python3-openvswitch2.11-2.11.3-90.el8s >  H `A !F^(*v" ql6-lLyv7lDg{uX$ 5(ͨ~<  &^B\}oI:_웈"yq G~MmJD;>|vg8nv_5M݋cdFgC`8Ԁ{=pe6@:[XDYVFtTlshEO_xQX[Q&G 0a'}1SS|ǧxxuګmʷP8|F5+aa5b868c0ac6b6fa537f4016da3c8d1e79db12a8b28c17764e7ec19d03e3e58de5302e5fb8ad5b8f0b6f2af564eae7646eccb976մ`A !F^(*v/3X8yA3"~QQً=ଽ_4y:ȷ"uh )R"1RQ1[42\2g;kf0P_op p mvW= dM7s:E>6;}p??Ĵd! ) Gx| $||  | | | "| #|%t|'|*L*t|,d,-.(.8.:93::sE:BG|H|I|X<YPZ[\|]|^,bdkepfslut|u|vpwX|xH|y8dhnİCpython3-openvswitch2.112.11.390.el8sOpen vSwitch python3 bindingsPython bindings for the Open vSwitch database`bx86-07.rdu2.centos.orgCentOSCentOSASL 2.0CBS System Environment/Daemons daemon/database/utilitieshttp://www.openvswitch.org/linuxx86_64W<&ss8~8..rr<= ` l`2@____ǁ_@__ _t@_P_|\@_a@_G@_;_:q@_3_2@_/@_/@__A@__ L_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@_X@^^V@^>@^@^@^@^h^g@^U @^ P@^ P@^ P@^^^@^@^g@^@^r^@^@]]B]@]@]@]N@]]ʞ])]c@]c@](]{]nU]e@]Ik]6]-@]-@](v@]$]G@] ]:]:\P\O\,@\\@\@\@\@\y\w@\R@\M@\ - 2.11.3-90Open vSwitch CI - 2.11.3-89Michael Santana - 2.11.3-88Open vSwitch CI - 2.11.3-87Open vSwitch CI - 2.11.3-86Open vSwitch CI - 2.11.3-85Open vSwitch CI - 2.11.3-84Timothy Redaelli - 2.11.3-83Open vSwitch CI - 2.11.3-82Open vSwitch CI - 2.11.3-81Open vSwitch CI - 2.11.3-80Open vSwitch CI - 2.11.3-79Open vSwitch CI - 2.11.3-78Open vSwitch CI - 2.11.3-77Open vSwitch CI - 2.11.3-76Open vSwitch CI - 2.11.3-75Open vSwitch CI - 2.11.3-74Timothy Redaelli - 2.11.3-73Open vSwitch CI - 2.11.3-72Open vSwitch CI - 2.11.3-71Open vSwitch CI - 2.11.3-70Open vSwitch CI - 2.11.3-69Open vSwitch CI - 2.11.3-68Open vSwitch CI - 2.11.3-67Flavio Leitner - 2.11.3-66Open vSwitch CI - 2.11.3-65Open vSwitch CI - 2.11.3-64Open vSwitch CI - 2.11.3-63Flavio Leitner - 2.11.3-62Flavio Leitner - 2.11.3-61Flavio Leitner - 2.11.3-60Flavio Leitner - 2.11.3-59Flavio Leitner - 2.11.3-58Flavio Leitner - 2.11.3-57Timothy Redaelli - 2.11.3-56Timothy Redaelli - 2.11.3-55Timothy Redaelli - 2.11.3-54Timothy Redaelli - 2.11.3-53Timothy Redaelli - 2.11.3-52Timothy Redaelli - 2.11.3-51Timothy Redaelli - 2.11.3-50Timothy Redaelli - 2.11.3-49Timothy Redaelli - 2.11.3-48Timothy Redaelli - 2.11.3-47Timothy Redaelli - 2.11.3-46Timothy Redaelli - 2.11.3-45Timothy Redaelli - 2.11.3-44Timothy Redaelli - 2.11.3-43Timothy Redaelli - 2.11.3-42Timothy Redaelli - 2.11.3-41Timothy Redaelli - 2.11.3-40Timothy Redaelli - 2.11.3-39Timothy Redaelli - 2.11.3-38Timothy Redaelli - 2.11.3-37Timothy Redaelli - 2.11.3-36Timothy Redaelli - 2.11.3-35Timothy Redaelli - 2.11.3-34Timothy Redaelli - 2.11.3-33Timothy Redaelli - 2.11.3-32Timothy Redaelli - 2.11.3-31Timothy Redaelli - 2.11.3-30Timothy Redaelli - 2.11.3-29Timothy Redaelli - 2.11.3-28Timothy Redaelli - 2.11.3-27Timothy Redaelli - 2.11.3-26Timothy Redaelli - 2.11.3-25Timothy Redaelli - 2.11.3-24Timothy Redaelli - 2.11.3-23Timothy Redaelli - 2.11.3-22Timothy Redaelli - 2.11.3-21Timothy Redaelli - 2.11.3-20Timothy Redaelli - 2.11.3-19Timothy Redaelli - 2.11.3-18Timothy Redaelli - 2.11.3-17Timothy Redaelli - 2.11.3-16Timothy Redaelli - 2.11.3-15Timothy Redaelli - 2.11.3-14Timothy Redaelli - 2.11.3-13Timothy Redaelli - 2.11.3-12Timothy Redaelli - 2.11.3-11Timothy Redaelli - 2.11.3-10Timothy Redaelli - 2.11.3-9Timothy Redaelli - 2.11.3-8Timothy Redaelli - 2.11.3-7Timothy Redaelli - 2.11.3-6Timothy Redaelli - 2.11.3-5Timothy Redaelli - 2.11.3-4Timothy Redaelli - 2.11.3-3Timothy Redaelli - 2.11.3-2Timothy Redaelli - 2.11.3-1Timothy Redaelli - 2.11.0-56.20200327gita4efc59Aaron Conole - 2.11.0-55.20200327gita4efc59Maxime Coquelin - 2.11.0-54.20200327gita4efc59Aaron Conole - 2.11.0-53.20200327gita4efc59Timothy Redaelli - 2.11.0-52.20200327gita4efc59Timothy Redaelli - 2.11.0-51.20200327gita4efc59Timothy Redaelli - 2.11.0-50Timothy Redaelli - 2.11.0-49Maxime Coquelin - 2.11.0-48Timothy Redaelli - 2.11.0-47Timothy Redaelli - 2.11.0-46Timothy Redaelli - 2.11.0-45Timothy Redaelli - 2.11.0-44Timothy Redaelli - 2.11.0-43Eelco Chaudron - 2.11.0-42Kevin Traynor - 2.11.0-41Adrián Moreno - 2.11.0-40Numan Siddique - 2.11.0-39David Marchand - 2.11.0-38Eelco Chaudron - 2.11.0-37Eelco Chaudron - 2.11.0-36Timothy Redaelli - 2.11.0-35Timothy Redaelli - 2.11.0-34Aaron Conole - 2.11.0-33Aaron Conole - 2.11.0-32Aaron Conole - 2.11.0-31Timothy Redaelli - 2.11.0-30Lorenzo Bianconi - 2.11.0-29David Marchand - 2.11.0-28Numan Siddique - 2.11.0-27Numan Siddique - 2.11.0-26Dumitru Ceara - 2.11.0-25Aaron Conole - 2.11.0-24Kevin Traynor - 2.11.0-23Flavio Leitner - 2.11.0-22Flavio Leitner - 2.11.0-21David Marchand - 2.11.0-20Numan Siddique - 2.11.0-19Timothy Redaelli - 2.11.0-18Timothy Redaelli - 2.11.0-17Timothy Redaelli - 2.11.0-16David Marchand - 2.11.0-15Timothy Redaelli - 2.11.0-14Timothy Redaelli - 2.11.0-13Maxime Coquelin - 2.11.0-12Flavio Leitner - 2.11.0-11Pablo Cascón - 2.11.0-10Numan Siddique - 2.11.0-9Kevin Traynor - 2.11.0-8David Marchand - 2.11.0-7Timothy Redaelli - 2.11.0-6Flavio Leitner - 2.11.0-5Davide Caratti - 2.11.0-4Timothy Redaelli - 2.11.0-3Timothy Redaelli - 2.11.0-2Timothy Redaelli - 2.11.0-1Open vSwitch Bot - 2.11.0-0.20190129gitd3a10dbOpen vSwitch Bot - 2.11.0-0.20190126gitd4ff5b2Timothy Redaelli - 2.11.0-0.20190114gitadb3f0bLorenzo Bianconi - 2.10.0-42Timothy Redaelli - 2.10.0-41Timothy Redaelli - 2.10.0-40Lorenzo Bianconi - 2.10.0-39Numan Siddique - 2.10.0-38David Marchand - 2.10.0-37Numan Siddique - 2.10.0-36Timothy Redaelli - 2.10.0-35Numan Siddique - 2.10.0-34Eelco Chaudron - 2.10.0-33Timothy Redaelli - 2.10.0-32Timothy Redaelli - 2.10.0-31Lorenzo Bianconi - 2.10.0-30Eelco Chaudron - 2.10.0-29Lorenzo Bianconi - 2.10.0-28Timothy Redaelli - 2.10.0-27Lorenzo Bianconi - 2.10.0-26Timothy Redaelli - 2.10.0-25Timothy Redaelli - 2.10.0-24Kevin Traynor - 2.10.0-23Timothy Redaelli - 2.10.0-22Numan Siddique - 2.10.0-21Timothy Redaelli - 2.10.0-20Timothy Redaelli - 2.10.0-19Timothy Redaelli - 2.10.0-18Numan Siddique - 2.10.0-17Numan Siddique - 2.10.0-16Numan Siddique - 2.10.0-15Numan Siddique - 2.10.0-14Lorenzo Bianconi - 2.10.0-13Matteo Croce - 2.10.0-12Lorenzo Bianconi - 2.10.0-11Timothy Redaelli - 2.10.0-10Matteo Croce - 2.10.0-9Matteo Croce - 2.10.0-8Matteo Croce - 2.10.0-7Kevin Traynor - 2.10.0-6Timothy Redaelli - 2.10.0-5Flavio Leitner - 2.10.0-4Flavio Leitner - 2.10.0-3Timothy Redaelli - 2.10.0-2Flavio Leitner - 2.10-1Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Open vSwitch Bot - 2.10-0Flavio Leitner - 2.10-0Aaron Conole - 2.9.0-47Timothy Redaelli - 2.9.0-46Timothy Redaelli - 2.9.0-45Timothy Redaelli - 2.9.0-44Timothy Redaelli - 2.9.0-43Timothy Redaelli - 2.9.0-42Timothy Redaelli - 2.9.0-41Timothy Redaelli - 2.9.0-40Timothy Redaelli - 2.9.0-39Maxime Coquelin - 2.9.0-38Timothy Redaelli - 2.9.0-37Timothy Redaelli - 2.9.0-36Lorenzo Bianconi - 2.9.0-35Timothy Redaelli - 2.9.0-34Timothy Redaelli - 2.9.0-33Aaron Conole - 2.9.0-32Timothy Redaelli - 2.9.0-31Timothy Redaelli - 2.9.0-30Timothy Redaelli - 2.9.0-29Kevin Traynor - 2.9.0-28Aaron Conole - 2.9.0-27Aaron Conole - 2.9.0-26Jakub Sitnicki - 2.9.0-25Aaron Conole - 2.9.0-24Timothy Redaelli - 2.9.0-23Timothy Redaelli - 2.9.0-22Timothy Redaelli - 2.9.0-21Timothy Redaelli - 2.9.0-20Kevin Traynor - 2.9.0-19Davide Caratti - 2.9.0-18Timothy Redaelli - 2.9.0-17Timothy Redaelli - 2.9.0-16Timothy Redaelli - 2.9.0-14Timothy Redaelli - 2.9.0-13Flavio Leitner - 2.9.0-12Timothy Redaelli - 2.9.0-11Timothy Redaelli - 2.9.0-10Timothy Redaelli - 2.9.0-9Eric Garver - 2.9.0-8Timothy Redaelli - 2.9.0-7Aaron Conole - 2.9.0-6Matteo Croce - 2.9.0-5Timothy Redaelli - 2.9.0-4Timothy Redaelli - 2.9.0-3Timothy Redaelli - 2.9.0-1Timothy Redaelli - 2.7.3-3.git20180112Timothy Redaelli - 2.7.3-2.git20171010Timothy Redaelli - 2.7.3-1.git20171010Kevin Traynor - 2.7.2-10.git20170914Timothy Redaelli - 2.7.2-9.git20170914Timothy Redaelli - 2.7.2-8.git20170719Aaron Conole - 2.7.2-7.git20170719Aaron Conole - 2.7.2-6.git20170719Aaron Conole - 2.7.2-5.git20170719John W. Linville - 2.7.2-4.git20170719John W. Linville - 2.7.2-3.git20170719John W. Linville - 2.7.2-2.git20170719Timothy Redaelli - 2.7.2-1.git20170719Timothy Redaelli - 2.7.1-1.git20170710Timothy Redaelli - 2.6.1-20.git20161206Lance Richardson - 2.6.1-19.git20161206Timothy Redaelli - 2.6.1-18.git20161206Timothy Redaelli - 2.6.1-17.git20161206Eric Garver - 2.6.1-16.git20161206Kevin Traynor - 2.6.1-15.git20161206Lance Richardson - 2.6.1-14.git20161206Timothy Redaelli - 2.6.1-13.git20161206Aaron Conole - 2.6.1-12.git20161206Lance Richardson - 2.6.1-11.git20161206Aaron Conole - 2.6.1-10.git20161206Lance Richardson - 2.6.1-9.git20161206Timothy Redaelli - 2.6.1-8.git20161206Lance Richardson - 2.6.1-7.git20161206Aaron Conole - 2.6.1-6.git20161206Timothy Redaelli - 2.6.1-5.git20161206Flavio Leitner 2.5.0-23.git20160727Lance Richardson 2.6.1-3.git20161206Lance Richardson 2.6.1-2.git20161206Kevin Traynor 2.6.1-1.git20161206Flavio Leitner 2.5.0-22.git20160727Flavio Leitner 2.5.0-21.git20160727Flavio Leitner 2.5.0-20.git20160727Aaron Conole - 2.5.0-19.git20160727Aaron Conole - 2.5.0-18.git20160727Flavio Leitner - 2.5.0-17.git20160727Flavio Leitner - 2.5.0-16.git20160727Flavio Leitner - 2.5.0-15.git20160727Panu Matilainen - 2.5.0-14.git20160727Panu Matilainen - 2.5.0-13.git20160727Panu Matilainen - 2.5.0-12.git20160727Panu Matilainen - 2.5.0-11.git20160727Panu Matilainen - 2.5.0-10.git20160727Flavio Leitner - 2.5.0-9.git20160727Flavio Leitner - 2.5.0-8.git20160727Flavio Leitner - 2.5.0-7.git20160727Flavio Leitner - 2.5.0-6.git20160628Flavio Leitner - 2.5.0-5.git20160628Panu Matilainen - 2.5.0-4.git20160628Panu Matilainen - 2.5.0-4Flavio Leitner - 2.5.0-3Panu Matilainen - 2.5.0-2Panu Matilainen - 2.5.0-1Panu Matilainen Flavio Leitner Panu Matilainen Ralf Spenneberg - Merging upstream branch-2.11 [RH gerrit: aac87adaf1] Commit list: 40682157c9 ovsdb-server: Fix memleak when failing to read storage.- Merging upstream branch-2.11 [RH gerrit: 1d6f0bd658] Commit list: 75907f8a11 ofp-group: Use big-enough buffer in ofputil_format_group().- Make changelog in spec file more informative [RH gerrit: 99ad8d96f6] This is done by adding the body of the commit message to the changelong. The body is indented and has extra spacing separating each entry in the changelog to make each one more discernible since now they could be longer Signed-off-by: Michael Santana - Merging upstream branch-2.11 [RH gerrit: 560df0228c] Commit list: 8710c3e5ce python: Send notifications after the transaction ends. bf3ef6a869 Handle refTable values with setkey()- Merging upstream branch-2.11 [RH gerrit: 67070c0625] Commit list: e9ad1da4f4 Prepare for 2.11.8. bbc2705315 Set release date for 2.11.7. 0f475a5cd4 ovsdb-client: Fix needs-conversion when SERVER is explicitly specified. 46299c1c72 dpdk: Use DPDK 18.11.11 release. 65c61b0c23 ofp-actions: Fix use-after-free while decoding RAW_ENCAP.- Merging upstream branch-2.11 [RH gerrit: 4351a9b512] Commit list: 9b0307cf7d Prepare for 2.11.7. 5d07b5da2e Set release date for 2.11.6. 018d35b7d9 cirrus: Use FreeBSD 12.2. abd7a45765 flow: Support extra padding length.- Merging upstream branch-2.11 [RH gerrit: a4f1272cee] Commit list: 5a62ed8002 dist-docs: Include manpages generated from rST.- flow: Support extra padding length. [RH gerrit: 35a473f35c] Although not required, padding can be optionally added until the packet length is MTU bytes. A packet with extra padding currently fails sanity checks. Fixes: fa8d9001a624 ("miniflow_extract: Properly handle small IP packets.") Reported-by: Joakim Hindersson Acked-by: Ilya Maximets Signed-off-by: Flavio Leitner - Merging upstream branch-2.11 [RH gerrit: 2e04729b43] Commit list: 1faf6f507c tc: Fix mpls bottom of stack bit mask reporting.- Merging upstream branch-2.11 [RH gerrit: a6fede58cb] Commit list: 6747878b7a python: Add 'six' to list of install requirements.- Merging upstream branch-2.11 [RH gerrit: b8354bd062] Commit list: cd0f896c01 github: Fix Ubuntu package installation. 5804c31209 odp-util: Fix abort while formatting nsh actions.- Merging upstream branch-2.11 [RH gerrit: f41ec7e05b] Commit list: d9e429cc49 Prepare for 2.11.6. 634e6e41cd Set release date for 2.11.5.- Merging upstream branch-2.11 [RH gerrit: 68170d878c] Commit list: dc222c3cf1 lldp: do not leak memory on multiple instances of TLVs 569595898b ofproto-dpif: Uninitialize 'xlate_cache' to free resources- Merging upstream branch-2.11 [RH gerrit: 10478e3802] Commit list: 008414b6f0 ovs-monitor-ipsec: Fix active connection regex.- Merging upstream branch-2.11 [RH gerrit: aa80d76b09] Commit list: 026339bc76 odp-util: Fix netlink message overflow with userdata. 29077624db ovsdb-tool: Fix datum leak in the show-log command. 041d001019 ofproto-dpif-xlate: Stop forwarding MLD reports to group ports.- Merging upstream branch-2.11 [RH gerrit: 838f461d65] Commit list: abe75f4938 datapath: ovs_ct_exit to be done under ovs_lock 884800683f compat: rcu: Add support for consolidated-RCU reader checking 090c694ac7 tests: Add overflow test for the sha1 library. 7bcf93452e travis: Remove support for Travis CI. a29cda9b26 github: Add GitHub Actions workflow. a9748802e0 ovsdb-cluster.at: Fix infinite loop in torture tests.- Merging upstream branch-2.11 [RH gerrit: 757d6ce62c] Commit list: 1dae577d74 ovsdb-idl: Fix *_is_new() IDL functions. 709b548549 compat: Fix compile warning. 8bd0dadd04 compat: Remove stale code. 9414a66816 tests: Add parse-flow tests for MPLS fields. 00ec8e5cb9 ofp-actions: Fix userspace support for mpls_ttl. 655e9aa784 python: Don't raise an Exception on failure to connect via SSL. 1cf4245ace lldp: correctly increase discarded count 330d64d036 lldp: increase statsTLVsUnrecognizedTotal on unknown TLV c00a829e45 lldp: fix a buffer overflow when handling management address TLV 9aed58b5f1 lldp: Fix size of PEEK_DISCARD_UINT32() 2c0bbbacf3 lldp: validate a bit more received LLDP frames 72aa3deacf sha1: Fix algorithm for data bigger than 512 megabytes. 7d52af2228 odp-util: Fix overflow of nested netlink attributes.- redhat: Explicitly define __python [RH gerrit: 045337a5c8] See https://fedoraproject.org/wiki/Changes/PythonMacroError- Merging upstream branch-2.11 [RH gerrit: e835b37ab3] Commit list: 684e43b4d8 raft: Fix error leak on failure while saving snapshot.- Merging upstream branch-2.11 [RH gerrit: a11c3da9f7] Commit list: cc81b50a60 ofp-ed-props: Fix using uninitialized padding for NSH encap actions.- Merging upstream branch-2.11 [RH gerrit: 2a26d61978] Commit list: 3cc79bbc13 system-userspace-packet-type-aware.at: Wait for ip address updates. 2deed05096 netdev-dpdk: Don't set rx mq mode for net_virtio.- Merging upstream branch-2.11 [RH gerrit: e31b9384be] Commit list: 5ceafdc389 docs: Add flow control on i40e issue- Merging upstream branch-2.11 [RH gerrit: a43432762b] Commit list: dfcebfcc2f cirrus: Use FreeBSD 11.4. 9e53a8a76b classifier: Fix use of uninitialized value. 30387b61ac rhel: Fix logrotate group when dpdk is enabled.- Merging upstream branch-2.11 [RH gerrit: dd4802fb0c] Commit list: 1b842af7ad ovs-dpctl-top: Skip "eth()" element. 9ff2a5a115 meta-flow: fix a typo in "MPLS Bottom of Stack Field" paragraph.- pkgtool: Use git-branch to retrieve the name. [RH gerrit: 7240e67479] The name-rev can return any symbolic name for ref, whether it is a branch or a tag. Use git branch --show-current instead.- Merging upstream branch-2.11 [RH gerrit: b16596dda3] Commit list: 05bbdfceb7 netdev-offload-dpdk: Fix for broken ethernet matching HWOL for XL710NIC.- Merging upstream branch-2.11 [RH gerrit: 7b48e66922] Commit list: e38b412dcb acinclude: Fix build with kernels with prandom* moved to prandom.h.- Merging upstream branch-2.11 [RH gerrit: 9ae7cb0a10] Commit list: 218ab4f731 Prepare for 2.11.5. adf1b5c390 Set release date for 2.11.4. 1210688623 datapath-windows: Update flow key in SET action d04e409f39 dpctl: Fix memory leak in dpctl_dump_flows() 5d7a08db86 ovs-router: Fix flushing of local routes.- redhat: Add support to custom RPM releases. [RH gerrit: 570434c6c2] This commit allows the developer to specify a custom release string to be appended to package NVR. If the custom release is 'bz123456', the final release would look like -Y.bz123456.X where Y is the number of changes until the branch was created, and X is the number of changes after that.- pkgtool: Use OVS static version in package NVR. [RH gerrit: 2ed240a84c] The package NVR must coincide with the tarball version.- Merge branch 'fast-datapath-rhel-7' into fast-datapath-rhel-8 [RH gerrit: a2d9792f8c]- Merge branch 'fast-datapath-rhel-7' into fast-datapath-rhel-8 [RH gerrit: c9f7a9e2d3]- spec: Fix configure to use dpdkdir without version. [RH gerrit: 583acc91dd]- redhat: Rename OVSCI job name. [RH gerrit: cbcaa83118] The OVSCI job's name has been renamed to follow a standard.- This is fast-datapath-rhel-8 [RH gerrit: 98f312f126]- bus/pci: fix VF memory access (#1851170) [RH gerrit: fa4d90db57] To fix CVE-2020-12888, the linux vfio-pci module will invalidate mmaps and block MMIO access on disabled memory, it will send a SIGBUS to the application: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=abafbc551fdd When the application opens the vfio PCI device, the vfio-pci module will enable the bus memory space through PCI read/write access. According to the PCIe specification, the 'Memory Space Enable' is always zero for VF: Table 9-13 Command Register Changes Bit Location | PF and VF Register Differences | PF | VF | From Base | Attributes | Attributes -------------+--------------------------------+------------+----------- | Memory Space Enable - Does not | | | apply to VFs. Must be hardwired| Base | 0b 1 | to 0b for VFs. VF Memory Space | | | is controlled by the VF MSE bit| | | in the VF Control register. | | -------------+--------------------------------+------------+----------- Afterwards the vfio-pci will initialize its own virtual PCI config space data ('vconfig') by reading the VF's physical PCI config space, then the 'Memory Space Enable' bit in vconfig will always be 0b value. This will make the vfio-pci treat the BAR memory space as disabled, and the SIGBUS will be triggered if access these BARs. By investigation, the VF PCI device *passthrough* into the Guest OS by QEMU has the 'Memory Space Enable' with 1b value. That's because every PCI driver will start to enable the memory space, and this action will be hooked by vfio-pci virtual PCI read/write to set the 'Memory Space Enable' in vconfig space to 1b. So VF runs in guest OS has 'Mem+', but VF runs in host OS has 'Mem-'. Align with PCI working mode in Guest/QEMU/Host, in DPDK, enable the PCI bus memory space explicitly to avoid access on disabled memory. Fixes: 33604c31354a ("vfio: refactor PCI BAR mapping") Cc: stable@dpdk.org Signed-off-by: Haiyue Wang Acked-by: Anatoly Burakov Tested-by: Harman Kalra Tested-by: David Marchand Tested-by: Thierry Martin (cherry picked from commit 54f3fb127d9c265a5724d193e5c7c6db29fb4150) Resolves: #1851170- vhost: fix vring index check (#1831391) [RH gerrit: 8e33084d85] vhost_user_check_and_alloc_queue_pair() is used to extract a vring index from a payload. This function validates the index and is called early on in when performing message handling. Most message handlers depend on it correctly validating the vring index. Depending on the message type the vring index is in different parts of the payload. The function contains a switch/case for each type and copies the index. This is stored in a uint16. This index is then validated. Depending on the message, the source index is an unsigned int. If integer truncation occurs (uint->uint16) the top 16 bits of the index are never validated. When they are used later on (e.g. in vhost_user_set_vring_num() or vhost_user_set_vring_addr()) it can lead to out of bound indexing. The out of bound indexed data gets written to, and hence this can cause memory corruption. This patch fixes this vulnerability by declaring vring index as an unsigned int in vhost_user_check_and_alloc_queue_pair(). Fixes: 160cbc815b41 ("vhost: remove a hack on queue allocation") Cc: stable@dpdk.org This issue has been assigned CVE-2020-10723 Reported-by: Ilja Van Sprundel Signed-off-by: Maxime Coquelin Reviewed-by: Xiaolong Ye Reviewed-by: Ilja Van Sprundel (cherry picked from commit c78d94189dced04def987a17f16097fcb197a186) Resolves: #1831391- vhost: check log mmap offset and size overflow (#1831391) [RH gerrit: 753ae0cf66] vhost_user_set_log_base() is a message handler that is called to handle the VHOST_USER_SET_LOG_BASE message. Its payload contains a 64 bit size and offset. Both are added up and used as a size when calling mmap(). There is no integer overflow check. If an integer overflow occurs a smaller memory map would be created than requested. Since the returned mapping is mapped as writable and used for logging, a memory corruption could occur. Fixes: fbc4d248b198 ("vhost: fix offset while mmaping log base address") This issue has been assigned CVE-2020-10722 Reported-by: Ilja Van Sprundel Signed-off-by: Maxime Coquelin Reviewed-by: Xiaolong Ye Reviewed-by: Ilja Van Sprundel (cherry picked from commit 338f5eae5de73a91ba42951bfe7d1fba898e1aab) Resolves: #1831391- vhost: add device op when notification to guest is sent (#1726579) [RH gerrit: 92715cf99c] This patch adds an operation callback which gets called every time the library is waking up the guest trough an eventfd_write() call. This can be used by 3rd party application, like OVS, to track the number of times interrupts where generated. This might be of interest to find out system-call were called in the fast path. Signed-off-by: Eelco Chaudron Reviewed-by: Maxime Coquelin (cherry picked from commit 039253166a57ee660dd2fbe92ca77fa65154751c) Resolves: #1726579- net/i40e: re-program promiscuous mode on VF interface (#1733402) [RH gerrit: 0fe1f42b5f] During a kernel PF reset, this event is propagated to the VF. The DPDK VF PMD will execute the reset task before the PF is done with his. This results in the admin queue message not being responded to leaving the port in "promiscuous" mode. This patch makes sure the promiscuous mode is configured independently of the current admin state. Signed-off-by: Eelco Chaudron Reviewed-by: Xiao Zhang (cherry picked from commit ddc7cb0d9453e0c0601a01eab1f388eae4c1fb65) Resolves: #1733402- bus/pci: always check IOMMU capabilities (#1711739) [RH gerrit: 0815c39d39] IOMMU capabilities won't change and must be checked even if no PCI device seem to be supported yet when EAL initialised. This is to accommodate with SPDK that registers its drivers after rte_eal_init(), especially on PPC platform where the IOMMU does not support VA. Fixes: 703458e19c16 ("bus/pci: consider only usable devices for IOVA mode") Signed-off-by: David Marchand Reviewed-by: David Christensen Acked-by: Jerin Jacob Tested-by: Jerin Jacob Tested-by: Takeshi Yoshimura (cherry picked from commit 66d3724b2c87e6fcdf3851ca191683696a91b901) Signed-off-by: David Marchand Resolves: #1711739- eal: fix IOVA mode selection as VA for PCI drivers (#1711739) [RH gerrit: 11fbef3c85] The incriminated commit broke the use of RTE_PCI_DRV_IOVA_AS_VA which was intended to mean "driver only supports VA" but had been understood as "driver supports both PA and VA" by most net drivers and used to let dpdk processes to run as non root (which do not have access to physical addresses on recent kernels). The check on physical addresses actually closed the gap for those drivers. We don't need to mark them with RTE_PCI_DRV_IOVA_AS_VA and this flag can retain its intended meaning. Document explicitly its meaning. We can check that a driver requirement wrt to IOVA mode is fulfilled before trying to probe a device. Finally, document the heuristic used to select the IOVA mode and hope that we won't break it again. Fixes: 703458e19c16 ("bus/pci: consider only usable devices for IOVA mode") Signed-off-by: David Marchand Reviewed-by: Jerin Jacob Tested-by: Jerin Jacob Acked-by: Anatoly Burakov (cherry picked from commit b76fafb174d2cd5247c3573bb3d49444e195e760) Signed-off-by: David Marchand Conflicts: drivers/net/avf/avf_ethdev.c drivers/net/ice/ice_ethdev.c drivers/net/mlx4/mlx4.c drivers/net/mlx5/mlx5.c drivers/net/octeontx2/otx2_ethdev.c drivers/raw/ioat/ioat_rawdev.c Resolves: #1711739- bus/pci: consider only usable devices for IOVA mode (#1711739) [RH gerrit: 69f5cb4c56] When selecting the preferred IOVA mode of the pci bus, the current heuristic ("are devices bound?", "are devices bound to UIO?", "are pmd drivers supporting IOVA as VA?" etc..) should honor the device white/blacklist so that an unwanted device does not impact the decision. There is no reason to consider a device which has no driver available. This applies to all OS, so implements this in common code then call a OS specific callback. On Linux side: - the VFIO special considerations should be evaluated only if VFIO support is built, - there is no strong requirement on using VA rather than PA if a driver supports VA, so defaulting to DC in such a case. Signed-off-by: Ben Walker Signed-off-by: David Marchand Reviewed-by: Anatoly Burakov (cherry picked from commit 703458e19c16135143b3f30089e1af66100c82dc) Signed-off-by: David Marchand Conflicts: drivers/bus/pci/linux/pci.c drivers/bus/pci/pci_common.c Resolves: #1711739- eal: compute IOVA mode based on PA availability (#1711739) [RH gerrit: d5e1d2fa50] Currently, if the bus selects IOVA as PA, the memory init can fail when lacking access to physical addresses. This can be quite hard for normal users to understand what is wrong since this is the default behavior. Catch this situation earlier in eal init by validating physical addresses availability, or select IOVA when no clear preferrence had been expressed. The bus code is changed so that it reports when it does not care about the IOVA mode and let the eal init decide. In Linux implementation, rework rte_eal_using_phys_addrs() so that it can be called earlier but still avoid a circular dependency with rte_mem_virt2phys(). In FreeBSD implementation, rte_eal_using_phys_addrs() always returns false, so the detection part is left as is. If librte_kni is compiled in and the KNI kmod is loaded, - if the buses requested VA, force to PA if physical addresses are available as it was done before, - else, keep iova as VA, KNI init will fail later. Signed-off-by: Ben Walker Signed-off-by: David Marchand Acked-by: Anatoly Burakov (cherry picked from commit c2361bab70c56f64e50f07946b1b20bf688d782a) Signed-off-by: David Marchand Resolves: #1711739- netdev-linux: Update LAG in all cases. (#1812892) [RH gerrit: 2763511809] In some cases, when processing a netlink change event, it's possible for an alternate part of OvS (like the IPv6 endpoint processing) to hold an active netdev interface. This creates a race-condition, where sometimes the OvS change processing will take the normal path. This doesn't work because the netdev device object won't actually be enslaved to the ovs-system (for instance, a linux bond) and ingress qdisc entries will be missing. To address this, we update the LAG information in ALL cases where LAG information could come in. Fixes: d22f8927c3c9 ("netdev-linux: monitor and offload LAG slaves to TC") Cc: Marcelo Leitner Cc: John Hurley Acked-by: Roi Dayan Signed-off-by: Aaron Conole Signed-off-by: Ilya Maximets (cherry picked from commit 7a076a53716394742d0ae44652451501ae17335d) Resolves: #1812892- netdev-offload-tc: Re-fetch block ID after probing. (#1812892) [RH gerrit: 83cebd3221] It's possible that block_id could changes after the probe for block support. Therefore, fetch the block_id again after the probe. Fixes: edc2055a2bf7 ("netdev-offload-tc: Flush rules on ingress block when init tc flow api") Cc: Dmytro Linkin Acked-by: Roi Dayan Co-authored-by: Marcelo Leitner Signed-off-by: Marcelo Leitner Signed-off-by: Aaron Conole Signed-off-by: Ilya Maximets (cherry picked from commit 8508a57228560e154963c542823d36d8098e6610) Resolves: #1812892- netdev-offload-tc: Flush rules on ingress block when init tc flow api (#1812892) [RH gerrit: e5d7d5ec24] OVS can fail to attach ingress block on iface when init tc flow api, if block already exist with rules on it and is shared with other iface. Fix by flush all existing rules on the ingress block prior to deleting it. Fixes: 093c9458fb02 ("tc: allow offloading of block ids") Signed-off-by: Dmytro Linkin Acked-by: Raed Salem Acked-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit edc2055a2bf73258d5731a8f8853397190348b04) Resolves: #1812892- netdev-vport: Use the dst_port in tunnel netdev name (#1727599) [RH gerrit: f4a6fb7574] If tunnel device dst_port is not the default one, "ovs-dpctl dump-flows" will fail. The error message for vxlan is: netdev_linux|INFO|ioctl(SIOCGIFINDEX) on vxlan_sys_4789 device failed: No such device That's because when calling netdev_vport_construct() for netdev vxlan_sys_xxxx, the default dst_port is used. Actually, the dst_port value is in the netdev name. Use it to avoid the error. Signed-off-by: Chris Mi Reviewed-by: Roi Dayan Signed-off-by: Ben Pfaff (cherry picked from commit 6998788197e23c409a6b6cecaa30867ff6d40928) Resolves: #1727599- lib/tc: Fix flow dump for tunnel id equal zero (#1732305) [RH gerrit: 765ba1d1c0] Tunnel id 0 is not printed unless tunnel flag FLOW_TNL_F_KEY is set. Fix that by always setting FLOW_TNL_F_KEY when tunnel id is valid. Fixes: 0227bf092ee6 ("lib/tc: Support optional tunnel id") Signed-off-by: Dmytro Linkin Reviewed-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit 36e50679a6517ee1ec6ed9e4cc83293279a5fffc) Resolves: #1732305- lib/tc: Support optional tunnel id (#1732305) [RH gerrit: 42f09fe96f] Currently the TC tunnel_key action is always initialized with the given tunnel id value. However, some tunneling protocols define the tunnel id as an optional field. This patch initializes the id field of tunnel_key:set and tunnel_key:unset only if a value is provided. In the case that a tunnel key value is not provided by the user the key flag will not be set. Signed-off-by: Adi Nissim Acked-by: Paul Blakey Signed-off-by: Simon Horman (cherry picked from commit 0227bf092ee6b5d18e2b79493d44769cb37ecc98) Resolves: #1732305- tc: Set 'no_percpu' flag for compatible actions (#1780690) [RH gerrit: 42f07f6bd8] Recent changes in Linux kernel TC action subsystem introduced new TCA_ACT_FLAGS_NO_PERCPU_STATS flag. The purpose of the flag is to request action implementation to skip allocating action stats with expensive percpu allocator and use regular built-in action stats instead. Such approach significantly improves rule insertion rate and reduce memory usage for hardware-offloaded rules that don't need benefits provided by percpu allocated stats (improved software TC fast-path performance). Set the flag for all compatible actions. Modify acinclude.m4 to use OVS-internal pkt_cls.h implementation when TCA_ACT_FLAGS is not defined by kernel headers and to manually define struct nla_bitfield32 in netlink.h (new file) when it is not defined by kernel headers. Signed-off-by: Vlad Buslov Reviewed-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit 292d5bd9bb344527e0da19433cf3e51f8a24058c) Resolves: #1780690- rhel: let *-ctl handle runtime directory (#1785586) [RH gerrit: c3763ec916] Recent versions of systemd restores RuntimeDirectory ownership to the unit's User in between execution of *Exec directives (see [1]). Using ExecStartPre to reset RuntimeDirectory ownership to OVS_USER no longer works as expected. The ctl scripts already handle creation of the runtime directory with correct ownership and permissions so we can basically remove RuntimeDirectory from systemd unit file. There is still need to handle ownsership to cover some upgrade scenarios, but success of that will be optional as the directory itself wont exist at first time run. [1] https://github.com/systemd/systemd/issues/12713 Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 7a65e5a9252ac06df62707a571931f501747ecfc) Resolves: #1785586- rhel: set useropts optional for ovsdb-server (#1785586) [RH gerrit: 77bed8f0e4] systemd assesses the presssence of all EnvironmentFile before execution of Exec* directives, thus useropts needs to be optional even though it will always be created at ExecStartPre. Fixes: 94e1e8be3187 ("rhel: run ovn with the same user as ovs") Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 0186c3807cc4500c5699fcf034df3a995c34885c) Resolves: #1785586- rhel: run ovn with the same user as ovs (#1785586) [RH gerrit: 8f5f39b4af] Both ovn and ovs share the same log and run directories which are owned by the user running ovs so it makes sense that ovn runs under that user too to diminish security concerns and possible problems with log rotation. Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 94e1e8be3187a4824ac27ed843396dde5cc02d13) Resolves: #1785586- rhel: secure openvswitch useropts (#1785586) [RH gerrit: 71154ad26f] The openvswitch useropts file is being stored in a directory where the openvswitch user has write permissions. The openvswitch user can then manipulate the file to change the user under which switchd daemon runs. This patch changes the file to /var/openvswitch.useropts preventing any manipulation. Signed-off-by: Jaime Caamaño Ruiz Signed-off-by: Ben Pfaff (cherry picked from commit 27e25e18c1f4cdd789d5670ab9e01dcf02a86b6f) Resolves: #1785586- userspace: Improved packet drop statistics. (#1726568) [RH gerrit: a6b7a37be8] Currently OVS maintains explicit packet drop/error counters only on port level. Packets that are dropped as part of normal OpenFlow processing are counted in flow stats of “drop” flows or as table misses in table stats. These can only be interpreted by controllers that know the semantics of the configured OpenFlow pipeline. Without that knowledge, it is impossible for an OVS user to obtain e.g. the total number of packets dropped due to OpenFlow rules. Furthermore, there are numerous other reasons for which packets can be dropped by OVS slow path that are not related to the OpenFlow pipeline. The generated datapath flow entries include a drop action to avoid further expensive upcalls to the slow path, but subsequent packets dropped by the datapath are not accounted anywhere. Finally, the datapath itself drops packets in certain error situations. Also, these drops are today not accounted for.This makes it difficult for OVS users to monitor packet drop in an OVS instance and to alert a management system in case of a unexpected increase of such drops. Also OVS trouble-shooters face difficulties in analysing packet drops. With this patch we implement following changes to address the issues mentioned above. 1. Identify and account all the silent packet drop scenarios 2. Display these drops in ovs-appctl coverage/show Co-authored-by: Rohith Basavaraja Co-authored-by: Keshav Gupta Signed-off-by: Anju Thomas Signed-off-by: Rohith Basavaraja Signed-off-by: Keshav Gupta Acked-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit a13a0209750c424556189796061c40d08c689467) Resolves: #1726568- netdev-dpdk: Fix sw stats perf drop. (#1790841) [RH gerrit: 54f4571750] Accessing the sw stats in the vhost datapath of a PVP test can incur a performance drop of ~2%. Most of the time these stats will just be getting zero added to them. By checking if there is a non-zero update first, we can avoid accessing them when they won't be updated and avoid the performance drop. Fixes: 2f862c712e52 ("netdev-dpdk: Detailed packet drop statistics.") Signed-off-by: Kevin Traynor Acked-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit 6d77abf4f7ea5596ba8c4a7a27768e83e80a7e46) Resolves: #1790841- netdev-dpdk: Detailed packet drop statistics. (#1790841) [RH gerrit: 1e1b33541a] OVS may be unable to transmit packets for multiple reasons on the userspace datapath and today there is a single counter to track packets dropped due to any of those reasons. This patch adds custom software stats for the different reasons packets may be dropped during tx/rx on the userspace datapath in OVS. - MTU drops : drops that occur due to a too large packet size - Qos drops : drops that occur due to egress/ingress QOS - Tx failures: drops as returned by the DPDK PMD send function Note that the reason for tx failures is not specified in OVS. In practice for vhost ports it is most common that tx failures are because there are not enough available descriptors, which is usually caused by misconfiguration of the guest queues and/or because the guest is not consuming packets fast enough from the queues. These counters are displayed along with other stats in "ovs-vsctl get interface statistics" command and are available for dpdk and vhostuser/vhostuserclient ports. Also the existing "tx_retries" counter for vhost ports has been renamed to "ovs_tx_retries", so that all the custom statistics that OVS accumulates itself will have the prefix "ovs_". This will prevent any custom stats names overlapping with driver/HW stats. Acked-by: Kevin Traynor Signed-off-by: Sriram Vatala Signed-off-by: Ilya Maximets (cherry picked from commit 2f862c712e52fe524e441ab58bb042dcb20214ee) Resolves: #1790841- netdev-dpdk: Reuse vhost function for dpdk ETH custom stats. (#1790841) [RH gerrit: e0d00f70c5] This is yet another refactoring for upcoming detailed drop stats. It allows to use single function for all the software calculated statistics in netdev-dpdk for both vhost and ETH ports. UINT64_MAX used as a marker for non-supported statistics in a same way as it's done in bridge.c for common netdev stats. Co-authored-by: Sriram Vatala Signed-off-by: Ilya Maximets Signed-off-by: Sriram Vatala Acked-by: Kevin Traynor (cherry picked from commit b99ab8aaaf9f6057ddbc332c76ab774dbfd4ccc3) Resolves: #1790841- netdev-dpdk: Refactor vhost custom stats for extensibility. (#1790841) [RH gerrit: b084d7a5c2] vHost interfaces currently has only one custom statistic, but there might be others in the near future. This refactoring makes the code work in the same way as it done for dpdk and afxdp stats to keep the common style over the different code places and makes it easily extensible for the new stats addition. Signed-off-by: Ilya Maximets Reviewed-by: David Marchand Acked-by: Kevin Traynor (cherry picked from commit 5c7ba90d8189ee7b35a1723d5a76dc205720af50) Resolves: #1790841- netdev-dpdk: Fix not reporting rx_oversize_errors in stats. (#1790841) [RH gerrit: 26017f85c8] There is a big code duplication issue with DPDK xstats that led to missed "rx_oversize_errors" statistics. It's defined but not used. Fix that by actually using this stat along with code refactoring that will allow us to not make same mistakes in the future. Macro definitions are perfectly suitable to automate code generation in such cases and already used in a couple of places in OVS for similar purposes. Signed-off-by: Ilya Maximets Reviewed-by: David Marchand Acked-by: Kevin Traynor Acked-by: Ian Stokes (cherry picked from commit 18366d165162051463fd28e9f46d1c2cbe355eb3) Resolves: #1790841- ovsdb replication: Provide option to configure probe interval. (#1788800) [RH gerrit: e8a669ead7] When ovsdb-server is in backup mode and connects to the active ovsdb-server for replication, and if takes more than 5 seconds to get the dump of the whole database, it will drop the connection soon after as the default probe interval is 5 seconds. This results in a snowball effect of reconnections to the active ovsdb-server. This patch handles or mitigates this issue by setting the default probe interval value to 60 seconds and provide the option to configure this value from the unixctl command. Other option could be increase the value of 'RECONNECT_DEFAULT_PROBE_INTERVAL' to a higher value. Acked-by: Mark Michelson Acked-by: Dumitru Ceara Signed-off-by: Numan Siddique Signed-off-by: Ben Pfaff (cherry-picked from commit e988b8abeec9d4be94b519c5d4ed4586ff71fde0) Resolves: #1788800- netdev-dpdk: Add coverage counter to count vhost IRQs. (#1726579) [RH gerrit: 3c3997eb0a] When the dpdk vhost library executes an eventfd_write() call, i.e. waking up the guest, a new callback will be called. This patch adds the callback to count the number of interrupts sent to the VM to track the number of times interrupts where generated. This might be of interest to find out system-calls were called in the DPDK fast path. The coverage counter is called "vhost_notification" and can be read with: $ ovs-appctl coverage/read-counter vhost_notification 13238319 Signed-off-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit 3d56e4ac445d17e69484a95b319ac578e3580b65) Signed-off-by: David Marchand Conflicts: lib/netdev-dpdk.c Resolves: #1726579- netdev-dpdk: add support for the RTE_ETH_EVENT_INTR_RESET event. (#1719644) [RH gerrit: ca1a1a8e1c] Currently, OVS does not register and therefore not handle the interface reset event from the DPDK framework. This would cause a problem in cases where a VF is used as an interface, and its configuration changes. As an example in the following scenario the MAC change is not detected/acted upon until OVS is restarted without the patch applied: $ echo 1 > /sys/bus/pci/devices/0000:05:00.1/sriov_numvfs $ ovs-vsctl add-port ovs_pvp_br0 dpdk0 -- \ set Interface dpdk0 type=dpdk -- \ set Interface dpdk0 options:dpdk-devargs=0000:05:0a.0 $ ip link set p5p2 vf 0 mac 52:54:00:92:d3:33 Signed-off-by: Eelco Chaudron Signed-off-by: Ilya Maximets (cherry picked from commit 988fd46391495e1ff92fa0d81204ae712e89ef9d) Resolves: #1719644- bridge: Allow manual notifications about interfaces' updates. (#1719644) [RH gerrit: f58b680888] Sometimes interface updates could happen in a way ifnotifier is not able to catch. For example some heavy operations (device reset) in netdev-dpdk could require re-applying of the bridge configuration. For this purpose new manual notifier introduced. Its function 'if_notifier_manual_report()' could be called directly by the code that aware about changes. This new notifier is thread-safe. Signed-off-by: Ilya Maximets Acked-by: Eelco Chaudron (cherry picked from commit db54e9672052db9c45f84d89454104eb2fedfb02) Signed-off-by: David Marchand Conflicts: lib/automake.mk vswitchd/bridge.c Resolves: #1719644- Shutdown SSL connection before closing socket (#1780745) [RH gerrit: aa97017175] Without shutting down the SSL connection, log messages like: stream_ssl|WARN|SSL_read: unexpected SSL connection close jsonrpc|WARN|ssl:127.0.0.1:47052: receive error: Protocol error reconnect|WARN|ssl:127.0.0.1:47052: connection dropped (Protocol error) would occur whenever the socket is closed. This just adds an SSLStream.close() that calls shutdown() and ignores SSL errors, the same way that lib/stream-ssl.c does in ssl_close(). Signed-off-by: Terry Wilson Signed-off-by: Ben Pfaff (cherry picked from commit 5fe179987d14ff38cce345dbbe57ef1ffe7853cc) Resolves: #1780745- flake8: also check the ovs-check-dead-ifs script (#1751161) [RH gerrit: ecd3a1b407] Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit bc6f73c951af472d221985965085544e60248b03) Resolves: #1751161- ovs-check-dead-ifs: unshadow pid variable (#1751161) [RH gerrit: a086e76181] The pid variable is being shadowed by the list comprehension in the os.execvp() call. This can generate flakes / warnings in some environments so fix it. Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit 78e2a56927b5ba7e6f8808e3cf967171a2708a57) Resolves: #1751161- ovs-check-dead-ifs: python3 print format (#1751161) [RH gerrit: d61553f744] The print call changed in python3, so update it. Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit c864b82d889dc47fb88d5cdde8caeca962776871) Resolves: #1751161- ovs-tcpundump: exit when getting version (#1764127) [RH gerrit: ea9923af22] Running 'ovs-tcpundump -V' will cause ovs-tcpundump to start processing on stdin. Instead, print the version and exit. Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit c691cffb03ba3a7595f364c2766fdd2ace8c3842) Resolves: #1764127- ovs-tcpundump: allow multiple packet lengths (#1764125) [RH gerrit: ac3b779405] The tcpundump tool expects all packets to be a length which aligns to exactly a 4-nibble boundary. This means packets like DNS requests will be stripped before being correctly processed. Fix this by allowing at least two nibbles (or one byte) alignment. Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit 1051576cf2b8a6ffddf849d984c250a8456e6144) Resolves: #1764125- jsonrpc: increase input buffer size from 512 to 4096 (#1776883) [RH gerrit: 9c93db8373] Increase jsonrpc input buffer size from 512 to 4096 bytes in order to reduce the syscall overhead when downloading huge db size Acked-by: Mark Michelson Signed-off-by: Lorenzo Bianconi Signed-off-by: Ben Pfaff (cherry picked from commit ea5c1ba0e3b899b8b6684f23a44bbfd4331815ee) Resolves: #1776883- netdev-dpdk: Track vhost tx contention. (#1740144) [RH gerrit: 31112a9502] Add a coverage counter to help diagnose contention on the vhost txqs. This is seen as dropped packets on the physical ports for rates that are usually handled fine by OVS. Acked-by: Eelco Chaudron Signed-off-by: David Marchand Signed-off-by: Ilya Maximets (cherry picked from commit 9ff24b9c9323652f9dc80ff7928148c4af12da9c) Resolves: #1740144- ovsdb-server: Allow replication from older schema version servers. (#1766586) [RH gerrit: cb53fe2282] Presently, replication is not allowed if there is a schema version mismatch between the schema returned by the active ovsdb-server and the local db schema. This is causing failures in OVN DB HA deployments during uprades. In the case of OpenStack tripleo deployment with OVN, OVN DB ovsdb-servers are deployed on a multi node controller cluster in active/standby mode. During minor updates or major upgrades, the cluster is updated one at a time. If a node A is running active OVN DB ovsdb-servers and when it is updated, another node B becomes active. After the update when OVN DB ovsdb-servers in A are started, these ovsdb-servers fail to replicate from the active if there is a schema version mismatch. This patch addresses this issue by allowing replication even if there is a schema version mismatch only if all the active db schema tables and its colums are present in the local db schema. This should not result in any data loss. Signed-off-by: Numan Siddique Signed-off-by: Ben Pfaff (cherry picked from commit cec7005bde4bc81de7b94a3dc4b4160800c98be7) Resolves: #1766586- ovsdb-server: Don't drop all connections on read/write status change. (#1761572) [RH gerrit: 5a0a77328b] The commit [1] force drops all connections when the db read/write status changes. Prior to the commit [1], when there was read/write status change, the existing jsonrpc sessions with 'db_change_aware' set to true, were not updated with the changed 'read_only' value. If the db status was changed to 'standby', the existing clients could still write to the db. In the case of pacemaker OVN HA, OVN OCF script 'start' action starts the ovsdb-servers in read-only state and later, it sets to read-write in the 'promote' action. We have observed that if some ovn-controllers connect to the SB ovsdb-server (in read-only state) just before the 'promote' action, the connection is not reset all the times and these ovn-controllers remain connected to the SB ovsdb-server in read-only state all the time. Even though the commit [1] calls 'ovsdb_jsonrpc_server_reconnect()' with 'forced' flag set to true when the db read/write status changes, somehow the FSM misses resetting the connections of these ovn-controllers. I think this needs to be addressed in the FSM. This patch doesn't address this FSM issue. Instead it changes the behavior of 'ovsdb_jsonrpc_server_set_read_only()' by setting the 'read_only' flag of all the jsonrpc sessions instead of forcefully resetting the connection. I think there is no need to reset the connection. In large scale production deployements with OVN, this results in unnecessary waste of CPU cycles as ovn-controllers will have to connect twice - once during 'start' action and again during 'promote'. [1] - 2a9679e3b2c6("ovsdb-server: drop all connections on read/write status change") Acked-by: Dumitru Ceara Signed-off-by: Numan Siddique Signed-off-by: Ben Pfaff (cherry picked from commit a5ff4874ba4bb60ced7bda6ad97d0be38e8172eb) Resolves: #1761572- ofproto-dpif: Fix continuation with patch port (#1761461) [RH gerrit: 069d4bd437] This patch fixes the ofp_port to odp_port translation issue on patch port with nxt_resume. When OVS resumes processing a packet from nxt_resume, OVS does not translate the ofp in_port to odp in_port correctly if the packet is originally received from a patch port. Currently,OVS sets the odp in_port for this resume pakcet as ODPP_NONE and push the resume packet back to the datapath. Later on, if the packet goes through a recirc, OVS will generate the following message since it can not translate odp in_port (ODPP_NONE) back to ofp in_port during upcall, and push down a datapath rule to drop the packet. ofproto_dpif_upcall(handler16)|INFO|received packet on unassociated datapath port 4294967295 When OVS revalidates the drop datapath flow with ODPP_NONE in_port, we will see the following warning. ofproto_dpif_upcall(revalidator18)|WARN|Failed to acquire udpif_key corresponding to unexpected flow (Invalid argument): ufid:.... This patch resolves this issue by storing the odp in_port in the continuation messages, and restores the odp in_port before push the packet back to the datapath. VMWare-BZ: 2364696 Signed-off-by: Yi-Hung Wei Signed-off-by: Ben Pfaff (cherry picked from commit 88d2ac50aa4e3383e185b698a1b3a44a6f7b4f80) Resolves: #1761461- vswitch: ratelimit the device add log (#1737146) [RH gerrit: 052e541d45] It's possible that a port added to the system with certain kinds of invalid parameters will cause the 'could not add' log to be triggered. When this happens, the vswitch run loop can continually re-attempt adding the port. While the parameters remain invalid the vswitch run loop will re-trigger the warning, flooding the syslog. This patch adds a simple rate limit to the log. Acked-by: William Tu Signed-off-by: Aaron Conole Signed-off-by: Ben Pfaff (cherry picked from commit 45bd8c563273fb914ff1960a53cfdcfddb0a5588) Resolves: #1737146- netdev-dpdk: Enable tx-retries-max config. (#1747531) [RH gerrit: 734086f5d4] vhost tx retries can provide some mitigation against dropped packets due to a temporarily slow guest/limited queue size for an interface, but on the other hand when a system is fully loaded those extra cycles retrying could mean packets are dropped elsewhere. Up to now max vhost tx retries have been hardcoded, which meant no tuning and no way to disable for debugging to see if extra cycles spent retrying resulted in rx drops on some other interface. Add an option to change the max retries, with a value of 0 effectively disabling vhost tx retries. Signed-off-by: Kevin Traynor Acked-by: Eelco Chaudron Acked-by: Flavio Leitner Acked-by: Ilya Maximets Signed-off-by: Ian Stokes (cherry picked from commit 080f080c3bc1e87da4affdce28a01b1a87a60364) Resolves: #1747531- netdev-dpdk: Add custom stat for vhost tx retries. (#1747531) [RH gerrit: 0c238ac414] vhost tx retries may occur, and it can be a sign that the guest is not optimally configured. Add a custom stat so a user will know if vhost tx retries are occurring and hence give a hint that guest config should be examined. Signed-off-by: Kevin Traynor Signed-off-by: Ian Stokes (cherry picked from commit c161357d5d96f32144f4b63ee6b06049c0cc0a09) Resolves: #1747531- doc: Move vhost tx retry info to separate section. (#1747531) [RH gerrit: 91d9e4d92b] vhost tx retry is applicable to vhost-user and vhost-user-client, but was in the section that compares them. Also, moved further down the doc as prefer to have more fundamental info about vhost nearer the top. Fixes: 6d6513bfc657 ("doc: Add info on vhost tx retries.") Reported-by: David Marchand Signed-off-by: Kevin Traynor Reviewed-by: David Marchand Signed-off-by: Ian Stokes (cherry picked from commit 4e6c16db31806dfcf84d6ebdb0d708cfa39bd08f) Resolves: #1747531- netdev-vport: Make ip6gre netdev type to use TC rules (#1725623) [RH gerrit: d3315b8035] The offload api functions already assigned to every tunnel class. For ip6gre tunnel class only need to also assign the get_ifindex function, similarly as done in commit 5e63eaa969a3 ("netdev-vport: Make gre netdev type to use TC rules"). Signed-off-by: Eli Britstein Reviewed-by: Roi Dayan Signed-off-by: Ben Pfaff (cherry picked from commit 8732450c2ee76410c7fbebaebe5f9cf27252208f) Resolves: #1725623- tunnel: Add layer 2 IPv6 GRE encapsulation support. (#1725623) [RH gerrit: 0c20e7e83d] The patch adds ip6gre support. Tunnel type 'ip6gre' with packet_type= legacy_l2 is a layer 2 GRE tunnel over IPv6, carrying inner ethernet packets and encap with GRE header with outer IPv6 header. Encapsulation of layer 3 packet over IPv6 GRE, ip6gre, is not supported yet. I tested it by running: under kernel 5.2 and for userspace: Tested-by: Greg Rose Tested-at: https://travis-ci.org/gvrose8192/ovs-experimental/builds/552977116 Reviewed-by: Greg Rose Reviewed-by: Eli Britstein Signed-off-by: William Tu Signed-off-by: Ben Pfaff (cherry picked from commit a3173ee1476840aaa6d90640169bd276568ff4c1) Resolves: #1725623- ovsdb-server: drop all connections on read/write status change (#1720947) [RH gerrit: 0f0be40ee0] Prior to this patch, only db change aware connections were dropped on a read/write status change. However, current schema in OVN does not allow clients to monitor whether a particular DB changes this status. In order to accomplish this, we'd need to change the schema and adapting ovsdb-server and existing clients. Before tackling that, this patch is changing ovsdb-server to drop *all* the existing connections upon a read/write status change. This will force clients to reconnect and honor the change. Reported-at: https://mail.openvswitch.org/pipermail/ovs-discuss/2019-July/048981.html Signed-off-by: Daniel Alvarez Signed-off-by: Ben Pfaff (cherry picked from commit 2a9679e3b2c6fde74ddae362d88ba16db7fbfc38) Resolves: #1720947- netdev-tc-offloads: Support match on priority tags (#1725623) [RH gerrit: 895735b382] The logic by which a TC rule has a VLAN match is by the VLAN TCI field, either the VID, PCP or CFI are non-zero. For priority-tag packets there is a VLAN tag header with a zero VLAN TCI. Match on existence of VLAN header (TPID) regardless of TCI matching. Signed-off-by: Eli Britstein Reviewed-by: Roi Dayan Signed-off-by: Simon Horman (cherry picked from commit 0b0a84783cd6048ca3d35af0f5b4652cecd34358) Resolves: #1725623- rhel: limit stack size to 2M. (#1720315) [RH gerrit: 79c6209e71] The default stack size in Fedora/RHEL is 8M, which means when ovs-vswitchd daemon starts and uses --mlockall (default), it will dirty all memory regions for all threads which is proportionally to the number of CPUs. On a big host this increases memory usage to many hundreds of megabytes while OVS actually requires much less. This patch relies on systemd to limit to 2M/thread. That is much more than the minimum documented at function ovs_thread_create(): /* Some small systems use a default stack size as small as 80 kB, but OVS * requires approximately 384 kB according to the following analysis: * https://mail.openvswitch.org/pipermail/ovs-dev/2016-January/308592.html * * We use 512 kB to give us some margin of error. */ Acked-By: Timothy Redaelli Tested-By: Timothy Redaelli Signed-off-by: Flavio Leitner Signed-off-by: Ben Pfaff (cherry picked from commit b82a90e266e1246fe2973db97c95df22558174ea) Resolves: #1720315- Add a new OVS action check_pkt_larger (#1702564) [RH gerrit: c899ac5788] This patch adds a new action 'check_pkt_larger' which checks if the packet is larger than the given size and stores the result in the destination register. Usage: check_pkt_larger(len)->REGISTER Eg. match=...,actions=check_pkt_larger(1442)->NXM_NX_REG0[0],next; This patch makes use of the new datapath action - 'check_pkt_len' which was recently added in the commit [1]. At the start of ovs-vswitchd, datapath is probed for this action. If the datapath action is present, then 'check_pkt_larger' makes use of this datapath action. Datapath action 'check_pkt_len' takes these nlattrs * OVS_CHECK_PKT_LEN_ATTR_PKT_LEN - 'pkt_len' to check for * OVS_CHECK_PKT_LEN_ATTR_ACTIONS_IF_GREATER (optional) - Nested actions to apply if the packet length is greater than the specified 'pkt_len' * OVS_CHECK_PKT_LEN_ATTR_ACTIONS_IF_LESS_EQUAL (optional) - Nested actions to apply if the packet length is lesser or equal to the specified 'pkt_len'. Let's say we have these flows added to an OVS bridge br-int table=0, priority=100 in_port=1,ip,actions=check_pkt_larger:100->NXM_NX_REG0[0],resubmit(,1) table=1, priority=200,in_port=1,ip,reg0=0x1/0x1 actions=output:3 table=1, priority=100,in_port=1,ip,actions=output:4 Then the action 'check_pkt_larger' will be translated as - check_pkt_len(size=100,gt(3),le(4)) datapath will check the packet length and if the packet length is greater than 100, it will output to port 3, else it will output to port 4. In case, datapath doesn't support 'check_pkt_len' action, the OVS action 'check_pkt_larger' sets SLOW_ACTION so that datapath flow is not added. This OVS action is intended to be used by OVN to check the packet length and generate an ICMP packet with type 3, code 4 and next hop mtu in the logical router pipeline if the MTU of the physical interface is lesser than the packet length. More information can be found here [2] [1] - https://kernel.googlesource.com/pub/scm/linux/kernel/git/davem/net-next/+/4d5ec89fc8d14dcdab7214a0c13a1c7321dc6ea9 [2] - https://mail.openvswitch.org/pipermail/ovs-discuss/2018-July/047039.html Reported-at: https://mail.openvswitch.org/pipermail/ovs-discuss/2018-July/047039.html Suggested-by: Ben Pfaff Signed-off-by: Numan Siddique CC: Ben Pfaff CC: Gregory Rose Acked-by: Mark Michelson Signed-off-by: Ben Pfaff (cherry picked from commit 5b34f8fc3b38b430c05ee39a0c84f8e9da24cd3a) Conflicts: NEWS tests/ofprot-dpif.at +L10571 - Not really a conflict. Had to fix the test case because we don't have the commit - dbf4a92800d0365cc3ec3c0e99df56e2ba676cb7 Resolves: #1702564- netlink linux: account for the netnsid netlink attr. (#1692812) [RH gerrit: ce14b518b7] The buffer needs to be reallocated and data copied when the netnsid netlink attribute is included, so avoid that by accounting the attribute when the buffer is initially allocated. Fixes: 756819ddd788 ("netdev-linux: use netlink to update netdev.") Acked-by: Aaron Conole Signed-off-by: Flavio Leitner Signed-off-by: Ben Pfaff (cherry picked from commit b43762a5ad3343d28e61ed518c97802c5bd8f380) Resolves: #1692812- rhel: Add an example to specify custom options (#1687775) [RH gerrit: a7dd6b6eb5] Add an example to specify custom options of ovs-vswitchd and ovsdb-server. In the example, the log level for file and console destinations is set to dbg. Signed-off-by: Timothy Redaelli Signed-off-by: Ben Pfaff (cherry picked from commit 175b9a6401da76994bac955ebc9f440634e63d55) Resolves: #1687775- ovs-ctl: Permit to specify additional options (#1687775) [RH gerrit: b8a874b82e] Currently using ovs-ctl is not possible to specify additional options for ovs-vswitchd and ovsdb-server (for example to specify a different loglevel during daemon startup). This patch adds --ovs-vswitchd-options and --ovsdb-server-options options to ovs-ctl in order to specify the additional options. Due to word splitting it may not be possible to specify an option that includes whitespaces. Reported-at: https://bugzilla.redhat.com/1664794 Reported-by: Matt Flusche Signed-off-by: Timothy Redaelli Signed-off-by: Ben Pfaff (cherry picked from commit fce20b8b73b1c08bc0f51a04a2109d80e4bc8b51) Resolves: #1687775- Merge commit 'a4efc599e0244e43fd417b2fb38b7f120eb1ebd4' into fast-datapath-rhel-7 [RH gerrit: 8da1428afe]- Backport "bus/pci: fix VF memory access" (#1851170)- Backport the upstreammed fixes for HWOL (#1812892)- Backport fixes for CVE-2020-10722 & CVE-2020-10723 (#1831391 & #1831394)- Backport HWOL fixes for ingress qdisc (#1812892)- Update to DPDK 18.11.7 (#1822653)- Rebase to last branch-2.11 commit and DPDK 18.11.6 (#1822653)- Backport "vhost: fix packed virtqueue ready condition" (#1793068)- Revert Backport "ovs-tc: support OvS internal port offload" and deps (#1737982) - Revert Backport "netdev-tc-offloads: Use correct hook qdisc at init tc flow" (#1737982)- Backport "vhost: fix vring memory partially mapped" (#1798996) - Backport "vhost: protect log address translation in IOTLB update" (#1798996)- Backport "netdev-vport: Use the dst_port in tunnel netdev name" (#1727599)- Backport "dpif-netlink: Allow offloading of flows with dl_type 0x1234." (#1722337)- Backport "lib/tc: Support optional tunnel id" (#1732305) Backport "lib/tc: Fix flow dump for tunnel id equal zero" (#1732305)- Backport "tc: implement support for action flags" (#1780690)- Backport "rhel: secure openvswitch useropts" (#1785586) - Backport "rhel: run ovn with the same user as ovs" (#1785586) - Backport "rhel: set useropts optional for ovsdb-server" (#1785586) - Backport "rhel: let *-ctl handle runtime directory" (#1785586)- Backport "userspace: Improved packet drop statistics" (#1726568)- Detailed packet drop statistics and related patches (#1790841) - Backport "netdev-dpdk: Fix not reporting rx_oversize_errors in stats." (#1790841) - Backport "netdev-dpdk: Refactor vhost custom stats for extensibility." (#1790841) - Backport "netdev-dpdk: Reuse vhost function for dpdk ETH custom stats." (#1790841) - Backport "netdev-dpdk: Detailed packet drop statistics." (#1790841) - Backport "netdev-dpdk: Fix sw stats perf drop." (#1790841)- Backport "vhost: fix virtqueue not accessible" (#1792399) - Backport "vhost: prevent zero copy mode if IOMMU is on" (#1792399) - Backport "vhost: convert buffer addresses to GPA for logging" (#1792399) - Backport "vhost: translate incoming log address to GPA" (#1792399) - Backport "vhost: fix vring address handling during live migration" (#1792399) - Backport "vhost: add external message handling to the API" (#1792399)- Backport "ovsdb replication: Provide option to configure probe interval" (#1788800)- Backport DPDK interrupt fixes for qede (#1738789)- Backport "vhost: add device op when notification to guest is sent" (#1726579) - Backport "netdev-dpdk: Add coverage counter to count vhost IRQs" (#1726579)- Backport "net/i40e: downgrade error log" (#1719644) - Backport "net/i40e: re-program promiscuous mode on VF interface" (#1733402) - Backport "bridge: Allow manual notifications about interfaces' updates" (#1719644) - Backport "netdev-dpdk: add support for the RTE_ETH_EVENT_INTR_RESET" (#1719644)- Fix librte_pmd_mlx{4,5}_glue.so error in Execshield part of RPMDiff by backporting the DPDK flags from dpdk spec file.- Backport "Shutdown SSL connection before closing socket" (#1780745)- Backport "ovs-check-dead-ifs: python3 print format" (#1751161) - Backport "ovs-check-dead-ifs: unshadow pid variable" (#1751161) - Backport "flake8: also check the ovs-check-dead-ifs script" (#1751161)- Backport "ovs-tcpundump: exit when getting version" (#1764127)- Backport "ovs-tcpundump: allow multiple packet lengths" (#1764125)- Rebase internal DPDK to 18.11.5 (#1760246) (CVE-2019-14818)- Backport "jsonrpc: increase input buffer size from 512 to 4096" (#1776883)- Backport "netdev-dpdk: Track vhost tx contention." (#1740144)- Backport "ovsdb-server: Allow replication from older schema version servers" (#1766586)- Backport "ovsdb-server: Don't drop all connections on read/write status change" (#1761572)- Backport "ofproto-dpif: Fix continuation with patch port" (#1761461)- Backport "vswitch: ratelimit the device add log" (#1737146)- Backport "Add custom stat for vhost tx retries." (#1747531) - Backport "Enable tx-retries-max config." (#1747531)- tnl-neigh: Use outgoing ofproto version (#1685642)- Bump release- Renumbered dpdk patches - Backport IOVA fixes (#1711739)- Backport "ovsdb-server: drop all connections on read/write status change" (#1720947)- Increase CONFIG_RTE_MAX_ETHPORTS to 128 (#1730421)- Backport "tunnel: Add layer 2 IPv6 GRE encapsulation support." and "netdev-vport: Make ip6gre netdev type to use TC rules" (#1725623)- Rebase internal DPDK to 18.11.2 (#1713698)- Backport "net/i40e: fix dropped packets statistics name" (#1728610)- Backport "netdev-tc-offloads: Use correct hook qdisc at init tc flow" (#1721219)- Backport "netdev-tc-offloads: Support match on priority tags" (#1722249)- Backport Vhost performance regression fixes (#1672538)- Backport "rhel: limit stack size to 2M." (#1720315)- Backport "ovs-tc: support OvS internal port offload" and deps (#1702334)- Backport "[OVN] Fragmentation support - check_pkt_larger action" (#1702564)- Backport "net/qede: support IOVA VA mode" (#1684605)- Backport cpu affinity fixes (#1687320)- Add missing dependencies for ovs-tcpdump (#1697978)- fixed netlink msg corruption when updating netdev. (#1692812)- Backport "net/bnxt: support IOVA VA mode" (#1645523)- Backport "ovs-ctl: Permit to specify additional options" (#1687775) - Remove useless -fPIC from DPDK- Backport "rhel: Use PIDFile on forking systemd service files" (#1684477)- Update to official 2.11 release- Snapshot of branch-2.11 d3a10db4fd38- Snapshot of branch-2.11 d4ff5b2be7fc- Update to a snapshot of OVS 2.11 from master- Backport "OVN: add static IP support to IPAM" (#1664028)- Backport some patches to improve offload indications (#1655990)- Add "Requires: openvswitch = %{version}-%{release}" to python-openvswitch2.10 (#1662944)- Backport "OVN: add mac address only support to IPAM/MACAM" (#1662905)- Backport "ovn-controller: Inject GARPs to logical switch pipeline to update neighbors" (#1643902)- Backport 'ovs-ctl: fix system-id.conf owner' (#1659391) - Do not check /var/log/openvswitch owner/group (#1659391)- Backport "ovn: Fix the invalid eth.dst and ip6.dst set by nd_ns action for certain cases." (#1656018)- Backport "dpif-netdev: Add vlan to mask for flow_put operation" (#1649516)- Backport "ovn: Avoid tunneling for VLAN packets redirected to a gateway chassis" (#1561880)- Backport "mem: fix memory initialization time" (#1647498)- Backport "tests: Use the default key length when generating RSA keys"- Backport "net/qede: fix crash when configure fails" (#1648183)- Backport 'pinctrl: Fix dp_packet structure leak' and 'pinctrl: Fix crash on buffered packets hmap double remove'. Moreover align 'ovn -- 3 HVs, 3 LS, 3 lports/LS, 1 LR' test to upstream one (#1649008)- Backup "netdev-dpdk: Bring link down when NETDEV_UP is not set" (#1645288)- OVN: configure L2 address according to the used IP address (#1648272)- Backport "bond: Honor updelay and downdelay when LACP is in use" (#1646923)- OVN: introduce mac_prefix support to IPAM (#1647750)- Backport "ofproto-dpif-xlate: Avoid deadlock on multicast snooping recursion" (#1643065)- Re-enable "make check"- Update to DPDK 17.11.4 (#1566069)- Ship statically linked OVS binaries (#1643478)- Backport connmgr: Fix vswitchd abort when a port is added and the controller is down (#1637926)- Backport "ovn: Add DHCP support for option 252" (#1641740)- Backport "net/i40e: fix VLAN offload setting issue" (#1637893)- Backport "Python: Make Row's __getattr__ less error prone" (#1639963)- OVN: ovn-ctl: Fix the wrong pidfile argument passed to ovsdb-servers (#1636714)- OVN: Support processing DHCPv6 information request message type (#1636874)- OVN: Fix IPv6 DAD failure for container ports (#1616129)- OVN: Fix the issue in IPv6 Neigh Solicitation responder for router IPs (#1567735)- OVN: add buffering support for ip packets (#1637466)- Fix null pointer (#1634015)- OVN: add CT_LB action to ovn-trace (#1635344)- Backport NFP PMD's non-root related commits for > 1TB of RAM (#1634820): - net/nfp: support IOVA VA mode - bus/pci: forbid IOVA mode if IOMMU address width too small - net/nfp: check hugepages IOVAs based on DMA mask - mem: use address hint for mapping hugepages - bus/pci: use IOVAs check when setting IOVA mode - mem: add function for checking memsegs IOVAs addresses - mem: fix max DMA maskbit size- Backport "Remove support for multiple queues per port" (#1634015)- Backport EMC reorder fix (#1565205)- Backport per-port socket netlink creation with EPOLLEXCLUSIVE (#1634015)- Backport roundrobin rxq to pmd assignment (#1631797)- Backport "ovs-save: Don't always include the default flow during restore" (#1628905)- applied Fix translation of groups with no buckets (#1626488)- Removed provides and obsoletes for openvswitch-dpdk (#1628603)- Backported "net/mlx{4,5}: avoid stripping the glue library" (#1627700)- Updated with 2.10.0 official tarball (#1618551)- Sync'ed with fd-next (4452afaa58) - vhost: flush IOTLB cache on new mem table handling (#1609643) - OVN: introduce ovs-appctl command to monitor HVs sb (#1593804)- Snapshot of branch-2.10 6bced903bb50- Snapshot of branch-2.10 58a7ce60b9f7- Snapshot of branch-2.10 faf64fb8861f- Snapshot of branch master 7a78d1c1ad73- Sync'ed spec file with fd-next-57 (shared linking). (DPDK patches not included) - Fixed package dependencies (#1610603)- Snapshot of branch master b1ca64f020f7- Replace macro %{name} with 'openvswitch'.- Snapshot of branch master 1ac690899592- Versioned conflict to be less than 2.10.- Snapshot of branch master 3c921cc2b6b7- Fixed unbound requires and buildrequires.- Snapshot of branch master 93c0ef12039c- Snapshot of branch master 79d0dfa4e99a- Snapshot of branch master e46148133067- Snapshot of branch master 61677bf976e9- snapshot of branch master- Backport "net/mlx5: fix memory region cache lookup" (#1581230) - Backport "net/mlx5: fix memory region boundary checks" (#1581230)- Backport "net/qede: fix memory alloc for multiple port reconfig" (#1589866)- Backport "net/qede: fix unicast filter routine return code" (#1578590)- Backport "net/qede: fix L2-handles used for RSS hash update" (#1578981)- Backport "net/nfp: fix lock file usage" (#1583670)- Backport "net/nfp: configure default RSS reta table" (#1583161)- Backport "netdev-dpdk: don't enable scatter for jumbo RX support for nfp" (#1578324)- Backport "ovn pacemaker: Fix promotion issue when the master node is reset" (#1579025)- Backport spec file modfications from "rhel: Use openvswitch user/group for the log directory"- Backport "vhost: improve dirty pages logging performance" (#1552465)- Backport "ovn: Set proper Neighbour Adv flag when replying for NS request for router IP" (#1567735)- Enable QEDE PMDs (only on x86_64) (#1578003)- ovn-nbctl: Show gw chassis in decreasing prio order (#1576725)- Fix hugetlbfs group when DPDK is enabled- Backport "eal: abstract away the auxiliary vector" (#1560728) - Re-enable DPDK on ppc64le- Require the selinux policy module (#1555440)- Backport fix QEDE PMD (#1494616)- Backport "net/nfp: fix mbufs releasing when stop or close" (#1575067)- Backport net/mlx4: fix broadcast Rx (#1568908)- Backport mempool use after free fix and debug (#1575016)- Fix the email address in the changelog.- Backport fix for missing user during install/upgrade (#1559374)- Backport fix for Unicode encoding in Python IDL (#1547065)- Backport the cisco enic patches- Backport a fix for "Offload of Fragment Matching in OvS Userspace" (#1559111)- Backport "ovn-controller: Handle Port_Binding's "requested-chassis" option" (#1559222)- Backport "python: avoid useless JSON conversion to enhance performance" (#1551016)- Backport "ovn: Set router lifetime value for IPv6 periodic RA" (#1567735) - Remove useless libpcap-devel dependency- Backport DPDK CVE-2018-1059 (#1544298)- Backport fix for PMD segfault when BNXT receives tunneled traffic (#1567634)- Backport patches to make NFP detect the correct firmware (#1566712) - Backport "rhel: Fix literal dollar sign usage in systemd service files"- Backport "rhel: don't drop capabilities when running as root" - Change owner of /etc/openvswitch during upgrade- Disable DPDK on ppc64le- Disable DPDK on aarch64- fixes i40e link status timeout trough direct register access (#1559612)- Enable BNXT, MLX4, MLX5 and NFP (aligned from FDB)- Backport "Offload of Fragment Matching in OvS Userspace" (#1559111)- Avoid to unpack openvswitch 2 times and to overwrite all the patched files Fixes 2.9.0-4- Backport "ofproto-dpif-xlate: translate action_set in clone action" (#1544892)- Backport "ovn: Calculate UDP checksum for DNS over IPv6" (#1553023)- Require the latest rhel selinux policy (#1549673)- Backport vhost patches (#1541881)- Don't require python-sphinx directly, but built it since python-sphinx is in the optional repository that is not available on RHEV and TPS test fails.- Don't verify the user and group of /etc/openvswitch and /etc/sysconfig/openvswitch This is needed since we cannot change the user and group if you upgrade from an old version that still uses root:root.- Update to OVS 2.9.0 + DPDK 17.11 (#1475436) - Backport of ofproto-dpif: Delete system tunnel interface when remove ovs bridge (#1505776) - Backport DPDK patches from FDB (vhost user async fix and enic fixes) - Backport 94cd8383e297 and 951d79e638ec to fix permissions (#1489465) - Use a static configuration file for DPDK- Rebase to latest OVS branch-2.7 fixes + DPDK 16.11.4 (#1533872)- Remove ovs-test and ovs-vlan-test from openvswitch-test package - Add an option to enable openvswitch-ovn-docker package (disabled by default)- Update to OVS 2.7.3 + branch-2.7 bugfixes (#1502742)- Backport of fix for i40e flow control get (#1491791)- Rebase to latest OVS branch fixes + DPDK 16.11.3- Backport of enic driver crash fix to dpdk-16.11 (#1489010)- Re-enable Cisco enic PMD (#1482675)- Update based on multi-arch- Disable unsupported PMDs (#1482675) - software and hardware PMDs audited by the team- Backport mmap fix for memory initialization on ppc64le to dpdk-16.11- Backport support for vfio-pci based PMD in ppc64le to dpdk-16.11- Backport support for Intel XL710 (i40e) pmd in ppc64le to dpdk-16.11- Update to OVS 2.7.2 + branch-2.7 bugfixes (#1472854) - Add a symlink of the OCF script in the OCF resources folder (#1472729)- Align to FDB openvswitch-2.7.1-1.git20170710.el7fdb (#1459286)- backport "mcast-snooping: Avoid segfault for vswitchd" (#1456356) - backport "mcast-snooping: Flush ports mdb when VLAN cfg changed." (#1456358)- backport patch to not automatically restard ovn svcs after upgrade (#1438901)- rconn: Avoid abort for ill-behaved remote (#1449109)- Fix race in "PMD - change numa node" test (#1447714) - Report only un-deleted groups in group stats replies. (#1447724) - Workaround some races in "ofproto - asynchronous message control" tests (#1448536)- Fix an issue using set_field action on nw_ecn (#1410715)- backport patch to fix uni-dir vhost perf drop (#1414919)- backport patch to correct port number in firewalld service file (#1390938)- backport patch to enable/disable libcap-ng support (--with libcapng)- Fix an MTU issue with ovs mirror ports (#1426342)- update spec file to install firewalld service files (#1390938)- vhostuser client mode support for ifup/ifdown (#1418957)- OVN-DHCP is not sending DHCP responses after a MAC change in north db (#1418261)- systemd service starts too fast (#1422227)- iptables should be easily configurable for OVN hosts and OVN central server (#1390938)- ovn: IPAM has no reply to DHCP request for renewal (#1415449)- ovn-controller: Provide the option to set Encap.options:csum (#1418742)- fixed broken service after a package upgrade (#1403958)- ovsdb-idlc: Initialize nonnull string columns for inserted rows. (#1405094)- OVN: Support IPAM with externally specified MAC (#1368043)- Update to OVS 2.6.1 + branch-2.6 bugfixes (#1335865) - Update to use DPDK 16.11 (#1335865) - Enable OVN- ifnotifier: do not wake up when there is no db connection (#1397504)- Use instant sending instead of queue (#1397481)- dpdk vhost: workaround stale vring base (#1376217)- Applied tnl fix (#1346232)- Applied the systemd backports- Fixed OVS to not require SSSE3 if DPDK is not used (#1378501)- Fixed a typo (#1385096)- Do not restart the service after a package upgrade (#1385096)- Permit running just the kernel datapath tests (#1375660)- Obsolete openvswitch-dpdk < 2.6.0 to provide migration path - Add spec option to run kernel datapath tests (#1375660)- Backport ovs-tcpdump support (#1335560) - Add ovs-pcap, ovs-tcpdump and ovs-tcpundump to -test package- Add openvswitch-dpdk provide for testing and depending on dpdk-enablement - Disable bnx2x driver, it's not stable - Build dpdk with -Wno-error to permit for newer compilers - Drop subpkgs conditional from spec, its not useful anymore- Fix adding ukeys for same flow by different pmds (#1364898)- Fixed ifup-ovs to support DPDK Bond (#1360426)- Fixed ifup-ovs to delete the ports first (#1359890)- pull bugfixes from upstream 2.5 branch (#1360431)- Removed redundant provides for openvswitch - Added epoch to the provides for -static package- Renamed to openvswitch (dpdk enabled) - Enabled sub-packages - Removed conflicts to openvswitch - Increased epoch to give this package preference over stable- pull bugfixes from upstream 2.5 branch (#1346313)- Enable DPDK bnx2x driver (#1330589) - Add README.DPDK-PMDS document listing drivers included in this package- Run testsuite by default on x86 arches (#1318786) (this sync the spec with non-dpdk version though the testsuite was already enabled here)- eliminate debuginfo-artifacts (#1281913)- Update to OVS to 2.5.0 and bundled DPDK to 2.2.0 (#1317889)- Provide openvswitch ver-rel (#1281894)- ExclusiveArch to x86_64 (dpdk) - Provides bundled(dpdk) - Re-enable testsuite- Enable building from pre-release snapshots, update to pre 2.4 version - Bundle a minimal, private build of DPDK 2.0 and link statically - Rename package to openvswitch-dpdk, conflict with regular openvswitch - Disable all sub-packages- First build on F14python-openvswitch2.11 !!#$%&''))++-.//123455789::<=>?@ABCDEFGHIIKKMNOOQRSSUUWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|2.11.3-90.el8s2.11.3-90.el8s2.11.3-90.el8s2.11.82.11.82.10.0-6    .build-id80a0a06d08c395716b23cca5162ac17f84690809ovsovs-2.11.8-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txtrequires.txttop_level.txt__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycdaemon.cpython-36.opt-1.pycdaemon.cpython-36.pycdirs.cpython-36.opt-1.pycdirs.cpython-36.pycfatal_signal.cpython-36.opt-1.pycfatal_signal.cpython-36.pycfcntl_win.cpython-36.opt-1.pycfcntl_win.cpython-36.pycjson.cpython-36.opt-1.pycjson.cpython-36.pycjsonrpc.cpython-36.opt-1.pycjsonrpc.cpython-36.pycovsuuid.cpython-36.opt-1.pycovsuuid.cpython-36.pycpoller.cpython-36.opt-1.pycpoller.cpython-36.pycprocess.cpython-36.opt-1.pycprocess.cpython-36.pycreconnect.cpython-36.opt-1.pycreconnect.cpython-36.pycsocket_util.cpython-36.opt-1.pycsocket_util.cpython-36.pycstream.cpython-36.opt-1.pycstream.cpython-36.pyctimeval.cpython-36.opt-1.pyctimeval.cpython-36.pycutil.cpython-36.opt-1.pycutil.cpython-36.pycversion.cpython-36.opt-1.pycversion.cpython-36.pycvlog.cpython-36.opt-1.pycvlog.cpython-36.pycwinutils.cpython-36.opt-1.pycwinutils.cpython-36.pyc_json.cpython-36m-x86_64-linux-gnu.socompat__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycsortedcontainers__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycsorteddict.cpython-36.opt-1.pycsorteddict.cpython-36.pycsortedlist.cpython-36.opt-1.pycsortedlist.cpython-36.pycsortedset.cpython-36.opt-1.pycsortedset.cpython-36.pycsorteddict.pysortedlist.pysortedset.pydaemon.pydb__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pyccustom_index.cpython-36.opt-1.pyccustom_index.cpython-36.pycdata.cpython-36.opt-1.pycdata.cpython-36.pycerror.cpython-36.opt-1.pycerror.cpython-36.pycidl.cpython-36.opt-1.pycidl.cpython-36.pycparser.cpython-36.opt-1.pycparser.cpython-36.pycschema.cpython-36.opt-1.pycschema.cpython-36.pyctypes.cpython-36.opt-1.pyctypes.cpython-36.pyccustom_index.pydata.pyerror.pyidl.pyparser.pyschema.pytypes.pydirs.pyfatal_signal.pyfcntl_win.pyjson.pyjsonrpc.pyovsuuid.pypoller.pyprocess.pyreconnect.pysocket_util.pystream.pytimeval.pyunixctl__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycclient.cpython-36.opt-1.pycclient.cpython-36.pycserver.cpython-36.opt-1.pycserver.cpython-36.pycclient.pyserver.pyutil.pyversion.pyvlog.pywinutils.pypython3-openvswitch2.11LICENSE/usr/lib//usr/lib/.build-id//usr/lib/.build-id/80//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/ovs-2.11.8-py3.6.egg-info//usr/lib64/python3.6/site-packages/ovs//usr/lib64/python3.6/site-packages/ovs/__pycache__//usr/lib64/python3.6/site-packages/ovs/compat//usr/lib64/python3.6/site-packages/ovs/compat/__pycache__//usr/lib64/python3.6/site-packages/ovs/compat/sortedcontainers//usr/lib64/python3.6/site-packages/ovs/compat/sortedcontainers/__pycache__//usr/lib64/python3.6/site-packages/ovs/db//usr/lib64/python3.6/site-packages/ovs/db/__pycache__//usr/lib64/python3.6/site-packages/ovs/unixctl//usr/lib64/python3.6/site-packages/ovs/unixctl/__pycache__//usr/share/doc//usr/share/doc/python3-openvswitch2.11/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryASCII textpython 3.6 byte-compiledELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=80a0a06d08c395716b23cca5162ac17f84690809, strippedemptyPython script, ASCII text executable  !"#$%&'()*+,-./0123456789BCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ RPPRPPRPPRPPRPPRPPRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRutf-8d1686011167749129079f7c2b9255ddc45ae3e10b5bff870e5ac6f49a0c1c4e6?7zXZ !#,{] b2u jӫ`(y,yŝYrBw\SS#+eh]as6Yb627 @ Сw&^]K0@'ɐyuS7bn%)BF?9} c@J g6y_#6m/GxwvgS?XK=ńu_ds\aVOox}몘 W'<%yBˋ<% P{D N#jP q8SޠBt < #RBg2)hVR-|{yxHO6K%+ԩ7``QZ!筯xh$E`ⲹ> μZ =)=[U{T٘2_*pagOZG(l#pf.KkdmbR 1g^FX,u_I&0y5C= 3Ѻ#-2({J D )lp\ C\9Ԇ>x,QzPHJsLG v~zL}EGd82yAD6qlA]Q$[g+i7Fҿsr[-Z}zGCX 3x}):v^* O딗>К; :0BҚd=(^)߮f`!Ae~J?ljN};bJWH)1=O> Eկmw\7,[KGJi~E0rN`r1#l""I (۟t6\C?WSc@F Cލ_͘5Nѻ<@m@^yy.twY旙A?pݮS8WC T'-6y՞LkѼ=;ydik~=Bod- K٧9+a=p cFLAXٮYnGcHh9?O)hI0!H^|U gIĿ!RYvЍB>* G IyETwblT[K?85c3CnTk5d`fj(#K%R8%t '3[|Q;* {WtW'Vg???|лekg{2Z2n}$ޮ2Evcvu(lDt[z̜\7j6 e4B;NQUC|>ЮLޡ%[Swt;fIN+K&~(:Yej)bs^%$Z Gz-X(Z𚅴4E/o[=C-)A/zH]YπQsVΛFeώS w*%vCL_jptq ɵ^ Ӿ6fژҪ`+HW R;\㥱/Sr91U!pZxxlϯ|: Kg;Px｛s}!*;Qy7/X^ǡV%Xc4C(ܭGrs 5>Pe8$$uTo'7qA`~{޷\)<<,:`ш.1NѾ.*= -z!7Qd7\H;a,H7ceT̨UH  6z%gXIi*6c80o @ݐ%G)VҎ'hMJBZ%}L9Pdm!'-{>1L-cN;MqA} |;\Ob J8Vsމy~\Qv祛PcD[9T/beLrpl@u>>힝:FT3 k%QkyDZmh#=BAVV /0/|T0,Yp,ՃhʉDkuD|Mz)D,QB`}fHASH!V ئxFj?В:U/*aק)K$|жmO=᜺%\#$^"Z@ץ$VSH,cMTJ7|O&$SW=`+06)J(Hၪdim`֨<;p] 53Y`ENMj[|o:Xw *{">Lq܎A{Fw ,N͑PZPMyW^p^4֙ ,qu gD+AP6N--&+DVFL6&0N(V/)Zbkԗ^[5f`dDZkoSiX]O;' "qJB|l~u ,qAKZ.f#[;0II(9}%n_5.2*k;Ŋᄵk֮N%w|fE9yeGVspd/G]ow.:;u¿A;a D!ʘ+I52/rɛAN kYSP'6oe{uJ AB.zxTjIuH;sbA*zm:fݩZ=}=y()*xB(d/YKK6MlƷS_Y~ Ҳg1IR#R̻ ?NX}&YkJ $ɝrU()q*xG4g#W)Gp;(s֕cv̓K/qU(SHHzާaYw &>pH9[ ZC#"+Wa}qy.%YMl Ω8MS < <Tw˦r&'Vӽ$&|2{mgtK$DfA~ _eò[/ۚ@™R`G>@GֱmML& u ų^_=;0Bsԧ6{*G w3(gA49_< 1J3r 5ZD^~ai5}֊oYŭyR^ڐ;M@UBZ0O9驀'Ŗ<}Uqzz& v\bx6J0KS:KYBM@JZH7OԹ˧b"́ګNf";3Y*kŎOL_:A.Q_}n{qdt`{xB&7yqC@\Y >]';Y8H30|ZK=XFLq՗K,rhi9)g11 FƊQτRti` 4'ffߢ2q\\Qy}$T`N!ZBṵ&5HcfV怶&SyDž. @>@A<sj:OS>>mu~Qk;ys/@#&FhqȓLYrc nN1kuמ#΍ZGj)VJzwnj2=Cɴ81_< γ!{d^s䓾esʷHqULÛVǁ*e*"aJUo-M#{OYp^YREb(@D-Οn&$9ukd_sNU; .a-]bڻMg5}yhyQ uqt+N2;edrO>8XP1.$-;Z>bP"-K(Y^ FWn 4Jw:)T*_Deߕy.r^7shk%ܐ=&YmcݤkcO#􊯿&y?k ӇbwqE7aWe(q6c]A[lޘ,j=8vMm$:eî!3G!G춑9# LʣMUbp6k;g):E<\vZ`YVْxUsTհM ^j/vJjr{/Ŝ<մl;7d#ե`NKuZM%MƭżA[R߼.Fups[$:E-kkΊ)fe%r#w\'o+B?|ljܿߵsMs}n1 xy{R~XD j7KIK6(jiNn\s?Mz>P;E^뉈N^iT'oi  mɇ5e˺/YZK'!n?h\TI ޻I޶Ua.& YE2lNk[C(x6mwu.̞G$"(::kDY + >•"_B\ A۶ƻd"*UJAd NO *&HoH z4OsBy&- 8̳Sؘ@H +^<M;ȶMY64COAct}3S !v #@mR @\B^>iM`}YmfMigSL{|,? Da*~I&VX _n+,>{#_G4oSt&8چ L a[R}.Sw?s#x ,$H8VN rn'J1Cn 3xɹTimYnC{@km㡴-yuUY+)1kg9KpFK}lj\+¨sScnW8-ZP':TOu谤/ƳedT"c$R ,|`s7LԺL+2~IY`dd6zrv2HR>=zӽaA[O)*>kv1wƒ)/չ%3.Α$1&R+SR.جɱoS'-Gw DxdGD!hQ,4"2|(N!Z KDJIFe{B[=?w#2Y\g@Qꌹ\ՑD8 :Ao5yRFxac _ @X!X‚kN/EacӸ7#ij C KWXdDn$Re^ E2AxȢgK0B@ |X;qk'ϵ9J6'eU"ɦF u[.קp>`bF-@]^Z7487$WՒO!<X9r/vP=Pb:C?\8mQ8^odM/^pӢH, 4aAzA뜡q!{&_*g7{em ¸`2ئ^yb)er:fBwB,T%[UY۱5~kw ?Bg32YdV:xICjU:9D,a#((x]0"k]bH3c($һe3aW[9q6mPpqu۱]M@)*]jllokH;?+GOw~\*e-&~gIgjbUv>:5G4Iƿh᎐RVi!NoXau~\d1!EJ#&Mǹ&P丞1-w ȤG ƌhKÚ#a n4jHGauеo4_Ȃ0Ek#"zΚͪF;~2dݾr+g[$#] V0x9 z)NI-v;P4NtSd' [\cKh>@)j}|ap4A&g05`2jʋqIJ5} =:q kF;ug"L,Cd>І ?-2[{A=%mI6#R;xpb쭿5D/:;ڣwH`BvA>3:17\ta''&o=7,C~%Xlo&9Ӿ?$vsl)p<<w]q<3 ՙ綵#:tJ7a!Ohn^dN\-_z@nuK,qbѳvV*"ׁttN[7ļ@FgSo/h?taIvN鏡ecҭR?FY;VS*xCʱ:d:p ȕ,&]IчIfYO7P2;/{P8ɜou)i K~gS R>8a̩pzv |%YT?:e]3F;Gm+NeTH#cz^VF}:%AumGkCYg&!f@eGjz_pxMapLP @(x*=\orV.xLU%ZT𳂜sr=N`}$q67z L2 h9\C=@RRC[; A4#hjE Ћ Ft0Ne`mD%Casą1tb˅[OSt(T]M= cWaewZU1Kٵ4vAGg^T:h| 6N ܏b9\7y?|[-MC('r$"Al\'كQ `o( nc yz` Ȩ -}-HLbaTm|9գ! v1s ?PD(%=AT/i5TXM+v Uܟn/ϮqSׁ)pE ZI_8` _f}XCG#SFl;7t ߲bD2wE Be vEɬ,TLG]PQ+X[/c~PQq8U"Gj_RQӀ230+I(P۷va·k K+Σ~ N dȏ7 x@z׮Hɵ95w@WFG ªI`w)f Q)'Zb\K<Zo9_ty)#d6ަn6 Dq,(TT A=]]XТIc(Q0^e Cj8$%*emZj GЧK[z%^ O /aXZ+ Ζaj3r']:E (mZ'x-v6踔oJz^ )Ůr ۗF5`x}xbX Pe#l/УzK5k2du5V&A?pٓIK4D,Z}B?UW+\J' $ \Ĉ?|}*X1G]d>/kqt0l+/&CnNt9F<4S̀콮*t}qVpt 7g7@j"֓z-J@p.n=j rMQ;f7M 8ny>aS-i3zC4?A"QwF./SoKR̗!TH9$g60{e4ո]i obEĶ3YO~B",}ǝ (46d tf|)%*,Owmw#4jzAoc\.YpCa**KW GF56030}t$`df=N=$C.,5e_x[NMs]"Ÿoh_ ҹ@pI+yY9/[ɁHv3_/iF(љ^idO.z,CgD8lWU#Y/=ר rZ!Gx^x9V .| :#D'TҢ$/*-{ϕS:E1fL# Zjƾ zC;@f[VٝmC`x_Xy{% wkkg2_:G*|ϞD{le&IFF5uO.#R Fz)w~-4+뀏dVw[7AxMb~\Ք N}8qQR _hX&O'~*bQsVU|C{ iY3W}jIw;U7r{Dc"m쩹* L1[c"oQoY~W`~ͱ{%% [MX?WO&c]&kT#YЉ.|ڽ+N3r )Rm`9n;:Y?+5[B_?2ÿGō zGC=jvj6*q\T$mba,VXy|$ / eur1*{|T0I@׬gN 5Scg >^|"44a_Ud]jV ,`e-)&[Ц1>/7Wm5Z)kspu4I<10 D riɒnm{Ҫ1$V28_Uer/U-ٱyxߝdv] pބW5-tYZʋ~Kŀli A}ReFժ%Q!KAM)k f+hqUt[1LPs@WX=B=ND+8i xة}01a0`Vdd#S32:\`fE%Lv0/FڀOs}ȞDh~P4Z^{a%M8 \*6żMhBttEl?i-yO3̍|Nr] BceeVuV 14 b$vMYUEj1R4h4{=k~wwOXRQG켊Rֈ{R=v(4L_QV ̽[+ (bcj!O"WDlj#hhra <CY辱&iV Kv4 ?5PP3ųq1wwNTwUcpupȂs\XTȪ.S~v=uK?47P:^!>ޢ[$Kx:q_J*#7Ωi W0kWLʰM[4l4] 2}di1óahy{)jE p8u^tQ.V ACpNI??Cc9SGmȢ],Cf[$r7>INg/? N0)Nr5,MʙHrbβqSђiP_R[<}D, M݉>Jb sݖ@ HD|ؗiA%!+ =p dJz+zB-??( {N/$כMa4V#U/:f{ՊzjeNM~JTns/ Tk}le[ޅvEj8)D׈+5o&>ƈrTщ xĚaH!aR31Q a^0*Zsw^9xєE/ft]|?1g⑸d_zTRۃkT]w >ߘܙK]qvUS@#Rb7l?ԌKVD(ozZ;n~v@V僦6w;Φto 87fobg 4[3 ts?$M.I od"ϾyBljQ<'(kQß36)4Z6Jk.:vU/e4 մthMO5ciZ3 H$:(;\ZnpWNqW.bz`. jZ@!B騤*<]<&4RN]88Y%"TDסXdc@} X>DpO)˓/:]ݢ\;AGk[T])X=<1! FUhpNB ezSyuImɕfue^*-G\d64^y̎P-.L6ߛXc+' ҸaU7 Eqԗ5K]*Cy7*㭂ZŴz[ wUyϲ 񻞺2!-E*FkAe;L$ 1w'{{M=ZIPnmh}| Pҁw 3̧>''5"}!~>,vu3+kZσB;:(NtP U s/%g#݊j㺐O M {%*OP ,Fh8K<ͻ3$MnsWDFr L}/cnXnмjEK׻^9Z"eŃ݆ዓҰ#{,t؞ F\|MX+ca0pjZҥ,iFCn &WJ#}>4):mЦܣ1gF?ph{ptMT՜-"CxS*(<`x9c\L̖ħ)E, i,:!ٟF"ܧ J8HCϥ[%C<^5!㧁cѬ8}W-E2bÎl;?rAxދN§髞E֙1nѦQ}v+Lŗx9r=Oa"[AmMnq5j'@7Mz^׏!K̟<{B?sQF](o8zePٳS{ӝn!Tз0NMf u~XZ?6YF1~}tbuN{viF`bY l~.~~<ؒkF0 -ҬfA-gYag!Ҟfr%EZx<[Zly"Mq]5Ve.:d¯'uF%PB??αv!h: G2x/wQߏ6 -dk@ض-Ɍ} v+9a8fxT%KoS"wT HM^wٴ|laڼEc۱Qf[LijG4k?qO%nRoM$i_W_JtJ֥yF8qk?5zڋ8Z.*lŅ;}}&HaCNJqS774̱z%շ %\&<1\5U%} qȟ'lVe`}f'Pv8=l7hMƗ5JPaO2`=tb~ u`a\:a|S敵j-8T?39A i4.dNtTMc1i/5a'}%Xپԧww@΅`%ХfQT i.k;Ȕ&0$c<ئ{Aإ˟#[F|d|UEQp=킈 rFc,YWԹB2*CAWt0q6 48˱L}#j#ǩbJ=cyk-Z%̞ %!E-ړR1WI޿8EGC_1SBDJ.a|o/{n\\hp`wo廂/L ꉜ;damqB?y1.C>]Ji.H`J2s%cGG'E͋3L?t`!AQ:\x-;GG@G{Oԛ7KgG ɬr?rs(|pXɒDzUC kuKPp@"cE#(F2:2oPy홅Gn%kMfͲX(W[T#j{|3L=L7s>H \f'n/ xYg9%*?h0tU9iӨ!zZM|ۡ;c\<*H)Ru5 sfȉ5!7vQeH'җWX ҚY4.(f%(=ACCݬ$Q.f-FKz_r-#PNKh%X8N#fߞ~lC,87p_~*SGDNK @G~GEd_ӒMSe ߀  4Мg B2V*HɅ j5bw٦I?m+5WbQáHSjNDǯ T܊Y5ia"j7WwrOEf,HHwi Q.0!3p0g޿k"~%YQPPϻOז2hAB`OwŧCgO .QYI&}$ ) MG&n 9$sjj#C6 󑶩&?3i T_ ?wwyO&~u!'*TPd9 o.JT]]M 92lIl)HQHJ;rpğ[tr+g^&uC@ǩybwG|߂LP4b2x{ KpqT :yr)d6>,(<s$m BOӍZqS *]}X%Q:z`S'!=mƚbu5)2us.v.Ob˦B5όȩQ_n476!y7 /E:Zkyk BS|> S5FW),F:3խevq# `)&y9R؆寝W~ڙ<.L5F`GdU\klМcǨ;1֍syd|#|>щV<2΍t.ƗߺW.oka8LO3ڔ^_hCRs1'dItZʂ;,@d H &&1/qQ7bx3$QC}Z}u( !;t3i`ک[*pʣn:  S.<)lRr9 ֶ4!pu䘣[Ӷ-J: ͩ 0Q9)q%"3tf)Uu>ȩ`r 1{,lˎQU{ɩv+n*bs%fZ5lTqՅ},3ܑLr(Fs] &GviU< ˪.0dY4?5S/d#90U^&>ET'5`XElՌJ44EAO.!cuυtN@=\S@vy_U] dFlz{' ~7clo$IĽ˻OJc.trFǔ@D' x?d#Cb$÷zi0:7Cc*[g5cysx啷'<X?T!q5Z{zkbH%}7 Jdm )$H]2ըcZilP6|iy -3};2#L[yt! |Kx&5#٬Gu*=_S LtȢe91 N Q&~LFE 9kmq/IQdmuBh"GqG&AFCaNM<}>G*+4RB: 6n}P2jkg. wi~:X+W'"Fi]b\5Z9L<}i60\p(KVל I1ݡd܆R=4m30y/Ț)dNc^}n&rD ܁4䓾HdI4SʧJ]9z*5pnoKS[f+|lXs=@]6>8r4`@GjmE]z/*8f6_u1>:fNOsֽi+@} ସ`#fMB8zapwc)!D||ç>6UX_:!hatf`s1 KšfdX>j1? Y?-뤚n^qRmDZZ=3s5@ؽbjՁ#[#Ϩ׫@\yU5~*9joEä]AOr[Ij`G5Gȫ3sZUK$T+\.=AB~4v3Jnc m]{D >S0!_g/ԱB a׹#̇C[|Ź6uh)wc-CX 6#EZ0IZj$λ0F#VbxN(v( m#)TL:6qB|  FUa}G2^&e .7 L182@͗<]E%0o1V#ażt W\rx]^JP 7@|e`%T@zz*܂H60A7qQSlySMwu% Tݖ %m& wI2Gxe` BOƮ[ 0}"`_*W9_(ɗns"t8xn:]*yvh>dY9o<ҳBڳs9W"smes'NƏn4VۢMWb(XR]VW:{",9ukV7g;C^ll ѻnQQ"4_mș m!ʒ.`;l!X?WD\WC]X1;|L|͐GVScBi/3G pJVKU#X!655ӡ)C i_j?xv eXW.#aڈ3 /<[qD7p(LW)nE־'XeF}paSAZO"٨!MK:/dZ,G-5y6̄@F6eEMmG$U#*ފ뉼D+y:Q HhR*joۮeؿC1lgNoKaTs{EiN,:k9PݨLڵTt MG)) AāD N=/&no+["EO>aԞL"#*1'x{+@wbJL 7_z 93?[G zyl,{T8~!eQS<Uku;[r~] pΞY`RVx,T.[ZhUD%-[C!c<=;"ZZT`S >mٱoSNl-SN(>":##V첥O[uF}l*lA~kE, ܐF ׯdrؤbp:h3^z(W&`s&=XיPamSs[3͈% +| kgI^AYUߒ#,F#;ăz$DZs|4qYd|߳` h~Sftښ-Ȍ "xC .{Hlְ(yAZE}7`b_Ԉu眅|l WnWai/LŜWT=p!وlf|V#4U)7't ƞ _mw^0ƻ\y;lM+%dy,3RgЋ#F& %hxD*2& u$ws;zME#$ sTvN3"9`'y$4TUzR @=-N(MvKD%]^m~J?0Z~~#6kFJ| VT>Oޖuώ(> TFc:e$\R:>͒Ǖ 2.YOw}rG9b#g3YR p @(`K'\aɥP.}mo ͸̺CNE >̅a&.8vUx}) NtV<:ތ=WZ{2uS|ѻU~LR LB^Gov[Sk֎9zS!!TLˢHjѭ5=CL$DŌ9 i/=m&Ui>K4+WhjV=|iYM1)/}oes9g% Th?ȌM;>c RM|Y,꺯?%\<|(2W+RLHN['A[ |m+V‡뿌 'mz3k{>Z|H=֠Ϸ'ؠI8c GVt kM&pgٗA-0PP>WpmnW~$Ew1ry 9L/>c~tGNk,hĿN[=2eM ~ňe,?K95~ꊃxGBwܳPjxwV7KGBǪl9r/J}l-K-i~/u ,@LO.EŌ}sίWTbE+kȿ5`a.P 7;l:;՞nWCdjiv>dB _#Ч-ڝ~+6aVd7U6J7O- ӼAl)um1VtȬ9g\'bD8iI[RaJ |jk̇O*%y_y6r}%YM!O:LjF rgzw]iȘT\*f.T =_=erYK;/3KX0y\% EwT^z-2JЇOF8_]WOo[>q>`Bg2op{L4:@)hd^2e\-Q[}djF "Ibl y|↏|4'LѼd1:(B_a˼6XCKMW.2`9WW[KN3Zx؆GUiҖnN8PL8Ni.8ZM YJ84 .U_fJ\MkyxeAaa:1A;H` \MA6aPOX\P۰~ 9 ,|wZviD uZ/l}MTLv c*#Rk,e3(\p0:  Q)h:XKz-4SJ7 !=OXziPL8-C\l.FDH49usJY#c&9n| A~Knm2ja;ō='`ZiwBj+8D ` 8F"8{9<]^DodS =,J~N5b+ l_% Y-5ug-}2+t!|S6f8D+ډ2_D72l$j򸿁C3hiDGL<_Ȫ+_5N"зY20;-x,/m$oR@[Fjk Կ n t|<%'WtX/jٜT]+<-BWnPsoyeHP]Q1T/tOmA B:tANYB$Ky /&u ~AvpC뚓r?DKׇ:qECA̗&Fhb XW!XE6n^)yz!A-gd]ͣU}쭝gf]7y9(RjLt MwJDy.myׯPռ3#SCV`7ǐGdaŢc.*Yb;Hg 5ztGk bDmqLUCk(T!{$h!RBq렑IuHO/o J8DУ󺙩f ݔ94 #qsQ%\AeݗO8A-v}ܴf֭/z|As;"'P ovkDӿo{mQu1M5l.|\F2[.,hA8lyi "#GW#"$ne޶zuzvNvŎxy/aG}\qV٤c/=bT.#TMc( )!'zT]:cN_yP$/8)Bwz%xՅ 9g9q^{_cE'B6?x?91BrbZ0F1*êjobl)hPU(dqt eS yC>T;(8(3kԧ.z\:^w"> pD w`9E$#NA{hMac* pȉ}io\>٧烸h~@a,LG#} |I1F'xHWA', = >'m nQί@a7`xZERMRkeo)j2]u"ur\07DW?>%N7L>3/"G='|J]6f_I:" ae O) @njU7prtUEFC#Abu_ʤ*/#oc5Pf\#rH|!2'Pxb|u)9/D [>[s:r~yWx~ʃ3i mRD&L(cphȇEVL9k;rl9Q\ܝ<)ȡ5r5qe/ۊ#|VO'Zeb<:cGlKyq3#M]Hx 5. \'..ckJGVC-ٱiM,$i=n6b5Hui^ez1%>3lȔ] B竽}EL_4l]%Ȉ BS** UHSDm;&&xMqƸc_Q}nKue,!PAr#|bBXJF C|9g~y؍4RZX-A S-ң+AwC/lxߌFXg#[{/l;iا[$ ඐQ:{bC^Ңݥ=qOU4GCf/ D("CWSKәK+Kz`XNZlNbJB*CM߰MJE8R޺6vVKL~M u 56Te!~V'>/؄38}gezEN& zX.h?yP΀ߥGnR(OJ9)C5m-@8k.GdFy0t. wkCҍe !W?$~-S+ۿC9)$T R8WWo[rà͖8&`T#X" 1l x' Q< t|ַzJ@"_sGrE|?2΢&`QDmGX.`>w\0֫A >f}`x>Jϧ)NFtuY!wb" S0( Z"hHbA"j]#"d:Tm !c%t"Bl kJ? z{uldbcWpÔEt-d~mLf2&Դ!mwNJM)@e媬e[ȫ`{ebO#t/O'_Tg-Ej ˯[%Q'r#[QETroݗPhB랢-WP;O0*>j}FݵDBVվsp6j\™aY T|Joh|Ft6x5уxXt^u2Q/CZE 3z1g@o \dn4a-_m} -r)$4Ù #>g( 1`hC})1`D8ʘk^w"참@,_Yk!.K&`X|A1ظePᔔDl$Ӌ)r^q 7@2+LË8R1W$Dذ a'6i菲a`N~LzZM`ePFrԄY[nR}m bg٦OLE4(ƼjfjK@|?cYkR _[6<7bĞrx1 M s֘%#(t!T)'2?f˽$ܦo5fY4y+9fk%sA\P~^qN<\ %1&xSQVVU&fZ^],l3}Ol`*8xu:yY7'E:@d_Myc- 0L tm :xS~FB<6P|罧hCGz 6YVůӢ: ~3jF SD6l7 O8s\/ cVdl]YVdGoEҤ*c[W5h"A?1&":vp@q@轨V橕R^5X2Dq)#a1\]3hL`lʇ?M-]8y j":1iZ?eĄUYV8w4Ew7,76e 8m(+f;o0:2L1s5AsFmG!dJbOA, yijeel _cqmH #m1S+} |.'_>-1o>=rk;ų'e37ރ~$ <% Ǣ2>jۭO5W_yǞݥX| 1`B.L .*YEW$4w]Al~mU3o\;:ԥNKUP WPZBd5ôCA͔?[$}J`uuWQј I(n'&7OIh69ݍ1zBpn& i/4 5TKJcG >oyUG~bMjC:Q}4yeYcdN3 d'Q ;&L$w><|.{Y E4d I U"}BbL.m5>-22$O%ȞRXǨz^5"=ݰ:d> N$p$2?j>zt'oK{n :&fS MJfjjIs W@6fL^F,%[~cu0Xg@ $6k,4kni%0~0Jr|vyjy]XIrۭ`v?i"g'6JŝW<&AI7. zJ{ЇQR1`XΎmDzWT鋘Qh{f8J<^P ӳ6DŽ#ʕ5{yζ(:&Cۭ7 IČB 8&+>" 5"Ej?WJ\ xܡ a\iʳD}\K[ty4tAS_!ꏍW9~-1V\^w\F(?@Yz:3w.)$0M}dZd6#Lʽ_&9{ִOG G$Zc'ѯzo!b .S R, N(ʐ:7 ߳A2:O)0O;FXzI͓"7E dwr,~Ԇj#c}~ꌡMUGN>_}D'1B+](F@RTh9}]O5q?(+7h|%+Z IG2c&*;ge*`ET已*ae`'2 R0DMk&uj*sЅ^MCc+߸m,ѾM!|~jS,d=.C7=ׇ+Ha*`CWMh<40Vh*d!8+<+lc Nw> G@ku^!#QV!*iDQpw %Ta=g;DP &cɊ,%;=n-=TsdpQ,[_@jWKRMa)eeEWpE&L" ~q8RD(H3p,F^pm4yfšr֥a9=2V_0X"c P9B>GVy)S#>Ul6ObIGMJ3}|Ama}|A0_0tj]pRz`ayVC&m~f[FTDEZЄR]se, lɷMQ7 eWс||WLJ%$A eeX wWǯx B*;S=p+)F&G?UmZNJrHEuK,zb_]PX8xߘm5s[~!}z(W!k 9wx/Vս89)Cg%IxZk'(=%j2sfsn%[d5) Âɖ#)t Ot6 _l1,rW9S=+&R4,/^FGO+3tTd{ZyzY&ZEO^ zOϪあ0ʥ^>Yl:1k_EiC˹* n\LUCgS"'X07֮x9IJSuD1Nlg \5_Vbwtt%F?ޟ7U6.}Nć $i~V݄drl_CA,g|`Ox/8*?Rֺ-х5(- 6e6WV{rsQ7cAwK9L+_g`u#4t{ 8%fSl,}o:Aߦ+t?pE ٔ%(1EǠ9/gEN\`8Xِr>)oo@#r4.6a.41kGE8[65l3!Cw(u [z q) P]Gpد9d< tpN++<^%[dah1ƆˇRt}h.;+{dWDWqPaMǎbp(A[4^i> #7Fg&7A)]fE|y FmN!4+P ܦ}W@Bn+9g^dKʞMہIR'1VDI]<ֿ@ -kOw&rҤͿ2^4? ܣ5-ATIm^$zxLYT_mS]EGOjaX>L?p;}| !.Xk~zd0Y;gK3=^l #ZG񃱵'$]MGhAP_xQ{Nhѧ),Ҕ6͒`kӍǗ"|L+y s+ x%jKtQn煟 4 "@gIP|$7Bu= s?VNHv!$ޒ+km{◐D'%z4#;O5 F=8~gL&b&z\z@F7U1`kf4]Qz>ETf 1;0:ǣ j@+xSJNj+ 95;t`w,>";i!$aI8-فTf*zTcu*xj]\qak?6B`_naX ~n]:ʝ݌ǑǮ?(?{PAx>A @2>a^l9Hve8@op,e֢8zr5tK8i()r8|&q dH$A~@ m.&ws7d\A*7~0-{4ԚlrMJ(Vh5 ٣vyw*M:%UTUv\ r!4?v/Q(B}.ݓcϋgt1X{>?d;e(`TވU5ѮPS#ʇ;_P0*oDcDN6/E'[]QQSҖӴ"!)8"T}蔓}##/@i4雾kcٝwyOk o+qfY~cnfb8+-ul+c/X k+FOj% sLZoԮ24Ξ'@\$5Mc,k"І<"15|%u{ c#d,E.Ɣ%XU7Y{i'ZNxGIA܌bY̯>q"6e;t6'D2 U7CM7\=bA͹s7O4xgfaQ}2FH!(=˱,=&=DŽ)y2qf{ 4+׼k6jiiеGȅمt@e"/\G4=LR{^ JAt<{6Vxfd|pqJQ"0<^ dRik4/T KGn%X^ h .W~g!}vC}z1"5RC=h'¾E[v-*s?U9L1 I' f5XQ4#vT=tȶphH٤[Okw騦a-nb">)$6qLE_P5²jEZ ͂]TÆoVvz|"R bOnLꁆ\J>~0VH֏^;B TDv ONr!UV?vuɕpLb55}]S:#x<იߝnX{@Z |[ag%^ȃȷ OH#rJ5l$siL LCTR1> 1BRMy!m`,ie, #IΩ۠g笄plt 0y'skblLX?Q5jrh쫙t 9X>3:&7P +JE~ucfa@eiR3[9gt+Q[S_U3/"WXe~ӳL-+R dĄQ rm\pŠ#vߗ4GL(ӄsK7zhLT:Lf.Ram *'}ٰIh LG堩;d &HrRuN7I/2mڤ8LL~~m1ΞkXX')XƶJ;BvJWB\rBbTpԎ `d#9=^T{)ZQVq޼8EH;8 !KRSWHs(c޲XZ*$_-4K(J cJcP 춢}xAZޡoyvoƜI_JC|cCw7)+Ws_ gG78] <)%EyE&ˀu;CUD0u9ᶼQ!drzn zCkDUcv`XۢF0Wy 2xRJc/ַBk ߩdn-=kiՃ, XN3fk"TE ŻwW<'3-dQ$K zC qˠ,..<4zcƟB zVpzf%֨<1˼ :A1须𜬦j6,|p*ViZ L ,5բ4lo+;~XpVr 'W C(dmyXR+je `e_Ÿˢ40Xixs/z~O8m*G 9wb-X܈LLL ݎlηU~L9xK~ 4ʏՁu5;fµ5P[VF:/X@!"z)S)^Mл]s Q:aB8CM5y#T/rokݫRk٩wdw?"h>^l(NNj ŽPwʍNbJ "8d~W|! 5qsk(U>f%a&Xmx:Ұ~9"xce'5DFm3tx,BJ:Y?nߏX=aĺd)8E|8吾6KiO?lKV}:p_ ß\zۖ^A1%| 6ة82)܃/X\r"H)R΍)8D49MBIq6Z;'qեbYayv0?2!ę'30M¸XnY W'? pcaKN $:78bÉIg41RdXdmx)hY`b~!S@9:}[[pf_*s\ Ll5ZB٢Ãt2U.,# Hgq숵},m.z|)8'+;;ܪZهLPޘ 6}#~uMSIH^>C~41(AY[Hm }.rō@opdRE*Y*}SɠP#6GP]7ySYO0(%a! TڪBr=|SC<^dѹM22C* VrQ\bKU2m#X_<_tf_lݰ&©P;xAqg@0 fo0FW 1Je W¨dh'XEncKq+~E\s{.N:Xw5IS@OXTs_ (N7H풓P<^CG=pDQT׵r󱱳Ub"[Pag23tc&soe X"*гڞc U.b43TDME5DA2C8d!%2pB-ꔴjTJ'!"Z+0ɉMgJNB5Ydl7T..{vPx f!޺+)^0~|=YsNLӻZ4|%47Ӟ!*.1&ξ$Q9]e ĎY2 aFE dJ`>.ML" PG>Oy &Ao"S6P'ذr7p ۵>;9̄S6+W8,\W9)"÷GG@L=~dZx[AEnwIxO`J=RFM-hӂ4Ѡmඞ}ҭl"[odil0.a'2 RfKz6eX}# ,*>|8:Y0UA^PY SbsP p,>5v5)V׿z'9\u61Ė`$Uv_Qa?ǖS΃3P="- F2iLڨ~> bO)<\C٩x\vR8%.Ľ/=QTj 7c߫`w=]9q\!im:ơG߃g_kc^ XRm12eVRчwXs~w1(pڣl1`XDϋ֬ƀ<ÉFJA;]^JBbv=6Xm9P8sA,ac )8Hq(Vhk;bE66ĩ;24 ]S5g}OgPt \ڮJ+lDx6g&ް#zoerN連Hb1SR.B*o~@s`FkQ-03yfo4?;L˺^3f,m+hv  ͥھׅg_ڤަwcnwN/.fq w\(>=W}k"6t'o3G!`f2d~:D|NVv8Ӗh_:$hxݢ󆓿xy?F5{ٳsA\Xΰ,{{ @7uRJҐ0x&*{+F0&8mXe~.Gc xVS#JjXМ YG8=6˭FSer݉8amo?礅v)>p7R%U3 Gmmuv8bA)$̈0(>dK,siQr|v3VL4c5ZIGꖎV 6(6& T;;rW{~Gԇ0KrQOc@r .dz!O0U" syåuѧtbcп'1a6/Z偢Pyw^h$#Hu8)ŵƮrJu JX&JO.:Ӛ#Ib'i<Ӟ5S1hڂ%'Y 7v&.^"xIѥ$SMGG%gwm.&@T J~ē?"=}4;/KI'axȚrݷ ] U@d_?;6cG;;Nд-L^d݁ jӮ1WA(o`X/ VYZ"k  U~eWX&2N w-5lJխTGi!8qڙuo+45FPS_\/kDOJNVA⻌皀>#Z3E*41ժc>4ҾJ^w/eτܘƓ_]]w詵ͭ߼6eQ u. f@XN24U(#c% ӣ\}%U :π]ivGY:Z|l)j'Lt*-fkטy)Cj5e.q.ٵh cjO:ﮑùkb.|Yv}R;4,B͡yu?'(>F^3EZ=%LVWDR7fOXܙM/79rݚ }2][oYK;`}J[H06G z~lJ" ,ԣPRL464APTz/~I夔 !%߹~oW߳/JG塶X^> [xc}Q7l۱rR-bk^&ZF<^˗^] ϲ"Y$n\<(ma8nO%>-Y*kg;ox~9Vjl8oBg|aC2PMFI%39bx?0Raa|0%n ^$)n?Yu¾vV%ӛfSX(4蝌Sw |pf-WNr=C2? lPR r vFvRh(a/o E&U$DD@Sh~6u12TV@ )GM 'Et+Ыu&OM=CbBSB"q+1=*#NֵnVj19 L"sjG$k WP ʬެ$,J;m]H %{C=N [v0/HR$2>idnM:mHoZLkiP Ao(MGZ6Ȇ%P`U'tDBaP-xb$ߔav#4*lj)^މbp<|ɕ%G}pə$NyӿC1TFV({$/ ToWe/)ڧ#6B|nB:pQE"EW @EFi^f buUE%?$= kZ =iI;ba"57K\|f|x`Ϝ\Tyh8 Ii8c뵯aʱ*MP cCh $rj/%KC#:XK>]wيo0rV {W{۱O8v M "rV^Σ94#?QPU (X"_,LW;?cP/n ۣHv2M nMhUE ,U#l[) ͥDqɻr$g5J:? x\S}k-na dQB9 XA-cսv?{anzsU1bq);e3*@7tCxC& ȐCm\'3gDJA'XS-| T"40I=+x!4-}B r?<ҵrWujn@6caĶ7:GL qQbXgN2rJmuSLN Z|XJ{+{Oe$\k3 (*\ÎQaϾj79'Fu.W o%x%!B5P?lL" ΎVF~J bG9iGǯx"Ohn>) Bb9SxلMfM s:*Sڳw[$,N@'v@qO/ ,ju[x{F:O?1} m1[TRV)IDT^p*Y RWģbC^`7khak_OΎ[>+` znZZrQmw#9"+p jR$5?䚾zodV՝n%<ljۙSo^»qI;yF@~;AbybW@JUK)Za_6[pr)0█'M)fi[ܝ9Yz1#`ޠ3wS K1vPu䉌aY`d2^X%LXNR (,) |Ҵ0GwAO(?I q d3:iعA2܂[v?ZDځ2U;1eD4 omq4XHjvr$[^炣9J2r!X1pn.yH)kU` na"^ vתO) Cu{u0I Q B-"Rw:D}9{cN@%VA٪=<ՏZMs@L!1_UC$k.n~M|.#Kp[jC)L#H/T[֟|;<|mr:0)\꜕l-/z? M=d˩#@-(j)T]V.Aɸ-ΔG?`9a2_Y)FB#C-ķA|Pז.6=gfG`KD/&*U@:Gk6s;i??R_wL Ag`c}rvH5,<%,=7?d:꼆_JA"3& k~/(Z04+`U6Yi(YrqmZ9s #}Ngk%*Ql/2[ڸ`zqԲ,I儈W`C}2`Lsܯ+{) ;qb7vyPL7hg87޻BU͵Y,zX `:=bx.}}f2|'i. u#ؾv+ |W!KHPR^Nֲ]GFhFzF^ p}z{Z<Eqti~Ia7,j㯬31ܚ|x {?u:s]õ3RLVͅޤUDL<j"XtdAJ=!#y9W(Pn0w$Jd/q+x#ZyRo$تC 8(3 ݀|95[ n|ڡ\LI|@ -$pn SeQ2(ZzNq嵊^d6j ҂ѕ%*kn(/^7q"]t~6 #2" Tī)F*c$ֹEU.Ll?F(iY~ =0!gäM'ާJt|8~k)6E/ v6 M$ ϾLʎt=5iK $ gfO8󸦖t 5O!g:~sfBصl١gE*@$ |g]6'')3,w+=A s>xƓ2i"wݻW:vy)g \wP242Y4Ȟ'G` ΋D?z+IRֻpeC%L@@ h@B3 JP?ҮPș䘗юo[@Ɓ-D|zIUit`enϓ#hˢ(>֤ oLmooalZ;ɓe`4ǰ02֬2 F~9qrRbCFL&jF߮OHئG˛+%TdfEQ[&nRkD*i ^3zeLw:bArp<I,\|bRu|?]D߱\k%NY3NX]3)D($D̤ecnm۶m/&*eŘjE'h߿Z[y?'Z?8H5T[ 7d. øC{?(*lkꑛA~ݏ'Cr(ʂܬ| f%tm.HΉf/Ҁxy_tx3 SM;FCmw%=>7!L<E/I֬ P78t?2n̾+!0z;煟TR#G^%pMQB*G],T=7yN?U|C\ީۇ g#S&=(Ȍʐ0?f@- t z;zmbkWh"3dzoYVf}(ΉPgRox/6fCn(9, e|/%կDX(ي4Y0v 䳡a)V4Ш$mkWǚx b U o˔zwI۝_ě9Βx W廘y!~,8\ZƝL`F/mՓe4ط[f+jؔ⪸ @k%6Lvtu^'<)5($;\ rs H-sNn|'GRahW93uX3rJ.x f,6@M`T14*OWq,Y=3dN9ű>3 6L`V9(&lepuB{sBCPx ca$߿)ft$|wA@:Tx4?}&AK˰j(Pz6_|?tm.Dћ-M.vXYBQ^bB`KҔV1n<"萶#8wOf鱒s IQ!a$dZN?-qe5IfSG..A\j?m\wBos; i5=Ux7j0KQp+;gdNStՠW aMJTLdi!2V ~hu++N9‘rs Ong 5; f4ZB&Jz&tPS qڌi*wYcl]sNLmY"CN =,(_snO|HB?Y,yaT, 2( lVC rc xM>M l y; ômIdua3"%>`Gg̚7XW`P-H^|8eRϏ+dǑ3tH_Y\+ɱUp# b 7=M=mW&K<&z%VPtǵ-0#b]LZ  d!} Gi|ޒ AQEFr(9^\W:+~й+T)pn~Z)c^d#T|ي/ @(\/a^Yw4lCȊG(B;n| ;Β O\xhY t@&#%: =ʚÀt>["DyxjIy*Q`ȈYFS1rΣ #)#rg?Ϛzz RT#8bꕧH-*D9D(\GNk?]a2B; o/U؇}TbNj<3ܝ]@#=d-A.6WrW6֔\{jC"X2RB|/Jubmp,c:z$2Mo8ͣ0?TqE̱sM-W ܭGIΚE01>^5mPPQ@\ {Y `ɲ Y/h9?[nt+@+ok^˲Z K2cfLzÆ/1lklTexfHQ^լ^,"f Fe?hj=b,硔F Ws`xdiw5gs X1N.A5ҰWx:^ܥ,_1.>CA=c轚 VMbe# y04BB]Ob~R!QٻpT ݛvjҼer"kj9`X~9[74m}Cr-dxJ3*(kL'gg F_ VUIOSd5)E1XJ-/w>8X/y=n䗊O1\Q|ÊV;%%RVwbMpC< çy_opR/pV,pp݁/ZP0/:n^OJ,6\ N2/s6 %S8PVe3_BwItI,ހFs6)r$^мQhmIpObڊk?^mIp;%eIT8ε@̡:C1(M(؆D\>R0 2Xw{\KT:a+5>6z ҹ\ځask6x,ȉq+[-(|FzX>j㶹=> XteX`fޡj償}rZ; ܋+M(t6ϝd{U_xƻR% [y ^6^L?ϥMY _OqOojEl:h;0SMCy,I=Z= AP{RN5,p6Hy}a/.Aw݆/2׍M .5ߘi 񿜿mi(ă?ܔ}Ȧʓ=}&8JVP Ӽþ;c(L|7iQS:FՁPlna .WNրl$ 0K7,H]b698p ҞK(j$U,{G*ΟЬyb}3,K3Z %(Sg"S$4P YATߚ؞SQ/jvS|7Ҕ"o{ld1pp)5<!+4F̌28jA/{/O/fr2iUr*L{ 4}) xn&&24Z4]r#= g{v8([!`]~l[2ijz#ɼw݅1gr\@+G[-~ѻb複vMp"}隳 , ڸ}R{ТDc V8\' ߎNi{%dց(`fz- b {V?4}jlYɒQma`W?|^um¤2jhiǘLvc5n#"ΒtU߄/3s<ȑH!A6  5Z1fVMZTB[T CK!@ -)fcZgK +)uk*8ܟ'^ q4ƫxa ڶ^%#,%;#J&eH9}w%xh @PhPΐ^٥} /_,_.Xq1{%p P!ca5/ joghZɯ)L^\A Tqo=I|'K^BdvEj_JM骱]M_Ay'6 X${4K-HcyMEDIC2Q,1b>畬k&Tjx>3WW.8s  >/IN`Y⛵ƂA LF!p(x#7Ò ЬAqTB<'[(D;y)b@.[' c!/Ŋ Mmz>?}3W gr{rO?YK#NcNvje< ɥ=R{6C֓$_8;l[7 :R 밬g(JXz(CI KM5OrZZ镧)f(É@2[gOQ[Avч¨"FA'l(,n(1eo#G $n7Oq ]B]D0#\ ٔHo%Nz^S\1xq}M~MBJGBئzp0āOdv;#{lG?#"S7_SxP0-|.-L57VM#E߾' IFq*}K3n֠po-U.;~~f}fˢ$cDFXۼàeLSȎ~j)IU >-r{b_$Ƃ#34f5<8KV(SKsMVxV.BI[&koT-F0xrc􅵝FtTA$_?grilR3]ܾPӗn (Nn.,z?9y6 0*nqA؞cPN4OPb=%b̾*#s ie cAyaBb~e.1ww8m`>''\Y+nz;Ino%Լ̘ab>TsN#LePH(H]wEcdwQ*X&V5L>呉LfvM;p,>3|t羟N(CWdk3 Q+6k{+i]@)FhBZM :"cx@`f+j=;,T@3'KAD!/h%}@*kwK8v,>;Ǡ*2+KF > klD5٘":X ɧM8G-q,u9~o׏dfJ"7?tX:Fq oO.;˒Cr"ccl*w_A=?9-Ę ,2Ut{5|hM+EX0 0-vŇb+sq}]u6 ‘ ̌fh* 9.L(/JvŁƲ?פ-BTs8UJ;Ztʐ7Ld`?^g&I0&2[[4.("`m|J(E9;o]O3p ̮-]1FXM3מDBOG 's_=pdPos#3E>Aܗ~94v)A8\e+M&搽Gj9}3,c.&`74X ;2Zà ȏ-E:U&ȳ8j;:d2V2i"SKIy[cBh%Vƚ (il6䱵Zc> k2: hVY[Ks8XEVj/`˗Ǎ0?v{[]QG WQyϼL1FDK5`Q9ӋDDA ?DG|kt O?7-Q? ee$*QSHC|#k@Dˮn/Q!/ uk+ZmD1G1_=[D>/#G?=P3y~B27! l ˖k<ۛs? L?[]6KϢx?9GNYZh) YscsGcO}d˩^2|_Łr1cWi`|fkT d[ xq ڄ`sLYRآphW&oP8n\6bJ޸]%,L:APk̘@(黹fxM \MU QO:2ow9wHVݰ ZXALn4ڐm"ےn71#= |;+4Y*K&mĴ!z#fA\(ɣ;֍PuI?Yq o[߱dU5xi0Q/'0 2`_$Tt."Wm6O/Z&K=$[Σ5RCPVqPwvz+ϒ ޻9- Y# ГR/fc/Az2;i7H\~^x8&D uĺN!rD5DTG *UnCrA?30k /uP~=N,pU3 ɡ=!"VtwKtaAJ02#6s m%`9Y@8%76o sĴQeETY}J` a]d2L O0POȡ?ojit^'db<._\ PʓThey@19Q5TejSSϵ]GTEB7(蕰:!PKit?,:]GUfV&L:%z$~D^ ){۪\,jj|Bu86pFOtQ$D{ax7K51 jmu<}˩-a ;< xrJxv-,}ޟm"apDkvCފk otdK]L-8Kȁ 8X4:~k$bJn>=I늄}0/<XH=: "&]V:z[AØk!g̙wicU䙢amzTSÆw[Dƃ|b*3Dlid>,@7%Is}<$g56PDΔO N "K[5UO\l9 qCO4h:xQm_p>9uH2/SXU#Ԍ%F:-eTFG$=^P*tVaGmIkw)Zy2ҺV,޶89zQlQHBs~~9vjtInZB%f(ӡhbܠڏ"D!MbC;j]):w/9{1ߑ,Vd=FfwVA-e%Ĥ/9X}f.8_jE hEFU:x|׸MLO W#hª  zm/3|=HK%]|\W[7›͹+z̲uZVTl P=§=czk-@6+y+^3.ߖ M/ʰ[>b>.IPh(Zn5U 20LR(_c<ܪw̓[էo_t{39$m;fJLl8U{AWs϶tg%sP&lAbEi~̎ZEb`5\&#܇y{->yx+$mc`^uX­fdWR>EZ^岒U&Be#7|{lsx1o.oRTg?D]a;'DH/5qTJR6o=9]*-#ᏘJ7p,~3Hbwid0poTiOEBDZ~vSqte(R;}w&A~I8%4i'griFy(4~E1-)Ic)o'@^9cHxNW㣟.]7&oǚ?R!d"HWnqt*N5+)3l']1n] VV KSL컣]r휶Y*7Gd҄ 5G!'IPJGhTbӓ B;a{>j E IN*LBuza#6 lKtI\-1 &Lg.'b\i*L{hfD$i+x1==;Z&ǒgyW(/ # ^̛]k.YdSX91>iҝc2[|$?iAj%yS/t]4_FO4xAc!a8W#=#ˋ1g[hBwL `1.%N#OjB !ChTxD PĻ)wsYlg8a]#cB6D7~C=OXpvKI a4*9J_c ֑/^@3xj/i18ӼtigI,쫲DqV!32AfLdѻ#XS>'Ge^ oa+#ђ0 " biR8Bt>?~VMÖ0J!\ Lh;UOKC Y<&1HX:N7Zɯ6w\Yό\2fsNL̑BS 0r%5\:2I9bCW7WxemGr5KKh,jx$בWfhe26\eV H9j'WTUgNnݩdu)(Ʋ@ziKx-QҮkhR =u} B7 >J2mW>6=C. <.<E82OһL5f=_ gU,P?THc8C|~ˡ( uUR{ب,5WJԛq #R*xFaO+D9*k*G?_B8l0)X?DG-$?rƿqOy|u7c6犖 iW/z :r6Qcy(bC`bH_#I[os9Eox,Ò5Q|9rƼ&^*Q.dwkB~x{ 5kWj T}|c/$Zꥭ);ȥ8>H1X t(&vZ ^;gn 1J$YYDREACHՌOr2Łk̈?T0>DC,E'J uu+W/@fd,!gy%@uE^O@lj.ݛ]p# kR;:zeDfu8p8'ML xR_,9dlln Er #uhH;R}SDgsu e_9 G }ġ}/Fv2P(|B~//6FxpFhu{qYEN*Rt%Q%a4ӵ3H g7gk:q!rŦf'V;o7tcB@{Ȓ 0öV ;6'u& LZoY?јyCHdTGBb* %4ľ,5p=f"lbkI 㴨6퍚/ - U2"?i])pHV%6%rH]_qԺ#]żNT-qc S`vy6}9]>N4f`YF[O=}&7E5V!N8a:oLȻFXfi@/q C0hrO)[zn"+JDEk-f.\G}F HT'!HmIFalftÅs.'O6L S:W]kJ̎_w-!  9L˷?M_*mmzkq7NwTkIS)D 8qT>:s6h0%׳Þ)\߻NaL?}n~2t>HtWW]V'$D4Q'5]KWTdJyeg5ڊj9sJ+FLe ^]la=Wc:|Cƙ@WNVaCg_ no愀,Ӎء<7Fe Ly*݋/3»\һ§wHRBRh9mmB09K1jXrU649zI?[[؝&Y4@81UZIr/ %\DRR0!蝌`Ll*NTҖuN"RwN:|5ob٧s1M~DDv'C7-srv[(eeK^#>|XФQ)g0nɖQt j͂˞{a 5rij4YC-pOSe9{q_sTgyP n˾_#!-Huث hΨ E:?']oyUc`aGM@uB*NK{K]j*W[d0 L)Z:y1jvuf+% xଢbBfD-sW6Y8Cb{M̓֜' 幹KPmGJ,fqbv^W%RcXJX* b$kd~qp;Uj9A0hC|PW~)yN5D{D /X|@{9#\ !mH0%tB7{z74< s>MNj̀1ᷓ d5*Q\l,MN*?f8N|\ oڦ1$ւXx nkkQgf$ aN b-\(?P폊'3} X{kqLuqp> s WOs_,/ꏵ ٸxQa/8AƟCR~فv1`E.%]r.Gp ?Rr%L Md=˂yEؔW! 1ܓ!UWbT̘˪֖"~|}ݤ6t1x@kwb{,glnޭq ,<Ş[Iv%uNz!q?C-'Cv ` <sKU%1lDL[6kK 6ɶ-7P- o=>n&X+< Uex}2Mia%,@x_(CCZ4rơIFz )iۧ9l9ôj 6\|c8"8 dQ2"jr٨NlKY~7@El)_MA!`fk*YiGVb~SX )mVm!-߳SuGY QS3:,qEr~h߅'wS񗃤'K'nb ~D*Q=bph(51{ZxnU#Wӓ =bbY6>_KO0N˰ϾUof]EP~H&9 S[2RHݷv1$xI!G# Oq̾)T(U@i5UK6 4\褁>q6{\6XHޏNl~TÛjz +@j0ܻ oL`='|H#~υa`>O ^娗,Q !/4Q]M?8*ʋ$ɳra7r2|[7t> sÇoIt`7ZSeg)V$)+{VPʦ#_mi6ش˙W0m{~r8d{=D]F0C^c0/$ Pq$!)e4w3ۊl#䔆[tn%AQi5&E|0J拑tC0T<"̕V&U^'D5oL|Taw($fm$N֭Wu*jM+bαx=f51?UV T yסbk^ fM8ʽ1Jz#!?/>0U%d3"RϔnN=i$@l9%V Ԃe ( ݈^t 9ӄ oPƔ@W?#l@d8NKiE;;D֦S.zaIeRmd _2g [2Ïa ;]@{$T|M}#VԬsLC7J)k\^YT₦ vyR!+;qdF;4߰\D ! ,e?` :t3o I[> 7'AnHl5F}Cs-ȟ[CD%?˔Jr egD΁mzz]L1ѼU!^+`@:< ͤZ GzGc%irkN]HC,1ڨxBgQ[ܼ ̒I:ulOskS"c[&*T,dY3IBSwjKfaӳT/*T97151HS%tjO %xZ0[f:IpK Kb~s` Buަ]*5 =T\ײNGJْg`l0,ltm$t Q@ 6*3"#L#94([a/( k ﬩0h%Gw[[:a0y ) /,C֓z0< tmrДxW$ l.H9V$DF1/e"MPt;֘;%nLx{^''";|MsTɸf> Q{~@7;NVuRYLͲ;|$ǟX?j/. V@7Yx8yԶ×m+}72ނur*'d˒3͟ hV.0CNXw٭.:Y.W[ Ӵc5÷/fd=A}+WY,9hn; C{1KTw*3YÙB}Ga,aB ./~0Hț;կD<$NAfm&RXM0n Z 3IuIjsx<YW{.nwjP#4.՗F;^"GGW^Z$_cf"`C+N?zF7'ˤ x=9/>in!0b]b/IDxKndf}F&;G⦂ z0Ja|\pD փVERRτ,A('qP2QuǿnHEc6&ǏYjy׹N1d­4%uߩ&K-c _ؓUL)qIy4 [%2I[ [N[*E(e^Mhsv$'uBp©Y}ڿWSU}ZF:oT-̘%O@jZ[Y,RaB7 \ S!7J M wtqG,RROp_Bu8:N}뺗WSVw7Ns8OVbs1}Ќ&RRU1"Y3M7 g'[lDq`"[.D,OgLQpj_& [=Y1åd8eqe+Y]0Ta`_~»jV!o)^\PE2$q*VxEHKA9Dϓdh0Y["ݐ-Z0z~ؚ*"Ҷj z& ㇟`Vn+4"8B&SKȏExl*=.3c[xl"(yLc9"Z"lwo(\˨Y `$eIy>/A2m_>2$}\K(b:Xm%k1XrK)o#}3ˍ! Dm[g)c ~xlBXKө gQWpL3y!Vo|)-zzPM~DCt:D9OM@2}1{lR&*7k/;EBk$62fvsWR~5HTR0u`H`J cSgIU9u0A<+^zïKsP@Q.)ut&R+,OI'S9h4[_a@'5Ln$åtSS{Ͼ2zGLQ9Cݻpx/&R</W"Gڿ7F܇{qL-],ҔB< X/ojH(h#Fl{h!44<uԣ7BU5h-?ȅ5`&֛Ԧ #" t/&ܐ7ʅg7yT∻3e=e:|"oqfƬ(u% <(f9AK1]BRr_z5OK - WՀ&GO"[q03xxq zMIj> ~ZAMY9yY,ve T3 .KvZk[UqJ$z6T : TQˊJa 6,I е9} RLU\#CDj84Q50Uп=R7¼q5"{kg]xQ8  {EӟeeI|Sgrrv oQs^pfwbaR$LXr|KXEXPO$rvdg #].w%VlumOe=N{Z@~߿tɩ`XCX9A> PDktZDV(mRb7,yF>շ:U Ȧׅ{uO^:%oD ~oµ9.Yc@>~/oa!=T0ίSȡgBHnFmȀ@A?oQm`6r&"BB`WD+ f <R_6705&_JpC:+u9j[T2YJN2L6[Yz{DZ[#{a|QS4pO(ց )L'\U'=,xy 4A4xϢ ?qV&2nGޒ15>?Yp3I)59\CN衿dT;h _= y`,+8_!,͉Ap,kXQvLRTlEqڈA[1!VT2{&7R9qGd~h~lfs|P +azҰjDnOdM&ӓ4ji`Pll*mguM:h(9.eb% 3K߄{.Sځ#JQ$>Qc+Ͼ28OQӤ޺R@+1]y]z&e4R&(~^:z㒷H5Ҭv^Qs7W&jMTLgXK2}bwd~[e̽fwRhyKR^  xger&Į2Wf1<~PJz*L;٫$YYVu(C/SƋǥ~C), Ս81ԧ>3}ΕM"7 uo(6 Suua3N\GAIWrzOjm_=}YʧU|Tڅ/_j7\Max;01`Pyg%'TQ*gUjnR઒8! ӭp9QMhiV}^COb$_6?#ѥ T3)EpϿFhVy|[;}Ўvj!{:4 ~l6Jcn LJYC܎Ӱz]mG?thx#pJ>T+";Tb3"#;+]YҏG]}4w ]Jن`bc ?lt5jSA!y>O9c76j9wPd_HIhviJTWs֙ Jqy5% 9B;b^ʡތMU &:6{/(uIv^[i 2HﹳKJT~d W v Pd7j\48꺜۵g8#\Z @,Eأ_)5ImVKQѿ6Ho F Tƛ mEX1TٿkE4^=N+J߀C1Xl [_Kc_:3o cnxT J-߶G{jO ON)q Zv /נL-#p!S !-(9c8@"V(LtVփ89yuv{q@7ӣ#jW<_V);]h!'G;D.աv/].5mpr\(L^bܛBW 2J*7{; MY .XL]F]aK({8`y.%42YN-ŃJ+N- ƀ7C:1`r1~* 7' Dd4#ܪ :ѾM'ٹU@`"5xLGSIm!7=Pg.N濤'~ʧNЏaTrqZ1]vy&4=h8)~ '_tkQdHkTu8즡a*Ռʘ\\j7)n0(Wak>g%D@lb6վɇt>'܋wb`XuaTE-v<D8vc) @R{g6kjdpӛ '+DoFyTϕϓO_" mpŅu{K(A3?tUcECc1"Yb0mj{3@Sʣ;3n+p+By%MkLuETJ? %eBӄ.!1Yo4M3uPǑTI/Dhi0.Tp%ԀTcmUԮDA'ݰtu( vJvvgW/K:<۬23 ڑ} tZs$Y%hSʖ9%/JjC!(d0MMNXCξ'y(rw-\<.ez!$YG&sb S/sTnEНNAƾک5A&Dl6 o7 qpPWO濨ZŸ܄NJl Ajt)gwŵpoeR(ʱ#iML9#y;a:!rB\+sn8b$vZy1fa 2׊6EAV'*! ޶PAʍ3A}{_SCWdw鸟8ih[7TSf CIҝ5% x߈(`N3p8vedP5{SN*]k?1/=MZ> >hX^o҆-fbvH?SEhએm[Ұ0RE<{Aj ;)A [:FgH߫Qc\!YRK3Cƥ𵰄Q 0;"^dq/A(  ӼiUd\'elAǖm̹ ڵDmFUvL!#wnh2ۀ ^=oAsrKgxhE B¿Us ã LE?5^mVB-z zw+EK\{Yax]UFjNϹNBoLhxtRpayqqѬV`~dH~20:\YQ`ꍧjޞ_tp8mn"Oz{$e i[n~vrKh(s$S J⹂hWFC+<=zaVJ Sx:J_tɗ OeD1{6s34Q4go/'Y[~Lndz`g{sk+]$_[ԗEJR>`e?SZ$vWkT^}YFr^VO0B{ $+xeCͰ6N_%wmtO9eR)~(nR)joN_ۣ!6뿧'aMxg%8Vuad"RTH±K'݌> Cl٢|g?$#0^uvQ$$ffn4=tN>uM˻TŲ 74޽iֳBj"7 i`xllA}C藘Q`gC~քضxz"|v`gmZD^}W<YTs+k(srt ` *eg dtxT%ƿt_n/Abg$9+;NX FrR>tCy7%->r׆Ƚ :YUXNwEUnx8h75]f" v[ʧ[>cEyKn?]Sw>.̜N~LiGhp Sk1rq,uN,s}t:#02|/GH6>X W |uy,ͰR첰;@Ad ]a1һ!NycS8Ǫ E 6Hw۵|oaUS,҂Ǻs^+@""A_r=һy9q`r +7+ o$t5xMT0(hVpGj-*Pw=LD9o9l=;F=vx誁vq) _rMoTPSXg!ΧΞRe_ƺ ϚpkgòC;u2fN5gk71v4e ~p:Gj&?&y~ q$5a; ċmm8~#y .ŽL H-QUǨPʪwSĚxt`}Rm~FѐA~z 6V1\-qtĕ I_>NSJD{,H:ZxmcXUqVځ~ n'pegbudt"@T͟zqsHV ,?b".ž_^BȌsmf^S\Nʗ?~$ id|7ب3O0` KjoVwWg-ǟMto Z} $RLA2W:CQ-ZeN2p{?DcR{*ۦ>j+l-"w<}sFܬό j։a!a&`j)0zO?:JeߒE 3syf!̏|bq 0g&ɉ$J+C>Kzŗ`P&ѕ7B5/SV|1ًx/h,^}٘+rzkR&aO=PR1h窬MJj])'Goyk~ Ik(PR6u8-m#EVpO1NRk}:/{8:&^&<'Fz%F3\'@fUuEEatJGCǧ`v4eyPEOJR?]@V#ah s~gEzoMJFj{V *z/!ҨONSR Ho3P[`q!ps:1<\RYV? =SdЖ8[)n$"dRSnD9B쳘?h-׊"^}8hJ)k Ťӟ.DPh ?v 4Il'j<^Xx ޾]~!{0P8PU.ɲJ,{V$m{]}h<fGU|]Fbzy2k(5qWȌ"i榩ͦ$(PYfe/mIQ7kK8=C0_#}dpr2Ь 7M0Xب3Ka.S&9Q6eV~m/ )y1Y[rf)y=2<޵(7rt,> Ȝ~,z{v.d CndS#;5!ЪЮ#p^ ¯!ʘlhrPk3lY٥Reٱu VgzL)nޞt.|[ՒV{",KTH+\XlwXT"YWDf_feTxU=r6U@ .G"nԐ:X)ކoo+QTXZŃ$l8g}ö0QgJ S%)] 3Y ޫ Y8ѥP8d_W}NrykA{CN1 ̡,j6j~x/eAKR'=]am_b ǪtP4)hUCqRǵBl9>s>tVJe`-aܧQ,اt@ss J$Qt*DJq=IҐYxO, Z ި2/?Lɷ8;x ui'峃W!YVA,) jWZ,}6"fK7  <^YFD W~K6PmhWmg;(Gބ&.y3I)a45LDB{q+8plr4k0#y0CAr&+0 yPkh!qvl@S ,cU\,ZQhuE0UWY!@wH|DmZGa$@DeMYdT`Az[ I7Se己ŠY<\q;YA&{Qk[6qLuy TYsΆ'ͺVb' ,| >ԡj&{@K4WY[G ~rDyS&6WeqQ`YQ]91a]ޫ;rR]$ M 'ݏ^P ;s_f'B0(r;{QZXW%5~ ri䆞0h)$I,([xv)N!@U[OdvpEu'׬@Őֱ~CTUy$b<3J*Fē&n-Jep+'<ލQhc3SI3|qlק%o% iY4I~|Ӟ :[uGQcA%ODK5Bl_UQv h7]#_|._]bKS)Q &Zz3(q5qsrJ5΀ߌt?"IqTGWsRG^xYԍOB3W{ xPON47'uyZw䝟1XE} 1t i.:2w!07Ttn=:2ۛIԶo[HZ ->`Y_zv2 e^}>]srvPqus#k3Lc̊!P8xl9)Ra j6E#tL|-Yd2'+ڠ97pXN?ؔ_hR{Xw !p 1JژbόjlA:!JW(P[(ti!(Zˤ+$LaӴhb>j(BEDĖ"!)n?$q&@Ù }:Y9YŸ=/lhnȷqp.BR$#ied3]M{?}OGDȏx{GA̲jz^ũYhZh\CeZb7UZX3N,H~JzgTdʶ+kqɪp#$o$:y..y`J{*9sӗKl L0>cFo"L aag;|9:ob'E`7q03V%b?ۨU ?dֹv55yt^,_sF-Po,$7.+p5].<]+ ZA&|.5Jdd?*$o2Op)H@a/MRI*h/Ù9LY֝ߥ2*CǗd?v'sAGتmd?iAIs`.S'꺎p ѕ؜*s2@u"x%"T'-,{STsj()y˝iă#~Ri(,"/ -߶ 嵑xЈo[*2%&n?BIج!IO@%0)NgaJ;O JT4?eElqc /=_XwۊFX0s7F Sq$3Iő7p6W aZIe6}ܾc<#)" Eq"FZbЛSzR,{r^%rDT.܋W= m";́r42cs4=jle+1ŷpq4JӘ@=moZ_oR}:6DQ9 VR&G@lǣQW 1¬8?` CjL鏺hqp8jy UZigGˁ6J8ffL\$pEtJe$=$KnQ^YYiH6Q}VѪ1/3Xr\I?l٭͜9I4YsZ#~g=CWcE̕5yL %mej1Ƶ; nS3, ~00Z2OYPLI6NCF{4dlXXwl<78̳y)^SoxQ"eG-Q~} 뭘JF B⋔(4J.o$녤/[v"y2G0yr/ҚIt_PҲSI=Dm"q)tSJea Dld1 'aJ[MĐ5Sec.N wEj[/fDa OwQ _=nK ' - f[FZ_Dj*Av.fϔ2U[y>тg=ݖk'A4[4;+fr)(-"/?7aBp^\i4͛ƣF8ƵmSb6^g҅ R[P`E-K7^ \BmQ]}]ٳ9/xvdHCb(ni1JN&e!edLg?Oń{ѣpFf@M.yɎ {Q2;0>uwy}ϛrFWN/SLC3 adҹw 29ݤ5z0.MnJ ~U`) e HWPv;]WjƴdlU{WY4}h^En%k7 F<$)0pv6Oѹ=퀠n⸎KR63?Q~>>=}U,X16(oh#ʤ:,!7l6q>>XGy0|y 9ȟyŖL6o%0BgB> ,z̏bI:Lc'@6IV;aĻeLXԧ_XŬL'NM[7#v'|Pd c]U,?L6W=oF5ݥBH~nx[_顠YF0*鮁1 pjab>$N%Z#Xzgx#ߐ4X҃޵~31M7f^ULUWwHx=b~_f(i +,ݥmd<}pW#A!!V#y=V/3M{_AѤH  ^kCXkQhYUH*q)0ب"mai 5"LL- q/h禹!2*CGF@p#kbV|=^5ڵkɈȨ{!L]xdNv`IWt!9n PHXz~Gu^W:?,\unRC"ͅmzvTPK*$JfDkз'4-ڵw8?,!p-|;Pj@:i bTlToc@N4sh< }g{2}9lA;B(mtem~z* Y5U :hGB|oҢPf4 +aaYauOR VM+Q:BtU+]f@JS`5wqI޸lО(ۂ=Wm)$i xŖ@wPt>Snp(.a27&(Fp_gFt3x<$XkԮ nl= ~ƒL[p=)Œxq3s.9G哗&& Y.|E!6ˀ, LF|XD{fNE7ԊWmWb xW.0Jysg/>z 3V/8PAievGtZꢏ#%2r4Oa EDA0E: GjZ{*/DGEgMDqk3gPGsE0kCΓ4 NZ 锠x?;1S(5g0IA1!PZTJX.wu#6ĮQ|N95BIoaL@(eqq9-@V-қYzmlrQ[5nk^̈WS,DXqHMH!kQ׳咙Hp|nvOp [j +34hҔr`>wJwN{g,d3-cK Qc }0 vLwn"|Ӽ5Y&w>o.Q1# 熿6&+0$4 x C}b\oYdݮx$!^8G)V$ ;%儎^yGٳM Ie0 f^λ7U3FeO,t㘩{'4%D0*0>HMli )] p@lT991P&S04/[iNވVꖉlG P2즾' D$k9-(*V0BAR.ox'|Ҭ^,81nDV+X?,h!(nuIPA7Z}?LtA'm kcjwV㱢B>*/ _pu-;#d+g2|_9ڵ?H$lƖ3h8ͷOVg:6m*G/>޽,ZO^Y{a7_0Xry4aK.0ڸ6 26g'&e-iHq *]?! kI|c黪C| ߔs<Ǒ񢾏*Fqz*Մ@n4;6ad;"ڿV'` E +aT a7փnb;\|91Sl>zޯB'K@ 6-N|!B`ǥ TF}ӵs^W7e2O3LI]^쨅K~D-J8}69 2xf'X:ѠT"9z{k Ő܈Q=n  k; PkE 6IS9 ٳ_#.>]0jYύzzU*1#S͔ TŖP`b>`5ĔOH(hgiu^JdDcJlUtq6fеOmi'=}HKTڱ@mJxa`1* h lUU!Z*I:JLUP7=&L+iN(8>3r/_lT +_ Bg^ .?d0cceD2%LϲEcuO GǺ9$dl6n gamCLt:C?4.I7y%4L27*uk/6eGK3_xo"0fHW  ,KzFQYT̎b|T |$SDZL0X)e:^{mkDf1^&9&|֦nrQ8(qȵĢSovYB_JUzc{կ.&PK%a홊KfS|!-Ӫ(uKClcid$1r#CoB7Yw!+qGklj{!wɪb~V-6wA70p.Y <\G--BA"g}42EfobIŒK'I7kSC/őxJU>lĸAvӒUBM;$IdoHInN7G6:n##t!E1Ȩ=A#%|=U%` 38 0H"bukȈZ$p c_\Zeumx% \a j58 RNGNHH?H4Ro}:MٔJۊhb˕*7H$6#I㱶4C[>nxmd č)ŗ bfvϜnagO r2D0QnHܦ.xR8K#XEJ(C9ddi;0.iƞD/mD{fH3Ƅl( .!{.jf,RI}wpé:i  Da_$/X mTةϑKUu@bֹe6~x!/Y ]qoc#xklN384IoknP^ u$*{.]IZƲH/qRWU}fQ]7\6h28!FDFYPm(b 6xQek֔cF+۵JMEˌ7D(,z5(TQVh՘] Ϊ7.U}wi7 훚A5l4mu6(kő< 4l:D#J2fi^6hd Fh/Jpz<-A hT8"CsdÓ2 O6֖2qHtAb~SR$&[32r|0C&i_8;]1T5FF|AVٹtg8Ok@v5޺~& f|R y=9VnBA[> P|v޾A9FLH1e,bn@g z*7,d@2fޑ57HBC@%2WL =Tz^T\!<ٮ'6G@_C:)V-g,B"8飀V&KOʡѹٮwbZ^oФ'E^IUlwĭ-S? {8<5wUyr` _.N}?}J"= },jtȹiXYMuzCjxN#5rݤ,nU:ևʂ \`h=xӀCWsO1]Q>i/.+-0R?B>|{!9!= d% hy0KnѤFFyc 7˱P%%uiZf V۴qg jQ_z7=ApM ^&=bcR6spVwZCbcu͊uSz!8gfˏ? xoӏsic>& X67eR6jb| HŎly I9ꮆRWA"/JQ ܳ.1_ cHz8j/FȮqrX4&ރeqәLtnM eѻJȒTԏa JҿsQc[kzD2:.sK}Q v5NIIu I!į; s޸k.pFqc TKzdr/X []0JBɕXp,KOR9b{N%A@hoK#n t24IK^gGg Cۉ# :"RNxF.% xdpF㈑'rpPQA 8QQRG&*6x1] .%1@zjRD<Ŷlފ%g|GMFA,S; ? yA(&CvY ˙ ͵;MpO 0+N@ϴ qQbh?42}>琢rVR/RB֬\1黆aB?cw' i00 EY,b_H^ }JĔ,WSךH=55Sxn8=G$&!g =#A˥RobH7QEnZQHC-"\@XiM!,O%˴?aVp {d0 8Js؀}u.ՊPc~k>zDiTʨMbLi:3҉vJݥ^}uǗMD2P9);ɱsS}bj"`=?Q3vʦ+W̕:)"L)6}i :i/Ԥёz<rK  lԜYΑ/ iTCy/иPDuu)|&"~]r#ddpKEyvKD"l?X/hD[e)mz l5LV ]zJHxybҸK->Cؑ? 팘7i}a _aVtd 5U| >硓iZ"aZI1l>YTx( jbخMM6|H6ziƫO֗CI4Yw920|E6DjZR˸؞'NP)&Ϛn 6-PNq{*+&# kodn,VJ3+ *k@NA)xJȡYy E9}i7^-QS< JPTlU N ]Pʼ+6Q:{?P8ۻwj%%фREppRPj#%R(֎\&mrMӮτ1&3"n="ÿs(lʺ4ڣ>a6k\xzQyNXx9y:5j*3n^'`(2~C۟*Jeg:DxܻvެP޲$&-M8SYM8&=Ƃ9lWY0LTN~ O:mJp b6 9Դ9?A][{o-Od.Q .Rh\.Xki_}գ뽻r?ۛ,6 nwA(bV\,Q;l$ S,ߘy.S@sD MpNed)Km`p.\7,+̚l>uFTbg>\]cwV]J.iA߹?9&J>;%[NdaymNR̒ q&Fdth0,A/J}-Cw:Hgz;c4"*DvEEs†KK 6 PA݅wpQomx5mot@kJr6r =2M=v;Wg " qf{}t++!HWz,{DCiZ9 3ȸAO3&IkhJHC"{*QN0$/RgdW/5hM·ql3Rv޲pc`t&vªxFd Ԝ<($2$S% ha?l/@'KhG&BN|:ux~-vQ(!{og[KahŭG挧D 򓬻V"-hy3E @V1b? rM hAKE5*>*`5.kʏCBIߗWE mH#y Yů:P8FާaN7g@qxʢ(4xn=N^0rJ0>ҡ F0`Bkڷ9Vvm1j#s )poƐ\ܡ5-% ac6}Rk Jbzp`\Uc}DI9R)gz)ץ)a68VTW%sߩs-qPe4)pnэo,V_5<3ݖ#g#; )r^>SKT!m3Sj* XcF& Tta$EURP^uc,> E;â]pz9S_#8pۢ5%N¥1VKN[ӝ:oPguHhw ,3Efܮ>]'iݴK-$9ߣX068X][Ozk*;>GJ${ˌ{Q +. oscKHl靮nWބIx|?'!+D)of L阈Z jjO#+LTq\>x A!F~d"o 8ngz*i.Vgpyj(C!YZ\״}]ͫv#QW<];q ByRtηS(DU MK]W&RY<_+ P L|i-I1j8jAeS#؊8zN@"8+Qo*+ 7Wt.u mghM&q&gTKKASŭ3icrrR~qd#0F)6l2Fc+cZTeXcȨpͪlJx|6{Vq~ ]o&;ir>mHuqLyӔÞUŵ:"մ"?)A*cAJT*;|9PT` Z ו r×s'Ŏ1/,qvAO`HPӍ\gf "^IA&Ph'V(TP˱Ux؜hh$/`M2v#O%)jF?-Šx*ǩhOssݢb\b)SjA%9궙T) fynjE`'rg7Φ >4RA5Sf~rӽ5ǣ24\] o0̙ {lwˀQwe>+"RwC\0xtDFM YɊ[ s1#6KEGT By1píd-goɦvj/`z^ݞ5X @3^\ln޿WS.ֱUj)׬֊h ƿB|JX27X:!|D]tkaa;d}y@嚾U@XJ Swtm,ٛsqLƛWD:ez]LJZ:>ؼ`n捤1r\DɂqVlvi >`L=%ˆ{@d;,z%T_)fGO,lOdn'ȁIz%,IП۹*ӕR1:(_s+^D^$H\1=>z'zYr@; KHh-_HrHm C)~#. w a??{m9|k)mkϚHaf?ZHi4JI!,d D>,;< ?(3`S>=HHKnu`˅|.:䯳Z$ PޫUҫ Ʃ!dtq32wWݐ3*C95KXav?(Vm$?x5AZU2_h4>q)7$ ^7A();GK?Aaw&rt8laF| ?8C>cP[G^)2B=jvY8KClf6|[E*oxqC4%LuKLΰ}++S92(éY@&!YpTi_y6Tbv>yS&vgWPmq3oͿ$A?\zG/~qr9CAs(:;*$~lwi.RRõ}<9\Ӻp -\ ^`[Ѷ(Nȴ<-#jVEtİKuOc=8 ]h >!A.e"߫$#r+1Gsnx"T%C|m/h,1p/c\+Č}TtO"P4^k}_xZ1jc3x>8ׅ=ZV'ZآG ʥ+ q)-𰱤#jѮBf]OV`OpE؝cqrAD/T76>s[.qPrDQ@3D҃ _SM. =U Mv_<~G_f2d8q_|NZw4TAcvS{r\9I~XAj\Fx2E0`GL ro5Է >ɋ]ؓLѝBy8T@*KrqORmPȐSmbMӐH6#vr\y~GwT&0]畱Dc0܄YlLߋ4rw/.![ȼw&\LQ$ Lv‡L Iy\ޣ~Go`ǜ?2IP)e,9pQ(~7T,hj e ۿ?DNG=&WfTBW&[kYqZ5vxQ^}-zczxI QMa3qd5g*}aw?SՖ_Eu!/sAYeۨUA̭tOGՉӥE<'4 }?,u~TjPȷh3;ӑs6JL6ž"煅3Hw=+J@/}cc9;Hn&n,*v6]Vf7i0@d\OSpN.1N)ع/H*mCTWrP2{??T)ޞ%ū<~}l|þW(q] m ?g*S)@zoK% l;?Eb,}KEh=hv84ۋt;ֽm~䏡h&uuƶƶ`:e90SG ڵz1@5n+ ^ I)uO5G)J_70hvz $Qgk=SA*~uKՐ@ ?ԃC:yd-HFXSDyu\H5F* @tI-OG3黼Z[n7CݫN@6 v+BAB"bw֡Q04K- Yuc U'{)MBlaVIqu7'𥹦- +=jIX zYc$1M8鶕>,܆Ja%}N6{ B˔J k!0Kpf{n=VHA9eOQVƛtkYG/8Bik9mE(d?͓h>te=[VGȣ*]AK{X 7lIV0X.pKpmri*H}d I6KWRl4aNzWC0ftf0*oZ}'*9٬bPJf۵+aQ@ K][bMc%7Q_D[ ) ZA-0[+֢%^Bӯg fB 'ʽ&a cUUHʻUmatjY49|!:~?:]A>3N7ҊxO\o؎[׌LмP ;vZ{ 5~vXO'6N +.H+gÇ$G赨St+  r3CV)Gi~L!D(#^m|ԑBl"YDn艚Qȩ <C=j"ΧRaFl4ȉ5:KNlDͲb{lE_G#Ҡj?]uigG:q޻UP~KF t4&2dpF# 0"f?o7pa`¥fvӆ@,7*[POh5IK׶G?Y[DR"JvLcۗF)/ej"dSZ_'LeVfM?]}#+8Giqf|}/$^:ؘYA_Pey~}75"V]mU/AVZqzV;!a8#*Os6|eN}qQ\MKYsd]Dg֪g3frvu֐PVd:DO232#n3XY)ֲ6[ @YH Yʼn;CdV;yY (4D &8tVW'*qMћެB9Eso!?._-ĝ rTBa+w dr^-~–GαF}V(:7ݲZh:J=nh( B@N<;Z ŎpHK=D-aVil {i`}g#5v<57#9XF|>J𛑛^WU6`&TZm}LBpankr_ 3xGX :XD-GAc-~Wx$C0v~^nJL J9TE:b31GOb9JXT[1-3zw٥Lg bWtĊLDQ f&Uao?~oY[ uG({jcN^h1&QW:Giv <8q ~mI5(` ׳:VL3&{e\{ά JTL؝SZH"MP~i:@XCk0.NǺ@~-=Fq Bݗv p w, " I$JcG#c+k#%Ы?)Wכe$=ysޜҡ ݐJE }2$n$Ñm3IvYa+,w̢w4<^jˍC`q}ƌơKƮ7>uyƮsCY* I 9,Gwqs.}z3R*ik|$eqˈȋmh.`c~1fYEX I&hsCMo:`Te^QCAǙkӈL"#1O#=8uvbhapɠ5ýtzџҁN?E~Yϔ?rQ_0yC% Ȩwj4H^d) W?7bІCsupe%NӨz'L^m$dr$)kL=O/܅_ؼ757ѱ\R>y~FÓ1`۹oO4ìnoTa5`>q-"5uIϒ65MER'dySޕKaDŽC7_nnb}?M}$ؓKP(nl1:#X@RIM4z8@#U`j @׽4sSi4LϺD.9)̰F."B}Y94뜜P+dX!hAhi@RKMؔQ\zG+ =X=GpМVwo8~NB7-7]-? s%4)ʽ=dt1? ZGʹSRrTA>~' ^Tz @|1ZgJ`k#~h-Q.hzklmv 7RC*9 M4XMh!^{dblc;S8JC Vz*.+_2+bu28dS*ll:ԥ\aWCw.cd'ٍS¬ZC+ 2zgHㅙeqd%cyZ-毳^hِ+[q~1۩`h[vyC<Īz9Cd!6}PJ-C3*iF< dRh [Nړ2zLdhT}'6f*&t#BtX%oy[7K*CGotءPj+BG#B$/g?h6Q? `܄\.7@\ft7wkCeh*4Yٱp,;}bGQǂhK+[j .32 E](G"@eZjJT!Sõ|#kc0o64^dJUgMY;Zj $N>-qMzks9>%?ulz)ʺ{88k2=`Pol~.wIn̅^"}8;-HՕ=`Ut%~[.Kjm(u1Rd!"bێ2YyR!!#Nқ30l@yԅ1R$Ge%W0|j9qM?2$ZѮ]ozi~tg`DR#1G>Vr&IDN'L1pGUTw*r/Qv~ئ~274̇Ht ||]/9WlCW}n0Xӏ IM(&(*ּh7:#/m™^Ҡ"Ӑ{|0憹❝fbV%6C;8kԘ_<oE _MixPges?%.T+ @>6E|%UP,cỪrFN ?H5B`ă c%ܚ){n,h 'xK`pZg:oʈ*|Au숺4$tZ(NiӒBgYb{@;CV]iXmB,{F [pœptyi>KmG&g=Bz~@ )RD!)a8R*a OhC ThU;-:[3*/2ohj]zI/9aGGz|f,'d;ܲƚRMoa?(M""b@Y-.@SIn:rianEEԚfT`IK G[(@yZaձQ:GrbcmE K "Xuݔ y3Cs ZsokO> X=a=O  ڻK`2ޠ Nd6`2P] /i1${cۖ]s RAL1`R@yqPE(:R_'qJ Hp ,ȱ !`puu֙FEAYӽ nQձW~Zg9įLu=iV;?TZ+*JõEzk%Os 5Ey!S㖫G_@G9!RuQ P?+'Q $Xr o TaMʣBE)ݟ8L#˧[Ƭ $),ʑD`})* "c 'SVW]|_X#xk.pM5]wC FEMY$JŦ}o1Qwe P+K т$0Q|F:va%7q5*Je0Mje'&ma75YH2#OL9ݺ0#T駃5ozz1̛^NT#1-b%~A^Xs̛326w]P"~ ]}^.nIJLEU žd~*:fh MR{|2e yPɴY=}-HO Ltpí}buFmj=>'VwEO&[+ϽkX> V )ossDR$ G43c}rJ8q}5T !UDl@iM ?]\lG lC0Ќ/,Ƹ 䥭f)s \)+ʰOzW}&bu.Ni5w4&u@KTxm`B&nJ~1Gi 7jVmF_eu7pjYlg0R+d$؞[Q EanDJ& GYcXJ"JHBnniw4Ţ3? Ɍn((:TF@ `JsxWN!npl:H-$N-g ]+&>DL$Ri -*'10"'Y&9] |M(%~TOZ6gʔHx3r&TWGRJ U|qWg>ݐY&KNt|0eP^> QӂD/Ɖ eŰIǔfj%0퍿)s^l6;2g eТ?ӭ%5!Nbc<%[3ЧƁ#a,J7 56ZLRPZR'bLMcDB)Y~ %:\nW,;%tB|{Rl " (e퉷6_Ϥ47KwO$+1]]0轩(>1琮Ҽ( bk)mڑ ޷G'm4eYOϭ/ MPb)߂ 9W&[W4-Dk%Gzn T5]=M&d\h4QgirTʸȲCNkj_TK+prO'R4N> >j+Ҡ|hpq2҉!,ֶ.`!k} )tnGO LeP&P[P&'989mqze.,(]K >//60d]Y$+ l!lk\ e-/؃WH#q8 ztWOPBz$#n:CCJ9959yF;_D9 GP;o+ l0aV`$CyQչ뺸C8Z†꠼0ҖCW砝-͏=:΄|Sѝ1bSc23QU+SuAh|m"ׯ~BiX܇om5;mW3 orѕfjE `/*S꿾z>̿_g.=By9<wEgeieE]F.$cֿaD3 \mjykOP|U b%!F5ōKvP"Ѫ蠥k:C¹J٤ WrcP 8ktdo|(?зM@qN4$0Mm`DV!?ha;SQ^hm0upJ~l5lV ŧ0}Gk s<࿡:flT|0 65+L8@l/kCFԂZ͍@Y/,ǐVF|v/ggz6&G kE\+Eu+SXqvk; O[mWYӺg BE]`OKe]hJS-G.*@YCZ ) 5Q:Hl `>\:InRJ*hnF3VdR /}ruNxp+6zVgꬁ=gs+ضғVaZ9 M̭C%;!{ lgiS~@2Qx}~&lpꆏ%_c6[6_dX,nw*&QNVL7/?ڟ}_iG~jƻ!;'xm`YMɛ}-z *$" qhU$8)ߺ^]nWAt 9H6:iU ӫ%W:`+ Mbf7 phHd'T՚8=Mcܢh[Ka|*Vcq/Y3 R:640C.E9+tf-04̘֠BrH ҩDI[A4{W2I|;eyStDCkAA֐˶zx tMTY}nroةMnTos6:Y/# ߱a0 DVɐ,#uV@)ARL|`!'5E|E={M\1$ t\kw%c/nj)̀I5PT/JDyϾ(#ѐ\}AkΓvZXIKaRq-٩(ވK^ίK"tML 2{evA> \W[^+)as?͊UŦmÑ:R tWkp$ȵ3v <@!"aB|W_/Ac-~\N/EJ' êl|Ec4̦/@2|75+6jKJjYT [WQ ޺:gW^>Ӽzf9єeBS1S4Ep>>WyMX|v3/0C4 2޶ϣɮ24Jo POM M, '+Nbv \lr+;Ыۻ.Җ B.J.xEɬ=&\go<` kQE4Aɪ@ @ԚzJq]~z,t;7S6G-G#WZ(M=6tpG9-9L檄de qpYF`MHY ?7N6οa}MF_PqQ 5ݗ>Wo@Ф(hF59:9(,nkF61k 6%yݫupHۑ*jā?%F5{KEH;ŅX|ݹ9x{s &/l8n^^SVoJOn"g#ʚɫr/̯xqeQ+ֹ6 xm&ȢHv$×RHEŒԿG~nAPGmFe.9Bd0cbMTooXx׀#]TjGkٛ;AhOJG+_\HE0$-v_UcQoUCƉq'̸D 0q\_sE%l[{U2J&;{(ɍAf(H |`Th~(zmOɋ +̾Xg7[>X0o>ss;qϏ X> tS9#l4vWxT%crP|7">8OI/sﮆ?QO!RW_M@G*̿IF2"pG݈xpڰG0>/Ţw ]Rd(K®Hp5bwmvz뢼'Z?ÓϷGj y" 8hl9H^}$2QgW<;]\Vȴ~+hbd B໨~VZ65ɯ|bԯoR)sEia!+: p E'MxDG̅mlt$Бy[u`5eMX!1b]4wk܅`!`jG1h;CҷPQe/!nهGp쒺BTk;} R޼ҳ*{b``{* Ì#% N/Ž': yHi[ \ʡYԴ<>?41Ep& GM'崓O#xJ?]֫=_:uV(SMt{W" 5FKYK&!l3e~} 2>0:E}I~MAܘ|,v'|Yhӝ3,3[-%|qdo(eYBű[?kOE/c)as8KЯ1UK gzs6 Uߣ|@,s>} ݅b6#\\ c!9! _g>8TVdS~8%W[yRw` c"ĥL@|l <1J팍:l {klP/(u)u+'MSU]f׵m^R`00eRWJz?,0DԆpA] جnn(9>lk3dRWX0.y3T+9xf~{ 12NX:Zk{I[ *R)}yG5{j3Z4T1qi;9 ;ea!ɉGoԀYHH~75Ez EZZӼxy:zR4lx\r:qP[n!5iy[ZMZKs-2ڟo#Y?5휠̋)`Zx(r–-%ÿ̉ã`kbiUD@hU` 'hB\-Amee[>^:]W0 lgz&jn+$ײ mBF( ł釖}3f9Id*JGi2H׼"DxըꀱG.04򲎵g4/ , )ZG?q^Ծ%9%Ra蔿H5~zdO3o9@U\9Ҩxlqf Bpw=Fe BDŹPdLG["~8D.YKy07\il]IX~uȼen|@oHˁqTNv ҺWPq1ٷ7NjAצ~֩g=& G(iF h% |O?`'k Ѓg}1mXef3Ĝ%#4Y$@r {&% ;âlx9̤NB!ؽ, {8ܿ#gUl fO!ufX'뗷;Yժ#mOh "ch6vH ]\^DdB,!:wOX+,8B8t"Y$lK*S-̌yX,$,K1b 84^xV~Z<~q4򳬪 }t|лUoja>\ʔd<L ):[ nۿ30؅uM W.neE}\ׇ#KabȤ4N!"y3hxB֪:G HUL{HᙟŠ{/8R|;fP{y.LE_EVnEID7fB]{t|AEH.dd9vv6߲{*QC>OE;z=iWL)6+zoY?F4;EH V89uE '?Z0^.0uy֩R5rBPe?1y7]?*>Ak+<C?VR{m@G's,_Vpټ'}`Oi2 b[[%.s%DIyʃ L߮ca)=:OTgLfGszT~Vn|hMT0b &tZdlLi4;3r]yl)@ې]* 4\E5;D_ME;iH|G":yMaU,j;F"5mqj9Gf 8r"EuI+`kW`DY sr #<ׇk終p=b'nEpkz2-c5(YIZ:/n{@Lٌ+iH7=$MNb!R`ۧ{ɺdgmFp{@-WfӖ0/Wl]$+tVy^3)B#EL>Nje9ZE+!N$V}BJ;ȄQ}b&!`2\H DHp\>3?L횺m zpva'Do M ; (׬vqMcJSFSK1шDSX=[ w/UHЏRdvf=[um47{ EyG'"o@ OQb~?:4. sǢ$~<֡h}Kҷa*ֳrQv0`Wis^:֝(C{%)[ᇓ&`ZHÐ8MRż9ZEcNG,A{T YF)%+9nn+E EpjLǝף[xUX=SejqzwwN'N;9(fe>hMߌrE$~1nܫ4ؕP,,cXif`K0^Nw:/͝lu*8Ieבe5+l=KMÿpgxMnHڥ:Fe ym`8NG41`hs nYΤ".v*RDyDn o\hKnF"t1+ٞ'eԦȠ tV[P5:Q٢I_TiE mjԫMkCkτk{lc-P) '"w8;BGi=t(2 ʄŏ(Hrg+0?v !t2 Db k 82>c`G7Q{`iWydf.Xjke*H?+[~2t˖Vky$«;c)p(flt?BLLQr>X(T]# ت| &yq`z%'ǜo~p-D1 |dJ\鯝d*56 A(bnٮӣ "H8հEyV}Ql1_Cr+~CV)؋6BA r:)GKqkf#ھ~eWUPo$H* -܋Pqb R+ksI~Z:Ձ, Cɨ;PFm68p$FK{xaLyuM19RWOQ9N2 0 sKߵ7]>7kjK_BP"M9 OXͤ4[b4--T,xpܹ?ßrO+mPMm͸Vx B_pN~pvTJe՝UQZ NK4 E%cKMM{J$?|v91}{>.V~7S~z "\LΥ]C5t`V֤= Pl~!4kIt^:;Q63ދUG < kPĎEp`J4ҢF??*.GW u=(M 6i9c|1+1FMa 599nu>|!e 3)"dV;v{*HĐ۞!d-Zυkx&J+/8u*RDe%SuS; };nb%C{t6z] gFecѼ @z. !ucܸb!@VQ,KY%łGR 0!;x oy(3UP   8ɹU(OJ#D?\eF~Y x[G%̂׸OGѲ7Ccax^u;޲Kdy-j2ӛf:niŸ(_.Zwg5yElmXԔQ!{f\RarNeO+x85yӖt麽C !?Qe)@=s>-2t NXt'I:z3qpl6dl$/RuٲRyʧN2m,NHiqY0c݅H^7Mi=HGfړQHM3kҊ GHiXNg sf}|Xꔒ2v柤j;=30 Ł2Dd{gMxCә!F%6 ־پ]~ω< OvZqN,6W/]hKYmS &zםú0aM-&q|8PSL>hgXivAw|U'`3V(u%zzqI~"0ڐauNԋN ^7ts1LwnI;9Rk(ac`x+#GQ PJ7?BI"̙{~HF<+j;ю6%\ Uvѭ5 bYqd-lL3GxW g㮘k$]>|$ ~)xX& z~2qV2x:(ȦWa)<3Sk:MSx2;]YY'h~Z~roqp*+\7:sQ !c\bru({ P"j\tZ⅗]b?D+OٯgO zuC{oP<z^&碗, }*~h5p@EL-S:P]M1V@ Bxɱ^Q7.me1_46Hl3P-͔Z5.57+

NE[E9_bdB)6WۍY*V4*e4uD.NKvRvxCܮ)~QPH"?lXիT%$=}Rb&UغJ5a 1;$(oRZL"W{2 8@+vX=.dSA ͵]Y!Pt=qM=,@Hq\ǭUjZЄz?]E*^Hr+P.VP$t)i] 6h5V@Đb $fG"fRO Z .j6P'"yWnG`UA5Hm鯱1&#m/Jx3{9gr-WX:OL}zHמ2>"m-aEG~10{n6#<2KS GEk_'y X:in|~$Q: g^۹*l! ^d&#߭mr7hF;l|nM9šwr -_}4zX$>!U;߁2CmaeS8zIpt ںa^dj*u<%Z4|3DZ=]Sٺ~֐bQc 27KWej&OCYчD$# BQVX ̻/U9h V ?ՍFkUGG*Sh^\slj+ ;AJ>D̈ltY+?Q*Il K׆L19J]F8D<(xa7A_!ghnVy%(6q W#Lz9[小%8ƽۂ9bÊ4\@2Y) x&LJ.bO {jP#0HOyL6̩@6:3ĀmG8ųKF~ ΂ u0Rb x ҈߲*ԅv1xa+y#׆|ě8=*Rm2`q]L A4f3ޖ$ٞɉu?gGyE.SzܯA15u|ufq[Ҥ O([J> ~=4l'C~rxӋr* UsÃa+&^4q@|xt%i,'}-śt=<}YŚ } Les|n*9TRBJ=no.\2T`tҬvMІ @>\rVVQ43Uxh[M\jEDkvt0TCA1)y [2F020bR'!|&P8<m.CۭO=եҥt0?1Y+N)&j_R RRk' HO-ӂ}?~Xꨄ=SjZ_Љ2농9nOj`*`۶PGCZ]H$`799 q7gێ|.gak b˛ߋKԟ M"4.;m#RVIrY'N…Kd-VH"D]O tv(8+s/Z-,$(qEL6(B'or3 c3됤"?uoGAP%ț-*3vnnjPLNUJ .|{ע4޾VC,%\17ٖB Z&YU 6l&u54Ay>lmMaFxؖ$r6($b>Uz86anĹiuSrɜ)O6_w9-!-M}8/cwƗ< d@QOGЦ0f^Q5{7{c>aFȁ t(}S[Iė^.M{amJ`"gu% |r{QgSAerKoHQ9O iiHޯ3dSu9TyV;B]B |m}[Kqqeu< M֎rƒ; |ڭ^"3q<o[~bTd?4vUnt9oX8Sv:UƏhVBHdj"a EV[^w ڠivHEF)]=^ Yh7ī5u:pt]T#QL_hsH1Qz -?L5Q! UK0X&+~p7ϱ,I{#x𻖔|Zfl/CBW~+g~.)^cuQ 񶪰^f2R_&ۚ3 '!#mn*t:*FV1NVBS>Uo H+9(Ϣsiu/ry19DАJAk:E/6|;ܶ>c0VV)o% ~s/kILgyv,eNTu潰2^Qddl%˻YN@%NLâs@;`"rAelb+BU/AQ.Op1<8 < uLC3.Si*~c;tE|1R5Cn.}(2'KppOǐ\؋aN{diMW);,xK-Ɋ}`NJѳ BY TՁIW CnA7] Ă5NBܦwfJA_Sgݬj r< M~D ծʭ{hnj4s.̲Ar ^ہ7kﭸ^/;~r|3ޮK|WiEXඉ"jRBm-pJ$hƿc9K0((<$*Ċe> eKđ{f 0RFYG[ORv§jc Yu"osxH:K: OSy܎ʎt*#)A$)(ПWkYNpQٸY* +Bm3'ߠ^XVdQ90f{ǵvcNH{_)sw_!kcpڛ!7r( :3&EqR,aRqD 'DcvgEɓ)Anu8l"5x_ycR2'.8$p%n9ܑ3Ӎ q ݄Zyhq._V49SƬ4ᙾ k^5dn#1ldܔ xYp q5Ǜ7[?K꿫9}W?Fz^ t o8;=xHbisi.&ώ]`ϻti8SaqJd 5(² g++J 8Lcp(uǩ|2F2ZP<R Weo+G` + ڒ1e"qgP:)7/ x# ƣOnn/J}֮.fpet"wM^OI4 Nw' \7@ӝ՝ AJE 0(F0ON[;1c?'87zA0KKeߚq\A^*ə7 -\Q?8 %KQ[Xm=`DLF DYo1ͲQ s_} Jwd*Q foh^sOυaS ^[=|Hi)X / :!W+5$/v>rۀvC'PO|2et1'eO@w{=fht4r\0or ɓ#Q TuBP%Hںf| V*AlNXhn[Nue Բ3jV>KkC.jIX:$ZHfz \a16`ZVl,hR}| H%7QgX }~@g߇KS?;XAEޯ`ԕE H4(%_nc5tȡ3IyweЋ5v b!PRI8F"\g5IPcQjC Z24d6Ki`wqqq+tOU]=:S* túKrSamb])JTX+s£ 0.q:()ckZs+)[_jmmN'pp0iBqLUFlø}(T1/hI_Ru,)~}1!1F)ⵒڮhCN@wZМwJ>2*DE0ZWR5U1Ҙ|m[.xprw7ϥ=P_J 6A<z)8** i_ r&/.- Ts%vՙ!*,B%RQL?\"ƮB-l.Jkr(HÅ)eun?^I Djg wD0FhT:}"ge-v5dJňh\ϳ ivlBbς?ޙ '_uޝ9Vyt{=9`H|7@/`JE07Fua^*EyWVy5TZ^5AIՇiu4L0yGg]z2C`Q7AvclE&%>G @m4T*3ع("+a-xÕBЩ'P,FT N.K7"j^7Iu{U8gSl:- 䤦&DI# wyߊWJY:0дUrJi S½ؠjl_{)KaA%&k qЦfdx=IxU|hs&]~ጙh󪧡(/PNsl]~dtj뛝tWcfN-Ӭ*<܍oMNZ|$7֜R-Wj4-IoB".pVyV=sɽ>_"%I 8s\A*Oo(⁓0/^IHpoBJxT>{fjS'xD |KUCs5Ur2l Sr͏jTwdtWkhd&qfw?jhɨ [Nyk .т"OZvs! 0M_l0hPʴ|\7&kmIG;`׈ cA z zoz(-.jq _6ݡ{ʛd[zCv aQ'S33Axnq lukˏ2EǚM@9VY˯2$eX16pVcʞfj>UyMyɒ'U~l GG^MuL ٴ\Lq4V  ,^WKR)+Z^~…@%+KXRq5yy-WjgMz_ |חJxV|"b eTh^S3cyMa!|( ct|]fj|l0HU%`W;!H}) |W9;A@2b7CFh>*9w.6vw~Iƃm>r_nD$,]uVge$ n!"SV\ZHd JP$<kSET^>l$q+%"Sr5i % y{Pl5NӐQ_]5bWTH{ :Ĝ53O]Ɗ +25PcR9TitǿTF(X^uڭ32Tx {U53wkՅk[^-^7J^wwmt[`ֻL0߿f:etJ/ÉX,y80%.ľof][.("A].1cI rC(gC8H;u X.s*{37 ݛĠfg㣷>Wb!1w` rÑc[ѵM˓Q[mHA^o9U$.ctIsŋ9s|2Y|`fg! q0oZXn.<)~4w)^^ yrϜ;'YZ !fQI!3tۡڑ2TB>҈GWikwg!O͛WT]2`Pp?-JuU.H hEnt+{0yJ%^}<鄃6̉/D6 O.'iђ//՝$+2L82*hWWdJ @!VC(J^2DBHv`]-@}޳v&|3p >>odj8FKc}%C珨47he ֏'XՒx+Lp)hί_?%SV `ZW Fu#H[hBj9t ݁rֳx"JѺ*Qҿ&{$WDrQ^K4΍@/'OP(^C f:gl 됱D{#] 'wSlFWZ?&Z,#t6jO1eۼHU _z0pzW(z a 'jUۄ .aߪ1T&5D 醻/segKa\fn.X\S쪶=uz$%++PkUkA+joJKWi ش hfX>]p۵W[Aۗr%HLjdBHi JxܭM&S61C-]`NLs|FA[El%S g㦆O "闅/dIߨ-Ҩb &W 0V|ĆQ Hr Q(Pf5CeOL?6:mR2uKd!>e!z̾t̕˱d;1&WHolF*hX"*Q'A {k3Ǽqt!OMwFާ3_{j?棜T(U7nE_Zօv6LX~_O>"bwf=,{|<}_TF'}sJo{|o~( (DȚCx\畄ON~So?xatIG'R=BDEx|lP׽JFTY% 4ʏeIj':PBo%U(0`iɅ4=žj9bw"G (~VbAk7ֳGn,%qbx@%L-e RjP1F,f璞EӔ%;Uz+X9ۯp}ר?Z~(K/H>in¦J<RXRw,5j؋!@f!@aɺ)uŅ89ƍƊ/^'D#S7p?F%ȔF. #Xk뤓xwi/CD*LC7/'9 A`$/Ӫkp(e!@@]?>(REAʏ_OdGNϺ] c)];nAQ5i[2zv)<[dޣ QtyZ&We R:'Xliע1M"R POg+6@{3i3$U-<"SO@Qp!œr&O篥{-29DTmgcMn&U˾sm=UyXBq-0*b<jB$ջf\kYZ 2x2.Gv-W7,= ^jm k_@T40/c)Ex>Liަd9Wr~b|P'ȍdP-;Hs^ @9+ U}xR^ވة/Ij?ׂ*So;5263<0|p&|lmw!wrO]8tKU>zv-R F9} ԄIu73S4ͽ9 > 0: 11hY/0'w&F8]ga W"KmԲU6sةK1r+[眨+"6Bҁg@}+xzjbW}><Cd7 θ!Eb?kS?\i8j'6] Wk y'Qt Nǧ:Lip|Ֆ#Hɐ"7~5O`?IZ 5V6jBE @ Py;LoyFjixk.+v?z E7Z|PWҾi@9W.}c4u Uq/~;>Ưg{a>7nr(Y"@y[,d_q!rqՔbe#b+G>Hf a:ۨrzSlQiqt)<4YiF6ڗԀJOci;d?x^?E5P~%/Z(4$Eg?^ k4`z&kleR UWs9}}{q`?ۆUkɁIV+Y nG  $-*}} 7<27hmEavy XYphL'#BK5p=r3R_72Q:dqƽ!AsnbM2<.ʅxW]waɕIhIP/"i?rtrWQ:J:;#E| AtL9 |ٌCѦvwWNSȿ/8Opإ}_D֏XÔȕ+ -VrCl*><%8rg?R=^^H71ZaI1b#5CķFnXSnhQhk˧#ɖ9.8# >* U7%nkI醽WMY^cK +1gP.8LDӎG+3g`^ȂT0]Aj&8^FZ@qBE+ԃ!#rFi?v|m(!!w WCg7ϽyX_sOgba y2Gbd Bi8 G ֯^?[6]έn0F2m7deŢĕz\Y.]B=uC&zA^k! XLB S8ψX5(9X|JĺY^/a %f #yڏ}F3v/77 "TPZ;"%S)RRX<[#aJ3pݩ_E{@ xo`RbgEv۶qLtMZt; LV_r'ۍ`{<.Lik=SR3FmZRji7zIQ o8V7Sҁ=NǙw+]j/]$|_Q~y_?ZkJHradB;iobz1%+n6 Yd D2g.< qaK5eeaGz5*=_" T7IeX<1O֚㒢n5Mds/Hݗ-'x9”=_,ҴC{DȬC8w~2g #.T40BlLX^YBlca g,:rw;}>9V)ib|}mW~4 ݧ7|hk~mbCM:TUO3JIGvK2doO|մ%iƑO ( OJJCtQ3c l?Vv}&TMzH_!4%# 1GrXᄮ]֏n =d˨8c|v ;)¹$`nD̜-c7߷ϼ9euu RYwZӘM҂+]68V_:V@=Ӆ٩)ڡ أGdh{(uxK֎^-̻0j2<`kąM;N h0~.˰j9UN;0N"_@1qWR rImC1V-ݴwKBa@t'-E-F!{iv,SI] 7l; e%/bWW䙆m(Sɬ Qj1MVA_5{Oo " {y̨f RQD Tneê_YQ@*T Z NZI5c ]CL7::crf@#|B"t4cEaMcQ{"+53%%HA{$0ّ*:Vŏ/ _Д=ЛlIJ 27ߌ/tE ]T忁Ѱ ̥fZd.vM*Wk~Ob2d} &6e Ȭ: @GAرcJl .yeJpU{EPP KNSj%]TPxiɋ3i_I/0NiFҧ>jK)yi_iۛ`.7o#:wXٌ$/lT|QC#Tū8eDzǎ skbQ lρ80sB˒7eza7FMˀXU4U) u2ͳK꽮WC\g\C-abvd\;OvIpROT3g!igg})UM"Q4r!pz&iVS3Ge[S6#ؗLfrMfS3ŕY-@PKYzX֍\ҕ W@8S|޼ŏea֝:Z-$go>ՙBaa_V_?*[kHF t ͧsM)xqN+6+lO(%лF[o$wY)ȣm=Jۉ/dF:UϙM]Z/lx{!%~s4ӱ@&օd[]\ g1C#r&aUAdHױH6Ku/0V$haU!_ށxK,?b%MDu=ůoׁ EB7LsYSC2@!'dK*Uϳ!y%Xt>[eY. 9d@?@B̾ F-3\n򹺛ƕffM]̩d+ҎE&ӽjk 24b̒dT3&dɰk[֤y:$d36GHh3ur6 㲑EK*W}/m-v6z4ib[m2o7]0Q'עi+ńYȪuM'add?)DL|z(^>/UޕK,,Ͻ:mG+ ݕ@cWO./E ^oB\X}eJ49@8'ׅOe OUUIj VU !+)fIWR߈5DKV_=!ԍ#x]mSNRGrpG8,CؔȴJ~Yxi7SgeEz{C [V22vLvZv`Oknk<ƘXtOTj@U5d H69/-?&G$w!(-:([#,Q>%:@4Ld9PΔU"s͟2?e#34-mM *2wt{1)$'HC OkV-B "b %-AhiT+mA_"WIbB۬,qD,P9o8+-Vq2ŠEXp* G^:-*6mN&cr-kJ`๿kޫڑopwB=ۇWOss{0EHU3csv2wy`,,R~UQ PINH4R1TmY(eRx%Wy*+UCT.EƐQ'oogWʇ+|ߟlA[{Eo p6h+jZ=h˦8!#d/2?,.WY "%K:S5M&˕DN~)ndݔ y w ȾH1MgH /*3Sf[.0Lt#vem*:b1P V#7ݨO>ZBܲ#ߤ6Ѻ\ "N[g2ʵ\fmSZZrh.f9B]uG_kQԕۘStZܼkuQ8Y͜-V($-_i{kXʏC^|[F\#G9o9NX-yYz}_咓<׵Y*,/l̩>vP-f"Y_*Un1ZwPhc)m&hBX/#y o߻1uTyr<+$p} XvR%`Hp^IĄ-^6"q$iMǘx%jԙ-SfdIdF@oT엯U~a\tٯ{r'v=TW-V װAB<:`i? Q\hՌXw.OwrIEC{cWcYT(-ݱrU%7tFPWp}S1FNdM˾o<ۀmR: u8f<>@ⶔyQOΉaq T'Bճw1׻Hd<Դ  C\=u!޶-1k)6euD"&Fڅ 𽇛Е(B+>0O̪ZJ`M ΉlL%-fU;!IAgn m6 M_oЦh )+2>crR1FѭJ.K}:ٻ~\R RLȀnȊ7H"P=hTrt? ?9زMe/B!LIbkwJS$NBb NhҀMڏ\ӏIz'bQҮ==oHQ:֡`)AWx˕l6 Yz`h Uz&s6kLILSz714mz$ qGqf |n;âYr79Zqg$Yaf{5R,~ƟUoi _sʣОF&R;{ 3O5{f8g$pB평M@REG_bC$Wf0b,osm ?:D(T6.Bϻ ? Xj(k]LjTtoI؉T3Z?N0 DuhO"ٴ'p-şSb6rϤuh$##ȹMaB`=PaDK(3xM) / '8wӎ3WKX׆-z-&V]`hDK>c0qjnUŒ[V2DF^\76WABLHП?mHv ֟l;E,%3b gz7mEhݍvvTefŝ3ؿ(^$q(Vˬ]3CWyh Y'HQ)!"S$Ca-fszu{I}u,(>(W':Жݑ_Sn՝oc8 `3ҶEӛ)$ ^3o\):b&29|E%~>l|I~ ]o笏W(b`[ыF=d;'&"44E ߳TDo;omH1 ua [cą}1'x/Яb!*Y8:u *{K`57 Nv)F~d/pЫ?9e@Y󤍭y PV– oיtko~?;pme7"9-O/SMw-vHbǙDؓH'NE܌Ap-~6md1hRc9 m2h4PxAX8]h nzC1H?x5c  )^M+ f^O 'IpU/ߢuɯ!mzR5G6 Ήv`In̯wRFw&X9@BMh""iٍ6(b*Rd@>i'o`v#^&U7S׋"66Nvp*Ď*kADpU)ga`o^ r(|OeC"!pkZٸeݑBy̅J-N*@'=Iqݒ[8[_߳y-l\+"s$z儜vx0Ԍt>E{XQ1ZNZ}4p~y]b:{Ž&wRpJ03gP6wg_1#ܑBjͿLʐO2 =$$RdS (_BN8Mm|=&NԲN0Gtc}l[*FZfG݋Y%OOL~(|PbzU~ƟO,;!SD#Tx?U̞` SΜilR?}{y|g};R9ߜ$ )}X_>G&aQ%&S+ pÑn{*1PJ4W(lEYղ72}1KZwPm%FZc=O ^(% Mjͽr ʬ cc/2D-T83w}'w 7Z:#4+c=ٮaG5x` =.%LU'd1CeЍ∡q703^ӾLLA0Udl.¿",yW%m}RPVdR/ m_x]elj|Vd}2mZ ?Qfڈͯ Y68IHaκc 1ظU}EHٝR'Ki!XFQu:yTCEMWOJ>mo xHw,!7XKe7SFcoA#v&b x(J*(}^C"Gq"()a)k#Oo\nǎT :JT"JV#L G bQtczr긻tMÔўy&nM/BPВB q(lWa V`f^0pKF&ֱe8_4㳄頕Q1$)(8-DZ񰝧o ~mr*fHPpub5;9̉n$4ljD <#>B:45VLgmߔ:,BI݂YmN}nƁRi-#W@S FIdz"U:\r:x=ӜFn᪁崄4f^0*iyHLb8RnY؀,mPmoϣdѶUe6XhyN躀ʤl`/4,ֶߴR-BQhЉi`kyҾI P"?`fY^BU%*؊chs{խl, 53|R:e8;Ab2r[u7tV%k?9懠-"FCa/>!@TLyV ȄLwty%|!?'š-Pɢ^CBtM 4 K;M+jQ_^P7I[\o;p<|;'u|`~ It`1⩑3og6Q i}NDvTpp/ f%#VSkvت4vD;IQPE<^VeXnWvt.xTh: [iѓ&]s.=(\E[&]kGk_w|cm3E y,ftľ :dh=+*(pw.W냕O%\ 2Vgҕ>&Tvxǜ"d\x~(W5s@y%ꯏ:Ay][, op> cw' K,wP [|[CNfeDҘ}/ţq+#Q@Dx) f3QSgIRBiCfMRi H +Fn$5d;_D>Udl223\\64A2Jǀ\b+_x)bZvxTJWHɅc(wv:Rth@-M _S HfmP(=`B33CSJrc2 ߭1:s^j>rK/{yPS{2m4iEyk {mIer))aCaco;O юj0 G{@M寖64=wT(ᡳR slƋ³h6|QByHsxg*I]CkAEB(=xi_kQfmKd=s|(aRӳNG"HY?EՌo8hϪ#~<*Օp%ș TUH4o.9c1,P&1mu/HcvV"-]cĄ2Mp1 ' [u;Fi@9/Gf45$nܵ,wzH$ naIYЦQT;sYXd&pߗ489G}Z~fN\E9-stXFs8N!^HJFB * rp>f?[dn|7bqJT,Y\$zZFsdz$Z˕d)~LH3jCӈ:Ǻj:pۥD9GQ&Q $DBH@Q(4X5‚9k;L:rK7?'uCeG0B/gey''p9+t mls=V#U6VQSK QyY6_ O(H2ɱ7]{g2=38}; $w# O~q!9U!Z/G;O&x5 Ì-M(==6~bYw'bNZm|%!pbh-Ɉ%;tkƒQ >47 Qd/xL-Jf(é,yB#lh`0#':fɚT1+ *]/ ۚI|N4L6,'%WN:"kJ*yrcr%+IHu0c!7KhxЖ^v#9Ko7&d }CzJ@g&iK_SE2S _:_L9ҩ!ח y/erL$n2 ng-|C{،-$yZ0aі晥`8P|!/u?E0HO*㮢"uGYѬɟC ?'v\o.PMc&,g2%Údd)SZ"`[29s6Ց*@j&NcY4;(YHOхS99MMޯ2LE87$C&SpǺ{]s/W 6סƴYohC_yx%#OHff9@t= `b-0k5uǴCCjj@ 4P{М1ddO HHIPD#jww5 Nɾr+((t5kҹ p rd{⬀2,qƔLJqP%KnUeԒORٗ&V<5A/(J LJqIP:.hV笚Ers^aibEK٥h+1{|K`ΗP73wjH,H_Gb "4 rO¬xkT|wYOh RntO$bn`Ei uD]V, cb$QlLHbĸ+^o^=D]QQ;TYa&B*҂H9 w+9#Yds8Ȇk#X秉f}CcLcLak2pjזrH,!;K÷e )h]Bw3*?\)i"Pl_ug5,ʬ'\awNC<7&|_p{ /u^1bDς+ؽ,:q16 :*jL$u*G2QdySRWJp?!4"@$ m9VɼGګ0 - (J~@ &O"QHTp@vzKCu~L -< 11OwIg=y/ԼQ_ t/TYvhd*3ήx!E4o|ﾥYY܃AxPܕiH4C2fbr{ӨB]/EB/J}O? {j^\?Ҡ@ɡV.bV7.8f ;A>"U p!v$} qcUMX;gGTJ-h@p"5>hӘ.XOWVy.3 <8h[qrN0^h3Cno̶ c~5j> K̉QTN7 [~YFFK \-.P2jFN|ke/|xhn R -4`e"w9cAZ "Fh9p$OCw5tI>#ю0Ů:QˁY@gy3kP}eOգw/b]4CNQ_ AN#8Qr ,i4DGaU='.ҙ!8+!4/ +L63Qʎe&dz ϥDtr@&sTVSE.IpG?T{4I3^ 6Hd \ZSU&_\iF )X7|p=mO I^>ͭaԷkzkl\s]/G*o2^An28wSr02m~6S_SߚC W,z~7GZEElF CDQ ̲BU˽!F:#p67K-c#c 1к:E׷I j=A$#Si?-AyA}_̄ KvG $"ŝq[m:lhjjɍ50ey]˱KZ9;0vQ ez+8wAPYDQ]uY0 ֧/I0Q;24P]O*Stl9NB\t»d5'9tKq%_FaC5$DgY$b*1Ga*Oˠ ,O Fc4pI0 L RgU:ҿ)cgpAZlT'*!d IZx`=8/P[ S:O3w'F?d꟒b~:D\hF~R=AvmգQNqGq~wz0uk%BO 4N瞧 "] k=*NR!& r>0ah)]| ʊP-Mf%}Ha=\d=|X̙12}vZ j7m+Z~Q೉=֠_0Ef5[Z"~&Cgސ;x~84Q[/! 28P='O-Ytͣlǵ`].Ű`I(IAb{[c;}:hǍD\3H' 0rh p|,IｶoԸDICTU1䘇X1‹u{w;۾\)^~/l6Ś{I"B _10Y"A Nݳ.57i?h9[F8L?`̤xw>E{ ,D$$G jL!eѐT#@3m eQ0aL@3y-xl KW!O/}ߗA5gI*WH1ڐ-^e/jۋzⵇ?U-t7W]\ILI2\dMM$mQego_IOs9GYN9TKkI;/Wq>ʖ໥7N!g3LfW p-?l &-k*^Zy>2=I[O6x {o@iV ? ?z{Ĕl=]x*#֥.SWF*߰^c8̳G Z_q M従J % z2OҝӼWԶB柈*nA i@d=0BWtN=' G:NfLQ4{,U e& y̐4Û#;\e(?3FvjN/L@P_7=# #"C&_Luh!enm$ai -TtFt4r'UVC;s=`^n"2jk$7J$}*F1L/lg;cXb˕bQާ4g8QB2~+n@EF(hp|*1'z1JRqsp(i1=##^Oyt*%ڟ_=V @R9\['al]!XԓhZw]`fu})_Lf[O)d!y^UPN,L_,}qOf7erIF"eP `=YuomM4yˤP^*-XG5ntYl$5-dCP)T#[LS69EQ'z*YfWDV(A72񰴁~_6KL`}0cZ]Ѓ!zn iOY2]O$;#t.,g[::W{'%wZ:1Xw5%{3Lҙ`;u`Q2A}!TfC3[wG>iu˔T .퓛Y 89\g 448v `"9f[yҖW-Ϸ/HN$#؍˳%J({X/e|fOY!y3ߣvV3=N{ƺڬRo^AB^֟<@rR.M 5㱚efD[ebzn+;zO̶B_7 m >ĸ&0IYiil= }q*2e2o?L|ճ.WQ|~-QN{D:]J.[bI|EdVxv FFw"tc &Kgb̴}Щ]ƛ-)n=Νj{ldo85C?H]ႥMG(|oos rUtzNN[ Z{8Iuy5fi<:j U"?"L[*Y$+wbGm^Xiyb [Jz줷3NmlbJ6J槄J]1}Ve(P5%}u].}Jq8}y$ #-| -i,&<+cQJ=Ԙ}ZY6 ziK1+sL5XYSƶ'yna6e7NX)u4%pR.㪚k8vЅ [Н6Eڈ@q|3CA9]o6uuHnA%m CXJIمG}O2 ņL'o#F(}x}ayH-/dh)3C龶# @oTS琂kqASZimHvWWY_ɖHKC.o1nHN9}3IbE*TgS.9HIy.N*fI>%g_iJ:LN+:b?:v=2zԈ+*-2BpXH5 bCJeㅓ$xg#戯C ]ܑxM2|>,c]7H`Oo!_}tZB$ՋU\#W`*?iU5PيcxVE?UZԱ4ݙh=K./8\La(:rN@T?1|; 9oj_N3MkOOԓ={w:0=AM/!n-v[@[`jȉ ('m5h3yF~N]q]yiEG=Ay$!LӨKÄ u uƗi\DBٍ>f=K>i .'yf< 8BKuj~|mCp/vg2=GYvsf2!FfFtK.%9˼7#y~я#tQK^&SZd!BiQ 1:ulBUW)"!$ipaT,^68#."߆NJ%>xH /%Όr{-}F)O l!8+X1ܛhRd'a 8ŵ.\pLlaspVCj8] =G.ٿsmy -I|0zF)˫]> uμvV:f0/K136gƓffS3- T~6"? TQfwncZ1߷@s;S𽭂vE 8A$Pr  &@QUp'Co(lcI/|r<Ŋ/(ԟM-pąQU>P@*Xݐ@ld úgá>4X4j:umo*Rגᗥd|jd{Aa$$i6 +p4?Rn;8+x .ݬh=)O⫀ &$ӱ$ͨd'IOi0ga;uSL*n\FiґcSXw@YytS`kDž .~dϹ~ 5_ E<}i=3me@ZW]:652Ah>L4ĩbB;<>rq Ls(D{N4EٺmI27qɎZ!(͉_U,d{ LQmQr* U+"Fˁe<쉽H~yC*B/Ocټ>- PF1H*m-{Z Gg ;8IīiE6MYNWy_2)mOäo,cBDbȀlڨ3ⓧW^)ċDDjɌj8(R\Y~O׏ 8ƚؗ:J]$~~ΒqNZ%C$ C?sF۶Ѡ T.Q7K+X׾yդmBP[ckOPv| >,TI Ov&GFs h+(5 Ĥ4J*`u@IR,H]oϘjI Y$Tc6JZU]ˊ Y1`oww>s fǴe0rx^mUeczww*` B# Τ =kƌ}wt7"韙K#t{2Lci->4 c'{Ʀ{Wޘ6٠G'qCF'`o +貌wSBI(~?v| |TnjQPHېDFzBI:0@ashY؟Q!ظmatJ^Y) V;m%A,|?VH']ȁb`^Ϳ'`-h864Z'ݻ:g$@2x]I&kJ ' (tI V~EٖKgP0zj.}'Wu _E5) =RKʎeH"ĨRףCedzJ)zA`:|DbI"ƭk܋\!)H]mr,eKRqiR@]jŖ@vp#89Sj̐k# d5u4UbٹK"jGT= 0̑o9T+9;驨ẃ%YZU,:^ZMvhܥ f3 nCMEC8 ɮD͜Gi3v)F,o~o LVN>s..eսt\*Os#[m}VeSSԜe ꤙ{(~; MjX'ζmPc \I;HC9k[=e[L g/Y?{[B/3B]q4=ԳbT~$ D@=MqF%s2]ΖʌI|z{BJ7I]UGbgӾ~<+ Z%^i?!6.eaͽYGdnEO["{\q  3࢚CJ)y9hx',Pb#h<xAo2TŽֈH')G^5NvaBV)pS'̍%"G}\bz]nxu_KTdPZd~wk>nԜj!"v>Ï#$%1qLŚi5Z>=d63d *u?*NTۜxfr[Ie~1ϥeI[NBY*r}S.ihSaCRoEl% [%S`b6d'Kf1>PbU-/*C>b`[7 CK}eaie{- b#8S)%3ËV:r \J1U O!Z^Oڑk^V.-#$e4 [E#ykYxSˁQ뙔DR0/?D%!ϰ"NK;Q"5EE䃢 oW:#` /EV$; ct-ݧ? r"{03Ƴ~+dn w/$حz9!AP?^Vј-"SWa6j9jbSfwQKr Ã1FXo?[sk8yq%EOH=,4J% _}V5Dp,ǵ>(vIr 8j\p+3@JTK4%WF-1 l 7Ԃ$'*N;Hv <6~9|} 3("~6LRvyG[ͤ)۝zU2az:o诖:|z"u9?I_ XU9J>8FT+O6)0:Бu [@ 5HӮSbo5[W~~ 5pQ4/K|E{*4=Iɘ/蒝fl5D;]g۵Yl7õOۣo_`kY)mf4q-nf;rd.b6>&)r)ohFD$md Cb%5`LNzDlk6#/so]TWYQO<;!ihaJ&O\oG-=SyG-!?7RJΘj]Iiţ%b7JA>>ZFw*qCdl9mO]ꀐHx RYO%`dIH0.Xd$64Č p55b{XXszX+qsrGBI_ˋE6r#V`.i}U\oւVėЯ_̎1j ۓQ 8ZSSv Pek]z,K =M Z_z e<\FGjQG_\9wj,L[-Nj oVR2(9lS0O L#ϝ.(n%U[B,~g7η⢫q;+gcnfDX޷SYY-щ70p*~[tY@\pҿT*]29rq )Md,^k>3#bΒӲV"J:; r}xҟ#{1>\?DUhL9#V]{Txet߲*z>Pnl3(> tЃI`!H>!q RX=fTIXYsB>=:~Y~|s˚]~;:\ug,cTU`i $*.g*;B-:ê@m-$s/*UASC?Γv?]$ab'2FɶT*yTJxJ;Z?EI^'A{KbܝSU7AԦ `h[GɆM*C?Ƶ9v.~'̋/?92NLD+E ?C9?oԬxBӘ]&2g r]0PDnsIF[0ho= yaº.1EMߥ4ZQt~ـ\̇F6[Kg5*y |nx@fΞv)r AH( zX+AX_pCu‡2DvZ΋o==VNX.Y1Q amt6W A9{ f]]k#Z;1[Ew.dy{kИM%#1WBu͍NT`.STQYr i@%{ ?OLV4!XR44Rt~ k3 8$-ZEc^M8($)TC=kpF= @atPC3s+P#<(Q{! A^2$/$#,_emBCt񟛙Z_lk)JFDcڒuɃJeXnpJ3kt1j}9$ # !} `Yl{l]k$b..Е{%fC]3F3|f7 @o@-9UFҭ3?ktS݈WqDIHPs,4T~Pw.C$)qM'e,oH{TB1|ͼ?)Yg`m!xXl k8I_\{4W9Dm# s 5EM0Ϸ^7lqP"]?wDÁRohZJrxH=JSvfQ`5oZ{:]vASMi81T(7=2Rɰ#瘃ܺcMBK'o&K2eU"S)HWpnYhWzcP6=t좇ѾX]/F5#֘h]zgv2`ͩ 8&g2u\RJ7yc{2Ր==<̬죌UXd:[c5RD)LIދ&j7a>_KXvF&Xe9 vWz,ӽy:L(tzeI/C•p}~FᝯL߽E'ox@B{.x>dc\4(TVHM)"m,,Ϡ B$(X4: WYۏM,l䒣#52,%%۶Itw'ɲ֡GJr\D4ATсԏTjZMՃ NLmnS,},%4i>M[CitLOcz`C ] E^Z:6r,a&b Zi#R8 m>PHԽzm3mRDOC6hz,>F)Oqe1rH.m3ד37[l(ʈdָ$sEZ&d[Ij>W<5h&f6 Aw6v+JsMɛG.vm*߬%.[V! /WNfҴvRm3YR1񦦧mogsl-IvT]^7I@:li G*yrٿ3~*?~/L1:<2GƃUۣ|XBT {|)WD+jd9LH4-$h;QWkh^Q_a8΢[7zx7Gӆ9SϷJ!3o pQsp9Cl-1S 0EY25('v[$Eʣ=mV^ {d@;0~*)SraX=,=@8vBCPӕڻ)Lv*(V̙I 4T0z>qȨo+չ!Ĵ$Vf ?!FϝwHWozIX~mSg\ A%-Q߈:?aZmP&_ӽ%[pR3攦yKVb A1~7$RGS6nV=VH S, c֠ iΎb#,ya9ɜd/AqZ v>M`WD)"˔LmgPc?o %UyjH&lX[t L)P3/I,puTNX ELK6HF%hzwLnCT 6:Ȼ%hC Jow^\ 2h (g4vՏ7;uJgUN_!.* Uyy]k,<&D k,6neK1DG,8նڕfs8:%_YVdJXZ˓4e(]opJR1s)~QFx|c/rk=D$皒VضێV ^_F"^n[ #͕]:,rN ,Jxv\߸}K V2#ѱڸ|_F_CTVC9>$@{ n}zCri0tXNؚhT%@adgw#_1y;;uzvBEL3t`ȟ8Y` @6e@@=#ȇ}YKj` .8c>3Ϧw4`[!xTHuױjgBE Y'롄?qNWG..ankNǜ+mތi]5΁@JKQASL<Vſ/aoDX%TAP 2W\*,4GEZXM=c'~֝J*Ce|ۓ=sG2zR|hmVf ~NU(8Fg"}k,8IګMq?"xnS+SFb#DGN52Mх!*iyMpނaX;h]=h8=՜f&FęS{./#~H3u<c y㊎͆cx*g@)9S>gƪ#+tm^W ]P4@'jA n'8߯b^*X#^ō+\NT17BIW|ٿݶG|"mgjeʕ0.P]mt鄱8q8 eMwve źM/i;'z؋Zwd}yS&5L>X[\\}H3GjWNҲ,{!)7u.$%l_̟—H%L|JTu2ڲTk@{[5(a4.8#`>Ap3_hmz`E Wm%: jl+Y[>>Zj[wuc@~4L*VFI7Jke0dA  |3T&G:|N6[&׳k v7ƺvF]Ŏ)CQˊОjUi1;ﱅWq;Qb` rXAχP(x jRb8PHxaK zd{A>SIT4[(/'zM; ' f$يg9Pbf͉r80UrgJ9xxϬǰFh&Z.o #P⁖M=/JR%}샶7 uV>xe6D 86-Eћl>A*o)w@h22Hx߈6 Z.&SLMϠQz{0.LQ+gU`#}u_{C!})1$5nhzPjw{&$y9 .eގM)x6,t'z5z k{HDpQ1-`TH.T0p$>]K <r$Mu`K5S_AIqX3_+ʀIq'J#I(l!݈׫6 WXh@vuzURh6^vר4KzpbWl&ss3wHuSc-O(}!yD>u 4U.Rx*g"u EZnćfQVu8fju]/]k/[|_/$ozͨ2CtjrR~mP.uy]9dedHrS-R@Mc2H˖MRK1j, 4k'Q̇! V-*.Ky',kF%$V=r6h"U]H\%nL^C+PwY AyA}yWHUg4f[- ?@0>m`5o3p LCF2_XI!COM`dk%/DծByЛqЃn2n{FaRj"ഽ쮢\*7"c9of"ByH/'-2c\qNTmdH tnoLӁِȄCQMKn]X><K}7*e/ J ҏjtu\8fK] ZJ*4Y!XB{'׽' 0B~Ê*zt09="3U$N}Tg M"o"IQ?FV=R=6o}!1޴1f0 x H{5_Ǩ\aX.oAb=e`\S7j13#U41iaβ O>+IV?d^|\He!_-Әȶ#}o:J++~z %\0]ru7&0t&3tѴ@Ui V\NDa]/MeL WP,tߣDաә+SfT;é𠕒fɴ Zɴ޹zq"O7Y^`fIXZ * }&14yuH =򡲖QfN(uǼa <v%j|S$E9Uva6 7-(JL)ynLT*C1.c} KխiEEG=l5BϠDJݶ!P>9ԙ"Swu-v ]݈"W _m"f ޓؽEORqFPwU\T9-([m‰̎Fo`mP~+4qF+.K8~!gj il um Гrc {Tۮ]Ry}XI-ݻ.r_pc2yK1cxrR/nd()w> ɘ߇G7ᑦӺ.vWpO@ϷH a5Id=Em*o0:h)}uךć.JPhRX$5O/ &_>{-Lo@B]?Zl,Zx B;:i$ gu Jn9dG VHݟ-7Ng).Z&a ]`sjϓ &Kjc)N),f$v%t* )!;]<>ZC[YܲyT<)cNɌnv]e !77}ARDt&UP/Fq'hrRU+?H"I0õt"#`̹MBWݬb#Yia|꣚UjE8~T6Kn;d N4բ%ӖPZ7sVGq-*-/ $5U)PSݩP{L̻Q~|'B)bNgS9x- {)gw)/m6#ռQΊ/.@>JwhGMh,*u&pt霥[ pŋltIF\MEU<e`Q+^1][Bo RtIBYaKI c} 6F r:0uvW*{}k3vޢV Dğ$ӘbY*nTBG$X:U>4q2V~dn*I¨Z X}ikU0t6OѩaH|?{R̡H&UҞq*J *6G\*ZWYՌ QmV{&8ćeL@PwU JؚxbQ7IڵDy*O/d9Iz4v&*CTt %/ғm%A}iFT'U#NQ|}d7q٪=qۜY>uvJG=[$T/M|IqzxLMujAO]'|OaU?>d? ,lB9' 7S.=_T hsT \a=b(@fM쀅t~}\Qp!l觌Z2Ѥ`e1URC%J)սiՂ&=f[Op)o54!-WGtYQ8of)r׻,|0XDz`қ9ZX?{Ll\h`3#18kֿЦkmSc !tĺ:!p(33"d w:ۗ5|)J!^Rm+YrSpdʫouA;ЧĝI//c[x(s68KU8XiJS dQ u (¡T- 'o|:`pn`ڝM.`*B{Ǐ)' I\qH1]+Qlu|=1u3;fG\ *Eo,&~+"CxƆT́_>IU6*,.„=A |AeŪ=VokύK8KiZCW"]r?LR+|h1^%2  qP #YSPô!9twB+YCEt 0/ [ߍ;a:;d<KCqؒ# j q4jzغ$xcзaTˁ<1R({єTMv?HZA1H|4 / DT"FkA*Ǹv\\3G GV >sL<^1Sa˜cE8e5nOQw{X㽒pPٟ?fwO4xr\ntKlKa>A+/{$i2Q*\8`"Ȍ ~,z,[!Ƶ@GPOm X%0yuNʈNc0 1e=奿ްA#UBU)܉DwϤ7'I9V)Ah~`Oa7k'߂>@{f i3߸{&b1"bA쓞 L)*]lDP{Bc^t38y :g)fgKW6!v*`r[>]463123amCoICiٴΩ9Q1Wnpj3" oT/w!lڪ8;UAw!*RִSz^J!Af^~4yM%5u-@#h.pJH`FpiGpS{@ S5ƞɠH_B5 ڌ1z3;PPsrAZv7+G`Fy {ֺ)]T̈́v-- YHVZ/.ဧUT,SEZ$yrTg[` l {Qg^\`$[ܘlXe%E5%tx僦'" eSdOJ*{芖yz !w99*N XўPCuQV4Ή9d³vʍS4gN7'y˧iɰdLm/b"oj^kȆfS 2tT`Wʧq{N(GlJ\Os_R: ;/zaj*Vpď''o] 3j@k >ٻg`+aOzfЀ&nLP+ l@R^Rܥ>6Bo J&mU'(a]`T]clЫnJP3x: p2쥌ǂ~-p]y9DB"Y\\p~w=}Mcm_L]ȚPeM4HWo-HfRpA3ŭ0Y;g6NtƿĽǶ(z3)!/w ^?i5o ;PÄ P_>v2' v9c&d1/T~FĹ%82tV&B!"cOjX?Sp ~+;kL3Ȕm^CHGCc + 3]| )960g<b?Ev(JauiBD~ ǸwQ4qֿ۸慠?Bu-*S/[ִ t/I>6H>[^rtF)zYʪ&?SݭGUco׎rQ3\ن _"6}Ɗoؠ{c_`V = swݦ`}\Y0] [T~ʯpl# *{4{g?\X==+ _qik_zduVXkGB[^.!|95#+7&oQҒ dhmhP*b m63gr nOib$e`&hj4?\] P7~-MQT#)`a'fVfmX'9-u dNb3b|Gi~U> gC]<0z `9&7v_J苻3.X:4?eP6z4;R4+#K v8)O$$Ϟ6Y u52nǃWx($Kd9}̉݃݇H;R/Q4lpXqOX G&gYo8{Q,"} r˜ze?EXݦˋ,ێp5j?ȁ*{<]_sAx*1sfKDn>.&JBAHOܭV!*$٪nYa87n$khdž'jhDleF'y wf_`y %5ߴVR};a!T?{J*I#Q [>QڶZfR07 -*%!Hd .㼠Aͨ{wֻQi9˯QCVl .R ?Rk;k7?7e! E俇\v`ʯ)ew QOAwV-6_8_&Zi'$^eM"sVO)@FOI~Pii:M]]dIK[^)qXl/(8'|QwiQWhs+Һʺf{N2!N#97CBb50W2ˊ7؎76BQ%WA:CS֊Ds 8Ɂ;IJ̰)<u< `D? ?ƓG{\jrprRԺ3ccxDۭB2fL7ooi 79>h>, iΊ)2% d>NA1h}~YL>*.Vҳw6fKc#NpI<zFPHlB!HcXNAI>k^֒S7y.ߨi}B)zͽ?J2c#U^6}Uq/{ڭxrl@FǓ襟 9#6❍YS\;8%  .%UL:jp ”Ll:y=:Gxan%7>&ZmES<1]ɏп/31 LXć" (](z8Uw x˭/\3LT<+ލ,i ;Gs@sKja{bn g8= 韡J!vSŒB y DQ%ƎX|n]i^]N(;/ݲ\uD'WT䞎mߣ +1+it94*CHUPTy:gUopJB9?'ŷ-S'JS|J:[) [By0HKlh&. M}#w'CИ@isrӒ4dkx0yAM ƪKUHƀD:9T4atmKkL?,Z_jQU/+&E tX[c/zNR~QA_>E\Gq CTҞsm1KT8bP}&-C#B ^SBy}"i;=)w׃Gn&l?J&TDYh+.͟93;*'ga8_rR?/pWTwޯ6jqQ+"`+ ƥ|5`;WNIZ]ZzM-S83#flöQ>me^X?Z :_%h]z~'\07P[n> \fm.y+.dž[Ĵ[D56f"&n8r&w7vO"ONˀysĆ]b!8J!9n=xV* 3 a7V>*o SS?wȨZhGMWe&-[lJ6H?EU&ÀF5yY޶po& Iê{ Y4- A̦eKDL_(O6WwKV~†E #7 mt517m:l*,Mj!iS?QIWkj0ÞzWr7p6g( EuU|U=Ter~':XI4x _FKCOWZ'lxBMr[N#Sׯ\ QiՂ2%{h2jGGF4W*GI"z} ~mSxF-G{ #b)Bq3\ G`n6Revhi+LNqh1 yX̶C;@Q0s/xO t 8IB9 bneZjz Iq |н+|Bx015L Xs:)6*Kw( `y\xYiV;pW1-$28LO+fbqj8?^FZɤ^27b>1DGP"i18DCGV ( uN,j1"gNwOb)q+)R(Ïma) hi3XcEQ{UEJ7w2_Ķ2i5&tjXH|(K|2{NoBmdUD@ړ̕'j+ڡ=U0]M<wr489T-dUb" _@XAJ3l^>K=2v|(ښj-@в>+6=a)nK ;x'tZhۇڀj\2 v^~{fx(cg AO1d\7nDNޢ!oYIa n6L۞r/OPyt*~YzOcTX@. Lc~e'lڹ8;sozUYH~)ŒB-Y]?jZ=lYэT SjBG*Vh 5xz&*)&*| z@%Ǽc pS db F.uq3Ns{fUZ9TFz!lVߓ`q)C UX6Y)]qq/ GTHRh2̒}bYg{j, .[mѐlQwKqh-Y$SYge|o0ԡXíH6KX=moo00*w9)(%){BNATRQRGhj(ck]T1!+op`pñn'w-1ht.+/دg:I* z"C#dQaV)͓.W(`葭&'iΐv hk) J'E1[!-q /?m;[" ]mRx70)C  iH\O voUKfd#m=G?cqt.mQgT<l?@VI5o s $MDcV~wC x`J~cL%眧-,f|Q([!LVhKVCMi2ssdxM]ۙZL}Xe/^`?-oE3]B]eb® Mb+Y^(V*fϹ@LKܾmf,ӝ孕wс.v5΂KR@`.gE7tEEkw~$nrCd:.veڸW r={L[XiwִVJj 7ȷb)!-Q 8;lfFZb kcs[|k!|XιD0OR*RFWc6eZ`'wf{6 ʜ-;1pb5CofjqEVuq> + v$L{[{ p&V/y?Pf?gP*@ٌ~X^,e\v&!~P,2}*%od3&N 38Ehx 6\_ *,R..C pNU)X kUy?h*s[ggsDv]1#YuI\b1*8e,kcc+ ~$m (\nJ 3jR[_v3uK# jPrJ2|=Ǧ[Zd:#>X>wŞT:VR3VC %haQXlt칷..#lRp-цXrq D64mEE,|o/d8%0 h\ocxu˂V-tчT5G ?!#^W·/rYtS_U1F; aRfKT]fan|2h2>tVxKAx!Eon MC 1[ [w孩lCm%!@kݞa 7_o^Et-u=X[= +3qpW>j9bV&-D=2sRSӀΎz-8̃+ :у; quɟ&jZ`O"&? 9glȍ:\<?dxG!Z~ I ?ؑbGB͗7mԤ+:g,X*BCs3sWY:0EE)5 ~sTʏt|j{F,ۓV¿`=9f&?˻y947{\0E4|.4o޾eR/pGg2)TƇJXlvLm1y%_km y=mڛda]Id.2)zdW@S; ټ =ՙs[%,Z/[+`Loz?4_ LG8m{* k-D?[yW 5@Y~|0.Ap4jOyObOsRKG#̑*Oƴ")(Iގ#S>Obī EWֿІUM#+ґ[I?a}?_$ %խS 7$@% `$Ei7Ml, \_C] ^-&Mq@r6ZU$"m .֌7hطpz}}{WqSY3P2% ́;aZi0-4dK_x:7Xy ]i9wJXo:{os[wdFQLj}B3OGq{(#:u/伖$Ԃ JR{!T%^!ԒH"{ϙ”/Ŗ 5}E"((+fݟ IJ.]ZdH6d?3"Kg'HE)bjl7XfV!cܜMP&R:!%AY|S@hGKst:п wd hc|r~ܴza^bew㞮9X¨PDAm|S 9 Mc7]e J4*%N8UT_3#a!d.}Ps.[D,(3[PWvt"1\Z2HBqPO*ڭ}|:A6hȑXjJN~jHΩLPCX-I.qӸ/Px2JKzj>qy{?|+YV 8H6 T3M:18p&nğà6D` i`Ԙ7w&whXG#\ycebJmEs~B-<|NFY&q$R6Vh%1l>Ki=s3*Z8s݇u/M̒@މYӔ@$W rvZ%hPiܩR(F}ǡZԔX3*4Ԥ8,E[ò\Qn]٦ <^3.ORaG7?*j"#nW<WꗺiϿ-oWl&1$ξ2/,*txz< n}V0*Ne2`놊5&]Fl ;k] DZ,=IJ3i Gxy;Yk)Hٕ&4Z]R'rq@d}5 .D( 8vࣻhIKqEeXu9:`JRW?g]wzC ` ]ViVϥ\}~vavjCj Vkrxumˍt:y?jXy$]X^՚L87)xIXp6B{yd3C6D#tΗ[]M= O!j49/'v)g Q|}_Iqud[|TI?4-zzY=?VA|"Qe%d KJ+F09lcܣo )XaeȸMQ77'$K6͂̽?!ؿ<ʝeȵu1)3syҕ9Jb{x;R@9v4 SF 6R.Ȧ0喁1n!%G;6rx[9眕 ]Is6!B%AiD:ő"%GK) ͸(*]_UW$ŽICFLL>o-[>ÏOZ1bψOh+b] ? JKM+.]Nik&[gKU~@`a@9eKN{Rvi}0 a\o^k'\)*֫kav2r#Vf6ad Ny*/2{(ٽgA+ BBmX?hƪ(ÆCZqO}.”Zl纥\nq3}4[rU-]©7Ty dzTYe^C+ ,yXυƷ[:nc%\.th ܧ3>K]иpz43,9މXk5-ui跎fjx1됶?U#NeHG 1NE %ʠ|oF7S2R5RGCU7ۓDm=>6e/PM˟XbpߒH ̫TG sHx6 h7͜-2**jp9恅B>b 9ԣq[O ]J!ҩ|ꠂ7>Aɨm7iy\|K]%Q?AO)YQm1*d`1/|#W7OHk3X.{KghKOJ#47*M\;jsS=i~S*T?GGK;I1@h&񊬀לz\+;F4}4 =۰`;[b9m6'Q NpXдW8l;R3m9s)!Oŭ۱i}v=E&|9s&Kl@U AN:LΫDQdI4? E5Wfn3$lR.2.N>n~>V=jߏ_ϑv3dYU?HVј{|`Yӷf^wg*D3'_!Hໜlξ5V,qP^lc?*8Q{I^ɧx6On;c KO>oׂNWTRRlN`H ЁwW&rhx rbU8J֩)*D3B'70wQ-pYcxUQϟc>@(d-н` K^nT8阓;{s.pgܖl쁧gs2eW ~Gȯ$gI@^Mc}={n!{!Assypʕt5.Y`\ Օ}ji [hөS:4 {=8=*&Lhd9{|ȯS9ݙ9lG\\QΦ 3F`$:"6cFSތ#yK&`BWq{kQeW}ުt#(! I"iu5۲\k7[ݿ߀ n^8+d!.  Az?~i(W4QfsxW$jV 7{"0"v9б_sX:Do&CjR*ダ'PGFeه UԿ桋_ݨvqkIX,_n,i lO{;J0'9m3unݓ4_ )&a˪!PfN_xj=o䣭?|[8Nu꽫'$͐!3o-r!S(?7kfet'߆+PsV6ک'blF_85\ ~)1 A6퀱 P /UCͧ+buNELJ!Τ [FZqƲ=7| &e(vkYƤ(G٭lCA-'}tb0gR+2GQ c:x*6S8,ZQ^*=ÿ rGI-Rtd^L$^~RVsu]W0bJ6Ӭ='~ kXL7ɍ`޺\eɪCI=s ^u#0?qCG YoVLrwA*ix-r6ܣ|!w.D ÊrՙSkqQٛ% ST쓘4\J=gD]$83SРv|,^ /aZꕲP"o(b`nrh'Vuёa5DyN {k>a _u<;ExY %)iʼnŻ{KRvʭƫCaL0(x5\nGsgL$y1&qQ< wupu3>#0Ψk'cLEPjp OE$;)NM4bXbɵZt%ֺ@cHey %1[#E-j+aGr)'T fw~ۄD'&PN+ֆ,9=!sPp"Sf{VWP@vz A0X).~Ozs[ۚY#DB~Xp)(~u:O &֍Xtn,b_°wҰGVNvxcV^*ZcI6P,-H%9)8PV~˚:m 9>$;`gʱ Zp^bFF%QrS7pV.;hoԽ})Tъ|ր&hn.s75*:kqUPv%FQCE[ 4߿l>eֱ'K-,Idӡ.H*ۭ)1-KʂM"` 9Gjs7Gfz}Khسܜ)Qtj?tv{hGp5,zILv މpIP|_wߝkw+[F VhXi^LVY@-;ZE_%@ גs-xQ䒚UV8\F|oZI*C\p׶Tg(xB_f5n4+[F5TP \T2<8!gΉq'6jַt^9Q1Zl#bx`0NpH"F^Kk ΒUQԒIJDKg^RF9,A[,kJ/WGnWNpCCٛsSb8,WZø U%xy4q+':+{ǪxM Օ˩i^Ss*M|Th}s\CLuIt Nv}z?!jEj4ij8:'D aH KܓX44vuN _cżz< Dm`" [' <_J mUDqKJ3;+k/mu ZRC '26jQ J 5ojUry2H 8-2A;4A(\|GklD =`WHc9[ԟ',sD-.$ڿD Q$w9iDlO{vqT'/+8Q{|,,B51EKJ!|GQot݌ ]1r*!&41Zq=XfQ=/Z7>ovhYCFTҍ-I;dNׅ@s8i Vi.ￕ$]@NNN[ y-8 ~4[`zD};)?*@{ g2XrVQd*v4+Nkb:J+V$w%Q.Mea!K-G>?Znb\Sȝ=#\@@c&3 J/phNLvs&sZQU:*W;Ս8cp}Ӳb",f:o7ߍ(PZ㒋j+ڿD QOu8'ݸ! FPmqO9(< BTuc\+ҟ/!c8gP!^a\hqRx4<؞vyDM\@RΦ|;vd9'kzm? ZetR ~;WĖb/x*_pROz!x 5P <粋YV\&&-",(Q4\T%{_ېj~`* 5+gu >Dq۱pYOYm~;(6~TpYoSs^Ӌ!y$PCV=+ YZ tM c"?G'kvFpdm`˒"!;["-Y мQ8&;$7P\yDgBym̓45a}0Z&JNQsWp_ܘ#aqMv*gu'5'V׍jYmc@;I UTͪ)weF*(&愾g+?<Τ gHөIjn"oj빛| |5M 1gwWǍƟ}G9=<:@e{ }ȵ&l鰚6G&#{c/̍YYB|`vGK/ǁ/# ߊh|gvV?g誜}*ͻKK6nsp+Aq%F. KLCnؽs#6+wwBhl2FiD('NЯ)mi$"$x ܪM@eVY01][1Jg`T.1w]-HPٍuIJl ٕa)N2#H.8ɠa@_bZ[v~m=/]mΔr̯'uWӎ]n: J!*)iwN*Z #z_S-BY S'RsKlؐйG3D RE%+_ */B>b?TE2*Ɋgq.(4ij税Zuջr&;8/zU=Z^QUi2{+-n-t6oJ{GK-C1-\:}@d3t~07K(P%)?҉&r|:9q܎gxN{ӗdb۬a~xɵG?veMѕV3U6욅>xp(VOUA"굤]-kc稦`5zy!I3n̈6IP,Ogqvv945Su2e2$Ix9WND*h"^j<~J)ƪ.n/Ft.|Ь0 eCRKO@kg|5J?S̽爬7we/gNZdq^qlYUҵ>`JWdqqm0z:c^fsvKu"C;"ƹh{1Cdz(B ѩ4> =)17΍;H8 |pڻ/`.`, -B4ඒ+:i O;:#:𞰷L?@42\?T.U0Rz}Dޭ?$MU$ mqWقB2,.E@8?*}Tj na})o8( ghZwzw3Y_)wiY&zb8Ke"/E`qzWJRs!z4/^Mff~B0ՈߞrheX *ՕOCh`޼64jÑѹ"j103Fx,~5RxLl6*3Dca ON}*(Y-.պY8\>t~ XS ~nMJKY5*ֿDkZH/,ZN3Zv=4^!͌"ݤło% Fb3Yi0eFVCf WNH~JU=/&MK78;_'N.iie#8 N~}jI7C o ܿ_C2YH}HSqLl7K{oZI@2%L8!LA ‹<] [tPPl3-`=Ip>?PG'g A5?-[m1Wҹ~O|THq̃$ȺD̨6#c,@簬f'۹p8ʣŒ6 #92K$49fi.wה 0)ER?(hq{#D[-;qzڍ$#{݅}nvhƫsRx8 yٝ+ hZL$`tv5\d¯D@{+wMLR\UfqdߍRuKqh] w^V8  ONV͕R靗߁qLX!wmwwV[wW[< VZE$qw!BPHeHm`7qN;*eS[wם6+ܛqը Hk9ku clÃ>WaE@!*$+} 6zK7Cʕ ]]ث%.gGrq6s57N?QCjuDSuȷfEx0xθEI#y?+-ogJ)m~6v`yJoUW"9J= vp%UxvZ3t;8 \"ԲU w}anGƚйȗ#:B<0I,I|QIL9PvK 7U8}6>Fu@VG^dd+V;0/2Pb@)-ɽ=RسW{ɍD@haE~쓌kG?4PәF=t19"$+ lH3.T4I;SK5b8 0F^I(l˃˟I0WܼQ4]?>KzZ}iE:1ݒ3ġ.$c@!bm.4'Y8IP*f2|[ oӻVon{5DvcM{vp$5xqUR~.iԟ=T~Ԕ=xlFvG<-ߐ:+9a+/0wK7;&Xd.4 `TwEނZW ed RDi KVCzhLS7+b* U-G[o;/>^OJ0Qzf7wa3XL:Q&o ~d/?c6DZyTT 9ocoYf>Ot&E|\[\}Vsm^$X᱕ b58amG;3n+e"fEYC+:P,l"IJj66pAa*D˓ ||Șř\\Q~O2dlfu)[t:EpИTSXW gmcO0Xm(tv|}:[~9}o?:})HA/ܷ A|~IKDxR٫?dY40o>`7f(gO}G.}[ 3@碬ӓ(̾Uv7DSR|;HĻ8RC"pBnXZsV|~Hg1$,pv%nA3ѓ~~uc=dSüF`i0g^q? 2 YRRL HQ w^14y^~$5֜e+|r']ػvwgjA+ۘ|l6\ߥY( Y\ۍ;~O[il