libp11-kit0-0.23.22-150500.8.3.1<>,Le:;p9|: p q7 "N=N`,iEBay֐7*"[ʘMķX}Et%'C7[lNꢺ%Fn۽hg."1 Hgg >ac2Bߏ= 5<pNo7k)Hy_ܑ_# )cX)D>)ȱ g)XC-ҤF(S}Й>E>@8?8d # H %FS iz       P    P   , `,( 8  9 D : >3 @3/F3>G3T H3 I3 X3Y3\4 ]4< ^4b5ec6d6e6f6l6u6 v6w7 x7 y8z8h8x8|88Clibp11-kit00.23.22150500.8.3.1Library to work with PKCS#11 modulesp11-kit provides a way to load and enumerate PKCS#11 modules, as well as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable.e:;s390zl32PSUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/System/Librarieshttps://p11-glue.freedesktop.org/p11-kit.htmllinuxs390x $=C}AAA큤A큤e:;e:;e:;e:;e:;e:;Z,_Ӳ_Ӳ_ӆe:;ce:;Z,a2f052f198a52bb81b03e5dcd8b9a67a9c016d6052f70688f94d5279f61da2d0cde5ccbf5083e28d1b38333b5817be06c158fb3218f21ee5594b6125a9372591e417cfeb3a1a95e61629c698ab873807b6bd3c73b71481b3f528abbea16299ed6c8884340b8e39cacb7b009eb4a99c045315dfd753e3badcc28fddaff193308099cd35701a2a0579a1c8f08cc13c9cc00dda25f14751c0ec4fbd951ce7568e395f8fb09ce1ecb5aac84612a6d8255111ade9cbf9ad972cad61858f4678a146df2e1ba993904df807a10c3eda1e5c272338edc35674b679773a8b3ad460731054libp11-kit.so.0.3.0libp11-kit.so.0.3.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootp11-kit-0.23.22-150500.8.3.1.src.rpmlibp11-kit.so.0()(64bit)libp11-kit.so.0(LIBP11_KIT_1.0)(64bit)libp11-kit0libp11-kit0(s390-64)@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.8)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libffi.so.7()(64bit)libffi.so.7(LIBFFI_BASE_7.0)(64bit)libffi.so.7(LIBFFI_CLOSURE_7.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3e7ca^@]Γ@ZX43@V@T9T;pmonreal@suse.comlnussel@suse.comscabrero@suse.delnussel@suse.delnussel@suse.dekukuk@suse.desbrabec@suse.commpluskal@suse.comp.drouand@gmail.comlnussel@suse.de- Ensure that programs using can be compiled with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705] * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch- Backport IBM specific mechanism and attributes (Jira#PED-584) 0001-Add-IBM-specific-mechanism-and-attributes.patch 0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch 0003-client-Allow-zero-part-length-at-C_SignUpdate.patch 0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch 0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch 0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch 0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch 0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch 0009-rpc-Handle-special-cases-for-buffer-and-length.patch 0010-Add-support-for-CKM_AES_CTR.patch 0011-Add-support-for-CKM_AES_GCM.patch 0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066): * Fix memory-safety issues that affect the RPC protocol (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered and fixed by David Cook * anchor: Prefer persistent format when storing anchor [PR#329] * common: Fix infloop in p11_path_build [PR#326, PR#327] * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325] * common: Check for a NULL locale before freeing it [PR#321] * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323, PR#330, PR#333, PR#334, PR#335, PR#338, PR#339] - Changes for version 0.23.21 * proxy: Do not assign duplicate slot IDs [PR#282] * common: Get program name based on executable path if possible [PR#307] * anchor: Exit with non-zero code, if any error occurs [PR#304] * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299, PR#305, PR#306, PR#309, PR#311] - Changes for version 0.23.20: * Revert "Fix RPC when length-s are 0" changes [PR#276] - Changes for version 0.23.19: * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255] * Add simple bash completion for provided commands [PR#258] * Unbreak list matching in enable-in and disable-in [PR#262] * Fix RPC when length-s are 0 [PR#259] * rpc: Add vsock transport support [PR#270] * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265] * Build fixes [PR#271, PR#272, PR#273, ...] - Changes for version 0.23.18: * rpc: Allow empty CK_DATE value [PR#253] * build: Meson fixes [PR#245] * build: Adjust feature parity between meson and autotools [PR#247] - Changes for version 0.23.17: * common: Fix uClibc-ng compilation [PR#237] * trust: do not allow daylight to invalidate date validation [PR#236] * build: Port to meson build system [PR#231, PR#234] * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232] * doc: Add 'server' command in help [PR#229] * Build and test fixes [PR#230] - Changes for version 0.23.16: * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225] * conf: Ignore user configuration if the program is running as root [PR#226] * proxy: Refresh slot list on every C_GetSlotList call [PR#224] * modules: Fix index used in call to p11_dict_remove() [PR#219] * Fix Win32 p11_dl_error crash [PR#218] * modules: check gl.modules before iterates on it when freeing [PR#217] * trust: Ignore unreadable content in anchors [PR#215] * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213] - Changes for version 0.23.15: * trust: Improve error handling if backed trust file is corrupted [PR#206] * url: Prefer upper-case letters in hex characters when encoding [PR#193] * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202] * virtual: Prefer fixed closures to libffi closures [PR#196] * Fix issues spotted by coverity and cppcheck [PR#194, PR#204] * Build and test fixes [PR#164, PR#191, PR#199, PR#201] - Changes for version 0.23.14: * proxy: Avoid invalid memory access when unloading proxy module [PR#180] * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181] * build: Restore libpthread dependency [PR#183] * Build fixes [PR#188] - Changes for version 0.23.13: * server: Enable socket activation through systemd [PR#173] * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules [PR#174] * proxy: Fail early if there is no slot mapping [PR#175] * Remove hard dependency on libpthread [PR#177] * Build fixes [PR#170, PR#176] - Changes for version 0.23.12 * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160] * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167] * Build and test fixes on macOS [PR#162, PR#168] - Changes for version 0.23.11 * trust: Add extractor for edk2/cacerts.bin [PR#139] * modules: Add option to control module visibility from proxy [PR#140] * trust: Prevent trust module being loaded by proxy module [PR#142] * library: Use dedicated locale object for printing error [PR#148] * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134] * Improve const correctness for P11KitUri [PR#152] * PKCS#11 URI scheme comparison is now case insensitive [PR#156] * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135] - Changes for version 0.23.10 * filter: Respect "write-protected" vendor-specific attribute in PKCS#11 URI [PR#129] * server: Improve shell integration and documentation [PR#107, PR#108] * proxy: Reuse existing slot ID mapping in after fork() [PR#120] * trust: Forcibly mark "Default Trust" read-only [PR#123] * New function p11_kit_override_system_files() which can be used for testing [PR#110] * trust: Filter out duplicate extensions [PR#69] * Update translations [PR#128] * Bug fixes [PR#125, PR#126] - Changes for version 0.23.9 * Fix p11-kit server regressions [PR#103, PR#104] * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99] * Build fixes related to reallocarray [PR#96, PR#98, PR#100] - Changes for version 0.23.8 * Improve vendor query attributes handling in PKCS#11 URI [PR#92] * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91] * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user configurations [PR#87] * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86] - Changes for version 0.23.7 * Fix memory issues with "p11-kit server" [PR#78] * Build fixes [PR#77 ...] - Changes for version 0.23.6 * Port "p11-kit server" to Windows and portability fixes of the RPC protocol [PR#67, PR#72, PR#74] * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71] * Build fixes [PR#63 ...] - Changes for version 0.23.5 * Fix license notice of common/unix-peer.c [PR#58] * Remove systemd unit files for now [PR#60] * Build fixes for FreeBSD [PR#56] - Changes for version 0.23.4 * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31, PR#37, PR#52] * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY attribute, used by Firefox [#99453, PR#46] * Add 'trust dump' command to dump all PKCS#11 objects in the persistence format [PR#44] * New experimental 'p11-kit server' command that allows PKCS#11 forwarding through a Unix domain socket. A client-side module p11-kit-client.so is also provided [PR#15] * Add systemd unit files for exporting the proxy module through a Unix domain socket [PR#35] * New P11KitIter API to iterate over slots, tokens, and modules in addition to objects [PR#28] * libffi dependency is now optional [PR#9] * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45] - Changes for version 0.23.3 * Install private executables in libexecdir [fdo#98817] * Fix link error of proxy module on macOS [fdo#98022] * Use new PKCS#11 URI specification for URIs [fdo#97245] * Support x-init-reserved argument of C_Initialize() in remote modules [fdo#80519] * Incorporate changes from PKCS#11 2.40 specification * Bump libtool library version * Documentation fixes * Build fixes [fdo#87192 ...] - Move RPM macros to %_rpmmacrodir. - New server subpackage - Change keyring to new maintainer Daiki Ueno - Avoid bareword to fix build failure - Remove obsolete patches: * p11-kit-biarch.patch * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch- Also build documentation (boo#1013125)- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox detects built in certificates (boo#1154871, 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch, 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)- Use %license instead of %doc [bsc#1082318]- 32-bit compatibility fixes: * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39) * Add p11-kit-nss-trust-32bit NSS module * Fix potential bi-arch issue with private binaries (fdo#98817, p11-kit-biarch.patch)- Update to 0.23.2 * Fix forking issues with libffi * Fix various crashes in corner cases * Updated translations * Build fixes - Make building more verbose - Enable tests - Small spec file cleanup with spec-cleaner- Update to version 0.23.1 (stable) * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582] * Add pem-directory-hash extract format * Build fixes - Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff; fixed on upstream release - Remove autoconf, automake and libtool require; unneeded dependencies - Add gtk-doc require; needed to build html documentation - Remove redundant %clean section- remove patches: * trust-Print-label-of-certificate-when-complaining-.patch * trust-Dont-use-invalid-public-keys-for-looking-up-.patch - new version 0.20.7 (stable) * New public pkcs11x.h header containing extensions [fdo#83495] * Export necessary defines to lookup attached extensions [fdo#83495] * Build fixes - new version 0.20.6 (stable) * Make the p11-kit-proxy.so module respect critical = no [fdo#83651] * Build fix for FreeBSD [fdo#75674] - new version 0.20.5 (stable) * Don't use invalid keys for looking up stapled extensions [fdo#82328] * Better error messages when invalid certificate extensions * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files * Fix some leaks, and memory issues * Silence some clang scanner warnings - new version 0.20.4 (stable) * Don't complain about C_Finalize after a fork * Fix typo/sbin/ldconfig/sbin/ldconfigs390zl32 1698315233 0.23.22-150500.8.3.10.23.22-150500.8.3.1pkcs11moduleslibp11-kit.so.0libp11-kit.so.0.3.0p11-kit-proxy.solibp11-kit0AUTHORSChangeLogNEWSREADMEpkcs11.conf.examplelibp11-kit0COPYING/etc//etc/pkcs11//usr/lib64//usr/share/doc/packages//usr/share/doc/packages/libp11-kit0//usr/share/licenses//usr/share/licenses/libp11-kit0/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31290/SUSE_SLE-15-SP5_Update/d2461017bafa557a22e90431a0c28c1a-p11-kit.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linuxdirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=536a179309b3432913202dc855579295d69cffcc, strippedASCII textASCII text, with very long linesPPRRRRRR R R RR RR RRRRRRRRLٓdXD6Ue:utf-816d9339695c87d81af48ff270bf5c00409095e8b706d283185144287bc64333f?7zXZ !t/}S ]"k%]dh;SvE<;02$Q#>'6w60\`[F#L /qU wL~*/bGF R#1%~fTajruLoڃ >٢ Go"JR/T30۷Tiro,>`+2+pzspQ6NaT*sh,W@f{S!Z*imweu<[gNSnnxB8pꃚ(Ю~ī}.(Y]ك+.N $wS.vD߁f&| +چ^! /6Ux8#rV{-m{OWL/PDv3HnrTK>&w-Lf7FcnF ߜ`(E9 G'w8>e4g-ƤHaK O!iD[`l s|^zagr2Ry~K%Ol)m@F+ҵi2[PP9^]4 UYV-Tի3؊^~߅^7(et6 y-H:ݰ3`p[.9`kRjv@Jr ~@s秐 VAfK@1"FK*mW@qpJOxqbC<34T2MS;WvķQ$&-ފjT >8BG~ݡQwސ٥{I?Q'o#ahJ%\sZ+S``kfv&4 ./&A%ޏwe tvQTI^ڣ,! eJ?a`P ÷q@` \1@e+!o=Z)[FBg*FׇgSAgpZ<՝7&_^wQc}s܃iJ~Ɍ cߖ]E1.`kHrcraXTj*w fz1\֩#ff#,[.N3Qѷ3/MX=o~BN°}òc%NL0Nf?q#!ҳ&I6} uK^]̗[Ğ.':-kޙ:#m:#EBC`KB5md fSbZgmg ~w(-00 VoEa\J>民[GٵM!oH"mO!vP!F/urUtŐ ţ-=|b؇cnZdYNEC;dFPI pؗaK셭1)~DcN[V܄85^Bhm pD ? %/eVT!)N˄I]NNuM-Aa->4Nu~k.Asdln*+g 7 <*V sp;ުȔncso_/gݷO3`M' JJȐ0vkzN^&Ը@FV,0Yԕ:Ɲ+H74;g <>br,qݕ.4Y $4 粎™" 0^?uYpغeo\R|S+Չ/gU`m@#:Ʀ:;m34X`AB˸G#KxG | ڴ1#A/ $T%Ug>&X4C#A7K yڿp!Bd艩}/|8w0Y9qۤ<ǁj 0 T;p]sf̟ՍsdFq5Y06#vIcx SG=ؿmnGEO"js(` h&I䭎[kaA% Є?{lAKϮ ,_NS( ~Cnkg+851~-DBaZT]a &̹8s]Ϋy.uRfO奵=+yeSu%PH+\fyy͜?GYP";HOr ^DyX6.i`;R; ҚS3qfGsmWC,Kճ¾1缂.0b%AnѡVX:E/&/F}r]C.znR7wd켵FFO3_;kZ-4`?fMf./YHɅ83mR\,k%ܕ}NDB̐Ty8u\Rs I@{:#b*j^FmX~#LOkr \(o[L1wۅ) ;N2tV,uH(#}Q2oEHUl+xkgS P6M[Ot'r] \iM7ǶqCOCOy㣕 ]ܯ/qe`y*|(2-ɇdGi0`0m)JmJdUDbک)QuG:| ?q#.>A)_rP ìC+J[˚))d;VСqM#B@)ҘsU.3 ?x>Ҥ1V`J@<m#KҕډɉXaDSI,DމڗHE˄"CyF.GWt:(G<j]C!s {a<+&J7j9{ڕ2mxa76wcr*c l/S*sΫ~L5RRxP_YԙISm (^hg7ɹ%2y3*>3J1wy)n!$(4{ceOa7"M|scDzu:Db藣t }To#5UiEśLe^F'J-a9"pVKmV(g+PzߋJ. $9="˝R?CZ쀔Pqyf&ЕzXmZt%R,!V;fq S!#~6e&lg(UDo ͨl_<N|݈uE,rڜڰg3:&f 3!m}JQw_triـn՟]l 9& kK zg똬 <7>nJZv]t)%Hqecr ۮ +g+߉ƨS h4xrivW{SLG`;z1{+[M<+l mp a 8ռ~nvu+kW\bl"bdS׀ݴSH{]\TĜ0_!#p#2聖Cb'+玊oпKF d[#" be'FjJ@"&X%,g6]NPqGh%v*9,p8cN4EbGujHS04nF<1 Sqĝ>HVQWO>>JFX:(LcD7U̹"Y@*!fC WSI3% .u DU )v4IWt:jhS 5@IΨEs1ݜpyY"hSHas1EgDIF͌sA;('5#K}61U?eGZz'mXq?в,W,V ĝm9|&:аl \F%ԙLHy*k VW :ۇ[Sp ;=6* V:1gzM L坁HuP7IHk_)pne۳$O4_V,;iS1UJ洚Pc*7ڤY\wTSkr|l9 5 +`+j}Q gL`d6.ƃGKe+gMQbK%f>ZIxLui?er=sZ5D=uC6SȔ2G'5H]6(}p@+р;{tZ"l?ab$DcK>y5(؞~E2ZEç]^L lcw=IP]/T'(¹>XEܼi.!ZIY[߷K>ah]x~0Ǝ{(g:G^~*w6Y'cQ.@Np#oE±6Ata{#}cI']Znktɚ%DŽˁ3QRItS3VuUǨs%I'LBD7FepKdj@=-/qXy%"qk2z*|snr]$X }m$+wO~ܮ_aD0Av6[6s{(79xZ%pnU`&(E*%~*P6ڥO.<ӌ+& U 4ugמaڠp <haV1Hk˞nM\;h!?-R9yDO:T dFGRy6"nxE ’u$.w.Q$ܖpXHF 滗fJ'i!d:&לw b\UiDЋT}4W"75D{d=@J!  Ջ]GfGl<Ιg0ƻQo+|e3d)AS-g ֺĬH"ƅA8F(e۰dA4kQ7SrG@(ZTzUN[w2S_[.ɥՓ6YCɈy.l:)}> tFQՀ_W%] "(M\kSt8K6A p5`$;K5ڟXH8.27CE3kv#E6vo-.%8.(pM~k4Ì{llp*rL E1m;^FqOR2+@F6 XOhu~@ ש_"9'%ɴ06/Mۅ>%=Sこ+8q! +yljpN ?rʚo{.8Ck XH;gr79OKJDf -,>^[Gk/ ,gk)Wh7]Lw Q@7>f-z<@U.]ʗ)V@W kĒ(09F 鵟x 5Z^_[5F3$W}xO&N9tKغze{}ڱb x쐾v8 YmoXA&'?,hrL IhPIlD9D.&;/f5&X^,sb8}s}n缡zFq+,~IfoqhM4 #753Bk#(2hob7SzMAG<jzBϫlLh [qvv5Unhf"euӖv ^y20,|0Jb^uø2ΊA]V >.͸C!򜮍~vcm`,@q`&㗠h$Q?3ø=ic)gcFҙ~arLI;Wc`R5m+dx_GUcJf_~}걸9_gX_xyMY cP=(KoH,_~*Ϊ::1gZh*LU <;|rG0ffeBͲN'Ih: b;e+NXt =0o&^ 9h~7}̀ & 2܎S^w^ѣ;iFZԉ +1Q#Q/1Q:hBFETUjz<5DL׌,wJ`DnݩufwܬJ"qL &Xl=2(56EBVUKo U6A"y߰I+HWs, ݔv9/qðS{ 6>&0Lox$T@O${] vUkN;A߬J8m3T@b.,.S~ZQg>""sG'*J Om.3W\>4gROeP%m1HZSo쬏uaL bSG=yȾ?j֫"&JBc_خ%\T5&dE<..X)ܳwv C9eitR/C,ާJs/A{\>' ,?O*)Uix$Y!נ>[!YZAײK T1T;& jPTv_|A"Ոl06hvuoVSF(Fp#Sv^ˀϙZSSTI:иIM-c^sWKѷX^z;SP7q~^(v3*w<luME7mꚙ?E(]T\3r1h.}Y'ۄMo|"P{va̝qQds.?u#mmqX񀠯8AP9yLBD?eHB*ų;*FdU!G(hHN[KWCPmֽnv(Z_{W} ,-lt>&IVV C_rFB~r^M[ڀXȦdooI⳩=eDpY֚U+ ~LMڲ4K*'G}a &QhNۅL!ck$ļ!EЮEH+k{Hn2k qV8f[Fh5a}Iv3Ruuj+47,2'k2]!cjE^@FճV`YOIP䴸^&Rr :\g/ATaݞФT"d4%.jh6 35T|st[mmǧͭŮ~oKmu4d2c])={xSJ]6#Gn  af M| ?kt:@d+ #ND8D͚jn㥶=CmrXEZHϕ~cz?e^a,2o6b|dj.ώIQ(-jCկ!r܅9fF3ςUXzS5g[Z!2Dk=C|*&j6ĥ Gbr5Hl H=7-bGg%:_/ RJiּt>A+,AJ#s6?zˀ#r7=f0`:s:(]p3V.x1\ޥ0|ExeYG jW{u|]9xJ "uÎb~dtYfʥC=IaJlZ'gUҾӄ(':Ő+ȭ͙t9&aEי=0Ґ[@#5{았M88r`0 i0:0u/]J5|-G:dA^Nhhss€wLCW6g҄g67q nZ!ӻ3ꡔyv6wQ,Q !a .}WOl#8| ظ4b pkB߷{`# oxviggE< gDN[=H1h@4^mdig2ng|Cks7.A)39;Rf#ÿ[n 'ɥYxokh\jj' 8ȶ+^4gGT>Gs;5EDTx0& ,) k^ud.VrHw"G?|#z1kI9ij*w*wZ̖jm ."/8GQ0=*L[RICh$*+|TxߣjD/MMN"HOYfвs:-n SйAOG5O?<p[e/HcӝcE2C&i7Ds9V ςT2M$tڕ 3Xk: uivU߀#]ZW!+d_lψo*&8&niYL/K$exӦm\0%dwfi)%=q9`"CXp3-%/0A;xM^]1y^vA,7h oBMz`%-rv  ?Ds_å\RxMdRÙ3/? :(|B5}"[.j{ea"SևwvCV{yZfи.e.87V/W8"]2hc-J'h QOOjOPD>Sㆄn&M.VhN f2-2#'5oou~;Og{_a%2ʳ:Hqt@cXL#xmqlR-l+<0ɔ|pP_/: bGO*1 Sy'KPS`=ָ0 1}:VAMBU&Ere'~éG xn"7_53b~B/2{cuR kӿP18Kץ--1WY:w } u8/})Y4ӈtjYT3luKIqԴ l&ktL\&ݝ=Rli\rB&\u=pR3f,ef]w4.7Xg4i? =8C.B5X fT3?Z7Y?)BE 0Cj$Dng9{,,_Tj:*AyQN F#mkZ4afJ+0 1)Y=iY(/fʫcM!LiqmdA[0׮/eC~͟Uh0udmjAOs`pşXt kj6bz?|JP8u=ϱ11#[{#:#*0 vQmvϓ9qB|̀1hfh˺ ̀țqI Kـ|~~3|@ijkzGpc~ ̘`Dl~^VB}f[ok)?dk!Bxս\9݀vfJJqTRRsl;Ly Zo6 @IV('fm&u/*Y&!Wpܾ[1΃m8Xt7bИ,uQ_ ˟kTk.W^s\ Ҧ]0.14Nkw,iDGҙ9&"j8ʓ>ȕ2s&Xf.4,T v#SU?G$ >!BK|JW#1JkNx%?yzB&P|o-SgmjSMbD.tXAG C%ĠH҅oY w^:+k{S-c3֬lWvSx.Np¾L%b'gI!1!O :Q*Ldxh7LjPHsXw]KԳ<&œ2[JZX54l/F߫}+fk`C _Q_uWhC$Z41Imt<|Ԕ @O8X^FiBm2z+7/=300cU'?G%e.GP;Vr1`*m:xސ Kz xIYߢtZCÃ^* D12ψyȗg8[޲/GprbH[B 2$V : RĉwRe:YU9y 7~{I2\lQ ^I cdO0D/['4wD^U1Z^XlCXҶ {1KvM !Z@جReBAh6G* ^MDpP3gU|Pcl,tv׎L,Ĵ>5Q&L]˧\y3fWPNR.;ugˋ~:Pstˣ. o.` NgBwLΨPjfЪ6M!%j2HiQME ہ cVrxKNj)m[6 g3?nMYy,eBÖ.lWW2$pgrtJ}MPS=!Cnbˡ̑7t&vHv%G={ )#w 1PZZz}47͌4'[Q(Ȓu#@Ax-d>P#>&9t]cJpb2*Q+=DMy-af(Ꮁ,C:MWw  mc妞 eMiɖR$eDnyx!@Wbj[.єvx\ci-3TUZgӛRيa~@calLhgwC2:U޽6l,snp4Y~"RS$i\SRmF*X `čb* Ys:ԎmcI`ݸIw}CsCu 8z]Utϋy߶?^K1b#Rx^w~™$w%]5;i 'm=AZqγzy5nH,Fhj-&;ZC']*EKŪ?,7ʰfw.s<DKd;TsIƇʀ?=Ikɩ#8@dOMB#,Lc$vx=y"zf' 8Is p8sF # W,x8bIV O7:M2SƢ2f2( ~j#_ tC~Pq E_vLIVxA<ݾňϽl<).<M"G+^tW59{3^5|JQq|׏u KF &(^x olOBT:=~T93z'+ԑS9CJὗg 񮎁ZE3\G-RE^[ s) ˥4g`" o qnJ]⢲QE]RV0vr&=1G)i,-<1l1JQGm-Un͡ ǚP@S2h"rA`ߧnߴ+Ӣֹq`NGF(6e] F|޷ƇgVTav59[!|I)v`Q,ۢH;|C~ Tr JΖHo/XZ+J_طՉؚIaQ j襮+cOhV-l\ :tʫOYK\vhn%v SVJ',=^+N|FN*_.?d iSgMB|blUy_Ķ`w!Gƍ0#yC W.9u-Na"=?tؙ7l`:7XLX? D7^s15|̸#&W`Sdpʽm,q¯69T.uc=B*!ԓ3QKEp ]jH4;HN9A,q;\%?A=)2V?Z \Ŏۉl(3? vx;4J[r(skÿs/ R'tW%d>KvjK7 jޒUs:P9; dKtgWMfXMԦ.뉷?詠ݟmN_ {N+krb;s~[mL2jޛfSfDZ>a8(6t;t5TcsJ)H.u_m!WV[L3VG), .\WXkT Ϭ K!y[}ouَЫp',o0CX ]hwVD!ÙEӜfτB=,r.9n|NQدrCaM|$=4);/D"SsWu8XJ̃  \M/IּEʷ!;9P|d5 ,0o)SCHKfj]a7qww3wPvKG:3 y|(80rt'teY;3I47RF!;ľN=O<{J&`iYg'=U]Ayt$z7OY4vf`5]TՇpJdpo),Ek=gBG%>0(op1Bu$Lv~D$u۞g߱(pw84H)%A|0}Lq`c"[w[d &ҾC>OrsJUb?)TZkSvs6&t ɷ.uԨ/M̳?Y]wD?xrha.G! Pج6I?F`(Pbc-*;k+*c`]Kj&`,"fϊY𠝩z$NǨT{@+1KnfZrD҆jKO]w>7i+df=oXrF1[yt 5/}£ ^Vu-^-{ I"l1ɠcԚ}ne³yA~"6־v>9h`Σ !inTDg=JQF QCq_B^9Zߗ~\(َ̀N^w^+Z|Yj9tNMdGu>Cb۲wtŔsCЯ79O|ŹBd $1oN-XM]F8Yf: YI]_;&hx5Fشk\A`]f'U[o@ևUc` C0`M ^[XXdKY.|B+U0?41v)CZ[aJ$4Yo.1co]H$X&./-.`ӚM.sP{htVۃ7_n |S#KHi+{4a?0 V'aL<;q4?z.T'a?DV{ @cQ*g]OOhb d70GZ$ӥFz3F6tmZ afJx.oQ=Bqo>Oym1lkcᔙ4톕xMo$ 9~@J ɾqUOh((r _s5BF$FNGXg+^*i V:I&GJv_8$Škz ]9ƘIDJw5ܟkTe/ L?j΁rḷ?b 7d$DRﬕ0ژ;@ߊEE,tLO.%cۋɠ]P}<7ӡbx'f8ˉ3ټuQáӀ%" e QWE @ *Omud5=f/9N!Sh!++ZHZTnmۀg#)YDI٨rXkY6}kj+_aoQ+ޑ+(T\KSIETR93N QTeōrƎ;y '>!a~J㹨]#y R94p\EaǎE1r('Se+Ҋ6/jK-P8OuJ;+QA*kd5};+]`p1QxޔSW|ha*b_@Mmz#湌va}ɃADH:"">{̟pc J.yz3[vNК* 2 bHrD; QJ͌m;L*C3!YG).|3#xvGmHm TblTը1Fܽu6^ H~ǖ{-<|AR?uĀ'_Fdf\֩}AY%!$xsFe$X^ymRgT$¬*qn1r`\vЮu76tAXfV<Ŕ)H#F'!x~ĥ>|*+M#d=%tG4=BT*; =3Sf(ƀF=Xͻ&JA tQYLS䳢z&[M@2y 41711>BXsFmem>_}I'~lqKS#4<#c-2wq R#f-Q6s.|__jk918lQo>.bkՈI āveo#]-eۧ'xL2ZII u][*UdHTx YZ