systemd-standalone-sysusers-252-46.el9_5.3> M Mv ĉJ4!!%joLne)Ip-Bm5 ']ghreleng@rockylinux.org p-Bm5 ']zSďd1W/^cӹGkº, ~b {Cu*%f غm)*kG}߽$SM1%6`Xn2acJjkI2ux肋#qzq3hL$>&Mv-V"P tp$Jm@?W+wJA aQ?eݔ:j_o6ַ 3pK]MiDϰe& vosXЮy6f0c061569cffbe941e8f6ea7a842f8da7a10fb8cf49ba261008d778b6be3c16f8cb65a56b06d8e5e056dade109e884d9c4f7713nQ=or/$ >=9?)d" - g@Dtx "(0< B H T  $h&&&(P8\$9$:3$GHIXY\ ]^Zbdefltuv(wxy"Csystemd-standalone-sysusers25246.el9_5.3Standalone sysusers binary for use in non-systemd systemsStandalone sysusers binary with no dependencies on the systemd-shared library or other libraries from systemd-libs. This package conflicts with the main systemd package and is meant for use in non-systemd systems.gfpb-cd782f4e-4de0-4d04-88ea-65983b074741-b-s390xRocky Linux 9.5Rocky Enterprise Software FoundationLGPLv2+ and MIT and GPLv2+Rocky Linux Build System (Peridot) Unspecifiedhttps://systemd.iolinuxs390xh/Aghdghnghn7308d02a7fff781753da28b8a13c57927ba1cae865043a609993225f7e1103b1../../../../usr/bin/systemd-sysusers.standalonerootrootrootrootrootrootsystemd-252-46.el9_5.3.src.rpmsystemd-standalone-sysuserssystemd-standalone-sysusers(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libcrypt.so.2()(64bit)libcrypt.so.2(XCRYPT_2.0)(64bit)libcrypt.so.2(XCRYPT_4.4)(64bit)libcrypto.so.3()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.3.1)(64bit)libselinux.so.1()(64bit)libselinux.so.1(LIBSELINUX_1.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)3.0.4-14.6.0-14.0-15.4.18-14.16.1.3g`@g@f4f@fѴ@f@f(@f(@f3ffaf@fr@fj@fM@fK;@f+@e,e8@e@e}@eԔ@ee6@eee)eeves@eRd@d@d-@df@d@Release Engineering - 252-46systemd maintenance team - 252-46.3systemd maintenance team - 252-46.2systemd maintenance team - 252-46.1systemd maintenance team - 252-46systemd team - 252-45systemd maintenance team - 252-44systemd maintenance team - 252-43systemd team systemd maintenance team - 252-41systemd maintenance team - 252-40systemd maintenance team - 252-39systemd maintenance team - 252-38systemd maintenance team - 252-37Jan Macku - 252-35systemd maintenance team - 252-34systemd maintenance team - 252-33Jan Macku - 252-32systemd maintenance team - 252-31systemd maintenance team - 252-30systemd maintenance team - 252-29systemd maintenance team - 252-28systemd maintenance team - 252-27systemd maintenance team - 252-26systemd maintenance team - 252-25systemd maintenance team - 252-24systemd maintenance team - 252-23systemd maintenance team - 252-22systemd maintenance team - 252-21systemd maintenance team - 252-20systemd maintenance team - 252-19systemd maintenance team - 252-18systemd maintenance team - 252-17systemd maintenance team - 252-16systemd maintenance team - 252-15systemd maintenance team - 252-14- Set support URL to the wiki - Set sbat mail to security@rockylinux.org- get rid of SELinux policy module (RHEL-76033)- add %posttrans scriptlet to make sure our SELinux policy module is actually installed (RHEL-46339)- version bump (RHEL-56019)- ukify: Skip test on architectures without UEFI (RHEL-56019)- build ukify without noarch- Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103) - fundamental: share constants for confidential virt detection (RHEL-50651) - efi: add helper API for detecting confidential virtualization (RHEL-50651) - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651) - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)- udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103) - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103) - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103) - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103) - Include if possible to get thread_local definition (RHEL-50651) - add APIs for detecting confidential virtualization (RHEL-50651) - detect-virt: add --cvm option (RHEL-50651) - detect-virt: add --list-cvm option (RHEL-50651) - unit: add "cvm" option for ConditionSecurity (RHEL-50651) - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651) - core: log detected confidential virtualization type (RHEL-50651) - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651) - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651) - confidential-virt: split caching of CVM detection into separate method (RHEL-50651) - confidential-virt: add detection for s390x target (RHEL-50651) - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)- fix applying patches- timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020) - cryptsetup-tokens: fix pin asserts (RHEL-36276) - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276) - kernel-install: check machine ID (RHEL-50672) - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672) - hwdb: Add Lenovo G580 (RHEL-5950) - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950) - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950) - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950) - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950) - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950) - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950) - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950) - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950) - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950) - Update 60-evdev.hwdb (#25704) (RHEL-5950) - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950) - hwdb: drop trailing space (RHEL-5950) - hwdb: add comments about matching entries (RHEL-5950) - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950) - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950) - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950) - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950) - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950) - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950) - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950) - hwdb: remove spurious whitespace (RHEL-5950) - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950) - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: Add mount matrix for Linx 1020 (RHEL-5950) - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950) - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950) - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update autosuspend db (RHEL-5950) - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950) - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950) - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950) - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950) - hwdb: add override for IdeaPad5 insert key (RHEL-5950) - hwdb: update database (RHEL-5950) - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950) - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950) - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950) - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950) - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950) - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950) - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950) - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950) - hwdb: drop redundant entry (RHEL-5950) - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950) - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950) - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950) - hwdb: Add support for "Passion Model P612F" (RHEL-5950) - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950) - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950) - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950) - hwdb: Fix rotation for BMAX Y13 (RHEL-5950) - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950) - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950) - hwdb: do not include '#' in modalias (RHEL-5950) - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950) - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950) - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950) - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950) - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950) - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950) - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950) - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950) - hwdb: Add override for headset form-factors (RHEL-5950) - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950) - hwdb: drop trailing white space (RHEL-5950) - hwdb: merge multiple keyboard entries with same setting (RHEL-5950) - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950) - hwdb update for v246-rc1 (RHEL-5950) - update hwdb autosuspend data for v254 (RHEL-5950) - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950) - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950) - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950) - Add alternate name for MX Ergo as found on some devices (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950) - Update 60-sensor.hwdb (#28804) (RHEL-5950) - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950) - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950) - hwdb: keyboard: D330 FnLk toggle (RHEL-5950) - hwdb: Add Logitech G502 X (RHEL-5950) - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950) - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950) - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950) - hwdb: Bush tablet rotation support (#29268) (RHEL-5950) - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950) - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950) - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950) - add udev rule for micmute (f20) (RHEL-5950) - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950) - Update hwdb (RHEL-5950) - Update hwdb autosuspend rules (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950) - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: rename .html=>.csv (RHEL-5950) - hwdb/acpi-update.py: streamline python code (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: add Predator PHN16-71 (RHEL-5950) - Update 60-autosuspend.hwdb (#30131) (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950) - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update (RHEL-5950) - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950) - Add three Dell platforms to sensor accel location base (RHEL-5950) - Add Bosto BT-12HD series to hwdb (RHEL-5950) - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950) - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950) - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950) - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950) - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950) - hwdb: add resolution setting for GAOMON S620 (RHEL-5950) - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950) - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950) - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950) - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950) - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950) - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950) - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950) - Update USB ids of hwdb (RHEL-5950) - Added resolution for Huion Kamvas Pro 19 (RHEL-5950) - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950) - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950) - Fixed resolution for pen and touchpad (RHEL-5950) - hwdb: fix missing colon (#32108) (RHEL-5950) - hwdb: update for v256 (RHEL-5950) - autosuspend: update for v256 (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950) - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950) - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950) - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950) - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950) - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950) - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950) - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950) - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950) - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950) - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950) - hwdb: add a vmbus id for HyperV Video device (RHEL-5950) - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950) - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950) - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950) - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950) - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950) - Add OrangePi NEO Scancodes (RHEL-5950) - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950) - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950) - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950) - hwdb: Add some HP IR cameras (RHEL-5950) - hwdb: add more AV controllers (RHEL-5950) - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950) - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950) - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950) - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950) - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950) - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950) - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950) - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - add udev rules for trezor hw wallet devices (RHEL-5950) - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950) - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950) - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)- add Requires(post) on selinux-policy (RHEL-46339)- enable FIDO2 support (RHEL-36276) - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630) - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630) - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436) - ci: add support for rhel-only parameters (RHEL-30372)- tools: fix the file name that "meson setup" generates (RHEL-30372) - tools: explicitly specify "setup" subcommand (RHEL-30372) - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372) - fuzz: don't panic without a C++ compiler (RHEL-30372) - meson: use ternary op for brevity (RHEL-30372)- ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372) - libsystemd: link with '-z nodelete' (RHEL-6589) - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219) - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219) - string-util: pass ANSI sequences through unchanged (RHEL-31219) - cryptsetup: do not assert when unsealing token without salt (RHEL-38864) - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864) - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159) - Drop log level of header limits log message (RHEL-33890) - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890) - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070) - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070) - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070) - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070) - man: document that journalctl --user requires Storage=persistent (RHEL-31070) - fix: prefix of dmesg pstore files (RHEL-20322) - backport new mkosi (RHEL-27512) - test: Skip various tests when /sys is not mounted (RHEL-27512) - string-util: introduce ascii_ishex() (RHEL-27512) - sd-id128: several cleanups (RHEL-27512) - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512) - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512) - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512) - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512) - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512) - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512) - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512) - sd-id128: also refuse an empty invocation ID (RHEL-27512) - man: update documents for sd_id128_get_invocation() (RHEL-27512) - test-id128: simplify machine-id check (RHEL-27512) - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512) - test-unit-name: simplify machine-id check (RHEL-27512) - test-load-fragment: simplify machine-id check (RHEL-27512) - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512) - test: skip journal tests without valid /etc/machine-id (RHEL-27512) - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512) - test: Skip test-recurse-dir on overlayfs (RHEL-27512) - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512) - test-execute: Skip when /sys is read-only (RHEL-27512) - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512) - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512) - test-execute: drop capabilities when testing with user manager (RHEL-27512) - tmpfiles: Add merge support for copy files action (RHEL-27512) - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512) - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512) - ci: drop super-linter's shellcheck (RHEL-27512) - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512) - ci: backport mkosi CI configuration from upstream (RHEL-27512) - mkosi: explicitly enroll SecureBoot keys (RHEL-27512) - test-execute: also mount tmpfs on /dev/shm (RHEL-27512) - mkosi: fix UKI addons test (RHEL-27512) - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512) - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512) - mkosi: make shellcheck happy (RHEL-27512) - mkosi: use pesign for signing UKI addons (RHEL-27512) - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512) - ci: make the build dir accessible when running w/o privileges (RHEL-27512) - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512) - ratelimit: add ratelimit_left helper (RHEL-35703) - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703) - ci: define `runas` function inline (RHEL-35703) - Drop /dev test in test-mountpoint-util (RHEL-30372) - core/manager: export manager_dbus_is_running (RHEL-40878) - core: refuse dbus activation if dbus is not running (RHEL-40878) - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878) - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878) - manager: fix reloading in reload-or-restart --marked (RHEL-40878) - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878) - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)- spec: return selinux dependencies (RHEL-35732)- ci: update actions/upload-artifact to v4 (RHEL-30372) - journal-remote: code is of type enum MHD_RequestTerminationCode (RHEL-30372) - resolve: dns_server_feature_level_*_string type is DnsServerFeatureLevel (RHEL-30372) - shared|install: Use InstallChangeType consistently (RHEL-30372) - test: temporarily disable coredumps in testsuite-17.03.sh (RHEL-30372) - ci: update manpage deployment workflow (RHEL-30372) - bootspec: fix null-dereference-read (RHEL-36284) - units: don't install pcrphase-related units without gnu-efi (RHEL-33384) - kernel-install: fix uki-copy deinstall (RHEL-36505) - ci(packit): explicitly clone `c9s` branch (RHEL-30372)- execute: Pass AT_FDCWD instead of -1 (RHEL-31783) - ci(src-git): update list of supported products (RHEL-30372) - coredump: by default process and store core files up to 1GiB (RHEL-15501) - coredump: keep core files for two weeks (RHEL-15501) - ukify: make the test happy with the latest OpenSSL (RHEL-30372) - test_ukify: use raw string for the regex (RHEL-30372) - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430) - test: add a couple of tests for systemd-coredump (RHEL-29430) - test: don't expand the subshell expression prematurely (RHEL-29430) - coredump filter: fix stack overflow with =all (RHEL-29430) - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430) - test: add coverage for CoredumpFilter=all (RHEL-29430) - test: rotate journal before storing coredumps (RHEL-29430) - test: sync with the fake binary before killing it (RHEL-29430) - test: check coredump handling in containers & namespaces (RHEL-29430)- rebase rhel-net-naming-sysattrs to v0.5- bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952) - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952) - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952) - sha256: add helper than hashes a buffer *and* its size (RHEL-16952) - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952) - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952) - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952) - bootctl: split out setting of system token into function of its own (RHEL-16952)- resolved: limit the number of signature validations in a transaction (RHEL-26643) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643) - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133) - units: change assert to condition to skip running in initrd/os (RHEL-16182) - ci: add configuration for regression sniffer GA (RHEL-1086)- units: fix typo in Condition in systemd-boot-system-token (RHEL-16952)- random-seed: shorten a bit may_credit() (RHEL-16952) - random-seed: make one more use of random_write_entropy() (RHEL-16952) - random-seed: use getopt() (RHEL-16952) - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952) - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952) - random-seed: split out run() (RHEL-16952) - random_seed: minor improvement in run() (RHEL-16952) - random-seed: downgrade some messages (RHEL-16952) - random-seed: clarify one comment (RHEL-16952) - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952) - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952) - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952) - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952) - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952) - random-seed: handle post-merge review nits (RHEL-16952) - boot: do not truncate random seed file (RHEL-16952) - bootctl: install system token on virtualized systems (RHEL-16952) - boot: remove random-seed-mode (RHEL-16952) - stub: handle random seed like sd-boot does (RHEL-16952) - efi: add efi_guid_equal() helper (RHEL-16952) - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952) - boot: Detect hypervisors using SMBIOS info (RHEL-16952) - boot: Skip soft-brick warning when in a VM (RHEL-16952) - boot: Replace UINTN with size_t (RHEL-16952) - boot: Use unsigned for beep counting (RHEL-16952) - boot: Use unicode literals (RHEL-16952) - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952) - meson: use 0|1 for SD_BOOT (RHEL-16952) - boot: Add printf functions (RHEL-16952) - boot: Use printf for error logging (RHEL-16952) - boot: Introduce log_wait (RHEL-16952) - boot: Add log_trace debugging helper (RHEL-16952) - tree-wide: Use __func__ in asserts (RHEL-16952) - boot: Drop use of xpool_print/SPrint (RHEL-16952) - boot: Drop use of Print (RHEL-16952) - boot: Rework GUID handling (RHEL-16952) - efi-string: Fix strchr() null byte handling (RHEL-16952) - efi-string: Add startswith8() (RHEL-16952) - efi-string: Add efi_memchr() (RHEL-16952) - vmm: Add more const (RHEL-16952) - vmm: Add smbios_find_oem_string() (RHEL-16952) - stub: Read extra kernel command line items from SMBIOS (RHEL-16952) - vmm: Modernize get_smbios_table() (RHEL-16952) - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952) - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952) - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952) - ukify: use empty stub for addons (RHEL-16952) - stub: allow loading and verifying cmdline addons (RHEL-16952) - TODO: remove fixed item (RHEL-16952) - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)- test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086) - test: use the default nsec3-iterations value (RHEL-1086) - test: explicitly set nsec3-iterations to 0 (RHEL-1086) - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483) - ci: deploy systemd man to GitHub Pages (RHEL-1086) - doc: add missing `` to `systemd.net-naming-scheme.xml` (RHEL-7026) - man: reorder the list of supported naming schemes (RHEL-7026) - tree-wide: fix return value handling of base64mem() (RHEL-16182) - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182) - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182) - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182) - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182) - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182) - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182) - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182) - man: document the new crypttab measurement options (RHEL-16182) - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182) - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182) - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182) - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182) - generators: optionally, measure file systems at boot (RHEL-16182) - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182) - man: document new machine-id/fs measurement options (RHEL-16182) - test: add simple integration test for checking PCR extension works as it should (RHEL-16182) - update TODO (RHEL-16182) - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182) - boot: Simplify object erasure (RHEL-16182) - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182) - dlfcn: add new safe_dclose() helper (RHEL-16182) - tpm2: rename tpm2 alg id<->string functions (RHEL-16182) - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182) - tpm2: use ref counter for Tpm2Context (RHEL-16182) - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182) - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182) - tpm2: simplify tpm2_seal() blob creation (RHEL-16182) - tpm2: add salt to pin (RHEL-16182) - basic/macro: add macro to iterate variadic args (RHEL-16182) - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182) - basic/bitfield: add bitfield operations (RHEL-16182) - test/test-bitfield: add tests for bitfield macros (RHEL-16182) - tpm2: add tpm2_get_policy_digest() (RHEL-16182) - tpm2: add TPM2_PCR_VALID() (RHEL-16182) - tpm2: add/rename functions to manage pcr selections (RHEL-16182) - test/test-tpm2: add tests for pcr selection functions (RHEL-16182) - tpm2: add tpm2_pcr_read() (RHEL-16182) - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182) - tpm2: add tpm2_is_encryption_session() (RHEL-16182) - tpm2: move policy building out of policy session creation (RHEL-16182) - tpm2: add support for a trusted SRK (RHEL-16182) - tpm2: fix nits from PR #26185 (RHEL-16182) - tpm2: replace magic number (RHEL-16182) - tpm2: add tpm2_digest_*() functions (RHEL-16182) - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182) - tpm2: add tpm2_set_auth() (RHEL-16182) - tpm2: add tpm2_get_name() (RHEL-16182) - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182) - tpm2: add tpm2_policy_pcr() (RHEL-16182) - tpm2: add tpm2_policy_auth_value() (RHEL-16182) - tpm2: add tpm2_policy_authorize() (RHEL-16182) - tpm2: use tpm2_policy_authorize() (RHEL-16182) - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182) - tpm: remove external calls to dlopen_tpm2() (RHEL-16182) - tpm2: remove all extern tpm2-tss symbols (RHEL-16182) - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182) - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182) - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182) - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182) - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182) - tpm2: add tpm2_read_public() (RHEL-16182) - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182) - tpm2: add tpm2_load() (RHEL-16182) - tpm2: add tpm2_load_external() (RHEL-16182) - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182) - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182) - tpm2: add tpm2_create() (RHEL-16182) - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182) - basic/alloc-util: add greedy_realloc_append() (RHEL-16182) - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182) - tpm2: cache TPM algorithms (RHEL-16182) - tpm2: add tpm2_persist_handle() (RHEL-16182) - tpm2: add tpm2_get_or_create_srk() (RHEL-16182) - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182) - tpm2: remove tpm2_make_primary() (RHEL-16182) - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182) - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182) - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182) - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182) - added more test cases (RHEL-16182) - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182) - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182) - cryptenroll: fix an assertion with weak passwords (RHEL-16182) - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182) - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182) - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182) - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182) - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182) - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182) - tpm2: move declared functions in header lower down (RHEL-16182) - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182) - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182) - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182) - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182) - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182) - openssl: add openssl_pkey_from_pem() (RHEL-16182) - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182) - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182) - test: add DEFINE_HEX_PTR() helper function (RHEL-16182) - openssl: add test-openssl (RHEL-16182) - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182) - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182) - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182) - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182) - tpm2: change *alg_to_* functions to use switch() (RHEL-16182) - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182) - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182) - tpm2: in validator functions, return false instead of assert failure (RHEL-16182) - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182) - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182) - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182) - tpm2: simplify call to asprintf() (RHEL-16182) - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182) - tpm2: use strempty() (RHEL-16182) - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182) - tpm2: remove ret_ prefix from input/output params (RHEL-16182) - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182) - openssl: use new(char, size) instead of malloc(size) (RHEL-16182) - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182) - tpm2: use switch() instead of if-else (RHEL-16182) - tpm2: make logging level consistent at debug for some functions (RHEL-16182) - tpm2: remove unnecessary void* cast (RHEL-16182) - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182) - tpm2: wrap (7) in UINT32_C() (RHEL-16182) - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182) - openssl: add log_openssl_errors() (RHEL-16182) - openssl: add openssl_digest_size() (RHEL-16182) - openssl: add openssl_digest_many() (RHEL-16182) - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182) - openssl: add openssl_hmac_many() (RHEL-16182) - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182) - openssl: add kdf_kb_hmac_derive() (RHEL-16182) - openssl: add openssl_cipher_many() (RHEL-16182) - openssl: add ecc_edch() (RHEL-16182) - openssl: add kdf_ss_derive() (RHEL-16182) - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182) - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182) - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182) - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182) - tpm2: fix build failure without openssl (RHEL-16182) - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182) - tpm2: downgrade most log functions from error to debug (RHEL-16182) - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182) - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182) - tpm2: update tpm2 test for supported commands (RHEL-16182) - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182) - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182) - tpm2: cache TPM's supported ECC curves (RHEL-16182) - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182) - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182) - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182) - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182) - tpm2: do not call Esys_TR_Close() (RHEL-16182) - tpm2: don't use GetCapability() to check transient handles (RHEL-16182) - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182) - tpm2: add tpm2_get_pin_auth() (RHEL-16182) - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182) - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182) - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182) - cryptenroll: drop deadcode (RHEL-16182) - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182) - tpm2: add test to verify srk templates (RHEL-16182) - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182) - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182) - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182) - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182) - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182) - openssl-util: avoid freeing invalid pointer (RHEL-16182) - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182) - creds-util: do not try TPM2 if there is not support (RHEL-16182) - creds-util: merge the TPM2 detection for initrd (RHEL-16182) - cryptenroll: fix a memory leak (RHEL-16182) - sd-journal: introduce sd_journal_step_one() (RHEL-11591) - test: modernize test-journal-flush (RHEL-11591) - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591) - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591) - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)- spec: update rhel-net-naming-sysattrs to v0.4 (RHEL-22278)- spec: add new package with RHEL-specific network naming sysattrs (RHEL-22278)- ci: use source-git-automation composite Action (RHEL-1086) - ci: increase the cron interval to 45 minutes (RHEL-1086) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086) - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427) - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443) - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443) - udev: add new builtin net_driver (RHEL-22443) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)- logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757) - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757) - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757) - meson: Properly install 90-uki-copy.install (RHEL-16354)- Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436) - man: mention RHEL documentation in systemctl's man page (RHEL-19436) - resolved: actually check authenticated flag of SOA transaction (RHEL-6216) - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317) - man: environment value -> udev property (RHEL-1317)- meson: fix installation of ukify (RHEL-13199) - sd-id128: introduce id128_hash_ops_free (RHEL-5988) - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988) - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988) - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988) - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988) - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090) - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090) - manager: add one more assert() (RHEL-6090) - pid1: add new Type=notify-reload service type (RHEL-6090) - man: document Type=notify-reload (RHEL-6090) - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090) - networkd: implement Type=notify-reload protocol (RHEL-6090) - udevd: implement the full Type=notify-reload protocol (RHEL-6090) - logind: implement Type=notify-reload protocol properly (RHEL-6090) - notify: add --stopping + --reloading switches (RHEL-6090) - test: add Type=notify-reload testcase (RHEL-6090) - update TODO (RHEL-6090) - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)- udev/net: allow new link name as an altname before renaming happens (RHEL-5988) - sd-netlink: do not swap old name and alternative name (RHEL-5988) - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988) - udev: attempt device rename even if interface is up (RHEL-5988) - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988) - test-network: add a test for renaming device to current altname (RHEL-5988) - udev: align table (RHEL-5988) - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988) - sd-device: do not directly access entry in sd-device object (RHEL-5988) - udev: move device_rename() from device-private.c (RHEL-5988) - udev: restore syspath and properties on failure (RHEL-5988) - sd-device: introduce device_get_property_int() (RHEL-5988) - core/device: downgrade log level for ignored errors (RHEL-5988) - core/device: ignore failed uevents (RHEL-5988) - test: add tests for failure in renaming network interface (RHEL-5988) - test: modernize test-netlink.c (RHEL-5988) - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988) - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988) - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988) - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988) - udev/net: generate new network interface name only on add uevent (RHEL-5988) - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988) - udev/net: assign alternative names only on add uevent (RHEL-5988) - test: add tests for renaming network interface (RHEL-5988) - Backport ukify from upstream (RHEL-13199) - bootctl: make --json output normal json (RHEL-13199) - test: replace readfp() with read_file() (RHEL-13199) - stub/measure: document and measure .uname UKI section (RHEL-13199) - boot: measure .sbat section (RHEL-13199) - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199) - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199) - kernel-install: Add uki layout (RHEL-16354) - kernel-install: remove math slang from man page (RHEL-16354) - kernel-install: handle uki installs automatically (RHEL-16354) - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354) - kernel-install: Log location that uki is installed in (RHEL-16354) - bootctl: fix errno logging (RHEL-16354) - bootctl: add kernel-identity command (RHEL-16354) - bootctl: add kernel-inspect command (RHEL-16354) - bootctl: add kernel-inspect to --help text (RHEL-16354) - bootctl: drop full stop at end of --help texts (RHEL-16354) - bootctl: change section title for kernel image commands (RHEL-16354) - bootctl: remove space that should not be there (RHEL-16354) - bootctl: kernel-inspect: print os info (RHEL-16354) - bootctl-uki: several coding style fixlets (RHEL-16354) - tree-wide: unify how we pick OS pretty name to display (RHEL-16354) - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354) - bootctl: Add missing %m (RHEL-16354) - bootctl: tweak DOS header magic check (RHEL-16354)- ci: Extend source-git-automation (RHEL-1086) - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026) - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070) - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070) - systemd-analyze: Add tab complete logic for plot (RHEL-5070) - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070) - ci: enable source-git automation to validate reviews and ci results (RHEL-1086) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086) - ci: enable auto-merge GH Action (RHEL-1086) - ci: add missing permissions (RHEL-1086) - ci: `permissions: write-all` (RHEL-1086) - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086) - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)- doc: add downstream CONTRIBUTING document (#2170883) - doc: improve CONTRIBUTING document (#2170883) - doc: use link with prefilled Jira issue (#2170883) - docs: link downstream CONTRIBUTING in README (#2170883) - bpf: fix restrict_fs on s390x (#2230364) - udev/net_id: use naming scheme for RHEL-9.3 (#2231845) - core/timer: Always use inactive_exit_timestamp if it is set (#2211065) - timer: Use dual_timestamp_is_set() in one more place (#2211065) - loginctl: list-users: also show state (#2209912) - loginctl: list-sessions: minor modernization (#2209912) - loginctl: list-sessions: also show state (#2209912) - test: add test for state in loginctl list-{users,sessions} (#2209912) - test: add a missing session activation (#2209912) - test: extend test for loginctl list-* (#2209912) - loginctl: shorten variable name (#2209912) - loginctl: use bus_map_all_properties (#2209912) - loginctl: show session idle status in list-sessions (#2209912) - loginctl: some modernizations (#2209912) - loginctl: list-sessions: fix timestamp for idle hint (#2209912) - loginctl: list-users: use bus_map_all_properties (#2209912) - loginctl: also show idle hint in session-status (#2209912) - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226) - static-destruct: several cleanups (#2190226) - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226) - macro: support the case that the number of elements has const qualifier (#2190226) - shared/generator: apply similar config reordering of generated units (#2190226) - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226) - generator: teach generator_add_symlink() to instantiate specified unit (#2190226) - units: rework growfs units to be just a regular unit that is instantiated (#2190226) - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226) - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226) - test: add fstab file support for fstab-generator tests (#2190226) - test-fstab-generator: also check file contents (#2190226) - test-fstab-generator: add tests for mount options (#2190226) - fstab-generator: split out several functions from parse_fstab() (#2190226) - fstab-generator: call add_swap() earlier (#2190226) - fstab-generator: refuse to add swap earlier if disabled (#2190226) - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226) - fstab-generator: fix error code propagation in run_generator() (#2190226) - fstab-generator: support defining mount units through kernel command line (#2190226) - test: add test cases for defining mount and swap units from kernel cmdline (#2190226) - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - fstab-generator: use correct swap name var (#2190226) - fstab-generator: add more parameter name comments (#2190226) - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226) - fstab-util: add fstab_is_bind (#2190226) - fstab-generator: resolve bind mount source when in initrd (#2190226) - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226) - fstab-generator: fix target of /sysroot/usr (#2190226) - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226) - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226) - test-fstab-generator: extract core part as a function (#2190226) - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226) - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226) - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226) - core: use correct scope of looking up units (#2226980) - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521) - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521) - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521) - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521) - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521) - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521) - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521) - test: move TEST-23's units into a dedicated subfolder (#2213521) - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521) - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521) - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521) - test: abstract the common test parts into a utility script (#2213521) - test: add tests for JoinsNamespaceOf= (#2213521) - core/unit: drop doubled empty line (#2213521) - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521) - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521) - core/unit: update bidirectional dependency simultaneously (#2213521) - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260) - resolved: add some line-breaks/comments (#2161260) - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260) - blockdev-util: add simple wrapper around BLKSSZGET (#2170883) - loop-util: insist on setting the sector size correctly (#2170883) - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883) - loop-util: always tell kernel explicitly about loopback sector size (#2170883) - Revert "Treat EPERM as "not available" too" (#2178222) - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)- Revert "core/service: when resetting PID also reset known flag" (#2225667 - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)- ci: update permissions for source-git automation workflows (#2170883) - pstore: fixes for dmesg.txt reconstruction (#2170883) - pstore: explicitly set the base when converting record ID (#2170883) - pstore: avoid opening the dmesg.txt file if not requested (#2170883) - test: add a couple of tests for systemd-pstore (#2170883) - test: match all messages with the FILE field (#2170883) - test: build the SELinux test module on the host (#2170883) - test: make the stress test slightly less stressful on slower machines (#2170883) - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883) - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883) - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883) - core/transaction: do not log "(null)" (#2170883) - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883) - elf-util: discard PT_LOAD segment early based on the start address. (#2215412) - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412) - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959) - journal-vacuum: count size of all journal files (#2182632) - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632) - macro: introduce FOREACH_ARRAY() macro (#2182632) - journal-vacuum: rename function to match struct name (#2182632) - journal-vacuum: use CLEANUP_ARRAY (#2182632) - pam: add call to pam_umask (#2210145) - udev-builtin-net_id: align VF representor names with VF names (#2218886) - pam: add a call to pam_namespace (#2218184) - rules: online CPU automatically on IBM s390x platforms when configured (#2212612) - core/mount: escape invalid UTF8 char in dbus reply (#2208240) - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899) - udev-rules: fix nvme symlink creation on namespace changes (#2172509) - rules: add whitespace after comma before the line continuation (#2172509) - udev: restore compat symlink for nvme devices (#2172509) - rules: drop doubled space (#2172509) - manager: don't taint the host if cgroups v1 is used (#2193456) - core/service: when resetting PID also reset known flag (#2210237) - ci: drop systemd-stable from advanced-commit-linter config (#2170883)- ci: trigger `differential-shellcheck` workflow on push (#2100440) - ci: workflow for gathering metadata for source-git automation (#2100440) - ci: first part of the source-git automation - commit linter (#2100440) - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440) - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440) - Support /etc/system-update for OSTree systems (#2203133) - journal-def: fix type of signature to match the actual field in the Header structure (#2183546) - journal: use compound initialization for journal file Header structure (#2183546) - journald: fix log message (#2183546) - sd-journal: cache results of parsing environment variables (#2183546) - compress: introduce compression_supported() helper function (#2183546) - sd-journal: always use the compression algorithm specified in the header (#2183546) - sd-journal: allow to specify compression algorithm through env (#2183546) - test: add test case that journal file is created with the requested compression algorithm (#2183546) - rules: do not online CPU automatically on IBM platforms (#2143107)- systemd: Support OOMPolicy in scope units (#2176918) - systemd: Default to OOMPolicy=continue for login session scopes (#2176918) - man: rework description of OOMPolicy= a bit (#2176918) - core,man: add missing integration of OOMPolicy= in scopes (#2176918) - meson: Store fuzz tests in structured way (#2176918) - meson: Generate fuzzer inputs with directives (#2176918) - oss-fuzz: include generated corpora in the final zip file (#2176918) - unit: In cgroupv1, gracefully terminate delegated scopes again (#2180120)252-46.el9_5.3252-46.el9_5.3systemd-sysusers.build-iddf9f1cfaf6c2d9b86681674d957ba6cdfea808/usr/bin//usr/lib//usr/lib/.build-id/d7/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z14 -mtune=z15 -fasynchronous-unwind-tables -fstack-clash-protectioncpiozstd19s390x-redhat-linux-gnuELF 64-bit MSB pie executable, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=d7df9f1cfaf6c2d9b86681674d957ba6cdfea808, for GNU/Linux 3.2.0, strippeddirectory"RRRRRR RR RR RR RRRR RRRRRR RRRRRRRRRRRR$utf-8c33bade58eb7894680d196f87b7a1beb489c34f1d2f75f42cbc1c5cc838c594d82383fa20890304c1b09e75e2979823d7110d3dfc54a78224302f59b6376b9ac?0(/h&aIVN: l@\KxpKOx:>+xIfx'Xn*5P )@SVUcqE$#"Ey@)ƽa9pMxp0]pRbX;=}*v5Mqu|^8u&|N5m%g̕-9}펁D4xBEKB>ZYˁ܆>{K=C7)7vHO$K[]j\4tvqu:D=4"W0%@ы1^BU~d_q6p*b}#m;Usg.ϝx&~ӡN߉:釋yhPdGVha/4z#le|"KPI>{W_jI&>y~mӅo Hk@a/C),59ܳ!Ũ~B楹v 5lńynԲG([v,Y XOHJԼwBH'1mO&4z9v+3@~t 3{en '$1q(b}cS]um ۵ER)ObDڰAvNZZ P<awX:1hqC* p}mJ |@8PhR|zH{z0n(PtXR`zhpx"&*,צХ.z048o:op (>0D8H@LHPPTXX`\h`p6xdfohjpx"ȌАؔp (08@HPX`hpx Ȍq\ Ț@`r0@<`X`\hpxƐΘԠڨ   8x"HumiUIӫl kd;bi.&ŠљzB8VBĈB;C!cI9M0:F>Cs T/. pHQDP݌x]:ù̯)p[4v+.E~S\je xttt0^$ړ!Cy[f'Y~q($|Mi#yfG^*vƪkN[P3Qrǰzwi}8madB8k_cW֬:C"HEU;pDM9NV d6@d8uc"rM"ܰF{4VѝƼPZ"snuojW5c8i"nz0nQ!>1W$Iq t\tqœDž/ޏs`Atq̢j,!PCaT1LC rsNG[SPl9Qf0e XaRH@"T᠂Az"D.շ`@(ҍ"Vqmp%P-T@=hI*H! b  JD!Y)F3Q dgR&eF dqNCVSd.{D D"#$%{&')* +(,0-8.@/H0P1X2`4h5p6x789:;<=>?@ABCDEFG|HJKL M(N0O8P@RHSPTXU`VhWpXxYZ[\]^_`abcdefghi}jklm n(o0p8q@rHtPuXv`xhypzx{|}~ȅІ؇~ (08@HPX`hpxwȦЧب (08@HPX`hpxo0$`$ @80  0tHh`\xPDu8e,U E5% 8Ph՘ŰȨu(xe@lUX`EpT5H%<0$ 0H`ܕxЅueUؠE5% |8pPdhXL՘@Ű4(u(e@UXEp5ȀK% (q'<Ѩ(5EШ$.u1JRP)RFXbJECh\)j(RJ4JEK3zFBmpҖDoRaf6ٳlm;9J@-k nP.Bĺ%C/<<9F[0сW[߭0lpGN'i}{O#y=HmLtxZ~pfC L| yAgg^0}B~JkYAYB2 8Cq-'Ki$Є?TmerkVԄ5AIt_ksnFXhS8O,\aȯ2XUjakC3F]SrJ#(qPUR}UU͜aj;l@c7{~]fdgȞK`NmȀ^BdGRi(dt_pıҎҢʝO+h$3"3=^ L){D}d~JOkV S 7|0Nz#:*Scz$ U@0tt`Bsr Z-6Qy6ߥ& SXHr+փ\726{RHnuYyv.Ց W6^%3 t9]|"N{n9}^M82 :|Ǎ@E:&99GT{U}?f}t3>:ֆn6~N2Ӭ-~d]pM tm T[ (ʨcά̝5F.>2YhP'@>xLsk7[8~c6~tEBe4! Q dEgiKJއI@blB6YCLj t/5;L]P8c[,K6u _^3ԓ9Cy4g9,p~49W8ah Nma5`7 YL[)?mKQ$ov,oݣub޿m[Tש_$qrlXS.UУo m(m$3kˮK~-F~L}fmM^ay=ý1ɓ RDF08s\ W8>od>D=}ϝl4i-G(iw,>{16_|$0>c=fՔKfP-160ZYmk"V F>xc2[<%dh~ 'J#.fμ6ZW + *<\ Jcx<+դji[ ,Rm^9UI'=8wQ3!v𳅗u-<'1! #[z\FP$1~o>=J^TuҎWY5*s)92% ;D8'挭2֏<қ;<;? ^xܘBP`qC 1\Yy?&P *'ѿTdɅP yZ ]3y,dd0a?8~Jae S&$fa/E&S/ 4(+!#LWTx}aPg!DQwV)gFFGwST00) FY6/ U'sk&},ԃ33y5~HyC

:ejys`%,Xi/ 32M;3-"cHCCSnIu.yg/KJGpL.bI>:jy*xXN 7\Ax2GJ(? cpː,Kv<0+PZ{Wk:COY$,w Agv8nӲ^[TRhő+ʈ/ټ/d 9fICjjFܭ#Ubb8W(=iJ1a`$+&8aQ?d1A;K$vùAĈA@XP^%=b.!b lk)a#~LS-GElO[.D_Sx/7}[S==XruN"یfrm)YKO}͵/12uM-8T([Y29̬]^i-!UNrwnBpݜ"X_zK M7T@8Z1%A!,jq'繚]?P@x.qb.XWݷr@0 /)ba?s` =@ ${#da|%|?`!+e:B7SI8/`[y-|P'Է. Q 1ϫ$oWA_|A%} -(.7okՑ` ѝ'H /.w637V4\Po;9IoGlmsm=`yu-诰⺘a%poFrݶ6DQh#ҍƩ1}PC̆caǵ+ S q̞'xMhlOM/*7ӫ@-꽭$agةEP&Q0\:431DV1fg\i 7!cZ'g2U.e,sѿ8!$ޞMZ0yK ΁UHqߒ< :JIm n7+> toПm|FmV&A+tb C&{f Z{ܫZNc \dϗ {17"PljO)TÔczmF LӾroFcAAf*K<~;Jg$@n?%l2\5#vֳғdC q4#R\gp]I:@Aݟ|4O \eo^e[ikٽ^_>7ln\Oa$ãPBJňuL\(JkWsɭ@% qB1&~ej"fuu = Y_7m=#'Wؙ Ծ^LL _vu[ l\l+[ 3󺶐 Y>3%VZL嵚XhYœ^I7p'ET*ܳOG~jO],H+UQ\vW>%=ӕ'jjyÃZi`l-" 7։;íny:傐33\rM+ؠiFy.qs#aRs:Pm |X++O蔂< 90TXW, #CO<&0t8(igLqp*\kTvׄ`#V` @Û4̊:7 A,F hY9>Esk6ey /sE8˂tTj֚ˤ *W+TsB.irExE{ǧeCtt%}H2NB8r]I wb)YZs  qͫ? :n۽aQB8agDoFߧIn;Oe"2imA3 ^mKL_M̝)`Tw J&Qn&rM3ht:f/'9xZɱ!MNSK jkཟ3?D w( }ӺmՆra]e % ;ӋwQϚs@S|ִb,#2|a~aF~ ]@ c>LWp;Kr2 [ۖ)K=?`ld>e93gq%a=iF|[xF(J@ uJ8ҡGT\p[9Fkj5 o 7e"OTfaN^B+#~6x\C@BkwҀĢ7WxPѨdWIt[@q-ÞCbO}Ӟ"p%i@)H/茽JO!tH {A#&ɨ%Hz9 Tp}b;[ mۜ1tSG0{ͩ:Om:lzĭejXsO\qTa~pϝJ^uŏ֙|~/@B]Ma|_ @ė/9ڃHń^ "  Ǧc˂9w d>׵.!Y5F2IydH(YLhOd^<\#\VNÄ( p Ma_J#'Ӌy]MR=_-ZWJ&ӪLT4ȗ^|Ŀ9q;2D(l}WzCC tcj$A GWTI+W2CprE_N5 exV1NA|\F6;ͻۍP"GK0CkB&c7LA!@P Q )#˛XYzGTs)B]P6&5R $ Zd*i/TfM B[+:Bt[4MCGAn4,!l:)caPHKU` eK'ys\g{e|zzvW#FUIbǏ<',- ͦh&Τ'".49nj8IA6m;rD]/Cɡ{ .or:ھ*_7!cKRׅ_ȯj0'1Š8N1ىlt59YbÔ2iPA7 X G?{@Ok&'Oa8%} R'? BmsࣚBltE :/em(%+Wj{q>2Ov36m1Ԇ>o;ɹz1ƨݵ/`v o6p| P"TBF mNCȪ\,g;se0B8!:|'ԍPaq%V%<А1NV~C@|)7WW_"J?ܱ ~V#sѫ5&LqSYَuo|!Vѳ؅_Wو܆+s,|acO5F|d `Z%Cx!f˜^>~Q @?AU~ d&hР_ዜP gaM&W%R>$ =:`lR*CU2v(z+,q9]s7YW5ʪ!cC<92wPz16 ,шl\/a\ߡ[RU}Ux{NS!V[s]Z <`{;CRZ:2m=q;Pg<vexoO(o}o"( ;c}9O:U GXGG M@Ss ZK ~PtiU$siXJj ʵ.8Yib٩t:})F]@cmPQ^/@2VG sy 7(v1b.*(V ުUw7ӭ-Fռ"2:6%p v\goAm&F/>GtWx[\@_/Jg ;$3`Be]UkJc|g`֤V} DYI(X-@<<~f9 + `Y QZTˁ_%$g!([ {hPi& VfÌI_8B"?4\IX]kd!j]њ ȗC9u8~<%& *mi`z&6V9%$FJ-t*' fbtp;Z;3КeD{Z4oP/nZqì"I!iqz/FuR*i]ВFZ cBƔ%L[|dr`y\-y '/If(&I} p"z5Z EYe; yoA&5hћW&+gfV"EB^ե!8㠍+@9.?eKuh9RXWG~\b(1/1F|4NBdCӽvhG49O՘̚ʉ+KD^h2Y(i:Et?XS"Jp!Xntl:,&ǝj)2~kA;~!J0F >P sZ(54G ]-@\_ZH'-1n j?ҼF&_|Pgf9j4wv&^ [{0AϵKo5RQM]ZD{Ln2Ui b O{T 4SU3:VBBK(Cx5)O-7,7 `JݶZ*e4xuWYYP7/b/H\,yjתs[SEiaÍ^< Ej`%yC@ax>T#zf`_>y6&I$+iO^RY |W@N .c ^я-; G [i&&%rh)@Z!`0Ũz~U#Q}jK䗔QޓlpGT\7?{ ?4F2K>1;4?%B NDG[Ve֘zpιRξWYHT}GG۔atOu4d 'O@\qp Me7.A "L-Y Ye aK ~2&> Wʶ%WvnGAe7xv_+OA[`@ۊE=>KL6\LrϥRp9WExkz 8'>qF@0:4vSVQL@Pb| -(i>nPg@h,E^ w49D$(`p`Vx>y`p[\Ie&Uᬼ)dv9G1h܅ғ"^ymC!xew #u̹C7c§ow+]NSXHIGʎ8y]DI,#iAd-̅C[jQ,SN}D;fDF:GB&NH;fBG'E^>%M gW fmclD),}V;É.cޯc܊s.8@&!Y3QH"ƚrX+ғY`2%uv zƆwUv 9*)WyB*~Aw.`{?ѝ[GU}űIdy"d%Ot#Dܮ=1P3N Q G#wu>,z,!ܶ}𲕔9R t=eԶl,Ϻq#fY-bhtk.86t4D-%}y/Z7{lORtFB+}]|r{U>9rVd[;VC2V>q{.7h>K >b7dvD$ .m/2~&OtRuN׎˞oIdz.Ύ=v- T:s .Ò8_RPs2;5%WY_.‹:9>IbϨ̦(2W,HB@˥(XJAup_P#Pwo鲊ᒛ};qxxD;}7̒  XPoBj;(>zMu+`hgH<3)9AdJg| 3x^7eAPCG 2TzP@Ư_iwGnMJ 0+^MCPQZvnlni#͈ ziΠDKDݔ`ۧc9\=7-3(tLx=TR=9DyWC |>П;JuR]K#^UQ,4K( ,ml]ۏ1sC HD9(gL:`f@@2h^k5X)XR8>^̙Kt(Y s׮ϾH^ۈȍoǚshVE:m&T"1Wf*惾 Ij\QmmS=eO+N3\sNL7[<#U&'c^سq`t073 MX˲GEFZ Z Tve۸'+Y4s9OQP=W$ WtV ͪ2V^J*v+0GSh82t.l`}A@,~eQ*+6{ "DZ檲swY GXO$C8cd 7paʿpE\Dʿ'O2Sfm1)EuFw^H?J/6+{#|ay 5@$ T5ӹ&GND`N%qLɓhuX(V,, d($D&GP;5BWYA]iI4p9(zRK ^J `7[G:=2,Y u;=0~c2ɖOj'9/{st:+/EǖQUZp?EJgY?ܗ,vAeQr;| GѭgG ˖$gd~"m=['Ǽf2k_?Qg =/틗fvw/tJ\6-@DIAjY 'M_{H]XzKL龦\<C%g?COa7J𯅰vbV6g+w`aUGX.oeV}3Q1" ẎzRVȨ3UHh_a7xפd1xͻV/K)Ko^~ITXHt; H^Yu+ptU@j7#e1"/LX$&, 3KdJ)x;LߣM) s@A&jMӜ'_27jr{mT/ p;tOms%V$Ex ^w逮abX̬഍%7 ݢv{ŭ@ffy"XL2!hk?gKE{yͅ]OxUNhK#u\ͫӶEks=.mW3-)ʰU%e\ύk6q֓j;ip~ؠ4V ]xC.{L"e~)׷mztCkMo6f[(-/?/:^w4 7L>ͧ*{\$*}yr#^OEpwFJt#澟|][ .rHu1YIi, hknpoJ'2qvX `;S#a XלzȪYw86/ܬҲ^>ICkmr>c [eժeч#`=B!^?q5%طcq28z Fl>{7ง1նpڸkvXWHv[/e>yE\߸{GR WN ,_T"ŃGH @ih]a6YȎ='I'@ߠgkL21l[Dڙ[.7+2Qv/`T(N8@gdvfF*4\;&w.PQLAI zO#&BXj,)8$xB2ו ^97QE"+v\`jeꞻJ?\gۀeAh{w=7p@ O0%0:%Na3X[똎?Q(+|WE?Z-J6?O.> w4ɹy zPl꽛֣%.Uu ԮiX:#%35j\?xG~4jA)Y2C\7ILU]Tq)/@vk{nqs:&L3|L/9>a#gjCʶڠ)匭b}HՒ=&WԠ}`p̺/ bls횮qRA߰? Vv3zdvE[#kv@XSg|wҖL}UTFSyPaè[ a[0 L!^ٞxj#8N"@8P.jx&GTaDY*M耵nR66uIP_|F_4f%0ͨ@BuՓ6{2]#`>bHgea|qa !4|n~eP r/ǙY-4j |*\?ޓ>+2$vB,5:? +GYłz+>̵u>pP6ꢭrnv=GEߎo攣dedyg^PoPOxXJr8Ni!ҁX.Ǎ8 , ծ)vk䟦j(a;@Р˰r&v-ci:ےw|{KILIt]{u|H+ݪy`:aK rDr0 bкH]WMNl}6 .@FKjEuG:6C(ruO۹3=O0 ([:"/⁜=!iԮp((z \$8A$ {d#dvט.cAc-R{euk gwLȢ\|b7u9uKpǏFC0D+W1 ĕR ڠ↍7N9 Sxζ̊u1Iz\n:Ҕ1 F+u%Z\j޴+y"4:Ʋ>MmlCD,?k*z:jڪkؓ_" aT٩$Oi>(6qFx"ϧ }*9{=EV +N_yt!t2 Y/Nw'>-cx @$v$̸D$Lr5٪b?Vl6cJ@oguGC$4Rh7.;3 VG*kd&`/qV_УJ'@7A-ݞh"% V>T@ԝܙ.jHnOi l(M=>Wb:3&,2=N5nι}on_Ĵ3dܘ,H4Xd.";V<.ٓj[g T]ʈAcKAk(Ӂ:a^Yéf÷Мխg^x-ݳ"E'Mzoo"weoFJCEm "3Xب@? shI*n@ ZYܾ|8Jc#<92@x&8D+PcQܼ&vz19vkEDncn[vk.5 W#,t $&\6oէ>ǷZtn  +yƘ.P^iBlJ#1F{] V߷)bTOkdloծ~zv=쇼:='LJ^Y׹ IWK~$xy!Gl;`V\:dڤ ?(TENc7qߖVSQ,\v?mZFmq(Z"f1y%`i+n?lY]Q| h*,vv_!V" HhF RJy0f_PV}k>OAT5m^\1 O%Sgط>._-?wpu6gD|Zr/lnޢ2u5`r`x*Y (t7%VľMx Bwge*SiARs1zB&TGₚLo {QR7yqxVqgT[.]bX=joU5Ǹ2!fÆ\\iǭ Rs"&cJGe%MΉY0&Ht /;%(i^9 + 3 ( A!Nq?Ԙ 83}]Ӏ[|Z_I Vۢm[GNU9uF_,|`jD?<ڗp dLwRst}4&N+5ER>/s(믕6̣98vGePCvK~}-D|m ܜ5u1dzܧǓe]7}ǘ#jf3= 0X=XN]N |;fjY+?dfEIp[TOWna;/#ԱfMDӝ%%39"٠u)Ĵ ns[n(V6Z}ur85v4տOb%>Q >E96Gw39 r gCI )R9?›G F„EL띒M/_TDF$gGi,s#~1ckq[kÿ#/X]pw Y2 ኘea7 }*_wKz6yY߶{W|˲ߢTޑm6(%W*S~/}u^ *D+Eɐv=Vfޕ(^d)9c=򧒌g&`у ts'qKILX3źd2H7cD͓'} |q4V(Ɵe_@T{_ͅAT^[+hD^ȱ:8#N/v~W_ @LX[R]G»BÏTOtMğtͰ6{ EuP=tf6gb,2ROi }eO/UI}nOӧ!>XXX$17Wb9seg`'Z'QhǦ7Ւ$#<&XNdUtA|U{ﱔ6*BW,(KNtEO-aM8õ%<ޔ ok9J[ akyG?iWq@֚@/rԀ ~8#)FL?u~ʖ7xO'IW-AzSUK-%kuK ֳƜBfn|_Qd,6vnŇy v[gҷ@1O')ͷkQ`Kr3bրI'ߜ wj݇(V &b5iQ[cOnwmx*Y~s[T_U.x nuQb+*|$^;3&=jZDG5qrm0~^צBh&%䶄VRaIh Z>tnsQqeWtoOlnFa`@ì#q\ȃRg ǃ ;Hv2L¯j/r=exdA!@} RDf)=pp*%w3Ά= e~u$ـ 5ݠ:i͑b˜#q©a  m_av#iP̩߱h+\8{HxZ{ kC 11s7إ*X ,Aq<+h`T΃)NgvE #  bMr :Ƕ,LҪ }x#yҺpPfU˪3_F4nV6Wc/lI5R٫;q6m(5RIr@t˯JVE[>_L⼘vj#"(z Ox/b҃7fes_sl-J▇U[g̙(D#ً5^ \59@' c"ܰ ERf1Rvz 9ժAN7Ǽj9Y;= "g1͏Lspj|NZGї#,p#MG"\N#dV \ \Byf$aធs`9+ZNn,r/U8~¦h +w:s'2)|p`rY: {.ʲe]Vl ir:^T[eeSfZ%I`G0{e*ڊ0ėv~ >MώJ m ଉꪘnX)z pc dN|/p.|Rs[9ݩvBZO&ecc e5| =c$ >?F? %UslޡVEr*}+ {3{M:2 R?.M-ԩ]jj'=£zARw?IGy'?bֆX3sKg&.u"m(.E^EO_Nm~V-E>QXlyp^m J}jD&2"MؓcF֬iHl\6.4Օ]hzJN2cv9:QX]bǚnTES8H)dh6piBT* Y\R<8 "5KcsoEFI 7qi3X ~7=FWyG#љQk)6@49&ܔ4`4h˹qgaf~~ވzQt9d q:*5Sǩj]*{1Kud؎-iH,}%5G~rEj'LsEPyyh~ E9⿫[v Zі\({R]k-Sc, eAWſBl.N~38 -9Ri){B 3Gi@3/ e/JFc'" z)y'4//袁ݤ `r]ř$ӓ? /0}μӀ7&l S>%|Oܹ"@nK>Ъ4hݜE4!v?|`ҖEs%#ѻsc|GǬ/˝i;7Nf;GtD9:d ;TN3s,aus9Bˉ c@p3~R+`?aKɩ+"£&]x_xvHj{ۻ /uMA?3Z͙=5M2V`=ع/G;@i):0SA%~qL{:tIq-U/7O7t $Tچn'ʼ Ox:Z)dgHj%@í|0 i|z<2xW,^L2w /M(rv|ɜ:[Bڈc7(l ۼ8 <LwGR<N s͹T4˘eޏ Rb|xi[++clhq*Wʘ9;l\nsi}!" /,1yrn'S׀\Ȝx%'gBvҞxn h7LB.Q1qM/'J{Y9MIIĒeI7FCpwa̠ҩUy~5pPMg:eye"|˻8=p? -XmPPD(ckΉ >4.)I!^1+qLezO JXZT]6)wIvubL"qUěAc@kpu]q" ͢D[Z[F1F=y*̀(c+j,IB 6ٍK9ȕ$H\Γ4:h1. F)LI֍HS$4wuqlYDBa j Gc(g TCIAO[XUc)6kip\~2}苳qDz߼𠴔#=DFWXC*d8 R-:[ېmg[ c\L+{pF%o>PyMQtPGra;A3]SR?h"n.|](;%$눩i1dN:)zDg4)(XԃQTSd,!90]i@+QΦuuMbi6k6ȜXpg_q`P nC.AAߩdI]N;TcLe?s/7zK}N!,eǐ'4.5H{kUz_لC<\铐;? 5{3L8ڨ',Ї(HU5{G}@jS:$bIxVNE/达[cl(PZt>``c3 4` / !6Hs?^z <xf@]1{]:tη <E F8|ƉSeyys/RoIp化㐘:#HV/d֎Ĺ셉ٸ1 X,+ 6b Ljn=P1ѐِfPC8Fd6 ![PЕm>TeZz)9>(ϠwWKjbV:jCrg`b&.ŃE*FaB)$IfaRdIc fUJYMbf6ۂ 6 ع.7%T+b+6aL.)>Rx[ pc-_nEISw ͵N:,Kt:@kAoY3N~.~j(/ݴgLCYr"GLe!n?thb_ΌT?2i>Ϙ8["2wDL):vmm4j{6I@m5-E(ǝ6J.XcY7v@#IpA) _5͗]x;g@,8EUp/vGƶ&W 2p~!ϒIsy緈M |m>er tm8K HpCG(0s+ 2 8/*NLH+wy}ڞ;ȑ̟usԌ()ٌ^@896IkQ*!j`!oً{ABF9*8?Ȕ ǴK ?p>x}`8C]ΰ+橑w34qSd ~ $ghW= _?RGb2ٿy@h~G}X<)fߔsxM 1$n(O;w姶f?2B"OW:LNLGXȂK|4hp&Ln)s8ǠHT۫IYJ͆;hWh\ ۈԫ8CȲz?kR\@,MNjQūbO?Gg0#lܕ‹ AoZ3gmc_c*N7-opmZYaGשͣa;n,vFSQk2U Z.o= [Gjy4r4]Mgtz4tL\5̶S"B ʮ[A`Q#rYbI(&2&ޠ%b;p>i?W7B!^0wEX +&@M#c<+Y!0#b(E=xc8X[f<ĭQ5TdezkiCsJA)Q '2e4{遵Pn#^^'>CÍͦ6.Aـ!1-Q6C V)noNQtJ"H/_Rd cVB5(Dw ;:ȻVJ};/"Fw*__W5(BR ݥ3+d&CӁ9Q3'CB4w2vR)G%dFCcA\0FllyY6MaM:BCj6pHxg鳊Si1JJgҦ"cgsy2`W KM0%7PzI*3uwy~!Pڀ%n hakjFvkyEl2vWL|5aA];ݝͻU"LrG9x|?WkT1y+?$3 W\)J 1F58ҕ?uBuzqlss kz)b*PQNAs=xꢁS 20`t:є6_|6'Q׽䔽W?{Ԝ-dP^J{kE{:pC- vͶ[s|@?ʭYuPNzO.wp X#{g_񁛎 ]07.SS9F^d־O^~2QcaV!vP0\2 TFK翳gB%[^8^x\mX'uLU=I/ߺQIQ/_8{3x}M[GANOOM;hQYEWl]ѽJN&̈#L/̄|QPOhw.Ůc%dXKx֚&`vIwq58W\TԵ&%$㝝 f6S:d4TA!i'+䮎<=/ wMNpէiEN7| o-vICpI-.[P Z+H*͔TJb?^lR_q9%%f  AܩGf)2XHWwq{֍JgK^g%]@´AQ`rDyvgiS"6 ^ڳETa?PJ*͠SRFX\w gzB JI@Vk;ONҺRCaq!T7&+'PsoiG%0ֵl/S˝DDQ&'_q&V_\3SVmaehz)uL})#p2U֩/lltf\H*}6TnA3 "q.=&*U^ϡ wnkkDFz)sc3*qA~l ~L 97^ݓ]w~TTX;kx;*3 ^wHڞ|zUC\i3 a RuEg.)RBDFآzYPv_m /&4|'u"3бuJw zP-TKSjqsKȂX |gowz3 ꝭ$ɴ<[J |Nע̅5\xm-D7M$/yQXx?i _v*Wηy& NG+/vNKX|{|q(?qBpDrC#t<#B~k0HR Ce160NKdqC;v**6r8#z0}%J<2uA,@:@P)}ŭGbwHP%u*Iـش HyKt(*,Mh^KeAKjmgo,dN99ⶠVOoM`* @abnEBqQ/$v \kEqQH !O 5H<$S: ^_L o墠Vz/˂#V*Sp\x[34JKu*L'y|3zB3$c—KW+x+Wl=i]-+d*Jɬi:uР K )>1?Cu%ӛX_L54puPze[AfW.<{a|ө}p( ?/ͼhPqQ7tbXƆD-yg ߗy0NAFNoJ3|L5(3I7v!Ρ]氅_o} 1`s:Χ"/-Ag|~+|7^.F8jr<4mQkNWٴYX)Iey1RֺU 0UrSWCwLQW,*Ί+?I7imHCP.o󆺑O;@̳7t+ݒkq?+')wTQ/ YJu)B k&j#"4|-WZ-⽈.6df۞H,&ΒJ' Jnru1 MR/%S+u\F"0x|M NU8J~j}r.P}NkP:2~jM`7˞I [%[#FYȂ_/v)n9m2bŸ?uVjÏ3bGb% āfWi ^$p pMv6RLGueHe\+|xQ`q9< :n'fVͅ'6EC"!cɗop''G _y3Y&鎜]&˖6"_ˮ> wj_o˦VL#GT3i=*BHs.dm&Io}!jG_2 öNSJ4}Gs{~VFg?Kf-}KIgPhP(#/*L+%\ǣ5]6z`b Gk6=ջ/bB|"c홌/ZDiiJi?xHȑ^˨:/1POj\@ĥ|A&Oi9${ϐ,Ok!wf\ .> iWURȑLP6CGRH/&;ym>׾@IV-?l+%].-uϟ(+(.鮜"볩lZZKee,گS1)ݍuhQy0{/1VU01#<e%8Cx\;A+E~ 6IGi7.Oݖn@p9b.ޱ1StSuPQ CMQ,O𙊋&QD{QKa{9~n9CmGoǯl3eJ}yN[w7e8-RZMϧ8-o~Q¯+s3-(LJOT6͢׿1-6=eIa?w6Xҍ#\𤃝Yn j_@ AրȮ0Q|_c;u*v# !߭` ehV'SFDI-`pǁ$i n 6f3To[[9V}`Z$ap-JS.Nv{TC`wfժE[O]6X>}n5r߭cC%uPϪ˲pRKKs:byf3*d9r!vJlK,eVUȺ!*1;T 䠇闶'|h}*8[SzB5(ŭE&/&ܼCͯa~\ '\>L+Ughswה'*L=ǛZ~3d.6/Ptrcn95Mg΢uO \X$іN@t9Af 8tm3@ni:g`S$dYtQ0u"kH(rg/U:;l1"\ӁI}!9;Rs+19Fa7i9:IppÝ=cΛ8D^A9q1-p3m9^{8ĐqMO=;9%c丈UI]% IfmhE{Iҡji4J?I6 wO j|L"MEyB`Sd.\5$-vv5ץ{< V:SGRRD߁s )yÁP HXX^IU%]H6x1UyHO1ƢR)g2>/"19K`Q\Pr0F4)e9̳檌iHŖ˫ʕp4' OIqI[>!DÇ= |o ^WGtNĽZN=W}y4_z.ި.k kJ&7♙U}4 -"P(s?X搠+K7+琕#pu@+ x GQPL-7ߥΣoig0x~Wrٲl~3|heY QF6K\u#dᤧ32 MaΒDJn› sf؀W+uv>WZS(%'?`9A&,aNjF R3g $ f,Ԕu ,h3!=/ N-XRhD Cp`MOYTӴp7Tk%ʷ5?v m+mk2ʏiQLKկ &֜a@kAPz8³B;}"5{&֫2 \5̉P žlv|]e!O/M7FPgK$Teǚwzzv>?|"EK] h`_UB&KMt2w\},Q,XqОSTyV{>.>t* z $ ïJs<CLJ&RȵYƯUSڇv%?ৎI~<hJ=*&L4`{M%Yg6%Vj"!\b-ƖXe͂'oE)N?Z0Ĥ<{Qļ8O*0J~h y(EhK[qNLrO>KzEq ST qJHԛ BN0d<}ޤѦǽ ߙj95j]:5"Өg e:>F8Wx$( F<{|ZnDog~Fy])u}To.L+d;.Ki,'@@ |cxרa#+ֻXn,:mޝo*;w. ;RmbCkCp5FL5|G ,SX[ǺRzߋ9ة^9tf;IjFY_RA.xg =)Ϲ+6Nⷻ%I//2DNȥ6z38-'l=W_,h OrbW46jD s&}}L\=]LT^l2m̼k_h_0C o FG0-wJVZ[Qs\q@Cq{}@Ueo zh,)}kԬ\p\OF>\uwy`i4CefS)˴bZ鿒jn& 5} {vH2%xNv! ~#Y1uP*"|d!}si˅Mdndnؤ-oSsEvbl;vbcaojU`5= cܸ(Yo,7j͸Z:~΄XA:czOrCw ĵ*$Ta$P_Wu2w6o^\= Ģ!H.;۳|3c X h"W1ZXQ䍓q~TCxmK 'wk !<} %M85˿,'*7#:Q((>. uC#0߯/@.+ˊG#DEAU b,e2R=^-\6Od}ui-4]BY=~^x :kzBfky6W'%*˨៬S".+L8Ǟ vg3ҪH[B5أD=直4/x|-⌔ѷwIl(xz}G)W8W~ C#ÑM]O̩EnrQ}PtQvȒ>S^ܡDi}bd1w `Zͨ8sI6>-&&HlvlqQ|/)^QWG!b_@)3-_a Ay>VopcqT]3oIIM ?5Q{Y{fK^7o| w/qPi|HBi߱,k?'Y}gcml;UE,+}PpݪΤ4taufdy_=͝$̨r?K;n*xx2h*<8lZ'LB:Lf>׋?6e{Xh9bPW%?x9DWl;8*t) ._Rky+`ɦ'N:M5~)SsA'%uʼnw2p vlXM%}^ 03^ 0«DHf=~7]/c1/=X`'2M% 4ϧ/|5"Z@C\c=k+]8\<<{j7q:]-b?2 -WʈE MF{ӌF}f1eBYc-zh&!ny/.7k0{.'>LvX0"qS$)FY 2p ށj8[,0Ip2:3Yh¼emi"k}Fpf 4" 鬻t4_)9/wJjNSu?J)ܘ",tk1Г/p#+p&|R]lL-P6𹫆|܌Ȍ4`FϿГ6)a~׆83ܱZlK?jRւ!; ȧo}B bxJOr@S%4$O#nuM%U+0}~S8=m{)7=e{dh#6(-jo|gMk8jeV5/^hXTYjtiר#aS;%-Vi "o˷ C{6YIY92b<uoRu)"K 5 D;*FHvgRs.{sh&#+7]HO4{`D#1ސmcDŚM7ЍbOaeυ֟nj<Hߌ %:B=*UضuD؊}OHȁb]<6KMMyR0f# Y=<<8IzkWu6O)XG$uk_,hHն Xԧ 7#W-JkND /QA.Z:|6Ծ}ɲ5˪K9\7<{Î(D9o A8ݱt-%>՝ Ep}{lOv$aL6Gqwi~!ɯݒ!,Y5k(FFFRڨ4 fGJsk_oZT67u0#Juq"[\>*;5utü/<0k$]swqt 3X$Ϣ.D 7廃Ǜc:}s^uCu[~O ?+<7foA@ӛ<71cziT}A..oVJuzu%(P`~wM.Ɂck۽tg~ķ)KqzJ 27`jѸjЯ>YjSlPI[,&fobI_7XVyy/0|]P=aPe9 0cDHT}l([[^1?nw Ibuk}$u{#z`~507v8+v w?UMjxkڪFA8n6Zy ^ .<u',2k1u SY!֌uV-3iry'\`3~,ӎ;ӊ᜗rl(>ROz5UK ub<LA)ʇ0 B#YNĴ4Ivl4xg}fEP 6>kHmFh1Th(llUY :!ֳ LZ6,7LitԄ%@Eqa!sޑ/Jqo-$߾qk$DG Baa? knf1A^R. ΰ2YZ醼>kY{|7Ew"Ǯ9n-}Hċ#`'9I;SȚbjm'Ŋ__+ vt&k wnoW@pTٜerZjs;C˪(>zohb[5#L\AGFu +dS ]DBTWsr|~~ɞ+mOoPboKlW\CG2O3|lDBjuB")cCػq45Ja21$ 4Ԗh:[6tLqEnr2ph.FQ\ "Z >MҤg?n P}6fPF[LxF˲ug.g ~ CZQ)O,9Rk&3aOQ'7"s:3A$[v<~r Ch!:DH;XxsSf>8?pm͹|-aiF;GWqw ,O\wK"Z-Ё/s&1 )iB9wn벞nm6MF!s?YMvUgWVgklMUup>B4-?dPr"rʆJJPG2IszrEDȫ(ZOu/(5KM|N `ɯVuvb)HAuIdvcPih(_z㎲Qʠ9/33[敁55~v:ew/&6zGN (U>GVq4y ݊כJt݄`yں<{oU$Whr}]?[sqΞnU|Ъjm' i ӎV]'q+A3735)XV5W7֚@غ@G%JڦINĕRȼ={cѭsPMamQUBzذr崽_(-ދeKM< <@nS57?bd=si( c԰{g"cr{˚О7?GoC\אIƠiȝ3a J}SO&P1CԸ2+3r$LF%fw1AYZK[QV Y6AČ&7rBS 5y:ד{eXš\sX?_P΋=HF@TFx[Utw.8 aR΢@R`N}gܹOE M6qwWӔrRR/qV8 ty#ݖ͘um@e*\'FgLL$^З:hÀIwukr=Qu1Ǿl'wŵb=a]y!vU::Hk\p&=&Q]B'F:%T)V DK0n Hx*a4+9(m :rs/ >'x`s^\'&@W,sNa,-(ɸĭcTe$p}TcGEԬ ߍwb%@4 :2Ttx3p07f9mL\Ypx n_djjF1[@s o>X3ʒj3N\4 }Th(]FvEO݄űf}6] 79z/`Y/"M &ɥ >X5[\><Ϥ-lC>~`cߨ}߁2kE}Dgbka|&-Df5򁗧ިS% 1JǬYh48c e?܅!XM?\9F:{vRFjw M>r{+Tw6.+QfrWYAvFD@%dlgˎnq)1B+~䮍XڥtjOyRoYOC8ܢ)9E a.'Q 9 H/Lׂ+&&nr$:ݰG]9NɔtY"]LCkն?53Ds3B/(àl^:lzs˥5[?J*X B^ !l{:IA e^6BsS QtdcEn1){taUtPūgҖLknS:VxL5y!mQ'f|υݥqTq*)AQ[2-1D2I gڤpS}䢨jalc$V]jZ8.|lahMa cVVC"e>:R7r.JU<u+|uLJ|\#Z6FWϖumoS^1XXמ2:ق۱) H5=XL=D!0Y ;Q{֚Mmbnr?=dzW:w?xV_΅;GE^HB7ƻQ篍P?Y 㯑t[_f|3U~T"nz~z9 veǟ4F8E/ =:'v4 z/+\F2 =YS 1BdFewwɴc,6Otn)C97ů1{8.cQ݈sй/-# 7WU3mJ(- 18X8=ye'::'kadCfBAb@$ԞAT;hP@8QbTt& U_0т5E,'G@m¨IbI6z9 p (Ν'\ˇP(ݠDfwj[QcA Z? r R]i(75f`2QziveoZW;kBN~DW㠱Jw}`Y#v%Q%Sd.ߍ#7 g/w^:?l59G`*ч';od׵낆O7B}䯊֧"#w ؄xn rj˝i!ܪc.UL6<v]mx=dUzq>Ucv]p_8jT_9'i$z6lgSlm}ΈgzP(%Pkمr/7Xy02{RZkÇTEWH{l.nʸvH}q)VץɽXyų4euƍHR,(S侄#Z& \+q<$G,gyCP;zøC6eߦNn46 lm7㉊y4UzE>%_O:b}/2>^X䟊`|en0cE:[Gy+>8 9B`ڎ(mQ"{z Q`q8kKWG|FSU̏ۋ X9 _PV\ FOqM$Ey G35@Ʃnn$c J}^0U* EIb(\{>$*}-ِXYWu ڋh!'8td1lN!TY{f`8RkzRhdmV35 |_b o}hF*#uB%v7!!ȳ6`HfΟi |fjGm㛓Eysȓ&#̖D׋G}yIّ'AID&o@l w>}u8c2XaO1, \g BT`ծ1ƟR$#>eo! }b<7pt@ZՀM>=SSI qZ8BtG]U<8v̪سU:VO9}gӞ,_*4ʕ0ٴk"46V<(۸ go0W ڙQ,ÖǸ_Fy|Y !hGɮZkT9 )RЯIQ$1ڳmNknųO鳆Q'0OFx?PmdfdAڃ!ͥf6 8hK9F'cHs j"$R Ȝ29~!Ӌ"<P.Y=W$&9B Qٺt8Nq׼:~I0b,N;Rm`W/{Fnր\QyZ_z NEF@]0`UqL40pYXd5^ƀYJ(ד7a%gAA/fݡKHY_j15v!U"DʊODi }PtΣcGg~օ߶4kaL,"%EG<cҗ%U*(&ۚLJ V^ĂLv Nq\.Jlf{g145;Y; _%T} ƭ3^Φxv)f` msq C_wz P %c9k ٣H}ĭ4 A|DuQYl[tg[C9u T2Ə u9S#hC-_i@kon%&KeMSIshمt[ɶt`șAߴeWdOaf5dAj$ߎ_+\/,Pe:US7"Ze p vE.5ǴA#\kdK_3-((Eh`8uZ_Cpc_ˑ>#&9PlX\QmW3gx/SmjN$I<-(!W1>M;XB?P+vCLDu(Y[;p'dUc򜠽F߱-D@p-:~KyEӁ#+z߳G8{ifge`I{c?ctϏ0rˍГPiW]3[=_q0Sqbzu6E x~tddF?P<~6/-"-rM<%\(%P~,X }zpAʳH^g# lY jo7J2:*"ZqS&&$a$bIH1W"ɧ 4 TKu={iSyhI>?]ADT1Kc3ʦִu(( ^dQ#=ɯi$,pz-:bdz?dNc?5F@pY-Ҋ?tm}dBRr },f") C\/L[HI$C "sTE;Gw#<( $Q.Hr:t(|dY p ۸՗Rht rxoq SvGhXgxғS.I|'>q'Fbr-f+9$`{Z b=ZOpQ$]"ZVBGOOJN#NNGٳĎV '=-~w9Hju7!~Պv_8Q@!A~+~i>!쯭1TI7;^\@ɢ/F]@!&g+. #rҕ E[`4 PӢ*ʃuj8z<ƪD=q$ %ձb25h՗YD8. Dt({"˰iLB;r4PpzP2ϣ_@VxҢ))@-.c 8,.Clq֎RR_iɠ2!ҷ hGioIƍq(qs?k ۋ JdLSîC-:4ur?MJfS44IKP\@>< BVEé@E*)q'xMzQԜ-V˜0faBR췜%l6̚<{ &i+ u-C c(\(Wb贰tb(7`igke~jomo9]-0 xMI.HЃuw}"(4kǗbpwYwك'R`WвyJ@tMѦ=X@.cIı$u]fpdK Lt4e}Cs8 C)AB%0Q$P:-GMQAL !UX"ć}uz<}`eĽ'ܧ<1=̦h332IO_zL:IϯԧwҎ h!NC9W Gx ONJ&bUߌSrR$dx|{!*W_*U,EQ%I3>eb/8%eדcEF3D..-~-T_-uBq? 5uW$M +]%"M10/;q卟A@=^Mv&ӯ9&MBbdK/R倖p fB#~"Ǔyͬ;vK._@1kQC|ͦzo @<%ݪ`IPwF͞EPAѓPF[EtAREb* }/uTFi$dajfz.a!Ki@)"y䎑NbiR(g%L"-C9`2ި %5Mbj) HJOa' H} .h HtO^ceb`@T43{Bސ;0Z&҈0塆poD;uzf# e'A+Ǔe^ՠCb X$%4Rgbe0/ !4>NQ^Ky 8}q>qp^>`VŁrNX7Y[?zN;#P(EZbr_'/^сtvN1QrT[X?zf<6'.0Zt-QY&arXcY-*CyMyo[N'Z,j0Ļ)Y0NWcu Lz@uK[/):P-\`O DsM5}xfdW͍;Vb:)-28eTjY궻5ZG20xOLT7t2ͷкq~y-NRf?0'Vnq-n ٘f̗O KWK0uF- << H`2,Syf=z$d$R`,*_<TW 5૯HgNVU Gr♠|Քl]Nbdzf,ŖSuۓ٪4{Z2t(b8:$@{Gfr/ѻ?@dht甝TDQzMhj[l~V1*Z~x(xZgf|EMEa~)z\e;C;7m=͞Z<= ?> *CJDI& ^0fҜ%|<eJF+8W36U@z@raŝftJrĽ((/ÒV_1_ɡ_e3;YrD퐡ʽ&,rOiA]mCmJ||뱷|G:H~2퟼gE_y~3iC$Ѐ񁼐l3I&HC^m0iF .Zg: {B v)ߑ8B#7>cP%aeh(FLq -$?$QaFe&lGHREyMvffUz^JSkB~v-ʮ} *%Nӣm2&Ls5!;ȯ"'\R8ge/I2`6!%tdC'7 $ ʜ%#`Ҭc!~Mٗ@QF.ztq= O,gϣp* $ gfBx_$JJbKJ+hfQHd(ؘ;b$jLdQ1U!NPu4>&G'E8|V[GߗE0*F9NxlDx>.5?ݬeMRR7ߑAX*7½\'=xiAǬX5xeQqB_| )R1)&6jSR 9up*b Hs4 d\L I VK~Todӵcq 9[ugzoUzgY?+5I頻o~Ja\{'9e)uSt+lyx2(9r)˓HzG)f>y)kpa"Yǂ.yŁ$c%,ϒYq2}b2 ~cS~gOY9t0{!ؒ}3*ujxv+j YhwXh@y 7WC.Gz"i^| kCB&үH:A62_&K+ *b-0W4lᅒG(+kCQJ"`A ~nVDSn ͪ7nJ׈ebzt 6[n(LAoN E%PDXDEm4A=xZd\Rn덓ZH.c7 ׈@9E ܥ$k,1 !Ň4ih[#Ȥb=@ek LGo|eK =坭_| *Wx䝱p}^ ;$Q[DFkt23qjw b@dyJExOWyo'e}3(K!r\s)wX_s9c\1$\BBz T3b`h6 %_!0r?E؆`LHĚ:/ |AڭxcI)ң>x%N6,)1^-ojMzCć+CTp` .8Td^+to_?n 1,j:|}5*wOA74$Bb°NTyo%ʚZ tw%ty([lCn$Qp}6p}HDp6/e2!ÉA%8L{ :<DC)TZ ơlKLܑe8d5=K#ɎJ2.X:΋7Ϡr͉' Qw?J[9v-rđ r7?B92zH 7@M9@qr\yB2R^2Oy3 (g2;;h53 eɍ{Ó MDY{};ޅHK_Xs[b`,~#9{p`EgF+mb_S{2HY8ޔHWD7c{qxj\|lbjw݋_{CO5NY`p]]) J?{˓a_߷Qxa<>7Sa_~!c fx=[XSm-mQ-5|Fp$$as+aYSUP~~3B, CzQ3p1>?ctC b*9Mck=$DR'N9 pC,?F acE z#^38B'P-{b!Ƽ{rTc_;¡wz% &[lyAESheH/ҚnĽk-J0~{ɝ4/nvp[]X_ej"̬ogknn.ئς&WsQQ.7VU}eWٟ}@#SWXVsۻ֍ŜuJp=7*.N. l*"ˢm֩m\휜 :¶N\v-UN]k@BmYkRrsmԖKW[ŭkpr,Z6ekZrwsr,*Rl׶"Zqpjs.ز۷?_l P684844+9)rp]\b;"ۢ[b;uRufvk\wuwNvڶsnuUܵl[ n vpx\vYe6-j R\(:..ƭuu=׭۲qpk`qp: Wlpk)~Nە6nmnWmۇMEkn7nЍKQgnnpm5u:(_ :nCY878[sݲmVrp*us[j2jaVSgbr]^uÃſ/mWż1]z!㸕GOnjγuѥ4ábڤ'PeԆ7jn-D@m%T-! &ڒYN= TUT%TЯg GBfaK]S \ #|rfD: ~I'3mNhu Z_c|TDBh3HԴsh馹o4VhXj5"V* T /N4w*ٳ"q}(W?ǰT1?Px)cV$L7$4(lFXɹBN#,<Ϗ 2X$[UMRxN + %'ꐴɌAdb1G ~i*GRWйoQwK&DrƎSLe޹Gq-AJ =lHy`Ĕ&6^"¢Z"ѐ`؃o0SLp6آD@˓Hf0Aj̿E*BX.{T:ӛfвJfW?S`G Q8jminr=XiuQ|(~ ) `z {#SމK9\҅e%tQ`gч%#ًG aK%%:T!rFO*u18+=2} sn ХBm(@Ȳ-m++}|WsyV =z@W:3@Z~IY|֐|U2A<їC@oBc-jA D(>59#V8X7/c  Il8z0E :{dSn\cc@G L'IϑQ v))UlfHj,'?ٵŮ*Q!'ls=J6\G*6YBH90 JdFՌrND|1t8*)C 23:zDpC=&Od5~`ʨC8-~l8"^b / jS`&ez,?7qO<^dɋd\`;LŃ' yV Ɍ#B?"xy}{Hr3@>z6_3'Esg/ YY=SF $Ϥyxw2z/g%|PIiJYNS LᰑZ$l"×ґa*ҫ]diCbGN6DVѓHhjr=l67ᯝr2`͆Bx2,S7GEsTG[h 8Z RzoI~qs"#l dMTu½} *-1sq,&vB8澿΅n!X{֚&pYwϨFيC32#T `&4muL͑Ab2J90L{FukN 0}_ohMq.wD|Qf{c-S:X ZiK}*M22SK "XuRWxemKi t7lŴTqwmAEBo#==T2S!wG%\TWG6Ϗ6*-makq`t d}XW>MOޯg4$P1PY䟵.xh[!5'[.X9vD*vE> n$c-w&9 S޿m@MR1< ưZ_hyE&Z"r ܬ+O¤WP( !/PPמ8ةw}U<ӎOGosV|ߒ,gVƌY%Or&C>[o͒~IѯT7cj/yUySD7]tOS{9oїxdH3IAGr9lO](!R.#`zCσ8Lh)'& %hGEW'HH : >-%6IK, 2~<ϦE#z}?ʶm^d~g?Dd7 L8)FCjךz5МH"h;9uóNpCn"L< T fnHMtl:8Dɝ&#UD,-O| 1b/13Cj݋%e|Z25JWNLz\g9 "#O'ȼ+VzJ!˻W)Zz5tE>4w4T2ha)ĩlʤV~J *$P4;t𝪣Gw' lגPBF:U€%GkRrWn.6{S++tnlȿaqH}{uh&n3-ug|8F)㦻F9 +TY)RU43̨C)ߎ֌vBn"NrL$G5ņ#=^\ͲCkNw'9Q}>޶89HJz7nQh' 5Eyfh12!ޒanebbw{Z%ר(!' 6gƧ1Ԁe o\ŨMwYoщ t74.ciEK=Mz}{R6WVWb;rn~1R?GcH[.ΞyX |l%-2Fr|kF h岫SO3N+cG(ߏv|FS±geSvc_j-B2Vqv*;;+`-zNF U']w?(}zJ\90$XEV׵wѮjKhRZ޻&ۥ)XڧpnNOw=G7̺χ$"=QV;"SǭkPѷZf-Anӛժ|{vgrіn8ߘ_5@q|XϚ լ3Zgulſx%[ō4&wIQ榄5['Ʈ{9lNQ gwk0;Ӧ8ҙvJ]L:[N<(C~l<8nMG!Ȣ"J>a+لŸ6@%wMs<\ 10ޥ>|'ݞ;! vy8 ≯חѐ%3R t|UV_Wωԥ U*;9[^'gh7g};OG̍x%ܯ_2ErGz-8lC3F a%pϖ&R`{fkˠ`Y-ɸ׉rsܬ nыT 8W{59="&$;fiQV6ܺ_Ofv|tdR, JeXi7{ӼuD 4畋;GL^_Sh`ww=m(W~ <汴 _@`ec9/+१ ~Y*iU<|!DTD?Upx^K ܁|n%?\-[wvҕSiu%WgФqrɛ'J ^Wph mϕ e c- }䑱c,沝Ɨ)"ݓFT% /-Eb[#Mfy"P:m ; ĺ7Up<x}>{bmt#z)S;ckQԽۍVj4nq_s֤E9N~A΍Ug"=0)/ *.41ƣTt/ =. .K2gY+$~gnO=9+$%c)F=>L|5˹ĭo QyPށ|S԰;IЖ曉ԚDsxOEf$R`GP=!c4|FnD.`Pas`T3.|JyחiN\/HfwKVuyr>v3]zzVR{t4RuY=&tQBQ -[H/4=ӫK~ EϹ[}bV,[^W ד"'Ք8 %$7:D} otrDkuGt.n$|{`>[G{YCpa̎0@Zj={lbzHOO`΂ mb5Lϓ3*ޫ`=Mߌl$͘&ux`ܙ|[A4g4mF5I4&G6?y&G]"]U=6Jrq滣t3!?]긥J_PMO㷘<ѱ!kP]o/pW]EtX؇P 2# s8[2_ f%n >FZ Glig!SoR =O-Wa9G'{5Yvm]0,6|A*aWOs#b6oPI~74 %+Xv" . C8JP`>hP,x =mI(Y{MĸaBQ=DؑyZ&+zAF 'opKguEphq>S]}su(B6a\??$Tc=y{'qx4RܕcoY*^'b{PVTէ@ } Nl6wiz_1-WX>y!s-sTh -j!7FypŽx|;OivMr@kq#8v7í i{Jo_W}zkr#R;l˝CWvb9]-'F{I;d 2!=c.RK]x @knӿ9/ulVX||a4~7>c|Y-n.iz?]0 I&B}5w\ǒm1_1+ޒ޵qjcSX=v8ݛ\lzlSf*gE'~"+]&iCނ^}ir/6g\=*s3wz bě;#u3ht՟׷vhlꍴGyok89mXͤ88>;^ ^KĤd.?űPJ'IV&Y)!& iIx:n%6؏8أ6r_EcSt؝*jߵ)TZJБ>μm/ٻyL9겶C%칊F[qg4LW,y7 зB?͂\_mH=+V4uhiW$ܺvvc~,V _ll5;Sk8j'W!iuXtG>Up+-;Gݿq(^WQlU&w3tPߵߢ ,!b¢a4;oc<e1+D_T~8kUIpzi^g[Fs"3 al;c_w;q-gj~g y(E5&WA/Oϖ,f'͈|-7=دQ׃HDj^r^7pONk|/m;")z |ޤ? K;br XPpf`$9 jg4Z7q6ٌaIOD8E͒ްSy ɡzI]=wz~KXef'kd<ݠ9 ?_뜙d, 췬TFwX_C奕T ׳P5iΔ @K_IPQ_L#Kjy98JjeG:SM2\nq8,h4]hW:\҆A phي9-v39(}%glWKzm\;G[ -oM ,3UT^D\G1UZoiX@Rfwם%'4R ՗8k'$:˰ 5L/gD5H_oaW tf69ۙb 3Kd12d6°M ==<\^#eIZY2BѮZ'P(r{y$h^ 끏ƾ{եWC;%X=\|9HmeVڊi&nkO[kg~I) O!dItS<yPcˇٿRpa V]Dp]s75VkAA/яbYX0nk`Iŭ~VԍEʕ9-o&o5[.qC3GD::, ~'#%}$LX5`j 3Q}dKk}R{/f;!m1rNC uN%Ig;ݳ3RUWF<RNՕ[ ԷvNP$cܗH P<QNRkD\8z̻x3’^!AD֛'S>h{TPyԺrk>4̃ΩwNHl9pJA͚Y4R f+(G3)oڑ|Qh n9"6f;%D! t3\P| 2z5,gװ!`Kd,,'TpPT5Vd^j TK'y9 YX;2',c z^蠆|2YʡZI,u'zǓ4NQs8* 1"?Tnm`u-UjTdg:Cw2?țEvRö[Ǫvg͖){Hk4 w7fL[_WLxx`Ϣa~s"iK|\ (o'?ʱk+ s=.4uEv(>Ml"s^~Su|$)'6HqVHm)+sB/ˉPWɒ3쭈6Uѩbs"5VE [$`2X.OM" u> ؄b &-y\ܕ N$a^i= SxO3bxP%qUJpsTLcpH}|HbFh=RuLKSט(m6xq|\XAjʁ&~?K^yUQ0{نrrt>PmM2oqZT+u 2~U?(NP>[-rkdp٢8Pq0xW U{FBln"%$3 DЗĚHM" q iN^A 6x(ksI9̻IK7AP<˺E 4J_9+V`)ag5y\WoX\:^fT/\9i976R%OLKw<N5H}LNfhN~(]icF_BbO'c9MF"$ Ib迻p+5'Noy5)5^ҫ$-50 .yꄣNg`j0]2 eULbaysG;{4..^C\cWiKX|ojz1м,a- /M|/-iF7>h{=|vp6=AU W]o*y:W,Xp!.Ҳybnq=*^n eZ <,igDJ(=`W{b݃l|l~#[t@pFx#Ϣاg%tx[}qTTuYi9Z.:+pD>̆kF_3մ_nς܂F}]!Ѵ(g75.6oڈgY=qμ #V:o3~Odv̔Ly?'8$ꖂ_ekxN` &LՐ8|/w! t##l^ٺg[lb`mԸSÝX7sEn,*XSV`JtyHbWrFy$?aF#zvj+'Ѯfڬ!eV[,j^/ ^9N&ϝ3 Z,mk7T~a,t=B[-< O Yd Sevq>&ӮV5afufF)CAe'Ovi6[MC4pWjMZej{d 74'D$^jpgn0ŴMc`57,})7$jB83:d谅=w#XT`k{-Zڵ/9Tϗ$ ٗhLLGSSoSlk >A$:93YL+cp&;|8^=@>_|\22M!R<@? (.?e(XLjA{t$"^zeZZCxe;"tܿG2G~L˺'uSa2Xvc oe =hY(

>``T  D&<7!DV졄(ܔ8})l6\^6jTʔ*QZ~r/Q5#Y$QN)mMijp1u`ľo ;Ƨ MA!ztm2]uNGΧ2uG`G8#履|ƝrC9$jC3>^@Ґ;ϭ+DY{bU=[>s;R+7لp{rM\=nO]hۺv: 2jE8_o0bN,L2ۙɂ)0:4Z'ՙ3%JN}XO٫iͧw9u:W3( h3_).h-uzVWos)Zŕd)DW1i1Y' Mć#=Qԕ3pku]Hs̎LGv,.X5C'Bj;42%찰uB[ST_ Q=lV+jrO]p¯NӍ"]տukWݞǔ6WmUM!FK ]~!~G2=94vjnZ[g '~mmMPgvO~;>ugZziʓ$'M?ow3Z+" զ$OGݮektMeǤ0Q6uU8KI@NbTten~~\Z0E+\VdvGCFj҈-*3̀`dc*) /+ 1S@E1j b.Q $BbL-c!H0b-"ZCDQDfPCG#9HPa*f6 ˘jJt0lYAJ`e\S$e&A[!#_v.i]mbh  \!稔O09 H($2h'%d<C8̺eu|}D0C t[ὔ-ueEt[~9="FX5;hJ[bŕ^{OcS 8.CozFE_ȑڿ: މk7\38lAƤDg,:l\^<[Ҿew=Fcf){&ښ}yI{Q"Ӱr=r/޶D2ۭVjlPS9q|5(c1<<`okQձr/^(%PҦ1 >M|8Cm*8R=][DУ:.+u# t'XW^jC%[?a1ڰ ;[9UO:d;t읝wz~i'/E{% 1"-[>>TIS3̈́F۵1nbaA0d,r5:#OJM!'k<7ys5r0yl5Ƭ5ѾE |Z>m^6QA/2[01Xdd!<En s,oZHB(A\ެKqeFÀ:?}T\9l\KR,dI`"p"*lE/:^vqߋ=0 Ֆ/1s A2mj79$7+.vaDǯV0zYl' ?O[[1{KLNjhe@:^8Éhō(s8X O#"Ͼ*$Xia8čE^'83Ttt qoBM`y㶉x'`Ϸ4LZ#M9EYLͧs?oc)0Q ~*ׂ4F M8M]+5*;F#jZ駕|ϝz]E*<[2^j&b䷶1sR揿^3DYSކOtHB7 =4JT'Lc\ɳR@5; ZJ@B<,h8͸} IU` v pXn mU>|r̢âGF]a:6HK1"y3uȆ1->5f,a^'>8V|`.~#եsTѧ00PgO%=N3c-ag!~G\G@Q1/(*V̎]#XN˼qlEҪ/cС\kUv!DCԮ@FY4{UՅa3m8w2X *b EH=Do9DUTmï fx9nNi}HA8F/^!I'>+_5EI9f9͆}HeT6`O|9aQm^~ް+|)L-Os aMP) j(pp4$# ?E&9Lki˳o~Ș v =cd9ՍQhJop{N:=/8*Zn(KøQ!` Cf2w 4&m&jc]3m@nTR02b· + e{jĹWi|a ʹ)fXP]d\\ q}O7;5s^}ua%XϜs˅V_kUі{_] O×X fy] %3LXIH ŢQ 2bC+ѱib\ׅsq'.}ǫΫ:e{ ݘ޴ 8aOOhD/de+ZyU,P-u͢C`ra{AZrl~mق*vԳb t6_czr̟uhR+aK$6.8 SIRX'z]oJgjGHluRyJpHrjDz֚Lo䏔iH2kIb6Ol{|;4dĮ/eDuspK`"E&/~Y0[2z'@k] M)/n)rb@}m$L!B9m_W{ .Y r4E*g&aC%sW&YGrc.etCd܆Ɓ/|q{L> qMJ'RHvgj_/x#3-3XK$m=~rG~7H}!ķtR?/ǵw(;GTil-;}BVDT~ތ}鱈JtGkܸVmk<$u²_4)=K> _B0wW &,r>3&*]C+[^ N 1k%t}ᒦ4r:9q؎ 8C"~P$ZDIE1ˉ` rt>`MS|4WU,c/؁q]u[!2?u6`^Cّl0ڟ g y˅rV @wǗ2tAg'umƉrNՠs{x󃠸&GrHܸ2NA1c |d3+#[/sP/ZTKUrYP}9 <`b_7ȊZ{ɼIW3^AltA{g Crv i'Ecgt`8Nbv.vQF!)hoz{=$ WHB<GϫH])M[!sŮΌy2@Gi@t:X\Ż:GVfaL?& ~<`E>:2%IW؉[_m?ؓݫF7+^tH?jZUފA5aZ3w2`frLtz ](h&{ДC)¥{CJǑ &v 6?5~kRFt. ſYꢉ)`sO.sl:#ygvo Q;휽egG0Q8U zs}١{tEߵI8J:, "d8k ZD% |盒&^< Nae\.d? %f4M `[f9FZ-0?`Ǻe 14HwMbigMϫTYәiY%gA!%9EZ@ oR V18!*LӺ!P.Gtʵ頏4@6=4חլaWlpUPè5OYb In#Vo^,fnbv?'fO#a$Oz!| g=5a?eX+lH>$zw5=@՞iv:Ԁ/}1Xwܞ;!U^@sҒWj[6纸3k7N=$`(Sj2fM7_][4މF,RV@4 ,s񠯵0|RZls[` M)'Y##;74oqd[BLi\yWbeD碩VZj|I,`7IhF1ΖrnApw㖒şe2`2C%X#C!+lr. fgW4t<_'=u9EH#(0N=<̚H+%/oJjy2Mu)nyZ/`ZGX\74(FS+.͛-lM&4-7_I'K?R ~t*lX9a~3}) F"TnrFNo3jW:8D"r*EbgѢV1'Zx1+05 䏟$fyٍn|c?HzP}-'"Q;8S/AVl !PM趒SpT"YKW!kU7's55!JmgI^M| b>1Gi1 6Bs\EY|A=nLwկU((<*V yibB3CΕ.pC D0.1QYx9\9iu)`wmGH_بjy[,3 vVi.b".[ͪ:8kM2P*RHkIttz;E=&{Ge'VT#5ø|':D-BnC2 JKjC =fS NU1U{j(@B4SzGhiC:dL=a X0V<'={ ~vF4"X`3|l?-vng0.gP #КPdp8y(|NG,L8::r k:] KG4w`[Y`&Od~UF6'zb5t!n1=˨_.>y75Nk3y$"5 t)2|:5fm1W b=cBqmOdg0}R߬ɉb@ǎ(;{#SK=:y>*ǂ_݀b0se}J`Y ɔrm'W Tu>r~v b6K9]lnvއ tK ~gXI1n vU H[A)\2Ky@bYۣiй~^| %S $l_"!酄Jb#4l}F(:)9DM3"EN[tJ1g$BGp;B?3{x=7Yô:k8fH Mq6 i8 LdIJS% DޓQ遞Zo(lOr^\PƂLk\8ݟʜ^XyZ V۱Tq$Y۪(yN4FoHaYcY$|"R_ mB@NG9yߐ;> Z OB7?TYI[;2"&uIz[r/a7Bb_{fyp<BZ|%K6mܼGKvJ$I[JZK:!/@WЙ+HOִ9e ?pm0*Chg=j([1.8佶J?asc-{"Bjyý/3M̳2f?geU0}Jtf&(X& d𾦬Kjxd{/IО=3G2}V*S$PB,|s[,3&Xl!!- :H{b>7D{pKtJ C4~SVOw< ","!ū(U}@~Fg4Ҧ3AjѦ}*:at=g0nWd;"q&,KRݞGwJ~S}0'Wko< Aa%m!iμIk12ac/2:6,ĽjW_2ܾ`XS qypQT9.}e}RD Oh#QӰ3Pk(G]-V:kfסk?Y#&%HJxݤ$J[KZ=(F2GϚwK4ȨajeH8&q'/OX2Ii`iQN|E$P)+$XFO%bڲr1t(m/B%v/s l'SHVNq#F2TVDa ͹'tXd|ȏj o)׳O]om;v7\*A>.w5١rp8P0I7.9 ab)%o(XWH/}0=ֿ`ե'QZafYP0uީh|W_7U|NO<i/s*ik{s ^tɬLy{z+p{{x{-8Y ei $ j4{U'F ؼ/K8^(4 zC]^ШZd* &~.{’U 2qjRη^ Ma&tMpx7Us=0JIٽM({.g7xxf+}֙.&]_}~A2w7EuX‹"B2]~͠grKPL6kV_Oj<JIpzL3FIN!{Iu+kpy6Ap}J׵ӫɒ@iA~y5yO܋mx'3yB+^,h c뙾t H~˶zAt.$t P8@$uY&i 0 ( HD&ݪ_uOLul̚-c̨gq[pJv l]-WLpfٽ?͑C&1>4G qO(an'a~$GuPWn41LD:vX bVgƈc)nu>G1&^?ٟ:^vZ2FiV kev>ke mAI-g"zخAr~8t:@ҡ}A 0`Ye|,9M1}7IH 0#wѫޝ>ŀvT+,elNWbIKU]=u._GH (ۿymoRV ;Zbvvi1y2,oLΠߓyqJI t?ŁRݵvurQeF5^D i+v 7Nc=',5rjV?=T}?bP fUـ\=Mg#!TKW*g2H@qݽN_o^?}00/NMkF ֛/;]?hSO?2 LTT{lĝ[.}msiK]`-CR}kgY;hCz{Є+WcԅN[uc^Ӧ6"HcO*K}su-dZvET @cEOx0 xk$pYK #/C-`xʦ2e2)#E@H[b_ kWwQ(qRPG]NK{h`7X'љ3+coZO%$c.4P-9 %5~]"H>X)y8-߸LkhRTJ{=YFk7a'x4+IJ /Tn ?G![.E(|q R[kNlbF.9X!|&,bW?8q0TE;Ш P ˨PpÚ؟ %зM˻v9XN)D):L͏Z.*gfUo ;|@U9S x& lκ%wZutHn%;ط2MO\>2PJlopeqaۉXfOs ƺVty&gꙜHdxkSC|/qhv[ sU·õlX-dz]+ 7Ԥ'rYqLg7</@Px?8lEGr-{4E_LmM;b`ߐ r/qPeonKE@gxm/#E^c{ 'n{3uh>@N⻜pPI%KP 4ʲkd*0\={XlṊWl;9!'ViԗKv˞Zb p'љVkeL#>M|:yA¨MM4|x.dgx W%92\`[G=w)Br^(յixj9FxaƉhr2 ~ʄ`x^f[+}1eHl](|=ӲiS)ɔ-.Si~џrJ Y_ukp.:@b)?ڏ(&lY~g LF,YG4qY;.&o\6K$gy֫'h e.0U:u?OAf6qd25ݴx)7gbh#GJNG̳ZqcIRuc' {|BX ?Rʏ-po!d%|yԦǾ^JR 7o; }ٝld F#!~u[B!.75f+1~C3d/v5:v<]h 5x.OGGhnܭ rXo[28]mد[PWz;XƑ6l"uǐqAa/~؄gb!+u2MHV|RփN\::;8~~?. .] o|kee^U()ʽ7'{jιY굵(ٗlHRJ,D!5 ">dݤ42,Xhw@$  !8K#>E/"ö_ˌgr 1lw Fv>$.RɱA?.\u Az\fI?eFDF>n:[me뮥]r~$$:u-Ew{ܒaYW#t#FM"")Kx)=\9Fz4 \qJ׀ iC? 2x[aL1Ja4o"2$?%`c$ Iz?L]Xچ)22ǘ ]Uwll!'/: VxL$iU@{!1E8S\}J0D PP~1U2'G,yKt 9|qՙjXrX~~ ۦ_mWLoBDPmi[$ЯӯyK< eaf}_|k7o-[Φl'~aaJDkW5ׄ4(MeUnHDF"=E˸oԧ_s;!,(R(F2'3 3*~~\=@CtoWRC/' A'z@q;e\|; }$[#C\xqU-0g:+ǐu}z1I9r An#1L17:-XD079O 2 EwU!bd2'r.#PD KߌVsSP2NNH:gtsP=:12ʲN+yޅ"Ǻ2ߪa:fs8ٹ+5 U2kʿn뻧;w0 yWu [FS f3#n>AZ= 1Z#B2j`mo*0Ϯ*Jv5EkSź:X1JT~{R/S-Vl(`*gX 0+k)Àa?&a3Ly60&n0fQ8a$#@Geš6tǎA4]Ȋdʎ%|8ZFgtU,H Y Фw7F l1_[06E8:n)_\:Е=VRH^=E3倾4d-u!2:u*se9H3V]4  ;d j@LG;{^Lf* 񂮎Dx=wg4>6)}aBA6M1:0?O::!`h8Gzߝ9Q1-mҜb rgG 576y5t` ~pIDSuy|^x-/-e!8/KsܰQU|ocf9lT }C\Φ11@L(`)vqlh8,YOԡפl5?W˪~`O}"eq4K0ejVrԜ'Sh7cII"VG3 o$6jM$t=:bT!T% &   N~6O  Fx4YjZ  n  (@ ~v4@m`8@paA}bJB|@HlqmRM|ozvw{W0TVRz"&*,צ.z048:p>DHLPTX\`6dfhjpx Ȍh\Ț0<`\ $(.8@HרPTZ`hptBN`hx،(.48@H|dLK`֓B npJHLPTX\` &,045v)GZz-dc# N޻tҾyuÍ sm%f0#iMF!]~᲍}hAlcKsX yA! o vCwRS6VvTUVWXYZ[\`wp$I  `=ئWd'L5nsHc}vu1 :HЩ2t9Z)ܾ 饮ACfZgσ~J\Nx6΄j? @`]^_`abcdefgh !׃ӗ/ _N_,|=8}9Nh@8N"b|.> dh༤$dlt|mpq` pȐPo P(nta-..0_u7zXZִF!t/F]?EhDTT[%IDȻTh˒sCzWm)Gwv*=L{9 Ks+& 6VQ$^~ip|X칉]\. Ȯ/ ݌zr}EǜcNm\> F1\,yeb}ک~HkB͛ 7:T_lS/%_GEo]=Uo"?Y|G;;(nAx=\K[5SaC [4昛Ȉ+eKOMݡ=. T~vBb<*CDnJ[) 7 #M/ H$nL8Rq5\rYo`5EkpIіWq2}˨ =(p}5&DwRkN{}=8r㘨"|ЌML-V^=`h{mLaO(dj}R7Jt=gNC؋c p۰%_m^1< S85ђ8 r;;ӬxgOt4*Y`7Vv[+p* Klb< H)bsB *u٘bRs/7oMK ©C|S:=h%_ OEQD= 巣:ʸk<^;RKp~Cwa6W2YRR @J n1*?$5pP8`Eh6qyp4&a7Fn.Ȼ]S1J_ӓDe]|3.5 ρG皑 |PŠ<$}z@ٞѥc6mg@ 4҆+z>Ⱍ/qBǹR6%,opXHJ}$˯6䵙M:K-J4 ɖV&C!H60 [m{Ӯ'JlIsZP7:p^dm}IJ*P(2*r1٫Kmr#Adwf}89#,|6=Զ*׈ lbH({FD3 9M:93 `IY ?9xHPpJ= g2* i2K2`'ώᴃXU~pŢ[E NۯVE&ġgPQT]3%zEw`Qx9n/Km[K!Kֳ,EKB=X$cY"G^%IO#Q^vj:#PO!Vm3}MU|?UEsH5T+,{uLX-X :[϶3}>xi yEYr G!VY33oqŝ &X:G`{OnKȰHTY:'겋U_lS\T@-fj%7u{&J3l!SLK IxGD9л?C7q3n<';h1.졍?߸e3L6G`PQ@n5`|ʫ)_Wչ4Ֆ m0DZ3N_~㬍Zٖo]vL8/%(eރ>I1E3/0wנǥ/|~M>LN)fp*s B/ =Zmfꞧ7v.TƨWU qCav|#k3u!תcQ z cz;ǒ YˉvbT!q_~0]܇O: H'w|t"_E4%2r͗Ej`y)]ѷ%JB ] Jۤ,rEPP偳^8#x㔓f]tlك囲([xTH"c` lK09>BZ gEjh;l޶r^k.g+"DgO6Dl"g ޥ:% n(TC7`,d9pz1n;)j;ȁɮq f $Ukya-U)Znyz&,&; \~uZf%3Y C_p\Y/>Сp-c<{e 5ׇ6*y8里|3Yk<3aA>t9JFp@]*<8<&$}hx8v _crf>Y Bo bS3*;{<_ͼs'姬+?uF_%L.u۾!m_væl/%IP_1 Ss-m9pxU;˒z؎O*_)wP`/Ťr? L)xQr*2EHЃA'UQx{Mw4'CЂfL5T e5_Iq4Ǽ G^sJ4KE r ?eh2g5) 펣R33e&1lV ?$jm\=@-wdrΗqC 7Ed_LYn澽btHϺ`t&z| s [K4wq 8|X[FZJw{E2:[>'$))TYDtLhTj"$Wa8*NI#c[Dy3nCt֎7N$$+%9AIM ;纒9Iq ';ajh ψ$סi@ply| Q,L/ gso*h2_PS]\nT2t נ-KZbWho/>{a{8cҲ_gyI(r醻?iZ>>:XqI%0ڹi_*Dm{6\ߧ\z[G(wD:AOW:nCF2etN*DK=X6h1ٱ -ף1n֧ GݬkC/ax C l!$^݊JOmdTBd3B7&uX*ˇM"ֳt^-ݷ#QJ95ǁuɫ~촒,5:Hd#aaz%! .Һa?3-$q̒i|z\ZGũ&.DIlD4ïz〙h&P)J`C,>(,WSkpNCOmC6ɟwfE7=0ҿ;zIgSֱ4~u6\t1y:͘7i rѹj;LxkH\)d0[{}T%tu8D'n}j[;gM%6llz1u@ē"*!!d v{kv>5:4诺y ab !\ Qr pj;skt9HF8 >Nv[ j!tBA~Rh@y h: ,@\`<EHl0\XX8`h wgyi pr t 8%<4 C24e43a1ff2f3e/d7/df9f1cfaf6c2d9b86684d957ba6cd800bTRAR!!!]q#{)1hjd$IB1QAHASRd( ўwxc)N'vIr3u|tDiʸuwP:/A8U~`#Fx!"l՟%Ǵ9zEVVkET;,\ 9S3h;@(eQDN}s2zT=:<1tg)}Dkdo,^ h.K :|C:2a]tq37zwFGG572mVz`?)iI()h@f^ac˘9U|4rl*ˣ_{uM"Wv6iɯo^ms*ffJ4kY'N29.W=4Y{|n E_64.]Y #[ލ]JEvAۖz2VpeM2!dqŶi ]d'nӱd?Ok;IT9:bix%w#4Zv\\@pM$&|l