nscd-2.31-150300.46.1 >  A dWnp9|޳8iOT~cj8sTE 2I^4Q [腨=F Q߫L[|||6:6ԗ*05 : ϺNrg2}dM9흧L 02U1mW5Ԙ;rvɒoC"*|BH炑|Jo13 3&$9/-m4˼r=?A Gxa :RMR&TlUT0bfec77f3381423032318a90d9cad098bf39615925d0134eca9b44e08474c78c0ddcb2437d085794c6d6a035d102319dadfd1c1fdWnp9|߯g7S9ޱ׈lOHDAU3)bhݬ!!MStVo6FxǁM?Qw$.)X,0ۮHTEh+ŋ K 9s#HKVT(hJ5^:@z?DQE|LW},u;$D>pI4?$d   4  GMS  B ?   D S pBd#d#V#(89:!=>?"@*B2F8GLHوIXYZ[\$]`^ bJcdsexf{l}uܐv wx8ytz Cnscd2.31150300.46.1Name Service Caching DaemonNscd caches name service lookups and can dramatically improve performance with NIS, NIS+, and LDAP.dVMs390zl38 SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.gnu.org/software/libc/libc.htmllinuxs390xgetent group nscd >/dev/null || /usr/sbin/groupadd -r nscd getent passwd nscd >/dev/null || /usr/sbin/useradd -r -g nscd -c "User for nscd" -s /sbin/nologin -d /run/nscd nscd if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in nscd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in nscd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/nscd.conf || : # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl && /usr/bin/systemctl stop nscd.socket 2>/dev/null || : test -x /usr/bin/systemctl && /usr/bin/systemctl disable nscd.socket 2>/dev/null || : # Hard removal in case the above did not work rm -f /etc/systemd/system/sockets.target.wants/nscd.socket exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nscd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nscd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nscd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nscd.service ) || : fi fi exit 0 ` A큤A큤A큀dV#dV#dVIdVIdV#dV#dV#dV$dV#dV#dVIdVIdVIdVIdVIe2cdfafd373d24fab07018d0e95dd49510ea6c992b7be2b0611ab23bbc2750b579fe74962fbce2fa9b2a4b92f693b2fd42cbc2ed331fae268de7104879a72df879c9cec5dd2414dcb76d11e75903aa6fd9b7785c897cb9f853edcb140a71b77936adba844af4fd7e05ba2c383fce0ea3c6f50a1e78de9adc8164805913c86433/sbin/service@YYYYYYYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.31-150300.46.1.src.rpmconfig(nscd)glibc:/usr/sbin/nscdnscdnscd(s390-64) @@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(nscd)glibclibaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.2)(64bit)libc.so.6(GLIBC_2.2.4)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemd2.31-150300.46.12.313.0.4-14.6.0-14.0-15.2-14.14.3dccU@ccob@b@b֜b@bb no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/bin/sh/bin/sh/bin/sh/bin/shunscds390zl38 1678202445 2.31-150300.46.12.31-150300.46.12.31-150300.46.1 0.48nscd.confnscdnscd.pidsocketnscd.servicetmpfiles.dnscd.confnscdrcnscdnscdgrouphostsnetgrouppasswdservices/etc//run//run/nscd//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//var/lib//var/lib/nscd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:28088/SUSE_SLE-15-SP3_Update/69a767cef0d2cc780a124cd13109991b-glibc.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linux ASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.s390x/run/nscd/nscd.pid' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.s390x/run/nscd/socket' (No such file or directory)ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=2d2780ac9b60b4d1f6ab01ff778f6b393b0440af, for GNU/Linux 3.2.0, strippedcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.s390x/var/lib/nscd/group' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.s390x/var/lib/nscd/hosts' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.s390x/var/lib/nscd/netgroup' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.s390x/var/lib/nscd/passwd' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.s390x/var/lib/nscd/services' (No such file or directory)R RR RRRRR R RRR RRRRRRRRL0Xٖ.Bzutf-8f21e1f8cee398f0f36e2b7e7c2a1bafe83e944bc3e0d9d8290d2226adbedc6ff?p7zXZ !t/C] crv(vX0'Yq/iNn/ HRH2}Z1r yThqF;{RJꑛN 3S"J?aZo&<[l*E2ZCDXS*ƒ9;DZ|pQ T%y4,zG\X]ȵU?i4cIⱌsjmWFcIJ/3^Ǣ13Rjr?s&-N H~f l(4kw@/WLc8L^I=ԭ%^xWEX9FC>sZ-r*!&;#cjrIz .F]2({r-><DI~_`Ys!?#JNj1=?nAW?|[Н.߇CQyx+ݷhVGldtä\/3A%}4۳O 9%vnDYRZOh/}N7WO\ͼql4(ۘase0>"q)=%4% o+ :v- }Ľ~N3]v^kjQxTXw|j_@ JMF+4㼗{/ʻ?izp$lŜGmqY@0v?U=&l*l68BzFؿ>-SĔa }Nb[saI %^#8gxSc p_} m ~dæzSA+T-34Z7c%1YdʠJ_2#0|=:+3>o}m>ޏ6ٷaȱ/? {e!&C=O1Q,[̡30'$>>Cz,<+2tFڙ.6@~wi9)0NCewU FaA]zKwWY:$!K\lVfGTR[CmwXaבTש`^y{طW҈*[Q%"e{ ܫsŸՓh&%/XyQfaïٓ]hf$[ a?m3uqY0_eXMC2M7ǖƷBa{ k}exr:B/3%Mo`_:޳P,9]/Y18Vx=3xAϟxm!s{%;ɄuS}f8"@:9 tt8XCԪ_pCa?3n6T%s 7Y!ߧ'+:ښaH]gˁtDyr,:FI$ZGz ׿pWg}{|ΓSFGỦj'f\Q1Mlj˖%b$b(>kDip:iW>1-R.a y+!u:(2j,M8RK8ϼޥ|e tDP Sw`uk(S Vt]Ude36k/1,Gㄧ,Z\OOn,z"0(T@p1KD'vXiw`OqKT{˂mjˡ4rEP ÛYS ]dYfSŧ Q!Р5/[p  ۯ4l(10^4[PLPe,& =)Є̴~**sCFvvH缲$yP嘚A4fT-syтZ 6i"`Q+-zZI藡d7"*B֔kn}zr1$ ;Z|֯O_B{^N[,~!)dQE}irA<0'$Q\X=%*`7L9uj@~؅64x{y=TG N]7^ l[B֨0`=]I#0YmT_HYaRtvzF6/Bd*zrጝ :;̹ ';8/i>_8[l^ȺE;)z\Ki\ayb/]JLͨAdra(Mֹ?",UIFh!28Tx=W<fOD!"nNZGcVZShެf%x>\޶Hs˫1V$x5Jc`B~] 'ŊL0[kED"jF i5o6ƕ5Nݐˑj -mP̂=~Htr)2<ݩZK.d 4 7E螺%"ڈ )H~6KV߯NJhua+k$V,F+( 9z -bp 5 dqP br1ȇRLpu% 6O~PڣT\ETD@ Oz:D>IT%mw;qtE~}agSHVDri&2hpwPW`3ՈMƜ+xq*RM[#2*'l“{l9&fek{ʡ*unNzgȉ~ B }~OEgsG -^@:B;B:-|ngmUB!ϛl#?[Q6 oG&ΕXD2v{&v*ېMGĦeR0Ñ`X' 2zFg#B[:šm`O<=[:LR]1=X>6ХX>Ƣ%JZ5DNPī^;}<Rb~HVTIMPwu=752ֻ ᵺ=HF$r[/{`mx?C84DA{eU1`74865-pYqܱjꜝ۬7OaUQ[)E^^'I ,F.deJ B }zP6T-yrV8-,]f.7DbD8lGzZǺ#'NC%BZ[gn|Ӧ"yuahSVpݼK-?ĥ2-5Q Q_0c`؆g,DK2ix9*$%ǸxḆHGxCHH7"VYWP&FoMRr~oD!af`TP?S~[/qzU7DbN-| m)*r|l.JcjD@׊D۰^AUlBY| ?t ,,bK 㽛%UPnWz\?e퉌Mf6] ;A>c]h-7%^z0?Id]L=Z5 {Nh h!sVP OxpןȎC5g".T$EzBLbKMLƟʠl(b8ϕѧOB~e{G%nzWDJ&7r)zsCx +GeDOj#">CNC:0(W> yH4y[qᳩ -sxt&C@wyYf7ZE*!2aӲS"j 70k' \g`U9'U~SW#ܺ;v%t`oQLAr q U>{֛dPrSvfY[#/>"f|!1(<.`E@ᏚZΠq:$`qin~ ž*;uWm;\7o.c&p8vh(~ó7]bc!I:8?NC!\cߔiBBj 5_OF#:R@+}O*qfޝ[Y%c" @ * I1-ZRT燈Sޑ9m)@yyQ }޵;4gg/E­[橠7Qf8 SƆhQkK9Um[;2st.MZB~s^Hu0<.Ok%~FÕpocV~ ҼN=qS6V:˳ܮ2dC2 -HY'9dQXlWʰ kѪ-GvN@* у6- *eÂ80P aeR[QqCqzIB=vlDŽ_n]7nFFW^ &e +x\vu|xb*ep3/}1+kz=rtOBO1װ5:<όʖAtJf?\=MN֥y#1z4ENxW(y~RzD >լ%2#tW4[hM_\c.Zs2tɞUMFmغT^3S?} fi?©J DkAQ|H&8FtFl4BXfݼtхNul[њ׸Vw6b'>HBN3/u(2I+8x0H˙4D(\u8q֗t=1EnrgbϷCŀ=XFKY)YHTV)Ѱ_r<2֎Mpq}#fS^}:g3jYf`T#se);Y-``Z#p͊<?G ڕ.bkռ5Q-Q,rIBn9[Uֲ/[=D\.aU;m.ALqBR:sحm)! rg\SU8CyZ]"w=?"6vN?fY’QzCfߠ/?uL&[\Ynv/0V2_l@9Џ ~k󚅄7[,ۚ켻+g.rZBr?/պqm35dJ 诅wt5v'eOYz{ xM>4V} јٖlZ'v5'VZ6%Ѫf2r :X@Ycw .' Iyz!|]{==,g9])$i :*&zu lz(nL<5r&"$α1E j072;$'՟­(Tݍi:rFZ%-iHONL7ܷWU%Udpq&Tm%ӣ*o[M`i5/'WSbu}v57>GQ~z{u53i!D~=@4;&ЗTݔ7q hh=-_; 7?h8آΣCV( *jFiѨq"!t6-n73{:2Qȏ$>\J(! 歽rX%(VR#Oࠀ#TZ.߶ =w~Htg&a4VHx oEݬl{  (]NO @ؔy p"P .'Av MVyoj_io3loP`qcy9'H95'ْpl -n^\t %P3Q~Agp7&T0r7Ey=/$0hרplA!? F|R£-ŹWsն>Z nXX~u0 CqsfHFdԓG9ڝ!"-2իp݋7kL1X Eq ׵=mȘMQ%h5h"4'iؒdd.m*Pfj̐>c,]ĠvyM $x2]2"I^5ZxMɾB䁠ErLZ;x@|f𛩦@A V>]5H&Zxd \.wuXSM+o ͢& ?C! `o5nOPx_'xܼFhK|=h\}y6[ҳVoɽd'X*]aF/.qQHaͿzD67r ѐ$G+ɴTGͿuqRLy߬хh(_P-;X$9K2On,0?y5#es2Ps fT녲0hZ>;3r$u 'R h_Ō2m\@A_n:5`ͨj ]ls!roc@[uL5RAbԳJ0Ko kmjta49A/ߌux\N<O#.mt3ĪJzgS nSX{+~5D3vH`^3Јê7{ߣCW?yf)"l(RhlVڌ̝Ö-t/oOg }NmLIT.&~x~}XVa b#w NWfh֤c5eeue'SFGпmR[a/֭@ܫS!龃G:Q:*ewe؁n. [8|rkĀ~aPPT#Zq֝>?wF{Z fWsnd\&ʰHۛVp-}G2'0 ^S'0-( y;eWqU Fˈpm%mAM>-4#ķ Ӵ/I~y$I}v@SY[Mc뙌gM9A 3ٱEpW1қ}jӌ$ҝ/um &'?Ͱts-r.Ԛ-u09Sv*킔t!V>P(?}.奔2>g~ƀE@dm@5mcO7-çϴd$u1#{Xf/Xgb2Za<ӷ7u̇@eמD'Y";~q#OLAjz(6$˴$'4ڝڬسބ" DۚdE̜!I}R9EjҢ;/r5MzWϙޟ[2M=J2i~D3D=f:󬼍R|2W(^y*.OhNn/ #.-Vl\{T "\/b416HDZ53AOC+FlyNONܮ`W5pn9'qp*_V*Wop)(>vYc/jSPB#7uŦF@kRҔu͕Ӫ`P0GX"&th;ASPk<A*-8JLސMZ(#@fՍau8kA 0H̆N;((>4E>H2^Br"Vy00k_̲%l$t2vUSTOS0 :PUS{s6`|JLj-AASj>(ݰ懀UoQ=Z"R=IڦR z`~" ;gYqIb, $c$t m+pg 6W__.9R5pGF-uY%4cW}vm spp3`k8\J:j6b v/ntǵcl[Bc+ٜqՌ!4$ "w!zg>Bz `Z!>6 :d&5i?ɍ[ȺVyw`fB֒% N1\<2w U}@{Z r(n#ݽc!:x}g:*`IO zFg^ٛ6> w6ruIU.-ǭgLtgXpNkZ#}9063-aB!tHVI3STguZ_8p5C e-?m~ ѹ}>0ܶĨsǫ4X\Te*LF BP@#盩u]7r fSioQڲ?咤W8ndà/=Ie="JT. ^ *A87PfNNjr%pw i&eVF;˞HsYBM`3D](~,\ج kjwT^ T߁|0JXض5Wy TL؊lpG(|)gZ|LLVXp +BGd!Á'.i E$P]fS«W46oǜU| ' dUtfxN#AK׳8) '[71@PG q-,XtXQ0RL3G!ʋW dGkn k ;0w&GVn$?KxY ίh0'H,ͯ 9+B>i) idJ 0[%ߒFmѳ@r:S39L#`4ݓ+LWMyͨJCe׍ʥ=#ȕ Ry[2zYǁ%Y,?W@XpU r'g|^o}_xYJ/W68;fBҌuB ޸)R~ 6v,cF` ^-&blX8i"L]rr;):Q\CICJyx.c.|= jiQqGHܝHG9gfYW7ciY3D[ +H~#x#e !a1=<:bL(ţ|>i$tt`PΡ{q7գvpEwG W8;K(/Xك>*<!*?.޻91UE#LзMŴtWj)6 L\ȿJB  n+`zΝlm HYJH )Bպt`@e9qrkJĨǵ6>kAbO@{{GkMW P˜ņ&Mi 5Lв;PNcOVF9YgwW{5~Òc?P*KDSh6L!W⹱fA6\>4&;}}MA/%YۼgZ*E_tKTs5s9 Pv$e$<? Z+m )=7m#/mKm3*IB9hv7Vod-%8"H`7ՂK #-PdKBI A&&3z-А-stQ' tt]7b͕W-eo«?Y?Ks-+DUjagnU!ZKkbc۰H/58@v3r4NzjE 8ciY;Cb o<tss߱].Sأ9d2sVwB" "v捋HS 9\4 S}?ר_\ǝjTqn,M^DzbKix;;f߷x%_h񍢲tr;Kfo񲝉^?F9H IBy1|_\K7m e >f.I.k$ bU OHQW)#4ye򯅻dz`tf @i_8RNZ'# $`@φ:u=o/%aFM,=K]v|<+)@dofZĂ.K)!oU ZwX,]/d?^R,P:b7B:rTBi@"Nh뗽 MiԠlB8B)؎dn&Q4ݷLJ03X`/ڥrͰ@'f6ݮ 'T23Qd1LZ  Ls$4Ju,*K'qZZJ?# 'ɔCQ0bE9'*=2Ex?(}?u Zcy$ gڲw6|RCY\}@-FfH.;;L>Q=}KNlH5>HX[8RzVh׳VA2`l7Fpb+cmMsIi@`p*s 5i S|5RRLGXMX7+Ec^lh ;ߩ=(jsX) {Tj B0P|$藝E!†-'_⾸1lD>+RtJb9g-Cs?+gO:#w䀀Ol6r2.@ЦU'_.uNLW5G~V#Oj8 ,4_P&21,3.4OA:}>h͢z9ż'v ւYbr] PyD/B!?5o\g6KKDY/KS=>-/p f[o6XyZyPXPo-\ />_@yݜy.)$ @v~UM-K߆V[5i 1eu tXHf+]LghX&Zfa._0Ir0 nr}̙N>lbV0n4;?mBj૱ªTfck TY6*TK!>al W]7nM.ٵ9{0oXY= (4`Jb`22dCBWRl.8o͙u fU=8 v5KhW@cAxb!a @ENϰ\YJh%S+w9L$ʉ#o]-^N1W³'2*8]th֣ۏE֘s#C^ 9&-W葿E hJޏkcH m'l[y-=@ YU+Eťn~mQsBamYn bfq͈W9u 0'ɜ)e6LD1Έ20kNڰLې{jOf!ʍe~2B"3qEH3>.L;E߄-y_#f3Q];2՘>|2Z3OSr~Bv~ovj9}Vybil /آB%6,^8KbEj}} @SZ5EwY(A}mzv7 m.-w25B5Oѹ \gE* 12>-WgwC۪INƜ`|e$IPAy~e b'Pm9W-9hJ =Vi~*j`M1P&uW/Ԥ ݤ|To7MmR1xCf󰚲$vx,4*̰ՈWㄢ`qG<~@5_hP^]}NP@iSV|}^(`|vM(/j`jZbIJ7c9=5AITIoxH))9]jЄ{iBU L{"JɈͭ ܇JaZ hN<3u~*Mδ8m$0^jY}a:jKRH:|["bqbpEfa>ʪ<_KZ:/S-غZ X.V QO_PU!A6dw̅XKO"֚%WiPϊԸXITz&7PN!5O{)'rd^u|"=^KLS(ҷmt} }<ǭV\p8iEg vkꋘnrSMEW)e6/,7[e'WPP63/Zn--{bzo4}FL]~ރE][n Io%I+*drV۱| ;2!0#^e➢L6/19"&wxGƘ]L^?L^۲#?lQd+u|aXtGK*3N=I0v锓#~+vH?%D.cېrvk‹8 5:\ͥ#\Y&[&*'Lh42b#0ҩ%J$7~Շ}{f3T tw`3W;TIGiMmϬb@ן;ճT&κŨ?Rd "6#W QC`٤|11 B;|7/">p =ٴǿl3˕~@4GG6Sb) O8vq3u9WX5{jp& 6>_rBԅ}>MD7EjwFGW#5ċ%SIb'+?_sQ2& ~ v^h<"G^l֩+'.L `J@lPy&jٴ/po_쳥E2vCLεpfXZ?m5|S,0t-t"|y䟏~D2bE]HpIĥLQ+aO|#FoϚ%*z^a]2MzWSVS]}$Օ#b66ZbSioPWgdv Iϵ!2ciA?>=gW_(w?#pj8n/`{S:0F`/m.'7jLH!~Ad' rn$iLW,{ yW!AawЏ4A$f*%>E'< S>Sy nB!$<\p5-S:H1opxpl4AWgd|&|ըbďJe% nƨ2[*#MsUSC}[c1S:7 2qfh*/8D8ϥbۂ~mQgd2/M4I;k!{M@? ?'j] ]ۺŵrBWEj:aմUVό;vm~ ]]/z!#"n_Ҍ:@nRoC~Tyki6I 7;φF_t@:İE-$_\嗖 oS(2EZ&:fl3!TAg@vdSSrҰR^:y!)lEG`*x:Lo(#ĽC(oRY(jEx?ci@;OyWkF;]c EhJWЩ2!4F'p?h Nw goEnS;؎:L.BVpЈgkx@lNjRWH]@-Ͳ@,[C6%g۰/آAkT+uE3A n1_&!% +v5RVqFT4::@z2'.=ldi+%qD@b#o m;DRo:yYlMʝ̞YbnԆ9t}Dk b2m&5OXiEL8%[wqqd0JaZ_-beW䁡=|W$/I>z1 DB5MIcH7.tN!\_@A!5Ø )$lmU-ӊz_B d1h:L(XWW_5AY b;&g|5BQ= P[)42U '8H_@CF{U3Sl1_5GAVAU3>M }utOC2b b.rȫ$0l!\* +W'nv/AjOC: ^67]yg㑤ke`x "9502zrlg}U"`K9*쯑ݫp'st` {כ㙆KV $ ^;e9I}bf]ܷt9LմS[ŷ!"9CIr PXyVmb,2/~y_4';XdM^ ۨ-:5߿$+Hj)[y b {ZWuӻXY!%0{-5#VQ-jRt'Jwr3W 4e4' >$@h\ڽ,C՛[!<\†"-RJ^:=gt)rv(,Sd<+aRIf8 USB3u 8R6*V^/(/c9߄[F4!W 7|MxmF",:FgNj@&Uyg$|&FB{6%=!XO KϓVR^7\'H~C ZA&`OaSaHl(4So;IY2ɖPmqHh'M*兮EqXeʫ;:NqQ6=#(]fS-r"A ^qQ&BR:ބ jT`s D$令flejlT u!Ts޼6# l̗4EμD&jN-Ƿ6;l{zUA?wlhL\RWwK>ZwVLL;pP9B5;V L ,.a~k!zOv{B1pԐ('#\O$xh3Y]9EΦ IpK }#YU5<*$8su`gTcQLd"UFcy:3~F\:JiT&?~DC)S? e);:iJWhwUV!1(c): A&LX%<АK~8pvCw@whm0L7\nUSһ⁼KgHJ+Ns#z'LqWm7^ߊ,~MSs9jP3yV to8N4L:O˜7ܑTBKnRٗejA%γi1?11l9lp\ءEPx̓pӞF2( DG!I;R[CA!GIijȝ߶Tq ёPgΗcKCSaLbBIsEm'nBynfpte ¬8ŭlAd>| gG# r+Iq[g]n|X8ZՂK > 3t^P.-ꣅ.u@'TL 1DwJ z&WiGitUvD1ʜn)H 2&[L)MyP1L4 ػ'AJ!-&,"<ZLe&/ɷq-^vK/9D'mّMdyRO)vc R-і>$kN !h>h]u q.E]ʦ =р6L)4#h۷ ;sVzs5=-}+ ;i B0%Hc4T#d`Tt ǰI|ӟ1ңl^csYcD$Ւ`҇sbB}r`Fs><̖8 :nm;h_|]omCo꛺UNX*7wˉYjN<RQfs-޻hw4*I82dO/1,#zgHFQGO @/O3b3 D Ei!+֐niO mMr2G|lYPp/oYw=D- P&Xz{T|ymnV!f[",VT\"3>+LX?(?MLuUj eO߸{+e_V^eYnKft70.x{%a7-BT+yfiXy8܂)1LTF`Lh#,-4[-\1Vfj9V8p 8]:w7hc)arJ3h5ie< !ҋA,9*!v`DPuDpr]zUOߠb@/s3Ό4 v:Sp /{JXRԔ=]_EH;\=}_ ZKQFI@,5 ESq> BWxkwgNԊa_.k E*X SYW}GÆQυM'W ч%uhבM('@LџDU($w6ċ~-rUFH ?N;;I魅JsBӑJ]̖T"8/YCPKGP۞O-}peJV uj@RQ%ҧ>GB_r8GSLtGpTQJ؎Y'08_ 5IReD y|sVq~&T;_r(vOX-[ݖkVtoqC0c st(hB^м-ZáNQI˯zH-x-fmj`MQ-8Ԇ[BZ9D%KX'M^oF~~_$,>?/qa7mKb^Lc:Ɗ7zM]Sь/|.k 5w7fNd^ᓟOߴ,wBuPLn{Ț׫'1B0{-,,#z/Ip ˪s(+jEa?1%cU5S77\̩ĽRĔ`uy47&RpPx?6YW!=d6_0]T#H2{zP{HUj$ڕP $[SkrCȧ,N=վc$ͽ# -m$[;õ ׃|- (x5^#N"p//C>r'>O쁯II)hvt 1m*ȈD Ze^Z5gltec`K cc+& jCCXŘ7aծPSҶ=dLq_;Z ;Z.p4Uq}*x)`fm. ]妆Z%G*Ry“ML%QhS#- u젇,8pt8ڜrƒknc,!طV*|)E-acɾN)m9Yi X)z1 i:a7zp_%أpEPN&qj9h Lo{m]4s]>NMde3t; ɹ|"TFOnDsjϒ7bqaJ ;$k&;K(|" H33 IRΥ|3HhCyΰ<¥Z֝x63uk 7eM(a0uGNʥy(O, ̽V"F&r)!d.'7VGu Rǀt5QWVHP-r&HaYrc/9 7JLLSՓ2kYSd6x)ܯ D'"įWp> r-hwm^jp;t1{!Tz&J; xYgD[{)F oW[Xgɇ=r^ [HDiǨwuB qi #ö~@LH^JigQh Sl̅ d e44JjHDzNU]ـ1c`ZA5@zr #q})tm5͞M*tNOsȃ\_1?W{xPxi)ೇTC /rZ n.΍itDžǚMUV@ U#w%Э3{3p\+B܍`^E Е6'pdk2$p./ˇ9i%!|^1p D6S1oXrN ʠYo'AZO߼0Ƈb3.G@x!y2oZlh޴0N &L*F)p{NOds1 ea!͇ *QNT6l 3g@A/.i}Db 1O/+j\8#(vx dpRׄ+L"u!S2%2S'nϝ?%.Z䇀uW!\t]s{=2qx9m?)"ZvMlLh$dY0._!&˛?e, $jpn ljOJ'P"`e=~LYV)ov `s31ݶl4lR/J9f]uTN fn!-pWy<Ǣ5CO vZ=B5-nk ;IF^m%h G p>3yq7*0Q |eP1ECBa= <򅻅}ٕñMo)t c&ew7;f0ڹۏmNJWFOBh=I>5Km%?DF - Ų]鸊ݷX0b9醂: zԛ A8wrljl?̋/Kʱ&D~փCB'`\c~XY޿UyCi{ﴅį3ճE/|ஐ_i j_tCz]Qe 3Ū#@MvB)UМr[wWa34vcdS#5Zeσ"e'97U} 9^D߲85cid\ak}«TdgK! j^3 AkUr]$:3爔fhaIzF']9:bӣF9 Sc*SqW)$ i\u`cN<Ш)/-%"n봳2nߋ1Մ@ʪґdpY 7MV\D_v1NJ$pҝ!8v+n lpC/?z9d/#l$$tý ZnƘJJk^ؙ$i61[zwu#OlcwI8{Ḡ h׌ۨWkm>mS:UΘs"x1ώ.JWFX BnuK3|CBv(. A7b4R0kk|\ZhGRKr,3ٴ3{ `]kuc ^ 7wȶdh*N)*gMa:kxPkqg5(H:jW2 ڹi0p6UzAْbz{e5T(J:I;DiS^ I:`/[rK1l:TNF.*%6}^y9M`@8tO]-4TQ~,\+gJ%@- F'f#GX?34<d1oQр3s^8>dZ+W_Dބԕ3",<޹ke{l}@O1eȣgx!%%n7]FkIoJZ+Y]t,L`9,8Vq4m藻5/kl=lm JHlT"O>qh8cO?TtI,)|yxboC 45Nf!a8D8Fӵl-{t狄} ?ǿ:)1(/T3M&.>mǯx&lR$4uWM#&BLx#' Nu%ȣ'gk`AY". 4Pm<ˍ?vpUbK1R4:GŠU4 @cʩB0`˱ŲhKL3MNghdLp|O-K㇗cs qv0bf04;=iGS$|mآBliq{.0f@\c..4NkͿ,~Gwchhz5OY=õ.2^H ƻ=L:XSVVQ w6Er2, zsf ݹf0fFL۰nR7gbj GY`l=o8ڌrBNE ]ZPn)wb-qĚ-{_=LNTL֙ HjXU !'w*Z}[ث24!MU^ 32Y\p.ɫ6=:Y֡ LKT U<$mh̓z~GB A DYH~@d1h+_:%6*`t 41[%|,Rs.eh7x*GGv;ODr_Q[V]04y@Y<.lQa8?%ƣnSG opL= RJ7 <5/i%6_&/2 ySwc\js1!:iu.0yP98.aD +Y4A;>AE`o(4k淮2R9_JA_Ly6DS;K^;+n1tSXG@mń3vb(҉l؄\s>{y`%Ee `@4aI))Ȱ|E xuLͬA6obm"'ށh +\ eȥyQ{V#ۧMKJ!36'zr u٠*fgx6v;F1b< t跑{@.4ƵO—d䝘Kv.KeΛQ ^LI[8Tap){{ws;WL^tj=; ۬Q~u8W, {Ղ0w{@`O Pog;xfЗʄY$*tLzt[5fdWbsL[9AN|誼ƂF]z+L(tSaTP^F"doQ E<9/ƨp޳oYMZ}N2 `C.35ߴK;f)2Q?E1Fq;b]mu+] 6qw(OH#5\14Y٣Wܮ=,#YX4[@vp:dcXR6Ŏg *Ț'at &^ d!:劰Ȓ 6!-q}3dɶl{P/H/:R*VT!I | nv5agkFkspK)0AdjӅ!JcwR=GU/W(nKڵXD2$.k5$`{cJi>C;VSk"s @ڍ9="'cYza) }Z 4x5ǿpL4&/'jyCp:Bʅ-sB{Au=<2P|vj;ڏa( ^AQ#VUSUy4vر]x #jݛ}2{5'$r̎M=Bu0:փ[q]b,cwouHe!*<[(R˵jt'.\SsfxsELSQ!>A!;P8 W˼\jB5CpWy5EphVGgrvovg}P_CBy?kP.Bi ;LfT W;5.!϶vHj;txqdJh)%Dm[Ti;xwD@2895+`FHwգ*Ǖ2W44w,lE +*H:Ȫ'mړw4Ub?Vn ]%s<@FPp& b6ݜ&LA&04!gXF'綽y(eYA8qr6CK&|YEN/H!yɨDppXrȬIXJY 6kϙwSC忁LJOLbr]S :xP0?O[sҝ}s>򡺈eHTR]:|S8¦B[^Ǵvh:'S9InP3hþ)6!N 8a-~ G9/7lF֤%ПpLvyhQFU5 v3SYQsHLCPEX&-be6{Qc6Ϋl.$Կ58c_Pѽe09ݯ'`4{WT=5BȽ,e(3xu%7 RxS,O>5qC:k6zmlQW&h!d<DO̳/%+nXxw\3YmDLhucU6fP?PoRiYN"ە8)UW4MENAr~iʦӂ=t'ƞGYr[GuקT*IbO*xRJslt'=tFE@av`(~elQϮjSd1(?K#r7O+nw7I ` 臶Y\uǐ20cfb?[fJ qk4" Oar x;L5Y@X3p-ږ+޿`)g#~iT?>Yr~H'4cD:$!8>յ_iάEn|4DFp%t7%yx5GMwN77D1v֝9}~J"I7鈸! ǐ? +U^y33E+NH)Hh/co@i[?=gܩx (51)n|Am%C8-Zb-]"D4hVvW IU@@UAe їDxzSuۛ2P uD1)D%#j;!ΐT#im;:5y`ۢ4˓)|.q{+oBQhn= ;răƭo@I{h qڗ:;XX sEe:4|88vyf{Qaa*:`EmYCFZy%װ==pFT9D!g1 7ÛO,> ٻ>E!#oVMhug *xIx•S.X,H^,ϼ7> t{fQ*5n5Uiݑk[`30c;' '+X {<0v8U2R3U~g#8ߜwkY+_wE/gE1)M]) tE?0|h|7C@=`r>hW mpN6嘎a!2]`SԻvū} dڍ:h YK1F ]lV*CLNR]c鲻J;sCKިmh3*âJ^oP(l"AkTyIK >8Bz&=c`G#rKW :0Khbepn[S ~r9eڃ,ȿ9vVS Ե0WhV~#Ue|$,WvD6bDur4|QDT_r~7([9fH o|NJıF˃QjL]ZO \o(Pљ%1ADGϞ$*j34N褓gi X(wi٨h!Bj|ng^17/ 6N% gԳRގ޳Mm& #@5-4W-8n`iS6V/јs4QѸ,+- BUy5.HDVߪ?61ŷ~%o-eTis0w"_7=v252XC7ʢ({a}uUaSJCj{*̵ :\ߍH8r`đTpCt  P2;B|3O.W%AG'o$AceQMI]U3@ߞCsVZ\3_t>q2zNXLu/uU=Q=7~F, ;߳П>"=ȲMWYˁ_DE.ڢ< -MWu}PMqTKh>~]\>ڤ="cOas)Z`8'uY=- kSlzVWc~dřjy}E[m+GumLbg<DpT0Hek&LF sOq@!1;`͢vֆb׍o-7z@I:FAO146X5ĺpmk: :eL w0%.\|DSЪ4%õn$ΫzFUEI? PG 0rp'(F[A[$8vuZ$k!yi7,V~x#R({E[t7C{IDQ^[pE7v }pOJ +o/[֪Fs^wVϖ>n7}iN9,TP3x1rvb/QQ7O*{t'e=rˣ0[ ։[M~5u`46] j}ꟻ7[X!+*^3%.Rˤh$Z*VAܪ;z,"FD΁:2*ٯar"ʬky* HA9͸Õ,&wHweCe۳mZ휑-@=|lHyNցWgwVsb+)'p˷W`lK"UM.zlngI]- :ڪ1ML!O4wydY` (=5dy9ŀ9bf:G“tl8Je*x\yn=!&+K,*J:M.V @CL]U[KS~O =Xu.!6ctܻn+6 Y1=t1d#=BɠAensk/}u[贻kA'&Yg^la7[MB_y yzo6ݹPO00D`kiJ'LDz;ܦP^rSzMN t>jo{ r dӐxl`ꥇP@ tW7J{ ),e/v;Nkߔp6->Ƨl1Zr\]DԌq3EVH#+G+u6SOvݬ!X_X Rw^(In[SAh-g|euTA)\ИLUvLbCb>%wM[L?6isdOޕsCBdgƁl쎻\C~QFtR<>Ժ"I32t=IF^~>ޭ O < W T@Vh2^n\:_zں,̣aq!mIvUM(8gN#tgP#:'{Ď sMpۅ$Ug7̙X2392(RRfuH,Z+I>D\[1 ILuakn6夙O =?C1剉I~՗Qoi9 -gw ^+"੓efFhȒ+5$VXZ[zޓ*&׼d&Pؖlvum:JaQ~ & Yf͜&I3ֱFwSŬeLz%&n[MA4CjnR`ujDռi͟FmwTe.ufJz:"Y >{^.owhg"皯 !%d ٪ؔ1 ^ 3?T^P8'6P]sB°nBj[:A8w0 rMQA*R:)Bb3D<$ SYwES@ ʾ&H ww߶OK=X{ ".b0U"/Z.G|Jb3gʽqϖ:G>`_%,e)PN% PsdO`tL-(ZzbD`+auĪ!?~zWtu;.+$ix6J>g Vor.[O۔^]}puN~>c!kV?G1:!@@$ t:s m-Ujg6bx*[߱Iǯb4ݩ=UNNHcX븁x4o{&;!g#F垴ƄSRL Q{e-9T F%iͲ;z=@7÷Ga=۬]}pFu7JsC!7ϼ׉;CXCf MK>ccUb6un[ncV1$9tӠf:{- =u+Uk'5f)xRZBPcjZg`Oϥo)SX(,9 u*$@zg>DuאzP7=J\<'c?*yE_oa #]QP6hKB#/'<@&T>|+0FFV+ߙv֘wP"$5: c+s@<4LKAwvǴΖ(GsJHF'v 4(Hd="9nQJmIoN?}bbfe;cs/R'>䡩 Ml!5 `@)) 8O) *IXUٖX>xxOĩa2 [UmgdR%'W#4ӅI!VW') 3Zà`(ǵ*6zVV ́ɟBPdm Ndǖn~yCpa#Ys5(4YJ`ȍir0!PLEc2C^oc|ene'i䥧x@MS8u3'4jBz3r4zG5N%G X;/qw+e?ϔQw<Ðtvsiq3%"f6 Y(o2sKUbsma ݲ1 ?)իL@3*(;!~3б DxsRK>IU9͔lx 5)WOACS:vF>:r+Pش.'DWh R@Z!JX/BXIGߘ0z<<,UC]D*2Pst΀H3y ]o6ؕ}}-L81@fL9}|bI6GAMNSl\ٞʪI+͖pVj(sIVɔllRf@P(@joggW]#r=h_<&ߝ᭭Szplyr-?Vv?+}ڵN0k&H ES%uANlN<:_+\3ː͋0ۓä4/=D(sצda(P)B ق _!%NۑO? +>#[U1ﺯA0Q;:j!b⥝ Y'i"bԄ4, H1)q5 r9|̛ uEcܱKa][kxz,ք/\w Sa A!+_gUE;~^)u:^3 [F u %~ ^w-|ekiycj{cuvJt"}c\)] dQ{Ma)M4ꬖ^LcU>P! ݵJD-zMU|O.A]wi!AW :ଆGcv'GfÔNuKwLTʿ\^2-wGށ+?q{UA~|-k$s2]ӞPOn JbmL{JSi_߹g\@ӾU~?6a$ _kllKxho ޏzh_:.c 4wWP\ɴEE7 a1 ꡝ;EKfG$ UEW;2z%_3d/glL=V\W,xAzwM`(Rꏵ}AvzT @Mx733E 7o·;76j=yYQaUit|CN>a5o؅:xgzkI,Jm1]Xi -FJ0 FW 1T[sO]q/G1. O̚}M{&!-r0QARx@tll6:g dJSrAa-*eɦ"4{ICN vx[Nd#AC},U ߀\7ϗ vNѭދY@Tɜ>-evu`ev*"GSUcZnA,LE`[4;Y1FFɚS=%U.'VD Ţ!<5%][.?P7 & ? 7]/z3<+]tߌҨ1lk/  O'7 lO d vu棙%%in>De|̜X-q\zNcXqjH,# cښ pӮI.W[_1JMS7L[b5ClDl|@E.L`v.Ԡ;NuVxs#HBu{Bw atg=2goVAK7,={TL)4( J 'K&iزUzf1 sJNћ$DmB}Jhr \=$j$ 0lpJ,[8οsP !ࠜ]n!Ăho"|pn)~Ypjc©u\n|"xP #5XAQUH0bYL9o q}-0rzh]NRăL G'YZ _n-c=nNٲr=dž| f{*U˵MA!?Ua'92ʍLQ_lۋ1P~b<\X4'qwRd HJ9il,hJ*f g}M ЉԾKme,y!9hȹ,;>5!bhC1gkͫ^LPߩ_5H$Nm)~Tңo+8v,?@֡(bnH<6s<t3>6.@S֪8TLc y3f,਺v ϫIF,"7[JU˱olpH}` ux%hӬEN *t:Q!gD>oة_U89x敱63wrtp0S3ml1&l&LoB2ka9>Lԍ-:V6/+Z@^_GVt;JM Um(BNm3ឆ %~Y̷_ t[:jB.:g>݌,#ܾ-*]ኽX:zN%'!o?4 i7E;=:͂mn_Hgv\A?;~#DrQg92/g9 42nf8Z3+Νkx!{7߾l.Q x{)idxpkG-) H1v @S0UVc t|p=~AO\GI+!G9WIHOfT}UPCROpIC\k++_hp԰2Mj5?l%8QH Lڌ;n+⇇7a dWnt,¡Jw̙PKYBwM7%V[2ߺ*=A@-:}Pd#y|&aosw)Z3x\w)7u|Z id$`ь`AҌ-c ik:( y\6uXĽy2NcZmfsZmM [_.+0 X -PS*BMԾ?bnXz5=8hz)@!`N˘VINв*-c(ؘMzoι+ b=OZW!&K*+ݔ <]&,h ^o'׃-# G,G~9su1X(̠Wz,<`/|^#Z5I'^Ms dod~M`n{(N$n󟁂jt~wǿ" 5=e]{z=}J'6PjK=8 2ewCe3W)8܋ y~}DT-?|²n?ZG, 1y E_kz+g0xûHޜćWuոDp-sCZj妌bD*c:6X+y-^au'>ly0w^`0W WR-gaK :\qR0<8'&2ub(Pl{PQa hwPnWf58O`9>[j=RV9j~J:׻}q.+1+ӜG%zAI_99,nƵ!ѦHċlb[EIs}X¯'HYb2N^Teun<'_fYӘ_Ǟ}ă哵c؄ L̺; BNI>O|ag#6]e$Cwz"$-y=s<,\* T2le#1j3W *<Kkz>]ʓ{pB2Q!꽓4<' +QѐMnՖ_4=`cI3ow$lT),Wurj'sNxۚ ]+f 'vάЦ Vk]|66*dȕ.!D*ioF9){qjڤA={ )_a.fj~8$ OcajCoe3zhRѮibv!:Hh=Pԏ ѷ#`qfcYβI) d=5g‰Oh듍a*`e}oTF 0%]VURtV?9E͟[Jxܖ8:搈r2^V,6'wS#F z,-}Bhj? _gj:C5jp G`CP&ٕY`R2}}` B>wI\$a 1 jx9`GlNf/(SS*QݬL/-C@dݢ=[00趏9YU x an^o ꠂVW ~ gp1gg(`P>:E$\4ۦ46쎓zYYxҘ٘|R Z$69YҾb>RqY3 sn7~P:O3 Cpav/ AE⯭ 'JU94 gQ!.5Dʱs[t\!*Xr̡vbyAm>&15kǷt=0VJH4*H6t孢Ϛ[HcTC͜=U$ ꄱBwʉO$QD$fn rC'i}sB% ֯tA٭(a `?Shhc`P [G9WX`l?t9uHTw0? d_f{ef>CoA(&SJ9֋4S>iA`:$ToY=_A|_Yj N];O;E4 hR%*SIǥ %m)5>kXHcSe@M^ky\)Dz_MX>])Ҙ-U2XkK!}l=vX@k;@mxht†qytJ<{,$Wڋʉ~a ή!ifv9 y2لXCf [ U epiޞX\鯞#5v`] ձS&F"O#n4aBi1=]Wm<ⵂ5R~6`O;߭(SG@d605BL>OT_o31:MNs 8Ă!eqf V`A)\/%l`ݒ3k1ТgJ<&V8q>t*2ZWQjQfB~H^#2W;r"vl>De)#B6ބ°5˾MCC&S!$1_w7k>N[zm}p?/9;`9ڜ%BɍI5iwշă ~@݆XqS}zv$S{`x,1ㅖ*$7`̍Tzq1Ǒ+;{+an*ܶ@IOZ__w:3kY[6葦(^];v17:BR"x A.5)F}uJQHhՍY@Vk1/>p&GDPS+xҽ莺Utğ=񟹺!&K rȽ%!-+;gz<%_H7f8`WnQ8!!MM^cQQj_#i2#\\=H$lÂ=IaĬ0%j=_.-Hp(:(:9'Ez{m4[~3V?69*%x=Ql4Z&cf+zY jFFoذ*׎/S'8Tp3#L_Gw5HA혯ݘX\CélM;B 4 .fLH;*b mMZyUXWbJq 뤶-K+ַvty`j j΍٘f"u'\B1I!c"޾p6ykAOgdL\0#,uԆ bf [@ADhX LwINyߘ;|čH2aa;TNW!"mpbCoW1~9%u}>JZ&oLt;Zpo7R*?J*X{dy"x2sc! #Vی5^*iAd0SEd9$64?#ŜYۤcK  lHp`lbU;k15伙_)' Z|MUJDaK,<ۚM'v3,0Ns0B Nh>ʼn+9w-KC&6wWEXs+Cyb]̴ [qy &.fNwgV0TP+1vvc. 8ް8Yڨ fAϓ%h|M*¤X&XTQ9' l]juh*` lFw,Q ?&QPwcVYbwAY7ޤ `: ;=S;IGQ[uUv?ƒY044~4U\^/2.: nvU+\$mL'@K[XWH\+{ϿY1]}ޮ2C~Z&rb Vcq X1õ6n@k`:,(W+:IJ 4BٙfY~yWޒ墒5T݇g>]IW3m T2%Vn8b-8LM8TOJl\ݱ$RV*Kly<$ A[LQkUdb} dc4U:x&ՈzcԧD+V:*2IW*Cm9s؉L0L#2g[4Y&hL\h`7BrmHf87>5r58&IzAEEܖ$碘4F2 " >fI^_!^،Id\lK%*m0 sHyoNerј}p|H[W "V{c;&MK³JB+Ij`-(fX3UKD˒[J[_ "˱86v5v멝#rfEyKp*2/vwoNr z3waƤ`J *0u1BWA a][\:3dZآ#vaǎA}ϋ7#JyRmE_u[N3qlq+?C¡QNcQgd+p 4C=ٱrVaC ^ -B!ܑo2gVHX-;bf }8+=/z~XNrVU-:::+Olh'P8%"W\ P'kz585+Y̼޷8TdiQG9=sZ?u-g*ϗk.%T39ۈyZz H`W9ʬZL?hLwLBhB[ޤU;/ h:[ijxB`# 'HGP}!ȓѿ\Чƈ0Y! pn_ 4}ԔԼezwl>a;NVd#6rVa/SRψe@OpNЫEp& qb`Fo3ɮ{_<%F0) Oʔu# SkGǑ;Mh?M- 9Ny<%L˘}Qt'NEOy[dR%5q}dKQLˠhҦJS*CN*o0l&wy6`#8fEA{v_>V D˜~=Q@A!-($J ==8z6#fr_C ̔ݝ35#l֪6"$Pb[("9?1{ eڑ_'/^NTbLL"3Η(4&A  ͤzNH4>]4hHKG+HߣAs.6*NI֑aI<:Ob 6!ͦGLL/@VA4Fy*T!JͲ9YFT"]FDDXwK Wen Mo$ xi>ּzua3m]5UBuqaNzM;hV_! t95):; $X?r?fq뀽$6%!T˦f#8'4XtN [PTz3րEěWH $FE,/߇* OsB$B.,Ig!Mk%1$7si>S2Y43nқf"un7Cڏ*cV hp1Aggi/wQ䙵N 4|Yu_crG].bRqL3EP)I1@[/$pG6nl#ꮎq 3+R3Ζ{~\a\T 0Q)t$<ٟp/t) ۢ7=|юc;>%v2~nI#I)'xn' $+Ά7?m= 21ox{ uwc1ע0VN]ǻ B^ 8XuW 'NźYd0 6 !Xj'jİ,ЭY/!)}~/fP2*9=IWQk 7amh;h)IT g2#WZIg<x+:uT; JPo=#8uްDH؜~9;;qӛL="$5b<7`*(d#.4mNq4(E/1WNe׹,o30Vܦ]oyHJ*Sʡ-l OFCgz`6\עҪ; ㉄kYrCMÊ,?MBF~ᕙo't[3JۀvݚNgEEؔ9hɵ1E쾣q{ݼI|9؛@ 3$% |U xC}ͲCq6y}|P⌤R<6jJW)o5٫eiVw7WqگS$q*Lϔo)CjװF ډ.v~P"9gz{{7ˤk z"/GENc(F \辚 G= -3rDפ@1>kvJtðB d"Nr$'(b)t hN ;VH= wш`Ru2rL % *{*%M^OeOz'v^4&7%[ \ܪ9wڵ|ie^S˲uHvCu>Uq\xW6wlXB0&H=*Z%(Xߡ2xB9^M6kxJtډ" D-8iM6ogJ(&ɕC^D2XC"QڧK亮KB@kO:n &(Cn,a?߂Gɂ$4 dn+EC-PZ)Si&x}XQ+öK ,9}1}?MnO9ۋXmi(!̄;f6թ;ERUEӒ#yhرtEuIz+ jXP/x45m: pJGS XD eim 1c2+V̤2j[pd.] }O4)iOxY@esq.ddsXvp=p/05e'9:늪w^сFN2BsO/9oc[K[ 7X- D>Rq#|T(Bgƀ7\PC'> pkJ )3Yw@Ƶ+KsmSt09ˤeخpKrUAE"t} ,l)m+ŠRb03! SW$ۆ?ϯ*(9tEA3?~K ӤyMWwldFP3(@ZTuBUB%1C ,r#(L,)NE0*lݿnR~7e|a5qzüGLׅ>;=h.a |} @aA #)5K (²[T8!8HS=d/d=v~tD‹ȄHf'*gkux]6+:RV0;JkCQ//BȯC칺 , ݅MP?C7,.U ТT6Br춀4!\g_a'Tgx-u 8DZ̠ | f&blqqF266낍Rog)PArЪ;D4Q1%Vd1[D ;V@Jյ @a>y 5gVm¿/g)̈́u.*jMxI(DBPHd_ o L˗:5?$h=uAv(cMxF r8UO?=j. =pᛌ1ŮҖ/$6\bӵ79#.|("rqHiVan.Z4:c,r6Pwk :tDn7#vjm?4o5ʰ gW2'܇< b27*qHO) # fH#I?pb>0_JAgo#D`&(!RѥCow?E?ĝA䁄 GĞJKf϶fI'es`G0{_]NB\%x Q С3¢ǢD#DP-{6@\+BJ g$w{VFSĢ ieö YZ