tpm2.0-abrmd-2.4.0-150400.3.3.1<>,gp9|Wm57C[a}qaJ1u vOI{E-j::PnuD(IILr~y/Zጺ(lʔ^GHkw %n_zQEY|W-gյzpK"ޠ ;NlӕOu2+ƿ=-f؄h<7ٵ5q$$k7 YXԏ#{c/u%{:1b8m }Ţ Uso+>FG?Gd " p(,8<Uv    $ @ \  b x<d "(R8\9:=@>@?@@@F@GAHA<IAtXAYA\A]A^B bCcDkdDeDfDlDuEvEHwFxFyG zG@GPGTGZGCtpm2.0-abrmd2.4.0150400.3.3.1Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chipsThe tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager. This is a daemon service that coordinates requests to the TPM2 chip via Intel's TPM 2.0 software stack.gs390zl372SUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/Productivity/Securityhttps://github.com/tpm2-software/tpm2-abrmdlinuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi [ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tpm2-abrmd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tpm2-abrmd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in tpm2-abrmd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tpm2-abrmd.service ) || : fi fiX8]"*U D) 큤A큤A큤gggggg`!Z7``gYD2gg037447a35f22215da2eb6f9be62659a4377548582f59d9c8333c181e06759d3064bcd9dbe446ab1f34d3215744a31d5048cbac312522cb793706d0ee165967ccefd64e20ed459cb48c4203b6854898047050c3f4bc85c29a7594548867d0009e61b976a22c3ac07a07d735380bb75e7b857c20d8bec84c4805577c6780d1aa22127f2132610b51bf200561a380f85e45cd4b63e80f99beb2edc6b2f62830dec057e9f24b53c3405d2eb6ffb445b5fd78a2ec8e047203199acd61e72e0f032fd75a6f94246556e1583412ffc8200d6979efc1aba6e77479da6d59107586b1357f07144657dd41354b9ceca1838b1b9392e831d781b42e144542f6818e5833611718c1bf4b1ba1fb2c4ffa7398c234d83c0d55475298e470ae1e5e3a8a8bd2e448741e36049f00499d8f8121cb76b99361cb58aafcb8f63f81ea00e44fb774ae8e54c83c72b541db71de0006fb48dcf643bf2cf5c98f446649bee50931cdc94258servicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottpm2.0-abrmd-2.4.0-150400.3.3.1.src.rpmtpm2.0-abrmdtpm2.0-abrmd(s390-64) @@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgobject-2.0.so.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libtss2-mu.so.0()(64bit)libtss2-rc.so.0()(64bit)libtss2-sys.so.1()(64bit)libtss2-tcti-device0libtss2-tcti-tabrmd0libtss2-tctildr.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)tpm2-0-tssuser(tss)3.0.4-14.6.0-14.0-15.2-14.14.3gd a@aaz`@``@_t@]@]c\\@[Ѱ@[ @[t[[m~@[;e@[:[6@ZZ ,@YKYYp@thomas.blume@suse.comaplanas@suse.comaplanas@suse.comjsegitz@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgaplanas@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.com- make sure that udev workers have finished before daemon-reload (bsc#1231071)- Version 2.4.0 + remover syslog deprecation warning (bsc#1185154) + cover update to 2.3.3 (jsc#SLE-17366) + contains reload fix (bsc#1166936~ + fix tcti loading using short / long names (bsc#1159176)- Warp selinux into a bcond- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_tpm2-abrmd.service.patch- Move selinux devel file to devel subpackage- Update to version 2.4.0: - Service start depends on systemd device unit: dev-tpm0.device. - Numerous memory leaks. - udev settle service deprecation warnings. - StandardOutput=syslog deprecation warnings. - Add selinux module files - Move dbus files out of /etc- Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077). In MicroOS systems the recommendations are not installed, making the service fail to initialize: Failed to instantiate TCTI- update to version 2.3.3: - changes in version 2.3.1: - Fixed handle resource leak exhausting TPM resources. - changes in version 2.3.2: - Added cirrus CI specific config files to enable FreeBSD builds. - Changed test scripts to be more portable. - Changed include header paths specific to FreeBSD. - changes in version 2.3.1: - Provide meaningful exit codes on initialization failures. - Prevent systemd from starting the daemon before udev changes ownership of the TPM device node. - Prevent systemd from starting the daemon if there is no TPM device node. - Prevent systemd from restarting the daemon if it fails. - Add SELinux policy to allow daemon to resolve names. - Add SELinux policy boolean (disabled by default) to allow daemon to connect to all unreserved ports.- update to version 2.3.0: - changes in version 2.3.0: - Add '--enable-debug' flag to configure script to simplify debug builds. This relies on the AX_CHECK_ENABLE_DEBUG autoconf archive macro. - Replaced custom dynamic TCTI loading code with libtss2-tctildr from upstream tpm2-tss repo. (requires tpm2-0-tss version 2.3.0) - Explicitly set '-O2' optimization when using FORTIFY_SOURCE as required. - changes in version 2.2.0: - New configuration option `--disable-defaultflags/ added. This is for use for packaging for targets that do not support the default compilation / linking flags. - Use private dependencies properly in pkg-config metadata for TCTI. - Refactor daemon main module to enable better handling of error conditions and enable more thorough unit testing. - Updated dependencies to ensure compatibility with pkg-config fixes in tpm2-tss. - Fixed bug causing TCTI to block when used by libtss2-sys built with partial reads enabled. - Removed unnecessary libs / flags for pthreads in the TCTI pkg-config. - Output from configure script now accurately describes the state of the flags that govern the integration tests. - drop fix_dlopen.patch: no longer necessary since abrmd not uses the tctildr shared library. This one hopefully now does the right thing.- update to version 2.1.1: - changes in version 2.1.1: - Unit tests accessing dbus have been fixed to use mock functions. Unit tests no longer depend on dbus. - Race condition between client connections and dbus proxy object creation by registering bus name after instantiation of the proxy object.- bsc#1130588: Require shadow instead of old pwdutils- update to version 2.1.0: - changes in version 2.1.0: - `-Wstrict-overflow=5` now used in default CFLAGS. - Handling of `TPM2_RC_CONTEXT_GAP` on behalf of users. - Convert `TPM2_PT_CONTEXT_GAP_MAX` response from lower layer to `UINT32_MAX` - travis-ci now uses 'xenial' builder - Significant refactoring of TCTI handling code. - `--install` added to ACLOCAL_AMFLAGS to install aclocal required macros instead of using the default symlinks - Launch `dbus-run-session` in the automake test environment to automagically set up a dbus session bus instance when one isn't present. - Bug caused by unloading of `libtss2-tcti-tabrmd.so` on dlclose. GLib does not support reloading a second time. - Bug causing `-fstack-protector-all` to be used on systems with core libraries (i.e. libc) that do not support it. This caused failures at link-time. - Unnecessary symbols from libtest utility library no longer included in TCTI library. - changes in version 2.0.3: - Update build to account for upstream change to glib '.pc' files described in: https://gitlab.gnome.org/GNOME/glib/issues/1521 - added _service file for syncing with upstream tags- add a Requires towards tpm2-0-tss, because that main package holds the udev rules and logic for setting up the tss user. Without this the daemon can't start up correctly.- fix broken build due to newer glib dependency that reports a full path for gdbus-codegen, breaking the configure check.- update to version 2.0.2 (FATE#326270): - --enable-integration option to configure script now works as documented. - Format specifier with wrong size in util module. - Initialize TCTI context to 0 before setting values. This will cause all members that aren't explicitly initialized by be 0.- add recommends to the tcti-device and tcti-abrmd. Otherwise they're not installed right away, rendering the abrmd quite unusable.- Update to version 2.0.1: * SessionList: Fix Connection object reference leak. * source/sink: Organize ControlMessage processing. * CommandSource: Replace 'connection-removed' signal with ControlMessage. * SessionList: Remove all locking. * ConnectionManager: Remove 'connection-removed' signal. * ci: Build 'check' target when CC is gcc. * build: Fix bad URLs in configure script. * CHANGELOG.md: Add version number and date for 2.0.1 release. * Replace references to drand48_r family of functions for portability * Fix for type-punned pointer reported in newer compilers that enforce strict aliasing- Trying to fix build on older distros that fail because of a missing or broken autoconf valgrind detection macro. Removing autoreconf to hopefully fix this.- add fix_dlopen.patch: fixes an issue with dlopen()'ing the tcti-device library from tpm2-0-tss. See https://github.com/tpm2-software/tpm2-abrmd/issues/486.- update to major version 2.0.0: - support_dbus_activation.diff: removed, is not contained upstream - the tpm2 stack introduces an incompatible ABI to the previous version with this update. There is no compatibility layer, libraries have new names etc. - upstream changelog: [#]# 2.0.0 - 2018-06-22 [#]## Added - Integration test script and build support to execute integration tests against a physical TPM2 device on the build platform. - Implementation of dynamic TCTI initialization mechanism. - configure option `--enable-integration` to enable integration tests. The simulator executable must be on PATH. - Support for version 2.0 of tpm2-tss libraries. [#]## Changed - 'max-transient-objects' command line option renamted to 'max-transients'. - Added -Wextra for more strict checks at compile time. - Install location of headers to $(includedir)/tss2. [#]## Fixed - Added missing checks for NULL parameters identified by the check-build. - Bug in session continuation logic. - Off by one error in HandleMap. - Memory leak and uninitialized variable issues in unit tests. [#]## Removed - Command line option --fail-on-loaded-trans. - udev rules for TPM device node. This now lives in the tpm2-tss repo. - Remove legacy TCTI initialization functions. - configure option `--with-simulatorbin`. [#]# 1.3.1 - 2018-03-18 [#]## Fixed - Distribute systemd preset template instead of the generated file. [#]# 1.3.0 - 2018-03-02 [#]## Added - New configure option (--test-hwtpm) to run integration tests against a physical TPM2 device on the build platform. - Install systemd service file to allow on-demand systemd unit activation. [#]## Changed - Converted some inappropriate uses of g_error to critical / warning instead. - Removed use of gen_require from SELinux policy, use dbus_stub instead. - udev rules now give tss group read / write access to the TPM device node. - udev rules now give tss user and group read / write access to kernel RM node. [#]## Fixed - Memory leak on an error path in the AccessBroker.- update to upstream version 1.2.0: - Limit maximum number of active sessions per connection with '--max-sessions'. - Flush all transient objects and sessions on daemon start with '--flush-all'. - Allow passing of sessions across connections with ContextSave / Load. - Unref the GUnixFDList returned by GIO / dbus in the TCTI init function. This fixes a memory leak in the TCTI library. - correctly trigger udev to update /dev/tpm* permissions after package installation. (bnc#1078687) - prepared support_dbus_activation.diff patch which adds D-Bus activation, but can't use it yet due to rpmlint- fix_service_paths.diff: fixed broken systemd service unit (bnc#1066123). the service unit file in the upstream distribution tarball is already configured and looks for binaries and configuration files in the /usr/local prefix which is wrong.- package version symlink correctly, belongs into the lib package itself, not the -devel.- update to upstream version 1.1.1 which fixes some local denial-of-service security issues among other things: - Replace use of sigaction with g_unix_signal_* stuff from glib. - Rewrite of INSTALL.md including info on custom configure script options. - Default value for --with-simulatorbin configure option has been removed. New default behavior is to disable integration tests. - CommandSource will no longer reject commands without parameters. - Unit tests updated to use cmocka v1.0.0 API. - Integration tests now run daemon under valgrind memcheck and fail when errors are found. - CommandSource now tracks max FD in set of client FDs to prevent unnecessary iterations over FD_SETSIZE fds. - no longer call bootstrap and switch to the release upstream tarball which has now been fixed to contain all necessary files- first version of the new arbmd resource manager from Intel's tpm2 stack. This will replace the old resourcemgr previously shipped with the tpm2-0-tss package./bin/sh/bin/sh/bin/sh/bin/shs390zl37 1736769003 2.4.0-150400.3.3.12.4.0-150400.3.3.1 tpm2-abrmd.servicerctpm2-abrmdtpm2-abrmdcom.intel.tss2.Tabrmd.servicetpm2-abrmd.conftpm2.0-abrmdCHANGELOG.mdCONTRIBUTING.mdINSTALL.mdREADME.mdtpm2.0-abrmdLICENSEtss2-tcti-tabrmd.7.gztpm2-abrmd.8.gz/usr/lib/systemd/system//usr/sbin//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/doc/packages//usr/share/doc/packages/tpm2.0-abrmd//usr/share/licenses//usr/share/licenses/tpm2.0-abrmd//usr/share/man/man7//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:37038/SUSE_SLE-15-SP4_Update/2f2edf91f289d7c3e766ee94f4531fbe-tpm2.0-abrmd.SUSE_SLE-15-SP4_Updatedrpmxz5s390x-suse-linuxASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=b84a9f28002c50a1c3aaad7170722a9d323ae77b, strippedexported SGML document, ASCII textdirectorytroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R RRRR RRR RR R RijD/*utf-83ff80911aed3c724a4d6476ca063661d225fb46c419c526907a44a829c2fc4af?7zXZ !t/d\D]"k%n>6"0{XP- 2 @w&MKneϦxH8Ѳ1q I$X|3m^aۺvC1fB+BuGH 6n>Fkd'Ȧ) gRoP oѨo-c|JMq\dR UM|n7kJռ6kG\EcC+cp"[K *[0[+u nl'66]]g" H0+ڹpkFÙKQ{0QMM+1*4ùe>4N%CL=4XCQ܏6,+q +jeZy7c=#Am,2<$s`x;S:^v̋v.(U-')C7 C& +61-_?J?$OJe *~킩C&h4WA$C$س.6 Ziԣ'_gV8gV 7nY6paRp)| 8etlaQjysw/q*,l?P|& -g1{';؆ewr(ZZ$l~'<[_ytRV!;Ԕ-Jgf}%e/~I}\(m8?:Z<q9a,{^4N ":ȗ)c=@~Zϊn gAS !y7md p) 'ֵq~DC蘃hvU[gkĠ V@Z#D`ԒJ8?<Mˢ |忙t?X&Q4P(g'3[ 2gox7tVKu}>ד@E'WW$n5_Egz>m8wM/3L㷚i>i*M,β~sߠ;S pB?-5ONז!0ȟIt z^iD1_M{ߗ~-Jyvbm; °\CCE`|60x;?:K>Op/Fy=S?0ZױڽOL6VBoAu?ޥbF8Ay!_gsH(o$l^:!bֈ#Uķ6lW SReFz[ؼc;v>?X6O]q 8O}N@"B䙟*KQDcpXۜ#h;ȞR9͝X#$G&1:cSj (WQxoÅ޼++DlY7uRRo{\;,h7<:VvƂ0J8lչߔ-i ;,Me&b1ݝ5O7ݎHms0YvJ/lb j"Z3a LIoz~G5[>`7^I Le69fwʔfX!Luvflw#\;бѣ$OdYN|ZV9հL>8. d\)-wGՒeO :֏(r3_e.|Y쫐A~QYN߿tP,U@,I$ `BH-x%VEMnc= k/c_hsXg/4BFȇw.kUJ?\)VfiPSD|Z">%hxdu?'e х`?1NV}ܨ Ӌd 1mG:CI9oiaHCRRP]1\=AI2qX/ 0|)z_Qjp6I\Ec )P& ϊXN?op\GbgHCcg9lTFIn{/z.Rzȡ.*B 9?f?O;4[+ L ]KbP3b%/Vbjx\S|{M80NQ*/7ذ_}ؑuwlI|կBU)֡qq"Qz~@×AwIrHz3 wy.ED1 (naDiaۄJa?)}Ƿc KpLҶ`uX;Lvsq9| ȏ '^U/pacb.0K¡CO$GYڀ&MwvTAF^]]&VzCmVB'̹3>(JZ.%Rj|>R+NRv㏘uCZvKaѣK6PPx}pP/C++A=[w\n [`ơ ;ZcԊJ|Ψx\)\WCW|>K J0_#k޻ y&!m\O7|:U-#=2\`#W1O J*6 @|L W~i7gN /N[JL}H#-l)_68̥וHCk9+[#hҘ ǀa>,lnP>ҀS)))lJiJU}i*ȈO=dvb)1xXF%uԉP!=or, (2_fNKP) FVpx1+B;cAW$_$v['nt[}*{aC{6}r9b7a ;';Q[Ӏu2"f:2 bgc0COD(]?P& ' 4}+egJRT#N7ws e(apcoŞNW<A.~al۝mILShe2%[ʂsFcV"ƚ[v.uv۷)ЖL&*aҭ@fCs >Bt'Vfq3WQ./IK)hJ"W 8zY,!Ht63_?CC^%Q:y`;@w.d91zMURvsL3GӍab VU6r}Бosa{ȳ/؅YЃFL fӉ[o q!Lk8cܮ_υVQs-U+lxz:6v*@%;: *f/*ò+)iVH^ڔ%tF !Ơ#biܛ3\k9J%HTFޗQAHNͲ6%P?A*Q+R86rbsbq}G:љ$FBMUV6(cJ]NTrӔ ~vcvi*n{| R=RgjnI/tVi.1U}, Yū}8ɈÉ89Ҁrt~:5T mc\޶.]LٖpG3Hoz4eۛ"UDAi\xЍڣ^r̅? 朷~S8xCӓV&$(R{{B힅9hHs&|~?Ns6)X:Qba!7ITyj!! c-yqr̜q_z#5.&3K$y-[-}#a%-&7{7R[6-9nw*9c=5ƦLw\uH͢ҍ| Xrxx' o ɳ-1Ud8nRw2me)E,nvNi4=S_'Z΢D68SObial-1PG_Yrwa7a}{C@nr%5*$~=}Gd.-eb#s$X>FNo&,?ؐ$1+Ͻm!b!7# \Bi"`'Ђ mXa_bzE[>bV[Ҽ, Wdzh'-.&5Hwl6qd` 3 tŸ]c aƪ{`F\ c{eVw$Q [ WWb#_t<lU#OEϕrjuG0RD7[_3[p*q ׃7:s A)*B[( rx_c NYhcy׾nxd_]9vM#>FCiPhyOAjׁy-,Иu+m jH?1LWr ؀ l!E|3>8đe>ш݁X۫rMDb:LG#i0<#P' D*UB3~_fìaYGH?: >0끽Z9-v/l)%i`ncfɋ5\M&!hl?&.J 9;Wm#̍? Fu*[ qt tJ;Rz3SG'T*:_`y;&bDVfLO?iȕ{ '9/U5w6K9|+vIZ}kRmcȊ7lG(z42}4/Kx0. 3@|f_u.gIe*8k}DTc->[Z IA pZ%_ ч!X@ MvYlQ[zw`:µe 5< >Ok~x\W%g,E>Dcn6D4b'Y)8sݿWOS[yXRVJ<|n=KY(t kspU d~9,6fRVrQDdVC{R7Yrl=wiRvilK'Lgñ6,7\dAB.($D KϨK׍s;eCsP4 +mixN[Ajcp_/*-P"I02Q.{L̴%[yov8T AQ͚6ktp_bWӷŏ*ZB?Ҩq=S#@DmlӥV;t- Ўr>aRKcՠ@AlW'Zթ laƖǥ >IE>`W*aC[dBݙWR)㖿@ԓZf㚴 9eWcH(3k@]P}֚A@cGBf% AuA$$=C{;/hbۿ&<|zK\k5)`" ΣL d*iSr[QPbO$o̒EHK#)A 2\ ,S("KȿxGK Dڭ(UQ>5ԿcA.Qk` #!`l+n5 Qi[͌O.%u+8]劒/C i ʹrg&R=qU!IpmOrP9rH;5zNK<t` +,E|3gA(#Uۮ؞%ŝ9" LuE5Zb ٩gH IAQ6y,ub_às"V/F2ճ"tL $i [z/Jϡ{8ng180n@yX0O!#.XʠKs OMƴu.ψTդxB BUO{qusgY=ȗLJժjFRK'9CJ|ݞ߹䬶N#hg:lЉ& . \Vm[&ͥ[][]aRJ*-0k"29π0A}UMb H*BH+.ܸeC؅5#eW$m((8W7;]9K>"WT`=wU(_fohNr^/{mFY)\y6 ϡs |ăr ɒ5XÝC_uKp8!|G6&oY1\kܨ)}`/TeFF9j`t&ÔĔsџDI_*$٦áUMijG*vq ׂ=Sz$24YDN`},+ Vnrc7GYLLsrQr'1qx5T uo i*Nf5TTys)Ps an(zsma{c}a3V"t0U26`!ܬ{IS|if6+5brA}VF޹+Ս3  ,7vdF L3+x :IK7x.R18._d a!ǻ.!hYVh.ᑤ$9mTluH5?"J}|Q⭇zHAtY?rsBdGsۡW(qy($.Z"ͳ:}.Fʲmý$-R?Q̘ ]#Ə{[0b!NM|&ڍra9{LQ?0yl7&Ӫ"ylz|.DZH ;7_^E—\=ua;*(8_6~:/R3-HlP<+$G>$A:1ݯ]{P%þSw5X` (oQ98f왩Tx;Dz:)yxe(zkB(w"/*u{8B'ݵN~+"?0uņ> <&MBj.5x̚m6O;WMэW2{%έf' J޻wVO%}I\=*WyM_/ܹ*DWe'<ޑoCy”2(j泟7 DZ8 x2? 2^@ج̻Pګ5Hː̗cX0dhuU}/'/^noWA0^Ґ?fxfmn5ֺsd.g_ Ӑ0|˩zI NTC .DigD(Q(9΂pJ_zV1WNwkZo|!- px ͤzILmm\ݰhd=;U#PYє槣vղ@95+bNm{ڛ%H~[4+.X$8X/-p- q%V`O{d*v{BV%oQ\ȍ9u4ɷAʞHw⡺WPy$rCMp5޻8M}du3>EUuB7}Z4p>qe:jbdB9~Lqrԋ^_ȌwSGR"t0mE0I+lCHs/VZiA[{% ?F<Hw|U=Q7x!Cwxx֒'-"kzVudO5'aʤJj?ӆ+hv) 6KB=]kE@|1[{Ԃ!4H6%&g᫰^P}8Y'EFQDE }T@5 jlz̓3CS=XdS<㷴Iw.Ȳ",Po6Kju{E1<Z7IaP\ ks0+q.. ]BM/n/~p>Ջ(Io^-v:l4nY$S :qdоfj -`-CxWW /HHh~*U Հ69'Cˌ"E>]sM29Xv̶rlצ#w:@D`#]^j*@Ty`?;JZcNDRy0p>8 9sqng\968_d&)=37Mw/D7&quY$$ !LEFBDt%BezFf$Ne\ЂiXlܶ0C}؆/]~ӝs'%ne0r~"UvdĎ$^\)#D4uLV@Q͊m/<%ރS~HC)OHvڷ'A(pr9Io{i\$b[(wn Nr<;\rҽ%OhوD.A&^S=:Zƹ#c/%^iU݁3!NhU9&eGd WvK~;^[c@Ix.%nG̀{&R kP:tX, (aegwdc"c^@\VUPb'7W}:;дt3VW{ArT]ڭ);D)Rn.[˰q#}ٳSvw )B*>mpfKtyjcwl4RFSŷKVNčئ͒:vl*۽1}kmN՗ʶ{bZ25 )IcUڮRN-:4*HOf5~YQW‘S,6 c >lVAN&A.QDDBGReXR0p 9 2hoBBs+=Y-"Z?1PWה'6Qiy .óV-Άq,?>Ts"3/cq%L3"$bxI |-Æ4KAվ|!Z}Û4aܒ9{9#T2(_nB_ x)w߫2>9E 5wT81_Sk z$IwTuّ4&Rn dr^ jaoP?T69d-4T%ĺ-;",g:>XiBIUwũZ9qՍ`tg4ѩ;ۚ:IRSȹ&b4)B2A8>ډLedl*BQ_0'F?6y!Rj)ZQA_%ϓpIe80!yA3Y-gpƴ,7ӳ`BA}`5_! ^jm hqMH58~ܔE >o$,aDLbwۉhuֵ%/F`p&zK&e$|qځ2HfZsS3ܡ)t|5: g|x~B/#y`E/9 7np\g%iy)*fr Dqx 肳q º:eM1]u@ 2~j>V'WQ !nJarʳpН[?3ij9O= Ӎ}TOt:cq3=$XVh̍ #|uۄq!FO!qdHœgF+0`6*@ n|MC5A;%V]ٕ緼+WS?+QnND-P3"P+?ٖ(7T 4:zgTx'pМ$?Pj)庘\|^W,С !>m9${)W O;.US[ri/OĨPZKYHNU7TRW2 RQ uax3] 9t1m~Naً(e8wFbhA!= w >Jr;EYN(w{M hW%򀋣@xl10̹ a^$I[]jEOhc#@x5<!Mi5_hU>f{8E ( ;=;cJ/6oQ]X*SLIJ+i+Fe^͔ v G|Qܷ,Thbߌ3f1 bFM9ByM?%mq!e9C#"u~+ =!8WTFH)]l͠ K&Yte5\,RHՈt.~cu-UL~U^w} VhKn1IޟojVE=E TWbV Byxɮf֖$ ELU u5XG 8`MrՆ*jD9'DP @ơefLh;8d>u{&LOaȹj[GUWUƇ[%u'S&k99}jMzeP"N3L1udP,_ gOt(5q:Jc+:Q=AAl˯Xm! # |;H,꺆}.Bz Iw.=VNٝfG{;C)EFBW`gpI2j4͹6rgo$P]_s 0FλF;?[Y(7 spiiYe}~ `mB᥈8T d` (gkֱJ2FB0>.Zܕ$S$фS+A4:{l0:'}_Z0PSp#uQP=;UAE䡼`*0Zp,TFO2IXo nvhdVwu=a-8ʪО9 GM."~I/$BMRAѐ m2(Wh_y=ݱjgkɑ1k@yrmvGϱ,t_5zQٯM&:.lcY_bYox'ڶd(x@St/B(̌hχfUoDD*T^NaQ16h."tM\iOCn_K=s _+D& E&L8faFw6j7Mm_׹nhИꇿOꋏG%za?_B0{!Wau2|R]teQ/4p^ `JMNeVStiY@jZ>x ueŕ8d;+rvE!-T!Aڒsu+? fad"#^Ɯ٦h 1JiQ\3m*TCpGj:մ?Y8Yk^{8 lRw#;g  tx4rimA.Zjlre)FS7PK BbM)B,6WVqnֆ&WӺA`R fk9(%^4B 8U zX+Pj]D FH7V} ]͈2| YZ