nscd-2.31-150300.41.1 >  A cp9|ā=*_coH5MfX\r\?k9_M(PQ@XiݣF͛؉KKcP2ٹ@"8ȡנoD*O E/dd &|ߣʆ2C5?e`24O[hY/dq]+ŒGTz89R)ΫGP\(2̓@Q/`>*Cَ9AUw247fee019cf9ae3c6063afb89a407d68f5077d9c37ccca85143fc1c5c848544c0a1b3457877be635724e30429096066e0aa4adb6cp9|hbGy 8]mKh˝w<{bk$ƽ\ST,TTHpȪpI-!jiJZmU|(֐C #>wbχzV^s{-Unpt ݵVIz+'| ,O3Y ѰGfrjsO?cAojˆI1KLIku+I=HMpIވ?xd   4  KQY& H E    H W tFh<(68@9x:=p>x?Հ@ՈBՐFՖGհHI(X8YHZ|[ր\ֈ]^; b׮cWdefluv0 w|xݸy z(,2tCnscd2.31150300.41.1Name Service Caching DaemonNscd caches name service lookups and can dramatically improve performance with NIS, NIS+, and LDAP.cibs-centriq-6SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.gnu.org/software/libc/libc.htmllinuxaarch64getent group nscd >/dev/null || /usr/sbin/groupadd -r nscd getent passwd nscd >/dev/null || /usr/sbin/useradd -r -g nscd -c "User for nscd" -s /sbin/nologin -d /run/nscd nscd if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in nscd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in nscd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/nscd.conf || : # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl && /usr/bin/systemctl stop nscd.socket 2>/dev/null || : test -x /usr/bin/systemctl && /usr/bin/systemctl disable nscd.socket 2>/dev/null || : # Hard removal in case the above did not work rm -f /etc/systemd/system/sockets.target.wants/nscd.socket exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nscd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nscd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nscd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nscd.service ) || : fi fi exit 0  A큤A큤A큀c:c:ccc:c:c:cAc:c:ccccce2cdfafd373d24fab07018d0e95dd49510ea6c992b7be2b0611ab23bbc2750b579fe74962fbce2fa9b2a4b92f693b2fd42cbc2ed331fae268de7104879a72df879c9cec5dd2414dcb76d11e75903aa6fd9b7785c897cb9f853edcb140a71b779b91194ddb94bb57df8a5536abbd175369d2b0252830ec7fe76e9cd30b078a172/sbin/service@YYYYYYYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.31-150300.41.1.src.rpmconfig(nscd)glibc:/usr/sbin/nscdnscdnscd(aarch-64) @@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(nscd)glibcld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcap.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemd2.31-150300.41.12.313.0.4-14.6.0-14.0-15.2-14.14.3cob@b@b֜b@bb no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/bin/sh/bin/sh/bin/sh/bin/shunscdibs-centriq-6 1661868978 2.31-150300.41.12.31-150300.41.12.31-150300.41.1 0.48nscd.confnscdnscd.pidsocketnscd.servicetmpfiles.dnscd.confnscdrcnscdnscdgrouphostsnetgrouppasswdservices/etc//run//run/nscd//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//var/lib//var/lib/nscd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25649/SUSE_SLE-15-SP3_Update/fcd4b0bf729735b39ab035c69e29455b-glibc.SUSE_SLE-15-SP3_Updatecpioxz5aarch64-suse-linux ASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.aarch64/run/nscd/nscd.pid' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.aarch64/run/nscd/socket' (No such file or directory)ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=72dab77d71495f36272a4ad1512f895e08c82831, for GNU/Linux 3.7.0, strippedcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.aarch64/var/lib/nscd/group' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.aarch64/var/lib/nscd/hosts' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.aarch64/var/lib/nscd/netgroup' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.aarch64/var/lib/nscd/passwd' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.aarch64/var/lib/nscd/services' (No such file or directory) RR R R RRR R R*ɜH=\ʓSutf-8ba8f70046e3d33b88d74aa07b4dc279e0282916d889e37172f6a3aca0dc32663?p7zXZ !t/!&] crv(vX0,֟<=z4 :UY}˻Kz^u(-.iYc 8w ֠)]X~^ޠ]TO_v; [NK+-UD UCs/ xe t "|s@PWi[`MabV-SAN֟T&Z+@얨~OY}/ BlD?RJHC_BoЂ{y$化m 1APSb XN @I*Pg5h,xg 4M]på ds̲rx51Z!R2ARdv꫞e |omgKQZ4" a?&CUw釗/Ņ\P}]C4 u>5AިUq0v;!S@ LUd/_Z;w-AJO!d2D_oEܵ0ކz1&',VهJO=װb=ITpa;`# G+&~E <`?x=r?;MDp|=F~uquLIuY)m ?$ U b|'N PjXp܄"!è@cJ>q ’'ƺٔ:C5j,w0z_SAnf c(<l-4*!HWrn$cxd%_1f-`"@Xg}50G qP0!D䡏o`_Ig.=C7)&bkrtQ5jhB. 7b-ޢ{#b E@ʬ*͍h]zԟPY1ީ @xjY14D<7u WWqHeg P["2)`Pފ>f>D]%+y޹TrzevvzjI4c^L S]9w5pբ\O*yUi,:g!Aó+j2HF̽Rѥ$,ovV@G ʼn8*36桲2:<pj Y ZZ$51w+2ٱk$u}iN?ƽ-Q!]׵D`cQ{飽Xf41F.FBӶ -7U|ӂ͘`_ ?p ɨMS7ΒӚD|mLK[ޒr92oKŷLRR+R[.  =\$Q\MSWm.>1k+\9eqǀvC]K^ve^ȓ̮KSHrI-ZQݿIQлJp696)r* :~DD\?"'RB Đh5r4G̴Њo72ϗv<" WT@w]-Ď-֟do49cWI0|`GRd*&~7<5 \ie&i,[[C>Ԝ,jc  ^~qi(XK]/&vN_`1;܉1!I|LͿ2Ԭ4un2o ?fEn&jmE,9l[*aZ-Q):J2Dž`#t/xH[tTESߟ8'Nf$0 3er:&`xEM.{nk#}Uԓ@H߳U)h\ 2{Qa_!7婒G5QtuRz~8Xw=";꽘4'EC̊WNFdPFE.#R  vGFYE&CJQ^S$ %.ppI})M S墖IsGa%' B \ؤ>cA 1vSt[Lߑ8ˇk˒$evjtbIxާֳH./ʳAmhWr>+Mt""b=z0*|\dl=8s L qؼ4 W%0Pqg6t*gaC ]LAp ل w L)jճyko;0|v|I;yEsfMCW '@<͌Ap:/mK;8<4#W (e'Wo)&X X_#X3ٍAz!]4Z #u/c~t/)rf[vT<Ǜ)VXcq_1E .Qhr{1,xE8vw4oXI(ch=:NץPrc}7]Zoyhr|nT%c{E E,)s}5& ;U]bv@LKձf(4yJ3"{ΞOͧXl+gz>Ha;T Gl\*{-6F0t.$;)Q+P, *N).=cne&4/fžQh׍.A=zHrm0֤4?J8](2,_.M^Z :~QPz_sf !!Dg%Q`F'Xs8Zٞe[oNR6ꨛeHS}D{|]$}BӴ;cLmuJBVJzma%*SbsI$Q3-[=wI0.{jt/1"DFNɏہȘMM UL|s[0GVG X sŴ08JiUXyVq !]Kӂ3p:lԮNf㵖3b W5`bf oqO:osfj{gXJ :=5&>ޮzᘒ4D>}\RoH513!] 06t#XuT˯K >ی ʮYIhCkpTO7Ӳb#1{gdeuQu?]'E枑.0P7"O XwY8t%}r}=J;ġ+Fpm wv)}gݜ]ZJtÌ J{K{oEEvœQ7m$U}!">RTCdnp.}ց,|_ .C~1<9h(LY1ĔO%>=V֊^.ЬW;RR"W}%J.pVʄj9wgh/˽3ݮ/@zPƲ8"h́ !PwI~Ve 4 f{ӅnU7EZ: :a);HCP^ A4. ntZ&F|в`?Ʉޒ:$O#7lxψQn٭E]K)H n ֈP5&zmX C΅ yz /p٪雐ÀaUw;ԍW!NuWՓz5ۤ %QֹcM;P֧>q计 }IiUD,vMѡ]6FD 4fxĭGmRy^ڑ,ЌV AU7dweZԬˍ{`*nU^HYgiJd]AALHh}.7v[kWQIi^mX]Doj8x/4~M3"Ҋ*)aS:I!bh#MV\v#lP`Ϗ6bw<,+)xbԕ*]@bY _%c'ewg}8 Kȟ6`߇sO6"+ ]^όUϕw7 0JƘ<IY4a[{*P]>*v89DYZM]3[z]y_ l*@)*% lqT(5p#A%'"T9' ~֓*i#h&ڽRB`K}An {uhv:`ͬ8U͍'nމzHT "R(4²u}j% 1V>7ܣ>! -QbËAzsO1HU=*ThEV?톇Syq2t+llC^]UeOz2JMo$w09IsT@f u_5f Sgຠ} .b~=!e48%3hRNȹ|vE6^?dǮ7ܜqU>4sA:57|?QТFsMX 2,#3CLzG5z56)w7sH[5kAM;q׻{Y{)Hjurӥ³K< i9UgX}i uYsWaI04|!@ gſID,yTe7ځ z%A*$a; tPv9%I&q=tnU3௽!LCNE[-c6k!GYBH҈#}VrU~5If,w k'(|hyTi>v`c`/ҝٸ@Ɍ\82κ,scO_@W9gMT$Њ]D`=z}?D0z]M=( F5=ce]iw%użhvJô93= ޺'qx'hr 7*Qi@o|#w(%33c@ӻPX e!l: ![GcT|Ŧ ;^36IYŘ)GYRA.j#DW+mdb|P_1ƭѪFRar=O9g9GE@H]=oTtʒ01"u4j!{nDW4HD#G%\c@2(abJh2F4a}PK lE_SlP_"*Ѝ ' 9JG)Օ7v#v94^S>b)?N &=hvږ UZl"ՀY_#~v9B\CeYg2!(ȝdZTx' ?l OTN Vɱۇ!9FbZkMۗ ;kޞ8p{e.X`йXȲSJu]|`bMYrT|Tn-j"@0atW-׏)$giw3e7VSgfi{ k=RAd(7Jw5阗3zWtpfr( ሢc+Tzשb}yκS w˴7͞)q-ޞvˁcb"luV}^F~U*:b_;I1}j2JV).[[&IdY@P$х:vf<0K;rC=ܫiGJԢS|d^C@=rg3y Ig {ϽZ4J@" lHD8+kk*CIS 5;qD03T8.;+ oPy0G|1k#G X B<--J)=RΑ6^.c7RaҮ-Ն?+`9 wP<]PdKyjoPW9ra{b敇d~2&hzIiQc5l7J S9G0> ]`N4Y ,U7Kj+}&PטEzo]4CV$y# nѥ^;?V,lXɷ@]h ѧ{҄Z16! 6/SIŰj]%ud U^6?20<6tDGQH DRY5CA,'+/m0fMEGEXq톩>_\**[h@d_®g nP· qs+j&[Hn p$ 8edLV֒+{/ ?&*8-h?K5lHi~0Wa+0X25zVF> KVC2̭ïvLخOTRVx9{//j3ɾ U5I pzi [jN\캾( y\gws bvltA9d|\G *&8+M0)C[kB@KKBmw*=]ː|]I+lMDw+>{tjnmɊ,|a%=R-=/ y,MjcuN{W_ClBpyQvPhM7C.lJKb{&Z+Ǥ`P_5$/6hՕogZ2#d?.vi|R}Y遇$;Zygp 7>vd0c5Kie>?6Eqse@ ks1DLՇ51b>m.܂"АG9dMH(*ȖәIqٜVd=hd̴@+7qD  Z mkš{ _ K&;f&5G*1u3Fju$c333UAci 0O͠?sbA@&&[k,ɀ#h#u7%C^_~QNm\AORЗ7k6XqJ]^@WΘ c\8d;2Iu2KRWea;ޟl mF)RI{HIr,Ü:ۃm֏gWU"KlC֌&ޗjkWBrӼ҇*kmvyW\u)+ RzIW\ >i@/v!6LH Z( /"ߌ!Ҿ-R/*#絖`F1Ak\O;):4DB%CH [W&Acyx)6t@}(aLCeܓ7 ,N?#ȳYԺ QHtȢR( a>_"MM/1'3p8Սo[_⴨q7{{Wvf@aZVvzMHTO&N@!ѤG2A庌(m\2"^>+Ѭ12k qG E |SRI.{vlw[{&1|pQYaкH޹["a04[~Ԛ0()?'ʂ+`^8Oy ÛH p>,S'G.M,gb'.8w9:D `;X"ra~ٺGO7cm@A۞SH1N-O|5F!,b.\}^¼y ,b*P~B  ٞ zrcMbʦit"Ș"^nTO3Yur%ɵJ ѻ!tXI>i_#ľrm:2_9V.䘦GYc`x#}[ \] Z&8?:.zE7H=~GPXXlKQ1pH2+oit&R7rvF%[kk}Nٺ|1&i՘rU0cP8r~LOJ#axH0gWcxLk4-&P谣o&eQ,Qj"Vwn}B#'AL'6PdMDzg83#<~٤zSlEXa;k)P w28#$bJq)w.b]8G !ӬFij[6Zv0Y2  ghh$_Pk?8N;ԼVqGRiʃpI`Onz,J|C1-M81|ϲ I7'PeLNKay4oqbS*R;< C?L3wAH5[nA*p`솄kǷlY}ۭgyPBS @ ϓ葟kZxz8%8o3SygSԞiO|`9H%fm8v62(x3ey#0IHWYпb2O8{+/o"5C(r{df2y鋰?!w:-!O=qt]m;p[ $ϵ7Դ4#X}dҞ:4\=g 8H:jOYK-.RրQM柘1Ptk8r_>";,p)7&䩺y+w%DB?FؑlD6nS:}47pf!E@SpF8X wgo/2>.'A,~[^\o8ps⻧2\OJ߻Jû?@H4*(.%϶̨=kS6,h(7|%dh? ߴmh+!QAg4Fm}qMN]u#kƬ.tS?:LфPhЩccjc8YAY^2OofXj0I{78Ԇ ,;{~CKnµuxo_"l̇ݝch `_!nȳf><vs3) n#;H1:젯 Af=a.z7NM\ױ7Aٝ__zHe6,F$@SvGUV0{EijoV F7uI/!{^ A TzrA)m]Rl #Dޕl¯UbSF B!%bz\6H>,}73,ZFgDJt rσ{(d'|YʽpqiԊYV3t[Og 8U˻\4-]ʦ^ViXz㇘Ok$ gP]j  7 #fFodrn ߜѬ|dV)oB\W|ѷ#TLjnR E8 K 5`e4CRf!=PWdL梠).*+5C)[/$ 9k6f{ܸf<`]4]َ?H.Gkc2aF䥯p Y,@?}8H}:B۵2=[VR)[k !lAC"MÆp4Ǔ i5XCPt:p*o'z 5 n -:E9Tjҗ0SH5YEx Tɠ,k=CE(tӐI>!FPj{Fo<*SGq# Es*Yǃ??8 gvb4)3鲁3߃_*k󛕺sf@L,P?~q@)KAqq0Ӏqg|UTġEef+5deWU"H' D KZ`/8 $q5I~گ~]>ک(|ݤnN[$0#hV!,A8 Fy :abDh;!/KnMkVkǓ4Oa7'vCxs`ai-292U^_2[ 2 nṞs`[WƊrļف{kO MTi6.$'Uv~me'4-y, {)l4n!cʒʮ9!Q]w#iuT(G\*Ν^v_XY=7Svl}u9 ʕ{[B.:>M)AW04\Mwjdv 󕽺j3Gh0/h3C83, ZT/W9 `%F?'"bN1~@ΚאHyÿ I_8!NA/9H9Rݡv "IWF=IIX0Kxqd3)a@k;6A<F޳}o]gyZ6Fli;Ǒḥ6-\hϧs;,cfÍSg}" I1#PY] 46wD;%lU$nE" lj*o=B$'uf>ܢ4h`m_h˄Er\T%FZZm"[]m y餈-@~^*<Ɣ)AY/yXYZ'Z"aFyڦ#6A!ZTcpӜV9ajݔ diAiXx#M'扆Ms@0,6_,4k(0ږ)Ld<͹8!ŕ5ס1mnA̗mtJ$4ŇFqq10KGKjX"O*p{D+ цWDmF/[;وK}57ꋱ1y|=E/qm C}eX۠qd.yrhq IC J6#XK.MUCO9 J|_9x": _ <4}K}f#A;\C-=(3H\T:[j;GKK}۱Emnj̟^{s>m3"M-%UuIuH(1ѤAi4RW?Ke4yAav0iYį!oTi h$Gdn^MQgE!bfVx%ClnuY}Fm ;^! <.7v}_FCWD֟3blp/|u_A{p^]0>y!8Z"k1{t|t>amCcHŒR/C;dpʧoq5%&t~Fj=~=QίN|+ A /d`2C|.Pfā%J?tN: .Mz }-]SyfH,e_$VNp!^+خZCXg_V!"~79gxR ~ G;i%h" \i|-#A8|8|sH3mU\[oO_ GOf8 EmYO!Oy[3_>/HA4 UG[JGq;eLz>Y(L}FPb8|f/|S0&iF ܑqHcwǪf1~?«]9@6Z'c )"~vi[QBhHޔ4k9B)\\J} }o⤺NTt}9t{PA]ǻIʜ2|\,UoIQLS%^\ ai=+GEu^H.uUw.{n#P^s9QB^_[LLAgJ~,9q&V11D5T*XK?-sdaqɪۻprJY>j2 {F&fpd@:ltCD퐮ߗl,Muak|:-/uM}rE蝇ikH-;srGMMswa8cXPimqyz%l1&7&A{M6aXld @aT砚 #9r9#jlbXO=)͂Tx)z7zh0TGQGHU0ht &@m`pJYEx; $trS?\#ܐBQ+&1 ]wczS~' =LpqO%eUGJ6xi+;!!5ŕYR{whhc| vEz^$^9\xZ95;bUNm@U_$w~Z lk}?JŻ`7l}Z;/9Օ\LC&b8{:j9$ W=%OGg N@wqEp])yR'ۍJq.*3tEl]kDXRiOvD:Q9~hW)a*vw^P4_n4nLQ&jlȲWVWIqg6E8j_LS1@䃅cgX!%/Y][ {zWE_ f֎iJ؀)3[o.%O1Vf![㩷*ޮqv<#ٌҶ xѼD8LZ*O" s{yfT 3R$;%bggPZB1 0ȱ·XCDͤ^^l9wvl5^T$!π8a?_ܬsA`*);jMСy :UߔQX%߫hu!l_7QW^ϲm]m*5zsI/]{L0btDkvqx_*k䔫v`Y*)Dz8kL%Ľd&9"# {4F Bۆc1eP l(I'JxVkZ ꫖|i'E0q%eLR6ǛϠL+qh<<˅OEbhnK%̍Tgizy1QOM~sq+%>,@3>xaƼ˺D~΍xVά1+1T| ^f܊6dfJYŧL՟&ce:/$:ç"t751 2 x:XKQV s+:fY=gC %\0YE ޾8@_𣶆u}IX@gh.5Տ2 >ߜK9"vzMJuJCYJkMqzqۜQ5?_sPxPZS!Qi\%<™HT$"L~ |9 țQU+D@T4/ YKwV!`",1J9MW Wң ]=efIjM6n^?+%Yt VBgZ4Wɢe)l(prHc]V-1Psñ3f4'QS 0V!j.g=ikx/ff<2LT%”*Z!9odEXa<Ѳp4fֲt&:Ob1FC}ؚj5n(%Ql7mB;v.mӏeCX1AFgaT4yUg4DBcP5+-mёj6-4Ԙ8 fΐ=}gmw&k p-C(Od{jZz;<)-e-۵qQc}M[t#x1%SWoWq (HJ ]_/oֹt͠_`d""&\Էr_E'nO%[/+X)6/ϝa>quS7!sYrӈ ০ @N0"J4Z,+ٝ\g` q<KiD6~n#yDv僆Df((\72_t JH'̟Mֽ hkjhsW.r)U V$/)=Pm]NCM~/ ^!bY8B"3M[O{)FtF#4ƀ+гKwo_?cP~+Dm_teyK`7MS ;>^lWnLraY'`]N:V$ABsUR᱕ZBiJpjkjwQ7wC|kus z~.d㨨4 ?2ePA#=]Ң q#F;l>+Fzݷ5DBg&#q兩Ł0"bJAh͹:Q&l9/}ϧh %{vQE ͸ ~Q |={B٪G:%ҡ׼`!k&͠IB8ː[>dt$n IvX-W nb6n[RVZ&0 @jx[rfղ">/qDMsoJ2Ҕfe՞88s`*^C ?noxSMoƒLqMEy9xr?/q,]9EXJ9Gyoǝ|oܦ J.W_l@ Ԣ-k&C{QШڤ7@I-Ӥ/^*l*c'\0Ea5=Ò󌉔>}=2r$dt)졎UZR%}k+8'x9˳O;j }Z`b[n :(4%p>TBytNER_I w`tj\HƔ G}1#i9 vEєS0&and7ͩR '8 7٪S8e V}7&}$)ڜ\ Q{/Wbz&x9:k13,DD| \[;+db_OI2J>Yrkk߈wR!<^,!v8 A BUm;dN!V]<B}o;[/@3"σJӉ s'+۠'!PןfXu#,Y Sm>[U HI!co|kB5ANO1i%.|c`< }GĔIʼn"[nT3`mv;3~WVuZQxЂӢ0ߚS拂%?P)2^# vde$ g0@Pod-ق=J/@?gc|&aU7%?+Tڑ7a\pσ+a'B5f1a **̽{[ T> ?U*{IEȍIŨxZAzEId铩*cSqut)6*r> O3b@)uHoL( wKK)Lksݰw m!*cc \bW]jo:Ԑ!S>n$aIzI 8}YVϟ4ӹӍ&]ll>:SIsWCC8rmO G{99`m.^uй2㧳J<7JEM?ZNP .2mU0*PQ $ݓS=J[b;.eUoF5OtypCjm:fMfQ ͽyP9՞54..qvh #l6^,D! VNtCl'x}%X(WFE+=$rwOJuVLHq]o @P_z® q?@I=믒q߉=>0sPb>qwE:T]F<91 BҘGfIR!fHma׸}yb*qT]Ht쭮qfr;FXs%48`W y6o~#j냐sdz6Pz{gɈrX,O/l:uK =e{>DT8 ˥PJ;TW?QY4 2"Ƞ|njgd8 ɯW@/ӐX*RɯJUDg=\9Gg~*}JKsVe"Puo8_:Th9I~FamOHkv\hɹ ]km 5`ukĿ° q `T_Kkُ~t^Bw$Z Hg I@(GekЎVhϏ}~w1KalK6-SGdo37L1K'$aZa@Q=7C zzCX#ALOT^zi&j;jeP8RCDbokF_֕.GL3 UZE@`,:&w؊+EA s{)0:Yݕt*?+wjzG'*9 Ű@3{Da^+?|PyVCAժYpgSF*U\j&q24B@uʅz(!=uwCfQhޟ iJ/^ u DpbY& ',3_v[S~Վt_Qh*q!ԥߛ&I}{x)RMtep}OVoJHI W{KGO4X>rZLBX!픢 ]mv T(v Ѱ $Oo' 'IHPB٬E.޿+Ӕ2X2t2fly.}kfZ=biaq&|@n١[DʍRLǦM@.Y0ctzō 5)V2< :^ %=aOtUH~u$7m(R=_PTsY;:=ڤ7 ==*jbÐRDp| lk:F,>4-9TmOϓ^yhJ"`:&K[V@u!A}.Ns}/A914MĊ4^R{:qIb0ZmAbXISV8a۳sᦔ&9si8Pu$/m!4]*l15TCai.xqFaACm-AqVhz-_r5^桵&i>-*}yxXs6j2-L >o/</ЇMRr Wkޱ0?fKw]w-`?(?|C?Hb9+ wdND6epwS)2~`` ]v!n<oZǬ7Eg «򨢶ġh K)ha5tJՓt 5.9Yd=dafg]V* mrpwq:+?Y҂U|!!]K1a)*VKbC:I׸ "TB{uD87g7E/j\5? &d-hbTZǮ!רJcHOA7\r'ԋ2=@_`AW' WA+D!I`Kl:0zqp m"F6@ulQu *=S:x`|4J#5P$/S4 ؇S-McVKTF,IL BIu,Pjd=DεƷs_ P_-?k[Pebu\frAOO-ʭ*`SWи*! wgԡsY¡F,ѫHA}jݙ)Y4 MtloMA=)*[8L  ÖH,ȇ7C=@KN 5Fxly~.q4"b4{[a6JoEsޕ*?s*>Y/\ЪTr59*weI'+eQ (n -Y'"rL8[]ЕY$hdLTՌ|c ApfROC`|.vxp tF,εr>7z!r&c>pWSTr/Ħӡ50`QhV@HX?NZ$.f>7^@9}߫d~רWٚqŹǶ\cWD)z7sCށrkM*B]g|!.+ ѱ]4nމ4<;틈y1GF!ozF3ź\S# ?IDâ$֪,PP.BSDSA|! ꃌM;I uCRV=Þ"bW:jxIҩ0yv܅FkW7X~8iortf|YBI"??HHO̴>Ld=7*w‘Fa puƌ[H~Cl>tXgcƘm̭zLTF&NӧBw> N- s@OZ5ʐ *\ʒ5G²'70U?< @ĵzgUCwzoL'٩0fpwSZk&4YcBx:1O(VCmuJW_)dYdR@Q ~6ٛxb8?ِDWҀ;@RHaF@g Keʌ0 LpE(GC9=PbHp8lt:X婡@|3o}JOƜkZ Rt~V"`ǮVqYX40Y/U`-Ԛx.&!h;T+Uf.~lrT} ӽIƁ'Ys*}O[Yg5A\|(P2¢-y_j?k3\mRN[Ҵh$ݓt8J}} 'LQHmm(^=MqՙKIN`ܞ(W˘;tRo/JO er^\)m7 ]C Sh0b^}ܖ{u/+"adyOzf*bw.` WRnԓc/L;W{d5n y8,jZF,)r1;`k(P?LBX>u57Kk8!PDXsȡѐwe1htYd.)#*mW{9 d}1q^:(.JFf[qg?fٕ'GF@[p b 󗗲TńcFq͍Uxapr?>#s>HZrɇR0a 5з8Έ_ &@v7Ë[oFʺ9ͿDͩz(!xjM1|]uxLOr OhK9kv<]Mrފ#p}yӽ$,1yȗ h.Jv@;Xv9_r71W|S~^C49BdCDQK}x. QkavLVl2RŁ8N (ܳW8K$aH*y 6o C{ww>if~iB6xX _61BwiqTÆ$@zu\wV϶tC=I ՋK*c,3+N.7qʑ-0Xp{t.{cNT e v;tyTC󤳉7ᱱvThv:%1WY#{{a֋AMg!ǫ mqDu~ ɋT >;9hN$onFdya{_gjn:ԱLt ` /DpD+σa _RV¶aD8xN"L *IC:U%K,$ne"EO֔Uj;R7LQ#ԍ0CE.+HE0&񃫮{dD:TmVcy=@JX9Y9B-M}p{,Ns٭{,VuH}7gxYeyNPsZ'X))wyhHibe̜E`S5`/ œ/"_]s C8\]aD n)Α]tUk7̋#[(mFPmO bAD6.<!,dZqK0`v[(Z&kRBU#x+SJWf $yp["'wI"9-T{w^T-Eu#?n -_m Ζ|׹2#p SjD.w %M](veee.r&Cˑ4<)5JEG.޹ST7Rr hileY:>3M5T,Oź1Ip`6U0g.Yg3J6Nŏ*Mv G۵co4q<`*Z_:oE:ýku3hvLd#6 Ad|u#i @'Fځ*4**Ч|vr zj?ou6R =`L3Vi# ؍!PlM_,x޵gm!JryRʒ裗ՊEaط{pr6ұG3HRHk`9ϟO?tɽqSX e%"$KUAG7݉00St!tWg4vP%I}ְSG1I,J7߄ dMyIң|A'XQl^% a'R,(B7L\juAJsP `}3Ƈ5z@Owk2@*}}ձYJ uq^-h>8fC|0>Y<7`@аP7vYφwv/7vUiRrQ':rNX ht)!ǥ+K ӳn?6-+vL{` )TUu 2i6` {v{(hh`//vGZ*@x[$xoԿ/c{>pԽJ)\"-R\hfPEy{Q)jY-ȩ 8\C'_>ORL/xz?UGSиR·yc=}{oZe٢\mD5uZvi=1:^ @^H`?\=>:RPD,~45g1'g&r+_=_)x | "jbef5!-\ 0mUc uB(3=ˌ& +{SFzll\Ee@Eo _ӼiZa撏:h/ǗoSJE8*nlb.뾔gb2a׷zۯ6 ahQ||cVrpΞ!,R*njGOYہUrj9fRHϏ[znSTWuf@LmJל/fVw5_#pQ2+gmMq|?S@mHnʜFG>.*Dh5]@$܂Cl筋-JW݌}9 .DY_Hoۭt՘unT1=(u~Rm#W8MTW(t;aiKekЁe|*܏>ʔEv\}sp#22,= I/#o TjP+p7؃W B.IP1)xK$ qkÃ` Kҷ$$NebiW=z|Wfnq;i e5 izY z KX;qp*n8<TJ#'G!րB=%=䡬:sQ3~? ՄZJYvj|QK\犑FtGs dgZ />%n}w]'H%2Lc& J֤Jk B@[*<-gգˡՇ>[XF;yK(d@]3C9yÅnw\ !/-qmqԂf  ޫܸX_݇c&RT!m˕gM0ž,qY/lʙ+5ܑ\;܂j->mBRzfkߏHOd .aZ3ngb:0X5>;*rfW;B"b.zM|)RPo`( ʩp{%KrM.9\0=pw53Blxji[ΨUM飽6`y~};6ҽh0fA"qQXAb9Ǹ*#̋nOm8Z¹۾&>BQ}Vghs܉zQ.o[bA=a|$cQomwe/EXGl6&&[ʩЗRp#yUBf hl׉10e TDtr~ph'!\Vy QΏAf+~bh#{h QJW0<9҄_ݔ+3䯂GdOE)7Y Y*u}imXX"X >F˅(G|9~_ H,i}!#/w9v[F4Ko"SH{#t^(hC0xݯ g&:K%2ZC_YI,*A3C}OA hKy uyә3+ pxU4i$]Df-"S =WOG{ER s %ǖ@rWy$U̐"-# vbNgM#IkލL_LS7vz4 FiV.>#FDe+RlFjC,[gK=}NN@µܳ: Y1aj)+I,aTg84S5 F wOd1"X9js/P@Ft}1)*x?I(X]_UɔQ7MJedB 7̧}gbKq/كHs*x#V2銮=M.zZ?l|%ԃf ew}W_mb &aȷ C!K呹Gw 8O)-LIUg)+ ez*Mpo3.^7ξJآFI{L9E%>XɾWZJQ%6i Xnʹ h:gUK_epLgSw!/<"" \M t",]k${c#ccObbZIiVg# =pwP:4Ϫ ~k{$LUIqP3T')qgҕ6Q۲\ 9^7@w$%_3TΈيu+ާ2ւ vn;M.{*̓; n!~ IP'+qnKY6zEekk"yn.RF/eҭW8ؔĜM&Dyϧ+0v1O8|eg @Ř.ܻj9|?b ">J\kwhl僢20x% PM62~&upjcMBr$;僅# N^~9e~Z?1дs#MĽ2;fiIuN#w7mRhⰩnw5pH?<( E?$Hc |3mg+fQTRgm/$.>*'(xw׼,AF]} =}{0K$sbun6T-6FdfR^[@UngWjZqBC-u1U/`kO}*8/WҐNm6W'ury&0D] Z))+,&U: ]ɾw dE9a3^plcDut^ b3M]B孏/{L^aj[dXUO j>u(Fj2ڌx6L8ܵ`AYƣOˋ(XU]Wb؄]`mV=+ N·W2^gC=ƞN erZ|+XE"gԎ$yc[P9!UɥqؙKͅ6yVBP^s<2GdzPSf2]Pq7;ǘ3a2H)(>Gctݼdfhq&-2 f v6+- VǽC*άgkr?nImBwK_)6l^4-Qh;06OMqRErbz Q$^b&^97iU8ʝ7~^t5?% C J+V..⫎%uxD2T֐;`W(~-&gK®wlԛf$K0 ۣ~ʧz-s0 ' wLqbgCr%gqUӅO:7^L8=!R4^VFwA2-; Um%QH=\A}`,WǃOCaps FŻT/HzMn5ƺO^?.Mf߼B#WN,c 9Jފ6aw:g~1ɪb7lIܰb РF]c BvV14q#`R7vM  tJC;>^2D ]}fbu]Z6s,D g e^L~Xi۶gFnkaRlEaB#!d{z.IB' '^|=)LsCt'+ s8GY, wfL}P&ZMoZKX y " x!Q'_&c\4 ߰3)~)hyDY/ϙ ƍLy2 r]e3،,|$+y=g@CH!T 8:H!G*v3n$nnuYvhnGhO?Af: ^ZcRD}׺ zntO̜)fDm#TOW1cbtDr#;"}ws^{Xx9jtI8yn%pZ[)/fd>;2ǦO{ERfOEu}*谧:?y\ PaB3}z1M|^t*XvK1A<'[ eY4y*g4Q=Rţ.%%;cF i8;-뷖DjJ@T-H3 9.L(xrmjB_m@ /Ԏ~L2}}P#g] pHiTsJz+GKp:VP`JLL?SRujdbKؤ/_c3#2Y saLS+k֍r=tUDr=`B'~<~ܑ 2C D{Hp~;&MdW 'ave/u? Wo˃ziLx@kSNeOV^3կ> . Wfow(?z~fVp6 _l^+ךv4~a;1 V[?jְ?pװadUݸ[5Es~+/] p"LG6$Em˟66'*oPug8i06S;9i+Zl cNQ6ҥxN t[!^ȺxEVG9|S+MgV3]K~&L#]lanϲnmz򾗋gpi鄫-O]B~@&"am>9 +ZW8}ae/{&kRi_8J6GR$/ak p9/)5 C\ӫ +[XϜvʅ gSbY#njG\WQg 7i>yniKNPJLG,,SKW Ѿ6\CD5=vt9C=GI'H?k@=Q18Ġ^4Ҝ9}_S]${ ``̹%@~@{ UC@NSoR啱318& )LjhMmgX). JTs6P;ˌQ j=ǐ'[z+PV4HƸ!cJ]>] 5cs*Yq3g gUYmp8nV 4ՅOп0op德*I}MdAX! ^6^2#LӵFƔy[Yڟvoɜ-3ޤ.}=+.#bnN.ᏼ8r& G><0)} L2 i#A7$^%dVLoJMiQ=9ʍYħ4[0/1Jj;t"M\#*2Зo$#<Z2d|G.?<Ya2aX$o7$*ώِ9y#\ 0BhtZVLp OxV2W,$̍e}*ߙ@?zk~yJiz>E]-[ m/c u:+2/=\2.E 3 l7WbfR7|4qKmEۛ*xLr 00+E8G|y.9Y-LKLK0:'Rul#3uH;3֪ Q6߳ݥ?ax4mxZQtVp{4Ͼ-(ۥ0Ӊ|Q|LЦ+n:jkxn\.4o8,C!ZoĈqDu'yً8J[sN8>6̂ *aq>}l^ub #%2?9 򸄑SӃ"/SIt#ʾ+aB.+G "ۊX?{j|R_jᨒxfWdqd)5N:3}9/Y`Jf+r o &G#2r=KA&H]zwh$\Kܷ'V]-=~~Y\L/p$1cw~+s. k5=;Tk[#QTg0*KIio~t"FS ~U9kC͕aM޻VSdTQmp{}&|%|Lz"q ׭C +TgT8g5H_Jd)ه7TCtc@OpkՍUxW߁ଏn$6Gs^96Gk{JvU9)m%qim4X+/O.\iufZТC9CZ[10:0܎IER@ےc*duƽzd|0ގ.s57GOAx먵_Y'gԋ2ԫ7/͑nIW H0#-0bƛt9`1p<+[Q@}}B"Vxygx´sP>RY?3}ni"+$gOJ7vdy=i[2Op o?]X+W41|JH+heoCX婠x;a5kPM镟X5&6|R}F*]8 6(/T HƓfMG$_JWGWziL1hTE,764SƳ? PQa WB_`YyZ!4#]7voB^\ nώCq ph+f(i(s%\Y*yJ>vخo #目"C4di H0T ?k<Ñ7g ?Rj47ڔ.AP7y_@66z4jʆ$nu*Η[3\aG5"ƒe\^ ~WBY~>7QJR$rJǞLayFz@R1R U\ieVc'<@Ia-猎@ް fusv%pPoNDE\!H(.(dQezU 譯 PXt^t:~76=e֯Hnbv ?"`o/eY?㍅*'DؓZZ$K5Lk=ꤻ4&紦O#L ][Cw46fboh.'J3C;Ph/pۼ 5gO[(Iٔ 4LA'E,.n?:u{%6ҦXSն[~D '`PuoI;xCsք]k΀J)sf ߭$p9rU@9 3L=0ܖ٦0]BR?Zb rىlZOK)Ij~v3NZ7A:P-%/>$lvrQ-m{O'R08T`/. m`TpPI;yzW&" IDY_y|vfo+8/EmlJ^dH.Go\1^H1P> !=I 0|a0́'zbYDzv(p<&21ܣ/{kAFIP啻q{ `fD%058GR>jiC.~KDVM<|t xR9ӯA]b!=i I4{v-<ɥJ$e#97GE'l["%b6 ZbIe|* 8EKEN!8W-jWY1g$KML5 2?y=MJ50Uc@ya$+8D/T.5:kv>IE17:b\ r8cyi Ix׿<;KSfJpg+7HdCJSAԺ[凷hI3.Fe vp_q8W܏[nۉ|bflt]񑽳i!)?*3d{kϠGA.7}rf9% _ھm_X~`@KsfFάtK,2Ž:<ġݟ;yWxQMehM{sK]Iy4+AƂ?bl1U,%'/I"ixnI&36C@vfƇY. =|7k^?KZO@iI  Q 7~c&-WR  #\: xPCM$GC(oL>5u5D{5lYz ҹ9r3}VDP%;tK'H"_̴W~^ pY&FNX "m]V)2ҪZf9"0E&⿂ݶS!*.ʓ%V}}PZ`/Vc-ygeo5Be{D. B̊`K]f\V>k ;bx Y>yh1iA>`2Ni"[D\ w{l_QHA>2aMZfGqO|<=̉26UZcL~slڒ$JL`sYKHڈ;%ZRZ7hR-*@ +v,\E7Y ۰HBjL9l-SɱRּ/yUH3e􁫝a&>K$eMb^ڗ!HO[ Ec>6~Ea';ꄧo~[))@J1{X}vD?)ɦ%1}un, Ѐjfh vT:%{`x7E[eܾ H0v2njH,EuVp\X@O `Ք?޾eTmn 4|Q."/iDt8yCn69?qְʯ\~RjpLu"4e= @(_W:ަP.M*h 36:WVG`9nۿ3]8td1P5_(%/e >j@9CUjD%9 sNnw_ f\Cܠt79-wp4Wm-B#,=>U=YA2H\Cd\0ܜpn]#۲d1} ܤ~A.c >ˉ*fZqSf}ӞnоÆ\>>q[G>+b[Q>/ NSQ JA=`d^j&d*kum~ddpw*bb\/zE!$DRi;N3|щC4Z;w%LüӾcn(7Zl+> ro;IT8(aԥC⹯g񟞸4 6 FpƂ}D,"(8zT/u 8QC.X6 A&h?8h@ wZyUp:V_"؈\ooظI*a rDn.8D s  Gyǐk2.Ѣ{]Щ!h2̯rX>N|Ep+tb4E>?)0,%C?dž`b2tZ#=2[$S?wBTZAPvEc/ AQ;`tΔ6c Bnk3 ߋ}{)=# ctSHO3 hi,:xLɌ.1XxԵ jicqg*BSZ]W<<!M!2˳CI3I$cӗHsVnݗkG\ZTh24Α #{@g-a흏"r^=, \k93㤎O a<  @1x'h/~i:.eNXZH;-, %b:Ke+>׺NisHuBYm]k G)z4CgWF[]Hkvx+6ƙ>oA`H{{0O[#˜'C7g37ӕ({m%Bm-R@:7CշREi+uYk't\`Aelit΍7Y-s}")rov8zj6ڲh@>2gkPXxj-Ղ ]A 3V_mEN΅!Q{{r 6 S*Xp8XN杋PٸM~g|RmQ?7qAp5j*t5K >.—.*luMB+Df܎2ʜ?=xs V7K Ӟu| 3)IOSjiۂkRvuΞbVLQf5" 0a7i^ef"xJvtkՁf!WU|tjm|v/G*kgV7hHw8s:1ɓS%sgPP<*Giy)AfRN*V"ء2^dTmA+9ڰ W YZ