libtss2-sys1-3.1.0-150400.3.3.1 >  A cF 9WBsxcS怯B%yݖ%b$J5)od)AiV}I\ߦԗA*qjG?d^+p췘 }E9)k]F7^LQd4"p@L?Ld " 9 %FS iz       (2<dl   (8&9&:&>I@IFIGIHIIIXIYJ\J,]J4^JZbJfcKdKeKfKlKuKvKwLLxLTyL\zLtLLLLClibtss2-sys13.1.0150400.3.3.1TPM2 System API (SAPI)System API (SAPI) as described in the system level API and TPM command transmission interface specification. This API is a 1-to-1 mapping of the TPM2 commands documented in Part 3 of the TPM2 specification. Additionally there are asynchronous versions of each command. These asynchronous variants may be useful for integration into event-driven programming environments. Both the synchronous and asynchronous API are exposed through this library.cFs390zp33SUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxs390xcFcF7e149aad514fa0db686a39c8b2362322c37304295d2855f29a708c7bae7addaflibtss2-sys.so.1.0.0rootrootrootroottpm2-0-tss-3.1.0-150400.3.3.1.src.rpmlibtss2-sys.so.1()(64bit)libtss2-sys1libtss2-sys1(s390-64)@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libtss2-mu.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3cʂ@a@`#@``ٹ`@_t@_^M#@^4^*@^@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.comaplanas@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgmeissner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.comguillaume.gardet@opensuse.orgmardnh@gmx.demsuchanek@suse.comdimstar@opensuse.orgmardnh@gmx.dematthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large RC values passed to the TSS2 function could lead to memory overread or memory overread.- Version 3.1.0 includes: + cover update to 2.4.5 (jsc#SLE-17366) + cover update to 2.3.0 (jsc#SLE-9515) + fix policy session for TPM2_PolicyAuthValue (bsc#1160736) - Add version the configuration file tpm2-tss-fapi.conf- Remove conflicting sysusers.d file- Clean spec file - Add new library libtss2-tcti-pcap0 - Update to 3.1.0: * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455) * Fixed possible access outside the array in ifapi_calculate_tree * Added pcap TCTI * Added GlobalSign TPM Root CA certs to FAPI cert store * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59 * Added two new TPM commands TPM2_CC_CertifyX509, and TPM2_CC_ACT_SetTimeout- small services fixes and comments- update to 3.0.3: - changes in 3.0.3: * Fix Regression in Fapi_List * Fix memory leak in policy calculation - changes in 3.0.2: * FAPI: Fix setting of the system flag of NV objects * This will let NV object metadata be created system-wide always instead of * locally in the user. Existing metadata will remain in the user directory. * It can be moved to the corresponding systemstore manually if needed. * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix return codes of Fapi_List * FAPI: Fix memleak in policy execution * FAPI: Fix coverity NULL-pointer check * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check * Fix a memory leak in async keystore load.- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package. - improve the descriptions of new libraries (fapi1, cmd0, swtpm0) - adjust baselibs.conf to match new library versions and added libraries- Update to 3.0.1, changelog at: https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md - Update libtss2-sys0 to libtss2-sys1 - Add new libs: * libtss2-fapi1 * libtss2-tcti-cmd0 * libtss2-tcti-swtpm0- Update to version 2.3.3 * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu- Use system-users for tss user creation (boo#1162360).- BuildRequire pkgconfig(udev) instead of udev: allow OBS to shortcut through the -mini flavor.- update to upstream version 2.3.2: - changes since version 2.3.0: - Fix unit tests on S390 architectures - Fixed HMAC generation for policy sessions- update to upstream version 2.3.0: - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/sbin/ldconfig/sbin/ldconfigs390zp33 16744629543.1.0-150400.3.3.13.1.0-150400.3.3.1libtss2-sys.so.1libtss2-sys.so.1.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27517/SUSE_SLE-15-SP4_Update/7f28f4121b7b986905e9573aef867183-tpm2-0-tss.SUSE_SLE-15-SP4_Updatecpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d9b8a22a4189eb3659203d50676793755c7419c, strippedPRRRRROG̎`1vTPAiutf-8cd182a77a400c23e03c0e6c39fc3a324d93d26b8592321efc098cd449fc3c371?7zXZ !t/ct] cr$x#Gj4cȀt9#]Y8x ط@۵OpCNƸ -j0ѹS٪?ndtf@^,Z2>Xv1,՘GT('!Z!τBF9ghJ1Ϧ_+~g0UW6b.A{Q\/J3%ұgh:qѡ@̯0ˤ}oWz&MP7_EU%\;;ϪץSGػ59c H$u}V01%>P~ځ/?Q-T[ai1:iv0yuT ;zaaK H >drƌ2MLL e+hRH1+YfzSIqB?Fu!ՅU-egg+`uE_-֗~T^#Cy"NybsmPAfAƯ{.fD, xyb&|̾zʖS}dۦigQB[# Z4 j,F{fI,طhѪ_nS j| \)W`d0x1؋|O?n[QCyu(BfKuWc&|:+ۻE@~.^\.cQGNVN&v(O_EDk-dsSMiL@EULJRgJḟzbxКFYrr}]A<~c*R7e :ku?ш aoh3Q/$?%V^wm$ਸ਼rX"ٽLDI]Ǣu!ZHam (i`-Ƃ1)n<]z,?WBJ@n73I}wog}^P&SVgmnChczhI,VīR6B3);bƭ*Al]uA/!tZҟ Ӑ,!1&&cQ63~J * *YJ 3Ou{ +#\j-̼q~{PB{TcՒe]Y8my w|m sOT5v5/dLnuF-`\$MNja#]aM\bsXag1]cSxYBkUp6*s%Im7ri=aMWBHzn)+>7m-Shvw)a`vu|jcoB-)ޑJqL]!u@~\{ypDşUĈJ }Psֽpr9&ZgolcvJҪ 2ΫKW];{DUqC{㫒ۧ9 fRD\hۆ\0 'LNȵ/4[,BR i 0wGHYK)X0j+r~o^5[ށ[XEӭ׮"XW^D#74Fޛomff} :7Bc'VYP~t+Ulw<|fډdߜ/uoM]40a@AnT:]-$&6IPQ:G<:؏1 7C1V!ΟU`ڡ͛ wUh;>XQs`TU!@?$8B;ԝyMG=]/V^4^d%Q6ooKv Uu618/Wm0-%CDJl`PK\FEmC|(|1giqGF-YM6T @g4PyoP{±b"*x[Q>=7]9엛/T%m~8R9\uWY\^J| ;I5zYUThLiC||ߞ?7Lb [Uuap-8Qp<2E# mqCʓR|0Wi4PyBHپr5gƾo3~okPwe ͥdfd kf78%n| xUr_o]sGJjxC{D*wW,W e,A]MXswXiyh-xß#VBiQiwOcMtI;xP}4J#bTVvVz1p͊cyGq*+BY^Aȉ(Unj;ңʑ`ĉ<{FJحO7yYⶈ1L1X^83 xHE+lfB7fKvfEf P&=1xUJjt`#)0sPt,K{o HYKӓg+IW' Z̍]Mxg =@Z{wEFNJ4"d WQ<\dVw5E{ʑȞC~`LKpMJX"d>RAH$G|HJYH1{n82; TAdR:gc(1)vF򢯎fbYvO(.ɝч?Ԉx?hL)\dTPZY;sx5~[JH!u[hu"b@ɩlyƩfGߵMcT7^ZsW*.Yh/iUST)Yv6?a7LʥiHVp? @}>e!9;(I @ ހ=?Y0QϽf~R'Gt"/"iJMf`|C- '+8ò Aq=?avqH7ptXzQDޠR!YvN+ZEכ9 euUW$QQNIXiuIT3?=F [v,'v._A*V6sg0q' 7oRlqxcu\&7XXRKJ5ܜVjqP ~˜b4ymbd~d- 0=z?$&+;l&g3!\nhF|>"<)w8$2,/p"6(]]B.+`b@Y};`u\W4hS{<6J Z.j d0ʎnHyX30y,5ed'^[akvvF llAne3;h['U>.M3MFxA4o2#2F ژ]Tc}::S犇lzfŜS2rneF ?r#M WnPױpdq2 wH.O,$昆q'Syuf^J;Ipx (̢xEE;EN P u?`WӪH?x 9> 0W 6p7nNxuu4rH5L))_PPց_o֔O/2QͨPq5Vh*4ʗa@H w; wo |}ep7tYvgZK_1_$6wwOlO1o'dEi38@ YW$^\mz&6_iB[8R0[c{7j޾!eBwd^8U )“yp~tU@^'vHW)ܘ_AM3jb}D̃*f!.vJ3 <,5"+\װy:rK1w}}tJ3k`V` N'GOlR= $&wn/3.8spڸcQD/ӳx V3#rmfo0^j<_ZmϠ7b!Qp.gSNq|vo /N5voK04/;aؒ q7IGܣcbP==y{ a&ꤞ?vpvn@q2pJqkwg̭Q6Nv/LѣM}ҘiT5.w:+k3zu9 03a4Q!g>6>ݹs_J 8<Tf.bb+VH('[g^e~?&QQK5` 4~57ژ/@EԕP+~YJjCXo0L 8LLil+:$0fy/צwv9(PUh{~5huFYcRUkpӄɳJQzx+9eZQ}K7\tM 2AŁґ_oP B<1K391T3V,#1YK  gmUMfݪ)g1s[ű({Λ*z{饾gDL̀XNQ%^g=4KNw`{@JNhYXJTi­/9`JxABĂ~ G*雐?1 -Z;Q@Mq@C-1Wi2ijtNH+_K:@kf*ow.gzBJ5qgU:p_6k悼E/ Bɯ|FGoZr78GFѮߨE0sCV<ײ=NO{9ĶucP& !{vn_;TSLNHs];@4r.;˧gJ2ibMh)$jK1ѹWB!0O|`\̊IA~;/-C؃n-f_(œGO"pgܐfy(m:E`a\&Wr4{1D HX+`*~g %$5-EoŃ9uq[w E В a!NiPa 5py`R /WZѦ0Rt[.SCΧIf2ਪ*8<  \1? HɣW>:ʩ連&Oe*(W΁%Q3Q||uKШP<NpK#'fW׽}(uThMQn^#Gx0_L~u9.tkoarCǐYGfQ[TIEk4J`/ Z]NlQٱ#{,􁺊f#DR sBJwn9 f pW$;W\x (Po Jiv=|:poH.f^-t2,`R@}tC=k"›9{7Fp'Mu{SJ/cy\KT^BDXuTInˆL0ELWOKiً"{'`W0CQA>mc8 x0X%T)zM;^vCq'n?vpA@KaY 6sUIyg܄.a8G68|,kl+ߩJݬZV\NLs+!>l"an?h=e~g"< >wrEZNv"&p/w9pe \dPLy"ʣuQsHI2]lGs)\^l|0[yU4X*a$,^LmXZ|@*zpiEʂ_mb]$Bu]%$>5#7vgw*b0_]!tw{3T8r_ߓX k0eB,^TS^\%g!Hfl{}z2'>\F_ gC!C}EHzdpٯ(DE6&0z=D3%lu#f_-NP xDeh*ԬD̃9m$Ňp}:'Wyx%2)Cӊm꘾XVfZ۱+3'ғbq v5ӚX ;",tol6!ny+7`=b 6 ~%\sв1 ;EPq-&zZDT'1Hy@J=ŢLҎn!nIkEVqU=G96߲-)ڎ9#3#=SO>H E1>DtPAm|5 ed~.RK71dϔNBzXdL꼗_Y2?mC=4{uB4j2nfX#WX":CẼ+_ ~hOuOq뻅!I#!z:,VЖ5}#-Zl1k 3ȩDXI'|=nvMBAoF+{F~c,uCn 8oml^L<" Q# g[O+2f2mb49s^^}S[Q 4uSiQ|g{8]#+_? *\9={,?[,:(E7b$PD4%a*lPU%Q|mWnտ|ЁIq ^J-db9r?9sn9 pwl΀|2L_7&m3o䉲9  3dH31 d_RΜ_]r|U5ǹ.eUq$rnY&'˓QVT, ڙ*7>,k99j 3 k ._Mo[pLO fQ_rsh#N. 1FjIJ<خf dbT7C`8f|MNe@- srϚg]|doZ_4У NyhPJ[9%jkx 8T7Ai-@'Nn'vO: %|5#p>SW\B_Ǫ%S^9Y]o4"AJYbE|!wi1F)~ˆ{~\GCMmNQ;:GTPPz7T5[ۈ\{A3aMҔ+_Bt\5:̇쭦5嶪ZN={XΑG"q,h nwI*=-~|\^6R-2*1`oJ^d6G7D4rVf&VҫJP #IM]=$$CӿhL?\&pW)?I˗WR sFn"ldgQ  ^&k$Ei;F*IɌb\İao%$<rX6 ]6"H1ײ{J?. 3ujH]&rZKqJ 4b7Uu5~{DSȡddHJ V98ڏM;ڼx ;'Q07(nqO1+jr86QT>b0%Y-'Cz Cbz:"ۿFRl^>q7g833n/SnT$A(x.ԫ*rGlyYQ(5$mLD*:uWx3+I*ikԛ* m5=BG9{v[S/Ci^M>Xe_ * #6ivsX!(nHpχ΋Y*hh)}7^0T{rXP&P2h~`ѕY-#n)X52 (g0GNd WnW48QIX_>+j!c?컑LCM1ĥ6m x؋4;^6}2}=kk!fK>qE`|9 /ľ*Tg!eKvAC|ktCD{}1i:pFܚ5I$əI6!VaΛҵ"/? %.ܯyC`+W+|gS2T_8|8|Ge-ٔnJ\INVR)Pa) }˜XI \ EcڦodHGȊk{ ɛN #LzS\oVEv'ܥ}i\ʿ} X7m@m( |FJchօ40>~L=J~6A-֬cfЧm?fqZ&*uKew_+mjRWn%ǟ92"k`@qt#;@w1 0qt\]O_hfu3m<8z;PZ*|=CΟ_jo뎯ž*ZoEK&$|S Y luq\`F 2Y`Cɚo{V.]zZ_s7"+l/m[-A2:6{YG%͵gGi~2 D62Eժf1 U+:?FĶtʛO igbI/!K͢t lk^rĤZɢ]s(VEH_Gvfï(fްޠҍ !M(B="jO^fɿ JejZVC%RWOQ@zǑ)XۣNA? P}T$M""]mI{`ˆm%"DKDŽc!9œBXx٪+)}gFٞ(~{rѿ"e}áoi Ť#ȶ_8_8/ޤ֕tG&>l}!"({ǬV9 ,Y 5ƦA<NT㴔{¾~701 6OEQ`";OBɀh{6'9-æYo<żlB$V=bOgwT'-`>/{'/0zpԗ,j٧v4eJђH{92OZ}ҊAUfN b[?ËkҬ Wbυt^i 8oVg!ⱑ5 5@2<>7 8u~L*4mOf2_q3]ifCS\bBwrg~GBjf,d2̽E4( (F.s~vz-MxDx.-b cI0絊XKJ? }Dھ4!av&IN ߋ ֫ k9Yh7I!EݥOYNqc<8y1WՂ(,] 3U$D;{g~t yr0H<qlWꯍF7:I܂M@P ƮL ċV`*(\N&sF0m%\䧆(]4i*bڳ!;?qY7UnZKַ1@{qcJ ICW;sTHf PzHm۫*` b<1R=HޅSH'0%siX9&Yv_)Wat-s1AGH{|^#b᧻XF<ÇT8Yߏ۲<P/*vadbmJ`el2Ρ%S:NvɗPo?#nG@Wgz,"FÞdA*1T GG-qd<>&,ptY3bqozOv> ILS╇Ga q| \ʱU^xКs{wE L"dWj+ګte{= U|OվɨL%PvWF?jI%?*gMůI6l $5Q;zHAO:P'=y4'w4yэSqf ":UEt#A( o ȌD-wI <4*L&Qr{⮑bM(vL9 RvH}2u5Ƨ̎Kcm'RŪO#NqRd7h6<`әB'5&U:4p5~3m2)la aL]}yWY)tfJV;Rkh[m~Wq1XrqQ4nGM#Fi2ۏE,U}n8`nXId0 ubF06>l tէl$gk(;TH[awEpigY.x` ۸\2mܫ TXL }6.왞qde6ƛLZ9( -x,SM^~M )xY?@9EaY0H\J'@dOpHw,LU͔3T(h.BEY5$]siٖw?*&!%NؼE0Ry$b!A0FtTvOgG){ FΦ-nI֒՚. euḳ 5sucd3pفNEK\K:פ3:gn#L0lv5`s&(QyRurm4/6(wlվt|C }k/Ik*6/ $`5#BD ȞMd77vosq7T]9*+Hz/a<ukF;]398B'<<#_xHfיF)yt_= LBN3lN)n4`!]'fv04IZv})eZ!`h VRh5æKf@s*$F,kP~\$7@-N;=G]oaF$jn_\{ pCLc{9ڵ?v'?ܯ)zÓZNRBZ`3\#D\Oé0X5SoV=bq%s P?Fy3h43҄\Xi}Y/޾eC[ז38K5s5gG>j)Yvyp)ތ"yE<:w6ɿwJzl\W`NOvDfGҏC91KB?*eF6,af<@-Ƕo"̓ 6W+z:qM;G҉C^C8 iG+ϖ[ω{Ʉ{XFu޽<1cQ d[r3FH7 3jfSz}8eZX(1'Q1Y܃6o4~P.$oǠ -%`Ǖz\d^L1tN> ٵaikÛ-L#IVr+_o[ xfΙj+'#|EkHYQVO-C`Yntb$Dd^b/bGqeQ3}K]n]P(&ˁhuZ,]^D/bJlgSfm^n@q9)M(gI¬&N7givTx aQ&F6G-,ű7*!xj6U1e5c`/mw#ʞyz/X_ŒN*$Z); ,gEU& k}pE[6 pm!te%շ(:XR]5d0(WڌF08T ,a큍gPbuTͲYPe㯮x?r=(g j'$9ަUٚE?R@?guwzk5{pHƉaj|ɼS}L%XN(GI|.mnaԿ<mM: <^\yC O5^3@N@B[T@3纆l `&5h?V%O1% 3le|}gHW.5n`=xʻS)H4 e]4NÙUcji Ȥy'?>YY#.oT<#F|.@w0'!c@뉶*Bf”^.u]M4/"7gׇ{ʗxl.bX|CTiL:8iRbEL%VgT#؜=|_Z~:&<xX)y;vq`CzިKv~CU9?(f'=X:~&?YH;t;U&d]Ghs] &WǬq/Ѷ,+xb<Խ}F93k!Jv)Os`4"Ձ`zXFC2&d>y}vzcW~Uڜ4V] *<]^ eUXXK7FYQ~4 n+:5?Y ӃHYc#'E1xGirqq `%?&"ھϯK`p3Af @wwyHH[뷢or!('B/8/}cxDOE!$L>R0=("lgV :tQ&T?x;5Ɯ&Ӧ!u#dZTIh7][k &f89?i*]خ(mSii0u&t,)b`)b.EըzFz>5CN[0L}$&5;mGRcYr>~DJdײ zs+00ju<ڑHXwyɲWpdKuTQUrVCfK1N#I e4pHx϶\ wNՒJxρ2u,,w/rՙ~;YkT8 %L-E D pyb7`P\{64|kV<ϋT,tGw-ʯZrk{i dVu-rߤ^3r)h(_]HW ,FfuDU^]ۣM"B`#(dsiQEOK2ϩ*}8HZ'Sy0Jw?&E"A4Pƚqn|-[* gxGJaE978+yK;qzN( KrJIj;!k^6Dl ɬNR6l-߮ >:fazo |](i3 p lS#l˾"*mug⨻9%". ٹn*L[E귍1̟Ŀ0(U :Z`n;y&ǍYM9=¤>o-) AH~% q&U;m8-i[|uX No%0.ښ ,Ji 'KLM!y~f9bǮ_;pΑ`UHWi).e+7օ1EtW\(m2-y7ӎ④ 􆐠7*|B;!7?G PU#@El4L ,Sfm# 0y0Ƚ{!3[ӘP ~Tm_ e}MxT+`Mh{[Z~@@SS!p\}W3iPDO]sJeMPwum mLRK6-27Wzv9Ӫ5\3*%{Fl*{j:p̛ZK0 n'.<|"TN_FYVKD.Fw{lVx'T'MXwуa/neaa^qGG#6~mxDHG>O|j^4E !B> ZL߉0v)ڱs4L8AWEZpBEDOqw1tj=ag`41m˄\a*t], ('b{V+e!^Aw޳v P*Mgg8ꭸVJ6Ցow{էkDb٭&PA98$^u9#?'s\oxu 3sB:y!HW&nGrBb*2t2Jcy?cj"}qlZfeJأH+$w@~Cub~|Ni83z?Hug|Ԁ}Tnf(!s0JN 80R6>5ͣLЧs)QVUM R~V7! n2&ꡁݭfH7x{Eo\Xwы1H2ϣg `uq-alD* ";,L3 \XHm3|A}7=FDGqnQkggҹ㼖 P8b1iZM~2k3;A-RF>$a^r(B(ӡjc٤U=B"޳\ZTh":ȣ E+tM9r,>? u9h},)tGyPE`nŽG;RH)t'x 41 0+|Q(}5dt0 ڄ=#GUVM %:.$ЭvehPtQ5JD85Ǘ_fIDj wa*q~KxxpOӳ4ʣ# FqTreCLdZAoi/}-a rmnׁ3fɿIJ.W w QsPz%03yZ {pKͺW7߼QKb)Yiɓ445*׹&U=({?kH,7⪏G}}ý|ۊCPRMqE3[ϟk:p@gIP`C|\& 壚xܾ}nN,deBܪ 0 m;*Ù$ 94PvGz@)l)M€ H96~0V19jC !7DH俑$ѿZ&GVD!doSU.0HֺZSn bT4l *`6=麦HI̭K%YҀJ9xnj:ܶP,~?8t+ ]/DƧj">&v16ҁegh#GU[=(*~ȋT,zɆD&}r_1O4O1`6fIkХttwP% tRbvP/U:OM~Tn0RaC J0tzV[Qj''&wrȝ!p(~$QnOϘNPôlĀn*G1UGhb{>3~bѓ(F&A@'Ci4k2]ı"0bx~ː,WXª,ML\TX"$dU1.SGhЦUiE3p{K?`o=Bo1:xO[]vY3% XkM0cICMYuVF3a D G f*WE]$_l2v;1)ȏNhbn~^fբԬKKr4d21Y K$Y+b> tYJVRS@QM_ԡl BR Pco^]_RW,/;] Xa& Uk}oh]4W"ŨLX\IR[-\P%,G1 F8Zql4FD` aldRoHJ-w0$iE /Q.P1$3YWHHP7DY~ąY:"{gv@(̺I3uE]ҜFO%B(uvk.KN-`LR3k5zYk +7)| Npq}G?; ,pIU*~RI+rO#6s, èg}L``$(]N]A0Ǣ w(k9ۈ s&h&ܪ=xOc nD!TtғE;Dņ+ Lΐ]Y:._I2KՏ]dEq Ɗ`uBFy)W-~a3o 5B(ҡ`3tpn˶= h* .foChk)ˢ7:d5ogXKk C4Ͽn V;z5D?Ո@Gu8YѳK"f]ʴѩHcݖ"Z+`{6>tgIq8j*qU[  q*-e~a`7ܛ T- pHXqK/!X&Bczqj:͟BLTd|ޥσᥟXm$06`(\0f5`m Vri>>gyˤ84k}ީ,_Ug j^LlZGKo_#?aqSP(T~6iUlNyJ"MHuy'vܵ!S+-8f:Vq?(V[/Xn: Ze&0-Ush Qq\L@M:W\kn<D^*<CҊ=!i/gT( XyO%067*iJ;O:6? 6dKۧtsR자Kj+PfNJ}yLj#\pRgF9_4t޺%DOj.mi/EigBP<p&T ;r 6[4.CAU-ʡqB6'& +%]r,jIU9V^dJ^W.=!.Ot1, ; 0Oط%ߗ ca`.a-7U,MQÚPkx;=Nx?,XNn[PTde~l@}!8 .pm]{{+it-an7$KS \ZJhriFbINz',½V昆 @ t&'-u^ڒCLl%"GMsntB .Ū48愯~ډuoƯ.2'"f0L튀%0ky@l_y!]0l!8N$HPڙb~^TqQHs4`D ,Y9]+JE?a^+_},/Csc#ȑ3ۚ.g/ߖ7nd $e w|S7':2,BIdU8jxRk&d)E\w| IY؎=*8Tgap4iY!0Џc$nUj zvyW H?|lXWW (vR2CEIs)uw$9Vđi]'D>5ӱW>Oz K z+90:Qƽ-~]W=#hy&Sy[-CL,V !6K4G|CT"͌QsXְ^v 7> lȚMG "k/|wmuJu?AGJh9:ݫo;n_ɔ\ 懹Sꇧl#p~fcNҕy{ 4a@=CJ}V`קՍ=}Ẇ~G5ٺ|dA~e>'&lQ~GZ%ڨNͿ. ےs~y`Z?3XJ&0&{敃페7h]Tj i0TXs$Kl t!iz /?ɨHq*\`"qPhyxՆ깸Y@6-Y%``/Ϥ@3 w ?S.)QU;뇨WCX 1*Є%XvJD7~c`M`#9B5R^m(\>\Xk8Sgu\Q\sn9yK*B>@|̱垳Ͼ|}_y uf _#[sh, kvBwt`0L/")mO.$藵WSh=,beFn0'DZ@`9hYk9U /memMDE$ǦcaM=VvfxRaSwl1#BrjZH5kqyL+$?Ҝl6c%~D:%4i*|nIyrD|{/)~C ī-!Ϥ3׿@^Ρ)6e!KV$~q}\Ñ,bn%iI/ \ ,^a|ҵ\9ޠuEF=NĪavNW0HnԊR-Kc 0n#^]B#$CGZ6ܒiI8=pPֺ.ZNHcXӕ-660xPL߉ӘO{gIr Q7v#Sdf` 5Z"PG5 9ʹ\7}d?aP]h߆fiiUucSD):q{\JUJ-=;2HY5ݒut==iJvmkPNnhj @x:E#-{aou&+*+ia)9KiN( 5VR4˶Rfc:AِZO鑳w$P CgrsK^ժ - ׹(ۏ5KR`v^_>Daz<vl"% 7cRb-$ ]lhjԌ7cL0JW":"}=Z~Mtz9-͞9=kIlcnN|NQ[>m4ۤ(Nek296ZI1lu۞JX "0'P<.Ќ)e~2v@#ߏ b?84_=՟sFyJݚ`VHX)0Ժ{wj:MsK tYXJD@Oڵ :aHp!,1A3c[JԮeK(U.Z|kP jɦ`c+\HԿ:0#Ԓd;f{Ccٛ~mnF}NNN~lt Hf抑_(He~;wM!7Z=lbг -^uyˑ#2EDɅP+9^xeYʸ]XCzgv)(snp++>xPgӷdc\ @/|rrkhͪAq~ !8I, _kw@dgyj np).u2v,c7 N%:~k?^2 Jًes;piwMPoGeY2}S!C`1rfۧU;\Muo86/԰\6q3eR; 81<{+WGyc $Њˑ0x9َ򙐲?d^+ q}M2?e茋&fSs9r;hM5cpWEa5d.K6pl}[Vu>kYԑHk{ߍ0%fO*T ׃z##W9Eol<fEuekg}E]Y"%Z۾e8U2)hU!.6 4\3'ø9cWeѐ:ÅJ)ވoW᥷"ƙQ*;@[ J|H8(`}s;J#N_.a/f|ۺKwsN/=MEbڲBN,Fr  YZ