python3-openvswitch2.11-2.11.3-90.el8 >  H `@U !F^(*v^X-=t;s7M1Xبm[Rz# uH2i!eb}zNCWeÎmzjrٍT_V6o%t!(/΃w_E@w[j>@2zKI8m@h NFLv ٷaɧyR\T>p??Ĵd! ( Ftx (|| | | | "| #|%x|'|*P*x|,h,- .(.8/:93::sI:BG|H|I|X@YTZ[\|]|^,bdkepfslut|u|vpwX|xH|y8dhnİCpython3-openvswitch2.112.11.390.el8Open vSwitch python3 bindingsPython bindings for the Open vSwitch database`ckojid-x86-02.rdu2.centos.orgCentOSCentOSASL 2.0CBS System Environment/Daemons daemon/database/utilitieshttp://www.openvswitch.org/linuxx86_64W<&ss8~8..rr<= ` l`2@____ǁ_@__ _t@_P_|\@_a@_G@_;_:q@_3_2@_/@_/@__A@__ L_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@^^V@^>@^@^@^@^h^g@^U @^ P@^ P@^ P@^^^@^@^g@^@^r^@^@]]B]@]@]@]N@]]ʞ])]c@]c@](]{]nU]e@]Ik]6]-@]-@](v@]$]G@] ]:]:\P\O\,@\\@\@\@\@\y\w@\R@\M@\ - 2.11.3-90Open vSwitch CI - 2.11.3-89Michael Santana - 2.11.3-88Open vSwitch CI - 2.11.3-87Open vSwitch CI - 2.11.3-86Open vSwitch CI - 2.11.3-85Open vSwitch CI - 2.11.3-84Timothy Redaelli - 2.11.3-83Open vSwitch CI - 2.11.3-82Open vSwitch CI - 2.11.3-81Open vSwitch CI - 2.11.3-80Open vSwitch CI - 2.11.3-79Open vSwitch CI - 2.11.3-78Open vSwitch CI - 2.11.3-77Open vSwitch CI - 2.11.3-76Open vSwitch CI - 2.11.3-75Open vSwitch CI - 2.11.3-74Timothy Redaelli - 2.11.3-73Open vSwitch CI - 2.11.3-72Open vSwitch CI - 2.11.3-71Open vSwitch CI - 2.11.3-70Open vSwitch CI - 2.11.3-69Open vSwitch CI - 2.11.3-68Open vSwitch CI - 2.11.3-67Flavio Leitner - 2.11.3-66Open vSwitch CI - 2.11.3-65Open vSwitch CI - 2.11.3-64Open vSwitch CI - 2.11.3-63Flavio Leitner - 2.11.3-62Flavio Leitner - 2.11.3-61Flavio Leitner - 2.11.3-60Flavio Leitner - 2.11.3-59Flavio Leitner - 2.11.3-58Flavio Leitner - 2.11.3-57Timothy Redaelli - 2.11.3-56Timothy Redaelli - 2.11.3-55Timothy Redaelli - 2.11.3-54Timothy Redaelli - 2.11.3-53Timothy Redaelli - 2.11.3-52Timothy Redaelli - 2.11.3-51Timothy Redaelli - 2.11.3-50Timothy Redaelli - 2.11.3-49Timothy Redaelli - 2.11.3-48Timothy Redaelli - 2.11.3-47Timothy Redaelli - 2.11.3-46Timothy Redaelli - 2.11.3-45Timothy Redaelli - 2.11.3-44Timothy Redaelli - 2.11.3-43Timothy Redaelli - 2.11.3-42Timothy Redaelli - 2.11.3-41Timothy Redaelli - 2.11.3-40Timothy Redaelli - 2.11.3-39Timothy Redaelli - 2.11.3-38Timothy Redaelli - 2.11.3-37Timothy Redaelli - 2.11.3-36Timothy Redaelli - 2.11.3-35Timothy Redaelli - 2.11.3-34Timothy Redaelli - 2.11.3-33Timothy Redaelli - 2.11.3-32Timothy Redaelli - 2.11.3-31Timothy Redaelli - 2.11.3-30Timothy Redaelli - 2.11.3-29Timothy Redaelli - 2.11.3-28Timothy Redaelli - 2.11.3-27Timothy Redaelli - 2.11.3-26Timothy Redaelli - 2.11.3-25Timothy Redaelli - 2.11.3-24Timothy Redaelli - 2.11.3-23Timothy Redaelli - 2.11.3-22Timothy Redaelli - 2.11.3-21Timothy Redaelli - 2.11.3-20Timothy Redaelli - 2.11.3-19Timothy Redaelli - 2.11.3-18Timothy Redaelli - 2.11.3-17Timothy Redaelli - 2.11.3-16Timothy Redaelli - 2.11.3-15Timothy Redaelli - 2.11.3-14Timothy Redaelli - 2.11.3-13Timothy Redaelli - 2.11.3-12Timothy Redaelli - 2.11.3-11Timothy Redaelli - 2.11.3-10Timothy Redaelli - 2.11.3-9Timothy Redaelli - 2.11.3-8Timothy Redaelli - 2.11.3-7Timothy Redaelli - 2.11.3-6Timothy Redaelli - 2.11.3-5Timothy Redaelli - 2.11.3-4Timothy Redaelli - 2.11.3-3Timothy Redaelli - 2.11.3-2Timothy Redaelli - 2.11.3-1Timothy Redaelli - 2.11.0-56.20200327gita4efc59Aaron Conole - 2.11.0-55.20200327gita4efc59Maxime Coquelin - 2.11.0-54.20200327gita4efc59Aaron Conole - 2.11.0-53.20200327gita4efc59Timothy Redaelli - 2.11.0-52.20200327gita4efc59Timothy Redaelli - 2.11.0-51.20200327gita4efc59Timothy Redaelli - 2.11.0-50Timothy Redaelli - 2.11.0-49Maxime Coquelin - 2.11.0-48Timothy Redaelli - 2.11.0-47Timothy Redaelli - 2.11.0-46Timothy Redaelli - 2.11.0-45Timothy Redaelli - 2.11.0-44Timothy Redaelli - 2.11.0-43Eelco Chaudron - 2.11.0-42Kevin Traynor - 2.11.0-41Adrián Moreno - 2.11.0-40Numan Siddique - 2.11.0-39David Marchand - 2.11.0-38Eelco Chaudron - 2.11.0-37Eelco Chaudron - 2.11.0-36Timothy Redaelli - 2.11.0-35Timothy Redaelli - 2.11.0-34Aaron Conole - 2.11.0-33Aaron Conole - 2.11.0-32Aaron Conole - 2.11.0-31Timothy Redaelli - 2.11.0-30Lorenzo Bianconi - 2.11.0-29David Marchand - 2.11.0-28Numan Siddique - 2.11.0-27Numan Siddique - 2.11.0-26Dumitru Ceara - 2.11.0-25Aaron Conole - 2.11.0-24Kevin Traynor - 2.11.0-23Flavio Leitner - 2.11.0-22Flavio Leitner - 2.11.0-21David Marchand - 2.11.0-20Numan Siddique - 2.11.0-19Timothy Redaelli - 2.11.0-18Timothy Redaelli - 2.11.0-17Timothy Redaelli - 2.11.0-16David Marchand - 2.11.0-15Timothy Redaelli - 2.11.0-14Timothy Redaelli - 2.11.0-13Maxime Coquelin - 2.11.0-12Flavio Leitner - 2.11.0-11Pablo Cascón - 2.11.0-10Numan Siddique - 2.11.0-9Kevin Traynor - 2.11.0-8David Marchand - 2.11.0-7Timothy Redaelli - 2.11.0-6Flavio Leitner - 2.11.0-5Davide Caratti - 2.11.0-4Timothy Redaelli - 2.11.0-3Timothy Redaelli - 2.11.0-2Timothy Redaelli - 2.11.0-1Open vSwitch Bot - 2.11.0-0.20190129gitd3a10dbOpen vSwitch Bot - 2.11.0-0.20190126gitd4ff5b2Timothy Redaelli - 2.11.0-0.20190114gitadb3f0bLorenzo Bianconi - 2.10.0-42Timothy Redaelli - 2.10.0-41Timothy Redaelli - 2.10.0-40Lorenzo Bianconi - 2.10.0-39Numan Siddique - 2.10.0-38David Marchand - 2.10.0-37Numan Siddique - 2.10.0-36Timothy Redaelli - 2.10.0-35Numan Siddique - 2.10.0-34Eelco Chaudron - 2.10.0-33Timothy Redaelli - 2.10.0-32Timothy Redaelli - 2.10.0-31Lorenzo Bianconi - 2.10.0-30Eelco Chaudron - 2.10.0-29Lorenzo Bianconi - 2.10.0-28Timothy Redaelli - 2.10.0-27Lorenzo Bianconi - 2.10.0-26Timothy Redaelli - 2.10.0-25Timothy Redaelli - 2.10.0-24Kevin Traynor - 2.10.0-23Timothy Redaelli - 2.10.0-22Numan Siddique - 2.10.0-21Timothy Redaelli - 2.10.0-20Timothy Redaelli - 2.10.0-19Timothy Redaelli - 2.10.0-18Numan Siddique - 2.10.0-17Numan Siddique - 2.10.0-16Numan Siddique - 2.10.0-15Numan Siddique - 2.10.0-14Lorenzo Bianconi - 2.10.0-13Matteo Croce - 2.10.0-12Lorenzo Bianconi - 2.10.0-11Timothy Redaelli - 2.10.0-10Matteo Croce - 2.10.0-9Matteo Croce - 2.10.0-8Matteo Croce - 2.10.0-7Kevin Traynor - 2.10.0-6Timothy Redaelli - 2.10.0-5Flavio Leitner - 2.10.0-4Flavio Leitner - 2.10.0-3Timothy Redaelli - 2.10.0-2Flavio Leitner - 2.10-1Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Aaron Conole - 2.9.0-47Timothy Redaelli - 2.9.0-46Timothy Redaelli - 2.9.0-45Timothy Redaelli - 2.9.0-44Timothy Redaelli - 2.9.0-43Timothy Redaelli - 2.9.0-42Timothy Redaelli - 2.9.0-41Timothy Redaelli - 2.9.0-40Timothy Redaelli - 2.9.0-39Maxime Coquelin - 2.9.0-38Timothy Redaelli - 2.9.0-37Timothy Redaelli - 2.9.0-36Lorenzo Bianconi - 2.9.0-35Timothy Redaelli - 2.9.0-34Timothy Redaelli - 2.9.0-33Aaron Conole - 2.9.0-32Timothy Redaelli - 2.9.0-31Timothy Redaelli - 2.9.0-30Timothy Redaelli - 2.9.0-29Kevin Traynor - 2.9.0-28Aaron Conole - 2.9.0-27Aaron Conole - 2.9.0-26Jakub Sitnicki - 2.9.0-25Aaron Conole - 2.9.0-24Timothy Redaelli - 2.9.0-23Timothy Redaelli - 2.9.0-22Timothy Redaelli - 2.9.0-21Timothy Redaelli - 2.9.0-20Kevin Traynor - 2.9.0-19Davide Caratti - 2.9.0-18Timothy Redaelli - 2.9.0-17Timothy Redaelli - 2.9.0-16Timothy Redaelli - 2.9.0-14Timothy Redaelli - 2.9.0-13Flavio Leitner - 2.9.0-12Timothy Redaelli - 2.9.0-11Timothy Redaelli - 2.9.0-10Timothy Redaelli - 2.9.0-9Eric Garver - 2.9.0-8Timothy Redaelli - 2.9.0-7Aaron Conole - 2.9.0-6Matteo Croce - 2.9.0-5Timothy Redaelli - 2.9.0-4Timothy Redaelli - 2.9.0-3Timothy Redaelli - 2.9.0-1Timothy Redaelli - 2.7.3-3.git20180112Timothy Redaelli - 2.7.3-2.git20171010Timothy Redaelli - 2.7.3-1.git20171010Kevin Traynor - 2.7.2-10.git20170914Timothy Redaelli - 2.7.2-9.git20170914Timothy Redaelli - 2.7.2-8.git20170719Aaron Conole - 2.7.2-7.git20170719Aaron Conole - 2.7.2-6.git20170719Aaron Conole - 2.7.2-5.git20170719John W. Linville - 2.7.2-4.git20170719John W. Linville - 2.7.2-3.git20170719John W. Linville - 2.7.2-2.git20170719Timothy Redaelli - 2.7.2-1.git20170719Timothy Redaelli - 2.7.1-1.git20170710Timothy Redaelli - 2.6.1-20.git20161206Lance Richardson - 2.6.1-19.git20161206Timothy Redaelli - 2.6.1-18.git20161206Timothy Redaelli - 2.6.1-17.git20161206Eric Garver - 2.6.1-16.git20161206Kevin Traynor - 2.6.1-15.git20161206Lance Richardson - 2.6.1-14.git20161206Timothy Redaelli - 2.6.1-13.git20161206Aaron Conole - 2.6.1-12.git20161206Lance Richardson - 2.6.1-11.git20161206Aaron Conole - 2.6.1-10.git20161206Lance Richardson - 2.6.1-9.git20161206Timothy Redaelli - 2.6.1-8.git20161206Lance Richardson - 2.6.1-7.git20161206Aaron Conole - 2.6.1-6.git20161206Timothy Redaelli - 2.6.1-5.git20161206Flavio Leitner 2.5.0-23.git20160727Lance Richardson 2.6.1-3.git20161206Lance Richardson 2.6.1-2.git20161206Kevin Traynor 2.6.1-1.git20161206Flavio Leitner 2.5.0-22.git20160727Flavio Leitner 2.5.0-21.git20160727Flavio Leitner 2.5.0-20.git20160727Aaron Conole - 2.5.0-19.git20160727Aaron Conole - 2.5.0-18.git20160727Flavio Leitner - 2.5.0-17.git20160727Flavio Leitner - 2.5.0-16.git20160727Flavio Leitner - 2.5.0-15.git20160727Panu Matilainen - 2.5.0-14.git20160727Panu Matilainen - 2.5.0-13.git20160727Panu Matilainen - 2.5.0-12.git20160727Panu Matilainen - 2.5.0-11.git20160727Panu Matilainen - 2.5.0-10.git20160727Flavio Leitner - 2.5.0-9.git20160727Flavio Leitner - 2.5.0-8.git20160727Flavio Leitner - 2.5.0-7.git20160727Flavio Leitner - 2.5.0-6.git20160628Flavio Leitner - 2.5.0-5.git20160628Panu Matilainen - 2.5.0-4.git20160628Panu Matilainen - 2.5.0-4Flavio Leitner - 2.5.0-3Panu Matilainen - 2.5.0-2Panu Matilainen - 2.5.0-1Panu Matilainen Flavio Leitner Panu Matilainen Ralf Spenneberg - Merging upstream branch-2.11 [RH gerrit: aac87adaf1] Commit list: 40682157c9 ovsdb-server: Fix memleak when failing to read storage.- Merging upstream branch-2.11 [RH gerrit: 1d6f0bd658] Commit list: 75907f8a11 ofp-group: Use big-enough buffer in ofputil_format_group().- Make changelog in spec file more informative [RH gerrit: 99ad8d96f6] This is done by adding the body of the commit message to the changelong. The body is indented and has extra spacing separating each entry in the changelog to make each one more discernible since now they could be longer Signed-off-by: Michael Santana - Merging upstream branch-2.11 [RH gerrit: 560df0228c] Commit list: 8710c3e5ce python: Send notifications after the transaction ends. bf3ef6a869 Handle refTable values with setkey()- Merging upstream branch-2.11 [RH gerrit: 67070c0625] Commit list: e9ad1da4f4 Prepare for 2.11.8. bbc2705315 Set release date for 2.11.7. 0f475a5cd4 ovsdb-client: Fix needs-conversion when SERVER is explicitly specified. 46299c1c72 dpdk: Use DPDK 18.11.11 release. 65c61b0c23 ofp-actions: Fix use-after-free while decoding RAW_ENCAP.- Merging upstream branch-2.11 [RH gerrit: 4351a9b512] Commit list: 9b0307cf7d Prepare for 2.11.7. 5d07b5da2e Set release date for 2.11.6. 018d35b7d9 cirrus: Use FreeBSD 12.2. abd7a45765 flow: Support extra padding length.- Merging upstream branch-2.11 [RH gerrit: a4f1272cee] Commit list: 5a62ed8002 dist-docs: Include manpages generated from rST.- flow: Support extra padding length. [RH gerrit: 35a473f35c] Although not required, padding can be optionally added until the packet length is MTU bytes. A packet with extra padding currently fails sanity checks. Fixes: fa8d9001a624 ("miniflow_extract: Properly handle small IP packets.") Reported-by: Joakim Hindersson Acked-by: Ilya Maximets Signed-off-by: Flavio Leitner - Merging upstream branch-2.11 [RH gerrit: 2e04729b43] Commit list: 1faf6f507c tc: Fix mpls bottom of stack bit mask reporting.- Merging upstream branch-2.11 [RH gerrit: a6fede58cb] Commit list: 6747878b7a python: Add 'six' to list of install requirements.- Merging upstream branch-2.11 [RH gerrit: b8354bd062] Commit list: cd0f896c01 github: Fix Ubuntu package installation. 5804c31209 odp-util: Fix abort while formatting nsh actions.- Merging upstream branch-2.11 [RH gerrit: f41ec7e05b] Commit list: d9e429cc49 Prepare for 2.11.6. 634e6e41cd Set release date for 2.11.5.- Merging upstream branch-2.11 [RH gerrit: 68170d878c] Commit list: dc222c3cf1 lldp: do not leak memory on multiple instances of TLVs 569595898b ofproto-dpif: Uninitialize 'xlate_cache' to free resources- Merging upstream branch-2.11 [RH gerrit: 10478e3802] Commit list: 008414b6f0 ovs-monitor-ipsec: Fix active connection regex.- Merging upstream branch-2.11 [RH gerrit: aa80d76b09] Commit list: 026339bc76 odp-util: Fix netlink message overflow with userdata. 29077624db ovsdb-tool: Fix datum leak in the show-log command. 041d001019 ofproto-dpif-xlate: Stop forwarding MLD reports to group ports.- Merging upstream branch-2.11 [RH gerrit: 838f461d65] Commit list: abe75f4938 datapath: ovs_ct_exit to be done under ovs_lock 884800683f compat: rcu: Add support for consolidated-RCU reader checking 090c694ac7 tests: Add overflow test for the sha1 library. 7bcf93452e travis: Remove support for Travis CI. a29cda9b26 github: Add GitHub Actions workflow. a9748802e0 ovsdb-cluster.at: Fix infinite loop in torture tests.- Merging upstream branch-2.11 [RH gerrit: 757d6ce62c] Commit list: 1dae577d74 ovsdb-idl: Fix *_is_new() IDL functions. 709b548549 compat: Fix compile warning. 8bd0dadd04 compat: Remove stale code. 9414a66816 tests: Add parse-flow tests for MPLS fields. 00ec8e5cb9 ofp-actions: Fix userspace support for mpls_ttl. 655e9aa784 python: Don't raise an Exception on failure to connect via SSL. 1cf4245ace lldp: correctly increase discarded count 330d64d036 lldp: increase statsTLVsUnrecognizedTotal on unknown TLV c00a829e45 lldp: fix a buffer overflow when handling management address TLV 9aed58b5f1 lldp: Fix size of PEEK_DISCARD_UINT32() 2c0bbbacf3 lldp: validate a bit more received LLDP frames 72aa3deacf sha1: Fix algorithm for data bigger than 512 megabytes. 7d52af2228 odp-util: Fix overflow of nested netlink attributes.- redhat: Explicitly define __python [RH gerrit: 045337a5c8] See https://fedoraproject.org/wiki/Changes/PythonMacroError- Merging upstream branch-2.11 [RH gerrit: e835b37ab3] Commit list: 684e43b4d8 raft: Fix error leak on failure while saving snapshot.- Merging upstream branch-2.11 [RH gerrit: a11c3da9f7] Commit list: cc81b50a60 ofp-ed-props: Fix using uninitialized padding for NSH encap actions.- Merging upstream branch-2.11 [RH gerrit: 2a26d61978] Commit list: 3cc79bbc13 system-userspace-packet-type-aware.at: Wait for ip address updates. 2deed05096 netdev-dpdk: Don't set rx mq mode for net_virtio.- Merging upstream branch-2.11 [RH gerrit: e31b9384be] Commit list: 5ceafdc389 docs: Add flow control on i40e issue- Merging upstream branch-2.11 [RH gerrit: a43432762b] Commit list: dfcebfcc2f cirrus: Use FreeBSD 11.4. 9e53a8a76b classifier: Fix use of uninitialized value. 30387b61ac rhel: Fix logrotate group when dpdk is enabled.- Merging upstream branch-2.11 [RH gerrit: dd4802fb0c] Commit list: 1b842af7ad ovs-dpctl-top: Skip "eth()" element. 9ff2a5a115 meta-flow: fix a typo in "MPLS Bottom of Stack Field" paragraph.- pkgtool: Use git-branch to retrieve the name. [RH gerrit: 7240e67479] The name-rev can return any symbolic name for ref, whether it is a branch or a tag. Use git branch --show-current instead.- Merging upstream branch-2.11 [RH gerrit: b16596dda3] Commit list: 05bbdfceb7 netdev-offload-dpdk: Fix for broken ethernet matching HWOL for XL710NIC.- Merging upstream branch-2.11 [RH gerrit: 7b48e66922] Commit list: e38b412dcb acinclude: Fix build with kernels with prandom* moved to prandom.h.- Merging upstream branch-2.11 [RH gerrit: 9ae7cb0a10] Commit list: 218ab4f731 Prepare for 2.11.5. adf1b5c390 Set release date for 2.11.4. 1210688623 datapath-windows: Update flow key in SET action d04e409f39 dpctl: Fix memory leak in dpctl_dump_flows() 5d7a08db86 ovs-router: Fix flushing of local routes.- redhat: Add support to custom RPM releases. [RH gerrit: 570434c6c2] This commit allows the developer to specify a custom release string to be appended to package NVR. If the custom release is 'bz123456', the final release would look like -Y.bz123456.X where Y is the number of changes until the branch was created, and X is the number of changes after that.- pkgtool: Use OVS static version in package NVR. [RH gerrit: 2ed240a84c] The package NVR must coincide with the tarball version.- Merge branch 'fast-datapath-rhel-7' into fast-datapath-rhel-8 [RH gerrit: a2d9792f8c]- Merge branch 'fast-datapath-rhel-7' into fast-datapath-rhel-8 [RH gerrit: c9f7a9e2d3]- spec: Fix configure to use dpdkdir without version. [RH gerrit: 583acc91dd]- redhat: Rename OVSCI job name. [RH gerrit: cbcaa83118] The OVSCI job's name has been renamed to follow a standard.- This is fast-datapath-rhel-8 [RH gerrit: 98f312f126]- bus/pci: fix VF memory access (#1851170) [RH gerrit: fa4d90db57] To fix CVE-2020-12888, the linux vfio-pci module will invalidate mmaps and block MMIO access on disabled memory, it will send a SIGBUS to the application: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=abafbc551fdd When the application opens the vfio PCI device, the vfio-pci module will enable the bus memory space through PCI read/write access. According to the PCIe specification, the 'Memory Space Enable' is always zero for VF: Table 9-13 Command Register Changes Bit Location | PF and VF Register Differences | PF | VF | From Base | Attributes | Attributes -------------+--------------------------------+------------+----------- | Memory Space Enable - Does not | | | apply to VFs. Must be hardwired| Base | 0b 1 | to 0b for VFs. VF Memory Space | | | is controlled by the VF MSE bit| | | in the VF Control register. | | -------------+--------------------------------+------------+----------- Afterwards the vfio-pci will initialize its own virtual PCI config space data ('vconfig') by reading the VF's physical PCI config space, then the 'Memory Space Enable' bit in vconfig will always be 0b value. This will make the vfio-pci treat the BAR memory space as disabled, and the SIGBUS will be triggered if access these BARs. By investigation, the VF PCI device *passthrough* into the Guest OS by QEMU has the 'Memory Space Enable' with 1b value. That's because every PCI driver will start to enable the memory space, and this action will be hooked by vfio-pci virtual PCI read/write to set the 'Memory Space Enable' in vconfig space to 1b. So VF runs in guest OS has 'Mem+', but VF runs in host OS has 'Mem-'. Align with PCI working mode in Guest/QEMU/Host, in DPDK, enable the PCI bus memory space explicitly to avoid access on disabled memory. Fixes: 33604c31354a ("vfio: refactor PCI BAR mapping") Cc: stable@dpdk.org Signed-off-by: Haiyue Wang Acked-by: Anatoly Burakov Tested-by: Harman Kalra Tested-by: David Marchand Tested-by: Thierry Martin (cherry picked from commit 54f3fb127d9c265a5724d193e5c7c6db29fb4150) Resolves: #1851170- vhost: fix vring index check (#1831391) [RH gerrit: 8e33084d85] vhost_user_check_and_alloc_queue_pair() is used to extract a vring index from a payload. This function validates the index and is called early on in when performing message handling. Most message handlers depend on it correctly validating the vring index. Depending on the message type the vring index is in different parts of the payload. The function contains a switch/case for each type and copies the index. This is stored in a uint16. This index is then validated. Depending on the message, the source index is an unsigned int. If integer truncation occurs (uint->uint16) the top 16 bits of the index are never validated. When they are used later on (e.g. in vhost_user_set_vring_num() or vhost_user_set_vring_addr()) it can lead to out of bound indexing. The out of bound indexed data gets written to, and hence this can cause memory corruption. This patch fixes this vulnerability by declaring vring index as an unsigned int in vhost_user_check_and_alloc_queue_pair(). Fixes: 160cbc815b41 ("vhost: remove a hack on queue allocation") Cc: stable@dpdk.org This issue has been assigned CVE-2020-10723 Reported-by: Ilja Van Sprundel Signed-off-by: Maxime Coquelin Reviewed-by: Xiaolong Ye Reviewed-by: Ilja Van Sprundel (cherry picked from commit c78d94189dced04def987a17f16097fcb197a186) Resolves: #1831391- vhost: check log mmap offset and size overflow (#1831391) [RH gerrit: 753ae0cf66] vhost_user_set_log_base() is a message handler that is called to handle the VHOST_USER_SET_LOG_BASE message. Its payload contains a 64 bit size and offset. Both are added up and used as a size when calling mmap(). There is no integer overflow check. If an integer overflow occurs a smaller memory map would be created than requested. Since the returned mapping is mapped as writable and used for logging, a memory corruption could occur. Fixes: fbc4d248b198 ("vhost: fix offset while mmaping log base address") This issue has been assigned CVE-2020-10722 Reported-by: Ilja Van Sprundel Signed-off-by: Maxime Coquelin Reviewed-by: Xiaolong Ye Reviewed-by: Ilja Van Sprundel (cherry picked from commit 338f5eae5de73a91ba42951bfe7d1fba898e1aab) Resolves: #1831391- vhost: add device op when notification to guest is sent (#1726579) [RH gerrit: 92715cf99c] This patch adds an operation callback which gets called every time the library is waking up the guest trough an eventfd_write() call. This can be used by 3rd party application, like OVS, to track the number of times interrupts where generated. This might be of interest to find out system-call were called in the fast path. Signed-off-by: Eelco Chaudron Reviewed-by: Maxime Coquelin (cherry picked from commit 039253166a57ee660dd2fbe92ca77fa65154751c) Resolves: #1726579- net/i40e: re-program promiscuous mode on VF interface (#1733402) [RH gerrit: 0fe1f42b5f] During a kernel PF reset, this event is propagated to the VF. The DPDK VF PMD will execute the reset task before the PF is done with his. This results in the admin queue message not being responded to leaving the port in "promiscuous" mode. This patch makes sure the promiscuous mode is configured independently of the current admin state. Signed-off-by: Eelco Chaudron Reviewed-by: Xiao Zhang (cherry picked from commit ddc7cb0d9453e0c0601a01eab1f388eae4c1fb65) Resolves: #1733402- bus/pci: always check IOMMU capabilities (#1711739) [RH gerrit: 0815c39d39] IOMMU capabilities won't change and must be checked even if no PCI device seem to be supported yet when EAL initialised. This is to accommodate with SPDK that registers its drivers after rte_eal_init(), especially on PPC platform where the IOMMU does not support VA. Fixes: 703458e19c16 ("bus/pci: consider only usable devices for IOVA mode") Signed-off-by: David Marchand Reviewed-by: David Christensen Acked-by: Jerin Jacob Tested-by: Jerin Jacob Tested-by: Takeshi Yoshimura (cherry picked from commit 66d3724b2c87e6fcdf3851ca191683696a91b901) Signed-off-by: David Marchand Resolves: #1711739- eal: fix IOVA mode selection as VA for PCI drivers (#1711739) [RH gerrit: 11fbef3c85] The incriminated commit broke the use of RTE_PCI_DRV_IOVA_AS_VA which was intended to mean "driver only supports VA" but had been understood as "driver supports both PA and VA" by most net drivers and used to let dpdk processes to run as non root (which do not have access to physical addresses on recent kernels). The check on physical addresses actually closed the gap for those drivers. We don't need to mark them with RTE_PCI_DRV_IOVA_AS_VA and this flag can retain its intended meaning. Document explicitly its meaning. We can check that a driver requirement wrt to IOVA mode is fulfilled before trying to probe a device. Finally, document the heuristic used to select the IOVA mode and hope that we won't break it again. Fixes: 703458e19c16 ("bus/pci: consider only usable devices for IOVA mode") Signed-off-by: David Marchand Reviewed-by: Jerin Jacob Tested-by: Jerin Jacob Acked-by: Anatoly Burakov (cherry picked from commit b76fafb174d2cd5247c3573bb3d49444e195e760) Signed-off-by: David Marchand Conflicts: drivers/net/avf/avf_ethdev.c drivers/net/ice/ice_ethdev.c drivers/net/mlx4/mlx4.c drivers/net/mlx5/mlx5.c drivers/net/octeontx2/otx2_ethdev.c drivers/raw/ioat/ioat_rawdev.c Resolves: #1711739- bus/pci: consider only usable devices for IOVA mode (#1711739) [RH gerrit: 69f5cb4c56] When selecting the preferred IOVA mode of the pci bus, the current heuristic ("are devices bound?", "are devices bound to UIO?", "are pmd drivers supporting IOVA as VA?" etc..) should honor the device white/blacklist so that an unwanted device does not impact the decision. There is no reason to consider a device which has no driver available. This applies to all OS, so implements this in common code then call a OS specific callback. On Linux side: - the VFIO special considerations should be evaluated only if VFIO support is built, - there is no strong requirement on using VA rather than PA if a driver supports VA, so defaulting to DC in such a case. Signed-off-by: Ben Walker Signed-off-by: David Marchand Reviewed-by: Anatoly Burakov (cherry picked from commit 703458e19c16135143b3f30089e1af66100c82dc) Signed-off-by: David Marchand Conflicts: drivers/bus/pci/linux/pci.c drivers/bus/pci/pci_common.c Resolves: #1711739- eal: compute IOVA mode based on PA availability (#1711739) [RH gerrit: d5e1d2fa50] Currently, if the bus selects IOVA as PA, the memory init can fail when lacking access to physical addresses. This can be quite hard for normal users to understand what is wrong since this is the default behavior. Catch this situation earlier in eal init by validating physical addresses availability, or select IOVA when no clear preferrence had been expressed. The bus code is changed so that it reports when it does not care about the IOVA mode and let the eal init decide. In Linux implementation, rework rte_eal_using_phys_addrs() so that it can be called earlier but still avoid a circular dependency with rte_mem_virt2phys(). In FreeBSD implementation, rte_eal_using_phys_addrs() always returns false, so the detection part is left as is. If librte_kni is compiled in and the KNI kmod is loaded, - if the buses requested VA, force to PA if physical addresses are available as it was done before, - else, keep iova as VA, KNI init will fail later. Signed-off-by: Ben Walker Signed-off-by: David Marchand Acked-by: Anatoly Burakov (cherry picked from commit c2361bab70c56f64e50f07946b1b20bf688d782a) Signed-off-by: David Marchand Resolves: #1711739- netdev-linux: Update LAG in all cases. (#1812892) [RH gerrit: 2763511809] In some cases, when processing a netlink change event, it's possible for an alternate part of OvS (like the IPv6 endpoint processing) to hold an active netdev interface. This creates a race-condition, where sometimes the OvS change processing will take the normal path. This doesn't work because the netdev device object won't actually be enslaved to the ovs-system (for instance, a linux bond) and ingress qdisc entries will be missing. To address this, we update the LAG information in ALL cases where LAG information could come in. Fixes: d22f8927c3c9 ("netdev-linux: monitor and offload LAG slaves to TC") Cc: Marcelo Leitner Cc: John Hurley Acked-by: Roi Dayan Signed-off-by: Aaron Conole Signed-off-by: Ilya Maximets (cherry picked from commit 7a076a53716394742d0ae44652451501ae17335d) Resolves: #1812892- netdev-offload-tc: Re-fetch block ID after probing. (#1812892) [RH gerrit: 83cebd3221] It's possible that block_id could changes after the probe for block support. Therefore, fetch the block_id again after the probe. Fixes: edc2055a2bf7 ("netdev-offload-tc: Flush rules on ingress block when init tc flow api") Cc: Dmytro Linkin Acked-by: Roi Dayan Co-authored-by: Marcelo Leitner Signed-off-by: Marcelo Leitner Signed-off-by: Aaron Conole Signed-off-by: Ilya Maximets (cherry picked from commit 8508a57228560e154963c542823d36d8098e6610) Resolves: #1812892- netdev-offload-tc: Flush rules on ingress block when init tc flow api (#1812892) [RH gerrit: e5d7d5ec24] OVS can fail to attach ingress block on iface when init tc flow api, if block already exist with rules on it and is shared with other iface. Fix by flush all existing rules on the ingress block prior to deleting it. Fixes: 093c9458fb02 ("tc: allow offloading of block ids") Signed-off-by: Dmytro Linkin Acked-by: Raed Salem Acked-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit edc2055a2bf73258d5731a8f8853397190348b04) Resolves: #1812892- netdev-vport: Use the dst_port in tunnel netdev name (#1727599) [RH gerrit: f4a6fb7574] If tunnel device dst_port is not the default one, "ovs-dpctl dump-flows" will fail. The error message for vxlan is: netdev_linux|INFO|ioctl(SIOCGIFINDEX) on vxlan_sys_4789 device failed: No such device That's because when calling netdev_vport_construct() for netdev vxlan_sys_xxxx, the default dst_port is used. Actually, the dst_port value is in the netdev name. Use it to avoid the error. Signed-off-by: Chris Mi Reviewed-by: Roi Dayan Signed-off-by: Ben Pfaff (cherry picked from commit 6998788197e23c409a6b6cecaa30867ff6d40928) Resolves: #1727599- lib/tc: Fix flow dump for tunnel id equal zero (#1732305) [RH gerrit: 765ba1d1c0] Tunnel id 0 is not printed unless tunnel flag FLOW_TNL_F_KEY is set. Fix that by always setting FLOW_TNL_F_KEY when tunnel id is valid. Fixes: 0227bf092ee6 ("lib/tc: Support optional tunnel id") Signed-off-by: Dmytro Linkin Reviewed-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit 36e50679a6517ee1ec6ed9e4cc83293279a5fffc) Resolves: #1732305- lib/tc: Support optional tunnel id (#1732305) [RH gerrit: 42f09fe96f] Currently the TC tunnel_key action is always initialized with the given tunnel id value. However, some tunneling protocols define the tunnel id as an optional field. This patch initializes the id field of tunnel_key:set and tunnel_key:unset only if a value is provided. In the case that a tunnel key value is not provided by the user the key flag will not be set. Signed-off-by: Adi Nissim Acked-by: Paul Blakey Signed-off-by: Simon Horman (cherry picked from commit 0227bf092ee6b5d18e2b79493d44769cb37ecc98) Resolves: #1732305- tc: Set 'no_percpu' flag for compatible actions (#1780690) [RH gerrit: 42f07f6bd8] Recent changes in Linux kernel TC action subsystem introduced new TCA_ACT_FLAGS_NO_PERCPU_STATS flag. The purpose of the flag is to request action implementation to skip allocating action stats with expensive percpu allocator and use regular built-in action stats instead. Such approach significantly improves rule insertion rate and reduce memory usage for hardware-offloaded rules that don't need benefits provided by percpu allocated stats (improved software TC fast-path performance). Set the flag for all compatible actions. Modify acinclude.m4 to use OVS-internal pkt_cls.h implementation when TCA_ACT_FLAGS is not defined by kernel headers and to manually define struct nla_bitfield32 in netlink.h (new file) when it is not defined by kernel headers. Signed-off-by: Vlad Buslov Reviewed-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit 292d5bd9bb344527e0da19433cf3e51f8a24058c) Resolves: #1780690- rhel: let *-ctl handle runtime directory (#1785586) [RH gerrit: c3763ec916] Recent versions of systemd restores RuntimeDirectory ownership to the unit's User in between execution of *Exec directives (see [1]). Using ExecStartPre to reset RuntimeDirectory ownership to OVS_USER no longer works as expected. The ctl scripts already handle creation of the runtime directory with correct ownership and permissions so we can basically remove RuntimeDirectory from systemd unit file. There is still need to handle ownsership to cover some upgrade scenarios, but success of that will be optional as the directory itself wont exist at first time run. [1] https://github.com/systemd/systemd/issues/12713 Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 7a65e5a9252ac06df62707a571931f501747ecfc) Resolves: #1785586- rhel: set useropts optional for ovsdb-server (#1785586) [RH gerrit: 77bed8f0e4] systemd assesses the presssence of all EnvironmentFile before execution of Exec* directives, thus useropts needs to be optional even though it will always be created at ExecStartPre. Fixes: 94e1e8be3187 ("rhel: run ovn with the same user as ovs") Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 0186c3807cc4500c5699fcf034df3a995c34885c) Resolves: #1785586- rhel: run ovn with the same user as ovs (#1785586) [RH gerrit: 8f5f39b4af] Both ovn and ovs share the same log and run directories which are owned by the user running ovs so it makes sense that ovn runs under that user too to diminish security concerns and possible problems with log rotation. Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 94e1e8be3187a4824ac27ed843396dde5cc02d13) Resolves: #1785586- rhel: secure openvswitch useropts (#1785586) [RH gerrit: 71154ad26f] The openvswitch useropts file is being stored in a directory where the openvswitch user has write permissions. The openvswitch user can then manipulate the file to change the user under which switchd daemon runs. This patch changes the file to /var/openvswitch.useropts preventing any manipulation. Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 27e25e18c1f4cdd789d5670ab9e01dcf02a86b6f) Resolves: #1785586- userspace: Improved packet drop statistics. (#1726568) [RH gerrit: a6b7a37be8] Currently OVS maintains explicit packet drop/error counters only on port level. Packets that are dropped as part of normal OpenFlow processing are counted in flow stats of “drop” flows or as table misses in table stats. These can only be interpreted by controllers that know the semantics of the configured OpenFlow pipeline. Without that knowledge, it is impossible for an OVS user to obtain e.g. the total number of packets dropped due to OpenFlow rules. Furthermore, there are numerous other reasons for which packets can be dropped by OVS slow path that are not related to the OpenFlow pipeline. The generated datapath flow entries include a drop action to avoid further expensive upcalls to the slow path, but subsequent packets dropped by the datapath are not accounted anywhere. Finally, the datapath itself drops packets in certain error situations. Also, these drops are today not accounted for.This makes it difficult for OVS users to monitor packet drop in an OVS instance and to alert a management system in case of a unexpected increase of such drops. Also OVS trouble-shooters face difficulties in analysing packet drops. With this patch we implement following changes to address the issues mentioned above. 1. Identify and account all the silent packet drop scenarios 2. Display these drops in ovs-appctl coverage/show Co-authored-by: Rohith Basavaraja Co-authored-by: Keshav Gupta Signed-off-by: Anju Thomas Signed-off-by: Rohith Basavaraja Signed-off-by: Keshav Gupta Acked-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit a13a0209750c424556189796061c40d08c689467) Resolves: #1726568- netdev-dpdk: Fix sw stats perf drop. (#1790841) [RH gerrit: 54f4571750] Accessing the sw stats in the vhost datapath of a PVP test can incur a performance drop of ~2%. Most of the time these stats will just be getting zero added to them. By checking if there is a non-zero update first, we can avoid accessing them when they won't be updated and avoid the performance drop. Fixes: 2f862c712e52 ("netdev-dpdk: Detailed packet drop statistics.") Signed-off-by: Kevin Traynor Acked-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit 6d77abf4f7ea5596ba8c4a7a27768e83e80a7e46) Resolves: #1790841- netdev-dpdk: Detailed packet drop statistics. (#1790841) [RH gerrit: 1e1b33541a] OVS may be unable to transmit packets for multiple reasons on the userspace datapath and today there is a single counter to track packets dropped due to any of those reasons. This patch adds custom software stats for the different reasons packets may be dropped during tx/rx on the userspace datapath in OVS. - MTU drops : drops that occur due to a too large packet size - Qos drops : drops that occur due to egress/ingress QOS - Tx failures: drops as returned by the DPDK PMD send function Note that the reason for tx failures is not specified in OVS. In practice for vhost ports it is most common that tx failures are because there are not enough available descriptors, which is usually caused by misconfiguration of the guest queues and/or because the guest is not consuming packets fast enough from the queues. These counters are displayed along with other stats in "ovs-vsctl get interface statistics" command and are available for dpdk and vhostuser/vhostuserclient ports. Also the existing "tx_retries" counter for vhost ports has been renamed to "ovs_tx_retries", so that all the custom statistics that OVS accumulates itself will have the prefix "ovs_". This will prevent any custom stats names overlapping with driver/HW stats. Acked-by: Kevin Traynor Signed-off-by: Sriram Vatala Signed-off-by: Ilya Maximets (cherry picked from commit 2f862c712e52fe524e441ab58bb042dcb20214ee) Resolves: #1790841- netdev-dpdk: Reuse vhost function for dpdk ETH custom stats. (#1790841) [RH gerrit: e0d00f70c5] This is yet another refactoring for upcoming detailed drop stats. It allows to use single function for all the software calculated statistics in netdev-dpdk for both vhost and ETH ports. UINT64_MAX used as a marker for non-supported statistics in a same way as it's done in bridge.c for common netdev stats. Co-authored-by: Sriram Vatala Signed-off-by: Ilya Maximets Signed-off-by: Sriram Vatala Acked-by: Kevin Traynor (cherry picked from commit b99ab8aaaf9f6057ddbc332c76ab774dbfd4ccc3) Resolves: #1790841- netdev-dpdk: Refactor vhost custom stats for extensibility. (#1790841) [RH gerrit: b084d7a5c2] vHost interfaces currently has only one custom statistic, but there might be others in the near future. This refactoring makes the code work in the same way as it done for dpdk and afxdp stats to keep the common style over the different code places and makes it easily extensible for the new stats addition. Signed-off-by: Ilya Maximets Reviewed-by: David Marchand Acked-by: Kevin Traynor (cherry picked from commit 5c7ba90d8189ee7b35a1723d5a76dc205720af50) Resolves: #1790841- netdev-dpdk: Fix not reporting rx_oversize_errors in stats. (#1790841) [RH gerrit: 26017f85c8] There is a big code duplication issue with DPDK xstats that led to missed "rx_oversize_errors" statistics. It's defined but not used. Fix that by actually using this stat along with code refactoring that will allow us to not make same mistakes in the future. Macro definitions are perfectly suitable to automate code generation in such cases and already used in a couple of places in OVS for similar purposes. Signed-off-by: Ilya Maximets Reviewed-by: David Marchand Acked-by: Kevin Traynor Acked-by: Ian Stokes (cherry picked from commit 18366d165162051463fd28e9f46d1c2cbe355eb3) Resolves: #1790841- ovsdb replication: Provide option to configure probe interval. (#1788800) [RH gerrit: e8a669ead7] When ovsdb-server is in backup mode and connects to the active ovsdb-server for replication, and if takes more than 5 seconds to get the dump of the whole database, it will drop the connection soon after as the default probe interval is 5 seconds. This results in a snowball effect of reconnections to the active ovsdb-server. This patch handles or mitigates this issue by setting the default probe interval value to 60 seconds and provide the option to configure this value from the unixctl command. Other option could be increase the value of 'RECONNECT_DEFAULT_PROBE_INTERVAL' to a higher value. Acked-by: Mark Michelson Acked-by: Dumitru Ceara Signed-off-by: Numan Siddique Signed-off-by: Ben Pfaff (cherry-picked from commit e988b8abeec9d4be94b519c5d4ed4586ff71fde0) Resolves: #1788800- netdev-dpdk: Add coverage counter to count vhost IRQs. (#1726579) [RH gerrit: 3c3997eb0a] When the dpdk vhost library executes an eventfd_write() call, i.e. waking up the guest, a new callback will be called. This patch adds the callback to count the number of interrupts sent to the VM to track the number of times interrupts where generated. This might be of interest to find out system-calls were called in the DPDK fast path. The coverage counter is called "vhost_notification" and can be read with: $ ovs-appctl coverage/read-counter vhost_notification 13238319 Signed-off-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit 3d56e4ac445d17e69484a95b319ac578e3580b65) Signed-off-by: David Marchand Conflicts: lib/netdev-dpdk.c Resolves: #1726579- netdev-dpdk: add support for the RTE_ETH_EVENT_INTR_RESET event. (#1719644) [RH gerrit: ca1a1a8e1c] Currently, OVS does not register and therefore not handle the interface reset event from the DPDK framework. This would cause a problem in cases where a VF is used as an interface, and its configuration changes. As an example in the following scenario the MAC change is not detected/acted upon until OVS is restarted without the patch applied: $ echo 1 > /sys/bus/pci/devices/0000:05:00.1/sriov_numvfs $ ovs-vsctl add-port ovs_pvp_br0 dpdk0 -- \ set Interface dpdk0 type=dpdk -- \ set Interface dpdk0 options:dpdk-devargs=0000:05:0a.0 $ ip link set p5p2 vf 0 mac 52:54:00:92:d3:33 Signed-off-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit 988fd46391495e1ff92fa0d81204ae712e89ef9d) Resolves: #1719644- bridge: Allow manual notifications about interfaces' updates. (#1719644) [RH gerrit: f58b680888] Sometimes interface updates could happen in a way ifnotifier is not able to catch. For example some heavy operations (device reset) in netdev-dpdk could require re-applying of the bridge configuration. For this purpose new manual notifier introduced. Its function 'if_notifier_manual_report()' could be called directly by the code that aware about changes. This new notifier is thread-safe. Signed-off-by: Ilya Maximets Acked-by: Eelco Chaudron (cherry picked from commit db54e9672052db9c45f84d89454104eb2fedfb02) Signed-off-by: David Marchand Conflicts: lib/automake.mk vswitchd/bridge.c Resolves: #1719644- Shutdown SSL connection before closing socket (#1780745) [RH gerrit: aa97017175] Without shutting down the SSL connection, log messages like: stream_ssl|WARN|SSL_read: unexpected SSL connection close jsonrpc|WARN|ssl:127.0.0.1:47052: receive error: Protocol error reconnect|WARN|ssl:127.0.0.1:47052: connection dropped (Protocol error) would occur whenever the socket is closed. This just adds an SSLStream.close() that calls shutdown() and ignores SSL errors, the same way that lib/stream-ssl.c does in ssl_close(). Signed-off-by: Terry Wilson Signed-off-by: Ben Pfaff (cherry picked from commit 5fe179987d14ff38cce345dbbe57ef1ffe7853cc) Resolves: #1780745- flake8: also check the ovs-check-dead-ifs script (#1751161) [RH gerrit: ecd3a1b407] Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit bc6f73c951af472d221985965085544e60248b03) Resolves: #1751161- ovs-check-dead-ifs: unshadow pid variable (#1751161) [RH gerrit: a086e76181] The pid variable is being shadowed by the list comprehension in the os.execvp() call. This can generate flakes / warnings in some environments so fix it. Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit 78e2a56927b5ba7e6f8808e3cf967171a2708a57) Resolves: #1751161- ovs-check-dead-ifs: python3 print format (#1751161) [RH gerrit: d61553f744] The print call changed in python3, so update it. Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit c864b82d889dc47fb88d5cdde8caeca962776871) Resolves: #1751161- ovs-tcpundump: exit when getting version (#1764127) [RH gerrit: ea9923af22] Running 'ovs-tcpundump -V' will cause ovs-tcpundump to start processing on stdin. Instead, print the version and exit. Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit c691cffb03ba3a7595f364c2766fdd2ace8c3842) Resolves: #1764127- ovs-tcpundump: allow multiple packet lengths (#1764125) [RH gerrit: ac3b779405] The tcpundump tool expects all packets to be a length which aligns to exactly a 4-nibble boundary. This means packets like DNS requests will be stripped before being correctly processed. Fix this by allowing at least two nibbles (or one byte) alignment. Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit 1051576cf2b8a6ffddf849d984c250a8456e6144) Resolves: #1764125- jsonrpc: increase input buffer size from 512 to 4096 (#1776883) [RH gerrit: 9c93db8373] Increase jsonrpc input buffer size from 512 to 4096 bytes in order to reduce the syscall overhead when downloading huge db size Acked-by: Mark Michelson Signed-off-by: Lorenzo Bianconi Signed-off-by: Ben Pfaff (cherry picked from commit ea5c1ba0e3b899b8b6684f23a44bbfd4331815ee) Resolves: #1776883- netdev-dpdk: Track vhost tx contention. (#1740144) [RH gerrit: 31112a9502] Add a coverage counter to help diagnose contention on the vhost txqs. This is seen as dropped packets on the physical ports for rates that are usually handled fine by OVS. Acked-by: Eelco Chaudron Signed-off-by: David Marchand Signed-off-by: Ilya Maximets (cherry picked from commit 9ff24b9c9323652f9dc80ff7928148c4af12da9c) Resolves: #1740144- ovsdb-server: Allow replication from older schema version servers. (#1766586) [RH gerrit: cb53fe2282] Presently, replication is not allowed if there is a schema version mismatch between the schema returned by the active ovsdb-server and the local db schema. This is causing failures in OVN DB HA deployments during uprades. In the case of OpenStack tripleo deployment with OVN, OVN DB ovsdb-servers are deployed on a multi node controller cluster in active/standby mode. During minor updates or major upgrades, the cluster is updated one at a time. If a node A is running active OVN DB ovsdb-servers and when it is updated, another node B becomes active. After the update when OVN DB ovsdb-servers in A are started, these ovsdb-servers fail to replicate from the active if there is a schema version mismatch. This patch addresses this issue by allowing replication even if there is a schema version mismatch only if all the active db schema tables and its colums are present in the local db schema. This should not result in any data loss. Signed-off-by: Numan Siddique Signed-off-by: Ben Pfaff (cherry picked from commit cec7005bde4bc81de7b94a3dc4b4160800c98be7) Resolves: #1766586- ovsdb-server: Don't drop all connections on read/write status change. (#1761572) [RH gerrit: 5a0a77328b] The commit [1] force drops all connections when the db read/write status changes. Prior to the commit [1], when there was read/write status change, the existing jsonrpc sessions with 'db_change_aware' set to true, were not updated with the changed 'read_only' value. If the db status was changed to 'standby', the existing clients could still write to the db. In the case of pacemaker OVN HA, OVN OCF script 'start' action starts the ovsdb-servers in read-only state and later, it sets to read-write in the 'promote' action. We have observed that if some ovn-controllers connect to the SB ovsdb-server (in read-only state) just before the 'promote' action, the connection is not reset all the times and these ovn-controllers remain connected to the SB ovsdb-server in read-only state all the time. Even though the commit [1] calls 'ovsdb_jsonrpc_server_reconnect()' with 'forced' flag set to true when the db read/write status changes, somehow the FSM misses resetting the connections of these ovn-controllers. I think this needs to be addressed in the FSM. This patch doesn't address this FSM issue. Instead it changes the behavior of 'ovsdb_jsonrpc_server_set_read_only()' by setting the 'read_only' flag of all the jsonrpc sessions instead of forcefully resetting the connection. I think there is no need to reset the connection. In large scale production deployements with OVN, this results in unnecessary waste of CPU cycles as ovn-controllers will have to connect twice - once during 'start' action and again during 'promote'. [1] - 2a9679e3b2c6("ovsdb-server: drop all connections on read/write status change") Acked-by: Dumitru Ceara Signed-off-by: Numan Siddique Signed-off-by: Ben Pfaff (cherry picked from commit a5ff4874ba4bb60ced7bda6ad97d0be38e8172eb) Resolves: #1761572- ofproto-dpif: Fix continuation with patch port (#1761461) [RH gerrit: 069d4bd437] This patch fixes the ofp_port to odp_port translation issue on patch port with nxt_resume. When OVS resumes processing a packet from nxt_resume, OVS does not translate the ofp in_port to odp in_port correctly if the packet is originally received from a patch port. Currently,OVS sets the odp in_port for this resume pakcet as ODPP_NONE and push the resume packet back to the datapath. Later on, if the packet goes through a recirc, OVS will generate the following message since it can not translate odp in_port (ODPP_NONE) back to ofp in_port during upcall, and push down a datapath rule to drop the packet. ofproto_dpif_upcall(handler16)|INFO|received packet on unassociated datapath port 4294967295 When OVS revalidates the drop datapath flow with ODPP_NONE in_port, we will see the following warning. ofproto_dpif_upcall(revalidator18)|WARN|Failed to acquire udpif_key corresponding to unexpected flow (Invalid argument): ufid:.... This patch resolves this issue by storing the odp in_port in the continuation messages, and restores the odp in_port before push the packet back to the datapath. VMWare-BZ: 2364696 Signed-off-by: Yi-Hung Wei Signed-off-by: Ben Pfaff (cherry picked from commit 88d2ac50aa4e3383e185b698a1b3a44a6f7b4f80) Resolves: #1761461- vswitch: ratelimit the device add log (#1737146) [RH gerrit: 052e541d45] It's possible that a port added to the system with certain kinds of invalid parameters will cause the 'could not add' log to be triggered. When this happens, the vswitch run loop can continually re-attempt adding the port. While the parameters remain invalid the vswitch run loop will re-trigger the warning, flooding the syslog. This patch adds a simple rate limit to the log. Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit 45bd8c563273fb914ff1960a53cfdcfddb0a5588) Resolves: #1737146- netdev-dpdk: Enable tx-retries-max config. (#1747531) [RH gerrit: 734086f5d4] vhost tx retries can provide some mitigation against dropped packets due to a temporarily slow guest/limited queue size for an interface, but on the other hand when a system is fully loaded those extra cycles retrying could mean packets are dropped elsewhere. Up to now max vhost tx retries have been hardcoded, which meant no tuning and no way to disable for debugging to see if extra cycles spent retrying resulted in rx drops on some other interface. Add an option to change the max retries, with a value of 0 effectively disabling vhost tx retries. Signed-off-by: Kevin Traynor Acked-by: Eelco Chaudron Acked-by: Flavio Leitner Acked-by: Ilya Maximets Signed-off-by: Ian Stokes (cherry picked from commit 080f080c3bc1e87da4affdce28a01b1a87a60364) Resolves: #1747531- netdev-dpdk: Add custom stat for vhost tx retries. (#1747531) [RH gerrit: 0c238ac414] vhost tx retries may occur, and it can be a sign that the guest is not optimally configured. Add a custom stat so a user will know if vhost tx retries are occurring and hence give a hint that guest config should be examined. Signed-off-by: Kevin Traynor Signed-off-by: Ian Stokes (cherry picked from commit c161357d5d96f32144f4b63ee6b06049c0cc0a09) Resolves: #1747531- doc: Move vhost tx retry info to separate section. (#1747531) [RH gerrit: 91d9e4d92b] vhost tx retry is applicable to vhost-user and vhost-user-client, but was in the section that compares them. Also, moved further down the doc as prefer to have more fundamental info about vhost nearer the top. Fixes: 6d6513bfc657 ("doc: Add info on vhost tx retries.") Reported-by: David Marchand Signed-off-by: Kevin Traynor Reviewed-by: David Marchand Signed-off-by: Ian Stokes (cherry picked from commit 4e6c16db31806dfcf84d6ebdb0d708cfa39bd08f) Resolves: #1747531- netdev-vport: Make ip6gre netdev type to use TC rules (#1725623) [RH gerrit: d3315b8035] The offload api functions already assigned to every tunnel class. For ip6gre tunnel class only need to also assign the get_ifindex function, similarly as done in commit 5e63eaa969a3 ("netdev-vport: Make gre netdev type to use TC rules"). Signed-off-by: Eli Britstein Reviewed-by: Roi Dayan Signed-off-by: Ben Pfaff (cherry picked from commit 8732450c2ee76410c7fbebaebe5f9cf27252208f) Resolves: #1725623- tunnel: Add layer 2 IPv6 GRE encapsulation support. (#1725623) [RH gerrit: 0c20e7e83d] The patch adds ip6gre support. Tunnel type 'ip6gre' with packet_type= legacy_l2 is a layer 2 GRE tunnel over IPv6, carrying inner ethernet packets and encap with GRE header with outer IPv6 header. Encapsulation of layer 3 packet over IPv6 GRE, ip6gre, is not supported yet. I tested it by running: under kernel 5.2 and for userspace: Tested-by: Greg Rose Tested-at: https://travis-ci.org/gvrose8192/ovs-experimental/builds/552977116 Reviewed-by: Greg Rose Reviewed-by: Eli Britstein Signed-off-by: William Tu Signed-off-by: Ben Pfaff (cherry picked from commit a3173ee1476840aaa6d90640169bd276568ff4c1) Resolves: #1725623- ovsdb-server: drop all connections on read/write status change (#1720947) [RH gerrit: 0f0be40ee0] Prior to this patch, only db change aware connections were dropped on a read/write status change. However, current schema in OVN does not allow clients to monitor whether a particular DB changes this status. In order to accomplish this, we'd need to change the schema and adapting ovsdb-server and existing clients. Before tackling that, this patch is changing ovsdb-server to drop *all* the existing connections upon a read/write status change. This will force clients to reconnect and honor the change. Reported-at: https://mail.openvswitch.org/pipermail/ovs-discuss/2019-July/048981.html Signed-off-by: Daniel Alvarez Signed-off-by: Ben Pfaff (cherry picked from commit 2a9679e3b2c6fde74ddae362d88ba16db7fbfc38) Resolves: #1720947- netdev-tc-offloads: Support match on priority tags (#1725623) [RH gerrit: 895735b382] The logic by which a TC rule has a VLAN match is by the VLAN TCI field, either the VID, PCP or CFI are non-zero. For priority-tag packets there is a VLAN tag header with a zero VLAN TCI. Match on existence of VLAN header (TPID) regardless of TCI matching. Signed-off-by: Eli Britstein Reviewed-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit 0b0a84783cd6048ca3d35af0f5b4652cecd34358) Resolves: #1725623- rhel: limit stack size to 2M. (#1720315) [RH gerrit: 79c6209e71] The default stack size in Fedora/RHEL is 8M, which means when ovs-vswitchd daemon starts and uses --mlockall (default), it will dirty all memory regions for all threads which is proportionally to the number of CPUs. On a big host this increases memory usage to many hundreds of megabytes while OVS actually requires much less. This patch relies on systemd to limit to 2M/thread. That is much more than the minimum documented at function ovs_thread_create(): /* Some small systems use a default stack size as small as 80 kB, but OVS * requires approximately 384 kB according to the following analysis: * https://mail.openvswitch.org/pipermail/ovs-dev/2016-January/308592.html * * We use 512 kB to give us some margin of error. */ Acked-By: Timothy Redaelli Tested-By: Timothy Redaelli Signed-off-by: Flavio Leitner Signed-off-by: Ben Pfaff (cherry picked from commit b82a90e266e1246fe2973db97c95df22558174ea) Resolves: #1720315- Add a new OVS action check_pkt_larger (#1702564) [RH gerrit: c899ac5788] This patch adds a new action 'check_pkt_larger' which checks if the packet is larger than the given size and stores the result in the destination register. Usage: check_pkt_larger(len)->REGISTER Eg. match=...,actions=check_pkt_larger(1442)->NXM_NX_REG0[0],next; This patch makes use of the new datapath action - 'check_pkt_len' which was recently added in the commit [1]. At the start of ovs-vswitchd, datapath is probed for this action. If the datapath action is present, then 'check_pkt_larger' makes use of this datapath action. Datapath action 'check_pkt_len' takes these nlattrs * OVS_CHECK_PKT_LEN_ATTR_PKT_LEN - 'pkt_len' to check for * OVS_CHECK_PKT_LEN_ATTR_ACTIONS_IF_GREATER (optional) - Nested actions to apply if the packet length is greater than the specified 'pkt_len' * OVS_CHECK_PKT_LEN_ATTR_ACTIONS_IF_LESS_EQUAL (optional) - Nested actions to apply if the packet length is lesser or equal to the specified 'pkt_len'. Let's say we have these flows added to an OVS bridge br-int table=0, priority=100 in_port=1,ip,actions=check_pkt_larger:100->NXM_NX_REG0[0],resubmit(,1) table=1, priority=200,in_port=1,ip,reg0=0x1/0x1 actions=output:3 table=1, priority=100,in_port=1,ip,actions=output:4 Then the action 'check_pkt_larger' will be translated as - check_pkt_len(size=100,gt(3),le(4)) datapath will check the packet length and if the packet length is greater than 100, it will output to port 3, else it will output to port 4. In case, datapath doesn't support 'check_pkt_len' action, the OVS action 'check_pkt_larger' sets SLOW_ACTION so that datapath flow is not added. This OVS action is intended to be used by OVN to check the packet length and generate an ICMP packet with type 3, code 4 and next hop mtu in the logical router pipeline if the MTU of the physical interface is lesser than the packet length. More information can be found here [2] [1] - https://kernel.googlesource.com/pub/scm/linux/kernel/git/davem/net-next/+/4d5ec89fc8d14dcdab7214a0c13a1c7321dc6ea9 [2] - https://mail.openvswitch.org/pipermail/ovs-discuss/2018-July/047039.html Reported-at: https://mail.openvswitch.org/pipermail/ovs-discuss/2018-July/047039.html Suggested-by: Ben Pfaff Signed-off-by: Numan Siddique CC: Ben Pfaff CC: Gregory Rose Acked-by: Mark Michelson Signed-off-by: Ben Pfaff (cherry picked from commit 5b34f8fc3b38b430c05ee39a0c84f8e9da24cd3a) Conflicts: NEWS tests/ofprot-dpif.at +L10571 - Not really a conflict. Had to fix the test case because we don't have the commit - dbf4a92800d0365cc3ec3c0e99df56e2ba676cb7 Resolves: #1702564- netlink linux: account for the netnsid netlink attr. (#1692812) [RH gerrit: ce14b518b7] The buffer needs to be reallocated and data copied when the netnsid netlink attribute is included, so avoid that by accounting the attribute when the buffer is initially allocated. Fixes: 756819ddd788 ("netdev-linux: use netlink to update netdev.") Acked-by: Aaron Conole Signed-off-by: Flavio Leitner Signed-off-by: Ben Pfaff (cherry picked from commit b43762a5ad3343d28e61ed518c97802c5bd8f380) Resolves: #1692812- rhel: Add an example to specify custom options (#1687775) [RH gerrit: a7dd6b6eb5] Add an example to specify custom options of ovs-vswitchd and ovsdb-server. In the example, the log level for file and console destinations is set to dbg. Signed-off-by: Timothy Redaelli Signed-off-by: Ben Pfaff (cherry picked from commit 175b9a6401da76994bac955ebc9f440634e63d55) Resolves: #1687775- ovs-ctl: Permit to specify additional options (#1687775) [RH gerrit: b8a874b82e] Currently using ovs-ctl is not possible to specify additional options for ovs-vswitchd and ovsdb-server (for example to specify a different loglevel during daemon startup). This patch adds --ovs-vswitchd-options and --ovsdb-server-options options to ovs-ctl in order to specify the additional options. Due to word splitting it may not be possible to specify an option that includes whitespaces. Reported-at: https://bugzilla.redhat.com/1664794 Reported-by: Matt Flusche Signed-off-by: Timothy Redaelli Signed-off-by: Ben Pfaff (cherry picked from commit fce20b8b73b1c08bc0f51a04a2109d80e4bc8b51) Resolves: #1687775- Merge commit 'a4efc599e0244e43fd417b2fb38b7f120eb1ebd4' into fast-datapath-rhel-7 [RH gerrit: 8da1428afe]- Backport "bus/pci: fix VF memory access" (#1851170)- Backport the upstreammed fixes for HWOL (#1812892)- Backport fixes for CVE-2020-10722 & CVE-2020-10723 (#1831391 & #1831394)- Backport HWOL fixes for ingress qdisc (#1812892)- Update to DPDK 18.11.7 (#1822653)- Rebase to last branch-2.11 commit and DPDK 18.11.6 (#1822653)- Backport "vhost: fix packed virtqueue ready condition" (#1793068)- Revert Backport "ovs-tc: support OvS internal port offload" and deps (#1737982) - Revert Backport "netdev-tc-offloads: Use correct hook qdisc at init tc flow" (#1737982)- Backport "vhost: fix vring memory partially mapped" (#1798996) - Backport "vhost: protect log address translation in IOTLB update" (#1798996)- Backport "netdev-vport: Use the dst_port in tunnel netdev name" (#1727599)- Backport "dpif-netlink: Allow offloading of flows with dl_type 0x1234." (#1722337)- Backport "lib/tc: Support optional tunnel id" (#1732305) Backport "lib/tc: Fix flow dump for tunnel id equal zero" (#1732305)- Backport "tc: implement support for action flags" (#1780690)- Backport "rhel: secure openvswitch useropts" (#1785586) - Backport "rhel: run ovn with the same user as ovs" (#1785586) - Backport "rhel: set useropts optional for ovsdb-server" (#1785586) - Backport "rhel: let *-ctl handle runtime directory" (#1785586)- Backport "userspace: Improved packet drop statistics" (#1726568)- Detailed packet drop statistics and related patches (#1790841) - Backport "netdev-dpdk: Fix not reporting rx_oversize_errors in stats." (#1790841) - Backport "netdev-dpdk: Refactor vhost custom stats for extensibility." (#1790841) - Backport "netdev-dpdk: Reuse vhost function for dpdk ETH custom stats." (#1790841) - Backport "netdev-dpdk: Detailed packet drop statistics." (#1790841) - Backport "netdev-dpdk: Fix sw stats perf drop." (#1790841)- Backport "vhost: fix virtqueue not accessible" (#1792399) - Backport "vhost: prevent zero copy mode if IOMMU is on" (#1792399) - Backport "vhost: convert buffer addresses to GPA for logging" (#1792399) - Backport "vhost: translate incoming log address to GPA" (#1792399) - Backport "vhost: fix vring address handling during live migration" (#1792399) - Backport "vhost: add external message handling to the API" (#1792399)- Backport "ovsdb replication: Provide option to configure probe interval" (#1788800)- Backport DPDK interrupt fixes for qede (#1738789)- Backport "vhost: add device op when notification to guest is sent" (#1726579) - Backport "netdev-dpdk: Add coverage counter to count vhost IRQs" (#1726579)- Backport "net/i40e: downgrade error log" (#1719644) - Backport "net/i40e: re-program promiscuous mode on VF interface" (#1733402) - Backport "bridge: Allow manual notifications about interfaces' updates" (#1719644) - Backport "netdev-dpdk: add support for the RTE_ETH_EVENT_INTR_RESET" (#1719644)- Fix librte_pmd_mlx{4,5}_glue.so error in Execshield part of RPMDiff by backporting the DPDK flags from dpdk spec file.- Backport "Shutdown SSL connection before closing socket" (#1780745)- Backport "ovs-check-dead-ifs: python3 print format" (#1751161) - Backport "ovs-check-dead-ifs: unshadow pid variable" (#1751161) - Backport "flake8: also check the ovs-check-dead-ifs script" (#1751161)- Backport "ovs-tcpundump: exit when getting version" (#1764127)- Backport "ovs-tcpundump: allow multiple packet lengths" (#1764125)- Rebase internal DPDK to 18.11.5 (#1760246) (CVE-2019-14818)- Backport "jsonrpc: increase input buffer size from 512 to 4096" (#1776883)- Backport "netdev-dpdk: Track vhost tx contention." (#1740144)- Backport "ovsdb-server: Allow replication from older schema version servers" (#1766586)- Backport "ovsdb-server: Don't drop all connections on read/write status change" (#1761572)- Backport "ofproto-dpif: Fix continuation with patch port" (#1761461)- Backport "vswitch: ratelimit the device add log" (#1737146)- Backport "Add custom stat for vhost tx retries." (#1747531) - Backport "Enable tx-retries-max config." (#1747531)- tnl-neigh: Use outgoing ofproto version (#1685642)- Bump release- Renumbered dpdk patches - Backport IOVA fixes (#1711739)- Backport "ovsdb-server: drop all connections on read/write status change" (#1720947)- Increase CONFIG_RTE_MAX_ETHPORTS to 128 (#1730421)- Backport "tunnel: Add layer 2 IPv6 GRE encapsulation support." and "netdev-vport: Make ip6gre netdev type to use TC rules" (#1725623)- Rebase internal DPDK to 18.11.2 (#1713698)- Backport "net/i40e: fix dropped packets statistics name" (#1728610)- Backport "netdev-tc-offloads: Use correct hook qdisc at init tc flow" (#1721219)- Backport "netdev-tc-offloads: Support match on priority tags" (#1722249)- Backport Vhost performance regression fixes (#1672538)- Backport "rhel: limit stack size to 2M." (#1720315)- Backport "ovs-tc: support OvS internal port offload" and deps (#1702334)- Backport "[OVN] Fragmentation support - check_pkt_larger action" (#1702564)- Backport "net/qede: support IOVA VA mode" (#1684605)- Backport cpu affinity fixes (#1687320)- Add missing dependencies for ovs-tcpdump (#1697978)- fixed netlink msg corruption when updating netdev. (#1692812)- Backport "net/bnxt: support IOVA VA mode" (#1645523)- Backport "ovs-ctl: Permit to specify additional options" (#1687775) - Remove useless -fPIC from DPDK- Backport "rhel: Use PIDFile on forking systemd service files" (#1684477)- Update to official 2.11 release- Snapshot of branch-2.11 d3a10db4fd38- Snapshot of branch-2.11 d4ff5b2be7fc- Update to a snapshot of OVS 2.11 from master- Backport "OVN: add static IP support to IPAM" (#1664028)- Backport some patches to improve offload indications (#1655990)- Add "Requires: openvswitch = %{version}-%{release}" to python-openvswitch2.10 (#1662944)- Backport "OVN: add mac address only support to IPAM/MACAM" (#1662905)- Backport "ovn-controller: Inject GARPs to logical switch pipeline to update neighbors" (#1643902)- Backport 'ovs-ctl: fix system-id.conf owner' (#1659391) - Do not check /var/log/openvswitch owner/group (#1659391)- Backport "ovn: Fix the invalid eth.dst and ip6.dst set by nd_ns action for certain cases." (#1656018)- Backport "dpif-netdev: Add vlan to mask for flow_put operation" (#1649516)- Backport "ovn: Avoid tunneling for VLAN packets redirected to a gateway chassis" (#1561880)- Backport "mem: fix memory initialization time" (#1647498)- Backport "tests: Use the default key length when generating RSA keys"- Backport "net/qede: fix crash when configure fails" (#1648183)- Backport 'pinctrl: Fix dp_packet structure leak' and 'pinctrl: Fix crash on buffered packets hmap double remove'. Moreover align 'ovn -- 3 HVs, 3 LS, 3 lports/LS, 1 LR' test to upstream one (#1649008)- Backup "netdev-dpdk: Bring link down when NETDEV_UP is not set" (#1645288)- OVN: configure L2 address according to the used IP address (#1648272)- Backport "bond: Honor updelay and downdelay when LACP is in use" (#1646923)- OVN: introduce mac_prefix support to IPAM (#1647750)- Backport "ofproto-dpif-xlate: Avoid deadlock on multicast snooping recursion" (#1643065)- Re-enable "make check"- Update to DPDK 17.11.4 (#1566069)- Ship statically linked OVS binaries (#1643478)- Backport connmgr: Fix vswitchd abort when a port is added and the controller is down (#1637926)- Backport "ovn: Add DHCP support for option 252" (#1641740)- Backport "net/i40e: fix VLAN offload setting issue" (#1637893)- Backport "Python: Make Row's __getattr__ less error prone" (#1639963)- OVN: ovn-ctl: Fix the wrong pidfile argument passed to ovsdb-servers (#1636714)- OVN: Support processing DHCPv6 information request message type (#1636874)- OVN: Fix IPv6 DAD failure for container ports (#1616129)- OVN: Fix the issue in IPv6 Neigh Solicitation responder for router IPs (#1567735)- OVN: add buffering support for ip packets (#1637466)- Fix null pointer (#1634015)- OVN: add CT_LB action to ovn-trace (#1635344)- Backport NFP PMD's non-root related commits for > 1TB of RAM (#1634820): - net/nfp: support IOVA VA mode - bus/pci: forbid IOVA mode if IOMMU address width too small - net/nfp: check hugepages IOVAs based on DMA mask - mem: use address hint for mapping hugepages - bus/pci: use IOVAs check when setting IOVA mode - mem: add function for checking memsegs IOVAs addresses - mem: fix max DMA maskbit size- Backport "Remove support for multiple queues per port" (#1634015)- Backport EMC reorder fix (#1565205)- Backport per-port socket netlink creation with EPOLLEXCLUSIVE (#1634015)- Backport roundrobin rxq to pmd assignment (#1631797)- Backport "ovs-save: Don't always include the default flow during restore" (#1628905)- applied Fix translation of groups with no buckets (#1626488)- Removed provides and obsoletes for openvswitch-dpdk (#1628603)- Backported "net/mlx{4,5}: avoid stripping the glue library" (#1627700)- Updated with 2.10.0 official tarball (#1618551)- Sync'ed with fd-next (4452afaa58) - vhost: flush IOTLB cache on new mem table handling (#1609643) - OVN: introduce ovs-appctl command to monitor HVs sb (#1593804)- Snapshot of branch-2.10 6bced903bb50- Snapshot of branch-2.10 58a7ce60b9f7- Snapshot of branch-2.10 faf64fb8861f- Snapshot of branch master 7a78d1c1ad73- Sync'ed spec file with fd-next-57 (shared linking). (DPDK patches not included) - Fixed package dependencies (#1610603)- Snapshot of branch master b1ca64f020f7- Replace macro %{name} with 'openvswitch'.- Snapshot of branch master 1ac690899592- Versioned conflict to be less than 2.10.- Snapshot of branch master 3c921cc2b6b7- Fixed unbound requires and buildrequires.- Snapshot of branch master 93c0ef12039c- Snapshot of branch master 79d0dfa4e99a- Snapshot of branch master e46148133067- Snapshot of branch master 61677bf976e9- snapshot of branch master- Backport "net/mlx5: fix memory region cache lookup" (#1581230) - Backport "net/mlx5: fix memory region boundary checks" (#1581230)- Backport "net/qede: fix memory alloc for multiple port reconfig" (#1589866)- Backport "net/qede: fix unicast filter routine return code" (#1578590)- Backport "net/qede: fix L2-handles used for RSS hash update" (#1578981)- Backport "net/nfp: fix lock file usage" (#1583670)- Backport "net/nfp: configure default RSS reta table" (#1583161)- Backport "netdev-dpdk: don't enable scatter for jumbo RX support for nfp" (#1578324)- Backport "ovn pacemaker: Fix promotion issue when the master node is reset" (#1579025)- Backport spec file modfications from "rhel: Use openvswitch user/group for the log directory"- Backport "vhost: improve dirty pages logging performance" (#1552465)- Backport "ovn: Set proper Neighbour Adv flag when replying for NS request for router IP" (#1567735)- Enable QEDE PMDs (only on x86_64) (#1578003)- ovn-nbctl: Show gw chassis in decreasing prio order (#1576725)- Fix hugetlbfs group when DPDK is enabled- Backport "eal: abstract away the auxiliary vector" (#1560728) - Re-enable DPDK on ppc64le- Require the selinux policy module (#1555440)- Backport fix QEDE PMD (#1494616)- Backport "net/nfp: fix mbufs releasing when stop or close" (#1575067)- Backport net/mlx4: fix broadcast Rx (#1568908)- Backport mempool use after free fix and debug (#1575016)- Fix the email address in the changelog.- Backport fix for missing user during install/upgrade (#1559374)- Backport fix for Unicode encoding in Python IDL (#1547065)- Backport the cisco enic patches- Backport a fix for "Offload of Fragment Matching in OvS Userspace" (#1559111)- Backport "ovn-controller: Handle Port_Binding's "requested-chassis" option" (#1559222)- Backport "python: avoid useless JSON conversion to enhance performance" (#1551016)- Backport "ovn: Set router lifetime value for IPv6 periodic RA" (#1567735) - Remove useless libpcap-devel dependency- Backport DPDK CVE-2018-1059 (#1544298)- Backport fix for PMD segfault when BNXT receives tunneled traffic (#1567634)- Backport patches to make NFP detect the correct firmware (#1566712) - Backport "rhel: Fix literal dollar sign usage in systemd service files"- Backport "rhel: don't drop capabilities when running as root" - Change owner of /etc/openvswitch during upgrade- Disable DPDK on ppc64le- Disable DPDK on aarch64- fixes i40e link status timeout trough direct register access (#1559612)- Enable BNXT, MLX4, MLX5 and NFP (aligned from FDB)- Backport "Offload of Fragment Matching in OvS Userspace" (#1559111)- Avoid to unpack openvswitch 2 times and to overwrite all the patched files Fixes 2.9.0-4- Backport "ofproto-dpif-xlate: translate action_set in clone action" (#1544892)- Backport "ovn: Calculate UDP checksum for DNS over IPv6" (#1553023)- Require the latest rhel selinux policy (#1549673)- Backport vhost patches (#1541881)- Don't require python-sphinx directly, but built it since python-sphinx is in the optional repository that is not available on RHEV and TPS test fails.- Don't verify the user and group of /etc/openvswitch and /etc/sysconfig/openvswitch This is needed since we cannot change the user and group if you upgrade from an old version that still uses root:root.- Update to OVS 2.9.0 + DPDK 17.11 (#1475436) - Backport of ofproto-dpif: Delete system tunnel interface when remove ovs bridge (#1505776) - Backport DPDK patches from FDB (vhost user async fix and enic fixes) - Backport 94cd8383e297 and 951d79e638ec to fix permissions (#1489465) - Use a static configuration file for DPDK- Rebase to latest OVS branch-2.7 fixes + DPDK 16.11.4 (#1533872)- Remove ovs-test and ovs-vlan-test from openvswitch-test package - Add an option to enable openvswitch-ovn-docker package (disabled by default)- Update to OVS 2.7.3 + branch-2.7 bugfixes (#1502742)- Backport of fix for i40e flow control get (#1491791)- Rebase to latest OVS branch fixes + DPDK 16.11.3- Backport of enic driver crash fix to dpdk-16.11 (#1489010)- Re-enable Cisco enic PMD (#1482675)- Update based on multi-arch- Disable unsupported PMDs (#1482675) - software and hardware PMDs audited by the team- Backport mmap fix for memory initialization on ppc64le to dpdk-16.11- Backport support for vfio-pci based PMD in ppc64le to dpdk-16.11- Backport support for Intel XL710 (i40e) pmd in ppc64le to dpdk-16.11- Update to OVS 2.7.2 + branch-2.7 bugfixes (#1472854) - Add a symlink of the OCF script in the OCF resources folder (#1472729)- Align to FDB openvswitch-2.7.1-1.git20170710.el7fdb (#1459286)- backport "mcast-snooping: Avoid segfault for vswitchd" (#1456356) - backport "mcast-snooping: Flush ports mdb when VLAN cfg changed." (#1456358)- backport patch to not automatically restard ovn svcs after upgrade (#1438901)- rconn: Avoid abort for ill-behaved remote (#1449109)- Fix race in "PMD - change numa node" test (#1447714) - Report only un-deleted groups in group stats replies. (#1447724) - Workaround some races in "ofproto - asynchronous message control" tests (#1448536)- Fix an issue using set_field action on nw_ecn (#1410715)- backport patch to fix uni-dir vhost perf drop (#1414919)- backport patch to correct port number in firewalld service file (#1390938)- backport patch to enable/disable libcap-ng support (--with libcapng)- Fix an MTU issue with ovs mirror ports (#1426342)- update spec file to install firewalld service files (#1390938)- vhostuser client mode support for ifup/ifdown (#1418957)- OVN-DHCP is not sending DHCP responses after a MAC change in north db (#1418261)- systemd service starts too fast (#1422227)- iptables should be easily configurable for OVN hosts and OVN central server (#1390938)- ovn: IPAM has no reply to DHCP request for renewal (#1415449)- ovn-controller: Provide the option to set Encap.options:csum (#1418742)- fixed broken service after a package upgrade (#1403958)- ovsdb-idlc: Initialize nonnull string columns for inserted rows. (#1405094)- OVN: Support IPAM with externally specified MAC (#1368043)- Update to OVS 2.6.1 + branch-2.6 bugfixes (#1335865) - Update to use DPDK 16.11 (#1335865) - Enable OVN- ifnotifier: do not wake up when there is no db connection (#1397504)- Use instant sending instead of queue (#1397481)- dpdk vhost: workaround stale vring base (#1376217)- Applied tnl fix (#1346232)- Applied the systemd backports- Fixed OVS to not require SSSE3 if DPDK is not used (#1378501)- Fixed a typo (#1385096)- Do not restart the service after a package upgrade (#1385096)- Permit running just the kernel datapath tests (#1375660)- Obsolete openvswitch-dpdk < 2.6.0 to provide migration path - Add spec option to run kernel datapath tests (#1375660)- Backport ovs-tcpdump support (#1335560) - Add ovs-pcap, ovs-tcpdump and ovs-tcpundump to -test package- Add openvswitch-dpdk provide for testing and depending on dpdk-enablement - Disable bnx2x driver, it's not stable - Build dpdk with -Wno-error to permit for newer compilers - Drop subpkgs conditional from spec, its not useful anymore- Fix adding ukeys for same flow by different pmds (#1364898)- Fixed ifup-ovs to support DPDK Bond (#1360426)- Fixed ifup-ovs to delete the ports first (#1359890)- pull bugfixes from upstream 2.5 branch (#1360431)- Removed redundant provides for openvswitch - Added epoch to the provides for -static package- Renamed to openvswitch (dpdk enabled) - Enabled sub-packages - Removed conflicts to openvswitch - Increased epoch to give this package preference over stable- pull bugfixes from upstream 2.5 branch (#1346313)- Enable DPDK bnx2x driver (#1330589) - Add README.DPDK-PMDS document listing drivers included in this package- Run testsuite by default on x86 arches (#1318786) (this sync the spec with non-dpdk version though the testsuite was already enabled here)- eliminate debuginfo-artifacts (#1281913)- Update to OVS to 2.5.0 and bundled DPDK to 2.2.0 (#1317889)- Provide openvswitch ver-rel (#1281894)- ExclusiveArch to x86_64 (dpdk) - Provides bundled(dpdk) - Re-enable testsuite- Enable building from pre-release snapshots, update to pre 2.4 version - Bundle a minimal, private build of DPDK 2.0 and link statically - Rename package to openvswitch-dpdk, conflict with regular openvswitch - Disable all sub-packages- First build on F14python-openvswitch2.11 !!#$%&''))++-.//123455789::<=>?@ABCDEFGHIIKKMNOOQRSSUUWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|2.11.3-90.el82.11.3-90.el82.11.3-90.el82.11.82.11.82.10.0-6    .build-id57b8c3c60aa694acde514321665d7691df41185bovsovs-2.11.8-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txtrequires.txttop_level.txt__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycdaemon.cpython-36.opt-1.pycdaemon.cpython-36.pycdirs.cpython-36.opt-1.pycdirs.cpython-36.pycfatal_signal.cpython-36.opt-1.pycfatal_signal.cpython-36.pycfcntl_win.cpython-36.opt-1.pycfcntl_win.cpython-36.pycjson.cpython-36.opt-1.pycjson.cpython-36.pycjsonrpc.cpython-36.opt-1.pycjsonrpc.cpython-36.pycovsuuid.cpython-36.opt-1.pycovsuuid.cpython-36.pycpoller.cpython-36.opt-1.pycpoller.cpython-36.pycprocess.cpython-36.opt-1.pycprocess.cpython-36.pycreconnect.cpython-36.opt-1.pycreconnect.cpython-36.pycsocket_util.cpython-36.opt-1.pycsocket_util.cpython-36.pycstream.cpython-36.opt-1.pycstream.cpython-36.pyctimeval.cpython-36.opt-1.pyctimeval.cpython-36.pycutil.cpython-36.opt-1.pycutil.cpython-36.pycversion.cpython-36.opt-1.pycversion.cpython-36.pycvlog.cpython-36.opt-1.pycvlog.cpython-36.pycwinutils.cpython-36.opt-1.pycwinutils.cpython-36.pyc_json.cpython-36m-x86_64-linux-gnu.socompat__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycsortedcontainers__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycsorteddict.cpython-36.opt-1.pycsorteddict.cpython-36.pycsortedlist.cpython-36.opt-1.pycsortedlist.cpython-36.pycsortedset.cpython-36.opt-1.pycsortedset.cpython-36.pycsorteddict.pysortedlist.pysortedset.pydaemon.pydb__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pyccustom_index.cpython-36.opt-1.pyccustom_index.cpython-36.pycdata.cpython-36.opt-1.pycdata.cpython-36.pycerror.cpython-36.opt-1.pycerror.cpython-36.pycidl.cpython-36.opt-1.pycidl.cpython-36.pycparser.cpython-36.opt-1.pycparser.cpython-36.pycschema.cpython-36.opt-1.pycschema.cpython-36.pyctypes.cpython-36.opt-1.pyctypes.cpython-36.pyccustom_index.pydata.pyerror.pyidl.pyparser.pyschema.pytypes.pydirs.pyfatal_signal.pyfcntl_win.pyjson.pyjsonrpc.pyovsuuid.pypoller.pyprocess.pyreconnect.pysocket_util.pystream.pytimeval.pyunixctl__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycclient.cpython-36.opt-1.pycclient.cpython-36.pycserver.cpython-36.opt-1.pycserver.cpython-36.pycclient.pyserver.pyutil.pyversion.pyvlog.pywinutils.pypython3-openvswitch2.11LICENSE/usr/lib//usr/lib/.build-id//usr/lib/.build-id/57//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/ovs-2.11.8-py3.6.egg-info//usr/lib64/python3.6/site-packages/ovs//usr/lib64/python3.6/site-packages/ovs/__pycache__//usr/lib64/python3.6/site-packages/ovs/compat//usr/lib64/python3.6/site-packages/ovs/compat/__pycache__//usr/lib64/python3.6/site-packages/ovs/compat/sortedcontainers//usr/lib64/python3.6/site-packages/ovs/compat/sortedcontainers/__pycache__//usr/lib64/python3.6/site-packages/ovs/db//usr/lib64/python3.6/site-packages/ovs/db/__pycache__//usr/lib64/python3.6/site-packages/ovs/unixctl//usr/lib64/python3.6/site-packages/ovs/unixctl/__pycache__//usr/share/doc//usr/share/doc/python3-openvswitch2.11/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryASCII textpython 3.6 byte-compiledELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=57b8c3c60aa694acde514321665d7691df41185b, strippedemptyPython script, ASCII text executable  !"#$%&'()*+,-./0123456789BCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ RPPRPPRPPRPPRPPRPPRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRutf-8a0dc9b8eb67882f17b8db1356ff21993541e9a99cdfddf3dbcd12726dd99645b?7zXZ !#,䒐] b2u jӫ`(y,yŝYsfpa¯`|=i%YT#Zȇeo(}?%sǘϹ)m̶ß>Vm8|Hq="8ՐL(x!:rQ}5Ė??{8V4J@`QZ#Z^H3 CIwթiB^3ڡZF{c9bX(WLgbb؀idVMb r:洑4k/s(ڢy X>=dE:N Rh]9 wemfk)<_huϫw,];{,ZG*F-N5~Ogs9"g_1B#| [>w,:glEjw#.b54 o 4[M|w8kIbe7fx?a5*m-ֶt#aOn;itbR\NB~KUx=!^^FPn rC =>>(mև[D*ՉJ 􉱵Qaj`` Rta;[ :30wxQN;Bh tKÿ+_C(![KsI 䥫EVGq}(㕂g^ZmI:~ʇ (z]OPyĦP8 ?^LuagaƚӮ) Ҵ_3"uoTud>*Wg Oшm*2`Y 4y*<2,ehȥ,^I~:Wl!Kٹ};&z!\.I9XS%q]yI"%k*tƱb Lya.9)֬WKc-BXBZL[ug+\>nި8s{ ?vXHqlxj6O0qc#s*(gp3EZ?2Զ^ M130<*Վ{R &` j;*+b<V};$4 WuM} p䨅_C$ȸ̻Ƅ(UR!gS3*\eY9s3ե osTY.Gg  s&0*uh+3 E:ic:J+&[X6Dc'`NOĜa7"~v]^js< j/TZ'kt+pPgvCKn- B`h6H_.FU?!,~aV\/6݀Fz/ds՞H('UrM<>n]J}5y#k(a=7N].# :8x_XG?/\>NYё̕] 06 $':/ۦF&LYﰉt̮?6ؐ}*Yٞw&of?zcrP>p=qCa xϋO(441T8-[DhʮrT0.)'7+\~I1RFw354ٟRT'1/zHm M_4~ ` >f_!+Fz'y#]`O?Ox/\!RI#rw]Ƌn=y=܀<.(|;&H|I8̯P;.hA=ѓazǢyΑ!QDP!vnKQ%YߠxǓ/8 `-mb᎝eg-7=;Ӿ;o7uųͫ|j#"qT|q N U $>y9G|g4΄Z?y%. bMzlh7fn%g&Y nF!BQAla '9GEތؼanI7o=e6mWS^cw̍oqq\+b_<\'֝v8bZF)* ^sB܋S,G;"JJreAm8QrqAzK@: A9xj^p@of7QLF;ymOÿ#ȏ=d|gX_MQpF0 u k1|^).Se>C~c;ǐDb܇*tO3M>6^M]c,4ܜ"zGDjBQƀ7BWޭE*p}cPԹdk{Ig˚B"4&T (1/U¡;*/Ԅtd.@ +΄y*|~,4׎yA~͗ $iOzBLNfUЀg #J7HtK#+hD=L9r,h,҈GJtѓ4mCkT_*Y7cKtl;X*S(ąo4Yȱ$ڒQZYX[.9s2un,C7oY5`#g"ucd֢@CTN~T>va=XBapE2Mۄ%SMwZU諉YH#yfvxx\2  'Kb9–n6w.Ȑ;$ks׵DmD>?d>YIt,K-eFz襍KXfpY dgdB AL<ڦ 2ޤqுAs'Pb+1 ?>':dj:+ɛHXՆ呎Gzjm@[*_cNu@kZq!t1yJ Y@Yr2qQ~˯o36cJY0*԰k<EƛW3+^K+cP׷1x KÄx{ȇɨJX r++형X= atwyƨ iXF:  r(ȃZ50uqQ\$صXo;Wb(ATK`l*~YR* RrcňK#654*o8Ԭ+"%"T}wTHei91=oZqC݈x4q--fKV ڂvwIm+\ v.j0ב_ y|6>@[y=mݝa.|$ϙ&&F'gzLpol3dVA$jp;n gh8v9Ϩ{L^7YzQ/PW8Df4;4`G'8G Wzt`gHAsdz֌οX'R?]>E;^Ok21NEl+)á\o||QCP$U,sn}đ?rO\**Md2-Q>G7U,虀V_' I[ce;K:zMa`/ ?SFǜӃ 8HS=JK Bήjc= sZ`D 2L(\s~f#,Mފ`T7<\ʙp&[~H&6 F\PYm"0ѿ}eKa/|vhO LtV+>? 1 (O42ں^I|{(+P3f̼+0bf%*\ӐpʥbSiD5 H;b[W) +:i)]u8ĥ'gBǂ6s$J(i?oq~2UkA8t TsoFZ,2:qzinOÙ]PJ ~@0+x?Ł ؞C eI˅O2oF lk <P ڥ'-/ zCVj |0 dx pH,;i>xʛ/)¼dU*~^Ea*.@W19ke8N莧_gPMsشlbUs_AaBhڔ5[<`Yv5=aa&9ũ ӻTSW&:F# !|P CTפlyX~_QuнݹcHsfֆ]' V!CM$05z+n3R"MA/5{> 1oV|mɞԵ9fT pjş9]5 pnb(~9pQLXR.rǯO`dbBjPG(0zwW<~y_ܤRlO=W1hQLS-nfgXS4X~;:Y*2j?)̖80nᦍ]qʹdc?{tJI?zj{[YA_Km?+:q< pd9NDUyoCE##Xn3SK0"}rXY-мdžoA3CH+ҍ =\O; -`3\Hy#M2g_)< o<0M(B~$_bhpP($)\s/HV-sD ASnGipߥFSWr}K!EŢvK:c^J1?0:1%L^L`YQ;E3s,RlWJ“ec eԱ܎P'!%X߫2A>IOT{|TL9ss:R4K1"um]I}~#"ly*siuv S֣h{7h"E1oG Mnڨֆ0 Q6jw:qdȒ7g}&P<SikmTn P'Dά2χ,2+ֻWq?ؖ^տ0J{1g_ӻd*~v:¦iNV=D$!DrZ}dHGzd(vgGqr֕ݏ~eJiA`aDI~So|!ӑDSDN)!ZeuB՚ǖbP_Qa{+ȔuZ*Z8 S 5'.px<>br+0[Ҧkѭiٮ~ ,kJr+"mP%+΂Hg%JF &ڨ{qj-͗]k|6}Ĝ;4'jO[, (XjI. vl@䌝ZI*-GL5ARV,9aʩ\/@\Ś S9 r3mCɪ8Y5lvmѾ q&[*TycRYɘ"! ZLx3 #P0IJoήH;QûHՈo~*M)J00Հ.VCqvc-:}v~3:?&x5#ionr13ܘȊ)Lq1ջ¯ cOM^ ţ 'jSRG 萣(JR{z+٬q?m|WSXQMa-mESp!XGDcfțmFF mjk߫wIv:;uU%״|Kf 02qx1-B(Q^ڣf{\e)e UpQ1'DĞ >%6в]Pnq΢ 3*yȓXPp5>~F1%L[%w$ek]Y Gj8%* 0XIUU}{-jICdmg-D~V49rKf-=s7@va4c^2MںTqke k8S]\g=4\V_dOKVrw#_oAgǜ$ I=uKVڠVL dH H?!F,ِ2JM!i='蒴esW9tVeN-Wx%~ Va˹g#яBAZ4dJ{6]"ycäRYDQm}fYj6x7|bi%4}lf^u9=qj cdT\E' KvҚ.Z}tH~!(@(z*9&MiN JDMZAb"3&۬Z_ЂC 7gC_\Ӻ~Ur&u%̚&m=v.guf[~6|v޴Z@ tcU)'fn⃎g)?WZFC l]; dW [kk/L*6es}jkqb D{+"俅9,ҥD&Ph"rSY_D" 4SK58fO+W<|i{)y¤َ">jf&X_xLC1Z1rR/}Ye١¡fsEiO.<\#{ Jٳ n}6dr?(iG}έZ9>s˸;'DpmK:iQCL$sm1(O0GvXE|#do$V$: cJG䁀U=@/E ]#ԇqdwxId87Ć#yєnY֪PVgJzB/-g*(x>#Ļ$c ?KǜHL{R.I_*{'X1 "ArG+!38 `S'#d+FR$Hx q?!mXzF>qJ#q}s4 Yժ5>NݭwS,Q}=b0B~w ub{"oD뺫]5uwUB*&/ yk]@|ð,'-m3zbh"o<l0!(옿.ps.שȣwh+}fTn1]">O'І[#f.u9D8pC DL'|P}# ^<հ@ $R\N~Jsaf.bg'߈ҲBxVP KWU[ vA0%<>H bw(6rut+g8q廪 1K^=JKQ\d;J,lNQݽu0q9m}G#!XYK z13رL(D[Of1EJ0NF7gS!IEՆI>S1dy6$0c";_ Ă F%>6̏:\,CUdvk5;><kRƊ'L:<(k|1m|c0~u('jD|޸5eI+J;RE)iN`x?2 V~ = I@P4K6!؂DCƢY^S'[]#M\\/g7>b`+.E{G؄AxVjډ}1ᏻN] )Z$-̣Y(/Ni%;/kAL(IO+ٔ%9H{c˯M$ 7Nd?7:wx!CXktR!j\jL5SAO` #; ORԪX;)ߙ5 vVlN &aGiQȉ<#ɸJ{wؠOhleŏ3+? Ht̑g._Fz ՗o*V NkٝjoCe"h 0.{:4nP5<5(t k=y3 ƺE?+~OlK2T4=* 7[>f9atL/PV5?DW +RތЗ{DU.z|Q +J䳰ʖ3h {_̞"葂EZ3oHt_k7s(۫?g/ Z+i*Ԇ\M_,*blFYJ1w/ G=:vw.:---Ffk,)|V w #O=v(ҀKRW$ >O~^Mp<4vo cyN2Zu.wr<ǎ+oNO$*}хZ!GAВd٪ڊ%yIIP` ) "g:w9ox^ҵ ]ı,pƓ*e-W0Ve7ik&&k#;ݑiJE9~#HV ZjsU5a&`Eq 8NgJbS/CUCGI&0VID!fe3-}bt 'XbW-F^nDD+"HUq?0*cd_c &VsHZpnF*G: #ccU@KM/R`-甍K!(}Rm/){z&һY둧L v{m(>ZЇ%_,TC. 4SqU?h{Ā'JcߜGC+.{n"E@m*H\(8bطγ"x~j2w.U;KmWMJ=/G,+U pZ)CJH^xGJ~Yd ׃^iۢKXvXqZ;\101[\]_5 wj^h"e,5Q61$uUwB䃭Ge"ޖa:dvQ?:σ1=VݹcП#!\B`'T@J։GzתH%,$u_"8uo[Ƌ2`"al B9O$9CG(J 9eٟۘ#QMW(Ʊ)\YWuYþ2$ٞIXbЁI"iJa[^`־(@O|i XַMl@Rit Irw-ОqkZkK 0x1%@D義 zd<듄04 !S:/csAs*>+TM245&+o-IHXwfyW5? [7n\U<$#2ol{*9x#ec9y" K9`,k7io͹RNLPY _7^٩L\ALp9e"M|f/sV9~<6B+]ݾbeЋ5*$3fJ5?J̨㝇R8+b7 ynL/꧞{ŭIH\=fD*=73g~2vVT&p`H] 77U}T G)pn6\ Ttg&,PRTUv6cMgD;Vr|87ol1nj'qv$.m_պw1+f4ײ:Snڇ!61 CNC_MN0MH}`6jSbR_H4~sZX҃Hr-w? %:uNλ/xe.-}#q[]9aHX5Ew((vz?r-%*eíd}rFln ؔfJ,7Q G}MhtAh]XC~whW qA9ɻ6EKW֧C΢( c;AIcy>b ?b/*<멼p WJK֬$(pIUTYA 2XH5,2N97gkc- )&ou[b~F" ׼.=^&f 嗐-/b( iZR]bZ7 ~(n_0ȶ)ܼM2t*t&1hNSJ-ULi;+;װ$ӳs%;e?Lzw@F+M:==LΠdMZ*} ;u| ]*G=GL=ehǴjnIJNӾ j Ƕ02 i4^.#s E tJ٘5-]6%1ns6˹Fl[74[MWk&oboC2Zs]vo5k楮T~]B 5^ObvepnKMlIcˏ$ɴ4$Rg6fTTO'xQ>2}4ց9, 5ƥƕBSm;Y\^F 8b]9 P!_dMರ)KJ8?ϰW)bU$ߜUb}w>>wt  rEI!ǃClRz9ХGyN.HVrVtD&sn굾.+z2+!% آ:voVv5|V5"$`TfqFs^08GϤ׀Wo25kEhw B2eM7tjXpqkC\1S8 |(A=L@ s6D ]IA6G9Ҥ[p+#Fy7]NBs)T'o*'qP1ވ?ҡ X X"& (Ԫ/>0x/@uV{<5l JV'6- q`biɑ uz/m̞w20l(mYJ2E V0sAQKb'yNMG 0ms;3{րY`6&6^ -\SqmJiYuąqn-'[$n1J8>Jr3xg7hn\(07"@V/ 7̠n_#[D2@Za؃iźϯIEn. T}7CM vs>qg7uC\|$K/zezrF24wxZm{(!Yu n[\-8X'1Р!}˪\6T5뤃bL2OoQoٹMCl&d5 la+;pZH~0~fq'*TUr') ""UOm\τKו7YUB(=ou{=dzL9$20|x:J aVi:p(,t݅1YaQvŹcf|Ynֺ|I |>PͲ棹OX:*U^1ɯ3byΈ&,_(Ni<" i?g%b *mN/ w;}k)!KI{Es1-TVQzH-AEyu m,JgX] kt2H93ɑF*rB&@͸N es+; YHc<tہT:VQʼif`}3;un&\U>X̑͘}1x"Ji^Kz)sː*:W%+I\|&W'4~Ս]lDWQ>2f/;7D7O$J8~2ȧA!YFx=$BcD g$X8[e\fapC֤MQ(FK ta}xU=" #u(WUq2V ;i]uj.Хԅ&}vjqXѺ17a 0J.amoL{8 V2+,Jek~GW -fJ : ёߣ)J1ʱ%/~W|$F ӊإFOCCqͽOCSMR{Q%x;ݶǀJŽ~קX!\`mpc0$+*>SK翾\ЌeFMANsp̯,<ZHxܰn[ȱĘ6 BOܼzvz荘O6.'. {Q`'Y9;q_ZF'J `emB-AIC~ GY5L/.^a B@RU>@f†FA,'2'IL_8~m`xIUwq +gTi1NiÏQr^:w8qToxv'F]f)}hW|( ~C/⮓+kN3'DŽ+i0(KpP\ "#HE@ۏv]j'YldSmIqPCn+y )iag"vxvBNCb݄š |}R`0xי٥Wf=NG]o[sS:)i=/px9|k:k8&]EiF~(D:,|P"J|zW|I u寇E¢E´&SOV# n˦Cql!!g؋$!SpWYj *e#fklʯ_kf{`x>ۓl;z_':.̕rzkQ ",5KVslО eu{x"c3\zyB"؄*vV `,P+Af2lKUKW#H&q-oBi[GMs66]]vY[kc}3pZdlFjԉ&Eu$w})HdSH-9)gY ]]PG\}R>$ BFNNk8ITب8!su4n EN )ں3.C4 [jSKRSBǐpTEy)8/Ð>1ggF<T}^v(b4Yyhr,ϓ/_Q=L!9jǃ[h;e{^ h5CsuJ]^PE2&X-Pm冲f=sݒZ ycǣmA.[dQ/LMiWsyVC%,=rIIj|,3OZBiRFql_%'qQ~Gpf0NE#_ 7) Yt1$t%a(D`<"9t$[RfL*R2n|!ja6` RP1XeEN" nPKxƴ1fzʅ@#:Bym*J"Gx(EB֫ڴd΂: 9q$n7f-r/'f6ZBXto;°8E! ]#'o$D,vOڰa,8?TAE$o=(H3rZZߋjY[yn+b v#LR~흁A~V<KbtgʼnnN.7744(.؆H‹&>~8sNQr2rDSZrI|R!tM* Gk2%R{~][iȓ^ڤJ)!Ru(]ה.rQƓ}#^ºf%6j.W'Te$(DRVP#EB9 #Jb-~PvDvKP"9N'Vx:7}wYX4]zY! Fw0[*WvF*V;~1|6wGk1">0/-ѽX_ٹi D1V}i27aw,CXcRW`brgʬ*^ &:mqH=4GZ bѻ\.wYo35'sYڿ}:n"Y oFk@$~ZĽ5fwn,,f;_4ՄCVeU8h~CHN~Xi 2ϊ)s|BVɤ`W9ƀhneU,=5;QfX܁iC @RCI&W!-&Jk򈲱4&&-0@,HDwN}Z)Eґ-͘PS?^nd}{d-HW"Ll4 -L /O:Q0V ˌpnFmks- 2N#Al.gK;P4^ARcuvX+.l BU%>l HO|7]ir;xxm}-|XA@Z0:rXz""+N]w ;a.݁ _uN|FŒ6*&hXݼQ]J4M~6. L{;KfEZJHs\UӘ4T)s+l,kbT`IĮ~S3EOdP5f7ߗ R0MaQJz(WiHw$6w7ǾV\iL2][hĔ#UIobqĮG&yLjNfu±b^tjϩ[Ŋ:؉5H&,2f?CKiY*CibK^{ aZ䵇p>ۣ[yM㗯ȧ_=Dn&D\VG Y;Y׮zc/G`a˴[XfgPD'/"U쨿CNYl@)+)]<Y(SRXl1'c@ho!svZ€!K3$V\v+ѡٵ]Cyh%z )(v>eX+aeD-M?%lY*w&zL=ADP$4^Mq[IVjDpSMl9~˜_`$ʳ@֮gZ \\nqSn%y,zt1ۥXg*)E4"Q녣SM+΁LۧH,16 ' %J} ̖ڍV mb([A 3' &dA%CQNb}exˏ}u6(}h9gW>))GJI=>[2bB%q]$T{( %h)}+#u?ao|LmB'mQwhMP^-'>0Fi&Wo!v5>4SampEhp"Fd҇?G_eǡcB&q^=U xtV@W 9V%r"creEH +,HXRnZ~nl_G&[ 3OdWb^# %$-*XZTV t^Jh]\ǒB C(ٍ^߇cb=Ă`$8߀ 14VT+[IĊ&ZKK- l"ғ dv|1ͱJ:zN(Gx Bn2stGp㟫^oJX5GIp.s,@O T% 7V$}s W,!~d/7볤tp-mfpbo\k 9O'vX!KEg OoX}II>%IDqJgtBh OJ3*cuC)|=PR-c\^Zeߜ,7ՉOF•*K+a)Zks2_63dƉ!Rrw"@E6q.=Hy6T gW@γI)0aXz=㙒{WIxO9! c8h)^Bt7Vx匁s)#6sJ4w )""VMӚ6hXYUTBl3l~d_G!6"WAfy7e^z5iIs{RW++SWdVg5vi^A ۋD: sͲV.J4tECGI *y b|W 2nXe?k:7n^`RUxE]7Pw F"8r4MzAfcTbl0XK_PO/2\8O(R}7YQ=Y/s\N~ ~yRɱJGH `V|q#\S(j>D`}W9ݛzT0B<A*.*Rku, ;lgbFOCP=PmnTqnX˄]Ab)lt7Q[^wr#պ$\M`ȶ9XM̑m )eEi!;l"5Vbixgiqm8=/;oͽ(?`D͚3 "'/mV>n: cyh4^<ʑ'瓮L%V}Zz \Kj%rQ`bZzb] (·r7(A5CuN;pDj$Hpgf)GxYPk1B'dWIYdgusJ^`'˚B%_/rfze@aQn>"EO[2ARip@J&Hً%c7`I?Yu%ɸ:Fj);rnKG!W6bɌTG&I'&x "P0Q۱**+M;nQΥ%~jf b]}O3u!LfON_\DRʖD\G9U$R|ENzXR .(#M[cH#w9`ҫI+~AIRH'y.\r7,rE:&M"j(KT9$u2 3([̘*=JnMPS18( *w;ˆB>0*r(];PA(G|drkxV{`ʈOEè$">uw Gih4HԕѬ| ףDONP'kvi[zpXX2v3r;>|қ *D1y&'2OLrG29(w;%#N#q {PuCRL >KH4]/-yՒmM3ECיViA-lEI-j"v7+Rdk׽PY(v0oHO FͰ9I'q5L%D"sGvTsw{Uй?].=VkCaN!SGɾx-cqmPcRĝ5-]>L{1<~n~”'u^!zJEӚ׭,2Cse\޼5?LGe ZRޢrp1uqOMH axn ;u:pvJ30UԞ#P;4X;A'.)%Y%J*M`I1~YGuojvmX8c&1, vcMG߹ͥ,PmL˟(!]smt0vH6`0\ƘITy@Cq =?ƻ}@l'E ^K5oi6r|9$Ȗ=as=--6!T%ΟT(~QD}5 SmXJ8+ , Rp?^dZ׽4ݯ^B˭ _6Pj.A>^ QN\U>[2*֓3NJ.MVkR/Q6=XC/>u~ eȥׯ$yR5*>-{ϴB`1L'{t@~_/|q9xRAlReS.8?䅓k9\[S79ޏ}nE{ԝE7s8Af#d@ޯ~o37Kh2 RuS<[m<]%Ol1hإ[i uug= eB}ֻ;18ECIVs,d Vm٥X05 %E )POe@܀xyWO2 Fs[u*t(6u+ot{ұMϙ!FR;ue㧘‹mt-;"ưW0\5!ǚȁ@x|OtF{3y0#NsGW&e wTIKGs&4hAϹ?EEmhNx+n""T]"a<%`EUڐ)v ~y) ,h=( {ȕ ָ"s/9gjiQ\X ;ҍbB} 2tLYHYA&6An)r;͎"B>zE$kYa5%T]3]Y#aU's g.^_nżlTE{,$Lv8֪EpZcG=FM}"2s^KiؘLhCoٖ M2&el8*i.9sӈBVRp6ZlM U#\quHF&B2U9j0`Xo9u6g̍dT2ɩ!*}޹1*#Z`|=eX\-oW)eBnhbND#nQ)Prz7[ul@s2B<5$$Lb?8JʗYIeW K ej*Ӧj}1r3a7I)##~mՉQ?4.7d#t{ Vi9&taaC8k,9K@ca8o4ݠF3E^qfî[Vn6X^"}cʏ%ND4'zͷ]vkHX+55  80w/) B*üYaM!ͶƩF(/f%~`Wt_^ѳe)wܨЩ(6wYnV>M`2S TV53eO5ZYGpA_<ЅC41 tQ_;JJx~^RzlePwZٶBP_=^Mhw3Nx_A3.tCY]9?KS2փ@:`(٥iYLhXZ|}Rd c=į&7 XOpyNž`쭧2KN<&2I#[c[ѹ P'H@BHFvsd.Q'H;I!n7~ (<m_d Q~MOt _87!GvME䆋} ؿgBr%({&)(EX*a! ՆI"WA .](KIEre1<0~4lre[.]iMI  9i>W^_o!p.awתړ7_l0UٞJNcaZ07"-E &QRiviiA>u:Qܭu --$󦕂]삼MBQ~dL@Y)wM+[V`c$́aqZ@nB/?+ D1l$mk5H{^IYq%hKM3YaRv &~x& J!.mZxsҵ,dI!S[ohe-MCB_b3yĈ#:%ۄ*o\n>v]LYe HGGaZ&?o_׬PH!wn+qIw?Lpd#CF=U_e:y^"9&SSG([?X'-{3h#Esqę"5U.lj>nhv)/|DLb{sDуHR jALZr>~[fC^XovuZN^AzPV?+aS܆j!K:_'.r}f?EX9# E<DCmR]ktl 3;q,1j:tM]@\w| e-7Ffㄧ_pM0%ed֜hN yh~ ~8`tIn tV<q:9xb8[R?޵7_V-b `]֯^ʹаbxoͬ~H=:~{TrNJYlk5}w|mC1Oۑ :d|97kMېIcg4-%[1+I\o{l-`` ~Py(_u ï>L\wp P2x;7^:9}}X| 5PKi_OY^tajk'O)2PΛDTgZcYW)YE]o9y4fVFg$vy@ok#u/-y'DӳF|*eub.vK~!H2$Q^j,杏 ),}^mv#YLe{-4:Xc4h'@_z;5qi7-L+]gi"zC,\ j_/;spO\%;ct,OZSfȻZo\h)F׬~YrCh~̴VUE_/{LOۧc]ޤC@{Bu3x2!-*3Ze3XPyabW +z gRnnEO,ލf3)%x.!^~aj#d$p8kB:i JšD벰³@;C[]YnLA("!IzJы8S3gڰYzzm]A{W.8 $z]B29@I&>VG-|;(:h@y(bq&)["`U6YR_E@K}u<jh|594܀[dM\u@m@c m $ф d$QQ"/07IPа״#/4R"_^3aRH-ꫦNd K!Wx-77Gxgr!61D1YC6Qwv}q`U 5 5 s’R/̍o-ז38R,wm.Dq iQX.b#f{sdPs ro&Vyc-J6C|䧦13K(u bQ8/j<\\ µ.!"no|,'A;P",.xrcdOm5Bm9 KGgxMx׈ՐNI$̪O%-%g}2I,v=L`7^T]d6^JX|ւ;yMZEU(E_Vd+:i0o' )ЯȊ)m U`ٵQi YO!qI'OV\$a-+lGL)Ol8+cEotwj2&&C1LbɅMS]껆o \9mq\q:ew&I3ˉ=e"^{.5Libv7h`3?+p끁8yCz~,HkĨCrݯnT⮩m&V)e.y)fwǠBqqoݴrZ` (w F]._dX\tZ顜*:&e*Ӄ=qIoq)B8kh #^M;usprB^CT9Exo #0 iГ ͎h(O\J-psc-#1ƒ!w`T /j.O8!L jvJ8ZH ?(ƼS ~Y^Cl S ܡ 윦6c'\9AEiSx`#C]cg5'՚0L,ϋE}{^\UK}1g&62xB>!NO[p!j|T.I>vhaE3]Y!iOhmx~T1:Fhqz;yʅq91|'$Q%aɡ,z xԮ:f%\%{;4|!?E2%+;Yn|IHuxya[w\qHpg**DՑxW`nqP*@RpVXkAvM!JelٕG؆KX;Pg^pzc=ׯȮo5hV[UrSv^E $DJw}L  >,{X0,ib jDE r*U:KǴ8x27 | ,n:,zhGco[.|׭_\V뙒yKRNsF&O3?{\miݲ;c&Ho3_PxNQ׭y[Ţ}M=[2a6JjCª GjR~l!xpbUd HWLcˋYp\tjaLk(!O(=0f57=x:"cBdO1E v*jk"\΅puMF{Sa瘣y453.q,Ϳn# +ÓD2䳑᝱Fh nXsM5+-jxYi'M`W7sdu+`JA~=gVN2M18oRHHYpɝ" g^?^zi2#RKojfIQ?%E$m{SMxF@%l#fx\E6rHVaBWC]Enn' œUbO+ԐQjXwҩsaVg%*t ]g#](Kt`2bkQe_N<,#!FUd0JXzkW!p*\U%-A8a:O%"֟$` AqѓCY^~#"z([ܳg> RuUlf9 b0%O|tBI  }E%K_w&M0,AUtwwD |%vґAkcqلZWp]#}Ny: ^;vVlwЫlkF _`.x2TBrV3[0/ ZI7{@ 04ڐI^/h61 ?IFL_?aB\nN9drVdle!:Ӟ6qK+F.j ۽wmob[;C>씫(,_̒ ytWWq#, _K,ܰ|"f4+ oqL\.*"X;P57ORA{GR AZѝPH 9 5S8[=LQPx8C :nܭ\´?/vWopO&#Rk@\V< Ap^qh!vYe]DrJHLjl)8ւm=ȩc\xZ#F=4o˝ak}h_p-}UR$|>nzjݟaNԽʹ*m$+\{+@7(H&ΝSQCI5^:pxKtMFӹ NR xXץ#r=](rRbgg(@J2|ʲ<&6fR"fEם~X3!.D~Ju.D8CJ#nnjJ*M.h7YJq+j"ʗM5j";~U7 ܬ0x=_g89RvpN@e/k,hďYPF 4^ MWkI:s*TJ~FsBA lB0mknq%ٺ&V"p8&T*oje=rZ Y%Od\ ˵MOh:m9~(Z?Od ~QETzwODhe~yO77no܅W„3B*. :Wqw?ߓ/5,%.@ +p˝/ZOeP.Ś #Q_8dU0`gH"A"`L~=%`Z=P}P},CҔ T4htdcN;Z !ދ߼ZWe.Y'g`Ӥ|)Jم_S:aǴO:iгڃڄP}S4©ϊ ΣG 6Y>|h4Sח& {AV8i>%A*Z-p`->:FyG,Zwܚѫ}| \|Pr$;7Xyi;\{cnLD)I<TЅ‘3_+-An/֯PT|x=m}r#GuiIipAk^՜[SUֻdD]'7y⣡ދŹq A(ev>~!i Q Ŭ2EB/AÚ'f=BˆN3 |_qH3{TʒN4~Τ{v>.+skr` sl CB:8 M/ClI;l3uߪXRe(Y̆l@R# bA(UMVKWW4|H;,g頤3(%u:BM; %Qljm@oSaVYo2+"<l:5='g;yq܄Mӧ=j"|X%AZyM8Lggg6BЇ?$ ƒJaD\ظD8~ /v.[C+B,5Ɗ.<;M"P_Aeǃj=__: mhڝMjr}an2Ȯ|[y;;`hx M, 2ƶ c!u}K7ÅJWo(Na|a␗h($:ZL5V7xi86}1܄J;hOOV(֕J4igwǜP_R^~B3cӁ;@@^,MGe^%kEJW.,/˚f58X_5 ha֝1^ ;)32tG|~= n0Kye?bMDP5?1<RiMPx4[@^qӰ!1Rg)uƔ q:QhCɢ/ZCؾL@a5&8P)Q"a6?k0 ijܫuY֮0^g8Dsw37K 5T8M. ->At`gfvcodCAN;xY`@q=]˙=l-.OmeO:C=9_$9 c# ^*iUۧC-:U5-ǡUR2p!ڨFXAtT_@T.F :D>Mx ~)AYΌ)l*wWNzLxHĽK_QZ;j1 ?FQp[ ӻYRj!-a{Iտ9)ddJުzT3$:FoA./_Dl8yUفfjO ٟѠC[4%nf19׷6#AwM1l׃ϧR,j ! 'lA,< q '2 GBV:PUb1=j-+(>`{ѓ$Z/-<1n43R83J8=e}e۽FHNAy@+cBAyH6rsH8UTE:Dkx /G& ku {kɤڙGMm_-Oq4qWh5 cd^Ǵ~sC1 FOZ7+ӀdV#s:y &Ks ^2R{mGJ eoӗg붠ۼAS^{)AړL 4\ʃRs'䷦#_kRC|j1kE Yq?O2Er>˜rϜRq[g5-E\t!:s<"C^ɛ 6jA6eM$f9V6xםZe$ ބxo\!6+7^XC{Eۖ.?pM7[5fK>Q$;}5~el Ts)#dӼW[%AP ,+XDr:,;t<߳.nj9$v~c[{$}c~DC|*W{S}Kڵthp|}{/[b{epRa;sT/oBӂsS{6GMM 5 X5?[``ܩ,$"'O cTqb`j?7W̿HwOo7?$P~H^$1g' pgҠM  4u{!f軥+s.]-kϞ%*_dF"Xo~MUaRA}&ɤļ~#a;Q^nbw 1pXd3d$^^g_fND%LqȈ'd֧(C;S^@"IK"?tU~X_VN 'ϮR1!hY8EU];qUZJljIeJ_wz Gg=RF(嵴wA̫KyjH47eK^%6E%D`ytg.kIK=7[9: m_<lKW1Ej"י!ؼoZHqYX ᮅ06>9r@mNʺtE@GkFuj:UUEb "TpB]!UND @U z16OI!-MY{GU+s$`Sa"zh?1ѳӄ28 /F@0 nEƪT+vz~l[)\ؼ@n1.E7<tňI3u/.ڜn1Z`l!A#, Pȝ?Ɣv6х v.gf@ZxVW,6}X؜u~wzZI<<P݉X=(>@f0s8lEeE{7>vN#u!?^I: ':=kTY+%XvI}7k)QXI(ڏV=+X0Y{o7o0Ҿi) Y3=c ,G Q EdLɇ m]||Xd!(t:R'c吷 {Ҁ~KA ۵#ʊxv1y1 (\8yGN8-!( pB -~Zc.R}jEb=PAJ=!Z'SK/Ps8Y~qP_FÖ!ZMP<Ò-װ x,f]?1qB'Ԣ~ӍKm`؀"ڨdg'|s^( `˃Џ^9ZGM[WX6pշ f@=d؟qIV1VIDF; WI1}ؤ2(PIVy覟b"XmYYۉokI`W/H"1^2ym0c̽pnqz*tBC־g7X8C. ضsf^JJ R!Sdȅ/fA %x֥4IQ􏔑_5Rl;=Ssw"}hD|'ߛȓؚ+S`74GAf8F9 U^_7T #ifɜmS$SKE*7` Lat=^Cx{,^وh`8_%<ac =ERJx'w; ,C)XpmҋXW|}C^ZV/W7~"WpgoS~~@sI4(J:lĥ76kQnQ ImܾWAMF׷x@|}`<rC#=YJ^KYa3~^5ڟTַ(Hp^m9d/M_+̦j@\~Q)qCא+74٨%F4.$-bakFwʛ ֤beʠh%+IPdeu.|fӹmXr}#S{.=JZQp旈 ȳP8aRWqI*^kbW\𖨴H,x7ﶺU+*r qQYBmC ȺMBªajg#-kA/F*bЕE=mL:՘]p_e&5cL`@.tb@|E*:\+^IRoLlҹ rpLA̭U:$Zۈ77_ jP[cX0c]3y5Z&.DCz1Vi2z(n8s#37UDӘbLa6q+NpZy/fRkE5U^2dճ.Rs|VFO⚪vzjxo(S:_v2Cm e߃\W;QQx,) Ǫ0{kϒCz8LCf'2p0&S^[^)O[+ҍ&E e(P2}k1tWfb4,U{.8ʫY6,O KZ.Mm V}aFF ^H]|?-Y>Z*[g=je"XG`G/ >lom?}5_HQռQ7Ucx7+/t{kf7 r{? pl|CԷGYPK]+ %)ȃhI4iW_6(;o]h~jP^Y\?XfԸ2,YaXj#E%j<6mYͪJo<[ \,bܟJ]|(Ў7(wUг&2T1Ux`!VLFxsq=} kv,X=]ε׭`*Xd$Q40 <_6/絿utR8EQˮ:tHHxE06*78r|֝p8A1f*GM=V׈xU"_L4wM?tEp'LA^!TvQ$%J KQӔ]z;%;E^%ڦm8tѐ'lf'wY6u( J9f^g9.aQ~Y@z+ e7ewr,nzp[9vl\&i7!y-$JǯVں r;D49}cviE{agYdgseÝC1v1Q! ݹzDiCwל\)yĵzu)^z=1}X 1R'h.QZ/M̳2Voh]( )#v:YJ(LkkBigQlRB8ӳu4p| vw5uit]fF0=oN$\mN`Q[h H7ew'CxZ1Y4tkWFrjg^y8.fYU"+UؐR:HIvQj] Ku~4RaKxW6O{u1 u@OOa 5]L|$-y1-/Gm- ,~3ӡW6ڶ~dLVAITƮـtuGo4ԋb=A' -{ V'!A.*^‡ww P97F1)76Ux7 qx?&L1_h|"s U U`GnZڅm P+RPx 儇(js!u|YoƸsbqV} `Ło̝yRL,,6I[ c.CdCʑptB9!"bI>N:Sw*VR}"|!=2þrK],3w>O=~ua"{z/R`qE&g<0qd3 3ˬyl/W#g=!zʫ"laH饓X q[*b޿ڤ/S!<»%.Q{(,Rvk$L3 M鉚XK=>j ?=?_k>a?$+JKDx/F s2RaϨ~ݍӹ{Lˆp55~ɭW ;[PqFsrY m S䜾ܬwM𗝷eM}(_> \v!fIk,k%mKGpe:E_*0JHOw8M&)htu m]7xS^cvB6 "퇼\GP# 6$ &o c6GxHBUk`F@^y6p_d 1YA[N"Ԣ$(dj?[{[ͱX"rJhOHAlwMXiQRBo/n.)U,5IVw*0,L.ϟu[wr>J"͸zVԭ-eFS-QdU]&מ Ҥ`DlIڻG߷-5`irH:[9rb}n>D%Vkh 4m3Ҵ $,_SLkq2fmkh`!bd:=03ʎ'ǎSuNoɝ뛷`@'Vt,Sy&H˔8xOFω \3~hLjs+k 0͂ [u:bR%LU !V,%Y gw2q 2> xӭ4&L< tW}S$_ yqv9Qn?6: 8GyQ9YYl$G6NClBNChl[g7 .YM?:(9}"3F63P͘s3H03P;M ,l-k2Bv%C܏p0?^8L[81ViĨGzSG(2;,d"t46m}SKd7jX̓lSٝ L4]3>Qqo?'0}yKi5Nf~RV6K >5 F6J:?d(c^)lv/"ܖhm&xH G2zۻ\۳ovU!2韫&6C:E8z~zd/{f2lƔƢV̸ C.iC*4d\5XfMm6i4.腦 BkHKLibn|3bt8udfes=Š1@z>YuD5eu:{ǀK9\@:@N_nK!a^m곧 Fzk)ڽ7%܂a*o£>B+ Ο4EX"dZK|/gpi'w?-q. rup8ר2ǜkO Wz-tʈ^ iCڦ52"֒Iq?8 зZ [Y!0+3x:3ya@~4ĶY; 5m/2/mX6 V^λ*[Wr-dJN .:YqUPMpbgw%~1糠49Fw۾_ Xphbˏحj LSE%#L)WV㑋,4Qߡв7,ya E.[9BG/j$@?/"**&u;P7[jyO 4-CP#5Yv Ǻ+zWpg؁_AR冠dy Efr"% >)JhgH|G^[,*M@;T,}ձ9b88ADf:*h$0)}?uLE}Tq˴70|%jR?EMF7 "ȩ0u }X{FTiث31l$؛=_$Gبѕ=R}"x$_㼓j}ęCc͟j\Bߨbhٶ].M%q_֬5GtҎhJ@'r8 3q?uE]S~oZ;鹎C8o&MJS@ʿeeAaP_U'xO1>ZCκ';uqTJїc@GPi-?[G̚_[@2@e{ (E j@Ɣ>ŧאqFo3ߤyV?1Jb"`P(@%b>xlAGg2J<@K$g"- NO[Rf~ܱj fA|Dvbϫm v͠gL'N:5QUriFEulDnky) ^Iߝy> yTq <̴[15In1ce0ʤ7KPZXMt|G1B296W7l d}ċ| #h]'ů (`0̉{/6 Mܻs3nƅK>l]gn뤬sF}] rg ])G2GXReCg&cnp*CG1=LmP=25 4 ?)H:"S_72/?S7 xodHq>q aπ{Kt(R\ѸrQ76M;RwFS{@6Us5!-͊O: xç ׆C~Pv_ڛ7[³\!~aOca80UY+褈tC[FFxxb C1X7_=/ߗpj/qhՋ#d{v2 sqV3[%9L&_(dt=L$ᑪq()aT.qw9[յF[AWn|'?}:ps k#dA s4gU֕+.DBB ^լUGFH&vhL8Yq5sAluś) C Rta7X X*Γ B@u.MfXG|Fo DI̘Z1B<##f"zlH{"HR!H 29ؾ& k^]R+.#X<%7}lUzenc+Jam 5;W"R' )ݮXENdnj?EUœ]b}ia6vbE~=rr~C:]j"?K9uUS^~ XѲk\_c-f "b f}N8`E+gBnÜ5O:t&3S],]٨4bBF ;D-c=Js8xq iVYC\qV錩Es_E4:ƅ_YvJ&*n??9P(Ƃ7ޫL9E_I`$1#`,iA5i$nC"{y%%Ԍ5b5s/] %{oljWl͟REx(<=pURYDru2`6MV&;cȃ3|3!`摏aIbuljDU7]]ڡJv5xށH5i5IRW '$`cBѴ#v4^$*뾦:NnwA/&/ئ1I?0ZmvCTuF:M5k' m-ڬjr󄎋hA/ U'i@*{AkCb_ip7IsX6ƅջVBObfwR!g34k#Q u߈V&rQ&0k\B`fT2m0[bN1z_~Y[bcH&jCNZL̠ S֗HiDֺzE1n2¿&hm]bS_c [70KC^i.N&RƜ,)mcvJ*Et(~ *Py<z;k(r?64 A)%&?f<6 S찳gh&ZsЅUYɄ'4퓺Nvb *w+PB %Q+&|k:#)E _O8k셠T֓35eN2U6|+dV+@87[GK%y$2]5x\+aBHnV% t3ؘgdtj"r?F׿{V}.wfi6b(%W3%{)Uv w/l7!0j$@8Q .w&`#ڿs@ A+ksNL lȤ!Ђr?!kHW86-ɫ+J.W3NDDE&5цS5 6B{CiƖrŏ..|m뉋+6~*) *R(/^[4LZL?w u7QE: ״UMc-\LJo#^D!(pZiE!lP>h4Mpm5| JG!~q+fSTr^z߾×Pp~3&@Աb~*bX&*bOCee8q:jqDDY+ Jp+`5ƽq L)M4*hB E{8GFNy#c 5S&Cw&rfS-d% @ f>A&דr3QSS%`h_N m\g|f(<d/otoZ7\J^S 'OL@? xql26ѿZ*97,[q~@Ȯ+2J!P׼廒}遵blL"G0 OA",72*TR=Qm-޳<!  .OSσe1y:Q;%H hԣ-M;ŭȑ4]a ٪k(kq1= (/Z&jTr?1|RǿȀ ķ,x8?wLb2y3^W) N}yn'd8JMVovL=pc;iM%Ecl\_ JK:x P85qa_Y*T@Q0q^W#Nxh )ԬFX"ɋ cځ+Лճ+'ݎzYI/sbʔ`?2n T/+)vGWα o<$fx=J=pvG1rNu",-jACJ;ѳčd fB=PR Z]#AjJ Ց^e@5GK *գI Dѿ@<Ӭfu:bRXR]P3RJ}QXAĥe];h c{ňpЏ$;Mrr?-C\rڽLI\3ڜLV>"~QЃLoD T^Kv(|ܼ.]K,Fl2߀#V D hԬ=ef}_jw}欗cmO'*A{Q`4 \`-㑹|LmV&\{qQ&Tz՛ _[wZi;֛ᖘ=h_88h6m-DEc-~mQ]oN ڲ𑆚;!T 1WF ;f!† Pz,nDk^Eq-'9 ^]o?>*+@G-odv"$8zH2,Βb]' 3I<:;Ӯ_+o}`Yf)k{{lH$Z]Nj63%@g[PSs} FmbW<܊? < 4k)L>!1"! .4m'2~&ji|_U,H]Es÷zIoD2_|? t6/iBZ*H d^:A %`g1ϸ.Iɨuq 2'_ IbD$ҋd:σ gO<-]oL]8 $v4,ktm+SlYM{-#⸵"`Jlᢻ*m~"D%F&ag/{CmX$8-9̈́{ q7&Dh>IJ)!w_$_jl!Xfy9/ M3 ]lHv|_x3ڰ%Z`;v/{܇Ɣ9ZIm|S;l|ui?+;3KW=^‰^fޘM"yHH58F@?1ڳ 澜iIY QG]>@ TKԏKI%W| @7LSʀM@iz.`θN]t09Vҕ0*"i>ÿя*"= ]&ZUR5kƜ𡰭θ9풌~{6E`C?IqAcR-^r3@۾D"I& 0uË́> .54dX5ceokn}9包ӵc.skj!䯪j AOGcp"sg}F$.ϊ\TƵYzA:F? $CgH M; ŊJU;7Im8$A9#l 9 :jVpIUk; 'P|ÙtO!殺!#!,"taG~lG(Ѹ,wZP âڛŘ4&" *IZb-6$h5i<2(L3cFE@2uFK;Xz50)sJBM]f{.?#7.jh!:@. Hk W4a׃JKU(`ڪgtT:зpQ#eA t< \m=IEИ}sQ`6, VM?[D ̓IŨ6 8z ױ!zhc.cb3\%0-Fa[̪hq"ǩX%O6|Pl^;e3+xxj4lqԡF!R8Q\ 5y5L%7]һ)ĊNg(cqu6+ePu۲ + ~knt\ ywVX6̪淭ԈlWkrW_nIm\`QK{PQZU9k,NߔKoZ]Vv [fK'h>A+63=;lK BsׁL+{偀b1iMPЫEZ>uJ%uY'$宽ЋJ܌zOmİw  Pz4*;{.d 7/WGF(!'1`=T.PeoDkol|ä3eF)ZZaj2@~E#n>ݏPFaK=7 @%Cu]@ڋ=`T( ~DbܳAR9YZHhe1X|%lL1Gj~>#6>^ 8LeZZ h%cXΝK twFjfA?Mh4vHLyjtHH`*O"Z(4>Kkk@h?Ǧ "@ҍ}55U <ԠWG8?e28 kmmeěC]Gޡi%\LcպNVa@JNi% ѥǼd& L*7گUf5(h-hu}81EnXTpy /um, 2 ழ щyfK"n!,ls+ڌ--z,!27|0Bjsݝ: .5@;c$܅x L_fo{‘2i`YUuV1Lzc䆀ReXVmY)e YiZ] KI_P=" /k %zӴQa 5dvB5냜0r"/t'(¥IRҋg_|h;]-W-YIF}7&_tSIӧBBX= 'z^7u2^)K3[6$Mv_]?.߯stfA3h04 gpX7`]I'XPivl-?_EΟ=w0yuqj64]ccU^o.UxV͠\b}k# ~T-X(16#A?#[R&UL/@67]/GpnsbʐHsc>Llx%|136M[T.a}Sf!&>nn0x,ӵ$b{XQ"jcjDM_1C<#>l9KY߿Z@˅1Y9' hIě}A8ΏpR8M8f>}Dq^J4F-1 thjK*`k#t$fĆcnu!&Z$UAqnc+ BɠG dp7T :bk|tge-XL SUQg0<\cLW(_6p:d-,sO!*"Y; )-];Hf8QU6;xmToEiSʯF1oAL8628o*{,"D@Z2x#c(^aVO?rKxA4_Cn6@BNi '1G)mzM Ǩs<{i*^uOZfas"fv;zkZ2y *q*l.+1X'Fqhe܍Czh;XP$ T|i+3H֏mrC"66#|XU֮Q*4e=fߙHj wWpIB nWN'i׮ײ2qSª?M.@ڊdz>/k D>{_tBC[feJܐ,ԡzg ̶sV x2Ѫ.~&mQH1s6i}mCsunD+^goPR^E?P/hHR:Lj>Ĭ'i3 .*63) w.bλd@m`U>V)5| iT"Ӿ)={O`);v m~EL3sTy.ܙz*3fL'EICǃ6 ,^_-'܄ʉJv: ~BŸDwS"N2+:cۛV^I'W&b`#|ߑO2u-}|9|=ۑ|mFad7ggW\P1NAj| "p E.):gEPWS;#-U}ʮfCY6J3JElTagk7&$S[>lySKS˶,Y8ԟK*RvzG˵.1Q+SvFELM-Tc` e58d!-T^>\B+}ޱIu3o) -땇}ձs>t!-au+ݖL̇Ycwh7YA(sK#iH^RVv#o<éVm->{mꪹ[58b&v2}h4#6!飱嵹9)!v `8#l, g6# " |v)RhoHGqQa: X/N{Xhq)7z.GQ&s I&}0dPVG6OHKr VޡAen)N1=),"7I h)c@69:qKϫ?辈^QZNٌ9]{ 1Q{#B)cfv,1VXq>^[%_E6 * HO X B8hc[ngÓ<!bFԵȗ/t޳4dM K։Lǡ՟4tN{Kt,ƯhS^>}?{]LC p{~PAOikx{J~4A3ޘ 4_5,?!z@T*Wl˭Z39@AF `bN6^͘U/&mz U8 ѧ=\eX !ިT&Dja 2;rJMmFw&,~RMW޴!mlf+MS(5X;vQUا[,5]5F>4^n4wEf-΂3߅U"pȆBU~0+v"vVuH'4NZZ{Eg.b0R_fǟul$)D9:j^wPi:=VsR-Gb:3Rz1DU, 0eQz,7g'bV;וzDȖA! oVl b/u5KtEv:MrPxo~ď5. AK0Q9&/PÜ,.s+ϓ/K;*Nr ˬ'ԾgH/ e )%r$q'``1z$gA;|u">"2fdcb iZpSeWW( S"Jҁy҃9z 8c[&v=&/NYѧ1$' 'ENs6-]5l?J3E*6a կ_2bSԆxa_%9/xmBHnB."~VPp\[.0@^h7Oҍ^:$e*IkV1QMKkR^;,GeћX_QZƐaL{h]ЯCebFv EH N44r @wdVb$F? ":Jx& |\, AmsHbPު:u]i+_#)Zy[ :R=Lvm\[a:2E|X׺[ %$`{ yo@V ϟzr}yO tNue%JAI [mv/ا/ Ɣ':Jr,6?/M?9.. i%p@y!1gEC 5:Q 4&*@B{PC6+{\*,C H3n!~_ڭ:nW6" {\Xֳx"C.qT\=6e*ʨVd N>(AvcX20v+)$""ճkz?pg/8/wqg^E!}+1X!?ZΠk]I,Kŧgvg`2sŷEF%=$KD%߃ЧeӋg֭ĉFnp=h'qEqkNb#BKc_pE/0.+`iB L\:D\6ems5,wc;0 Rnv{Œ}TI\$瞮07?=F+PvF}yq6j>5TvU ;i*f^N3C5v(iۊ0P-|iemQJ%,J{4Z]hEvy[7R`aLHG<^LGqr[B' mtU`dZ~\zir`fP`5]1c ͇3^7wRc7V24Se3PaBҒ">5Ǯ"]?9ZL@ÊiV@W;ݓ`8S/t%j ܫCLp(f4S˲m2ѲFl-)b(Xo+Pp&\g@p\dtZłP\2l3xڍ28Z3bVФ$$Bߑ Nb~layE;x\r$Rd-U7hòrsj&zIbvG/~Oћ@R;OUGm/vamE8oc]Bt>~z%7׸?чs8IG0q`9gD>tˬ\f@̤|5M,vK !@:uF}%?sQ8JNV Wzi'bRpͻjk`K9Dpф B)Wأcd5ޥ~ֈq`C9"d{o|!Wdx󍒴8YB5~w[E}'&yP >5 RMeGB 9 }XsM n"Ll:\ϲAut[CGL D/g#>wN"pM"K!DvLJ>SxXM 7`|vqP8OnwepemZMAዓ vs5\E~}ЋwbDh͏ZĤq84-eg>jNF|(9\f#Z#+QhH # | O K( rւm'3'&]g2`hk4Wܹ:zO´c u]nk⠖hc~LY8ל#Qrz3+/*$G5P u\7tS}Im]\]W v!aΟHTOHjvdˈ}/W}و cb*ȚR|.MP^.[!:3&0)ª޷IVppCf:z7)e5@kY ?~mGŧ^{D[k3@]ʰ[K0b+\CA&'a3a@uj 0 Cʢ&ShNdʑ%ni]V]!mׅǸ2nD?=^!|T'ƴE2ٷ+g_ox!Fc==xٟH&5hM7wK֮s}k2t[٘O%c|1*"QnUkTU|KG 0G.l<~Sl눚ٟ;|(hhpgq|[VXYx dFHHKBQ.\4jrΙ\iN`]~i`㚋g)& IcEm$ByJiy -rBb/v5Az=)uOLrT:)VHTUgy+p͙{*ɣ5f=g6Ypk@12eoTm 2Ҿ](qLݒ:D*^0*L8ǀ)a'PmΰB?d8%!}>HvuNLH !SS-߶zza^J\Ly^#Ξ.=%:8~= ,xy8$4_ w\ALnnWX>;MVC,*UJ|0.,{c4\`{)kS2m.[h9KmvF}ԈtD]7hLUxx7ێ-w"9]t\v*-VsoTt-T\ӣFkDܤXweN?=Etȍ*ssUL3<=npxN)j\ż247i>w#(%Uҽo+:`?FdbV]˦GԸcB҇ )OZ 89{٠I9z|=|5.Ǽ&#;Wk4B } ְYoIs%nDהM_"k´³ۺNE?%v?tuZD`{y=2j@_)oXM ,-l*>#6ڱ`ELX΂!zupek78Dm^Vk\ faD ӽQ#%|&r] UOf!N|0E< åJpAh(iذTn>iB𙸍KG\phi1~[n,:4Hx)d>xbXuWÜ*8G>#dcƾӥ+L5~vVta3c] G}{P4)&,zUG]RE`uΏO{|} Gz![]hyADd;]r;-m˵ĩyt㺥# ^ ܗAް`"~?R"h:.%WHA0r{@"o SˉxX %(9#LoP,|k*;LA/UZ Q5lgS\䃘|14;=z/Lٌ  z L8iA g4": `Y\6%#cfw nͮNxK-:|yg_Z^W-7} m j(̎nfAQ˳֯}`hh!|7/@^,p{\Οt.4ct+F [5J7ewqjd;hӏ֕_lɐP6F3Ʈ̐$;݀A5/UF+"i^W ] ỶR԰H9.޶` PǢo6 ש"\9с]l"x@tW/@BE_ D~Cv.fe 5~H՞b GMAq-.02y8 FPCB|M@k$K74[p0zjMG^fp,I g̣dBBcqY`7[ܔ0X$ ߽HWY*)| ;2x}t0O"9 ?@(v%U x%z*/Dg_k743~4>N F&沊_u$p:İ*2zg???c#ˁ-s\Ogz 1֭CɥG N _Dz7E2.5I ޚȂ@)H86i*+qj z' >@*"]xSP4%J1tme_LIzv(H.xľi-G]BSn+$=*o2܅07/[h"ޑX{@pnS-TSDK t3aӉ֘b 3'Ъ٭#:7[A9J6*Юb%n+tw\65x8>(Qv WxGa#bOz4}BǼhG}Oni-sa+ҌuWko4k-elLzbz/5gGLuLo[w&=5PAyc!352?97N>6cvVepsFhg78:0C֔ I% .!ed)Kda\7jFFX<>| jd'AiW|8%OaC쎓ZמTXgIYkMCd:͞l zȸQu'opF="80QOb\k%:6c%`hRlIU8LQ-u~JV R@L?%n=GaO^oq `>`6 9.;uSG,AWp!6&8y?bn3\ܻ<],NhYWt6@bW!n& ̰`-} ֋q%'{Fv#~*Zn{yhׯ? Urj:AWԌY g8Nx0jYROQ L?<㫚'y:Dr $~]ڻ++ RY#xY3[+":v -"i=-Lz ^j)Sgj裒3uF#mܺ )ꍥޛllaz~gfX~ z&X6遜UZ!X@]B8{N%0b-w ǫNS;>D!13G^!⮈-0C='HIH@CήŃ>Kà p\-Uh8WS畚)L.,}Wt#Am)ۨ,çWpP˫uZ8MYt3 H9wk7V&Ca!MG*c,8sOceiןAM0SjO?HE),&*Ab4.5= 認1Zf[]U7fL֊jCi Y˘h_ďY|Z l/;@Cek,Ԣ|`$5^s??o- Oz&c^{~/Ee1(j^| Ua(2JCaɪ~AZՇL{2ssC壢Ω܄sVSD`rAh;%ģsB]w:3ޘӆ5YMWY/M-nWgl9G`s,-(㽀s;I%L@ܯɩ2BhX)O[oj\fODӮJ Y=/PmM\E0E#1^u/Mƕ~}6 4~qYM̄An8@Sdm]꼦㰆j#Bk?ǰ~gXSхp˶4Gh@崋F!"RP35A>ځ)f]d<|pk!e-U/-d)gQvOP|ÜPVqݍa]MW0VS<#!c>asKF>!w{#\&H Y/%UwICagT;}%qE]ʻߙ^2Sѧ{,),Xw 4}D2k E쒥k{oϞwtN3 HvwED "Iё[˹^-,v29.E%|XS xZ9gy& kISwZb0`]G<>&dKt0ۈx l BEo tBMnRXV[D &eBf/r t,Tex"cj@MhU9$@jU6V%vm"5oאnU@S<5dV/?Vc,Gm:+gLd9K[Hٷۇf"_u/xWLP9Z͈^Q)?m{-2>8\ޗ*]PxTGAMm %}ql0_ @|u8(wlJՌ'B|{$/:2dLlgP|V8k%d[Uq'y^u H,^j:3/kI3V}T<͙azH[1s[4Ye*4uw75 6&Sk,/PN=2j)mG>Dq76a8!fA 5TlDdR ܡ>糐$!|BФ+e>D˭,js و^Qʻ\Ћl{iMZ"$4ݜ$ԣ <ߝ͸,6]S)WRhN(0= y:.]ĂE 9݀:[#Dݏ(i)\/N%ZеvQ?%ue0%*6=W/OAK_RS5Qبe+zI jӢA-hyT{-0(2F\x[DUpH;wC07Hlr&5䉦U_v[7_bJM@:x-.̫2ȆQ*#?dra>/אgߕ`^J|)'i"tQїK}xܼ. ϏR!s&đ]~"9C\E é[dٲܰ 7ǩJwVZHLDޜֱMy`]ܽk,ܾ9VxpGM,*8RYA'ʔ6ҥ0JUM _oq`dzss,Y. L|JJ<. Y#l8 հ4cDߎЃ={*Yp|jpNzJWGO5V.szT1#]EUݼ}̵iaꃊHCtP)aFæhGJ֖,:AbVR\nvrEl_l1`q< iD&T/!4FlOk Hpi>f- jQC{G0P.OU^k8spSFŊw>ߋe^4}e;̍띪Y1TtW}]| 8.0ma:0P 3`y8;49WtnĒ*h}Q@U W; `n+\pMÀNvH2FJmRa! $ӯ`GIrP^e/Ju-{Q>jrU[ FHA~(.G6C>-`~Ձ1T8G}ߝau\@apلĩqΖByaU+B8,!ŧIZMh~"ězOa` ;j({h)TIE Z$_Ngס CWN)X>1ďJE9 :Tlu&cfD2) d8(is 嫯|luѕRJR3aSOp}]W{T//6Z}WO1LpE;Yb+4F"c/JwD^iA1+93D%SRV'2/6&FZ 賒ҏG!m*Q%n$)Skɠ+vHPA)f jfETN51&Tnkg=(3K7_˜4J.)żOsHKҸhn7WuE_# 1:Bϥ+ g3}FrV勆kB# W@ Zi!XH/~遴3!_G.~<ٖ2&$C-ix<q0 g_{0s2wg^m;[ceꃙ EY$p:pb,#<|T18pX*4aPnzB=[tYr "3,%E!{~$ 9ԷȳXcs b ) Xi̻Ds5V?bqaSB AK8˅[ Mqd-@VOO0d_cgs {w P;L|'l)Wr; \|cmhzrUob# 3EPgr`N agƆ?}>~վ)ݵ~/u̿1c=.l-T^-IcA'Z(eHV %fӱf]$l-C܎>e&s xޑ7曕Ǒaֻd DQUNWJL}2 [OpX޾lFN Z3&=OpQB|Z8BDPnngy%-S9ݜ, ?JP63~3$y>wfrrw1<ΌP {<1Xn_0Rj:4.!pֳrT?$]HdܠӝDb<%p'pI')k"U.̷w xGoKgs/s(Kُ^0 fA:<]O_kx,jexsef>Fbf w˪[eU`!Ev\4|2a![')CN"d!&R; 'QmfJ - _:Ѩh[##k|ۗٚ*8̕Vy+("HͰ+[1fEɾO>}eU^sx3 0 PS*?ӓpo3t~ODIIo,(dNzYAzL!<$ѮsTpszv\y);l63$o+qŹ}'| >o7I4Bpnڔǵ5GLXD]COYH+eC'LD0l$O %F-i/+QP1IT$Y6qp&Z.3v|,P7ц`*Ory(* 9 (o=9iE'0«t(_R XcРK$7<"G'_IqBnǯgCk˾7 `8D*b3_@Z;1XVj~4G#',nAe2I" ֎{Ka$"|3|t,Oo17'Mg/f@kâ|79H td) "?z~^mToF"vz$`yVS.^GMft/kx"EYD4[ o]K5=!KZO1T|QOXޠ Ch פ @_p=Kdw)]Z3'oby/QHQp(Ob%o>E)&qXr݋ /(4֯?b#NkVpm@}3AlG#ЧIx>kXi)Es#1=`Q 5޽PPpGXϓQ;= kH[KC:o*c5@Z^ h. J&j}'WoKAtZ!WZ?& @o)n=[NNg5EWI_Mּ<4Rm&%}ir^pNN[a VFL}z\-1j)\c*a]\/{)_\7QD/B{j[|(%uRelZ&ŢK$|'ggnh|*~jO?+#~WT{hŽ'ER' d\!'=wKʚ;-hU$'As;dٴrޣnpLyBSuЎǖU{7jFX.oW;֫ e6T]_HBȴ$S-{f%#+MUw"vo"{cyA0Ow=gW,f7٭'Q4PIp)8 :v|2^g*C}-Q{L,N޻F_TmWXql颞`wR1 o!kiwyg<=9'yB;U } *+Ӵ9\d i~::31Ynf[>vlBC?hBӈ^u;ބ:+^TyaJ{DBsf[7L_G0o{+(|F.Wn#}&b^uN\"(Vr*T7Ri#嫡#WNf;wB>v:cqH@ZNOރ s^Vg mCט RKuƬ-#TfHd:6N By -L{B𮖂:SGw*ޜ͘FSdWxFz꒦ C,4|{ck7~k/'r^X> ޤ۠W)@12:W\ЈLS~ זIݥNp׏w0褁| P'(b(˘ \?ܯrVɔJgC)>}xl].?NJk nsOO TK^Q+¤`%-"OBx~BZe9%\3ʕL HaXJĨc]W hJϒ $$ZA?C&ݔ]X&zF`Oԕ1q6@Z͸b+4o$>QG6*B (| |Z>>۫d^mRO ;VZx'*>ktZ4_sxDpda:Or-n[9&m t^zF4poZ5߿ǮpJ@ipA5Ɔws߭₂d˗dt\DC UEґdSSs@fj Il-T;i.rQ5. n_Qy){s.0Ivpcng0U',Pn*D ;+hgGS"B|r|i4crJܵ+d(:,?~. !˾) +[Mn%w;xt0O]v2;2v?tnl[؂@/cx_"j#r-ڃr; ڒ@P-sPFL肄Pv$,OS&wjJPnXBځ#;Z#IV:x÷J O4Z31Ron"d[FK@gaAg8dVQ[!8oYw`vE']lJ++y_A]ɽLJ mJ"B,eh+@m*t =F?-ih*Igc.Ӏ{}-Ұj!!4yx+,UfZl+1H.dےTHFˉ):RY̫uj/m.#E4.33y\=V|¾^;ު[!&\ag"1 0lqphP= hO?wO&׵cHIԣq'L(,4\꿦h8cJ3{ #EY0`3OP$HN Au'ӯj;"=qsٞGf݁pe~ZYN:;4-W+ktSˡ{c^# bv0T`Pc~MαY(p{Nَx* M5ɜ j*JTk5 *Ougt/85M]+S 5|KR22} fچ9 (cBl휵*|ѓ|#;;W(#r=q HbB)=*lUŁ븤8"URdD`x ꚘTLoIfVb@b0eS5lAMq4XMoq-9Ղg Q ^=,s`~4LX>N*yOa i[l[}\nʁsFhtQy Z}*ç )Z呇\Ć&XZchLtT*Vz^8{ׂPG)1M^P+A\/sۤ߉B؉dbRℝ3UyDXcsTt&@_VJ^E0C*F/͂/Ls JDE/(KJ*B^|ZM {ób?#V%E=fď{%Vr΃"s޲/i6m(fh/Oz"L-VWd(K ÓZO2%3  9Ca yd d$̙y,Q&.Dxςn;4yUDa'

F !F话wITM Ty'o'PUihs >sGP u8+ߊXkh?fO7R*/g ?(=$QtE_'Olޏs: B@΃aŚ%1>Lp{I5wxDCt ",+[誩UkYħi$X.6@=H$t`q9ۺ>hC/ \REtN8H\};LTq!Y ^j}&ҏiq&Չ3 bW˛n1SOa4fn=6~vǁ&=x%YХV*h[,|B4_8k̭ ?z|B9.tD0^{{^vkHccJ;@ƥLL8ed93T"z;NmNA %W]!xȒr:#o mNp# ՙ2F䗜BZ.:Iʱ_9i0ׂG$Vnspj0u^mލ0bo־'{oC!(`nJg{vDxXF `h~9[Ǵyl!2]ԡCog NJsm4@hr I0CqQ%ӫ_+xCd1r N?k6Ytv+l 㘅j"dBcsHhC[˔C&=ͼGB$PaHVH!B+1e6ŹVԌ qMrv M`<֤,Iz <Ez/50tfvi9{3QbW%ДW"5݄?Cd>C\;~d(ĢMMi·eu[JKu!kJfY-9d~G;:W~ " *ơ]MӗCD- -DFN-QΕlB,Q(fg<0`MRӳr ˳4`9!ɏD2Jj]x(uwrBlΑU6A\5bi( , -@5/grn6U#}C}|*3Fb+>8bRgn|px@_bɘdKY=ظXS۟SpzUH/]ncXm3՝<צ*u/z' m1stq[z[-\`8Ĩ LAoB0|f3 F@36ئkl$GAt^~5"GU,ۼ?Bk查H7!" \gtS q37%~7+K7BʉH5DzX:E6>xBxgk X|! v/Mԧ .0tN'DyA;\C8'UMg/!(tڙ5CqMvĸ>uQ[TwN0*6c߳OdH͑/M 5&vBZ;%wYi8~&UoDE'6xs|GvMP] ªP֫SIǘ /0::oC,n,ǹ"2ʦ+vSwJDcyJuVZfsXYZb^4FFeاpp;:z,x`szRF # (ڬh-TKL%BC0̃]ڛwjCOgkiaYjFgUk(ӿw0O mKɦm~,gi*Cn]`&^Gt䒘=p5xɟ,Od0rhaB8ˮEEqׂd87P_=)i0CM%]kRh| h}jLhL]I<iR걵O)Ǒ ăv_>)΀Wh< T,&m+Ps]XNI3g/1 7nu\ B,IE1*M@dL%$^ɾ  zg/?sVae%oA 4g.vx稸Ø}$Y+nĬQ;إ累+ tXҏgP@lI 1Yk'10Y^¯Tm3~i %{[~Sl7s'.{کo ', gt9U= b`Q'hO%XfQYA+Cy:Y\3I4E;d&7Po%hR ;mER^PYR$\foN@Ԃ0{xAM['5f%J.K2x…`BW>JǥNX~nrH,&ArWK/&Nꛚ҇F?&"]IσT3 ;dn[w@< ( ,gr24jQPw$44LHKs1A%u%'Oz!u5Fj6;~)pQ^DzR5%M~ܩ*N`G/:BMG&+7(?Bw-sIrJ 3'TN"7˖@O@͑##]sWR8H\2yj|c~ḱwux,[r/m3k=#HT|wsZIqp uXhpcJǎ?(T̚)ikU5p; <* gl9#џ@OSmI w%ga~>^bzxnQUg[!3os?~<9vCq|Q2U~1٤2V6Ael9N"".#y1x9\5Y*nxDd4X*2__)?05J?ԏk\E× k8 Nqgݴ=&7hQx/ "kͰ lc׼2Lc3ѻLF/#'ڷA!w~.qׯL*)HևT% P04=v>\%s4^*X~@Ȇ  ܖ}bsn/55?zuFI9,U咋YVcdT3:feH/Ci-NTe(}!YSriGVg HWkcde><`D)t)\VG R`%(> O&=7=Iz1~ @nkpE^мIGs&yQ%!gH+wjzfkmsH UgD/r~WW_.fzil/eL͚KV\:J sjnAS@x a#좪 j|K,3[8s.ب9 B uq1qO&Z@P:KmCD@'RK3 RMeן^Ix-Ua1G f )n}p*_{+ ^[bS<:pu+ejo8f! k-P 2 '*򸠿/ :rDdeRC}Ny^~-MTDOnĆyiQa.Q!lf@ =MV jh8d ╺R6{9dd· >;SɅTN O}ы6dk.S0aMЗ"_[ )^S`m,_/A?>0aywh9]*|O6 ]m>$)Ӹ#Xu#>s"z\ b% mDb | wkdʁʼnQ %t yX^pH;SGnn2~nORwfh%DJMl.{ƪ?>yc,5jRW5 ~>fL H0s pCwM6ta&[$4Ĭh%Ĩ 4 |annq誅'\-Oi'/\6mяwh 0ϰ`Ɇ+S'8XA *ŀ)AٞF͉M<!ujdDjxKhTTY%FFِ;7mZǻZJy Di1sٶ"kJi߮{Đ%VY^po*77?j@6˚gDzYO  ΨyN\R,SʈJ@xQNUάFjvh p|"W T:lky{I4; dɔP#t^ s'+Q`90)]I #6” XaWݞaAb Nwnh_a҇FMfPDO /_u/BfuK$ײ)ޠsїĽ)QG/pz1>7QQ`ͣcApKr 6MrݨKH&ә^g#ϼ XD鴗gS^4P㍺Wtq^5=P;3JAl3{- “icD7fPqpESv 1/ *?,Emi؇j"S/睛zjJ.9žN(vl>aZO&;1 6T]f1~cA Zʼp){PC[zɺ'$ol0:Uq\/MO9l,&PF%;Q7JON~»D9.8 Q K -[0ۨ$V`l㰰F Ia?4O3vYSAV)9I]k!!qbb[ARbp$VN0f9GjsVsm:W9o!41~kӎ(NOKd>3*GlژZ G\LVgF/[K#V9Ri9MRo#?SƏڧ1 *5t[4=3׍ <حb])rp J-MMTC|9h~u1^hzc"K;"&\ NS@! *_,B#)X&ZotXF'%g"~F4DdT,Hxި黸}$9Vz<YIe:ＵtA:@I-R YsjWԔ=m?DďPP6蘘tIY }?,]1.} XVtH}±zӊxزMcsGMlNV Q G?/LL n8V.yes>qp6ID< 3VM_eV7&9 uzMaa4 :Rxz'g2-56$6˶ŸFwϭխV5 \+-TZj>̇yعª-h~LXT,Xh~%=\79-Dq<˹QN&Apxmhd^ &u*3]/ڶzp>CWtjsޜѕ/%gb,crEGY4:_jPkp ^:47d}Kܲj)_vgƱaD>nh`q`6E hK&  5N!>ҳXrA>:c~`T۝+*7AkI8,AG0D-Gy jK{C`L{ ;u1/::éHߝٻyĔ:.#^om]¡>"8I6[Yώwr2:}rz:w-m]ё?>lW5iI?{ʴH{'6NGR®01J`yWt2Ps#[_{=:kY/6OluW[ [BGtjB#5Wc1AMdGS aA`1yym4î)gf|kz5]aw7i~ 4|=B˕6:6acxd:z! 6I, GPҨ@c#sIq86ke:YJ i4%Up^e!qc?B&EpZ'N,~BQD`H:VHoU qRbڨM+H7Lm+k uq)HLJ.zGa^m-P㍞4yyԠ2B܌IJ>c2WMt )=GF~׃*d"tsT]/A'Yu}O6̨:DV6I@ $g(=Sx^~ J-HD.е/,]*cp!kNBOEgid>fn-A \>Zk;;<ІLq)6 65nǎHz1<е4)oakUEi/^2 \G'| a[Ύ\e{ {&:]zU u9DkwMkJx^ȗQ0\\TF'ʬ)tB)89i4/- J´ˑJm6b1r c.Idx LX^SQmK@Q:Z' q>2LޟM%8aI5$B{1ǕӀr!=7:'x҆*c68 ˔3t0[3Pf@ൊ{ 8,wc&bGQl ist5΢&N.GW`D;bn8%\ ]HzGoBfn stlVbnMZxD{mN,GLj+fu6#̏9'! 8똒|>e'x)fq f~wfC^H&hv?_x~%,z؅bbտӵ%{KT'o*T$:JK. P[gsͿ=yij+ygu.C8۽3{ Rv,#nS;b2 Mk$OU j,> ݨ܈vf5#b|St3wQGc scUIۆEb͡?+Wl[[x;UFy-Wa|2"g#{UX g t/pTXw8l jX) I34▦[A69;56zeGs?qS*#%͉ =, FK[a *I&5߶m? AHNQL O'@&,G+r/ $n%Y |ux;f]"K!uOOfOvV)˞əbEe"SK)Ӥ;l ckR YrFiiɇOp<I7'5o@j@[!"@sKUOLtJw8bCc|h8X.]4/eYYgAoR5)*vhG7>,GLdP)_aA!WEOznxu-j A> "!*۸\qtF8}4]"T{ʜv-Ց5١cwkJB[oL??#Ewy- "XxSD yM$'{9"$⢨.X1%ȁ7:+5 t4E (K.Ͷwў.>򐼨E+qcY?@@](BX(zcLgɦr:Yz?{ސME!'HzRBѬSF4&H(|_]G3H=Jr*,(}$x6jc ehN, uP| &Ӭ4Bkjh{l2̭};Ba '˖ǚvIAXvI_ N?-zWTgSi]d䮇 , YZi m3Zvb L?B$K\ `x̙ѥhlЃ7֐Ϋͣ9j}V^C"re3"?;`{ķu3>eHt]K@MDIm{$ᬩ*50;5 )U! zI 2ug?ʴЙ=ｾb}7RzVGTen]JODWP w.Ax8F6 jknJ=y\DǃkCR7jk5|.A`Ӏh;_oCGL/bt9T1p!Nz e!뢃^ :_ vtOlwaKn:K竘Ԡ5Q^ Tmꦫ㌢45Fd GrZ‚}7TdG0kG@r 8,A*)q ,rÊWR+/WK?\5{'wKMHxt~gab mDUb|_:-?N|<X|+rB'SOꢦ$Гc]*HTLzhl1Ƨ[Ö+/C>IXuy],VPM0yp|A'-TS3wavI$p+2g/]VxoWPZD#f|.iV-E%=ౌh793:eSM\•zcr(H8C$nMi ȼ`HuY;}2{+I~'mBFpt99ri{B=~ q(8-"b}ؚF@j'MD~8$.:O>>G(=C̼HX=ZW)eeP5<wBY$2pDνN##fȧP='aO %7K,$ _P0C0{Wx/!+ L hP,~7SW|I -𫗪jrkaN2>͇TZ]2Fw]y<_?N:Haַ_{cɋ;"0`LIJRfB !4[0ۧï<tݏ8u$Fd,!qYHρ2U06c [aE*MCPz!A?-9>ٿtC#5AeAI۽I\ezaʇ=Nz4 b GZ4BLo]~\HBmXp=&;{dCqh1Y*N2W@3 mFZb٫cyK:OF9lJmڀ>EoEuzm elwW@Rü~WTéi ߬QHWd>h#FTv||pM3-,%ם2M&ڸNb렵F~o'ҠgʔS ҋ{xmS{_q [>&Gi?al׸*Ť'3ѣBe_Rw B7βb+`%gߤ G|)m5?Y+4Ģ [H|s;7Ȗ+)n Vnu G~|<7>Db8m3ՄjݝV+OjAVrt~P\_ #J j< Օ҇{C(U\ o;M v(.H64ETF"$N p. @!djvՁৄf3"1p`$:|3A>[%;GJ5›HyV.v#=BK7dּrӞeD{~G~0;;ۡFhBɭt?,"2[C V^dqQ&;銧OhΑ^K5p FRu37E!jZyzwLW7piR@Bw΅«߅T?p~L`赛9,/̼z5G1Dr>1Zk(;5M$-/5Wnz?mC5 I+N Vil{|}0p@j'Tzy3U3\3(\F#ړYe w(?s2縡GQ4^>#Ur X΍$\z$;pCw'ZŐFތ( X 8y =a F,J>AQ94'ꐠfF)M7[%'RouU%ݖ-HΊanbjD+ RGg!" cx9VSpwmG޻hn(IH6)|ӂ\-5LoS1?W9Ȉv2uJ1Z>CoP֦q,şˤӱ 8~Ie2Ge\.``()'JՌ9Jruj;PU& Ѭ>62enl8 = z6XŌqNJ5Kr0է|7;z) 30* Su:8x$[5ݼQb6"År٢8hiҌ@Jj ;x0n9,loqX0'ĦϼX pa Іi+6d :Sow|Rv#JɯYҷER 8^T-wQerd?Te &pUag:u2*e,_x<~ F6=J@I?X7{{n~&k7ok^PH/ə JuPщm~_"9֔uzlNi)~nͭrwH;yѲwg; C9qV!d^Lok\0pY-nMv鹯uFC䛫jȳQ_i2y2߭ۖ8NzKa 0H ЭSnk+l6ϵ@eⰞL4:=-"IHW߁:X\;Lν݊~JjyFA^nG!!$3#Qx /=+kF;q#M]OOkn9&K4 KpE\Zem499{x"J%pvyEK|>QyvΡbz;u1O++N6{]agTTj]BD&bGPX'mt*JhUsf|Ob).X=%L86⃍ h65{_vk3d%p=DI$ߊBSJZ %0lDİmIw EM qL9_7|L|>DI!%=z|IX`&i]п5a5u~8otV`:} /zrZU+)<ffݙ1||P r .nExhd'ԉ[m`684u>t*)Z^:J)_߀۩L()cr/S\)*,Q+vB7a#%> >nZ|3f-M#1!d oHd!bF|ϢJ&eP$%`!T}r-`礁FGiTNŋ0ųS=m?0{%?x1p%WKU:wlݙS_?s]_ aN%bTa'Px W۳Z_a di8 R!K/&5عL_xKMP0дt vvqBuWY]Dyju+⥃ Hs?Wkm?Qp SKb߁ I@_: wzJ*"\?ssPʭjrD9̗Z/Aox5XP"y/zwQ:_}<=$EMǃM?^4MI^Q`?Y9 2 #)'7uqha{@Bdw1awD|֘nOqg߸`;Gt$}xeMm+e-$%4֙;LoYBC~LDS'w,PB(K[C;hhK`rġ ^ƍވG'l!2S[,ƻz-P f 4S,'% ]HP#XLs `)zX@r5<]h]n¡!XCexsggw㽆wD9 v65}qnteEzլɌH3g{W'2yPAw]nk34QɆmP/yOT8M|$uc?UiΪEtsEꁌ ~bUUϞf.6+odK,UjpT';6WH"=/zo~oEr^3On?u+~l@RLx^gtjdl=qu )ޥT ɮ@ۺUA;Q7m= rUؼg h)i(VV6opnXMM_a29JO*+j֕#5ϪULpλ)De(V&Gcs5Ǹg1pjW'uf+^iVVQ-G!Hfnya ZXƑ*ݒhyGfRS]#;ӏ2OZI\9S/0֣1&'2XcN}H֤p ^8\4u]do_~T^`PIBxPa[E4x޴o<:Жv/)?Փ:j)v‹$s@k[e]~i?AM׉h.mEͨ/cm>.1KHu \X\ M0tзޕ0ZRD6DYB25vhO*pX]% JH7JYwcbd RBѤr!шOo|sTH8io]b2w7D1$,atz:h.&\PþґeD3OtQW/>d';#[h4s:G hRi? |@;X(M#~5.[dVm&Zb4Ђrz9]b0Fi )gX/=@nY>q7eXXb9GtMu̘ q@z. "/=V(IB!tAoY=%3|`  ;c&an|"]<_鈰:s )C[;Y 5.OOoc;t:DvL3̬DVC8~ke!T8 e!ͽ\|[џ:)ENv*Ws]fnHrNmR1fPS~]Of)S3!~{#yK׍ YfDBxi^Ex_!;: vO^Ti._oveRe 8~T *#݊%V~ B#0y.WÒҘU2 y@г%A ǖ}?te)#(VpIǙ=M, kOҀ4Ԁ@ tXQYxy Fc &4ŋ*Ԃb ֥1 MS tqr#= 7- zμz~&ԓ+GC2J5Z蕦cڽwZU *ѤZm %IJbA< i_e"ls~® GlT?bkolT[)S.I(e jaz*=<Plɫݲ DPDoXgȌQDWIl/B T?@#Se氂Q;$!D7Uʋ%fk2\ |{GW~y YyD<.;-lϴ4sXʧL?z(~34b^2Qf"x>O ȪFzK-PY~3(Fma 2eп |UVV(;9Vp5YuHO98uu+\hZThj. њn̥ ʹ]%p&MБ nok)2EQl9COUE~;HtyYren6.<VZ+if~Aw)VVNO >o@֕>?u7Ds JT97FP/ gohYDU˅gOxB |cih}t LQ0Sp<&&TDnXᢀkΑ#fi|7HK { ْ^7JXkyhEv2>MNIFB43O jo!&b b0X_m8ڦy|I} Y)v'EҭV񯓡Q)"SxD-FL^(wb6IՁ աU.1{)]/#{!M߅UmjxFy m$)rYT1qb[`pH楚lJ.IvPCt(t{яFGrNEJ=3̹k!W!紖Bg,Z>N{F*$b(:7ww *{_kGz{%T84 siŨ,ORg[wqy:&Až 4+iᦸpJkDR˲w,XQǭ }2lj 2yLKICD1l۪Z5ʔ{p'Yq@~&r*F(>qZS2 y1o38 RpG?-,5[I<Q,Dba0_ȌDJ *2)T?k+<`i=Xmd;/N6͔g(j֡ HqK N(s("j~^*ecPFTҋ?  Wm/1%nsC(<~# ]7ѾQC/6cTYEQH]9@8Qo8t_W;t2jO42$4DYu{bⷌ蚌4Ib-^!ߌxpPl`N91tͽ]}8mtmb|g.2rCt`K!e˸f!#٘C| M߉4zHWȩuS-sA(Xh'v. 5 XXRk4Btf\QqGM?¹q!<"0QTl)RD:HnyWB4F!~J,xb; M[lyܞ+Y1қS8w\OЌt$j0*N&EJ!SG;pJ=@X@^]8 ;4[6[hzAdȬ;?a?:a7G * 2*l8 П:sYmwGJ"d eʞ}d5|prS><OU~d0 }6~=ᆎ.E-A\Qd?"zf7@$O$_!zztJ/7jLI({}67[H4>C"~'i·NJxA/i6Ha7N/EdPbb|{^? Z=*˼Hxr+&(BGV#V1R)#1O)줗rZ1;q~+pazd\7׃J Ⴇ;`nŅr4 6rcFPŠws5}lY9(S$ Oobٚ,cUk[A!*N+_Y~-h|-F! 3m}qiMrJ,2Y'y_p;[Ny5]YNhmWvPupKԮˇMvzFjaeE4~$վuLT^Sa3c@۫1I cx>FN.[}{1SV{#آ܉ݘAӶg 2URFo%̤[h:崀'~ oq.ъxPG2g C > '{@1/zXy쿇5!}D&C+F__xeUr_Dv105hYu[crLCNq$?Ф[6U ,#ue\{T> )PʈE4(}R-b؉&%&!4pǃ'W0"ZTěBXԍ[p +ˎ76O)MЬSxIZPŹӱmu2_w?b:/{OX%J(\yP$\,,EwMf+Y;OgGGm6gGx8O& =kC D Oj.ewFV.#E~eq. ߩe l,*koniĀ|PRVL܂>cE- 1ףܬFq<7uR!rߪ_-%ހ LGfP`O8NN,]"(1iZ$+\['0.3V̶eKM-(&1YH"KoZ;Z]>q@jt{?h # qu~EvO޲ $Q57q/1/ux%y3/>AGRMA⊶l)YkZzQE׌V3$gm>F#(8.w v[["  OJC$u{D28#pasNm=C-r#Sa=|yӫefd;]r6tȔ (M]];F?S.`nA1jwL\n#> E!Zn`X6 A`zP!UWGcpd+}CԠX)ŏ$ ]Q1 3o==Bek61܄R*\13œmb&jÊem$lv~nWc*^v}}N|K H8;/ńXu1/<vkdi@o$]n;}є SJ"Q J!ůmW)I#`go4N5C(B( Ԃjǿ#!qڍ%4Y& Exq=*N\Ì+ǖt%^ ˌ'I#aiQΘv|%]U#t /$6J̹cR]E:Wn6}̓(a8_C \{뱿 ZUΨܲiruˆ$|r-1Z1Y:/șf> k~Lm@5+XL&*8Ԟx^G,rH5=Z6IC6͊MzNU%8o4'.;ajRe]^Kq3)A ѱ3$#&hQcn{Ci 5DdzQp[ lR^Na8 / 4hA>rA0LV ]o`'RvGl&W0~TZMd4p(2}$.3x8Fz"IxmPd7GuTׁAHb7 Ľet3t/?|W4+_j KXL'Ue{km^t xhkt` D m6JrMor~{fΦ䮚 {:8MH"̧.R;(<5"iDxd{K7zuJs F :N,c^9Y;^5m+@|OVRu914<1r 8Ҥ<e<ȣ-.чVMuMC^WfS.X pH|vPZ` z95!|V8Ҏ/ǮX뺏_6V>D|ZzN3o6>9 tžmb肇ZK6v3E\-Sa>Z/ڋH4kv$<׷:{s2S+`}b{ ==`\}w qQLP?vxLCUA|>Q\]礆/9# (G?CYH044qt:Ahb`{YC`%Y&4"lg同q6[GXj U5uwBDQS~" 51yuobQF.zgٖg'%rXn$)dcתD1x| n~Edt yh]3bN+'q|oitrOdn$'P6FbjQm=&B2'|o5W\;xj+vDU}jC`;"}Xb[mA?nfʿ q 8Lt,dӯ.qaW !!Ϊ̱*U͢R>yGbMV*"h lZ1x'=}x,X'|l7QIJB\TNߨGGq\3?|Gƒ gxĸ3iϤDžbY qC$%r&HP, CGb{uu+rK<2?T^HlӅ }8\PwI:l5!cDP$!HUGqa0m%tja\qU$+h24 SZ%RǶ|xǡ'r/M9ܼqW'\wh<Ń'V @Ayͯޗij|g{j}Dgl/j6O@g?j1}24ŧP\,e>j/wc~ivٜ]5UG+[$jsONP{LrFuD(L*6 c*H4_+(.*`B 0*bx/BekV pR^[Em R2I(nA mr*Z3)Ae`Vl. xε~uFhQKW15ˌH:Q?)ҼxJ~:7*}8.j)e=+o@hNCBQq!^ I̎#[#X(N* NƧ#~v=":b$TҜHM]gKp{-uܼqG1Ʌ.TrDha&@j36i? ז\~ 3k;l5D~F,̀6vy:nd4w'}wWٱ sRCcl"\4׸v${rm.sT0[#)Խtiy%Y% Ъ@C1GrЀ}6o'a6,li3󯩴fie.U h64W b?X njI$}e'<)}o>NGҥs7gLڿ z}R+DXo4ŒcvHG^&dҩLa&x(;d cUʕw~h>.P 6!}CfԙxO5~l?'W cC,'+(MDNZ~i͚ 5إy]+T܁m6OEicgtc'RF09rk@okHZSt^Ob򼼭V-?^u9Hon4'tцDžU?,Yi|^᫈C$ɼ/27)8wJ~oLf>T%S])EٔȮu9M1\Ub!*zv1(O YX1{sUsվN}3^1nr!-L !Vǟ_Q8nAdQqzLJ'!ҔB74u d-GP+`q)n"/HPx !|Ȟwo>M oɘ8[,rzSUl\*vx!UӚmЙ EƶL"LwWaHҁp,dѐW] DUd.mX /=xIuZ Ytz16QjIT.$+ꪉ6%~<+NBͳB-x%+?q̮Q<:W=`u4sQꤍKjjURJ-tŢ#@G®0JڰE 뇦Fd8 UQQ/9T:]q9JODh[=ܓiE4"jy@ o9D osd~ovWl S[<$)?xxUL0kHGOϋ(撔|Ey5{|&0r}S1&/TTy .?rau~ʋfߙX/J)xYd3RC}. ؼJ KX!r:ɹo0C~(B <6(9ld߿lA$s 40:ṟ掬ڮoNx&O#>UyXԲ3o1kk<T: %NjZꁎJe)g#vs Fct38.vB˓.pz.i4>Lrv X'!T{6?]ƛ|Q9> WX" of.}ggx|#IXJ%{9b;HIU$aKî@ Uzjl-_蚱7:+LdT %"$%AÖJSm\|Z7z\HuSEIh{xRZޡֿB?Inh* `p._NCiЩ|R0B łMWˀ2}Ԝi'<#;a+4*Ec\aIǝSqiVy;|mJU&һ4ǾCMH&?~gץδ9:m2iTODL8>wxsjV{T#cQE`oIo WChqgpϟT 'i!Ctvf.{m݆C%ͶzCjx,Bn{`?+T}^ݳ4)oLQKSY F *aUPʵZ6V]pG5?\,&or® yOy~ݸLJi+9_PgIS|py 6J'uwSlu6zjr֝meA x;&k px[<$17w#K+j֓YQi& xb ]mĵEվ89UO[ZZ:9o<2p|\_P?w c;ry$[jF̌\yN9Ybj?|T04\Oqw"B+aʃYz_wS8ӿj N}:}MUL@;J{; x_.';)ޅ]d |66ԀAQ[ױ'SފId(w9 -^pؚTXNf6\-ڪW-~` 4q EP!II ,fZG0 ?񭶙KՆ!MDH(Br#KhB]NY:m%\uؿ?,%~/ORZ zɑ)5 viTՓ>D(0˫9ݎSqVIR!aR*oG _wc26k@땄mf r~7&:Ԍ:mSdn0^m=ZO%/CU%jAq+q6rO AZKZ{l /TŁ^>~G!`@{'az|f ) ^e1vw4C0]pS^l0$ҕ;#DXw \˝)W"C}gV9x[娨uE a5uHEv4wX8".&?XXg|D+JaktZߌ*:1V:0gIAtDKq.ty#ϵd_CO `{]I XTC^9u2)r~O/rF14!œ3 t7S߉~jat6bmc l\u3)w~ʇe8Ig``#}r9ӧ6Vӎ"uQ3159dd~ҸkRhET1yH 6KY535% [ؼN/Q#f;ѼiړA*LR|Z>=p!4:ܬ*5̎ox+ A;ъLȮ!:qSfpmQ [ɪ>"-cdyp_sNB;h3StyaJО<EK!xWVh}#K&P*b\QYas1-xK3/Q`?~VMvIeM{a<%ٸo~tǟI*#Kk,Wf2ޑ@+SDC K~O~ɉBj6QBt)kh)9:Ъ.UTA]3C%hOzQN8΅34ncN^M++I0?lU>=Km Sdś ߎ\h]H7`P|ri*E˥ 0~TȍvM(\=uOidiWӶszU򹄍,ܱ_ʺuu7p|)J1R;Bk - !uZB@į 9C=0t]ʠ[}iL L~u;ӼkC. *A#t|`M\EW(,iăEeDtclx'x &`#<yD \'[J0Jx\KE X~1A4D[ε*RY8ClM2lڇn„2Aqc1T[$"dOq~ȳ4)DE0gtC*[$Bs*wۄ~ KMRVI'Mli&qH#-m,n)n xqkoTbH1Y ㇇E.fgj GX.YZWK9v{ JaNgD\cH09z;MSs#K`h EJZEL7P>>rPm+r23Z琡C<%kmU'S14^2=2)L%s"%ƜaլF`Wˊa*\lDaXNj.1gB8V<#PΏEc Ӥ^^=<\TLy;Fr]DfrJ-(?61Csp.ʀ=T-K:s#Ed fτ% ةMxc{&sƶݪ:*T)bP?@p_4ED5{˒ /随*Ha_>᧹[:[KlhS XiuZ$2uT^7<2ŸM#Ie>uy*5rCKfK% LWJ,b`@( ;!ۭ=JS c.+Ew r1*s'Ne)~8dJƨ49``?տyN; (id]`\*Ι2MWށVl =wYX'B\ dQNJ h_?@&Y`_v$C C[vSS("]*nCYsEs0 nÿ*5ȧXA=`KLAgN؂'BNrw&qO *AT(Vw3 T^MM}y0hx\\ˋT!ԋί}f9w]&ՕAD%:HC,9NNZjZ`&mHײZqҸ!}YsMwy +m6ܾH4\f* pօkA7 8VzH7ֺs 6wuA>`|̔ų(WQ,J/}lSʍBM˸.HC=@ Wn[w8ָm]xbNO.$:blK;"BMV>Muljs67#޲N-p/T&(`t#iÊ oߍ*+*ܷJPܴB], ]D\MW zAG ch> y}X :Zh2K4!RL~(V67T&^@=$6N\-T(G;vr޳s5క  OxPYҸt{© )~rA$ƣcEqGvtFϻ[5<[)qԪwHD/LbD;_ea]$;WiG2g g0: o}(+AO>;*L̟,`| Ppc{DeDŽ@_KN\5н`Y{n==Ќaి&/F#Ʈ»|)wvON ޸ g]TSƠb2a8# n|Bo%L౥}#h B4Zׄז@ocXϨ3A/lf==kHVsQj>:; [e#.ó6y8'x7FDaY uX-HNS턏ĈC,ґ ֚ "a,{_,6JG B TvPcG*RlQI ?((9\檡+s9W\N Z':#N2򇞧Hg N8b:bgfi%?AtⴾU'i26Bf(+/.Ff!B6FpRt;'>p+mg8P9(mNαk^.YsO1uo81WdLw[DZJRBЉg#Svt4[E ~|̩X c\j1vx`ȧ&uEQ_ "pHྼqh.%G]r6xk(ʼnP]+JٛkǶՃAK2aMSZ\Do[Å{6ROmjuGl෸l7fvqח{JAt$ؒ2P J_j1\h?hVS? "=/5J4Wbh7~䧳$gWj (8!jR'YPRD-u4{&D %vQw;)AwKҙNէL-d AKsܝpVV_q=ޒ;lfo+{ƀEH̋~l `HŴ ;DŞ12%X4p+=~筒s ~4ٹh6mU#BVrY:OoDJEEcKo1;pR_::FNyse (s#)K"d|bq?UE J,Nl@[ F^){Q$#4 >3i*z[$<܈ cZCzXf'$/]Jh>Iː i0+ᛰ te*t hO՜A7,~$T[#^zS_+ɈO,- wD89 Ea\кWN2] Lq1*Ȝ]_l"$0k҆i6e~;?֌o&E7SaycnU r4чn,(wŴ>KףYga\XA;FWk1.㈂~f)=@)t"^hMKIRShxL赞OZ "gn?Jei xtΖހ(2Mg$)#;RLXeEtN{<#uYڷkfR"0K07hWX![#rʱd睝j,caw/Ei9MZfK6k.H]?L}'4X)jrHƕq&Sٽۆ4Ƀ' v&̏vFM7)kZ4B\S@ A]-9ߕ.RHw ΐZ| M`l8Xŗ6 kW^bJ]G<  B*tU'ָKtub!<ۨ:Qa1=DPCh $y֟s) `,X`EeDO35kVn唭BIDtB5d~ȇnZRr_6uWc du֪Pe@wj38PL|p|ӓDx. o3zo#o&18WfۯE,DZ&dS-ɡXa <'C})*첨+ՋcBO&9аB=fQ; =u*,1pM@-A˚RDM. >hdQ n=.4Bs)/-o,2lNfT͞w m*K=heö%̬(cyN2/U1g rn!pEGҢZb/XRX<^IRj ٹ ahQ}Ӈ0ؚS+_EưTX (b1EoZՇ*:4T[%~wx#]׃)-IѲ^0o9W&_xV=5K9\p|0UV L*).EAZw[j2!3`^6dTF}BQat=L֖dwh LqVrՒ9u7a `7D<%&{xx٩f ˜yӘq]u>% OX)]vXj >ELѢki[`a |>76]3҄T:*]씌v 8Sy=P;I}뢳ni'E/9Zn>͋kᯚ_tD3Zooc  Qݳ׈6c艴FfrYeK=h:_wP=6e&q;v&*e% \_Ysb$L 4L'[L2Y(`[A7Q+C4pT xIXy}Ԇ@VBFAch$ -I8 Î.c3@Y56L}hQ`a*_rTp |^=iTlZ;z =(RZ?^e$lV]uQCi@ڜ/7XL Eq?C--n-c4K/"V\ 5Dӹs8 ;9Za;iEZűj b溱CEQ~$!`[H0L@7aپVf70*fb-N}קWڑ`7@>&4!c(x{4ulfmp232/ ř}PuӅ%G)y*>U҈tkە?9O u4Ck˼5pYQ_W}7ଣxރiI'-#:q7ħR:.ZَZˆT UNuOR{;u^4]kQ8'(;mV>2!D(r 1esWu %oG]4CMb&I1c|\{~>E Bl,Jd7{i2E\|b XVM+JP~&4n>) o^0<>#vDAn$7ICz\`CLfj  uhtxI!fY=ݘVr)v^|H?iky̴#iM˞fO%GIQi\z mۛOc7Zr1Q?i iʾ-Ӧ }f@< W{="gE5.Ant~ YU`ʃeK[h]- A"4^j攁=gARgACļap{` __t:UQΏȨcF6,$- )!8N@pYjcPD DwS2'cj28R~@_CǗ7|V]iqB6Y 0H.m^29%e˃(LT|2$mi|7d?ϔ]'謩YJv "Q<߬ʲO-q~UgЮadϪ~,7I]K~ "C~9/摷s"ԁCy¸}SJmCÔL:S+${ 8@3һBŸ_԰:˓dS,-fM"Ъ@o1oC ߂%22v[{ Z'K+5LyWMfly}nlSS]9Z#{} r0flz2Ki[M'Ԏi,HX_5#:*Dm~=_z)C<>2vBh~rGvnQ pi!3 +TUYI? &?ҤI";hB#8?p}诚2ϴtK4\C/o g4s8 ?~z?8ē] s!Uo`$Z;u#?`x^,^D'HcxLr~>M-ԇyp0l3l a LCz) =B3)snٮbs~4k$So=3W9}@xZ$ dQC}ޚk!OI',1*2ּ+6w9?ȚP97tBc7T :caP&CZr%I! :8lw(>x-v-mY|2_qٗ’{:rO3'7?.PF#Ê'׆*-2 Ac@fv/3#3g!v #/ S@w=:[S#7 <ȼLϩ&yayx2cgt^*as#8 `cl xM(W)BLP({[#Ѕ/STE6PS/1bO(oQeC3Ov5ťZn$\CIprt2$,^<&a@2Oc1<(誂+s0xwԯ2[75׎;]gsdŒ Hp|KƬ 7nx>+o(3cWif6ݹ,)NX6f)%E"A^r^r6S%4dm}h̊LgmlטvdSĢ>fSp#3)#}˦=àZ$.uyeD|언o9S\QC?tz[4ݕ:b r;尘cjQIfR,6ϣ B]/N\VQ.hI Rm҆Ikz0\q'[E56*Y[I- [;Pff)F(1r-[oyҹ' |yMiu%Tcc_CHM L+Ƙ'ͦ/l-є-yqčފ< |ϧ9X#(^XMͨ(w᪷'Or}\eDԨB.5@ΰ}FZ\.m4n3tK `p;IK*31`$ܯUЁ=r['7SkLֱU1aĭAGޛ Fe&M ,8gwن?=egaz*y?t12dCDwr.Ư58Q1V\onC褵#T+.,X$X!]65?{7ыaUӮE E)Z ?*kэNC mթ:Nr0;Bo tw}vhzP#RA-PF qFYTa{Oی]m0n_ӯPhА [u-1沱O3n&S*Q(vbU ,q& %Up%:*bnTӑd 1M žbgYM}A'K]vF'; Y LP;L óN(,߽'uqY0v.t3uѾ6EL-++ l, DP5LǶ|'x|'8ϦuO(rHbZTWXubH6Th28X6g>MZ}-"%R:8s49.Aʖ]bmm7ckIR0҅d&~$ x:r&IDC:{H>J*)5}HvyM*A82 ɵAR1#k։&ր:]ZKn<죂i;zmm0QA{1D{u]@k8AI("P@ f5(xYz]Px!h$GDd9 5ߊ1?׊o;I+ m$C'HIn%$N;(k6\?T *?Iop3HRr;l#Z&BsK #,z*zLd{U% ٱq&8r9}YYp1.#_Ym[(Yx"jPOR^Ri&7%,2mqm'PXv45|%a&ewOc2|^|VBBwPQT7mDLGjYJ ׼Wޠq 9n>llcr\pR490}Iy+B"x޽\DS˸偤Y$m==S+: ny̴IlGmgʞx8hh)Bv3l8ܨz\y>M]Jw&Vmxm1bV2 *ȻD!*C6K]+6ɡ@Ty> Cy3%Bt^o|9^Ɩ{E^D~  fzsQvu&h]"H.^L犁|׷% mLzV՟e-*6ݯ) l=;Pfj1PUge$Uڈ}ɔ^ȸEH]sWh)s wJޮVbR"I_(ng^:K[ g#Xv5)kLX(uPfKAFhaN{o|iD,ܨHqX53938ʤ%bHC@tFg0oHQV?vndv@ _VI;чcl}8S/Nd \c Ϝf-긱 V0 EҴgi]v+'n@xMi+=:k^s#,qqpK_6 ܩl/[hnHx,=3!XU\6D}cm\/{Է2?!wU߷>G^M7!>ݫG!Ͱ%*N%mK5haz3"RjwM=yvNf|F7*AM5x"H ϸu~)<ZHFq5!+0i5mP0v/|TY$>.E7m^Ke\$j' ۃuXYmQGɉ~*ES}2xMˡ@ ? `bCW.Fo^&:_oX;2QQrkMl9?J :_aV(%q Ha1]"y*=ar~P k$!ʄLA1*Wk?LUCA,z6xДUG{ی#Mp@Q<~(K$?c0$R}S2#0,qx|ā^>Q>G.I/CI^ U]L`kCÀ~Sm Fa\YN-zH}_RlF~JJ:tKhZa~sgCBT>1FPEg\QPEr, ;5&tmo_W Th}ʑ;P3.qIJAPf"&W5Eڪгv)W zUiy' [S#]ACl4Vڧ6[q/o^!8#r(wL!dWnE y꒗qq ;3aIgh}?wZկQ$T^f _5 }+*o6.,V.m6J?:PX]Bd^ pN8Oɉ y_ScB[:T9pkaSLQӡ  f<K$FmxD?Ҁ*eNB ce_1*ņM[uʹsG<ENE5UBOӸp'oIMN#Z%J׆Wau˳ǜt(L8^ӢTiQ F<9ǾVA@:@LχL.6E1(w4<3=* $$Bv㕒#59ŀ9/# ;gk쯔Z^^M4׋f9SlTEx'??'LT]sa*it$1D߄GY;܉:mj;awa@NĒJ_pt*V=Ϥx* H`*ތCq%aP}? )h?r{mi}+z6> mdzM$Fqa. vD5g͔`* Msx PHϸ8/"_"w7 9Sy7Z:=(+Wx8u"HQ: ={W3?94dVyTS^%}A`\ t^ʝM;tܴ'3i-+U}.K^y{ޖS1Rj4__\?֕o&& ?1=u ~zd-L``G "LۖbM`/bt#8Uv#Ν7F%k_x*#;VJ[Daoz<Q(bH.]!v, UT5|=h8|aY10k2˯2p^%e6X6F03R4I X HDn?/}B.|)3eI3)-EV˾{ϳ*e,5ƤdpfNȄdhir<2K{?l i'zi8ހ^kx%=Iu6`!,ilD^YmHArA*,L1b-$v"@'aegf3PḆ23'ׯ9,Gweß&H\vRޚHGrሁMco(#W se~傔-+-ZIDq1E9Xvb‹!Y!2pހKΨPm56gJW]E!!Q-=i5mnd y 66e>䃟2p8hoY?ӠzVsMOKRx_( 98JӀX^GEŊPsֹ1kE 'Vܮd ]j~ $u\h0/w MԘmv^ 1V.?[pka֕`,]]əorԚ+R<2>& 4y un2*|prA5f#J+L[*e0lL*8Cbŗq6o*KUo'lM9.I?nxnCQ ܽkC~eTq,:aut^5{e?,WNR#4^JȤ70-mWKpDۧ%yVgXə~_1(޸UFPL^JfgZyE/Lon ҫyG~N9TivV^QwC ^H!mS]0 &( V0[)|nvE0*FE5*рR1y̐KiNNOX-YDnu7:+ 0Vз ƥu0u9ꭥbC_/f p(ʿTwwGeEz2$(5̐= odCWA.V ؛70-0[T'A^wK>@vmm:4Ad +; N: D`9y/Xs*7:D؃S),SSYHIaodIA >eHfxۄ ˦z6R~j],'v9+jͰ/tSB|=Fh0iͩgjne?f6Mi,Y/W )Ɏbδ|?Z0t>"\; CN͙ꞥҝ7Ud_qP ۀnuV2&B ɩ77 &8JM+`2lyt!'#WE y4uӲ*; )o;tԙAtR֭9g<>2\@ ǝZ<7u#={we&fJ֫\gghw mF5*tPF#.B8a˪7†ڛ@\Xu{`@) >ZD@m xY2~)1+$D06sVk9\ J?BY7WS٣TEYѽ?Gܽ츄m3<&N4ӶCWU1&;ڶY6|QOqћ*RPp$ t=vvj=Mm!u |d8Z OIjAr R[cP+ [EzFV^xuwGn㔇n6f ox"*ח4p.љ%zCز d! 8j\.x"v6uO.^.!G}f^<'gp{tZW&m9VQwoTqeZ%{t+0–(8Otyө/ϔ"̰q$dNgm|tdE(]u TǢa3t`!Wq' J8,R~DӌǞ5| : gt$/D>qFŰN*<7b[KL\ 2;ÆnzڕFY,#SKq\~?2g5۲'+ho{ts[dp71NwHĜdCx]=R(9fOk9D4~6э= r [i:ͽ3kȣg~P u~޹k|Wwѩ剮ڿ:y6Xf/xs22k{>zR%/\]mc۷FZ xMC l[BACs%x\#WE! =9z+2h*k.Drw6E.W%*2#uOs|K|=nE7B'Gճs?I1#a)'N(} bRnyoM3i#]!D`x8)PHKm) =*}cZbs|:#Y$ʇ:W,(|iV5;D|z~SFAmO\H7,G>zjmjb鮊?-hԨ٘X@29^57rBI}l&u>l$}^j2쵿 Lcr9_t0+ *ڠ ӸQ-45ݑ/+Cn)7aRɣNz :q77BZ?iath*ǂT -]`kxL6_\dBcVQEt3'UtwPY~qv1z  dhOd!~- .mb w3 \Ž#j@VS53Ҡxd>y!p6?XT@ x{ uUiLW`(۩ϵy't,]z ;&í_C](6$AsL'=k沈OL-FoPOAx90"LT2G. }xvSBS.)FlY̲Űh>jQb.u!c :\*u5L%jq!!m< ,p'?m];|$i (aE'x,S eW{(m WB9Fͮ^2k3fL[FX+|yMX<+6%Lۿ(`dg?D0&=@B7.T#m5'Z46NiZ{7aIlI2>E@6oIYf'\YI,t+j0;R8gK"MRɓ 1L q#1ߍg{t;Ƀ >=gٷ^&hþqNE46RJJ!G`Y }Xq n_}`fٶg%W:TH)Z˲-Sڢ`F>׃aaAj?yn@WbpLNd Ftі34Zܴ%P_n_غNګ pq""}r7$CJ`&O~YsaG@Uxi,$]3ڟӚkrf龞=~ s 6#&ҔzlL`֞FhD1zo\S`ֽDVKh$m ]Q{)8yn8ʮn:NO'2ᵝ%&Li>y}Rڡ8ҤvlBATrZ/i^{Jjn!ҔGXWL i|5(c!xh&3 s#Tߖ'v&˫I`1^>qG"'_ŋ"nvGotW[(}UX#{{q׎E mk|IAv|f r+ BõZ>S|z`B}yNo8(K]…q.YhUV5֝٬R_wZy!ɒ%$}-a`;i'tP+Q Uߦ0J8r c#@T|dZe7f+at|ESi =_A,I9POq,2# Þ?ቲp֦~(Sic5VǩxKwK +%^V"n6`T0|LOlZr_S_AiҸ*V ax7ЭD' ĄWXO{E!6 szxRm܊=e v"+<-`@o3>0Ǯzci.;CYN  e<GW.;MjD)Nkz@97 K8pQ%/#]S"nV-olv @K45,0MlhO!/_KN|6{/&wNQSvI 6}38*G/ly0K(+4N>$$$4Y T!' $?V4PULЙ)C}sAʉhWGAMcyC vm=R<|@@K/[[O5y\%ܘ,Mmg]|3b6dv~ow?\284 joaRyrJȹq3ȈwnL~(@q@H/(DjU-eX?叙*Shf K<-e]]phcˋDsLv91yZDf{\k  b% W&jHtVer?ϙDoh~TA!Bzjd f#cz{|׮+vYHTo =gh5P|!Q+y^^{3P4֩H3P=:2لeTg-,ؼ~p>$|:sGCt\Ri xp=Tl8(rHE ۔?HAiޚ K @g]ڳKjcm ,fRl&p އ k*PKfgfvr3ӹvB8:ȕMjep4kOtl0\1F2B"zLx7J%/&ȲD\, +grn3] -EUQ.)@3.C,Rk7Œ}h("w >;Ij]f7q:x?tK.^Q.(|܏~((;OB+$A'yT;ukHGV8ՊM#vBq-V Bz+F.ʽNB@h+7CAxA!Ng?pcPl9Y!`}y;=n=74lF>nOE*;>AV"WQ2vjhPc9'YE0p ƥNɒ?iHBDKgE%pH;.t܀D*cOpn̎m4E+ qWj PtkDUO\@x Pv4F >AclAG씻(mwX5jghv0=a'rX.@#EʟtoKݜ=83L!B&BkoiAON$($``_ 4D8Űf}skή;t VGz4l?dl-Kh>>dא0Ie{im9y[&9F}"Z- 7.R>e/M aH+zԀ*&?p}BWMAW2]rA?v־/O($Om-0ܮ ()U#s rFSd?ixZd{ v2W8^4U`ϻ]v};=KBg#{S*2B NtGBQ :*SKɑqK5=yVB|?t7KJPm2ľn"iҤN+\4Y\u8AzaAd]V4Q|j`/`&ʏ< 6!QXkFɩWa8B*~l:ԳCCUqiTStwC~){uVs˷xEHpr+ 1ߣâ0^`a0x, c\vvyY~,=PʎeL1 b D+~ j=]i UQM -HnQW1q[(X]^l(N[A(҃0q~pzXO>OiQ}Eꉔ76pmV tcI 8>  ba(2{ns|A<@͒_H) 5iSVp!/&#qha|N8BHZ fBo +aԼw]{ϵob܎,QF4S%cQ$>qqO= Z +eohɮ8,s"rjL wu==}QGVJszQ>P*0J𬻐)o䙹AC ,hBq< R GطKU 4 ćG0L?D"Fc,a?PfߋpYcT1_ vt;vs ud.pס4YƙG?UҺ5P6+64-a-NjY䞼.bzF]1E;-YooXh&\_LaRr[O c(of/~0B0]=tC aR6r2Liti:| M<_O; АnG6wr^1>V2!!a5K$~•kOdIѠmtH_ ,mxabV2jt M#| oԾvEwn=W'˺N׳K"\3Q|gxC¥ QM['bi6$ΚmvM8=v4DLiSi dmMN,xr!CCG''E2"rClj%"jw$5I jgѯ 0se /̐ 8v wI!kJ0Ng߶\Vt^x , wfg1aoArϘ?S9anm<2l;orR27\ n$d,-DoT^w,4GN/;/#u,P蚯vR3lj.ǧλ`Z)M5+wΏh x Vgt=Es6|sٖc٬uBn1}?>^xz1≜ [9x&de5GB= \2]Cfm (~^% FLUWXNB߼`zv&R {Yzu4"$z(+vOg0)[ F(MqXulԀBq5DWb_nd0W_W UwÛ!`E:U+Fs-jh:rT? owÅoٔ%FFv>b` oHk(KE+^6l{4ޞocX \$o_Vh0#wݲkK&.W5D)cKRBٚ-[$ B鄌 e" TLVr].uKt{pOsfŜs3Iʲ+t?]3pԊ771}"]bI9B&i\=G2t(Bhdd)?L(D~пie|Vj1,u'Ap=-mv䱉Ѯ,}WLvw>ds1:XAF@qqrQX _fçh`+o7ZcW>A T7(| El3MvdeÑ>YJn@H,R>Q=;^fۡ O&BƲkTte1!Rxa`s!,+Dҫl10'Ό*m#k7fF}Z /e ])`o*9Oí&ˮ> ڜj_L-'r*s^$f ch{@DuQ8IDŽη3tu\y 3 o9w)ڌvJy >pO't^yw4_po`ѐ}ã`bX/tqގ*2gӓ &D<hξdOK SMH!4kH|==jNJųȚ,~~m=L/"ϙU`Lּ!_>$S%R܁G+R V)ۄ\G ruoR,daz/ҦHC{`.$n@85zzđH-5UPG!4~Bvs<vTɩ.j#hIBnX#/Yqs1vg}^-F4sӗn@U۝!B\~l7eVK:Wj˛r(^1nEEX8Pd~R/E(B<=+Q)zn>ׄ7ݴG 2a4MHN?/o 8;~B)&Ifx["_{\qдFHUn~YU&ޥP$#O`o&?t^bݸ˄+!uV~/ 2lwL3AI΂t{X8\D=BeLg\`or?aJu(;Xt|Д@o29@V'#Lvq/-R2ݐ /&ˇ6D@>UL ū9Gv0y2'e ph;k`ťⷯ ՚>qj[i`Ix囈H9לy7-xL,'{r8~(9EƌSi|aeŎɭP(C\0{ KϹ+be4޹?/uyě- $@KKWpT{Bb8%"V9Wp6T {^?н39td,`"{mLjT>m_,PVA֘ӆ0(&'"6RIX+ZWP5F!䟗HYo924 T{mC_ ]}yʏJ(WP*h楈&v\݅/P6^>4(+anS|.WӔYGw E-,x-NQ&@6*#uԿ_! L!rwK*-6E^6BR\hZG+Gr~E{`]8J~a7Ntd: t?nE=8 (q Gr.ij'dc\MT+8=-q Q`yNy!pl_g- ^J{S 7|[ِCcz@J@OI'짺ln즒^4MUT}M.\/3K@6qBŭkY)JB0gG ݀m1 x`v |wQY |zf=vM9%K@tg`m6427ށ]TQst~Uk :L]<KOs{7O(î;@K}j-YSv)w pq{52Sw`(&A\ @MvmO|2Nm@cVBN=Y*rxnnVE~DvCSĴAh65鍲a֯u;n] }0xG6& lj9) /MTH&Ǐh ᫕Ïp UyqDwƬXJ]Uǐ*hҧYg|8ű_uF?7Rn3lICJmL$|t 0=ϱkہ0|ԈCqYnS3Ղ%>n[%idXg.["fW+m\?6%);%< 7wH@xˆ4.OXʫV]u!Y)tzNmu ^;IKhkN$2>w!˽ et/Ǣ3|TO.D٭fS=̘;^0Nitg)xj:xCUK!z 7TRɛ~jwʗ{vjעqogZ D:Hӗ_|ƶ.M{k/3AɯQ]z\l+#*'h=wP9̀*# Ȓ"ZP}{B(Ci`vIpr圩?8&[0?g>$cB6??b}6]cP̖sİ,`:("c¥PmDn-/F"i܏ǯW<_[ͩJ FLc{pvZЩݭ}Eh폾Z5Î}aKyJ HW _ [jD{`JکYGuR"*im-~v> γ[aRy#q)?rNucn:ʗu{w2:1xtvRoPɌny牀qoly6]^x^^+xzYaqf=Q7+rg_}zc&h4NF Mk>m1>nft5'xk/չ õo Ku\ƶآМIـUֽ#EZԞ,\+ /IPy:z^ y>mDX›(AݱAs |XVc NޔDY`B/kH)p@1CѿO1)0߾Z9<`N5ppX+# cmJK˂z%R9K!FIT/qQj4!;uNiwkx:a.&bFa9**YXEffX,suu!*p&ʭlVY@$v^h \ HOT$.{'"yשJԆׯݧrfFHf `82z}؊ :ݿ% \RHXXoH {OL5pR΍ޖZ CM(PFL)z2jIUVL/ ^tqҵ`j,ntFYYluw%~5 ٽ"ϏєS1' 7:tR~i-sجo Ws*NiXKPlw;DճN 74jȠ 6p1uZ.1o.g~Fo6;9\k^PyI3bvK(P"n}dĒL[k!K%,kHXך.R|YCUDkoo/gIt(rd++uݭh5|<\L6IUE:gϤtwKJ_ĖR۔5sr3OؘR|wۓQRp"P^[ӪR}A@*d<39Ţd#yeSrgAG6#$z^avT0K~mSdT.}B6>ʇq- 2L !gzZpbg|u" ߘ>o&PG $4EZ-7M(;35~cܟKs+,H(gVI.iC"4gLf'€麘J,2в?QWpnI"*O'$ywe7/貫]沎pUՂ.ә S"IߦcZv#yu\t[^;SjٕigskPO4Yi Y|CP0w/1[eyw!|Ig4Iɢopc5E}7lNE :BX2RBٺ{sYX3ufxp nmt479F_m 02ٝe_g;>KGp TJpsRD`xTHܰߴͩL>~/M$A[H9|H))4 &Pu$K"LJ? mt {z!61=Sہ+U^VoJE T3VBoR){қX5& ?A@~!U\}1% vm-`ٲ:?h! TەW(WmO;>~ZcQ (v*D13 KAkd /@@l 5qμ&dxi.a@_Ͽ7R_٘K#M#kX\G/ds(U9飈kvdeV"ȩ@zjeiŌ\-N}>?Y/O+ Rwy]gͮv[PbQk~lY rWۮFYo:gςTO;OU2/|$io(<*2>\Pf0T`:dI+4l )uKȉ7^BD.,ikp7UPCd;yNuM1Exv@]^x6ۋ1K^)/ېZnZGJU'=GUWI}̵'&Xsc2K4wYI-*;B:v66g_'I&+gftJ*kUQ6.S(87GL/,@(v<𬾆 (ܾ3s$)o "zKY !9U50\3ϘN:dh We,r&维 v5Fir?h{n%A̩l&PB-+?op?o4;dP=@uĮ 9J. lrssC$nNjql qE ia7~fAi^k]BNtU+M[% ^o|E<K^j O/Zz`],.-jh@byt9@wa@Zx.ژT٢FMX 7k%_E/>Lx4p,7gLF tsIڂ ˘4TMQ, ge Ɣ!_mVߌi޲i/ފ&EZj 8|6GK +2EfK0 ȬTme"W_QW{:xGM{h7[G6RhXnG"]A\,uCqSRL|,6)]2YUrd$2Dm:{tx#I,8YnH*$C!C6RP83zYԦhg} Ey _P⌙fLƛveO!<5%)\Nԛ|P\@!h>rDŇp]}쳞K#P^7\)v#܊,ID[j^xxY <$J$7É`b}AW~{.q31Te\bZ# HGF/=ݦFI?cT8 } 3 wl1ueWd֩c%o0M,[ςDL;paJRnY?cB0R݋EG} e"_uǗrGRT 4 Ipy,ne鍾wrlz׬{ rsiV.o)A;pha$zMReAȽ SZ#snUH8:+zG a .ViЪӮb +)IJoȀfH]Y2f8)M u/4SPr6hNWӕF@ x. ߢDܖPZ2ԴeItqA X5:a¶eo JDjA;ysa@i>Mh?vmOCPMSd >n.O5cEq_DGR=;D80)6( "k=$RH)؋d!kV?ĀMi3Oȑ c߇.e91BSN"v{PjH+r-ZM]jC+"D&SA 9<ΜCmAJ~u(wJ AGҖu2WUG›vT"quJ 1H-*ns1iHʟԘ!QWF%(IHdA= *+~Wo5c3Quڎ총weml<, _ `q75w6S7Z'`hKuٳ=a%p h|@֤L z-V饍)Oٔ={m$uV"NSHl<&Kq.q?y!Љ-4Nẽj|JߘyiV4&~(׈>EdhႻj&zևvjna'A]TQsyYW𙤔;Yy@Nb*yRK V-ZO"t`2:&yV6hҘ*chKת\ ʔJjZt@|p-f|,b%i6 ߿"ϡOңH}q OBͣE=8m Fho\ R>{ZG7x84'B#S(#Pz’? N7^1m|wfCg"TanQYAMf' F NRNzȖ咄,G+Lxi]PW^W Nr7 %5dÍIvEMjȭ.ΏlɈe#^> U.hO.a*ǎfkd.=MC"N;[iAIJ 76٨KAK&ZexRzhyM8M~һ Mu 25:մSyǚh#z,=XIzVwTӊܝz||5Y 57p wq z. &^;0&[ I~bxƨo%;w.)0^  g":.ejN_EK,Zب0vP!/lGF^,V?Ny@Ch.n\Yi ! T}Z;dS_ bUyՏ.\nnsjj_G$OL0n :]\D,ys$*c d{a=Is@m7Vl] XX`w.q"=dhjBjB)ky` .q)[MUab˴yۑݖq}IA?RK[>6aWmLeC|$a) u*+4ήin*09a7rE\s(c[Sض\ ݵ5d8V@*4i L(y"SLN&C(=~W-Tڹ3b;28c jwÙop^ \Sd q)QN:w%5>c!-V +jE$h!>@+Y;v[#qrMPhmB-xMp>\b_L7^UC@u+2U%% ,rIG+&lX$,8f?QEZ V!Lv5na0} |㻗>ր psߵmK9nFVfg`) 5~͘uBSLqH`ٓOV *\q3;$c*>QoQ)^+&gl+ /d4f? e/ߓ2 ^.K e}4)>1YswB?bqO0M̜4kM)Moly$=O3 ߀QPрe_  oߤ7- B*GL`HFLm8wc)`?8ڎ4p<~ɁHV dhpV'dԳU>Nkⳳ rɔRBY~cڎ  ajzl\Ji ǿ8zޑTVafFvb+:)>I+lT-}11CkP=L3h1~4RLu`z iqhC1n_k@}d%ɇǠg[zϙ{}\mwAfŕ{kt=M2Btt&f1IC%%Rө "]̄جamĜϔyVlv4v; [ \ofJj( P@%J򙶃;$+M^\I/uE%D7[ K$LRKuVm3Npy{'(k"(8#y :Xز<6+Asj*hƙ=E8-3Ij#~Tlʃ  [-Vtᴗ)$[g3=ulHuԙLnfYH xo)CeYE5IŎ됾_Ȍ?P:c~,}F#yXn,y]3ĩ?%ɟV \0g/,B `2ͩH2uٟ 3>G47+IpPV}=\BL5AX5 uR~zL%`V9I,]Bgfuk}MfmEMŵWazΘr{3׼Ņt 2۬j;K L2\n 9*Y%ʔ;SeD6~ C #-nDT*@tmYs{SzV)Z>%7{7fh){o"m+Y53 L1K'S>DC~2ЕOD\ `^RzK"8*MD*E0~&[ 5Ug"oJ|vAjǻfi:q! Z>=4XgWp1;yn Ḇ# 16+rpZsꂯEYfA<$(a2ېL+ZhQWN<,r|0R؊/5SժG(e)Ubk7PW-)YY՟@x bSc(/ɖ'+fNF;С18 ˛N9jD')$g-'i{B/r#hEmBok_{A~.s*\n κu5i||B$uΚIcHGJ'z聎Rn+enr12'%j v|8J wеUӠYcJ7Kr'}Ç$E/ F 2ՓeF}:q ָF}ďõ8K)6 j#BΠJ.6gP&}yt$C{\HC?au RhE;Tmةb"LۇF<Hq:d\ nGom w]XryG3XǑH=qlh#)&aFVcu4nE<^&QOIݚ ;?Q 9-W%XbFISoY!Ds]|h_'{mȽ(|vE? +d͒*;EvPMH.kF?Ɯ _|7G. 90aP.t ]rz5pф/_[u;J`Mr]G|mQ:<`*н 7ڐ?x4 mbGwXx0/N' U@^^;5',DN8oLݧJng=ˢjCW-r"RbRAkMK^ޭJ:P`g~:]]yʜn{|$|b_!@~ϒ7U2`\O{{ --V: OxSJѠ8<@t5*o5;X6@Ihhaep&jm,u}M 3>aFi*)n^0{ܨ9\C A05?U`аG5`/ǣ5^F92jȏO|/f`Ycl_3m+g۝xj*)]zYO5OWħ+@xƜ~C`4PS$=s )vQ\>˛4o@(P`ML<B_x! H*L/,M`*rR E*bl QР9fKޥP!)P./hb ĿDG!)stZULz.fz9Uxg= j-e3`̧mSGYV|UHMx٬F`}v(D%~ 7jE4Df[a`Qk}D~ >h3 0 b74洙 bYՙޣgDg?7`>!JQ[l>JWaFnڛG<ύZFĄs1@@u}[0T;%fƜFm) ^֐ ~ISQZ5u.ܚ BtĪĠB: ZُWex 7&+TBQVV4flzmޠ"`Qʎ#ev L?ƧSGƚY!BE"1|Bw P]/m \1%2-wf{1jx)%Yh5K0/Jef..63.[f9c _NXL7]l9V_x<s@(vDمɩh5^A;&J|gx{N~4@sgn??CYq SoMt^)TۊF)0gIs׬8>r|z0G;څ-$(uc:QW 'wյW(A]V8x]Gd2ԩXW5 RE hL|e8uaħ^TFxz8:Hŷ~ ®Ybp͝ 8 L%'\dT蠩F")\&U_՜D~MpJBL*<|Wo \g &l-;UVlq ^NDŽ O_~ {=ȒIۄ ]Ԝ]e%_2\)&3)Mq ]vI?[E/?Ww0vNG)Ψ|Wd> PT'D>L@=G΅ŏYiOdqSxؠ}B ҥ 2>}6_j[2?SLޢB=@֝nuc <褢-Kxʦr90/c}6 }6  +5Q: wg'|EV#eKgQo0>J/L$%S%U9r1̩p *oQ, ٜ%$k$?Y7CmCqGO|[fl;_&Ή3_||gSh~RX9.ڒ[vSiA f ew>[>(Í2h7mRa;?pX`iŤ[g,| sL&m2.VQ+6 +nJ+,14X|C%nP]w ah͈i{6@$Nl] |Q5˛qSqlNito+skxvm2%V!8MxvPgh.r64 6f#eS"=3oSi&jZ\wmA'ʏM-B|kFm>='CQPªY%):r̟Re*p$‶0y&"[t6$RRavl'|E?VErMQ+bB17!.X] @5BΐV;݊|eYM~՞y6VBԥY\DQd)3g س'f&H"n E;[ ;Ga;(EZ,3ho$+vvEƒ CPص2«ݓr0l_3t܁37 00Jbk!hæGu5%@nHeBO#?oS8L /NlwFmwHZ4dw>ޗgNY>L;Xc[ɿ7x'GCqB:XIu#tc|cˇ_JB;z &"d׍F{&gr߫II_.jq_8Yz BdR5bL^WJh#Fh$+|9k(![n$ ;ZZ(yo{ҨMTT+D <t OEԑ/JWii>X rXzK_>{>Kjuྲ~Sa,4p<2RJi]RB+>"-`cJοN牍nme3i-]@l׬w%?1{[4b5%ZTWEv͍!G!SSh5Jj I@@*>0Gte{ $[zf;Qd !6aD{aos@BSsQSIBǫ;bB55K[9'*(trn&1Z|P{z%8egVeHYr-lOoG)U`{1,eqb \E+=3rk5ŞotTaa*Vv[[4mVps{#.O2tn9ԵcG5y?ш<텾.s]YQqɦ(w}`&VJb=4fOus1IQXӭ9e+}26Tu0q%"~ Rb0rz++·XfY39!_-օPs5*ClDpnLd zeRpxg9HPrηx8!鲣Uh7e|o*v8Cu=w+*ٵUĵPʐhzؗдކ8[k y-ɩrK%."Qeyx)h1Pu(P2?l<\_~wzEzjuHguHzUrVQtB~HXUp7ܙr*qc}Hb6E_٧.5 .X}?EA\b0zhfȕ[K|1{*}__Iicx)U$mf\a7>۬T5Y\ Ѕp,Pl#WqP 6(am n$]:| }klO1k>sn|X@EpeV,]lQu,wܢJ{ %\Bm%mpSvƐ|z|_݇f5뤐M3as+ыl{S\&~!lQ1wu^k(2l՚je$~9Yգ'А|J<C2xռ zІb?˝DNl qZЙRNLX%2~*[pzy04mEMqO1U${fU3AzitSu//z#ed%|癥g~ ܢț:SS>1P P`yMsTbb7m 6[b <ŅCkNyc硏/8w'u`["گyo( At@WS nrYu&SrH+TdfL"#(<'U:P@)oר1iLŚ{Z8_b?q#aCuIse_rR=C N»ȧ?etXP(Hc ]cM'Fy\uQe\a` Trj6@'#ةrA%8C%zG"Kn+Э3Ha_eNCNZhjd JǺ(v>D2ҵbEPm:<Ͼl7| VH6]nE3E8LjlV8MEf#ضrlҩ&ZB!/ĭKA1rtHT`ug:K\TNiVj rr神tSܕΖcØct蓸XDЄRTv_>2-x% ӞAQճZB [\zdS"R=A'AdS^HDيYgV4`)qc+a٦Q@!ļaA BޞpW+O+vZȼ Ju "`xYâbSw]Q;#NZOG! [Ko"!,\+Wh~ZE7XB1qr$)F:6-y M&[ķ/>39o,?4Jd ϝ|)})Apdhc u2jy#1M?mn 6A!w$=2n=FgRam-wޢ=Iv ,ܲ:UPΊNM40Z#0 !v`VTYbc"П&u4 bD#Nz`qϿdվIE[Mid̓uSO8ڋu z^j"WhtĹvl,0-DZhҒro77G*=H6wn ?!!䵾 X:hĻ.mSRH1tĨEt8Ӟl e33YAڞٗfPe°۰G[cBOj17d +c-D9zj?]d,2$[&Nͽ :7wP,cxiSy(5ǧQy;<1a^,'fr?GջLy4]&9 )25S[\uD[0Ny@?x4/,+f !t=w8# ԊèiPvˎ~W|KD.$`RF:LW')XD YW_,gB@ylA}\+-&Vҙ_S /_ؘf\GuIkCz Zj))U ]0e|rEXg~qg$d{yGǒ㏯O2!G)G~l)O횸owk9&UW?,i~ҽLDQ tPm"R7W=;59D4wzk^[WP yYq?Ԫmpbb#uHXvOv.#]eOy~5~|V',B\/B8ufFd'6[sR'XHai'Bxk+[ s,9_HgG,Q{vұQ:ҤY yq9{? xNjmXHtIϒ^wy}bƜP9#חv5B;=?TlYYyv|c*-иҍh:s4 O+6 fwG#Oah-ܴ:)Ȩ}Wyc`8qe@9d'O{r A^'2^2BsFx0d@x uU~h$(#٤Oۿ{ACiVe" QoT In7G1H*3t] q$ܖQuۅ2C.Cy9#hT3ϴϪc.Ȳ-{ˍ~" ['c.JX;B%qn\H[4W0mMdd @m!% vUN*lt1{DzE@2,ǶC;gkR,w>iKxf~p_o.JStf UhT;cZ6Ptwg %6{ag{xEi%og=5eEO6|Ab=PLqm p!]-;HBQ"%$@ ~SxKm,Ty.O8\Gv+4 BCnc $#n}5c|tz]~O˖4N93ӸO¿t6-G Rjo 31 }^(/+^`[f'йShD!ud[<=8BI;bJv~0h2B^ENc`&)~35(8zkKf#H@/Q+P(S\̯-A4:W6?7,(>cn :gqܔ3.*h vysNZB,8{ftf BЂAGWެ$"{`w?ÄKk=L&9~J])0(U~bX$l2ƫ}G;tЕh֟:VTIhriu4p/NGB=7_v2D3ޕ$EctXVcY>g# ;XrO\wi?1tFg[vTPZ7V]'wct_î r>1LVN\ YceDI,4,WR96v"l}{H\7QFr+dJ0\wn} ]!SWĬ,ͬ.5TA-Ѵ CO5q*+ӂ?#n<ܩSy-D;3e!*'KCXNd$sܯ>u~!H{hyLg$eBFΘey8 zhgE{a6 .Px7̗l:/:)GPymݹH PY+%۰?H5,y-@HU;cL*Pt^up0E !F$o6 ㉎뙕(O!ye:+&{A& vEX8G8 jXA ?Rr}fg?lyb IjiǑbAK@KwE|w{-פibsGE)U.c>Ex:_V9+ut1Yb^2{@( &->+RD^BVLW> >٣ºA1x^tu6V=,JO h}skzEA{H+bseedlI CъxkDݘ- {k{H>HtO)JS'X龙V9Tms~*9GLRzB'\f ?D0fԷ#[IPCƋt.,*"؉Naԑ ߌWvG5ԥIʑw" Q0w̐Rƚ*O{Dt@2M\{ڊ/ͱ2u W;u*.TA@36ɾiHd:fZwI]c=NBddšK骺>,Y/wա{*IX]mP ic@c=`+ (y=#ʔ}xT,(/呓{;8b쁹$UvTקY_o77u.`4 K]󵸸]vXuˬA7e@ip#Qv^Yapt5":/+ x :9 'Mt`p:?KiDۡuT9P'YNTSj}|cA@h$v/X/i ITmKd2CU0Weje$`YQGߟ׎{"FNSsW@< D 9Y{(l8S;x?h.P:F%˞70@˴PDe}Ib-@h5 "̽JI@ MBRnp8j+@Ԝ6 R{CAP~ݪR }Oޗ>G+5{5VKR-dw_@iC^MMR~#&\ h}O66J4nUd}20Azm?gsGjY>#PVj\:?\+`S}-=pTZQ{I5MM*07oj0 j=v?z/*t"^Q4E5ӈ(Z,szA86쯾E lWwo̚#nZ124 w(9ZyL>(r$h9r2(&|8Ь_Nuo]ֹjmERMrBq<\D("B׃9'Qsߌc$,,#YDfފ)9QʏFKȮ-Iv HC!0KX"(D??z48I"0#|EbYp(LW?V]pGF%#A&Oc6, z'[l`  .+3 Pk\3D\\ |oXCGIDW{BiyCTe&`+C*r< 1׭c^!D:l[K%l#6,t3XBm#mzp”XʎD`UC"vV{k-VkW)HؗaBZM!^Hh <+T-a8ԑBjUBEG"B9YOs2 ,‚Gi\%X◒ }oGbBe糫#lDaW]?xe"ܝ[,wz/~ڽzR4Uf*|@D\ɠ=k)z*)IR׌K e9ɚESU\J|>(pL"LgK$XƽkL|]X\fةsmǬA鱿)ѻwUm=d>,!x].2m=aLটu\xxI"YLt{)>gQ3l2[ߴ4 (YQ ?@WѬ}TgbĞw4ƔuȺv=42N4%)ӂ A2-Oi[0ap^lCk}®灹h { 6jƕu;KτaIw 3/-4,_OMBu.`B1q)KNTIf~ϗ_uLIhA#Vk>FVKn#vFu [/WQaN \F;*yGLa3@;M&#/]d)mPX $B(pZ 3aH$2c oN;(U`ݾTܵ>jeޟ,oWr)@׵־J8KήHgUt>a D {~Pwsu||6楞.^7P:_t[9%pY n OrJK^e_?}n0wJ} hhXez-uSd3l32TxQirhd* 2}$!j{I̠5>u^qCio'Z??B(z>m-8aN)EDж<s; s5uGbp?{'Ҁe'U _y/-@}i}r,]ݸA94w[G?|.ti /yĚ(x[Um7Ś3;~9N#"+H_.t?mn4D&ziѼšy@x)h {ۗnȓ [S S% HVAր\\)pr 6Szx;ѽ^9FHFM Y+]WZ~[<<;IFTn7{$;cew›ˣs:GYhA%TX L(ǖDxUnUU--ܼC&tfٝĆ?0p~-#9 !ުI&pO+ڄ jH3U7[g~ `2@'OQG pnґ^^eh‘PHad&;|b1zz;=^2i-,RzDg~e.}f6d烴2PG/PBR쌓'U,{|Q8nΐi:z2h&eҟVz?f0ar\?gvִ]N*MMQUM]ɻh!u]Gf5qx:'%$E,['Ajy$2"dpiatK`88^& f*qlH(Pckܾbn67SgC-+0eF9s| fحD߀eK;'B9rI!}h kÉK՜mN"!=e_xh7=NV6 հq; ̻5-d%wR* s/ZIQl$̬_,%BQiѹR ;=#XN3r[c& =$ a2>/x~/+k֋m'*gFO PE\p1q2ޛaM Uo5#R6<òs\fh4Jz{Hy>c0(b4ˬ#bȻIYcN'wϛ``_2Œ9T`XQK|P<«!@懚w0IP"*# %hQrЎ 2sF;y^t9LYÞ=;2RCtW L!+,h>T6 .o~mLPSI˝QOwO&,qxy Ja'W4}|x}FkQrWPY^YM$+e&ish 1ָ Oiѥ)4O(,& =,ŐDNL T=.[~FNn?Za:.4V]9«"{kADjU"pUA(] fvx[$y?JoƑ^ 9q.\U&}OvZ-Nj!^aK=W:Ysε~cJW7%y)h^@E$^ԂQ'+0P-(:X+̰ɹ{3iW]7π_m˄]<؍щ* }7YZ @4HVDlT=paY3:Yi,W)1vaA|\|izO[iEl ٌ܌XW$00G* C#Ch2rM>Ay{#+6"SguOɲC,a™[c?`mjy#J5ͨ[Yo0g7ܯ˙$N 5< J VYbX.XbwixA[.G/[;`“}$Q6i4v8q옯1=Vc/[J9s(9tE^]qINҒY٨>Lc\V?>n[ej:-)[#xvz|XWK`η 761HNz"Yf)k;hT[8ч؁Q6A@5"` JcL,d.Hf-O:z&7-ҿ !/p籦}7_^0*zq!)dV:N) :{⚣MWuuD&uD r\7l嬮Ⱥ`e7򉺾Mz1zB ?tȺ5pCܜ0-Go@vFu# >넴*]AaԚ @X.^A_Uc|ADIr\5Y}(fiwxԶ`JSX lB\?87'O~g8$ 2IgTd-U K;yT"s;% >!4-aײ h GQCA=jSHn %^0ыđ_5*0,#F jC:!ӓGP: SoLJRA)B#Մ3lLk+j=F7ŧ=XpB:chH`hΥ=hcN׏aOoŞlH9˛NYbdMVz*oV3 VaI+*@z4@, Py9‡J+&D [,İQ:+r[A@›ythju_NRM :kẑA}JKjjK,LA[҂$aII.`a+|ӂ!؟+VнJoߣ *tjGzWD;P^iF Zb/w+آ!/YqsB0]ya`cIa9 N6rzC(g EcXlxc,GN lI =7Z6^% A|5Dwh/0&{Oyx޹$Ǿar™9(j10),߲ ߙzNQ& 0a5 >ZLITUuJvڌ;5qM{2q1|`i ]gKoȢMTTO Xo~o ITa_ L . vrO\ן%p ļ_ɟ娂 =|:POɟ]3;Rj'"5w?: jݘQde 5(d~gIٍ]T:u/E̲CM%C 1{xhy" Q*Uѩ:brdV3mDs4N0R3)\;QXqD_u0C=G T*q+(Zz &)ULscnLNd"^p|Q[^h]ҠZ~.@C\jڔC(lO4PxZhM$ҋO^^#FE&&z( +2m t븂dbg\žXݶ'`c*I|iydċ' ![c}AC Gu\ljgW*uG) $:Η 1!nPyA{ݭk(-#<n4U+b=Oqy)32' ]@_G_3Wޮll5BIay(Vf0yU$8h+(8wr;mzځm]2Bst$aRQP:U+xX0{Ֆ %-N2&4@kPAD\k:[\خH/^BtJǨ v/>CDmˋYd~ePkA[~6g!m)Uj7H%COcb ]%FKO& 4 >ph#,2\]!N=Z|ݰb\@7A N U:} KY_4sP@WTC|q# n*{4{4u4h@㹠Giܝr>l[Al(z$a@S*d6Q6NRs:ד[ (7~n)N5joۑR_+},!!4 \`a+-ۇ+n6\7 .$(d),JtS`DJkcTTCw χ[9Y:nvMfL芍qSi~qX^gѥq\g>ҶH޲`ivٹUU]F^x!&RIW#%!S+ӗ 7S3l$HxGJܞ(.g]nNbQ]|N&͐lD?Uk"ˠN,mV#zqR( e74L)ϷuMg/0O% o KQ}(u{|_eK KOYTq !m^Z}V3( T'wqhf7 @4#KQ䷽yn'ZYj鑁[f*i4tt$;qhY~9-woEQ#YEǩ |Er^| v1A#j:4ҬJ=@ :4"cF7ӶOQ1x:mBQFFfo_h h8V1绂  ?H*z{?@X>ۚM(-c7HP9gD7qd#.R\u fbVB_8 rB;1 R]ħ^I/S #ЮC;o J%(]Ks!JXD`ײn&gYKt:frJ~yf7Z"dȝ2K 6L:aR7٘'rFtcgŐ\~7X?dik9"7Bw duE"se[!1WVy᥈?\iт +( N-TFD[~RDk?HKguUL=$9wO߿ϯ+QA3m\BXCx2f(F!3ɟLaڊTDc$`,='״U(eᲭ`+(t1v G Ȟ<ʯIG©Bݛz/(Z/?D5w ‘^Ay)9C}MŸ0ڜ ,]wk*D ԛs5-/e~,ͬeM ɍT CQ}H>?zcp)I&>bۃj~#raw尮no-h)AabD o*U]vN9k{vT/ }I>}Z,=5@Ԥ ^m1Ch{S/.[a] 8箪:Kqa\GX ))T`b ` 6<)R@lt)aSk5:in!2T<h-B^\V9PdGȤ/˜z/9 *D~[MԖǼSq.h;B|36+hneS玆Ċ 2A/<7%P w 0%E.B$휠6CBu9k|K$ na,3:yU6mNj:K9KI} Ϫ {,0N7l`07c % %}覎hsikt9#~(r-ባUF%H Bݘ` ls?78d yU!C{ۨ.ᵣ5G"VÝ=/؁.m#67hF6Z@LaX+x.sieuu5rit[Swߺ{Jێ7Q[wާfTXw.tp UCM|YvsXRվz3тEI ~?RPwA-moGJC`oaO,v1]g̵[x~J@yLm9 Z җ}T5. ErH3D~UiC=~uLjгK=tSuy^3GEX+;~K2]D4V|&1b0ڗMP1%S h%Џ~S%סUQ4&': -MKtm HL@C%-~%̘5L)BRop]Q6b,I=Fe#9 5{kWx :.H H}m`Ȗt̆ 0 -=SqQgV2\j.}rڐfU~}CfFI?d\aFL oxDZ =wp4 e|7LpOl0s@eL1N®x[[BŶ"?}V8; "kh$Ťs0aeD gۼ!g}T~$8SXeW=~}(1N~!ۼkwV(̱<,To 5!'s7& {rW۫w|-G!UmYr(GNQG$亩drYܚ]wh=&znie%tde1yxK&EvFGF:KjUlK~Ye~FJ,lbXRi^<#f|;(aI1SK4M#vFaVo4|Mo| ^ [!rۚzH. c[t!]E('Ǥfc.Ax-l5/GhCG ]AyG:=nq3弄*=ߣ?49)[zJA4$x)Ф$2Gc̐1 ?/'5OܖX?Owc:s ,2E*V4I)֨@б7IU?] Տ>'2_HVXCrpi]Hz/Wo Cx3C@p$' "]hr~'? s6. @>4#{Hx fY$~;>S3{3)/OڿۧiALC[ P*XI@񿄕bC{o5m*ƾ/bg|e61>0I^a@(LO<x(l0,W>^*j/g97&)R̫?=GȾqhnBO]/RQ7`׭0+ c5?8s#Ҫ7m@nPV]Y3?͟ X~)mRȩd`83qǵ\M=Q_./DC]x4ZuܥB3_U֯vpC>}nj컍RCHȸ&}_,Wna#C%Q#13 ^VM1Zs w 2&jU"Ju1u*y<ݧg錽GAxz}&\{[ԯ'rt1fm<AQ Uzfwuc-Ʈ4h\<``qddCq,[nXȬj&]W:M|0_(uoL~Aqr~q߂=P/A̚+9x*@V$2Үn^@?=.!tWZ%AN]y U0!H.cU2C6SG*U@GꛟظpO@LjiJmwdl;L"^h.pk#cHM;5SOHC12Хkrυ/ Gt ]=\ 2T{Vi: #̸̿{щۓ3?$JR|,kQn'%JP3v^vvzF_&aJ,H-:Mcź4fl T8)yTQF$5$|SI;/'ʺ͎#yr{t/B~AbxKC6NA^Yyu#z$1J'bɧJцkOw 1ofُԌ&3_d= 18qLƽESZ'|iVЭȡldp3ၮyh,Kɵ4f ͇v X_mpv nLu5Q5jL\:Pt9PU-d7m?8;_͉*g~Z/ܰoON̻zռ CQTxwc/f0/QNK;a)ꬹ2 L,͒%QEP>}{@ mC^UЛZ%Gdd=y60`h3m@)W$.vWIxP1=8 |e*V#˺+CefY$IwS&|eRղHsbC k v .-i ZfT"y{%9PBmS<ehrOHEŮ]r'SzfrbɖWQI?S% URFC1Yc^L(=~ű{#k2Ikf{0NPuF"H3? 1dx".Ƽ92aZ61_N? ׶t"[-Uzuۃ!EÂt1kltUUdzz;z]nR.pXҟM[L'LR2 |&!ȬSK+ &f- ˅4(4!OW!Xh"ss>E=[YBoLʎ͔?loS \.3-G{x"5 q<0 i k2M6rn;8U1ыĆQRxltiZf]OfA≠9 rvrJ1I*\;'U$?F$`xD^p-?Žei'@mb=,ƱQ}=h,qAMv>H1 SDOq+wk R]GH \Yt5WP/~u=|.gk UΩ {ND?N 膜dDKLpƗ 뀻Plx߻Jt *6 ^_ 㢇f_hx=W 0 /^\Y6ӓ鳉6rX$ J}ա,3M˴\dHua&V+ބ-B۫E66ڪL(q4h*^HԎeU%W떰CEDQϸRG_&id|o7L#8jO0([zQUx3pjL,t xNXM; _xO%7)XkK4 v!,6ao0F Z|L? %qPGU)9rݴ$h q*ㄖ6?`o/ısH$bR]~ SNSeisÅ@GCHhW!'d-{eT=AS;n0.rfdXtZ1n$ "IABXͬS\74|&J7TT:me*˦vV@k￲sg rCS Š7f/=ΖRɾ(X@ :Lu ŢStX@,+~׺LW&HHU65*ݘ'>-k0( cW@pH\4z6~j|luHKzr*f\h9WsGԿa6 HM`啉J+z P?WhedvK U'^^#/k'`*E"=9I-GذpaZPhؿ-lt89Yem %Fy9 ` u:yc751,7( pu.<op;'#\3[ ^jm_h