pam_pkcs11-0.6.10-150600.16.3.1 < > , } gp9|ʰ4 ݯo(gWdnyfy (^A hSM =6-< f'vٛ]0Ʃ} ?ʧ"I .a>
J ީ' ţ,˧xYOOtOڱ+ɝݴ99D[W'IN`|vhq]ugM<]'N{B2 L[ oj.-ȝ84plB
l?Q"bX]#+-q^;>
GkޅmX. $ > I Kd ? KT d
" 6 " 4 J `
p 9 T 9 9
8 9 9 9
X 9 < 9 !Y 9 "v " 9 # # ) $\ ) ' ) ( (I 8 (P
9 (x
: )6
= 2 > 2 ? 2 @ 2 F 2 G 2 9 H 3 9 I 4 9 X 4 Y 5 \ 5@ 9 ] 6$ 9 ^ 9 b ; c LGPL-2.1-or-later https://www.suse.com/ Productivity/Security https://github.com/OpenSC/pam_pkcs11 linux x86_64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in pkcs11_eventmgr.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in pkcs11_eventmgr.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable pkcs11_eventmgr.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop pkcs11_eventmgr.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in pkcs11_eventmgr.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart pkcs11_eventmgr.service
) || :
fi
fi _ " ( ٰ x x 9 x g>
(
= " ( _i
;
8
E 6 E o y lAA큤A큤큤AA큤 gggggggggggggggggggggg[.@g[.@\T#[.@[.@[.@[.@[.@[.@ggggggggggggggggggggggggg2e649e08c7895576255fc9e9d97526c62530d0109b3c14605a2b750a8612585f c79e89aab0974402abc9411da4431b9d9ca9b1ac1c907f09b6d87ae6a2b1f840 43fd4e62884418ea546390d29af404c34f74d585ecc05599bba72aa25f9da53c 131ff417cde40bad00e7c5df30395e1ff1732903bc3a801db0b61abc6bee4d0e 03229c49f80430cdcc9de54bd50b3147c2f4cbe0fc1459280b62cb120d6e7f56 285f05e85a38755c47566fe124a3fe0294e581d115d5f204fb859fa4edbea04e bda90e9032579d11e220be49cccce15cfa7f0d038bcff2d96c564f60fd992903 290dadbb62be02ff1cb1573498449bbae097158e0dfbf079cff15dcaa33078f2 0c9a2381b94446f741138139a8d69f1c38ea948147888d42128cd51be0ad9dc0 7a511d42da4d012097b3df55d144021cf2ed98b2b934eda56de4ddcf8f68b6fd 144de15e4cffdc4fd82d6ea790891cdfe5b6b248ed1c318395dcb3c2d1bd7bac a37aaa4d67e37adc971b162f23608e29f66d4299f670f9a09ab345e54a7356db 35ac90a159fcfa5f390fa1ec51fad76645f02572fde9d99b0bf9190c46570fde c5c91549d250e923ce6aa28fc9fe040b2b84b9ee6c5bd957eeeb96fefeac8065 1055f82535dd4b3941435f3a0d4534928aecb715cdbe8d5e1a2c8a07cb03b554 df4b058c99e2abe833d18d9fd352620fa5fb605de558f7d1052b0c91b1c8a817 5a5e8294453f7b0acdd079fe687606dd1952aa8c85ace94ac76720e6a01645b7 15268e0a938155fef128a36fd20bbcbdbcc68229cb05882db74d42b8392883de fca543bfc2e74e4520445d469834e2ebbfda30f90e09dcf3f283644b1bd31c08 e5ac7af0a33e952dd5cccd0c344fa3255b1865f3b86ba2c85ad0c8dcf8afc2a9 0786adc85f218870c929ba49130246d55096b53ddbe243c43fcf000604dcd024 eedb7ee6611c73fe69220bc3b774ccb18d7dfff7dfcd05ce96c44c7f3346df33 f2f0405f9ba1cc07d60a0a036076557480f10d1a038a1e78b44d2b89b266fc69 6c50089a5c6a137d2be64b94dfd4d0515dbe041881b164007f8ca5385bcf7818 8b6f52d4a5ce7dc57b92275dcb7a9991be07be5417d07e691742e6f1fb3e4e72 9b2647732f01409b797bcb71a5a53775dbc2bb3288f5932b594ccbb56bcb8147 c79e89aab0974402abc9411da4431b9d9ca9b1ac1c907f09b6d87ae6a2b1f840 558ed62beb359afb96c6ae277740c735669862f01e330471f40a38ee7a3cc710 bf4bf8da3fb658b6b07d79ce99ba12aca945c77b5e20a530500f7d756c5ece2b 1303f66ed4c5da4000de8d3e0fdd716d3390008e388e1acc957c913c0437ccd7 980caf8b7e060f068cdfc13ac5631f1ca982d76ce8d8b72db42a2188c4dc77a9 43fd4e62884418ea546390d29af404c34f74d585ecc05599bba72aa25f9da53c f6b5de0548dbfe62cdf51f9be893cc4eb3f66748193af0a973c76ea6a5ca49eb 131ff417cde40bad00e7c5df30395e1ff1732903bc3a801db0b61abc6bee4d0e 90b9fbb4dd495544fc3cc3a1e80bd013fb02677a3ca55ff9a4ffbba907385d4d cc83b959726b34d34f904e3828bad5100024e17f1a205ed6a12818a6a0ff38d3 964e20238be9fa953632a00a1db19186d76477dfec71c0bd6a482d3a83b057e7 16a9758f298fa77beab9daee075c66a1f6469add7b42d495281d2b77a18bbdae 951d79b1d79f755504ed5ddbd22b3741c3da126f86c47cfc9fdf2fa85843c633 285fbff6d89fcd57f838119cba143b750467ce776d4f0c9da391846566ea750d 602c9854f0619a32412187c216267d5aba1a5c0e8706ecc1e5b93cffb5852d99 3da77083b332201f3c8e7e2c13e8d962fc4f5154736a082fa9e85a7edf6123cc 02816430f1e721af71badad8120cf06079427833f6364d88f7b6caf768eadc44 114a004f1490bd721a24607ead73fe3ca8afad0209871e505cd35df7cddb27aa 92d7c59a6744b8e577df930aba6fc51d7baa7234a1b06c0893e51a42e4ce319e c2bba7a8141656e0c4d8b8c7a8e6005679951f4fedb77fe5bef0e71ff828ee47 70a251c26a268b0c45a1838164ac0ec0747fb04bd07d7543affe1ece1e11365a 95bb326ca3a34843524f31298311cab56641ef39704f8cc5c9f8410f0adc1010 a511a95317518984b0efe0a80bfe1c0ee7290190c598a68ad1a22923b39cd6d8 c882ab24d11940db20bc4637ec8e9589923922baa2dc8c25b953f149b05b308d 6d75762c06337c15ae0105f52b35eb10bc331088eedca160bfb731e4d79c8cb6 service root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root pam_pkcs11-0.6.10-150600.16.3.1.src.rpm config(pam_pkcs11) pam_pkcs11 pam_pkcs11(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/bash /bin/sh /bin/sh /bin/sh /bin/sh config(pam_pkcs11) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libcurl.so.4()(64bit) libldap_r-2.4.so.2()(64bit) libnspr4.so()(64bit) libnss3.so()(64bit) libnss3.so(NSS_3.10)(64bit) libnss3.so(NSS_3.2)(64bit) libnss3.so(NSS_3.3)(64bit) libnss3.so(NSS_3.4)(64bit) libnss3.so(NSS_3.6)(64bit) libnss3.so(NSS_3.7)(64bit) libnss3.so(NSS_3.8)(64bit) libnss3.so(NSS_3.9.2)(64bit) libnss3.so(NSS_3.9.3)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpam.so.0(LIBPAM_EXTENSION_1.0)(64bit) libpcsclite.so.1()(64bit) libplc4.so()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) systemd systemd systemd systemd 0.6.10-150600.16.3.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 gf:\P@@[v[U@Y)@Y@Yp@VO@angel.yankov@suse.com davide.benini@suse.com sbrabec@suse.com vcizek@suse.com sbrabec@suse.com jengelh@inai.de astieger@suse.com sbrabec@suse.com antoine.belvire@laposte.net sbrabec@suse.cz - Security update fix [bsc#1237062, CVE-2025-24032], [bsc#1237058, CVE-2025-24031]
* Fix CVE-2025-24032: vulnerable to authentication bypass with default value for `cert_policy` (`none`)
* Fix CVE-2025-24031: vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN
* Add pam_pkcs11-CVE-2025-24032.patch
* Add pam_pkcs11-CVE-2025-24031.patch
* spec: set noarch for doc pkg, add %check section - Fix for bsc#1221255:
* Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch - Update to version 0.6.10:
* Fix some security issues (thx @frankmorgner):
https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
(drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
0002-fixed-buffer-overflow-with-long-home-directory.patch,
0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
* Fix buffer overflow with long home directory.
* Fix wiping secrets (now using OpenSSL_cleanse()).
* Verify using a nonce from the system, not the card.
* Fix segfalt when checking CRLs
(drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink. - Address security issues found by X41 D-Sec audit (bsc#1105012)
* Authentication Replay
* Buffer Overflow
* Memory not cleaned properly before free()
- add patches:
* 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
* 0002-fixed-buffer-overflow-with-long-home-directory.patch
* 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch - Fix segfault and fetch problems when checking CRLs
(pam_pkcs11-crl-check.patch). - Repair bulletpoint that skidded in description.
Trim description of %name-devel-doc, it does not cotain
the programs. - add service file bsc#1049219 - Updated to version 0.6.9:
* Upstream web moved.
* pkcs11_listcerts: Do not fail on certificate error.
* Do not fail if card was already unlocked.
* Other bug fixes.
* Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
"make dist".
- Split API documentation into a separate package
pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch. - Fix build for Tumbleweed:
* Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
* Rebuild configure with the bootstrap script (add libtool as
build dependency) - Updated to version 0.6.8:
* Code cleanup.
* Bug fixes.
* Translation updates. /bin/sh /bin/sh /bin/sh /bin/sh h03-ch2a 1739986590
5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M de fr it nl pl pt ru tr 0.6.10-150600.16.3.1 0.6.10-150600.16.3.1 0.6.10-150600.16.3.1
common-auth-smartcard pam_pkcs11 cacerts card_eventmgr.conf crls pam_pkcs11.conf pkcs11_eventmgr.conf pam_pkcs11.so card_eventmgr pkcs11_eventmgr pkcs11_inspect pkcs11_listcerts pkcs11_make_hash_link pkcs11_setup pklogin_finder pkcs11_eventmgr.service pam_pkcs11 ldap_mapper.so opensc_mapper.so openssh_mapper.so rcpkcs11_eventmgr pam_pkcs11 AUTHORS COPYING ChangeLog ChangeLog.git NEWS README README.autologin README.mappers README.md TODO card_eventmgr.conf.example digest_mapping.example mail_mapping.example mappers_api.html pam.d_login.example pam_pkcs11.conf.example pam_pkcs11.html pkcs11_eventmgr.conf.example subject_mapping.example pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo card_eventmgr.1.gz pkcs11_eventmgr.1.gz pkcs11_inspect.1.gz pkcs11_listcerts.1.gz pkcs11_make_hash_link.1.gz pkcs11_setup.1.gz pklogin_finder.1.gz pam_pkcs11.8.gz /etc/pam.d/ /etc/ /etc/pam_pkcs11/ /lib64/security/ /usr/bin/ /usr/lib/systemd/system/ /usr/lib64/ /usr/lib64/pam_pkcs11/ /usr/sbin/ /usr/share/doc/packages/ /usr/share/doc/packages/pam_pkcs11/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/fr/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/nl/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/ru/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/man/man1/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37553/SUSE_SLE-15-SP6_Update/ec9dad8a377133eb626d3e2304474659-pam_pkcs11.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux
ASCII text directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a363e55b0dd73ede10ff8c8c8a38949a5d90bcf7, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=7550e49549376ea3f001c8b66be6cb181dfc79f5, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=eed6c0c2424c4a379ed2e3b84d8c1fc1d6158ab6, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=7534dbe8acee640c65fd40692a6c6453b2356337, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=5190d3275120f5bf86bcf9bc4993de836a476295, stripped Bourne-Again shell script, ASCII text executable ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e15742b0acf9cdf03f6e02f63e4d75a0d497558e, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=fdaa760b82e6d0ee611a28cf5b96fa51b02d793c, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ae447a08898316116b45eca64f5960ec61fa0c39, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8be6870bde6ea3f1f5faf63eef333d4b6701b1c2, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f5123e440182f3319da44bd454b4ee2a141472c, stripped UTF-8 Unicode text XML 1.0 document, UTF-8 Unicode text, with very long lines troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix) " 0 F Z [ b x R R R R R R R R R R R R R R R
R R
R R R R R R R R R R
R R R R
R R R R R R R R R R
R R R
R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R R R R
R R R
R R R R R R R R
R R R
R R R R R R R R R R R R
R R R R R R R
R R R R R R R R
R R R
R R R R R R R R R R R R R R R R R R R R R R R R R R R R R
R R
R R R R R R R R R R R R R R R R R R R
R R
R R R R R R A!k-` systemd-sysvcompat utf-8 c4facc3530fc0c357a5ac1d30fddc3d18fff7ef02453609ecd76e94e8a7c0468 ? p 7zXZ
! t/Cl,] "k%k4ϴva ?-K{r<[» IA
a&(3yCrd "2BڴXlJש5gsu;3+Wf 0&̢Vϳ^D&'KYggE 4Q]HzA]8Es Ȋp ;Q!'pV`# ӛEtj~'GL]֖]_wZUh;"1g4$WJʦ?YS٤8IT'g:im#ёk ݏ!8'|*SܝCo؎Pzf?qnUݿU_8mql frjw4ٴw^C<$XsU#Amȃ갫bHBeRYk6sG*lӰ-}kX;ҪޱAp+kK Fo];qÍٖfG^] }{UdpCLx$=~ZQ'I-c!{w M2n%i
X]ք\8;5K6WX'8T0H| MقÄ]^&łD HZR5\qp^7#[Y9| ^JB,ks}RQ,oAP[':û-|H7n')h
}ʡKt7aoݑYQ^!4xF316Lb} D6?X9vlG>nݸ_!vDs؎[Y\2ͳ\܁@h!*MУ$*Nr4̰"[ a P' aa@CGi"E"b~曡$b.c<}pyS
7S#H=iX8}7nrx6x~#wg'vθ#n 4bDytAu}OI#cR颻IfPQW l pPg,p XT@17n 6=6_T{5 O48!/@Fvtn/s
G{ImT* T ~ (qVj~eD p,gd.LB W#"Ty #bJ]ˠ-
MG hS4]v=@ 3 "p/'(`ݯf߳N2z)FT/l?82zAgfXS!]J
#5
`R !oֱU78`gsOr_^oZ7 [?,BaWwyyB,AG層|~(%2Gϕ-UrS*"B3<\(ToTZB\V%08w *w~OԆER:};'fsu4橐,4j WmP.> 8I#SI|,*'MГS
3AMdq)GN$3R}Wڑ>
aK2B
W
6VjH
8*IzdˍM9Nou>ʤq'kޝ2MKJ@0GaH FM4Ĉn}!#8zJy
Xcu`z)䎙i*F|4z%1H;^ d{ف#VDd6Yɞz1yBD۬9'd%q #.h8l./u4BgEC'@I5{C.)7x3d{."F ~n
uIʭEOx7 *q
TJ$2;(y_L4_ޛ1MϸOle JmT;3oLDEǤg|,錈J*r VnOK'ճ;TC1&Hr#K5&azq߄=|=)GI#YGc=/H {F0QBA}i#[;Y c X4 z!*֘;MZC(Q
[Mhcm =Hr'zY$_u $'Js%2Q\ */ rURxIw%AgL@Kǥ1q ֱp$L")Ƽ%p=7 &sgT:%'V4
AFj4wBI r?@y7WYuo/|vMH˺ [?_Z `sNj&˵ B.w[D2bܒ-
@*Qsh9ͳPYu
HxjlUT4E2$pzQ4O>`-<
%[9F*96L;L$6N }?q邏$^pIAWʱ,(Co w/-%Vdt7ـ#aR$}>"r_y3*tۉVq9ډï
͙ EktJ\HuVG|:>
*,:zF:kĥENnl~w>Cb&u6b0RiNBX=;<@xgG [
2B7om)]ܯ?m5 ,D0. M~\Z4' v# J
KT8 @1%LzI(L渦! K0 xs"FOtϫ4Mq}sh
AS c f+DoMX|M.g^?xcw-G )XF4 Ie䱨iIۄ CZ0pA%v9$ovǠ g=[XhB;CC
l&iQzs5c9OENT05 2c(M/ E-6e@u/ h+[Cײw9W`ҩ@NWsnUJE ֆ /Xq֧Hշ$|範>Nb2]s</.| m,gŃ-:/ q)B;r2ջ6ln1]uC?3ձ, [f ́
Wdi_~
L&}jElMV$vLr^GJi;Ëg !͟_៏XX!_`/] ]v.pخDTON< )Ig8 Q 6n1}ۭfdai @=wYƴ]KVw|mfCh&\LXO1
:TqWLwL_'PT$W=XZRM^UDAqIy@кfV8}kY4,P0
22vki.r!' @OUBm&9
G=iHqԊօN5OG $ OˢF[?2Wn5e[scK bQE5WUG7 kz6ߞܵQDʋg96q [M5vY^C$.v"8 +/`$[FҽkrOYv38忳d%`/3 }~kթ[=%,rҧ@cw
~` qxC|8},}IԔ>-
]|/J䅖Uod>e4z?+ń%&Am*ƅsoW ݒ b۞'+,ȃMsU buqʆůN";WJ"N,ŎWK,#}wR*57ds{N|Ilyx潥ʨ-NV I E]_ .Izz@JaŭEJH]7<٫qc 8'E܊$x魛W ^a`iK. l%ȡ^N1;bH=rSq9J:Tf!'<Ĕ/RAöe
4{8d' Ia:rX(q4풐 PJ|.LF'CBwe^FXn>ʃs6ێkmk%uH<9y*;&M@?)B)i-UJ32fUE PҨYeҔR> @xyڭ.
B7#<UmCK^m Ej!ywkڲ08R[ A+t^}
"P]zxL 7R96z$m j %?`L| KWƬ(o|;kڭS.b\ 7qԍn19h+T.s G^>
6X4.*;2nQ-į'{ær1KqdEA>:* woE7<#սꗂ|X
0! Y'$M
ׄVA粸3ƨQL\(';5'ӂ0CRk%. ;ۗ* bMbz}".M!j>͒W^j#q ɧ[u/EˋzrGcH,AFu`z
8h?zT|>X"[,eħ3q)kZ>HѠF)jcƖW?]U+9
0anZږ@ަ.Z}jεrKT리z2aχ3ƨ1r4E Szzw}% __ )foHP0ںf #jN>EEgXfA:|MQPY9*Ds8ѳ %u9^P5^Z[>I_R-s(R = +N m|m35x7NL`7jW,M~:jEL(š(3A>,d&8, @e^J>l2}3
z5 n+}M^>M!(3)SLa
=B$,ICSؑMoԨF49l@e Iu50>6A0^:XC?XpvEVxWD ê^庁aTV,Ъiܵ5r*K0PkiL9,wuHY0!"LCo +/ m2pLfhLHīcy I`W-m B+t0H(eFpH # A$n]P)G/ uDrF'\H|~9+->1r¥, m7|W<ȌLguJK;>#sL0 Y%GN5 ,2E@]SkK(_DvEm9Y?&/5ݪ훰$ ; 878ݷ f&hyqQO[۠[W3&=7'p%ƽYg-ҦZcYKʮ&5
BiDL53Չ0 ^>[bqc Ư2Ir3ENe27$J3 u20f ǝVD 99*< zY} Cq~NI% y
il0]P`"=k0jHXLCCUx5
Q# EZ(dy`@SXRlf6 ȣ -*>!1[sxKkb8'Qi&<2 lVz1RC'U9ЙZf` -!ފf
o
^OrR48\NȈX9ҋ[ z;0)st
p:G[#INɴ4ɷ`My:H[Z%׃7BY"1+!UiKj\GYmv $7N;$^ʩS$eY;ţ%'V*}5a_D: K*,rYng; 0^bcp9֍kQ47JE!#N&H-ڏ1.y;S?JJV
gq<.CR~(Kߜx ZCbbt]t!We(sU2 _gA
W70`Nw`鲜49PS2*3D̔_Tmȿi8QJv AzϐЬQ~3@- Q8 fItRA`MzIf(t 5=hT+P9ia'UsvL k]J Zo]_-{ہ^qLm(߳Yd"5@EՈ^$-LmMv6 -Βn#t4JGRBp{TU8=)2FEiU.t~1\>> S`U%_h1>Z鱮w1Hc_ '/;a7}l4/J
>a@Oy {H/OFћ;µI'Qyr(_$ H"KH W6, u Aɸ*yg^7N/GmeY/c/,ZYtD a'ѱ2I M 0~^LOR<$3#H}q *@U. wr+3MAnDwa<p~T؋ .KxМ/m
~b NE nqb @ﴸ3BꎛQG S; (f(qMi0لvy뺦*6M, W%8miU(C' hOѸEwbʺnj6[qaT[{ZXj6w?Vxݎz%PMRFvtoY8*zu C5c 8~ *O { SpAVTE!w` 'OS:dG%b k:}.C9@JcX`ׄ粏6q]=[tHK|/Ytz;v"ui?ŎQP8_,7IگkKpϴ+mțy@VsRKLBu Ϯ7q'|.>SxaY%]%3:)+y
nLxIa />
< L9$M^`
?i ؊r, Pגߏc1q
o
m\MEGZ?
*S ,iHul5q+cBrP(_,nc^ju>h!hƆn % CFRFg)1
tR E{9:2)JxTl!! 7Qn~Zz_MNNʷ= >vgJ7֥; ex "
ts ;ZWmJ9h {Mz@Q~`G
4& EHEsbZ2/ ;fzl]ħc&Rղ[aQ 1ep+i sh$b!28? ,"\e,FNjy'b ;KgP-|nƌ miPTf&d OSB._b ^gFX$%Ja_WPqqYdPlgޡkfTm<35įi%y*, [^=f6)ʊm58m4'qpAkj; oZjv5epch̼D&s{aJX "ϦTIȿUDL.O@%!= HeM8 >gz|ff"&00 Dc 7{b
U6lX]j˱Xwˠ%7bb$e "0WH^64%cH7M\l?I` ITHڅO9t+Vux~a OM5b&=snquO7հ Ok-v:4`i&JsA}p$d{I(d"r ]gKGhǨX#,5C CDO0dDNF[ s[x~1Kp 6Fv({;5r{NK[p|ӼX r(b~0wrL9_>8Tdzʶ h}Cp
STH|Z0?ܛ~\?