xen-devel-4.9.4_04-40.1<>,Yx\/=„yh8MF F.dw%ЛTaĎP_ MfJlnn^o?D{>Yd[p)v\lثpB|hrڞ!k6 Ӈ0O54]Uc#AE#>,C H?Pce6^"ۅB>@Mi4B ?V^nhoP7# 5ߧ(optnZܸPI &Փ1ըOy>3E?Ed   T /5<  T   C ,"&&0(**H+(+8+l99l:ulG3$H5I8<X8Y9 \9]<^CEbDcE,dEeEfElECxen-devel4.9.4_0440.1Xen Virtualization: Headers and libraries for developmentXen is a virtual machine monitor for x86 that supports execution of multiple guest operating systems with unprecedented levels of performance and resource isolation. This package contains the libraries and header files needed to create tools to control virtual machines. Authors: -------- Ian Pratt \wildcard2topenSUSE Leap 42.3openSUSEGPL-2.0http://bugs.opensuse.orgSystem/Kernelhttp://www.cl.cam.ac.uk/Research/SRG/netos/xen/linuxx86_64\?Lm $g`i x S?E8o 6=8N;)5n f""1XMb6s (~&;%8u[Da>3 $X ,Ykf ?y 6O5;&.C6 ~/\Rl:)IU'C sJF d2N8tJ *ŮN؁A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤\\\\g6K\g6K\g6K\g6K\h\g6K\g6K\g6K\g6K\h\7\g6K\7\h\7\g6K\7\g\g6K\7\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\7\u\u\u\u\g6K\7\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\7\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\h\g6K\g6K\7\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\g6K\7\g6K\g6K\h\g6K\g6K\g6K\g6K\g6K\h\g6K\A\g6K\g6K\g6K\g6K\g6K\A\A\\P\P\\O\\;\\>\\=\\:\\<\\:\\>\!\Y\\L\\A\\9\\S\\Y\\\\\\\\\\\\\\02b5fee036f0e40c4ef5a0a30c1b0afdedb1fe6894ff94de87068e5ac0fdbdd2916d2c7fd5e652720918bb175f50ecd6922b68f0acf8b61577e1d24e14c5bcef249ddf31318a1901a4221e2c3357a92c4bd5034df85800f88b8c4e3fcda22a41d7b7069a3d90184ec8102ce78eb773b01d813b566177b18f3896e3f95164dcf0ab9f98a8fb570406bbccc551683490d636a0e59fd651606015fd2dd1d696750b6ffaff4cd9b0aff35040ae4be9bec225affbb610b37f072f88a37dffff8bffb4d6086cae989b39231d5ea10d319284db06390db0f28f1105b3c40d8e16ea7ed66beccaebca83674c4a3833e3d367d547b61ad499318e296913f60d24d5c72d0a909933b9398745f57db2d8a8da82a442eee1d148984b76b466e57165347d822e1e95947a3cf6d088dfbbf66f06d90bb5d6ba1e07b81e922c7177e4b32e294431a23f635a8a96fae9fc87df4b1cfd0f70b55084a06cf6a1cc63e46cba08b0da5fe433a8d747e689ca66bd5893617c98058aca7d7858ddf3333b8ba6a577862946d2f9777a7eb2cee18ae4830a0f7b97b932c4e4e773cee214fe16457cdce5fe74abfe8b5f6ed9d5c3912453c19700ed825de09bd7844e7bbcf8fff831eeebc9e20dba53666cc619591519f389c231319de6c291f54cb1b81f33633a895e12ce189f3c4ee863ed91bf794e9fdec8f7d45b09300b89f69bbf3ce9eddac6cf618ff79822db8dd74091aeabbfb42749ece743c6095be7f2b63c7b00f7f694deaec89232ed24c4388e9d0b8306def5389018905176a2ef459b68cd3f9bfd9ed7b23ea86061f4307c33984b601977ba3a3a0978589ed1da51b0446fd61c4130209f464b890ee4444533f365243fc013c60481d61f5125949080c5e745a4b66b24203296723405971481562b69c239b2ec1684d9a0bad7a9b07f32bc47cc704e90b418fd0181c2ec09b10cda4878bd68abebd19a0d6725c5125017158337ecebe8b75d44c463effe56005c4c3e5f5060a22d7876cfef5561eb6b7b89567e0a4551e1e866fc610d26093dc5b03fcbdcd56c541cb0ea7ff404c1ea14705587a08619d9da49f5f42a606ca47ac15528dfa8644397ed9a47deb549d2c8bdd3cd845e5973b69c018e3e5ef7d3d184adfe7d6a1423fc1fdaebec3db4a1aa853f540f47c99e09c2ce37cb9fb4a23612b55dd59674d9340d4d767d871a54d4a0199b9d05180c8d1538f7a6f2a2636e0352fa89b53b12dcaec67379557d69253e74ee59f38aa5d2215e2512f4e225140c229d8aa168d6ff88e10c89635670152e6028ed8bc32e46754b3d842897ae2eb243a15bc5205117a09973ede1684bbbbcf3e4c31dfc07a9ab27ea73960fcf20662488526abf42fb8f08abd276d98cc608fa5899cfbcd76e35f8c38f2343356e26ac3cd61722365099e89cf003a77b16f641dfcc215a910bbab7293f8dcbed55abf2aab3f0675fd4bca8bfbb9cfca54731cf8965457738dbfb7f66f2997e035c1d4c03b68db47032b59cd5885b8406d1dcb5640c8da56ae5fc9d4d44e168a9f31a3911d4ae05c67ca93023d99312f6c2ab591a605f42535c97c3bab559caf0e624e313f77d6ca37c4ff31977a71d7853cf6aae21d75b93adca5409a24c8a884d533157ca7c74549b43b896ec58223ded3dc0be38d2c9681361641028eea08f36d6138dcd721bbecbf2d6d7e42029f3940e9acd35c2a3fc2cfda4b80c706017451d21c7827e23df3e04bc2abc7815c488d0268e959cc1ca166cfeca679723277bfe9d0c1db737f693b653ca4cf02767ef5c09314128d892c24e708a67fd53ad374de37c410fbc9a68fb9d6d32dd0df2debbe2fccb6d4d99493f9ff964cfd70a96d45e3219bd24a70c54ce8d8f18c7576a25df96cd9e48025dc23235923dc99278055098e02a1a1003d22652489995cb6dcdd0b5e624b3dbc497bdeb86ce6de3848d384adef30bdf32dc3c822063ee859e79a9099e583ff039856b2d48f4aed2836df82435abcfcea28245c5f08e37a10601a5cf5b5857894f2443e5b1c862edadd0f013ec1557b265a65d24bc42d489effb6c55e68863ec3024fadca02a773f0e730dd5167daf7c5d0d4d6aefeece9197ddef95d1702b1a373af4ef6554ee6c1cda25bb16dcead9f745380881f191285f0f588a522f777cf9522b80e048152d6a13e1f1a777f32146cd871199f58764b8c5958a7cad482a66b6654507e5d57677263c9a05ea4a513ae5ce5987d7af56382f5b8dca419bb15ad6c7f5ca28f820ca714aecc4931ef5af78a331cc8119637128b97d57100755abe9f815daa5870be4334c584ff6d4e5612ed882e6dfe305ab2cb1c917670e6c754074562904bafd7c2c42d9a2a58603330d442abd7e40e99beaf5f1a225a3cc0dbafdb7aad5792d04328445ef3b1e82102db084e9fe3021a9e3927dc74b5700c3116e1c7a4b599d51b70ec8f90dc297104ae699c1424553c8c5c3e387cd8a41c06b9aaf2e320fe7167e257c966b55a3dc07f475599d5eec003ecdac6de76848256cc882d10d25ce0cf97683cc5c4bf321dca9c2c5ac837965220dd29f775f46b6d659e63128992079e5378beab86dee808703172e0e9bece777820c73a1857b27252d0dc72a7c1482ca680bf75556f06e8b0a3cd9eaf7cde2cf136dd215178a957bb92739182c0a6e979b84a440ef796604dabf3acf2ca6f730324c9dcf54a9f1d0ce0493433f70a1fcff864099ce3e587b81bb8ce49b0e376f543f3dc817c72910bc9ff8e67b9579954c6f9ca46739779315327218943adbc2b9eda33684d44eca23300dd339d62481f808bdf486499457d9aa7f197b0c053bfb7d703cd852ef19991afbdb820b5219f95cd237b7cbd79750162c4ca3f359f379febeae01b46801966a282f6ebb766a023da43618fea0a43ed948020ba3d3f60ab4b95e4b1590165db79d0acff43c2abf1540e8c11127a27507e6d3ed21b4304d45aaaad055c99e682379f6eddf05431e3d13c7f0f8b6a7478ea0efa96217d123fa403a3f635efdxenstore-compat/xs.hxenstore-compat/xs_lib.hlibblktapctl.so.1.0libfsimage.so.1.0libvhd.so.1.0libxencall.so.1libxenctrl.so.4.9libxendevicemodel.so.1libxenevtchn.so.1libxenforeignmemory.so.1libxengnttab.so.1libxenguest.so.4.9libxenlight.so.4.9libxenstat.so.0libxenstore.so.3.0libxentoollog.so.1libxenvchan.so.4.9libxlutil.so.4.9rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxen-4.9.4_04-40.1.src.rpmpkgconfig(xenblktapctl)pkgconfig(xencall)pkgconfig(xencontrol)pkgconfig(xendevicemodel)pkgconfig(xenevtchn)pkgconfig(xenforeignmemory)pkgconfig(xengnttab)pkgconfig(xenguest)pkgconfig(xenlight)pkgconfig(xenstat)pkgconfig(xenstore)pkgconfig(xentoollog)pkgconfig(xenvchan)pkgconfig(xlutil)xen-develxen-devel(x86-64)   /usr/bin/pkg-configlibuuid-develpkgconfig(xenblktapctl)pkgconfig(xencall)pkgconfig(xencontrol)pkgconfig(xendevicemodel)pkgconfig(xenevtchn)pkgconfig(xenforeignmemory)pkgconfig(xengnttab)pkgconfig(xenguest)pkgconfig(xenlight)pkgconfig(xenstore)pkgconfig(xentoollog)xen-libsrpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)rpmlib(PayloadIsLzma)4.9.4_044.0-13.0.4-14.4.6-14.11.2\-@\\e\+@\\Y@\\~d\w@\u*@\n\mA@\f\Q\P@@\5@\@[[[@[;@[[t[Q@[@[9@[qr[i[[ @[:['[!@[Z@Z@ZZZmZZԐ@ZlZZZ2@Z@ZZ}@Z}@Zp^@Zk@Z]@Z]@ZV@Z7Z1@Z/ZOZ@ZZ ,@YY@Y@Y{Y*@Y5YA@Y4YYYYYbY@YJYYV@Y@YYw2YlYh@Yh@Yh@YTYS@YJ_YI@Y5GY0Y-^Y(Y"YY;@YYY@YtY.X@XQ@X@XۡXg@X@X@X@X @X@X@X@X@XXX@XXXwoXs{@XlXWXRXQ4@XEVX43@X.@X*X lX&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@WbWZWZWZWYZ@WV@WEWBW=W;W3W1@W1@W,@W(W(W(W(W(W#LWVbV(@V3VJVxV'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVA@V;DV9@V7P@V0V*!@V V@VCVVVf@VqV@UYU@U@UUݪ@U@UnU4@UUK@UU@UU>U@Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@UU@UUU.@TgT-@TT@TZ@TZ@T@TT@T5T@TLTLT~@Tl@Ti@Ta@THT?@T=@T9T5'@T.T*@T*@T)IT @TwTT=@TT@T@T_Tk@S@SSj@Sہ@S@S׌S@S˯@S@S.SSSS\Sh@SS@S[S~@S~@S~@S~@S{CSuSpSl@ShS[SXSI*SE6@S=M@S=M@S=M@S;S:@S5d@S4S)S L@SS@Sc@S SRRRR@R@R@RR3@R3@RR@R>R>RJ@R@R@RlR@RRx@R&RΏ@RTR@R@RG@RG@RRRRRRw@RrF@RfhRe@RL RJ@RIgRB@RB@R-@R%@R @R @R @R @RC@RZ@R@R@R Q@QY@QQQ@Qֵ@Q)@Q@QQQ@Q(@QQ?@QxQ'@QQQ@Q@QIQU@Q@Q~`Q~`Qw@Qq1Qo@QkQkQ]k@QZ@QQQAQAQ=@Q=@Q=@Q9Q8@Q5@Q4Q/FQ$Q#i@Q#i@Q"Q@Q@QEQ@Q @Q @QsQ"@P@PP@PDP@P @P @P @P @PPPP@P@P|@P6@P@PP@PoP)P@P5@P5@P@P@P}L@P{PyWPtPr@Pr@PnPnPnPnPnPiPaP`K@PYPXb@PWPIPG>P?UP.patch) 5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch) 5b348954-x86-guard-against-NM.patch x86-XPTI-no-idle-dom.patch- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks bypassed in x86 PV MM handling (XSA-264) xsa264.patch - bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception safety check can be triggered by a guest (XSA-265) xsa265.patch - bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour readonly flag on HVM emulated SCSI disks (XSA-266) xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore (XSA-267) xsa267-1.patch xsa267-2.patch- bsc#1096224 - VUL-0: CVE-2018-11806: xen: slirp: heap buffer overflow while reassembling fragmented datagrams CVE-2018-11806-qemut-slirp-correct-size-computation-while-concatenating-mbuf.patch- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store Bypass aka "Memory Disambiguation" 5ad4923e-x86-correct-S3-resume-ordering.patch 5ad49293-x86-suppress-BTI-mitigations-around-S3.patch 5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch 5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch 5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch 5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch 5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch 5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch 5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch 5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch 5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch 5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch Spectre-v4-1.patch Spectre-v4-2.patch Spectre-v4-3.patch- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663 5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch 5aeaeaf0-sched-fix-races-in-vcpu-migration.patch - Upstream patches from Jan (bsc#1027519) 5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch) 5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch) 5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch) 5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch) 5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch) 5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch) 5af97999-viridian-cpuid-leaf-40000003.patch- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254 5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch 5a9985bd-x86-invpcid-support.patch 5aec7393-1-x86-xpti-avoid-copy.patch 5aec7393-2-x86-xpti-write-cr3.patch 5aec744a-3-x86-xpti-per-domain-flag.patch 5aec744a-4-x86-xpti-use-invpcid.patch 5aec744a-5-x86-xpti-no-global-pages.patch 5aec744a-6-x86-xpti-cr3-valid-flag.patch 5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch 5aec744b-8-x86-xpti-cr3-helpers.patch 5aec74a8-9-x86-xpti-use-pcid.patch- Upstream patches from Jan (bsc#1027519) 5ad600d4-x86-pv-introduce-x86emul_read_dr.patch 5ad600d4-x86-pv-introduce-x86emul_write_dr.patch 5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch 5adda097-x86-HPET-fix-race-triggering-ASSERT.patch 5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch 5adde9ed-xpti-fix-double-fault-handling.patch 5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch 5ae076d7-libxl-specify-format-of-inserted-cdrom.patch (Replaces xsa258.patch) 5ae0770d-x86-fix-slow-int80-path-after-XPTI.patch (Replaces xsa259.patch) 5ae31917-x86-cpuidle-init-stats-lock-once.patch- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of debug exceptions (XSA-260) xsa260-1.patch xsa260-2.patch xsa260-3.patch xsa260-4.patch - bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt injection errors (XSA-261) xsa261.patch - bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into unbounded loop (XSA-262) xsa262.patch- Upstream patches from Jan (bsc#1027519) 5abcf445-x86-pv-fix-handing-of-writes-to-dr7.patch 5ac63737-x86-disable-XPTI-when-RDCL_NO.patch 5ac63737-x86-log-XPTI-enabled-status.patch 5ac63737-x86-XPTI-reduce-text-entry.patch 5acb58a2-x86-pv-fix-segs-for-32bit-syscall.patch 5acdca70-x86-HVM-suppress-IO-completion-for-port-output.patch 5acdde3f-VT-x-fix-determination-of-EFER-LMA-in-vmcs_dump_vcpu.patch 5ad4948b-x86-correct-MSR_PRED_CMD-emulation.patch- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via crafted user-supplied CDROM (XSA-258) xsa258.patch - bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash Xen with XPTI (XSA-259) xsa259.patch- bsc#1087252: update built-in defaults for xenstored in stubdom, keep default to run xenstored as daemon in dom0 xenstored-run-in-stubdomain.patch- Update to Xen 4.9.2 bug fix only release (bsc#1027519) xen-4.9.2-testing-src.tar.bz2 - Drop 59930079-gnttab-correct-error-handling-for-gnttab_setup_table.patch 5a140ba6-libxc-fix-restoration-of-PV-MSRs-after-migrate.patch 5a140ba6-x86-hvm-dont-corrupt-context-stream-writing-MSR-record.patch 5a16a51e-sync-CPU-state-upon-final-domain-destruction.patch 5a1d528b-x86-pod-prevent-infinite-loop-when-shattering-large-pages.patch 5a1d52cf-p2m-check-if-removing-p2m-entry-actually-worked.patch 5a1d52e6-p2m-check-return-of-p2m_set_entry-when-decreasing-.patch 5a1d5312-x86-replace-bad-ASSERT-in-xatp1.patch 5a1d5333-x86-check-paging-mode-earlier-in-xatp1.patch 5a1d5350-improve-xatpb-address-checking.patch 5a219aec-x86-avoid-migrate-vCPU-corruption-with-CPUID-faulting.patch 5a219aec-x86-hvm-fix-interaction-between-int-and-ext-emul.patch 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fd946-x86-dont-wrongly-trigger-linear-pgt-assertion.patch 5a2fd984-x86-mm-dont-wrongly-set-page-ownership.patch 5a2fd9a9-x86-shadow-fix-refcount-overflow-check.patch 5a2fd9c9-x86-shadow-fix-ref-counting-error-handling.patch 5a2fd9e9-x86-paging-dont-wrongly-BUG-finding-SHARED_M2P_ENTRY.patch 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch xsa254-x86-reduce-Meltdown-overhead-a-little-further.patch- Preserve xen-syms from xen-dbg.gz to allow processing vmcores with crash(1) (bsc#1087251)- Since xen switched to Kconfig, building a non-debug hypervisor was done by default in a release branch. Adjust make logic to build a non-debug hypervisor as xen.gz, and continue to provide a debug binary as xen-dbg.gz- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from 0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30) 5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch - Upstream patches from Jan (bsc#1027519) 5a140ba6-libxc-fix-restoration-of-PV-MSRs-after-migrate.patch 5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch 5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch 5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch 5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch 5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch 5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch 5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch) 5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch) 5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch) 5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch) - Drop libxc-suppress-ramdisk-unzip.patch xsa252.patch xsa254-x86-reduce-Meltdown-IPI-overhead.patch xsa255-1.patch xsa255-2.patch xsa256.patch- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) xsa252.patch - bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1 transition may crash Xen (XSA-255) xsa255-1.patch xsa255-2.patch - bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) xsa256.patch- fate#324965 - add script, udev rule and systemd service to watch for vcpu online/offline events in a HVM domU They are triggered via xl vcpu-set domU N- Make sure tools and tools-domU require libs from the very same build- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 xen: Information leak via side effects of speculative execution (XSA-254). Includes Spectre v2 mitigation. 5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch 5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch 5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch 5a4fd893-4-x86-introduce-cpuid_policy_updated.patch 5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch 5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch 5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch 5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch 5a4fd894-4-clarifications-to-wait-infrastructure.patch 5a5e2cff-x86-Meltdown-band-aid.patch 5a5e2d73-x86-Meltdown-band-aid-conditional.patch 5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch 5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch 5a5e3a4e-3-x86-report-speculative-mitigation-details.patch 5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch 5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch 5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch 5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch 5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch 5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch 5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch 5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch 5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch 5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch 5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch 5a6b36cd-9-x86-issue-speculation-barrier.patch 5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch 5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch - Upstream patches from Jan (bsc#1027519) 59930079-gnttab-correct-error-handling-for-gnttab_setup_table.patch 5a140ba6-x86-hvm-dont-corrupt-context-stream-writing-MSR-record.patch 5a1d528b-x86-pod-prevent-infinite-loop-when-shattering-large-pages.patch (Replaces xsa246.patch) 5a1d52cf-p2m-check-if-removing-p2m-entry-actually-worked.patch (Replaces xsa247-1.patch) 5a1d52e6-p2m-check-return-of-p2m_set_entry-when-decreasing-.patch (Replaces xsa247-2.patch) 5a1d5312-x86-replace-bad-ASSERT-in-xatp1.patch 5a1d5333-x86-check-paging-mode-earlier-in-xatp1.patch 5a1d5350-improve-xatpb-address-checking.patch 5a219aec-x86-avoid-migrate-vCPU-corruption-with-CPUID-faulting.patch 5a219aec-x86-hvm-fix-interaction-between-int-and-ext-emul.patch 5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch 5a2fd946-x86-dont-wrongly-trigger-linear-pgt-assertion.patch 5a2fd984-x86-mm-dont-wrongly-set-page-ownership.patch (Replaces xsa248.patch) 5a2fd9a9-x86-shadow-fix-refcount-overflow-check.patch (Replaces xsa249.patch) 5a2fd9c9-x86-shadow-fix-ref-counting-error-handling.patch (Replaces xsa250.patch) 5a2fd9e9-x86-paging-dont-wrongly-BUG-finding-SHARED_M2P_ENTRY.patch (Replaces xsa251.patch) 5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch 5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch 5a313972-x86-microcode-add-support-for-AMD-Fam17.patch 5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch 5a33a12f-domctl-improve-locking-during-domain-destruction.patch 5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch 5a4caa8c-x86-E820-don-t-overrun-array.patch 5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch 5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch 5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch 5a69c0b9-x86-fix-GET_STACK_END.patch - Dropped or replaced patches 5a2fdb99-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch 5a4fd893-x86-entry-remove-partial-cpu_user_regs.patch x86-PV-shadow-L4-optional.patch x86-PV-shadow-L4.patch xsa246.patch xsa247-1.patch xsa247-2.patch xsa248.patch xsa249.patch xsa250.patch xsa251.patch- bsc#1074562 - VUL-0: xen: Information leak via side effects of speculative execution (XSA-254) xsa254-x86-reduce-Meltdown-overhead-a-little-further.patch xsa254-x86-reduce-Meltdown-IPI-overhead.patch- bsc#1076116 - VUL-1: CVE-2018-5683: xen: Qemu: Out-of-bounds read in vga_draw_text routine CVE-2018-5683-qemut-out-of-bounds-read-in-vga_draw_text-routine.patch - bsc#1076180 - VUL-1: CVE-2017-18030: xen: qemu: Out-of-bounds access in cirrus_invalidate_region routine CVE-2017-18030-qemut-out-of-bounds-access-in-cirrus_invalidate_region-routine.patch- bsc#1074562 - VUL-0: xen: Information leak via side effects of speculative execution (XSA-254) 5a4fd893-x86-entry-remove-partial-cpu_user_regs.patch 5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch x86-PV-shadow-L4.patch x86-PV-shadow-L4-optional.patch- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu, depending on the libxl disk settings libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch- bsc#1068032 - VUL-0: side channel attacks qemut-add-support-for-cpuid-MSR_IA32_SPEC_CTRL.patch- Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds If many domUs shutdown in parallel the backends can not keep up Add some debug output to track how long backend shutdown takes (bsc#1035442) libxl.LIBXL_DESTROY_TIMEOUT.patch- bsc#1061081 - VUL-0: CVE-2017-15595: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) 5a2fdb99-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch- bsc#1070158 - VUL-0: CVE-2017-17566: xen: x86 PV guests may gain access to internally used pages (XSA-248) xsa248.patch - bsc#1070159 - VUL-0: CVE-2017-17563: xen: broken x86 shadow mode refcount overflow check (XSA-249) xsa249.patch - bsc#1070160 - VUL-0: CVE-2017-17564: xen: improper x86 shadow mode refcount error handling (XSA-250) xsa250.patch - bsc#1070163 - VUL-0: CVE-2017-17565: xen: improper bug check in x86 log-dirty handling (XSA-251) xsa251.patch- bsc#1051729 - Invalid symlinks after install of sles12sp2 xen.spec - Upstream patch from Jan (bsc#1027519) 5a16a51e-sync-CPU-state-upon-final-domain-destruction.patch- Update to Xen 4.9.1 bug fix only release (bsc#1027519) xen-4.9.1-testing-src.tar.bz2 - Drop patches contained in new tarball 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch 59958ebf-gnttab-fix-transitive-grant-handling.patch 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch gcc7-arm.patch xsa236.patch xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch xsa238.patch xsa239.patch xsa240-1.patch xsa240-2.patch xsa241.patch xsa242.patch xsa243.patch xsa244.patch- bsc#1068187 - VUL-0: xen: x86: infinite loop due to missing PoD error checking (XSA-246) xsa246.patch - bsc#1068191 - VUL-0: xen: Missing p2m error checking in PoD code (XSA-247) xsa247-1.patch xsa247-2.patch- fate#324052 Support migration of Xen HVM domains larger than 1TB 59f31268-libxc-remove-stale-error-check-for-domain-size.patch- bsc#1055047 - virt-install --initrd-inject option does not work in Xen environments libxc-suppress-ramdisk-unzip.patch - bsc#1063123 - VUL-1: CVE-2017-15289: xen cirrus: OOB access issue in mode4and5 write functions CVE-2017-15289-qemut-cirrus-OOB-access-issue-in-mode4and5-write-functions.patch- bsc#1059777 - VUL-1: CVE-2017-5526: xen: audio: memory leakage in es1370 device CVE-2017-5526-qemut-audio-memory-leakage-in-es1370-device.patch- bsc#1061084 - VUL-0: CVE-2017-15593: xen: page type reference leak on x86 (XSA-242) xsa242.patch - bsc#1061086 - VUL-0: CVE-2017-15592: xen: x86: Incorrect handling of self-linear shadow mappings with translated guests (XSA-243) xsa243.patch - bsc#1061087 - VUL-0: CVE-2017-15594: xen: x86: Incorrect handling of IST settings during CPU hotplug (XSA-244) xsa244.patch- bsc#1061077 - VUL-0: CVE-2017-15591: xen: DMOP map/unmap missing argument checks (XSA-238) xsa238.patch - bsc#1061080 - VUL-0: CVE-2017-15589: xen: hypervisor stack leak in x86 I/O intercept code (XSA-239) xsa239.patch - bsc#1061081 - VUL-0: CVE-2017-15595: xen: Unlimited recursion in linear pagetable de-typing (XSA-240) xsa240-1.patch xsa240-2.patch - bsc#1061082 - VUL-0: CVE-2017-15588: xen: Stale TLB entry due to page type release race (XSA-241) xsa241.patch- bsc#1061075 - VUL-0: CVE-2017-15597: xen: pin count / page reference race in grant table code (XSA-236) xsa236.patch - bsc#1061076 - VUL-0: CVE-2017-15590: xen: multiple MSI mapping issues on x86 (XSA-237) xsa237-1.patch xsa237-2.patch xsa237-3.patch xsa237-4.patch xsa237-5.patch- bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to release lock on ARM (XSA-235) 599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch - Upstream patches from Jan (bsc#1027519) 59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch (Replaces xsa231.patch 59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch (Replaces xsa232.patch) 59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch (Replaces xsa233.patch) 59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch (Replaces xsa234.patch) 59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch 59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch 59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch 59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch 59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch 59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch 59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch 59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch - Dropped gcc7-xen.patch- bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when Secure Boot is Enabled xen.spec- Upstream patch from Juergen (bsc#1027519) 59a98d3e-libxc-increase-maximum-migration-stream-record-length.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored update from v6 to v9 to cover more cases for ballooned domUs libxc.sr.superpage.patch- bsc#1056278 - VUL-0: CVE-2017-14316: xen: Missing NUMA node parameter verification (XSA-231) xsa231.patch - bsc#1056280 - VUL-0: CVE-2017-14318: xen: Missing check for grant table (XSA-232) xsa232.patch - bsc#1056281 - VUL-0: CVE-2017-14317: xen: cxenstored: Race in domain cleanup (XSA-233) xsa233.patch - bsc#1056282 - VUL-0: CVE-2017-14319: xen: insufficient grant unmapping checks for x86 PV guests (XSA-234) xsa234.patch- bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen drop the patch because it is not upstream acceptable remove xen.suse_vtsc_tolerance.patch- bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack libxc.sr.superpage.patch- Upstream patches from Jan (bsc#1027519) 592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch 596f257e-x86-fix-hvmemul_insn_fetch.patch 5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch 598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch 598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch 5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch) 5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch) 5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch) 59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch) 59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch) 59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch- Use upstream variant of mini-os __udivmoddi4 change gcc7-mini-os.patch- bsc#1052686 - VUL-0: CVE-2017-12855: xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230) xsa230.patch- bsc#1035231 - migration of HVM domU does not use superpages on destination dom0 libxc.sr.superpage.patch- bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded recursion in grant table code (XSA-226) xsa226-1.patch xsa226-2.patch - bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege escalation via map_grant_ref (XSA-227) xsa227.patch - bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race conditions with maptrack free list handling (XSA-228) xsa228.patch- bsc#1049578 - VUL-1: CVE-2017-11434: xen: slirp: out-of-bounds read while parsing dhcp options CVE-2017-11434-qemut-slirp-out-of-bounds-read-while-parsing-dhcp-options.patch- bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen To avoid emulation of TSC access from a domU after live migration add a global tolerance for the measured host kHz xen.suse_vtsc_tolerance.patch- bsc#1002573 - Optimize LVM functions in block-dmmd block-dmmd- Record initial Xen dmesg in /var/log/xen/xen-boot.log for supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log- Remove storytelling from description in xen.rpm- Add pandoc (on opensuse) to get all manpages- bsc#1046637 - VUL-0: CVE-2017-10664: xen: qemu-nbd: server breaks with SIGPIPE upon client abort CVE-2017-10664-qemut-nbd-ignore-sigpipe.patch- Update to Xen 4.9.0 FCS (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update block-dmmd script (bsc#1002573) block-dmmd- Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 gcc7-arm.patch - Drop gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc8 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop due to incorrect return value CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch- bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory leakage via capture buffer CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch- Update to Xen 4.9.0-rc7 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc6 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1031343 - xen fails to build with GCC 7 gcc7-mini-os.patch gcc7-xen.patch- bsc#1031343 - xen fails to build with GCC 7 gcc7-error-xenpmd.patch- Update to Xen 4.9.0-rc5 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 - Drop xen-tools-pkgconfig-xenlight.patch- bsc#1037779 - xen breaks kexec-tools build xen-tools-pkgconfig-xenlight.patch- Update to Xen 4.9.0-rc4 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- bsc#1036146 - sles12sp2 xen VM dumps core to wrong path xen.spec- Update to Xen 4.9.0-rc3 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 aarch64-maybe-uninitialized.patch- Update to Xen 4.9.0-rc2 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2- Update to Xen 4.9.0-rc1 (fate#321394, fate#323108) xen-4.9.0-testing-src.tar.bz2 ioemu-devicemodel-include.patch - Dropped patches contained in new tarball xen-4.8.0-testing-src.tar.bz2 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch glibc-2.25-compatibility-fix.patch xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch- bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom 58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch- bsc#1015348 - L3: libvirtd does not start during boot suse-xendomains-service.patch- bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2 with Xen hypervisor. 58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch - bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration - latter one much faster 58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch - Upstream patch from Jan 58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch 58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch 58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch- bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block add" 58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch 0001-xenstore-let-write_node-and-some-callers-return-errn.patch 0002-xenstore-undo-function-rename.patch 0003-xenstore-rework-of-transaction-handling.patch - bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated update (XSA-206) xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1029827 - Forward port xenstored xs-09-add_change_node-params.patch xs-10-call-add_change_node.patch xs-11-tdb-record-header.patch xs-12-node-gen-count.patch xs-13-read-directory-part-support.patch xs-14-command-array.patch xs-15-command-return-val.patch xs-16-function-static.patch xs-17-arg-parsing.patch xs-18-default-buffer.patch xs-19-handle-alloc-failures.patch xs-20-tdb-version.patch xs-21-empty-tdb-database.patch xs-22-reopen_log-fix.patch xs-23-XS_DEBUG-rename.patch xs-24-xenstored_control.patch xs-25-control-enhance.patch xs-26-log-control.patch xs-27-memory-report.patch xs-28-remove-talloc-report.patch xs-29-define-off_t.patch- bsc#1029128 - fix make xen to really produce xen.efi with gcc48- bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite loop issue in ohci_service_ed_list CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch - Upstream patches from Jan (bsc#1027519) 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch 58a44771-IOMMU-always-call-teardown-callback.patch 58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch 58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch 58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch 58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch 58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch 58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch- bsc#1027654 - XEN fails to build against glibc 2.25 glibc-2.25-compatibility-fix.patch libxl.pvscsi.patch- fate#316613: Refresh and enable libxl.pvscsi.patch- bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo does not check if memory region is safe (XSA-209) CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch- bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault happened when adding usbctrl devices via xl 589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch- Upstream patches from Jan (bsc#1027519) 587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch 587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch 5882129d-x86emul-LOCK-check-adjustments.patch 58821300-x86-segment-attribute-handling.patch 58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch 58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch 5887888f-credit2-use-the-correct-scratch-cpumask.patch 5887888f-credit2-never-consider-CPUs-outside-of-pool.patch 5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch 5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch- bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob access while doing bitblt copy backward mode CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch- fate#322313 and fate#322150 require the acpica package ported to aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64 until these fates are complete. xen.spec- bsc#1021952 - Virutalization/xen: Bug xen-tools missing /usr/bin/domu-xenstore; guests fail to launch tmp_build.patch xen.spec- No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842)- bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/ xen.spec- 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch Replaces xsa202.patch (bsc#1014298) - 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch Replaces xsa203.patch (bsc#1014300) - 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch Replaces xsa204.patch (bsc#1016340) - Upstream patches from Jan 58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch 5853ed37-VT-d-correct-dma_msi_set_affinity.patch 5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch 585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch 586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch- bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch- bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of SYSCALL singlestep during emulation (XSA-204) xsa204.patch- bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch- bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be able to mask interrupts (XSA-202) xsa202.patch - bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL pointer check in VMFUNC emulation (XSA-203) xsa203.patch - Upstream patches from Jan 584806ce-x86emul-correct-PUSHF-POPF.patch 584fc649-fix-determining-when-domain-creation-is-complete.patch 58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch 58510cac-x86emul-MOVNTI-no-REP-prefixes.patch- Update to Xen 4.8 FCS xen-4.8.0-testing-src.tar.bz2 - Dropped xen-4.7.1-testing-src.tar.bz2 0001-libxc-Rework-extra-module-initialisation.patch 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch 0004-firmware-makefile-install-BIOS-blob.patch 0005-libxl-Load-guest-BIOS-from-file.patch 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch 0008-hvmloader-Locate-the-BIOS-blob.patch 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch 0011-hvmloader-Load-OVMF-from-modules.patch 0012-hvmloader-Specific-bios_load-function-required.patch 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch 57a30261-x86-support-newer-Intel-CPU-models.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch 58343ec2-x86emul-fix-huge-bit-offset-handling.patch 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch CVE-2016-9381-xsa197-qemut.patch CVE-2016-9637-xsa199-qemut.patch- bsc#1011652 - VUL-0: xen: qemu ioport array overflow CVE-2016-9637-xsa199-qemut.patch- bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null segments not always treated as unusable 58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch - bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch to VM86 mode mis-handled 58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch - bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base write emulation lacking canonical address checks 58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch - bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit ELF symbol table load leaking host data 58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch - bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit test instruction emulation broken 58343ec2-x86emul-fix-huge-bit-offset-handling.patch - bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen: x86 software interrupt injection mis-handled 58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch 58343f44-x86-svm-fix-injection-of-software-interrupts.patch - bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious about shared ring processing CVE-2016-9381-xsa197-qemut.patch - bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen: delimiter injection vulnerabilities in pygrub 58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch - Upstream patches from Jan 581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch 581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch 58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch 582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch 582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch- Update to Xen Version 4.7.1 xen-4.7.1-testing-src.tar.bz2 - Dropped patches contained in new tarball xen-4.7.0-testing-src.tar.bz2 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c93e52-fix-error-in-libxl_device_usbdev_list.patch 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch- bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI systems xen.spec- bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not always honored for x86 HVM guests (XSA-190) 57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch - bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic on broadwell-ep 57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - Upstream patches from Jan 57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch 57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch 57da8883-credit1-fix-mask-to-be-used-for-tickling.patch 57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch 57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch 57e93e1d-x86emul-correct-loading-of-ss.patch 57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch 57e93e89-x86-AMD-apply-erratum-665-workaround.patch 57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch 57fb6a91-x86-defer-not-present-segment-checks.patch 5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch 5800caec-x86emul-fix-pushing-of-selector-registers.patch 5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch 580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch 5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch- bsc#1007941 - Xen tools limit the number of vcpus to 256 when the system has 384 xen-arch-kconfig-nr_cpus.patch- bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch- bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero error in set_next_tick CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch - bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero error in serial_update_parameters CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch- bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in mcf_fec_do_tx CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch - bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite loop in pcnet_rdra_addr CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch- bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3 recursive pagetable for 32-bit PV guests (XSA-185) 57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch - bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of instruction pointer truncation during emulation (XSA-186) 57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch 57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch - bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of sh_ctxt->seg_reg[] (XSA-187) 57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch 57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch - bsc#991934 - xen hypervisor crash in csched_acct 57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch - Upstream patches from Jan 57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch 57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch 57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch 57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch 57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch 57c82be2-x86-32on64-adjust-call-gate-emulation.patch 57c96e2c-x86-correct-PT_NOTE-file-position.patch 57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch- bsc#979002 - add 60-persistent-xvd.rules and helper script also to initrd, add the relevant dracut helper- bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol- bsc#989679 - [pvusb feature] USB device not found when 'virsh detach-device guest usb.xml' 57c93e52-fix-error-in-libxl_device_usbdev_list.patch- bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to get contiguous memory for DMA from Xen 57ac6316-don-t-restrict-DMA-heap-to-node-0.patch - bsc#978755 - xen uefi systems fail to boot - bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot 57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch - Upstream patch from Jan 57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch- spec: to stay compatible with the in-tree qemu-xen binary, use /usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64 bsc#986164- bsc#970135 - new virtualization project clock test randomly fails on Xen 576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch 5769106e-x86-generate-assembler-equates-for-synthesized.patch 57a1e603-x86-time-adjust-local-system-time-initialization.patch 57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch 57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch - bsc#991934 - xen hypervisor crash in csched_acct 57973099-have-schedulers-revise-initial-placement.patch 579730e6-remove-buggy-initial-placement-algorithm.patch - bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation in PV guests (XSA-182) 57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch - bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP whitelisting in 32-bit exception / event delivery (XSA-183) 57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch - Upstream patches from Jan 57a30261-x86-support-newer-Intel-CPU-models.patch- bsc#985503 - vif-route broken vif-route.patch- bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3 failed on sles11sp4 xen host. pygrub-handle-one-line-menu-entries.patch- bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB write access in esp_do_dma CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch- bsc#900418 - Dump cannot be performed on SLES12 XEN 57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch - Upstream patches from Jan 575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch 57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch- fate#319989 - Update to Xen 4.7 FCS xen-4.7.0-testing-src.tar.bz2 - Drop CVE-2014-3672-qemut-xsa180.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (Additional fixes) block-dmmd- Convert with_stubdom into build_conditional to allow adjusting via prjconf - Convert with_debug into build_conditional to allow adjusting via prjconf- bsc#979002 - add 60-persistent-xvd.rules and helper script to xen-tools-domU to simplify transition to pvops based kernels- Convert with_oxenstored into build_conditional to allow adjusting via prjconf (fate#320836)- bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w access while processing ESP_FIFO CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch - bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch- fate#319989 - Update to Xen 4.7 RC5 xen-4.7.0-testing-src.tar.bz2- fate#319989 - Update to Xen 4.7 RC4 xen-4.7.0-testing-src.tar.bz2 - Dropped xen.pkgconfig-4.7.patch xsa164.patch- bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging (XSA-180) CVE-2014-3672-qemut-xsa180.patch- bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch - bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch- fate#319989 - Update to Xen 4.7 RC3 xen-4.7.0-testing-src.tar.bz2 - Dropped libxl-remove-cdrom-cachemode.patch x86-PoD-only-reclaim-if-needed.patch gcc6-warnings-as-errors.patch- bsc#954872 - script block-dmmd not working as expected - libxl: error: libxl_dm.c (another modification) block-dmmd- fate#319989 - Update to Xen 4.7 RC2 xen-4.7.0-testing-src.tar.bz2- bsc#961600 - L3: poor performance when Xen HVM domU configured with max memory > current memory x86-PoD-only-reclaim-if-needed.patch- Mark SONAMEs and pkgconfig as xen 4.7 xen.pkgconfig-4.7.patch- bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom libxl-remove-cdrom-cachemode.patch- fate#319989 - Update to Xen 4.7 RC1 xen-4.7.0-testing-src.tar.bz2- fate#316614: set migration constraints from cmdline restore libxl.set-migration-constraints-from-cmdline.patch- Remove obsolete patch for xen-kmp magic_ioport_compat.patch- fate#316613: update to v12 libxl.pvscsi.patch- Update to the latest Xen 4.7 pre-release c2994f86 Drop libxl.migrate-legacy-stream-read.patch- bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host to SLES12SP2 Alpha 1 host using xl migrate libxl.migrate-legacy-stream-read.patch- Add patches from proposed upstream series to load BIOS's from the toolstack instead of embedding in hvmloader http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html 0001-libxc-Rework-extra-module-initialisation.patch, 0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch, 0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch, 0004-firmware-makefile-install-BIOS-blob.patch, 0005-libxl-Load-guest-BIOS-from-file.patch, 0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch, 0007-hvmloader-Grab-the-hvm_start_info-pointer.patch, 0008-hvmloader-Locate-the-BIOS-blob.patch, 0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch, 0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch, 0011-hvmloader-Load-OVMF-from-modules.patch, 0012-hvmloader-Specific-bios_load-function-required.patch, 0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch, 0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch - Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin firmware from qemu-ovmf-x86_64. The firmware is preloaded with Microsoft keys to more closely resemble firmware on real hardware FATE#320490- fate#319989: Update to Xen 4.7 (pre-release) xen-4.7.0-testing-src.tar.bz2 - Dropped: xen-4.6.1-testing-src.tar.bz2 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch hotplug-Linux-block-performance-fix.patch set-mtu-from-bridge-for-tap-interface.patch xendomains-libvirtd-conflict.patch xsa154.patch xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa170.patch- Use system SeaBIOS instead of building/installing another one FATE#320638 Dropped files: seabios-dir-remote.tar.bz2 xen-c99-fix.patch xen.build-compare.seabios.patch- spec: drop BuildRequires that were only needed for qemu-xen- bsc#969377 - xen does not build with GCC 6 ipxe-use-rpm-opt-flags.patch gcc6-warnings-as-errors.patch- bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch - Drop xsa154-fix.patch- Use system qemu instead of building/installing yet another qemu FATE#320638 - Dropped files qemu-xen-dir-remote.tar.bz2 CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch qemu-xen-enable-spice-support.patch qemu-xen-upstream-qdisk-cache-unsafe.patch tigervnc-long-press.patch xsa162-qemuu.patch- bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer dereference in vapic_write() CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch- bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in remote NDIS control message handling CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch- bsc#954872 - L3: script block-dmmd not working as expected - libxl: error: libxl_dm.c block-dmmd - Update libxl to recognize dmmd and npiv prefix in disk spec xen.libxl.dmmd.patch- bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers in ohci module leads to null pointer dereference CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch - bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer dereference in remote NDIS control message handling CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch- Update to Xen Version 4.6.1 xen-4.6.1-testing-src.tar.bz2 - Dropped patches now contained in tarball or unnecessary xen-4.6.0-testing-src.tar.bz2 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch 56549f24-x86-vPMU-document-as-unsupported.patch 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemut-xenfb.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa159.patch xsa160.patch xsa162-qemut.patch xsa165.patch xsa166.patch xsa167.patch xsa168.patch- bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent cachability flags on guest mappings (XSA-154) xsa154.patch - bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may crash guest with non-canonical RIP (XSA-170) xsa170.patch- bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in hmp_sendkey routine CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch- bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch - bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref in sosendto() CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch- bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in ne2000_receive() function CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch- bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on incoming migration CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch - bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch - Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch- bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch - bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun on incoming migration CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch- bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch- bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun on invalid state load CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch- bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient resource limiting in VNC websockets decoder CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch - bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on invalid state load CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient bits_per_pixel from the client sanitization CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch- bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer overun on invalid state CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch - bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer overflow in non-loopback mode CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch- bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch- bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch - bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch- bsc#959695 - missing docs for xen xen.spec- bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) xsa168.patch - bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage functionality missing sanity checks (XSA-167) xsa167.patch - bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch- bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers leads to a crash via assert(2) call CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch - bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch- bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional logging upon guest changing callback method (XSA-169) 5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch- Adjust xen-dom0-modules.service to run Before xenstored.service instead of proc-xen.mount to workaround a bug in systemd "design" (bnc#959845)- bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch- bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155) xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch xsa155-qemuu-qdisk-double-access.patch xsa155-qemut-qdisk-double-access.patch xsa155-qemuu-xenfb.patch xsa155-qemut-xenfb.patch - bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch - bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer dereference issue CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch - bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch - bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164) xsa164.patch - bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165) xsa165.patch - bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) xsa166.patch- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - Upstream patches from Jan 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch 56544a57-VMX-fix-adjust-trap-injection.patch 56546ab2-sched-fix-insert_vcpu-locking.patch- bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163) 56549f24-x86-vPMU-document-as-unsupported.patch - bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.patch - bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160) xsa160.patch - bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162) xsa162-qemuu.patch xsa162-qemut.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) 5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch 5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch- fate#315712: XEN: Use the PVOPS kernel Turn off building the KMPs now that we are using the pvops kernel xen.spec- Upstream patches from Jan 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch 5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch 56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch 56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch 5632127b-x86-guard-against-undue-super-page-PTE-creation.patch 5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch 563212e4-xenoprof-free-domain-s-vcpu-array.patch 563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch 56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch 56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch 5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch) 5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch - Dropped 55b0a2db-x86-MSI-track-guest-masking.patch- Use upstream variants of block-iscsi and block-nbd- Remove xenalyze.hg, its part of xen-4.6- Update to Xen Version 4.6.0 xen-4.6.0-testing-src.tar.bz2 mini-os.tar.bz2 blktap2-no-uninit.patch stubdom-have-iovec.patch - Renamed xsa149.patch to CVE-2015-7969-xsa149.patch - Dropped patches now contained in tarball or unnecessary xen-4.5.2-testing-src.tar.bz2 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch 54f4985f-libxl-fix-libvirtd-double-free.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 551ac326-xentop-add-support-for-qdisk.patch 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch local_attach_support_for_phy.patch pci-attach-fix.patch qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch xl-coredump-file-location.patch- bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) CVE-2015-5307-xsa156.patch- Update to Xen 4.5.2 xen-4.5.2-testing-src.tar.bz2 - Drop the following xen-4.5.1-testing-src.tar.bz2 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 559bdde5-pull-in-latest-linux-earlycpio.patch 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch xsa151.patch xsa152.patch xsa153-libxl.patch CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch"- bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch- Upstream patches from Jan 5604f239-x86-PV-properly-populate-descriptor-tables.patch 561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch 561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch 561d20a0-x86-hide-MWAITX-from-PV-domains.patch 561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand balloon size inaccuracy can crash guests (XSA-153) xsa153-libxl.patch- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain vcpu pointer array (DoS) (XSA-149) xsa149.patch - bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain profiling-related vcpu pointer array (DoS) (XSA-151) xsa151.patch - bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and profiling hypercalls log without rate limiting (XSA-152) xsa152.patch - Dropped 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure temporary file use in /net/slirp.c CVE-2015-4037-qemuu-smb-config-dir-name.patch CVE-2015-4037-qemut-smb-config-dir-name.patch - bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table size to avoid integer overflows CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled creation of large page mappings by PV guests (XSA-148) CVE-2015-7835-xsa148.patch- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd abort 54f4985f-libxl-fix-libvirtd-double-free.patch- bsc#949046 - Increase %suse_version in SP1 to 1316 xen.spec - Update README.SUSE detailing dom0 ballooning recommendations- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch- bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1 pci-attach-fix.patch- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1 5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch- Upstream patches from Jan 55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch 55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch 55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch 55e43fd8-x86-NUMA-fix-setup_node.patch 55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch 55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch 54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch 54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch 54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch - bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow 55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 55b0a218-x86-PCI-CFG-write-intercept.patch 55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch 55b0a2ab-x86-MSI-X-enable.patch 55b0a2db-x86-MSI-track-guest-masking.patch - Upstream patches from Jan 552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch 559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch 559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch 559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch 55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch 55a77e4f-dmar-device-scope-mem-leak-fix.patch 55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch 55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch - Dropped for upstream version x86-MSI-mask.patch x86-MSI-pv-unmask.patch x86-MSI-X-enable.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model xsa140-qemuu-1.patch xsa140-qemuu-2.patch xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch - bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen block unplug protocol xsa139-qemuu.patch- bsc#937371 - xen vm's running after reboot xendomains-libvirtd-conflict.patch- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch- Remove xendomains.service from systemd preset file because it conflicts with libvirt-guests.service (bnc#937371) Its up to the admin to run systemctl enable xendomains.service- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line config handling stack overflow CVE-2015-3259-xsa137.patch - Upstream patches from Jan 558bfaa0-x86-traps-avoid-using-current-too-early.patch 5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch 559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch 559bdde5-pull-in-latest-linux-earlycpio.patch - Upstream patches from Jan pending review 552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch 552d0fe8-x86-mtrr-include-asm-atomic.h.patch 552d293b-x86-vMSI-X-honor-all-mask-requests.patch 552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch 554c7aee-x86-provide-arch_fetch_and_add.patch 554c7b00-arm-provide-arch_fetch_and_add.patch 55534b0a-x86-provide-add_sized.patch 55534b25-arm-provide-add_sized.patch 5555a4f8-use-ticket-locks-for-spin-locks.patch 5555a5b9-x86-arm-remove-asm-spinlock-h.patch 5555a8ec-introduce-non-contiguous-allocation.patch 55795a52-x86-vMSI-X-support-qword-MMIO-access.patch 557eb55f-gnttab-per-active-entry-locking.patch 557eb5b6-gnttab-introduce-maptrack-lock.patch 557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch 557ffab8-evtchn-factor-out-freeing-an-event-channel.patch 5582bf43-evtchn-simplify-port_is_valid.patch 5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch 5583d9c5-x86-MSI-X-cleanup.patch 5583da09-x86-MSI-track-host-and-guest-masking-separately.patch 5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch 5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch 5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch 5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch 5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch 5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch x86-MSI-pv-unmask.patch x86-pci_cfg_okay.patch x86-PCI-CFG-write-intercept.patch x86-MSI-X-maskall.patch x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-mask.patch- Adjust more places to use br0 instead of xenbr0- bnc#936516 - xen fails to build with kernel update(4.1.0 from stable) 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch- Update to Xen Version 4.5.1 FCS (fate#315675) xen-4.5.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch 5576f178-kexec-add-more-pages-to-v1-environment.patch 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch qemu-MSI-X-enable-maskall.patch qemu-MSI-X-latch-writes.patch x86-MSI-X-guest-mask.patch- Replace 5124efbe-add-qxl-support.patch with the variant that finally made it upstream, 554cc211-libxl-add-qxl.patch- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages qemu-MSI-X-latch-writes.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed - bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been observed - bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot has been observed x86-MSI-X-teardown.patch x86-MSI-X-enable.patch x86-MSI-X-guest-mask.patch x86-MSI-X-maskall.patch qemu-MSI-X-enable-maskall.patch - Upstream patches from Jan 55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch 55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch 55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch 55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch 55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch 55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch 5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch - Dropped the following patches now contained in the tarball xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch- Update to Xen 4.5.1 RC2 - bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI register access in qemu CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch CVE-2015-4106-xsa131-9.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable qemu MSI-X pass-through error messages CVE-2015-4105-xsa130.patch - bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask bits inadvertently exposed to guests CVE-2015-4104-xsa129.patch - bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential unintended writes to host MSI message data field via qemu CVE-2015-4103-xsa128.patch - Upstream patches from Jan 5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch 556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch 556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch 556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch 556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch 556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch- Add DefaultDependencies=no to xen-dom0-modules.service because it has to run before proc-xen.mount- Update to Xen 4.5.1 RC1- Update blktap-no-uninit.patch to work with gcc-4.5- bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through XEN_DOMCTL_gettscinfo (XSA-132) 5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch- bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu floppy driver host code execution CVE-2015-3456-xsa133-qemuu.patch CVE-2015-3456-xsa133-qemut.patch- bsc#928783 - Reboot failure; Request backport of upstream Xen patch to 4.5.0, or update pkgs to 4.5.1 5513b458-allow-reboot-overrides-when-running-under-EFI.patch 5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch- bnc#927750 - Avoid errors reported by system-modules-load.service- Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively turn errors back to warnings to fix build with GCC 5. - Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to avoid implicit-fortify-decl rpmlint error. - Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch.- xentop: Fix memory leak on read failure 551ac326-xentop-add-support-for-qdisk.patch- Dropped xentop-add-support-for-qdisk.patch in favor of upstream version 551ac326-xentop-add-support-for-qdisk.patch- Enable spice support in qemu for x86_64 5124efbe-add-qxl-support.patch qemu-xen-enable-spice-support.patch- Add xen-c99-fix.patch to remove pointless inline specifier on function declarations which break build with a C99 compiler which GCC 5 is by default. (bsc#921994) - Add ipxe-no-error-logical-not-parentheses.patch to supply - Wno-logical-not-parentheses to the ipxe build to fix breakage with GCC 5. (bsc#921994)- bnc#921842 - Xentop doesn't display disk statistics for VMs using qdisks xentop-add-support-for-qdisk.patch- Disable the PIE enablement done for Factory, as the XEN code is not buildable with PIE and it does not make much sense to build the hypervisor code with it.- bnc#918169 - XEN fixes required to work with Kernel 3.19.0 xen.spec- Package xen.changes because its referenced in xen.spec- Update seabios to rel-1.7.5 which is the correct version for Xen 4.5- Update to Xen 4.5.0 FCS- Include systemd presets in 13.2 and older- bnc#897352 - Enable xencommons/xendomains only during fresh install - disable restart on upgrade because the toolstack is not restartable- adjust seabios, vgabios, stubdom and hvmloader build to reduce build-compare noise xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch xen.build-compare.ipxe.patch xen.build-compare.vgabios.patch xen.build-compare.seabios.patch xen.build-compare.man.patch- Update to Xen 4.5.0 RC4- Remove xend specific if-up scripts Recording bridge slaves is a generic task which should be handled by generic network code- Use systemd features from upstream requires updated systemd-presets-branding package- Update to Xen 4.5.0 RC3- Set GIT, WGET and FTP to /bin/false- Use new configure features instead of make variables xen.stubdom.newlib.patch- adjust docs and xen build to reduce build-compare noise xen.build-compare.doc_html.patch xen.build-compare.xen_compile_h.patch- Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise- Update to Xen 4.5.0 RC2- Update to Xen 4.5.0 RC1 xen-4.5.0-testing-src.tar.bz2 - Remove all patches now contained in the new tarball xen-4.4.1-testing-src.tar.bz2 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch 53d124e7-fix-list_domain_details-check-config-data-length-0.patch 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53fcebab-xen-pass-kernel-initrd-to-qemu.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch libxc-pass-errno-to-callers-of-xc_domain_save.patch libxl.honor-more-top-level-vfb-options.patch libxl.add-option-for-discard-support-to-xl-disk-conf.patch libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch - Xend/xm is no longer supported and is not part of the upstream code. Remove all xend/xm specific patches, configs, and scripts xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh init.xend xend-relocation.sh xend.service xend-relocation-server.fw domUloader.py xmexample.domUloader xmexample.disks bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch network-nat-open-SuSEfirewall2-FORWARD.patch xend-set-migration-constraints-from-cmdline.patch xen.migrate.tools-xend_move_assert_to_exception_block.patch xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch tmp-initscript-modprobe.patch init.xendomains xendomains.service xen-watchdog.service xen-updown.sh- bnc#901317 - L3: increase limit domUloader to 32MB domUloader.py- bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF device (SR-IOV) to guest 54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch - Upstream patches from Jan 540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch) 54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch) 54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch) 542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch) 54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch 5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch 5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch 542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch 542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch) 54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch 54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch 54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch) 54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch- restrict requires on grub2-x86_64-xen to x86_64 hosts- bsc#900292 - xl: change default dump directory xl-coredump-file-location.patch- Update xen2libvirt.py to better detect and handle file formats- bnc#889526 - VUL-0: CVE-2014-5146, CVE-2014-5149: xen: XSA-97 Long latency virtual-mmu operations are not preemptible xsa97.patch - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch 541ad3ca-x86-HVM-batch-vCPU-wakeups.patch - Upstream patches from Jan 540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch 541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch- bnc#897657 - VUL-0: CVE-2014-7188: xen: XSA-108 Improper MSR range used for x2APIC emulation xsa108.patch- bnc#897906 - libxc: check return values on mmap() and madvise() on xc_alloc_hypercall_buffer() 537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch- bnc#897614 - Virtualization/xen: Bug `xen-tools` uninstallable; grub2-x86_64-xen dependency not available xen.spec- More cleanup of README.SUSE- Update xen patch with upstream patch so that latest libvirt patch can work. (bnc#896044) + 53fcebab-xen-pass-kernel-initrd-to-qemu.patch - xen-pass-kernel-initrd-to-qemu.patch- bnc#895804 - VUL-0: CVE-2014-6268: xen: XSA-107: Mishandling of uninitialised FIFO-based event channel control blocks xsa107.patch - bnc#895802 - VUL-0: CVE-2014-7156: xen: XSA-106: Missing privilege level checks in x86 emulation of software interrupts xsa106.patch - bnc#895799 - VUL-0: CVE-2014-7155: xen: XSA-105: Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation xsa105.patch - bnc#895798 - VUL-0: CVE-2014-7154: xen: XSA-104: Race condition in HVMOP_track_dirty_vram xsa104.patch- bnc#882405 - Only one key-press event was generated while holding a key before key-release in pv guests through xl vncviewer tigervnc-long-press.patch- Update to Xen Version 4.4.1 FCS xen-4.4.1-testing-src.tar.bz2 - Dropped patches now contained in tarball 53d7b781-x86-cpu-undo-BIOS-CPUID-max_leaf-limit-earlier.patch 53df71c7-lz4-check-for-underruns.patch 53e47d6b-x86_emulate-properly-do-IP-updates-and-other-side-effects.patch- bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch 53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch 53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch 53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch 54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch - Upstream patches from Jan 53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch 53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch 53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch 53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch- bnc#864801 - VUL-0: CVE-2013-4540: qemu: zaurus: buffer overrun on invalid state load CVE-2013-4540-qemu.patch- Update README.SUSE with additional debug help- bnc#883112 - Xen Panic during boot "System without CMOS RTC must be booted from EFI" 53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch - Upstream patches from Jan 53d7b781-x86-cpu-undo-BIOS-CPUID-max_leaf-limit-earlier.patch 53df71c7-lz4-check-for-underruns.patch 53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch 53e47d6b-x86_emulate-properly-do-IP-updates-and-other-side-effects.patch- Update to Xen Version 4.4.1-rc2 xen-4.4.1-testing-src.tar.bz2 - Dropped the following upstream patches and xen-4.4.0-testing-src.tar.bz2 537b5ede-move-domain-to-cpupool0-before-destroying-it.patch 5327190a-x86-Intel-work-around-Xeon-7400-series-erratum-AAI65.patch 534bdf47-x86-HAP-also-flush-TLB-when-altering-a-present-1G-or-intermediate-entry.patch 535a354b-passthrough-allow-to-suppress-SERR-and-PERR-signaling.patch 53636ebf-x86-fix-guest-CPUID-handling.patch 5347b524-evtchn-eliminate-64k-ports-limitation.patch 53a040c6-page-alloc-scrub-pages-used-by-hypervisor-upon-freeing.patch 53a1990a-IOMMU-prevent-VT-d-device-IOTLB-operations-on-wrong-IOMMU.patch 53732f4f-x86-MCE-bypass-uninitialized-vcpu-in-vMCE-injection.patch 531dc0e2-xmalloc-handle-correctly-page-allocation-when-align-size.patch 5331917d-x86-enforce-preemption-in-HVM_set_mem_access-p2m_set_mem_access.patch 531d8e09-x86-HVM-fix-memory-type-merging-in-epte_get_entry_emt.patch 538ee637-ACPI-Prevent-acpi_table_entries-from-falling-into-a-infinite-loop.patch 535a34eb-VT-d-suppress-UR-signaling-for-server-chipsets.patch 535e31bc-x86-HVM-correct-the-SMEP-logic-for-HVM_CR0_GUEST_RESERVED_BITS.patch 53859956-timers-set-the-deadline-more-accurately.patch 53636978-hvm_set_ioreq_page-releases-wrong-page-in-error-path.patch 535a3516-VT-d-suppress-UR-signaling-for-desktop-chipsets.patch 53cfdcc7-avoid-crash-when-doing-shutdown-with-active-cpupools.patch 5383175e-VT-d-fix-mask-applied-to-DMIBAR-in-desktop-chipset-XSA-59-workaround.patch 531d8e34-x86-HVM-consolidate-passthrough-handling-in-epte_get_entry_emt.patch 532fff53-x86-fix-determination-of-bit-count-for-struct-domain-allocations.patch 5357baff-x86-add-missing-break-in-dom0_pit_access.patch 530c54c3-x86-mce-Reduce-boot-time-logspam.patch 5383167d-ACPI-ERST-fix-table-mapping.patch 5390927f-x86-fix-reboot-shutdown-with-running-HVM-guests.patch 530b27fd-x86-MCE-Fix-race-condition-in-mctelem_reserve.patch 53709b77-Nested-VMX-load-current_vmcs-only-when-it-exists.patch 5396d818-avoid-crash-on-HVM-domain-destroy-with-PCI-passthrough.patch 531d8fd0-kexec-identify-which-cpu-the-kexec-image-is-being-executed-on.patch 5385956b-x86-don-t-use-VA-for-cache-flush-when-also-flushing-TLB.patch 539ec004-x86-mce-don-t-spam-the-console-with-CPUx-Temperature-z.patch 53909259-x86-domctl-two-functional-fixes-to-XEN_DOMCTL_-gs-etvcpuextstate.patch 53859549-AMD-IOMMU-don-t-free-page-table-prematurely.patch 533d413b-x86-mm-fix-checks-against-max_mapped_pfn.patch 535fa503-x86-HVM-restrict-HVMOP_set_mem_type.patch 53271880-VT-d-fix-RMRR-handling.patch 5390917a-VT-d-honor-APEI-firmware-first-mode-in-XSA-59-workaround-code.patch 538dcada-x86-HVM-eliminate-vulnerabilities-from-hvm_inject_msi.patch 53455585-x86-AMD-feature-masking-is-unavailable-on-Fam11.patch 537b5e50-VT-d-apply-quirks-at-device-setup-time-rather-than-only-at-boot.patch 53a199d7-x86-EFI-allow-FPU-XMM-use-in-runtime-service-functions.patch 53cfddaf-x86-mem_event-validate-the-response-vcpu_id-before-acting-on-it.patch 53b16cd4-VT-d-ATS-correct-and-clean-up-dev_invalidate_iotlb.patch 53cfdde4-x86-mem_event-prevent-underflow-of-vcpu-pause-counts.patch 53356c1e-x86-HVM-correct-CPUID-leaf-80000008-handling.patch 534bbd90-x86-nested-HAP-don-t-BUG-on-legitimate-error.patch 530b28c5-x86-MSI-don-t-risk-division-by-zero.patch 5396e805-x86-HVM-refine-SMEP-test-in-HVM_CR4_GUEST_RESERVED_BITS.patch 5370e03b-pygrub-fix-error-handling-if-no-valid-partitions-are-found.patch 5321b257-x86-make-hypercall-preemption-checks-consistent.patch 5321b20b-common-make-hypercall-preemption-checks-consistent.patch 538c338f-x86-amd_ucode-flip-revision-numbers-in-printk.patch 537b5e79-VT-d-extend-error-report-masking-workaround-to-newer-chipsets.patch 531d8db1-x86-hvm-refine-the-judgment-on-IDENT_PT-for-EMT.patch 53b56de1-properly-reference-count-DOMCTL_-un-pausedomain-hypercalls.patch 530b2880-Nested-VMX-update-nested-paging-mode-on-vmexit.patch 533ad1ee-VMX-fix-PAT-value-seen-by-guest.patch 53206661-pygrub-support-linux16-and-initrd16.patch 5315a254-IOMMU-generalize-and-correct-softirq-processing.patch- bnc#820873 - The "long" option doesn't work with "xl list" 53d124e7-fix-list_domain_details-check-config-data-length-0.patch- bnc#888996 - Package 'xen-tool' contains 'SuSE' spelling in a filename and/or SPEC file Renamed README.SuSE -> README.SUSE Modified files: xen.spec, boot.local.xenU, init.pciback xend-config.patch, xend-vif-route-ifup.patch- bnc#882673 - Dom0 memory should enforce a minimum memory size (e.g. dom0_mem=min:512M) xen.spec (Mike Latimer)- Upstream patches from Jan 5347b524-evtchn-eliminate-64k-ports-limitation.patch 53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch 53b16cd4-VT-d-ATS-correct-and-clean-up-dev_invalidate_iotlb.patch 53b56de1-properly-reference-count-DOMCTL_-un-pausedomain-hypercalls.patch 53cfdcc7-avoid-crash-when-doing-shutdown-with-active-cpupools.patch 53cfddaf-x86-mem_event-validate-the-response-vcpu_id-before-acting-on-it.patch 53cfdde4-x86-mem_event-prevent-underflow-of-vcpu-pause-counts.patch- bnc#886801 - xl vncviewer: The first domu can be accessed by any id 53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch- Upstream pygrub bug fix 5370e03b-pygrub-fix-error-handling-if-no-valid-partitions-are-found.patch- Fix pygrub to handle old 32 bit VMs pygrub-boot-legacy-sles.patch (Mike Latimer)- Remove xen-vmresync utility. It is an old Platespin Orchestrate utility that should have never been included in the Xen package. Updated xen.spec- Rework xen-destroy utility included in xen-utils bnc#885292 and bnc#886063 Updated xen-utils-0.1.tar.bz2- bnc#886063 - Xen monitor fails (xl list --long output different from xm list --long output) - bnc#885292 - VirtualDomain: pid_status does not know how to check status on SLE12 Re-enable building xen-utils for sle12 and include xen-list and xen-destroy in the xen-tools package for HA. xen.spec- bnc#882127 - Xen kernel panics on booting SLES12 Beta 8 53a199d7-x86-EFI-allow-FPU-XMM-use-in-runtime-service-functions.patch - Upstream patches from Jan 538c338f-x86-amd_ucode-flip-revision-numbers-in-printk.patch 538ee637-ACPI-Prevent-acpi_table_entries-from-falling-into-a-infinite-loop.patch 5390917a-VT-d-honor-APEI-firmware-first-mode-in-XSA-59-workaround-code.patch 53909259-x86-domctl-two-functional-fixes-to-XEN_DOMCTL_-gs-etvcpuextstate.patch 5390927f-x86-fix-reboot-shutdown-with-running-HVM-guests.patch 5396d818-avoid-crash-on-HVM-domain-destroy-with-PCI-passthrough.patch 5396e805-x86-HVM-refine-SMEP-test-in-HVM_CR4_GUEST_RESERVED_BITS.patch 539ebe62-x86-EFI-improve-boot-time-diagnostics.patch 539ec004-x86-mce-don-t-spam-the-console-with-CPUx-Temperature-z.patch 53a040c6-page-alloc-scrub-pages-used-by-hypervisor-upon-freeing.patch (replaces xsa100.patch) 53a1990a-IOMMU-prevent-VT-d-device-IOTLB-operations-on-wrong-IOMMU.patch- Replace 'domUloader' with 'pygrub' when converting or importing Xen domains into libvirt with xen2libvirt. domUloader is no longer provided in xen-tools. Modified: xen2libvirt.py- fate#310956: Support Direct Kernel Boot for FV guests patches would go to upstream: qemu side: qemu-support-xen-hvm-direct-kernel-boot.patch xen side: xen-pass-kernel-initrd-to-qemu.patch- Modify how we check for libvirt managed domains xl-check-for-libvirt-managed-domain.patch- bnc#880751 - VUL-0: xen: Hypervisor heap contents leaked to guests xsa100.patch - bnc#878841 - VUL-0: XSA-96: Xen: Vulnerabilities in HVM MSI injection 538dcada-x86-HVM-eliminate-vulnerabilities-from-hvm_inject_msi.patch - Upstream patches from Jan 537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch 537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch 5383167d-ACPI-ERST-fix-table-mapping.patch 5383175e-VT-d-fix-mask-applied-to-DMIBAR-in-desktop-chipset-XSA-59-workaround.patch 53859549-AMD-IOMMU-don-t-free-page-table-prematurely.patch 5385956b-x86-don-t-use-VA-for-cache-flush-when-also-flushing-TLB.patch 53859956-timers-set-the-deadline-more-accurately.patch- bnc#879425: handle cache=unsafe from libvirt to disable flush in qdisk libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch qemu-xen-upstream-qdisk-cache-unsafe.patch- libxl: introduce an option for disabling the non-O_DIRECT workaround recognize direct-io-safe in domU.cfg diskspec libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch- fate#316071: add discard support for file backed storage (qdisk) update patch to allow more values in overloaded ->readwrite member- bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 537b5e50-VT-d-apply-quirks-at-device-setup-time-rather-than-only-at-boot.patch 537b5e79-VT-d-extend-error-report-masking-workaround-to-newer-chipsets.patch - Upstream patches from Jan 53709b77-Nested-VMX-load-current_vmcs-only-when-it-exists.patch 53732f4f-x86-MCE-bypass-uninitialized-vcpu-in-vMCE-injection.patch 537b5ede-move-domain-to-cpupool0-before-destroying-it.patch- Update README.SuSE with information on the toolstack change- fate#316071: add discard support for file backed storage (qdisk) update to recognize option discard/no-discard instead of discard=0,1 to match upstream change- fate#316613: Implement pvscsi in xl/libxl libxl.pvscsi.patch- bnc#875668 - VUL-0: CVE-2014-3124: xen: XSA-92: HVMOP_set_mem_type allows invalid P2M entries to be created 535fa503-x86-HVM-restrict-HVMOP_set_mem_type.patch (replaces xsa92.patch) - bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts 535a34eb-VT-d-suppress-UR-signaling-for-server-chipsets.patch 535a3516-VT-d-suppress-UR-signaling-for-desktop-chipsets.patch - Upstream patches from Jan 535a354b-passthrough-allow-to-suppress-SERR-and-PERR-signaling.patch 535e31bc-x86-HVM-correct-the-SMEP-logic-for-HVM_CR0_GUEST_RESERVED_BITS.patch 53636978-hvm_set_ioreq_page-releases-wrong-page-in-error-path.patch 53636ebf-x86-fix-guest-CPUID-handling.patch- Fix pygrub to handle VM with no grub/menu.lst file. - Don't use /var/run/xend/boot for temporary boot directory pygrub-boot-legacy-sles.patch- When the xl command is used, check to see if the domain being modified is managed by libvirt and print warning if it is. xl-check-for-libvirt-managed-domain.patch- Upstream patches from Jan 53455585-x86-AMD-feature-masking-is-unavailable-on-Fam11.patch 5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch 534bbd90-x86-nested-HAP-don-t-BUG-on-legitimate-error.patch 534bdf47-x86-HAP-also-flush-TLB-when-altering-a-present-1G-or-intermediate-entry.patch 53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch 5357baff-x86-add-missing-break-in-dom0_pit_access.patch - XSA-92 xsa92.patch- Add # needssslcertforbuild to use the project's certificate when building in a home project. (bnc#872354)- Upstream patches from Jan 53356c1e-x86-HVM-correct-CPUID-leaf-80000008-handling.patch 533ad1ee-VMX-fix-PAT-value-seen-by-guest.patch 533d413b-x86-mm-fix-checks-against-max_mapped_pfn.patch- bnc#862608 - SLES 11 SP3 vm-install should get RHEL 7 support when released 53206661-pygrub-support-linux16-and-initrd16.patch - Upstream bug fixes 53299d8f-xenconsole-reset-tty-on-failure.patch 53299d8f-xenconsole-tolerate-tty-errors.patch- fix build for armv7l and aarch64- Remove compiletime strings from qemu-upstream qemu-xen-upstream-megasas-buildtime.patch- bnc#871546 - KMPs are not signed in SUSE:SLE-12:GA? xen.spec- Upstream patches from Jan 532fff53-x86-fix-determination-of-bit-count-for-struct-domain-allocations.patch 5331917d-x86-enforce-preemption-in-HVM_set_mem_access-p2m_set_mem_access.patch - Drop xsa89.patch for upstream version (see bnc#867910, 5331917d-x86-enforce...)- bnc#863821 - Xen unable to boot paravirtualized VMs installed with btrfs. Add 'Requires: grub2-x86_64-xen' to xen-tools. - Restore soft links for qemu-system-i386 and qemu-dm - Cleanup inconsistency in which version of qemu-system-i386 is being used (Xen vs qemu-x86). Use only Xen's version. xen.spec- Add conditionals for SLE12 when defining xend and max_cpus xen.spec- Upstream patches from Jan 5321b20b-common-make-hypercall-preemption-checks-consistent.patch 5321b257-x86-make-hypercall-preemption-checks-consistent.patch 53271880-VT-d-fix-RMRR-handling.patch 5327190a-x86-Intel-work-around-Xeon-7400-series-erratum-AAI65.patch - Dropped the following as now part of 5321b257 5310bac3-mm-ensure-useful-progress-in-decrease_reservation.patch- bnc#867910 - VUL-0: EMBARGOED: xen: XSA-89: HVMOP_set_mem_access is not preemptible xsa89.patch - Upstream patches from Jan 530b27fd-x86-MCE-Fix-race-condition-in-mctelem_reserve.patch 530b2880-Nested-VMX-update-nested-paging-mode-on-vmexit.patch 530b28c5-x86-MSI-don-t-risk-division-by-zero.patch 530c54c3-x86-mce-Reduce-boot-time-logspam.patch 5310bac3-mm-ensure-useful-progress-in-decrease_reservation.patch 5315a254-IOMMU-generalize-and-correct-softirq-processing.patch 5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch 5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch 531d8db1-x86-hvm-refine-the-judgment-on-IDENT_PT-for-EMT.patch 531d8e09-x86-HVM-fix-memory-type-merging-in-epte_get_entry_emt.patch 531d8e34-x86-HVM-consolidate-passthrough-handling-in-epte_get_entry_emt.patch 531d8fd0-kexec-identify-which-cpu-the-kexec-image-is-being-executed-on.patch 531dc0e2-xmalloc-handle-correctly-page-allocation-when-align-size.patch- Add conversion tool for migrating xend/xm managed VMs to libvirt xen2libvirt.py (Jim Fehlig)- Update to Xen 4.4.0 FCS- bnc#865682 - Local attach support for PHY backends using scripts local_attach_support_for_phy.patch- bnc#798770 - Improve multipath support for npiv devices block-npiv block-npiv-common.sh- honor global keymap= option in libxl libxl.honor-more-top-level-vfb-options.patch- Update to c/s 28381 to include libxl fork and event fixes for libvirt xen-4.4.0-testing-src.tar.bz2- bnc#863297: xend/pvscsi: recognize also SCSI CDROM devices xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch- fate#316614: set migration constraints from cmdline fix xl migrate to print the actual error string libxc-pass-errno-to-callers-of-xc_domain_save.patch- Include additional help docs for xl in xen-tools - Apply all patches including those for unpackaged xend xen.spec- fate#316614: set migration constraints from cmdline split existing changes into libxl and xend part added libxl.set-migration-constraints-from-cmdline.patch added xend-set-migration-constraints-from-cmdline.patch removed xen.migrate.tools_add_xm_migrate_--log_progress_option.patch removed xen.migrate.tools_set_number_of_dirty_pages_during_migration.patch removed xen.migrate.tools_set_migration_constraints_from_cmdline.patch- Enable ix86 32bit build for xen-libs to be built to support xen-tools-domU on 32bit VMs and also vhostmd running in 32bit VMs- Enable blktapctrl when qemu-traditional is required to satisfy build dependencies. Remove binaries after build if xend is disabled- update ifarch usage in xen.spec to cover also arm - blktapctrl is used only by xend - fix xend-tools-xend sub pkg handling - default to gcc47 for sles11sp3 builds - remove all latex packages from BuildRequires - aarch64-rename-PSR_MODE_ELxx-to-match-linux-headers.patch- add arch dependent install suffix for /boot/xen files- Set max_cpus==4 for non-x86_64 builds- Update to Xen 4.4.0 RC3 c/s 28321- Add flex and bison to BuildRequires, needed by previous patch- fate#316071: add discard support for file backed storage (qdisk) libxl.add-option-for-discard-support-to-xl-disk-conf.patch- On platforms where xend is still supported don't output a deprecation warning when using xm. xend-remove-xm-deprecation-warning.patch- Changed License to GPL-2.0 (from GPL-2.0+)- Dropped xen-changeset.patch. It is no longer needed.- BuildRequire libfdt1-devel on ARM- fate#311487: remove modprobe.conf files for autoloading of pv-on-hvm files. Rely on core kernel to skip initialization of emulated hardware Handle xen_emul_unplug= from xenlinux based core kernel-default xen_pvonhvm.xen_emul_unplug.patch Dropped xen_pvdrivers.conf- Fix the spec file to build for old distros The xm/xend toolstack will continue to be contained in xen-tools for older openSUSE and sles distros but it will be contained in xend-tools for os13.x- fate#316071: add discard support for file backed storage (qdisk) to qemu-upstream, enabled unconditionally qemu-xen-upstream-blkif-discard.patch- Update to Xen 4.4.0 RC2 c/s 28287- Restore 32bit ix86 support in spec file for kmps and domU tools - Restore a few missing xend patches xend-config-enable-dump-comment.patch xend-tools-watchdog-support.patch xend-vif-route-ifup.patch- fate#315692: XEN: Include Xen version 4.4 in SLES-12 Update to Xen 4.4.0 RC1 c/s 28233 - Drop 32bit support from spec file - Dropped numerous patches now included in the tarball- gcc-32bit pulls in the right gcc bits, so better buildrequire that- Upstream patches from Jan 5281fad4-numa-sched-leave-node-affinity-alone-if-not-in-auto-mode.patch 52820823-nested-SVM-adjust-guest-handling-of-structure-mappings.patch 52820863-VMX-don-t-crash-processing-d-debug-key.patch 5282492f-x86-eliminate-has_arch_mmios.patch 52864df2-credit-Update-other-parameters-when-setting-tslice_ms.patch 52864f30-fix-leaking-of-v-cpu_affinity_saved-on-domain-destruction.patch 5289d225-nested-VMX-don-t-ignore-mapping-errors.patch 528a0eb0-x86-consider-modules-when-cutting-off-memory.patch 528f606c-x86-hvm-reset-TSC-to-0-after-domain-resume-from-S3.patch 528f609c-x86-crash-disable-the-watchdog-NMIs-on-the-crashing-cpu.patch 52932418-x86-xsave-fix-nonlazy-state-handling.patch- bnc#851749 - Xen service file does not call xend properly xend.service- Add missing requires to pciutils package for xend-tools- bnc#851386 - VUL-0: xen: XSA-78: Insufficient TLB flushing in VT-d (iommu) code 528a0e5b-TLB-flushing-in-dma_pte_clear_one.patch- Make -devel package depend on libuuid-devel, since libxl.h includes uuid.h- bnc#849667 - VUL-0: xen: XSA-74: Lock order reversal between page_alloc_lock and mm_rwlock CVE-2013-4553-xsa74.patch - bnc#849665 - VUL-0: CVE-2013-4551: xen: XSA-75: Host crash due to guest VMX instruction execution 52809208-nested-VMX-VMLANUCH-VMRESUME-emulation-must-check-permission-1st.patch - bnc#849668 - VUL-0: xen: XSA-76: Hypercalls exposed to privilege rings 1 and 2 of HVM guests CVE-2013-4554-xsa76.patch - Upstream patches from Jan 52654798-x86-xsave-also-save-restore-XCR0-across-suspend-ACPI-S3.patch 526e43d4-x86-refine-address-validity-checks-before-accessing-page-tables.patch 526f786a-fix-locking-in-cpu_disable_scheduler.patch 5277646c-x86-ACPI-x2APIC-guard-against-out-of-range-ACPI-or-APIC-IDs.patch 5277a134-x86-make-sure-memory-block-is-RAM-before-passing-to-the-allocator.patch 5278f7f9-x86-HVM-32-bit-IN-result-must-be-zero-extended-to-64-bits.patch 527a0a05-call-sched_destroy_domain-before-cpupool_rm_domain.patch 527cb7d2-x86-hvm-fix-restart-of-RTC-periodic-timer-with-vpt_align-1.patch 527cb820-x86-EFI-make-trampoline-allocation-more-flexible.patch 5280aae0-x86-idle-reduce-contention-on-ACPI-register-accesses.patch- bnc#848657 - VUL-0: xen: CVE-2013-4494: XSA-73: Lock order reversal between page allocation and grant table locks 5277639c-gnttab-correct-locking-order-reversal.patch- Update to Xen 4.3.1- domUloader can no longer be used with the xl toolstack to boot sles10. Patch pygrub to get the kernel and initrd from the image. pygrub-boot-legacy-sles.patch- bnc#842515 - VUL-0: CVE-2013-4375: XSA-71: xen: qemu disk backend (qdisk) resource leak CVE-2013-4375-xsa71.patch - bnc#845520 - VUL-0: CVE-2013-4416: xen: ocaml xenstored mishandles oversized message replies CVE-2013-4416-xsa72.patch - Upstream patches from Jan 52496bea-x86-properly-handle-hvm_copy_from_guest_-phys-virt-errors.patch (Replaces CVE-2013-4355-xsa63.patch) 52496c11-x86-mm-shadow-Fix-initialization-of-PV-shadow-L4-tables.patch (Replaces CVE-2013-4356-xsa64.patch) 52496c32-x86-properly-set-up-fbld-emulation-operand-address.patch (Replaces CVE-2013-4361-xsa66.patch) 52497c6c-x86-don-t-blindly-create-L3-tables-for-the-direct-map.patch 524e971b-x86-idle-Fix-get_cpu_idle_time-s-interaction-with-offline-pcpus.patch 524e9762-x86-percpu-Force-INVALID_PERCPU_AREA-to-non-canonical.patch 524e983e-Nested-VMX-check-VMX-capability-before-read-VMX-related-MSRs.patch 524e98b1-Nested-VMX-fix-IA32_VMX_CR4_FIXED1-msr-emulation.patch 524e9dc0-xsm-forbid-PV-guest-console-reads.patch 5256a979-x86-check-segment-descriptor-read-result-in-64-bit-OUTS-emulation.patch 5256be57-libxl-fix-vif-rate-parsing.patch 5256be84-tools-ocaml-fix-erroneous-free-of-cpumap-in-stub_xc_vcpu_getaffinity.patch 5256be92-libxl-fix-out-of-memory-error-handling-in-libxl_list_cpupool.patch 5257a89a-x86-correct-LDT-checks.patch 5257a8e7-x86-add-address-validity-check-to-guest_map_l1e.patch 5257a944-x86-check-for-canonical-address-before-doing-page-walks.patch 525b95f4-scheduler-adjust-internal-locking-interface.patch 525b9617-sched-fix-race-between-sched_move_domain-and-vcpu_wake.patch 525e69e8-credit-unpause-parked-vcpu-before-destroying-it.patch 525faf5e-x86-print-relevant-tail-part-of-filename-for-warnings-and-crashes.patch- Improvements to block-dmmd script bnc#828623- bnc#840196 - L3: MTU size on Dom0 gets reset when booting DomU with e1000 device set-mtu-from-bridge-for-tap-interface.patch- bnc#839596 - VUL-0: CVE-2013-1442: XSA-62: xen: Information leak on AVX and/or LWP capable CPUs 5242a1b5-x86-xsave-initialize-extended-register-state-when-guests-enable-it.patch - bnc#840592 - VUL-0: CVE-2013-4355: XSA-63: xen: Information leaks through I/O instruction emulation CVE-2013-4355-xsa63.patch - bnc#840593 - VUL-0: CVE-2013-4356: XSA-64: xen: Memory accessible by 64-bit PV guests under live migration CVE-2013-4356-xsa64.patch - bnc#841766 - VUL-1: CVE-2013-4361: XSA-66: xen: Information leak through fbld instruction emulation CVE-2013-4361-xsa66.patch - bnc#833796 - L3: Xen: migration broken from xsave-capable to xsave-incapable host 52205e27-x86-xsave-initialization-improvements.patch 522dc0e6-x86-xsave-fix-migration-from-xsave-capable-to-xsave-incapable-host.patch - bnc#839600 - [HP BCS SLES11 Bug]: In HP’s UEFI x86_64 platform and sles11sp3 with xen environment, xen hypervisor will panic on multiple blades nPar. 523172d5-x86-fix-memory-cut-off-when-using-PFN-compression.patch - bnc#833251 - [HP BCS SLES11 Bug]: In HP’s UEFI x86_64 platform and with xen environment, in booting stage ,xen hypervisor will panic. 522d896b-x86-EFI-properly-handle-run-time-memory-regions-outside-the-1-1-map.patch - bnc#834751 - [HP BCS SLES11 Bug]: In xen, “shutdown –y 0 –h” cannot power off system 522d896b-x86-EFI-properly-handle-run-time-memory-regions-outside-the-1-1-map.patch - Upstream patches from Jan 520119fc-xen-conring-Write-to-console-ring-even-if-console-lock-is-busted.patch 520a2705-watchdog-crash-Always-disable-watchdog-in-console_force_unlock.patch 522d8a1f-x86-allow-guest-to-set-clear-MSI-X-mask-bit-try-2.patch 522dc044-xmalloc-make-whole-pages-xfree-clear-the-order-field-ab-used-by-xmalloc.patch 522f2f9f-Nested-VMX-Clear-bit-31-of-IA32_VMX_BASIC-MSR.patch 522f37b2-sched-arinc653-check-for-guest-data-transfer-failures.patch 5231e090-libxc-x86-fix-page-table-creation-for-huge-guests.patch 5231f00c-cpufreq-missing-check-of-copy_from_guest.patch 523304b6-x86-machine_restart-must-not-call-acpi_dmar_reinstate-twice.patch 5239a064-x86-HVM-fix-failure-path-in-hvm_vcpu_initialise.patch 5239a076-VMX-fix-failure-path-in-construct_vmcs.patch 523c0ed4-x86-HVM-properly-handle-wide-MMIO.patch 523c1758-sched_credit-filter-node-affinity-mask-against-online-cpus.patch 523ff393-x86-HVM-linear-address-must-be-canonical-for-the-whole-accessed-range.patch 523ff3e2-x86-HVM-refuse-doing-string-operations-in-certain-situations.patch- Use upstream version of unplugging in PVonHVM guests add 523c1834-unmodified_drivers-enable-unplug-per-default.patch remove disable_emulated_device.patch- fate#315714 - Support pvUSB in Xen HVM guests, add xen-usb.ko- Upstream patches from Jan 521c6d4a-x86-don-t-allow-Dom0-access-to-the-MSI-address-range.patch 521c6d6c-x86-don-t-allow-Dom0-access-to-the-HT-address-range.patch 521c6e23-x86-Intel-add-support-for-Haswell-CPU-models.patch 521db25f-Fix-inactive-timer-list-corruption-on-second-S3-resume.patch 521e1156-x86-AVX-instruction-emulation-fixes.patch 521ef8d9-AMD-IOMMU-add-missing-checks.patch 52205a7d-hvmloader-smbios-Correctly-count-the-number-of-tables-written.patch 52205a90-public-hvm_xs_strings.h-Fix-ABI-regression-for-OEM-SMBios-strings.patch 52205e27-x86-xsave-initialization-improvements.patch 5226020f-xend-handle-extended-PCI-configuration-space-when-saving-state.patch 52260214-xend-fix-file-descriptor-leak-in-pci-utilities.patch 52285317-hvmloader-fix-SeaBIOS-interface.patch- bnc#837585 - xen* pkg update DISables `xencommons` and `xendomains` systemd services xen.spec- remove unneeded patch, autoload is handled by PCI device, without PCI device xen_platform_pci would not work anyway xen.sles11sp1.fate311487.xen_platform_pci.dmistring.patch- Update our xen-3.0.4 version of unplug code in qemu-trad add comments about the usage of the code rename handler function reenable handlers for writing/reading from emulated PCI device- Change unplugging of emulated devices in PVonHVM guests Since 3.0.4 xen-platform-pci.ko triggerd the unplug by writing to the PCI space of the emulated PCI device. 3.3 introduced an official unplug protocol. The option to unplug wit the official protocol is disabled per default. Remove our version and enable the unplug via official protocol- Upstream patches from Jan 51e517e6-AMD-IOMMU-allocate-IRTEs.patch 51e5183f-AMD-IOMMU-untie-remap-and-vector-maps.patch 51e63df6-VMX-fix-interaction-of-APIC-V-and-Viridian-emulation.patch 52146070-ACPI-fix-acpi_os_map_memory.patch 5214d26a-VT-d-warn-about-CFI-being-enabled-by-firmware.patch 5215d094-Nested-VMX-Check-whether-interrupt-is-blocked-by-TPR.patch 5215d0c5-Nested-VMX-Force-check-ISR-when-L2-is-running.patch 5215d135-Nested-VMX-Clear-APIC-v-control-bit-in-vmcs02.patch 5215d2d5-Nested-VMX-Update-APIC-v-RVI-SVI-when-vmexit-to-L1.patch 5215d8b0-Correct-X2-APIC-HVM-emulation.patch - Dropped 520d417d-xen-Add-stdbool.h-workaround-for-BSD.patch- bnc#836239 - SLES 11 SP3 Xen security patch does not automatically update UEFI boot binary xen.spec- Upstream patches from Jan 51d5334e-x86-mm-Ensure-useful-progress-in-alloc_l2_table.patch 51dd155c-adjust-x86-EFI-build.patch 51e63d80-x86-cpuidle-Change-logging-for-unknown-APIC-IDs.patch 51e6540d-x86-don-t-use-destroy_xen_mappings-for-vunmap.patch 51e7963f-x86-time-Update-wallclock-in-shared-info-when-altering-domain-time-offset.patch 51ffd577-fix-off-by-one-mistakes-in-vm_alloc.patch 51ffd5fd-x86-refine-FPU-selector-handling-code-for-XSAVEOPT.patch 520114bb-Nested-VMX-Flush-TLBs-and-Caches-if-paging-mode-changed.patch 520a5504-VMX-add-boot-parameter-to-enable-disable-APIC-v-dynamically.patch 520a24f6-x86-AMD-Fix-nested-svm-crash-due-to-assertion-in-__virt_to_maddr.patch 520a2570-x86-AMD-Inject-GP-instead-of-UD-when-unable-to-map-vmcb.patch 520b4b60-VT-d-protect-against-bogus-information-coming-from-BIOS.patch 520b4bda-x86-MTRR-fix-range-check-in-mtrr_add_page.patch 520cb8b6-x86-time-fix-check-for-negative-time-in-__update_vcpu_system_time.patch 520d417d-xen-Add-stdbool.h-workaround-for-BSD.patch- The xencommons.service file handles the starting of xenstored and xenconsoled. Drop the following services files as unecessary. Update xendomains.service to reflect these changes. xenstored.service xenconsoled.service blktapctrl.service- Add xencommons.service to xendomains.service 'After' tag xendomains.service- Change the default bridge in xl.conf from xenbr0 to just br0 xl-conf-default-bridge.patch - Add network.target to xendomains.service 'After' tag xendomains.service- Spec file cleanups xen.spec - Renamed xend-sysconfig.patch to xencommons-sysconfig.patch- Added support for systemd with the following service files xenstored.service blktapctrl.service xend.service xenconsoled.service xen-watchdog.service xendomains.service xencommons.service- Upstream patches from Jan 51d277a3-x86-don-t-pass-negative-time-to-gtime_to_gtsc-try-2.patch 51d27807-iommu-amd-Fix-logic-for-clearing-the-IOMMU-interrupt-bits.patch 51d27841-iommu-amd-Workaround-for-erratum-787.patch 51daa074-Revert-hvmloader-always-include-HPET-table.patch- Dropped deprecated or unnecessary patches pvdrv-import-shared-info.patch minios-fixups.patch- Update to Xen 4.3.0 FCS- Enable ARM targets for Xen- Update to Xen 4.3.0-rc6- Update to Xen 4.3.0-rc5- Update to Xen 4.3.0-rc4- Fix xen-utils compiler time warnings xen-utils-0.1.tar.bz2- Enable building the KMPs xen.spec- Update to Xen 4.3.0-rc3- bnc#801663 - performance of mirror lvm unsuitable for production block-dmmd- Update to Xen 4.3.0-rc2- The xend toolstack is now deprecated and unsupported. Consolidate all xend and traditional qemu patches into one patch file. Rename '.diff' patches to '.patch' and reoder others. xend-traditional-qemu.patch- Create a xend-tools package for the legacy xend toolstack and traditional qemu files.- Update to Xen 4.3.0-rc1 c/s 27068 Drop all upstream changeset patches now included in 4.3 tarball - Removed the doc-pdf RPM as there are no more PDFs to include since the docs/xen-api sources were dropped.- bnc#818183 - VUL-0: xen: CVE-2013-2007: XSA-51: qga set umask 0077 when daemonizing CVE-2013-2007-xsa51-1.patch CVE-2013-2007-xsa51-2.patch- add lndir to BuildRequires- remove xen.migrate.tools_notify_restore_to_hangup_during_migration_--abort_if_busy.patch It changed migration protocol and upstream wants a different solution- bnc#802221 - fix xenpaging readd xenpaging.qemu.flush-cache.patch- bnc#808269 - Fully Virtualized Windows VM install is failed on Ivy Bridge platforms with Xen kernel 26754-hvm-Improve-APIC-INIT-SIPI-emulation.patch- Upstream patches from Jan 26891-x86-S3-Fix-cpu-pool-scheduling-after-suspend-resume.patch 26930-x86-EFI-fix-runtime-call-status-for-compat-mode-Dom0.patch - Additional fix for bnc#816159 CVE-2013-1918-xsa45-followup.patch- bnc#817068 - Xen guest with >1 sr-iov vf won't start xen-managed-pci-device.patch- Update to Xen 4.2.2 c/s 26064 The following recent security patches are included in the tarball CVE-2013-0151-xsa34.patch (bnc#797285) CVE-2012-6075-xsa41.patch (bnc#797523) CVE-2013-1917-xsa44.patch (bnc#813673) CVE-2013-1919-xsa46.patch (bnc#813675)- Upstream patch from Jan 26902-x86-EFI-pass-boot-services-variable-info-to-runtime-code.patch- bnc#816159 - VUL-0: xen: CVE-2013-1918: XSA-45: Several long latency operations are not preemptible CVE-2013-1918-xsa45-1-vcpu-destroy-pagetables-preemptible.patch CVE-2013-1918-xsa45-2-new-guest-cr3-preemptible.patch CVE-2013-1918-xsa45-3-new-user-base-preemptible.patch CVE-2013-1918-xsa45-4-vcpu-reset-preemptible.patch CVE-2013-1918-xsa45-5-set-info-guest-preemptible.patch CVE-2013-1918-xsa45-6-unpin-preemptible.patch CVE-2013-1918-xsa45-7-mm-error-paths-preemptible.patch - bnc#816163 - VUL-0: xen: CVE-2013-1952: XSA-49: VT-d interrupt remapping source validation flaw for bridges CVE-2013-1952-xsa49.patch- bnc#809662 - can't use pv-grub to start domU (pygrub does work) xen.spec- bnc#814709 - Unable to create XEN virtual machines in SLED 11 SP2 on Kyoto xend-cpuinfo-model-name.patch- bnc#813673 - VUL-0: CVE-2013-1917: xen: Xen PV DoS vulnerability with SYSENTER CVE-2013-1917-xsa44.patch - bnc#813675 - VUL-0: CVE-2013-1919: xen: Several access permission issues with IRQs for unprivileged guests CVE-2013-1919-xsa46.patch - bnc#814059 - VUL-1: xen: qemu-nbd format-guessing due to missing format specification CVE-2013-1922-xsa48.patch - Upstream patches from Jan 26749-x86-reserve-pages-when-SandyBridge-integrated-graphics.patch 26751-x86-EFI-permit-setting-variable-with-non-zero-attributes.patch 26765-hvm-Clean-up-vlapic_reg_write-error-propagation.patch 26770-x86-irq_move_cleanup_interrupt-must-ignore-legacy-vectors.patch 26771-x86-S3-Restore-broken-vcpu-affinity-on-resume.patch 26772-VMX-Always-disable-SMEP-when-guest-is-in-non-paging-mode.patch 26773-x86-mm-shadow-spurious-warning-when-unmapping-xenheap-pages.patch 26774-defer-event-channel-bucket-pointer-store-until-after-XSM-checks.patch 26799-x86-don-t-pass-negative-time-to-gtime_to_gtsc.patch- bnc#813156 - IndentationError in XendCheckpoint.py xend-domain-lock.patch- bnc#797014 - no way to control live migrations - bnc#803712 - after live migration rcu_sched_state detected stalls xen.migrate.tools-xend_move_assert_to_exception_block.patch xen.migrate.tools-libxc_print_stats_if_migration_is_aborted.patch xen.migrate.tools_set_number_of_dirty_pages_during_migration.patch xen.migrate.tools_notify_restore_to_hangup_during_migration_--abort_if_busy.patch- bnc#811764 - XEN (hypervisor or kernel) has a problem with EFI variable services x86-EFI-set-variable-permit-attrs.patch - Upstream patches from Jan 26060-ACPI-ERST-table-size-checks.patch 26692-x86-fully-protect-MSI-X-table-from-PV-guest-accesses.patch 26702-powernow-add-fixups-for-AMD-P-state-figures.patch 26704-x86-MCA-suppress-bank-clearing-for-certain-injected-events.patch (bnc#805579) 26731-AMD-IOMMU-Process-softirqs-while-building-dom0-iommu-mappings.patch 26733-VT-d-Enumerate-IOMMUs-when-listing-capabilities.patch 26734-ACPI-ERST-Name-table-in-otherwise-opaque-error-messages.patch 26736-ACPI-APEI-Unlock-apei_iomaps_lock-on-error-path.patch 26737-ACPI-APEI-Add-apei_exec_run_optional.patch 26742-IOMMU-properly-check-whether-interrupt-remapping-is-enabled.patch 26743-VT-d-deal-with-5500-5520-X58-errata.patch (bnc#801910) 26744-AMD-IOMMU-allow-disabling-only-interrupt-remapping.patch- Load blktap module in xencommons init script. blktap2 doesn't support qcow2, so blktap is needed to support domains with 'tap:qcow2' disk configurations. modified tmp-initscript-modprobe.patch- bnc#809203 - xen.efi isn't signed with SUSE Secure Boot key xen.spec- Fix adding managed PCI device to an inactive domain modified xen-managed-pci-device.patch- bnc#805094 - xen hot plug attach/detach fails modified blktap-pv-cdrom.patch- bnc# 802690 - domain locking can prevent a live migration from completing modified xend-domain-lock.patch- bnc#797014 - no way to control live migrations 26675-tools-xentoollog_update_tty_detection_in_stdiostream_progress.patch xen.migrate.tools-xc_print_messages_from_xc_save_with_xc_report.patch xen.migrate.tools-xc_document_printf_calls_in_xc_restore.patch xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirty.patch xen.migrate.tools_set_migration_constraints_from_cmdline.patch xen.migrate.tools_add_xm_migrate_--log_progress_option.patch- Upstream patches from Jan 26585-x86-mm-Take-the-p2m-lock-even-in-shadow-mode.patch 26595-x86-nhvm-properly-clean-up-after-failure-to-set-up-all-vCPU-s.patch 26601-honor-ACPI-v4-FADT-flags.patch 26656-x86-fix-null-pointer-dereference-in-intel_get_extended_msrs.patch 26659-AMD-IOMMU-erratum-746-workaround.patch 26660-x86-fix-CMCI-injection.patch 26672-vmx-fix-handling-of-NMI-VMEXIT.patch 26673-Avoid-stale-pointer-when-moving-domain-to-another-cpupool.patch 26676-fix-compat-memory-exchange-op-splitting.patch 26677-x86-make-certain-memory-sub-ops-return-valid-values.patch 26678-SEDF-avoid-gathering-vCPU-s-on-pCPU0.patch 26679-x86-defer-processing-events-on-the-NMI-exit-path.patch 26683-credit1-Use-atomic-bit-operations-for-the-flags-structure.patch 26689-fix-domain-unlocking-in-some-xsm-error-paths.patch- fate#313584: pass bios information to XEN HVM guest xend-hvm-firmware-passthrough.patch- bnc#806736: enabling xentrace crashes hypervisor 26686-xentrace_fix_off-by-one_in_calculate_tbuf_size.patch- update xenalyze to revision 149 Make eip_list output more useful Use correct length when copying record into buffer decode PV_HYPERCALL_SUBCALL events decode PV_HYPERCALL_V2 records Analyze populate-on-demand reclamation patterns Handle 64-bit MMIO Also strip write bit when processing a generic event Make the warnigns in hvm_generic_postprocess more informative Don't warn about switching paging levels unless verbosity>=6 Process NPFs as generic for summary purposes Add HVM_EVENT_VLAPIC- Add upstream patch to fix vfb/vkb initialization in libxl 26369-libxl-devid.patch- fate##313584: pass bios information to XEN HVM guest 26554-hvm-firmware-passthrough.patch 26555-hvm-firmware-passthrough.patch 26556-hvm-firmware-passthrough.patch- Upstream patches from Jan 26516-ACPI-parse-table-retval.patch (Replaces CVE-2013-0153-xsa36.patch) 26517-AMD-IOMMU-clear-irtes.patch (Replaces CVE-2013-0153-xsa36.patch) 26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch (Replaces CVE-2013-0153-xsa36.patch) 26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch 26529-gcc48-build-fix.patch 26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces CVE-2013-0153-xsa36.patch) 26532-AMD-IOMMU-phantom-MSI.patch 26536-xenoprof-div-by-0.patch 26576-x86-APICV-migration.patch 26577-x86-APICV-x2APIC.patch 26578-AMD-IOMMU-replace-BUG_ON.patch- bnc#797014 - no way to control live migrations 26547-tools-xc_fix_logic_error_in_stdiostream_progress.patch 26548-tools-xc_handle_tty_output_differently_in_stdiostream_progress.patch 26549-tools-xc_turn_XCFLAGS_*_into_shifts.patch 26550-tools-xc_restore_logging_in_xc_save.patch 26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patch- Set $BRP_PESIGN_FILES in the %install section so that modules are signed in the buildservice (fate#314552).- PVonHVM: __devinit was removed in linux-3.8- Add 'managed' PCI passthrough support to xend, allowing support for the same through libvirt xen-managed-pci-device.patch FATE#313570- Upstream patches from Jan 26287-sched-credit-pick-idle.patch 26340-VT-d-intremap-verify-legacy-bridge.patch (Replaces CVE-2012-5634-xsa33.patch) 26370-libxc-x86-initial-mapping-fit.patch 26395-x86-FPU-context-conditional.patch 26404-x86-forward-both-NMI-kinds.patch 26418-x86-trampoline-consider-multiboot.patch 26427-x86-AMD-enable-WC+.patch 26428-x86-HVM-RTC-update.patch 26440-x86-forward-SERR.patch 26443-ACPI-zap-DMAR.patch 26444-x86-nHVM-no-self-enable.patch (Replaces CVE-2013-0152-xsa35.patch) 26501-VMX-simplify-CR0-update.patch 26502-VMX-disable-SMEP-when-not-paging.patch- bnc#800275 - VUL-0: XSA-36: CVE-2013-0153: xen: interrupt remap entries shared and old ones not cleared on AMD IOMMUs CVE-2013-0153-xsa36.patch- Add # needssslcertforbuild to the specfile, to make the UEFI signing certificate available during build (fate#314511, fate#314552).- bnc#798188 - Add $network to xend initscript dependencies- Add upstream patches to fix libxl bugs. These patches have already been posted for inclusion in xen-4.2-testing. 25912-partial-libxl.patch 26372-tools-paths.patch 26468-libxl-race.patch 26469-libxl-race.patch- bnc#797285 - VUL-0: Xen: XSA-34 (CVE-2013-0151) - nested virtualization on 32-bit exposes host crash CVE-2013-0151-xsa34.patch - bnc#797287 - VUL-0: Xen: XSA-35 (CVE-2013-0152) - Nested HVM exposes host to being driven out of memory by guest CVE-2013-0152-xsa35.patch- bnc#793717 - NetWare will not boot on Xen 4.2 xnloader.py domUloader.py pygrub-netware-xnloader.patch Removed reverse-24757-use-grant-references.patch- bnc#797523 - VUL-1: CVE-2012-6075: qemu / kvm-qemu: e1000 overflows under some conditions CVE-2012-6075-xsa41.patch- Mask the floating point exceptions for guests like NetWare on machines that support XSAVE. x86-fpu-context-conditional.patch- fate##313584: pass bios information to XEN HVM guest 26341-hvm-firmware-passthrough.patch 26342-hvm-firmware-passthrough.patch 26343-hvm-firmware-passthrough.patch 26344-hvm-firmware-passthrough.patch- bnc#787169 - L3: Marvell 88SE9125 disk controller not detecting disk in Xen kernel 26133-IOMMU-defer-BM-disable.patch 26324-IOMMU-assign-params.patch 26325-IOMMU-add-remove-params.patch 26326-VT-d-context-map-params.patch 26327-AMD-IOMMU-flush-params.patch 26328-IOMMU-pdev-type.patch 26329-IOMMU-phantom-dev.patch 26330-VT-d-phantom-MSI.patch 26331-IOMMU-phantom-dev-quirk.patch - Upstream patches from Jan 26294-x86-AMD-Fam15-way-access-filter.patch 26320-IOMMU-domctl-assign-seg.patch 26332-x86-compat-show-guest-stack-mfn.patch 26333-x86-get_page_type-assert.patch- bnc#794316 - VUL-0: CVE-2012-5634: xen: VT-d interrupt remapping source validation flaw (XSA-33) CVE-2012-5634-xsa33.patch- Update to Xen 4.2.1 c/s 25952- Upstream patches from Jan 26195-x86-compat-atp-gmfn-range-cont.patch 26196-ACPI-set-PDC-bits-rc.patch 26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch 26229-gnttab-version-switch.patch (Replaces CVE-2012-5510-xsa26.patch) 26230-x86-HVM-limit-batches.patch (Replaces CVE-2012-5511-xsa27.patch) 26231-memory-exchange-checks.patch (Replaces CVE-2012-5513-xsa29.patch) 26232-x86-mark-PoD-error-path.patch (Replaces CVE-2012-5514-xsa30.patch) 26233-memop-order-checks.patch (Replaces CVE-2012-5515-xsa31.patch) 26234-x86-page-from-gfn-pv.patch (Replaces CVE-2012-5525-xsa32.patch) 26235-IOMMU-ATS-max-queue-depth.patch 26252-VMX-nested-rflags.patch 26253-VMX-nested-rdtsc.patch 26254-VMX-nested-dr.patch 26255-VMX-nested-ia32e-mode.patch 26258-VMX-nested-intr-delivery.patch 26260-x86-mmuext-errors.patch 26262-x86-EFI-secure-shim.patch 26266-sched-ratelimit-check.patch 26272-x86-EFI-makefile-cflags-filter.patch- bnc#757525 - domain destroyed on live migration with missing vif on target machine xen-migration-bridge-check.patch- NetWare will not boot or install on Xen 4.2 reverse-24757-use-grant-references.patch- fate#313222 - xenstore-chmod should support 256 permissions 26189-xenstore-chmod.patch- bnc#789945 - VUL-0: CVE-2012-5510: xen: Grant table version switch list corruption vulnerability (XSA-26) CVE-2012-5510-xsa26.patch - bnc#789944 - VUL-0: CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs (XSA-27) CVE-2012-5511-xsa27.patch - bnc#789951 - VUL-0: CVE-2012-5513: xen: XENMEM_exchange may overwrite hypervisor memory (XSA-29) CVE-2012-5513-xsa29.patch - bnc#789948 - VUL-0: CVE-2012-5514: xen: Missing unlock in guest_physmap_mark_populate_on_demand() (XSA-30) CVE-2012-5514-xsa30.patch - bnc#789950 - VUL-0: CVE-2012-5515: xen: Several memory hypercall operations allow invalid extent order values (XSA-31) CVE-2012-5515-xsa31.patch - bnc#789952 - VUL-0: CVE-2012-5525: xen: Several hypercalls do not validate input GFNs (XSA-32) CVE-2012-5525-xsa32.patch - Upstream patches from Jan 26129-ACPI-BGRT-invalidate.patch 26132-tmem-save-NULL-check.patch 26134-x86-shadow-invlpg-check.patch 26139-cpumap-masking.patch 26148-vcpu-timer-overflow.patch (Replaces CVE-2012-4535-xsa20.patch) 26149-x86-p2m-physmap-error-path.patch (Replaces CVE-2012-4537-xsa22.patch) 26150-x86-shadow-unhook-toplevel-check.patch (Replaces CVE-2012-4538-xsa23.patch) 26151-gnttab-compat-get-status-frames.patch (Replaces CVE-2012-4539-xsa24.patch) 26179-PCI-find-next-cap.patch 26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch- remove obsolete pv-driver-build.patch to fix build- Fix build with glibc 2.17: add patch xen-glibc217.patch, fix configure for librt.- bnc#777628 - guest "disappears" after live migration Updated block-dmmd script- Fix exception in balloon.py and osdep.py xen-max-free-mem.diff- fate#311966: Fix XEN VNC implementation to correctly map keyboard layouts VNC-Support-for-ExtendedKeyEvent-client-message.patch- fate#310510 - fix xenpaging restore changes to integrate paging into xm/xend xenpaging.autostart.patch xenpaging.doc.patch- bnc#787163 - VUL-0: CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk (XSA 25) CVE-2012-4544-xsa25.patch - bnc#779212 - VUL-0: CVE-2012-4411: XEN / qemu: guest administrator can access qemu monitor console (XSA-19) CVE-2012-4411-xsa19.patch- bnc#786516 - VUL-0: CVE-2012-4535: xen: Timer overflow DoS vulnerability CVE-2012-4535-xsa20.patch - bnc#786518 - VUL-0: CVE-2012-4536: xen: pirq range check DoS vulnerability CVE-2012-4536-xsa21.patch - bnc#786517 - VUL-0: CVE-2012-4537: xen: Memory mapping failure DoS vulnerability CVE-2012-4537-xsa22.patch - bnc#786519 - VUL-0: CVE-2012-4538: xen: Unhooking empty PAE entries DoS vulnerability CVE-2012-4538-xsa23.patch - bnc#786520 - VUL-0: CVE-2012-4539: xen: Grant table hypercall infinite loop DoS vulnerability CVE-2012-4539-xsa24.patch - bnc#784087 - L3: Xen BUG at io_apic.c:129 26102-x86-IOAPIC-legacy-not-first.patch- Upstream patches from Jan 25920-x86-APICV-enable.patch 25921-x86-APICV-delivery.patch 25922-x86-APICV-x2APIC.patch 25957-x86-TSC-adjust-HVM.patch 25958-x86-TSC-adjust-sr.patch 25959-x86-TSC-adjust-expose.patch 25975-x86-IvyBridge.patch 25984-SVM-nested-paging-mode.patch 26054-x86-AMD-perf-ctr-init.patch 26055-x86-oprof-hvm-mode.patch 26056-page-alloc-flush-filter.patch 26061-x86-oprof-counter-range.patch 26062-ACPI-ERST-move-data.patch 26063-x86-HPET-affinity-lock.patch 26095-SVM-nested-leak.patch 26096-SVM-nested-vmexit-emul.patch 26098-perfc-build.patch- handle possible asprintf failures in log-guest-console.patch- bnc#694863 - kexec fails in xen 26093-hvm_handle_PoD_and_grant_pages_in_HVMOP_get_mem_type.patch- fate#312709: Pygrub needs to know which entry to select 26114-pygrub-list-entries.patch- merge changes fron xen-unstable, obsolete our changes 26077-stubdom_fix_compile_errors_in_grub.patch 26078-hotplug-Linux_remove_hotplug_support_rely_on_udev_instead.patch 26079-hotplug-Linux_close_lockfd_after_lock_attempt.patch 26081-stubdom_fix_rpmlint_warning_spurious-executable-perm.patch 26082-blktap2-libvhd_fix_rpmlint_warning_spurious-executable-perm.patch 26083-blktap_fix_rpmlint_warning_spurious-executable-perm.patch 26084-hotplug_install_hotplugpath.sh_as_data_file.patch 26085-stubdom_install_stubdompath.sh_as_data_file.patch 26086-hotplug-Linux_correct_sysconfig_tag_in_xendomains.patch 26087-hotplug-Linux_install_sysconfig_files_as_data_files.patch 26088-tools_xend_fix_wrong_condition_check_for_xml_file.patch- fate#311966: Fix XEN VNC implementation to correctly map keyboard layouts VNC-Support-for-ExtendedKeyEvent-client-message.patch- workaround bash bug in locking.sh:claim_lock, close fd- fix incorrect self-provides/obsoletes of xen-tools-ioemu- bnc#783847 - Virtualization/xen: Bug Xen 4.2 'xendomins' init script incorrectly Requires 'xend' service when using 'xl' toolstack init.xendomains- bnc#782835 - Xen HVM Guest fails (errors) to launch on Opensuse 12.2 + Xen 4.2 + 'xl' toolstack xen-pygrub-grub-args.patch- backport parallel build support for stubdom - rename 5 patches which were merged upstream- remove more obsolete changes: CFLAGS passing to qemu-traditional, PYTHON_PREFIX_ARG handling and pygrub installation- update blktap-pv-cdrom.patch handle allocation errors in asprintf to fix compile errors handle value returned from xs_read properly remove casts from void pointers- update xenalyze to revision 138 Fix dump time calculation overflow move struct record_info into a header correctly display of count of HW events update trace.h to match xen-unstable Remove vestigal HW_IRQ trace records Remove decode of PV_UPDATE_VA_MAPPING automatically generate dependencies Get rid of redundant hvm dump_header Introduce more efficient read mechanism Eliminate unnecessary cycles_to_time calculation Rework math to remove two 64-bit divisions Enable -O2 optimization level Remove --dump-cooked Remove spurious dump_header construction Improve record-sorting algorithm Use long to cast into and out of pointers Make max_active_pcpu calculation smarter Optimize pcpu_string Enable more cr3 output Sort cr3 enumerated values by start time Add option to skip vga range in MMIO enumeration Handle MMIO records from different vmexits Relocate pio and mmio enumaration structs to their own sub-struct Handle new hvm_event traces Introduce generic summary functionality Function-ize setting of h->post_process Reorganize cr trace handling Allow several summary handlers to register on a single vmexit Get rid of all tabs in xenalyze.c Handle new IRQ tracing Decrease verbosity Print exit reason number if no string is available Fix minor summary issue Add string for TPR_BELOW_THRESHOLD Raise MAX_CPUS to 256 cpus. Add --report-pcpu option to report physical cpu utilization. increase MAX_CPUS Handle RUNSTATE_INIT in domain_runstate calculation- update RPM_OPT_FLAGS handling in spec file pass EXTRA_CFLAGS via environment- remove obsolete xencommons-proc-xen.patch- Upstream patches from Jan 25927-x86-domctl-ioport-mapping-range.patch 25929-tmem-restore-pool-version.patch 25931-x86-domctl-iomem-mapping-checks.patch 25940-x86-S3-flush-cache.patch 25952-x86-MMIO-remap-permissions.patch 25961-x86-HPET-interrupts.patch 25962-x86-assign-irq-vector-old.patch 25965-x86-ucode-Intel-resume.patch- pygrub: always append --args 25941-pygrub_always_append_--args.patch- use BuildRequires: gcc46 only in sles11sp2 or 12.1 to fix build in 11.4- Upstream patches from Jan 25833-32on64-bogus-pt_base-adjust.patch 25835-adjust-rcu-lock-domain.patch 25836-VT-d-S3-MSI-resume.patch 25850-tmem-xsa-15-1.patch 25851-tmem-xsa-15-2.patch 25852-tmem-xsa-15-3.patch 25853-tmem-xsa-15-4.patch 25854-tmem-xsa-15-5.patch 25855-tmem-xsa-15-6.patch 25856-tmem-xsa-15-7.patch 25857-tmem-xsa-15-8.patch 25858-tmem-xsa-15-9.patch 25859-tmem-missing-break.patch 25860-tmem-cleanup.patch 25861-x86-early-fixmap.patch 25862-sercon-non-com.patch 25863-sercon-ehci-dbgp.patch 25864-sercon-unused.patch 25866-sercon-ns16550-pci-irq.patch 25867-sercon-ns16550-parse.patch 25874-x86-EFI-chain-cfg.patch 25909-xenpm-consistent.patch- Fixed the 32bit build.- Update to Xen 4.2.0 FCS c/s 25844- unmodified_drivers: handle IRQF_SAMPLE_RANDOM, it was removed in 3.6-rc1- bnc#778105 - first XEN-PV VM fails to spawn xend: Increase wait time for disk to appear in host bootloader Modified existing xen-domUloader.diff- Disable the snapshot patches. Snapshot only supported the qcow2 image format which was poorly implemented qemu 0.10.2. Snapshot support may be restored in the future when the newer upstream qemu is used by Xen.- bnc#776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices xen-bug776995-pvscsi-persistent-names.patch - xend/pvscsi: update sysfs parser for Linux 3.0 xen-bug776995-pvscsi-sysfs-parser.patch- Update to Xen 4.2.0 RC3+ c/s 25779- Update to Xen 4.2.0 RC2+ c/s 25765-bnc#766284 - compiled-in ata_piix driver issues with PVonHVM guests Update xen_pvdrivers.conf to match not only libata but also ata_piix This avoids IO errors in the piix driver caused by unplugged hardware- Update to Xen 4.1.3 c/s 23336- Upstream or pending upstream patches from Jan 25587-fix-off-by-one-parsing-error.patch 25616-x86-MCi_CTL-default.patch 25617-vtd-qinval-addr.patch 25688-x86-nr_irqs_gsi.patch- Build all files with optimization (fortify source does not work with -O0).- bnc#773393 - VUL-0: CVE-2012-3433: xen: HVM guest destroy p2m teardown host DoS vulnerability CVE-2012-3433-xsa11.patch - bnc#773401 - VUL-1: CVE-2012-3432: xen: HVM guest user mode MMIO emulation DoS 25682-x86-inconsistent-io-state.patch- bnc#762484 - VUL-1: CVE-2012-2625: xen: pv bootloader doesn't check the size of the bzip2 or lzma compressed kernel, leading to denial of service 25589-pygrub-size-limits.patch- Make it build with latest TeXLive 2012 with new package layout- bnc#767273 - unsupported /var/lock/subsys is still used by xendomains init.xendomains- bnc#766283 - opensuse 12.2 pv guests can not start after installation due to lack of grub2 support in the host 24000-pygrub-grub2.patch 24001-pygrub-grub2.patch 24002-pygrub-grub2.patch- Upstream pygrub patches for grub2 support and fixes 23686-pygrub-solaris.patch 23697-pygrub-grub2.patch 23944-pygrub-debug.patch 23998-pygrub-GPT.patch 23999-pygrub-grub2.patch 24064-pygrub-HybridISO.patch 24401-pygrub-scrolling.patch 24402-pygrub-edit-fix.patch 24460-pygrub-extlinux.patch 24706-pygrub-extlinux.patch- Revised version of security patch and an additional patch for bnc#764077 x86_64-AMD-erratum-121.patch x86_64-allow-unsafe-adjust.patch- remove dummy asm/smp-processor-id.h- removed dummy xenapi.tex which was added because of bnc#750679 (see the below entry dated "Mon Apr 2 13:07:20 CEST 2012") because "ps2pdf xenapi.ps xenapi.pdf" failed only for Ghostscript version 9.04 (now we have Ghostscript 9.05).- bnc#764077 - VUL-0: EMBARGOED: xen: XSA-9: denial of service on older AMD systems x86_64-AMD-erratum-121.patch - Revised version of security patch for bnc#757537 x86_64-sysret-canonical.patch- Upstream patches from Jan 25242-x86_64-hotplug-compat-m2p.patch 25247-SVM-no-rdtsc-intercept.patch 25267-x86-text-unlikely.patch 25269-x86-vMCE-addr-misc-write.patch 25271-x86_64-IST-index.patch 25327-pvdrv-no-asm-system-h.patch- add dummy asm/smp-processor-id.h for kernel-source 3.4-rcX- remove inclusion of asm/system.h from platform-pci.c- Upstream patches from Jan 25168-x86-memset-size.patch 25191-x86-tdt-delta-calculation.patch 25195-x86-cpuidle-C2-no-flush-or-bm-check.patch 25196-x86-HAP-PAT-sr.patch 25200-x86_64-trap-bounce-flags.patch- bnc#757537 - VUL-0: xen: CVE-2012-0217 PV guest escalation x86_64-sysret-canonical.patch - bnc#757970 - VUL-1: xen: guest denial of service on syscall GPF generation x86_64-trap-bounce-flags.patch- Upstream patches from Jan 25098-x86-emul-lock-UD.patch 25101-x86-hpet-disable.patch ioemu-9877-MSI-X-device-cleanup.patch- bnc#750679 - "ps2pdf xenapi.ps xenapi.pdf" fails for user abuild in Factory add dummy xenapi.tex until ghostscript is fixed- remove vcd.o rule from PVonHVM Makefile, not needed anymore- bnc#753165 - xen/scripts/network-bridge wont create bridge bridge-bonding.diff- Upstream patches from Jan 24950-gnttab-copy-mapped.patch 24970-x86-cpuidle-deny-port-access.patch 24996-x86-cpuidle-array-overrun.patch 25041-tapdisk2-create-init-name.patch- use BuildRequires: gcc46 only in sles11sp2 to avoid issues when gcc47 and newer is the distro default- bnc#745880 - cpuid setting is not preserved across xend restarts xend-cpuid.patch- Rename 2XXXX-vif-bridge.patch -> vif-bridge-tap-fix.patch- bnc#747331 - XEN: standard "newburn" kernel QA stress test on guest (+ smartd on Dom0?) freezes the guest 24883-x86-guest-walk-not-present.patch - bnc#745367 - MCE bank handling during migration 24781-x86-vmce-mcg_ctl.patch 24886-x86-vmce-mcg_ctl-default.patch 24887-x86-vmce-sr.patch - bnc#744771 - L3: VM with passed through PCI card fails to reboot under dom0 load 24888-pci-release-devices.patch - Upstream patches from Jan 24517-VT-d-fault-softirq.patch 24527-AMD-Vi-fault-softirq.patch 24535-x86-vMSI-misc.patch 24615-VESA-lfb-flush.patch 24690-x86-PCI-SERR-no-deadlock.patch 24701-gnttab-map-grant-ref-recovery.patch 24742-gnttab-misc.patch 24780-x86-paging-use-clear_guest.patch 24805-x86-MSI-X-dom0-ro.patch ioemu-9869-MSI-X-init.patch ioemu-9873-MSI-X-fix-unregister_iomem.patch- add BuildRequires: libuuid-devel- bnc#746702 - Xen HVM DomU crash during Windows Server 2008 R2 install, when maxmem > memory README.SuSE- bnc#745005 - Update vif configuration examples in xmexample* Updated xen-xmexample.diff- bnc#743414 - using vifname is ignored when defining a xen virtual interface with xl/libxl 24459-libxl-vifname.patch- bnc#740165 - VUL-0: kvm: qemu heap overflow in e1000 device emulation (applicable to Xen qemu - CVE-2012-0029) cve-2012-0029-qemu-xen-unstable.patch- bnc#744014 - blank screen in SLES11 SP2 guest with a VF statically assigned ioemu-MSI-X-fix-unregister_iomem.patch - Upstream patches from Jan 24453-x86-vIRQ-IRR-TMR-race.patch 24456-x86-emul-lea.patch- fate#310510 - fix xenpaging 24586-x86-mm_Properly_account_for_paged_out_pages.patch 24609-tools-libxc_handle_fallback_in_linux_privcmd_map_foreign_bulk_properly.patch 24610-xenpaging_make_file_op_largefile_aware.patch xen-unstable.misc.linux_privcmd_map_foreign_bulk.retry_paged.patch xenpaging.speedup-page-out.resume_pages.find_next_bit_set.patch xenpaging.speedup-page-out.evict_pages.free_slot_stack.patch xenpaging.speedup-page-out.policy_choose_victim.patch update xenpaging.error-handling.patch, flush qemu cache not so often- fate#310510 - fix xenpaging 24566-tools-libxc_fix_error_handling_in_xc_mem_paging_load.patch- fate#310510 - fix xenpaging 24466-libxc_Only_retry_mapping_pages_when_ENOENT_is_returned.patch- The xen kmp packages fail on the 09-check-packaged-twice script. Rename xen_pvdrivers.conf to xen_pvdrivers-.conf- fate#310510 - fix xenpaging xenpaging.speedup-page-in.gfn_to_slot.patch- bnc#739585 - L3: Xen block-attach fails after repeated attach/detach blktap-close-fifos.patch blktap-disable-debug-printf.patch- bnc#741159 - Fix default setting of XENSTORED_ROOTDIR in xencommons init script xencommons-xenstored-root.patch- bnc#740625 - xen: cannot interact with xend after upgrade (SLES) - bnc#738694 - xen: cannot interact with xend after upgrade (os12.1) - Other README changes included. README.SuSE- bnc#694863 - kexec fails in xen 24478-libxl_add_feature_flag_to_xenstore_for_XS_RESET_WATCHES.patch- fate#310510 - fix xenpaging xenpaging.speedup-page-out.patch- bnc#735806 - VF doesn't work after hot-plug for many times 24448-x86-pt-irq-leak.patch - Upstream patches from Jan 24261-x86-cpuidle-Westmere-EX.patch 24417-amd-erratum-573.patch 24429-mceinj-tool.patch 24447-x86-TXT-INIT-SIPI-delay.patch ioemu-9868-MSI-X.patch- bnc#732884 - remove private runlevel 4 from init scripts xen.no-default-runlevel-4.patch- bnc#727515 - Fragmented packets hang network boot of HVM guest ipxe-gcc45-warnings.patch ipxe-ipv4-fragment.patch ipxe-enable-nics.patch- fate#310510 - fix xenpaging update xenpaging.autostart.patch, make changes with mem-swap-target permanent update xenpaging.doc.patch, mention issues with live migration- fate#310510 - fix xenpaging add xenpaging.evict_mmap_readonly.patch update xenpaging.error-handling.patch, reduce debug output- bnc#736824 - Microcode patches for AMD's 15h processors panic the system 24189-x86-p2m-pod-locking.patch 24412-x86-AMD-errata-model-shift.patch 24411-x86-ucode-AMD-Fam15.patch- bnc#711219 - SR-IOV VF doesn't work in SLES11 sp2 guest 24357-firmware-no-_PS0-_PS3.patch - Upstream patches from Jan 24153-x86-emul-feature-checks.patch 24275-x86-emul-lzcnt.patch 24277-x86-dom0-features.patch 24278-x86-dom0-no-PCID.patch 24282-x86-log-dirty-bitmap-leak.patch 24359-x86-domU-features.patch 24360-x86-pv-domU-no-PCID.patch 24389-amd-fam10-gart-tlb-walk-err.patch 24391-x86-pcpu-version.patch- bnc#729208 - xenpaging=-1 doesn't work xenpaging.doc.patch- fate#310510 - fix xenpaging readd xenpaging.qemu.flush-cache.patch- bnc#732782 - L3: xm create hangs when maxmen value is enclosed in "quotes" xm-create-maxmem.patch- Upstream patches / changes from Jan Added 24358-kexec-compat-overflow.patch Removed 24341-x86-64-mmcfg_remove___initdata_annotation_overlooked_in_23749e8d1c8f074ba.patch Removed 24345-tools-libxc_Fix_x86_32_build_breakage_in_previous_changeset..patch- fate#310510 - fix xenpaging 24178-debug_Add_domain-vcpu_pause_count_info_to_d_key..patch Use wait queues for paging, improve foreign mappings. xenpaging.versioned-interface.patch xenpaging.mmap-before-nominate.patch xenpaging.p2m_is_paged.patch xenpaging.evict_fail_fast_forward.patch xenpaging.error-handling.patch xenpaging.mem_event-use-wait_queue.patch xenpaging.waitqueue-paging.patch Remove obsolete patch, not needed with wait queue usage xenpaging.HVMCOPY_gfn_paged_out.patch- fate#310510 - fix xenpaging Fix incorrect backport, remove double memset, use xzalloc 24171-x86waitqueue_Allocate_whole_page_for_shadow_stack..patch- fate#310510 - fix xenpaging fix typo in nominate, use lock instead of double unlock 23905-xenpaging_fix_locking_in_p2m_mem_paging_functions.patch- fate#310510 - fix xenpaging 24327-After_preparing_a_page_for_page-in_allow_immediate_fill-in_of_the_page_contents.patch 24328-Tools_Libxc_wrappers_to_automatically_fill_in_page_oud_page_contents_on_prepare.patch 24329-Teach_xenpaging_to_use_the_new_and_non-racy_xc_mem_paging_load_interface.patch- bnc#734826 - xm rename doesn't work anymore Updated xend-migration-domname-fix.patch- fate#310510 - fix xenpaging 24269-mem_event_move_mem_event_domain_out_of_struct_domain.patch 24270-Free_d-mem_event_on_domain_destruction..patch- fate#310510 - fix xenpaging 24318-x86-mm_Fix_checks_during_foreign_mapping_of_paged_pages.patch- fate#310510 - fix xenpaging 23949-constify_vcpu_set_affinitys_second_parameter.patch- fate#310510 - fix xenpaging 24105-xenpaging_compare_domain_pointer_in_p2m_mem_paging_populate.patch 24106-mem_event_check_capabilities_only_once.patch- fate#310510 - fix xenpaging 24272-xenpaging_Fix_c-s_235070a29c8c3ddf7_update_machine_to_phys_mapping_during_page_deallocation.patch- bnc#727081 - xend domains don't work anymore since update from 12.1 beta to 12.1 RC 1 24344-tools-x86_64_Fix_cpuid_inline_asm_to_not_clobber_stacks_red_zone.patch 24345-tools-libxc_Fix_x86_32_build_breakage_in_previous_changeset..patch- bnc#733449 - Panic in mcfg_ioremap when booting xen-dbg.gz on Xeon E3-1230 24341-x86-64-mmcfg_remove___initdata_annotation_overlooked_in_23749e8d1c8f074ba.patch- fate#310510 - fix xenpaging backport waitqueue changes from xen-unstable 24104-waitqueue_Double_size_of_x86_shadow_stack..patch 24171-x86waitqueue_Allocate_whole_page_for_shadow_stack..patch 24195-waitqueue_Detect_saved-stack_overflow_and_crash_the_guest..patch 24196-waitqueue_Reorder_prepare_to_wait_so_that_vcpu_is_definitely_on_the.patch 24197-x86-waitqueue_Because_we_have_per-cpu_stacks_we_must_wake_up_on_teh.patch 24231-waitqueue_Implement_wake_up_nroneall..patch 24232-waitqueue_Hold_a_reference_to_a_domain_on_a_waitqueue..patch- fate#310510 - fix xenpaging 24227-xenpaging_restrict_pagefile_permissions.patch- fate#310510 - fix xenpaging merge upstream version of our existing patches: 24218-libxc_add_bitmap_clear_function.patch remove old versions: xenpaging.bitmap_clear.patch- fate#310510 - fix xenpaging merge upstream version of our existing patches: 24138-xenpaging_munmap_all_pages_after_page-in.patch 24208-xenpaging_remove_filename_from_comment.patch 24209-xenpaging_remove_obsolete_comment_in_resume_path.patch 24210-xenpaging_use_PERROR_to_print_errno.patch 24211-xenpaging_simplify_file_op.patch 24212-xenpaging_print_gfn_in_failure_case.patch 24213-xenpaging_update_xenpaging_init.patch 24214-xenpaging_remove_xc_dominfo_t_from_paging_t.patch 24215-xenpaging_track_the_number_of_paged-out_pages.patch 24216-xenpaging_move_page_add-resume_loops_into_its_own_function..patch 24217-xenpaging_improve_mainloop_exit_handling.patch 24219-xenpaging_retry_unpageable_gfns.patch 24220-xenpaging_install_into_LIBEXEC_dir.patch 24221-xenpaging_add_XEN_PAGING_DIR_-_libxl_xenpaging_dir_path.patch 24222-xenpaging_use_guests_tot_pages_as_working_target.patch 24223-xenpaging_watch_the_guests_memory-target-tot_pages_xenstore_value.patch 24224-xenpaging_add_cmdline_interface_for_pager.patch 24225-xenpaging_improve_policy_mru_list_handling.patch 24226-xenpaging_add_debug_to_show_received_watch_event..patch remove old versions: xenpaging.XEN_PAGING_DIR.patch xenpaging.add_evict_pages.patch xenpaging.cmdline-interface.patch xenpaging.encapsulate_domain_info.patch xenpaging.file_op-return-code.patch xenpaging.install-to-libexec.patch xenpaging.low_target_policy_nomru.patch xenpaging.main-loop-exit-handling.patch xenpaging.misleading-comment.patch xenpaging.page_in-munmap-size.patch xenpaging.print-gfn.patch xenpaging.record-numer-paged-out-pages.patch xenpaging.reset-uncomsumed.patch xenpaging.stale-comments.patch xenpaging.target-tot_pages.patch xenpaging.use-PERROR.patch xenpaging.watch-target-tot_pages.patch xenpaging.watch_event-DPRINTF.patch xenpaging.xc_interface_open-comment.patch- bnc#733348 - Use 'xm' in various scripts if xend is running. Modified xmclone.sh and xen-updown.sh - Only emit xl warning when xend is running and -f (force) flag is not specified. Modified disable-xl-when-using-xend.patch- Upstream patches from Jan 24190-hap-log-dirty-disable-rc.patch 24193-hap-track-dirty-vram-rc.patch 24201-x86-pcpu-platform-op.patch- Upstream patches from Jan 23900-xzalloc.patch 24144-cpufreq-turbo-crash.patch 24148-shadow-pgt-dying-op-performance.patch 24155-x86-ioapic-EOI-after-migration.patch 24156-x86-ioapic-shared-vectors.patch 24157-x86-xstate-init.patch 24168-x86-vioapic-clear-remote_irr.patch- submit fixes for bnc#649209 and bnc#711892 xl-create-pv-with-qcow2-img.patch update suspend_evtchn_lock.patch- Update trace.c, merge patches from upstream 23050-xentrace_dynamic_tracebuffer_allocation.patch 23091-xentrace_fix_t_info_pages_calculation..patch 23092-xentrace_print_calculated_numbers_in_calculate_tbuf_size.patch 23093-xentrace_remove_gdprintk_usage_since_they_are_not_in_guest_context.patch 23094-xentrace_update_comments.patch 23095-xentrace_use_consistent_printk_prefix.patch 23128-xentrace_correct_formula_to_calculate_t_info_pages.patch 23129-xentrace_remove_unneeded_debug_printk.patch 23173-xentrace_Move_register_cpu_notifier_call_into_boot-time_init..patch 23239-xentrace_correct_overflow_check_for_number_of_per-cpu_trace_pages.patch 23308-xentrace_Move_the_global_variable_t_info_first_offset_into_calculate_tbuf_size.patch 23309-xentrace_Mark_data_size___read_mostly_because_its_only_written_once.patch 23310-xentrace_Remove_unneeded_cast_when_assigning_pointer_value_to_dst.patch 23404-xentrace_reduce_trace_buffer_size_to_something_mfn_offset_can_reach.patch 23405-xentrace_fix_type_of_offset_to_avoid_ouf-of-bounds_access.patch 23406-xentrace_update___insert_record_to_copy_the_trace_record_to_individual_mfns.patch 23407-xentrace_allocate_non-contiguous_per-cpu_trace_buffers.patch 23643-xentrace_Allow_tracing_to_be_enabled_at_boot.patch 23719-xentrace_update___trace_var_comment.patch Remove old patches: xen-unstable.xentrace.dynamic_tbuf.patch xen-unstable.xentrace.empty_t_info_pages.patch xen-unstable.xentrace.verbose.patch xen-unstable.xentrace.no_gdprintk.patch xen-unstable.xentrace.comments.patch xen-unstable.xentrace.printk_prefix.patch xen-unstable.xentrace.remove_debug_printk.patch xen-unstable.xentrace.t_info_pages-formula.patch xen-unstable.xentrace.register_cpu_notifier-boot_time.patch xen-unstable.xentrace.t_info_page-overflow.patch xen-unstable.xentrace.t_info_first_offset.patch xen-unstable.xentrace.data_size__read_mostly.patch xen-unstable.xentrace.__insert_record-dst-type.patch- Upstream patches from Jan 24116-x86-continuation-cancel.patch 24123-x86-cpuidle-quiesce.patch 24124-x86-microcode-amd-quiesce.patch 24137-revert-23666.patch 24xxx-shadow-pgt-dying-op-performance.patch- bnc#722738 - xm cpupool-create errors out xen-cpupool-xl-config-format.patch- Fix broken build when building docs 23819-make-docs.patch- bnc#720054 - Prevent vif-bridge from adding user-created tap interfaces to a bridge 2XXXX-vif-bridge.patch- bnc#713503 - DOM0 filesystem commit 23752-x86-shared-IRQ-vector-maps.patch 23754-AMD-perdev-vector-map.patch- fate#310510 - fix xenpaging This change reverses the task of xenpaging. Before this change a fixed number of pages was paged out. With this change the guest will not have access to more than the given number of pages at the same time. The xenpaging= config option is replaced by actmem= A new xm mem-swap-target is added. The xenpaging binary is moved to /usr/lib/xen/bin/ xenpaging.HVMCOPY_gfn_paged_out.patch xenpaging.XEN_PAGING_DIR.patch xenpaging.add_evict_pages.patch xenpaging.bitmap_clear.patch xenpaging.cmdline-interface.patch xenpaging.encapsulate_domain_info.patch xenpaging.file_op-return-code.patch xenpaging.guest-memusage.patch xenpaging.install-to-libexec.patch xenpaging.low_target_policy_nomru.patch xenpaging.main-loop-exit-handling.patch xenpaging.misleading-comment.patch xenpaging.page_in-munmap-size.patch xenpaging.print-gfn.patch xenpaging.record-numer-paged-out-pages.patch xenpaging.reset-uncomsumed.patch xenpaging.stale-comments.patch xenpaging.target-tot_pages.patch xenpaging.use-PERROR.patch xenpaging.watch-target-tot_pages.patch xenpaging.watch_event-DPRINTF.patch xenpaging.xc_interface_open-comment.patch- xen.spec: update filelist package /usr/lib*/xen with wildcard to pickup new files remove duplicate /usr/sbin/xen-list from filelist- bnc#725169 - xen-4.0.2_21511_03-0.5.3: bootup hangs 23993-x86-microcode-amd-fix-23871.patch- Update to Xen 4.1.2 FCS c/s 23174- bnc#720054 - Fix syntax error introduced during recent adjustment of Xen's tap udev rule. Updated udev-rules.patch- fate#310510 - fix xenpaging Merge paging related fixes from xen-unstable: 23506-x86_Disable_set_gpfn_from_mfn_until_m2p_table_is_allocated..patch 23507-xenpaging_update_machine_to_phys_mapping_during_page_deallocation.patch 23509-x86_32_Fix_build_Define_machine_to_phys_mapping_valid.patch 23562-xenpaging_remove_unused_spinlock_in_pager.patch 23576-x86_show_page_walk_also_for_early_page_faults.patch 23577-tools_merge_several_bitop_functions_into_xc_bitops.h.patch 23578-xenpaging_add_xs_handle_to_struct_xenpaging.patch 23579-xenpaging_drop_xc.c_remove_ASSERT.patch 23580-xenpaging_drop_xc.c_remove_xc_platform_info_t.patch 23581-xenpaging_drop_xc.c_remove_xc_wait_for_event.patch 23582-xenpaging_drop_xc.c_move_xc_mem_paging_flush_ioemu_cache.patch 23583-xenpaging_drop_xc.c_move_xc_wait_for_event_or_timeout.patch 23584-xenpaging_drop_xc.c_remove_xc_files.patch 23585-xenpaging_correct_dropping_of_pages_to_avoid_full_ring_buffer.patch 23586-xenpaging_do_not_bounce_p2mt_back_to_the_hypervisor.patch 23587-xenpaging_remove_srand_call.patch 23588-xenpaging_remove_return_values_from_functions_that_can_not_fail.patch 23589-xenpaging_catch_xc_mem_paging_resume_errors.patch 23590-xenpaging_remove_local_domain_id_variable.patch 23591-xenpaging_move_num_pages_into_xenpaging_struct.patch 23592-xenpaging_start_paging_in_the_middle_of_gfn_range.patch 23593-xenpaging_pass_integer_to_xenpaging_populate_page.patch 23594-xenpaging_add_helper_function_for_unlinking_pagefile.patch 23595-xenpaging_add_watch_thread_to_catch_guest_shutdown.patch 23596-xenpaging_implement_stopping_of_pager_by_sending_SIGTERM-SIGINT.patch 23597-xenpaging_remove_private_mem_event.h.patch 23599-tools_fix_build_after_recent_xenpaging_changes.patch 23817-mem_event_add_ref_counting_for_free_requestslots.patch 23818-mem_event_use_mem_event_mark_and_pause_in_mem_event_check_ring.patch 23827-xenpaging_use_batch_of_pages_during_final_page-in.patch 23841-mem_event_pass_mem_event_domain_pointer_to_mem_event_functions.patch 23842-mem_event_use_different_ringbuffers_for_share_paging_and_access.patch 23874-xenpaging_track_number_of_paged_pages_in_struct_domain.patch 23904-xenpaging_use_p2m-get_entry_in_p2m_mem_paging_functions.patch 23905-xenpaging_fix_locking_in_p2m_mem_paging_functions.patch 23906-xenpaging_remove_confusing_comment_from_p2m_mem_paging_populate.patch 23908-p2m_query-modify_p2mt_with_p2m_lock_held.patch 23943-xenpaging_clear_page_content_after_evict.patch 23953-xenpaging_handle_evict_failures.patch 23978-xenpaging_check_p2mt_in_p2m_mem_paging_functions.patch 23979-xenpaging_document_p2m_mem_paging_functions.patch 23980-xenpaging_disallow_paging_in_a_PoD_guest.patch Remove obsolete patches: x86-show-page-walk-early.patch xenpaging.23817-mem_event_check_ring.patch xenpaging.catch-xc_mem_paging_resume-error.patch xenpaging.guest_remove_page.slow_path.patch xenpaging.mem_event-no-p2mt.patch xenpaging.no-srand.patch xenpaging.return-void.patch xenpaging.xenpaging_populate_page-gfn.patch- xen.spec: use changeset number as patch number for upstream patches- do not use runlevel 4 in init scripts, it makes it impossible to "insserv xend" on 12.1- Upstream patches from Jan 23955-x86-pv-cpuid-xsave.patch 23957-cpufreq-error-paths.patch- Upstream patches from Jan 23933-pt-bus2bridge-update.patch 23726-x86-intel-flexmigration-v2.patch 23925-x86-AMD-ARAT-Fam12.patch 23246-x86-xsave-enable.patch 23897-x86-mce-offline-again.patch- Update to Xen 4.1.2_rc3 c/s 23171- bnc#720054 - Changed /etc/udev/rules.d/40-xen.rules to not run Xen's vif-bridge script when not running Xen. This is not a solution to the bug but an improvement in the rules regardless. Updated udev-rules.patch- Upstream patches from Jan 23868-vtd-RMRR-validation.patch 23871-x86-microcode-amd-silent.patch 23898-cc-option-grep.patch- Add pciback init script and sysconf file, giving users a simple mechanism to configure pciback. init.pciback sysconfig.pciback- update scripts to use xl -f, or xm if xend is running: xen-updown.sh, init.xendomains, xmclone.sh- bnc#694863 - kexec fails in xen xenstored: allow guest to shutdown all its watches/transactions xenstored.XS_RESET_WATCHES.patch- Upstream patches from Jan 23843-scheduler-switch.patch 23846-x86-TSC-check.patch 23848-vmx-conditional-off.patch 23853-x86-pv-cpuid-xsave.patch- fate#310510 - fix xenpaging mem_event: add ref counting for free requestslots xenpaging.23817-mem_event_check_ring.patch- bnc#717650 - Unable to start VM - Update to Xen 4.1.2_rc2 c/s 23152- bnc#716695 - domUs using tap devices will not start updated multi-xvdp.patch- Upstream patches from Jan 23803-intel-pmu-models.patch 23800-x86_64-guest-addr-range.patch 23795-intel-ich10-quirk.patch 23804-x86-IPI-counts.patch- bnc#706106 - Inconsistent reporting of VM names during migration xend-migration-domname-fix.patch- bnc#712823 - L3:Xen guest does not start reliable when rebooted xend-vcpu-affinity-fix.patch- Upstream patches from Jan 23725-pci-add-device.patch 23762-iommu-fault-bm-off.patch 23763-pci-multi-seg-x2apic-vtd-no-crash.patch 23765-x86-irq-vector-leak.patch 23766-x86-msi-vf-bars.patch 23771-x86-ioapic-clear-pin.patch 23772-x86-trampoline.patch 23774-x86_64-EFI-EDD.patch 23776-x86-kexec-hpet-legacy-bcast-disable.patch 23781-pm-wide-ACPI-ids.patch 23782-x86-ioapic-clear-irr.patch 23783-ACPI-set-_PDC-bits.patch- Include gcc46 only when its available (>11.4 && >sles11sp1)- bnc#711943 - [xl] Fail to create multi-guests with NIC assigned 23685-libxl-segfault-fix.patch- libxenlight and legacy xend toolstack should not be used together. If xend is running, print a warning and exit xl. Add a '-f' (force) option to xl to override this behavior. disable-xl-when-using-xend.patch bnc#707664- Upstream patches from Jan 23732-sedf.patch 23735-guest-dom0-cap.patch 23746-vtd-cleanup-timers.patch 23747-mmcfg-base-address.patch 23749-mmcfg-reservation.patch- bnc#704160 - crm resource migrate fails with xen machines update snapshot-xend.patch - bnc#706574 - xm console DomUName hang after "xm save/restore" of PVM on the latest Xen xend-console-port-restore.patch- update xencommons script to run only when needed xencommons-proc-xen.patch- Upstream patches from Jan 23726-x86-intel-flexmigration.patch 23706-fix-20892.patch 23723-x86-CMOS-lock.patch 23676-x86_64-image-map-bounds.patch 23724-x86-smpboot-x2apic.patch- hotplug.losetup.patch correct dev:inode detection, stat returns major:minor without leading zeros, while losetup -a includes trailing zeros- fate#310635: xen npiv multipath support update block-npiv* scripts for testing- Fixes for EFI support x86-EFI-discard-comment.patch- fate#309894: Xen needs to correctly understand family 15h CPU topology - fate#311376: EFI support in SP2 - fate#311529: Native UEFI booting under Xen (installation) 23074-pfn.h.patch 23571-vtd-fault-verbosity.patch 23574-x86-dom0-compressed-ELF.patch 23575-x86-DMI.patch 23610-x86-topology-info.patch 23611-amd-fam15-topology.patch 23613-EFI-headers.patch 23614-x86_64-EFI-boot.patch 23615-x86_64-EFI-runtime.patch 23616-x86_64-EFI-MPS.patch- Mark xen-scsi.ko supported (bnc#582265, fate#309459).- fate#310308: Hypervisor assisted watchdog driver ioemu-watchdog-support.patch ioemu-watchdog-linkage.patch ioemu-watchdog-ib700-timer.patch tools-watchdog-support.patch- bnc#702025 - VUL-0: xen: VT-d (PCI passthrough) MSI trap injection (CVE-2011-1898) Fixed in Xen version 4.1.1- fate#310956: Support Direct Kernel Boot for FV guests kernel-boot-hvm.patch- fate#310316: Support change vnc password while vm is running change-vnc-passwd.patch - fate#310325: Support get domU console log from Dom0 log-guest-console.patch- fate#311487: remove modprobe.conf files for autoloading of Xen and Hyper-V drivers xen.sles11sp1.fate311487.xen_platform_pci.dmistring.patch add dmi modalias to xen-platform-pci.ko- fate#308532: [NONCODE] Remove XEN 32-bit Hypervisor Modify ExclusiveArch in xen.spec to build only x86_64- fate#309900 - Add Xen support for SVM Decode Assist in AMD family 15h - fate#309902 - Add Xen support for AMD family 12h processors - fate#309903 - Add Xen support for AMD family 14h processors - fate#309906 - Add Xen support for performance event counters in AMD family 15h- fate#309893: Add Xen support for AMD family 15h processors - fate#309901: Add Xen support for SVM TSC scaling in AMD family 15h - fate#311951: Ivy Bridge: XEN support for Supervisor Mode Execution Protection (SMEP) 23437-amd-fam15-TSC-scaling.patch 23462-libxc-cpu-feature.patch 23481-x86-SMEP.patch 23504-x86-SMEP-hvm.patch 23505-x86-cpu-add-arg-check.patch 23508-vmx-proc-based-ctls-probe.patch 23510-hvm-cpuid-DRNG.patch 23511-amd-fam15-no-flush-for-C3.patch 23516-cpuid-ERMS.patch 23538-hvm-pio-emul-no-host-crash.patch 23539-hvm-cpuid-FSGSBASE.patch 23543-x86_64-maddr_to_virt-assertion.patch 23546-fucomip.patch- Fix libxc reentrancy issues 23383-libxc-rm-static-vars.patch- fate#310957 - Update to Xen 4.1.1 FCS c/s 23079- fate#311000 - Extend Xen domain lock framework to support more alternative xend-domain-lock-sfex.patch- fate#311371 - Enhance yast to configure live migration for Xen and KVM add firewall service file for xen-tools- Add man page for xen-list utility updated xen-utils-0.1.tar.bz2- Upstream patches from Jan 23233-hvm-cr-access.patch 23234-svm-decode-assist-base.patch 23235-svm-decode-assist-crs.patch 23236-svm-decode-assist-invlpg.patch 23238-svm-decode-assist-insn-fetch.patch 23303-cpufreq-misc.patch 23304-amd-oprofile-strings.patch 23305-amd-fam15-xenoprof.patch 23306-amd-fam15-vpmu.patch 23334-amd-fam12+14-vpmu.patch 23338-vtd-force-intremap.patch- fate#310957 - Update to Xen 4.1.1-rc1 c/s 23064- xentrace: dynamic tracebuffer allocation xen-unstable.xentrace.dynamic_tbuf.patch xen-unstable.xentrace.empty_t_info_pages.patch xen-unstable.xentrace.verbose.patch xen-unstable.xentrace.no_gdprintk.patch xen-unstable.xentrace.comments.patch xen-unstable.xentrace.printk_prefix.patch xen-unstable.xentrace.remove_debug_printk.patch xen-unstable.xentrace.t_info_pages-formula.patch xen-unstable.xentrace.register_cpu_notifier-boot_time.patch xen-unstable.xentrace.t_info_page-overflow.patch xen-unstable.xentrace.t_info_first_offset.patch xen-unstable.xentrace.data_size__read_mostly.patch xen-unstable.xentrace.__insert_record-dst-type.patch- fate#310510 - fix xenpaging update xenpaging patches for xen 4.1 xenpaging.guest_remove_page.slow_path.patch xenpaging.mem_event-no-p2mt.patch xenpaging.no-srand.patch xenpaging.return-void.patch xenpaging.catch-xc_mem_paging_resume-error.patch xenpaging.xenpaging_populate_page-gfn.patch xenpaging.autostart.patch- bnc#670465 - When connecting to Xen guest through vncviewer mouse tracking is off. - Upstream patch 23298-hvmop-get-mem-type.patch replaces xen.sles11sp1.bug684297.HVMOP_get_mem_type.patch - Upstream patches from Jan 23333-hvm-32bit-compat-hypercalls.patch 23337-vtd-malicious-msi-filter.patch 23338-vtd-force-intremap.patch (CVE-2011-1898) 23341-x86-ioapic-write-entry.patch 23343-vtd-error-path-leaks.patch- bnc#684305 - on_crash is being ignored with kdump now working in HVM xend-config-enable-dump-comment.patch- disable xend's logrotation for xend.log, use included logrotate.conf- bnc#684297 - HVM taking too long to dump vmcore xen.sles11sp1.bug684297.HVMOP_get_mem_type.patch new hvm_op hyper call option xen.sles11sp1.bug684297.xen_oldmem_pfn_is_ram.patch Use new Xen HVMOP_get_mem_type hvmop hypercall option and new Linux kernel register_oldmem_pfn_is_ram interface. (depends on two kernel-source changes)- Update to Xen 4.1.1-rc1-pre c/s 23051- Numerous cleanups when compiling with the unused-but-set-variable flag enabled and warnings equal to errors. xen-warnings-unused.diff- Add a 'long' option to xen-list utility Updated xen-utils-0.1.tar.bz2- bnc#691256 - move modprobe of xen backend modules from xend to xencommons initscript tmp-initscript-modprobe.patch- bnc#691738 - Xen does not find device create with npiv block xen-qemu-iscsi-fix.patch- Upstream patches from Jan 22998-x86-get_page_from_l1e-retcode.patch 22999-x86-mod_l1_entry-retcode.patch 23000-x86-mod_l2_entry-retcode.patch 23096-x86-hpet-no-cpumask_lock.patch 23099-x86-rwlock-scalability.patch 23103-x86-pirq-guest-eoi-check.patch 23127-vtd-bios-settings.patch 23153-x86-amd-clear-DramModEn.patch 23154-x86-amd-iorr-no-rdwr.patch 23199-amd-iommu-unmapped-intr-fault.patch 23200-amd-iommu-intremap-sync.patch 23228-x86-conditional-write_tsc.patch- bnc#691238 - L3: question on behaviour change xm list snapshot-xend.patch- update xenalyze to revision 98 * Unify setting of vcpu data type * Unify record size checks * Fix cr3_switch not to access hvm struct before it's initialized - add xenalyze.gcc46.patch to fix unused-but-set-variable errors- bnc#688473 - VUL-0: potential buffer overflow in tools cve-2011-1583-4.0.patch- hotplug.losetup.patch correct dev:inode detection and use variable expansion- bnc#623680 - xen kernel freezes during boot when processor module is loaded 23228-x86-conditional-write_tsc.patch - bnc#680824 - dom0 can't recognize boot disk when IOMMU is enabled 23200-amd-iommu-intremap-sync.patch - Upstream patches from Jan 23127-vtd-bios-settings.patch 23153-x86-amd-clear-DramModEn.patch 23154-x86-amd-iorr-no-rdwr.patch 23199-amd-iommu-unmapped-intr-fault.patch- bnc#685189: update vif-route-ifup.patch to use correct variable after upstream commit 22910:d4bc41a8cecb- bnc#688519: correct indention in xend-domain-lock.patch- bnc#687981 - L3: mistyping model type when defining VIF crashes VM xend-validate-nic-model.patch- bnc#685338: Fix porting of xend-domain-lock.patch- update scripts to use xl instead of xm: xen-updown.sh, init.xendomains, xmclone.sh- disable xend in openSuSE > 11.4 the xl command is the replacement for the xm command- mark runlevel scripts as config to preserve local changes by admin or dev during package update- enable xencommons runlevel script during upgrade if xend was already enabled- call /sbin/ldconfig directly in xen-libs post install scripts- Upstream patches from Jan 23103-x86-pirq-guest-eoi-check.patch 23030-x86-hpet-init.patch 23061-amd-iommu-resume.patch 23127-vtd-bios-settings.patch- add baselibs.conf as libvirt uses 32bit libraries- Remus support is enabled for now.- Enable support for kernel decompression for gzip, bzip2, and LZMA so that kernels compressed with any of these methods can be launched- Update to Xen 4.1 FCS- fix xentrace.dynamic_sized_tbuf.patch the default case did not work, correct size calculation- Update to c/s 23010 Xen 4.1 rc8- use _smp_mflags instead of jobs, jobs is not expanded everywhere- bnc#681302 - xm create -x returns "ImportError: No module named ext" xm-create-xflag.patch- bnc#675817 - Kernel panic when creating HVM guests on AMD platforms with XSAVE 22462-x86-xsave-init-common.patch- bnc#679344 - Xen: multi-vCPU pv guest may crash host 23034-x86-arch_set_info_guest-DoS.patch - bnc#678871 - dom0 hangs long time when starting hvm guests with memory >= 64GB 22780-pod-preempt.patch - bnc#675363 - Random lockups with kernel-xen. Possibly graphics related 22997-x86-map_pages_to_xen-check.patch - Upstream patches from Jan 22949-x86-nmi-pci-serr.patch 22992-x86-fiop-m32i.patch 22996-x86-alloc_xen_pagetable-no-BUG.patch 23020-x86-cpuidle-ordering.patch 23039-csched-constrain-cpu.patch- Fix xen-utils to cope with xen-unstable c/s 21483- bnc#678229 - restore of sles HVM fails 22873-svm-sr-32bit-sysenter-msrs.patch- xz-devel is available since 11.2, make it optional for SLES11SP1- Fix /vm/uuid xenstore leak on tapdisk2 device cleanup 22499-xen-hotplug-cleanup.patch- Upstream patches from Jan 22872-amd-iommu-pci-reattach.patch 22879-hvm-no-self-set-mem-type.patch 22899-x86-tighten-msr-permissions.patch 22915-x86-hpet-msi-s3.patch 22947-amd-k8-mce-init-all-msrs.patch- bnc#672833 - xen-tools bug causing problems with Ubuntu 10.10 under Xen 4. 22238-pygrub-grub2-fix.patch- bnc#665610 - xm console > 1 to same VM messes up both consoles Upstream rejected due to portability concern, see http://lists.xensource.com/archives/html/xen-devel/2011-02/msg00942.html xenconsole-no-multiple-connections.patch- Enable support for kernel decompression for gzip, bzip2, and LZMA so that kernels compressed with any of these methods can be launched.- bnc#651822 - xm snapshot-xxx scripts lead to an XP SP3 HVM domU to chkdsk Make sure we only apply the snapshot once, and the changes made after snapshot-apply hit the disk.- Update to Xen 4.1.0 c/s 22861- bnc#658569 - SLES 11 SP1 dom0 iptables gives lots of physdev messages 22385-vif-common.patch- update xenalyze, more 64bit fixes- allocate xentrace buffer metadata based on requested tbuf_size xentrace.dynamic_sized_tbuf.patch- fate#310510 - fix xenpaging xenpaging.runtime_mru_size.patch - specify policy mru size at runtime xenpaging.no_domain_id.patch - reduce memory usage in pager- bnc#625394 - set vif mtu from bridge mtu if kernel supports it vif-bridge.mtu.patch- fate#310510 - fix xenpaging xenpaging.autostart_delay.patch - decouple create/destroycreateXenPaging from _create/_removeDevices - change xenpaging variable from int to str - init xenpaging variable to 0 if xenpaging is not in config file to avoid string None coming from sxp file- Update to Xen 4.0.2 rc2-pre, changeset 21443- bnc#633573 - System fail to boot after running several warm reboot tests 22749-vtd-workarounds.patch - Upstream patches from Jan 22744-ept-pod-locking.patch 22777-vtd-ats-fixes.patch 22781-pod-hap-logdirty.patch 22782-x86-emul-smsw.patch 22789-i386-no-x2apic.patch 22790-svm-resume-migrate-pirqs.patch 22816-x86-pirq-drop-priv-check.patch- Don't pass the deprecataed extid parameter to xc.hvm_build- bnc#658704 - SLES11 SP1 Xen boot panic in x2apic mode 22707-x2apic-preenabled-check.patch - bnc#641419 - L3: Xen: qemu-dm reports "xc_map_foreign_batch: mmap failed: Cannot allocate memory" 7434-qemu-rlimit-as.patch - Additional or upstream patches from Jan 22693-fam10-mmio-conf-base-protect.patch 22694-x86_64-no-weak.patch 22708-xenctx-misc.patch 21432-4.0-cpu-boot-failure.patch 22645-amd-flush-filter.patch qemu-fix-7433.patch- Maintain compatibility with the extid flag even though it is deprecated for both legacy and sxp config files. hv_extid_compatibility.patch- bnc#649209-improve suspend eventchn lock suspend_evtchn_lock.patch- Removed the hyper-v shim patches in favor of using the upstream version.- bnc#641419 - L3: Xen: qemu-dm reports "xc_map_foreign_batch: mmap failed: Cannot allocate memory" qemu-rlimit-as.patch- Upstream c/s 7433 to replace qemu_altgr_more.patch 7433-qemu-altgr.patch- bnc#661931 - Fix fd leak in xenstore library 21344-4.0-testing-xenstore-fd-leak.patch- bnc#656369 - g5plus: sles11sp1 xen crash with 8 socket x2apic preenabled 21989-x2apic-resume.patch 22475-x2apic-cleanup.patch 22535-x2apic-preenabled.patch - bnc#658163 - maintenance release - Nehalem system cannot boot into xen with maintenance release installed 22504-iommu-dom0-holes.patch 22506-x86-iommu-dom0-estimate.patch - bnc#658704 - SLES11 SP1 Xen boot panic in x2apic mode 21810-x2apic-acpi.patch - Upstream patches from Jan 22470-vlapic-tick-loss.patch 22484-vlapic-tmcct-periodic.patch 22526-ept-access-once.patch 22533-x86-32bit-apicid.patch 22534-x86-max-local-apic.patch 22538-keyhandler-relax.patch 22540-32on64-hypercall-debug.patch 22549-vtd-map-page-leak.patch 22574-ept-skip-validation.patch 22632-vtd-print-entries.patch- bnc#661298 - maintenance release candidate - Windows VMs reboot too fast, triggering failsafe xen-minimum-restart-time.patch- bnc#659070 - Fail to input '|' in en-us keyboard qemu_altgr_more.patch- bnc#659466 - XEN drbd block device type not working on SLES 11 SP1 20158-revert.patch- Revert changes made to snapshot-xend.patch and snapshot-ioemu-restore.patch made on 2010-11-19. The changes were intended to fix bnc#651822, but testing revealed additional changes were needed to completely resolve the bug. bnc#651822 will be fixed in a subsequent maintenance release.- bnc#654543 - PV guest won't unplug the IDE disk created by qemu-dm a dirty hack, only add the device to drives_table[] if we are FV domU, that will be unplugged anyway if a PV driver is loaded later. ioemu-disable-emulated-ide-if-pv.patch- Upstream patch to replace xenfb_32bpp.patch 7426-xenfb-depth.patch- bnc#651822 make sure we only apply the snapshot once, and the changes made after snapshot-apply hit the disk. snapshot-xend.patch snapshot-without-pv-fix.patch- fate#310510 - fix xenpaging xenpaging.HVMCOPY_gfn_paged_out.patch - remove incorrect and unneeded cleanup from do_memory_op subfunctions add mainline tag to merged patches- bnc#613584 - If available, use kpartx '-f' option in domUloader- bnc#659872 - xend: Do no release domain lock on checkpoint operation.- Upstream patches from Jan 22431-p2m-remove-bug-check.patch 22448-x86_64-gdt-ldt-fault-filter.patch 22466-x86-sis-apic-bug.patch 22451-hvm-cap-clobber.patch 22388-x2apic-panic.patch 22452-x86-irq-migrate-directed-eoi.patch- bnc#658163 - maintenance release - Nehalem system cannot boot into xen with maintenance release installed iommu-dom0-holes.patch x86-iommu-dom0-estimate.patch- bnc#659085 - physical host is rebooted with unknown reason Regression: Remove the patch 22071-ept-get-entry-lock.patch- Removed 7410-qemu-alt-gr.patch and altgr_2.patch. It causes a regression (see bnc#659070)- make stubdom build optional- pass -j N to stubdom build- add xenalzye from http://xenbits.xensource.com/ext/xenalyze.hg- hotplug-block-losetup-a.patch allow hardlinked blockdevices - fate#310510 - fix xenpaging xenpaging.paging_prep_enomem.patch - retry page-in if guest is temporary out-of-memory xenpaging.print-arguments.patch - print arguments passed to xenpaging xenpaging.machine_to_phys_mapping.patch - invalidate array during page deallocation xenpaging.autostart_delay.patch - fold xenpaging.enabled.patch into this patch - set xenpaging_delay to 0.0 to start xenpaging right away- bnc#654591 - SLES11 SP0->Sp1 regression? (Xen, HVMs, NPIV) Fixed xen-qemu-iscsi-fix.patch- blktap2 patch - fix problem that blktap2 device info not cleared when block-attach fail. blktap2.patch- bnc#655438 - Using performance counter in domU on Nehalem cpus 22417-vpmu-nehalem.patch - Upstream patches from Jan 22389-amd-iommu-decls.patch 22416-acpi-check-mwait.patch 22431-p2m-remove-bug-check.patch- bnc#656245 - VUL-1: hypervisor: application or kernel in any pv Xen domain can crash Xen x86_64-gdt-ldt-fault-filter.patch- bnc#654050 - Python: a crasher bug in pyexpat - upstream patch needs backporting 22235-lxml-validator.patch- bnc#628729 - Add a small, fast alternative to 'xm list' for enumerating active domains. xen-list is a C program that uses libxenstore and libxenctl directly, bypassing the python toolstack. xen-utils-0.1.tar.bz2- bnc#628729 - Add a small, fast alternative to 'xm list' for enumerating active domains. xen-list is a C program that uses libxenstore and libxenctl directly, bypassing the python toolstack. xen-utils-0.1.tar.bz2- bnc#651822 - xm snapshot-xxx scripts lead to an XP SP3 HVM domU to chkdsk snapshot-xend.patch snapshot-ioemu-restore.patch- bnc#651957 - Xen: vm-install failed to start xenpaging.enabled.patch- fate#310510 - fix xenpaging xenpaging.signal_handling.patch - unlink pagefile in signal handler- Upstream patch for python 2.7 compatibility 22045-python27-compat.patch- bnc#641144 - FV Xen VM running windows or linux cannot write to virtual floppy drive bdrv_default_rwflag.patch- fate#310510 - fix xenpaging xenpaging.optimize_p2m_mem_paging_populate.patch xenpaging.HVMCOPY_gfn_paged_out.patch- bnc#649864 - automatic numa cpu placement of xen conflicts with cpupools 22326-cpu-pools-numa-placement.patch- fate#310510 - fix xenpaging xenpaging.populate_only_if_paged.patch - revert logic, populate needs to happen unconditionally xenpaging.p2m_mem_paging_populate_if_p2m_ram_paged.patch - invalidate current mfn only if gfn is not in flight or done xenpaging.mem_event_check_ring-free_requests.patch - print info only if 1 instead of 2 slots are free xenpaging.guest_remove_page.patch - check mfn before usage in resume function xenpaging.machine_to_phys_mapping.patch - check mfn before usage in resume function- bnc#552115 - Remove target discovery in block-iscsi modified block-iscsi script- bnc#649277 - Fix pci passthru in xend interface used by libvirt 22369-xend-pci-passthru-fix.patch- bnc#642078 - xm snapshot-create causes qemu-dm to SEGV snapshot-without-pv-fix.patch- fate#310510 - fix xenpaging xenpaging.num_pages_equal_max_pages.patch- bnc#647681 - L3: Passthrough of certain PCI device broken after SLES 11 to SP1 upgrade - bnc#650871 - Regression in Xen PCI Passthrough 22348-vtd-check-secbus-devfn.patch - Upstream patches from Jan 22223-vtd-workarounds.patch (bnc#652935) 22231-x86-pv-ucode-msr-intel.patch 22232-x86-64-lahf-lm-bios-workaround.patch 22280-kexec.patch 22337-vtd-scan-single-func.patch- bnc#497149 - SLES11 64bit Xen - SLES11 64bit HVM guest has corrupt text console stdvga-cache.patch- fate#310510 - fix xenpaging xenpaging.page_already_populated.patch xenpaging.notify_policy_only_once.patch xenpaging.guest_remove_page.patch xenpaging.machine_to_phys_mapping.patch remove xenpaging.memory_op.patch, retry loops are not needed- bnc#474789 - xen-tools 3.3 rpm misses pv-grub - PV-GRUB replaces PyGrub to boot domU images safely: it runs the regular grub inside the created domain itself and uses regular domU facilities to read the disk / fetch files from network etc.; it eventually loads the PV kernel and chain-boots it.- fate#310510 - fix xenpaging xenpaging.doc.patch - add /var/lib/xen/xenpaging directory- Some cleanup in the APIC handling code in the HyperV shim. hv_apic.patch- fate#310510 - fix xenpaging xenpaging.memory_op.patch, correct delay handling in retry loop- bnc#640370 - VM graphic console in VNC is corrupted xenfb_32bpp.patch- fate#310510 - fix xenpaging xenpaging.autostart_delay.patch delay start of xenpaging 7 seconds for smooth BIOS startup- fate#310510 - fix xenpaging xenpaging.tools_xenpaging_cleanup.patch- fate#310510 - fix xenpaging xenpaging.mem_event_check_ring-free_requests.patch- install /etc/xen/examples/xentrace_formats.txt to get human readable tracedata if xenalyze is not used- fate#310510 - fix xenpaging xenpaging.autostart_delay.patch xenpaging.blacklist.patch xenpaging.MRU_SIZE.patch remove xenpaging.hacks.patch, realmode works- Upstream patches from Jan including fixes for the following bugs bnc#583568 - Xen kernel is not booting bnc#615206 - Xen kernel fails to boot with IO-APIC problem bnc#640773 - Xen kernel crashing right after grub bnc#643477 - issues with PCI hotplug/hotunplug to Xen driver domain 22222-x86-timer-extint.patch 22214-x86-msr-misc-enable.patch 22213-x86-xsave-cpuid-check.patch 22194-tmem-check-pv-mfn.patch 22177-i386-irq-safe-map_domain_page.patch 22175-x86-irq-enter-exit.patch 22174-x86-pmtimer-accuracy.patch 22160-Intel-C6-EOI.patch 22159-notify-evtchn-dying.patch 22157-x86-debug-key-i.patch- fate#310510 - fix xenpaging xenpaging.signal_handling.patch xenpaging.autostart.patch xenpaging.hacks.patch- rename xenpaging.XENMEM_decrease_reservation.patch to xenpaging.memory_op.patch- bnc#632956 - fix VNC altgr-insert behavior 7410-qemu-alt-gr.patch altgr_2.patch- bnc#618087 - VNC view won't stay connected to fully virtualized Linux Xen VMs modified ioemu-vnc-resize.patch- bnc#639546 - Dom-U deleted after introduction of the parameter "change_home_server False" in the VM configuration change_home_server.patch- bnc#641859 - block-dmmd script does not handle the configuration when only MD is used modified block-dmmd script- fate#310510 - fix xenpaging xenpaging.populate_only_if_paged.patch- bnc#640773 - Xen kernel crashing right after grub 21894-intel-unmask-cpuid.patch - Upstream patch from Jan 22148-serial-irq-dest.patch- bnc#628719 - improve check_device_status to handle HA cases check_device_status.patch- bnc#628719 - multi-xvdp mutli-xvdp.patch- fate#310510 - fix xenpaging xenpaging.XENMEM_decrease_reservation.patch xenpaging.xenpaging_init.patch xenpaging.policy_linear.patch- bnc#632956 - fix VNC altgr-insert behavior 7410-qemu-alt-gr.patch altgr_2.patch- fate#310510 - fix xenpaging xenpaging.pageout_policy.patch xenpaging.xs_daemon_close.patch xenpaging.pagefile.patch xenpaging.mem_paging_tool_qemu_flush_cache.patch xenpaging.get_paged_frame.patch xenpaging.notify_via_xen_event_channel.patch- bnc#636231 - XEN: Unable to disconnect/remove CDROM drive from VM xend-devid-or-name.patch- Upstream patches from Jan 22019-x86-cpuidle-online-check.patch 22051-x86-forced-EOI.patch 22067-x86-irq-domain.patch 22068-vtd-irte-RH-bit.patch 22071-ept-get-entry-lock.patch 22084-x86-xsave-off.patch- bnc#638465 - hypervisor panic in memory handling 22135-heap-lock.patch- Update to Xen 4.0.1. This is a bug fix release.- bnc#635380 - Fix pygrub Grub2 support See update to Xen 4.0.1 for fixes- bnc#628701 - Improve performance when activate/deactivate dmmd devices modified block-dmmd script- bnc#628701 - Fix qemu-dm handling of dmmd devices modified xen-qemu-iscsi-fix.patch- bnc#626262 - Populate-on-demand memory problem on xen with hvm guest 21971-pod-accounting.patch- bnc#584204 - xm usb-list broken usb-list.patch- bnc#625520 - TP-L3: NMI cannot be triggered for xen kernel 21926-x86-pv-NMI-inject.patch- bnc#613529 - TP-L3: kdump kernel hangs when crash was initiated from xen kernel 21886-kexec-shutdown.patch- Upstream Intel patches to improve X2APIC handling. 21716-iommu-alloc.patch 21717-ir-qi.patch 21718-x2apic-logic.patch- bnc#623833 - Error in Xend-API method VM_set_actions_after_crash 21866-xenapi.patch- bnc#625003 - Fix vm config options coredump-{restart,destroy} Added hunk to xm-create-xflag.patch- bnc#605186 - Squelch harmless error messages in block-iscsi- bnc#623438 - Add ability to control SCSI device path scanning in xend 21847-pscsi.patch- Enable the packaging of create.dtd. This is needed for when xm is configured to use xenapi.- bnc#624285 - TP-L3: xen rdtsc emulation reports wrong frequency 21445-x86-tsc-handling-cleanups-v2.patch- bnc#623201 - drbd xvd will fail in new xen4 packages due to wrong popen2 arguments in blkif.py popen2-argument-fix.patch- bnc#620694 - Xen yast vm-install for existing paravirtualized disk fails with UnboundLocalError: local variable 'dev_type' referenced before assignment 21678-xend-mac-fix.patch- bnc#586221 - cannot add DomU with USB host controller defined domu-usb-controller.patch (Chun Yan Liu)- Upstream patches from Jan 21151-trace-bounds-check.patch 21627-cpuidle-wrap.patch 21643-vmx-vpmu-pmc-offset.patch 21682-trace-buffer-range.patch 21683-vtd-kill-timer-conditional.patch 21693-memevent-64bit-only.patch 21695-trace-t_info-readonly.patch 21698-x86-pirq-range-check.patch 21699-p2m-query-for-type-change.patch 21700-32on64-vm86-gpf.patch 21705-trace-printk.patch 21706-trace-security.patch 21712-amd-osvw.patch 21744-x86-cpufreq-range-check.patch 21933-vtd-ioapic-write.patch 21953-msi-enable.patch- bnc#599550 - Xen cannot distinguish the status of 'pause' 21723-get-domu-state.patch- bnc#604611 - Do not store vif device details when vif config contains invalid mac address. 21653-xend-mac-addr.patch- linux pvdrv: generalize location of autoconf.h Fixes error because of missing autoconf.h when building os11.2 Factory.- bnc#609153 - xm migrate localhost -l fails on Windows VMs 21615-dont-save-xen-heap-pages.patch - Upstream fixes from Jan 21446-iommu-graceful-generic-fail.patch 21453-shadow-avoid-remove-all-after-teardown.patch 21456-compat-hvm-addr-check.patch 21492-x86-pirq-unbind.patch 21526-x86-nehalem-cpuid-mask.patch 21620-x86-signed-domain-irq.patch- bnc#612189 - Clear APIC Timer Initial Count Register when masking timer interrupt 21542-amd-erratum-411.patch- bnc#610658 - XEN: PXE boot fails for fully virtualized guests - e1000 virtual nic. (see also bnc#484778) enable_more_nic_pxe.patch- bnc#608191 - /var/adm/fillup-templates/sysconfig.xend from package xen-tools is no valid sysconfig file xend-sysconfig.patch- bnc#608194 - /etc/xen/* config files are not packaged with noreplace- bnc#569744 - SLE HVM guest clock/timezone is incorrect after reboot 21460-xend-timeoffset.patch- bnc#606882 - Allow spaces in vbd path names 21459-block-script.patch- bnc#591799 - The status of Caps Lock is incorrect in domU capslock_enable.patch- Upstream fixes from Jan including a fix for Intel's ATS issue 21435-vmx-retain-global-controls.patch 21406-x86-microcode-quiet.patch 21421-vts-ats-enabling.patch- bnc#607219 - AMD Erratum 383 workaround for Xen 21408-amd-erratum-383.patch- Added modprobe of evtchn to init.xend. The kernel will also need to build evtchn as a module for this to be meaningful.- bnc#603008 - On an 8 Socket Nehalem-EX system, the fix for 593536 causes a hang during network setup. - Upstream patches from Jan. 21360-x86-mce-polling-disabled-init.patch 21372-x86-cross-cpu-wait.patch 21331-svm-vintr-during-nmi.patch 21333-xentrace-t_info-size.patch 21340-vtd-dom0-mapping-latency.patch 21346-x86-platform-timer-wrap.patch 21373-dummy-domain-io-caps.patch- bnc#605182 - /etc/xen/scripts/xen-hotplug-cleanup: line 24: [: !=: unary operator expected 21129-xen-hotplug-cleanup.patch- bnc#599929 - Hot add/remove Kawela NIC device over 500 times will cause guest domain crash passthrough-hotplug-segfault.patch- bnc#603583 - Fix migration of domUs using tapdisk devices 21317-xend-blkif-util-tap2.patch suse-disable-tap2-default.patch- Match upstreams cpu pools switch from domctl to sysctl - Upstream replacements for two of our custom patches (to ease applying further backports) - Fixed dump-exec-state.patch (could previously hang the system, as could - with lower probability - the un-patched implementation)- bnc#593536 - xen hypervisor takes very long to initialize Dom0 on 128 CPUs and 256Gb 21272-x86-dom0-alloc-performance.patch 21266-vmx-disabled-check.patch 21271-x86-cache-flush-global.patch- bnc#558815 - using multiple npiv luns with same wwpn/wwnn broken - bnc#601104 - Xen /etc/xen/scripts/block-npiv script fails when accessing multiple disks using NPIV block-npiv- bnc#595124 - VT-d can not be enabled on 32PAE Xen on Nehalem-EX platform 21234-x86-bad-srat-clear-pxm2node.patch bnc#585371 - kdump fails to load with xen: locate_hole failed 21235-crashkernel-advanced.patch- bnc#588918 - Attaching a U-disk to domain's failed by "xm usb-attach" init.xend- bnc#596442 - Preserve device config on domain start failure xend-preserve-devs.patch- bnc#597770 - insserv reports a loop between xendomains and openais. Remove openais from Should-Start in xendomains script.- bnc#569194 - Tools-side fixes for tapdisk protocol specification blktap-script.patch ioemu-subtype.patch Modified xen-domUloader.diff- Upstream bug fixes from Jan 21089-x86-startup-irq-from-setup-gsi.patch 21109-x86-cpu-hotplug.patch 21150-shadow-race.patch 21160-sysctl-debug-keys.patch- Updated to Xen 4.0.0 FCS, changeset 21091- Change default lock dir (when domain locking is enabled) to /var/lib/xen/images/vm_locks - Support SXP config files in xendomains script- Update to changeset 21087 Xen 4.0.0 RC9.- Update to changeset 21075 Xen 4.0.0 RC8.- bnc#584210 - xm usb-hc-destroy does not remove entry from xend del_usb_xend_entry.patch- Update to changeset 21057 Xen 4.0.0 RC7.-Fix bnc#466899 - numa enabled xen fails to start/create vms adjust_vcpuaffinity_more_cpu.patch- Update to changeset 21022 Xen 4.0.0 RC6.- bnc#586510 - cpupool fixes cpu-pools-update.patch- bnc#582645 - Xen stuck, mptbase driver attempting to reset config request- Update to changeset 20990 Xen 4.0.0 RC5.- bnc#556939 - Improve device map cleanup code in domUloader- bnc# 578910 - xm block-detach does not cleanup xenstore hotplug-cleanup-fix.patch- bnc#579361 - Windows Server 2003 cannot wake up from stand by in sp1 hibernate.patch- fate#308852: XEN CPU Pools cpupools-core.patch cpupools-core-fixup.patch keyhandler-alternative.patch cpu-pools-libxc.patch cpu-pools-python.patch cpu-pools-libxen.patch cpu-pools-xmtest.patch cpu-pools-docs.patch- bnc#558760: Disable scsi devices when PV drivers are loaded.- Update to changeset 20951 Xen 4.0.0 RC4 for sle11-sp1 beta5.- bnc#572146 - SLES11 SP1 beta 2 Xen - BUG: soft lockup - CPU#31 stuck for 61s! [kstop/31:4512] cpuidle-hint-v3.patch- Update to changeset 20900 RC2+ for sle11-sp1 beta4.- bnc#573376 - OS reboot while create DomU with Windows CD- bnc#573881 - /usr/lib64/xen/bin/qemu-dm is a broken link- Update to changeset 20840 RC1+ for sle11-sp1 beta3.- bnc#569581 - SuSEfirewall2 should handle rules. Disable handle_iptable in vif-bridge script vif-bridge-no-iptables.patch- bnc#569577 - /etc/modprove.d/xen_pvdrivers, installed by xen-kmp-default, to ../xen_pvdrivers.conf- bnc#564406 - Make the new PV drivers work with older hosts that do not understand the new PV driver protocol.- Upstream Xen version renamed to 4.0.0 in changeset 20624 & 20625.- fate#307594: HP-MCBS: XEN: support NR_CPUS=256 This is a spec file change (xen.spec)- bnc#555152 - "NAME" column in xentop (SLES11) output limited to 10 characters unlike SLES10 The update to c/s 20572 includes this fix (at c/s 20567).- Modify xen-paths.diff- Merge xend-tap-fix.patch to xen-domUloader.diff remove part of it which accepted by upstream- Load gntdev module in xend init script similar to blkbk, netbk, etc.- Backport dmmd from sles11/xen block-dmmd xen-qemu-iscsi-fix.patch xen.spec- Fix regression when create_vbd for tap xend-tap-fix.patch- Temporarily disable libxl because of libconfig dependency.- fate#302864 domUloader support lvm in disk domUloader.py Note: for test in Beta1, if not good, remove it- fate#302864 domUloader support fs on whole disk domUloader.py- Turn KMPs back on now that kernel side fix is checked in.- fate#304415 VMM: ability to switch networking mode Add vif-route-ifup to handle routed configurations using sysconfig scripts. vif-route-ifup.patch- fate#307540 USB for Xen VMs usb-add.patch- fate#305545 XEN extra descriptive field within xenstore add_des.patch- Update to Xen version 3.5.0 for the following features. fate#304226 XEN: FlexMigration feature of VT-x2 support fate#305004 Add SR-IOV PF and VF drivers to Vt-d enabled Xen fate#306830 T states in Xen controlling by MSR fate#306832 Fix for xen panic on new processors fate#306833 Westmere and Nehalem-EX: Add support for Pause Loop exiting feature for Xen fate#306835 Xen: server virtual power management enhacement fate#306837 VT-d2 - PCI SIG ATS support fate#306872 Xen: Node manager support P/T-states change when Vt-d enable fate#306873 Xen: SMP guest live migration may fail with hap=1 on NHM fate#306875 Westmere: LT-SX (Xen) fate#306891 RAS features for Xen: Add support for Machine Check and CPU/Memory online/offline features fate#307322 1GB page support in Xen fate#307324 Xen IOMMU support- bnc#541945 - xm create -x command does not work in SLES 10 SP2 or SLES 11 xm-create-xflag.patch- Minor enhancement to xen-updown.sh sysconfig hook- Add patch ioemu-bdrv-open-CACHE_WB.patch for install guest on tapdisk very very slow.- Add temporary workaround for race between xend writing and qemu-dm reading from xenstore. The issue is preventing PV domUs from booting as they have no backend console. qemu-retry-be-status.patch - bnc#520234 - npiv does not work with XEN Update block-npiv - bnc#496033 - Support for creating NPIV ports without starting vm block-npiv-common.sh block-npiv-vport Update block-npiv - bnc#500043 - Fix access to NPIV disk from HVM vm Update xen-qemu-iscsi-fix.patch- bnc#513921 - Xen doesn't work get an eror when starting the install processes or starting a pervious installed DomU 20125-xc-parse-tuple-fix.patch- bnc#536176 - Xen panic when using iommu after updating hypervisor 19380-vtd-feature-check.patch- bnc#530959 - virsh autostart doesn't work Fixing this libvirt bug also required fixing xend's op_pincpu method with upstream c/s 19580 19580-xend-pincpu.patch- bnc#534146 - Xen: Fix SRAT check for discontig memory 20120-x86-srat-check-discontig.patch- bnc#491081 - Xen time goes backwards x3950M2 20112-x86-dom0-boot-run-timers.patch- disable module build for ec2 correctly to fix build (at the suse_kernel_module_package macro)- bnc#524071 - implemented workaround for a windows7 bug. hv_win7_eoi_bug.patch- bnc#524180 - xend memory leak resulting in long garbage collector runs 20013-xend-memleak.patch- Upstream bugfixes from Jan. 19896-32on64-arg-xlat.patch 19960-show-page-walk.patch 19945-pae-xen-l2-entries.patch 19953-x86-fsgs-base.patch 19931-gnttblop-preempt.patch 19885-kexec-gdt-switch.patch 19894-shadow-resync-fastpath-race.patch - hvperv shim patches no longer require being applied conditionally- bnc#520234 - npiv does not work with XEN in SLE11 Update block-npiv - bnc#496033 - Support for creating NPIV ports without starting vm block-npiv-common.sh block-npiv-vport Update block-npiv - bnc#500043 - Fix access to NPIV disk from HVM vm Update xen-qemu-iscsi-fix.patch- Don't build the KMPs for the ec2 kernel.- Upstream fixes from Jan Beulich 19606-hvm-x2apic-cpuid.patch 19734-vtd-gcmd-submit.patch 19752-vtd-srtp-sirtp-flush.patch 19753-vtd-reg-write-lock.patch 19764-hvm-domain-lock-leak.patch 19765-hvm-post-restore-vcpu-state.patch 19767-hvm-port80-inhibit.patch 19768-x86-dom0-stack-dump.patch 19770-x86-amd-s3-resume.patch 19801-x86-p2m-2mb-hap-only.patch 19815-vtd-kill-correct-timer.patch - Patch from Jan Beulich to aid in debugging bnc#509911 gnttblop-preempt.patch- bnc#515220 - qemu-img-xen snapshot Segmentation fault qemu-img-snapshot.patch update- bnc#504491 - drop write data when set read only disk in xen config bdrv_open2_fix_flags.patch bdrv_open2_flags_2.patch- Upstream fixes from Jan Beulich. 19474-32on64-S3.patch 19490-log-dirty.patch 19492-sched-timer-non-idle.patch 19493-hvm-io-intercept-count.patch 19505-x86_64-clear-cr1.patch 19519-domctl-deadlock.patch 19523-32on64-restore-p2m.patch 19555-ept-live-migration.patch 19557-amd-iommu-ioapic-remap.patch 19560-x86-flush-tlb-empty-mask.patch 19571-x86-numa-shift.patch 19578-hvm-load-ldt-first.patch 19592-vmx-exit-reason-perfc-size.patch 19595-hvm-set-callback-irq-level.patch 19597-x86-ioport-quirks-BL2xx.patch 19602-vtd-multi-ioapic-remap.patch 19631-x86-frametable-map.patch 19653-hvm-vcpuid-range-checks.patch- bnc#382112 - Caps lock not being passed to vm correctly. capslock_enable.patch- bnc#506833 - Use pidof in xend and xendomains init scripts- bnc#484778 - XEN: PXE boot of FV domU using non-Realtek NIC fails enable_more_nic_pxe.patchcross-migrate.patch - bnc#390961 - cross-migration of a VM causes it to become unresponsive (remains paused after migration)- Patches taken to fix the xenctx tool. The fixed version of this tool is needed to debug bnc#502735. 18962-xc_translate_foreign_address.patch 18963-xenctx.patch 19168-hvm-domctl.patch 19169-remove-declare-bitmap.patch 19170-libxc.patch 19171-xenctx.patch 19450-xc_translate_foreign_address.patch-bnc#485770 - check exsit file for save and snapshot-create xm-save-check-file.patch snapshot-xend.patch-bnc#503782 - Using converted vmdk image does not work ioemu-tapdisk-compat-QEMU_IMG.patch- bnc#503332 - Remove useless qcow tools /usr/sbin/{qcow-create,img2qcow,qcow2raw} from xen-tools package.- bnc#474738 - adding CD drive to VM guest makes it unbootable. parse_boot_disk.patch- bnc#477892 - snapshot windows can't accomplish. snapshot-xend.patch- bnc#495300 - L3: Xen unable to PXE boot Windows based DomU's 18545-hvm-gpxe-rom.patch, 18548-hvm-gpxe-rom.patch- bnc#459836 - Fix rtc_timeoffset when localtime=0 xend-timeoffset.patch- bnc#497440 - xmclone.sh script incorrectly handles networking for SLE11.- bnc#477890 - VM becomes unresponsive after applying snapshot- bnc#494892 - Update xend-domain-lock.patch to flock the lock file.- bnc#439639 - SVVP Test 273 System - Sleep Stress With IO" fails Turned off s3/s4 sleep states for HVM guests.- bnc#468169 - fix domUloader to umount the mounted device mapper target in dom0 when install a sles10 guest with disk = /dev/disk/by_path- bnc#488490 - domUloader can't handle block device names with ':' - bnc#486244 - vms fail to start after reboot when using qcow2- bnc#490835 - VTd errata on Cantiga chipset 19230-vtd-mobile-series4-chipset.patch- bnc#482515 - Missing dependency in xen.spec- Additional upstream bug fix patches from Jan Beulich. 19132-page-list-mfn-links.patch 19134-fold-shadow-page-info.patch 19135-next-shadow-mfn.patch 19136-page-info-rearrange.patch 19156-page-list-simplify.patch 19161-pv-ldt-handling.patch 19162-page-info-no-cpumask.patch 19216-msix-fixmap.patch 19268-page-get-owner.patch 19293-vcpu-migration-delay.patch 19391-vpmu-double-free.patch 19415-vtd-dom0-s3.patch- Imported numerous upstream bug fix patches. 19083-memory-is-conventional-fix.patch 19097-M2P-table-1G-page-mappings.patch 19137-lock-domain-page-list.patch 19140-init-heap-pages-max-order.patch 19167-recover-pat-value-s3-resume.patch 19172-irq-to-vector.patch 19173-pci-passthrough-fix.patch 19176-free-irq-shutdown-fix.patch 19190-pciif-typo-fix.patch 19204-allow-old-images-restore.patch 19232-xend-exception-fix.patch 19239-ioapic-s3-suspend-fix.patch 19240-ioapic-s3-suspend-fix.patch 19242-xenstored-use-after-free-fix.patch 19259-ignore-shutdown-deferrals.patch 19266-19365-event-channel-access-fix.patch 19275-19296-schedular-deadlock-fixes.patch 19276-cpu-selection-allocation-fix.patch 19302-passthrough-pt-irq-time-out.patch 19313-hvmemul-read-msr-fix.patch 19317-vram-tracking-fix.patch 19335-apic-s3-resume-error-fix.patch 19353-amd-migration-fix.patch 19354-amd-migration-fix.patch 19371-in-sync-L1s-writable.patch 19372-2-on-3-shadow-mode-fix.patch 19377-xend-vnclisten.patch 19400-ensure-ltr-execute.patch 19410-virt-to-maddr-fix.patch- bnc#483565 - Fix block-iscsi script. Updated block-iscsi and xen-domUloader.diff- bnc#465814 - Mouse stops responding when wheel is used in Windows VM. mouse-wheel-roll.patch (James Song) - bnc#470704 - save/restore of windows VM throws off the mouse tracking. usb-save-restore.patch (James Song)- bnc#436629 - Use global vnc-listen setting specified in xend configuration file. xend-vnclisten.patch - bnc#482623 - Fix pygrub to append user-supplied 'extra' args to kernel args. 19234_pygrub.patch- bnc#481161 upgrade - sles10sp2 to sles11 upgrade keeps xen-tools-ioemu- Don't load 8139* driver if xen-vnif works [bnc#480164]  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~1.0.01.04.9.01.01.01.11.14.9.04.9.00.03.0.31.04.9.04.9.04.9.4_04-40.14.9.4_04-40.1  _libxl_list.h_libxl_types.h_libxl_types_json.hfsimage.hfsimage_grub.hfsimage_plugin.hlibxenvchan.hlibxl.hlibxl_event.hlibxl_json.hlibxl_utils.hlibxl_uuid.hlibxlutil.hxenCOPYINGarch-armarch-arm.hhvmsave.harch-x86cpufeatureset.hcpuid.hhvmsave.hstart_info.hpmu.hxen-mca.hxen-x86_32.hxen-x86_64.hxen.harch-x86_32.harch-x86_64.hcallback.hdom0_ops.hdomctl.helfnote.herrno.hevent_channel.hfeatures.hforeignarm32.harm64.hx86_32.hx86_64.hgrant_table.hhvmdm_op.he820.hhvm_info_table.hhvm_op.hhvm_vcpu.hhvm_xs_strings.hioreq.hparams.hpvdrivers.hsave.hio9pfs.hblkif.hconsole.hdisplif.hfbif.hfsif.hkbdif.hlibxenvchan.hnetif.hpciif.hprotocols.hpvcalls.hring.hsndif.htpmif.husbif.hvscsiif.hxenbus.hxs_wire.hkexec.hmemory.hnmi.hphysdev.hplatform.hpmu.hsched.hsysevtchn.hgntalloc.hgntdev.hprivcmd.hxenbus_dev.hsysctl.htmem.htrace.hvcpu.hversion.hvm_event.hxen-compat.hxen.hxencomm.hxenoprof.hxsmflask_op.hxencall.hxenctrl.hxenctrl_compat.hxendevicemodel.hxenevtchn.hxenforeignmemory.hxengnttab.hxenguest.hxenstat.hxenstore-compatxs.hxs_lib.hxenstore.hxenstore_lib.hxentoollog.hxs.hxs_lib.hlibblktapctl.alibblktapctl.solibfsimage.solibvhd.alibvhd.solibxencall.alibxencall.solibxenctrl.alibxenctrl.solibxendevicemodel.alibxendevicemodel.solibxenevtchn.alibxenevtchn.solibxenforeignmemory.alibxenforeignmemory.solibxengnttab.alibxengnttab.solibxenguest.alibxenguest.solibxenlight.alibxenlight.solibxenstat.alibxenstat.solibxenstore.alibxenstore.solibxentoollog.alibxentoollog.solibxenvchan.alibxenvchan.solibxlutil.alibxlutil.soxenblktapctl.pcxencall.pcxencontrol.pcxendevicemodel.pcxenevtchn.pcxenforeignmemory.pcxengnttab.pcxenguest.pcxenlight.pcxenstat.pcxenstore.pcxentoollog.pcxenvchan.pcxlutil.pc/usr/include//usr/include/xen//usr/include/xen/arch-arm//usr/include/xen/arch-arm/hvm//usr/include/xen/arch-x86//usr/include/xen/arch-x86/hvm//usr/include/xen/foreign//usr/include/xen/hvm//usr/include/xen/io//usr/include/xen/sys//usr/include/xen/xsm//usr/include/xenstore-compat//usr/lib64//usr/share/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10217/openSUSE_Leap_42.3_Update/59b06c524ef521499eb53d856b053327-xen.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linux?]"k%j!k>ʥS+NT#)UQ)ab{Pn/V߬8M&^?墄35Rmܔk%A h2ksSѝIFcC+q,YlΉ3NقKb1G-2@T*$ SS'qi7u&͛FX4A%`q$Tkq!4i{B.7ʗ`]!Wg#<)֞\, ǵj}]'3 }@h` F#-xA@i peO}ȈhGJY%DEi̔T ٫6hmj]–?;M< 7/Ii-f>Kߏ9W*Cfn{m: p/uwmjmN @ 7ʷQ*)8 רͻk+XҺerCj~{0F{ ]b&}Xqum]NgƈpGM bwк&X!":@筴"m\b @曶,~>]'ƋK^DM։_HW>7e # :yuggQЫ{tjX`HKjgqA}6ufH]|]&m4bԬ]yg}r[\ݐJ5,66ӕ ٫Y#M_:բ=Yahmy[\y`Nl}$x$Py) Lk0nY{Eh* {~"M 7b*6}Lz?4WNXUۏd`i6C^yeҮ!,a< k~:Ya3H9G 8RYRvmh3]xvJ-1d//$^"b: ]oP>Ib؍dcSvpwO|VSKL9V %YPa%(C L5GC٣.s)U9^n}qeW}:XJHB̓WLmSnyZcsM6M<aI+g_X+R[Eڦı%yn 5襧2zɉJ! z&gsf$Լ?[?Myشo^-WP!4bSG-UH!)쪁$ޡLĊwQ)ed}rPׯwZMVy (, 3ǮU(im0;tJ6L61+4"ӐnG4ŎQ'yMHikO.4S`%႑'p!;s4I94p4RE$ؕP;iWGx3d>L5ً%jo/TSdH3ܧWVhzZh 'XN~-w8t4))se%` mk$e%"lX`F q9O[+NK{-`[:Fwjg=59Ȟij3#٤N٫Xb(xŽ*50;7ZԿ}Kfl?&1wo0}58yF-WzStV媉wbgUEzly6O}Os, r*dEj??nخ6J\g*GDDVRd3Fh0f.'mVϳxWK(KŚѸzEu!kҎO]n (C%͕\y`ȅ䖅v4V&X|zU‡H wm)iI!_/Sly|ۆr5QwKM#K3 Grkϊ-j࠸EL]GXwYQ^:2spĊ-a2HvN'(HMvOgk;YLY!%H!Hdk"ASz O4t]sƖU&񥃖ń77r5|B6fHd[X?/B]C1I+b90R$EN+0}X8[otT+&&h ipv/AhhIHtSo7 C]G]O?Fu:)8C)o &+3#a zTg5#JGeO!8 gfjaڊN3*|`v?T0.}&QW`[y>x/'ʯ7G68I-D\+;}r+Tr+n'؀?`Äo_"<ƆRcڨb N^ŧawY`nUq=j># H`E&|u(va32B/n1H6cŒSgPbT1`mgKOBfqJ?K=1@P3zmSuuŗǨIO~X"C Wug;\%b3 !O1Tu]>BwB@ȓZ(penmya%?.de4hLGhhQVx^ >nZv&"5fs"%a<8nj>b[eoui +G.{tE'.IX^;e4Ј6z*&Ej+Zp衽C$,9j r RE{0t#/O+=F0߇-kAnf>[mGKh还b )V}T= XuMD?88y_@bF!EO-lYП3|Z%%չoIo;[qBfa~H(,(Uy!b] ({$< #.!fZD^O^1'KԃiJnZ 5ڈ>Tr~0_qe`04ŵR+Lj;Pbl p9[ph }r hbsuGD qg tb*>$nX2@;!դ5㜞YxO xc,篰LBBkH\Qu2"eS }*ݻia8! lNW3us,/  xVK4 -_?='qVpOL0|&{~rmf c~V\{#̔[4$@(B "L-_v W06*;#ZGB!~cFCe͂UQn:UuȯOχ[H޷"[xɔ|'g\q2i^0wλYq0TJQmdo<ɒzz'Yzze-oԳT&Qycw P TxMLܜyj=(II?9JvѳW.J>?&? xykjTZh}eկYʻ c^ L555h[N_a٘OlY ]`$1NgB=1|}An,nOt tTV.ضD0 ԰vG'Bȸ `S7Wd (Z?]/νSX 0 1Х}5e0Ii]Efx^T?Q2Ƣ+O#\b_t ؤ{KĜxJu R_lg4eƓ6~%WAO{_;g*8>=ЪDaivJp8CULW юfbS6B%5K$ WMGZz(R8cGuuD Ћd$<.QU1#B5 x%ܸ$ވ#TS 򾡂5Wo UZOit9D,"w0lE9ǽ\ݜ_٥}/Q2#V2%+u픟g(ӴޤWо9xЍhL<%ۜ\ w[0cAU޳Q&I:.Ϲ+dS:41>kYMCn;-Qب7kƐE(JLz6kbӮtUX8T5%8pN^e-+SJm4iNZOfT^,$-@5kU!:?BG,K25x{*gp"|ZkJ/X)dAVhlG.%fײQ;$Gb= k?%Xj"gQ=ޙc-,O!Ч+B=&=R  JxJxWO;/4eZCG(Jm~dĎ$<[M!) 2iЄ b>^Ƌ!mSwr0 ;q!*!( IYP "#lC6Zr=rZ   dE@֢G1ʔ@D,R(Cj?iH淸\uёVl&T^VƜsV5f]GNUi-ǁ3ɷ@H7yiYpevÒbw=xw?Um_^gn(HfQiUz-_d _g2Ј 0-yfnPtѪAh? { uN.4ߝLeHTN^x1tng7=?xoEXS"=d?: wDle1sRsg7N(2SMB|BŅ)'"?~in%mg V :g,jXR~o r'}l([ ~=i~c'h+ @u.- .HV||w!kf諟D+ۤ-8-i6 `6Рuz7ň`\"2$$=Fɣ$`69('>ݽF7‰p8O,Zʴ<𻯻dJ֗=;roДX*1qG4uC`OP$d2!2.{x4fJ*o'֛q58u+ɽC1.W͵G?4 @ehlvY#UzMن{@/e;܅&#6lHgtzFL{&}Ѽ'V*=5b%w{k[ q=Cb+>5\;ƫ=ӗY) g¦ʗFp5X[s˞dVT٥,Pw}47ÛzJct}:Ӥ!4#v#w^,P$ѬHP4FX<%[Z\DEw=.,]hG4 qluAo8& e N=x_,YYoP*!K .~F}jy9NvB0q_ռG-YQ|T* 16 p:"I3%k"`ytO3U}N _&OfОʆ?$Lͽ g0x& zr98C97w. a # KUHS-L@27):QnRCo-)phATT-gLގIJPFB)9PgEܭ>E45MD_H%k#Iٜ4=_bΘCoGeE&z@ɏ`9na oI :S0,±9ѳCUb,mIٖLGR3.`j'v&i1(q`͋A_\/W9QGj4uVvi9RQaqzB~WRi";P C&0?2 ,8\M˲3ts6Y,ųطǿfڔz-'WKOml艱iVLה%ȥvӾռo!N3g܁ ҌkԉSb֔9=qM =W8sTɠN4co^V)d!s%f#h90,.hR>.R|Bvvk-DJ?ߨ2aUt$[L]?բu~H>ͯC(D::L+-*¸:oլ.:PߌH]|ano򡡇 j,Hwxl1Y/a/&x(JlZo:?nԋ""E)>]Gʊ2,Q 1ɽ8#5ZN:b&@ᖭ֡৶كsv{Wl]]4it XLIurHC#p;yҩɂ{ay\lؕ~#Iv].58,sW`u PkIH[55I`jZr#z)H=~y~RvGQ, FV Ҕ+q`5]_k܈V:•%-Y:*83Xr](ХOcN }7QWb ,i[F츭sr@|H'IHeZ=D`Lj۷8GO4}튖7"C8Y}/:ί JDᝆ{Kڦ5To#*vc;Jʏa@50/RK~| {)Jf|z>КԯE}[wEpʇk*Pf|h'?zPptS~RZLgnY;`-=%}#GM<4_]Dt*\]XvZ{YX%D`CB̘jc>SpLӜ ?΄ +HqnhJ6(EL>Ȯ#)Gvr=49uߎ&CGܯ l78NI04 B/]BGBXD^!3[*SގF*_>Yu z e7 =ȯQi^Vu T*/GDU"NZ-={} wEf,Ks_ke7HeO SgBԱ,q"-T=WriDζx`/B5b2j6Z<{`yh7{-:9%GX~v_elCΏyPt^atV&q./Ɯk8:dKG}c e]?bz%9tg5)8<ţR{L J1a,&T a#Mhf捛Q;ðlL_gꙂcf"m8  2X.hlm<@]Nh7R'(tF˧xir0:y"њeظ}._Xpy~޿L=2D)Lfr*_=@{[4Oy!$~P?=X8*(n39H⻴{Y9s2_A8S P8Ǭu ou-c3Si R̂GAQ[w6VabY4iL:ׅH&Hm>P93~REwN|I| Y>B{ Ȭ(Za g Gx34Íg /=ykĸo.}fd*21T/c{$[NKY` 5D T"cy؞ٴFTP\u~v /:>|6R2գ^~GbDE~zMuRE{X GsLOhQ3Sj4hYxC{xkBRAl⒧b$R3Mba 1n\lǵV5Ng>xODp0߫}&DӍ-:aCE`Ꝿn른DQpn&:OO@\?԰B.m@ `g3Tt^.l#^1\d] ةw-)v4$q' Fh?lE^AUhijL Ճ4L3ENFjR0Z (7')) B]gfۗ?Y~a IJzʆM2V]&*UZCp5qUDK_U М7"r`| ,x-g l`Hw: %6o1G#9mݡZz3#NJ߬;;6 * LؒG>`uJ'wQZXX:MHmIi2ޑ;11:`MοPPg(EhwF}=v*A|۾?#Va d&d2|9Rc-y9(Gyo,(db %F(iBؚD ~'~xy{X'?mS 7ck~>X% +dEPgH|_vVsغ]Ƙl$ʿpNЀ*Hg8^8FI2 9^ClG? D;uδmiGX烍1bd]HpD`s0 'ʻխE\T .p\~·D*C+kB#1Bϐ! O61 # HTʛPBJiG.|í0fh.D:iA}*N+!ZRfAXK!`H)e%3z,jp ?^Uh0'X ӃN>YۥgNN}G8`:iR1{MUU4ONs LՖOmAɍ66i H BTiJ`jmarCJnXJr2*V%kcI"*VG##wv1u?VӍ)SE]9BB)`z swת;i܉M`)%y, 6xw!,OZy -. vBK![)RY\np }Ҽ&oF;?tZNY7K13u-<% 9 QjR ?+y 5t#T-f*QIQ50kg7ky=}c~ogMz:o$H> W>::$F^Y1 im"g(L/ F`l64"֨@W]Sql6oas?YG{r\X-:Cpu laf3 _SMh^QTE0 :iA1cܨJc&F sUU\pӤ[>|ƶ$PY^~/uKTU9vFͶ䷍,+ S";x!]30ɏgGבË5Dq1 qe&g"~`=9r4!XdE&? ޶?'I8c*4h$cJ aq䛺)Dƥ񜹩.y:J??`X=VXs<ߩe pCxsEIhgVu78JiF ċWHlS)t5)F ~['6dM,+c; åD,kN㊰?xپD \a;b~k|Z*-skYµC @rPwL]H8k#ēi^n#x3g*_Rפ3P5뻥wB1kJ2؎{G&syZ)jb&  'Xq&h>r/{<0;jz登/ u.DM$k2df盹 S+ܓui g>)|'F&>Q_a&xn4r&Z>AKć'A3-Ӆ&]؟0YFFŒU{ C&qyIz}D97fQcϙlZr[k}an$ot X~& %eufBZ*ώE 97*eͶnzx:1yR@~DpK+ {Ξln<ܢcdNo#1h˯75ɒMz 7q%}!|HLjTڙx3ZXFJjD@$r4 ]zp%"y b/a1"fh0]='gQyNnm8}^OIq(IaOuqb%+UG~S@>1¢zBmzckxꌋSuZx8o٨(s+J k89 ٴX@`U:Ue q94Ms`4E?kmD!%)aqЧ*y}Ah ͩ>?1k- t- D==3 T+8T' M#& 0I1`s<`?K`IG77St-traB9CFˣr9jY{8ʞ̀"/vhN93 kc A2Ӽsc/~+[qabqA1(J4p{ ymcs?=WdaN. %ťqdY J'P9Eetj]/0Ct_CNv_ "oNnR[ݯV 8X&&|| _VvH2=3wH L,KqqH!A7=>fl֔˫ud'j߆)Q`rI@k6XgÇI!EӮ|FZC itrZ,L&1ؗ~N*. /[b}`&ΎQr4{XWf2˪,; XXsNcQ:{lTAXÛOORXp;Ø8l7с i?\W\҆GWM{P_>EQxûp7@ЀSwd&E.N q7b1Jdpxa6t,r>RȂՃn;cyw)|4/]9`0 L`,`4TdGE|"P%dZ+=h Y`xׁF: γ $m5\dk9 PKC|9էքaƮPS3rbH9?b6 a͢&)"441T, 1DzqI $<1%>qeqʭV2"*vCz`xTㄙ4U[-SG#)Kx.Wq$@ LJRqSݦ㦪n`C7=mY5V5-_=dǸMW\vbg4GqgJCD. 8gJLpOG˺l ؍VgPBT[IlL70ڳUەͬ,-NSfK꼡+<㑀z(SN׎#+0+0X,rS<6Q}.^mkfjAW藴FOB1f} 1cd ЖǪjwce.V@^mvs28l¿ #6@v }1G0A"㦀ize3K(pji 5UMvO"'0hDYj+X 21]3)rc MVVM='pqFh+Xb4!,6X)fQXt/Gg@ J;/IȿMm_9z;Q7a<㹏$VOMi0;8xPg>QE 0Hܬ]U /ib'lo["be 2=F7dXqP@dr- I'a@'ob|ްGD/N=ߎV poqъ9|L.Np -oNJJ0T >@W\U,HЏ'hq} fIh tN5^qv,W:^p3m54-(N V4 SEvvdxmiAb3 7Q_Xt$0ڋ9虩&%CW$hJ`̈́< 2T|bhie/ ;j.o#lXug[L@\sKn. u7b?YtA9ۤg`*A' 0{^#G1ӽݻCa=,Dx{Eަ \сnh4PHpL[/{[NVYٞ *"bx[t,3 !VfE9@˷oP<2P.?u<:=8xm(sş%B5+V;hBv6$<ݙQۃ(^@Bp~l:7{V&kMYUFọ#%- )^opWٍ4dT(}ٓfbE'8 q&xDܥ96|"+2qG@$6Rx;c.2XDdbr1tt8 %W 삮ܱꢒ(Wj5Wd͚~\'1N?K:ǀLNDMV*>TNbLw8?3&"2,& {Leވp)#!7\QI6,jcwWƦ8oT <-O0Ëe(\OHdYd?oWv;;eNc.S >|H֪;{SBrjCo@C9SU)w="" X Zu:rk՘e4t䒑mPP?lX)?w.!qty~8r1E/%}ܳ-na c PO[ @|h7^c5k 4 SEp̨Øjz_P,ky n;Vg.;Uc^$S(.iq;v"̈́r#$8lMQP2?Wy&(}s^FԼӥK?ܴuuƙƌBI!='D+AAy/m?%N*˧jkaJdOeaK+K(5gcw)߽=y_@HBw=sslDJd=d~ Fgfu|lX~ rٻH?_aN4B MnZ$84, qA }ރQݯueO{ 4oaդ viJ5'xaxY ~:PcE [mKAR6GVj)tZ_&?K8{_"6 ?fp;a܀nud4Oz!#Uw6Pq_!5) ei/vbƧCW8\tb}_0xקz;.(wZ)MżU ϫ}Fo%Lin֝.CP 4B 7m}~/mDcݏ +%H/3ٜ/N\c/:k;H+avVxg]>Pt;\yX>頳>HJBwĀ0B[VϨ>)kq6T!xd3, u3%d3[ീ%-!Ăyg45͛n+[яZm6{mF?g^$}zwm=n6.T7vϴyH @raYE'lSW9!"ENrxZG١"AK(-z$M2#cAV>2<ěZza#ؔ^%&M / }!T܍k!.-'۸_"hSU.zKۑ(Y 8FP@P۸3zx.=TdA'ɻMH7Hx+leb;Ca$8$ 4:zxQ H_b7>z&-0uPd$@NZy:Ӑ#->6fF;~}ߣDC>+,!Y3e;߳ReHryq cM1S@ʝQڔ*=tA=98K55?䎀HBXMZ8"7x6sq@jI0p ]#)ۓT #}trQzv4NA7 _Z-#;Frjkg>ubZޑ$p¥!N_Ѧw]I)ȫe6 *}WR[Ёiu!XZvLֲx-cL1%x8[pN{|֕mʍg\kԎ8.hy#C򗬓̃I=C-C­*tcm4WzAv y^D롦PO-H{uZ0 Nӟ&C2$l*;;}h͗x4OAR9/jȝ !!p~4~/IgAG1AVq-Z:C*vӯK&cǓ`/ XWM*}th5n,ꇡ7!D57#/7hb[6 #[ԽBE7,R"o~W\R< # 50~H>1 jb]_SY& qn1~qV5z'1Ň[jڐF|%loK,3nǶkqtzuGTLI}GYE*TS0;jyXP~c}ifOxR5N=[TS'qfidV%Vf{]Sl9,6w4#37O#@sTN0PH_|C sO+y4JZ&<Ǚ ps EzLTCκza/6@wbaY~2yZ5x8KM [ ڌSruv k2 ([%#TW]Du;-C@}LwLޞWA acsF[U&ͼ\`ⱒ˱5$Bߴ!s=BOWб1_)a tJϋYЉ;_ t-ϖ>NnGwCdU+ `Ȝg )1ARǎ~U$,īX1CfI'Q %K]SZ6N|W.3l(Q"L W' "ۻ'ܻH F>XBNg%׈5mw{3&#YV -~GȭY˭]m:+۹ib.zhX A4xv9.z2k sV7R0 Ў7fʹWB WM%2Q}/+7.% ߶SԺPy + ՐkiwbQ$xP#$R,xWJ)ZѣZ*!o^A,3.'+$Bml]6 8!i;{&^`ri,HP{9"0WvA"ෆѱV֪u3"Z:LdUGhica%T]uOtm*cKƸ x7[ERt@PB[n=4țUeMċ_ ][FgYs@HeXC9ni4f4\AQ>;"cxp/g*FAg-Or{/BzìC LJq=R {8#oZ0M} cL5ym/&xs}`1O(MT+x2],Kd\PnD2ngvfLHDLe'T kxp #J?lSs*ڡ>;b˝1,Fck'? ?}הҋ/=~6.scfߤd4U=P~#*! :;a R|uq/ Aͳ_u|&rRF俟P>|fQ4 *e#=6 a)=h 4x~@ 7AF"w,RA&q>嫫~@ _t>mDT*&U̾f@-ASLgצiJu&;秼+.ON@?DZlڪO&1M#2fʹ+%[]=Z:XDR.'꾦J~Vpt^ȇq%#n,&#Ȓ[]:%0mk>Qȍ3mS`>e3=/ H{Jpqx@zFYS`J@(tuLp9Zik4N_h(3hegS1K^sYn~χ"ȥ~ qHe)}$mC^&p@>)U|}`+)#c*LܗZ+@xp SQ jN߭hZX^GݸCڌm%4[`-Dfr?92NT mLQM7aPM#>)#|UffxI{}(D84ϙSқTpuYvIQRBum s$5}LVdKǖ\_6~v}lpw!mN(uPR"bLLp;pkE%jV&yc'a0j?uB;V}1pۗZGs)]iLox]a]kEv0QGǀU\RY:Ӄg1dcc*u{'j ver: Fhۯ4VGglSb2J`j22'V]5}(tcb5TЎxIltZ?HLkgL%9o.8Q^o)Ggy'}*߀ow |&*%rTJ̠;KmX3aoqr,< HA=ڜȸ@g쉮!#JsmڽI߃cM^ A\(VEZ6?(CҮOu ? sN-r[_\jQ>(dT$⮡R| ,E0GY,HLk6c}ݭ|Li8`/lԤIw,?n.< h\tƈC\Umģog?EM.NUxz j&>BS%$b 1F XhS+hQIWRZϽßӭU Z[6sf KˢoFjunhʚъ[J8X~t~./YjVyØv*nlʼy҅/l>ag=O0tأEg_^1 "WT&/^Vlf޵ AT'.M2K֞0AKFA"1LMYvAHDa3;ԉ>NF [V Co=`}"Jte`*tu;X,~J$F0jT&S}[rQrLy?]2YcL ܇"UC}4fBWE1 JԦ+ߞS"ø ^S{QG _eTk+#JsdOܹayHkF#CȼAqll>T"L\E<)AԃԶ:D6zf4)'g$nc7W^5 ##:xj {K%}\BVrT]Þ1gjK7`L@~$WdsmCPhI4e@ X7!YΏe4(|R:H_MjrkJ)7[YenӠ4ZGlѥQFz4fKc%L ۤ JdA睊+ 2&Cn &=r V,V-p4vp+5W'k%Q3Y?;͓\O77kMŞ*E%+;: <=4p{E<&W>Seb{iߖ #G-S5x`JWj7sC/\s  ܹns#)(?rByp_좀xkqě| x4#\yZYF^H~wv 9_V#X#oL!fͱR$#l!LR?#PJ)5YBPtwugn(#7ftj L6uŎ01\9`ͫLW#zD_|{.][Jj/}h3t$ aX]4<{@U3b_S!mB6FLn7pؚ9v=(E'~[~ׅDzHqҔę{5f_@CG6VwJ.EuVḢ츈C 6bl;AĒˮRpĬpb݃H:uR],1@䊗? Lg{mLiV#5DEtȱ(=t EB^[Hh]Qh&-`=P42fsy pa'6gɔo2s#dN %aMEM6dL㏎hń|47}ʹEO/+pt܂qH¶=V`YUY8%`-g5lqmgܱIwZy$ l.﹓)R-a 0էWg@u<>H]g QҙըwhOD۹UL%d3#Ѳ!/t5,0'z z?Z&5R^w x}xslo-}10[ޏjԶØY\] 8h&oݓC0H}ǀ7v3++`6 LO xdt7NGx_@?o|ŏ8pLG="^Vo*qvl*]N6.$54\Mg F1V򭶀`\1v$}D,Ů'%7vm:\eT$J"} Y'GgjG4b<3"r~ǨԢXJM#1.sWa,EpuxAV&SF޳!ͧQ f:UaiVj}˄0@`;^FY~r1 Ēdf =*w!p9wE/&-{OPɇ4-KJ\Uݵ %kPy}մA懛4\Y-}O`./z{`] ,xfPTNIFEĔ0ay;%Hh)ߜJ8{7o Fs?E~ ?E@mRcjS"۲ƥOBqWH )^$k6Pzr/H~KҋԴOP4 Ac@nM~%kv(ݛ K9]3H8o4}Np)^>g_FD9,E{3m t>6EUA''O)d/ofó4>a# aa#t"H46VxainͭSmSLaW$+_8h=voM`Y 1^kQLi훅$8^'.7нٞ~XҤ0CBB_9hW~t*sw;ԃley-^0kŏ5=x~r(לҚCPfyLx_wn wGߗ 8 Jc; )ɲyl.LsŞZgm5 m76eژM @Ŏ3Rzܺ1?tT4 v;t&QD/ob:ӟa|+uz.3MӨo!Et1Q.7 "(Q/'*aNw2٘A)EYuܽjPׂ'p~7Z_NڊG?b \W-L8P$a87R9BT[R21*(3ڎo?V7\.ɩ lc^7gNsh)Dr/iU$: X!CSfA;Xe<] {Kv"3 Y[[8ytz#"Ɗ{yMOO$ѺQDɇ엓I#ݷ1Y?8AOyJ'%0Iٵjf kW`sIъ~>4R)><`{c8;mVWi}Xm$!_yxLsU6U&fEj,C .Ut:>KB^u;=~uo\~&~81q,gmhæ4b[KQ4^]aqu/=)y]iÙpMxzb4\k%pW~XqE֖ %lpUdWk P ][ybA\p_}DZ {(ڥعi025/8OPr}Q_6-KrM(xX bΌ8zm̛  E Yq:_n[EteN lp<f0zJ{ j5hc7[KS$zKS a;/MʭvAE(GeU.¡P쬾69i#}>E6FcZV?   kbMSeH<'h{j{ سìNH X 'cDz|c_[Y.dn&; /ͧ:?;z56=om; V`"cintڢ `f*[[Bxw~\Ebei|b)_ N)/`՟󔓇MrCCUr&ŢׄWL 8Q"}~î改&יm%]-ur-苅W> "OV/BDĘr$D-v钛%h&_co(M[1Ys Ns2\01)(8uFeLRsXawLJ;ˆY'fL_ďIm~Tؚ벜z6BqFe9%!Mz Kwxa΁8|P_ Aq>3|qbV:!R#d MyIWK-"̅|cĠw0XEȴ?^Iѐ&T;fl4"uWWW0~eg`KLam8+?npDJde)^ALܐ6~2Ƶţ*$DE쭆%3f\)/TI$rJS @,1L7yVXqNwͪpRC_d*e#8IZ'om>z@wN*Ur")$YBot#J}M&=g/w/ !1L,5d~ K#l 73,G>oǾd2¶T'@6yEoY X!+KD>蠳*8ؙ! v !0 U|O N$Y{6YO.c0 .Dfp6 r);^3Eÿٞ]j^7)Ӭ`_@G~)'_>(u9 - HJ/HA 1]"8y:?59XYci"#{@́8Bc b/b1JgkBE|LqV EZ.ڇF,(5)dV!ӔN^cUЇ6HbX}^>S5bb6v әXg-h%R;!Kަ 8",'^ [Woj~ i_陈r8#+QX2ex ю_-Cq-D&g&QxpU4$e6SgͮŅlZޗ6^Jrz%^v5{阉_/mc= hm 0<=H=wЕC]6`'g XH.ʋUͷ4B2UƊiѹ1= ~u =F}/6[ 8^J}ؿ:- TAU+kN{ -I t(;V]G3z"G)vaijԧݲ2.Vc](`h(y!?/SP✢MyP_qAx;O2ATy(jEM)27 tH$ ~ɰ` R2K 1֊7C|l%р5_N=j ^}Po "P – wLj_׶-O\ꨏwzV| )6䃁W`{'iBv:=<@ڡD@PȕUܜN*U#!wzQhαXN#e3( jh?󚯐:=v$2Whs_3aBebA{se!~9ͫI"Eʍ* prkU[))\ㄋ6nhlg4Uu{xbg ^BOw^gڳ4 wKE_rBO{(io> ;W|!{4>خ"ډ/3z 0Z}UXlÒ{Û$YԈ*b_:ɡfItLo5BdW', 6,PW2L,W] +u'} 8[so`51{:Jq'/&(ǚܬ6&h7԰}7^No_b*0ݱhzs'(ڊ{N ݫNR=#"2pS-8ÁuT(`E5X)t+A$uW \օ"B/.hΗb%d*[AOiD1*UW;=LQ;Q-/?+IcaXQNy6yS`Ӽ+ȍ>ى"@cKa?%4/ľ(dm %/|cǃ0xKT>yȞS_L Ϩm(:qТ9"ś &53MwX]O(!:-i[G!Īo8pąz%I: 4U'. cٝWkChkD協-g=X'b1օH=^_̭o5>aiIɀ-oI5U2RWGm,*8O-? 7J jEeҘZ=Epoǘg8iNl:g;L1 2)W=eaF^mZY9 }r,n^ gKLy@.ؕ2]E1[4] .nP0& :0T;TnqQXsg:, _ SN" 1~n.K\XzzdG(.@<[W2c /fviH ESu >PӠ+`d-6A.kvo|1jh "PRyYl0eţ}$-:Oi_2uroV^TQyy.BTCXۄHcEl3e.X eyO)Pzzigq7lÈ*R/?̙4(MlPT$&ƜS_  `jFH5U |A1È[~TYJ*0`YX ZպnЬLZDĺzVcDP[,AE\xKNV. E;Y^]蔑um;U2 b˘VEXBv$nb¡1^Fj2yE zz4+Jw^,iMbM0OypuB-I64&#PJ.MMqZ!筞ncZ#&~.xOb3 ynsT兀rjM~fsv+⚨4+ Z BF.ъdiƾJ7 Iʁ Xv? 7z K5fjXAan㎯fhxUzE_cLcGn#_(v,oˎ푧3ڠy0- xtc)/&0IX:nz==Hf|(QHP`Y9cMG{y,!$~i<ĬRqklF'ĀD8V]d}!TEuSefb*?)$ ᎂ,߸t7% mKDCݪ>4nڿ̏"4&m :O6\tfC֭2x8 CCG=66P;ڳ2TωW˼@j}jMω k[cا~_Y% ٺ⟈4N 8e/L \0qf\.rz;+hd?,atp <~p#aK9_7 d`fn,!i0G"+pB͑bG~Ww4U`g1B0Ry1C_eɑӇj&ZBFմct~w|p;##r!c$]aiF9V W߂V-B皦2|}!7kWn$ԑFiۻ O *wkcIfPTocN/-9!XeD#r_7|& V7Xc=L wqҵY!>TkCPv7iʈ>z2 FSgOfDwgkej;1=IIm8M*>OH5ϔL^MAumʘH?YuY5u9+j|!{i3~<ȊB .pEq]=g8a:(sS܀Sc{YDɠDؿ̔rٱ: _݊W+-^\!sLkFN+8JD11Z"\^J/bp`+wKrt؈+ k[8M=h@K\X>gf؈ݗ8``)ŏZ-`<śeݯϲ~ޯKGF>lL۶= @69 : ]Ziv4^vqZ$f9hKT[ m8ìESdFL@NfV-1H{ɂ2E~Q.; Ntur\]hгU64 xGgMV!KD*u 2Et,q= }_G/GT4=);h8YeVdr]sɜ4baZHj 1ztVjg.S;iKH`L8%K,R}eL#ކރ|yuxsUZ9Tc;A9Te MkTW.Z 2% p]4lN>uѾTF $Ntl:l{g @ocS=bNGչ2kۈT 0/΢Їqݨ8ӟTReE Dqwq;[o7__(2EeХHI/%F47ޕ>kr5gtV'˳i:tnѫHׄn+绚Qǀ%(% ﻗuCVz^ vi"&9k@ Flr#gP¾KuZII5}[merX0q!"F" P*T 7FO}-/1u#\oFmg{vsM|*P|<4`(zZ7ݭN?Y9ǂ/4UD{1vUVO!E}SDjts ًE#,!R|8D{.C$%4b}$0 L ³vONA6v*9iX.ÎhG4 !a?X]4[ %t\[; t>=s )_REe~p=z0({mL:ްc8cǡ3/R;41[̜!\u@'?>Vk!:d $6F؆c NreT A \~KR䰷w`ObYoY7]I2vAFqojH*3|?x%/bpA vjF^Ո0WШ ޡ"/?δ[ZIKE/n|%IXyA^d (*m@nf#R~4Y[0޺d_l xrqR6~]?՘,5͒Kke|:;nG9fAhKw| ƂbӤ\|a 'gf q"Q-])jr-5l[Hm3ӍLxCLOeT_IPIg/-ɛg(\pM#~*(PLfRyB"sF^a;g4R K( _;_Pfy/.\6r.굫YB=9md+٢IN=9KkȄyFӀ:ΰ/-!0s[7b"/q=1xc!IJarSݘ`#Ig9JHCe-p 8hu@ 5W)` OLFQ2؜c5OR9ʴ8ui Evth'!HMx&_\iHv%~ R5oS"jPELmyѧc$ոU^cE{$VL?p=ivn#bZpd{UI46)_3$SSZׇO~{#T}Hv7h"*"ဖa:e a>#!_43oGN[n uc.HQer`2X&ɡOHk.[.*OW@Gr>5yκ!?GC/.YU%]uX>~l^k耠jqۡDʳvbA|!K,eN|n=G)p"f~[!nV HF( (Gbw&v~ ٳ܍Y$vUؑʂe9eCm# 2_tsREB+|P& zԈs ftTh&d(% o u PoyXoѣ%˚Lc`?)"otU/,4nXOirwS(\(`d.a@F`3B:*sQKȕUφ,Pl0Č,'}XZʃMYdkZt ~9={5D:mG X9 N6H?lF HZ@lRBvϑ}]LN)Vn#&ŴK?7ْmzW 9>ŊaH&T#NA7d\ҢC{]DVp8(|h#jT wv=ϒ"==z\4GWYF6?=Ўɳ>LK#YygqeALyCXp= T-_f>vyDtqг=6kw!i-ޛU_Ar5ö9}-Mg>  a`Y;E G\ QIF*#&Zmaqb{NEi idrtbaS[ yw vV#ۓ= ,#ѣ_ Y_˛6Vд /#>܍t)痉;uVnl3WJ"?%iKە3m?\aHN pU{0̟Cˬ$X#؃ףV&(tP1w6Fޑƞ9}K(;X&i:%H%GC/e%&9-i*ɼGE`s~xGu\<#g/ЛH~#ƭzEPKZ~R34 %6Z)s>g,e2NqمDD5 )_8G؂I'3&78ށM3y)[ܚ!o-MU}oF[*9ԍڅ ('оуV}bS3@{ԹW-ǗMrt`W 5F+2kvL-/a>B߯Rz$5+FfMYKqjޞL\zsA0* gӚSQn)G,Ԯ5p,&˜xkIC8#52]~g-o .HB:8 5m %K[A A>+Iĕ2@wX۰Wǂ:< |̂L$4H#vx`4*T4B4"qNj4]OC4gcv`&qծ십C@)zo|emtU->մfWy)p\W>Xm/4y !=s^,l{qCKvCuI[6dtpٙSr'U\scX&k0%/5= )ઊ㫓)׸PM{akik?cg%SgEɉurs EhŘRg): #}lqQ U&WFC+fon=E:U0F^mriw%!$rj#J'2p 9ϮݺbLn8JK,2mUQd>#,uV(! FfvH`J~(AVz~q韑3QAS&ae-Ee[Xu#,@fوp,xSo) X~T߉yI5v¯H`dPvlU{$wh*鍯j@RQl?um)Hfv[Ԅݷf7ygv "p.x&n ğWP 'BC$t")#\ۜ6DblgI{ IM6\) b{_ [={^ .[:&<݋(1A-m}Zd%Q}]F%)~'6+B%F˔E4KlhIrgj԰ߛn)]ҟEs T]o+` -2L~%:L=KCNنߨExoe<@gb :$"F,A!W 3tI\[kw=L*: VlKZh#^QM 3xa>3/&&B4Ț$f;Պ1?f:GijZEoʷ;lkʥڎD+(MOg84-L-N?\ 8{!{0\WYBgw1\Lz2nUy>vE7VTfMZ߸KJY'B54a%4)Wc`؈s8+8XWR6?5Z|h*{:mp*HJBMbqo(\_iDžd?L6 gRM+ ǡJڠ# .ł( ͘\%ICNj9b/ݫ[Xܫ)3=z+]ǟRgf4JmG2QmHO~A~7rRh$nd8 ͪ=+qi**klbKCU&L@ bO Pu(i&48 M˗jIDZB eG*)+2FR hYf8QF[v5f!QNHӎkQNU0<]Oa7'+%ҩ{ ?z9Lkb9KJ6QyN]y$.tfik­o`I]T1Nab`cs2 q@}⤡pμ )KS5bhF ޤ .J_4v$y\V?cE+sNN?Ŵ:HĦ$~w!I`@I !Jϊ^ϟTוIh4'[J0i 9sQsaNpwՈ2Z0/ߞOdyE=&Ө@`FB8dJ>SV=3םcHk:EZ_S`pFUv\ h^K.!jB^'TS> d^|E9vu4, 8wB㝽|0~3ɝ2h2XXzL EnS%Xzu{wP2I; P2|Lnw ]lW dj&@ S!&U6Zꝣ̶e&`iC('k9cf3(li 70g% >1^+7("H@Ȳs L k/[NYס?Xu菷cZ3L.9 m_^fc9-7Skq)6u%Y8>qS2FXvh80l* Oa2 OFtnSw)ꘘUywf#D=CW]O Q¦p㻗b! )[p*g5U23ЃXZ=;Q@yR#_ }Z`YT|WEfǝT }P}3K IZGu*8ZNk4WUIdV-lm;t[ sN:A\5 {SWkA# 1 }-@zoqA y~C,&ZrӉ7lN xpBMI4ҹmܒm3;u*]OKj_w *_O 0lJ.=hRf ]@4*L;uU66V.W Do3Ἷn@]QlE ~-Tsb-0u&s|:O!gnT=&a5j4H X?sq-VڟLv)CU}XګZ;{$9i3x2!.烩{ĖѝR"IOsd]UZbJ7e^ :]חC,Jp*#b $9؛~lC5(iE@+d@*FJ˚q\Z797ZQO &bUS78FǫWdM>Ĝt^jt)qũ7^SD i**$N:MM̭fhsϧpfAwN%7_+zPKbmFm'LN"VF VelfVOx$DJ~)sj|LdCk+.)xN4wp.9$i7% jD.M[,aI -Ұu+,dԫrVM(||.pr}癙6@lz[-xCrt}'#Au1+F]ktqdTVm턼 egZ:Zd *5_S!UcN4GwXD7;^eY9q_^)j`𻻥i+cD51*GRuԁ+UgH`w'< ;[=f[IXE9s -E[+@8H:(r]Z tb  $h@ʷ8YY( )2|z1keWQ' gad1@ߏz|Ȅ+/+| x -URC*9 u'cp,`Nˁ=lOdP3[I|C6?٩BHzrd%3[C"E?)8֧[ `& X.&q 4Oz\K: w2ӰkͅHCIb\sH~2)mhfQ`XURUM2-QT(vtMv.2igOҷlp 9i$;%5P%Ľ0hqN>g/UQ"Gj1Γ=%^ f֋l~xJsG [|0U4gS?}\K X ͷv8 UuE PțC/D-V&O-44/YVuD\ѝ_l梨C30Կ߆dĭѵJk۶0DCLw5R׎A KGe$D\*d(Jvy=<\ B0Qm9n SqN7D'{j/ BD+d;:$xB|!-ccʒķzaO3sSbKRӫ`U,F$Q!vu ZՔi_I#0 t?KBzMlBX|F$穔g|{GK6a&LZ\OVQc({aR#~luD-ۇ>_<;md5务}}O^5jɃE󪕙׹+3q%$EH3mW9xc&6z.> Jfx:w@E 8- LwG7._}}yyk"*COoږ@Rd-dK1cY%iVtJyEj NuN!-"l,;uWRsʯFڷ\hnXV Oc]oD(6_2c}(%<9Cgp9cvfU64|hPڕ{*(/E Z=:Ml i75+Y-B\{<Ǝ]KBY&QpGTӂiRdcP^ ュQ 呈A ^.@FS0A38S7p(I>!˒AWʂn8NzF__׏A, R[\lv;L%@55jZ5PNtoMԋmeO.(n|k.ڬqn}$Ed، GItP&Wb~(Mq޻YZP5jCw+ d|k~(}CP;Ki*Sve=>t4HJfj +R%`. *i5k U2BC. -.G'zn.eӪw/ƥB P\K NRE D~*`:nJ %Ɨ8lD^5B i-mG }c%;3!#^FJHWEp!Yf.?QĝuVNMѸo ґ%[=Av ELtX)/yF?> A;sXܢHF@zȆձjd(&|g~tix7/|-џѽCi:r}}6+jqhs ]#Q2bxn "y iՁ 9RwfF7X~s&oVݑ+\Ne&THY8«Y{ xONөJyWv.e[g.AN@ZlڊEOMaI!D(>Z(!K HBƯ0kD5ѹ1fhʬS |QL؉߹-A :5n3sh}Xa>fe8?6Z$βOèK"6䁇!-SIlaTySg`H3'uk`ࠐYmgE8􉚾ό1. W**$53?L1O#a,|Y<)a-*l@*.k1vлߗb2 ~kIVP1_}'s5BL mtgRM7'#-"x Xi?fL;E+Qرut9E* MvYy?#S~!q?VA:VJdeK}G:p)Sȹi-r27`灝YeyHw 2Цڒ6Ǡ.lד8xklRG,'t"c?D"MXsX.3ybώcJP J@oLgQ"\]ݐ;#^m1EɊ@FWN*ṟ@y sM^A~)gŽ}_pcs-Anshâ_|b"N0SO2EySc=F('DRvd%I䞹\[AĝAG ;!@ߜ8Bfsg.HskmxڅU65i('ڋ~z},K{', OQ w* |BE5:O'+ԜJٚ! QX5+l Hol쐷e.N[=N?E=YǓI96s &ͣ{X&]jb^wc8Ԝ,'Q>\\H&|mEQ#$yM)LTV  ɚY̪pYXelr Zq6c{"(sc=:ؓPݐʚqK}4VwF0+AmY{J6MCrw2d'p[Lcf,PO,'tC Xa1hk3P:Rļs ٓv:_&y`/~i"}`wb(HC,%UIeu7%1u~"4X J{kJ5@4$zXٚSR!bh2ĊtGoI4*'ۢn850Co|T 7ٌ\3Nu|ċH?F>Ubd³,̞ z~-IdTO\[q$(j!PA{ZjR(k8U!.{ 7X[)G^.6g[P&z%,zYhˎ'Ԃ[O,1+˵@t=+ync QNǵCݏ)"ިGk@Gg1$UFH=OLtea=Jv=|e0yKfNde[,9I̍m =u)e""ꮭ&yH3Fs NnI~. 3y>> l+H@s\O޹h[)BVqH] qdD , op\M7n'}Q{<-jdg8R֞+Qz|Z.ឧg+ܛ#U;JyFqͱymbU>,Yf·]$e] VAL#yn$ueˈ& jq+n0YN;ҙ?~yt;hv6-D9|;>L%j;۾´s&Ϸ˃DЮ.-sOšsB {蓇aA+8m+ RMZ3A#˞k9%z}+w~{fϫˏe}U/ (!d{– y %vYi6BWa'ơ\6/H79eaZƅtJ7:K-BՑ}9@IUMxRj썫45mnC*o2.4hVTcu1'hi]^DTT=O]*ttms!J_ 8'T!nWc)ph?ntដc9S,8J+|Jk^_$s-1w›7M ^dS] N&]mG߁4 %IKnbBtayr Bo>WUoc NxֶrMts~&akymA\i<&"(ݳM|V t'a6 GWp3ṼO-w+nW/Fgcl,v3XƮ,r 2{iGd,B[g#)[m1k YqBYbAy Aiin3kOpc:0)#(brt k0ߐ4}nhv[0DI-g9˲&ʶܚkh>ǕO~{3!T#}\ p2+ܞ۶k]ɿQ^x{J!*O)25l{y3;>\UF[$H9l! OSR->-)7 \5Km/Ȼ^fq# r #n4l$yL-v񗒜6@me74TFД I)~XtpKw@qߣ`ߪ!rº::4=p YLgaaO粈?OKM ksO 9zZ *=bPpc" 'S7nCDdvy[z{nt!4GlzO2k#g,u5JK[ 6yaFܫrJc؊L i[4)S@(/!A' t@8@0=FGFw䳳Q. V!Q'7|xXDI4R5z:^$1?8ҰKmNkH1Ȩ A^sl$/\ٙP6p#it;Q)r' S,ֽ-`Ahd.}-c]IjjLڡ 0ug~=]q<inQr!B._;P ?W8;k=W@| z>j^~tGZ qN2dދjzM &p> \SGx%K >D]U \ #o<G"֠&8pdj95͇m6ͩOqʆ\v9x5RgwA9 P4V)wf{@=Q=* S*}y&TUm̠.tWc}̣]<UC@ku`G€tOyGRp"耴 qY 5Q64;IΰY(ߦ4 VD] Sc񡺉V7FIfioh :Q4WC{GWP}}pQIyz%VWP5<;AC:~ëj]gf !sB( eU:Vehyz+(=ȭ3W8biv[o8dF`MUЋ>8Az% ptOuF Ο1 ?/qH`ƦNs)㇨/y|v] 0q4¤˩{wm"3H=t v^HKdWrԻeWGah=B;iCd0a >d=\" 1]aLO+fl*=b 3 i~7R_0 myJ^:!n.đxtMJ) қwhs}!I퍡=lАۤ M4N =~6%pԾRz4ʈ & ٢h.Ao:Bכ`GQ0'C/(1v_Iiz0Γ!TA邻IٸϞez.m$`fA,n,jʍt=!RXRQS\mRBs1*{,+>bK֍p.(WF߁y<=b@|;Pޝhص4.*t<Z;XFu1/Ԙ0܌4`]C`G9!Ȗ48 g G9%*rMf) #n.;O^hsռurˠM)}4&:h,‚lm[p wRu䊏f#tULs+MlmtVN-*kKМdU|ns#SGB0n{IqpM4NvsB.<#|\EJ~~,fN:_= Yb{+^ifjQ؄R2faJ?@,D4:C{t[p fNb{I飲TS1@>u|}6OωK.!T77uqh&n|c0*7|U~vt-A0#3sl90ZGVUHSyL!u-\LФ˥r_/%kk(1}iiZ Rtk]GIw^N0;;XågƁlVN=/HOh]zdXkd_օ  +~baw9>b&!$^OHCWoG>AB͇b/^k5"_"aVOߞ|.WJC욊깓5xR]d%?jJ1hH|%'tKx\}U{^?vsHe;a0WEޣS7 \BX%]ٸxɉe OrUl;{R>{ŷ:U6:$i1*q(I3tXU5n.9H. fޅ;K^x:P7UW1@M{HD #_!PɌ_Qs6If@[n"ko^֑xxw{|s-4A7"1cV o1v܃P7MזoLN胓OBAvD $ҴNax2*mo331W <}7w%bA<̬76{M,O 7ɇ6x?BH'4=^mMc`tPfz_|-e{Om|ABy*J@2Bؒ ʱh7xTɰcϱ1u>iD{\|LvHQ;YPf2o 'ˉ .Z!eӵSC/,G: :pշHKCSYV ׹&#joo\XV[,){Esp:g9,`eg$V-Oy9M|<#[ 照hpD5uk7{/QL3,+glŴ虬%htCkc,&渗Zb]=h!z\'[ Ĩz]#')v!"~?:+jo[eWiZcw@l/ -.B]ˡ c#.GGVH~d/eF& 5bL}5>oOܴW)2 R&«H ƦVm(n욁oWo9`nFMd:V覉06uk%WvqfŘbgA2Vczadߣ-0niCxrOn%꿹nIĀjh,=W 9#&=+:qbDᄥƏ=z  3;Q>]%nDѦslԗG x~ 왿Xm.+NYϋ)u8qֹ2Ăr("e J> $0uAiA S(pHx%$_*/ȋÛ3E=_I,Do.̭В)OƗ>fP2E7)(gz/O囏F0wԲj}(钋 QI7h}LưC\TA +@ {d nhvaEj]^cO9U3fM\s&zZHsRfTP^|g&Mke7 Znvhq h1҉# cr/P첌Vy.<n:_ޕ=qL_V~=Cۮ.Qn'">y ڛ"ȶZX3Ex]&4ZXo1Fh//Җ%UXx>yN&s3O*9UTÌ$/).n&o3z5]]6Ö>?z^S)_4?e>iC@ܕ>ב 4gd!ypqX-瑻Blg-8~nB-*PA|1rdW;Vcq g.tӌK_śU׶(Wv{;ĝg;I6-gzvv Z&`_Ks퐘3ZX}gպE[ܾ?|8Cc:Rj^PUdLP"i]ߥmZk $38b_p]Wf:"fJmn!ޕzcc;[j[rr ~@<:4)7s#\WwDQ012efi}:5ߺwbx[&V@P@ܷA7r4c2z:ھzO2Faq|I&J `e2~h h{hž'g ZqqgVN0e.^EGS0٠m#ް4]V*0@-5_/ᴃ [u5ʗpk8wtUu]B ;r%Cx(g`X{>ͽuc1Pcj# pyߑ`ҬĦt1͉qRZŒWkpԨf]mf:CQЧKPq/@xv tL(DkFcG`5E%&׮( ^BV#0ˬ$ T!zЙW_ ,pTzyRK5r ;w]8ju:6=b6{62/~/n8ϙJ6=(@:|  SڊOS5+N2\7O*](8o)X}xf WpA@ۖkL~<# dx&{0Ej_oR=YJq\GZt贵{COHXdw5gifC4'|nlbדtL?Lݙ)z3oGضrQ˰:3um/iOx.O5{x֏aDGS M}G7OBMq4y>},\Dۣ!37xRq!!.sC՛\34ev F KT;6ڠC Dʰ <301U=LG4iI^`D J yH{Gm7 J]=sh|7e=v\$׵֚y BK ͧ}.?KKd->/qVFX.3.nIe._,Yk0mtjz(ۖ֘wm˩a0~[zѻpv ZlR?]a03?ZWq uy*ԉG}c»Sl2z'j0a Z9E|sT͕LܑϥV+tkk}Sb>&k?)m nLsgDÍDžabWՕXt0˛H\bpOli|l[zg*-n)PQvU~%W bJJG+o[y{Ќ̄!p6NHhFiJ*~$ ~CUsq6~ i 8 !+':ģm9jC8!VݤUs_%$ N 7kR yuYa^~Z>t3Q ٕ tqa2j ٝҏ][h?,ؕ.mg(+'2\W|Ϡ%L1iTV[G"L0hG(]O;-{jrg4bQ1Y5 -oWO-oyHL@ n afIE ~`͊k".>aɇБO4dPМfvOEt28A3ru[ _iV3j1*wn3Nŷ}=Ʉ 6'e'M)}F($U dL\-te[.M<C2`3LY[*k%DǸ0IzC/^퍓Uu@+5WHNN87фC tgKkߊƌKh{%S8vv#щ3U.p@Lo=˫tsGvl^n2h`YҦzt$&װ%}wExx)% "2VS MYJ 2ަ4mΓ 9W%@<#WVoԔkt>yn 25o4q\_{+kH9V92?6'kjȹ׹֔'z"ԣ i bX%v) "^8V@0]$܈Vjrg&P1Ǒؔ~ʌu"7{:=bC59H/Yczܛq6n@_w;yҐ F3=' Æ]2<! qVwOh)6\l]u.A-qA23z+xd|dV$L2k qBESQ#iZbA>CgЎ_vv]E񚩵)K{Q '@rNX ξY)0h!abwq}/elԯмF/Zٻsz1 l"Y[ يC#લ 쨰lg5+2t|TB>tx#!Q4|bF[clNƵQTc1T›8@~Ru}72\Ai'!fb=6R:,;Y):1a)Z̹a}FMu[m*N;Dž@C5ͪldE(uC&g( EaB ONtú%^ ;EN>'y}D4+=P m!o y3XiC,zݜ1oIO?BLGipPA'z&9<<)=Y&8IU ;`T^Ħ] j# zWӺ R :xg h lĐj uudk{wi* YT%tV,ss$.ίʼPvKlh6GV+Ba%ik~Et!=h,T6"L3UmO&xG+!RFnGV^W/Hf&0~TPa!e20T- $&?#o/)`;by\AY`ߤ\#Z K8"ȐcqTZY_:PjoIO{^ߢZ77qz7o[kQ]]:[wűz#qЬy3BzmT,\{_s,aqWQ4h KS7<i?\*Y9 6JF)>γ<'Ǵ9`ӾkaR jgߌo l`U [Y vA _§@xz(;0o./u2t%Vs`2D Ep)Ъød<ȝXoe !R/# ?v '-as!Ҳ[Tv€Qÿ7oLwD9OψCj@h5w(({U,#o7WϷP4_AjnZSMsaQzeha)7Ns?'LcJ|7lYe41% ֖;MbC^eBʛDorh K!z#0#pH&>陕XBk=*A8g+Jt~ĕxB"GUd5l[3h#sb HOr#o81:?9+i9~87RK&u,C%h}tՇ;#<"YL1[KNN|H'0k[[̏ᓸ8UYK4 ) 01ca 'cSse|Z[OC"Q4NR@Cm 3]غDBAЕTpKeup}3QrΈc 5 Syځy%u`)ex^OΆVZ|E>Jk1+W3RXM\1ׁ%n9AvјPP}6tas)5 ۻ},dCV7-epĽ^+\[<wEmURo]$y8ltS(^%G-X3 1xTžvZe#:)5Dpvk_4ziH=FU̫8FU5QG?bvf65fpkpʔ^*̀l 1(0x=c8K-jlgQcTݍuFw6%E5^je$5 F$'}#}x;U˚4Xq} {]e:W/3۰Oq@ -K$\?Ńu6@lVAxW"bǨiЬ-|㭰A1BW(~0揰JJѦp8姉:, F&9!@rP0=u H6N̨hv<3y ު}qg!O]-C8/I4"1Q%n)-dԵK·J g\/23b4 >I<&;J qwVv%~`ϱlL oj"^\ BȺe[o_"V)RsYڠL:YvnG|H[0<QgByGՒ/)E–?q7fbd)SMm"f-s0#s_g Ȉ򒅏{t{3"(+*:mL‚w:6K냃툨)}W3Ld{jd-j9 XBچgCp9:^W},WM\ ԒBEgX(O^XDCoTDD2w l2g"J^jsD&n:GA`)xr/grŻL'}($u"fAEF vv/)<"UT˺f#͚xCI)i0VOkgU;=a)U\ҒM1HR5> 谠72-!1T {p"J~oX%R(0G΍/oK~s8#rru-6x'a+k>aɾ/I1.mBZv_.%.D4dS{(qqP%ڹ}c `[ְJGy1iDȻn+>pt KrS20 5"<)=mr0]sUK҂t5{pc MY8Zָ:vh1?|xhHEdlLVϚkϢ.X؏wF >hG_Gi`uy"> ,D"{Z RKy| H/p c۲翞ghU H_:g6PvXDvw>vѣNX`x_}%$`U>~L}a8edTtŎ%:d "TJ3,? БܖRB:==Yph26s[ ⫷$xhgYMm(T1~\F-9GsdW_ѪͮXYule$제ήh{q&{JԒu21m{xL9TdE:@y3QWWTb3U-.[(0d*S0Y_磼"DpK(xA>3Iт-C5{ bqץKb┥q)Q|!0:>x$; 9d_y16WiSͿ|g!Kϳk[}Ց `$)\jvb7!SV3 =᳷o(I}ű!F0a;zoT_TU`u3{=,MkIuoA[^ʕtfv]>* Bר7 `VCW2̞NDm&sO{?.! -7mIvSGw.n-P +3P(qQՖr>Sib9v*~w]Mxx6C'B1%iGU]rH5*_F>w"TgӮgk?BŁȒQXySf O$zdqrtwjmSMo{Q*cU.,pxC69ăfmjb˹[AzA.4.pnT.L),1 OT전sx L[i]A1*X|P.W|ݑQ`3hH#3XqZkDPm=jXQ$ %MLzʡW0G,< Q"OJ>^PN(ZX$™uLFN0iP%" 03oB YN5BllG5LȂykߌ-(c9SxjY>ٜM5k%AqPt S)Bop-(z*mV*1.! p;Gu#N¬+ *>(q{H,ROc\Ymk%K%4-. *@'a32Ij -G`*{'S>pLYmAeBbM(|hu;[ew6|Rm.`KtVj}kjR OIR4yl"VM9E$p698}SnRP lu^<íTICAG"bage;l:R w~ԧב a!qmړṼ& 56ۻc8|$>/*2d-$JB]Y ?YerFZI|:ZG?K]+ܥ]OGJ&Y2:|_/}Uk.slDBR,{j2,8Đe~N YW]f:l 0Pkc3/v\{ a6?d&LfQrvz5^_X .4)(mJaW CO$\ɺI@cc^,: DK) /l ch6(݄J >!D2cbx\[1x?% 1X~?VXZ}Ǜ|qNVl$$5hMP޳6t ^ApԜE,cՁu=5<ڴJu;){81mȑl9@]zZ;w`1W-aJ|SF-ۜ-})#G+0%(Rz P2{k]'}K`` l[fXW ]V`-Z d$JZGYOB#i$ jPnh+6Gb1r-K"1 - 4Q1^ O)^}4 /I.bi9#g7F1{MG[7*S( -J,)mWjCRGe[ eDU,R h' [P_7xZ:Ռ[Nn{lb2A=!)A遅P֭Mq bV>guʺ=A:ppgT5֓C?Ϯa,WDֺt X{K4%Qp=,t繊&) ,VJp"XI*}ɖw? :A4X695.3׮dž&ByXt S =pco6^,!XsNo\zO @%!b=k4v -qYXcZ|4,^ ӻy|Q~m׀!Q"}7 `LA~D`}0XXrbVj$5Ka-S]JUlI}CUD|pwU1ms^o'>EjPVMƽjhN=62r>U{H8V2p`JSl5Sɰ?@&Bbc7ҬQ/sUQ>Q!0{稭49<;pS | Õhsy_0qt I=(RuGW%Y=綠^,RDqhPL{5Q@^*DB1 Kvrk;>=&ZdD!H¡ߣHY L2x٨vP- qIMwu-sxY)k93y#; ce誠q_o.f$C^z7Ӱ<zPv GUXZ챵sm=fIWT֮x4N)~<ۉL">-OH=ϫIcvEޑtfLgS(%j): niRQ+6LP˸&]L yraK8,a[>/|4հ/: B~1/w݇)ӣ(Q]#\Rgi^薍_xX86ĮQDwOr l? ߄~\GXL8:fRUXpt4Ce!vj'+rļmBgAXǶp֊U~qr .fH~-gjmOf~<_D,adbB \-.׈v(a +x.P{Vao$`9S b*n~C!%t'PΣ,c&}ΒBJԀ%b O]뻸oLp= KdRfXhasz7M0Pqj]{ eD'M6gPzFH8HCkhb Rk8MQ$Y/c?>| zW=11{3I*'R\v~ Xlw2g-Xh:P43oë=/?'ո̀[}p͢e4!Z&Z15԰=7w`&Ic*j3zu=B'nV}  !S5(R[`ZJǼu֠S/e:aq0j7Ww4!+<*:_=!Wu Ơƽ -X6 V%0f='B3e)C~urC0yk>q[uƫY)YZ[yB53.ŵөPѱ ,YЛ0I=< 7b?}xJϹRS6UMRЖ£|,cDweMјX0;f jrs!S_A% h ᯤ: WP×Pp^>ǩ:EJw_=ϫ XRnw$y+mSr+DNB! X@: xxdQ~ws~[00~/deUhz(Nw iel~ð vZ3% )`s)td@6NA'T7| k,^ik⺕GAتQ L&o~U4:wJTb],`4 ?>棄*[(^u:3@TqsQkx%l@0R?VV8S}tb_F\ϰxjxWKᒃ_O21ls|In_yI8(fD+k4 l<^:BI=CCqĴ$Ji fΫ絠z m TKCi\)3DpwJUE ZgQspotW覺̓Nn_[P~:yՋoN-sn\oݹ"?–%ojjQٷ,#r70GҰ[0AmcIEH l%aR@|b6xܐ nIڮ9O1Wϟ#Np MC%EEpN:#Iq09## NYlbϒtk&࡚/qV`ٺ|ނ&J#^|sџs9ơOwnoڋkJSZ23S 6c¡[3cG 7y7bh7)I;>WvzR !Bȶpx89 K.z^?e@0~(]d;@X>nL+wVWdzTSMׂ#3FSu-By uC7X:ܗ$bRc( xH}A3f$Cħx+׿R&, H,G8SQu)葷@OJm3K.ػD*٦w>ƥ&:wOJmoIQ_Wո fIhsd3aWcM#%^-.); hilkgJ7rމ9Xԛ w~UQ58>Ju֝V4 ؍uE 3Ra'yv A~:`w +4urIOt>&uE@IkKX(2%2<{Eơ/qfg&2&4O7+Y#Vm;ûRUs0wSR &Sxuq~+1 EQ*g5Fei1.f&}o j+"ap)b)OR6dKRIadPz@Bo#&exUtb,c6 Rqg45U jţ2$J.H<@E 32Lvwr8c)W> U v]B҄\7{ްEPuz'kQ$%Ar8Na<P> 7g&G{0eҴOq)Nug5AInx;bUBߞ)L&'zM4)ND^@^=8*T%_5].|ru@a$6ib]g!kg!B@ A}]4O#(rRL3L=V^jZu)5^L s9STeת~ YE4G<bDʗxDŽHYF&[㯙¯}YPtzo=5\i:_&5G^~鱻?vEݟav=S~r,%\ |B6,z)$.$1&>_p21%Q+"w^K@Ņc]A6ѩeTy$K \=3'T1r&~K#̦ԯf^d}0#4/gǛӢR7t{Asw&Di~`$*IZXHst õvNPGrUWbfȤoNJg6(*s>Ovr.cu$(d[熅³mNsiZ1a 6هЉ~UyW*EsjhҴw=O:Lï\ eՐT3[˟K F)0¶F7dR݂YNAVChj1}4|H T+5VG|sEƱ"߹1)  ڰA0z5B6giu:hDw. t5s!/lci%d~BJjqЀ{]ߊ!8g?vt*ZTMF~a,`Jv^GX|B >C-J40e9]f@V½YEicOU׍x1M;TӖFШ/81zt24`+{vf723b2pwڽX Ku4\i%ZWA`=N՚O |΀Q`m̸_;doTjS=Ã3$hXNP%~TdU09E/pFH9StȌh=^DE$a0_(>c+Z FdŠ5/)gRNh'~x#$(PQ Ӗ>ZnX-2pq_*"16~ C+:JE*<ⶴA53щA^o ۍ4ZIdHs1󚿓T7tY{4RXbsF B΃w.qIi |*fO*'>;HETB`l`$wJ.]K<.K4\}riܧ뽹P0 l/SV?lhof?-B{h`P1ԚQOBq^95çZ%KB8i #ۋ WދD$"H!|0J32Aw\g2\?5H.8 ]`w[6Lqs5g%J @كWl]NӃKe<]dxŕ9 H(c}pw%\>~ ,kl`X [X'3m XK<Y[g #xM_dǀVړ6׼kxβXazhb4ckCD hG6CU_PyV†~Fu:^'i@ABd8L~#UR0U>~QYw}sBZ%G$"# q^1:yv\]6ȗ⒎LD/+$ Ka^!AN)>>i:B!W܊0 T7#aF{ ,_#WaU,a-bTR/沠WΆ,q$IT)ѫS絏PV}!(Iϡxޏ:C6 c-* eM쇽p@"#eKmmt]ӽὢMs[:ef:Ur&ۗ+_02(_y,!we :EE~6e&7mF`_ k~֡҃5_'PVx P[VÝؕ"Iм%BxG-b@Mp|Ag=2 I089 ZHZ0\A4[6!A<km{YiR VhHN 2sMM YGxd~Vcnޯ~Ů`Ǒ|ՌI$cV!ɟGmCی18RVl^.3֐Ϝ` YB5FϰxՀo1W HǸ U8!?!eOKgPɞb>dm6Iu+ L_No뮭x{]p҈?tڥ*6k[`S` k,oI wAw3{ϗh:x@("aҙ5NϻۺEz"9| HߎSٶOr#Ԩ:&sdBgO 䯖.`c)115,ڟ= iѴ`V6 ozG軩>_`aRu#(ػI$O>#&-Dvm5mr4 D& uH=֬ÙX]:ec1 4[H@ !,(To;B,A3?~#BNT00,-*⺣~RdSr6#,P 1}2s/KԌWp c\Y]*z;3U+Kb'~zK0F6VcXf5\ g64kҿ^g6`NjޔJ66LT#s5 6sY g'1bFuy+!Be@Jc .U8Ek8Ag1.VJNMCT #׵4sRfM(\$[j {Iߊ..W a61 :Pr°J]tM;~)aVjKT|7-_OYs)[l E+9$1["jw[Βk:nN3B7A_BJ]lXՔ!BGBυgɡ;cۙɦb?OBUV/MIsNm6hTa Zˆfڷw)!~ovs[#YKbZ :E!f=x֗bs"?1>CUվ` b<_*x@V~)X T}zq!S/TMLJ3Pz 72N!ǟ7ˑ]A4).Tu0zu\h=KFD1I0Cʁ+g-sV1ZIEgM*&LatL@% -a}}p)ǯ}e2;2x>#"cΚZGѾ0j3kh'/$jea݇)R>H5F2\TқS@rV m<*󾗪jqL4tpj@hRPrYL5r_m4x݅+op]'Uy,3jp^ޏ]AX]*5<$A-'H0-4IeREG2 [@^y_}_RFr/I.?&M"TΎFA(O} ^`\*Xߍe>AU1 .xGj|L-4}OnroԲ;6◈ C 'oCbkaAWя㷡8D 93ύY)Evy:9UY!RbL :r×8ӌخnv)8(!PqAt_vc A1yXl"ZZuK ]ѻ Ҟ̄2jOU:"(yU{/}, BQ] eeB^ d'"W?L`mO.E~&`RFy)jm+ι'>5FFSrK\5efQ2w-ջ! *K) Yn;q] qA1vhWN)x_ʩI(8@]8c:% KZsFGO1)G@lm:aGدHE`b!/e_F ^AIK. IP} [ Ŵ(O0#}xvM] ϗsBe|NEfD_4fq`fabiND5[F3ɛGdWu Eyof:syĞQLܜJxdh^g˝u%␦64'5d]7=h.-lR&㰆<t ɣPB-7˟`UH/]GO3%./3NIB[p8:,ݩiT$pOWpcyw\ʍ(8T)@˲rnn`je7ythXiJ`v& k& fNfi fEoIg9DsVWrOuEnjTEUܳ[p|\0Bt'UeKΘDS`*OR>~\6yW)RInV=w>(|葆_,$IsE8Ѱy|֊KĂΌ.b0c-`QIXNF,Ƭ1J/ЬM jgVkO1DwKY91;LS߼iߙ;#^@P~?ĠSaYv6pg!^kye \NOydLYe)k@RMvP[9Zk!u]`o)s#HզQΆ#rZ |sa,"f{2ma;/~%zßX̪')W/4>-hHn j*$"F3*i.[@{.4be;x=![ӯX(&VK:KhvkwHJ*WUUht̜MSec&-\_j9Zɕ|0\0H@.&f`8f2toMxaSHµuЄIx璣ŌM%ƽ-niW{⇅w_صYEw^*|#F8>_d[UpqF˜.׵ew},=0IRNvR@8_APҎuC߶$0>:Q W!m^2]M\g1 9x^DPv;$4h ˠiC׀'+i CיVLuz<6BA}/R,%S 8 ~/PAQz_b'ez+ҕs.MN9:4Ʈ-C)In\q *.絉]ȳW3ȑ=,KމB"ӣ}r$u'xCjgD#y$j}mM ^ Ȧ$F" mC|Q寽+K6U$HɸΙ)KNJͽTKuu Xz l#EӮUqVS},~n{#ЗZAveۇА,de'L>o^!qP^OqM!%ŭ _g nTUn~N?]zTͬ8|ҢY2XݑഭC'_2YոK rgeoΐCPnPq |f=A>b4vXd%gmzMXܯ=@@pE͌`ߙ0m'`^ Z9Ѻz`*L7PPuIT$nPw\z7z'I;s]>zE[Q+a MBd{#c {"!44i^ D_:h1hP,+!LXAn17u=/<6hln)CGnjG- f9쇲XI<NZ> U|Cem7:z*_BvDvYm<||i.,Rjzʔt`caU^0MJ[+@B) FTtkg]9Cų̻8!}әCܵwj1 hlB?3Se0pҨGת:bt> BÀh\8XWb>1ɧ\VifXEHN yr;dkz|R\QhqdOSNY\ɔ|,uVu7UvLc:D94!_MCmǍ~Eqq pAk;9+ԶUlMo{/gHE'X5"%_֮) d%mٰ͉4R!@r@PbTaFݱ_7Ŏ3jb>>\gϊ~F1<5"몘s{ mI)~' B8nE^&cW1c=j? @<2Ud?v ? ?o2A6%VJC."=&SoU^P,RB&} swdF@>&-_༒"'+*58糬Q1/vm+ѪԶ:CC2M78 TfǶ"Y\yKNueZcv།ɪV2TCu@l⺄9ȅ,: 6!ݡ3W -Cxk@}Ppi7Db+vl>RjPb-#O-K=źe Y<#w,hUe&tq$/ )U:W|Nۢ fD2ɤ Q XqRQ*F ",U_>n4E_~(G$]YٳY-ڛ}\qGGM}-z,?UO7M wu6eFznc0C0{dx޿ ?[뱀Cf҈||25Rχ$O2#@v?J-xx|F\px**`{mj[SmB;Yv9 ByC@ۃ$JSwIQ`fh{[=$ĩ9p</M~WĿ 1Ds[ǹuRr7>7*9ݟŶ${mj .! NlP u&T* %^Z "px:^'Z0TBBh"Lw$Q~߫cTxh_Y'ADҵlކz}\1קD.ء8i`o\/{_ϫSLذz`@Ug>_C co_R"2Q´e hۥQqK=7\NcTbzr/(i OA "5XyW-a1YcW.36"'hʢL hzX:ڕJDoǎ? MR'PVjTO{xҌ,4S#KY꺬fVoּ|92#IA)4%3E u^ᯊiՊuR:@_l9߀OנS܍35в6*-ZkZ[u`t,w4&^כ;ENWps,מ${$Wڽن"[l9|dAp`5.`׫0Ntu3]#C|'0Omw&ej``lwGtU- w|ks[?fq[-mh}OC6]GjIoNF="ָH1607D]JG:L c|xG+,MM \4L`KzP*-8훩σ{i l_2O˘EGSc-_͋\3O||wGP\yqMHa ɼwP2OS6U!d@-5N/Mp@THrfkE; ROOnlu>$@1Gwi1ΘrKK p7UkbC[2^@2Ge1a^dnd`c`_*0~G6=i:ggW-J)a9 kl%kM7B sy& 6^d*F(4Q'e.M[ZD?.vJra ߛNr1gȆ ~()Eo]wmt#p?ءbBQ/566ǗzČ"$!Fuq00qʀgk 34M &N {bG@zvL:q_2Pz̨ktܴ\7).ZBgsҶ[6DJdSv9:OQO(F'VS$:R?" GfGK#+>W`a0 &36+֖DzB%Vi}Susm*h=N[QQn{`"" nst<ݑ/\d>_aEQ}¥4 >Ҕ&,0Vlh mTi꥿co)ֱp__ϔ'ǥJAd+E徛vh:ADxQkgwY}^/LE`F TlACgu-d,\e@T/SkQzfsV". ^?l䢰n :S|=6~i-ل',^ފ i{PQ-%%ȞTbLEnxp7]>/O -grݦ`oڗf} }i@6(3QxY ;T<#$ax0`"OӹI?_ajNV/dcbbJ8tt-$7{pԊ&wBH3Kn'W߫!{R&!Ly|PZzRaSS:_Cn2.B.>A 4G6\lv{L?= @GbƉ qy5Y ٞ.a cD(9w"0,8"=%7g&^ k- A>!KtBlGTK>=8 (ǂƣmmpn:ȕWV.T3Typ_ þ.y/?K˫A3> /29cO.frH!QZI߸:#aaPH}يmh~)+;Qt@ i40 N\/QL]18c8񶩰$i.qvC$ԁd(Yv9eth"s`N馶QC8!%sw-D.rs׏}9-bR ŘXVTpOH@[T0ooqïwÌn#~& FL+Qܚ+#[ b;ozHxJ%*qٙf/UĪo5~"wNUnΗ=DtY #l~~SU)(Gr>)**:T]EƯXLe@Et$!P!oݢ^Wۘ¤î8p7B'0!Gp1c{ɖS(*iA&D֪kMܵ#G] ԂξViϔ6NDFmF9.DdS\ [s$O^K 0g/u+-$IO?[FQ4?NJ #րy{wlKλZ҄{ޣfjTXǏǑ' ЌD* FLJ;U9+1^ W@W|PeȮy-促jj,K^ȶ#vj@;@ Tv@۹,mqЗ:bem!mRN!ކ95%/D{)+>E۳rZB9I }쬀rTd۰RߵH 'Ԣ_ e۱iM[ђP@>Row3K(MKgIlz! H!(3N\%֛iϿ $d8MG!sE%_|˫TD'97Cҵ8:19^VϮql@!$G,Q­O:nSMF"$wn#PSMyPJXZdy-3WQ B|~C\x9r#F6)o19,̞ a;-Ez/`q7y@xt9Q j26͹e9Z~i"I9 MEtR!guO$z{'o5#,L74飡jq`״uؐ?p;k֖M~TWf >owdPW$IᠩZîD9@}Der5v-7bÿL_?5Y+c#WWv_Җ~da]| IſP!IP>M`Qө16RͦӃ\Y4בsE$ bŝ?R֠ -Ze4it}14YzF(39&%O1S;:ˊ5 `>X E}idW~?鐓!k1Q.XH'[t`!|BȫĂHa~]t'?pårS4/te]LE]b (R(I!Ė2Ye nM9Fk;̵vf-w­x:"}\_J(zr;|\_DA[}{/:lQ speA`A<;XPm5o|\ry%y88 \YTT-fXZXbf!`Yr+L"3R{l\իƄΖ}ݽ@m"6=1ElOxH$22{ {#+y<@Շj4kហ^C{:Jnw\Vz@ J_ò$ r?e9Tauc$^3&ڳ'XY.XY) 7˧db8jqWB'ok8 7`XBCy`kGt$iVb0ѨC "COc"v*)`>C:Q* v+bIL. S0#}u(,rOR6{fvVyd(|en}մb na'jj&Q'Td=y᝹pLPG['*[93Dr,ҎlZ 3<ȶUV;[:.7&n6zjU)ZQ.TqIh|^~tm\Y߀y ~x kQ[_]]1۴o+ eRX'ҳ&EW&gqk)T;ZpUyЀz"%Pk\ Ѕv: e+6a:djN ]Uj6ᇑugR7n-j7ag4ou'6*2?-jJ\Sɑ8 W?czDhWrvn; SDyMI[MVcn]I"1w\ȗAE9Re,3C8oIw #_k[W74sƠeO%JjRʫKiNY*Io67fpWdbòȲı0*M:ٖIe5hm=]i=lh urr? %8PúJՒWÑ(d׆~ǯȃգi@Cx,^cj桔: &glx)B8a"4QdiScB;ewk&~?CIGT~T: 9獵3ɻb[,ΞA[zy\o-֤@ui72{֘HEPΈ 6u6rz [3*LѤ>:Lu߮-PXY#Q; Ɔ ~l <,QeȃA@ΚAqd 9g-"`W>s9ѧcFMKCVɞĝ,8GC"i?PbsV>K:#J9p( }CH0bwzwHl;sSGC~Yz4"]1$+bolaƻu5P0vZ>Jv?u!+17B엫:8:높GS|)&q整k酇Ar>FD9-P*Z2+1?m(`:*⼁h!9n-f*Ca>:LUε9:" B;AUUF :7mUSk:c]9ddBsFBO  8Rz.X|7;F"eʓXؾ$E4^1mݿ>Q)!;mur}P9?)ݞInT.4gP:k(T(fQ)-5.)0ms/RQחF+kto l\$- ^5Qrמh<4i/B%sIizX=lo VRkC#FA9^Ds &h&2roUCCOJ* |3-m!cKjbcI4DA#ɷ1?N wX8 u@ T?b5,'tXJXȄKux+Tx6] !0תyH{ǘB6| C GwFpvOFWW4{j_'GA=DOg*XS!lܲT%c&.͞ ӦD,SjaU-1"C@a-ȟsGGVEKzЙH/N)N}Q\? 3(rO&^Ӂ{ɤ^mӍ4dw/ѱQ[hrS"C^IR+.'X`WB}\"?lkGćTYdB9G.m#M$s&"UT!b/_>00MSޮ=n\I!w֙ڡ.t T:YyUP2L.WOMnbݙXKaPA/cnyOu`g|C씦 M:)p1D+rH;ʯ6b联GWBR-t7R}?J"mAŸgSCO4zFTH+("Н*7<5R"4hO90 rDX; f@>ͩgqj\o`.X)KY  QD{ƨ oZA5؇-= ab!U9vM> 2_k({)`lrxS}~ F-DDGƳ'0Ē9#\u3D9Ԛ_ԫ|as|ӵ_B~GlsqҳcHbIj2=˟Q x{ Y_Ԇw87UMX3UL09K f7G>O}G+{ImdNcjepxzyj:iB^#!W\K3yLj}2ST"+yDl?` {36D]9 s\$YA^ϑ-<:ڭ0jIΥ_o^g$X~!mj}bZgUԕd "1P%W-#18QPxmXc_+eBQJmWX}ĥr'-C1E[KC>wL]+,:_W90=pb~dɌ|(JKxq1T3zAU5 Izq+e5ZxVpN Ȏ?V-@bs5d#Ӫi.9@]Πů/دpO޹mP¸En wf6~XEI#_6Vob.dxnUM偋nFaZVSVE)=VwG8PV D6K9d7ȦCX1"خ@xǬu_`BY MR15(bfvxDAҋd2S?StsϧosI{D9;x ϬRz֧huHԷKj>>1w#]F v'Jbj2i;?<8&{y{w|։{](Ⱥ}%fo5LoHXpȭC EbGxvA<ԏtǢ{dU͝{oh2;4=CGSnw֓ 2e?J=NkW^,[.3w"b]L$߉^y'B_F,8LQYVJ:(Otw2Ӭy:h#Z#5uNcD T4ªsyI/\!g=dA5|E3/$A pzHaUl?,[@XDG0\?}v $wQg:$}{%Ě5q ZpԆWusQYw_w7C,ZU(#V}SgUA xoT̶L4F~O$vK3Jeq_!>oe =z"Ss-I$Ew]NC)ۮ1&ڤ#rdig0vUx X5bPnn$ѻh_3+ fPSͰKiz` 7X̶-)Yvr?fm{-t]bm䩌5hJـ>8]O8z7^MH5'ˆ[kmMN;#d`%o;J,dQpځ^4n6{]x C1R H @kv .y$9oQꖎfZX.-GU;͹[._ nٖH",߶zTh $6oS5|3B€bg ely0/E:^w>nF钪5;EE?X3>J4VTtJ$(W MȓgiFIGcxl+f><ٙEaڸ͍f<ދH~*IC#cN)NC7x-8nM@'mx]mo^(_fWDkO~C0&STKKV&"n'rp$C+Nk@!S0_sq .zn(biF 0; # WrM+5d)ȠlǚPwF'Uٷ դE(>b:䶑z|%&.*0f'_C WUBY{ uZ(<6&[GL`{uɿ٭j8|?;w*B$33X,DOv U'δmHX/U`C ߱)+ ݷ:?%jc%BߵyؕQIsx'r/g='vh8U56n 6ER =QBj j)Fñ$nJ042- '.ƫEڀ'S԰84 [P%u.ϷSqIGֹ7qRUh>.{[%!)ǭ\%@ྪqmG;q{dV(=jfqW *;!=<*~XattX;+qf.YU}^g^X'to(mGwl t/F}#;+ƝZWltYX[΃4@GPQL_ +\Q~S|6ɲ1O/*择Psexn^wZ?wœ7!0iۇD}"/v ] +êiH} 5\^ՇL9i 't&J?N-=c7KZ]; +t.Qr r%p~N&e1sSD_q(ߵz^&$SݞB62DyT'l?]]~,6L2LM7a_Pي`B[xς5KU|yjs>"̽A鎦5*~6G>F-x"JUij$jR5U"%>=jLvcHNʫ7@^, LϴQp0g@h`69*K%7t+蠕iDI%1o#LG_Vw²`4}f`fk c}2yՈ0>Z{99W:?ͲS6mwn4OHph |9>J&MlBŶαI.<ᄊIN'[V)*О/ R44@-MyV®EN%{5q7cZ%_M5xArtMtcp|)n2M9ə 5<5_. >#z}qĺZx 9^I8BgWp |w"Y2l`'be~};цYjL (Λ&r-F |u5h1%U6Zln(p̷H 1*1G[tHX40}W/SD)m&ȏohMLA1 }/w`rq A8y:aUyBg02]]$-ƞFO2 ?E *"~J܀R)&om*TAGɈG' -*˂bi3XkڎOT:*fr:ޤvpۀų/kR!K7`Ƹl ߍ09eP R~ZvBWL#zU`7[u@ f@Sq"揈A!T>raevZd±][3+Fwu ;͉sAL0̇Iu '!+5!'V@FT2A.죭 n~c|JE1v77+oH!ۓ^} K٫~V=BYE6ֻ<{%f3eCv"W|Ah } S@h0N.iGa|Feq) N0z͉5Z>*U ϣjߩ'|LI%Jy8T чtwuLPԄ&.)0iEcpCe,7`r*Y77!.(TދOt%cF_}T*bEܴDjȹwhB!,Mxb(/T|Ir%ՆAit:D``Z!{;Z8ʯPAq'I͉D(kd \!B.).Wp[YX ZlC5;B6 nP|6; r70d=Qo{ct)T09l^hW"C@MIs]}@/ԃJZE;g\ KeRWl7V#.ѐW'k ߐ s- @.,-co?/D2^V=z1g#'ޘ2rB)+DʴxI'Wҏ_GSE5v}*1&sVu8&dRYr'ur -_M0*$6~&d)T.&.kdW}lHnKV 5.9~d1|[R ^y 6w U-L!ksk˙)QgzQ*MSQ6\&?Bͯ<5:x@t`Ar _^iF41,Kғdf'G8tA|]=TZu:$NHE!nVЃeE=!.;敻? WʸP5>ߗgL[ͫCn;" 8FaQdKe5PKʼ.մ*d[Rz=Ux ~҅1! +@s@ p?M6(6( tԑ+Q%s9\Z*O~(39@>O`O@~g4..ʲbllᄙxYXx[=#)]ع2q}%cTֆEqȧFMSAR"SC@]3%K6OW̓LWcvMa0gTopF?M4=;x-$S?+^;Nb3S )Jq^RUϷKdR|X;]jH삄81x`G[ds I[M]?JEbFzH e XP9Su߉{ yXLb!gWu}΁ qZ_@&:Ѣ:|qfA>:Z=@cHKX)L!mXh=>AVOa+J V!`¯JsoRYVy&c=RL.OK˼ Q" d\a׬Ȩ<@ 3аG-%81$FbH ixE>/ʠTǁ(a{#06bg*&:Mx1Pi$5zU+,jhgo\LEZqPSbݱEuem2ٝGɄzm`jhx_To(E;R~d?~AH<#y:D;wUp#)O I (i .b:IlDޏOV3k*ld\M"͞dQ XXΙDL1<9cI/<@f󄣸D Yud Pv҅%5SK,51 Ђks~eUH=s|ok"¦RS Xl%3)-V(q:F;"'MO2A ~r;!R! E>)NX=jo1)@e _27`ˎ}é`b |-48[^ rG5V޴J&T=HϚ6G__MB+\1V*߀5/_}I1U6EU˵Ӱ p1j\Hpr>ixe͸9|1q)65"dE|`=\b&|h9%ʪW^#8:(T ,]ejl4xθAĐ".V-{@mmxlp(G?ECx, DtL6"9\y|'}YS8AɤDRyyW*]'T"?6& ̘oo.u;DcQ .XP6D%Q/^oK5UhہlmV2;+]HkI) Ⰼ=y`j" jSug!\P-Ϝ'#ۣBnN} /:IaPH/p%zÇ>N+n/,-L]c&Cotmc+\Fc 7ZoTY1[|X>q$淊!PdWm5 dj8BWhl"cf]˕ϒ$qE ocX &Ƈr):CZ@uۥ3g(q)K1ʜhChM _JrOsv yjnymK5FIf@PZ.X#cSB#_~-C=La>Bm ^md:17uTtS\Zcljbzp$0߲bi%c |70VA].WºxS@0=/"rnK dGM{M.;&d}GDFϻOփ|7, >*`|tkl31>Eh-S~>|-qڵhONUʈuLtJng_,;GnZt*\)ԏs 4v7Ҋ{}88sp7"[-2]\iX~vȹR`n_~1[gx.qhtVMX~Tav_CK4i̋6hE9*]u،3̱Vf2*OGFh#>;KtfULۿ|]1qq,b:mj6 eثu@$3VK:P35خ o[a\_|QaI?ݤv6yPO"g̪NF\HDٓr@)4ϩd DR\R /E Vͅ~; ȎDO_Z/ox8;!46K›E>`q7UqB oH\qt?*#lFΫ'PHBkyf9|)HWmaiLF*22e3iL'/7O2hA\LSIocG 9ڞ8aig=ؓ-Cy݈܏`f*}ݍa kJS,~cQybc(o0#pF ӋҞ|1xK.Ḿ3bsÕrp|^vn,]E;:o?ڌD,L"9D1+NeObmD*p`hO+2SЂ{I*Ec+g@a3D Lg@gDo#+4WN鉪<̦h& 2 0_`UL9:MAe/r3*7ӥߝڜJ= ;bJ!ti:Mއ S͐tGHlC+?r'T8-n{[ItlVq~I1) ŧdƅ[ϟ9 ?8qQz!>cvx tKiHb35pp%x@EU`(;;LeQ6^ݹA&P4ou_sn-2JA7b^tbtPfX뻲5BG-"sZ}cbM|3KT.^e\Dbx v&ú]SϦM?0YwݢMy(&\WO&꟢51VŽ\U 2RMaEI+dH zS~g?Dv0v;sIİY3 Q]1ͼ1h3"OB̻6ӆJ LbF\"u"w軐#⺌*r$-n5/8`)a=]ISVhz xa"Zb+ rfC^mWMяu2{O#\^k`x2e7V1 9VIs6Z5 x=,,Vm,q.^4_Eo?jpC&^@'qP%3X : Ȗo\WY- u$'b{[-*Y<"F2^zoH(_Xz2ô@Ur&߼ ߕP^eQv2[(v2EU<eZt ovG/jgԭ0@xPѳfH gl+wؘyf8yB*{mѺ9@2 dO#/vW8.ٹ`A uFD#\7$* ÈޕQ)<@AY)[!hTjED5}l%25ŘP%[VrCԯ m}xegxp??w|j"V$>dģ/`]9|1*<2{b|ˎN5,.Ԣ^n_}6e^Q g`T#NU8XH H6U R{˲GS&1nc !9Pq\CB[ʍp0 ^z(bU$NF-߶23LRYw%ק@J`٨<NY^"%}t|:>u5GVʯVGd}d;Z[Ic,7lVĵmTz{(aYLa"6Ddmy`W!'r7\EdXw BtiĆ\APRLjkMZZs|5* jlaAW#νN!RqPq3p@7a]&ayWĤ yqb]pYD3 `-5JڸroHtC,m~0sgNMc_F0)]F:y>M?Ohxfu%+0 o C]|8" hQASWx"_{=Q})ӯ;3dA o;\aV(.|$ {L"Ж.y&tvCgY$ٜ\W7a@Co/~Hz<8.;.O |7X@W~R?Rm;29W$ܼ#׹\Z6 CYb w"bhDZvtcuX=FjAHݤTp. e Տ<ўO!*I wK'Y_Clnn遞`T\VHFGw#7 `@硋O7zx`=kV iYYP.پY.`WʀgC/^?!q8e~*'DYp㤾fgUSoS/^'C]'}P>AG*iF Kۄ+ϵu>O1XP]"NЃ4l(nbVke_L 8.͇(~WRE=ZTw+K!v*g SU+os -yM5e"kO#Ewh#fqwj뫱yָ 6D0R̒O++9oՓpg\}ӲBCaNFX`[oHBiA  |-!gz(chnA>Zq#+\oVcZz]`]%}FaUkyDgEkKhQÈ`na/GO5KI#8_gsQU5u?>[ `f͎N%]&#PM&oΨF Q{,t5- 81-m* u)1UG>4$v'Hx(:NL .8s.B:[_Mٍ ll!鸙,яF~g-Yq(~Q.NjPbtv;D\'hAl&Cqvf{5q]d4bљ(%Q'b,?%[sf6D|J4M52(4&6$ kfS[_{LomMeo-'z#Jx>ԫ-=0y` t]6{IOP!*͠bfMǼarg<֧ς8%jO gm I?I0Zk\a+tW 23m,FYK3%06G&LzZiZRC3x=;~ [C ,l`3HoƎ-ٟyʩ#h8rE&R);a/^}VIN)?Plͮ&|BUGBftf)O4&2GrKi9դԮ&oD~&+U>YM]=3tg~o mV\^`bIzB.TYInc74w9)nZ* z/EϏ ?Mƀ|pC ӳ)/Z@Ob"uL<~yApBD΂}~f 'AGH79S4ӝi$oȤ^ K$i> ҊITTz7ix` S3>Bs˘GBu5`~0]K:u&,~^sxKo)pMi]?6ԁ<фvd5*!t#G醆 ZAclIDw;eR)GE!Ir W20B e1qj2S?\DS:zSc#v[AƖYB*X8 Elo%#{ *uS uݳk˃ӡeEo^̬h'/`OQAWRnyi -]5D1ej'̔u%B?oPdh 7B+r1oݿ+HN"`7nxUV#%lKf( Qa}ҰHcʱ ڗf;0A7VO13+{FGklό_ٮh2sNveTo2l x{Z~V5^甌6rFz67qF[ Rm۬&gX1" p4$IU:.X}H$Ņ4Ootm "K0` Wb(QHoKO1L/ VÚJ׹ݼ/Sx{mnUSS'oʦ,[ۚ9NWnU_X+6NنߌX^ķk͆GN֯džUKƞ cA,p kO+E\ZmXOg &0 e<&lL(<f>r$ݠNfYHu+hIoPةqEr0/ǟ"5lKcN^ӅpçiBl*{]}IT/( 4J7p3$}FI~T'wH?)\s USy1.6[5U#cnZϹo`I?H3(˖c7SyTL>Ë0h^y$}*7^+f 8b gCxz%桯 p!՗?4b{V18UDˑF-P97"5.f|НIACva[xSHOLr}\1B*ULVlDޓ'Ɖ:?TT2T@D^ \2,WTNٝ*+ jt8tlܢ_4C1T-LJY?TB"ةLI}Ms٩*^hr O<4]J꿏 H(bFzP fДg5})nl7ENVfQmM# HW&yfB?S'J 3 aqquo ewe@<tGlӝ%5bTӬvz#AIRJ4. x^̆/304zE-B5ž)QJ67>ԃgdm^2#1(ٌA fQ0z1}2it| Bs♱6DpO,;x1;,"el|  ;sj!HG˾f< >1*gy(sVa$6:Pio|^NhDPpK^8Ch;0eۦ+Udo4N]Җh lþ>喭e41݆mfAJi;[QXi-^EVE|mglUjn >G^ZG:ݣbhlS6t?[@|Y_c+U޲;y!X+NPC,:q%Eh$L E{v܄-~eNkxk'n~Cµ+yaC)!ELo7IjHi7_͇s\$Aݥ}gċꓪ 2Hg{i)) 9i>EoQݞ#! ks7ɥ۾*NphWuiVO >b25G%3ӖJ/ovޭ[~EИKS@gaMl uć#I Ł,sg"h⅊6xZ`q" FYCϊ;\ҷNJ` qj:&`BDZd5y.g3[6}"S)e4nY++QRgMMFMQ8Ft1OGԧ7{{Y 4Y7AL^b`3!Vh`YTh~ ~j'|lDt~!(/vso^α/نTt?MiĖ'!qF^fo(dž-o)Wo!l(){IJT x*:YQl CWqd_6 jz`Yg XpK+ˈpL@f?`+K:8p?=Rdsj^"zR.׽v@IhhE,4,rۼkNz"4 } [yHI19Z_V<|+d X`F]8r0?`0zZ -cՎ839V%B e˄uuэǟ56!ރ|f4[@RLcjS^Z'2'I`s _z0Գ90j+Dv2>/O_b~8*k)KLԑ h4R6.9 YJ4Q,T,]^r}Pn=pJ&L7ZIQ}R}zq(5ؤO9']}c$''sM\=s}təo^mM1Sw F/D{09^j" 5yKQO2\SRi\Ƭ7̟rpaP1IC'+;{j9Q|*U""I0`%iK :TN8xa 5Kgɂn_A8E”xG SVg; u/(ao[aې[::x+?q}㈷_eqN/v#[‘A3ɔT,1< ~gPW\ ]󇬏@V;5?՛ L/qx)'eLb1rG|/uZEϩ'\bK/i8wSL}eϝ34ιvN۪a+?_N Bay٫BY㥮 nL^]J(/}97 MmR;לɼfP#QNjl~[T +H@'th&LFP3m`ZWZ 6Rnv g~2`*H OaH=+?(MεmQIC@!2pjJy:&,@!a?q6esxXF`A,YӅӊS_uWVD7W03uDIEygz[ٍ0'٘KVo1Q* dV {;J ,G#+F.ʵ}oI rfDjtC@<`w)'Xe.4Y&zX`_v\=fSa0ܜ]HCm8HD9 /hܬ\D|p_֥d v<&# De*y+/6VV֭gÜ_WA86cU %61>aIw(CT^`~ϧv05޹WFǯqj+`Y+CR-*uCbUt(skľ7]u8a;A0ߏdDd+(Z$xQktG%hl:L!|s2Zu(:=X 3ߘ۞N"RM{%LPOW8dOxlwC&wOi.gm|/n"Kh"E/L T @6Sݢ"@N4%Y߬`z]i̾ "^-nҫT'DuFK(-pO,.Xmpk%U Vώ ?Ƹ7VV 8ݏZ(^6\zςlܪ=LzymS%IOr<8eh>&W)]%,Aϔt + G/\ܵvkN= 8\F6I&y6[iL-dݟcvZY%qJ1VM <|;f3)oQM{嚭o) JټLe\ˏ yԬ4&!@lPp7~ks{L\u6%Pjqs$7E1ӷWחSkq(%fUU6\mGp/su LYY\Dj;m=/EaH'[J;OП"xV%F:U>ld1LA"DcL5^POCo5TĄ?X'~qW`j]eBk^3׬梏IJB6 pV:kbs"3=eXC9rb8 H:|Kc}1d(;ܶ.?A$aPckX';\peA5;@R|ufNp4A$QU!"dAa`alkQY^DM(,^ԇdovdeIReu-Dx*OGNRɨ.Q|OCs:bS9/)/Dv`s@奉J3r| 2e ""Gz$ `@΍wyܣ%%8̆ڀ^H"+cհ-F$2!qcpPmL43 ' \l 4F>-bB? Oèd=^}4D@׈x @3|z}# &Rh}E'[ MdMBj_p*y.Ds$rebnMC;b3q)þ $N (ws 5!EF Z> $<NeM{*Ld.oT*5`uʒg{hw99>by]9M\g&]}ٚAHTh']w5s05#ԊPJ#d~q厒m}/.K36#4DYykX u9xO/<+4镰~hF ÐERIjCڈFE; s.*L Jɻ%}vH]"$Yp!$uwW! ݂ji!GhONnn(ra"&1)"uhh4gͤ/\'-- ֺ6#Z) +W@q㐾W,Ωo Rc?CfbB>JCa]ﮌ8/v7  xݸ |_ % d`_ϴfқM'-r|{+"'vI744.TixRWȸ zEg E 56 u:1gE~z%G#"[d gexvSyl[MjClfFt*IK(n@=r'.=p7_r3;laS4RŠ˅ MF?\ Ôv,?]DNK&nV}]N! db}DզC,rgYPTЦH>g?]H.?_xTFAvn.$מ56i{w@rwL^8u~ IR!>H4\>oܱRsԈrHh7-m@P0{P!SC-f yLL -sh;pQ3SmJ&n.$gǀ^gʜT ^pmVYÖ Z=yϲB>@LQEڤaE5)woaUht=/DM'L˘f XUt}=W@i&z6Rv޲`O 8Bp˜#LJt7%4k|AZ%B%cBy>%NSŔ+qwgC˸<Mw!2#ag`j4O{&$ y(kb*6/DsOflA(pi/ 1D.f[k8Xߌp]lG;dz dY⩴rdma677~|nq>3wls{]?֠1(:~yϐ$;w9yVE ڢb MӽTՅӧF2 x[{64ai2 xHRJT QFDmGs ܑ͞m3nxn< V-20 g<=7$ N#ߞp.j€t1=\4Ź/4~ax4'h*~PjgwqUqܮm8[}Y9w^•kAom}_RAbGzI/f\∑Bq:[7jA`UdTS|7N5ɹ ֩j(c>4}UM/9shQ6$,e3ᾋU 6Kwœ a8l݌yj߫jқ_QʉqN6&β Qu J%;0;Wzs CX`8K8=3J4BCc`V`r=fTpK;{-<ݭA)ܤLO^/DE†$VAAoD-X0đ RbU/uS!>@*䄀㬊&=tb􇬶aF=&g:eF5 bXH/{:]  [lbgyWҗE'a٪NC Dr\-n/?JDVAvlh&Lf@nQ.s$>m OH#@C]PdN4dUe:G} 1Um("k#0 gM,aVz*.i(j"6 -URr '%0"DG@n_+$ð653칶=WOxM~N|, {aN9) >v"py* #B^@K7i9 YZP!Ӝp XA@KZ/33F%C9t1ȆBSFN\(;^Qv!pq9)>sBrӴȠyp+K%9Ex?N4QRGS~o.{} Cu=*is83`d-3IF͐4cr-AD|uD*hZKj}' 1fXl|l ltژ'S$-A \2 QVS¦&pkʰJi:i<[葱3=$f`sq)[Ӳ B~?MD1Xxl?eq9,K<{S~eM_yk-l"ֺ&ia7\FL6?yَFZflˁږSƕ0M`a9fC՟ J_D.Xg]ϐpw{6qZ#TLyE,knM ~i3}1oc۫򀗿q*&!8L*1S}9S|(FĒ q>&tkt5y G⌽3'<T(")*"` mg3/;~8y븖E>>W/Trc3 2w,r.d Kn^PSAţPqV1p:d}kr[cFc;{՛܆`]S7YgH2&'^C}͋e/n+aV:#F9Ish,Э6?K\%kr8h3pbx!#Js7'^GwmO}$vCC2n܄۝!6!wZ̞c^4ݼ ;Ƶ){\l5Y#2>YP>4'1ѶřxPR, rtOVW fV]gRmQSЇ &[d 4⾪I"+)e~=V8UǼ7ơ*iئZR(d郠Z->L϶:[Ofk_q_"BtJ+&0$y(u ,KO hI^P,mZC#FK> Z\AʱX)X7"\AlF T}g1e/V~itQIXn0Ѧ U]p+v-@U6_,P)u=V'c tW ~:D&NK3! pe>dP YPfIhinuMqN>1W&uLh27_ՑCF#wuدx=Jj&yn ,f9P-ѥXeCڶ&:8+RA'Q:>2 (-Emyt|ܺןvEi@x.QUeۨx i{&/(~4ђ - !EӀ?, u߮->o\ v7Hr/)-Y3aQ5J9-&oBh7%W+=_ dx70zOO=XCijы8V{Xǰ({>6+uzsv#NkX^sZlD@yfhjT9{;k?g*s#]~ѻl@K;g^\ 5]ϒ)20MIYTJ(ByM(® f-x$?l!?ϺT#ȏ16^S"-}IozooU$?2&4 6@Ff g+ΣwtUBr@u74Zl]B|`l}9bv\B#bgU~˒-Y>~lҋJ *^J51jNg| ŒpmL#΍&Qsl ql?"2TF-4;ei0+avEC!:{*a(m3tf2z DTT/I|fH퍙7nQANGxrP4{Fe0BK٘ ;Gb#U= h>6(.bXxg\4(oU'rpX9A_<08M G '~ٗ׈an#lA=~tVl0tmD?Y{?{etԇ22TTa/9ĢX3l`{Go|; i$hjlvx'!dr`(h\V$92kZ q=GThkbvm%Y^d 9A7*R:f,J*-:ns^AtdtAda/k"<>f.9:-;kS7EH=K^o%|c/JoSxcbR6F^ lj]Gb'VeZ6wL{h? p$ⷲ^m8"?[՗>o {Y(A]yS\m[QN^'.|$Jϸ6I󑆬\[ZZ*1`PjQbÐTr}{*=x#á FH] .AhP]Vۦ>|RΚ1*WTEA.ϷP׻3񹧸Nv8vPg6!Y}icGٟtl%3N.P-iЋ|iCf+e%3zs) ")gyAyAū`gi3QᄑLܳhn""{!jn@7pѢ Eʗ#,B ʚLl<-1$W!X|jo#郶"˒V *ZЎw=ǥï-ۜ##<9:pA̕@tto J56NU~>;#1?j+(QLк|yxn\QAѦQ{eؿ>&j-r ȞN" {Ʉ1i`OKʫ'CY__݄QRx0 vY8!uD`;zڪ{iaCe O-Bhpd$]Uʋr275_f";Wgb Dc1*~xfAEm&МuD/-PlZ9w+G^'B9ru J:@:Xo=Rk$6.C ] aʆuf>{e64LW_H~[>B9,Jǽe&QFZYuSWg|W|aL-bϘ.?\A`;yL_U,nN]ȥτZ(lŒ߮W5G5`}eW m_%m< X 9O_Q~Q[~llC؂@y2jA̚=]aM]t4 +=ꫩz<Ɗ 7 e*D'D*+wZ1̓Au@W~t \FM IYj<wûzfm2g۰XוSNJ1XGUPGCf =/ێq6Q-[0Ͽgd3Rlv S+%g!LqOrʮYҟBC;G=n<hRCscD6"F{n_.SՐPCgI{A.*}G gzHjuKIk0͇P5̀{)Hؿe[VwUY?"`F2n܄P _lp"$Lj WܚBk~^\d/(0c׃4I[ILom09K38< 8ː8l:=RiE#`GU /φI9br!(7|#diP8JN J7N f{+o Km<}ȞxҠ |:݄!2Y]Pmt|^L&4ҕgl//)tJoF4BYBR$nC0冊L3v^eD8Rэ|漖vII#!`f8!;,iR%\AXD %5ilhOοOy ˾tj1NTv?5/e^jpFfxUzm!tX)׿78nmzlWIޝib _T60mNy0nƕ嚟ԡ9*N' (CЕOu)LH4a!8I?m*x>A`ega/RMZƠ!䙿M;7y[?[}ȳ&u§`;HMIW|G!"4dw R?j'JvS}Rr'<OM-[< i歇 FШ6"D᜷(m,Pn03eU x,߻cHsNͮtQԱLyMF'&±e },iIb1IٞTȄ5fZ3m gɬmn-P*m^o8#o>wt#/G|6 Amr&E%9[ ˓ S@>`§{ϦӌIh\Eߕ2qirۨpaDQ R `.N&&8~q*wk X 1Rsлe-h-Ax[<@,܅oԂvZb"+Z#\:ig[y4ѓ# 3@穝YfL}vZc̅ vaw!C1otK׬VLeuz1.2olCFszK`пc@$|*Yd? bW42B\ҦLx]~{' l o^IA kwɞ: C * # X:n }8@x82S.),yGL0-:U,!Y[!o ]z5C/`瓼0W%gOwe9=oPAMn̴ q$?0&U~:!.Zgkp[AQuqL:QchY;'pߞ p 5L0z`vŎ{3vZǎ:.{Lv -p*cjwaoH}6M| $q%y | #pIWS͂lP7,M\%3!rXNj6VP em\e`LaLSDթ@VFxTy+.QϨVAڼjF;Q7S=~1=DwjH=aRh5~]QyHǙ8@$b!s#aWO`_A%yDzmȖ^x uUi2 yߥ:١fH #*e Vs6펰(o̮NʟRFqכ }> S1T Cn(ēg( #l#C2izC<܌TtFtyX {ʣ;fQС~} S KR5|`v8C᧕Yh^1(إ>͇q#qK͈𕧘-%yӑYmc늋,:kUx9MO&.߻3^a<<%T$2sCs=mH"wKkwN/<%@ݫS@*_pɗ9HlgΪnlqlu\ބ@ Kfvq 8(]ԋ550<͸+? pYV]蛮+:*)pB æelml~"P`SD5J5|i 5GEj54Sas_ *Jlf:#UЁ\p(Ž(MkwUYDۆTȴl%wk.Ƶޱ hTY "W1`2$B0$^ľLxW7[/q#D=`NH["Zw^6=O-"_GhBo _a]\v؏fa? jVބJk4_`]WYss,AZHq劭) A3a>'ΖZzoS̤Fd9YR&: %9JMz<Ȍ~t4>{/AQeorDO=m,UG2D 1hD1@wSR-Pmç%PΧ0zڬu%oe5=2,M_\lњw+iKm"uȼ{f]?NM1|4Yw؄Xtpϸ]Μd2!t0GDr)G}0Dti.OG~˝ycII7gźkՙ@u T2N.elDmAA|pBPIjZ`  r~I:Ud03rm pϼ bQ^nB<]`aؼ{٦=Z-F]Xb[悃1qcFT0<]Fm龉ZY@굘J҈ O7vLCX{0x+?57%==D`<)*$cI+Ǧwh#fSxj-U@S4}.~9rljVAi.]峝^V]t9P&o8ѹ%r+H4 F.3B%qe_ѐqy-V'"D7mɤЎ0n0c j ",Cע6AȽs|]JOI^.a EsSqLlGj0꾴5H>qLnrJJW\UL c"o$v-!]Bqz>Z%/jY9$iwx4ZҒ`- V&:7*SHJrx }[x9[q#[yl3u/S*=MN9e=g QJQVba( *f0b9`MGtYI+ ߋɓ.|? n _Ty1`KBF] (/p }/&0l(I $P 䱓[/o6(@nhmF'[b^v/|'pD;DYLep[uAh0IgZ@S3xBZhy6?xS#_;*HR|+b eX yPaz.LǻvT!/n >R qp[RU>@zX 7az<_^:7ʙW<`Cy`˞4{ 䐻ÎHb/ASi OE9٧tN-}=w(gsY#|ߗ 32E'?F/GEqQJw7L)>\6c2ʉe'Y &!|I'ٻguHE,[c^'8fmؚ[Tt6/{}(&Θ;݆caQ{D5*]`\Na8Q8jmS0Jjw2O+Ea!Vs%M[NT/8]m7G0)uT]eru@yF, b L~H΍>6dPT WAbfnq~lѧ7SF*\A$ f΋+o!P^ MTe-)ݔ,wbT';жSՔAFXqLq@@G 7T@X.5uPŅ/\hmTyh 5Csa褓.r6F 7еa9@":C(n"8Sy yдjqϚ o5B (5D>5SL؏FĘa\M0N4G)- L'Xs:btݑ?t+gʀԡf53ы#}tjj86i?"\<[q p zf+jpJp94TNM?wKP2Q+l輨/K4uP6AV*@C QX}ȮkWnL`kE,\3,P5C4?uAI!gh9RFy?>c2cn _Ncd~k?;OIK$ < QX/}fq4ɴ&qL&cpԩYRB? n.GB/o0fiHzWؙK0<'* 4R (4hҳ#>>;j~|W9둛a9sM2zAZ:ID!L$,iYY5 ހڅ(̡*`/xݮ?I3=p5<8wj:WB[sF#g*6nOڕNHM]@Oyw j܄lw? RvtsDLFT#uusӣ3~nKGfz u#H eA?VP$6i> ݣ̍T"kt2ɫ4mbZEC]CLSXc2D,q#}ԃq'"1>I2I wQP̭|rcle9. LV\ę?hS@53ÿDV`&NIm6(ʶF" `Nj> zy8چ=Yl8Ӆ:#h s Fѣ8b[˱P7$]>x);Ď)9i-4LV1bzA~+!T T`SdgZU[+H#jRMԮiٜs<#F _Nz;s䪽I|h$׷Gr{m ?j`֟GV}#AW5>͏5F [1Z=SK&z-)}p<($O°lS )դb0U( cN? 2XWp/, 'n@hRtt 1swml6\zGOY~/0V k.3.tpω4USVkVб $? Pg+%|)9k"MD'M>$[5!NU:I {{'_$:QhnۜeƑۄ8@iuΞ3ux ]}E+,fNQI2=IH $gQ/\P7G۬\"ɫUwLl[z(yL$7;I |n营ѫe7 ϓ*ȭpNVXԹ G"?LFⷴ[Y8.fek 92kDOJED :Wc@rz4XCpnuUJb+T]]/G5@Pak~ NI ;1)$#5>-UFEbZ"37!!2<5= {trVmF>c4ح}$twQOփl|FD oݼ=zcE' z˝bH%P76!N\y~G#%>lAޟmqd.>fAs b-MTc57dވdO}/xC!"1%~YAY`fjc>BIVfEb{#~,; L%/"nWĤ^- xJ` 2׆I<$/(vA'nvc)x<7ӐD-eFN7z0G,WXLe w!r܏OXO_tHFgWqo(ߊo7j?' 06lh:9ӣ_Areo25E_y7P]XIAQE&u)F/`m*T G9Dz-U aT^*Yym!_uZ[a&<Ȝ ՓnA>+b;6'b_3m6Lb[䄇 (GDaEpmf[lNoY/_`q3}Wl͂SiobZYVpLL< %U6[M\_#Ӯ}1)1cX1,p|]1;nk]C-W8WZ$ i'چX[(6Ȭ^zH{^O.v2TS>?yn)ɠY)պTPi<d4m'aޜjy 1#$֭٥ ͆*Rz`ʾuv!hwqu&P1i9?'zNXW†;(u'4Ej˸zK[J5Ĵ%1CU M|:ܧȶ["Iδd5j#<#iL A.MA"*zYc 1EHǯ%sN'5\ t-ˇÌ5Wy**P*ʐdfTA%۩g0ʆj[Br>~մ P(uZ)ʠf Ň߿_V`3Y"&ԹMVjZd&Sqf1Y{Hnf0{ /؝? Mݝ.P4׶&1sm|𞖭Nn׷3&e1 ]` "8gY3DP U 環Ԙ@hZɎ}$ wD:g2uʤr|IVaڸj5=^Jmځ9K @mr%샇'.+S 43iXaPL~NgF-fVSчțxaߒԎ/]4 Ojd{vr=>JZ0gf1oe3ɓ(At8%M{,Aq)DnT@6_@aa:|5Aиw o&hYs{xԃlh2PȭsGT4N'DJBw{TQ FA4ә_&R '"}Oc$ߧV:]ޙH^c-GGrgHEOtArt) w:Ԩ{$_)2#`[AW>fH݅ {nv@7ZjrI=SxD =wʀ6`wbKx㝅z")Z.5~DFH+qGg$IVDEMRGtg%e>!R`be(+q-_GvL=;T wpf`dَв[$rYzYdAGBzMM9c~urz^c# fL,#azl g}/Nrя5(Yp8TZ#M- BPHZ: Ģsx;):?v`v}LzLAC0*?3f5GثcЕ4نB qkGdn$!y_Ww,,Z^c43{)0GbSu)ʍːp\) )/:uy5?0@`ES.OIMޕ^CwDg rEG-*~bG;ҧi VUT*[5ׄhn,OzHYD!8$"f=l% c nq PPf&a9[@"7C%m%Nm~š?,,d7޼P91:': s!bla,u;t0 }{?-P>ͿH3l66~b}ːoD~aP!v@V')Xٞdw[.QL\zF$YWLѶdA$]r+I@P; ,'S %K|׈E/)k[kRGC- r۽vף.e՜_'y&ʼnt韉ПL&5VKW04 $oNfnQ>q>ؼHEkUJ_-zt(02p4`ɈBnA^er:Ŭ(ts _ _d-$Cơ]w|- \澼 MfI(]oMK1s?~#j.IxG|@ms:!Nj;^yځ;w!ju(4yOѪsPew|Q3xe1nw¶̔W |IGRU0;#2]߉u?trWz]Dz۫3amNWTE'M$yJBAǩpF%G}DvzF +"ޡ s<6|G7B`I^}iE18e"!W14Ga+&B0dZ6iG: sA.2~8v J+$0;s&ew0}m1I]lp-*8 OBA2vu4МEK:׺g4{f'Zu{:ęu#iZ-A[8h۟wbW<}qN.gZ]ɭc12b4Qö$0 c;2!T6W6]N@̏!3kc.tiRNp/+WWRm[F֝'>U)'Ua?_<-rNT/ڷyd1vR^ڵ.8{UETT7ʪ:r!ʨ;:BF27aP/GVSWw`5o.(1(S"e)Df4A/5[%"hp'JP&4󍤜Xݡ[U[/c%3lo بrF2y_caJKcԦ)MZŎ|f@Hqg"63@"R+r- 3³B_hN]yTTI5Ltk=h7DzjQa^ސ c$ցڙah.tg&z.Tk$7qoawkEYa1f~'!W~ӐIr z, l /&5*P?f =2yIbZyxW9byЬ=#$3Qz?Qj{߬+#@]H2%xOxm]|)+t ~jkS@S`bWgYg4 VlxNx{hbqZojLc''AaXqy%@~O5HNs.`\,ĺڕULcX Rqu W0=f1bs5*̑Z[ Ǝ 1_BbR맴9EP0q@ՐgF&9)Uy(Tl)7j&EdYh}<?mj5Xp8W|MM(xKM/wtɼ+^i][?|y/0RE,:"zFq`yWDT T,%3h=l4Rڝ <@l.Fhp=,eKWXP,y@S==Ahm@DY=i#ʹ[*2OWk{0 YҰG;^mkJA~Fo-\谉Cf܍@yH7Yjg#kxĚ!4]Gyp, TX?&o3e79D2ILJ =5L=ص"ZeIwtOhb&pP(DqKٝغ(=ȰoEϰCMfT쩀+{zl6EqVEsa4_탲c6 k;Gf4 `8Nيr¸j@ˆ,lj! 4\X}<`( Tpt?"\ɐHzz[NpQ4_QdoƇ6f#Ġ֮?Y=`rVđvj-Zɑ_1(N揮b7 A$›z!|C)JǨuѷVδE#G yi128_kCƲޜKC-κvHBI`(/d"ass{pUiCXZ[gO0umJek- Xk_1A%*­p@EM˘9, Sx u11c4Ey_ZF6とWcn6sL Ib3lwֈ\B;ɗX;5;0b a kwbLb -}YY5$M(?YC`Nl\{.Q%-%V9@' }I޾ySam&0Qv /b=4Eޯ9X%R_B|1}/g8|C;Cf7 T"9xgH"6.Jrpyz>UB0?KE ? 3HU(`Na-3l;ag%&ThF1 G"t#u{XIlmL ,:/Tpx_l{V~<cxgQ(9Ӎ۫}e!8E7m*#) es!B [M=Zu6XCjM%ـi2Y_|6L|y6nfc:i~gzv2%pFWO!K'i(~vN/g)=R2,)|6+e0P{bTRLwg I}OC&JU\̐kz)zqEK1QG@b/ F8ʻ.FsKC ~(וLy4Uсel@kQ{ y.,dsVES1gxJ<1}1OspAp C1Ccd@.^ n|~(d>{[eRp$҄g:ӃC`N&lGaD~pH=7B/(HO[=?1]DUQO{:8`wVkfk؊Ua3iΦÏSy,v,*:!16 rjvl]{dv hIR ]>~9|K@SB&}#1Lց@jK~,ĔΕB*r&3>-3A*B?"vN7w [e f@Sd9Un-[;9B <']Mr5?$5 1oؿ-tyerxƼ5GhWJ֢W~`[rǸb6Bz]r~v BKC)bn-Ȃc48˴/t9l`-8|RUBJ05ضNw}*-g˪?JEvB=xk !b]vm .ndj,fMH!.OcZQJѼ0ߣQsScb{l}"βdW AO|LkF-bܨ~Z< Zrq#%enڒI{QcE=2hwG v:06Ehd e,tF:@ArnWW0jn) ?%&ag##<).DY4Xڈ+o䗟DO9ޘ8U'\ \Kܑ!L GQGb;:|TD+\Kmc)RAEK ƁxTAVi.nl{ ʘ26BWi2`+k%GSFxm1KF(ӚӼZ,P3Xp|ZKk +o[чקjd& `P*< x:gG(~RQp3t$ZuQ 1ՅJFEO86 cS&A%ZXډ{iMٛ2;AluŃ#J6㤃tyJ~nJZQcx7q2VpGڐc g։@&iek$5OU| ~0K䨈x/>eL}c D'.ʼ#84ZuЀ>_Oizª gT>0>si3J9fa>1l(wdYC-آEu"'||ܫs62\?7]Hr05so]&oZ`:tcO,Wx672;dVQpiW5do6LZ<3%Ui|2jF{f}tL}?o;w*(k~o "zhohGoCw WG}iz-J@xχ ><MPX7O+#i kIM=G5͘ 0BjԥwF;DcU<\grngL`2UOht>炯{V#-z3GJmakg4 Yz+1lؗ5٢?^] iUu8Z{yO1j }K%VM1vfͿUT,#͝GIAVV/WWJr{YSsM *)Κ^^XmA-t-I" nSoZJ{ɸLJ=#=B r8 k8B/[,3c0t}{BJC[/J:,^AgD $+"~Hd 5q$xaNZ25h¤F:^ר<+f٭pp p|P!/88z98T *9!i̵͗=N a9[ysaIm҇JΗRdrB6 @3={-I0Π/rktXd%ד,x5pA cҨDM uz|-+LAr#?bñ7ԋL:1*+7ش|SpqLuD թ[sJE/"emtSEh\ױX fOY>@94n0Epf85ì7jhjOߤRN ?̪ >)J7~uA?/%ChхÖaU<ҹNAn/ J?Kߣ x@1.ts#%/h>yψO%\/l;~% }8~ UJK孑~@'-O 4*4m xNOџoNHGWwŵ=f@k agv6J6+] ؽxwvƄBђE<.VPq91RMY Qj}o5Oeu35kMN^%³.ϐj 1).RBn?ڗ< *_/ $}zWm]fBּ˽(Rh<`fi~}դ%0c,jTsdo\*,](fx]#sT3)kB#i%3B6i~Z=x6ݫ6ܷ ob Wh ? DŽȚx9r.W$}h޿GYdL`+)I $+P7&o6]!1Rϊ 9VCS"MxB=8yZ_pG3E֝T<>d\*r+β7JQXqzؚPj:Kqw:v\W3t"?>='4\^hHX_ײ0O+ ; ?\dH\Ez'Q+ǥh+1_ Hk_p (&"q5 J 1$߄fk$w8@1Գ(,jIHXڣwc!eB% tv6R\w[2zW6 O1ӑMV>a8% +@!N(Ỹi=]:,Pys ;X< L|JKVpq84L#c &kH[oHQʰ9/.qJ1~0_@ɺ 2yGѝQ1K.\{ŷSX ifw]B,#o5˫VP6h.c=KA1RU$!R8cT s~bbd`OP&)[X5xl$1c M,j * :aW1! xko+3>WH'*;8O VM>H#o8.SCjŶ,pzj*QQd-hu[S$#vn~0xC> /!*2 +#)䁮+Dn쏇h}lsw6eЫ(Sww;~r]s@֑# -0wypD;d{[K""GIB;C}dK) cH !pEu ء^!6Ǣ,2J? ^18$PRoCе(ߍiHǣYrKp E\4b9ZºZoZ!\rb^Z|YS7s#[%17:x-IrAt8n$9p܃zodyC[d̔e7|<ӵ̝d{jCnɴy>qm}x}BVp4l5gV啈Jʥ>uTTH?.ujٞ׮WK̓g갲^Gk&l;LT[|WK ڥ# *)GjxG*M"%۾Aܞz8zv=j9m|b^D}݋ 4ԁ0+\k$ X,|VwO ,PhFdq _9m>(OIHE}ӾއOkey]˝~_fI~t ޗgXNfJ{2g& t)F(087;*Y+m]8U{B%ެ a ^`H6|] xQY׃] vh<zM܅×sXلe!7Ť7 ,|=5`RNs4@ހ̑ x{{ 64k?{aRx5 - өM$Lr0j(SZG LA3U*(!Y^8 +Gzq^]a83Hd 懨RdOrlxYNj)~1 +1w*iT³oØɈhto4t򲱣 \c"Z;>C.q$.#hެBAAz`G4D)kNUM[A41]dC%EIeVquИ$H:3%U+A.e3K`\g^֛u"+.&PCU&COQ<36S6Nݯ)+cz3,[R~D"Me* J:y4\juE}5DNۊ:aߔ694b %\ ae KGG*#*d*_: mhn"K7Y>mExAPr]|w}Hp ¹녵1+iS]ƋP:YHt`ZJ324yVN*pp6y>-g2jo#H 8y zxt~y=׹imzSTr4 ,Ie M½'yZi˗8ERcfTtQpxwCc,QtC<86SdrֻGN_NR@>+ 5\FK]iop.|Ik@ k&IY(/??4 s#Sdi&9JQy:9?psE7-:%TZ~F΍'^[7t8=Tw6PD.156F@Ja%z3LXžr,P^vj(Y:Q3 h8q,| hάƞM~Ui\\4)fl&ReFw7ѼHK>N 7 ;X=,0UkDB[7WLiƊhk )~jBvb o._P#Y52 61-A"b޼b ywr7J/KΡ\"zzJM-cl;Sy?G6kԆ5)'$y:s@KvX'w߰,s<3e`ֽ x 8狒^RrCj/)(7JƁ". %'XmIX.j(Ja \J@E "DnY[4јAi1LO"ŇnYs,1S(I+E:zE:]&%^L$&{j^~f0º}Llfzp"--T3zG> Wd|2ȯAWV(V:hغ[ۆbX B7dV#P &;ƭ*j(z̦tQ^)pE b Eg=._xݸPS󈹏dqq([q}^|OX#>Lx*L bZd;=[]Tj©hvT6"6#MsB.h )3c\Ej+M ^UgW:#I8 ;D 5?l<@[`S?D7IEaŜrYbYIՂmF එRlz,w6|z-ɮ:4M(IvBUtR7iUw*:F6-({ ZyXz9u=FPMO,}XI$EgM7gj4>oJv]lrEO!Y?yOI Q.&UX/+ pIҙ,mgiGJ;E };PNO%z}HN5||7J[1냫z!!!\.R;XߍwBy6&ژo q|Iǯ:yR;sK2Z2Y%9 z".z$s2 lGowEE'` x7vz)OyF Ɇٴ:luzZiw,sqf?s&K.+O vdr:e~}QRd޸/[lDev:a9d7/Ji l1پ,kx 8O*f)v(]eGїU{)rh`} ±.ozuXщW\QXWeCOU9 U|ޛj^G:t] p\:`=QS(3eK2-7%%RI? <= Z0pIYwÐju%@"GE;Ȳ؄gjX CvH ? ծ8Zqh)NBޱU-x$y#,t~~`6yKkU_Țcyşӆu<FY "cӻv f8؝%G dsJxa.H5hf#*'7 -Tb%WPX&˾;X/FA; >@HCt Cbh.pj]b/mHy5:ڰ Aثnz[zH[w2`Ig`U}k]zh2jq,D@RB1:M߰`"~ۍMʃōC&VDw 7=}yQ #{L2Nc[,CSiqEw3 +W蘫~1d:-[٢Ս9A>\nZai5 ŽiWeUK(I3ރG@cRtOX:fWdA-e:Z(] oVqFV~ȁ旬k*އ 5jSqTaLR4lE%Əj-"Goyw (<jI6 Tg~U-8K5 t\h(_,P{h+&$#!f b^7Zl~{^ :zJ4)}&0^[CHz_;'@d!6rEkg. 3D\gs(ѡ[@|`-)a!x[#Mjc  ' d/L0n4%BQo&$3社wiYkxj/i]u?*AUzW%۠كz9E' -נ_h woN%O9ꧤ;<ȿ6eC=/t&_&R6/)1)CdzRz[+)rd`i:| 2 KL,uM* _RYʽ/pmdx1 4[9-iQrLb`uW`M[0ټNmB#ϲINǡiϹ'2ȱPCCGP!39k"C2#l?n^VE Պ޿9h'w_^S\>G<KmFVFsb4,Mw1puѝիƜ6/FD&(fm#m:Y)R Oto>5&jdG"~6(ayBHgUX"Zf3r2rيNa,mmY`fѶ. W4FxuN1D ҥQ_ú_{/5w)IVc~5at7iMo ve2b.Z͠u 6xV<ilh/ώ n(ʏQ_^L&^AR8񵮀rGz%5)\ aw Wj{m iIp(yQ@mB[>3?ҏܕ`tc8ui }~,"rsvJ^:r#lsEmʀcS9<}DTk؁>4_B"I3 % Yl"?;Բ$%b䚽mC>V&/tG1F7|+?]9:@wгoQOiȶCX`ɂBӭΰ~ CLp$ g@3<4BQ^[i ]KlSwTj wj~FCv_J'9䂞+<s. o&RxrEyyP]mFbTlķ&qCogoeUTB^k"F/p"Jiq2xM.+Jc`_Q7`K[ieWi:r Շh9p3ޙTqIڣD*MHʧTdX1o +0r (a;95.e`\ti\t=f(t .lM߮xNeiɅt[$a Ϋ7L-# Atw;H B 9 YoAc?KGo]zLZ"o/5oLݰ--*uvB uEPCHPWRV(J@)%OoL&% A?)+ W{yw1O-v=1aj$u(=H1J%bE/wtbSuQ!|:)iD 4I,mgCgF/Pm jGɪ ==./W?NqS)ڸ/r>^UH*$Jeϳ}C ;Uk DU]"W^,I2Z-<ϣt.mַo1VBM'_ Fԛ|C}BE( څG(Klql }27 &W}d0:[8F,e2퓈`q?B7hKEWclDlbs)i6DD50c go>[A)Kةq `)R$+2$ZIbcF{=Kf.hЧ"oƆ=rKZi0GFz":P|)qU dK^emOw-E#0gbN"y惋)Zk^X )dl1B[Mx0AD}ٽ%tE"稰! đe`Ucj,c*7˖ui vm>V-_*nkO6R9R׌"UrI\W{2^wүu9YD_kp3`߈dNTWQ3CJҞ-%T2a9篮;EFOcޣc/:/\Ɠ?z5^v-_Knм11!np`t4Y/|2Ak(>`W:xpha^8*"ڨ^gtտЄ`[ݭ1 JO*}דծ0ЍVa1q5e{O/g縲%;9W]ʀX7rB-T Y:\b&ӯ@!]K]W02{ԽcWStA{56I̡*#n>e70O犒0ۈcgdf05V:UEU0OuwjQfNJjбjYᄉGo1l@?gp}%,C+"U:CDpJhր=._%xDkc@#> '0ګ?t! T{eeYzMyaPCzqL*, nBϖg 6ף}7$QjT' ~x;Cy? ;>Ses L(`PD_TД T0IKɜ(uaMW5G У=d"%7nRoA/OUZlD[~PejؓTBt7Rk b(d$OSקּuQQe .l"UkO{$B|58̫]UɿcD*;gĶaQeVA~Tfɜ7^QP(zoA>|98SdlcҔJH e}h8G VQBe8b^/uMm$Wj5@*Gj$? qys$m%~$x!]PVqi.87 ;F uWO.6U5QգCUyZ4).P)GhE7bx> Wڽ*]X"CIZSR:VKH~{|Vt DܙRҾח=H̝&ۇ ^/MkYmm|K>v<ׇ֙>(ۤwܮlx5\{;4yΗ:w?U?au`SjP:OCnT4(}73a"ӳ 1G sqD4Ұ5˫5{ncO+.F؎EfV68{^!8bp/%p)JTGE0|$]T(?C}(UxTZ!}xRblXʵ ,{XJJ'Q2Y+ gJA$%gC EJtU#E9cz%`Y?'G(- v%DIm\ rf+ّ?m~m^,L]NQݳoWU 7|m4!(3}/j 2ai4FEOxLemh?EZqy5 iNyP]tC/^e;,"?r&u+D滓RܠjzB!* ub>5 C=d{[sDyVbD=r[ׂiPk{b8y)Ef ^BB[?,*kd\  Us0H R' jT/kFid2rQjDk, {]\::̉.*DPd1!hW!A4ђmm?}ܡ=gYS\[BvlCF)iHNvђ ~d}-%$i*3\?lOˊ Gssg |Q0xЂUd/A,8@zD)hC ]jMoyba%gV7s~n4w۬uZ4*(_g^DKǗ!zD,gXbjo[>N2bll6`k*:v$f̹6&5j>}vq<6E\x' . eᗮ&}! 3qa%y \yڪ2`iwƁHO ?G9bcDۻk5ӄS 2~tv=v֠P&ZFQ/Mjt1 ;6NS1*uW9хP@R53r\zs$iuMLo=i~3 Af5!¯3B@:X{.FИB _rb#goˑG?j5}ui,聮! B }m .@Jf+{#{bH4M` C xq C#배Tp`w5v_uZtGN=p0ż3uQF}p$xFJd *EH1Gg` %#l51!EeM#`I^AZ_O=T}7T_jIa)LIP˥#,2sx75LKMZ'-9|?Ǥ ̴p$jߟ-wIq6d4!Cn x䜋e`j*XL SM@RV(%L 3r (Zܺ> (~dT#[#b2 ] 7D 'ʗ#y13?+@CU􃧼}^lJO/R-i"Uw( H$y7_Q.Y1 0'9y'\2C*pb_dM (sF;mZʉ̹aepÏçQ"<㕉{Mښv$r19>_4K CQT+O{#Qp32=1J%BSHFI߀wX&sjI׶'shY<hJx lM V/BrS Tk>R؞GLZ®(&u@7QlFp݈C /j 32;- 3b]cV7PlWq1Xfׂ%+bdϸDW/]~7Ɇ9Ba)%EnJf-B%P=O|_ؗnXY)+,8I u0$o m9%[mT2/(?܆!LWw 20CmRѩSua7 g5tjqos0"%0x*i~xtov/oalcLjU}ɺw^Fο{ظ=@) 7Șͪ7y~gI%=^ĔolA#^84b7eeM n+wޣ+K\bQNZ4rD})YY|3Jh /1zf:H.* F天"*sA-,<&  -C5@ňX4eHu1,[OhX.mIH@JI>N}}Ym#9Δ"L[((I;EhThBN)n{|eXdSl CTA Ytu>QJz7{ N&㿣S~uc?WpM)oޗx +7?-;=:\%xKo_χ---]0 L3Y_q1٠q9j#$P,`ÆGP<ܻvpd&׷)Ӏ}uS[|/2T<1Ԩtb}V$z&[3o0{uc˸XPE_O)*d'*(ƹU3O]JPo7o3:kmث*UH6dܩ&Ocpt˖$\sIr0Pw7rhz@ȏb.k%؇f DJ#?ZF5rλitSCoų~ɉ&fAֲ%I3*i.94C)&:ǚocu䪻G2rxz(]o$` 5wLxf9/CÉɞs}bdIr?\Pϖ*[wDvK^{\Bbĺڭ`\ OE:ſ--;.z08^.ۦ#2=ֻܿlg . S[ $CtF9y3y/` SƵSphU&;7Se|z0Dnp8@JϝqAE%Gz @lsXW-F*=vF41בOnHn'9Lm,u."A`beH}cjIGUxDz{]{٘V>e);6xMz=򾨼v*;[w_mJjy\6lG8P'?ghmq'Z,_nIQ"q\"9ljP P`T`~bԟfbΝ(NпDQk)4,>VHm(.“biΨ=׵Nq-`8O6\~I[gPh >Ύ%(cR&hXiWASիǥ{wHW0drcєaБz^ơ=I+HW(%B#@j-) R8jzp%m3eA? r@yt]ˍQ@D4xc+z| 9߷. .(lD'XNHTGx8UHc<TX,imo'ݱ/hХ홎t/0u5PvS-5YxAr߰x7Pmkg A1|g*s{^6̈)Z2ӷ%Yvr^O67=qd{@k šVQy@q^B.g~#TsixSu<6针2:[=-I O{Y Xy$ff-S/3f֮̀ojc@6^ucg\7P=^utLyi tpSה'Vu W*7 To'&MaLSM'^Qj4eHf:NNT,#|.R0W ^sZ&S:7J 10B-6scss5Ɍ^ &:ug>q8&Y#DJwOZAN㢓B8h́6ӝ[Cf,TaXOrT۰~#'@Y~\v 2).ȹj[aG*~Π+WAb8˻$=7֔?z7KWfg'j[~|v@ß &r~?T gl7*ypOD]?xZfѷQr-r@_mpIJ}kDJ< Ӑvd jbl30 rP. bNR'!V;@:GYp+ ʂ\jgPR>.!Gfn::!܃"؃|vkȐu4vGGo1_'qg z݂Lq΅T Y'e[Ɏm5b}4axz%dΘa8Ucp RtrtqUi[M咋^h_$jAt)R&JmtY㔀8#~6#Q׉A`2p> F,;KZn+)2o/Fww"M"onP/8QI+^qzE{EF\BkX@iTܝ }^3w%FW2h' _9.+]ids-R8d~eG [s>;Dtugwws$v.g0SʆW0yqw^ ԏ1TM\Ϻ'/ m-@$GlZjRB*Ŵ <8i4jS<* զ)xL @\6,7MDk>"NhGFZ%;J7;1ìR7\@pek 0+w|4&)D"}[YU)9?ʔj ,rs:h-{o΄hm2zrGZEC t,ݢDWFYKmki S$B}%SՍO 0nkYzigV*#hӻ;`(C k6`8fzN5m=D tBϤ /1VVƂp Dl>eDa{P"y jM_)Lsko{&?1wP%tvԦ gvzQ\/8`N!Kzɼ$>JYϬcX%% .'1['Ɇ||Tia_|s#d`xn#F=ѨU&؝Ŷ:Rӯ^ۉ4Q@ڥpY\%b@U-5^-JǍz/] UfJh|<$ ε ٢``/g+raqyh瞨] B&+B.}1˖t8` vk+it 3- 3,P5E.G$|m[XC*4l'/uޥr`K:WuZW.ZҽdI( 1os*q͈OMp`X0Ւ>k<84e5Ӥl1.((Av Bq2׃7t]q/F}E >^,CZZ/B_oa&ep pn?לH엦zT\>jFN6}#&ѕkIGoIy!0@˒njM2+>9H7EkZ7 y/tP.q [$G%kW ?ʠ\g80]y4jNٛ_e+Цz'0Xh|8!ANRp$mt.C-~s5 ?Z Bȓ`D^Dzz)at`S#gi$䁍s܋xoSA{KG yD|Uj:麍8L!z`9k&ƞ}7,&XNwK5{g{;kofx?GzkDP' AT..64m例 _HY|L=>yA~ ?;F(\5R#YTty jBr=N3)LG"#rSh1 vגPLQHv9Y 1pm;Y$~aj}O™X1$X^Sk[oLӇ]U \qNu 2B/˃h##H]Tўlmܮw,$TMwEoҀxWe"&W W߹N;"Q$^0ɘ?Y?]]'H7Z!9LoCpoD5vzчEq>g_mW7\jK٨-5EYw@p٭FOC{jf4=Aͪ,-:Lv_Y-T.J4O܈ՙk|X*adr)vh &`%YW =L'MF竃n{e-ol N`Jm?n,B/5F2% p 5h]Udu-%7$p' s?;HvA=5W<=C)8(.u³7:Yu,tO_ҍ .ɥ H;%aq:"\xTTҝtl #k0oh(]rop!M)Ig$1]Z%hŏ?2 ?мQ h V),n,xӴm-Dk+' n ^%yPJ8dF:#|΂&_J ([hWEnr[ L _]ɧ> r稂?@SW%t3nMX{e]#}c0cD]PM32~X@K%/wj#} `N+#^>z #N1𸧻}JΘɃ>cRNEsy\x X2by/ %p:C8E L1X~RPΡ"w蹥J?3DnrWx*W 直 d-~d=Im2%Xa zbHZX"}kjcۜqnJH& uH3~;){{z"ǎ|Kz/4brch n[8Ls&[@̍-lD=/޷Zx-.E|SCu2],|;N>p+i?ig/>C^IS tPzK}Q;b+AlR83eD;B44oAח|o }ՁqY/iaՕ>F5%dSHe N BD+LjߖQr#(gJT 5wXn|_aO@*"M֫qK]M i^6sO@!SH}HD 5_ܛcWw iYluX ,Ls΄w`޼(J9І: J?@dYײ=8} o=t :"4!f9>&4<ylɢٻV[4|JPaF(hbLvL1 S =(tA)j`]N2]zKhnq>|M]k}u״hܗ+ăGA4)J9yHd ,4j}ZR|>kYW/Gm)}$_ wA/7%cmjiHB8as`O։J S>mdNc|V5R@?)aI*фuwAD9AΜ9sJ5STt$-v Ic` q=wfw0w)q4%FĘ<ܗ٩ʡ%7d*I:9nD޾efH pMeȄaUPx!k+Z+V!H6a TAGm ?((j{un JxnA~KaU5?XXqᰭkߩ`z-J6< S6Q1 =&u9sep`<NJe'\_Ws`K3~·h{{1_q!^ڜ6mqQݝÅCڽASvĝN9QTT7k#C^1_H|" # ԍ:E 9*+MWs%dA 51a > n(lb  }y9LI$dhnw[Gd 4!Yc & ܷvsӹg%9\`B~e>=b@V%}YP cS$d^‹*8]3Ŝ2ĵJXbS՝2b3J9P,v%QMOtm\]E[rYlwiH5'R#i^yVWv8EΟJ)\QAɮUf}2@U)a}. fDd*IЃϨuԊ9N*kAηW2wȼeە($.lK<c%cXv\hg/%s>\p+a&gNEǎ !o]4ncçП8μ"ղ2Uh$b[Fhy0XٽEd vvTHyj抧\?b"Mu=!R| wYt4Ε.P?O<)_sDp].:f%m~)To!>3+LǶz&ۀarIEu l$RuZdJdz1t9ʰ.vB Tەϛ8 Z螊ܷX׽+,~Od$犨)D󠽗u½ r}pGp$b,aGۆC?s8)ڍۧe}?8+AkǗ>[eLl &ݫoɃ~\E x xq@ɪtJh _&Ry8ɽdvybj۫:v clH(}E_S 9ݹ1%Cƨ,p=cMA}o8h,94D,u"6֩!Τl2?c@J`ܟDmªa\xVHTsw5bKI?IFrǏ 0+\1})H<{) gt0..:rķq 6]DpO.fJ 4 .0UjxGwX.ш&&bEu~mc6vFaYTP +uLjP TCr)%I6S&$<q9h0c[͸ n{TAvs%=sq"A.!m\EXES=qBeR'mY g.X)0m 1"4TJ,|i3sJ.r[s͒DlIk.-B 1BAE=3}(tAS-Jf > \U@R"-Sk9_GzLbI"x kb1;z? j2SL90BbF5[̗p&)?hPB>;OF#ּ[<{;v_ X懳ꨭ*=q*Xak}QwrCK ;2'g hGAul2Q 4h2;Km\ TY15yKF/^| $Pkx#nA4@a;=0ZOB$`R!oYМ1*ЅdշkaZᾣtsQТc7#m"֙qp)$7!ziCx pʩCVtnݢ,nlFhOFOxa$kS甘XYw* c[R{-Op)6ъ󖗻՘85>> g"\h<EٺKHH%nOayrUjQb ;M1~0)9v Ҫ\R͆/JqBj)Vsd/ bl+ғBBuCR E!<:\@kӮNٯvⲴs[Nn>q@c/`jMɣgʝ1 70+?! [SǻC7Z˛JI7j=vˇMgGPcu?@=3ssMЧJ^ш>!_ 5[5*@Ҭm2t/4yMe Ė&.qlh*NI.̃rͲ멻i0#_!{CrLoXVNeIN`,BDq::WHi$u䆱FX >A1 L;K muᯀ8uY+hH 0Ol*|Pp[3D.Ew`|4 dsa&Oum_bIōj/3avmu+(ʿV7sیˡAOb29`GHaCvB1Zi(W |-Huv,}N̓Cm])wg|׊5~-42»IF Z$z@rS^{S?? )=4qvεZdJח*#R@)lz$xp^I~"UF0sJb/{9ʂR5k?#hA4z#SKZM'#Xӯo]sӛ^{}_\G\ )r0xDy'JE$Md @Z"{,:3 3%y~LUo76si xx^+s#nz UtcVvՈˎN5:J<>!hWIgRk&.)Uon!F= {7pxS,6f;y/E(VB9tuX@+DheyCl;⑏ez?Z<{ɕjc T|fVDv][^Xg_%ֽNR `~̀4ցG@a}:h>+6tT6OHrfrE~b}Q (YJ]7T$5.=ś 6*+]J[C9Ӟ03!9nHiƞg;MW_@~ʃXjp. V;olJ <@eU;Za`0PQYU`_QxֆhA:Өj,}c,-wpc@Ki->h3~^>T푬.^΂.B%)wN|<:F vЪoj7!(jctma|3V t;WIe^]2{Y=-a@Uܕ{l(E.8S#}kt&NE}<%5~ܲ.d}KAtsuR[2'$H4'J^Rqu;cojk./sߢej#)ffг~?fω3=>.>Hș]p<[HnlE|Wsg51749!knXϜVEjd6Th$z˸qm㡵L7}vLsXs8}gD!X{IBQpLg:!X?9_7`ꇕl's qCh%k,R8BAnʲ}[b  <¹xʎ}Af6RBgoXc]K+XI7$c$"cIkMzQ1dP|?rZ 1J۞QIwI-SOMUo Z0&\¢!<ί. s\eDic3͟\#Y]Bcet:|z %P ۪YV&a:x|ZSe45o6t~v)uE<[}!Ky;fRX(8rbS bmj5ok}{NW(PO6@c uO5)sBkkT0P=d}:ǝ8"$]եG^f{l:nVЋ~Z:u0a%g\%D[|` qd ?gN註~=F3'wE1n5X-m+ub@tRɽ BI<מYڔ.Oͱz*}NȭcV#sB_HM4 ŕˇqx^e@?Y<Ɩl`C^kNs 瑋-*qZh- НD^pxHD\rr77$/-B.hd֟sPIp_3 ^fĜv쵫3.a ;j nH=Rd04@>5GLBW gJZߩeTY:ݐqGX2LCG պl:꿅(vN ҕ; ˳S{^/ fK y((rKhdW*I+__HAV&NרCW]Mzۧ_ӌ\p`W, '4xt21w+ԹMֹ`hP']h!5#jMgN iZh? )Xoaװ2&HW̑L(8[csO+XŹ]ձZ]^≆` |e#yJ8!A@'7dv7*^^keaxd~;PO<>h==?W=E> XpDa1Y+rf*iNӍ9F@~qYi5_&GKՓ3dJs?g_?cXk^6z4)5C~'}!|s昕Hfu67Xö{m '%aujrcE?X㯾wWS'-^˶j_?ˈX1E)>@eq_Ț-׋5+ Zd\tE H<,r+OW`")z ڈ@ᔧJGPlŊO$TS;6`W+e,ң3Ք\Yȕ6PMRtPC-,џ9~|*gl=ADaF7ee | _#d`i_(\Qvhas׹3jcSʤV$B`O:$F7n$G<4`|P<I 48>9x5zBdlɟ̷XI&$zʯ:3]/KA'o޷S\6]ֿɄH1wڍ}^?a75 Y<J:MSO 4 8 i2oA?-kx1a_O7,)(X\0Vmx AD`'LP8:[I2%,i`.ZwxeGPۛdIȸRمxV*DW>Uƾ*޵4` ~l ;aHcƄj.qƇސ7ҳPu27r1h*!KS<2f|ê/@t]+=X=9\uVBs-.naѳ03.y~ljXjvd2jCcj"%>]f/Þ<5KLji1,UvW52*@Y\ /#x&]b/VK}EEҝG>Vy\jP@쩽Y򝄋_DPt?q|钽>h^w޴? fjifnGՎUtĻYzzOT:ɤ}\ԴY/1ա @Mf[ɼҥSx&j &.#H\gUؾ,)\uװkp.!s9ب *(}7щ.?O'.6oRQ9#p?xL"/si?0觓^5g:JQbaMeMO`ێ'/}[ќzb5,RQp~͒pJgM1 ґͮ;8x*RqwiPS;F^ܸv`9@Tf'ߕG^z&RQ!!sVbƆ2No{7Q58X#l^:mw)eFs|{:js* \fRo.Va!C뒞4B'-R6`#f FM-Lp:xQTU%)k<.['|[{?d֐+@>e{,*s%u@Ryvu`*#eVkU=Q|b34S|mGM{Pjra# oFopd0;qL7il\rN䴅82IݘwtmQpPBKR08~teA>d^}^D]1I=Q+t{FEbv4@ag>ϭ0CǪ(=^VևQ7Ex=NM^(;:2R%YuRr:\DH|{88̬7bm3! :=}sG}TZC%r^7-wes,I ƶDE y .y5kI/aqJO<#VCd8gPh$#b/[6V\lvB'uh:(1v_D^K 2L 9KJԫʳWlfc {E1()^˫\2dάwD '9t¹XӇ"a)|,g.ŗMnv'F ^hJw@8(;PvO#ޓ$LNJ6{~!][6 e5^CK9.qB+XՈI ۓSTwȌ݋B繹B rѡRFjOד@UzrDϦ@[ZTJ$0eQ&%b/?|_! ়^V4J_\Va{Vo[HYf!Ά1,[qzOq*aflmU9xۭ$ 1Vyh>#<$㢒 `R@kHvl;xlJ! H ]=6o=x@ whSٝ& شL,.B nxK,|v?-;Io{ι>`E YϘkED$>'7+Sf|ܽ՝g?lZ@!Wvd (PKEDwrz)SʿEx}Wvo8U:ĨC=׃kFjDY_X{}%,kKCK 2iMS4:zR0;dE]oPkX|vJM7R&Ǵ"u{R)u4cZPR:Bsgg;,+;{2ニSn*;\fLZ]Tx h%wE )#.ІOʦ*K_@_=Zy~>2dseNZ$VzP"VUVF:,6VNOI?` ~nI 'F{ۂ(Ta@ ^U>€4`^s\zre3͎ k R>0N%a6q5\ *C" 52_0@C6*6 K( fV_y7Rv /3Rhws@Lr yj53-<'=}χptB˚#l.(?,`: >hcl6+EX8>9y]h\^E9HA&.mj!#V0 a8AD )W(X,%.0b <ƕ0><^"',4}VZHuUT쟩 P&;kGUE|1P^5 'o:6&ɸ<g> ĞțډsDnAU$ձ9F(=22h}CěGA#tf+9Ey1æ:mH^KHnQUTN-q#Z@H4N[E bYa]W{MQڻ{3вĔU5߀ywZ8bYwubXnWض#k] e^[}zFE-Q 4 GA׉+V_ .:~Rg݇c7Ї|G4˨U}:AQQ(^ֆWoU3o 'qT_omm윚oq;4@ n9|{yO巑,Րk1RDEm[Ҍ,ҪAں`_L X9b\'i#P6wsƓILcYpK(%˴NC59R׮ i/Њ׉EЪ@PZ^zz# S4w@L6RL5x+Zcmcݹu"2 _(!PKK !- n픆x?ij4p~ uv ?|-3%wqKpa)[x׈zʉǀ ХQzq [7ʏA-%B.]WhȨI=kdiK޿v?2؄l|Daso\(G釵M9 ֥ #殿yR+H3/<;gUJܕ/NH[)}bmn@ 2o}?+.80\'Ht9g1SQUMO֐PVӢgAj%JMMfZ4ȁh/_<2XXwQ̼ Q $TeB.%z[ؠ'(kùxCR'P&?d C#TqirL6\TH9]4Ӑ+r\*#c0@vbd q 8O'LͶbY~yn}%͜Y8O8 \Ii4U=AD ?tۄylӍDrF&~ʀKbrKV&wonW5U79Ĭޗi2@iDOp\5 rmF9!%~mtp&\JNrnťn8ub|=zi|؁: Ѣp9*R\TXTU3˵*\ۚ/Y qQ['_J"|.݄㚯Tk3q<#I5f9;OZ'hSB_G߼fIF h p`] ގuBi' %\ӎd/ #uԀZ@>Zߴ/>hr^=F~/]nw .-Ud- @cx&?Gԟ߿iKUALHz( :0DG>l[II_ژ k.}bXDUJXi㔳)ޟ 3?9P֋j:N'{};"#̽fm^O@R;Bx h|  Zx+^j fV/KwVmy|LoTh8j8Ϥ+[ǶD_uMcn"d@VPO+72(E fpXvƙCjLLO" 5]CgF R;SC3$c)؊9u][q?w7Fy2"ham׳xpl(X+DC8ӭʔ io P:+k*F~)ne"ePZnR+ܧZN_n5I7S`WXQZÕ"Șl3BQ\gO A T4 cؕ.'Bg9Fd~k8T@GNDpxJ/j)(F%F/,\T5R6@Ks`SA/09ɴP*ӎf  _fw6 GF9sjiÎA>7 u1s?s+N`i,~'2X;R S9(Ur;&jJFJ5(VNx#AF4^XX)r>%SM^ܬoNf bCGrTإGRh/XR'Fj('O`MF йMeOzI'q} ^AvD?W{cUJnޢ'P 9[V4-QVC!1B~]]Ux:~V;ߩP1>թa`&;ů~yU_ȷämQɣq&*w 8 0Fp!D#}E6*%/T,EEŧ[! LD}wt@'n{gNh̏Π3Bzh%IiLU]F2e8RmzZPy]yc<˹I^R%-\)[?@,?yNS#3CfMޖF,յ'%_WC 6Xbu\R\]xDOok.p2t1[EƏ22RXE\P=)"pDR B&WF+R>_e̗@H;*w|{K>!< s]^2hWzWW&!8.I) TGY xtKld9é=9.Svces X玣=`3(M7U>F=KƆj5j/]JW ݠ2.aTP7cVRܺR%6֦Aj[`sq_gf#4}Ļ@Tw-K_W]x4D~\^ཌྷǷZ6βc;E\bX=Qދ[TJW@JnUTGtPdc|(,ՖL04G_rf04$غzNyޝox$,eX\F,3@_S%X*Ԟ7ؚk+;b8b%Y1н`g()5~R#TzyK2SqVrxh h59Ka1vڥuD~d?v82{ӓD #unHb/,?-h2?+CAz>mAŸ<ΰh"7^Ɇ&NO) ]rĜWpi82nޱebVkYXۆN*NUsF#ϐP`]YAu7zSǽJg w,kKP\X+Ʉܕ O_F5ڱ Dezw8Ӹ/N ~AkuXĖdujLQGau \ ѕw 4WIB/ WB-\ .. werQ^Osckt=F7,: L.85[]VWZNY1V2 ]m&wͲ6h#Sǀn8AyW{* R&,m w9Ep;ꃕ ' rŒmY#F? qm瞡Cq( :1X$w*|{z2ߥ\':cܤ)jCca!"k]?h+pPc\QkmO>jnW mWHtcJel Xǿۄ͆?F6q-,$lj#F|@x{ ˭w?cX1S?2w#DȅFHBBp^*'tV(]]d9/a"`]Q"Tgj&9l 4L QU^gbpW6Adٳ;}h J!wI#cJXȐMhnÉՀzGer,nNEF҂$c"'omaٌV2 &9Agd5.kqCCkNdh1kS+>xWH:ţEO2ȬCO!2SP`y/ަ8WtR! <,h GMZrP_?Ta-d$/ƑK?&O[i4 8N.{$7>CD^`#:yhC$wgAyJE}kzvչ͆/tG63zRxE2 H3qb!J`7|Crc_*`C!hJ 6 ]h2^۳$`wѕ%4ɕ3< JEv Q YJh6}x K]/@vk&%WGbOeZ#e(m@>_瑷ڡrȃU5M՛G]Χѵ'~qcwGbrBW'P|-t(p^ef$4̾`g 7W0HbϺm*>>f |{%p5 Rw&R:t#>Р (R$ _FG'7g%Fߪͼ@`r~Sا6d)"k{y@s_[2fҕ9oO &?>F{lZ\{uoxE7zEΗ1@ IiA/$HiAhojHzLx۞ιHR?2*P{- (\hR{= u"BOpО Ҹ _Y҆sh߇B],uҔrUg+.G)\Jw=Yk> e d+:lok778k}F+T(ʗ:Hu $ǚ#-t_Yxt~|>Mzj"&d[czc%ϟNu*hl$.S7NJE%R4h:").k!VSS-cI)5XҀ|7h%u1::25tGGGR//"}{::TU_ԧWM[ IycI_`BNRg5C&}o$!n› ~Mpt7N76HUr֬W[SX% eaVF}C_}e J |JU ֡߇ IKRF )\Y2 Xg˴:FB4"0?P +.ajZfŖ|By+$-_^ uE>2֐Ї.iכq[>U'⢮I')Ƙ@{Q!ՙ*dԎk߀V2M{6q{sa UawڱB=iH5}a' h2hB ; mge=_Bj0PcY-cp8'GLHJ8gH7 kw-T|ZAv85OV;伨;}Xp?r8uGߜκ `8 (?/ӇۖV#!^ip}_f,-2H-i1FY+X;.8qG EY ]m>s4ǔzx Zh% }\ȴlzJApIw 4zy&`QǧУ}Q) &2*XEhOBsl{~$TR^nO]?*2C* hIYDXT[ާ)6T>NEx0T.BF*(- &(i~>F%П^UIPԷ/ёT#dɀrp2)I`टᵼs>e0cJxSaΧ/Ro&tUT( T~1ݱiWܬrc}uPqzYazҀ[R+"J찶B1ԡc\h4)ˌ8YiB {T̆ .gf%aVr8.7`]J L o Sb{DP $,S+r.:]mCy {m򱁲 i;øyE2[~5nT hdWX}3 = J=y_c.;ߗA&z/RTh\8^G,c_@roSv"icMVסzbY師*qCQy7PERL͵<{9C7ӄ9)OK9c~Qb|.Om1pa>lda3.aDשj?+{atX99 e!ox@n"ڹVK>K|7X.9f_A'I6+U{>i>@-W+i]yt=̡G ެdۓOay1hD#@'k6eRy>[J,Fs˶҈\>=@x @MgukKWduH&Z>􌂂7~RV~ƞA&j:f +8y<ᾦoa7@()}lFF]Q1CGYpO*@Mbp_fgN B-QT(qc-xYӝgʿ7/͚f>e ;8(&Q{>vU"*m]Whj~vTmVx.Aj>0͒% !cg^I ~`Gs#!ӿ`\:?8DW,Q~oLh2օ)3?YǾ:*ov|,@O8B{l/")+^ob^n;$IO pczqۤz^/v6.T(SDL$YMN5?dSh2Q>ȇ)Ǫ(m* =к&Y?BoNXY[ڌ~G;WYe3Ix$HC!}H:K1s5E?$ir=ð q`*lJ4m]k苨JrnB'cE,2j7١?}S,mn4pbx" 1P1LMӗUd3p_sgLUaFBAmrCD?M17@C >:9* 6b/bhR&;v#`N}@x^h95 LzżBSN)K b {qFmٶy1qfyM1ϼs!fCIU*&ᴰo}Ѓ`;NFInRGwSI3S5{>7ɬ"`0s޼+q&C/,%ЧHêL`k$A^JGzWUR[pܘC~vlOU{ve^fC⨪MEHʖB|zyH u"˜Xo˾Ή,9{V0;BZlFϚoֲM& )G/o.t&/Wl?_,qmAF2zń͏ϠSLf RBx:fܾQlwE}:l[ ;cʢVa> wd9S>wP4 5_ˏ M޲"1dSlM7Qᇄ, Ei0B5LkRR)7 6l7$)[8"Gt B`zk|Uql_ğDsFWa>*,{g?gxrľA}A~rcˇ&Z69tC=6Gp*`ᚣT?5V ~e~: }o3>;.C%9A,>+7J HbV w&ۣiATadQ>ƬFeb$KB%?z6 L3mYntaDq4e47 $zX=㎬[DyAgѥUj# jD#^ʁ~٭p%/>WQR1j4C4Hj& @>CXn]V?źB|)%?be lI~Źm *ZW;"DGmƚCQ(1P# нJ 3vx%Q"E>z^aVOZaH Te*DWﰲd>B|Y!a,AבA_+ Qpޏt$d#A>% *DČ4{?!JzG΃(=겝$c ǯk25HY3dK޻6^"<zM<ݙ,$fns{F%DRfZ/k9cCkɔ_[X0aL^׋|'9Z$yLG;n3w.UiB8ޛ`a:mT6ֻXޮڜ_2`iY+ۻKA-h0VKf~z07 NDQnIɁ#$U1K8}bV Wl<n5TzVFg4S뽚=]?Nam'd$ټw@+!1ΎuS"l=6m .ee谇/cmܻ͹NTMq U:xAٹN,Z-/>:wRgqk!f||1CU',& NW-J-yzpˋkn]"+]21:>P #+˙$ؖMuT+vTSdo/J*@h1 ta`.,DhŖ|C쩃Rx&uR#kltfMF= _&@κ@lDXgPwi:ˊR 8Ʌ3~D  "b_tojt$+ KIJ%ؠw+T6azv v-5S~[AH"vZ79b(Zl[Q3> r/݌lcC+~]7p"@f4bNPy}v 42;:% ]tuEʬ~{EcWǬ}xhvf_&=,t8>Mu7g{p# ]Rb!3K#ٽŪ4c L*I0+6ԘzT}ݾO;aVWRϪLs-^V̅P{U:@,ZiB2 fg'`jq^LvN<жټP ^+}3PGY3$}E k|\ U/?ZNT|m\GB( QhX`/`t~Z*2SFEs=Vn7,f;pq 6MPK&2īq ő XƐԚ4TL-b0+1QTp\P_9(5S- .r:>>t|rx}):sTn&9ʦsKؑ ۸Kf`^V|q+3bХ)aݝEA/J-I r5Vaz2L%Ak4Žkq{kz\#II5t%n%'i ŧY6e*@/xʤ|?Y .C@Tŀ~w#~lzE>;?jۆs}_%ݗE67ʕ_x4u6S@La"(@u-2X\SsL Ba<)[Cw㎪eox-088DcQZϲìӟ= [ѣL SN=Ϧ~gZՎijҒA3s"|D"nWQ)[.ұY4alʛ+4 qT(7̭%R^TB횊s}4'ɇ]'PkP.UOݝ[oT]ڴנ+@. 3XrwExrf̀UJؔ DsD0\nn?۱ ͵Geؘ5|0۹dѧT -2BUu?e2z'R}c\S;0*#yq˛Bf*=Y˦WS bP2imC Cba)nMyWcGUo,ϝUv]Q{4%v3L ~j:95 [idCqO@QSxNЩ ݁" p:C_Q ,L# 6϶kap]HMBGem;+k jN[prByJ")=!.1KC=/h(4?@`N|JlŊNhq@DrłC4I@\n6&+t:jz7*~s1U+ZM:fFf^I\P};_P6 _%/zNKL`Q$|TYqηht-%;WG3iA;~_{Y&i'?#ݶ>3&+Wz!qZubZm|p_Hwq0HKQ&Jvp, Zc^ `}&@^~JnW]5hg?5CRܮ=1N0jT{_ q8 G).}7dQc9fR" HSFI,siMa70G(&&vAS9bߑy勺'֦2.5YDVFfͶI.f6s Tk|L M6,֗R@VAUO撸NH7T{ WbdUZk墅lq&oU!)_`ST ~ P[k;qwx֗!('&l $O `EU Yn ?苔S4|938l# B;,OhЋݠTT}?{ְ z[`XfLz*kUvZ, RXFG=(1i,Ϯѳmc} 0,tbMU ҌmX8װ 9A3.U΄¥p丆:'x.g=~2!~Mm33Fq{4_0}v~vN *bG3l _[lxc«ԕٸ&̖C^ڳ2 %#Y9F7$1_?9ٛN5 ,O fcF׎"{Ώ_`;-~mn3}׸c58ݍ`@wIq0,):pT mK %ZZXd""՝^ُWl`ULl$F!q/A\ h FjY^AP;j rO~>t26pTc''-%f(!\@ls(`l٫>xanFaJ (%4PfdW1@A%Xc5=g'furiUB$0# 4@:*Z|o%;,bcl)(iy  bh[&^!}[ѩ0 >m 1yb4ܠMxPp'II8QS8xHkN4d0J<`URMˏ3HЬs%URW*f#+}N}'-J8b|ve.TU?\45̬7OC#-8ʗ`)BwS$RV'WiX$h?Λf_I2K|k}md3`e@@BؾI+nc@xz߽q|>N,/Jo#2:9lRrM7^Pǫ<0y@Cv.C z U)Q{:ն7O;!ᘰtm1CWIR[~87҈E`#r:WWŹTЌJHP ̅BJ&~rvD8?3)xS'c?"Ed^>_Dp~'e- ɃlXCjjduh.p 5bTj8B %n(f֝:"LވL4_}cQT@^_͑&0AyM$: ;Y~UdR I)ɶ,d;k$%̈nI<,A~Ubƶm_"F{, 'xUCXmÚ'yt':Dz,nX v1l!=oKUCAPlp-Ok|ur] ;6"~RNWH )Ff|qbd\_(|L3~f]ܑx֢[`vmuhMV1K#&aGWV5FN2 [A(3NPi('7I}Y +Yׯzz7:'O^?>KJRZGHY&tpںk&0-:J Т/rNe\f7g,0M0^U &۶_;V7Fecܼpu4 SEVՍ4t;,4]mM 03xү;;d&အL񍯣P۹~KoQrIAbvt]hjc+Iw8 K@-k'18ñj_+O=~q,OS I@ʋ*=fwYfQ=z2xS%1p] fi,&YM֢#ȜyZ^ǖ{ȕ=s8gfUu^@,rmgttJ3evW5sW%wcz?ʴetv/h ߑfN%X-n*rKѝG~x@s. +2ܦW N2xG) <{Ku~$LtG8ِȝ 0AF'<ص՜L4Nw]>^K %C tD;~,?VC׿= aRjhvq<4cXWͻS}2/tHy 3T8<}*$VͳO}! 9ɯZ%`!MxY$-U, PFi(VNLu*.PߊP${<`+\,б,1,IȐ{f5kQ9iuA?R`MW,Od^# ~%xxZTW}mM<%U09ltI 3P҉d{'=A2O50cU[NB (O*~i}xBcFhk^Rb)}oIF704[rb)d}G|.{$C>߀6 [k@K]EL{hԥwdґLf^W$%T\c^Ύg e JCD|}x'>iuR䙯[G~5)P `~#.Y @{M&`'5ݐ-o#)bH"567a d7޻.R#{PxgE^PNVR؄[q7eTzٙ%ŽfʙqYitbHkOzG~[:ky3_Z$S5fޤOTpzz>C%=(o(I^g?YZb? SܨpdD,^bUrxSc0R7RqȖT]%r  Fbņdo溉&)F9::p7HY)ڀ'6~$J(SuP f)Ӵq$L[Cg1<|ԃ޻DFpm |.ʫ&F9SBY˝V*:;kܶݜ~kz{!y63uHmGSIcUdE˽@<*hCk}8?yNQ]U،665 Vߞ>j$4<5_f^ nzm KdMR?hkܶw Wg+j vfhOP}~y$Ӻ OlrFb .=\9T69&%V 6$eg#t={ j^e x\E{;8S?j#-wBWkE LVUJ߹H"dVn^.sf yCv <gj9(3vzx9`lO+ =(> .Ѯ x* Wչ(2D,ib?r5a~$ %-~ZK`$lKjڄ%Fst^<25(]Wج%ԑB@+D&heY߲?kE.g[YY&ghXCIdi} LU$&ZZPAZ]F()3{-Aº7M~E@8ރ<(Ӯeh d//piUڎJM5רH.ȹjo^ f5="C+ǧ~wGI۔ 7{>uNSpgՎ* {W;"<%6!ۼȢẕl'Np"KkYx&&[2GXKNGᨢ#'tkd2Ut/' ԁ8jM,OAw*!-`o-<氵g 0:,U]$bIby_ڏ0/):yoL.}?a&Wu~whm>Z@Y@ q:-vilh &Od#N }H99h` (yYuL|6Is4"5+W8]W&`WTi7sQp*j;l60jH[ږFïlҔ"H|6qӡܫm6iYY#}>4 b8v#M%Vo+fE$&bz߿T Io:,@x=k< ZἙVbM7w`HOx' =S{!М.yiPGt"`' I)۱}L3ݽ1mugPN2?QM݆03Y ԖFu0;= WDuIлZ\Fy*KER6CTg~4@_en*J lgWN<0tਈ F\B_?ǒm5]-T?%SBn[n<1h:ھDFILoQjepYckGٗ'*$00Eڦ 4<g˴ƿφ3e lu_v9t'4}+)KnmەPm|"jqE[ZߔE娶 @M⭄b禟10̃)S^ʷFutqLWlf=<VtjOPio sY,9kn68Ow'>ƌDm`yf$oԝ׈#? )3s=NQhd<׉&Q]n 2~"_Hs~zpiȒր~k[/Bvzx{v*">(&,荊 4r{WTؖ٬.^vp\Z,׋N#N91aeY{iGmԂ_ڢ$0w伧N'g/Nyp7@uف?8|ډ(>ܸcuW`]JZ w]z|^4'Cw)Zp5\f]!*1}?bZ-.[OV#zBw67ӅՓWM#de3;@9ߎpbcf %٣fl s]c2姃])Su\|iC)j^ЂlQ-$CM=)|sldHs\p!Tdh.8 gj7REMtrExPlSθ^r_ڞz7 5T< ][OSDb2poX1. hLGOnV>AHq}2YeO+ 0 eYj:=?1e 2YpTxYf(8/_+rWDJ jxM'[QslkXcC&;{f*T&sdVNm+c;r6r]"Q"91%Hܯ6,W8Pon"}2esӁ@ R1J`wafw Ĩ[\؜̨0?#3k#L" )B=^cԈSmP;r, 37+0>`.˰"C= Rw,;70^aODɐ:&ETB)5;c_҃>Ɇ(~j~'m!1 av[I%$FzE ֓m-^DWei =5d:1 ߷0 Pj=wR̠0qHSF>j$Af[qGаd?TWԄ  ht EƐT'tl# )J'-9 D@ ;fXĭӕBUsV}* ls-.#ewa8W(۶;*Vcbp:au{C9׉C6~3?SB:9yFgɁ,pc}Qe?Q'!'.c;ϊ#(OR{fEŋ_:S˃VRBEⱲΨ#_;a0%d'UQ@Lb 20w*91dQ/Bߢ? ([V=.\q8)tB|%TWh5!I_z[=5Q)r ^k,OC ^b wSx.k?.I4{qhk~s٥qlɼS6i(9<?'׺ 1YY^׷7y4Wڢ,:̩QVgEDrMe<Κ7Ϟ@o1=De2&֨ڰ[\׹R/B3j>O0:K+i~ +U\% {Cv#6@(x;X!lٖ^MwY~dtT%RC.Fp^S `\ƠiɰH{on=hٝNej}|}L@2I{\ʘ۸U^c(uZ1 [5R\3ueD$<} |2s6FY׿v83b^qT:s=*:p >ù{~AI>SaYx-m”G.QUY(iUA__:U(K]ԩ%~rX ͎ Aq!{:?-5Rpy0MnHmK ś,|qv:d慎l!& mN9- Kk9vG͔u* z 1 m1QK]6fh/pug{𸠬hk4 R<.EoмgNրnQ|}Z+v^x>!:3kʖ,@=Dl)ҁM:z62bMޥ=(8XHE.w*?UFTy-"ݫAg!\}nNQdR`U0)RD/tfzUFxWiJ1%W{K=yR˂eKegM0K&"&H??]%9jW~.>hpziZ'.KF%EW&[bFz^r3POd.- c nQk DߕGyqRZ4CSɗ ]Bh0fNbvs۟johɼ s#Hr. Ms'a[Jgm)> +DС8 '=Վte]NˎuL?2؄45jwKew;< jEb~XS}p&9my$>jp .bT@{ygwդxOcJh8g4 վ VxVD.zuD伋; Y*c<#(IqtjG |rKc ~R;~S5~paѾ5hUPȏ shnlIvh+߄GKN#zk k.A1x"qXZpI]Hrs{>VU_\,sb.f4,ړiXjvmQQ?ӇI>ꩄ jerUɍTm}|hXQsh*rIp Ǚt!=l.>. Zi ?_;P~u*^!}l!x %qP:!rcN{JN2!Ny'U@qd茯+ߕ늜vp\qg}G*ę°}dIZL4^# yQ&\nDD3Rk=LQ[۩=kg25@}Xj ϲ|Rq8Ɨ +|wDP:뉹 K3ha\.̞(; $F)1 '#Q{ƞ cQq ;Ha%c ?IPo'(\}Sы zʫtxCRo3JOg+܋c%=j(HFNGL \s it gga؞Û;[p$ȫrt+82H]i=CZz–):mQ I,BnȊp[C0~'xAuE0sye޽qZEI`Py$nNԤ ,=m͢0"?b*P^`lHpDo D73.l;Xq $ қ2-x\lo+FǣXf\6v>㛘)xK쪛+יaoSr>&4/qtԓfA[qVV/9J?/lZ.}{N$*CJbvGa&a8qX[式5B;)yˇ gB5W9ޤ SrT/BOAg*7\m%fVYVr(6;P54݆ icgM1H9Y;T^D!Wm~&  mܙ,+w7 OGnI9is ?"N/Nm]mvwJzEBzT@fm*U!9Bk\}? k{rݩxVq)x,i n U7 }~^E9FHtϬ&MR胣" \FzaBվ.kcyZ:-tY8EǺ8'"4"5^_e0P{iya)i #$=)e~l>lxW lޥ.օ&LŸt`?\4JPKM@@!63"9ĐyK$ 4}#ܫE 5q8P1>pI?^l\ +& = 5u=c2IL 4_7Bl3Cz 'Vf# bBȱtA$@C6UXqbՀ] no0/[Vr熍G KJVRiw /_xdt$q+.36O)C,Κbk%SM3wȽZ81$;9YJ/[ůqVCR^j8U4mcxC>~& G" ,ĪZ+B{bX:^*'>vދڽ w}S4ȯ ޼F4@ǕL##kN䨚:)|/9%z:1;?:6rjG4%fK F} vUPC9`*R) h"urkX\'M@C5!k\==x.'==mH\`m ٍLf]AغQk i}1urb*1f˩g^Yh[YLJKsV!ƹ>qXF@5O[ClH]|j6sZVZ2T[-;o dr%Y2@y2w]{ f407*_z-[94=&𫈫c?JA8a\cJ٦1?<cGCOmyUbkkRsy}7S;IeX|~}i詤"rqkvGG͈WCnfe-{QuJWPJ9#mYеޛ %TTw"S4-Ч!46XfIKroD}XF\%k U\&kߊ@: b7nKoe?p\q9"Í`gbےkarıF,OmGN 9>AGogv~x5Ƙl*z#~H6g^FB"/ud֔ʓSMI=,F* C$'1!D4UwϵS,͐@eMҦ_Mw6_nAKkzd8\{HK+K 8ˎuo6&jܥLߡsK_@t;A2b^^k,cKz Oeu/xQJKZym[V0b13|: +{T.S3VHca"v=zhn|8"nASF~Oit&6S u$|@Ek/XfBz EOZ9 rLiĆV9c CUNqWD:)+u4%ε6yP||2ZKxJ,TC֋vz㱻#  CRvټC66Ô?= %l[ή6|>!Z3bnDƚBl ΪR?޴z1B `{GO=ҩ2lBMq_t^b A-K!)OBkEW6k15kDX]\p|VIWoZ|:k/V H0'_]]Qr&<])FrBчu. אY]GyytV"D,P@6")hHAHu/8(/g)×$e/j9;H#ө4fW0QB=lf@#ĵiLަ%xTx ;(;a"1oG4U t`XǾ4`2:AOy!)r`{eL = 1¶Զ1%yNcg)1l&(:؄\L2 FBėAg-&c{z[Yc Bq/Pvɶǡ`z>Q:c,؃ȬETK(V82 mjd¼Y.H1X3`aj9xj?/%֏4:RB16 rӪ{#,k)fe&VA !knIc][9u/j;0읔'!p̨+S=p>j 7c yzPDpKWė3o/"&&) 6!u%RcGTz[7^}ae}4^=52.$u==sxKsT3P|ӝ|&ےy]{Q-Ω s{Z(%etygExcwxU#ćs`$R&=^>JȚ /ꁹ U2I>-N3_6w5 7 19i,pt#& ;)Z վQxTڿlI?}}Q$Y*xCҰIX0O%Gl]Cu$Av|j+Eam`}sExP۱Isfܠ!g?}9T!w^vLHz #mܼF*ʝ,a|ׇUY;$@kgAJ3 }ji@5gWaʁD^.4@G}oa&` E-RyBœc mO)֎CeOfV V$I|#+i)zIˑ>6U |$05n#N6;UOOt7M hIF$xO'HrVȇ5LN; ɒ2<@,Q= YۡXAT!Ne*>eY MZҸa.eVD>?j‘ `y0 DTf h,rϧ̋9^NWfF[~x}N)A)Zt/x8/*@:b`5TVb Wf`iUeD`XN(li;FIRrإ`aĢxXX X{>̗AZ^>e TȹJFA?&gij&Ř) Y4W!޴l( -YԔ_5)L16dNraQGo g{ƈz,+r _?!elSyqiybVxJ=&7;jfT< nWX1x\_'vd%Eԃaŕ5]BQL>F堢uP^z5@R`MI`wC:g 3mIҼo5`On&BP3&b*h .sk[ʟ ؐѭ[əD>*V*MZMnԝNi^,^ cGEw3:W (e˱,o չ HKgFXA/]0}$c[9,AvzdKyGvZ?΄b&G; ̵"yŠ,`WOxSj($(PNW_,4t <$D֟ Hb/C|T*i v~xG,I^Fu +^ZZZťGQKk} NvX;PĊYkq^wqh =k(Z}H`- 3dR߸ZqJoT׶_, t3-(Bm[N4ΔO=w̥^~Y/̟iZx>ptoKw6^A0\'TaP 'd2^ g*nYmTc>x.p 8nٷ4h CFxDUxwu(*Y E5|-_ڎqt zqmfrJ-qeÕsht6ewrwkMw\Š":n:<T߶h J+Aru{1vܦӤVSjo͐%E SeZ!!0|l}q$A2M"ƀ %bαGy&×kiPb\dtWS3!v4ºj} 1jZk(KH3mk_!ЊgKi(QlAն'Nً&4ET$!8'1qCUyt /u̜oa;;8|) ' .ulf:EO&$DL -u>WW]9fGWlyTuiYyk|@9jXJkYaV_!~h_9a //6tMN&/'Wl08& R_ >mFxXc! EtK8rXҠxos*TP:AE!rFLପN2Wտ~m,uJ.2.#r-8x\ Fmhe'Т2U'/xRu- .)k (_$`=؁?遘/[ g {hm>5vI? 6)}]i <]О$U,&CwEL2st_ BV$#m?eZ.^'žnXQ:D/vҡL9::"-UUсGkaà`PhgGɞ)Ӥ΍۟qN哔5/yh{RƔ5R 0OhHso zͱv޲(ZD3+떅l:oYQ5sg^L9]&,ȼ2B0VZ BV-_ʹF ],naY8msG8[}á=׈B 'QEm%I#wO3AY@ Um7ԹaԚ5ڔ ށx3WgT7nqQeb8wYlbIuW0 jԗ^vSgC=|Ѡu^x? 艱\ %̾VpP[0s- Dn/lGȖuOš R%[kUHw¦Q|" &tvǶ1A| ?!${8L+uW# z>tzfRڸ@b5Eg}mLΞ_SyR *F7~*Cox>ZuZ>=UqH/D$,lې{jWW!8=m`iF΍6+gƞ\+,TJF7{Tyq~[ሐJdSȂxG8giW}ԳeLzoleD<+"ޞ6oWemFxo˨ ika]GAݥtt5Έ-P&&0K,`E)tylCAtG)(>{=V;N՞>'s_ ~NK#'8ՔYR =c;]&ێʎ4< 4 VX@Ԑfcf[ʆ(-ٙRe`J7T( Ք|WOB@N#!2XI H?JAjZIPB>aP׾Ʉ'F|wX -a#F'vDe亝|F 94)fi#;BR r(${,o-Nu$Ȫ *ˤL\*ZM9( -ݤE4]wU46x׻^x2Em=u0p'MqSoyFIaC>XE6uZ~%lWNNQ[E$CÇmH~vN˿J:%@ȉ/bZq6 .hdD~B,8R'Sy]0$2*}H& eUCR˚FO_0Wd UWMܿ\O0Y|5U|)_oGPW&_rhʭ<%i3>&Whs ʎN5αȅGKY'շ{q:i[hhQJr4Kk<u R2l6&w0[/LlhFmf?kwxbga-\P kCtHO,g2g CN_ƜrX#$Qo_5ƍB:G~7M ZvW`kKLZ`o==uiA xcMzo]C} 5֓}܎w HdJ>.]HzC~TU4vB(}IRRUwь\oe^-@}hܟ;Sj$fDYx uv]%]hI3B%>YQ^I|݇MQ΍b̃MhG'>;[HB]!wi's O rwQvUDL%,9 g$c- MΙ O4E *DdpCVktj3`ú\3aձz <5 ã^2l[PԥNEiG2rk+ Y)g+q\g&@8;D;he;Nօi;S4x*a>Nđ(Tc5ӖQJݶdB2w-2Ck&8-p u$&U/VctCU&T zbvw-P3fLB,i;ɒ=eFͅаY˘P#YBoUt!B7fl1tA涿\{Y!h/p]qغX @wҔNE׊8k'q=J °\Hh, EEtan_& 1wIpߦӕa<>;yzÅ "Y&=3ԨH[ ALPZ S.,XJz[aϚ LvIoc[vԚ@$kcH*͗\Y~ș֡(W<8ʑLY" -ߵ5@2%"0$ͬ((B *E^=6So>6 ӣ>3iQAڵ!\c& sE;{{"rIbj4fz„7.lE}ֹ_~nH_"DAik<<q"[#Lbo 1{ٌ7?.,A4LyU"Ȉ/97H:Uk,H8r#ځ8-,Cˬˁ?u5×'1gF!(X^n374Uhc-o k-9> Jciol\& @l'aZu>]cҹۋIdN#~bZ%vcccm }wQv+(hSzyvD4Z%,JUF$Zh{s}p};8AM< g`DU>K!W;3߂{ _҅v^3w_G.VYtM.ėr ,W sL&A cv)>W'H90qb0 [E/ 3c&UvZxO$X~SJ7{QǭafsVZv!F1D>Ho, #Mlrڞ=p2Ji1Flev{f<(Bn+#LKl4jhH2N*H tt0d*Z:}x)ڪ;WrfEF( tٕSNrLy/r/` H}v#M "+ЍGvpܘV$#l kXA9y+r 1eH(܉I#`d7^$SX0Q_4\'g\ٳ#lk[`&cl2k 0,% I5?j wqH,F.ckdsH;1Flb|W>A.#l,A:dj $XIV*~Ẅ)3)R;#F3uĨP5Q(HXٙU嵰q /QvQjZ< Q8 OXx?!ab?KOV q(׶b}io`n/]|xЍeBzf”A#kĽ d5=OTK"1WpFRfR,/+TwƬtw 2z r\:[1z%ˤ<Q$$0=@Y"joj1F+];Gm ؛g9!8@򥬨IzMi#it@{3!(o'# t@u`<3K,{;dtwib*L%tm$ yQ ?OИ;UzH!8^{\;G%:l@%IZf:5B,m|6ӤiofbثLfޞ?ޅ†꼍">c*AXҡp@ #'o_{vA3A 3xA9Ɔ$zȭEiI?Ԩ/xYlzϓs'IxL> >JʃrUOnMN<_lSWqNHK<֗'Q[FPKXq f&ZP ˌuUB9Ѵd'04t0rtpHj쌔%L8]2J\;+Rv{Q.Q&.4su,zQ8VI 8:Cc?4Q2tRfz@_yrk U+IJڰ3lȵW@p>T/`WCd9jIHg殩j0(\J &1&3D B4сF87o*s="E$U n4m_7q_҈HzŴsmbC!3gJ U+:&c-eN9sdnL\LҳspdZe?\@:@)QP]XKׅ*R턂^芿+ D w`(/xOp nўyC-ؙ,-æӉ?ThT,_>mZI8ǐz۴uƋ ؁o(x'&&{F[m{C4 n:Axk{ʂĉVH2x?7}铤V[`gs6*&6 ptCb"{P*D ȡ[A4b.XbĻe&B9:a-ºQ?ƽXxt3myY'p4м9N((hu-QjR-mB fU o&o*B3}4GŦZ䔋#`L43!fq\ђp,7 '/:`ή.$շ$r~Wg_v3Rk$a}I]m9릘[q Oӡhq׾:-h i,ȴ+V2] ?V`;ǘ %*IW Y!m"U_uN_!,{>|krF{@JتAGqo#6@M [֧ O"]&sbOg'gHtX z%ZCq^)tuD9Цfݬj7>NrAn)k :1@wqeЯ"O=0ZyK6{hy~~tQఞT=kwG[" 8} HsrZb h Z2<$n#nMUp)ySYOk*1.=x0O3Up]Wuܩ@~>!Ė*eI3sm=: t=aH F_;CNP&e,IM=.*[O^̵p]s!Zwq ݦp2Ks<]fo=W~%)y E|NtTH[)t bb蠓 "#sRƲ_LK$n/w`}L\A²@W^Caj͆PeB;ry/A8-Jd,'R 3%g?f͞y+임ni7xuwpjG K}Ebk06"\:lTPp1Q8['hb.5$++'IJ}/~P78RHQZK νT^T:}ڢ\ |[xjOduf}_)\}37Yv_oQ;ќB. Hۓ`IdM e?_^ƤPjz($y,n}M6PwDsFo,hFݫKdo\td d*ѣ _ )HK`g Z'د$ґ]iW+$dSΛ|E=45p?c dw ގS9잩Vp+0\"ʼ'_X`?&8jvw~D(f#xJR|<{ܻq,=<0>] .rnc-w!Z !:9 ~ua+EU53۸ۇX q0-|v/^ϝ_93Pb" m^Y~ z)s|=qО-a9\D@HJɸk-pzɲҷhȮ<>;m5[l_j1,o5Qdߌ7Y ԮZ hK˔}[D!G[s0k[2JAjzǀxbK 9o/^l*>[!b-Er1K%-D< lw)f1K rߕ2dWy=Q~wP ׍u z@,ߋv>p[F(^OoM|bڀALn 4%;_Rdk.==H>h8;b1)X'R_ !TՙyY9PC高 S/r}.3b0ջ+('_WDX~4&eJ[sYm3jX`W(] U%Y};N;<)(@!DrCSsŢ@oN/]AGo pi_߂o=p=$I[U8PjC#oy6ucuU$' dBKA%)*15b\$|JR%MװO@F ({&|D=J?1r)w/Q#ؒ=}Jo$CR`:2\wTή;!2"&#2&AxgC;U98#`na/9wld_JGÏY3`dDlyuX( ?޹VcʧDW$av!ZH44qoUOob?i&ՁL>&j0u[&w%+\41uV:9>/O #KN6J7y$-1w}d4ʠEj3:(Xҿ(%*: բW;;<*5aG#"?Y>C4Ÿe%O0|xԟıcA%7^ru9z<R: jEaZH7es{gkR(ޥ+v&I*#! y-1k&L6մsfe3@ؚ8Y Tb&ޞ,Zl#~O݃%PͅoExc.Znϗ]3"ɛIt[--+_tбr[YyX§7E|8V~(W f] .*u̧`h-E|]&vrCe-?UfLY0A;7UvymRa Qv /zBPƩ2aSC]s릾>% Cc$ra' |i3Ɓ&bmX]*x߱ћ|=R NX;&T[о6 Hbb)NeX`)ĽnDJFs۴eVnmƧ# s!_*w2^H_-nf ?gfeA-#0hGyG?W̄*TKF77?@*5xb<!MĀ$ż>fV(LK \H;+2O%j jpoxG9p : mbb͖7i08)Z.2rЖb3hfσv&ݎ}F);g3$"ĥm:r,ٴĖ(d2WDoEǮ`oȭޑkjTg TG SME7;&Vwq/:Q} Ep|0u v9RܚPC8`^{u[;EY:kSlu']jc7p$w ! J$z"0=c:jElBtE)^.0@"v9 4sy%{lz&HV^r ݸOeOzk9H6U0,6W6_C71]JdN,g7 }| ]tЂP.,ൺ  5R2X_BBҽ+:4!B0"٫.ҳF2ONC 饔G=m`U7dV? EovH ?x8ZEy3/8E&Urfmb"ۊS.(>p:2hdJx/f(ZW4R|8^gS[=P3 Ƌ58gS:^;>-%tF^ TlC!E\{/P8WtC7 + ׶XL싰;Р)<歼Cw8dJĴB3ekUwU5WܨpI?ܑ629D0i3Ig48`ݍv-ޫA4l/ԾJtmd(fS 9%S5 ~ a"-c$K}xjE^p+k6EMgmSfzcKԽgܝ379t7}{~+@dUfK2Eʙo,k7ʙDqU @sȧVvä')l?SB} 6`Ib?$1*O-"5;#-&N6O[:y5PaEz XDc#8]pfSlDVbFY]t9q$223CwD8ʁ W}|b 0(b&gVʋOhɹ+7Atl}4Bh aO'~v(J`7ko7뙣{~#ʚj}X-!aUWMN#, NU$3϶( ݎ6Dҍ]#& %\ϮhPMT lRh'3+5tI Q< [V=ۊk|>^^O)R~{b|%WDy`\Z bdp*)"ɆYWYѷ`NFVlJe)J-KSMB_o\toSqGevX (YV>D?vQ8x* zUy 몒W\`կ]'"\!}qوU\IxHs ~C)wl=*nPXDΒ]hjZ"v՞:>xfb; WHQĈYr[$ ߔV*tiLyD=sf}KEj8z+yrNxO,,%͋fQmka$~js$ 挤?`fʙ`FI3gR_QZԎz>Dj{c񆡾m1&%^˷~F.Y2L 3Xg:τEյ@uc8'%0@E18~|NkQ Tsa3ehziaJr=D#}8683{mlj+Yhg^}Zd2w%OPTfo[({C^1i~,'B ©$Uhk.4c:0N8([!ݎ !SɋfyH+!͑q." ~Zs) ]<+bSe6Lm[٥$1d}k?[\`x+wH;) ٌ`*۱?w !G py5@--"IWٗ3;ޥ.fBs;.2)ߑ/ ap[[tnM- 85#k3N|!KD!#'W)D-o[jhA\t*lͳa`S}oMkiO: ZC31EC.zD . 1^\k6y aM`y0oY}#"K߆_f‚%W0!X7˖^ܨ=ں/a(;OA%Qf4fv'߁CV?Bj⡳O>=~8?c}X J*ASN;Wٰ`t?I7ŀpXx w!ԙHAHMg30w'<2! ±Ap*<[T8ܐΚGJݏ8ݻZ\L߉(>Qء3Y\t)-h/UL?vwV]`s<<< gAf+U $[b CR!v? V6v {? Vd-]륀#瑥Wcei5#7k/a$ZKCAϡR6bӯIKqfhml"#23\ViʝX#{`/:h.ˈrfCRolAQ\&7Z!PP\B}ۈ!moc 2⮷]nHrq!3㋡ُ<^t[?4 )Ӧ1"ԁ9kHNiٙ΍n{+PlnQL7&% 4'.%UU{߭ qTH[!%](:+ьl+)P%Qz )rMW{@HяڑhLJrem z=4W#j/W$4T ybMݓ:P<@#Yo9Wwvΰ ,1yQT1|u{?f4>=:ZTfʇ^.;,T F6}EjQ҈Q2$ԟ _ Yv:ع-J tݍqSTKͰ:H}  †1w|(t3#j}-EsUdƤo>XH|DM\|? D}Jb&M nD񎇝#0-\&4vT::~Bp%aOWK|o ;\Gx4] "`1tK+ݗVÎ#P 07r6jwS(`8pd-'*=_y~,&B4:g 0|1D[XouX];bј͎}^vCw:KWì:ft &W{?la-VA[$QV8AXO}yPnK+|;5U~ٗ&*m7Kφe?*f3)MU;. Q‘E/ @}f=^]|\iDtc~,M=+n!}zf 1U#*Kmrp ̵vRqƥv̧թ•~DQ%p^l4饿.7ʀ1c`dc8k03ζ;3FQ~Nskq'DAm-ĪUɊ7#NBz\1KBpwVo6"6rY2-aȹUs.pA9K:R3+怒" 9aGOk=>3u-IG@=U` @4넺@G1&>P L_,X.KCZ"4c%mP˹Gk'S2"* úFK{ŃBL 4M#y1+&G [e0[ENg #&2S(فImE)~AE][O@+9uZ[څ7LJnvҢz N˿{EcʔT:il>W9%"R?Rk" `74i8)D*!RqԙSuh^#F7C/T>!q~Pbm9W?’?@ 85zk)`}RKc’tyc:T(P|e3U ֕]خKS ÕXY~n0nc X4hFZؓ"X3ԏV dEb>/8fu-?qK?ߥ$0(sT/터>p<9pk'oo6ak=uFBn!-ԟ_s7kbO%P*աx-GpD|'cwݦEm: ZFuEv'ٺk }ɧ-F}J`<`Qu\qiCtYK qMt&'@ivm!?@a2YIzʭd9"V)UYͰBZܞyꜛ̄5}3]!gI*/͝#.0 ,o*x*+SW$%fLŕqz-IIy.ޮV-Dm1~IfAG%v~݉lk2r@IWRX{*7:&%06fr w1Ґq){hTweζĤOZ1:٢bzGc]b]W7 v<7NSx]vA(\*"*1ySNa3Q[7>}gɃgB,CKx}_@9nX?B3Zˉ\x{,SZ+' ѿwwiD>օ;e|ACLJ̲' fM}Ҕ.GB֋ VT>lv 6b$s/ SКȣT!쿙XG{KLgYXZ%4ㅱwKz*}O1ۻGon SśP8]LRc]]C4z+xʔRml(%Kg6s,u(-w^ӗsBreŐ-QppDH9> 7~`j4x"sOAoPRiBv SWܞc|Wkm660 y; ZJzrp~UBL/6$ }k~S_&J` VSlsgI zjNu2v%uutNK=ޯ(jX&gi^)) W qN4\84n.TY;p{;]b^M|f:CmGF&KzBdKyq`',(nLiwѨ 8T~@GQ oϢ4U*h?S|ɋ;Kfԡa992paEn@3#vs4΁XoW~ TO *@A#%܏ZU<Ԛ9E߈D_f( dd+JtOB J 鷥7rhR] L<_=85(: _p$ro=NrEI(>|K`5xHׅSm+O_iPrw`63jHg_i1W5G};IKe|tu2#M)=~(!l"YCiC*R~]o3SA%LV#v͏aS/mՁ";?iNSmz>s}שڢ-cN 4au\G50jfrx4;kdVB' ׷]c<ƚ xblaP1ٸ<k$+eiF03"cbSWyUf.7vY)[pCebt^W\[?av@6.ߴǎ?w(k# AILRrŽ Z:+PW_j8F#27 bf~.yY@T=a|Ex٠&Ky{g;6%os!$/hŧE< ֮DzևnjA6;9Dp̸ ;|V#XW +=,uuHBǨ{ƪ]ΑKLkXa+4sAV5xM ZZ~̨L,Ŵs x\Zvy^P;Afڐq{aIO;.A $Ə3R S4GA1%e]N˔`Nkj$#Bz4n<`؉[ :ùF$"창8v x>BOqucS)j0cOe=4LC@XhjÏbZC6ISO6 A@l90M7xboyM-kjg64 B3dG^r b-lˏ!^lBs^ۿ$K."w q.@%<}@œFj<'2bڍwK\dK)oNkJN/ؓycO͎4E68*u$Q3ycђD.XV:s|r" _PY_߽P MT#3P,CH]]zhTX_O.cb}y5+(out8LY6Sw'3ͬY Bv,~}.ъPßuf`9|Yf3ӈC7Y*ϭDߘhB*ꘓт+0ۛV'z^I)c@cZfw ԩH4ZksV F\ T9Kӆɵ됷^wyjG_bB F̴@c1\Ai Ioynrά$h;zvh2j84>=~+8ɻ$r=@USm!H#}EwFy=e4 븡˳7Ǭ3V4ӯH+nsSq Hw^~,UW ʞY521]a'TuN, :l2NiU6Wj2+O:|ݫk yQ]r]jh.W{T6> :4c@$=>1\",R"[ji -u\آmY+fcgER'7;l.1}i tZAOƥNgb;!l"u%V?[hɻT$6]P{1Q@UKN9iFQDEp 22K=j] 8] ]= 6nZ*=O!+S†#AD$ 5tp7 䮙 @_uiHo@؂ B&ZT(H*Yt`h$5dz=)3>"W#q|{:KcajDuQdzKc5&kcOU"ϪeN+"o+]17ry>Q.Jf"!J(n?t0T<ǽe;)hܭ`#Eĕ[4u+ړ15CĦ;`  X17N^ws Y1 VȤV㷯A(dN%ZbZ>* cퟮI*ʂQHcfOeD+8:y˧oq(ILZf27w:|ZJֲ౪u'VC72?`6*E迭ܶd;up :( LAА?l/{)[/Zvp4)$8IZ"[` >hLt{ILy7:g< UC&zS98"n>~pqlv/BLkӦx!dR`VDY#/)ۜGP~qar-\rjPk.6lj%8&%Fh0m+I1xձhI_FU*T=سldM` g+Ex{%c6K̷X&螎m{ >g%9NEQIskyYmDV[j8& @Ku=w%sE X(8EpcVbÉib='X+7[I^H6"ԤQ4u7YbUSۨo'QWOB=&PSY$˷@^)g1mG۲m.>5/qrydS^lq.r)[BU ZIoUrZ-CD_o-ߓx~pX4_A K-~cY%=8b<~GhKP1m6we2ׯ. Q}Qg^AشVƫX̿WNAORQB5OkIה Nҭ[*&!%q*E&,>5i'"#;h: _.v6Uc65O=w<J[W Z]R*pږ*n8կM**ǔ2\UR9wD5N Bavg5,",D2\DЈ$~)'Ao"sow]s#Ao( 2s§rRa2Vpv[a> IL1'yOA+eIrr+AF ű9 =x 2|Sط4dk@fu,n:geC̗:ɎBlH|$N ׆ 9E9%N4!7gr}]/l1 P;X}D h@1\y Wah)ͯG3?! mgovoQĭ֭:|!78XANUJC7qg Dm!hahYy)(,[@BfW0(̨t6Rm>7pixJ $! a:`݆zԨ1ަ5Qp5*y=B5T:5{!A~u`΢O|Ơ܁Z*ye1\;fM<9FVqn!!L٧cg?#]j'8>L\*vĶ qGchd w\8eiVd0kLAJ(zÞtc+:!3kYFX1Xy<ţ6m&05v1I:N-OWWxF#"Wmxl%rr2 75by7}Bi֎Ri$Rʑ4JNZh?p  H,,PRՇAn&!xU\գtrygw>LjX-5Q(P?tbb9 X%uؿ`TZ#[VUIydٙ&VTzZײmp(% 4<ށ:1)O}E\ #W.)"?kB~geMHȚEP/:3/Yhg/![tAt]Z"18D ZHkpާ??Q?d;$qH&a;1r60+:FEFɨS QnR3rdPc~|U81v 5o,ٖc%WQ}grmې#ރD"T\ʲ-Gʗ|ӞR5vac`Aڳ""S aoC@9eQ B|4Bv WVO;Q\:2O6F~ BONВ?".3QZtszrzֆ 9By߫U~DY?+gTdzSFz[]4{KE|V"S_Ԕy/DTLBG6*To`Q`=W/sWOKlD8'1]#50ОWJ22ܯrN@I堶ʌ914^MOm-lѵnwJ%ÁǴ!b?D@FR/h >.,wK=S 5Eq'oGuF?7=)O:45qAԪU5jڢ ̺v`=Ȍ?zfRd&ُvZ|B4Jk8z^ x܊(,k\Au}j&3d9ؖNl'T;Лf;+Gu0C9rOIsêW4qXǥwK-7[l )s+XP hJ^ xMU`^Q.bSvgϑW e'LE9j0 @4B%%?[sWF+y Әٖ4ʕ jsΈǾزKҗ^=k ݱ2oF,0 h cl[Ѕc6,yafH UyV6'vc<C I0zʼn!.(/,*^>KLcrO s@my|bӓ_4mGOeɎOPA֟7 }a^Gx4OmuB}ű94%ZDݛaOc8}ȰOF${MxE.>hIiiqB}yᨄs ,FG[̅8xBr4(ǦBfڂx@Sd}g>rCux6^E`X~.\:|x]Rp߭7!6Ss(U>yg94㚂J0l9bk?RIm=.)'$7b%թѬ ̊6"9pOhc4VK\Ƌ?+>;bB8\ǶA1J"}|? VSi2qXDLj]GÆqθ#2ͳF$#Sx/<ֻ¾BU!L'K@[9ux0G m8%2ǭRT]~Yor=9}D_K.H^Fx Y>PXh[ dP^kbu;r</h^>㰥QzL=Nhq6u\(/AH2żb(l Mc~@~LH=kP]&ڑYN7uuQZ WgMwPY&n`u%%c[I1Zgn@ +6kS&v-[5m#{Pd1؁tZQjo3/q/\h`ܣP.'?*BS{qz]ё7L/gW^k+~g'uZQΞ 7Q+`x#m*,^*wٵ l|U1D ۶8HʇlJMOA8ҽ*NHrvv$d |cqwՊݣZFNK5t1#5#F_onʌ< @`MnZƶ5l_&&LPr)B3ъoEF1ܖm^ #״JQŠ8sǑZ`:B[u4#sL;aI`2XV 8JxRq;bBab$asHr6+FpٷMѴ3σFtԇ'P7j([gYܠeqS =t/cX:ɿ%t<q\8y4qkrͥ11* WI~xMh=Ppp5fa|}\[AA)(R%.A84M4p,;2V2H+wZt DM}C8CBALoX_ˀw˯_Ev ڗx"zΐb5nwHlASj ldcL)X6jNF WRG:_a5x/i;#d_@9aQyYQnPċ"v.'2( BZW'7ʼ$Dؚ\֦N>N:TjV[E dj>2ź)|i|@kvcVڐ{>zG{x½˰>==>.Y,15Js Hdz[Y#FnAB&t=,ИKd5i7eG%y&wqeS"ZCpjqҥ#'e%*R \7MH̱DD9aKȷ>)00<ҨPX-F0&o1>{P{p$ro´<1ľCُ&r[?-SE1oW0y_2b$Fahce+e'0MڴZ3 yrzO-g봲tt2Y.y5dR-IW/>xN1SfL !D&Ih|ܭR~T[_Ay^*9i<[h6dq@E.bؿIK#F7pC5w+ Ac g#:KJ#%M5j`-vIƼ Mo9݇*'"*} jS*Hܟ~txWRnCX3IUJ>7ib.Д 'fKSs,oܞ81K4MLʫli2Av BQ^%x?ɓŧ-iy~{8kkVONtV+;h!QÖ.Om# W7bqzk]:!%`hkA =A quñ:xH'n;M x,/jN r]a̭S4?y4= C:/S ZA{=YC&'VRK\7@< C7CMAG"pnJ0J4}R.gh_+P+\jußa.k zPUJhJmM%l9+zNi]w@^0S=DMGrѷ`ރhKR~;.[4OʠR- c||hPݣ_"᳌VF"Zi֞i3W'쬆p3ݑr3~q Nq.~rΏ#T6B뱖3h}Ej˪7z譝!nʖM Fd*++5@ZHwqK9Όwt%'DDT59oBWjt)':Sxv 0a^־rW[;%)ގ|hp TқH"&TO+^L' TJҾfkxE*w<]c fn$#@H TYo``qfCUv>chw:2ΛH(+xޙY@f*0]R\"cE3`>D xK A /y6Â,p= <_;xI`gaSi15F8%ԴX7_OY =]:~C1čZkt!ٮaQ%KAV cW,2L ~܅/ Vx>J[Cr`5rVqK䓌ysOT,M3`n\.&U%p+r'+i;UÜ!5{%''R,I#LkDnfT0ﶰzM\*_rOj+c@L gAqL1z^dTiy͟OЍKP/lM afg3=Q^^'d7]%}Ww⦑]qm!3 $;.h V"``Lg]Ne1Q_C ;|OTsELvGB_M8e #[m؈͑An Y&'(Bį~wo0(6w7v>28檒#Kc_?wMYxTOfiL$kD-ӣ,b}`[SBOxRݬCH8^ ̈́|qsu<fm >;I &/]6b[Š Ecr2.,p(珟+h[$SxKXnt R<(%٢kJ )+J]>9ڂv4O#n=8atl]T}sVZ"K3*ɚ7szBE9kß=(1k"m6x6N@c} K Y24Z@QҧCdMlZI!%Njc35<>}욋pq wꅸsޝMX>|Nl0'ڌ̑.^RHٹ#3mSC] Wl;ɴ;ydz pp0y$=Lg} 2mܧvRp`KP\c7/⫋[t!`7IZNd*2攵lshcD+oߋBb@fSӆ՚@᪌$ھTetw7e&eվ/#i9o#g6ӿ~X,l<1S*vGjB]W0Lh}󕄶K*Gg1*!o S<8.ϦA@x DƣYq-6ʳ̥wơYZeI@$3 F>+_tEI%$~ qWa;J7vB۫rL?Y n! J'x̾A]-3 ǣbHɰ a+]pH./y"܆4lox<rQ7V(#=7X@$sGqp6, Lsa6mu on<R^f M&8l;iN~ mv__2uY-NQIv¸QP{ ĦHg iG`W& ם[D|é57FX*@r'OB` O~hQy sٝr50y?٫4KLH_9#8K B<Ԃ%;c6m,!AǓgR-qAagG[?XMeT@Zf- g/s[mձ쨬4)j`4K6gжNkfY{ӉTo.k֨jO::̜ Vvph6Dd R{G]]"pVsEnҐ-7IXTlG4km sl뻕ʜ[DXڥ\<'5T%_t yÔlԻK(XO41in,XluwѦұ1 ։y-g:;C!3=IskѕЌ/1]v.4߫ l):MDW*)Zb WI{#\ lds8ZB85FkP9d{ja\s+QMlgoqGT%uˉ߾HeH+ɐؚ,u>ڌ͆GTy$A3׷վ̶u5ջ5zNRizX*0|s6z dlݳG޾c#8 @>4|׃ƷRYlw i'p,{&ϐٟw~poɏrY 4˒nKT7*F4 Z eРC>r p W^DrA4  ]^F_hY U۹c芟rqDƮoL)Ә3óqvqW#tlF]>'(ٷN8hbVRk4=ŇY%Tp~iz~e'Q׵'>%' ^W (W^tNޏ7o mK҇]p;X3AXޣ6[#N+,?[m7:^(t˫P@ޤі5 g" Ejzȷu-?Qg4}G3Z,EqwҙMU0E|^7q2U7[шłmmݢ2at6 yр&v,-<עֵ'oX\go 8xMU!6&F![Xy23Q2mՑ8S;TpiAQ(Dr HK`̸rC?3E?7ζr1K۰ROc= aH4KDJyHeMٗ#SDFRD4DѸoq*!%IҘ*.nrc29[A9B½77Ak-${YV Y v$#3tRg  =D#ϯO>Ec?x=D1`Ic+mnߋ?p$R֜ɥ|xY&0)xX:ecIHhguUdbUg:O@;{:'gq-81dym6/!e5" C<{ଋE͓͠FH}.0DjjLrᔣ/!Tー:J h,1 &3/~\9[Ate{q,M*89d[ϊ$]1P$Nmw g-`ls=4_y8׷KA*hr`$Eb_?@&il5"29KBGOYLe ը[$;Ц+DS:j$MZPަ!+P1+,JugZ;^;CئZXq=8WbӌWߗ`  Ap&XYCӖEI;߯v X$jq~P +x%*5DyIFM}%pWku\p-h`J[3<%{*a}8/. -zVPBH%gj(,]bpu"SbpD?lNkّjҋmD?+wEAPQDq^ t}a|B/s4Q=v,.٥U@+VLbAEv5١iՋS)wӅuΆ/RIK,w!1E4+dTUYHIaR!˭Eʰ2L 1g ȷjp*ip޿VGdÎ-0XҴc=8G+S}B9w]}[{Nw!=FՓ['N'*x3@iSd\n:c>]_UrW$FŮRlDIg YUxI^Va\R o1%a\J"w37VN+;”9]XqJy~)GY3 ;7/[R$\ JXU 3CJ% 3GԔq.7vJНh˯]T+2:bO*YE׾#'+mYgg h~ykL&R͂Hɯ 3!wS N; pzYl0ji}7*~Qd ei1uE B-*?{U#HSVşcYm'.Hg>I7IeUxTVh?T5FHZa'CDȢ,c޷EʰKku"if!+hS÷Y>-8tL}5{9u?!ŧD ϫoY)gP]lwCN=j5 )F1Oڪ((kžCСOT4+]$vz^s -E!@_Nk L'8e |scfdHQ9YKSFUԘ3!x߆o,ߢM:!fo?G5̂F:4@}E!y8ɂO+:&^)znv_yAdg'M}/@=拔H|`|]irKxz _nW$e5]@?LV{ 1[R/VBmʊ˝%E ,ӨIq%AʽF1p^jgEކ F1%V@ 7TV ! WsO< }}5x+2\eg=!="ݽ [)&%şgo衞em0 aȬ׀paOV>TN|XG5Xw^Jʦ˼<$ 67ޢO;$:9$ L*{5ko1B lkR)S.AdV LR\K~#c̩eK v1.EqnFу2qavSl" @lID$\㑞 ˢU8q+4~aD3ş>| YI<"Jj&GwRrz O*ؑB 4mOXzs /Üw0 8L8yI5_eޞ$V袣ME_)d*(0łmKCzd+O}Ć{^:q[lV#N 8k5|j>kEmeμO:6ܛ'ɰ i; Fh& .o-'(W1a%8J_57OtB+5 Q~3/ H:v꧗y!ؕP)JqWP#]' oji#%.Őo3A |kW#v; st%|n@^ =p?9 ,$ Zن²pue , e74lvqC0G:4HMTˁ摊]x&~Y=_c cۥqt9,L_7E UV%V3kb:GFo:IOu^_Z~P9vemT63:;4w JW.r+Ɏ פ8d7Xy Cg vo._17&!,={x!,*Y+nyA}R*'qݮr5OP|:u;eEa{{j5Hԣ."cc^zSJ#A>=śM$t'MCA{I oo30+zkLrj}w <4 w+*xi~qh}I2d8`**Ki 7`a{0  jq9bqdIQ 1zqJW7l5VOb*&+Bjh>枰)j0@8$C-]8).'PQnWnIhICmp0~,Wx5ğl%eY6Tty6O >F#%a ƈRPP'a Ѩvϕ$&N_왢LH|a*՞k}=j0VPDqs\+ #Z~ ytq\ kZyg1H~gSs):*; 2L>^#k1~)gRch# r^r\eh]K;?4]1Pd@xxJ]9 QBS LlHE"A& {'QXZ_GʪGX"̈́ Z?!OUH]\gz_U`edVp(\xG8Yʎ "iQt`Sm7 :tbt H,ߋ.vM•__+g;%RdO@|"4ጡ/8fCn;oW(dB]ox;U>/R>GJmrt&\|z ld,Kko6]f2qS[$Idj+1OqX #nrAOT)~mtw~p0>He;k> N}h6ϼ޹,''AlG 1ŮN̵<< &U)yXJ:N}9A 3_xgL.JoQƦU܍\d|.گ2o]]ESɿ#a6b?RxE,K/ .AO+>N8m`zUX#&:0RF I5ur&_:)8JCw02R'kChv5,5ՋmHj||ŭL ^ȭ))m4Zu@Fj1nR.qxB:S/+c vZ}Q юg߰msUy} >Buk(8?r?N$Y*M4g}3WE}wjE/ Mݢa(n>FOR[_͏ǰZ'fC@E'r#/IQ(PBF4 y7_=)y('} ~nO8_`ZY֤:asy\ߞkK8~ϔW^?7GLH2690ߕ@TR /9˗9^EXMD>X<}0=k"ιXr\c?#Cb0sU̾)Xh\υדsdHsU(ܿ7kޠ%$38#:8l`0cwiT,,ZW*Ew ;8OOr'3\RCES9L|մv i@}ޗ??ڙ}g(@U#cZJR{@\Q*6q/Q+U8r,8Xѿs@#N:0(x4n.qF<DgoJ_ox-@\3{$ntq8$#c~gK O\sS[N, 8y]o V}h GdE1Ȅ]^߸N6~h73`ʹ/8q:>4(#O7gnh>fWo>Lޚ sPSAR- Y=(ʹ~`C&j#tqWeH@7Z ^]=[hK4Bl'FĀYو蹠7j.NBj!J݃$<; 2Xʉ;Ъ/SY3qң\ܝOzQjlU1X\Ki3콝C9Hm/m?tp GY8CxTG˯DQ7/H{@q$K a]qYXԜ|Ե@op{L[G@&??6te'CkgldB}9b%UV&5eOM}-KK OpCF,jO$^#E;W$|ڨY+YZf+\ OOR |Y$+a]TwQՂ맢maoԪNWqktP^C\۱ ;Ŗr>eY{} ,>7<")Jl]Gd]'JRLl='{ ܥ-U!/#pW^2GC2~QP/eN̛ ߍ ~*\#N +*xV|lv1oѿd]ĜT;U?~n_FQˆΑsXNŇEom`nq. 5cɡy SnfUpW¹eY9 '(u7?hC*Dc]L+JLV0SMJ/E^.T\IßeC?% E; J(Tf=Pí{x~R hZdwRƤ`cڨ4Χh_V6sHxp; gF"Q?M#xNBkdr鯊Vw}=G@B pZٙǴ>^|Cgs/qJҝ{G'%$ɂc9PM Rɪ֙* % )yg]tz޹w0|P5wt.Ș(E@NOF3\'Ӛ{BP'5%2[uǹSYq?!J$Okf3  [GN:Fuh.(M`z({uZ #N!Ј%hӺY' 5;"3NLF 6nU6qeA~ՏrVy(<. pؓs㏾#z* e+Ez=(d2gJo(<KS:hFv@KWzZ9NA~ b\(SɎ f/$-  Pʾ<Է7 }HԠ?Is`Ȥ4gK֍Av>Ũs3v8.l)ZiX4 W/VO/J f'J_wf-8IH#0An~oTcMG">عl aQ)~y[u=*CˋULΛj.tlk4,~0ٍAe[)//5H:8,wCu@y6ud/;D&Sw a|ա4MׇTj QKhփ BrV1ya~& jyTYEזU:X Į$>4_:Ąٴo`+dEnߓ K W.\mdL`Y1/`6D xC'VMaO=Z3$r]jQ4sɎM{j૑j~ZJ,˵jW|_hQ)6B_10gͪm^ۧ T>Mlb%]@*J;z%Y?^fú)/"Mw 1qX{s%1' i;p 5:D|fԝ\Bs-;So=L8KKQ(:7_{"'px5n N:v&¬ћp_X擦J//f:]}(n:o# WI&NK[CwΉP}gC 1V87}p[4"1PsMU;¶Zz D烁b#J~i[J/'Ay՞qa,OK4a#"xdqdzɷ׾Pmґ' Y&ʕΆ_{'+^fC87i6>2wIRܼ~|r=`e:h,8pWhG[A2񪫧·&QO:9As:/"X!%8r]t ΁q׏^7> a߲ȁ!_tv901O-ָ) @ w.5[{X&倝GoԽXZVpq7IBw m6)sA56[M'1%TUǑXX?9\kf¢I ]Hzf8Zo}'94|1)n_<{9@]%==Gk?"X2>#cOi;]ѭ6IyW>BӖN8 .h#lZc֯\x%!=E"0*!?uQH-;.Npoiф+rxL]/5T4:u3 %B nܤ,ۗ>m$, \w})[c|Ɯ Vɸ6ͪO`kS GZӌP ZЮ(v0Js^FW۪|͈X/(Oqi5sZTg3?ilE8+M'AOT1RRk|O%e/vXP@Qbs5:$f+{;^>ZIׁNhH k^*pat-@h@**h 裾p_K#!5UD)׹%Ax-Ce5㉱c[R&ZQѦ9$3H.eX(erkI%ckVvZ.Fo;5eA )7]`L?nz.Ca~3ı].b5R;jzor{`c8Z{~T~pΨGyTBkl濥\`p~}@ώia#$ 8WC 2d?gF ;ym.bz6{hr#GG`*m-(fӛN<[bƪ5ͫ[jP¼U~ޏ% n$-ECV˾yP{۳hҦ‰;i(_ :m&Uza HQ"Q Fh9}c jl 2M L^.]bƤ+h_9V(L5m1bM<8GFkZ6:mRu0|&7vnp0gb%N'DZd1xݨXR |U@gbeŞr!42MCW.:"qF5TLhhΕAӋ3QZd9.;19fY"NjjˠA2;f'.Jp[& >;#gAS7٤c* ;=)I7Yµ_y EZ28eYJ*gC;\-˃}M4IPRtH@\[u-ͽSCR}4aI`>,JN&^mla*fk)xMUДV=(HA*դ4L仧{ )Д@)xXw{[L ETEq@Ո\xwUCG92n(h:R´%hO$Տ j{Gݑ;=%_S+r1)JF$&Qזzf>qq>{3ߛ&YDnjE]  qOoHޞp<-II@֨Hג}#:vVstN@xjӹ%J%W݇)p:Pv522Z+e)T?>TmR1% #;bX[<{װB^V穢I5ѝM]F<kcOͱLd?7q8߼ܻe-:۱&$R~XQ {G+ L٫V2pMBVI6V#_GUFTJx :* +.=Fyz~AS7鈫Pؼ[F=x΄%Ge204bf^RIٔ K,r@Y}3OGpkGx 8td Q0(|#V .P}1ݣO>]8A+V(2\?R Ϥ ;M*b2go?<jNbPhErh ZT5,! 1ê*>45&ku?qZ , ^V4Q+K-'*ᜒt%mv 5+GJtO O_κrs.3X38|->ڷ)oM}M#ΰU;,C~m#R7~y^HN 2WQjs~~R~~H_SUE0S:{ɖCҫ9; V:3~c^E#NdP<.F ůYUmIܣ~dP$ //܃i\a-GF5gG\KyEfT\mn=!B.DSz @rJ2nmJ  4B23no(ta1kYz,lJ+ٜI`MR>4\80Ɇ OUmθO^d({W`F56ťJW7ko1<"a_;ª׭{V7cr'mM@>-Q`#ϗ{&o8iDDc ˃Lf&bPMؘj қ4~NiBLJW$B:5njK ˲]zjLR01V OEjmhwq`(+/Tn2j'C۟jՖSDfdǛe"ȵF<*< /C/.1f?Ka4I2Wt ѐyp 3)e!+}6# \ i^s/ZW0kˠkmdĽxSq>6gє^tᔁDgأ <;H4$7^u'̀\ʏFŎ݇h}TzH7ٍDSrzp.G\RT:_j2I>(x vj!.Mg <[Xc*%vq0D-'Kri•*4q]3rйfx%oS N՚Vvzj2H"?L޽7жüh a˖!޻,2X΢I"Z`hTu=7ٮYJjZG68۽Ae˼[ݮMCb8yXCcͽ$ LtƜ)ʴ)-u>I[yGf-|^b 惔Bc?;Vz64^FL*4(Ka"2 c)SD}Ӑ-#C I-ylj l׹a!%m(d-:\+:侩5FQ_FSt.4"c̿v@L` qzmN3psd)^\hرIM[BߢjI)YԡW]o.ulrD[R+9y- >So_03ZC3X?i*3?ӟ@M𠻲*WuF-SWIپTC'!O|-4r}~̏W y~x${3X'RDNlSmhds5H7w[z%^uz?:M_D\;bk ?,:JO/pv> RnKY!tCd[s^$Lj4P%~g @8%UCOT,n=ɹdl-aPy?ܯ@B[QQĂs<֝3[׳|sEY2vu[K[ N(&Λz)ixOIRe^Z<(gi*m/#ӔnLਧ 0䚕 ڎ&`p]L'zץ-νerof |.uX_QejxLHi2l{8* E@l\F/̹vFhP.sHfzyeհq ln}Xn] 8 z.hr,6xjJ808bmc%*-E_NV,$t͆mޏ -WDϵmuEz <0W`}e?>X==E%`zs4MG{\-^ xrPiUPDq{䒕 (}>duo); i (9 瞺Gc KNIG.L+2 a x˛ $fy]ڝv|%Km2фlI-t]0X.WŤބ]dlL6{l-[r" _,QjQ]n]YU_tߒ!bOJuMWOAQ>Fz5gΕ\ :%p+&)O)4ƅL">z4,x7|mZZtHeGL-ura)"oZvc:4;_5Lb6&+VH3aOf=x␮)G3۟U-Z}l4׋71+NM1b~: N~%I' "m?V"̪k CẖOfPUI˼ޜ@:jl VVzh [3/Éh\'Z> v26T]ۧI>ZH$2؃3liN+{ƭ_ػF{v#&)K[NDY$)/<_q^pZ4xɵXn̊dc ߥ?Y4 U=ĵ\Yvi u˜z`rV6uP}&+ &<6D8X7q|{dJDYhX)&q1?B%ZA(K߫6*M1o8#>Y?fb2Kg EZ`(Nj~R+GE{g9;4WJ@"\pkG:^b` M;- =I=Z&/7/nιS֠d ?knte>ӣc귑ʙ Y3=ٶ695G\!98%6eNGe:#+ˍK^++8Y~L1b KЫ"W6|*vpE pUBNI[^p,ȭ5+wJ kGV;ʽ"g2L7c(a`k`ga ŲHzg@;^:OsQe.#^EdBrD2X^ORM/WȦzNX)19ZuE(`>Rkcz~E͠8ETܶTP'ң`W5}^c"O&Rf:d(π !Р׋Hw)r3kN $ Hj!]L|ê,˲HӯFޮo BDL4pbLwCJ]v:jqup^XL >FS͓DpB{SLo< ǹK 2kF9@X*joӊJC0j|&U:Qu~!́qX,*` T^ ҤcII4+e1K/ϮL8D"E+"EM(:#7AF' RQ6 CVU__A"pԬ8ޒ]4BCi/ t-/k5JvA8UHe oW}b+^#=Uq ] ҫN^# RyNQ#dO IVj^e A>|j_>ga/3}.wcCp|0p_O#MȿNNˌA깇Vj<ЌbsTYAvs &Odʭ=d_PU {ϗnuas[y^SWMo7Tړi}}*v8-E)u>Kzlד7DZ@ʂ,-=i){vxEΡAiU k.8Q9I1%U3yPn,ܭ"ԠD~w576EPBw81̺mK\d>#3F0ttf^ '4lGş4-0ؒ' QCXV%m/*&9<⼅Prx?rh4SvB.wؘVW+w'{^^U,"&%eZ}NDvOxsu亘Q4H琵sxL$#4rHAV`u~uT,.8*&Tk<|9yc( ̠Dc($DUe/3(fAux[59 i,g*Yӯ+ȯ~ ,[hLI:Hwi߬nN:DGe۰[Ο/˗_m ̖>p<V _19fH囃p%QX^11 v:$ULGgl