libgcrypt20-1.8.2-8.42.1 < > , # awOp9|t3 womJ u
xÛhWہ
z>7AASH3`xTMJgk-YeP2FEA Y09El /k?4&! GPTSPep9U +G
w֚A M$%qy?Ϡi{wmS}-OG
пW8a(Hy0*ȾƥbչXBGwNvn~ F\M ޅVlyI3 A9 > C YL ? Y< d 2 D J T h r
| U
p H D ( m 8 t 7 9 P 7 :
7 > U @ U/ F U> G UT H Uh I U| X U Y U \ U ] U ^ V b VX c W d W e W f W l W u W v W w X\ x Xp y X
z X X X X X X X Y8 C libgcrypt20 1.8.2 8.42.1 The GNU Crypto Library Libgcrypt is a general purpose crypto library based on the code used in
GnuPG (alpha version). awOsheep63 JSUSE Linux Enterprise 15 SUSE LLC GPL-2.0+ AND LGPL-2.1+ https://www.suse.com/ System/Libraries http://directory.fsf.org/wiki/Libgcrypt linux x86_64 A gA큤 avavavawNZ2e3e460e7a72b0f3e4d0e0696633fb452233c10c8d30fc4c18b66d8749148590 40cad88e02fbf4a05725ba337b28012b252657d4f050a590faf7c674b525ae67 ca0061fc1381a3ab242310e4b3f56389f28e3d460eb2fd822ed7a21c6f030532 libgcrypt.so.20.2.2 root root root root root root root root root root libgcrypt-1.8.2-8.42.1.src.rpm libgcrypt.so.20()(64bit) libgcrypt.so.20(GCRYPT_1.6)(64bit) libgcrypt20 libgcrypt20(x86-64) @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.2.5)(64bit) libgpg-error.so.0()(64bit) libgpg-error.so.0(GPG_ERROR_1.0)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 aL`P@^@^@^H^@^@^|@^|@^j$@^U @^%@^!^!]@]e@]]ʞ]m@]A]0_@]G@\@\@\@\[@[*AZ@Z@ZZ1@YYu@YqYTY3@Y1S@XXRXOWF@WQW9@W9@VVUUJ@T@TTԬTԬTԬTZ@pmonreal@suse.com pmonreal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com vcizek@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com vcizek@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com jsikes@suse.com jsikes@suse.de jsikes@suse.de vcizek@suse.com vcizek@suse.com vcizek@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com psimons@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com fvogt@suse.com astieger@suse.com astieger@suse.com jengelh@inai.de astieger@suse.com astieger@suse.com astieger@suse.com pmonrealgonzalez@suse.com rmaliska@suse.com astieger@suse.com astieger@suse.com mpluskal,vcizek,astieger}@suse.com astieger@suse.com pjanouch@suse.de pjanouch@suse.de astieger@suse.com astieger@suse.com vcizek@suse.com dvaleev@suse.com astieger@suse.com astieger@suse.com coolo@suse.com dimstar@opensuse.org coolo@suse.com andreas.stieger@gmx.de - FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
* gcry_mpi_sub_ui: fix subtracting from negative value
* Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch - Security fix: [bsc#1187212, CVE-2021-33560]
* Libgcrypt mishandles ElGamal encryption because it lacks exponent
blinding to address a side-channel attack against mpi_powm
- Add patches:
* libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
* libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch - FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
* Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
libgcrypt-PCT-ECC.patch - FIPS: libgcrypt: Double free in test_keys() on failed signature
verification [bsc#1169944]
* Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
* libgcrypt-PCT-DSA.patch
* libgcrypt-PCT-RSA.patch
* libgcrypt-PCT-ECC.patch - Ship the FIPS checksum file in the shared library package and
create a separate trigger file for the FIPS selftests (bsc#1169569)
* add libgcrypt-fips_selftest_trigger_file.patch
* refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
by libgcrypt-global_init-constructor.patch - FIPS: Verify that the generated signature and the original input
differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
assembling the Q point from affine coordinates.
- Refreshed patches:
* libgcrypt-PCT-DSA.patch
* libgcrypt-PCT-RSA.patch
* libgcrypt-PCT-ECC.patch - FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
* Patches for DSA, RSA and ECDSA test_keys functions:
- libgcrypt-PCT-DSA.patch
- libgcrypt-PCT-RSA.patch
- libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch - FIPS: Fix drbg to be threadsafe [bsc#1167674]
* Detect fork and re-open devices in_gcry_rndlinux_gather_random
* libgcrypt-check-re-open-dev_random-after-fork.patch - FIPS: Run self-tests from constructor during power-on [bsc#1166748]
* Set up global_init as the constructor function:
- libgcrypt-global_init-constructor.patch
* Relax the entropy requirements on selftest. This is especially
important for virtual machines to boot properly before the RNG
is available:
- libgcrypt-random_selftests-testentropy.patch
- libgcrypt-rsa-no-blinding.patch
- libgcrypt-ecc-ecdsa-no-blinding.patch
* Fix benchmark regression test in FIPS mode:
- libgcrypt-FIPS-GMAC_AES-benckmark.patch - Remove check not needed in _gcry_global_constructor [bsc#1164950]
* Update libgcrypt-Restore-self-tests-from-constructor.patch - FIPS: Run the self-tests from the constructor [bsc#1164950]
* Add libgcrypt-invoke-global_init-from-constructor.patch - ECDSA: Check range of coordinates (bsc#1161216)
* add libgcrypt-ECDSA_check_coordinates_range.patch - FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
* Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch - FIPS: keywrap gives incorrect results [bsc#1161218]
* Add libgcrypt-AES-KW-fix-in-place-encryption.patch - FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
* Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch - Fix tests in FIPS mode:
* Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
* Add patch libgcrypt-fix-tests-fipsmode.patch - Fix test dsa-rfc6979 in FIPS mode:
* Disable tests in elliptic curves with 192 bits which are not
recommended in FIPS mode
* Add patch libgcrypt-dsa-rfc6979-test-fix.patch - CMAC AES and TDES FIPS self-tests:
* CMAC AES self test missing [bsc#1155339]
* CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch - Security fix: [bsc#1148987,CVE-2019-13627]
* Mitigation against an ECDSA timing attack
* Added libgcrypt-CVE-2019-13627.patch - Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
* Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
that caused some tests to be executed more than once. - Fixed a race condition in initialization.
* Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
* The C implementation of AES is vulnerable to a flush-and-reload
side-channel attack because physical addresses are available to
other processes. (The C implementation is used on platforms where
an assembly-language implementation is unavailable.)
* Added patches:
- libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
- libgcrypt-CVE-2019-12904-GCM.patch
- libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl - Fixed redundant fips tests in some situations causing sudo to stop
working when pam-kwallet is installed. bsc#1133808
* Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
* Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch - libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
are invoked as well as the state transition, adjust the code so
a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
* update libgcrypt-binary_integrity_in_non-FIPS.patch - Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
* add libgcrypt-fips_rsa_no_enforced_mode.patch - Don't run full self-tests from constructor (bsc#1097073)
* Don't call global_init() from the constructor, _gcry_global_constructor()
from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
integrity check instead.
* Only the binary checksum will be verified, the remaining
self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
libgcrypt-fips_run_selftest_at_constructor.patch - Skip all the self-tests except for binary integrity when called
from the constructor (bsc#1097073)
* Added libgcrypt-1.8.3-fips-ctor.patch - Fail selftests when checksum file is missing in FIPS mode only
(bsc#1117355)
* add libgcrypt-binary_integrity_in_non-FIPS.patch - Apply "CVE-2018-0495.patch" from upstream to enable blinding for
ECDSA signing. This change mitigates a novel side-channel attack.
[CVE-2018-0495, bsc#1097410] - Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
are installed in the right order. [bsc#1090766] - Extended the fipsdrv dsa-sign and dsa-verify commands with the
- -algo parameter for the FIPS testing of DSA SigVer and SigGen
(bsc#1064455).
* Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
* Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch - Use %license (boo#1082318) - libgcrypt 1.8.2:
* Fix fatal out of secure memory status in the s-expression
parser on heavy loaded systems.
* Add auto expand secmem feature or use by GnuPG 2.2.4 - libgcrypt 1.8.1:
* Mitigate a local side-channel attack on Curve25519 dubbed "May
the Fourth be With You" CVE-2017-0379 bsc#1055837
* Add more extra bytes to the pool after reading a seed file
* Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
* Fix build problems with the Jitter RNG
* Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE) - RPM group fixes. - libgcrypt 1.8.0:
* New cipher mode XTS
* New hash function Blake-2
* New function gcry_mpi_point_copy.
* New function gcry_get_config.
* GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
* New gobal configuration file /etc/gcrypt/random.conf.
* GCRYCTL_PRINT_CONFIG does now also print build information for
libgpg-error and the used compiler version.
* GCRY_CIPHER_MODE_CFB8 is now supported.
* A jitter based entropy collector is now used in addition to the
other entropy collectors.
* Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
random pool lock).
* Interface changes relative to the 1.7.0 release:
gcry_get_config NEW function.
gcry_mpi_point_copy NEW function.
GCRYCTL_REINIT_SYSCALL_CLAMP NEW macro.
GCRY_MD_BLAKE2B_512 NEW constant.
GCRY_MD_BLAKE2B_384 NEW constant.
GCRY_MD_BLAKE2B_256 NEW constant.
GCRY_MD_BLAKE2B_160 NEW constant.
GCRY_MD_BLAKE2S_256 NEW constant.
GCRY_MD_BLAKE2S_224 NEW constant.
GCRY_MD_BLAKE2S_160 NEW constant.
GCRY_MD_BLAKE2S_128 NEW constant.
GCRY_CIPHER_MODE_XTS NEW constant.
gcry_md_info DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch - libgcrypt 1.7.8:
* CVE-2017-7526: Mitigate a flush+reload side-channel attack on
RSA secret keys (bsc#1046607) - libgcrypt 1.7.7:
* Fix possible timing attack on EdDSA session key (previously
patched, drop libgcrypt-secure-EdDSA-session-key.patch)
* Fix long standing bug in secure memory implementation which
could lead to a segv on free - Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
* Store the session key in secure memory to ensure that constant
time point operations are used in the MPI library. - libgcrypt 1.7.6:
* Fix counter operand from read-only to read/write
* Fix too large jump alignment in mpih-rshift - libgcrypt 1.7.5:
* Fix regression in mlock detection introduced with 1.7.4 - libgcrypt 1.7.4:
* ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
and SHA-1.
* Add ARMv8/AArch32 assembly implementation for Twofish and
Camellia.
* Add bulk processing implementation for ARMv8/AArch32.
* Add Stribog OIDs.
* Improve the DRBG performance and sync the code with the Linux
version.
* When secure memory is requested by the MPI functions or by
gcry_xmalloc_secure, they do not anymore lead to a fatal error
if the secure memory pool is used up. Instead new pools are
allocated as needed. These new pools are not protected against
being swapped out (mlock can't be used). Mitigation for
minor confidentiality issues is encryption swap space.
* Fix GOST 28147 CryptoPro-B S-box.
* Fix error code handling of mlock calls. - libgcrypt 1.7.3:
* security issue already fixes with 1.6.6
* Fix building of some asm modules with older compilers and CPUs.
* ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
* Bug fixes:
- Fix setting of the ECC cofactor if parameters are specified.
- Fix memory leak in the ECC code.
- Remove debug message about unsupported getrandom syscall.
- Fix build problems related to AVX use.
- Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
* Internal changes:
- Improved fatal error message for wrong use of gcry_md_read.
- Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
* Bug fixes:
- Fix ecc_verify for cofactor support.
- Fix portability bug when using gcc with Solaris 9 SPARC.
- Build fix for OpenBSD/amd64
- Add OIDs to the Serpent ciphers.
* Internal changes:
- Use getrandom system call on Linux if available.
- Blinding is now also used for RSA signature creation.
- Changed names of debug envvars
- includes changes from 1.7.0:
* New algorithms and modes:
- SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
- SHAKE128 and SHAKE256 extendable-output hash algorithms.
- ChaCha20 stream cipher.
- Poly1305 message authentication algorithm
- ChaCha20-Poly1305 Authenticated Encryption with Associated Data
mode.
- OCB mode.
- HMAC-MD2 for use by legacy applications.
* New curves for ECC:
- Curve25519.
- sec256k1.
- GOST R 34.10-2001 and GOST R 34.10-2012.
* Performance:
- Improved performance of KDF functions.
- Assembler optimized implementations of Blowfish and Serpent on
ARM.
- Assembler optimized implementation of 3DES on x86.
- Improved AES using the SSSE3 based vector permutation method by
Mike Hamburg.
- AVX/BMI is used for SHA-1 and SHA-256 on x86. This is for SHA-1
about 20% faster than SSSE3 and more than 100% faster than the
generic C implementation.
- 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
- 60-90% speedup for Whirlpool on x86.
- 300% speedup for RIPE MD-160.
- Up to 11 times speedup for CRC functions on x86.
* Other features:
- Improved ECDSA and FIPS 186-4 compliance.
- Support for Montgomery curves.
- gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
algorithm.
- gcry_mpi_ec_sub to subtract two points on a curve.
- gcry_mpi_ec_decode_point to decode an MPI into a point object.
- Emulation for broken Whirlpool code prior to 1.6.0. [from 1.6.1]
- Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
hash part.
- Parameter "saltlen" to set a non-default salt length for RSA PSS.
- A SP800-90A conforming DRNG replaces the former X9.31 alternative
random number generator.
- Map deprecated RSA algo number to the RSA algo number for better
backward compatibility. [from 1.6.2]
- Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
[from 1.6.3]
- Fixed data-dependent timing variations in modular exponentiation
[related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
are Practical]. [from 1.6.3]
- Flag "no-keytest" for ECC key generation. Due to a bug in
the parser that flag will also be accepted but ignored by older
version of Libgcrypt. [from 1.6.4]
- Speed up the random number generator by requiring less extra
seeding. [from 1.6.4]
- Always verify a created RSA signature to avoid private key leaks
due to hardware failures. [from 1.6.4]
- Mitigate side-channel attack on ECDH with Weierstrass curves
[CVE-2015-7511]. See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
details. [from 1.6.5]
* Internal changes:
- Moved locking out to libgpg-error.
- Support of the SYSROOT envvar in the build system.
- Refactor some code.
- The availability of a 64 bit integer type is now mandatory.
* Bug fixes:
- Fixed message digest lookup by OID (regression in 1.6.0).
- Fixed a build problem on NetBSD
- Fixed some asm build problems and feature detection bugs.
* Interface changes relative to the 1.6.0 release:
gcry_cipher_final NEW macro.
GCRY_CIPHER_MODE_CFB8 NEW constant.
GCRY_CIPHER_MODE_OCB NEW.
GCRY_CIPHER_MODE_POLY1305 NEW.
gcry_cipher_set_sbox NEW macro.
gcry_mac_get_algo NEW.
GCRY_MAC_HMAC_MD2 NEW.
GCRY_MAC_HMAC_SHA3_224 NEW.
GCRY_MAC_HMAC_SHA3_256 NEW.
GCRY_MAC_HMAC_SHA3_384 NEW.
GCRY_MAC_HMAC_SHA3_512 NEW.
GCRY_MAC_POLY1305 NEW.
GCRY_MAC_POLY1305_AES NEW.
GCRY_MAC_POLY1305_CAMELLIA NEW.
GCRY_MAC_POLY1305_SEED NEW.
GCRY_MAC_POLY1305_SERPENT NEW.
GCRY_MAC_POLY1305_TWOFISH NEW.
gcry_md_extract NEW.
GCRY_MD_FLAG_BUGEMU1 NEW [from 1.6.1].
GCRY_MD_GOSTR3411_CP NEW.
GCRY_MD_SHA3_224 NEW.
GCRY_MD_SHA3_256 NEW.
GCRY_MD_SHA3_384 NEW.
GCRY_MD_SHA3_512 NEW.
GCRY_MD_SHAKE128 NEW.
GCRY_MD_SHAKE256 NEW.
gcry_mpi_ec_decode_point NEW.
gcry_mpi_ec_sub NEW.
GCRY_PK_EDDSA NEW constant.
GCRYCTL_GET_TAGLEN NEW.
GCRYCTL_SET_SBOX NEW.
GCRYCTL_SET_TAGLEN NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
0002-Compile-DRBG.patch
0003-Function-definitions-of-interfaces-for-random.c.patch
0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
0005-Function-definitions-for-gcry_control-callbacks.patch
0006-DRBG-specific-gcry_control-requests.patch
v9-0007-User-interface-to-DRBG.patch
libgcrypt-fix-rng.patch
- drop obsolete:
libgcrypt-fips-dsa.patch
libgcrypt-fips_ecdsa.patch - libgcrypt 1.6.6:
* fix CVE-2016-6313: Issue in the mixing functions of the random
number generators allowed an attacker who obtained a number of
bytes from the standard RNG to predict some of the next ouput.
(bsc#994157) - remove conditionals for unsupported distributions (before 13.2),
it would not build anyway because of new dependencies - make the -hmac package depend on the same version of the library,
fixing bsc#979629 FIPS: system fails to reboot after installing
fips pattern - update to 1.6.5:
* CVE-2015-7511: Mitigate side-channel attack on ECDH with
Weierstrass curves (boo#965902) - follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4 - update to 1.6.4
- fixes libgcrypt equivalent of CVE-2015-5738 (bsc#944456)
* Speed up the random number generator by requiring less extra
seeding.
* New flag "no-keytest" for ECC key generation. Due to a bug in the
parser that flag will also be accepted but ignored by older version
of Libgcrypt.
* Always verify a created RSA signature to avoid private key leaks
due to hardware failures.
* Other minor bug fixes. - Fix gpg2 tests on BigEndian architectures: s390x ppc64
libgcrypt-1.6.3-aliasing.patch - fix sosuffix for 1.6.3 (20.0.3) - libgcrypt 1.6.3 [bnc#920057]:
* Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
* Fixed data-dependent timing variations in modular exponentiation
[related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
are Practical].
- update upstream signing keyring - making the build reproducible - see
http://lists.gnupg.org/pipermail/gnupg-commits/2014-September/010683.html
for a very similiar problem - Move %install_info_delete calls from postun to preun: the files
must still be present to be parsed.
- Fix the names passed to install_info for gcrypt.info-[12].gz
instead of gcrypt-[12].info.gz. - fix filename for info pages in %post scripts - libgcrypt 1.6.2:
* Map deprecated RSA algo number to the RSA algo number for better
backward compatibility.
* Support a 0x40 compression prefix for EdDSA.
* Improve ARM hardware feature detection and building.
* Fix building for the x32 ABI platform.
* Fix some possible NULL deref bugs.
- remove libgcrypt-1.6.0-use-intenal-functions.patch, upstream
via xtrymalloc macro
- remove libgcrypt-fixed-sizet.patch, upstream
- adjust libgcrypt-1.6.1-use-fipscheck.patch for xtrymalloc change /sbin/ldconfig /sbin/ldconfig sheep63 1640003407 1.8.2-8.42.1 1.8.2-8.42.1 .libgcrypt.so.20.hmac libgcrypt.so.20 libgcrypt.so.20.2.2 libgcrypt20 COPYING.LIB /usr/lib64/ /usr/share/licenses/ /usr/share/licenses/libgcrypt20/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22245/SUSE_SLE-15-SP1_Update/921c56a7e7d160a6b87bebf32c2ac835-libgcrypt.SUSE_SLE-15-SP1_Update drpm xz 5 x86_64-suse-linux ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=97bbbcc01a83bb74d33cad838edf8d663071b105, stripped directory
P P R
R R R R R R R R R R 1
벧AfSO libgcrypt20-hmac 1.8.2-8.42.1 utf-8 8fda2483a0c6bb46d83930b919aa1d9b237e28b3a3c5b7f06658e47bf489538f ? 7zXZ
! t/*#] "k%adJtZTȉH$Tֻ?Jj+
c =z%
R, ˣn$3-ͻ%QvQ@},$7U;h|DNF=RPU؍kOLAQQ^] ldtX$ 4P3&˩dSD$hӇ`o cp\W6W)4jyY y_\o"O ܬmzXxs+a,, JOYX҇=. 9,x؏~qtC:c pOv:}<]v$TTˡ$Za@^5@(?*m3a%#vWU倉/ ~V̿ [pA8ֳSH&|MNN ؤ_J T s /[Ker6(6%R-G﹑>rn
c0 J*IrI& Q?HO_Zr4.A#=\ѓ|{ٯ}hWU]ŀU̙5D^Ť sѧ먈Hh].m_Ţ3 C5W"SJƛ$NdaRE\\4T^EA $Jh7TX;̒Ȟʔ¦NS}TT.[e_UN]IkEqh{ U)2BQU f%9rɂNb
3.68gx4s2.ͭCTdEg*&>ds Z ݒyo:ʪ K/Q>= J5ZG"Ň^@.!*qBcYnV^諔5KL5P!3{҅3\g}+hFx(;6xǎ2}P2UA ˿i
'IMC mPH+尣
^)
!
Uʇp+~{9z L/NzSWEt _$HK-+F[lR9myHy,0yz.` ,KĂ [i2⦧ :㞥=ZS6 & -Ջ=^p?rxL Wi1$nn0ɿ ;4g~.
w4i#(/,8o )saH
&ab05״]?L 5rRl,k&"Lnԍm6X3>`${͘h.R +tqV&u3f*rD'w(+fGeS7v,獽ȿєaMV&S"Cml9256~pg z9rO%liT``$;
-gİHnն:
F)? wϾܣ#{9!.UJM_:i"b" $3z sA
NlCBbq{7<
dzglɏ-%%'_;Hz;19FDl}uzQ$
KBmy(R,$q [ 9t܃`g*>~ Mv/J['FqMǺ(q*\Z
9wqp.=k!6& 0t0o y26D,G8^Y9. Р7l*8f! /Np!$wT=k1W8<%,q 4!7Rem%X 7*z\]T
(h*MC]`B{lCz+ S
ȝX+e'Ԫ2eAn 6 S BJy]$wjO\̞Պ^RTW ,
2#m]ũs.u*~]d
qj&(ѡB_L&%MmL@ .J jzn.>9O.Am Ӿdx{1P8j a Q[H[)t]Kr6@
#5_{vcN+ ivg 8h(QQXߙP1`G
#Lznu%9V9H#-:s+ D0nzJ~h*_"!W@C2Y=U[1" ,}m 50HAȐ'n
%*~YAf`:Et6x>\.]M\tBiC}AkL"@6Ŀ:
\'=־yUx|f=ߔE lBA
o'ˢ4 R˕ٰACJN\VsbC94,IHw1~
.z YJ C~:fb̗<+:f8}Zz+$
7?}H]i$sx Hfj$?_^ >QPѦs(P`& CDm|h:F[} D!X/`({ IuJPl,r(ЦFSݪO re( 0mLL5/yoIT
Jd[;i kG/ )
!d@(>( ֝ u^_1Rc5@n)-T
(e/_U~
1"sK9E
BJ] )|XXބ{qiP/"hRj<(60^8 E iז 3`Mʚ H"+R !vd
iT]E $r,[cy׆dĜU8xjVU@^GB7_ Al Fΐ*ðnO&#$c xg
BO#LSbϪb -_7o f w=? tuY. [He O"\d4RtףKξH)1K0pU9ъةR]+2_Kw./M-%?^`}G;U]S<t6.+zMV?W"T$[Z
kPه0>3"oKE XRtt^X7M:g}ihAFoT~3
9{h߽j2+2KwCKi?8v.dLH,1^h>㎑~ XzVj
%݂Cg%)G>2L-'?:7
,9K_vJ]`
i]+;P&~w>K~f~6oM3(¸7ER,Z^cߋ,c\UI6Z`5ۖ t2 eዛ[\ ٩K712 J 9^ Wz'isn
\
k$?9`r)GW$܋h-w ?@AQ$ zI[R.D& =Tpj7Oї@RZ? ,OV3 "wvb8@7]:
tIp0v(o#]6EÐZj(жJòv] R L 'K#6
KxmVT\LaT *o֑]Ƚ+8x8N@Є*UHV>Ui(&y]P=b X3IS<|i.zlV3ұ D8 VwBsu#poзUլ[,w=o ƨ;o8'LƂЎ&fjzglpzKU3'HƞUv B@15"^
9ݢpߊ?)j??! 2E"~IeG3$.P߈hU&4v^00Nn"PBQ4*&Ct)1t 'nOئ5uNxAFw?nW7[)oϐT0/iЛ9dbZhBX}"u 4TE)ӇJDVILOTJ1`AehZiD͛+
᠘>C;O݆ l+p'$:8m@t┫j`c .. `nk0fVTd
(bŶ}.VJm3A䆜 fb? -$xE@E# ee䀐r4Î赭 M|\_BCI; PN1DS?fJ*EaV$há_U|] b|K Dj7/7gU(?@#?S`KTR}5A-M BaCJyˠAXYimtQknݞPF*{({ (o7Ctm\Y$m=7th5aU:ΖP>xzjDRK?"4ޗ `خ] !> ?)*ϡ/N/QV.2y:Dk"3aNBGC[oxJ
֓0Oht>(V82r`cc2<ʉP-t*tC5MNC^h^f_ ڰ邔ujb_ /.KX@$הPKA,"WQaWShsq ^rHo9{
šRm&2fϳ/+"`F@y3W@K(իA
8IueFu_iF0& 2 [,2"w`.mW`o"}Bu:u;椐[18, ŤL4!JG'\5D#(=.O,D+C482r8j- o Dj퍘9 Z/\]/UpVdrualdS؉GMt?
i^ zt+N&HWAwT5a&ayvۚs4urU - KRx>ݓ VS^A$ΚF::JN={Э x!b /[P- JEnԖ-y\?Ci} Xs7 |i&v]]B:BfU ~ ؖ^f
řr t̰KIu=1CByT=v2S!),C %˙ƕyRhxȬZ0R7( R`|eZlޙfƊGc;r>:V##(eFpjQ.e /pߜb_c`1#qD"qZ# |db @2u pP^;T2˟d> OvU :ȻUGn##!69;Ƅ /x4KWzhQSf5RF0xX5!:+]|:oj3d&$Xȉ֣Γ7GtsϜI3 +3GR'@\|r6%h5mb8XKRPl|.z`\M-\健. U=U_ 3!'TƷuYo\_AΰE3.D%(/h ?zX؈f?ET;ώaިPG T)]d1=:+g7 eߗb~u4z1XTnP? 2=z^T0{
P6595~D E .p
s+]PoQY_;3
~@ ψ$GO A;eXr^͡)S\*svo^r*D>$Óӏ1429mǶ
'xZvɪG' Uu
늳Cme: GП$ Wyu
ꢕ KDR7.M@ES^ @hǓ7D畿zt$ /gv~ʦ՝CCr!>[HԻ -EBxV)M-m ,g䉦}eCB?JkߨmP4D)̵K3\AQ^FBbwY=EvꚔ10Or#C~t}^ԕ4ODkho
8I̪ iMܦtl
TQn(k
H?ϣ5Fp#Qm :^f ɇoKF fsT=nX?#fv9߿˗R]B} *H8WY}?둠5e\ zbD kl RJpm
hFIS-ж n s'5,IJvIO0
C"q>)]ۭpϴ;\J2Ԯ9O
֙ɦS<\{;gݭc5Ug9@HWg]틋MjHRS*6ADOh`]X}ơGӔpѩk'~'T u9 QҬnE/l/
-!U[(Ƞa [
K{[U(
6=~(,C %Kuunwg"Pw L>ylw?o7 bI yX?\\,2r|L|P{X=s\Pkdې U204.8`Smd C)G 4ͅ*99̵Óe-><9o! ;~UH XEIVGݐ:v;bCV2Cr W ^ZDYr8T8.s>ZY_v_j dJ/%7-2vV>{ma/>xPx T;?Q2'b|k eB5BmZCl +0Ue}A
H4w!Rř^/HO8]D FG#ܱdlRA:; 4Tr1zyLCsbe D . x⥕ 'Wm9SyUv T a$ Ow|ۭ[[\6,C5k !μi\1ex{Y+D|OP* o3l1xޜȅeĨj
4hE7c& h 3@\>,3GP{:6K_0{y*\2 hykBmDFv0a+a6R 1q .ˊU `l
U^#0\\%oe8+9}+3
a^3-G{!]~gZ_"k5֩CRGlL qL *T:̕: {V١xvA(} g]%9 \`AhB3pX{VԪư 6
yQ!i)p>(mR☠^hhRyq pC_y foT\2Awa<ۃ8畾0LZ9V F
k/{D 4IU,gXe'|(Օwh / "o Tl\@M90wE {5骦 㣤) Ds zD
)%O; g67UPG] (tT::z¥J]o
V b8(ZfLYp%8cѫ| A*<ڿܲt ~U NWnN( ژ[?f<9"G$H^\~ E=M NƧSH;k˚ކtIGbSb? XWڋP*]J* %MQ*7 zKXxM)W?rQ>\<^
a}fإ{*y9άZ
wC\1eԏ=NQYsNAp.&M^B,5]kM};͞c\3de4 N!Pd]oEAA 6Z"0EvL nm}ͯPϡ)+A@{l8-?z_* {h2yޯ}4ٕ
U5Z^4
͆ ]g՝.*B_I(, t+&R4 #9exjߑn)=eWa~
~K0ޙk|ff,?Uv [swz7RDÌ{tRXTOtkr"Oh]nS
N 0+(xO:/[ (P%aXx>qoFqŪxs)J3W//ـ_g,,G+J [}u D&k[^G yrNG&yFW .Z?qd;U2PC,D>
nyQQS/(?3t3'(iVmkH# yd+Ug~jΣ-YWE<@X3ƾCوJHNTqR;$@ =`O6P`R*f7=ow;0CIAOQGAtNhϒ?w[F
7#x\ J['q.9:H=ctfV{ cQt;)n%NzԪzU >1!e$qAqts
-ìgQGKK%QVeo}-.\gџEC43SEM]|yL[JҏE~MG_"<#yaN HV9 pw(S Nay4Zd& nb
}Mq䞣 ^7J*+Zl .dUb@ )cIVi@]V2&PwH6;xX[M`0"(Mem 痺 I(ZX4ovѐ^1 hfOI#J\aE >UcB-AJA^Nj8|1K1h^3ȽTEo ._E&e֭*4}s tU6@J+
'r]X.u
eviugʶ> F<}9@|_K0
rW VʦbD[4ؓK AB[8Kن;f6sQZ)LӠVDt ͮh-AV\ 3j eS ]A:\2G9.>^/ ?JPF*vlT;fv&B#\]_G8"X1יbc̓ae5楘ŷάc<vq&I®ʁVk}/SO ^FAܚ)FT&a6#f _#%DRLu0E fY k2bu
G9MK-~#7LQMfNN1
+IpU[<7+0w(L=Ҹn+^mg $PԯeufT鲋C(c0
SF6YG
մUA&* 3Wj>¡, {[ 7M~$avZ7u۾ݖ
&붞pDo5 Ԫٷ*ʰF#ݏF/&n?G|lg8l
,dDg=!I'Xٟ3*Wćȗ MA@܊ 6`?O{[AE+aV18lw2L݁uzh2sZ11
'|C7p??Pu1u#6+]Thڒo7&*V)jh &9 tz;º)&sN0 dGbySSg>FEokk7v X rF- 57`
&:q)vT<| 9
NԴEH[f)2tK<9 ݉] /R #XţK|Ԉ3y}M@q\DOp>s
>`ROtF|2ːcc
λHDŎzv$f0V0^œTj#Z.Rwwk4 UxQ
WIsiW
hF|ĿLQF(V+zp65#DWmAZ@Hp\5(Q9I υKhKH~]g
J)
bM~O(GoqDPU[Ѭ_OM$M5'k33 9b- ӨƒRzLZYť<9F2IZｒ J31!πԐk{_ T
&BD
wYj
K
lhJ
Vf^ ̓6~0{N3{֬mϐඩO.mqB6O TUI":>J@xe 3S4\21 jgMjM) ǴZvӜ6Rgk [9a ^ZRlXw"
P 5 1OeNT#ZEՑ
vВ'!"? @>ĉIeY $7o beW>N P*5 3&2}{l F? )rp&4e/fJ{cUw /f!#L..3yU4G~Ku+O@
!(.y^ZV>O`Wuj^ TSb/.+VUl>ҨEkPLE֘-DzP* U}.kHzD
: +zʾTEddR@^nNNxR FE/@gZ>ˣy^
\mMI,#<##p'gMJ7Jb R{%uL ;Syv
,8k d{<q̎ eUu
߰f~GFjLŕ/`I7Hk]+O&Y+sUsv yoa^Fa 0l-Ӄ&'oV{kQ%%dIF X,9e_Qv6Lz8z)E?Ű8^t4rKb)d#
D$g%tA s/&IEXXb/ƞe-gvKN#j 9رR >Re뭋p//aJI3Mʪo;;҉'%7N@ې
) k [F7tp< >2Enq$s;I+=s q6kPg<3hXjɫ{"^U#NYf,7荥W;Ŏ
C10qy4iV vsF G9R 䉈1p:[h90~G;OG^\ > %X9P%yP) Ia(~ (LN CM\;Sh9HoI\aV4qq K2UXe{gl?֬)*ĵ: `U2 u x8XLI3K&d,aQo]yDd"ˌIs.^_DTm*F^?^)n g1y2֊ΰʯ \Tq
rhecz13;Ka捘no9 мpyK6xx8\ʲtX6qJ8:%jj-݅b*ͥ Xa/fqUJ8" RC`$4 H EI<h+D%сZ24G]?#XxY`sZ,4]{g eƉzmE, r;H,`JjLnD\M8E ha4"Q#8ǏP Хy<{yرlַ $!^ox }EE.P^Xo&f;TKIR8Y4s/
Jz *)"-v~*ha(FUs-)K@X:P#q0 uO<Eci6v B$N
GWésDG}X
G?OŇl)
zi5$oM.hJŐ B::Z9$|f(8e f^TݪnRS72d&Gs;S?鍁|lLy
tEA5}7 RX)}_
nLW2 v'Uy(/{J
tlH _RX !R+Ky*z 9~v
e#z| ZGA|*uj?6 t#ꤕqmԙ
7RX;n;rT QT"Nv;
BQ?5qpF^ſ'X4jHv w2Iz5?BK2^Lx d`2 {9:TPNzvF^m7;`u$패L[ b#ω>4EBYZ (F@9o}hC$AzeM,& ,ҞF5BQ~Qs'j$XAؾ #9?Sr̕X0b 72C5нr
J1-Rsg⮙t"%۳#lpQ%U\!Y0BR@3h "g{75,yz, 2g =o:0<`kgň~2Y LPs7\^b&>&ҁ< d 3|V te'no3!.VlsJ]ʜlG *o)|.G7h9Y+h-UBߛq9N:UfN ,fUewj?%!9F3l^8Ҥ0qW7;Τz# j/.]z3j^pӵ,wKC`;̷$g!l*'5;H ~>K0>Ix{ь )oDC CZWqN_1y}E;3wYJdGG6 zd cFUK[ۙȅSz̔RE ;!ְrwsQҶՓ ,~y^l٣Z,kN)a35P'CDV!_{A4<vr~ 3zlj"
W(1?JXyʝB3V.x` EuĘo!UA=/$0Vz20R ׇ>?XHVA.8 3'+o&<ލ :o`;xkCpAa$uܺFBn2{cbZVߍӐ(}&G|,pζ)< e0~ ,胏Q&,D xH$LZX.IcĬR*^F1 +iH kIa-
㟌Lp 6En~mb3KԐJ_:U#ۣ7E%+-RVL`rtT8!Fj/~u~BhX1IpW~JO
ɔk2'2H5Бd͎xDJquX}
$8WqxlaO$.A-dg?g^. &&urv/KǏ6[ITf>KcHc~Ӻ?zkBj۷]-m :퉙o?{+bAnWBj;Yw6(3 A /)DC[QRYG
xHg qySGbțm$ g_DA 3$DsDBj83tN.O >gF7])a`Ӊpr0 ;f2WGa&YJBZx| ^Ԑo_ KDLE`/ ShQ+wUܾ~Č7gxjx+["cjxLM˾< fW6D^ 塚a_zD9I-`MiaVs_ 0jr4I,zG3 i E&-$9R ߩ%pxx14.)wu_7c'YA~S夢ro-E\4+x64o]Ҿ ~ 7W%2 B aeF M7e ݓJn 恵kUcW GWuϦXtp9SK`K%CՈЅRS q{Ca?] ,!˰EH-2r٪>o h[ p WH<șVMx, 2=nZ-XȥF<&VW@R6kʷRg&a
Dn%o
17w6Y'o\b^^rBI#S*SpG1) #y6v&-# CF/9iLjm8b`E~^ q5qĀJX;~. ?(覷!I=Ar v hȄg`C`.Q?v 'E^.h >eȷVZIz_[4ze
[z WIH DH7b_̖)(1j$7WJ:HAşj!v xϔ BVֹQl}oD~?czb^¼՞ӿ;e\rSH^vft)'.wQ-#%GP0u91NTDWN"ց%3 ʒza
Y YEЊ'w;M|SQl%pR0@}RTmѽk*i yFMgrO!tE s 7O 6$+Z{rȽTʤJС]Uq߃էۡ6L}Q!Q!{sv9 Ҍ[QւH8؝)N 8 O(t :n
j%fjb(5ٓHpR
+䔓j?؏K::yiQa & B34WYNV""f}c٧! 7b݄&,j:uC56 EJO𐚣Rxi^al(@7ޞEsJ_N!GF <98bF6͙eU2֊ !;v*waZo2$(
<;Veb[V`\bM*TqdV <7
a)^@ ~@%znN/6e[4'sak}(myDԽO`!Vh i,ײD*7慏䁧M
"
uI?.UTm:tYDk)"TOmɽ5V`;J g\qIf}VN8) 2h6#@!hFveӮf@{%+v΅bNC <
Nкzs Iy۶Fs6ercj5mQ̷AO{.+ #V*& K!J4; DUN55Sb _S~ Z;\'p1tkB\ln g\ȽhDLw#F߭" (uf~wҝ&ln=5v*bB>xs5TEdp悮 ұQ7*>ӻ[qgP& ?04~ot]sP*4SNd2?d a2xQ59a^~tևD'$`9:=} OPWgZX7PH
ͯK` WX/ ]|:sB5ծb~(Uo6
V;sW65I6m CptY1>R}0W Lb(B@JrtUBsİ0աuiӜ:-((G_niz *Gf%3ҩ++U&`=u31
ң=yp(-Ol;uZO/U-2O_B- s잩 g+kU;hb1HϋR"Y1>rquym9?Up- Ǧ6Ga[9 X%` 3*iik c蠨Z\陸@ Jd)tp2WokVoh6jP= ׳N aH P^A2p.6K6\J8Wfvu\LK wӗ IJ5#ZI1#.r
g# ?u'{g9A@"!U-~n8 sXj5U̾a-y q5yO^6b4hm$BBYz~ ZޢT[I{}µp;lJ:VGi{a!eQ^1쭂]k#ܳd% p Fĩs>4aT
Ƞ"a}
+,)ї]qe?Oh |"sʈ;1e i 7XNk9č#xJ]`NKL
Y|V!@|hՎ$Ji
uQxՏS?>\K1s}s9^ח2^UzB|fexLT /dx%ɞ xK pzgGW
Zшh1DzL=ݺ;tg7
}ilj {b (Sr?v6SvY$C&$.uiF~4aqI~)Ѫsme+9Oɥm*lO6OǪpߺ&6L$꿎B$Bք*
J^yTfL$"[(gR]B7 a
e3B:j6Kb˭18 aIe13Lwb&Kr]ٟV
F 1T
{)kz_@;`;^t%w;5;d$^ RQ-/D`Qb4FL9/%e os t]%vȞ!e bW1#a[d@r'YFڒ+Ccw-ݴYH1uf :
҆hQ}t:xEH19
N ~4З%K
N>k 䮃[:)H{ D ,ߏ郊c4F}$ ;˻'! :˶XZzKsB S-ijW$4"sW&f|b_W"XN' ifB!? o6+ @n#K Vl auAyXm".R} R%`ɕblR2 +k¼5lNLǪx+FC_ fWoa "^jTF %cZ $L4 .%PTeFfemԆ>StzKC un~a`c9T'؎jJ|#}B*lg1?o
*42NMyEC̗]ʤX^}R%ʹB 6] TM&-㏒d㘂
C7h57&V=EAzB*aNr5Au覄?#嘹<}
;'
չ 6~M :
(x.a$/rN%FT#LX6dgS<&f5B M+*bRx/a.HzfWo51|LP3F.c
YyWiBKhnс( Fc } YiũQc+w mA[ /FW1A rnsʗs,:u9&D_^{5O<뵷z!]z 8Sj&oSlaީI&^-%mX?"(3s[,*X]\4Ҥs&4(-/o6_'} ŗ?*EIeRP\b9Z4y;8K|O8JT-s:-ԣk, ]Vg̎-cJ /mɷ ^ee^ >&R[F_HW"ho$]>RTS\G:o$ aN
z-S֥1 &7c;݀Ւ, +
`,i*;cgևqq2"W1 -巻0|/4ڙZ 8.0S}
Mh+.k\_?hzhB$B ,Md| kX{tTdd$> sp.r
c6T
v
3Mx-nI1"åVLӪc(0F
d!? Wl*azR'a6J߸џ ܪD9\]s4[fL[3K4Of` HyiM,6+O٭ȥxN!>\M +*`/a ^S>(V$>tcBAD\<)8_
cJ Dy8Wmǃ.
'K0 =7`FQsw4+6J4ޓ #t{: U` sƥ>G~rIzgrؾ9JsyUj>a7+4ֵ3I
7eFm4 9][.F)-O|B/|7B2GMg1`,ЀX ~8gu
hzut|{G o(ںmᵲ,rX 'qoSc8ޤS*cAe)''K.̵vvg *: 5թ$~d'H_N1c>[O't*N NDUގt,<3azpN|M:Ws(ؙZ'79AE~'aט"D3iT(Ǐm/{uKn5VuԐ~.` c 8óq5Ey! өJM N3<,)^QBM 'zq.W
) <^;3x? oʜtFwΆhwhsBcPtq&\i^d/(bÊ fyC)VO/(.%&y2*X >$9 i_&N3H ա݂87 _.ݵos6ucZUܵ=gxR?owpKޜ;8 =SeBPgMny s
d2Zqdjq% ڦK_F (8Õ&~yHq
ߎ][-5)|}\
'U D7NzK& jxa;/?БyCk_y-xi#& N]*bx' ~wg1&'U8 Lޯr!OU765!
*6 N~ 13:xDX
<{ ' ^`a( u:u{B V^U_7. a߱蓺:8j2g(SOr$fTO(DQ P% v- 41qPKxtE{[ )Kxkr8~nE徲֤TO 7!,6.405d)\(x[\)]m-Da1GoU頞C& V03urkC TZajF|Vzo)',ј5v&x*{ezU!ť4ɢ/u-Q)-&ϓ0GNw0/?sSnRtM낈#sB 2+$̖%RZ·0_kq[7`{箧V8X"G2)`v $5G,I p )2. GkB=ߩ*A}[ ds
xy&v&ϑ&~߳q=!TK/,@]rڠY3lC9VLn8Hb^Yw I)nj8LUPY9(,BƯnam\ ġ !JtT^_%8cۤ_=Z v98(Λ+ f8 }MHsO@kARLSWyI+K;<bNh E~,F(
t'uPhQaq43/\ ?Dm
P9T-lqC]J zت7r}V> /GbpUczP >Nj%E(Ff{"Nenzҡei`Z $]
0ؖ DD+8u
#i~[
ʍWQ@%4ϻ5XRY46u#~Mi8otס_g w BKzMMk/ P2((O=l~CNM,v~j4l tTæ@;P&v ]PH9 +DD{#nɽk DI/O coj #FxQ,^j]]۫#oPgai!kAqݜ\HobD+ Ü6, Oa=$X."p =tW=eY4_07ֆ%zOcH[ < V+L'{=ոU+(MV %wvNS֬LR-& &&?Q+3c b^oG ++$k;* ǪHXp)bۀ (U+_#qa 9"WIe2ۚZ$ ?]?w=alߒޓDs"X_S>qs إ 'X$
$X1s }<^?H8yR5p/"><I"t
BvVU(@Q皵Y. ]N{vƗܮ 84 CYO*&JCu4+bt
>ݩ]2FSd. -/HiS|/0{R F!1ʛQ\ bt HE}bw5qgڄ_Ĩ ㇞䌎-Y A^XຨE'P)Q3u>TJbqIct1HHh
4=:f0tmkzX;Ǟ&V}(VhK[l^ٱBBC by)dx>s8 _'CY)7(ACaS,ī+ P]u {mx 70
/s"Pjo6Zq0vC4 uwc% LOSp XOCZ"iCA dAqst(8 99z, . 0ȬW%`+?נmvb%8-J
`0df}FUXrJLIoMΕ \C kBSTK>X-Ô"| >1 Axx*Z֯|}#ӷ5624yB4)OS|g YgI -<ϐ/"!{w1ӉۣolQ!"Ҟ`c?ƿ*&YnEmjx+Kf(̔zY9ki rH}}5]'] b"Y%[H'>i@R.n7so?c# UPԃ4D 8tRxݩ^V;|~eИq s}y !E;oBz _@QSz0zmvgRv;& $Ux>MWOB` \ѽV[KfOor"mhpS`tN6n&4O"fb0uvs"' ?Í^\Jփ GCteu0 l'ӫ;,ӵǾݖ&^)|PΝA%#ux ?_k>V9 L@CI_a#ڸ
s @c-5}q7 ?w9=גPT!h0lx$4lɰk^%v`{ -
֒VvWvu˲eok *οV.r4d0!QV>5FfxLsvsXJ8Iv&=O y r#H9C#=(C.W_ ѿ~M=J&ޜREhbʍcL_O&C
tHB l8NM 2 WY!),}x\Q϶.+Ի 9^"@
?k:#KO`1; Z
t:<&}\'"Wy0}, l}omD-aݍZs}BLJaʰ [|XH=xD>WE1HoWw@N/~ݲSiqSӉ|諶PyJ.8 ze{ =fG#>5ɻJ76Q]
Yڣ =GB'9uEmBV&2Z*O@zs|FK֠ co$$噙u Ҡ7Ԕ"bC G֎Ƭoʞ@{+zƪw6{Mm$g¨3 /jvPBCIQÆyjckL_M
猈J:2h20+q:}OilHU-?t-MQ館KV'! `;BbXby}
w-.u3IAcڇQV 5y^Ф]|#
.x,~!l|x%GAcr!?:׳ݷV_3F(37,M}_q
ԭZH/gم`6ldVL Fu芚 J3U8DY ̨d úymjBn4@E~p
vw-Χs7`ư)
20*|G~gAV
tLȝړ?zs^{`)E7`xi:oyEL涥b8Ew?@ΓSmVGͰWCUhY{^LVs>j
Hok*)vZJƛ8 Րa#Ho`sN_{d'Yċ}{
yy qq&Geٳ'ß^5(-rUp6ނ]^UG1ucf%℉p`H6Il7L鵖1=d_ӤTގ.`ʈФ dsYZ/ \9 F00ZOX.-K2lRTyf} %
2:~jx,T]H&}l5DAeȻ
7! P[.Erc! c>gOYv
BouN54 gz\ #y nݿlD'}
IJt CWB'z#(qjcuwoD7afvov`S9Vob.1tA`g&_T Y(˲e=06 iUsG;w]}huz:^Tܘh{VRgZRfmKR 5H< bLWtG-fc=x4j_%ġ~l
D)2BUGU! aB1)!t yϲqLJ54a_nmT4ۺF@$5'%Zl\R3Ya
#u* bw浨 2_c
1l(Nwikܨ/.EH7ixF{]^bU1l'TH=_9RO0^ }
Z*pӽDt
fZ: H2jC)D. ^A]R]G _o'^@|NvםcG~+LP 7U9"dv>6@uer,S 9>0k ӭD&NP
63;cD ma"b+]KrKJI0 {LPfZ/' PRAA(w\PN\# /P{: 3F]y:rov@N3N 6flP/V[$r{g 6@\q% B]wQ $9cV]KJ 0 0EțZ#Z
.8HI2bsjS4 M26yCfp/5 w
eV],IG_"㵩r7#?ͺvC /31&RMw9{/_HN@0V4ݺk&mCH!1-V<N:!-SU'(mEӻ3S4 H&RpSz1=x'udyFB qg
gq {aNqhOk;, "Cs9ИI
T@RM܈[ᕿ2BZZC$Gq z4L5R
ۿ&8 bh`)~~O.d"!:nKf㗩}\M|epqL IE^, rNe 1-`b 5)|be fߝ5QKգi2-c?
A[ݡ|*La
p#G/~ > O?}`W 8-}p=EPYG#s29[ZEHM"c)0;e=i4G.>m->U20dļ%23Y%ѣ 56 0: f.6);-ٙ 톗!MPڲm %Q!lsv>@gePVI[^ 9J5OXGcGEZ څ@71.Y$*Ww,M..UGF瘋iE pbE!D7vfGy
.SżދPbmDqyh0V^erlS tq3G 0[a"!lQlȫ_"
+Ceh|,]jGIwY0ʴ6$I L`e((t /R,g
x愓ňz>)\-jlK!.V9kTb7> ūne[ne?GOxm3#NblI)
=R㈱~tTT%?yRtCOLw1v2'V_wr=hZPBNŖ*vp> d9|,AR]ug*ܕPӭT(6m^Oj[
6$E !xYSX8:=<ݑNn- Q5t8l!fԲGan<~˒')S
;
0nhS,H^ǦxIl} > k'7~b{X -d*V}X \ٯ SIyf
ގhqKfϰ9%!3-%UP^u;IeF /3hC ZU57XӎYUF
TG=K Kݹ0h;_uz%SYv kA'5gs #:l$V}W uM}.hZϒF/ 7: |{ht_5vŏ + Xm (#v9| _o0=_F3Ax7Foq+H#nhC2[ `-Go1lIalP~f6X ثX"
pQ=bå Ik{eэ'AY>˄Ǵt-_J#*
VŲ&c!plv4usW;jF2"T=Q Fh $y9tB~> *7f%BոIn7#1i_ 9)gm0b2]h 玚qFu#&c*q(
[1ISQXk׀ ed{A;oI漑ߥo &cŅi{2rhys FD*])V
չ= i J]c30 ;%|*pL䴏ow"?# iϝr inX"E64"1n']Y=c0yi x8V akQ &vr+.6,܆ x$O,&Y¤>1s466@c 3?ebl{'fQˣǠ!Dh#wiR=>%[.xz.DVQt\ʑ6ގJOpD{Dw_;c A%gɥw}Ϯ)O);,!CV5RP ۪ݤbU 97㣒nepUd3K;(FIN7/IJsN%w 0k.q#ZމJ" Ff.N-]k|ym !v ^u{N}G +s'e
|m 3-c_wDqWTLx FAZ#
-wN3v+eԗxr fLz$-\^w՟P
Vx (mSZ{Fܢ{XWH
%$zo o6'yV"H{=zUvֵX Ow8H`! 6Գp^ f\
l=FѤ|q7"-M tPrm^ۢc~Y f`l% \İp7#51ru҄Zo0]'2 BvL dH$-u;{ѻc5tTY~ z fÊrI~?2jVډ%] V'j !:; s1S|cj(??4b3a?$QI PKd4P{
# l Yg؊2ș~Miu9ysv;Eh.kj'{I u\*?ϩz,
f .NXSua%`7š &*YӯbZ$V*v$"1p˼j)F7̈!5-!<(.jPꭶw彪x#3("ljZ @<*i ziXYNx >, Hݭ z@7&rܟ?a0{;EؠkKZquFک%N~e$MQ2
tXi-bRqQĉ XixǫYy;+ɏe!-3,eֈqn?׀}F=U,_o/pZw= N.81WJU
G S ScU_rJsEqMai <@Δ
ּ6ХɌLK,?c
͠;0 .)BwKVaOe4cX4de LuE4X-¶.dtQbtp
wgIlĥ/P?JqeڳZn 1}Fn@2SdJhKPc ?"zz+$ʑޅ[ȥgY!F@zp}vR3{zOWNZ$:~XrԺr/
D?E`OUu4y4oٟbpҭ:LsMs3T%p
h7pinfELA&ۀ 0hB=.`}I{R:ϕ<8wXчYHqnsVx>BrJyu~ I\p? OM I^(a:ZbK#;_xI&zJ /TS ~+n~Ƴ4ˈ)'f^)
Q{2t
12>װXk.Ar0SU~<ՙ0gHCխYeLU9"DTS KUij=H0U؋cgw.%T(j&m }c7ww]~AJuE @'.GAILwoAWWNwHρh*[y x6p:+C÷=Q'x ^3z(^696DJ mw"dd_+m6joDZ/oh&7,X1 ~s:^zN
2E\N\BA72`78Ocq2E߀ eIp#+lβ:~FZtF8<ɨ7
2+m˼'GgG )/ UzTWn vI%j/iP3n!C=
~ *~V|JӐ L% |lkO Da:F'6?s.$1L%W,^hz\~M;}1( D_J ѳV ,d\e"7c|H Т"_A@ar][iAXg #<^!TxyJ![b!r/xGb ՆΌ\cc'K
/ 3vسln@BF>߲ :X}`Oņ݊Fp~QM - CufOTɃ/. A#ޙ"?HsFVm[]K RlN : V2Ĺ Hb Ay J퉬 ݐH=(( yN>%%` J'6/6mJbV r]ѻζs0;h= ;Ag#4҂ZvS|J4Q' 0joi=X!%h]HlC*0d[é\ hT6~q7Rv;4
UGXPXǩ1:o= 2y^.~*½ŒE IR}]Ew&i(ڏ0 > j?+ yd
0 gx+JUԁfF6 |d{.<, $MkKx&ȹ\++yihc /ef_uDɨkE{Z
ʆ ~&0~/O l :7Gel_,xjXm:@j\CM 7- ,g'mQo+zMQ'=z/)S).X N(>x }h'} j -*%^7 P_`b,uquA{LsMuK|&Bxl<-v&aE'
β(@\rؾB^dKc{㫰wؼ4Y)P?ٶJp6)ԡv|#AJ%-DasFp4P>*&v ܾ
HÒQb.O
&+y;$F/ʎ_ D& :G
.M7-V >A뇠W(}ƲnjIC uLӎT<I)iOkM ] SBݯI$ZkkQ}&P1I LKg̾z *p3҉nND9]0,,~|JW-lI~Ɓw ?E[d{)#ȓ#4hgJ:)#jB
bs2E--9zB|:;2¨s) l*ʼZEGpfY ^E[ $ o:EKӋE %쀢uxK5nk cf )pN#־d r"y7Jq='8#
6
rrQ7_ 99TH x忊.àQXq!Q
l:
@j7n_%rF>?psW79 q}اk ZBhɉpd
Iyj|%q@UvC2p@Tc"VF= 'c TL .5~~nK 䍞4kz ,Y*lh#|<9;S-d5ohP1@1[ hՒ-Xa?00<
"hWƔg;+h 2Op\TE^IF%$Ƅ68bgR8wӑNEMNj]_7NoOZ H Z=%| ?Ya$8@e:Rr|8`/ S] 2m!S?*&*)ܳy՟ Yj )E/ ;}v9)UwY6eQ Αl`sҧ~kZxOa%Wj*|SA+)tȐ٢!
IVx {忁r&!T+7u
_^]+d6W EvjLfnW 4>A&mL }(s5[%h
VμcOsϏjusu.Rdi
*Бp^w|a(DZ: /;ےuX[= XLdz% F_Jh5$!;hc8RIH!>MpMRz]sM{NncR:Z{ Dꉕϼ=h'U Do\YNH jKn-\Gߡ0Kj1VWrrR+§""גA:0'|t(aҦzzN˹@j) .Cgq1~_smk- rG?$Ff{8]B5U$~6ECbEXɩaϝկCG L# (_65 9E ^iun9r?0T{NlJK.Y'ۉ|ˈ{pNQ 2Fo
2Q|M~_#fZc!ͩ*)@ [3
B셦WL{%7ͻ Ut )?;utwvRH ȹ.lh44=0jBnOHZ!'߱>M栚Q d9|p}=-
W#e\pmP@HF
#8zXq`}U'hQ
Vނ7sIf^B0(/K$\7B}JYl-az@ uf?~AS)kIb(:5ͮ:T#ͭ4
SI Ab Cn>htYX_5*g=S!G-FNA2γip?ʆv!i#FQ^ uRݖ},E=5]>-3i|)lEy3Vl$hm4 )V ,]Na'WzDj@A[Q >z\d E-E, aǨO"6
asbB|ہ^Hy8E1sAkO5 N/m}ǽW|=J)m0^GVW(Y5i 8T&yVX+gHgІnPgdKa[#ɅJw=7 $xVd|{sb;xPKXJ`X$~! 09sv̙ĤT&Dd} WGѕ@|)?v`,Cp= Ε3إQ*h XE,%_x;hW` Xj3/hzDlibReQ|cv68p) ~:5\
pVe aa KGpix D}&-K3'QHNZz9ס%ͪuY QF Arȟ> N3zeMjaaþ9$ 8ľ':Ex4 ZH4 oK|4Y)9,EW ٛxRogd8]VERdR; lrВ rb %r}R3Ngl"TWI,Jڌ˳߳(9!AR= ÛUN !n(0Q+`J Ŷ
YZ