systemd-standalone-sysusers-252-46.el9_5.3> M Mv ĉJ4!!%joLne)Ip-Bm5 ']ghreleng@rockylinux.org p-Bm5 ']| kYWу>h?]03TH L-GZ!jX}nW0~$"TI\gBX>{r4)';u.JtGM'^շnK? KBd  ^ ZnUB.*+J?%>!/?ke )oa}ҺJ! 6C%??` 2N^5=R7hUT(rkt=@{ m'Mw^%Ïݡ@Zkְ4!iwÖNɈK@qQiiȬUbd12abeeaae18ea58cbfbb2557485dc29f853f519c2a30b5adb03a90588edcb6106ee4f649bd9f5162f95cda4c8692587a4592e8dH:A:RlY$>=?ud" - g@Dx| &,4@ F L X  (l(8$9t$:$GPH\IhXlYt\]^b dWe\faldtuvwtxy04Csystemd-standalone-sysusers25246.el9_5.3Standalone sysusers binary for use in non-systemd systemsStandalone sysusers binary with no dependencies on the systemd-shared library or other libraries from systemd-libs. This package conflicts with the main systemd package and is meant for use in non-systemd systems.gfqpb-efe37149-cdd6-4bae-8105-12784e648b5b-b-aarch64!Rocky Linux 9.5Rocky Enterprise Software FoundationLGPLv2+ and MIT and GPLv2+Rocky Linux Build System (Peridot) Unspecifiedhttps://systemd.iolinuxaarch64!/AggRggWggW98eb918b8a82a6cb9893078a07dd9b88702c3f62243ef83715f8ccdc18b97afd../../../../usr/bin/systemd-sysusers.standalonerootrootrootrootrootrootsystemd-252-46.el9_5.3.src.rpmsystemd-standalone-sysuserssystemd-standalone-sysusers(aarch-64)@@@@@@@@@@@@@@@@@@@@@    @ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libcap.so.2()(64bit)libcrypt.so.2()(64bit)libcrypt.so.2(XCRYPT_2.0)(64bit)libcrypt.so.2(XCRYPT_4.4)(64bit)libcrypto.so.3()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.3.1)(64bit)libselinux.so.1()(64bit)libselinux.so.1(LIBSELINUX_1.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)3.0.4-14.6.0-14.0-15.4.18-14.16.1.3g`@g@f4f@fѴ@f@f(@f(@f3ffaf@fr@fj@fM@fK;@f+@e,e8@e@e}@eԔ@ee6@eee)eeves@eRd@d@d-@df@d@Release Engineering - 252-46systemd maintenance team - 252-46.3systemd maintenance team - 252-46.2systemd maintenance team - 252-46.1systemd maintenance team - 252-46systemd team - 252-45systemd maintenance team - 252-44systemd maintenance team - 252-43systemd team systemd maintenance team - 252-41systemd maintenance team - 252-40systemd maintenance team - 252-39systemd maintenance team - 252-38systemd maintenance team - 252-37Jan Macku - 252-35systemd maintenance team - 252-34systemd maintenance team - 252-33Jan Macku - 252-32systemd maintenance team - 252-31systemd maintenance team - 252-30systemd maintenance team - 252-29systemd maintenance team - 252-28systemd maintenance team - 252-27systemd maintenance team - 252-26systemd maintenance team - 252-25systemd maintenance team - 252-24systemd maintenance team - 252-23systemd maintenance team - 252-22systemd maintenance team - 252-21systemd maintenance team - 252-20systemd maintenance team - 252-19systemd maintenance team - 252-18systemd maintenance team - 252-17systemd maintenance team - 252-16systemd maintenance team - 252-15systemd maintenance team - 252-14- Set support URL to the wiki - Set sbat mail to security@rockylinux.org- get rid of SELinux policy module (RHEL-76033)- add %posttrans scriptlet to make sure our SELinux policy module is actually installed (RHEL-46339)- version bump (RHEL-56019)- ukify: Skip test on architectures without UEFI (RHEL-56019)- build ukify without noarch- Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103) - fundamental: share constants for confidential virt detection (RHEL-50651) - efi: add helper API for detecting confidential virtualization (RHEL-50651) - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651) - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)- udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103) - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103) - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103) - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103) - Include if possible to get thread_local definition (RHEL-50651) - add APIs for detecting confidential virtualization (RHEL-50651) - detect-virt: add --cvm option (RHEL-50651) - detect-virt: add --list-cvm option (RHEL-50651) - unit: add "cvm" option for ConditionSecurity (RHEL-50651) - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651) - core: log detected confidential virtualization type (RHEL-50651) - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651) - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651) - confidential-virt: split caching of CVM detection into separate method (RHEL-50651) - confidential-virt: add detection for s390x target (RHEL-50651) - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)- fix applying patches- timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020) - cryptsetup-tokens: fix pin asserts (RHEL-36276) - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276) - kernel-install: check machine ID (RHEL-50672) - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672) - hwdb: Add Lenovo G580 (RHEL-5950) - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950) - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950) - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950) - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950) - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950) - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950) - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950) - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950) - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950) - Update 60-evdev.hwdb (#25704) (RHEL-5950) - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950) - hwdb: drop trailing space (RHEL-5950) - hwdb: add comments about matching entries (RHEL-5950) - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950) - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950) - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950) - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950) - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950) - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950) - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950) - hwdb: remove spurious whitespace (RHEL-5950) - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950) - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: Add mount matrix for Linx 1020 (RHEL-5950) - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950) - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950) - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update autosuspend db (RHEL-5950) - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950) - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950) - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950) - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950) - hwdb: add override for IdeaPad5 insert key (RHEL-5950) - hwdb: update database (RHEL-5950) - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950) - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950) - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950) - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950) - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950) - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950) - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950) - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950) - hwdb: drop redundant entry (RHEL-5950) - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950) - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950) - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950) - hwdb: Add support for "Passion Model P612F" (RHEL-5950) - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950) - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950) - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950) - hwdb: Fix rotation for BMAX Y13 (RHEL-5950) - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950) - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950) - hwdb: do not include '#' in modalias (RHEL-5950) - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950) - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950) - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950) - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950) - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950) - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950) - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950) - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950) - hwdb: Add override for headset form-factors (RHEL-5950) - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950) - hwdb: drop trailing white space (RHEL-5950) - hwdb: merge multiple keyboard entries with same setting (RHEL-5950) - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950) - hwdb update for v246-rc1 (RHEL-5950) - update hwdb autosuspend data for v254 (RHEL-5950) - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950) - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950) - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950) - Add alternate name for MX Ergo as found on some devices (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950) - Update 60-sensor.hwdb (#28804) (RHEL-5950) - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950) - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950) - hwdb: keyboard: D330 FnLk toggle (RHEL-5950) - hwdb: Add Logitech G502 X (RHEL-5950) - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950) - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950) - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950) - hwdb: Bush tablet rotation support (#29268) (RHEL-5950) - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950) - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950) - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950) - add udev rule for micmute (f20) (RHEL-5950) - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950) - Update hwdb (RHEL-5950) - Update hwdb autosuspend rules (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950) - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: rename .html=>.csv (RHEL-5950) - hwdb/acpi-update.py: streamline python code (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: add Predator PHN16-71 (RHEL-5950) - Update 60-autosuspend.hwdb (#30131) (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950) - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update (RHEL-5950) - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950) - Add three Dell platforms to sensor accel location base (RHEL-5950) - Add Bosto BT-12HD series to hwdb (RHEL-5950) - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950) - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950) - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950) - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950) - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950) - hwdb: add resolution setting for GAOMON S620 (RHEL-5950) - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950) - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950) - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950) - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950) - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950) - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950) - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950) - Update USB ids of hwdb (RHEL-5950) - Added resolution for Huion Kamvas Pro 19 (RHEL-5950) - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950) - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950) - Fixed resolution for pen and touchpad (RHEL-5950) - hwdb: fix missing colon (#32108) (RHEL-5950) - hwdb: update for v256 (RHEL-5950) - autosuspend: update for v256 (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950) - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950) - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950) - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950) - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950) - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950) - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950) - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950) - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950) - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950) - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950) - hwdb: add a vmbus id for HyperV Video device (RHEL-5950) - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950) - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950) - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950) - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950) - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950) - Add OrangePi NEO Scancodes (RHEL-5950) - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950) - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950) - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950) - hwdb: Add some HP IR cameras (RHEL-5950) - hwdb: add more AV controllers (RHEL-5950) - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950) - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950) - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950) - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950) - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950) - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950) - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950) - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - add udev rules for trezor hw wallet devices (RHEL-5950) - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950) - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950) - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)- add Requires(post) on selinux-policy (RHEL-46339)- enable FIDO2 support (RHEL-36276) - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630) - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630) - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436) - ci: add support for rhel-only parameters (RHEL-30372)- tools: fix the file name that "meson setup" generates (RHEL-30372) - tools: explicitly specify "setup" subcommand (RHEL-30372) - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372) - fuzz: don't panic without a C++ compiler (RHEL-30372) - meson: use ternary op for brevity (RHEL-30372)- ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372) - libsystemd: link with '-z nodelete' (RHEL-6589) - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219) - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219) - string-util: pass ANSI sequences through unchanged (RHEL-31219) - cryptsetup: do not assert when unsealing token without salt (RHEL-38864) - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864) - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159) - Drop log level of header limits log message (RHEL-33890) - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890) - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070) - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070) - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070) - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070) - man: document that journalctl --user requires Storage=persistent (RHEL-31070) - fix: prefix of dmesg pstore files (RHEL-20322) - backport new mkosi (RHEL-27512) - test: Skip various tests when /sys is not mounted (RHEL-27512) - string-util: introduce ascii_ishex() (RHEL-27512) - sd-id128: several cleanups (RHEL-27512) - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512) - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512) - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512) - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512) - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512) - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512) - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512) - sd-id128: also refuse an empty invocation ID (RHEL-27512) - man: update documents for sd_id128_get_invocation() (RHEL-27512) - test-id128: simplify machine-id check (RHEL-27512) - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512) - test-unit-name: simplify machine-id check (RHEL-27512) - test-load-fragment: simplify machine-id check (RHEL-27512) - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512) - test: skip journal tests without valid /etc/machine-id (RHEL-27512) - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512) - test: Skip test-recurse-dir on overlayfs (RHEL-27512) - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512) - test-execute: Skip when /sys is read-only (RHEL-27512) - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512) - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512) - test-execute: drop capabilities when testing with user manager (RHEL-27512) - tmpfiles: Add merge support for copy files action (RHEL-27512) - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512) - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512) - ci: drop super-linter's shellcheck (RHEL-27512) - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512) - ci: backport mkosi CI configuration from upstream (RHEL-27512) - mkosi: explicitly enroll SecureBoot keys (RHEL-27512) - test-execute: also mount tmpfs on /dev/shm (RHEL-27512) - mkosi: fix UKI addons test (RHEL-27512) - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512) - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512) - mkosi: make shellcheck happy (RHEL-27512) - mkosi: use pesign for signing UKI addons (RHEL-27512) - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512) - ci: make the build dir accessible when running w/o privileges (RHEL-27512) - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512) - ratelimit: add ratelimit_left helper (RHEL-35703) - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703) - ci: define `runas` function inline (RHEL-35703) - Drop /dev test in test-mountpoint-util (RHEL-30372) - core/manager: export manager_dbus_is_running (RHEL-40878) - core: refuse dbus activation if dbus is not running (RHEL-40878) - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878) - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878) - manager: fix reloading in reload-or-restart --marked (RHEL-40878) - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878) - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)- spec: return selinux dependencies (RHEL-35732)- ci: update actions/upload-artifact to v4 (RHEL-30372) - journal-remote: code is of type enum MHD_RequestTerminationCode (RHEL-30372) - resolve: dns_server_feature_level_*_string type is DnsServerFeatureLevel (RHEL-30372) - shared|install: Use InstallChangeType consistently (RHEL-30372) - test: temporarily disable coredumps in testsuite-17.03.sh (RHEL-30372) - ci: update manpage deployment workflow (RHEL-30372) - bootspec: fix null-dereference-read (RHEL-36284) - units: don't install pcrphase-related units without gnu-efi (RHEL-33384) - kernel-install: fix uki-copy deinstall (RHEL-36505) - ci(packit): explicitly clone `c9s` branch (RHEL-30372)- execute: Pass AT_FDCWD instead of -1 (RHEL-31783) - ci(src-git): update list of supported products (RHEL-30372) - coredump: by default process and store core files up to 1GiB (RHEL-15501) - coredump: keep core files for two weeks (RHEL-15501) - ukify: make the test happy with the latest OpenSSL (RHEL-30372) - test_ukify: use raw string for the regex (RHEL-30372) - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430) - test: add a couple of tests for systemd-coredump (RHEL-29430) - test: don't expand the subshell expression prematurely (RHEL-29430) - coredump filter: fix stack overflow with =all (RHEL-29430) - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430) - test: add coverage for CoredumpFilter=all (RHEL-29430) - test: rotate journal before storing coredumps (RHEL-29430) - test: sync with the fake binary before killing it (RHEL-29430) - test: check coredump handling in containers & namespaces (RHEL-29430)- rebase rhel-net-naming-sysattrs to v0.5- bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952) - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952) - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952) - sha256: add helper than hashes a buffer *and* its size (RHEL-16952) - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952) - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952) - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952) - bootctl: split out setting of system token into function of its own (RHEL-16952)- resolved: limit the number of signature validations in a transaction (RHEL-26643) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643) - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133) - units: change assert to condition to skip running in initrd/os (RHEL-16182) - ci: add configuration for regression sniffer GA (RHEL-1086)- units: fix typo in Condition in systemd-boot-system-token (RHEL-16952)- random-seed: shorten a bit may_credit() (RHEL-16952) - random-seed: make one more use of random_write_entropy() (RHEL-16952) - random-seed: use getopt() (RHEL-16952) - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952) - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952) - random-seed: split out run() (RHEL-16952) - random_seed: minor improvement in run() (RHEL-16952) - random-seed: downgrade some messages (RHEL-16952) - random-seed: clarify one comment (RHEL-16952) - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952) - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952) - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952) - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952) - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952) - random-seed: handle post-merge review nits (RHEL-16952) - boot: do not truncate random seed file (RHEL-16952) - bootctl: install system token on virtualized systems (RHEL-16952) - boot: remove random-seed-mode (RHEL-16952) - stub: handle random seed like sd-boot does (RHEL-16952) - efi: add efi_guid_equal() helper (RHEL-16952) - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952) - boot: Detect hypervisors using SMBIOS info (RHEL-16952) - boot: Skip soft-brick warning when in a VM (RHEL-16952) - boot: Replace UINTN with size_t (RHEL-16952) - boot: Use unsigned for beep counting (RHEL-16952) - boot: Use unicode literals (RHEL-16952) - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952) - meson: use 0|1 for SD_BOOT (RHEL-16952) - boot: Add printf functions (RHEL-16952) - boot: Use printf for error logging (RHEL-16952) - boot: Introduce log_wait (RHEL-16952) - boot: Add log_trace debugging helper (RHEL-16952) - tree-wide: Use __func__ in asserts (RHEL-16952) - boot: Drop use of xpool_print/SPrint (RHEL-16952) - boot: Drop use of Print (RHEL-16952) - boot: Rework GUID handling (RHEL-16952) - efi-string: Fix strchr() null byte handling (RHEL-16952) - efi-string: Add startswith8() (RHEL-16952) - efi-string: Add efi_memchr() (RHEL-16952) - vmm: Add more const (RHEL-16952) - vmm: Add smbios_find_oem_string() (RHEL-16952) - stub: Read extra kernel command line items from SMBIOS (RHEL-16952) - vmm: Modernize get_smbios_table() (RHEL-16952) - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952) - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952) - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952) - ukify: use empty stub for addons (RHEL-16952) - stub: allow loading and verifying cmdline addons (RHEL-16952) - TODO: remove fixed item (RHEL-16952) - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)- test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086) - test: use the default nsec3-iterations value (RHEL-1086) - test: explicitly set nsec3-iterations to 0 (RHEL-1086) - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483) - ci: deploy systemd man to GitHub Pages (RHEL-1086) - doc: add missing `` to `systemd.net-naming-scheme.xml` (RHEL-7026) - man: reorder the list of supported naming schemes (RHEL-7026) - tree-wide: fix return value handling of base64mem() (RHEL-16182) - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182) - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182) - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182) - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182) - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182) - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182) - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182) - man: document the new crypttab measurement options (RHEL-16182) - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182) - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182) - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182) - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182) - generators: optionally, measure file systems at boot (RHEL-16182) - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182) - man: document new machine-id/fs measurement options (RHEL-16182) - test: add simple integration test for checking PCR extension works as it should (RHEL-16182) - update TODO (RHEL-16182) - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182) - boot: Simplify object erasure (RHEL-16182) - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182) - dlfcn: add new safe_dclose() helper (RHEL-16182) - tpm2: rename tpm2 alg id<->string functions (RHEL-16182) - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182) - tpm2: use ref counter for Tpm2Context (RHEL-16182) - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182) - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182) - tpm2: simplify tpm2_seal() blob creation (RHEL-16182) - tpm2: add salt to pin (RHEL-16182) - basic/macro: add macro to iterate variadic args (RHEL-16182) - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182) - basic/bitfield: add bitfield operations (RHEL-16182) - test/test-bitfield: add tests for bitfield macros (RHEL-16182) - tpm2: add tpm2_get_policy_digest() (RHEL-16182) - tpm2: add TPM2_PCR_VALID() (RHEL-16182) - tpm2: add/rename functions to manage pcr selections (RHEL-16182) - test/test-tpm2: add tests for pcr selection functions (RHEL-16182) - tpm2: add tpm2_pcr_read() (RHEL-16182) - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182) - tpm2: add tpm2_is_encryption_session() (RHEL-16182) - tpm2: move policy building out of policy session creation (RHEL-16182) - tpm2: add support for a trusted SRK (RHEL-16182) - tpm2: fix nits from PR #26185 (RHEL-16182) - tpm2: replace magic number (RHEL-16182) - tpm2: add tpm2_digest_*() functions (RHEL-16182) - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182) - tpm2: add tpm2_set_auth() (RHEL-16182) - tpm2: add tpm2_get_name() (RHEL-16182) - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182) - tpm2: add tpm2_policy_pcr() (RHEL-16182) - tpm2: add tpm2_policy_auth_value() (RHEL-16182) - tpm2: add tpm2_policy_authorize() (RHEL-16182) - tpm2: use tpm2_policy_authorize() (RHEL-16182) - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182) - tpm: remove external calls to dlopen_tpm2() (RHEL-16182) - tpm2: remove all extern tpm2-tss symbols (RHEL-16182) - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182) - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182) - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182) - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182) - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182) - tpm2: add tpm2_read_public() (RHEL-16182) - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182) - tpm2: add tpm2_load() (RHEL-16182) - tpm2: add tpm2_load_external() (RHEL-16182) - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182) - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182) - tpm2: add tpm2_create() (RHEL-16182) - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182) - basic/alloc-util: add greedy_realloc_append() (RHEL-16182) - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182) - tpm2: cache TPM algorithms (RHEL-16182) - tpm2: add tpm2_persist_handle() (RHEL-16182) - tpm2: add tpm2_get_or_create_srk() (RHEL-16182) - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182) - tpm2: remove tpm2_make_primary() (RHEL-16182) - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182) - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182) - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182) - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182) - added more test cases (RHEL-16182) - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182) - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182) - cryptenroll: fix an assertion with weak passwords (RHEL-16182) - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182) - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182) - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182) - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182) - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182) - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182) - tpm2: move declared functions in header lower down (RHEL-16182) - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182) - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182) - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182) - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182) - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182) - openssl: add openssl_pkey_from_pem() (RHEL-16182) - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182) - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182) - test: add DEFINE_HEX_PTR() helper function (RHEL-16182) - openssl: add test-openssl (RHEL-16182) - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182) - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182) - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182) - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182) - tpm2: change *alg_to_* functions to use switch() (RHEL-16182) - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182) - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182) - tpm2: in validator functions, return false instead of assert failure (RHEL-16182) - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182) - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182) - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182) - tpm2: simplify call to asprintf() (RHEL-16182) - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182) - tpm2: use strempty() (RHEL-16182) - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182) - tpm2: remove ret_ prefix from input/output params (RHEL-16182) - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182) - openssl: use new(char, size) instead of malloc(size) (RHEL-16182) - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182) - tpm2: use switch() instead of if-else (RHEL-16182) - tpm2: make logging level consistent at debug for some functions (RHEL-16182) - tpm2: remove unnecessary void* cast (RHEL-16182) - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182) - tpm2: wrap (7) in UINT32_C() (RHEL-16182) - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182) - openssl: add log_openssl_errors() (RHEL-16182) - openssl: add openssl_digest_size() (RHEL-16182) - openssl: add openssl_digest_many() (RHEL-16182) - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182) - openssl: add openssl_hmac_many() (RHEL-16182) - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182) - openssl: add kdf_kb_hmac_derive() (RHEL-16182) - openssl: add openssl_cipher_many() (RHEL-16182) - openssl: add ecc_edch() (RHEL-16182) - openssl: add kdf_ss_derive() (RHEL-16182) - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182) - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182) - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182) - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182) - tpm2: fix build failure without openssl (RHEL-16182) - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182) - tpm2: downgrade most log functions from error to debug (RHEL-16182) - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182) - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182) - tpm2: update tpm2 test for supported commands (RHEL-16182) - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182) - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182) - tpm2: cache TPM's supported ECC curves (RHEL-16182) - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182) - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182) - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182) - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182) - tpm2: do not call Esys_TR_Close() (RHEL-16182) - tpm2: don't use GetCapability() to check transient handles (RHEL-16182) - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182) - tpm2: add tpm2_get_pin_auth() (RHEL-16182) - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182) - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182) - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182) - cryptenroll: drop deadcode (RHEL-16182) - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182) - tpm2: add test to verify srk templates (RHEL-16182) - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182) - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182) - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182) - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182) - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182) - openssl-util: avoid freeing invalid pointer (RHEL-16182) - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182) - creds-util: do not try TPM2 if there is not support (RHEL-16182) - creds-util: merge the TPM2 detection for initrd (RHEL-16182) - cryptenroll: fix a memory leak (RHEL-16182) - sd-journal: introduce sd_journal_step_one() (RHEL-11591) - test: modernize test-journal-flush (RHEL-11591) - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591) - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591) - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)- spec: update rhel-net-naming-sysattrs to v0.4 (RHEL-22278)- spec: add new package with RHEL-specific network naming sysattrs (RHEL-22278)- ci: use source-git-automation composite Action (RHEL-1086) - ci: increase the cron interval to 45 minutes (RHEL-1086) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086) - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427) - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443) - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443) - udev: add new builtin net_driver (RHEL-22443) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)- logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757) - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757) - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757) - meson: Properly install 90-uki-copy.install (RHEL-16354)- Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436) - man: mention RHEL documentation in systemctl's man page (RHEL-19436) - resolved: actually check authenticated flag of SOA transaction (RHEL-6216) - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317) - man: environment value -> udev property (RHEL-1317)- meson: fix installation of ukify (RHEL-13199) - sd-id128: introduce id128_hash_ops_free (RHEL-5988) - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988) - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988) - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988) - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988) - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090) - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090) - manager: add one more assert() (RHEL-6090) - pid1: add new Type=notify-reload service type (RHEL-6090) - man: document Type=notify-reload (RHEL-6090) - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090) - networkd: implement Type=notify-reload protocol (RHEL-6090) - udevd: implement the full Type=notify-reload protocol (RHEL-6090) - logind: implement Type=notify-reload protocol properly (RHEL-6090) - notify: add --stopping + --reloading switches (RHEL-6090) - test: add Type=notify-reload testcase (RHEL-6090) - update TODO (RHEL-6090) - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)- udev/net: allow new link name as an altname before renaming happens (RHEL-5988) - sd-netlink: do not swap old name and alternative name (RHEL-5988) - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988) - udev: attempt device rename even if interface is up (RHEL-5988) - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988) - test-network: add a test for renaming device to current altname (RHEL-5988) - udev: align table (RHEL-5988) - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988) - sd-device: do not directly access entry in sd-device object (RHEL-5988) - udev: move device_rename() from device-private.c (RHEL-5988) - udev: restore syspath and properties on failure (RHEL-5988) - sd-device: introduce device_get_property_int() (RHEL-5988) - core/device: downgrade log level for ignored errors (RHEL-5988) - core/device: ignore failed uevents (RHEL-5988) - test: add tests for failure in renaming network interface (RHEL-5988) - test: modernize test-netlink.c (RHEL-5988) - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988) - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988) - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988) - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988) - udev/net: generate new network interface name only on add uevent (RHEL-5988) - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988) - udev/net: assign alternative names only on add uevent (RHEL-5988) - test: add tests for renaming network interface (RHEL-5988) - Backport ukify from upstream (RHEL-13199) - bootctl: make --json output normal json (RHEL-13199) - test: replace readfp() with read_file() (RHEL-13199) - stub/measure: document and measure .uname UKI section (RHEL-13199) - boot: measure .sbat section (RHEL-13199) - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199) - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199) - kernel-install: Add uki layout (RHEL-16354) - kernel-install: remove math slang from man page (RHEL-16354) - kernel-install: handle uki installs automatically (RHEL-16354) - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354) - kernel-install: Log location that uki is installed in (RHEL-16354) - bootctl: fix errno logging (RHEL-16354) - bootctl: add kernel-identity command (RHEL-16354) - bootctl: add kernel-inspect command (RHEL-16354) - bootctl: add kernel-inspect to --help text (RHEL-16354) - bootctl: drop full stop at end of --help texts (RHEL-16354) - bootctl: change section title for kernel image commands (RHEL-16354) - bootctl: remove space that should not be there (RHEL-16354) - bootctl: kernel-inspect: print os info (RHEL-16354) - bootctl-uki: several coding style fixlets (RHEL-16354) - tree-wide: unify how we pick OS pretty name to display (RHEL-16354) - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354) - bootctl: Add missing %m (RHEL-16354) - bootctl: tweak DOS header magic check (RHEL-16354)- ci: Extend source-git-automation (RHEL-1086) - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026) - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070) - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070) - systemd-analyze: Add tab complete logic for plot (RHEL-5070) - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070) - ci: enable source-git automation to validate reviews and ci results (RHEL-1086) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086) - ci: enable auto-merge GH Action (RHEL-1086) - ci: add missing permissions (RHEL-1086) - ci: `permissions: write-all` (RHEL-1086) - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086) - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)- doc: add downstream CONTRIBUTING document (#2170883) - doc: improve CONTRIBUTING document (#2170883) - doc: use link with prefilled Jira issue (#2170883) - docs: link downstream CONTRIBUTING in README (#2170883) - bpf: fix restrict_fs on s390x (#2230364) - udev/net_id: use naming scheme for RHEL-9.3 (#2231845) - core/timer: Always use inactive_exit_timestamp if it is set (#2211065) - timer: Use dual_timestamp_is_set() in one more place (#2211065) - loginctl: list-users: also show state (#2209912) - loginctl: list-sessions: minor modernization (#2209912) - loginctl: list-sessions: also show state (#2209912) - test: add test for state in loginctl list-{users,sessions} (#2209912) - test: add a missing session activation (#2209912) - test: extend test for loginctl list-* (#2209912) - loginctl: shorten variable name (#2209912) - loginctl: use bus_map_all_properties (#2209912) - loginctl: show session idle status in list-sessions (#2209912) - loginctl: some modernizations (#2209912) - loginctl: list-sessions: fix timestamp for idle hint (#2209912) - loginctl: list-users: use bus_map_all_properties (#2209912) - loginctl: also show idle hint in session-status (#2209912) - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226) - static-destruct: several cleanups (#2190226) - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226) - macro: support the case that the number of elements has const qualifier (#2190226) - shared/generator: apply similar config reordering of generated units (#2190226) - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226) - generator: teach generator_add_symlink() to instantiate specified unit (#2190226) - units: rework growfs units to be just a regular unit that is instantiated (#2190226) - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226) - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226) - test: add fstab file support for fstab-generator tests (#2190226) - test-fstab-generator: also check file contents (#2190226) - test-fstab-generator: add tests for mount options (#2190226) - fstab-generator: split out several functions from parse_fstab() (#2190226) - fstab-generator: call add_swap() earlier (#2190226) - fstab-generator: refuse to add swap earlier if disabled (#2190226) - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226) - fstab-generator: fix error code propagation in run_generator() (#2190226) - fstab-generator: support defining mount units through kernel command line (#2190226) - test: add test cases for defining mount and swap units from kernel cmdline (#2190226) - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - fstab-generator: use correct swap name var (#2190226) - fstab-generator: add more parameter name comments (#2190226) - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226) - fstab-util: add fstab_is_bind (#2190226) - fstab-generator: resolve bind mount source when in initrd (#2190226) - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226) - fstab-generator: fix target of /sysroot/usr (#2190226) - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226) - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226) - test-fstab-generator: extract core part as a function (#2190226) - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226) - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226) - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226) - core: use correct scope of looking up units (#2226980) - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521) - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521) - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521) - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521) - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521) - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521) - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521) - test: move TEST-23's units into a dedicated subfolder (#2213521) - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521) - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521) - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521) - test: abstract the common test parts into a utility script (#2213521) - test: add tests for JoinsNamespaceOf= (#2213521) - core/unit: drop doubled empty line (#2213521) - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521) - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521) - core/unit: update bidirectional dependency simultaneously (#2213521) - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260) - resolved: add some line-breaks/comments (#2161260) - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260) - blockdev-util: add simple wrapper around BLKSSZGET (#2170883) - loop-util: insist on setting the sector size correctly (#2170883) - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883) - loop-util: always tell kernel explicitly about loopback sector size (#2170883) - Revert "Treat EPERM as "not available" too" (#2178222) - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)- Revert "core/service: when resetting PID also reset known flag" (#2225667 - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)- ci: update permissions for source-git automation workflows (#2170883) - pstore: fixes for dmesg.txt reconstruction (#2170883) - pstore: explicitly set the base when converting record ID (#2170883) - pstore: avoid opening the dmesg.txt file if not requested (#2170883) - test: add a couple of tests for systemd-pstore (#2170883) - test: match all messages with the FILE field (#2170883) - test: build the SELinux test module on the host (#2170883) - test: make the stress test slightly less stressful on slower machines (#2170883) - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883) - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883) - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883) - core/transaction: do not log "(null)" (#2170883) - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883) - elf-util: discard PT_LOAD segment early based on the start address. (#2215412) - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412) - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959) - journal-vacuum: count size of all journal files (#2182632) - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632) - macro: introduce FOREACH_ARRAY() macro (#2182632) - journal-vacuum: rename function to match struct name (#2182632) - journal-vacuum: use CLEANUP_ARRAY (#2182632) - pam: add call to pam_umask (#2210145) - udev-builtin-net_id: align VF representor names with VF names (#2218886) - pam: add a call to pam_namespace (#2218184) - rules: online CPU automatically on IBM s390x platforms when configured (#2212612) - core/mount: escape invalid UTF8 char in dbus reply (#2208240) - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899) - udev-rules: fix nvme symlink creation on namespace changes (#2172509) - rules: add whitespace after comma before the line continuation (#2172509) - udev: restore compat symlink for nvme devices (#2172509) - rules: drop doubled space (#2172509) - manager: don't taint the host if cgroups v1 is used (#2193456) - core/service: when resetting PID also reset known flag (#2210237) - ci: drop systemd-stable from advanced-commit-linter config (#2170883)- ci: trigger `differential-shellcheck` workflow on push (#2100440) - ci: workflow for gathering metadata for source-git automation (#2100440) - ci: first part of the source-git automation - commit linter (#2100440) - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440) - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440) - Support /etc/system-update for OSTree systems (#2203133) - journal-def: fix type of signature to match the actual field in the Header structure (#2183546) - journal: use compound initialization for journal file Header structure (#2183546) - journald: fix log message (#2183546) - sd-journal: cache results of parsing environment variables (#2183546) - compress: introduce compression_supported() helper function (#2183546) - sd-journal: always use the compression algorithm specified in the header (#2183546) - sd-journal: allow to specify compression algorithm through env (#2183546) - test: add test case that journal file is created with the requested compression algorithm (#2183546) - rules: do not online CPU automatically on IBM platforms (#2143107)- systemd: Support OOMPolicy in scope units (#2176918) - systemd: Default to OOMPolicy=continue for login session scopes (#2176918) - man: rework description of OOMPolicy= a bit (#2176918) - core,man: add missing integration of OOMPolicy= in scopes (#2176918) - meson: Store fuzz tests in structured way (#2176918) - meson: Generate fuzzer inputs with directives (#2176918) - oss-fuzz: include generated corpora in the final zip file (#2176918) - unit: In cgroupv1, gracefully terminate delegated scopes again (#2180120)252-46.el9_5.3252-46.el9_5.3systemd-sysusers.build-id45c3aaa69f05fcf39a5c74d53d7e93b16a66f1/usr/bin//usr/lib//usr/lib/.build-id/45/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpiozstd19aarch64-redhat-linux-gnuELF 64-bit LSB pie executable, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=4545c3aaa69f05fcf39a5c74d53d7e93b16a66f1, for GNU/Linux 3.7.0, strippeddirectoryR RRRRRRRRRR RR RR R RRRRRRutf-88a0f02040b5c2c9cecc2594d7e9b740a9cfd87afff4d7b1e7f773ba30962a56743e8c31cd046fdba46abd66ccbc3723b421addfe52c02bcf82fdf54efeef2756?0(/hv"HVN:o>O:ø-މcr&d~;(ēQ OrOT)a D[ruh& 6@ Q㚈B*Cp}zhKظl|PGɶq$񇼞QMR:84q@^9%Tln}OQ c}!dcwiW$wzGbg,>Z.wｊN,gnvUH/ݱG^GjgTA>w\u5'jUq R+1 qHZJ2&8!B B]KRa :`/[`q X\9d}WQA5ƨ5q*)T +D[U5H"rZH=2a&g ũY\.@E.Wl|+\IWB$rwE1}1gKDvy\ |(ȤodF%e*'飃xmBLlJI@- A~G~eco)aWU琣Rtctݙpa0{,!ξUi@ EUƝeB C 4l@F(00@I -=\{DEZB/{PYE4鵜EK1*)sPt ۰GUSB@ndG¢PU* ? cUXB~ɣ,Y Z-h0o*+c(MZnkϑ:Lf3}B礋mgi~5 wK7FW%Ra|ٹC\r eEԗ- ^n:+V41d(K0+>4};7G-!p s 1d5$LAa J5qS%IApeO:3rYh`rРtWOGP|w]{Y Zݝ?%п6~fkx %r ʢ9y90paY[/Yz] ~f["~9=Gf(@K,ދ7{'y%leɛ[N6+-ku}D_[9aOܲ'@,=TYx{"Oח W1h@e,H$b{X~&:-00Y}ڰJ}X49&_.Kk̰\!B%-GER<uĔ}$$^1B*f!N3 g "h,0EHQhu t,Zƒɏ%8[P7ק|B4Q\\rs#6eK@G;bq\[wL\Ok* 4nectelpb_auxval_Unw_Resumcc_pov0guardap2o31sc6XCRYPT_2.04.4GLIBC17GCC_33SELINUX_126873453pool  0`] d  #P&y .a_& 6@O Z e p{ b(c0Hhpd_00H7`xڐ.@툊 t(08X@`HhPpXx`hphxwxdjȰи (08@ H(PX0`8h@pHxpPX`hp YB:Qq91d$5 TS{ii͈6˫-UyBLg^PO$oSJ*811EԦS. ڿw<k8ԈC ވ'`e|~41˅6R}9&=.s賹­YБڲGok:K:F]G7#t'p\yXuCQ Qb~23harNAgہ^ *1KC{JRHAj_c50lC00ulQ}#/)6Аr:??V@R+7~ rʟfP`´Rh̶3-+`*R 8h ܘ?SxA V>* |C6d*kWmì8SސρT&?Tq2232/ş[W &+*r803ZG#fesID 8WzFǵR*'.6(8 8v˦cn%Q&}O`ɢ9V}CLDdzs!ހ5bkͲY>\2@B[Wh(Iu# & !3)I:hl"vYGVR *@úhC RH~Xq.9|.9WRNN!KT1bȀ$#2f%ЯbU0qZt̀T.\C4y[ A/E齓2H Y1dJ3gT=y 큮d*%_384Xl'b6vVJ1Acme(5/IQ5M![$I:!p5pG=Tgy:\%ČJd9sc3ppɴ dА KZ1o9=Ň2jH)qžxRd 'Nɀ2KA[H% f _2Qf VWoЙؠ!  (08@HPX`hpx !"#$&'()*+-./012 3(40586@8H9P:X;`x?@ABCDEFGHIJKLMNOPQRS T(U0X8Y@ZH[P\X]`^h_p`xabcdefghijklmnpqrstuv w(x0y8z@{H| !ѫ,!~&'./59e*UB %j ?W &P}X~`hpxȌЍ؎ (08@HPX`hpxȯаر (08@HPX`h {{_PD& '"BbE(" Bb")&*.26:>B*FJNRVZ^b+fjnrvz~,-./F0" Bb"1&*.26:>B2FJNRVZ^b3fjnrvz~4567G8" Bb"9&*.26:>B:FJNRVZ^b;fjnrvz~<={S[qT$@d@9D5c@5c'! BRs3TT(*`7 @m?I`T@G`B9S4`(@ 7!RGv*@5*A!G B9.@@ 7A7 $ʴ%IZ( B M0( p Oj1VDY;&&sב6th61[kAI'f&\0_Vk A#weQ%y?fH!S Á) ݅wfYa8#xbf I.^po\/?3|0E 鲂--9s̕kJ8KގRi͑n-Qo~CO|:/Coƛy?f^=DSƛj̳~RZs !b] n0PA9̯@y>Ay@vdLWnvs$n E"\n+A߿zۛL`tMo.F$a&NX3?AL<'05뮢{3+F:WrƋǓ:}w~Oa`Uo)zs&{VS 0V 3߆م ?+oQV|(.3SCU5X w_ k|XnX?&4 _e:AM>ߩE$YLr~^rw`|M6E2u·$q(~Pb߫:H]ՆC pą|l\,.wU%^L͗0K7j#j"f RMraM\z?a#?3EX"k/FiE R{2 VÿIץ)~n~,\%?O]wmOeTr2cȫ[6aS]%:;5_HIhW'V,"Sp+f}&؂L,GGB $ݲ`c *d)%KF\z(%S2ws(~"yR]zP/3˝ #'5C#_|O P'5*J PFW[+P(4RKof5~>%|Y$q'P.L?P0 fuae,k#؇Ҳ{rد*q,Gp^اbo)vq~'|_͍8\X6̇Rft=r5՚3' W}8;Asp&udflNa 1LXX}wIIJ]f]x:%8eHZ篱TAg4DmW9PZ8dH;14J@Ep܉~dq{xu4D+j3\Śگk.zzg"KTάB9L!z9&;N{~k+e]w<}WhCmQ-0)Yg!5J &mOLDq2sd/NGI:w8+rqkdCgZeaA캞W~_ ;+uAc ){FN)G9¿B~{X֓%NjyIv Fs T}&<G{;t[V,;p,'6Dn7皕)"S_KݠfAB`y6"kJ550+w*SNrh`&w#(ՐI`0b/eh0ohDD;gƬmh~&IaJso|>s4b#6ocz> zӓQџP* nQR6ׯ'[D+ƎC332̐ d9n%O弴D´֨`H 5ŝ}Z]+׀ [}ё)*pm1b~:Oh.#[:ddJRTэ6^ ,0xa fw`u=W>\E ?o4{`j`nv; 2D'zhrS!?LMEj>Vp^ h>urhDDhh)@wI;w*V3z(_WlH_LE 5#::k e[ EFϾU]25/0≜BA]7& Ei-Q sfaBxw+Zn,+ ;mPzzkt(ƚbWb1L*?NߞhnlQ˰9 ~49䎒sߝ>qkG'U _P_65k*N)EEMyپD{Cpl&S-X {vsu 5>؋S Ť폷C6, A6x OJsl5y? 0D_zAMߺc|џ1Go12Í/0UvY?LGdmSc<%#9'4~p c}is&9G$B"sqG }}X9|{4 1Ǐo[T]/eeƒ{52$hǖVXb=*Ҁ?eʽbzYoԝL Pa5bw8(GfnVzQz%5;=5_EÓ[{J}{PpogFPlJFńCb Kl<%K@i6'ꢽnv0oʳ  .NO؂r6+!Wɇs8 Nf,z/D?َ+Omo~7;,?QG>OknE7@Wuڟߡ'<\bVvq5;g< ڣZ<ph爺uYӌ&ΌT ~љ7n染|t4B^%[?~Mk>~g_a:&zj w]{hnˆ_љ5S̕ _ ?SܻN{ qy}1G7>y+3>ook̀6xЏ x¸Yvс=(8옖ULJr:phvęU|9`3GWhzz/m@&(gfujʖF)t8Y+cf`BF'[}t ;YoYF'x)QsHh9Aln$3 ~ Vwxf䎷TkoXW|5"ޮ<.73ܖw >[$awwELw7wADNy֟*4ih'F ;9܀c3wi79^|8^^{Lp5!z_'W0#k:!ۏiWYFE|LjR0 D4)2Q4:A|>azӈQ+ QL4?^كf~i>iWxw8j@OkI?3/;tn0b'&Xj$䦎s@ɜBv5^h8_^Qsh \`=0=L?S_sg>M*<Ҍ7oQs;rF6T{XAؘs1o j#gc+Mf}"9$޶~28Pe` {==t5[gg4m_L<p@; ϛb oJ5]}8R:_wK.Sbcs?j31;daFكqXK4{>Hգvq' >ќcp0aswʃӑdP%M6j|8!K'S ǼS ^W[06žr|D&|Lف׳S1b<O(;30avai7}W鰂ò6z}Rjج'}1oy't=n|;3~%Z[S{ ?avn'+`%z< .G3ɸ,oCk,dU:$nz.5y7A)/[ FӛGS[&XC<tz ߳Fxy'̯f 0s⯜[Q>L3Oܥ3Az.O[)mkeh&{;]Hv= ^.ɬ|:WPދK X#ِ_}?Xdε̞ ]?m| ɯqGv V.l^ɝhlIb-$6KOazg%9-ӈqfq^e<0tCќI^}ʇXROԂ]!oJԘkﲹX{[J\q48g<'bO%Xˁ !"YO@?1ӣAԉ1AпоLΗц KJGS"-&@m7Ozٶ2Թϩg==JO9:7Ie D㦾)fO;fGrdR%ixh;m&6;xO#w,1fNT&A.j;s=>k}= j@]Zfؽ51b6MAt+ C|`{FE<=֍j| /Et%zH,fuO|i 8O j8MuzgVzӛdN=˘H+ ,"@3OX2>4HkxeĄނl̞e;D8[f[."[4Cрł G*G;s/%O#BT0-z!R[ bl%7"c(eC= _N 6pZ#̿yAU<wڲ+`C{P2wN.,Y˜nGS ]2źy7]c$O 7I+ʝN vCprHKɔ~oJ?f)h'^'&kzi1icy_д@d|8>,jPd(gct^@X5XKdr=0}h:O6JI_$̗G&AxO?ܶOIk[V4h!+N#BG~9qC50,ưƍ7 _Oyآi9ÓdRYBzhCY6pK*7 wK^U%#Y%TyG=v\Dԇ27655!nOCZQ^oi323&ZE=z5 O:ɟ.2k~acГ2? jX_Ν2(x}V(uշk˼]yXfr~2P,QSe[μʿVu2'H1Z[Q4Qiu@9#3eOR éN<:]u*Hka rKbuXA()sH۰A_`俰!.R_#gUTVͣh:ej( ek䥞iXz ^26>-m+:i<1Ώtk&<]zl F[m7P?#ֺ3z*Z|9 JA޹ːnTl,`S-<^W| Ux/\{яP\8*0L?WzJB+%1 ԤS6EBJ#WּA[e:]ZPY0s͞Ih  jURȿG9 vm@%:Vqq@3~2f Ѿhn>'`Ӡǜd6<6z://B\Le,"\2#6W,C`<Ԍ6tҐMolb8nWv؃*FjrKi޵EېWaU V&S W}f_BMTZ}1| 6|[tKe5*n(TR6/pjdŽp@,atN@DqJ!,?]Ҫ 8k ˼RS˂2>k+JK|m#fa|T0_+2WK­W2?q}Ԯ9"~r$VA? #|%w-x\E^'!ZyGJ82CM*%:$6#ҊS_<B㶈"f,2t)˘<0$' 7.J}j˒-oOќ=u9$*]/}TItEP&Jtk:}bO`j! "e%IAt*#qJ:qp"=@U^FBsB BVNT JN^1 xr|k\mJH{$XA4zZBU^'~Z:kܤth&*YW&tQiVϥ`uLݿ~OX?xSZD:l"uRRk.'GNMBj$-ZUWsbeS(w?]T5VVG WYW׹!/<uuMe4lK7TUÒ)n>SEt'aAS(UUB,џ@4Ҟ2cVjN=,gҏ̙ (GZН`K W7ЯvYG)Jt; 9?yh\ y͋R x7F G 7rlȖzSL$W+h{˷]͜Cv%2| 9D'XO,wϵU/;&ihDik۸B x"ȑy 4P8@H p%K=$'f B֣f賢4]δ}vl-?MFb+tWZ>-ɹwv"}#y(?1UlLfpzLY]%T 2-3Y}wEj;dOT }?>Ly]=orR,䀈ynnK`ɘ тp!]!! Z r)34kڸcmI 4 )go-3wWꨛJ$-@h, RI*850>ǘN mg˯)4ŀ#umX*Z[y|^7[]EEOܑ[|5VOzdtpt魆\oJU[6q>oX7ۛ'4.Yb:cxV rt_``"h>.hf>W8Ԩ!dD)b[Z+|9b#1ܴP"0cXpaF灞^5.Y1>9$k3p _)1 D4;7HW' 1LȔHu=,{&SH!(E76G4N/YȤbL&^ UKb$ջnL㍤=^f'? 佊S1TП9K1$휨q|BN :¯{S*! Z+0XAPO<" RcrU+yı E_~A~]J+a q<%J)BɅ`rxd ʹd0J{>*Q!2yz{pbFL"0'A֥IʎR38 ۦ=q)L-5-eC{{g=_-CxEeS cv30=L]. Y~(LSnvD(ԻH9H _ϱET6τ9#gzʨ@2"Rj"R'Nj?7DV!]fK/B`o'Q&X?MC#X$`ECe6}p0iSLp& - -b\IX_ I H+IBIF`JZڀǒ 3\ dv߫ۜ)3n)mグoX1Dr+ vn6P/xn';Ey\I\f Buȑ 9@^)lze[aqH B|~#1DO] :ƻ @1S'&3[>2pq.:Umi\ 2g<<רc8+m*BLCY3I ?Bz+kqjgExo]Z}%,`sJo<4g;~-Ozdň"r7ζ~,nl̘fEtO(}gЏ1t:u& %yG2cԿR8/_kWky^QK K{x_4nzPfjBUQeߜϴBEхG|.řykCw'yIq5!͍+b2MN-*@kaQ3 v"iM kE#p}H|jT4FS0ȝENd}rD'uVY| 5/xwp SY%.eL>)¨.lYAI@.H'h9  #ԷLxEYX&k)eZ@yAT;UBe¥a'&EyFK,W67A|}@W9^TpXrߋjCb4_*Um*ss4+՝aU@rO7]g`wpro2_-\ȶj:[q}&_5I8a|YW1xEl24$yI ͒eoU\ Y1yoHl/.bGl6|idBb=%!5HE`|^ҫ䮒iI,0)/<0hX_DY`.SKGxGaF-A'I~j$ =Ƴq֘-B@lःIUwj@$A1l_]sօ^et5T6FI /8 H’>ur73<ޮ ~/7>@Y<&45̆&K}mK5L{ܽ1{I:)Vp+Y2qьn_gWhfp :]^qJ$ |w]?wuVMm󟈁ٖ k>Dg茿u4;;~Ip^lpg%< lv O<8;g< z57|^2wIZWuTx%uƔ[3Q/﯆ߺ\/itR'1>t|8[@3mmm:;t s< JX1ZKTYb>44rAK[Mi?h|wم|Rq;/zlgZ3d@ގoL)eYF^|&n`5V DmS z#EE2WC?Z;I+#$65w+|GXHFO0dFtH~Ӕ<>72/!q~t@5a.ܓL(ǞYg`'FX¢OA8Fϥuv 9pǎ ށgmJ!(&ȫHy| vϨܺdpn!Ij|gwlR䟑._p8$ֶG`1\@'eU<1OwCk*E% @=K=zNE917"~0f-vG K^Ps@ubK?3-1>؇CqKkl"s2!=JF}.kZ.Yu׫o7ǵz)okB :!yj[Gdq G8gxwďokz@83z'4S/$#==K#{} ߗg[lA'aXuO vߗc4}_6V|J9/x _k EEn6ZFg?zT,wv&<3zs:y>jOu%~T~mYc/o;Oߡ23}CoAK,Gϟj?#|߻AI 0x-g^u&?ïv kZpfY9BO1(<߬ǫ⸖7>y(0>#.92i؊;zGUcMVƽqq#[Û,/i0fNz(d=ysP\<$31#r_Ĝ(~eANfp[S7fFG979 +yPk͉E^>8~G凈9̺ y|Du6703'#lքþ?'[Nm6`NOaзx^2m|uczz7;ĥ6|ۗW4!~v~>zz4'O{.n̈#R!.ڵ.LH: R&vi\i<^nnM}"w:٧iܽ* f w 5v_\`LE/F̏n{D13Zo˾S.7+TiS;C"7l:QnЙÈp3ف <5Wk_xfaAKWdV?xyn`2p[3:|(,<3wi9*T_bhsQϫJuGTToNRײud1t*kJW GADw9Dlvsq?_,MCޏ\^N~ڃ;^|lw)gUt9a{n=W?'6ryN(/` ,l!c$L?ϸ'+uEz*<( QU$6|sh>u_;6PI`rqx܅~}$G;B;~?AZ{۟pBem0K`݈EbWyI@Fz}ZJ*!GoÃcd):ٞ~p7ҥYκvY~]J;m }gm"VNC@uTtpJ'+.r^|Yt-tqE G=[3K4'0jY\8WlNmxn]PU;ȹF~tl_NX/[,NPnw94ƶxƘȨ=5qZEɻo~5/N/)ih""m< | #uYDOgk6@w%'e?ӂܛv 9Or^F}˷Ӄܥ=w=?wa \>݌⭕! w"v{5s+~=xٌv oyVǬ2F<2<aof1~|Q9pba,Ke(o.eI^ވ {@q}i;m=G 3e10Lo9 6Uf/BMvotgzq:w];dG#WK}J{CP1f8:f qv7&z352\33#8?3VdK#ieg$( _66p`mhaUzwt@Suڽٮ1M{ꯔu2ʁHр|+?umNZbO 6uD[L_ }(h؉]Hgy@c!]gNЉ} {o~wNym6x9mVox^n\pkc{C'wW$69 ƛ_E[.gu[ ie'D]U%Õto} qSv)GڶHj:; 6}hm 7,pfty-( my=꼞s<iF }In+Nھ%oƃm)دI̶;vZZTY捿D:ݜŪW}J'j/ނ:%4ti54׿{=jO<`)'wTװʚ+iS4 2x6ARCY㡾W,% ά^c}v\OVE jW<g2!U/9ٜiUg4putyMLgpF?<v5ƒɓb)7u~ `XvU2~<9d(;Q]fm%3~պj[G;E~mfR<˶?0$.'KjBM}pOzjAgO V6 O!冻F⻩(gfM$FuHdܲ 9?Hr1F9AXM>БA>^^08q>j8QG丷c3A鞍`חh :M6?ymhW T: kк#<<亳7 0/Zlz?m)tn[ؘʔΉ:#zzVѣ]m˿M)>,o 痏!} kBf7w_=6Xd׌ yf<2Ȱ 3}]7".mkn 6|]|s2?%fq5.ZOkQRE\~xLj4T w?_uQ#kor|OTkuCt˯.~Fb;'T[2'Gk"'3;\ٝ(.dObuꂥ+UiՓ f ]Ɗ!,ݶ\QZ]pv^K`q~'O=݅됚^Թ9x0t~g'>f@h4&1 |+f͆g7 szt-)xVI<>;=>&i.|Omp7ŨyouHʯnw'x 8\]||@= & fK4®7BHcX^?]LB8)dm7'8q!H-&|I>}wXy^5"ZlqBmI̅iXewvϯi|ъI#s2f:L6ݣ64X-x}zԛ#bI3ǩa7_ n\?_ 8?'ff~*eFNV^n:kdI{M./ppzdhj8g{+ -ϭ9w\0ŷ^z0QG%S4[^AhLIx5vi0{r3rfKC5@Z;-fT < {P7",Gbm,rrS? n3/nwo<|jQp 2tdmR)US{|T/fu֮>$[ӏwL@yG;_#ʟLx>r>m"뿼=> OJ a ?{v˱in^3>x,B M=^nYѡDj /m9#QC346o9&q׭%n,ʟ;_>ògE<,xއSYsz߈-`%N߯0:Yj'Cy,r=Rr6;,>ϲѿ 57~+㷰z} ]F(ƂA/W%]owx60_zOy_Q睡M۹Wz?U ,6Gݿ Foaet"*K@f/37se'"Mnм3L.c)* k'&NYLJauX7Aދ\c<];6+a7pG=d}(a?`ӭَ`~-7)ڿ.cd*`}GNݹJ&ۧPfoa /-݀-T#o'7\pWWqk!@UN&s*F7ڧF% ӟb .{U){CKG#o:(,xueFA0/.Jܕ$m˃+Uz錽?6T'^ߐ휭g}9~~\Eq2C3Q1$l)Z3B4{]ty|SD+Դx(7 <^L8̛3'}p/qٿ/qa9ʭ2歆 #f:ȱ^9y|O{հ[ Lj+s$;of s`6`>"|;znIx~jO}O_`lS^G,2Ç3l~5G^,l蕳&jzPfilA!lCxg8??T!-FrƴA;ˎxam'!Kc(/"rxi2mrA |-w B > RĢoo_Ί{p!)4L"5j[ǻJ. :J=Ɖa=]<3H157I$#(\a|h({ד[-:ϖ˘3~׶܅֞{^q7U7jcJR6-YH@QV{\)g;dsYJIFVQL}_+~aYh;mƜrI᫦PSMrm_qipXZ/uqe/߬:ko%EBLNs; wm(ğ ~Rᣘ W&}-Rj|JI aTⷉ+O5 "-BrEZ>8sj6Ѿi`4MZ]?İh+jy e ^-"Kp? q#>xgaLYGʷ́qh ga: ,|g`q4jI gn=s= -'g׸@iAENfdMgR3375&rJ?'l3U}|uhf#1!q;Z\gFGɝ#<3xg{OSJaG'SW=j|M$sq?'V!Po!Knt^*@HJOIR]:+W6?xzwul웼nDk1ȩoB-h14GM|cdƣ'>V>?EzQMOv`}V!%wvZhI)ul!~͚YjMlNONTnĦ/tj%M3&/ sj8kZ,' 2>j#ji: MdKu]X9PuaY;VИ!ȿ*di8y흽ׅOGY{ruKBJR776h_Zسu[6tY@k<[=ϵ<xߪ)p{̸n~?36Kڮ^Se ߯chh_)dpWM1GERt6Z[m\s۳Ot ᶏ7{ ŬV4!rj5NN! :3(fuﯻh'p2z0cuVu@6Iu&n#:s&r&Z2kNbMA%/c4{,5iM+@c`1?F0;$zdt6}cRՃHď~ i༰ueY>{={fZvmڵAO] pr >i' жBM '[h謝 nWC~R_jAM ͯI^薽'G4_ [X.xY3mH[Cohe@=1v$5͏L:u7x_+5(N8 L+O 7)EZ`{n>my$gfP~c7c9<)+29Y5)4.4,z3ˊi?R ( S!e@B"Qb0 YOwrF}e5%MqORgĶ%[%-9);E/jD-9=_s(e3R_#9ŷ,}Q{`9J\9Y h ?po9@9o<] im#X,(G X k#|0_+Ql%E30{> nb&NebX)Ү4EͼY<5H2.,ֆX*LZ7gbw"i%;gCڊCCR1J5)QRm;)}|ʔ7aqi[GICdEKLV YlȖͫ]Y[]>wd3\F%җ&9C!D?kKgO˰Z.Aw Fp>kXGgYF1ho7Uh/Ίk:ZTlcPc#j:/m;I >`vo>$s{mw>1Rٌm&^MsْyW܌Tk=xd(NY恩lffZ 6z\L$vCW=FWf\xΓKѮfiR!#Yw͝;ֽQ1)6g{w^G M:}E? Km=C7U7)EHh+MԒ (U_'/-e{Ɇj)c0=@HqE'G[*t<n3}`iՈOi "Я!QQt'l@b!ҠOy4U1 9q߭qDl"ϯ HDc޶BsOSD:8 _ϭ6hnI^O~"8vLX.KV_¼i.$_ǯ?LVj/}$mwE6b*6.b9ToYd-kUɣ$V BR WAA9>z1/>s- hDc8/ êmF'#2MJ:Z_ U 0KKDX R6G@H_էG5]?P{W-p"v:ѷ/XG1&y=#R.65w ĈpsKyy#4#>b]y+_k7ȌIC'ϧfaQDc>y l{ +ĔP&,aiw5DNB5bIv 'juZ.1؉eLN}*,jI6R9J fKuS4Rl5%^lsBBӴ 79fD]y~V"od kaǟ)_+>Q/In,Rc`KF-mV |,>2FCRe}$ڥxO,3#M*=q!C`xG续{2m daԣPⴷ\yfo?&[WN!X#JA_D| '@%٥y }ﶹ:l_6bSGOqc 6(n;"plI%6{clȃ6Y HDw~-t22J7 &M+Ja5`7>kk\['ֆ,z,l V (eX/==z 3֋aoe _E~ 𥬰 o  ڌhH2'^(x<6P-6(x`8BktH.@A7# 8y>]•׭-&% |v?^eu֚?Q}K@MZ_=ƪOXpZᏘ}WRWXuAH9i`|K>bSh[yF xxgO<{&U \1D ~Yܮ漇vy/†u 3s7 {䎍pw蕼p¼m$@ 8\x(R?h#K^Y3 &l M{*-H޾x[{  OFX?*pxyV?<8CR4RpÂ,9ޘX@̓?+*ѭLt}Nɽi s=4O>O6jaН jʓ) 9~[ d~;Vp$i7tNߍw[!+vJ،D\BJW.Bс-@`Rf1#4yU/MCXi o[=Ep!{S/6={9e0U&*K螹CYapNt}=i=Vb+H0-wؚϫGEk@_60GSL} 7CEL_~5Q;}C! 8.6a:@`>92܇'b/fhjTJ4]>]ܠ\JmPd|gԂB@3./urQ;k]$}LPpYMP1kߜxk eAuJ GYzΆ!~u'8(*>WmD-~Z{a-r$;=(LfB ؗ 00BY\/um7/Uz㠄(- \QÞ]t?fr^ S=9Nx1FJ28]0D@L4+ <MbC@gPt Ujbśڔ q0@UޔkՀ vw"4Pu_kAxt &bB_˨`* J:n 3:16Z^D:8o?|5=bU.xu@_ 1=@|~E؆ vGUs|I2벏/>/Q"]ʎ{M[0‚A Lb„_/BZ[HkvO( ^<8coCjaA7&]m^+l;M -Wؤ13w˵$SBĆf݉:QHֈ#wunl_buɾ!G>TVb<ዞe㦑ή{mVs!,k4k~l-` c쀌xP7 (R/R>3 U1/FiFޱ2 |+3#e) m|}d\2GB82m )qk= 2>; 8zkd_ԏ'2:2ջ?H6):Aڷ!c41C1OM]T;NzGOV~H=,XTf=7ɧ2ÕK4BW$aK u|5y|gX {7XK*u| ;yOx0o( ѣǑܣХc8l`ߗhBBUzqB$.]w^5+  F ,@bXu;wt p>0&ɺܭWE<$ 0hg7J7W,&PeF_(=+մ_v#LuLqt5Gkw5ԡ ፺\3.)Azs#;6)xufB~-/{=0Pg <(5PͭTJvo`uO==@pOSDaYQ4d<1"TU 0B_+@,,>E˚˾j}HmidaΨL!t手(FdR,6WsTɮ~^uGDc0ʼn?whg!Z45DHQnԬD4Ɖ:!k J w hTܽdo7ū G6ߊXÊy`7blVu)W/k=z8Q?Uk#<^!qf-/~qi5jS@v\gi jႼ07hK"ÿx]ޜn `~ӶS<0B: 98 ϴgL3jct4iK3}_-z94ƚPs3)ueĬ,jYԦY_&8M4,4 < LK nv h1y{Y]|Jrh[O+%B\CQ";R0J>` Q$un)̃ ]UPSh\ҹ0Űqi"2Y$Bޟyھ`V.~lvaŌŅk|@Q lKۏ l. cKn*Zx!K z9yD;v$nP}:9-kx|:2f$DVJiz?I]X%]D*p(Ԥ‚ q,4OܮJ5 d;+|G t[!Bd?N$?X8QVM+ rbt8Yy?HJBQe;@jvS#|xU| uIZ{A/c4B$F[ܣ9X'QӴW 'RZLc@bGeBX.k*Kbݡ@e />xjqx,)~#c}hmY{G`)?N~{)y'~m} WdZuUfC}oU:hATvqK_~5ɚ{$EO~n۰UH<!ዝ2cIg,Ia'd?8Lc(Iap{ +`l!t(j@z~t~CZMYX LP9d#?P $<8@T CdCc@T\ύфk`\*0S[mF{GzʘPaG[Wc&p#r#)ҬS[0TN7忁ә;7a7 ռoO)\΂:Aya̠qP>:%\1}7dcLճ27{5`pܭ|YNBDqИA\婒j?\;G,:m嵂˜%g=.D KCCl ixcS}$X[Tuu3~xmJqD5b mrW1l aFpوA7 MVk9jݯRg9ni񟒵[6fCNM00Z8d(6Jȼ†{f_S7w4TVUQƕ'T[,󮂌LUOAUo_a8t=ʫ)2}Sg,9Ǜ?1: P CN*q>ţ6Hf l\AP|Z d5?I!}LiZɈ gкN&$wIŧ =D)i Q 8F?yI` 9Cd{{?]Vob"In.hG9#+Q.ȧ/8\Btzq4y/dxoT傭hg0fu*bnK̬ pÁhR'[ xmP֚7bb#)Y)_68J% FrMP\k9NTM+K~ w-{eu>Hؖ9ӶQj8qXÜhۯt#"ڭJs4`M):2a))B\0aOI]|i\H?o>\}5]~>s5h||*.!q X\gG 5(f{Vb<qӕ> ʉR% }:*ų tKَ$ @cGRP%d1C EƑA 0 ;ͬ2W-!ǵ{;HxdbZ`8&rzʳoND*߶~'&x̦oy 8NE<|8hcK]V 5uAYM<+l&ߺIs,Xv\W):l}bzq EiO Oq;;qdhݙ{} G ~uye{ EqSS2g thn]]כ=myVڳTpYBOhf2 d0|ufYp9VH nwݪekf+ėF, 6z(wDIK3{XHR8[g#T趱%!48_VCL~>o,6ȹBݹh݊RRI; V<>}u WO)w["ɂsP7Y)eW.na0Նf]~UafLu{mvq.71|~Bxq;s\5`V)l;CmW̱3{:* Q:QvNz ;N?T/rKn\03n-ǐ0Ula7&xȚMTpG{up)t%kCb[1ӱ? E{3,ж/`ҷ8'7\?@ 7xyoBXn]"WA7y-)93ko7$˴fӢsx4֮, }wxiCu,$KNU}=UӧW`50E~RW:IXyw]{䵌LK'ޝH {>f|9ro3qĽN?*>eG"4 -Bwp{^kN13 l*jrГۥ2}Ǩ'c4`HnRK5poMrBQz%T?ݓ݇ȑ%yz#^ENퟹQ4hwJ,{=RdIm9C=Vg/i[)>ݓVgX<slIKn?rEb>ЅyS̚;G{9lL:NU)]q7ᏬX.Nci:>dj!/aK\=Mԋ任¢U}OpGBb#[`H#m}r{/{;{4>NW+ы0O+ tKp{UtM޶4m5{ϲsq { }`_pju+SH_|&KY>`;Qb aBMG`O@EW~G^m۱S0~ a.aԂ)4 ]~c;; ehKqt5X6 Ywio >zi}4ADouߴ^hO^>Dm+pl]"neNý0)=+-s 9245&֛žW߁[;|_ f_'< w6V6Kת`<4g {aBӅA?y/X2_e`xjs7sO?<=U'l*Ov:s`.K3C4Hc~t_9zQDŽciJY2LVV$~/Rnr m^칳A/[ߠXC6̾D|{qNwFgt{3ۺK¡j Sx\0Keu:[H|:hJ߆[ټj§6req2F G؞_6 Lgc a, ީ`|_8Z B`ֶ"WÅϏ_gC,:?@` 'F+=71\K!5f`n5)""yCkY# G!]{ uۙ%}+K\1O&dS:>>;ɂu?=}uHv2m0簋~Shm5A /̋ F,Cl~4.%kN.O~֎]'@nn QC>FA/2}o˽\܀^, ;e/P.>+e _,]TwYmlYoRʻDZMjv`a-x2Uy/щٿi~wlar o̽qn)T6v"#`cFdpASfS Imhv1b0SP7<|Ţ=3H.q'y璵Lܧ~G 0ϏamKoy$pl\ŦȾ0W)Q9j=l"\R>U_DqϚ$(4S;8!F[f޼~ɫv1~]l'C4$$sIU0*Uy.2SL=qVB{D(ݩa 6XsmfP>YVif}*enl3@Ṿ>QOc"a|VVTqd$:A"Đ-saox O@#/\}r\`{|>4:Vg8n'\u~qm^+dyaD/lN~?dMG l,y7djotڃ#h$)}{ o?TQN`FT{U7]tm/(|bSoSN∸_\aK+DޞA"ҭm#ˉOIB pؖm};R}3c 8f7(O/GZ^?ǔs#+2 [~d/𣀞00ڂ ) e#47Okx lF^"jQ?- ^ٛ)ç/.l1yM-[9 /%:$ozfp0fe6B/zN7$m ߷ė6ܡ|D/An`q x`^ ލ|lJxF|LD?;1t˜SZbKV`ůḯcvchB'~f(tG>|"!WqGoS*6:%Y[5n| jۄco7-a`gi8p\CO(Š|2OߟAI"i~ilkJ?C$?t7ԓI_u-+7{(L&ږo͑aa9JOsfb|P;_~ y ژpOpn9\^ThpEλlޣysޭLùӊYqfUl˯Mw>cOx)rE 3oH׵!+ *%ޮ6XK ٗmL:aoY=lC$F^3L bGA8ԤçSvF͌s~o^{{0/֯vYѸx$fOkPꇄRV>djoO_,g<Gtt-< vFK/~MgZ>G ɿ<=Q٬"څgl\~BR1d[?ٗVY܋ai:;fj6,rGt]eV%O{z~m}ݨ~ iάveʰmyMZ:$>>ޑ!xdtK+3i~;yyeů7|Y|P?0T_^Fws-|!pKxj=)<*Q|30Kj|AkjBr;2C_iN@֘43w$lϸW7~shyr'cUfjRfo+ėq~H)'ȣVv%3ER7({ڟO26¾G]K|5{:xiA\Kzyn1#ذw}./v>rgmuBBr{ȋǿ9уY:tAGбf$ ЛO)xxcGQn%?A9A1AI鷫^:}FSjxg09>9s=ܵmC]Ï,뀲?k޽*ۆt(bϫ}H>gW hm{3p 44ұH*o$4 ׺Þp~POYhP8~,'FrFIkIV8FOjՂ]Owo³*ݪ197?γGBv з#Ck2Y%FFewd f|<9E]^:VoFm*i2>̣ 2TnGROĭa.hjEmM_6zOY9s\z.̟PzݴM냮T5rÞ?a'w3P3I =_:hěUu#F/v62Eq )_??mǹ^+'2RN7"LߟXӒ}!.^kFdJ徖~Y6~n m~ hبk2 :'h;+?{k]K?ӟ:܍0~0ھӨiIn97<|Q+<=尾Ïc;fL ĜoPH%LNq}-6/['#?埉;Пμ*6k07xۈg_<`]h'{`r{qZX?gii6DD #>ge@GinI yg^Ow5<"}oL>1soy>f%VzYzlrt\茟3=??u'ǔѿulpgSجH-C x_^_64] IدI>s <ba*.owAӛG!jH>jo;(9б2>#|#罐t&Wy'eZ7 ?j> }eī%?kۿ}'jIOK=e Fv'OP׊e~뙉saKХZ_M|S(/g2G~<`6_yGCFM7oXOZXZ?d圕=;t$a[~+_nlI.NAl#sǢnҺ7xQt|`uxUR"f?wNH̃˞X[Iz3 wI}LI;C&؉#kUDE`8>8rIsg $gëF6/ax= K^Ts1Mc+׫E[&\73z-PVSCxH%a`k _ld!_z]?l}%q|ݐ\/W_ kg9ٙrHt}f~|tQi ~2?oѺލfM|d gcm%&);i~5с6]/ u fH7lԞV#P0ȏ7o<WoU>7vFCmFwY~XtVCe`Q=Y#QRwpe3rv>f}A=_ܩȓ {--$4H K닯1^;:^x.&Noj?%~?Ol/ј=ᯠPv<|w)E0ko)B<"γ :2!Z݁#=WS,.XOyP=rW _h6" SkPM>DІlr]V{拄.D7c)/L~$em X7j>at"c~1.|i!ۉ < ?"ó3ɼgBb_F<h0&z ݻ)z[ =?3`|}lm&}|}cu$ܣ xWs'܅=Ibml*)w|<K!d)üߴLhOx2㭬yőO8Eo6mW ڟyD.)jD,dwhH,= حݰҫFm1bz+\Cf=`Ԗ b߶_ X6Pxo.cY`}O&GmE.ͱ9 Kz+y9k|WmXS z7к3 |k5x_"p=}t|\=6 av%ƣo dNCm;͚?- pljL3|>-έd(߱;0D=ArH.sgY Xn/Wur3Kc՗l#Ej2#"(_G^}jǞĜ2g"} sTA"*b!sT+^ wރ[uAML4KT> J3wEO/0 Jaw'0*~C![jx^/|>*Sx0OC ~P=}+-:vl6"ͤѶ|eT1ڎ!M ZAg 7/"lKKW+`0N;0z|;oJx\ﲳrB-ٓg4мuwQ/jL |n̜ 8÷,3'Fޘlû4Aq%K$rhZl|`Fj=, ٙ쐾C"Tm/k0G؍å漳]G1sǣ)}Wkr.&\9ޜ(7tF/ f$XB~g"x~ TwŎU pn`dž6?uO\Pߐ3:w마zö|V՗O|W M(s52} \ tZ3Frb1 Eo+r`mIc^imsWVn[Qrj#Msh?NMʟ;.Oў('U;z'Err7霋gOW )sҤk2{T#rf[{8]k un-ivN},~wdNCq2d zz^;| 5^:hDwyo?^?oOQ B.ZI9CC1&kgٍxdEJLYo?*Zv6593$Ӻmi{|<95S͕'Hjbt/LaEoXnНkx0'ȧ :,tS#VmMFy.nfһԊsv/$A3I8{ nbA WFr?ʆ[9ΗD[tb FȀ{6dz-` ;Mm <;2:Rg ??ၯl +vY8ʙ_Xz'9 L RwDLM䮹VvBUGߡ*̕')}orlr0j +z/|;q`mٯUλr;{1@wftOň78ÎjҠ{ڝ"::9.bnPpuX -AL<ݓo\k^77S~u'[19?s>\6g/lL<6w;`Vc,i9W+_m8@#/7ߞ~3T]B#^?Zl &ݧgGrAY8ٯBP>Ii.T\O_N_E:&EWb!kPb [nKa29؛؝=9i'ÝKί`FD>AX⠨;v^>(J_ n.{i枠)zG~ Rc4=9,W5B7f0wx'Th~oX:tܺ)kO㱕6z=51~bԼb67O "Rm[Ln'kNxWx"f@AK'gkٻͺ_GZN1?a+-.lss-yt~ :/s"$3Д!k"?t|VN'q]y– l9_(=<=Od>omPCz~m;muC0=+r',b{U;#Ϙ2Y| k|9iCUS3{5RSgP`5efַAh|%xUĝrrh 'N9ncla#A"8{m {Xykqⶁ?)Z]c< υ'К;#o9<&/&t~—~|{U|oV_b;d{ IGrVnlubk}  {t,guO wb{7. n,hojF(PGOi09 4͈E_-;GfmKtl9Q9erkbǺ6'<]fFl'q! N=IdJw2t;-Q|B wxw&$}Waq{e1|-9 =37/yWI+w4K}+Zg=L/Bjxt"_9"?m\k,W9[2KcYz|$:܁\옐(?xTQz61}2T7>3DM-2_y^ xޏqxkS/i'> kf^0v9'l%H>vQnu^Ma79? ob{EcO^x3LbՋ}Q#ܬ~q=`/݈򼻳^\FkbDfb/ q~m>FuX+<5bq.op:11#/.U Eksb6+z&#GxnǼgrRr5vǠ<1.O#=9wh.F¿$OHDfy?@s+ĽvձH ݓy㹩| {U K2z㦨̌[X 9<~>ߦw+yڱo^V?a74bߋPʏ {כyĦ)5\<߾Omps)1B K0$v5Ԧ]:^,0)~Nxmgx7`;Qݙ4g&oѩ*H+|l[}߾t&k?E.fNlW~6Vfޯ=̽'ل=?GY8{L;|ϵ'kԊSyևN!6~/ 8>0Yza!>u2@ ~d{Sw#3G֖`bܳ\[:׀̓yPou^^-'i*.gOInٟѦ6psW2d0 uǡ3~x9̙={Rgg ;U\ö~E:W),DqhU!zoUhi}>o>ҳ8ee E*G6s⑼UpV!ؾi^ e`8l7L1&߃؛S[?X.ڋo[sW%\ ֫ۢ^wI h|';ε o?X<]}U#ǃ3V~1!xKM7dYX̓˖w9p3G'!qT`whp}xpkz$gw鯭Z\Mm l^gIn 4KۚsM8p'e| k„6BTSPNYZ3fO<Ez1FE_-?^bwqRg]q h`\?_(WȀ" 2s~vl@:?/wӇ3åTd_{8X߱a*n}{TI>iEkVO?a㳀Y3rCzDr,C]b:3Z7#>4^=yD/]pfaa์.\/~tZpiCk,6²:֥?|ĆW6+3]˝\;NO3 8'6rQ^b]Oސ7^Q'AqpƔ=u_ 1f8N\gN`N32+3br߷bxa?Q9޻[B]^;i6psq = r \qM@.b}C|>~R1p ~U)dͽ:r0 _?.yU|z0}C,oF7N;gvNbsOw"7b-](chjOM/&<|,9'̚˳zg#\i}9SEj'ѱ_HJv%EfŐk= H榁n2/9Q}e9tx۴S,Iދ03O|L>E0dX1IԈ;7I}),9oٛJ5]WCx~c]ŭ_ 'r0P46=x JhާC}NEh䳡pxg2{>|\uZEwR娠ZA$1;g;_l/bu3;wg.q]`];lw ׂ+ms%u˵@gac]mS AᏱߴ m2WDK|=GNgT儾|7,3/x+m}F9\uJ|>+X_ WƍiA7-1J!ω'Ài=k9Ǽ{Ѧ?$NcM[soua"O(CyZ2by3lHIx/,]>zIxz+)j6+pT*gN0z0 =[st =dM ``-cDZ>&M۴5̜"M~J[?}z+} ;NIf"xWKGN)֠Eu^1Kg]`޺XgOe?KPnLC.>&}oy mpwOp@>O*|j=}_=hs٩w,v5fMvbE5cIV3arQZ!_8*z Y K+J>[ig4kS_] Naw(ȯ 8Zx)0*# g ?ȟuijtPB?*UeT=w'i- 2jЊ-k/;HX| 茼A/>h6&*@~O kkIޠ!I 0^DaI(N#\=KV V~5UϪ#Y)pѻrlt|?aʪ."D\+-I\DN-կD#zܭoa?@:"KܮQ;;,QE붔.jk M~XZ;?rY,MR}(tPJ곒V'9ihaNY_@EP`&q_曄0 gg3r e^XD _<#?g{+}&Z݃h 7f qb@4 $A^0r>*M@`T'd O %aqJ^"+guP, VPrA1gl=qĩ+GaL]I;aJM~˴bLH>l˄Sp4`ި4Q LFjU! VS8j! ! uԡxox[DmWג#tU"vH`wGFeqڬ~;5|W'YP_gWҾr@ƺV=ˁW(?98T(lbT5/mU`4M! I0,U C'޾@ҥI"Gtȕ#Yv.<5Dm4#[痟j}TZO#'fOȑDZJ> IKY8R-=[/ҺSӂ-??3fG>p@5w*T^0XFEYGN0r"ԿcZӶv_kWԮT:L1,X/x ~HYD |zئ%c5` eR\3D./l 9 D`@CB Xk|0$KY[<:N)X s<"_'=Oj],g{+Ozt\:OBpYo @tWZDx(DW0)V]+ |-V Z [@8zBK 6 @<@"B>>LZqK0\rิ?Tte+$ ((Z*xnzJ٥gҽ|{zrzF,BYJn\86Dx Wh\;XRxѬ:Y-!Y Q?]:)q~Jq4@B py뒴 ٙX Cp6f s"y9%q4e3a~NЯ+pJ/2vB)g獛ryyw݇M ]:huBE"g7(|ɮ5lan>$;Kh4EX`S\=膳׀V!\9,&@Ԑck2\%9 4P$яe0[ qK`ض۶ y==<;bV C)__DK ٵ`bEհ@ UA3QCZQWfVp`_%` l󱂻v"V4_J@1 P ݉+E煮Syp@]sf H0eVXW-b,lĆQi /]da!=Xl),Zzp&S%8fҩsx݉:$ Q/5"'^XIAeכr+sNmIOoHt^;pdU }S9_i랲f^ps0|O p׸]RIJ^u+gފm(&OI z = G!i>HLb9*eJ[8` fs͇w3XO^A  Cy@$f?4LSU3H =c ;!-;lcy ywn[ +;dˀΘ{vt"0y 9eo=^=vޟ74?YL8̞r֝]EL}$n䱥kbtކqj-ownE5АPWT[鴈Mlםet(mvԛ/cZ$NlmT~ic7h[ի2n#'7C4{흐ģYsc=he0k#Dԝ<6.h,Pvw ޹ 916Arƚg0k|Ęߏ@畼[Z'B#mm{i=gp1OEv dJy{gm<~ 3 ""ڇ^7TT=3T{.'F{2AUiiI2 q}_p=v  Ε xxcSFڜ-&tl8\גHW ՙfC|<?Lwٷ]_kvErG({{v9V҉q և?;tKͿ ] 3vsZt r_-]'A3h}Z{%#.Xz>hb*,j_8wg:/@=F xZSMyZr'{:w!e֛ cJMz'Nn=x]?LRo;'Wm%No&e>y6zxǗap]W-qWS^٧]EXdH^>+>ߣn`/~C'Aܠ8bϽjT yܼ$ x>7$~sEr xr>7.>~m/;զ9xPd v;m:&a*(- M1>H WC+wݑA9=kBQG_. 40Jp!#?]V*,HUA ̟Wwnm.]w}n.Lk-q3L;5y-VcX[*Dzȏ B<}GU\ή_0IͮޯOvb6-˧fq x7|6}mۉ lo@p znV8[ϱ7~8=V>54);# yҘw\ς+Tz--‹v=;е,@'vz5;˱⩴Qb` ):yS«(L!\{]ϜWM{;%šQ>ʜp7'89dvZGl4($:ݯXټ; gd Ca_^{n '*idM84vTO̺Ϟ~7?m%zo,Vn֡|K9j8!^\^2xhs+t ;xxװ}"}^]٦ n}C=G.hkd-;bм?rQrR=|oWc M|ql='Yf*X>'d5+x3|o˿۠lȘZ1pzgA;36"Ժ`kZqxu}F,go:ѽߝ}ߪlVLkS c=0E ]CF߅U#16 ߻h}3<7 O[TW?{MZf8~89:pj.nwo u RG̟ l{NdD[y4Au<Ioq!S'>]zu#Xͩ(O'~}xmC]e4t 0c2'5~IhځU+׽-گYïuD"_{|XLbi׼r5f/>tsɩKU:fVW68`~q eutm{Y<߽c@bJq;N\+9zm"\kwp8nֳz1ex6zݗLq>'~"^Ǎ/xUqQ2KczA"_ǖ j> /~k|#k^qG!Ֆ_~_rsڋE$%^{n-o].ܸipP]R+Kil-c]^OhlyibҒ(0ˑ9Y|rQ 2Mt64氢x+ay>ks:mVokM1Nx3*Çf^|xQhz`>qGX;ruvC3ntzş,Izm2^imnR=~ZdܗQ '+{s0k?UγNKG퀃)>z6^t}xR]W~䂣mGkY{/1㈦~xntn,Ƅ/̅.ȉ6Z6$o([ƪEMLħ͚غF9$ڃNe2b3 |{g'?hAz ں^II uNM@فv"IIC-ltp~^+슚·[nN<_; WԌ.k9<4lj>*=ze@7~{_nHM?ZSw82tc ND/g\?UH:/0Kϯ^t5\t캫ۏJ)tzX?mjK<M.,L^"? WjAuOlœiט ~yk #H^f@s5 |x^.^v-`c_ϼ9[/QhNu{d$ڧXգc^8 7`?~ 5 G{__py1g96rq.pl?xh.r幋 J9-غ>rW-xM`J{|bs?ga ęqЯ`BGEY%MڻIkkg?T&\kVXWOf.?CJw 6{[8)DT<NfU'|zMIoFօ׫ +9gW6ǼjE%??ͤShoP=cy !vV(K9/kIFZ]Ϳ;@.@>XBnXp][`y.jͳ/r͞|pszΜ"+~'Ixv{2-r{vo'ADŽ}?J}c{Ԭ9I~y瀮oF(b9\I/3˥[3<^y (gbqOޅnmw`{(Iq^v4N>?'׬S|KOFg y>B8G3W[Mݵoi=pJcveww_~Q|(aJ]_JN/}W2l9W(|x;k|8!4|;R].T ΋ ,/{Rd315t֒bsy]] MP@B.aP8{}jr5EָDu|'L xN 2N˦G Laan hXMIm)Eȳ Wk:s=8:y_]Ԓŋ;K'+S-ۧXO|Ƈ9( æUBWN@8+%e1 e/l'mYZuab- 0R ɡ ֶ>E{aS{UK:tEG YL05Y2vY/b'#:ze'GOVOJw0$\i{Q 6^8fY56²X bVlݜ6]d.ө9X%T5vNA]FR{3!w .~$8ȟ آdL[VLu aAY$;6f!Nyh=a8Wr]R֧XY*\gqʰMP} ]گjXsld"f~ED+2X3yy) \갰ޭW-n?˅Vs;P}xXrȚrbsidUע1` Ue4D~wḿcBu @4\q̅@ZYC"m[Z-e>Vܠ4BYY9ld{,Og :d~@Rq%XR1>˿+ F834EkxJ+|wdgqFgA̳+"}D#]U\Aa˔4TB+q o-+@#8>m*$\k{2VlZYb؅VOʰtIBH 2e;[oA^?~(zq)Qw. i} W ɏCs~:22>ː)M0`+]A?e߅S5A>ڌ/(~b){j)8?0t5-b ز:pY'[F7mm4uNZ$9ɗU=ӅӢ,3r~ܿis/Q* 17!;oP> AvD-2|yDCqpF5srzDyqb(MsoN%zGXF|<,w 2Vʴ5߻^- M Iٳf'LϿ3wjsӔSXl9Gj<+ӡW6y FÖ8mRX43Я^òg'إ A&0FIiđp{O6!c`tVC`87\&ݳ]r`''V>7;\fpβ9x)&1pYu?|EO{T̜d7inFK=;'#iu4~3WꝌȾ9i-7=LXt˩\QBt-9EiKY7<[ozoeewā`Ypg`( V8, ]gguЯMlSg%߫\ҍ.+-pcA{kt/y 7K؛G<|]X2(M}w ȅ`W[ Ϳq?Ч{d-`9j#/7xVφg&o{giOuk!0Q.j?/eO[OF&mEҝ.?6>=VͳÇkkx"g?'ǝ}v]d{E{1W5S} s@?w0nn Wz|UJjdȐ&z"]Y^8L)GA6yDMU a.h,ęGV\#w o6n'k>i,}5=PsS^D&OkeD(ױ3ږF88Kìkڙ3P|o ky%kQ d\ԫdr_]Lf&_sO(x|GJx`%66P˂~ҙ hlͰb9h@W(оgjR]3ަ/?3Og-O"[q-ܿ?2oT}r_sH]m׮_חك<}zxi;xm|cHV $ XMr9s\ ІeQM3ʟmfN5Y"WG=o*i#3o5%_YOusD.5PLi]SIy֧.3˟TZvݬPxi Uڨ|iׄqNщҕNAX6[i!Fx=1F(O*=~emXe%. nJXoxޓζ'kނ0vwWL❱Ylf7sk]Bn8u#"wsdRN^P)]|KRc"64SN^tD3LBx~RxDWs$5HڝŶK[7~Yh|>[2y|ME`̄Zצ+>R{|-pnHB'^mrA \=\;^ʹ]5&L`Ya ^|q>ɋkߋX*Ƹ,I8㼊.H$UacH#)d؁ Vnb8fА%P(Yɋ9X S| SZ8D3DD!'uyy(*\ '{fVjon-Ka!HͥM.2l)q˜7psruGiTG7Լ㖳ճ ;$~i~ =v#6}ˤIzAπ,lc2PS1bj ؘ5f&fEhhjf&5 0tJ\qC):3#$I:  aD`6Q0F E!$'DJ Rd8RBxaPGA asM@^!P~xG1fƉy=omZZ `a{鍛YzǑ%j86)A˵x3vtյQ40`S'˯ibp/&55ÃI?vʟfj4̚5pyMd1ܩ!vT]T9sznhoERpaXk#?R Lqr畫G_aY$G_X21UW屢v V݌dWku<T!;dkeƭ, |N.;'V^-^ qWS[蓙7!{׉B&ƕ<(L˵ &JdS%h@*?B@f!a)i=j]X  b&_w&8A'ک0Вho,.HfI eoX@jLgznt6@9x,P<kHrM'PL m B$ 3X *@4b*;x}Q$0X21*kdDH丹5@?K3*u7)|NO4 ,:/.xx&S1;_J`{ |rkjrECM KO,LG"= a!'/~@ m+6g=_ S{h4[izwi9C%Y/)~74RC& !#W*SW%@82.צAѹp^C"7%&q.eaIMhh4u2"iy*QrVՒLq6P,=V/ы`9j-g0g !Yo ]aEE=QT*#>w?:>E-sBnPTtgɾ8Э9rL_Pav:kJ0N,)^,xg?d'=\.t)ߎÀWd2q|\ß XU&&]:x"b fDp܏t!ޭ*[)!i$ s(l"{թf$V]Ž 6_Hw.|+ iC4A J,j+ E=^oQao~W:L ܂APcZj|bgpsw4}Q}yg`rr /Aaq7(_@(ys[Qo L\< }>Dȟ %h8Ir\ւ=qvh`!Evx05Ir}汲[ȚPrZ! ѓ]pQL.;h$ CǓFsBB\e7ЗՇo/q1l#/\Iw0&jHz؊  ox.# XZ ;o.<%< ZӅp7oc>lMz,mEdY~ÁTdVvIH}3 QN7fdA_?n-hiuvsbW# .Bˏ@!0F\f}6K%wYA:0yVÀ'1(,f-?M`P=$+wAmxwl]FQa}+ ޲KX͖r_T*:Iy82j5#SUio魉%@n"eF8R+AK"E&\u\.i1i\CpL}'Kn,͵Px46JLtR|尯Gy`^f΍@v-fD#yݓ.7FSi'xqkK M1\MImE6'#!r{] @bCGV_elWi2X@=' &ݿOuay2@ F}mJq] iĖeN )wKHCg殸z ިq(.f]F{ۘFH,ɡzFnh׉>{EnןRґQVsϱBtP?sg >?AU'1Dܗ8ec69(V!N*QrܰWs=qb;ooo}*Jpmea]tT"rONMH=r A/ A*l1IqvpfIc [EofIUYnP?@Tf5>Dypesw%P=-sP;^UN _L3L_;ȅ{mauKh~d3˧zAxZko.뛦Ntmee]"a@)Ɂ5}`k IN~pP:mn`]XZV`13f@J(rF\jL'Ux"=hAq%DoDu^o[vsn0N]tt[T^/mHD[x;'?yrSE7Soٴzb|1@m&µj ¯NtWy]ӧևZ`q66͝ ijخ:[U/"W3roy yN zV,܈Mi5 0q@ (a8Qq&w]}?[UOw?7oz{vBߟveނ^LhCȝM>yld"Cс*8^2.\vVcP`I)O4Hu^Ƭ"G5 !a!0WD )m4,$i4X`*CS.YР刭 E3 &Ḧc$9 BtI`G(j\+Vbfiq ! :CZI:Sq"H#bdX_c\4b(E%BBB2A JRP#Ӷ/x֋[~ #g.6V^IˈKNqSAGD=(3&2a?x*vQ$j^TC%vVZt349zSϛDcK6]kwΦ`/v i '<1koy(Z-ajO M85U%ȸ }zqLkt8Ř? 9sjЍq' !3#/Bng<epm!kzlj`RB /A┍#=h틔2-:Zfx8%r :pTqbL7Hc3QvL/?XKhwp4omXff7$%Pjz J"aӠbÊ T2a?]*jZqt*NQo[qS1˄x#|dc`]k55${b/۳ ӌ +ǗHxƚGld l^\|{UCf LtWy CuEA]K- ^bn15?'8S˦o?Sgc7+BJ@&MZYVD4> -Z;3iĻL~yaЦ e+Xa5}Ԛ;zg*cEӌZW[l Q%Qּ2!z^*?qhjt+mo懵qGgn-yt(V);JXˍcgq1h=)M8v0_5a\G8L wA]u"X XeV!?!m)iA O0}\է1KC0rl%PF_IZA|S 2C{\[kD#ӆ̖'6o:Xg_8uoow^A116hCjq.v Jg٬yjmj xݙWc 6+tɨvbpA@u?X%dQ=ia6D48/IҞ!OL98JV##K6Mhl(?ɤ, WKAn*# f7H J~\YMxY7a;RWu:"x2gʺh\\JY疩n|g<㿩6_|ŰXg'^ѰZfX]X>̖h>]D_P@ ge~z5 [,MlSVkmG?<6IW@b|( O ‰y"Y,={r9917官 ЄFl/]C&U:=>[Uq`:iͱQ AԸ*L8dWӰ"0>[KM]V"f"'&;[~My²SC5Wץ<;:¥ S<ĞP\j2%,BM1T[Ґgo Gjb1X%JT('eÅAˇ@(@t1_lv5\(ڰsͽ@G%pB]pnv.v!"tҺĎ%#]ݹ˴ sD[TX[edSF+nEE97y,^^,YFI2LJfz|GJej銌zsQkLP("KM 1-FhDN3u8i's !AA?@FYHӝ.o֡jAjv³kF۶xLY'ygVSRl<$قd͘هtmG5vtڪkQRR'^w+P)뭦]KK/ZxLB;_!H{\эXl=$9tp4!VMY'+Ymx#ѫ%١U\g%}hz9*rvomÙ @jЎZck/ r_o9lyxzЕ/`fʏlnhJZP&2 Vr;`q@Z;$A2 ̰rKP3`pXX "Scp?P d`Տє>4MLa`XC\ :KI֣0t# Zb0L;zxuV `^M j"sYQ\Ӽ~gOw qO^z لvL8oI N8)qS3*C9 L-CpVH d5,7S^*פ+os!m(skBet\Tlt+ʫl碪*ۅy]{ RP;:ΫlF,MwKNf4olfpԻ 4bakucft+quota.pIOVECMtyd_ysf_qsn_cblydnef_xuru_i;G p 0D@PmaŔbLZ&90!M0oEpǕ>6F,wSgU9<.LMLo+꤫;g킓X2cUx&"| B$ߌLi7'Z<\e[z98kVf^hhdcv?$ˣH7@gbz'j<ʥ%D9Me%w0rD dX|ĜPt 4X0p 0Tx0 ` H0@pp`\DА L 6Ԑ7W0X@D8LpY0Z\0]`0$DdxP c4d0ef$gH@ht4nopqtrsu\pW$XY?`@d4Ag@Tp~Zw00_'Nǧ"`sАl8 8%@1K9j9ȣ lcpl7PT|E<XW*%;FcӾn.2ީƏ@x<"yl6Vd6xIBH.T~#QzM><xʍ۶VoIs0Vх'/;]h_bi`#;A+Уe턷"srifr Qp2:hn /*Mu`DNfHW<hNxf &vJl,u^c$_ ΌWɖ2xz21Ev NM&}LhBg3j INZ&&% oC?U׀TLg(AI"Mv9)*#=ENɢjvF7^} QJT')lT 1t\"7Bm'ֺbled1 ٗmWu}v{HL?m&1$m뷙Rtgve,Ph\@k 2|Y2tvqnђA?j>GPO kthx4ɴ 5;|B{ r 쉊?LhM3#I/w?,! ųTb,=SD&}1b|Y>N%49% jXÑbѫp\MkCNӫ$br}5˭,2) 643E&|鿨3M&ϷY{CCu$ 7GhHF RRJ) 30B*gH&L^IAmm4cp}J, ׇФqsK#sK/~gҁLqhkjⲠ=d , &^9H<:ngcmT IIl3Hb^mm颎eb!#Gx5S ]'95qi0)tGfԪGxSک'\Ġǎwi{Okź_f]3l4a10]âT`)LJpsCÝq%~=3c=c4UC%P*=GKqnLM;Tj:s/upS4_eԳG2SQm| ʋ͇W 2g+w1HL8"< &rVUÎ8om"(#.U.LeOsoہ:k+Sɶ;M!NxǞU*q?U\QZpG,Q.H>]̤A ;!@G'Ƿ''z.ӱ- ҉;~dQ@ Ѿ70wrGj A݂'&xCc^\8T@\;!Qu#rdJ#ue4Sy(EGGXoC|mF T'ۇ?Ӗ;>{;0V@  A!ų'0^.5rea42 ,z*GKI8=|9\UUUt.$oQ/Rɫ}KYK㊔Ce2p0ɈE&E" , eHު o3$VIRTe0p 4;T`&GktԸsIІ Zv?_tCb\f(*@h#x_D e6ddJ;7ΑxH3{f?ŋY0*t tOdfElSrD[hOc΃t4细NS>yR>+H~)]%+h>{~ؗy}|X1}޷QYmܝ u#mFQh,3ЕApj!> Ø4wb/j9>l;wAտMwot鳘(h#@_2Oߡ~w:Q,L=5&TSWO!᪒cGE|ןY3@#摔iVmH,zUǖu@? A'Ja2 ͏#.),7ZǗEZmkDkiXa4sul2A|ר4m~b ￰`Uׁ}]8~ @~ Df7ǿwWP5˞4ui*Sx"e]G3ܹCks-G0Um=F(',-ltzW_-^)~}r^=W-݇,gYg,G@?euct}Sb'(>!]ߧa}[~ڃ=fOC=bO@@>,珚7`2E.;.a;t&^y-mVdO3IGU0GQpmvߨ'K:mبѠ4_3<} >001|Q x2oWL' ? hN]m)k~ΟzHEȗY/1V/Z/0p}Ub[~Љzr򇌿l}+Y:h?k'Ȧ)j<}%_~OX 5Oi@WRw*8ߥ+UwYJWgs݅1]eW[ga!l$Ca(y?U10d㈾4˚o#;ܧuӘ NgxPNe$q1C.ߢ;o,G+N4v**\~ L|.x47ʅ 8ʉWJnΠ&)\Ԧ:`[U _z\HCdA2d1\d1K\-JF%XAx@%Kogb0`v#&l=4)L&!&(p&h*4l'KY r\p/WJeXH?&^.U jh3y, 0ap6}kLݰ~6;M\*bTu\&av6,{TDrX+U}6>8Z^ "?T \>/bk ځ+l&12#>7"GE^_iFG.P-gv\|}tX3Azx9]vW׿gbUYw 9Lu_&\;^-:X/2\Jr w㬐Km/,0njDMX+bgjg9\?uU֢lyj\llҎx Mзi1c+ w]ޅcL?UT~cK,ӟnma+rIB}"?E錿`$Q`{3zJAa[TaԃŖ%m]ebz˩>SMo}?%t,a$0DI>\L\~a}8/ xwpᧇB?0Y S?t3a7i3/3uJ X]doYuxuԴO(Ҷ5/t4(^jgf @l6,c(KccH@@BY8.v=IdMޙ-ae[)eEn챊=F9 u Jӂ$́?_orS0Ĝ?Ph5h/kb>B9ܸ|SWފ81Yw2Q :3re iZizmA\H6#J?hR@GF)YΐM1DLW|TE 5$’xd(y#,@Oݭ7]d͗CIU4wWI@!SY'ykwu&d|UHJ 0i{v—&;r4i/pd5NgV!y.o/|n8e]ly.B`0!\/#`*~ȳGr%b?kJp&e$c iQ݅[ p1ӖufhAs'\G2|d۫ssi6ð $G\Gj0n[LgΩpE^ gPao iBӰ>?U֓2FCUt~lQ jQU&T5QOAuL!$C LK93oO$inLRfw2qLIb۸ނΫ6 Չ{0!oXcX`~(Gj\WѼ@2 WȲ4\ 6MְNtYgl>&ܝ{hY\⿱B4ElZ<ۮ\Τ3'4#nFs dnKuwN4 ~ayoSi^GCUL-FsخO:1l1%&^W.ӡX3fd HD;^m̝BE ц%`ɮڎLJȏ tOq+1)n)\Dz~kvD +!:v[ORy#rtM||=;!qQ7?k{eR:$A}z Oj_/E W ݼk-vZLzzΗ}Bu-jl/rܧ2xvA[btlmdvfI$6rh gU.sGʴ'Y]f \4BѦgjI/8}PEx-F5G`W"b.hq#-ʭH 5אk<&m"ysd7{'.'XApKTCE!leqk3yu{ T2)۫[#?:qa?DlgzB%D{d{ Xs*CzMS.)vQ'ݚx]iK 6O5{Y,nNh_3yZ ꏃVYO|3fyGJC @zϚœ"m(8U;?=_v1u](FsH^{r/_EG6D tiߝ94QbB̬# *}>hKxxD+g6{-1G}^5bLR IWG/vD(lP†| ~d$ *$oC\$6P~ gRН2UǑ#v}wgwVuZǬmZ̊ wc =oYI5"83^8 %R |I4&O<+~70S+x3dH˦_'Z@`?[NQ s 4@} 4' o]h9l\2&>AD=;.iwŸ}n |N<5gQphV#Glj`_] ڛɴtcE 2nk`=;T2aK4ԨFAjl@ֲ0B8j[yo!:#"%loO}?chڦ+6L&jFy.2&ENJ4a6 hF~Bu1Cx͊>DG2׌uudEölxxw"N]K@ER[`VH}c:L&L !{_C& >z dq%/PeMۺS}H1],'ݞៗhU^; -y2063\_!zŬxѫlيdk\mGvJfasky^ fMp;i$@M9& 5gMj ӓ&Oxݏi5|s붲LbAF_ $Y*M ? kA{Taޮ۹l^+Web19^QP`e԰okLO<[B;bKr܏<-OqӸWP抄+`;qT6(?X]ǐ1LZ>a^˄Yg/(GTڧ"/bΘaH낈u&Nu6KQ04Sʼn{wgF_("\\}Oa`v/PN,o5f4Q;࿊T Efb4fTw*ˊ(k>ymĂ-W{^EV2-2$^taSGDuu5Ga/p[:l@ VaYrk" vlqN8Ȓx?VFw1bqfV%bjgz}}3 d9 9@_tc5Y5JW'ďBG0‚JCB3M}fp $D5/RǛӱ &!|ΪSmo^ʰ""[.@I/LAڡ cB.\!2)mju@6;[_a· -H!qӣvO0ԅ|hQo\ڹCZ, rǨ:Hy{=- kN:u#*ј$Vo>W@}OƘulXc7T߷5sS% g@gͥ#YkK0nZ6eY߮5u_&u} 0S f=pו.{)Fs$Nz+qldMzB#$lũ)iTUShGBF܏$7jyl7Jj$ 0aIE ~ IE>"){ɗZ1<4S28xDWu0XR1M- x51kUOSUx}|-mvqV-JާMoFbۧ7$;LxƔgQK-(um6'K.] AA=cFRX9d| rsG=gꥪǸeT2YnmCb;.s;}Edu[ [\0cb;+,o7TFp =Q6ϡ3!TT:тLOzL-FVR/t>j! J?S{gavX E|HyU*fa$\cT6DW6X-`&ΈOToaV)0C/ gxXgER!VW1E6uk4>T TkkK(` (4}$2>_R2uӾη9gjV!KApƙ!MԱb,4nn!$- jk0tQ=p ar d uO7$OajIcІ[+Ox^26pX~Ĝ_8=~T` L#dХºj =iw |*Qu%6j(.]ī8=7MFKg|yCP MEȀ0 1ih$"ԍߖ@}s;u 0+?RX5 u896bʓU_Oۓ%p j/{y.UwUXQoe2L=% #m2]i05VO#q+/sznqXR6bɇG됧pYXP.N}cCb:\L`2O*I%RJ-@M Eu [D7Ր{ى0I@߳2341GAZ-0@P⹒syݞ琹m,.]KBnMNs5ZV>`WSx*QRD~t'Z[hOrҷM|SR!O;zڝ#,biz<Va&Fc~gE (D,oT`_!]0z%3\f+Qk؄gnOmM~(,h5dpO0rP(# wj{UsDgb(ƀ$u'ࡈ9 OMV+u\Dn#<-ٝ%Jb34GĂ+y\7Q=LR(P[ ]ypS(XzE%nEV z)ցKMpM',|wΗe2%3fV=b},ii7zZ%# (Os=!,ёF^L?v>tPDmz= %ljj|B~R(g:f`Yu`< QF`V*>ʷK駔AˮbH[*}=tHqYaCxԑt:MeyMڮ?^1P bUGjHzC"ZYldnC(4&+S7xD2VD` ߗB-~<1.&C.$17Юa@ɫК jQ@Uqov]~WVEy 6Nx O@3oy14`ϐu# =>n6fW}던4K8V+hl-3Zv:Tf\oîNm"՝-#Lk)^.=e \/Uji?%KȈ##QQ>j>'JgYZ.shab.p.e.gnu.ABI-tag.dyn_apltifo.ehhdrcc_except_tbss_amicotIC_DEUCT._ $& 4>FND[0j!tB@~Sy _0g?(8(0 Ph pH %@\C24743a1ff2f3e/45c3aaa69f05fcf39a5c74d53d7e93b16a66f10bTRAR!!!YQi(