nscd-2.31-150300.41.1 >  A cp9|zVhD"gڟ[\=:X]r@m>H)SRРdUgM9؈:a'4cĖRgAxѿ[EjzK'YJJH&E~MbⳖVUtgBB!=yW6ab˂ I6f=+k3}3YoI( S$=/ NIƛc9׍G #|â0Sd}65864ef26f6b6cf6a009e41cfaba7f35fd8ba05af3c0f2f1add0da273f846f1ec97767d0cc323e02891975f6eb1b6b610c3d35152cp9|WbQtQSE(nIԉ]3{/ઁhT$[_>pLR VpUCTSgf\ 2j́- (FGMGa0V'Sbtp>:B^-зFv,^f&6P'_Yp dܛ׿'7 26?߲*B(*T*wu N/ .HewZvvsUT3Jf pΖ/\2 4zD66<>pI?d   4  CIP ? <   @ O l>`"X"/"(}89:!2=ִ>ּ?@BFGH(IdXtYׄZ׸[׼\]^w bcٓdeflu0vl wްxy(zt߄߈ߎCnscd2.31150300.41.1Name Service Caching DaemonNscd caches name service lookups and can dramatically improve performance with NIS, NIS+, and LDAP.cgoat14SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.gnu.org/software/libc/libc.htmllinuxx86_64getent group nscd >/dev/null || /usr/sbin/groupadd -r nscd getent passwd nscd >/dev/null || /usr/sbin/useradd -r -g nscd -c "User for nscd" -s /sbin/nologin -d /run/nscd nscd if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in nscd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in nscd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/nscd.conf || : # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl && /usr/bin/systemctl stop nscd.socket 2>/dev/null || : test -x /usr/bin/systemctl && /usr/bin/systemctl disable nscd.socket 2>/dev/null || : # Hard removal in case the above did not work rm -f /etc/systemd/system/sockets.target.wants/nscd.socket exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nscd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nscd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nscd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nscd.service ) || : fi fi exit 0 uX A큤A큤A큀cUcUcccUcUcUcXcUcUccccce2cdfafd373d24fab07018d0e95dd49510ea6c992b7be2b0611ab23bbc2750b579fe74962fbce2fa9b2a4b92f693b2fd42cbc2ed331fae268de7104879a72df879c9cec5dd2414dcb76d11e75903aa6fd9b7785c897cb9f853edcb140a71b7798a60d2609fd26d58d87bbf5a9888cb1bf201422e832a2c99be4a6ae70fceaf11/sbin/service@YYYYYYYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.31-150300.41.1.src.rpmconfig(nscd)glibc:/usr/sbin/nscdnscdnscd(x86-64) @@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(nscd)glibclibaudit.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)libselinux.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsystemdsystemdsystemdsystemd2.31-150300.41.12.313.0.4-14.6.0-14.0-15.2-14.14.3cob@b@b֜b@bb no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/bin/sh/bin/sh/bin/sh/bin/shunscdgoat14 1661868425 2.31-150300.41.12.31-150300.41.12.31-150300.41.1 0.48nscd.confnscdnscd.pidsocketnscd.servicetmpfiles.dnscd.confnscdrcnscdnscdgrouphostsnetgrouppasswdservices/etc//run//run/nscd//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//var/lib//var/lib/nscd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25649/SUSE_SLE-15-SP3_Update/fcd4b0bf729735b39ab035c69e29455b-glibc.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux ASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.x86_64/run/nscd/nscd.pid' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.x86_64/run/nscd/socket' (No such file or directory)ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=ccdf8323b0dfb44c44af57c3ed4e25c2561a1aea, for GNU/Linux 3.2.0, strippedcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.x86_64/var/lib/nscd/group' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.x86_64/var/lib/nscd/hosts' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.x86_64/var/lib/nscd/netgroup' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.x86_64/var/lib/nscd/passwd' (No such file or directory)cannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.31-150300.41.1.x86_64/var/lib/nscd/services' (No such file or directory)RRRR RR RR RR RRRR RRRRRE{dP_ )/utf-85f0b61b19d1e4b22d0882302317db18d49a8d2652a75dd8b92e0b259f55ba29e?p7zXZ !t/{m] crv(vX0,֔[V~ c\*Mײ_"{1vS]zАUGjGzħ!,${KyDK[w23E@ԉ= [P_vKPq;$(#s! QnckS_׻(gq*BF<7J- x&u+mˋ]7P|:WMzg19YD(0 1*E,tK^JV7l.Yo2ֶŬѵ-mz(D|gJbL3Φ*&xt=55tC 3MH> LXvC]-.9-Ij#r xz JKM߂ŶޏOcBe|R5PpΞs̃g/A| ^UJo8;ApF[k~o x =i[pۑHrlFJ g) _ID )1OMqx'PgZ>0Vkъa9"Y sNEF-Ryg- شzIJtϗ)"*$N-Lr@FM8Xpxp<6nP Yq@[J6hZjK8>aPkm6f&Ma9Eu}(e=07V/7^N-Ģ`S {As~G~DU7ٌf 0} n+͌GpZ0i0 "CTR=c~wu /hh blɫ ZzZ(CFenI@]w:w%1'j>phkn-F(at3-v6' ȁM8ۉtm295 u;s3l J׳f;RMXUbbǙcW[;w],@j|,MTޯѻ(U Q}NZG^O~۔`[U#*g׋EI"pďsuJ( 6H9nhr=-H8MSOOe04dXmKU{<;N裙2@z6dVZ./A-z"b +4X0)aLu0ۚ/ t̍GPnotMBGҙjCE U5ܧ/sYk tUqeJq`c>4Q#DhE0Ldg3]y`g=+]ְ K$X 7\|oO]ZZ1EYdIU|A aGfcr?#)"4hA9ͤ'z`+9yɽ.h⿰׏Ӱ*qQKaIR[/`ag vN ]]FJsOyQV:O/Ϯξo;,;>6 y@D0QgS r㺾|Dk+:%E^Ȧ)ODMЀWb]ma" ]W7K(8'lfbp34ssG18uN#om^#ֻ6B,U2׾sÄ:5a*`ml'AV [Y|O-SҰ[%#kOg勞{ʍıDE+9zҗPV}RgDŽO+_H$]Xe>/)H{Ne#H0jƣny_̫KT 7T Lh?Xvܻs֋(')DRQQJ1Et{˖5d91'6Z;C rF "8Rn󷾑}=$Q(Z% kuވ' 1ǷZΎQR8u"][Y`g3abæHӰ,@ҋׅX&Yj`!6膉-lT x4{߾lf|$k$\&+@UI0`X9ڇcj8>a N.$Qhy|M߫_wd;I>]C:{ZyFJ 2>_a5 WiP4 ==A"-t'{A5yճM@Z},kZM7e T6D %$Ռjn6pʽŏ쳎úm҉ ։Սa QfKQmf`seiO 73ĂEi*{{V4T0Dϱ6cA/`Ku<*BNZ?u7~. ̘msߕs P|x7v|+ {$P*.Zhh' p!C_*H;JPFXP΍?Z,&M/m>ub;2`4&%怬eJ=)+Zgpg̓WRÑsDeFTw5Ȼu *L !ƕ0d>W[f_?p]F&݂6IץnLXKsd]'"kw <,byh n $[ꨇcYMhU_iOU|IT H7' ȫCkP7b2t22Nݥ 5ְ(!AD Τd΢8:05Y{ސQ:+$L}:s:KMmϊ\ i?MVKs`{DYXW* ftt.y+ƹhEKKdIAHW';ڊRwIv~Yt]ikl/Xȏ^-P$K ͌ l}okBI2 z KS|L>ym("qdA_iZa.xJ-끗e!.By (>k:"D}l8$7ThzxwӵK}W:y' EÖjF$Mi5߫Mf1`MJɩ; ,վ9 -LN+F-u،IQwsu7 `)q-xJ~3gy ʹ?–,;'ޚW%} ic<7@6B׬i`P &CaL q$ʍHۡ4"g:6C K]q1_:?/%Ĕ B8JB5J䔺 mj<~s);i5(.*҅M ?@(M0 h:0GEh@sh/= ڳQ6nJ`mRZ2WWPh':|B@or/zE9iELT:RD[W:ђN¢Ĥ0t?`^rk2͇f\@+`, Y d%wruZ)[Qx ۏ8q LckkVeu ك9HGm(§^RmKEIʴj3 0drTH:qD[J@]tf+"GS0\ӭzR<ovw -ÀuUX5.b85g׹ΚU:;0X~vNB3.~tXόަz~O$O羝J)fW u.D@lTJ4uą*ǀ(d>\o{ag۰@N\*<pY>F\6hъC ~Uk?N0K*$7!ګ\]*eQ&Ú$"FڹkHgh)/;hco<YRb0jɈC#{I~`-M_k_`FA_y+c5mpWh ?Q,ź(Zyi΃vnVɒ 7LaL\ 7 ֘HeC}ӷ =.v:0+7g)S:e&Z0C`P5tK?lSP0[BwJR:ğXSqV9mF ԀgUS>'*)Y; A뀍O cLd Lag5π=~s 3WM3IMCGG4ݸ8wm&,lG[38\:8)9*}W+f|X6׏"C/v>EB -Teוx\%=TL5ތ a!h5Q_2?PmacjL#"Vkꭄ,&2SuƘ7fQ΢q',Hhatƴzg<07!wd]kxG͈g-y1w-3Ojy۹vs,qz[W q$bYxu h_m_ CA/Hy[ 6r@Rbed ?)0!K+cڎnV!A]9˜>yo눚σ.aTSVM?(W"lޛ"V^GCJɳo#m7o_l9AC,H=GL蓶zvjiXLCόzNG\e`=(}|idPBAWF(R꠽):q -A.Z.`@#A?`bJP"$ 3ln)y0cG~?< =$cF훫fZH@觲՗5}?*z7 5,JH^XaΫ ^ԙEb+mӗ(4WKXwM@TX"ptwctyP"tk?%[t.4n`.]#Z=Y7)!M,<0ۊVZ \{$Pǡ"N~jւSGڈ+TvinaspeRAvyPaR m!(q\x[B-łPUqzKNɔ̰ ^AGsޗ n5b+Z;`^C0r㍏LϽBpo֐хkC5 y9PN7F(Ht vemRM!<iRO%e*"_󀲯 SS)@Ԉ2aBu)'Dn[RDxZ;le%%q7bpHIQ8-Cb;UzOK& /筲3M@(UҤZ Uh²uLQ4C yYM55h&5FXs*`C0dԪťA{<;vҚ&;U :/gaZ!.zCeszQ'8E!VJa# hW6T8#@2}~$e.̡Oq}-~;!ˢcj3aert0_ NT~iS>[[dgңU!rV Q"rGVm=:c- ;Bh D;dEi](+ :M1^_䒾S&f%Z4:bSz1D9+Xs񙖚 |sߊE R fQ7`[˨jM2ψ#ER_F&Ɉ6ǧGJ{8Ze(Ksö8 hרe<8%JY1[FQ GKK~Cftbi-qru~ނhGZO{ 9HîHF5]}j~+%wd\9n򟅙 LvhY5ѣ5q|⠞MvB`F8a3쌧Gkv ; -2cw]C+R<xDh ҡ2J%G,|l.  F_"j]yj,aa?J`s@![qV+_ –~r)$!wI2YںJѐXEQ;jvOUlN:3*[d{׿DkPj(ƘE& 1ټX5jsEE9beT`G W a#g[qFsߧhBS1y%#R JVZ20@dܮtiR  ?sQc/in7J W:)ոbȜ1{3M4tau;&aBz0HE8 }0R"6bYlXtIJfd/w<ܪkzBGVүV ] ޹aUh^+[wc[JdP<l]=<n# xie: N#u-1oRbGbÉ/Slcwg\\"A/쫴bV?)6Z?֩яjq6JOv%jSVlR 6oQ$eO%2ZLם'?!Ƚ|"-Xd9%X=m4ay_4-=H/SiQ 0G""h)3T.)"eIp~rU@N׵spwh~]gxwN/{t;*?I=Xrf^{xǨj2Պ&޴(u/6CPH~[ʉ[$Ͷ2$pgOcMx' qDבkXXmYE(Cct)vFjMYe_u紭иAqr`w-FimU<*=yRl8.r\&a fgdBXAҺXD9,\N]޷TcOCUaSP/l;M>mlh/Bn.7J. fRS̗[6 ۪@J4;IgPҕt8`j[]skmKS0]?ySɋ=AI!wu{:vZ'5V SKSk3)|D~yK)5(ŭ;rϣ _RReK\aSK4uaBaoj2 w `D' R}7 ug cx3y,I갻0,md?ēMwrYxv G`( (ا In*d/OKn.i>]IP4>_l&=+ ' R(Mvۦ۫V%h,wvÚC5ArDzu:{m[T`IBD,R=`InLTuew`\;K vM5N/Da3W=_ay<,6*t8䥪B^=Φ;}7z\ݓJ69vAz"˒x"mGZ<ɴzӾeT&)٣>51z`q2rq 7ׁ,į6]5H>+2\x9>+4̗=YvD<|~M\!Lݹl2ne(G*wFּsHO}FgcyKm}ssUfǷMoԟ9E{ ŇtX/LCA3G|EW0cݙhg޷MB\Yw*}˦HON-Vg69ڽCpu(Ƙr9t.zii\ ϱZ .A<_0妓iiŜ1l̇[6I2*+9/:`r Mr#XyU,UN@_`w(u*,7WD;Ig+թdkc$]d7/Ʋqek|֪_QAwUTMm;Ռ<Öw+=&.@<KαmċA?S 3:4(9 Ą_9PlLm\deU"s` md)Y@ȧĵDhqU6` ?1эwO# íUVگe&(Hgƾ_NȻߕfN45wj~ڔgF<;!Sul**ޢD c|6J=zľ;ŋA&!q#` ?"m#$!'w.KN Nt;Ḗ,[ ] oW8)wη+uLĒ+'ڏ 3B5H|׸m`Pw~&4n2hfP^K/µ.Fx}@0.+lD&P!Gg.ocS#vS`ϭ#)}QE=Wg{Anׁ̫=!͖-<#m \ȻoiǓf=_ HҪ64J 3H}vtB,~ഇ7N$%rf`ul5.tJW[&.k Dhɞ3\ܞNХuƧxR,$xxPDQ1Ö*;rh0pb-9T3́&Ӻ6EΜ ˮd?42Aa|L`T7͋[n%FI%D /r؎qf&<(OGd樄 &K۸1%+|r{Xrҥ0Vа~9H# ~Q~st7QB걶$N0%wJ;!/lL\[ G3= npLGL27`X:nѳINlAU!Σ lFE4hRWv\«Ag^ىFT-&Ei2Z~w9pPn ޮer3hf$޵g!fHcjj H޳; A8B:tݼقDc BoOh82[M6-5~V`UһⱢ}RP\ehʒeT71zCe] 0Z`b }uwuY( dY453D(V9<@R:o.֛)#4Rqvs+[1+|ţvr)?(5JsBf a)`.-t˒!l*koB~i{3^N}kDKspBGpB0яhU=ot?$8@P  RQQG7V?\fyE WTa{rz1EO1&ucK Kׂ,.M5ɳ@DHςc!xUsaGSO+fwm\NT'I4'8:_@4::{avn98 6l=xՔLtc*\e%Ϥ);I͟#%=PljruPrAcxbvs۬׆| q[&Hی{H3^`w $䛂M<&d8YZZ$И 7%7q\oX`KZU,{pӛ+ ,dg&03?C~p*&%W |7"!{VkV.7uAr:teꕮH+Ŗ>:3u~QZ a8 Xp0Q=ۦ Q xh1: ^< }*q3Z9M(1֎dD c)eԽJoYU}:O x l(Vbƃ2b:rUhͱ!˗gq5ڋ=;&J20  9Q êqlExwZ}=I; OhA x֞u^meV=ςh.Had%Ĝ0lJ6picx[L]Qρ8@əX1#.fͶ6Xĺml8ar.Ưb;_,v구H<> M,vr| O{5CO$a9ͥhBT+ҩn؝-zBױH~h Z`usG>?a}_>UTYk}͢ j!/wDMsYL1+dK}8P_ 2}*c"K?8 |w!oOpKwYLRqeFǻ~_6(G?G2$W8- 6yo_Xty{#Fu^#uhJ[|J'+R2ok2NJq\gLwnΗЌ[7^{m>ܓH!,S`h#X} X0%ɲVPmb=sa9)!꬐)2׷6׌҄k_+-|}8n,VWjQ]̎!N^o?'.o_ ݏ$66Sd G\{ GYJrTj6XYM6[-bZS(ƏzL UEEcȽ+wX 7 Buy#ۣs ;?JB1tWl :THx/ܨ[anGDbajLN%-bF GbC#V}o(ۄ$f[v7@jmAŎ0QNR?cvWIoo4[ɠ:,P7!um [xk +&,N.y=dxC(Iۚ!Q5m~ ֮h8]x.хM@Q_(T`&Jǝh1ӴRQe G|Q t' ,ͫڿ|:.z~37Š[$;Mr44 y*:/-KIE]BuKei{a=vU&+ݻmVESi.o\s@U@T 8zs $V'3@b%ZSW V另>lC,*,1`ڭWT?k8HC2We]jO&x4lᾴsyNoQ1@I;C]sծ(*z ń{<30ɻ;}(}ni4K/ JҙK5)<r"L-k /}!Q&ޱ89HoMNesyܟh15F>aR L7n9 ܕA㽐D#.d3)*Fi}3{=#ȼx;ۏI9zw;i#6Eon750N3}PR >DduֶOV&}.0vE().xYLzծS*vJX273ڛu_QZT?(㿐i5TJ~pjj2ެ*]B`VzBQuG<. D|^6F BvMȇvs*|<$,v r:_N-H۵{)+XѰ{Z _H 2%Cij{wmNRyZ`#ld+E Hٜ O9&D e4$`]K6*߹TFG}JCғ{bW-S/#yoz>+0XᄑAB`h 6}2.&a&Q!3wc3ҫԊ}I+2,\-i5@_ΫF%]1::v;f캳Y0Ӎ=y>L]0xDdžC7rɣJ fPi~ #x9r+uO 4wG׆maRq$@F < G$ztf+C8%fMcZCчסX Wp_9jla*T5T]7VNw%·K9?T5G~xǧN?&!\Ú:4Jk,́mKĹ -9TM091NLT&M*#d6Ž@?@XԄm"%8OE Y:sZی٪ y3tIJA%|z͎,&+o_7'Qr0[m';#Ms4eɩCdRexz{2TZ`l 5֣B^H`oT,iO'­}<_ B=Q;{V 1M<;`ye,zuc! U`D˯%%_?6dze;ԘE`L ۍ@H ->? :)}Niw_CCM/)3 3U+X[1V[XR,@PUZ+x_W}ldؒo e\ytX9Q<~`t8JVo)DN˯J"1h6/`?Ep{ppl[ %i`bݦUHg-[.#x9l&x~6U,6UP4:x:{q4x h=y;ӥìl7K5xHi?QUǮ^ܰIL'!{nHZ7c̲'0;BP#Jl0HWKt"vi1XJ㯉`OqEj%XYηDIi2*W(!L=Jp}k#<~Rx-[LX.MbٽѨm2|"FHeh+@.QY}¯VT%C%)ƵJ?T}ƨ+<;*sj]tuѕY=%Nn; .5& 3h&,1vb5)V\ #%*$$[(#rrHYj#>OmK 0B`XG:uڅ:nW#q-(FX,-w0D^ N9sb٣%إ>o+Ӱu  VcH>2Tthpi0퍬GRl{>Âj ٩~*uUcyG; &A, 'mSE{뾋#IdɁ83V3QgCj/h VMYX@@C&0E՚ F[Z|,_& xY*Df)}y@>DEͻTy?RQ5^&9(| U4fUR;܊Gjڻ˃o$݂.0(֦;l"Xf+\Ѡ ZEΤ:~P@~>!ȡDf7 .x*~t C.p6AXkno_l@+Wݘa0u?7up&ݺt6 ;zZ@!Er0TYZ^'U\|XX XXv>ayp߬NCJ: 7dwPe ԏ@ BR+'\V]Jkw*B.\G}?[,kdG#}<"l 2EBr&s+e kkxO`2V(a/Ǥz+EymǷcI3Pu& C<Yn/bJW\ u Į=%lHH0F?z_+y<&UA7'v_f8ٖFU[n#C Hm:$ڸ,+0@2U_NΏ~5puNp $.f hSF&0hn`sU- ڤۃ$f \AT~ QU;hP٩QQqhC2fCm?/0`Uhf{H#6Ι6$J.`Ԛp`TJolfwnorгm] :´u0B͉NLI|0GpS/GF(8yh;,5oLyK)~\C*m_ zgv8op9:f{ `t^LH/r^C#wYIW0ȫhދT&3W[R:_ޮ~ő .Z۞G`(q,:}rIqtliΠ(m_;E0B=ɳǭuГ0KhG>9Iy ] 4mdq@I p0MU!rL/2 hBVoW\ڨH6M "1DM>Ղh M~Qy--pnL(x/WrdKϿd%.lD!nۍ$'9H(,'+Υ:y\4r*}'Rl\^S'&1 )2V/ :w|F)H۞. !m6 m cϿS/.J}9EerI uNmX(+j?X3ͧMPUL"ݘD| 0DŽ}Gp D,Q8 Wdy "9w ? Fx^5$Oy Oєq#O>s/7\L-FVmC#`2*Bؒv܏p.\d&[M=N/7][#nߖH^߳t%#ζF8 ߜ脞W=JC |R}wiu9o~8Q߮UN@TBŋ dž5m!,,iegh#48K0VX|P&ۑft/d"9$ܛQJ^ :6:a_{LU&IG8# %p=oӥTi-#E:/C3~'Qn;QZpm@zig({t`+KCvu46`To^&$nK[&Ȝ0yvZE[IL5}mYD @&Z?Y_5P Ez8ĺ̠L$U oc%15Js@Ҁ {oQre>!u$}&s[|i/<C;;VrVUd5lSk@$@%?!Vn}yKdh[ldLWS˔=k!PLeUޏ KjP0xe{M"3v"1gؿ!!V:sS[dYwمl,i~HҺ?1K+IRXB\bv>zhdFJ+Fb"تt\ox8QPD=9E"}Ax%q'/cw;ʝ|+ jeBಬ!B) {ӂdSahQʴf]/f.Yw=2zLǤ`ĵI$I#_!4`i?<DZ7娃tRiݍ2bWy ]Bt8\ ı;}ʚu%gZ\ᆈ#Ŏ> 2Ȏ:@uF@FaG;*u`Zx%c|nujϲY*e%N.y=i֞-+tX>SN5R |"2W%ns\Tl?eX{C@5}rbq@>I-ň X ?]͆Ek1J)}/뙩y~'km-xƇKʍѣoKCȟUE~Ig!~Hz9|25ŮJp 4+BY٘fހ"692O< ٽa0~,Uh!.\Ʈn6_J=rB_Z|o)2PσccӤtƉn;N-yƋA1ڵG:j4 g.D-63م 1yբ{w#E,Fn܌.O\Pd϶vt /js^1ϵX^lVM)/tR6T-decY's`VzmK ʨ+-`sr>G !/h1/(FWc4O]jAsp(JTJO !2}guI\#S fq`J1B ց;IČ>y7M ֺaTW*T-a,s6j\!LI}G\ v-#jڑKfv 5ΨR#YEicI}QvIOT4bƬb{uw~1ϛkKeRtLS,pM+f@vrYW5w̲ЎYp eqSe{va'K&7Oc᠇h;JCX@;|E@Ë CU|ŭ7qU{}Uy>jc1JV@/GgX'^%=D7VG- =ZE}[R2Q֓khv Q?ܢe,usG暠ซ2Q,M j`Al&az߮'74!XxQ^0`a)!2k=H ¿ѨNij[$!5˓(1y9$ Sٍ~i/_VU}iFdY` =';M57í8jb(~/|u0ɬd!TC m8bf{!&; CRF#/7s% %W^WN'8 ے:7|\#[d%q{% ĝʼn~\7I6uvsA_T%Y}kȃ*&gG !pH"]>|<{$VkJLeK^5=C6iɪzTNSTU#*4;eJtlҍGyoZ*0qATZ/O֏y0Epi)ZF*uOh~U7W~k6ĊfdE\*eSC(/ATM puudRWl^f|F.h((DpS1{?ƵQ$c,MdSCDn' q?vZΰNlR×FIi[׫xDs2Zʼn~ҴOiʼ">޹hlq6䈈Y;0/)E qխM>@b4rn c@3SJSOn1du|Z3^ؒIřP2 (F4?sN^hyr Q^Qxxs7?% +%Y;l'LNZsɀ; B p]fS ztB[;Eql,b*YtcqNPScoBj}ly ZQU謹TjndvsǢt e0rjl/b|J>qKr=j3q]XBǦIx_A$/cs y+ glgFhV Yn%'Y\婯YؚxGO5w-&ީ1EVbe(M6y{9چȔ_/Zwt"5˄̓n6PkuPzAܤҷCcnYI"!TN;ŀغHHٝVtY6Kfyڻ/E1cI_^6H~To+GjX@Dc٬e0OGh DnjF3ZGW.QJY8=:2+p`hMf#+=NyOI4mP8l c5UnI !m:ӱ.Dwʉ6پ 2Z^m^!^FiX|_A&]n8KoHw{Ƈ* ID1ׯ+]1)2N>7vUhUfHWaK}YXE UeQtofÆ:zH/ uI՛ˤ}6bF|aF]"LSFeW? 4f Uh} 5|QC!4]wKH8l+$K$WMeU v_ a6]/*Mr{&/BEFGf~ LE>2m;ąyOf;׎fga&t=4cgGD5=R#MouV]%,e.)09PB"٣CiQRG㦈 8vcL(ҙa'ۼ.نK~p2 !μAP\YL,ǭ _tbXu8zX "eGpa{|G^iʐdl<[ X.$X9DA8njPh@E'%snFdp7.#5Y-|?Cw@l4:Ep1K@Ik3m- _Z]}k`tOs2סШ9ͦ| "w#BnrxgRV7?-L9G Bf牋C~(q;eAiU^Hs|m[䆹Rjf즦u\ _~<]G"A3/HyW4sLݘ?SV/=cfBFJEʊ[,6o~_Xh8jr {&urE!x9Wհo24뮿n_b nR[u67'vcW ̸]{`d1 Q!\u"QB~znc2&e !y·0 U TfJH;ܷ2\)ld=D mZ*4yoSw+dw> “]wg츆o-^QٛS)lΕ]ޜH@k#PB9ڑY XӅ1 _ZiҐt`))S5ztj CBն4вLvCiNqNA:Sx-~_Qڌ/=xq<`nP0vFbMF5T\R2/$#?/8mN8KyKPd,!~f+X'k/ZpT2UnmټC>`#!dz4{zgrEX%ȫ_^<Fc%RPGJ/aXP ] ֑]HҞQ2Sw$`'D w2<?>*i܀WDwq[KYkB~{dm"h84ہXdԾlti(r1}'c?lT66"<U-S4=m346lf 9%8+`84t nU"- @R%`ĝ8%fd#pQx0ʉ j% uFԭ^ Q Wty^naw9*Fn[raYW9j䇜_R^5 =iG6w"u w:3oހg)V]Gx0BQ2(=>K7.v c6 "Ael ζ6FI=ѱq>ߪw>xB ^AЅ /.Aq*?'Z3P"&D6H`[)I0,0E D-19k:RJX*eF>>V:!izFחNqU8SMD`"X?s:ϖ|ȤVb٬A\8_%#8|gwPzhݺ9<~HRmeZiaT=P=>ݗD{f{cC} _bÐM6K[_|;vG&eVY"҂:tc{ KPtaV0\T$Mv+"O&}GBTUQeE2t4 ;6SL,Y%Sͣ>D&CB*V3a+B{ݨ,&l"⒐Z{3rxC-gLN $^; Q 24_qFǓg1-m6PUyVg-#Q,h?]c߮RAeT4>lIY>e5 `IBd2~pYKYvHG JaFɚZˬ)4,)РwZSgiDۋVP'Vy+#b4ȕb׆䢭}iO5ᬒ%>*.ib̍34 Tq} d[hy`7SȾqҷ27P&͝qsٯv?3asTK#HJgMW y*#I1هX n7&P%2=皃EhD'u -ՠ;\eK+·,ehDף yW.; W~?GKSi -v-kd眚n/5-}|^*V* ޲~a اNuQsԇƴ)a8*ً[,iE:I44߂B~MSCW77C-Z%!fqeu'aqỤ3ۏLH 4Isez&oMqLnbv셻xp1" 5`Y=޿jH1ܲe`r Xc\V[)͖Q2( BWJ:#:߭~< q.0so8K .gkw`EKe)$|XyɐˁNel|Rҋ L&UR9} 8A΃[i8X~n}$fO>vCZϋVC0W*]ҧp7T]Z9Va\F!j2'2{]Cbxj93uʍG5LY ӤXrI2>-}TKvXZAփ&7W~ W^$D in3oXdžqC⧼+ءQ/]$ @ۨCx ǻZ/BKրVΪ2"_=6 B YY-BL-prDrL;ڋo ŀ&֚ϯفQDIU[4t.F3S',Lt󊧙`ʻr9XKd%lE0>A+L[؇o TDaH˜Wg.izp4obkP(cOXN~97-F@'ئYF!>-/L+RdcMD 6^DߎnZ5wjrPkΑtMSO\Qg2Bt`z 04tMr>LWW|a)&<|)3.X)hN V5_}]DLLvHiKC=4og"۝"L${c.2~#>&f l Mr\031e6ݿˈ2r1(23R EޟEAz1 ߉JČϬB@W;1p4/ +>M@A`| :!GDL[8˝|V}U(r8R7_!r9kdL]ۿ|‹TUYp2o%kNNu#q䊍m.&2 uR ;R}Rv\K6KM>j1/lV81n=tDž\2:H~;!NF$԰ԮI~x7f1@<#`v[89"W| {} jab|%WOpa`}LjFX2.˟$˃ ±SNKnp.@DM[>Z=pyE{x) ĻYtZQH6' CHdyи;pHJGNb;KlH:PǏh>8BsH^On&|>1*EY6ީJT!j G;B ܹ wL eg=Gd1⭖؝+ @,Kyl-TL^Q)\hJl9Q~fD0ɚY.0C?ϊW92DD.pcUVŊ"@0MKIIL[b..+Ԟimľ2U40\DR4`cxm[޵l>jfcSF5?Yt*RGIA%d+JG䓡bס/,;qoF;pdM|:'f>-jTrkCǹ-RЮϾ?:E փ0ѷl.%.-xXt)1֯"FxČN4 I[i֌#:&uJy\ $EUUu!PnuVCKb0rCA&R tV9cMߢ9d&)³Df㑲s6^˳o#㘯].\}sA~;._fϒ}\c( =I$zQ֠b):c{f,Y +Phq _r4vn1`VY wI :Wh8ޗpJgmPO!lΝTB1M}uJ9sc)0d4֖,Ah=Jn%=YF_$?dȭPa@o"k<|L8Ah1RϚZX?d1!OdT9zU2瑕H} HO83C9c^7~Ty|h&Q?3^4h͇.oogQn,f0_ z\9<GC tmwMr07Xܹ@(L}7G;/̟n4h=9=ly4Q36eeP"őYk*0p&NLgKfiS#`fkӭC*-) V0IBJ/3DXL6P*I*˨ W kJHZtewmw1pN7 6#BRIەIy3D5KAtd EKrd_PB4iOFK&53`Vfr$`.wSRU?5ձsT("=9t@eB_Pɔnm clrMOO]}CQ(|LMYi67!' R?kvQ`~͞ľk"X1}3ߍn8 q$^ZE׶"|/)J2=6a](!;iFҠb5:Gr$[{=M05tW.8#367yg?j ]TCMPNS>1#aIhWgؽ?vuR|8{lu7a?P_ 'S`B+cqq(S%Ts\Ԧ)0N|!#8vzDK̀@Bx}{ߞ&4}U=oM#Q:'/jG/k P+Q VF'|J^ $J5c^`u݌$L7L6C~(5RksZq|>^Ͳ۲f4:_$ ץպEѾ+~<b|`՜h-Gu⪺c7V#bU~,i{-tkYtN!1A: j_,u7_)A$E b/MMi <|VshΪ=\7Rޡo}z駱ג(0Dk !1}5._;P;+>\=6XP-Wi_մ<,Pz殚 xiΚpQWtٵ%< cJql{sh%hEWrCE-6NbuH;bQWQuEH0ZS+U$  H߹ſSeRRL9fۘ'@'CTaTs:+n;4>2pEAï BBH1*?@# }$I>CL|6R)C[BYY *@rK)η.@.vj.f%ن(SXk)p'I 1B5[1&?aޏ#d2?^ EgZ JxwoIu*AVDg ?^|x5w="@ݯ1Oao7jbxJ oԓ׆[0?{F;N*R+vɥl_nCeX*sezox#L=p* ZCƨ5 [izz *+MXhpXW~lζZ=yb.a nߵR'׊or>!qX,a MB%u Av]?̲'da,D~1"yB:S.^*ih-fOYفtu?(lc6$[UJ7Ɗ%R^l"'F?xw&3,@աY# ş407VRݎR_@Ъ}nԳWoHiա6BNҪp;TSEzHճȑ K2NfF>'hx"+Ҏұ)LL]6NAue*~Xvyt)&5yQ_y$<)ٽ8^#iO7Q%RsUcCJ\x*F= kV( kdP6w>k 1L}vQ?m<hԂġx [g'oF[ d@?7kЌs, Gei'<0ej!dWt}:< 5 [x ?^P `Wp06-I9wkl!/?и_ !Ԥ1d$4QAm N ʒyY\Bw،~aЧI[ [艺Z&.qalĬY 0 tDK̶cxl-IuV&~}{ "Fp8~W='s^Hd+@KZ"s-@ᴠeנϧDdl6 {AEx+G+ c+z]#yJAf6CH>wd.IP]J˴3lE;Y/>RCƾGuCq8|A:G"'RiҦnjQW<@4㚷\U&SӓnBu=^>Ϗ}\-7OLtZmC[ JO-LeYKE 9Jy%w((/Q؛WDLWUr* Z1%}.wе 20yи6 '(gZ{7@k@mKۑ]4&]:ar)LEixqO0Y h;ۊ5 J)-Hz2G7t\hMȦt|ơlݶ֧(XwK-$|9ޠ2Q_@DVAMeSL{PrW,Q% VR>oHbH6YYN;!l Xi̾MpC֧U$Vş-ˆkʰcIvמ}#G3}z9B8O(6V<>@= e1q,0sGl,&!=nA:^"*%tZFʋC7X>fQVMq0|#v}?>9wJgMe#}R94p jc#oң LgB^9f}3Ͳ`JώRf*)r-ꋝ:bdDhq}|ENF8(jӿ`uDJWQLvFvs{lo6ǣmu)??;P'Hq!LM&_J/K;%xܲJ @e~^z Wu`WfPzkbN9ps`3=юsT1Ll͔)sM3aZ#^]cS*bYq0EҧnVM =wG~qJ'(qǔYT] VX (S\g20AnT=Ngݿjz"=;@7U[z̯[çLfR\0E]59!>R.I T1hIiN Ғ*xukf^>tv#xiE#$/R~~j6MP14p2(GOpuO!zK 3t g<4gпsl(z"{#lzsK/AF^48 .njvWOtF[m5;Y?AJ2<ȷwd & P"ckG[X/ A E()2} Aj *"$P*媏Mbkt+H~[Oe^%xT1{If%n;0Tަ?I g#3.Eo$-@X5%l{6 vs:<= W:'~ |k[WS:'4"K/Y#!" ff&a@{8O d:\]J?{y#/Y.x/[L$S-.ʐBd.=ܾHr}&SY@ }_'h`Lf|dh}T#ի̿#шL#*W' LR ̨O O DP>@Bh5|r b;T>5V]t}GD]iwdXmB_K5m4[J.ştmiIxt, |N@5$_pVn8ɱjMA]:]AޕJV(fHSۤ8]Nĵ|-ٽ s`Od,U[S̚r[ t EfӐɆo9Ͽ9m;Q0- ej.569- '5"+Zoi,mcH] cw@_mEop(>t/c X Ri C:[Gff4cV"ҽ2>7p\Ӂ|R/%XZ~O::̛(F`xO(Dܲ2#{LJ `QsThvIxyuD6ۜ܌բ&19*5?; ;T"(K1yʍhߓq*a\Q׾‰h~fw]_mG^*M* kiH(E)=Q><(nM/b>'gQYك3]ePx2V) /(N;!AgJEO[ SX\¾\6ir5 T$-PIxA4J_5=TJÂӓU?G-N+[j8jGG Kǂ i`v7ukzQO'5N O;$p݁:>דg3ur,輰svEqOϓvj_T9p;bdT#87ГYk *)ʱ^3^Amr2<(q c>a41W+ʭDSvlC2, _pU5}DǹJ3Yͨaw>g-`+86?%fPl$3CIN~=wٰ@lgט75gXWd%:N4wfg|]%(o`Jo s yX\;ˎ.N.IMN`R*d)9m;!C|Փ>;Z< EfK?M7/nE>y9$Ͳ<300f9F(i&*p,RTLER7*c^`.Yo*CVxE^!X.IT 2umyQμ7)^,AIymB$6*mk?FUB_#>#1ֿ펽@d"kT#M3EpOhP]ZKB+ĺZ4=0SWތm]/ډ=ӻnӥv|V&}10E 4x ?% ak,-Eal-N2[:j-^>!h@ P?B h2װ;֗ ӛctg\v6ʟOAjK ueb;5C NS7 25F`VvXl(5oĀ 3S޼A7*,tC(cs:Hjm=1LNVzb}WlPij'f%~R o'5ب :ׇMA]7pNAy>kƂw`^.ȺՀ?#6To9tJ4p'i̫ Tz!AduKX JUؠ/Z(2c ݥiMrE7KAhOk @3p`ù_ F0zXxwBAVVّ(q x3A%}6wT(A\m[P@=fmlX:s6iLǂ[$''荵 ~z+eOuM w-Z.cP!h7AqN_7sLj?Eta?2šp kIp?-vÅ(m-/ߡB"5#m):/lARA݅_B2\^#|{l)@v%,^cjɯm_s"o,Hg[Jvм, Jy{O3lApKgmE2+yPTnރ5һ@p?/gtؓrza\s`?Ʊߑ\8c%.H5F$cn{ơwJ+OkGGC W)uC젺s;}QE_mg՗"N[P?T_7)f [%(b>#ZǸBL8mVWגHefTt8E1$s~YLZV/wآ B"8A,-MI63q֙AH ݜl ZF+nq}ugz(dn_M< ~/; إwrQΟc蒫:ZQM)ϽqDvШqDaVNqꭊyxG Ho71)3̽rfKu7)y cbt'=W#*-t׽qBGgkeTDұ]j~t52,3b^(B/:yOOpteY*ʱ-n<1ڭUf́n]c>-v)2AR+mCRQ(xKN|u_c\V n0ߨ\ AwΝ^e ;1 /LߨCAmtRv}n P6ljhUFJM{<ZT0*^o>^܁&s$Nhç^2 wTn4.TDY#_{5H O|KA&L?{ha(msrriG<@{g=]$idF.%=)0yw'$N\g41eܳ2X:QPoWZ7W /,$̳onV[5kCҭ?4RIM>7U8>6ga2ܭ )NMWB+zT(Μ| Q3^Tmʑgitᏻjz6FF7&V'm؞W S~/g^[O34 Jܫx7䈺}.MHDM`TCm{жtO}dB8O">rrWY<`kD:wv#+,J񐲻o lzsͳ~Nbjj9tob:V٪=jTi[zw~xfPF79q\'P(&f5 B?XU͖6v. M3:\,΀xmhg-J&[ŒfӽaɻVsu\ Zx g5 J=w#`n0a1^g p뉂~֡qr]>W^O<9s[-BCߒ{Xشz>(悈@&q01#8*S0im1iN۹nX0ZOB3@*Q*"oAet)`G>p+-)047`\ ȳ_fV`BO-a`$eia[f]' c@|ȟ׀βdb%T–mlHmx++kj Y$!y-)f>! bWs>*p?eK}I?`ɖGh| ;:"UZZʔlE HA&E6!I ZUZNCV-J_ynx=/r u(/֬ӵݍo8y^t"& '|YT'?`OwylOFx wG׊P#5Dٍy|$g~/DwңYI|:܇ ,B+c"Ѽv2] 7&%zߎ#ʼnqcS&H8K?r" I7z`dxDYJ#ȞiE͛@8oX!>J!FHD J׷[)x= N[ϚvxQߙjgA< A"UNZ سk zH14pߘgR.xRC BJ&rp72.aA@TLBvΉ=P]]*fS1 QPŇzcysM̱mTZQX!LB3ZYؔLT},2dbjWUP l~yFq22CV28bssCj.N+7W6l;G S3  DPط2)Աem_ڷOԱ,?i-^$䠅[4:P]ӖL1ŀ *u3,# ц8)LfDJ_HS"X1enfn}W\2/^]_o Va0O#lY;_zFSq4`{ SֿEF6;xgd!"PbͶO#3޸]8iwX!gFDDsqQDNcx*4rvNͿxi0T %mpltCK}J|FQLO4ap|h?-xD̡©A-{b}F QzwzxTƯ2c|ErugzᎁhfϜ03{YaC'DW`boXWU+ƐU"e3vca8{W8g(y  _.l #\w kcƯUΞT)~-jiq^E- E(1ǐ?ռe o8[gՐFZa-HK`,?P|fo9vcvmHg"4+ӃvgV1ױ@z徑ܥcbTu +P!uge&.>ľI`sj *JN}* ~\{3<>Gr@{R:o65Ufk<xf,#ZS]iދ7.7μ`ɗ-^6 0Ҍvjӝ0{E?[+DqAd, ɻ,o{eFCݑG%uxtLICf^*ORΞK1 98!F C+td竴8˖jԋHf5CgYm2F7τӇYebV&Sb` Ε{NI!2g]5ۘoYmVƝmb&Th0ݍꇩm-[CJph<|`jk "H`}euh01Rmy#H.A9a`8 ѿaGCtgr}vMѮ/cTE1fJKNԑtx:7L_ G,bҙ-x>ŧ sp==3O)˰D'z[T8\\҃#YV Dhn{L>/Wi-j/eB6u"aKyrƜ Hm47\ <+oSf zbQ$'#{fp4 1.8ЎM:\GqF;ЉXE 1`ĦP&q-@yס$=6 #b"I-tXPÛq"GȬ*p:vHsOmj{ yB 1D[ckDXc<4_ec 7fGYG=7=q/2S Y2>ɱI6&Y%EzjX\3ɼvJO(H'\^\[1 c;J!(+1S2S9(qFD~ڜ סgYWgKx3mS+W7g`Ȫft  E&{KNc\4zSΕ- ӂoaF$ Xx\0Rq2K.8=zLhBDvW[X׏@A0[hea*4٫YIG~OefbC\1KG I&FKH mHN&Md%>f_mZ3FH[^5Y$3r$ۇPǗH#Ԡwʐ7O;D8R$/_@ LI8+5=Rnt_&gƝ}cyAzBV\E@L#mS^uBncKw lJ7PCRIS=;r 7KukYt%vP0\mҽ0Ƥb1;pd3..jb8K!ݓIY}fF h|l͙Ǘaqif,p˔Gq__oۆNnʍqxEG%Obߩt 7@OMZ19itjuZO6.`+|rL5b_zH@, 9`/#Weodf&SйѸF&h)ԅ}r{.Y6EbUÿ$cÈ+9jd+ idte]W?}B4L)nB 9 -ʉ}%zAX:HK ñͳմpJ~6+h$T;;vpuWSubq|LsrfƷܭT\tL2bL\e ƐQO zU^y|-0GVE(\M7䫔yKsw>D6n_JW hvǬg1a'K\ɓ2HʲLr_YZ}X̒Kr‘ i=_J/vU5$%&}6XL?D7bx&KćMNH.ƽB2Ǟmd mx+RyL,(=sNVU[ $iU[h5˜l'jY'a+֔ zqhnd\bMFHRO8*+8._'/[DK@AHa%HLȫy#HfMA0Lٮ2#'v"n03}l)al\&.LAuKyuӣ'XsYgx7eJr? zo[51VvmH;S<" qCWwlNUd]TڣMw"l꟪!]?Aj;V4L>LV2j=SٱJlsjwN=ڨq6{m-*Dzظ!})Bb*3&w&co-%^bc `:odM50Y2'l&Xj/e:&nG9Tq%(Eۓ:}zDy:絭gg˥3G9k F+:l6*r{//( e)hM[@Y[31O뵟VםV.qƃc wavY \#/M]0iIq_ go0kǝEIؐ5,u/K?. pz7"zy{0 Ac8›C ^} p4w O?pZi?ho)^"=Fz͛u.\8^b5P} Q#iZD}ƔP>15sut}7- D%^-6e* WƃyAkFӛHRB&26"KXSOn\.HBwR]dL*>"}гN'8[~(|y³&%k oVX$r:AZtOS :+9LGJIߠ䐒e\ 67 n{n'1 t¾cmC=C풝Fw@Uo WmNML\ڣD(~|'*cZ_\Y1j]koA"mPmy%(~2tQ xmFPwGg8nF-v3h~?(wdҚ9K|֡T)CP̈yhP]Ehq'|ĺt9{])f鸞GU5+_a'..}+8 zs3Ê\f*XTiO.Ty9=9_Ti)47EwtlRȓ˜EU)@E3eVПb2'Ъx7fsV ymb+Q(XrOb u,! X d+F:W+_1짞H5!!@DU֫ϐN55.F[9d:*`ik^'.L.~:qb\J\ S<|qHG9RqXod|젶Gnk4chM֒so`8oC,;HCyQIEUIu ߉Wr6}iv/Q o\Lto=Ӑ ~mXLx1q11 Sѩb]<"Qb`"ڂ$3f/ܴCN:U6rdŚK P.0' s`b$^o}VS͙|1?]jåHCK/x1s'Bw,v?; Ki`h|*? :k: !4z(`9[Ύ*H)@4^ރj RJytߓyGYggϼggو/*IB % 34*f>l85i`k|~sl5VVM'—Sy^`6B-]KqInG3F\S,7*5 Fg%S(ڃ=rDoքm7"$P(X0B'aFN"r@SVj:4ٶ-h~.@tJ;]vܺ[ad7mKtZiU>}vZbhUc:j>@C:*m=M4x,j1RûO@1݉9LgOL$EJPd7BM3 O'E;b'2:NA{/;ldDPqÈI}tkn8|斞K`V&;hĆ6JNޛ]=zn8!lHI4~mL^#bCa,4YFsN t !TZ/8#PnG'<%ͱ}5/~䘽D59M>aVҎʰV;! _j:4],2bK5Ǡd`zs UF4#MGԠ~6$F_LjA9NӍx/rNDd_NaL9F.uŽMqXlrp 0l5 Eva)sEd(ZET=؂AxbF.¯)ͳWŌnh#Fs5Wǟ>\ 3RFAԮ"}eJH%^t"DKDg~A\w ҒS*qc UA|ёS~ӷ9HC94H?fcq7_59'V7KiwmGc.^m ϿtylgY9/-ֲMpT%&̶* -5*{tc"Bf4L8@8{ *mQP MOf )y0FKmƛ:UAMr"7g*%Iރ-%BkT`^pA"7Ҙb nveEEp/ꦔu\֡|}e@ZPz-D,UCk%1!kiYīM P(zP9lk;u.aGYq+d9}1e))KZgy ufd5 z_H[EpgƲ_Lj'O(2)h@ MI& mzšY 6ԅ)JD3 ÏjzG[æ:*g(#irU\jܾQ:'`hh EA K4AZ3|tn1,;%W sNEIz۠%znk띟@@Z#mO9e0{yMαқ0:0?PLމ]H`ٙ ar"/mn gS! #ILe{_$-b$26 RQFi3T!L.;a.aUbT_ K:NՍPSv8x $K3`--hI"Oe䰲 #c)){fY']AsII$o'2/V{ KL:FяW떜w+3>b.'.LRڛ7G%";W{}c= %+8SB;~7@64{ V|T?:)ԸmVZOInUW:9g?-ntJH;E1_W*+x9{[_LQhGO"Nyjj(һѠf~"SBvM?_ W_Uݐ2KmAWzU=]qK!.:Y!]Sl`</1gev ޏ=-ȩYv>JnwsK#z?"NDe VLf`V%_5,[MX2'I7uCc0n,'#EzB'7eЭy[؄u)%҈[ 2g؆¶5q.egL61KX֓ ;wZ0]|!;,5 [Uu5 پ}gŽ4 DQIjG/CRsO|{aG[tF $ѶAZFIB9}FXlWgNX`: l ?:($hCH'Uq)W/gPj(*ew o)tjXHצG e٤Qz~E gB:AT#M,7H OiM#C1ߢ !XՆ<4Dt+7 Xoi{zcDPJc&'K \@Ltl%d̢z6^}dg5}^>5Y"ALىLm:XP nB8y XwP劣IpdoLNuҏpq8B͢r_zJS7(rw0JWek7^A,xF+[/RSOQݻ>&{)Qݼ T('Pnjtړ57yrz`΢I'[sjK;Ƴ nj}]/sݲvj?T5 k. Vnv#|thǀV/9ئRtG*03wVǿ\r]Zg.a6c:ӱEM5ä{vv)i_G߃S5&?, .^ni@ cϊF@sVlfb;M ?*@ϝ"GhȞ@U}T0iz)7?KCudvqr"33_AO;Odm#, o=XcjFLZI#I%V6 }w*v(.I5̣O'&"!yN JV )q)Mn_ur1{ωd'QRTi؄ew,OP/\d\Pdz>wxXgTp85'~?+;/Åǿ›[ #i;͢ŭkZgt8VL$qw8o7F%b* J`QY/[5sJY5zŗ#ehq a~BF|.+̄_tuL[lBf`'d*ޘs{gFH2x>i!rNSS[}|Ĥ| Lp/rX`Qrf+7VMདྷbnmLk Rhc}3 lۢĿ #*Jp ]wd mlz+XR?_#^e͖y*A}_s($st\!,$L|CUV{QZ"c,@ce6 0ɯID,'͝:?€ iօg //|H]z,} d1 nm^͢zp#p8 %V^T~^By;ze8rXTw酗lmc_NفL3ovoL-:x=(| e>2#WEN~M38U-c/q@C|Oq7K> *G,pkq54bt T?fټň!aՃD)ŮhCeG9RsY7E[gG+̃Ά3.@k률hM}fw#r0ǔub(M:DIBUڿ i_yd:hU{++NS?vV.0?6o_=6D]nIpQp.LdXִRuv:a)/7&b*r++(>U]eo墈Krg`\jz[5a(ߌN*"c}V\Z*~sXߏ>1l4zEFoM$#LkmϒwSFYp;áV12. osCPmX63 8I W6_FdFP6;CahXgv7i[R!XG7/Y(oգk^aИW$ 8!熲iגllXÞ]7j.jI}S8m7 { RBXEC_r>h r2DZZh>VPn}ijTo=ZW!J ga6QQja̟A 5n3We(}L BKm"*YT 6C"8Ղ\ѬU\Y,FM`/-۲Œ*5}O0ٵ%G@TO,/[`SCY*]n]X6=b<+RU1QWe :IEIg"xgw:s %=5ʦ2)uR!"3--/*|Ӆd8ܑo{[lf9$(Lq{kmgV4xw.fIC8[~_*+uJC/ Rqlw;N)DPZ9;Hyl,Q6 ?3i,9uEFqybL@* L T2␰@U`@`.?)̴ >^Ck= Dң@YlasJ P/͟{rŅ[tb,آgiCb~ZK5TpFfB\waȷpLjBe8=av0f:" b.M\ ;RfQb~[-Y$;ڤtы"a{+Qtk}QT̟~شٲOj_ 6p?Qz[EmU<ʨ/g-nH=ZORE6VmBz;YQ3bꘜA{[̼wnjv}NJ~Z:/Į7Sz _؜зBrOewEqmէcӍư@7G[ުl/9ϠCSaoΊӒ}W8SCa,'$0u*c<|9o%KMZr-GA&m(/g7%L˹fej-ŋE ӥ1 3S^:LD{%AczʻŸF(0& Jg7tgΗ"Q! ֧nj, %g(L^/H=p-9< ƠdwHݽdqY +M@{DFR3վE r^-L3҈&o^0y/oʏۨ$6cW~aI[9,6]D[3 HA6ݜ=W@pIAУ-Cxڴ?Ǣ"`S OsE{kI| ,[TW<+ab922Y 0sFAqx+9oUCJ]sϕ꓄ލF~0 I|#R=;:N2HIs&51T煇xeӈ]3>dŜ4 4QL0#&cĝFaJɲحAFЮqFJG%j6ޡqT.,L1o ^ wyEfNe` XmKS.j .밨2WJПֳ ?\Y.7#1rp"-ijGp^le D)ږaI}L%U=%Mϭs^sV=rdcNmYtܥwDhJKܬG)QYD_-$t4t2 Esx@:IQ1@_f w 2nf3EjeUsFP\A<26ăwCoq58qQɡ8$éK׽ h4@ky5}Փ8ifi{;n̲nn ?&斷ҼV %WZxg}aaO_ޮ${dZ1*J%)Q`M0Q6f  ֶ YZ