nscd-2.31-150300.46.1 >  A d^p9| վ`OƜ!n"f;q)Z?dMN^p+Ļ9r쎟{L!.4;k8|a=Bf 0#aHj 0ж d)h0ΊAcUwޤ3:UH;@\2uqUĤÎ]NP6FyI灝uCr⎩2EJ<Ћ6`0d#bA200&!.%&صJ 4@_5/ W˰ț)w061b32fbcf0bde6a2990e021a64ef28542860d276875354970f4f12b6e953d418ac5e88fcc89ecbf594628d05e7446dcc81a0d3cd^p9|7.Myءk:lC&]9}4*H7jgDGžВ˿37GU0O_17R|_CM"!wQBAsncå[[o,_J'fbH ^*7Cc2Pժ.ک:/QZ~KwO [&|.W^ çTxq$Leޝ^G kOz[#t[}қڥ p`<>pI? d   4  CIP ? <   @ O l>`"X"/"(}89:!~=>?@B FG$H`IٜX٬YټZ[\]8^گ b"cdKePfSlUuhvܤ wx$y`zCnscd2.31150300.46.1Name Service Caching DaemonNscd caches name service lookups and can dramatically improve performance with NIS, NIS+, and LDAP.dXsheep63SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.gnu.org/software/libc/libc.htmllinuxx86_64getent group nscd >/dev/null || /usr/sbin/groupadd -r nscd getent passwd nscd >/dev/null || /usr/sbin/useradd -r -g nscd -c "User for nscd" -s /sbin/nologin -d /run/nscd nscd if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in nscd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in nscd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/nscd.conf || : # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl && /usr/bin/systemctl stop nscd.socket 2>/dev/null || : test -x /usr/bin/systemctl && /usr/bin/systemctl disable nscd.socket 2>/dev/null || : # Hard removal in case the above did not work rm -f /etc/systemd/system/sockets.target.wants/nscd.socket exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nscd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nscd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nscd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nscd.service ) || : fi fi exit 0 uX A큤A큤A큀dX0dX0dXdXdX0dX0dX0dX6dX0dX0dXdXdXdXdXe2cdfafd373d24fab07018d0e95dd49510ea6c992b7be2b0611ab23bbc2750b579fe74962fbce2fa9b2a4b92f693b2fd42cbc2ed331fae268de7104879a72df879c9cec5dd2414dcb76d11e75903aa6fd9b7785c897cb9f853edcb140a71b779ae0333ba51ed93531bc9f38b54a9e4af3a036341b2dc6118a74d0d5ab391ff3f/sbin/service@YYYYYYYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.31-150300.46.1.src.rpmconfig(nscd)glibc:/usr/sbin/nscdnscdnscd(x86-64) @@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(nscd)glibclibaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemd2.31-150300.46.12.313.0.4-14.6.0-14.0-15.2-14.14.3dccU@ccob@b@b֜b@bb no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/bin/sh/bin/sh/bin/sh/bin/shunscdsheep63 1678203029 2.31-150300.46.12.31-150300.46.12.31-150300.46.1 0.48nscd.confnscdnscd.pidsocketnscd.servicetmpfiles.dnscd.confnscdrcnscdnscdgrouphostsnetgrouppasswdservices/etc//run//run/nscd//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//var/lib//var/lib/nscd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:28088/SUSE_SLE-15-SP3_Update/69a767cef0d2cc780a124cd13109991b-glibc.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux ASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.x86_64/run/nscd/nscd.pid' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.x86_64/run/nscd/socket' (No such file or directory)ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=b6b1c49f2502e93d99fa7b126a25f43608136051, for GNU/Linux 3.2.0, strippedcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.x86_64/var/lib/nscd/group' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.x86_64/var/lib/nscd/hosts' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.x86_64/var/lib/nscd/netgroup' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.x86_64/var/lib/nscd/passwd' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.46.1.x86_64/var/lib/nscd/services' (No such file or directory)RRRR RR RR RR RRRR RRRRR)&{'Ĕ8㭺utf-8637e1cdad3cb770fa77837d5327e8fa4a93ae98350b892fb6c871b87de75c8dd?p7zXZ !t/{] crv(vX0'LeWi ./|Dd'#2Nk`#=|b%wZ~s3xCW7F'<[@]P5PDc-H`ȯp0G|Cti27:kˆx6j>LߪL`u^4j*1b) ;(=&@dKYYR{-8l׍jIs=JCna15S:a8jc PHtS»E;\{pSVj/Sp*Ԅ =inbe#A%, o6/xɋli SdҮ׶=@vӗ1FLݳՇޣ*76; JWc\*42'?^#gY9;Q ],:M lVv'T۹S|#4M)1~8="ٹDӈ=7zř $T Y;,{ٓe \#W#1<;iQ ';\cx7yNv6?|tG ?4L_QJ7%aw8_Xo$ѯ{ukC ]wɨiT ʤ2GVT- c 3|DŽ~~G8E;W~o [ҰO6]BN"B59,Cʀd@қj[?{ѓtMԮo:W_M"Dz7$%<Dpt Sf8TiFm~2Dhk,<Q軋5(ppsÒ?Tć ^g{@릜B| f*Ryݨ]Np~k# }4o<*X *|^=W$EoJ_~O|}4G ~mP\#8wjs0WKѱ=31|:dWUqYK2^%za.w=X Fi 5m.TBbِ2!_QڣG}85~VVbyp|P| qֶ=Hf306J!2zxtO{?GJ:wlRa7n -i/a<\`49Fcf10wl17ɿZb*P OXhҕ_՘,k~Um0~WNRj^*VtqaIJ󶒪#WPXt k9GI[껙]uwZ5InGZwyxm+/֜/^vz"(NQM2'/2#r&6c1JrD1":CI!-!G;pW<3.Bm9b#ebfiK7_p3w.‚HǞ%2Y+@J~!l?΀FVxd]ߒyL.G-;=}h'ʰ7`A{ʖ [IeIM#M~ {!.ANDK~ UZϦD4UC,a?p|! A[I& &\PEkBW%=W{NਃEMiRV ΅V%}[X_ vkRG ֽDx>,Z SR"HG'_3AMus>;lbϛPpPՄ4F3U9v~Fk< >|?_Ez԰encmؑFv0׻&aRHi)O׀/o\m T X0`hFhz^{Α`#e5vrE<F2<Ii㪭 JZgSIi,0db*T8+VzEѧ\|W&,Ë $ej1ްg.lqS95&m@;\P X;C.WAxGٷ_ ?Y+f(%,wn̜ [{_<2r[ToOD-mރGCOEBҟl~B7VÄO.e~yT0'! P}NWeÐH d 3^MKRI;Qz wڹ*mN~Ɖj|.[iŜ&.~#C6[m ^1 ؄iRyVI BqҦ}.dƳSa"7̵v[Z$86[WeJZ` '5ՙiHáNfETt[`LZx6(B70|Pb徬3M.O%[ETqت0 `+./GMP@ Fy_rSp ofqz=hF˽44z'e&/еC!w 2n| nkiZ0>93e?x" ۈ㔳 J UYunB!'^ХdeT I(䛪X}rCZr\t=Ӏ7 !Z6[9k'͐&7Vi8cx8B=uؠ"24+g((ʹ\q-+*p' -H _l\&w`UVNDpV\Q ƭZ1,*ӌI񣍞 "}ŏe"lO)Z&'0j㙂>.+USY\/1caCJn H9S|hNu `w3q$͐vhZU 6Ct'2~1SCMQZ-1fOx57ƶU?ZMuVPֿFpVf 1F.}i(#"~"MOgs 6hӘDz45$pUMO;9\` " 1&~e>?ŰIpu+ I^ j۽1{^E뉰8(A#[I4Z -" ?t8#7uii0N Xzl(`>NI^fPWBC4 ڽt =[XKx7W<?AG:!*yI|0-8h=q U@$A4#A|s[I2tfըqWH3 ԅm{@/vLP(ՌPĦHl5?WOZ^gÇ3@u= quXs?yJvD!a-Ų4n@!Kk<1c)ᇮR<3h va6A!j̻#Mmؑ;Xb~i QNGpeL3h/4Pٺ4E!OQb&G|E1ohJ`Dxj fܓ2P*qԽwM?s]b2si +)8 Yx[3ƸIܿk6BԿ(RT͝}Mǁ>ʫ6i-)kM>`yx\;% ,,aenBJOsBIb8xԄ}#Uޱ=Y |GQEtw$EM`U$ANuwq>DB)i@hEf4<泍yY7@058m!{ )7n#gɄ?cVO$Y ɋFa\C}Bo}apEn{-VӏVe(~P`\@ʮem{.XTFwMlIZ?m=xnH6}E;6fsOLg:euo\;x4"xUT,4 w{?Sd΁t罝 bSa1Cz63n"a;PFYVu9s}33BA[g S `h]"jYNo$a2m-_yF+6V.ũ]wp'ʘvW^BM9vP됢x|ٲ}384@NRg +V}l>u3;ϡI#רCƷdo5zM+Xl2)*D0 s^Bl+փILdL!zTr+HAMz&|ab9Ar%I6$[*HiKM{m5;?>gt5w6Hd׮Yt`B9D_jQ[[T:+캱pKaXfyIG:,mMzkx݂2Vddirߖ& &Na4|*$3V㽣*YtG{獡b_@?n 'M/ W9R o^j(ganIJN ],M윶v5kZ1T5+3F''YYJ, jH#I6Zd9i,ekj^*\_.~t!fNFџZؚfmFt,3+ T}%a5q,Ybea~vhMl) ( 3JqnEwwcnVUk5t%ho-X^ ldB|AvfYfd߄C3tBI.щ#B ? ]>J9{('')l2Ҝ0$-7e8BqY|yt By53Sw ԅZ39 {LzQ?d6:˵BW&,TV}VDJP5Q<w\j+U4sFvO1U e.c%s6 ľz\(L8A&s_(F O%X&Wao{ q^S$?0EWAq<:` a#?7Nq4jѶL7ˮ <#"_bʡXF|rEl+]ڭ]|G9 #nTgvC;i\ }yC J\ߨn@6T]t Xn,@|Ȁk_B֛8ILϞӵYKuBV/"3_$,뵉R }XVHS2z6r c:fHKkq.Ů?" Itl`hK|p` eBO}ڣSah (󗷓~BAoYSaUuCp^6xȐg]DVd:iȑr@&]bd+C(:cN*g1j._;7Wq+PHLbqå/MGj $Qx|>]C6iiˡePZ,j<a镲W*xm;@gq8Yv%hmVّIp=?^2fGo dlZ7f>g\b |;Ar2Ə\)!JMtl5 T͕i9kڤs-$kRjit5AXz:johG|7=q BsAz!"PWjK==3F{'Ku4PEhdn`7:ƀBtE#2 <UuN:n7tbRi?PuH{EH›9u(v{ D_,cԬI6wY2(4Q- ƃ[npS/FRHIM>_ѭ =d@NՊZd i=ac2?tѤT",ݪi,](m7%DwqXv}p[B΃ Մ T5w짏(0bz0(C]; X4%vm? |O3c WzDWNMJᤰ/VP/΋&w%f[o1}Q iש$.. \5 g)yC>'~¿1=fbFdLNM$~9LQ=B[.:AsVJ"e1ܿʷQ#~Xa1bW;8' cژcSM9;>e/2MOٜ. [$8X;S.gc/> 6AǬLtCoHt=|&1z1pև<^%|й0 2fB5w;JL37!;կpV$5 YsGٞ9`4Niɬ|c֫b/iVFuhinT s=G%GzbCȂhJcÝ Z%t=BPSNsH>g:j-17<3wg.<=jE1Tmg:S' @ V~':`vaCιD[2,? Szm3d#,#(ZwM0ZM 8̓&2glbOvcy>^ZS>oٌGRQ O] r`wSvn_C78ZU@5ul7H3*h ܧxU8Va`f[IDJqۈޘ 9Nsu 5u)ު紌ȂwY@lx 7M?ٗޮOsZ!ċOo92L"؆z^dาCShVu_թ1 {Mт]NFKqdfs6[ 4O(-}02gG;__'|nz)a*IPd{?mJ|d@nLkn,{ *]GGbxqС;)E#1+3 F'Ӌ[3f'bK,I/*OBs) n(E}mY*ܰ*O}ȣy쌜.'ڜfc47GKIdžǮrlO=6!HOV 51sPwn,VZ]SS^l>R8ݕC/8lpIi ZFOx6=MT32|AZFʴtڶJzsC*ooV$z$80ۣ(-m!"TrfĨ+X.}Ja $", *&/L#7e¡ͣ\ŞE4 X kP?b80:F>aDGQ'-r^&5h>7N_uUkJ`f̟ޙTS淽K^6ø<HiUv>4b[i&2݅^" C33{أZ UDjS5Z}6ĩ@xa<ԙA'*w!5ٕowN:?<19 =Z|[qpݞX~AJv9s=d#Ԃby-`{2wӅAtn*ӚOm$Iv/A x*[2"6s]$^7c4G|:oc8>vxX@qC%Ik?^)DR%#L;OQ|5I YzPW$N~ GZIbwYA2rJƥY<ۖo8zح h>3-[,;֣ ,(bp$Q(ZInbܰޅ;Y(foC5sE.`D)\ Aa@4YAFNjm]vZZIx ()Ic%h⒖j0a71B5nhG ,D*_gYsθL*$2:QE%60pP.l-Ň<3neCjg{ Ew۹M&jhZDV_7t2_*;8yA-4+2yZsk[_qOf#qsŗ\^9ӟO G-kPoFxqU倨4K[q./9+*e+<mKO nC_1xHy76)n ptCjdd@Wp1(An[eʕHUa8uZ XB-9d\G2 VUD}=):x1`Hj0?R[8MD{ڄx?ncw]\o' p [pǎ%{gI7)jJTl[ųMך%JKWDiHxT8E%j )hwSTGe֏,h早 A*1m4)l Lx*=U{\{kO)=}ٲa$T8^!^X!~)GqXۚI6`k!\];;\!pP?3Sd ,WUV{tbz rc^tC7ߤ7#@'oV{ea9ܯ0%7,2/B2S-gc< &vw~^04ԫ+,q1(,ZX5GGyǬM|'9?1DX2Pc E=J-}UW=>iP紣xDҔ1!糏aao&.>lX+w?߶.Nߒ9)xڥb,Dx57@Y`H+|FW%q,bkc\xM\ JݿstTvQ4Օ,mPX4DI|!tNyRT^W /ezzv <Ӎ'޽'N5(FosJ$ 'J3h6/J["ͩUWka̛ rwʲQZzC4JJKyD̴.Z񾙘B2殫$C}5-}yS%PWҫL<ZxCKmf3,꨽q`xs(UH'|.c_O^4n{ZETFhFgEvQU^';}Y"5l޲(@DbI%'($%~Ԗ9֫EюVå I b(~ ENo(iE7m)K!w{$w* VvWZQ=Jnk ;‰,(F^@?/^EܿDS0ZMݘYm (E *rT|8h98vUzw~[s]Юk aSzҋ |T4O'&NxIY*FGbW% A$ ^ A)Ь4':!rӑPwYHEYWP ZrJ~:\{?us=qd53TzNM$޲}/L3̮՜rZd t[x]y/(z  r«,΄N31C 2Fc:i[%1C/$*ݩ.wls|r Hz~; (jָ XŻ~5k 67g)E#iF"dU⟑F `HȵL&ɍ"Fk -;ٟ}*I-A䶲"6yH&r ڊt 8]A_ۚ] fOg3͓R#|te*R&\U(0nՌ&A|;V0v9MXy4b<÷6%J)/Tg2is:w\Z!K~5uv6x2{A &K*Yr= 4}HxD k6m5@Lľrj265|v9t{} U=EeU@&9ŗܵ XhASxm4; G[j!:;3(8g=Ŕ,MlHKHVg cck&5ɡ$ ]Q\T5=Pk!X}rj/a[Nb -*Ӳ4bVɸ"CZܟN8!)ͨz\ǫߒKKm 57NxAڛTB$.%Й ;&_y5IW,%NoTrUH:$uyX'%?y+z*dvTף}jn~3|4k{J@Ԭ̃ݵWGV%Uͤ0Z{0J}m¤&3hz3 ZnįЗ.kgǷ ?x `D~ &Ҧӗ9mbr}{M3!'0J DZn# M3/ >ܣxGa.ì[ˎeϨMZ``E4zbRxUY*9IBշz*EAmPƆBS@eTrlzo q5}Υ܆ ӚGehQALKʎĝT웝 L۪)sVlzD!#D2wTEH 'N\z-Hէܠ3Q&c*MW!y6<*N(=(s1܅/\u{*(ft:T'I YN3ؖ_G][*~&(>.PW91 7%bޯ#h9^awBȾG:-Hw<}CC֢ .R*~*#^ 冡3Vth놫%*϶܂29>Fթ< _.)~=>5mކhҊ'֤O11L60yљbCD=֥aSeYB|H"h͈E6QZk~P"չ_Z=nC`K fmK-U"$nLR@OrΩksGsi+ά8peXplCf\ T:詡nCs. 5Ot=xk/⿖@ ?WsX0j&;]͢i 1 9"hI / !:cQm]n&I[CntwQ [)k]ޢ:sνZpgFQC(;;h( gRoOc>|Nk}I+ܬ$4`f7h#: .ͩ->? '܍A\Er0,؟vYz|[$lk݅YKٶ(v3" 1d,A@摾1={D8sZ{M'.n+ dvjjd=9Cnan=03xhb,ArvA}=<~m=) ' Djfia~ z;;BZ4rJ&dtW@6$wn$Ia5/W +j8zqQǡS~b'2("jfWxF gU[}—`1Sm"GQRUIJ!$C DrOen\->72.PA1+Lϐ Y+h5BwҳH0V>g'ۻ\SmLMqI`< g6pFIy7v0}[GAi*PrGZaLcoN59;~@fiU%êc2i1}{ȋ<,.p"t!n MQbVէj *b\8S֪( (ŝ(Xn4V!Xzhy{[i^Dز=D8!4dHkV#05yj=<|:%SO,G8ݡMLf U;ja_쐻 Ie=l~cb-$"xmʨ^;*y%f_S\L-=T$_4Ow9H^=KLLs,l™@ qf*?J7V%y:puVn{pmϓ y%7О{qyd,h ?4]EW)t M%O`][^(  gM%1*y1%ū{8^0 tiKgyR5+=.5Lg'2U/=OyCÍ@ѲPg ٪T[*Zn{kPH5Ԇ=V9F%3uvz Ϡ !1@Q5a/Je5LC~l/c\yKx&|z)e=\}ԑRl&׀vf;luʈ!g8 ֝m+Ex,r,{xfUCIE^R7q0"D[~B"FemO賯Z-*]'P#}#iYo>"+\S. b׌6HnːWG+Ld=gDq,,`;0qJiǯO&G9ha< T@Y 7x8,a#I1:-}C&F> -fé4W>I>I4sje ]6m!wr؅L4AGvN3+fޛ0dF&`.V]Zأ*# hh?QkGcvyx:d]ߵ:{ 2K&=oʮA4p"hhȜNv-biы2iq\n'vUJ2,n4zΉcuGa%BC^cRD>&P~ 4W'CJ@FCbJ=BH;=r^@3MUza4YQ{|ю2[ AMg}8mdVQr3DVqeMb86\ xZVL+J(ڝkƠ 7銗5wY V3Tt=s:6C D^]z11x3#şv)\eץb`!DEX-J n|NWQ{x<+#.4-?*VTOZZV:M Bp~4@(փ0ñdʸC%Ҧ/7%a^eS25F^%,?Q,,.yO0Z mN23TGUBcr֮>e!ܮ__؎:f c pȈ땱w /NGk IJa@Pqjl-{t 5v\o Ycb9iGE>)rք18$jg(R`](b.}\=;h:aJ\̻C)lV bUYYcc` nYw mt/~GȹYuY#?qN ,apNlԑN2Macee )V)@;IrD9)¿V`U XZRو ݗH:ae|&.lOb,{LULTa>7o2X&Ln+j6Wӎ`~ ~0 *4UDhbk MُJ 7\v7V6Fw0^V]rPƮak X10nQ*Un;"}\t>'&h[}bNqtof#7L(IǮ&R#HgW_'WpR"5od%16aNvz]EV/Xib${(?#}y/N37DRIL=Y*'&fR(2NZ k#y9'o ,A恾f(.Z礿gs9ȍjf$S7.@솭2q+ܡ+PZg#Jk5=ȞRXzjD?i@{GrJ w!ѩܭMY L =TPlm!S9Q%u%<; yrޢJ2$os+PNfXx2rFbXP$p Y޾p㚥W.,/3`݀ B]ZX| tzXzK!Z̋db(ڒWq^=r+ÀT`%ͪ nM$F-~Òyh8:U}P7^YBv1ޑ׷)hn z[V[hky1X7>ForfOEͯAjsLg*=͑7UQeQWa!prƸ!s}+Jak4-h1h:J.9ACMGw>y*B2vV/J#j|Q#[Q3;]7"KݿjE0)-∦KehPb7%DIАv'jE]兼&ZWR˫ΉZ4}Cjw>Jm'9 .?n;_x$rgjAx8~`w#x ˒2 ;A(/;s^ԕ#Z>[,邃Z t/ c{Mn!j nBZOF37͌'lƴOȷ~ytvq2}>̷]oy,Th(A2qd0Id&Bn]|`2+fyGO <_؂&WF]CP;PP;a[cS}o%r3P;)F \p(r;V{Z$E6ϸPJ A 5uq]G^tt,3vD(Vm["q;m8^Zw'аv;W&QUfLܭ]8)mi ~7ڄO텕q\%(}ǁQJ!72QP@G- /j;|5j<}0{"Dz0r?C] 'XD8TxaJbZWgT]Y*9ҺJ3~ui Bd"9qF)P4= lī+Hj/zߖazۘ*c稓cS`0vbVM*M,d"ei1 ",Rw=ѧ 1=TlXOK fn2VlџyL{Ӳ.y"HYmlPf֡GR'ٶbǠs-ƒJdwMPy%;*s2x%qC"%pŚ^XH= #͆5ahʱt8hb*S%nx3=JtYWN6= S`! 4Xm8V0%m !xׇ. ٵ,DE0 (܄ه*=m9I%!.me(nCŕ[EDD4(Y?3unn\Q0]/.F;Nw|?7EkJXogQf茐`- {Xuniڛ ;ԸmGը3;EWS]vݼj[BW`ϔq([9Δtu֍D)=?i ‘QA ޶=()ЮF{B{3c2 gbgQ?M%!+4ѠP +09glUn}Se7#sTP`bYA*D"ࡴd<,*:Ñ~\b?qE֑9b8hC^%wK)n_(ťc2lE(܆ZfIJi%8!Ft3%"q!,Խ=0DuF=e>.?.eIK^cP*eB5y-jVӃҸ`D^io>f8ʧi@U&Vs7Ip޶#. !㵃Z_r QLUbhu{Aiqt}qwu1Sskۅ{_\œWW]&?|:&ߗV & Kj}dhI1StioB~{=XVWQP7iաj;0堟T4K/5( )DP?6tү YJ#<ޯ< 9q/ ݛŎ~^ThJ˹@^F퇸7Ddef~-=_a|=pѺi:ָJlj8sM20HdXiG}'jOA[^ q2,~IfT7-ֺl-+3qYD$מ"X2Wž3ħW\bT 5& @&;H-nՓX8zF1$60_RDJ:d$AJP\ox*@iD"+Dd!Q)WPUiu5eDqoÕ?)6RL2(MAS?vǒ3WTQJ_·6[ cJr@] soonAERzt|m/ 1 29( B+ZnǩH+#;2n"w2;tk!9a`'㛿&L\~à;:[%Hp#ǰ+DI9wHWߔ ĝ0I+.ZC䇾R_P3K8ķw,ܦS܈a+>sq=*ږ ,m=0":Nn$֯>=oVV/>Nq[Yd̆\L[|'br􍬱A)$ NrjR $\ @ƾ?We1s/4 QƑ"E\F 嵔)yF8\GZ ܠC)g7I@CN?8v>.;75?T7[-'c-tَ#iK? J0MVjO[̈TSj-cxpU돢w}J]KEX27^֜-ӦRE]i[sZRj¿ .]*/ƻWeɦVy\8|! _< C*b.RT)6 m4l]z>̊GnE/ZY:ڕsɷ]UE/u V׾OX,OArz17f ũBA.y2N^Ɍ,DLU*;'(Y Lyٮو T7k"Q[8Z'%MB|6Ki Rxh}W;YZ)oJ7< t^;$Ϛ٣wB|D.b `+GXTbTcd}.a<~gSGη^=~*0\;*[\#AHP7E{%lˊ_/p?zyݧ(W),GKV}=_Bsokp ^*G6CsN&VΥlP#_*~g*SDz/ճxki+g_}a|,M{J6gS؉s^xT峠:3yVJ'_e_4SBr>&P-$MM7dOQ8\D }׶dͲ6Id\ZQA.7HTT6nF!s-3o[*[<󟎭DJ=bȓS%FEHp#*xވYح+rqny&qsbP5RP![1;E]qR|jFϟ04)`Z]׮*hC|@> &VS[[{=[tuQjJXĺ.sօB$w՞I*P5r҃ 0BXKbr3;Or N Z쒌Yr>s.qE/B՝Ǧ08]S^ﻀ$xylrKE9-$72V .VTWD*SBIA !VLp'uVď9zK7]]r9Rkf-l0~;bN,CBi<=:w( \ YJ_kDP. -7cV;N)-x?Ef?фDhV2vu+I=?(_gh 5.5#m ̵qݯSOkWGn59O^9W7å(RUf8rjm8{g`խ꘎Z-,_' &jw"7V spN~֋}@.GSm9΅/OiM6Oam=,~Z=oLRP[F [L֪h/!0WWD9ىKr ;|2P8OBӎ#`eKW>Q (EBa smyпkMw3+5f 6>)2Y/dwQu$6 dBJfu(Eb(bJbǏ"q[c *l 1~i8g)S 0 m$B¿PWdaϥbՁE"=P {uO*K4º0H>&8"wXA1wC]l;.AOA_ [mz},P/O3q,)|=c2) OeTܷTe"_A}0Hl~ZX`,m[_f4uʛ]q0Jya]ׯ<†ߍӤqd_K ;"tݰ+fGќWXMx1ZRߘ>7-@Gzq} fb͟X̢cXcIJ9΢s:f k>)|tX0ܚ`{^qBxU޴x9dE3)^&XzdNYuv4hHo/HHGrZ\Z*ݻ'tG{:6nJ< ?㥥i+fžYqG < 腱

^d\H9?bq:Am9XQ[ݷFʼnD/߷ D:[ǫr^ꆤ-x"J04+Kuј-)72غ:J@6lٴ.W[fn0)䖵|K n0,grU pW-jcfb:gu'AlkԤ0Hi~ պ?VVd ͐|M3 '+f^D,C! 934:C hsOt |"_Z0a,%r%Q>}m_2x+bT4s(2WLnWKlcjP*K@n ?6:gʋ'~wCa$2q3D#f{+Wԋ'H|݂3eA7ǽ';Ye[5n^lmB <ċ.ۘ }ݻqkvtʀJ×.YenoaTFlͷƢ27P&H]%p$(&h`+0`rdMGyX/Ϲͼ"?b=\rcQKńkEm #+hCDn0=o% \ᄀ~]9i=J_Ϩ"Lx2f#g&t6yճ v?f\\v}l_\MకOGI[=(LEi9X(>jsd:RU! )%u"]gȽ=xqbOs"aIO[JL#A/ 6Nwo3g;mlb\}9 f_(Nπ#Ň#LK<۞ 5ʥU 蓪D }RA_S\, &E>8zA M~҈-w!2+DU+SR];x0^P; oItiv5R%-TyU>G[)>t= |)HG) qN`nWlW O!\r嘞Y`miJrQN%ltyd`I5?Q 9גgӴE-᫈:j֟kŶ*ya,Wi1[ *}n$TC' zۍSG"d9O4Z'T4,IJY"Rr()O4V*; ;ņ.v=1x\% 7}: Бuv~a bh0xm;zY 6:T'40#/C0i04_BbV8 < 7<엧q(Ua4QKrj-ɴ,)^k7HŴ>0Yro/6F$}@H0sdͮ+U{`TŇ7ުR[þH%u@0JF,P8{e9RX z @"A;kV+хA3-f)VLWX3)KCg*;pD:dپ/f['d#H$"|gqYXZSwg6'(p9+ FKm.d1w)0yM?ᲊ(4u8ݴ]iaK]7,Zhi,{|Ϋ8_zOTʁ)SIő\m $ZI0 g ! oQטf5zN,S4 E('D: TyЋmJ,I*UԜ~tlGfS#R)0K9-L`}NX=GsUc|CLV4bA9Yqя֮on{ 3^gԛ݆ra(̶jckl"<X@ )0\זO 6=D1u|$TgTz>`r=+TtSpk?l"f9HMx1(rLQgٸt4!8snWKn2r;qf7h]\2z3)I(|P=%зmuu{?GXTF9E\T t3ZJ .UѫT|ֵz=HLFu;VQcvߨҢQȬk%f{ "-DV#͢o@b[`vS)YQON"TdxeRH 8)(N̗F˦]_˕#P][O{o= (gBߓA UqbV/I, =Q Iew]Zjny DKlHu}xn&C7-OI zy R;H:%WSAflKV9о3GiXRN6pG9 hj "/G&Vtʥu8Gh(YJhu'-n?Pԑ{I@X÷ײޢpۭ _T3 ;vl(l(n:(a1.jjTfQЫg f@{ L=BKJru~>wU+A 2:y#F3s% n2tLܯ:|J8n]T5 bڑ'mΰpwg~)loڄp/CgCj/hkOxfƛI_t{?+1E2:-XQKUrkp̬VaGb;1&K8.uէGI oPp] HƒZ4U +wg3 ɞ]˳t+(|dԩ0֥* 8molk3-tc"vכ6M n*˼=؜%.j"1*Pp`_aO[t$iC`[.0o8J6%;[+*NPKa,=h4DsT rXޯ3 f!j&d(3q1 :TtnRX)8Xp7l哺8PVZ/<3Pת(`_Bd`(ѽ!muC08tp(njR#X_#?}@ t9=ᳳ@"!TAU9e;(n! 2K>~yʚak5|/ h6dFik\%RTUd>ۚp!$Ѡ'GBIg.4DrY8a[g 5ƌB]ߍ=iZ^ sn{C 9?ehU3{XuBD8j:tWh) "]h ꧜oy%],-ѦCkvL8KSF} }4BcZnT^}h)gcw)^C j)YB {aؚ2zY׷4 btj!Iv{Еlϰ>=.e/MBP>QpS;fTڨD&u+2"yy㥙6KM׀ICk@K!h I9vr0@ .p{)a\ N)MQۆ/>? le=kox:9[w W{ Fïn^9y3S_DrQErb{iHOxRr u o4].\iUW C1 pReA= ޝQA1¹ l6p9g+9[0LW-M|Aڿ I LEn%@;DƋGEVejn{1(:Bv@=]ifeB$+NNv̧۬[?qs-@t+ߣt6 irt:y|:FtZ^r;.{jȍ"xEFLa<%ϭ_=E tfZvs5#7 "aj(wqۃ+IGݻkEAGx 䊷jm4@ .3!Kd\av֐v+Nԑ/;Rb4{eםN+]Z6O u`!76Rc[-A};_5E@v( y#f-&~j~.}+N%ȋT!/~p*B-.v.2xy>;:pt5&x̊{(L0*lkW<&f^`{87;(X^[%PR[[5'[v lr¡ù)rR,a٨|ٲ!b;U?kmnkV &[5E %k5^@sľqZײEZ]rtzon VSEږD PѝN8M+DCGCJj2ِūIl"6&,tF so& 즆gYc*B[ :4`GМhmxiΎbڃn\`x&N+(<:S =G2H;54a;\g16L=|3a`,sFqQR%ZʤLa[rtD$L±>E;E)왌slXs8J W$ZYzxU) =Jv@_$*Br6 />RCdI+q%ǁs [5H5?m&ThzKf:G[6GI9^-t@)\}fi\'j.\Ll)6/ZO(<ͳlyE4ӐgD kD}eRJc}-UwLg'ohݹ zCv߱#׮zY?uw]d%,Tw".{1kպڣ{V@ ٮ]vo&о {S׸@p' )[[+@5}I#A%G]5t / E\jN>Dw=St`բqkhDY\k-bP\y}x'k [_fs/3el׳EƊGmjM1,~ 0w]2^LX#\W_G8R;@~yKw_g ~*xL|UΧqh 5IagXGL=#@mb/qEzby/R**-~,y9$ Ful)khg]3 v[fߐn5s"`jĥ.a=8UcyYLk?~U3KMbiwj;(VZiC_u]<>Q`w02(iUqn[-]<â8-)@rC3H?%>9H`ljN&rܚI ޛ UEM/ukC,wpeC Z.ihKm;HSkkw bgRbDQ+7HM*q! jYo74fVŮ\8j}hlutpm< &>7R&vƮ8.FĞө6<FR[4mjα*x. J1gj3s*c{ =hsˆji  U6vZ&ٟl΀PݤW gq6s_DggtwEgNf7D`~{79﹮<'w@eשwyHۡj2Sʿ; ڎQ誣Q4y>7Jis 3g;@q!z}cO/_b[3+Q Vn%0w|^֮;cr#|^`90_,j$s^ i<) 9x潹)|vo(_UOH)C6O>vRM k9aʤ}s!`4 PbC#^bd$ NVaQS̱|4IheV>56!{{eAb)XJdmgۃ}@H:KgyF <`_)I6B;tW4]DܽTh.=噊SCqv@j܈LHsT|ZּW°| -./bP՘9yRy3"3P.{#-̳qNrk PM:)L-tb$DN 3?Uvj* 욋89dXczVMEwAa'{'"! ocB,cHL-_ff7Y͝!ut$qjze>xn?' df:| odc&,fyTa#7[O_>WK θF7IܦE{phqKҤ5޴{FVc, ?I2zZKǑjhmnBNߩ'5q?]m:eGe 7[p61uD|G-R{Aኊ ; '*6# d/S.3oj!6 4|pm_7ٛ0]ʵ{()@F$xI8D4HAG!'yݷJ8AC':@Y/t n|WwDI&hr^'/ tn wU"g]C9ؔfYǞ%f7៍l(ܢ˞JiF!'vl!zKWZ(}&IXU~ܘ蝽sMe:{ 5|fJW^O W&8X+9eّюA+P>ytZe5g/fqO mJH'DP\':hJꊫx6!g:-NG4ZUe"c1.JB';JʓB!= @'~;a毚ѱ'a{ۤk 0>g{%v(Ƕa~&Az .&dCh2Wl֩y¿ P 7(_ k0!Pt,LkKR!&QpE7xЕ8Q*Bu+S"KSOD@(ۧ>mObqb)4O3d1UHlU'Qi{a[¹~i 74A;GVΏ#Irbʌq*#G+H1CN 0uAeIQ REtV K|Vš!Cr| m[˜& n(!j G_Cr9L4g8U; Ou3SԒSX/;`“ZGf18]GbI1JݟN&LWKqR0X1woI}S^dst2>0) N>-jQ.;2H0Jۨ g:SYN xRs;<}?Өc$Emnec5lU.J W'6 PRZpKDz@!e0,jW{i1AyL~֧Hm C#urp绡>$ a͓%>jKt#<^$=f?_ƴx 4-m 6R7% ?_h_6+~yK?j=Zbb`pݐ!xh#c'x۰ n&gv2ydN`W`B!"VU8 }|z;9o@"*7_3oZc.7#nc],x%1UFy{i?\hkx t9lkjƈL^^` LZl>#SSi!C K1B=D̒L'|;0w6OJw\\y  {yd~$d09v\&)u ~+%EA9"fM/#[5w\uxhfиZo6qRrܮ*:uU/\<CUu:.0 4QT(hrI UIӷdqa3XpZD߁hWW>l{\wHn,2(㞃|qwuBw(2*FDӔ6n,LLuMhXAXYXH4jQ\ -JS!jz|-<1uuG+K(|tM+:V S\)geк aR_Y=HYҙՎ殁PA[%^ 6u$LT<հ>q.5y#ր!X!$H1 Kh1=|E,6AN!j\0ЕjFu2Ŕ\hoUxSD:_ݹQtr781Wᇣ1,^ ?KKءoZ>\Ӆצ\:'ZMC+3UM; q8oi*l2x G6%>zkqǜjĻ<_ϼ_ϩ؜9~T /G)f1Y ȚoUكf3>_b@>߇_dq[^+%`,h/=e)%iHl=>hOLm㢵?vZ̓"+vc9Ine `^W J ('5SM2>.)N[~f'yT3u+ (GMt=fSf [Š\`.o6?7Y" 1W@"RR[k}Χ2 v:˺8;U?=F^YV2R eH2N@ڀze6N}- r?Oe<En[iّQUs4MwS:ܪ"$;/3CR~S/f]Ǿ51Qc X*ࠏIZzO$̣hQ|~HoS=6l&T;FqD%[ xr?*lz`"WtR' h:WK}<\p?}B2^C V1. zuYM6lr92Q+kxM4!sbZBԷI(EQ' ,ot 7KݐKE\Id+ \l$f/"UkfFM 8wRǧ_Vq1m~zTN^ӫ+0B(n^YT1Z{ܩ0c.3 j3k'۔pgtN ӈN7*~\"QӘ=Jz*9$jT0b6zj_+F`;< YKL@%<&;pK#0_ zA^UtdCd*9$ RTDJJ AO 5L%d"̧v_PSiİ ӱfrCY s| HH^dy'K.P3rߖP=D ^M{EV\\?]EVFE:QMP%L ؗl[DL~BE .h/ݙ>2#p٦rОQBa.ZV1ЧFKAfI:c݌P|ҟOBsxn~X\]3WHx\Q>b8ì (M9;g 4}FZ})W{ .zR?`p&f B_oP_FyCއ%%z ad6u3@Q#" F/q$]aJ5OEj &{oуyя}NMSMQ.j_$rˍ݅|"~qVKsYK֚CX5lܿ IbH4Hs!-pNa/A!8H] .sǭMɾ>[흉b=g]ۿ6 ,wdӆ8Iq tDtd̲u$DSB$;)ƽ|WX_5:;[Jj%II\?51I@:yTbU,z;@^gM@3Ū]N!72_T餾ተf!8NB2q[d(7H 9O݌oBd@GPaYrTu1Ќxg//16NtY`|,5QNqjpIl8z,ed  MI5U8PO-Og<ATlΑ[톙`O8t\4,=\ZB/5Y3aK fHz$\{Q@9y1ܔu特 wZ yLO?ɌWFaח(!rhlL67+?r" aGє0QJmt=rE6_<7o?nFR 0B=F1œd8NݛPԒ¢_JomEr>1kQmm6[ 8K~ lDGRvM0((%R0d97YlgYe֭<&mH<{ߏX^Mw[C͗uu<ʰ"ši|{ 6=ئ b5y:N\@?Az4t/|:"}= a!T2 =a1GwrV$'_|H<\5 TzS`ee N`e* c!7VB(2\EEِ8;{1X9;LTw{Fk3YU"?{t%j;%'<8ŀWE&#sׇ[/pWB@~Eخ>p8iII sgzO@)2;OEV>l>ON#$<rjJ6PWͤ'&b.veo`!.j! 7sǛiړL`Ԯb"u>%PP(%Nr7MᥐC'ϮeZ&=EGa&j ;׉D*H^dOW>o"eh/}`&d;,KY8 ՚_x9mpT| 8gmoWcJJ32d5Y -mF*J&Akc#\#n5qO%7mbN{q ;X5H"M'&1, X0NAWZl#ҧ$MsiA`qGdFW,3H FG<X_e&V.ג6 ot֭ˊ'Jۤ^^N'CZ/BI3%mw-h>U)9!+*VC B&{XjG"-DfH"\i5yԪmdk{y\znzoF2&a2zlĵpɾӉv8n=% FS8ŮLz~ld*/y}siBKgGA>r$H!G&w^pDJ ݀N%g+͗e:n_u|v}ɀ:w;V 7hی w^U*h{,Qh͔$NzbSXHn/ƪ>1>0M4%tw+;klxhW]m1cJ7OVG¹t~y dMM3 25Ps=;K&Iz=JWP%CPzK~$R {M.#E4blj\zQR9Ϝk)a}lX/E|2(. $ApbJJȠà=zmXu qX@Y;GTţ}ݩ(H"ǻF)xPJ68D k'E%^5AxjJ .)!~61݁K2;$ҥv]E]HֹÐ.$ vߩf! ;'k'Y}qG}C< ke]/JxJ2dm"4XF[5v݌Ye濯hAʐ_xӻ %"kޔnJe3w׮k("Xq&Qnp dGa'I?a1{QB@! 廙FNi6ӑPfKc"+o{~By*QwCLI6kr(U_H*n)9hPub)Vgxq_ELo\]qD=M.sSWÓSvzJ30;R0(bm51ڡ ~Ip꾳׈A-]#׮$A9LɌt/Z !?嗢.}CVqc)n`?>BRJZawװ_tI^h痈.XIkoYOQ.\^^e?9ߦ!X18?{PÅ18- r.ppПƿr*݃*s\ W}gdc ~bF~4Dh#Ѕ?;Gق7לt Du6M=q@a4V8 .2(&o%yN|=?Z^loJI:# h+D񕢪o̵[ȉ$BoT8 `CKF^pCXF2@.*M`y=_Ď;.L41r}{`("S%2>TѡfbHu@LrdsFV>cNI)u-6ՓgSWٌo|X9Wf6Tܦ@ H>>װҿ!4c;X AGޯ&d]"xyA3)ퟝ]`ΠW+,c)띨"90Ɣp0kR" f Arq ?u]uHڱC$jS!4&nI_,'A9x|ne) -NTB *2AIe@i97[ς\\iIXޥdmm\;)D⨧Pt:XwNj ~ kSc|]`nL"|Z~{5˜a"k IO`Wb2p.A@L^hNuc/-h[_t_q4y3GyM[+b$w$%Uf斢qܻdy 4f=䋶 oЦIԸ\Mm~mH,{, /)t1t3hi5#/PiK [i`(mk&%ߑM ir qzǏm:]{K`=OY% i0S R`twkͥs v%SX\20/`agN AD=wD"WFDz jc1*?y>E1ZUגg˦JI ,ou Sb6" }LWrmrK%* ˞S9P 5˗duqCUrҫmolHsQqE!eoD P#0;ՁJL Ju )C X!s1D߰ì)A7hs`&hQAK`UiRȩo&;ʪW撰)V*YUPb@ 񃴨 6Wy6tV j1;-}(GG L5barOLoT=(-k0yj4FT˯PPNZ ~/6|4RNm? nvpzDs-R0 {zpfZW;!\#[."@,Gy~C9E=ݾ龜n&1%4 z\cRѪGQn$FK+h&[V1yBS8ξT17qEoskŖw+]ASwnqk_Վ/]_aP4ؕz<3`ٔYZ6e=r +y {Wo/1J&?3*\~{_HOD.c>DTA45캒hU8{ԸaP,_¾;?EI Z$^I;Rf3Y˕oURz u=YֶQSV8d:b.24p.d+ F~t<NeG̐{原>Cas nXPLaYR`gENbS #&=PɑZ'Njc'h@L)|b}vk mlh(6M{}OS4b͘zk[={{l>BT 0txI9ųR~eqw{D1 EN݉t"ikMܾ"KlW!(0֬Q`A\G~#wr >CTW*[~7"phZ55wb;i9pQ:@b7U8,lg| q:[evH9( ]ȷljb2·}@ͼ=8V8205Ox6NR7ɟ:DE}ae{ŞM`4i2!-3Rc3\לA-XU186!f?mo3 $NUzHϞiV:*a /qU&%s4]1Fw4)fQ!/Z}`v}f./]GX~p-<'-K$H-"&n[> -.%Dz' 1`5)i1A2G^Γ>J"@FQl_L󂜌aRQ-XP7rfkM{' !1gk\ C;5sG:mzs{C5Ɲ`T0WDˎX?$71$}Q&g`{¹)1gGbS2_M%3vS{_ykDZ aW- lWʘiBxG!{ o;(Tvġ|LbqL|2{ >u;@UM˾zGmЬ,NnBAEs9ZJ?p{8Ş=ݐ>p΄`~Gĕ\?]8XSDEQdvp0*Sj3E*v꓿[7V8ok(Gjw(]N1%"5Q ʁWvAFoV4p=kYy h1~z6syZ_tv'|q9+_{ԣ0ANmp}/&h(.϶M¼4zNm ЃVG4DD/akH H+=Tww+$^!f $ NRTn44F$͐eL~,uf;ado" tbDϜd#˛py0tv=[\q#KUB"V~KLC?H߽U j. F?U7 $aXaL ˷t4mWjyUt.b %+il)ɏw=`æ,lwNiT>V}4MARR"ZzwUW͔u@g61wm I"Mn3~IY\)? M\Rj\b@mS;6{RmEC3&)K)F[;,%~5a ȭ"&=g;-bhWze"XюT q&7Md:?èM|c߿NQ 2-՗i.Q[*{{jBED3*s9Cԓ=6 ֭dBͩku,ZAi~ak3^WʊL}D61 4EH$DN_}{mϴHnyt4GڎqA7"֣|RĻSA'b9?hJxP4Dy}! y^  CN2+іi7vjN[ߨn WP9'LfȰoc/!α?̈Q:Iﳍ%NplV&;+Pٔ~[opgǞaָrVMV7RՖjv*%D`_vԒ@(V|Pk@LIY0Ki Yԏ.}fOәah}Q$/V呓2۫R>7ZV3u0ʤ"C,Cc/Ǡ< aQk9NR^.x'x%Jw_$ !.(g7sߙNG"$"?gE9r׉r)3^]@ cp ۨyTi2|L:!zm܂cQ1PmO>usCf~}3{]C"4&k&|rf_xPfRIi"R2[11f1FåvK,el~]GXRKWF~+)-v!+GT3YJ$۲v$|߂牃}gvnyipȢ(9RG)Hb $;/4 &t\[Ѱœ,oqb9Y4X8@Z>s8َn _JˤoWALDˤyW?(:<+)+~֭1$-Id Jy0;';UOqH`[,x'Op޲q# (BmxǥaGQe/ $2i!&s ;?rD% R}jϚ$^\OKl4ls˵Zf` YqwY"\uJui='WH4)]b_(.]jb)8^YUa cCv1qJ ͌ӳj2q[mlcp9Qv9`V.i;NZ3yBȚ;T{kiOx * ^ЬF0wj|}Y㲝vQ]A&u|bdlUESĊ)j0ݩ8)𴊍} 8fz?1uo> B+[6 ?, 2IDž7RMɮs\ ɆcOTE+JʢϜ[)ֵaqF4ЭR蛊0GY<$Oi&]9fvd EU+т3]ar{dOc͞nQY6 Rao# 6ʉanEJ .PIm5sn1`qa4nY=Ke捷dA2JDeلl jnN>,3fo"M{VXRX]X.˶?xs`y4'$7B2ߺŢkM{VbM9B|Dbhc/\ ;q0|/\1,<\ "X T |!D$j;*:'P[J ,iP?SfwȲx& ::WP;eG.B3`(,xWS"z[l2s^84Gi[| L]{h{V yoΚ!# % %3,'DqF@{jE}mi1z*h&[UP,U=f1#e=BmRk5p`=uΟw#Uh3b 6ny~!ywx2B嶩NhJK gEF8^3.`s!c7HNJkt=xdJj Q2ڔhjZ<lb^\wͺ41fd߱$=USed i) ~P{',} ԻHCfwH/0+MP`8K'1g>YK@HᦕVo0ߺ'1E'-+%jk/92ON0(Q,qMZ(&--hϺ_ ބG4m>^<䇆 "}qWYtj0lZ3ڌBsdyBuVēhrsQ+c{}=v :A"7g}Y^0bn_p;N +b˫d澁/T9/"]U1Hv Hl9_K ^F QJM-V6]oQtd7=2(+ 4279dEiGUVbG˫w'[%MjiIxT_LIsyrXwN23^?% cJ=wrF׈/r֮6ZRsrjG/*XW΍6CW!CPW VZDQz lO֚Q 'kzd=O]sgxuaGڭ{^raAR㦬Ҡz 2K7շxkc/N dR>pu0+!^2UPrrAs:|2Ƅ6r W+cPmyneN/Zڠޤӆů"ttjўuT5. 㛑iϯJXU!!Yb5 \Ԗ#fnT9V3FRsH4و¯!**D[bO~| 3Pbk<;n_L}zt;Bk/`:*Ϣ0›*^^v.e']!"5߅?`{YJ)qh## ŬgĪW)pGSA]USV+Y #̺Q"QfԯBPRGX <˚R&J4.wa{/ZAt?o)i X;:iVx>/Vvb-ƽǛ©;-?3y) 75IÇyfs =}qyp-u,yY2;,ΰn+@ѱBrQjOz[ iOm(6Y&G2!4h#)(4g+<-D CVMTP)y.uX,T?c|R.5mS53gBm 8_E $nK] ͫW\Q0s};j4RgZQWAψV Ez ( .ԈMM".U504QYӗH@)GYϼW̒aiT \(J)1>^-IG'KC隻wbs|u qA@DDҚ9톴+Pe ny\<ﻰAR"^klAPFYqGSabDxi,\< f8ōԈEHU1=pXy' mk[T~e̗4;3a|z]j͠ҺzXXp%a'WIڥv4ko GFu3Khz"w9~Cp_6|%+.ƒiiŴ<73#5Xf$tL'_LY=&ӾeHoUm (RR䳁(B|CE wlP^"¹kgߏη;a5ECB8qQ6'd } SJ졄dX* ;rndlbq~4=L|¸CmތtfZ!Y hA_=9hOXSdEV[& s[rȏeG3h{8 !8X*W;E'UJ  J Ǥ>-P2+ϩixgg"RL$jKr`sM+%rZ?d,<!sH>x.3cS`]ߓo䝘6b}2WiP B໯?=3()@1|IXä#6(tbV:j#̂;;%%)^i ڶ YZ