libtss2-sys0-2.4.5-150300.3.3.1 >  A cp9|$B^y_[0,=C2»U䕤 $ y*,{ Z)ιVG@pݲ˪_%}ls(]:Gҕ' ZV奇)A> ELߜQS:'U!ezDLc0gT sa!:$ +m| @kI"n^c2yS Ģ}pe&U<\_PsCa+UVM-?k>KR ! [ba1c6c99e9c9c0456b8c768ed4ad7ac92120f927594bf9f2efddb42ac766d83250eb6bbd92777f84045fa83f4d0869c752c950aecp9|ZM3 aF'z%-N&@B8ah1+?- ,vV١bBR \#$~*tHݣ@'iu7 Dq#XK8+eie65<OaW91``h%kPǝS!deܚ}M!ow._o \)aބG> tHp@]t?]dd " 9!BO ev       (2<dl   (8$9:E>ZD@ZSFZbGZtHZ|IZXZYZ\Z]Z^ZbZc[d\$e\)f\,l\.u\@v\Hw\x\y\z]]]]]`Clibtss2-sys02.4.5150300.3.3.1TPM2 System API (SAPI)System API (SAPI) as described in the system level API and TPM command transmission interface specification. This API is a 1-to-1 mapping of the TPM2 commands documented in Part 3 of the TPM2 specification. Additionally there are asynchronous versions of each command. These asynchronous variants may be useful for integration into event-driven programming environments. Both the synchronous and asynchronous API are exposed through this library.cgoat04SUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxx86_64cce4a1a9e2039e00117bbbc374c489440fed0d414684aed8b8895dd804344f2a11libtss2-sys.so.0.0.0rootrootrootroottpm2-0-tss-2.4.5-150300.3.3.1.src.rpmlibtss2-sys.so.0()(64bit)libtss2-sys0libtss2-sys0(x86-64)@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libtss2-mu.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3bL@`@^ P@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- add 0001-tcti-device-partial-may-be-used-uninitialized.patch: fix missing zero initialization of a header data field that could lead to data corruption if the TPM does not support partial read (bsc#1202172).- drop 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: now contained in upstream tarball - update to upstream version 2.4.5 (jsc#SLE-17366): - changes in version 2.3.2: * Fix unit tests on S390 architectures * Fixed HMAC generation for policy sessions - changes in version 2.3.3: * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu - changes in version 2.4.0: * Added a new Feature API (FAPI) implementation * Added Esys_TRSess_GetAuthRequired() ESAPI function * Added Esys_TR_GetTpmHandle() SAPI function * Added Esys_GetSysContext() SAPI function * Added the with-sanitizer configure option * Added CI for FreeBSD * Changed MSSIM TCTI to be async capable * Removed TCTI loaders from ESYS dependencies in pkg-config * Changed getPollHandles to allow num_handles query * Improved CI builds * Converted builds to docker builds * Number of fixes and improvements in the test code * Changed tcti-device in non-async mode to allways block * Fixed hmac calculation for tpm2_clear command in ESAPI * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Fixed setting C++ compiler for non-fuzzing builds at configure * Fixed setting the name of session objects * Fixed page alignment errors in Sys_Get/SetAuths functions * Fixed potential buffer overflow in tcti_mssim_receive * Fixed invalid memory alloc failure in Tss2_TctiLdr_Initialize * Fixed list of exported symbols map for libtss2-mu * Fixed resource name calculation in Esys_CreateLoaded * Fixed keysize of ECC curve TPM2_ECC_NISTP224 * Fixed segmentation fault in tctildr if name_conf was too big * Fixed memory leak in tctildr-tcti tests * Fixed HMAC generation for policy sessions * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu * Remove duplicate ESYS entries from map file * Removed the private implementation of strndup from tctildr - changes in version 2.4.1: * Fixed systemd-sysusers/-tmpfiles creation without systemd * Removed expired coverity token from travis.yaml * Fixed uninitialized context of FAPI command Fapi_ChangeAuth issue * Fixed handling of tcti pointer in Esys_Initialize * Fixed usages of EC routines deprecated in OSSL 1.2 and greater * Fixed FAPI handling of TPMs without stored certificates - changes in version 2.4.2: * Fixed duoble json_object_put call in event log processing. * Fixed memory leaks on error paths in FAPI * Fixed setting of FAPI app data. * Fixed size check for Fapi_Encrypt. * Fixed computation of PCR logs and PCR digest of PCR logs. * Improved comments for FAPI authentication. * Fixed segfault and leaks in FAPI * Fixed Fapi_GetCertificate for objects which are not of type key * Fixed hierarchy usage in Fapi_Provision * Fixed ESYS Shared secret calculation * Fixed doxygen warnings for FAPI docs * Fixed copying of primary template during key loading. * Fixed some wrong format directives in debug statements. * Fixed usage of hierarchy and authentication in Fapi_GetCertificate und Fapi_Delete * Fixed unallocated return buffers which may have lead to segfaults in tooling * Fixed usage of persistent handles. * Fixed computation of the size of a PCR selection (Fixes #1737). * Fixed missing hierarchy authentication for Fapi_Delete. * Fixed uninitialized context of FAPI command Fapi_ChangeAuth. * Fixed computation of random value for objects used for sealing. * Fixed return code for event parsing errors. * Fixed NV index and path handling in NV creation. * Fixed path checking for keys. * Fixed Fapi_GetInfo function. * Fixed path usage in Fapi_Import. * Fixed invalid settings of default flags for keys creation. * Fixed handle usage in Fapi_ChangeAuth * Enabled all PCR registers for SHA256 bank in the distribution profiles. * Added some checks to Fapi_Provisioning to avoid nasty failure states * Added a check to prevent overwrite or delete FAPI storage objects and directories * Remove obsolete test fapi-key-create-policy-password-sign.int.c * Checked hierarchy needed for EvictControl for deleting objects in FAPI. * Checked event log file before calling the TPM in Fapi_PcrExtend. * Adapted integration tests to SRK delete checking. * Improved presentation of Fapi_GetInfo. * Silenced expected errors from Esys_TestParams * Added man pages for FAPI json config files * Added a check that prevents deleting default directories * Added a check if primary keys already exist for Fapi_Provision * Added tests for derived persistent keys. * Added test policy PCR with PCR register 8. * Added check for deleting of the SRK. * Added test for sealing a random value. * Added content of the config file to FAPI Info. * Added a check for valid pathnames in keystore module. * Removed unecassary code from Fapi_ExportKey * Removed obsolete LIBDL_LDFLAGS and replace it with LIBADD_DL * Removed superfluous policies/pol_password.json file - changes in version 2.4.3: * Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be recreated! * Fix bug in FAPI NV creation with custom index values * Cleanup of leftover sessions in error cases in FAPI * Better error messages in several FAPI errors * Add checks to FAPI policy paths * Add checks if FAPI is correctly provisioned * Fix execution of FAPI policies in some cases * Allow 0x prefixes for TPMU_HA in JSON encoding - changes in version 2.4.4: * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix memleak in policy execution * FAPI: Fix setting of the system flag of NV objects This will let NV object metadata be created system-wide always instead of locally in the user. Existing metadata will remain in the user directory. It can be moved to the corresponding systemstore manually if needed. * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check - changes in version 2.4.5: * Fix Regression in Fapi_List * Fix memory leak in policy calculation- 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: fix problems with policy sessions that don't include an TPM2_PolicyAuthValue (bsc#1160736). This bug was fixed upstream in a minor release 2.3.2.- update to upstream version 2.3.0 (dependency for jsc#SLE-9515): - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/sbin/ldconfig/sbin/ldconfiggoat04 16613108802.4.5-150300.3.3.12.4.5-150300.3.3.1libtss2-sys.so.0libtss2-sys.so.0.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25568/SUSE_SLE-15-SP3_Update/2371063a6332550161cfea1bc7dc148b-tpm2-0-tss.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a1192d6e781a3274e49f083f84876bc3c574fef5, strippedPRRRRRRL^U)}v utf-84b35062489d36eba9646a5d9d7aa7a747aeed1c681034e68118e523b16a7b572?7zXZ !t/}+] cr$x#Gd=Ƕnx;h_fEjD4,UDy:^}1RW;ZQwA*p_0ȳ+廤^l%wj+?$ˆoPKd!̻G? oJSoщvfF:HEJBZ_@Ff㳻&|1z@D5Jiֈ/.jLq汑ySv!2a>s)VXPpa3 "(k8([ƌwIt=$DƑ*N6 *)fXr.Qc=i)8}N)ԍ=W;4 ")sP}H•[ED_W)s!gZI=lj MyX wٮ"sռ$t> %!:QuE^S;fGMrEbo 76S+\Ot.jGie5.PqB-Rjy؆ܸ]7gYִ2.A6?jõO;I*.:J?c5b^+ٲj V+ρ)^1L XVrؾ3zy65̜dm'Ot/YI֋0K=h?ܮRޱ6?0|e̒i><}Y e41'W.0g gD&zHʮ5z $TeꈋXkEPWtFa0멄iq9xuw*Yf(F'UT* ;Bkވkfm4goz%EE_an^oVD_tJ mDJύFҺ~c/IiQVZS?T h<)_sXZ'Ty3+8}FAcy]W)fDŽK}z11Rm7M[RS[rq]*˘Q'39ǀUL%҉COwZiF)c>+֣StrX$(r0Qy:~ߖX^t}wռYFeNZvcsBzpⓅLއl]QԀmѿ+<0>|~oV=߻ ssp†c?.B5\vCJ1fG3 5kތ1S-z,xhYMܮ bl"en쾋17X|G6K<_ $/N4qa9cJRom5r'Tˆ~{oh\}!6V3e v4zluM+}UBIfq_A燿<hK WHoC<܃d~VfJ wPύ +~&k9EF( !:Z$٤zM~2:;A}w#7E%nUK1}]1Pe$Yj)SC1> WqΘ ߽Le?%K[s'LjS7`օ:&&83CObhEJԈZEr&I`ӲK,(R/I΀S~ĦMI;nd7\38 oJ!ÔZ^D6)t@=>_V\m4Aպ1Z4;Ԉ~#]j$bn8k|yGR,0 &AW_vi,u}(Gx ˻#jqk *GȥJ_Kqm3k⼧n0NӀұ$kok4/!!X{ Q\1άC^DvuAK_7-tq ~}EfH[olN3{KDx}x[UEmv^ P{Yݨ=02)`J^?j\kJ?&t-e^ϗbaͷsu4q0؂]Ԧ9dZ^=rd,g SZ[zYY-"$Dw.lmI11Fg<25_P[hbԊU(a4rY׬t46퐒"0/[J"sz%4eIXVZ&TѤفm]TXu=3b72* D~w^.0е <*7%}<198#dI_4f~.XΘĜǓSˆ s-mN +҆ :d}S[YSɮ~'sMȸח@/C-{[?!2\F`!iC$ѰGjr@juQ/Ы"?iNz@JGHڮsgæze`[: nSA[a،6..R\~ugIibTͺl[( /p]-''iYo~|d5%Ph"KiRz:HVUMx7{=:@X|Uғ|W ~ϠNTi* _|cƌ7cj`}_!}'2|䡍{ 52u|Y_<Sf07aaA6Bo)K-"}N k(E8vd`ҭc;%ncސ|8.a0vX(GJAidP)Jݧmy΅ָu!#JLj [~ۤܙj!_i oe`8$ *kߏG>"G_VN<jsA n'Uv1-QG2$Qʢ?3+0z[y'S6F#L>l>H{fU׻J}_TC٦8L2㜯7&}SYuh1[-Xj8Df=q73VҾ8{2_ ٻcd'=c! 16SDs_A(O:EIv[F,Dh.4!Vz ᷕ( ,I/@(+$uµ'.;h^( պM>p-yZh6!Μ_x@T鎩 4`N/(a 7䆠ZK̍23EW9g_J{O}Y [M (?t2-L+H.n+nS§>HƢilҶ76t32iпf.Ko5>LEcZ׺VUlv9ÁcG z<ҜDV5'[.į]e >cW?J?vfz23,TR_%&H9.rS : 5M1c)i>8wFWZX̮#4qC;Ԃ0pÀ}):ON*|сlhlo.0˻T5x5ڧt,کAji tpj ԭ#.yEp;Z<`dKIl9%tl6/o7GsB$ 4Kӱ=cs La@ݐy]y]E%lj=0VqJ%6aEb[*n_9 f3ͽäFaAQޘsta*_8L]Hv4<^Ozd]25]>!`}gB. ?kVP{c(x74|ڶׂhe,EA#f-D!R*Y0Tiۈ(]=IVan'/) LC[ZspN 9[/%'9Q:l п&(T6YsA!5k{-DȢ˯!b{m7&CO$ k aX.^V͇9?Q|t]41[%¾ېnQ%/G'/4hےڈ\/Sw@T~U<$4GjATdBjӾ#r'ݷB{(hǹ2E[l4"_I{2;Q ‡CmC7C0dt>5wg ݤywWvwgɣL=mwjnHVb =*bJ4 pdȺJa [&C'c%'S=^`qBբwF_bm24j|9Wk+xDr-]S'Qw$/+#_g(?(3",z4qE(* y"R;FH^}X--OUlpON#Lq#$jo0=(Sy4#d~" AN$'ӈwߢf |bq4Eerr*࿗xYZ }apnDc3bR8)ύm pɆ }'7'H!#"F__P!nGf(0dB$׬]3*z6u2&,ew&ØƽRD SJcl~;oWX?uo/硘'ESpv!44`q%`L@*(8?3ƌHUNl;kv5.*N p6^U˒gFڬ7e K*HSj)('8YG}9Bo#bt_ͳ0q|ZT1LI)Dqrn\1"rB6jLL^Gs'<Cke)JօcB"GH)L"dXUwV>PZ {J\6`9OE)[|yʷ]6 SZlw1\SXM8xEʩ? )y/ x~9EzVO&H-a |ZdĤ!qT+Xۇo(θia[_Rѥ\U~%qAw>'uMK@=f*9GdRI K?*mcJ*\Ķ6`3_,:1^lINrxٯR jI r%ئeSzA wmȰ.\CC00׸_$G}ߜ8vs6if,MO _}|O4~8~h g J3{E-pmB2v-p뮵ɱ9s8ƦMZrp6#$ΣF0^BCGRJt43}(I _&[a*%-r8tIy`~t<κBGJqg5njGwVByaYP:$@sˮr|єy.nR Q|ZNC+XYm [foNBsYک6 Q'Dਇ8{&~␧T'|.2oV1hFfȑ"~9.h+f/)'%X HR~rvD䲅 G8J:p.HO B\Js(Nd͠]sVi.A"w62)ȷ!" ԥNv5fXS=_/̽W#_"}$23>۸BBٸxGfFBA7NOK'ĕ!URliv09)֞u sh{Y%TZۃ_3M#HAV\DCc T( ,0ųYEI`GzL(KjwV{6MB;4G G"|Fs2[K]Kvf`2˨#y} pXB=q]jp6}-/&t2w#o @t^i%;tNwY =KiȘGRJoaZn>6ːoQ$1e`!bdX1E!4ԄcK70*DC|,qOZN@ t2m@±5|eR`W v\^o9s> UםI .98}\_p`V)٬&tU`"^}-fK2U(W&rx{֦{urR~KG2L!@yM.a+z EEː>: j(b d%=D7K%>uVf~7ŋy<rhJcA?̰! ~R&lO&ͣ뙻3kf-;מC㝏ZΨ'>}TJL-Z;۝08먽 ;S Bʷ4bVoh7O6  ~쿭] 侓9|-&TŒN ?15R$.kZv1?{WsMfKKyZL*?Mܸ_ y 1ro,p47+?+yRP $x :ѷ-ܺP*mA)טuIyBVvm0!7 $sI0+%4 |m Z)E`:S{PZ IrS!Egf,`WAU1þ@e>an҉N<1wU~@o$囆.MjWأz: _lw\C=8nqG0a*8GՓq)  + "2ZKwRoI櫇z# \ uOGUykĕ33IW|`$`cUˌQE''{Fli^E4r[y~~8MUpiUAE_#ȹ-Ȍ8l0Z,X-OO'=BJbX1.dNF}-gO?KYrYjJ~3j-rKJKfkT:/ʶXLΝ LeзZl-QĔA_/#ጷLarA\yzP3R!v~TɎj4v5yG|y-h_sx&Rs{A/]"Geqq˃k!1ͬ˲2ǵyE$ T`Ѝ~UNOR8#BҼ%m**oG (; {J9v:rt"9~V]hHK%m,F4ߟ{B?}g,qwh~jA:~riz23 a_PPzj }Kߤ u^-fٔC}D k 2,Я/Šcfk{U>Ԥa'$#5q# "cDr]˔4XkWMOѰ`EuZI@ &H=fF [ w8<3>a\$-jr #*6^.LQ&**\t}V.0OLVX_AgfiPRXٚBϟBGUfjZ8$|.`T%W)1B|7: i#䕹$GAP8vFl_GU·̏Z胭qffЌզK! Is"٤ gaR'r71` =>e ;ZT{:1ͺaU剳$O9U]5$>r~Q \`C݀83EpY &̩ZN7faAJx6WP'#ܘDL mF"jy9~B򈤔1as,kmLVj+o^P2v̸ sJL"(z~}$ V}&/l @bpo5dPH<$k"jn`] 9٪5r/6ZЌp6el{"P>m?gRmVg`ӛ9BDĦ_WNt`QrSU?&M:v{Y@DY9an.mHEu%Ѫ"1(3Rޖ/ҟHx ̨q!RШ$~ത[,2v b򅧾~dܹ T2u0Rc.MMqSZ!SV=9 .TLߣgb {i~LA- L#;}&Gc]+`*l1rYiJu zhN_.\Fr$oR(Y4` l4c6 Rn ޶IMt:[5 .^j(Йd w 4o G[]+g, /ob RU^'&=C_߰{q7H0Ȃ i2c J|){ϾnU>7[4MGpi~[Vg] qK? M?8j"y@\oP~Md28WX{´f]' 9C~ßBu!Q. 9Do*,QHmtXM$:񆭄鸭VwG,w4n*PQn6~Gy"' xH.PtX\P@i~ \ukk')>P6Q%`/Y+^}0b D2j Bc^d>^.$$ܒ r}Ԍ* u2y+]2Q7B l,iZpÀFwk x,U]c5O*)U<^~(i2_FL,ݙWCornĬSP%w;L@+5(GMkEW|`k)DA4qRG\nR_>N|L-'1̷=U0Rf 4&8uX+ N%Q3USKiZ4t'&Fh᷐+(o^ڿ~KRт`J'ʅ-qY=z wTobf&!5"7*Dr?\Ҏ0 xX">2`ԫ~|> DReVX dl#FfY7f`t׀*b+´5ytצּsH "[!h@+Xܹ**1S=d0>8.[ eG=eK [36 U v"m#Uaeyxseo0'{avL`^R*R~(.tbt\$ò(pjG-6WzoZLlχlala{L3Ó,0-um&m~<91{3/(L11Ct$o6J&x%ML<ظ Z|;DBZrǛ~FgNj1vNwmL Q`#uM(iH/c߇cB92$ǢaGKj^rnsknOڢ?樱p~k V% l;GTnW @^fWnbvs8.a*KM9h@K7PnK'=<*DFMll~/G3nf>yڔO|லG`q n#0M4BF0dʟƲ-YgTp4]hP x*gT(QKx\څf&ITn4%S`ywb]TPrXpREEu&dr;쎨hA21Pke@!2ZH}w4PBX5DuK#JaihONxُ3=Y~N֠m6xpYhϝӷ]7a2UXc w]" Ǎ x.P6 ^Y zI) X3@pԟh!|;29a,ɺ!k}:GD5-O^@d~kAdU]ĵD ^eh_@ĩ_fmm1XL_x@UC~v$N!'!sC,~hh"h>Tl;gJ0y2ZEox@h5x-[0?w(jɢE. T*c앴勠C($BvWj?Os2k 5=&ؾ>~.2,FjGYw /Fӏg]f?0o@qLzI'Z5IQVm$9Hs$J3uum{^:k?%4aDߩ]cTi!x >Igyn> L'4o"x+2PhBjFۗ,K5.y)Af(-AƸ~b5@u@zu%E`W}ǰr( ҡ 4**킁28A[8C{S`˘J+y xJn>~r[4 >㒘GQA]9t_DHT wU b{/>ni%]Cގ mt]q2]O<&D _c'{|4[ԩ1=v#rͯj xei[Y2&3 aUG `j`vP6&-D,v6zH:a(PTFճKg` /  %sj{=n}]uV隸<|yX^yi^pH.cFQgŎsi/WE'տt g\}'\rt!Fqt+h6;> L]$%) >ZHhS8Q4Bz; U_!,tsKDO۔sVI߭$YI[~JуIQ{֓fCg F;|bV vZyRD)&Ϥe|V >jإj'x"<8Lq_g {轞RQZ ǚ$`[ N`WhuH[ϡ2hrT d:h`ɰv'G-GQ7<}+\T USHVgۣm?C {&5UX f^#,a!Z{hܤmaQ,.BsCٔ݉_ʂa[-U FnFpJ%'7pdW[3/֊Ϝ(0rjc!dӗ^R9ƾ` P]%SV[]=DF?+6V|#${rQ:lv-j?[(;s,cGu|v)r8|a쀄gI;6M0Y-*/gg4c$gpȈbOl9 F׷ 5M5P*~㕬DM F2)ⴐcbZrLI[YAJL-;h9`1_}1ºOS|X9R_J)_) ~8 P df>_ o$S"Ghl]nH8#_-p%cb>3e= ]bX'n D W Ĩ^$m~(-Ym|uD@F@Ԓ3 %W-* )گ,נi.t'NJfȒxnIb`7.$Fű3!2iv(\6^*<~cACGz%K0*.LdGb]2'$0z/`c[Tofc[l2ƣȇcCJћgW}E >3T۔"=[yjAL s[;:J(JWNmD,񗊎V] roG\k*(w8]V^`S.?[Avm d:yI^zdtlA!%Kӄ`E< c13C2$7toU!td$?O pJTu%`V {y8j.USO͖g5<.yFs~՚4`Fb {Xsʊu"@8cM1 N0/kTl"]b}>>/A[EA$/MV_&RGX'F[JV"Nb; {b*gkE4% 7Fi&gi?BSsuzO=_~,M)6V,[sT4p8GKI1Q%*Γ3TB.`7RdHt8w0PNpU"RُXv.h<9 >] ad=(/^,.}6WB ~أ)J=R +V((~: bx B[ExtqԐU߇c$Du alPr- l[ũol4_DdA:[.Z^60K*2^1砯G5HJ+> L*{lpFHuK]vb&dcqDJ@Ia9>}?/m7ϔcVIߴ u«j28Uغ:, 9Bn< z ݝ͗gV+}3ٓ9}>莁}A}7].k@e=Lf4_>x&4S/.8ĕcX6t^̪ग@ d?_4 '@=/*kbukĦ䤮\e#F .kGI>\ ]*Ah@gCGq3MvJ@a w|HzgmݳZZD'JY0I@gQZ#m\93[72MU.i2[ݽ{/9$ӲíE8o^IPWIQq+K%۟pYLջGu潚P@ 9Ǹ߉I9u||ya{9JK<0X |cȿ\V7!0/nm|ÑNYy/FfU*K"D'ģO^m9K,{qTeDIn:E~Ov3%4)B{ |*/Tɯ{\?F$}@'aB|]VS*M%PtY솁$Z<ަɄI"4~nIŪ>4ɠ؞؎+Ԕk9WJ`GQ[D_Q,r1͏EBO A9-$UFx{rLk^)19@BԹU=?F\c(64!.p+Q֢;'A̯ҷC67|gKKQh4򦪚 }H47uh0"J /x.ԕ뽢lyA{xad,p:bef}?M&O/:ty` դ9VVP 8{bqMʘpxHRlYnTn\9YPQu0"MqV~P]x͹m7ff6p!{,Ҝ͙?{><ˀdQPDtf, %8~ IW<1&MQ*!Xf$g̟ɹ%*eTkEմVq*dS 9aH#ʹ~|fibA*f*̆v';Ht{d.;̌^1M%@Wڍ8 o88x+B4h_zmKMh 1?굌msYtjD LQ-X nU8.QojmҾIBM#P}=y hMs[gk p+XxDž;o᭗3`}X{ Imd laTޱ* |xm7-t";jkb2w@[3tLiIdܭkHdb"]7\pnA/֛ | :]]XLhE6ڱQڐ1% F~`S{h{yN4Tl"㝭0n$TJN[ p7 BMjƴ. 4k7^=,V e+_?&sG\j=fѨ.>BXm[jC*رΫ+ڥ.Ftl(,H6Iv8%X=d05,ٶޗ=+"<(X׃;1 o^{mshkƷ3ߺduR+wNetKCPKX@[!Q?Zzچg$О"Z/1NOH襏wZEϟy祡J(%f _ #1TCZhQ*fi[ZgcQV׹Zp4W{In=ah~j'FU{ ~+YRjb?ce\ g.Ƀ,ݞOk0S)$&> ל mB53)̂ϐjKWJ/7UwKm[)D\%/Dcb%~諛 'a\Phґ{ g}Q3Jt;gI)hkש2|eR-CcΩC*/)r"4g~\ttG&؞O{!4R٥ X-L6PqLw9\.]e }l/,H_aܳ8G,.6ҁ# "P!bʼ.t'{rXYzT_asYjf;!ŢUaS<qAiA$6,ۃ2+G*6eZxV=x9aDĀ~#m|n#vWe̽ &(h`lCy)^CFE/BP(` "C(Lb}6@Q2ܲ^v*T;cI̛pg~CxڵGYzmI|/=uRmɪCnZ//S[ΞX*g0TTAjke'p$/.>Ztʘg42dB-@rU!UMA. 'SnXo_?07rW ;B$yhZxNt)Ao'A-8mʎ)ޟ}V̶_/.;LpkI17•Tg p@qI q7Z88V%8|\/I9YzwOೇw?d4bގoTu1Su96J.C*˵ȵTf\3f/Vhkrমrt\(i$YȻE-FpðplrB[O)U&}8^DLi*ZXpdH?_.j 3G/0)xηmsZiMS2='SKLn9pp'!Uƾp8Iե|ڂChЧR\ӧsg,O.@WW"V62*tNi0E!}{QW>kM U?ѯp֎5M! ".::qSO(6ǿ'[e`ܒ`"Fk*MbPğ:o4;[v9"3bZ.p~!JC!![xb^QNIV;1O7 )zhVs􇆑^wnq(a L*NE5S lǕhLhJ1 31;1`0mV3Nd).y%<(\njbAMuO/Q_o3ӷ;v5TYI\N $ ʳ g$< h^6M4[a%"8mǢkK =uvBJ9Vy(vzߠqob#("ޝ;@NHi"|xt͡⧔rȰr|y{ Fݾ  c 8AZ6E#+5$]nnXR+=1/DRGw9 z/%v<U~ͣRi#R!e^q5bMqlMܦu 5<5FY>NDPZKk-!-Pdi~1+u1MJըbY4oZA͉dEs^-5wbɟu9O.lB1}z9o ! r^.n%7 N_"2P}4 Nc>{ώ ʠNkE0YbG:r|\|rqXް@ADBދJ.;,<^_T  0S61Qsw}y`L(;>ɜ|DuFI9IBjPtJlۓxwS ZLsͱ) =s4zIE~%w( f#gI6?.Vq<\nCl2^DhްD6onPpF13pRA>zYCo6DY:ٿ?%*N|Gn =[_G L/ܝ$&LfR^@QRh܎ئck-_(a 1qNs;20z' Nʹd sO38o# O6TY[4¹V}3'nFFXTHY|{f'+ 0Gt^4E t}TnX`̫Lq zѫJo! Qy3%P&ajnd(riKZRt8sW8|j2L+Y/#{;Es*~ԅw]@>tKI,fb\Iml(| )P`2}C1xm,ls EޛXRPv@9G;|C2IVGDC6s%s#VF=.5+'4kD[^s#r,Xj)yAczQO mKr3[=&*1Vh¯OTPsE䡏.So7".04eK Y6}{0J?3ECDOESX$6<cs.LNgF*^+FIoD#<0Pkq96b)D;&`J}q_dxdOi0PXHǖqKӜiū3JscS-)7BG