pam_pkcs11-0.6.10-150600.16.8.1<>,|XhOp9|Q"s9JQ:99VVVż>=2Gi_e5jOӸ5#|0eG$%rV#bi9}{=xP Eg+1~Ju:Ŋ\ bH{ >!-ϊY I0"CBݙ Ann8եsKʀs2R>IJ?Jd  " 6&8 Nd  t9X9 9 <9  9 9 \9 @9!]9"z"9##$$L$'T$('8' 9' :( =2>2?2"@2*F22G2L9H309I49X4`Y4l\49]59^9%b;$c;dLGPL-2.1-or-laterhttps://www.suse.com/Productivity/Securityhttps://github.com/OpenSC/pam_pkcs11linuxppc64le if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in pkcs11_eventmgr.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in pkcs11_eventmgr.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable pkcs11_eventmgr.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop pkcs11_eventmgr.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in pkcs11_eventmgr.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart pkcs11_eventmgr.service ) || : fi fiF"(  XHH H  8g> ( ="(_i ; 8 E6EoylAA큤A큤큤AA큤hO}hO}hO}hO}hO}hO}hO}hO~hO~hO~hO~hO~hO}hO~hO~hO}hO~hO~hO~hO~hO}hO}[.@hOe[.@\T#[.@[.@[.@[.@[.@[.@hO}hO}hO}hOthO}hO}hOthO}hO}hO}hO}hO}hO}hO}hO}hO}hO}hO}hO}hO}hO}hO}hO}hO}hO}e24eb295659efb39bdf56c59c6b2126e29d1a0adcb62800445ead20c51a67212c79e89aab0974402abc9411da4431b9d9ca9b1ac1c907f09b6d87ae6a2b1f84043fd4e62884418ea546390d29af404c34f74d585ecc05599bba72aa25f9da53c131ff417cde40bad00e7c5df30395e1ff1732903bc3a801db0b61abc6bee4d0e01310ac01e1ab61fd69f3975712b92fa035569ca44f1712ef615075c68f0640c1d049b6d68813c6e0b845f357569dd7fd78ec52b4a98c5a6ba5af8b5b745fe09f29db0b6e507c136e6e97c17698d7f6cfa198687affd2e725c332b555e5c3aab1acbaae6d2a1707341081d14f458de563b4535b3132986acd5d66e7c57211969c5e01e7586947395f1c8d421c5bcee6bcaa18e1743c86621c139c02876f845587a511d42da4d012097b3df55d144021cf2ed98b2b934eda56de4ddcf8f68b6fd11c202356a5156f10a6668a3e244a0f0234b3ec064af6bf4de45b369b76e06195c38c03836d7d7980e8fe3dbc0f7a0911421df1897a4fe5777688d19e60eacba35ac90a159fcfa5f390fa1ec51fad76645f02572fde9d99b0bf9190c46570fded619b22098a53cf3e2a0e535468c46a58951dbea6468f2c5716b7098f2e6cdd037b2b4d68e1145857a38c1e7a7dddb4c9a6bd2b01da77c16be8f4e493b046b741c18694065273cfbd8655aa87bd82e9c6ad74f1101cdc9496fea184f902593cc5a5e8294453f7b0acdd079fe687606dd1952aa8c85ace94ac76720e6a01645b715268e0a938155fef128a36fd20bbcbdbcc68229cb05882db74d42b8392883defca543bfc2e74e4520445d469834e2ebbfda30f90e09dcf3f283644b1bd31c08e5ac7af0a33e952dd5cccd0c344fa3255b1865f3b86ba2c85ad0c8dcf8afc2a90786adc85f218870c929ba49130246d55096b53ddbe243c43fcf000604dcd024eedb7ee6611c73fe69220bc3b774ccb18d7dfff7dfcd05ce96c44c7f3346df33f2f0405f9ba1cc07d60a0a036076557480f10d1a038a1e78b44d2b89b266fc696c50089a5c6a137d2be64b94dfd4d0515dbe041881b164007f8ca5385bcf78188b6f52d4a5ce7dc57b92275dcb7a9991be07be5417d07e691742e6f1fb3e4e729b2647732f01409b797bcb71a5a53775dbc2bb3288f5932b594ccbb56bcb8147c79e89aab0974402abc9411da4431b9d9ca9b1ac1c907f09b6d87ae6a2b1f840558ed62beb359afb96c6ae277740c735669862f01e330471f40a38ee7a3cc710bf4bf8da3fb658b6b07d79ce99ba12aca945c77b5e20a530500f7d756c5ece2b1303f66ed4c5da4000de8d3e0fdd716d3390008e388e1acc957c913c0437ccd7980caf8b7e060f068cdfc13ac5631f1ca982d76ce8d8b72db42a2188c4dc77a943fd4e62884418ea546390d29af404c34f74d585ecc05599bba72aa25f9da53cf6b5de0548dbfe62cdf51f9be893cc4eb3f66748193af0a973c76ea6a5ca49eb131ff417cde40bad00e7c5df30395e1ff1732903bc3a801db0b61abc6bee4d0e90b9fbb4dd495544fc3cc3a1e80bd013fb02677a3ca55ff9a4ffbba907385d4dcc83b959726b34d34f904e3828bad5100024e17f1a205ed6a12818a6a0ff38d3964e20238be9fa953632a00a1db19186d76477dfec71c0bd6a482d3a83b057e716a9758f298fa77beab9daee075c66a1f6469add7b42d495281d2b77a18bbdae951d79b1d79f755504ed5ddbd22b3741c3da126f86c47cfc9fdf2fa85843c633285fbff6d89fcd57f838119cba143b750467ce776d4f0c9da391846566ea750d602c9854f0619a32412187c216267d5aba1a5c0e8706ecc1e5b93cffb5852d993da77083b332201f3c8e7e2c13e8d962fc4f5154736a082fa9e85a7edf6123cc02816430f1e721af71badad8120cf06079427833f6364d88f7b6caf768eadc44114a004f1490bd721a24607ead73fe3ca8afad0209871e505cd35df7cddb27aa92d7c59a6744b8e577df930aba6fc51d7baa7234a1b06c0893e51a42e4ce319ec2bba7a8141656e0c4d8b8c7a8e6005679951f4fedb77fe5bef0e71ff828ee4770a251c26a268b0c45a1838164ac0ec0747fb04bd07d7543affe1ece1e11365a95bb326ca3a34843524f31298311cab56641ef39704f8cc5c9f8410f0adc1010a511a95317518984b0efe0a80bfe1c0ee7290190c598a68ad1a22923b39cd6d8c882ab24d11940db20bc4637ec8e9589923922baa2dc8c25b953f149b05b308d6d75762c06337c15ae0105f52b35eb10bc331088eedca160bfb731e4d79c8cb6servicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpam_pkcs11-0.6.10-150600.16.8.1.src.rpmconfig(pam_pkcs11)pam_pkcs11pam_pkcs11(ppc-64)@ @@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/shconfig(pam_pkcs11)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libcurl.so.4()(64bit)libldap_r-2.4.so.2()(64bit)libnspr4.so()(64bit)libnss3.so()(64bit)libnss3.so(NSS_3.10)(64bit)libnss3.so(NSS_3.2)(64bit)libnss3.so(NSS_3.3)(64bit)libnss3.so(NSS_3.4)(64bit)libnss3.so(NSS_3.6)(64bit)libnss3.so(NSS_3.7)(64bit)libnss3.so(NSS_3.8)(64bit)libnss3.so(NSS_3.9.2)(64bit)libnss3.so(NSS_3.9.3)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpam.so.0(LIBPAM_EXTENSION_1.0)(64bit)libpcsclite.so.1()(64bit)libplc4.so()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd0.6.10-150600.16.8.13.0.4-14.6.0-14.0-15.2-14.14.3h+@gf:\P@@[v[U@Y)@Y@Yp@Vvalentin.lefebvre@suse.comangel.yankov@suse.comdavide.benini@suse.comsbrabec@suse.comvcizek@suse.comsbrabec@suse.comjengelh@inai.deastieger@suse.comsbrabec@suse.comantoine.belvire@laposte.net- Removes pam_env from auth stack for security reason [bsc#1243226, CVE-2025-6018]- Security update fix [bsc#1237062, CVE-2025-24032], [bsc#1237058, CVE-2025-24031] * Fix CVE-2025-24032: vulnerable to authentication bypass with default value for `cert_policy` (`none`) * Fix CVE-2025-24031: vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN * Add pam_pkcs11-CVE-2025-24032.patch * Add pam_pkcs11-CVE-2025-24031.patch * spec: set noarch for doc pkg, add %check section- Fix for bsc#1221255: * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch- Update to version 0.6.10: * Fix some security issues (thx @frankmorgner): https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/ (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch, 0002-fixed-buffer-overflow-with-long-home-directory.patch, 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch). * Fix buffer overflow with long home directory. * Fix wiping secrets (now using OpenSSL_cleanse()). * Verify using a nonce from the system, not the card. * Fix segfalt when checking CRLs (drop pam_pkcs11-crl-check.patch). - Add rcpkcs11_eventmgr service symlink.- Address security issues found by X41 D-Sec audit (bsc#1105012) * Authentication Replay * Buffer Overflow * Memory not cleaned properly before free() - add patches: * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch * 0002-fixed-buffer-overflow-with-long-home-directory.patch * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch- Fix segfault and fetch problems when checking CRLs (pam_pkcs11-crl-check.patch).- Repair bulletpoint that skidded in description. Trim description of %name-devel-doc, it does not cotain the programs.- add service file bsc#1049219- Updated to version 0.6.9: * Upstream web moved. * pkcs11_listcerts: Do not fail on certificate error. * Do not fail if card was already unlocked. * Other bug fixes. * Translation updates. - Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch. - Work around incorrect upstream release process not calling "make dist". - Split API documentation into a separate package pam_pkcs11-devel-doc. - Add pam_pkcs11-fsf-address.patch.- Fix build for Tumbleweed: * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch * Rebuild configure with the bootstrap script (add libtool as build dependency)/bin/sh/bin/sh/bin/sh/bin/shibs-power9-17 1750070144  56789:;<=>?@ABCDEFGHIJKLMdefritnlplptrutr0.6.10-150600.16.8.10.6.10-150600.16.8.10.6.10-150600.16.8.1 common-auth-smartcardpam_pkcs11cacertscard_eventmgr.confcrlspam_pkcs11.confpkcs11_eventmgr.confpam_pkcs11.socard_eventmgrpkcs11_eventmgrpkcs11_inspectpkcs11_listcertspkcs11_make_hash_linkpkcs11_setuppklogin_finderpkcs11_eventmgr.servicepam_pkcs11ldap_mapper.soopensc_mapper.soopenssh_mapper.sorcpkcs11_eventmgrpam_pkcs11AUTHORSCOPYINGChangeLogChangeLog.gitNEWSREADMEREADME.autologinREADME.mappersREADME.mdTODOcard_eventmgr.conf.exampledigest_mapping.examplemail_mapping.examplemappers_api.htmlpam.d_login.examplepam_pkcs11.conf.examplepam_pkcs11.htmlpkcs11_eventmgr.conf.examplesubject_mapping.examplepam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mocard_eventmgr.1.gzpkcs11_eventmgr.1.gzpkcs11_inspect.1.gzpkcs11_listcerts.1.gzpkcs11_make_hash_link.1.gzpkcs11_setup.1.gzpklogin_finder.1.gzpam_pkcs11.8.gz/etc/pam.d//etc//etc/pam_pkcs11//lib64/security//usr/bin//usr/lib/systemd/system//usr/lib64//usr/lib64/pam_pkcs11//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/pam_pkcs11//usr/share/locale/de/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/man/man1//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:38821/SUSE_SLE-15-SP6_Update/ccb54b8152a4531969b6e4c51545deaf-pam_pkcs11.SUSE_SLE-15-SP6_Updatedrpmxz5ppc64le-suse-linux   ASCII textdirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d18fec6e302b1b5957e81af1f78fa03f4a13fa0e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=f7ea71c9bdb4ab1e6b348ae26a7612c12aa8ef9d, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=01df42704b567183488a3fc67f99f0f232f94ab7, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=38034808bb5ca1a312caee4a84c33ec3c58699b8, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=071c913ad8db9b64a091283ab1f9cb155f9b76f6, for GNU/Linux 4.3.0, strippedBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=ec300ced0d3813ec38ea4a64dcdabea0b471f9e5, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=828d1c12faefacd0a9f958f32de9706f87e1e46b, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=58f8e0e543de80de29b7f3dfc028118740949aac, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9bd63d89abbc52312c1da537ba6244f377b90961, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f29fab6cf8cb275bd27e52e598b84e8b493211e, strippedUTF-8 Unicode textXML 1.0 document, UTF-8 Unicode text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)!2ABEVgw RRRRRRRRRRRRR RR RR RR RR RRRR RRRRRR R RRR RRRRRRRRRRR RR R RR RRRRRRRRRRR RR RRR RRRR RRRRRRRRRRR RR R RRRRRRRRRRRRR RR R R RRRRRRRRRRRRR RR R RRRRRRRRRRRRR RR R RA8N*Y\)1systemd-sysvcompatutf-8f6160c447fa21a16a27e8fe5f7742664fe6c6aff96b9686769e485a0b18c11bb?p7zXZ !t/K[,]"k%k4ϴva ?-K{r<[»,G^pA.>t klHH6H}>daҷ5feN\N}jSz3οey>GO!vDS+HEUj8sA<,To3Y9s[/]F~@3<ڣP .#(+K|yc+x1ڙURHE%̳ W#5VMbÖ́`|(/i𴽡H(h1ϝZm#k-IqdLKBr6FN57K.XN%`e+%qI:/ +Y[poKURoIYP fŨTjѧ{jr:F]kXn(_=D!"3̮l֍D.u;&% oFdrJܖS7|$Zm ol: 6U2dfӍ8M+=&Itx=Ɠ^gxK,_;`uX4{.z˖,Ni#Bb}vqKde#\^=eZioX-z8L~$I|%)Yڜvb5T$[I:Pr`+Xg}q{/O2l$K;foݼ[-fN0I{VQVswUgEjuC/At{U֩SX&`u'SJYv7rQnU37'^K ղ*ǴΡSfPd Զ* vo~qzv_־8/:ڜ5W:X.Ө2`Y7>.TqQ?arIF{d#S,4p`C*dg_JRT=ࡶp>r|4[4CZгl<]<0( <Aa6KZsgN+`"tU['Xa$>a O`MX,X,=ϸ#ebc3 -1 >62Pm\9͞sc5D 37',(ĊR8oSI"lҗld@1(i//"V/*EZ:'w7k7oBLb_ #XՇ+wl}5U'\*{ǥ @pļn7zJ 4S},~jhV4X!A8^4<͕1q-,?b^\þAx+fȣI_G 18;Ebw;!=,X߽wޣcIA{x`O'*ݲL#_, 0!-g5}NeX8C,Ǔ;㢷 i+ (?#bRrs27,zq1m!b_ճUƉAPjIt`(b%$v;G0Be`c@DK+ +ٶ"XۇzvUJٸUmy9g!/y(0nlD|0B 6a`.iqV#/5]hUsvRoqZa""KKVjdw8wl罽y1/40X{H)5eе \9CuEԴ-BN!7.JYH֛ǁ5OP,yjQճc|sWI'/9G;eEA`9vx<3Ut.'IVޒg)|x?{OU*tn^6_ ՝ Dڛ|'KP- s uR*b$ZW핚%$7B0c"ܵ1i5J؎@AV3Ȅ3^A?K~#ErRiE R K~.▢W>@O*=c`3DKV!= c%}i &F-Hqq -/ݖW-; +ŭua9O o`;]j;TrRɇ=S qq(,2Uw\Ly'HXRR\aVb4ao=@Օ8o/vSG#/\xGȁ`LXWB+.Y:J=ds2}kj`LetJ ~T{qF2WUo_aaKRUI_Z"Dʠ2tI$rQ7pEf~ ˭Sޭ=a4 qH]zmɁBH -WXNkFX0Ka2RԾ=UDb? T #{ES=tĽmo,JZffá#x`ZHl5X>bmA5.W:Z_Ӊޘ )&iǻp"$z}a8ҞgC&@ Bm]M B3#}'z?y]AlmB0+GÔp!a&YX_H"i>9n !zXoEêR!u;],;qwХzD4N $BJNF$M"JmQaܩe`r;$$ڰT2:zt~LbH@B\FlKhT;PBlӚۘzi@bufpr!Ns`HdpWN,Yhu>b';qgeÝ=& (S9gQf{d*p%^M;]S`,~.q8H4ũoxa#jlOKh>=04i\HM2eO\?K-~" WؿY1Q>ɜq"% zoU$DS@~fz/ԧnu9H*o{8q"#N)YB,.:E_y˚\I։#?Nv !/ 23Sl+˴%oyӱNOgq`SͿZ5 #r*c"6?ו)=ս]pw65;>x )!0Aw׸+MK3coSrSEu}jllG%z?qQW55x(xHl<õD!f#%cKOιukyB~] yM2ATm5T-U));~khp<<@R/p1Tɪ>jޚ@W~-mIP)\CL@h(=XE!-\#}d=`L:<м 0q^0ܦgC[I[SE*OCmȭ!e8QzC5þRrdz$-OURz?vHM F>S6oc]V;9 Tf2z"2ڥ4H'f{gݨ:TJ?l)[,M~ȐGO۴t $j 'neN]璂 ]_htـ27NdH XKI>w2(*%>ǙQpϫ{Ŷ eObi% |}-'1j2x|+}7gh>R2M{$nW.FԎREL8uE#)#1O\i3slg/~ZiOcvKƻ6Si?.m6$*=^1)D88zveZOZ~Ϊo}'RyÜSw &RP\@r yU@4s<9=ˢ,R_ %үDK8/a&sJ5w)UDB7j-!Y#'ަIg ''=(YZ kOpSL8ɳ4fj{|)bC)ˠS,046F>˫-+I?XۘY5{R S1}ee$:Q>tTL׎[{!PKe^2bK+0|;u 8=;Euء6xD)lk`|ɥ`@kJmVv+(>i=}͊UYN{?/uUsἜV>bO ~_k-!2AAv UJ2;r9lEb g֒>ԜPC`X6ހM~CH5uv!LY@V tۙW^@ 5a 2}_#<$@A:'sGyT!ď;H2=1Ѥry,81&G(3v!nV<2> E 4ZSP7/{WR`:Am'L^O"C6  <ʎQ!PSzM#Y^+ba't9XIzȂӜ"ua w\uեGå^'r5!Gy4 OB\M`IlJEv]_/gzܦ ^dMs֤O?UND_ C”2!6k&HUaeiGvW׷F|t4d}…|Uk~==`W%&zڻ !Xx֕: H,+'7!.hk0 ߙ )ayݠ E}dSj?z4nYF|9h|:/d@|r`^55iHl"fQvQė&^s*e߫&xLqyLن)x{{I=Z "e G8|iz(P['><}yJ\k.|@WQ))?)`7·K&omu IiDM%xL%A= *{P.q2&^#7!6GYb<#s>QHDs,%ϐ^ DfP F#H+vYwb!L6zZI.e:@([*k: &KQ 5B.IGA]'ྱx1IQ}n:{FA~Ӷ9 Y[/@ ? 5K/9Ž].#&Yh'kh*js?9,{ev{(@+ z׬/OٟаQC2DcftW6{ efu74nwjj N:Y҄27{@ ߺWn\[SkkBjIAʏ ]4tc.v+a`F\D0B"ьLcPUTn;Fx+w3yYWoNόu?k!?;d!iQJDݤxF֎5PPLB1` !Bd.R,LY{W^2 |jR 6lTed^B]AEi5 ^4 VVKlg5^bi㡸sdtKEZD 6f-a2/_A{4I#WV$ R؉1ZX;iLF G?\UfZRNBi)<4*ˡrFn~FKļd‚_d{ŵh*M7MK(G2R@ HcF\Hhi\JkCebI̿"f}8UN| 4_!|x/Z#Gz[׈U3b?.͍lrXL>`àK>]=h?H@X$r6вcʕ^~z)aMx I6M僧 [&Q?( o8#6)M^JGx˧nOQ`s:oZ3ey$eW #ԞMkU  HoYYv^ 2*)d 5xcCF/'j!5WLqYsCUΉ 4>~[vn , p c߭UH *TxezNk[`]˩C<;=Zږ{ڧ_(!? G@u;5* 434&W@D7dk5H0f!v@_j_Agljf7?h܋ NZW@VP!v,KLK>{[c_^IOw22: Ѯ6 y $J=%v3$-0s596U?R[HYt Iz;`_EĢgiK,#Ƈ#`}FZ7 {meI nmHW |*;.DAmz0ڹZO9Dqڊ<i GQO0b\84+f[ٕpU4O0Bx ߸.qƿR2|౼Tt22F-C 㨛aa^.:ԆA~ jЀ97 @ќ6tj7O 4AL]@=)#YeCa@.RzTp c\:2$'m3)#cPɹ#?l`;NsyZxܘ-W#utN)!~Abanj8(D7΃qirEd L Ԟ2N.Og/ V:RV}$M\Cȸ;.~bXè{.3]h?>ݑrQIRY,VDUpBTgG BDIͼR\2 *Cet -Cԭ,oS ]t3Z 8)25r*Aѩ˅zOO]2OzKLrh-[!VnGl߭x bf Ms .':AylPmX'R[O?"x;SKa5C.Rg/g!Tt Kv?Ab$ 89&1-hPK,LRm x .s 0rlogp9 l5/Mң3$PRgXPA%K>naͲ!>3_=+c(wZ*^)v-E#\3Oyo#M0 $V 9}OTl-͇ "fXkf„Ǖv*@ @m[!.]2ו2|x3ׯ&RLj""uggw Jq ޠ 4>qD2[)ơ_o=iGh+Ox7nUV ɪ@2#y|_L3\b2*B4UE8zɯv]![7< YY^צ$ xf#⟍9 WD\3k aN~Կtg<~5Zj׹K˜8u=Fآt_4ɂ@{1oNI]VUB7mK1fnE٪h37(߾kkn}<$IQ:Mā;[oStg2Pޝe;CN h*Kƣuo=g+-pM28x 1(~YV.& 9k>\ɰpxӫ\\hԘ*ż$׵2tN6K'pQ}K$.ZyAH\m|q+}c['ÍTۜj?S׃o^.aЏ6ۤW Ð&BRuG#T\d0_ZO@vnM~f-Q аky$W+YI( }aA ++bGUFeK^L\ό?)q;dCBۡ M%-dr_iTV ^9ܕYܖж YZ