openCryptoki-3.23.0-150600.3.8.1<>,4gMJp9|.K'~ ٪׹~OO t _;^/ѭ~.%, b[ro=sjS}GM=ݐ N* E}-kI,?d # plp| !(  (66 l6 6 6 &6 d6<6 J6!h!6"l"##L#&M#(&8&;9';:+;=0>8?@@HFPGd6H<6I6XLY`\6]x6^bUcdeflu6v| w6x6yAzCopenCryptoki3.23.0150600.3.8.1An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareThe PKCS#11 version 2.11 API implemented for the IBM cryptographic cards. This package includes support for the IBM 4758 cryptographic coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer Cryptographic Accelerator (FC 4960 on pSeries).gMJh04-ch1b \SUSE Linux Enterprise 15SUSE LLC CPL-1.0https://www.suse.com/Productivity/Securityhttps://github.com/opencryptoki/opencryptokilinuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in pkcsslotd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi # autobuild:/work/cd/lib/misc/group # openCryptoki pkcs11:x:64: # openCryptoki pkcsslotd:x:64: getent group pkcs11 2>/dev/null || /usr/sbin/groupadd -g 64 -r pkcs11 2>/dev/null || true getent passwd pkcsslotd 2>/dev/null || /usr/sbin/useradd -g pkcs11 -r pkcsslotd -s /sbin/nologin -d /run/opencryptoki 2>/dev/null || true /usr/sbin/usermod -a -G pkcs11 root# Symlink from /var/lib/opencryptoki to /etc/pkcs11 if [ ! -L /etc/pkcs11 ] ; then if [ -e /etc/pkcs11/pk_config_data ] ; then mv /etc/pkcs11/* /var/lib/opencryptoki cd /etc && rm -rf pkcs11 && \ ln -sf /var/lib/opencryptoki pkcs11 fi fi /sbin/ldconfig [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/opencryptoki.conf || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in pkcsslotd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable pkcsslotd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop pkcsslotd.service ) || : fiif [ -L /etc/pkcs11 ] ; then rm /etc/pkcs11 fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in pkcsslotd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart pkcsslotd.service ) || : fi fib n9`8s]b<$<2+#]b!);e x]bA큤AAA큤A큤A큤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-3.23.0-150600.3.8.1.src.rpmconfig(openCryptoki)group(pkcs11)openCryptokiopenCryptoki(x86-64)user(pkcs11) @@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/usr/sbin/groupadd/usr/sbin/useradd/usr/sbin/usermodconfig(openCryptoki)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.23.0-150600.3.8.13.0.4-14.6.0-14.0-15.2-14.14.3g+Z@ff@epeem@e 0@dp@cc=@ccc6@bb@b; aqV@a ``Ȗ@`+`` l_"^!@]]ʞ]@]nU\f\&@[[@[_ZZw@ZY.@YX@X@X@X~@X2@W@WE@W@WW^@WEW@V<@VqU@U@U#U#U#Tp@tabraham@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commeissner@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comkukuk@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjengelh@inai.dempost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgp.drouand@gmail.com- improve handling of user/group. use existing user/group if they exist. create user/group if not (bsc#1225876)- Amended the .spec file accorinding to the recommendation in (bsc#1225876)- Updated the .spec file (bsc#1225876, bsc#1227280) * Amended for group %{pkcs_group} and user pkcsslotd * Copying example script files from /usr/share/doc/opencryptoki to /usr/share/opencryptoki (policy-example.conf and strength-example.conf) in case that there is 'rpm.install.excludedocs=yes' set in the zypper.conf(zypp.conf)- Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361) * EP11: Add support for FIPS-session mode * Updates to harden against RSA timing attacks (bsc#1219217,CVE-2024-0914) * Bug fixes - Renamed ocki-3.22-remove-make-install-chgrp.patch to ocki-3.23-remove-make-install-chgrp.patch- provide user(pkcs11) and group(pkcs11)- Amended the .spec file for pkcsslotd (jsc#1217703) * Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to ocki-3.22-remove-make-install-chgrp.patch- Upgrade to version 3.22 (jsc#PED-3361) * openCryptoki 3.22 - CCA: Add support for the AES-XTS key type using CPACF protected keys - p11sak: Add support for managing certificate objects - p11sak: Add support for public sessions (no-login option) - p11sak: Add support for logging in as SO (security Officer) - p11sak: Add support for importing/exporting Edwards and Montgomery keys - p11sak: Add support for importing of RSA-PSS keys and certificates - CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different * Bug fixes- Update to version 3.21 (jsc#PED-3360, jsc#PED-3361) * openCryptoki 3.21 - EP11 and CCA: Support concurrent HSM master key changes - CCA: protected-key option - pkcsslotd: no longer run as root user and further hardening - p11sak: Add support for additional key types (DH, DSA, generic secret) - p11sak: Allow wildcards in label filter - p11sak: Allow to specify hex value for CKA_ID attribute - p11sak: Support sorting when listing keys - p11sak: New commands: set-key-attr, copy-key to modify and copy keys - p11sak: New commands: import-key, export-key to import and export keys - Remove support for --disable-locks (transactional memory) - Updates to harden against RSA timing attacks - Bug fixes - Amended a new patch to fit the version 3.21 * ocki-3.21-remove-make-install-chgrp.patch - Removed the old patch for the version 3.20 * ocki-3.20-remove-make-install-chgrp.patch- Updated package to openCryptoki 3.20 (bsc#1207760, jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 ) - Removed the following obsolite patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch - Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of the package and renamed it to ocki-3.20-remove-make-install-chgrp.patch.- Added patch for compile errors * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch -- Changed spec file to use %autosetup instead of %setup.- Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the following patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch- Updated spec file to set permissions on /etc/opencryptoki/strength.conf to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)- Upgrade to version 3.19.0 (jsc#PED-616) + openCryptoki 3.19 - CCA: check for expected master key verification patterns at token init - CCA: check master key verification pattern of created keys to be as expected - EP11: check for expected wrapping key verification pattern at token init - EP11: check wrapping key verification pattern of created keys to be as expected - p11sak/pkcsconf: display PKCS#11 URIs - p11sak: add support for IBM specific Dilithium keys - p11sak: allow to list keys filtered by label - common: add support for dual-function cryptographic functions - Add support for C_SessionCancel function (PKCS#11 v3.0) - EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER) - EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE) - Bug fixes + openCryptoki 3.18 - Default to FIPS compliant token data format (tokversion = 3.12) - Add support for restricting usage of mechanisms and keys via a global policy - Add support for statistics counting of mechanism usage - ICA/EP11: Support libica version 4 - p11sak tool: Allow to set different attributes for public and private keys - Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated version named ocki-3.19-remove-make-install-chgrp.patch to fit the current state of the source. - Removed the following obsolete patches: openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch- Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch for bsc#1202106. One test of the gen_purpose test cases fails with C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token.- Made the following changes for bsc#1199862 "Please install p11sak_defined_attrs.conf." * Replaced ocki-3.11-remove-make-install-chgrp.patch with ocki-3.17-remove-make-install-chgrp.patch to remove the "-g pkcs11" parameter from the install command in the Makefile * Updated the spec file to include /etc/opencryptoki/p11sak_defined_attrs.conf as a %config file with the necessary permissions and group ownership.- Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM mechanism does not show up as supported by the EP11 token when an upgraded EP11 host library is used. * openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch * openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch- Upgraded to version 3.17.0 (jsc#SLE-18326) + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added support for event notifications - ICA: added SW fallbacks * openCryptoki 3.16 - EP11: protected-key option - EP11: support attribute-bound keys - CCA: import and export of secure key objects - Bug fixes - Removed the following obsolete patches: ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch ocki-3.15.1-Fix-compiling-with-c.patch ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch- Added the following patches for bsc#1188879: * ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch When modifying opencryptoki.conf during token migration, put quotes around strings that contain spaces, e.g. for the slot description and manufacturer. * ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch When migrating a slot the opencryptoki.conf file is modified. If it contains slots that already contain the 'tokversion = x.y' keyword, this is accidentally removed when migrating another slot. * ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch Change the code to use the pid file that pkcsslotd creates, and check if the process with the pid contained in the pid file still exists and runs pkcsslotd. * ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch Always quote the value of 'description' and 'manufacturer'. Quote the value of 'stdll', 'confname', and 'tokname' if it contains spaces, and never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'.- Added the following patches for bsc#1182726 " p11sak list-key segfault" * ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch Added NULL pointer to avoid double free() for the list-key and remove-key commands. * ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch Note that two hunks that were unrelated to fixing the running code were removed from this patch. * ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch- Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch When constructing an OpenSSL EC public or private key from PKCS#11 attributes or ECDH public data, check that the key is valid, i.e. that the point is on the curve. (bsc#1185976)- Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch (bsc#1182120) Fix pkcscca migration fails with usr/sb2 is not a valid slot ID - Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch (bsc#1182190) Fix a segmentation fault of the sess_opstate test on the Soft Token- Added the following patches for bsc#1179319 * Fix compiling with C++: ocki-3.15.1-Fix-compiling-with-c.patch * Added error message handling for p11sak remove-key command. ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch- Don't require pwdutils for build, dropped long ago and not needed- Upgraded to version 3.15.1 (jsc#SLE-13749, jsc#SLE-13666, jsc#SLE-13813, jsc#SLE-13812, jsc#SLE-13723, jsc#SLE-13714, jsc#SLE-13715, jsc#SLE-13710, jsc#SLE-13774, jsc#SLE-13786) * openCryptoki 3.15.1 - Bug fixes * openCryptoki 3.15.0 - common: conform to PKCS 11 3.0 Baseline Provider profile - Introduce new vendor defined interface named "Vendor IBM" - Support C_IBM_ReencryptSingle via "Vendor IBM" interface - CCA: support key wrapping - SOFT: support ECC - p11sak tool: add remove-key command - Bug fixes * openCryptoki 3.14.0 - EP11: Dilitium support stage 2 - Common: Rework on process and thread locking - Common: Rework on btree and object locking - ICSF: minor fixes - TPM, ICA, ICSF: support multiple token instances - new tool p11sak * openCryptoki 3.13.0 - EP11: Dilithium support - EP11: EdDSA support - EP11: support RSA-OAEP with non-SHA1 hash and MGF - Removed obsolete oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch- Added oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch (bsc#1159114) The EP11 token may fail to import an ECC public key. Function C_CreateObject returns CKR_BUFFER_TOO_SMALL in this case.- Upgraded to version 3.12.1 (bsc#1157863) * Fix pkcsep11_migrate tool- Upgraded to version 3.12.0 (jsc#SLE-7647, jsc#SLE-7915, jsc#SLE-7918) * Update token pin and data store encryption for soft,ica,cca and ep11 * EP11: Allow importing of compressed EC public keys * EP11: Add support for the CMAC mechanisms * EP11: Add support for the IBM-SHA3 mechanisms * SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token * ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token * EP11: Add config option USE_PRANDOM * CCA: Use Random Number Generate Long for token_specific_rng() * Common rng function: Prefer /dev/prandom over /dev/urandom * ICA: add SHA*_RSA_PKCS_PSS mechanisms * Bug fixes - Removed obsolete ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch- Added ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch (bsc#1152015) Add support for new IBM crypto card.- Upgraded to version 3.11.1 (Fate#327837) Bug fixes. - Dropped obsolete ocki-3.11-Fix-target_list-passing-for-EP11-session.patch- Added ocki-3.11-Fix-target_list-passing-for-EP11-session.patch (bsc#1123988)- Do not ignore errors from groupadd. If groupadd fails, installation ought not to proceed because files would have the wrong ownership.- Don't hide error messages from the groupadd command. To eliminate a potentially common one, check to see if the pkcs11 group is already defined before trying to add it. - Update the summary for the -devel package. - Changed several PreReq entries to Requires(pre) as a result of the output from spec-cleaner. Removed a couple of obsolete lines. - Removed obsolete check for whether systemd is in use or not.- Upgraded to version 3.11.0 (Fate#325685) * opencryptoki 3.11.0 EP11 enhancements A lot of bug fixes - Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply properly to 3.11, and renamed it to ocki-3.11-remove-make-install-chgrp.patch - Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch- Upgraded to version 3.10.0 (Fate#325685) * opencryptoki 3.10.0 Add support to ECC on ICA token and to common code. Add SHA224 support to SOFT token. Improve pkcsslotd logging. Fix sha512_hmac_sign and rsa_x509_verify for ICA token. Fix tracing of session id. Fix and improve testcases. Fix spec file permission for log directory. Fix build warnings. * opencryptoki 3.9.0 Fix token reinitialization Fix conditional man pages EP11 enhancements EP11 EC Key import Increase RSA max key length Fix broken links on documentation Define CK_FALSE and CK_TRUE macros Improve build flags - Dropped obsolete patch ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch - Made multiple changes to the spec file based on spec-cleaner output. - Added an rpmlintrc file to squelch warnings about adding ghost entries for files under /var/lock/opencryptoki/- Added ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch (bsc#1086678)- Re-enabled ARM architectures now that gcc6 is in SLE15. (bsc#1084617)- Upgraded to version 3.8.2 (fate#323295, bsc#1066412) * v3.8.2 Update man pages. Improve ock_tests for parallel execution. Fix FindObjectsInit for hidden HW-feature. Fix to allow vendor defined hardware features. Fix unresolved symbols. Fix tracing. Code/project cleanup. * v3.8.1 Fix TPM data-structure reset function. Fix error message when dlsym fails. Update configure.ac Update travis. * v3.8.0 Multi token instance feature. Added possibility to run opencryptoki with transactional memory or locks (--enable-locks on configure step). Updated documentation. Fix segfault on ec_test. Bunch of small fixes.- Removed ARM architectures from the build list until gcc6 becomes available for SLES. (bsc#1039510).- Updated to version 3.7.0 (Fate#321451) (bsc#1036640) - Update example spec file - Performance improvement. Moving from mutexes to transactional memory. - Add ECDSA SHA2 support for EP11 and CCA. - Fix declaration of inline functions. - Fix wrong testcase and ber en/decoding for integers. - Check for 'flex' and 'YACC' on configure. - EP11 config file rework. - Add enable-debug on travis build. - Add testcase for C_GetOperationState/C_SetOperationState. - Upgrade License to CPL-1.0 - Ica token: fix openssh/ibmpkcs11 engine/libica crash. - Fix segfault and logic in hardware feature test. - Fix spelling of documentation and manuals. - Fix the retrieval of p from a generated rsa key. - Coverity scan fixes - incompatible pointer type and unused variables.- Added libica-tools to the BuildRequires due to repackaging of libica.- Modified the spec file - Changed libca3-devel BuildRequires to just libica-devel - Check for systemd in the 32bit postun scriptlet.- Upgraded to version 3.6.2 (fate#321451) - Support OpenSSL-1.1. - Add Travis CI support. - Update autotools scripts and documentation. - Fix SegFault when a invalid session handle is passed in SC_EncryptUpdate and SC_DecryptUpdate. - Updated spec file to use libica3-devel instead of libica2-devel.- Upgraded to version 3.6.1 (fate#321451) - opencryptoki 3.6.1 - Fix SOFT token implementation of digest functions. - Replace deprecated OpenSSL interfaces. - opencryptoki 3.6 - Replace deprecated libica interfaces. - Performance improvement for ICA. - Improvement in documentation on system resources. - Improvement in testcases. - Added support for rc=8, reasoncode=2028 in icsf token. - Fix for session handle not set in session issue. - Multiple fixes for lock and log directories. - Downgraded a syslog error to warning. - Multiple fixes based on coverity scan results. - Added pkcs11 mapping for icsf reason code 72 for return code 8. - opencryptoki 3.5.1 - Fix Illegal Intruction on pkcscca tool. - Removed the following obsolete patches: - ocki-3.5-sanity-checking.patch - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch - ocki-3.5-create-missing-tpm-token-lock-directory.patch - ocki-3.5-fix-pkcscca-calls.patch- Removed reference to pkcs1_startup from pkcsslotd (bsc#1007081)- Added ocki-3.5-fix-pkcscca-calls.patch (bsc#996867).- Added %doc FAQ to the spec file (bsc#991168).- Added ocki-3.5-create-missing-tpm-token-lock-directory.patch (bsc#989602).- Added the following patches (bsc#986854) - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-icsf-coverity-memoryleakfix.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch- Added ocki-3.5-sanity-checking.patch (bsc#983496). - Added %dir entry for %{_localstatedir}/log/opencryptoki/ (bsc#983990)- Upgraded to openCryptoki 3.5 (bsc#978005). - Full Coverity scan fixes. - Fixes for compiler warnings. - Added support for C_GetObjectSize in icsf token. - Various bug fixes and memory leak fixes. - Removed global read permissions from token files - Added missing PKCS#11v2.2 constants. - Fix for symbol resolution issue seen in Fedora 22 and 23 for ep11 and cca tokens. - Improvements in socket read operation when a token comes up. - Replaced 32 bit CCA API declarations with latest header from version 5.0 libsculcca rpm.- Upgraded to openCryptoki v3.4.1 (Fate#319576, 319585, 319592, 319938). - Changed BuildRequires for libica_2_3_0-devel to libica2-devel. - Changed BuildRequires for openssl-devel to specify >= 1.0 Contrary to what the README says, version 0.9.7 isn't sufficient. - Removed the redundant DESTDIR= parameter from the %make_install - Removed the following obsolete patches opencryptoki-run-lock.patch (/var/lock and run/lock are actually the same place) Also reverted the changed to openCryptoki-tmp.conf to match. ocki-3.1_10_0001-ica-sha-update-empty-msg.patch ocki-3.1-fix-implicit-decl.patch ocki-3.1-fix-init_d-path.patch ocki-3.1-fix-libica-link.patch ocki-3.2_01_fix-return-type-error.patch ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch ocki-3.2_05_icsf_ldap_handles.patch ocki-3.2_06_icsf_sign_verify.patch - renamed: ocki-3.1-remove-make-install-chgrp-chmod.patch to ocki-3.1-remove-make-install-chgrp.patch- Get a new ldap handle for each session opened in the icsf token, once the user has authenticated. (bsc#953347,LTC#130078) - ocki-3.2_05_icsf_ldap_handles.patch - ocki-3.2_06_icsf_sign_verify.patch- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070) - Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch - Fixed two public key object inclusion in EP11 token (bsc#946808) - Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172) - Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)- Fixed BuildRequires: libica2-devel - Added ocki-3.2_01_fix-return-type-error.patch - Changing doc/README.ep11_stdll to unix-style EOL - Added BuildRequires: dos2unix - Removed globbing in %files and specified libraries to include (bsc#942162)- Updated to openCryptoki v3.2 (FATE#318240) - Removed unnecessary patches: - ocki-3.1_01_ep11_makefile.patch - ocki-3.1_02_ep11_m_init.patch - ocki-3.1_03_ock_obj_mgr.patch - ocki-3.1_04_ep11_opaque2blob_error_handl.patch - ocki-3.1_05_ep11_readme_update.patch - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch - ocki-3.1_06_0005-Small-reworks.patch - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch - ocki-3.1_07_0001-Man-page-corrections.patch - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch- Also create parent directory /run/lock/opencryptoki in tmpfiles snippet if it does not exists.- spec: do not use -D__USE_BSD, a glibc-internal macro which no longer has any meaning.- spec: use %{_unitdir} %{_tmpfilesdir) - spec: call tmpfiles_create macro, if defined in %post - opencryptoki-run-lock.patch, openCryptoki-tmp.conf: use /run/lock instead of /var/lock.- Update to version 3.2 +New pkcscca tool. Currently it assists in migrating cca private token objects from opencryptoki version 2 to the clear key encryption method used in opencryptoki version 3. Includes a manpage for pkcscca tool. Changes to README.cca_stdll to assist in using the CCA token and migrating the private token objects. + Support for CKM_RSA_PKCS_OAEP and CKM_RSA_PKCS_PSS algorithms. + Various bugfixes. + New testcases for various crypto algorithms. - Only depend on insserv if builded with sysvinit support - Remove obsolete patches; merged on upstream release + ocki-3.1_01_ep11_makefile.patch + ocki-3.1_02_ep11_m_init.patch + ocki-3.1_03_ock_obj_mgr.patch + ocki-3.1_04_ep11_opaque2blob_error_handl.patch + ocki-3.1_05_ep11_readme_update.patch + ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch + ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch + ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch + ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch + ocki-3.1_06_0005-Small-reworks.patch + ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch + ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch + ocki-3.1_07_0001-Man-page-corrections.patch + ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch + ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch + ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch + ocki-3.1_10_0001-ica-sha-update-empty-msg.patch - Project is now hosted on sourceforge; fix the Url - Remove cvs related stuff; tarball is produced by upstream - Use %configure macro instead of manually defined options - Build with parallel support; use %{?_smp_mflags} macro/bin/sh/bin/sh/bin/sh/bin/shh04-ch1b 1733118602  !"#$%&'()*+,-./01234563.23.0-150600.3.8.13.23.0-150600.3.8.13.23.0-150600.3.8.1 opencryptokiopencryptoki.confp11sak_defined_attrs.confstrength.confpkcsslotd.serviceopencryptoki.confopencryptokistdllp11sakpkcsconfpkcsicsfpkcsslotdpkcsstatspkcstok_migratercpkcsslotdopencryptokipolicy-example.confstrength-example.confopenCryptokiFAQREADME.cca_stdllREADME.develREADME.ep11_stdllREADME.icsf_stdllREADME.token_dataREADME.tpm_stdllcoding_style.mddoc.mkopenCryptoki-TFAQ.htmlopencryptoki-howto.mdpolicy-example.confstrength-example.confsystem_resourcesp11sak.1.gzpkcsconf.1.gzpkcshsm_mk_change.1.gzpkcsicsf.1.gzpkcsstats.1.gzpkcstok_migrate.1.gzopencryptoki.conf.5.gzp11sak_defined_attrs.conf.5.gzpolicy.conf.5.gzstrength.conf.5.gzopencryptoki.7.gzpkcsslotd.8.gzopencryptokipolicy-example.confstrength-example.confopencryptokiicsfswtokTOK_OBJtpmopencryptoki/etc//etc/opencryptoki//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/opencryptoki//usr/sbin//usr/share/doc//usr/share/doc/opencryptoki//usr/share/doc/packages//usr/share/doc/packages/openCryptoki//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7//usr/share/man/man8//usr/share//usr/share/opencryptoki//var/lib//var/lib/opencryptoki//var/lib/opencryptoki/swtok//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36625/SUSE_SLE-15-SP6_Update/2c2071430bec916b93214eb97e25d864-openCryptoki.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linux   directoryASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=d3e7a3a806698d14a3316675825c6e17d74afa4c, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=dd26cbb26f5c4fb39d84c78734b2a3d563e3c09a, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6f8121ef59c65bc1bd0db26b7680ee723ff73b03, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=e0f0eccab7001f48d400dbe344d6f28139369c5e, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=e1377271d8500f75b7d3c2d597167426fdb40112, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=29113705c4a21483146591340ab6be037d69bfc0, for GNU/Linux 3.2.0, strippedAlgol 68 source, ASCII textHTML document, UTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) #07  R RRRRR R RRR RRRRRR RRRR RRRRRR RRRR RRRRRRRRRRR RRR R RRRRRR RRRRRR RRRRR RRRz㐃@ԍsystemd-sysvcompatutf-84ffe3f10958c7133fc5d4f0dc0c896b56fea9be697b6a73a0ab6b52822129661?p7zXZ !t/]"k%IN, V!I?0:B`?HQ#uXxSA "}[BUI3W{FZm#IE'ªIsO(c}M\MA{F|a*LHĤә+T rӏVaDs]Y`n-Zjkr.6wu  ?א"q}Ç)W1R||bOr`:(h㖅2LU)xc1tB{ `o'W2 &9'KKJf΋XWވ=yV-#: ̄EW_i!m9Cw E&OOD1öyB1xTs )+xO4d N+ubُHxTřTDa&<؊ByuKRvs=4t%аȠPk3:nݘY5m|[(AgUqsQcSuM/yk%> _ ؅]7/,+w[`TiFzQ3 ZxግYtGf7ciȔhydyU Ŕ5 _Gii+`rQ,19&f^MlLƤ2Pͧ2j_:vABZmiY8c-5E->}C>E^&/h5X3 jF/ `i$xdGlմz`2)&qvND]UF/~ iv&E%IX9#'Ҷػ6NZ󇊪JݭY#Lйup2v;iofPȢe.αϽqt(!$Cj:hdW)t$đKx'񿶷gё,UJavƞ~҂.R?`.%]75re.M܈/aȼsiJ$qn?2jrelJ%+~hg"R? DTh;>"=N'xr /?Ӕ8&޻/jEq;d@(s'UVg<=&duŞ [,DY duTt9IPҫc.4&6RE)WQ[t E΁Uε ""@&pBV)2ϩsZgI^{dR9- J*2j6>t6rh7w=x1 Z]L 5%=0Do@كj$s`k#M&i0ap90+ {h'M Go!MI`kM4I)KzTFӢ}w9l`r{ 曙J0A"pU *ޕKp `f;YtY aC=a$^NV:pjEdݔQZk:Ú 5`l f[ )Մ ԟ0x {;K~ b2ЏhJB;$ӃdTƋ43?drtοĎ}C~5 xd0˿nU#c$g\| ({8-\5E6\gdlWqD.y8b7͔Y)̗`hY[2Za>j:n$S;BH cb,NoF^xM MC}tR?#t.=gtaBazgЇusH,c,ȕޥ$)VP#g ;$h%܂d[P ,u]⫛_b`h1SZn 7NUͬ׃b,pn@EIL,F!u' {OU?E\Խ%\2ػN2J0 8)yTk&zE @GHyqAu\s)bFQ3\*;&RWhu]I !PlϿ5{:!s"j")*>!iriZCl݃r<$bt k}%Pkl(mCТѦ Oַ].ȕs*$irJ.z-&#W~&ٝ)a:%n!@;u*s2)i3U)P=ƧPiK9ʌN->El]m3OoAmAeG@yxOBZ`ojnfvgU|_GW Pֆbs~}Z:޾7AXЭ)3,VOlSaA}o+ BdbM] kM@vv-1o 2GhA}lXCA,5sDy\Lz8l ܔ*Qc(gfCvAs5g.'ǘ;q7xFʇoWX.Yル(F42VraTeSx`TcP+[DmWN>eXCyyF:PcR/\;v짹TJ~"d2m<Ⴒr ک+B?UͬxР_Rth~vc2>*< N/9mb|3-vgm}=7ɉ-ys:-aD)KM0&!ZN5۴r_)^Ac>H5P,9,9ܸGw@~+K)( 1ue!%ZLd^^rpҖsk}j:tЮ\?UTx뗃eZ~]`&=0I b~߮=SfRҲ̺҇4m^)W'FRAK;!*_?cjn<+.P@`@C4"fЪ]8u`LdmcD b]C)Q u> t=ywyꐳd:8O9Ѝ#Y A5u )xQTx)|`ף/T+ ۡ>ca5aeJ!as9e -h.ᜱM6Ԏ;KW [k/8 )CJS6ojo-Hh$w iŻ.kw@#Be:x/F&^Z+&!1i,p_gR&BQm:M#v`ILCf(ZVNC/Х^D,Ky>#}û:Sl W| ^Խ7Kwz4{*yq"gszmV^`B۬A'@j n't"|9mjit /zS95uO0X7ީ[Ҵ߻>m<4]=s1ܰK KtRCtn+omGg/U0?9 V^`A(ȅf~c%lܷV'qDGwTw%wg1sbkа%{b4A &S=ƛ%SucaO;5zHtwpl)^B٤ FK=:=<nKcU5_.3ب*$Dpe QhKˡҘIoo[ s QJ)}eq%>|g2/_ʄ4ؿoe>^B{txx}3툛qYľ4s]z*r.94iE!TKF]SoX'3=uɬdlt +gF5-,#[usg J,1xs.8a㒖l2&4Ax67YZϺ 42Z?ZȸkѦ ;cAL"0ۼ44q-.9hk:\-l˨፝$D a0[Z^keMIp4ܤn"ADQ6detU3)G mev 1䴂~>/Di&Ԩj+C kg~FQLPx!5"JR8U( Ro&S hoo᪆\1vy{`Q n䈎F (۩1rZ费PٰO%*Ei0Lc\Rq򆳺&`cj;_e!KN :lp6Wİǫ7d4~ xĊ/`H;@ΞcpVsGȌ,NYGp0/AW3y|5ɆC}x~jI$qK3\y$riHO8\S,yA S$j'.7Z>T`BoP4z .ORsj❫WKQk|"IO(,4PIm5<БwJقD/Ry_bqOI^]]~2 iAle8C%2+L[uěEd׆(e"m/Qo1˃fABM,D6$xU22„6)fpݤлPO^ pL9B-_>0 ;aN}30W+]ǥΤ5q'EnڝZmG^,wE53pm1X&cIxg^ʀo=j"̌h8]z+{tg.Vi/XW_&*2mRsJTДb=jxqm51<ݢl c> 'JWTw[Hj^@諱+!i쇲c#iAǪ:jHEjsz9cz]Ґo]k/6EhܐZnZڒ.o4(oVwܳ";*q߳50OP|7bۗ-Xm8'| /0pѩ[rHBюb,bǞmzR՞j| !t];.tjIb곌IOݛw'_t}_*?z QuJ_˪0RT E]߱,3hsCx+-8r04@s&fTH|xeJG6}6Y]-Ij2*%=^0ܷ K4>%X[x20+m/<>)e|OXq|6Fs}86Uj"cڡ*FS%j[ `p._NǛ,r ʂ8Eh֧7(:aQjn GhōwA4:r5{l7I! {qZp t:/AO8Z C@_^z -JR&1s3wsdP A5}EIBRK0sGVq1}6"Bfk.Esd /ֻ>֊j͈-g;w$8oW{w%TU0Z`"Sn}wLQm\ɖ/ {BNߊD wn2-L3κ>xמ0ǎ,X4ӌ=aVP>1N5;s i?_,# n}j]`6F N*Fthd!x j) %V-Cn[ji%4Yp]mJU?9#$X7 _$ϰ.9~>^t\Q˿EWAt2 Bë%Hsg-lH%!U _v8͋( 5eȻAW(odTku+_:1emR~uYH\ru,:_j/:/{.M_>F>: >}47"~g F;M##!26?٧ð8i=#fԸb栂w-Bnm*$Y6j2B{az$:6C躃$x9g]Nr5bwt HPT\zj`fQJPۗs:uJ eWQ<~9L( Z;{=G{Kfxv448RHe(\scj[j_䣌C Y t}_+\/J7`[]QlvX#gc~,S-+ 0;RQ%K75{vgPhx*x"(1bI .ڈ?<= @sԶM^b|F=Nmۢ)@L/HT zB[h'zh 9j ͖DaabGIrb굄'L3F s'qq8Ms&_ŀ.MIfYJ&RЀg[4e:[Luwp  1$ C~I䪱,Z)9˦K%Aa9.K<%:US jUi&-fSq#p1-qk/sɅ5#~ Gs4Z6r-MB#L5yֳȉ!k#]҄Z_q-%}aS /gT! f;3ߑADG:(r" jDŽF3p*.F+c&F| yxC.eQ5 BkAnؽN-7I% /JU!^ð;FX3&<-j@՚4WI._B'IAk4EրU(RSZ 42!SkbOO+<] R|'} pnƓ+ \QF6sDJ^yU.j5Vx5*!~oM0|]0onX*4|3G;[a\{aFƺeQߏ ni/#&M$ڴ4f^tkvX̥lDzKCOo~YmԞceW^:͒*pM.[ 7I؀O00WƺH6 5m.mjDžw7q!Ϲ6{)vQx n] Uե{n,IwSq"&kW/)H&3jymZӅDscU{&EP|jsV/[N氐=T{ߚ/=2J6Q2d}DdPfu3Wv*tͼ4K(i@ï0DsqVt +J_k@sxR綪GQ^[N+ucpRxxV/ f (mZ{7;Yq-&q$>@\ ^|p-3K4i9{vRhpbES5#J8_fFj+ܝ'+a#F6> 2$z~xX, HCȷ6զk%y.rdMz+n}A5Mk{st46墐q~Y>♢.nj@0?iV9Oq!V{u&T+"xZJHP~B| Dl6iک5 RHvEsŲ:HBw=x u2ޒzb,Aq|<fbuB@oVZ]2J-oϥ v3:8|ਲ< ꯂTF뫦 K im ](0Y%(s>ÿ}? U^c֓'.}: 4^8jF3/_Q5`rx~k3N)&Dn$T cZNFi]# +0+̋BOj'*irjLY.gc,=%'!\sa\4v Bd~d@&'d|wQRzB3g;`GgA qJoɻ'}o4A0m8Z.) XAӼ)B)L0Tܳ3koQ8spq;9%% K̚jk`*Mzzv"Vxh`5,ŋsft*U٧)i~¹y;M?l h r-yZf->}g}H/"Uq |AdȍJ[r#4VsWcF- oٵ%?YC }<C!q[z:!12mT*UTMz3X9$d8m GK|-7"RQ~9I7K!fm.PAiY.1W=5<됷p?ͭxnHyP? QEpa v]bJAzdb2?4vHk6̓~<5YZ*#Fꀵ f}m!aXI`j4uiSdFf/|+/jqwdْnfj` 9ܽА!!zXj)lh Sr, Qp}v q AvO}rв:Ag;Iy:lh+4{\_},Q|IB-ufvu6JӦGcvyV}Cl <ܠ#>if>0%zq֜L'qYs{ {7p7?W@9c EKNw/c}gqZ蕋[-C]ʉ]%IEk6uDC\&:dҢB-fc1n=xdwa^1YOgF88K$2jkD q1S룦%u,zna,KWAky? Zܾ:mhFF&*EA}$mϾB͌ uN"gwn\}_!B~w+v鰂6ѫM)m[䲾Ewk1C'=Ol1ٔ(!Q{I6 Zg8]&Å$F6Y1w$W~¹jE_"C`;HuaUMmbftYTpPjb3ѭtqptKR׬Ԟ_007箫htyjח*P%^[;; 36/X⩷eJc00=͚ڤ17Ig hO--]u4J$QQOeyCi{Vvu[:/v9砄% &k~D`fiqi`nw>sZo)P AID/њFQ3Ԡc+$[V[򩸵ZdCrH6Yj5wF?U֣ewªlAs`pxRh7/Jm[Zr?LrYq/R+c6K|qm 4,JRV~R9 ,KA w gq1XM -2)S//4'CꞚz i/_Oۇ%]&]7g8DtpC=q2oN̶ Vrp{]Q 'ДyMڂ9$/)cHlFNmB5B/[f+&3} ΘA{EHRKɚ 8 #vƥyLYerunmV(7owGY5*_Bx>\`:t=[`W<;/pfU.Sŧy~?Ԕ L(9*7VZq,SaoeΖqB[ј.8|xY'%'NmuAH;; 3:"_ .X%}·@)b_292K H@x%SB''2Ւy}UHu&zM}:tEZ$W̽wҼY^苫P9 W'@)Swwaf69&ܿ=F G!KYqY=QȜyuUsnTN7c!TyzHKKv;I섖G[J4XMdThfK)h>v''7F[ڕղj>^4|X͘L}1~bz@7XWy^YS_5SRE.[K?S"/%/(9Fhh{r5nk8^-8T 6*eN=.dh sne$slru|mdҋSwp~8 X\D"ꕷyʂ3-^..a {+$PbtM >=7h$moQ)B tC$xT?^Ptcm\-.7w˿'*d6M(205}c^\;Q#5c:S@sS-IMID ޕ>w}vf)sAjIE~)?" ȧr(S>vp<]v홐 vﯵm.nW1 *yb [oVyJ76DUgq2u8DىZ)t,I'o%ƌDQz(g!5A\2BzS58/0_qk"@gv/a`N|D|E t'j iNqa "-dZE6l%QR[.O1O.a?Q<׷$͑!rG ypG)q(?+Eg:JAX5zaN0h4Y16$ )đ^[YaA]]aIHo%Ita KYDy/mn%-` c@Hե| 짭  Dێ%x&3~m2DEO,2 g.}IDW Ucˁj^8nly(\ =|UBOY8_uc@QǕ+x|˷/n׃nկj?,7%@9hI˳j]Ť񹷇6B(){y}I'^T3WGP)(AiGk8W|{#[z-Kp ]9ۼ }3g܁=K0 &R`2-ۀ/Мav*p0*( KPzvv8SùrGWĭA$CFMT,Q&`U UO8+^.$D`V Y hiKЩfbLⲑh1sU{ikXLزedrx%ul'e""~=X`ʰN !Bqa~8 HvFAÆK(ޭ[14Id^chćtbNG2E #^q:J]D3TC)HhĖ#8nu䟣QdIeOOJgSpYBc3.Żco b;ꉬt!6ܞڜim 1HtRO܏2@ܴ]-4k6Z>M}r:nk1)fr+4A]zP9-%(-BhmMg+!k Ȟ58~@Ȭ>.|$ m\c}qK7I+P;ihŔY0A$Żm"=Ԣ X__ 7"?ƻgk6P^#] kU-W_HQ ;|`W-j@Cg.pT 2&2 iMNj 8Q\c&?Qq ؀BpG o ָ|jt_ZRXPx/Z5s*9Q/jt|Q7*.Ob_dD VM==uJ>CEu2WpzmqOo?-No|ǺQEyΕf:{(_3{WmbKk'QEܬ{MkJsSg.ƛmP^dblN[<CK HۊR,3 "'3`1")R˾K g o8(h1Ră?Բ9I13C0|_N DRz80-Z>O $rGxuy{ sPzQusڍ]?1 H1; 9$6UܗQ.4\XRjAe];zꑑ6n՘* ͓a غ@i#ms,GOS&"0<ʦ>_5KPϫ6 1fLPV|sʥzV&LJ&m=g,Rzz^nJl7_Yy3?T\gߛӷ:bĨALߋZ8J8۬8gp~KXܼ᥌ -\GOiyE*̏u-+ӟw.hG^|#Pʻh`7t;Z#2~Nw%{6"n`~- RXv1/w0!E }[ fr|6 Yä0Ha8}\ k2ZP)Cj-rѳS`fT}fy|{hm/Y>Ue4XXn" L\Q%g6xKz YU1)@Ma|<5$j)V5HE"wx!'VB4Xzᾓ=mNMu":iX`A bƌwj[RpVԦ:k3ehZkxL^cZ-o}A K擴4dr|A?E駆(МA&QLq5^aR=iڐ~ECߝX1JDιk}:W*i ZGA[ ]FL8F obiE&xv_W,-/ΐx$M13>+Ș #z^z#ZՅrphV &O[0w܋RDgI72ఋ$+:i"XhHD#"6k=F7qKfT{ HF3O6t)%v̝MR\RHabm禱T2lgpNP$ BJEeυn֏I|Q ' h6TJ+EO)'Pc},|\WɌ 4ɮ>8:'sQ4otJB5L/CL+Mof^";,#2ZPgKFO700*93259[yE30zVjC{ z(r_y6SgKvjfTJ]AU^ \y?`?rsKV73_q-n%_HqYvl4nKs:wpd\3AU"xbaWp1 Go,'JHdh6١,IF6ya|\_2M/mN~@n ļR}Sk":2hA9ԓBۖ@ y>\ (}t,\9Mđ5_K1N3ҳWU4&=IUtPze`{4 x.NwRqq{[2"yeNO,[Db[O 91Dc v68(Y,-v+!E'/͈#bX"E+4V qQmY8PUيĈ^UHXEǃ<~$uW=-hKok3m+v> at!_QJzNs!#UOls3,ta#5*b2dnhq:a}ظ`D|O z&Qݰ³ ]h׬T?4$.)40>iSE IjoBr50\8vNRR,cN}ڕr-dM"cuu!HH'I)h]=5;GC/{J!+gZ#]/wmꂒ2ȻI _c5lZTjwAI폫MX .7z0xyNyi"0ӓa)t(w6em8dB~sẆӼZưmx;A^@0-X_?IaBmR&{M EPu u2X3s⇧]"ޫDMNS}H0C&fW>,gÂXBn^yTXh YԢ6)zZ|P܈dHlG<Mv9:op{ٳ. >61m2aRfιCCٓ5?/ ^U= lf5GٝuOO'p;Χ/K"?8#1߳wUIX.u|)3Iw#`_R*{B=O S`gv/r4m R5w3$NsmF"-%I}N Qqr+q]hqDZwk/5,S n`0qL[gfj H_K|G@ < 163M|7TMVH8uVT6ң0A1ܪ!SUڎ} ؇aܡ"@Kf%X}E3ŊLy[tE2WWUB$N7?Mìb:+0Eiާ9.cO[#j#u3GY.e!*Qt]/BS rנR7-)GJw3zZ-=gSNyRE/w$;/F] a]&ⴺgR9J%P|rDzcY=@$4*s۟a+홓CpRVV-g+oOU+77f<5=`#!lZ\&.^ ,Y̖i~Ǝ{lbjQ63Uq:#`ETB Ŝ]lՎ<ឌ06k͏%|b$vVgJmDʞc3SAzN㞭ݏ Q۽`n#+;_[Jglo1lLXCױM, YSbi_01Nd f^?Ԍ~CZ+ vڄQ4ۊSF!T ;>$kPߊ],W'l5 iKV~d<ˉ;t^OPV~G[U$fT+|AgŒjFަe]L5(GХkk3|%)œ7fO)~tNѰ-H9 zD ynKil/ \-S %X@kGe_ ^齣,%~c6\][&,=]?bh9a\ wթ&6λ$Bi4Q$1Ώ(Z_X^fzU†CPJ38_vR@S'Ҫ>'C ]3QikgP;1#DLS#^<<$#U*bvV=]tMGd?}äp3yflְ}i|C֤N'VNyS;I˝噪?MqhTْ?,& {*."Jڈ,!B4z6! /OPM)\G*ڤImT}/-COtU.s^Mo-R^D>=]xxY9&i2 e_cgY|+@ল'OvD71!PV3VF ءV EJp{ZTc-t8)촜y#HAoBci o/pƝ1 l$LcE.w3\!!!duu&#d1 )ypJi@rB9#kn7P#('hid 7h O); u:=`D $-Iɖ!PsVe 8sD@ͯyp.} 1QikcNԓ=j:`PM^w'ҷp2u]D<79yVVz3Ϛ3t O >8ΙL7r?:,]AgrӘ6[}bʼn5Ux^^ lYN ?s(T}1H}@6[O# U5%YLюt<.D'y;#gYw Ob涯;O >5[rj&DjIvP ̵['/P?;) 'Bb_Ίx+PY#Z;5  ٸǹZIY\l4#b^V+⃻2!m&%5˵vB'21wlZדp8 y&)%bmSQ{G7F`R'悋SO -1o%z{YSk M?Cymp3R&ym/cːԚǓ7^`fu|E(.5c_F܁uB,.q/51CWBE\/E2 >gD!#ۚeL]aTI`_Ƕz0(뇸mzA!fV%pLcΰG:;ȓȡ"FPE"t4`ʿZ#> %A8%}!ʹ3ωOOM~N0kk{,Ce:LV\oO\U,;Ff[zߋ~wU#clT(32`% Z;|[ڎQ(px1g,]2::7S-Tnpު/9KG'%ҁl=<^N\E"b2ꄹ\ͥbY#2a5kp9PCg<#*gQy_o3h .kK ȉ* 㟋کtI'(=msc0$):=P$w-S {nN$M0.k႙ֺxs~@֮+uP=)3nq^r+u7[ A_$U dٙ%dG'u"<ɽ;IK/ ?v<+蠗1;zQ_C?.\ޱ ~[Eszu^^Yd^uk(z ī>T) Czc(((NyoI$nYE7<3ٮ帷oxVοY3i#_䖹sPT7kHxd5]pk2PT6KwRVR쟹R2cx\~V  c=}8羁 XtT ={t "2u}c.aP %Ȭc l$jOD%g߿LSU ]Vă\;GL\ӎ$D-9584ٽjwҜkD4ous8"GO)xz=ϗU & '627mbܤ`iXnQ 箓bBT_-g\! i- RJ3BS2[ҌЛ<@ e|vfSd&^.3Hjf(9.#mfqaE 觍yꔜy&mb -l?S݅xDXpwhV_M%nK>о קVӹk bJ妢5jgp C/ 0lr\>76Sw1.Le5 gptS2zZzz݀lO*5H &| ߅T@N Hfv &<'>`X;эrP5jϦB4QL1zKݫmRpB&k}lg)bGQo;nN%8o=7-/-4ؔ3_<`#m0x8%78ڞԒۋhqom@ ۼX6`u |>4M:{!}ٖȻ+ifMӘ$U(&TQ5CkxGϭuKJ7T=Z +Vc܂m t#yo|g0QTҷE OqfA?Og;٢RZ]NhS H(a-k EH0,ˊ (=U^Qgl>7| ѕugB3~ՏkVy܊Iz`=A4>ӕ?;堄F_28J#>~Ѕl#>_lmA;B] {5Tvp7*6 !'C&ykI5(7)tFN"kG>ߔQ ZZc %;nߝQ8 TuX=jVު4A7(p :1~ʤƑna٬=09fؘSDgء]M֌F8zO!WxiP)7p~㌀3ƱB2 BLN8ɑD`CPE~OFvScG-]KC!C5\SDPbZP_{f)\^Z<[iaysI[x%:} / 3lW ."dDQSPކSG3j_kF{V`[yYAYZG8|94(iD Zu%oh9xCs2ye>bX,z"IFTޚ85kru{I96.,XdeMk m;?LzLRC[ _ (O|L+ob')-E;nmΡe G@RNg _?^1(W=Vt]18t]RZ/P?gO[-=__Q0>\Q:mGj_)Sx+Uں Aϋ$˂ub+VSm T 'r]E)-J`bt䀺ѰKQ`6 « nAO(?$Q>°ç"pxLH*҂ЏڔvChh*$d l ﺓU7Y3=%B eGÞF:ݻbQńؔZGc`vs+Z-76϶?Dɍ7=ʩmG)]O᷀R"б5@yw+_}g)(%/Hc8!q^i@U ˭R|5r\ :dAܠ,awa ?A!p<*[{^yݕEJ<gj ;}j:? e] OT"!VB1nH\/u_3_wӌKI]p=-|EGbRwARA(F튧̈́פBRzI "1ǪLw~(2M`Sv;K/zbsӞ\AlKTLnuapWZ!v'w KPzɴ?Gm@)E<)8Y# 䥛|90ՈG`K)x1mAOmZ/ˬK-*{J85^;0Eʖ.`zTMg%vwbr9ZQ KM5(~Y>Lz׏AU; pw\{sׂU^3MQ( CJ˦R.Nv8OyFgy< V.AZz(* bʅ"=3xvB|ȷBOXK1Sڂִ,8g,lu &:G#A',~ԛE:֛ fhX$hѯN◥ %t%rо^*Sa9zX1VgB#+7UF\ZU%ju&f myS] F}P(uͻQ!i3 }bFBI5xCMlS fc>`V;T {ӃWO~rT\ϔjys#->䱒͏zklFRZWW"`?L&RXHRp?ɈZ4:j$,Iַ o"]MЂfRioOjyp b`~Jt %`4.ܒ`Kf ~sNgL#FRɂ$R3-}ҰWO<2uQrMF65-hD>l|JMIV~Qng**=Arug0""]ThpKUi~⭪`FglH,O|+M*ެ-$Q6D꺝̅ 5=}$qR0*ѴZ(XJPsJ/'(7JIoՉ:$NaΏ=u5|1 4{VDT'CE`"~`. Ɩt1Elge@ϟ-m}/Weuj7TJy Ԋ4M_@jsDj >AKܷ Sѡr/ZUwT" I9m6 _ZƭeB+2D ~p AkʊUv籜}hxA[ _.5{XhJnB,ypd_}w4pbY.>ֆ?G_eJ4CqϝۀPa]IMT3b:oG[&&@N8G RI峮A,w?R:Į@;jM <ޜHs$0bjE|Z ƣhIIh[dId+Gǹo^䙈mċ>b?"F- 'LczshG;!>RW6,/! 0DvU_Ag|Ua4bjA0_{Df~X嚊WBPHKK"2릏b*xߑT6:D0b?^~/|SQ |G\%|99&B؛2hHߖazӨEagl6 ?E׾w>k_NshWNzx4G&I L31ݐ}p.R]aIcG3DvE=dMfR^ÞaSn( uŷ![x`0sMPGfA pP%C$LYR|wVںg~Jtr I )!Vݪ\!sj']~)T!pã=\ѝ|'q+{YYa9ʰhe>X؉{͵^&"FMRr3{k~U6=dAtZb}W\GoݨReC}# ZUHq Y` fr0YY`ψr F0Uh_GDH*%VK#.lB>mYohlzK,<ڰXL**}릌)71@2 w$\rDxR4^ǕsWVLwo%Ӓ'3]\ 5>m=+ص"wi, 4}u ))lЪYEɹ!wUmOu%oI;W B/asﵨx%uy6yRrLH;jw9xwB-_XJBG]Ô&%Ғ'rDȰM1 @/K{(,Lg,%a{?<ΎH$~_CbK/eUaIP@t9^ig)3CoE0oԪA.- k\iOo'c^J֠gk V[!?!$b@EdקNNq)?wv/ݥ> tX'1T.D](!RYwkҌW5:n-캎ǑCTLO~13jBTha8L}TE wzt̓IIs\݈cYsKv)<Л37MV:>l0ؖv*ቁg$iӥKZh7@I$gYTtX%]k,+]2:%~}T2v<:!ʳ'`Co2a{thus.ڧt2&!*5n3@k- ď&nhwpd"q@[WI0`4s ed9;N@;IF8$ʮ2$QW6-?Y ~* 003̸b* Yr]y'g(34pT|EtzeqjSS*xA G޻N-@|{x#:#V9p!WX;DJ ukX߮On[}c9Fz=yQmIQGlJo61= ʢSG|--a:F.O('[fW~4gƿdaXpcУ/_c*7L9"ސIxHև=È,L|,Z#p`l5 v4/ eKE[26S{Ntf7}_[vy-PY 9?F7DZL*RmB!1a%3׉}|[PZ΅=?4sgg[ 8>{c+2 j}=9rQԵ 2Zp{+ߎL0bf\?ܑ@ bM>1E$=_lD uL Y{=v~U 7`4HR^"%Im} *\03%"@d.&?/M&/ S Tz|H̵%6>Ӌ"mm|=T6xJ`G?|EԗxNf%r\ (F{Ȣ%=,PvBnYamCE Ս8ުFg2yhY=i붏!,D ^).ͳ&~䗯ʾ .erRJK?KsOHnpѽԖCIJ%N yldmWexذmҕL0hZvga.@-Cy;]Z! SW3(MR֘n3*sg5N=#aXˆQEP|q@[<48u]QX$pYAt͓\kv ܈brmrd$ CW(t/T\~0KBK{lvlZY#,#jrJnr>%=Q,u3wHO}"5ϕvsy~z*X`/~ {Imn{ B=Qz9ɌLSkYFC^jՖ4EBSr?T- F~ [qKaEiEbNaaL |=WqP˻hT+o{fOiO_MPX)4@FBEyޯG&;yRSGl X;Q*Mbn1X˦ƞ$sao2Қ=,'ؙ眝Hdf ojm3Q¥${RܐdNcd>Y2ĐoOׂ7 LwyIlwB! UAz2#/\Ӝ6[zUk>E'MA U5jw5=.{X >!3= 4.׷sخ B<=>y,4&^GAcc1Cx)/g6, j7OeBS/9_kYn,MKA4"a3_,Ǩ@Y_iid<#aNMhWW%VQ=ͣ3Ȉ)+7}0w 3y֢*د24}=Wk(z1/"!s!.pO[x=2U&ɿp9[ 8TBJ@`W&zlGi} JO8%'Fsj>5xCZaq`SyB0XK +تԯʸO|uL}Ͻ|oE1B]dlS\9|f=3u63fw&(++.OލhwcB eYROBа2H$:jA4>̛Y3͎)4aQ_;1H*Z!XX ߢƺm1hZ,5R-~~\ 9 Ğqi)wUh*{Xt6'Mzof`T s5Rf=yv1zVY,uO3jt}ΉBι6`Gȵu{mʰ Gnΐ3ts'Ki Z zYUs:,CZ_#Jf 6<ðq׽}Ȳg]"V1YN-|ĦlhbViEg?v<$o;Uu^rLkAxtn8e1ؚpDDd4no|VA؁ϞK ‡ZjP0s-KR?D> ]rEbWGžGݘ joXs(u> s~e)6 Z~Ě"gM \!3WM TO*0iku`,\dS$E*׻{{<غzy91$P!9֢eb@EwWho[58Y>`ģ,O|ˬo\,\X'w{}8ğ}h]Cy[y[iK>%x@Xx$q)sV}qٕFK$Rij\ϒ?9lTAHր/}A9S$9_u M,Uy6ȱPz,͛cIe-\辧=X-[mcm2Cg+18k/.v :_f2G%(ũ:, 8Hom҉m SaJ'K| tHA oqA/T- FUb fїّjO"! HȖ7hJ㷅 28Oӄftߩz|"i I=O/qc2)$ŧtb ,b0Y^rX>'R5W=I!эqKv!:+*;ڴ漸|ԛL*{ፇυG@GQZʿ+sf DwK [ȹph'·&d; >f 3WgwxאdÙ.A #[W6uf3vk$}U| 1Gm6u\Y) pXj`՞iJuh=.u0f<!ȨWT& c@@`]u&L{6_5?~HٟzC"M0da i(8}KI(쎀$, vByfV;T.Wo^\<=jR׍_K/ɉ ]E%|2Z$+ry;Tv~1Ih]OpLjJױXVj }$/4}{IQ"N}Բx@k^KnOQ -kO'9Gs(m$?1JR۱([f7EQ yTeȝުtbIpq^N#T>QgNX}%~D, IsP.*8ɧ7Tٞ#>t46JZCm v Os& 5,C@ޓ`\TGN$uxnRpDLdo">0(eSOH*hQhr;썇`$PKm=̛{J:>U&Np8aeR+IrrYWj aEhAŲϫߗeݠ Xr\hju“(3Dn$Z褝x2" q$9p 3gpHܞ]N$DW1C\!0dmJl/ح1Εr?/ȴIn,Dsk3"7l!]3G(dw1| Z6~q*icluԲd͉W|3d\%!x>[CVJvi;`:kmxͭDN%VG0ܒ1LqXKfH54)J&­ 2xXks M, 둚I )`h!+S}=Jw AtM%vSoy/Y2(c{܅ԮVn}-':a]R{ʎ}[f| :$cp_hSP^.q)u/TE@rIgх~K)Ao&! ugi`>kӟnꭼx` Ir9th 3I?c&aHvjmH6a9q1(zǸ`0jo<L.e*i ?TaR_`UU5̅f) Q+IHv׈7^+yDPY&lmXf^hqߦr҇ܣ\L.^P.&4r?1R3&|xSP053҂F[S&S餋l&5>Z\\%h a݆r8Ž-x@@l6ԯZ`Ht_65p } VDQ᡾{m3 RT{e?:v:g!S5P~d.[n01/Ȁ3v\yV W<)Mݧ,Z(a©eHFƭ>mOF $G( &y4I]LEy7E=^>XՍ^Aw|V"A7Aў87^%4L4*Dx}ւ %2x}Q3pFWk|}`!){cy{c#Ѭtsmn$iUo &KgbD_ff+V@Ggѡ0꽋Á@}YEO˫Ţ=y"WcB;>WV{w|B A=myDZdYn~$07h' QٙVaPűvܘ-d˷fA:A4)2쨱&'OWUY,t|?m)~jb"յn2e@Ac]d{PY*\A]l!#Ew$EcU8 QjM?t p[FtVa-Bv q{k3b e3J.S*rEs܆/1jhmb^y)jGuur9L#mCf= ye8]1t@ hGP~iXC`QPD=8d5F=Zh3!͠uJ"@;9{QBF<@ P}7]ȹ/scA & Gd= ڍ.f\NS\#oJF"7DsE {{~- t}K\wm $ރxƟZ& >S %WUM3cLKjţ7lґT:S?qn He->>&a2B 3NNRr%6v_7zLH  Osȃ af*>EД&a$jw{ F''U?em}asFB"޼'Oj;LtR 4_t𺸦Tj.3M|Yq~F@rϮٰ*Rpf0ԀҎ=]fgkΩ@;FZϊ^gh!Sa뫓Qן^mJ;ۃ( dRH8[SyeA 8-8L(2OU)̟Gdw r.A_ɈcNY dV|XRѬ ?x62z{jUzd"G46j`@rFu&{q4Ւ |+Q*I_Q,{M(,M@',38 E"r&+_89N6 HckVr/%)JRzC[jMfbYqC൅$S`<Ž |`3VR۱nal[Z |?;'=1MO+$9>d fG6ψm@>oCIx܁^4c؝ 0a.$}!!%_`QIvBonwhE(*d8 .v)b9!kڼ- `Ҁ'q^}Hvƒ<o/#5Bs +4rǥG[[hHtfRM:Isd_x~ΎOUUo1.VO4UNYbYo1g)#1yͣU\edn3b/m{R&2๷b.GTѮcX1LJxhu9mw 7T`F>diqK#_+/JL?U>JǤgdEt8L5(j\OE V4T(X'kg/g \L dAMpC 5eĐ"x,C 8 Bζ_8 3.;cSGRsdt@9JG470"4 ߼ ;sMi f<)I cv'Dkd%\w/];7e̝gIv(9D%YW"Y\2Y%zeHJl"9Ѻ oQO]Vq:НH?ݼyRe4=6R]yIAF=\ձfZ8X~ǫ\61Z/c(pXxljhb} )if ;v#dǃne}OOLjsb՟-oUx;vqն},&q $M&+1[ih.zE&XG`9<)6-2C 2ymD8Hκs;s3xrisR$m@"w/ܾ/닧HUh*7ןtN`Cs| 3xe:dtILma9ͪ}J&/O_)45sNNB w:iP<}& 9RH MH\ӭԐka E!9őfH4||Ȥh0`KΜ-B*j"FicAM>\ͨYQ Ѥ͌Aus!@]0;"GK+mxG veA>1rR!IYIhvQmW6$w<؄o-ZE}Y?ہiʛi]K 5 eCTNeb3E#\{MHA`EUJ΢Ԓ10ie}EGcD߱7 @pڸ]d@wŪitfG;PN$ױ{! 4Jwd{O%~/x}:Qe$E*NDRF\98a#Z}4a4 4\sdѤb2Osb 4Sd-ct KT"Th&*XJ rNI9.Nv;`7TW^.svsúrxPBADg|Fj̊P2]JwXWaKx&|K1~C1[qƔ4̏$œJ$FW8:Db>v!\G; a# ɺc(xLcF_]n# CTrƄ!p#b9CC\ aWsgc戛1 7e 9*jr@*,mݯwDo.]{}F}'?},hH.PY Rb+.'KLIJAqL)ǻmH 5Q9Ui4a3ҴY 4*~c,_C8} r բ!yMa3i?.њe1ɹl=GuChM)t$ `vctTPu_w]ѳ'52}6-;CooκJ7Bu(+遘g1\$}6ˑz*rZ=Cݶ>g">B UL2ުI[ F_^tDNUtȦ,Ft|@{-|sT]GQțE (s|:ɮb71w0O;l%SĽ#UIBD4;o­)Ela,DE_[P ]*XTT3۽GW޳ݻ0uK%>"UTv-yヶxx`t3v}!J JK|9d^ vgb˒sy|yCGύ+Q“Vz ʒ$(@AuflaT/g 1LI6Ԇi!غLEgy;l*tDtcxOoǭ#q0mY 3x [6\TI6\D-Oq@_Mp/kj;޳,٘FЀk:3oj跐ȭ.#۳ s@ '5-6K?]j?qr#Buzy \JaNbQI|zJ䳉Z4;2Dak4[a€ *RJОn`,1/aJbl~D]°6a` f$Mk(!> UV̈́VJʯfO\k|$U %_8VXW~h4^9j>5+|H:OQ_^.^ 8=d+u.)ߓ&\ht\^Ń|^G&8R{RyOl<ޖ1VP`&E|̧x,!k7 >TF)]]}GQ3"4GbS iVB@orPP#fENG;K*D`"cJ^+b{QrS#T/CLLϐ&)9 DGci45XIFmS)[pʛOȹonXA9D] 1Ė|ėT=[ҥ:կ?קjhȭɪC>斩z&`^$R.n!@W]}u|-L:30J_Ǣg'˰a Ke {ϒ sfZK Ej󑡌Hi+0qm5Sh\,N9ܗu.xؚrRrWVlq?1-p ' RɝqeSEkr5m}'y4Yp7$*hjRB@ڹ&J*9 SJmG7cPDld s:YL&ۛqut%_6t]rĹ-5*/ypBPV5:?Zzmnc֪\(+3DF< +rNhGG绢va_X7;i7ؐg.C&姠{K&(~xf ˶z`d9dy`PE &Ŵ|D57U{=|ZA'Z09vi(Vة'9 *$˥@ Xh+17ݕ Y9'Fc>pXT0Fc Q l݊+khc{#J2ZOcC1d&tvb0ݲ?peai^;9C2xg͗Y l{|HpecSLZ201f @+~hD3#G9ev\AÃ磹j/lNrm8#eܨblx"&Һ.*>?ۆ09.nр=-BAE )p}7xZ{z:V{*u7` ӭrܻ<  ?p ]lsl졬&WV0\-{{ʎ\D!P4UF/OC荌 V|) PcbTe[ˆS0tK. 3k> 9&L5";py9_Zu^rC:3)pDF#@8-G%Gq~p"o& g^t ͬxKmt$! F]ߜ7ҧmfKj]m f+T: |, ),=#y*COK~.Gs`=RDDX{$+uBĥ eHd G!ͮgPDW<ˮ1=l&}ϧڍ%? x쑺{Vm0eŮx" YU3TN(ףe9{잼Kjwj:U76;mfnQjyƎ֊m#7 VB^Cꋷ8ERЮӿrE2Wfɩu.~%ƨ2 LSX4r[^JDvMCA ]a۞ҋ0 J`0cvoP Mx%D=aźè&MI'oL} cl3ЇPK]8YwR"E .:'80aeQRmt[`pGOerT9aN5xFQF M#٥XZ()xRfSrmюB,DZyݪ玫4!&]{^e "#0 ?w_6s^55`wscȇ{ݳNQiGR!*OjX"8_*3bՌ^YAR"xy@ AǻP%]TT9ĥ/ Z}pAdY.n7sFgv0p]_5@3` : Vqܜ}N~]y[dR6nfY0y5…<8)4ȧO, `~==ĄE0(y;,G3Nju!Q1J~e;Et5VZwH(.t1*/]-SD=^D)JNa oP;+}Ӝ#ҭ.;+ѱ0گa;#$¸2dPhrn~N>h-Yiبa_۔Yo(tCS#G?X5S3դ@e.n|=z 75Z8ôVxfZ9yN@ϊ?[So9%߱JφšU/Q=p͎ն )+L+4VR-yp9i.G׭[7ނm$kakPsӂh7Y.)`PwG,B 6!XaЉkxl0ɀ/q.:޳۽xZ;4_qSe_АgTNquzЋ:*,_9ᠱo 8 q~w;3ZN !{0r`Wkg{y!&c[PhPN% fumd ,OD!7ly8Τ.iCF ./ER%di]깂;Ƚq-}Ek̩8\b,j;kIg1^~˱Ń0+'٬FĢ͍uaenqqBH^*W.BH\W PR|x^Epk@>|V(n>)16",郿/О $,u[x(gdT{>D;{O/Qw3ZߛL9/h-8- qW2 d#7ܙV~eeS/^)%X×ouT%R͵?b 5rU_mk1'[d۹Z*|yuLa+:KzCs!Y| a>b=Qj/Y7yZ?Hu#ZEF\GLJd~CA:sRp|iO5 iFSE >|w(:!=3M+tYҳ~g6qns!DOI0"30teyTع\AYaܖ ke6<D.%XNA|b=*F! Ӹ&zy`MOD S==5TT3#gwK[ý2**kvH lx_I6HQxwE*sZ紘ϪB,X}C|jD=N%RCd]?h-;SaZJ58e,?;;Fm IwC`#%JIȦȃGׅ&Dz&'!,wW'f#f`ըJN 8ޫ@\VMux<4si#XItG7o"{"gd178#F0MۘJ u+T~mC$ Z r`?B9z&@qdyA.bO95s0fvxE^ P~uX sJW-E&ex.=-J%f u2'i;=~x튌<`^HIZ@-tbڮo{ DQ~E (d| Td]+PaOТ"?~Rn$'G2!Ύw)2 3bHBk4oXokoqA10# g@gjlgZX…BXS/bWOT4‰ӄ) Ru@9u[(K+E1Ksߏ5yH8*#_|n7l8MMr|E`xt>*e;A2s:X񢀣2 Ǩp9M_6%=Xk |eRG!fPZ*[q EԠ^ue䊸eKzDws17q#9^D ·^XL2bPY= kZKvh@Xۍ RV!F=ְLdžd Cd66]m]z/zlzʨɂ)~oa}i^zǁ3{b4ߛEsjK~+&z=S.#f:#%݃:5d`zփ 8 lu0l H] E<h  rr'lfQ52:IPu0 ~N‹^`Ifcۏ%ځ-e!;0 3h% 3Sr週+!}NdHܷv-tgXI\杛k< C拉gJ9BQ}SD@K[c>s;bv)Bklhؤ>  2n_ɕ7V ɌKM؍TeObZT7!ZY5Rg06k) uZheGhI=֌)Fi|VWzbmdyjDBdG*ʼՁ&L4v򫞀eH3f2ǣaA6.1_Y^8in灲v+U!~N_ &U {3hʁuN08: .s9-1_=j媍|WbI2;r-T-A#f Ƨ\V<OjgQ襤|s_0uqkMۘN{X&;Tenni]L7dk}$ъOdYҀf:CmN+^Wgb\vS~EmޯC:PYU\}ᳮxebn2 {Z:dd ^ 8^oi eTۼf|c"ԑڊ瘕$.(=/NYYKu!ݬg -<=K<6!X <&p!0ܾ)(n>y۳` W 1[$>Y ck e1Qls? C0]]V/Y;Ԛvr.hPkx &Sr‚Su-3Cq3 wI7 kK<);bF(sڲ븢m 55}eW`F@N2@r[K <OYFCp3}Wfҿh")g҈N#,!Zw 3.E.PG& v)y|#XPh^qĹlfu+|Tl2\?eT㒪9#Yr1KX1PtvgzyS=-0tB~P3 lTnܵ 5D&;լ¯e0;`-cQ ΗDe*H*/Eo/ݓ 陸&1`PPGӽ/·Ҏwyn!4]:al }[39~G8ۈ3S FySǴIO419'mqj%J2Rh^B"x~(T޽g2('Gv 6d BAqtqAMch. @9xאּ ڗ@ V٣&& 'PmNB$/$m +>?tTΡ[*aq_W1@FFvlбJI݊NϧHRcS "k<冷dz=jtKG9zȣ׏ivH,$U7dM>%R98bra3?>mQ6ܤNmi)=IK wuSyrsFc?jR)2S%2St3F `ug׏t~nr+ZhP|6CwmG1xRk"*_hl+* JEBr"{wiojo Uh!uQ/)[ba&,Tצh߂"Fр%Rk27* 31XcF}/&,Hqz*~P(uyy5+$1I#w7yʒ" r8|_}vׄ!@u>>Pns9Go8!74;$<O#EUڨ>06SZ>C9!5(t⮽uP +1׀8GƓPGCimE`jAEr$a'b!wJA6gK®!u!д2i(/Dω<9sNM sJ{S+ tȔIU򐛠d1 f_>ג~kԳ2P[l?)_Hb}gГhՓ۪Wjo[ Cz[Q5}% 2f. }"cŲM##랄{yUs`#q ?n }Gw+S-޴8|R 0l(I(V&g\>`Hw*NHmAo,yK\gE5"$@D+u7]]nGbi%Ph 7tT0Aɀ/A"-)pEPn7fiƧz/즻.xU[> ݽokP09 l^/+~Jzs h_r 1DB2] Ә\ޗ}PCѷ1L/?[(&!I;9a bVRXr8\d?Y҉0Lmr].Z5zU&Qod[9oca@i.2W̜QC 5Pʞ:;fv*|x?Д .KT{ @r<cCĔ3T<} 9ȭ&ߊ<1Z}=v,|EL U Ap[ⵧv7vcqIz|24c0voZGՐp7؀^&)/CI l#ư@JNcpKkfLGk^8# TQ+j?{mScESr3v.Q< &0ZYe3 /rx§(j/q;YIl>}H <1<1bF*. t1$8k~95]&=-)l褘}B(J<^SB̑*뼫 ]?텕ZX+t;>Kf?nT%j+q:r׺ĥ"⃯^AT;@V$(Y. tvJUe*ꮄQu\Pz>)0 \ ѐ{uC9U>\Oo8ŝ j3ӗw ބ:|;:b0ff%W)¼yȇixNFJ T! e "+tE׼En`2'Q#a۷bD#gMZw~(II>2tA6$ew4|ȋb/yJh:nʫ9Q P 6Ƿ9"ܛP$=뼋]uHhA)CT00IZ9TmѢr~ ԉS}&Iˢh3̕n\G` I#UQS4T@|/YwSG22ci"z! L \Nemy|f#=V!heB@%*4Q~u.O_\8eC,, ai',=L1fD~^)srwͼ#Nj}깂MϖpS5zc̃ʇshńP%<<' %CT.sYwJC&07S!C3q],8=\wG u< f,ԢZZyE^=,+(X+Izz3BS'WMʉ Zh}ߘ~nH{ nsuSry}&N)H{+y={Hr;J8:P(|R#<@IBt(N'T|C xTUi ;XՓ4pɛ=:UӾv tYO爼G^YJxv3;~_@)7Օد-4ݱ4D9& -lRʭ\]9'BQZ 򂴞XD0q!`Rf3K MKXg]A> 9צ"k`FnA59]ZUW"1=IAżxQyڏ& W4('b5xI:/B|y %}wD!ӳY1FPVm=xMtݬvS4eY+Sx( ÂY"0iUG9p?ft& .&u$]gkz챧FQHꙇ}v%P[x`lۥ#Zj8,cLuxg)m(p26oh#L6Ip,D_u% pWNꡔ;j-rvXf-({cX:3v["sV@ q,>OBEIJ/Ѽ6jD,}zt/S(h7 Yh `"ep3H.Jm׋՚,H.~@n=Гܿ0˘^$Nzְ?Ɣg:m)t DRxj"/֚8Dإi{Fwdg/=K$KK26 ^kXMbjQ..e08>Ad4br3miɘ"sT$5>P)z:q=H[>F4cYD *y٘IPZKJS3Q+)scԕ 'NUh5ʧ*Cv\(" |^<}24# ЛᷤJNmFsqE%(^;#PGX juCҮ|;[DZNkU#ǰ$1cw]a_R/lN}t Qw Lpܳ:5S7nc" (;h WFlO:Ox @N1\Gr-Kgޙ:m0Mjl]}Kla BDɍo 8x>JhrI.m F;*}Zx"PMFb @he68TpU?==ND2]2 9X&Ein;V ,X4vV у Àz1:09Mp#<86-*Q&%ֈxejXeWKGPUM[Ȁ-0=1 }f BNWoVW O/ xyg$]VxsfHncYB1W;/N HIuiD!Aw%b4fW,Wi ݜ9\qz)?nYz6ۇrSǖwG\֨'ķĚQ`(^y>Dg1L^7`I9OE Hry/i&*Lxs/1\'Ly\eبM< *%ɰ;֣[fX0,4n}~  \" ! @{?G͗P*3㴈ꛆ'뱯,] 5s$Bv}Cy}^1k+/% ZcԖ!7ts.?XUS2 EbQQWa:68x~|J^֑iYYc^X_"'S_/Ɲz-aG4Mg" Ear]HK(\?/F Kv]8Mv5q`H_+j~3[F;*r;AQ{IG>W?ie7aQX.?˯FM`OՖмh0-5udEy#&0LT-1Ԡ;h/:qn+]|zwOG}@n[H {JqytnA(czk&׹ H\N<Y;1fg 0G.wÄ1s T;^j.k$k?.9.[/XbBP:W\Sg|+t}/V|HV>C6Nb&e(.p 7k]Z_={ڕНėa5*5j5I GO7Q~ͳ0'$P n}m}_+9ߟI*. ݁tTF='CjbsRW>-IWhҧ&05Cx ;WZRz2έ;-#@P hfZhx#Yɡ^+b=0]_! ۷9ڦjFx%Ď̨2C8Fq̤TdHMb;wyYw`qS0c6 7V+گb() !) 9 N(H*e2*J((飈N+wIWLYfWaB'_y>7 |jFo:>dk/(So [c1kK.wPdxT녣Kͻl7`\B[$td=>z-?ny2Y% ~{Gdr&?=QI5k"ca55ii@B9H4UAm*<w2kJ '"߄|RL=դQ<>-8U:[34݆bG_}۩˳m%5a F^w Qc8XgOt\9~Evz9k}Y/[83 !eA̅ҰIZKɿu3pP܇lgto<ӥe:ދA\GC3/5(*8x$L*~di8 ĥ:%Cy'XD*!%ع]U+ ̄9v+u5eANJO({BnlO6=ȟX[[͂]m$x ~$m'H8Fr"k Ad JA|#mPLY^#VΘ'`I,Yسtyug5p }݌EЪ4 C0Z&]P!WAN0*﨓 D۪nc[5͝`o˭bdoUu x8pK25SbD=lR苎G1AXNϯHR۞YsQq'7k^sRw?:V\<ަ2%Kb" GnZCn2t,=JkaObĘ@pLTζ/t`QS֔^ 6ʸsAEjQ=]8ovZ+6!TyM'DNB2b `c1-[J$~w"G dSUQ\ke[C.t ZL0%A5Zdk EJzWio45]/5hq_xgNTs25u4%A)>~M&p4jHX+pG#ޖ6}`"unb[aVV]M(Ԏn| n"r}s)أun ^ΏMǟd.rIQm 4y I6aOI 7gwP33tIEYAIE@o˜Ÿȟfll%~LoԧϒHk ,-U''շV W ,]55odϲ&ګFW/I=6ͽizKyJQ2 TU]q&EOh6r5Yѐ˦2??8ótdж,9_='oEY&5Ǜ6k(#kMo^@*O 7o҄ކZXq!h(tET+Xn7ML:_L?X@֛z4^f|H# po#nl9V߈!(+B/cl|p7OPxhu 嬮HV5rY|Hm@jKv%!Z:'ufV?m߀}ɼqMÚo'_7(hn M.$&f#b%ߝ"94cӯkò 3GRs; < 1ѪmgF7 R[AqXU'af'?v8*,?M/(ܫZmWQ POi0X =>\V@y< Vq@8îD*U0 NnmT;xgq\^c WW(2=]bUȣdHs:PF)S.(#݊"{L]DW:*3,⍁G~GQ6֏.H"Mr1 WZw碣GSZҖ+~'fB ӶI; ]`ݏ N,gEPfq1VMGxL\^+"HE:^[[0 8YCIZs&cb6%bHNjnH>%23GV0q&,'Рޭd մ~LMƂsjwi׹Ng0$>R ~cN^=:V3b5`|LF3g*\=He-TRz'݄J}NK+pB֚^]")}:̀Deu WD2ա-EC;`Zf4$^I$A~J>7(D @"c; ݇a7ԡ?@ZH:UyMk^wh߭~cҖk:s%9qkF 0Xba#nl ,uC_8CX@H4qtpnޝ\c^ ?0}"Ksc9^=٧i^~@Ny~Av}`2R ގ/XTӗO#nkspE6<([/"P1 %9C{ӏ֧ӻa[pבɦXSń%SyAl3z^&,m?Z _lHq1>O%ro0gtGDa,$2Hf& +%X3+, F+W[t/5k0+0Ryb=\Us ! >~eAIf!ڒ!D6ݏ{|3OHL ϔ eӿّ]v9MvZ;)76a!Q ͐UBW&❋ f/yiN7ep%l80Sg8,#*ZKL6 ,3u7ON]Z#qO:Gz! 3`9TOٴ-_ZRR} R}]N"+n'#3C[(P,=/Dv a͒J S; y$N u&jQWӮm~"&йkgl.W ʵsoZlF hʽy+N+y Z.>2;fܶtu#bퟚ`zƒAj(kg,Q/&J}g+8HJʗ"pKЫn`2hA?XkX樷 %