libtss2-sys1-3.1.0-150400.3.3.1 >  A cFp9|Up[SxsWJw8{;P >d2-mp"|{9&'0l9}a` {8!h~>אuG=T&mJ*2h`/#4al{qȣ)F LxL1Q V -!pf79R>H3]8'4U_s}n]txOp@L?Ld " 9 %FS iz     $,6@hp   (8&9\&:&>Ip@IFIGIHIIIXIYI\I]I^JbJ&cJdKTeKYfK\lK^uKtvK|wL xL(yL0zL@LPLTLZLClibtss2-sys13.1.0150400.3.3.1TPM2 System API (SAPI)System API (SAPI) as described in the system level API and TPM command transmission interface specification. This API is a 1-to-1 mapping of the TPM2 commands documented in Part 3 of the TPM2 specification. Additionally there are asynchronous versions of each command. These asynchronous variants may be useful for integration into event-driven programming environments. Both the synchronous and asynchronous API are exposed through this library.cFPxinomavroSUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxppc64lecFGcFI048a75275e02593a5526fd5c4e7296bb1e4a8e1f350bb3902c1e91439f51a09blibtss2-sys.so.1.0.0rootrootrootroottpm2-0-tss-3.1.0-150400.3.3.1.src.rpmlibtss2-sys.so.1()(64bit)libtss2-sys1libtss2-sys1(ppc-64)@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libtss2-mu.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3cʂ@a@`#@``ٹ`@_t@_^M#@^4^*@^@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.comaplanas@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgmeissner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.comguillaume.gardet@opensuse.orgmardnh@gmx.demsuchanek@suse.comdimstar@opensuse.orgmardnh@gmx.dematthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large RC values passed to the TSS2 function could lead to memory overread or memory overread.- Version 3.1.0 includes: + cover update to 2.4.5 (jsc#SLE-17366) + cover update to 2.3.0 (jsc#SLE-9515) + fix policy session for TPM2_PolicyAuthValue (bsc#1160736) - Add version the configuration file tpm2-tss-fapi.conf- Remove conflicting sysusers.d file- Clean spec file - Add new library libtss2-tcti-pcap0 - Update to 3.1.0: * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455) * Fixed possible access outside the array in ifapi_calculate_tree * Added pcap TCTI * Added GlobalSign TPM Root CA certs to FAPI cert store * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59 * Added two new TPM commands TPM2_CC_CertifyX509, and TPM2_CC_ACT_SetTimeout- small services fixes and comments- update to 3.0.3: - changes in 3.0.3: * Fix Regression in Fapi_List * Fix memory leak in policy calculation - changes in 3.0.2: * FAPI: Fix setting of the system flag of NV objects * This will let NV object metadata be created system-wide always instead of * locally in the user. Existing metadata will remain in the user directory. * It can be moved to the corresponding systemstore manually if needed. * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix return codes of Fapi_List * FAPI: Fix memleak in policy execution * FAPI: Fix coverity NULL-pointer check * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check * Fix a memory leak in async keystore load.- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package. - improve the descriptions of new libraries (fapi1, cmd0, swtpm0) - adjust baselibs.conf to match new library versions and added libraries- Update to 3.0.1, changelog at: https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md - Update libtss2-sys0 to libtss2-sys1 - Add new libs: * libtss2-fapi1 * libtss2-tcti-cmd0 * libtss2-tcti-swtpm0- Update to version 2.3.3 * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu- Use system-users for tss user creation (boo#1162360).- BuildRequire pkgconfig(udev) instead of udev: allow OBS to shortcut through the -mini flavor.- update to upstream version 2.3.2: - changes since version 2.3.0: - Fix unit tests on S390 architectures - Fixed HMAC generation for policy sessions- update to upstream version 2.3.0: - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/sbin/ldconfig/sbin/ldconfigxinomavro 16744628003.1.0-150400.3.3.13.1.0-150400.3.3.1libtss2-sys.so.1libtss2-sys.so.1.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27517/SUSE_SLE-15-SP4_Update/7f28f4121b7b986905e9573aef867183-tpm2-0-tss.SUSE_SLE-15-SP4_Updatecpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c2adf33b6eebecb5cab4cc1d84929e91f98ae07, strippedPRRR'_BW'Wutf-8e39134485d544733dcc11fcdc8efc8ec2ba36b7bf43dcfc4fb23259ca25bc61c?7zXZ !t/ k] cr$x#Gj!aT$3keLBx̻gs#+v=(.gĵPv$PDW*zb>3>  Ox/* kTϔ3rt B\V[Uf@4 >MN%-h(2Mt:/aQcm9G7# Z+,p\6yUL.J8lCֵ|*c(u2+¼R?rZˎxC,_e^honט^K&A6z4T1Ft 2FzOMYH']c:;+EMS"v: b53IDehfZ/_?v|ÚxveM_Bc t5{ * ?C#Ӷ^!CCfOl@˖Rh] E{hQ*تp|+y^톩 /&Vk\Xu8mv#BCAc$#!Y~Pą@;3o-9?Uy`M;CqpKJ}97w?F~LDng. nD^ā)Z)loR`=% hw-KR_] k\Gv-: dUeyTI j3F 2V֦z$-4ĘK^kavc}?KRaS.y4않 `!.ql?yMqHdB l 1_sE.@*Qۣյf.{/aϗOÝ aBj {A(6=,>c "a|z:v1v+hϐ4AtoeH圍C:H֤r 38خ[5`]&xa'%C%վWDXpIXYk38J.ǃ`U(Rvmm!nqwϻksR;#ê*W(Zk.Kup-9׮I;RzҜWG^D"ԡc7ZΉO{0lAX8%î.|+0Hb,!H7߷']׸1Kz`54we N&[.$ʕI3FZ84FTq׳[.HܲGqu {V(2xC62G|fJfR8FS ~<Vs DIqV(LY&Z:3M=QNJ n 'RmqMMX#__"⣙~P<+La~]& ?m !;9. (_6ׅl'L#Tluk^dxr<"41<'{ W?'vDMODxBtuǂӢzb]ic.hcj('{r3;aK3?19l8Y\qH/Ƣ,Fh$W>q8(||rkY WU)V7pj2 QB/XʛoRo;tj,Cf*=O@ߟ[nk1R50:BAW^;zU=H12D㝄rRC_eN)k>x$!mQmX4:$H0wJ?nM H\)g qMam\00o.[wۄ]B%%׵?rP[s I6&8W&8RAUa7,wi(2Rt݁%gA'?ɖI8.]W֣aI_WGWe{j%KeQ`._9PX)~ [ǩ_8%ZDH'4Ck-}Zb`qPspF)8v"'oŔ\rjt/D}= o 궁ŲbFLٳqƭ?\.#|,^~"F +&̳i@`IU~˛roˑY7O%~t^^wLAHX68}O'r4|QX{Q򐏨m-XK#%r'zE֚ N쨞݂v~^;N5(0U"~0X?b${- >F;#k ;3 xXM&>Jy&בdS/ -tovTvE4Dadry<[oe,|.Kmr#Z0XG\ *<W>CzԏSD> ij ֻσ8kЇw /xf 5\xz{q>*MOlT[a~0QlPaTH3?~:ҕ!%xh~mYw!qR&D>,4]ʑ<^}0cf3bcL)hثͻѫ& ߛ'2&LS!C̋T?907 }RZ`9@ȹ'A H>5+K$^[E^MM}goGFf x4]rϵ'֟?yx'e"e&cҔw&BRL,9C}sS!mha-*$^xͅw!V/j>MΛr"a}Iُpw桧$ YcʱhTRYƟN HoCm3׸rPY1#kdVe33BN !BJCBD=Տ_WJ7 tQ7 /EuR8\qbaϞ 7@@Qmܚ^%\ݣw"u/!Ļ|)DÃ?$rҢ1~z2S-k;]P*12iU Vbg [ ,zOptWNښ{u~:]YF0KdeV\],3n$ q?a,"l;>sYB HC+T?Dl{ަ`uq=2&b2] , Wh8r2Y!P뭪[F^9n7V)(\j!Cpj\<]IWyN+9XӁ?$ i>!%X7ֺb^s5i+7FďqɈ02*w옝bL)x䩯UFuJ@#j E7Zvz87:YM_a P%'.9|GV6nvTO`l>D uE⏧L3!7Կ7VI7/Qz3L%C7(\-8óK7}p+%VKC&ۼ\r ttuuo!0Y@e^v ɜT$ mC|u q㈲)Y2*˦,TyJgmj2(qXjqdL|X?ãÔ! MOi͢aٚ'^]FX糙W`ѿ(ôԈ 'W3w`ڴrGҮ <|ܧGCi-; vSU~@DbguW Y4dJ٥4N#qܹy[AmD%t:J?toG"7yX`fe? ! OqsZKV};?#>W:#ros߭[QοHħ'8YD&q6dLPTGJJ{`| ΰπJny 'Ƒ Re4` :FZcX`g8yk:S9HH;ACyW_dn*kfhs۶r|\淏B:sR5}2qdoM˥4:trI n5 IMY}W%|nW7Q~R $JWx^vyVV%_5~5PiY2cEUkdqtmP f2c98`Nz՛̀85`5$ҼS@/e]~Ep%UUnRWҟc;('8j׻Ek5zv{)Qf.|:PHO:vNa$8Ȗo]? Wr}E2h2T"S,|Dj-,˖שU5- tk:MRn Ԃ\xGq(V9OJSQE-;Ji>WHLUKm3-cvAH,u4EY/b8ۉǕspsK1i~vG Ur1lVnhߧ&@Y߷6+a >h^?_mx vc`;!Փ,s1zIiSgpo<>PGw =O̧Z4+@Gtrz I0,( ϳd?Q¦M3 98k.x^JAnF>Ki"J(=Dڻ>|IQ_}ܺ]h8 Y mozrr#ȹ&A #ē3:ȏ<^[}Vrm5!xEm@S1]'~ kH㊧s$ӝ~#9SbTHվ,u$04߮V~p'D!/){c[87HfW,co M.W D`<x@#1º}5ݹP )$kd r/Rz.;vFeɖag!sdv/? B;i.%dAUK@&p$Bl&1UPrR'6Ӗޯ%j:_9Vɤ"͚ wB[fc$پ-5o:3/:GJCnڀڴSb_{6>l9þL^]pb|X~hW/whIB%s @ C:~MN~ /rD:K9:G`w&DC~HyJ8h/x"[ۿ $Qe>Ǒڀ67B|nɎ ɉǢFp<$Iƪѣ7Z;EL)&%Q2rwavGR{P1\'L"47pyV=هHjy/sw֍:Hr"b9J&Uuf7gH)>Z#ڈ%\u4t%!SW< M/5Ive.I &EkA"$P9o4m4-f1pG9 ڭqL a ]k%gUɚnf1:H%pxaN'hjl",LtmǤ 헳X9= 'vZەwy}Bu?!sn+`ZLMH׊4{B-y,I-e94eb[ɜWNj%?Ϻyn7en PhU{u{DNӟ׫S M|ˢIJ6=`6\tF/'%C7DV[?E"#iͦ.;'xhn&(G(Fx:ORG{ɿ˯G]IUGV rA~Upo1QTd\>x@;mN7O< 8FfM}dyxc8KOH*%2sQ;CzlF'vwM([l94to5+[̔%s͇w?+񹤚i8 s]WSR0˼(X?_4$͋ [wƍU(n2T:·@'~3)L8wGHhQCKuD ~~ vA2ҺHl3Ǯݺ-i}uC ;Q0qF 0*(K >ֱ=(!2DQ\:8S}g6XH6)%&XE\t'6d") g.`DIsI-Q'U3D6=R:9/(T[i^} cG\ p#O-"C%2:=J2,p 1/]j _elUbzwIꜱ>?Ōw7F׳.z`@8&Tvz]6#U]G xT%aA>ט;h[dΎaրLtFt'oA'2+kCS5 bU rho,vA㬩ә?fuZ7zG텇t⌐NSѨ*Y 3)Gi=)K)o!|mްḆYM(4rc s`_@S/~V<1tbK^(29 j-xfLUAa;$f簣}4[C0mlAJ.k&?Sy;ƭ]CZPQXQ˲S4>CdQ3'fx{UW'F_y!v;&k:3MP3~B|i eR#~Y0G:Sr1fM Њ SE}p1($*#K֋RoPfRs\\~ڄJNoף L$,a‹b0ݻ뽏kL'5GΉ?T:x8W+0vM2`%-i ﳋ_#JT%噺,d x`/2"MP[c땎4).TS8 Vӯ5)pFp<ԀrLʹ,GT6:ND?uF'G|Fejl6o%t<IJfΚ,|~UijM,Vla]i5fcY#$$33S[9q|\jl}MqޞlQ|e/X&wd' Nmn* ^)őpbKo2N?` ̐VL@oGh~"%}qQF_QEA=\l~T D9Bh)E,:h@ yP y-,+ / EpțJA+@g?Mg@96@(V:+A:`~6u8)j$祈PT= Ǒ 4"bGbYЅv%y!Eo^*1i/~ x|Y_ )GhFKQƺU?>1s-2-U#"ɂ ں8뼨PPf5sb7Oi?JZv,20mjxkMGBrk_=p.84e|R-!5I-2VRCwM)h_qF 1c&3#R`#elIj6#Mm D @’k+F$.+뤀`{Edt9Iu߭R8 x^Iht CUd33=9FJnaxy2#?7c 6ӖB(f2@ Ёl=M>A D{cSӶ^*NBg3o>c~:9OX/#hHk;7˲*f ~)*:0&gւC! 2ENf6ăkZ2̯,k4m= ^†TW 7-|N "1HEqI.[C=Hmᔙv>Q|"u{$ a*Fb_\c-u_Rt{y y xZc7̓X}W(I6!LRZfE(6 iD4:dE9L>h_gsq&n@VtD2p` ;1dy!iiaMXأUg`|{ )d I̔5*ogԏ?CWwFTzl_G$F'rELwʬ+Cck(no\L hb`*gЃ[櫽EؽsO~)w1.(,i73ؽ"RĹ^~àh4]niQB>d0 Hu˜Oy)YH['>͞4&)Zj3}W "IHCFٮM{Ro0%dzIRcrm㋆ԾcN /G7=FwLW$m2γdղHFRT/gh6os_,t,!`]87wRB9oV2sםJelqdA )Qom+F9k3)0_gx xRjY^]ɲx03;gOgkO W'V ,KIn :%w p2bhgx -NH-X"*(b2ZL4pUռ8ŒRr3e!')<{f6 ĊRFv"x0m^Yl^,*O f5$鵂WU-0|{ҸvDvH 7ҩ%E`fũN%.(8ʝk[ݸn [JMrV ;7N$IgۊcҥWeb@ct{m(\FXkMo?. .v=L* Amt+4huRٜ<Ҽ_w8zLk#ЮAO~ q$C:!c-}gܞ!NX枭lYjSYTa WG$Ak䬹VTnnGf׾_=$wˠO$6(g.}FNQ> g7wƾ U&ma#2>#yuL/hs$Х2Zf꘴'ł$ L$Uں,k(NClXY xZ3fNJd忍Wf2S~uͷnXK+8'R[Y[|3f@|ٜ!.@ CY׹ʝ!qٲbAL4HlP"qXvmSn*9&-.g`.- @oXA(fߌgWO'Vu?h2I=؀=oH_ÚKf IE)MP^jcU&d!%D]Trs1Bs^UENJ"  Ƨ_/ 2A5-]gL%d'ZZ'3]*a/%C%MY&ɥYDdd)"<`te7 Mڏ3b@*`IRa!lOcS3Z^oZz=X%n||X5w^P3]= 1jFI@nZb#{j54fd 1iZ3,4 !d Pbp AuЪ)g.7쟛sՈL&G)S +(9'kx[~B%dF"-QҿQڪ*UTXeWt͞l *&B4fP% t6cYmy.{q$Lb`p9Fo|㩒CǺ0?-1˘CV[,d*PJniawviƞRz]k%/(A[P4GSRG!br4`T`.+SWB: +-m\[R45:XQ:/wwupm]idV(HF&* v]޷ m]^+ύ{(=J㨼f6ate>h4$d:=ic&@8hvu=mXwWlR*ѐcm3iF#u#0q!`c ZF2v5bx@HȺa@6"K}۷4ƺRؗ`t<fȘ Hۉ ~:λuOy ½R(_ `J.E7ѕh}@ t-!s֟W#b7dFƥ:}?z^?Xi e R jO%wWn=r/(*?Ij=&)La\ZH؀ff wV\k__FQ! YPßM~ޣ|E1<UN'X](3/A͸F%&b8c z=-0&y4-2cH˩ 2ލ ^'~kۑon8էO5:LِTv5#\4|ڢPQg'CCs"!f89xbԳjc'+|^݅mx<ÛC)X:[p] d֭Pʘ236Fla%3sEdZ.7h_<܁OuT\C4hnsHrl_mYݾ[B*B6!Wsn™W>7*G_|x^fc+`^)2|-ֳb߳ePl{V&gw%:1b`g]dVIal->e+8r6Fm7 > (=4=kXJF2Ɗ֒3V}_|t/Df3`"Irqؙ|>AJ yO+~,lh"JabvwF-Ilg0FD ݓן9F>R${p(9ŗWΟZqEqfN0>iX2(X4X{MF먼E@ !"W.`dw8+@!5bPUt} |Y7%n@MhESV&7WWAq{lU<â`qzۥon!dƼoЪ]f)f@ ^q[p=sjU ZM!8?~}7dӭWh"eJXEU#I5berLqh'kZ(9hnMc>zB{o ΢Y^8go}$WdSB{@3mI[|ᰪ9{.їaR$;!JL;&˗L>g/5ٽ:/;vI:@Y}:1I~ɨ@w:ŶSŋsYh4!=&Dj1"s(*4"(cUtD]p薀˙$\d8/ NǪ$"2GJ1߯.x!Cvw|m'⾎lh|xC=R*6\S*:w+t9U؀Lg*]ۄ՜.DI ${!V85JKjo0MPqf)[;_cjX@UIc'ܱP^?$AuӑEhC uIMV1@-|>i#U1U\\rd_)#JvgS^|W0Oy^7)ÃW5M%ëVaű%(ƀdgnPB`A;YhGrGKN˧q՚M g#:NMEK~kܯ?5 R^yLr E ]KrK'y?m"})}#1$#WU($\| ZR"UNFQl+} 61*M"!G˷%«88[~j'T W]W2XxζLk.c 8J^h>jfw~ږ@ T=}ga>ԌeB9q'1On Nz\IeAhWdVWEZY#Udx(oy/B *.S*PZ YY ѭDmJ~~/=R .Uͭ3L@ܸɘ(\oi8 9x߸f- +[[x;N37Euc8w-{Sɴ;̫Tq=c`~eJ^Q82藫B d4.g:N~3J&y0("4󝢸G*LQ=coh4[Tp l A= >/@9K!W`Qi4rH YV2Ai)ԛ ^86l]O@<рj$d2qVLVTif&n{VP*nvo0/HS-9>jiUsQ/nѪ`*] _}=e9 2Mt=1l6\c.օ8="MƢ Lt=\Kw*Y Jf]sv,WެY`l2谁Hۣ*C]tD߾qjٽ?Q]WĘYxy$rGMiTm 2e8;yOSr0W2_aHrXy W#EupѶ&ob-鎉Ks[d}~oV2ŹHZ_`5!$θt/0R@9KZ_i g]PE;s5 [lCգ"]XRv>COrCe0'Sqd|gfA/e _>&II_iz:NЋMjKF)Uà ^ERcҎǧ؅R"{po{Ӌ؆l= &oGEc,JvmϾ_E$ZOMA4EM:B烙dBF&̲ > RIWXh\`2'˕Vh \I$% <`ٛsT%Ϟh%f4aD;jC*hwwL(U v^ x7XwgNpĪD0tybֹ\ၣs]tF \o%@d$_h\U Yݜy-Ta2f}XFJ Kp4`EjM5_|>x,7mAcZ`)-OYsXn<@FGMMiг{-f;UՓbU2n+VNyJ*j^Lku݉oآMf K7;jd=7*"zE\ҰGAQ(*i{2Ubec{|}Ɲ"c0_3p} Oe!wr(7K`'jՋcPVy].5y Z~߃%U72Q$}xզkR#BD r+۪=^6R0oFg@mD,'WxLns,BuRVMD!t pmrƉ+agbwC:F]a~;ʋIvG娪xL %'''sx լ 0d`ԓ ]gjʪndhu=R7SYhmst=ݺm[t,#QЬoWF3-[?HܻL^-;CH(5[:f, y ʑ¸F*bk*=yM ;߸` +?swTڕAF+kpeg`٘kdB`>ppsT;j5ws*?WNy\B yhy BdWpӖaEs>D%>9,XW z*C448s&OB!.]d!qU73;z2;C/El) F_"mn vKytu!M<[m>r&=F$WsD#Z$LU^ TR[{H=כ(`Gݎ FG m3SwNk9\b4S]2aщ7NlM0w]6rSNXHSc3+[-8H -A"OWpIZl҈I \p%|~ |]i_ȹr)"[>u.u%ŅcP9H8Ɗ!M!$`ՑC 3gX7 +>K/1ZADϻKF?ObAc2f Ӓȳ3A#wq> ]3-uBkjA dV~\Ru&{6W-!_0u?׺${ ׺٤ejcn)OA1B:&] >a9NŮRd~㉼a tbL=`]_XcN~|,ll,{1rO 8tM)7⮼ni_P~͔c7,0ѱ1B#g^PR慆!Q\+eS% cZ/w+Fef+E)͘uK\$ZV*"{({D1S'jǎA!Rǥ?b&=+}պZ$-;PnV&%C<?Miˎ»>*{Mø{% e(Z:+f\h z-L~P5gZ.Nܡ^ ?jê"O=@;uFEqJQP,pT]iX5݈8_:e]n/c*[Pvfq>X@D7K7ipi͗xj ʽ%|<}Nadq㩱tbgg^plvi }$erq5?# %([P1:YRf{hP+~i;Qpb8Zz.p{U'!>뚢ߒh?$%qծǥ賙6qb2PP{o qu򃒤[Z6`&Vv>?-\Ո|a `;̓Ewyњ| qמJ_PyYH'{q1G̖>BY>ͩz֔hBSu,d7;e9!eJ>.X80QHC7ݗX`i>X';-UrE𓎦M(Wr tkz֪]bcAi%;^X `K롌x,+R L,/oG'k sNb "K_}ejwmgg jIY<i_vG Hni|p_ Vr+Efm:8C $'PcUsJmrrdiX#Lx;uQG$4 4VR]Lܖk6fμPRMq aLTj_ /#m.t%ԫV drW։Ha%69 hq&1c_Vcxi([b j@'\߳T ]b 'ѮM^GT'8Lycv13l4We'L"Jo\ogL2,>2%=BwM YcD"Tb.!kFTz,=ӳ0 &ڒt9΀ғدWGž;ז re,8u}H58g]| 6{NK<f]Fc3 imqDng6w'\t96BQ*%2g5w0N 1QIh$[u4DkBI`TO*\ڟNCQMQ,c]@*?oY&TH6%##-2([1GYH= ձԀde1<rr)aa|`]οAwA"̺,4u6$E64!B#'c!aral (mbkp16 xoyOѾЧ}m7$QfIݿR=\Q,d`T8hyΈ|eb uؐ{,޹ @}X e^ xei&ia-KU^[:g?C ףɍj Ntʅ*ck I/rҡ(Js2`*)tyQi"6UiH *qRZz奥mb<7KCUi:jU,q?֑ĀxU+r/aRbQ#s~ol~@or0%;Al@9f  "&٤Gp[boY)MB(X| [?iJ sպ$\HWfqldHR.^*zFMFq RWc~L!~ŀgז c \Z}oCkS'`> Gέ' ư_CXU' #L͂}e3utbgK0 7uKa_w]!\qb+M8[oWJY }R>H,=8:?2(Ղh=]QX?I9wW|sL~!Yyp1G>6 }xMoMFICW{`\QA V^g̵VJIխNҊ;.S[11? \:ӵYjL@y¢:E#B!U`$ 5APW&*m!r bxj4h͆]!Iem ;M8ZX*[Sԁ)hEJ_vWf?H$D6!h6`68k srτGoMI5aOIDg yA5#'Jq(> m>G ="B4&+ۡ+J&d 2=9`үyz2A7nT/$&S#E27YB~plS߁ξp`֠gMU ;ݽڏEۧS/T#z .ަh@Jx6.$#, 9x(M1Oefg̿~ A1/z=;AM ^ XkuZ@ED|tI{, L3R+V$!> 0,d.dU*+ꬖYffv058eӯU&&EP6W\۪Cƀh*2$4`*5/hz'D|# )1 \`rחզO*-T-v,'Wrh3nJ[[5'zGve۵TT2d::x3TqP(kJ$6w07ʒj̯xHn9T0Nj HrKW3Њ?oԊdWOBa|8_z9QЉLW%M9$e!^מgŋC(`a=#Eoi.ۨU||w"Z , Tn<´u8r%t?X?@3<)ʝaH\Ǒeev .nS&i$4A9@/YeIB1HIaZ_EQ o5M`,XP/肝"̩2cŮc4*e i.A-[tatayi!KQmtPnD~CocyY%$@n %ՋљܻEWK?b;8M5p\z!r]T8t)fK7S`[ զDե :B 'Myx}砿ḁgi2 +~|QEyywocB w H:n.onvjGbPj;\'seIN$ W9ϡڱonXjgRIw0b; I  r.F<.Fɫ]J2a,n{+ʰ"IBW0b4Vf堂1!6V!.z5d]d>v7T F@dU l䋈% ir EcRYsބE|.ؑ[<w]}`7kz+إ@>S*ld=UIri־1RS]{_ *~}9sK"#Ex3 b!Xm U"߾ny eߏSD09HӫUm@'EV8MO]Rezh5Y J" tB~h.b2?>")dqiާD]-S Nñ60Lgg9-qJahtH́@Ҙ,_8'ULRg V~+`a~ZMpH^]a 5@x:M@[PUE[g_uX@}GExg"JZGLXر]9}?wB{h]7},b:u5ݖTOE}`Z;! }jʂv#,Һ!ܠ,>m=cTƃ#ni;o#7^6C])&ƢӠ;VRx!?Lz|"`4(ƙvdg{L\ߎLN _ӥ(4ؔIM g)]hIߠnȈI%S@:m.L0قLKwdhMd% tW_?6*Q2iBggs6xcB\!pe@To+]w<톞_wʮrSOn 24NSfFSENRb#N2)1 }Djb0k %ŧkplA$ZM ZZĺVV)JD =Z}&߲jHg (>B/nSJDyhWRJ#6=nx(Qs`&TE"cD\7JB>8%T*pFDn!Ki)o=p1Ur6O@NtP;M.1-1Q&whgV跪ʌf[AL _eH!鱛gY\ɤW=.9'P?9y6N/Ji" XT-^xaŃ mdB,3Y1Ll(yQ& DQwA݈\U'wwNcn5|-F'ڸsăbԿ} 1 dowd9ɡ[9 Hufa 1]g[%Mёs3x$%S^R_EPGa^u|i--z+2o|61zo+uP4̢۫"HЙzB:^8, 2kzxJ;o-BFbX$o.0zTIub@nPѶNf@keכvcˆceL"Tosqi2-b+[([A}/͡&-owY$(ywC@O;0Pmͨh *% 3 8556ᬠ-mOݘtz,zL$v} D[0gDgA_By[wpʒOPqNL9Ij24v ^ 2fJ3GID|)#g!s9L10|Ml! 7}>:ɽL_5pVqJGff,RM>a61VcyF_bi@edi *`+9LM4loL{S >|FQVm[Ҿi&)Tz<~u2qfKan xє(6DϤknv=(@He W:Wѱ dW%ƹw"ߗ[o,m7 UgTǿ'q$ULcQQypd&E]K5(pWe,3f_'7A!R*ޝE֫߿)^U3N%_oUYq`eUr#% }q9m< ߁yk (EFMd7Q*bbݕT Mܘ&â;9Eŀä.$穠n Wg3"mp }J~pvGI ?C"C 57>ޖ@oP5;} %Z1 оNX 6ӧx BcNH[uLSL^w |v/Ů*,H B Mb^Kiź%EFlQr9R}|tR:i1R\S(٫J=y Sn΀d|Yԃk?iԪ =[ze_Ť0:\i[KٰF8B;ή`LZN|@ݴ7g۟j>=qeՠat+,]io;ϰ8Q>}P!#O-hOq:^kZ7U~(oR&y7Ț TfILޣvzwA sG ]PNΔ&U!2}{76h@S#;'e){ڷ4%R8QҟIrFDcaI'S2oBty8䔨x9(n3xkL'zdBo//oC9:]9<Ђ'Ũg'j>}g&Fo5ڴвC*j5@7%:rd:>EԚZm6UKAb N,:[ H,~R R \ 2mq3gleCKf7E<(T~uyP;BIxn lq=w|-YC:VZdT$n)̰?Am d 5/!m`nF^%,*Vd)d&ᐃ Y* 6оgx269oARܕU 5(I쵕mw¹%^bNX·7 w Nļ*fRB ْVi-=,QB;/:.) F 5XLOD-4ݫҨ*7>X:¨sk&t_qpT@1CD"6 a]/38[ ZR*̋n ЈfnX-8@Z*G@s߅!Rq;^+@z:glo"ҕw]vXpiWx>c%%vPn_J~Wd,uy= є=H\HۉHKs22M>MጞEzApl1̄ 5q%=Ia~6NZQP6kIe2o[3e[ZN]܆HT)TD:"2=?E? P:瓈 f{DA'SpHDWDn,(.s(WX aA]_,#oW(tGCqy]}:"k}|rbӅ-!J0'#mXnj5Z%o*I!{$/k6 أ5kE~& '7+kǓL)&PWMpH@4TU':&N*;`F@74t*)ɅغJ#2ҕi6Z+Lj1t<ԁ dז+9L6U5=@ 2_1KD66}S ^v`Qs€Z+QѼdj0&>t_ZS=V`Y Q;2vlLO@-2yF*ɠ|0j|3\Ǒ֘o~lC6+u|j`៸DKW6H|o2vŪw6qQP ~,Th5\)!QÔJO8Ƴ%CܔI#tfPl$37)v_car~,Pq <.<!ϯVևSn?͙`.ěMK ޝg85p(Cs nA^>]-UyCMl.WFL/-뙙-^16EB;fsq~4̇rj7 xgVwM9+"A`GKG $ZZdqMS:(4;:.߶ɹ=ҧj#cxze1֏W?ї'cwϿ[ y oᝁ PsKeo5c"su4r?oߒ} u]wBRiP_-I y8}kDd mޛN=-D='igmi_R2BV~aĭݑjY PqH_ay=CӔ3E9>3(;@< ;%a!^=x,9*N "B7#(Q^vNh鳵 Ւ}ҙEQa5lC;殣[Db{OUo!w8$8S MK7_@^p*:JUM2?jm) iV=Sq=vh ` 5LڣI cho"w3Bj{NTڎ<ӽ*kʊ T9-~J剉ҙa7ptXy}QB~l۱FT?mI5<@銫?]OaCdk7LMm|Q̗ 2x;Bg{0$3M@֮ hs$U.0E\.PI{fB)TKGf/CyC\(=:װIW'WAV)k^"q&{aP맕a\$Kl9@/oI/#aw=Wo߅0yPW:Z[zoX0:kVBN"1B08ʡJ)njTg0㛜Ё]}ұ!9*nkL{(ԙ yֶ YZ