nscd-2.31-150300.63.1 >  A ep9|}3p;U|#╊9;IT;nV\^CG!; Z&/)&TxuKbf{2FzC"sV󄃫rfC؉ؼi+Ƶ grl`46h!>pIx?hd   4  GMU" D A    H W tFh<(68@9:!=b>j?r@zB݂F݈GݠHIX(Y8Zl[p\x]޴^+ bߞcGdefluv wlxy z"dCnscd2.31150300.63.1Name Service Caching DaemonNscd caches name service lookups and can dramatically improve performance with NIS, NIS+, and LDAP.ewh04-armsrv2SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.gnu.org/software/libc/libc.htmllinuxaarch64getent group nscd >/dev/null || /usr/sbin/groupadd -r nscd getent passwd nscd >/dev/null || /usr/sbin/useradd -r -g nscd -c "User for nscd" -s /sbin/nologin -d /run/nscd nscd if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in nscd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in nscd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/nscd.conf || : # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl && /usr/bin/systemctl stop nscd.socket 2>/dev/null || : test -x /usr/bin/systemctl && /usr/bin/systemctl disable nscd.socket 2>/dev/null || : # Hard removal in case the above did not work rm -f /etc/systemd/system/sockets.target.wants/nscd.socket exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nscd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nscd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nscd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nscd.service ) || : fi fi exit 0  A큤A큤A큀eKeKeseseLeLeLeNeKeKesesesesese2cdfafd373d24fab07018d0e95dd49510ea6c992b7be2b0611ab23bbc2750b579fe74962fbce2fa9b2a4b92f693b2fd42cbc2ed331fae268de7104879a72df879c9cec5dd2414dcb76d11e75903aa6fd9b7785c897cb9f853edcb140a71b7792858f28cdc8a32423a867b2268135b37632e2feccb9e5afa4c35dd7220663deb/sbin/service@YYYYYYYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.31-150300.63.1.src.rpmconfig(nscd)glibc:/usr/sbin/nscdnscdnscd(aarch-64) @@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(nscd)glibcld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcap.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemd2.31-150300.63.12.313.0.4-14.6.0-14.0-15.2-14.14.3eSe;ddgd!d dq@dtd%yddccU@ccob@b@b֜b@bb no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/bin/sh/bin/sh/bin/sh/bin/shunscdh04-armsrv2 1696505207 2.31-150300.63.12.31-150300.63.12.31-150300.63.1 0.48nscd.confnscdnscd.pidsocketnscd.servicetmpfiles.dnscd.confnscdrcnscdnscdgrouphostsnetgrouppasswdservices/etc//run//run/nscd//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//var/lib//var/lib/nscd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30871/SUSE_SLE-15-SP3_Update/e8a84cdf91bcc96e8c74cd0385e1c165-glibc.SUSE_SLE-15-SP3_Updatecpioxz5aarch64-suse-linux ASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.63.1.aarch64/run/nscd/nscd.pid' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.63.1.aarch64/run/nscd/socket' (No such file or directory)ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=90c581712657a241682e75042ad10a2af0b58702, for GNU/Linux 3.7.0, strippedcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.63.1.aarch64/var/lib/nscd/group' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.63.1.aarch64/var/lib/nscd/hosts' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.63.1.aarch64/var/lib/nscd/netgroup' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.63.1.aarch64/var/lib/nscd/passwd' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.63.1.aarch64/var/lib/nscd/services' (No such file or directory) RR R R RRR R R.sHM\Nzutf-8ef206d48ab8c66df460621e01e31424db36466ab68c6b807c0e5f86571dbecde?p7zXZ !t/!] crv(vX0o_Z<K N3{6zeik6^@@6Jf"i]ұ}y(p*dw(oYR?_2!J1͠y@}j)7b`PMw%FA)a4rN:grRׅI3*kmjbASs+A']1xrȁO1xh gX~Lfav1#&ٺ4lw?Ri0xxQ >,2ZJ[>EesurhGn0E-lkZ%P(9"tAF6Â3ucNt^fᜊ65kbQBvl@1Fhր)Jm !M E'/ssvfy((.Z*iEոJ. MJ' l&0[zCH ȂhkE gq|E0O*l>**C"h0֒RYbYr!½G'՞./"/xTѬU+aCfJ͒SccЫ G0Եa6F w ]_r!)A2$Z@3!"n*:w04UKvA?ӕ6q%Ǖ8ٳ|W elJuC c={~ a#2f5$2P /4ݣ8O;R[^8p]a}+r<~I@Yl LW;IWT4PyUuXfZkx=k^3C[% 'mB!I"C"Hy#8aǹ&L&:-NWbH_$(R1 YAvjQa$owh΀ os9v>| D9'$Zqr ,KANQ[7ׇ#\&XKwcq93h qä"gu簳 r-hKԱ5R܏e'M[J'+qo2=wdiXFc" A,#zCd]:8h#4(dχ g,M tNw]EG-"iud?![$R_ݫAt{~Î/\Ř<$X<'k <(ԅ4*vy=EEp[- cCW(cBH:lgjw^.__Um~ʝt-'O(N^tebTQ!Tf7ruO0H<ԋ,\7(e%.6ժ| ?r*-L.m7b-sSR30' r=0+(#fk]l.i)m3PJ~pCprSP 7 dN஗5^^!|º>^ 6$D`j,8 =QAHw:K }PFnYOc4x CvEN_iK6p#5MAeڒǶ^u+ ݤ^1f{̱lC:kC$*ݠL20ySJH@ɗG_lI2#f@EfwɋRpew}~]"qtDL =f!G(]}[ zo'd! *"rZe&HOOhj~Ǔ`EOBwwP!rHBҀEw*K\j(p .uBKlb,>W|fz6p?J2^rz{Sd L$ހ5mFITX2:T=Sk_!Dď~%#6'P0y .E_v]V!.#| [N080׆{DP'r,l)ꉃx1ߩsT%C]',+](Db]h\tutM䓶|sEzt\=$ F_@%z?'I]~*Ԋu^ ʧuXzqYςzLD: I]뺺4w}W&WpDFB(0k1g RAq5ҔVbyѽG\wayYuQ" էn+"և r:GwqNʚ[1։ QܣwSFjl+"H7q]3De!Lz)<)s4H%E'4\-wͱ鏕|g{5#lq`Klu܏ח*J^}f?$s4lC49os9_v䢻7" 8M*մj/*_[Du q m20:}ƳBfٹ xMp-ƹT*'A܊gIJj9 Y Mz-rJ^Fb'5. \/,ER+M@FfݞE$BtUZ8WtT7X4Pb Д*ir#V<UWt=#:֍* 2yK$%#bbPuʶO Tad[QJ!.>vEjAVYЖ1_%Bh{"Zog d9o°unp H*t%pxXCˠjZ(^A *]3?oGu-蟠;w: o9m6LHt<#5U-sYCcA}:g[ϒzqh0_cu5љWƙs$\sa9±V5'_ZL+6>gi7+}W LSHr[k\p/Pb䠕\{ ;TEA ցxH]ETjXYl13kABwZ]crgmq[ '"ܢUEQ 3)˺|16[BEŧJaF\xۃ80_Y(YE 4QGo _ r6qjc"wE̽z%bX fޤ5npH$ؘ>?*^ÊG9P1H^b@Wi]s_ţ$(-NzG۴ #,U͢c"{5 (|oEbi1 f_7vg.%4)8Rz]^q[ :?}2A|T_ORex['MYѩC9t]bYAfV!?rFS;ؘY;硲-?Vd`sW8kc&vX;BjC 鰲4tm ~wS6V S-"e16܏|Ngu=hfmc<ڐF*ϵ|r%=y]omWǕNOYf  d@΢ N̅ΛRbϐ MfJf--΍*18ŝ=sS]dD^) P>򮪵G Y^$fk pΌ}фɾJzA6bd+Vh~ >@* ! >zόn9-aMw2.eR9x-AWi~dUS w;;X0F y RBT@z'zSYc;ҹr~zMkGk^E^B"x+bf|; u/!D,ňU=P ϫxm&b^i|Yf"vr<~I$=% U=vj2gb]=0љ6+V9g7b+Ir /G t7CI@POx:@E¸YJt\mQS(,h ԃʕ~' 0T3uYl=l`-v!ASX/I yEƨXW8rN,u=NBWw\THɂU~2.4J!EI8Mh|Z o~(VaqgZGIGZ}/}FAW!ә,*[_hWMR๐?48*. D{9%9Ufź:gԨ$e>EDx/Mpbq a;#t~ Au64lhS͢JXO)o-Y56AsȦe|ڂDI- L\-C_'7D`[X I*i Ls [$)Lna՜ p:N (`h=DJeM%H->8 >aSx[7Xzy5KOͨ;OU({%L_h uL$0VS7Q LA/uu8i4^; Dh]&^yd7}VHg %CDbݻ|&;|c?pH5's,V+YK`؞8=㞉Ħ<][$גDVz{3ƻ҈WNdEn 9CqE9(q̱M+|vx}q`E߰I I}֓7Q{NvBK: CTވIkgd479aTaAy2?<Ѱ+zpI nI_6na5lCƃՓMRkm|6bkV[ʹ9p4i$%CBZ)uFLvH͟ыְlK6lkMP*3};1x3RlIB"hc3WA1{t/Jn!qy>3Kiе{w~74d8CL!Q3d FSמY*w/Հsydv7O ~P4ǪwtoGdC?wYH8v i輂%q2A`R!l$كGg[ u:{4QSpyGb KgHldL9cwŸ@܉5P)?(Hǩz dY {[*gFITrZ=?>Ok`s8 f[g.T@cf_bv];@j*hBB/6)O-Uu=Ff @ȫE@y^JI);лkwn1yWbϡQn]UXU%1gq R\¸BþWQ%&5mG eZQ%h*rQJM-nk7LS>x}ǫHS?ΧZBx*%ʰ.c8d~ר#5@\cJy,RCvD}h؉V i $ fdٟO>7w?gEf1Ww)06k tf5{ap iU @}ӹkLJ8|qL8c}߱wn]I /һVQ7'q#A#?[£ܧ 0L)t*L@h7Gh\ S3@j@ugXmf8q0Etid0EK2%Yniw |Q;+"*E\ԢOHѪYTq HUb_jȘri/V4= /Wl܀i(<\HKSWYKv< =9r\Y:ˠȦ` 3fs^hGBB$R]`U׷O^D7&S¹=QZ#vk>2 CWBDh%0@u6X6UYm9K_k20}bPw̅h N XLO@ ) 8WR9 f?-2DQ  ~H`ș(6Akd EFLΒŵG%gȽuӾq@4ZބzĂHF,xV$Zǫ}]A&r8 ;2SӍvPgwݔΰ>Eɸ''#`uw?FKTB}]Q_R a6YK%⁎t%s䮀1tȁ [_kLaA"/q6څD #;`/T{Vtz"bf $D667:y{ E:'j{~1Ux 0vSLCZ_]#Сv QжvxXlq1 A%+Wʲcf-WJi> NtLTi.1'xWM4*|*jxy5rx Z*0L_U- \ |za#jlDǫo4K/{^5λ؝S>86p4YznۯQv. "5SA176byj/!aG\XKg (=1ԜDj+0RZ#Y9,LNwG"j"taB(,c8!IMF{'s6l5 Z0@HU&F *إ25NS+qgԮs oI E%O.Y{|W?uy~3`/8CԇJ+nn F3at,ĵj2V~Z>{P[ 5nR\+-KsNW*;@dLȞdNmAgUv\#3>w%L ꄑ,V!5D[9&+β}U1)p_a; }e>0H>ƱuZhD@lպG!q$rQH)U64Д3D rW'״ j?'j*8dA1Kb~[DByE׋0&T!0*pgy"Pdypd7:hΪɱ6 'V[Uص7}yM^32.gI? 43&<7SC~K7s/#!@, 9$/ÔTdU7P}q6!w(P+ E slhW oW#Nri~#)>LD4.$|HjQe.nF4FC'NZbc#;]P[K zv}w}2S._h%##;`8"I[ ax$?Ѧ]8N#¡UGYіz><<z_K2!Ma>n CK#~A\޷%nw||E#1S[Y1+,G=r?F¾;L?0a!iKuW.UƔi(Zvݱtڹi!Ѩ ;ESERsCX拹:=W=]o_Ua|?(SLX7?TToSpsȆKإv V7] 5! C;w2U'k[L5>gVxϾc$OsBggA#tTv:xj&D^:wLآ.dhMwxj{7#%(aff ` jɝuY"Jݟ,<ֶTdQ4Hs{) g_{Y&R.zq|nFPU}E'"ؠ&W50~k9]-nwV av뱢N]m8fc]FHۘo2kO38kHS 5Ɏ 6 ֙unŴDGmC,Ǜэiy/ʴ׸b,K_8WFB!qAwg K,NzەjkL_Gv(vB*v]U:?t-X4yL퍖oɻձzw+[b_ xj&>NeB[~.D7To?#3tzBoP"` 4: Q< PM,~~_X=\tr*Fgh^ֹFWm7Awp-so_w~i,Se平(7Լ=\#eyN)oS|uK8Ԁ5pTG0#643󨏯][yHeq8pT@^!gtAS\IS-VU/5("8u^>ngp*kj h)mk=ײv>S֫צOsK3`l:_T ? T$-(]?ACێ~K*4*STx\V-{"F;-M*YCIJZLOÙKJ`bV /]T/#@ue\ٽkp ̟[E.J[ 0~ ZLz{ڗuI>b_7kܜULj5c#!rcYR&fr9qFAk.I%Q$W&X{C(:l5>Vͣ:/U Jb'HqbTs8@o۴#YgWM_i*Y{. Sj[IyS*|-Tr>ozeQ6`jVQZ l>XX\$HWsk؅F*Q| 6[t K?<.9we뜣y9Z+R[3^!nk yWI D$,{ǨL ,;U.5wq'dK4qy\ܶ~V Q/tAMb%1N٠S.maS(ZSz@埍nݍ8s001\fs!-w~dp.hS.><OalD r6BbS%T|sK)p\]VE,_I߆,SU>9#1@jZ &En3Ş/K >JOmge;C<.t_zabusؒ0@\ {]`Mϊ]:=''fR9Ng06}vDG NQ.3EV#Z];IK?ۭZV\rqZtσ!<2'h|݅&H{7T`I ӷx08w< |wETA)n#_vNE6'ޕLZ|Ӝ$9<ҒEd_F.VPc 41CCLۮiMXQïN[qF=Lxh82cG1B@<ࡔ/ddؗGtZ85-7+ |gy>e9([$/ev 'Z]=OYpٴ7 > a4W-;d~Rы}@&lnPuuTbM̶xK֣Q #N'퇪1$4>awBs]P/8\22Cn(l?֡A8a[j<7($@v8x~yϱqniUsa*ԍ+2SK$,-{2iMg9u+|x6\p>_|">'$96/pL'͜=jd|6>6_fϸKv0c1DC= )?];*PT؂Hʍ,?94FkV?dL2Jgtr ZB-aH sɟOꥼ]0Jx9JUgYbjTw[>rCAR3 ikVݔ rOj 0[o/C6'椞,?~oR5,9?#J>ֹ 8WỤ^S|wd$zԱH!@bNj BXܯ(w ,mbx GP4ugaN:04$=;$q2W6S7< *q\][$j#m|^Wq4i q+YbFU$;j BH4<>mf$1W<=mrBu7l9IbnıvN-Эoo|{+N2{LJyV~2qmu+ dc+!G8R=p2CUSycvc {v g[EI}6QU5vp$ԗ=akUt?d+DάCa4OÐ_y!}hcA?Y&peMw$4Rη@q"#NE;CVG q*a ذlN:ɳLHP4={̴E(tNDP&"eQ"XFxD_Y2a?%ӛ_adolcA:l N {0A}(!Uܚ9cZU(6eɴ@upo*Eh|X,x[mhA!4lgRUR}_ #E0°dO<]LHG j\2/p`0kԀ~ >sw@s[IVS9' ]a( WhsE0^'>6yŧenj:,C2!XӞnw.iU۔5X=aLsYSkQ2?ʇ`߈+,S?d Y&O{u(' qfo14Gyc3Z7ZRX.|5\-:0&V^65:uVE51?QYՈ2mi忉 2**/p0 :,3ӸWTv33ѣt=4 6Z!&Q|`Qt"0Se A?DF@^c>\Vx FOU q &B4mea9U)xf{3e/ V=t ܬI螱pE{$u*K=q;/*]б[{?kTg;.Гl?6R-to 7vO|P{KXP{sZBf[5a/*s/2(%.Neb +X}sX[3OQZD[-O],c9Xyz؂2O -4EXdkG.<3G'ۀ7C/bO pD4G$(뼿M]f ~&+/JgՅ2}!Bhl/V)BJ73YJJAz>*<($ͶkMwTI"^к#A`螘,_{nFec侱[xqi,5L(2NPD*<%#݇+>!~:%SKG^I!ޕkwwbޭVǬinC6CF(|{氐˟&LW;jx(a`.rC܌v`}Fk%쟌Bn Qk ,|H1eZHz^o訧3 lhŸqm31j"^"O.,lb| eY2N-C{*^ľ_9#}b܏YYjveI4/zrR_"M)RF/p^ƴ2z{2f|,/N%C&- bֆ'"}ʩmn3@݀yZt2,ڬ#1M4\El$}z.SY͜KS(e@w*V`*#W83eY0-߾+aYȺ[׏b)si%I_drI)2&hV$7: -=8PȬHd/P KWhNt4sbv4L TYٻbDAnLfEneB4̩DjWT#5=hZ(~&$5H`Mw1QX#vs>ڊ3\]PEA5 RX [iՕ&x:8jQA+v ßw JR]$x4l>3q9_bnT h^n`JxY9z,z]Lh^=Cb`{bԅ]*z+A05 ]羗}1T(ɍ0*Y4/kYEU#"<oe0R[ZT͐O۩iP ؀%#G<ýM0(+!_ j%9=kHĥڀ`,%ssSWSUZD:*V` ^zßcB|Li*ዤE:>ɣ=.2?q{կڴP.kQ*Dѹn#UM)SEuL0Ƕ?!x;8 LԞe~s3lL\BdRlG0BH*rFtnJ{2 =04G]҃Rjٜ?!Y?9A$GFmf(k^x~¥~mMBR4V&N]z9ˣT9]vԜGK 9II8޹DKn>B#HH=!~qAY _"wr=ˠun((䛖5LdaY6Rd=w9KN1.ԝ$ rS}W4E,UJ?mWF,򧟅 pn-tvJk!\>'lQ!ۻXks3A/v1Oa \^W2Sz#_M3BzhѨgfkQDE 8%n鐡^A\R,:EA\61!2jZ->q/"UJEtxW.0;y RSR{qݓvi'+$\[[cּ`>ht6Wܝ-2EhJU^G3=4!mL dNYbͅ9jR藒ӓm"{_fUZ.##/,)xykU&B>p8ۼUߑ)cPKՔ)oy@ֺZgi7:z9 6ayWRK__V]жZH۲_+fǭ{AL~ Oqq.Q[  \EU=]6ndbdr8Wyg.ʾԺ0;65Hq36YL 1{̇mAMęq_ﮟMkFؙ{ $dl26D3ѥ_QsyCK9:{: =m,~u Ѕ"9:F8mV-RbLrT 'L\Cu|j /g_K9q1u ~6KLE)T.Gy|{x{TP]|O֢NƽifN s:<@4c{YQkMmF9/< &u4Rz7G C S6RE2Kz8YZCJ^`.D}cBRa#PyhiYE4;qyLzrsăȌ-G>g*iΆg31?DvPD.]TyTaصv ?*%Fk=HWT:9>@*iNZA2AǃPۙ\l+h{@ATK~h &oȰo0Z˚0Na*1NZc(9_k*QZ%ʼn xӗ*fn;iy^э3ƒWlo wo/NWy\u rA>Ϫ, &.e)Ӆ7%*:_"!؄ JfC3ra觰 s=D*tJ]E|YbG IH?laAj,x " {FO#sCfFɞըF1)H{tcF7DE0uK:Ǡݖ%]Ovƽ${bJLsP۲L, dDV;Q!% 6%EHlꎦêB~4)y=qytWқmʟg> eb:Hr o{#u[lXW5y7֬xH czOWhXXVGH A}[` υRpFH*DFg0" j%+r_WO'0Ϊ*`2#xL%x09ptִPz_Rf>%{uˏf + {!0гK"WV/w|si(H(Lc*Ҡai (EoT,MPR(6зKlN5=EEx[֌){=C>v^"rȸ8CI5G_/q뭋IILS@qC>(L޻^?T1i|l!4bPAp ZGhWn ګͽS0le:܎Ɂ `^d=@Z?Oq %SKף,Z 9l&[%́|Ќ^,,mದ9:L rʭ)֌4uVMZAx F CwGXz%0H#ѦGL短wU-ڮ'4? l:V0|ͱ^N%]zx;NOzҸ`u557<f:]>)@35pG ]DS'yyZ]ƒjDp~+(v~GCbY4 OSb<5@]'S`ui(RPx}vgyfbw=3PXiK_ J~j}e1p-!\ǖ{ nߠ)'z Y :*G+NFi[4ze#G3p#՗3Si#uG)_Jr|&?Dc]lo$(+Lf_pShrsUz?񟃚/YK隯8a?@x'H:opɈOT7U" {Zd*`JVM1!S0~WML^ k( c꾚$ BAv 5rI,$A+J/`u2Pi*&t2^rfC/G{16'&QF ;}+ ϙkpscwoY*=^304g܌+n8oEAVzccoLa~rЂ#߁6QxhabCgAk}%?]gO~ʭ#-B Y0;VvX}--*H])^No1k=0&Qجa!J؏b\ t͇|훷rJUk#W?+wz X/ t˛m$7n(QM˺$WH/ݼ*oW,e`}__0;_]4LZV.;MOw-^1 u$ob~: #ZHL.㵀pOok8* N0kh2FBNB{uW3r!&wz2圾"ƋRjP9#$3Z8G%kV?Z$m Ȉgߚ@c>P],"C\kцp1UU =]=x[b`AıT/5π5 HFOkII|޺&;(MѢpϬ/#S_HģPWa0L$?P1TPn TV%θd~8X*-s@HN#Fjrf4yAmAw譵_H)H3n?gÎYG@v\$# :|#NL~)#< jQGK$4loQ(rsBS'f{yB} }:c|s'Irx3+;u8S~/B.q;}3G  EaSˑ2`dvЀlVYrt`1Dj_}>ٳ{e1 .KG^xs^ko ?*X$fBRP{v*\ Ue;&\*+Z,5lwH\٩IT S& /ʹRq7"ء(7Ḵ RttIaSfM8y#[tL} X-2hLw CGRwOÇ{4H)03t/l6CL5l*\|w/e~󥁌Xc$_b_PLcp50NɱUC6}nYQIpG 4n'pÑ:" " X aj+?-ӻU{MLw L\bUJ,ek>Dߛ lFI @T?)w3@s̃I007 e3buza%|=#]]VR?|>f@4o)Gt ѩf\|~pTzrgnnD/6(/+4~n#- X+Tt7"9+VLv˕Boo.q!ߡ Ӽݏ<5^x :zTa:H95k6u/8=܆K/xgtbtv\ fHdAbs·nPlƝd& a[Jf 7 Ŵ .lDa&w"hlF_6,^ :ѽ)*ZG$J*qQhCO5(ʸs wS] {'~ixCn{^n*:dNH*=]`JkL58p` k5)9AM0I΢+K#P܈DYKˮ%64WEQT%aIpRm"`x39K[O|A\iz;NQ70հpw@"/ϳU,dEfգ(`m\v\p[m _'lӞϿHK 8* R ԰ T0а2*P<#"ڂ;/ @44^Au@:Bvԇo%By%bcKvqRPMBLhnT2 tBR(ʼn7WH@qjV<ꚣfQy˫bR' i԰{Np9>5x#adž(ǿcW`l]-KuF+%aj &-_q "Ib18C\T;$ ` 3\ Ψ 6^AYP'[ G| |C4NN0gN;]ljQ(­6qtgm~KdaҥL$gY~E %6zh9hEӸ.( +i9Z՚-}4"5n#W3EETP=HצN80B&a؝lzԪIW~.3Jtr,A.H<?2DTǝ,'?)W`o'*!#QK3>k^jn0Q@Zlܭ(4q!gtQ3P0(M)T oX?upc r8O]l@b^%;8@[@ ,1OV*Θ }b|0߳aAš[w9xpf7waM뜼8lesnD1|]c$$$b@ I~3_LܮuɳQA~^f]# ӇzV9W@7Hڹ޺cIi,(:7&Nw'\j&.j髊gDa:P(˹Kz ӸP.Zъh+y2s $m_}}F-~n{?knq˖bS.a GzIWd^k0)Or>߁}uX#F.y z oT mƊr{" ̃CN~dUC\GR[=DX`yW-.޷L@ϮM+a]PcKH/;evidwռ,qY5ನ_|U =j N;YL -ٙtzDخ;r"4'l~Wb.d}50Ĝ(x9qocC6)j1M6-OeL:ymΝBB%DZ ԄA`KEX1m{5S T\[S&Hՠ Z? p lhRΆ^[}SQFϘ E T˂Iޮ 6 B5&T% 1 Úf)@(_:}voyr8yQg9) +r/r1|"e&FF;3)5rxtq\Q1A+csW]Z^2jШǡIk0W)'_ZFC+[G3u/SlL6C/R )cqsN0Q]'mII ޖizgj'/x ,WRnܪ3U0p2rیp>Zqk 40_hX~Hdd1+bѬzBjzM~_a}(+ -m^,&N@/HL$&ӻ 0' 4Jl־{ZSįvC8nB^]AڴZ: lW䓠P5/E u7=AP `(퟽T@$; g>%NEbhT=+fޕlw5ih'![/ߙNDlK)ur>G#&. `QD Tw G(ڜI4qy7Er,6`O}]//ecU Va<$+ VH)5w1CAVփo\bͣ[k"jTG(i 5=HW At`&^eVʙs{j,y3[#w,_k Vg*6  VZ#-R\̋:?]E`t>hZ}jzbynJqFxzɋ_:ƊUB(=YPDnjYm+L4e?v ywe&ZɜLGéb3u0Nf&M2.DcXǷ2OhvVmf*9xv1"!Pb\4C5{~BIk[ ԾHx/VG. ) m~m=fR}|t&wvJ~Qܪn9!!;},ĨL SL8e ͧ肇yQ#ذj[COTIN3 磄U_o{0TF*&=oJ/嘘YAii'NRyg,vs3y5a@P@ϑ LI[x,Hq  m5 b´C0/9h_4$YkR =}$(3:7Jy,`=!"mp.CH2-G k|%le5(iPЮO.(ji H47TrAi8X`]W1@7'E &uE܌h$OJɳjPDBsNSu\K--#/nF?0d@8"ϸUl# |ʲG-@(Glh N1y@л|hpf/wՇMzJz{dѓ'h:q0?Wj~ @?h-)5A̹gH7P+!b!a]tr"@kETO:٠喗?!:#+`G :OW1ʝFdb !~f,U7tR+-tB jZ!}{8Znces ߋ"ڙO_~|"XKnrVv\16f%cs.C,b]Lھ-(׵5^҉'DYD*ECEKpAڬ+e$0}e:9Ar*WyyP-qB(2fUڥ<{'{ W<)\*G0'?*{jN6 5{kXޙ%"qc=3f2Pʽ!e<?k$(zGfݦY`WIL/Rݨs40Ÿvo 4 JB/=r3dPp>|Lfm7 椖>4+. .8 ́sKޫq!d dx9ls3s`H12ނ*bDڜ\[ LJDK$-6й=![t `|U?/l(C?ː۠o:@|w&WY^W[hjicKc#9(ۇTt ?'\iL߃t[(}@Sm۔D /اt9rg&0 bLx3vXv)PEfV>M6n,ϲUs9b.YXrFFXđPX)]^P|hPM-[|F(5NJ#dWHAv|WȾ;l~ >y X*hG IuXzWC5Xq{@7>ݺ>AvKy0F㳒R< %"_;uh*uRLҬCհ;S^ʮ{W2  KM eZ`[^k4,)? ]\ ǵtVN A3.sQ)\|W/K6 <tlUy"Ύ(Ac }GzܝydE(M 5.]£a њ|.%S3լC@(TS=(_+!ji.z"V̼5p<ĕ}sQY|wXd^O'j ji<`EmfEK yapPcF!*s8=HDoTUnP>1qX y:>ʑ|u yo>4&,>Zu%A: H9V# *P<љn#{f+nYč-zʆꅸ&Ȩ,Tr`6jn|ao >D>ܒ^_CvpN<\G'[Li2 ¶bw>/`#Bϟ?2gRL}DؑBbabL `v2ciYd37- XH{G[\L8V x ǭܴoHvmeu/cN(DUm<*^lo2h Bv7~)vb8f.<K)zdECQX1l!5N- 3\6h]AЗ(NZwƉ(w#D[„S BR:JPeGEI#q~=~Dq+&q3@CQ) e6Kݶ7@fevogHuE;ٳE]UMF$b"2|n =(8m1sEMb%6pn$_|zROy]nUz\\6l8/ `|e$`|)& Dsָ_w.#elp?6DykT֟&I{d6,A_K8qٿ&syrU,w4=kՄΉh ?bq }gYI^ fbbN04p҂%DHIJdM^LE8ΔWq{|)x-ݒ߆7F8~IwRIYov9G n }#T\ 7B'ߔas~G?Xd #K(-k*blAZ5E_7Ax@Ah^ j q޵:l$0& ,p9Ye,RJ^uvPXd#Y]W&J2 @?̣b6@ڊ.X X_?T(bN^L݊vLNw?`]фw-V2s'e8Ҍ<1侠ү\r>>a &(yCaRO%V:OJ.s"n̢"˜WkLò_ f"рO*K%٬SkfH8]xh@K8J2껫A5y͗{VR9ijo]75ʄtdйpgeM`܍[n>IO;yYLDhwm<咐 %H#ͤU^vk7nA VGe^pF'܆滩F/,`^iTw5[PH Ei/IkEIuoel@B|S~^3irQnBtS٭+mxu؇}]%rM{Rv5SXq2QbMT'Bm ib}0q̂L,+^pͱ㕕D_.a$f\?. Op=# ^ə\" QP]\V !{'9:ؾGL.a9k`ҕd~Qq=`wM.(H^v5p4p탈ȦG<;]0.䙏x6Ā8.kƼkYq(.=jLJ,ZW_}XX$c=)0 [&B6'|;S/W4Kp"Ťb\P85>$7O Pş˃('!tfؼR=żFD4Уvi[6qf`x4 Pv4$^| ]*O?3.ŋEآ#g #6sqV/Ÿ &oKһ~3g(&zzf3 ZX%L`yofqѷNGHGua31Xxhsnkn)xhb<}6Ҁ3(=Ow׆i޾2΄17ȼ^>1湻\S་FHގ LD| gTJQ8̪ͧ`p C,Wmt]"rR}A5>lA+>DTDjT1Wۦ5 +};A1]Sh."Лpxk\a2bj <5:[4n- 3l ֒yi]-6:|Z"0S]^"+3f'8xJmRP xut ٫ѭJڲc3JDRz!#۾L, lF S&h âkj&_T^WR';>U_ CyWbT8w |]*%M!?yZKJ C̗s/b^]3 o1 ׸ǫˁ^JU y(T+N*03 ?ɫO0"`uil5:甉mC?v/1^C6JB5H[~,^Ԃ{;gka"PG-P aDD<00@K{b-4?iwgUga̯Up(]bb$v8Eh&؂m6,j#/h>E{ԥ; @ VtWl8aѧ ɮzTk_J*Yi#dw96´<j?*Hp{)pOVouwӱDO7 9{IV1ZE!tf zƠJY<; ܰƹ9aNd`yIi羈ode͂~{NJ*$}0Wו$M*dK3ͽ4Bן*'C^>JRC/PJq_sjwϲalq-bFCjcSZ{eG[ Cť8Q%~t6SQnkD/?OiGqKtG1i$`t2E'n|esL#SDǴQ@A:AP3Mn ~w(?$ ˢ8_1&BXf|<黔<&B):t-{{m09Y{7xՈvK+MDŽ3̀.Sx$ k+$Զ9K ^`XޫHZi]֧5D[0@2Ъzo[JjzĩJO)A~$.' H *#O1cNsFla"YD67O͎-[ЊJ\_K3JeEaX!dHYWeo_ٗx%ﯪnZzvIP?dVD-WZx(eThc1U3{f{|x,#Q}H2vif4Q2ӝ\;|~0:X$Wc}\=I^[eD !1юd#SD?ԋ !; ْ0g :Pl^]95bEyg:Ճ+"Q-zպ4 1?spfGn2i{j(nWuԷ<{ծήFgSgGp'!p&-90`Srlj!n֮ \m&_'׭qܞksDĬj9>q2L\ @B騐LbEɜ.ѝDyΙAͱьEG]e _I;(n]Z54ۣ.vlzhFd$)G٪ q>Im>/C3 ݥ^BP/(!r=! J};K.{;elLK riIp7&%OB$[Lw؟p`L!pcE"[^~2T6B1~aS9  l+-aw19#ul^OC'(~+kacҙ Ik/ognTZCZY^|<(z"8ސ#q8t$0z\iOe uehAҴDmXN 8~!,t ҸͼZՇэ8%} 2o?_sH욌QϻW5K+y{%bo͵S\@.Wvܲ_Ofr5Wo;g1|{ڃ)J:Xp7$z4.N Ũ+ᑭ%t>?փnixÖTWO02k\[f۷G bǡ0 S̓. ˵8-7$yC◟UtB\^NU6.\Q}l+Mx`.u)?C`Q˯|eyRltEOt NRcE@! O?xA}BcY4n:Դg7rVPo2t+P'!/*?O#ݕSt8. z/5ePf㍮ Kpo@ɩ;ءXIRܭf]J%Фe( t"h6+%!|d($q2o|/eaz](:1ʑP\9LP'Ssm d=tvF 5'3"O)Yp=<"^O!goBR:6/WdFęKQf9S4)d}^פDn]ϱgb <İ*Sk0-d2[ªQ#Uoü.+h2E c--=.;XwY9Q u0&(Byw mJLäO\~H5:w?>؞Zx(Ew ;Y;v1;!LcՖ"-ARtfeq6&o<6$3A5JL6f#9JIugA}hGz<(|"rgb2,Ξ7K&(ܾ|N6KPO0ϬY6%;:ZxbO8Es(O];Xrm&`oR0MqPj iP4qJqcV+8&I=:rfG}a4=؇-QzR%Hqu_ݯSgۜa`p&I~$3~=ab؎YTeN4xp5TD,*pW$J{l%"'n uϲMz'ts -(ԑEޔE"߀窋 ]`c&?j@Btѻ9BϲW(\IKè;**9T4;`6$Y{|YZo2Q\}3+빋 H@_l8*G2fźmq5fLx͛rj.e7[Av5BR`~.2{z9-?ȧSnK!\f얐#Z7%[N{ %LaNv;(f\`9<6y/YtYe3&]ݐE<-Tψp3dx_MHc-{S `voNUA#-\ex FnXEu}-cQEi5KÀOk˾^}AF"?u"@.P$WE=+2a0ǐi&3X\CIVWhRYbo[>gCen.ZS([1Ȑx+()Qh+Cܩ&|y C6RL(V-vIaEA FHܿpux'շֶòm6"yES)GS$U@DCsD%䬫ҙ8X}3uPw?ɫFHpDPAD%acj&^λdphB⭻p)\-dʱo^,&kE=iZJYk{0މ1]FV4lNMClYLC~r1#9E=g?`ĜO6&Nw-yP GIˋ.?]U@zbzGa#^2e )2'!Z]m;f4P w#F1'ArǹrUxvH/ГKjv0?#!T^(jIsb .>S a!ji;x-jW3Yj"7hU AI^6eN3 }ٝƏjiq&~JN'},xriӿhԜ@΂9B" շ: n ?F%4v4tձMHvCK͞O@]U`mLnǓx}2t+QeJD=Mrz %3CUقW8J@z=LZsqzMbb-W 'W=Do97؏^Zat7Άja?iƊ1yP%g!C'<HA@>uN=jEDaIY&m_!֝RuB[ƉQK7aSf8;nbR e6~/$<jqFeD󿫁K:NG\xȒ-@S5+FmA PWߠt@TuXw4L~)hHf1SU:66&Lu!&^9TvZwٌMSG7e6 [DU+uw^Zw`:?[E~mnԗ҄.ϼ@ĉ8h'C2ojpgp[}1Bkσh 7rbR2O$Ո׶#UTQ'Qcp(v n/$ U BR~\U-A|8~ -s=J}tBTq@IO>*:ek;U 9˞ukBk 1:) Rg_(f%m6Ys3"?Q[hh*@E:A-RVQir+ʸ/K4uz.7ss} {٫~2iQVRt%J+ЈUݰn ^!Qnv?67D/~&&!зMPr?|=ej=G:bǰM$2b,H6flf)R.5ˈnwX*:S/(x:h+|'tMRzRS(ı?׺q3D>qN((ugs #.e=T7ux_S,CK*ϱѯBodsh.w 8ibGcit Mve%,tIy-}T^'8#aS"KehVSYr H6)?d Q'O .4 &RW[:C5y Cb{sA'@DcIgZSgSύq 3EDV6OLq2G׀+v.õb `UtJ@la1 pa3_Z.2O+\߱֜R/ԑMdZ4uYp3qV~g?gҍHNF[DiW^01H$,-fw:p v0,Z9f16h쥋@Ͽdrw}v@vz6W@[C/DB ;8K-$hwpX55kb32f:[JР#w!_A( XIi>$?".#(t7$LEZGc;a)j\: ?i:)0pFp7E %Kˏ!a[YZf.O kg 6_~cЉK-3r T1ac*w4M׉?.a]I9ϸBI3C3ړH־a6'9H8JUyY-OF6N= j Mƫ#&e9 ==/dQV*s jY8Q,Ԃ-;'XzϠ(Ae ͟Ĩt}BF T|E?ߴi"kқm ޸Vibc$>S rt /;%Gܰ+?YtJ̲LRE F cvAj@ O'_{8Yumqr4RgN8]F;왕kF}NxyK[ ma"J=15K | xNǰp?1@]o3rށ= 7_dSPUL4tՓAszgsdbn%5JȊ]f ƊybU$ 1FǴሽ୨D-dvvZķ}|qG1mT~x1цm kcPX(XgR`8jS}jU&r Y{LlF T.p!+PUHvft9ӨSOJxQfB-o1ul[0cZ GL9ʚ;$;+6V/~h1;YY w,Is{eHh-b(;]<َbwtxxɱ5]YЦy] _ѺXAvЦ0ym QppK&H"\P旾7mSho:MXly\x`O1j:Tj/ s5:iƐQNxQcԝ,- 9M$E𞼯_O܇et@@`6]rdՔy騶J㤻H:_07qɚY2& D@kk+VjlKR_!V XBJ8iXœ/ܶ3c8d7]K ǀJ6:vG@y܊ #ltֲHM'`cdl(* y1'u%q*gFJhaD"Ep]rNzoxkH3e}hMnNԭkrU[ ~#%^ _b+7U=}#`]ѱl0 d[^} oF_|SY^PL=kB,$xtj9[;mAk!ܝ"'Vż]h3F~5JއjԫqMjK"5L[_ZXxfvy߷^Hjb 8xbD)dԇ^BsS˕hIO7[^XP60и;}CiA$E+6po]6Vi L@!]}۟eN9+cYH &U{BPOl%(C=3# s9vM 7֋7M7gNy<5۔o#R<^KLu[DB~<adHfr2tDjr5|Qf|Fe1Bb8~pR.Os\m_]ƒ\RnҮ,~C5t2z = @SvlPb4zM3љd25 ?:hsMj~hx@笐EMBQֵQ:odP3\]w1K/r(# l68W?̔=o)\:&Q%d]DΘK#M3쥪vD&L̩SW' X>!5摎hN!=8A|Qқݎʴ qe]m#WEJ>e#x:|t&~k/5Uf.8tz7Ikog5PI! "MzG1S}RaʐwK|1}FDS1*oU\Hw6z(lp@\&-0¤mTc6ol^!qi R*g+W*92u#J wm\/Bz.V1@Zb ?m=O9 ZyƅzL%.iO*httN&TGmor '.S܇u5F$5EM&Th#X(ݖ܅^=4_BHzy;2 f>2+#z) WkNAaj1f\Ϲ&Yuw¹7\ȨTl;%Jt]s}b_pЖB'<$Fލ)6ZmPƆ[I# Fƕz#a<8tABg+ ;^ RWY4mPАx@>߮wtc\:>I{^ ;RSsW'0)Pu_4P㮚یX|Łw›e[-i{I (,&2#aQ8s6/hL)ɮZ+yOu$ ʰs/!B1 IF4sɑ<@'Wqd*?53woKЂMrMO*'&WXۺg>:WN9㠝-8{ .ߤow8˂;&nK.GdL?dɼ=%(vt 4R_Łe1#%()ޝAUϜCU&A}⽬ m3:3o@𳚤7obW}BkcDi `24zv ߭iی,c;a园yO&c>AƂ x{X,V]9B_g>;ī}Ś'C 6); >9[ zS+,vq^t^< (dbыkhZj9ߢf|cX%fICFZDAǴv $|FdYSR޾.9fY(,TX >&jYvb%o(ρ h+4M[Zdf$krGǮ7yǖ b`#no2k[,4Hya7UIr,=-zKQo;!Aޜoe*(oQP4hr%K݌|͟/9aMuYGpucuZ~0dvr+lj4#[hZn?KBTe1f`w W _t;o}^n p =jo#9g.f d[ᴖ@JqqD2 ##O-(G 3"X0=t|6cnR_Zː?UjU5=lW-}*B g-0}!oye^5:8ȾqC8&]HC r.dpm)zUY@sdΧ<_3v1)a\ϼ)}^Iu'{H\T0 &WǯJ-eH2!&/e7:Qg6]!jMn&Nx;` L1ȗ0ɪJ>2oے/Up6rsP7oSjj7Rճ7ÛYuc}6neUiah HYD /Z5`c*&5aWmbTQP.uW?b.2 Yhۿ";}q;N#y;% jc`VR|Jnv< {᱀"T\8kytC>c<^^V 賕{v%>Tәp/ڱ|Β(qD'B2FDPuwﺅH ^j_%B{bI#;m`"ϓ!Uݒd JB3JE} l$pdC w@fp,'27vԣȹ…5ZN뒁SNP-Y$^H,YWpƸMjV!7A8zY#5&XS w-dXDPe`l^wFѓOge%`SҀWW\xb:Uq C'\ ^e[9 fg}^C/o~Wl+mCTrg72z֘!L-M{ntUx8%PcpoTx(뿴еttT0=={>F˓A ꯺ڒ4ZaKAyk+˙s>4W%3̖#[JSQ$Q ۣ8Jn 1 ;phִ1mYxSx'KW;6`f'lgݓ(>},4\n0jdk\v9 e{ot!;9 F 6c<@! p2v {=0KVi4X'G:&&8>\U:\B>\hT͕RBԢXML=r&ᬹ|ަ`ۅXWiZ#‘%HMNC5 "9MRhh`jcq5 ~h+1ܼw/P*k&\%+x1;^ZmS"B{ڍA270 x'Ho"-:okESJi6Rܗ=WA`})y#yFߕ7M:A~b J}OdBSDž`-R(1mhK25l8GgtBD؝NJ3Ɛ-%L%y\1xdmk"q/Mۈk&-i[<W~ -$]~`bouɼ/MmF"y d/W@O{,nEʞ&~R,2(+"` ōk!52&;ˤwc3GiZn%rixwlU4kπ{ٔ<3v yykj`n )9!j>Q0LSϵöUi-u'P^K׉7+Y]5;d"s;_hجՄHVJgAԶӎk٥4Ƅ キK(f0x[ݖC(J :%VFߖ#sڌߜ ;_|>⊋׍gi6 -ܠK~?X+jE1U_:#Ll-;XF~{&z0R^JݸIOz;Ȕ Dw3LUEe=;QM8clUIH:?y!$8MO}m3̀sXfXj.AoxUWF~)䪮/uf4hI&Ժ̌]"_ZΚHP+ 2`-_Qʦ ~; &xeK Nq@כzCeA+?#4 :]+ rğ2CrK*3y͗P;B aV߅uPrz껳GJ=$fOC ,Re|PCЩr}wY3q4=LK7=e:gT7ZҎmQ C!%& zc1JiWfެ"6\8H{ˌٻjkI;z J}G͸ g 鍆V}汋0ۓꘈd@Kr&FkG,ay?>/QokyB\NW!2"Tٻˇ9y\::>E +>L!]vÑqᇯ"۱S<.p0nKLXRݤ|Jo/a&qg r0{ \h %>h9kd*' "0"-xX(/sC5 VV++UnΪQdV.*6[OIjWcR;JZ9;+ȥ$kF?"I{3ijGg,lC"^Bd5Ÿher'sR^8Z7RʍM6tHLthl+@<#ǸscZ) aX|ވ#b4)|?v^.04Ԉ="tRǩ9yׯzfȕiV)E jL^\@@ (X_q5(bϲ7#mPJA8LzȹΠzIDPX7+D oH$Jy;$W<Vn[l0<..4oW$wÀשWtV is~ѐ*7p%mw6LOF?}*6w32XI<,qua8A]dbe˂]ɖ9_h ?Irj[miz8PXO E' S]{ifC>E6K͚ )agO%9b\Xinxz^!N+}A4^AJ'A`b2p9E0/83s]t xti1橘 DOKAkƍChQ:-rLkY{tB8Yag4{gQ`|YǠ\3NW0̑ Pzhya)A_3^ث{M?$ǂ!ch6mH+/@bPvacOm A:L-B=dD|YκDЌZ&؄pU'jbiF9.o:[ ?(gAoׯ^=М &p[ Zs*2ٟﾁ@=ǭ\ ߤ4T^S 9y7جyWX!~lQ9(B`:Ӄyv`$:6* _nEBjYba%EԳϧKgwT" !' w>M<ˊs] IH@M5{:TسOMKs ˥'^d}ͯ` M mH$Ex5 wC$MFV0{O+7mEF>`x%\A٨q kWZ~ez-cEN7z&OE7qV࿻_ ERD8f2SсXjm-0Aі\*5cV}%qD|fn3]H>8i̛("kz Qv"Ni2LNK_G>N3AԜᰫ]C̙ .QB4[Cm8ƻ5&"Gw1@Ȏ>75XЖ6rdb؊X?7oϲUGPt׭PGJJ+i~Be:@"Zԫ#cUF@Z#=%S:it',{R-w%KYprV?N̓Q{7ng c:9a,9o1vװ81Aн <8o ЩB r6.9hj Iq%%O@rG+0UNJeq]:*HM$h2m M&P&6=Ƙ*L >* ئ[7GZ\-hkIpI Gλ9?ASO9s  }9d*B1L/ [=5"[iz(Yu@|nQ/ZĈ0K-뎖'TrV#J m:)6YޒRM4 z|m39qVNv M6g=UrfK1ڀB[(5K>HzMSyu'SV0RN~Q.pg@;ME%VI^n*ƴըh(KhFݣzŃqvfW[|D6~g\Ѐ]xŒCBĭEsk1,e(JgxhՌj88>%ODeOA\P*Nʞɺߡˑ%"O]*!FՏT % "[sD T+͌\T$/ #= c| Eؐ?Ȓ|8롆.۟"C[x#L:rso;u:Nn5(7c~? #iwL3$ɮ kJ1Ӭ:|Db"{U`tp=<*kPάPb)O,xlKpg2pu!E-R~cb)_'l?q7 *9Mb*\wA)Lz\ЕNKpez~#\5!Aequ׏굯,j02֜?4Q?-jIFKZ>bg+*w\5vޑ#| a #Qs0؀A'i'x_vAkJNB  <-O{܍_^Pz3A6Ͳ;x v:8䲣-wȍN;':J4##حCi9(