libimaevm3-1.4-150400.1.5 >  A bvp9|0߄JN6~$-gv:.ws֫P;Rz8 lƿ(%6,A>bUH~s޿iā#Gz4`ǰ+%b9 =_COGj,chiV0 {sp@-?-d   ; .?jpx      <\, X q (89:J>)a@)pF)G)H)I)X)Y)\* ]*,^*b*c+d,e, f,l,u,$v,Dw-x- y-@z-X-h-l-r-Clibimaevm31.4150400.1.5IMA/EVM control utility libaryThis package provides the shared library for IMA/EVM (Integrity Measurement Architecture/Extended Verification Module).bvvibs-power9-13SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttp://sourceforge.net/projects/linux-ima/linuxppc64le 99FA큤A큤bvjbvjbvvaaabvva11b04cb65e655bbbf72e101628b7c524ce72f8280213cc199842071b7f3e4d0a44bdbb321292e8c0e2984d17c9564adfb497800e41851b9d2ae20b14c01f6b8c4979bbf94c12bba64c293a759390e909c9bfa63103c4a1e9acce085efb6e30a72688f38076022649f68b81ce52ce35abe486091f869e8aa342d2f5cb355a050a8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643libimaevm.so.3.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootima-evm-utils-1.4-150400.1.5.src.rpmlibimaevm.so.3()(64bit)libimaevm3libimaevm3(ppc-64)@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.4 * Elliptic curve support and tests * PKCS11 support and tests * Ability to manually specify the keyid included in the IMA xattr * Improve IMA measurement list per TPM bank verification * Linking with IBM TSS * Set default hash algorithm in package configuration * (Minimal) support and test EVM portable signatures * CI testing: * Refresh and include new distros * Podman support * GitHub Actions * Limit "sudo" usage * Misc bug fixes and code cleanup * Fix static analysis bug reports, memory leaks * Remove experimental code that was never upstreamed in the kernel * Use unsigned variable, remove unused variables, etc - Upstream bumped soname to 3.0.0- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xsl/sbin/ldconfig/sbin/ldconfigibs-power9-13 16519635101.4-150400.1.51.4-150400.1.5libimaevm.so.3libimaevm.so.3.0.0libimaevm3AUTHORSNEWSREADMElibimaevm3COPYING/usr/lib64//usr/share/doc/packages//usr/share/doc/packages/libimaevm3//usr/share/licenses//usr/share/licenses/libimaevm3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/e4274af5541b1fc937ac62b987e371a5-ima-evm-utilscpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec5e4d85ad7d3f6cabeb2314cc1c8da0ead74d3c, strippeddirectoryASCII textPRRRRR]x5w-x@&utf-85752fd2356d7fc9deba01ffa36845701e6edf180eb8a2837f171df0fffd47522?7zXZ !t/\A] cr$x#F|Xsm: Yq'$! ä<Q2#^ `R!trhڤolUaUgI %%>uٯ٥X]FR_I!Me,U{vVsō 5}T?+DP!LJFEoV:YBv+nUwKw:i[C)!, Y9(xpڨeo8ljFguU޸qqӭȯVE,yҗ)VJ-MF.d?zL/#j7o o2Jب^[uCLN$cS.ܽO3v)9I b.[ D̯߇;w9+ CΈlޗ7/ &R`g_Abbl@d;p=8 (To8RU}3"3PMIA g (P})Y)vE,bvAmvVk3v{EUgQc,g7j)eǢlc|y`woM(J!_xOJY''R`v)"j#WEl؜ _/ߌHG.%)|w۬;-]OmH3nsw?FY/LArJ6`b 7,+# 8]5W XcgB'wp9$]co^ ЍV ~+k]+lB  ڥz\sc}ҸOADmcfOi ^atR`j{Hu#Ͽ,)M'Q>="ww|`b!tKRڌtywTK%ڶj;$d/tJ3pN75 FKUDla W kM œwm!+t^kaGj=\ z8veUQDBKcϞ~i:bWz01qp&3bY)F7 Ȭd݀E?u$H>vF39{ӗ7\F#Dz}'wl;C୏P 6ˉ{6 _| Ɖ js:҅z# e=AW8 = ;=ݎp*s%c+DD~3x^S^^Js\y}nx.2LeSp]dռe ˔ H6j8{|etBK.mzDIxO'tZHBBbx6nwSRg{:%/i 8ۦSw}7WAiuet*Ա7wloc&vr;~,p; qXn>ᔷ6d4[QLl{qp)ZD @g/$Ch*7xOyoo|DjN"+̴=F?7t}?t[vZ HGB[ʣLgSbBųCq^=Ϙ nY{oڴ)r|-\ m+țmG~@KNcNY$"!>-@GtpIeۀ72ߣۚN7{z|,%פu!%ʬXB5Kjj9[riBKYݵ(+v;j]7u^M $&S;e8,@/ί>f 8U T ingV $NB ރC6^5%X3|$VVjr2xNMWr_YO `d] /;g݃(_PX(ǀ+ ~Q*y;.o2ޚ[K1AH'ӭGUemMm3' sn\ݎi(['a`y$\fZuSD/ d <.#[vcDd#zLlה?["HruW˵aBը [!鯧BypőG] zB3z2گ$dv& YUǨ ѫpzNvRTbrIy__0Wne5 $nK/HG2Ə4VQ%7?V1m,!3rG#y(-q@u}”$CF29 ąY 1Lh'PI {&Xı4XgYJoLR@2J.6)p9?:Clhnߨ;-: "oA[ןȸl7E$ψ-L)\H<-?IƌBVy 1!EE{0Zi?Narwq˃'SjX!Ě`bEMu2luTSS/ѻ7BR)c_cۄ =[:ǭq**b6^egC쉋Υa\KWZ[h=M%kZrK<'IeHVZ5,);)Q¦`1:w/\ehN73 J@"q :5FhcD7H+4e-- ;pZ"{Z*P;(vr=+ysR9,q s ɜqk$7m"m +b*i k\SDYVD  %5G]V%\BK]7Fq3C2oJKj`m0-oB01df0jtv}rQgapmz|3Z_+ӹt^0E_XeMsG氻H{/ nu=؋>Ӛ'9a&y~$ij.PF&=͒ P5Er¦4pU5F/+DZTƣW8 Lȓ eöP|gZ#4v ?6{+-_DVƸLN|?݂Z~Ģo,LB|} 356?,L8n0iKJ8++zΔ 8gg(=<_}Ukmqr+;ʜNUhU8@sqOFHAOFG[ }\͆%/HFUfKA}X,I1;6y!g3nVa(BcᰯK0Qjmz𽥭7Jh:z5nbrcD_)4?em ƀB{N%DΫc7q|A)0ؘƣHyj|OЋh9!S@oL\_]c'=El?L,} 'V?']Ttf]9pg$H3eYgu[Ua$MLEgC%xFZ4?Ep"ЌU'&{p+a u>V0{Ks=S0׊X"P%udlp0"J7,ԇL#eQA2QW=7P[l֍ʮx2Z9W9 L%$TIv%({r̒Gf4O&eI8 FնBzj;Juzw^,|ѩ]""M%+I^,WڵmJ/012em2_=49//Y|D'C(Kgr7tO gnMW#$}=x8H.dVJ|w۽cYC;)><˓{K}IIn5r$}R!mہzƨW"u}п@NGn's0B}S;`V !z}$nԬҎk\J2-|Y}1|1<ɑs:r29qx[%p5}6h\"w8\qfx/V:DYOT#3uUxJ Fi'p7??EC}mйqinF=mW+[@-_^YG4jLo!epZ4t" JyUyHl/fyI~1j3׺Ӛ5}(l~|E *uxB/څ9TČ ,1#c6En`tw:i,K!dijq ^p`zr׸mBm%o-5FrpΎ}NZ|k49á̙nW?yeO'XG P VD)2_ۛgaM9`Br|ߢגK -ɞD(ԪuªX*0bƾj=p7?qWרsZ& LI~28z LLX,EpQIbnJz2)"$ɛ(2A~[{؊pK7cF ykY72Y^,QgOR#n:}ƃ`LG@m՚bBeZ/ 3Fsܩ~CQq7"^i1N|[*;@zQTF"z$7}^V\R/^?qǛ t\KÝyBl5\ f1dk?_EjF&SUtwqkʾK7XVx)cil%訅 ,Ÿ|r&']7{h#N i.[`zL~{J /c+u\,\gۜ1Gϐ/W3Z)kIm>QC"P똻t<ʣO_>R!<û'/$ Ӷ^w"vgFdTY/ڜSSi^1 (# ;)&VGwpv& R.6Th$Vu JlkeYgv){(4ՆMٓ2DP&3Ԕ7[90vAW*5Cn5 ivHm"n >;1&MW (*g &stZKFڛߦYc4"伨>t~Oԥrx*-!;ucOG%4-G=PwהFs7#g)|:RX5y쫶%U kO?Ԁ1?WV!ϟNwy[L=Rۏmܬ=&h}AK'ZXkEwd@2Xv0;bJ[e},t][ Ԅ EWBuWp.,{d&܅;o; 5+&}˩R= !fw5GI#e (IOT|ߏM34*gXeWe[H|#[G|]vs6ngR:򱈏TgWoj,㢆ފcz~I6r=&_\OA#Hm3&ZpN;[6 svyy ,iY @R%'H9Ջʮ#5?mnVIMyo7yKqG^8UxS4NO7HvE@{ׅRXϼjT26i Ǖ'd{\~ȺK]ʲC~_E`2 Α@Vp?t! N=Lj[5?8Vd8>g;Mʔ&$EqͥdDDȆ-p/b;(åJDbLɮϿ 4ݰC%9ں2w`-pЅ  |nKJOɁۡCÜѶ!Bġ]"{C " t!`ChWfO7Izm`g|Pwk`*1|©D q;|nɗ=$mgz/kuJH)!)Y>\ޒA( 9^TAO)M,}9U,hA2'.UP^&]%>Dq]˅pQ4R!+ăIj!&*d$x{i]KЅ^ABa6 u=vy4_Enyn[ڃ &T'.Q;=MZJĥY_fX!_*L2Kf P7 wjV WΈ6" f ZE'ʔ{'P xWK3=F=+:4C% :3(,pD*لU۞ށ>G뺨 ǿYMŵ4B3QZ$9Y2χ+mC#A%MpGI?on"z|S$>c&ֲ陲N('5'"6 ]8/W ܨ\2E fD!V< f+S%#N8 Z<iB&l- sOFEl4!Im&}u!J'H<UAPJ~^5(C[ @VvԁIb# yFZ TL9IISK4_ %£x0021 F+1>кHA QW7eU 'sݱ2l _Os:(eS.̼gT˲D%Tz_-#,$ocLj"YHmhL|i`+b,>{QfϩIthf +2;^ "%\1"XXyc(gX fn] ZG_:q̸MĚ֜vў֓P`}>Vk]DT. Z"=8Á J>1IN\|Y1(}" MS҆0@oF3GIr-IX٢BV(jJAXOH5:hA'Mnu5U0"KiF]4 (ڼ#W,AuF‚֝4:`pё BSc3t<{3ۑO7 Bꖦjܹ2V&L^eX0B",R]8"`KNګ͆tnW 1nhEJdp%R־v9Jkjۦ0|[y]\@-6Bc6E!`kNku_@DsҐT㰊+sDnL]h*Gh' j~< $Vj8W] )Gk[%{`s3G~ 23e<A X2VOOۘbq0RF@:Bq 餴. >:Kv[g0\^~t!}՚ +y* %>x|X|#ZwÓFx;lfx!T»;9Ze :bNȲC+=!SQY_N9km]ocZG2)h$cq͐9\oyj# ~آӼ S۶mh+78}3.fQ!SQZB,ՏhA }KʉK~!AIXe0?X#Œs".8Ys:|R,E#.I_.=x@Z si,)_2ZUCP"ꜷ"@pzW9f1X ÂhIeg eUP;G>DoP3/*f`.S  j~Uo5Tg>0$&zP8_31C }g)q":R2DP,AL$Z w,okKxoqw Kf/`[qƘ;]T9u]1- #xM=8j4Gc pKV#ȿZYB7n|)'wgDBAdTAkO?Sro[hWS@Q!f@ͫ>lq5q@V.ˏ50=N K{ATm<4Uo! WtgkwƑ&G;UDFwq]jH$ /twgRV;.~.G?c 0<0a vag<9ٯ^=7R~5*ip[d٭܁]쥏Li rЅMD7* 96'3 uO҄ >:i;= )gLcpg EtȞ1[HX3QdԟGQP޵UO::H͡ZݶLXtlY} PtghjB\Z?ŒI*hũ*12$yYx맋 mb2ބ]V BïЕ-ljiwA)Nc-#x!ZAf۫Lx'{d\0eV J29y bwL*7<I_P'TNQaPYyB#&!g ꮉˀ{`$L],pC$X;Ma>\m_c&nC7/E1OF837l.62 T7&ZFp>2X ޛĪaienFA|?yѦjÓeWz6wVzB\㶪 A_~1m+0TN}R5'рt7dǔ04'jsuTqa W m8]~5/a[hLRHAzjnD.;㵟W5!*3~z%ℿoC%s^v1/y(pB cG *W@Q͸iI TCh#ebbVfGH(У-5g8#iDC% vOr](qdm{xIB.S=YGg۔vRTݜ :B.˥~͢KCF[3"5+(6\Xt@q^VOk@9˹p j53$ % 6rxζ2YZѧ2vd]y0jesI;Y,0.1 [{5Vw' տ?=;ǝu.yC9d}w S'Zv%AkG(;lKk{0V:[Mpfkp8FLA|ʼ kp;@Jx@^8Wٯf{w4]JJ1IV6 ӼCOZ =t9yYO3=TFRuhUU0s($*G 5j|o+6 i`P FH S;$޴ v`3c\\Ȫc$0i3nuZ@'L4#28і?: QxwK\`i@!XL( Z'D ^|aWSX[?![d|,=tPΦ]tK)]Ovt b&vYC6FnadhD| Plf86ߪ-ln %2fpRRo@Pu}YPFUGf1W|Y˷ɾ%뫻3п?U>SB#`rjy.*a_ԯh VdRm@X&rJwdy+>C1:pi՜ju;@l\GIIU~Q<Y-m%x@x`z\,xҜ+=/GxM=)fwlO1E:2=1tֻ',T]?U鲌%]ymwG=h&=釜q0.m*SyJ3Quox1PTnh%`'7Ϡoݑx_ \@xǐmua>m}UDk&<(Tx 9`TFg6ԁ*{ /R ͈|wӛpm-ƬϗEWD{]CAIa`%;PemS! (U͟}0.~EJzP5< G'FP<.l$*hasރgiO-AVPbXp1jZ-)om՟)e FLs|e3m&F w ``a"QAxCX&Xe_Sϼ?.;M '"Q z9à:{ lIyH]p2a%D ׽gCȭU-ɑjU2EE7d?m5*vG1s9>m^Eu9KUi"Բm^&MFʷ+zeq-d<~ @xAn?]S].I`i=j*g'LE? j63eҜr,4/]bՁ;r7>>ICq᮫Z_!gq"amňk:7UAjrzvcRJy@˨Ja!?vct)Y2{"uisk#b 9>+ܐ'3hкsؙM+wvRkp wb?X~A7T\( [vj[j-eB UY?̐e>k/'7rH_T+Gʺp<ݮ:,2( <؈ No$7a.mrE,GdņfrU Ҙ@*V3Jܽ=F@$9X\΢ PSeL_"\\ĉU`d##v _JCX92oRsVC~TVoѠmjrk#bL.|%nҍԐyr,8| RO4_ldAЋIBq(@%"bxUYOP|GW6 DSBO`nbLWtvZmb+UXc*qZlFHeBZGlC)gI>PlO'JpH+ZJL\h  Zl% O_N{elԙ[*P#AFX4擭Uݣ D5bAX7,JTrx X0,3mIYG2]lv!eDN#Tna;#J:!aC46ʝ-ݰ|pYg=S?ehDjJ ޑntLxinJ*t2I;!,XB=I>"2s}AẌpb yHv`p^z&. hTHwtJtxfo~8هaݙ5'^gfqH \"lY$wrw\ MjK#0"rB[%}eJB9W/8+厧޵O97tiOaֿwjo2RuTjtTH,h'N7:D1Gd &'f- .`༭փ-5p6ۃW$"|,iL,2m͕2NTmpvFVgӿp*H_',߽O#_Ljtu#LvTMmJi&X8h` 7#[x2X7Um$z|˝'#5s`U[3tFskX!C "Jj!ē`܋fQyRsq({NOm8\cW7 kE+$O!ݝEӠåEԠ*mŧghR"'Q>!6*e$Aw[K4< ߭Of\ k_ݭ5j@Xt'~;蕕֊྾f.MW %>aes/XmѪD("γBb`G&*jCF,ӱߐ'Wbd)Ch k|$l:CE#wY.J±ѱ*!c1HV~;^VZ}ՃpD+trwNGe,oBҸZXbM#U `]+EƲxD:?Ra=$FuC:22:MtE+ڼbVݹi/GC4}ĆGag*o x̴P1EJүԒ_9ȧLN3"q:j-3V_o-a'_x}0_EwKk$Zcѝ!ɖ RVDm2C"tmUdޭ9_-]+\eϮ: C I?Ɯ5 3vcz>WLH 8^!l}CSEUSY&fzLINeL6ʈ>S }ڇ5$SDC<,pL_(S#f?r~w Y#UB`M醩7JyJf;}45?%s'GIIS?s8qz{ɱp&wTϕnI9 %R @#gov Ń|]yO;xr"磇{9,[7{y_8q֎Țbzg߇٫]Oa0(ģ3e !U<lRlCUߣ(5RVJqRsyNiI;k J,|qiƏ6!,-O ]=ݜHE m1agL%_v$'{`Y8Ϙv|$X'erL7x"vnRRͺ^+q,66a +0 ͭK"*D97zA6  mwQLT ŬJ=ڕ7z/> OvM+idg@]gPcy9%:?9JG#9ES=\.${zoy\! c^9lQ&Wu]n1ڰl>AbےC:T[YBD-d*HiQ輜UxJ0$?Ϊ jr$1!LL&m5˲)BWpٯ0^UXf%=ӕ2R}ԗ 'eنxB\#o$`02I |A+mzN$o0W'$Ⱥ :A]6bw:߮Y0&6&BNQ&z{hr)tW}:K%'2V&jTfUk=3(HJeۇ/s Sw5pU:U}(,-c7OŽ%-v9g=2v + 77Tn[?OӆND ,0U3/sM!r/7itjIO)iZ Nb3L浐^$/ًr, tWr)W'RjHϒ>o"/--e#b|`RA_=O`Ԗ9a톖xዡmZt콁}QƐWYXn2bup!Zv|7k~Q׹zœ9s詉՝<:uaq{} {1lcA`60l4$~-;5XٻP✥0!]E \Ψst@#*I%!2'GRUֵ?0W|i_)`1v6Rl{kֶ50↶2ghx]ܣNd9/٣N&xyAfh? d ma~(khיr(s^  3sI:Lo±qٸbBoO]Vh1\>^T kw貝ղ>c-Ds@no(֋_4 u$jgUg̪bU-*r'}vDDttL]|CY̞v|C[:Vи<AhQ3S(oF-\bqo_V9fbK [| Jpw?0ꙞZqz\4d 3O^XNϫoJ(9B Hפc3ʠZ闹Ӭ)O8 ש#䲌ӆ~a¨_BP9e0Ma&{mRa4:E|S6 Rߏ ;x+/sϪ5)H YZ