libtss2-sys0-2.4.5-150300.3.6.1 >  A cFp9|P ~.j0TnuR̄TaOvDj<,e}>xx3™Lu(9lW>-:[!,p@^d?^Td " 9 %FS iz       (2<dl   (89|:D>[/@[>F[MG[dH[lI[tX[xY[\[][^[b[c\d]e]f]l]u]0v]8w]x]y]z]^^^^PClibtss2-sys02.4.5150300.3.6.1TPM2 System API (SAPI)System API (SAPI) as described in the system level API and TPM command transmission interface specification. This API is a 1-to-1 mapping of the TPM2 commands documented in Part 3 of the TPM2 specification. Additionally there are asynchronous versions of each command. These asynchronous variants may be useful for integration into event-driven programming environments. Both the synchronous and asynchronous API are exposed through this library.cFs390zl33gSUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxs390xgcFcF9949c3a8b0f19b1f71ced2c85e284093ba12b4f2d3ca71c2035bb7fc94c87ebdlibtss2-sys.so.0.0.0rootrootrootroottpm2-0-tss-2.4.5-150300.3.6.1.src.rpmlibtss2-sys.so.0()(64bit)libtss2-sys0libtss2-sys0(s390-64)@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libtss2-mu.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3cʂ@bL@`@^ P@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large RC values passed to the TSS2 function could lead to memory overread or memory overread.- add 0001-tcti-device-partial-may-be-used-uninitialized.patch: fix missing zero initialization of a header data field that could lead to data corruption if the TPM does not support partial read (bsc#1202172).- drop 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: now contained in upstream tarball - update to upstream version 2.4.5 (jsc#SLE-17366): - changes in version 2.3.2: * Fix unit tests on S390 architectures * Fixed HMAC generation for policy sessions - changes in version 2.3.3: * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu - changes in version 2.4.0: * Added a new Feature API (FAPI) implementation * Added Esys_TRSess_GetAuthRequired() ESAPI function * Added Esys_TR_GetTpmHandle() SAPI function * Added Esys_GetSysContext() SAPI function * Added the with-sanitizer configure option * Added CI for FreeBSD * Changed MSSIM TCTI to be async capable * Removed TCTI loaders from ESYS dependencies in pkg-config * Changed getPollHandles to allow num_handles query * Improved CI builds * Converted builds to docker builds * Number of fixes and improvements in the test code * Changed tcti-device in non-async mode to allways block * Fixed hmac calculation for tpm2_clear command in ESAPI * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Fixed setting C++ compiler for non-fuzzing builds at configure * Fixed setting the name of session objects * Fixed page alignment errors in Sys_Get/SetAuths functions * Fixed potential buffer overflow in tcti_mssim_receive * Fixed invalid memory alloc failure in Tss2_TctiLdr_Initialize * Fixed list of exported symbols map for libtss2-mu * Fixed resource name calculation in Esys_CreateLoaded * Fixed keysize of ECC curve TPM2_ECC_NISTP224 * Fixed segmentation fault in tctildr if name_conf was too big * Fixed memory leak in tctildr-tcti tests * Fixed HMAC generation for policy sessions * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu * Remove duplicate ESYS entries from map file * Removed the private implementation of strndup from tctildr - changes in version 2.4.1: * Fixed systemd-sysusers/-tmpfiles creation without systemd * Removed expired coverity token from travis.yaml * Fixed uninitialized context of FAPI command Fapi_ChangeAuth issue * Fixed handling of tcti pointer in Esys_Initialize * Fixed usages of EC routines deprecated in OSSL 1.2 and greater * Fixed FAPI handling of TPMs without stored certificates - changes in version 2.4.2: * Fixed duoble json_object_put call in event log processing. * Fixed memory leaks on error paths in FAPI * Fixed setting of FAPI app data. * Fixed size check for Fapi_Encrypt. * Fixed computation of PCR logs and PCR digest of PCR logs. * Improved comments for FAPI authentication. * Fixed segfault and leaks in FAPI * Fixed Fapi_GetCertificate for objects which are not of type key * Fixed hierarchy usage in Fapi_Provision * Fixed ESYS Shared secret calculation * Fixed doxygen warnings for FAPI docs * Fixed copying of primary template during key loading. * Fixed some wrong format directives in debug statements. * Fixed usage of hierarchy and authentication in Fapi_GetCertificate und Fapi_Delete * Fixed unallocated return buffers which may have lead to segfaults in tooling * Fixed usage of persistent handles. * Fixed computation of the size of a PCR selection (Fixes #1737). * Fixed missing hierarchy authentication for Fapi_Delete. * Fixed uninitialized context of FAPI command Fapi_ChangeAuth. * Fixed computation of random value for objects used for sealing. * Fixed return code for event parsing errors. * Fixed NV index and path handling in NV creation. * Fixed path checking for keys. * Fixed Fapi_GetInfo function. * Fixed path usage in Fapi_Import. * Fixed invalid settings of default flags for keys creation. * Fixed handle usage in Fapi_ChangeAuth * Enabled all PCR registers for SHA256 bank in the distribution profiles. * Added some checks to Fapi_Provisioning to avoid nasty failure states * Added a check to prevent overwrite or delete FAPI storage objects and directories * Remove obsolete test fapi-key-create-policy-password-sign.int.c * Checked hierarchy needed for EvictControl for deleting objects in FAPI. * Checked event log file before calling the TPM in Fapi_PcrExtend. * Adapted integration tests to SRK delete checking. * Improved presentation of Fapi_GetInfo. * Silenced expected errors from Esys_TestParams * Added man pages for FAPI json config files * Added a check that prevents deleting default directories * Added a check if primary keys already exist for Fapi_Provision * Added tests for derived persistent keys. * Added test policy PCR with PCR register 8. * Added check for deleting of the SRK. * Added test for sealing a random value. * Added content of the config file to FAPI Info. * Added a check for valid pathnames in keystore module. * Removed unecassary code from Fapi_ExportKey * Removed obsolete LIBDL_LDFLAGS and replace it with LIBADD_DL * Removed superfluous policies/pol_password.json file - changes in version 2.4.3: * Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be recreated! * Fix bug in FAPI NV creation with custom index values * Cleanup of leftover sessions in error cases in FAPI * Better error messages in several FAPI errors * Add checks to FAPI policy paths * Add checks if FAPI is correctly provisioned * Fix execution of FAPI policies in some cases * Allow 0x prefixes for TPMU_HA in JSON encoding - changes in version 2.4.4: * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix memleak in policy execution * FAPI: Fix setting of the system flag of NV objects This will let NV object metadata be created system-wide always instead of locally in the user. Existing metadata will remain in the user directory. It can be moved to the corresponding systemstore manually if needed. * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check - changes in version 2.4.5: * Fix Regression in Fapi_List * Fix memory leak in policy calculation- 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: fix problems with policy sessions that don't include an TPM2_PolicyAuthValue (bsc#1160736). This bug was fixed upstream in a minor release 2.3.2.- update to upstream version 2.3.0 (dependency for jsc#SLE-9515): - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/sbin/ldconfig/sbin/ldconfigs390zl33 16744628552.4.5-150300.3.6.12.4.5-150300.3.6.1libtss2-sys.so.0libtss2-sys.so.0.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27520/SUSE_SLE-15-SP3_Update/6ea9b3b7ec893465197614026402af5c-tpm2-0-tss.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=140708bbdfbf76ed60ebbc54faa5018f9133651a, strippedPRRRRR9Ex?ѭ)utf-8c2fda670accbd24d2cc7f0c1c663b21aa6ca697cc60683f883f9aaddd55cc335?7zXZ !t/icp] cr$x#Gj"a4g Fe/ϋyѧZLOW\si{U/Q5jMH:zaX" \/atBaDcN=~J҄!BiR5[^U bgv䄽, *e !\#-~?$VSŭ꽂6D0fprk-v5sʫ@㎋H% Z6EPG==+25\lB6$+(AtVoZ#ZP-SeI˃5v/GO=Eh~BNzPd%LHNSO } l* +e̲h/*6h%\0› oU@< c˯9!4!Wk .EVza/̴ņ Ds,<|/Ş.VWUߍcT|ceCi*lj?}bS]nxv*>S_tgkEyaL|!fu0z{vլs=gG ih]vԴpא>qہ0a _ EFYfXBL18qU:7QIiI9vinQ?i;Vq+B~2˶0X]e1|O8@IxֆBXWU0>T,-,'׋y |a1:P33}{)E@ruQ\1Br=3 ^uCEnld*įZ!^8ut̘aUg\6ZZ=HYǙ f`}f>>?mLm4AБ^T ѡbW<աK}_)d0Oۯ8zŌ/뵛CLnyϴ%˾)ZaGD{@/Z`3~(niEhzl)+h(W'_J,f,-3>/y4Ӝ/ٲ#v:]_,f?ݝ =M{zAUC61s1AB,Y1a W6z,GSAg2\m %(Ly#V\|{叁zT!7T}W-nJ9P߳4J6; RHx.ҞmoY2|6M|躼zG5^^crŌBhq 5Mw7 ]/|51B-fEc¾7ߎ Jw::U't 0sd#&8②Άv1nMEgbLot,Je/;T)~\*eb_<L% k</> 7T }'ux1̐ƮsfZȨf @,ҕ7g &LpڱodFzK&jeE+Kh4? ?DW/U踨_v"z`,,qizl? {*Y)=e7yM'1xwz~~Pal nkwp#h+ 'bBWͶǻo&(xܛ:e#Opz"Ƴ'C;IS&>di~kqMŠ`4 :zapH r 6^yv_o燵闰lxfvh[Px#"^Hə 1E71;C@kvR/}ui6HKw\)8AE^=N|썬  }@;w[k^ -@nO$w&@^ۃN):>6k3v܃KT#Dըͼx}TѴHR8XWlazmj{z3JY IB 񎫑z*aȘ!ZmXeC+Et֐e-$-f&I[oߺE?r޾v8'[q4uӄIbgߋUs%nB3%Ԙ3p_%Z> gBm&Bׁ|$*n:_RߪfPvuX#Eô Vƻ\Ʒ8IcU+fI* ck4gho0z1EQ.1ukDuȿz3'+fn" Z`(Z.;Dޕ|CoV'#nSX8~AL2%Hd%A? %0@t_+\>Y♻xh3RiloDikwxDpۗ^y0Ni ZjCHf_Rj~%M??jG8 aֵ2~3Pq<腤G XxPJENҎ;OjL_X90Kv!f{t B`@~b@HXO28"x+۰#'A%aFIEl]O 5uZ|@j!Z` ~쮁&D 2h>Ψ.Y"! )*wS~-Q "=S]ZuĂ^rFo1h$0/`*bn{@.=%m3r7pSh=UnW+VfCBK)D/O-m}Yڗe8 JJUX)܄sW^@ T_;&}JP+^^^_\~ ue*4Zm^\b /J^e\ZqF Oa,L+_nh EbxMIs;Xv5Z(RW/KIJdk=f@ (f'!Ͻi/=լ~rI~5g|f ]t(P7=;'}2oJE8 YU4 Xhme#+ C  ,"5 IRViP_ m\)B5t #Y1D+v r3:1qŰFnVBVllupb?XU <ۍ3)`E Lj[/"u*]c>c&$>sBw#M\1Whsk+ca!R AJγs@&ض%\5PɶA|cyxIF˻f0 yHyt#N(˼?fd^Կ3ˊEMt?S=oǾ!W"K@6urvOBnMf^5AFTjk9NU0aS>Z>NO2x7f>4 o3l8&=Y?a3Nq^(lN܉%GNr=c(^c,4eluYb.C䫷 &i@xBN5߬|VS<:[?!nlO38oε,mCA8xZ˕Nz0Peeiy}&ς,028GQǪ&:M@^Ϊ29 Ꚅ.=O?4ѴUSO2hteϺ-YCD!up,` gWceߗJVǀ*SP дW\ N&lKє*pU+EXqOfpDQeB5F'}fiɗpUM 3RZ|Pn]&[ jy=%{y n" w/gz"ݔ;n=[{%%~xovΞL8Nh$sZx8bJI8WTr{B1Ug&dcs&Z+4)byO: s*dR5R)حS5v2+S“Zx.q6ןe5'ߎ`NHm^-;W%H NC]a=YFkİm".bY%/l U%J q,dFqqgvnP/f ?UM۱'adƎRYN q.;5WonC1"/+CĬ *Ɱ<CpN0g[de%B ^Hp%%X.dIJ:HHj I%eu %ip3ŞQ(3x{cf B.a/f /q?#&=" z/JN Z NL@]VN.p%UKιprC,6N8 $:X n3l6N¯4󧨰YdB % &4{g Q^HcSAA6W8}WQ h Z4h, 6BM^;Hj}&7~̊ Ct>K 5+lB>fBi`Ln\G]}n/OԙZz ;vj3>xOml˞0[! j*jE~f˜tFh`[JJG躟 l T rޔ+U:+zt۷+z⮺%:/%h2XĥVylZޜܣ~nƟfiƘ+r K( XC ,-mCp眤Iʅ0BV> U ϖ#`IŸd@^5ZEa~p!m7Ē-'yl$KimG[b'J|ʘyRoZ?M%j1k٣#*lc~Gx,+lPg| o W =MV r@q6yߙG5t{Nز۠&]_A@H3.dYyq**cj)ھ@iD'a= `"ud!0D`aw tȐ(Ԟ99 9uSD?h,uPM"[7h<~݇]ioom~%(CcQPy!>b yqw8K*΍В֗~!?tw I< > hy1\ߦYA Mn`%v5ȑM:;jƑ ; iC0_( 5O/\QϓvE1u4 TC띫=I^jʦ2=X{a0\ &kԺR-ZnU6FhPt=g%F@'E>U̘XJ@{طPm:34ۚ"B KR'd q ]AXXYJ:]b1 7hch d~kl(|V'SvItF^A瞩Y7?^ /t&T|k+̹yPGؽ!%~ЙZ!ʈ1e"qי=5)iX)"fVB;ESǞjWƾA b8dPdg⛘Y7 a{ TKS{e}1+ ;1 9FK7 }yEel*_s]25a@KtnƵtz!4I&w]K`7X7!0E'*#_13ƞX5:b,%e,pFvs/o"ZXE\X_y[e.GU\iyڦ=xϝLJ/1\>BO)+ɶ"ABVon9DR ZreMz8֤Þ:tQ.V/: ,-OF .|$}PtysnQ_ vVkF6vi !oVf gm̠g`ͦqݚy }DYU \·as]yet'{5:?rG̭&Q*?Vxݝ:;V> c̛12Q% ᩅT++MDV .xn>]ⰷe0 ; 򋰞iqk(\zX~&f-X*Q&YƋ[Ky䀅+pP+ܵ6~h;謹TZNmuኮ׿AS1cqK~+) `b[8$U@ !l0Qf7V`0?8ïAnf ;Deʚo1;ci)#:Ն 5qzHڶ{ef71p$8@Kƅ2|ւz}h","i?&f|m;M,TX藈vФi\lvJJX0ݺXb\*rfq#MmHE;JYА_~ɷp7jh6T HV_KS% }V @b$f |JNj6Ly4>- *Punb@" y)w(lzYʼnѱ1uuVFsJ2تr/wb"濭sNl4c6|'NwZTgO9'ak*$Γ'7(V3`I4)W];ߌ4Ov )fudXOkػ q*J)Sσٔ*J? dE&)$r~|EޡFk1BQ*rK[20l4wLmCteWR_{z~"Euڿ3f2*(f1|f!k  "mlj2j;4gH1F킖߹I)8ra7:gjؾ9)t<qnT??֒#~T\M]U+rWUW:CR`#Uǽ/.LAdϹ)՝8x=}[јZ3(RG'5}&)b71uWfkT23p@9h>_2ALWޕ W!@vǖB hɤc*I4J SiWwS& 6_sپP{ 9RP|ƅf_\xXNi@3]ATy$[!6t{v||P'ึDۧyjh{n7ṨAnpI^[>_0RQZ R7] "h i'TrOtaHoǍaB:RI .PvwDסu6,CنC!vja. =q $#^9ɩ'TSUz"eM?4GUɑ:ӊSv⬺,((J${B>R\ B?b9c:e/~bɯڐ0lY:_n]~Ih0!HpkӀ$a/EQ?ed4؄mihKk#ݳGGXFy~d.٘я3+v1`2Z!B@3% +%_2e)<NI].ԃ텴Ano9Cĥ9QLd "r;w'"d 0+Άr8Sj+`Kvnlgs[8Hܬ1Y9d,z*"-wr ƶ{]sHDS{mWOy^&;s4SU*>`|G0 ݴ+3dXa! bto- Sؑ T`Zx>SE'̜QjK+ M{~gw2J%1BE_UKjknܜEcN`߀O~S'o})M#[#AO8^?:P P)R@N1&?sgx,i.KZh&jٜ ֹ:5ֶ=1E״3mĪI:s2i뫺)sj?+,S4 \ % O v\D`pk?p]VFk pz: Z[pΙ 㱊Ҙ[({6e7 C4jhä?‰ۉTмyI\ɮnM J#tյ"Ô E/l>"e =+|+,,S% o/Ի0`AJkhQa_W :RP 9"| yG55B͘.)S 5Xҽ$>(6xZ@o5(N(v=RP{ z3 2T+Jpdo9L ?$5>קvnP ZsoŽoC߀. kbj٭h1: ,XbA9, Y04ecUG6e>ٚJ[5>\1"AQ#"^)?:uBBy݌HP˩_7'b#Ȭ*ƿYa<:<+@M`P#}̃}izգp&'lU8EU<=0j t󋑼1ڏurZ`M7Eaosf? qKͳpy#yhgoW}jܟc .[ٝP[|7Gc3dwzqrz6\KoX3dx~F8AaLT31&:*%䎀ufAvΕf~n5JW0j[jˢq >ݍ~8zӗ>3<nFwCKHɃ[@<1'3ڀQƨ$Sݦћ! $._tCqh@;HERl#F:nR,-U~~2pÐFF$ұҍ Ҏ,RL39cNQ[6L"b\I?+ou@.Aozrtsn4--͂iIí|5R4hK:e}IS /VocP/HHЄ(8?(! Ѹte+ H c0h N2pdO[PH8-qWG $ _BMIΰ(ͭ(TlDaOoHgPn̥g"V)=DO?Z>,1wgyWV۳tC)eEoQxyBL\R1{aLȲ S捉-;`AE֢QiΏ4 2|Q!AXWH/E]; [ ЕdLBBJ fA(K9t7X d!}è2]ȧlk}9$/T';|!/d?@;/YhYB}4Fe?"&m W 7%˥)$FY<"_(Ɏ_[ Jwi G}׾lH5nY y/CWN7?uA*۞|Y X_71"`,vU#XUCA 4t~kc#u"xzkϕϨF ~Ih56f#TR*f| Tir:FVxD)O= *{ i-ϠzjUXmij֓ U ̮C36J3@hy@(--8):F { LXYuvK@qm̅xn Ao3H h8gJKފM(;\dR aoz 4N7['*idz3j88J6Rʶp\zs'YG +9$7&L^[ @d G,USYW []+D_uo>a Zdb=F 2 Nft=VD`y'W7EgD^P´"_j@\puQ2`7nC5*ы+S_0(Jquy )k񐿺 >G\ 1c l mB 5]?`nW-ub)i݆/@rf MƁ_2 1J(m/ 8IJ5llO2oD>bgvTi랈t J(v赎Jɭ̄vy``.m0tE@!aeULk91T^:n_j!!0+SBTtَ' lǍ-c)l>{jg!|#ۈw(ZV$]:g.~` XḶZl2ʤUnm\%f$DSipQJ 2Z-;31HWMu)[|/ȇq{?HMGU5n-N+z~|oE}G>O8bOFٞ?S:P061 a2Uʦ)zj 7J5}SV!@|@k/#3x>6ՈX a$ W$qg,ʪ:d5!ugj19L#~ :(40*W/ Cqu{hn 2XPgH!-x9[05+|t:xՏnHlVL$A h/t_5D5c(_ů&{|BY Ͻ5kk\硢 ;8a˫>bÛלܾJS d牱NBH{:bsF; ԜK/Č_2nHi%>=9.w]=s) źaUυ +3 ?Wo7"纯8uk6cc-;BVTqHCi{go7 B?j7̅a4< Y75}ZE05_DsQcι.H֕!օ]E3)G'E&S`&h,,_Cf +2SL4uXc-<'ٕm j> ޮM17X'"s xQ7}TI:vdrwݗ-TEO 6 m@s,_٤vEֶ~9Wےnn 4UEtOt|Ҵb`SpwIEF.*$&ZRFi~>U%G~gl%~v*,K ل90~Mr&wR%0@pjiy3XX>}4;2kM>zd.^m+Qky{GR;]Ao:V3&eoh`hL6j3*OA>i2ȊmA7V[tU1:3\G5dl981lnq'٭"/kgDjlqv mJкG_W_p=HgDI1}8-yyDÓnBnn#‚c(} 0[<^E4.PkJSd=y]K[mv5|":xA~4M`1k$MX[r] ߥoVup`HrQNG̯Jq28V7Q1\@`7,ruC3(mro,}+}&ؐ#_x@BeImMag|57֍2:DcS#H\ GX$q',]V'c[a39,hsF oP2 NzB+]k*0eIH1ƭAL:^p٣`H"d~+Z[Q(NYe@?ļi/+0`tS5' 1X6@XX1Ʊa)%|FI byhdWBU Ӯ6\ٞPlU;AK2$ ^Ձ-F]Bmʿ+ϹߟQQ>7u }F*wq!Ő@3wq{:(ZT,fi0Y4AR0U9GǶ\3Sg;Uq֗ji MEs,n["ۘ2GKRZ ]D.hH\fyׄr`s"<3_~tP/L%+"AMhZ~3$c kA 1JUȓ坁hf! zVcy܌%tn`Y[8(JlLj9MJ.NXT<ö "VF'~D33j ˱,SW~>xY.&hGɍ\1pv0<ƩxybqD93F.y~s*ߖ*ܿь\"Iy?7gL<|}mÔ<=܈hp3$Dž u)'H]?EƸ9vsaiEmIR*zGr[nZ|q םṠ7 ɀ{Y Cag zBx gɥAM}.;$l WP ^;,smc+-fZo_1Qڻ$X%ʝ8Cb1JrA&DTo#L'"P{,_:by'ǯj=8y7暑H1a," wW?pMhVH'FVS ֍_)VGV?1tGXobO)UL\8l4s@BoC,WlNCz.H9ײѐ \߇}΀Y<$4b@%qdȼVM|C ]b`Cv}I3~oTd%|VշʌLHHyx>9|kہ-oBE:J;P)j(֓:m75;K\zPS薆Dm4v4ʉ 2Bzr(DaQ DL $kb:ěq=vlWw11'8|H5^}}:[ f?{IK)U }UFF(Z"?=ֈ? klN'2́PL5]ꉴdɭo֦1H<\V*G(saYrdMXN-BI\BzR~uZܻ 9eͪB|G ƕW8:AOTq!:>\r֙c 1^3 l5T4TPZAXB\ui[rcB~ZC  (P|zr j^ְ'!:f H/PJtUPj4ۡZӘx .3rKSϙgng#dG Nȍ0v̵?/L8aJQ-Ž,g9jbOq6.~ T%w]Է-DX5VݧMxrCδ)RU-Ro3`dr\+z}rwM$_Ԟl< _ Y;yc`B.êךt31m'0?) S !@47J?4!AТ :ɇI{e umT@%9/L>,w3j2M?qU~p*wD-R<;oXD:ZeIB dRg٦n3ܦ6?V#U tmn[13bU1TrK/GCfIl믋w"@F~ dcj}9frLWsTlGaF#,RoAF>(PI5c\Z%RsvRh>z3Y_)&0EX,V*G h?ne@'" ;4 l̮"@W$Јp8\"kس*m1~7rѷEj n8b }Sh&!F[xMlidPm,CIu[94]/\<8C㾩ý[jA@vvu\5EYWnRdB)daeY26q|#r]x11?byP`đ HE=oTMhJkp1tcڭAUG(~5@s|ML>ɹ=;:]<_iG0%dgE6HC+aCYG`.R6K1ݡ,cLTE!{03- 'Kma&$LNUiӿb]*b7?f<ӕ&Z[W?q\Ae$jVyb)Ncњ&[BB*OedA}ڙ93Ht vw%EU\s=кWJ/5X^l53F֕aܷ) Mϑa2ўYȿَ}p[v!uHκHqO${>˨ٰs#YFAŘ{}#.,~e`reJd K:NY|OlGqľ OpO7n/zVl6rI l+{ e\AmוY77^?OwC5Tx3O GuXiX2B`8/%pMe k W9xNpNU0$CP~}5 >^\TFLa~f k;w!mIvVYO"ǦՔ#A0d0T> ÉZf|ٖ|1'tmwҚ/O& ROe~D`Q`aA1޹*4Roc% #K^1LƘ D")vm'hjk7RLM/ [v]g6sn]u5l^?W6gCAQ)ȡ3G9t'^@s*>fڹט58Kd㬥!_CsSW4R'@o=uwH7]JmEdbj?f MIeU$R[}k_8Ku9%sa}G0T]DcYXU;'ߖr4xdV֏6H]) P}$Բ-}W$S@}!b 7$(˘a"H{{Jn,!2A\z>&A.XSзAo_K\^9EJ׵ڋ_c94#{| [* {U'աM)ȜN+<Y~\5+>/ve"z-)MV. r}T\i݄+m'^`<B+kvIH /qL})|jۜ U. T{灶฼u6q r)\>,>X")<I4mA෻-Р%r{im0S=yuaM?h4q8^˘4M#:[Xwiqkۺ'RWmV71SOQQr6sވAA▊~_.H+gs(t.n,P#$x"2$LNikՐֶĿCe&F3 XȾ ":#H6 DAOZKN2.(ȓ}v@$ϔyF* @BІՠ/,\?%|4]`w1v6؉mZ; z|Q2NeFVg/-c?>Q6_q )*Yor|uK rv#4FJE<4 %1~nQg&3ް]$_Z%zZZx,ʏ+ -FiӺx]U$n _#y/*, bx=! L8Sҧ `u0y8$s/Oў~< Vpxh_jiBGWZwؠ1䧨XrFHbBqk*&X17[aqyT-js7)_##p.cϲeᯌ%2A({?NCM<Ä34Uݧ*&RxDۛ$XD>=$BB3|_wlݲ F_\Z]12mhCR:Mlp :T:KKvkO0Dzjlpõ;k%iuO' yM2gl0B 'h |Vt/TU ?or@3,gdrqE(:, ]+ <AZ6IT8a(>tX>\TB66&K3^cOxQ1E(9+G[iP趃,\fH"j.1,]5#?hǯb: iEЩ7%%Vme*8fs '4d(C3o\( #\X$kS1A ݙLF~ Ct#杀H --mFeOg.ef S[ȵB4&%+KCn:HS+sdtQkTۯ`|e#ΖhS$m Th|g9l65D{usxuC 9$nFEX Ui>`ZKz_PKޮT9%xY8u]?JDt۩cĕnOH ?S\:!x!28imKb4l*Bpd\)FUCFb9gjuLf!toA~ $!b,.CD~RWcmVtGp4)q6fADF"R+DuoJX/q%{ R@n;x`0BM2"dfԭMj#ĸaMc$sM1(&AlZ{ۢU&_O.f"g\ G-xPg/B!ѯ_o0AzYi 1qM-OXS0|ͷJX,*3]1#z<$7>d~"t¤'B"'=z4b`n@6C~],F6g-V'3Kj`l@ O lFj-EZ 5+ CKtU8g5^~&9C3ao)j5E~bWltB4![zͯv0wˬ|Qe2%NKZغ /|RX:ކp?ٟ[Hs5c"@tȰ<fz`$,< ZݦnH|/r ^ALUĘ. ۅT4lW{K˲(oh(N ō% Ya҆g`aޡ?Zʻ.xy(*k˸J#C5jSY4aX0Ǟ$lBei%ٷZ+PE.D5M}J%:7F ,`,jbô=(R>ކnHČB.PDَWآt2O$Q R3w|Lh/SfN< 6މz:bs Qsc?1P>ETٸeEM݅],6'`8ROO1Klcɍ1^-s_5\gu6d*vI;,=Ƒ 4k4ro1& @d+Ą^]O v˼|=gLs[y}lWժM9n[&ܴsdX*G YXJWAbT울iؐ+~QGdyE'B9|D:bg{;Ӌ' ~˫b< EպvE}~I?tb6tcorԩ[ta!]c`GɷƟSvU^Kx?z7~B4rl|_1[5 -/J%Pɴzϭ(?Zf&H'l{4fț6XGm2府@(Eq~Æc4WZ,9``f+ R YZ