libtss2-tcti-pcap0-3.1.1-150600.2.1 >  A f9MgzAwo`f0[ A{H:O7eiz8884Ś4"牟TQe~eBE^&߾ZCC0$^ެUξJ6E 4d>fٔy>L ̺v^_Z'@ٛ Dq缑E*A0[[5qM' fl=Lحb )8cg!Ƥd6$&2RXd NݦGj2\Q L¥yU)D~6O<Ls[_yĬ\iU1GIT^c[TI.v >p@S?Sd & B $48Qr     : X`jt   ("8,(9(:P(>P@PFPGPHPIPXPYP\Q]Q^QNbQZcRdR_eRdfRglRiuR|vRwS(xS0yS8zSLS\S`SfSClibtss2-tcti-pcap03.1.1150600.2.1TCTI pcap interface libraryA TCTI which prints TPM commands and responses to a file in pcap-ng format. It abstracts the details of direct communication with the interface and protocol exposed by the daemon hosting the TPM2 reference implementation.f9Mibs-power9-12SUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxppc64leȡf9Lf9Lba191240a4b8b312ea4ee3b903a2c0141197aba95b76f4cccc6e8e05c3ad30a9libtss2-tcti-pcap.so.0.0.0rootrootrootroottpm2-0-tss-3.1.1-150600.2.1.src.rpmlibtss2-tcti-pcap.so.0()(64bit)libtss2-tcti-pcap0libtss2-tcti-pcap0(ppc-64)@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libtss2-mu.so.0()(64bit)libtss2-tctildr.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3f4ecʂ@a@`#@``ٹ`@_t@_^M#@^4^*@^@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.comaplanas@suse.commatthias.gerstner@suse.comaplanas@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgmeissner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.comguillaume.gardet@opensuse.orgmardnh@gmx.demsuchanek@suse.comdimstar@opensuse.orgmardnh@gmx.dematthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary quote data, which would not be detected by Fapi_VerifyQuote().- Update to 3.1.1 * Fixed file descriptor leak when tcti initialization failed. * Primary key creation, in some cases the unique field was not cleared before calling create primary. * Primary keys was used for signing the object were cleared after loading. So access e.g. to the certificate did not work. * Primary keys created with Fapi_Create with an auth value, the auth_value was not used in inSensitive to recreate the primary key. Now the auth value callback is used to initialize inSensitive. * The not possible usage of policies for primary keys generated with Fapi_CreatePrimary has been fixed. * An infinite loop when parsing erroneous JSON was fixed in FAPI. * A buffer overflow in ESAPI xor parameter obfuscation was fixed. * Certificates could be read only once in one application The setting the init state of the state automaton for getting certificates was fixed. * A double free when executing policy action was fixed. * A leak in Fapi_Quote was fixed. * The wrong file locking in FAPI IO was fixed. * One fapi integration test did change the auth value of the storage hierarchy. * Fix test of FAPI PCR * Fix leaks in error cases of integration tests * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName * Fix the authorization of hierarchy objects used in policy secret. * Fix check of qualifying data in Fapi_VerifyQuote. * Fix some leaks in FAPI error cases. * Fix usage of variable not initialized when fapi keystore is empty. * Add additional IFX root CAs - Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch (bsc#1221448)- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large RC values passed to the TSS2 function could lead to memory overread or memory overread.- Version 3.1.0 includes: + cover update to 2.4.5 (jsc#SLE-17366) + cover update to 2.3.0 (jsc#SLE-9515) + fix policy session for TPM2_PolicyAuthValue (bsc#1160736) - Add version the configuration file tpm2-tss-fapi.conf- Remove conflicting sysusers.d file- Clean spec file - Add new library libtss2-tcti-pcap0 - Update to 3.1.0: * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455) * Fixed possible access outside the array in ifapi_calculate_tree * Added pcap TCTI * Added GlobalSign TPM Root CA certs to FAPI cert store * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59 * Added two new TPM commands TPM2_CC_CertifyX509, and TPM2_CC_ACT_SetTimeout- small services fixes and comments- update to 3.0.3: - changes in 3.0.3: * Fix Regression in Fapi_List * Fix memory leak in policy calculation - changes in 3.0.2: * FAPI: Fix setting of the system flag of NV objects * This will let NV object metadata be created system-wide always instead of * locally in the user. Existing metadata will remain in the user directory. * It can be moved to the corresponding systemstore manually if needed. * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix return codes of Fapi_List * FAPI: Fix memleak in policy execution * FAPI: Fix coverity NULL-pointer check * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check * Fix a memory leak in async keystore load.- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package. - improve the descriptions of new libraries (fapi1, cmd0, swtpm0) - adjust baselibs.conf to match new library versions and added libraries- Update to 3.0.1, changelog at: https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md - Update libtss2-sys0 to libtss2-sys1 - Add new libs: * libtss2-fapi1 * libtss2-tcti-cmd0 * libtss2-tcti-swtpm0- Update to version 2.3.3 * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu- Use system-users for tss user creation (boo#1162360).- BuildRequire pkgconfig(udev) instead of udev: allow OBS to shortcut through the -mini flavor.- update to upstream version 2.3.2: - changes since version 2.3.0: - Fix unit tests on S390 architectures - Fixed HMAC generation for policy sessions- update to upstream version 2.3.0: - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/sbin/ldconfig/sbin/ldconfigibs-power9-12 17150312963.1.1-150600.2.13.1.1-150600.2.1libtss2-tcti-pcap.so.0libtss2-tcti-pcap.so.0.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP6:GA/standard/aa4ab507953a4afee826d3c27c944674-tpm2-0-tsscpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=931078dbadcc19e81aec32f7c568e8a8137ab04c, strippedPRRRRE! Tutf-8e4a1d0512277d5077ac9e784259ffb4b7dc2f85e4e2338f813c08a7a43471153?7zXZ !t/ ,] cr$x#dǨRKwe,{RoIØJXۚ0nf:e3|({Jv{hE,87Kh9o\@B ?yEZ!_@B;zncMjĴ{R 6Uietmr-;C''aKE_ |nW>WEM6HC#kC5i4nL;ᱫvIcJuag\=Ma.SOB `5d5FS`Ⱥoicg[qشyG e%&GKCg[rM GMZ@y#Va\IinGG#&h 140o1X Xt>oW?X&w]XzJN~L•v+FX8(naMTÍP:ݕ%2A҆H,hZU20 g/9eCy[9D-r`Hҏ׌#[#w.%&pB|.v3b@x)A޵ON:_&@׏#4=Bv%$hH(ĸotjYy%@@j}S{UG uu`9U+h LLV.ST[=Dj # ]㘽Pdr!oE. YUB?kmb{p~_ )C5لbfmY$x<ʍw?-2TS0urkV$'ό~Ŷ MCİ6NTHc G Hc;B ,rCT>qR sX7y B]h*\,Fdb_UnR &A|ax161;mK|_\  &C'˒$ҹL~$lB=H)Db '3Ň!E~`s;Y\GO-Ed%4awHbhq8|Qȍ>/jH"X A0R&e(j% ]>#K8eiDLɊiU\ ey>p?ŊH ƴa⳾ J)е\Ntż$72=H 9G!:BCGau~Ko2F[!xK Tʏ/5fiX[% Ε٥*(f'pb*:NzbԽ_nc 쉍0&_ h0وi-iO+iynl@< D {"Ko!bhK:\8~tOM)WlܠBݥ*_"Ew q9BTPhK)fFF$ BAe!\4D}h!*܍_UtJ :fLZ=+o2긾)+u}eW>#جyw+%yUw{_`L2 t\f6_~ӳ9cUÔ>*kvz5' vU?XR- è7oR]"<,G =):%}NJ?AU:˯ҨV6%on *@JuhmowVH^&keh+n'K >;ruM*+yyRcDhpWڕH#,J:"]צ/B~xۃE-fa %SSEP#{Qoζ38n"\у3n/SWVU}M EB1pUBDI;Ȅ"Br==W6T. aMd-jw)"z`em%jnShhQU^ L \ǂ]`x}60M`3Uu.ǝ/(1(Eي#HS LD75PY&dDDz %JB26wl}:ff .ILz_ 0j;Q \pcEL ,Ʈ¿\'ܩ}gww;}!yh[RުoMްjcU -Ru'_u^Jfl Q]V%0L_{_b0蓝7^+BZs! pa)VU"Z9%t}!Qnme ] (Վ7L^ lMbTpP7w_+}S#1nҘ؊˃K.r0(8R/T~FW9YQ.de_1AXjq1? 8DkqCL&QI<ۙUFMܗ?Y 6|-7W)ѻ!u[̦,Aгݻ# agv,xc]{51!‘cv&.8XgrȊMcw4w"&f]1", 6M]9HX ɵIF? ݗ3,ٷGD38M$ܤϼC#" g_4}w]^ d =aۛOGCZnΨErBO0p@ p=KQ.v=*VUTKv=o,C襵]_q#wJъ"v)[4zK)S*VY1Yr37I1]r):fkt[6/O ]%2`}?4(.oTEFw>as?OYআt ّ0,^:Ux@Il!ӗ+=PcQ0nofx _*HS GbK+d+N68sM@”n2_o!47'{gF6lI~8n7gS{7A;ĉhh_Ck͒"'/者vy>\0;լޥ@xGVO=i#bq9;;m 3<)70gY#ECfiןT>F,d!HDGLv<5S&pu 6.7dإ.m*TvJW78U?3^mٔqӂ܍q.@P܋YsJ"iU%8a:O>Rk|7c+a5:̴,&rhւ1eWfQqy}`ޛIF9aU0T֓ĘD}!_ <:,BICsi>HBzZ> J/4bjKt?4'QJ{( q ynH7<ξakAF@DQJ%iA é$| {:l8{E-zi:*o_uT[Osrk&υb*%$,zWvPCOf__ey"z5\ JK.|KjkLG'-Xl?{% 91p>QJg$Y@u1oy*( @t`B2 ڙԇZdE0gSRN44ovyP~+on/֧Lm}?rP})bhzGLSr-J+*D"R鑷{`'@$q?CXk2x 1q;oQiJ?<5v9A7] `]p+Ëz 4EӠ^v)^i1YŸİ;2pu}e(%p&7M\J~Z.\CK8<`Zdc6;VSFL qTI~|9taA}}P}_nPN.4aҗŕHpXc@H7f5B.?ֶg] T]cjkfDT5{.Xf+#7 ?KǝN|*w p,W{C6璽4؊`4Qt<}U+%L3_#90U^?z 0}zB])_E~Ƹ񽨅q֥ˆ?wcKvDxQ0OPmX:H\qsO̻cU1&4 ;) nʧ٤ToCrׄFI 'N-N@R=^l.af>/8n9eu68 4jw!bGuadEb lTQ&^<ē FN=V6qK`[^`|?&symF29-"pbTг[퉗 th 7b,E4CI,TWDK Br~eB?RV =Dh0략9N1>83 K3N@S|!2N"ЋXxsǷ8R~Huƒu[Ð/hu%:ˊp ZA<=ؖ3ۏPtH B% PF[ mu XkK(ͪ$М !T/Cx)$PobM nY aW] |1oc-+"LAUb!D3粩 }pl_Rgi'&V>7M=NY0r¯ni=.&DW0{{}چ߫wnq);]F "B>x4/O^vrbg}1znӾjy xM:=ӄ7}C%͡ERt_w׈5<逄j1IlBƑX (D埔OPNp FEvkU7J610AK.#yn+!4Z{ jc HTЩ+**ŀu`'PZS 1/DHg͓bn:GW+ ݀Lxy_XQngbԚ.~؞Z~<ƛe&\܉Ssx g1, (TD^Q TgSCI8#bmJjâsBL,5HAj"h` !3[6»s:}8-xVYs Ҽxr !^c43xHEDcQ W6ǠcdRgVJMD'q2@(}LZONJQx%0ė2`*6c{7Z{d+o>WMKkT@VC շw/~,¾W ɒxrzr;L&HaN_!)qP^^(e|L*ؘjhPH}U}eA Ԗg<E`{(oF¯Cʀ+K$Ϯ!}F7~l3W ]+u)/) .cLՐÑG3 ECsXy7j ,哩 R[}\^/zOM|(p'|..l,ND9OAaAsFYP}lcoBWAjF7by05KOngb^fRtS&m?۟. D9n rLթ:kyԩq$x(ӃplUK!D*:i`Yw@%Ζu!Fҗ㰢Ie"A HPwV({_:iRgm{vڼđ3`&m A䏠̒aUYCiIcsٻndx9lGQ4;U7/h*.{a k"no)'%q@7킩iSõ]?p38~d!HpipA6j4B>n]y.T  v$ߓK\~KA0Ƿ 0-:? ĩ0::!~\J0;o^?PkGz`̰=D :9!vx=8)N{"TEMa+4 `&ב`:p d\l8Ufۛv[$AV" 塆O|v5/iB\mM6 zkmq6L$pVc:9QAXt1rު_5F$_ ~JP^3 ~K =$"; |L|D8ѓ PuFt$ևa/ Nd[ߥZR`~,= cMW6DZ'"py Xk<u`5]%*X j į NdQR7SH_$d>>ǹT?7oU Hݝ<}]g0aT.DI,ح:ǀpF5eRdC mƞ =qp`豐sF7Qt cVgFdd̺ZNԻ?O>;KS*vWcOY#֛ܕk.`'QhSbg![n iFhDqKIQ}@>krOX}%a甬vQFstFe%Em~ NR3((_]Ѥ|Ջ j(PeOjƭi瀨½W%o0i.~q2(h258ޗca=^\~ "FeS?ѣL@Al|}-,XnYy. YZ