nscd-2.31-150300.37.1 >  A bp9|d?E<[O5G)\=UÇgv(n]ܛa[A`b[15- Hcg/qTW Xɠ+MVc۾zDA9 .kfFJg*]7cf18d2b9852a3a310d886fb9fa7de44f66df4cb181057237391ba546ddb752f31a7d295f32376fafc2ac6ee71fa77a7e9f55c34bp9|dCK>Yy50i[ŭ,¢}+µI>{u-g)O9TL)lY_6FA9oy٧ [xʂeij  -!&a#bNޛ2d,'긂Ԙ4qSyDIZBjY)b@gFˢ/9\lS\+߸yl>en:A> yLk&NB$ԎD?WOleq8~'6!U) !>pIݔ?݄d   4  GMU" D A   D S pBd8(28<9l:=Ԁ>Ԉ?Ԑ@ԘBԠFԦGԼHI4XDYTZՈ[Ռ\Ք]^G bֺccdefluv< w܈xy z$48>݀Cnscd2.31150300.37.1Name Service Caching DaemonNscd caches name service lookups and can dramatically improve performance with NIS, NIS+, and LDAP.b>ibs-arm-4SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.gnu.org/software/libc/libc.htmllinuxaarch64getent group nscd >/dev/null || /usr/sbin/groupadd -r nscd getent passwd nscd >/dev/null || /usr/sbin/useradd -r -g nscd -c "User for nscd" -s /sbin/nologin -d /run/nscd nscd if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in nscd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in nscd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/nscd.conf || : # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl && /usr/bin/systemctl stop nscd.socket 2>/dev/null || : test -x /usr/bin/systemctl && /usr/bin/systemctl disable nscd.socket 2>/dev/null || : # Hard removal in case the above did not work rm -f /etc/systemd/system/sockets.target.wants/nscd.socket exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nscd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nscd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nscd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nscd.service ) || : fi fi exit 0  A큤A큤A큀bbb1b1bbbbbbb1b1b1b1b1e2cdfafd373d24fab07018d0e95dd49510ea6c992b7be2b0611ab23bbc2750b579fe74962fbce2fa9b2a4b92f693b2fd42cbc2ed331fae268de7104879a72df879c9cec5dd2414dcb76d11e75903aa6fd9b7785c897cb9f853edcb140a71b7799f8aa2aaed2ab71a296649876fe82aeb9476dd318e87ab4e5e1069f8e28211f7/sbin/service@YYYYYYYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.31-150300.37.1.src.rpmconfig(nscd)glibc:/usr/sbin/nscdnscdnscd(aarch-64) @@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(nscd)glibcld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcap.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemd2.31-150300.37.12.313.0.4-14.6.0-14.0-15.2-14.14.3b@b֜b@bb no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/bin/sh/bin/sh/bin/sh/bin/shunscdibs-arm-4 1658321982 2.31-150300.37.12.31-150300.37.12.31-150300.37.1 0.48nscd.confnscdnscd.pidsocketnscd.servicetmpfiles.dnscd.confnscdrcnscdnscdgrouphostsnetgrouppasswdservices/etc//run//run/nscd//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//var/lib//var/lib/nscd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25132/SUSE_SLE-15-SP3_Update/ac52d9ff3c9e2119c2177d06e19f79fe-glibc.SUSE_SLE-15-SP3_Updatecpioxz5aarch64-suse-linux ASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.37.1.aarch64/run/nscd/nscd.pid' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.37.1.aarch64/run/nscd/socket' (No such file or directory)ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=3d12b0ace04b488b871ce810d0a42714b7c0f288, for GNU/Linux 3.7.0, strippedcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.37.1.aarch64/var/lib/nscd/group' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.37.1.aarch64/var/lib/nscd/hosts' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.37.1.aarch64/var/lib/nscd/netgroup' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.37.1.aarch64/var/lib/nscd/passwd' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.37.1.aarch64/var/lib/nscd/services' (No such file or directory) RR R R RRR R R@ hdo*utf-858a1bd531a7a5c06650c886049b5df6c3764cb0b051341e773bcdf0e62bdce65?p7zXZ !t/!] crv(vX07hY?s! oC}׮o/OV,>ޅL)^7;=PLцn /U BqbIc =A-TȮ?{I/;|p( h*Fw4p0%x_jYh1h5=ըtк'7ֻ`E7\S8vQV$HGP5*3|_`knVmӫ =Db~ԗnk3M%I JUЋz$3ځXUw:xn>9<}܀8BgRJ6v_ӡ=F?}~M?23}I+\ۅJZ=!`? _Օ/WF{)tZn^w\!=p 9wkBWh5=B+n:y1ݖ0oǩ"p!SE]<44J8JD0~ "5vݑ! Eso}'(x4x&4/|ZWkKLjdOu`egʒL.%:1.FzϿa`K ;99AT\ؾgP?pRC-:T$a}'dig} Tv4-Vӂ.0nGZ4 MP;yo~jɻ*" O(͂uQsClֳ~K/\Ju}yS‰{a|{̼F2nMR`r;ϼm 8RX:f4:6I8"1j]Kx&\`K$,YƷϠwRzOC+YYvmEϋ^PI#y56}@B&ڳ%%<% %(/{ɺϔ3:WÞZɚm7stw0$\:4Gטּ-g+_qT+FDW5܆<6$©M0ڤ,c~ĭTCnP^r:}k+Z ++z ]~I<9+a"6 :HRr̂^1C$Z#[Cr]ʍ> 1Qφ j6 G϶Bk%ň$Jۯ!PO.Do"$=ǭ ?b%5S`7|Z#o`fҲ VݣjyB5ak[6>?; {:rGƋGJm3\O7YJMA|Y;w`2^ pCbCľ$#-(LSƭkLF;=;R%Sa[\5F"z^"ׯl ;CrMI*(߲ >c8^>tu-J@aD\U8ѬA] aX!C\1+j2eƥ{Q?2DE\]<ST=qn¿;t_ {&rtqۺWT8pӷI,4 ,I?|Be䗡i33 & yBjHig[f) Fp,󁍑n8EkF0m@q3snX͹Nȅ4gjF)&6@ѠROjkf IŮCal5f#hV悍ԁwy~v[3yW"m*.NAƉ ,/f :u .vPȟHQ.@&"dA;t*awF&K؟[CDn5Qwmv}ǻb (Z3#Vrqr_h|;Sd"&8$Ed" {.ނ!Ukm*֮(!."NP1l$x?+Llg3)|7KWՌ\Tws%]w{g;`06#BjI鴛"%Msΰ|#ryW<}.p8 n]w}?>}1Y5`ڃc,J0"gŽ+ K^G ȳL DVnq'SJJQW9[_ͷ46e0v*E6|zFL:%Un(}cЯ /5Zυ;ן krX0fi&sta"> wТ8x%L;jA85BfW hK nڭ}C7%HKtV=1BHk}Vl胝wڮvKhxn2'CYg9 =*5:+-#bVgb!$DmU,|.TeIIvę]9BߩO]+{k}>y_[_Qe8 =>+!x#aOʹo vZorW~!]Pi SApiB fP04̐ؠ6s2rRN뛢r> t}@DJO?GℲ( +'Co{bCDB usi餌oOCD}}![<5Ox\x.n1 y{0L'RA[y }NVFw׏qusE髷=|m K{7sr?e | ҮMKƳ Uck Yk~ADO2 %Cyu*vuLK%G66`A8F ǘWt9N0 W!DaK)#` HdcS1hUF/a<7pvd0W~#Ձ|lEV8uqCA\w\A:+Q ̪0.ߵc7Q=L>wй:$܉W.CNLOfan%MF"~^@􏉰Qa2;ڍRhǕ5z=eDt:H9}%e|~BWBb;sx8/_ʫ$g<\:y'St@ĵ>z=hf~i؇Փo]>>}ɪx!Pn=4.^hX(/\U4`  'v8[T!e-gy=e`<7,!9@Eφ|L{Pt0vُ O䆃06<X` Ԡ5HnJFѠb-,B0cULw/`s \rDԽbÄ|Ɩ qk֯D31 ן\ ĥRXV[6UI侀`XmC7`>PYh7c7_dfXpyU<IuGȉP ,%.mD++unoJ7n]2Ox]n%@xbUJUΛBbZӶ%l`4]Cmzz⺀ҲkZXZ?(?7E ŌR`KBݑ C{730's\*ҷGU(!\A0US8?GR]G(6#Z[Dw@ \m"Jd3Xii)Vs)dr\(nWTebaXn|9~Pp>d4{45K0u:¥n_:dr"ӓoY0p*S17-Oao(*MW>'qFHy@st:95oi SF cYͲ;[R6ɕ/]Wأ`w uSm>tXx"ݮO*=0O9{G؈$0eCN㤢@W=1a[ xSrZ)y(k6Hץxi+XAmNiD6R+Ѳ`9XӜA-Ny]z'@Z`8G~>];]M& plu96~މQ6ߨ%fwIߧU:o0(PU48`p[D$ {sй+Bk[df=iMW){c8-{ë-]_*)2O"kG㍪A2u=%>x\X":r,#ZXcf8s-EȠ%uȴ)5o+H=uFV3ep0E%WMo'c)!$0ZԌ `_T}?cc>rAu3vZDPtWbY"Fy68% t6i,@ iNܩ)DݟtWE*$pH5Q0u/Jc3=h 5 ÿVvYz`ep 3s֧UҳTњJO+)U9vfvw,g?  Y3ר$QsL]TߢTLʌ#@3?QGnAI}CGZ+@e5g -hшO*ªA[0L|!ŇIo6u GԼ 0> <3jU}FI^fRݲs)@f{z]lC~\.9q%Lj(Q,hn37Ox[ױxy:EUCBl},Qװp2r3f&eհ^hoEM~luk?10p %:>15uul6=qR+O߇_ڲqV]]e9M-s0&"V[lk!1i񺸅 ^L0H9V1!2Of~e2ДB#? xV0*ɖ+}.m3-7u񣃇Č3^R:_A$/*$_opw]48~_ D Ap) l0ФC5nI53g Z0'h_^"i+&hȉ_Ws H<<8{7ցx>p$Bn#G1&e 2HLLuom!;t ErQ0i-:n\sO.f:p t ,_Fudw[b~r6$3pmYC a[$¤D&n/OwuF|%MYad͏ygq(fPn;Zעu[w}64W,N;:|{6t~,cNKagnm8oאѽRKX4r¼1/3/C@ɵqwsl%D^qN|eЏpW{;YcМaY՞2m [>dHEHa瀔+ph/FƼkHA~A s~Vs5#C\FS1Mc@֑pTsLO(ɨmňNKkTӯ'"co$*^xtou/.`|l2OWaBCiJ{4H#ZzDXt8+%,ж1hI% S3.u. m8tAE0tRyzn 煿a|hQGD ^ۂ A:t*[gRU/ $O #9s9ѶT\g3C|M?T^['}w+&[?,KDe]R7 =-cCů< vE[W:ҦfI9Eԓ6hB!i8mL7= ;aP F#].g˄&k$6$:@/-|2;HTs} #1L0d.'<:&7F"NSdg1fxoTB`ab˳ 7;zD'&&^2R fB*qߤm~&ݎ\ג(REr(d׬r,H))($8P4,nI;]0e:u%X&W6!ulF3YWW@q&!ogYRR/Ν!h黕GEomɲ~q\{L%ӁGnB24Wp,q()H-7(D 6܇Jٜѭaу@`% %GƦK;b\Ph KM嶆my9Xj`lPJƍByXT@L*e7 @wIԮ{Ȳ1m&$X>hhwЇ/WI݂(.]8N׵ ]\tHQK\ Lje0h <>44uab= ba0@RbtG,ͱvwIv\}Z3)`A3XT[vj >ċ'?[x7pw( Jf&zFy:HV£~Gп(0A}.~aE7F&wsA};J ZKh[LpW!fbݡ!eH1<#/JF*M8j܉/ p/?)nvv^l™٥v~H' F5gG>DK>nk`P? EOm䙸Q+\?tuƅ?jSoNI4lwt_ ŌL/_GRv# |*GA4#׍, "rGW/H}W"Ny-KmchA0i7ʼnV?'bv S)?v4{,$.Pd؍JEo7CJ]ٱ2A)0jTakH6)5 |퍸1?aWM|@-Aw`/uxʷ0^k VyU \6"ݤ_Kx9i@.2s9_z}A'+= j֋Rֺge_0zp7MQogwwXAZDOмcM;]eZe|R {WXz {kto1{(zZxIِ=>}?2=kV}$2jRumޞhRj:\/]D?ǥE$HwMSPWʃ!X+[ȴέШx'F[n!=iϰ܋) ?5uw$+[ <5ҪүJ8GHQJ فq(հKo 9C|I; jMFmcY#MT1 E,ilTakrDLƯc[YD뛦޻Q_hwcyeڔA~=x1 Czx`Wgw0];bv=}2"npP-3B9/n{a,Oj84 3h/4?I΢Lurȟxg@:c ƑSP.6HkQRq (wٞ\&w c-X*">"cJt~Z\ik0A$i`y[Q'iu-L#(djHԣ\7)ĆU Ad2{`3U|x4B?Xf)ax[%u%W/ c@բ :eMDǐ2R3n!&}, ҰVpS.^*~0i>sP7Ec&uun )tQ=k5~llqugj7 >u.!<+.\ a W⏨Ș\!sbKk{7Yx}1PBԌtBm)D#Xz8BU5Ǝ$lyO GWkHjO56eҥ˛<y^ o(oSh1]]⏗=si؜x~N|MGUs1b:%}8?

 JOQa$߻Y)bkˎxoQWse&M)m&na}QnʌT=-i4lf/$(y!ӍFaoͨtdh>A'Ԏ5Bjtpw)]UEqWR eb-<6[؊L9n|5@9Z0*"k-*KW`$jU~>ɐX H#2aw6"]%Fd /' G(*s!c(sZuPX-c8OZ#܅B\KIضcz>AC䅽斳w8LDUGw}WW4o`; ԑu-Ə;7|#d[{e7]Ù쭅d]Zt)E930ب9e1s4a= :76g1K }Bn%_ld\Fґ'w9woP)D}'{ԖzSyzt׻+3$[Td,'hVr-l6G&Z=cObp?mlq_|&Ƒyak<;|#*o\¨2_L1o≰e){.ּ J6 Y Kg)!;G7Zzmk2zCߚdGp}j9~Jvn]2ݭ7r]̈Yaz9$Dpk?N玼 Mp#_EgmdD[,M_ tT`ZCMG}!{W8_kQ),y+ EB`C;IO7ġ*sYEb3B>]L6oy^fK{\o`q)ΝlXC~%1?@F\9VťAV`؀"A8cqAzւ*;?o!B*Qh?$r$ba\mפbso"#7M 伩G:uZݾ ?bu@1KQ1,HM.1Itna`G[ƞΑ[k9dVMt ^t(UgPО:(_[]Z oB5nVuu;5|Q}CPYQHQYz`"=o N5&Jk'YlHҐ/οd~lXA&? &"v!q3{75WNJ7CM:JNdZjO#LGX3T+˅.5ZMνw]ys:icήǮ{yKvx$ Ȣ֌hJ.rzoШsq,Rk״߼;/AI5p -ڰ/^.owaW_@ވ7qu, EΨ֞p#~ nKyR.op4E6:w#L~A ʇBhl/vOrb=>bѝpZsy)#+^I=:r! EljݜW7 DTdl%5fSi;A-o#ecj6M;/%\Dre%dZ4 jXk?9CJ7'!mF9]|ZQH8lz_E Ȭg!\M- |6; C)€Wp* i&&8Ϯz[eʻ-A;+&!e!0ib#G[ZɕPKmI7Vv/'D( rzѐ7Y6$:ˤZiDN)£}?BZHA^iGZkdE4JB߄Wys{ ͼw$@IY(qM&#nwNp^6h2d:*@fȴB >mBM:N/?郵|^U`v$ $Jus/‚UP\\ga)MV]UMEt".{"ZEh5jl-4Vz$oFyFe4\} ՎT'k>E}Zյ*C/zע$.Jԭ-5%?P0H>U8-^h;ժ7q~*p~;pWm6ʙ"~D-pSM:b 8aOH"  i7Ui/cb+C|gwF7Bu*E,k> TSy XOCҒ#tκfV*w,UjWtOD-_F9AvN2:C޴F<l䋹45Z2m ƠEYaxzz- V.水SSGCb̽P-'Kw"@/a/+0;x$av)'WSѸtd*u |@obA R̷!*Tr 4%xIkӚMܳlj+3' yi{Vf3A g#eKwH,MfsB i~RbO 9V{onG3pP^fЮRlU!XIlV`HCA >|`)&V+h!8LgF94-AЮL89j"t'U2UyDz\R:*hK"irS@=>C.\ټ)^N^k@j!6qkUM .? G\G{afҫk΍U ߁!V1.o) *+)'y/l b^F(tP2'qRZg';[q>acesRڑ_Z3]p@g]ɰ^;2 wN5nN5)c47J}n kdŸ=e~BX<МUÀx?@ƒVI, UfȶnDFSDL?Qd>N]ľ~Py:k^8]NadQzQCjQa(:AŜTƮ;6Lyp'ڵ+ql 2zbfG񤥛BM8ga  "jڢYҐN!W>+t4npðT`(H˭;4#6}SF`RЬ=q0ThsC. JUйno1S`qO2_`~x2,rQ(RG&Vy2b+F xrh>%Ooby0F)ekek駓}޳DP6_1?\="4~A/*U$hz0%V!d)dr.5 *x:/8NU[V6IqԱߩ/;vq=W SX dĵ2#G Ua'UfLh7Ps:%tQ{:@eSQ#L9C\ }W%gE-6߿IG¯/.{WR9 6g*(;TGv~b=˕ܫ4_t: F=[*͚Ӓd"xq 3ݿQpaʬwLn&.ۙ؝c2vPgQ(_\Y<݈ bz)o{15=j8[dJ1X ωlH+@kQ?EZfũ64LFX"l'n<ڝ.ad6sy=S$Bȶ]V'<ӭCܟfN߬8Vf]? DMXpx)ӊwXU|iNhtyl+]MwLh$>uah7 JYg{S^I)RR`Ԧ%?½փ?S+ _[*a-C]uD{"e  8-(g;@4;qiO}!O̝fRi4;u=o!Wf #7jt-[|f \w ஺.w{=^FyӭW{N *edM}m%(e_ W g`b%6S|0  ;|"J (3"хD}0&*"V eJ%\+#Ҏ̍6R1p I4a@f-ʀ.P $]G,ty⣽'aVthձgd Cыr8¹QhÚM𹜳HL.`,IJP$G # 8+i]Qδ zPQVٹK1rYz8*}V_. e~䥠NlP0WDle!~+#y0ĭ#/CϨt 87@x\6b8Hގ(۳Հ6ʾj:tSd_rݽjr;@e{iQ|+76nY(I"6RUYL}2_@ÜJ?U({DZruMq&3@j!:~LG 5NoCA  `<J?I@׊ړ,>Qђ Q-{'!${Gj ?Fnu"G}h|ʩN>.E8}#o͗4t@<xTDhLDC{EO̗D7FQa(En䈿ٙ{8nI1fsԄ/;H/bD&Ak\6"I\{% [Nl,KfY\lϧ`Jͱק;ߪ3ix_p3G]ZӾ[VY &d.A?k Yf"Ƣ{I6M?b zP&ۙ. 1ӄ f am9=%ndV*rFK5DO9(_郋}I%ȶ,oGWL 2j 2ӔqKrq|&R~ק|}h\{+<|DsȎ^5w%b/#/S6%o*Kȓes'd YĜQ =΂9Jͨw~! [VXڊW3(Uc@3Lx/3nxO$db8]ĊaӉ?{ b?2F]\sPS˶n[H$Xo!drMK=ݺ8IBt"boAGLneޅ%QgB&C3L1ὡ# E0Z^GoO@ pa6ePkL3}Vs`5V/ ̗d5Ad@k] EE"8q䮕h2t4@^ys-X'8=S\u,ܺt#Т|ZQ}K8Rcx2آn@j*ha/$<,$?]HȜm}93~}6&Pkǜ{[" ?4eT^lo-~UACYO}̆XhW#tEHy9rߦt"UQ~yN+Kz_s;!`6- dmZL!<=AB3F?rIqh+v[/Nw}Hzo%[+t?h#Q6yBvU%~G}0y#LsC%:%]a<&븏pSkûdDhZ'%f^S)DzEUE)<q{c߱͝AԆJjԐJ(`*m>LK;m@UTc оOT*|g,&"AY־Pڅw#JiM9!Djdr@gBڱ}W"lwq ={z aYHmf* 4q<ܰQ)<]}_m)-ޅ6gdݾ%"1-ʷž݀0repϕ)uk夌QLHG8vm) 80X)~,ww-M;-4KYaiV]DTӨG&G%"NOPMZjBukӄ]Gl-[7k=bw^DU>xFF?A(c\0Bd\+OV82r7&k!>0q6C2:lwhI.*>oƚ A+d +Q UY0I<M;`<~ |'q!7**_@lexg瓉fas۰ǙqZ=cMuCnub5l9CU7J/'޶K'W{Pq7IcU $g"UGoJ5BܘYMC>bf(h+VH խPToI'kuJh}nRUꑊ)>?h e^m-s3pQZW9b֘Obz~.g9ܻZQ)$t"916 ݦ1^(pRkʣ|{ᤐGwoc{H>.[)B4>q܁%ıy]8KWs\yҊ.E`E-ppeyVʀ a//-fin1v׸dIc IJ{D3 D$}.(>RQ||6"l͎f4I5ߎ= k.+9^_ PֽOjFZ4m1 Y`N[8'#;۱ W3腢{ Z/4Ɛ)X~,,I;lYH!IXݲBĂ'θ>t{m+)aju!3*#236ϕK6?CVYذFjĮ'V5jYYDu$UTc#2mڮ$_qdֳT6jX>;Yhɜ ZTA*~%$ŜQe*lP땿gwGAz4^pKo[vfK:_K> ;@0k.uyP;.oIIhBaÔV`LZyɣ Ls! h1à<۷5h螫6=]L̹V7N {=C߯_ ^Ko?9JՆ,'mC )-]CM0]{(y&[1d(TR;k yZe/Ӻ%21^)iRBKCAѝNZ&%͂J]ނ1K &GzRRce31i9FʵuoETV<{LI,*faXwJ"ܛˋjiP}m?S_ a )[`/T3D᷁[)jzƉY/f QQe2H(Mr|oP/py.-wԻ|ltI8QF۲ofɠzӰBO(-2A۲:ULgj㼖sGw~Fֿe/ 83t:<C kލ ݃{V޹ҚuD ܝ<V//P}9O2˜AK:]' GljΗ|_]uA;ER93N[oVm_R"^9@[dM d{.32@sS}RiCіMBQ5R@gٖs p,*J ˁlI]ne Dy\VȋA; A}YZ!54s]opVnffM˶f{vՈ6!ѳ_}D 4x#h`,0?3,{ s" Piؕ=x4/ "0CAxu:GsٓTqtkV'$C6W –EFߢs)bH񢣟`#ٗh '4We:3{Z XlD_^ %}$[y ^ֆ8VSA|X8`\]B'D#zw6bfTjt1T l t/kX2P!x(jk#cXj7-#cfX~#z]S/u:048O,Su+, t47IV|MqM1m@Y z,"qLK5BFJgKk_ˇ?S*`$~{(L]@WG Lí8{kPmm.j\1-ް|ařL8ᄵcaśU y$ %@EKr;Œ0Uq @s1nYHͪ[{ ӵm–&QL7ѷNѩ,@(fTxT@xGwV,% Vs0@䍠^DjY@I +D)w):msǃϗ}&< ]?w97V (KB/ wG a1b7++z.}骠o|KڳƇ?Ri:ᖜbc+w^sb. )G q+7>E$TZg!:iV`SX h& $_9]m`n_Z|OʸQ{Пμ[ g $]$* Di .Dc}1.o^|+ED`t2c;[g1s!)YAe͘0MAib.xϭV m8~"˻[έ\A^܍ ~,~7 $'B-kKdVST W)&5n7}.kQ*IPr䛅n)/n3XGogYfޟqqg%芊IlQ>LzjPZ)T{ Do sJv\7+I]؂^x}aFq@"e,0Jf8B~-áI< ybs>-'_)rﷲ]oARw3MlSaV:%;ž1{.R>Chgwr4iZM&{OH{gS򐻜m} T+1-v)R[.mM,@"YqF)H9l}=Naj˜og+kӒ9'8NCG_/9!2R0An*&“Dk|G<]'Y=KDWT&m (fFbnİpNJL[%{` {Dpt;e?")9WɣzJik.%3BE͊f,'@ .h22'N` /++7Tl@J"yhNқyݸTFج ǟJl+c3_ w2/Cf5 OT^H0iWlz5Ħ卽fFM[Ъ|/Wt?#2j"t`ǃsWDo֕#0jÂ>;̼4Gdـ IK"ؑiו!2 ^4v8ϟD[Da{)7$h%pohl!9t\JL{ݰq\S}(_ㄋg6`dtJau݁m~umv鎁@̋荼n$Pτ8N_ 1REJ[])TK(3.xZF}SFX@(558lg[g9~fq%v~kN U4Cmك'pj$K5 XpZ]"T#%T Ç? ?vI  ].5[yD~?-W/ʨs֌jneV{ژ֚1x3yv<hJc]cPkY6欰>Mυ5vmOI0Opbw fwZW wI#J *dv >j]LEp̗+Fj+s^5N;%!K}DY:SX.-_O K2Ek||x+\wH"̞ޏ4+2li#N^`&(Kq sr h[puv_1[kIL{=P֩ſW5G)V$~yv u9lGi\@lTyr}|g8 VڍX pt-)}\+,SŎ썁<,7L_uk 6ܾPFhLmO020Z#F'ZzoML@es+ݽzZ}}tB%2ɂ$羭0Wx ]4{y]Z5HCqum3]<mBdevTFl}6=f7+*y.GS{T2j_"x<2b EɬQ竱o>[PSt I)fDs&zjS1WMQDMu(>ܿY眲IM<.R=&ytq/+xLmL޳xˋd<;*#nmO %<xLQj uȹn'CDG:PnFlh=/ 1._ِaQ@Ud ɈOg w׌Dem stawi7"')4G{Wnl vX é,2y1aF7FMA#k(yG7Yhuso'M(W!U? 2t! ܯ۟WHM)?52cܠ`Ruq=377Ab@ut~!9EO ,)Eu}K8~Nq8QEtƾ0%q>D24sq9@Τ &֭$E3.Ttv]tB.9>}Z)<gIMێ'F{ߊ e,TLE㛮LPvn6Øm D~A\pk[0zv^ix{obe^">KDqQu(h-ldϮsq"<Y1^<JP  \?(i ^ٍ??H^; [}Pt3Vĕ`I=)al)[焍DFIĮ7D̳[b'!hgt0xC5.(,yH!(>'Zz#a;~ú[lTInUȯ^Ŏ*S&5?ԥJ_.GCyir­"#5nbISuW) V{"w@Ѥ\Pys2ZBdceB(嵃Wvvd xPG[8SaU z(]{7 k+nv0Ӹvg0YDD1mNnzy=00NPCƪIYb%D}L,6aQL"-R8R3ty2+؟r"!$Td?~E0o3_fL闀1EI.(gjbٙ=5c[a9L םAsSz-P&?8ƺON ]ʢ"=vu{o[SsWV8ʰ% O|l,-i~betGg= -G|9XG){ĤoPP}xNeyB$tl{0BSpk԰N9Z%!J2mkcdZ?M^Cģ9U7{nȳ gtez\:BOQCM vz`5w6qe^TqD [VONHӿUػ6r<'`o9/$*[`0}6PyLmG+M$FއFq#08^)r-%dԝtrgND4?B0}g3D7N~:/Tȕu!C3teb&/;svD["X&&T3t씙!=nK/m4%HՏ 0/DžuplO PdkR=DN21s(>䂾K|g'IΫƏQe ]LFM<êz)OL-%kDZ/ٰS>+lHčtUid]!ا&h+u5?4!dT#xp yX~͓͏l~Ӈ[͒YdUD \fxwVWBĭ8F$TgJk B6u]|,L,"~?.wa!n]ً9`WqEwր;)@A1V2g6̆ǬM*Wn=IKwNI " oGCl8Ght~~E|O)"Zm<6dK@S?G7,Tx-kc/EpF:@Fcn>*Wmq,D߫^SS !/ԉJg0Nzb oTтO>ǖ,K@X:hʆ;#b ɡg PYnj?7_&ngOp7C>LTyEN7MlpoEz;!6+}FH6l,oeQ1=cSxdf~/KE3WD9QpHtf5pA`|$5w/f*fI"|[jw*7fn0R4Z~ HVSj1_6U$bϾetga"~y.s?+cw'W{ψH{MG;PBX8o4?`pN,{)aͣ&sQH-;ȝm1 E:>C{6WJ?ukvLWmx,ϵPjJ,zC\Z'MUR~ vU1|ƞW2a%箖K&%_L|e{²599ËuMs +j:s[0,$<@/pf]*5tgTzWIm *W,4 j"8/K%(%cd~ YzM .sJLE9s?@%}}ctjvu̥} kQxt/*(D5OVR2q76..exUDcly-$e_$ÙCXGm~"ek1z$>{e5. UQcڡ6 ڛ*=mCm0)^%k*s#?*pZ{E3O6#[njDhQ`z N˿")pi:0 u6Juzu,8Dẕ3 Fi8&+,UϢ# zZNڄ'8&*+Ϸ D- Aj$G-,h4 YHʊOhsST1= d-+*Klu #P)7y'+lYԏe'@ofBPPghvaQ $M6]DEeo_ח?X늃N |`-0q;L`dVr^q+J殈-YyRmlT/Jů7) v@t[HudQ^ϩC8KhiRWWHeq~= 1E?HJd.ǵu*z!x{dGq8(YO{RN jE癥Py.=S.oDGȫ`T6_ 8Q[veL[,{)5{ח=u>IBh5&}-! ~B;H:_Ԋ175D[u5yeG1XOTɜog2';o*c뇐¨#]9K7[C+Z?TrM*YС^wH/3/Dr@e-YaQﹱ[Iy.^Uh OS>3;)IZofLg?:b0؍wͤ=IW$mge |X9t4g-%]$|u5$Au jIIε1Wⱱ5+:wQdrz]\ڪjޥ$ XY#hcSy F1{_'Q.[-^_[NkvQpl|sd{0@N'( M4'c/ݗl ĵq2_v{(`EOr# ;rZ.Ǘdje :54QaQ ج2,Bp{lTܗ 3-t;V9:S˴2;$sݮM-B+HWNKޝT)0?3OQY0sjOeX>z?*_A{~Ÿ.(5e ޣ27=X(‘"6lJTژKa5ͻXFG;Ż~ `X/ /-%* ma$DVʞQ TIbլ}Xަ-G7xI8Rz.T-b@䅊FTlX'c+n 3MVj(lUDl/;S 6f0%93gMAi5d+u>DLh.FzwnbKf_>u10cZ'askT9VrGlyp1_+%@ɴa$Axu"yhfXȓY/z\3,l\k,ARjXJS24ChWpP~Tqg)pi:TQbM6st5&~:WluK $/΃i<"^3tKCYu{%L|0)?T|v,ϼOWc>wo;2Ŧm4U4KrX' dfXy:|LȪ.u_"^G˧$9,j%wu[f(]4`F 4I֒o9s-7wW<֏GW XE!Dl /B7|NhlV<1:؄y+fS;tl~442z)5gGE-!Փ/l0H3V!O UVkM +Ė^ēal2VIiюn|V8F B(h9og<@R8&6mz؃}#Hs`w5WA,z )٭=#X3ه֋xObZ*LާŌ#P&r[D] ]?g,sh~Z/p˗bAʜkP*ƖvsKIN7SgFD=tlc= Ty8ՂT0#"VDƀi 3fH@ <V<fY gU*2:5̓z֬EB5j 2膉6rj(t_?qja8OܔAxYZ뒩r Gnk7~cU~ OOvx nHs:C# Dsv?I+/6QCi$$Lx/t )= JTClȭkA9 J؄0P4x<^ɣQNp֢O볣ξV5%w' Qp'ؾop՜D|9X܊_z$P0cBXg"9by2CMT1o] /·MT Ynǐ@sMƟZjUvhE˵uNmWktKS6fӥlw}':֧ʑxv20 N|K㫦g)#{.rX[Yp7t/n{e6=k|G(~^P*^9ŸO}]nG }i?^O_pN ۥbŢ^$_C*MFTw%8xʴSJi)Ym.'(ʳ}Q;QK.J?ޠqREކt[QjSصJiqb1 @` YKv6)ޡhBsWB1q$ NS _R7A1kMrDTpom3`֔F@#o}nm7Rz2>H 5.V0}e K Yp6ӑ|77kgr\_'׉~&Nsi+ Ѭ,Npt>@B Ux @ވ& #4\Pcc%l]&^SB0e [% n#MtuɀC&Q=艣٫naߍe`x$Pͺ;IK;@)_\G8<ӽmMOp76HU9'hrsB^f;AelpYDfDom@SFT!Hf1bT1 Mv a:?hiC!*O:!i9s3;$:Vyv!X\TbS̓PK;VT{6aX AeJlpAK aL~7*Zda SS݇]Ǖ[ĨVVK:勎hцl?fnۡD>ur0Iiź|U'q&6Raׁćm$V %<[i#t0HZj9hr7;~>BemNUq,ݝ).`%[e#;DA;`VgzAge,-P=N,NS#3uo󥄼AT4 CިKg{ J"da>+ M) cKhE˸:'WUGf_-wu>EBd{jeӐaF0 $e' Q)1(㪵)_=l.#Dެu񡿙gH:"mmTg-{IxdS|?5&gJ&IO-AkeU39y ( ^2td?:O8Je1_xZ걻5nz'fӨmiQ@eWByJ4Y*-EQfˏ$u'sA:jDLadr|.Аϟ%]HWD!1Mh=Nc5+P:VhNSt=kసGF}!jT'ЉSHhM)-Ff<^9omĜ0FwJ̈́ ? 7-*2G}F"poS^F38+f]mӓj}NKg d|P%}7#D[drUG Vڛfw2Y&EU Η2aK I(Ec@tCHxG=W(ľgnW-K[-pCLѻV+M@xfꏋ0q/Z΀pbGLcGN4{ jB{r_N,en~H ! D᧳$,Bo ?`o#_))ىK2{T3a8>nY!ݾ B,/%5yB^)qғ-Ň`IϸI?2Ϝo 1- +@QMQD y;jLةuW@d{6,#k}_ X޶[ƔSod&!c& 8YJ {2Pcm0ħep A*'eW,Uj5%T*]VM5? 28"?94'ת|~uikƂ7d]~c)?̳rg}Y%Q#-fp8n^iuAc3dM?ﾂ=9NBE&55vJލvIBW>kޏíEm-Xs n QsʭmՌv /pZ%|l$,MK7mt^vi)GJT%ac DME@27e0EЁCr܎rJy`J:E&~r}r.H 'Qr.?.h֌|x?&ifbQZuJccx t؊7Y m+! y3ZD-uapEb[~F*-;Je[%.y-`9MPB&:D ɀM[Mewhrc/| 9^X S,,^ɭ+7((g9q{#$麫VٛE46ȂzbgJt7K3148 6T  Nk+<>@TQ>YFghE^6YmA0u1f˰í<4'L/}.N =kzK7ӱZ;-ehW,C7@{kI2=YnmSL?oLKΦժsypAZٍ-NkGHZӷl̢1W'ŋKw|<176?\\6sG%j~WaY=n8%ʓ2‰l,]fos;_rfMq}S>dGҵKT4G}% 'yILcb"f,5X9 ~ݓ'LE686~g&E2)fೌކ*4'+a 4uR3,yE-Xu4X䂾tg L_4Lrȗ0!&#jr%4|S/w% (wN=At9/ ,}{fԢXy|B\jEHD'6;0qC1 z;z?UVVY29?wsg"u~W!,oLӨ oG59cpQi`$XqF[RScķr;yW zm\P)4nلUx[5@:8n1"8B/$(=U⴯A]^lKGRARvhLkoa cy6(yVJvAvb$^UPۣ"7CY鿣Е&Eq:j/ELx)Myanwћ{!dciZ/қ^u(`V*PS4H^1Ye~^Fu~ZZ&=(buBsQ1t!TSv^ڠ_aO㶕Wq[M49t6kw-Y$ & ]eqס4FOop'о]Dž jW ?zi84$hujӌď"m L#TVO %;Af<c3Pq0>h\ : srl^>}R[)=]iM2PR^-mq9٬^fm渟Eœ|*Hgǣzwr-$* jISJ&~ t{A4qSK%6KQ}GJP2)FL%_zߒ9 O#ЅU 榯>(iK9NʰN.r8rsd+J~m \&? h s !]%·wT׀vHZX7h୫q<.of0.+9H4 2d2P_g'D=k3lAJE]X-T%V{0bcBCP|Ds5R'ihLy< ydz]=Mde:"OfSRz ]U6M|vW^Re^VSoQJ!HY#nDA< %<$ O zC!~#me@BF~K( 1f^JO4ģ?\%H-3+*[L#$J'@>|'ME1~`#Uqc Zy1`D_fdS=qќ%ΐvZ T=y0 \fEϯad$b Lx鐌ҋX un^Sòӡ^Ttӹs5ՉIù*pM79A??Z_Z+IW惋Kmz)SOwdݳwbv.}JT~6&nX(Y[ۈ?ڕaߵRWH(b[B-7٪-G]t˔UQqZzji6p3zs<9o_E'HPm4/ӌڳQG:EoZkzޥ=m4zL'5Gf &q|l:g%cV~n:b]A`4L⒥!, ǹQ'B >Ѿ-ǀ1Ƭ ǭjJiSBվ +^ ۘ٬4Mʺ9b|nb(A&EeYzRF?qM>$`"VEo]̓uor6Mb8F4n0MUY6,ƄPNXܧNM y6 pQ\ E$ݑI 8fU9v }ߦ1XGeUFV"nXZsz=ݵ@3Vz3Ͳ{NE@3 t(/ h,<7G|/ӫbm@"?n@!PcU6)$q wQܛ_CI(:O(^D궉lN戏iT4>SycsxBt_m=l7 ;vI-oXMGh ']O7#{ډtXju1M92 N' >=0;ٱT׿sFK ޛ0 8!E<yHޚBHZ)$CLҒ^4Q:z`CpFݔ3c,2J-b)Eju2D;Tn@7zMrDy <2\`_*JT@Kj#*`({Z{@-2L*)E<`3`BΞJ{( !f^.x4 w\E>iӮ2l%Y G[ewںlt?٘l HǙ>ψ:jҼLG"XLOH0 :6J5QNJY?0HQ+6zX;#"%S ᝄB壱{wYS̀`ݨ j̺ՄH`n$T8G&Z]k wȘ> &SP' b Wu3*U6 ӻViW3Ѧ[z#/j8j0$ܞ^mUf5Ȣ苀Y5怗tL5@y5(hkc,_Vd)F1O++@9&㤘kđaU*9 ^ǃ [qyS,/젦e֑"HLoN=@MCPB?U7ń7#OL=IGێ5'_}k.Jd?6 )҇p ÙJgOYz5k{cځ^j} T%F񊒈J@kՑ\JYMkߓ{7uAh׶Y&cهEwhsn4]S{WC޵9;Kz/0rո蔐ԆFf^N9j\Hs#xl$6C]azЧ!J(v%Ff~mByqj{.3<+v@_"tq:NKO$wn1]z-3*6:[>*^?hwH@zQf`̲,{=|f ˎy?祽8Al\R"r*_w*j=Hs˵h9]wFI>Pڛt(Sy&jL@){ _if:AP7vF8CLwN achD鐂Tc9lr1˧'tϕ,,2snߍsZ # xHGsV]h$,FE r,P-|eIױLQ/aF8qG{V|@"#5d߽T]UjO\wva-"n[eп6D)`$U`PM.NtW+~366 rj[t B|X̲K U -lڕ9hnB!:,=Z|RߕVȮT ׵TQV(4!+QNnP#j}iŁьwgZ\?~2e}oxRaDRZqT}.R9 7[4C{/VW^cqlZx0ObL=xfߎdi#)K6iBvl-&BgDІ 8^ A~IuSq~@Y*R*NkS*oeSA΃',Ok'$>tjXneF>* \f"V:d]JTۣ!{RBRnPkxlbsO{.r [q Ci}9I^unhT54Cmj m^-.7U칛WZ[G=:13r7!7ub-ʃ7neBXATiWWi$><P8pD꿸 Z떝.@Wz ~rkڵy9?J ̍NCx,B)+qI`gڦo$#VgTYD8R16h%RP#,Y'A-|r!mQRne]vƑՔCJ`ΞÞHֆ &Df㵵ۇ]55PMEߟLvj.D -=ַf^d4TQErg'C_6G΄"C  5%Wܑ(ᓈ"bvt« g uoAe69.^kꉅiAp~7vJAV笗1]1G?rwk|.6A}"Sg} s?h!H5*-"!eKm@{H ijd5|Oj`)j cd Ao3iu,͐41bű5NsC;JSa$eG6OǞ I`mg8C)W}?P$MH£RaV7Oq@ D1 V0!!0zC54{EY[z&I7re<`s J3l5kAK&pOFkTL;竦7WA`(Ů/\o ϋR~d٩?66v97Vstj3lSXEEJ_KBTtL΢o*/Ls/ZV76 (E3c[8cqY!T\W} f~8* e+4+%Il0\8cpBdjOGWMk+DikEGg9j{`ܢkߋ*< J;vXvpڨvm5N/j/L՟7[t3Q0x+}_nM#OO36Do2Tb+~O֪⟏ǚ@#NDeV۪J8ʡxZE(d; Oɮ6gCPݺ&tl+ Ѣ[d@X[nو\8l>?4 5dq7l+ucP\3ݴkH:naTXI-).@zaQVEEMᜣ49ѽs%ffM"!RbVg#wغ~DA1aXf/9 Ohܼ"7(\K|;S0X%͒|IfΨ읧y^?jF@ ,znޑ0SգXRuj%ݙr횼6?HC13 |/;? sQ@s@h|pIBQ#"`iNS G N]i %ޔ؎F=Ɣ]z" ěc0|:AS,Q** {+{G x 5B tL=XSt*R}ܼO;M=Dx+L<5 Se}^4nÉw 5wblҟL]7F-^TIV}hh'U}ưF`JW7я cvrkZ4LIq*쇖<`R8v+$hʕRDK((h~̺VsSKKmIfG*d |)C?/ _s v0 K>8sp08Ąۚ9u%IY ju'|+XtXIP0ǵ]E;NH?-l0$2 jfśCY{!^l@ =&HAv`rϏ;e_ĤJF{ism֓P%vXj?*k;ʠ^eN:F+wWG?$\”Sa+_3tx%cPJ z%QGyuس`ݐ9Vͣ32e%}"9+ &q f!` ^rhI=;وe+uRL0ţC:0wҲt/%~wUh/FF_ނxËlΟPQWџkvl $Չe9a-Y Dɧ((U )dKN+G !/ݩt[:_S i<F‘tbf͎DwmB+`s01*%5 ݇W4qv3qBqˑ҆MO3CFHxvdƖۇ>RӁe{F~ 4ԦLqg/E9irDS*!.6=*F;FEƜzQpm)t CRɍ_m!AOm%dw!ħ^8ȶuڸKr7`T6y 0pum -6R]Z]̓Wэ!(=ng鰪S)Wqɠ ̅ 93AJS1^ƸrgT7=:Bo|׿oM KsSle9nО3;eojF2V@uQl&X^䒸3B<46 nPʭeSl;=%V'SSvBL/l2g;iIA<rYfGI$en+Jh+) 5M-e-c^i2G{31߰Od_2ѷ_#nAzoWp)wc7y}'nES`-I~Aߏ7#f*6Sڜ4Cze?uZXDusd$Km^P¬Qa* Y'tρX&xuĤ=i2l'X()|h碻wGw#=+R\٦E`!4+0"ӯÏ>+qTL䞢ҫć(*Pel{ꡬD08 #G <虳8<~)yJ,6Ԍz}s77K>f/MNG8@Q%Oz ^(g%U9I,daD&۽[XP}jr@UQ]i=/8qG` /q^p'm)kq`7&dj^w4+T! K^g +?f wf\Jp-ŀm _'7 +_u,"k,8~קc hqWޯm2ksEndM'AY(lI!\fM5:u*t͟{z 1 r'-}%32fq! iMR𸎼`oD0Ȱ* ݶս.Ϋ%̐T;(2ZMrIX7D.b\MN]a\ ڝd][tAżǣ,X/1ZgkF^^`1R $x>0M>VԄp/pZN4K!T)`$iwA@Բi4m/j!,|YEܣ 37v\ R %yggSm8$-[=K.j-^Q}tXqӳeLq@.+`Y7xFbQ' y& c+ށ|p&y؅~y0#PVLkt"Wza(ɘ+4zd@Ta_ӜJ5' v]o @U/jR Z;"#\~鯘v"n#>n,tb"``b9kMhzdF#(8USlc4 U2KT]$y5S%xs|&^ds43&lpL؝ά*X(%tHܹ,_Eϊ:g2aVܖNnN\":[z, XE{À[%4shR(1BwQܽj⿅JG_2lBr?C]aG^G^3D!=G%{e1},Avȋ~;ʝ<BZpdmb5$*LS]@&fTZrTi(krV1|bÜئVp9lH 3{'Kp"ބ˭aerq`)D_vD$:qYětyG"1([ :LKKLsvqMqki+, 9>CZr},w P1 xb;Gjpjtf k^ӈ{s.H1%MB<;fk39'WD2ɘ200*?ӧ2!w*g>Tlݮ(dmPx.|1T+bEx>LoGS-8/s'AfbŝYvzdjzs 鐷;σN}eS*-uܳdEoSO%$M j ǥv-|׌uNmF`dҥp -yn+i 즀}}U[}plel }- PMg5#J22j6A%&ZRO=Sa#c}6_m_nR+$3D+ 7'˥0 H%x-,8pGKDʬdInwh2?C"2cXdwh$M.o84/m^kgjA uQty}@(j&?VEʛ3LrP5˓"mUۛ(-v-Z2.|c |ijQT$<&%S4*dO+09=7[xg#Xx$NMzYc2BJSjQ[Zq0_I5l" rixdk-L)&8@ ¦Hcſuyo(9]L8mhedm/,0o]Э焔Fd3Xue- [|O~$Y1Jl6*5ćm(\19L_ZqQǁPI^"zd7.\րLM%drotlUҾ_*D`4K4VT/.UAgdx2LOÖ`5'5_RNe(0fA*3}7 ROG܉AaTz,>\sy኱W(C^c$k1'z3)mAX692$Q _pXmv)%JPOȪ=gRi\QJ=}4ۗ3a4h92n<ꄜkqYFc~]%L&C Qu >XXA14t^a,Z*lPqyjOe 6;|%|䢍]KJ;?|@8ǑŀfVbHp-b9a)+9VUwQ֬COIL>5rND ZYRpekb7h3d\2XmQ0b8-O]O䮘q'Pc9]?'\o 8c7&{;IH]0~#h1ZB >r6;?N00Pn7h[̻{ڙOԬ~8ȓ/ӂ%.1OA'w3ԅOa%b.wtqp(mv-P/]wq^VOzZ!-SŐ\Ƹ>?e5uc,0R ICA TJla J4Ηe@n[Yp&؛P=($X*#VuNKyzv[E_ 8'|!g^?0