libtss2-sys0-2.4.5-150300.3.3.1 >  A cp9|o :cK&l;޾cPhvL 4ô=} pA:~?iuȝ Y^yoPd!lQ[va~z7UZ{jf=~gkhs^S[P|NGKF{v4ᩃ=z듞 !CqՃ%8{j'FCO HzE80Wdp@]X?]Hd " 9 %FS iz       (2<dl   (89x:%>Z$@Z3FZBGZXHZ`IZhXZlYZx\Z]Z^ZbZc[d\e\ f\l\u\$v\,w\x\y\z\\\]]DClibtss2-sys02.4.5150300.3.3.1TPM2 System API (SAPI)System API (SAPI) as described in the system level API and TPM command transmission interface specification. This API is a 1-to-1 mapping of the TPM2 commands documented in Part 3 of the TPM2 specification. Additionally there are asynchronous versions of each command. These asynchronous variants may be useful for integration into event-driven programming environments. Both the synchronous and asynchronous API are exposed through this library.cs390zl31gSUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxs390xgcc1c4f0aa86b205873288c347040032f202798f7a10d225c5b9faf7b0434c7f4fdlibtss2-sys.so.0.0.0rootrootrootroottpm2-0-tss-2.4.5-150300.3.3.1.src.rpmlibtss2-sys.so.0()(64bit)libtss2-sys0libtss2-sys0(s390-64)@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libtss2-mu.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3bL@`@^ P@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- add 0001-tcti-device-partial-may-be-used-uninitialized.patch: fix missing zero initialization of a header data field that could lead to data corruption if the TPM does not support partial read (bsc#1202172).- drop 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: now contained in upstream tarball - update to upstream version 2.4.5 (jsc#SLE-17366): - changes in version 2.3.2: * Fix unit tests on S390 architectures * Fixed HMAC generation for policy sessions - changes in version 2.3.3: * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu - changes in version 2.4.0: * Added a new Feature API (FAPI) implementation * Added Esys_TRSess_GetAuthRequired() ESAPI function * Added Esys_TR_GetTpmHandle() SAPI function * Added Esys_GetSysContext() SAPI function * Added the with-sanitizer configure option * Added CI for FreeBSD * Changed MSSIM TCTI to be async capable * Removed TCTI loaders from ESYS dependencies in pkg-config * Changed getPollHandles to allow num_handles query * Improved CI builds * Converted builds to docker builds * Number of fixes and improvements in the test code * Changed tcti-device in non-async mode to allways block * Fixed hmac calculation for tpm2_clear command in ESAPI * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Fixed setting C++ compiler for non-fuzzing builds at configure * Fixed setting the name of session objects * Fixed page alignment errors in Sys_Get/SetAuths functions * Fixed potential buffer overflow in tcti_mssim_receive * Fixed invalid memory alloc failure in Tss2_TctiLdr_Initialize * Fixed list of exported symbols map for libtss2-mu * Fixed resource name calculation in Esys_CreateLoaded * Fixed keysize of ECC curve TPM2_ECC_NISTP224 * Fixed segmentation fault in tctildr if name_conf was too big * Fixed memory leak in tctildr-tcti tests * Fixed HMAC generation for policy sessions * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu * Remove duplicate ESYS entries from map file * Removed the private implementation of strndup from tctildr - changes in version 2.4.1: * Fixed systemd-sysusers/-tmpfiles creation without systemd * Removed expired coverity token from travis.yaml * Fixed uninitialized context of FAPI command Fapi_ChangeAuth issue * Fixed handling of tcti pointer in Esys_Initialize * Fixed usages of EC routines deprecated in OSSL 1.2 and greater * Fixed FAPI handling of TPMs without stored certificates - changes in version 2.4.2: * Fixed duoble json_object_put call in event log processing. * Fixed memory leaks on error paths in FAPI * Fixed setting of FAPI app data. * Fixed size check for Fapi_Encrypt. * Fixed computation of PCR logs and PCR digest of PCR logs. * Improved comments for FAPI authentication. * Fixed segfault and leaks in FAPI * Fixed Fapi_GetCertificate for objects which are not of type key * Fixed hierarchy usage in Fapi_Provision * Fixed ESYS Shared secret calculation * Fixed doxygen warnings for FAPI docs * Fixed copying of primary template during key loading. * Fixed some wrong format directives in debug statements. * Fixed usage of hierarchy and authentication in Fapi_GetCertificate und Fapi_Delete * Fixed unallocated return buffers which may have lead to segfaults in tooling * Fixed usage of persistent handles. * Fixed computation of the size of a PCR selection (Fixes #1737). * Fixed missing hierarchy authentication for Fapi_Delete. * Fixed uninitialized context of FAPI command Fapi_ChangeAuth. * Fixed computation of random value for objects used for sealing. * Fixed return code for event parsing errors. * Fixed NV index and path handling in NV creation. * Fixed path checking for keys. * Fixed Fapi_GetInfo function. * Fixed path usage in Fapi_Import. * Fixed invalid settings of default flags for keys creation. * Fixed handle usage in Fapi_ChangeAuth * Enabled all PCR registers for SHA256 bank in the distribution profiles. * Added some checks to Fapi_Provisioning to avoid nasty failure states * Added a check to prevent overwrite or delete FAPI storage objects and directories * Remove obsolete test fapi-key-create-policy-password-sign.int.c * Checked hierarchy needed for EvictControl for deleting objects in FAPI. * Checked event log file before calling the TPM in Fapi_PcrExtend. * Adapted integration tests to SRK delete checking. * Improved presentation of Fapi_GetInfo. * Silenced expected errors from Esys_TestParams * Added man pages for FAPI json config files * Added a check that prevents deleting default directories * Added a check if primary keys already exist for Fapi_Provision * Added tests for derived persistent keys. * Added test policy PCR with PCR register 8. * Added check for deleting of the SRK. * Added test for sealing a random value. * Added content of the config file to FAPI Info. * Added a check for valid pathnames in keystore module. * Removed unecassary code from Fapi_ExportKey * Removed obsolete LIBDL_LDFLAGS and replace it with LIBADD_DL * Removed superfluous policies/pol_password.json file - changes in version 2.4.3: * Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be recreated! * Fix bug in FAPI NV creation with custom index values * Cleanup of leftover sessions in error cases in FAPI * Better error messages in several FAPI errors * Add checks to FAPI policy paths * Add checks if FAPI is correctly provisioned * Fix execution of FAPI policies in some cases * Allow 0x prefixes for TPMU_HA in JSON encoding - changes in version 2.4.4: * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix memleak in policy execution * FAPI: Fix setting of the system flag of NV objects This will let NV object metadata be created system-wide always instead of locally in the user. Existing metadata will remain in the user directory. It can be moved to the corresponding systemstore manually if needed. * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check - changes in version 2.4.5: * Fix Regression in Fapi_List * Fix memory leak in policy calculation- 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: fix problems with policy sessions that don't include an TPM2_PolicyAuthValue (bsc#1160736). This bug was fixed upstream in a minor release 2.3.2.- update to upstream version 2.3.0 (dependency for jsc#SLE-9515): - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/sbin/ldconfig/sbin/ldconfigs390zl31 16613108602.4.5-150300.3.3.12.4.5-150300.3.3.1libtss2-sys.so.0libtss2-sys.so.0.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25568/SUSE_SLE-15-SP3_Update/2371063a6332550161cfea1bc7dc148b-tpm2-0-tss.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=791ce153ece645bde0efbae1310fd702a3f62fe2, strippedPRRRRRSg੅7ى<utf-8be284517a63158e12924537a7bc08ff32d6a6f6c3c27047a9bdb2d9834e4eddf?7zXZ !t/ics] cr$x#Gd=6 D% ["1t*J*د.w=jqA) db&яߞ"P gC0|9.rAyM3m}cŠp{oKȏ{#9駒V8\rr!f`&{ :&8?iw e Xa;1Ic% 7$(a^^j[O S@C+S9,9͈2G*{: fWUq9& Nysx+D2[CX!(KK$I%qN!LOgFF67s) d `|T Є2F>L\T+qB/p؟W]aO↼[܆5&zk͸lp_RYdma4V2p{׵̗p2ܛg%v3b΢Z'd8ڞ6~e tYoZY,lqx]7~5y]C:$LQ&ǯt#GNIQaTMIv.X+C)W(P tD̂jybYR ݎ2BB)Q: =R"y,q4˭1Ƅ}GP#_k wr "^!&Sb__G:tw5&R##\TEuE 2#Z4e[nAR;$uh&nBFE ;ağ!XQUȋ|ҡԿxE3ы H^*PJ#[lW?^ *532a>l~N蜃t.Ut?Mvff-gBfh{bfJDit}7TjYu 3~ _hY!@?g !֘ᯓhqBLDtτS?+} ޛxEFm01Zus-*9Ǥ~-iv%3ώ*YI#\953_[11886ŝbh%PwSK;㻾H˪¡ul:SZa2t"L~< - WqG``tRgcVD A;ؿyht/aZ  AA< !(jI~lsS5kgF%9=ZlE$cpFݿhs /Q ɻN* 2g"oY;Wx;?ɸk\s4GSa0r_fB?Z*k99 w`q{QpICYOUR0o 7-۸N!9\&Cl˼5GgaL7Z&ABtQ`0:;zSꖉUBe3juN70}}%$7MY^M@LwApg̱ަ/kaZ1M(dz@[hnG^%KkkBٷ٘5(_v;ړa(L򗭡N 1N3M~nՇbxT5*id!uvԘ3Es],k(JF Eu?6:EŊL ?:mН7+i+?T Eo!YwF͹؈ɩN0 0;+CBP.լUi̷ m.)ãm .Svs2 k5@ !SƳTa$+v^ӹgL[ :..G'ò,?pZS|KMRrNkKq9b!E\ _H' jNz%=*؟j `\m&8WNJA`^y\pZC l`M8= ZJr_:s

z =о ])N&@ ?Wn\2ʪt IU53mos)PzVf\R?'@߽Z;UP܍O.PUF) U$/t>e@umDzf%Dj-3z!`{շ`v2$7rD1c|NROզ .JȽ8H RF!S9'=Lf !rmR:iV'%b*ߚ6Yz޵9~-#W]V{16?=#Qw&ApKy(1TJJ!%̤Dd  5c7 %56 <$Jg-ȩPP3oߎnc%flU-*9Uv=׿_Y=?% pgz2C2/PApKNjc\ DMDwCto{rRҰW;Lyݮť"샖NscƱ껷Bp٣\Sh1 ghD`RZ:`j,MM %ۋzoU" e["+z;.tI%=-,U~W)2ޟW5K4)8K z] N|ޭ#×f{ v%Yz93p {;)hzȕ֧›>mV`%q4+2 o46x6-~Y;P 5s9I ?r!_\`&'hݜGS.Ձ b;XD30S#Q$ӳ?:v;KnOTPn D:;uam _cj9ElL>&boNBKjg?hb{tSfÆ0ˆ{d; A'פxl&wD7R97C{y&^]@i/.!!#0\6o=.@wY%aBmH@L6bX-`c絧w:tK).ΡĆQIKfX"a e|6ZxEa ߈j-YKhAE3(X/g>uh0aMx)Ө gv")?QvدJ_ 3P*A/^5y 4OIÖUI5î "Z|*dAm7l=IA*Ѥ\FB8ow ,.fe:_ w{f ~2߀x=u\h ')$y M±۴h%azF I4M@#zp]| XoӉv^JPafm*NgJݏgR+6iTWs3pi ZA іcF =lH,(=h^o .ԛ8I& `0B +vGݺo2ʝRrP-AG\{oCKs\Ԁ ^:c{8=u7j]{Wۺ4^: lm4jP(?_$ȐB7ڋ\aۨXT6is5DjV7ΆЀ{u'#ATWMMF/oA?Ju[Xd7YU4whX۶zOX-H6AeY  sI0ʚ)vSZ#13̜~1n&mݝW9>6jo{ ;>bqpi]T&K5"ZV0X@Н{;>!e|~xDw_+ 5&*z*OI x ޟ&V *y^xI|^ =˴&86@{}Jkm m.WYQH~M<ArZVrbH4ق MZ":&g Kyq~o%_z 4 "{^"z7WAG2EWwcJEfd|xZ0/?UViF +7Fl{pođI: gL*JIf9RC=a} ;\3BL[tt 7k EI!vREhS3h?.{Dyжǘuu#0j/rU Uĭ/bb n.uک͔b!Ew3e?T '2ڥa̼ %U z܋Gr64n|Tw[ L9rdH>@FK(Zh)v3uFvpQl5'7P#⽤Yl#Ha9{KW#[ `B"cuMu0u}27~6䠼`R@ڑYR0EHsWDFӈXrHitǕ^d8PΩ$5֯-!& "ɮ)D}Eay<\Hǥ.q5Ž3wzdKi>K S7=ewposMـkDx}!qCm歱aC ܯi}>E<A_]OɁ{ H|$ > .֤ZZ{Qs"PGZ!NXSaBcrO :g^N."+ O:%%ٜ/ ax}^$]\rװ(1R.4ܔ6̜ԉ5xs>3&0Ā`U^9]B=<}EmY<;>6sBSX"ׅ(i56* bGދyOZ"G6lsYI4KQ^VU6|dir x­@\b.`Ek 5"%S{|0 )L1Ek+v[ۘÆ2M-N8L%T5/8U4.&>kZ~Z 8H܍`=hT6R1{háˠt,E}+dZ˲cqHs@ˁDd,M//$e@-KpS7v_# OQF2_v"C8wP{Fc#k=KCOG {"!Pt؇B(xX\5lHAj_+}ر1{"J@iwiC=@$jT3@6eEP(}}d@-k܌WmF`I9Bpe?7 ! sZS vEޕ7Q a[8b嗪 z-UB* 1*tz$y\Y"jxHChe_rg\z/4}oT5%H72LY{.j]+M Q#BԉDϐ Z뙞?̕jWAN1\(!d!r`U []MD͑i媁,=M};͈FA ˳>ս 0Y4br`KqQc@:}zrIό7)p^䠫یƿ.K:nUKQ"A 6,co(6#6 os 4ç+d $c,xSM򒛝SΓۀEHqʾpZcgu/pqݪ!Ϧϒ,8?xtKt%t[J2H6f/:?ԗSB=T4&;iynu탥u55.%eRv7c:~-;8@Ng3naL '}>7,xDָjo _XzRf/{=m").5! &o!#En\ۅ ղ{+P.ұӁuf;a_t\LaFUF*X~RT 8wD+]yKg,x]wv-Xb3c,dr^bt.LA7dFcmWsJyCZ2cYLV@mȠ֡=\YfF@ԑrMQ<&Ђ1W@GU/n'i}z/*h)v>kzX~jgO>N&uujH/n~7eB% 7q؜OjgL}6 iprD`RCňJ ~ժ I*Jh{*h! Ōh!]F  xnw!m*:`aAу$u4ERhjSN&3\:VPgol7];p#N쵅p1Wĭ8մiܹ3O<);;" lT.<} -"Kc<{=Fp.EhTSϗa&1 jk 2<ܰc^if$'4|m`4ґ@a'Ļ\C94sdt`Y@D1^m~YJf"W +?N\ֹ/S?h*h"@$O M 9A8dʷe.j. E(k;Iz~N-MlX^B/-pT6ĒIBR'SY"@MKtɖh#%".>8J7uؔpm8:#\ص E Aw} (j& !){ ud5ۊثmAv*U))U#e)B[t2}d!F[%gi8Ƞ,ʤk!%[Hꪓ5oEEWͥg1\ָwWSڍ<&PA#]a:Y, n&LMz=>Yd 2W776Wa ?oui!!r``lZmsqc4<ݎk _0`z7UMOOd;eSA5:F0$.nހaOث]nxU,/gԶbRz W(EXAc9o\3D̶^2NVn#gmD'#| vrVo-1mv:viw/o}~-J1p}(uD֊B ]% IX;;=B8PQfsKZ5@G3?[E-]װ"9Ml45ms;T)&Pm51,*s1HrFϢZF<}igQކ2κ> 9̭Sʌ{I64 s6WìWg?WW9=)ϮPϋP/HM F64g{zwmV08j3&|cϩsb-Fo`Piwuǡ|dU =CgSxԑc4$tP5הϫteKN!^3,V.v*ߪ~|! ?ۃ;:3|77;5"q\v%\Yq#:ET/c}賭 N@u >ߨ0_߅Ӻ@\;%cغcxFS$qS+[-ԤZ:oĈWPޢZunPu;T~:}+cVAp4w]G"T}fX :#RPLh5=^>P?SxqHϲك\!Ru7dʓ`$KRR䰡XB> ~ZڧI˸* а֤,8b@{=e4 nAM;<ږiTeaM*w%ɫ*+M0TrڪtO儳$!: xxg/VL6 [iL`$cDHJl#Zks#Ɏ7+S[LAa/wynީO3'`fO`b柅q ._G lfW(|UtU"L+rTT>=lւ*^-<'+TUQ3Re+/`V/|1FiW(ӉvcI=r7䅐Qf1Krʖ Ld"W(6NpeZ՘0mw* [.U}wPyi AzY[[UXjx&y}Ț;m_4ɯNԟ5}πʉЄ^9Ɔ{k"@ϻ?F*u1Nqs\ᑹ>{Cx5qߞ)6DŽ$b*~0i|E su5+]ʖaR+AFPRdIt1y @?aqUldՕ Aϖ|rZnYU&/CgtB1NO-u3P' xO? n龱Z4|&! ٴ/Foڡ.:6z.SgN_(Os̉4&$]#=}w\z1=e8#'׍ALZԟBh׽$駡&vd%q1Vh.5{O rzrۆ'=rPL!.IEN)E QLOFٳop79"^~B{rڙ0&ރW2$B=1%9x_#4hKd%1CI.PX:9.ݵ=0SK,V 1/t}K[̆:z/Zp剃6 i'[Sg dW0Z? M7 N8ϙ[J:}4C:"V?cO{L6}dF<-P'9ѷE‹_ ohmQh#-A1cBm9 CCMZsbt&$F=Ԫ ayj`:xI:x:fƕ 8V6EAѐ/(Q4R+a}"Рmfi`x vI۞1qLѕI-ȪG?24I|ͷ A,Jt  p>jhE>p_*[[".G0:L᷋Y}hK "ͻ<2$@ɾ37KLl_#nwzsDl';E"T+ yTADWe~>98j(b6iz]_#6fHPòGSH[I;p ]d>XgghpV/{~0 y|Lt(9]*$>IpkSԆb³ .[/yn=JQ;ZXx Ƈ»xnh15b!K*-g=ZTmv%N6 [-yL ^;Dt$ G[a[xg<\fnW!M؇g?D+lvja4PHd)u4]L"YVTA@ OA2H_N(Wd V՟uEۙpq5h?@6;,j^Uůܯ\m$B?U/K9qHC"_Gʅ$ǁJwDr3g &hO%+Ylҡ)9nU= &]/h-"K`؟Óηm`Tm ntA!B-;XNcE钘V{V{eĸ(AXn'K#>=$sx1[o8T G3Yr xv Za\: _е2`Δ?3PL5t圶YF}yiJu`9AQZ8?ǰW8t1&|d?Y 9bՃfw5o'0Tx͘Ԝ=jHw%<%ZI![_ uiun/yWլǕ!+2T_u^|,L]7OpO[MR/&r0J}(Fr, O>2j?_"TƬHu[BU;+$q:{mO|52öH~mV]Ӷuq 77$\A2e晓Wej^"oqtkN@A6WL@g? [<6Cދ oIR0h'Wݼ.ԅ"<3+XL|5 T[골͈1]7ݭ5 Љ̃q!4Y%+|pfKL2tHlr6:GDLgMkD5\oQmC[j4B7ޒ嗼P259_/4]Kt)%-X9(@] 2JFVx2O zZ{ϵg^`ҽ(vU%4&rwgS-_BUd!Asq}/:6x34*fU`9oxMby[SwFdp7Wd;ߖ֌ȅ pRp qur !ǡ!Ud 2Iy Ood >:^_^taǮjĕE0^ivH'ı,ôkhV݀ xzq >|mۇ?C#CͭmeWq΂>2ա-ۥ5t 9BPPt%fL%~}B'٘uO.lnIâ2tN( ̓ ~6L䊅i[_{BWjK()GG4oL9HO;K(}rS3xK@S;\) 5 ]x_ZT 㖟:ڰ́L0Ho !ȕ)S0ÖM'i2.Yx9|`Z2z$i*vxZ)˧wѭ*öOT[SKO}%@ JL % 3?q%Gh t w<ą8,W,jrmM{-gMm;e[ۏJgC]` HP}%Fuq n3 -/ysꄼM~G3KO$Zu`QIT WPVp4VPPtT /夛w:`<4w/\aѬ$[ƄKQ|}/zhΫh X@1=8AT!UnĊEzi5]\`ܲ槬2,`ʅC[xz1myMR"jaF2Ó7/h:w1i9;^+r!MX~@|*UWyWSӏk4D gڳM%9+ ~yg\RC9U]v$ J"L'v 6w"T@酲/c`WfW"HcRN-hg,_L@g5i~-ʲAM 3!S$7D:ΰ\/j?זm鬾ZKu=?OqIk3<[lS8ih=t#!l$SXz25VSj"Ɋ$)R+(6W튳,D=WT|rj-ˤ$TN%E$a70EV :v@`ި0 Wz{ˍF*E9bo R!Kvkr`#]Lk?\HOa'򠹓0>cDiu%gQk G T\`~M`qړZ{a|]? xfWO 3MĘm׊w0 MO; hPƩTl̼M^_Gh/=3g軏Iui /ѱ7MW{hMZ,QBS"1v(\{F.j?RiHNI<7ru*g#W_=ܮnL"1/54!&p{exYJ*(Oq阋U="{G*-$i1o fu 6Ah O+mn?KMP,sf| vN1tgNYRp4{{L l' .[dɖQ*}}@$:).ClHw  auY5/v$}٢9V|A!8Ҩų)nq!)+9axglK^LWt<4HXo'o+\qKl@fv!VxQq1^P'st>Hi1GU(Q6AZXk䂕+YOL#SI$i0Fua宦\y}f=vNqi%c9l =pMլK*|Wڏr7BϚהWmlK/@ѕJH [)lN$El%ӿ`n iM9tfLW 's51W*E+*g.m[ef%ђ#~c' $p4t%ٟ_#1DZ3 $h@̔EÌlLj1ѦIx\q3QuJA5s*x(NԴ 0` [PY$,kZ( 3|\Iw"a> -,_|P򥼌ɈRN38 mof+|?NwL8ap Bno &*z~tk?Hi@M\qX{ƔeYٜ_U9f3?JSrKԱsV*cD!m*Ģ|l< / \r/L:X&#8в WsnyS ~W Ũۏ҇?\z_&)ݥHiR:>k%ʲD-Zf%?7C`%f3l9D%=: u<Z`1XhQu\8lܓ!~ѱ]fr Z u[p.;`PaX {mvH Gr%1­53KyN1'YEVsH[CLLQ8YIeIZBjة9wBP3dn 9q[x8N:,3l#̌s OPw5Ԧ!WhꑄʝЁzbDI#6[MoɏH㾎Nӕݟ( ZhZV$(=퀧0ex*v(hF/9Yx{΋+01-j+zUzuMDq AQ1.{Z#/.ݒ?o57yr)R"3&| L'|\΀5bzkΒxF^.ZsZ۔)?rYlDPJt wRƯㆨSt0x֨XieCh'Z I h{JBnd[=Xp룿C}B|CPf QoA_r^֓5:k5 l͓OQOXFS4Ak\.@RepTZxKc [#  X;Aey염2>Mó>568I5yX1w^rʴMXoB :6p'*(ݘx2!܄ !M'ǪZu>c/ײ8 ͱgn,r>S&A'N_ <K*qrR1rT=8FVBk^@$[!Cl2. yZ/< o9MjiJ.#y:=3TC.H=\Fξ`{.*FH&"G9vH֕+TNh(a/%ot]eK_h5-R᪤/֛RG U?nK=+o4L0Oihm6B,%0˻å`yX*v H+f#LbG#F]fZwQ qDf 7*HlbgS?e\j%PcsGro-ڝXvx{^\1k7{vC3(?*`zS9q^ܽn?>\PU[yF{A͉ƹIck.1ĜMxk‰WOjtnڃ5`.Z`n!^S-^9dF>-g{2JAn WiIelk.Q- Ͷ*-ۙ!`v!H~r dX ֧O9!rHBO9d鈵S~^<# W3ؔ$#=ߗ Ҽ˿q ΋($12)sm@FuŽd3pȀp!o{-qw&Rc(MluABO!²@p#ws7M⚲R&'.oCP@֫U8ő*Jf b0tfKxmnޠg_bl$Gas̥$1lG 6k1q֗9b ȳP! ͇Ƭ0˲,_A0H.stGmc*;%) w[Q]z)$n( 5O͡$gǑrKJ7@7o}YѹxXBDtj )Wuz^v[E FKA+ Q <g4يB=&?w-G=洄VkFu87ƠE-!Nn*;@Id}Ac\I3n[7/pZX2[:OR8nL-%a7&ػRv-co7rvοF)|+96lV%\D- ZV)/% ;!#FPŹ&r2:l6&2*1c{z}$y$@ſտ6we iL[Ȅrz8KTSç[ 2UɨMT-*ACC; C泥LRKre\ {Vr0\V8[]mO٪-~9ueV0򟸠Lpjډa9DGU-p*Jk@ʀ nDX4g, $@ L!ҽWtYu?fK GAX^Gl/5!}ÖD -dM{u4:\&1w.ވ:@BEԀNSx8׏2c޽i3LOㄤD]8;[(mtŊYߴ"kMW(-J3 *x ѥ01u. T,c mʆH7ngq֓qu]Iztb\z4ʱݲU<d|ks!}%zGܘRjU+MV N\SGæͻŌwS>ZH} ȈpED֕^sPZgzK1*V"y4H|$<^2˕,YH ,2?@<1:?,X,?9IL^BH-BJȏY!zڥe? V+~ m_ňˤ+=6X@-/M IQʟm݇iH){-dXzK Iy?JJn-D^ o+23wo QM7_ hGn Ɠ~T%C͉[x19S)!mZࢄơ{8r|[Jyb4K2>poVt$ mᚊ霌92?k$\"9"<+ue!â-nP?#G=)ŽSzlrqP@7v)mے=Ά½Q5I`)sS@&G祽Z 9WU*0<秭Jwa᪦GTܔϿ^n)z8B j -{-Xvl341ɽnn 2Wbߑ*o.DO"b> ָPVJPHuQp,W e]Hkwq g\I )Ý #3yG̍d$_]?3!\:͝~_ g~a$2f U)7HL!h|JA*9zO8Hi LMǞDM>NݥÑ x_m]8 7Lv `ИFRDJe"k|m'ZJZ@\ʳJ[I?vU>[XʼѤ/~jSJ΃ ϨlJҥ7ʙi.Z^6EV#"R -I/^jD]JA8✣/h K5~Qu 1-caaŇ[zЖKlfJpv~0J2`w _Qc0.cFn!0x#~a1?U?K@,5*kj#DV4$fc:Q<#Zf6I;,1Tͨ6ή=1ɞLWQv8xԅEHqk^EmQ8$c3(r:JyYdƍ(Xj:pͫ;9}oaˈxd~]b2"I t2z(1yvB5j5 yeʼ,#@~mb}՞rEJbiz/ZF|=0䁭y5`Ҫq!S&U,d#ʆ ~}>~T][sT:}VG;؅gNpnҬ "\twyIa;t92KzZIဋnT:rVpBƻKs] }洕zGn70Fn%Șy6nͻٌf!vƉ<ڟ P noE4}vTbg ]:[&^V'җbJ>t RKij?KZ^('K:4 ;W .BC-ic5+;]],קvڞ#g(\%TنY,5J-ɉm<>Ɛ#A7(>|?L/&r8& *R:L h;>isCmѲv6 ytc=,7hL>Hżr ( *rdzYvk^g˫P SE;Acz1Tu< Uds*(̧NqL+e#ܱIJ?2W,Ά1f)UeQJUy3ZF{&qQ8H@қsZg.q~NItiž%L\ hdqg&e-4#qV[M991g c @i)KГhߺ_n0w㙾 HTM/l,9Wrd86m f}1Z0"?~Y]ȍ48o]cWJuo//)l[[DཝRэw]$3u"Fb,]DIâ1ZB- F7.8]ϟ˫_0רdDq*rR2M_|]jan =2}:2 ޺`tcRf*jv_Ǧ݂p[C[070^}I(-D?=C= g.£0H#тt5NAH(v&V:+Ж&d^w*9=c0HVjekXx7L¢syT;3YOxg_r#ԺYc 57߉J3!k-p H8kdE$^hx Jpe'H^1fZ>@Mgp y=lW2MGjɇQC!Kol+a|B}:䪓A?6REX!9suWG]뒮!*"3WwFAp時=E1,йɘO+S+m.ƖGNdPVn£+%["n7\"] v@m7AiE nMXDz(`݃&:wm;>Rޙ0 fp"n{w6馣/:׃?dp*P{ԯyՇ_?Y{rH#= <u Qk*.)hF7E_`*`[= lpI3 >< `t;DrLLV6{G^7Zj-/\{i|Fزjգbݲ㉍t xEαtf0UIIf/;(̫ݙMRqb0m{c6.guZvo2s}!GUYJT5%!m -vlvX>ݧ>(۬8 V2c0SF?ؽMkPFY _x ޤV.=֟iT~}bnn ^5.parӵ/{pq9X,fھ6J=Łm U`0L y]q=Uz3gu;ʊ$Cx lD 3Ӯ_G  >YG| jV P\Nߛ*4 ) 8.H5y`k2Pa%6PaAX•B6h%϶gޯhCStu]Ic}6(MPp@:>dsm8 ^ V<=:g䝗i5"y;U3*Xͭ4! %>}OiT #ޡNaytTc| <>iF tC6Z-Pm߇mPjP?(ʌF?OS ԫ]u`{ޕc< Ul}iˮ6ElF1sq)pEv? >!{ Hl, ixr2l{kpI*Ra+3WB&}^W_1 ]؃ i"! _9=+*yuY=WF G_Pvv^9P0ɔ wL'XԲb]> io*nWcl{ZRF>B~xGogj/΢A;Jj قfE}L׷.V g>B>5{xR-4lgAH< 4>{b& CbZxs[~&7q3?J}'Ԍ26IioN_z!R.;h"C[;)'i>easA#P%G8m_k\|?l ێy:^|zR'vp|:Q-qH]KZ=0ܔTwߕMrmT'1 g$ 8&IXq8ÙL*T٫@ܡMEA=L;U>zwJQH- z, 502ږh[xz2Ptckq#ٹZ,Rȍpr5|ͳdAW \a'XHWKR4o9j34zlj,-v{ǿ7ϥ|HǛ>ydh"2 9(`%H+B\|Ə\<ξq7>p@"SJr\=/=ΛzWu73xxc2Y qZcSƍ11 GeHYhSF)4,1,;1hTy{d> B-`n.[P}pۂf$[XWuYƙ 5۱2%Bn(oT`cw8w[ {0[ sMFTLq!WȦmŘA߰A nlx.X1n$C΂?2 $f %eT8wfMpHRyxPj>YfeGAB!sзV>rpM-)2FrHqTX^P>Qo!Z,S{v zF0ocpBKw-g]"*Uk,{›蹤 2,㔋M쿡/f5uJGzbgɛ~*r\zJW';ln6W+ -}W,wZVhM*nE2W@=ҏd;QmG`Ӂkwn XltK?Gb gmXUS9MjYLUgxqOg=<n!GTl.ząS0$M흩Db#Ed'*%<6@=*Xhho =gso -Vaq{i5M0> bO0!2j VuFB^bUF#˓;2;CuCDPl\y<ʕٰ !Tmw,~74uPd>#/SVGіɻܶ z>MG㬟ܘk):1N8n}>q&%:A jQH6Ƣˎf.hMLN tkmnTrKe_А]=d)qzk fsz)OjYvsZqow}4bLN:A #;Z ē'80cpeN(woge`.ۂ󕎎AnvPX&LߐnNMfglRzVKy6h&2wczJWASkz,oopl|SiτŷXbfDrRm|pu 3,QǐÒ[^U4 $vT:ɅMhAOO=ιwкNԑ0ɕN!ѫ=u2+vF ]eִE34gPZ싗̨Unh 2sήK`G \HY.U]=*G9dU7ӧo9|D@sTg|Q uۓlS>|r` 5諵{8ja򺛑rK#.nA6KBϮ"sVaWuUkxh޸QN0x[8x$=V!O .'q]@ij7kߡ$`-xkpz4L+F=Bhd[olEUnDžά+/F_qgXXF'_\Ӎܮl % LEbӵg7%I NϢb\soT  #)_sW$eP/nO eJO|`l㈣HxHsJfVU%h<Кyߟ?eHԇ|qRZNd(<"hwõowp\x{A)pIyi:aȶ#Z| ~5- _^{_md0f/eͰq*kJF:]΃}( PaV3ge?6 :)$&"/L)ib`{pSUL:qo~=sO}eM #8 C` v;4 MgR3Tnih"C$hV Crdeü ]uKֽKn.޵o`.q[z[>|4c{~uO?{ ,2/:Cq|n:MJ0K`[Eu(õKgmZdvF55 kf e(|諽-rwMX{WLM&UVo儑Ul"f*he~ڢb.O_E#3P #ԗ4OKy Uf*^C⫩-Q6kWuGwݝ~3R*PXaKWT(5 -R , 7K`8E7> Fߤa1L