libimaevm3-1.4-150400.1.5 >  A bvjp9|8T]_T?67D(Sw!ҡ5>񛼰0GŴ?U<5L1e\53gٙel&%)"#)|i*cd<XȈ*IY^At+FoJKKQ1T ![4—[2ߐ~tv4gDIζ|'E|laOd=-b>3δ;e8˥IQyIa(GȨn:j*RSIWX  p3a68a8429d936dd41e806d1982e6db8cacc866f655d69e5731481c119d1fb68296e7bc1b452dea3ab7b484b147810d5d3fbdf41bbvjp9|ȾS V:N\[+92G{a {p Ij BR?F@x/dY%йʢD+@cc:T!߽yP:kw}/ꤔ>DHşrb:cU^m_Z('-3m`%uڵ%gL %VxLNXEދ? `#6|X(ꫀyO Im4whw {g53 X.2",3)d>*%UG/ޭ (>p@-?-d   ; *;flt     8X( \  (89(:>)@)F)G)H)I*X*Y*$\*D]*d^*b+6c+d,>e,Cf,Fl,Hu,\v,|w-$x-Dy-dz-----Clibimaevm31.4150400.1.5IMA/EVM control utility libaryThis package provides the shared library for IMA/EVM (Integrity Measurement Architecture/Extended Verification Module).bvMs390zl33SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttp://sourceforge.net/projects/linux-ima/linuxs390xz99FA큤A큤bv>bv>bvMaaabvMacd9356878ee06b2087f9bf491f43613ced7aa23e2c789adce912e594244c557744bdbb321292e8c0e2984d17c9564adfb497800e41851b9d2ae20b14c01f6b8c4979bbf94c12bba64c293a759390e909c9bfa63103c4a1e9acce085efb6e30a72688f38076022649f68b81ce52ce35abe486091f869e8aa342d2f5cb355a050a8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643libimaevm.so.3.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootima-evm-utils-1.4-150400.1.5.src.rpmlibimaevm.so.3()(64bit)libimaevm3libimaevm3(s390-64)@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.4 * Elliptic curve support and tests * PKCS11 support and tests * Ability to manually specify the keyid included in the IMA xattr * Improve IMA measurement list per TPM bank verification * Linking with IBM TSS * Set default hash algorithm in package configuration * (Minimal) support and test EVM portable signatures * CI testing: * Refresh and include new distros * Podman support * GitHub Actions * Limit "sudo" usage * Misc bug fixes and code cleanup * Fix static analysis bug reports, memory leaks * Remove experimental code that was never upstreamed in the kernel * Use unsigned variable, remove unused variables, etc - Upstream bumped soname to 3.0.0- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xsl/sbin/ldconfig/sbin/ldconfigs390zl33 16519632131.4-150400.1.51.4-150400.1.5libimaevm.so.3libimaevm.so.3.0.0libimaevm3AUTHORSNEWSREADMElibimaevm3COPYING/usr/lib64//usr/share/doc/packages//usr/share/doc/packages/libimaevm3//usr/share/licenses//usr/share/licenses/libimaevm3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/e4274af5541b1fc937ac62b987e371a5-ima-evm-utilscpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=374a9e3408ef6d258880ed1b578896c4fb9a2437, strippeddirectoryASCII textPRRRRRRRU*Ԅhvutf-8290b1778231ec5d7e6ac4349c642ab4cd6fb76d07fbc7dedd264b2baea02da23?7zXZ !t/ 'W?] cr$x#FL vM+}.@6JGL ʾ;J&(Z}!0 \f+I{oCHy9qU \ۺ{$Y{ݷv9 }|`P(纆AL=Ԃ,iȶ06`J_ANS&&}r6H<\lnh - IOW-;`HXgEj>_|p"8¥ZE~Ӑ<\+sv7i)Z&wp^]Lt1h߾. p챴x,p/2]iB`6>.p'a8e"v4a:f$RpuD LI^iEPsHv7 { umGK—Ĵ3uChqddNbqr '5a2娭Vqɴ' V:ǨG,Jk|}0pa v=s;Ea"z9; V,B@\z! `e84^)px;t<նbB\ x=@dZ+4oEA 'դ V ƙ A"\o},y\x^sDJgAEM yo7b4%2z2 Xn.dVa6# i Yd)ܗI<ZHG'>+JD\7Gejz/|J(N\KR?olJ~N%2t(3[§$dȷj)33p#=/7s4L (ƕF5cfvy257ԗ!;KׯVD4]^>kG4C3^ 9?6=k%?ra脦A+yG}h^iԊ)K\gH]4=Ŀ\I4I6s{h\|@4RrvJHkw[ I_NR(ꬔS߄.(,ݶ#5 .<,}$8;YpXĖE =`cJ<wʥ4$5FRw4!࿓܍<+׼"<39OB%"?ZzݱD<_ T%wtQ RFn7H]t㼊/$An]PUBL[i^q_|̕įvdϛ\&TUa-nTz1fHYԒ`\̉ZmÕ4,F[nAs䒼~Y oz z=wJ2"}LGi9n\ʚkkR tnb FF]G5;6Gq1<}RhR<|TsDw$'iJSZ< ѦBA쁆U1*%u3P 2RZb#ؘaD34`KêA[Q-=>Vż2N3?w`Mh3/r,1N}pE#ѺunBK)?&h#Vq+>7l8*xyMp!~=4`nYc.+k~EX#HRI2$XbSX/:< v;]7Χ\5[cq;\/v Ca`Gnc/dIOsDFf}}ydRҳi|Bx'>4quS=(hc CÐ q l7o l 8H5B>4kE~*+_uD(3Mrюeov?Lkeݸ! {8Aj*oz?a2vMu73u!󏪲Kh#RW`p\.1躝jH.}="^yΘ=G Z,]F+0$R3 G"S]@wE% qLمP{sW?q_}@eFq"PtUpkȅv%IZ* 6zMgWGgz8*Q@aQoK+Z%;-͹~Z^D]x࿵dahG_Fp Zy)ΈULhU<1݆#k6,+4O5XlVδQhԺFJgjm~>_e;7Zy"S x1>;an?0*SP#v.<GT)9·ȗKZЮHUS! RǾ7nPTJp{)nG|U[|]Ck5_D8=M&zTA+?y cR9Y (z>7X۳`&{~iEXSUoAy"˟v Aq\i] L*Q:۫:@F6֯lPznJjۥӂeh֌QMenƉ[mQD&! T;54oI5z\;*8I`C0En6,O(0ɹceRd ?^2L^`/e{c– .ɀ?La~$\[ 9w*fo숑AW٦zɤXY&GBti_N۾Gѕuz/#l%X5Cr4?0.d; SߝU5“ U\ *5XK#I$75@Óq >ȬK5瓍$ؑ;vAR\5` sꞐt.Č *<"(.S{z[|wParq:MY|mR 1n]sM"҉!:+n@}:_? 3 7/W sPRۍl=gc45FA9,O'MtpjaR.c | ‚~Q X M`aL 3rA&Dv)4k?S "U\^Zm՛:Uiy飏QMO`5X(m NƾMe8XA)hVHP$ ƷHÙeVn̲ :e^k _x2N2pTݚm(h:Xɘ( _Twq4ݦm9gTш':PP =aܞk+ VkB~h.{֤F_Q2('vT{6C*=$' d$!BPHf?)p~~X`~-3bju"'ߐ^&vP4HFHOc8NtKCCd z,k+X*Ar 풷{Jg EGm {zb;l(^%_djX? g2}WByuT]D)ޜcY=KB[ !&;Qdqx6ެVJV`w8dx 8o- -3.vKѣaWۂ s"my37K͂tU"dcX."ȣkwH(V?OrT7x{ZARL%A;i%IVH I֎:`ד,LI>awR !C'<&oDҊQ>N1%%%8+<[N'l/="xETI@<1+wEAgin^ E͊/MD30>s49A8EsZ>M ylW?*tPeU͝E=.)p^|ћH;i! HDî KE߻ľR|XQ{Q-C<xNBFD 'DPkP'Ro]%j<X뾂^+m9G$4 5vƴK]>bM5TB7{= (0HSJ|ݑ+f۩$I?u*F'kfZ Zk1XnaSֵCGT˧r1 %g<`7ɳT%c#b%7 ?k><ˋGx  ԛ@wEYDMh?Ua4B[PI^ {`&:6wFO(͞y&]4HD.vܒ꒕v|.aӬO?߹c\6^a fyœs.*nPzf{Vj佃jⅠZJוJȿoP~ADam;֓CsfMvP' Eс;#^Eqi0XJuKFYGEed!h鵷@(4  8{t7k8^GgXT_+~ksOU#>XG/+W{![>ΐ'˴LFz0DS4CwJ{!+F]2yN eآ2w10d+ 9\!}ꀏqlt&l BaѣA4z #o-cg_g,4$n,m#Ae1u'eK:W۶Ii} wKkZn>0N^fxC-9H6*VKd_(#;Do]\ ަ 9p_a*?~e&63oiۡؠЎ4MMŴ'ٶ h楼߅[P殮Vm wl .J6IutoW3U̐dՖT(lJ#1Ŝ ϦUCYCɇ3%-ypMG^t[L謚+xĀlrz'OmbN[NԲ|DO= s}yѧ(NWr*Qδ[0@#C͟'ڋW$]Ka7o6f&|N3*3L&tݯI{%=p;5i,@T5"]?lGȼԹVw<8e9ܖS.=BT]Zzl1`3_:N$"2`*KI+}@RߌujV[X2&"zA nx&y!ߵg#y8ф ܾdB vh bdT a51M*#o>e {谬q:,uV5.W7B7NVEW/ ܛ}XFEJ#K%@f0b+e`nKdy=b;|lVmj +Z+ 4E>+[!L2Eڇ߻["Af̑E߭D3# 0lݑ쿶׭jkţ?ݺu+I'Rr91C`䤩ICY[$Jd8ueڳѹA횓J>Ln3tsցsKyH+_;aXa@"UYSEzdl H>S[#9<𺗣/j<7n!f+$ķ 6o?{/!(6M\ CClLiT~bOt UhvW:h]Qb,_:kWxaWbDXp9$V_ njKQ !(˂ZfhuH<u3Ѓ&FF'k˩wnzs֣OsNʁFa5mAHb'EUgp2}]w%Gypu#< QC4+-TP?$"@4RATIJ+ětL@wTrn2}Drv<@St^v(\$iچN3*T)^΂^.t઱!`i#S\.wc#_R4 ӵ53ON˥UR+w&X$"^,.^-R(g?e2+,* XޭǑ-` 7|4&^JUFcG@mwի^fVa^kۗK:[Cl 9 I9S#:wi*RDP4|1F) r1\82$ "`0l屸7p/dn:{)XUi&MN"O{?k4Iq:H̽ŭw 7]XA"T'y`4P̝_~& $<32ݬ]Rh(B?7V#Fs1- $0B?n(@(ϡ9b|Y@iogܦj̳ |S\~lE⿃3%d'' c!d2%xڕ[ <\yYccfUF[0VOR&0!{x2=Hwb E7r 9$5" TӶIy w:,1L~HNe!+ywD02s^uqYPП '%t$~P߁ud>bVU)8Dł$7RG #WTHE17=,ٰ 0>T6<[9F;ܙV`JSVN}a4Z㭞hM[LzhzJ$6s4Ba<ԌGN^ܡp5UBǂd&>A#2Ix^㐴Dz-Hu)d{ic0<#DaF'MgR8Ba.Of|֐Z7oSD#uȦ!ͺOÌS娂 6[i 1̬[w`>{ %IEzbT:&-[0IDԭ 3yIbxW 9"Q4^|ScN9 J`VA4U{wI5ClD|EV]luy5E2d˹ HfV?S|VuJ^-x5M#r'g*_ +5Eϵ$o0U{0鵋\ˋ$ڐ~aۼ!.B:ʔ߼#Pׇ-8kH}MJ̪"9/󘠯tmǞ%+(^hɓa8,!tL=JQ[hT𩼁 Dw3 B[V~A۾?}G3XέꉶCde`?T]nrzCg'WIG 5ϗ y56I]I:V@ Kcw2%G_D;+aFV|nR>u+V! i6[1gf2 iDXI3F5].4UV~ǐy_-_}Җ1Egܽl.&+; xҗ4&2@jqZ:^ ~mez ~IC G z`ρspo0Ӡhbf;AR7,«L].J&2,&6uBoo;JZTOSEFkYù~3Hʑb1(!\H( `/ŖE^2RBb _6(Uf#9]io=h[R!^^-,ۇwZ~2/phi%=wz4yZI?y`%cfaY\#cGQ@tWTU0J;E#Wa<L<e6 t5J.k3f+PlͼH[7L#GՓJ!Я3wL$ xX<(81=5ߒ-ȓ1t`35UmP[-} ~ؓ2!k:jF8;L01M~S&9wxejI0vh IrIЧ|eȾy稀g2ib7 RVN) xF`@8KR 0CᙒjV[r{{[1<ͳ{Y#_#Suֶ(TwqXS>#p5tUԑ@s@of^ ⿍ځb: 'oj+!Xp 4:'~.{+͉oC eM~v6@)^HM7 ^c䞣#:d06H?tdN=Iw7iiaV26ޒsHuREן^,n/dܔp3PLBsL1(K SEQ9JpDWLO%kJx_Q"famָuI9X]IEB#0^1\e:f5`FZ;®=,}2~}0y DU%C 7 }zJ3l>@I]mai8JZNjKKȹ |Pw*֣߳is]ed2&#];-{f#R o^B/B|%Ĝ>:tKJ>7̖Szb3Xr+(%oQ~ 7{c=otsa:W:1~EAq!Czjj9tAlG4&w9(tK:& K5<j 9b-}=B;(؊I?qD* lԘPU{AxUvkb:|yYI/d8vD.W1a#Y4 V3]Ox}z茣 ]"ࠣp)L: '"ZTYG ѓU]y$ͮ5 I~6>&fGBf#=\'ĞzӗjeWTG![?LL)Q.z_I"uɦR`^2:gU}*lZ/%0GlfJ o1drBY"h`g)bp'KD?.dk)|񞙎o?+cJ=C]MuWąsҊ冓Rא }+b%KCf!^ku޼]"2|\㬥~DD8R m`DsC:0k謀UKfsU04߃y`_tFݞXRqeh{O 4 ܭܿͅk> }'r/N͜h.u Q0e.$lv~"JQ81Q&q%3w˱Rp1f| zSPl\ VB[3#Y/p[+۵T3 LP=D 7FBYnyZũ7Ekja1peovk/[)rIQ)SQU۸qXjmY-YIfQ>t|.3~Pg,zhEA_FK}PP{ 'PbҬ?u7DGj.% +#d;v'I bd8<"p]xuJ}A$s؎Sh^( 7;5rt`0?чc-,7ԯ$%ɱ(HLkƫ!x39:hNbH_"3v» ݛpoU9JOE6Lҩ3覹@(//T})fpޓa`+Ş1K-Ɇȑ6{9_ed7f rq;,~!oEWZD}#e@ /YLҮ)U/?b|J/Ɔ:ڋ|~#8yV$[-#jܳ _-Zc!SeцP)O%@ylFNքeb;ϡ!cJ0DK5(e}Ak*&Aš溁]AVBCbt>Gca}#tuWȣX= hj8 {g% HmIP~К.E3G]( e5y`w5;bbox<Yj^maou#7.r5? QԆB6,, ?[[(Vip#),P wPEH1|MuJbdžs;}(T5l@!.G-et{NxLس&x^§#q\G{R]vu"(21L@w|fDwy3hlX~_ETۉ'sUF~iɱRj:Gw.Ӈ>rbal1ǰe8e께=եY6:.0p3Eg>{j-f@zT _ B8zȠ>Jw7ϗZqr( O& [#Bhso9}#>DlgSrLw.ݖ4IsLtm;H$X -Ĕ{̡nR#n6g>>kv./"dbi}eVHcz$($%a-IѸ]o~2[quP'r }=߄T4N6g+hO|,`oƞNu:0D筒3ދC=4ZmQL!x#f(\rzF"ya;s4$|K(1UF6ʇ,ś]lMf_4#glߒ_;a6oWnVMyGwb}z]_>`6BaȞz )"ݎxzI 2݁.AYH9G]MYB_^#Lsd%1Kg'nwxzoMC,eL f.$CZI#ݠÌ:nx}Ō!4E—_ TUM;=6*3t988Y!t[@' ANqj⥛aA=, AJ(">,ZQ$ɝE?46 %d\F~,&Pۆ_ooމI 7bzO&Xlkhny,1+`*z%Sp*$gE(OM:Xæ G\kbjVmmA+"-B1o9\6ྡྷ=a>R^b 6&h[1]%d{V} 1C5+Of-R鳘nX-,rrBrWswXQ^6?~F8"ԣ[d[AM=£Se1se[gÊ# yiv.3UrGʳ[ooҗek[katX (ۤJGմI3hnO{=h?J7l<⾄ikn0yI#2|gb>5:ӍluKQ< )넠):FH (V\%7ZovD2;@֔~ ,޻ʹ.ZǥG3m_UrICAau 񵛥YCVo*IXEgA&: t&ެ#ED2pbN]Cfat}pyFqjmyw=Ze,G .5!ScDrٜ0^GGڮVLqT(jG@TK. &K}rriđg :0\۟ 2Zy8ÌFӚޯJupo?1[r&PI6&#NFcd4A.}g[P[O{.% RMDF^Z t5""އs%܆ť1?ޔI| 9*>2J=8N~Vs,*ޛ*t;#BSw԰^mt@iـDtTI;Y{m K;/Iy }| 3$J[yKM6YO^ p#~[7fBx(`Tn R &si~ãtJ A>WPMfʲL,h/$\D}!,WI=\Wlib.B4ZF=fo!VPGt;m\Pr}U×"0MqL 8 7-R9Q}Ux3kSJmA#oL/9Ba?UןJ טwOx"*{ݫOodS qpehz)|LfGcCxf (!n|ib~$YHR|mM}]gx})N 7ȫu%:jN "`uN#xH'@D~!69:B j^; ,]`~ΐIxt\{WM| or;(TYǬ-.?WoФxK䋦 jDZLY"U] {b=-B]I^ը;F"'D&'*~2P>}lUlmz胄v9F$'5Se,"f$rdaycEVc eV`9r| P H x E,Ÿ LuQo ˸S\צT7gVuBm.<ˣh%?~ԭh\r;`\%1.R冼Oi[gq$ Nnq1^W{߶=b*ҡ`RDY/鄤E,ZbHPN Ӥ2,yjɋ&xZeǟɸTo2ݳfՃjmD]jbgCQCf㟤q !jm[pQuFH2 u-Yc9aͤ& &f;GB |,1h :g+`];;,C# A2&0V[KMDi_֔\!סo͖޲\,1a e͹9Ά1Rm1GZl fSr@fZetwBCwyiȥy&2[mdl琮$D7P Ry-ʵ+kZ:㡊&-hظ]2=3V&ϫ2Vʒ^a ȫAƩ0XW T!1{8ΐlfY5~!T%CR(#0n<1`q~6qQ"CD1i*0j~9j؆ESvQnEĿ* +5؍\DT,),$ P_ PiϹ3 ^3Co55]"NH֋-iM/Ɓ#܀h~`C8_*i9_)7lE=Ь;H_mrܬO=+XՋ7|y!4 ]vG.kj736 1']#18چ SH>awT<!qZlxaR`E1 `r~63'ʶo`u&!+/1|B:E]f U):*Վ%k>c_1EtH [!#}{NyH+r`L@6[v8cd9%]wϢ[_̮|AcXC6spH"~X ȋްQbttvaJIXۙ+XN-$:0 >ц1 ywH;3D$ ouZ \OwU2~S{`J!Ōb \;J`_Υ~Kә23aBa]pp$Dgp~_*w*O_ZwBX#7 "ԉ۟w.ǟMǐe}%nB"gGcpFJ_dT:^*0[dz3G3e n;Th1By )kW΅mĖ 1X {ljWMk=Q8ȑX9F%kWrW-`1`[abB{ȃ\~.*} *KH2jCS e]yZ T7'^6i).+ױi&) xG=6V3a"?b 4kZ;U:'p R/e\ X &ʫwnaEx bױu!“֭k)5ݫBX%>$:<ѝSEΛC다{2+y&ΚJ=2jIېex+pzXdgM~X;?ךB dVr˪hAݬC"]ITH]&o.l%lVD#OZ~Ղo]:*˻#fÁxAt4`O{^?wr'a'3x'tP3[ɺ_N=%d}!r3 𘎟Tjg~2v0ҧ5~ 1 YnӗA!x!j?X"ĺNV6U.u Xiҹ.%䫃EgmãZu[çZ;S>a[]ٰN-? =,сW?c󙠓Qwerq ZAޱb Խp]Z<)Tx Ϛl62!.6O^A?ozq,x=$~?']1:$-~%.&sb0>tA,MD\Y vZfxդ%\LRBR RX90ȝV@>f%,5̓vπHmݶ*-˸0ӼO/!գ biMaU΂v1h-s]%KR,8ȑՠBkՕ "FM^0s4%[qN&qR{DflhN\b,R{+Ҡ3UYnݳ&Ff-?(SHīn֨pxMgQpRWg4X,p ,zwl$Tls M*ik-$0\+Sfs2Xb<0F_Zm!ρ*V;hY;;;Dp!K+IsV*+n_V?"L1/X_Bf#V+$ѕ[ s^"n< cHqDR#Y0Q,95,t7LҊ-k ]h׼ zwpo7fw˛cq~ЫCIQ ؁56FqU@[9@ϝװS2D5i(8?a>GNԴRDΉ$_eC# ى!]7 66Fqſu@DӀy dTnaL^ )`֬ICSX"]ߪa5*U=u^ڥ4CnKhWwiqAì!rRS7zD hmyл c,>;[` Fnזk}Fz\UF%[vg_ogdI2в98+R=D 5Qx+ώSY0]V7eEuSaG֊ɴК-C=*(wlDş~gH̽y:cgҳ&c=¯+jVpL~T43FdL]?31=H<H<%.Ӟ@kב۞9 PsLG]ӉTE(OS&dny/!0<؉m-sju6{8OV6/.ArìJ.1йxI7Qc,Gh&<Ǘ-R=ʳG0]S1pB,Xg!K&m,~8`t`u_+eW;MhU[E0+#KW\n^t;ƚ06~UɠyC=B&R` ݍyY¥Z)DFnỲ U7A[@OIpWqYf`YjRE4 mƕFt:vwYcE_!ʫ]4/b?xNGtG-7>ޙE'-,jJocy{Z7a.EFgǩ[h4QpW@?n}9*SM^\%A= b4=dPlTm7G~}rn"F$ڃky4d@j@ٻ aذ+5xT[ZM.v}ɆVk&E@RtRo`g*5m6Y_S o\_n`2L{~ WE|[el=_q%L >w'w֠GB 9K8/s~ZMpX;{?9culm=I!6ǽ r%D:bDQM(# r0<"ET5 scBV j\R FC&OITq7\qFVY%k:wG@?].plP4+)s1ocIcQ*ϰJ WџiMGL9G m)JKB`K^WJ \ 7%d\ƽ8ujXmH[_K. ġa#eV_QO7ږ 鮨8v6ISr|;h<|<MGU\ qKXd8uBFT;VIG70s7(ӗtOAߗФ&3+^,hX@΅bm OwWN0pǣ3F^ K\)PFX4;5UG-A{{}4wΦ㨢CEgp[Q>k5'E\7 HH@LpG9]ɔzY~c L+qt1>)yM98 g/ǻH ɲ&DI!Ԅ)@6=JmJ10 uH1.nYVjk9 C\¦<+`3|u1mR/wBDN\2X:eo \rGHYOͳsFH]r@d#!^xDv&@՗v`1:9Xd:#Q.1Rv7BJAs[XqRKͤJ}}QX.OB]N9{Aі!]inuw;Bl7k3XY 2E^ ;"`J#K(2gcO*qWы͔*Q"  A=_)/ގmL֢4hV!Y[0՟ډ%WW}y.P{A(2*-b]ƞOMT '>/zNcI#ĒDjF"^PVӈ:MȥG]Ud*ög/]!e:i,Q\˹wiw0iVX 2\==YM'R( j*6: _ʌ kYj;Hr$ߏhT4*UZ"6Th.npCWPQ30N'5ԗZ.i ÷mZFc~ܬeA/}϶ aEڹmȆÄ!FMNB[W9tu h,{߯hWBbb=-rb4=Nd,FDpvZAKpkK` JZ0%r>X'Nq$sN=|[$2ONE!SN-)BN/ ? l3>XdY+~ o 8PxIjT'w>I]j:y픆7Rdr?6#7A6LZ!-in\Ffd]N\ݣo&U8@đ̦MUv+?yb{w[Cåk|ULt?uBCI6w< YZ