libtss2-sys0-2.4.5-1.11 >  A `Clp9|m>`x٪<oĭ}aPrM*ɢ졸fE5#ū` <<킷o39eAȏ:dN_ŠO lQ*k;1[BSo~56944b19cf3b6a43f486c7dc3cc905af0b814eb748c35d3fc97413ab1f622c3ba6f5b887442956f2a6b49bb927f155dd97ef888a0`Clp9|yFubtebJ+SS*j,@IIaj3HI!3}o*WQlb ]W-)+p\__W4ݱtM 6<(Ct/ƷY(Լ(.݋j5gX07ڜޗerǮ- )n?Y+g~H^=/*'>nOp@\0?\ d  1>K ar     $.8X`   (89x: >Y3@YBFYQGYhHYpIYxXY|YY\Y]Y^YbYcZdZeZfZlZuZv[w[x[y[z[[[[\Clibtss2-sys02.4.51.11TPM2 System API (SAPI)System API (SAPI) as described in the system level API and TPM command transmission interface specification. This API is a 1-to-1 mapping of the TPM2 commands documented in Part 3 of the TPM2 specification. Additionally there are asynchronous versions of each command. These asynchronous variants may be useful for integration into event-driven programming environments. Both the synchronous and asynchronous API are exposed through this library.`Ckibs-arm-2SUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxaarch64`Cj`Ckc319fea10fab5d87aa8f6a4ee0433c885177009cd386510e749437fe6a0613c0libtss2-sys.so.0.0.0rootrootrootroottpm2-0-tss-2.4.5-1.11.src.rpmlibtss2-sys.so.0()(64bit)libtss2-sys0libtss2-sys0(aarch-64)@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libtss2-mu.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1`@^ P@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- drop 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: now contained in upstream tarball - update to upstream version 2.4.5 (jsc#SLE-17366): - changes in version 2.3.2: * Fix unit tests on S390 architectures * Fixed HMAC generation for policy sessions - changes in version 2.3.3: * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu - changes in version 2.4.0: * Added a new Feature API (FAPI) implementation * Added Esys_TRSess_GetAuthRequired() ESAPI function * Added Esys_TR_GetTpmHandle() SAPI function * Added Esys_GetSysContext() SAPI function * Added the with-sanitizer configure option * Added CI for FreeBSD * Changed MSSIM TCTI to be async capable * Removed TCTI loaders from ESYS dependencies in pkg-config * Changed getPollHandles to allow num_handles query * Improved CI builds * Converted builds to docker builds * Number of fixes and improvements in the test code * Changed tcti-device in non-async mode to allways block * Fixed hmac calculation for tpm2_clear command in ESAPI * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Fixed setting C++ compiler for non-fuzzing builds at configure * Fixed setting the name of session objects * Fixed page alignment errors in Sys_Get/SetAuths functions * Fixed potential buffer overflow in tcti_mssim_receive * Fixed invalid memory alloc failure in Tss2_TctiLdr_Initialize * Fixed list of exported symbols map for libtss2-mu * Fixed resource name calculation in Esys_CreateLoaded * Fixed keysize of ECC curve TPM2_ECC_NISTP224 * Fixed segmentation fault in tctildr if name_conf was too big * Fixed memory leak in tctildr-tcti tests * Fixed HMAC generation for policy sessions * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu * Remove duplicate ESYS entries from map file * Removed the private implementation of strndup from tctildr - changes in version 2.4.1: * Fixed systemd-sysusers/-tmpfiles creation without systemd * Removed expired coverity token from travis.yaml * Fixed uninitialized context of FAPI command Fapi_ChangeAuth issue * Fixed handling of tcti pointer in Esys_Initialize * Fixed usages of EC routines deprecated in OSSL 1.2 and greater * Fixed FAPI handling of TPMs without stored certificates - changes in version 2.4.2: * Fixed duoble json_object_put call in event log processing. * Fixed memory leaks on error paths in FAPI * Fixed setting of FAPI app data. * Fixed size check for Fapi_Encrypt. * Fixed computation of PCR logs and PCR digest of PCR logs. * Improved comments for FAPI authentication. * Fixed segfault and leaks in FAPI * Fixed Fapi_GetCertificate for objects which are not of type key * Fixed hierarchy usage in Fapi_Provision * Fixed ESYS Shared secret calculation * Fixed doxygen warnings for FAPI docs * Fixed copying of primary template during key loading. * Fixed some wrong format directives in debug statements. * Fixed usage of hierarchy and authentication in Fapi_GetCertificate und Fapi_Delete * Fixed unallocated return buffers which may have lead to segfaults in tooling * Fixed usage of persistent handles. * Fixed computation of the size of a PCR selection (Fixes #1737). * Fixed missing hierarchy authentication for Fapi_Delete. * Fixed uninitialized context of FAPI command Fapi_ChangeAuth. * Fixed computation of random value for objects used for sealing. * Fixed return code for event parsing errors. * Fixed NV index and path handling in NV creation. * Fixed path checking for keys. * Fixed Fapi_GetInfo function. * Fixed path usage in Fapi_Import. * Fixed invalid settings of default flags for keys creation. * Fixed handle usage in Fapi_ChangeAuth * Enabled all PCR registers for SHA256 bank in the distribution profiles. * Added some checks to Fapi_Provisioning to avoid nasty failure states * Added a check to prevent overwrite or delete FAPI storage objects and directories * Remove obsolete test fapi-key-create-policy-password-sign.int.c * Checked hierarchy needed for EvictControl for deleting objects in FAPI. * Checked event log file before calling the TPM in Fapi_PcrExtend. * Adapted integration tests to SRK delete checking. * Improved presentation of Fapi_GetInfo. * Silenced expected errors from Esys_TestParams * Added man pages for FAPI json config files * Added a check that prevents deleting default directories * Added a check if primary keys already exist for Fapi_Provision * Added tests for derived persistent keys. * Added test policy PCR with PCR register 8. * Added check for deleting of the SRK. * Added test for sealing a random value. * Added content of the config file to FAPI Info. * Added a check for valid pathnames in keystore module. * Removed unecassary code from Fapi_ExportKey * Removed obsolete LIBDL_LDFLAGS and replace it with LIBADD_DL * Removed superfluous policies/pol_password.json file - changes in version 2.4.3: * Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be recreated! * Fix bug in FAPI NV creation with custom index values * Cleanup of leftover sessions in error cases in FAPI * Better error messages in several FAPI errors * Add checks to FAPI policy paths * Add checks if FAPI is correctly provisioned * Fix execution of FAPI policies in some cases * Allow 0x prefixes for TPMU_HA in JSON encoding - changes in version 2.4.4: * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix memleak in policy execution * FAPI: Fix setting of the system flag of NV objects This will let NV object metadata be created system-wide always instead of locally in the user. Existing metadata will remain in the user directory. It can be moved to the corresponding systemstore manually if needed. * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check - changes in version 2.4.5: * Fix Regression in Fapi_List * Fix memory leak in policy calculation- 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: fix problems with policy sessions that don't include an TPM2_PolicyAuthValue (bsc#1160736). This bug was fixed upstream in a minor release 2.3.2.- update to upstream version 2.3.0 (dependency for jsc#SLE-9515): - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/sbin/ldconfig/sbin/ldconfigibs-arm-2 16150310662.4.5-1.112.4.5-1.11libtss2-sys.so.0libtss2-sys.so.0.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/d6e961f3e176ac3ff46bdd7f76f067f7-tpm2-0-tsscpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a9da4cfd947d88e64e8b9dc6feaeb9a6fa6c69b, strippedPRRRRR.)[T?5utf-832bf2f8df95e7305ad4aa96e172139d953c773f06db5ebf5326846ac1c241ee9?7zXZ !t/ cy] cr$x#Dd)uĎ(Oţ,I27S hGI,jȶiy6pm"JE^llёpOLo#I3dÿAxhqXRAQq: C:#_R]2\pV rb~6U%d3wBDJJsՒbKlKVOS ;p~}tY*CI^S]dqJ 7A_u>KH}^k%[qd^S:Ev\m(7ej&irV1S$MWgoV6z-tSs mxZ  %0Of }gs &Bm'QI RZ< <_h,GCQlA]!<ܯQ8WTu_ms[ŗB-?!ir{O[?v<jUO$ It0LoQm!Nj -.[; ȉt =&k:"3,;JxH B>J[(5򻲧 t܄{GOVE&By_Мqlk.yGde+W3ݾ{Uliq+Rn=h;R/C$I. p@we0.i/#(k֥nEՉ=uKNoCښǎZQݺ{$y*'38cc Jd=!n5tQxPӍO2C@':'Ӈms .-eD- {Mmy9u^ܫbTWO{)/(f[}z(l &So";IL!\d(\D)z#)~4ُY[D㱧1¡z(Vmڋ;X)Av,d;< &%\s͇Q}5= OS\Z'UPX=ƲVN[B/r{<`gq z{דߐQp 8x9'ż%BIzzkX\)=46Licz6x CL19׿uൟa}>}{?_YpAZ@R}m3 N5~BjW[A(1Y^?ugסּlZ`ED/W*{{$ձ&]:a?ŋ?U/יxa_\v=%9d# "f9 -VbizP6/",GAӿWY4jixoq}DEFKiy2$#LQėj @XmHyZ:t4p2.A=Fb6,}(Hʂ+C=';25>' |a[  u 5 h ̥Xn I&K4m863@DqtG z؛Bh"юŬXS5 w#*XňOW&@-f=a@2Ğ[TE yJp3Ьã nt~ښ+ c?!xO͔vJ(X~a0NW+ <7f=:J dhd ,;P.\H?_ 9Nw V$G'p5j' Z!ެ!kBhn<2|Iʐ\c,ϊ\h)7n~c!h,/1U_DZ[k 5:%_@ Q:_Ijݑ>Y\9c{{"شT/аSfb55]&ˆPze8TH k Bꘒx뇊P recxl(>>:|6 5ZZObK{AUHw25{ewSiJDXTԴG㵃q|ST"bf4gTC(A qMx_RAcl&')*8Rm)$ЏfD1Ys˞n?> 9v*nS`Dgu#F7𞠱mu-1$Κ'GbyӊLcE(H^bslۍWfPȓinG+pJҒtcr YTO niD(S,)Y޷X %~jf3r%jW| ƛܒ m x95 V R3ޡ?G<+\ڧZJʵ9|'%/J[lBlaq[!lr1ƒtrm"(F.F.M+>ڄ Sxl]‹\cbw6vQM=䈹Φ gazA\[êEvAd” ΦnǭYƌ"֦f qAS,w_:Tb.AXY%!NV-u4JWD:Gx75YH$6i,eL; AnGDX_̯Aocs!;B˔9yq]oahsʳ #Sv== Y-v2?KtbtQR*!qE^Q X6*t9E1ώL[#+^k ѫ$fF f({%=]#bJ?e~\9{~ Ban^h#%j^J_DVbܐ"X>S@ K4v Mˊ1U6"X@EKƱ` qL_H<<)B*bӣҒM`pbK VT.+H@QJ]%AƄ/ _; GU7:ʘ5kϘ3b8t'yWsKM {Y3>bF64LK5'Z$5V&rbNi]Ц{C8Zl4K4]^l]HcQYlpz=لk\3 n!si.X)3LY[ G~c󠔻uB`y T\Әزa!wnuu.Qzya|䔬CfM;N_sr^aLK} mZE`A1{S@ uMȝ 1]U]gBeI0Ih3O[G~- Wz`ȊlW揾Q8>lVdbCU/ek CF YVK_m%2u]%?}‡IP<U¾0Bzw]g9.cygU]}|?EYJ[gGD?#Zu<"K 0P xR ǒVxb1Y4pWt͑ȉو++<}b9Ԋ˸ZaY5x#w^ !6:3S3τhRiY;B.9īRg$UP~>֧S)׭T;D`q " ڭ`A>Mem ?Ѓہ2lVA,6,hjل!R^gMX8'TC䗙tUUlΙkocbUV䦋taWN_4v;b r5@pLϷg/UT|q3u*Tś?eRuc88$`*y pWj5j7-`(I8qҪTi(8TN+SLGTBhw l?;Rd3KoFxރeo3#8ؠ1\E5PPv # "[=KDs(tS­/zE7p G+ LVK߀{ǗO{ 'Q;¯D&[cPaHSbv@)w$,d>V {+PJAB-lʬ^l62lC0*a5sSc{HNDC\ȅ<_66z32,_Nڏ4vb,en3ꋥqgRyW,S(~&f[i䊈ί" 0UACwgcyP}@F0N^-So[=qIO"+ڒ5 ˁTaױ\vY-yeLw&-L@ݸrÓɈ)Bn2-2 Ԯ=h@N3C+}΍}$tOMҧ7<i57Ӟ-Gq:Q<_kB,_B)u6?!XhRUR cG-F ĄY n7/VWkB 񷅠K/,.`*U+ cFt鏻`$(7LҙZ\"zcΔQCQA|(rs)X@DBm,^j 62n wnآl.(?~i[EOHhI#>h@h-1YzM^aoz $4)R%qRK[;O(4&aseP&zߛt8ϹV >`#ؙv86x*/3Y^Py[ĘDs鳰8l! gpX9[_V"E$Skj8pȰ0w(UNz G1%5 \ Ŵؒ>Vn.M1G]=cpV{h \׶=>JG,O U]xoq̫-G%#`6iXPbJb8SR6A4v~Ƃ\ Fz$D%d.ʝ^bXC&3uzCgHX^w+&#jLt?xxdPZJ;v_(ѕ C3h7j '/EᗑI}4@spUX@ w!;83(TuIH'8ϲ|И~-G퟼V_a†;c:u:>ښNSwPp.~N%kZC PL!b;gz)¸`;gk[(Hea0`S{Mm$ N 3Khw]:TFR39ɜD[o-,0pLO2[9 >%xH=<0SDJ.&+;n|v磺¼ L-\y !)/9Akx p#V5yZ#}gI(͸Ҿ8u)*!wÝȻLDXзZ]"|>kㅓ+Ǐ<hpoX-Jgf=?3bVo&N [юD4g ZJd?8N,#hy2A`,iSmK#^;&Dߜ?6b[7k!;W#xT=li'?20K\@)Ȩq.nE1Hm SD.h IyHmڛH_'Hqs"P8vWQk~X*) ZR=d2X>Y4*zfw{&05fO *R7j1T\R<)#w^;ml1*@פ2*1ρnv\{FmeЎn~բ3YC_GU6skĚV8f|GZ0W@.{d`x_I3>~LLg(XL,]vgVOPg[ G‘?ͣ<ǂ ApVLVuvAS!,.5uD?Y:6,I'z01 LlJ&QX!?_ }0΃-K΃HD5ibܫ HSNO"!<7(]؃jX[`{>řOŪ|c ˳ulJ,/Wb$5}\' UFKok{tR hͦɅ,uP=zۊW]quO._|yEx'9̿4VoPêd _N 6{Fwߜ+C3h bdR_J^␊s2|z# [6L~B==͎ x.]K@ \0 !u eqE;=ܗũ-'Tufx?9w}]~n/׷A/wxSEKVk);8,;GJ.PTa62'Wlq-!=e|1[)>-&zm0 ;߃\-^&oslwYG.< z%*D.fs4ݚʰ qF?ks>-ޛ3HqI0e:首19ȰۤPX ytUi ]8 eȃЄX vWqT~,E'F(7 dcP2j<Ԉ.OGLW!b&lNLɚA4fEWixsQu܀P]v;,ֶQ`{m]_/%˸ :Zb^"UxOցYy/Ǵ%w k#l [wiG  ^ǽFWh6 Ʊjt pTVT!#F5McRR~Dm:;)R7"ζfԞ,;```ʥ#RHgԒS~ÿ UKuDp e,"[[هь OcV(zhP̨QRS([n$]!ADOJ'`O"-# Չsٖ‹"X4oQn{f[ݦhRDILLOAx&;812гAی)YpqŌ&p$Hc C"0?bJUĴ̮ēm)jtWd'r /:Z{m܂cyPxOy7xc.KdTFrTDmf!dH95<C7D-hFT "٘^Ert}+(1?f,P#l7Xb>$\W\:Fz}/;sQgm# ono2Sa ł Ƈ1fLmh!i~ney̻ifkV6 ŷ>@eԾ j^f۸>`u1>q冞 \Lg5 b}R&I Ցѷ $Fmuo]I{HFU;RT>4mClG^"IPpX>+GOxR:%0-%H4@zUkNKzx/)}sgp\Ɵ;Slj?rS>i0+Okʢl(b W|8P#ճҪdD/ݐQOn_!=E$٤e48yy`A,&  oӍeS٥)Rb/3ڶ\x7Fm÷J Z#S" >E,S X`b`xTb5ozc:OVRhg#Α^]m]A0zx(=mѿdYS!ޘ@B"~$-@ P'd_c.1CY #`iQY$|{m+<ޓPDr7;La2=AߪH]Q̫Wg[yf8S5"kS%1T9LXm~&<6ɿzKیWK& sȥ !d`I9$aZv))~1$ۉE"='eˈ5Ƭ%{Qٷ|bm-CWmڒ̼Bأ CAj8˦ZKD-nY,?íK9PKųN?g=YvM䲊su UIZUTt۫,6ϗAh1r,0 7 D+[>!T [F݊LzC+5y 9pAEJYQ˫dPT'qB)Z2?ބTĐ}b +§96Vkoo*pyALo+$~+m`?yTptC#p>Iol f \u33 tVtlP<"m6T]N #j+? \x ɚS4Rj'-t+X:W@B{ fݿTWx7օˏj}+B؉Cx%5 =mes уIń(>[ߜY~tüP֛SW̱(v6 NFʏ1d(o2 {;mP՛ LYN.wם>=lG-5EQ=n(hs$X8hz:FܻvE\iЏ~ 6h3R=JPFdd#f &bY$sc9e{S|[oN(]U&rWsDz/?nn=^B O,SKt_!3~Z|6W)`ي Dt#Cme/>Pd RaTܼfQsvo  !0o"v-{jiH_6rez&`"%ŏr_,NU)6i(%ߩ} f 4Uߗ23mdGSIB<1KvzFa)ebMQ(T>]BNCT7t.UϡG7練NRӹvj*[^Uq1\Y (l#/sk̉P,BϠv^ዕFeJ~?7H>FPVPx1qY}fߦ39yٞ4z)LЅh)0̹]}RJЗC%5M>sR)˵f_j$οR XDz-7h7?1ֻA*FY%43=0:4?//WEnx@-O15(W$!=mTZ4>.a#̂)K F=} hyv[}<6ѤM?[~N"S$͑ PRsoam:.&V49 y`  ;`ID-bӝ UBAW[ BxXY/{.v۪ Ko!Gq﹥zC mWca(r%/?iq[xfz‚ymovGpkkϘ3X]r<0+߱*&gfDեm's)Oa '\_Vl[^lY c0ۂ^cmWϳSci^e6?]rm?I2js9FscRW`YPCX .80a9H U,܁Lo8%.ln\ drG_yoשC챕]PTγJyM)d\ ݐX BUݮ1^R"}^XTNpa ڹFS N;:I敚R(</AX;eE$)UFB]5Zj9z77I9BR\-pFԹk^D co_hن2/zD7 |C2^0A8(("ZE LNmT@ }TYs%XKuT(8 1dEEPS? (OYrs؟9d/IPgؤZ1Hv m!(CU!\z^‰Y!}XO '7t]. Sx~DL._ν9S 9sLT{Zc $3~;yGcsbSXWn"J*y/`蒖{dBL}iCY_mK8ì,Ί28O|Ů&zDrc]YHYB[h)F,FB&P5xYue2 '텺RqcgD3(xSO:V&G椧ZNyM Vu9' K":jT.6~(D} W-1c"Ůskq߹=#B_֢3?@nbb?3y2cJ?:i|4il`_9ks9?ܳ{5g7bc3/J$!.2hHW8cݶ-fHznAyPY[@],_qo@v p ZJre"?!F*dr-=}Yه#A+$sLN^LM8)I>_ şq^hycU'_XT`n*gKW OQ=f_ FF^֞FLv q #4z@nlN&LWXXY< "MjN ""噑9piDbrQCtt{Pܧv>ne1hEI$s5. @}ckM K1a{QT&9SZtJtaq4ڌo5FP1đTԷep vnrTRt6g4s"R^% ˈ*NҔCȉ T]KP&/ҁZI^t)i_mˬ=4,p-V`(U3Ȋx\G+?j6p__,/L,ִTvj*J!sm,6 E +N&z (M;ce/Ӭd/J/Sv*%?%cÔYރvّ تz4o]+NR^ JDHa*&9t2kuћ֩3xz)jKnsjE!?˨^̷900[nrd9Lp͎?νa%fE7"FR){<3%y~2=p:mͣ^ Y7DyQ/x@N8^5& ө#J?<[0Ih <4hs[r3.㽢،io$d`\ږ [\*.EdT?)0ri/+$=QfL%~{Zbq>Yn@]I,7lL\B:CXrS N01;g_ _#>x, {*u}ܤQn22;y2F޳,7[2CGߠZwyf-5/޾僣b3dej= sD}] }}gnf*& ͏K&oeFNO o L_?ވQ:^:)bHG=|ʢBloUh_Hk.Vk/.BKb===+tQHKzpJjBc] / cWǞE6\@ S%ُ|J#xsƦykk3W.N^H ]^)wD6kA&_ ^.-r0:$t=9vbzpY>z[7 aGX !evı{'hc{|pn&_ RQ66jd{-\MF},xUm+sM|4#̜y1V*WtͧzCA #ӏίQ9%ױ֝+g砼i%~ + ̞8®B 4u&V1܋@jTqD7+>e(/?5H,|׶ݶ6!jR_5o=^xȩ':n H+kH?:.4wyA]P(q%@{|zH?:=ڠv\ аH! ȕaPj{ t x@ð,0[ 'GSJw#b !0qЗ@Vu倀|m\ݧHBC<|CN%%a~.2@/,t7h_ĩDSB&/?Kh8N*fM_cs N\ TbOq1#Q uyڴ,(%J9 E Ы Uy'dZܑ,_րdWK:XB(cZ6Cp >Ԃ$~~m 颋8 fCS1U, bkaNpIUanV+ sR:Exq$*^NP07]87q9mҼZ8+A4"նXiMy9sĽVM1{=7=\<}oR &ze>y@,9'CII7Jרr'-4swZ(;8} ZV31\n1Pr\ӄF5Zy!ܝ> '5bQc Nĸ6vqc<햛j gYMUPBGp9rqY6Rtڲ46VZ[:r#sLV+v+Ԕ,I.)|cjJc,}Qq!ijYCD-eD|L5~Nr:|Nw-q,ⶤYwn-Ht`տ}IXҨq&?J,4}bdgƐ+z;i<*G9rGi~]*C:oCWql`^FyS>]]^Y9z!6Q'3  /n mo g(_I{+@Qv9EJI@u1!V:H,wVP&`vZK _*DtYͻ)0@ha=`~8򢳯/iltucW h͏JIﳱi$*h?G PA}xq6mdHLa|$Cx W)](=HԴ<]?xפ2Yf`YEw}HȚ}D4a6?h* G'H^觉l/翆7#, /(Y=4tu[t҉W2Iު m흨E^Nv{Ⱥ^'p aIsGVCH;NkU${} @3,\u(NX6Tdb JZ&=\JnN[5>_rFW('y;uE$FO4d|ikSp'{E#a.GycSM2H"dd3m6CR/1ӣ.O^zoh=\x@ۮ/BF]ft)ôiCXmctY\ň?Y* q,XLW/bo-(2pgDRhW<@$b뢆ӂImNo6Ssuws@3d[Mco:S}I O՜*r1ufF3x l΋B%!3KRhQ#?W'ĺ3UyV 8i1XToY&rs@8S斌3[J2r;Mrݩa=!S3l/S]YkOU{sqR)]'D\DSk졭ƂK8vҞ6䁑K2QĹ-Zt5ccJEf=2 &WF*$>ma\ԸN˰߼& K?ȅs3}~0X&~32i"3uS1r.tC>Ł͛h\?KP/:bZ уp@q""rրk jHΞΚd9FsskdʏI;1zK/*Bo9YIu(e\W{ãxX!QWGv )tY K2h=+O!יds2طhDU- ϗ,qGMwr:؝_h8]9%> _~(>uչ GYe@ (ڠp\]j\\6וa9gPz?ҰlN)z&}q`ԜUaS /"k .ɒqBUk?jUkJ֨YG>xncoo/Vxΰrz+oj:I 8 )8y$.k_7EqI`䔗}dXcK3 &$64$Aߠ" ; :!O-+_|R.PG@kTI8Q85.>\մ.P56Ck8.[>(`m_!IB_%9>⊼9,1bOMTsrHY6dde+; nǣ)|}N;jfP:8埰XpHI!E;2]bliߣ+ވ K8Ѿwtד7-S(j@ Imt(AT>7"}D10L;l&≈NK>jQDJl!B$q[01_mN/eoVzuÙ r/!w JPU$ 8.Q6qǷc@nudYlk`KZXE²vNH ε[-w,pWp.NV͆,FaTV|~P>ëJl Dpe9yL' Hd˝wT꨾;O`C@k,Oll)QU3]]mgeH%of`7%۝ <˺h$2~%)n ?ۮlӆ–uD#\$;r]Tj[_݈tYBHT4fNAjvT?U-YYm!EiR\a=>RK hECzy$Qr&Pdd^`wQ@jih^`Y28~C Vw!GF1a{*'od?#b9?u)<!bfޠ"\V,q#Yk1l  0cHB"wjtל%H~| ~VLֱB ^3hS3p1f+Xc| siy H˯܅Z0)@h&ӭu8/UEװW;;!ˢTA[_(]jv&Z8&6(^tpd)}Y}x{`2stتt;.6Fe;mX g-a76VC oOߞ;p~z6xѸt ';J>qVYt!6P^CQrh5c-kㅦ/e=a3rꪑ?>!yC^)! x"[=T~=L{y:pyq c1 СS_;0ޔ}h,( 7S.rkAb*Ze8u^/ 9٦}}L惋BzV$bEq@]-]fOt--i,`!˱[ZV 0&LX224jenlMB>6_a2tQZUIB+(IzuMdɾAaHR[Y   Qݷ9(uP AR҈ ΃nղ6"ܩpU;[ ףDewab_~5c*l re;o립*3<%c !L\b2QHZ2QVjd~勫PBb+Qmb /8 $w6Qc5y@q!V]ϸBNwn=rPn5?P0k.$R\}nK6;,js˓6ibT#U/Fk¾욀 JKуT ~9e< _ry$)|s&MiuE8E}b|Kݙ {P!U PO3AI "յjiF yvW mWh*j"ЫmJ'&C5R_%HlZYc ~"pd`ٖ9 #,0QT)/H*7';}?+ ʜy=ūv'/]/ Lg7w o]I@o-/Jq*ʲ'hE>Pك4gp='@/^}II|3&z ,y-Y,6k2 *@mww[Z;2{''h b%e9 w؉g}l|9 VpŪ xƒ:NV*J5цE4=\0Ps@g.|4V9b&߱ @N8ڃy=bǶx, ᮁSo:mEZ,8)(v[W^ZЋFVH%cA&*#+TOGsm7gMk]GhNա(ߏB2NV 0LjyE1,!!߬qmBm .D9\gkF7[=f: xo]B`+ +qHxga;ӪiȽ*5+Mʼn&r\Wx *O3dZk,`:fJX7MJ[6~:wB2пl]a1tq gwݓT uռpJDJ*nA~K04w|I}EYo@H9j\Qm(>|5/p*)uƒnJ0. `ξ D4v,],YKB2Fa`G'-;'w핤?>) +P,'ϡrG}[ߍIs QAnm9prB[hebzqKDO2 k ŕk7H0alY0V.,28XW&ܩ_؁_d-6֍αǒTH78j~Z F Vۿ#+ O0tJ'B8ۅnfods짏\ôAn#o0'ZD`$DZӄ#x&+,~c]EFF;hyqADb KD@iiz̟ӺD𧍇Zܴb8xI;ௌb4Mx`?i P-l`(fH٧Bx2;1V?b&ΐ_op)#2089 F\QBdP#tM7-U4@F@2 e)*05㯲џt ?'I8܊ EcE`Vq⽁)^{?rR(WheVRAp: }Jlv0_l9#p'q3 @C2XeGX"+1[; vLɔ#~ (jA&y"sl _HPBДl/LfugPj]Rxdlq:{$]V)]tNS ,{ 2n/[%{%] 5U$Y&5;%l[ȴYNl)%ʖkL%ڟ^叨o@٫P,BQt*ɖX/SsfвyDo$>Hh˷ h2v-S`iյ4+Cg-+5:lGYY~lX1A=j&{X5hE,^Srsr%<}7̀"ϼ׎bSB^)K^CTWL׭sr:-tڴ̩VetipqJ&ޠlمv7b:S8|[dhgae^>#$/lZ֭>EٻOn){ӚYUyXc кa_EnkMfm*|%Ƨr`c*CPl$QlIt1c[&sTrzzJmD&A<٣? Skdx}'eQ?ό=̅Alj]^ln->b 9?uw4ޱ*=LnjbۥL]"&("݀lɓc+;l,m 7JgޒfWlw iIC*OF\,pRi,|Dk(Wx;"0Pq5?pVE|b:Q;=6]/xS [Kwn:»J!Ywb1ܧT4߲[kZ5ԏK$޸' Xq.k2b=%(\47DQk̓*hmkzKp# }jҽ(7+q9XFIKcY2nuxZ.Gpއh|BAD }_OM?[+Le(Ps`V3Ҁ XRul>QvG/ON{CZ %q?~h+n+5Bwӕ:[3ċ &Wj}gWL F|KKL`ʉgF&4BE>`Zk9c[#5-(zpxoٮeJ/SE ̫H;sy҃c5U<5GIh3(>NSfg}OVD5Ŏ><`8='HvG}g JՔUL44G&g6~AL "-QRd)49,|C+ p`n8 qTqY*+ICXH+ a(W-[MJϾzVϛњ-GnڕYZoj$beT2n4 qEH"SΏv+hkZ)3PTb 2DrMs$@EI~aR_HlL{gX颸|?o!$ zo݂K ? RUDǡy}RW<٧xr54 ql`%o}g~&*7vj˾*8 sz87bޠ&U_}#J(c7cY\ ^x^rܢmࡲ,Uf5S-?g"W<5C;Y>j)=Hz$"GM:^i{s-.3HA|ɼ'BD7tˇU]󐄸6| uH%Z,-a L9k (`K/ӳqR3@yf >l NETsf 3J[?YSOeCib SAZ)UfR;}|oN4m{&v;&+Q`f"a1)ӂoMA@{ Q}ݽ+;rHY) ܟs ȞN ^p7o_LF3, g [WNC&?(TSۢ!C |9z(E2x>po>ƺ&F\uvat2cU9Q1GOdL5vQ5Z v}4D׮OکhK3yTl; 8nwI ,fS:C^s լ<.-&VjIcX-H HIEm8tR~7BO s쳤4]t/ID6Vsq{D&)vOWe'!QNx ]A >^Nt4LsɰE@v1cȆåVIS͘]Q0qn1W$5n :}E\&(Yx ٿlo lP0o><[utӝF^E}18X:˭(e$wj=J&~ Q Ә>-J{(+=agbbnNTFlvbO#8v;+=ʁ2 b G!@xIMuۧنʋg?y408C+K`seYu*n gfhlUhV k$bF[2-&{ $=2e_/uYߔ]"諻srv#(e/Id8Dkbvh9E;(X*?cX1Mg#l8a2 6m8:.tM W4dei;hhu!2L[ɹzS H7h|y ls{wr  'p[NA#(Csv.g]Mq]BcF[TY,PMG>W5oZ,X~RAM;6f?z>le0f^ݷw8JYa|⇕f/"al4hN['*8%1vht+MKRѧ(2\P7 ,ۑ0: ɬC sq`:]D]H$,˭M|T& 3*{/>&"vXgd uȪ4)%RQ2އT[7>(H  8S;՗q P"߇ B utxWe2e60=pe4F;2*My X`gjt_U}W57{ؗ%J-(?4Z#J|sި:^er`P̦5P!j`͂1`RRn3'E>;k)(+uViUKƢ?>Nܚug8J:lU-͡c )I/_Z5hL1ľL?WwXM"6BJkG);%@꤯옍Jz? 5)n,Q%B#c{^3Jд0Z"rޏM9%}Q- E.#AK _)*GQַq QS\1xi`"yU0r#ގ]d>; d(V; cB#;' mr]8q+B_ۙ,1fDKPUYg΀eq͉;8CO\HS앳e'a#-fηT:ꓥs%ǻ3R̛sJ@Dn\ G  (x$  YZ