systemd-standalone-sysusers-252-46.el9_5.2.0.1> M Mv ĉJ4!!%joLne)Ip-Bm5 ']g7releng@rockylinux.org p-Bm5 ']#QGX/wlTLcXEիGeӔc"pU={dT3*b^SW ~Ka2ny\PѬoLcR\r޻dol? dߺ~S}k_%ï•X;2sic3,;6*x )nWˢw fˋ<Y%X(q3'.OpFOp_( ~eWW;%ʰ Eue޳:V9ڦTN[uO#湉x+{3x-~on_w&lռ ee|y _ 8:Z{-t $#pc頺RmjP:oϲit,Ŗi"9m>(_-z{^ ™ ,RVwV0t*,,n;w2^e<-0 œ"G?cb71fe8e253106b94bc387c1923f0d5d979f5cf0ac4eee03b7b64c0b243001d21b176f0ff80e567c049e59663f0b91c527d3934c=sV\ W0>= ?d" 1 kDHx| &,4D L T d  8H&$&3&(t8,9 0,:Y,G`HpIXY\]^ bHdefltuvwxy"lpvCsystemd-standalone-sysusers25246.el9_5.2.0.1Standalone sysusers binary for use in non-systemd systemsStandalone sysusers binary with no dependencies on the systemd-shared library or other libraries from systemd-libs. This package conflicts with the main systemd package and is meant for use in non-systemd systems.g7*pb-e908e17c-f0e1-441e-90b7-e13b4dc701ef-b-s390xoRocky Linux 9.5Rocky Enterprise Software FoundationLGPLv2+ and MIT and GPLv2+Rocky Linux Build System (Peridot) Unspecifiedhttps://systemd.iolinuxs390x@/AAg7g7g7g782d1dbbe645aa03cef6fb6e1f6b82ed658a658a2b1c452b4b7ee7e9055e06406../../../../usr/bin/systemd-sysusers.standalonerootrootrootrootrootrootrootrootsystemd-252-46.el9_5.2.0.1.src.rpmsystemd-standalone-sysuserssystemd-standalone-sysusers(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libcrypt.so.2()(64bit)libcrypt.so.2(XCRYPT_2.0)(64bit)libcrypt.so.2(XCRYPT_4.4)(64bit)libcrypto.so.3()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.3.1)(64bit)libselinux.so.1()(64bit)libselinux.so.1(LIBSELINUX_1.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)3.0.4-14.6.0-14.0-15.4.18-14.16.1.3g8@f4f@fѴ@f@f(@f(@f3ffaf@fr@fj@fM@fK;@f+@e,e8@e@e}@eԔ@ee6@eee)eeves@eRd@d@d-@df@d@c@c@ccl@cc<@c#@ccRelease Engineering - 252-46.0.1systemd maintenance team - 252-46.2systemd maintenance team - 252-46.1systemd maintenance team - 252-46systemd team - 252-45systemd maintenance team - 252-44systemd maintenance team - 252-43systemd team systemd maintenance team - 252-41systemd maintenance team - 252-40systemd maintenance team - 252-39systemd maintenance team - 252-38systemd maintenance team - 252-37Jan Macku - 252-35systemd maintenance team - 252-34systemd maintenance team - 252-33Jan Macku - 252-32systemd maintenance team - 252-31systemd maintenance team - 252-30systemd maintenance team - 252-29systemd maintenance team - 252-28systemd maintenance team - 252-27systemd maintenance team - 252-26systemd maintenance team - 252-25systemd maintenance team - 252-24systemd maintenance team - 252-23systemd maintenance team - 252-22systemd maintenance team - 252-21systemd maintenance team - 252-20systemd maintenance team - 252-19systemd maintenance team - 252-18systemd maintenance team - 252-17systemd maintenance team - 252-16systemd maintenance team - 252-15systemd maintenance team - 252-14systemd maintenance team - 252-8systemd maintenance team - 252-7systemd maintenance team - 252-6systemd maintenance team - 252-5systemd maintenance team - 252-4systemd maintenance team - 252-3systemd maintenance team - 252-2systemd maintenance team - 252-1systemd maintenance team - 250-13- Set support URL to the wiki - Set sbat mail to security@rockylinux.org- add %posttrans scriptlet to make sure our SELinux policy module is actually installed (RHEL-46339)- version bump (RHEL-56019)- ukify: Skip test on architectures without UEFI (RHEL-56019)- build ukify without noarch- Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103) - fundamental: share constants for confidential virt detection (RHEL-50651) - efi: add helper API for detecting confidential virtualization (RHEL-50651) - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651) - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)- udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103) - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103) - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103) - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103) - Include if possible to get thread_local definition (RHEL-50651) - add APIs for detecting confidential virtualization (RHEL-50651) - detect-virt: add --cvm option (RHEL-50651) - detect-virt: add --list-cvm option (RHEL-50651) - unit: add "cvm" option for ConditionSecurity (RHEL-50651) - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651) - core: log detected confidential virtualization type (RHEL-50651) - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651) - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651) - confidential-virt: split caching of CVM detection into separate method (RHEL-50651) - confidential-virt: add detection for s390x target (RHEL-50651) - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)- fix applying patches- timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020) - cryptsetup-tokens: fix pin asserts (RHEL-36276) - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276) - kernel-install: check machine ID (RHEL-50672) - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672) - hwdb: Add Lenovo G580 (RHEL-5950) - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950) - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950) - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950) - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950) - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950) - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950) - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950) - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950) - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950) - Update 60-evdev.hwdb (#25704) (RHEL-5950) - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950) - hwdb: drop trailing space (RHEL-5950) - hwdb: add comments about matching entries (RHEL-5950) - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950) - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950) - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950) - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950) - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950) - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950) - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950) - hwdb: remove spurious whitespace (RHEL-5950) - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950) - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: Add mount matrix for Linx 1020 (RHEL-5950) - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950) - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950) - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update autosuspend db (RHEL-5950) - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950) - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950) - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950) - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950) - hwdb: add override for IdeaPad5 insert key (RHEL-5950) - hwdb: update database (RHEL-5950) - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950) - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950) - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950) - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950) - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950) - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950) - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950) - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950) - hwdb: drop redundant entry (RHEL-5950) - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950) - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950) - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950) - hwdb: Add support for "Passion Model P612F" (RHEL-5950) - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950) - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950) - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950) - hwdb: Fix rotation for BMAX Y13 (RHEL-5950) - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950) - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950) - hwdb: do not include '#' in modalias (RHEL-5950) - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950) - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950) - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950) - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950) - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950) - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950) - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950) - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950) - hwdb: Add override for headset form-factors (RHEL-5950) - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950) - hwdb: drop trailing white space (RHEL-5950) - hwdb: merge multiple keyboard entries with same setting (RHEL-5950) - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950) - hwdb update for v246-rc1 (RHEL-5950) - update hwdb autosuspend data for v254 (RHEL-5950) - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950) - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950) - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950) - Add alternate name for MX Ergo as found on some devices (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950) - Update 60-sensor.hwdb (#28804) (RHEL-5950) - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950) - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950) - hwdb: keyboard: D330 FnLk toggle (RHEL-5950) - hwdb: Add Logitech G502 X (RHEL-5950) - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950) - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950) - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950) - hwdb: Bush tablet rotation support (#29268) (RHEL-5950) - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950) - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950) - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950) - add udev rule for micmute (f20) (RHEL-5950) - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950) - Update hwdb (RHEL-5950) - Update hwdb autosuspend rules (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950) - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: rename .html=>.csv (RHEL-5950) - hwdb/acpi-update.py: streamline python code (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: add Predator PHN16-71 (RHEL-5950) - Update 60-autosuspend.hwdb (#30131) (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950) - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update (RHEL-5950) - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950) - Add three Dell platforms to sensor accel location base (RHEL-5950) - Add Bosto BT-12HD series to hwdb (RHEL-5950) - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950) - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950) - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950) - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950) - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950) - hwdb: add resolution setting for GAOMON S620 (RHEL-5950) - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950) - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950) - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950) - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950) - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950) - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950) - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950) - Update USB ids of hwdb (RHEL-5950) - Added resolution for Huion Kamvas Pro 19 (RHEL-5950) - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950) - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950) - Fixed resolution for pen and touchpad (RHEL-5950) - hwdb: fix missing colon (#32108) (RHEL-5950) - hwdb: update for v256 (RHEL-5950) - autosuspend: update for v256 (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950) - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950) - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950) - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950) - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950) - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950) - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950) - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950) - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950) - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950) - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950) - hwdb: add a vmbus id for HyperV Video device (RHEL-5950) - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950) - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950) - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950) - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950) - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950) - Add OrangePi NEO Scancodes (RHEL-5950) - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950) - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950) - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950) - hwdb: Add some HP IR cameras (RHEL-5950) - hwdb: add more AV controllers (RHEL-5950) - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950) - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950) - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950) - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950) - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950) - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950) - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950) - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - add udev rules for trezor hw wallet devices (RHEL-5950) - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950) - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950) - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)- add Requires(post) on selinux-policy (RHEL-46339)- enable FIDO2 support (RHEL-36276) - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630) - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630) - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436) - ci: add support for rhel-only parameters (RHEL-30372)- tools: fix the file name that "meson setup" generates (RHEL-30372) - tools: explicitly specify "setup" subcommand (RHEL-30372) - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372) - fuzz: don't panic without a C++ compiler (RHEL-30372) - meson: use ternary op for brevity (RHEL-30372)- ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372) - libsystemd: link with '-z nodelete' (RHEL-6589) - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219) - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219) - string-util: pass ANSI sequences through unchanged (RHEL-31219) - cryptsetup: do not assert when unsealing token without salt (RHEL-38864) - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864) - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159) - Drop log level of header limits log message (RHEL-33890) - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890) - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070) - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070) - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070) - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070) - man: document that journalctl --user requires Storage=persistent (RHEL-31070) - fix: prefix of dmesg pstore files (RHEL-20322) - backport new mkosi (RHEL-27512) - test: Skip various tests when /sys is not mounted (RHEL-27512) - string-util: introduce ascii_ishex() (RHEL-27512) - sd-id128: several cleanups (RHEL-27512) - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512) - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512) - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512) - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512) - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512) - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512) - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512) - sd-id128: also refuse an empty invocation ID (RHEL-27512) - man: update documents for sd_id128_get_invocation() (RHEL-27512) - test-id128: simplify machine-id check (RHEL-27512) - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512) - test-unit-name: simplify machine-id check (RHEL-27512) - test-load-fragment: simplify machine-id check (RHEL-27512) - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512) - test: skip journal tests without valid /etc/machine-id (RHEL-27512) - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512) - test: Skip test-recurse-dir on overlayfs (RHEL-27512) - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512) - test-execute: Skip when /sys is read-only (RHEL-27512) - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512) - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512) - test-execute: drop capabilities when testing with user manager (RHEL-27512) - tmpfiles: Add merge support for copy files action (RHEL-27512) - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512) - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512) - ci: drop super-linter's shellcheck (RHEL-27512) - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512) - ci: backport mkosi CI configuration from upstream (RHEL-27512) - mkosi: explicitly enroll SecureBoot keys (RHEL-27512) - test-execute: also mount tmpfs on /dev/shm (RHEL-27512) - mkosi: fix UKI addons test (RHEL-27512) - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512) - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512) - mkosi: make shellcheck happy (RHEL-27512) - mkosi: use pesign for signing UKI addons (RHEL-27512) - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512) - ci: make the build dir accessible when running w/o privileges (RHEL-27512) - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512) - ratelimit: add ratelimit_left helper (RHEL-35703) - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703) - ci: define `runas` function inline (RHEL-35703) - Drop /dev test in test-mountpoint-util (RHEL-30372) - core/manager: export manager_dbus_is_running (RHEL-40878) - core: refuse dbus activation if dbus is not running (RHEL-40878) - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878) - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878) - manager: fix reloading in reload-or-restart --marked (RHEL-40878) - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878) - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)- spec: return selinux dependencies (RHEL-35732)- ci: update actions/upload-artifact to v4 (RHEL-30372) - journal-remote: code is of type enum MHD_RequestTerminationCode (RHEL-30372) - resolve: dns_server_feature_level_*_string type is DnsServerFeatureLevel (RHEL-30372) - shared|install: Use InstallChangeType consistently (RHEL-30372) - test: temporarily disable coredumps in testsuite-17.03.sh (RHEL-30372) - ci: update manpage deployment workflow (RHEL-30372) - bootspec: fix null-dereference-read (RHEL-36284) - units: don't install pcrphase-related units without gnu-efi (RHEL-33384) - kernel-install: fix uki-copy deinstall (RHEL-36505) - ci(packit): explicitly clone `c9s` branch (RHEL-30372)- execute: Pass AT_FDCWD instead of -1 (RHEL-31783) - ci(src-git): update list of supported products (RHEL-30372) - coredump: by default process and store core files up to 1GiB (RHEL-15501) - coredump: keep core files for two weeks (RHEL-15501) - ukify: make the test happy with the latest OpenSSL (RHEL-30372) - test_ukify: use raw string for the regex (RHEL-30372) - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430) - test: add a couple of tests for systemd-coredump (RHEL-29430) - test: don't expand the subshell expression prematurely (RHEL-29430) - coredump filter: fix stack overflow with =all (RHEL-29430) - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430) - test: add coverage for CoredumpFilter=all (RHEL-29430) - test: rotate journal before storing coredumps (RHEL-29430) - test: sync with the fake binary before killing it (RHEL-29430) - test: check coredump handling in containers & namespaces (RHEL-29430)- rebase rhel-net-naming-sysattrs to v0.5- bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952) - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952) - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952) - sha256: add helper than hashes a buffer *and* its size (RHEL-16952) - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952) - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952) - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952) - bootctl: split out setting of system token into function of its own (RHEL-16952)- resolved: limit the number of signature validations in a transaction (RHEL-26643) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643) - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133) - units: change assert to condition to skip running in initrd/os (RHEL-16182) - ci: add configuration for regression sniffer GA (RHEL-1086)- units: fix typo in Condition in systemd-boot-system-token (RHEL-16952)- random-seed: shorten a bit may_credit() (RHEL-16952) - random-seed: make one more use of random_write_entropy() (RHEL-16952) - random-seed: use getopt() (RHEL-16952) - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952) - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952) - random-seed: split out run() (RHEL-16952) - random_seed: minor improvement in run() (RHEL-16952) - random-seed: downgrade some messages (RHEL-16952) - random-seed: clarify one comment (RHEL-16952) - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952) - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952) - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952) - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952) - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952) - random-seed: handle post-merge review nits (RHEL-16952) - boot: do not truncate random seed file (RHEL-16952) - bootctl: install system token on virtualized systems (RHEL-16952) - boot: remove random-seed-mode (RHEL-16952) - stub: handle random seed like sd-boot does (RHEL-16952) - efi: add efi_guid_equal() helper (RHEL-16952) - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952) - boot: Detect hypervisors using SMBIOS info (RHEL-16952) - boot: Skip soft-brick warning when in a VM (RHEL-16952) - boot: Replace UINTN with size_t (RHEL-16952) - boot: Use unsigned for beep counting (RHEL-16952) - boot: Use unicode literals (RHEL-16952) - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952) - meson: use 0|1 for SD_BOOT (RHEL-16952) - boot: Add printf functions (RHEL-16952) - boot: Use printf for error logging (RHEL-16952) - boot: Introduce log_wait (RHEL-16952) - boot: Add log_trace debugging helper (RHEL-16952) - tree-wide: Use __func__ in asserts (RHEL-16952) - boot: Drop use of xpool_print/SPrint (RHEL-16952) - boot: Drop use of Print (RHEL-16952) - boot: Rework GUID handling (RHEL-16952) - efi-string: Fix strchr() null byte handling (RHEL-16952) - efi-string: Add startswith8() (RHEL-16952) - efi-string: Add efi_memchr() (RHEL-16952) - vmm: Add more const (RHEL-16952) - vmm: Add smbios_find_oem_string() (RHEL-16952) - stub: Read extra kernel command line items from SMBIOS (RHEL-16952) - vmm: Modernize get_smbios_table() (RHEL-16952) - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952) - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952) - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952) - ukify: use empty stub for addons (RHEL-16952) - stub: allow loading and verifying cmdline addons (RHEL-16952) - TODO: remove fixed item (RHEL-16952) - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)- test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086) - test: use the default nsec3-iterations value (RHEL-1086) - test: explicitly set nsec3-iterations to 0 (RHEL-1086) - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483) - ci: deploy systemd man to GitHub Pages (RHEL-1086) - doc: add missing `` to `systemd.net-naming-scheme.xml` (RHEL-7026) - man: reorder the list of supported naming schemes (RHEL-7026) - tree-wide: fix return value handling of base64mem() (RHEL-16182) - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182) - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182) - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182) - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182) - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182) - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182) - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182) - man: document the new crypttab measurement options (RHEL-16182) - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182) - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182) - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182) - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182) - generators: optionally, measure file systems at boot (RHEL-16182) - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182) - man: document new machine-id/fs measurement options (RHEL-16182) - test: add simple integration test for checking PCR extension works as it should (RHEL-16182) - update TODO (RHEL-16182) - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182) - boot: Simplify object erasure (RHEL-16182) - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182) - dlfcn: add new safe_dclose() helper (RHEL-16182) - tpm2: rename tpm2 alg id<->string functions (RHEL-16182) - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182) - tpm2: use ref counter for Tpm2Context (RHEL-16182) - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182) - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182) - tpm2: simplify tpm2_seal() blob creation (RHEL-16182) - tpm2: add salt to pin (RHEL-16182) - basic/macro: add macro to iterate variadic args (RHEL-16182) - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182) - basic/bitfield: add bitfield operations (RHEL-16182) - test/test-bitfield: add tests for bitfield macros (RHEL-16182) - tpm2: add tpm2_get_policy_digest() (RHEL-16182) - tpm2: add TPM2_PCR_VALID() (RHEL-16182) - tpm2: add/rename functions to manage pcr selections (RHEL-16182) - test/test-tpm2: add tests for pcr selection functions (RHEL-16182) - tpm2: add tpm2_pcr_read() (RHEL-16182) - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182) - tpm2: add tpm2_is_encryption_session() (RHEL-16182) - tpm2: move policy building out of policy session creation (RHEL-16182) - tpm2: add support for a trusted SRK (RHEL-16182) - tpm2: fix nits from PR #26185 (RHEL-16182) - tpm2: replace magic number (RHEL-16182) - tpm2: add tpm2_digest_*() functions (RHEL-16182) - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182) - tpm2: add tpm2_set_auth() (RHEL-16182) - tpm2: add tpm2_get_name() (RHEL-16182) - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182) - tpm2: add tpm2_policy_pcr() (RHEL-16182) - tpm2: add tpm2_policy_auth_value() (RHEL-16182) - tpm2: add tpm2_policy_authorize() (RHEL-16182) - tpm2: use tpm2_policy_authorize() (RHEL-16182) - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182) - tpm: remove external calls to dlopen_tpm2() (RHEL-16182) - tpm2: remove all extern tpm2-tss symbols (RHEL-16182) - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182) - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182) - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182) - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182) - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182) - tpm2: add tpm2_read_public() (RHEL-16182) - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182) - tpm2: add tpm2_load() (RHEL-16182) - tpm2: add tpm2_load_external() (RHEL-16182) - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182) - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182) - tpm2: add tpm2_create() (RHEL-16182) - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182) - basic/alloc-util: add greedy_realloc_append() (RHEL-16182) - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182) - tpm2: cache TPM algorithms (RHEL-16182) - tpm2: add tpm2_persist_handle() (RHEL-16182) - tpm2: add tpm2_get_or_create_srk() (RHEL-16182) - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182) - tpm2: remove tpm2_make_primary() (RHEL-16182) - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182) - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182) - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182) - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182) - added more test cases (RHEL-16182) - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182) - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182) - cryptenroll: fix an assertion with weak passwords (RHEL-16182) - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182) - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182) - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182) - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182) - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182) - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182) - tpm2: move declared functions in header lower down (RHEL-16182) - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182) - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182) - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182) - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182) - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182) - openssl: add openssl_pkey_from_pem() (RHEL-16182) - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182) - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182) - test: add DEFINE_HEX_PTR() helper function (RHEL-16182) - openssl: add test-openssl (RHEL-16182) - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182) - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182) - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182) - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182) - tpm2: change *alg_to_* functions to use switch() (RHEL-16182) - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182) - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182) - tpm2: in validator functions, return false instead of assert failure (RHEL-16182) - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182) - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182) - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182) - tpm2: simplify call to asprintf() (RHEL-16182) - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182) - tpm2: use strempty() (RHEL-16182) - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182) - tpm2: remove ret_ prefix from input/output params (RHEL-16182) - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182) - openssl: use new(char, size) instead of malloc(size) (RHEL-16182) - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182) - tpm2: use switch() instead of if-else (RHEL-16182) - tpm2: make logging level consistent at debug for some functions (RHEL-16182) - tpm2: remove unnecessary void* cast (RHEL-16182) - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182) - tpm2: wrap (7) in UINT32_C() (RHEL-16182) - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182) - openssl: add log_openssl_errors() (RHEL-16182) - openssl: add openssl_digest_size() (RHEL-16182) - openssl: add openssl_digest_many() (RHEL-16182) - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182) - openssl: add openssl_hmac_many() (RHEL-16182) - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182) - openssl: add kdf_kb_hmac_derive() (RHEL-16182) - openssl: add openssl_cipher_many() (RHEL-16182) - openssl: add ecc_edch() (RHEL-16182) - openssl: add kdf_ss_derive() (RHEL-16182) - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182) - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182) - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182) - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182) - tpm2: fix build failure without openssl (RHEL-16182) - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182) - tpm2: downgrade most log functions from error to debug (RHEL-16182) - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182) - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182) - tpm2: update tpm2 test for supported commands (RHEL-16182) - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182) - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182) - tpm2: cache TPM's supported ECC curves (RHEL-16182) - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182) - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182) - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182) - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182) - tpm2: do not call Esys_TR_Close() (RHEL-16182) - tpm2: don't use GetCapability() to check transient handles (RHEL-16182) - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182) - tpm2: add tpm2_get_pin_auth() (RHEL-16182) - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182) - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182) - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182) - cryptenroll: drop deadcode (RHEL-16182) - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182) - tpm2: add test to verify srk templates (RHEL-16182) - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182) - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182) - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182) - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182) - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182) - openssl-util: avoid freeing invalid pointer (RHEL-16182) - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182) - creds-util: do not try TPM2 if there is not support (RHEL-16182) - creds-util: merge the TPM2 detection for initrd (RHEL-16182) - cryptenroll: fix a memory leak (RHEL-16182) - sd-journal: introduce sd_journal_step_one() (RHEL-11591) - test: modernize test-journal-flush (RHEL-11591) - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591) - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591) - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)- spec: update rhel-net-naming-sysattrs to v0.4 (RHEL-22278)- spec: add new package with RHEL-specific network naming sysattrs (RHEL-22278)- ci: use source-git-automation composite Action (RHEL-1086) - ci: increase the cron interval to 45 minutes (RHEL-1086) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086) - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427) - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443) - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443) - udev: add new builtin net_driver (RHEL-22443) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)- logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757) - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757) - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757) - meson: Properly install 90-uki-copy.install (RHEL-16354)- Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436) - man: mention RHEL documentation in systemctl's man page (RHEL-19436) - resolved: actually check authenticated flag of SOA transaction (RHEL-6216) - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317) - man: environment value -> udev property (RHEL-1317)- meson: fix installation of ukify (RHEL-13199) - sd-id128: introduce id128_hash_ops_free (RHEL-5988) - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988) - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988) - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988) - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988) - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090) - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090) - manager: add one more assert() (RHEL-6090) - pid1: add new Type=notify-reload service type (RHEL-6090) - man: document Type=notify-reload (RHEL-6090) - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090) - networkd: implement Type=notify-reload protocol (RHEL-6090) - udevd: implement the full Type=notify-reload protocol (RHEL-6090) - logind: implement Type=notify-reload protocol properly (RHEL-6090) - notify: add --stopping + --reloading switches (RHEL-6090) - test: add Type=notify-reload testcase (RHEL-6090) - update TODO (RHEL-6090) - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)- udev/net: allow new link name as an altname before renaming happens (RHEL-5988) - sd-netlink: do not swap old name and alternative name (RHEL-5988) - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988) - udev: attempt device rename even if interface is up (RHEL-5988) - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988) - test-network: add a test for renaming device to current altname (RHEL-5988) - udev: align table (RHEL-5988) - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988) - sd-device: do not directly access entry in sd-device object (RHEL-5988) - udev: move device_rename() from device-private.c (RHEL-5988) - udev: restore syspath and properties on failure (RHEL-5988) - sd-device: introduce device_get_property_int() (RHEL-5988) - core/device: downgrade log level for ignored errors (RHEL-5988) - core/device: ignore failed uevents (RHEL-5988) - test: add tests for failure in renaming network interface (RHEL-5988) - test: modernize test-netlink.c (RHEL-5988) - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988) - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988) - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988) - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988) - udev/net: generate new network interface name only on add uevent (RHEL-5988) - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988) - udev/net: assign alternative names only on add uevent (RHEL-5988) - test: add tests for renaming network interface (RHEL-5988) - Backport ukify from upstream (RHEL-13199) - bootctl: make --json output normal json (RHEL-13199) - test: replace readfp() with read_file() (RHEL-13199) - stub/measure: document and measure .uname UKI section (RHEL-13199) - boot: measure .sbat section (RHEL-13199) - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199) - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199) - kernel-install: Add uki layout (RHEL-16354) - kernel-install: remove math slang from man page (RHEL-16354) - kernel-install: handle uki installs automatically (RHEL-16354) - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354) - kernel-install: Log location that uki is installed in (RHEL-16354) - bootctl: fix errno logging (RHEL-16354) - bootctl: add kernel-identity command (RHEL-16354) - bootctl: add kernel-inspect command (RHEL-16354) - bootctl: add kernel-inspect to --help text (RHEL-16354) - bootctl: drop full stop at end of --help texts (RHEL-16354) - bootctl: change section title for kernel image commands (RHEL-16354) - bootctl: remove space that should not be there (RHEL-16354) - bootctl: kernel-inspect: print os info (RHEL-16354) - bootctl-uki: several coding style fixlets (RHEL-16354) - tree-wide: unify how we pick OS pretty name to display (RHEL-16354) - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354) - bootctl: Add missing %m (RHEL-16354) - bootctl: tweak DOS header magic check (RHEL-16354)- ci: Extend source-git-automation (RHEL-1086) - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026) - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070) - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070) - systemd-analyze: Add tab complete logic for plot (RHEL-5070) - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070) - ci: enable source-git automation to validate reviews and ci results (RHEL-1086) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086) - ci: enable auto-merge GH Action (RHEL-1086) - ci: add missing permissions (RHEL-1086) - ci: `permissions: write-all` (RHEL-1086) - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086) - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)- doc: add downstream CONTRIBUTING document (#2170883) - doc: improve CONTRIBUTING document (#2170883) - doc: use link with prefilled Jira issue (#2170883) - docs: link downstream CONTRIBUTING in README (#2170883) - bpf: fix restrict_fs on s390x (#2230364) - udev/net_id: use naming scheme for RHEL-9.3 (#2231845) - core/timer: Always use inactive_exit_timestamp if it is set (#2211065) - timer: Use dual_timestamp_is_set() in one more place (#2211065) - loginctl: list-users: also show state (#2209912) - loginctl: list-sessions: minor modernization (#2209912) - loginctl: list-sessions: also show state (#2209912) - test: add test for state in loginctl list-{users,sessions} (#2209912) - test: add a missing session activation (#2209912) - test: extend test for loginctl list-* (#2209912) - loginctl: shorten variable name (#2209912) - loginctl: use bus_map_all_properties (#2209912) - loginctl: show session idle status in list-sessions (#2209912) - loginctl: some modernizations (#2209912) - loginctl: list-sessions: fix timestamp for idle hint (#2209912) - loginctl: list-users: use bus_map_all_properties (#2209912) - loginctl: also show idle hint in session-status (#2209912) - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226) - static-destruct: several cleanups (#2190226) - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226) - macro: support the case that the number of elements has const qualifier (#2190226) - shared/generator: apply similar config reordering of generated units (#2190226) - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226) - generator: teach generator_add_symlink() to instantiate specified unit (#2190226) - units: rework growfs units to be just a regular unit that is instantiated (#2190226) - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226) - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226) - test: add fstab file support for fstab-generator tests (#2190226) - test-fstab-generator: also check file contents (#2190226) - test-fstab-generator: add tests for mount options (#2190226) - fstab-generator: split out several functions from parse_fstab() (#2190226) - fstab-generator: call add_swap() earlier (#2190226) - fstab-generator: refuse to add swap earlier if disabled (#2190226) - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226) - fstab-generator: fix error code propagation in run_generator() (#2190226) - fstab-generator: support defining mount units through kernel command line (#2190226) - test: add test cases for defining mount and swap units from kernel cmdline (#2190226) - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - fstab-generator: use correct swap name var (#2190226) - fstab-generator: add more parameter name comments (#2190226) - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226) - fstab-util: add fstab_is_bind (#2190226) - fstab-generator: resolve bind mount source when in initrd (#2190226) - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226) - fstab-generator: fix target of /sysroot/usr (#2190226) - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226) - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226) - test-fstab-generator: extract core part as a function (#2190226) - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226) - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226) - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226) - core: use correct scope of looking up units (#2226980) - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521) - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521) - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521) - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521) - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521) - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521) - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521) - test: move TEST-23's units into a dedicated subfolder (#2213521) - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521) - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521) - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521) - test: abstract the common test parts into a utility script (#2213521) - test: add tests for JoinsNamespaceOf= (#2213521) - core/unit: drop doubled empty line (#2213521) - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521) - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521) - core/unit: update bidirectional dependency simultaneously (#2213521) - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260) - resolved: add some line-breaks/comments (#2161260) - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260) - blockdev-util: add simple wrapper around BLKSSZGET (#2170883) - loop-util: insist on setting the sector size correctly (#2170883) - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883) - loop-util: always tell kernel explicitly about loopback sector size (#2170883) - Revert "Treat EPERM as "not available" too" (#2178222) - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)- Revert "core/service: when resetting PID also reset known flag" (#2225667 - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)- ci: update permissions for source-git automation workflows (#2170883) - pstore: fixes for dmesg.txt reconstruction (#2170883) - pstore: explicitly set the base when converting record ID (#2170883) - pstore: avoid opening the dmesg.txt file if not requested (#2170883) - test: add a couple of tests for systemd-pstore (#2170883) - test: match all messages with the FILE field (#2170883) - test: build the SELinux test module on the host (#2170883) - test: make the stress test slightly less stressful on slower machines (#2170883) - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883) - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883) - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883) - core/transaction: do not log "(null)" (#2170883) - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883) - elf-util: discard PT_LOAD segment early based on the start address. (#2215412) - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412) - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959) - journal-vacuum: count size of all journal files (#2182632) - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632) - macro: introduce FOREACH_ARRAY() macro (#2182632) - journal-vacuum: rename function to match struct name (#2182632) - journal-vacuum: use CLEANUP_ARRAY (#2182632) - pam: add call to pam_umask (#2210145) - udev-builtin-net_id: align VF representor names with VF names (#2218886) - pam: add a call to pam_namespace (#2218184) - rules: online CPU automatically on IBM s390x platforms when configured (#2212612) - core/mount: escape invalid UTF8 char in dbus reply (#2208240) - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899) - udev-rules: fix nvme symlink creation on namespace changes (#2172509) - rules: add whitespace after comma before the line continuation (#2172509) - udev: restore compat symlink for nvme devices (#2172509) - rules: drop doubled space (#2172509) - manager: don't taint the host if cgroups v1 is used (#2193456) - core/service: when resetting PID also reset known flag (#2210237) - ci: drop systemd-stable from advanced-commit-linter config (#2170883)- ci: trigger `differential-shellcheck` workflow on push (#2100440) - ci: workflow for gathering metadata for source-git automation (#2100440) - ci: first part of the source-git automation - commit linter (#2100440) - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440) - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440) - Support /etc/system-update for OSTree systems (#2203133) - journal-def: fix type of signature to match the actual field in the Header structure (#2183546) - journal: use compound initialization for journal file Header structure (#2183546) - journald: fix log message (#2183546) - sd-journal: cache results of parsing environment variables (#2183546) - compress: introduce compression_supported() helper function (#2183546) - sd-journal: always use the compression algorithm specified in the header (#2183546) - sd-journal: allow to specify compression algorithm through env (#2183546) - test: add test case that journal file is created with the requested compression algorithm (#2183546) - rules: do not online CPU automatically on IBM platforms (#2143107)- systemd: Support OOMPolicy in scope units (#2176918) - systemd: Default to OOMPolicy=continue for login session scopes (#2176918) - man: rework description of OOMPolicy= a bit (#2176918) - core,man: add missing integration of OOMPolicy= in scopes (#2176918) - meson: Store fuzz tests in structured way (#2176918) - meson: Generate fuzzer inputs with directives (#2176918) - oss-fuzz: include generated corpora in the final zip file (#2176918) - unit: In cgroupv1, gracefully terminate delegated scopes again (#2180120)- journal-file: Fix return value in bump_entry_array() (#2173682)- test: add coverage for #24177 (#1985288) - logind-session: make stopping of idle session visible to admins (#2172401)- journalctl: actually run the static destructors (#2122500) - efi: drop executable-stack bit from .elf file (#2140646) - install: fail early if specifier expansion failed (#2138081) - test: add coverage for #26467 (#2138081)- nss-myhostname: fix inverted condition in (#2167468) - nss-myhostname: do not return empty result with NSS_STATUS_SUCCESS (#2167468) - sleep: rename hibernate_delay_sec -> _usec (#2151612) - sleep: fetch_batteries_capacity_by_name() does not return -ENOENT (#2151612) - sleep: drop unnecessary temporal vaiable and initialization (#2151612) - sleep: introduce SuspendEstimationSec= (#2151612) - sleep: coding style fixlets (#2151612) - sleep: simplify code a bit (#2151612) - sleep: fix indentation (#2151612) - sleep: enumerate only existing and non-device batteries (#2151612) - core: when isolating to a unit, also keep units running that are triggered by units we keep running (#1952378) - udev/net_id: introduce naming scheme for RHEL-9.2 (#2170500)- udev: make get_virtfn_info() provide physical PCI device (#2159448) - test: make helper_check_device_units() log unit name (#2138081) - test: add a testcase for lvextend (#2138081) - pid1: fix segv triggered by status query (#26279) (#2138081) - test: create config under /run (#2138081) - test: add tests for mDNS and LLMNR settings (#2138081) - resolved: introduce the _localdnsstub and _localdnsproxy special hostnames for 127.0.0.54 + 127.0.0.53 (#2138081) - test: wait for the monitoring service to become active (#2138081) - test: suppress echo in monitor_check_rr() (#2138081) - Revert "test: wait for the monitoring service to become active" (#2138081) - test: show and check almost all journal entries since the relevant command being invoked (#2138081) - test: cover IPv6 in the resolved test suite (#2138081) - test: add a couple of SRV records to check service resolution (#2138081) - test: add a test for the OPENPGPKEY RR (#2138081) - test: don't hang indefinitely on no match (#2138081) - test-ndisc: fix memleak and fd leak (#2138081) - test-unit-name: fix fd leak (#2138081) - test: bump D-Bus service start timeout if we run without accel (#2138081) - test: bump the client-side timeout in sd-bus as well (#2138081) - test: bump the container spawn timeout to 60s (#2138081) - network: fix memleak (#2138081) - busctl: fix introspecting DBus properties (#2138081) - busctl: simplify peeking the type (#2138081) - resolve: drop redundant call of socket_ipv6_is_supported() (#2138081) - resolve: introduce link_get_llmnr_support() and link_get_mdns_support() (#2138081) - resolve: provide effective supporting levels of mDNS and LLMNR (#2138081) - resolvectl: warn if the global mDNS or LLMNR support level is lower than the requested one (#2138081) - resolve: enable per-link mDNS setting by default (#2138081)- swap: tell swapon to reinitialize swap if needed (#2151993) - coredump: adjust whitespace (#2155517) - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155517) - Revert "basic: add fallback in chase_symlinks_and_opendir() for cases when /proc is not mounted" (#2138081) - glyph-util: add warning sign special glyph (#2138081) - chase-symlink: when converting directory O_PATH fd to real fd, don't bother with /proc/ (#2138081) - systemctl: print a clear warning if people invoke systemctl without /proc/ (#2138081) - TEST-65: check cat-config operation in chroot (#2138081) - TEST-65: use [[ -v ]] more (#2138081) - systemctl: warn if trying to disable a unit with no install info (#2141979) - systemctl: allow suppress the warning of no install info using --no-warn (#2141979) - rpm/systemd-update-helper: use --no-warn when disabling units (#2141979) - systemctl: suppress warning about missing /proc/ when --no-warn (#2141979) - shell-completion: systemctl: add --no-warn (#2141979) - core/unit: drop doubled empty line (#2160477) - core/unit: drop dependency to the unit being merged (#2160477) - core/unit: fix logic of dropping self-referencing dependencies (#2160477) - core/unit: merge two loops into one (#2160477) - test: add test case for sysv-generator and invalid dependency (#2160477) - core/unit: merge unit names after merging deps (#2160477) - core/unit: fix log message (#2160477) - test: explicitly create the /etc/init.d directory (#2160477) - test: support a non-default SysV directory (#2160477)- test: check if we can use SHA1 MD for signing before using it (#2141979) - boot: cleanups for efivar_get() and friends (#2141979) - boot: fix false maybe-uninitialized warning (#2141979) - tree-wide: modernizations with RET_NERRNO() (#2137584) - sd-bus: handle -EINTR return from bus_poll() (#2137584) - stdio-bridge: don't be bothered with EINTR (#2137584) - varlink: also handle EINTR gracefully when waiting for EIO via ppoll() (#2137584) - sd-netlink: handle EINTR from poll() gracefully, as success (#2137584) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2137584) - homed: handle EINTR gracefully when waiting for device node (#2137584) - utmp-wtmp: fix error in case isatty() fails (#2137584) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2137584) - io-util: document EINTR situation a bit (#2137584) - terminal-util: Set OPOST when setting ONLCR (#2138081) - cgtop: Do not rewrite -P or -k options (#2138081) - test: Add tests for systemd-cgtop args parsing (#2138081) - resolved: remove inappropriate assert() (#2138081) - boot: Add xstrn8_to_16 (#2138081) - boot: Use xstr8_to_16 (#2138081) - boot: Use xstr8_to_16 for path conversion (#2138081) - stub: Fix cmdline handling (#2138081) - stub: Detect empty LoadOptions when run from EFI shell (#2138081) - boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices (#2138081) - boot: Make sure all partitions drivers are connected (#2138081) - boot: improve support for qemu (#2138081) - systemd-boot man page: add section for virtual machines (#2138081) - boot: Only do full driver initialization in VMs (#2138081) - dissect: rework DISSECT_IMAGE_ADD_PARTITION_DEVICES + DISSECT_IMAGE_OPEN_PARTITION_DEVICES (#2138081) - ci(Mergify): v252 configuration update (#2138081) - ci: Run GitHub workflows on rhel branches (#2138081) - ci: Drop scorecards workflow, not relevant (#2138081)- Rebase to systemd v252 + systemd-stable v252.2 (#2138081)- build systemd-boot EFI tools (#2140646)252-46.el9_5.2.0.1252-46.el9_5.2.0.1systemd-sysusers.build-id45467120978a12b9a0cc3969c1266231f4ed382f/usr/bin//usr/lib//usr/lib/.build-id//usr/lib/.build-id/45/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z14 -mtune=z15 -fasynchronous-unwind-tables -fstack-clash-protectioncpiozstd19s390x-redhat-linux-gnuELF 64-bit MSB pie executable, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=45467120978a12b9a0cc3969c1266231f4ed382f, for GNU/Linux 3.2.0, strippeddirectory"RRRRRR RR RR RR RRRR RRRRRR RRRRRRRRRRRR$utf-8cd10cd2fac50718f743a77731cd947d61647412ace90269c4f8fbb070fd22e1e660fcf70c36ae24d805e2a9a5747c6f74b106a06b86d015b64bbdf361f7bdf52?0(/hv!JTN:ce RB4O0/焳Ly+u?$ݝ#44d6Bw}d{lplAce(~e?x z&FU n5~>V9m- xGK%rD$,J\N\~dnGx8ݍ $"y9&*N2tձ PeEe6>#1P4$}U"e=esY!3YH8[8`HHzBD 0!qY?M j ^4_.Pt\,sICtTGtͫ6n JgeQ܂uoܱ7KVlmJEv&@kL6wuM0-qOLQw n:aZb!p9dg\w04U̡:^ѯaoTuhN ֘# 5/ 3E%d粲>d 10IVkPKA!P(,hVR],b [b(g5!;M,$Nq]]ط bf5a Esf#2H-? .z?mnws;;1Ojg y"fHDU~1JO6ؿVœBɎjZd^ɥSɓV48U:AKVs3K3 w$1 .![&eJrKLe3$ $X !Ϣ6FZ x`]W6;K)J%1{Gx[#u51RV(bX)3=Y]X©nOZ\HH  |@!LpAAc#6 d$@@ (*,ЂD"KZ4Gm,.qTL-ol]_A6"?֔1܃b=p2V%\o\CŕvR()NJm!R.1Ȕ#ͰeɥޣGȭ}Q۰u:^k[>tKSѳJXr:eyv]k|ej.3/>or7ɥev?Dl{4] O[[aѣ={U4h8Q%֕U찲u wi7;oȿb*2Iz"D9ȩڀfFS @SVUcaE$#"Ey(S"2֎s a]3rw7$F~4`xRk8r(lN,?47p^Ct]2\Ov;i8t%uW;FVK3?޹}|_LSqH?Ln̔bߎ !~Eۡ-0WZ㞧aV]ꝆwQl؏A4UQ XKY n7LΠc7Gګ26[qP[7KO+C%z1di᭠(:\3\W8FKh!RT*!ef8cq4|!~Gpxd~p3 iIgn ~ptDRo;mI%p ;QbyLPKO<_Ԧ!0 ܫʪ`b$p~N3OglMQb( MuJt$(Sfspqsarrarandomctype_b_ecopy__ge__nectlfgelpbrkcc_persov0_Unw_Resutl_ofap2o31sc6GLIBC_2XCRYPT04.4GCC_33SELINUX_1162282772349523314pool_SYSTEMD_STATIC_DESTRUCTop   ii0]`]d y&P &_a ۇ#it.:EPZeozr   ƐX m``hVHffQ#-HLyD 'f) 2x؛f#>x&~ӡN߉:釋ym PdGVha/4z#le|"KPI>{W_jI&>y~mӅo Hk@a/C),59ܳ!Ũ~B楹v 5lńynԲG([v,Y XOHJԼwBH'1mO&4z9v+3@~t 3{en '$1q(b}cS]um ۵ER)ObDڰAvN%M ɳ%C'-xW) p}mJ |@8PhR|zH{z0n(PxXR`~hpx"&*.0׮Х2z48ot (B0H8L@PHTPXX\``hdp>xhjolnt|&ȐДؘp (08@HPX`hpx"Ȑq` Ȟ@`r0@<`X`dhpxĈΐ֘ܠ "  8x"Hu&vUIӫl kd;bi3ۦ6B t-B:T%FF;C!30'w]ErVf.",W T/. p#H\VVMl[xN'q!seJ*xS3J2Ix"˥~e޼:tuu1?db%^QʣuY{ b7|DK~y(-ymGb7d]?˭-*KQdaHc0ø@x!ȅbe(sq؆JL[E}tPӦWZ 6u< f> IG2ªwuYm?E ?sޘ5 )3a}m^nӸlK)MIC+8I{~!łd#}޷5y=#;deBN(-ָ$e"Wz@|p7ͻ,vJSr_gb[M1?BY "*.{>2>4KT~1VNE#_X>@ L]2 S1A; Wؘ6 #r섉6Eoh ?< PjĀz*SMUSj2Z^ ovXO^WuOY2]!>1W$Iq t\tqœDž/ޏs`Atq̢j,!PCaT1LC rsNG[SPl9Qf0e XaRH@"T᠂Az"D.շ`@(ҍ"Vqmp%P-T@=hI*H! b  JD!Y)UH蒤L6C .,X%;2)(4dԐ sJ"|p D D"#$%{&')* +(,0-8.@/H0P1X2`4h5p6x789:;<=>?@ABCDEFG|HJKL M(N0O8P@RHSPTXU`VhWpXxYZ[\]^_`abcdefghi}jklm n(o0p8q@rHtPuXv`xhypzx{|}~ȅІ؇~ (08@HPX`hpxwȦЧب (08@HPX`hpxo0$`$ @80  0tHh`\xPDu8e,U E5% 8Ph՘ŰȨu(xe@lUX`EpT5H%<0$ 0H`ܕxЅueUؠE5% |8pPdhXL՘@Ű4(u(e@UXEp5ȀK% (q'<Ѩ(5EШ$.u1JRP)RFXbJECh\)j(RJ4JEK3zFBmpҖDoRaf6ٳlm;TZ9L Z%{'tw웄-me1yP"_R < _-Q |XXv{1]AOHz֛S}%tz ϑu !$ Q.acV (D+kR^QFŸ+&>@#@4_l[m۷o>j?﷓^2!U1lU*ai, )J+դtWMNRGV)'.rrts[30eaǴp7qu9}ۃ<_Kzs}J0[G 3a]8vӵV05N̴:1|𦖊.OEzC+'3<'n=wIO8S*;k5d[MjAZhFaM!N/^OC TAaliOYaOLxI|'1K)cZHwcOpjqw4 FИowK0"h-9ݻ(7}P.Z_A*_ccȔv (aX) )l L͞ NHnuYY6XȺ+" Dm.g!d[7?&S{Wz=J~Yh#.P HD|?k.Q8nUY# ?qf4c?Hk.&K5]1&uG *c̝=F&2^Pm( @>x\s7k7[8~c6tEFe5 (QcFfkEJL/e!TD`{9J G )ѵ8qIirÌ 3!N.5bC h7cf ofaY v :pd+Y(ah& Nm 7_ yLN_&ǏV;fXn7mÔS'>mA EΕ{`V·.U/ommDGDM&/_Nvmz3ⴧgc3kog2e<7,%O[%d?NLYәN _‘)|#pF!}NƓiIzAȑn~ơq7ssgEG2?bFbBim_t1ZYmn2W G@(Oa{eDP_W ۜYYr{߬^V4 G<0]UjĐ 0q5SM*5BGaEj W,C#g*餧@W}za@ ?Q8_ܲ#c(AŧjXe?]d Jb&c!QLo^Y'tUV32W$hcX*%9I7g}X#}Y S/0?z k1GzO*jǍLl E. $;tGэ&*$ɅSOzUyx% (M,X@̓9M YxV.Z V?^FF'|zچ6X 8YE!E *},-G F KoC <~VD9RӞ]] ]%W91! FY=R8.Zirr:*"0$9 aWoBW%p8rDɋF0DI⪄U30P@[ ]،/8Iȡ4RF-o%QմWn+2/Iu^]>,6zc*9, j/K*//?aݜVS;=޳o/uZTŹ4GP~ܜV:Rc=.^Iwlsh(2r3v"iB9C9;SߝW獔?ćp9;UZ4:p ;~z[,9|QOu EPϐ_f>6=]eT]NsB{8UldQyWԅa0ѯ-(vn EGRddx-S=b1p{Z1EfZ.7[mⷅ!C:*l"Z?C#w7?>Z別1Np&s`,D6!ȏx3InPq7ֹ@ņ!bڏC}@dP>w+)I?1puˏ LKu"DMtO "'ռ?S5qc3]C)Wryo$y/(Fsf (ر_Aԇ/tn=c&:%]ǫ|~ۈt- @+TAAXP^%=-bZ wlk1a# Jt;R3u#֧ s×( w:'SYeCmYX36̔>۬zT˺Y=*{ϭuM-yfVDƴ*_Ĭ'`dz9Yo!暜0BGF}@-1vFm2'!Rxo@_xV}a!䤂1d?R@v_ =H 3Dac5~@I;uBB7SI0_>V/U+$N֩k~޲ Di%;AU~^&y)r )\ҷR]fH\J3tyK  9a x{ \T`%QY*zA1 ZF^GB>4"bi P@+1$B(bxzGsQ"$I*h$As|Aԑ cQB EI2󐞘:ꃸ3SLoʲ#~V% V 8ŃyBsg7:`u|ry j8Amm>kFzU;zFTDM%Pvư(8+>-uC3lu77`K6'A(DM6`R*!{~6-}hk3*0Bq4F*NPd6.I63&(&y$"J[uf<_ڽ:{Tm'mC#H_睭Ŀ(|/9PZ蟲o7@O'zhJ|Q(+vO;Dj`o*# ğ*P9V='3t)BO_%(Wٵ% 5pgvJ6Z4[é0iIƂKGsFUTbqIi/}V)3]|=®nJWG^ ԏ ]lXFRu$Dkx_kmjfexNOmɸ#BwRs^჻) >?Tp͓C9&eg C,l]Z8U~tL\ietJlJ=p9ퟟ*SVt|}19s|ʏ6pL_:WgixUJKR׳?-\>I'0m-m}RD!cǘPs/#AmPAsͪꉃc{1˂xU%&j{i^g)#}u l¢? WI H ң=YAL&kGv6Cl!^ޛmY^.5fErZIƝ8h^Y'q_s'̩*3OCGkO]S:~JPk;r?+\; Jwpb^S0FhI!o\G-)vF Bv:Sggtvkj+̄_vN Wimг~ܦCUhKhvCH1u*DޤWo= >n˞7;dRw&|- gFU=noD,wbL>x`5?=t/؅0Z;"5@8l 60}^mtBA ͥ?*ehe:i:1Bۖ;]"G>S5-ɭV9'NT 6k+;Rmr|8Y~UgPmp5Bۄ!G7У :'FZb@~ {Qpeֳml|k l08n08I#|ձB#j c*\b@[0fr6{ᙨzQDD'N8f')8nZHͻvVsA[6uoD%͇F7Q]!pްc.H Scjw&a!+jlSL/=d#o,4MG4ݽpizJ.'b$M$Br]b2Y٫R>c?`09E14s=L4KOPϬhq(<x=r\a An>o*^,! x8K3N"jYt$IGOBt^tH2X %uͪLRH?*~$vQ_.9ScybS{キf'] ɿҟ&,T)N"8&VV1=T9I/.oY=rF]Nv}j+f׼^(^k}^}k`/5W 2ſ Y_Czӯӎ̮>/}`lb9^+2hA+Kgl4Q o, pv\oc̵GuVM.תu֑"xJ %{4 TZ83C"dgvÓXݺ.c 5(hxu7}cZ!yFYDoV#d_``uD)Ȁ_~ʍJ/ڳw~xw>Ԗ;ްrA0<7s+}ͫEҮx7jix.Ǽo\[d;JX[=(+|v/|=)O{]Fƻ+ܰ|"fnvC,J],{]io]X8ȩ. !8¹6b~ w;"e*x= _OZ2QxUqތ8qN2((A8GP<č8oG%E_`RIIgZ8Ē}Uici*\c[ϝ49U{zN@ȜF# De E0{F|f ď .G]yZ萠aɣ'@vYc@ }BaE4ycm–{jм,mѨ9FH=Nj䮛$Z~ptxh}/I\ \t؆Ge2 e5;%@P <2Ԙk&d$wmbqJ,S\60s,na L+Ԗ`+y*QZK./'´'uD{I':V^ɟ3}͵=z} ۔g?un%%/6"9 qN@Z>s|wI$4إx|޺ NlcU[fomo s6ps5@fֳv<BGu3Vo o"g r-#Upm(2J^* G be&x22͞ϣ[a.F]M/'ȕl1} Ue@AOޗ )(#w ):􅰚bQgES ,Hv[FJt̆6NMKJQ1GIXȟœHn=4c ֌ 1.ZtsERxMCEƯ|yD`e'[8πxis~\&Ϸ}pJ/g:2璞-'W7ߴ?>$›~>f<[pQ> PcV7k6Quyv-Ju_5+i >ɸr xdN/܌_Ma I<:]P4v>̏w1OksKC2z:CbgOtZПe}mW%lԖ^[uO`֒hQ cј51Kqp%FIPa5]&Rt#d-J6go-qu&46PO`W"+uO x₟G ދM}j̇cu&"š6 CڎEb$:P*PJ4U18M* v=x%?Evb>NSʁхϠhb"igID|Yѱay:MK{'_6<09}PIK:esÁ MﴯE"(5rť#g$%ޔFa1&wOvr>ZR[/J+2RtK4:O&'O\ܠP,[.["(.ĬBHdaXarT9tC<2Nș+?Z\q"8ʘ݂ѳF_kWԊQנo `3_"[ Cڭu1sy-\+OD;>v`#$o ӧoSȾT{TjZ|Xh XC E`N׸۳&XzikC G'; \9B}|n 2}-{$afc]ȼL ?$TK|%6ɱÉ' CjiT en+|Q1A)ic^xpbrT,43mK_V{O=5BF8"鴕Y%a.`,мD-b*Nlav8*2}sz5;ݾP70Ӟ$FܰPY>ґS՚хLž (iDE/._m~:ϫk_͵׾@u/J_jlZEK>KŖrվl~į2A!)LeѬ TeYK[m8r׷GuV4p 0hfcs]h6UQĕY:Da! b\hOl1[]jINU43l|5DX˺m[)lQDݨq1 WU.E#6)NL[l}c,x8o. *'E8Hs}.af:>PtsvlM hJ Ek t59K((o7IM]'TOjbP^l!ł_lXe5=R᪹v-@1meb8BBԮҮ1+YwOx…n*FL7y4ުU{MV+wnPRݼ\h0yy)uu%ؗi[0N7sf j 1}=Mirծ7{ D饛vz &| Ea 怭q=iN՜cO~bTS[[N(1^ 0TVK'OI;ԻÔQL)ޚ J v?[r/dҨr0:}}1H)OMd#d*@Ժ[mlskh ΏA"Y{0K= Ѓg!=N=viS'b 5r/1yJj0@cd?_LŸ5sP@#B\gëRn؛A m|e%kΛ+r'!؋&z5ca])1BOF_Vj<^&M 34-zOQٺ2HxOm΂^=]q^߽H͹Cn& ;7a~uͣDȔ$fǴ; ПzC%K(>X1<Θz+|tUvHv1ѱZ+Hؠ'Ȏݚ9$T\,ljGܸ 3#'u7كgã1D%d M jfYyFdAA,6 =X(#s̸d l~iKv(jꑓww>WWdm,L}1|bBxϩPL&"j`n4&x>ˉ@rDvk T`(zZ}/O09W'҉ggLp3NdOMOcKj9!$ZI??7sN+ŧ65%G@;tx[2+E&nqiqR-\ Z )s{p@BRP8N'j=ӽ@@|.{(aR2P–=ىE]j%-qf2>}XdmBX_$|Zb'TjVa(HwE01W8sLt;R@+,1fIeǭPꂣ fSePZk9X:LT%RCIepWh&̧t51+E⾑HLp"s.!Qbj@68w50pdT9sH3[-HsgirI#IP$eFt(%ǒ l`s$Za/#/LӌNcw&EK3!zYMwҧm~b SM46LC7dAd=4TfRtSLՉ^'$5XE͊[o#&|@+[F|h3D(p `&|9 (4(4ba^aM)Xh7sIc_U#wa1{WkRh)趵 #]1cCD HD9HgP:`f@@27b_\'80Nf 4dVK,9;rޗľ-ޗZ)R(hꞲ<F5]ƒqJ p`kmQEHK<$EO59w`U;WVDd?6}˝T ^0,piI5irRv|H%y*6o*W>mߎ&F!]$㼣xO,h /wֶDڃI7ER7gTמy6J͠Fv%,x=[y]F^'Iwq?9߾qC,2VŞ$U}"^C4^ě׆.lW8|ߴ=ˎ#@2ޢ!Y}HX$?2+6&Jn{?(loY^.!X)+ m=JeD01ǽwTBEG,L/mfw,{-L}蜿oC40n5 S{t'[)@73a&91n^̱ ؈:?FX|wr&2" klиXr;.z`x. yӀܸS !E:rW\[+nq=mH+_Od{.4xn v V$ZPZ"3Tց>jkQLZvYqTQ-*\%]xȣi8:6?e3U,"z. ͩj'Yy-\ àײz)ݦ^>983xTȪaG1[p>/;.q0{d8o;=vV0%ϐ 0^: .f:*  "=3IT\7h0A0aEnWڣJi }8>:4זǩ{r>#COmO _-DT܆QKiГ}b;}g:HGBt2-s7!)@[Aq[ DPT~xq: THq}qP| H5;Q{tOvj8w@`LklV=QE|cPUH]8[ܳI(H|^5T "E7J8%[!fXPGsھZ|3z uD{RλyUf^͗0A =^ N~q\aϋr#MZqIyq> ћ] N&h6@*eo\_r%w\쎱1@3 ]wZ+ۘ37ܰz'VbǡjgGAYArw־JW82!.@5LkD$_9y?E|u# r~\'m1E3*6JAe ޔr2kxNN+/rpיW o,{to-am]l!ˑGj5x8"T1z?rRSܘa֪jc/PWܓ>7rjЯZ^­2RZ!w~7=haFzNIP7\;?NYL6{=ˮxbؘ^Kcfa%(1ҽ:2' ^ }l8m,8+nPmsodi%9Nq'P`0sν)=.~CV+j7q?E'Y ]Z ^:M43Kuh򈳲&َ9I>?rI=S{K0{).ȞU 0)1( p$='ؠPM+!'d zRUrLy^,Xx\^S|۲ȿIU{ ni6zK\k:K6F|ݪA۬aH!507F+,k,c6ZH;>b06RO_>y)C>Q0g9<|K[nZ^vD^FYV:Oqmz=;)tgv/L%DgiI ˫^QWR7䟏Ї^ne߲(%)QXqImn}"t i5kLx#Jac?%}4wmj%/k //Rѭ||{iB 11s7إ*X XLy*V(8n1ؠ]#X8C"4X~F+⼔   w8! ğb).Q[w҉VPZU}`6~8tÙr@ m[꽬:3Ɠь:墥erF|r9ՙ>e[QZ JnUIcz ^&~.q>L;+v*:N7jʛ7xs"ћAn24sf.B$U# C"D#WBu,c&JBJ V,PE*ï, `w79߻ZYA"ApY;qlUC},9~鱁2|1q֒t5:#yi@G:KOC̪a3\QoI>)9VϰR2*RFOc(왈7!n3xޕa; 2k,H V+t`ZUŖ IIUGY5L_#>gfLF[3o!tٕ`_=S[} A#5u]USTatn\b1A(]BL9DJ r[;4p]C; {, .L.7Y<~jbg#r9"c HL0L%KFT/! W["w2g8`U7uݥ~_ZST7VzJUx(MdYVcO>|M/aaq?;FNT\xqp^m Zt|hP*=$4Fdu(17z);c-ӔՑXah/a% ,$t:n dNUk`u"T;@RrC$ [TtrabeB T&%,wXy g7tBH6MݹItE#%T 9_ZzGb +=KV#>`K S^8ή*5y=f'G.xxRξ]+-S'&Fz4ϠP?&H'?wHp-/8S˔-Ri)"",Ty;G*@L|$&ox>8gХT?TA@`WiH8.#Ѕ&,BAN WvG\u}bFPǧWz =w"4 a1@J5S4Rd CdUs&+scU.f}\&\DEN[;!wJx79ʅ SCAU9 +_nFZz':99wbDU qM^.zdē/fӧƉF ,+wE 9I=* OiэAXj.,H0~fuV`1qd}Mz]KNCzpZhޤAœ,VȟB&">kͭ~P;n]GLu)qCZg&YG=n%8xQ a*?Y9u<ƣة`sTy7Ɂpxg 퐤K}F@ȃA95J|B4Eތ/LOKϾc$0y*McIskO!j$mϋ i4!s1b5ެI0 |V%?J@D+MۿAi7'#:< 0.56‚ :^DZP PI'iDWԀhq2h_!b]& dED|ťI  PJ̲ G$_{mcb/j flp rmUQh3XգzAnZ)8_A7sdj.q1yn:o ]] GC=l9-śKjQ9NgGگkjW">l6!W$C(Gذi<G5态B%f}IRoP-5.Ic8Ɯ(D% i`hz, I^ #“L0"j QC7N_O`'Ds^Z43O: "E4'79Trd@I6堳IHq0onSyz2J bڲMT$Y H:ʣF2_;ji׎5aބ=001CGGEfCDPZQDV5DjDY5DW9QUmM:vd4>W#I<]--Vz_L~ XiWҠ/~gVŐ ?c@`a(.ŃEG` F|o$%5§HUB.}RW)e"WhW c"؈4`g%2A{Ah\.Z0 k܀]l3}~J/m)فK Ou⬗-`nJ 飬T gQ)mfBʑޯUgJu5 ?ug>P\ X.H̭]su_]MiKP%uЬۍQ[7R%Z&, ݄ae#}#Ol$r' €"8AWr _"ܲj|p#K<|?]& RV]&L݅QLpøDѯ|\!k8lnę $`yͭYdr(̗a9`N!NClJ-2#1A3sYAԴ\3=(Զ%f!3yml4AR RySnDsݢq2HM>(_(ou//U= e^Qp$d`dn;B6n.ebTeֆ#1ln&G%a{`Il:S&2z }0_s55i')#lیRi5+@ܼ7(y}pw**늈}I8fR:B/v:=/9֦n "N`i>|`brPu "i%r3/S}Q1jr} BYlp `(p ܜ`Œ5R'Ev㣎4c7c/u wr,z[]K#SVy6Jhe>DvC0zHz]O^{i_ʭ>;Ex;N 7&KŎ?#Dp'HFP>*-%u"c>QyI$.}nJ6~_佨rU)mLB\g gT>) T#SZa( (F1{|_8崒 ]3h-c(S9a3/@ ԼI0I,l>%pLI'L\k~ WMo9/hn d!5[>7zp2zJ؀NH"0{/~F %BN Xn:,`O/*Qg\D0NL?aH$Rϴ jv`37  EXR[;$*| kܭne'݈I n"+ݩmS[>/qN:t1Dp5-HQs` T5ox^&'qG~U5/9$j4qe%lW vVZ١FL]h@u}6k{N=F"%TWˊ 1 zXJ8-,}H}qyq,ЌVrmYm =9Z)UdϷs$w`Wy9*`˞h ?02* Ǒ3JnDQ&rͻztu83seϽc4F>!aVzxUcrXUsSj6pH뼳%̩6~{_i7z'9: M[p02X})HA R/N;p5UIsTUQO43|ӵchSfjp  ciʠo\@wAM[Py {)~2%|L&r4}Y ̅oOAyW*ɧ?D/Ⱦgi~x[sl?˭YP餎NhGٯd 96HΒAPt-I6ݥA`njg(]W]ɬ!c~Æ2Q?aV%vT4_02 TFkyZϯgOҽpL=6>q,װd;pV6T \LUAI/_:QIQ/_9{63uO[oG!N[eM[hTyU[l]ͽKN&v # /̄QQOhWnŦc&仫Hsx|DEA)muÅyE2^"b#PMҲYJم*XAз 0&\',U˙{|nwh+DGvݽ)sc21BضpF 9ޤ;)?W5JR>`!S ?Ъ.$оJ)v%NZ{xUUfy'@,|جzC5pÄ=x#tNp… g1j]v6ݗɶ=դfFT~Ffkd PnOy5ܟ1"v]$R]pI9A0xg6gSk0HR+u!62OM?ߣ aYصC31DP1DP,(kQ"\w6sc7IJ 9x@.S=`op PORcbQ+=+Sc6MNq `wm4/6z7U*ch Pþ{>bЪ)tͧ |Q:b`+xY Շ|-?j*u?0JR|^fQ4nhtkz𷪖+egS/bmwadZڱy$@MVr?]g F}+/)%W%ccR8z/I=xWO֡SX^r -KR$ AĮNh1OQ[(ZIZ2. %K.8P >=1ΐA;OGa'4 &"X"5<̄,93dI{H꧜yZeNDO`PJf,yK)Z򲹜\%^gϊr|O}hʷ7f 6/p%ӗ*vy1Bf(Ji4ڣ3z x2y]=j[ӛt,n%Qơޯ\P.~TJkZ/עiTpY_vx2r@X״l*=%Zy͟-A~&÷OVi8VbִMR?AvWj,D9d@!6[GzFpAJ8g1"DMcwްtdԢ1N}%LHHi.fzVNwzm:IXpĭѪ/!AhzV4VmHTIjZ4Eм>/{^ ei>Y4lPn9ɗoϓc/-sH$'cm=?#z^_uXۡI{|S-0}PϤfRιY$ԣ=NC#}Sh>M+t' B3"[9f,S ߮'m%'8BQazl/D=>w:JkӋ}OW?):8|^āɬڽskhtsxiگ#BU[AGDZV!teSe4t**)-B8=֡ ;B\nX\`kY'L>!2c`P*߂tQ8|ZݍKwhC!HЗQ*[7EgCUu;܈ԏ8S_i:]2'!kI8h*# P}x ʽr (m:--T֦j+#|K'^TM> `hyuFu<>I}ļmo1hun+˹-lU3ĔDv,Įh+Ep$ #^@+םkڌZ ِZë9ZXf1 x6\0{gz&>= Io.*``hfGUQI΍HvVԣtӯrN6dyr/B;15c6w9Ƙ xv2t?rtj:sppEG ᳑Ѫo\+Si>Ä[vz8鰞q%Sެ cIq8  :gr8e129dr8!,<}2 4 Z;JhSrO`<+u|ф孬iq|dҷH6 1'T,+aC[A/_l!Tv3#/f; 1#l3I}!BCbsB"v Ŀrrt9p ?[;"9WĘ?{jJ@ksJpnJjPtGgq%4K|~DcR"0DV"[Se0/:LrN (-1D,|$7DMXr/,Δ])6UqI#-\̒x`kki2okq( ޹5<ÏX̰Jr#ުM:@[Mi]dzݮܔ1Gg~)iWl׃||9QF(RIE-vumfT!# [6 cf`/F+oIM/qz #lb~3r4EJ=:5;<+&0qB@S9!-W+u"JgK@rA83h~oA̼rO CL_{ygd'ju cM=TA FE̞Uڌe&BK2axOS9v5 ]!^^i>$N6`AV >\$q:33xw2*KGY)B/,Oik,x~Wrղj~|hUۻY qƉ,7L Ng(/ IOOgdAæ% 1Ʌ2 7(vlіϗtg`r&E 61w`ɟI=56\Wr1Z#T 'ŇN5#[eT?vUa}cgQL#mjJCD\BT@}ѣ"mD^b5qVchU&%fjjU,y򖔙bae*MTEij#E!U͓K02cښB• }X;Eq CT yJhԛ BN0d<}֤Ӧƽ ߙj<&J{t\WU`oxqwDF>2h6?9{*X(~Ug7\͙MfkG~4Cg*h1?;eOS I,qiTbmuhOR3g>vt)u* ߇8usbTAShMc=q3|@nEJu+Z*+"$3O>1(kD1f3|X*CA󫟬ˡ$~u:@ ~n`dSZ_enw9ԫG㟸7[ifȸ~"`U3gbky!Z,dw16sQ3Sڌx''(:x jn˪>[a9 !liԴQך(|5@/-@o ~m .rrK{贇'f*fZHj nh6yAxEjZ7a<}- cy[L&C%(83KdZ׾spQOm1vB J=w3b7ɹ|Jo,7kguYŠ>gPmNvސf죋<}މofsU)`.iW9FŋBݛz7r;VWv3!RY+D ew䕰Sk!|Eql>[>Z˔,sQG*W-x&>zD+ӐH;JȚ2%Īxn܉WL7Yw 4_eC򼺩*>a-FG~?ի)r-4 Mfnl"c Uh(|a`ayX<,m[?Ft[ơk>}`:KaG:tȟ4+=Tx\H9oޣm]9P t[ndgS"WQ޴_3+0~:M^us)WxWĺQ] I[1 a/(n;A8/( u(}7g!E=R< +^qV`U] sˉ w0`, wlcW(x/A.+Kc6Z c1&3DmDgr ^0]YWmi oqkFHBXzo0[xaaIqzy ̠ɍ6Z'冲]ʐ')"_nNcP˹zLVIR`Lu直0OycE-vr^0{ߑ,8ÁO#]# ty|1yԧA+GAe0*3g_EKNn${1=ŴV:4o%bQ1֒ .{/<८xit9|P9 )hS;ǯPءGR &ƆQn}L_Ha4]m*vl~jZrʘ?:_Rj}.k)Ҹ؄L+1k׾ؕT XMx~!rgʜIDР8 Z{޻o£vK$Jԝnom5tu?%da0tMjXh^/NF 4v/.)]K$ ,e`RTVkx8*[5JBvPCvW_by- xCp6n!Htm\vs`^ ?Ywgqr r?E2Iro1KVZg[z$vZj^~.2Ҧ~ĭ;$RZ6OWݫdv *yD-ٴʖ'YRk,~%Ui3{6HrB,o W%e ]Nh# 7mJ#Xܫ) ' kp+t;ߡؒMD uj xu;BFս\`Ǜ+p BذH h? ~..[\ :[c"hV~x4?w:/c1/ =ӑ..%/U,& .ӇiO,T8*Z@3K&{&dA+]Iq3`^Cxxzj]o,3:n;30t{%9t )<ۗ 1E{ ma04-kL=?a^ctYb5Ե&Qbtoyvi8FwݸΞ^>jRE5B:DbJ'VxC#w>5~1pO ϹU`!(QRFդu0dtf"4;up 9/SLS[Ƌ.ύl*Q>jv`9=K~nP?tDقP>x ž `zWEBly<ۖYh\%3'آ#uM=fi\E8m>Iϓޭ ]gY(N_* :jaHwg Li+WNh{Q۫G9xUﲋ^.@qЕ[zޱmT?3$t񨑁HtT͠F^ojeS͒VeLQ)NO-ƒ|'tkeIZl+g"jmQoe?_OE?P>?u$VYWW3[5M֚ojҲ߰s85ؤ{!%2n/'lN:j~Τw^{7ݢ}[i`tѝϓƒc}wkSϺQټT1}͢ˡƚӫGX.iQۀDv+r-'OlbyuV ocj]f}՘Yáힱn5ݣF)3o/GmOmwl!q DrAm*p@NTUk~)5?S׹] &)#Hπai>GT\T# [qƼwJΧ_ '-h*Rb^ j$ԼbnrEmLYęweH!du <1 v_?;xgfl]ZUT.ZgVt!ԟ#9t}45} ䷟jȂ[apsg_8#\ N07GއklO-w U'k0YphP]P,O9Y{#B[ U8, Iř.OOt0b#M7ڷ1 :2e5Sh5Br`FazuqĔpM~u/dу9F~D3˧V,ߣR5-ŠB[vě1fŻEnZQ:;JG5 {.q 5?[ %f>lZ}6 $ {}H[ep"d{.4]TNN1y=6r쇓F' #otsƍIljKkﶚmjtaD9HfXLo~uh(FyW}>+a-?q Ɣ$Xh2le9ĀL) >(j!Oz U3o a8c?NGj"%.ݝUExmH96ig4R6SXˣPs]$F{ Zris4b#KHR T ,V_ܯuƼw]oF:v] {;2k3z Jٞ<j082F/Żu'}g-+ajͱv1`qD;`a;Q$ZFF..`Qtˬ3y_ycDqv{ ^37u<øgn* m}RS?ˁEtz|FQ@ދ?T,Rz'%EjTf9m%i3^Nǜ ¤He1w:id. 'VPbN'ZX:7yg@ Lw`Cx̌7mP~:LvP iYQ"c_WiOGHS*D&i7Gg$wm͔ՌyЁFH$HV_}Ubr߻M/PjIe{kg6U:l&}Tu93&yr'`w1܄$P5 ǰb#}bPpp3`!ijOYJGMں񙬴v!.3ל{r='R,$߰HttqH3l-cNΘ՗`z5ȳZU2 2cYWf9ȭeFzX#v+3Ь~yJL#rFc Keڈ~yWnQǖIFչR[gpj;"kD T9hWK=:kdSs`J^9L-yԥin[\] 9SXυ.p uTՅln"ò r7HÒq%'vr~ȟAl i>uiCNF%t{N~zA sI9XoH˜3iODQ'J/@`-'k엿Fd,k-V\xCKv( 'E1@n\wT">lsbyҨ}챍CKIG?ɜ:EWShxߖh=9 _R` Y۱,ϵt\ߟwor p-W#aukpNȵPS:/zXW甖oP]GkCi:}re1@Gi17pF\ b,ۋT*ګy%VS&L1sG veo\g𚼊@^{uq/] s6'Z//LnF_\u|7BaZT"܄5' mD Z8æ ﮠ֢uz$2{DB\{ 윆R٥R ϸY Z)\yΟ5GhV])ޕrlC@Ŭ.=,0v*]ԟCUkmO~X=QɎg5XvXQ>~ѻdX\ 5 /dtbm:hEn-~`uMzo렆}te0M!?=~`K6 cU ͗ȯO84 EY+qB|*۟HKK18Zbx/ӕOM"z$ L3V@ _n;^jlz?;̶yw;}͡ Z!Ƿ~3ONCЉSu/G Tsw@xߕaVVXN1sӬA/aw($Hi iأlsFg?c/Mgr0HxEM&iVAHpDD yF@2igQME'Yr2^zU=3wG8˦:,vsk Ѐ=KDY7NaḼ1!ǝS/^;|,2o+وH23 ԛZ;|D/͵ڋ6yck5f}Oվ?չ:eǼ9h3e|;>HY.iǖ4[,0XvPc7džeJ{ -ӈ9]iuâI8a=‘yY{dM3!tB)ibpd;kA44j֠QlZ$T lIPU(,xڷ:AJ a=>]_x#4X]ٕf{Y=W>-T/Ba^Uhq2vy!i Fq6Zh%UN43H F?l*$r}VRZB2,n7a'wPS[p =п3],Oe}^1󂑜_~s_=l:q O.6ŭeyS} ܴk];T.0ܥ;x0_җHf~?8*}pbOTC®]A{"xu {N8F[=mϳYSz?Q:ii5s.xANf{bj 0VxAt}Ǧ^ϰrA{\^}Ě,[dynlOiS4q^xYyrcbA;>_:opy)/ScxYQ}UG}e5 :\{g+XJ]U3וz" zSW-PX=~͎gYPnb!gF5z0\&7TmGRja?0fIJ1c([ZxD-G[ԇ'P?9)t,-Y3bņ],OzEtgRlc @-ɗFCp<oaMWtޏ9 >/Ya8ENX.Uo/NS6++{q hg] )S0'}M^z GX3.ށi]i4t*=[r fӶ ?P zPİSe4}ޖ#T(W&y'i#lG .9A♰QE#1.F$&󘥮qhm\cuIMa/IC?֚ts}R3~wfѡ7o>uc#J75ʮ;HbjmW^˩7F5x$ݎ,/ an~-l@QgOVv 毖^c~8*ᨆ,N<`269ۙ+%Klh$!jRTȱ^{{CToZYS:z4yF*k;lC.p Ra,/2sy$1G}]8Yl:|8r.\B}gK .|7ǽ4m*&݈d$ШkH@;tuL5Cl(9,=^39qWQ_6w1Nâŷ/ʚgJsl6“8VET咖`-|ޑ̇,L_ |Y hp0Mb~M+Z#ʢ'j61slm>A5Dqͪ@ ^~ *UYro|bfAzj^]>YC^BR (Bg?w0B]V-z[OqLF({w]>|Ø#BQ3&ԥ̰!-{.$T} EF>06=H9*ҐSc z<9ɥuoZ'_BQq᳋؀-0% v7'璥9RM`.Y(<}*D%3~ZholG&7S6JT'EiEeoV";њ ?.5ӡ6僁76H5w޶Fm6n siq-~rdmp%ᕥP*AsSvr7K´7ͽ$.^-^<M 9c$+r"j!K}lt9yKU,v *ޔ ͙"?D`%EV+ GD ڱ(IHWIu?6/A9/Cl k)|#2WзygSJTu xńn7;Mԋ)U%IHSϾ% !KFcXbs,ȻL\8~|W6y`'PBɋ@pShS+E^h4>M&͛ɧv_u. յpqZ[i"e̎+U%^PZyBX([TH8Nl4Qkn;MǐRޜ`G 2o3ܫ{R dX:"}q;̍~J#]d'r~`>6RZx|;y{wHgG"ZǫUX" R{LeDhsQaKX,+܁UKrDp)!Z3E:VxL(5y!X~g~Zυ ̸3U,XIK {:(%s?/·h=y%{KWѲvǢ|UV8ma_,rKu˵H;+pmvOӛ01, .RC3#-,]SF*GeU|^¦kNWmKoi5 I#Antic̃+fϞe0uM]Q-Ľ+X̒N0vcQ@ZUi;GV:2Bz"+gF!'s!CKM.S1J~\3z'j,@.Gvvo7kh>qfuLqʍMѶeG19ZP%kG4j6c% ``qI;[c޹Qb'>gv詈:asNa'|Ye^=)Co` gWO1 #D߰Z>~``x\ϱ<s0 YWn X*d3ḸEdw#>$AßZWL!@5ַ/ 9^iz>}Yےrqğ3.d&OM*sɉ<{[ECF>U{ZAcՍdq[VH2OoH)Z[o\hdڣϝE5nXݬ WR•1 { c{y/]s>Sh&?9wOȘ,bf89,0eۼ Cg$P"SڏAMI3'Yr77GHR[d%:tGZ&e;N.b%]|J|JYV!he;B^d{+'6w\M)(s d7Dw_pz9Σ|o.<'5ѓ`|#{謹 `Ûyd fY64XE}\l_{J7eyfQ;CP}y;T9YV: Q-SΫyEt yd58zzJ,`s*0%"Ƶ@=^)6mmoGquNn藘lmbl+)*i J,;V\]퍚,D0Z=>z1dm3RGg23~Or!߮9e_ `}ynS訃9lLe0$$_{l);gف9'zIe` )]I`Y,}gb:S!H܉=YĿ?mVG 3cX d8$+8=iF:].l^yw]0vCWTBpEiCu%Zy~ 扶41tbRk6s,2h VG?E7b)("CWӞS6`DH=cau>&kJ !r&'מWEBˑ`J{kJ֑b\|L/{%Ua -1?cрY곟.1?A:T.gCE7#P^#oLʯ[u/8BvpW;galŵYϞW-9N [2Sɰecִ;% y_v`=`c">e8٠'ok]vFbuYa@7CI]] 2{޶&*KgcM>H[|8l),:W~u0`p:# T* 0nO%D9ax5v^>Ϟ_}"R'-s=}?:ޱEngk>kAz!PRZ4~0\}1ߢ'OǾ6J߅t|Tu呈n[,N6Gt&T>YK'Um`;dk:mr ^a'CRRB""vN 0Z2s26-W[=ܴZ Q 2K,}ܟJE y),D-ܝCo t6]!ٵsWQP.7^SYYvA[aZw"1 l}KT7D"q6ɱX/aZvar\|W=e݇a9^cP|7:=y"vN[ĊqŦ:p-_\?YuKgs(/-uSQO( ιHpv.:ٛC 9 ⛌ǣKYs ` X)N)ƨvhݎ`_":Eifyf?,HJMq66(-(jI)tTbǴXSj4[;(Y3[jc{!ӆQ:k>0cV:l3h6 h?Dȝ؂yN(ˈ ՙ d^Ik_z*H@4{#5*Jݮ9*Kq|4+QmikVE4 4Z Z6a6bRg$}6 .)- Cz4W+x`}ulJ|o\qϨ W$<{<Ƨ}LY%A.aJkK  Axէn)'h˄pMXA]R @X8guMYƢ 񡑕@<*=PUލ#r4sݲAɎ:F;t)>Ic]oC^#an0cbtQaW<;gC?P<}6~Ri-_.H7]a%qʍ, פf}p~ڝgp7{Y30V 9v!}b=UǷ=sB0Q,\%";7uزG ైG~KY/3-֤K)̘';R1ASl!_M=ŤV_ }U1uU꒕ > [@zf D;YcF*Ϥ WgEeE#}ˡ*5VT+!+L1EVk^/l| >@yd1YO/~atDE(~5*I ~ߎ\ ͸iC |~+7za^(a(+t('CJ8 w^A$#L<7kҩ|IW1E]QkDfW7$``*#nҶK .2Ǒ!p][d@!AKbtClef:ʡ=v}>)Z7…Ie1uNi%;U} }~ﴍbz:Gh&,P'F `ޕ@SY,̈NN2Pbf뫈ޓlzմjV T5k"Va5Tidg!1Mc! )[` bI@-Oy"ɧ 0 ɨTKe5{J)o<$/x5HL,CڄTu.]f~Mi  l ?Bi~Kk 8^$$SJ:]`HN|@&M&4*%7T+Ǧ$L[@)s$c0bWă?L. G"i(C R h7K8L=n,p K_1:Ɛr5]|BݗGaHY>CAdƫ? Ӈ($Ky썖{3mO*!-Sx@d\N VC|صʭ賰r DÔEN#MFٓDW '[rޑ/!~՚;\mq2WdS"A_[]bsopѷA. lb UFW$Z;`c'M5(&e(nTQQ̈́X-XK U"m 07q OvgHi$Κb<GeZ8$+m(qs)ayF]},L;Hשi4)>O<'E8iـ uV1_r Q leQK 7 1_拢ttBOkuӽ I-nR)X2krr5&@Țv)Fu e_NэQXaIaNj0$Nw$qe!^͈ҐnW xMἔJy&nՐÏ:yE9>$Td3Tĭ%/c9%Y]pƇւvIj0'p:$lʦuH'sp (I]ffhAR'3f_iPR@,qU!8St+| w(ՐmkZdd^•>fCA hgNa.T{%CS"p8NI?IbWeQ9n>OXX\EK!*L,UOYNש r5zIQ'q|IR*b1?cˮ'-xїhMx.RD4&o;>*$jD?9?T 0B\zpȽKpQk{3 ڞ~b [ öH>J=W\b:^)n4ߤ9[zNg*A* oNlXĻGyJ|@E6E_RHg/ 7}dq' TEN$}DtAM%^[H8C>|TKO%+`Ixi~A(! y䎑_Ndi %H VT)r'e:晴^1BUY uuLQPRۭtd I~/0P_btʰTVX+k$T7Əser`@T4+~@-cD ~n(<%u?wN{4YTFGP☄%<ѳ21U2gˌƺxB' mLY2{85Q,?)OA=ȇ`ٷ}1kk֋F9'}UvG8i~s]K8ʲ8 >#Pg#~9Gեs?[L򝷐-; 3d R-E6&N}w1kZG0aׇ0֑xO|3\S_CW4FCFMN 8IABF/D v[mV2*W(_Q*-\ J79ʞxx!zoX߻=u §SI]!LB98(Dx&#h'Qu= cDZJ`Oy]ql ez(_hɿ>DN e.l2ֽZĔ$4AJ )F}@F٣ϵx$c Y nUzgjhOcqfM =,~M.] ;dgޯvU7IOޟ6=[=^ST5o-,9{Ԥ +iJAꐵNQL(=,YꎞTV7E3OHPbO/݃MjJ1uZ9 1W? A~V%Ȋnx& җ[ xH|'~d˱S:20\"q"ލL븆TBxQxF@w$'VcF͝壏o(xC5,N ;\܌3L"!;{ϤӪ?aȁ&$CѦ=!DtY8PȈJ %W$@t aR ! 5]Y{ GŃzB=\~^ĹDOxzkJtġT4ȧnC@&/NEJ."]Bo»0W yx?v2W_İ.Zqb O"HD{͠vf慚S:_BiZ~=t(px$Y~&jx̴񁂼JF(c8%ٞ5=j=W2J̒gWG\ģuBIH#(Ln3@GAC"wGAAsT^.<& 8B!*$DL 41BBj;Ʌ*$΢ V^fp >#dLx&Ī=!VC9J`|ZM(O0>mH5Voa"U1=&sҁ̈0^jck^r$$o#Dro{͙WzqSoTQLT܁3vR/űYjq26fCz`ڔJM`gV!]!>`  YȘ—$+XlԚTkdӵerKiqUx}[;) tIzOUpI*ڜ*GkI|:uȳ\yx aQr! {O[ӂ%{y-fJD#xQ3a["@2Nb{OcKsxGtl[Y9T0w~!&x蒶1(ujxw㫹j UhsTh <| l#s=0]28vVR՜&үHHb} Lab-] ep^ώ<·u_Ѱ#,/Peq"*ӝ"PA:QfaSɔp=GGi23WD|҃GOӚեfZ%ߌd JShPu?T}%xjܴ"앐F'oTEY:2f`K IX%(Ņ0}iz{+e-L&K*#]P@J^7(_b(l"5<f&7B wdܵ!X?ĹTPtIr7Jn{rSKޟN>*~< 1o@@oE60B%&=rԴ戄pPCIX3ޅ\1=Dg cWop KQƺ1bRJ80MXꆵ %-kdiq!3 *?DХB)/jϺ5x-qY,} ̊_ pcad"WFlOj<9S'vQ] @]X9Vw35@mڨqx   l s M*ɰY/ؓ_7&cQCӡZ*|lD@L%l*wJ%Zk4lbU7`. e" 9qI9@PEF]eY5~ё3SP#t5# `#-yܾwȆļ"%y10/rGmʀh*Fug xpYG= T. HOɉtȫORi͑ VXK∖Skwx34AA22+6hQ$688RŒS^Ikufzy;ȋ:*)jgOХ4s>wq;6,^TaBY*Zsڦ+6WsQQ.7;VUe5Z2G!׿NgacU[mt7tw֭v*kO7ܬ\C+ڙؔ\A/uڭm\-:E\ܖ-EfNe[H+BmYlRstnԖk&W[ɱlqsl6m[Vsxts*(Nlٶ!Vqqުc۝x\۟knW? 2BEخP}et]ޖnEvEvcڹej:ߍ]~sҽ]n ;rٲrڮ[6{g5rjmY ڂJqk]]uk\\\NU[ۉv5 ە[v76]9;z.NBW.D˾Źܸ׭t|5k9,fڲZn}˺YšmQ\֪_̪5zmnnm˽z7<.M{; ^_d솗cb<1V9ߖG2\I7ŴIO~ !) 'o,r:"Ͷ2Ðt^]mD(M U1Fc%VЯgEl3N|lIσqT}HR|7_,tӺDZeq%>69Ә s}v 1ii[> ?֩ZET<`f\[TYAďE7x\xRUyN^01>9~]cs130 v@fU4'6K<>% ZlV-9]:%n'*^lg46^JO݉-#&/ɖ7Li,h+B]%uRk?sM{sJ^C,eyGq-;!d}0݈)El aQ]bP0V7YqD%-gdWD2tZ{dw_`Uڱ\B7|^ಝIgWMDGl-`)׃w_{ ğA Tfo$ ;q( q9I]d`{HiǑf&nmR M8A&i\JU%}kA̿4X}e| cNytF"ַasp{Q'o򽢑OnJRpz3;jT}c} r rY|ﰶ|U0yr+~|{e?%ZA}*4$l$c:2FgPH;48PAdLHW@g5T& M\{G; N)yf>GvcPc&a<@E"Zl JTI#yfB'rӜD@UMZ Q䤂cGxd"$0@rܐчC8?JDž4 D9Gt"`}%K` eH2LBGh 61|P~`O(Fc>L0.а@! `2<BKN}99ƼVm D>_? 82Mg00dEr_cLvIyA_M'V^-/G0ݱWo4^ Od~Ϝxͅ⫞0LD)oqH:W*61Bi ;.!Zgў 0Q'^XzQP*-B[}-$б3Lb'^/MNfl'V=x"t7jamθ_w* `tJp3m$u. Ѩg%H)x"+Q8$*uʉ#NE(ؒ Rߖom[#Ns7-0l8S@yaZɣ< e`Ҋ>bt[x䬌`18ﶔuC)2TDV4% F&EQ'eOQIhә.a!?_>Pw3 {'K)u-!!P!S>[P~!-1N:IҌ¸YĘ nȣνE^1tdR9\).3%.~mmC>O$젟*b"s7C]qz}rV}?F,!6/S]BjJdU˦(IO'lQ4`/w-- ESNy[cG1臨&(ώm6[<"G}~ljCS' v&d߅5x֭4C2 jgu&Z<"5[&ۧaf 5pE!{)}o6p1&?. liڜFz-?^j\* X[H{ y~]1.Ehp}v7cjMKk̐ʃS Ӌ:~ Y xpbAҬlCQA 'G)+\)j:D!yZ^w%w3QO4jʢc"ii K.6kפ~YJ^]RU5jV^"z{_K}ﭸGJĹ''Hl<7ߟ-hX:vDc**-= qB[17;β`*X<2kF2a묉r>7[EfO >g_XSK968 æY}qK'M?f>`P_ cLܸJ.|'{rGCXkv5>}bJHs/B&~~`ޓTmZOoiT.0N$& !+)dF/w׮$(aWB;7&$<׌ĖOw-gx~ޜ/z c+|+qe-ȡo:b6BP66y->/#A7"vf`L_9 |gBy]׷BS+5# +qFHCDVnЯhQpR)FfBxjFjSs{Y.蒽`Wq9ݺ4U=-U c\Y)*==GCfY8'͡z'90Tvço(v79hw#{'_,ōHmbx9Xoub,O9̇>T?Bt:/ Ay Ohzbmo 93akWzUqIOX nO붌.nivTOHyY=sYD1Rcx\Ξ5 j}Yyb o%V-2xVm%ڇR=4U)b=5cs5b;~b)1ƳrMe To-o*MP>;VմYMAE$̑g> {3ffyfKtd,Eܺ?y!L)#ISG ,35z&I*)|BD%{AtzYv[}&SMbESf) r 鯽0a~BY 9չ]v$IקwkOT9[fU-$"&!>f9l$Its ( @RzS3jJ*+_0+}`Xs/;7^nѺ|H1EmY=IB0;VВk1/J5/ٲer[\;z]SbVs}BB<9'9vN2nZwЬL4#\l*^߳#ǁ-N g7I1Wﻴ}T3k% ӁjVgo߼ݫY+W i@|v=AԈHߟ5Ib/M1 Ի]ĥ٦xLk};ֿ7NJ-VbX~2N07`.}0",QDp1by-AFfT82*OqOwʓ>La6bod?̒;~S3'"8Mjozk=jM[k60#nx2 ˸9ҰѨjj/i'!W3a' <.ҶSn.yWu3HCK:#K{^Ҝnv9(q\6n!}E̐"t; KmF}' K?fV]@ v΃) kZ[n+We:zf>Q8 '%ϮWCheۚ<wcň+Y%7AǺKv|'W *kF'ɤ։_꣓|0.VK=^NZ՜[4$nҊ[nPYsK=P& ʸbk LЬmk_(L]2VIfW( M]:'u}=Mwܺ[K(@)8+)~fiw,l|%p.N\c(SWq)#߶xUs?mul ya JXD l7%78ܵ>;n^ju|a|mt^I;;vH *9yWRcC'8=wR;ط Q=mHhutwG"%e)/agwOFIk~M66yVX|KQvZ͒:\;g@Cu߫љ~J? ~j`gk[]LĆ5)ool-~a;vaU\e3;t[^Ux [ؖjg5Lw ׹UVsJ56]F+OMAVkwGIѷ`lc'2$`+a|*ͨΝ ^KS.'7 gD^zV&#Lp7TzI:: 93|=uAD`n1BO3ᣒkZpdMWdx.mٙo `c@:d# Z#__ׯt3Obۯ쑈;"Q=- A몘qGAB8ԣ_=VcuDfmI 1;Vh-mp፠*_;H7ڼ{N۟IV>%!uZwXgcJMDbL8u>݉cy/Y-KL'|:7Vt zoitY?П>|A_ϑu{H 0љ@4DZh,Lr^;eqqQ)|}~[VXzA"|v/vb29SKnMI4os8_bSc XcK$M\+Z8vEX#^ D;zx)]kDaß<&[h'fE@X! -xx 1nɿj+O)g6m$7q"8޲t&,Mr:˳z I)5dϟ9IlM7BSGc(%y.mO}|xݞGIno\ -[  -Tmv?{ZB>/pwyz hGHS[~=_`(@y5Ѵ[4~.6To Www1η-Lwu=&h"9!==BIy'31W_vOܵ+zYp$QEqo]fw 'HjX!S9`I -O?dBӿD7Lѽ !=w`7NtG%'SG6,=2 \ٲ<5 & zj-[lσ [a-Zo8JylQkԎ,k^{,rbaN{; {+ e~}nͯV~>CEg$3kֺZ]#KLZ6q׎il? ڄ;|uzd](v[us|F5!x"&RkJF, ,:va1Ů浅E ,xc7y񍠗$jnjS_( 8{\vy#~EsqPI|c FSnKd+~EG0uf, ՆhĭaiŜ͟@ hk|gPw/O}o:*FrMM[;a< 34֊B yc*7`Zm.4)?g=HzL!=Rb}U^3|Y!R Hr\l5zyHz^[4\UF O~ނRr6Wz&w'irt8/Ȣ`4pMJplWr<}%]cBmYm(0*h/y#ɳS*`d\[)csIV|ܗEI@DVS9(t^w RޔH=kvk Ĭ>Qra GeMO,մM^jP<^p)]$G0 o>h(k,!Iv FR.>Wov+;ٺRp931k,FOY.Ϻ$yz"w/2g!\1+ F",UIS &4e0>`vPfF>Î4:9~S,yKcj+σ|w4qP60<|)sgr4U F٥y(V77'wKf%\XH:H$}58×{% ~NfK^=I2bQEe @V)RXEWwlHؒgB0#YGi=STx]⍉e79w[[ExPҁeK&G=sw"v W BӲL%ڑgKr7P/|E6̜ *oI~DVy3:y!7^ 쐖XӄҮH|BV9  *]&gT,>oAlPCsko'ڧ*օ ӂC=dn5&.*Ckmaڕ@evoQv*{q ?ɫa=#vyA+]'V0kXEo)|1s"ᏮlI}P='wf>,bMYLiAE[%Mi< RS=́?V((Y@f _mU"? "ΕQvĽ<xoo#wS▁sS%[eg=:+!vn6YPX-|cy%Zk2ʙN*fzO0=d\z41-{̷@|cU0$-+6ir]CvG :7NnO6oPSxzJq(mǖσO1%sfh~'[3.K(_;_KI_>,9Lny| ZW6';?LzO򛻎8<7D^*x%6)Y`/R:ʖ <~xTb%m"ݶO2BĦS4+A JDX[͆Di vd"Vmy_9&sr7Y\xrfkO>t{sFf]l>-wVU/Z%7ܢy}g9o f=++YJNG1o74ĝ` T"6\O\v.y>U~F6J`o-_c5ЫObw~![18Ean< a66j;\yr-d8 eN2e rFDհ[Z-(,kozV9Xɣ`hX[8VϦ<1}(rzyi5CSbGZl_.?ë-=bα:a ,?n%n~ F+~,3!?T)dL #1S7 /yCuUL-.rպraYpDpSN=p-cwRts d~,WSsfmrbǗQ+6URH|?%8f 4p'1xg% :)2m+?G3싅{F'+LtƗCt20[ux96H8ݶ,% /ѿwy:58`ya\ 8?h78) mp2B8(kH]k>/z4F♐yo?6H1W"}~3b>ZŻ@9J%\o'Y+]f\2r}0׼)x80&lT|xO PL@$ ;Oo;pgDF >Ӷu =$ :£ޑ#I*QQ!3y$%hIC iGcY1S^  z~Umrh)e>GpdbHi@" @֊27uowi} gYR~r}:l2 36OA!}cinۻe9BB>4:ok`֧!mU$C߃\c½tr80n+`m99QD::S+=sZJ+j[V)g>3sG)}:\[<'n&҄I/)m*F53`[,_R/eTEۢCS { Q b2N(AV\;(9Hn ZJs*׵5AfKzH&o;^D Mwc&L:&w9N/sM= as*"L-T_)C&e6hR3"r:1Xɺ₸AS "e&N7*4ŽeBt9QbXDTĺm {c{FIʄpZ k0lwIP۵ ˷2hT߯}r`Ž "F^YRbubDVH7qwE>ov{zՐ|ѯrZSA.k#'\.a*VuVd.v;W 2#yМG,:2,6q B z\w~AmJL]e-}oOZGiTPU.G5S94$dp-CH&n>`9) ݪjvt~8p_Yf%G:E!RTjz7dMΞC}1,W8v -}DbZ6Rk>?hvQ87G#0~Ҹ﷏ +n@g6PwP_05#e>))b;֢$FֆX2nAcʡ tvz)6kJc*Yѝ3/NAW"МUȘ͆& O%@ӹc 6,PQ*Pgr9½,}$+ g7W-ʓ+_?'c5]SGdф'%S,uM;LZsgl3N'0-R5?BWQy>YU?~8BI$h>:5|Fvm4$ ߰KSNgdFKӊm_U_hAR+^oQhbI yY^_l0|0o4Z*Qw}Ka(Uh*ռ1E;QIi:%Ө!Ŭ ş<'R!C^F&"[я k\kkO)te&R?-tzWO/_'_v@&/DžُKGɭMCzIas TTϗ|N/oq̓".LI=<> rK_^Z7#>vk%'YhAu!+Ϟ!|O+^ ?( %·8X& @M $ZesF g>P^#&0H81V78y#.cU]/ny1~rQQ_r؇_a}^ɝT=B9Z8tGb%|Ը4,X#yeәJk<_/gx䅣dqJ%R82(Ą?Wr)_nD`+jniQ=JOyO̩Au WͰ`ˌItΚ8rcIbyfc}a99lt>BD>ߏMBdePr=]7B0Xщц<|g r3Quy9x}yݙ! MVVl_Ht`n6}՘M6vM]7F9kѻt2kP\EaKͪxERG-ꟷ{$_o-j#(ЎV{]=~x?-w8#|7V &oyk//~+5,IيT ٢LWySxA ~n8y{pC>6>w4VnY,$[m+a .me՞rXcRM̠fVG*;05%J )#h>2d-dzE&-mi-n5r)idr>6gϩfYxףߩ 9ǯYTl׈? sfJpnb#;7a#x/?^3HC{A $^XÿY4%{@JX)쿿_|+HXk^sUkׯ#_a:DuS~ _~[X(e~ ԗ}JZT#u;v$ eQ h05e +x4p)"8T`Y>x[f/fcTВŅ|m8BRp! +La|)|[eF6(u^.gf=咷i)50FIE ARNȰD"c 5(xa1bHQX a[x .2 ChC9pBqJMIҷˏV9~kWG1Ay,aY2dt xJ#Aո*뾑M:*ĵ%%ϦC 4E$mYU/D$`p^\Nt߇WߟSnmry~g CFpS {u^UTm]fT4*ʥ_@ߓWuE_nl-kca/u&`4'QlIeS?U ~ѴU̿h>fc,LV_װfgUST:A*T)M DXeYdWNNl'u*ϧGU-y󸶻l\W;tDMExt`Er[E\\kUV41pX{.֯[-l~Z G!G5Qm|_Mz՚h1e_V[u?8,-S9a33PC)>꺏xZrW%p@.!p?^ko[VؿOl*Oˁ{Xw(.u=q2t|Mz.'TU91$e+uxAMa{E.):'4XZԉyOt%=(QZc%vX;AǵBVK"[HX[Fޘ/2Z[QxB@6tR>FWMSO*aG+~2\7֟J{Е/Uvױݎ[H5Z ]ltl@jzeCYڸF Ze`">_"*rA:veD-G/K^btn}2Zwjh'p|PWalAoL')2O#Z {U|%L6N2 Xv8ËhptumI@#dXBn%X7Jr8cDM}cS'sqɳ(6Yokl1OƬW~%BPtylGGb8`mmGye[ɾ &6sZx#=Bd[K9L 'rTld<'擶%}rMPLٌk pS}l}TJ()'=`ͧ=5(2 xZ]xwV*'xZANMru )s]8*0۟ M % ^eK3d'_T;ĩ y_㛔ʂ} 䱡Vz0m[K¨b*,6i%o+Nf~L)d<.pZy1⥥'I}ھaH%XsVӍPQ}%t5BbXQ7`/Ӎ~8+we Ť7q D=^(ݱS'=q. xO p;|%u"p3,ÎBGGPQ=/*ةS#R#)h!jϥUV7S]C18QWʹkxMMZugw3Х5qE4A@c>I[` T,$Z(EJ -ނr$d[Yh&_"oerHKE#7 Ԝ07lq[Y*8BCH<;z')j{=m 46{p3Vs mfB ZKVQ:2Im!@=TjnapL, ou Kq/1fqhtct/镾 jv{Fcyՙ`߉VEŋt=A@(:K/J͸B#w1pF9Gvण$9, VD[L@+d@V/"fr/71_uYlw)iߓ_`%i2F _ȞLh{Qq gQ2hX {QѩlA3~_zqZ^ԩeR)y,!ld]g}PV0 ŀ >O{ ;t-. Ffz頞!i#f`ds`7ިw<ܪ[iPkx蠲-syLHle:=='jo3%[b?/;|D3X뜤qBCmx=ʇY{u88ʛ8̞ ֶ.ۊD3op{4F]ܡuZE9mfW~3&4=s|rLc`ӡ6n #&pe8> Z)C}+SPS(s|m+z&2?J 5K`z`d0 I`< Y>Ѱ9Dp~Z,n(t RYWӗhHOi_u^(m(Cjj?ec:@܍ֵƁ:G2uϗ9gBsge>yh4)>K Kj9,+b>F@,`yO=C_dGdc#nweGQ_FW1gu= 3*RbXAp֐ {HDk<atgE)$ZN ޾Ky+ ^B1c δౚ LD]d1 #jGߢ7U@AC-%ɂ툡x0A [~$kimn:ll)3̓>ۉ20S jG>E1L: L)|z[s$򭠑Y~nGXFw9k8ۍdw Gi =T hʠHqЕId}RD~a3r &^7]փ3ӻ 7{dO0JYs9n{ sއBm buCB`vؗVZFu'g`o]:eZd:1 ssqp[&oĒU9.Q(biZoA4FSDKΚEoO(:'lzC)%ÁP4!mf5ėQRW3{nQYs=o$Tz%udo$1EU1НŒd;x# }*X1Y(EFi"g4qYypG KѤ_Xh( ӟx(P?tK%%.y'DQÇ2X L/)K+@y!ry"dȫH?5Rt*NJ-b3 yΥUzؕa1bƆ=B.@RbHR4%Yiƭ_dF*eo G|faSf'Kbd9,'HۈG^Ȉ'xd7 #{`}0M,hhD$݇ dZpS5ߓ0fS)[JʲF˨ [4K>oaR-T-J|[42WXA֨EyH-q;T;@ZkgL)L}rR(#֕8!m I% Fb{O-.t{H#EO#[M,:.N/i|}qC' xIDgj }jaJ*E;rjX]o3LX{'q_2z|T-pָ HbprNqwY MY(hf-’^i* BV%iy+G.,^BةZ3^f}ʎK2gK! QR!W /zBY齮ƺؙi0Pܗ(LM_djFޢ $a5VͳX]pB$'.bsiDժb{+>w^gklwu#<_/d$9x]%`!mw[B 4Ψ`˽2.wgVt&ζnX׵`[:md.Ƭ<`Z YgQ6ZǙE5BWϢ8JF,ݬ :}" D\7 cEc$mxCxPFA&f)Aji!Kw҂t`W̮D+2do>"+H5[WPo-Λ3-`(r0ƙ91P;7ҝȫx(ũH8$ ȸ2du Do`c?Q b-d1Xe+S#qrm1ΨAKB9fp?ZCX@wMTF0\ HJaO,9a+ b'㞭i}m4_&--ESʵL)E[Bawo1Omd(vՄsgE=7=Ю >v.A׵}y֨T=T|'qќ wڑg Nc*=ߤu6d=y P?/x  ȋ$gjj\ŇX!fd-HYb䱯)^ kn-nS8mۑu;^OIRvR9qJ$V`w]ւEs,wE q̝nV܁{GeZ=XC^UlI86"%+QB(=j} ꜟ5lEDSBT}h/M^mi:3 1-pwS7p>;ՖTtpda?.dU!yu{dJBRNggXlꍛ0DV:TtP;!EST2`;3]mkm$흏݋+-1\4Cdi&U2gkWE&tTk\Zܴ7g \l>loJ5{=rPВܣ~4ٲ1Y>YQTGHE)魺a{mE/.̰smWԅ}cW%4qX5~8Qj#eNd7]itCŭT tBȳ q- Fsuj#҂xe| !$lj-,OvLM!<:~o1>nOz}m >_5BYүZ֙T-VFdi- Yh0Ŷ _o=(<wv߼=X[ kz`(8zu^B (zp,$QLf $rKH x@Ͼ@+kH{ nPSG4pBۧCm 0wuhum^6ʊ1` ӑpK~+hK}rK.)%^һxX++-B祷:JKȳ6ʙL!lڞ̂RE+yrTJ ž_+w}MswBY˕( ( 検%P@E>eD3?=F/gaشq,EsMR:_ Jp}FMIަJOg d% g|{+GŪ0(FqI뷾^~ Z;{rGP2ƧiDH骆}27siU4|?VIKD葺_LjeI]ZΑj4EN6%MH!H튺]/}lp}(>:QF瞵^]2ɮ{y7&'2ae*ϳ=7)=ri 5y|BK=ܗjcfو[Kaַ/dM_Wf5(9+اI9v3.IJ#t @8D"uY5sFq ( (AT)C$H:;KuL=ekem3 `k4? VA$2KM@hVǚUDL.<2=.g]*͙dwb[qҊM5Ri~q+ !f+qEvK e(ɿ1MBmhzϊiyxy0 rCϳaҞJi2P[ y줺/8%fBx`09* 17r8 A@N,R~Ӫ;ۘ?)wӞXc=r,c\-DR.tA|m@QZ+k|S;0FQ7$VS+.<|;FD1)ldZ;!lL'y9"Xt7LK}2~( VQsUJ[rA0>v=7g6AM4ç}tj3+Ƴ% o !^- '/&,\/;XN,"Ry kwsF„KbptO6wvݗk-MPvi r 0st0gB)%J~6n*rУS#+ǻ[ؐi_8ƛ>i2u!R 6:ńg}Vin@>S[d3ө( 8F*i0:0CwquT k4݇leA]m]Pw 6c@#O"pU,> 8^6 #o0TIJ"2̦S \N%`par`YWnk*[ZxT׿dn׷~pEOelJ2ymvlm /rO|\l:`^TWwö~8S]~j]мfU s±"`h ߟJה(V,iˢ׻t3. :=f"ҵ0ԩOS\W. y4uYc WDAZ~Pz~ЮM٧)P%Dn9I_ `"2h(H_ f `sD_x׽滫0pHxPrigs04lpml/WPV\b3ZҎCYTyk,IiW_5\p6|fBZ޵V7#,ntrJiľ V`#S_GHy<=P4ez䨗پ[+"ݷ-OY ƫ1czˆ]L4PQniNCL Vi8t;pxe;ÏWX4ۏiƲ4wbA; ng:LN_S+5 C/ip 0zV0Ny{/k=F crTUԐEWEqEƺ p Z93Wӣry yʿbՊ:StM8p{W q'B^ zswu}U7_xCac{@,dL[ ݥ:#jwiH 1YSˤmfcrY`0&`џyS8SW6pG~۴F, D 1W1ȯ=ӣ #n{]~C]EY0hO m1AkO>:6ppO`p\.qT}CtD6Pak8U"-e<f:2k-? yx-'LeGw?.%}|S]n)di E+/^ \Ļt'x>*LQ?Fy'6|b53 sTeAn#ˣz71ގ;GA[-SS~e*Lgc5؏.+Y:}D$f~v dWQ Vl1 ut)|}-3heRf'إ_Q;1^Ӊ3C0^TjJ}hr&X _$n;mt(cK{t.Ƹ6iUȗq^y%!]t^m݄\\e{/.aexm:l؂M5=k &Yx@pݪ?mTp_1hص43h_%J1;6_ˣ|ouKj'NlҋHOiFo/Aa?ܾڸKymhk o o2r Vw,W Qc'.?WFgK m53_6|K7]${xtw6标 rb!r(ZR:'lMߌ7adZzDXɋU8BuZVUa:CȷkF,ՏocJ/t Gf>D,S1A?,`& B|\4Y糣 D}#:Xc+˺W,9Y^啢=^ɉ%y&zdBSD&NbyҴ'= ʶptJ׊.BɶE\čmX|K\z kƃ!t- 8ñC;P Q$SCF5?B5JGukʋ]y1C(ՇLMYE FvZ|\C ;[l;ޣ(GXsZ(TJ+> S1À'r'f_XE)ft [|ScJ#e3 `,RvlL 93%jC[tdP3"kOfPqNvõVB8`lz01dB ]l133t Y\k" |za;d"4Xܔ,QHOKAt˶EA Jį5;'<2 '΋h22iCX qe$øILt9䰡4o5@&?dEdP(kU1 'P͓~LS],G4{H]ǏknN1F 4E9I gװ2Q`>g0!|-]S=5Ê&ty5D_4 l&ߦ{J!Gt=YN3GMJݓ}u6 zcBFkmmSL͂Lh7,zLja?)dYeοHȲCs$rYF}cE˒bW XL%G`6}o\OBi\C~Q:_xb?bwK Sz"$/]@-Q|/hJ<0{n+@rI@4h]n$YGu%ty uG0ZwR0-tRxCCv['tݱ/.;wU&|-r# cyAuuW4$>df3 Uf*%$sde2IP/3`Kь#Þ)HdV+m ~1Yv/huFXا-$٩o]a(Fn^/ 8v5}5ONXql Ye|Kl}-8Vd΁VU0{s^Nr/E@t_Ljq:8$J Ŭh`2gsLytӰac5zX;>smZ+{x/nb[mBJ9M2=|gA";ne#u:kdn‡7WFxe5OcMr}e2c46&{;m!.WPG?!d!ؓ?=9luAo~] y]ƨ`2\-N]a0!"S3""$I:A)2U:R 2""""2U6@ϯN=[BiKMs/1e\~XT. Oϕ;`\ k](+:ދ!<KFwx!VQ5 ª7FDc/LQ| @>bti)-2F{L=7x| dW$WO?wςV"nٔ vꊖص193yU=@.F+ԇp5Lln2"%;S vfCoI`+4AWl IB^vǾK̀<5ʳXӥmpGR0]Ʌ9zW\۩r0r=_~q)('}B)=AZ!E"MA pVPLߤkQʐ\RQWgsxkKZRڠX\)II^/)01;Qߤ\K o~zxl&ᡁvt%+P \8c=Uu*}dFaz6۬]"Yv6 CjAGۅؚ?#+1)$<دĝΜ\jaXdJ=68d dtL:=U6:KGd7ѾY) #  N~6O  Fx4YjZ  n  (@ ~v4@m`8@paA}bJB|@HlqmRM|ozvw{W0TVR~"&*.0׮2z48<>tBHLPTX\`d>hjlnt|"h`Ȟ0ЍSXbGNse2KP= #&$ > yA! ovCwRS6VvTUVWXYZ[\]^_`abcdefgh]Qq+HB '%l1pZ@9ʹ9궱=&ps)z $747Xe:FY9&*P: 7u6xbF:ڙJO_t*xzyϏ=&au/=|Lh@8N*jx܄R6F(&l"pĤ ,lt|mpq` pȐPo P(nta-..(97zXZִF!t/F']?EhDTT[%IDȻThXgm)Gwv*=L{9 Ks+&p?$\R=]K_vm0' ?o+]{Vԟܗ1yEXXꘁSfit}[M$`9<,. k:R"HNe/[ '1`fSp:Z '-MS ՉxbJsBy4ߟ P.zT0]Fc1TF~VL&ne)Ed"Wc{-vx1xǖsw~7KUcB\1ZAFJqq>Sú#lљJ:Z뙄RxQD^92CIaj4:f5 m)G^^(Y| (Øgz0GVW;qV=[7mJa}da˫ $u3v&M9HeT℀ p5^E{d6g$.P;DnbJN_}>cw|`5o*ck"|*#@:_]L}z*6nazBO䉨lʗH%X4YxA %h%IV)UwH>X $i# gn9.t72~?^0}Όqy (/oo0;4QDjpqjQ?{ؾP,jdo^4ҔBzD;1$W{rO4V}SO#1/Aؚ,!-1U"Bងǂ쥊ڛ N͡3(&r}1EeQ|FA6^yl5_'Hoܥo0dC )^ۇݘW組e!.Q|4*˲ {-a9(_)U kF VKjX|F oInFS8w/CYze+0UN;P'K}1C1v18T$j4/դz@(ɆyUT \*ڄh/QM;./}~/h_N$"^]2 |mr+:xĐmÈ>h^vO{P6EP4Bʴb XKȯ8*!_^M#'w9r,FyNOpU`g;qW((lq~[@bA296 m *x mbxa䌏1(ԂİN,=akj͑¦{46̚ .Ђ+Xb< q(/ ]ߓ8"8h'eF4Y_~L{Oh~{zO+Yß'|b|sujhm )GLZlJ%u& 29P;RQ@_V;c;"KLt*Q=?T; d(d¾'uJ;Ybܠ}^j=YXo r]g`4ZVUaGqܚ]sj"c(o'B 7s?zcAjXXr3d!aNw1{q^Or(S5S\\~u5$D<e}X6!GXj8 9"/~=u φbBgj#Vv'B,An-37g>ô<~} MH f6ɭEW4_maZqz /_w\۹~?K~\_v$ߑ:}u# 7-d^Wi ᄍE/ig6%v"HEԱOozI ,~_톳4)nnoU_%pmaLH" q,p!$:1d8!E,,g" %"}tCd4ƍZN&(a,_ C[R \h%p7m 7sKhj'ͦ\ 9Yn]j`3C7[gVbx#(/<8sb?DQlEdVs7l]/@$QW|y}C8>+eWw:4&L<-F}δ #Nf?Z0UgOs#]A'|YG^~?'kg ޲I L]QC ݚ!!?hYB*SZkiFnAF>v 2l=xs6U9}'ďO2HF8 >Nv[ j!tBA~Rh@y h: ,@\h<EPl0\XX8`h wgyi pr t 8%4C24a0437/454a1ff2f3e/467120978b9a0cc3969c6231f4ed382f0bTRAR!!!^m$u )1hhFDB9e!! RF$HAҔT(n&%DFMɠMߌ( C3ӓPh)QYGz#!Sdj;@ 3$EB]Ѝ؃4nq]t4v ٘9lH*!yTrXq NW.žB p9Sߡ Ȉ|B|"U-Z"ܫoa+ RHu]J2a &Ltz}YYH|hFt;nrL$&$ӫTM!:GBw:YCioYIZoccF4 T*B .Z Ea?-m1vQur)&e$YJSDJ5΍8n0w;|pf|R9Fƛ  iRᄱ4.լ8lj/Bmןz 刾7}$i}~o3M/k{@/J5vP"n?SKU3%4B O=(v2NC9p+5