libimaevm2-1.3.2-1.38 >  A `Cdp9|+3䛏+&;C$%d8i$;m+tCGJ2?Q#p8d|w)ɡkDX3hm o^(O  NF_M80cNܖ/Ohs'Bfk1^,Cc+ }$B^R`1#]]ȇM '->,RQkK^p@{e.;˄X!W]p9^h.Gfuefb17ec7551dbd2e2f5dd2fd74da55d16a0defa67f6748508fb603daef8921f8117341def97353f57b62c1613aa1c7dc8a9b6846d`Cdp9|0vE C@T&HFC >p@*?*d   7  "3^dl     0Px P  (89:c>&@&F&G&H'I'$X',Y'8\'P]'p^'b(Bc(d)Je)Of)Rl)Tu)hv)w*,x*Ly*lz*****Clibimaevm21.3.21.38IMA/EVM control utility libaryThis package provides the shared library for IMA/EVM (Integrity Measurement Architecture/Extended Verification Module).`Cdsheep15PSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttp://sourceforge.net/projects/linux-ima/linuxx86_64j7]FA큤A큤`Cd`Cd`Cd___`Cd_998e9c50290de0664bc30979734f80dde7aaf0744cb08fb2762b795a52c9312544bdbb321292e8c0e2984d17c9564adfb497800e41851b9d2ae20b14c01f6b8c3dfb1a23b702adb53bc3e34389587faf59c6d94790305c22bab4964d50efb0cb4ea2cbc282816bff70605aabf13b5a2f9da630a94a0e16c564f12dc8f9a0b20a8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643libimaevm.so.2.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootima-evm-utils-1.3.2-1.38.src.rpmlibimaevm.so.2()(64bit)libimaevm2libimaevm2(x86-64)@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xsl/sbin/ldconfig/sbin/ldconfigsheep15 16150294561.3.2-1.381.3.2-1.38libimaevm.so.2libimaevm.so.2.0.0libimaevm2AUTHORSNEWSREADMElibimaevm2COPYING/usr/lib64//usr/share/doc/packages//usr/share/doc/packages/libimaevm2//usr/share/licenses//usr/share/licenses/libimaevm2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/49fd1be082e0473436a94d5bb7ede3c2-ima-evm-utilscpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=590a802b2390413214a1c4afd2e61ebd0f4d72b7, strippeddirectoryASCII textPRRRRRRR`:͔'_sutf-85c9dbbb72f00e7c91597a3fbc616a571936c5ef27308033803b2ba69f0cebe3f?7zXZ !t/ U] cr$x#DdΫ J4{a>ǣɪ-&<)dZ ʊS'&mmG@r|=-5E0"ŧ |%$"zjm ;g;K08:(3?)W/:0$:* ,@]ZVDLW=r OK0*e49(N`C~.%iCZNROE*vf5eҲ>::*Bw+jCiB-* }OG)*{ 3'Β#,_|Wn]$\'ohEѮ]m`i]qpW "Z$)Y1Y-@FGuqS1'iو'᳖Gu)g$>bG>N2dr w~w*b(&[BW<~m1\ܼ"4 ]^SVɬE8w'G(T<8Gt2? vі"%op4q͒S_2d oCzʸk:*biUwY89S v[ tob]:Dq Cjly{~Q8u2u} pTmx|ҢNȍ5KN"[ wύ k)YnRYyJ>ځZb]dLU _I%>H@Ē!nENL${paz{*rm"\|}gIR t. #ɠ•_L5~a %F.mBy_C\y(qB{Wnt7Va7o:3ᎏocЉ!DB(;ҠvE.nheDGA6(͙A76g(!aR&+ځ0ލ T;0#SdL@U9kjuxȱ-2 ٽ  TKO|ϵak 䒹j 8EX~n-BB6Z{,QA^ -').s7JܰOKMh$(~1iupXxHysO+u-9 Ob\`@cmXZ&H?=iH)(wŖ7o1P޺:R,eii1勤&"J p#_މ(!-ZupvCluBTӇ֡ jq K. [r/kczQ;]R9>gҼro _ (_-3{̩#` zֿ;(f `&g*&窟4b! 5zB>Mfb.7KhiXzW$SԲUf׳©a p?ՖY_6^|eC9~9qyg߮OpdqŦ]fzWFZ˩1xpJISr^'k\rQ2>7UI!f+|o8~e& YH06>$brZ`+JWdwah~܃8}TI\yF2Hn#o-~0PVv8O~KqӕjnEfc=5\rO-;y۴DָQjΜ*r\[Nj,0^L Gk[4u:>7;!e |K;E#˘SgkG94ArK5k/: }WOj_|w F4si*?](KK_G]~gfs1%F* VO▟ Q {~5 }~+whqMR'z-Aw-^Zٸ7 '^Rasl'* ]z:e'AU†a>?PX9ZCD:J XuU x؅k_}k& ʵl\)ŵ[R⟥k` wgr5f̂똛;66;a;?=/y"ezk, N. 2Fl,!VZKC7%#( bͿMu_ۊ_$(~`]C8..c7KYh JE9O۵m4d³lF0rQ#< 0HV(`ڷqS33 ;ϤPF`:rf> BƎeF*re;,n!a~,Xݡf*>qoX`j*ˑU+m(tB6! Gq*VK=t7|&4)A>F'a6NXtsaKzJ"# fD 6JˮXٮ! \̛ )P}y2;D'B}fS"!&ԋ6bUHGnՖ[D;qhG ;\(Q$f=ji}P JC\5E{G_/q>/Ym+cCv%kr)@\ĂpYtS W^ߑD"Qy43kxZgn|<tB6B.J !|.3:OջopβgTKST!:J Ͷ0[Ê`G"~kz[XS%)WsD}u-鄔0C G +^WcO]N{>3L@,oqHih2Ioe%Y}/.0-e=`hG@N_ +ӑuI]F55Q4w )}Ryy1@5]Lrk] pB@8$JA?˖ӒmH.6_<QA9'2_Qvp7]Y dʖfz.NAǜm5@פU7h.*r KLT֛2 O40Gˎr՗'"y]%5xDf$lOsSy煬Vp;A#Aۦk*fx ^\(MsI$G34Q8Z=?W7(#s2ykfc[;b: gH˥:Iw%ߥA%\>v.H R3gpJ:p}x'V:l|*lJA꠪ &~8FuA e`2n\ض2Y8IMu9CT?ifZ~@_@4gfJ˃q&=е +R)|37ӆC 7$kɯ:4xwGR} ZETd Hpx^[U%[qsB:Ou'6D^iY*f1pzKLGz-g`(X㺸 [N`\jw<*|V"?D'k{(wNeI:>DaN~t3m宺|y>e{Rebچ#쏖翱4 H:#0isդ$4t:PlQe!ƿY-h@Ē川;{^NQBW@L{&Z[IOOK]-21=hv2 %+`1_[d ?'yKќɯ"TBfE1'c%}Kՠ:O˗P+@ z3TdP~H ctʫ;G3pBէ6,&vǩr/lNlb +KW"jcc ^5O9kxVqk ;3B_]c^i%n=h> @`&52]`nKҟzz@Cx&<՘N=@_Ƕi5'v%9J|R*DT~6$MhYN0)\\ -ԾmFc X d9/y7RɊh?gKE`h`R<<@zDbXFષ$N,g~[^_ Le8+]gEcKѽ-x/y{ g2:-fu{r$ ǺNAjt' 1=^+p%O;PA& }iv*.Iv ,yeNeQJf;T/F;Otgno-BTB ;4w(*"Tz18:(}߳βd%;R$H;uV؃g2aRU: k=n IZZ2|TxzpUȵOEnzfSaq5[㣔Ui,BXN['0k+4p4aJLfcO>!nwu]&HN='pF-zc,cޡ Oql,SmR*0pg;aBq&0Yȥ`e%[ZRI>_VbBH}axr_x mqh}  0kUyX ^pPJ֬-',M h3}p9qR6-?.Q _H%8R,8(G+3Ā.\ ɯx#Ke E#Wi@bUoJT AMbz;T5~FrmJ3Cԯ%Y[C䩆dw ے4UE/KܚDvqdAޥ6.ƞ;O?Т\ jYi(]uMeo0N @C'Dա۪CNԊs[t@_,ܾC[q8uJI;/%l\A8qLjfP@p+͂qXFzS퀰|d,5= ~ާHh,|+;$07ʢ ;p@C#M &{k\w6vSl nI]\~ 57D̹Bun Qr* @N'Atp*Hn^~.ތR+yj^VpgQVQ+]eFȃAQ[:50z|Jv&!܎@!ɘR&Mdf`rMQ3oyט^=ʝ*c) وojtc{jns]uA`f̈́=D 0is'zws3AIY"t*b}#E"޻u:vaЦ!]ҥ$PVcPЪYwvBLE h;U pTG@L4I9W$=,=,V2eT:n_{x@|rƇpb>/|>^g=זq 8 pFMQV *G߃OF|p=k G/qN@ZSw}$q?}vIœwkn y~8C} YhvJt/cMzY|u*uZ2B(~3RcTTii GGQ@ #=рFahE,5 qd]KG{>sJw$%g:b[H\T%wqeElۢnZG˅5S摜Rp/yS(t?l5`oU7 #r{3P|m$"b##=N"qK!ˇ6-] 0bA٪!1smKbH]*Jد]d/n5t Oy48yQ֣[YtC%BLC ebU]V~\xf*2bub>CkG> k{ 6H02d\Q6Mp&!H6l4Ԩ/(!TDxeG8PdwN0^fWN!%#@Cqw߶\,E'F|cORQmNN ?ЄfX\썌% 􊮬}+Փk`[M.D83fZuv008pbU o>_6݂l XE 4S "Xs$0tb/7'ZsACgo +S1 9FeV[叢_}o/h8Ň?pKETbxs+˨4H g-GǙL"}`7JVtO%>0DP2W)E9#-Z6zŧCvu_}pFnJš (cQNŘاz+NF'Apf W>]S& ekzw`nxQ(so"G}8kՀ~DkRt0S]4Ԣ^=ZZěShwԋ붱{oTD,al[-\+Cl~E32ZakUw͔܌Yg)[b :]-jrC1 o!z09SS`aێTHRJw+;"rPڼU0 D/Q tmtL FK?$fF.0$Xhd4S_9П2N\`fJ+( &?<-E+א9=YY6͊,mLF _ ڂ_᧠_%O[yll]H{k0|}-֤~YAlζ@l ÿ\IJb|]s+AwoD"2~`$q2ǂx&N_e'Ѹ)a\IAZ5" /a8Z2B :x]&0&x7XQ'iz`OtD3Z2Pu m?-e^paEt${luQ9fç5'i($&ټ1HK`Lx3UȄ[*fufn,AqqZ0iOn ^}J\E)p^1?sOA7g=t'Q@DvuxbȾD 캢\iXO{4o4/kJ Njjf(3$UvpcJ [O% 1 u-ګyR-vYIY6O;Hۙ'̚ˀc EFH74eO>5ڪkbX Ui^0Nա_dxer#^B6lB |3 pNx̽ǓNUon.b*!ѱ/%0+?@nHq%<:r^r$v9H< _yI QBmle敓㷭v~>]śC9{0SyXçNsh!06o婘RpeT|wwt},|0p}%_N$:mgmW/8~ gS/h<}~#D+\4t?4Ek.jY9x)ux$ ; {d1̏:Ợdkri;[5THE{:U4k5 YV=X#Зny2=]bebL.G 2_ҿ;ޘ;QQ/r XMdE 䎀V_miə vJo/S,N 8|կunKکY͕/6fI_E6BoQӧ`2B}77e?uOG,˫gDNlc' LphX}>r? x#ف X@hiz[?ۉ.##TMbyHW聦1V1LO4; ݘvIQEk$?6ؼ Gv=5d d1ʩcat:mqafdN p:ѥ_#ԩ1 xO-harϴs=f:mpTH?GOUA4}NS=m#%ɺl'|ԩg}K1P AZ7^-nXi<SZ({B_p~[[;J|*%Wx!q|=`bvrG8 L?+۳ѱ ldDSksכY?izYtŬC2Q":oq&)ϸoyW=r}y 4v(^:\^#H.!vcRЧbPj8 &/$=6ZvЅuڞA6(SOLy7eolSbQ |\\츾G>H66ήBr.ir1(g6=3W,դ0'KhsRF3[!y6.+1·&&1~@v;e 6m牔}ڔ" -R Lz^gw$uGq`(,kguaP7klß*Q+Z4ϰb WǾ.,g5}GG'Mk:KGƊ߉yuH)QwD!R]r,!!@RJw\"(H cBvTi\ asXprlLAZ\JY'UGTvSJ2@: !Ko-ʌZda7yVpwݶ0 ;Evitr#YvX_/|,YaɄy{KmS W߇r/\Pl1vL+hz1,deS%e0:djNV bQKxG(*ilM֏c\=C+YJ?g/c\³ƑYve1=pH&!J'")7HE;"$PvdoSN"ÚlAJ9>"OQ d)")Ct=8~Ck"ᬮ|ݲ# Uvnr>y1\Kr!FC"p ==b^fBk-"61:u2E@MHH5URW?/5{攋\Ƈ0d'Ck@}45v1`;$+":݌fWMW;ħ-fCr #sQIijE=3A.Jo{˳C`%cr4U vv4A׍klO%E xHՙw#b;ZhZa I*81LXl/欒KĤ8)}/,~S8 ƫ=&$> k5Tk|CH,\`𳫐Ɵ}#iiVSL Hq%JP[ pLxߋ3n!"I!.zb#>\/ͼ5faV*V"Ŷ)8NTUO(mQ騹'SѩcpL` }ƾK_ܞXaPE:z 8(~ =7klc*ct{BwL L$췯E[gq$"$KR1*$n4vʙ a4DMe'cfL0O>}&i[6Ya< Ҏ_z;M1NQ"xTwMИ|0[3<=٬mj0o<09O2i).jFYG| ёI bÖŐnt&ܢarQPmM;E' R{-PJKbv96ÛH$D>V@[S\=^·y^+f*ӛR\sY' M]t!9zkySS*)Gn֪SK )nX4>bp~]@;ÏwF9Rtc$|[H.o}1n\KՈlgE }ުIW4h?ܚ,i.ۑTXpi'ӊ }{-}H*ev~g.2uC#[=@mG>b JU{+įSEu1m]qSdP伯_)n}?Fѻpa,V W\k,ITG&D,mmc:~9r_Drت !g_'޾Ctz7݇I?&e Z0_OKywFf2y $AQW\AGrS♴62m2D,o$Wy=MȖHm1K %:ݪ&>1b 1=p7t eCܾmL/ޥ1ӓ^VydYP[T.PbZ'[/.W"sԴF}Ck@ԲޭR$Hi/**\,6p*:/ Y@?H #\op%=P(ί/ V^6cZ*;ev=d֦%oW'ԓ"(#%U̷zC-KO\ OFH2/ D뢖`e15H=Fs[?2O&ڶ-YW]X֜@M/1H퉬hfs$|:M,f^ڷK*׿3;.>6]d|$NvR7aGAq9+ZY {xA B!gca4@..? KL%֌~ZC*aOáTg\U49Q3ن?Cũv7.EIF-lgMnRgwGO$ sAIbdI[%=D]0t]"]@-q)=ɼ2WW0Q0cB.G6_Ζ9Ve+iƙFdϮ=M q9, o!11K![s_^ʼ~]LuLjE\&ʘf.B&"&[t3L DTo?]b2}vQ7p gu4R+g@ ay#—\!(;W;c==uZx^JZm+x'H L]aʔ:b?֖^Ӈ_Ј-WLW-c`te92[ wp@@'762Y%N'̩ ϾGw}#Il1;eA Ē3>nN.&^@ B m  .WO`j ź2HF4 P 8C̶Uy-sitƝeE],E!?5g,5vq=A`b51)V;ĭҡsP>I|asY&f7[hm[ml: t{I6 cp} FdT|;]`( qa,<-W(_$Ӌl>Ef-:JeXI+4?g셹>X]DmY:Ly~QpL2LkOtoM}>s=tgޮ4%Hk!٧U}A 57 ^B'SJϧ5lwL\,^5OqUe<Ɋ C`{q4`!1b,Z|=՟^6El :HMOzwD!`GU?6BPK$*j&߳/Hf JI -1iRo2tlfMErE?q˓%CZPR=Eid:{f!ԱX8*MPu[%a5 j䪣iEOCtyfz'\RG2:'Zזϲ5hZ+37RT`ptMO d2a,Kblr6 DQy&Tq :e8\HM^'mwǣAn$Z$JET*3&'SvdFʥc4LZ,lH,;|ǺB&ǒNL9aK=,"c ƒA\z3~-EZ˻dQwoKUCrG#mSM.e.PߩBgg*YE1Jo졸5sv'L Dh4K Q[o#3Q` HHZ vؒ*f8gfuO`GP]gwݭ`>^ݯվ ͠sVaF-Aw[_p8˧X]6 1Axx3cn%;ɬT:S "!K( I(P` gǧ{FPѺC]NOƐ*4f l)\|>rFuwrcTAM''XAZ|.F!slt dPNo>a'8!n{i>r ԝ ,9IS뿗wi&ɴu_װyw<&⠉iƃPUU$cԤg̰VuN' I]~ؠUB|CpƥEWfQU%YDaMq&7R,1'GܻyN*Vbc^=TFz.)HϭS\_ =DwG tkC$y_4Y;* jJ9̛z,= d6ؽ½!d_bDq՚4 tjE.`A lp˕7h mTcpUB"|(M>1%C7|[%>\2`+D!r>GL'/֪[-yH6 :;zJ eD̬;&u7)UŋC ='dbִS jk|K*[<;5w*T)|U+>7m1L3D:K JG\*M-qՊRHX+ZpaGѼl^ܿq>]}a?@#\>4(s &GR_*hQ2"(%hZZ bUN;hAEC_#R{Co?m=-QGϰGKB~i)x86eץbCR- w.p N>XG܆{.E^Ao9P=- 77냽F-(Ŵ" =u﮿ыߟR08oKtm Bʪ dǕ3Vwh~hCke)1pr#3$c_hR߾HRݑN^DF\JuV-kS>ݥ{y穁 ƓV#{Zx:vhOŊ& yȡaw`_xNkpZ̍;iZH(dj ŚE.a Žq|01~'k0=1@emSqM:oe٫ÝULdW5[;_wnDnH5ʱ3ɍk6$oB1 `xy˫B^Z+STfN]k3>(x(5{|q8n \esdbgJv4@&߄A.jǣP7ܱq\yfn(5h!_ED9qfEc!μha7{uVcmC 7헜4@۬ՀD嬦24N~&jYxA0LL@ֻn ieѴQAyt~ݐeF׷e{0]jv] VVU;BN`'gZ`&S%(7:2%sTP=^d,ܒ uu <~7IgKu5P+ɘ-kA!6-3) B*l/vxHcoo&XpӆJ gV5*ukeYE`:WL='.R;>N@P%d2_ `nn#hQOm"L<țcP#+>C75ce {ddc^ȋK;"?uQJ,g-B?8!Řj7ӓoɼtiBFoAUO*mR8vy΅n%e#"FB'@hScu:tyDƛ˾A0?8?bT ,$gӛ7ddP5ײC(q5y<`$^h%o^4@oUr6$ x3%q}$Zm'@4}Mc aD)v$@k01,̫]@w|Ʃ;dvQ]L1[,[IYrQٙaf V49ȂLaˬ e.vI-ܞ@nRK}MJƷC*gc0X.z,Wl&JԺ)Ssر=3~i)8 ƙD"AC6dLKDkZH'[DUW jbX~@-}/4  wcکX\=5öV㿁n=U4f%U_ƛG/o*ܖ@{SC|,C!t&ѕ^7' )ZcH4qB6bpIv}JS#PP`G古j[ -9yA"nٱCGGK bMhy_Mdaw$e! `z;"׌ƥͶX O1㊸mskS쫀qb5&[4B "g&S~1i@Qڐ=˴c`N}H @-+ `cG`,%*褕XWn #woG*ɣ1Sd1לVz+2uߏK`9Py=_uUW*r̚6jNDLKߚkq3UilOx;7u_r]N@c3[̫I |xLX܎DzMrkFAV- Xq.qXw.?IUzZρ4. Sc^?;)y/},ИR~~3:d=$<q5f GA"cse&Օօ4d<<, +]D<[ct(MLlC1Aerإ^bٖrf"%VUyeUxnπc@b^=q(BAرR ο+!QKVPrX|Qf2CA;nv"͍&x]@Js.=GSI czYV\806 }͝_, (3lM๹`y] ~zDdTЎd)Nzf]uOӏʨH=ԣ-&m\mgmūeTv] K\&m_3>$ {s@ vJ)s=05Y1 6"461[e.mvwN 9W!F$$ IYHgVmE=V4srBo LG iK5 G8j_=V^oF$154r賣gNUzBRLCV)3p7yBŒ#|/AnuV+̗eٍؓ[C:(xi⎗ eِDkY@7thyXTC}wlth {O+CC!k.}eeYw?É!8_g YZ