libimaevm3-1.4-150400.1.5 >  A bwgp9|5mL}D,]! 41bJzTy;V-R?oyБ*~=BšUZWZ((:p&z155)';3+]dw҉2v0}S89ֱ!ݜ晸#όqObkP5Pm}7' i=d@|;M{跀k*Pd }4ŧ-9O>CaۏٯNG%]8mt::Ͼg)S/A6ҕoTN7B*[?K͊74Bafmgˌ\o =,]>@>p@.?-d   ; *;flt     8X( \  (89<:>)@)F)G)H*I*$X*,Y*8\*X]*x^*b+Jc+d,Re,Wf,Zl,\u,pv,w-8x-Xy-xz-----Clibimaevm31.4150400.1.5IMA/EVM control utility libaryThis package provides the shared library for IMA/EVM (Integrity Measurement Architecture/Extended Verification Module).bwibs-arm-2SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttp://sourceforge.net/projects/linux-ima/linuxaarch64 99FA큤A큤bwbwbwaaabwa0df3736d919f9f15dcbb9f0797a45a9025e1683b0b10fc4497124367c6a59c6344bdbb321292e8c0e2984d17c9564adfb497800e41851b9d2ae20b14c01f6b8c4979bbf94c12bba64c293a759390e909c9bfa63103c4a1e9acce085efb6e30a72688f38076022649f68b81ce52ce35abe486091f869e8aa342d2f5cb355a050a8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643libimaevm.so.3.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootima-evm-utils-1.4-150400.1.5.src.rpmlibimaevm.so.3()(64bit)libimaevm3libimaevm3(aarch-64)@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3a__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.4 * Elliptic curve support and tests * PKCS11 support and tests * Ability to manually specify the keyid included in the IMA xattr * Improve IMA measurement list per TPM bank verification * Linking with IBM TSS * Set default hash algorithm in package configuration * (Minimal) support and test EVM portable signatures * CI testing: * Refresh and include new distros * Podman support * GitHub Actions * Limit "sudo" usage * Misc bug fixes and code cleanup * Fix static analysis bug reports, memory leaks * Remove experimental code that was never upstreamed in the kernel * Use unsigned variable, remove unused variables, etc - Upstream bumped soname to 3.0.0- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xsl/sbin/ldconfig/sbin/ldconfigibs-arm-2 16519680241.4-150400.1.51.4-150400.1.5libimaevm.so.3libimaevm.so.3.0.0libimaevm3AUTHORSNEWSREADMElibimaevm3COPYING/usr/lib64//usr/share/doc/packages//usr/share/doc/packages/libimaevm3//usr/share/licenses//usr/share/licenses/libimaevm3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/e4274af5541b1fc937ac62b987e371a5-ima-evm-utilscpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9d2804b1bcb621c0e8b9af3a724b23f27e71211, strippeddirectoryASCII textPRRRRRRR&tYN(Tutf-8f282ba5f30732ecac9b2e3b4b6f2161bdc90e30f5f8f56ab39a59d2dc8a52ce7?7zXZ !t/?X] cr$x#F1CZ/j|.xºTOvќ;3w5 ڬFLh[}T||mН ꯲8[/ٯnEH~QZ&rH9Ov,r}Ess'GϞ 4M cB0׬YqX.b+6c.Bb:|U oWPoYU"HR1:`~eg` 㫣M[M|0HbNȜH>wZ]ά~1MI7_n] qZN"tǐ hȚK,zp@*gp{>lsw dL룔iSۙ?`>AM`%mMJB͜sP*!sB|hL3$^į3G|(%`U R ED/#mrr svp)8(%[dUra5| gv`\cWtt\Yf|bk6}I%=Py0r޵n 7J/x_kk1rIhmQ@:,m'8?eOeࢦmtj QbJJC4ʜ'Mr\DSՕM6_SC"IʓCjSd- vt/{ԬBVDz@;JZ fwUw]P2S5lķ oo2^V81&p}S1l2:@HrwIXU <{ڝ")'dGZk_Z@6N29(nLmE(&i\4bv5Wf)t%!7[c Z)ɽ*q8$oA+8y_ oH 6$/N!l5ۆ!88ޏK=O:N>Bq?wYr4!}<'0"hQ7R'D EGH+/#8.fx;-:0f?FT@[ sqSNDZǏ[[rȏڶ/SQAw%zo  KnPDއ@ˀ̺*ɺNZKjS/ x͜|5DwZSM&?5k ѯ1!"1W<^7~?9[ QeNL~ۚz#8"{oj5aʼn?}'¾ F(4Q)*+dYM ]"c4bM+<ڥ6 LC/+Xf:|@=" 8 e85lF2)T Rm).nil]ޞLu+^,jdʙ;^9wn{\>F93]`缌QIsQ׶T 7wVl=r?ϬV wQٶ_ :7Jn>?vUD׬ ~p'҂"onmcPuZ1!嵜@9"|آmYiy74T% l%P~%ȪԖQ Y ?"ÇUAF6RNJ;\Y=9 KQ]wﰪCsŠCߚq sr9=D>2P NLytqM y%z<$1ri)UNj<2mYgL}{Ծ{R@TbjtUT=p>y]O`lP{jcBC7y>?]Mql@7)^!xogµ Eeh~& 5v] E CZp{>\/SVs؉WE?w$U3 ]}!(gУि=Xd=3YPݻM.5;hL(`戸u𶷦ujUm<yRsDe;*O.r%lֿyEdN I*-H`}<&٩#Cl8jOr7Q~at?^\m\ۢXC^j MIZZ){O)h$~oK7od}ʳ芵yo!(-Jiez2$ в*@o@lGtLQ;|;˝JJX92lkXJ XE}dZ8?nW^S1sL㐪6Es03~B=>UѶ:@WA`*Lr3H1El7%waTu@oyL:Q笼L[di:gԵ qo̍1Ah\ 9ysPTA {A>C2&V=AMY}?)m*c'cـh#$Eu9Zh} *E.W8Lzz$[Գz2sEGB +`fJ۳֍rf:Ss@Zϋ[%8w#oR"kу?۬)p? l񼑵~AԀ!z[j@?'CW{$kAjԜ{ &ƊHY63]#w'K4XdIHGl;cu.c,IݟGmt.Կ#5O ^LqKʟKvKC2}7&OIM>~0Fäe-`Df~X,uYbMAa~Ki  @r?r8+~QL)Ieq*?2"Lw) gt2%5g:YQe/ؔrw20lNe\ZZ/ػeWiv|h1.Li(n3cOyf>Ŝ6/^b-lr"= 6ع2=v߃ݖyNSW) Sƌ}؄V qsKd.m͎ U\(A4byjH!<9ˤ@oy j@X8"fjӓ[ ܬ<ݔrYowx^.6cFVEMSCOP@Xu lX %Eb>,j l+*9Yj/KΞ SA)]V6yi=}Y1]@ :'V+ Et|*죲>&S*jB6-yI5j H&qD1ԉ=h<]5=Z#m"7aL=Ýd_tLO Xդ8\bqL+qO*̼ؒ^tR~JSB;a4;H% ~@=5;(Ot SZ{i.PKߦ3tH%mb\V_Mdzsoȟܖ~3@4nNUK3"_ڙI c3xP_П 8Ho9S'LBP}Tj\RT@+__DuZzt@7M[VRV*QUa[ULT{KH%솖1 v-@v_Xg$S"" BZK_#4*Wb$r0GKHهԓ:*=:0_ Sq)/U \Nw ÓrQ8-~fl6+ʦ^7q@y ?UƎ#~C>c{D/xX@<ԦSdl,72AdzPR0@FzjI&MkJh( @GBz5ō v #>Wftzq(DaPPZm٨h+*Uf/S ڻ L B&ܲF7{1?{tXF!YIΈ EH wO]F!gub @`6((v~ܨCYdr6!MdھH*)C #aJͅy GC;ɓViEv ZQ}5L |A5!DwQռKJͭ T̑6Y>CwOo60N >v+5Z"X]{XH/?ŋf8mc`$$Cm^5 q+rկc2zB,kSFNyI f˿ >8uUq-̙0Ge#*C]KFeZQ_a_ZC:>#u*2!afH>;<)?xY3IƩ,oopf g4јV1/m )(ĭHbGM* OfRF+5̫~_y"FLFE3] ><7]2N^ .=]搚 o R 3cTA ؃>d! }HgbU^ǰ`CyC5!LɯRYH4( $@{Nl܎ 5{fPI 'KxgkQ L mMZ5~Cb?Qq "|=Lf4QRY'e2ws~(BO(Bn ޡdf aK:6 .Ѷ'<+ZՄCs 6l v!Q-$|ۻH?AFI\HD,yxFܪ5 زT'P!t NЁ׌fNݓ5Ѯ 7c o';|hjbPYk_MjS f#vu\(|vLT,7cm(ϊVLP0DR|W48O-եm`¦,&U/(QwbnnDJy^wig# ggwx<s}JɌ~[G6tBY@y.XHq.NB-gcft<Ut[71ɚLB; Iao_j&si`Č'2E l܊ęG_Zm+e|QZ+ӫB~>e@dΰM+I?¦-Xs&zKcŜ}c.AC:RaW4i M 3G02z(xݷOٳ߸ MG'ys2$R8D:fQ(}g> %55Os~VAVô4:x%XeJiE!d -/fjG/t h{ ;ϳ;58(}H g\e^?Y59ѣue?Hqjir_=]ƪ!וUC29ڠd*A"l5 G)bMa)p1Eg%Vm%ڟN$S9ߟ OG ˯ dLl{n 61{=X2Ș_ў"'Λ;3l=e*?,CV3غRkBjAxb)_p^+J A7GC5 .#֟_ ߏ!3ȑeԻoH01)5w|gPݣ\l|vc/v,8-pp]i>.jQ(;o -ϵ7':û/؍fAv }ִ:al=a5lFC0u߯#DkoGG 0 x+x]^~g9II~EjdԭSF9^7 <- Q- ܣyl> VaN rqȠ=07xI_~n}38͙|UDяQJ͂d~F鼖 k7, 5Qǵ (S_ 4DY=apUBBZHx@][2]p ?Zg&w'b pPiB1^d7Jrk{Y]칩|K|7Zǜ͌23%}Ja(˨q=G:Mn`y!Ӈ)vH33/eYAE=_ ׶s91nIyC!Ꮻc(y| WD +4'bʸySR!*Rj`<4ꦬuwYy>3'ǎ+ 1A-W.=sӍF/%_xj2,(\a'CgG H:g Z/Z:I-:B Bil+Qʙ X+_ey{ڃ=1w[!q[,]M2՞fvnfʟ]E)la5ĄYD—1,]SHfVtm>u!`1zi7j#VT<ΚN81PE{D}WOrG#UTE H=DE (]rwG4Zrk+::ZNRRO_~Q՚l`׺$=;`9alJzoլ gD: ,r([+D?xɨ (ҫc, 0| kJ><{?slnh9 :E 8hH^!ܼtq5?$/1aҔvvE!@ŧ[J'}JsA|+}D&ts{J!+ c@d5"&5rg'+AXhtہT[G%!׎U ؾvn.2)>)Zn/HQQJ'o*փV-]6 +{^@d-R^~MS$nG;فI^`FݞFU,lVNcB>*cBZB.kr#:Awx&˯3g%f9{~Q{M(9qehdS5oQ!UM}--c|.)(Ÿqc;ymV=D09H 7@BU8qgDn]8(%Rβs%A%ue$LdI.| 0e~@n:;%l"LxӖοQހ#gxt5$ A@vlPC:~",ˆ4n 33[v y*!daXgǞQLҎ I&UwQqL S)yaD [W߿O$gpuiн#dk;O4Ր+,9ג?6$@k!`PC#Ć;7.Z~\az뙜؏1*$DPoԳ7(Ij1*K4^*!Wj @]tDaHoQ-\GrGֈ$ noFiׄǷ_Bbz83KNݘqaJZf<)S#bh¸%}ذ۳Y ;;"@g{2!;_5( x>*#~C;{!?^XgU;51U9~^ uazMV-dȮ1^\ CtEus_gĊPQ[=n%-Y(z{4Y*:`w-^HqVeM9\}K(sf2ead<X(#։d4!y$p8BLյUEubDݪh0 wS_G8bo3ɰٜt>X :yA_HA D#Ɗz܈/6\#J+6tfg>p(m(t*hQBbNS%%oha =ԎZleJոw a55AB#6|*^$x΁qm u҆ASLqYTn`sljЧS9=KC2TܣB\ZH$TU uӯVj4;%PzzLiܝ* <*OeOX B[%CF7@;0m`;z!bx}wIݦe-md{>ZPiԜ0GAz[xNϮXQ쌽Ugk?o `JYn<Ȅ#ZW (OV4~9V;s70@_H޿ڦYt0K?+b6j= PIv{)fdi6K!&F$ Y>HdNf` >9UW|[)@K21̵1K0(FJVDl?Efuk7WLNHheZJ?~_] >%B5)bqD8F0-K*"770`:$6@ t Zݵu|8"]OÊvPVpշmeCqÒYe!$lS •F& ?_׉' n;7焠!ki*@0quYqI5M@ ]1 .!})١2:% #jG#OQ [|~^̳M"غr?&)mq?#(9>> ^Tb X#!"eH(y>99azRFV%q# eK;q(L^H Q,%&Q˕2@W Ìte_ W]~xp9. nm)8kG*X{ہt ߍNMHM?5>(R.9# V"P<9L\BЦ!P0(S[)΂Y7>V k3\2YC7pQj7g9J[s`@R{BUиkKV_D39 gN%rړrlNJ5* է&mAF=Gݶ므%d4tt'DbsHI3m M 2>9a-)egNj3uі}T#lѬ 0 :Z"89 h/ ,#2þ p:wzӐBdQZ/~YFdƲ0y{̫Lَ~p'W"6뤺nAoˍTw\K[6~$kpZJf<$x.tX]ޫXk(4 83L1`0{oՈtqŧt׸ՋV)-wRpVv;'JKυrܔwZc4C4udƋڗkIxt5ig,5\Kh2=?f;Fa)~2~: 0HSԇEKs$!{ۨ*sFO-anaݭ!HWҡCtc*\$4NG#r۵_Y0ZTMn;ؔ5o&)sZ9y$C07aX; %qZ7(~Mh8\ 6_.Qa ɝ6#\( N`4Un+<p@~GXy99}aZ/gDF:HLNEŋ1+4:݃\g^ğI_w3V7% NYߦm__J2cjID`ô _ ཮ @G< -S~U`DJGA/`i_QԚ?GfvDJn~FP֟)x{XD[xߪ`+:1P(:epF ,+a៕ͤTM޳SmAT>b K4Oq <bmJXdl(HgOMo֡Xほey(ad7PFQ7H"հ25lExO+=LTװ;x+SGk[PoJMY r?'nWl{#gCc߯!>A^RuHBܲ5݂b6_;&گ+ lל,ƒLC&Z ʹŞ[@ cOֿ߇P8O|pRݫVŁr΂]7^|Zhג@|TJ#q/lzPAδqޥ)pKT*|8bGuj-|`Kekൺ̥K CV6Le[@V\.pWo~cЁ_Dm[K6itYǞxkO8m8@)~,!pфZm"gH~fL*yiX.fԷ ALC?,v,rAyatEoPbX(ZvRCu?IMawsVkLɪha_1ALpF"gG,( x6\OEo65R=}?@v1],n]'ٛjA.x)\\zn `vƏäAxz: mSk%e.ZCVIYo :Lr!&҃Pk7FiQ|ﷵU7qB{,22Hl'4q4Uh p_#2&`, ?.|fkVL(&.-[4{`*48bz 3\;AhvW![P+KB(NδpyWW:!-Wߑ% ~:xg Z eYi3c útJ. Yy fZC=F ej&$[RdMQk=)l#v ~TiYp#4,HwCC6 6?o^ComvdskȠXJ-hpsPN^ڗޠ?w~"z/j%ӫȻ+ WẌjH>)$bqyn~ѐ@ypu-aIj]6(.>v`zWy< W;1D^_jk?&Wn&)Nz+eș #pǾU޵=پ{B|v{txY6 s!t0꺅OoIZ-̠(b6ma!xi$~\;ˆd}mr!ÐE}Ik,-ҶUn>v9~xh,ӎJ?~Ľϫ۹BcF5V%$y 3oI㲓LHRye(CAfBk:6bl~At,$J!"B\#vg|/f$i Rhg'6"J!~}ȹjYy޹lTΉ(%}ae1eݢW%f.` nw4/.KHC3_Bg޽"+E_9p!{$ sU-0Kʬ2NQ$@ vkD#kf;F7k2hAm9,KnW໣ʂָ6F&^,'7@]g'^%IF^`?RVr:ٓ;P! nf;"E# םbH ~ej%~J;> PIE2^O|'gǕ;DSk lYrDPg5IiFaz†lnOW5_9\In2-Q/Qs^2ޕ*0.|ƶyjZ5F~]^&?]vz6N?ZW>Svgth0,!6 =DZj,4?D0m<{scd`/_i԰@O n{⩫(8.[▓#16y*RG>G.Yq"X(̝ y|YyuRņUZ@GzՃ%;nq4TK^t#@#*肋Z1m]ɋEK uƇ?*nw? H˨!G{;_,+<&\G2~3_9d&LwH׳Cc.}2 X 9NE ߂wS+bm<%o,}Y4VnLۄ>>]wU[)ҮLZ|r7 >\65WgN 6D|ZrT:O bua{#r-Đ꟯rHMY o+^/%V~}o( >8mqnzK.a#VXd\@PyESn>82sg،bMZ15e 6uth<[UDLw. \ M/ Q0-Fl&ӎ|Vx<4iTv?:~LL ݣtz=*ڞn5mW0?vE^P1hG[1apٕꬉCglKIǚyL{gR&Et8tя3NCzw5rWwc~&.|pƐ~H۲ڪ03={/3N 8pw~8j; %S W*Eݏۿs[篴jC<3n o6(Wn7ILvm"ȒlXenDLUTwSinV }Q{N;tL㣨k|UsG#@`JvIS̗3- Bht}9n>g4p/vy1RC2Jڍ {heµ$EsHYc b&F܅NA]>1Ҫ³*&&ح&TrycPB1&вu:c&Q-:`1{Bf/xa"Q +AD?.ĥ Wd=yarWjl@ X4!FWI)1omKA*{1ubQZPd;qA9s% k";=Gͽ!pYp%Ы(8tQ(=K8$dNwrCB|zz[=~XEzXKvM'?0!q0+L'H>M '>ե<'˜7\BDu\k?OQ'GqS4+ƉuAw=@x9LN/_.sWU?:Wjxo,hTy>-vԱ4𦤗qHm'OOxfCōMD/>8sKu`uIK.PbߪXK!,?^%bÂtoU-hAq1 0C1QuH wReqS6Mu C Rpj;1gk!) ,g}>z+s zvzƫe5ΖَтOJdnJQiTg% 3hꎔIG="J  s>#iڦ%g,$${IKhF }"h"dETv =J5UCٔ8}RV.je%S`jZjf &٠›1%MV[,^jFzPH "ʆػQpYeT:ʲB8H>ur~mnݏ⟵lZj˦I7yH[g9`fZ") -=E apg HI0Ez,;:;Y yD yqhXkwzL pNrq'))>Vʪ?%Ao^XzëvSЛoC4C_DU;42+WdE zXsQQñzN(|Gd*U,b3a@4+b?pF%L(zR_En0tLM\8dCD24t'$x vqó-g%q3y.kwGUv.lY#dސs8]_?^]0.r= L|;8-iVBn|T&sO"G217тfFZԯ 1*d?bD-(.p1]R$|>MZqIlB "jȌ0Ts)>2RdŵZQst*̇}t=0jWݢҭMњV9. 67 |>$]d3fU` kꏳȾߩ;5h;Q]V)Fk?+e9|sYHRW9jCfgJᯫ0f̕R$˪K96Ps1xӬئi{F I{,x]~ChCZm R8P v7O>0?]E!/O遳 1gX\Oy{ry؏O&u1].4* nmU9A\OŞt3NcUVFי(诩 n9?1cp} P]s}nD[*įNe=C.F , ~]O1~T暈+g_D&_e=Pɾ7%=ok*I<Ĕ㯊n \௧2gƭD LwλayO*m%Rvc" y‹$tj,7>繲m o6Mhbj|)+ ?t60D=%1PB-}~MV ~_F槝ÁMَ8-unu`*Sܶ,0C rl, dʐEw M>d>]4ꩿ͈%@YRB$7|^ۋصRE(Hמ&}TGF/$1Atx􍑧bN4P6[ ]eͻu$ti:ZxǫOʒμ;PGf^\p-ZŠ6htay2rDÓ 4DJ 3*lI{L lTz?  >vlwE!E͇KpIYͩпͤV^,ߵst\ 3NǥF5<ޅ"sVVQr}-\yT7GﭏF g"EB:¶aI{Øx:! |%<=D!-"Et\V|B;J&{J̡ \q,XQ[4)ڰy4[lcxyK~:!ys7pc^q$N0: '=#}˶\W G5'C9WM*"X!e['N)[zS.ˋV0ϗKe@iZ=At) L E|*6B|aT#CwHM:uJ cLǕ=',o_B1Z6\(pŴG|\(Drt0%NPUR?,ܡg%OtdО ӲAIh^6<ur;ɈFӈøh٩V?`e* "9Rd4dBIu5"0pu Do3\{0^Aݓ׺;-g\v =˻!s|,W`Xh1dŴq$ͮdz~ܓJ*w;3Q2IDd}p>l1"L'e@ m8ZC=XSA*1ॣVjgB5y3SYVIj ʽ٢ݝZϖװ!!e'|2*M +e՞b\VgR'i{\nuЕ0ehx!Ij&4hipG[UAjPr)Nxf\q +skC?8!Rv+``fIT2.xM3vø}P鋭Ni{(CF!̝u =$u(+}@4_ Jʝ̣gПe,p8wAqU0RZ?٘=K+XN`D ?߅@zXvHYooH*HZ^^J\d#:K^AvԄ @|Xi7Y=We__R"Au#KDK(-(Y#"YH c?ng@Rhq ,zE3R0>iAUːh쬙:3Z؞3zg%oѦiR Aq?NMy@3$^ XKnR^zSx Py rDD[saj˝Ji:Ӝt}vCq9vɏ3k;} 3SzˏEȉU'>LeWa#ʄ( Ikkc;bLgY{!ҔlA-ZϷ))IWIЬ/' )";r/?EۀPmYH_u[FG|v6_#xm@f562.4h{$eOڏS V0QI#Ū{}ic&)?DboANIG dAVߐ\ֻk^M#;pЎpU_޿ʀ4f'P4;EK %%)TVJ1k̜bpp$ʌ+WǼ zE~MR[$ACʹ&:l^"M{Ꝃl̻"5nNp𘒴s-5gLΟ`/Qit<5Y0 Ǭ=Kv³mC;* ΐx?'|U1+9]Z^U",Mɳ ѣ7W`8\cXȼJQ 2zgFtwTW|ӵ8GI[aaZ!`4[3\r vCNżE?L\[bvo<6v!XO&nWš`.nbLaNexfxEЯ]mۺ:΄Td mAn̦ ^-j,OOp wg̏n52#p5Nz;rGۜ~^i/f7t!7 2KEܰH@rrNlӊq( CdfG"`G2o*LH1xӓ9Jb.>Ly0Se.7&e9\iߤ%T=GO?OM '8*ȹ1 Pksif`ˠ|{T6L_3Zɲ{x)׊GThĶ YZ