libtss2-sys0-32bit-2.4.5-1.11 >  A `Cj\p9|6uSw0|(BZM'⯰j *O00ls]vY@{o4~!v@5XBr)4\NB? R{"9+asz1cXp>\$?\d  7!BO ev     ,4>Hhp   (89:>YCGYLHYTIY\XY`YYl\Y]Y^YbYcZzdZeZfZlZuZvZw[x[y[ [[[\Clibtss2-sys0-32bit2.4.51.11TPM2 System API (SAPI)System API (SAPI) as described in the system level API and TPM command transmission interface specification. This API is a 1-to-1 mapping of the TPM2 commands documented in Part 3 of the TPM2 specification. Additionally there are asynchronous versions of each command. These asynchronous variants may be useful for integration into event-driven programming environments. Both the synchronous and asynchronous API are exposed through this library.`CjNgoat12%hSUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxx86_64/sbin/ldconfig%h`CjN`CjN68cdbe6a11bfd8159ced3a7d35cb19d6d9b6998bd3b5503016b74a821f4e0484libtss2-sys.so.0.0.0rootrootrootroottpm2-0-tss-2.4.5-1.11.src.rpmlibtss2-sys.so.0libtss2-sys0-32bitlibtss2-sys0-32bit(x86-32)@@@@@@@@    /bin/shlibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libtss2-mu.so.0rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1`@^ P@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- drop 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: now contained in upstream tarball - update to upstream version 2.4.5 (jsc#SLE-17366): - changes in version 2.3.2: * Fix unit tests on S390 architectures * Fixed HMAC generation for policy sessions - changes in version 2.3.3: * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu - changes in version 2.4.0: * Added a new Feature API (FAPI) implementation * Added Esys_TRSess_GetAuthRequired() ESAPI function * Added Esys_TR_GetTpmHandle() SAPI function * Added Esys_GetSysContext() SAPI function * Added the with-sanitizer configure option * Added CI for FreeBSD * Changed MSSIM TCTI to be async capable * Removed TCTI loaders from ESYS dependencies in pkg-config * Changed getPollHandles to allow num_handles query * Improved CI builds * Converted builds to docker builds * Number of fixes and improvements in the test code * Changed tcti-device in non-async mode to allways block * Fixed hmac calculation for tpm2_clear command in ESAPI * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Fixed setting C++ compiler for non-fuzzing builds at configure * Fixed setting the name of session objects * Fixed page alignment errors in Sys_Get/SetAuths functions * Fixed potential buffer overflow in tcti_mssim_receive * Fixed invalid memory alloc failure in Tss2_TctiLdr_Initialize * Fixed list of exported symbols map for libtss2-mu * Fixed resource name calculation in Esys_CreateLoaded * Fixed keysize of ECC curve TPM2_ECC_NISTP224 * Fixed segmentation fault in tctildr if name_conf was too big * Fixed memory leak in tctildr-tcti tests * Fixed HMAC generation for policy sessions * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu * Remove duplicate ESYS entries from map file * Removed the private implementation of strndup from tctildr - changes in version 2.4.1: * Fixed systemd-sysusers/-tmpfiles creation without systemd * Removed expired coverity token from travis.yaml * Fixed uninitialized context of FAPI command Fapi_ChangeAuth issue * Fixed handling of tcti pointer in Esys_Initialize * Fixed usages of EC routines deprecated in OSSL 1.2 and greater * Fixed FAPI handling of TPMs without stored certificates - changes in version 2.4.2: * Fixed duoble json_object_put call in event log processing. * Fixed memory leaks on error paths in FAPI * Fixed setting of FAPI app data. * Fixed size check for Fapi_Encrypt. * Fixed computation of PCR logs and PCR digest of PCR logs. * Improved comments for FAPI authentication. * Fixed segfault and leaks in FAPI * Fixed Fapi_GetCertificate for objects which are not of type key * Fixed hierarchy usage in Fapi_Provision * Fixed ESYS Shared secret calculation * Fixed doxygen warnings for FAPI docs * Fixed copying of primary template during key loading. * Fixed some wrong format directives in debug statements. * Fixed usage of hierarchy and authentication in Fapi_GetCertificate und Fapi_Delete * Fixed unallocated return buffers which may have lead to segfaults in tooling * Fixed usage of persistent handles. * Fixed computation of the size of a PCR selection (Fixes #1737). * Fixed missing hierarchy authentication for Fapi_Delete. * Fixed uninitialized context of FAPI command Fapi_ChangeAuth. * Fixed computation of random value for objects used for sealing. * Fixed return code for event parsing errors. * Fixed NV index and path handling in NV creation. * Fixed path checking for keys. * Fixed Fapi_GetInfo function. * Fixed path usage in Fapi_Import. * Fixed invalid settings of default flags for keys creation. * Fixed handle usage in Fapi_ChangeAuth * Enabled all PCR registers for SHA256 bank in the distribution profiles. * Added some checks to Fapi_Provisioning to avoid nasty failure states * Added a check to prevent overwrite or delete FAPI storage objects and directories * Remove obsolete test fapi-key-create-policy-password-sign.int.c * Checked hierarchy needed for EvictControl for deleting objects in FAPI. * Checked event log file before calling the TPM in Fapi_PcrExtend. * Adapted integration tests to SRK delete checking. * Improved presentation of Fapi_GetInfo. * Silenced expected errors from Esys_TestParams * Added man pages for FAPI json config files * Added a check that prevents deleting default directories * Added a check if primary keys already exist for Fapi_Provision * Added tests for derived persistent keys. * Added test policy PCR with PCR register 8. * Added check for deleting of the SRK. * Added test for sealing a random value. * Added content of the config file to FAPI Info. * Added a check for valid pathnames in keystore module. * Removed unecassary code from Fapi_ExportKey * Removed obsolete LIBDL_LDFLAGS and replace it with LIBADD_DL * Removed superfluous policies/pol_password.json file - changes in version 2.4.3: * Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be recreated! * Fix bug in FAPI NV creation with custom index values * Cleanup of leftover sessions in error cases in FAPI * Better error messages in several FAPI errors * Add checks to FAPI policy paths * Add checks if FAPI is correctly provisioned * Fix execution of FAPI policies in some cases * Allow 0x prefixes for TPMU_HA in JSON encoding - changes in version 2.4.4: * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix memleak in policy execution * FAPI: Fix setting of the system flag of NV objects This will let NV object metadata be created system-wide always instead of locally in the user. Existing metadata will remain in the user directory. It can be moved to the corresponding systemstore manually if needed. * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check - changes in version 2.4.5: * Fix Regression in Fapi_List * Fix memory leak in policy calculation- 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: fix problems with policy sessions that don't include an TPM2_PolicyAuthValue (bsc#1160736). This bug was fixed upstream in a minor release 2.3.2.- update to upstream version 2.3.0 (dependency for jsc#SLE-9515): - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/bin/sh2.4.5-1.112.4.5-1.11libtss2-sys.so.0libtss2-sys.so.0.0.0/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/d6e961f3e176ac3ff46bdd7f76f067f7-tpm2-0-tsscpioxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=812391df905f8cefa17ce60fc7a0818fa356338f, stripped PRRRRRRRRutf-808863b8de95e9a1b62672375bde13d8dbbf30c7b08579b9cc02fa9b886a426fd? 7zXZ !t/'] cr$x#DdWԛL }Y@B@<*B2:pnȴڵOa"@՛b1OPwd; L|Y$XJޚw0wjn7}f9-6c؆xU ~\;35~:{kЃ x||sL 9}NhE$>aȶތ8/hO e~HGԕGڹgm(^)+4IT_ll\5X K8H,B %Գ>J" …7/Z*NA,ꯒ![Mrb^@(~h#L}srGJq 0ڒC&"eK@X121* DHYp'\Va_@9CpBN_DL)p8z1n*@. ͷsrml*lrlfEoo!zSPb}* (%F=G2ZAۿ8l긶m(h࿄ c2~Xb~kꉱI)T='+EL܀;1#=?^wGNd%3 +o?< tx ߢIWŜox+C/mDu($S߱i.[{+Brܕ(6=ojD2ul k@؎!qHf27R 9!GS*7FzfH b!0m"o,Tc>]OhM(UЛ͚T R"~7KH3l;{:_a 4GBRȏtg)dߔmöZ*Wm*E2O4j#j^QNl߲j9,_R'@ >r o oN5q[1C -;Z`4{uQ۱cO,RJI"Wvh"rQZ[By8<2 2,f3ke:<) 1A)G(S ҳ/I Α*E- 1DS*Kj(7YgY7NjDd])hnv1YV4ì6SGI64htE>{[?u.˄ t>)z zW ͼJZZ:☖QNLo!;L^͇0y_Pw/s(SCn"d\loDgQA"Zaɜ%{x;]4h-`cؒ YPt}0ncI[\\D穰[qfUY` &&>;f+ vL.[i!c()I_q~*'>t,ЖHSV,tC#9G΄| .XvE# C-|u }bpϽ`2I{e_V'I>ew6dμ, s8B:t6LDxz[~x7=UDUvTC5Tzg*وߥ 2Fg9Vh: s.J"^0MBSJٿ־ 0 )t4qLuW42(QN r hD*'M&fqj D;O|(O8Wl^YM7}3!\ؗzuu FOeh!%oswpx^4"|WD܋x.4Za~4A=pKF@u]8hSEL|@,E5[!2x\l KGHC5uާzQSfH7LdzO䄦{s 5We˟-A ֝hS 㤀M^f,HܩȅJJAFEsx4v0HC*f!6ۤH.W%mH#&M$o]t[ `&xGIQE֔-g3*iƬ^po126u>w=!PSQO5 c 42A8ZKU+wS-u>b졩o]r&HI[VDej2 8ꛐ7҃z0R-Aqh1]H%hS-97ƖebRxq;QBA 2fGיH\*7]K=s8S%1IE;i/ ӄ GE gvZU h7jlIqNm[kzHp ѳ}'R1.?7F+nW_+wUƛkԢ鎁ES%vҔɠk{olٲJZi˦q.JҲ91ȿ!ZYߊ>y2Œt/ՂYWgG7plu;gN*^0a1VRZhH0!N̶5ٹygR1*).2{?b5^qHykhm\ʥMBeZX.?N`+Q7ه.ѓÁTk]+(咇+TIV?+Li;^ZQo lRVZsSjC4\N{Q6TPvBT7,v2ijWOUF衲gd[5@#܍NӘ"D5RiEGB'5m_ MF1hGiT>DI9jЍ!SEyZRl%l-à%fF|fEb&]S.swƗI&'Ķ(W Bkz;XGuY5[K1ɉ< 0| 4F3>^'1ۊ]BZPW)\J\OLKuvtd x(*nCAy)y,Z5C%5FVY^3=V8浦9wؙ̎R9UҡtsW"6s/˹ wV p Z 1NËs34sdHH9[r ,nTMC0})m6,"*p/0o-'*wd - t̼nƜ(~(%O$ątR[҇FG:vyDJ mPhDM #"5kA'Z)Ik9b mөT`#g/+RJ!ӏd#Й):k5Db|Qa?6@Ư63/{c*rSe&>U+`@|̓Tn:)HoԜcOh?Nͬ }Zv0 Ft~cC1^?0#EX~LG2ߩkMݹ"v5d23-r))*pJ%߃bh L:T )o7%/՗;/}NaM9w%`|䙪 #Pn&3W2ZJ5!Ӌ\:kRXES.k}T &Y^&M* 9s/T'V=bX~KWQ&V Rp5pЌZfz:6xóyHDbʂœ-ײ=1'^7i^BYDoTq4>5G^֕Wi 0 cb`oj&BTHh3〮+m>mTn }dAsxxX\ /I^uqIн!7Ei5Ҍ&mtVg&cvS?HpHm:C5h2bf79.^r:rj,u 2K;HA  y=s=oJAf dDhtGpnP:hPBc \:6ʎ"HVoy8?QȞp`Y^BƝ$0`yU^|ߎ7A`ENvD8+jyH=geNEx^j f盠dneeij0 (RYfe!GEҖػt4 C'1=S0yyy_^-7CG !9(D~]]Tޖ.*O| ly3d~MArLhP~E _mF*JU)V3 q~~υ5)UvzknWJJhZ9 yC*uIbۇUMg }+J:{J`f(?\MDW!SN.L,*4lဈp(){|i'<[BFXN\u첧ԌbaAvjv!tԙtxl1ؘ(2o?ZS I' #ʇQH33g(+`G*j͖&'߭Pu/2#.й vئG22D!3HCSDW;$C- }?$Ј6I.{~αꓶG\%\9~_bָX_g AN OLZ) W]ZC@Ki]7tq$H;2%| lN9U7( _)f7WvͩOf5VԚÐ5c,L/ݰ&۟ߥ2nb݇:eX_ۿ"xܹ_qbJqfc=8Ф$?i"RR|~^/P}Rm2+`(8IJ4iq#B"{K|z#?-=Dvx6*c_wg#>niBv1_8X=dHj|s1QiO<Ѵ&1)(4+I?@E\UڎgB8q/)FU[gXlFo %j;!TI?0 H[<#B-JD!>g&ZUNb"D x&1fFQEһ l65?Ar]#~BX!u][t c̰F RN8-k"̜ .oTTؾ"E tI"=%$‘=l^UBӊ-+ % sFN7--ǵny_bz)Q (0Qܼ3#*U#1 ۰G ⺼r(N,#n7g:c6QOF@E* Ĵ ^˭e&@buN7^]QF0ϊ3QI|J"B(3,54m%YBg4̜ڙ?ئpa~ݶ|~ 겈l`n>켤pu;`]5BܟX")E84QGĭΫctAȖ]+l&ď暱kXǬ.Olpkp}/1|]{*)R p}R$Z X$fjd>6T0Ǫ!_NtX{`aΒ 3 +E>lQ,ck! qͩv:eb] ߇x^`EM7*n [ Ɓa!KhH= 3VD=P#׭cԦc>n=BF8cB攭2H8DndQm8n'}޼gCѾmbN᧯v0T ! :hr<S,Hv-uW'k>4HŀE Ñi3GX-W0k kS4;B8҂rp3q)9]&`q O4~Vı.)‹6,TY~ԈƘ_cmv6^#X nL:q}N3la5_JLqYǐimc5U]`YFn6icZx%_6iZeQsNM>QzTˢP.B?C枯l`pU<&-Ƒ`Y6ksA]7+@>8X_nH /DZR;$L 0%:aZ&ܩ(`dSraY )+}[ |fv ɯlCg[ 2PA&:ҢLf1//2x#O X}tUCɡV|%,2N.# >[>VZ(TC23aCj!TPiR-`'/1 7ZH瓇uEa~YZtA柘XV*h /DhH箌+F7)Ģ+U7KxBMm5H;z,W10@SgL T[ LyR ѝ?gbfuB4Wo9D]\309L `jm7y 8U " =A)?6È> g %]q ^,4>P?^\`~,J&^"6+S&լH*gG}ߥȫ-% ؃& =̷MpXs`0p'_0 2QE%)튰ft6cUQvYo"BqZ!dq̄ϒő 1,r'KfX X JcĽ[//T;'I9vB`1ֈ9oFB4tCL]Pq3`bV(j2 GsYWy5GZZlqS̠)2ȭ1FmlpO5 [R$}$W<:PfSej3vr=-N걇;:\2^%0'ӜjmAgDZ0jq"OvwFhWMĸ2mi8ߪ6((>*ʖ!fSԓgM!~ Ϯgi/i[Y2qgJy|zeCEwo~%L|6ۃG\T~nh ͏v!\CbЭp1HV.n#`;"oDZmDL7V$!HOT^8aYn3 _Œq~A B"g3J s,"}+ae 1S>ec\1+RL,+8G#Bν2h@x0T+Zł)I3<ޘ?lLq%OfGݳi >%Ţ7喅Q[Z@k[QLpTI9T !72 C=f(w3]KիOT;v 1P3ӓGoSZSt+b{TmQL&wL"'` H@@jdNl#D?P`@$XS{! ҹQxշ},IԛKq7OZZ(l#m_鵿w=ao/#zs&_A6YfXi3=ۨ h?>䍚BtvK;@W-_IUgkC_ႂy@8 .xBJHtYm59C,G}CPi ? s_98Ҽ'iǢI%4ۖ¿z 2z-P1sj| 7nL1wT&)!SWfSjqCf5c #Ќr=,؉%~XJyHe3=6K@fW%Oڔp$L|_cݝYk$g;v  ҧ?y^z3;n-Iio¨/``&zy5-5E11"`pDo+Y +Í'~SN{b&׎NOуҋU?}/qfi/e_wS,.T .(QZb.`,2#065[R-yڈ":+a)X4Cne?n1HSxL0ɩ/M#b䏩3W[+nb/ЬWXӞ ʂB1.\cLJ>nﱁ5fh-5߾jv4`'(!;Yl%[}бK^9 Зit3IDHO]et~|s;# 5t{̭.-V4u bi:ڂ\MBo@m3{% N"Ge7*q|sPH6Ml &K&4%'%sn#agDg&;xhdH0M4v~VQuwȡSFe^ôà*Z_ J`p0 0/T}b ZLm5iKsExᡕΉ| \߶ѵ;1Xt#"SJ;BXp+pA=#p<* *_ֺ%&GCxLHWxK}Ox͙ K?ģLW"xFrψdf{W+?2"R1/xIg@dqeuu,:}qx1] M|6 r`gaT`P'>FS!t |t(i~Z^rSM>.T:Ȑ\1YOZ]@k~7xx@b77vţ3K{ ^Sp %o?NxM^Xߖ WCH/gi cyO8E)urwrٵ{/*.Lƨ%=2)+܌c|đ4r^Ϻ:p9_mD%uyc}9[Fs`9X|f:钂PjΛQ9ߜ|ŸşҌW{㧅!c/PIJ+Y}+ǂ2B$:tGf-28 'z #9ˠ``I" V淘7+GZEMo1v,nqϢl\N4T*! qcPٶXoI$rGfwkD0Fe9ķVAp^J ={;I#AiD/wX٪~̫m IT/??M"Δhk8nGO)Uuz 2F`9#}%e>8>&bB,M *[鏈Mj:&|=^$U2_DRϸc\#D@iTWHv6q\:rs1|xh39+ fH8դc"28wOH>rCFfB8/wܒhoE"eG dyCݼݫ3;hT};({>e."n&zl<iِڪm_, C"i6=4l?Ca"lah;pz2MJsNX ?$`ʁI~= $b2h."&6ha!C۟0ݜ_ʴ7D-.WvHo TB^.̦F@>Xw ,߸lDGpcF ;lN|4'7괝A+;*f6DGJ^K9^ޮɎ6*oQ 1EVNU!a8E C@FD Ec(2yMp=S bt]=>C,CpB*ArDgf9 )M' ħHì%?xH<t4Wuy]$~EQ__khYEE=/ J8?v+MeMKE"'OqQ/i*I}?u/g^OIE1{ru]JGtOxr5 o`5 cPYcM^ c_󓒍u|G!=3M`TyV=[k!=W;p)uy0v 6m> m5!r.IhzXGp h(zGfe t8TBEN\&E,8iTƹ_]zFt`W2^U_af2GX )83̽b!;HJl I[ Q"[d<'c@޲?)o^8~ !-/.Xov65 2aUd؋g͟%)(e)O axӬB<)]ɧr*[."9`$kewr=!$"dObKמ(8,G3 Rv[&P:rdgH7QKln>+ęU|?u_ϑkeiZM~.8d{[e:CZrKZNȟ+t瘮kAU @x$o4؅j}FX^;` m3g6;ND+)zb~> XL (ƴY4klߠCuLK`K_N4 '1oW):[zɾ l={ O6Qȧ{.Rok2z,neN(LAG4}߆2POD4]ۀgbBFaTNj. oc#$TzY('!mh1D8-^[cIq䙒+ v- "6A@4 ]&,c a? bQI?L`8  cl>Y;H뾉u -A2(VF}!⎺dȨ仜Df6^ #\`#7Re/dҵvHӄŝs5S>.8gl-Dϳye*DcoMXE*zm콰,FY~{X@\`ϥD}؀W|ϔlX@W_ s*=( =E(Wp)i- "zX/y)dN_o峉垧d GĮ\جV>#xșB9pXJ]7~Tň5<}WSb9ڭ @'r ̺0@BYRMJ /.}c/n#9m/Ex.`xYm/(D'6G>TIxCTf)yoGPtDY\ 挑斈ٚS٨ E͜%13RJS)ԒLι~ekwt;P>b,Lhf4" b&ΣUWǡ1"#)߳ _|aW0D~:#.&'uUa@TZVQ{pGM3'G^;{"Q^ǕH7vd$G֜޲zqX[)DI`kjI#XArF:q|D6qJ)ȱ?ԞfsF3 b 7#?M1AoǘLheŒOmA G1S52#̸Dr(.! TNp+k [G>Epe%]􊕁q," c.Tڡv?0[i҅&*viTU"Hh/յd'<_=nQUEF0qQhbRС+/~ ¢feNBA#?Ve`sYzqoRs)$gn'ERf-i׍d Ԡ3*2)fqpÅ#JNLB od BD#ߓhGyڐYmG>I֦#3NG@ 6KΤ riZܡO^J_B$z85rt fޣЎk~? 2RفU-?y: `K6}CGX%@&.)"zP71kh=RK^8JY^f< KF)ݣLzC8T<2r/'IQkp Z84I1J$/M>&zeuz?=TJ75iPDygVn6/ADtlDFȱeP].D,}{~m[e9_xALfO&jT# [Y/4{+傒s+VUοB[Qz"C\?eVZbd i+W?mU= lY2kp: FGhq51fL9-[֭V|{ɳ OŐ~5,A~CW 1}jxF0j\pUx#[.9G~:?,S*Cw$LxlƆĸN&ȷ}`, 3 k%LC%{䫦F,SDx50U$1Wb#$F˂}ٷ[w-U3sm -ˉIt-Df(,N9H.f~9Qai7xnJsyL&~ߴyeT I> StPEg "ԅ@~ .jI0R?ldht?VЌX^sij NVD)3 ݙs +eQG$ܐxH(I~ܷž:BH):<(Dko}3Zzx hlo/r th?Ys ?%|P nb^dY#%W1USv# DSQXNdwnpr]'S41An!+=B˂F y0]y) ! -cd9!oU70gZMģxPmC +ѳOZjZ|fċ!,Bؠq}}7,-g`z_9` ۜzD:6v~[8~Aػ6<>CւiX~O6'?&(=#uNNQ:@s?f b" lnKD-9SiQ# rzu ˢ[ªظxcxִTRg2;h:*`J- 7Ҧj!B')e9-N6|A MzÜɛ}ACZ A=y~?v@w'ɣ&7Xaa n}1/G]Wƹ4ڰբ;o42xt>Au4ۊ`O~C .9s-!^0} 4qw7fN4s+}Ēdy(bdc=hrP9`8 :_s&{;7g.+s /9OUqHxS"Q#w춂s<UgU6b۫Vw:2jinִGS4I?3OS _[d;RU9TNJU]=P=Ú(sd*)ZUZT'fAGEΎ7d;)mysz^)+;C@*/%|&h:a,k 9OTo =ACYJYQmG3u xm)_hkZ(p %S_-#,eAo[:is mz8;A.tø|>7׀xh6I*q4Pk#zu N6o|QhCZzNtx 9[451|KWJ-^c6x,jB GQԥ98O7*isr=9| 4w;?K*ЈN;JJ ;P Bawe&ʯX8{9*)#ވ Zv1x; a)YK- ׮؊U]Đj|=+erJ4S:i软i3X'w 8eN yY=kGˍ6K Ypsk &⑒jF/tʾ ;,i4M6^q,ȘℷXRMaf>Y`⎗S`%eHoWӅ% Wdav_lo\bCQ3/pft`$cS+a"1CqCD''Up]kdf&"#4-*gT1U)ۛP.N3LYI!;"$z1ǛOJLR$o\Wqu !L~:9E;qqFD֜qUfRt=MQcGhMIW {-Q3Wug IIL"[GXץۂ_U{˺"C{HU5)=πB×%>7K|~<m 2RuYһ[ߕAy[ %Ѓ髙FG8m\a8奂4}lhn64T jn1 rnk%#?_}Y7n\ vlG@A1p mѝ.jfkXF7 /޿ˁ(hTQβ6mZe&l6%_!k?5UĬ-p G+dѷ8oqAܚ$Q#14z-)6D8>wLu7*VtvwFujl.,/?I3\NPId DA.?֖7Qפ~|?If5HmP侨Igkc5fk=km"rTp۵wWęCͭzlyP1]^C aP1K:4u ,]wSl v ;@kF0;xbf.dEUuTMva9Mu9e躁#=0]pfIZ5'"rTDoO`)gg5뉛-X:#EjjPZioEg)F,;|E:[%DƑ4)9 ؕq[bT_xzlO- `')›O' ~M"l1icԪ/䌮.Hx2S8kX$llVr?&Bc!̀qTΠf`{1  >{Hl`{a}r8desuP~\*Oa p05ԛ8?Vbu`W->:M#Pu}[Gl8`Vw$9h*G'{a\ayM>n\Quq23'&ȺM{+uGy9,Kp;3҄[=( ?RŖ @.VQ@_fY\`RGף",λ.fߒaM__f zԿA2؍'CiCJ\ ;S5l^O>H fsxnyAC|pb,g*X-a~%-ur+rvwQZS}V#Ah̠| PBJѓCiKy?^L֙ߪ1n[B1&pkZx7RK+R4_|lEp]kh+?bUjS+R<3:nR24T4 m4{NV_T|Di)}>tq(o!;d^]-mƳY*,fUO:V"mLQ$~L|"||LrM ^#J˂ F,pMg֠@7|ChJ'+LRILԻϥ-R\WGr{t a+-KEx]bHَ[Bk&ZlqVCPmneݩ cJO`%Ѿ\mV(W:Z wy$vgVrYsQ ldOܺs^?罧)F1)؊%HMX7픟+!&ft4>r\ৗU`[ w[kc4oS#N^WỌhIZdJje>׹5BW9g5NAM@Q;iX mL !]8&jքcxu=7Mz*E\#WV` % FptLԶ ?cij #W6%K.?%*eKޔK'+Vz6'2`NsfZʇME4}NZVQۢîuAZt'QhA Q¾lWC.gr`Xpn+~'3 ~Gv:]ol[ޝPI1J(m[NS.j` 8ӈ"5K$˃ڗBKt%D2ojYqq_{J{EEPFaDoi}Nw+thХƜsTk7Ж6j VJj**ek.̴*[F۬N@~zMбm"AXl{ƈۂ/X0uRz~u=HjpP^q^俗;V{OS/AEKl8coAHsR]fri*&y!vS+w=^ĀXRT-PٮofpJ \=$yl(% W0P '<Ď2HZd`8r* e;5~oQMQ:-ד/! o'9>*L/Vzc嗩<WC N a'[eh}Ycfρ5=_rCmд!;$GgVMr6Je8d3kjB;iȂM0w yj*{BR’d )\ԬE[݆T *j2m^}ʏ]iۢq$CI( |^D/b5;F5QQ_ɤnmd% (U]35-x7bʰO=IUtT,.BrUP,% 8Lq'7Vc?Q|* sϼ#bfؠZncf:HUouaWck`ZB黖D6r`\ kh외O篣R#(ȂC3$ oi a8"~ ΩS3R;l`LXY$˾ySwER;ItMG *p0?2@=)f ȐZsڃBp#AbMʊXXGAA+(trqϸp|HKUdqp܂/{xEet71z3wDвŐXTR/\=jἃf ;ӸG+\BH,ړx4(K2o]!DR@ÂK})PPc=N-'i3cFs ,)Wᑞdߌ}ڜTAԧ q~S@MO[rDRA47 Lol٪&Z;mtQ(\lj!h;J7:yN+!T B}! `F2lc?l>MI33nC  *_y}˜ c7ٔ"jY?巫dsdq;uNϐ?da#v-r 4⚠{܈cVmrn# %>= ܶfg ֽbhYC?y?!J.\V=̩]a6m2n+2='k/ >8 yyPoCھh<B\",^EQ. s (ww<^ 0_,xsR#d~XZh4P1?jeBu^ %3ey)3qɌx^p)1 ~ntW,6Jސ!_0l`Oafl՜EzwY9B@n Ebb;k (<#mÒZ=a]= 8OuXY4Jǖ&(Bf8`kV8TkŏC`H'/No6 v[p%N, H46Yq椩ǣ>#"bm%7ҎEƒh@Jȸ^ F_mcXM'Fe9 0og\B}JTqՀlTT#s*bTan%ڠ'Z7rj%  ۊ5iɌ} "HE).j8b|;y6[}XfI2r"*٢ tQCp@Oxlp7&$7 E^3-}_ȸ. $w-`{iV8L6k*+HC~TUi驋΁/@sEjEg uew.(_.kC [ 8j;.SjwLEmL_b{aO{$wf҆&-f2ȭz*mzbw%W5y'.om|]]R ۥW(#YJ3(E,]:\sڝVY)(UOZV:tKͲS>֏"3:Vv&r2F/+{tA,`NG#s7ĈڼpS U8ݣV[A ǺE;k <kC\YnC/QD1+w~vT>oZ>vbGN oxtixz!^7還OH?WgvDu1ym%3R TD1*.Z3#lJXK*1':~1&avە&R.xS)SS%ߌ VLHa8ڥ],y"R Ds6 wJ}]ip|r*q' L*ftfgey8?Zqw$rXECD~mF.>q^2·<(Lcf96jF,%=?Ɠ(46IQa-hҶcTݠv=xLѯX%PQe5ÉAjS4Ԁ#u'!N9= cPW *hISkIX=v=PPeaܱr)DtI>L6\HPw;76y;].nE-, XQ)W9Д,T Z!Į,H4zz#G=H,T$44^\x(((ut cw+dq=Ԇ.bǡ+B #wH!$4Kp/hGej XaTi'rwsBzMm=#:#=oJ-̶iv2һF^Q \.ۮ[4ΡqZTOf86]F57?ɽ/z?a-c 5pFY@j$RgFNU䌉I*8=Z/Gw^bQ YiHAU}V-0km*w1 J-d2j'%."6m10W+ai,ne,BB!saPO- Қ~~ sl@[~81k Vm*Q.Uˑ._nݹh#{7x ?(jC=OHnS4+Ȍ>hX:=S'Nlg:+ =R=]HmΌeDPnryYL٨v(U8fSKR̈́tp/5 lZRhլ ʻ.x$|RPnQ?}JlfF5TƹHqw六F7jkTCBP)T)&|MA ;ǮEpTcl3tmzWLh&jgZ|D;  : Wq ;sT&R/RsqȅH_'#%2F/}#ޣ18_-Ev9?(&O` e`4_8Lp bh=:KAoC-(4=ޟYuD-x׍o?0b۔,/OFHV{1H0o jf~Io{V+*,vn X&"){[nNŶ>v+(eG2tR.ق=͚-t^)tyIeћ6wz w .; H (ANx!}ѝmhC8RG=X$54xXS01sPܻ6Q486)T i=˛qrY-]=D"L^.ƨ ^"=0[zZJEb"Ա3H63/ϧC*]߾\F5}]0J%+Ir5K7?9hcbcr?UC1pdzVȢ35_8aot;vȏ;P2#Wo<|~-RJӊ,wW=J2XQ~oϊY`>AL2sĨ Ugiy BQ!co=.o uTڱ]DBYڙXÄ 6Ilv\߶{EK3(rCצf)VzZ6; mH߿viK4 bDgO$;Yr%peV *{+lLmCu!!Yժ ՉR\/l,5vaN.#EĮV,tQ {>"&0N~$@ƹQN5VW9۵jg_s~2&9!dC1%;*Y}yi !Nؾ BVN#ju\ F^%)ov=XSHZ`9 ⨼Ń9Czzo7M45LWha_&?MW>\#gJ'#sGdڔIxRYל+b?Q֕Oo|;Rnb7C8>p _bw#  gqr3=>o|Tޚ8/{ƮLT\?emcG0}qӥM'")L3Q`Q/a"RvBh/%0OJ*vdC}vX4rY~}x)HQ q=8Vhf]~C춈}~uww&뎕0YխU% Q`hMw/)j$1M!Z< S 4FXՇr%1R?K-+_~ ؗ Y|n(l 2b9 P|U.<= n~ufq ){k\0ZcdܩNqX]uVZ |y]6ֳ|L,&ϴ癳e]aO w Tio qZLfQ]j1dЬ+w9ᡳ:B'd|վŔ%A1b|gU9?:{biJY'ۗ 左U@ak^!i.t2rؤmF'MAnƌ :Zh1ʝ]0vV!d3`{X(Kn*C\0r5m2Nts[.G戸)cxOjB z IuRޖ ZXV2 \2"k3(F{=x܁Sp;0x3@7K쉦/1N6s){_Vvǣof+(I<T\ U Wui[-zV YZ