nscd-2.31-150300.31.2 >  A bMp9|MZa(jfR ),YJ[ >p1imJO] }MP9/u ivVkFC%׻emI2o,.̭VA]x#(JzRQm@0 bn#۟2e'㛬1Eed@9N|3c+%zGEj)n}^׆-6_V0*F1㳭d2p' ٗ*47db90d78106917c42ec9982db887a1134805d217ab0a43d2078906bdccaee14d9834de12ec19346a15e3acf7a5a983ec0ed8e3e4bMp9|hĤBQvRǐ#E4ۻyL (\ם`o뽨^h3؇Qntiv|/K/ O0߼3\FplJ`,+b Ζ7]\An&#RE{ݳzcҍ:f/p/PBEC&)yL$$W|m)j>qiTXt(Na|DzQw8 PyYg&uOF-K+Z2ۄ<>pI(?d   4  CIP ? <   @ O l>`"X"/"(}89: =>?@BFG0HlIըXոYZ[\]D^ֻ b.cdWe\f_lautvذ wx0ylzݸCnscd2.31150300.31.2Name Service Caching DaemonNscd caches name service lookups and can dramatically improve performance with NIS, NIS+, and LDAP.bLegoat16SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.gnu.org/software/libc/libc.htmllinuxx86_64getent group nscd >/dev/null || /usr/sbin/groupadd -r nscd getent passwd nscd >/dev/null || /usr/sbin/useradd -r -g nscd -c "User for nscd" -s /sbin/nologin -d /run/nscd nscd if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in nscd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in nscd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/nscd.conf || : # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl && /usr/bin/systemctl stop nscd.socket 2>/dev/null || : test -x /usr/bin/systemctl && /usr/bin/systemctl disable nscd.socket 2>/dev/null || : # Hard removal in case the above did not work rm -f /etc/systemd/system/sockets.target.wants/nscd.socket exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nscd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nscd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nscd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nscd.service ) || : fi fi exit 0 uX A큤A큤A큀bL!bL!bL_bL_bL!bL!bL!bL%bL!bL!bL_bL_bL_bL_bL_e2cdfafd373d24fab07018d0e95dd49510ea6c992b7be2b0611ab23bbc2750b579fe74962fbce2fa9b2a4b92f693b2fd42cbc2ed331fae268de7104879a72df879c9cec5dd2414dcb76d11e75903aa6fd9b7785c897cb9f853edcb140a71b7790d2d2ee66ac05193b8c33620419f84fe3b1b251dcf79c032503782d7c9d166cf/sbin/service@YYYYYYYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.31-150300.31.2.src.rpmconfig(nscd)glibc:/usr/sbin/nscdnscdnscd(x86-64) @@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(nscd)glibclibaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemd2.31-150300.31.22.313.0.4-14.6.0-14.0-15.2-14.14.3b@bb no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/bin/sh/bin/sh/bin/sh/bin/shunscdgoat16 1657621605 2.31-150300.31.22.31-150300.31.22.31-150300.31.2 0.48nscd.confnscdnscd.pidsocketnscd.servicetmpfiles.dnscd.confnscdrcnscdnscdgrouphostsnetgrouppasswdservices/etc//run//run/nscd//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//var/lib//var/lib/nscd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24846/SUSE_SLE-15-SP3_Update/1467cc2dc277c3be210a0e585484ff77-glibc.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux ASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.31.2.x86_64/run/nscd/nscd.pid' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.31.2.x86_64/run/nscd/socket' (No such file or directory)ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=d785983efc0386f751fd90a648dac4e11563551e, for GNU/Linux 3.2.0, strippedcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.31.2.x86_64/var/lib/nscd/group' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.31.2.x86_64/var/lib/nscd/hosts' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.31.2.x86_64/var/lib/nscd/netgroup' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.31.2.x86_64/var/lib/nscd/passwd' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.31.2.x86_64/var/lib/nscd/services' (No such file or directory)RRRR RR RR RR RRRR RRRRR$H`b23utf-8fb68e1c624449463e3688ca4368347add2d9c84ece081f2ff351ef76514bf1fb?p7zXZ !t/{] crv(vX0{DK"*g}cs(<87+`U|TGbj69,Y4k`@%=vfHnEjx>5NK @#xlCsj$}O8|XUA}~kzMm/ͫjz Ng]Cja0Cgb zŁO1˙y~irw*)7Ŭfh#cJY椠$o@!3q? ZCQN @Q9gx~)5P%\'IͨtOI .E"d0Ñ1p>n/}3jF%ť7,1|oI_TB}r+* )ť`l[_W dMZ^j%⃁Laì-yѳT=1I(OJ#WAw(2׮,+cfۊvb FKv=4V@| uSm`ޣFDPq"Bd"DA+A~+^5ۈdo)-gx T<)moqz_qqM]`Am'fYeqs8N\L 69KF^C7ߤJ/ǂܽO`QeygwQA=Q#l-9 jDѐGߴ:ת5b/Ͻw^yxS~6$cXgPH:uĩka \yk=aRzv?jrL8QA KXQR` y-ߥmi`nvͤcts(0F i 4 rHYM7xW#0Xi ;4Pj @8#|ui8./Wjھ~b@fKiB;Х KFac`!^+ ,cݎmyp9U>?lug0- %k B5BU0}}B6`Uɕ,:^ rI8 pU#@OT-{Be?entt3{3<` c9ĄA=]GlQZøt*7> KҤN:|߰&[

Aj)"2÷3lGJowTh%nn%8Qå+y};k WqO}2}U3U;%nϯ@br -CV V3v"EcvTn *M{6#xZu,p.飫 ?Cq1A(V4щEE[􋐳}&n l$ڔ↶$V Y75~SohAhe¥6Ӭǥ%2:4ɞ,G Y`9wp /P)(xu=0sH*._sȩFdǚ1(BW-Xu7DZ^˫R6 m+ZLg@EsGjSZ;)MUMz[=wOJ)l! /YUZ"DXbj*/8cewoZ4{yCSG(E-1BG对RpG˼MUܔ<97_]vei?x(Sԡzl;͑ͨX'|h[yJ$Gr`۴`lnkN ȉn-)ϲIxaoW (4=^m>e\!Ӓo#N-d=ʿ)'yHJܫŐ(]YPr;MTNNfq7 XMQق~ lv]t^nF*A3jRk]O%bULԱV613_E_߿ KeaTA ^^]2y#~~{п yd<0N29iLJG2]A0Owwl܇9 @I3JiZѐYAqϡD8,{+lsoKEoԛieX^M g|fޅ3Qoqqn9xI +s|Y"T+-'lV {@rǼP&6j16 >^} 22W\(^kT.p#xP6ȗ%eVuChe댕2fgͱ)W=C šiD͢Zc{;ۣ+v8bXj@RJIb+DaXkTiN{=h)#:/|8*ptJm97|@QL;ZK^k3XJ]>b?etv5&s9$q*{]:1팠:]ByMk(@ʐoSBo xHqALf VYtʯ%Y,Ovҍ*w3 tdWZ߻{Z/ &Ct2}Fe-SyWTV,;ct3w_vꏡ]𳳣$+e\E35BoհyҸǾ-Av:o_(f*3ۅHoI6j $v>o2MhAȢ^V~h#ɗd&g6l(Ώ>; Os]"0}wT3ֻM̼Q9N6saH,X 9fK'(9D/chgބPaJ%@fq~xHjua[R֒|>Uр$qwh*Yp K09Ro~s?ۺG²4 QP|:" N9}v_Z^>nsAX:SC^tPTE)SCP_DFϴB ajtx7AUiLbkC扲uK 657)ɾ?\ńnV$%(9d?"up 94哴Tk&FʴWUq M+j.shs rwugF(:I|lGbE#@ ]:/JhɩU5}`W?!}oI_T`y)NS/:sF]sf M%btԛ> $DJ0,ͥ?ĉg=S](T3;Vw0o+b;' r =ƃ$yT㰥!Dm-EςF&BۍPYc{{ϡA՟ -̶7@<4hȏ*]fK3MR'^ {xrӿ ~AGR,Q)|YrǫϢzibKS9>VH" )9g:uQ-ApFur{iTTOuo;[|oրY 7A qPݯ=$BN}̕XDqi>NNLD]LQF_>B KUNxL La2l*X?` Է58I 2QA6"㱬8Jfd̪"2$,d|ߦEn};MǴt:g)e ~:[!?NiЛɇĤmɝqgEf1Vv3!u"'Wa]ΩZzL?F7 xޜea,(x [5U2h&[6l5ǒ<]@qK-.j a- $T>cٚXih l|hQnP%iܶf,{Jo"X7+9͆)Af=2͕`K}6`- @a&zph2V%| zf.Wc]loZҀyt3xǫVT^J z@dv:GjMY ^<E2&e̟);]5FnԋbZ3sM#)I3 98i﫜X- *E~m 1.b<0Śhkjn8Sp7s|^ ;fm²Q-4I XCU猶PѐB ǯtw2IIRK9,)C)1T(}٢\o',UxPqZ#5)K;[GW /e7 {Z2Ԭ$g37I*:]X.r(%5DR~%t4\<И+9:}&*_~s?Yx7MXHڃMj@xdxK9'>O#}}BA^b2B{OaD9160b'bׅMt0՞t-7-jy,7-KfqȗRM h*~.iW#Лjlk/[Z:^iG_jϸmЈ?sya5|?6FtUKQ0o::r;W#%>x>SL< \xʆ¯=՝ 6tE\.,031'BR-Rr5~.gA)CoAa+ 2u7PePK=Ei\?EjLqv)}T47b7-ŽW9tQ lŢjp\rjP({+^7l"F),Uwt̑gҗ]!Jl8b:沲mҚ/\3B5lݣ[ ;Ҧ!wrV}]$]C!\ ֦Mܚ{8.&;K; >Eb> k@ygݍJ{ʰb"6Zjp6 kd~F#Ɔ92+ƵZ-{furG~x,˳KhWe$Mg0شʰ(`w}˹al~D#"aY6Rə= Yw O07vtXWzΣo*KߎI+2>a3kٽQnދ@ ֈ^. a뺂 k4pcsI6ҸQ4}eh2tES%5yz'P >{oI*ڻr`s|y s:E+c 6W#g*gސ W)ì=Hhh{ݷmhM"0_7 gFWTɗ(ڸ:GvƷ]eUt3tVg"{!y]I",4Rvd}N2.4 |ʇynzK.01-8q_ȩp&$:3>\ FDBy9 $Ք؜Q"O˝d}hfavPFF-&Sl9#?)O[z55VU7.[_md:h  OϑMv@%3c-R{(϶4xo'ԻxLB~Tf0" z$.;$U ĕIc#G_)+VA$"x$ڥK %иL%¿Fa$3Hg3dq_ZkX1RVwԇn&|2+D߃_{RDM "in%C@o]TRԠ n%sҞdJI!/5j&)G$c({E7G2!kכC!n*|Õ9aX ao5s梠ol|(}A Kj 4N2c+A{eh<0(-|42kcJjK2l> ͔ o쾣;ic*IE/rq 8~e_)@c)}:$(KtwVb7\ bTs:ܴvgIs=ԏQ a DPݍNŰj\Ю*?%U]\;Wr/MasYP.g{F-sRټڨZPCRT =0GZɺ ݍ׼z_%jt| ub*nq*oIcz)[VJxh& t"=wlGBၶX[0՟T'𝤫e?ݶr ͺ-_m0= ZB}Enlʕ_%S Ecd>X(,8Td)gѫZp<\Вxviԧ!+ }%=fS%{ \)?sM *Iݽ,eVlReP4'?BasG'[bHEi֭4LQEUoG 3e;,Xx U.Bń`5 pآB4bQ |,hX64^%3 ľd-!꧍%}SBxf C@E 睏H7n}^ p)!R˔6eL"S\hDX%t{X0Ɓ6,y'eΎ5{v5L1U77b묓%וzֽEw`j|9]*(ܓbZ"T+ zXHƈ~{[`rnzfq(E2UOX3a45T{o] uӈOyg!W[(f1?OqJ^sL|>{ P292 @n *^b{c#gFaa8S(VǛs0\>ݼS镫5Aɛô?O5Őf׺6V=F?z w؄I'Bט2̖.1Df>K?e\<؛A0`gRzui#WR l:#<PPDu3ɢdgR^(]ɟt(JT#-}*f> =Vt"z=;:_;+boL@}$&i ҆ra0^`ȡx(V_% a|VMY6OQ SOOZ ޻/Tn=Į ۼ?rp<&G>2~(W]ӎυEc9hγTVm \w V,~[FLّ v#fy j3ӂW lGNg^c#\x.=:,*M*ں(hcS6bd[PGØ;]S׋*G]6+1n b1(Ɏj4Yh;)iƩmZk1;PZ=~Mk5C;>OgyA2x*IZثz;De(1AjcQYkʌp)(9FHMˠZ`LŲ6{5i- 6"S BYs`dB+&jʥ[!&\>uMk6&ǹtJgΧxHR-JPwݗ4":rѥ*̮w,vvE'3w\ oOaxA uw _FP.96[>dSw[LXc/64\%X鮈hn]Jn{5i1`qdڀǙ Q*IRQbc6Á2 }ɮ\Z.Tc'ά;'aw/:mOm"՝}ڧ,JLxҒPX7u%b/`*舃Iɛ?x#x(&zWҍIMG|qx#h?'l8 ^֔ںL0"ŦuRNC&= Ƽ._ @ҊR80zw.A^/i Bs8HAXfp4jݕ0{BP$ Hx[[)ӪHX2qRzrע8&ߝ]D ~adl`nGzqq"<+mƛ Oޤqigkd9ɠ:!-p7"R>2(?cD* 9M|8|N**av򜰻C"c5ƬM#5~ M`ڔd" @D#b:/}gO3ynj2T74~L]AIYo\[e<+bI+BiߖXx4!9^lw|c󜔍GiUCTK=:~%>&+uԛU)me5Xh/ JL#bFCVXJ>$&"2'+n*k >F}M(`.DlBIr I.j`:"lsIBG}LTWpx = cl&|B扐*[ ߶fVh< T< ǂS ȟ(³#ubuJsxO]u󇵨r f >,@b#Al<== vC.EAw_Ecۧ66bȄrvfJe@@;˷5G1g ǜ1u}K 4U2iiu"@]Fn1SW 8z&Q}M \Xh\:\= 1N VSl3k)IR vJq'miWBvOYl%u- Y7!nɣM*)2?I4OWX]Ia EzG['߰f>8yx'(E=wSg}=QJS>0Ŧ'M} %f<[1]dιhw7G&vε^^1j˶9 HkVJoȭթp8A2 ~m$ _mֲ$}ᢷ*lZIF{UTp,;kJW?oxFo*r O)r#FЍUˡ2 B?!Z'R"h]_Dp\<ָwߖS mM3aKWt}Wʔ-4ԗe8Sg\Ȥu=<\HWܔ޼ZdB!նQ)=VN 4!+v#JPOK3v(2.( 'AVVA p\]|\U /JSѶ ہ0~}ɥܨ2&$jLp*@pggnYcJ A>s8^Ok$ V8P8z;nI4s [۟DHWR!. W'ex!mvDdA-A'Fbxܒ8$[-T Rt0FVheQ$>m(by2;[渫$brqj(v+w g513Ji4*8M`~#N%'/uX`2U [p"L)Mn!C%Tygw3&v"yǡˆ-*.ZtvDIwwZ:V}ߠ&6M߻!&ahו tn9fw.ZBwg=FAlteI0Mнwsg'Y&Jʷ~ZfA^zwc=_FVQLXt8m̯[ҫO2<=Ne޴SҀ3݋pG/&H^\ڏf#uRSd;śAG(@cZmUwu a$} kr̤ ' I9J!Ccaw^j1* AXE~gIڭ<͘hz ڡ'A(j3rFjd|i-tC[fG"׋sX`2;V%D4%%ל;cj +"9}R&n\5řu㼔,Fk?<(!g"7'Y RO-zC+: fx%鞍ly@Θӻҹq*n9%Y$Hڶi<+ Z,PuD}U>ҭ&yK=JR}xw9@NOA)HRMU2)luMTA!=)$"S1@?eÞyH~ҺU!fVDf dϬ#w*_Ka@<2US0LCaJIj@0B̮ձK䊈~p,%Fl4o:s`~G ie"<,ፓ?Od>-׋$V.Zfk`t0 }v j)h3_"꧆qRwPmE&A,{s8X?BE"_3K4\%RsMG<>svVHe [f[RfWuuUiF'Zo*qV3˘Ї`@h2s]"ם>%v^sboH+ DhI=$ ?EԂ mJJ5A3On6*dk4۬PWN0VwXתi)O*-m@,EL^1]S!t"5fE9M9؁ 48kZ'~}kHSgiQ-*YOMAޡP!Xh*ԯlPҶXɷ.ACɹ6Nҧ4gRsI(L8&4118㈐it'@aw8wrQeW^먳vs-S[5KhۖXTIIU}@U&T[A-QV w*LT0Z",X;LJo%3"!|R ̓MggA+YES6"w $!2%$fj^}Iv."1it,2R2Fr} 8 zГt: cdEU]-vZykϦugA$s_s\TF"%CRBٯyej8`QE}nY8D5j3FE&~0{!v TL76#+PhQv]Ҏ$2dCjm3IYc8k1KV5.4@U~*奆wXB# [K3Ә%A{ Q*Ώaۖ^|H{1a5m}qZ K~5vzԗ>acKAa2tWxj=lQ]!.gEfRJ[_~D85@ZJ@Z s9f>x|S_ t'iTzVn(ҥ,<v1F}M7PIvNZ fy hiD=W: -:tيgY55Վ2R `Dbbjk_B.^ -$A :i-)ڷl.靱FLc&lf)@>Sh@NL3ﭫXئ4/= `ORFy\k\VF Yp'ʞ=t`9Sz9Kqg؍II?PںiuWRht/Y ^vݨ]<߄ѡZ n|kBq?ݧc Y֭&EaEYZt ^Mw#=7,S3zЉ4?i4gHXv)7PoK8A8 _qեGQ0VŽ&u:)B%_"3WDy~@tCxC.UD]0P,Z DX3_v}k&<-|!6*tR]5p/;L;n U?c?9Gg+nC{PMqxʒU^yMyWI8evCFIɭJSY=K#kLxî'4mxw TIzp drd_?v냉r@*J+(jϧé{yLWK 5t ޒ{ͽ9')_`ē~M@:ЧY%x$|.8[*dq R@٫䯋^ԙtR!A9Ym;]\}#Dlߺ伆OPWQ,=jp%¸D![3ߦ t6тCRS@=6]Cָi0Y#ZMѸyan|z̶|x} ZQi3'y sr!0k;_/lQ*i҉TKx\Qw_Cx˲V j$ V嫤D\aFgxC35 g`-(J=8X ANɍ}Ҽ$K X q?At@2/ {_rqgB: *B$O Q _<`{xp'W5z) RE N%#e*C5pu޳I+%[Z"΃ S[ycB ice wNԿv|Myi6[1G8wy J;zꬤ=:_+ 5KSQ_w_A0!8pofXܤ )+:h(^ip# c =F1㩔LlPaI>|*[՘fP𯑉^T N~w10: Bl뮔){=K|xP7W_bA̹#yU9Jn0|M[sPCPz>Tpg汑&SuPwFˀN[~lgazG{ %VmbO{Λ/T*b);"QWDȖ"T;%iy쁼A7=ݷGR 8Y HoGh2WE"T5M.r?5R06*yk}V{o;dNpZIo7{tAE RGHupy z^8߮O3|y(ggߏǻf|$zZȟ] |db/ω*뿹pY"xBQâW}`]k`+1XBM&y&z![)N(ұւ2s c# b~N-3k}ɷ E~PrTOĢ>h}aeQ=˰oH$|kÃP*ÏW8߬))R8]nv斂8ʊ-wHY%0=.ꄴ|3RۺtpU"a=26\0o-zU86el7w]dݟ,wz%$ H5<zZ]U $|?pŝ}1V sa]ry>(2!Ttz0`R^Z*!&vftFc7 {JkbV:H [!jV >H\:Q綇%i4ܪ8F"M/(%ˮ?hƎhѳitVKdjtXnHojiBVt+mpJS>pkwTǍY:ZPd?.U¦bue )+.WdPz_jZ&ci[foeCR6v};VS&@JGyˁBUۚ.f~uUIU:J *]>DoupAhpDj{|EV);emDU޺6%152 QG5wـrǼi,@˘Soa5s&0e$Uy5ws*'oO*^?h+!$yʂڙ"ɽ[0z(Tb/.*ƺ1#Q d}IEӥ\5,]%If9g'l3 ̶j6(S>#lm.30йhD;Uʫ.[ # nH f/(_#RL:܍g/_ؓ>e[F#DϝƆ<.]$گ$ AuZt7)"Bgu2]Ӊy/obrׁ,m.KEV_Z rk"¢| 3uk|/bXALdMyˁ(4i\֬qa9Pl[)W1޸Bh㼧ex(`:D~[ɷ9ڥvaѯ!!- #8HY1~C}ٸ'K/;[4P* wBi^ZkS_ѯ|CJBœdBaaU:bTW|БsR[G1l 4n4 Ur33& .龙b,DZ%U󼑅_d?~4Z\#Mb,}^xD5Tegft2\5q_B>-f?;qP5S[+x7teE3=tJw_P'F~J҈,V2&7Uބ!mT@FЗ&^ܣug۾?rY瓠9+|U^ybRͯX-W^+@V}A9 ׉2}ՏraqBz~Z]~Dd.9ʄ,^1ŦUm]!Eȷgʰ9HH߯)CVaPvB<@il'ӿpk~!D}؎% H9%Rgwl-y!rEPO:1'VHLd|PRocF~aQGe]zEqކrQL=|')6ڠģ_I_ER"Tbkdm-!cbmADu3&g)X{7(;}j(@ .y sLVY}`v Ӆ{#)} +VS<[YesA:[ʀ3ta*1O.lYu 2~RBTA"7$AXe:SM0EHGlTZ²=U|=QЏezc2^ B7֔$c2Җr\c,/FE-ZLԘk 9zWydH@!2\P8P}-AICDuU6 kdlT>NS3H{L%2;kqҊu[gP0 Kê4-!d,l3P})܍hcfE\e, ~u]ktBv)S^7ęI{^ 8W8N}1ilTC~3O[Ǝ!y0vb`9wꀰ`7NT:RAKGn QS:ݳ h/jaJ m{"um\ QHH #zA*(҉]e^ے~~C=ܙśs ղ+׀I(7GU::y25\qmރ#)8V1JB4&"1T95~K* ԙf(I~PO+t6dN٭)t Mѳ3xjd)QGZ^]KA'뚈hFO5fJ~l=M| ϛ3vZ߽eV*ᐭ6w!:|y#)g'S{9 Sȓ-ypDx"$ O@#>pdIۂ52^6x\ȶ@m{Xjlv[$]4g x} ,Q h>[ Nͧ@tt$t(W $7>СD{-fϱ2s&7j_fdn^^%wI1粯L{Z:w-ߘw>:E$??WX3x6q*t'teRرEHyR}7 ~`P`|lpDezwl` B0uAu?i Gva>ByNY-vQ |&ؽY0t,E=>:]F6p-*pǍC_o?09@J,$!>qlv/SKa{t tBK{j$Z/ '0)+Q*Tgr-0;nwX\ ˪)8H;'5 Ιi<$aOځ[0}SGX(^-!ڡOQch3l[] œS>'4ADU6q3泊w EUa-ض!ސMضO{mo%u#`hܺyDr2 +u [Wl)H$ȨD5B6m;zAU>va}$޲.s2վkѫg:ر>^-5' G;v" RFpN3ѣu'56͞@P}ǎT={#if7q.xc&.tjV@dMmpΡ%LUd6#rGQ޾Ga/򶩅?,/jQNѕ0ݫӪ`:*HªM+q hۜ#S+As۝Jq@ѿc 뙚(,MV XOT%s.RuED?UquZ=0G|oEܞpc!ۿ_`cqi&M|^]|J!@6m㷪{A8=\ Ӥ"@Ͻzh_ ZbhwA[PA Q1[Iz;]j:cGqYB&2{KijݯhPڱeG%qq ȲQE)} s-u'傡K@mp--dnc nXثn˛t?0@ܫT̠vU{_m<;dwl(O3 ;?greߥ3V6ΉQED@5+Ē9 ]"3ʯXXwj =`'ʀ_%DƦNi:(#7לp~ad\n@L1BwH]NP |]?Zo.`M3 ch0 QG,6p:# %.q.eF ;^ 3U( @cs >$g&cRطܗ. ȞglCs؟hi<Ei ѩWVM%yBm`yYLj;V&y03NOQ"Fw8x G'bN>+Nm"ROoͦ_Uw-+}ӦX]ڮ؜d^{2o@Um^ORf2ʾA--mC+ate2Z{a鮏6z*)vCb1w 1EZɢ pS_~ЍX>o"ˌBx}HF ^If#.xo 19>gƽNRC("c:2;yhn_PH<3r;ǯ܎)+Ηs7/v٫@ `?~/8 hB_St2 2%sH?*]beZv/MV`X%wg[o~D)F^. ]oShd8m /C>W z+\ٽ;:cWm"tn D%ɘ }""SyNsxh8u. 5 $mݏDxڔ; Dƭ*P?#2uA+j]}7snmd=՛~F)Rq&DF_1?GK.:Jn9]7rߊ _fjب6KSC0 X%##[)i5o>a0ZҢ$ڜX3-FR '#0 ,!uҤd2)6* dMJϓt8>m"eQ*VPXS# 77D3gD:̬7((i컹poCF Ŧ#a7y< Oo!)/D ?6-{K~[aR|cƒSfDs wqY:W۴Q9;Ho~=rҷ$!$CUF {X ,[,(n~XjMy#&e#'*sc_ߴe='#JjϾ*Y`-JFR7,by/:dtP!]e4X"p鹤ˑԑR,☆I[H)㜬vai"< n8Ӓ$t-N%~l5!F]Va%q d#kJH $c"^s]h?4hEn=3TđXzyF(}n[;~X-Bz=XȆHBe-x%WK`o~#dB0XV fG ~b4X"9%<g~ͦx \^}+NgN)$ 7tC>SaQ0i9bBW 'jh@ɇc,vq}2~8 y*zkg 8Kz acboz9i DpAO kBͼϞ] wulUGI],]5r H*>/m3a 7ky\RTM\pic>(ǰδKyU{[ER'~ ?5Wb?Fr AVj9M鼣ʬ9l-Yw΋\XD֩4G|Ѻ h:4:(CWfa/]NNŢߕeҸyXPt Kon^LJ~4EV1{}[~fmE<$>S0aW8QIQQsN}y*fXՑC-n\J>(2> [YD:I8TFY]TH !x{<#x!;KeЊN1q_ޙܸBdT)[ J&[C#PξiEU;N,/j`0f^k:M u*eG\iod7PXEKZ 7H%1}K}"N 6_R-:v wyy{oev҈zތDPs+}OJ$~ !W|ÌI7.3tXI73V("@Ljv-[Y*!NdPVt"I}0ajR" xc*&vȠ,)}~AMXiW;;ֽ(F[V;W*/,??U(NU!cRV ޼%K{~ym`?3'ՓEG7|az0Fcw;"k? 1f1KOW=m*jαEu4Ω"ztDaЯ 0EWEt9жYg+F3;[5ݒK%*}38 )dG3Ü1GUyϧjOϘ׊nۭʑmN Alǖ+ FgA$.3B(<m\JOJ0=@LBR`oC:}Jɲb50XN~A*4o}ZX6m`%VIzz 49w;| RRī{Ռe*MzD}Z| RU0_Eq73ɴ^X=#Qzy" &^5@d+ר{<čXC]d%;曰3\JIQoO@>:4(ET>.R9tc#kaxϖђOF# :7ƣ60(%]7͛ZDNKv7EX ): F?>޵wo$ 8+3ㆀ"&SATr4SxWjd9fVK$EȨ鍳/گݥgypk7Dέ.U} юyiXb.^Cӫ*4U1Duۖ^^.ɾ K9‹^V"oŭ=o3 ӒĂ>S~Y?U%Tƌ+;)cT*8PO>M*K2wm<  ۃ!!<7Q8cfK蠻2j3}!d Ut>uO쵔z-53xv5=r?WC[A9IX yxww `c۩ _ cAl?-_yDD!tn~^QMx{lͱ & g(d;$gE=Ѵ~$F"_}G=yv揽@66;GW7:sOcbbIcU}& f:FU5ؖfsHRۥh`HPF2y(o7=P D/ўwsHE o%;eh0rweNGjx^MZ@p׾Œ",4Y0!DNg5cS!E\k}&zZqҰQ<֦1Uef #~ѻ"@LHEQ An>rwspeCq=P's_;$S=9uwPb]u$˾𻽞8Nw#O=hIhb_@ V,K[z~;we9?u't^G/H^|˾P6*l n0IQ: A}T6oR[M!`@O{.21&!ӻ6MF^RȏyCJ'cwK kķzM\Iy ԱjBg~@F«:@J]4s!2aPtwk'N# DuZV=3t4JY`u=;c)Ó@d^EUXX+#=CV6(GHn`Q7WJ?a$MJx&bRE.B=` ØqE;B-iut N[bH=.uBL {6v/0 B9Zym&nii 4&ʹ+IQ<3KiUr`p"$_Brۮ|aљiL(Y fĿ~kdkugB"ozJ _oB 1빛Dž$;F%$!ֆG֙+2"v#kYl G-v Okۂɠk0}2{ ='{D#.mθ&XHf35=}ay=BU6(hP?Hu3.Nx!#\3[wǢ (M'UQi$139R2LM8)Bbv)CI"N^ί#i?͒<tګokkңLֶNl0ITC)$4# 1D "y™ZmGK]7$0v%O!^3eUz&V}TM Y (`:*jK`SOCN4j1].#W;73`[04\ 7C~G=р=$7adM.pj!tr&q;:z!aT#i!3|Rqu*q9>T7t;K$Xp݃<6y!YR7Kq2XM:ؤk! ;cI)z%-LP#+hФar V!t-/ڝ1(H{47d#w[;?QC)x$V+(M,>Y4[Q&-q+IMYynǬ|mS<#m#4p^,sE&NU!UX@dV$K^1!ZIjZUک&II= 3 )P "uКG&b/$:nW'RB=wid-ɧĦ/M4q^W)`CXx/snA X%Ȯ~( \8:u! uA< 1<bWWqovr*vyηcp[:r%հ@5\6=q@J@ǜVǂ0#1|Y:Bķ@2ķNX( !.4KEejC􉿕1D|P o?\Io~griJ `XDL ۍx5l_;~ԹA0@29NX"l@s$Jtv#`,5}FG"p)0^?xSwqRj{ӎtkGJ~r+)t B2rV EQok{@oE{gv%) yOHJb^nZz2epm,  ?rZ,BRkk僼Bi`A\.ӍU[mm$<ِQU>oP|LVۯ]ŜJ`)ԟ}/1q3{ Xn.lrqb]{^ nCmM, m3seZ'uxH}#D6c73IMJkX*rʡ[l1-7oa y5wlWx TгSgK&x zm^ߐ#讻S&V1W :)=מdf%T\ˠ6+|9k k9gvy@*)t>{p6BE^y;,"RxWLpxR}:J-J'r=W]fBKY>}Pj 팤VJ>~F[mMP^ߋa>#>0q1O%DU)$?)bj) ^ߠ6WS[o5˷eX56BN +Kl6&fڹe52yM .2M_IQ$VYZA#h+Tp(NYS xXYA v4t@`) v6$ ۛ +Gmh]-@Rac{5">ect|5Y]?tBWcأ>ǻdpCӶ6evEGx vkyoʇ޺!r͝F*a3/"еu$Kۧg\шWkٟD j s`q]Yif⹣ e֜%󮶩. Ef\N6}.ń59rA1KB2/;mkgr]CյBr2~\J&r~MCD*瀒vPi͚ДCsw{DSV!01K8gcY"w ?wGtW,:XfRy}E;K5+G9 q:Z|eIQj`9^Wph- Ctj-(^n 6!8Y=s Hxd ?Z[lz1il8paJv@LÁ윜Dh\HV5 rl֭:8gl@:m>1=}r~77]kB3b]C>Qu P!ò#KK0-[OgYvFԉW,U.߻A_F#Pyqz4Feƹ`%b?LӒAD664QIwO_5k%K'Wns0v;Uݙm&PeqrLYS#^zKUE1l(u( i2HswjX܈9??CJ |px 'q4dž8N(ms0cY$^=63RQkH)\F]v~B'Qԯ[iw>]'r2#+ *cp3ۣ>Q60I ,}aaңw䚐ToA]M0EN,>𕂿HM~Ot-~B([P 9MB|#W^O=i9eto ~`sͿvHvbT%I Ҫ3[Pe触Yz $kK Ta܄okPTDIh+&K] /[Ɵwt?SP fW2LX܇|?O|ī\*C9xl{ݐTT3L/Znȩ!8c5#z.3zYN͐jش/SQ{)3OX^ в# 6l޺rIqz) 2k7uHZ}ӵ^ҡ6)BVQ zeZ@-s`?ɿAB~L#5 î4\>[xxfTsw5Ձ4g7J42}И^/"*F=5X"wgby lY]Q;DxHj.|sŞGtƾޱ1|i5fgbJs$*X ňV u ۚ՛ Oا\h@R`).Hcdy'op!Ŧ=yo{L47ӻ)Bmj ~&RlظQph)g:U*5ɚI)K)ֳ;0!$['KWOF@)Rո]9n4_|ARbq8}c_F#c&ִQrpΓd_U$Z+̑>Wbt̻?y}ī@>ps7Ʋ4c'5Yr]iX*t#"K͸/n ٨F?xM^*z/v}OKS%QhSuQLKSl g5r t~au$5I/d(商%%e^Emhb3H;&sJZ=pί=^wF%.gKaڃploa!d wOޫb`!c #Sz2ouZѨݑ,#Fԛγ1&g"= les ,HLxwYoYASv />q#`2@qIBOq|C`f]MmWbtdf5U][S} >(|\u(mU855*O8},n9E'"_7P2<ԙ]\٠ݥx\iঔS-(FGOz*ZDre?Yp$^Wc|̰KTUYM3J׍^kl@H.&P!:4DF5U,3:D'ckHBw絿6kJThI:<ġhi؛!:T'aedv&/%#c*fNdy:xNN/vkbX8EU-,P( p]M+a V6Iż[&I֜Mh^|o>K vTW簥mQYT-ܻpK=dYȶZXv "747OhiRv +@E؃eOeqfUW~dA$NR&~q󚕱kͨG4rT'٬/|\hz0]̭Bp<_%k(õ7lU08<Ԙ?\m O1RnNbI Z/a5 .L rEZ02FLտ{.wv[w6T4g+߃qŴ)dbԃ]"^iqJN twgIoX,|AW];CPס=&WSORZiԀUd;Nl.wI Ɉ"tǧH{[HL_DP-³? oF9k5x-g DxWtzrfk %% v.@7c "vNIqcY 8dfX`'Y<*@. SWC3R8HPyJ$<\U*׳>W9HI+XAr`2;2!);"(d) ;-? 7mi̹ۙ[(ʊl1:QџKl4b*áXI\4T`Fb&B]`դP@tRSj_T8ZN  hq~~p[%LrvUlռ=ÜɊ* Y&0h-ˊBuTH[7a8FPݰh||OT-PeҧA OtࡓĐ=u'}/[fX+l пTߟCR7al.~#Yv&dɎ\/U ]:(:cK8@4V]L* =:wC KN]/:$? jՃ 5o#s g <~}ʘbkY0_4h¿I<#u@ hEzxP4;ādڙ~X~&!EL` IRg2oU+#aG5FQٜ+"L_+n]!CVEI=E*e@1}`(vNf&4HodK.څwDztؒ]s^N UԵa|O1 6|OF7&#ֵ˶a- >ׂ‹^gW<9GjZXACȟSk;R"dE6fN7.H 4DfrŚ;SD$8, UL嬍:KsXMr^ܔ-=eS9#Yc??2Ul#}=Q6^ tM~n1I/ex*:a1,S|l:WjGqM2v豨+6%g=7*12|^"aAھ%ǣfUz"j AiWIW!o`H(Ů1e! {j%B:B/s {atC6f,@C> )8fժY{s7fAd zMÕ9Ƃ=<{j:؁#l都c]#pq^F<F ֑tMA%0pv]ZhZ7.qYz#'7V/)Op%dUM q<4u 'JZ-+u<@Ʈ܆f{ʡtC.ΜAjnX90ƫEEDuiz] \Z"DoLHZw)—+tOq|cfvBP\Y|@U }$@;UHM,lsg.˞YMnumFê@)lloݰTE!VԟV&ݪYR2$3@ 3W#>rƫFv[ zX~.UC;3cڣxH::FՕn@~TAUFth&6vikK0ivDp&}.dxM&vWڴB: bq#LЂ_![UV0`Ѡڇ?u )rbDv(ZB|()4'm/6ʤ۵; h?aifXySE.š(:'!3;uP< !HJT坏즥ItFcR&3ejs馿R96Kɜ4=-44}9\dZh< zlPZI7xOûl)O)beDK^u-H[8 M]v (8wea> pFMWFA9.=OW):驉}1>ᾢ0V|yfw{YtqQsL#SM4mmenxD#VgL+#PߓYsd4_B= itB1 #(Mu<@jzֵ{z/ўKgX8,zCðyf ׏umG![J79P!7"S ݝH಼@W K?&̷?|an:;7j#Hw8C R}njJ{8z2~Tzء *$lɬSkSo!T#H@lf~XRo.jm'5Ɠc^E/r?ɨqD-q'4^v,f'?Ge]B h,C^/w)d2 4$:rEI)lDHsyލӴ-^u`2:MxC2 7{E~[LBF]6a2 tɌpCsZHq)^R aУ G=yK +:j !xQQBO)Ame ~ :;9fld1<:*UB9/59RUrbgaV}]ofy]mZTSik2}$z; L45_}جyWDd(>HpSs" $f-W܁YD`bCp̡`XD1N OP]D뾿( 1mr`jWۓT, /3bQidb 6*̙EIBFjrXl-mKɋ@\qKȵB~qA;#~fhn ,T/"`C$a\Tlش >e-c].1}氏rSB 52ڠvԶ'~Md՚jF-v..go"k/z% U|%ٞ%@hm"ߢ ELϫxO.~loH,6O1FNZȩBEH}n܊9{}ϵO6$mO<_JuW"'` (T¹1Ux.+aB.ExfTߦl(ca<Ov-dL 0aAy8S?f#h|9K-D͈d =l\  wQ%8:C؁e|MimKٽtergcPŃ@p? Oj`]L<$\J .޾K{:?8ڒ[k98/(,@y }l@l-ct=1eբ_&xW>?jDMcr;aim:<^u+` aN0P0>>!^i]ݴʤ%HMG\T =p#'p9Vv~x f3Uᘎec6Zfَ^n[0c}һ*:oM1t&/nW>'ijL~W-.iݖq^.7'RcP]@/Ƥ (LY}oeH͖".I%A$.q[Om34/_עf`U$l*!-!%'oŎܞߟOt8>lJHgJzTĚ&6;JH2)/9Yi:%+}Y~J`1r "X$[mWCԩj7? g.Ţ 130]O%REjBL/%|7XlIJo[ӱtWM؀9{c8"0pR(We@~>%:dI=cJ EX8^7ް`o#D_ KkS{Q\|=*1V] .ܔ;Ohv42 rj_!HE^@>_zL#=L[)t]FL5ٳ [,?aP ۢJBKFo y0r\})냣;^1ȍJM,8T]2}v;PDa ]7 +)"_4lhxS/Yi}~IGi].P) bv$f_oe[N[ߦc`[%B {.M~VAQזV+_l != Cm8͹|~}G!uTM`|`QU O `\fAwk왻ʠ:[N$SMK`t*`AS,+ xM,=-1et=p$kSDTw\{,[v7@,)۴)NtEEGߌ=)Oܜ_S,js#\dX۷h€Rޡw{3w~g8e] S)A.1/ޞzzY28-T¿G\TQ4>Ank~)ϧuʆ>MĶhU%Ǽ`@|mRY؊y;TH4RM@\8_R* S٥;@,clŠ-a1TA"bC9ߣ 8Uڷɬi&LͲ z*R!$@40DW:HQټթ7CuSZ1)2}U49tOл6gҿJ LU8>'N_ŽFIYc̒69lp\ L*-pE!'7aax2n4` xY#f뀏hM靧zڐ{gvY ~ێL(RSIJ(ſ#~%Q:,9 ͩbi?^tUWޗF$ȕCbvdVѥ|ߧԐF~= ~.jv -^b*0A`75óأ+s)(#!f񻣈5pm,4ylAi\uJ@,IGj֎kDv?G7Pr5az'm16eh:Ş^*/HӸ|f_Q? rPxp;G(}:Y0PޣHCwKu{9GCmGyMΥ1vg x?9o n KKeEA1Q=JӰ[G n\:Z{V3QBHaiV[B ` [7 vЍtGm+??_쬉E0Ưq{r!zDC}*@Ќ4bcZ`_@̜ޣfazŹfyfY0P$b»cˁ awVܡ8b4ӈn~==; #=Lz\EeE&j+wQl:RfC=y8YȪ(!ߍG¬Et;~]EZa 3cƭZ'+94:1bӬ^'T [A QG fQa8pL<XOynx,DZMv]f^E,bIJ}#HYQ,p]ZbfCp[80Lyv|0OeN)B>(o7‘n[OۺDiPm1}wr-[2=!WFI-|6Sngy5zr~O 6fY Y5:H Q CYGa)*saH= .rd%€\]Kυ)xM;פ~v0gF7EN[][QPR$`hm[M$}4P'םJF0FZ:X2 #LeRE%l*] ̾mg8cŐѲI^@ÈGH(-Q}R$QPvkZs(Ta[Γ3דTQ)JZ$(}{ (IV25YM|b0 gd@z=DP<s0SH/dbV4ԅM6_!#G9 |-s4sc(O._oಃ( .W)[ uD`6:"Lf< \'7\gc4`8_P_nym+X B 0t-U~AM9#?0cSM]a G <:%HvF'4Jhs@D6Ha&C"8oF o:ձ4֩Bw;5pMQmsz&MTQb&2+^% xv6[ c^TQvTNߕpr4_Ob=SAh#yfyq̽ٓ+6oӫ"YԹ!J(ҽs?P8OD@b"]s8yy-#d= Y{GzuLaвؠm[ $ЙrmڜKōa] STH< S}6npMhl䠾Ƨ:*E 4mˊa۔SCIUy j^6wkU*IT0M Vo(#HzMFy$/`;r~mis+y2B]aC"r&d cJ5cz{GxSGHWC'NJO) UG'v6N.OR y1OV鵅s襒. u '۩2O =L`/年e_&: *rl*~fx7&T#SrAHQ?Q3`rA a>Ij"(kˈT0 m1@>HN U@/' Tv,|/> z&hA͐c}>¦{)ZVv_&匥$H{EߥWVjSQ^{{0:\R{dI#jtd]l3CXU JCxLWECPXb6NQx^m#=DV|?9iY\\U1Ѻ% I0PIG'* 594*msM 9`}2:&^ TAܮ]'|"d-僸,ZI]@ע7Y/B St`+Tb ̒,Ȍ,凳vHUs]ҡn#&%)։.U"m] yБ.6-f4,tq3=KgO3Ar5 < |h$%5 #鸃x@4 6Y SpA f9fOl -\]=7Tg >C'|G }ƣ Ea hx3M̺98cMXz:EaU .tMV'X+S 'J\ :V*Crh+RCHrPbaE~-8bC-M)׏nآ;4HC0,@8Aܚ3C[fZhׂ5`ztƤ-.jB&#WZ,Z쀭n-Ƽ _ʊӝkEbY5EZ;̢$<&xV w9-#LT*AX۞seƷTg |T,:17tgQYYh=SV TLm"v~ ZgX/ibh 8Ɯ7e%pXZɬNyI`B GExLթZBy; "dO+\)Y׼HKxzw[n3vΦƜ]km͕,~Dp^ zjr16ࣴh= N܊76s3+C%u14Ք^Iܒt$/@b:h 9Kؼ :1@$6AҸOP=r0{iksdeRjߨ: a*A@QvhPxMSs)^2lĦI&B7O@ewqB)O> ]ACwM~T:*nŲuwt-J1wˇBa؟47DI%K B]`儁6a/}W8a|.3EX!&pԫENp2byd.4?R^ W3CVD&ɱ`5k=rj/ꏑӿn(O(%\`ԲޣiњJ3sN8 ʁMV>$:"|4wN' JTK͏cbr"/z6@qYS(›",CKym3/LN,P6qS zdɬ!U)?j/Fi4q[@Cx:wo%Fqqa8g4iV(RoR}"s@W"ADOEOG:<'\%Ya۾~`3h2  V;Ͳ{ v;^j6wl>CN fj¿#~OW#uź(!tֿR7Q[SpJ, ds@ZM}움&vb\تD&`<ȁ<uahTaMXވ#hNq yAgH֍dY>e!(/%TF]:Q FF_7jd QWqX,JX[T ,q^'" \YW]'I.' X6-`mME3 :;;ɎOnW6Eⴂ=#6#)")O+9,\ofB'H(:e fzbOž& doMMH>?.mF2푮'^F|j63pwT$ƥ] IGγ 0p@Tؔp@jZ7Sefa6"y+ “Wax<<9y*fB8F&,㤤TUc[\8P]G!۵*Ha` kސZ$[PP\zbɼø,Ψ@)VOuoSBV3-TP1QT/ ޡ?;((Fhj\M& oˡցU:}[UTOQY&yL>&`FdUV0(AepoDhyXo!„ =C2H}qH ̄NZfbFoMra{IzD&l=iCިKs"xj2~f~=N/kw'K$>C<HMA",u+㢭Bx`W)3$ [hNOѻEUWݥQZ6LZvTC}BF[zF$6dLHV% q \cE#;$)pH9T]rE+Μ9`U̕vV\*29܌9)kv08("EbH?:aCD _pn 㵴bOb#;hY7dzj@+4t"*ptDidR 0ܽ.Iߧ1 Rz]y+Zt>!?] %9g% ۔SdXJž@J9i#8mgB6Jqmc%>5Pȩ?WVvsu/}Co֭B+aWYyƼb-"Y$bYF3b>`A/e/?(X +iQe((HŽ,V]Z;١ɷFc S z #$i8B"Bes1 h _[cmB  #ɝN1[;LvSbT>^GGC}ciԩȂ l݌ 8Ql(m݋q>lBA!O7Scd FHW!$$6.L9ڠa! jr~,C&7ڟ$.W❳c=ƞ;)O-AVQLE^2mzl2MI|r F'jXD%*ʖJrj /'YBU *B0ٱ |xy |U b'"io#[L$oQ&i&3.QZ@aHd 6NJ%ھ1dUeAݘ]NY/-*Y7 jr7<JFlgf4DZ"%=5]S¯J8I!u" Kl' I)]#?2%]fdmRlAՙe*#_=pϏZ@}i4d~@s#|X3D'ʹMBE=J3b-H ꁏsA?Nry6 > Hbvd9  r lg tY $P;b}*aڶ ,ڰ>[X <J +~ú}x_%(歶˚ < i10k``PQann E{C`@O"]LBGRяs`, 72"ƭg @HκE)(HereB03:,Oo@,+QiųuLJ~ Vo5ΏTnS wmcϮHe!>T R8u"|1쳓Ҕ]PPi'_z1dO=E0vD9nHOkΈCSVaHLU,7 \7re֙ !tPyĹmM)- ɘP0W/v]ig7XiQfTHeA%Vg@oHgp ѾA%;<"[Cj"Ҳ2 kL!EaGqx q՗ i"K?mAĭ=+q\SdVVĦ3N _VI)\ʵ?k# }HcB(ՆT?Խ>ᵙ#%qנr]C_-;no0:؆bOo$eOnM}ΛpF w(c=|`$ dge]X9%6¦D7jut:r[H?lU\V޲wKQɼee[ضo {fಷo@O懿%!CaͬIC7jGc2 xF3k=Y']Rcg)ranpK۠cf0IY$8BOV'!VOPbաüv78*(eϊۍ }'n|yOmWehWmYI`2fm8%%=s)oh & EV܅6΄.XxCj&dsv)-쫭 4e.a]wBf$[`q$}L{ k&%V n"p]2 S:\y^F^'>ygHTx (j~60eQ1)'PrCfl`7ǎuʎpyz~ D4p(֔3-0vWZBT!@{v5qLqc*2WU n nb{=fM6J$$oSF!#ka<]~TJhg۪3Q'F& {EJm:sD2i*M*op ( Ї܇':O.#okԸ{O>1׍Ó`, پf/t.t 6FxTnyթ bIrRp\7z۵sG*8,YfVz׺E ,*&߭{]f(1*_ Gi,X80iЦdlPSSmյMj[kMۻ*΅T ǍMqmm/Onw1>.o 9'lL1˾? we^tV@ˏ?W**+5o]a3}ftu ʙ.w`#ygܚ7cW%\HyQr ipx"|)no,݇fPbA[Ӯb WVaep6t8r 40[&_O▋-^@[] 5Q뚿7Q!m%{Xs^5хt{ݭO`GSblr1:㨣*֡Vv%GKCĵ3Hz̭Ur)fe6ԇ p`=Wv0Í0 +RZ9_ϰ = _=}?jФʞpJܠ#~|@CE?qyOC󐩳o%[ʘq eZ -Ui JguT[3o/ob Dt!67zЃZRn]>V2^."kj [D 149cg6^8:^ A O Y9nY97W| ]0FquCo.-vS2OZVA_ D@˚hPE^犬FR=?r=fyN5ɒ/s8-~Sm͵"B ѿy;I&G/V`ZQ/) (2M2i62DLӑTn3R@H>4-Oۊ"L toExazk$Ď` 37kE/lz. M@*7:C]v؟0##r$ޘwxH0!r^W-骜*PQ:m:M) tu O$5يBZr_ lH Mg?eT)Ao585L'J3I. Xp# [m]+6C^/j82D 29XGmIE#P(|Bh?Z[OzdU~ʗvpϦc{gBE!-۽yKPGpC\cL] ҙ7҂ C!7u$K@o<^'S 2">{0n-6FҐeA.U_+T6̜`DIH¥ihIޅM4SR/ou%t)C)g FZ:E@"gsr'4/z/j DCvU璘]umpJYF(F<(chb{Hc!QӆLz?}D{[A]U"L٥ izQ.UkOdz^K-'P-F?*ؓY2B$胲05"ᵤ dzm _!*p] jYoR^Hbh4 r7x ܁.MxiNl$H\^jV3fI|@8IRksFd .p"sȎ+%owE?p #\ %fC*\XSZӽ3..PBX:0yRT y =ZAz.Lh]^.GnY\cAݘșKEkAl$$gZ{y;Y8 Ἥ7D@q1FN&\耫 q+xnd U( ԜL"G~!zG" Jm:`;J}Gziݪ)]KfR*zm5`>L,6Ċ$Ϳ1qöl";Ӆ>eNCVKS rb. 1Nǘ:ig=! .-w!*XNH/OOCB5Cu57)g#6# WK;Œxsa*T\X^X79GlL-f~!tWj7=\pMH{S*ZV_@b4Gv#|}og/?q HZH| QhEA=Of MkmL/R;dv21JJ 8ooo?~ `e^Ң~:w3'B"ƊcF:P2 2 xMÚM:1:i[ !;D~L'}d5G:Z\z(h5!8abiFz`8n ² :g_kDW=O{CZz<ۀЯ@#&`Y36-4Y\q K>"]Du({08 )@*;>.Os&௬(<~Jmi,1(I(@c8, `t2]ӟ<'7t;ǡv$"B̂ù,ЖJѰ_>p;R{bpGDZY0@䁀"jԗXdo:.$;;.M0T:D`HJXV+?3XY% ?h 0\Af#H終܏6QnToԁ:_LZJ!uG1m^ZE[.fpoW* ,vVwk!Nz ~k׺biؐ:njgyEIW/;C@MF_2%ۙ !im%Eh X$+:7@*Pg6F˞zz K ٍ%{zʵHX8EM9 [- | 豯L W%:# n|1}FQRV_0g hA6(wn̾ןJ2F<d,Ny5 ,;`,żYV'߉s)ˀizJF|Fzd4U`$XF$CGMbZ)cnd1C֯z2hhM1#p\xÁX"_$RY*Pr1,R\!מ] T?]Af]gCl5މ*=73#E*CO D #\bN)=yk&sZ"S@RJ(` gNr!Z7%P[͔M9'^~_YQma>y(;?=_OZlȡr8Ԟ\'#EOHs*LA~Ozұiw8 t5fRa#BϛROe56 ۰J*gՂN먦SL5@3P-./ #7S39di;BGr(OGSTٓB!CwpsɄs nPЦǙ|Xznɹ7zBO.|%JDLr;Wv(bnǟHCD- qGٙKtZb3zC&4%o.1-lvȄb>iv,;2P4㼑Z;/+iu!IcƌOrZ5|]?1?7T!- 7(|;aR[l*͙0Xo9@~C~D,da`#Ikj#BBmåmVj_/Ȳm2gvCr>=?эұK @s7##>/US.3@nWgN$7ښC$Z*c| ěaw . )"{^Ԍ^:;qɱi>|.6ieo|BraҲq>;` #JfZ7`(˭.I|s*PjЂkެpkr˟K:r;Ӱ:x3UYn c Ўrum~'aRv}P(EOg &w u.O*!o;'.} i[1̿.QtkV7!*_ b^!Xg {};]kOE&/!UIQk(<,V9wn^r@z8:6ճzkƜ02"EPINBT(NgsW.x "`9ӳ/D /7 -N'.;+8`}s>j_x^Y=)83_)$\fyHV.0t*(zԱQ|)9]G~)iY:KM^aG kO:4&dk8F->%07%Ъr@F* 8lTN`2Y/F|f| JPb뮪x}dďL?$NF%@I$2i*JV֐22YdBrCgmGC1MBdaw e6{^q/ ")'y%,ol##Y> ` j P[ ec; edC0P GS  p:F@D~d&M}otP n*7q+,םo hvtI ( &=Aee/e1m[/@C'h(o4R<`+9F׾[Z!`kېUFwqZݕeG4HG~%:!ߣfNevg'1qϹ hډ+J}|AB jKl;h&&.LYUWj;{#VeH^ҩrJzaNtLߢ$(`MsMn9Df=F \Rh@{*{z%5"{p[ZqL