pam_pkcs11-0.6.10-150600.16.3.1 < > , s gp9|7 EL;b;j:C:Hם*"Fa^
ʚRn?8 KBѦ؉~,~6vd)qFv<67c0OH@FDCmԙy*_HCp[D^y2ݝmEʖP> j(?"F|(_)O]KWx*~a3#ZVg}&֭,#[KKh:&8~nx0
c (5ٰ X&t +A kėޅ > I J ? J d
" 6 " 4 J `
p 9 T 9 9
8 9 9 9
X 9 < 9 !Y 9 "v " 9 # # ( $X ( ' ( ( (% 8 (,
9 (T
: )
= 2 > 2 ? 2 @ 2 F 2 G 2 9 H 3 9 I 4 9 X 4 Y 4 \ 5 9 ] 6 9 ^ 9 b ; c <= d < e < f < l < u < 9 v = w E 9 x F 9 y G z JT Jd Jh J{ J| J J J C pam_pkcs11 0.6.10 150600.16.3.1 PKCS #11 PAM Module This Linux PAM module allows X.509 a certificate-based user
authentication. The certificate and its dedicated private key are
thereby accessed by means of an appropriate PKCS #11 module. For the
verification of the users' certificates, locally stored CA certificates
as well as online or locally accessible CRLs are used.
Additionally, the package includes pam_pkcs11-related tools:
* pkcs11_eventmgr: Generates actions on card insert, removal, or
time-out events
* pklogin_finder: Gets the login name that maps to a certificate
* pkcs11_inspect: Inspects the contents of a certificate
* make_hash_links: Creates hash link directories for storing CAs and
CRLs gs390zp32 l SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ Productivity/Security https://github.com/OpenSC/pam_pkcs11 linux s390x
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in pkcs11_eventmgr.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in pkcs11_eventmgr.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable pkcs11_eventmgr.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop pkcs11_eventmgr.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in pkcs11_eventmgr.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart pkcs11_eventmgr.service
) || :
fi
fi _ " ( X w H xH 8 ȸ g>
(
= " ( _i
;
8
E 6 E o y lAA큤A큤큤AA큤 g{g{g{g{g{g{g{g}g}g}g}g}g{g}g}g{g}g}g}g}g{g{[.@g/[.@\T#[.@[.@[.@[.@[.@[.@gzgzgzg^gzgzg^gzgzgygygygygygzgzgzgzgzgzgzgzgzgzgz2e649e08c7895576255fc9e9d97526c62530d0109b3c14605a2b750a8612585f c79e89aab0974402abc9411da4431b9d9ca9b1ac1c907f09b6d87ae6a2b1f840 43fd4e62884418ea546390d29af404c34f74d585ecc05599bba72aa25f9da53c 131ff417cde40bad00e7c5df30395e1ff1732903bc3a801db0b61abc6bee4d0e 4ac11163526b02e7d1737ab87a80a51375f43a2b9af05cb9325d89aacecf6b90 6da1bd6f07bde562c4178bbd7cda811e878787baee77b569c97b05d8c118ff5e bee75bcd36db89b4e2ed7f9d956973cf3a8e159d71c83cbf55050b769779e634 469cb32f9bcb820ffbde2440da6da28e76949b3638f2cd0f1bc7b240eb5d75b5 6ae248fd37fbc1e75dd9fce62f68467242ee830238226780189dffe74a92626f 7a511d42da4d012097b3df55d144021cf2ed98b2b934eda56de4ddcf8f68b6fd b3fd0cdd6dc76ecb69020f2e82c3a77cebe5885d3a75c92164e35c6781f52b85 b04e4200ca5de471ea01b126810e79816679c31b22c85f8df9a55282a1826e35 35ac90a159fcfa5f390fa1ec51fad76645f02572fde9d99b0bf9190c46570fde a2717e4f3e0ff56e03ff046dcbb7b1fe113e5c006698dbbe6ef8c27a44c0ddb8 900c14f8f8ba5affc1a0366e86a62e24d91737c54767a22b03a9b14600a0c52f f00a24a43dec867ab388b020d8301fe6207ffcf32d758a1f057c4f431d9822a3 5a5e8294453f7b0acdd079fe687606dd1952aa8c85ace94ac76720e6a01645b7 15268e0a938155fef128a36fd20bbcbdbcc68229cb05882db74d42b8392883de fca543bfc2e74e4520445d469834e2ebbfda30f90e09dcf3f283644b1bd31c08 e5ac7af0a33e952dd5cccd0c344fa3255b1865f3b86ba2c85ad0c8dcf8afc2a9 0786adc85f218870c929ba49130246d55096b53ddbe243c43fcf000604dcd024 eedb7ee6611c73fe69220bc3b774ccb18d7dfff7dfcd05ce96c44c7f3346df33 f2f0405f9ba1cc07d60a0a036076557480f10d1a038a1e78b44d2b89b266fc69 6c50089a5c6a137d2be64b94dfd4d0515dbe041881b164007f8ca5385bcf7818 8b6f52d4a5ce7dc57b92275dcb7a9991be07be5417d07e691742e6f1fb3e4e72 9b2647732f01409b797bcb71a5a53775dbc2bb3288f5932b594ccbb56bcb8147 c79e89aab0974402abc9411da4431b9d9ca9b1ac1c907f09b6d87ae6a2b1f840 558ed62beb359afb96c6ae277740c735669862f01e330471f40a38ee7a3cc710 bf4bf8da3fb658b6b07d79ce99ba12aca945c77b5e20a530500f7d756c5ece2b 1303f66ed4c5da4000de8d3e0fdd716d3390008e388e1acc957c913c0437ccd7 980caf8b7e060f068cdfc13ac5631f1ca982d76ce8d8b72db42a2188c4dc77a9 43fd4e62884418ea546390d29af404c34f74d585ecc05599bba72aa25f9da53c f6b5de0548dbfe62cdf51f9be893cc4eb3f66748193af0a973c76ea6a5ca49eb 131ff417cde40bad00e7c5df30395e1ff1732903bc3a801db0b61abc6bee4d0e 90b9fbb4dd495544fc3cc3a1e80bd013fb02677a3ca55ff9a4ffbba907385d4d cc83b959726b34d34f904e3828bad5100024e17f1a205ed6a12818a6a0ff38d3 964e20238be9fa953632a00a1db19186d76477dfec71c0bd6a482d3a83b057e7 16a9758f298fa77beab9daee075c66a1f6469add7b42d495281d2b77a18bbdae 951d79b1d79f755504ed5ddbd22b3741c3da126f86c47cfc9fdf2fa85843c633 285fbff6d89fcd57f838119cba143b750467ce776d4f0c9da391846566ea750d 602c9854f0619a32412187c216267d5aba1a5c0e8706ecc1e5b93cffb5852d99 3da77083b332201f3c8e7e2c13e8d962fc4f5154736a082fa9e85a7edf6123cc 02816430f1e721af71badad8120cf06079427833f6364d88f7b6caf768eadc44 114a004f1490bd721a24607ead73fe3ca8afad0209871e505cd35df7cddb27aa 92d7c59a6744b8e577df930aba6fc51d7baa7234a1b06c0893e51a42e4ce319e c2bba7a8141656e0c4d8b8c7a8e6005679951f4fedb77fe5bef0e71ff828ee47 70a251c26a268b0c45a1838164ac0ec0747fb04bd07d7543affe1ece1e11365a 95bb326ca3a34843524f31298311cab56641ef39704f8cc5c9f8410f0adc1010 a511a95317518984b0efe0a80bfe1c0ee7290190c598a68ad1a22923b39cd6d8 c882ab24d11940db20bc4637ec8e9589923922baa2dc8c25b953f149b05b308d 6d75762c06337c15ae0105f52b35eb10bc331088eedca160bfb731e4d79c8cb6 service root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root pam_pkcs11-0.6.10-150600.16.3.1.src.rpm config(pam_pkcs11) pam_pkcs11 pam_pkcs11(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/bash /bin/sh /bin/sh /bin/sh /bin/sh config(pam_pkcs11) libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libcurl.so.4()(64bit) libldap_r-2.4.so.2()(64bit) libnspr4.so()(64bit) libnss3.so()(64bit) libnss3.so(NSS_3.10)(64bit) libnss3.so(NSS_3.2)(64bit) libnss3.so(NSS_3.3)(64bit) libnss3.so(NSS_3.4)(64bit) libnss3.so(NSS_3.6)(64bit) libnss3.so(NSS_3.7)(64bit) libnss3.so(NSS_3.8)(64bit) libnss3.so(NSS_3.9.2)(64bit) libnss3.so(NSS_3.9.3)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpam.so.0(LIBPAM_EXTENSION_1.0)(64bit) libpcsclite.so.1()(64bit) libplc4.so()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) systemd systemd systemd systemd 0.6.10-150600.16.3.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 gf:\P@@[v[U@Y)@Y@Yp@VO@angel.yankov@suse.com davide.benini@suse.com sbrabec@suse.com vcizek@suse.com sbrabec@suse.com jengelh@inai.de astieger@suse.com sbrabec@suse.com antoine.belvire@laposte.net sbrabec@suse.cz - Security update fix [bsc#1237062, CVE-2025-24032], [bsc#1237058, CVE-2025-24031]
* Fix CVE-2025-24032: vulnerable to authentication bypass with default value for `cert_policy` (`none`)
* Fix CVE-2025-24031: vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN
* Add pam_pkcs11-CVE-2025-24032.patch
* Add pam_pkcs11-CVE-2025-24031.patch
* spec: set noarch for doc pkg, add %check section - Fix for bsc#1221255:
* Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch - Update to version 0.6.10:
* Fix some security issues (thx @frankmorgner):
https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
(drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
0002-fixed-buffer-overflow-with-long-home-directory.patch,
0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
* Fix buffer overflow with long home directory.
* Fix wiping secrets (now using OpenSSL_cleanse()).
* Verify using a nonce from the system, not the card.
* Fix segfalt when checking CRLs
(drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink. - Address security issues found by X41 D-Sec audit (bsc#1105012)
* Authentication Replay
* Buffer Overflow
* Memory not cleaned properly before free()
- add patches:
* 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
* 0002-fixed-buffer-overflow-with-long-home-directory.patch
* 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch - Fix segfault and fetch problems when checking CRLs
(pam_pkcs11-crl-check.patch). - Repair bulletpoint that skidded in description.
Trim description of %name-devel-doc, it does not cotain
the programs. - add service file bsc#1049219 - Updated to version 0.6.9:
* Upstream web moved.
* pkcs11_listcerts: Do not fail on certificate error.
* Do not fail if card was already unlocked.
* Other bug fixes.
* Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
"make dist".
- Split API documentation into a separate package
pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch. - Fix build for Tumbleweed:
* Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
* Rebuild configure with the bootstrap script (add libtool as
build dependency) - Updated to version 0.6.8:
* Code cleanup.
* Bug fixes.
* Translation updates. /bin/sh /bin/sh /bin/sh /bin/sh s390zp32 1739987075
5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M de fr it nl pl pt ru tr 0.6.10-150600.16.3.1 0.6.10-150600.16.3.1 0.6.10-150600.16.3.1
common-auth-smartcard pam_pkcs11 cacerts card_eventmgr.conf crls pam_pkcs11.conf pkcs11_eventmgr.conf pam_pkcs11.so card_eventmgr pkcs11_eventmgr pkcs11_inspect pkcs11_listcerts pkcs11_make_hash_link pkcs11_setup pklogin_finder pkcs11_eventmgr.service pam_pkcs11 ldap_mapper.so opensc_mapper.so openssh_mapper.so rcpkcs11_eventmgr pam_pkcs11 AUTHORS COPYING ChangeLog ChangeLog.git NEWS README README.autologin README.mappers README.md TODO card_eventmgr.conf.example digest_mapping.example mail_mapping.example mappers_api.html pam.d_login.example pam_pkcs11.conf.example pam_pkcs11.html pkcs11_eventmgr.conf.example subject_mapping.example pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo card_eventmgr.1.gz pkcs11_eventmgr.1.gz pkcs11_inspect.1.gz pkcs11_listcerts.1.gz pkcs11_make_hash_link.1.gz pkcs11_setup.1.gz pklogin_finder.1.gz pam_pkcs11.8.gz /etc/pam.d/ /etc/ /etc/pam_pkcs11/ /lib64/security/ /usr/bin/ /usr/lib/systemd/system/ /usr/lib64/ /usr/lib64/pam_pkcs11/ /usr/sbin/ /usr/share/doc/packages/ /usr/share/doc/packages/pam_pkcs11/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/fr/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/nl/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/ru/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/man/man1/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37553/SUSE_SLE-15-SP6_Update/ec9dad8a377133eb626d3e2304474659-pam_pkcs11.SUSE_SLE-15-SP6_Update drpm xz 5 s390x-suse-linux
ASCII text directory ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4801143aeb090e5a87d2f31de8d02e104b87d6ff, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=cb3e9a087c93657aaba7b42f5dce903af43dec4d, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=b764d629a00ededb1b94ad214283ffe2b0aba6f3, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=de72ba689020d4c087448c79ad0a59a853935b79, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=93fe5f70fb42f8d8997f7619dfdc0da638f349bd, stripped Bourne-Again shell script, ASCII text executable ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=bf0883a14ebc3ebdf2183a534917f01858361509, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=5edfb0e7aa7008e2999d7df3b686abd69919fd3a, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f232990f687d1833f3701ea2fd87bb9b45c1feb2, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2881c62e173015de31ed4073c4a3418bc5fd94af, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0d0931bc0da49546ec3608af4dded3385d5a9b0, stripped UTF-8 Unicode text XML 1.0 document, UTF-8 Unicode text, with very long lines troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix) + @ S T Y n R R R
R R R R
R R R R R R R R R R R R R R R R R R R
R R R R R R R R R
R R R R R R R R R
R
R R R R R R R R R R R R R R R R R R R R R R R R
R R R R R R R R R R R R R R R R R R R R R
R
R R R R R R R R R R R R R R R R R R R R
R R R R
R R R R R R R R R R R R R R R R R
R R R R
R R R R R R R R R R R R R R R R
R R R R
R R R R R R R R R R R R R R R ?R$j1U>O systemd-sysvcompat utf-8 82f58ae9dfaeb809e71a3ca8a4a672864ba362aa44858613e4bf94d475ad481e ? p 7zXZ
! t/:#] "k%k4ϴva ?-K{r<[»`f`°"!p,& | vL`%Tɗ_~Y
z{B1c_ щBh`Bp|g3bGԟ, lHc rǚaDD$aq[gtW4UgudYWn*/TRűf NX8 (gG-7GھΛr;/?z{&;}9T'^140ԉj hey1bzsviiQ`ve<2_)$Í)y-4^`Dpe`dau UaG? '8-z.{@PQA嶵Iy1]s<
Zxۺa|duWG>Frj(\|']h=46@}O&z=AX{Y"3נZ=@-~{>ybMuϛ= #jɆZ9DHV*n`@$qԎ)+:dB]X:] }
Aȕ>)pfpoRBRe5B쉁әĈ(p5 nӧ¤S9".U;5
} AI+IN` < 2ҪJvOt?7RJ[8F.g.vx'lT8 )iD=Ix
P G" =sa;ʋ p-CO
{ fL$ vaosDֿd&ŻЯܞTu:{B=2OfK2JAB
ʥBإ6`rq ~t5!@"1:֢b"amLז=ga%EB6'Q*.(`?ca 7<pfNFQ9<ژ̈Jp$75=x %|/w>UM2A%t6Sv, u0?u-EbDܞjmQnm̻p4݉ڛ ]IT`XG 4hv s0&X UnLg䙊[.4#] ɱ\!&%/M@cW6+IR|jgGͧ.3D6ʟսLxH3~ F|
V[&guD%9 1g ۠aYx&U3ΠG^ DU}m' ,o鮚kx qz縷iVI [.m7[a<}qU{ yz+T{ ,]*BE <;.s .9Q.?G8!}vkIM8(/c7ahv
!`*aSMR>pbqfOϥ.˝4JtmxC
gR 3:8k;ͨ;ŋ1TbnA5n~3 8g+ $hVUyڥA%̺7Q>ɶn>֔ nz~zd H5~
[/
\ou:èÁi#$5v-"t zd ìgQ>r;~ .Gj6,.)$̒E[;w Cd0k|T,H@%xe-(&
$c DIQG){u$j?ZO0t)f٬[yt* lxBƇq|&_ FsΊI`gl7͐x~ A
qX<*_0'Q~P߂*
Ԉ7_!צ]z
IFeZT9X5o ;C
&'/&F"Wڳ2Bׄ, f"fNӣ:Z+-\>䵟?A:8 - P"Hsl Cj?#E=#ȬLrj_;S>) ֪B_
n9,5Xq.8Дv嶓$̐+3:?b,'74I&{/dY
H![' g"rp~py ie|7,f5O죵smܻMLC+F/ 8S Q߳P&
'B4̒E"o`̒j Ճ
byZ5BAtI&䖄
t6$\<pύo x컿fj(8(_Ph|-Yid ,\Y^muq._ jV^8unILDiܖ BK bj$1a ! 4\&tϱݜ} Jy:a?ݻd5 .Jd}ϰ73F)/D-4+YRn2Q̶7OhC=9/JDGvBF~Ժ\$ץKsZ]~qg*[=S5m"|o#egݭl)z,|mj}y1~yH\6S+ tPl0f40 'r\ӎS0B«[vT@`N |&$J]MJ
olg-\:xY9 ,YiR_i^- }\zMHЄ" bnf_冨 k"Wi;cVt x挠F(9]XlcŽN[%L҈"b,ԝK
sr#* dxn
3fGj'Ɣ-S߁M{!ZW&)%u2p>~^ͬ;}o|UrKNj HبV/_K c* Ǣ{ihS@MQe !/}` ^d}JM!P_g{U#1lI,tKO_:4u*؆g/H;i(I@W;ɘ5oZvKui<d#^]#X *Lb
tSR B tkصxYeݗ#GԼ7q-O-R^njh34t:|xմAMN۲!q%ZJs z
!f^7_z-zûk305e]`o#>$WjZpfS ci>wd8 ˕
i)8YW-CU˽*5!ѻsz /}
#]ӋD:GdyԆ:rDh:: %
=v:CrĚͬuni-{Y,(CSiF {Sw ;ո3IyjTSdž Zֈ8 phI+ݮ<ȻSMygiQLhV_Tt;^ڊc?돮v4pZcZ/KGd[% $ V E`ro7^uGV]>٭X8v13usm
&^cX6XF^{0'~>8;PTrg#'yaw;rh凸ᔽ5Yfk|w^=6gU)/ u]O dǦ1T[
~IJ!e }h h#Uʆ3t22m 4q)ءȏ5ɧ; Nߺw|
-5}{"Dte@$Ū?~HP OB~ҝ4r>'ِqJmk6ѻ($;S}~>M4|PRF%? 1zrno.mKHrh|l "Wk9cQB: z0-)Y
w@ T3Z 5;bc7 s qhM~ȡNLf] (=:67
g2֔do>@▚ab7%=|,[6!7ϭ0tL?f }OMu/kNU%gU.Im>\ iuoϜ!Ucf,SH}Us0SтBvr?|\ i.}=βͺў晄d{^B.{l]w `!M1_Z@ z{MMhd8
#4ّ) Ա"z>icm4 3XpA-ObNj $ 譨^WvcA,
+ )]3[(Fa ($ȴME^w!8lT9wryQ}yh uZUc[z`wω)q}nIÈ`0%[ߍk! 8Zy o1 KfY~(:o ƦhaUz:4ΕH!TC mq 'P- F Rܺk*_#5]G{[*;6.]9|#T3`˷zIr2zZ"r)^WbR\SxGat' aegMb#,R4*CW\J }nCUaDX zDbHPTs' ^QEB?֦aICf -Yԃ*sW.^ܞ'}ܜ_@ FD=r8&X;i]؏rO$~fJHѥU5`M}Jb.`ۺbgEA P i-t!ԁb- M^҇$ oĄݙ 1 { ΗtWŠSyn۶b+dF'Ύ&y? MXEuetp|ted=ԡ2azeʿ ;ܡ*]qH"=Ϙi_ 74N9:Ȱ t#Վ^h* N %I Wk6}L= krȩun hQn1ටF~.6| C{ Vq%`)U=V{_NZz5q8B IЮb78AϮA\%kXu58kRg&G BٓY_NNt`^:ݚt)ۜ+qh2QѶXC*[ $
#4 9 }8e*c`i#--0E0 3U/|JRgO {K`~~KC z q6ԝo bFøqU<`a7"MrԶa>N
Pk{B"dJrX&e7m=U4M:
cd* sRhݚ3TN)Eo?{υXn :