libtss2-fapi0-2.4.5-150300.3.6.1<>,؉cFp9|-oTX(Ncj*vck ZfW:_83xjyjKzs$"nZzk*k#ޑZGU1K ܓr%?ؚ™p^׶9c5ij}gx^=9.I15X0*N?)vz^u;!LHv\ޒaMވ t.B6ɳA02#MO|W>A_?_d # : *7 M^<H N T `  &LX(894:>[@[F[G\H\$I\0X\4Y\@\\h]\t^\b\c]yd]e^f^l^u^v^(w^x^y^ z_ _0_4_:_|Clibtss2-fapi02.4.5150300.3.6.1FAPI interface libraryThis is the tpm2 Feature API (FAPI) library. This API is designed to be very high-level API, intended to make programming with the TPM as simple as possible.cFibs-power9-10 SUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/System/Librarieshttps://github.com/tpm2-software/tpm2-tsslinuxppc64le/sbin/ldconfig [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf || : cFcFcFc898998cf2f5108465f20a470cb4c05cd792277722ad652c88d98513bc66bc7c5f513bf353e2a569248616009c84ca1dc1f4506da34f8ac232e6f00bc7472b1alibtss2-fapi.so.0.0.0rootrootrootrootrootroottpm2-0-tss-2.4.5-150300.3.6.1.src.rpmlibtss2-fapi.so.0()(64bit)libtss2-fapi0libtss2-fapi0(ppc-64)@@@@@@@@@@@    /bin/sh/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.26)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libcurl.so.4()(64bit)libjson-c.so.3()(64bit)libtss2-esys.so.0()(64bit)libtss2-mu.so.0()(64bit)libtss2-tctildr.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3cʂ@bL@`@^ P@]@]_@\\@[t[[>@[;e@[6@Z@ZYKYp@YoIYoIY)j@YR@YX@X@X@WW@W,@W@V͛@matthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.combwiedemann@suse.commatthias.gerstner@suse.commgerstner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.dedimstar@opensuse.orgmeissner@suse.com- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large RC values passed to the TSS2 function could lead to memory overread or memory overread.- add 0001-tcti-device-partial-may-be-used-uninitialized.patch: fix missing zero initialization of a header data field that could lead to data corruption if the TPM does not support partial read (bsc#1202172).- drop 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: now contained in upstream tarball - update to upstream version 2.4.5 (jsc#SLE-17366): - changes in version 2.3.2: * Fix unit tests on S390 architectures * Fixed HMAC generation for policy sessions - changes in version 2.3.3: * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu - changes in version 2.4.0: * Added a new Feature API (FAPI) implementation * Added Esys_TRSess_GetAuthRequired() ESAPI function * Added Esys_TR_GetTpmHandle() SAPI function * Added Esys_GetSysContext() SAPI function * Added the with-sanitizer configure option * Added CI for FreeBSD * Changed MSSIM TCTI to be async capable * Removed TCTI loaders from ESYS dependencies in pkg-config * Changed getPollHandles to allow num_handles query * Improved CI builds * Converted builds to docker builds * Number of fixes and improvements in the test code * Changed tcti-device in non-async mode to allways block * Fixed hmac calculation for tpm2_clear command in ESAPI * Fixed mixing salted and unsalted sessions in the same ESAPI context * Removed use of VLAs from TPML marshal code * Fixed setting C++ compiler for non-fuzzing builds at configure * Fixed setting the name of session objects * Fixed page alignment errors in Sys_Get/SetAuths functions * Fixed potential buffer overflow in tcti_mssim_receive * Fixed invalid memory alloc failure in Tss2_TctiLdr_Initialize * Fixed list of exported symbols map for libtss2-mu * Fixed resource name calculation in Esys_CreateLoaded * Fixed keysize of ECC curve TPM2_ECC_NISTP224 * Fixed segmentation fault in tctildr if name_conf was too big * Fixed memory leak in tctildr-tcti tests * Fixed HMAC generation for policy sessions * Added check for object node before calling compute_session_value function * Fixed auth calculation in Esys_StartAuthSession called with optional parameters * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession * Fixed exported symbols map for libtss2-mu * Remove duplicate ESYS entries from map file * Removed the private implementation of strndup from tctildr - changes in version 2.4.1: * Fixed systemd-sysusers/-tmpfiles creation without systemd * Removed expired coverity token from travis.yaml * Fixed uninitialized context of FAPI command Fapi_ChangeAuth issue * Fixed handling of tcti pointer in Esys_Initialize * Fixed usages of EC routines deprecated in OSSL 1.2 and greater * Fixed FAPI handling of TPMs without stored certificates - changes in version 2.4.2: * Fixed duoble json_object_put call in event log processing. * Fixed memory leaks on error paths in FAPI * Fixed setting of FAPI app data. * Fixed size check for Fapi_Encrypt. * Fixed computation of PCR logs and PCR digest of PCR logs. * Improved comments for FAPI authentication. * Fixed segfault and leaks in FAPI * Fixed Fapi_GetCertificate for objects which are not of type key * Fixed hierarchy usage in Fapi_Provision * Fixed ESYS Shared secret calculation * Fixed doxygen warnings for FAPI docs * Fixed copying of primary template during key loading. * Fixed some wrong format directives in debug statements. * Fixed usage of hierarchy and authentication in Fapi_GetCertificate und Fapi_Delete * Fixed unallocated return buffers which may have lead to segfaults in tooling * Fixed usage of persistent handles. * Fixed computation of the size of a PCR selection (Fixes #1737). * Fixed missing hierarchy authentication for Fapi_Delete. * Fixed uninitialized context of FAPI command Fapi_ChangeAuth. * Fixed computation of random value for objects used for sealing. * Fixed return code for event parsing errors. * Fixed NV index and path handling in NV creation. * Fixed path checking for keys. * Fixed Fapi_GetInfo function. * Fixed path usage in Fapi_Import. * Fixed invalid settings of default flags for keys creation. * Fixed handle usage in Fapi_ChangeAuth * Enabled all PCR registers for SHA256 bank in the distribution profiles. * Added some checks to Fapi_Provisioning to avoid nasty failure states * Added a check to prevent overwrite or delete FAPI storage objects and directories * Remove obsolete test fapi-key-create-policy-password-sign.int.c * Checked hierarchy needed for EvictControl for deleting objects in FAPI. * Checked event log file before calling the TPM in Fapi_PcrExtend. * Adapted integration tests to SRK delete checking. * Improved presentation of Fapi_GetInfo. * Silenced expected errors from Esys_TestParams * Added man pages for FAPI json config files * Added a check that prevents deleting default directories * Added a check if primary keys already exist for Fapi_Provision * Added tests for derived persistent keys. * Added test policy PCR with PCR register 8. * Added check for deleting of the SRK. * Added test for sealing a random value. * Added content of the config file to FAPI Info. * Added a check for valid pathnames in keystore module. * Removed unecassary code from Fapi_ExportKey * Removed obsolete LIBDL_LDFLAGS and replace it with LIBADD_DL * Removed superfluous policies/pol_password.json file - changes in version 2.4.3: * Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be recreated! * Fix bug in FAPI NV creation with custom index values * Cleanup of leftover sessions in error cases in FAPI * Better error messages in several FAPI errors * Add checks to FAPI policy paths * Add checks if FAPI is correctly provisioned * Fix execution of FAPI policies in some cases * Allow 0x prefixes for TPMU_HA in JSON encoding - changes in version 2.4.4: * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix memleak in policy execution * FAPI: Fix setting of the system flag of NV objects This will let NV object metadata be created system-wide always instead of locally in the user. Existing metadata will remain in the user directory. It can be moved to the corresponding systemstore manually if needed. * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check - changes in version 2.4.5: * Fix Regression in Fapi_List * Fix memory leak in policy calculation- 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: fix problems with policy sessions that don't include an TPM2_PolicyAuthValue (bsc#1160736). This bug was fixed upstream in a minor release 2.3.2.- update to upstream version 2.3.0 (dependency for jsc#SLE-9515): - changes in version 2.3.0: - tss2-tctildr: A new library that helps with tcti initialization Recommend to use this in place of custom tcti loading code now ! - tss2-rc: A new library that provides textual representations for return codes - Option to disable NIST-deprecated crypto (--disable-weak-crypto) - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext) - map-files with correct symbol lists for tss2-sys and tss2-esys This may lead to unresolved symbols in linked applications - Support to call Tss2_Sys_Execute repeatedly on certain errors - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change - Automated session attribution clearing for esys (decrypt and encrypt) per cmd - Removed libtss2-mu from "Requires" field of libtss2-esys.pc Needs to be added explicitely now - All fixes from 2.2.1, 2.2.2 and 2.2.3 - Fixed SPDX License Identifiers - Fixed Null-pointer problems in tcti-tbs - Fixed Default locality for tcti-mssim set to LOC_0 - Fixed coverity and valgrind leaks detected in test programs (not library code)- update to upstream version 2.2.3: - changes in version 2.2.3: * Fix computation of session name * Fixed PolicyPassword handling of session Attributes * Fixed windows build from dist ball * Fixed default tcti configure option * Fixed nonce size calculation in ESYS sessions - changes in version 2.2.2: * Fixed wrong encryption flag in EncryptDecrypt * Fixing openssl engine invocation- bsc#1130588: Require shadow instead of old pwdutils- update to upstream version 2.2.1: - changes from version 2.2.0: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - Added support for QNX build - Added support for partial reads in device TCTI - changes from version 2.1.1: - Fixed leak of hkey on success in iesys_cryptossl_hmac_start - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - changes from version 2.1.0: - Fixed handling of the default TCTI - Changed logging to be ISO-C99 compatible - Fixed leak of dlopen handle - Fixed logging of a response header tag in Tss2_Sys_Execute - Fixed marshaling of TPM2B parameters in SAPI commands - Fixed unnecessary warning in Esys_Startup - Fixed warnings in doxygen documentation - Added Esys_Free wrapper function for systems using different C runtime libraries - Added Windows TBS TCTI - Added non-blocking mode of operation in tcti-device - Added tests for Esys_HMAC and Esys_Hash - Enabled integration tests on physical TPM device - Added openssl libcrypto backend - Added Doxygen documentation to integration tests - Refactored SetDecryptParam - Enabled OpenSSL crypto backend by default - changes from 2.0.2: - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth - Fixed NULL ptr issue in sequenceHandleNode - Fixed NULL ptr auth handling in Esys_TR_SetAuth - Fixed NULL auth handling in iesys_compute_session_value - Fixed marshaling of TPM2Bs with sub types. - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes - Fixed the way size of the hmac value of a session without authorization - Added missing MU functions for TPM2_NT type - Added missing MU functions for TPMA_ID_OBJECT type - Added missing type TPM2_NT into tss2_tpm2_types.h - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h - Fixed build breakage when --with-maxloglevel is not 'trace' - Fixed build breakage in generated configure script when CFLAGS is set - Fixed configure scritp ERROR_IF_NO_PROG macro - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest - Fixed unmarshaling of the TPM2B type with invalid size - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM - introduce _service file for syncing with upstream tags- update to upstream version 2.0.1 (FATE#324477): - Fixed problems with doxygan failing make distcheck - Fixed conversion of gcrypt mpi numbers to binary data - Fixed an error in parsing socket address in MSSIM TCTI - Fixed compilation error with --disable-tcti-mssim - Added initialization function for gcrypt to suppress warning - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters - Fixed invalid RSA encryption with exponent equal to 0 - Fixed checking of return codes in ESAPI commands - Added checks for programs required by the test harness @ configure time - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup - Checked for 1.2 TPM type response - Changed constants values in esys header file to unsigned- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't properly updated (at least on SLES-12-SP4)- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0 and sys0- Explicitly require udev to fix missing ownership for /usr/lib/udev.- update to new major version 2.0.0: - version_fix.patch: removed, we're now using the distribution tarballs where this problem shouldn't happen - this update introduces an incompatible ABI to the previous version. all libraries have been renamed so there is not really a relation to the old version any more. - upstream changelog: [#]# [2.0.0] - 2018-06-20 [#]## Added - Implementation of the Marshal/Unmarshal library (libtss2-mu) - Implementation of the Enhanced System API (libtss2-esys aka ESAPI) - New implemetation of the TPM Command Transmission Interface (TCTI) for: - communication with Linux TPM2 device driver: libtss2-tcti-device - communication with Microsoft software simulator: libtss2-tcti-mssim - New directory layout (API break) - Updated documentation with new doxygen and updated man pages - Support for Windows build with Visual Studio and clang, currently limited to libtss2-mu and libtss2-sys - Implementation of the new Attached Component (AC) commands - Implementation of the new TPM2_PolicyAuthorizeNV command - Implementation of the new TPM2_CreateLoaded command - Implementation of the new TPM2_PolicyTemplate command - Addition of _Complete functions to all TPM commands - New logging framework - Added const qualifiers to API input pointers (API break) - Cleaned up headers and remove implementation.h and tpm2.h (API break) [#]## Changed - Converted all cpp files to c, removed dependency on C++ compiler. - Cleaned out a number of marshaling functions from the SAPI code. - Update Linux / Unix OS detection to use non-obsolete macros. - Changed TCTI macros to CamelCase (API break) - Changed TPMA_types to unsigned int with defines instead of bitfield structs (API/ABI break) - Changed Get/SetCmd/RspAuths to new parameter types (API/ABI break) - Fixed order of parameters in AC commands: Input command authorizations now come after the input handles, but still before the command parameters. [#]## Removed - Removed all sysapi/sysapi_utils/*arshal_TPM*.c files [#]## Fixed - Updated invalid number of handles in TPM2_PolicyNvWritten and TPM2_TestParms - Updated PlatformCommand function from libtss2-tcti-mssim to no longer send CANCEL_OFF before every command. - Expanded TPM2B macros and removed TPM2B_TYPE1 and TPM2B_TYPE2 macros - Fixed wrong return type for Tss2_Sys_Finalize (API break). [#]# [1.4.0] - 2018-03-02 [#]## Added - Attached Component commands from the last public review spec. [#]## Fixed - Essential files missing from release tarballs are now included. - Version string generation has been moved from configure.ac to the bootstrap script. It is now stored in a file named `VERSION` that is shipped in the release tarball. - We've stopped shipping the built man page for InitSocketTcti.3 and now ship the source.- removed leftover comment from dropped reproducable.patch- update to upstream version 1.3.0: - support for reproducable builds - improved documentation / manual pages - various stability bugfixes - EncryptDecrypt2 command is now implemented - removed reproducible.patch. This is now included upstream. - added version_fix.patch to fix package config version numbers.- fix the "fix", turns out only the unversioned symlink's supposed to go into - devel.- no longer install the udev rule, it's now part of the new tpm2.0-abrmd package. - fixed a warning regarding a missing dependency of the devel package to the main package - correctly package library symlinks only in the devel package, the library itself only in the library package. Was mixed up before.- removed tpm2-0-tss-configure.patch, it was just a hack, fixed by requiring autoconf-archive, see https://github.com/01org/TPM2.0-TSS/issues/227.- Updated to upstream version 1.1.0 - With this version the resourcemgr daemon is dropped from this package. It is replaced by a completely new implementation found in a new package tpm2.0-abrmd. this package will only consist of the libraries any more. - Changed - tpmclient, disabled all tests that rely on the old resourcemgr. - Fixed - Fixed definition of PCR_LAST AND TRANSIENT_LAST macros. - Removed - tpmtest - resourcemgr, replacement is in new repo: https://github.com/01org/tpm2-abrmd- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)- create tss user account and install udev rule to fix startup of resourcemgr (bnc#1038586)- remove unnecessary dependency of libsapi0 to trousers. trousers has nothing to do with tpm2-tss.- fixed typo in resourcemgr.service (bsc#1031004)- Remove --with-pic which is only for static libs. - Fix an improper Requires line. - Split libtcti* from libsapi0; these are independentlty developable units.- Updated to 1.0 (FATE#321508) - Added - Travis-CI integration with GitHub - Unit tests for primitive (un)?marshal functions. - Example systemd unit for resourcemgr. - Allow for unit tests to be enabled selectively. - added pkg-config files for libraries - Changed - move simulator initialization code to socket TCTI init function. - socket TCTI finalize no longer frees context - rename libtss2 to libsapi - rename libtcti_device to libtcti-device - rename libtcti_socket to libtcti-socket - move $(includedir)/tss to $(includedir)/sapi - Move default compiler flags to config.site file. - Fixed - Fix run away resourcemgr threads by closing client sockets when resourcemgr recv() call returns 0. - Set MSG_NOSIGNAL for client connections to avoid SIGPIPE killing resourcemgr. - Fixes to handling of persistent objects by resourcemgr. - Removed - Semicolon from TPMA_* macros definitions. - Windows build files. - SAPI_CLIENT macro tests. - Security - Fix buffer overflow in resourcemgr. - use sample resourcemanager.service - tpm2-0-tss-configure.patch: fix weird error.- Remove type=forking from service file (bsc#995554)- added a systemd unit service file (FATE#315631)- Correct package naming to be in line with shared library guideline - Remove unused systemd build and runtime dependencies (FATE#315631)- Fix rpm group of library package: libs belong, per definition, to the group "System/Libraries". (FATE#315631)- initial import of the tpm 2.0 tss stack (FATE#315631)/bin/sh/sbin/ldconfigibs-power9-10 16744628882.4.5-150300.3.6.12.4.5-150300.3.6.1tpm2-tss-fapi.conflibtss2-fapi.so.0libtss2-fapi.so.0.0.0/usr/lib/tmpfiles.d//usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27520/SUSE_SLE-15-SP3_Update/6ea9b3b7ec893465197614026402af5c-tpm2-0-tss.SUSE_SLE-15-SP3_Updatedrpmxz5ppc64le-suse-linuxASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a00084b31a23980c2f7808d8d3252a480becdb93, stripped PRRRRRR RR R R RK".P!;ǻet[eutf-8cdc12639daaf6d7bf0ec77698aa83f4f532714a35c098dabe051b21a578f067f?7zXZ !t/8x']"k%nd\N@RA~Qyu:RWT%g1î;xm5cxlr% 4 8c@FMhVl0}YD7u9Üe7?O,}Jݯ1ֆ_ͨ'X5`wu\2YTڬLW˱)FCt9Lgf:L^zcI!'o麴 Myzk>z6W#AQ5 Ww?1p^mSOضti{CR66X]DZ&J\q{{(X:5q2Ǹds|g^n8"O)Qֶ]AhwzbbGCJ.y8`, Q,aѼFC($]$xңub d?,:e5n; $z ы<79`IJYBGS-K;ґox(J$ Xq,3pcG]]&٩^J2~)BR`AbyRPs*#**)tb?cx},n' Fy7e hl;~ԈB!^"θfj\lxhkC/ynDJen]ֹ?Qeo ::!;NWJڜ:?q/U@ 1ov.;"sZ9z*f vkBlGFV&@}Գj%K)D\t0hi@_ W~>7FA{'y~fEڔhU ~/0W2]YtOUɇ6CU'.xG9fvGpjGɃmTPz`C39@## ~œ uԳ(y/\N4۠Ա!CڥF9y{,WjDfoZy[4[F-ڇט>U,*iM?[uO3N4l%VDJbv/KӪ`-WPhD5 niۗmJIl”IE.{ *w0 =1qlR0̎S 4/d^4:w]B:s5Z`Oٚ*cO@hddT;nTip3)%) ?/ 99,@ZZ`fpBϼP)$`W"k ~nGu <Ú5U<.=u!8ӫ~\0}8/9I(oAHpI-V1̾pQ?eI4͚(6QkȔmX\.JG64T?:zT1znS?z9pY,"1}(?ije77xgV=x9MtSKQ<_: 7?O\ѽXԅdǨ8Qۋ e,}G GF}A厕v ,ki j)=iIzp.rgzͼgwU~lסgђ82(ц&NF."r8hrO*&CCBSvl*tE$\@:9笋Jxɣ|vE mHoJΧq>45@N30s'0'z ^㑙B}av>pw_A (5xgȡE-9Tgp#J߰dDu(FQvx;f %3*5)ҵ)".SNx1}B6Nƕd]Y gjhvzWm.ۡ:Xе& *mg#WSR 5^˽˄i"Asr[ĩm'*rʥp_9z5ŋ;싀ߧ|GE_}i3"6.r=J?wW%=j(s*_pOCLRՓsǭ̺/8FMAo|T G.Yݯ!=F`r<6!5^篿!L*\K羡AK 'q$Rzd 8iru@ݢ&,@H9ѝe'`=KC^nSj>0UG$ Jr!aTXfrWqSy1eǟkR1\Cu$ZquC&).laJ̅ ,LSq;zHB?N3k0 дxHL61l=ɔ[CؿRsGmeoXoT˯>?C#d}ݟY>d`紐ɣ\wC D}s}Ғ@P#s9~Gي|.P7Ul}.)raX ~qDT30iNrLnB-f76C)n]GSϊכּm~O[C'OWT4+%lU-0`.Gpohg-f5F&KGJ[RKT,yMnI?OD2J/qC{BWzJfԈy/ F3 pڊHW s0v\9z1pHTωuZ:X@ׯzi\䬽G_)x KyBozL.l΅Rj`ۛ[1YUj%J|挳 _ MW4=Y{p>vcDeCe@4sKgKYU a.&EO+[kp߯n;UC.Sd] <cޙ.\;Nhu;ʿL)A]ssl'Ф4 9gy$*ȲlBTQt檘KS^!~}Q(ѭ:9;kY;?(kS |vSntS#)u"9[!vw<2,G#.hsP _M -iw!DN/(C3֢q0w_Y%D2p.]\cޒ V)wH3D:3@aw̗\(BD)VvqGP!DACn8tWJ$k AgLO 2n#2R.u, {ɒI^$>:th}.ߒ{+oq8 #%g~1#dHsh;?K5E Y5N74* ]rZ5`rx?e}A1òO~hX@*&4[ mN5D'#`dcEW#?72Ԕz4EwV!!B$}Ly*G|ɪ N8" -=];O6_عX']kiVqU|QG֢ @;J]ʿ|SsZ2 FPǡK%eMTjjf.}6.R4m$+Xawv$j^ bĽK&psuȈu,{5M]~, |({$d8?(+굨}e4zi 5ѾKn^2ԂMkSWC[<;ΤUKn$!m@y!6֞k66u pl>?}fUS~aus Fr ?5_&]0-H8x7:Ռ1^&WWя<`,! BI E p-H"rt6{c2Hza$56) y9-@`g%:Wrϫo8k~ᯩMHΤY꽟^ c.2 gHk;ߺi'!z. 5m" [`KW[$ZГq|\LK[nUs[a"eS-쓊˄Y2!́xh(/T8+33NW&kb͠^Q(З,$}#[+MɏutJ霌:ŖIT⫭rD֐fBblyvL8tm!0w\& Q{`oLUSs']ȟjs=){QeVMJ9C<C+'hg#\Q%֬n|wL&frl:Hq" l;A \J BZ|4c\ndJ)4?]sȎ J!?[h&ϯDurZ4XF4 /szcn:I?d>F CT{(z#Z$;|a"-_b3d Ϧq^ {S74]1 RCZ"_lKGػq|R쀸{fw,šC־us)>ݥ@֨РH+U\qgcD֘ 7FLkV4zG?uh. ŏTy2odjg8PE`Dz -{ʳd$,_Sr`|PtF vpȰK)i#ԘR,tg,O&u@ a3Έ;٪[<[O śfE&tpd ^nX]6AGf<2qwG b[4IM.AAr5l,С ANOkd㊥HYY9EV {^J9n^kݫl'FZK4,>q_Î{aі5WZq5v )rIO4ӵͮMn6NE#xKyO`7b~ܰM=u9md{?z ݨN ⣷rSݱ'j3|/B<_3n{f+NNeU`ڂvxg>;R^ٚjц1ǔfbP kׁ$>f͹GNs]5{1BifwI^{墂{ƶٵCG4_=%ʖ'ǼWԶ|!MQjiHhCDV0iv *FK{6x0\Wp5zC68K-Ipx 5]X ](뉆A61r~4a{9mWɐr3^ h%hnQ IkĊ3<0WrYa *epg=ҲzRJx]uKKW쐵%)jߥApIbM¿YE.PNܿBBS=MKܙTƑ7.nssY>? Eǎ0%J[;R@ 6Qk䉧חfI\DvIz$55j˦3BCV0 SDҏ{BH_6BHQNH|iGt1Nn?JEa43 h%r(Y%u@zi,{ͫ>ºgG'xa>hr03H\6B.\LUu{LAM(24Z$XF%O4k.ȏw*cv#!' ˘dEH rE \a_IvIVO3҆]9kit]H)qFp?YՊ1" ?ni\CJqIϕf:_R;8mbI*Ykm4%Jtj\L)IeQYmlhh?{' !vy4M4#7屪m`S}-Xl$!Uit '~NORt੘Oqk)u_2)>gejJ  $kBnlSq=i]5 xhioOOswEуȰ#u;vJzCjQo(ך|emMU$9Gn-EJ^Z8~Z{Eb,&M{ujd[?TeN}ZVk"u{69QTڅS3y2BD0CQ j{ymmFM7*E8*l$hQL_YU{0QFrmoC<-R+꟧t uhGl)~ ~)9škbQO(k}ΡPHJe !&w }>}DcG䬠v Uj4MOV/X4H'q3~'RD="UA%sHo:vh!TKFYK? !ΫƯWJ /E0 719GM4CZ2G\/S<-蚧ˎϼT j.AZ7bPze-EfEy-qa"qI;SyCݦl^hݕw\D,оS ֡ bln3?,E0kw 6v'hE ̾_\TWX\F"zX GB;B-T^"%Z cE':G,`975knU^NۯxSzY}A%‘g9L7q׈;63pAmutPGHMvӽQz;هÍΪdy>L0kS9<٘JTp;{`Y&yyInvrip"C}4iogDD8$[~{pꖂ2=穖6s5D|7i z Io?㿵0?W{ o#̊ppRX0%3O鱏pGg=y_58@yU[]LUNREe~^$ s'>[sݾаo ROsmI+mC1i{0$#0I 5KF9Qui{/bk".kT\Vo\º!€.IBQ QD5m.jY0J tVv;: 8AH=ng}e:oԪ0I sK\n ểK|>O ²Ԩ,h}"5`ipS!\Mšm9[=hO(Ruu|&بpE;9#v >AX=VL$DR& EKjضHQb\6Tm4*fMeB70ڈdޞ 09?i))ћ\̶oۈ9W+pQǐݮ(LҸ#ޡ:+[8,(,`,qdᥴvM<Eah wؓӑ5<؅~ WgYwSbP:mἛ)k٢)nf>p+h.c^n`!Jc>ZR^g~ GI ] W5J}g uٯq"7F Bjp<FC V2n?8e}B;M,HMFOu$*=B♟`߾1B5.^'W%v'ㅜ'8͋?foIӂPXv4nw\}(D`I &jONӋRcj&\@Y0n3!Gc@;3Dn/dzVwGi^Z*mq6!g|'A}=%e*Ϝ+nhfcUoAzns&~~Ve9KJ*yyŽ$xse^Vۃs(=E$R-;AdOؚC0W.t5q>Zˮ͒2Q*)rAjmO,q?-575=l~C(dQgmrF?Б{ vioP2W"akcݷt:pd2Fo0N4I)Z{_( Y}ZYl;: ʓ'KzP`p\J8QmOt+;:@GqNׯ"GUUKh1} ?/@3‴ trwt]OLo5Ό{u og)2[ZsHm9oS5Oy#4jf^fdfc(Ljoi%23iUkRAD*dL3'#VYFzU# h3i{3ɥZ]t:"9SўjyĢ?.'/!BMHqY>ޤ+@ ٮ]nv+% A?Imkc =ƒ^13Ӹ]1KG2/+yy“ر92,D\S1{]L7脊 [JлAuڱpb_vxF7LL׆^ub aྃ7%0̔ѱ^ ̝ƎX! _)jt֓rE7xA t{E'u<{;]A-z{h5Zc5BzŸqX%+ P_@$%Jج1XwbKGHDH`Њ~\}}\7C>oghc>y x3fN8uf/u) qؖ(D4]{dvS<`f>#V8j6_NpoW~R=i* ز򍶸g= N Q׿De[4/tADE|ʛ>8IJ'v;LGo"S,;rvT