p11-kit-server-0.23.22-150500.8.3.1<>,e:;p9|h 7OR$5aQ/B Y3M7GC~MzF1{@&gcn\Iá%0pq(!ޠZ>z2] W 7A܁q(,'r$ 4n$w|K&GDFodzo$;Hh>4?4d & M"/ Ee    : <DNX %(m8t 9 :E F0xG0H0I0X0Y0\0]0^0b1"c1d2Me2Rf2Ul2Wu2hv2pw3x3y3"z4\4l4p4v4Cp11-kit-server0.23.22150500.8.3.1Server and client commands for p11-kitCommand line tools that enable to export PKCS#11 modules through a Unix domain socket. Note that this feature is still experimental.e:;s390zl32HSUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/Development/Libraries/C and C++https://p11-glue.freedesktop.org/p11-kit.htmllinuxs390xXe:;e:;0a1c4f4245f4f7884f0bf2dc78e00fd737d7831a16ac0cb83a7fcf72b81992a573a7c453b02ebdbfb1ef11d21199c4f771bc6d77faecd345f3c6db6982d1c8a1rootrootrootrootp11-kit-0.23.22-150500.8.3.1.src.rpmp11-kit-serverp11-kit-server(s390-64)@@@@@@@@@@@@@@@@@@@@@@@    ld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.8)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libffi.so.7()(64bit)libffi.so.7(LIBFFI_BASE_7.0)(64bit)libffi.so.7(LIBFFI_CLOSURE_7.0)(64bit)libp11-kit.so.0()(64bit)libp11-kit.so.0(LIBP11_KIT_1.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)p11-kit(s390-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.23.22-150500.8.3.13.0.4-14.6.0-14.0-15.2-14.14.3e7ca^@]Γ@ZX43@V@T9T;pmonreal@suse.comlnussel@suse.comscabrero@suse.delnussel@suse.delnussel@suse.dekukuk@suse.desbrabec@suse.commpluskal@suse.comp.drouand@gmail.comlnussel@suse.de- Ensure that programs using can be compiled with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705] * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch- Backport IBM specific mechanism and attributes (Jira#PED-584) 0001-Add-IBM-specific-mechanism-and-attributes.patch 0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch 0003-client-Allow-zero-part-length-at-C_SignUpdate.patch 0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch 0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch 0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch 0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch 0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch 0009-rpc-Handle-special-cases-for-buffer-and-length.patch 0010-Add-support-for-CKM_AES_CTR.patch 0011-Add-support-for-CKM_AES_GCM.patch 0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066): * Fix memory-safety issues that affect the RPC protocol (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered and fixed by David Cook * anchor: Prefer persistent format when storing anchor [PR#329] * common: Fix infloop in p11_path_build [PR#326, PR#327] * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325] * common: Check for a NULL locale before freeing it [PR#321] * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323, PR#330, PR#333, PR#334, PR#335, PR#338, PR#339] - Changes for version 0.23.21 * proxy: Do not assign duplicate slot IDs [PR#282] * common: Get program name based on executable path if possible [PR#307] * anchor: Exit with non-zero code, if any error occurs [PR#304] * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299, PR#305, PR#306, PR#309, PR#311] - Changes for version 0.23.20: * Revert "Fix RPC when length-s are 0" changes [PR#276] - Changes for version 0.23.19: * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255] * Add simple bash completion for provided commands [PR#258] * Unbreak list matching in enable-in and disable-in [PR#262] * Fix RPC when length-s are 0 [PR#259] * rpc: Add vsock transport support [PR#270] * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265] * Build fixes [PR#271, PR#272, PR#273, ...] - Changes for version 0.23.18: * rpc: Allow empty CK_DATE value [PR#253] * build: Meson fixes [PR#245] * build: Adjust feature parity between meson and autotools [PR#247] - Changes for version 0.23.17: * common: Fix uClibc-ng compilation [PR#237] * trust: do not allow daylight to invalidate date validation [PR#236] * build: Port to meson build system [PR#231, PR#234] * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232] * doc: Add 'server' command in help [PR#229] * Build and test fixes [PR#230] - Changes for version 0.23.16: * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225] * conf: Ignore user configuration if the program is running as root [PR#226] * proxy: Refresh slot list on every C_GetSlotList call [PR#224] * modules: Fix index used in call to p11_dict_remove() [PR#219] * Fix Win32 p11_dl_error crash [PR#218] * modules: check gl.modules before iterates on it when freeing [PR#217] * trust: Ignore unreadable content in anchors [PR#215] * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213] - Changes for version 0.23.15: * trust: Improve error handling if backed trust file is corrupted [PR#206] * url: Prefer upper-case letters in hex characters when encoding [PR#193] * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202] * virtual: Prefer fixed closures to libffi closures [PR#196] * Fix issues spotted by coverity and cppcheck [PR#194, PR#204] * Build and test fixes [PR#164, PR#191, PR#199, PR#201] - Changes for version 0.23.14: * proxy: Avoid invalid memory access when unloading proxy module [PR#180] * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181] * build: Restore libpthread dependency [PR#183] * Build fixes [PR#188] - Changes for version 0.23.13: * server: Enable socket activation through systemd [PR#173] * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules [PR#174] * proxy: Fail early if there is no slot mapping [PR#175] * Remove hard dependency on libpthread [PR#177] * Build fixes [PR#170, PR#176] - Changes for version 0.23.12 * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160] * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167] * Build and test fixes on macOS [PR#162, PR#168] - Changes for version 0.23.11 * trust: Add extractor for edk2/cacerts.bin [PR#139] * modules: Add option to control module visibility from proxy [PR#140] * trust: Prevent trust module being loaded by proxy module [PR#142] * library: Use dedicated locale object for printing error [PR#148] * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134] * Improve const correctness for P11KitUri [PR#152] * PKCS#11 URI scheme comparison is now case insensitive [PR#156] * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135] - Changes for version 0.23.10 * filter: Respect "write-protected" vendor-specific attribute in PKCS#11 URI [PR#129] * server: Improve shell integration and documentation [PR#107, PR#108] * proxy: Reuse existing slot ID mapping in after fork() [PR#120] * trust: Forcibly mark "Default Trust" read-only [PR#123] * New function p11_kit_override_system_files() which can be used for testing [PR#110] * trust: Filter out duplicate extensions [PR#69] * Update translations [PR#128] * Bug fixes [PR#125, PR#126] - Changes for version 0.23.9 * Fix p11-kit server regressions [PR#103, PR#104] * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99] * Build fixes related to reallocarray [PR#96, PR#98, PR#100] - Changes for version 0.23.8 * Improve vendor query attributes handling in PKCS#11 URI [PR#92] * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91] * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user configurations [PR#87] * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86] - Changes for version 0.23.7 * Fix memory issues with "p11-kit server" [PR#78] * Build fixes [PR#77 ...] - Changes for version 0.23.6 * Port "p11-kit server" to Windows and portability fixes of the RPC protocol [PR#67, PR#72, PR#74] * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71] * Build fixes [PR#63 ...] - Changes for version 0.23.5 * Fix license notice of common/unix-peer.c [PR#58] * Remove systemd unit files for now [PR#60] * Build fixes for FreeBSD [PR#56] - Changes for version 0.23.4 * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31, PR#37, PR#52] * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY attribute, used by Firefox [#99453, PR#46] * Add 'trust dump' command to dump all PKCS#11 objects in the persistence format [PR#44] * New experimental 'p11-kit server' command that allows PKCS#11 forwarding through a Unix domain socket. A client-side module p11-kit-client.so is also provided [PR#15] * Add systemd unit files for exporting the proxy module through a Unix domain socket [PR#35] * New P11KitIter API to iterate over slots, tokens, and modules in addition to objects [PR#28] * libffi dependency is now optional [PR#9] * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45] - Changes for version 0.23.3 * Install private executables in libexecdir [fdo#98817] * Fix link error of proxy module on macOS [fdo#98022] * Use new PKCS#11 URI specification for URIs [fdo#97245] * Support x-init-reserved argument of C_Initialize() in remote modules [fdo#80519] * Incorporate changes from PKCS#11 2.40 specification * Bump libtool library version * Documentation fixes * Build fixes [fdo#87192 ...] - Move RPM macros to %_rpmmacrodir. - New server subpackage - Change keyring to new maintainer Daiki Ueno - Avoid bareword to fix build failure - Remove obsolete patches: * p11-kit-biarch.patch * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch- Also build documentation (boo#1013125)- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox detects built in certificates (boo#1154871, 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch, 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)- Use %license instead of %doc [bsc#1082318]- 32-bit compatibility fixes: * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39) * Add p11-kit-nss-trust-32bit NSS module * Fix potential bi-arch issue with private binaries (fdo#98817, p11-kit-biarch.patch)- Update to 0.23.2 * Fix forking issues with libffi * Fix various crashes in corner cases * Updated translations * Build fixes - Make building more verbose - Enable tests - Small spec file cleanup with spec-cleaner- Update to version 0.23.1 (stable) * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582] * Add pem-directory-hash extract format * Build fixes - Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff; fixed on upstream release - Remove autoconf, automake and libtool require; unneeded dependencies - Add gtk-doc require; needed to build html documentation - Remove redundant %clean section- remove patches: * trust-Print-label-of-certificate-when-complaining-.patch * trust-Dont-use-invalid-public-keys-for-looking-up-.patch - new version 0.20.7 (stable) * New public pkcs11x.h header containing extensions [fdo#83495] * Export necessary defines to lookup attached extensions [fdo#83495] * Build fixes - new version 0.20.6 (stable) * Make the p11-kit-proxy.so module respect critical = no [fdo#83651] * Build fix for FreeBSD [fdo#75674] - new version 0.20.5 (stable) * Don't use invalid keys for looking up stapled extensions [fdo#82328] * Better error messages when invalid certificate extensions * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files * Fix some leaks, and memory issues * Silence some clang scanner warnings - new version 0.20.4 (stable) * Don't complain about C_Finalize after a fork * Fix typos390zl32 16983152330.23.22-150500.8.3.10.23.22-150500.8.3.1p11-kit-serverp11-kit-client.so/usr/lib/p11-kit//usr/lib64/pkcs11/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31290/SUSE_SLE-15-SP5_Update/d2461017bafa557a22e90431a0c28c1a-p11-kit.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=5c8b094e1f3b5a8500336651ed56aec6fc1817f4, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=971e284ff3718a477750370108876180fdade8f1, strippedRRRRR RR RR RRR RRRRRRRR R RRR RR RRRRR RRRLٓdXD6Ue:utf-8ffd8306da1ff783dd18177b61e04425a659b9c7264a37c08e8f19da97f736c32? 7zXZ !t/P]"k%ĖPdD{xAq?uA~Y<7?̶Zu2f"iUTQ}i |<XkZ7O| jrw]i;px{eL"eo,ok'P#uϋ3 tSY~*A`t0SfV]80(haч0S~oqe#NW<9L25* 3)Hh˅0ZDCDGŷw bNTsh6fO.Q"#9@@uS|):rڗƷǚ2`oK*|֜g0@oLNb 9cps)NAg,Nei Q#ʾdx!@ < gߪ랻 pPdg5Ϛ5˗V: ZIHGq!pr^\xr ?oCfT_: 6%N[֭yT8 ߟǖnA*KpNt͞AO0#amsL7>ftp!u ǃCtQ֌rmGEZERv fpV{ju -? 63`a<zE+GtP`ndh76XcXr5>`=1STKQ􅄠}p3MI>ڏ`qҗ6͐ 7]>L <) M%;yDG ,v M!{ :o?ƙP8> ;MZnu 4ȫ2C_<4K.Rc8\]h"fQ8HڲM'F^2 ؒt難P \/MH2:-˟kTasYl яr`x3̦#9+(| U >qH•JnUzQ &6lA1/vbNcm )|gd9n΄+`9s];,;пlO,FTI3 TTp@JXwq9=*oN”ir!8(udZިȀ %(\ՀEȓ [`bFU?)B 5F# DN[EE;Xgܢ>d>7B(F,W8\i>mTeCl3hJ0 =\A#yWs% - j hCn%SOZ;ٶ?%8xS۱HW#9e7A~pŰ4T.vd:)}Q[Nd,q%mzA:ftQC((9TI3`*óp,oJN z`EG).)(%܀ F@p @kKcsdwZsl#;y PT?'`Y\뵧Ny9 ~~L-+6 t`'sf8̏YP*p,kj-+ LO̲ G.J?6|j'ݯ"xZ-3[r5yŷ`=8*FC}|,(6|&u$ZT]6 &u#D=x> Ԅ]JUQ6L|^&ќ/k5Z`C1Hb% q8+'I?"p\a05%܃?PɮiL-ПؓV+,r0_'Ze]_A6ZɡxR+%qnLGSNp:8bA-!bTgbTP8#t&.Q_T/#oE VP ZH/B *;ԡb0øڨwkE W Lq" 9uu=Td6l_aL- _Iܩ;&E}*cDYs3ToB[LRTpF+~G,$W/doRf_IZm74Ibf-`E[Q$[♃lcyW3)q4q>M"Y2E 8yzFD)1ԤS =ԠZKOum}88Gwl~F~}xx.FvjZu+gl oI>xL%Rz>(Wg[)d3 `[}J/ ~ZH0e H3\-/">8ͨ]ODx;RyY%[3pۛV(Nb;|RD`-9 0M:[ՖUԠKOEdZ0hcw 9i aѹ^4"1}qΜDܵ,aҙ6Ou+ySݿ}I^6o;Re_1؁]8SC5Z4\P4cIcWCSQ(s! ( ~&%8^}NnD]kQ5Z˵xEFoiECq i9Fìo&9'ZO]~3 7\>XH2%n5@񖪞-0ɘjZ MA`M-Ɂ=@p21~{p|ؑӷqEX*sz:MX9"^@_ 7,EB^i&*eMf _{LN5-W+̒}?DjNDUr 0N:)Ly)!%HF "X,b B ?3Y ?Leoh@_Ǝq.L5,x DdS_{`'y]S ۏw iNOC4Ok .M&bGJS-7" vNezC:}'Н v$KM&&5Bc%cTA/#VO4a8p4gGzǥkB"*;ggv*^}u1Q t.CM ﲽ*घHGOP!XG"2z[ Vz$toO/~QRn&88.&[~FyK~b㞡b%5zT24qKXp {QN sxovyYi5lpJov{2ծ9T]yE^ʯBߍXkY4P! {!J F.)7W\Ova…_Dж+k&rC ~l+Hy6}#Ay*6lbvU!)6R[y>,Xf5ty&EڛfU RV^r-2S)j| "l3^9p3N w%nI38낔! Gvd=,̠Cil# ȋܿ9v ?|kFhYKwQ`\l׃%؜{P10Ԇ(NFbm@dFE)޿3DHA37ܧӧT;MrxtM [=DF􌫝j> i{Kip>Dlc$ $o]YΙk r7'Z(w}4Ù4KCQo7ŋqnŨ)^GB `݈N-tڡ4I4z ń 7  d1kM0Kb{ ݬpghM~k募C#uȞH=lfIR@X8psR6l ]hݍgx4 5(S= oϯ_fI\"5m<3E3KjE PI]+SO:}\3 ꂐiste J) %!ЕF4czJW?2t+OzpբsN0gyh2HWiX3n+` a^)YqrkAmf>aE60-BA1Igk휛O`p.z%X@򛷙Fň3W$ MBRu))mm:N6ESrff@3 lqg p-IC׎9 z=Jf ҤVɠT?Ekӭ' 뵫)as".QA\֪:c\ o=yhqP:KvƏ3M y?76MbJKh# 5M;VO3v@dS9W YI|*gw||4kGK- )CG_?3Qؗ 8fv[d*@]c"r1N!& `tEuoI؛nIdTI- K_v uڧEUfKXLzŸ1\Gu9O&O|)>PO0f'D-& B/X[ø]- Úm=Zy6YS cߛá&OJь5} 3}m*;jAF?! rCj\ >^y}[9'i7%}{J1(GBQ{ַZym%4|{.9𬝨_Es>jj56ekhP7VlQןV[ii=! SbӵSRMxE xn"@dW #ʶ|: 3Q{svhK?pFݢ钛oͨh85@\մW%[۷ ׭o1p:ű=?+iB&# ï~~"UKpP>8,\'|S!a1aph=I7dtS}Gy`=K ܕR~* Y #쒅6R9V0eZG%6$Eb8M1dɎ}r70Zs\v9k4N9:-c۵wA`h!Yod?UPX"=<]~*N ds5{;tFn&Xu#=D3YڷlBҍ&p'W9laToj>=9z _]F%8׮hâkMʆq;kFdߟBPycJ#\Zj}ʮViVAHdv@=y:utF0Y E*J@Cl(W;=Y4-D'dʽ|\zWkx"ut9ؾ^ A8/ظ~Ð,N 7{7)IXF7•:ȥۃū"]W~+Fu Is;)[g⫂No+}`ۢ}%6o7hXdn}%ӜGhY05pLWcb^_6\lxVܪ!Cvn|g0h,nNյ$f4i19,؅0SC"<]x{DskP\/hY+ۇ.j-)@0qPXoݓCFlB51cƹy:)G&(DW%+d<ƐA_~7&wl֏o22TH8"ؿcW-*}VAf#ѬkEPg/UAv|˖s]y&ԲB9ϖt[ px%"#LOǤ`W*ve{Eh_nrnJ B*'B]5ؒrxnqz=',jWMJPiPkqNm x!)OEI~ƒ Z-:OE,O-rMT NSzR3"7kIc C!NO:ߪڐQ59LQDxQ[&mgM|R |X& ,>™6=ƢZGmkT ^پ[4LQH̳"U}a W"jޠPk% h&3w7H)KV,iًm`1vñ^hl=YФFCydzas叕C!\ee+Ud%oDkd*TZf U -fGV-Sm0-v.DrK]q@ʊn-kt]WdQ7QBifIR';P0_L&C:'/-J׭~ 1"~k,?G(ET[E+!=jƘwRAj>+)MFi,N ͰP8%k*&O,QMAR2:# FQF|MRR^уYAM 3p,Snp؞dSqFk(?W%?K/;λ.CpĶf023#Rcral!a851m(l֧$@OxRF Z:R1DT6&K'', p$.N *t]c@12/Ϳj;j2aW[j@cE#ގ45&[՜Uv*_ ĩ4 j?rf?g?Å$ C\GЍ*^O}AXjDe8I!w'vp1KW nF+G u6wJtЦo5X@ٰn[<Ge&81oO!@UN!|@,G왜F@L1 & Ur~|Qh_G!.${O'<6^{z&"G T!:9 ( sVh Ͷ~%FQ9IAi˛ %6#tR$ /μ$1tS>[¶? *6B@@8{= vF:n8ш0I\-6 OBD]'qVjTx'S>$ZfPtyAޛ7p,_D7I1& KWܷouA!?vTf/|E/AaDO~ e%y!!{hWaz3'ɴ1N34גoBz'aWFqw5̎ZU6JƠh¬̧;`ЎeO|#_w#1\S}#y0:'lkLw`&qk ku*/'%M̫ DC TBZkxZ2(%Н߼Cck5oBxt뫳ĔbckK@xcnF;ʆ-4C'Ev'.Lc͜c;)uu*FFP){͊B{9%EnlN фi8|ɜ^tJ}%|9Is%D/E3r1IN QUgOT6K5o'2"_-&A?| %:YOf1U1g֫^b jW/M܉)F'-r],*Jsoߌ>}Ȗ?_ڂEoBeuU'VU#K +|@~-Gtjxa4DwSO&ϹtDn&9brvzS%~_;GzllRGf o wI{)xE~c g;#%JBdD͜ `, +V#Cl8gk0!'p+w#f~!."Q1f۱|ͽQz^Nf]Ar@10Bau#{F_T(UW\.OBhӾ}"%" ]qI0W.6 05_vPL B@UޢWݝcؒ$:]5l.x}*+HA\:J'9Rz P!yO20 c% J4Q9VyQe/u"|1iF.|?U 2trgKW$ 쒈q|{BG^OEr=&]O_䫊`vG`Q(6˿+1w/tK<=&&wFQ rT ds1g.t.Z| 6J`Lq濚0 w?m,:y8q \u5;W.-9̗-IYЏ%ruPEퟖAINnP%PɗWK^ R䘭H/5 =E;m)*mg0:)I|.vcuٲH׊hvQ12p5$t5m| !5i"sw<˯iW#vٹ\5L^𘤘5?=CypJ.b` vnZxO~4 9kHe?LF'z{,bUk*ȥ;@vZ |`FTrN90e9@d8a!S, 9ٿf̲ģAUy:PScle<Ѯg7 ?Jm؍z/iQS ~h3E H#'dhsy4:SfN@IRft[ؔ0S( ^rC8bo1UcxߞĠX ױZIDZ2QP:!5A)/M111#ۻj9 ȿ`np15[\Ş{PiIx"<Ms0nUW Ib <"cI7Tٻ49mcޙgjXt(pHc-)RHR8okUA{lq"M+B#!tX0oUO%֣(S639hSP;_p=bzxGuoR1q bõH̱gNbnEag8]$Uq>Y '#Z*~HBՕYh53`v,Ӎ230kW69`l i/e_lkeB{]kB1{= QF\)Y|x_5͏uwZVO6*Z6 TUxCi'r.l@Iސ)MysCUPnJ UWp98knk h3pd` H5"`3o\ڮ:W*DNi2G0vP?6X\:u yB'M[,<i-QdXj#9>Z `4$vedI5[*jW8PқۦXȲR߄ӂ0 [„C>Qs<Ϭ 'K+W#0 rB4Q92uiڀ[Mcx2~N!6m 0rar!3+pU,ўJQXSsʿm9Uxb[Wp<3*aM)c[CCFҕA/bW%,Ƕ@I$#c~f |tgk[<+xiƧwHwA;RxVjLJ`7~I{k$Bk=)\t"4a:TAJyt21x̓ц.cFNk/e~MB_+&jΝ^EARwP~ nӇDOSPu:h5P|ٝ'5%n/J_Nr7>en5'f pzncf̗C邗އ(և39#0uu[Zz(5qap'TO^XHN5ϔ)EK@u:i2ۃ#Wp[ҭ5uJݽ)hm[UǡYf8p0HˍeëBMl* A)Brik Tak}vnW, 9tٿڦ=.O#7N2&xƭ).^hJAK(RFփJ4{pקBouª#z vЇ0p$-e=P/iv M:Qft:rָQ ;=#sHTҼybQ*Vodd8Vm8I?UděLn?ȳiUyF'wdCZ˃A$"uzeT;*nT`=+i?$\R|Yv/-ӝe/.,a!-ňcOSj-ΜQ/MHM˻ Z2j>o*_bz#JۆC^If(hKB^ƦVz*Sȹ5Ww w2[vk<(LY oyI@gDx^T Vf$G24jT[GfGR&E,w)Z'L4~tvD֫Y:-:ʝK-XVLADsokGɓ2< gz̲~;e ~#~ oo]yo6]N*%yWE"DծbX/FRnKڍ~6e]rFNn]#О8yF vٰFeH.Q)h;N4Clbޒ5P4HM?@J*jL4 _(pd PoXzۓ5"dFHP('ИoHO-0*0JГcʒ+Ď*`YxVuW\&_hpi3_I*&E$zaz2Zfh6w/=XR˩px\t\9 W@ @(#= _X\ q]kw8Tx?#A1Ud I ] }4`tEbh@Rۙ/-WOT|\ľ Ei<|4pŪC8j?Jzh2CHlw rP$ tњpN)%𠞢zו; =yƫ \&byWx+< *vP @@oK@o\#pRNq)2'^Qqu#UE5U 'iYM*dl7q_F*'h!];ᇬQCxOA3S"<_ jQܥT`ٌ<so \Bĺ25epThԞm4>&Ya]c~