tpm2.0-abrmd-2.4.0-150400.3.3.1<>,Dgp9|bYi(j{Q̈́rcj>dWjְ;b WSqbǂ2ńtq\ jQTɾt\ClHwo]>*ng '\VJG #ЃճTnI)t 7k&ᏻ!mWbwڹH\Uw76 pM qvso C tAѨPB~FH?Gd " p(,8<Uv    $ @ \  b x<d(i(89:d=A>A?A%@A-FA5GALHAIAXAYA\A]B4^C bD cDdE:eE?fEBlEDuEXvEwFxG(yG`zGGGGGCtpm2.0-abrmd2.4.0150400.3.3.1Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chipsThe tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager. This is a daemon service that coordinates requests to the TPM2 chip via Intel's TPM 2.0 software stack.gH01-ch2cSUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/Productivity/Securityhttps://github.com/tpm2-software/tpm2-abrmdlinuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi [ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tpm2-abrmd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tpm2-abrmd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in tpm2-abrmd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tpm2-abrmd.service ) || : fi fi]"*U D) 큤A큤A큤gggggg`!Z7``gYD2gg037447a35f22215da2eb6f9be62659a4377548582f59d9c8333c181e06759d301c861611023337ecd42c7234aa6d03b5a02cd52bab8735a89ec6fde7f14fecedefd64e20ed459cb48c4203b6854898047050c3f4bc85c29a7594548867d0009e61b976a22c3ac07a07d735380bb75e7b857c20d8bec84c4805577c6780d1aa22127f2132610b51bf200561a380f85e45cd4b63e80f99beb2edc6b2f62830dec057e9f24b53c3405d2eb6ffb445b5fd78a2ec8e047203199acd61e72e0f032fd75a6f94246556e1583412ffc8200d6979efc1aba6e77479da6d59107586b1357f07144657dd41354b9ceca1838b1b9392e831d781b42e144542f6818e5833611718c1bf4b1ba1fb2c4ffa7398c234d83c0d55475298e470ae1e5e3a8a8bd2e448741e36049f00499d8f8121cb76b99361cb58aafcb8f63f81ea00e44fb774ae8e54c83c72b541db71de0006fb48dcf643bf2cf5c98f446649bee50931cdc94258servicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottpm2.0-abrmd-2.4.0-150400.3.3.1.src.rpmtpm2.0-abrmdtpm2.0-abrmd(x86-64) @@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgobject-2.0.so.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libtss2-mu.so.0()(64bit)libtss2-rc.so.0()(64bit)libtss2-sys.so.1()(64bit)libtss2-tcti-device0libtss2-tcti-tabrmd0libtss2-tctildr.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)tpm2-0-tssuser(tss)3.0.4-14.6.0-14.0-15.2-14.14.3gd a@aaz`@``@_t@]@]c\\@[Ѱ@[ @[t[[m~@[;e@[:[6@ZZ ,@YKYYp@thomas.blume@suse.comaplanas@suse.comaplanas@suse.comjsegitz@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgaplanas@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.com- make sure that udev workers have finished before daemon-reload (bsc#1231071)- Version 2.4.0 + remover syslog deprecation warning (bsc#1185154) + cover update to 2.3.3 (jsc#SLE-17366) + contains reload fix (bsc#1166936~ + fix tcti loading using short / long names (bsc#1159176)- Warp selinux into a bcond- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_tpm2-abrmd.service.patch- Move selinux devel file to devel subpackage- Update to version 2.4.0: - Service start depends on systemd device unit: dev-tpm0.device. - Numerous memory leaks. - udev settle service deprecation warnings. - StandardOutput=syslog deprecation warnings. - Add selinux module files - Move dbus files out of /etc- Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077). In MicroOS systems the recommendations are not installed, making the service fail to initialize: Failed to instantiate TCTI- update to version 2.3.3: - changes in version 2.3.1: - Fixed handle resource leak exhausting TPM resources. - changes in version 2.3.2: - Added cirrus CI specific config files to enable FreeBSD builds. - Changed test scripts to be more portable. - Changed include header paths specific to FreeBSD. - changes in version 2.3.1: - Provide meaningful exit codes on initialization failures. - Prevent systemd from starting the daemon before udev changes ownership of the TPM device node. - Prevent systemd from starting the daemon if there is no TPM device node. - Prevent systemd from restarting the daemon if it fails. - Add SELinux policy to allow daemon to resolve names. - Add SELinux policy boolean (disabled by default) to allow daemon to connect to all unreserved ports.- update to version 2.3.0: - changes in version 2.3.0: - Add '--enable-debug' flag to configure script to simplify debug builds. This relies on the AX_CHECK_ENABLE_DEBUG autoconf archive macro. - Replaced custom dynamic TCTI loading code with libtss2-tctildr from upstream tpm2-tss repo. (requires tpm2-0-tss version 2.3.0) - Explicitly set '-O2' optimization when using FORTIFY_SOURCE as required. - changes in version 2.2.0: - New configuration option `--disable-defaultflags/ added. This is for use for packaging for targets that do not support the default compilation / linking flags. - Use private dependencies properly in pkg-config metadata for TCTI. - Refactor daemon main module to enable better handling of error conditions and enable more thorough unit testing. - Updated dependencies to ensure compatibility with pkg-config fixes in tpm2-tss. - Fixed bug causing TCTI to block when used by libtss2-sys built with partial reads enabled. - Removed unnecessary libs / flags for pthreads in the TCTI pkg-config. - Output from configure script now accurately describes the state of the flags that govern the integration tests. - drop fix_dlopen.patch: no longer necessary since abrmd not uses the tctildr shared library. This one hopefully now does the right thing.- update to version 2.1.1: - changes in version 2.1.1: - Unit tests accessing dbus have been fixed to use mock functions. Unit tests no longer depend on dbus. - Race condition between client connections and dbus proxy object creation by registering bus name after instantiation of the proxy object.- bsc#1130588: Require shadow instead of old pwdutils- update to version 2.1.0: - changes in version 2.1.0: - `-Wstrict-overflow=5` now used in default CFLAGS. - Handling of `TPM2_RC_CONTEXT_GAP` on behalf of users. - Convert `TPM2_PT_CONTEXT_GAP_MAX` response from lower layer to `UINT32_MAX` - travis-ci now uses 'xenial' builder - Significant refactoring of TCTI handling code. - `--install` added to ACLOCAL_AMFLAGS to install aclocal required macros instead of using the default symlinks - Launch `dbus-run-session` in the automake test environment to automagically set up a dbus session bus instance when one isn't present. - Bug caused by unloading of `libtss2-tcti-tabrmd.so` on dlclose. GLib does not support reloading a second time. - Bug causing `-fstack-protector-all` to be used on systems with core libraries (i.e. libc) that do not support it. This caused failures at link-time. - Unnecessary symbols from libtest utility library no longer included in TCTI library. - changes in version 2.0.3: - Update build to account for upstream change to glib '.pc' files described in: https://gitlab.gnome.org/GNOME/glib/issues/1521 - added _service file for syncing with upstream tags- add a Requires towards tpm2-0-tss, because that main package holds the udev rules and logic for setting up the tss user. Without this the daemon can't start up correctly.- fix broken build due to newer glib dependency that reports a full path for gdbus-codegen, breaking the configure check.- update to version 2.0.2 (FATE#326270): - --enable-integration option to configure script now works as documented. - Format specifier with wrong size in util module. - Initialize TCTI context to 0 before setting values. This will cause all members that aren't explicitly initialized by be 0.- add recommends to the tcti-device and tcti-abrmd. Otherwise they're not installed right away, rendering the abrmd quite unusable.- Update to version 2.0.1: * SessionList: Fix Connection object reference leak. * source/sink: Organize ControlMessage processing. * CommandSource: Replace 'connection-removed' signal with ControlMessage. * SessionList: Remove all locking. * ConnectionManager: Remove 'connection-removed' signal. * ci: Build 'check' target when CC is gcc. * build: Fix bad URLs in configure script. * CHANGELOG.md: Add version number and date for 2.0.1 release. * Replace references to drand48_r family of functions for portability * Fix for type-punned pointer reported in newer compilers that enforce strict aliasing- Trying to fix build on older distros that fail because of a missing or broken autoconf valgrind detection macro. Removing autoreconf to hopefully fix this.- add fix_dlopen.patch: fixes an issue with dlopen()'ing the tcti-device library from tpm2-0-tss. See https://github.com/tpm2-software/tpm2-abrmd/issues/486.- update to major version 2.0.0: - support_dbus_activation.diff: removed, is not contained upstream - the tpm2 stack introduces an incompatible ABI to the previous version with this update. There is no compatibility layer, libraries have new names etc. - upstream changelog: [#]# 2.0.0 - 2018-06-22 [#]## Added - Integration test script and build support to execute integration tests against a physical TPM2 device on the build platform. - Implementation of dynamic TCTI initialization mechanism. - configure option `--enable-integration` to enable integration tests. The simulator executable must be on PATH. - Support for version 2.0 of tpm2-tss libraries. [#]## Changed - 'max-transient-objects' command line option renamted to 'max-transients'. - Added -Wextra for more strict checks at compile time. - Install location of headers to $(includedir)/tss2. [#]## Fixed - Added missing checks for NULL parameters identified by the check-build. - Bug in session continuation logic. - Off by one error in HandleMap. - Memory leak and uninitialized variable issues in unit tests. [#]## Removed - Command line option --fail-on-loaded-trans. - udev rules for TPM device node. This now lives in the tpm2-tss repo. - Remove legacy TCTI initialization functions. - configure option `--with-simulatorbin`. [#]# 1.3.1 - 2018-03-18 [#]## Fixed - Distribute systemd preset template instead of the generated file. [#]# 1.3.0 - 2018-03-02 [#]## Added - New configure option (--test-hwtpm) to run integration tests against a physical TPM2 device on the build platform. - Install systemd service file to allow on-demand systemd unit activation. [#]## Changed - Converted some inappropriate uses of g_error to critical / warning instead. - Removed use of gen_require from SELinux policy, use dbus_stub instead. - udev rules now give tss group read / write access to the TPM device node. - udev rules now give tss user and group read / write access to kernel RM node. [#]## Fixed - Memory leak on an error path in the AccessBroker.- update to upstream version 1.2.0: - Limit maximum number of active sessions per connection with '--max-sessions'. - Flush all transient objects and sessions on daemon start with '--flush-all'. - Allow passing of sessions across connections with ContextSave / Load. - Unref the GUnixFDList returned by GIO / dbus in the TCTI init function. This fixes a memory leak in the TCTI library. - correctly trigger udev to update /dev/tpm* permissions after package installation. (bnc#1078687) - prepared support_dbus_activation.diff patch which adds D-Bus activation, but can't use it yet due to rpmlint- fix_service_paths.diff: fixed broken systemd service unit (bnc#1066123). the service unit file in the upstream distribution tarball is already configured and looks for binaries and configuration files in the /usr/local prefix which is wrong.- package version symlink correctly, belongs into the lib package itself, not the -devel.- update to upstream version 1.1.1 which fixes some local denial-of-service security issues among other things: - Replace use of sigaction with g_unix_signal_* stuff from glib. - Rewrite of INSTALL.md including info on custom configure script options. - Default value for --with-simulatorbin configure option has been removed. New default behavior is to disable integration tests. - CommandSource will no longer reject commands without parameters. - Unit tests updated to use cmocka v1.0.0 API. - Integration tests now run daemon under valgrind memcheck and fail when errors are found. - CommandSource now tracks max FD in set of client FDs to prevent unnecessary iterations over FD_SETSIZE fds. - no longer call bootstrap and switch to the release upstream tarball which has now been fixed to contain all necessary files- first version of the new arbmd resource manager from Intel's tpm2 stack. This will replace the old resourcemgr previously shipped with the tpm2-0-tss package./bin/sh/bin/sh/bin/sh/bin/shH01-ch2c 1736768995 2.4.0-150400.3.3.12.4.0-150400.3.3.1 tpm2-abrmd.servicerctpm2-abrmdtpm2-abrmdcom.intel.tss2.Tabrmd.servicetpm2-abrmd.conftpm2.0-abrmdCHANGELOG.mdCONTRIBUTING.mdINSTALL.mdREADME.mdtpm2.0-abrmdLICENSEtss2-tcti-tabrmd.7.gztpm2-abrmd.8.gz/usr/lib/systemd/system//usr/sbin//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/doc/packages//usr/share/doc/packages/tpm2.0-abrmd//usr/share/licenses//usr/share/licenses/tpm2.0-abrmd//usr/share/man/man7//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:37038/SUSE_SLE-15-SP4_Update/2f2edf91f289d7c3e766ee94f4531fbe-tpm2.0-abrmd.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=a92c828c29a5ba40dbbff698d81fcbfd152b595a, strippedexported SGML document, ASCII textdirectorytroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRRR R R R RRRRR RG-Akutf-8adb01adbb9ff8076dba1c84801ef075a3305993db5fea60c8214eeca994590b3?7zXZ !t/q Or]"k%j|r>6"0{XP-zAfr:0A|W Cf,߹*#\ bk%AGaG˹nFE&.mђbaRYj%f>;LК$d;Pd C=LQ Ly/zBw%١oMb+"8EeO!4X_w1GȾدANA#Ȃ9pw{6Cx1}^HN[24oK4(ռSHcBR%Tȡ/$hU2C$:;ӒL(a]N'a}D`atc>:Swu PT5nƟizUdn5U̎~A="Jn=I w.{8T)X?'E0 dS h7z< ͡*hR.iooQ E .@L} o$wn_ۂM!Yb!<@n'oy:" wH>e ?e  .@,{'tqUW]u~׉@4i{ D 1O]rF ՊLnTF >n4S̵Y}3P'Q* Q5Rf. l\!WSu`DVܸJ;̫k?f鶀T@hL vy͛'C<5"(x3U bKt{Ẑy@y'1^sϭʗ95CρF ?K%ܗ€(bZ̷M|Eal^^sb.CgPʅݧcw4K|o{Bc2%P2r@VvK_hU]e_O3ͬ4"-z규B, q{k5p}ڥtxlW|Q 8>ٖ Z%Ċ5Fyo}ωR"%<ˬla1g.j 0s >a+PQ>11CpbaM: ZΉ De'5s>30 8;3E7Ltti>&1Ϸ0ye KD}|p-GXh`gg FOxnхyOH%F8̬_itho0c5_xX04K%2o(U `zTN>r5DZW 5x6 + K[sT!Xյ䰌vA^(s ]3^ƥؿׂܵK,KծWxc惄?ŎL&ـ_Vp¶SM2?aWz[zi,';Vߠ.nNM Ur zFڂő_@_ $lB{<&K)'PѦ4Qb^r>"KcyRwI:M,mP8DeHo JͿ@1@1bJ[stkU%q0 Ml|>.*C0gLfaۤ@2=a>_'RPܷJ\b  n?E^l&)B\ ;C<,Ed{DI CCF77,QePX RK_wa;GIYN.|dD*WBCYl'fcXʟ"F4{_#Rx`7 N9,*M ߮ K/LGG;#CKp6{3#q:Tıɖ2 \H]:ި|6R|_}Ar2L}muMPO0m;8-{~-oQIj30׮SL<ЬGtKal6+KI}]V7`ftzW_xz]>ܨ³?2~ݩIүд_ƚPufF^mDG%^DZ61z# [6>ʲCd[IRR@Wr0ǹ]J7hT*MqD;@ vUBCʛB]oq1׋M KWDơw Ք.j͉eXGa0\C17hf-tKm]'gNnptAwL'Kqou8(_̑Wo!E-YA tw1.԰rz1rDK &0߳V툖<7ؓ}u1!(xCsgcϿrc+@Oҿ iqKV?5-4+8eg\َ-f .h.7~*q7<*2 ^yVEڎtviДyPvǢ?bB:JW48ۮ$[$k%`qhxOs 4Ord[EH[9jvjc}9k>#R[+YY;L]|ػ+[7 řȢMWmn^(f/O=F<,6蔆;ƙ{0'p }yvzeVVZB9õI ;#wX}&֫*Q9T-J:'{&E6,ԪB~Sefu֢4{`(՘ߓt]mIkU [F@":hoز-QYnؽ :B}̸}:ϫ?҆fVz ؍؎e`w- ; μ`,cxͽ$$Wr?U&QWJ;Fg kR&r߀okݧFy,L+:q Q ,ӣS73֓A|Fq tTSgR@Km^z=C^e7t I;2v΄՞{L҉DډM9xoM#E,m,p^J+ݒ5-9xKL%9iAJ[;a5*(ut$31'ALtPM5X ZM/V YMʈAd^9ߓ!}Ձ)/g>bf>1W4 (t6MMYT7Nw_[܅_H+\#Oe ]n7c%Y1;ZQ Z0!qJ|qv_kGVȅpC ,,+zW2>7l2]U~*:125$tӫC__}pK 5yPeY~žcz.Aej%U/DU\ rd83|JvۂoG /j~á-]V?!yTlA,4q֪9wdMiLW N/H޿RLA\Ri7ݞrD8P+( $5N$l $߶0{h"N{5g]1X̻ƞK&HϨDdlS"5%C߳%yRJh45`Z_ Ζ9y2a}_wDxjn? 선CIB_sCFT{% W a/k4;n%޹y|Q]>O`7J`/X/CǨͣ&b؝S,o^r c"(]ry"n~Y7AxR\2UU6؁FƥF@r^3}"k@*~o;] ;of4mb|u,:(VhSpTd.(%[QcI,-Ac. 8=!lMt>;ȿ}FL !3ZXJH4 qpQc-ΥeD7j|zkX)~)G1$^Hm:Xhl5P$m v*Z˸J-OIJӶ)Y<1mm1xD>I݂;}Tڭ 'Ss|v HѳmAÖXJ*_@~ IHcٝDt8{뛅LP'YN, ( ݷ(a^JtAU4YF1 q*U݂^!c㌳%XT!Ih V .lj(t$ܜPV\r&qG:ZCk7s:9-*=˞#EYM͓gT9 mV̸T86"ڂz%jtWiT NPlp"@O,%!$*esMsZ6kBQHTf38( ;q>nJXLh}\BlnSeA/ѭH~CaS{C/ڍbyj޺!>]v+Aro7+,EKf>Sy:P_b9ԸGx1mP\/TLqȞC삓&,H&2B$yvFtOH |x>N>lQ3P;DW"傀\d[0HowCY0e11$m?݉ u G68)@.ddO)(bR{-Y~+iTK֒]PB~4M&,ŁPTYkNˣ|xZZsҰ)*DRm/ B 摺b|z唍I%QyέЀd?ꏅL603Mm̥,K:t4Q] =>r4O\xy29ᵣ65JEzJ'!zV O::51/(rD arm٫‡_Z ,#tz1+R 7Ơ_~rY7qXF[/c!H876!XT9Ȑ{Vh*\eim{D9xg6k=KxȑrS 51XZgvؤQ]Le>*],~U`!31H}zyum aSgA ֺug%fW&ZjGo Y#tP 򀳕dec͗l,2U&DO/z3'} Sp;9~ dJC#r٬ dO4T5QӁ75Ĭ4A®=z"IL8ϐWҊs(a{9aS .֒S񉅖!U'TEYh QAm#<'Oc`:m8ڟI>6Ե$5&ܰ0%2j|9i ^iVr7S4 ڹv*IpƪI0l:rYGWCtTiČbqEXpO ʭw`U[m۝eĪ PcꌘVJʏTF*`b00c/"ubN!suH.™bbƢ=;YJq鹇kZyÃ&cS~sɶMWM% 2hi0 Zf1z2xK3#HQˠ!Q[M|E`-_~\?Tewd\]~Њ1cQ6KA9FBL3Nep0qMRAnV:cwEJ̴,$Fm(X n'F]%ȍ{IqT#H-0zIdHI& AŮLs܎Qey1sqGiRԍ>N*6[ jjqwXК_q7 :[RtLZԗ*D+)NY@5 Sz#YSax?t 3(g[$j_0C<>̃a+pV$ӿ̥ :b{&khouz/C`]e#KhZ%NR6Ǥ/g ?-F: B㽲ǛoG4e~,Sr? 9MϮ`CH ys~mk6G6MR Srߠ,|,~f|`'o9']+L$ [ԤrdJӰIM{gWêl5[uT@ϼOĵ}Z/}-BjvN䖪ȴlH,XGK]N,K,t 59YpJnfoGF&Թjc\:15mR']h8{5_]y#s{5_7dz 0_x[M. wٵM3$Ցq8S5dLwf"䬷U@\_P<5qEH]{4:RB093#JܽX=oXWO7wмTƦ}fP죝O.V`*+jǫG5Mf$Z[e?v3^ujOu63@E2M'=&j%|@@A yp7-9JzZq4v:} V, pe w{f3+8^F3آ\L~&pcT?6+&鬟%-rDS $W.ӹly/WOpi+tG['KW@wgy)@(ǐ(S_4~3y0-,sm^sY'm ~պk_K'wDݥn@9V [Ab92}~jE5whT$oSl.jyy^oR$ڻL 4LFZkaS8hB TL7"_[o;?ڲ."NyXUS~ק0̐EV!>&|ۆ >DRb'0ϟ$gv{!& kva@;p> C \p~ݡ5{qeR;6B"oJҐ):IP E1,vkh@!/كjTRV}_d\՟g: H=83πѢ Jj[1E;Cm_ ?T !͉7J %wwе0K.)הώqS[ 8Dn QQw(AU3 `LBha#WЅ̊[>LbLiNGsų5XU+3V2b)8_$h LT1[j1PNhr\Õh%F~Kjـvxfװ(0lY[Ԧ3F }rO6/ӿShai,"}1 q-+Y"p%Bd$D kJ0dt&Q%NYJ6'4G2d@ ^K۝t(q4';I{]ܜ*8r,qOk?~hF:0uQqjQ~>>M:0G;LaӼ7*e!N6@G[z鼔;Fģ5TZIW Ռ\f,7]2Vk{~wBoU/VsG1twPp#\9ݱ+)JgP#]l'91!5g=Д$]LGe0 k!킦q<]tHHw|#)J9&n#5؂Ľ|em n$9A{5 \"q Y7ad+xԭ=0*z6l"fTCnǧNpQ+d݃b)R;''D6˰k|R!PF:2fdb75\[fqkliz_Vѻl#"B/ZWاp>-P }߇G|ϩah<;n_~7)vTIsP"-513T0 6X`W3d{Yen#z{Vݤi6 ܇q8!HA[g`Tak(]8杧hj^uzEXP{ rMIBFS䛣'&[].GR*U{?;ܜ_ 60-~ qz^$zv۾̀BMdz*Y_>d8ʯzR<Set2'g]5 cqCbY $KdܺՆHXrLI[.ebc8,2двu9PH-35 0_Q±1GsWCr/1LW r Yt73; \sٔ6/!;E W YmxP MXzE5!c\ŢU l8&'z80xN܀)voMhn`羾M ;Ͷu~CIǝbC5"{l[~#@v豈_M¬\AnFMuӃ 鴙q^`~ӢļeB(ʎ ůLFe+,Nk7S&%92%.`l؋A >azNT#-|%KOZK'\xh-w5 䔧ﰛb&Q<vI{(m ll|ʝxs6cN:WYWJc: 4yҏ@'#e]mţG%s5*Z,TV!J~5vY"OZwrȿ!3<)^;V4fa pWǐ5̣o fšH'~4=ԙmL wQ;Mfgl?҂BoiO't'*&5:mi ϯ`4I G}h竢.<5)NIJR8pzۏm xoS(HKN:M|PE]; sd3ټc#/*Q/1klZ7F=y]O񈆄4Ys%\ѡy29 b5r ԇ)nb^aOpysZ&}d؁b`M4D@-$%{R=e S`uL7Z3` Nਭ9$쫄D*J2=ffсy" o1"GL/upd; LvyF\GQL˶l@>޾M`vi7gp wz6bnD\嵒uԗз- \VhPlt<<4H_rǥ@:y$4⍍)rcy,u-/sG½=xa~XÊJ$OGX_@ 'EMmHYםs&w'oXGO~^#$pbRhsքAG}Y.<<^9,u'i+՞V+N唱NghWHuYVVHg@Os$p);^A/RBd]>×g^qmxkr"SEGrkXհ2{Hi r z0Hu&yLh1ηoKcYEu^VD6t,m"F̽h[r4|pUoH#q9|k$ /RK >{yߑVIYBvw蟢MȈ1m"-R.^ۇIaӮ PxiREKD#$&B+0fHtFS>u[4J x}$KtN\6W,b)fpa;Xk @rޗ=ZM~5&_t=T8IsӴ:f½|CbԗR3Tf =Y)'z"ң&d=",.+{gg&/ ,ф@<`yh*35 b}KܫjQ,0s604l8RJ\iA;\I95|%NRX|&Ģ`x6Ϗ.qW A) V^րhPk&<Iͧy,_9ů\_vnYO7i'ۃ)2ՄiCrxD^8w"v n$v„dTVq OY+3B/w&)ی\BorTkL[qu8Ӏ!;^` Ye[VQf.-j vpŗu)g}B3Ҭ(RI9ؚ# iY[H<"`a"^'K,rvHKA1WbWnqWN1:˗t:%9N$ {TC"d1?>H^lX$2ea:Hh7N@尬3ibh_=&&TQt0w ;QcP F,Ŏ \>$cDRO=ɶ:4 .w/דմm>3.Q2ZxUZw{V\ucً 8bGTEzN)[QKT|DygNOϳYY"y>)u/u _ÀFN颭T(]Vu*I٨Ƿ{^.;VG!Vپ݋ H[ * #sqE%)L[XC(iD'E @wӜ#C2(DwWm5Hn P (^O{+JIUhPE i._~Vlj;ÍmvP>`VSd&D|{H⽤Ude%JwUv6_#zlK&că][ZsYCt~prA _YQ7aӴ ˤ'0]2^AQ3Dܫ@U&O7| yFQK$FU':IZl6rb"GٶhUf$%6a" B&tu%L.PC}KifYTE] @wxG,)͂s#n'HH1UpY|x8@  ]j>4ߎBCCң셙I0<<9܁)5]=/IT\Lr])Mi'& ѵ#?ǂκ"0i57%jOw$q(M6zLz 5+&&{tqVS}`f"eUDk`h_0O xbӝ+1 ~U'dAVƑq}鬭C$j@"n{'ԑ[D9OˤЇ?񯣄<}?AVst݂5Yi{me0:5Wy'+v_/.N}(ػ9g瘩EИv|I*cJ~|Vˑ6* "1y}x \5x,d}%ӈѠ^@qzQ 0k@ҠNN>Mv.jR>]ecB6'Љ@n)2WSl/JMpuW#CnVCQR&伐u(Q=N5+eշ$t߱OwXww_d+[aSa;ULY\@o.8@%wACJ/EEbuX^;geo@L)h7WIVDB'?B!9Q >;w{5q-wKؗke݁K[:JL +ok$L"0v\ 'M{ b)'!vۇefF5i(|`n`Ǟ5z[.M:]bfj:2XT3Y;Ii_T&wG"$Fh2h;-H_QD< -H;[doa<4h2{G4aΔ|\2aס59J_˩2T]~8X&E*C=,PuA!wؐ eAqٳ3X7 GfƯ:M,uh1kej"rNQJG?SG][.w12ʍJA,nE51cC]niWcs7?\ ( m܈wў:4B,egy- 6e:֮}D gl1?qbEPF-}|ĹR IlDim?myu`F@T?N ӕPȲmڅ٦9@Y5]wnE WJF]zUDu+#Ǡ;]YC"x}KtiBE6"rs[pDV.mЀ{5EmM8 @c\=wkɋ{C [ڣkX] ۍ5"Wgz8jǷ2S.*}=>2  btJa"<6 ˄Q!i& m<'d(b GB,;ESdh(d8AH<\IG"՘`TJVtYM]=sH | 3/A X&[E%۵fYaH DXS!`jNFS>`?`:` EkFh(l;.X'.x6+2X!@6K밿'kVRWeEpWgj{cw`+=X|GtXB?B OxxVmW^}9;= V1E[oca[fjdNj}`~ nT2 :ʝ6;ssp\4a$V dTG۫u&i})hZ#&&1jm2}#oT>j&,u˥6D0&x0n4[hN?I%lkboFs@Q0P'=ti>4"Z9[pmҒā>,B6 19 GʅXSY 7' :3"k'Uw6?.nULZSڎ]ٔdCa2+,X K*{7նްwa=OhXklVH6L3A FV2{{Z7LU dCsA&MOIQVߙ_3ǿO3_!0Z,ECWPl%K^V #^%I@/ )wV'<8ySM/7B{2qtH>"WT> QSYޕb[a9F+ub^ s/_;)m`JYfw_LQGg]\w+B(,P毪r(Jb,u/dOfӜ1\31` )?1@v<]ttdY )!McB)ev_6~#)ߐJǣ$ ?#4aKZ{+fTi{ nON -YyD:v%_s΅K̤hl L IT&(e$x"7Qye<^6 Y 8ԝ$IR@ܶ? X@#LCph+mzrv]Vmr*#*YcW,cd عG||G3_{mK܅ܓ*A~]FҴ* {<-h?ζ$ =)JwqTQ$&5[5nн.=fs該>lRE/Pn n^靲.bD Ksk(f'$2r N6~D#_m%88MJ`5Xuj&8//X3[ 6\Vz8Ў"#dZQ*r$ !عX YZ