libtss2-fapi1-3.1.0-150400.3.6.1<>,f8uZp9|k< m4ܶ5Ul~yվ.D4W]/&=YagtyK-qYt>R*:yG_`Hxz{\ԉtLP ' f]a K23JT? Qr/X֩f#6 μ50K>~^*RAPPv\]9XeNx@arA-ɝM J_6Xd]域/6-%y4i/pJDE7) ->AO?Od # :&3 IZ<H N T `  &LX (98@'9': O'>L)@L1FL@GLTHL`ILlXLpYL|\L]L^LbMcMdN@eNEfNHlNJuN\vNhwOxOyOzO\OlOpOvOClibtss2-fapi13.1.0150400.3.6.1FAPI interface libraryThis is the tpm2 Feature API (FAPI) library. This API is designed to be very high-level API, intended to make programming with the TPM as simple as possible.f8uZs390zp36 +xSUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxs390x/sbin/ldconfig [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/tpm2-tss-fapi-3.1.0.conf || : )ȁf8uUf8uUf8uV50d70673c1902a6e6427a28757ed5b3dc19e9718a96f5aa454a5ee3e71e4fce4d201e9fdf70766326ce2a7a4a654e5520ec2ad53c7e5f8e3cd3b16b22e5b1069libtss2-fapi.so.1.0.0rootrootrootrootrootroottpm2-0-tss-3.1.0-150400.3.6.1.src.rpmlibtss2-fapi.so.1()(64bit)libtss2-fapi1libtss2-fapi1(s390-64)@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libcurl.so.4()(64bit)libjson-c.so.3()(64bit)libtss2-esys.so.0()(64bit)libtss2-mu.so.0()(64bit)libtss2-tctildr.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3f4cʂ@a@`#@``ٹ`@_t@_^M#@^4^*@^@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.commatthias.gerstner@suse.comaplanas@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgmeissner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.comguillaume.gardet@opensuse.orgmardnh@gmx.demsuchanek@suse.comdimstar@opensuse.orgmardnh@gmx.dematthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary quote data, which would not be detected by Fapi_VerifyQuote().- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large RC values passed to the TSS2 function could lead to memory overread or memory overread.- Version 3.1.0 includes: + cover update to 2.4.5 (jsc#SLE-17366) + cover update to 2.3.0 (jsc#SLE-9515) + fix policy session for TPM2_PolicyAuthValue (bsc#1160736) - Add version the configuration file tpm2-tss-fapi.conf- Remove conflicting sysusers.d file- Clean spec file - Add new library libtss2-tcti-pcap0 - Update to 3.1.0: * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455) * Fixed possible access outside the array in ifapi_calculate_tree * Added pcap TCTI * Added GlobalSign TPM Root CA certs to FAPI cert store * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59 * Added two new TPM commands TPM2_CC_CertifyX509, and TPM2_CC_ACT_SetTimeout- small services fixes and comments- update to 3.0.3: - changes in 3.0.3: * Fix Regression in Fapi_List * Fix memory leak in policy calculation - changes in 3.0.2: * FAPI: Fix setting of the system flag of NV objects * This will let NV object metadata be created system-wide always instead of * locally in the user. Existing metadata will remain in the user directory. * It can be moved to the corresponding systemstore manually if needed. * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix return codes of Fapi_List * FAPI: Fix memleak in policy execution * FAPI: Fix coverity NULL-pointer check * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check * Fix a memory leak in async keystore load.- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package. - improve the descriptions of new libraries (fapi1, cmd0, swtpm0) - adjust baselibs.conf to match new library versions and added libraries- Update to 3.0.1, changelog at: https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md - Update libtss2-sys0 to libtss2-sys1 - Add new libs: * libtss2-fapi1 * libtss2-tcti-cmd0 * libtss2-tcti-swtpm0- Update to version 2.3.3 * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu- Use system-users for tss user creation (boo#1162360).- BuildRequire pkgconfig(udev) instead of udev: allow OBS to shortcut through the -mini flavor.- update to upstream version 2.3.2: - changes since version 2.3.0: - Fix unit tests on S390 architectures - Fixed HMAC generation for policy sessions- update to upstream version 2.3.0: - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/bin/sh/sbin/ldconfigs390zp36 17149760903.1.0-150400.3.6.13.1.0-150400.3.6.1tpm2-tss-fapi-3.1.0.conflibtss2-fapi.so.1libtss2-fapi.so.1.0.0/usr/lib/tmpfiles.d//usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33671/SUSE_SLE-15-SP4_Update/f8e72b8b3119bb1f0687ea7d03152f7c-tpm2-0-tss.SUSE_SLE-15-SP4_Updatedrpmxz5s390x-suse-linuxASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a47475b35709e1c6ed13da50041efadd28886b6a, strippedPRRRRRRR R R R R RRRRJxO$ C utf-8f9a44bf8c245f9ea037652a85d00bc69901e638a2c36fe69ad7b9ae0a0c30eb3?7zXZ !t/X]"k%]d\N@RptLݖn[Ƨm6|K0O:ܡ9N ӡ)s̏%^T tTh&;g7}eW=]``C}=$"JqL$Wӑqُ7 <ܑ-QmJ'EƼ;H؞[VBksK*'B6"ľ`,-o_ HjA} 6'Gw ̮j㪉g-£=f8L#9V&[%Ji׹,X\H+b  i Q;gIds,s? @3kh4•FI5o<6iHlߵYq _eϏ/_/wQ%}ؔf+,u $KThƲНHpRϒWn}:~{~ǘ=_J~6ְᣍG3X|ؖzD;uymeޭfțz|;`G!!b=EfPl;@e05 o$9ৣwT^p(9Λ]{9ӄ%D.^), yx2~ _g}d/]hx["W IIA[4.ދ0:]0$Hb3J'^FT]U~c= 4Q$L `;u#_M1\) \ռi)68+FRc2qmY|faтQS8N4b n1g.vk@oks^VO}#:lD" p@5y3yļ-V|+e(:K`4XOi$g{Sj5" [j0>C/TbQ[V9q}]\J|/Nyl0Y ދۃ9|| ݜ>I֨@]#׋ܤrʏ `塍z\?.PD2:ԝn$bi/\1^y aHDi9c'X.l0LJhvOܩ92xAd -ν4U7,ɷZ Z],٬KK\bl. G4{ [,/5lܖԘ0Ts6oJ=XH#CAD)"wg&]6l Ӥ2aϲ;->[SrG!˧1#rWa9='͹D]H"7C{O[ n b `]ZpX0M78<\Ud)0Y5z8m/GsXmD6Cj<4B_r2罳hĞv賻f?{Ɇ,NR+1\ `OtreJ.jH$n}f#+ j8g*Mn#nHv)x.?q]?yS>rl8{n$aKC UsE7GLvDlъfO.HB>iXpwwR>w=*[s,rb T`Ӑ(# 5=V,DU>h;xm=%n:Zwi~. BM0d8$<$0z\TLBlW^3ylr2bٝ7N|-l!N>9]9\]t@7&O>)GDU188.^]uvew=I6CP03-^'3}DetQBF׆{DZT^UN)i L>5k=  DY-\-Cr9>uG"ypLx\R߹`ydQd2(T> mO^I|TaO9YIacӦL h&ό hZDd 2/srI0:hVVEL{t"G֭F*moSZEJh\OhQP j ]JǤ$v8dcnɼJyR\RvD "LOtxu36j1f# CYMp %t6qS$1ɻJUVi]YkߝiߔJζb 6TR3gu $ Uh)4TC~`k0D,HLqK+ #x{i.O2QIu'˜h2ȴ ZGfN_2[L@hV,TOks1$W(! t"Ai綕Qͅ?&Wc$"4qY7ߡ mn;TOY3kb1.N*f'd`gc~PΝ+v{u(L VƧEAh&8,Z$܈SI!I/z\lVᵟkE.>,N5O>aAdq[f҈ Q%*I&_%ECCgQ_OS˿,bܸq?[`3q@PQȆenx)n$?v f\G>;k0oL*}(4#;mBmEhUm%/*f6IV?3Br&xFn a].$nO6EW˸Xj:b ^8@W0݌hX>/wpqlEK3Qe#>'-EttɁ&tS fDlM_}6)s\QW=T/v;e*W]z6@d:{%.OAmns2O6$Z%/bC8@i_z(85^)fzb38׷FY~w ?ۻap:=$M*-rhCMy75on)! 9uΞ7e4"<لt׍hsrX덒4"$6kybS6d+ģS"^xt1Gv cɛbᡢ!cQ sWGp/#o;KӤ3ht''MFYΰ @E_s]1TY @!~LP$tG͉_73Q d*(F>`?kئQ^}3aIMs)͇mqoc)&DcA_,e)J@φ~k 6{/\֚ :ÜxYRv T%Ij[1;oP@pgVCdW%w!HkD42ɋݏ=W Dܕȓ,>qԋ^~*#@O h.]uTS:"/p|n23 `[%מ+ Ü ZQ׶u64f\h0Pfhd=W)^IBCW#X\B>߫^AS&^hUm`.(i]-œn3e +=GIzksn_,N'j=گx%W8vbH~Bu|}ytu{}6ihCg{ Lj(",9172v׺l_ƶ+I}R~FݽvG-G²B(|BtjD=y; Pi ]_| _&ļhm޻+G7s|ߴw)Gĺ ~.|W㬘D2AB^(sPejs 'K4iAw?W#G3vsCcցQ@ _B{Gײ tè4~kt'+U/{',k̐c8•+[4t(дv]Z7fa0HWyqX1Q6l;|VY/@@+p$g eu0}vƘ>kёU%έS4uۊY gbߟ)R\4љbvP3 PFS@&=>~At/%5RJtF薏 n%vu$L5b ;X"y=g[u0XSs?o +Os] ZF˃80B勤W^w,; Hdkg됹Ulv27Ŷw@s@zQSQ1oeܗ']:UݞeA ٘7q|ҋ1j@b5XIBҍ{1Y- ɊTo;oLac1#SFibpyo!yEpŇ6<6IFLa Dʈ喗^LۚiHX J>Wi,i"ʄGc961DN_w/IE0fF#.[D7 +Ǟ ߏi(sAe.|&`zn:s*c38WZ`:P,*abDJLX|֛k~"#g;Ʌ ;Ӕ7` CtT<΃},|`[qz"hD"xՊ*B<+SzB76JJq*(VXN?܊cL6y-rss`Q8#աU7䋺x(LR6n~bgmA鎓*孍?U4ʜ]:305{UF-ljnn(䲎W;\_#+}٩ic"$uԧ궩audiyCگ4˱>/IOqޣPze& OՌYA*.cpSE˫ hFYnr_9~fT#/ӖRN6O[ 0KnlO)_K7BHFK/>y(`"cNsQfb2& uח\c^8)X]m<$6UmpV\ñv0mY8 P9 EufxRI([t6DkIsOU6S{6|>oDtd7 g!Ȯs2A{}GP'W:('}hMݍR:;QoUotz qG}Q@INᱛMS1aVJƙ"ٜᑺ2=~,5 3v~7gl.%IF؞@kgDjDN]kNRM`{TX :j\ΤO읳q$%-1лNIJ : =%iG);y~%[+5[rJMw / 2d<řd6a7 87^#J֖&IU8ʁ;q:R7̍T P*w粑So-To<H5#.8̢>>t3FQb6ִkǖkŝcx`Y4֤l~׮7;J̃g;.Gu^$=23;8 "awP̠%76T6(@\V[A1jʈlbނɎ&KpZΣ(|)MAjv+$n"Ӗpdf\ 66Z6[G;ߏ쫸Xfm<I!)j0xdDU0>a lĸp1<ڑfPmӦR_w5-|*0Fwauh=CR/ݬ\I]|J;A2w9 !r!i0kOlpȴڶY541mZ(DNi ށrGiXO|E+ )RJ%Z!!6|t̪u@䀩?cѡ&ʛEЪr'r 0BGN>d\$gr6kn%AGuǚ-n7QxFRVD%L қ"Iŋ} |nR[o6CFMc}ZPӰCZF6fU{P!łɊ(C"4ņtl0M-߷zeX 7/ Z,_\YM騗/in+K!`N6PY?0D}ruƬr%d|݆ºg*/2>j36 40cW$2$QǑXc w6' @VY&_⢐~ӤTx 1:%'RqB 8CE%"iFĨBs/#/<4\1,"~@ Xl)՛' GЙm% t'P\պY1jFsJy,[Mk@FI8ۤ $.eM6ߋnO7Y-@#G1ȯKU/g9S UaؔbR|hB ^f x7Uf4ZDֆlAP݄Qw|Wb'{hȕrcgՈ 3Or! !b*o4S( %<O>[`~#oâExqоojcBLkşV-j_yzaWa: mLUڠ" 6\ f$zM jz(~B+)!`UXvkP!c\/3K܍b1SwQ e NWK˟ &b,lY?Щm_J~vBy"3q7ۍ .CcyT.`vG\uc6VcЩ#Wi~TQ50x-HOf4eMQتb_4cw8Z2A{,7)hs%,s.]5Kge㙸E*Bܮ3hU$e O]6{7V@tn$糰yrrfYB7\̠C YE=gbՋtc+9?EgN.BVVX_-re=!nBLx+Mۢ A imy `U>'~Ell,T:C \$?b+&1SD28%#|{ nГж zkD$o-aOSQÀnE\C %)$\!%[vfG}N$梠Zʋ>rKlC g+OxlìʼZL_"[zqrwΒL =;&m9IWX&%El ˞tʄqW](z6}44T_\TmhWH\bC_W9+3{j{u,sf͝UV7PX, e²y7r(h:*ƝL?!g3SƎӋ] 8zSfLK@f}9r\pRU٦3C1.C3<<=Oj U& -# +E\ks.*u4c~ȢSF;4OǂZgBk~gxt.y6Wy |)b&v bQ>C'Lfq[x (͓+\1Cxf$iI"w0V^+ٹ8n<~4ueϓ%l;1Eӭ=bH)+jKx:Qnjʁ? $9hQ9l26D%&Y|9áCP8( qrpn@T`Tn`^]WEY\޶@&7ǝw|p$ljsI`C4m۝d_CD?\@C(x8P1"eЛL}䫲}(FdB\M75.'V8T ͸cĢ~W*ٯN9Uz3$g= ])d)?3@'z/x=uYy^ԅ{wVx{o#+,Oqk3}}m*vo" TUcݵȯXZݣ2nB]5516'~[;6,e2̀=JDžu]hQQtyͪKd8{خچop^9 .h,b&#h uZzac1ҰqF叴9Np!z:VAU\s1.]j ô j JS ΢o(:U=E?ì;֤GŦM.',hA,Mox:)`LɵL3RkWw\<GPG-WLN$W#y\<"RݾF6yMcϾim=Y_uXQn#J( cE@,1>KޜD+RY ?%YӪ64AQHe j ݢ&%c@!-zYPQ|O oyf݉P7SB]zEI TPIu2ߞ=VqP^Ww݉`]ON_D%Rs>ZvvW2! -n 7'pl&e46&z\fݳ@"ήNr<3FD0mC""?)DnG@j:`~}yy]#W(M*?3xgT ؤ948'ʙ@a$oMJzpP-`{ kz~̀@ /:{M U{Z4NBT n5ZI?"U 4&+'NyZ u"kA}$DG!ʼ.ӝt[kwAsq)ݛdS/oU$,KBZn3ݲWeFDp{VްSv#Oz"`uo~3{9 4c,wIF%@U~|y*P Gq(0ƢKò;~.*ӃhG/bf&ee # 1tg+uV-Unq KtƝEL87[]5dzBR|b]eK50c kH?sQMlӽv6M{U-[ʡX+cJ,Gd:Q)a 4!8gpN:OfwjEVT}b;GcG+ZJ؞h;,PtrA/tƦnL1 Nf k1[Oy\[8޽b7g^K%|ٮ5)mhhԒ=mF"JI8xn K%5@s Tc|M5e֪B!$a6z]4~{h DFd=]j+gt]O' K,˫{V(J:EW{Qu1xa,gYPv$B stE=HC-2=?t9İH 4s Six>0z0vRqg.EOd4B` 9G>TC Ԓ .ȴJҍ-pqJ唡MڣhݛqZ69ȕY$8.]8U %| a1 ZN"mMhk@@& OeτI,Ǯ7|r`Wo97L,a5< YtX&edy۔`Hd"z >y zzHE’5~ o4%яKDOT].Pd"p8'RUu`E֙=S|ѨESYd]14z%{Krt+Թ3Affiw܋$s!\%@DMB}@n;zdNpB/rǎ:I 8'V_0^xա8৯>6X~w&dvNa-dgK| ~k׿"1jad0Gwp& \sTL$X(Qkw(?Gu`-fSxr7o oc:_䟻0ѹ:hV4vu;>"| r+rtto殩@w6ƱOmh3:#nOb J{NHx[24s*͢Ӏɀp^\ys@[. Tt ֥`Lp ptZcʊw=#`ȷ~ D֔L5ɇ e8Yg+cX4+ھϳgnNzI[-64>JM_u8hÑ 2z[۪V"eU`$"(ԟSabb[R+jdoy+67m̤mh]Rjf󛢻KZR*/%dMr㠄RtDZ$&)J7iyӎHՋID{7."Tl?s)8xv%{Y#r5] *;3ͩh=.Űx,ݒdWn.|UE0aQ*{ԁ<{b{a9TYu%IR݂l\JtbXW# Dzvc7W34Wd11r+&>v+O.'w;Z6[VBM?e=/qbcE[=KvnCDZkԭ5- !">If-;cpH>(416/~A;߰kǞ|M .%~rދs>T>GWjI/۔.:iƛA2A&Mo ~Ay42^Yb~.-`Q%ObʚkR؋ُ"0F^8t4t4)h9E ޠgFzDݷ|<#tRytSi~CLme|C.FSl'?viJj@d.1Mo _f/Օk%d5Oy8uFm F`,-e2Y-i~ZOþ)q t?5;zf hxU/YV~ I7.)۪T%TBW6t~"n:t+"!+":WeB|a -LrKL__+KEE -nvҜK7?>WL{pVdZ96\ p2~=vb3Ht|kkAp >2#npNحzgHu:ꌧj ʐntP2=/зH~m%aT:vѳGZԏR?o':+/:B WJ㈘ 4 >z&k /<-~^|&CCx{bu55 =`S;S55ک mo7JJejZ]5YIDgjk.Sqy,FEf;0&ɼy.<e*m+f`|c7t5tP,^U>؃J B*~f!E44379kuLWbگEt%SZyз)_2GN CN"NV LD[Y0 %2/FA(7'j%̲'wbuYxB _E=2KKOBMϽ&o73H1zUΉD#+]aPgUBX;k'Tflgٳ4}AU[.UO+?]ţc~[zFIQǴ}2Kd|Μ;u9AА}ŴybnWQg[x̗."ƅjh哽.T܃Sphe]KMbNbV - j. $&rMċJlX{a~ܕߵD!Շ <\'XŞZ" s2$?z mBe|O,=+)m 2"N%QF*{/S. A]XК>{tOVJۼD=mŭDZs 9Vfڡsα ZZd2.ž7"Fˮj'h TT݌ҔwVIh&_O'd۲SG!d[{ZeBS瀻܁aS𺫖zGi=v'ϱF:;qsB diXEw:1Va ݶ%%_PBlR`< kl)ўtumB'D5EWCmid/\ABfLqSV.{u5v:om;m0hZ8.NeOțBVև,0 /!;&hQtC]ՇlH٨ fX/ԍxEc8 0H]@szXyH\ycPFp|$F͗h$X(&PXYq}S;zؼFZ ZR[$(F S2&_ƺr8W h yDb}O󦵂Æpsރ[i=~ ONg,:mFt[`Ƞ )څ#KuJgAE$h/$:6h$l8X%r?ZR vُo2 Ɠ'(D& _2kLċ̻ܟ'u(:TՎhS`J@>艸hۖL,}߼/ ^7u`QO]scf7uQ (T|k@BZjVrBi9^e{BAy,JTL0َcZ򢑗8ѫ P5$֪,] K;~?Ƴ#w8%@)`կh1od_S-y}-ᣳAF7[#B>Ԝ,E[_(}E7mڃO8D.Ö$X4?,ryþĎ:<#R2܊EpuF^?p TH-" q%,`lp\}š480w(rrYىB 0vq&DI8&wn8Y c:EqL/ LW2׌&}raN5Ƃ/b;r5~r5e03> ˆP3gj jځzϏ,)Ty(VyVCe'!kf˭bn !Inũh}3 %9]#jRyg7[&q'D׌ŗޤXŐo}cy8&*!^g1=@Ⱦ}} ϛ@G#EEv 9ÞƟ:J߸ٲ1>v9 촔WL2tMTHoD$[6B&.b\o,Tؤ1<= _i8:fg|s׾أk'"5M~D<}xz&TI`L-ttRߖPfu萟$FzP8RtkZo̺uC4&ӭZH60Z.0y2EYӊdbl9 Vu%UJ'~&iNDg̩&. NTems.i%Չ4&>kcsOm 9 Ѧ V~#A\^aKwSJ9+o`hBEԔՓ,{WL'ep @󦏳6* Ԙysх LW&JF&W*y Au|&bRzo)\s{C1QB-([Vwލ(2n&+|{ąJtURy1x9lV $Wn~]i/5HS9v7,F] Lqɝt0s/Jrt,&+X`"&y|G[pS$dC具< Ab1lɟ4'`0]{7d1sՆ7+ MƦP2\E_D8ǐw4@yMQvhvW/9DYVЀIGiP4 |TURn g3Sk}|mpy*3YFx~BIVL{ 6c K/̓wYpKѵ xL]OZ䑲H#Uop;wǪHy&9Fr)z!vMO (g% i,y@doW-02RaB]#n*M*OUi)cg[,԰@ ( El iQ U79hoZ{6 }~–02E-gD]DG<=1Xg0[t%{{Sz5kNӆ&ވ4zK.n¡D"G.H6 C&8Wh^JZ ByۯJڴ֫X\OAF7*2 UVALmR>jw 'E, EPDRmia4! c 2ݣ-56Xul(Z`!,w>aJ>=y::Df oV) R3GKY 2)´< j԰ϊ?.0"J'(? sE΋diI㺻L$S}4k!* uѵ oF \aVsۈ @y,"tE}f>E-8,^='̨[=OJ=&ͤ]=^۵]mͬ@ءNژ3Bqd#'“V3Ԧ¬]ىM=<muٳ=NxэI .rZ3UO|jxIS+|$q Vzp436 [\SȌ>EҩfŲռڏzG 7?/ڈH/v]<Ħ䴠ǧvL8Onr܃_E`X? 0𧻨h.:!Co*I;F37t蟧UȲy*ϹbDJŌ0N09.>KC>~DJ7*L2œ:uѶ@23?l\{φpOކQv+)!EY_ K%9NNjvS(%1[u#4N9Ob g#F!F+՚eQ@IyrS vncjzC. M!;H^@D1X"b# m[1ˇgw5`tM_azhU5Ajg,;a\D ,c??87#.I`YM)9eRZVz!і4fX*&hd5ihDt&|s@a%@z;/hn/mD( őC|2 _TE;{FЩ?%w L ?t4<^g!B%tZ\F+?e6ʔ5:`ѩ V鰜ӎuNW/א(~]glA,dٱ"zhﲚu}V& _֑|*2aSמ[}r$HX7 ^E2M;*9%CJ;1+$4r}0k^||+OE=P䚦}%f,ctn!]X5KuvgE`z$rdW齷 y *~D> 7TDzwِr;6/vc`@ ; ~i߲kCXԾh+lASԻGɽqD@e|_7<[)sWCi˚(m5?=c-&D6m޳۪u -hS9e@tv۪ {$2.U6N3ܪ'@=g A(lSrf?لH@ ax al?1A+#k:us+sv3y`*U^}pQ8Zv=[$ܳ<#ˮr團0ݧ\K;%(ZTZu_S@jIg\=L^]ln%X3lR(f Uw|AgʊA=@'8?E;gK-oz`#lF] LwC+y_[>I:`Tnb(f,a/nF;z%C'S-z32aVm NFx-<ɬgV}.gr"N*quQcχq&]S:4!nR>U2 VwD3,D7ndpM% tzb'ivLxxC]#z&}eav{.ǟFB5=9EꐎS{9e`մIٶbܙ"!-x4M+ J 5 z2=e!db틱' gB-h48諃~Mue`^vQSZ"œA,3(*fL0)s mM-z>cOѻ!X +^bwoo0sCA QFJ\JUAcP)7%;<3BphmtۮP-`#xhw}ZKRc(tt,^9 _&k7R)X#]}f'+ıIoi c]. -hr)'"I bd RJoY%]l/%#u$ZGVVy ,@vaAM;ۡ?x7?uIlL rW0ZU ) ( a9kG‘e<_*.;'!1ZpYS!BgGB|ͧ~Y k1c7ZZɜ]YhaJħYe.3|䭥G˫uztv&m2r&'Hf'n'#KIAd`nNDk*^:x=;Rzz%dNFWysT疴 [3 & 9<Sqv5ˠLBra tu"a|;uBzYKJv!' $W#sX@j}Z u32s4PQ֚5v屴FHJh0}4KkEۯ^\QђK)[@<ǜ$ƿ=(vfg é-~}BtG>ti%1ڥ#rK:QCKyBD.2o8b; 'g4xwLB|4{qQ7Ugy0.&'2 ^sWK|xfJ%+1ׯ܏'> -"5|(ƶ]^/W:]g8ӻ*TR-y^{)E/E^Zn^R8W0 gBM3T?¶(L>܌SOBIz7FY+,~xk*)Wό ψߧNu5Z6w'vVOSӾQ%]dB8q});zLa['1t-̇u|kU#[&~e@gwS3+b:n"N'A2F+(凒8=֨|9qCdǀ|@VMR. (eɨr9*cMlJ^p鱇}4^tn̍v_j-[nR~D'jDܥ_ ȏ69(āQ i:i}6DS985?[= bBEx^8~;xН_sJRH䖳Aj򂸅 5ŷ?uy2:l$9hLe/g]%˘}׶hj 3@c6oL ءsogt/.3ϩ@KTf:WP9a>)qpx:<ʴu-h`a&p^pFb$;Q><3s5sgÞ@ܵ[9{ u;Q2u%_J|kJ7.ODMɔ)9$>'.? -J NORDؐ3CY-[,gm|~.?Iޭ [yqг NG>A+¦)}tYJ59E%7I#@f|Jkc_X+3akjK CnKgS:6! Cb$iRAYCJ3; 7!vEo LzL _$NF@ۋ&6v S3ڕWj|XT]9G.í50=_aMxrs-?԰?h9ҊAK07wPʴ4(8 Z+l! K|y/N>Q)2YŰy tgécByP_;FP eCv N7ԩ6x=*\zY?IS~Hp&y(n:C"[63$&Y'PYT{LT (dԀPO2R-zpTS3vXx}O6&*u╫Z% iЧ니™! Wk']v R ;q~"_{ ,~z6ds E\s)%Xڰ}?6=kUˠi6őt!Q h@Y_ߜN׀&$anwʼn'Nhy1LR9qwBuGXp _:4}刁ؒ~ݛZʍN)-"tßx\Dؐi ]vV|̌)`d$1FcbbLUree/W/jE7sIrg@Ŵfm~@ =W ڑDCbþ֠r,$(L|10q{Q9wB6\ՕKwy@r5ǁbBb|k%\}esa˗v lC'xRMpKu@0F-hc!Vv{Q*yTruDU *?"-(}{ĥrzDfk:n^߅DP)C%VC,|h.(ӕ;m=%TEsPݠ RL=|lLŪ YFzey,A*Q ga\~S؞Fq| < j >etJ,Y Ɗ_fN#W#!D=FO=#XY"8 u6=+j f1P}5m)[b=i8mh o+fB:"[#Kӑ5_| 5 wv_"j%"Xgr0Gj` D`:^Z+L k n7J>VB5RU+ޡp]o՗'džurȂ xZ>pjv{x@a@?{]+iK4Z񇆽s5CEhpOP?YϯM? 8%cD/4{`"/Y=-R 8˻OC) %Ȱ募?sĚ8R;m>$ADy@)U%St!这W[싯_*GjϱHC'U3xw?g'?u%%~s-XBB0 %c)+~v@<+ECtf|YH\Js} 3r[,kiPPĠi[ ~)l\&g~r cIԥiy -ٻtTWx|uO\#kcM?I 0sUAg`U\c5!|t+`b]K)H[WW xJQ@!"V@ `E7*~a/dazJ̈́[kwcM25v_= DFW2(P59'5N]mBi-HOY kW#9؆`vw2R/$O5p27bdb0B"챹v`> 1tj(|n$<1>Uq}ΰlm_ .HSq]?jk_ŏq2bߛ‰#іE#6I΂:4$d7g+[u KXhI%¤O|lbAN&?5PhJRE4NYĻ~oLNǒܧVQ #Rrr,ZG.5Y]JƓ"e\UOzWk2@yL4!uh|r7?+FѨȕeEx¦GFw,*έLs?sLt !X_TqGamJsQ.vc[a!WuQ>_iU=|+Qk٪Q9AC2uܚ&'GBt$C~-`ԚnO1McDWiM #;֓^ۦi+7ij03lJ G4b j/m7^reX8٨&I[Һo9cV,UdMֽ!h cL2vܨKWĮUsULm58]_8((0D߾QŠ &Q6zd7"櫉ޔo@O]Àm +HNΞ̛}UAѶ< h5eSpN v{,q*I Aǖ,.jʩ`"01+S;8Zhяr\ڟi0i 3hwQ ҫ3,௩=3}B;Jl 3N=NM/>L6kbڕqһ 2XZk59 $,Q –0_w!=êۜ lggلAAy!]ׯu mĥB;, 1<^Ng 4 |o5*V֎Wc=M-bP٧ @]dŠ-fn\n =?.bތjA! 7sѪ˦P;xLc j9=m+og%ilr*-º.z[ >$9%#x-+ɯ#?G@CI& @Zo+!x'"` ~>Pj0&tK.-(dG&ڳDr 8ih`8N0dD-E N۔3VOy snM9A9gZB& c弄.Y;J= k 08W%HnkI>՜ $~QjNVG[v<{)$ܯ@crOO!vvM0^g0tpJT7rPo}Ԑb)6 }$2!W\Q&m3g5uf APYLe)Dl(P/<$VN{r~ϹrnaA&VX돍+3?C0饡ۭC~jnRA$74^2Rq͊iKZIk"K6hƫ L<)f$*ɩ6FX_}(PpphWvG$BS֐X/TI*D!W#Ffc2iN.} Lҫq{JF2YD0W*:L 2./E6>|<ۂLV/ G6 )2'lur@iPs VOn؂M.2k Rtbr;`h#5DJii)`TqI  ,1ݏz=JeJ ;›LBE JK48gCEc'EtTqFy&%݆j=8gA{TKmq+' [luH5DtU"|`` )uɨ1jttLŽ :&VClvl+d(?yxFSҥRr,!n%/?<#-ݱuq[',HhIr7?d₍3n$H{L^!ogТN'6?$MGFT G9"veWoiqrh`=>IJzѻp=q+N>+Tݜ )fg[Hә?wPy#|S>굡)ZAP|x0kY1;W ]N1Z^'ˢý&\SߋdߞIo+  8|B@#q="7{IZo2l%$SBD-aͳõIvGQsKVi>M=) cgZw8dM2zryUfΑGM-ZA=r!gLٓ$jWL1e:{S3}Gv! o4*o]w02cZ-[8͘"cpn'N磶1bm䠀L Q'8BS|_%EWq8z3~["/nZIo㾘-lN UOdKiQtUIcu/qx@VAt1d2/ K+&Od^i ]YUPQFOlFOTM= :zH ]4/adi.4,FmA8gbc5.!%wYG1XJ&LRYgW1K=7۬eXaͳ.Z( R#::oճǭ4ظgk007l<ƧljdLX+u# قв=Xf:4ъFVƣ<=(+&tUu+9_=l( 1BiDZ@f1?HTqma/QMZzΘ#g\G,)fWʊ$ssM0A\욖%*^b;;sL4 &c37_'p#^9X: ԙม1aAL}g;`8\^;`[`9"V4KPt6F,ʏ\i YZ