tpm2.0-abrmd-2.4.0-150400.3.3.1<>,gp9|nLe:䑅&WdY;Ɉqn00UYˮilcBo ̥I72npּԷbTӇ" 2Ca`QGc n6Oxral4 c>$T۾Ug$Yv\ Cbf9.XP{#6^! A 5F!>2R+TEͳ]{KDhmve \(+Rr\)ur)/a>FG?Gd " p(,8<Uv    $ @ \  b x<d "(R8\9:=@>@?@@@F@GAHA<IAtXAYA\A]A^B bCcDkdDeDfDlDuEvEHwFxFyG zG@GPGTGZGCtpm2.0-abrmd2.4.0150400.3.3.1Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chipsThe tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager. This is a daemon service that coordinates requests to the TPM2 chip via Intel's TPM 2.0 software stack.gs390zl372SUSE Linux Enterprise 15SUSE LLC BSD-2-Clausehttps://www.suse.com/Productivity/Securityhttps://github.com/tpm2-software/tpm2-abrmdlinuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi [ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in tpm2-abrmd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable tpm2-abrmd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop tpm2-abrmd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in tpm2-abrmd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart tpm2-abrmd.service ) || : fi fiX8]"*U D) 큤A큤A큤gggggg`!Z7``gYD2gg037447a35f22215da2eb6f9be62659a4377548582f59d9c8333c181e06759d3064bcd9dbe446ab1f34d3215744a31d5048cbac312522cb793706d0ee165967ccefd64e20ed459cb48c4203b6854898047050c3f4bc85c29a7594548867d0009e61b976a22c3ac07a07d735380bb75e7b857c20d8bec84c4805577c6780d1aa22127f2132610b51bf200561a380f85e45cd4b63e80f99beb2edc6b2f62830dec057e9f24b53c3405d2eb6ffb445b5fd78a2ec8e047203199acd61e72e0f032fd75a6f94246556e1583412ffc8200d6979efc1aba6e77479da6d59107586b1357f07144657dd41354b9ceca1838b1b9392e831d781b42e144542f6818e5833611718c1bf4b1ba1fb2c4ffa7398c234d83c0d55475298e470ae1e5e3a8a8bd2e448741e36049f00499d8f8121cb76b99361cb58aafcb8f63f81ea00e44fb774ae8e54c83c72b541db71de0006fb48dcf643bf2cf5c98f446649bee50931cdc94258servicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroottpm2.0-abrmd-2.4.0-150400.3.3.1.src.rpmtpm2.0-abrmdtpm2.0-abrmd(s390-64) @@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgio-2.0.so.0()(64bit)libglib-2.0.so.0()(64bit)libgobject-2.0.so.0()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libtss2-mu.so.0()(64bit)libtss2-rc.so.0()(64bit)libtss2-sys.so.1()(64bit)libtss2-tcti-device0libtss2-tcti-tabrmd0libtss2-tctildr.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)tpm2-0-tssuser(tss)3.0.4-14.6.0-14.0-15.2-14.14.3gd a@aaz`@``@_t@]@]c\\@[Ѱ@[ @[t[[m~@[;e@[:[6@ZZ ,@YKYYp@thomas.blume@suse.comaplanas@suse.comaplanas@suse.comjsegitz@suse.comgmbr3@opensuse.orggmbr3@opensuse.orgaplanas@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commvetter@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.commatthias.gerstner@suse.com- make sure that udev workers have finished before daemon-reload (bsc#1231071)- Version 2.4.0 + remover syslog deprecation warning (bsc#1185154) + cover update to 2.3.3 (jsc#SLE-17366) + contains reload fix (bsc#1166936~ + fix tcti loading using short / long names (bsc#1159176)- Warp selinux into a bcond- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_tpm2-abrmd.service.patch- Move selinux devel file to devel subpackage- Update to version 2.4.0: - Service start depends on systemd device unit: dev-tpm0.device. - Numerous memory leaks. - udev settle service deprecation warnings. - StandardOutput=syslog deprecation warnings. - Add selinux module files - Move dbus files out of /etc- Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077). In MicroOS systems the recommendations are not installed, making the service fail to initialize: Failed to instantiate TCTI- update to version 2.3.3: - changes in version 2.3.1: - Fixed handle resource leak exhausting TPM resources. - changes in version 2.3.2: - Added cirrus CI specific config files to enable FreeBSD builds. - Changed test scripts to be more portable. - Changed include header paths specific to FreeBSD. - changes in version 2.3.1: - Provide meaningful exit codes on initialization failures. - Prevent systemd from starting the daemon before udev changes ownership of the TPM device node. - Prevent systemd from starting the daemon if there is no TPM device node. - Prevent systemd from restarting the daemon if it fails. - Add SELinux policy to allow daemon to resolve names. - Add SELinux policy boolean (disabled by default) to allow daemon to connect to all unreserved ports.- update to version 2.3.0: - changes in version 2.3.0: - Add '--enable-debug' flag to configure script to simplify debug builds. This relies on the AX_CHECK_ENABLE_DEBUG autoconf archive macro. - Replaced custom dynamic TCTI loading code with libtss2-tctildr from upstream tpm2-tss repo. (requires tpm2-0-tss version 2.3.0) - Explicitly set '-O2' optimization when using FORTIFY_SOURCE as required. - changes in version 2.2.0: - New configuration option `--disable-defaultflags/ added. This is for use for packaging for targets that do not support the default compilation / linking flags. - Use private dependencies properly in pkg-config metadata for TCTI. - Refactor daemon main module to enable better handling of error conditions and enable more thorough unit testing. - Updated dependencies to ensure compatibility with pkg-config fixes in tpm2-tss. - Fixed bug causing TCTI to block when used by libtss2-sys built with partial reads enabled. - Removed unnecessary libs / flags for pthreads in the TCTI pkg-config. - Output from configure script now accurately describes the state of the flags that govern the integration tests. - drop fix_dlopen.patch: no longer necessary since abrmd not uses the tctildr shared library. This one hopefully now does the right thing.- update to version 2.1.1: - changes in version 2.1.1: - Unit tests accessing dbus have been fixed to use mock functions. Unit tests no longer depend on dbus. - Race condition between client connections and dbus proxy object creation by registering bus name after instantiation of the proxy object.- bsc#1130588: Require shadow instead of old pwdutils- update to version 2.1.0: - changes in version 2.1.0: - `-Wstrict-overflow=5` now used in default CFLAGS. - Handling of `TPM2_RC_CONTEXT_GAP` on behalf of users. - Convert `TPM2_PT_CONTEXT_GAP_MAX` response from lower layer to `UINT32_MAX` - travis-ci now uses 'xenial' builder - Significant refactoring of TCTI handling code. - `--install` added to ACLOCAL_AMFLAGS to install aclocal required macros instead of using the default symlinks - Launch `dbus-run-session` in the automake test environment to automagically set up a dbus session bus instance when one isn't present. - Bug caused by unloading of `libtss2-tcti-tabrmd.so` on dlclose. GLib does not support reloading a second time. - Bug causing `-fstack-protector-all` to be used on systems with core libraries (i.e. libc) that do not support it. This caused failures at link-time. - Unnecessary symbols from libtest utility library no longer included in TCTI library. - changes in version 2.0.3: - Update build to account for upstream change to glib '.pc' files described in: https://gitlab.gnome.org/GNOME/glib/issues/1521 - added _service file for syncing with upstream tags- add a Requires towards tpm2-0-tss, because that main package holds the udev rules and logic for setting up the tss user. Without this the daemon can't start up correctly.- fix broken build due to newer glib dependency that reports a full path for gdbus-codegen, breaking the configure check.- update to version 2.0.2 (FATE#326270): - --enable-integration option to configure script now works as documented. - Format specifier with wrong size in util module. - Initialize TCTI context to 0 before setting values. This will cause all members that aren't explicitly initialized by be 0.- add recommends to the tcti-device and tcti-abrmd. Otherwise they're not installed right away, rendering the abrmd quite unusable.- Update to version 2.0.1: * SessionList: Fix Connection object reference leak. * source/sink: Organize ControlMessage processing. * CommandSource: Replace 'connection-removed' signal with ControlMessage. * SessionList: Remove all locking. * ConnectionManager: Remove 'connection-removed' signal. * ci: Build 'check' target when CC is gcc. * build: Fix bad URLs in configure script. * CHANGELOG.md: Add version number and date for 2.0.1 release. * Replace references to drand48_r family of functions for portability * Fix for type-punned pointer reported in newer compilers that enforce strict aliasing- Trying to fix build on older distros that fail because of a missing or broken autoconf valgrind detection macro. Removing autoreconf to hopefully fix this.- add fix_dlopen.patch: fixes an issue with dlopen()'ing the tcti-device library from tpm2-0-tss. See https://github.com/tpm2-software/tpm2-abrmd/issues/486.- update to major version 2.0.0: - support_dbus_activation.diff: removed, is not contained upstream - the tpm2 stack introduces an incompatible ABI to the previous version with this update. There is no compatibility layer, libraries have new names etc. - upstream changelog: [#]# 2.0.0 - 2018-06-22 [#]## Added - Integration test script and build support to execute integration tests against a physical TPM2 device on the build platform. - Implementation of dynamic TCTI initialization mechanism. - configure option `--enable-integration` to enable integration tests. The simulator executable must be on PATH. - Support for version 2.0 of tpm2-tss libraries. [#]## Changed - 'max-transient-objects' command line option renamted to 'max-transients'. - Added -Wextra for more strict checks at compile time. - Install location of headers to $(includedir)/tss2. [#]## Fixed - Added missing checks for NULL parameters identified by the check-build. - Bug in session continuation logic. - Off by one error in HandleMap. - Memory leak and uninitialized variable issues in unit tests. [#]## Removed - Command line option --fail-on-loaded-trans. - udev rules for TPM device node. This now lives in the tpm2-tss repo. - Remove legacy TCTI initialization functions. - configure option `--with-simulatorbin`. [#]# 1.3.1 - 2018-03-18 [#]## Fixed - Distribute systemd preset template instead of the generated file. [#]# 1.3.0 - 2018-03-02 [#]## Added - New configure option (--test-hwtpm) to run integration tests against a physical TPM2 device on the build platform. - Install systemd service file to allow on-demand systemd unit activation. [#]## Changed - Converted some inappropriate uses of g_error to critical / warning instead. - Removed use of gen_require from SELinux policy, use dbus_stub instead. - udev rules now give tss group read / write access to the TPM device node. - udev rules now give tss user and group read / write access to kernel RM node. [#]## Fixed - Memory leak on an error path in the AccessBroker.- update to upstream version 1.2.0: - Limit maximum number of active sessions per connection with '--max-sessions'. - Flush all transient objects and sessions on daemon start with '--flush-all'. - Allow passing of sessions across connections with ContextSave / Load. - Unref the GUnixFDList returned by GIO / dbus in the TCTI init function. This fixes a memory leak in the TCTI library. - correctly trigger udev to update /dev/tpm* permissions after package installation. (bnc#1078687) - prepared support_dbus_activation.diff patch which adds D-Bus activation, but can't use it yet due to rpmlint- fix_service_paths.diff: fixed broken systemd service unit (bnc#1066123). the service unit file in the upstream distribution tarball is already configured and looks for binaries and configuration files in the /usr/local prefix which is wrong.- package version symlink correctly, belongs into the lib package itself, not the -devel.- update to upstream version 1.1.1 which fixes some local denial-of-service security issues among other things: - Replace use of sigaction with g_unix_signal_* stuff from glib. - Rewrite of INSTALL.md including info on custom configure script options. - Default value for --with-simulatorbin configure option has been removed. New default behavior is to disable integration tests. - CommandSource will no longer reject commands without parameters. - Unit tests updated to use cmocka v1.0.0 API. - Integration tests now run daemon under valgrind memcheck and fail when errors are found. - CommandSource now tracks max FD in set of client FDs to prevent unnecessary iterations over FD_SETSIZE fds. - no longer call bootstrap and switch to the release upstream tarball which has now been fixed to contain all necessary files- first version of the new arbmd resource manager from Intel's tpm2 stack. This will replace the old resourcemgr previously shipped with the tpm2-0-tss package./bin/sh/bin/sh/bin/sh/bin/shs390zl37 1736769003 2.4.0-150400.3.3.12.4.0-150400.3.3.1 tpm2-abrmd.servicerctpm2-abrmdtpm2-abrmdcom.intel.tss2.Tabrmd.servicetpm2-abrmd.conftpm2.0-abrmdCHANGELOG.mdCONTRIBUTING.mdINSTALL.mdREADME.mdtpm2.0-abrmdLICENSEtss2-tcti-tabrmd.7.gztpm2-abrmd.8.gz/usr/lib/systemd/system//usr/sbin//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/doc/packages//usr/share/doc/packages/tpm2.0-abrmd//usr/share/licenses//usr/share/licenses/tpm2.0-abrmd//usr/share/man/man7//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:37038/SUSE_SLE-15-SP4_Update/2f2edf91f289d7c3e766ee94f4531fbe-tpm2.0-abrmd.SUSE_SLE-15-SP4_Updatedrpmxz5s390x-suse-linuxASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=b84a9f28002c50a1c3aaad7170722a9d323ae77b, strippedexported SGML document, ASCII textdirectorytroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R RRRR RRR RR R RijD/*utf-83ff80911aed3c724a4d6476ca063661d225fb46c419c526907a44a829c2fc4af?7zXZ !t/cD]"k%j|r>6"0{XP-zAfr=#e+$:UؘGO2f@7*K=D6!ЯvJ9p1ߺz VIU@.ʽ_&8Bf! 'Kjjd f?zrHV&Iju<)%R)DD +LJplI7 =SOlvDP.4ϤSdr1pZ$NJZ$M'ry=L u]ÚYL4d4WcocbYv_y/{P 7c7Zy4E!S8SVZY\m%AtdH}.$LCe]vIz FϹ&b\BrI33᪔86vx=0vcԳ؜2;A'.=KdY ̽L7^{C}y:ų>W۪=AQ{e9?P.d*5+E#MbS!,ߟ]Sܐ$w+1sx3 <\=a8+Ӭ*Z-{:zĽ+2A{Á85nCqU!xCȶ6U0pajoՍ#(gOɡ:^V ,5<e2*ߋS` hp o;}E`*uÝ3 /C0: s/ ;fnANdtJ'lw\cea:0$bs0۲"/8n[D'(%nmlY5U<ə-X#g{+beͺ+{hޗ/X_֩,a4M_Gմ$BNڢ'_Vus-&0H2>`V,QBq/߉+)Sc);Ai>1sX+.E,>-Л hr jp(s& AԜA4yxpJشO8ᾗ^Uj9`Ny=:  yJ!%Zp8Lw*'4ޯ$ŋcKRwg`pÕow%  ! S[A~'TtXUX|7VZpnbsy=B]5tONVo jΨa.sxB0]b\m{/IdzѧV( >$N~ɕ€d&z \xTj'`Q.F#>_jbtTlO7/ nN< :?  Nar̦l4M8"e!A`֭dv*[j#(H:/|>x}:ÂeB+`A4RN\.UD(g_uCN`%!#:\ 8m:Y%j3xBDg"QݎQ  VI-r(`=pvd36?"V#XZd #)1j7Ltei<lv2o$,oˇد ;`&EU5kBY@y7] SgCp ͑{$7Qm`srh;q(coAnF*);[Јw\>}?;.9]^cZ@91Ɵً( B h"FBHfB zU7c+_ĊWC :ou37#Ig|67>39B0Y?~Rm\@/T߸PDl8J}DRf3%xJYR %,mH-ʍ6TwܷI(4YFDA.!ݵ봤j 7"KU } Y'N*4L,}nRkVB99|UīnS$4N:TL Ik=&H-RJwԾxDl'f339ehW@٪:DAkc$?5_(#Z6]Р=VH[3&F]A@M[8;D9E;ZdV$lҰAL j2Q(cetb4 yXJ0 mtx.]S$3c8st_PA&]6]e9;qxw Gߜgb衱lXm5NWI'~Q>PQK,pr&gLu \bR|粐GY3VWEtzlp8]:ȧ+.jOIFV *yS[ZE6w3~hMQ[`g92MySsېt7K PN&3q,"0YRKK"Yn\Ԕ k_JvF1(ҡtNuZ\_Vb%pN@,$}((@IN0(KV@Ѐ*^E+fb EJm L`0fmbBSASDH"<˳&@^&F3PV_#6@VAz+SҺUrNI>HVk$OqmE"(OyF)]X V /78z xס͹oF䮱|Jd>ƕHմ\BExWJ%!򞠂`eYX\܏[y|Lvq:X*f(Ok ֪N“V 1\ܼdb e.P̿ZrIDzKe!P:hLZTdۈJtH[]ldA<$.*&X֪gFCIw-U~"'2l4&,6+:MGwhBȬw]bh,mIRn.t[@8Ǔ)GJY cWaR#"(}PN:O8VrKOroAi͘g DӚQCDC3^|?߭Vٟؗ2GR~ĒDx3(!O3J+ܮjuq@3ܝ{[ b #8)D[`ܭY4K <ݘ̌Jc!slW7eR*Y  cww\HH$21:FΖo+nϖHĒ 0\foWFhdsCfr 9ql=Vz5~#ȯn Mk/a>(Z$ˈTJu3}o}Ņ0V=ܒ]6 ?+4- n>p !943ЍV(ylD) _Bx9-kIxI;#Ufgw7\w~g# %ӂ |ԛa/!_2E^̋Oc 6x!eyySOƔ> ͡ Sbȧ\Z#FVB2h7K6;mR=.PΧ(?yX汸ߔWӛG=f&uT[`J+tW>29GΞm #!21@yja-N!w?sr|&F;7C=xh(B~Yܵ) Y\|gM tnۺ3?#DJkz(e<x5tC5O[ kCwuԅHť/!7][{z"&}+:v5ř"$xmv&Ajv1#]>h *`Y|^A0xP0\]""BlbSP4ۋ6Dmmsr=CbsuB֛.[+ [=seL\l ]Ӛ).tQ&iCe,9N&s2jfωH:Y_T强Tp1TI^]WU$=#5%p@ rjiIJݐt$)z2R]V vwIwZ'7+R#('0z,nwjQN*UCfEbDJu3Rh}#5dqLL{~"DE$#sڗz8'<16PZ90ΈG@$= *wH@;l~s1˝!+|.-+:ƺhm*>tw{;`̕=_pEJBCru7UؑlY[)u|gۢn|t4I$L1W[ C*,O3"qRxﰷ(Be7qlA91~bاJm=VЕSP3kdZ4)-r}l.uA$y@XY[ Y=mc>uD ' 熃g4"z)>@=`+̠Ւ_/HG'ihO2A &APW@?}y7{B*Z*CR>LRsԢO?)lDmZTipr;̉UF'vhFD5N/n4A)x)=EL h`=P7d[_ѕX <ŒԻD>"=>q̚Pu=)57GQ9?+vv*fE!^'%i~XD_Y3Z 't~I#Yu4qv1vʑ+lۑX谹(RYz0 \+IшˋibW!mS ?>)Hjŏ()nIZo%::Wr@#1B%vSZ*}u]6i?8^Bhń+3p-c$V#~Щ)J#|Cόl=;Ct0lpC aD?{M9i}wX➠.ۏ_-l!u|㽰#̚ʢ5^vҺ9d z -bm1k>w$')y )e94ϸ 9}.7=CZ %84L|A/~ڙ:6] >;ޗ#})æ gv&|-:ʄ_6y7i*TAKgO,\֩+w zB!q;@Vaw4YO!%IJꗒHG-כ!j\5m3?L*m I&Iz6ҷ8Fi) UsD5*ܻ%+<ːX+bo0~CHN|8yY 5:=Ni]ob7\Hg55CEEy5[YT 4ꝧJΚڢr$ ĸƥ}„lO(K `$W_EBDŽF i)OI/6\(W㳺S,]gwfmt<};5]$!Ez(E7SIu(׹ 'XL HSg 8j;fCJlV\+abIN=uFthٷKd4)Ywh4k0d.4 ~tmh(7ȩiW/* S곎q&!o}mַv!̈I!LmX,(A3͘_`{RQ}G2D[a>텊< `llԀ-kHEҨY*ׅ"Kk%CAQt=ȏ TWC=J+0>\:]VCFW0lDmtsƉN5K z);\E?͍NK`aYx03Eo ?L3M))$7#h0[WUÞ^_XH*K=+^X{ۺr@Éc((&l%5UnMQB~yVfRpqƐ!^ux=2H157ff#`dsY~E<$,Y6E*4zhx277a(GYGe$`!k%P+ .jYSR>.] d2= BlVUd| 4 Ac.n9zT Y<B~?Z{!gxmoI+xUo5I$'KÄOT7ͭY{UZ>cP:,ZnbcѺj `8Gv1nBi7zj7 KnưmVp(YdXvjqmMXBk=om;be)|do>B|DVk,HH$8/Seٔi<D[*X}UaM"|\E;_چm(;P=a3pHE:|~-X[)97/$XvtQQ8@CS߿܎@leȠ>XE8'9Ї,0uMsӪ&Zq;jr֬,A)2iaHR{Oq) O,o)PW]MɻvCz: O~@^!2W4 }1T3Jp  "܄0دԀͺLLHwilxNͦ4aWn8`Yv<q,zh+159m~=FMCh!\9b@WK] _2LjPN.-("İ$BIbt8-* \jؾ $,~ClC8y,^uƀeˍE.Q8e|׉ձGDWDXf:|;RQ LؘJ@q597qީ.{NlOW4п |"c#[r&q})*d6aflU> ݼ?ok1:6\`Uӭ _^=(U#89zJ_fO[Qx1rt{Sӯ,)fD>xWv®"\S:[7mWj,r91j@_Bo,55 l0Kt{+f#`X #&Upy˖٨<6OF]cahr~KDwDȥ[0Q ޝɎ~ 8FG>DIGG Mq?r,exMv0/ t7 FN?;:wnE]L.1暩I/ зeMC``%uUp@+AN~%)%n3aV|O(Se.9.rFPڛ>ѠE%vͺ7[wIyWE9AP0I]tȬZ3DtFoIkiáC!JI_GԑK/3KNʭZ,&4pf #EjSX" >=o^ȟjlWhQi#/\{=$*vf?e=k z"C=m,̲>6S|uu-2W ەB?g1W Dz͖냮Ki1; !vÃs9$2)Z9DzР\U պJAv[wցt":BRfWEx !Pb}v=.w?x۪LETDI[:3xPw9#{Eu ]maҎEHnOZ2qAϑV-R"hY` [fK٥HZ2 1jS0hU^sG#J3LLyhA11{b dtꅪ-i" %Hՙ!~nr2m:E%/9M`.e1;s٤e?דqDJ|KA;}gH4 [Bx<::xoٗRqX<&kmlG\#(n6%`h"dXZkކ#wq3nd@B-5D>y;Jf2^u@SSp H[vMk{p0Ի:, e8t9`-azh  ʔQ>\HQdRu„C@W5(\[Hld]^YH ?lo(S ȅ|a5[V)һVGG.D,í  t1@A0N萉wSWʉ?sSL>D#DPgV$7rdbS=X%煟{O=1,xU+\3vɯC䔈闅"(Ac&7_]4|VތzuW8LG4apRJ +p7X ůu(;;.uxòTЎQˏ+綌 #ɟ?fuձߟZKޔ+Mװhձ9jVǷhDs%#ci4_>p]9@ʁ>{Oovp}W,gxȏj$>3Hi@pvb7xcGW;}:ʅ|kW |oEx`RB~cZ^&2uk2^c (|[@`r8D;n"νYO퓝ʏdjlbh|GJb{6 -B6}0&>Kd8}]044O#6(j+RE2X.gK{{ Pql Z 93E|-f27yo0uW75}%ź4 [ {^-Hx?ful)UڛFMcu4~  4\[=F7>3.CyfšCŜШXq^-s&zSY.zcEPښE#";wqQx$0hAEZ W흠t-nlFXRZ3F I{5zf$^j551}12$Jp"/KDrȗ`5ښ4oPMdXuߏ\|R>[ō6Xpdwٜg(ykWodJ;^ILyk73pb'B$":☹,;;tq^1A JH?(i9+ #gv4I%oʈn^Jjs;BH B 0ғ{\aޘ@W]5&F ( N`j&_u+y?ᙰث{R:1E{@zLp`vMeeJh$ؕ.EOW?ՁדelvAʭuDYꍛIb2Ώ# ô;dP5? gA1Y;Q«GHQO%Ijxu _~o[\ΚDG-)2ނ拉g療Ki% |8T EZ6H}Z(k%DHO{z5p.ӶEe:lZd:ix@e 9v b=q ') =Jt59SyQ+1cfM-|@\!gMOҷ*mt'OD{I:ZWҺp]2~FRi64\q,Qw?im2wG $]J)tÏZ ʫvIhhѡ7V֒߿-wJ:+&⻬$0H^::?ՆB<13/!r<٥G0B GjSx>e89I{W ӟF9@cʈP- YZ