systemd-boot-unsigned-252-46.el9_5.2.0.1> M Mv ĉJ4!!%joLne)Ip-Bm5 ']g7releng@rockylinux.org p-Bm5 ']p5s FT)Y}?``e^Iq2..@j"* [-"ĮbFʦ*Av$޲#U60L 5^@!>u<_GK(!gX>la!CK9n&d^SW]Pnl+s"&J_8j+g:d_dcy{]ΕJ:LRO%'6 %%)I⛜&Z Fsl.d~> gw%8>pC;^W Vj#Opt} 6! dvg% \+3,hH/}}]qKX"T8=i'M{YZCA9*0+(O KSP z(&廔h:OήrOv78"܎iM=r8493b066fabcbf9da0f9dee109c8d8a1eced96859217a70f3330b4292d695a203458a3f6cea0bcb62d0fe4d5625c9f55eb3f78acɣq  >ubq&>@ ? d + P0 kw   @ N F((H8T,9 ,:-,B1G@HxIXYZD[H\P]^vbdefltuv4w x y    " d hCsystemd-boot-unsigned25246.el9_5.2.0.1UEFI boot manager (unsigned version)systemd-boot (short: sd-boot) is a simple UEFI boot manager. It provides a graphical menu to select the entry to boot and an editor for the kernel command line. systemd-boot supports systems with UEFI firmware only. This package contains the unsigned version. Install systemd-boot instead to get the version that works with Secure Boot.g7pb-7cdab3d7-2cf4-4e0b-b1ed-bf89e9226511-b-x86-64&Rocky Linux 9.5Rocky Enterprise Software FoundationLGPLv2+ and MIT and GPLv2+Rocky Linux Build System (Peridot) Unspecifiedhttps://systemd.iolinuxx86_6466$: +L,AAAA큤g7g7g7g7g7g7g7Zg7g7\g7g7\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../../../../usr/lib/systemd/boot/efi/addonx64.elf.stub../../../../usr/lib/systemd/boot/efi/linuxx64.elf.stubrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsystemd-252-46.el9_5.2.0.1.src.rpmsystemd-bootsystemd-boot(x86-64)systemd-boot-unsignedsystemd-boot-unsigned(x86-64)systemd-boot-unsigned-x64version(systemd-boot-unsigned)version(systemd-boot-unsigned)(x86-64)    @rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)3.0.4-14.6.0-14.0-15.4.18-14.16.1.3g8@f4f@fѴ@f@f(@f(@f3ffaf@fr@fj@fM@fK;@f+@e,e8@e@e}@eԔ@ee6@eee)eeves@eRd@d@d-@df@d@c@c@ccl@cc<@c#@ccRelease Engineering - 252-46.0.1systemd maintenance team - 252-46.2systemd maintenance team - 252-46.1systemd maintenance team - 252-46systemd team - 252-45systemd maintenance team - 252-44systemd maintenance team - 252-43systemd team systemd maintenance team - 252-41systemd maintenance team - 252-40systemd maintenance team - 252-39systemd maintenance team - 252-38systemd maintenance team - 252-37Jan Macku - 252-35systemd maintenance team - 252-34systemd maintenance team - 252-33Jan Macku - 252-32systemd maintenance team - 252-31systemd maintenance team - 252-30systemd maintenance team - 252-29systemd maintenance team - 252-28systemd maintenance team - 252-27systemd maintenance team - 252-26systemd maintenance team - 252-25systemd maintenance team - 252-24systemd maintenance team - 252-23systemd maintenance team - 252-22systemd maintenance team - 252-21systemd maintenance team - 252-20systemd maintenance team - 252-19systemd maintenance team - 252-18systemd maintenance team - 252-17systemd maintenance team - 252-16systemd maintenance team - 252-15systemd maintenance team - 252-14systemd maintenance team - 252-8systemd maintenance team - 252-7systemd maintenance team - 252-6systemd maintenance team - 252-5systemd maintenance team - 252-4systemd maintenance team - 252-3systemd maintenance team - 252-2systemd maintenance team - 252-1systemd maintenance team - 250-13- Set support URL to the wiki - Set sbat mail to security@rockylinux.org- add %posttrans scriptlet to make sure our SELinux policy module is actually installed (RHEL-46339)- version bump (RHEL-56019)- ukify: Skip test on architectures without UEFI (RHEL-56019)- build ukify without noarch- Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103) - fundamental: share constants for confidential virt detection (RHEL-50651) - efi: add helper API for detecting confidential virtualization (RHEL-50651) - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651) - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)- udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103) - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103) - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103) - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103) - Include if possible to get thread_local definition (RHEL-50651) - add APIs for detecting confidential virtualization (RHEL-50651) - detect-virt: add --cvm option (RHEL-50651) - detect-virt: add --list-cvm option (RHEL-50651) - unit: add "cvm" option for ConditionSecurity (RHEL-50651) - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651) - core: log detected confidential virtualization type (RHEL-50651) - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651) - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651) - confidential-virt: split caching of CVM detection into separate method (RHEL-50651) - confidential-virt: add detection for s390x target (RHEL-50651) - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)- fix applying patches- timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020) - cryptsetup-tokens: fix pin asserts (RHEL-36276) - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276) - kernel-install: check machine ID (RHEL-50672) - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672) - hwdb: Add Lenovo G580 (RHEL-5950) - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950) - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950) - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950) - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950) - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950) - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950) - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950) - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950) - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950) - Update 60-evdev.hwdb (#25704) (RHEL-5950) - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950) - hwdb: drop trailing space (RHEL-5950) - hwdb: add comments about matching entries (RHEL-5950) - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950) - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950) - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950) - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950) - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950) - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950) - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950) - hwdb: remove spurious whitespace (RHEL-5950) - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950) - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: Add mount matrix for Linx 1020 (RHEL-5950) - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950) - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950) - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update autosuspend db (RHEL-5950) - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950) - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950) - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950) - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950) - hwdb: add override for IdeaPad5 insert key (RHEL-5950) - hwdb: update database (RHEL-5950) - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950) - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950) - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950) - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950) - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950) - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950) - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950) - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950) - hwdb: drop redundant entry (RHEL-5950) - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950) - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950) - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950) - hwdb: Add support for "Passion Model P612F" (RHEL-5950) - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950) - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950) - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950) - hwdb: Fix rotation for BMAX Y13 (RHEL-5950) - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950) - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950) - hwdb: do not include '#' in modalias (RHEL-5950) - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950) - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950) - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950) - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950) - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950) - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950) - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950) - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950) - hwdb: Add override for headset form-factors (RHEL-5950) - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950) - hwdb: drop trailing white space (RHEL-5950) - hwdb: merge multiple keyboard entries with same setting (RHEL-5950) - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950) - hwdb update for v246-rc1 (RHEL-5950) - update hwdb autosuspend data for v254 (RHEL-5950) - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950) - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950) - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950) - Add alternate name for MX Ergo as found on some devices (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950) - Update 60-sensor.hwdb (#28804) (RHEL-5950) - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950) - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950) - hwdb: keyboard: D330 FnLk toggle (RHEL-5950) - hwdb: Add Logitech G502 X (RHEL-5950) - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950) - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950) - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950) - hwdb: Bush tablet rotation support (#29268) (RHEL-5950) - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950) - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950) - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950) - add udev rule for micmute (f20) (RHEL-5950) - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950) - Update hwdb (RHEL-5950) - Update hwdb autosuspend rules (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950) - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: rename .html=>.csv (RHEL-5950) - hwdb/acpi-update.py: streamline python code (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: add Predator PHN16-71 (RHEL-5950) - Update 60-autosuspend.hwdb (#30131) (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950) - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update (RHEL-5950) - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950) - Add three Dell platforms to sensor accel location base (RHEL-5950) - Add Bosto BT-12HD series to hwdb (RHEL-5950) - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950) - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950) - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950) - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950) - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950) - hwdb: add resolution setting for GAOMON S620 (RHEL-5950) - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950) - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950) - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950) - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950) - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950) - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950) - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950) - Update USB ids of hwdb (RHEL-5950) - Added resolution for Huion Kamvas Pro 19 (RHEL-5950) - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950) - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950) - Fixed resolution for pen and touchpad (RHEL-5950) - hwdb: fix missing colon (#32108) (RHEL-5950) - hwdb: update for v256 (RHEL-5950) - autosuspend: update for v256 (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950) - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950) - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950) - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950) - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950) - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950) - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950) - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950) - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950) - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950) - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950) - hwdb: add a vmbus id for HyperV Video device (RHEL-5950) - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950) - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950) - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950) - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950) - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950) - Add OrangePi NEO Scancodes (RHEL-5950) - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950) - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950) - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950) - hwdb: Add some HP IR cameras (RHEL-5950) - hwdb: add more AV controllers (RHEL-5950) - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950) - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950) - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950) - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950) - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950) - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950) - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950) - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - add udev rules for trezor hw wallet devices (RHEL-5950) - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950) - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950) - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)- add Requires(post) on selinux-policy (RHEL-46339)- enable FIDO2 support (RHEL-36276) - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630) - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630) - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436) - ci: add support for rhel-only parameters (RHEL-30372)- tools: fix the file name that "meson setup" generates (RHEL-30372) - tools: explicitly specify "setup" subcommand (RHEL-30372) - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372) - fuzz: don't panic without a C++ compiler (RHEL-30372) - meson: use ternary op for brevity (RHEL-30372)- ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372) - libsystemd: link with '-z nodelete' (RHEL-6589) - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219) - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219) - string-util: pass ANSI sequences through unchanged (RHEL-31219) - cryptsetup: do not assert when unsealing token without salt (RHEL-38864) - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864) - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159) - Drop log level of header limits log message (RHEL-33890) - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890) - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070) - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070) - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070) - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070) - man: document that journalctl --user requires Storage=persistent (RHEL-31070) - fix: prefix of dmesg pstore files (RHEL-20322) - backport new mkosi (RHEL-27512) - test: Skip various tests when /sys is not mounted (RHEL-27512) - string-util: introduce ascii_ishex() (RHEL-27512) - sd-id128: several cleanups (RHEL-27512) - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512) - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512) - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512) - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512) - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512) - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512) - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512) - sd-id128: also refuse an empty invocation ID (RHEL-27512) - man: update documents for sd_id128_get_invocation() (RHEL-27512) - test-id128: simplify machine-id check (RHEL-27512) - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512) - test-unit-name: simplify machine-id check (RHEL-27512) - test-load-fragment: simplify machine-id check (RHEL-27512) - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512) - test: skip journal tests without valid /etc/machine-id (RHEL-27512) - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512) - test: Skip test-recurse-dir on overlayfs (RHEL-27512) - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512) - test-execute: Skip when /sys is read-only (RHEL-27512) - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512) - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512) - test-execute: drop capabilities when testing with user manager (RHEL-27512) - tmpfiles: Add merge support for copy files action (RHEL-27512) - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512) - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512) - ci: drop super-linter's shellcheck (RHEL-27512) - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512) - ci: backport mkosi CI configuration from upstream (RHEL-27512) - mkosi: explicitly enroll SecureBoot keys (RHEL-27512) - test-execute: also mount tmpfs on /dev/shm (RHEL-27512) - mkosi: fix UKI addons test (RHEL-27512) - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512) - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512) - mkosi: make shellcheck happy (RHEL-27512) - mkosi: use pesign for signing UKI addons (RHEL-27512) - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512) - ci: make the build dir accessible when running w/o privileges (RHEL-27512) - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512) - ratelimit: add ratelimit_left helper (RHEL-35703) - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703) - ci: define `runas` function inline (RHEL-35703) - Drop /dev test in test-mountpoint-util (RHEL-30372) - core/manager: export manager_dbus_is_running (RHEL-40878) - core: refuse dbus activation if dbus is not running (RHEL-40878) - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878) - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878) - manager: fix reloading in reload-or-restart --marked (RHEL-40878) - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878) - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)- spec: return selinux dependencies (RHEL-35732)- ci: update actions/upload-artifact to v4 (RHEL-30372) - journal-remote: code is of type enum MHD_RequestTerminationCode (RHEL-30372) - resolve: dns_server_feature_level_*_string type is DnsServerFeatureLevel (RHEL-30372) - shared|install: Use InstallChangeType consistently (RHEL-30372) - test: temporarily disable coredumps in testsuite-17.03.sh (RHEL-30372) - ci: update manpage deployment workflow (RHEL-30372) - bootspec: fix null-dereference-read (RHEL-36284) - units: don't install pcrphase-related units without gnu-efi (RHEL-33384) - kernel-install: fix uki-copy deinstall (RHEL-36505) - ci(packit): explicitly clone `c9s` branch (RHEL-30372)- execute: Pass AT_FDCWD instead of -1 (RHEL-31783) - ci(src-git): update list of supported products (RHEL-30372) - coredump: by default process and store core files up to 1GiB (RHEL-15501) - coredump: keep core files for two weeks (RHEL-15501) - ukify: make the test happy with the latest OpenSSL (RHEL-30372) - test_ukify: use raw string for the regex (RHEL-30372) - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430) - test: add a couple of tests for systemd-coredump (RHEL-29430) - test: don't expand the subshell expression prematurely (RHEL-29430) - coredump filter: fix stack overflow with =all (RHEL-29430) - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430) - test: add coverage for CoredumpFilter=all (RHEL-29430) - test: rotate journal before storing coredumps (RHEL-29430) - test: sync with the fake binary before killing it (RHEL-29430) - test: check coredump handling in containers & namespaces (RHEL-29430)- rebase rhel-net-naming-sysattrs to v0.5- bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952) - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952) - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952) - sha256: add helper than hashes a buffer *and* its size (RHEL-16952) - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952) - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952) - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952) - bootctl: split out setting of system token into function of its own (RHEL-16952)- resolved: limit the number of signature validations in a transaction (RHEL-26643) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643) - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133) - units: change assert to condition to skip running in initrd/os (RHEL-16182) - ci: add configuration for regression sniffer GA (RHEL-1086)- units: fix typo in Condition in systemd-boot-system-token (RHEL-16952)- random-seed: shorten a bit may_credit() (RHEL-16952) - random-seed: make one more use of random_write_entropy() (RHEL-16952) - random-seed: use getopt() (RHEL-16952) - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952) - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952) - random-seed: split out run() (RHEL-16952) - random_seed: minor improvement in run() (RHEL-16952) - random-seed: downgrade some messages (RHEL-16952) - random-seed: clarify one comment (RHEL-16952) - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952) - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952) - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952) - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952) - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952) - random-seed: handle post-merge review nits (RHEL-16952) - boot: do not truncate random seed file (RHEL-16952) - bootctl: install system token on virtualized systems (RHEL-16952) - boot: remove random-seed-mode (RHEL-16952) - stub: handle random seed like sd-boot does (RHEL-16952) - efi: add efi_guid_equal() helper (RHEL-16952) - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952) - boot: Detect hypervisors using SMBIOS info (RHEL-16952) - boot: Skip soft-brick warning when in a VM (RHEL-16952) - boot: Replace UINTN with size_t (RHEL-16952) - boot: Use unsigned for beep counting (RHEL-16952) - boot: Use unicode literals (RHEL-16952) - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952) - meson: use 0|1 for SD_BOOT (RHEL-16952) - boot: Add printf functions (RHEL-16952) - boot: Use printf for error logging (RHEL-16952) - boot: Introduce log_wait (RHEL-16952) - boot: Add log_trace debugging helper (RHEL-16952) - tree-wide: Use __func__ in asserts (RHEL-16952) - boot: Drop use of xpool_print/SPrint (RHEL-16952) - boot: Drop use of Print (RHEL-16952) - boot: Rework GUID handling (RHEL-16952) - efi-string: Fix strchr() null byte handling (RHEL-16952) - efi-string: Add startswith8() (RHEL-16952) - efi-string: Add efi_memchr() (RHEL-16952) - vmm: Add more const (RHEL-16952) - vmm: Add smbios_find_oem_string() (RHEL-16952) - stub: Read extra kernel command line items from SMBIOS (RHEL-16952) - vmm: Modernize get_smbios_table() (RHEL-16952) - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952) - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952) - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952) - ukify: use empty stub for addons (RHEL-16952) - stub: allow loading and verifying cmdline addons (RHEL-16952) - TODO: remove fixed item (RHEL-16952) - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)- test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086) - test: use the default nsec3-iterations value (RHEL-1086) - test: explicitly set nsec3-iterations to 0 (RHEL-1086) - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483) - ci: deploy systemd man to GitHub Pages (RHEL-1086) - doc: add missing `` to `systemd.net-naming-scheme.xml` (RHEL-7026) - man: reorder the list of supported naming schemes (RHEL-7026) - tree-wide: fix return value handling of base64mem() (RHEL-16182) - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182) - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182) - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182) - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182) - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182) - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182) - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182) - man: document the new crypttab measurement options (RHEL-16182) - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182) - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182) - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182) - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182) - generators: optionally, measure file systems at boot (RHEL-16182) - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182) - man: document new machine-id/fs measurement options (RHEL-16182) - test: add simple integration test for checking PCR extension works as it should (RHEL-16182) - update TODO (RHEL-16182) - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182) - boot: Simplify object erasure (RHEL-16182) - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182) - dlfcn: add new safe_dclose() helper (RHEL-16182) - tpm2: rename tpm2 alg id<->string functions (RHEL-16182) - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182) - tpm2: use ref counter for Tpm2Context (RHEL-16182) - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182) - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182) - tpm2: simplify tpm2_seal() blob creation (RHEL-16182) - tpm2: add salt to pin (RHEL-16182) - basic/macro: add macro to iterate variadic args (RHEL-16182) - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182) - basic/bitfield: add bitfield operations (RHEL-16182) - test/test-bitfield: add tests for bitfield macros (RHEL-16182) - tpm2: add tpm2_get_policy_digest() (RHEL-16182) - tpm2: add TPM2_PCR_VALID() (RHEL-16182) - tpm2: add/rename functions to manage pcr selections (RHEL-16182) - test/test-tpm2: add tests for pcr selection functions (RHEL-16182) - tpm2: add tpm2_pcr_read() (RHEL-16182) - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182) - tpm2: add tpm2_is_encryption_session() (RHEL-16182) - tpm2: move policy building out of policy session creation (RHEL-16182) - tpm2: add support for a trusted SRK (RHEL-16182) - tpm2: fix nits from PR #26185 (RHEL-16182) - tpm2: replace magic number (RHEL-16182) - tpm2: add tpm2_digest_*() functions (RHEL-16182) - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182) - tpm2: add tpm2_set_auth() (RHEL-16182) - tpm2: add tpm2_get_name() (RHEL-16182) - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182) - tpm2: add tpm2_policy_pcr() (RHEL-16182) - tpm2: add tpm2_policy_auth_value() (RHEL-16182) - tpm2: add tpm2_policy_authorize() (RHEL-16182) - tpm2: use tpm2_policy_authorize() (RHEL-16182) - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182) - tpm: remove external calls to dlopen_tpm2() (RHEL-16182) - tpm2: remove all extern tpm2-tss symbols (RHEL-16182) - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182) - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182) - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182) - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182) - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182) - tpm2: add tpm2_read_public() (RHEL-16182) - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182) - tpm2: add tpm2_load() (RHEL-16182) - tpm2: add tpm2_load_external() (RHEL-16182) - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182) - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182) - tpm2: add tpm2_create() (RHEL-16182) - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182) - basic/alloc-util: add greedy_realloc_append() (RHEL-16182) - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182) - tpm2: cache TPM algorithms (RHEL-16182) - tpm2: add tpm2_persist_handle() (RHEL-16182) - tpm2: add tpm2_get_or_create_srk() (RHEL-16182) - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182) - tpm2: remove tpm2_make_primary() (RHEL-16182) - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182) - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182) - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182) - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182) - added more test cases (RHEL-16182) - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182) - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182) - cryptenroll: fix an assertion with weak passwords (RHEL-16182) - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182) - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182) - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182) - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182) - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182) - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182) - tpm2: move declared functions in header lower down (RHEL-16182) - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182) - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182) - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182) - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182) - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182) - openssl: add openssl_pkey_from_pem() (RHEL-16182) - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182) - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182) - test: add DEFINE_HEX_PTR() helper function (RHEL-16182) - openssl: add test-openssl (RHEL-16182) - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182) - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182) - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182) - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182) - tpm2: change *alg_to_* functions to use switch() (RHEL-16182) - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182) - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182) - tpm2: in validator functions, return false instead of assert failure (RHEL-16182) - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182) - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182) - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182) - tpm2: simplify call to asprintf() (RHEL-16182) - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182) - tpm2: use strempty() (RHEL-16182) - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182) - tpm2: remove ret_ prefix from input/output params (RHEL-16182) - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182) - openssl: use new(char, size) instead of malloc(size) (RHEL-16182) - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182) - tpm2: use switch() instead of if-else (RHEL-16182) - tpm2: make logging level consistent at debug for some functions (RHEL-16182) - tpm2: remove unnecessary void* cast (RHEL-16182) - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182) - tpm2: wrap (7) in UINT32_C() (RHEL-16182) - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182) - openssl: add log_openssl_errors() (RHEL-16182) - openssl: add openssl_digest_size() (RHEL-16182) - openssl: add openssl_digest_many() (RHEL-16182) - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182) - openssl: add openssl_hmac_many() (RHEL-16182) - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182) - openssl: add kdf_kb_hmac_derive() (RHEL-16182) - openssl: add openssl_cipher_many() (RHEL-16182) - openssl: add ecc_edch() (RHEL-16182) - openssl: add kdf_ss_derive() (RHEL-16182) - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182) - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182) - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182) - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182) - tpm2: fix build failure without openssl (RHEL-16182) - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182) - tpm2: downgrade most log functions from error to debug (RHEL-16182) - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182) - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182) - tpm2: update tpm2 test for supported commands (RHEL-16182) - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182) - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182) - tpm2: cache TPM's supported ECC curves (RHEL-16182) - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182) - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182) - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182) - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182) - tpm2: do not call Esys_TR_Close() (RHEL-16182) - tpm2: don't use GetCapability() to check transient handles (RHEL-16182) - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182) - tpm2: add tpm2_get_pin_auth() (RHEL-16182) - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182) - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182) - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182) - cryptenroll: drop deadcode (RHEL-16182) - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182) - tpm2: add test to verify srk templates (RHEL-16182) - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182) - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182) - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182) - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182) - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182) - openssl-util: avoid freeing invalid pointer (RHEL-16182) - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182) - creds-util: do not try TPM2 if there is not support (RHEL-16182) - creds-util: merge the TPM2 detection for initrd (RHEL-16182) - cryptenroll: fix a memory leak (RHEL-16182) - sd-journal: introduce sd_journal_step_one() (RHEL-11591) - test: modernize test-journal-flush (RHEL-11591) - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591) - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591) - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)- spec: update rhel-net-naming-sysattrs to v0.4 (RHEL-22278)- spec: add new package with RHEL-specific network naming sysattrs (RHEL-22278)- ci: use source-git-automation composite Action (RHEL-1086) - ci: increase the cron interval to 45 minutes (RHEL-1086) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086) - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427) - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443) - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443) - udev: add new builtin net_driver (RHEL-22443) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)- logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757) - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757) - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757) - meson: Properly install 90-uki-copy.install (RHEL-16354)- Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436) - man: mention RHEL documentation in systemctl's man page (RHEL-19436) - resolved: actually check authenticated flag of SOA transaction (RHEL-6216) - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317) - man: environment value -> udev property (RHEL-1317)- meson: fix installation of ukify (RHEL-13199) - sd-id128: introduce id128_hash_ops_free (RHEL-5988) - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988) - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988) - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988) - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988) - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090) - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090) - manager: add one more assert() (RHEL-6090) - pid1: add new Type=notify-reload service type (RHEL-6090) - man: document Type=notify-reload (RHEL-6090) - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090) - networkd: implement Type=notify-reload protocol (RHEL-6090) - udevd: implement the full Type=notify-reload protocol (RHEL-6090) - logind: implement Type=notify-reload protocol properly (RHEL-6090) - notify: add --stopping + --reloading switches (RHEL-6090) - test: add Type=notify-reload testcase (RHEL-6090) - update TODO (RHEL-6090) - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)- udev/net: allow new link name as an altname before renaming happens (RHEL-5988) - sd-netlink: do not swap old name and alternative name (RHEL-5988) - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988) - udev: attempt device rename even if interface is up (RHEL-5988) - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988) - test-network: add a test for renaming device to current altname (RHEL-5988) - udev: align table (RHEL-5988) - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988) - sd-device: do not directly access entry in sd-device object (RHEL-5988) - udev: move device_rename() from device-private.c (RHEL-5988) - udev: restore syspath and properties on failure (RHEL-5988) - sd-device: introduce device_get_property_int() (RHEL-5988) - core/device: downgrade log level for ignored errors (RHEL-5988) - core/device: ignore failed uevents (RHEL-5988) - test: add tests for failure in renaming network interface (RHEL-5988) - test: modernize test-netlink.c (RHEL-5988) - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988) - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988) - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988) - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988) - udev/net: generate new network interface name only on add uevent (RHEL-5988) - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988) - udev/net: assign alternative names only on add uevent (RHEL-5988) - test: add tests for renaming network interface (RHEL-5988) - Backport ukify from upstream (RHEL-13199) - bootctl: make --json output normal json (RHEL-13199) - test: replace readfp() with read_file() (RHEL-13199) - stub/measure: document and measure .uname UKI section (RHEL-13199) - boot: measure .sbat section (RHEL-13199) - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199) - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199) - kernel-install: Add uki layout (RHEL-16354) - kernel-install: remove math slang from man page (RHEL-16354) - kernel-install: handle uki installs automatically (RHEL-16354) - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354) - kernel-install: Log location that uki is installed in (RHEL-16354) - bootctl: fix errno logging (RHEL-16354) - bootctl: add kernel-identity command (RHEL-16354) - bootctl: add kernel-inspect command (RHEL-16354) - bootctl: add kernel-inspect to --help text (RHEL-16354) - bootctl: drop full stop at end of --help texts (RHEL-16354) - bootctl: change section title for kernel image commands (RHEL-16354) - bootctl: remove space that should not be there (RHEL-16354) - bootctl: kernel-inspect: print os info (RHEL-16354) - bootctl-uki: several coding style fixlets (RHEL-16354) - tree-wide: unify how we pick OS pretty name to display (RHEL-16354) - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354) - bootctl: Add missing %m (RHEL-16354) - bootctl: tweak DOS header magic check (RHEL-16354)- ci: Extend source-git-automation (RHEL-1086) - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026) - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070) - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070) - systemd-analyze: Add tab complete logic for plot (RHEL-5070) - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070) - ci: enable source-git automation to validate reviews and ci results (RHEL-1086) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086) - ci: enable auto-merge GH Action (RHEL-1086) - ci: add missing permissions (RHEL-1086) - ci: `permissions: write-all` (RHEL-1086) - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086) - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)- doc: add downstream CONTRIBUTING document (#2170883) - doc: improve CONTRIBUTING document (#2170883) - doc: use link with prefilled Jira issue (#2170883) - docs: link downstream CONTRIBUTING in README (#2170883) - bpf: fix restrict_fs on s390x (#2230364) - udev/net_id: use naming scheme for RHEL-9.3 (#2231845) - core/timer: Always use inactive_exit_timestamp if it is set (#2211065) - timer: Use dual_timestamp_is_set() in one more place (#2211065) - loginctl: list-users: also show state (#2209912) - loginctl: list-sessions: minor modernization (#2209912) - loginctl: list-sessions: also show state (#2209912) - test: add test for state in loginctl list-{users,sessions} (#2209912) - test: add a missing session activation (#2209912) - test: extend test for loginctl list-* (#2209912) - loginctl: shorten variable name (#2209912) - loginctl: use bus_map_all_properties (#2209912) - loginctl: show session idle status in list-sessions (#2209912) - loginctl: some modernizations (#2209912) - loginctl: list-sessions: fix timestamp for idle hint (#2209912) - loginctl: list-users: use bus_map_all_properties (#2209912) - loginctl: also show idle hint in session-status (#2209912) - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226) - static-destruct: several cleanups (#2190226) - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226) - macro: support the case that the number of elements has const qualifier (#2190226) - shared/generator: apply similar config reordering of generated units (#2190226) - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226) - generator: teach generator_add_symlink() to instantiate specified unit (#2190226) - units: rework growfs units to be just a regular unit that is instantiated (#2190226) - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226) - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226) - test: add fstab file support for fstab-generator tests (#2190226) - test-fstab-generator: also check file contents (#2190226) - test-fstab-generator: add tests for mount options (#2190226) - fstab-generator: split out several functions from parse_fstab() (#2190226) - fstab-generator: call add_swap() earlier (#2190226) - fstab-generator: refuse to add swap earlier if disabled (#2190226) - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226) - fstab-generator: fix error code propagation in run_generator() (#2190226) - fstab-generator: support defining mount units through kernel command line (#2190226) - test: add test cases for defining mount and swap units from kernel cmdline (#2190226) - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - fstab-generator: use correct swap name var (#2190226) - fstab-generator: add more parameter name comments (#2190226) - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226) - fstab-util: add fstab_is_bind (#2190226) - fstab-generator: resolve bind mount source when in initrd (#2190226) - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226) - fstab-generator: fix target of /sysroot/usr (#2190226) - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226) - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226) - test-fstab-generator: extract core part as a function (#2190226) - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226) - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226) - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226) - core: use correct scope of looking up units (#2226980) - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521) - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521) - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521) - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521) - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521) - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521) - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521) - test: move TEST-23's units into a dedicated subfolder (#2213521) - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521) - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521) - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521) - test: abstract the common test parts into a utility script (#2213521) - test: add tests for JoinsNamespaceOf= (#2213521) - core/unit: drop doubled empty line (#2213521) - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521) - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521) - core/unit: update bidirectional dependency simultaneously (#2213521) - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260) - resolved: add some line-breaks/comments (#2161260) - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260) - blockdev-util: add simple wrapper around BLKSSZGET (#2170883) - loop-util: insist on setting the sector size correctly (#2170883) - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883) - loop-util: always tell kernel explicitly about loopback sector size (#2170883) - Revert "Treat EPERM as "not available" too" (#2178222) - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)- Revert "core/service: when resetting PID also reset known flag" (#2225667 - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)- ci: update permissions for source-git automation workflows (#2170883) - pstore: fixes for dmesg.txt reconstruction (#2170883) - pstore: explicitly set the base when converting record ID (#2170883) - pstore: avoid opening the dmesg.txt file if not requested (#2170883) - test: add a couple of tests for systemd-pstore (#2170883) - test: match all messages with the FILE field (#2170883) - test: build the SELinux test module on the host (#2170883) - test: make the stress test slightly less stressful on slower machines (#2170883) - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883) - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883) - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883) - core/transaction: do not log "(null)" (#2170883) - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883) - elf-util: discard PT_LOAD segment early based on the start address. (#2215412) - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412) - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959) - journal-vacuum: count size of all journal files (#2182632) - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632) - macro: introduce FOREACH_ARRAY() macro (#2182632) - journal-vacuum: rename function to match struct name (#2182632) - journal-vacuum: use CLEANUP_ARRAY (#2182632) - pam: add call to pam_umask (#2210145) - udev-builtin-net_id: align VF representor names with VF names (#2218886) - pam: add a call to pam_namespace (#2218184) - rules: online CPU automatically on IBM s390x platforms when configured (#2212612) - core/mount: escape invalid UTF8 char in dbus reply (#2208240) - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899) - udev-rules: fix nvme symlink creation on namespace changes (#2172509) - rules: add whitespace after comma before the line continuation (#2172509) - udev: restore compat symlink for nvme devices (#2172509) - rules: drop doubled space (#2172509) - manager: don't taint the host if cgroups v1 is used (#2193456) - core/service: when resetting PID also reset known flag (#2210237) - ci: drop systemd-stable from advanced-commit-linter config (#2170883)- ci: trigger `differential-shellcheck` workflow on push (#2100440) - ci: workflow for gathering metadata for source-git automation (#2100440) - ci: first part of the source-git automation - commit linter (#2100440) - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440) - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440) - Support /etc/system-update for OSTree systems (#2203133) - journal-def: fix type of signature to match the actual field in the Header structure (#2183546) - journal: use compound initialization for journal file Header structure (#2183546) - journald: fix log message (#2183546) - sd-journal: cache results of parsing environment variables (#2183546) - compress: introduce compression_supported() helper function (#2183546) - sd-journal: always use the compression algorithm specified in the header (#2183546) - sd-journal: allow to specify compression algorithm through env (#2183546) - test: add test case that journal file is created with the requested compression algorithm (#2183546) - rules: do not online CPU automatically on IBM platforms (#2143107)- systemd: Support OOMPolicy in scope units (#2176918) - systemd: Default to OOMPolicy=continue for login session scopes (#2176918) - man: rework description of OOMPolicy= a bit (#2176918) - core,man: add missing integration of OOMPolicy= in scopes (#2176918) - meson: Store fuzz tests in structured way (#2176918) - meson: Generate fuzzer inputs with directives (#2176918) - oss-fuzz: include generated corpora in the final zip file (#2176918) - unit: In cgroupv1, gracefully terminate delegated scopes again (#2180120)- journal-file: Fix return value in bump_entry_array() (#2173682)- test: add coverage for #24177 (#1985288) - logind-session: make stopping of idle session visible to admins (#2172401)- journalctl: actually run the static destructors (#2122500) - efi: drop executable-stack bit from .elf file (#2140646) - install: fail early if specifier expansion failed (#2138081) - test: add coverage for #26467 (#2138081)- nss-myhostname: fix inverted condition in (#2167468) - nss-myhostname: do not return empty result with NSS_STATUS_SUCCESS (#2167468) - sleep: rename hibernate_delay_sec -> _usec (#2151612) - sleep: fetch_batteries_capacity_by_name() does not return -ENOENT (#2151612) - sleep: drop unnecessary temporal vaiable and initialization (#2151612) - sleep: introduce SuspendEstimationSec= (#2151612) - sleep: coding style fixlets (#2151612) - sleep: simplify code a bit (#2151612) - sleep: fix indentation (#2151612) - sleep: enumerate only existing and non-device batteries (#2151612) - core: when isolating to a unit, also keep units running that are triggered by units we keep running (#1952378) - udev/net_id: introduce naming scheme for RHEL-9.2 (#2170500)- udev: make get_virtfn_info() provide physical PCI device (#2159448) - test: make helper_check_device_units() log unit name (#2138081) - test: add a testcase for lvextend (#2138081) - pid1: fix segv triggered by status query (#26279) (#2138081) - test: create config under /run (#2138081) - test: add tests for mDNS and LLMNR settings (#2138081) - resolved: introduce the _localdnsstub and _localdnsproxy special hostnames for 127.0.0.54 + 127.0.0.53 (#2138081) - test: wait for the monitoring service to become active (#2138081) - test: suppress echo in monitor_check_rr() (#2138081) - Revert "test: wait for the monitoring service to become active" (#2138081) - test: show and check almost all journal entries since the relevant command being invoked (#2138081) - test: cover IPv6 in the resolved test suite (#2138081) - test: add a couple of SRV records to check service resolution (#2138081) - test: add a test for the OPENPGPKEY RR (#2138081) - test: don't hang indefinitely on no match (#2138081) - test-ndisc: fix memleak and fd leak (#2138081) - test-unit-name: fix fd leak (#2138081) - test: bump D-Bus service start timeout if we run without accel (#2138081) - test: bump the client-side timeout in sd-bus as well (#2138081) - test: bump the container spawn timeout to 60s (#2138081) - network: fix memleak (#2138081) - busctl: fix introspecting DBus properties (#2138081) - busctl: simplify peeking the type (#2138081) - resolve: drop redundant call of socket_ipv6_is_supported() (#2138081) - resolve: introduce link_get_llmnr_support() and link_get_mdns_support() (#2138081) - resolve: provide effective supporting levels of mDNS and LLMNR (#2138081) - resolvectl: warn if the global mDNS or LLMNR support level is lower than the requested one (#2138081) - resolve: enable per-link mDNS setting by default (#2138081)- swap: tell swapon to reinitialize swap if needed (#2151993) - coredump: adjust whitespace (#2155517) - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155517) - Revert "basic: add fallback in chase_symlinks_and_opendir() for cases when /proc is not mounted" (#2138081) - glyph-util: add warning sign special glyph (#2138081) - chase-symlink: when converting directory O_PATH fd to real fd, don't bother with /proc/ (#2138081) - systemctl: print a clear warning if people invoke systemctl without /proc/ (#2138081) - TEST-65: check cat-config operation in chroot (#2138081) - TEST-65: use [[ -v ]] more (#2138081) - systemctl: warn if trying to disable a unit with no install info (#2141979) - systemctl: allow suppress the warning of no install info using --no-warn (#2141979) - rpm/systemd-update-helper: use --no-warn when disabling units (#2141979) - systemctl: suppress warning about missing /proc/ when --no-warn (#2141979) - shell-completion: systemctl: add --no-warn (#2141979) - core/unit: drop doubled empty line (#2160477) - core/unit: drop dependency to the unit being merged (#2160477) - core/unit: fix logic of dropping self-referencing dependencies (#2160477) - core/unit: merge two loops into one (#2160477) - test: add test case for sysv-generator and invalid dependency (#2160477) - core/unit: merge unit names after merging deps (#2160477) - core/unit: fix log message (#2160477) - test: explicitly create the /etc/init.d directory (#2160477) - test: support a non-default SysV directory (#2160477)- test: check if we can use SHA1 MD for signing before using it (#2141979) - boot: cleanups for efivar_get() and friends (#2141979) - boot: fix false maybe-uninitialized warning (#2141979) - tree-wide: modernizations with RET_NERRNO() (#2137584) - sd-bus: handle -EINTR return from bus_poll() (#2137584) - stdio-bridge: don't be bothered with EINTR (#2137584) - varlink: also handle EINTR gracefully when waiting for EIO via ppoll() (#2137584) - sd-netlink: handle EINTR from poll() gracefully, as success (#2137584) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2137584) - homed: handle EINTR gracefully when waiting for device node (#2137584) - utmp-wtmp: fix error in case isatty() fails (#2137584) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2137584) - io-util: document EINTR situation a bit (#2137584) - terminal-util: Set OPOST when setting ONLCR (#2138081) - cgtop: Do not rewrite -P or -k options (#2138081) - test: Add tests for systemd-cgtop args parsing (#2138081) - resolved: remove inappropriate assert() (#2138081) - boot: Add xstrn8_to_16 (#2138081) - boot: Use xstr8_to_16 (#2138081) - boot: Use xstr8_to_16 for path conversion (#2138081) - stub: Fix cmdline handling (#2138081) - stub: Detect empty LoadOptions when run from EFI shell (#2138081) - boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices (#2138081) - boot: Make sure all partitions drivers are connected (#2138081) - boot: improve support for qemu (#2138081) - systemd-boot man page: add section for virtual machines (#2138081) - boot: Only do full driver initialization in VMs (#2138081) - dissect: rework DISSECT_IMAGE_ADD_PARTITION_DEVICES + DISSECT_IMAGE_OPEN_PARTITION_DEVICES (#2138081) - ci(Mergify): v252 configuration update (#2138081) - ci: Run GitHub workflows on rhel branches (#2138081) - ci: Drop scorecards workflow, not relevant (#2138081)- Rebase to systemd v252 + systemd-stable v252.2 (#2138081)- build systemd-boot EFI tools (#2140646)systemd-udev 252-46.el9_5.2.0.1252-46.el9_5.2.0.1252-46.el9_5.2.0.1252-46.el9_5.2.0.1252-46.el9_5.2.0.1252252252-8.build-id5f10c4b178f27f5e7acc6bf3c62eb86f35ab285a7f51de58a338cd0326d630b4c158bc363d48d96eefiaddonx64.efi.stubaddonx64.elf.stublinuxx64.efi.stublinuxx64.elf.stubsystemd-bootx64.efiloader.conf.5.gzsd-boot.7.gzsystemd-boot.7.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/5f//usr/lib/.build-id/7f//usr/lib/systemd/boot//usr/lib/systemd/boot/efi//usr/share/man/man5//usr/share/man/man7/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpiozstd19x86_64-redhat-linux-gnudirectoryELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, BuildID[sha1]=5f10c4b178f27f5e7acc6bf3c62eb86f35ab285a, strippedELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, BuildID[sha1]=7f51de58a338cd0326d630b4c158bc363d48d96e, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)RRutf-8d9f6769f01b08a5ca677d293fd14e5776d4853a3bfe4a548ccbac1b1bbeea76d9452438ea58ace402144952bd03c1ddde41246f0ed3f9e8cbdc603c6a80dfbc7?(/h`T fe DzAk^*x(P3?r`4f+k.(aW9R0y(-֕.PW j P[26 Q+uUz'7K֪ljK2YSb fq2Pi eVª\zVF6Jh+pC/w ?KE1?TX4qdpY6h["֕lT;vww2o8o`j>&^RtrLsH .7]r+ur[:D6Z`-9T6*|ku4?*?q6d/5 EwTh_z澳iGJqZ;69 g1!\O{pT/jS=-zĥGij;})Y~=au1-zblf/8au^ˇљTazkF:b}f~*n|FhMU`L1t܇{/\0>$R8ga^J8rl.4gdJ] O1w\l; #gMARu$_.`C a%Dc|;sqb@Q0"oH]QE&|jOM1{d9:[Li97aD2ұz0&6q+fHHK½5*űcIƨF^i:SoD [xB>x͞Ι!"<{D1WP=qDVa)A;Y贂!0cA?mr#yfou{PcW\ܱˇ>wd}K0FL>84=uˑ) ;9'Qxo8>|g7f =_:]82Z4pwزzPg;fTXa7GҴ4HFc7ff7-dMXouAm2ρ!.M~{l~BKK9 RiZa4ѱ@|MMߒ$tHkаRd]2- hvH #UZ'<|l)/py*ؖS!G%^RTE++UP(ث*W718QWpފ༃QΛP⍎PUPiscǰ5X=zHQ yHiI5at ܒpTؙr%'xFҪ)TrKQe"CFCTSȢ#єq(j$4dR!EUcQPєoIz`ERA;UA1TPGUc+K!Fȩ*!)#**"鑐yt"2ң qΣ;TDvS@AS; qjHz4tdtV#c\B1uIe@SWZ݌\xz%rtPW>͊yX #!͡[98[s(<{ZԱz-?l (ü|ONf3dB%8s{痎ƀ H'FxisjӄF~%__dtZ@&G7+,9SXbՃcKdU"%6@IH$2$bS Ӊij.Q{Hu?h@K2Q3y1-7;#V.z`G`ӑiBY&@5U2à./]!;Z+]'C={:*wR3j߫}g zSᄫj ߳a`,{г!E`SqJCF:HQ[r oQN"hc -H5Ż%1Xnɉښa;7RHD >!TP(5}ik`07T@@DKQsJ |A`=L0jZRTeH 3$c7fHA-Vi[[Ġ F $[ocDRUZjUJir{%'A %A",5N$tdK|W nSVXqU!H^IUx( XᥗJ$Sm69>/.;u,blՅ!jPsemhVBv#*@r;l U .يkc9@eNP0=D+?ݏaY{u;jfTYE|D̳kV]ex1߃LMfvxMVgkS}]ScA![#Oqޣɬ1Œ*pA3GWVz`gCdJ%wF54F5W][ЍgzwD젙%T e{ _G_d29ȤEb?H{,ƥjtH六 =r\(\&t1*%ՎQ 3U"GT8. HM笿8A[͵fy<3w1%bD}1'h9-dy>BU {{RgUBr&_L|kVߩpQ!8;_z?u)Q\)E }{Y9pa ;]`5FJMQwrB[Ξs0tjɘ" `1{0]jwN,ly4'Ț,f1_H V"m75wyBG q15A4傞Ci@*2u )fȦr"*2:B&WT[_E3*j*FoprtvzpSn,վAkJq3#4 !$1,Qr<2y `ѡcOu (@o_(OS~3KRVk@Y$"2aqeL&f]9(G(cyg%X\@7/pP@`Eـ9'>GfMƺ C9m$AI!g;A6ۦ~u!?`& $dli"} f6$Y!FM  I %xQ*qđ"ͧL|'n֒: #5- nZuZJvlBauy}]bpVhW K!JbJ8/aʞa>gSG u-HXorߎX::2 ,xQʫ,a&ۭA(؊s 18@ۑ;7B;vR݅i3_IZ %tzW$J0HJO9}Gu>2T#dd]4J|S4"χ\|%?)=g4eqD䷘%.畼|+|04V7֋* U]TS:'&q=8*gfyTiK(&c5O58d&kih>O9\hkMJ]"%"2F#q0i_\ k{8.{i7㲃aw4YMՋ};)m@߹f=4| a~ {Z-0|; }Z5*&2;VVNs}<-߭U7B utNzO3ߍٖ>|pN)w+3wnb=2|[Vnך B<0 eZ"@ eCQ#\,CNXބX7 777<˛( tTrL r$"Ʋmp$LED4q$0  '](·q*X|6hLZ)g]e 43Jx.w'֊<8@ᧇlT0Mtf,LģDoX#ن͝tyGeΜ*?6? hfYʧ9~zs2cqwm`⼯>G!#B6sN ^4ź|-?^gewkM$ۣq44Qߦ|9^D-6TBٌbZ66DOD.%d}&Bҿż0XZ. yyosͿ)ￕݒpKsV0y{y5hĞQY_ pVx L='iazE{}TF8."8BoУӬ^[߹׫:TqntJ- ~ex?{pv7_uoy(nX Ad>fXS/K#WtO뽟U\B@`3o~t{&ILcYI{I]~MZ=AץߧF=eȳl_;QEfחCMTf$akO*@6Tj6ww%n$Xu|+K{]EȆmH͸IFYz[uH+@%D&=N!S!?Cq3n.<$%*ed/fn7pq6wyecd7==Jrod9 eWnH/ pug֟ 6NJ~TPͿ[veH} $; P[otu;R7{֊.T='XpV3PFo=%31e8d3$Ag~ot%S_Q:JgXD9s۷?C sQm2G 2Gq]}e* $!I&֜sc2i$Ϋ: *Ҿ X4? 8R~D|,. xC{*)W$! fq }̶6;a;?S._s]= 6޲N38N|ުhp#h^,eNu;Io:ZtHmJ td[q~^8դk+!4M4UkATY,ɞS#2lW]ކ=>e4dd}wl>NǢ]2)3'( t`/~e+=ir<Ď׼흮&,q&A`bç=`-,{|KJڔ`*Y]$C+IV3`Kڢ4֍EcقU ޅ*QHHԉ[Vt0?Qjs =]]Q;>J[6~vnS[`RQ+Ն̜!iJ:$0@:pRn?I(T=KtM XCE# +D _ItyG -jƩKZwt/q[}#Gx/VF\wbŵ'#mK\*^d&۳nx&'Ԭkӎ \Q~Fݸ%KE,I |Q "zʄm'|g.3Ho2y?}֝=׉c$ᵎ8f\E=c39nP'D9.UCC SXLB6.%Yib(;A)%[b$JQl'U"0W֔f]&; h늷P $%?g&gWt|i³GD55`Ƽz%$ 㞛s6[`kE6Z" hX~APmG|Աf=wjIĞ3{)[$He,#dY@cS(9堼X ) [Q֮FZ8Z6 ib $`i ~l{9~ }}|+LvEtgESE9oL'V;/h**P[%feDoR7ii~&I)|$ȑ6 \|V}p7@ɑRpN!qܓ9C`oGw/oԾf[tPy\1YMfԶWA94{. >B-+=֘2cih%66nm`ݻr6@Ի* onLwSe,{mƽ+tքT:>^vb6pEx 0$(t#!6"n4zꍏ,2thG#GGw, >+][: ,YD](OBӿ Q*u7TH/UğB!7%3{+ѴGD)H\ΠlDoil-<("5 ^'_ח; >a_|q&7K bJ&9@~ ֳw4r̷͢i5K) ToL" 'R Ͻ:i:Tz2|)o+ BE< %lfV&4"l;3`65́@$U ]D/m;4+J%ɑr KOV:R:[_/7Ey/[T#+W Q¨*9R6xdI隆J6b@>ot*hq9N/~s 2o7j8(lxsBG,jvИN;kgT(נz@uU + 綂=j茂HVg=ƉxgqUϭR.D..y:.gf BmՄJBvEb<_dɪJaGGu*Orv_FgI;n>b%S f"zݙ0eg"qs)`zPmwS$"AO(ᵈdƟb5+ W\Q|[#N,}hSoX.STԏ+ч3@{뢧X y֦^[h$ٲ9$Qy%DǏ-,҈ Z}F\ kK) zP2 yavmaں2pOel8@HϘ1(v8F,m6ɬB.m\8/uEnuR6~"eI1_X:Ƞ34J2 ƱsR!AMpD=%߆a^^HI-kt13]S6lɉ$!&D\IJP _-ЙH J"Jнh2#h\&/ŜOve֪QO04f>5][LF.cvIF!+-Lʎ'MFGId=%*"6t< 28Kܦ+2boW7֬#Aeg_-{2*8'%(g" V4"Kf[*̈[÷!ŏiy8eHZJI_.  ۻUQAގFPf] Vt;@|/c%yys-8äo`ǎsu5 yiI35,g{D+φ,䧺9ܛhO-5B>9#cdڀCϪ# z.\%V-`fB?~/_%(&ͤQn6\$+.`\<\7^+j.8gI!c/VDbs";0Ǽ/`K !d:'Xn-2;$yn-+`Jke2>&vmP/|=)S6^_lζky].1 e+4`Yև%t;.I%L!kAB\P!qdhS,/{`kW<MM}Z=ӊBawml5/b[LOIɴ!۾t`ŀ&`1,eiůFcY`!V$<jbyQCw?°D-cG)mlu %+e-%{l6>vvrk1\]BGޟ,8&$va~8*ny[dhHa\ܪQ$~|ʏCrCblh)4xSe\Ah#5EgWB|P+7 n);07k0M -C]%UШFxS#v1Io˂*8 @M .xhK#s|u͝.Mph, `$騪uO;jtSF\QPe>SDPk!G^"IicD(EP0 MݼD=QoJ~ߤ !#zŸA0+"dOmxsWGIUJX vzA%2-0TwyXWE3 ? %P 뷒 $DJxD7Jlթsóu<3h8=rzjK1^ 2R} +';"0^T)Y a>-D# v6OFIgo =An r(mI[Dk E⎤]:}H(}:-[.9NE 87[} }!R;T~ݣrh 8OсmnqK[=9| 8{JKʓkWu({ j?αv_BZ9m,6{L䰴iws } U(kPl@=Uqp~j' Pxxd}{b^Iw $,5 Mg8XBeXοZCޡ'W9Lg~"pD]o< dv^@)U,Wp^f dN{]jDY-Mi2 _5_.A!<6]<-T??n![S ] x6ٵS{qaП ܷ$Kʂ(" Q,&],%0 7:㸐r${KiGeCm1;_?ĉWÁ8.3諠E&!? x83 πh\:QBU+ zL-!\b?[0⁃w4ep]$Tl;yҠȐeH)hn+GW9¼G D9tE;!QcDX߆ ΘUac <`B0 "DnF|Mڄ9%[DhEwN5!әE~:W5vHn4ZEÜVWEi/Z5ZQ4~%sSjQ(UK E7pZ½Gi6ZhX D0K/itS3; ugaQGygs#PΙT)Ę ƌ,z- r)c0u J$P髊z . e:pJ\@z#w$ݗTW JǓُ%lÚZX hJ3x"tK+y#/wv]@8!=n4ǜ-sh8ܘ}3ncEB݃ қ'<DHPb #{oye4sn- P7ٶ Ys3Y@H>$^n r [f39"7 b[pqNh(Q0w',9TE35ˌ7h>9XLDon1!d+1YQCb-13Ձ(& in"sm&]#5 u4E,c)do6;ϩTZvVB |q\ea=Ѕ{9~(lS5r M7ݿ`/Xy;Kt{߻jA5$2LR!PWd R#/oD\˂_]Bۨe^& DJMeCӑXDNp(lP ~z`.Ad#:>I: ; $!c@ Z))!O/J ZD Gd#0Mu~IxiK+bRz+N#6"es!d^]\[ZN&* K?)YZ|?l#MrOX`:o5UKvɬwO~[bF)9Y- p#8{X:C8F,F"׀'+tV I7cz<&Ti31,>&,UL|/?!kb +j$MYgjN6H_=䪮lάũ5ӣ&ZBW&DؼjA/&@&T RX!n郬LkUU +}=i (i]@RX€-?BwKo |hEF 4㑪M)R:jDn(/eK[2T58Ԗp<6c=@8҃(ف65(v+f32f21;#;9ows\X!"E]ߝ'ץ:E)#5"7"Mi_ؒAib6q~r$缂OCov0ߘԄE8M$ќ}{ ~qqK-pmcyr1;0~5gm^R-Up#*vB3m7p2 ߒbE\yǪ<>~ܐ= woCc~&mͅPzN߽xDޘDi& 4ܣgj(R #1 v`Z>MOqԳɨ맊ӓqRѼ63mL0QA8dC0.?VE(dt}N^Ƹ`&;aTIϮI}ϻԽ0G]^װD. 1 ^Vg\\G1(Pܖ ހklFgIŲfw~MF"e_ͅ^W3N}(4D^ZXJ^u *g 951іIڰUIT }brXM7 B YZgGɓ^s_*q$s&\7 -bH<&li)pquA_J!I"9 g$-K@BD ]ayBܘ!9DUI0A-"V$mhrZUHǶ:HAQu,8T90mcm]79 pTm>]H6Q ٪GlȐdF^ζꪡ8*z-)Cz"r=-~YXsx \Gk?28jw򟆓߸^s]ð,ܙ1e)Q72 HEYh{oѴqqXթEsv#,rw:VaMOrBOOj ,lk(hRAc梄:_g#myzx6b'oa{]9a^nu/6|{\뮫 ۄBI}tӶSm!j\12R- 8ٹقNEu3l :_v3E5֩ YBEJ_ yHP 5StX3 i4:uT̳3K5J9ZzJLbS mJ9RC' gunN=eFLv^^ B^![$XPCZ@+[Yq$PRVUK*uI1YU@AOk\@X;Zl !r#+~Ү'ߎh3>3cCٓu U1zֹ4u(ODZ7bɪIT*Bb!af9,iBABԪ4q3p7?DdeԌ}*+I*3aY _2 s`sjԑl& /**k h[H]7+/(@.( Ng2:.Xkh]hR?{лqnzJY˚cǻv'0zkP}b%nn 鵳a(̽!rJ@Zu̳xÛ$,:k[ l(uY7wG[$+1d,,C%Em䃎/H@TUu'Dbb;.en*C޻##<٨+1Lh@{+4~Uh}^Y tB@WJ)jً[oNb~¾eZY!1 Yc03ٔD2 \`/e4>p"O4)eA'Ϯ^yZìX8U E6^,s]J@[CM^ ,/pqQz*0TI.мjIO%nj]R/IS*C* Dy$uϷSZ.;Vxy56Tڏ#MIaЇd0sɝ3{Na{乩 PvJJ[ZO1 Y_;0Q|_[p<{+Z~ItWhJ*Q~I,3aױq)j$/{eZ~rǷśjs;WR,sNSWqNc&kb 9I%'/ܢ{HpHWQ3. ^΢N:l4EPY}'e[Z*٧g?2ڞ$榱AS1&wjUMצzn\BKqW{Eܱ&8kX羜vc2Xӊ@^U0.ZEdT+.6r9oeY>}dwq'V\R~bU]UK0\msxs%d}1Q0] o$%j#,2'!1b.A]Ӊ[bεGλD_!Soss2kKv7z 5?9V2` B.(I[Uǻ~>©S (>RM|WpD~s=j͇ۤ㢻s5ߚf?łq1 }a\̉2^=JP壠j5ww:Y/G`{e>[&,=I{tu8OM/|nDHv.oޅVӬ~Hۻj-Gԉn3 ?8ށ}F]jrhX'^Xo8eYzkM)'bzLט>zn%lXP,.m7|ۓņ_KO갧;O/dsHw玨z`Is2x}ya1PիwĮ)4/;jrjlJ7owbׯx WVM(L( .c0)]ŀNރ56!Y챞O<5Jw{`y);ĦƐ d7 Tىߠe\YS1_3EtSB40t69TajB+TVӓ h1v8Op|P F Lr#no ls,CR (0q3AsnVo XdX1F8sdwB$>b/"R Zp"WN! ` ڲ{t}0dRU᝟U#)ޡ<$ *M(|]H~i: *bA Gu@D<&.#DTG"ERN\͂^221H "7Vh%gaOH(P/߼34ZNc4p@ɃpIKDZjHi.Pں-gB>eoUs-[V Ȳ[{|OqjN9kK\H`b nݚs%Ӕ A+OBdɄ@^[­88w>@i;|a| K.k`aIN:i!W/{> pϋUon0$m'pl7iwٓd95\2p{u0I)BSYnrB[I0kr#}̱rq^eO$t!9k] 5N?m6U\N^2սɚݼu3j^xX> Wk] QsG`08SJڣNJM⫇.-eNO!4c*G~*}E3 1UD#YHX$c(?|w\*\y;6#HJLU 3TuqJVq Xc׍J_E#);vvcm?4,pHP2 zc#d%_b &[cN!ݝ| UigH&& ,js- ~.S$|L&@[+\x`djuB|Ʌ,mTEM lOÖ=`]}(#TC+Α<!(sf fn׺y&z] E٠1KaZZpFB#0D vմxf=ƔQtKv/ Rn~"oW <T@ 2IDƆ#kKU%1eY%2*UA) "@Wl~\1]=P% DKqA+>aGdH]F^PM>?_MM՞/ 2WĐvyvnŹGv=ڽ C"cah#P|uZqΠrO-M/ N&9T RCs8'go^i-n-~؉z^4Idp;F9?8g/z&l nM?۷G7;'}in|2W*0 3wx+3қT?w=ԛXfqmfw'Qd 9/)QgnmܤF3;P7 ߜ( "Һyfro֋AJXCn^=7IܒkGsѼ'apO{( JRh4y 3ݓ'9h:*}$ydhiܷv26Vmn nưZMߤ5RDjHeY3Bq˸ S֮p>}Fƹsx'$qAޟvf"2{B-9PHi,gμӒ.ݶcŜ@y[bJԩ؟B>)M_4T[XW|7кo󷝣A>efa׌f{s>6/׬#bP?ކ oA_+]bT|ފ/'aN@أ3y(/v^oL/&gk^̖qkİy 5@]o6\Y5aЦqTQV\Tݓb Ӭ_u)'f[@뺆'MA-fN['}±\Bf;_f`xR25P~RMVe à9Tt_]xi"~نwx6<##I7v#Mj_ZSir;jys3*/5"1մ<:j U#Jvv l( ?Ȕ}LB R -+wuz/G0l=;[-BBKw:cFc GМXJNC]n| i\>#:mf+ϵ3Sze";&A:;ɴ_4P|+;4ڕIZqV%bJ==7i$y8pg:P&](jsUf2Ġ"?QE=r(5Jᒦ]N%a $.% "4 0z;;?&("ezB_l|wy9_Ȳ-=:5CX;@"ŭ_T%Cn /겨09bR 1`s&AİWd-XI?[IL8.uqAuYOGCth HH~ G`B*C""4\,^ƛ?HSD\g# (a\d1 (8+׼X6Oup*x]M2/ :ᾆ7{Ͷz`* [\~o '3}JwS'=LA~mՋp 5.jL{NI9}{?"z+eidW/3`6 5d3]U]D완yX=씧 W=xq uKU0 LEAqG%\̓wS3;Wn3Rz֬-_1;9` 7uZ7Is*n'k:^:xmC<jCZܗ t Gϻ[t+|t)x>ւ(i-hff>Я*Oz|fhXj6<ݿC~?ॿ{fm+㈇\/FWrs;N8*&5 ¥h+"b<V5ЈPzحhοoaѠ%VXxذ?x$P?A%CP P-̓VA[.ʔD!7 T{teԌ*K!$F'F@l[dL6ԖvRTB$#'D]7"?4=+L&mFP"^BL=| Qm,7w:iD5yY dڂ&ST4UΟB V:g-diU7<m ŀtǫʬm'PEop5g*2.D69* (0b1WҀ ȿ390-7u)2`.C*稻h-ݎUt||r~two仕nltĈ_Q1q$X$j1fl~^97,n65gisք.§F[/Zh9g-|a7M+Ud$WqnsވMJf##lZiѬ٘۷yF4Ql\VXmgKV?QY&{Lz4iU?lR!7Tߝb??Ly0S(\nOoB"* cvZ4`Mܳ>YYc`c0nT o7\klf}#X4Ȩ7\z.n4&KmxG(b$ݶnNJj xp爘wj'@u>^s8awx{f#  ^WX- 6fX?,3 !;_%;_xг]^?{?79xcpUـ)Y,'Bp9\9Q "Vs~NeYOC"aa, U޼gṭq$"0AFB~Mi_mAY$@W<-5ܛgsdeo@65St[嶿ɧ|-`~㻡ٟj>9 r@hZ| ~[0uiH?,{Ha!&.'N0=0,@} 89a` `{! >CFoXbLNc)ݛx0:n솇lmV;vM )UV0-5H>+S!ua@ K8qipǼ9~Td!Wٴ >=%k]BgF욡Wv/f7hL[kUnv<;t.^O'v!|sż*_`\kMd}tn_߆Tf4@ei$1cF}E}vlEEZSrT[*2\Ӷ+{=u6jM4[57'^϶]S`nNS/s<֕`췔OOe\=/ {x}# ݯ?'OC|>*WudwӃ|dwZbjw%|NmE-)r"Mj#02Î"HHyz =4-+jι q!( Wr&}3=Tg%/9XjlO<Z>1Ix^@؃ÿ́=H/=sPLdo}t2Mj\z T mWu>m( i6OB,w@v$0I{@;ru˸JPN?)fw\H~l>2/a&@*>u~b.| #rKpX_@"UwT%C`eQȚ~?6챋G/O 7Q"x}(p@qS%<:hK)7w(er{.1+p#ģ$A$~&nFZ) .ա 篼E||^_ldwkuWx=SHzB[:eq"= ޳췧Q b5W ^GAc9򈥱=Ml0ܫ$l |BSl:BGG$}RW1%c8;D{P;:ͦoƓWPO$ilSe. j6<`.v9o@W;iK4@<Bo'Y DCM](r2P|}364*=U@4&}:nb[<G mfϺ d@eZ{bzggn6xzܦ|[l$1.hӉ 6xf m# yѿ|goc$n(/L~[S)5Wbc;W)XP*Цg',$DgB\ q!-q\OBEV޳_(""[$nژQ$BIm!ʇVPA~4f+,K)[gG$P'dPWTRdjT#x"Gx &u1zwzSt U[sx(qxt] `/ݶ7~@j6E~󃎀<Ñ0ɒG&<Mi){5ZPE>u?(E!!EP tLD0IjԲ9P1dC׆^ƿ'B耘.U=ZgtbIhtũ~ 5CB] |Y C ~L?GV{"JLU87̋Ot>]JRoq3h# t26~>vE(Ơ@Sؓg}:-R5$=b.#Ҫpin^i=Qz|7cI|`N6m0cXttҞ8RLp6ɓt[rf%zUq$}wƻo~Lk~ ttI0mbؖ]1 M !~jݿOT!dspA`6+v7?G+ᴈPzkVY+5k'(+rԗF15{ ݗir;Lу{ӜrT6Cӧ4=jlY+%iK$$Sqт^D(CHKPUg ,'dIIqC$ 3 s ?Wh,;JkRd` d"Yy m~!ATIDO\Tn"~8zA[ag7`I*wcꃩn; 50#I&0sa!o| *v MvZE|+A~ˎoҘXh9JuĢsh%1:1f@؃ܫ]kߓ}eh!j^S5g62.=o |<뗪<˖]P00Yd vG=fbm, uhQ[hBB cqC +$11#zִkD8:Mƶ.Y$pVlE3j(q7 ҇.PIDSL6S4<.#q3.x)0<7#ꢷUOgH%X0[bW@*roPY ܖ:j_ts [K"68P`rP̀\˖E:9o)GU>-p2T$ >[&H+hqwbcP/nP5Q ._3:kxP 5Dz3`Yq'JOTzRoBSqIw0\˜56*|˄N{|D]X( ؁qq*x#_o$Ύ>$+Na-Y)_y!#%goju70;t5=H%yi\5P$qwbpvtkzώ>Q" =y;S9r2nEh y)PxF˩+ǪfZ[ UFjetOq$&-a[f8d!߯͋x葨pI;QUN!ა&m'FhX2L1w9폦Z p52̌!  P~TyNv 6=͹YH;n/$OcD="Mh J %ڲ L}g槑R_.YqVɄ2plkM5PVtZkR92]uHWa)W=qP#mp>/2<@?" ǤLL-L[ vTW\ӡK04J9'{jCa*Bqc uwR Ks<**ng.pl3*\R.'2-ETʊ'-O^EN1 -M%)Q>Hgm{~GLS"\bUy?Z+ @Z۞`ҿoo}>um`ҏ(y70NmZoYIAw@-kL8T{ %Ŵl+c%vb1؆_ kEbiK+m>-ڋ7΃ + zgV~Ym ,*Yi#No%)+ C Q)c'jhu5?@3NOƈs QfUl;b" ,Ћ'ÿfD{_{~ Ħ?hSR:$T8㽵;i7si9' -p[ʻwJ*RqfXc^ck:V{lF#Xpqx.GK#zn#$GF88]d5֟DS&uw7z<)Wb4V<%=a?vZ&:9h \ؼ"veたHO>#E]/;Kt**nm /M'dN3VwEHȓAqiB\?V8Umȿ]Eȭ)?ڬ~J3f:9l6&'KFc*;z]ˑaXgkxNa8=>xD>Fn1Xrr ߉ӣiDA6?5BbQz~Yr1zJwj5NE|ʻUNQ\p) Jgo^G~q15aC}ʓIv w*) r;mnd˃|7b#AV#" R߆B+zos;#Wwo0/7=HBqL.}(M[L@X_c 0fZDL_z baOZܿg}o~tŗx͎r+HJ>7V?3*ր! 9SVD$Y& \՟?H ʪ~@Ճe[pXK&3.!ܰD}e)иO1\|l Zx}Pv{R'_ GS35?i0Ӑ_աt?5"GN"yq!&yi`8Xg &.*]xPɕ˒NZU`K6 aĶ SUV@*f*u1#ҹ ##yQ`z\C I\s X8ا7UNH[. l\C5)`56XbT9, }PNvTF` 6qNY-0 A@LBB7\cɐ-sb6+RM rdW#4TqQ,0.qǝ>xH_ Rk$9. ׸$^M}lE7,Mr#(jׯ^пGVȗPx/%6ǹiy"h(MBܩ#6 cmXfRx'Mv1$~Hi mQ)ns:K,]`َu&BbC>("&rH@OPt7ϒr0&U E?㧗g}*HY> r3!z=ۃbo h%0J,5-2ҕ@Bvff/0+y5Q[$+ֻ:w!~.2uhXcx K&;ّïZdL:q@l@gA.LQVX:eIr\b8F0$ }]:Ȗ1#-gpLRR'{ȧ c>*߷St)yįJ)DyC˛W,k[Y*ؔ}ɱKhnTjb )i\@YZg. 'DQ<*{ʋ>x=7EJe?XJ8:6x. 雀GecFvR6 $9BY4\0JQ"Ut$, kL"޼9tYqBeXM D/o_}.x4+8(;hc 6"n(r$v*epDԂն%o4N=Z* /ܔͦV\{bVzO{"ڎP m\WXA>FLAQE{vXx%"N8hX.@&H#@WpzVZZ0xy yv 6]PDVLC m+ؠ;TFW?xڀH~_ `Q`&wc֥]0N I*B&pٷ^]O[8.9?J[<]Hp>{˙w|.Z^):gh@:pѸS戌-Y5ߦ'37E" 4Jhtu;/@{Pf&H3sbFQ0e9Z`8 %gjLsC Idb2=D hv%!CD gu\E0Kq]UOg^IxǬ,:¼WJ:BإAZT-=񷸥1zI5U::ܐuȵAuJq$NGױ8I5JA-=`|Mˀ2|'P7&?yb4)8Nk)>@7ω&}0 kq4q~T/Gɮ#hDYƸj:tŖ3 )-D!mY+‰gy 'n_h4G|ejk[ϻ+ea$P)ݥЇ F,i'7q[Ʈ<Vs5;$6`aYx <#KMdHLkvvfJ3 XCDFơ[mП}=ňwB뼿yOh5rot'vs15]xÅҌ y uf_HYV4Cp'̙?.'t9T%e%g02Rpiþ8DD č7MO`E{>mUV}wŠSX 148_?C5$%$M ;PTP||(!C$jQv3z THJVIZlT 6 GS/㡖}j DbH "oI"qC2w'[؞rб3 ^[tr:4k0zG}LtMOyK0BiNUӉjm(r'Rx!4a+::ywky8X@t8uQIJ4'iK1:.“O]J#H0֙ŋ7ʜ׫@ZkP< L@D9.k*Eվ@WWdND1ԙ]/Ps`[0olrBfJ伟ȽM(X!sO[OzL%ۏRm+ᦑ` De{y 16/:GpqYxq/Ǘ Ե3>Dc7J8ԐDkGRiy l-?_GD&gٽK}N#!S;8mVd)Ml*(&O6 C+,zs:xbogB"-6`X&vjq#DB9$.ڸTsUl!nmCeÍ\ƺ]SkjhcJ Y,$A/45KN#:!Pg3"NKWl4 ڝuV(BG t:{sBEǮZ8nd=ҾfDfS~  huB] ɗ"7xHuIPxy >#!?ʗ-G*{ AP%ZT%4"haT]$-(=Te v4ښ34}U !s]d3MO<F^)P [%J2`tƮM,<>0\@I6Squ_j-p|#pap~%v2:272l忺IϪAX /[mvHQȪO+cs$0T=w:x.W[7^`]L85 H~Qo]Z<ψl_7%BnIE=RC|mf?6(ڞ5GXMD͐/5+`m€7),wnG.1JsSJY`Ouz; PF63H p/PiNO_Mwzzb ߕT?e[~ PgcgP&5@Jfq~ʲH ` Jb+1ל"2af?\$ITLI7?^kO?lF \ T>AO 24pO駛DسS3+T׎ʘ^NDt!h !̳͚,eaAѶ)<8{mLMHe-G͉{c+ $>3n6qS51ݬٿCIe2G![M3<=k6 4lj/V;>2/M?$Ty[|`5&?HQ8]_MlyBm'F}Swyp\}yOs;ܾ y|.e>>떉TiVߤ1i`v^1BfV-"Gq[$\hߩE8 @D(7UNtA- vE{T@'&pɋ !͕@4jAc2z;DL:=wJ"KC"ʔҝJ{eIsZڱCufK1D(:JJe'!@Tن!?K>GˆffU9lU1eC;a|ڤ]25˞@ΒJwY2ro常x*\&YlxZԴ\>,re=00_ACr ڎ{rHe(I4OW}gK]ځVBeDzeUPĄe>L6^MF6=(ԇI#niz܀,KN*gqz/pyfF>g;p[9DQD'rX(LϿk*ԮTME8YZDWM/8nU1Z&!~Pοd1TqBp*=nh9%+k[P@d1׏ş[{/>iuV $vxXmdDnYu4%Tg]>y7q3PA#Uyw|rp\R kݿ2م&!ј$IXjG8vG@/S#AƍiAi],f]ٔ wvr9>_Cm9P=mr 1>Ϡgɕv"e]iS*FIAؕu)m#[i_Sg K2g%t9>:b5<cY\6>\ctJ*5|6({Cٙ|_ͽFHJIԥ$C>'d:Wa徚M,b)hь7w)fM.) {2W`;Eb8e8g82nE[eTVC2pǠܚCm%)`m#C%)oPT.x߀B:f0ӗ|Y<I94 V62&ͱ-e;hxuז;0O&!iG]x>tCq#Ql$'=˧L:f"7bd1F/=m1%z9 O}p噽"z s87!f|iIvGH?DYZ)0 ,g> $՜ F ԝrR4A7tPm#'NIa@ 'W8eFPneq{du{M/yh#Y4hRnmy1_ldcN*NWFU 41yM9Z$׊HUVvbLzwLMMo&#Z ̴i#um:P2o5 j dfJ AϹ$&hF/2Ãxm4$$]7cUH$8p9$J[:vD߉TC]Jpq$0B#g f/7.BUImqHYD}dhvc-odx!oeol* X.&vDmWQz q6Be-wMF9<)AW1~) v,t=8--% T rZLJNEp>~A""R BZq~ӊxg͸7"~f=ckA3;άQ.o ] "*4,%')e(h38S<<vgU$>z.7=n5{R_xQvÂ6z}sOb}ZޖkL-XJiağmVⅬz$-Fs`q1`DzRrX?>G)i{XT~u3 e?b齝*1FDYyjyfvM@`ؼ:I|5o"M 3CU0.O!EFYl=fNhUifl6O?a?Q_W51e:6~qCjT!iQmduTf<\C0rkoGF;+ISwE~OS:#H(BdR+pct4ņ ل kSA'(W-1WWǩq|v=9`D;ɞAV;"&, z,RNie68mwuj4f fFoT;" VF?b#ӢP1ʏ>kL1d x,J(ScBC n8pQSGmRT5U7@1='Z׬;s+Z >ȎqG%)Ϟ1^*{p*ArGL*oikީccn<#_M6S>͞,bcpúo Z&g]PX:ƵBsLTKV&r)8RPN[S#Co c_zcb2-|b1'4= x#`rv*1 ^ț ź?G@`$Ne.bx+rз JFZenEꝦYpig0H(PN̓aw1$=8& <(UosX-o.8/ޗ &f9#% _Qrn"85QG`<5һ4v7Y R}Ǟޥ1BAHa6608_vxp\i*G\ި?a %=ἳv!MZ׻! ޕJ+5̇\([ts8y~p Զs#ܓ?`:V(Bf]cGD;mJyVd(0f +򡶘Y1nUv!x7SO}7=΢yj?8+DE38?K1%<6 L)'6l3U]jHqmks tȸB(%P׎g) q~؇VhpX,~'XNl`c_L:6Ԭ˻JJ)@pNulW>xR%oNjYR9csu~[ ҫKC;AݷøabjXEfP_=\΂O2Bv솕kM~jjK& 4n5 b@Hࣘm31b!D4WJk[-Zq @@DR,6e]=;~9V:kfs8_i9Z̘hQ]۳0GU6zЫz~Zm I1[-3 `?԰c~Dz)ο 3,ѿ LA@bdL13 8/c9A yv]yᱨ.ȠM>&^i=.!fdailC>h+T#% u'Biʊy[ Xv^a'nR:N A{e 1|XS40%A%$Ԛ7.$({j3WY&r+" m| =L'|&o’7PJ`n -czsq#f'kK:OaYݔյ 2udOjjU/tdГ֟H)U;(0Pg{(-̀4=ȡo8E-֓h™A@< +3;G'Unpw86n-F С٥Tl΢lQ24o] dfb fƢu{\ATZhq?TȒE0 Vt*ɹ! {Eݗ$Xa)80 vç[Ư hR}WaB`n87"@sLdZ.k8L?isУ& AelH"\+f B& gF& zWX'ojm-|< i㿪}$Հ |wKlF/_co(\Q._۽F!1/Y8+S|#Z u> !sQeY3N6%z[>&DsەF%c_zz])M8AhG\'gw?0]+SвdAK4.П]rU\uJ(}U$ HNC:_kP掛rŁ.6 +MÈO:gV6yоN thlW]FȸS6tZ߇VO; &Ҁ0tK2k}oE̽iu;6Ǎ51]oA^!Fφfj__j)A]{U>pue嵬s MaSN [5Z"JP؋h&V uChn\^~#Z:PswQ=\T5j^t|3 Zj@jK<ݛfL¤A>{ O6`HE3ˣ/e.ˈC0K pUr|^}zfY&BF,x_>?xЧݢŤ[a|?I T0: PyRk,ik[" ,@CgݱN@{;ݞqV_?3ϕfЃt3l3ztGA8g35M(^Z>T2?7!ܔ',W).UnzŬ7z!;G;Q @B}[*Cda'Qc[zOķ+>h=>;Dv ~AFI$*5Uvq*>ǀZakLmJΏ :KKԜO ޖ"F Dchd!z>#E^ K:Exm~$15]'17(uMXWe/hS@TaB2"+@kI>B/>hf_OzOkiڢLZgPgv3|Zo5=xsVgɂ#x ˰?9) 6N,i??!9Չ?oH\>tܩeJpBU N*sʇkA\b}"Ѱq8n`V vǕA X5!D!^)z'y(%N>wќԷқ$K vfשmc.?OE E4.)d-ꌬ)_r:/sbD5/n%ZƑ 'p6 B7sO8`ѽ#qdi0&)1'B%vsܵ$lo©4DQ- e 5[aѼLZ;@h󧆤5$}ym5Ʈﳦ #Pcةi ֔9G˱C,h}ՄP+vV,9@G[1,k)-(&(B6g!AT/E[ט/e'nNɆg~D@_x }W6E)3燱~t@ -䢫#7[p+)| ph*NI֍7tZOI5-(|Js ecO&9I+eزR.u$O|K5/֌;pOD]J2ȯϷ̆Zk\)_yl!HACylz{h&1JL$-S>M7S-mO/ BV*cHXkDr8+| pu'|OPF4D( u p\7){)NKL&BRSWBVvȋSK $Pdv䡩%BB  a'с4Kd /-+>3tY"r9U>=6#%Ӭn+x;8#fL9%XEoYXUNcW\HY[~p04eJ/4+H 4vK&|*֣Xl Dv%ۙLKwAV`AT@qYwO42G+vNG(#p<󰽹%尶OVϸC[4¯[IͮuzPִ֬aث-y[%#Q!ϦދֈՈїۑ׏ttit}tstU50ih6ihihhhhhhhhhzhmbhuh~hgh[hRhgggghgggyg`gOgQgPg7g]gggTgc0+JRvt Hȳ&uamt+dٌ[Fm/3 rԩC!PE]K.cJbhB >MҔCՉD^ZM)ªB/_y+NmV\<@ŔGGdG ?c KTAڈ/4 }CrPlguggfgegAgeffGe)effffHgf dff&f fZceffaeenebeee_edddCdd_ dc;c]n < _defIN_SET(sp->base, 106)at should eache ..measuredescripne-_o.vator2 Z 5 ̈iu`z*ZlD(7 +gT g6amx (QDT?%[*AEXÍTWjMTbt}9@Ft YB זH]1 H) <' O0S"PvjO 43-RP>g'c۷R(bO~KxQ*,|%d3 H)!YJ>ब=0m^6DGL+p ;s?HJ8fWXL=# ٗ$0PdfU`LLC"hHHS453-$:-ɢz)7y׸XP(3A`S/.8 #,η"7O6k(­'\jVYPlh,.Lcٕۖiciu0D؎ ЖT=dJH"VzS{]+C$7As'{;c.oաJeI{Җ:ބl347JS㳦Mh5!qc=5 ɲ1Fyqamxl/ BPG8\cْȄkl00ΰoÒԁQr`)=>˧Ct$֐"o0&a^k(B#V"2ҁz ̇fDp([5'q#hy$V\E߀:h?Bƹ8 \Q'TĹZB/8V/)HR ]SkPpfDT1 ;m*ё;xE2PU(.P lndShW*WiW0hA)`V.uvт IځDJq{V)S /#'Q̴Of\$n#K%pT[jTM}1 OVm){yn„=cjl0^Yл;x0M7<` Fɲ5D?7 ,(|s6919'et8FF6U(=}FQM-g f<dX2}qc9='uU-!Wt/-~7Y;tB$:yy8mԙD9Vn]k<=_xcrP`ooj𷾭>W/Ot@(;dd|vvkSas[8rB{DU-}f]dϫ9GGIj"R<1)eɃ '"/^<"DQD z}/5_csO_ZsI_0l ~b锼DC;r|w{\¨S{\grBrs:ƜO;iZ"IaK W2_T?LC^$"f'"CLV`"BK+.E6<๩!u$* Ep4 ԘyA`с+RLSJAD1ȧ7F+Bd33W!(=fTY)  +(1&>t~LJ S~d,jXh&U[|Zp5&ߔ5#ikWmrVI RȴRDDQz9A D$ Rh wsKQfөG{IsE/IsdHYo`RbId#cҝ"#3I6K=CUCn O68g^x6qNelnK+?r,qjDzi2IQEX;F&0˞/s"pؐ?1KJ*W;>3LfF"%|͛'n%,fj̡٘:l򜳒 0WpqAc221k ; X[?%YJ(t0Þha.cYljRXd_Jq gg;6#ڹ F@'.#k\aO ESQgFHeЈnt 3zbm;!#`#eV5O+0rcm`[GYIiI0˟_2)fRȝ9C5!1+c e]WKYZ-crmI%1&skl\ GsG;SvE… _8^&@oלJ>|D B6{%D.DBaǠcFEw~yɌlpn)J{ >ڭɧVKp>ƿ"z%"YBY>u16>6u JKWJ]v8 T}K5d@Lm:k@f_J𔋷fbYor5[p PJaMh= rϯ.:تԣ/_Jxy ^Xw 8(A@"&F5UD2 7qyVh:gEE=10VK&1;m!8P=e?mM 1l 4B:}%(1s#)́ b0uŸj  1ńzWn|ċYpio!K\pT4@3Ѥlqtx;;VDm.o#aͦZ#M0@*Dܙ:pSs0j%_ D8@&t5T_l:C.Wתp0`)|xg:AG@oF>f{UQ"E#CINIRets#x8zDnErG:R\w ?rjQF8G`E`P=0PDP&( kk3O!܄'Et2Udl:]r'}A֋i:eHSWevȄ!R!-Z˝a澘`\ <0 v"6Pp &>Tf0dx0`(8HXphx0D<0 hxĨȀHIf:R eT.R8sĹriYZ1qIKUWQGq;]B0-Q_"huhƁ{g+HO5؄*0QiAID'3J5.m`}sZ0VY-`"'2٪" A8AN*٪C=8OTT "6Pp(8HX h&x>TfȰd(x8HXhx0`(08IPYainu {(@HPX`hpx+7@NXfr}؆ (08*@6H0p! =E,}9~]N?`uD#L. i57_ΏFm/]ty `zRB0br*Lw;_Zm\ 7&8gDƝ"%Atw;͹:Gy5#|r8'+$1*Oʪ5W*Fz,Wb-joЎ鋝f=&{=wh]Ȗ(d&u n+f|"-*6Awq)C"䥢nL 0"Jj2peEUD#Ȑ@Q*>=DrvH6Yºu7zxnx}-.rY,j]T4<*)m/n+xmm9npcneVujfQ8B:';EmR OV6\&U+?{ o3 (}-. +MCE$G rl,Ԑ07i^C&o &?ҁ[,υќ;Ri DxxeWC'~׼lFzӍJ9xKN[^NB#e/eA4_`oZ%bG"Ψq[(vhTql -ԃ8B_]X:Q].7:ϱBPFg~bu pw>ZK/]cѐayS[c,uPdb9UÑeZn0}mkWgC]C(F| RR6O50Y>M QGFp 0=".Y3yr;xb.w|]O3l:MaK5 ªB1:/ۛO9j=xBu5^/X5N&sB6R`\5֫J¶RVʵ%ˢJ,WL|[R1607Z X4u7*- H;i6XITTܦmӒKqODKRw[BZ&\I8WIYn9=rpڨ|W63g%je0 0 0J YH$2) Nmy~ډhzX}ڶC_K$& S\H.~ʅC\(X$3\ <փlj*F{#WGILJ_\@E9qMh~4r(ȍwCY]Ƙj/S,0GRpdĠ,+n]a2C PɗkH4S4DN#HN51"J#%E9{ik=c$R=!q[ ?m 8%_PbBʫ 丙aXc|n ev'q;kv޿wDUh*UPЀ7ʎYI6FVQ l ɃDC&F:ƅh#wIK[X=Dk+qΑ/&5 v5/Sv62oΡ5 Io xW;eCzD_45R_TaJĮPLGkIUzXB_em:4~|cT'9>aBwlK}4_2:v@r-ElpHTCyP:3n{\0bӴyc-3>2|A%_Ɲ͕|dV_aOΓi%zkb "td3cnkfsə1t V'OnMƂ7AbX!3y珇_Ckę/p^ɊEgo0c)+s2Ό-!;P  iޙc;\X,qV1ͪ$?Ej2[%GGIʄA\3cK/ZH#ɉqgbAw>,)(Mߗyb/FE} W =Ρ=[MH1dƥK`$Xd,=b|81`p.-[aGf6JYN pbu); 8|.#cw颱EE/;ʎ]Dd^V<N.)-؂Ky>ԁ= hM喵 owr??3?E3kwO!&3v3ݭ?/B;SrVWۤƅށ23w{1_M-R7ap8?i5\Jģ!b>{f0s Z !͓oÒe:4Uh±-*j9/{:'@3;>˅24TpVAG*=ݥDbL"E@3wi=7j((ݧ`|g AzL~3\5 /.7TrQ~I;h@}=<X&V+1Y 8PglG\j^Aշ5&n ׼Eb>aܝRg^yq9/XxW<sXcuq0m hvwWB(6^_ u᳒Xۓznb| &/; s;ktf"3h#]zW'Hgc8炰 \,onXD\-#]^E,-(0ȷx=MвLnR#ypz!s5bcJ=HYs.{RN?d#DnI"uo Aop'9n\ &| @G#\ oWliS6'+ X-RfF`'Mzlxn^5ⲿyʛ)_5⡱9+ L'p)5zXk,y}u_xBm)wdLZ{egXG/ݶ%q;%RB'^B 7ngYȃ]-uw[Vyf)YSy k/{$"7$kܛ?1^xf=^);2,Q$ xKxshILqP?9* D-lܢ[Πp(>ƣy^մ6&`ʩZ%8`a~ò9$]=P~(_6]8ѭ.(䨝qJA@WpQzSj{^RTDHLMRGxX[YisLOtU 0SBNXj[UKTSJ~doLcJ4~w|bRwIIAQKWIrTpX]aQStADBB^cMELOUDQPQ E InHuoaxPѾDa{W-HKOVUPUYQTDO_QgEMT S[XszZdnSYAL@P|G o@S N⺚?&ɬU\i.~։׍c^;'V6DO!L/c9M?uWUj_ѫ/ I(kdPS]/mh>f5q0eum犖TAd">"/o2.?/cbroN\(lZF HFs9+Ӄ׬uItdrϋId;qz?9+,k8;u~ޣFGnXI._q|bȇΙW[7jJD@?sI{jnC\.VK:Qd4aa|'^pRf@@_@|:Cj㐏cJ YJ^u. |ȹ0AQ=9VYƵ&dC/i|TlDQX8&0X6=Hn>8@<Bx8C@DG0HLJKNOdPRЈU VX8\heXjk8lmno$\xp8r H(s`|x { |(~ `8X h?0@A1BXC|иD2E2H2HxI3HxJ8LN4OO!* %u1vo*Jb}{^l<0K#XzBnQUK>Y=X?Ծ.}s*AKҌgD]'ڰ‘E14Kk>Ip.9m=؊'^z gs\H D*kWa樷u >7iM6sՂD'oo(v^)&'tT%}brbΪHEU#T:9"F|u7_YRYRd C͊-&@qXT *[BĄ410h6sV%ݙiH5kd[}2wpR4n%_+?]8Ѳ/%Bէ>쥙bq}Y̶ 2A^b;s[b}iC™HN,V=!B˛]ʲ_c]AW3efpGWURmnj.|lPXB!(|e4ܼCQ<*j=s 9Rl`!&px6( ;=bc&9i E{a w 4\,BSaJv4s cbNIŞR ׷kY}1jL!PIsgr@sm3t${>o_ըSFtRAyt/8B+GyF^~Fv>R?q)j=0^A 0vjQ5" 3bI$SR]j)9ʶn1RN(6ڼ#̰a?iͦsBk1 koQ}PmQk_ӤГs5m \R@F<1,y".5eŅ@]$ukŇd.@~VH^yWɧM9!XB.6~S(q nGn)k7{fTkC=jtW=dQqG+C{N@D~'2C\*ަ"%44N̺L5$]Z,DLd$JsȾ %6atDº0ݬeFcf7فx8?jST=Q ց(MLmETy |E:bbnGuUgB^>X5D9wr`3zPJYs%y SASkD(=r:.2?QΓCɗ rڏm?0ƽ| `d:o =}c^EE2 %k L^ 5UY7yz@  $s%M\ 05X^XtmӚqwxy/ ^Ȟ!98ۍe6Z# E&նr"H֊b I B킵ŮLQDȮ%w ڄa~E\,>ˎ?$j~@I)nI2rv\$\`:w ޱMx1C] ?pA΍D;EBJ 3xIZRMVvBs 1aȽ]0nI7& ?bEƧ+F>sdhvkcbPEras?=*]YZKb0h XM82:&hP E t%]._{B%=Z xK7q8ɜ|`\t(*ըY*GߺmiJ07oN_Icޡ.j+0DK]5Ry]czzN_i~b:ll9r8j.ЭMy8d}x9u{@"Σm@zU w0g8 /%N]!v7<%{'ǹM=w0#I4="7%vDҲ5zYe sdZ%ftEqE0c _2g9IH`8!Ejvc &9I4ܤ:WDp:.@ 47ӀIH=Ҍ' U/Blk$7)*;|r<_mlE@Ǽ֜0S=\ҠF2i fe ^ZQ:em!d]HGd">ZFskbZLlW#e퍸^j a͋5N)NYŏ4t ZN'zg3 {3ftBfܧ4NG36a9UOF%= ;*};/xoXD}ak&oɄ>h !6d(h <5b22baff- px``@EАn`ptUVv@Pp@@mWf)߃Avf^tw -~AT IUH-?SIĸI9LOHcZ:]M1҅*7QRRUHHATSHc GLcb1ELH(@Ӏua8鑐 ql8@ǃ8HMIP1d$ w A8vD DPHK1H6xNu01 [H y[&xv @t뉐;6tY Ff2fu,uSEyI)3fEu)"NgtfA~tf~u!X˷-^$^t..tACЍQfNMAA.B߃AvӃIM)ÃALH @AL)OI9 Mu9sG!0v1M9@,J10u80t0u>0tLH)IH91_ZqA1b1҆1[ADEBBDPDH ADQDI8Oguxvɝ}}wTzBzAT$h$H=R0;o^@A0B 8FŀM J,M`9L(SvHpL GV,8u4L_HP4ubwF%W&HJHPx95;0i%1X5u锐xL$1y5о E00@t H  h5I}$g୭D j81MTt HQp~g!օ3IZ< wA p8Hr/DAHЀMIA9tjwHAp@0Hc5OQvI>̷nn퉃neyjcdyllY9yll€e*2~ii}/1U t|z$ꉼLuٯBpW9(ܡc?Md1ƙ glv3C+'-Yo)z @}p8H#g~*͠߿riirt<48/쾾 !vN ÐY1~Mc$?Jr>ι_OC ZnMux(`kK΋{ V\*]y\ sH67x[¤O!Bil J C kMioкOaKtDUc+ېq]?{K_ِύb1g;j8oQ]BֲվMa5t=suXj t}Cm<ʫHt$1 pI#-Z)9NKQ[0q=d44`V쨸S\zYoe 8Xڜd$}.lD뎞΋1#.䫛ȟπ%72D2ŏGysOJ{?^HGRNI_!OgpRU7p[v&SpɃ o5*aN|+u1A,H񢕦IZ1K10!Tz.Z,Waݼ_ mw:7C{ӂe2Qn0/Cꄗb#+m ϥͷo:svxlP+ iz _nt0*sWv'I'[0UOힺ~ ^8aRgr;c iDwڋƭ䰵-hou*F#J7[C7-DakGd@ڿÂd/n'Bv=cP$'  U;;"ڸjJڟ16s#.jNw}khL'ȟysbr%Q. _-{ؾ7'^%LkQIIwPoe"pA}=U bgXE3tnEb)XGT0ǃH Cf .iT8heyΊV˂%+Kiq]ѓyo`tt9mok[Jov,{ka]# mO#qf}8}k2+0't xY&"1e˜+q{M$L-_N~c:O:6o`3 ;ϻ8ͻ3__|[HfጡF t/؋9oz5 CyB37T0>HS|⹾#uW"vy7Zf-BbKԟ{m %]\Pwo{ rX]4G*fGqk8d+B\[FV(.*c7jW(|ഖkk7+iݤ YRPLw qpe}ٞ\}=_A=9NYк O]OR'Ѩ]~?4b`*託)X[]!|5].yL9PQd\!4]`)X)EBG˔h1Rm0ɍʢꊵ}Yץrlj9@dFu>.9γO+h,u(\i2ז* vAlϏ6 r6?I+NGs,_kԅyf\QT@߸ɫWT x[S/lꞪnm=* &?C|3[!'* فC9R:lCG7 O%BǗTH"ѓ6$r7^Gf0A3| #uY(ΕoΚ]dz t94luU[g>,9>O<53M Wc᱐C?^tĜv"ǂ^WMZ]>u񗢈FpgA]%ƚNIBO\h1yTClcfbhl m6\5\]7vi9;Խ@=49>`u:L8 G@OaFYAb/I P_P)+i!9>odWPYɇ ȡbsq!Ğl O=(DE@fE\BH%trUжvbR8\ƋÅs#,W6Ua3EXӋ'~2I\a8+t ]}0H%NbZgnշjdq﨏 `,m W4n`ENU\J@4 4&۹_%X۵KKcwX9O߂WnJ` @,oY` F \ᣥFN^WQjY0 7e(]#tlp樂!"3>j oGv.2؜hm_yuCjp%X- 4DcK~@So'6ᗧZ2Tj#m>v{FѲx2@/I<5Ur呬1PD\)]n1\]Z(ȬjeK jJXQ:k}!%:-Gkj/[al-<) cKG=0C+lV+`b^OfV^c'Q9e i$$u?w.@pF)rw# !.)Ыws(bN_d~\=wB4dc`'d^OgGo $^&aFB{+D;[\i0T[_y̙ isgÖZ(_@D)Xyݙh 7 W8).~Y,B:lhQ#[I_Z+IϜ&|K(,H߭SpWʛ.4}) ʡRUG&vm+|US҉uat !߰CE=, \ԡ9ø96݂HH{x9:,>3O) XmowN^ IH (ՉyA C@ ̰|ڬy1[3F|4nQ!5z6MIZEזa/;IWJN5%5vjGɶ~@ܼ.bݶ|f'M m磢q[m{\f7 ѓ}jW@mhqrk:Bʇ_~\i6ֱ#U#kSA:|r &eXᣙi'D`LDTt@ґ͘^*;t3P&5fɋf#vrўrY˴$S_ݣ`. JbS)"0LJkWejSB` ƣԡ?) $1̙-@oxq_| 6XQv7I833U}Ud~UԔ(} +4P9 +W\xK9}1x ޮ\8V/Qi[{G:P>}f}%T=MX+{7xNVɆ -{b]qZ27ף^Buau[k%&YP.};L1Q=wT}W}y:XUٸzC3/*!w"jz]E A3ʥ:LJjUzfpWr;nJIZe i֮4&=6 V+gqڕY TZspUDJ8)WVU.\Y#ڶ^EKJxljHȢ+vZH{pqdigI&G^O!"Aa%5H@e+E,PG'y{-,{ue' Zy[3%4~t*H qP]V&3@ Kbt@L89fmdqElwL&/["2T]si,xIa%,T;,]g3L%'3+6S`u̯dmFY&OfLi oQ+)R|֨d; ӯj&yć O8LOS}= rb 6J+%㇜8JaU5sS#:ELVz)f )tQG߱9gSMWt%n2 Nš@h"*9.|/O晆i/ C,x`;mcidA j@r^u\B|-mЃAhĎ`"bCWtu S# iW'JRr?Qg;DɃč,X`3THՀ\$էu2I09I0B>Q.8$~թP ƥj!Ua rj*E>Xdgmc/6a`üGEy FscPRH jbR|jBR| v]~KFL?A)PY7DZAu_a[Z۔{vn`07һFc6ȟHشzB;~` h[?kZ(ytٌNXI7c2ltlbpmWW[z& amk Nf GFeA~˞Uc. Dw w,6_?VTaJgְ챊(V1.f EsAO26O`W)Ng"^^EȞH==}M&kk_݆oA*b)l70\ֻB;EfeɌ|YAQڨt6g;ڀhcc<_e2fvqE&!cbPt/1|!H~BC͞=$ݭfnwG9s Z>5n2^xPDs{D2Kea4vz`;c`3h:_HD<Ucsd*\\vz*hXnmmV w*4/lV_<{5/nWIՂN;7DbOzAieZLoZL"JK;pFB|T H<޶c ]7{,r,fԁfQbwan%E%po dMܰnHjxnwؚCT36k:NhYi7lV)"NcP95;ɂAU].ŚL_ MrDUqp۟OnZ'Pж/鯷&n7҇w3HS 5OmA/zSC#ⶣ sk*om_nBe0f2 }(wp=?=K'm1nʷ#'ڰhr|^oV֞gA2HS#$l7nn<l'^9|ǥ˷:_gfhN@qILc#Q8o Ubz ENkWI~Q_vPXt+;*H'l #ӣkrYo15N}gM}1-jYHq&Z=NOu!wט-vn.ӏrUYH(4 %ʇz IZ7.~ja?%h\z6r{F6 pA?|O8~1wN1;D!5H I|눫ҕ0""_Љ?͞`czY纽nrDbWJ)#gM1jĴ"胢,fkgw-}Ujykw2$+18%v AtzXEy 9k~UghT*,`k*"U;!8#Cdմq+~K#7þщP4/xDx2ؽkh\~7orDG=e5IKd(ʚC&ό1>1Cc zBW𩀐7 Wy^nj`X;wT(.G⫆bhfWLT)l=vDR_:n¢z)@ WH(D,CNGWE: C A?[D>8zZj~zltDDdK-c%M% gC $)(+_7$-c4B{.&X}0" 3z35`sIs UF}:JzlO_?q2 Pd1iEb Y?Jʴ |G3SFh)zD J&uadAD2Cpo_Gc>O(4A *hrXC+?5(˭rOC?x}gb= Q4-`s.x׼ 1wȅaM[ FFzٝa5{lԊ@lg)Y&V{Nl㋿f/!14W_ܝkK}l\ FLeMXv>K'p a$ܐND2wd]j#XT葎_[] @Cf^ 6.wtږGdfڂ%n@9k B9/drTZW9u7 y+ZBW0v[9ȭqNB#7teKGS.ùFhve_ 踽<wE^&p F-2)N|db lR!bMnj `^2SE C(ks3Ss*W uu6eS,UKk |mD !IfAc984{͠R+mP|l ⅰ .Ҁ, /?b5N"ְydJ c~ܸ)ǞCy4D^^[]eR"C Z 3~;[SW}ߍa*F:a0G[3*g]61Wfl&knj% ^F:_ΙtykQ9Iu;FhbVM0l`ګ37V)^m4|d7Ǥ(67,.:."*wAgu;O7fq>L!8K raj؁d"墯.|9W% ?hLz\g:#q:f!l?"LG/ܫ,;dmֳ\=4Mؕ?*e@[.yO~/iQx-~X.)+|GjMڻ>H g]I1 eEd_9b"_͝q/I|AqÄvF)ƨզT!35AsXbK%~_h'"hB$Zzwc`Ϲ@=%e/6s>w~yp\1uY)@ cQS0H+sKЏ ! #Q7#}"t+#FSls"0LlHhD{~Uˠj(_?X_5*Zf.Sy811 /尅~c}[qh%lz=%M O"9z٧v+ZZcɛrZ n7K?%J+,\R"(((>^r*|"ƿ3N5T߸9Hd|lIݝ?:؉?! ]ˆP4ڜc{xcjޱ*!-%71g]1NCC ȀVQh^'^iN pX%e ܬ@4'Zyd UյCĘ|;>#ITp=3ĖRu}% n&*cES%o0&GCq#aWnHz9Ewb >%hkW%>2FFUMavUVÈi.㠏$FdT{3?b5|vjx,{]|"J޳P\8!zcdh>Ja+M< r&"No:!mn5RX%C®WžqNtTXӖ۶# <؄ ?z[/y5W%rKZ ᥆^<_] 63FU@ O±G?2@Vwb"Z|Se\E Wip%?nz7b* ׹(XghgG~:_Ѕ\<(;PgXb$XfL*xsn:1ߝ%=w}t03q't`Xhfp7ͼ^/ 6u@,焼Rx=6‰}Cۯ*">KЬ*^IΧ3H'6YyH;&PU@%Ȉ² hrYΧ)߬d n^oN݉0>{H-JX[o4ẹs<5^#Pdc3','k_Bψj}=b9)ٺ":t)NI1v;IIP1-oVHEG],8ޣ_-@d>#IRX$Fd45%)[qz,D5`MC4ʭj!n߇ju2"iyxlˁӻ&^\4hH߱7 AUXb"4:=X`U~TC5!f>+5ABr@#C|k)K39{qw%a_1s*4]ܝ3N)hi]V`+CXe6QII^0U;=qD/$  *ʩJe #TǃORO>11smƠCjHC3Ŧ񒭋U"Q_6.kkSƉɡ(r_Gmb b_ihG)d,mEtX'#^`Ρ}$ۍ6:6_ sC`å;z}'fvXDi#WtdD;KCd<2=ʁ{>5t~w@csc`2oʍo7杅giUNocisb Y#6r ȍG@w&Ej=.ZV4*䋂ut k>.(P}ff u4u{[y[FUﲯX!ȟ#e%58AM3cC:K;*d2|y\h.T$ A W=*UOA@jkl!TT`TzǨ'.šP]PG<[cߪŁZ8\ٓN-G ! 蜼Wy|+n]N}v/=t(D1Z"H`rBk"LmiK~](hřVz?~N#Pp ]SfBbd_/ٻZfCx[q<]¢ 0-)tER^^^нcUfѷ\% Qijf41nJ74iąRdr.4o [ZsY6a{9HNv FY[Ӯ T[VgV#?`ΙN4g!Pc̼"ul"X2eߠI0U JOS_xW)I-{"Mvm">ԻǷbWco8x ~ĘTMbk Lm\Ϭ,qSC3j"ځ0]@I3{Xȉ"%j(Pʑ=jP^?6Ё*2cnL {x7J|.b#:YpR,h<@g*U+<jq/W؀7$EJY"5,cJ, eRe^Yأ2 i"VC55-߳7e2y2Ӱq [pPbmQigR)HBT ^+?MvQrvաᦏ;~6 lKi x-XNxpYѰxeI+RnFެBa;oJoR._&˒>N؉Zf*Bg,:{LZ'dVRڮg⫘7̃`o -*E.cKCs$v*gm]TEԟ2`Vw vTлAaㅆMmD'[\WkVGsӈB*>'18чxVL<j f> *=%lɳf>kegD 'pdjr|Hc^k 7t.\$~@Gi&4i ܞ`toz;q"l[_ 9u$Jj ZηL?ѧ0}QҠ6?K_*HuTTmZ"Yr0#*r^cq$8nHZB3 ZKr@_=%IMpㄓ$s` q(E"{ϙ2P+Vf?BGPls`K_ སҀ0_\>R3{Sᇈ ݉3~i9L#@WӍdl)m†'ϝcC#؟*[v2i' $X wAy*ːd(sª",Xya3wUg%QA)% P!ZUAR%lV^/ar>U_{5>pIJoOJTK/9MUtumh8+ML ӻPƠc٧gj2:)5(;Մ@Hh/c+rNu[!3f>#Oku<%"x%isfH _$EwyasQjM{(# ~H/*e( w8yگn^R˱.&NחXd<`T7S^N2ᙺ8eB_ZmѶ8[)]B* )_pZC)z`-}Ə\ILEc҃Uf.#! zjezY&G_)]-vpG?E6XR[>=x>z 9jr@[kU;Sths^ph6~"-f#8/(P\jށ!ؕLh߻ HΣı#"/(*R%eD<FdlHпl~1B6T +͢ѷ&-]s1A1éRaɅԦ%BEmȀ9z!R4iK]±#qƖ@f si툝k5`X WCs[cӆ_gBt,PJ &o2ZB&]4Co aqOk{%qJ"RfU*+HTRuLZފS`fA$u=ey@ u&"E<mQ7" O+# xmAqDTՖwS?(juP\h}?E8~t&n|N @r=%_ "fl*v>ڱC>RgLpѴDDh!>Njx )1qG;T;G$e2! ?ˍխgC5eKdA5Va(,6*P5<07gUvoӱ?!p"j@w!DyT;\8vJor4/\PBb $E#̞PKv">=KkYBbP.k hj~UtbDP@¾4k˸߾ GiyÝot ټظ-rZ-8l~q:M!+ҙaIG)PaHg+'!R} xAMO;uz݅0 XruqpW(}e {<%LK K/`A0߻^30#j2r Q:;))8y3E&"a"JrΜ2d7DkOO g)Vpa"|/O"D$ZUk?qVCo0D8!Amodcm4𥔹gC&_"z)ނ =1SR{1ZGERBu ^h<&W].֏XOtS-꩛@̲VvMn~?=01+*wXX%bH꼁 K¾\Hپ'|P4lnn I96 @omæBV[P\s3FIx81GV~7A@pGT?͇83#0ӚKEa _Ѱ H-)U)l6D銫1gT?<:CΜkbf'C5Yv<lF!.:e-$#>dݰ6HJX%džbwuq)?[:ѻVϧR:W cٖWlOAyCx׻D! ?J9 }5|'~`.m^`4]ϵZ C:4N#.,7~pH}2W*5K]Sa^:u|`])%cC[ʜ#m6@ eWwɒjamkv1P{AoQ깟#>ǜ G5 %AB S(F?P`oݡ|Vdž`Ğ q{VK` q}a D=(ZeHszNw HG&#C 'VH&C93QO\m֎RS2R˖b4؝DJ@8+hr!x8^5ߙ,^1Ҿ79n#閳˫AT\}8컽@J+n~p%cz}qxGZV>w.4VB=<c BXjCe2/YEٚnP]<"&2J:{QI=>DC(sB2x铋{Dhd:?I -4"} @sl&NP%̗sur5y}RaCô<1ԊvɎ9p : ͤV}L8_V 1ю6fy{#Mt\S6*XvN&NjyVCZe.J27fl-;`|D#LL,z`7F_8vveWoZN_B!0(Y ,e#!+wߨA)>^Y%߼p( "T596@/v@dyv\!㠰JGGtt ç Vd5n+XUh8#P(QV9.,Ȍ=;{e[7uL=ZDD]vie5ڙAm [ &T*O&0kz٩[Dʵ9 fjӘɸG6S[v ޱv`ػD8h~Oyo@(.exRtOb}-[Ǭeשj:ppgn$> ڙ]҈DS.'~}:7yZZ} WT6L2D `X뼗&&х>;ڲweQ +?:5AzJ)a NٽȆK 9^ݤ=B4ް$kZĿQwQ,׮Rqwx/wTf#'߄nTe(ЁLg z!~sp( []RdJ hV>)9wn@4xuU7ֽY&N 4|]*r ʂ9&uG (a'-5 !G{7^y7If#s/-n,3xrmX -ZM+ WTw(p _j1fߺ^9'N |sDmlN;hv~'KEnЏ &bğ3h44|V b ( k3n7 '>@̵xY.H g3(X~]W'(sݝ,[RwAķ5[D[Xϩ玿 =l =Sx= 3-X--%.0dO.ن\^\SÞwR0W}c-32-:8  /hf >MA$:1XboN\r_Ip}'O aق?T0c@tDq~8FK064`R1c\pƽAIGG3")/etXY]X~vSg- @.˼dt`8dMzud-9&qmJ3 hIQ~ pнzZqv(^kN÷UW};e6 ;3}MLO/-H_gf *g)<6^(G`(/1=0o'yvmR ?D; -M|6Mx)Ysf4ޡ]'Ñȹ7vE_ Doq>S./VY(Tz Jx!;nF }'$Gь)kxLTFVӭTGBޖE Y@W@T.r  0Ԉ(3>$ *PSP(Xb}%X+ݡ^\;FT9Qn<,tGDL'J8BDP 5:RDn]seّ%MÛ~OJIҨd$osدih,l.+{fav D5sf3r$Z8HwLaJq` 6Ut(TYf[]䞒/:"$T:,RDEih_89n ,?Щ@B_$6Fɩ쬪2ZLA~RIeԢ1:%-# $̠w \ yH}1-lAz3e5KɝA06i+/jh؆RҴR'}N9&^+\Ta|E @hQޫ0shR!%yp^j0AmH]j.< =gm\C-.,]l~X{3Efeև|L.j-Iv?]$gy 'D}D4l3/[STxǙX$iFeaP'1d Ad1D`ddhUC _D쵶D8R'zTq(+2JXlkq6 ]{, ={i4[ʩ69G+` E6ײF`;țj/"(|#{y)R"e#nDHMG%Cf 2nA.ʌ۠Oq4}<ׁ6g=nK`(rKoOM*1ԄFK3w?773eǙ0jiŦMOz|8/(ɍEfy>}4+:qjfwL _74GoQPͣnE [y)K/B`F%v@E.FMMO0SpC!t E,[g%OI Q Rv弮>āRb`TAbo-X෦MM` [$ b,nԾr "qa8? U'/1kALP0y r_`pl {̜fR$i,n w praG0œv~Կ ;|ZAy3N78u!1@? msk[2\ A7p/m҇+һ_a.)(JR+nߦX4 zMO$T4Q!xu=YrW7ʵ\yC BNsl4gܲdǬS>Uv2>El]%2^IDV˨p-5uڰ5) jhX.|S~x8Z!SVXD =%zWu04 WvRӚpQ6og<{(؅dI@"ႋ(Yj%4} lO.-ikC0sy}ͧ];*jBLn6Jܶ >̐DG$@O*I{ y[7UȀ_/,͠bEp9%J7S47@{>܂L: 5萵H>"}M "$7Q:|H;~k")৺/ZH"i"ltb<6= Vꫲm\$w/4Sd2|Fz2^ dhn=h9M|%8c€BHdCh^ө(>j{yHmN7E4PLnji wctPT+K kQr +ʸŒ6I2bRni:m&gd7 &O䤻aFٳ|K_uH رHs^kvx/Ru1!t_6^VPq^bz=.YKթ7F:]K˷a1};CORTz!xAV[9O`לjxt#JxB‡RVȇ"`` N`l(.5f7(-kK,!]U&|ĥ YcxrZqjli SO@P* )pZ*Ol2y|]?tmK@gY9Ն9#\z˝$C9P30 T`{KO΂$Kqnz~ݹ0 $[!0ja6+~T\'Mmp=.%1 Y J.; ΍.xK d=P-`r!ZCHzz)ŭ/!s?ʨz^LԄ}r EPN-` l)WeBjՖCz#H 3y-^_+nr[@{0o>_%3~"fP;}P[a@|yzB=[+"kDNȀwI CJi.\s)5Nǹ*?a9(B|94D5HbJ͠ޠ}-/79urV|}JAPƒs װWwb{=#GoճiқCפl%6i45HFr)'*B&Χ@: $tFFW=x UbaNJ N`gə%3Lyӓk DHL6q}q_~)^ o3%+R+}zXvVDV>{%}6<P:b//jpHTK|T +fvm(<FƐ31oL0PF,x'i0 JMsw-!z2OEƤ8L Ӓz;72fJ8Y {cvc$ifND]mp4K`QzC4E.Y˔Lxc %DLIڰi1!̦nr!j^ljQYwwfT*Ґ66)\k^mRo)OK`>s"a0tk= ^E ԳB\^Fmqɜ"x΋xMdim$ C-0+ppO.LLshscZ@ɀ78g.D 5_{* \{;Hi^QގP3|"1ֆGX/mKd|Qo, 7rj3zd&cDPd2+6:(Gaֺ"D!DhGeDDak#SPvz1ɂh˃f (|@D|6k: [(DUmVfܲ\cNeZڝ` iMvɚTy ;(CO}w˒6ah+Ȟyt<.=qBVûa3ڠ[,S?YNQw "Bo: ~bNʞ9p4a'<ǣ8f#z=EQ1Hքc:Hmd2.\t$Ɩ?r~(AE޸J] xhS-gXo6 PXujk\(6lgA#yơxBt fwΤ Ӊ],yboR.qW)DG"U%p;ZdTnKFJ?H|V2wא"Unfl86; 9CeFPib?z ֲ daۤ)P@ޘhmr#"6wgP}rZ.},Л ,+բ[O kyoع#JX؈EH۝!^iaEz2W^c~RaҽM\量H" ͏{IG՛Ug!WSӦ/IeZ:mH6w?$F` ᚙ-qw6X[ph䝓_SSPъ5Ӡ@&,,D3 rup+ncL^lGDjvК B<)u-}%C! aUv…9SkHj)}fԃ<#> K-%F! ,>i۶Λ6pe~cC[*)g@"л{罔E TqSA;SrȦ5/˱$z=#Gnk|gROjy>8u.&tB_0 `=O2"l#I呝W5S{durEJ%@t3/L (; /eo:nԽ#ș*YZjʰkD$qlȏu,4 wXj8@Ml$f^2E^I59$L븢yH앦Jwl9.(4A8#!l PUQm;rD~]"Xx`ciJ0PsOțP&5}ﷁ5/|bs6"8=1 >c&?iE0m1@s0d)%:TUSYb|-oBI.ocnb]Kw#/W[*NfT]>:?}["2L/MQ`z(bZ*3-myz_^OLzİ.8'G ]}$O(P@" NX<0p`CWD %$#D&$: EH&[l8VjpHH Ӿ i6'!XB%72'I3BTΤlX2*Tl@% tuZL),xK2Un'U\V*3 sAue@LT/ah_PSC̦cݰ0Ϯ}ZO路g,q&0<ꡖoOVE܃ ~O,-k{o(J_D Zm:Dm I/B~$Ҹ,MP1@?3`}g$9?8iEؑ;Kk8B@ˊF`4o:6F1;7EuQY84QCt&E$ IǿϐQOc1<74jVBI 1y_!YO[cq$\|s+{0GQh>OpƆ*zj၅1.b,C)8w5Ea:4BLmzyEs\M1p+ i_D8BD}?À5f3T4{pXj!?\n3@ ɼyeC;7͟VTk|`'UC|yWT>!;sLv;U/G̝ =!PV]_?ȝGK7p"֓qBO]u hm}YPWS)fj@C3cN<t'H+sׄf5 m1*1yɜqU,+a !w<(>Jm%Z]"(ɄOs %˾0 +>g=1v)KG07.>|ȚzMUkC^OJ%YwazȜX# ݍ ^G5^\$H0=IwDc!BwS]uo4f#f9~.ԃ0x'!m@^z]PD-aTaE{ZP=Z){xvv`E}z_clSP!}aE eΙW;A_gU[_ES}ՉuprBp+'{@XjDHep1_2 2S 3#mU5m4JF@TˆHEjZ|i*JDwWi ѽ?h|ΔXWuy8,r#om[ mܦ,oZ?y@-4h/´zpq*Ba@\WO3 kk bn${\Au}~!=Rx3p 'Xk5??Wn$ `(Yuy7^\Ӫ?)BA7AO©CQx&gn+2eLM,Ҵpn< ltSߗD"Pf XS_T ¼pİOd&x虰N6)"@Xɼa(`{КM%, G&9@ݭ\{%}׶Q#XPt0aSL;QҞXnq< .eŦO62J[c.24FfPz K"TŐϘ100@-< !R!h~ дG,`-.(/6L0Xn102P04Ȑ58X(9@pVhl{n H0e,pB!XTy`0XH0 `! !8NZpf0|Рp@F)@5K4byǓȿp5h @"3?IU0k`wHҘ @M MLML8 I^mJТK$A LPp0M p(5C NPOcrPpQR` SU /`,@pHV w 6ݛXDC<`E A!p; 8[ 'h0z ۜ0]PFpHW=G F@! / U>paQ{0P# % p&7XPМ[vmm_g@B0lRL D" 5-\>SkoD@|E=p@pҐB0 )E4bD YjWDpNP?9? 0\b7"H,B@HQI"(`!p@4Ġ_ 02O\Yp`@`^Ƙ@pYW p!`>HA2HP?YckPbP@_4\6AX;0k:I5Tph:>` fCxmHgPd]3ZH`U0D`kpi>k@?hH% H91p[@TOJvK0HI`LHU'JEPHn]H`pTވ0! L`H3@K\lh{P pHIGdLU k QOKPPIҠ`L&J;R@HnLIJpIKLHNfIpI0I*7ElLX`qHJHU$@L? UbITPK I2IQHl@T P0TI0Jis__scnedts_iv0ck3InEx.12ps_nu8127491_up475365138111222438521148562988623327154_u403929331816tcg2_64os_lup1crxonn701200ca4a514c6shn5/gzZr8ϧ@13vF'N25b+ծ$VW "A c. AZ;EN2K\88|?E n~zm(lMXq2V *$ oSq+aLuQVrS]m$+PVU~=.je>(ɳT ye,."IU4ff9 ݷT+1K1|)T?o*H*Di%dU| TvRt|yT:2R*DJd\\y= 27eÇ%L/nfr}3?LZf|A(ż/NuiO4Ag(*;}˫ |u̓j\-@@{߫*2çn/ Ϧ "c'F(yϖ 6bV*݀0Un'u'Lӷkb-J[eœC^+z(lbAT ; σ8Ґ b6g,Z ZEjcY u_i SDFbaFtMJ.@GLf+q4:PP!+`KLO(Z [rTņ YHY; ʉIdr+J`BY^4[#^#d^EbvU,(~y;*U@ Op dؔ8! *->UY+uEykOdjh@B%ۀA®+&#Lt㫦ulZnAIA|MdI3$mxюuU5u&\q0˴XwȨYYTU%5 9Z| L5`[hA-txp5x%e!C| =Tx "r'KMѪ';Uq2g֙uppP w*Z&Zd 9Rþ Dg/M;:S;b3R./:/l$Kq/og27څSCTO:7EY$!D>H A0!`DD T[|ŠDeB ݇[Ls䧔E-8xTxཊn Gܔ`ԃӆ:V`r47A3{'Dy\~'m b wqE%e{Lo/NSb<˗{R>2)#z+*36"PNiJ ͜%CE6dٮ5zlS?"` 妤gi~= ]O+ƽw|quOeܿswxW_{$݈o?AźLlG'h[Ji_RRՑ8YYD1?K({cN A.ZiyF'1\P_@qsLGW-L?c~1A5-0a2+'(֔Pf^ 4U-GeFﺠR~jFc?{SXW־=ޯ+ԓT7aldY5='C/m f5_6y"~p}ŏWmS[0>,68hr1M{ל*3"W)Җ [=nPkbi KtdV֤BJ vF5kQ}ri)9dzqkWt(GIfaLoŋ (̫i{ռ!T{@9&Ǣ15nl/+=N x T%,\P\̿;Q5tX;tXo 7Ž@xAFoo72Qxi)bއg}ļ Ξ9ͱ@3Jik޽dt9+>]'6TUvsy8ϡoSewMq1nON)\Z7S*3kl |#YޮW^> m( N Σf].Ɍ!EQdBQӐm^{rp5MzbQ#,DHR>tT:e-&WK`&1v)URi{- MD2`q@H>PQ!Fx~TzUlrߐ br =@XlB.:4’fݓQ𘱱h/z6fW QC E +*ruiQrA8t<}^Хգh >DƯ3H-mbO*RY[lȄE*8QЖͰ %\gdGkuZ #'3Hrt?~.#7Ukl$XHfMdWK9to ,tܤ @m7tptt ZW kVKJgnoCWz myNfs'uڀn*vŶ!@tpp0O(N✑TWk974&v2%#X<\_ܯUim5woO -0.m UQBד:"rJTU).W.U䰞0骄-zA JcʡK4J\ʭۆsLsb餠ʬiC0/זT9)R@m;\ "<ljWJt<~cg߅Ζ|2 tgyԣuW9AQ٦֔\M$-GeSD7W$(yl~ 5`<QJ ze2ejALUˆK{ֲ b3N><3Xȏ(lMA!T@!ߛ1蚧vZelZ97F 5-iO=ַg鐌cz%pVҘ2$:wض jr(̢F&$ԏ6zTPSd*h+D3A*1CR跪ƾMEu?#j ru6v04PYd*]IX"DSM^tx pf|snΪ"sm_]c7ಂS~ !Kx:l"DJM4v$14†fv@ŵӟNލQDpY?iLk)WVڏ{9?UuSH rl8FÜRƚy=n6Td:* (̆[]͐6Cb_;S|p\ tI$\@ FϞgchLT۵[wnA˾'3CtJD%@ 6NqC8i2>7[ 0舿U@ Ͷy¦`Boz.͈/S/?).GJLvS!lSOD,} +T~.XlpsՁQI{RWm}IGSpl# [$)ͮu؟`t6r3e; Twl#%,*;_as.z晈OeIݷ=6}NlL`>>xHp Ӈ37QW\ф1AAg1#Hhb^vE0Ht'Lm8,7bn \#IO9HlcSinS+V~.=[>5#,U-=}O|GR֯UwO&*mr͢ԶWxѸY; MLt7 #-kjWwpEΐGVO2\JSQBܦxSۜ$OE1Ɨ - |W-bLWi-ܮi:s*͒=^EA/J+Ħ:~f?Os.àpX$ƼٻS A }[Q*y)u5r$yFP*6ySֹArEڸ]"c)G[9< tߒ6NJ,@w!Nm  &r:OX~4ҝLu,hyھ9k` ^uhX,!=)s53S@3;Ք6rOjl:wM.6V޸w;: VL4 I\"8zi ?f.lMYL S1aHCBsJ!Pz}MxOU+Ql#:]tT@>6ٍýMr*cԕu.B& JOwl:/Mmκ]L ~4S}bH'b>îgW:cuÞ5lvvg aC(ߎbK][B'zAnV[Lq|h|'GXFcu c $ڪ^p_epoR_@^b,d827/s.7+WM3/,.IMM/3'Pe17\rF&R ؎hJX%Hev*L@Av0Lgʓt7Jlg]N,@sr'Nou<9v_]^Nsꕮ2_7ugy^uztc*_3L /( g*UJNO}ZeQU~Vu/3f>|STJYM2Z[_T˴?/$~=|${KXϤ Vv>n<~CZ W?ƪm佌j7;c)*EXW9@D KݼȓFadi:Hꗝ.:8!'ߦɗY ?>94gwx<$Gq)]S w?ZY<.d# niTwG?M~rܙ )VQ Z{OiɾپjSo}1ORKg2!H͗U32f})CꤹjI+xw+QCUfYVݰ!6*j&p52΀@n0q *_kA,$@I}ҧ H]QQ_TwZrt]6Ұp#f ]^gӆ OPpz8&lRFeI{qFf` -,5fw-B?p: t؝+QyJ S$C [wSa 5O`rESDoQ0?I XYނ._߂2BʚaT҅` ,Q;S,XQ@ pS╋8g)#ԁvH B1N^n0TY堎؝InTgx75=tO\E3Ox {N*fr|XɁi:a p.MGaA2˓5+TD~2W h؞DH(.%cjIFrB Z牿XX~Wjtq6v̕I+u+-|~ ^CO]>g]?td. /A";VQiH2p*_W1^-|QH8wZyMx#L!]]㸶$-1@СfG` a61[m8n &f347R%$@>foTQp_:kdvWf+tc)TBQU_ƑiV!"#sm3 f{wghkR&8C:'0*eunCƈ\r@t, 昮\Ry~tΏWh#-ax,lVpI07#425"3}ϩ>w(ǁx@|gxƷF^q6Ow4h F2_dSYV#oEEbb3ܪN_ A\!iA`#+3 ,݇ 4ν%IT$~ҔA|iXcx?æ3$OkB$XԬ&DXgDU)Ap7U^ݪ28cI$f&G kb/-؁ ~D@{;I]D; XZdԧ.%f Zk&?"tTE*eRrN z N2}ܑHתnlN!`2 0X PBO^AMPA 8(7\$[Y܅O<vYnqԺSZڨJj`;T"^)h@HY` )Q# ~\@}O^}̋ykVCl:N1s%/bMz& |ϸn;RUz?4f[.o=Wh{x[tk|=\̔QxR8B*p*xuG^t{,O7Ʃ MCxeљ255;؈ITCϦg' P2h A=۹v:Z's`ʅTiX Y!T (Guqu,~tfy Q.-8ԢWvsޢEf*'uQ P6BͰ謳w>{>;|q<'Ѵ{r%Գ9|r8;f6{${!D!ș0a[4Ϲ4ajC۰Z$M%Yk](,IcB!Mn"ג5B+ ]{ꯋĹ@[E]",٫ 0`NӋ0u@cՆJ V%rTUmxv$^CeOcCkvCKM Tv>H͂d,9Dg`KʂKnj=*%?|<7ᐩNif TIڥjVyI,,ˣ%68mxr6kFx $phީm)ֳG>S`Dȣo;CjCFX 'nRT\VR !i T{i[_ZjVkhTlGN}-upq:F6MCM+M CߐP2Nu<7cG9`88nSZN=r ~ SjKpJm 3}6G؊9ѵEJn-we ~)cq>D+Eb8͞ C`5d!m+#DۯPFz$ II>[y\O<^St1D*f5Y"Ԯ cv{S~Y C!`8f@ MCɶ w.bz >`[gӕavq҅o+yVv8@pK^X,1N.aa8\ڄy?BHcud%C_jKpi|-=xN٨';;>؞8\aaiw'K]j-* 5 g?`y[\/m-Z2@һii7jmr *0e̠>~ [_ek#[M3,3ML߶p} ejZdgFCNHKws.,z<_I  =0'=q;;LkrX,賆9z|=7 "v/4ܔV,Mtu$h%`T+Ytq@Up- G31'c&oCڌnve9ߐ2mZgS"֡}o`0,UNr"t;!4nn W[#G Vw鋈x4deԎm:u455Ob.v}U7I?H/_V20أl7e;fCj6Cr\>&'Ƶt0k0(!\b{x/pɻ vݵ2_fW)NM!B*ӾfڔbyuK[p֢wz%X\QY7/ $, +I~Ldwl;I 8x6[ A~'BRV~Ӣd)g8 ^;G簔U7p\Qtq191iU tǏ-gqnc_!! jr=x- N] p?gWPeͱ7blA*G 4kDiɦ8,~ 䇏Ppr@ j^_`G!Zwk46gߑce?;Wxiٴ{ٻg'pd#_}=׺j-T#˛#d-.kE $j S#'}GfV3kD!@gܼQk-l\Ū@ Rt7p4o<WOcq&lup=|&(SMK[%멼Flxnvx::;"b2:e)|Iד7@;d07Ë -"TMb$ B0hBͧ?,ܨ'rF6:S>VC0b5(,h7_9Ms?~f0;Njv@Q8Oxנ