nscd-2.31-9.9.1 >  A a݀p9|pzk؆eP3}+q){s ,_ct>=`vr$rdǘI%jb`^'c_a6Ǒ7jMV%-Hi%=A7|]پHl-I9A-Ɋ{1.<=)qfk@8>v*fRJ93cJVw`cM۶+!:(~W H%EU3ޫL%K29$;~4@jV0jMQad9a7fc07bc3be6039af914b83b158ce5a07c2dfe446110f4690041739109cb02de3927fae7c79dad1e47a53b9d93390734c8b6aԉa݀p9|#/9JIb5U՚$P!<`.J_,=ј@,C t[7ZC׍>~{uhZ^d4it Bٯ`q`atknZ |' i^q,erྀҩof2}}^oMN=^iʥ ߭" 0Ez( WvtdS7]2Ae ~BQ~n+yL%*X(,:Rڱ^)484>pI֘?ֈd   . ?EL ; 8   < K h:T"L"#"(k8t9: R=͡>ͩ?ͱ@͹BFGHITXdYtZΘ[Μ\Τ]^W bcsdefluvL wdxՠyz(8<BքCnscd2.319.9.1Name Service Caching DaemonNscd caches name service lookups and can dramatically improve performance with NIS, NIS+, and LDAP.a}sheep60SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.gnu.org/software/libc/libc.htmllinuxx86_64getent group nscd >/dev/null || /usr/sbin/groupadd -r nscd getent passwd nscd >/dev/null || /usr/sbin/useradd -r -g nscd -c "User for nscd" -s /sbin/nologin -d /run/nscd nscd if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in nscd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in nscd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/nscd.conf || : # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl && /usr/bin/systemctl stop nscd.socket 2>/dev/null || : test -x /usr/bin/systemctl && /usr/bin/systemctl disable nscd.socket 2>/dev/null || : # Hard removal in case the above did not work rm -f /etc/systemd/system/sockets.target.wants/nscd.socket exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nscd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nscd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nscd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nscd.service ) || : fi fi exit 0 uP A큤A큤A큀a}a}a}a}a}a}a}a}a}a}a}a}a}a}a}e2cdfafd373d24fab07018d0e95dd49510ea6c992b7be2b0611ab23bbc2750b579fe74962fbce2fa9b2a4b92f693b2fd42cbc2ed331fae268de7104879a72df879c9cec5dd2414dcb76d11e75903aa6fd9b7785c897cb9f853edcb140a71b779c45d3484ca427fc56f05f6bcb8c25abe2af5a761a580ceed07e9950d55f3db09/sbin/service@YYYYYYYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.31-9.9.1.src.rpmconfig(nscd)glibc:/usr/sbin/nscdnscdnscd(x86-64) @@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(nscd)glibclibaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemd2.31-9.9.12.313.0.4-14.6.0-14.0-15.2-14.14.3a@a@a0`ݮ@`a@`H`H`?z@`@_T__/@_O@^)@^@^{G^g@^`^U @^&^]@]7@]|@]@]:\@\\]@\@\|\~d[[ͻ[$@[t[r@[qr[^[!@[@Z@ZJ@Z2@ZH@ZZ Z}@ZxG@Zp^@Zp^@Ze@ZKt@Z1@Z/Z@Y@Y@YYܶ@YdY@Y@YY@Y@Y@YW@Y@YJYYw2Yp@YJ_YA%@Y.@Y, @Y, @Y$$@Y"XۡX@XWw@W@W@Ws@Wk@Wj}WYZ@WL+@W3W0{WW V@V@V޾Vm@VIV@VŲ@V`VVV@VLh@V.V$@VVZV VUYU|@UAUȒ@UU@UU4@UUv@U%@U/@U:T@TPTgTܕTء@TO@giuliano.belinassi@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.derguenther@suse.comrguenther@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dematz@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dematz@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dematz@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dejslaby@suse.comschwab@suse.deschwab@suse.deschwab@suse.deidonmez@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.denormand@linux.vnet.ibm.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.demeissner@suse.comschwab@suse.deschwab@suse.demgorman@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.de- Add support for livepatches (jsc#SLE-20049). - Enable livepatching on x86_64. - Generate ipa-clones tarball artifact when livepatching is enabled.- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch, 0002-S390-Optimize-__memcpy_z196.patch, 0003-S390-Optimize-__memset_z196.patch, 0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch, 0005-S390-Add-new-hwcap-values.patch, 0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 - GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify (CVE-2021-33574, bsc#1186489, BZ #27896)- wordexp-param-overflow.patch: wordexp: handle overflow in positional parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector support in memmove ifunc-selector (bsc#1184035, BZ #27511)- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition fix.- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the AVX2 accelerated string routines which cause HTM transaction aborts. Instead use EVEX or SSE. (bsc#1181403)- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache (CVE-2021-27645, bsc#1182733, BZ #27462)- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument pass (bsc#1180557, BZ #26637)- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within libc.so (bsc#1167939) - iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224) - iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923) - printf-long-double-non-normal.patch: x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649) - get-nprocs-cpu-online-parsing.patch: Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)- power10-support.patch: Add support for POWER10 (jsc#SLE-13520) - iconv-option-parsing.patch: Rewrite iconv option parsing (CVE-2016-10228, bsc#1027496, BZ #19519)- Update to glibc 2.31 - glibc-2.14-crypt.diff, crypt_blowfish-const.patch, crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch, crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch, powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch, crt-nocompress-debug-sections.patch, resolv-context-leak.patch, dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch, math-c++-compat.patch, remove-nss-nis-compat.patch, eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch, assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch, dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch, nscd-libnsl.patch, malloc-tcache-leak.patch, falkor-memcpy-memmove.patch, aarch64-cpu-features.patch, nss-files-large-buffers.patch, sysconf-uio-maxiov.patch, glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch, spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch, tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch, malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch, fillin-rpath-empty-tokens.patch, getcwd-absolute.patch, memalign-overflow.patch, stack-guard-size-accounting.patch, libgcc-rtld-now.patch, res-send-enomem.patch, glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch, realpath-ssize-max-overflow.patch, localtime-2039.patch, math-remove-slow-path.patch, aarch64-hwcap-atomics.patch, glibc-fix-aarch64-build.diff, absolute-symbols.patch, x86-haswell-string-flags.patch, pthread-cond-broadcast-waiters-after-spinning.patch, mman-map-sync.patch, mman-linux-map-shared-validate.patch, nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch, getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch, force-elision-race.patch, regex-read-overrun.patch, regex-parse-reg-exp.patch, 0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch, 0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch, 0003-S390-Unify-31-64bit-memcpy.patch, 0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch, 0005-S390-Remove-s390-specific-implementation-of-bcopy.patch, 0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch, 0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch, 0008-S390-Add-z13-memmove-ifunc-variant.patch, 0009-S390-Add-z13-strstr-ifunc-variant.patch, 0010-S390-Add-z13-memmem-ifunc-variant.patch, 0011-S390-Cleanup-ifunc-resolve.h.patch, 0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch, 0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch, 0014-S390-Add-configure-check-to-detect-support-for-arch1.patch, 0015-S390-Add-arch13-memmove-ifunc-variant.patch, 0016-S390-Add-arch13-strstr-ifunc-variant.patch, 0017-S390-Add-arch13-memmem-ifunc-variant.patch, prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch, ppc-tle-htm-nosc.patch, posix-Add-internal-symbols-for-posix_spawn-interface.patch, glibc-2.29-posix-Use-posix_spawn-on-popen.patch, backtrace-powerpc.patch, pthread-rwlock-pwn.patch, manual-memory-protection.patch, ldbl-96-rem-pio2l.patch, dl-sort-maps.patch, dlopen-filter-object.patch, glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch, ldd-system-interp.patch, abort-no-flush.patch, fnmatch-collating-elements.patch, nss-files-long-lines-2.patch, iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch: Removed. - long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch, riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.- nscd-senfile.patch: Fix concurrent changes on nscd aware files (bsc#1171878, BZ #23178) - nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878, BZ #26130) - syslog-locking.patch: Correct locking and cancellation cleanup in syslog functions (bsc#1172085, BZ #26100)- nptl-setxid-race.patch: nptl: wait for pending setxid request also in detached thread (bsc#1162930, BZ #25942)- glob-use-after-free.patch: Fix use-after-free in glob when expanding ~user (CVE-2020-1752, bsc#1167631, BZ #25414)- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter object to work (bsc#1166106, BZ #16272)- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)- pthread-rwlock-pwn.patch: Fix rwlock stall with PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861) - manual-memory-protection.patch: manual: Document mprotect and introduce section on memory protection (bsc#1163184)- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC (CVE-2020-1751, bsc#1158996, BZ #25423)- posix-Add-internal-symbols-for-posix_spawn-interface.patch, glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on popen (bsc#1149332, BZ #22834)- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process initialization (SLE-8348, BZ #22685)- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ [#25204])- GNU1815 - Hardware support in toolchain (bsc#1151582) 0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch 0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch 0003-S390-Unify-31-64bit-memcpy.patch 0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch 0005-S390-Remove-s390-specific-implementation-of-bcopy.patch 0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch 0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch 0008-S390-Add-z13-memmove-ifunc-variant.patch 0009-S390-Add-z13-strstr-ifunc-variant.patch 0010-S390-Add-z13-memmem-ifunc-variant.patch 0011-S390-Cleanup-ifunc-resolve.h.patch 0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch 0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch 0014-S390-Add-configure-check-to-detect-support-for-arch1.patch 0015-S390-Add-arch13-memmove-ifunc-variant.patch 0016-S390-Add-arch13-strstr-ifunc-variant.patch 0017-S390-Add-arch13-memmem-ifunc-variant.patch- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined behavior (CVE-2009-5155, bsc#1127223, BZ #18986) - regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169, bsc#1127308, BZ #24114)- crt-nocompress-debug-sections.patch: Don't compress debug sections in crt*.o files (bsc#1123710)- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig (bsc#1117993, BZ #23973)- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new Japanese era (bsc#1100396, BZ #22964)- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use the correct order of instructions while maintaining the robust mutex list due to missing compiler barriers (bsc#1130045, BZ #24180) - getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4 address strings (CVE-2016-10739, bsc#1122729, BZ #20018)- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590) - mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux 4.15 (bsc#1126590) - nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast in coredumps (bsc#1063675, BZ #22153)- x86-haswell-string-flags.patch: Fix Haswell CPU string flags (bsc#1114984, BZ #23709) - pthread-cond-broadcast-waiters-after-spinning.patch: Fix waiters-after-spinning case (bsc#1114993, BZ #23538)- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ [#19818])- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils newer than 2.30.- Add glibc-locale-base subpackage containing only C, C.UTF-8 and en_US.UTF-8 locales (fate#326551)- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to HWCAP_IMPORTANT (fate#325962)- math-remove-slow-path.patch: Remove slow paths from math routines (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t (bsc#1102526, BZ #22639)- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing 2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644) - realpath-ssize-max-overflow.patch: Fix overflow in path length computation (CVE-2018-11236, bsc#1094161, BZ #22786) - glibc-fix-avx512-mempcpy.patch: replace with upstream version- Use %license also for COPYING and COPYING.LIB (bsc#1082318)- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)- Readd nis to netgroup and automount nss config (bsc#1088860)- res-send-enomem.patch: Fix crash in resolver on memory allocation failure (bsc#1086690, BZ #23005)- Use %license (bsc#1082318)- stack-guard-size-accounting.patch: Fix stack guard size accounting (bsc#1074208, BZ #22637) - libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during pthread_cancel (bsc#1074208, BZ #22636)- Mark source0 as nosource in non-main source rpms- Add systemtap-headers to BuildRequires. - Add --enable-systemtap to configure arguments. (fate#324969, bsc#1073636)- memalign-overflow.patch: Fix integer overflows in internal memalign and malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343, BZ #22774)- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit (bsc#1070491, BZ #15142)- Avoid duplicate source rpm- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)- dl-init-paths-overflow.patch: Count components of the expanded path in _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ [#22607], BZ #22627) - fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419) - powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420) - malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)- Add _multibuild- glob64-s390.patch: no compat glob64 on s390 - noversion.tar.bz2: remove unused source- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ [#22273])- math-c++-compat.patch: Add more C++ compatibility (BZ #22296) - malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ [#22111]) - falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove for Qualcomm Falkor - aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling - nss-files-large-buffers.patch: Avoid large buffers with many host addresses (BZ #22078) - sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ [#22321]) - glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804, bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332) - dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in _dl_runtime_resolve (BZ #21265)- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)- Drop glibc-obsolete - glibc-2.3.90-noversion.diff: remove - reinitialize-dl_load_write_lock.patch: remove- nss-compat.patch: Move nss_compat from nis to nss subdir and install it unconditionally - nsswitch.conf: switch back to compat for passwd, group, shadow- assert-pedantic.patch: Suppress pedantic warning caused by statement expression (BZ #21242, BZ #21972) - math-c++-compat.patch: Add more C++ compatibility (BZ #22235) - getaddrinfo-errno.patch: Fix errno and h_errno handling in getaddrinfo (BZ #21915, BZ #21922) - resolv-conf-oom.patch: Fix memory handling in OOM situation during resolv.conf parsing (BZ #22095, BZ #22096) - dynarray-allocation.patch: Fix initial size of dynarray allocation and set errno on overflow error - nearbyint-inexact.patch: Avoid spurious inexact in nearbyint (BZ #22225)- math-c++-compat.patch: add more C++ compatibility (BZ #22146)- Remove rpcsvc/yppasswd.* from glibc-devel - ld-so-hwcap-x86-64.patch: add x86_64 to hwcap (bsc#1056606, BZ #22093)- eh-frame-zero-terminator.patch: Properly terminate .eh_frame (BZ #22051)- Disable obsolete libnsl and NIS support - remove-nss-nis-compat.patch: remove nis and compat from default NSS configs - nsswitch.conf: Likewise- math-c++-compat.patch: Do not use __builtin_types_compatible_p in C++ mode (BZ #21930)- Add iconvconfig to baselibs.conf (bsc#1051042)- resolv-context-leak.patch: Fix leaks of resolver contexts - dl-runtime-resolve-opt-avx512f.patch: Use _dl_runtime_resolve_opt only with AVX512F (BZ #21871) - libpthread-compat-wrappers.patch: Don't use IFUNC resolver for longjmp or system in libpthread (BZ #21041)- Update to glibc 2.26 * A per-thread cache has been added to malloc * Unicode 10.0.0 Support * Improvements to the DNS stub resolver * New function reallocarray, which resizes an allocated block (like realloc) to the product of two sizes, with a guaranteed clean failure upon integer overflow in the multiplication * New wrappers for the Linux-specific system calls preadv2 and pwritev2 * posix_spawnattr_setflags now supports the flag POSIX_SPAWN_SETSID, to create a new session ID for the spawned process * errno.h is now safe to use from C-preprocessed assembly language on all supported operating systems * On ia64, powerpc64le, x86-32, and x86-64, the math library now implements 128-bit floating point as defined by ISO/IEC/IEEE 60559:2011 (IEEE 754-2008) and ISO/IEC TS 18661-3:2015 * The synchronization that pthread_spin_unlock performs has been changed to now be equivalent to a C11 atomic store with release memory order to the spin lock's memory location * The DNS stub resolver no longer performs EDNS fallback * res_mkquery and res_nmkquery no longer support the IQUERY opcode * The _res_opcodes variable has been removed from libresolv * no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/bin/sh/bin/sh/bin/sh/bin/shunscdsheep60 1641905649 2.31-9.9.12.31-9.9.12.31-9.9.1 0.48nscd.confnscdnscd.pidsocketnscd.servicetmpfiles.dnscd.confnscdrcnscdnscdgrouphostsnetgrouppasswdservices/etc//run//run/nscd//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//var/lib//var/lib/nscd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22352/SUSE_SLE-15-SP3_Update/6d0ba0570fc507ac3b10ac375b133b0b-glibc.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux ASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-9.9.1.x86_64/run/nscd/nscd.pid' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-9.9.1.x86_64/run/nscd/socket' (No such file or directory)ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=38bc9ecb25ad1bad5600eb6535b78246e1246a9f, for GNU/Linux 3.2.0, strippedcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-9.9.1.x86_64/var/lib/nscd/group' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-9.9.1.x86_64/var/lib/nscd/hosts' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-9.9.1.x86_64/var/lib/nscd/netgroup' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-9.9.1.x86_64/var/lib/nscd/passwd' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-9.9.1.x86_64/var/lib/nscd/services' (No such file or directory)RRRR RR RR RR RRRR RRRRR[t"|=N"Yrjutf-8977a159624a12af950429f2f53a55842e846f7dedcb7fdf0b802168abf866eed?p7zXZ !t/{a] crv(vX0`sW*~)jez>G,N%{әrw"~I.R`:$R";>c-/Ep(㸌SF39CA/qUa mGƭVSƁ%O5JUXXVD{ᐠ'ʅȫov< ⲃɉa4~,etS8MF]I,^rYꮏkCvpcXt1J_ug>J8(̴׎7c_ߋs3l:5z19shūc?)l$o $l4F i'1u7:͎&?*,Q,B2kO1+ Ϩ,]sGIF)cX^kR$1RĢ%w=lʕ/U,p~=2cԥ"J 4oFz%mnG5q0E&ƧCڼoqkϋmcT̓j@fW]*M~QxӲdeMD8?L߿>0it܈߅I6yI=:4" {R*Jn3yi>4IjUNqsGn-]QPrݳe".>&AH ){V ']9>3Tis-M9d/7J&[c0bUl2`}>x\S# DO@\o;j1XejXŇlaqOY5&fz݉V:lO< M.sﯝC)Q#K– R(ju@{ZjYƕiK5h++!mwȔٙdiFeO$>H зˑ y{>V!saJ3ÒD/g~<%5}W #ɟ 8$+oWY47|)&A(𳍓sş;T0+*ER5AgOnW!B:MʉY!-{3ɖeYQ [,jg*CtW'w%*s@3)P)DZS'ssx:"&o4Sњ#_/0S1x+2RgW} YHѯ;Rie >,,ÐEdu5МsS`b6afӢj{9tD]jőqw}(AU⬔Q o?9e]/]M٪T6ݪO˖ӡP4α!a4Nܥf#  z +c.l?0cC;zc}1q5p _<I"G kɵqL6Ao-˵>F~0$Ǭ}&H&(p9&aW&,Z"ʻF؂kcJb{Mu#,ږa & ܐ 2VX3;+Ō}γ_Afq&ȤN޹X9{v& tK*;c/dߜL-K䥖׸`Kw|g/l$i.. CvY`Q9 pdG+9L^s$KlM!90mdC)[aOb|Ԏ޺5]!-*gh`8iY,X?g#BQH) /PH|*:2\J`7#FT!_y(%ҫ>^HPoj-kP)[*" | ; fi]?3Htx0(f!zL݆3ӿ!T?2*Ajj<*ήSPfYeU§yÍm!zpJaG5kzB!8UŸo ~-]oB@9D1l.GD@FR9˯}A|.:e.WOrB%q;x `?6,ZA1}7vϏjOج9faђ2h^ƭiahNٌױd6N{LauDyIbgWrO P'[͟6ƿ:V|ю7k7#k`ɝM$ޝbX>0FД=Pn_n` >n0'~,b̀Vm3̏b[~Ce ~bBd<(ycIFRĪݝh3@Kr_DyW#_5`C $zZ,e=:!=UwO$ta됊[u@]zG^MvQݜe1z \_'%, lW)4%-<鮘zgI/5wl?9;`O%?u=yji]^x}"Gvϣ񮘰V\JvY/:]bf%/wĪXDT03sJ s Tw9Жp5i@ȓfah?g}|( v_xT,O:V~A5@By7͢?ᡡAc;wnҬus"ۅ-:־QD.`L3_j 'E) ,ʿ;]NtWKUW5pawoxr,7|fʆTڏbiJ¡eJp,!* M#A' G|Xʥ#KBcQV 1 dcBc9v(}F!.;XwȴoYfdw7~2"Op+e_WeZQt83LC*A{k4oꮏYz iⅷ])1v-K2G ;(:C1c%`xѳ/K“V[^2Ur 剕^Y!6aq@&paWPF~$XRٌr&OUƛa{UFEߦ~QU!.]f 90 ۝@>JXf[#ax)â֍w'tūFsY5Oz>9q!X'`JlL@ڃ ՃߑZ{|h [h'f%ࣽFU ]gNO;,TPgH8[3IT3-&-\K(3N ;1 \x;UوdU\b:;~Wvm#pҨ'Aiೳ`vk83ݒڥy0sb$N'_bIN#=ъ[vHwHa#:bl1}gvo9A[FCQ?\ֿҡ 4^bnFy,L/AbȪԵQmq臀k(~t.{w}=cpIF=sR%AoqYc-; q][ 5؀29h]qamk J| ELfO`ZעՌ)RzOcpW?K2<@19f%:M }d-dįiW kDu:GuLhu^My|2PrO߶>6)u<2n 4G!#.%!OUZ v|EINu2\#iUڊ cx#u9(*i5hhj@Hz`8\Σ^nw2ӲкɧN#ZIJ 31V65ՠqwgr|gCLGڝiP='fB`ED.Md|Q>A8 dN4X: ,Krk<0s@(q:O*8֏in@fG1YNl[Z3{M AbVYw9܎"І=}Tr~SVriZtwӏXOzGY3U{&WV*{ kF!F5ћ*B'$E&t q~՗b&m)xghvDDjZy}0p;et haCw7m{L|le$j#C7T~`UʍJ5O`Dz'' fiqWYk`f}E@ p3GFiQ' o/p:;f;Ha]Zx" c"m-{sY%*Rvjow[". #T\ GʛjVeJ ؓBЙ&zL_шi, b$ǯDZc]X[~6*l@7: |NhMzoΫWl* V!n!s$\Gtr1;eRn&@o/%:;{5?fe9e?ó; 7F 1)"~tE`M*fj:B=R;ڑ_ [0~=ojw ,9a+u>:^ imw/e}[GU3uF+m>Ҷ:y?))wzҼp#R=LxC*u ŀ)$7+Rwe3q>oL \ף5\愶El8U)_J5ԼOeCA9sB.nڀIfcbF2GCXrU1u #8$\:(TTQG; n܅"$<I 4hzI ~Tƍ|<LV5.]!ZJ"3>+l@U鉭2cv4u LDLT{c5еsD^@;dǞEe)p(R% sQ,;1"TS6T~=FM#:*gji'HPIh]i:ngz EBjbuQG)&,cZx7aFP-N`#Fr$g$> ߰fu$'6bm,D4{s36NDU;,r">}d9|txTYdR|Ѭp`\P3 ;CtX^Eu^ i_D5O\q 9//[|?BYUlǡ$a ƙ zolP1y;}ѐi2mnI6iv+o> 6xz9d\]hGU=*YثWz3 Od9FƘ4EZݝ4ܡsJ87 Dte*/@sk({]9}k)k Of xUUq718RiDFM*`X3za$-$ykmC*>P0H[;QdJLM E~H&} Ӻ -!+/\Yէ%/׳`cI\ir {v0l}8OADaEAP68 6<<''klR nD'%2˚DhP/Ъ%cXq&h!KyHzo\A\3-P7HdF{C?U*?c=/$)ºG69A{l9+0@ou8f A(ceK0:ɁJ[d.ޱomA 05}1;Y)اͯb*`9kx!" ,>,DX7gK@H $_ zn"˶M"tgI-=p#P,?E&yy ^50Kl/'"h覙_`icMV^Vwc0mWt ̟W\tR7I&I`Ꝕ\Uנh5YHԂ32NLR!Eyek-·s VG3e4 4dS-P\ T7<[<b #c<2TRՁdT g3R(Fť?9Vlzm(F Gi6.}C(lgq81P?](׷wRR$T4V]w_}h75,nlO:+Hŭ{k@`!,EvR vvդH{XiM=Yq6>)r>Ǘ  <~vt B_C$q+^;ESf;$p4*7|,jB;zG#=HfN8NXӃxP %槯L bb3WZP2,@$67ټ#@Ey2Y> cq.mWfGMyăAy]"(ۗթ(FX]QK#t30=2_R:eTQF\= T]꿹r>6kWEƣpIWvA+7~50<ܪvKoC.tj E! ȓWH Z>ձ` nsjE5~92LD{謳.J#؝wT/ﶨ4CNj'Ϧҹ|8zs~˩qIV3RPduɳ%6)G%~4̱iV =dM|B4w1<>j!)O 99֮]ذE8@wLPMAcah/K70F8wq{|]슥*Wh`L ggY[UQh%9 ~~H 2҆e,d|ʙwFUׁ:5N\H^~ȰZ!:,a{v.R 7 T~bqB6C'=!"cm5/3@f(\n5-[/>:+7Z|Os 2a*pEQK({yO"]"n2!- C5Ao~p)xk^^u>Qp8~kv7gv<|܅y"Y}hS@1S1t^x .vadqP1"A9DCnGYx.*#dw^ dYsKh7R)DVt7+ǒWܳ,:(tY09+̓eF rQKhRc>BYqJh˽xPx zhsaDq0;F"h5H蹘C0.$M-2 ڋtH+T< %j1Si컺P?ij8\g t9WY{YSganW@j,[N,9)Qu(CF'N SIBGٰh(({&<`lbND? 4$o'(v  d͏)]Akk_<֙0בsCY ͗D —orFNM48Z7;㤙ROͽK%.? {R9Nx-wZ7,:X )0]Bhk!8k_y P>Q Gغ$H!Ip=2 췻V,UI*M.EYkBVDSemfG h^in~of~lizSؒ Ʒh 1Irm]gSSEreӵWu>?⅝"BɃe;Pג$ 3#z,C-Yrb1ʃ`eF|]z^l~l*`;\[tWr&^Eu$R>ԁ+ ["mMuҎlw%ྜྷp59MPp P= i1'!7nTI;<7PpF+9_-δܘ(W=&VBť]~60Bs: /wE$Ʃ$~daڑ5\i@m1U]1}f> uҩ1GY.]d*48I %\lASbnvBn[1" Y34z pO26 q9΋ ['s?Z6q5=diO8)cD sGv3"O'|B'3j3t %cʯԝV?#&{jR$fw\8&'|jAV^w,RS4*0b/)]wPz͘=WǀeIP=0Rʖ6n^p*~f>y~D_B6?A`pIar[#eŋ/Oh3AyC# gV+%2m0ۆ_e"MyIE9H^>Te?6GOjcV5V#6e[ `7B: ]{&TО ^5I%J: G?B.C]|_+YU%5b(&~W6L:zg^6֒V!Y1Bn}ܛ"uD|R['}Ϝ~#.)=o5K"ǫ9$` pLlP65DU3]zu]B7?=N;CV[fy8%KRլXvUUefoQh97H_c_B19ƺ37 V)pЁ|zNiۗ6IRaog1;! P(]Ft^CMw"/_2@\6nG a.9H}~/1,wͩkS8Ȝ1G%%#Pw Yտ?:X}nYigΣ"Joa+LL$S +w݈Mly'dzyg;x +<[K:*>^5KN -hsgBJ3fyjq7uzW8FPf)I/6QX]q0D$s˽!6_}+%We[x a2t#y .5mk_$`_IzUӰsPŕ@cq%#.N`4"(~2v,7Q9{LF;wfL䱁6C rMg*4A.)/=>rFހ?/EtCJ(0'i\>u֙q ]3%F(`iDϙ>CFE^ЭTJ_'J5.I +NR7:xA}bÇVn}Zmb2c(-a@H4y{B;Ɏ-DfiM- p0MccWIܘM{ . CSu=9˲z6)DGW22$02Qn!بZfl1UYr/ }x1y(OrˋxLEjBOa R»TDEHpP in3:v`r2DH@9Oq{DBKPMH?AULGoUaw,xYE!\n&Q|D e xvїz"cʶR C-h7­[qT5.WN/<]#%]4ye׾Ӫ0w`}oJfM00XC|4b=hudqG~_2X$~7"0*Jah@-_2?g(L"62rHӗ?KE.l4q:$J\pj=Jl_'8 O|D]l݂4fwUmo^|c5^y쬈@aɖ;d|hᙄȬE br YD`y^"KqLX4V 9G{97-+¶T8) ʑSʻ/dءlQM'o!&zp/eT5. 6X]ċNDdk\W*5JMk͒QqKaaET.Fmuo'\s'ig(P=@(bkH]?v23&p[W}9jdu~dkܛ'8Qf1<x6Wt`s.1q}ư&J-@͵/ 枌D h3aV_yP(urB pe`;M,N-.>'Ō?UL|ZTT2̳7q(+twUX3_evkQ(;l$T!Wd!fiAxGG4:Ŗʃ0K$kY7[."c&Wdkp!2KJe'P ;6lPpLt&Β¥(%-&O+)T蹪լl- u#EɲLz8sNv9BS$:PfiHR* lJ6-g[Xə,eFx9>8B^ffkz&FZU~T=0b`wq>~Y El@ Ao{u!^vԷ2eWj| 6nO8YG(硇1U6,+!:R!xUvX#~ ԻB< ^ę@t'"|=]*)ѐ<7]۶Q`|#0bcz%BZ[Qv- h+ZNΨ^e -0f#EyX#sF&%uF|l;P?{\tR3cF&^0ۻǀ{'Tr}fuTnU jX4Y OiC;=K+c(mi|el5-ۉ35V+.e@Ï65N.Vg:9+%]OwQc 8뿃:}q~u`z|,)68bbPkcg~1A# ylyT5pDŵ~-#0Jֲ{f6*7j :-ϓdl`F晐0az4PWxZp-H䉍}6إJCPIGUY( O3$ISUUy%<iEkē8^ڜlOESZHd<5Ρu\CӬ8]Ҝ@qFI[9s5ӢI`lUrH~`)ܺZVX[ C"%$z"5=ֽG1ң֕ ΐh `xgx̴3"I̳aޛP_W88DSa3(FW. d]Q(Āx 3{[Y5ie }l 8f.XqItYD N~sU86L™A!V7 6h ƫ6@ш0OHO] w0)U\^Ђ p$vHЂdd(*Dt8ܑ&X{&H/*ygR0tBejx'<tQ @:Wtv#\[N&0E yhƵv}c?΢ 'py}-6Gjq "v7gV8ȨLLj!Ry~ujXOY}xOL-b]QzvT^[(~w32gT}z0gʮۻ[O4 Dhʌ!{漓Ǥ%j+xrMkߴ9&'SL5qGi;)Q}B Z3H P5& v פ](F2'O} `MSk6tb[,XWJd{Uհb>BnfL1+W-}9%ZRIӑ'wbR(~$K=()8Č|8͸ zr6{pEku uOCڻ6ѻ~[,QN0 &M0У&I8jqMKjoÆS7vchtJx@/4IujTugUC.\ ݋Qar,Ub/8"hiKԶ*PPY7ZJ;H I4r᧑K6BUᎄv47^\=JY5xDB=+lU{W#ތ~fv\ NiUF'l$=鼈hE$>H-9 ~:9zCz?AWice[̼Ҡf?f&&)uBN 8 "j>7GGV'˧A4ף[hCq 7]Lcˡjhwv2/hoEs}&|Cv&{Drˇ-_BZU1_lc YP\asqS냒[ґqSI,)._HZ3?Bn-J(ѲVzxF I~Ӿۈ&K [8-F./a4n h54ep%|Z ˂5!p%6vQOr.QvUDGԋcoz61T+Y~:1oƼb'F"o+8aّhq7E?hZS1Ċkyǩ?NmU?Aޣ5s( ͛ {v&3a.V_*77n^5nC)[q蛣pc}EBa;I6Y6ܭ=[X7-$lq[eR>RjFf?^ˢFАxtx Bu㊗ 7 ۥ Ju|rx/Tg)Ir\~lb80]#] j%k_|oĿSTv1qosi*!c# v֌Tr؝Ko}^wTvg\wX^;^{351߹U=%tӱykCeM 'Vw,u3fL68m.7ޮ]=U?bhrՖJjaUF;ZF[W#w-`-!Eg%V:,ʣ5VYfAX*bǃJѧǛFÜ9(nA2RhDzцvr6ޥΥ2i6STYIchq iý$:.ǮzPk &~y~g~Fni1E͡f!'nqp m<|AQ?v-n7U LQܙESWUXdVx}NA1l&Ê5t#ڳrXSf_硈yB ]'B/8 oYVoq@:`uCI*`#r[4Fx1(gtA_L--<%z[<#(6mT2zԗۢoB/p~rįvO#H`Z1kSZgS #ѧ[ |SۥyK1~yS9CMTk#sb DXCZ9ާ ]&auXT!X7"'KT=7d>FƝaD F)=YV5ׇ4 :W?fCP'8ё&@KR>9izK wsOӉJZagpV_Rh-?m/m ~BUE81V* un= @4ձ.Z\+)L#ۙ%B-r}uGΒRSz[ F/ȿ M=xjT\5WnՂb NhOũ@RJlIϜcveYV XeiPs^oed>9@g[eR -gkh0Ч{I>Rr1Otk~B+jQ~ށ ƣ:9y.rM.H E7y;ju*~LO,D 326'DXE\t~9i:J%&ڌR%J _$ä 3Ql޸%e%QoAC n )# Hгo_QpA?IN[p8 jsZRh7_M.|5}L3򮑒/8s¦$*f%iyxl"|- Wga^M5qK~e9w #1 CK| .=$N>̅Q傝14&aZ&]1`7h=_NBL/L i$F~U6dB6_d%Dpz Ҟtb3@9PR'Nx<˞Q·PWN+vYmhyyn^vvC%-TOBԘFs,l! '!g7Xދ毢v⎙{ӊOvNEstˍ?ƴd0IHar{ Dr#`1}#`X5ǀ1FU$Tq! W)OD0tיrR~̿dl S.\DZĠ_!HcI&Jqu=CBji70{ ť(mwvB5gmGH6 'fZ^!RMʸ+~g^!Jx 6:V=(b<{g-2} (q"%Dqq.nAp). GY>+3:UC)4ɋT6 dbƀ4Ŀv pe*ׅ pMI,~tB^N״ l 62fыCȕUa7% n.!0|3g@ͦnw};z¹ %ZK@z8[~ hl7}zyW͢ȅFiSIXE):s`z# eUQ"hnOsG s4(w_Cj31/Zs_Ө.{(`cj؋-_?"0Ƴ_@`-\c7G:X%?\8\P&D`)mC:: I.g6ij+Ӥ)`S:nP/!p{80*/6E* I?RyJbE C!p3lCaߩ7u, #Ѽ25Xs]!M%#9P|Q !~K[idӟ6{FB/sW#厅jj=w^,5~TL6̓}}D1KQ > /X}BFlM !n5t/fWLS3иV|8@3˨R~3Tok ;aQV':V-ؽN~d2\眯CJdúhwGZĺ%5g59 ;VW"LDV 83Zkj;yRKI*B K[jN:/u`N/V\hC+_Zs]pE=QmODZOd3 L\`)s<5"y*Q?| = ?PA$OYqDIxV +D*>au7p} |7 *`Z)uL<眎WDnA!.,2"̹"iʙ@#"ӖRؑl!V.8h ,~˃up'ʒױ=@T)`wdz,j,)K[f\I$2#(H.B7\M5)8Y^q5=Կ2+5e Bn*28YHq[* .E.x5ܷ-?{opԙK^;hL"_߸4Bӑa댴ùw$ISZB{ NJV#}{X(̸<=eA"b16(ny8> &6x93 d%wQR;7#Be'sΧT$-DH6l|:էV`N Mˉ)2rxHbv P!4Lp Y(ZD|Y5dņ>ܣ!Z*&ӤzhЄiDOpTzmO3PZsJ<°LYi0[\~xĔrHTVatׄqdTuߺHr(r+x9Y[ Aq+I܈Rdn."Vh1[.$ 2,g@3wQܘy{ P.#`v/, {CjQ7LP̿W?>HؑE x" <(\%׌z-q0$BΉ+>(0EŸE:V( 0!?l6gOǸiE˾^Rif{L)Uwqa(n+TCuӌͻ6+cӍ w#Hw,Qw{N6j3lqi'x'=|;FY얈i՗>nssY% Ҫ$k`k[ uAytkC<=Si>['ͧ"K2l? e+RE6m#!&&Z-1>3$DX}iOY͖kjhQߒe; "%п@cAxjnW; ru e+u@ ΚECx1SNYBʑD Z>n0eSjmiNe_dR7O`H!>uSY\{ pukExFFG+y@]J6 }yuR qUw%MNr)Vt?Mİ R%tYr8 -YC \1raυ`~sҝ[j E,H?ȯ_PR*i!7j􀌨`(m 4oooHLԻv8T%I{soj!韫<}g75aRB[P$H{[ 2|n. Z:*a&ʜ'0ȶ`eŠt&%(Ip˸]Q.͝t#{/Foi{=H#6,e?Y2j]ݿY P>oa0mɵ?g{%6gǵ_:mns=ƥ> q?mx?JYlR]K}26k_P/0Ģu=1ԯ EZed_ G q&şg&Tzӂ9˫Sdɮ'1k<R't2E D?StԬ)ZŰap;or!UD)ᶤ(~+z4ww5%f>W⥶0]E~Xt@*w\fL#2#9nH}]:)w_XA$NENUan[#3*/ wT<()A/b1K:v 5k9TXcr{5<56vfqhE3Ele9U9X>X!0=?y;eN@ N6CPSDh1(qmc4?xXAOŠt2\ܒlZ@A\{"X{CѣO?P; Z**_N5R!rlиMC/yMHMʟ<)*o,OŬ<1FmI-ŏx\#:ϒCFz$O(}?Y8^p},UL.pZ8U𤷣6 \(V>pt>v,=JU /V1Enr5)&GO ՟dlj۩3?(t?Ռ s dZ2i~N<*/zh |3ȈaGsb{H؃" $X˗$4HzN~yOY^rWLwrn>Œt\т+WBZ@aƔgAUj&yL0f;֚7o\snG\m^ D" $FnQ43UjlN m-@pI”mmVT'CJب6RϸIB22эo8׮ (A[Ug1`( ZV܂Ҋ8c!+߮$&壾&EȘQIɋFoQ?츌z2&:}! -GiPݤE;ʰ f"{ʹ4PNJo0 .Av .GZlָ2?:vxQ Fѹ (1,#r 1,pRgy= "-t%ҥ"~2| `vzKmmyliot4|e$oVw_HBOT .me?-j=ϳ43A<sw^ܬ/z)E"ӃU,RLC!lw/B⏳spO4HI;4 (J_=u%ZSÕ"Gr?\0^ X\pFXq&7,.lj=mZkOOΎ&ev\~o3DH \ĐfMm%XP.ILh\FuZ2LL{2k齟MF*^.iWF -vߺvӒs L?z9A:ZeBl#Q\W l =qs34s\`,vL7E%W8Ul)92P8FAA*#FY6(\=c ذ2K'u_e4\~ӆetЙ` z9o tİ%D3/ƨvd,"ʴ"J}Jޢ"a?^|JK[Fff{^5LAь7r"f䅢|[ Gޟh@1&&iZMKƥ?*:3CH ^45nXBTlP߁$S7}4uzq˔;%٠&W};^|Psn T%X%J3 .h8rLiDN^=wՅ<;G6;vw7j(۵x2Y1$X|EQrH3J\14ef<ށMF@M3f[ {PAx`%^֊ՓoGl$y??sn =_pd[ qk)ʵޤ|`jH2^j"M%!^#Nf%vl) 'A!J7CUZ7oC1#yvǸ5Ϧf3r)wC]"ꤊ'8wdV#Al :h(Wa, $^yn/މQlgņf~%HR I,Rc\\V-LB#@aBs:[x6bK^Q_]ql9S?D7><Icm `ZTjrU&U>{0g3] m('g7fYl>ufX~% UDCM>WG^I^ S!ҧOPg?%ZLbӚ(u *vTY PS}7=VW>eNsH:,k:.T{ o%ySKw]-/ Ͻlr䅹{k@g/$,!iAq,=IS J4[F̌^d+RȍZ4xN4ˀPBtAN!rzT DQHrq o JV~<yM)FkuhܡچOKpD &X':giڡ'߉0t}*Cc^v[ۆ(}C7XWaR1ÏRjʦ/3 Uw-qyM-ر}/~gT^z+|B,y$Eui`P* ̎Om6'tE6 c )x]t Q5 | >X Sf7t_va J!`."p,>ٸފ:`^K³j=?c=eea+u d3#Λ=ŢmLR KγEpU1=ȇvkKd2z'8kV*dG^'#4dkX:N {KQ+ U +<Mx{^)q3rF,Hx' ‰04cWWfW dlMӽ֬* 'j 7_qEPv?T&ݡ3яJzJ2[neVy_O[=역AQKC›Mՠ0~$,@N.(3E&Q^xTz[Xٵ|j.XhYgҒA&']~є͐0u{a2^"ʛaaGzc~{gp@ ףA%l\ g@EM+w(|J EhT~AӼ'gKI(!dslQZV%*b5Nx<#@B&N&v|!4oNV pnbc٦VP[GG{u&(~d'L$Y U\ FޑNhDq{=/]4H>Ĥ =sii4#1Fb . "TQ+ 8\k C 20(& @]l2{B?v!BfY5虛4J4NT܆r  KLr++$Q=QuI{A&>OԲ].LPWE׺*4kNZVtp,8i!Sw=&"=uX@nW*[j4FZ.@_~c@Fu(C'qQL<'f7M ]x1]!xz47m)(2m`/7,]i/gM1k{WOh'oڪ'XX5ȡ4GQ,7֧ O4棹ZC.χz|C݀z_Km. 042<봲OR{БV q'UͤO2 H&DJ2}.+[ ƈ4,߆JpfBɢTW 3V7 kZ@ZHٰDjF;cy&YЃQ!͙g3V,] „8[YWɠ_ŻrGx鑻չ]᳖zO`OV` p+%v$/"6ծP# UEۊݡMsm#Ƿ]BPy Uqq`K4 )hz4OI[S"Џa$Su1p8 tXE$bTꖳ--6h?c>'CwÈGcK۽iwTEF|n; %"N!> Y;A&#c"vF, F/RH/Ž&`k]@`+:7ń|+JrVL!7z&_Zm2rd5vU~̉잘> O,Ec&@3:ߝ~,Jd=?B% |7)1USdEΥGV3~Є~CƠon# sɽLm 1`YghY[u`9#S˟ >pJoҞE\A}etЉ^BolRlM[ ,Yd㨷>rGV lli:@15 K!t5JD݉ldey.4<־h值7pZ% pM_1,ςۑ][Yx(0%äs;4JX<$!s\ ͌aa-_!̨fe*7sˎ.F#r~CZ|{χ mW7SdvުM {h s*eoyRd:~k!w2.. {HamPڗB"N $ WFjF x6d :snpORzX׺k)s;.*ښw±;Lc4^pނ!"&E.ͯD!bՌ;i'Ms>UiEuXg20O8 *!)R98sdK){xC}~I±{RF/U|Ps%ma<N>i&pZ&uUe>ȋ*/`۴G(i7VgҊ` {) Q!&vB=%Q\2}M=Ҳi|%x1q!vRs` ,gdQ5# {T*-w+Ld"S{@vB )$G1g''[T`#vg,}Sj)צeHq& EY\,= ^7"o]sjHd_WId }\/'9F{w'n ۑ9pzx(-'mTdKǐ&ump7<&]j숰5m!ZܮL}CFe:Htz:E_j"v 4 - :FH5"e7zWZtxNǺܭ>5 7_.zR4?E ʦv@!`c,yuZ#'P-eGau5_>L< .7DX׌TJCz&&9:kJǑn mƑs.R1԰r̗~7n4onkv8%)h5Ed9osշV=<=Sg[a i4` $23~7JYӐMay\ހ_s>W ,oܳ,]y/ّL+ɐw1Պ2PgUb_Z00 8o],&a3}O{q7wQx-.; ݦifkMo-( g|J?ixw˂,bXpVÞ67񳌪2-h@k,;-t×,ǛG^ ?hk sD_ sZ;;K7H*g7Ŀ?~_'$$v$cb&iޛ{jk&q Odfhg~??}?1D*/kaeX`qe:% %Z#"#k{;Ejx H('bSL9{Gy }ϫtU;l01^ S񲭿M4wMfʩ3Y$2 upΚ "RyO[\%Wfsv4(ZzJNP$X_-s#tW|~X tX.9o ZW,=L) *Ơcif* ,q@iưM+7S3) NF'}~D30>Wz(͈qc~l+rl<,R6o$'yooupNUTmSlnKa',NJ ״|'ҹ{L7)*dJ;}?1{9lJCF.:KC2lcкxP-9%/b4{.No uּ;0{" Oy8Tb6O܏} I,uЦu` $Oc]F 6>g+kc?&7]N.p Z28mڤAIG< 4u3]$}+=IobXxNiA) ZKLAZT7i [:|~9'- ׻SRY@LΙ;PgAԫyu V#Ćyiq>GG_eQ1L#C#o3\M O_hkCnƘ >תR‚"8ဓY!%+XN{ګШJtцuIm4OۿL>zTi%! $Dc؀PoVQ0ǙF]j]8X?G g$ex#-2}}?}%SO7D>kԴ@2r+rh dxA3bukƧ1q.ޞX;fwsеݐYZv2jP6ƺA$Ucݚ[]T {$_L#É@m;p *Jaq[t\F0B" !- w+cC9Jԓj޻U) msH_@\2yr[R,na`֣{]f ծXs Hq-xIk*C"Ͻՙ{zYqHn<$?'ۉ_ݱ/gk WTŒUSNHrx;:h ށzkqHȓ홠 Jl569~"tVt5<B@ ޷&|cS;N`nκ5&O ^:@*;6mn6ڰ: -M )EjXHn X=$&reuLv8m'+BZOFB/U(Pkb?Bpy&Z~¸1BUUPs5s7Sy}Jp. N#4cN7wmx䥳jPROp`GsJٍ4A _ą9 QlFgFTaZ"=)u^b65B#oU?oz ;8)[s2JkU֒=R'˺wI5l.lYsvlĀ[Cn:pNW2X1lqs8nS1.ÙBgU[Ԗt'AMZk(m9w%y6`Eܜ!yt=t i<ǀwWϢlVhҹ{ڬcGLŦ\:t[NSooسMsޥJ"F)u5i,-<;`2cyUwΊAOev%&HI/D;wr666=3'ߝs{aA2ã|%qX!?+-xFoZUZ{erHaZ1HITǵSĜ8a4&-@O>x]X"C02t6wa{vY!/& +pX*c$!hk&="LrW TAD /m'0eg|+o@['5Z+ y<ubu;Mp]GɆ/RSM\ԅ6BTgTz fI&z !g+v?9A>6ulD<"oՎO̺C'+`u*'PpnYZur 䊀ktD7H}c h]〨 |qx~bͥ4O3 ͎e}ʦ? +<x8!5E!HpG_W܍i,}-|Λ152ro~7N=!l`XJzʅ [wppS?@1>rLGdLSݓ,WʅFV%[])SC7,nAN=ʥR=+tE ^״ O12s0oN)9f5f*VMx'9NrEgV 5 !gitpPFAPv+=¥jT^T;7__-ILO4x%k+5)L$}>!fheSbS3iHa5Cl[[88-:اSH;\(!)(qv#SŜSZ_iJV+bq>Z,YL!q"uB?~* ZR[d+KsKBa_G`UWM9S*fml{Ҧ<$"#gG;PEh P6mJ 3o؞"د9yn٨wߝf eQ, {꤁ku*ؠf)w L&5!I(~IƾdN燑{U4##&II( VIu#`X mqh-UI`(zF1͔lp}Ҫ py&TIHdԃ϶z]ßW'C ߄.]dL:I|E+&zi&P.Azt)[ð0טKLDQ]RZ%q{ve@/Ls7@TcPė-IBD|N?~ts`2Ԣ<"c3茾٤<~]6\7t"A;9HP:~Ι=aj D:HfqjL3DZ:*[+JؗOAF,Sb2B@h5EAUz&&V2M $l%FKsn$c6VLAaPeFҩ*BySk_7a$v#e,}ٖv/3볲Vi&)PÍto/MI`uJ:*ӣf>,0X~oB@PvXY9~Zx>I=d֠fέZ!rOh 3.NknYY6 ڋH.Y(md3QivNUWŪG9J5sfkíK$MPK\?}aZQ$pꊼe7_k^~' A/ (XIL:gG5>3UM$< >i7"3Oaf{HǙ{s U: 41Ar͒Z0I H,cQe=WKoOg"\٬ }ixkVwqնKCz-*>u.\pe?ELzn!qce_ݏ|g=gzuOHpnje5ͻj!+YtB:В,ݶhwJ~~uQ2tࣱz?RqgCrZDX { Y7\U$7C =qأ_NXB.%^x?8$ɳ'I^y;߶)qr#BS<ʽ.# ۅu0x;zhiO{Q|Cfػ)4<\v厹#Li`Za:Wxpzs#_C`Ч|Z@E δ&H`M1B4tO3-^W6i8. <驒B<͝la9uØ#$zKAk]m6:UagQ 4eVe'ipr̟}qa.w"9N\ "V##bLCNV[}vLe_8b> D]}.d5 H5KO7`Ul0yˉI$Jpb2YH<C$MD򚅍,!*]@zf.`hDܻ kZϾTE$O+:3A!ppX*U<|Fk^~mq:~6]JW K\k?iYNe(2H M†x @8]w(?" !P33k, ޅh :JٌV:S f6BV6rw9N1%(IyL * a3K?Y#аcY|\v.f3ZMG8ܔ 9>\PjԤW ^KmsMX>EM={!scۧ B9 +pO6qx1ԛ8p4ʅkG\#bwyyE =Tpkm^߆10LwF ߏL71}U̫Q`:`JKuB`Ags-=ӕ\YqjsPHȜs]Khn!BV?H $McPk4Cg[嶬'B6EsxDZ[؋ d_牱;~ƥ$e,䠧#^Hl7!s;z<^e zx{jDWϕ@བྷeC*adӇ56$z cE㸳ڊHu@ }U5㷆7. 67QuDWij< oE#$\cyhY4p )IQ~gѩ.iU+vu<1*w43ci[ V W0 [Ʉzk)}.ڣ@V,S*fG0I-FtjVA %"h$`Ĵ^$sn){Mr+3S3Ac0 !b`Ӯj](UPޡ3$rW[]H?GAVCd|M?_"i4|ɥꁚzf -Ģ$rq0R~݊ |v9n˹ƟB4 lnՍEQ|wѼ>c^ K=cK^ 3W'-ڤtUG] G^v8|M qUGDB] b rjhc,tX1'HW/yCX!` &{H P0uӕ! ps&ˢ<9`!i崗]φnڞMf{DmS Uibs"uY|X0b笭 0Hertd5.FvjN.*szp~Y)n*ZBIT(ePf^2]O:ǂ0+D]5gĚ5L@bٽYA7ʔ EK MYxͻҗj%cP9+#F68Y{Fz7ף ƺJF^ƎA0+[)GJlEɖ {(<: toSr/>~?6 ,:\i;]-@ mZ~a|5x͚$czEׁ~>GO4]/(z q݃M*wH&i%ҝ/WY"ui5{vA_2>=rhBoJ l?>QcN{0x[Oy_ *|W"G>ґ`2M^΂I TSBBq5`"ޏ|fYhB 8@Xwxł,`Ճ x͏'OFC͡IǦA6^c @s#$%u[c34Π֥'68k`R{LA5vF4Ԗ((5#.v' ΄*Y ȶBZmWWP3 chȮ9:< ,"VP&UsxVhvElsfa#`VcnF '@>WAMgI,f0{{~YuN.}?B_+('uv%C_n&zM뀻)q2d@/?6_$H3 H~Ւgm8 `r&BGa{q|-# 9pu&C%# Y€&*w*SB#oqp=ҹ(ȢNK&TжO-a ks6v-oN۸<}\?aaT)a%egܫ&S/m81;D\V98Ꞁ8u Ě]*TMYݢs(bL?E<NGRLWK7< 4S&YEV5ƍJpLۤy_̹ȜCg|_R3t*vuΦIA),?>ZX^]Xx5Yg]j|H( @dWܩjeP o@+AP)D8NɆ'lPH\Fl_<|&C(wFgpPs5p M1X_#oқ "\?[_<].HHleǷ+_>:InB3^䥶4.j6&>޺C& jC)O,OX-l`=L>/n@H>sf?,+E]U#QZW֒Tㅳ9a髴G; \NDq?gLR KkBqxv0~CZ=$OO@,~M6@K q SYcba M`n6oRޖm+}>s1HϷ4bsJ޼/M/Y֛X=ks%}lRC 7Ր{1 >=xK6 ۖjvW^QO8ms s%#r,1E! ޘL! к$pi1"46|#F]jC FȒ*)ni%J[8<4br=ᐃȓnNp_{U;rQ'odA\о6]9W k(;rM?bF@L7JU_f6Er _4wKig;# 'kQiȚ0 Q9*Eߛ#F5햹cWlu4椹>կEU挺(t+mM NՔ'Ҋ;"Qgyq["@ݤ*-!9#6<^>E豼&BJV)R0`w?SrQ3㠴?.lH$/O[;va6}԰7w9]CS]/<~,s<,5&Il*腡iRk. DZPy#"#"H~L7w (>dggb´vkxP=a**R߰8X(RNN ű'Ӿ # ' H2m70ng/t0//Kc!7'AP/B(g5emik꠻ 2iz7liÊA c8ZW7lwL-&d Ar@!r@x HQAsrP1j %9$j ~01;cWˏ~fjek2:ˏޥKoB"ݿRb;N,f=r8Уu:Ne}d]TC$Zz\@'=ո}:p;Hiϴ$2m|*lN"L朾{;hC\<ƈy|kap7J4"G)@(jL町:jݿkF=SU?y_Zj2 ]}eIPσmt$qc+p->ǂ*Aar7 1ZxgDc3wׁ&>`۸c%RÀ@ Ce:%BЉk/ 9oҸ?D* 9c%#c3Sx?u֦YJ_$#W5>$rfF /Te4 W˥"| sZ_|JQPv5@oq) $ٿ5K8c.= GmED培r`#am v0dCrDkdK1ei4]:Pqgp&F f̿!s^0ҚaN·> ''6V=HmNx*ẰWZn]?tܛaU-^n09agB=(цaDu  w}I3趗ǔ Cۄ)֊r?,:6R"Ιac}㸪S!Vm ᬕzqͽS*`g'$3otlvTy@]Tq X^;d>v&ҕe}Ơٖ ! j>ꦍ 96[XPW` [2,\xISf{Cl>3$L^mZt+.viyEKߔl+MݠݱiXvD?6EQYͱ/٤4:| 咢zqu4ޅQUP䂚MEP"c{#Y-in_/}>˦⢬ +M\'){͂8f:Sb+VܿÖa>Q Bv޾2Wiu`Mjj:l}dɎXoxjJo`|૏V綡 @RdA Bpݶ嵀*K-4Xzdm?jL`T1.,(zn6%l/s+?IjPi׺a\ vA  k:P:rԓ8}w"QI_0൐xyyfʄ-KCoaV>G[`;%m&m%x({qr(E=J\OHPZ<7 O6:LĆ yr="06vwu+4+$j;C'O4OjQ(zXNiܾI"gnѯ?b >*#F.0uY 8B]%DHO(vQо/o(<"ot7Y+y[ZJEyx8*z|&=d ͒]sC_0hPƓDqyn;ASF'>RIꃔGN(Zc]q 3J8J.LR+Eq+c0.{eN1Ryivpa ZNA@v4ؘ߲VA0w=E"Wú#wK=g8ZVGaf/^ Si KqcXAғ.tdAcBsxT#xKlU wB]5kO.7osJZ/5vr>l'Fiq%@nZ)<Ε_~ x#JM _x(>+oKXYFޯXMK8DC.K$z6P8u z 4h}nxlR=/E; ,d(eu:>LV3D0pq!^"d+ Sث$=(WNmٟGf=~P|Y;q60K+*dHH1D9 q UE3x5"@C; {YBzCBAKR 7ټ%!`@6}>d-V$ɧ9q3tO++_}_]|NM 7]jR%,j _*Ӡ{yHt͕#n@ФZj͗[ſ= #EjbhZeV9aƵ,W:? Rr:lˡٕ'!OUVE{*<&˕}νCn,/kiں(Fقh`{jD5 DrK$^ٯ :l*ern`I; }g* on"9J/zn([g cd\4fM`eMlAZWO7Ew/buIEOg襭 Fq8qKXս1Tlf %eNr:\Y'oN1V~a@*/ @_oB@?{=z163!kUpT6v:$^nz:" q>&]_7&y5ŧ{"XB=2Ayt}AYe"Ǡ">OcTred}2‡1k諭I){sfV$c:ͦaҷ1ҮGUܚnI|WxKαB?fC_"f8vۣ܁ϓr^=5n*R71)r[ב$/tFN8toj2a^0^T7a8Yj_=4ӺǤk(‘alep wp+l}zfYjĭ… Lvb_mk"V=[Ky43-_bz3WjÖ'TbZz*3l gpp \P0l=<ъMY D8\4U:shv>$Ϙ<+ݠh3aT[*@)3jEV£{/u~Wck*B!id'~> dK5$߭8DKn㾽u>kM1#5QKa `Ado" MdS8hi>khp7)c0roGo &IrFО9 0u}ٱcuXξB𦖤7Mks5DRB_q_P*MswWsɪYf1VF>ܢ/92ަQ5k[;Ά :uW~ gʱ%5D_7,_lxhAM!R*[n0ߑǤŕbWN翕.ՃV0ߵdA"uDߦ`>+[`kP 0/PҿEB!E|R/Q;`HȣbW4ͶBY.s]Z\~!]Iwԋ}ΪBn$x9FHJxYX* CEm5kjVgQOʚ8tא%ކERQJ=zD^1M2wKdT?v /*zuig*ԿdTVf ,h=ٷrއBIt)lL͊PwEw@`X7q'ٲɦ45#C`Z9D73*sQ6dz.g7 \EPI7)6T Bbq#r|[ $dJq $Hc!֬9|E04hyv/qH]_RD~.dRM쯪6)6R#J'տqY ށIt$i'ԕ:0Fׂr))EPNI`;MAq<ۡ 6{sӽt\뭀SLc*H?Ym ;GǐW~x^MvaiWQAD0aNuL|׹a hϷoFty*;ϖ]K/>AĞ`,͵|g3}g.D)Zfl^PR݉87qS\j`fFgIiXߡ4ϵrIuWt+IY((njG+/́b:-tjuʰ O,~oψI}` h{\A֢i2 =l:SYDcJK ݾEtHk7 eI#lH/@]T)vL": >(F<L Z dREԍd4 ƭUrAZr ҮOHr^"Llt~lyR9AqKy4_h> ?&'`5ޮU}38rf{&-0_H!lO#戁+wiY%uye8Eܧ}='FDvܙeEoRs *\CO\S Zn:'yk#=Hsg g u'N:'^pmL,\WKPܾ3p]%[u ڐAMMя.M:\MzmM6$V [#Y"`oϋ_e8;xRܹګgA$n9XICߺ35k ئXyጬ`g ?4$XpFcVt -7V<19,%(Z=(;gR 5Z+shmSwoU6|v@luT? ൓C\I tCP $Efb5?@6dz a[cuiHȼbR?v$^Iϗ)V^Zආ( P K3_\gY~s\> Jb3 ț0,Kby 8̣yRm}/?m m w_67/nׄy-X梅 x1ÁJ,<}!">xDv)<R#Z8CMiWH|H7#>g:z'vT'-7(Qq.[WfK`>/YV9v Zfz )sYΨ+2E&)ڀmwKZ6l^g݊Tٜb2.˂]SLIi`z1kJY`T>2u 42헱H|WE3A-n,=Hy U_BX'W]JW=U1n.ż#FzSGCd]Z Gqx4J^Г{]^d\(푭!]Wn2tj>SX #7Dܿ>tB`wۃ.Y1%̃Ӊ^k0=Fp'TT΃W \{!̫3ZDM 0dsPn*r[:j笒%9yƒuy1u9@4fL Ԡ-o^bԝ 6%Ocpʞ{=IEL MT! c"g#ɠ] L"'kMcpefSO,K/c?q!d9*%:py[ǧ66kC̴`гwQEt6@:D-/ QFUs7ocNs''K'5Z>E^ـ|m 1:@ s*CiUOb}pJ?J>3K0xoE6@mOŠiѱ.Zyp9ŒdHkD՛ 32pb-S4nW\\Í'֥?bl= PHOIE;w wMn{oZ no4]TA|oKiuZR<׬)A/Y[7=Ǯ.ָ_{ȣߤ|]pËΙmHˌ{] =,x}-VUF`(an&4InE^%<5񧈰&vY@"3Y=#.<$>5<o ̐ENڞWplE%9FM3h`kt~i|yT>mL( Nbv7)jQ#2#2U7P] 屋Xߪjų)k 4#DQ}E, `̺?nK_3\U>Ғh \Oy ]9Á.ǵƼ! {U]tAGGiȠ'YwA řKt)qIC==ܯ4{ 'Cbߣh~\ #[i.K}>VyDrn i< ӑ)Z=Gw2Hp? P'PJy3u,gS3O'FMNCQXHoXmoI(~%3Fgٯ%%i)x-(p wVPmx` + 0~N~8_BݢA1M46@RCj{ȭ5)U12͈pnEP-{c3,W}Rԇ]/> V {hۘpޫ!x2$,E$=!u`*A~6CL&Z׌͒-٥f6Qdbҥ w9B !ȲLQMp]HTnh%#Os o_]HEBKqTݮ ̼*S{!j d_hug} F.=V@~+kcpL/؈u~gVcJB9j)K~6-l)p"2pkC& k+@Jo>j(5A>24KBкGSjW5"fLn'Yܽ>L韢!-Epܡ̨?\3)f>AM]VP o`#COF]2Tr ;w苛3Ґ}fPr2p^q(nKp-%*<}<Dq20e+fygogT,: ==pV'IWsR-|l:GK{*Z.jodM1` El6i9Ғ-SUW Wef)ewiƣ \^bѩ4:bh7Ql: ^{0S#Oy"D5?+?nܲCkwPO>ܾ̄-2.U<6j&xB6Wg\nV2 RfҢuz_|pkg]0?YŪ}ukgۄnaTg޽\""sʬ -,)Ja桴 ]S/6 U`fT`СX2# CZ134d(k"cd6ZJ9ϲumiYy @0 71H+m`R{^ݟȮ |0&\-Lt5=/ݨ҇ʧ#-Ԏ\h%!:ƙAf1Bs Z)8>fU'V%m>-Uaź4; }v'Q!;Fx)|

zu݂v_|UR7Z_52_P'\́䐵aa3O}g9W)cޞT}W+m1Cbn{> :$IE XUaXcOЙiPx’)Qt]驺s֥5ʟprJb:%NVDZ!X+9pZSQڜ\bv(W} &mLWTk:xf _-3, .hn:e\pD^P b 2V]e\tEraeo<0~+kp- ET0}OCXxVOQ+0=6_H k /9FVS*iG BI(U=X^ b3g)7&;jLyx-o۬tU=MQl?dvZ;!C&otf<-(C8sQJ#}^@8m-䏂g z&ĵ@ӑP:J2N#9oJ({R9`a [ kg;u!Njњʖt5Z3QD=QJ. H-H=!!$~3]PFFS_lSv@_|rjH߅9D-#xE=|m?<1\0ѣ5o#nߠ ! u| W ) /O Ak9J x[ѝx=c!qH4nAE32<}|«uw'{+8u\: _q,j_ۏ0fwbzń@`?P/E7yϦd r hiROUNd2rn݀lLuq#nR6EXL' msRKjF/Qpsz 2v\% ُkDӕI&.;@Ʒ9Mn3ާ8e\jAqe  NIo8~qųٱ R焼ww>$ x40!k[c`Ɣ˚?LNʾ@^Ǣ702(!"7(*=5{(UJJXCMfAr/)6C5IGU,d`+?e$9" @#ce1W[ M V{j΢m'a{Ig|ż_&^ ,ITG3U R]|HfiR=!NBnѾTt$C]h!mlK~%f_eFnGHI`bhّ9J.‹~۴$Q=5[y ݙ,t>BF(_ke[I BbA!Gy4IY<.x+oQ.ۨ!7VUJǼ7f; 1tZj'&L--{K$7KOO䦤wFWkvK^S2^Iޣw/ l8+=w%3exCa'[la}lM$NL1pv|r$}±;@۪+ -aP` ҭq̹b)g.vK3_cqu㽕kJQ $aQsQݴއ3ǘ'8GRx@dğ*H*T݄Ԑ#=,"yp,"PQxVtu%;b+.9uڔ<m쎜+Y-L 3MŇӊ S۲KUDIe]wՖYngiA{1]>bC/i?]C Yn|4)9 ME!Eo5܂h׺WQJGQ vWn3>j+͟/P\(Oٖ)C?E`H5~wf"잸R<|ľ(~aw=z/mq/a>8Xi5\Jy 7FfH %VI7jxz%[NC)>KǬE >86DwzkΩ} e@G3ca_&֐vMO ,xX}Ld^_T)6FUK(zfD5XPUxWMjT Χ٭T塳^Ɯ#;z4^gw 4 p6XD;[O3v; b}щar$ɨ X}> L W H`;ovE ~f<ѯls, U B%=hAQp,FXr8D'Fj=8YVzfX4w:0*ܫWQUYRx\v/@yliI51~6b<}w?^VgTJh% BeD8ԼQS\0%%I;p=9p,8G & Ʃgh&-Z?;2D&¹vDP="ԕNTlzŦ 4 x  8}2.z$V}<,K1Wne=k+i㰍]dG_طǣr_9owvoėzW췰Vg9vh`OSwJC#I>eq`B{LOάO+tN[)lM1*x:&ƺ!+To} e(5e-a*☦ɉFXH e\HE4C0*ihk;RZEVQ;1Ī!Ӓ?A&xD3?<5q{JC?E1 {ॄOʄ%3@ 0d:*!gm o٥(m15(\]]5z%`Sq$s@1Uּ&1gRȦ˸)g F:r+nOX,`=.% }0UN[;Y0g$7NƔHm" tji5p:,Sg ޫiNʩX}VUu40NQ@.y..*OKX.H ~^D"OtRߠPgϜ0@_87tK"&t`cЁUoj >KyPBRiXJ1N<95#˒ 2? k X-jأTR3AqoƫmPrԟ _ 1 mGLvGE}'%'E#T.]R|J)b7jDoj6ۘcSe MBpŠFcFvx:PH=*N20SCpr_,(AUKeqN#WF sJ D X#lif p E ^C{܎w1k _Ilɳ%