Hˏpr-H>+P;w?Ag}<*$ 48A-*^eh0R$v,/Uތ )u_{F}5KY*/]3Wjb48XH_GE B <,=NF\<]LfF`\/֞IXPT5-R$ot~ĉ@ig53z~U$|& id_vTU;=4!a rvܜђ`mJƴy +OZik͸s,$ zH!@0W|=KXY>?5D=e|vD?u4V0DP(F!',oږ P60{D&*wLB% 4y-'_Y#JI9"O3咐j |L!l0l:AO;I1=QN!ȓ1$;{2PHV,1ljfx_i@TJBC)!{(R[%D60db-0<8!Kx:# 컅>tt![YLkƦZ]Pr=:HqD>"d\L; VS^IxxoqpGW+)wϕJb阝=ɷp0$] ƙU\.u B Rc0%aGs M4 Yo[iC>~Nrc Tۡ(F t, p!m,/]n ZLͪj+D=X/ivШlBSLj #}ؚ>_.%f Ƿk loaK]$*Ej$HE"pE",px"r ^Q"]kҵnZJG 4f@# JXIn_n3b;Ij0%r&5mЅ$j`W4ӱwώpܮ nh̄rT+ Aot s;/&8|)I1F1}4AyOy< |/:1c+ =Gxetvo^ЬRYDp~啲6UOﱸÕ2;|,roٟ5~d4#.<2`뜒DGz|3n+P@C0K.=uV3DapYzM'pǃS6YtzC].Xf\,uLMyLЃ)jRzh6(= rZwn>Lw}KJ[tOK~ox:-Mykw.vDk yc#Κ*pX͵Vw7nPTF'fK,cR-1I)-}t2[ېM${RfJ SvNcs[=T3vy?H%opgUm" ;FoY(գ,OƨuEBռ%{9]KM7D95d&>D?W "RI_q-(Ň>V"Xļy‘\4$y{f? .Qj,Ԭ5w\'RQ⢼_9Wc({碒8 a_%}\nڍtj9g5LF0-֟%V~snTENs>H,̬0п,b,1}ȸ>?hmMu!_D,VkDYgq雞s_u}` !DxZ݄^Zݼ1|ьn۽Eoztbo!PC9>f7g 2T!6"[[sgھWcȼj`c?u?y2sF Uh-JW NoV8}smSuBxdGc8|ehX}Ì/k=R}w٤6HIEmGCgn>q*7!;rueNJ/aSS =ёXktLHƸA~(gK}ܥi zC)<٘UX.} џ[]?op T1*=j 򗉋 K/\|?یj7kC&=wY>{Z 9:7fsWjhk;|W21?N%?.xґ᪮ ߁Svc蠉=o+\taH;s, nVW ʺZ G>ت}Ze_70tj?5>beH|+f6o'ks_I~pMʀ:c6^_U wRO2ǟu cDp` WaNh\_]ulgK;Me1>XP#qʗtKuvc-Zz1_Ňa--2CʏPZ.3_2ʏ&Qi/dպԭY[ۺzhݺvS)c\_/^Rs?ǚ;MOJ$O"{^\ڳ_k4: ߫;ֳw^\0-Ά?R:$iMNc/kB4ʩgό}BZ uV tnU`,kW`$*f$2 wDy %8`4 }z؛fվ{@B$r<vDPf?&6g%?ѨRpB0z!g/=Un6S R;GG9+sj|5J[!{E~j δgˊ˖b* Еu;ga,S3ԍyjpA?ヘ:wUFl7z/@RIFCט;GGR@{Ķ}[\xLx;?a5]ֳbĆOk1En`kboQ$%n:a8̔HtKSϩ^`>ՒxLG,V4ٮr7DQ'qr R&yo#֭:&'}Gm~p_ځ cJ VeipkO\LQc޹Жҁk?T+JA)!)YjgI}PH&+ 4a{m-97k.1l> =sls)/5Qv=<}٩]0^6j;2q XLje]*7K 'އuǟo[xmRwuƧ,rNl/dSDx7L|_: Rftn}ܓ4_*=?bRX=ke> 1))j6]dQ+FB O*GK3&KLn[.?Kjeû?EzҕF PLf97~vojy{ r7ZҬStFK$TȨ$?p9b T- bdYLcaTV;ª&sr~jq;"Eu.?¹^Zh[ mEJjHwE ԲI=J$b; `V,W:X??bDbkj10֍Ds<@8yHp7-i޺F1}X飝S}ߠ^5~}+ -x@wNldN}&:iU WM.o' @,d]JD`vK0vLxَ!U̶lBz?GZA_do)q)A.*q֕3рhąm8@ptfDP Pg*l A5ɨT^Qz%lkT4t%罇!Kir86HZwhziW;P.ޥtuE ag^bs47$(`o313X7 .\<YX:;W[ѴT/yƦ;FoÂaQC.a϶80Nx!z "Έhe ˸(BPjY+E9Xd?UNdoaMъ# qYr@d'dl~]hA͠W<%ϵE?m P@DcGiI^˴76Akc&HrU^uZMs=(/o)CpU{9toB'"K]ڑmM1RQAohe6?*" E ]fRoH89غܺrܱo2'Y߶Mwqdc`~?3:?tvb>و,>1pt9@N}UWLQU=(~C |<5^$Gyx すtۛ) r,\aj(fy<H AF#cp~8!E\9"x0C.z#_h)sElР@Д6ઝ3mԸ/3gw݆E=_Q⋱3}U*($A ?}@H8*P 0T( HH++eePF,T ]$%EjJ2Bp{xG oE-h ̐?: !" oܒH_=i2«N NiG@"7YMAߢX5!)#,<YB(sȊwq.22~y("X@}<+wg|o(\cDå HvdQ/fլ{:e=Xnbˆ;AQ7/}O6h0 /gI"!  Ld#Ƅ $%-RmAQUQE"2UYCS^[Ќ12"J#V,`DP*( rF+ *V%)EAD KAe*Dd,@:UV(Z,`"w)?CBK"bT&%:Ze-IEʠ2+Tb#"ccb, 2E$1F%pI`0$FDX d` `)E8ƕŠB,RAUbK! *T`P $ qDU1G2L1TXҁc Ddcb*)TUb"2*  " Aa Hn@qFPX HIAbJ7L+AR2nZ!D,gizFD؄/Tj'~9H|)^؏m6v s 7%+NC=|3mnTf! 6 N=޵y&7mT`j*Q1@B_}n c*U$rd?F萇Łj72&%bz5v(|47X q(b*C#W.O?}x[1H\*1zDmf`:0aNUUgg?}V=My'd`3sy5v7Q007 3.=TW Ayv03iH%upo.WJ-nF C$Q`209>ES+Sov}z){*32lV ~2G>σ+v`?u_7m-`6%oDEdig{F'8aVVxlBN1ÜM0ZMucK,_"dhTXi`/ e@?o/ ^@ ˧ ZQk=Pgaq;@8(3zd}uw/Y!6z]}.v"k5Bn2$+~NFĜ 6pֵPSR۟+ ?76 !%/tK;w]z~[0!tx2 $05sHXFP߳l)MD1 ?kL8'@ mgT@a  w BD?3KBA}Uݨ eɣCF?Jh}tN͞n\>E_`/~5FNضpW%U7_7[G/PGY+)Pʠ'+  Vު!JDrqro~[PzK0ңx[#BDWuWɳ HNhQ]\rQqdPv TJ,UR4M Ovc Սa lU<u^xA eIoKL Lu-ԵڿN!7{# Xp엟g(SR5QWuA0wM#eE ؾ1o<=gߝ"N[_i.pAurw;J<q;oK`~p ?1P_q/`{JE C p">x.ی+ȉٵYK=e ^l#U %2\C4 I=pXȰ7ri|b"!(#& l0?˦Dcw zCpoJVYn>s}{~kQ;쨔NT/է:fWϽx{C S׾=;kFzP!DHx'E,]um=ثp _I@th_Π-Kt⇏ d}Pf!'#3fdK㯋Lo}6"'3 *QqYvIY,<Ƨ /^jǥ:x; &3fdvU{ QF*_3$mU 2ͨ>UuHa}%:.F=!B loǍA8GTy nOkah @a!$Z):!}jz0SQlVj/#cq3^ V*v5o<̆PZ'@\ JEx{DIDD5Ȁ>M;㓇Dž\EWZ/lN(o]5Dمqb✟vB @=+yT>3BďőxܺKfϒW wNP{:^y1Gi@A(NW=;&%.OCtp4"0wv6]kZ1Zby\Hg e FdRm`?{(P#׺4Q1MtmDB("_9QDL>KJ jDAuѵ*b- |:(BIxM&MxA؀NZACoFc'D 4]&G =s@>ƿ3;*P(s }-s &*1k6cCU+[IU.>?D3=*}k5¨(V54i?0,:c_:q4QW_O qMQƣs{ ^˳߂zP7>+"JBw=߆.=W('`JYWIW$GY{Kͣ7IȀФAPNqHx0Cx.Hk=}@]Zɪ0fC~D_)wާ?u8 n.q5KoAOY[ v"4N e~ hU8Fz dpZ3= {Zm !$qr \t * ʜe/]յ1Qyr498sa@6ɚ1E]6i$ PK0T^-%$&b3ؤwyݘq^2' ӥҷӇ=[iӍ VaD&yK1ġõHbp2PdFmKgN9=ΩD!ܥt¡:[ʨW&RBZN.(^oᕍJ„kRU`hRiz_4* TR Ljsq...xaJLQb?,͉ LJtֳofcfښĄZ\)8J vȏsĬ gs0/ObJѐm$ Anфj3j̆eՊA`x^% ݘNfR*@U氒$Nܰxn.r#޺-+8\Ƞ`Ο-TN -*s9vbÓ0 DWfj*p7`ej8ror"h(* .u ",1ӮdMPŦy[@ѧWý'D1~na| spnH5\Җ~S::Ru+Z5`5F+\ ?q)xh1z̻õv$6LaxAkp/ƓBΓ# ۷vŪ,x{6 &,OpGwCyFYذټę(Y!fAIUUK)4pK)y謦f(JɔX1"yw-2RLB]j]p5Bǩ!/S^wɂQ)G9S3`^@8_#ϿHGdGUѥFdH NQ17E$\X.Y*)v;w0PgAGUw:tYxX5Ʒ x 1 yŔbȼ,jѶHǿ}ŷv)\TPOA@HA*i:݆\aj*>l}Dz(W(ýmճZ]ʢ :a,#hp 24I(=(QKi$;~fˡ!rU^"fYls%9J6rX0xaܦotK 5Q@׃K ox^ RKS*!%\~o )6'3madz.WRV@ł G "A~uQQe3CJxeTi!y qOؔGXkuáss߸[Ʋeے5|M#6LeU’Y|C)x@'Uoa}3s8Y6oަ]vhk 5aC/r/} Q5p½\kơ֧[_ׂB8+h0f6 P˕ܕb֩ЂzB}WqYKD\%` 5 p7+8d( o 3 nk}/qId)S=LPazǎomj{ORE) }EiΕzےE =x.U]-yb=|[J5DƏٳ\'LGSs#姫еJ  t96#p N h_FH7hVT9^MasR"$Pbyp`ߚ 28r_=FM NDન[4Eȡ?#s/VbE +8 r3t;Wd 7$X} :(mWXBJ[Y {ߠNSj[)rD o<]IB&^PܮuZW*S}=/"?~pfuW>79%8Ǐ|hPYw2w(? }{4M?J9*9뭫`SV=~$Cp?/naDb7р22:Q-z%-WdGAoWb?~H}O=϶yCσhA`'.mx> o%^@%̩Nw'ع9"; i@>oV)ywNWJ%姈fy"$JɃ27͇ە e0'BwZL.{|U(Ngw8;kTv _yq׻4Ww۝YՊ`O ζ]ŵ~}aОe@~rwXVXBJKw=7 #AGp?i1 d)Br~#nocz͡g{E!6b#0 D3=Z%yk#`L]j b@85(DIƀz>f.kDzڳi9-  ƒrlQ ژCu|OV(U5!88uCzSfF[4NJGt8l-~8yf;x^9lS.| Gtؓ@p1w~KCF*U 3|ׇtMσ1ԱBy&! xU[V !;H;%E;`) a6YZ;44njy" Q@f/6`R/nga:*n y PX?PUፎr~á)&$ᮩs^d! &:kֺu$W@"03X&v{њ fg{OŌ٨IUfx}a|uvA-8AŽcUQx|uf{/.`:!1h<ȵhd;nϵ'EsN^6 R6Ю.Dh!Bр(H5 =~TV\Ze`P5f? siql?8bGlxԘg, D`/g}o/^Mw3ڮcR($zr-gč}cųT"#Rm( љh^KkUY hd.Ws@&rs7ɽo:㡛^r&DQOf?1ln4,ca}6o\ WbQM#+~Nr59] = Dzn{좥D@:?aQL\_}()/RT  3?Ky^(&ˆaխOawE8޺<ʊ <AI@[w͜SO\-eCCo"nwQ:IT`-z&SAQ &ED ZluOi_F^e=m((vUW~V*?%Ҕy#ȦKCE}\9~&UT&@Nln}?&hE< UlwhYE{!3$f?ObvcD'2*YQMqçmk%J߇}3';|x!Kf[[>DTzZY#a"z&Vul Ck'\˞<=ϳa}K4=?ء@3@U})D{" bMx""+\E6`5}VIuk@(P*(h*2( PQ@  (ACS{bⅱU?AxwF:#MSg| É}zOΜx"!xk"L3f~$ECD9,Jgb\o3.7wr /K{.aSß]W}dA6:A!֊)*e #)r%Yb7*y6=T7poQ$l!Nѹ̿};{Ww 7Xr".$ SM1ҀU'I v'\o <0tɹ;7w4$#"2y]ukȇ.+؃ʆMh&*~';8_of߅{Ox `#07~m%0 olC^?𬓾"MJ@ lv~}0jZ9P fP7L!Vr@6lx?^nZ'3 4@RPӽ>6fkd%IR\.I&,[Jf\I@cCGî7v.G`X~׭sqD|,e,?g3 izuWO„!,"qXx0R@lIl՘QҖ B0pzlE'_}L*T"m6g3ޘ4}7W|S{9>V@'BZpd7 -T$=t-x7,~@4 Lgv|:l~ă*n"@PѱL2`psoC&Bs ?=jn,C_Y0"`?*Pvٺ!Bm7aa*/l͡YVj.a4D60(ncየ7N?'y ie.ySeދ]o73Cb=^FnޣW˃/HUqMuJG}h}% ]Z rC M 17V:(/s r&؟ B7g2rjxO` 2;'7'Uk~8~tR@Ը8|>u" P: 9v qPE|K:21<1^l@ͯkx0w^RbXFJ@Ӻg24O:g즈"iiXh ^ %lOGR.u)qkBr خٻ-@?O[\{(j\~:.SR&avASybN҃@Asi[FTMwuE$X~>Rָ%NL)9xw\;گҪ*f[쯅ux?~50𾋐AvaAU~fBC٬ը1|+M5Yߡ6S4!'e{n~} aKZS>ʧZ<ѧo'Ƥ̅s"OPOvP3S8 PEA"mE3_MV%Cu?i7ǭRwއ DJHjq͗5ԣ03d5jzUa4d1/$ + a` +`*~[Z;:qLCT32M韟L}CΎVT)~1vc'Y/5&7g}ٺ5@4Rpf1PN 2|6G[!`0X+ *0EV&+mS:&i y(ݥnDE'"MAQ/2ڥ)ب;g}g~IH _*= P<0D֦Y2-=ũT3-j?ZhgW/O 2U柋se}׈?M¸~v!) Wգ7ќ|#(R߫^w~7M+ Po}t@C "@ER3l ;42aILyI g[!QՇejʂ*0{2PR|wj*L=sqPu(rFMZ*NF%yXCb:l]LߕND4CYsǭVYajs&HUB)tOӚau3'sBs:Y2|Om~tH7?|4ϱb>W孆L(ŚP oΟ(![Ɗpm` S4B m}~t~-cc,m>\ќ' #J9J#>,;4b1 C ͏H(4R&|gjT2'<:+2T]gSzΈ@[/U60o_Z׎uR=+P0*Loۏ#։̯"I|45Gda9>[M)U)9K7\$gHT_Y#̰ʲKd= 72}NYδ'2x).aW/} \\tH|zĆXiqKأ2znM2"}E3O+{2caϜj`~M"r$SpS4ۢ~je1W#PCJxE3d/R5TJ=؃E 2|Z T/d͒j9%m=0Zm͵.Cp:nFa% RrxF 6ܑ{qD4ۡ.=E<ʣi(3X혺^ǫ@GmgWE] R\T2rm\ol3'$ { @A;#H.ɒGv`D H.12D9TȾ#2"/L=zc@gܜ`a6P Vh]R BK֫ΔⷍXX m;ׯ^?ekR><(e O ӛ&rOTc ?aֶǥŖm>&^(S{_V`j=}tVP*ng[ѥln{TZna`$ :+[2P_Owy9u:￸ P)e`Pm6`-6Yz- ~1 ][s a37I) *ɣʓ ҫi{N|zS.ּU!8!evs d ŔL)HlXI9Д4"sPno 3: Vphx⋊8U룧`{s Ɵ}I2zaKgWFm`b%6. NEz;^9Uub-D)v27Ãnl"S'2OvӘ7:kmΊe a*g>*:?x4ִj5bwޅjދbqǸ{)8 ΌXX9oCxq{ _+U˕Wuѫgf4i۔T 5Ue_i%s. 7l|kD+r# ]3R߁?3Aŷv[k0%y.@p5Y#,bSt4QK@_<ߛ~o~k\U$2gc^}ۣ7trz?hK`'smf8X|z {w}:Ldv8oDpratguOycM>|K|H&IiQua*4M?ϹF/ XVX6]xm7 e^yM[n~+E=!b"aY=DwKsNAsr_ZZUMEtT~?;/=ئhŒ AD̯`>(^En"=Oeu>dMlyWǑXey^x}E /^93j_Br.ּ,OfjGm7։-ȹ@ZN\7_<`˒lnzýkތ<2yvp%Y7XW62}~ ,3\TɓoSݛ\!ot0r9#]XN#=ă_Yr}Qma/ ֵgIC 6jno|_~¿l̗_Ro ]hadDn &^5a#U}o=ߋhn0Cw||G-0MϺ uZ2!Iڻcԅ;fFxl V_1t2>HKLj@PfB#C+aOL+pxLFo=r_Z+J4꿩E2Ӑ+[_%^F"S@<}OYJjńp_'=)e% ;q>m5&EtM`yu !ϊ1! *Zjh.P]Hv67+/oͿ޴'>_ 6P׷1EePoS'sCF3smV<~(7iνc09NxK}'~0-mRak> r7F~diΚ3 [8W=!2)UY트(DޠnTiF gb'^(^l|U3l("Qb變2~u+4~=DEjIJ+ӦՖ^\וRI°٘KܺҔH"EB@PQbɜMJ~Br8g"haTW ̀C=PBC_+ a8~ȕĢ_HIiy7r${<|VKkA(+2KD >p*S<_M6wv=9[+fSN:+, Ģ<#[{Mj5zC3< &Q-xg7K"cxI0ۄ ix(aMjaYύx`\>umx7IDw0m2$ac=^_Sf^#q;EG8:_BYT(". D].Gmv(\UsO$by)# lU]Ƚ[٦QY3%3 =3Q(ذBօw^u ]Č2D-oƼ1 [׮?CiXϩ'Zj/ۑ'h*~'>']V҉v1uֹCQ@g8~Ѝ\?txd_KZ*@HyVh:;o1|7u\ož<|oIPwjAx}Dr4l,<}?o;T>!G -dSr imo}wKwʛA @|?F r9$ ( NŖdn~[ޔIWF_Ya/z,1,n)aWrhmsc U^b2@̨rϽs'%r"r$*I l yࠔ*?(͉TŔ{fUD(Wzۢk*ܴL se|ӯuZ:b[w~[rxGKFbv!Yݻ[hxx6!o 9PGL.]9@DKEH8s49]OY?nغb$;sT=#z@'yH*b=ScRU 1p[heIK_ܑL=h\%o)ӉBljSSxM뜔vҼKtlX)jIa6xSUOȌGV+e>w\!(%}~zDt#X2FsW'97 MTUF֜yv4: FnPS:*3_ ]~\_=ھ`Yf|ϯ<۱rQT?%JF4 ~ X9\3J'A}Ԁ⳿ϧqE }7x{ 9{&^w ,1q%ލJb/Qt&[[d\1] A6|,؛ Tݿiih/)ʅ]xG4Q#ʽ+}ily#N+ gGTQպoq*c7iaPvBF j$b hšG 2іGN}) ?xjI;eQ^Y:7(ӞTY^Cq34v鶹@az%5 1?6?^sܤ[_ ExOo-#TA7=4G8m|~Z'"%[ "\H +GDQ/`a.z}^Ճ¢fX{`60&Yz>-YU"!B&8&bNq}\qƧ@hk^63n&"z2 2ズJH_1=L6J}DF2kiK|.8Yrdzލd@/۝k ƨYd>הdv۾;6gޏ6U8nt%fA:_'quԺ0r)Uj*!󭞢_pqqH @99cY$zhYb?0ٙUjZJyƦXd͇䬼fO)yL] GuSy9xPб>-z9ܩNK-w"F}s =s&ʋQk^ D=ـ@\//c.u-wg5eθ(NfZAb[ރv˂D";p{95Vo !kh-A;BTsDx'J/{چ]ӲRrB6TXl8`S,!,JNAs͝yxs|ػ=_|_t];f"uOLDZt_/{^[.4k84kTߓEV=lg2$+xwW&(D4wy\Yu LA@P!Pzc A/=<2"NFτYIHa|ph0oڠÂu%{`mCD4{pqBW˻}.nC zaq~'e&- ?g?Id|OȂ8.v1F  Oͺ~ R$`wyMWknbq{}|N;(!yuQns׹40B]ڼP265ZXwsK"H ko2 B*BB e_-?1C<Zj `cV'ԇ);hA^v8sflGwE7n5Uϧ,PMI#~ՃDP&xk-;u>⸀N 5aQ5EI@_ҧgTt pKeL@Nm-0$u~LT* =I+[[n?`D`,)>'T")d,"R =\j9,z@5 %3&\lp;k#$8r8˭7r ߖo1$̤ҵM;ng#aN)NbLΚTI .1ʀ ܿ4N+U#f pݍ{:jg)_U$x]Y'լ! mb{:Ub𨗕a[E nAJ#hf#f\$(Gs+!5VX(f_j.3c)hog-1>ńVC_*&1P⢐Z fn}1QW dc5ֺovD#(FcJSzou:żkǶ 4<啹 MOz&.W&pEG7b'\:OYD%|hJ`504enXq?Mq" @)1s‘L$SSy+3a5N1LbO,zʐ]e6h;ƮxFﮣŎUI7nv= U ~%|S`R21cp8w(彎Hd}KYwkF&rq_cD@^1b= e:"Nn-Mر u<|]To2ßW5*ľxցzGo]/%:S#'FkwtCdp!h/@&R?u d؄:8}uB ZU)E GoȦ%ޚE$ɓ=h`kp77md aiLT~20XGmJI‡qr)T1**Qn&^T$l*Ra,;@S WT#}ʖ DF/oA w5evUF'/=2) ?&8h|k_l0T5uBX3; Cw*"S)R?/ٳ7?0Ȇ!SG}nrݺ,}z{DM_TXlotb]MLQ'diV2l(k/}ZSDr۷b _AsS( q-> 8M?h\%!8x)X׿RmųG!DJ&ە FﷰQrICtY&{{KA&{`@J (Gʠo)y3+L 8-qCM~Y8񵤝8Q"VR<ɛ!C[0@2 m %\@jP_ғs׸g_ {MwY,e?' *`)iտT8 S9RCi <kͬ4|QT:Rw!H,^a zR4A 6~͐軣cLM_> ɓow:?o/8{vÝgCyoÕl OMD}gj+ȉgWAm {حa }Mơ>F^H89IcmAe)(vnY5P!XLz'et !#9?ȏݟhBz޼ԝo~cE!@C4>{Uys8Oý=_r9H ]d}\^%7fx|k]KloV?# Ay*3V,ۘ΋]Uv8W< 1i28sv9.ϻuaA9B*hpd"/鵰7udĴ ;ȇ",mʼn<$CyGe#4,N\RO}s"r!HIYw Gڡ YOc>~.cw/?G.Hn4"jf:+Hٺ @qѯ#ia{Ta8@8<g2=mܱh=LiC-$CNѲp1\JH;j)0fw"އU夃zX>\~ no9y{9~Hd~?Nw6Q ̏m-݌vl OՇ@>\Ag$8nTWmR PrIܟSO}U l'ݯ냄݆{5 p '_e>wR/Cú݈ P07ާg>+a{L$~ SpAj1 $"TY 2@PaЎtU$%D~50 }FS -ܤSE{n ~;[$qJ l,!_gŪ '(!p^IOmQlkB4ʦ|_tRBic_8v*m l dȍ^׎ 4AdTO+!j#F#hU"Wߪ~<:8ǣv]$1['ff{ϋA{[=呕EEQeX@r~㟻<`F)RyϷֽQZm`Jy}{*@ FK*'%T+k޿ck=:e\nuw-19N4Pv"vtu]c}crCTmjZ7S'i dK{)t1wA_OS(vXL2Ppn֏>Ê?4ƿIO*2TǸ~f \K@0AAbB5-f~j֠w9Ϟ$SL|| _\)yZǩx#`lCmN/]4D1L 4j|m ujy PjcD06??9cc+ZUQM~R-Lyѕ=,.Th?_NfT7C%.鵜B>(Qߕ@U1jyp#G[޹=+CoDמ@^rԼ*Qf nXaj QYQ\^O9kŭN?cC}1b(2HXwR<\_cja1C?)́O)Y~ǤlE~6?'ƂezB9 :f'qCA:w"];~~gwUz-('^,Lf@ OG_g<Bj?]-lSfTמ6ͮE{7סؚec g@ü9KK}T[7=N^mߵҔ;ާr7 0ulʮG/VVMW,燎mß+P<4p혊/t`WY2,3HTgI8˒3L\!ujD)DȄq?zC"(>s!cU>xSƮǝrJHC9!&ȳn/"<hg#$U4?_#y$YZ2iگQy&t;5>y9]."f,¤}DȉPLlpXZ{I}a!?J5K(!)צuM.!; eyBC *b9xm| zK,Ey^,B -}=k3?okij]}ȶPH ͙H@t/l.:ltdn!^U θ~22 =P6M{[PϝNM͝HjOsg`݇Iv=K! 8j!U37Oǂ +m.~wXM:GJPcxV7sHaD.`RDܮꃡw˹x]Fj N-%n?Qo.7S)_7L\*44Pq{P'~^pMxhfaB&{""MbW×kHtXCO;yٖs\!A!^}j8ؔ57")s"σov}P\'2t2@oA)ҌMSˇjb?-'guiZS!n=$Oa-A}Am4&OAtKE1Gϑun:r$ .O74ƻٺ c|2`qch3Hޟ'+.CoF//QPѹ`)ga,W{XQeYq0 (_׾ZH`Β&Ǵ~ڥwZFSk mjTUjlO"Le$OW뭹=??s y(!%am,yx< XQ+H P%Aquˊy/CL&\tyE*3De9,b+ܗ!'K9rfԹ{],&8ncPQSo%UctbY&(طrI(tJL~.N k mbO6 F5Nr # ƸifZUPfC'Rӊ$kbȱĄILSZ;pxy '(<~/Q sXr_@xDF}MCFavͲ]Mg2s/.YV k]0?<[4lKU ʴ[KY~Í~c'iMFD^|(>kaY$dD%kΖx]ֺXS9|Igdr0:1?[|h7gr.Dt%, _Ve_#[1vT衵 CF]~g ZGOݠgg3k*c()"?a+&χtbY6|f CaƂ3ŅG/p1]K͓K\@JrTWf DY2[eO)$D,`?aN0]6_fW=a;f68bO*ʤU^#M!TPF*"=<.6R0A mhބr\pß3^0~oX%5Ot¢VB> CS1 Y"X,X Ϝ+VLE>/(;O–PgGd)6(HYE"=pdˮj66bMfRZPd^}W2ՌyO4i묟Lps>kTBZ O76}o]1OWW\i"DT'kIPXjnjߥӌ` IABE$QNv<\˃Swf<܋>,.(]Tal+F^op.WnSmp A5(RxI2n)<gfJ#tΓ/ѧfz7"1+mjX"^֮#B0=+!&#Iu%tr|`WʼDR3>#N X2?v<>ðw%ȧ d cx`Jr;v[k\Q)UR%GmBi82" !@$v<dhY @j?*Ei~zsOy03=0xQ~]'fq[ۭ 3V;/42;͡5w:R!`0>oBa4;KCVwv*{((d ZRCKd-}^4'rkM0UA2N>׃7v [ *2TR"AB/ew©pl;gOu.bEq3J3,QU_ (si['5*LWbb3weSTcr#XؽnvU*U/}/y1S \X@m 6 (TeOB GnART:iw:Ұsha e2QfDž-Қ[S-s1173ypVseP܅bC]fÞ~|;ryH:mA'܊!PW>~zk}ᇟzVKB̳=bJe> Rԗ,@NbNme|mS)r}w& (亗QJ/@-\,聀q_cs|1rը $f͕Rom߯ɢ"pQC `|iOr[ ({R7{Yc/ oY~EliEYyf9lV;%3VkgSY8 !VIP`Im+ IQ(5Z0EƅFgf`a*(?`g\JNJVn}lQg)/s=F1QvT0kT=>kK+LDUE%+c&R7wՁF!_W 6hە|2㹃Ro,N_ܒN*-vK]S!L#KFX S' 7D9Pa<UO~K5I.,Ut ]0w3KB "=;:k됓JcdIs[1,nɰy֔pZ-1ldY~W.tμSD:O{#j1B='$IA 25A+=$&!8f_O{s͙8?BH{0!7|hWZ׌)'rME!EN9x7e*N&_@ w96.Kg^M"vv˭QuV;}TTxn1i"iV5R ϻFQNWM=UAE [ÎkܴhҼ̎R~ooz:DT#74C~ ǎvpTf2sC5ܢ aLU[SМ)6UO SG;OE 9tgEfaQE?0YDrU*J> n/LdsnhS@@?G{@Y}N wKDA,;!VGdARMyAd;.wVBPRw/T QתaK94h0PJtْNY-,[.e/ 3-Aқ &ycD2UgCX@ A~~Ļ?AaÄ ̵'lA)y YѲr槁ӱCa! &)f))=wox=_yAwV}Bv| ~#:1~Td[q| I.zSOto+6BP!c K=*s^I~fS|+5[jEm ??\o:蠝d&Et;Cؙ (@ҠriSroXh:$/{ܚG󰼰~q'TxvlBzy fZFe;*B;0GD瓜yc9p?6/Uە-,E#[0D-齯o"~7ՠL;JmI@Cd}A)Cq}gwsa>7|S5pz'[c#q{o̹^B)q "''NPiߢl5_܃iy:U+b?b݀ 6 !T/2hwQ QMP>- hI($TB뗌r0u`x;=7NEjͨCb5qBD3),PSPr@?'h: &nL?82 ޘdj/zia4[. 7,7r}&i$K~wk]O2)ஈJq-(fEx~?ZV씘f0$B\B%{'ؕEڲ1)UEؾ*lj@,{};Kˤ\-e.*?va F  8m`6zx[*5}{x"$*[1*Z5X_| \Abx*?V\p^uZn$TbcIoP/BĐԓDABx^;4PU)]Befs"gtF-hC˅@/VdT!/"r|cHhx䔻Qxڄ.Sg=V3 Ct0w>g{N+\d9L錸ka@Ĕ-tj<9uhW83rg1"dPZoUO^[Җe Ok0HEE]xPxL[zE-7Et3 (ﲢ{>^|c " q4cv9P*eGP/L+ZdmNojUj$-0;.e)Fȷl<fV g9ѭµ!M7x^0Y+$`׵[cLcbwyHgm W <8{JbCK\E0q+ oZF}=fAn(w!Y vص⟭l^Քg[oQeV'~ Zr :9?ɽSa.\q:̗^5z 8~ h% 8g. $VZ/V5tB0HՌ=LWrM.Ek!5#("%HͶ/~79QD\o|Ҕ'kս-ϪVw/:5plTT|} kZJ0 'oM}͓K73!Տ40}$o*›5m]]k4ß9Ú* Q%6TmUH"z1WP}&sYC#־G?0<>dUE7 q~g0:.i_ ?g.ra kJR)6g5"(Eslhr ǩU<=Wt<(1D %Vdǣ=4F:6!L^8H †+:G=&;iWhO=FHg~?_}yYOӜ ~sz pW|?в =6l:&{hp*L{@^/@UsЀĴPvf$~^5v ~v|o Re[3XQT YvVAŞW8>4,f GO q'szdȁPG)( me@%BJ?ǴI!#, )Cw4h^!j_ʃW$͙;&sC{7~.v"#ץg% }Ryʗw.t;C`Te*VD$X4z01g^ xE]"m]kxzw{}m p %}v~z}@/ׁk@l~*wnD5.ϑwC%?{8Cd0E*q돦Z@`j6%WW?Cd cK3N՟?ԷZ}|wR}S%!ث'ou=x=W[1Ёew9L^o=G?(d ),Ia =&9v?-A<ɹ$^F$Vof,xG_W Zqwbw FORyWiGFĩ2'b k{o\P[ʑl}*!ʿE-&q' A`T0<|1A)-.01OV=hR,Pqd䯻_盎6Qֿn^kiC nW{}7~+kʫX9 X҄رgXP8wñ(w}WXc*>eva;K,d%JWLh %97`WHڴfduB09ݛ鸿R[Ҍ8Cn ӛ|<]|Ps͋=؈[@f, 0t5pF#. }vלᠼ=IZx.Yo!Oyz_+`"͗գ;T5{w:=YJOG"=y(9"6bԿ|63PG{[QRZwqV~-*o֢_o]cK1ڧڟYնבb<M6bOA(zE% HeU՚ F4+CSU͗u}*45!.c]'?*Px)<%{Y6l +={h4o;U`Pn SHF'eͪ\oiTaf nK!/= xhv_>U߳xQ:Գ$_=qY׺p-[_"K4="\>./mǶ'dsRzX_yg2`N]$$UiJrWu/)iew҉o%S{s}=Wڗ?0xz/tU3/iЃip'Gs~[Q9xqq?(W8L6@HzâR?+{}_a.n Pe6,DO$(b4;'D:O䲻Y2HC|YW>" D8~IpqrvTcSyjqކ{`Nkchf36 rR၅7Y.֔d,\+ZG%f7wۡ^[pXhcf320/}X_W(ذ?s?Vo7BBnpe)41}anڳh׏ܚ)4ּq"& ~O;E|P2.#783 )~ {lFt@qU_ |y~mChޫvǴ)FF~W/lCf Clf00|_B?n$WX.ـp2M(2`!5BXX Ӧ J@Sˀ{z ܎u2#|Q?M кȝx猏ds/Qar%t$d{Ml۶Ǣ%X=fsZNd>E_Njp5]WwL? 21cE;ِ \\{%%u,X7%Xk=dJ1]n#5ElHKGW.-1Hk 7EHw IyZ,^dRxA'lznb~-:<9'q1U]A9S (&rBjߋ `l %u)Oﷳâ3A밧LvN5,TkU{4Bm :E{Ou@&3Pmp6u1{_0)sD38Ԟ'%BO7ܳM}>8>wjsTkCTuB=H.73Q` i/7M*kE-ӌ޹hNax<}cv%dDOZ=4 X51|?A1pP;qDqdx۱zHhj.AAkv AFfd% @7a52w@~7Fbv9$1U2('c@؀rR(/wL|1 XdȐs-w@0>QVu ]z g1LJQ8͑_kJl yWgL9/Xg?ϴsD߲|)R\U(=MwxO9nN_(CI3DK{m8 37u`_'q7V*J=vQ/Km{X>nw"M(Vk^㫧/וh=b3X׃5+ D8w2q5,H PO[P\G`,mg31i!֏iom(+EF1/QBޒinp;2`<7P!wkUBB"aw6*2GH&sVqJ҂oۥ!ڭZ~tjWKZ9k~m|ODXN zu8)ˆ,Lc:Ck^ `0@e_`C`&/أ"5#>\ekQy֬e Θ.Ͽ0ת8ÎR>vj=O~t'$˜3iׂzd w!g>IŠn2ky0C咈mtE&]5}_ʅ EN_||X^cҢ&EUSUڀCn-.c@PR*"+`hAH (~_k*$rW&F}FG~>GH/q!Zۈ PJU70{iN5LF;=tqIV w/eS'{9osD Qg2YNݸ-Sf޹SM_.7g'/>|}0ɦɺ9ăwax9R%ʱyE3I D:hf?a b\9;a((Š8\drⲳxYq6?F2hhl"τaoeugGgdJs0eWś7]2<76`֖_X>̍߻[aqƈ(}D[jb[$o҉k?ztAZQKI X˻&g|^wӻ~^UvԤ7ofzZ:U@=BdTD2]DBD}]"D9>8hcp$'>-ͪ_ SWxξ&90 COŏCf',d1`L1֝*~"P7b-Lz/A.Nk D$jP(1?h~~q<~.WjM_73UK1_.9wQ&Q(yaGQ 3.%&xs~0)}S]]Y(ZF__?42!?Z! OEuS(yD!"f"$1 IE .PيV.-F?mʌ?'18=Doz^+E)Ȅ`F<4 !a7x~:ڥw\5;;L"* ;>B~ ]/du4渼.͵WHp45GنpyS3sٞELH;# 3Yn$zk4aނ" (!Zz. ĠM.(U,/Cu\COT{W+ݲ30A^V`Ook^mD0@CҧK!:7vgmhK Jan+V n58ܒsuf&|&k5t!Y9Un;k~•f+dm+-L;"s-}<ۛlb2W22/,Љ5N JLPzfR45n (EWEO_=4|m(nK\l%V֜+>ҡCU,ytj{&y?C}B_5#MW?TwГbߜZHMh: (S2~W9c5Dz<_HURx*!yH l6}/>ݵ]ݽ~#juc~w__ce H@RZ=9t;SKMXkٱCޢ?~2dy;KہAQ|'#ri`!#erѲ"B*NZ?wW~]Ka^T7{S"|/Pe=*"^LZnZ͉$b "ՎI]G0+x;D4} +" ת>Ԥ  Vgԏǃq@:a&_o [ҴXBihtw6]O9pZ?^>Z8:Vj*Gg 2>k%?H$87.TYYʿxv{gqly_ٖnfrfϺ~6dxЅ:#x^ﭻ H2&410;ҙVK骾#d9L܄Ĉercn$F:N"K{"_2_`=O ˈss]i#D/dm)zkqac͢3ǏK4]^1UI!G}}_$&,j :NgI c  9mb"dNr& S|>YE!|%[ F3w>I}{gJ{Njnshbxl8lb-m,Rd1Gad(I$mS| MO|=g4t1~pzkjp>ϻz.?)p=@Fcy+*Z y+6кa.H_=~+yő U4Jh?j;OH\ٳ;D_#__gvᝃK-{Ѐúa^4#rpgq韰ePTWqq벎zuEUUX,(_$GL PS_oҧJ^[<2~X]ȻzP͗P("oPF> np0_pEŹfO)Lu? s>Yb#@亞ɨ.5. Kwk Tk5TK.e( b+kiM[mG}tr e}\0h4~dC ){[t9G]gyB_bcCoxxdt_9Vz1EߐPNldݎ&6ޟHḂ eqکevQ?!k6A)<)u:=_4~{|q&+ό=}Ϫ'f>f: &{&#OHzwzz@cDb ފꪅ!gMߖoφ|]2){vVG lVKq"5+=·C$gJz$" }_p,RP\Q]o؃o e`Xd@Ta=8| b¤t9db}6ԯ)1ŤyKj !s?D8̀ ɓ%#]~7zٜ_ybƺ5KO߾T2^jpˮ` .}BÞd}>Hv?6s:?m9p<0ϩ1vsEHM8IDRNt)5 5/R#żߜ`|0wYPԇHsH{Pӹ ry@ќO4ig߽<0K ѥޞlI1C,=&*\?MnN?pcݢKlk^ZG/*sKt8 {ҳ(34A~dhB,Y V `"&hY"0<(2F?erP'OzAW-8f96%0PP,QaFoe~Jb3rˬ,0P2מ ismpSC9ѩpۏjwjزo+_ s M4Pz1+b }7"kns[{p^r |@Px48.w {u*јH0n w "HB )vI3&[6W޷-0\RuO])d˧lFSӄ2qj]/qY߀-a@(H'o̷KԨH<͇>ci"lO(EG3Nab 5?Aq:ٓ]ŕ8){*?a+|7l C nY@v[V5)6K ^>͕=??I|&Q6Wd.raKaW>*[Q|=:˃JIBJ/<ݏeza!/GLe-5^?Ҩ7v$GN&Po= 9ў֘/?ﵬg'r"lZQk}L[?pA hxg:J wRn-=ldSZ32,Bh@%T|-PwP 4I,QTQT#&W0S|r/?; &gAi\uvw$`("A1֫DRGn.^zs>\CLoz~ B .G[Tw_ e[ jTZ2 $ΌXlʣ0Cwԓ_Ξ>ŢGQd%v2!, n#\fH$\.K\0^{v}mַhj7;\ `=F_.mkI #Gxj,3+Ewd5)@7񡐀w~OМ w>4p̝i8oDKx=c. Q'9ڀ-ȡh(e|}lˏwCrX4CvM ܎"2HA 1o1:%G /V'ks;xoۛg$D['!,耊1FLUa>LQ#(bQ"}uF #e?$'[\'zZ_CXOT߷SV}팓}eU`Ȁi`%|кEۦ(A&*_S' }C35k݊/+b P9S1YZlwr}dS5۝ IcMR\z_@^?e"E@mӤ`[U#urp X\zHîhd]dZuaVPtzTB]~4ot3[[A9H1dF@iVnfC9[lцx>`tj%c(!nAWWSz:Aqhװ~FyUH)pd2meӎ2sЩ(٥eXnXrGqMW&ؤ6•21DLH o:_ζ1`-cBKc& CÂj~%F)aH{De9 r^nwsߐi+Oh?aDDyYFqfkGDs؇2-GgGU!e҉Q97w(h@6mbN_n*lP|LSf" ׹@D괸DTrc - P$ wd!.l:Vi>Nv+yynCp+@X¡ >bm! ҲwE怿*?>[MjUM05 Nۡ2x6yP6tpziWm3^'j3n >̎ $i̋AG+_\]1Wz5Έrimz;e;Uq.y87rT!,N07lPR_k&0NAozAjRk#Rp#O8VE")D^Cpŵ2?OLρ{DEh|W3L<8Qdr7b࿑rVa$0~ԯ =Vx%9O\`x-n~zp#zfsl: RIMJJ]uT3) 1Ͻ0gJ`A+r,˦8¯ۚkFXC0v>՟滐E F&'r4ٷo=ÒFgIj(>Ẑ}i^ E[R W=/ޮ][@#lEu/Rq_jN~ rV0+Nq*?&Bݖh=iN zӴ߾Ev,y!z NcO8<ʜh8#%v.'~>8.w?>Qo n q%P"R9.DS-2{Nv#Pm:7⁋VV[VEԏC%N1ȱ!S[u_rYU9LJ(dqޑhGܫ㈰|ڹ6Em~$z gS9d|A>y-&x$ͅUOo%rʊfASwwpF^8-V6>Ý7&y*6? \m}CsB`Ukw6?H^ w: g&Ϸ}$_{ ϙЇvᳫy*{ 4tCq^u#V9s ($}M 3dGqm_U\]?:YjӍokHH>(o*jZ)d۟O\!f7IM1>zziqv+m5|N~5oáD(\-ZY3$ڕAb+&P{|o(Ħ EU``/1Τ>'ڕٹSǯ[=n59 U )58?UGA+oOsU2H(PiGn]pmyx܋B(RO+{VAjT q~?&rʪϻnSL|"CҨdL4څ[8"A .tu4@ ~>=|~+,}nRu7;1/VdҠeV&Ͷw=&O{Z°9Q4/;qJۆX!Tn΄:GFa!TI~㏶+TGBVT[6 beN{vE714%3^ST^/lX|,c7?׶?†1myL^5w/9Z b%CڄW$_!"U>Wö1%)wie4f85x\!$Ӻ91FEw5غ |a&R%ZH":cdX0hxr Q$~f@**zFJ/#ϼ[BQIͣ9qՠM0x=rD. (6Hmv(!׵Vz{w^Fǿ8^VZZѥd9s9B;MOz7L8ao_4U>0P ot]TMm&(@)'maLB *q<:hf }cz#hW$V ;z_kiKpGU5-ܗ{8@\}!Ud/K!A-Ds$ndm9.4/{CY`xػhV2xn} q7L,Z^Y,`z& *,=^aZh{!NCo谔0waH|jVB(IX)_I9hZ>gDO'h!o*vq}9C.:@f>az rX/(ʃ'mV=;.jn6 w$ L}\96+v W`"KP 2Ҫ BWRՉ >OGޤEL_ɗ0 tD`,|x&]N]k ?"z1yh(ḣE߼5a\!U p1V#P(n/ 7(S(Ŵͦ?N7Hr''{ǒ؜?S­D.w{Us`Zkkվ<(CׯɋmI]6A29tp<^SV .UʞR R QLh E( jDK0 m;߾Drق\YHP Wb*G^e d6(F(P *<1G (X"C^PSV3Ier-WX @P @AI ra(~1־@QVeT8j/e?2{qC_:9weO6m!*i\vX8hxE~NŬҎ@ ǯ#zJ yHjY?a wZ `oY` 殮/2&I+M/a@,A2:o1ɎG< ZfEJ33{ wgPЌ';| GKsʈ' 3?fz)v`_82aJζcbow\:nyp`5gGUmy'r!h*Eiݢ, (&,iA0wU<`aeˬ &ۋ!I%1 "XkWTb N978U*~*Z+f "L\1vS"d4OY Ss%Gp/Pob|JI(CuԎFwzwsӆN-;񳧶HJyb;tٍ0Q n"&j\O7٤;j=85pח"j#fe/A4@$#h|2z8:g}};A"I0-󍷭sڽ:Y/w|hs۫cf>xkg~G&;Jx)x hrϳGXm>j:Φl-&1ʼl״{\R~A[|,zwPt1qH0)ۑ0ei o\ r0Iz۰~ +SA Hl8CvuHm0b(H`s2yH>FU&,[נQ "$~I v)8W$'̞YD@M='Kqf \(G=`̄A2s{wOs;u=rCHmzRU/\ B07~82,P%E6J||=hPli_ss} ة8tKGhgn1Ec`Ct C%4H }|?6Ipp>J4i5zezzv Y.jtzb;'rF $ pB=Yڎx|^o(Y{_^Ncohȥ7utuӳ6 &KٜW^hs{Ӓax!)a$ UX TUdb*0g( ,UD}>OWsw~o ]0wDRqzEJ}6>hw겓q1SCzwr (Hwoыxgq|]i߽Lij *C9r3{q<7ODsz4]_mFT* 2Tէtxz&.xtk{L-^MVF#adE@vÞZBpt#iNe&Js/ކ E'Mk(q7J!w|;x[\O}?¥EU]b3 1PϦ=oCɷ*P%"SJqdySbyq,F?ȟ7?_3nmcK7е)06~8^2XBA&^zJ*( dMUdbUAHSXI*L+Ut/xW 0X]1̪HWPF$;7b2#q \ R̸ WY: '˭*D [k{N{pg_!n[k 9!Uro}qriG 6Ѻư͕TnL<םMhu2Bt:0'-FbXs;5[Z?&}[w}yo |}!'Oo8 AfC /wDۿLQ.=O{RY8K^^X.bi73u7Ny ;'W O=x{o8sS}77uM5bWkZS0 ',]<{\pš Jo*V.v׫J1ϏsL~wkss0O>Cq1եEԩe?]VߘItB^>)TQ*O<RDT3 VA *Iw?WgؒB/{u!iD(mq < h#^nԫ'(Ŝ X,ҜPOiuU;F|RAHJ^{c7;v~7tU^1zMwd[\3"QJs 0i3M;VC?ۢH1]J^(21|2 \vI0(Š(j^wUG( a~>C~DcMA OcskN70+cWb`Cѷ"s m!uPLAq8%݁V7} "Kq?% 3W;Oz5L@|Ը%ܳ"sZ!~g pOkv3TH F3-oC͵AdzGLI .20t.1q*߂݊C@+D'C|>+ 4Vk~c6k~۰'$ɶ*\|N~nګL)2/R _>W1uCJOlk̃uBTPjj%s4ފ߹t+?+N-S zv$/*CI`'Ttd?3%l|ϒM|5lE/p_لР-+rs7=AVJN~ 1T?PGwſCʌΟ2x`ǭy "6gh ,2& BJ.;s_A4"zwH !!:o 8/Lu&xs)i[NC{boqeBz]~`rmدQe2 * ׊R^%Aʀ^n -P6?M8wkYH`ёTiJLTmYA`OHW^#ڣpeXU|hDlsi2lvύ:$GBíL0'fSTNؽ=bx\1*R=X=S%=>|hhPQF*{aXA{J]{Y0*?3Dܨ[ :p Rڪ ;|^x)f! Hkπ-mT3Fսi~&0}X"A N0ԊRkӿXcZnv<;qʝOds9m~+d撲V'& 0ns%o|t{,D(^ZO7ʔr mz]z\ՇBj+C`S: Mo$a'^*h __[w.ZJh۫t]ۖd'VcR՜Uޞ*'s?ԃ*7:7]̌zۏ<5>Π PL|QB Z[s+wx31-[{1v*Ojܰ;frt?||PbrvfDaEmj_c=8+]J;6`b\\(9{;혚Zij*WֆYIj/[n^H"CAw95]\B'3LR,, ׏gnҏ Ґ??} qo:s!`gTaS(@P}Z(/ud2|ojMH|{X\9tF} 1e$\8o8}cC E;Ѹ5T%fܖK/~;c@96%t0,v̜5"D0`ƋTt6Do;HIY\7@=gu.~`2}[qяʚzbS'9 s ttfP&iSݞď?MHA D)BB9oY/k0'Q W)x;8K}&f ^K >ts[ú7q6\?NBu;^ymvU=(ݖL Bt"@X6 =(ttH9V>N <ت>Vx5AX*_I A>BTFYskRsFstdfXԏ,#hnmư`5>һEuV?'&@ 00 LaUhд`|- B(BጂX(~tI(Cc+(U6XVQ%Di_7#1? E\IAXT?I"3[ҨUEV"1Ex `$Cr[.SVmg@9RnC"R?5PRmL{g6ޤCznsA0  BH^l0هB=>lr?ܒJE@ B20GvAITCȯqm^^A㖨aI1#? sR,' ޲JeᒧlE?tHII g(_Y8c aLqmiAL36"BycX`7lv6V3(0{6?z;k|:4'ͮLɊaNBtc[L_]Bd=G[ 3^:*[*U!Ri@0.f|ӏh 4됋b.m86 "U \`B`BI uM:ZSj4Ptv7"smXndwI7ՁIV  Xͫ8!Agԕ*fw(,rftL̆AA\EZ,Z"+L+fղo2pQXA.iܢPAo!f첝_c |dܽM}54r1β u bis [5ܱC9kpܩX]2Ƹ00r"dFFii_u3n{LYDmGm"JiCãaFx9 hCHeLJs \Fk "#P#,]h3Yz|%o6NwMH# q@&IԚVJMdeL`@8ʘg2J-1151ĩY5j4P7Ϩ\ S?RS)m1˦ІpɘJ!o__ g*4F@E+ &@ݖ~ _r&y" trۂ v]>.iW W@) tz ѿgW Bnwp\*B]ĐhT")hW-(bzv\:L  (b}mˢK@y&te 0H( i?p \o)'=Q᪛?&dk;&Im/aԟVQXk^) (vݳdxjG  B~2:IW$Q*u?"\>L#HfLˠʑA}ɤHd`!dq.EI1«ˉ 0b@KGUQL0Tw6k B!,&r rk#&xXÄ$11V L$ABd*d'qv=E<%VNm '-rsx!㹐eaaaՄ3_[!Щ1)-P Ls9Bn 1;detĞi|XnՕIpfT)h`ጨki=aCr`jgca@jpfZu 1X,"%dd1+"bPVp( S8IbQJ(-h_RY,6l#d,i aCR։EP1m7 T LCx1 ɃJE"mRj2#e 8CAd+C430P(Yc $?JD8Ov * AQ'Gm,]k r2B,\a-OFERE4 aT 8F(lIĂ(5 F C!{kԔ 'sH'@+q B*P]O?x<PCe +?a>@ͤPaBaZ*1I*L!*c-(dLJ` Zچ0?u:H߶~%A?T;yIw#P쩴fq*tpItw-ϼ`ݓ|nPHe,It}=L2(&jn@Tzw8^̪66/P @nnA+U(UU8SfYbM% -'o[/bpKl}o_obY m2 Cvt}ߕ?pY?CİśgӆOw/pO$2u^zU2yTlO{]hݘ+}.痢v]0?@Zќnٓ#Za0"lտ݇:r\򍛟$٢ ex<2(!ED.")pb팞ȤL 0`gqAR/as S̢!F4~U$KCާIwy,e(1kv*vXH4c]. +z~88`:"N] ~ڄ]?+L:[C=yvs;H eNj[IA (@vPHu=W)KRj4F&e)cvTؓ wt \J>yј/~ 3<'d",P/&*,SMV%q?ͪގq |t-wƺuraR`|̡: X}e Ivcܯ"5 ss={uG{굋2kڽ?ȉ[7<{-q`U~9nI m|`[У#+6Sȷ w0w͐:W(R LLNnLY|ӇPATX(̣@K .a <ң'|¼=lPAMǶS(a3=e "y0CUOO AQ=%U3r`x8֘L(zcʁ%$]bqB?/l}O!9pvĔҖo䶬%(2[lcS|nuv*Ғ[82LY =Sϓ^FmwLۓ7P{?sаPrN e=nBfMb0 hd׹gL|JCKcU_>030$,I%ffkm*ɵ((?%z|= +aoܸ^\=OM;Y5e]޿٩ɼ*1ƤU"!^^eB kZaMb-t_ ==dWySlgfff[ yK]p߼ kgu' &Ikּ*Wk鬣1)oW(x5ޜmеaIkf~[M^ܐX{| "j=G -{1+,œ^vZ! # val-n8厘| yק^);}=K?'ޢQp2ڠPl!4:kމul GQgwl?}KΏ7)Z|A5fO0n\<P~,L)1r PP(i O,֕ ;`G.8tnEA^Bc}Bٱ ;% DX/㬊MDHD=<"?r"` Hla^{ySv x2VrjPu@͊Z)ׂ 04!Q۪ *@K&Ƌw"vNeNNWywb5!Q9{qLy(V^]ܗ N6 !O߄i` K/Cb1W1P$y׎r^*hvqhNud0j w4rA%7v!a(C55O7 $_f;t[xMQÑ~Skܙe eM)֭F[M~1Ϸm҃#m} `!-D #uQƭ ?G/T-BWVv1r|K`-BdKNj&=L.^& R5Oڃ5g3o3sU? XRnpP;]eA} ;x?^ALm=z"hOwXȵ]:[q@}Rp`;8pkg-8dn^wE]\MۑGSKFOwĄ*B֕j cHXXLǐ۞xP鐟3I` ПaN0 $Zk`@!޿" ll8ͯq0F.5Ԡa \`/@pY?s?\~~KRpy='^JH|'2_G$ sEEuGuفTAP$1Yh|'Mq3f+_̩'J3W#L/Tԍ︾/ȷPev#Ȍbã|A2{=_ V#Yi&J AqͰ!|l, 3/>LM~|Ǔys9Sx $*ڏhpO$CPUn^Y[}>)JZ `HEXa'Cdh9$?5?I ׶}o| G@)3P!*댹AȖ͸o4K084/ip pmjTHzn?TI%˨hOtSZFd f#fKj $Eώ.) iT|l]R-0 ,_\\#z ޮWEi{h577l.)oc0@;y ,@<4jZ |N%`y]s3E ,xa]&DIs4,@jK1tA ],AT O[C-l#RX"bgs8=m6kQQ_78瞾 6#"2Tr@(M:OոްP1Lq -F/biٗ{_?c_F<Pf,7=B?eHİ?jӪ" ڂ 2Xږho.ݧ Es-/1'yC yᑱ"䬯?3k-~/S_X!S=_Otx"h!m!~{~>g>(; єJ ~ c_1?^.mGcO\DgrI/phP&`2жQe \ՠeifDڡ?HP(5(v6HmW4:!_n7 @|K=?Q+υ8sA; ?ml+wTl@HsN2@"܀u >۱DQ) ݧp|ҍÑ'U= ]d`Kː„g[bq"Uzoe8BY&$,}q쬫@.F)X8ݎ+ Aj$v}lmۋ&a+\BQh- qx0GZB^B;*B1y&663xPw^S힙K-U'<+VQaDρ0h>lh-fI8|[r ȥ A ZgUE eoɪx2KVPvyM.$fKQF+YD hp:b-C c" ٔJݚش!4d5dGI n2؀y#7i*8(E1-a*?k}IY/FMRMT X"`@Jd[ c׮>j+%h7W*PUq0ar!#:At-=`Ac|4g,Pƙtda[8sq>o8Ôb˕RkR Jh&?>̲+nÑ,G%םoj|Yk5P|vB=emZ%s9,Wt~or()|Wo4e[63.y8z%y%4=RH/yG|/Žߢ~A $bvax;ܕ8꾽WƳgnj?ֵHy4KWI]_%질 <*zoudٹ[nY?ydRmVkcif(Z`F}tB*"A r6; ժA;73CT'qkϫӨ[gAc" %`xOQR%`]o7:{<`YW E&@cp"Ł_I04gprZxx 7_}]~8%]˵{olV`ޝlU͠3f.#g2_:|r44f wle7`d=|ٽnE3f'~{ʵeu9_9IXjh*aZe~b3Oœa5*|fb<=n>ׁp)LBa=P}O|Y!\K`WG{Gk_yŸKgm$KZ~Oʞ*<))dR! nV>E|ߧYjj4h{z1h[I( >mNnrQ Cd'(^R/Y N"c@h4BLQ5K ҹڒy9!w p/:0t7˩>/{?kڇRFI=W_1Iy}!gCߊ]lJFE#xCXg٬6Vw]koopP䣥yP"{݅؎mΊ|C+'/;?n^k(җ)IЃu{tQuW *J)?U^Aa⵽<('GXMճ:%#!F>KFyQ /ydž|sU6k"YNur}CLQ,6"ӕk8ì V6Uͽ4Q`s˗Oy/$Gi~^/ṇ\?J˗2DkL.b"]Ov@OIBE'B! 5cFf]2oĤsJLҥ?QG}gPLA~2繳Đ-NlG]e0r f/?XWCxh9гO?@qgNMPݢ.ߝ{_Sqv7U w8s#)ӷan^&`;vorܔ0;\o=" ~=4ԋf)|]{kP[VGȒP^?{O8;!y3q(<Ʉs:+gmm62tHD EEq\}Qd֨-DT9[V] yE T%zw ?s顯 d>`,Ba`Tf0=0015y5! a )" !!}? =א07@:ZS)pTB?/Oou;?m[I槱ϙ< v5 p~AwpygS>a {g9!B4w 'x%H$2}LB3h򸩜b));e#x?q9݌"$LDNsBuqՕ= "[Yo.0#U\=}Z!}FhJ xk\ 23mxkv]CN/Oax?D4_Sy\ . 0o?5'‹_KW|Nh)?R;9{WlVd5b(}*&Xh>d֯]qܴ~vQcjv;ov 7&/d^Sy; XNhPq{Rߙۺax1m }Ch "ߕ|q=\HId6V2N\?]BeuQ9"충V^Ÿ' ! PFنc:'gsc&nΏ#Dpܴjjrßmw{9U؎WP`z { y;Z6=%9{5kKz6/7ZBXKw)4&m:-=H`@dB2&(vSwt`BBvX1C<7J#3Ԑ9Nat0zd?oW&AXk7cL`w@cB#20A =Kl. !njb؜z#FK*>O=CKo'8ߣҧN@ξt#L<&yJ {15axms |RÒ $A#u>=ZR̫w(yqWx a|eU/[Ib#&Po{q>gik(q4n iV2uv\X ]/\pepJ\xBB=! :.7[f$:_),Pq _mjށ.}lH+QJ4%ϩښ5;z!É"Sfqn"Ӝʨte`^HvY/هw?J"f8Qq ëu$h=`wǖ{:-FBπ-nxCOb ?%~8P< -I&j_70_ﵛ'>GG"mY< VjL0N Z+݆(lF$=_{j!{dLAq7!uӿhg٨6Suo#C[Ri{# PHOHdeے GLx?Whz/3K+nζ yW3GaX"CqZs9;&KPx?c%|Bz>ѼI\ߏ"Kp+#DI#\ɂqCZK8׉x:kZiqo=(­ڼ!  ]Į`/M[21{[ԣ4bXo56낶v+ørpKD Ў+@9_Ls]=ͪf@O8y^c HǙzzx$tзstX%y> Ÿb@x/sLj8WCÕ -[LlEWy WۭZ1HfXJ`!ZX5@Uƃ]ט}yr S_(eAU:H/ng$OLSmCKX3ZemLjK0[)|wR ob|~}HZ7)V"Ş"kO0?ԡA[>߾Mp,R(D}Ч ߧ +Ra,|bf}n9l635^6{Oesl~ͯHBbRFh♔g|7Mcȱ?һXӯ9}u^}et,\ތKia E}F6A>Q!q^Fg'g J226[H@}%袣ܦɝ>I5Mv{}󂴫CB"7BЯLKGm;M?.yKCUiO^T2D$B*[Cޗ"*{ڹU~V-Y#gDEBa$Om{S*%̵OcsZт[<SտVp}f'A̡PI+RǦh+)3f QM{[Rqh/+ҷ'7pܷED1" k&$~2gW& /x p7uN6/7,?{V7gP>IɌ?sEG5['@=[ XoC' 4NPB#3jeJGɡ7V1]I D["_9Dqq# (<_+W #iSD@Y XO4w&3&Ԭio:}sgkeЄAC>t3HXXz>|{rj`AB!zz{WGŘuczX.Ww\%QW$xHt /X"l%bBZJ#U}dO¥nF DuoKZʷ&dJ\5"upCW;~ȩ6VhlT՗aދElr_ɲ{Yk: ;_7)yx⥨8X+UM [KYq\b[ ߼[{QÓ=.le^3n/{+( yrre”M5ȥ-U1(j} B^+ Q{ڪWԦC-!{FeXqNlF .qhN={EzjPPG0 1+I+=*M__҃pBmR+l;_{KYD356'E!ȍV9•~*wQwƫ g`xi:T׃F y\` %q& 9kGݘ|O^w҃M!b>Vv8M[yv5)xgXFdI _a;{.:d0GK"bqcDXA! 3z)卟V=,I1/YXKAYɗ:@'i-;5^w;/=;|ٰ \e7ϋy%ioF0]ٻLw:^FN;w^YEp: '[WeM0wklxcfǺe-j?{b1kIs~AYO[o{=Iߛ2T9ue*x6:>T>؊*54D°w k /[_ M~!- 0AǏg z\q Uk\f!i`A ч'&9*7ߌæ۞^%Z*2@N\/]}KN3muf֯Ort <({<# 1lzGa\ne\W0@?xD=&0#cf-3 OV^(?Zs#솸Q u5v+ŧ(/Ω)) HPDL]ȶ$,o>,oX3; ~ʣ{xn¹-@L"j?yvӹ?˖L{ nǼy2[֏kTJ7> ڹel8Ge^{-bg X+Ě{^>sid[q(vA~T4v`Zt~ϲ_qX~oeM@:??8[)݉3δF]|{r[j !h!O*B11%vRX~>,>~L õm#0Grd/K{nS5Ẇ-mvٙi2 Y`(+S0k[ֳvsvv8=^ŧдص9X Vř;B+g '˄I ~m~gɟnY+cBS̳PTl ժf%]lpR% @$""kAx-J~bXE4qͷ?umr νԛ^Ry;,޷2U5PiAH nn >hҀhX#)C#STec^g~c[`ܹܕA;Ao'LRd\D1]U܆=fY22 OAZ'ac4CyovիfB>_&%xpD^9 ĬaP.BeS!bi$M6 ;D&);c.pD;T`Ok|o3^<Ѱ,ٱo+LH0 rQ<«*`ՍWXהJ1 ^|oQH`(8 (<CN}Š`GεF O7oߏyq9 c)zm2({%;> p QyNZ0zV)F`ֲ'VֱrT*AJlۆ;Sưdaկ s, hX;' J f nJk\.Ej^Xf&wh), b)R_i$}\yn[J D/xרZCg"Eř`ht'Þ1K n@o_dϘ}@VX9fkvܻsp'j0a*-5xO  oa! R#&bIَ=?1|ШcL #P cV!@d A b$$R*"PF(B'*)!#!$"B$EADXB$ $@@PF dXBA E#!D" (FH)IR ( DHUbDHddY UQD (_FݠTr!HDA*2)," H`"@(B`V@=D_n wۥ|;/nk>}pL@};ݜh DE)}G|o_^&N%4@[ T5wl; CWܻZq:v(((wӹ}wmUݽ̄wg>|WƁgZ<𷫣N\m /n.^x{ޭϳ \U.z޻o7GsML ,̀On=lp E=}>@^p0 o}k@HPwN7y$}m@а3#M*T Zj)` (TVʢ` lWwE tR5Zww PQU}}Q|@=Z.{>@30n&N{绻`ξgo/y$1l^û9X.r873xcU9w9ol/>Ͼ΂=@s@A<ʫnM=ۮrݮ{M:C9Mv*srأٽ{>C}AKە>Д+wyMzN +N6@x}J{k>\ﻓ(cӱU޻OsϽK>Tti8Fҏy}P=wޞ:3>ir}whݹk$f_=p4xdqRzjl(I+mW)7 /aO}y{o5Юk]hs{總H/0a#ax.wIJumx0΁ۻܞѳi]tP8(hj`=򃹭=76U]^3z=w;vVz4 {8]u]ƳmtePF"a4[6bnA;jw[m>h9>n[@{L}zհeZ؏{9=owC^vwnֹ:6uur{>u/Ϣ4b|-g޵"g4zvZ T( =Xgl @@4&&dih1Fƀ0LL2di252 C@@CL iFE6jJ~C)馨CTSj=&ҞS=OO)! 4&L L&b`L0i53OzdOFҦLcS5MLS65MԞ4zOT SM5 L66LڛFIM4# b44B" #@LM12444hOE=L )m4Lb(CѩdcMCF4!AHQILML@h f&Sm&&14MM6L3@i顤5ɴLj'jLLOOy3.Ձ$-,VFH .[$k eͥ#Wܟ@TV%Z' 5}+cv^/?[]ɕ ?Eҽ+<9hD>ߢ+1ߊb$Y=*"Q@UUF |cƠ= rŋˮE ū0I*ݫ0twX0Q eCu>'SEFM4pu5CLjx<ﭙR9z}EB0{xJ‚pwBx6`|R)RHpjf(;&*8,6V'pt*RڍԍppVL3١mCoذ]'ZŨr Lx(Jp8tj\ְK|Bvw m}º\*MNBR\.uoF#7ddET y/Û;CJURRT-ʕRUU4k6yjk`ª(}y›îo_F3D׷x{~33(Smco*4ϒaUESx*aN>Y2UJS2xJWB'xԥU*RTÛ^?l^|yp|IDz 9+&uVW\u0LRSLXL*U)R}WAY]%,,~מ]K+JTs쐟ʤ$qp)g}dx}׾tvSi;FUUN1t((-k#I)R̊] US WyZTQUJRz{=> *e)%,KκoJx'ӔȐkeLRG4f^.U$s<0)TҔ٬ R?Q~3AUXJU*wZnCB)RS~2>1fgw dB`JT-ЩTUlW.TZRI=w+vֆUJRU*JcUN GwytH+"5k"*Z849k.3_6YJ>CD`(k(h4P*U R)_f\ )\0JWnf~>S[[`5aUUWu_"3MTSssnٲxuU̦>8gTg#'?z_?jDxDް&q4yCBʰ.+GOE6T=<=p*/hч?F:fHp7|tQZVDw{qJ87tj 7˃Ď-܊%Il47g(k\yQx;5؀gk+:5мؽ!e ~yK~ oymˑ)ڰ]79W3oa舖w&jer'. "I ѪaEaur|'&srϞc+?"wac 19OE6&?(uv0?`eh󜯯P AG"< y $0|kyZ&mr}l>MOU߱>+0ǾӢ0R= 0g8΀PXp28у\o-+fjSSID B|вB>;]UUPUJýd Vw]|w;HfwS~NOLL/v%P!"S(M,K?>dOmP|~LF} ͩpi˞s;EAUD]p}.ڏGʪ Î *[6y'"@:MOsW|>ɨЂ3WlHDR7A ׎r/MCOD5HHN+BCmt-?K \^J%ש^(<^ofLbçݟI-W2وo%R WzF葰+GFm=Iͺd@ $Wp>꼂4`sf D3wydCdTA M8m>7`dλ9A%.glWQPUU):m[զ[D۲Prܲ DV5krUzGlͩH`zvwOr۲v8?qfTT˨88{d4x]lU21k$2]S#*9=Ɗ|C*,kDg6 % M!b7 C94qzjyo,REyfe s+E"D z+zA(\$p0 d4GI0u(HЩ:0qjKTNSct#60)Cl9Ӎ%a :IG<:zB:aRA8*<(vZꇁԈ015( ~»*׻|#󤀪F#p/SRXu 9Ĝg!ËϏ tPl r(F~?LNsg Q܏}kƾXr;f/SX0>T{OC=WI 2L ,JuRjJS35a:J Nj |Ӯ+kɓ{{SFec7Ns@ڈtU=}53~)~z{wUD-m"Jp$(1ȡ6heCP:#mUU"qbq*_3KZ/F԰4Lb|x9-&S1ѕF "1M߉z`PF}9sQ{Q6QEssy\|{8P)!IJC%l&3OnEUUAQQ#oKw::! )t`*qLB1a@ä:A9 \kDF(H qB I"JyLEqtCH\/ |19Ó|9.GpLa01f9:7mS QPx,ePFE`X'zNC4%7ӾJRo(t(h̫UfxLb( W>KrxCXvUtm@7Gm ѺIDBBI):f& hRllrKudgg$4=fx*\Ec6e7QgTSɫ¹i槐S&s/5~D.A:CQ)2*xYNJ7#O:q1]l/C$)  (*T?-zhpumi]bH@DF9UQR&Gԏכ;#>>\88L sfs " Yv_BonXw7ePCTtUP)iozpTPs Za. ):q.%kxà!mxBm-ԟ;Sn4)E)x@ 8 [gI? e}l4&vGlwe}\\l<(׊qҧu.}5ZN ^VU엒JfDQDr7D`0l`3B/ܐjn(ʔz:NHRVEX9 koХ1c΋o.:䕣]P#Wۿf!-Ů-5?$8|ai6@0#.g90GΞS+p8C|eZzVB}$X,FY #Dhy|iZd4dhB$"pab> /&z,&u!LuTTPHT3_,AA""CԼ?PLa@Tk_QL~{iOnH9G:M2Ҽ˱[Õ)4zC:iV9r*E"lhL'ޯH/"R(*bצ%b:W)f64 I4왏z[,>eiҐG(d8&CY(pY6sWɛ5A#)ݨtjwX:6o7}G:rEKa61+GTȯFjܑPUUQU. L@C.tS7provM'XKzM*sjHz`YT,׌<ĴsN0:eǛ'}jğz}o.ƴ7x0Q ( gυ:`"eaxy׮# ]n`x|"qt.HL )=N5oޤ8[=8O}}KkÕ4;YAlU}?4A%1 %p60qiBY!{J>N=k0>"ƭȻ˭,rR2 Eo [|YMmdÞOW>Vh94L*soN|LH8< < kg@°K,3b(K Q&#dO+4(::8(nŷ8?;>~o> G"*H9&ƽaGJ{{!^:]X?^@~=4m:,Da-a*SC-u-7E>Y{r\*'QH{y|5!ߐ5)vdAfɔɥ@m&g͘(xvHʐ):qq1q}bc4@x!daC4ƽ|Z`"je*>9vKIF,|#}hY)ڍʒL*k~GGAAG]ep*]PeJ.vr#dP#Fc#F._ĉ=)=iueFӯc?Z7(e-9THSKvh|ZBՁ{TiJ1mF(FTC*h*LܙnۂoV~5m8.Q$|} \1S1Bb4_jܲZP1 )LMS8q0=.O=?"O:5͗Dr͛YNgj㺧2h0nDz=[}@^\f E$BhɪѪ2G,B(K0oqQ Ѣ%9@`pYɷsAʓ!UEQrGzP="~aK3|w'@ ]Ň)ʅGhk+xMQƇ U2F3'̔ڑJx4b`LD9;IxJ1 +EvlH r7$.-6SYc:S3lҸkr̓5UEB*i@H<\NlƱηg&-Lc B;Cf ]N|ցA'N;2\5kG !n-pk2^R$uD['lbW' xfTcdd_RfEAu$n!m̰GNNe() ռo+( ܆ =&dtP:d"~<)ė8 fA \,LQ8b'G!'}F2n7=Os;^ͳC2+# 0R+˩mv\^J5*U*TOXNL S?UUgg-c`W#oi ( LK"8@.Wv8#pۃcxlvTc[Ԫ eIAD90*0"!! 3H4|,#?4%P'8YY::EWB1X]nh֌f֙!L"fP51rFkͳZ]2fb6z9x]pVkm1yCLrپw<E> OעOJHV$cTv{۔ ֟44l n}6%51 h8H?:x{DBm`O;ݫZUV5c8=ĵ9JaS *~[۾KY߼Ʒ_-}S`3qo/@jX89L>`>e@QOzpNH8FܨxUgjm~QQkHSq '4ΜL5<ŬU[b7OXO7ZѪyǭ)៨f=_s' G6 rq]6߰x6KWd.۽i@4yBQ6{CT]N;) | <ӈ}ӱ>I>Y-Kb1||Cg4X|U|Tc V}|RcH.^o}2Hg;h^'K  ƌK}O:u%>8RYH }NWB*~S.>VZLݮYcfkF/oX~)/ݿU3a˜a)~37|39} :+>08S)'mKKQ27$ tMNAs4!iBPʊ)QULCmU:2 mJ1Z1xGQcOG>9x1d6D%2)PT8ꣃM%(qAQtI 2 6nSt:* Ӿx ̌rCw9K8MYI?.ipC ~cObn^м}C^:~h?Q ? Ϝ}|g*(b,1Tk#Y SS>N,9ǰ,d`=,іB9~0J=0>DꉤyLa0kn?it81E~vjN;lMDOM=y=avG5δFQ|8?1quw&IԐy:,q p熜sG9ԜDf䒈ҁD)9s6t˒L5|y? d۲qTC+"Ő̯ލڽ+侉R4 * )QDRr"Oa-Y2bbS>U7/lR]#ϘE;sN'=u('z=(P*G 4,IXDy] )a6v¹ECRݨ{69V2mۆq|I)bSf9iM;2 83c֟{3-(R,.Э$%Xcxw+XwXEK1bp0Cq!C1$$.xd\1 pNyd}߅lg˝vp(v_GY;%C:AU ™ QB3LUV@L k cUL2nW!a!]`0Exm;uR2lcU[d#0P)7mB+WdmZ×1}/ܩ'f#eZJtoLY"҃}A]qm?"T~GHF-,j]p">9 "c bNIFJrfPA+eY!tGEX`@E9$RѢ̛LcNR칻kwo3xի2Ӭ'Y6])*{r'<]9E.Y6ZC4ɡ"E<̯^X5K 1ѠmRoؓwwwywoPM1kb*ѡӚ '4J:2)r62R(_11K~LJrܚi50:BIM1e[+jCWrcrE&]} ݼכL!TR,WVuD%uA ҲNVąYI>rVAMD  U!nvw(B4H1eH#mG$cdth=']J*lP!` ,Uh=ԡ$[CHAĀ*;'vݙ%{=N񶊢&qvicV,;VBډ684ZB+3)a;FEi4Q40'Sqd!pSrA䈻e@nAۃlУh G3@TQQ;qleu0;t&kH=60S\Y5h]$:\YၐD$ %u\)J4ep$:SnG$]϶mN ^y^ڈƒx3*NXïz&57`af`;!1P }8Ԫƪ!$W_ml`&B'Pzr49GPBp]| +_G}%R(V9p/ߣ{Oָɪ\6֖;6MbaUEAO 峾^H://yOvd ҉1w w{{oCZҘڭUؑy;%ݻ1[,#U KZas{;p8sj jDlo_s┐7i u(#!611IZ:sg}Lq*`ڍ*M,|\$VVtK39fpWt--P61,p ml1fBDEsm4`6*bե$ OJMOY}U^8lVb+"C iᤋyQ&M9Ky}0uP /HI@E0{5 <>*'2{٫&U" .#`ؽ,X}, *dͷvI6, K3Y)iSL"5iQj&1'T} kX69*X"Pp*$}EE.nUϱ4("?hF;h>o.5bCXԼ7@ PTg´JE3.iG'6w Ra<,Q![̵aO^y6;F0SBgh &mcd]:05%rI{n/kϯH qXY1_U.-iPu"( )TA/{Y_3g^zaZ"y9SAA!Q=:ۜNb"T-<]z9s6/ۛJst&5r +3u #I5kI];fcV+nD-0h=#{;BTfpK8'yģϽy·*l*ҖZ)uuz-i8r,E0s}c0};t{<}?׏ӺTuO%ܾ۬1oCVҍ_'?O;CvyBЮ$DUTk=ZgdZD2b~sUYՃ1 x1r9ژ<~UKTKI3{u"7oj5$Jƥb^_CQ䗡!1 IFMM!KWF}/Yƚ-FTxq,V;/_/H#G5Ďm ptۛͳfOəb*B&bؒCS72N(n,#-I4ER0m.jjV/s'VIF̰?+E8x| 66JSwwmHֳlw.v`D p:[w0a*X< =NRUKaj*$>W4_IHi73@ ϒq<]x vs"au "1Ovmodu:Z]Y)ܢ&$jZ*TMIʏjd´P |mrFKL[dck%HH`j-{\֋lZ5^IBdNjCj#aA'bn"UjfrrD娭sn>M[K_#u{7r=Ё)枏G=WMUcԼx9v{} w˖uXacCZTц3-\z֎Ǵ/Mi3ލ豷ۉS]xrps1Jsc*ַp7ϕ_n>L'j2M]C 1xp,qE z/n,aÝ5սMҞs#RA)6;ə*Pc 2i6fFV2j<6ڄԎB7cSuRYeLc7S&NV5jI/甩%1 AJTAO"#c*z~LBx {ejW/r; Ǟx^\BtIW-`eS%.UT`&ۑ" v=UP@Q'҅EaΡF / !Ww{~cJ{OQ!iNQIGAhBV4~?:w;th:Aacm08v^؝lu|MD_K*DhS}39~MRKBr܄aDIHzhsS~c/+3<=o'<x{i )&eI ;>cnx͎ ZW /8=(YD{U/*S@Pفێ!9w)h,j}[N:GN]쬴Cil98σ ]Ǝ +*bөO>+هs@U u鑽\CUPt&C?VٛV:bhmf;rQc-4m"`iEel1]E9o'rFY n`HlsTH>MuBkBjZ >  ^s'uw/$${PCCoH$1ԕ2 Pp3©mvnmqŮdx3fwYC1c#47Û263(h'[閹tXt|QGK ̋5"8P4TDGl./+Q"24SQR?|ld OMJ3hu8E1~Pmm>DV֠ټObJ*V`v2+cMLSљRf"Qj >.Ax>*hBc]]M5&F>F'zRЎo5{;~"Hl\Їu)$N|;TN[qHMe\X[! jUQ htQqVcc͏,l'2YEEEy՘[_(CZjХ84V6q-ÞXN处;}tQ@7mDfx~M;ZDVx mׄ@-L~r6R30Jm'O gC:q湎f?꒧b~weWQ_eX6ztcLlRP@aMr*NU,i $L:zGKӂx˄r "n42V+<"ߩ9cA,WŒu}6;n<#1L/|d{;9R cWH:K}<+3U:1|/>Hq>IMB@R2XEE(:r0 &`"4O/{ylQXc6&pQbF侈3Oyj$nO⸹ }K^>CQDi0Ȓrnv!Q˔#J= @A0 ^30 MTI3L%ߘVQ&UP*eP4 # -sx$$bJpݩt]Ã>EԞyQ5Yf]kwb0{O{P`Q E% D2s-oġ9ط8EpdžQ+äHr $rED-%RF[vq,~ϜxBc=3~8Ts}sƍtaU[wYK x&lhO'|)+*t0ͥ]8DM/.6 !ʊs ?JTEWT!+4T@(A@o#xyhA6a 0"sڬ}STuEi1c HCX6dѣƏgv+]>װJ14uLWlF,xD2s"3m14XIO:`퓁z@xHG>-G].4,A_y0E⸍η}j4Q,D)#{eGn>O2b1sE2HCH Xb +Nޑ\d7j) f``}1[MMnw8uk 0HrP9EC5߮HyEAU`-@RR<]E)(….#19y 2.;NI˚++8ϗe:M_LG/{6g #(nHL0eʟa {A&:GMpGU:7kKBJp)O2OWoYad8X^ =~cxτv } t"@&Pj#cmDgnީ;:b/Idj1{wjzE]fU"t0l=]ǃc+ZMנԫ$uf1{fQ{55lTmvבu{}c?Ͻ7B;=>0R]ԣRCID7b~#/E$ :3l$:&;QϗI\,P>o65#lPQJQC^.JԫV9_mu⊭jNy9w+,hN0UUG֏_! bG#1h#M8qQRFl<1(g]OW1_k\01i\lCQ;G ch J)J2B4h[y PTPQO=b3;5Gڔy)=i;On~G$(? ټG[:#{&v莿.˧[v/;HiTYqE`a'"Hay5vC&S3S8H", !0M;hSPqQ3U TFX]"c NVg4J=|O>1IVTTA8u)!tzv7O=7ޙgIovSɎo=/̾(C0 a=1]3ij-XMɳ*#uHcA&DFjUO|s$fmk^`(L["_/sli0}%\aZJUM""j9zJun!=B<=1}p):"* u Z41J4Tэ"j!6I( 6}PCz~OpV,еFirT8*:8TUUWVD{ ̀ںd>FZ&}r v{/.OA a aJvOZO?<ks7 $րԕ>WH9~jL50t_;_}?C|%(:h(iԩ|tiB&I 2! "Hiƚh64!>߷ H-'XDk>$PBFy4<6vW2nɼtfcyzE{i>˼]w]۫Zw{z;8h}SJ-m7tK! x;oG:qjnkvņ(M,J 12kOR@ I/Ѓ[Y@X=|Ă{%eDETBU&wu }{wʂ3?Y M0) I}׫P\8}_G}ւf(d/}_=Gr.?O К5N]Pvw"05-~ǎZ{Pzp_ ^"S0i%$Ɛ! m/׼** 1qՓ0i&xf`a˟1 W>p0=$] ɋ2J+H+ʵj|O"fnW0D5UA!C&?pDW 뱰N[<@0Q({?=+F]֭ 0b\l|lWY{<2 2%n-8sE 'X\!*zr ;Wm\5E|`>h]N&[iCÊM5 )7}@3gwNpAUQ5AD{}\]UD\Ԣf2 0p) ~?aٜ F66h ckpc^a,Zs|[e߳;3CIQ54N߈IDA  "i)BHS$XQTS~?_C^#2>;C|yX>h/7vj'Cʲ'ze>J vɲ&X"\2#cSt D &"RPWT'\N Ñ:D HnRi)+tN{c[$Ont&ͻma&!fXWt*cUtH4qAX"1D3ubk }2+0no Z[a0d1o܄:EϦ:Gw\9w&Ao{z{t l̊.ͭ X1w@:>8$`|u{o'(ZÆS۶:-N%MgkEU e>ؓ&H5IL""LȤ[ȓQUy)(d -2S%֪jί7687NJѡSomow-^ˇx^>cDԁw1>mGsN]vbhcb*jƥ5 k_VkmB=@-s!e\J;~O#6' }RxJ) ݣ6*Yۗfv&.Y?lm7#Ul lAd (|9|G+թH~T~M)TA414.!x,$usvy|yw pBeQߦφ Zsi h>cf|ܯFQ_o, jBNd|:=؏pƒd6%(̑"'=OW>{:6Rz &k#^щQJ'ڌZ+IV,#,6oWxnw{YKcKqݑljU7MCJQǩ#QOsvzzdX myF#SBM8d+Kb 5pW*XDZ@4Љ ՛믅OEw"9Xf/A9 vt<  eօE~a9<ݓtYgQDE|RE6m1]!z c]=]ps#۪m~wc*.Cv;j>#}5,4 C 7'/_CJ.I F{%ͪ(u"7*I3b j2T=#S0T{ihIڞϒu_%- ]إ tMX 1 X xQ\ӭkPsno7–]Y"@, J2^~9GTڵ=:5fT6iucˆA뎼xBO;lc`ؔ:"b&\y)jss.N}!n@k8x݆$EU`g/w urpELTVO϶)?}qu!li>F*o{MR (lXNhGtîDݱD.1|A*1zjd2hhRJJk{bouԃcYeYsƉmGyHMiÒ3F8BȃH 8(y=U=エ|0jho!ɧh=âS)&Q䭾Sg˩M)|O~y~d85CL3η?< 3 ~PDTU8e= *.+WR.GmqbnUw((6pw-^Rn~͂mr+C QJN`yߜAw:{HU8.2q".ń;I ߂/Q2m_1QO-R5;삫_m} rH6uTl-q1q9Y=}r$9DŒMvGcP8U 񰨫7DeqX(o|*"M4dF/rf&o#@2c"ٸQQv%pE'8.D"&[d)X&Q6P@vSy5U ̭=QQZbbn4]Fӈc&Z*k]JRwĂMA]a-fk"hVƺ [\Y0Q^ McR5EQEEQTUuqq2 ӏ1LY 7lOa,lud<TA%V<|pq3xJ3^]Xz% JƨAQolj;EqmՎ~KU?mlmA*_ ޼[Q/xtsئ=]'xѳj#̑"C:hw_=%'qnI2C=,Ev{ _o~׳;O(kUdz2GYaQ>s\K⩙An+36;UL]^wH㟺 n sc)w 21lȏ%r阩V4}9r*ME>b2zK9"H (zT h FV-6)6˨nسt }MZ#jp Q15&FIO[1Uuc6K)QX.EеEqGx9f3ٟs-&~SL lFkE^#S}&M2>\桔c%, eSqBcg唢$vdrC^6sa<$zؐhL$Cvz?0 q *f&i!W$pc;+m'o1.kLbLZar]ǥ0[qz5mb=G Aɴw<ˁHymkT3#V<%3Tqݭ,a%=hQK,\v::\̻;蕂943F+d!KK?k @EyV14#m Lxf-Dh@,ЖѐE;MMz?-37+wE7z"CV&rgRuC3dUUk$/7&h0dES.1qG5lIMFzCw#%W~ncGnꙂLO57;fM%<-Jl=f23r:f'@*&BD)NwfIdx:uri11F3% XXndlA*cSľ먗E Roؼ&o 3mL d]}^(v;1q eZqf:cfn~ \Ru'* ,5mtLT2aLyP7 MU@`T'.[r WqƳ-b j9ۍw& 3* Js&l\TxU5uqUü- FY# xog"cj4"jGWq{n%1qՙeX&`1oksJ͙O.-%6YsE: E*F:G!0Z+ːg6۵Z%:Uqq3U׮* 7C,g]f7..fZr0E\5r)vLK/ľnS1 !NF]?~F e!9GBgb"{fMғǖgk ޏ'M4NK4fي6|5TĄF(9, TޑiP4HHKg-oծbn΂֬7hڈյW1kb9=4P!QUK"?c3 rJ # eS5Ly7)Df:ѵɽ.Hq{ H0WTw^1d/uTt7*mAMN<'9~h?wn+7o`eCX"3ĂU+8BrtT { Zkϭ2KޙbIDPɘ@CVl /Q! BV"%<:CwY9^VA/ ,:dd('vPS ̪wwh7rTPEK0$b TQJr?ƞ[0 lfyt|Da)P 2g#Mz3pzBj',Ҋv@ o-M,KQ.7_ Lă|<ƨ.*e'ĨVu^T{;6Be{~EWC#.?N={k-˄B,tr蟘smPՍ^_ G&n6ws-\ij D%aυQw83.\ݍedrYhQv=GrqE\\rl MoM "gYajss}yh}@GSN('Exe%@XpFHv9lUEl3- )qyqQ7b㻷ǛOé/DӫY{ieǫ=\ .BDAyr9|mH o-om/|=+so.|;6?>?+!!z괹ȹ<"^^=y: 2 "K5$^:t.5OwuZW)!XStzuz8m_n0PhrD",/ߕObyS5[uUEedOU2kA>i/m^ewG(ѳW?ŀ߯1˙4ڷҐ7qsLޮ Z&yc:;jGpNI_ȧ-\vNi3مMA%rR!AgXNKXa2$d%|ו~R ښgbh~J[Ipj˖F*;{[3oE4L*2쿤_њdÈ1^2Iv9W-h uz.{vֻafbZ^,m[VQvU諧PcA;jܪ!6>iDrdܝ#VY?eA gkőfMծ#ÀB=yԌC 0H75|0sC!0P\Lu%\RJ ZӈX7rlV{ΘM'i5zV9>x7zz^ϗtWH"(z]#lgivh>G$F|ƇkSrjǿ\6.GVѵ0$%.qOӞ}yw5޹Q@|;V}=uvHGwv ,H=rPj̈́I/4=t5sJP3qʍzDLWk>ȉ:YSv&ˆ S+GƕIRh׳"D"GkN]0E4o:<uMzy7IBL;@<d ZG35`"&J*m~΋ #& Uv3߹3Fhv*%oԿ3邇R7u (Ү" OPoo'*W^f[}UK>=sdž'<.Ŋ[`OjEgJc@tݞN'î4:b % 2үG/k7bވ&0GF..G7W{rN5N>&.;*"" s*X ;#QY"(0QXL|t} Ij ?f1k8eW+p7M.v 8Uum ٯ3/wn)pF>zh.KVzcT D `9O$bg=\@8# b\UwrΘTHcBC$q*lc:X,d»e*e[4"1 4T@0YYR? ,wIjײ63s< M[v{'& l*x/ eԝm6r Cv&CSq$γ($ͦrZyB 虔uK/G+gEEzSp֎',$\\CPsC-ޚ9ːc A9$ro!6bn[\Yi<8ޅzkf q4_[/]^-84`˖gbInj}'U~EPDDCh@؃qw<~f՛J g#8 ιsS%p]SS{3U,R^Bz$!9=䬌g`$DoԔsI$>=l@}Qۘ}W2ku+m-/^mvyvU Hdeد75XWSЊVbM;7cw_os2e5㻧G/D[ =Ӧ=­HHZsG/:9q3$2ڇEx"կfښW-a:ĥMR͗u'o%Q/!\UL5t,|8ߒy=l)/BoIzf=WLNN5IH 5h{j#E\|rLaR1n !BXHFEKy.QP|in,Hy+OenKz]o&\g.=&uI=m+2ZyrlJN1f'2W7*ޤh&yx5δtsW;SG&eK.+PǩQ{}:YM|DB!PAF;YRNfvn߇j=JS[h%k+/[D=vYtP^eW]I[uXz)҆dTT]H]2k-[4:y伹}|<~GCp[zvXaJ7n!˜swD/o|jzЦ.,I\~&}?ehz|wFS5}3~gc=NZ`gCA gTDm4NW3TvcR;$e@Xn5KU{ Xv(B>m$#AD`H9*\G/>-/{WCz%v meui .itX tdxzHK,֪BIt#$wry,#u} *&REK}ϊI!m]Zn~"n<3R6vӧk J"*snW/5[*4Ǒc2Zvs_~zHi=aSZ H" !lwJU5qmǭF‘5ܝ'J|-\_1L ]ա#Mp]O }x׮`yR$@A(kZ7T:kzۦ7'WVsFNu UՀϫ*͛RDAQDP`$ a &$"T(J;^W~;/C|d>'yyC`cIß "3)lHT,*`B BI(B Lh4ӟ^aɪ-+UW]^w[2"D5'?Ww}Ϲ[ig-j/F&['=^kuQh웸 x;sv=G\Vެ09%OI[Fc&Kyvo?`yA)*/4%QWDOKF.wɖy:n!.np%G~{ݣֵ=a&eQV ey]_4%OД+>RgknGVH$uDJZ*$SxfS7vԚy>{&6V{ٺ<$" JHk^W^,g̡zZQwƨD 9upDeδ E-I!"]sĬi!d:m0&T2%zTހP+aCt(%EHQ1GrihiХF 쫯FM 7`ppJTD5w淮cF4J 깂\9krH1BT vNHBY N8pϹn=1 { HxmL2<<8)$.v$ '[Uz=L5?x#1֯/DҢ KƜcfYNL֨ O}w<Ok|~~Oh=M/!#2HQ`tفz3]uţw/hl xw׃ie~{-$aLFm#q NJV-w~eQ)`H_TϫJWֹȄ4{uthnzYn>: #ts!H+XʰUֶՄraoad 7,*.‰ >R4t[L40ӑ4ЧS$=vrQm%}ɳ%d9x_v6q&+ By'W%/㮸cRQI?o_V%KF^\YnJͪ@;c^>oJ|Q ( r',ބh/YUg/6}FeYoZRN06"A]M 4{aҪ,k9i#<|Ps0lޏAe'(;.jXh`71=y78aGxL d-ZzȺC&tٶ=I/.i=ݶܵx HCJm|~tɥ2={!jhS]^8D=oxzܵwGX+Z˹4 e BZ(Di}5*s'5mtQQSDC-Qmi;6Wɪ+i䭙|rqŠ8M|POo3zyɷ6}Օ%n`L_|[ÏRt*p2WJv/J|>u IJǦ {1囡]OۑA,U'`?V7qzC^~x޹T"AOaCJƝtCY@CK W„MWtԁ&wf79mW/VXNȻ鲠O'&ŲxB UE[W~ r+L!~D񞻑+|YlQyi׳oN& X&{Pi{=գu}ˆ\ZhND|'ByS{tv;L:>^D=綇s[Γ5˕Z4kA͍kid6jkm41Tb{~ fדbF*"J^.7]X_PVOs}b:觑I_7>,.Uv^ {wXז { X Mt~$ꐄ`8p󐗧m ' *6Ҕ#o1/*"a" Ru T rR;o+f ЯJlfZ-rf4)X)H?:V>j͐VţB{,tB%`a[E@^ؼ@a&*RVDTz* *k6Y8WqhϯB4_qwPz嫀Pe(ҿ-sC=R|rgat_oi?~|emyki//UC[ݎWh9 h&ʂlYyC#5[9>vza ) >vLXݮK'xh\‹~ /g͔x#h+n&@K>^Iz,ა4-zMeA~`!'B(qs_Б*=boOyJ Ԏ32֬U>,~JɕK隯-mZЛh뤒zw| eI巫mvt{E5g>\էuC3N|Ij&H]6L{f[io%y=seK7xXx5и2!UP( jEʿ;oe3 ) j߆ ՒQ:؃T^iU=~ >fz ,HHedDD<2&B0<[St2ʯ9 a%aÈIH}#l/ rma7DJ,Jj*iQby, iD-{GLUCDWWrNc2sW{X GGt|:G~#*xf㷏'E**zXꪊC2㾃z>4hb?غʘpӱDFX&xߡjF%( ` ${~gpRC:AB=E\ C7Q= 8/q@:"q=8ɖ,X"BY8 wZzdUg8jZbvKq+”h(K81ZkA,r}- G# !AF턑UʶE ⱌ$TngX Yy\HoV:(n^8|MYvF:Z``$x޴Z>WqsF|]4 2cgks ,my?Wzqհ:fl]X2:-clgW/}Njc9la$ǣ~#M >:h3w<|76s) $Ps5OH." cxƃ C"8wpE.p)v3SjȦ 81aq},bxr2y,Ir/K rhͫHpC%ɭfIY#JeH{T9* 44,@RE"0mڷ]LLUMyksm[nk+-b3jƴjj5`XشjƶcLH?lsBAIA&ZZh^Ov*=@vlQ ErOSlu LC$4z~e{x׮ bMMKpvۜ[MkiVJB, imml76Zvƛ8p9W;_W~ 6.G'W.!žL`qSVtlR~nh99/!T] ۣ~O>\cOݾ. nӹz64ֻdq|zWp\bƃ63c|ܸM5ÈƛLqgfG/:ښGzsRQ%$#M߃LÈ]|)`S|kg4cƥb[EcEIm|7k@b E*5ث%Eڊ_RcCh ?-FmZj3д0du 1ïdsz'{j$-nK+ s!q@ y͕'$XH9 Uʊ,&*/[V.mG46vjz[-/sjmUAΫ[cMH{N0nLuo\\rsߡbłyb)jڑJeAܔ gxSHM׾M@ZBac-mEaB֪0 65pMх^יZֹhgMeVҘ"5FU}-w F'l-Q[԰_ZV8P*F>v4)7@TsTe;]~ҬhE]'qscEg7R9 ܻaz'66Һ1D_?Z@_'w;6cFj3(F(ڀh,Y\.[5 d#H=vk!)^'̮L=.@RnLI +sXss_ Fbۛ Q1E FʇYlNV`݌t d+b\rInn}zܭmn\nW p*׏D-`Ƶ\j#bJJk7ؠ¦_qo>w*pv&D#)խpOM7wQKzP)&.5=Hpkm.Fc٪I-o3q"n+$vĆ% &[{ڶ$Jm?6DW뇘fsr6xʼn[7jr[jsplWx\˜Z*4ٖJ4`1Ŋ4dTXj15]50E$[H+W51j7 N+xj XI Mi0-h5w]74V["bb|mw?@?8F%Y |? 8V⻌ y}CƵ@Fc<~H=Bw-ry&xs}l0/5|*܃6*E7՗ '%cSV>e(bOg8Fb)"ֈ;caGTu(22 WR}GH]2/tk t\>)S#=cBDLggrmKͯC *|h2hC:vrUw]k,o][˥EQFǔ;2$^3לrws=X " 1.hf?j~m""}{'KZ:Ӛ+v+Gs?iofUcCUxy#aíTa-?@{Z%լmO'潁]1?UM G%M9: 1^!NMaKHX.]a6jW9U[:wvIL7J h !/SHYcXI<\LɪƚMx=S::*<0jtd#>.x)*ãBVj(I}ciTXhQ,*;<6>>Y 8=>g" wmĵ@$ z֕ĠI1GͥbMr}$1K]G6i}oճYXB&E%>AZ6)w]%4elyXFw+4mt:;[rhnj*F s&1]ihysDYphƸAQn"QkDb@C FŵkrLT\D[ +;emT;YD9>6('9gArq][TDA n F0R6}e0hzW@u3f_6ȹMĚR=Guyc{X$$F ɥ􎞬pdft+)j^/z, 2S?H?IӳWvQ.OŅSsA IrAxctrj.]r=?-m1M}wum?Hka݆~gm,yLg>;_u, +WLU[˹Њ݇G6=ʅ9ؙvƕ%H"a)֠ouĪj o-*kA7OMf ;~%fr c6=Ӕ~ v4( jmnZ;κkrsA3 4д4T)XZ-w*`@k'V{y|sjBYzG1Lb (XMn5 20 `O&w*T`&6j4Z"quoMnj6wi[$Pam9E[k?/7e|w]9:rd1zL&l:\"[`B|pIQ>K/_V^Hn^V12yv6dXˑԦ2Ҟ}u4 lI1[ R}PA,GyS߄wy^;n+<9|;:_u8 s AJDPop<zn֍j@(Z-TXգj*Z6ձۘշ6lXڈb,hkEѭT[mHmF\&hصmEZ-ThFF - ZjV*mj6Enm rm-rM"V6TVmElVj-llTj6ьmmEm4mTU:csQ4j붌H ܶʺ IirXjOv;=~ |/C5VTVaǧa($5K "*",Jʰ,wyiQ']M(6 sW&naGlϟjeN')w|/(PR mmlQF*kbƶ5kT " s7{ztoTw/݅˷R"8WU}DLf'x燓evvn{&edۅpy(󣯯;nnkS' \\-cDX[-65&6"1bsrsmnmѠ4X(ڌm+1T[6"j6KEIFحwkpAk un|tЈ9r4j#{9ŭ<ͮsmɵ*R$ȡē=7,!l nVu#{#H@*'TR5F*i>Jup[q9s[5G&6l=]>=X0k"Ug,:9:,ݳjUeZ:q)VTN[wNʵ·'4~AC(&k{'d9y|ތ>՟{UHjFWTko,`5cFm[DKi,whti$/08Xѷj45䭐L!ԦS4Uz>6?[3s~/undQ*̰? axܒc"$A@E1 CU9 BM2 ͹lhmfɭ,)ZnWWuei$XW]ֹNnͱ\FeLb" *  u4dWwlV,jZ6ܰ@!-HdB+KXط-ʤڋW,SQQsEEQ&LHFQwV?`\oUއ!LD9TkcmLh{C†ʏke$U¥&LesbλjI[wfT"#FUCM;~d]n;fsw|+Y7+}i7B|-V~kY|ñW2c:}U,u?rFƓ[$Ͷન"؀A76(XܺTgt4vgdHHexq^)Xwlё޻R0Q46f&gG&?2<{?]sar":ӏۉrD|yx3n`UlG^gr7e_F۫ݽQCQ? 5z@hD77KFt¹]#湱+b CήHx6~fzQ4+7) (fflmxxW-eR?'0')8fM9wj3ש_X] lg^<0bq,j-ԌDͤ2< OdD6ӪI8|KqvIX|;y4wd6Yчi>yuU<jh6_{mԜ.;5 SSI*(ėG&ո4<~=+w mshaً2:ݛPUQz7a*mVwW>vg[Z55R*YmR4"P2f$ ({ԯV7MPN^$UAI]Cשi~5<'X{CmWld}T'I"DV5Xu:Grҁ'8R$c>pX(ks7]ѨƣpaQ3߶w袙=A.6Oe{r mFFB 46|]9 U4Ivb.ӗ`{kC:fHdlƈ"b6ƍcccIm3(6 EN[5[~^};Jh ʃ#x~ AŷN̲rJLSA^{U_C3[آmb]q,kEm`5EQF6 5iZ0+w'rJ1DbQֵEULLI1-7  Y~Zt".۔g%iOJ)S[%!:'"^Ō E>xȈʨ4{`,S L*;:Vi;>[s…W3WjIf|N +vO,/4?E ^#۫5|}nMH9;.c3lNzx1gAM~R%IRZ~k;4ܦ*TqOhcx:GT|ڟ<9>^ ˫&Y⑞ʱ}2D- J2$σQ:ldw[E;#]ݵ̜B6d% Qب,-Qb#dCRi3kywZ.coЁf[5OF1\26ٸ'5p&ջ2iPѦo#Eʺ;( )Z~|n {VNj*VI/fJ'uޖ^T{>=*~ KbWZb𽾽+k H }ݔwyY?,S6cάSυXS5WZ|Tz.P!oߢѬ]u:lv+1Q^l۩S(mu9MҠ>t '8jvyTy Lxx=Cmsk?}|yP3湤v+5rh6FEuybJō9(6-;rzq~_㚲i:^>}M7o_.h혯/UԲ?8K iw ޏMwRٻnWH͍? l=mr4s v},/`x0R?f+_4Gy1|Fz}nxug_3\0V{nsU巫T3%URe72G{v4|;[gN=KuҪL^`([sA_ghڷ8V>ˍe;c S9lwCeTrzPV־YbM8+YN=e_v/hӶv$u:,v;&vU0zU)UpWMj~p^ϕ83vjiџ7оa.? @FFqӮѱnk[nc[[͊_e'1WI|<6#cӻ4c EILTm6?sO'UsGgLaz .~X|T]軓FtT<^c:_m Uו O4ҽfԱ"M_h1R\XEf'yUq!>`PCT:W0rOS gLY ޣR7mXL&No~}1oY yWeB_auS_RA1 d}Qޣ^\ͩT2Y 0LHR"F(EƏNx=ncBR`i"() ѡdqHbȶڝGu͍v]Y( '1p)~6b5e ׳wJMmK̷sT1g8X"]LmU{p.;C).ɖ?1xΑڬ RtA@ XÆUF8PgC;M~R uE=X :+&fb%̖"CC]QIZfNk*~U(E"%WVZ=fPTA54Ygz^[z?2MAa<AtޮM6=7\̯dt}4>@uffɴ(ہ MM F_rW]vhn,b bҫuVXV @ wx I)5չR6V+#hjLA]vj*֯5^F+- d ^9-FXRj1E`b5UӝݷHFc`7v_x(5Echƍh*vb#FDTETY5Z)5XKQ6md֍(4Jح$[Д@g"<{qP0nw9ӈ)C悚.W2LL 4HRS@FMQXεMx EQcT@ :`Q\D]qy0OFFs]?M(a#Bydm:Hb⠡U6ZJc5R*>{<ҍ|۔"ߢ% Rť׌k豮limڹyaӫ+׼]mz𪙼0Cx!^Mo r|1 WÔ3/\|I'0Jb[Ch{{8|7;g? sjfs*q&[ӗ-E`~{ybGG*4PLB q ;;"wՅI|C"("+, T=yLTIm-I02 -elk86R?"(U<k}ѣ] Lr7w~hPTR0: CCXɄ…%?z=3E}ZB(i~ϓ!oO)bm[hYgv M959mp%wGuNoK;CIUMZj04&mj)XE`eՁKk@  wO/gM!swpDtA$vBV (@ mRp=VuU9  WS458U) >>:`v +@5+~01Vi j>f#̈X) i eH rEy,%Ѕq`D1 Vmd(nC?9j4_RHijP,UWjOno˲;gyZGi{,fzd*oz Or!ČpN  ̷QY:ZčcI1xퟆ%듦w:" hKLU[>G15jQAe!y0q!/|Sk|w5rr=gyTŅ*`cH9< άr>}[Ck/~G$}XDxQm ]mH(1:nA3^]tmF10H"CH9t Bb"IX\kDʈFǚ@H f&BbBCtzXy9d 9̃~(}_.FE4P/-CKRa3Zm^`bޮNJ3{z|()JI[kFcE(بQ +*QlI?깣X̙,Wcd5EmEIV*,Ҍk &\36,V$6Td)TaJQ`)!Bx%!NH± JJPH @ҢЈB"@R"<<\WAJe3lI+I%i%VX,mF) 6McfPmhFiS+bI-cP)Qb5Lf(JQkn٬AEk"EBH~WimgwDEwBW"hl [D&Mdap1u @:R(jm:6$-eukmXȖ(I% jJ™9m-sڣ`Z汍h5*MX\1hD&R KCC@ƌZMF#j6ɨ4KXLeBi)r2Z@ (ZrEl@S(.* 6lҵ69VkI4 };A@ U1hZ65QF*Ѷj+mE-cl5c`5QF6I4f#QMa4Iэk%оnmvYR̋)&aXن4JM66ʔdS(h,dҦb#FiJ]vdk34Ռ͢5hЕ{ͪEcEKUU|èS'5Ҷq/^. m14݃GXBW*(R Q hPPR>FH*)JExB (,NA5ͭ56(*2FrhՊZخ5FV֕5bd)PQ_3W&U9Xh\!kWܫd/Qe-ykjr.]55ܷ#^+k<T4 j6Q+ck)aZN\qSxACГxi"FP(dsq5 z4,K@dEkW9nkE*([,VEbmTcUW6W5\ժMQFEj[떼%Eh@2jb@0S%kڹX4\ UF5EkUh+rKԬ햮FDS<D3 MuLe* @D+!LTaYe<ө/J/0QZļbr9だf߁Yn@h!ݳkDkS3`PFhmb)O0(9!;Xqp0XV4@cC01"a11! 0(`g9!mf%VHn+tw7¥4h5k`F,dNLiȦ+^ 5'./[į)EPbpLMna ֗ }M[`ExДR(\Ub-9;Zd&f B \U\JƵdd HPU Q 2ii!:W%pFI*-[TW*\ڵb5t)u(B@)R\\@cUHCXQk&AH\h2W%D&T`O (=>F:AalT:0]U01`S-Żk.X"9"m vJD9)Xll24Tx*1.:HM328)DZqF*x$7r (Ug&m H7h '2HۺwPѺ t'A6dw F!\LUK %reQ'f"1ˆDf@ۨ82.EbhS.^pUUQkj\FU\hkr\T[j4*^oG\Ź$ b2 LE `6ZrU 6v\<#-hyg|"(@a5 m#A (L)B;Kxwe9j*uUxkQQFڣ$1608ܡ8Kt9C8=L ;`BD1ka -lQAd>mAXH"J4ʊ-kT#Jx))yբmبv\l!˘fhxKqYtU,X.C X`ykؐ朅ف54-Yj12\XC Go(ʶ[DԲa0]¥J3w#j6J]ɔ 2\A7Mz0(ħ,ʻj0`G2ГbV+L-3EeQWt^\hyL[l Xۼm\p6VWoai dC@( y0A"tUH$*@chh:!E@xjuH cXgOLhfV<ŭ8Xk̽mjkx9@cMUmde2cJRDdls;3K\L=Zڦ&uOKĽ.25+ `3/+w\* a͘leawiB6^.1 .USN:Zֹ*rwV4ԬK V1ښ)\rwZrO0S, 2,qԤeđ eKIq*YTU#Ҽ2u4Xt\%T XT,10 Xpwcy.mjaG0Kҋm=a,+1ȏH啡 ir ̬kZFܶ,aJ$0DU"-+K@ 9( 99 nsZ*cQmFE嶊6ܮE.bmͶ*mZ+J "aE !C\sk[չbrvmʊ xv8`;6N< >Zץzs\\\+ܶ\Ʊ\壕BeTS"i8kuR!zRm(U H8xkkXYcl زMMQHm I4L͢-Qla"RB*Bs#5H;Q[6sTc8I]T/ufh;TYhKQ ;Ome c6Ӗ53*bi6JDYi#LlhvŻl5QXslhZ֮'PT#Js0 ` b dH 1pa-3k},Z5j6 Ū.گ+ِ!7gz-$qm$)x\DS654h Ң k7q Rc9$m&4Ɔ n1,e -x"¤WCI݊P0H! @Ǝ*sHRfbPd5jŮks\Qc`[TXr[W0sFۑ6أ\mUW00H" "R-"(!WI(!DC!V`i5)!P䫒%9@d*йHd.V2PJ*@ҍ#3(d HPKH TUʣW6mWKj* hrL@*U)M@+K\6-ͭ 6rT T1@eIZD@i W?>D TWl %T@;HjI&!WL(YG%ā!( %2@i$ hS!rP{)AӕQ 5U ntJV Ld8[72׶mYRf1`4T4E{>W{g"aWtwq[,*1)5m]\$lǾol,i"c(ѽuъ*(+]4X*lG/wn r/;^{k{("5R1dѪ3FQ$Ţih31|uI?b ?I$p 'y6J)y-(W>f5^rg) $P@YJQ(E޼KMid4$5)#M3l2'JșSME2RüF*DGF L(UY1%]#&(*iWmݭ(P5P2D@b3Kr))IH6;ͭ$t1Nu1 ON*]͝&0j%_U nėG35g'O?ƭLwRMɪWF f9QD$L@շ)"=-\|#@lLdi45В}Z=k }knQkPAUk{y:O} GT}[r9r"G/<~;~zs$:Ts:fL#8G>}<5cpeMV8nO{#@FVռu:̢ip,sqN0̆1QQELrl"%bnc}G?MIށow{ο_Mz 1k۞/ ,MMG?Aߍ{1ڳ{7ʣVVڪ\":7'.3μx+\1@Sks/nK D/"i_G~'/Gs<7ɄЙܯy#].p`W@R3sOٗwC$wB \nA@ɿD}㞸0!<ѭ?| XFq?0O}#>ޞU!]c z+!9b7esY}g5!#PQWտ\oVDfµF~RcQXjTM9WTۗwκ(iYFѢBHm k1$A2Fsp5_ovگUylijR3j=:?XH=W2}ʵ*w2ڔf='XBR9 RR"LS&fdHL ș2J$SD]z^^0vLb M"Ddm$2bTcϦ0ѥE2XZi&fJt m pudՌb6h>NejÙh%;xm6iRW2|=tvuxu8rk?@PoQ~(S}DDɢ'u}^GCvJ;}ELpx_3 ekcX,\|~-֯ujTTQE(j#?5k>#ۀo4/JW0[bpM&0qt>l/t:Zq[L]LMW+Rk9p;"vj7,p]%ɊQ9q=cÀ\|ޮ治 Pb#J:aiR*Jc'f0{==';=v$pRDRQ 7hMEDh"r$ uv#ݓ]O::^uƅ,yh')^c;qQq$ H!ugrѠE50(PD@A =R@ҽÖ$. *R[$ i1ZTC=>Owuٕmw 2^7 7ѧl]STo/$u㼓se8G]4xVٴsQ:n ZއL0M{ۢԗk9k("uNֽR;8tKE)"FqEqE~҄Wd6_VJ"EX@8-Q@i"$1bm#Wڛuj\dA%"0p0C#hb$XLeh5a; W%B";B#=GW!9_6NpX7vA4tg0/WV2Ӱ ! HXhH_z2P ZY%VA@ri m1(3PG8ׇFˬ Gͺ872F[l<:ϡm\Zvn,܍8f'CO25s%ۯo ]|shg_gHÝ1r<ڙ"v92/[.Nͫo*#)r_ytpM6c 8ȱq7ԄGe]֘2iMD[ZLyP6l Zke "[w1:7ܒN. C_U6Ir ,Q:7GB " xEDә1B ]^;! #' *TuFn/GQzқRT&fQR$I@@U&U\wZ A17Ͽs'F6:7+)ܨ~׃3 _nxOŐґ[D蹆L3q~eLfoLkw֝\_=ËoJ=?|̜[ӌ/s<3}i TĐ1 V%1SOIDHJK&b0fG~us=w)x& pFۍ=Wm(V|6 ժܺ Mg2K~QqEWӄlQK H7$C/1"m7ܬQF|6̀oO*~oOU5MJȇ_M*LNR?|LPH'q,&=^lNYo'ӣkx{Z Z|"x3d\bwX]S<](NyUPS@aCLjVRƔ VҜ&+OEC441+X2LEɌ(B@"b=! }u#v]޴Ge#rIj̑Qz+B?Ȫ"r1*JU*I*D tJ@TR$F |UD``}l?g#t~os~"]ǔQ9d|n6Z6/|21N`9 æ5ɛ'~O~8$T}"uHfaJEo/hIgzYޏο=Orܭ1qrz/MғS|oy󇽇ҙӏxooo>wt_Mw}o}ߍe'oW1,<7{q(z=C} 7[//_COwz>oy5sߧGs8^۴l[v#~=[rA5"}"l=ݩ2!TDY"=Z dD (a(D~~a(hQh6ѷj! *@oq[{zwG|_v9NkpE39}oƏ򻉽fq\qqh}w}csvry̵95w=.>)aTBc B-͡Vx~׿oGMs"7$%XQN0AF?-qcô՟#U!6]Я$-TɓYOתd=Hub&(l("'D"N<7}υj=AΙ,XË7a*nX΃DMp/2j&LD!5^MOXOr,jYߕ ׎$$5j}?E^s7ykʈy.k'aʇ.qS0ʧ_um?fqwѣ>o74}Ü-m vdx,^l_ }賧glß#Wm"]?"Aum;׎i(jwsGny?m>*TRJ*TRB (P{J*TRӧN^?7oN{ -۷nݻvٳf͛6lٳf͛?:tӧNy<<<<9yyYeYeYeYeYeYeWI,,.YryYeYeYy8888<8qqqqqqqqqǏqqqqqq 0 0 0 0 0 0c88aaaa0 0a}u]u]u]u]u]u뮺oAz*TRJ=鯚joz?_GV.UN;3ݵ哵WW/]DlթM }LT`ۯ=:8x1/= KW JuPجcPl` vpX?C':RΆ_)ܝtagi-Ll-T{.v*>)DseJYUk̍W4 2 'VKO >/цGR>iԒ~rҨUVQjavOR%x a"f ??zWz'>%,>.Fk?6n)Hң;fUk#`:}W(o_>̏UBH!:RADŽ?@݁Z1HvV͜88X^}6l1-)f# .pT荴~> 7djq[W{]2^#޾&#?,q/o\g]i"ѣC YqZd~FG6bc$+X0JgcλAImV4D,wq6`kPߏ6S?~喉].2^Xi⎍9u_/8>ڴ5J=?jk_` Ѹ! &$%wg#mۉ37XS%igG'+9k_Z9=8}XYm>IF-'$ԝӰ@ڛTWzVam &@N9q[oH%_ TO Vʻ{-Y _:\6s/;뻄@r 0 dҍ XeT zP1`T!!I-]%EߍהXթnFԲWET% R,#hBC ,"4ЈbckShR _6l\XiE6#Iy$ѪWi9̃2HjN: C3'Dw9Dw$pL0`h YhV6P4R((UTEڡxc"maUs1 3v~[_:_Jrֻ[O5'= eSg0s%dmcd'Lc&t)3=''VS^0NL z*2&ȟJJ`wYI5dΊID5өsWcfƤ0`jQ5=k&Ӂ%NKD0a0rV5H f7ו B>0Rd!E zU\fx2Ij,̯lAFU+3]35quZfvYqw)l1f,#aL-:5M"ZL,{a^KRhsp⅊\:S-CUӌE+S':+dJX n U ʧʻkb-i^ُ&L겆If)Ƀ-WPu[J 6Y^-ɟ\D" @*mw<:tDׄTS|T>G>u{_; ~LJz~?o)ljgmk,X]H"dB*4j" (((UT%J: E$P@PP@""*("u"%@L9dQK0̻Grzf{Ox`>g,¦amZH޶P?L^S]{ o4eX5xnT0wTW>ZXjCN֛Cm}ZUyFOfZp,/n{]؜V܀z/fIw5[uJє|ptO D (B'9~_me~k*C'<01E}H8#;Wy+eu+ǖIl8Cra4n1׾򈐜Q @&@ݜIV.i C)]>Qٮ1!Vg)>Y5G;ܞ.4e5 NC~ӿi8Z+r֕jjAثlnb PM3(LOrOfFyhNy[s)L|Wh ۷t]0#lV S-nᲊV8>YՖ'4'xiϝ<.B " HTDN71Y{܆涹rc F!"5Kbs$"eޫ,QSWg>#t}Q@P0 ʕ2AF$A܂"ݮޏ;H|U0wFnϭrXux/D=0mtѬG󞈖wn8e8gf%mMmɨڥ^N:dVj;2L*c[MZk[j՛pMz՞%~T)OW  , %&$6ryy?|Olm^<~1_qos_*͍ C y^&)[}mt2}߰f.LĆTthiWcdJR<7DQCa@ B0:BMH4 RRE Pvhh,EhCH(H( HV"R *JJ(TRBGXZ,i0%( D!!QF T px>Iy^$f>{FN+u'%Ӧw#'JQp]J'NK^mX)IѨ*"L% 0޽;QBQSCoez(oe7QkA%]{ў9N:h6Ս1XM,MV oT4OyœaSu;}ަ5YbU _/ozIZ rq)JBRCk29 |}|59X#ww.~YV$WZIhp$p,帞7{~4861oM*vH<'r-VT^*+z՜.y|oz3?_6T7ɋf&b r 1}2Y)2R5uL.P_S@&DE͒ae`^ 'F/SoR>˂cTv4jCœ9I&,pA.JLtG$l]"LF Ɠt+7KJSxabSHAv;H%R~a:i0fd+gKs+3۷\m02qbTw;aOGofkiGkڌz5O9\DNaoUK Js33A3^ޙ88ѦK}nMV ؖRl3dߙqG7]odg5KQyC"o*?;!QU!U65J;Bb ˸& 8i4cRo_`Vؗ\,%W$&ږ,[k\WUPnODgkGa_ogc۔NJqXTe[RJuFa+5 jSz{#n*}'.5^9v싄cۣǟoҶz) Ň ܫ~Fkg _11S! jjw,յ'c'HTp=GfDrgrgƧ[#Z8&2{wm|O c2Mbh mUZXNM%+Rϖ/IW4L& Nֻ[΁huNԀ S [K'(H B*n{), yUU_}oDAzn{_Z!DIW= $־ [RLRr\nڧ|MIQ$?lQ(&F@iPyJ,囆- MeLKQ񪘵C_=Y:- [(&H*=z:]6"*Q'wy߯>=Q~N݋Dy7oh25]'euBks}6VqAFq7,vgӑ2$pJOMh.s!} = _Jq<@Kv˾̮;gXd]re7OXM.c *,"0v|ūS;w҈cY3߲Ϸi)[2޳m8,0GÎc'9{:?ލ׺3DDNv:TrLW^k[/ΎS^44mlܭnņ{t =Xihmó :Әr'h? rmܹ.cp2M[\]e&#/qqz"k[Qo7.݁Lcb6Շ\_cMΆ>6QuIq=XYnA oQWI&$"vQ4)r&M_<0ɛRnaaE!Y4~AmïS 'k @5٥54 !0F+P`4j)[\]H#R)Rv&[T -=6s,>7*{:h>ymZfrU+J)jJcN  vi^zm[J){Y,6.-m #IZ/9j|F8Y:0@PPE@AAPD@NdOF7O~}9=?}~[1`0lMi Ɗ)c$J0c6`ה+ o|㹼.6sOkZlp0j^-&K_Mv/A?Kdo[2CŒN5I+s/=}Y?O8-'Ţ1/k,1X٩/LkoM~I~'~1'ٓ&M5A%C[<.4˒VdH~t;V }}w0'T^Oz8ohw: [F{>e[VcVWeP6;OJԳ;oږ:-RU1ʔf5<P6NF=&.5$GWLZ F"#t_Z"ɻcF{Ink.MVX;p9&' SfFz=r es-"16KVe(T4W,hٖvgZnbu 5a]c -UIA?egkUu;!4xLrNfmbv>ns< 3fcz{'U0NMFCv6ZSPpiZpbmD{7#3š*$ q4ǚ 4T@2}'΍ B T#x"V<#=`*J /Kɒ$wIII$KzW}+zJPU {˂F*Z2"^{*H&=z`]xGe6r}elo= %c1p6+7&^V`fyn΂+&퉡W{GF~(ZOlLo?U!ZD@CEDj DUE iU0 dt `4,VX&bbXX՞7bFՊbR Ye HPWjJDYP*,ej n2B.-!"u/q sHQ2% kJR8%8Ʉ]GsڈfX‡Fj֙l}BZ^u:\%DCnֲĽh1q@}؎T@:1i cYC: "՛ʪ(|EЄDHB.cku$ъLI$\Y8KFŐ!^'qayٱ Enpwۛc;4F pٱafSzr%+Oc5T9̒tN|GK/8Dש:4wu< 7YY;[J3YRR(gז+ukfUifbA]DFѥGD`*jzZ,,\ضRmS&zpk(ޚɌ+֪zeU確W ZS/RJQSn2KGN8wUy{^yd1QD H)ETJbmQrc4^kW J0@]X:FWA]fWv {r(ͣ[p)?s׭h B %E!ԈF_҅>EnJmXu_+d∈ -Im,bhRK-ӲnUJi !ho`Xa28A]3Ec0"2SqQ"XT!iI$m]Gxzi x[rh&K'sP D*ރΊiMb*|(jk YfoڡMo\uz{Y|SU9 'WNvz,5jfs2LlFZU*'74gⲇWYSL wSN\i[mGǤQf/"OY&G|fK54@j!ɥKia7 n'0Є>bٙFJrӯZsIVONZsN*=F3c:4c:rDil2 N}e7zhognK6 #tŸ*Ԍ*fSi*AΘ6AB 2ͺcmw8< Ü.*)/4>ƹ:%`)~=!NnE~ЅGoU>E&U^ L, LILqt:u!z2Oм_gK~G1k$zuZ0ȠBnչ"Gvn݆ܮ?ZC,%rW'+ nnןZ#E- M<)B&@ :LV9gD͟m@|g&;]dk.Stq^ J/LtQ^,n*z Ӗ:_6 2f6*~mshPΪUpk€fE689o׻4<t ֏oŽ8$r,Cm`LS]C~s|RIb{EpӨr 2k 0@a) Bh92^ދuGunK\Kn.%)&<srɐdh5bRSy[^Wה-] -AhEBaH!Qp D!R3Bk4h$LX3I1\ X!jT2 ̘@PQ>? B# B6<tE` D>e q$ $  f~]yL8 omTXѤMЪr۴7NJ'v']qssRBW6f 4br1 PX!O#?oС S,DNEAv)s>fLi7EXJ `I!)Mc[F1B&Ii imdڑ4Z("VAHyze=_:ZK$I=gBG::i\PDm" 8TM_ĉ`(8RT2°7; Ѐ^'~WQQ1M8FK'PmF0S (4@OdM10/7S:wtai{a, гSsTi6QbQn9܇ʤҏVQfE;2]&JjRIhߙH@ݡrNgGYd)$VuCW}擙;MEJ?NiY '{ pA! I j)DbW2icF("C&rmrE km$h'/EMi%RTA$XJPk*^akakl0̵hGUPgu' 4mקctQKr%K 5 ;N?ũFTM\#6RH2}Z=K zSmKԸam9Wo.~:l%2UDA *"{jyc*z _>CjvVw/r!&s'P85WiJ m=hM{8܋ԕ_Mϛ ^W4_p.︺[4J:ţӻk#"٪,+]NOKdDWy,Ȕfb51a2{3jƭ1N)M#bZ~'L:v )¾-s7X?rIYxߩ^Bg]k$S\׸W5cq\k.?Ls&S:A:jFw~[UP/HRVj=mzWqbp{+`WBtʴ.v L Mbo9ӌ<@d VkԖ9t] Չ4]98)ԩdLb2*U'Eu_BkXcO\DG^,=>6FN;Gf-Dw{$z$%B =0#I<ѩ/ZAH"}/lD7J *ju"0Jk hɲzWej' ZA G >t~&~$/[8/B:J^·yJe0(M?SCϯrOX͗I BB 'Zs_9(g79sr,(\5q9*L"vSܜ"s|9X\3?ZMDpv-LC(m;tX=8{ |D ҠڌTh6v"`0hÑ;}JCw{4 9\CN''AxʀPA^ԢD3 *%R@$w,Be]9Ne׺4ٱ,tI{C7G!W̏ w>RJ`1?b@fG)ա>ܟC{-՚VێWWCPU,co6GE6'lsJ)hT8]ko3ӃÞu0A"/Ze<'|{_ U(P[ƌ(h5٤ اߐ]ac#0$aAA>+4_v0Q([dE!롊` ZHR(IOtVԾI+2uIˤJJUYdt4-3Wj`3ս5d90#'8Bugt a%jfʾV-R^.RlUV3Vm,V-#h2b3K ǭŦHe&/׺I,eLPmsR/fh3>5{z^=&E~‡?43UEd ~jfY:'{Wi|5uz QٚNJiӦ.e[,L! eN,NYYjrt&:&OM5:',͢?+:Nd1r[RNb}y#ɰ RT#31jl"Ch4S$*{3.fN\wXYI.Êd DNq+v2^#}.֛:pHΩ9j皣=5ᡍT(뺝1WS$.;4JɄS53 HRy6Qn:ѷ ShTA?]@,C8hD,(ݶ+ Ou[-9} J%I;tqTֽYw&hS{r!V Y#ÿ25qtC3X,DL@]D:r!qqfi04=_8Kk+$b>)40rE,4q/T/ڇslC~TG}@޷A.%H'j9%MGJ?yB_7_CiB\ݕ+.Z7iqtG?ct9O}3<0Um"FiG6IA RcbLijSw)t(,E ZXrѻͺo x)* !2R] 2qд;ؚHUe TԲ?vP2-E̢4}/,~SeÊ[63blך;F#_n$0k7%e#QNJ̉.&&Ԅ#"Q&]g'?lǒԥL%*tzWJԞS**!$ #}?t$Lқ/ZMq?;Vv~t&~͇J-Xe;k6>>L!B9W"ms~ҸzGna |z:v͎/["yI)Bĭ om+A]ERZד+y.J뤯'ԃ*tolnx4Seoӷ- B $5adhևbrB[J=DO%ZCQ% 34;`x{'Wc#XCidESnW&fT#3CTCF⿖H^SOǀ5^EP2VR$HU$DPaj$kQct{UszY7#% (B<3*GSqGQ kIim̳I0qm]@#\4Pq#acXُLPATJ5>4ZZx"M"( N7@B@ *(Ogvy2!~[] 8BS{ٺpHBv-ioq:NgڐT;2HR*6EUL+U%h~U/3cLUY&@ւC8:^PD\\\8mabbbHǎC&x0E10>?}F'~|mvt:?X֝HU)Gjͥ' F8фax>?ӹJ *TRdu_xhz_.cE1 rRLn$dUIz4ѣM kb5lt^w(Li$a ёB&6LVMK1;nwi8>7+;G+(m9ww۸QͰD0흾'&T٦_nѢޟ<-hX6yߴ*u}u`/+0?!oo)U|tVyX*0Wv~O/?S~[d535ںQeG#*#jJ!ܽ+C/xLDoXlP?zP$Mޣld ,LI9s:Ⱦ׫?YI9+e$#FLh~53}||[-6eMO魔l`l-Q?LJ58raS.[X ( m+Z6V!|NsP9!k"5 l5rG Gh6MmCj $$2  0l - ԆBԣ,(flj44M&Le,-fdAɒB Og˭)jdّ4 MHkdڈԘj53CIjd03PԱZ50h0il PkI$53KI55ggKdl̀ #G%T D8#@sh)';SPmѭb'$T{ShkljiO%sral m0RIb6 -EM κ sZ4֦6y&5 S5DT5S m6mq-~iW7d-5'iC1~!R"QyfjO8/tma$d4C|qz}OF=ER?ߘo?mR'6dQ.d\@R-b.̢!]gZ>mZҬQdJn0JPU@a3TmߨUk$côך7>g|NlI;pMHyKsU̞։rZȌ.R{%p*\L}冠\yu$nCHd4$+zlC鷱b+Rˆ?[6= m5DlBw[Hӏ><ҿ6-?d'wy/wٝGӶ_~'[J ).J>b=Y =%LPrCOYdVG‘[\RCkJIQLbUd`Vv~3/֚βjϮqlPP0bfm6L&2 #Ƙ=MX9O=JACAU=7`pڏ*'#)\<RJ/ŐRIE*_|'>D7 vg|vk^Lc,-~w@ 4Es1TJHV!*զ^~lګ'';vZpYW-//s3D^{ӟWџzVD?H ɓJdzk5ȣxw2E :?\IY*DCPBjpb`Q#sJ.XnK$ĸ@:~^u_~7#7q8`1G:<eqj5OYó {Hk8jj@j}U@:4)UZ]i 0B"0ӢVգ ^zGӕPfKjS"uS\3wrKJ46ptJMo/^HjN0am9pihqM1°4l -h,͒U:cl ]L!6R0wt(II:8 N-,9(V#u.`|68Dlm \VQ]i;wu栠|"7$ (фBQ) QV¾ڒh]R5iZjBsd;yecmիi&x2̺;v*di.G&BK]BftTc,f,!ZFp[ejF6'SZiLZTM4j Y)if9FuœYUE=0+Tv#po(tAΈȜ(V3ۊ0]Br 1dc5( -Fkm- e9y99n`Lmu7s5*UQnSC}\"eĐVHJ!*T1@l@"5Q@TOAE<jE#eM,-l[baJQb@ŵʸKMcXEܶ㖜DS'̢MfJI=of^ Jo4K-"#̈́!-0=h$%$LkQ1d@yZ}ᳯC0-4#mϳWFņy0?6SH,Ǐaؕ`"[vj.fEHY۟ K(boϾ̊1I F 'PtpWtա*%ϏIPJzR*irVzV$c"ڳ5m9N[ùMۉnPM{I5-YH&=^m(ӧ_yUTd`#f9oX V 0BY3 I% I\D*K%BJNQYHZ-4hjK™ ڃ;'DT3%%!ؔ1"XрaBENh1C[_urm^N[9[ᒊ!lU"HB(^& Bq8O0Ǧyǚy|ߑO.F(Dp!8B"RqW-%dY5}"Q 傡$H&d- RPb beDKਠ(!a|y"@" (~^̭&K&̲aDU,2paQffbaaf! L+1I? PFT4mL"w<#|«a38sv.pb eٖcX^1 35L]0L1@P' bDW+ 1O,eTX-ET/o?~ol4fkòbzJ(ΌkpdY|, DS*E 0ʆt,L"UV*D(H 2qLI6ێK:N3~$-H,)dE}SYзj|υID)Ш*j5@`UA)?TߥyL0ⱆ`4s@,Ics$hYAH3 ŢN.%(+TAT T}wKuC̬p0N\:Fh ҅(8j}SDj+C5}pi$%[|뤒S%*ʸS?񌹎o:X9iIT\1F1d5rc2rEkåQ*[:ktӤ9!swX:q,%q-H"bX!H=# '9y!r@:@`%SK2 ©`1L`dG'Aɼyٌ9YtK(9d \3 𱽃A 7ZOp,adN_h&ívo<7FM$ IT0$b,0~rݣvXmR8+>*Ekc"˄2x0K*$\ /B9|J/Ba)zO[ T iXRj>] e上r,O( e\IzYcsD1Qq;'{4JU!df|krN S 'IeRyCɤR!|I#LY$NDUS15Տ=~|fD1M(KĒLK (a8@m:n:`ޒ9-E`Ed;(?wpE#G)TX&eSprlU*IJaS%IG|Ra|rPU'R(mқ4s B-)"dR4}+`u5>~Vij۲{xՕ|坃y͈@ ;DHO<7bE+Nn+wfqdо/~cy3 !H%|R0O?|3%_k=ϐ*_e3Ou[I.4 %4*!͊;nS H * dv@d) (iljBrV{N)Jc{1 oԓ$@K Me3WfclIEm^WJ1PEXhm91ᦑ@mM5MjJ7$Xo 7&'Ig.M7i@S7DmAsuOãs[{o[3lhҩ 1mM*%,VckC*,2I Z4AP*F1*AYƣLma9I ( "$, ""./*IF(FXUyֺm[ETc$b-ںib*I$\-K0$@<:T%ea4M( y8](5ȝmdfZ;`[7^X1 hO/,[*]%łM-qlL, \ihjp#(@Q>O>>s0,;g)ˣ. C 1C /&`\.f9&#L' d98'>aTO$ƧxN,/kHF(|Ew654YӐahZWޚ, iPIʹekG$ntV[ /[l::5Kh6F%\<*SY]cnWʣXXm&Ӛ=(ª[ocW{od2i BJlQi#ul\4n7cV-TtJA['=bboj"TP-Zэg8blM#JI 5hr& ͚zAǘQ7SʀNUM lS { \m- Ōye,m'-pt㠨m[-Ɣd[s4Mr׎^5sƽ-kh&gPbOg|Z m+m)ei殸W-Ȇ.<:sK0i 20 VRw=w}/~^ V^|WI$L$UUf*;}wN=6MdSjmMnͩ6MxO22EUUd'pI|o xo ټ,o;n6Bk'l``%"l{]- =}W~˗z㇇O#EiPLxG 1dH PC$r/l(mG cd4K扢l& 5 C86 &siSN'Ia,ehL&ʦܪU'%g\h LPm%K$ɄaMZ%K$`R02!FZELS)2PJ/JRP !9R' hrQt_ҩPR)h`/p`.>HgUu-W]w5aǥ,>U+yCF# km9q!B-KlaFdW'F"ϗM @Lj^POaӡdY2$i8Y2m# %ɊZ- xĢו#o Iw#= K_yzUyΛ"$ k=7l2K\vҳϺw1‰*ҮEW"*9_ES{g .x&qqA$|abQ4H69|ddzL7~c\@\I$NI!1!C2it:W1("X!.Ma빋yX;kԬ!n MPJ}V뜦ZMi׭>#2DX*0"O~/2MDu?Q!?|Ϛ4Ư$yX!T=޿pa ut6)Q#+*Q_|w4blhiYxsɒw3ʿ>ozC :ñq@nu]D] +2O=@잮suJ\3Q]D>߻NL0{c?U}ZY0ϫ#]!&q]Sh. Vz 02dRXS*(*?y/kGaLv5x6s I1?*K$>hT)1CĊbA?Of 0F9d#W&*km}̪{{f9>L=D0pX%5 !32+XPbxGdwV"pV+$O^%9wE2OBr 1rC~w﹓|L㍒:lЌ}%!sL4{Uw^9uK #SZ^Ntl61QhO|[mA6CikZTE=^AXv _>Ow?wאz2D@Cô('v,#{!7i8u<,N4W?(b7_5߅+L6Mij|?Vu{9)3m+/5^>'?D=0\.%7yEq!^D}O46ȋ19zlXWuIb\=$5).f^@Dwױ '""!n/zJt(HP@GE .Ats[Gnd?Y:]{گ*a0TՎV`h4h䒟07?E Ph(L2?h|jЧ䞽)[0U˦+9JuE%nmUUUeZdd3֫9zW/326[RʘTW94q~k\CrB"?OC؟{% [u|jpZnC̖T&"4Q)sDPrR0-`aOguA!oު"'H1++V8Ѐ$5,J?j-(bPE4/tLIu@~t ?T|j_TVԄPIԄڴqHG,l^(هkG*bx.+ņpbqzI~;9͚uervȊ \īW%j# N4P* bGF.eD_L:fABchL\οzW銠K/ opOG#Tj#ʢ{]kDC5QTE@NV:"dy9־ HaҸX՝,u#5P@?_ 7F4$6Ctv/V, znPw0m1Vc{qϙ}Xy~߆/~:1OuqZyعtc +<,6 .CgcN.C.%"Ѻ'@5 VQ(tOc]WPzHpMX[~29  7YJSZ a{O+ψRPUUC*ml\.oE]a{ݼ٢Zz$&U"Ԫ@^gmni sjESOxujM\ 8P$=P<fi3qYU5$PMdjT+&lV˱{#c@ٳ#oղ664 <]AW{p09V ^7q,3#k}Z+Hƛg4ӓr5Zi h:3YSY/םzoZtm2ٍaOO`5#Fn׹3HI~ˮ危tG 64(7U\v0foē9ɔ_jY&B2$_!4_-oo&4e/&DU cdx&TvbtݩZ3*O'5$ֵNMhSR5K 3p 5 OjMvd6dԥA)ֲHQ8bh)9p( 7*19=i`9&)6%,1FId)Ax/5%1zmS06ZJR‰4oC?&tцh%Qʜ׸GC'zU;+9 >uӮ Co]"0='ʞiZzdfhu>8aG)dpg2C+_3G1-LIMtTL7xӧ*66xϋ@bp {e|D_ rrs=)d/u*1E*$hI6W>٤9~&]:XfӠ䒣uJVyAlx%% .΂ %"O?kiPRI?Aol e݈kf+"$GW_*pDOh\^-p)[G50 Krw"Klq JkK$ >l(bf=r!O> 0I#}FwAz_qiqmSN]ɿ%IRXSNĝgM fx"ӫl\f >CK ]H ضMҐbA;4bG 0%k#߁A8Qc`>oj|۷ *cG=G[1$bj :VB1"[pC| <0To{"R}W"o*Fc>Վ t'sCƒQ6 0+@`;))v0yٟ}cFCcI" z;F@6QУ>7agUi&Yw-="BD04rK[R i9C*?E }1 Dhjɹ@&W_=G}Ίq<~ ) }GQӖkY^ 乞|nz;S&Lb1@D@3 X1a"HPۛb>j9eP:< bM koM3Mp6ޫ78gXfN/u!rqVF0z|kg6iFXWf2u4V $ׇDljhjUUat`k$4Ԑ3K7:|E igVz5#ٗPұyi!(*!w^K0MB0闠}/׉[pvRm! s_ N iJ [dt's󿯡gW X.AB:̎io+< ŌO0_*2R>]PUY6[hZ XKu3 `LC>wkˉWUJ#6'Yc42ˊ$G r1TE $Fuu:_&k8 I*"I43kɉjhѭdjZAScuNh4G&t;JbJSFJTHm[t6ZthFM1,@(+rm M 9yf]ډ l˨QK8#3pJF#"*Bְ "LƑ, ƩT;mS ZH<'S@a*$Kn]"_My:*Z~3}_3 yy]n=, ;T ̙}̶LQ dk!:ը #A†})3{l-HOoDgZ;> ExHkl{DyLf;sgx<μ_B>gӹ޻Ӟc7犉{puc%x0) XV9\HDWz>Xa 0[ihU/ʎ ++*<eeee[ʡ.A.(=0C͝}JUӰq+ʯ|,Xbŋ%ӳ^OUzJ}gUa#Q 0½zׯ^zO.zc4\V3V'[-kKG,<<<;pT&n۷nݻv۶:z|JOdhffE̩&`֤fmp=+Ǔ)VV(^^Ua7l͊âZs}Wƀw!]O)#yj rK}8npdaZfnozuZJh+llo1lB (9|}tI2JT*}C ڦVfS.%Y$XSGQUAE)(?ƕ792.'Ќ(* [:tR6a.k.ݻu۷nݯ.Үm_A-]m 뮹IOTE2,1(T4|Xؔ}$~*Tz@Q{HY#_ZjKVLoϜ+g밻Y5Ooe@ e0`){'''&߿~IMV!4un67C~߿~M$%0TA9#=70"0` 0`y|zO0'~aF[KLd M=WuJľ߿~߿* jxv.\s;:_&@QZjիVZjLVqԮ\r+.\'opAE-1.ݻvn~?xHu`2D rDũS?/eр)Bai$cæ6:{/q6oZ]L-*w qn P#Ly$%:)`q *f#5ؙ!Ӈ #?3.s5?C*Np0b;}pӞ|6c0`Eu@wgC?#B)0?ssvvvvvvvvvvvvvd̖Q PDD:%N:.3K#7>u9RAXDv"$' ~C&߀bTE߮po8L4}LeMz::::::1mђ~{4D_I}t߫?y׉%B[E990ZJ$B*Ku{F5{0'JlٳfO 3?2gO>C:ZjիVZcUVZY*-˗.\p˗._ć*7g8l|ϟ>LC,T`iFpIMpb>ޫ}7^Sp|O*4A]vŔ80Fk*-$א'oF9Ӝ}QI$06+ʒ&c{B t44+K˙lST+"h+sTU7 J.V䫒\rƮ**T{,-dŔ~QszcASTMQQWmliAҤXBi^}#Lcz:sfpOo:q9,FȷrDy$.vNF Ϗs:sb( 4L0^T 1ٲ~&f2ǻ6e8a+dp:F|Pϣ]P "YTUb 1V> cce?ADFH|GGlh繹UUJKUU+[EgP8KDG T{ ޟ{ooCAH L%c/C$zW[;e(ڹ/ HOc1*#ÑAB':"edH-Tb r DمN*mB[6_`YXsB ! nËIF>~H/gy_ ~9朦iLJbF"'+T'XA E3?L4ϓsDvS;CkDA*1 f>hQPYrŗ.\4cϗ:̔'s#)l9iB5`*&`Gf Z sDvz~ `"[j-u\O}V8H1LR,Z% R%ԖN"$Εkڟï`pdv_oYK1}=l7K"]-kgu0Bϯ.OŌ8BG7GMCtT.WI|fK#jmW *W0a<^o8`8dH> Cdp0hãG{$49:j`QBR(1F0!ӥHCIa,C8E%㣤a ?,eYp,̙,0YgM%d F+A4h$,\/ B@`44U88WK)fmv!0CV%GIQGɓ40hjn`< ӺB1cc&OKt,B(750`gaFƦ t5;M1~8y?haNSdv{{M*l6՘vY+ ´5.fjhQ"La $QH?LڿM#?hϚp(QpS缚W]^WB]4꽆C>fmGѥ}ILE?݀8CTT` w_pD{&kPz|ASeik`}K:#]~7|wx8ק~˺ :S=TuodDu'F]Hq**;ޅpG"I^=5UVcٛzL4[O/1NqAJՅLA=cQqN7]giu4~O;GONqsյL=\pMQ;9P"K"P  ;σ+ $mƙ쯑ɴǺb:Bvj =hF3T~{t]YaNw_L 4.~ čƀ1r[?Q͟ cc'2u!{C],ҳyQ>_]6( I]1n 4 M:@P4\連qO(>ˎMsZTUPUUb=MQPqۭ< b*u>;1+q|+~7dHIiVP(W9;PMcuPg$4 a2w&nIA Ed}3M1;GQTFD`Qħއ)!Q,XP]>O=Nq:)A$#r`hM!0)M%Y1#61&$9S,L &"Dcu&6P?!i0I_2S#Im. : Ov*!~]=+ƆKӦmѿ=<689˳ rbƕ?onᮺrud{+zx^˱rMu+;NL!"9Ҕ{ںTn+1\IRQ%6 dĩyQ$MM?UǶX=9XQs^^2X6Y4"{-tJK/P}]"65j+VMfrut4zÞi*ńpW-0d{T0 ո*][>㗶v{6{1bE|#E ~G/1y<:lKSs3>{ihG_8O.pC3e)-bZ\ySaVlV(bA!~\gzM"dN?:h!zK5_5CYMN* )k`O8.ITҢ_^S.⃧.hqYO_P8]eЩ z!:Il?]YeS:W$*vm{nM+Z}p)EgDb^WP$M6 s|<zRxz>>tvJ~%}e ?#|[b)~DY"'G+!˵32[,O$Z4*HpyDr+2CSl);#sM*dЫGmF_ǛV!YQWޡuC]WWc.ڃ6"4eRKv=ߨy;XNrk]3?~ѕ`U3EX%hGe!4aMVeFZ߇q7Ր3C< &"Fdn8Mp.U"S=%jᶍ|۷]Ѫhy㒶r,mtXUYXQ{׆W$uwl8߁Q2EFso 3l}Ij) %9i'mKKsԠ YiZ6[{I2ۢkYkĦF ~<=kV&_pTqz`VTKi) W$<}L$>ErJ M~߾bhЄڨ$">k/9gL$[k;r7>4kͣҐ=]StV_|T}up iF mVdm kXńl8__&]Μ x* E[$&g7h$pv c(Lo͏vWy/__Mw?an竃,!1S=s<8m{`xhzH + FDu$rE)wWRtI/MZ^RP^kv=|FƓzx"%@d{5j ZIU{7I\vZLP4)dD:V}Q@l9Eւ%dR*XR1F@}N'Q ߲ߌaƟYN͹ gdJ[akybG ;wɒӾvu2,24Waid,-. uof9Dh`cdP+GuÀƥrl|&oHa ԘZhϰmvs K[\- l룛ϩ̈6>wʅ 5!-`tns8mH"۾kMo^t SqekCn$ E2RpՒ4 H qtjbsƺ;ITWJ~ 9Oy@*=nܱX\oe :O5}W8ݫi?6jhWjj(Ms?g=W< ТDBK ,x tkiܨ3Z0zh #i"#cw'ߋک(QuP>e`4PCwrI 7"*`1>9Dam~O`;KbTI`Yɕ j ȗSۇ~mtۨu{{:àhKL=,VMƓCJ6 6 H6V:I7s[Sm14>;v^^'q{I(v ERÚzVS4>$RvR7^cd.>Re؋^9mYW7G_HTV2 ' T=5<>ܒP(ii2gs?[[7^2P:?{'ln>v*`~Wc c[{mgX;RkMiԾl;caZG$~რ^&WNBd-k5L sKeЮYwb̪MM_>4x~ F7童xUE2RjƪNmQ ;7poD$UINS/9̕Zo8Şi;qBbU wWlJfa[/q.X%a9쉞296=pG|g@\u|>?c}뾮پvV13#[xu2WL5\bx(P @W+XC>ky[ͥ+ܼ+M7s[ã_w^ɝgSkNW]k0RЫ q鵅:dݑ8k)V%3޽cpD),4W \uU"x/}jG%#Bs % إ"H]+Jck rrtvŇÇ J2l?7#Dj&fye- I("V늂)0U=|5Ǟe&nVY.}ƗW'1m}|ܣazq굴 PFEXOx@/ 7xAW7% 8W2?pk?"@+y78?&Ytq ZH.78lKQp'-o)d%CcSO)v>hDP`^_拓ӲT~L:e\MHI %;F#@  k2kRc8:!Ɵͭ1ʦ1ք3'x{vﴻM0_u+3^nѿtS4TWŪRxC5Ĭ1]@VN:_BIi7UEj⹯W-T;:oG>vͥk?Ž)f&&jkQxL%u$i9mʑaBrwmVZ¨#d8߿'8k5ҥ< ~*6Ce!< '*pwQw5ϒz,ZbcqV~[gg>y}?ҠDhΕn3QswsF_*ؙq-Tqe_iZ0Lq Rx&ﵗڵE˲rۍAT=1R-Ɛ\HikM%;DGGT" 4tKiel`s9ܿrMN_* s7r8%ij:{erkҗc/½]rzB_78ƫt>NEv)0K؞tު$R7u{ t_ ??gߜ߹G/o칪u<2On՝KYR,#e{h{LN0:.\!ج;4Q"°Q~I@TCh9-еヹi1#6F|xc}뽜G7[]oYPO? N^+Wu?v?[b#_5?-kBb4XV}wnzVd~U~YbV*=>_n}CMD5cX>`4yc 4IĊB2PA?g~8~#E"8оc d|g|-0sr<Iy`49sᗇR4&hXAF,U}NϟYtYG_yPS[KbjnBHߋݻN أ:I׌|0ϡ[v2˼k~ؤsvMN*5#Yn.k j g9l5;Q)69\EP{4>RPuA3%H`ŕ㿩1Qk]?UTC~(|kZ'ߛoޏO,8' NT??xk'm<^C~~=P)0_vr(AU!:Y؅Pqg)9ƌMGb>q!d\Fn9Ȍ(rO6S?)Z+ 5F/6T5Q^53Uc~uz$u@X<:>Yu5۸l|]tBp6ִu譽g`-Ǿ ?k"($D@4Vktk/Dl;y2\3*oy!ig@r"0Jm6 WP% %.99.C0p3R+W_LS[0Z-Eٺ3 Vd2|!Pn'0np8fQq#(f8YAV \/J0SF&SƖ1DtE^2(6ԡa"8 1ބ5O d0K$I%tKv`UQaDA/J ֹ$DɬŢ6t 7#?#>!'d60r"W@a D@?>(CEXĖE'OL#DCw{̽3;}r7U-7};}^_]yy!yyyyyy2,,,!YeYeY ,,,29+@D3L}Vg4`v "\\K{^5PaF=(dI$@tmg˪9$y$Vk6pNiFO{@pPގ(/}\!$L4~CL~Q%~ ^`#`o>mG`aMumYX9])Q>odo#\碪6k$dGX}^I%"ۤII106TK2m+݁ݾr{)?:tNI{Dz92Ö(T?ʛIeF,x1R#DA AcLZ'pB*n&}; aj:{Fq\=fq6ɱ^yGK\*s\uYm٠jfrmuXVtVe%I`ٱfjƲؖ,[Fp=M?3x:_s&;7|~_'tC45M1PD" @j|Zȕ}/2ܛp̩ͯ!ʞzj0I8R0Q}hR}L;' 3+)Z5MSmx\*nYN^-ܔ|i !iZaNU 6t^Z薋0=MF=gaT]L}̱.}_D0(KS0"֦|;xAVo3Hx P{\\u2-Mh{LA%m!hl엥b8`FPMÐ|/&Ya$`\!f#ߗ uk`$?fMeTꈹ-B4-+b> ;eCdBe|(AЀ>ǭaqF6nn !/8xq4LD:'&[Fӭ\kׁJ 6:*Tʠ"BD1"IPMz iB4Gj/q-؆ؘFE&"E4$Q'ѱ[6Ta#)e`NX`ڏJ ^m8Ə">gj- SVCى r ӅGrL%6G &Q-%"20_IF|^}}W[N(٘d%Lm)SBHPl nLN1AP[0U)q&$ !2iEM׫h4#bHp*H2].FIPR@E"1ԍ|Y:02U46!)ri@iV<0#0;Ҵ3 rLձۖi[W7"%]r+s͆T*Gq}2$D b*" Wt8ʞ>)  Y<O!R@nzL1]AIT:4֩w.3J3-KƺֹiUKPo3#؍ʱ"al`M,J2 L8m=3fgCMQITW}n{]=-+IF>V~v;O>W9gAyyu\Gw- EHAqI ӜWdw"c$( 2(crpх]6isnJۗ0A)B{{MR yizF2?ʃֿ@*hϫ؄e}V͎{!UU.,4b91{7{*co:׹sM-QVڞY@:h$ fB:.ٰBrx$c}!1{{|YR8Ɇ xm7|]_Jg`%ۛr.㰣.h($Ikx׺cq40ى B'IU !aNT;\GDTED:#^\UA;@X!^=+@p0Dy.Mukjn^!BV*%\Hrqod=.Av򽟗H^Fх%y{^eq׈ިb5h̶)5J[%-QO<ȏD>=x"1TX b 0Pd7 n(ܑ17ÛuˏGϓ1܄Tm'8QVʢ*CaLi4FTr&M8$ܤVD@A=PtpHL }eL pHR-&4G"1&F'z,#z:a! aK$] Mp ʡ-I.b946v5F×-Dq cn@8p"B:QDXZ%w+q529ePG S '.௑ﯴwy^cFa9:CPCv"&z1TmWl5>DD߼TT+0cpuyΛS:gS>c:'s"oos|cؠO]ơZ]NBgO ]XcU3ɦ^=.MS̞s5UCϮQA'zrT;+'e0vR竄.@Jo= !CETBE::LTy9[jTݥ x/gy@:ט Qݟ׹m{zV<*ǤGDBj#/⑕KHZ [cFƛvT q,)֬z[ֶy(S{C! ?r3M[̰3w=f:u/+u~U dW|mtKp\<3m<Pptְ~G?ԯc lkaQ;q}>3?m;ǜa>oWmB-Yo,iQ4;2*}{Ύ`CZ3t1RrՃ"mݴkszbh)3pcC-6CnPdF޾ x8+e3>y.rS{;X~OC?Wf.Fs N;k8y"EPPg6Bd3ZA?:`բ@b6V@׊wmebx:?ȝN&wWE!I a=]&bPOȉvo[iw?Cr!JsyT E\I X>bo?':WBxf8$PUr8~<p/(gZ= yKLL3O #N@hlK V[Rf %AGÍz~'ݨe.~gGvhu ]?{ƛG{4;,;34 չ~U52BSY)EKp0bUDMƫ͔Kӣ)Jb#Qįغ4u`W[^bH/?i.+zgikjv_)Jcb  L |O7|g}6PCEADbQipe9'}i,z7r&^$xcGe?ʓUR"e)Y-pF#|8CXA9~WWpx1|=JX4@"KMu̘1k5rg+9[JuVV⡎ *0}cpFMF2D=ilZ% ɊQED!$v_nj],PHTdH/)rQhDؔX+!92EIU.<%B?Մ S|C8>4+4z O+t[),:ڀD̃/xӉ{` az^gxGα|:yN{_V`SG5GV4+꿐M^98ԳJD+QĖ_ۼd4ޟO s>Z.!1R>Ii@(֐cK& X: q s]a)Ř9)zMz3Uh֕i]wW.U;ZpN=32DUf`t7MeUJdx׎GӽT!^s_ػsMGGA{㡽916X#r&HYRp%jt @ThyÆԽFn>Zq fN8^c[<SHÏezjՆNJ8l5Mz@ʀ~|E^jA04$ƒvP@jntV?wpհ[~P/Z/M@07k]df*zV=oT <՛pqL-ťɱ/D:KF[fzVTm7y70aEgi|M:tDivV1Oܚ 78QxJ^mq>vqݴNtb0ew4X>3g}5|b`iâk|wwhfYc9;L@g"Bk5Nu$ ) *U:ҝeSJ>壱1ǃoK<^ZI*QP$)FGEDtNO,0b}y9O=f{\Ȍzbh(#wܢ bkz]&.j%e:8ʩ``cАΎb.NʎplvHFߥs٣bsj9o]$Tf ֞]a+nmFnsc>8G\拜JïgKFawi0!ybCH/ճ`X̧ yͬ#WxDxdWP e5,6(ʬHPhZ!R u4.UUPUBLE[>v+m(7= q9/5_¨z42*nL @SA>᳣EuXvS\D=)'b9!?@:;KUh{P3403 H|G636v820ᤏȿe/j7딖맖oNk#k7hC歘ch]fp|T Y5bWla@Vcs,<66$ĝ3PSCi5‚IfJ#$WqyJk%l齗ѪL)`Uo }) 5T:m3}9d&dMF"|ZU0YIh~mK+Jֶ1< <44'l IƇ79kJ\i=<(o}əISJv&Sǜ0 Z1/c ??⍕.n~"s￿{W¿*4ͰCDO=;x8i cÑgnۡZ$mu08Η 2tp JbiJ-]3k_Gm 6d؛N7\ =LKZTPvZ> 3col8E!7%GGђV$F~c;VYG 4ni#e)dTC*SFnoə]۝uf;ϭF3(`%RP"D4Fј sV$È!g~%E]^EU!>7o_*ȴzez)KD]>ĝ L.AQvrEQENg7@"b"Fg̘%ugd6eu9%I[חQv}O_eI{"vQ:@Ud1jQb@H@<`=N@"D ͅ4;hS}?R7m$݇WH( i((D)T}HA1Fh ZصV*}o\-Aj *ܶkFUQ`^ϔchifR"$^o{/`~hyGŰU\8XyIK @/H"v;bj1Ta D-Sfnq{ءs/?g=[.z/a"n]$EYMwuyHxgZ#$M0{B#11e#Rk2!<;5mVrVPp|YO7 }7؍XK]H. 3™'8]Uu3)fO=nq8L1G.bɏ3Hi0yTukAG55uzg7e& m$G9$^t6a92xJD], ǃ|I>$ m#gmj CTK/*6\UYѻ?o:Ih{ aMZx NM)0qBOnMr]cSs +Cf~pd"zyDKQڵ0 *&n^ZCj oj]OYo'Txs}kַ}^czWY60+4k R"Xv(L*ۊChwH,Ey;[pGHnZԑЬ֑B1#ŢT^UA ?*+ F,L *"_b7woc.};[qSpIjA3!`$=r2zZO.Q,Iz19J>e%|Z}h`yu.pAEa$eQsܱ[oSJcTMSыXWH9f̍ @YAy`*b.#z*-|`ZŃAv&{(: ^g٦Pӳ2S@*!j«Eq J j~8|4$Cf]>>iNqmwTL|d͕zu~}-}.R+r̲P@Zc@>5 } ¥[;*wz'At5_q 2GΘ' ɜ3G7On @w;w̡8FCa^A.}Uo'iLtoC{<1Ȕ(gG~u.NtbvTkK[oXi I~oB 76H-2m/.pEv$-N1"My~ռڗ2'edNt<x:7h=o\iM[3G݅-mݓ1͍S<@Gi|k2VD.rSF]C4V671T|jyMn$_v(%>lEMUړ.Ef8Yȫ6Ќ̌}/n/kr1|vdX ːK#xjBR4Q{1ӺK_G \pU :uM\ mURhc^7Zx@Nw -M'k M›V̠O7?f~ܦJ>84TiIt'7Bc GdfG I$6"P%<̦lD(٨2]m"'Y)z~*y@}\uMBBCi 1.p̐$G8b̋x,zdq.@?^Ի#{۲w"? `_yo<ӛ4|.*b3isHXUE4S~!hb`K͡fQhgu R{<2|3%C,讅͛^zmu 4nB[X᪷&L싸>QZl:]5m(ذ'1AけqTlwZN+Dak j<,n,tZKmU!+ƭظ& =&nP $_/KꀂĩViU>*PtH9iLV|s[M`iYNQݢ|4<3y,U5Խ߾eppdG aB.NmQW \ $dd9389+^7̲rvG=E+B<+o>z=|ySa 6WZoH^jeBe g!0@R}#4<=+QWRNwwGf~zsgXAWhuomi> V럆0USNfb܏jr*%]G}cكJ^y5A5EU*M/U} Å;zvbVgM8Rߺ (WXC ka4K)lR+MG!m~ 9fW aGZQ  RlAlDF`1L(?&M&v.g0ngUhA*q'$##sbC42أH>'<$-Љ*Nzq[߻O?4&Yhq^Jfo϶&u9٩Q "oaS%9/2۾X>sf;$nYwA3 DikC{ \\<hGW'fjqOw+v@PF! 4 oAn#`̾+-߸7JFsI^y (%#Nn k!<3 \] kDO^1ݲ٠`Վ5jIbS=:" "Veصo_K dSt ] 8"xz*#L:$? &3Ik=Cw?胗hM !^UDMb8O%D %$6fDHMt?~0z/kd3b+6 Ϲd 2du|JN hh:7؞2'+FUB ss["?M3ݩ}j8?pDm7-nf-gijDvDu{Q`׃ag98oJ>;)F^}qƇȊw`JJ6 92.o  !{f@^AY!:n3h.ux~U<@LdFq\OA(X+? 8PfɵC!l+b#7T~攨^JĝBE ;H @|##MkN8Gsp=D/R7.uc_wK};[/QQAP4ܧM5t uC!A5d8w'pu%\yQ[V{14uԬMQϻj['J)Rqfr)${zyLZ;ek@`K U00XB:hrK9vB%adbjB(Eoę&K+&ngEɡoOð;@؞`),}ڍ3'4:i$¼A<{4cI?%מsXz E:wC܌8Bt;OiR&wzlZN\J>&)glJ*pk~Vkk}ge)a.'s߅?u)OAkRrmu,.9Zu n536C0;?jya4[q6_R6[:};9 sBMh%8:.D) [FGkEYM{ &8O?Фp)Ħ< 1m^Ӛ`ׄ\ NG7V쮛~p56;F+ r6Վ2E>*yg\M6駵]*_Wzn_N$ MRI9QFHy&!)鎀9c~ a86GZY(2uܸ_taJyD:N^#I&QZ/I[m2Cq}޷Nk.?[{{(y5HM{ *+(3ϋ-9H >~mYܥnjz`SvwH-fj ,Ex7+9K5 ̗sO`PWg3e P-CW/ƷҶ 7wr~bd `1rgK@/a|ˮP}-$kqa\TTqAH`\h㲯l=6OgD]m!օŎ:~$ u0HjV.*fPH~0zq5ZӔCQQP|Ǜם%axD7G ^o/ q|أ'J|gT,*BxfXx`\\p[춺d<"exax1R;)#2UHFo9oNlvyD1G ~:3w5\}S+ő FTh_΁?b|[ eɰE]/T=:CQBW+TKA6#Ԙj$ 6CRL s% pdLTX &&+mhHi-- h"[OkH`FzJܵr%8eLe]R(0 \8昒6b !~MJPtNBZv3)i4f>l 'dU?t|7{,YY/m[f"{tȕ[ 31gZͷրbi1 +y=`ck,r !;?2+O^bYs;@:ƨ 83Ϭmz |E5)Gfbbros'1!q_6jNیW@I$fΦV,WIWPA Æ7nqIH2D?#/V[R8aE Nxr1EO`e:B>H%M~琯ܻmq,wʥF)c3#ZyߙXCY3&m3#?}=q. ny55&j]grnp{nQ!5sMг{tZd,ExBP6>I7ٙq9!A_3᚛-?M4?S oP1*ZbW.y~[# HT u!ktQ+9|;\FmA8C3(MIO;%央*0[3^gý_':I6є4):if3)s2Ak7ЈDķSCf`ː{1:qqMuk䌪Ti6n$֘md'z wkq!Ib-_Y$|Cy7U_,8Ɲ=1QNj؉/u<L>a?a2M =iL: '|8pnsp|S;c]X`E]7[mߺQ" [@0/B1[@".'v,ӥ4`өĞtA+ϱv- 'nOZOiA`Eq8c`c LA^SI EFIWvC_(,"ox]7DArvvHH("8JA%;`E<2_|[H~dwf<"Xz)Zm艣267M1UNr!^~&S=Ж#׌`rD_ISFp|ʐ604$+V鎾8$oN6gp"뭇y7FCv&䯾Th)H7xnH)+S`[^0wPrfm=ɘ_m?$8$I᠑SwpP30-7n(E$ nl6,x ^S;^Q2s0m5^UIm_o^pv›+sшR?dH^ᄒEia1`oE3骆^!v+#͵0-yqOqdΓ;#4+b86`Щt_gKߪ.4W^fgh띸huK7A,;5NzB@3ҹ#h"薿^]0K@| h4wa.\4f թů>q_qΠDv곹u-x33 +c.qBdl]iS 5Dp3?50|er򖮄@I__ Z%/؂qb| \cupqAmz  D53xSa{E9"sS x wkOJG AX\wz;Bu/%+<3p= J;JkISΠann>XmP]O8[N0$Xf?ñ0C CYK|3AdJm;ꊛ"·f07.6"p08TET##)rFHNG#̏{mO=ྗ5"bS@[51j󡭧T^-|s58kn9gǯU@;}|:5_fQ&' ^+co!SC%Jwvt'-.AL h@^q -{dwEjqU05ȇ\N  x0m)A1 Z_ H_t\TCIo:`omZViS4FV7B*1`qR sa EMC2x@7ڠj^y}uO|JT=vɞC.zC]$^zt/_@Z\)Ko[s6%: $O hJ Yh}7݅| I@w2@`C`]SS)+~`I@ }HR.I$ѵ`~6>A] +)o>JVҢ(]rqd;or-T&*ho,=x*p WQ&xT\o8P[Ʈϲ$â~V~ /m"5QLmz۵ȀMQai[$ky LvCm,\ZW^K]>`ŚFekĬ#0V zKq%$]7U:'"!tp\nSu@?Q9Dh,slMDVV`B{ǫzfB:E݁) ÜOC.pzc]G \9mj>?0i#'ƍO8Ŀq/KI /n`WS̓+-V$I -E]4D51_M g*J(wii?wQ61`UB:fYTݕyV8huzGLQlAAp@ U'5o)倲JoB`?x!0:֥)?\a'# ";5bN.`2ߵ&9̐S4۟*e1an=R*=An#Uf z.#ѭal|XA3@Е֒Wȯnj^/3-j+ \eJƌO$"sV䛅Ms_KzltDKPnaZղq1 IN 7h+گ 53){>X  b$@>W M2rJa!<_+ v;eŏn]8! 3+ ~Ž+4rΔ|Ee $%ViD@'N66^lˇ@ ;.V+_v氆@dbkl|fMEwp%G\ ɇû`?Yp9m2rn'cR(C_ҞS3u1|4Z c92aυj[*AAY|{8ëw|/nYfd!l q3oRAs_6(AB'~2ӾkIJP,vsETƿOsUlnKh qSPTd: ׳C[Lq/XL*g@\?CTƊ׸v#GN:S'YjLd,{Ś =%:uќ8Ύsy01 PAvXV]0_&4MC,n|(a_^DN [ RA\vT ЏR- V+޲ƣx1C_oK 5ph{`i!\#ݲCG.x1t/L)m1r3„‹ރdG$v[il8$m H k$dy?1nV}q7y;{叱j9֜e?;Ae(e(G_!5'Jš. "|!Wi{tG*nJa<8!bO$0lY -1L^>`fVXd9B:NmMg۳СI<*[Җឯ/#?呲4,* Zh_rqťsw =#SхzcBMK;^E) HVbU%iNTk}>@2@~76y ڸng4_gr=]MƄ 3Z_ .Cggۡ6xoȍ@Ʀ/VxNǸC5 è;2XIj$qBl^~C5٨O1Jj,=KbIrBQTrl颴`]^-[W'ł]E%޸em~o&@]bSEΆ><[-APaʈܚj[m[>-vOAK erB²\t[{, 8 !dVWF=,T^ňИK|&'$??zo%rn(bb.ɚ{ BHl8?H'v[[]H@zek9KN M[d rz;L[bh+8x2\m.׿ν)k!o"\%trYD2}ǣsYdLNEҚ-}ZNYuܺ?߼"X䯔Wp#Bݭ3FHbI@ 'OM ‹[>VLG71 Svd PN4\WATCIC!ƚHC6*RE|w^ " fdĩp'rٱXoHw鬠ijl%OyoWe:6fm+~;Vx$b*YƛַN΂vO*/p #IJw ؏^iזMf6Y.!49euhHȲd> 2d.n RrCnFغj DIǨ۬Jqj^e\^gC+3}>sW.KNBPFq~,l*W*stdm㿫(@,Aޜk $:WXb4}y\:\'[xb0WEA9_|h~k̚v.~EuvED'}o5ix1h՜DvDf6wk{:bk73k~ `]7Z#3*AtA;Ϧ|M@5O0W- J]kzuk ΅&jA:~u5n})DW2]2~2^ߛj&P N tzu`՜ǬtS5a {;=X A;u`KdrN_, UgIۥn`0ctlzn~Up l1WLL͆(q+.!--|r\ub.-a>\ڨj@2:j]9ai[ˁ3+|IǷJDrI)Q 8B<̻RM>EIH. ~ف;g*C=mF)csP,}5`)[JuNPEƐ꫓_82|?_>Egb!l; wm }+g@^Hp0ìb+]r&i9y2'W{w72}0˻7.EI9Ь#^`qŅPcPT7#װiZ_˕*#Ib]U;JBel >uj-㯭CEa@_? DhT͘`lDuYH^F\0_"[5PYo2BcqƔ +l-VbK<.(0~D' n Yjwމn{#2/4{ʺHo|MaÑFqsdP @? y7W -/;NFi~k|C0`*f?%M惫~Bk J`s.5x15 ADn~-`yϮQ~_ r@ÛSDgyncOj)Y#i%0|MNXV,*33)DYN4(ԯ<{|YW= #S24,cQ5~,0#78'Vo3 8E׻gX& (L eGd,'\tyK@9NK=O:=ݗQ!Y}ǩ+qqD{.%a!"QPCt@mF᪷z4T65X}Kmݏ} ƔL3+3h\1.L̥XmPGU51-BFNg|lGS>b ZbAhjn`B˨T.P7ψhU81W;DfZ."pvlLJC,Ζ>K`\sD8. uka.j7M X\l&LEuPSm &/*<5&~.?2ȟ#+7eI9'1UDBNGrGUx.$bJ2WD[X,lE 緹,[ٸ/K2J{nz;¡Zm֨LFqEB%C2 i"$r^\8Yê)B *XXoՒ\ezrT9Uԥ68 ZUJD!xBWx6 T;Q7F4Lߚ |0\h*K)6"{\]mZlJW}ӝ%֩մ2[p& 7P#=ozx8e!g-Oc(ETρYa@غ@Aų%]˽SMM|u"b@6!Êovvj ٚ[<63DMtȧ?mQuc70\IAC3z7⎒N.ṅfo\S)NPj^7i_QJ!&ZZg(=Xcd97mR9H8t~!PAo_1Ϫ̘uLSm#8\6rKHzNf6Ҿ.(Gykb+Hdny| qlp U+2ΝYoCLIO*Uv̡yk&yCX%:ygW._F#97䉑 eybnH>;{<_T)}^-rc-j0s_JR2 (0M#N7 U߸JU5%diXoXP8HL.!j[F'$d&xEEZW(bT4 %s'Hq=+)9D`3.u'.,Quckg(6UV)7`"?B`\VSNUL@ry+,1`6CksȗG[4^#q>nqpθw_Ew;NG7h'֬X#uV0u} nx>pKse9gys6щט@! MvcS/%mʋ| &dI^)f#]A q_H/(`َtyMWѼt8;h7Quqa*)]r %kYROtYztYZ 6eostStqΫNۆ/ ,d{M}ɥ{0.@Sv5=:l}}\]8 :8m$<&>3gE٫Z?-ӞY g"u*9E/<`_ߤ0Dh6c#{㫨!2K&ڞv)h0\i:jWMg9èFKYZ}4Tm ڕGJѺ1j˧:;/P1dcM(47 ܱşZfU͆*ad3M~Ὦ ֻIӼe?R55O!O58f,TB}oȒ=Kmܹ#V}Rᵋ_ڠ1Tx]l5(8US@񒷂28s)M-CB-EP٢sK5)3đ;֘ j$+Wπ>3+;ˮpTų6Ѱ*-HDd[PO4i;;_EE~S"1[urItz`‘$y[;GN")P6꘍ N'j9qm~*qְʁLU&.ksmK&fN FL Mk +(s>BX~# ֌ uC ltl;4a~~Ćb\8P׋*v˼;p`(OμhEVF?h+GN۩+MUxA`-dćҥ~]a݃n>wzLvgpj_nƚVUWh%Bͫ8כc˹6XMqV &`&6ٞ2?Ls"IH__[+p =Tr&=ىQ➋"(1d[vsz<'ϱ*u)D O {<[EJ1ݐ2ڡ *f87&T[7p &Wj~:lC<2.Ξb"a[dcv:g䀪! vT'@uI²cW2eݠÞS9)b]>"cӫ\Fhbiǵ: J C'E\wע 5D6.)@J%9tr2?n QEHW :./E.* .p1BT.c˷ޢ3X_X/:J~+.$M 7=KR+T=dZ \Ofg]O.q Ꞥ }ȝv2@2iW'Gh4CWU9{T7-o +'X/O6C!$` s\f*]o3Zfr$ -~h^qjm)\ֺ콁]joV>ֺ3knԹ遈?nLhbѶEױ6/U0ɴl!+/R>P -L ԉޠ+&U Qk!~uAPS3o9!i긫T H"]s %(E;WN3>їs5B3ǵ\TuyV$Jj1^DŽ"ѓE=/Zd7Wo/10=Dꅔ}# ZF6(1\ҧ"1MuzE+\?$m!G0;T]uoe>$Xs#5 Rwc*Jek?|,P91ʄU,`bM<`WbNhz7V:uld_\ m1"ΓLpAmjoSZ(%(AcֳJ IVtU+\+"6ڳ>/s=N+ uÚ3=0*-/߫ܘ SjcNPx,zmգʾST8~K 柌3 bp =r/chK1}zgPZ9Sz9-68Q uG#i9SfvMzEen3h@7$s3.EIyqhhfJM  oX'NWNkAnj0y'n%4&tJlI8pWbpk3URpmnWPH[2xM;ꊵrs&·x=<%%6n3d~OJӜ?N+[s.f!fո!Z=Nu-&V* XkWMntN?$3ֶ~+q(L󽐛X7]PiޡjE%{#σj*fq_ELslOTۘ8_t{u.L\凬X0I>-vf?>)y j&;WU(;)Ж07Ƒ-rn^r4fѣ8Qe~@<(|h*v@Ԉ )%^O.quexR~uEzaѺ_0d!AZB@L[;^yX>^!7YsNk)= G w!1gvAXcpi0.)tNPXFT>F,`w1;"^ <4*dOq"ˤmMD0'Ń$qt`Ѐ܉xd'[Ev{&]8\0z`^UXlV@tgnYŸ'~w8Ɵ1@65Jʐ?Qk8{iO*6[]ހ.,=+*^/t+|rrFK"0d<9 / e+CX Tr M 2OWUy\ 17=WyՐlOiq4KBx``hAA @G"eR pCHIv`2 I1w1Y*k=i@|^0jeatM#ioVϬ.;br@Z߽.V_A7&8Q]꩐xs% WWczAvX`zRhI}%Ta8><5-md捶 )SEtqj`FKѿ}ҩ [Fg q4Ȥ:\:QKi=A. o,Junֱ?J!zdG}tKfw 9~2f`}E[X7={@b%$yB:]3PP 3/+vD*V{ؐ ! /l*YoHGtK'zw<ՖR }ShdF$'O&f: 1PFHW04HL[?&- z/4$4O*G'QTmcBD 3T!B9a8z6H-ϯ>/66P"V\e61%& @zs/\3ر%U{)@SzFqz<>6!uK6Ie{9ѡ8|% o1*7Llť^I)@5}wgA2TN]ft+(КJbu*QY"~K> {8N>4׭3^ҳD643\~{A6̈Edn *9^+a<Т4\X^+ms4A\ī,Du@f%F*b7lդVd~ _Ieu\JAwżU]#ɝo>jI}tiATjkgnN! [HL̯?>%wFT>IKeӾ|r! P sb"7x+-QNqFLT҉Йk(/1?u;&dR06øMdsѪi\7~ o-9:Ep.W+x.,G_^O [.#CGS eǀ{5AI,t,naHfs႟P,Vl?Y!̕}g\WRalxh*wMeCIq?|-K=:ckog]ǴS#LtGUD-Qwa"5V/'6hV^(sfhcD!JG$Ӥ]̧L][G:D=Iҩ7}iD5eK]A|.D2|D_#ξ ֟3QU.(XIb 伨Z$-ԜR8q>amGTwV-AvwSqwxF&?Ww|9rX*$BLu r/Зo? gA:TkZ;PR ˄: ,SpXa8`,0J(Xќ82?C'WoC d}fZܕ8 =c+MpVnNLc;mJJB,&pԴ CL ]ӽhx,EFXIіLZ'Op_e:H* Zqs4XMFWL3OKLjȵV2Ehom.>Bз0,0'jbs5 zb] 5ի nMAC oD$ 2m(+ cӇW}Pc~ K!הF}I2GU )lK7ۉWVf̀g܁>Sv3|?^;tG?u򡬋9lI\iYzըgd*Jۤgٚ.[4i!zh_Ssr+ӣzFӻJn }} X [lT2mcϡS|%`ca6$ eA8ߎ?6TJ>mN g:HRm`*Ѐ%SCSf JP=1֭ ;4(DpoLj SɄ W/JYȭQQ6Xщ:;xK03L a'{^ Ň%&zi0(MSü%|Jp< t0$7 @rh rk%" bfųh+"$MXxif|ˮ_JMXK1Tl4yO eCq0rJnLRi?Ufb} h𣥚x6A M2N U32@QWQdb?ZK1富SmP(4ožiVB[}҂z^ON/9Zi[JxQ`J!j;L30E;0 gŴiUH5F:yp gS7kOX,!By:Eu26fץ*m09HB%VJ?SFռExBm#BKm GA5.1uoW% hYEynoh1ep h׍;̍EѦ:%ݍgFϗORQ&NkdQ'd"4Ђ'vH-_M[.$Mb2ymV'Jm`-błhY9 /L3%^^lltb5KGzЁf'%c 0oػ03B[|m"%̀`eYHro3|Dʱ5רkM.α>G:eEN%f·rayHۣ/N*n+_"LogP`ճom۪UE!$SlEFgwtMjE/,5P\h)\*iyݱMcF2^ȇՊ &+O4"r ~3KC[nu/ 1Z(oi%ǝmȿJ) J{?- ,Ma3 ͡u,٬-̟TTA8?}/JUo{Ygt/tKULrAyS$iz=5qBU3m^9mGoOSfq鐿RoI=8׶ȓV7? ؎ޟMn~i[V:V <|is?&\ Uy16H+$p,zxvFT.Ee\-"y o(oW۩1!UA# 4:xF].uo(O6~0UeN*dX8W~ ,19_lK䨻`uN:zPdZ! .8* E8hx#MtM+_ͅ:\RZ~G4?s^ υ[~|g,SLrhIqXXQUzhl#Ǖ6T:AdE $ŘgKu6?@ΪT7}dS-qro6-+ [CbAHw$$/, 溙or*]F90hOh}]׭O?\pFw+K) Nr lo){w3[뽖*%=ʍ^8(QyӾP̱凰 ef.u`/d sy>Ĺ,b>8戮|JVWlvݬ~ B.u]B'?hqxa3ѳ_q$˚=d|%@BqnZuـ]? lkW%²mq4'9;qdD3%6Y>0<‡- ~lg ܬ#lgg TrrJ3\HY&|NDN5/=p)#p~h;Pϟ$PI#t)ffkV{~TA0 M_П߁.|׃9b +s3G$Vߋ;bN;:Pus???An hj"^趩 LC?)_"j:w:Spj/mѧ旯y}/*if&ͣ Y@> 8 w ׋ZY Y$"+7.4-`ԕF H2ЅjR1{&fv˃zo*Cq#IY /:mNֈɣs=҃QX ƒz?Gj{z:G]c5xDN亦 ZA2,['$ Gb꧖3AmFYu6 BX}vfvC -D +Y MwWg Pٻ4J2676[WF^ORcPy=6QEMV @0MC(z(O^;SGt)tmixg'i#KJ:}piI)zw+(-A{[oIk]%VWS.˶<۩zs0f\N KQ4m^ Tl"W;#KW*q%ƽt{@ѧc;]_+ Tҗ2nw_R {&iIv'eF"luWoHI]=Xݟduǧ=ni=*uBIkv _s!M兯Rm̐>/MkaGX{~92O)z7,' VmW,+$IP6.ݤ"]X=ajǸ9Օ}`}~PC3ݔb&.dS-+WYV'AW տ\Σ?Fwr_(g`(Ll>0[d"p/Z9#2.=twRǔG&Fϒhۥ>Yz2g`ٙ |U>M֐℻MM,s'eOEl/C Cڣu6p`լ[%v]EJx-g4x%ddcv9 Õfr6J#.8Ҷ w 05&ZYayB[0VY"Tp@? >R*dCH܃?r ZSTe"~}.5ayٷ􀦭YP]c(Ӂ4gf0П1O}>NY.NDp!ī:gɘtCC[^#-w5WZ)HnGKs7.nvHXW0Nyh<nttvD! ^G݆tG6OM B08-7`.<K!na eg(:$&p(OPWICBRՏkyUWmۀR?āK&NnG? HԱ)a<Z Mηl%tr^0Fj:S)'RN}::;F ֧'ey'^vMK C#> v3gxT[ZeʰxV5 (H0?Ne8E~tWы3ew7 Ku e:7wU <ƶs5q7ٳiQ(sF̸{MϡM"q^ o-ql*ߦx/8 V5!=}N'8B,xG  R[Xu4N/[GDh TaF`ڛ@F;;d9jQO?z\l'v#2Ks ڟWm8/x`"H6"W羄ϲM???-$7SHzsd*(&Rʋ!Cʹ[ TsaIў.'_脓 pf`x>Pj{>{}6W_%j"Zz N7Q${ ¦#wn_4)yu&.h$䩱g׆{xW}%ժn|J9>zK%r}CcojW ,"zhjQ1sotǿpEA;pO`3~Vjʠ~e_6l@UGi6!Quy߃j ".!&K3ng1ݬͶ|`.5U#9,e_آ? ~5.*≮x/+; ^oBR^N-h i5Jq5gu|Ct 'nͩ Cʋ'L×uJ>C.9F#U|:, `?uub?g6ē&R21]zxÑ]SEԛg f;M#٢ /d("QHmsiI[ i}ep0h&a6 L`&*⃾3GHVwtp0e8&S;;Ufmnd\~98Vɒ`d$$)JKv_o׵9#}O'{Aws߶#"&Ky7"Yz(ckM^Fd{rpţ twR i)(D# CMڧ-;D_Jy/S@\(b49zH p %rFonmjy\u'}a0Mtḩ^+Zm #ڡ?k'rFEF ka 3)^wόA6!2^ B890nSu$%uqLYz%ϒ{J܄]%A\ T=;оN!xMHFk]}H:!p{_A*9IA֮0ϋ)tȔ mj%H@DC8_z'%SĖB9._Ҧd l5,54% ֬H̱qaUDnbm4QS֞D3Mѳۆ'u$8c2GLSp7.<"3էޡ88Ft+FLMj H-J·B+D]ya?=f@P|u]89]b@IҕwߵB:}+O{M4E[fjG#7A\8RtH#x(!~YaFIa5dtGAPj`LFJ5-c-t0pW6㊉+ =Ħ2m"$ Sg iE+^uj+0d Xaٿ][5T)}}ceŃ&ۦm6-^ލyz-@`azNC:=-J7z K? _ڟԉx `"H/~$De`er$V?߱) 1S DrGv l&1)l|a#O`~<؝^aa373SG|$}ˬd󧠺[3REŎyn9qIM! ̢]x=D8;' AgwKj'|;D b`P>KԹCAX ^4{zPKBM-3̱ >dsh][:Gٻ7k5ʺsDs.J"ʞ" 1+EY"ߤ;ry/O&YOKJkN^Sqt(8@0#]ÔOO&0=RH4bх_e:Ǥ;ޔ"IV@]ư.c ި)%^ќ1$2 } n<.3V<ˁH.qGf8͖$d ɞ>O9kLO?-Խ :i`dָU_*C{B*Z/֡>zh53FWf],UeDA[۠ cm^G` ro6YqxORg(2ȥ7*Eta!yy4rww]IGŏ`3U[,AwVu~*.6 ^ݿ{cum#wAj c$*}N_[b:*i2'osyH$ ra7>/Lvy9.Rd _uآA:.U {k>YIo_cyXAhDQ4Go[^Z%vڋ'W(a< +90>I8O+)0a:ҜG&񨄚NiA4-=wb>jkQkGP.kq ]z͖:?&;]bDBv5~MET,ɤi'pt\zCzl]VA*\'IآΗa$#$K >x&=odu͋'8Qk qexFE_1Y[t̚g */k7[`af'Q#J$J$EjfCO'26 f9x}Kwj &uf w3Hch.An$ .<9@K2D's>SBAy4ؕ(*_ P> -ǫeܮ;㴅C=~-" 8̧ r Ey@7T"]#k@"M8&+&bdxWoο%%w% Xqb5 Ǿ 6rң$o|LϚ &/1[ʦpѬP|5xD7V4 F0juLrZ@k77"N5A J䠊;p<:h"eӊ6^/:#)k%HރiyBU#JLLGoiM҆:敬?]G^)~YbAf^e&U?Kʀ"Hi Ej޴ņxh9⬍C8bY]@J{p5A7f :jCGt99 }Ąr,P#>d^WGn ''IG5fbX |_C,D``t}CÊ*H16+J?%Be״uL8}N@gZtI–sJ™VR#. ,f-rydc[~UAchjgco-)᪨Ǐk1vA ua$ !SzZDŲې;IE 룤)ib9IGf$"wcH6ڄ<Ւ&O @}mew|_`N CI.%8݇Bg<jF?! rt0N>LN{D $ki3R=ٸΧ_j Vy(odDlsZjiHs\99?1ޥ/_baaԔ&#m'(1|͚k}G (PJUe-FkĢyx[V^mp&2 +Wپ1,F9 ?ߔ9c/9,C2wnF )5 f8 p˪˸dх6nIg|(例yqqa7JGVF.'`8% .ݩ6bJIEIqDI~:Iq8jَ !~"0G4iuQ t. whH̳#]2 \9Fkzm21Y@$\AҲ~H 5"j>8!J""ՃRqd=ǰ?a{LhFł 3nΦm-'].z/d uȇR*賈V/nTpEedc툽KYA2볬Za3O޷+|eBī^e̓0u_H\_d#$a8Ԋ3JT;)/ {p?ZB LXxZKlhN;/AK @L<_׉kЋHk@>6{RQMy:DҌdF6=q#AqZtεC=Lv5(e'jOJ/A2).|196X '031O+_yUl{H7&5#<_Ҥ<"HqIu=_饁aal:ڵyIg}HGZpUjZX|fod`ITvqYZJZ[P#1 7|GNvVm"iBdy9Q%a U ;0beZyJ%GQ76 *U;IzQBgtq_ ֌+ili1sh ޭj&EF;c+MۑKɌE@F yL/Mh$%4qCg%eY˃Ff= "@ոP|+d(P#kQk-k FAdA3+'9 ĊFʋ U_8-+>Uwo\~VKT{SH0xϯEy#1(!#xͧv)wM&j°%!/5[m=ׅexmzrιf "h-2R8M-UXC04fVI5'c24wNmpz?-9QŽ 14H[-0Rb^mu={ZRٱQᱯvS-[/Kou#qF!  ={/5?ڥ+MxW6-*dJ3i?-k2m0o8qKMeO0x qt4}xB/խv5pr,IQ%9LyГ+n(ުE.]ĭ>Fd+qD&'j }rȘ4mX> +vm^ 6 i ? twLJ|)6a؋ĎYT&|`rS . KƉ ~P&LK#(q5v: iڴ _Ҝ$爰c1o]4;?r.|dmT@H,p`ӒZtLKhkc&2nVh+h8gR%#Ixpky5>jT0Az~PZ/Ne}rʧ`μrb yiyLGd/2L޺r8q0 iX-l DR @5 ǍG"yi^NC) c_ vM!h|r7Ix)E<@p,S WU\g,=:[%!!QM"f9u:eC8)u @0le?[7"BUi="1ƀt+exd#(Cdi f>(Jj&  #FZs\5SۨԴ2 W=/$6y3<9F肏珯V9hItD.5Mwi34Av,SUQA..٥E=24{H26~w"}uDB[o 7WecwP~+EprwU^|g;*&|9:JAWNB˸T{wya-QԷ}jе-3) 8F?!'caW@؀BŽoD 2h_h #B3<<Dtclv惞@eNɥywYakWPcKwR "' I@12![J"_.#WL KLb+/|PǒeQ};*vi|DV]*@иco˵{q߄*-SKPP<*d`J4C4]aa# wJmQӠ@#f-ZEi=ܑJб4CLDk&]af} f=N)1+yuynҦ>]#눏 D[Q< Yg19K1^lɯ`Nv}BHe"6uNdK80+DZv4҂kfq~&F):" T45T?}A,p䭘zWU>dVx`S~ w'֗yZK>ߎ} PdFƲӴenwbxjG %$;Z0 tZKYX9xcc0^[ +Þ{+e%I}lRto@YfFCEw7~V|j3 qgJ-!SS]{aoLO8B~!O qp++&ݹG(HF: ™RHR?T=" V#]M1ҝ+K16 EtÏy_4TMXDލO5 l'{ИfmBh ,/ֱapjxuD~8{,nZu& )^haH` z{_pV|E'~* PQ_HAdOޭ^_zt.tMqݶmи,TÄ iq_5B埳S$*|96|oy-Vh }:l85f\kXضkD|VTo;/ Ey/1VI?:^0ԑMYTB9H ZT #$'ߝ1gV"Vvu3~39) n xK'flCMReyցςUP;Ò2 =]7YGCdAT*9K\nvgXetQyji@G@nPWfw ,(eJqm.YxǗ`AVWT{Z񞨳^N-RF}.b)_;߲ގXs*i%טU3ғbHB:ΌOOI=/>d:@gՆg'Z) qչY 5Cw&g?ICDCm8,jx,r=Þ /UhWqё -:CsRhC5V58>%t% Q5PuzԷO*/KWRɬ9xXA  L~ 4p޽Ow/T}'U֭ĈԳhe9z9U.q5>%KR:,q8O;w|ljCYjGd Pd&6A; dM9BucHۉfb6. ]yw9?ūPmE/8Ul2ǵ.^!_\2CqUڎƍ&\V'Yȟn߀`Kh*%FN04 fA)|1 dJ{ݻy;|ʉ_ HЗoɓl'[0Ȅi1dڗ{ztO 6AY$nx ϿY}=N̩}>NM4~M1*_Ő/H<G(Bc% C6]~Y_5;}$O [9;b_ s;*  4_r.4y&OQzG㋼wAK fh3. 44`'"z1s^(HVc -夘)|C8yb 1PEh1{m;9'\*di4G }EwaYy"\d'[⊳C9lZh GxtBk&w{ߎdm\r7lDwŅn Zxc_]yS@ )B2; h2ՈvqX?W>Է` i+K%˕7G2djUW 'B~M +3dWH//@ݰQP| 2'vwl9/fƒ|4Ebr7JqFCDo4ă_Id쯧V9[T>'eF{Vt&7NVwhP<@ -6e|fJB@Wʽ$gGl5[_CzK`z76JpsPěTWjfpvb PVl7in߫ZL\^!P5pԪ΢?wdiX,z&"T'>ebߗ4 ?ݧ:䮼 eOz)6Ӵέ5[|ad9;t*~>pteG;~ '24Bv0.]0A XnZKbu6q.Uy#j~vd+$),c^іȽ@0G[n!`5z՗+Xf F0w3刔CqUF([FK=Qtň/@zG'B9FB(#NAz_i#_b{pWT%NLYZ3`ᑎ [$C7t cUʁ"XKi#R}rky}rd|\!Q8'@:ք^#m RZ~4oYٱTh6'rcZHw{.< 1r =-LR(q#H@_ Xf="~DPYբ@1t5#ڙߘ d$0w.u%aXO0C9WDq~ jU3!}}GF=WVJ^'ty˟8ѮhVeΑ(䡯dĎX a*+nIS.&qJ M) UήQWhCF},N& ?nLϨNzؠ X&=eOZf Hi3u[I޶x:L 3Tz1XDQAjcJN$d^q`~C5x]Ui!.SMihӷjr!ߏa^ϖﮡSF}ISf ң!;;-[F{PL\=Kg$h[@u*:gQ~4\]6ݴ{4R𻇧P^%Ye=h_e9.IطZH$yGDi%L&vON*JZ0x'Ch7b*YR =p<[kKfW&sl"I Xœ=@ 5"]V:3.’ڷEUc yJʬ+$ЅFՌΨ*.$g,Ҁ6Z'JeSV;kSʓ K"?q0i"ENqYW&,XUHc~ρW%-f؅F}f uS@2`ZM $ӌ>.Uh;5/Xg)~dsء =mVBLP,}Ám&jp~3d0|J@-ѫdk' $;PCo'wK pjj@VJ`QDY"[;gVWg5N{j\y]{R$S7.N;٬BCY۟o]%M kDv}]{cnP(\DCߤJNԷz?r[ ~3(Bʬ}0E#nVVךp ̚W@'ß3%?:t8n +K︁Rc} ŗCPZ 6 0av7ՒcKmie,C`:CfEلя Ds$ iioKt(}P( wUnr{ 煩H-.cΚp;{F"hT]JЬjbsۧra`qDgr[%ʯYH4Wg27zLtLh lÙGfsF<ZSa^baMl-|}EaF87G,rt %@Z{c@= X4T|;F&/e,`i6+CֽJwEђj mTnϋ (Op::FՌb B)f;vQywt}59v[K{&$)eNzۓ̮zv=tz^y ٪|Y0*ߵB(Fr!\%mC8)RN+TWfSjOhF-;٧szZy-XS7삳~/g m6;"!nwA E_Ng)P +AAuT˜Tnv!|Õk A f?7,]sgu*B  Ӽ0#ak)1sMwMXmlg= f.XP/L\y[t2Dirv Vq.hK_^);,T8#דNF5M (f -rQzC@ۇǾN  ưF͛{W֥)ͧ_ T }!;‰1?ϛ?W< 4nU]!)|#DMzHJdC"?zlFl~&m*<9! Qݛql\vͨpJK%c7Կ~`}+OaF/A4Hx4/t8'3Fy6};[Q7jF3`c ҿF)BEʵmbr1K蒁.6zΑ"cAȳE^K.nPA#TvH9%CӞvMr G3$Ͱ[ I? 21g;PI; DstKN]m|jsទ}^:?`ӯ$tfuN :l8ƅzPVDf(Eo&LU]kIyqrFbjlA:^\ankGZ0rG1 SiPjmK1^ sNZqJũetaW6_vy C֥WSx|R2(M٫nS! N(*|)1h[fYd]f٨0UHyCs?oeu$nLPAJ_lm|"x8AP:bZ;\qe[J40E=]hԬޥyj3D)t#GWڍ>ey82<$FwB18St~]{^i?:g@<*b*2xhwx ^L\`|ƑJ-R_?* ƁYA7bXZly0:|Vy n[z ]$q9t~WMߛ+x򬫈BcaA30|oؗN!}׎t2 E؄(k j>ǘj_2xኤ$ ^}F_N~lnè<56 `$&lvm?8t:3 :2 <{arYOA(3 /FlJJ /TvyeٍLÕo18^8(Vy)%)+nifb˿L~hیKhҜqZbh*,̩*rZݟ6m<ˡ ;GJux|_p8t'3I7lWREl%_.n0;P ?ļ-T1\Mu,ùJXm9Z oش > \";k11"?*1b!\ FDdDvLx/yW1$N ,x C|eC+oO?/9$o#C7h).8hLaq\QEqJK(ӣb;[:]Q4>։:w;$CM(#\x'j܂ǓY0\6qdI9} N1 F,#x6j/xK兴(v|ڳe,uY¯`3xf lQQHVU]?,Iը‹—(bA\Gebc/ ~fSh7p.hc6J "JxOY3X |Z a~vj"eȯ5-wy@?0P$B؄ᔵWmS.:557ѕGqFm.dZ뵇IbZ]uG\-ygog΁%a hl{yjUw̰юٱыrƒ2D[d5:\2S{y?^:̓S7ꋮ5ѪD< (UfZut^~I;ɸ9X-N=N: VO6yS"bvR?xK kUE"Q|j5`I~dE%͓vt P3UI *ޗ^~B7[d:S䌎5R!,WS:ypr7n! E&G-cVy sc;veubШgP(0$R/` σdQЋg{KMzQνt/enq.fѸI&VȹwAdr/zd?^VDgvǦKV t^d\)Ry%[KT4f/Ul 8@)%&Y(2̋P Z=Yc% ld,"^*[Nw*wo !$2I`ۖ +NkL*P}@J1 ˲A?0``&GNŗNbsk֢-=.OÜO'i&I}\z@dbuw"]A% 0Bc}VZ p41Im;V"0P Z&GO S.@`Qw{3;ipH gptiGKٝĕ:0kqCwu~݂:BHшJyM)4hx1ASv$7lgsne"6nZunw+zIfrWL1?3A"\@fSkZڽpÂ{SEܧԡWI{{R1AzlDP):[L\Vu2ĕ ⢾jVqݨR!ѲH *P4i G&-x粷<&-i֕ 7OUO(|-doSt9³MB6g8])@х.0%@ߎwOK*^eFg⮦10.oz%h2,?<,ɧ|WFfļZ*=%/._P!aZE Fq`z b:>@}dj X3@/HEq8(J* Q@JӪڕHJsan1^Hwx ǷU4d9E]rBj;Z6E1T+;cV[iuLb^.E=8Y/?kX/'<֯U MmlZ/Qhͫ- ^v|ab i"߇..V_%g++ŪZnfl>('tWq}X!I @:,hB/ўmq)~l(Jey:i;-} r@7+8AلUS K(ShL7 #FQmw+^?dN:<=-&L_WA}̮Irf|ۜ >Jjlz远7<|%+ġDø6c`@ O[41ZULn(6,59Ҧ ZAe-f]qp;>\҅nA9brSYsewn,;k#B7-R\;O4E;5g@2<{60Và;?+FY6kvl` 3zq^ZZtF/Shtd[RHwy"膫6`vuQ7( 1"Eh6x/o:;s<g{4x@΍v  fItS;8:oЏN? \kzږ]۩u` "e4JZvW U װH0^/zUM1LF :ۈ=pUrm,Ww,&'|"/$Y`,_>rwXYoU npN c%Ё$IޤC7`"9VM#Dw}B[P.} W`֪k{(E.gC>j'm($Pe!%tkn|jB5Zk- We,ՖDvD8\f ǥtC:%#M8%Q@jX81vcDhRBB]$*'*~Nai*/LȀ9ټ@̳GɒS.f8B'xB)I"aʠ.gLZiZBD> 76u?b Z;W)Uwc0Hpf^4p |{ӣ6lqٞ¤qsb hnq1]J$u| Ix~2*T;KeEz45 )̌ U hp~GE{63)H/""]7M(vek:NJD\ݜ6xA2r?Nn'z]/X;Y+!0GD4˜pZfS0%+U{oj~MպlTlx\F4lQz/phޘ=w &2ds ]3?%{ EK lUA1՛D]ME sBƦW%J-؃vV:jZL xeCYдMuP.#>.W[`$2DovWTkut%X`ԫ_Oh -P;k\5RR b[ c?U ^lJ$`ٵhO,F oozj{tf9 :05-G)w`T(EiAB0P(1r;h&%OXiR?NQ_Fѭn/ÂZv,4-[e_H!H~~ >% PFvL0= oKDm.ofP4N(;b#d{P3HXU?FY f;hk.Z/4;`7 xOG?ғL8/e/W#s U'Eo `9ܣ$Q45ӹy`a!"AQJzOes#J<q;][N,w^<ӋW& "jj,=z˘U+]ByɷaOH7;P0JRPOa_sM '.  ):i<_kFCO -o#8.=:-V_P#5Q[@=w_¸Z>i%⳻FNރ?PvR.sn,4ĝ RkvU0uvڲshx"O жxXPԹT(`DLcd3S+D==@)+ν]ƖNv(D`+h sFaGFӣZZWrBuиva`]l,e|gf/}1E0WGڟ"xW3<ܵƎɈMPj E Dp;PH&nd(ZVMc?i2Oi}C;XH\_ϿV?@AI֘pf =ㅿh` Ѹ=wpw,=/ey#Z?j[ݮ? !歼3=WP(0sh{WV*]6&-Yd8}D`^8#~xʪ8Xgsx&e7VGƀ ui<{$Qr<-!}@C?Ώ/ ѻUڱpӦrb kiP!.\\y2&g8ڄ\(t4l 8jp Ὓ'%b"ʁUd@P}jе6N~p'>gXUhK0fF݄(OnWGJvb]jqi뮍;`-CPxRdJz{ZiVn3 CҋS>ۗ}l~u ,|"M^ ^ m]8;-ǭZ4Ig'PN%{5UAɧ!Ocz"+p 46Luw+v[U`8)Crh5%Q{yu+5.НJZFi^,S}O,8'sǾ[{۳y!A,lh[%_7 XK P8˃fgɽ7C5,25g^#7KeS&GGI_E>]]`E(W22QrDh~">,%0oIU<H!'۰ǜלխʳIcϷ}M#ެ˰#>AffQ~c(?WBѓ_dX,8LwB\n*`r5,2~jR?BydmVaj+S6vVFnM?oz8bbPJoYLrk)4"}fn&ҍnB|LmyQ}9kln5? 6h;,?6e O кƤe#Byz ԻE2 mI onR]y <~e0x́d #E *T)_O!*WP!_8A3mL8"Sa60氧ת~lRxႂ+ *Oٳx(!k_v@.Of"*maTB tlqFϷ3Ai"J/Rer|'!dizrXqx=I-B/Kⲉy@мxJ7:HO'#p$=b`j1oIG)q}3L2Y6",j^/GXvvUxl{I<'p#UG4+ 3ʹNtY1 DE]] 1a";}0]?q0\qʻB(ר]4.>'isLfk4Ћc=gL__+{ʁdz]K^#7̖ϗR6{B]B Il @?l 4w/9sV!U_ P/~,| #0T5[iz1yZM/Ϙ Mt^-"c_"= 3F WnUMŎ=#&?دd:kvP<1PmU]>+|:\kH RU^I'V2cMQ>G;ePa27}jw0!~˂|pH\ WCR~l4u۳BAǫ-6r3h$.)e{OX'+\ :*Y TKs(3'uy+v={&sutZ;++✱M$JeΥN]~È'HrGݓEĻy->h"jC E9i`Mx"W n }'PaGxRf): E-(e+=b6GOb\`t+CK[CiŢw/Qݸ$i!Jaտ+p4qtDбXjbhMkTͺTQ4E3AZf:׬Kؾs_I6Odem[kdjmS*g-LX&K']='8=Yлh˚ 6`B=׸wvt"ɼIcj-.qr؟k9ZpIĿñ1nV,"KOpO.n!%2ܺbP !k~Ծ90eUˮbTd.x'{-8 ~r#q7Wu1Ʈ'1B10(9) YZ