nscd-2.31-150300.26.5 >  A bXp9| CIr +xBQWAv|Gq΅ȕLW%Nwߖ#e ,ă0X72E(=7M! x?M٣4쩨WeQ6`H (ٺWq;z:R\^N+'!][XNQ9dR:N0k|c9h<3LzD~[AOs( d~ sl??`zw!E_>{b҂e66c678641da6c2bcfa5f2b803daacd6173467b3a1db52f354bf2aebd3247994de20f1a69fa6707e31f35e2804d6fcb7ab98e7124bXp9|O**Og eOCe/KbAP xg.pxsNhE CVGC8r_efJk񆉗obR U Ң!rDS'K r 觀x ĭluzK;V~;Cfs*,bM0S~WqEx`P$#6m=ӞK[¬w"Wf1 1z<>pI8?(d   4  CIP ? <   @ O l>`"X"/"(}89: => ?@B%F+G@H|IӸXYZ [\]T^ b>cdgelfolquքv wx@y|z$Cnscd2.31150300.26.5Name Service Caching DaemonNscd caches name service lookups and can dramatically improve performance with NIS, NIS+, and LDAP.bV&sheep12SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.gnu.org/software/libc/libc.htmllinuxx86_64getent group nscd >/dev/null || /usr/sbin/groupadd -r nscd getent passwd nscd >/dev/null || /usr/sbin/useradd -r -g nscd -c "User for nscd" -s /sbin/nologin -d /run/nscd nscd if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in nscd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in nscd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/nscd.conf || : # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl && /usr/bin/systemctl stop nscd.socket 2>/dev/null || : test -x /usr/bin/systemctl && /usr/bin/systemctl disable nscd.socket 2>/dev/null || : # Hard removal in case the above did not work rm -f /etc/systemd/system/sockets.target.wants/nscd.socket exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nscd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nscd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nscd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nscd.service ) || : fi fi exit 0 uX A큤A큤A큀bUbUbVbVbUbUbUbUbUbUbVbVbVbVbVe2cdfafd373d24fab07018d0e95dd49510ea6c992b7be2b0611ab23bbc2750b579fe74962fbce2fa9b2a4b92f693b2fd42cbc2ed331fae268de7104879a72df879c9cec5dd2414dcb76d11e75903aa6fd9b7785c897cb9f853edcb140a71b779990d566d214c74e8a04194202da845aa8fcf2a038b0447671125b073ffceb62b/sbin/service@YYYYYYYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.31-150300.26.5.src.rpmconfig(nscd)glibc:/usr/sbin/nscdnscdnscd(x86-64) @@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(nscd)glibclibaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemd2.31-150300.26.52.313.0.4-14.6.0-14.0-15.2-14.14.3bf@aa@aZ@a@a@a0`ݮ@`a@`H`H`?z@`@_T__/@_O@^)@^@^{G^g@^`^U @^&^]@]7@]|@]@]:\@\\]@\@\|\~d[[ͻ[$@[t[r@[qr[^[!@[@Z@ZJ@Z2@ZH@ZZ Z}@ZxG@Zp^@Zp^@Ze@ZKt@Z1@Z/Z@Y@Y@YYܶ@YdY@Y@YY@Y@Y@YW@Y@YJYYw2Yp@YJ_YA%@Y.@Y, @Y, @Y$$@Y"XۡX@XWw@W@W@Ws@Wk@Wj}WYZ@WL+@W3W0{WW V@V@V޾Vm@VIV@VŲ@V`VVV@VLh@V.V$@VVZV VUYU|@UAUȒ@UU@UU4@UUv@U%@U/@U:T@TPTgTܕTء@TO@matz@suse.comschwab@suse.deschwab@suse.deschwab@suse.degiuliano.belinassi@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.derguenther@suse.comrguenther@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dematz@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dematz@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dematz@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dejslaby@suse.comschwab@suse.deschwab@suse.deschwab@suse.deidonmez@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.denormand@linux.vnet.ibm.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.demeissner@suse.comschwab@suse.deschwab@suse.demgorman@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.de- Add s390-add-z16-name.diff for bsc#1198751.- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1 (CVE-2021-3999, bsc#1194640, BZ #28769)- 0001-powerpc-Optimized-strcpy-for-POWER9.patch, 0002-powerpc-Optimized-stpcpy-for-POWER9.patch, 0003-powerpc-Optimized-rawmemchr-for-POWER9.patch, 0004-powerpc64le-add-optimized-strlen-for-P9.patch, 0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch, 0006-powerpc-Add-optimized-strncpy-for-POWER9.patch, 0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch, 0008-powerpc-Add-optimized-ilogb-for-POWER9.patch, 0009-powerpc-Add-optimized-llogb-for-POWER9.patch, 0010-powerpc-Add-optimized-strlen-for-POWER10.patch, 0011-powerpc64le-Optimized-memmove-for-POWER10.patch, 0012-powerpc64le-Optimize-memcpy-for-POWER10.patch, 0013-powerpc64le-Optimize-memset-for-POWER10.patch, 0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch, 0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc improvements (bsc#1194785, jsc#SLE-18195)- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542) - svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create (CVE-2022-23218, bsc#1194770, BZ #28768)- Add support for livepatches (jsc#SLE-20049). - Enable livepatching on x86_64. - Generate ipa-clones tarball artifact when livepatching is enabled.- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch, 0002-S390-Optimize-__memcpy_z196.patch, 0003-S390-Optimize-__memset_z196.patch, 0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch, 0005-S390-Add-new-hwcap-values.patch, 0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 - GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify (CVE-2021-33574, bsc#1186489, BZ #27896)- wordexp-param-overflow.patch: wordexp: handle overflow in positional parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector support in memmove ifunc-selector (bsc#1184035, BZ #27511)- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition fix.- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the AVX2 accelerated string routines which cause HTM transaction aborts. Instead use EVEX or SSE. (bsc#1181403)- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache (CVE-2021-27645, bsc#1182733, BZ #27462)- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument pass (bsc#1180557, BZ #26637)- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within libc.so (bsc#1167939) - iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224) - iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923) - printf-long-double-non-normal.patch: x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649) - get-nprocs-cpu-online-parsing.patch: Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)- power10-support.patch: Add support for POWER10 (jsc#SLE-13520) - iconv-option-parsing.patch: Rewrite iconv option parsing (CVE-2016-10228, bsc#1027496, BZ #19519)- Update to glibc 2.31 - glibc-2.14-crypt.diff, crypt_blowfish-const.patch, crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch, crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch, powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch, crt-nocompress-debug-sections.patch, resolv-context-leak.patch, dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch, math-c++-compat.patch, remove-nss-nis-compat.patch, eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch, assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch, dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch, nscd-libnsl.patch, malloc-tcache-leak.patch, falkor-memcpy-memmove.patch, aarch64-cpu-features.patch, nss-files-large-buffers.patch, sysconf-uio-maxiov.patch, glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch, spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch, tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch, malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch, fillin-rpath-empty-tokens.patch, getcwd-absolute.patch, memalign-overflow.patch, stack-guard-size-accounting.patch, libgcc-rtld-now.patch, res-send-enomem.patch, glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch, realpath-ssize-max-overflow.patch, localtime-2039.patch, math-remove-slow-path.patch, aarch64-hwcap-atomics.patch, glibc-fix-aarch64-build.diff, absolute-symbols.patch, x86-haswell-string-flags.patch, pthread-cond-broadcast-waiters-after-spinning.patch, mman-map-sync.patch, mman-linux-map-shared-validate.patch, nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch, getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch, force-elision-race.patch, regex-read-overrun.patch, regex-parse-reg-exp.patch, 0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch, 0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch, 0003-S390-Unify-31-64bit-memcpy.patch, 0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch, 0005-S390-Remove-s390-specific-implementation-of-bcopy.patch, 0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch, 0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch, 0008-S390-Add-z13-memmove-ifunc-variant.patch, 0009-S390-Add-z13-strstr-ifunc-variant.patch, 0010-S390-Add-z13-memmem-ifunc-variant.patch, 0011-S390-Cleanup-ifunc-resolve.h.patch, 0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch, 0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch, 0014-S390-Add-configure-check-to-detect-support-for-arch1.patch, 0015-S390-Add-arch13-memmove-ifunc-variant.patch, 0016-S390-Add-arch13-strstr-ifunc-variant.patch, 0017-S390-Add-arch13-memmem-ifunc-variant.patch, prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch, ppc-tle-htm-nosc.patch, posix-Add-internal-symbols-for-posix_spawn-interface.patch, glibc-2.29-posix-Use-posix_spawn-on-popen.patch, backtrace-powerpc.patch, pthread-rwlock-pwn.patch, manual-memory-protection.patch, ldbl-96-rem-pio2l.patch, dl-sort-maps.patch, dlopen-filter-object.patch, glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch, ldd-system-interp.patch, abort-no-flush.patch, fnmatch-collating-elements.patch, nss-files-long-lines-2.patch, iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch: Removed. - long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch, riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.- nscd-senfile.patch: Fix concurrent changes on nscd aware files (bsc#1171878, BZ #23178) - nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878, BZ #26130) - syslog-locking.patch: Correct locking and cancellation cleanup in syslog functions (bsc#1172085, BZ #26100)- nptl-setxid-race.patch: nptl: wait for pending setxid request also in detached thread (bsc#1162930, BZ #25942)- glob-use-after-free.patch: Fix use-after-free in glob when expanding ~user (CVE-2020-1752, bsc#1167631, BZ #25414)- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter object to work (bsc#1166106, BZ #16272)- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)- pthread-rwlock-pwn.patch: Fix rwlock stall with PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861) - manual-memory-protection.patch: manual: Document mprotect and introduce section on memory protection (bsc#1163184)- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC (CVE-2020-1751, bsc#1158996, BZ #25423)- posix-Add-internal-symbols-for-posix_spawn-interface.patch, glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on popen (bsc#1149332, BZ #22834)- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process initialization (SLE-8348, BZ #22685)- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ [#25204])- GNU1815 - Hardware support in toolchain (bsc#1151582) 0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch 0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch 0003-S390-Unify-31-64bit-memcpy.patch 0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch 0005-S390-Remove-s390-specific-implementation-of-bcopy.patch 0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch 0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch 0008-S390-Add-z13-memmove-ifunc-variant.patch 0009-S390-Add-z13-strstr-ifunc-variant.patch 0010-S390-Add-z13-memmem-ifunc-variant.patch 0011-S390-Cleanup-ifunc-resolve.h.patch 0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch 0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch 0014-S390-Add-configure-check-to-detect-support-for-arch1.patch 0015-S390-Add-arch13-memmove-ifunc-variant.patch 0016-S390-Add-arch13-strstr-ifunc-variant.patch 0017-S390-Add-arch13-memmem-ifunc-variant.patch- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined behavior (CVE-2009-5155, bsc#1127223, BZ #18986) - regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169, bsc#1127308, BZ #24114)- crt-nocompress-debug-sections.patch: Don't compress debug sections in crt*.o files (bsc#1123710)- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig (bsc#1117993, BZ #23973)- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new Japanese era (bsc#1100396, BZ #22964)- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use the correct order of instructions while maintaining the robust mutex list due to missing compiler barriers (bsc#1130045, BZ #24180) - getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4 address strings (CVE-2016-10739, bsc#1122729, BZ #20018)- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590) - mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux 4.15 (bsc#1126590) - nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast in coredumps (bsc#1063675, BZ #22153)- x86-haswell-string-flags.patch: Fix Haswell CPU string flags (bsc#1114984, BZ #23709) - pthread-cond-broadcast-waiters-after-spinning.patch: Fix waiters-after-spinning case (bsc#1114993, BZ #23538)- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ [#19818])- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils newer than 2.30.- Add glibc-locale-base subpackage containing only C, C.UTF-8 and en_US.UTF-8 locales (fate#326551)- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to HWCAP_IMPORTANT (fate#325962)- math-remove-slow-path.patch: Remove slow paths from math routines (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t (bsc#1102526, BZ #22639)- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing 2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644) - realpath-ssize-max-overflow.patch: Fix overflow in path length computation (CVE-2018-11236, bsc#1094161, BZ #22786) - glibc-fix-avx512-mempcpy.patch: replace with upstream version- Use %license also for COPYING and COPYING.LIB (bsc#1082318)- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)- Readd nis to netgroup and automount nss config (bsc#1088860)- res-send-enomem.patch: Fix crash in resolver on memory allocation failure (bsc#1086690, BZ #23005)- Use %license (bsc#1082318)- stack-guard-size-accounting.patch: Fix stack guard size accounting (bsc#1074208, BZ #22637) - libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during pthread_cancel (bsc#1074208, BZ #22636)- Mark source0 as nosource in non-main source rpms- Add systemtap-headers to BuildRequires. - Add --enable-systemtap to configure arguments. (fate#324969, bsc#1073636)- memalign-overflow.patch: Fix integer overflows in internal memalign and malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343, BZ #22774)- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit (bsc#1070491, BZ #15142)- Avoid duplicate source rpm- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)- dl-init-paths-overflow.patch: Count components of the expanded path in _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ [#22607], BZ #22627) - fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419) - powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420) - malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)- Add _multibuild- glob64-s390.patch: no compat glob64 on s390 - noversion.tar.bz2: remove unused source- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ [#22273])- math-c++-compat.patch: Add more C++ compatibility (BZ #22296) - malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ [#22111]) - falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove for Qualcomm Falkor - aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling - nss-files-large-buffers.patch: Avoid large buffers with many host addresses (BZ #22078) - sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ [#22321]) - glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804, bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332) - dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in _dl_runtime_resolve (BZ #21265)- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)- Drop glibc-obsolete - glibc-2.3.90-noversion.diff: remove - reinitialize-dl_load_write_lock.patch: remove- nss-compat.patch: Move nss_compat from nis to nss subdir and install it unconditionally - nsswitch.conf: switch back to compat for passwd, group, shadow- assert-pedantic.patch: Suppress pedantic warning caused by statement expression (BZ #21242, BZ #21972) - math-c++-compat.patch: Add more C++ compatibility (BZ #22235) - getaddrinfo-errno.patch: Fix errno and h_errno handling in getaddrinfo (BZ #21915, BZ #21922) - resolv-conf-oom.patch: Fix memory handling in OOM situation during resolv.conf parsing (BZ #22095, BZ #22096) - dynarray-allocation.patch: Fix initial size of dynarray allocation and set errno on overflow error - nearbyint-inexact.patch: Avoid spurious inexact in nearbyint (BZ #22225)- math-c++-compat.patch: add more C++ compatibility (BZ #22146)- Remove rpcsvc/yppasswd.* from glibc-devel - ld-so-hwcap-x86-64.patch: add x86_64 to hwcap (bsc#1056606, BZ #22093)- eh-frame-zero-terminator.patch: Properly terminate .eh_frame (BZ #22051)- Disable obsolete libnsl and NIS support - remove-nss-nis-compat.patch: remove nis and compat from default NSS configs - nsswitch.conf: Likewise- math-c++-compat.patch: Do not use __builtin_types_compatible_p in C++ mode (BZ #21930)- Add iconvconfig to baselibs.conf (bsc#1051042)- resolv-context-leak.patch: Fix leaks of resolver contexts - dl-runtime-resolve-opt-avx512f.patch: Use _dl_runtime_resolve_opt only with AVX512F (BZ #21871) - libpthread-compat-wrappers.patch: Don't use IFUNC resolver for longjmp or system in libpthread (BZ #21041)- Update to glibc 2.26 * A per-thread cache has been added to malloc * Unicode 10.0.0 Support * Improvements to the DNS stub resolver * New function reallocarray, which resizes an allocated block (like realloc) to the product of two sizes, with a guaranteed clean failure upon integer overflow in the multiplication * New wrappers for the Linux-specific system calls preadv2 and pwritev2 * posix_spawnattr_setflags now supports the flag POSIX_SPAWN_SETSID, to create a new session ID for the spawned process * errno.h is now safe to use from C-preprocessed assembly language on all supported operating systems * On ia64, powerpc64le, x86-32, and x86-64, the math library now implements 128-bit floating point as defined by ISO/IEC/IEEE 60559:2011 (IEEE 754-2008) and ISO/IEC TS 18661-3:2015 * The synchronization that pthread_spin_unlock performs has been changed to now be equivalent to a C11 atomic store with release memory order to the spin lock's memory location * The DNS stub resolver no longer performs EDNS fallback * res_mkquery and res_nmkquery no longer support the IQUERY opcode * The _res_opcodes variable has been removed from libresolv * no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/bin/sh/bin/sh/bin/sh/bin/shunscdsheep12 1652708902 2.31-150300.26.52.31-150300.26.52.31-150300.26.5 0.48nscd.confnscdnscd.pidsocketnscd.servicetmpfiles.dnscd.confnscdrcnscdnscdgrouphostsnetgrouppasswdservices/etc//run//run/nscd//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//var/lib//var/lib/nscd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24065/SUSE_SLE-15-SP3_Update/6dcd82b8cc2d0ba3ea2646a855dd9ab0-glibc.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux ASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.26.5.x86_64/run/nscd/nscd.pid' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.26.5.x86_64/run/nscd/socket' (No such file or directory)ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=4d3a5a0c7eeeb0faf995d184d235092f7472344c, for GNU/Linux 3.2.0, strippedcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.26.5.x86_64/var/lib/nscd/group' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.26.5.x86_64/var/lib/nscd/hosts' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.26.5.x86_64/var/lib/nscd/netgroup' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.26.5.x86_64/var/lib/nscd/passwd' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.26.5.x86_64/var/lib/nscd/services' (No such file or directory)RRRR RR RR RR RRRR RRRRR?Wi QVutf-8aa999c7bfdfc33d8a5f012674af5204a64426b9f89e904bee71366fa47317e55?p7zXZ !t/{] crv(vX0t诗,_FLZ̨Eghmվʳ˲zxR,<^q#V'~! V0۞]T{a|Zf5% U蛕ෛ':UyUz2*/+-uЁ-7PA)r7⬔."a#'kɹ]کksx1"0' T|7\|8sn v!X8{b]^0ORoVe8>;dZ`g2u "Q eHTYZ6`6nbX/ '־ƪwew\mݯgUKh+g$ R{k7T⫨ {+]rk A.IGdAف\yNtu%կ:BovE1mV\H QpD%sgF1Y<(HY)(2 w_%Vݹa\7l~7>ZpnnD DDKK9 էTESfc\NWp .o2^ؿD?B he| 5O%#Vư1W;J5q,ᪿ5p{3\-͖T? I}a)x'zD@gݥ;Ur9ҳ&U<{dXƃsՋ*vhGxC<wb1)?5(J[  G! xod#;j:oP[700% n'{^>w# 0Ebm5b)ЅfBu;J,+T܊PTQ"\xEeQ|H˾V^9xWxbሽh\VD vk) #> a3A`Eb/$Jl33J/ |=s0VbGoG>#rNdq87ڄ`HjgiZ 3Qv-2ⶒ߽'ַu6'@Q&PlJ2A9'3RL`*,!MGýtQ{QnFXO*\Ԅ$c<z,N RDw>_Yy)>~1HE`]ܹt1@?=ȢyQH p̐=fHpƏ%YѴQx^aQ~3!t&:JH0@d's$z^—v-L\;4Ԓӗ =ehC_ (ps2!O!P] b3ogq{t `Q9ߚ`_M}tCґ%α FT>n|Dr([Sju0r5PVa<Z: Ү(R]8]Pt24Q6ƙ)L}A8q0 r!AQC1|~x4!잠{" !VfcNQLRrsvjjg~K.6؞$O*1"Z w# sQ{"rWMe$qy? |6h~4%J{G6.o9;8KWZvvx9i//,wԙzJ%`aYPiߡڶRvj~g.o+~:}Vz B;b;P|r hɻUIB| Ht^_Z3"3䃞,ɾ Z\MSl'9v\ I7fԧͅpԃNo];.It?\&I&Ffd;OV=Gly nXp>UrNFe}juv>ݢ]55>w\$$ lst65$oeޛhϕ>6Z1; G tU@Z=CZdT7bB H4GH"+,XR9ʂ',̧^7b2Q` :]9M㨆[n!"wkv;$8@- @NA]ӷT\ආȌSǗv~Eޯ⍻Yz=^M2R+g4}JTv+1p2uV~).m ȃ9e)<}iSq}65(aA/8nr/ȏQ#:MƉI7hX- }Vzt؈/`uuAQ6 s [&5(QYclbto?J>yXsr#ߢ!_X3ٙZ^dfΙx&6)KuYgUnX:OjTrol~nAYXַF1<k{^P,~jU `H'Mۣj5@RBtd W mǚp|CTG p8DN6:I>#.'&m=!`(iLjpcLYyYJEY4啴T k٥"Ƿ~BƾuQ~u~k՛ p4mYA ـ'pѷ5BmNVt.<^[ e"2=VE'A^~;F~,ªt|_&wZxN +$f-6$jMu~dBPyCLEI}p!J5*.a1V̬8$"QI9Nn]xƊ "Oj{- WC*O槽{[rl]qs$M|d]&hA!k9 wZlB^Sn/k70L6в2ZE1kDɄ [q^"$ (O ͘CΑv7cK#}=X;gpE2,w/&fBLl-aўbytmԜ:%3x lja7趨)i[2-Lnf uD:,S ΄h~ރu85~ R|K *J/P l!v5Z)@I3wt"Tx0:%dJ8ZB| `Y t\O'<(WA]Sϰ;vv=02qs()&OeXCKf R/|4w)HmYhh{arZ/g*bN -+єzGewHv CqkF-'8,#*ёA ^]ll7U+PUf[U/KC(@%ߦ7p$˱eM?]!7&?u7hIGo@S~ [p>)K8t{SyK-s~d'dDvkX9wt cucC,!%X*Ϥ XFsm؀6/T< 0Maiq }F'2OA߰ oozmh{yh4ڃ35ci\SPu?b#_ 1Dbg^9j|Eq"P41.BBy6Gyn"z62+z/ff3Հn:{?πftS:<0Hs]ɥg\Z$}Q1] >O?,svq8I6v {v ʷIĦty3·T) vpf[lWJc0^en,)u:c~q~R]M eiy"Ssepm) FG/;8f$fVNbi㿞o{\r,M^@v~-25 SK ޓ# _u$ BʃqWv 8“KDS,-ti ׄk*@a;_E:sFkz|CsQwaC S;!RdMwDKY z vSrЎ͓zMh ւ_4lio+ _MOWQ' eXP02!7a@t$qJ#oCz!ZCJZeV9p>Px4ݨ3BC{QGN !BlG(}O^B@=&=wAͶ4#7Z%Ҵ1ޢt<*A%ZV BI(}UG5=FoRn%*'?f^r$^h5g0=E]Zٸψã|߂ęIy`Hƾh6XރO+h; ۀqٽ!(k7ĥ9RJcyP!` ]]tG/[9QuZՉ:u$!RѾ XwaD_90$~^,1f6vjZL,ETkKi 3p0c o` cw8fMR p^KW{9?܋:è 0^FRGys [vH(U]qn2^̈́"jnAȥ"a!I[tNU.ҾjN~+ Y!n o%pᕝ"l \*p2,PV'ֱ6»}ط|)HWf[ܢFЗ:oE&.Ø?^983uy-%}ٜASU/:~ncTZTc6# y3j0g!n Yw$PKY&N:2d>ӡF= f6~HmmkNH`=;vOY$.U/ی:[ەd!& K`:B2Kδ?51lkn;<~S`LBob.tQSe NV@*Yq- aCOSAܐ#e7c<SmmJc 1w~kCkoɣf\i vMWʷ" rq^hw0帖sՒ/$&. ]]ol,jG(stm<'(+B`krTg߲~,!`Q)ODL/f+w;JljCw'vag5r9)SL+W_xUq5;xCW\lVMV5\ eW.| ɈH 1xifiϪD7 FJ\,.04TM'\& Z/5tODh x6pӆ:mzw( x>ػM,ik_I~a\LriYqEm4I|H`4F{P3G27PQ `YF:V%*Լ6N1^P%9qMOS%Q]NlN糳nC-?N"LjڊOLz2E/^ObOXNEҿ ޢHAAV;6Bl)]90 \BR ɄFǰKft{DbE+c~8Kζ o$N*ԂBvo}( H@ެaCVRC&fA iVM!P4B7h' f8bǰTxPk|·; xo@%ڄ(Pe ֕9CLH7x@ks=meo*Qp-2AUTf_oEkkfzAla:<)@"Y'µ?GƼ{xOA3PgcEj/w;fIJiwo:l悧_uEX TeBTJ"1M,廼@@42cҸ ^'lS/8,&!`<._ Vof>֌vx*cPQl҃d f=+7?qzQ L.Mƃ _ J|ӈ!OnS.XYb|8L5xf}6;E)'Ag$8-SL nI\-,&6n.R~#/+07̜>sӜ4o|*&24 ê ? lyG@4mU˛z^LtQ_%G2x C]1!ҕN6#ePb D"ΛO[VwzoN`8)0/w_<8vO?W.sW\KeJ{ˋ2 VCS/-NK wd+QǫudQBzx%J beP`&9,JAO7QҴ*`+vF$M/k \eoOg4 o _Rbսs"#Ҷ\Bz.2qQ U8_#GCqzQ%_?X)u5! ^MmgZ=;Uňҝ#oq,걪s4V@KZ2_W,mw(07SAғVJ재U{ _tv30x,eZ{]T/`c@^wߡ$i:&foSwDLEBXN깔{zV|/Ӑdw g T Hfrx-w͇L3#]@&j[(<7~6l}~-ZQNtf#N|0 #Tǟ'?{֐onrگ |u96N'~׮'xK ܩD&AxbG;NdP@}F#L=Ͻs:l&ft׸?Jgy%TN P'f@"Q69)jdt!TBΓ⸲Y"ڦ5z~Si:i !or("PM0ӯQl?&o[F|;s]/krqށ Gc/JhX, D ۜ.?BlWJ6Km Rb&-< *H;s#0%WGoo0ʅĴ6}w/pG@ƋLQ~NڼF>oAݭT{Jx Y _^GƬd>ð]-z~b7r)~W8V)ӣ"ʒuJ2z+vzX*晖T)0Zĥ2@:7,DF-e<(f ȿլKdj(L}U2c:-EߢS*c?*Zb3955x5^ >G16S G1~\&sA J'~vE~PcEz5]B5eSu|wu8"^ Qs_"g^ ПV26)*FZ1ԆkM`kʘ[X<]qTI2e!@<<qrQNt)b݈{aJQ7]}f9Y['<#kZ oWӧ+WSsa…FJE=F/l!h@Xdm}=3&8D>IҿIԮf†ņ (:{ Ljm5Xjgxx;ph B")K%lbjQ8YLVuC"_"r&9ףӼyw/WŻX'$m׎w0O8;182/{h Z9Y=UHCsyVA̡ J:,Rfjgp`v[&kX8*P㬟Er.g1[mن6פ(%I1a䓶&s]< Uփn <PqE[?K; L`q^2]X^ XQKmΤ5N]J{_:bpd `lû4oaU4bTt43y]ÜG@v(#ĸdx1: r}ԧHNqb>XYY)h/۳u%XAS'b2.EUo, ܗKɪbr{6Leۃ3 xb+#$lJ8c83# Vz\LǟA^3Pzr3Ꭱx]De%uBwp`9>t1ߤ';`+qSؽ/,b;Ite)j+G|Bio.=cgX2tqo6{IR,K >Wlv.498eP\^$=uE[ mW*-Oq(KNpnrsjb|AIԣN <+Lr^@ļ SaO r4Nd e{-`@ >gneRqw=x[ 녵6ݸ-=ڪOaotS:_`D@q|^3kA{3cE ` Y{~b86&y TGx1E"N*!FklBpe~C9Ђ0{_H XJۀ]׆옕 @2sYfDjTymp,f:WqSWr$k˘"re:7  <)Y˅伦[ GK@܃={l,~4a%iJCl8$cF!)pCKӝH(*\\Ӣ_PEt2ΤŴQ2?Xۤ^pהJ)0L [JvuSX@va{ zױV0InϯFr4R9䢦0⢘=I{C>OK9p}|:?8|rkLQ2S^~`PY֋@x#~YI1̗:gjW_F<Fmr~s WQtv4\ #$M+4Yu @jvbyAi 6,JSܔS%9v,ar?2R\u2rQc?$Z7lх:]ܨz[Bd! +2 Z3_DDM6zw׀ 3"²tl3@E~W_̕`F^aGdz7C3*1zWZ5V/C\N1L(R+\.v@hR\) P P0AS)d P~YPOjq׋1Zk$؜ϊ ,W&k{P+(ijCyrsfz1q(D(zmY8Уz:M)UbZԤ'woڧM4ʅ&ap$8mXmhn[hRtr9~hWP#X=xk' L0G|ahO&΂ yeUY<\5D" FqHTzk.ZcNJBwغXXbJ@#\|ё 8%mԓ'P".&/ Tr'$U/PsEN'I:'ˑS6_M|(yJ$0,GCUw K @T _֐ *?P[\H(qA p#݆ %ܗ5$axdɏv rmxʀصN HIa))tDrJ3 eGF;l~h]k V/D~yyGd, 7 !cEbĄvr%0mm@nX>'T \gds /{ v N@'0cwJv^xۏlzVUþe 5Ε.>R!ޛI͔]Q!o&/5hz짋ؾXcfd[neۊ\zS]/auiƩ_%&Z⥨Lӕœa!xUrI><8C'A|5\x~-?-4L'_(>EES Ɋ Ty^?P^ߡa0D?biG4n wڞ[ʘ $6idr7,s#=a ^gd'W91nDDOG@ 6cNq)YZ K> t?&8@x&n@I21ҭ&00M30/JwV)xj?ܫFXkny^ NZq6j>'癬}:<3@ 2]LgI&Ń2LGzXYa=C)ˢ PR#>^#B}`H\}4ͬv~,J\&4QsK< {Εy+gFw_\86h\02~ pn 0nM|uN-y[jXsD83)ܴ}7PNx!o\[|Nx[Yj:X5bh-=#в ~|Ҋq4@eG hԜ6!!1@j_ ,l\y[Y!!T]N˷_h۱W&P[h8yo9kse7y'Q-~$eZCw6k+./r4q0B#*,sKafh><]wlgh眻Z l;e: 2ɍ>M{2dRq1н-8S4q+c=2nt_{ny+{{7|G$wL؃bMV[Y UYfq8%x$q՗`keVn)0 4P,\Y1>9$|QKڡiErՅCA!I_%_Y_'=vΤDk[_Asx@;3XB|l2+mC>Ʒ3Pxpy\h)f{*|R;2-5BK:xSHz[!~dV=iܔH&d?dZ@6Ð?&5 i\mkg/"9~݂mSVs' GDzc &\Di!C㠀Vܺ()vG=T_sP ׿k54&R\e<;&˧Bh wEɃ$HYsA5:c5Y5:L`aaTA0&+Z-}kHZ=L?C^;a?_Ti^iv{qD;#>GB&l e(A{@1n%p/<;%g j~㯛:'=iZqُ?tI[=@9c Zzrd_䈗x˝[s'`r3YM,Tؤuj"27ScdFW'}Xt :!bҰ'͹s۶fK~@6  j@\)""\+i%*gcAk#eo"N|u[ Kb_{ak`oFX(^3#K5k!ȍ6Pp*}EY{+kL{Hjl;9b`M: wS:GE3 O;ǔ}EoO2qԀ"pJۥ0h89XKH:cʭd[Jj"ZOH$l4Q'ET$`?h`YQ|eȕϛP|:x=t%@E5}aXkwY܈ANq6N/Sn)$vG$wUؾ㐗BHeӟ8yz]'ĕh1po_{O_D3fBWs!c (39=k7P܁a=ԂR"2 %h0cBL{ ij=>dpzhMfeofը)!sk/Bнdߴ GB1nT( :M9tUy4o!_?cҢ>l,KnqhBLxsWҔb&t3߽#Hw2 \(tr&͖24,Uj݆/vqu7:{X4[U5faON1 )t5v*/]#5'/Iπ3..e!D~^X`4VM&yp~ċVf]{:CN|RX7,{h)\z@%9pQ, )98 77q#qf.2I3!ϮO8:[T,-XJ22&\2aAb@sf+^'Yk',"wW0@$ |vrCgpQjQk\;(EYe?c-{Mr#ɵ]^t5gƽ,s3(p 1T CQ^u{uf tWYYk%poB| GZؘѸ2Qlc$oeKWmh"b6\9!Rj*& `LrQ+&o׊3ѲzTw}dU[gHkCW6FV"後DYKQ'1+ åTRdB\⾐K ] o6fl긄^͙"qy A4'BhY]DV]::c\{hЉsSHԩƆ <u,Y/ZiyJz_lox6Uڶ;`앱 \~"ƐHU%b[n1!)!U(Ft`'=z[ڑwzZ?S29z0nKO*V=*r/TY7 C,/xx"B>S NnxUvE2m{\".kLڧ'Dj2)pp7D7 x/ײ1_=Y֣W_ y眹Q_ $V8ŭ}ՌYg1GiVe&55uvpko>otb)J;`5sI-pIGh.sp }LoT~K``xIĤ1%,@Lӄ՞`1q qΪ_\ } 8=ʷ\P4~InaTzZ `=ol&@s\Kc˚e]W2HVIL8'I kg5vVe%a3ҩ8pC-eQ;\!quqZ:%VDwԟrŒ͂p"zue]*P ʍ NG~KGśȍA[JGBGTy$fb*{2mY<9 "4Wke>Q50NjoI, XfKgWobEޜ?'_-늡&-!W0dl \gqvY[t[ ٠_^2s2n "CsV]Zk%G?SfSNRNE)8%x0i|HqW}&M~2'b{eLa*z`F8ZZu{Gv;d=c˼gԡl~DUDt`-=2e&[k@/~^Ekb9׹(~Y[;R9͞϶Willw^c(K&U3#kVQ5bU_-[z*@XQ@!*c*쪹~OћU1L $j 8X#TY,vZEKܧםqOo\= UauOeg1x\گ&9J\^ |7hL|hCԕ~P6hI_jΩpdԭڞW 01^ݦ`e*<!;/6.]7MN' CGlkm/0r4է]C q⟠6%]_#M gh/z%_AYPdօRk 4]ŁѵvI`:)}!3Y\8s&4n5Y-_G ]0<[$S2P7n\M#J/ƝI惿JT؍J|? Ӡ:0KRdaHաUife!|y`~f0y)s!@sy 0#Ǣdr{I@4tM"&N -Yiq_i/iEJXZxcw!vWUxYUt1ʋ!|AwKGb 2%cP]C BimDw*ܤn("7KY ʤ=<#t(Dל>|7IǀtBp& MZǽlSQf?ޭdb 6.%%+9ڎ )tAVh@" B \}e蠋'YTcù@Ȕ; vSo>﹬k|{2B6GNlLk uϋa^sIp} E> UklֶWlT\)j.n<@Ұ8]" n e  em o$O R_bxZ)^ڰ?1NlX7O[sȈ[Y_l ZN譡1MC|<Ϯ߻^fG]'dg t3v Dn ֍wu=lNFw eA 8RY=]y97pꫵ߯W6!N8E͟ٿ 1Q##"3:HKn/\%E~D` Cg?Ä%(L47ʭ˖61qE<4b  ) &!V^fpf LV]U^i.69*1 8f3춿>Z;[{v5Eځn_~|xF @X|&)'Gu¬Ȥ HqhRWC8*(ta@M7vSHE?6Zyt.ws$8\ٺ`Ձ-H㮔7L}uKX&T A|-[B?悹8 r9@%qph/I"& EcO- lEyz (,NYixT {e8nu5)N&p.ٜg(au@y_┈^N+i;!pm)As܉+)v5yIdmK|I xL@am#Rt@h҅CA,r_ ICW"vCº X]Y۬tb<~)5VǶXrV?Z^Nb;9u콵>D(= $IԶy1}YV!Z;.' DSU_Wc5#Θz"q!Dyy>%<lDg]4Xc6;nΩp (RJ֪jk{A/PRh,56(~1[ІԺ4" :63GޏuEҜs!7GNPxw"裙N Ru{.B͔NgŐէH_~D]` 坛/]Bbt,q[j89&l L!=/>Mo6r xut/eXَ&ۢ]Ke]ݻs7(#ѰñY@׺VMHWk;eU %a4*;}sy,aHF;,"}Ďii=!V4k$2mvXB ,[H}E2־*+'U>OGB.*@srDX/g\)0!,ȫEPgMZJeT<72#`%:ͩu{!)_z{^'@ZX gGSQUN,QyoÑ %Y/ث$${nƚ04`@#C I6B&BYIa*rENFS?wD |25-< ۳ }=h _mؐ?44( R}SY}"y]V4旚!*Egv Aɷ8%iI06"Sԯt2գ0plFl8WqM?ֱ DLo$RGυlV}]y<;Wh:~ Qҹ#LDz 9t'ETV&lH$w Jz_Tz6XYjx8 hxU|fVd []PNHɷ|dSzcwCNcѫH@o{@F9e#LX}x̉Jmx_'*!i>*|kQkzReKEmTiXl |,h=;qʽBp\b4@ }hVV|ֲ[2nS{yE-tr>{&}0Q͡¶>[7 H̝_d.y. ,1 &J4"0 `\1 :7y ‡/;/-apթKd[.YmwO-$Q,)_!!YxPDqҬ x=)E%Ο|0j Ot',dtqJӦ"F Xj't s/s$ ;r8-4 4[J ,tF9)cjGf@Ho. ڱ{YHF!W4c˼kMWC;$e: 0 cGI_֥֬;x͵M2GŦ1g3YsdF{^~]OƾUl]ߕ=Tyl2΃  E[ 8leva`]Z@m]#r ɷ_hNo{d{v/mK8 wP^̼0` ADlLtDJ=;>=J{c QxVG5#/91Xy{'J- ΍+XEg|tqi+T/r"r N]2`܅B@TfLq%ğNmWrAg6vDT#ec{p&s;pMɀw H_ѭDQ(OEWv^3Ιzh||6HkH@1S۹An 3BDx:ߡ ޙJB1Fj6!$L`ҵ& 򜎲r%eVwq

topvr Ei rz.n?GAXTUG |M(Rq s]GbKgao(  2`+4@[_}ċ\N=ը\mZ:MA- -cKBn o:!^6_w4rMM=lQ,5nyq |(Ȧ 7v|y^>W5>0U2ATbv߉Ct|AԵYRzKVumHz $J\@GkY}YQ. 4cF 'Jodirm{y0h:'[48mݥGqUl ];pDga ^Jʩ'R#h`T !()cZ),0 sifbQ#8rT%ETLSYQ/nyEsk;N[o/VE:pʊ{=TfwNC)۾Ynq )=R#<",)44zg$QqkpɧW9nAQ1|&t qa!"n"uCM0dFwWm#;$WܚI!hcyU XL֭2[_@˥n D/R۫+J ~7 xc*jcX+rU#B*p&|vN̥>Hjs~ӎkZDD,8`[Gk0H=8qM1.$WGsnH߬jh:)ʉ#~I`fBM:4Ih7դh)]f%2 tXo S)Tp]/RHn g b$!!lѣΚh ̓ rc-2o$DPh9,'X(NoAWM+ȥ?1˥.g68[u4;Xni2+aڻMGmFO Ҿ}kƤ}u!,7Lyclw+CixʕBgŶ%_Q&ۈo+SFjb/[8륭c=^HQ 1,HUlvjX mum"9~#uCn9bH^T+崁|FX[@_P`UnGxm4=d0[IA'1F/ ԽÎ0~J5ܦ>oV 1*BC< N㈭BT7Q5au(Q":"wf6m_bd hk;X HO܀솁WG݅[{'0U0ۚ2CJ_Gצ7F޾87F5ubٮL`kHuM:h kVi3ǟ-ۡ9?+yWŊ)c@D!Kƿm6:6а9` c&lE(u:I쏮w)P]Ṽ~Rƍ@\sLe F*+/onv* 'I\} 6hce'90h@}Ffy.RUmyF-h<"l}.{i:pmȧ4_[w?,,/(*Fc đŢ~ 5lIZ7V>NI U8UШ&k8sr\S^}S0'm\y۵.q)c!8!vK4ӹ~h?sS3pTbδ$ { T uTAs2|7C:ȫ8jtWk d߷`)iydΰAd_GS_9c~}TɆsFF2mjC #D=x <M#p0p"X™W/:=TH\З-]wVT\Tw,ɶL9cgMfմW)KrHEuY˭oheC%@A;m&M6G`$5>m[0Y-B п>-~N7#*5Φ;=m/`'%Wp HPGL$RI7D&eH)6ɮ~IGD֖q~Rlvى&,8jdKj 8&WDf2 H: ;7@&H< (I&Oɖ9 49a)yJH pV#TD r t;¼Q"[!xTI!F./D2dLEw! ״s3 dm_ğh& X:1v`:)G ;s[6 =RvrtLrUJfO`Md؛?&zfw$mE!씽+I#<ӟYnf5o a/KٚW3Hc`1Y@eBau tTt"Ū&Rs 5wMZMToGajc_XW2j칹;$a <߇kL6͟>$䐕_Ϭr)xa|K0Ai._:-wZ%"PO" 6_Jmlꪫ]!僓 IP^kƀ2;ιHN|D5d%AJ<0\\#FF Ҡ}2.oۯ#-j|u|qIIEwzc NXj+lOK8#+)w_GUD, F>%!M6;"oh(1WK$Z? FUs}Ui UUv`!Jx̔F I󥬹Ou_/49Zi_V;`Ĝ+5)򛠢}C&J(ъ!\=v}:&ֆ3K69ۜNBnf+4Iׁ!FhXÐiK!*Ǖxa\s!F%]G|(1,90Ti FծPmZ((!sSi?JgINqD!XCD1{A <1*--)8 Ûb ME:RSL"SC.Y Zt/D-&ĈAṣ%b6`@O4'QF[ >0fsZ'ꈿ cY`$3(<9}]\2 ,#I>Qsnn@% ;wA%+a1N+XXݦ ? 4FZ:U*þO^bC4[Z;a+uK5W[mqvfB\c`1]‹oGD>e -LqH8*/N#|HP D18祻q/:6HQϟO~Ce qn4(_2Q?) "{Gٺ!^ݰsyk=lmubv E wc?s7<+Y)O04cc\'p1X+]Y0 Mt-QI>F\F9k9۲mqƻRSDn&ӆ%B|<+b:+JГ7tOgކX5o %AFwE7;RA6+\o.OXzs/h mmFtpYhTb_E 0FA#|h4[O]( ˕[ÒV5\,-o"VmP*{.QP\h,%l1'gWפ|sk3wA(CJ[XGR25n|_eallbK߿jl}S|<vD3hDFF:HS@,D"T6BM8e9aՏ(B{<q̜F!Еs(^^'?@Ng j-'7(I^VW(wCJUVه!L?\/B%zSwg>WΠfE\˯jb:K"$&$,6Ҳ8 pL'YWt&|nxDu>OUp?΁ٜ>4)Q˷i%^5pR!^&'*$SO^d'rHwf G2ʽLީL5.&mAkf?b,gk߲f 3C ugVo`g]h Y|ʃtT Jw,Q<znSu( 9Qw&^|i;G c2&wR>T@yN}z; TwlT"QGэU܅>nhBnfBuG:|hp2p q>.mf9Xf g V>' ڽhƈS߯_+M}p5&6L !Gys:F!chT_޶2KBA 2|+!z2&)\G)d=b?#q<G ?6Pr~=Ij }VٯACL<8nbSV$E8| 8,XO{~5" 4^I9tTW-LWduJ(!?fbBN?[61? aLiH嬡?:) H@6 BfE}0mJ] %Xw.%/k}qq{,b'[_O{[3%@?o+/IA4kO18.5Adl)9G_-'iކEwrgbd 0ju쑉l<ݐ. ӎ97aOYd%~I' >B>U$G|;hm_-atb'bp|ԑJ6 L'AOJ&;MjI'5t?tDž-Iz8ȱiO:,4#l?yVbcX $y v$A޸1tn[Qe6&aIV_4][4T͔吜g#7ٟuyU5 uMMj Ԯ]3pU@wj#Eh|;;[ 4>W7ڴc9ldpE5Aks@JjqQ*Bz4ӎU\CY+I rgֿQAN~W`ٍڳ½ŹwƫOZ8s6[M)aKP]f\yi9k5=Д /?%w^}3D<ۨ2 V%ՕE+ 01X7R˚`lleن27(:|V|$&!|xgM}0)AA9[[u͐!ZUAIQ1+k<&jlΌ 勖@ };'?.7B͂# rF7Ϥ{ U2$S#c`X:_8d ;in~TF%G͒=¼k(ta$Y ?i.t>B@ rUB [ϭWsSVmg3%v^OhFe},p̽riM *]U[)/5~cd:^Z=%Hep4svW7 KRц𥁩#1~ UW(WUn&LYU](kKE/:PZc黊)11LyH$wEOVFo u@Vsp@)n"q誧u3=;ܟj'P^ {PCyqrhW-7cKm+qzc*&6qJ?@r C.gO5[{`_je3k)SX"M!l~L6P枌`D/= |u5kEjjØ[ ~-< ,K: XOnd7m}h\Y{_a5x݂ ^0~=ijziS}AW|l "j> fK\s>R^)Xً*e/2f>{Mm(vl)Q)_F"܊ W\e[pSټPj˽54!OB_aU*Ĩ6C GjHF]CVř>I9\+t @c5R[;vdqhG5-v޽N} pDp$KIR$uܖheȿet%}P:I6DdH"j-nvIf o)sv`mci^"Ȍ)&#ݗPxki&Wޔ70{ʬ/MEzNV­=& Uh7k;oCHib;VUHVZ)/| ԗyO0o"tG=i i)zE* w¦d^>s 44$WI/ش;V5Ȉ+n .@x>UtpJ&W]Ѯ⯖}_{y}۵DWxZgl{&;i﨟};Sy;%3h^MBK xjE4՚I|(jԸ~*Qx~ &=8HcxIP}J?Zү|y-ux1s͐P|db#E5IìΞbwS7C="&Zg -:R6p7XAz)W&׋\H<@sG?w$â}$8kTմoqb^=~_2uˆQ3խ9*XeL1ǯìCel)tPH63HԄ]yVgaV i{&c pws:b+R6s mZ  KnG5T:Q<8)`j,`ڿ9:ұ)1"Z9@EԕLaG]u]x~tK [A,]ƶR6 0I;o g3.G51"0V QW2'J Bt]KlG~n w+P̒>'T_Է؈=X9V 뙵HfkwV%z$A">8PkXExt4ٸ}9/81"ck%TY@'xD_Gbw5[1qd-G~4‚ɱc1e(L6XW 6 SaN/c,(_ʡb梍e>[lx[I궒Co3x ˳Y,8K.Az<߱ľǴS:Q'LnDž|z2jVCGZ_N ֲ u#䓿(@h}=(-0Kk|G`5],a'-ʦ./Fթ6z̜g ȭft䵈H9O*"Bmgy7`6}Qq;=6P0+)P/VCY3r12g'>Z_FfKUr-OCCz{BШTœ5MJ{_0aFf$m(Pp0a˕[>.\R PY};s;K۩B˿w) `pw]xfXՒ<ť۝#VA/k!6 pkk* оxk)ܣL>vG[Ūnun~ 'T-". &5]zxԉR5/O>((VPɁ<)} N&$Zyԙva!y`;d˔1\HϋdlQ6N3> hwb~fw]L) Ĉ 䖝\B~71c^NfZ 3E2ޠ$Ltz礻De\2,ɪww@Ϭ#tܜ;5k 8ˁ}k8`jJI]p#?&7bv)p+0"%)/:ڀ=4-l(uNjb =a1T>ȿUEYoWOؠn;s=%FuD9xB4\gW}xܼ?-IΝ&f eRť'GJz 4epIxφI/P~L+xP9Iv㑱GtBsfpP 67ư'TKK ] '#"?'baP2-1|wbCq2ZS0Si0H!ीL,zPT@I| !p?z^h^[Ke͸ qtl8`BeM6x]3BΛ/T:È,ɨN=9܄鲲ΆfO"Q67X1xMc0tEX12HJ/ ]TPkxz1飱S!ݵJ.MHV_\K% )j]7\?p=ϣA`& 7Tۮ*r0MjiU%A;RexEKh~U>SGjBGfJgA]eq1M$*xgܑ kS&? %2Ʒ#3Hk6ܑHK=]B^BRdv41uNtJi1zM|m|`O2Jn^q?Krx"~Crا5xFly L\ XnĎDI[}-di0VNvd␮ N`ZcŐΡ&r.J=PM54^vRťзDȂzZIyQ֪] Bbh6^{6.J@S8Y2}ZͶuJJ1f)35gU͐MM`j:/5y`MUYH)Bp6>hS2,KϴC%nKm;UƉ )1yl̖IϿk2n>_7hAozH&6+gfxT]5! UA ӊ^|Zа ik{ۍ@f-£}_g6LsL]H"l&|7~7k5q2" B*Q5,3>R5}x Osɳ9iD0TEIH^$̚*ՎQAwshaNb@^uZkJц=$dˎl,\\if.i0qS>K|H }+p}tcq=knKK҉dA0U@}=$iEj~Ϥَ"tӀ :4yJK](s8\MJOio>yxM7*D״1I;_ KȞ d~r2/K#t-MC*l@׷r9+7MӥLPV͡U6L;2]p6?"`9܆hxrP,GL(^5`/;')q:z(Ǩޠj#һ(|ȴI3,olsj\Tk'kB 5md{Ch@ۘ"'dW?SlھhO I `0FJo{@U3_5N#\ П87GX͖-+xwR8tyw"-#XYʖ3H hvbE RVvBmV0OeGBLJB6iߟ?W5(Po" vSL%-1@Z<mʝ\@ㅶЯ[Lƃ7 -W[S~ J׈ ~zMAж;(YjdgRΤO{UY6f!1 f7.ț԰:|LqAu6=q&C\'T9AE텛 .5풎]%̙«wׁBJMZ|xW46x}K[z^$ċ!c?ʑƹE" *h(PEaBHΪTmf?7r( FPFEW7O_aSVK@^x1}aJZDqK[[(3.k6'X0|5?)!BX~3I\$us "5LpYl{0?;`)أʊF2Юq3[v~p)PSm*ju{*.M4i0fDÖ+`<bDDW4{0L<}UeX孫ڊ8]Qh,-oo L`L!) ñrrEV`rD@&o9QG2Ӎ 5`1Rɖ1ԷK?Ķ`z:a3ZкM[MwFSۆ3{'= &|ƌ:jݨJ%(Ag`ćM}b m.l;e?[ &6 2 l=4rQW e3 <|s?M]65R k`` h<3͔) ^TDFVaQ_ ]v,Or 3oad'v^ Zx$_*( Ja ݦu@F1tq7dVqi5+t猀D̏$閎4.1fV )ps1VQUrp@,Ps0*3n['x~H'V~Cb4_vMOp_ǡ-4D*RvAujguk?$Nnx ] ,Rf]cKi3)Ig-i{3=k ]ЈrZ_MI֟0=+X a1{1ƨu4Հ09>l97PaP*`J Rt9.&/yYkV8_;@~N."?hW*3U|T*2o^i=wFI7 `9+]p.bfҷ7յ;f5A^;˰~:}=,X?cn{o ;yV`WjHj.dIUVѡzDUF}J<Ԧdd(1|UF+ƚ ݔIU^4<\!*9W Bֲ;X${?p4MXǼ  Jm8{Ga5j 'P$FfLSHs2}sA/Hupb a.w\(*OSZ(ⓤkK#? I 67b! v0y@zZ|eƯH=LziY6qRIC XUq ,=Id9/g#74e+]s63 5([h9*YxIIPRc9L0w4>ꐻx俕VltUJW<_F_֘kWW|anOt%w \ߍ j~`]C(~&X%~4:ܥ2ĪާVq+^.2&ʲ|UiG{5Y3C-[eYN~}¡H-79XLe*"9aJZ :p][3%1 ~I9tTottC apDؾG7 =Cj(3ػ.H%˴Cu+2!f$֠ -}N#sxp,!|/èd A ,y#N=#$lwy*ꏛbC_zeb*'=O6dݎ Qm*5iu=vIv˭zH >G=89;W΢U{tְ :퍮+i_i9V2AZ*n^ً81,-8-Mm8F5 n+ :DuSxm}l)&dahmk>J.}A<_SGqɮP͊/G.u "rH1kK;BR^3y;  ,ba-GReHǧ#颭 ~ep#ru)HəFIZ8mIU>IJUT}]*;H pkOu&biQg0w{AsIJpڊ%)ؿgHQ}ѽQ 'UpW0[uԅЫ Fr k^92lC:lV&}cpOxdB|.nQ8S'uS7Fn/ᗫűU*q@Lp o58w~V8$<Hl}}$|"~YU*-H)ȟ- i0824(u-DR}EpÌtu87$;XBM-4JK&hN} }3< Z(p/Ovv}9Y!b8K{ QfMV$0+a7ԣ=A;GSSDaD(o[$Zgvfgx =f|ez[+<+ 7] Y%u_0%seQ02cã2ODy A:. 8Tʹ^48G<+mnE/*'\s ɓP_qA2 ի'h`E 7\N %{R>΅iC"zLSφױy=QLQ`,T|nxfe7"s l@iˤ^@k| '+DPj(G|F|HvUHdIu]Q?T^oHVR2|Nd>1=76E{.*ړz hܥdIin(^$jFIޟ@&Ӆm:r8Q4 xk'u<ĆςDtRiP:WsO?~:hR3vA ^^pǤ4H§|;fQh38e{S$V GgG 4n^6 &=>4f%A3 eL1׿"jܤ?ݾFGF#!6+kU:r2TCsq "UuC^qp1v'֒qoOLeQ@%$TO' F$Xmr7{ cdFYmgAƨ[d3W[ ඞQ4FE|d%RDhfMP@҂ZbCN-Qu\S}o;qҡ ,a,"3s~4AYd4̘ pV!dqc.Wf(g$E|X D ƏȘʍm5Z cHU8%c&o})4y$>d-5m;u -PQkAQP]&RḴ MsUeg<]8 cywah U V=3̝cb44d]{Mـ ip24 uW<]j!)t}͉+' FnM4gf>(kJ +יylmۧQ3.v ]6.NBC4MFKWZsI9¨`d":y WMkn@QV&KpYclb _'֝"71'CK8zaW5`y9OFƈ R2I6}kxpu[sݎEUcDQwp""XR>ۻχTZkѢMal+ pUsTr$g̃6 }gu-0+aZR*w2}h`Dϙz*ei+ƁS6E;e DWro0g66Y#nmzcqʼnj&+@Ğ _v9{f>7Mlekz3 AtNj3MI6[8+Xvc36= o _6iƾΞ5%DT}*O Xli_Kd#M&.=Zsk_YHyH}aa¬8VpJ:DNtD=~ҶXܷe:6@!|0נYXkA|D0r)mAr5U6IyvaJFͥ7U;^i5 {W|?EiA|Á2}f>9Vobr%t璇7y\OQ .~| bUU * ~g%"%]]m+_I mhMj;¿Yq{6}}V1Lp 4"db:=dbtM|ѻר Ji)b'.'-I;`.&r)9{VdkcNifu|V@QM @4(3j:f"3 pI_I I儁OOxUדSJtj« Xq6Vͥ&<1ݾ$7WLx; whg zR*\t% : _t ~(gοF0s+= Oa$fg֗-[Qqٯa b݆\jo.,5}6]=~*9GN8fV8ѫ7܍m% P:C;M9#s:UOk'%EgA:}*͇~ط wŀ!j.Zӧ=f™08h z٫lCcR/Ga3J9wT%!i5 G{)yy\q( "5APe%^~#M] {s *Wyӛw狄tk/Y9KAn1%M혚zg{ARK ^'2P3ӕ@V˳I`?*a D3o&/Tt?L7{,)ӋhXK8^bbԄҏ+fu<..xAJLć3 "jZ'Y9Ox?X^CKlB\#>δ}:(E ģ--% |tіLڈMAD_ےBO!ͼ[pL(4sT|N;Oۄv0h[ vPӸ'x*G5eAG6%%gʱg#Y>h,HU 2m$>5K,jcA%T=kOC[T {t^6:7R$D ',)ߵ4 fb[i^y|ynn=.':>|I|NLfS7qRIڱwdh=n>BӘ}xlX$GSݛIܵ$q^!*`7*Bm%f c~gb9 yy(!9EѼ#E<I *=ľ7lUR_%@Hգ+!9`)Pb̎y,B8sY RS*usyUhm kO¾9 ?|Y#RzA3˳dRO*O-Rφ9{;+7ju8b!jq$oX!d{Jꀝ5o$aEB7`2֋/# K|tƭ%dX:Ty-I8r'p;ZI8Cё3VIHud9wGJ}!&UpK۟Ւuf3{ǐ9N!2WP[]c*Y酴lxw)$}bTrَXY]Po#ӓ-mG9e)vAb9+42(/&d`41Z|+EK1W'aD."V(j҅Gl.|4fWG6ҩN:l5i=EO )4~m̠Kq<8eŗ} JHV`6>6]~) ˜^p_9{}^";(}S̊«E{,]AEkgVhXr S:Y\CsI ~rEyZQBZTPkBsto)dzF f~W?.լ v?D˷R#ruq{l{oQFH :ӮoogY{!)T&\%qຍ=} 6)XՒ$M[d[,|/ej ZapkHPޚFӛ$^ 0] R  iDE*/ [XP}Rff}%٠.e{y&xf>3.u珺Cpjo2kѽql7i0,6#_Ȋ`(+A.PAI%z[ %3JlheUաeHCP``q4tvd^,[`'[SFEލ"B'WΈ18|x H͛O@l<I\w<+1?@jYB'uXc.q>m!ׅNJAܢ% @ȳHM~w_{>n}tf] (JFm6kP1mB!Ri ٨\vYA007˰op.J{4',Bi' ,AUwIF5??RXR8KA72m64PWeBZkܙ 'qx;{@IB16 5- jt u6 {2h/qe r5Cy0\t $uh=-\>i&qQTD sFDMqlY"d[5&n}9Q}kTSK8I߈}^lg:/y = d6q-[.P==rCiȢR8!3h*"׎\D,ynE-T->?P!]/.\"G nrZcq"Mj9AA\HW(EKqtIDkDgn<MψEy(%L8{ӁF{ܜIǨmtgs*?0b=RB ~D[ 0_4j $E#2E.~4ӭRakUMpo-[:e`s)59+%oJ(4ߩvk˥\U>BB>WM b9uC ;9ƾ{h:vu-({utw)v٣'n{j:/ʿO=i:i s CMbw"'a~h5G4h6̾t g f'c/:C=r%l\,8g ^([ܰ\wk1S R<-ӡ[el:^X aKˇ"r یB7DfXp0IШ7wstaXq ^%6 ^L^b^:`. .|".>Ѹ<{-$ C:Yovُ Y AB V ½o5,_{NL ʴ9]}m;[#u KC5 Mv?TES!tlJG?uH p}Բakvciľ-HW=;U W3s4A@;k?N;6(R"#Po#ƛC/%#:{WaWo<+3gvb(;bDԵb#-pVq?,!gk=L ;Qt*emykׇߚJ[yWb|qUR}[U3o|':IfpJgiV-& ^=Bj_SFtC(966Ǟ<[[Qjq,&) I7gKm,ՖZ({zkɁ+)n;h6CdA_!|oX-VA. אw ƅVf<1Z= \]H8%IOT9Bex D'a] ]go,7 ^.m.Fh K __4fQэ Zz_^+[QY9R(I;K85@]WĮ0ǠY|ذ2hwg6QԆyHI/.ءQ\ k$wZw\dʓAQ@z=5  sXfd\D[7#_X/gNf5F,+Wԯ 5͊7+bCBϣ/j%TJ`£))#qB58UmkԺlFfZE̼1kْ\1X}q .Xpsii/!?Θ[Qtgj:-Kˏ4Ȑh#œ)FT6SFj駒t^o(% 0Wq'(eCKZg̰F0,Lܶk̎ 9n4;x/CkP˼ b-} jl&+[ _ !h|*-"gzBkI P=97n37twvm?/f"/PE <\G7/rxdrbVCRR5do%.jCdJ2 )=)pMz!{@muLm慾a[vS)Q{د#zr4be&%7Ym"i'Ib%.+^iGVJAſrK@ b :ϬLL1 msRPVg UH/ c -莞:}Gසr{E-8%lBΨ;M*Q>6!1zBLךw!T eQd~C4`C79r $U1MV 7KmXHe!1j0;Thi2jZva0)J%eՓ+ " ~vAvLz R%lQ0/U>d7p:w RVN&D v;өh-AXzq7h'ac6CWDu3hs@>ag&0SB³Bz~2hA)ʎYM=;0fا&PbplyBC֘Js-H V]ir52[aӎFtPDRN3#W׿gV3C0]'XT_s}_GZ*DXUWZ{R 8UğeTa|/t^G!L$&V,d_V"L.[x*fN^(6#PdΈpSa̕Ę)WxbFM1TCzx .b,e<&*]RwazKEQ8WsRtQJD }u`Y ]:"8㼰oHoh97@d<ͻE?ok2qxhseT +Ə QXdt=sAWمZ0C?/G&]hvMK>bB"|5|PE7~)jbPs J&I\"$g7c{u|}rEMu5BCj| m9[(te1XrJ_:!r[^\{t sn^{W]ꢲ"nMȍ:ummIz))&C'G7Ds?ZkTi ?EB~K-q*"ʼn)&|5l)!/T 8o gJ]G[|pBCh܅g:pKΑNJtxtfi ܰ YZ