libtss2-mu0-3.1.0-150400.3.6.1<>,<f8tIp9|6H6>R _xZl*?eΎZxg瞴.Ğ7v\p`p8욣{5&+!6zTOjGifT<]7h!':O;ⳋ,8%@ 3kdʂFK7_K- KB1ŤM>@MH?M8d ! F,0<@Yz     B X`jt   (#8,'9':;'>J@J$FJ3GJLHJTIJ\XJ`YJl\J]J^JbJcKudKeKfLlLuLvL wLxLyLzLLLLM4Clibtss2-mu03.1.0150400.3.6.1TPM2 marshaling/unmarshaling libraryMarshaling/Unmarshaling (MU) as described in the TCG TSS 2.0 Marshaling/Unmarshaling API Specification. This API provides a set of marshaling and unmarshaling functions for all data types defined by the TPM library specification.f8tIh01-armsrv1`SUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxaarch64`f8tBf8tDcdbe720d3f294b91fbf55908aef09ed06bd38607eec56832aa6f7e1cccf4ae72libtss2-mu.so.0.0.0rootrootrootroottpm2-0-tss-3.1.0-150400.3.6.1.src.rpmlibtss2-mu.so.0()(64bit)libtss2-mu0libtss2-mu0(aarch-64)@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3f4cʂ@a@`#@``ٹ`@_t@_^M#@^4^*@^@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.commatthias.gerstner@suse.comaplanas@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgmeissner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.comguillaume.gardet@opensuse.orgmardnh@gmx.demsuchanek@suse.comdimstar@opensuse.orgmardnh@gmx.dematthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary quote data, which would not be detected by Fapi_VerifyQuote().- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large RC values passed to the TSS2 function could lead to memory overread or memory overread.- Version 3.1.0 includes: + cover update to 2.4.5 (jsc#SLE-17366) + cover update to 2.3.0 (jsc#SLE-9515) + fix policy session for TPM2_PolicyAuthValue (bsc#1160736) - Add version the configuration file tpm2-tss-fapi.conf- Remove conflicting sysusers.d file- Clean spec file - Add new library libtss2-tcti-pcap0 - Update to 3.1.0: * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455) * Fixed possible access outside the array in ifapi_calculate_tree * Added pcap TCTI * Added GlobalSign TPM Root CA certs to FAPI cert store * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59 * Added two new TPM commands TPM2_CC_CertifyX509, and TPM2_CC_ACT_SetTimeout- small services fixes and comments- update to 3.0.3: - changes in 3.0.3: * Fix Regression in Fapi_List * Fix memory leak in policy calculation - changes in 3.0.2: * FAPI: Fix setting of the system flag of NV objects * This will let NV object metadata be created system-wide always instead of * locally in the user. Existing metadata will remain in the user directory. * It can be moved to the corresponding systemstore manually if needed. * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix return codes of Fapi_List * FAPI: Fix memleak in policy execution * FAPI: Fix coverity NULL-pointer check * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check * Fix a memory leak in async keystore load.- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package. - improve the descriptions of new libraries (fapi1, cmd0, swtpm0) - adjust baselibs.conf to match new library versions and added libraries- Update to 3.0.1, changelog at: https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md - Update libtss2-sys0 to libtss2-sys1 - Add new libs: * libtss2-fapi1 * libtss2-tcti-cmd0 * libtss2-tcti-swtpm0- Update to version 2.3.3 * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu- Use system-users for tss user creation (boo#1162360).- BuildRequire pkgconfig(udev) instead of udev: allow OBS to shortcut through the -mini flavor.- update to upstream version 2.3.2: - changes since version 2.3.0: - Fix unit tests on S390 architectures - Fixed HMAC generation for policy sessions- update to upstream version 2.3.0: - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/sbin/ldconfig/sbin/ldconfigh01-armsrv1 17149758173.1.0-150400.3.6.13.1.0-150400.3.6.1libtss2-mu.so.0libtss2-mu.so.0.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33671/SUSE_SLE-15-SP4_Update/f8e72b8b3119bb1f0687ea7d03152f7c-tpm2-0-tss.SUSE_SLE-15-SP4_Updatedrpmxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=606cceeb1666635aa14e17027d3e491a6f0c28e3, strippedPRRRR[%3twutf-82d05fe9520d684b07e2fb87e9d3fcaf2e9257e589f5c58d3cdbe26b6caf11bd5?7zXZ !t/pw3]"k%]d\Q͋@2]r d!usXʬJpڧ1z]rR}u4s/*9yF֝Rw|Th]or\@"mx@eA.-W҂?V7ɟ!9u4KJV㎢>ߏqJvVk~h.[ms lA(q_ehOԳ4XXFVMɴ]ݡp?j$乳tF &>zqLfi$rρ;q!C?~`Q#fq1Y9HM5Ml  }]~4"&`(FI=R/?2eSGvj#L6 yį|bn_T˃Q- 8{е p޿4HbP#z6##f=.nbLZ)~Z.=s˂|_?P!u؅ H*{.S"V z;vIvuIbQ ,kNW^66 O(̎29$_L%qt#H@ݚ~ *7d]npW#}), Zo/ ^,uUf!M kF ]QTGIHdӱܓPTm+dӽVWu0tBh-G]JDnMD: rI6-kt݋? Cd_@SgqD#2$9!;u-;" >oh@F\7t/MH+_Fڳz8#78;<ܩS[i+}ИD?>L9#7AxEA1qYD0EL.B:}8& w#.AZctt`NSٞe(5&K)-+ʆ/w=|R:7Az, ^V R$!?gk}Hym,sKf1ڠ?0akPV9yˌc}ME~[~` EӢR-̲Xo1nGčnd[[5 ^|-n*y~h>-QRs v&+. L6/m0kv)$te" Z)ʝ?F9#qvϤ沛cAp?zGΖv x:d埱%`'n J @E׋м&=HJv|7$C/?K#P{F o{J#i; lն@_Xl0 (VgNzRъQ/GPdw:91baZ/]Hb{VEsǕQt47]Hߑ]cb>F/5͒Rz_Y( obEvXBq튒6&c\8Q< Фjʩp?rp'ieȽڏt#- $l'" @0\תʚW>ซoꆋQWj&?1|8J?E|+duHS#+FF7~{oDO-s Hz ɓ4᷈2?M=`Ob,8{ -iVw1Neo[ 5|8?F.o'd<= rFꒋON}qQF* ĩ^7(wvJ)\Q)@#ɰ?Bn͌z9|;іxU]HS`K՝[Ԇyt - peR/FI9_=لFWY{rr,9X^"Ԕɀ]Jg4k=ڮҏ՗#F=R팙# L89NL@ {aƙ![c;B=#;UH}*MIw ͱ2,0kt|d,ءQ a>;DehNNymȩt`"^ V:Uz$\̙>_f;Ÿ]"=ŲO>Z=Mmq\\*dpa|jdWZ&s{Ϩli*|xEP;\W^LB#CQ^_,])qHU+נ,b\ &yU'b#Pf (L%3&*.O 310#L%2nShMۗq^J!%7[_)+xߝzZ q鰤MB;vQPe&"ʒםȝA_JO7i֬]ak;q8W1fb,+*kdn݁QǕz/T5oRP"_&=wC0~of􆓐Xeb,qnR`lvElX6q"Iǧ{SgLYs^"T ڻh?2#@; )O?JȡOiy>!<*}^`j:+~ ecи ~L~! tz` =.A֦zouP cN2e1pbj^6d-} #z9#wy'}Hܫ@ȍQ`Lktx\JfSlk}"^\Q3yhwf~EJ ȖjhftN&+7Ej@쁙o:W#5Q1xi`[ͬnyNWqL{D +G} i. =/#DghW-2^iPVrw%Y nBhP~eS8l#yeSkdH>mA ^_? 2 WK{B8u5 i]=YV/ߡJaOyuvx q_Q#`HävL= G0X; CyV=DY[S ]& %7.1i4 Rb|>q=e ?{Q D t4#|ܧrt1Z1U؅K+e9//$CpZ8kZYU&U,yB=+ yRےYd*<{39$/LD֥ ZpP^" R=Aִr!ojPfelLuǦ;.{5pRr#s29,b tKa [qՉ~(21c3ppog1Zu">kTXnR|լO|0h̭b-y%xd dcLP ZM 3Ս"G>7,XCbn%UD>6ANj*rmv lf3'ߐQa`8z{JFp LayZv1(; FKf݃8p lB{ ![MwoV3"EvDƻ8øڰē.7;?йټ,` ~3( XzeʏfUC_ȍj\,N:3K]`)$۾^+s.?0^3`,0azh6[ZJ~?ړxwipcz ֶs^l{:l)BJ4\"cB^.5#_ÿ bqξoRKaFis4r#!qGghl$ lify3cE39>v1,`wL$]Ջwv?*VTĝ+ֹ>c1$c6o=υ ,"pi_Hy@%LXgit c0.Fhpέ W FVJvơQ&PjMS- Xj: }^jxŜJ<JĜdC ٘6(M93${xYiPkFu4U84oi`.uj*%3&޾ *61W[u'D A$H cN !9H/hLodf-60raV-H: |㋕WkYX'|}<1j8$yf^̞/￠"#*l%e_JAJ_~'~:W0+C\yWJ)F}Q|G"O,''_W`!c-G2L'ɓH ^' 7,1!ty_F֘?'L4 ]+1<ҩ[T9E=SHjj Ge8HpE:!w@fS 'U =#4 xl&"%OJ)L;8vAMnV}'pqD𻓓4 śkSV=WT$˾"c,P^6֛~T!g{S{jǕ6πv$''u yT ]yQyPq>ŋ`"zil=3Q@|e7E0-EW" GɼU>jjY('5L'Wr! x[!ҍ%[2yM, } sxK֩;`F W%3)C+Ř^ x95J=$P 4^g/Q85>wZg0ִ#WX+CFo}ِr/تgg0i@{(`V-} 79!*s]>\i! ʼno`8P2´GAiq5/\ Pro0,/"TGT%mtm[4'APۥ6Dct>y{FmoUz3$NWδv01Ԧ*F{;tk YYX.Rx'Kfw"J)1%i̴!cŕpt>o hF HCL$$HLw|58ӛ)oSS4Vg01ku)ٔB'T4ylaOv j .'w|Ψdph+ֳ'ГOu e[o$qm=QGJ*ѭ`Xui &/r] SfNi7Xeq*nGp6rZ^_a1(I2C 4g;;HQDOX!@d#E'6mQ?FRԺ6Y]N[!Bi鮫*7H \xA6<8B^`@]pc`c AC.cɚ5ܖiH>${W@H qBqso9qU$8d%V!!j.!խAuT7QdlAAHz@rvc$bxvKTFKz&z%[#%J%*V8~bfrؕ7lZ4Hn]2m4FA8(50(_r9k+~~t®G5Q懖?="K:Bɪ |:0j(&Ծ0e{~d97/$x1w0%N=QJL#3(z< xG>/9YoagK}=!M˦"ڏ^M]U^#G3Ec 2`zIe| z EutS9):0i}NR@k3,Va" U* m`|FEC㯤l +Q))+cchO*=QmVA*EJ/Z!<+cMXqTȹSdS [)A硋^Ƒo黨s)JTعR[>taֻqя+\QSgtAx\QmɭӅ>Nn''Q3A~ \HR /lۂQoT5ط xz?!*#.5$Зi 9I]B͜B͘mFjwĂIN`Ų0{\ǃhYzªzeVPUynyۨmɊmY>SXC(XFrCXy{?a蔒9{zTUv!w/7v`\*snE=E//o/V3HV́i•ӑ_Q=`>G`sŷ$sf1cE@ J[gdY:;"{cv{k`g(cxC颋RgQ1''H!d}TƤz{[ӡr z{>nS†XR~Th}G3gߛ|1WyXIx44aPA^ aUHȡ˰Ԕ?~wHtӤ/3&A><"l-t¦f:Yp Br9|| sPf6 3z ow ^eG! 0:Tp"Շo1M,{2NHR/rV [F:iI|Ns'_Ңlw:AOl$󼞗ZeaHW-6m+նۦK AMeLkjL8ӿ\,8Z ^ @X'`[S~;o-˯s-_~' w @Z7zR{q{ZWq`LX~LP$T jt<]"缿vT_8K҂Pm[V"QyČ-P3LokE&pq!ʔx'eIpS҆ Z,&LA?Z",RړfS"r܅=wٌ䗾"q1+s {Г3&<=ƸRD3]y}zhd6ٻsx%i'+l50TZzXWȗz'i*g&Ll& Б0:Vv*d-Nk`.CQ"Lɨf7(KlCw )`ؠZI.Lł Q08>x/ao>@Ң,vla%P'?kY#`~^rCn[;&V[Jߘcp<C0mrKy0b8xR A]jg[\<nak# w=xV =%J#2b&xD?֕4LcHuS/=sA4x) 5u_fSk Dc俷 c_3EÁ&]!S3cv F'҆M?9Hv#)'Pr.a4/ IL `kˀ:(PK{5y#!J &a";GP\BgZu){ [b}ZAQK>#Ʃ >h}vS)Fo-e4 k{`͒:?B aM W6K,b)·yoh\oBBJB=7&ư0m)@14݋I,+rk`Xl!|6(gGȵ),KaY/Z&Pq3SlS,gBoIeL|ޞ"fljEb[dL-E8bM[+ڶ+<@fD5_>J΅$_qA] sEp)v ȲF5h"70g]jZF/ kڑlN>x㵟„6Y! Ǜ[8aD٦&4̞oGsV$r1e?g.DLU" "pybdsUy[}&.5vƽ8[l5,q.Jh? ;g2&|d0. 5_bF9®,q@2 Glu;" ol~pn[*bӠ#C.˴W(V|cX@ y: m"l[k${- Vi<}_[\@ $ aphEl{,gtIU)_S{c+q ,/=4B!&1Y/wɃ. i!{з k2Da;D?u;jwXC7J(u5C^"z%5PfXLgpbCj=&C  *q"ge`.ŕoRd :!cOE_޿r*~G!p3388 %ʺu3)$՟*:REaݬv569i r=.+Ax%B㏃mKa=lɋz9K mLHCԢwcBUAǣ󽃗#= A40P} gTJbRY ScHq  ؐ'Nk$>Y@a匙)b^F,ȑ:\94wboX6K"1aToJ+Җ:~2(]/rYg f&?^Ȍ5ҋ}۟ W8g 4oǂҭF:faw jc7gdPriDi$Cy8VA:>׽vZ6J < F>r?ǭ2ЧWj^W'p kr! LT|c5T8ph`\ 6 9p 7A~Dy-㴐É=;[W&M3ԔcoQ b*5MU.?W8­c Xͮ*0ٕOh=(j{et+z?219{ okD4|ͷIB lj5VU#qX3Z~sh/#ȽY)ӟ&8]L:DP-kbm^c:W/ I&a3Og YZ