glibc-2.38-150600.14.46.1<>,i˵p9|!۽e/M |LG>|`5WPwGHkEOr Nr-hJ֦yc5:3 W'ƉҨAZ68rx2At0 8z 7JC+{F6+w:FOr&Iq#j{- F(Mem7=*R昝5]#7l[^#Z0Η]*qG04eRL4()򑥪rh\>J?|d   O48DHa )/7/P/ /  /  / / ////I """"("8"9&:5>@BFG(/H/I/XIYIZ[\/]P/^bc,deflu/v!w/x/yz(,06xCglibc2.38150600.14.46.1Standard Shared Libraries (from the GNU C Library)The GNU C Library provides the most important standard libraries used by nearly all programs: the standard C library, the standard math library, and the POSIX thread library. A system is not functional without these libraries.i˵h02-armsrv2XxSUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.1-or-later WITH GCC-exception-2.0https://www.suse.com/System/Librarieshttps://www.gnu.org/software/libc/libc.htmllinuxaarch64function exec(path, ...) local pid = posix.fork() if pid == 0 then posix.exec(path, ...) io.write(path, ": exec failed: ", posix.errno(), "\n") os.exit(1) end if not pid then error(path .. ": fork failed: " .. posix.errno() .. "\n") end posix.wait(pid) end -- First, get rid of platform-optimized libraries. We remove any we have -- ever built, since otherwise we might end up using some old leftover -- libraries when new ones aren't installed in their place anymore. libraries = { "libc.so.6", "libc.so.6.1", "libm.so.6", "libm.so.6.1", "librt.so.1", "libpthread.so.0", "libthread_db.so.1" } remove_dirs = { "/lib64/tls/" } for i, remove_dir in ipairs(remove_dirs) do for j, library in ipairs(libraries) do local file = remove_dir .. library -- This file could be a symlink to library-2.38.so, so check -- this and don't remove only the link, but also the library itself. local link = posix.readlink(file) if link then if link:sub(1, 1) ~= "/" then link = remove_dir .. link end os.remove(link) end os.remove(file) end end if posix.access("/sbin/ldconfig", "x") then exec("/sbin/ldconfig", "-X") end if posix.utime("/usr/lib64/gconv/gconv-modules.cache") then exec("/usr/sbin/iconvconfig", "-o", "/usr/lib64/gconv/gconv-modules.cache", "--nostdlib", "/usr/lib64/gconv") endb` aI ''p5- 6 %H,(PPPP I ; *AA큤A큤Ai˵i˵i˵i˵i˵i˵ i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵i˵ i˵i˵i˵i˵i˵i˵i˵i˵i˵dHi˵dHi˵i˵i˵i˵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../lib/getconf/getconf/lib/ld-linux-aarch64.so.1YYrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootglibc-2.38-150600.14.46.1.src.rpmconfig(glibc)glibcglibc(aarch-64)ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)ld-linux-aarch64.so.1(GLIBC_2.34)(64bit)ld-linux-aarch64.so.1(GLIBC_2.35)(64bit)libBrokenLocale.so.1()(64bit)libBrokenLocale.so.1(GLIBC_2.17)(64bit)libanl.so.1()(64bit)libanl.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.18)(64bit)libc.so.6(GLIBC_2.22)(64bit)libc.so.6(GLIBC_2.23)(64bit)libc.so.6(GLIBC_2.24)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.29)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.31)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.35)(64bit)libc.so.6(GLIBC_2.36)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_ABI_DT_RELR)(64bit)libc_malloc_debug.so.0()(64bit)libc_malloc_debug.so.0(GLIBC_2.17)(64bit)libc_malloc_debug.so.0(GLIBC_2.33)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libm.so.6(GLIBC_2.18)(64bit)libm.so.6(GLIBC_2.23)(64bit)libm.so.6(GLIBC_2.24)(64bit)libm.so.6(GLIBC_2.25)(64bit)libm.so.6(GLIBC_2.27)(64bit)libm.so.6(GLIBC_2.28)(64bit)libm.so.6(GLIBC_2.29)(64bit)libm.so.6(GLIBC_2.31)(64bit)libm.so.6(GLIBC_2.32)(64bit)libm.so.6(GLIBC_2.35)(64bit)libm.so.6(GLIBC_2.38)(64bit)libmvec.so.1()(64bit)libmvec.so.1(GLIBC_2.38)(64bit)libnss_compat.so.2()(64bit)libnss_db.so.2()(64bit)libnss_dns.so.2()(64bit)libnss_files.so.2()(64bit)libnss_hesiod.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libpthread.so.0(GLIBC_2.18)(64bit)libpthread.so.0(GLIBC_2.28)(64bit)libpthread.so.0(GLIBC_2.30)(64bit)libpthread.so.0(GLIBC_2.31)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.17)(64bit)librt.so.1()(64bit)librt.so.1(GLIBC_2.17)(64bit)libthread_db.so.1()(64bit)libthread_db.so.1(GLIBC_2.17)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)ngptngpt-develrtld(GNU_HASH)@@@@@@@@@@@@@@@@      /sbin/ldconfigconfig(glibc)filesystemld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libm.so.6(GLIBC_2.27)(64bit)libm.so.6(GLIBC_2.29)(64bit)libnss_files.so.2()(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.17)(64bit)rpmlib(BuiltinLuaScripts)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.38-150600.14.46.14.2.2-13.0.4-14.6.0-14.0.4-14.0-15.2-1kernel4.34.14.3ieiX@inh @hxh+@h@gx@gI@gڱg/@g@g}@gM@gp@fffWfO/f;i@f:f2.f! @f De!@e@e}@epe6@e@e@eeoem@e6`@e/e.w@e#@eSe@ev@e;e@eRd@d@d@d@d@d@dE@dd@dr@dK@d%ydcT@c@c @clcY!@c=qc*c@c6@cb5@bb@bUbb@b@b|bk@b@aa@a@a@a\>@aaaj@a@`P@```8@`7@`u`Y@`F`>(`<@`.V`+`>`_إ@__@_Wr@_+^^x^^j$@^K^E:@^8 @^&]7@]]c@]@]]]@]Z@]Z@]D%]/ ]^@] ] u@]@\@\@\\~d\n\j@\T4\5@[@[[[t[[t[b@[(@["X[)[WZJ@Z@Z2@ZZ@ZZ$Z@ZxG@Zp^@Zp^@Ze@ZKt@Z1@Z/Z@Y@Y@YYܶ@YdY@Y@YY@Y@Y@YW@Y@YJYYw2Yp@YJ_YA%@Y.@Y, @Y, @Y$$@Y"XۡX@XWw@W@W@Ws@Wk@Wj}WYZ@WL+@W3W0{WW V@V@V޾Vm@VIV@VŲ@V`VVV@VLh@V.V$@VVZV VUYU|@UAUȒ@UU@UU4@UUv@U%@U/@U:T@TPTgTܕTء@TO@schwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.degiuliano.belinassi@suse.comschwab@suse.degiuliano.belinassi@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.derguenther@suse.comschwab@suse.derguenther@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.degiuliano.belinassi@suse.comschwab@suse.deschwab@suse.deschwab@suse.delnussel@suse.comschwab@suse.degmbr3@opensuse.orgschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.defvogt@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dedimstar@opensuse.orgmeissner@suse.comschwab@suse.deschwab@suse.dematz@suse.comgiuliano.belinassi@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dematz@suse.comschwab@suse.delnussel@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deguillaume.gardet@opensuse.orgschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.derguenther@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dekukuk@suse.deschwab@suse.deschwab@suse.deschwab@suse.delnussel@suse.deschwab@suse.deschwab@suse.dekukuk@suse.deschwab@suse.deschwab@suse.deschwab@suse.demliska@suse.czmliska@suse.czschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.demliska@suse.czschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dejengelh@inai.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.defvogt@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.dejslaby@suse.comschwab@suse.deschwab@suse.deschwab@suse.deidonmez@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.denormand@linux.vnet.ibm.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.demeissner@suse.comschwab@suse.deschwab@suse.demgorman@suse.comschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.deschwab@suse.de- resolv-count-resource-records.patch: resolv: Count records correctly (CVE-2026-4437, bsc#1260078, BZ #34014) - resolv-check-hostname.patch: resolv: Check hostname for validity (CVE-2026-4438, bsc#1260082, BZ #34015)- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup, __nss_database_get (bsc#1258319, BZ #28940)- memalign-overflow-check.patch: memalign: reinstate alignment overflow check (CVE-2026-0861, bsc#1256766, BZ #33796) - nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915, bsc#1256822, BZ #33802) - nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache contention workloads (bsc#1256437, BZ #33704) - wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281, bsc#1257005, BZ #33814)- regcomp-double-free.patch: posix: Fix double-free after allocation failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST (bsc#1240058)- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static (CVE-2025-4802, bsc#1243317)- Add support for userspace livepatching for ppc64le (jsc#PED-11850)- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ [#25847])- Mark functions in libc_nonshared.a as hidden (bsc#1239883)- Bump minimal kernel version to 4.3 to enable use of direct socketcalls on x86-32 and s390x (bsc#1234713)- assert-message-allocation.patch: Fix underallocation of abort_msg_s struct (CVE-2025-0395, bsc#1236282, BZ #32582))- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall wrapper for prctl (bsc#1234665, BZ #29770)- Correctly determine livepatching support- Remove nss-systemd from default nsswitch.conf (bsc#1233699)- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)- Use nss-systemd by default also in SLE (bsc#1230638)- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ [#31934])- Fix typo in last change- Also include stat64 in the 32-bit libc_nonshared.a workaround (bsc#1221482)- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue for _start routine (bsc#1221940)- nscd-netgroup-cache-timeout.patch: Use time_t for return type of addgetnetgrentX (CVE-2024-33602, bsc#1223425) - Also add libc_nonshared.a workaround to 32-bit x86 compat package (bsc#1221482)- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch: nscd: Stack-based buffer overflow in netgroup cache (CVE-2024-33599, bsc#1223423, BZ #31677) - glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch: nscd: Avoid null pointer crashes after notfound response (CVE-2024-33600, bsc#1223424, BZ #31678) - glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch: nscd: Do not send missing not-found response in addgetnetgrentX (CVE-2024-33600, bsc#1223424, BZ #31678) - glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch: netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601, CVE-2024-33602, bsc#1223425, BZ #31680)- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961, bsc#1222992)- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc (bsc#1221482)- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ [#30945]) - sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in sched_getcpu (BZ #31479)- duplocale-global-locale.patch: duplocale: protect use of global locale (bsc#1220441, BZ #23970)- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ [#31402])- Add libnsl1 to baselibs.conf (bsc#1219640)- syslog-buffer-overflow.patch: syslog: Fix heap buffer overflow in __vsyslog_internal (CVE-2023-6246, CVE-2023-6779, CVE-2023-6780, bsc#1218863, bsc#1218867, bsc#1218868) - qsort-invalid-cmp.patch: qsort: handle degenerated compare function (bsc#1218866)- Change minimum GCC to 13- Split off libnsl.so.1 into a separate package- sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is expected to exist (BZ #30789) - ldconfig-process-elf-file.patch: elf: Fix wrong break removal from 8ee878592c - tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment (BZ #29039) - getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to EAI_MEMORY (bsc#1217589, BZ #31163) - libio-wdo-write.patch: libio: Check remaining buffer size in _IO_wdo_write (BZ #31183)- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr (bsc#1217445, BZ #31113)- Remove systemd from shadow and gshadow lookups (bsc#1217220)- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)- dtors-reverse-ctor-order.patch: Remove, has been reverted- Avoid use of SSE in i586 build- Add systemd also to gshadow lookups (jsc#PED-5188) - For SLE continue to use nsswitch.conf without systemd- setxid-propagate-glibc-tunables.patch: Propagate GLIBC_TUNABLES in setxid binaries - tunables-string-parsing.patch: tunables: Terminate if end of input is reached (CVE-2023-4911, bsc#1215501)- fstat-implementation.patch: io: Do not implement fstat with fstatat- getaddrinfo-memory-leak.patch: Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 (CVE-2023-5156, bsc#1215714, BZ #30884)- getcanonname-use-after-free.patch: getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806, bsc#1215281, BZ #30843) - Do not build any cross packages in SLES- no-aaaa-read-overflow.patch: Stack read overflow with large TCP responses in no-aaaa mode (CVE-2023-4527, bsc#1215280, BZ #30842)- Add systemd to passwd, group and shadow lookups (jsc#PED-5188)- ppc64-flock-fob64.patch: io: Fix record locking contants for powerpc64 with __USE_FILE_OFFSET64 (BZ #30804) - libio-io-vtables.patch: libio: Fix oversized __io_vtables - call-init-proxy-objects.patch: elf: Do not run constructors for proxy objects - dtors-reverse-ctor-order.patch: elf: Always call destructors in reverse constructor order (BZ #30785)- intl-c-utf-8-like-c-locale.patch: intl: Treat C.UTF-8 locale like C locale (BZ #16621) - glibc-disable-gettext-for-c-utf8.patch: Removed- Add cross-ppc64le package- posix-memalign-fragmentation.patch: malloc: Enable merging of remainders in memalign, remove bin scanning from memalign (BZ #30723) - Limit build counter sync to i686 flavor, to reduce needs for rebuilds- Add cross-s390x package (bsc#1214460)- Require that elf/check-localplt does not fail - glibc-2.3.90-langpackdir.diff: add hidden alias for __strcpy_chk - cache-amd-legacy.patch: x86: Fix for cache computation on AMD legacy cpus - cache-intel-shared.patch: x86: Fix incorrect scope of setting `shared_per_thread` (BZ# 30745)- Update to glibc 2.38 * When C2X features are enabled and the base argument is 0 or 2, the following functions support binary integers prefixed by 0b or 0B as input * PRIb*, PRIB* and SCNb* macros from C2X have been added to . * printf-family functions now support the wN format length modifiers for arguments of type intN_t, int_leastN_t, uintN_t or uint_leastN_t and the wfN format length modifiers for arguments of type int_fastN_t or uint_fastN_t, as specified in draft ISO C2X * A new tunable, glibc.pthread.stack_hugetlb, can be used to disable Transparent Huge Pages (THP) in stack allocation at pthread_create * Vector math library libmvec support has been added to AArch64 * The strlcpy and strlcat functions have been added * CVE-2023-25139: When the printf family of functions is called with a format specifier that uses an (enable grouping) and a minimum width specifier, the resulting output could be larger than reasonably expected by a caller that computed a tight bound on the buffer size - Enable build with _FORTIFY_SOURCE - glibc-2.3.90-langpackdir.diff: avoid reference to __strcpy_chk - iconv-error-verbosity.patch: iconv: restore verbosity with unrecognized encoding names (BZ #30694) - printf-grouping.patch, strftime-time64.patch, getlogin-no-loginuid.patch, fix-locking-in-_IO_cleanup.patch, gshadow-erange-rhandling.patch, system-sigchld-block.patch, gmon-buffer-alloc.patch, check-pf-cancel-handler.patch, powerpc64-fcntl-lock.patch, realloc-limit-chunk-reuse.patch, dl-find-object-return.patch; Removed - bsc#1211828 - bsc#1212819- gshadow-erange-rhandling.patch: gshadow: Matching sgetsgent, sgetsgent_r ERANGE handling (BZ #30151) - system-sigchld-block.patch: posix: Fix system blocks SIGCHLD erroneously (BZ #30163) - gmon-buffer-alloc.patch: gmon: Fix allocated buffer overflow (CVE-2023-0687, bsc#1207975, BZ #29444) - check-pf-cancel-handler.patch: __check_pf: Add a cancellation cleanup handler (BZ #20975) - powerpc64-fcntl-lock.patch: io: Fix F_GETLK, F_SETLK, and F_SETLKW for powerpc64 - realloc-limit-chunk-reuse.patch: realloc: Limit chunk reuse to only growing requests (BZ #30579) - dl-find-object-return.patch: elf: _dl_find_object may return 1 during early startup (BZ #30515)- Need to build with GCC 12 as minimum- fix-locking-in-_IO_cleanup.patch: Update to final version- ulp-prologue-into-asm-functions.patch: Add support for livepatches in ASM written functions (bsc#1210777, bsc#1211726)- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid is unset (bsc#1209229, BZ #30235)- Exclude static archives from preparation for live patching (bnc#1208721)- Update to glibc 2.37 * The getent tool now supports the --no-addrconfig option * The dynamic linker no longer loads shared objects from the "tls" subdirectories on the library search path or the subdirectory that corresponds to the AT_PLATFORM system name, or employs the legacy AT_HWCAP search mechanism, which was deprecated in version 2.33 - printf-grouping.patch: Account for grouping in printf width (BZ #30068) - strftime-time64.patch: Use 64-bit time_t interfaces in strftime and strptime (BZ #30053) - glibcextract-compile-c-snippet.patch, sys-mount-kernel-definition.patch, sys-mount-usage.patch, nscd-netlink-cache-invalidation.patch, syslog-large-messages.patch, dlmopen-libc-early-init.patch, ldd-vdso-dependency.patch, syslog-extra-whitespace.patch, errlist-edeadlock.patch, makeflags.patch, get-nscd-addresses.patch, x86-64-avx2-string-functions.patch, nscd-aicache.patch, dl-debug-bindings.patch, floatn.patch: Removed - bsc#1207957 - bsc#1208358 - bsc#1212910- Remove reference to obsolete %usrmerged macro (boo#1206798)- floatn.patch: Update _FloatN header support for C++ in GCC 13- nscd: Convert to systemd-sysusers- dl-debug-bindings.patch: elf: Reinstate on DL_DEBUG_BINDINGS _dl_lookup_symbol_x (bsc#1204710)- get-nscd-addresses.patch: get_nscd_addresses: Fix subscript typos (BZ [#29605]) - x86-64-avx2-string-functions.patch: check for required cpu features in AVX2 string functions (BZ #29611) - nscd-aicache.patch: nscd: Drop local address tuple variable (BZ #29607)- makeflags.patch: Makerules: fix MAKEFLAGS assignment for upcoming make-4.4 (BZ# 29564)- errlist-edeadlock.patch: errlist: add missing entry for EDEADLOCK (BZ [#29545])- syslog-large-messages.patch: syslog: Fix large messages (CVE-2022-39046, bsc#1203011, BZ #29536) - dlmopen-libc-early-init.patch: elf: Call __libc_early_init for reused namespaces (BZ #29528) - ldd-vdso-dependency.patch: elf: Restore how vDSO dependency is printed with LD_TRACE_LOADED_OBJECTS (BZ #29539) - syslog-extra-whitespace.patch: syslog: Remove extra whitespace between timestamp and message (BZ #29544)- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache invalidation if epoll is used (boo#1199964, BZ #29415)- glibcextract-compile-c-snippet.patch: glibcextract.py: Add compile_c_snippet - sys-mount-kernel-definition.patch: linux: Mimic kernel definition for BLOCK_SIZE - sys-mount-usage.patch: linux: Fix sys/mount.h usage with kernel headers- Update to glibc 2.36 Major new features: * Support for DT_RELR relative relocation format has been added to glibc * On Linux, the pidfd_open, pidfd_getfd, and pidfd_send_signal functions have been added * On Linux, the process_madvise function has been added * On Linux, the process_mrelease function has been added * The “no-aaaa” DNS stub resolver option has been added * On Linux, the fsopen, fsmount, move_mount, fsconfig, fspick, open_tree, and mount_setattr have been added * localedef now accepts locale definition files encoded in UTF-8 * Support for the mbrtoc8 and c8rtomb multibyte/UTF-8 character conversion functions has been added per the ISO C2X N2653 and C++20 P0482R6 proposals * The functions arc4random, arc4random_buf, and arc4random_uniform have been added Deprecated and removed features, and other changes affecting compatibility: * Support for prelink will be removed in the next release * The Linux kernel version check has been removed along with the LD_ASSUME_KERNEL environment variable * On Linux, The LD_LIBRARY_VERSION environment variable has been removed - get-nprocs-sched-uninit-read.patch, get-nprocs-inaccurate.patch, strcmp-rtm-fallback.path, pt-load-invalid-hole.patch, localedef-ld-monetary.patch, nptl-spurious-eintr.patch, strncpy-power9-vsx.patch, nptl-cleanup-async-restore.patch, read-chk-cancel.patch, wcrtomb-fortify.patch, nptl-cleanup-async-restore-2.patch: Removed - CVE-2023-4813, bsc#1215286 - bsc#1198751 - bsc#1200334- nptl-cleanup-async-restore-2.patch: nptl: Fix ___pthread_unregister_cancel_restore asynchronous restore (bsc#1200093, BZ #29214)- read-chk-cancel.patch: debug: make __read_chk a cancellation point (bsc#1200682, BZ #29274) - wcrtomb-fortify.patch: wcrtomb: Make behavior POSIX compliant (bsc#1200688)- Set SUSE_ZNOW=0- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on __strncpy_power9 (BZ #29197) - nptl-cleanup-async-restore.patch: nptl: Fix __libc_cleanup_pop_restore asynchronous restore (bsc#1200093, BZ #29214)- nptl-spurious-eintr.patch: nptl: Handle spurious EINTR when thread cancellation is disabled (BZ #29029)- Follow the distro default gcc version to build the cross bootstrap packages.- switched to https urls- get-nprocs-sched-uninit-read.patch: linux: __get_nprocs_sched: do not feed CPU_COUNT_S with garbage (BZ #28850) - get-nprocs-inaccurate.patch: linux: fix accuracy of get_nprocs and get_nprocs_conf (BZ #28865) - strcmp-rtm-fallback.path: x86: Fallback {str|wcs}cmp RTM in the ncmp overflow case (BZ #28896) - pt-load-invalid-hole.patch: elf: Check invalid hole in PT_LOAD segments (BZ #28838) - localedef-ld-monetary.patch: localedef: Update LC_MONETARY handling (BZ [#28845])- Update to glibc 2.35 Major new features: * Unicode 14.0.0 Support * Bump r_version in the debugger interface to 2 * Support for the C.UTF-8 locale has been added to glibc * functions that round their results to a narrower type, and corresponding macros, are added from TS 18661-1:2014, TS 18661-3:2015 and draft ISO C2X * functions for floating-point maximum and minimum, corresponding to new operations in IEEE 754-2019, and corresponding macros, are added from draft ISO C2X * macros for single-precision float constants are added as a GNU extension * The __STDC_IEC_60559_BFP__ and __STDC_IEC_60559_COMPLEX__ macros are predefined as specified in TS 18661-1:2014 * The exp10 functions in now have a corresponding type-generic macro in * The ISO C2X macro _PRINTF_NAN_LEN_MAX has been added to * printf-family functions now support the %b format for output of integers in binary, as specified in draft ISO C2X, and the %B variant of that format recommended by draft ISO C2X * A new DSO sorting algorithm has been added in the dynamic linker that uses topological sorting by depth-first search (DFS), solving performance issues of the existing sorting algorithm when encountering particular circular object dependency cases * A new tunable, glibc.rtld.dynamic_sort, can be used to select between the two DSO sorting algorithms * ABI support for a new function '__memcmpeq'. '__memcmpeq' is meant to be used by compilers for optimizing usage of 'memcmp' when its return value is only used for its boolean status * Support for automatically registering threads with the Linux rseq system call has been added * A symbolic link to the dynamic linker is now installed under /usr/bin/ld.so (or more precisely, '${bindir}/ld.so') * All programs and the testsuite in glibc are now built as position independent executables (PIE) by default on toolchains and architectures that support it * On Linux, a new tunable, glibc.malloc.hugetlb, can be used to either make malloc issue madvise plus MADV_HUGEPAGE on mmap and sbrk or to use huge pages directly with mmap calls with the MAP_HUGETLB flags) * The printf family of functions now handles the flagged %#m conversion specifier, printing errno as an error constant (similar to strerrorname_np) * The function _dl_find_object has been added * On Linux, the epoll_pwait2 function has been added * The function posix_spawn_file_actions_addtcsetpgrp_np has been added, enabling posix_spawn and posix_spawnp to set the controlling terminal in the new process in a race free manner * Source fortification (_FORTIFY_SOURCE) level 3 is now available for applications compiling with glibc and gcc 12 and later Deprecated and removed features, and other changes affecting compatibility: * On x86-64, the LD_PREFER_MAP_32BIT_EXEC environment variable support has been removed since the first PT_LOAD segment is no longer executable due to defaulting to -z separate-code * The r_version update in the debugger interface makes the glibc binary incompatible with GDB * Intel MPX support (lazy PLT, ld.so profile, and LD_AUDIT) has been removed * The catchsegv script and associated libSegFault.so shared object have been removed * Support for prelink will be removed in the next release; this includes removal of the LD_TRACE_PRELINKING, and LD_USE_LOAD_BIAS, environment variables and their functionality in the dynamic loader Changes to build and runtime requirements: * The audit module interface version LAV_CURRENT is increased to enable proper bind-now support * The audit interface on aarch64 is extended to support both the indirect result location register (x8) and NEON Q register Security related changes: * CVE-2022-23219: Passing an overlong file name to the clnt_create legacy function could result in a stack-based buffer overflow when using the "unix" protocol * CVE-2022-23218: Passing an overlong file name to the svcunix_create legacy function could result in a stack-based buffer overflow * CVE-2021-3998: Passing a path longer than PATH_MAX to the realpath function could result in a memory leak and potential access of uninitialized memory * CVE-2021-3999: Passing a buffer of size exactly 1 byte to the getcwd function may result in an off-by-one buffer underflow and overflow when the current working directory is longer than PATH_MAX and also corresponds to the / directory through an unprivileged mount namespace - copy-and-spawn-sgid-double-close.patch, fcntl-time-bits-64-redirect.patch, gaiconf-init-double-free.patch, gconv-parseconfdir-memory-leak.patch, getcwd-attribute-access.patch, glibc-c-utf8-locale.patch, iconv-charmap-close-output.patch, ld-show-auxv-colon.patch, ldconfig-leak-empty-paths.patch, librt-null-pointer.patch, pthread-kill-fail-after-exit.patch, pthread-kill-race-thread-exit.patch, pthread-kill-return-esrch.patch, pthread-kill-send-specific-thread.patch, pthread-mutexattr-getrobust-np-type.patch, setxid-deadlock-blocked-signals.patch, sysconf-nprocessors-affinity.patch, x86-string-control-test.patch: Removed. - bsc#1194640 - bsc#1194768 - bsc#1194770 - bsc#1197718 - bsc#1211829 - bsc#1215891- Enable building the cross packages in rings.- Add ExtraBuildFlags for build flags that cannot be passed to configure. - Add support for livepatches (jsc#SLE-20049). - Generate ipa-clones tarball artifact when livepatching is enabled.- glibc.rpmlintrc: Update for rpmlint2- ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output (BZ #282539 - x86-string-control-test.patch: x86-64: Use testl to check __x86_string_control - pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel should not fail after exit (BZ #19193) - pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill and thread exit (BZ #12889) - getcwd-attribute-access.patch: posix: Fix attribute access mode on getcwd (BZ #27476) - pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return ESRCH for old programs (BZ #19193) - pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ [#28036]) - setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with blocked signals in thread exit (BZ #28361) - pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send signals to a specific thread (BZ #28407) - sysconf-nprocessors-affinity.patch: linux: Revert the use of sched_getaffinity on get_nproc (BZ #28310) - iconv-charmap-close-output.patch: renamed from icon-charmap-close-output.patch- Don't create separate debuginfo packages for cross packages- ldconfig-leak-empty-paths.patch: ldconfig: avoid leak on empty paths in config file - gconv-parseconfdir-memory-leak.patch: gconv_parseconfdir: Fix memory leak - gaiconf-init-double-free.patch: gaiconf_init: Avoid double-free in label and precedence lists - copy-and-spawn-sgid-double-close.patch: copy_and_spawn_sgid: Avoid double calls to close() - icon-charmap-close-output.patch: iconv_charmap: Close output file when done - fcntl-time-bits-64-redirect.patch: Linux: Fix fcntl, ioctl, prctl redirects for _TIME_BITS=64 (BZ #28182) - librt-null-pointer.patch: librt: fix NULL pointer dereference (BZ [#28213])- Add cross development packages for aarch64 and riscv64.- Update to glibc 2.34 Major new features: * When _DYNAMIC_STACK_SIZE_SOURCE or _GNU_SOURCE are defined, PTHREAD_STACK_MIN is no longer constant and is redefined to sysconf(_SC_THREAD_STACK_MIN) * Add _SC_MINSIGSTKSZ and _SC_SIGSTKSZ * The dynamic linker implements the --list-diagnostics option, printing a dump of information related to IFUNC resolver operation and glibc-hwcaps subdirectory selection * On Linux, the function execveat has been added * The ISO C2X function timespec_getres has been added * The feature test macro __STDC_WANT_IEC_60559_EXT__, from draft ISO C2X, is supported to enable declarations of functions defined in Annex F of C2X * Add support for 64-bit time_t on configurations like x86 where time_t is traditionally 32-bit * The main gconv-modules file in glibc now contains only a small set of essential converter modules and the rest have been moved into a supplementary configuration file gconv-modules-extra.conf in the gconv-modules.d directory in the same GCONV_PATH * On Linux, a new tunable, glibc.pthread.stack_cache_size, can be used to configure the size of the thread stack cache * The function _Fork has been added as an async-signal-safe fork replacement since Austin Group issue 62 droped the async-signal-safe requirement for fork (and it will be included in the future POSIX standard) * On Linux, the close_range function has been added * The function closefrom has been added * The posix_spawn_file_actions_closefrom_np function has been added, enabling posix_spawn and posix_spawnp to close all file descriptors great than or equal to a giver integer Deprecated and removed features, and other changes affecting compatibility: * The function pthread_mutex_consistent_np has been deprecated * The function pthread_mutexattr_getrobust_np has been deprecated * The function pthread_mutexattr_setrobust_np has been deprecated * The function pthread_yield has been deprecated * The function inet_neta declared in has been deprecated * Various rarely-used functions declared in and have been deprecated * The pthread cancellation handler is now installed with SA_RESTART and pthread_cancel will always send the internal SIGCANCEL on a cancellation request * The symbols mallwatch and tr_break are now deprecated and no longer used in mtrace * The __morecore and __after_morecore_hook malloc hooks and the default implementation __default_morecore have been removed from the API * Debugging features in malloc such as the MALLOC_CHECK_ environment variable (or the glibc.malloc.check tunable), mtrace() and mcheck() have now been disabled by default in the main C library * The deprecated functions malloc_get_state and malloc_set_state have been moved from the core C library into libc_malloc_debug.so * The deprecated memory allocation hooks __malloc_hook, __realloc_hook, __memalign_hook and __free_hook are now removed from the API Changes to build and runtime requirements: * On Linux, the shm_open, sem_open, and related functions now expect the file shared memory file system to be mounted at /dev/shm Security related changes: CVE-2021-27645: The nameserver caching daemon (nscd), when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system CVE-2021-33574: The mq_notify function has a potential use-after-free issue when using a notification type of SIGEV_THREAD and a thread attribute with a non-default affinity mask CVE-2021-35942: The wordexp function may overflow the positional parameter number when processing the expansion resulting in a crash - nss-database-check-reload.patch, nss-load-chroot.patch, x86-isa-level.patch, nscd-netgroupcache.patch, nss-database-lookup.patch, select-modify-timeout.patch, nptl-db-libpthread-load-order.patch, rawmemchr-warning.patch, tst-cpu-features-amx.patch, mq-notify-use-after-free.patch: Removed - bsc#1181403 - bsc#1184035 - bsc#1187911 - jsc#PED-987- Enable usrmerge in Factory always as it's default there - Add conflict with pre-usrmerge filesystem package- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify (CVE-2021-33574, bsc#1186489, BZ #27896) - Drop glibc-usrmerge-bootstrap-helper package- tst-cpu-features-amx.patch: x86: tst-cpu-features-supports.c: Update AMX check- rawmemchr-warning.patch: string: Work around GCC PR 98512 in rawmemchr- nptl-db-libpthread-load-order.patch: nptl_db: Support different libpthread/ld.so load orders (bsc#1184214, BZ #27744)- Enable support for static PIE (bsc#1184646) - select-modify-timeout.patch: linux: always update select timeout (bsc#1184339, BZ #27706)- Don't remove -f[asynchronous-]unwind-tables during configure run, no longer needed- nss-database-check-reload.patch: nsswitch: return result when nss database is locked (BZ #27343) - nss-load-chroot.patch: nss: Re-enable NSS module loading after chroot (bsc#1182323, BZ #27389) - x86-isa-level.patch: x86: Set minimum x86-64 level marker (bsc#1182522, BZ #27318) - nss-database-lookup.patch: nss: fix nss_database_lookup2's alternate handling (bsc#1182247, BZ #27416) - nss-revert-api.patch: remove - nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache (CVE-2021-27645, bsc#1182733, BZ #27462)- Disable x86 ISA level for now (bsc#1182522, BZ #27318) - nss-revert-api.patch: Workaround for nss-compat brokeness (bsc#1182247, BZ #27416)- Fix build of utils flavor for usrmerge- Prepare for usrmerge (bsc#1029961)- Add --enable-memory-tagging for aarch64- Update to glibc 2.33 * The dynamic linker accepts the --list-tunables argument which prints all the supported tunables. * The dynamic linker accepts the --argv0 argument and provides opportunity to change argv[0] string. * The dynamic linker loads optimized implementations of shared objects from subdirectories under the glibc-hwcaps directory on the library search path if the system's capabilities meet the requirements for that subdirectory. * The new --help option of the dynamic linker provides usage and information and library search path diagnostics. * The mallinfo2 function is added to report statistics as per mallinfo, but with larger field widths to accurately report values that are larger than fit in an integer. * Add to provide query macros for x86 CPU features. * A new fortification level _FORTIFY_SOURCE=3 is available. * The mallinfo function is marked deprecated. * When dlopen is used in statically linked programs, alternative library implementations from HWCAP subdirectories are no longer loaded. * The deprecated header and the function vtimes have been removed. * On s390(x), the type float_t is now derived from the macro __FLT_EVAL_METHOD__ that is defined by the compiler, instead of being hardcoded to double. * A future version of glibc will stop loading shared objects from the "tls" subdirectories on the library search path, the subdirectory that corresponds to the AT_PLATFORM system name, and also stop employing the legacy AT_HWCAP search mechanism. * CVE-2021-3326: An assertion failure during conversion from the ISO-20220-JP-3 character set using the iconv function has been fixed. - Remove obsolete, unused /etc/default/nss - aarch64-static-pie.patch, euc-kr-overrun.patch, get-nprocs-cpu-online-parsing.patch, iconv-redundant-shift.patch, iconv-ucs4-loop-bounds.patch, ifunc-fma4.patch, intl-codeset-suffixes.patch, nscd-gc-cycle.patch, printf-long-double-non-normal.patch, strerrorname-np.patch, syslog-locking.patch, sysvipc.patch: Removed - bsc#1180557 - bsc#1181505 - bsc#1191592 - bsc#1201942- Remove support for %optimize_power - Move to power4 baseline on ppc- aarch64-static-pie.patch: fix static PIE start code for BTI (bsc#1179450, BZ #27068) - iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224) - iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923) - printf-long-double-non-normal.patch: x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649) - get-nprocs-cpu-online-parsing.patch: Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)- intl-codeset-suffixes.patch: intl: Handle translation output codesets with suffixes (BZ #26383) - strerrorname-np.patch: string: Fix strerrorname_np return value (BZ [#26555]) - sysvipc.patch: sysvipc: Fix SEM_STAT_ANY kernel argument pass (BZ [#26637], BZ #26639, BZ #26636)- Use --enable-cet on x86_64 to instrument glibc for indirect branch tracking and shadow stack use. Enable indirect branch tracking and shadow stack in the dynamic loader (jsc#PM-2110, bsc#1175154)- Keep nsswitch.conf in /etc for SLES15 - syslog-locking.patch: Correct locking and cancellation cleanup in syslog functions (bsc#1172085, BZ #26100) - ifunc-fma4.patch: x86-64: Fix FMA4 detection in ifunc (BZ #26534)- Update to glibc 2.32 * Unicode 13.0.0 Support * New locale added: ckb_IQ * The GNU C Library now loads audit modules listed in the DT_AUDIT and DT_DEPAUDIT dynamic section entries of the main executable * powerpc64le supports IEEE128 long double libm/libc redirects when using the -mabi=ieeelongdouble to compile C code on supported GCC toolchains * To help detect buffer overflows and other out-of-bounds accesses several APIs have been annotated with GCC 'access' attribute * On Linux, functions the pthread_attr_setsigmask_np and pthread_attr_getsigmask_np have been added * The GNU C Library now provides the header file which declares the variable __libc_single_threaded * The functions sigabbrev_np and sigdescr_np have been added * The functions strerrorname_np and strerrordesc_np have been added * AArch64 now supports standard branch protection security hardening in glibc when it is built with a GCC that is configured with - -enable-standard-branch-protection (or if -mbranch-protection=standard flag is passed when building both GCC target libraries and glibc, in either case a custom GCC is needed) * The deprecated header and the sysctl function have been removed * The sstk function is no longer available to newly linked binaries * The legacy signal handling functions siginterrupt, sigpause, sighold, sigrelse, sigignore and sigset, and the sigmask macro have been deprecated * ldconfig now defaults to the new format for ld.so.cache * The deprecated arrays sys_siglist, _sys_siglist, and sys_sigabbrev are no longer available to newly linked binaries, and their declarations have been removed from * The deprecated symbols sys_errlist, _sys_errlist, sys_nerr, and _sys_nerr are no longer available to newly linked binaries, and their declarations have been removed from from * Both strerror and strerror_l now share the same internal buffer in the calling thread, meaning that the returned string pointer may be invalided or contents might be overwritten on subsequent calls in the same thread or if the thread is terminated * Using weak references to libpthread functions such as pthread_create or pthread_key_create to detect the singled-threaded nature of a program is an obsolescent feature * The "files" NSS module no longer supports the "key" database (used for secure RPC) * The __morecore and __after_morecore_hook malloc hooks and the default implementation __default_morecore have been deprecated * The hesiod NSS module has been deprecated and will be removed in a future version of glibc * CVE-2016-10228: An infinite loop has been fixed in the iconv program when invoked with the -c option and when processing invalid multi-byte input sequences * CVE-2020-10029: Trigonometric functions on x86 targets suffered from stack corruption when they were passed a pseudo-zero argument * CVE-2020-1752: A use-after-free vulnerability in the glob function when expanding ~user has been fixed. * CVE-2020-6096: A signed comparison vulnerability in the ARMv7 memcpy and memmove functions has been fixed - riscv-syscall-clobber.patch, ldbl-96-rem-pio2l.patch, long-double-alias.patch: Removed - bsc#1027496 - bsc#1162930 - bsc#1166106 - bsc#1167631 - bsc#1167939 - bsc#1194785, jsc#SLE-18195 - bsc#1200855 - bsc#1201560 - bsc#1201640 - bsc#1207571 - jsc#SLE-13520- long-double-alias.patch: Fix build with GCC 10 when long double = double - nscd-gc-cycle.patch: nscd: bump GC cycle during cache pruning (bsc#1171878, BZ #26130)- glibc-nsswitch-usr.diff: read /usr/etc/nsswitch.conf if /etc/nsswitch.conf does not exist - Install default nsswitch.conf in /usr/etc - Don't install gai.conf in /etc- Split off %lang_package- riscv-syscall-clobber.patch: riscv: Avoid clobbering register parameters in syscall - ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)- nsswitch.conf: comment out initgroups setting, so that it defaults to the group setting (bsc#1164075)- fix-locking-in-_IO_cleanup.patch: update to latest version- Update to glibc 2.31 * The GNU C Library now supports a feature test macro _ISOC2X_SOURCE to enable features from the draft ISO C2X standard * The functions that round their results to a narrower type now have corresponding type-generic macros in * The function pthread_clockjoin_np has been added, enabling join with a terminated thread with a specific clock * New locale added: mnw_MM (Mon language spoken in Myanmar). * The DNS stub resolver will optionally send the AD (authenticated data) bit in queries if the trust-ad option is set via the options directive in /etc/resolv.conf (or if RES_TRUSTAD is set in _res.options) * The totalorder and totalordermag functions, and the corresponding functions for other floating-point types, now take pointer arguments to avoid signaling NaNs possibly being converted to quiet NaNs in argument passing * The obsolete function stime is no longer available to newly linked binaries, and its declaration has been removed from * The gettimeofday function no longer reports information about a system-wide time zone * If a lazy binding failure happens during dlopen, during the execution of an ELF constructor, the process is now terminated - malloc-info-whitespace.patch, riscv-vfork.patch, prefer-map-32bit-exec.patch, backtrace-powerpc.patch, ldconfig-dynstr.patch: Removed. - bsc#1157893 - bsc#1163184 - fate#325815, fate#325879, fate#325880, fate#325881, fate#325882 - fate#325962- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC (CVE-2020-1751, bsc#1158996, BZ #25423) - Drop support for pluggable gconv modules (bsc#1159851)- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ [#25204])- nsswitch.conf: add usrfiles for services, protocols, rpc, ethers and aliases for /usr/etc move- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, BZ #24973)- ldconfig-dynstr.patch: ldconfig: handle .dynstr located in separate segment (bsc#1153149, BZ #25087)- Package gconv-modules.cache as %ghost - Regenerate it also in the %post of glibc-local-base-- move mo files to glibc-locale as that's where all the other informations for those locales are. glibc-locale-base only has English anyways.- riscv-vfork.patch: Fix RISC-V vfork build with Linux 5.3 kernel headers- Remove NoSource tags (bsc#994835)- pwdutils is long gone and replaced by shadow- Update to glibc 2.30 * Unicode 12.1.0 Support * The dynamic linker accepts the --preload argument to preload shared objects * The twalk_r function has been added * On Linux, the getdents64, gettid, and tgkill functions have been added * Minguo (Republic of China) calendar support has been added * The entry for the new Japanese era has been added * Memory allocation functions malloc, calloc, realloc, reallocarray, valloc, pvalloc, memalign, and posix_memalign fail now with total object size larger than PTRDIFF_MAX * The dynamic linker no longer refuses to load objects which reference versioned symbols whose implementation has moved to a different soname since the object has been linked * Add new POSIX-proposed pthread_cond_clockwait, pthread_mutex_clocklock, pthread_rwlock_clockrdlock, pthread_rwlock_clockwrlock and sem_clockwait functions * On AArch64 the GNU IFUNC resolver call ABI changed * The copy_file_range function fails with ENOSYS if the kernel does not support the system call of the same name * The functions clock_gettime, clock_getres, clock_settime, clock_getcpuclockid, clock_nanosleep were removed from the librt library for new applications (on architectures which had them) * The obsolete and never-implemented XSI STREAMS header files and have been removed * Support for the "inet6" option in /etc/resolv.conf and the RES_USE_INET6 resolver flag (deprecated in glibc 2.25) have been removed * The obsolete RES_INSECURE1 and RES_INSECURE2 option flags for the DNS stub resolver have been removed from * With --enable-bind-now, installed programs are now linked with the BIND_NOW flag. * On 32-bit Arm, support for the port-based I/O emulation and the header have been removed * The Linux-specific header and the sysctl function have been deprecated and will be removed from a future version of glibc * CVE-2019-7309: x86-64 memcmp used signed Jcc instructions to check size * CVE-2019-9169: Attempted case-insensitive regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read - pthread-rwlock-trylock-stalls.patch, arm-systemtap-probe-constraint.patch, pthread-mutex-barrier.patch, fork-handler-lock.patch, pthread-join-probe.patch, riscv-clone-unwind.patch, add-new-Fortran-vector-math-header-file.patch, regex-read-overrun.patch, japanese-era-name-may-2019.patch, dl-show-auxv.patch, s390-vx-vxe-hwcap.patch, taisho-era-string.patch, malloc-tracing-hooks.patch, pldd-inf-loop.patch, malloc-large-bin-corruption-check.patch, wfile-sync-crash.patch, malloc-tests-warnings.patch, fnmatch-collating-elements.patch, iconv-reset-input-buffer.patch: Removed - malloc-info-whitespace.patch: Remove unwanted leading whitespace in malloc_info (BZ #24867) - bsc#1100396 - bsc#1130045- Move /var/lib/misc/Makefile to /usr/share/misc/Makefile.makedb (bsc#1138726)- malloc-tests-warnings.patch: Fix warnings in malloc tests with GCC 9- Set optflags for i686 after _lto_cflags is set (boo#1138807).- Disable LTO due to a usage of top-level assembler that causes LTO issues (boo#1138807).- nss-files-long-lines-2.patch: Remove obsolete patch- dl-show-auxv.patch: Fix output of LD_SHOW_AUXV=1 - s390-vx-vxe-hwcap.patch: S390: Mark vx and vxe as important hwcap - taisho-era-string.patch: ja_JP: Change the offset for Taisho gan-nen from 2 to 1 (BZ #24162) - malloc-tracing-hooks.patch: malloc: Set and reset all hooks for tracing (BZ #16573) - pldd-inf-loop.patch: elf: Fix pldd (BZ#18035) - malloc-large-bin-corruption-check.patch: malloc: Check for large bin list corruption when inserting unsorted chunk (BZ #24216) - wfile-sync-crash.patch: Fix crash in _IO_wfile_sync (BZ #20568)- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new Japanese era (BZ #22964) - Replace glibc_post_upgrade with lua script- add-new-Fortran-vector-math-header-file.patch: Update from upstream- regex-read-overrun.patch: fix read overrun (CVE-2019-9169, bsc#1127308, BZ #24114) - ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig (bsc#1117993, BZ #23973)- Add add-new-Fortran-vector-math-header-file.patch.- pthread-rwlock-trylock-stalls.patch: nptl: Fix pthread_rwlock_try*lock stalls (BZ #23844) - arm-systemtap-probe-constraint.patch: arm: Use "nr" constraint for Systemtap probes (BZ #24164) - pthread-mutex-barrier.patch: Add compiler barriers around modifications of the robust mutex list for pthread_mutex_trylock (BZ #24180) - fork-handler-lock.patch: nptl: Avoid fork handler lock for async-signal-safe fork (BZ #24161) - pthread-join-probe.patch: nptl: Fix invalid Systemtap probe in pthread_join (BZ #24211) - riscv-clone-unwind.patch: RISC-V: Fix elfutils testsuite unwind failures (BZ #24040)- Update to glibc 2.29 * The getcpu wrapper function has been added, which returns the currently used CPU and NUMA node * Optimized generic exp, exp2, log, log2, pow, sinf, cosf, sincosf and tanf * The reallocarray function is now declared under _DEFAULT_SOURCE, not just for _GNU_SOURCE, to match BSD environments * For powercp64le ABI, Transactional Lock Elision is now enabled iff kernel indicates that it will abort the transaction prior to entering the kernel (PPC_FEATURE2_HTM_NOSC on hwcap2) * The functions posix_spawn_file_actions_addchdir_np and posix_spawn_file_actions_addfchdir_np have been added, enabling posix_spawn and posix_spawnp to run the new process in a different directory * The popen and system do not run atfork handlers anymore (BZ#17490) * strftime's default formatting of a locale's alternative year (%Ey) has been changed to zero-pad the year to a minimum of two digits, like "%y" * As a GNU extension, the '_' and '-' flags can now be applied to "%EY" to control how the year number is formatted * The glibc.tune tunable namespace has been renamed to glibc.cpu and the tunable glibc.tune.cpu has been renamed to glibc.cpu.name * The type of the pr_uid and pr_gid members of struct elf_prpsinfo, defined in , has been corrected to match the type actually used by the Linux kernel * An archaic GNU extension to scanf, under which '%as', '%aS', and '%a[...]' meant to scan a string and allocate space for it with malloc, is now restricted to programs compiled in C89 or C++98 mode with _GNU_SOURCE defined - unwind-ctor.patch, old-getdents64.patch, nss-files-leak.patch, riscv-feholdexcept-setround.patch, pthread-cond-broadcast-waiters-after-spinning.patch, regex-uninit-memory-access.patch, spawni-maybe-script-execute.patch, gethostid-gethostbyname-failure.patch, strstr-huge-needle.patch, pthread-mutex-lock-elision-race.patch, x86-haswell-string-flags.patch, if-nametoindex-descr-leak.patch, riscv-flush-icache.patch: Removed - CVE-2016-10739 - bsc#1114984 - bsc#1114993 - bsc#1122729 - bsc#1131330 - bsc#1149332 - bsc#1151582 - bsc#1164505- fnmatch-collating-elements.patch: update - riscv-flush-icache.patch: fix for compiling against 4.20 headers- if-nametoindex-descr-leak.patch: if_nametoindex: Fix descriptor leak for overlong name (CVE-2018-19591, BZ #23927, bsc#1117603)- Fix typography for glibc-locale-base.- pthread-mutex-lock-elision-race.patch: Fix race in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (BZ #23275) - x86-haswell-string-flags.patch: x86: Fix Haswell CPU string flags (BZ [#23709])- unwind-ctor.patch: Add missing unwind information to ld.so on powerpc32 (BZ #23707) - old-getdents64.patch: Rewrite __old_getdents64 (BZ #23497) - nss-files-leak.patch: Fix file stream leak in aliases lookup (BZ #23521) - riscv-feholdexcept-setround.patch: Fix rounding save/restore bug - pthread-cond-broadcast-waiters-after-spinning.patch: Fix waiters-after-spinning case (BZ #23538) - regex-uninit-memory-access.patch: fix uninitialized memory access (BZ [#23578]) - spawni-maybe-script-execute.patch: Fix segfault in maybe_script_execute - gethostid-gethostbyname-failure.patch: Check for NULL value from gethostbyname_r (BZ #23679) - strstr-huge-needle.patch: Fix strstr bug with huge needles (BZ #23637)- Add libpng-devel and zlib-devel for utils build- Add glibc-locale-base subpackage containing only C, C.UTF-8 and en_US.UTF-8 locales (fate#326551)- Update to glibc 2.28 * The localization data for ISO 14651 is updated to match the 2016 Edition 4 release of the standard, this matches data provided by Unicode 9.0.0 * Unicode 11.0.0 Support: Character encoding, character type info, and transliteration tables are all updated to Unicode 11.0.0, using generator scripts contributed by Mike FABIAN (Red Hat) * functions that round their results to a narrower type are added from TS 18661-1:2014 and TS 18661-3:2015 * Two grammatical forms of month names are now supported * The renameat2 function has been added, a variant of the renameat function which has a flags argument * The statx function has been added, a variant of the fstatat64 function with an additional flags argument * IDN domain names in getaddrinfo and getnameinfo now use the system libidn2 library if installed * Parsing of dynamic string tokens in DT_RPATH, DT_RUNPATH, DT_NEEDED, DT_AUXILIARY, and DT_FILTER has been expanded to support the full range of ELF gABI expressions including such constructs as '$ORIGIN$ORIGIN' (if valid) * Support for ISO C threads (ISO/IEC 9899:2011) has been added. * The nonstandard header files and <_G_config.h> are no longer installed * The stdio functions 'getc' and 'putc' are no longer defined as macros * All stdio functions now treat end-of-file as a sticky condition * The macros 'major', 'minor', and 'makedev' are now only available from the header * The obsolete function ustat is no longer available to newly linked binaries; the headers and have been removed * The obsolete function nfsservctl is no longer available to newly linked binaries * The obsolete function name llseek is no longer available to newly linked binaries * The AI_IDN_ALLOW_UNASSIGNED and NI_IDN_ALLOW_UNASSIGNED flags for the getaddrinfo and getnameinfo functions have been deprecated * The AI_IDN_USE_STD3_ASCII_RULES and NI_IDN_USE_STD3_ASCII_RULES flags for the getaddrinfo and getnameinfo functions have been deprecated * The fcntl function now have a Long File Support variant named fcntl64 * CVE-2016-6261, CVE-2016-6263, CVE-2017-14062: Various vulnerabilities have been fixed by removing the glibc-internal IDNA implementation and using the system-provided libidn2 library instead - Split off all libcrypt related functions into package libxcrypt - fix-locking-in-_IO_cleanup.patch, fnmatch-collating-elements.patch: Rediff - aarch64-sys-ptrace-update.patch, crypt_blowfish-1.2-hack_around_arm.diff, crypt_blowfish-1.2-sha.diff, crypt_blowfish-const.patch, crypt_blowfish-gensalt.patch, glibc-2.14-crypt.diff, i386-memmove-sse2-unaligned.patch, i386-sigaction-sa-restorer.patch, mempcpy-avx512.patch, netgroup-cache-keys.patch, nss-database-multiple-dfn.patch, pkey-get-reserved-name.patch, powerpc-sys-ptrace-undefine-macros.patch, powerpc-sys-ptrace-update.patch, realpath-ssize-max-overflow.patch, res-send-enomem.patch, riscv-fmax-fmin-nan.patch, riscv-kernel-sigaction.patch, riscv-readelflib.patch, riscv-tls-init.patch: Removed - glibc_post_upgrade.c: Don't reload init (bsc#1103124) - CVE-2009-5155, CVE-2015-8985 - bsc#1092877 - bsc#1102526 - bsc#1112570 - bsc#1126590 - bsc#1127223- Use python3-pexpect instead of python-pexpect- riscv-kernel-sigaction.patch: fix struct kernel_sigaction to match the kernel version (BZ #23069)- glibc-2.3.90-langpackdir.diff: No longer search in /usr/share/locale-bundle- mempcpy-avx512.patch: Don't write beyond destination in __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bsc#1094154) - realpath-ssize-max-overflow.patch: Fix overflow in path length computation (CVE-2018-11236, bsc#1094161, BZ #22786) - Use %license also for COPYING, COPYING.LIB- Readd nis to netgroup and automount nss config (bsc#1088860)- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing 2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)- res-send-enomem.patch: Fix crash in resolver on memory allocation failure (bsc#1086690, BZ #23005)- pkey-get-reserved-name.patch: Linux: use reserved name __key in pkey_get (BZ #22797) - aarch64-sys-ptrace-update.patch: linux/aarch64: sync sys/ptrace.h with Linux 4.15 (BZ #22433) - powerpc-sys-ptrace-undefine-macros.patch: powerpc: Undefine Linux ptrace macros that conflict with __ptrace_request - powerpc-sys-ptrace-update.patch: linux/powerpc: sync sys/ptrace.h with Linux 4.15 (BZ #22433, BZ #22807) - netgroup-cache-keys.patch: Fix netgroup cache keys (BZ #22342) - i386-sigaction-sa-restorer.patch: i386: Fix i386 sigaction sa_restorer initialization (BZ #21269) - riscv-tls-init.patch: RISC-V: Do not initialize $gp in TLS macros - riscv-fmax-fmin-nan.patch: RISC-V: fmax/fmin: Handle signalling NaNs correctly (BZ #22884)- nss-database-multiple-dfn.patch: Fix multiple definitions of __nss_*_database (BZ #22918)- Use %license (boo#1082318)- Add systemtap-headers to BuildRequires - Add --enable-systemtap to configure arguments (fate#324969, bsc#1073636)- riscv-readelflib.patch: Fix parsing flags in ELF64 files on riscv- Update to glibc 2.27 * Optimized x86-64 asin, atan2, exp, expf, log, pow, atan, sin, cosf, sinf, sincosf and tan with FMA * Optimized x86-64 trunc and truncf for processors with SSE4.1 * Optimized generic expf, exp2f, logf, log2f, powf, sinf, cosf and sincosf * In order to support faster and safer process termination the malloc API family of functions will no longer print a failure address and stack backtrace after detecting heap corruption * The abort function terminates the process immediately, without flushing stdio streams * On platforms where long double has the IEEE binary128 format (aarch64, alpha, mips64, riscv, s390 and sparc), the math library now implements _Float128 interfaces for that type, as defined by ISO/IEC TS 18661-3:2015 These are the same interfaces added in version 2.26 for some platforms where this format is supported but is not the format of long double * On platforms with support for _Float64x (aarch64, alpha, i386, ia64, mips64, powerpc64le, riscv, s390, sparc and x86_64), the math library now implements interfaces for that type, as defined by ISO/IEC TS 18661-3:2015 * The math library now implements interfaces for the _Float32, _Float64 and _Float32x types, as defined by ISO/IEC TS 18661-3:2015 * glibc now implements the memfd_create and mlock2 functions on Linux * Support for memory protection keys was added * The copy_file_range function was added * The ldconfig utility now processes `include' directives using the C/POSIX collation ordering * Support for two grammatical forms of month names has been added * Support for the RISC-V ISA running on Linux has been added * Statically compiled applications attempting to load locales compiled for the GNU C Library version 2.27 will fail and fall back to the builtin C/POSIX locale * Support for statically linked applications which call dlopen is deprecated and will be removed in a future version of glibc * Support for old programs which use internal stdio data structures and functions is deprecated * On GNU/Linux, the obsolete Linux constant PTRACE_SEIZE_DEVEL is no longer defined by * libm no longer supports SVID error handling (calling a user-provided matherr function on error) or the _LIB_VERSION variable to control error handling * The libm functions pow10, pow10f and pow10l are no longer supported for new programs * The mcontext_t type is no longer the same as struct sigcontext * The add-ons mechanism for building additional packages at the same time as glibc has been removed * The res_hnok, res_dnok, res_mailok and res_ownok functions now check that the specified string can be parsed as a domain name * In the malloc_info output, the element may contain another element, "subheaps", which contains the number of sub-heaps * In the malloc_info output, the element may contain another element, "subheaps", which contains the number of sub-heaps * The nonstandard header files and <_G_config.h> are deprecated and will be removed in a future release * CVE-2018-6485, CVE-2018-6551: The posix_memalign and memalign functions, when called with an object size near the value of SIZE_MAX, would return a pointer to a buffer which is too small, instead of NULL (bsc#1079036) - Support for Sun RPC is no longer available, use libtirpc instead - glibc-nodate.patch, powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch, resolv-context-leak.patch, dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch, math-c++-compat.patch, remove-nss-nis-compat.patch, eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch, assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch, dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch, nscd-libnsl.patch, malloc-tcache-leak.patch, falkor-memcpy-memmove.patch, aarch64-cpu-features.patch, nss-files-large-buffers.patch. sysconf-uio-maxiov.patch, glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch, spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch, tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch, malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch, fillin-rpath-empty-tokens.patch, getcwd-absolute.patch, ldd-system-interp.patchabort-no-flush.patch: Removed - All patches refreshed - bsc#1063675- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit (bsc#1070491, BZ #15142)- Avoid duplicate source rpm- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)- dl-init-paths-overflow.patch: Count components of the expanded path in _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ [#22607], BZ #22627) - fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419) - powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420) - malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)- Add _multibuild- glob64-s390.patch: no compat glob64 on s390 - noversion.tar.bz2: remove unused source- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ [#22273])- math-c++-compat.patch: Add more C++ compatibility (BZ #22296) - malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ [#22111]) - falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove for Qualcomm Falkor - aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling - nss-files-large-buffers.patch: Avoid large buffers with many host addresses (BZ #22078) - sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ [#22321]) - glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804, bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332) - dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in _dl_runtime_resolve (BZ #21265)- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)- Drop glibc-obsolete - glibc-2.3.90-noversion.diff: remove - reinitialize-dl_load_write_lock.patch: remove- nss-compat.patch: Move nss_compat from nis to nss subdir and install it unconditionally - nsswitch.conf: switch back to compat for passwd, group, shadow- assert-pedantic.patch: Suppress pedantic warning caused by statement expression (BZ #21242, BZ #21972) - math-c++-compat.patch: Add more C++ compatibility (BZ #22235) - getaddrinfo-errno.patch: Fix errno and h_errno handling in getaddrinfo (BZ #21915, BZ #21922) - resolv-conf-oom.patch: Fix memory handling in OOM situation during resolv.conf parsing (BZ #22095, BZ #22096) - dynarray-allocation.patch: Fix initial size of dynarray allocation and set errno on overflow error - nearbyint-inexact.patch: Avoid spurious inexact in nearbyint (BZ #22225)- math-c++-compat.patch: add more C++ compatibility (BZ #22146)- Remove rpcsvc/yppasswd.* from glibc-devel - ld-so-hwcap-x86-64.patch: add x86_64 to hwcap (bsc#1056606, BZ #22093)- eh-frame-zero-terminator.patch: Properly terminate .eh_frame (BZ #22051)- Disable obsolete libnsl and NIS support - remove-nss-nis-compat.patch: remove nis and compat from default NSS configs - nsswitch.conf: Likewise- math-c++-compat.patch: Do not use __builtin_types_compatible_p in C++ mode (BZ #21930)- Add iconvconfig to baselibs.conf (bsc#1051042)- resolv-context-leak.patch: Fix leaks of resolver contexts - dl-runtime-resolve-opt-avx512f.patch: Use _dl_runtime_resolve_opt only with AVX512F (BZ #21871) - libpthread-compat-wrappers.patch: Don't use IFUNC resolver for longjmp or system in libpthread (BZ #21041)- Update to glibc 2.26 * A per-thread cache has been added to malloc * Unicode 10.0.0 Support * Improvements to the DNS stub resolver * New function reallocarray, which resizes an allocated block (like realloc) to the product of two sizes, with a guaranteed clean failure upon integer overflow in the multiplication * New wrappers for the Linux-specific system calls preadv2 and pwritev2 * posix_spawnattr_setflags now supports the flag POSIX_SPAWN_SETSID, to create a new session ID for the spawned process * errno.h is now safe to use from C-preprocessed assembly language on all supported operating systems * On ia64, powerpc64le, x86-32, and x86-64, the math library now implements 128-bit floating point as defined by ISO/IEC/IEEE 60559:2011 (IEEE 754-2008) and ISO/IEC TS 18661-3:2015 * The synchronization that pthread_spin_unlock performs has been changed to now be equivalent to a C11 atomic store with release memory order to the spin lock's memory location * The DNS stub resolver no longer performs EDNS fallback * res_mkquery and res_nmkquery no longer support the IQUERY opcode * The _res_opcodes variable has been removed from libresolv * no longer includes inline versions of any string functions, as this kind of optimization is better done by the compiler * The nonstandard header has been removed * The obsolete header has been removed * The obsolete signal constant SIGUNUSED is no longer defined by * The obsolete function cfree has been removed * The stack_t type no longer has the name struct sigaltstack * The ucontext_t type no longer has the name struct ucontext * On S/390 GNU/Linux, the constants defined by have been synced with the kernel * Linux kernel 3.2 or later is required at runtime, on all architectures supported by that kernel * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes, to avoid fragmentation-based spoofing attacks (CVE-2017-12132) * LD_LIBRARY_PATH is now ignored in binaries running in privileged AT_SECURE mode to guard against local privilege escalation attacks (CVE-2017-1000366) * Avoid printing a backtrace from the __stack_chk_fail function since it is called on a corrupt stack and a backtrace is unreliable on a corrupt stack (CVE-2010-3192) * A use-after-free vulnerability in clntudp_call in the Sun RPC system has been fixed (CVE-2017-12133) * fate#322258, fate#321513, fate#322453 - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff, i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch, sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch, tunables-bigendian.patch: Removed - bsc#1074208- Fix RPM group- s390-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (fate#322271)- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)- Remove glibc-cpusetsize.diff, no longer useful- fts-symbol-redirect.patch: Fix symbol redirect for fts_set (bsc#1041123, BZ #21289)- test-math-vector-sincos-aliasing.patch: Fix test-math-vector-sincos.h aliasing- add-locales.patch: renamed from glibc-2.3.locales.diff.bz2, drop en_BE locales (bsc#1039502)- Remove glibc-testsuite.patch, no longer relevant- Use multibuild feature - Remove obsolete check-build.sh - glibc.rpmlintrc: remove obsolete entries - Use %tmpfiles_create in nscd postin- i686-memchr-sse.patch: Fix i686 memchr overflow calculation (bsc#1031021, BZ #21182) - sunrpc-use-after-free.patch: Avoid use-after-free read access in clntudp_call (BZ #21115) - Build testsuite with gdb and python-pexpect to enable more tests- tunables-bigendian.patch: Fix getting tunable values on big-endian (BZ [#21109])- Update to glibc 2.25 * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR 24731-2:2010, is supported to enable declarations of functions from that TR. * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS 18661-1:2014, is supported to enable declarations of functions and macros from that TS. * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS 18661-4:2015, is supported to enable declarations of functions and macros from that TS. * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L. * The inclusion of by is deprecated. * New features from TS 18661-1:2014 are added to libm: the fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros. * Integer width macros from TS 18661-1:2014 are added to : CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH, UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to : INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH, INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH, UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH, INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH, UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH, UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH, UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH, UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH, WINT_WIDTH. * New features are added from TS 18661-1:2014: - Signaling NaN macros: SNANF, SNAN, SNANL. - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp, fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf, fromfpxl, ufromfpx, ufromfpxf, ufromfpxl. - llogb functions: the llogb, llogbf and llogbl functions, and the FP_LLOGB0 and FP_LLOGBNAN macros. - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag, fminmagf, fminmagl. - Comparison macros: iseqsig. - Classification macros: iscanonical, issubnormal, iszero. - Total order functions: totalorder, totalorderf, totalorderl, totalordermag, totalordermagf, totalordermagl. - Canonicalize functions: canonicalize, canonicalizef, canonicalizel. - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload, setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl. * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014, are added to libc. * Most of glibc can now be built with the stack smashing protector enabled. * The function explicit_bzero, from OpenBSD, has been added to libc. * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined to float instead of double. * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the float_t and double_t types are now defined to long double instead of float and double. * The getentropy and getrandom functions, and the header file have been added. * The buffer size for byte-oriented stdio streams is now limited to 8192 bytes by default. * The header now includes the header. * The malloc_get_state and malloc_set_state functions have been removed. * The “ip6-dotint” and “no-ip6-dotint” resolver options, and the corresponding RES_NOIP6DOTINT flag from have been removed. * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING flag from have been removed. * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG, RES_BLAST defined in the header file have been deprecated. * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for _res.flags are deprecated. * DNSSEC-related declarations and definitions have been removed from the header file, and libresolv will no longer attempt to decode the data part of DNSSEC record types. * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p, ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the header file because the distinction between RR types and meta-RR types is not officially standardized, subject to revision, and thus not suitable for encoding in a macro. * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook and rhook members of the res_state type in have been removed. * For multi-arch support it is recommended to use a GCC which has been built with support for GNU indirect functions. * GDB pretty printers have been added for mutex and condition variable structures in POSIX Threads. * Tunables feature added to allow tweaking of the runtime for an application program. * A new version of condition variables functions have been implemented in the NPTL implementation of POSIX Threads to provide stronger ordering guarantees. * A new version of pthread_rwlock functions have been implemented to use a more scalable algorithm primarily through not using a critical section anymore to make state changes. * On ARM EABI (32-bit), generating a backtrace for execution contexts which have been created with makecontext could fail to terminate due to a missing .cantunwind annotation. (CVE-2016-6323) * The DNS stub resolver functions would crash due to a NULL pointer dereference when processing a query with a valid DNS question type which was used internally in the implementation. (CVE-2015-5180) - Enable stack protector if part of %optflags - startcontext-cantunwind.patch: Removed - cpuid-assertion.patch: Removed- cpuid-assertion.patch: Don't assert on older Intel CPUs (BZ #20647)- glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to /var/lib/nscd - glibc-2.3.90-langpackdir.diff: simplify- Update to glibc 2.24 * The minimum Linux kernel version that this version of the GNU C Library can be used with is 3.2 * The pap_AN locale has been deleted * The readdir_r and readdir64_r functions have been deprecated * The type `union wait' has been removed * A new NSS action is added to facilitate large distributed system administration * The deprecated __malloc_initialize_hook variable has been removed from the API * The long unused localedef --old-style option has been removed * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added to libm * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed (CVE-2016-3075) * Previously, getaddrinfo copied large amounts of address data to the stack, even after the fix for CVE-2013-4458 has been applied, potentially resulting in a stack overflow. getaddrinfo now uses a heap allocation instead (CVE-2016-3706) * The glob function suffered from a stack-based buffer overflow when it was called with the GLOB_ALTDIRFUNC flag and encountered a long file name (CVE-2016-1234) * The Sun RPC UDP client could exhaust all available stack space when flooded with crafted ICMP and UDP messages (CVE-2016-4429) * The IPv6 name server management code in libresolv could result in a memory leak for each thread which is created, performs a failing naming lookup, and exits (CVE-2016-5417) - startcontext-cantunwind.patch: mark __startcontext as .cantunwind (bsc#974800, BZ #20435) - Removed patches: * 0001-Updated-translations-for-2.23.patch * 0002-Regenerate-libc.pot-for-2.23.patch * 0003-Regenerated-configure-scripts.patch * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch * 0008-Update-NEWS.patch * 0009-sln-use-stat64.patch * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch * 0013-Mention-BZ-19762-in-NEWS.patch * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch * 0016-Fix-resource-leak-in-resolver-bug-19257.patch * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch * 0022-configure-fix-test-usage.patch * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch * 0025-getnameinfo-Do-not-preserve-errno.patch * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch * 0030-hesiod-Remove-RCS-keywords.patch * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch * 0033-malloc-Remove-NO_THREADS.patch * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch * 0052-Fix-tst-dlsym-error-build.patch * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch * clntudp-call-alloca.patch * glibc-memset-nontemporal.diff * nis-initgroups-status.patch * nscd-gc-crash.patch * robust-mutex-deadlock.patch * strncat-avoid-array-bounds-warning.patch- strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for stncat on i586 (BZ #20260) - Update glibc.keyring - Unset MALLOC_CHECK_ during testsuite run- nsswitch.conf: Add fallback to files for passwd and group to prepare for libnsl removal.- nis-initgroups-status.patch: Return proper status from _nss_nis_initgroups_dyn (bsc#984269, BZ #20262) - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to check for timeout (bsc#985170, BZ #20263)- nscd-gc-crash.patch: Fix nscd assertion failure in gc (bsc#965699, BZ [#19755])- clntudp-call-alloca.patch: do not use alloca in clntudp_call (CVE-2016-4429, bsc#980854, BZ #20112)- Import patches from 2.23 branch 0001-Updated-translations-for-2.23.patch 0002-Regenerate-libc.pot-for-2.23.patch 0003-Regenerated-configure-scripts.patch 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch 0008-Update-NEWS.patch 0009-sln-use-stat64.patch 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch 0013-Mention-BZ-19762-in-NEWS.patch 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch 0016-Fix-resource-leak-in-resolver-bug-19257.patch 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch 0022-configure-fix-test-usage.patch 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch 0025-getnameinfo-Do-not-preserve-errno.patch 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch 0030-hesiod-Remove-RCS-keywords.patch 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch 0033-malloc-Remove-NO_THREADS.patch 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch 0037-malloc-Add-missing-internal_function-attributes-on-f.patch 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch 0041-nss_dns-Check-address-length-before-creating-addrinf.patch 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch 0052-Fix-tst-dlsym-error-build.patch 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727 - resolv-mem-leak.patch: renamed to 0016-Fix-resource-leak-in-resolver-bug-19257.patch - no-long-double.patch: renamed to 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch - glibc-gcc6.patch: renamed to 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch- glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories - glibc-2.3.locales.diff.bz2: likewise- glibc-gcc6.patch: Suppress GCC 6 warning about ambiguous 'else' with - Wparentheses- Add compatibility symlinks for LSB 3.0 (fate#318933)- powerpc-elision-enable-envvar.patch: enable TLE only if GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)- ldd-system-interp.patch: Restore warning about execution permission, it is still needed for noexec mounts (bsc#915985)- Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8) and rh#902094 . Added with glibc-c-utf8-locale.patch. - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for C.UTF-8 same as C locale.- Move %install_info_delete to %preun - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer acceptable- no-long-double.patch: Don't use long double functions if NO_LONG_DOUBLE- Update to glibc 2.23 release. * Unicode 8.0.0 Support * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess the kernel-internal CPU set size * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64 * getaddrinfo now detects certain invalid responses on an internal netlink socket * A defect in the malloc implementation, present since glibc 2.15 (2012) or glibc 2.10 via --enable-experimental-malloc (2009), could result in the unnecessary serialization of memory allocation requests across threads * The obsolete header has been removed * The obsolete functions bdflush, create_module, get_kernel_syms, query_module and uselib are no longer available to newly linked binaries * Optimized string, wcsmbs and memory functions for IBM z13. * Newly linked programs that define a variable called signgam will no longer have it set by the lgamma, lgammaf and lgammal functions - Removed patches: * dont-remove-nodelete-flag.patch * openat64-readd-o-largefile.patch * mntent-blank-line.patch * opendir-o-directory-check.patch * strcoll-remove-strdiff-opt.patch * ld-pointer-guard.patch * tls-dtor-list-mangling.patch * powerpc-lock-elision-race.patch * prelink-elf-rtype-class.patch * vector-finite-math-aliases.patch * powerpc-elision-adapt-param.patch * catopen-unbound-alloca.patch * strftime-range-check.patch * hcreate-overflow-check.patch * errorcheck-mutex-no-elision.patch * refactor-nan-parsing.patch * send-dg-buffer-overflow.patch * isinf-cxx11-conflict.patch * ibm93x-redundant-shift-si.patch * iconv-reset-input-buffer.patch * tzset-tzname.patch * static-dlopen.patch- isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with C++11 (bsc#963700, BZ #19439)- tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling (BZ #19018) - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits for prelink (BZ #19178) - vector-finite-math-aliases.patch: Better workaround for aliases of * _finite symbols in vector math library (BZ# 19058) - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision transient failure adapt param (BZ #19174) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, bsc#962739, BZ #17905) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, bsc#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, bsc#962737, BZ #18240) - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (bsc#956716, BZ #17514) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, bsc#962738, BZ #16962) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, bsc#961721, BZ #18665) - powerpc-lock-elision-race.patch: renamed from 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- Add audit-devel and libcap-devel to BuildRequires, for use by nscd- reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (bsc#958315, BZ #19282)- resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257) - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set DST rules only (BZ #19253)- glibc-2.3.90-noversion.diff: use stat64- ld-pointer-guard.patch: Always enable pointer guard (CVE-2015-8777, bsc#950944, BZ #18928)- strcoll-remove-strdiff-opt.patch: Remove incorrect STRDIFF-based optimization (BZ #18589)- iconv-reset-input-buffer.patch: Fix iconv buffer handling with IGNORE error handler (BZ #18830)- new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock 0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch- nss-files-long-lines-2.patch: Properly reread entry after failure in nss_files getent function (bsc#945779, BZ #18991)- fnmatch-collating-elements.patch: Fix fnmatch handling of collating elements (BZ #17396, BZ #16976)- opendir-o-directory-check.patch: Fix opendir inverted o_directory_works test - static-dlopen.patch: Static dlopen default library search path fix (bsc#937853)- mntent-blank-line.patch: Fix memory corruption w/blank lines- dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from all loaded objects on failed dlopen - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64- Update to glibc 2.22 release. * Cache information can be queried via sysconf() function on s390 * A buffer overflow in gethostbyname_r and related functions performing DNS requests has been fixed. (CVE-2015-1781) * The time zone file parser has been made more robust against crafted time zone files * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors for LD and GD on x86 and x86-64, has been implemented. * Character encoding and ctype tables were updated to Unicode 7.0.0 * Added vector math library named libmvec * A new fmemopen implementation has been added with the goal of POSIX compliance. * The header is deprecated, and will be removed in a future release. * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211 bsc#940195 bsc#940332 bsc#944494 bsc#968787 - Patches from upstream removed * htm-tabort.patch * o-tmpfile.patch * memcpy-chk-non-SSE2.patch * pthread-mutexattr-gettype-kind.patch * powerpc-software-sqrt.patch * static-tls-dtv-limit.patch * threaded-trim-threshold.patch * resolv-nameserver-handling.patch * nss-separate-state-getXXent.patch * aarch64-sigstksz.patch * heap-top-corruption.patch * pthread-join-deadlock.patch- pthread-join-deadlock.patch: Use IE model for static variables in libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)- glibc-nodate.patch: fix verification of timestamp- also filter out -fstack-protector-strong- getaddrinfo-ipv6-sanity.diff: Remove. It breaks services that start before IPv6 is up (bsc#931399) - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.- Add /usr/include/gnu/lib-names-.*.h to baselibs - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS offset in the DTV (bsc#930015, BZ #18457) - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if top chunk is MINSIZE (BZ #18502)- threaded-trim-threshold.patch: Fix regression in threaded application malloc performance (bsc#915955, BZ #17195)- aarch64-sigstksz.patch: Increase MINSIGSTKSZ and SIGSTKSZ (BZ #16850)- powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ [#17967]) - nss-separate-state-getXXent.patch: Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621, BZ #17628)- resolv-nameserver-handling.patch: Replace with simpler version with more compatibility- memcpy-chk-non-SSE2.patch: Fix __memcpy_chk on non-SSE2 CPUs (bsc#920084)- resolv-nameserver-handling.patch: Rewrite handling of nameserver configuration in resolver- htm-tabort.patch: Fix TABORT encoding for little endian- Update to glibc 2.21 release. * A new semaphore algorithm has been implemented in generic C code for all machines * Added support for TSX lock elision of pthread mutexes on powerpc32, powerpc64 and powerpc64le * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for AArch64 * i386 memcpy functions optimized with SSE2 unaligned load/store * New locales: tu_IN, bh_IN, raj_IN, ce_RU * The obsolete sigvec function has been removed * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402 CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222 - Patches from upstream removed * ifunc-x86-slow-sse4.patch * pthread-mutex-trylock-elision.patch - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with non-default O_DIRECTORY (BZ #17912)- Update to crypt_blowfish 1.3. * Add support for the $2b$ prefix. - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit (BZ #17501)/sbin/ldconfigngptngpt-develh02-armsrv2 1774958064  !"####'()*+,-./2.38-150600.14.46.12.38-150600.14.46.12.38-150600.14.46.12.2.22.2.22.2.22.2.2 bindresvport.blacklistgai.confld.so.cacheld.so.confnsswitch.confrpcld-linux-aarch64.so.1libBrokenLocale.so.1libanl.so.1libc.so.6libc_malloc_debug.so.0libdl.so.2libm.so.6libmvec.so.1libnss_compat.so.2libnss_db.so.2libnss_dns.so.2libnss_files.so.2libnss_hesiod.so.2libpthread.so.0libresolv.so.2librt.so.1libthread_db.so.1libutil.so.1ldconfiggencatgetconfgetenticonvld.solddlocalelocaledefgetconfPOSIX_V6_LP64_OFF64POSIX_V7_LP64_OFF64XBS5_LP64_OFF64getconficonvconfigglibcgai.confglibcLICENSESgencat.1.gzgetconf.1.gzlocale.alias.5.gzldconfig/etc//lib//lib64//sbin//usr/bin//usr/lib//usr/lib/getconf//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/glibc//usr/share/licenses//usr/share/licenses/glibc//usr/share/man/man1//usr/share/man/man5//var/cache/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:43456/SUSE_SLE-15-SP6_Update/6ef33ab443b508776347bf0251869629-glibc.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linux  ASCII textcannot open `/home/abuild/rpmbuild/BUILDROOT/glibc-2.38-150600.14.46.1.aarch64/etc/gai.conf' (No such file or directory)emptyELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0674a4dbd21f0443e8e4e2f47754a6c4275016ef, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d9f872ee95abef1f4cd217815ea7c74c24a81869, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ddb45915d5309da5b50e8688fd26a0bc906959a3, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (GNU/Linux), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=c470cb61ab230729331250965a65cdf5718d279e, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f670f93faa53e48ecca558225cb52986dc121e8, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5bc79af99c3b65ca0edacfa006a788925140a3dd, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d652d8c11aadf90c23fdefcf1ca88dab869629be, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=65192cdfe17868cc7904c0dc064636241b3a617d, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8de53feed969fc2088d8b13e12be7a204d276977, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8f525deff9aeb6a0fa186e107cd8be2b39047eef, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=98b4a65cca89b7deea8a6d962809a70b8dfad683, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=46824c0d782a966f6fe5a4f3d560e3b1f1cd3c55, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=13d92eb140d3c54c48479742aeddbbbfc49ad3f8, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a2dce2916adaf13e5e183ea032edc3ffc98d2006, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=60ab32fa97cdb1da81caf5c826aee39fb529c8bc, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4fbe1e31f54f77cb85488dfd2eba88775eb217c5, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a3f9eb85840ae17b88feabcedb0806f35eaf3db, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a8e3306695fc55af5dbd30dd4f7eca0ca7d09ee, for GNU/Linux 4.3.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (GNU/Linux), dynamically linked, BuildID[sha1]=e0c5fe75d1a84e54a61c9eecaa76e97c44cf398c, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=ca7e576a277a3bc0eb2a945df197e396a7fee8ad, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=c147f093719d9ea6269c8f0d7ecfd6887473834e, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=bc7d52063f1a006e88b812ff8539a993564f1948, for GNU/Linux 4.3.0, strippedBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=373ade343d43d03fcd718618fc4c2f8586b5862a, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=2a4da4b2ef8e20e6406ace223f380c2ef3f7a424, for GNU/Linux 4.3.0, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=937bf6c7dfa32841a95343cbb2af70f64f38db7b, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=01685c68ea7ed975e5bb8cf00026fb383fb3a796, for GNU/Linux 4.3.0, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) 8CGckpvz}(  PPPPPPPPRRRRP P RRP P P PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP RRP P!P!PRRRR RRRP#P"RRP%P&P&P'P'P(P(P)P)P*P*P+P+P,P,P-P-P.P.P/P/P0P0P$RRRRP2P1RR RRR RP3RRRRP4RR RRRP5RRRP6RRP7RRR R RRRRRP9P:P:P;P;PRR RRRPAP@RRRPCPBRRRRPEPDRRRR R RRRRR R RRRRR R R RRRRR R R RRRRR R R RRRR RRR RRR RRR RRRR R R RRROc2;cglibc-extrautf-885e286d4ae67c3dcad35e3ae41a9366da09ca1e6b7c80fb121c5bffefa1cbc11?`7zXZ !t/]"k%f%| ^6ܷ۬xanvtW̵eETh Q1ܡeIu_J$V_B F .`/RKٌ5W(}L$iibLYCy,:, c۸o?qo% gIׅ嫩,zGE''S{g:@+g-I$Uc *N%qjLy}<iS.vE?JFщv MUn=p9ߣgdGjR _l~E/'t (͵n $/j ,HЌd9x}-su׬}7xe` h>_Πn{JgC|*h# DުaNN.,!ȭ3wRĚG>.rB,j<n˄֞bnh(<ԂĨ:@!$̿ mxԧ9T;--s@Sc:1Wub=6ŽֺoC}v-ҧJ ¨N=K*)}{G^alqB{* NCl~r7A7IX]☝r0"KIuՉh~ ]spԬns l,ɣR~S7>A$? *D D6PqpݝUdY:ƪ=EwPMMbC?#F+8])D1 0)L\EWWp3]q7ƅ/(iCAL#Δ;;5l_6I Aקu+Yލ%7ƃz%oDv/2v10s[BgSFZ0%~O; I1P(R?4rP]˥ah ɴ#5< &Ȩ(ۦf]8 &Oh9vĭ& 3Oc8e4:Jv e32*V}4Wix#>t~bpH%f8f _ɝ!@yXvAؑ!+iŝ~3x9\ U}[n~,E_"#1lq%63W==ޠpGdߢRKac=h|Uݓ'2,Bv2Hk1nBuK4s`;Δpv=F)*+5lRuL9|z7苷"I.@٘>V4IK~eu|>&PvFTSuѐNKWeDV{7iJQI4ȓm+19`L@qr`/,Mu YT>|+g%ngu ᐴi 2|Pry GeSPy^& |u\=7s $T!WA[@6 d*\sw=2>ySƈSˢ[v]zyU{0%C s݋.*/r$aˏ?dKڢ$河P0+\O_I>@f}Ңd/[=cO^K^{朗BPD S Bx\3VRuUh|hgH۳(2@tkQ&=q/f¨F=VbAHW y͚~5I`>5 g=ۨ_A7y\cb$mQk_{ũSg`  2En_r0FTGʢEu.Jy`SiwJ7 A4a*4ۚ^ҍй~N<Ŵ$T0گ":ٴM9+ K=I]͎*.LSI\{Ř1s`3ĺAД]4zh<~9OƎCٌXpQ@ܠ9hコh6*-< DY䵎L#-f1&wn`onZXܔ_`˭l|&FFբ{%uBNwB+蟉)eCVPb(:rXZU :~ȷWO d7Ve#"HY%3AG"jY Kˋ ²@ᆚ%s!:}*bpmk=k5=>XdzKQ^i{\z`G)`1 } i쁾a?~z3vߧ\KMJl֧?sBL*|eort<\8> xF=z-:Cjh_[ \|o2IeD"y?<^vb7!y:RP97Oh YH_ֱ9E +:uIET1Lp1 w2|/uDD?dF9E#C^k<^N#AShQ>D 0Egf6d ;ZA o= ]sJyoX{VWB e;HÄ[6]ZODaXR ET~͞6$w>Aq]]~ypї^0)JvkXera+e?ny"+D7|1I7OY2: Ԣ{Ֆܥى2 $Ψ)x<7wP4=z4<"$KK{_۾i]_J<9;b~ng;ߛqLl۝Ip.g[}+/fڄl}O 0#5&NrICxĦ$Tsd}viWp,w3Hҝ_ƚqQ㈳^yl-EX57V?C0y(@egt<LʮLrkk2QXrllN1fHP'TॕKgb^Ķ6J%gg w.#4MX^$׹41m݊ ITZT$aV[UWu/Z(uW~0^'[ G{Ē8)DR^E2YT!7*0G=84x[@h5# f<(@ќ R/x(Wį")Rְ'O½\ߙ:1P8>4Pƒjt5cO!Xo3 ̕f+o7ó&} yObQ|(SU{UkAθpb2#"o+EׁxG#2=?γ]$D!9gMwz]ajf}7luFNF#@"z%b.o+o'H em~{Wп`B䋘&[taX-x%QLJz\Hx +jGAQPb T2BJeY3rY~{O~K%}IŹ.c\$&؞60}v<\8̕B>3Z/j>ilz}3IGފ/ICD$}%?u-VB2?iN )%UpvGv x]1tMѭ.ԪxR :\+sU݁g9;Ƭ-G~XzD%e 3Dt>EDϼ_M˨{{Bth&}n~ýyXOdj_9$nf ikI#8P 5%42__91 dzҭg ȝ)ri.qV61=Aq־U677ll᾵x}7u= 6?$_f-LՒS^K.(m[27~a i^ͬ+^!-"ZwKdhJpkRJ,Zocj74:r s!2XDl} ?.&!4fwZm}`>.kU6{a ̦tEtէ"vm Sm%"L U nE %O"*y77Mm;ؙJt֜Gքxw&,4 Sj}~ ?Lfҡ_L<+8y#3 Ż*pq 1;,@pîNB[/숤x`J(?\A9NC\uddHKGzS }/YƟB;ZQ!Uk%HtL5G}ERY Gi|bs iA§5w ,K{$\3cȹx?eeSP!b*7Loy =g))2'ڱ U:P䁾 *!aQɵ{҄̫ɛ; Z~lWG\wy U+?7ǘy Zb/ k(6P4V(>}]"@ "zW#}9!n0aC!'`*M8jgJLLODʅ)p-8g?\nt9w1\ʦ-k%ͨa2Rv;ݐN7Ey7(0avdfhQX 5QocE5rЙ6u8=-&;OoS/lbkI$ܞHho{)e}hٌDMJdgiJlFоmh vbщ(QSk> }T$oNi'Skcv>0%&F*xja;zoU`,Ho0ַg/xi)xg߼epBΎlFD"LnAl/gB/ ұ}btJ]Dє37ghi2_ӟlEhP+V^hl+,L._*|0iv]iI1!/."yQV;ܽ~ens8i Zib?s4ԍzˌfTBZ=\cw {~˳,|q(`2?*F 8(礓m [.?F͔QRd]G$Cؕinh{C<2Fl+)xX?o+n`:DbG?\5GYfؓު7fJu =q 1ce Mcd" gv֠K⧟( Wƍ=AZ|Ԛc },>4of$*WYDMC[&q{!cZ^==uCε3HX.HvUvWќ ;D/`)len,\ c-]S~F" X?%%Fu|&A˰[>:i $' 4{UzN _2(~kH#>+}^D3Z0Lm֒ -UWQ+ƚrK&ؽh#=DYPe_< zx`J-A# 6vi vXx)qE[V{^;ȔqU19ȟj5u3]'$x^]>˒US3gX&4ʚz4Hlv$]j+1wlQ&R7IN|;ԇNikk,IdA`xŠ_{n8-L 2{CSb(w,ѫJmMT7ۆMZr8ADSy5esWI7ieCJuV8nH?Kn1˯,k>TCuە2I;g:ܗ( KyQ[}Lh'JxeN%Ec0e|5͐T`(H3H ?`2t3^e"Q`UM\Kycݘb?p"S ht3ƶqS8~l<ݩg|1im1p$[=lp&ʈg~'m4|wD6OIͺ9c[ -| KW-/}q;C?4ٔTnQ;K`*)DU1"ӋQqW*A2`9sNcbDž:ۦCA?x |z 2T9BXj~J~G } Á}4"ɫx5w>QBZ퉢@ָ~d c}3Ԥ6asjPVyrݳIl@p:s^زKޏ@qzL0+d4vXPTMzu,3~+|5ezW~QC*vRO;~DX+WimP1Y]3L#rL;auV?Cx%5T[L\Ԧ3GA= NJj\)]*RX< 64h y:x_zA!:'>'Z>M4n8@t[Ndd're{{Czų S,_5 H NS+l%"yF$I6rL1I1[IS6(6O=< {?zS~#A1(~W6zT[黝&f)T_[|S `B7zG詫iO7eXIx@Y ۀ0>An9mp;<2Q 6ZoQ1=X>>gx K1<2U [Uc!17b:2I[j}aN; ?x4oKôYmv-VdH+rd5|VAvp.1*xpY MރE0CdJIogIf=VT8۞$($9ujlk1Td,q x-L|Կ'D%p-. C Vj|L(VNgKЄ f#Y?g9Aا.sœNخkIoz ܁x$tK^tuf$wUs=+[5:L 9]:4N&B`!EY\TRF`Hb_DT xGa<( ^8 *;ߒE#6Ն=z\e:ofFXt//?g&'CLMۖ9mgPeZ$Ty214 %x 1~~# VAcbB:@io|L8;L^VNP?ǟ6I4Of?~mC{;8EQR re XnQJFV<^ǛP"(ePxŘ;q]pm M^X2f ݵaQ6SNM]O+ ?ۇ~Uxp|P)L<..Qqӟ}`UGxSCruۀiX'g C~/-[服I* LAGr6IbY芞ۘϣAh}ȩCBfMb%ff (R4.MKŲwzcyXQ$hZFm-̹NB+ɮ3*%\y6P FղLB6Ɵ]9ho~>en̓u;?yr0P" A}>'LǽqE耒5X>-3WP=MaN9~w D.Uj; /|+ɏzqAt>j]G5PjHaY =jՁgtwb 8JL1Y?`ˍ*][kZB(h,֛/<:" "2 {8 a D:BI Cmu"?jz<ß8Y[㎺-z4:ÄF;}oMv؈Ji|~y6:ZOOKh&/X-1Jm!B|!1IkAv,HLnP8 *!qsAl_ԹgL8x85_YQ F(AwsӶvLR.ww$L \+ṡ$4" δ;Tas@^Rإ;5]Lؕp#GMg$<3SV%N 7268YUg[> Mu#gAEt2wML["6sc|3>^Ec&e`80t\4 Ӊ)QvaJA>?.oUA۷ 4 ܟ(]H03anN8NV%[M5:=EW'%}f^I1Y:^(+i-1_1sӅ!y@)@OQNr ʃ+? }}BDu) cͥGk~"ѸyrCd`pXH̊խ=fZyekK;_2r?<(dU ӧ1u@u,"ӥQhe΂HHE_ [-nwM<r)QhOjDxFyv3_+'@▇Vms:׌O(Ո 3fQvbNA7@pm: _j6ZY0csaY= F 34הI朡$!S(2F%ʀ Ϋjaʽc>=٠ᬂ>K ?+cF*k#)ӛE -vN,Dg^/b& e̶J-=NC% .3-Boؽ łK%hwr->}Y ktѥwOGI/DfBDsh[ R-*ײ22.N_!3PVrP4jif-<ȇJcY4 _nTbq3ISPm&Ūc$"09uɖ0}~Uu;xP]4]-e\uIJP!C*~GnFPP/MW-ߥ!8i4Q̓F4@U(IhsRy* Ht$ !(gsj̗]7?W78䑲"P;xR29C6.i*-U {?MOd*LY~2نYFRhj7岉 E1◷WW'7P6H?<ó\Hř~ٌPIKooQ}Kp3fpRHqƝUmc 19)]FͽE .QJO0dǞwdx=i*;LuEXipT4#`۶T]0N)閙Xc=;R gCFOo֩$Ѻ sN(۠fGD#/sV5֪$AELA) r%J'}U@ 2/oxPK\W,/¡ La/Ԫ E\ Lh!KY @'f>8CZ@KA6Y$'q e=hVpq(Jw.b<D fG[P7djQS‡|?h&}xyύx?_yrM C?J>8=6rq6hH! /POzy(:[!ײ`?_YA4(qj pbuI}y8NLJXJv 1 O-Pi| >IJ_ O[c//#u#;b` >14*pm*I[n"ND r~5ʙ;dqd.]^l`'lKv^oŻgh zPZ̷p*Dӫ8{f _ԖOh?6'904~p&`r2Sh{֒kjDx i87 K׆:SǸ{X«*|5'W ø+&yׂTMM$s8WQ28nqƂζ̹}^Fb,F`y>﯄3^e)U|7z(pxCt 6kA׻ln8d:)JXw}EQEbWRG"3jA%n?HL۔HXw}e~J˧6}jwVV1ϭU/NKSa@n9ݜƴKd/ 5wr3xt{V[)+(^If.}`c~'U\d"QQ ,q8<Qcm/ֆ!^v" q\Ш gw/IwM8K&9zz^̽q,*c]요J>P80$ȎlwXDm#tT*)Hٿ2GIv !K[tmԚ] Lގ.Mh_1&9h(bgչBOnQ#} DVzȯU„F G'mXqSҁ\C2d^wj).3=XR\2CQ^!'ݾ(B%}QxԸC1F^.SYXt+5`"[\u6ԂsWL'3N 뫩s8{ q90G͕}fأ00wF4"202z Г(Sz2;sqZ7yd,A~fϜ7p^ɂ3#ާ^`v:]zK5+9"|q$U"&FGz|.J@h=2Q+95ҁ^:6LV]GuV'PDL\5i"sc۷3E`ub@_o<`5ؕh3^ڋezN wTBqNþzZYD|O]b(%SY>3S[V+T 2֪}y?T$ ZSls0~Q۰ܐq !G :, PaN )_[_ {Q* gqMJJcZ2ŠFKv'ge/r*K{ DF5Cp4XMd81O ăJBUpN%|JdL}g81] vw!<.pPRqn/߅0wR ~Gpwv7&lUKzqc!%jRARKPgH QU(GENz{<CSߠ@CP"őr3 瘯<P?ߩшG Ye~bn('DvyѮ&/L5k5 Èw}!S# j;fwc(6EHYtTp;_zȊ],0};@TG\}~0vR:{"A-z\q#\"wtcjZUz L T滔1. +IHf HG>5uXx^vRP)>$vʡyMy5.iLgXFZ m,~]חs2tMVEk ::Ik 9,dYꞪdAժ+ F1Y۞@,|`fp(=©H &cdI@"8UbG9cBDܸIMW4/ܵ8Z5C=s+r_Bn|%r/c{,HO.]jjm9JK zkjO8E{l0he'!GB%쉬n[Q T4.|_Rud4-;gв /-hBVg* {Bo{4؃:.'R#Y6ĵ5dnh{V[3D~ˣ.PA)m8)ncG=L?+[t ZIe10Ԣ*tfX[1W7 œ>ҙԎjWi93őso buV3ڧbnqe J]mjܜX vu83=A@RP&q} ]ҟ(@'VW$l¶6'?pD\R[a /])heeqQmi$Ǵq]Hꐱ"=ĂwfB콈&ZON:eōn!Ƥ0J"<iY<ooBa}g sozc^S=)N z'֞1]];Nu (.xՓ ibZ| }"]WjѮM~K#c3QC14ETxfd\ʜ2E'4M)Ԍ,>+H1eVd/l+s dy$I6=F3$?hc+VȁJ14λX# ~ob,xC)R٨/*u&(Zˈwч4!j^rDӗK8L@h1A}uʒe;=X';*)LT}?zVNnceOWۜ*A1v0`Fڔעݎ i瀆_`ɺ~wIboC`J =$o>F( h:<yf7*>s*i+߅j&іUs/҂MAX-B L cL$0ДcGF26f̑.? gAN m"~\@&~%vHUll0Xt*˾]ᘻxPϷg1sae{8S,`A$Aў]{'偯\TvMΤ]5"{A%H}Ix-%eJkN"uR>VB{=c\-2HXlRm߹1,$&HzlD@|'RUܹ \-a!AuK6fC;-$̙Efovhq# />01-M8Y\Ov~ ]Tp ۊZa8zGuh NJN@} XᏇ^'([ؘ>HVvw D2\`ѥGjp]Fo~\5w5^reIe29,mEK1WQA?ظdTR|8J85 ~{9SO 6E˷(D'kdZwH΢D㶠Ci"o<ijt! 8Ҥ2M&W;O-# ~c4&IX?8+C7tP-\Zt.KXi(sBYQg g/P\#v "uwĵ)wygx;ar{# D\P<ʑO?s:\Me+[V]_ə~ߘV`2|hP@jPo= pOd$+,ؠTcEەrSPތ£rc|Qo#ZTj&uOJs02O s !?A#QS_;ڱ '^TT4Tԏ~$9B¢*'++Pc'hUDZJ'L)V._a @$ns *F(L{mс5c6V.-wWwB?_n $!Hؐeˠ;iaK-Upq 1;ȟRpE'=Ƥ RݐjQEnYjlYo9x[&BBE4PivDa[ |Cl#Y^χE"&V5&-~p_#9P CuHvmLM}7/ 0ly҈*! * բ/1oh TzlOON+HO$pqFĴ>3FqV)q%mloG0t=l}#E*AN慵՚&|*<(W+GWxjo}(lod3`+Uwvӑ29M-45pE{>}[6cLHEp@b  By᫲hrϽ t&Qɻ攘~L=frDŒ>~bՆc7{EKw]il$B-rd^MȈ; QEssm.EqSڐC|"4u@uǖ'0*;,b!焢!TQ2\wdWh)A;L}yҾ(7sW?sut ~s(群wz9۟[s?E+e˳'Y';JOPp[U佂~Wܠj^2}wvZs5@f`)yLFqG>fg{,ͥ,Xy2u"goCꝏ 0ٱ*"mA>-Cp[952&X8_!z%,b}mdzQL?M&Ӓre.`ZEO>BG:(XL=x`CQ v_U !N16ZA'3.#W ȋ٪b8v)gUx=fS%W'yQ ޕ]Q==y*lߺr r;~@yZ]>/.R)dOx?O/˼MY!t;`:?;$k@'Q&@9 8v#yR ֥Q|Ŝs.FVd^AjpJkP JHG ≑>Ga`O?1]1DX>$g"+ۿ =2PKy&a_Ns4}><33n'ׁwg ŕVO=[NYJ)G`g$ Y@88f_0nh.lHce.|v \MrC "ÐGCdFZid'.KڌD+:q9pz")ɖn݇KM8M03I{G/jW|g-rJ}9C5%9i(i1C&њZ8lpt(9WNn6G+zM%`I=Á#H}эd6Ps)qVK9==s\zh!wG'$rS .j_az: '2D~͑<OIHoqG5G 3["QH_B#1ۨ Ţޚq0|ڧ Ƹ$Tȓx)ɥ,bN/#P4 J8~fF)L+n-0 hu(;qP?k aag~W%P8p"9*8$5]1v!I +ۊ KFg6Ml|=;O)YTߖw9Ūscmjz샭.jK%J0^&mhl>KjTxexH?]~;V(fp)W,Oz)S90~lVyUԛ@ܹfš=1_+X6`KKTPݗ<΢NLd'HGù_ pTzЬSh7u T|@iUq*vE UpX\`RZ*rlq(m%VFQWMZ[`}JI$!ӿ9~X楒0;! T5 6`VbG||i:E?'+X= !2psI6.Cu>M0/Y95sX.y`2*$μEe.:_ @S'T8Dw<2 K-{M+ibd?EG@iTIٟjZ%' eFYB_[%D\&[bv2 #ta4 G<ڹ c̚Vbz> BR7y+m-KYk1gTf%x'jvMU@H !9K.ʦNIJ7w/4o{Rjjr r "I_j ͣ+N)_S\F<<*—1|x6\z OE3.t ֥Q%,y%J!t"f)+' iiM7S7DyI_k]t@K$شUc3Ƀ}lЄC1md"нb._!0`H 3I:`Jb[; h]lUP. ={ۤ.M:&kS7?"̉q׳ɀ悷ҪwTi-x728(Cϒels}(+?Lh{W>-je#iнq8ʱ&>T֒t8t1>R_egu"b̈~UZVs;tO]A.TnŚQ 1yh~'D}=k}c eKY1t;/簷wlL9JP&Qg:[e:j63XRzǼwwFS+;Z5t8PͣfDdMw!]|SP(p-kJ|C?@$#0^:mx5[3EJ0Ӥ52*jَ6`ž`#l*0__qg}+dȨ4pS}KM~ .SM>byCsmz^98.@4`q$mK.x4K ϡop+=w פ黶 P8*RDbrխuG̼QT~` *B5a=3ҍwba hRff\[އ&wf> &LyB%|`,dOn!g%qac#t^V=/I%[zh2M+&lATIP [@crD(5t~2G7gD{F: xpGE`И9fx4ƢCqC"{`4umN'h]kbde:ըr(E]>.JYI׿H hb5VYiz5A*Y2wض}}0rQG $Ns-WCq B$YJ+\žcs~|>cZݺF(Z6N 7r]\;ySg~e ꄪ\F"!m#DϷo?l|G'޺a켍L]Ebǖxu)HZ|} J{2Yfbd?+8S;?KxD g@.ѾLV8WXDqyK\KKڥ)P3`˘(:TJ/B՜gS&T^3uz]i"݊뒊M@V9mf\0&QJl5t?̪PȓT쓳;(MLx^ RD@;֜yN8PAx ]ƪ\KxDA"'qMCHmwI48:h#ѣc.(;oP|i)[ ,[|5"JJ?Zlԋ\ƈeLoOP\3P7m ?N&0rۄMDK3-˴*w֢dz-Xee>rImԦW$ _[ZMpZPM ) 2LAL*ʕф2NRl>+ 65W.DFݎ#8zͽ |Iqb^rhFؚD;|:u23Ɗ~{#= K 1#i/niC`3|̮X9(=DDHwWC$n _C WD57K>3סEНt7sHϛ. |{H [$2<0?qpq&zy߂S9Rxdj 2%{MMPNe)oƾ9)c8OJ- 7I7_~Z w@j|(O@͐euV.b"ڑKؕQ܈~ s^Cn V#LPg-v >Ӿ,e֗)Bbt9q\YYxozJNa&;S3dJ^=2כ;fY[Qy1};홼 ַ:NSuC \ _b-KJDY؆^.'$ta+`Y'[.?hE,)_6Q Rɛ,r7Q'أaJij[.)MVH|F? 3\ 84+qKoձ_i%hy>F#&k6Zf_~ٓbF;b yaCdCtNkg@^<v[*ÔAɭ͚+:ǯ;ZU/PiŸw':e r.h5W&O <7^`?^n'v9[_7i)<|qxcT{ɷI=0g=VE2nVH%=i1&/;euyd^](K:IZ9"l_ aAIX= ٖG`Gst""!YCvfIhNHhtar;L 9?JzJ^S 30?ZKxlR'rZ74w끼cgtrfA{~_5ic1vbXt?Ռ ARXT$5X-Al˥6'N(ڴ{]Z>h/+ pjQsL SioS)x+s3ym~=bϔZ"SP,S o׾E/ST?!:/7 Ejs0=H(m 4bJ-q7ъUζ=*.&̜.c}D{"xId7CWÅO-%hF^Bםpo4oE`pbeSDxHk[+)D_W˱QP}Nc ֦9OpQ0OtuGϦSIG5lnҾFVAş($e n.?c'h?ui{ibMΛX_t¹EġYMPrmlӻt6_*dru7A{t\T\͙@y;"N& hsZF> Z6cd@غh18{}s4'eX&B?XAvh>308P7`km-5TNe\g2#*Ljկؕg8Reש;|FzF}&s KAF/IgQl(AGπ_08J< ]4^?WN؈h{ty1kiB`o۳(WSOP-Po n. jt}坻tp,/'f[?NICcz)%k.c"ƚC>! lzQ|pwETҶ?Gfy/cWLg> "q2˧'6M*JºG7~OBD ` nE[ یQw%gtgp%͑Dh 5vb0I1 xUԓ5TE\?Ѵ4 0])y)꘧~ ",hzZGv6n\:$j{Sf sRς:d2wAMEa؆/Ùʟ5h[ɭ*X{5f&OQd3pr?%,Vs U^T*qo7ӢF'x Ŝ+ &J| & TVP2E DrqR=:硕%9p`TᴾmkNޛ#Lh^]ާ4xXdmtSLweS}Ѩ I.* u48dSgVg'M)Fy؋/?'daX/[unEo0;aA↷䟆o1/S" ҖB8)ܥQ>fH_Gp#d _$*m5(8>`uV@vRZZX8͹GrSYp^¥K}m$D";lE>N*0K2jB\#:[[x-LFaxf9~G-d{8d@sϖeq艹<2?xD9rw?@;9pjS#\ō\g#T§ @ރGq5˘{s^Xk~j\(/sҴf4hP*"D7bO19ݧ*a+W`4jӛ)svtq-snC}qYm* ֨ q_U}h?-Jr1\<ʐ lZgj{enDoDV9#p?nUIS5OZt(0YcY>@H<D06혴_ >A&W‘ErUcknޚadAh6{-dfN~gO[s7f՝ydcT58:[ߟq^@#hK4Q,$-^N]up&k3Ё [8V5esIep1D9:*JK4{w)@M9fWJn\x>)L~G,[ 1=@w.X,<[yggV{3T< J i@M|>~AMQ,kx}Ug|3Qv]rdb~1?3Ŷe?3b_lhNiOGa =2U L9+,񮨦4qmH{\(/# ށ՞ }k+aR4"ȠU7mUZɄ$ߕq9 ‰"@Qy\uG -sMW/R,+-Ԃ~Tte∽Hf; QS E/k2C r #zt"Z*h<\d(;(+VAmd\\-ĀTf2@ʅoScѫ76vkvgl3J3('s{Wȴ`0ng8pOB3YMd-r]Hg>j܌pj!rtXQ:DD҇Hhxߜ]"A=#7VQc[TI |ߜZb̗Bgrׁٰ7$챓FIk:yE2اk"8 \)e (ATΊN[8Yj+E^U">EN"=AsFT50еSˎ -c:ÿjwl+n/Zz͇|htlnvOs|헖*3uIfuOb,+BH#,Nc21>9UeULh &I0˟2j,>L=\ڠ8TU  if!PdLNqٷ(hl=nv.3POÛ /|o3iB+ [^.,c_FQKzՎbτ|0r9 1Mh0p} 7ļ3kľg2 IS@ڄAeIaKjL𶱣S /d>5lꢘ-/45)r!{7UCtX29؎>&0ƿd 37=zypXĹ,P"7ڇ&`M$--C\7ԫ#ZT`v9lA8W8{v>2$sUWh\ oL+L\:{µH҅ȘkbiU|B7ΊΩ 4!_=dqv J.s$X|gRTw-`rfKYyxP &s:O9'j]Y[#\vs-~6(~e3#]/hU99{=O)EY!ni:;&\L-oY S =1+|9(vroڭl09oprb5o"'ӮìgfQu /{Xeh(5#QUR6޾6(^Ƌ.q@BC9KZ$fƉ.5q Ոm.G7c2J٘"4x;rL7bIQH5:! /a׽]ŀnֻ:7Sn{.ecqȃe`-Vʻ?;A#vmWXjs-Z {cr9At]&D>ۈ1r#qުח=vI.%E?ÀɆj´Zh4%u>!, 3=,)*=:>xs)NYzh} { `{2bl*r X+}jEWok25C#ԍm=DZGar݇&HZؓn'aRA[ |Y QxXGۗ@bbA7fI 4MmY=0<dԳd(/ '@I}AQ=Xy|Ul {~+;W#Y #ZujNʪf̟leY8IK͉u MhQLD c āsD JS0:U|'{o hj[n뱊t]H!-l8O @Z8]= -i\ Bwt>!\:Ύ٦ypߟ4T^JPnC%k[N0{*>)ϝ@2օ]ۨH}-sE%9rtB2 +kդb#N<<@ael޼lB3PuWwvܻ0-\ P40i'~)!+sS6=W3%`4͡L~{r*vi GK|._@G5k`l9mpTW3zy(]0̓lCAn "l]{}*]3 >zhJaVٖ(@S߆mlԤ1.9>`ɨyx gUr+g3]t&45TIޙ-m=Asj/!9^Ph&b9X`H#Q؃dDrfY|_9];fĞy:%ҿ*Vh\Qw4lT Y7 E#">HpOi kL0h8gqcIXj`bb Ul}(ܜw >/|k*F+V3{rfTz?B>r\qK?Bc r|Ǎ 7&Wwl(C3o+}iL8dW)eۇԷ/[v|g?nD/Uh)菬*Ĭf_,! 9rQNl1=&9+ "\"cJ rv7'hgI-Hi:FRx|Vco/vXδHU_\B2C7vjP`Gd81WKCB؅KI dtdx)|w>.V΋ppy`<Ŭ'W^9[{*V9(d-+,FA90 ''^)*[yQ%(N_hh>?{M{N] s9儲|-K30"إ(kdrcćgXh(Ӹp:ks>UI) CcqGäLkʶO2,u6$X^p(l&!(VJK6Ȁ4VqO;/x Pu5R'RòShᝨ t,ջk-ϑJʐYr鰭' qtE9C< s>ݼ6]U٨0j{͜ _QPT(;kC[|}`lH!Q |,(f[߰jBS7Ė$2- 8O mL_k 8yVyO89yD-ӱ2O*;zݧujI#]В?{?9gvhmi>(dK"CxƐu(:x"|tSmw8E#-(A16ڜz Y:X7kkf`P] hgfzڬ%EY+҉#hH΅%P>JS+:@h_ɷJ}@#ڷd]t`E[BU]kA oUD@qfZ Xi;Q)(h?O]FML8?ū6v09HXL(i6Y+aV~ؾw_ NJ\Ճb1`86&IJ`=lIfIAڢn"MJÜJPﮏeϊ/ՀoUDDv\miow0pb*V?<(aV-0PN 50a墨b4Uy ,4c\mcG.Zw z5I "k% v`9ݡ:ma{YbxїChp &Ǭt%8B `~;7Sؒ\ Lғv'] 2\kC6dԀggw8Vq6*q Iޮbgm-4~\2&05A%%$2&XgNsl MjnqT;0y.ҽͦ ]VG /m[ a"iywְGq1uհ:ZErDX]\C"8_au>r% \ dm #>lO+: BbƏh|G xb5_N . QU4SҀ^(g,U[ 9/-\i!;\>yh\TmTVȈ+KkN}c"BC_J9~I"2B "c(Yba:^ɿ&gf׺[JA+ 㡲t[B׽ZhGuK]Fe8.>n[lOޟ.42ɦ$ H-2O3ɸja1Mb0ؽJ[A*p@[SeER2㝈':˛No YqH0ȵ().obtK^gC1 {u*p sx ЦUj%(SiWXn3;pu\Է %m^%o3"Il45Ҽ^}3xv>O0Vz}%kۯIE`BTdIEM~ǣ8 QB3{lnp@[_|>8Rޜo78 ֪ZD^- }eZB RAfҐnfcsre|YDbu2-'#YqI| qdydDJk Wdxǧ\]@?j;=cq $$ b~ܧ'6ʻ Eb 58 MK3̑XZ=31WT927+t~lqΥV]/5xZä` (a/5 :g܈. (𫶛` HM$ggv梁9R{Ϛ"LK' -xpOQC/'Ys'KưNNdHs%DteUNĊ˥$GVz_HRcJߵ܆=,A|z/D/]B2Pt_d=%(v~Uk͙{ȐSF $'fR晭Zۛb0yDVϭD=>8j6?)/qW0N ;k ⦪EԦMAJȴ8BM F mefBs׶Z1#5O8ysYX|F8F  *9ÛqsU׸:g]KTbA|gs 9CX2W6M[?~ uovJk9)>,d?B~u(P<*^}ٱlGe׎gβit=N5Zpnìc*u9} Wp[x-J3WS'"{uԌ‚K놪F ! j~fq%>%ҊqwwEUTjTPHF&ZhdeeIf`=cM]˛ U~RQ vr5!^!ƭiO3ne)QQ-B^Sz•Ӳ_5֊4:Pܐ>oǯN m3QBi_2jL-ց-[k+w3w`ΘL1n#$p ݈>F9W/`YB̕85%gS2O Sef1%|9| =]F=a:ąa fW&d79 RIL v\P%T/ȑ觲W!BXwgy$V%ބx|ƹzGh%}jrM+i&76SvgOG ULq,$FBralpCR7AriR (XUʓuYN!-9-h[{ש#`zI ß،w> NaX&YF| ೨jANM6G M?^,VCTP~0V26[(PsȆro4(Cδ/C8a ~h].; ۙުͧjĠT_Rkf@by1ؐسryX R2O3ZNɡR3Vcd+ 8r,IO ƛ`~ V>;fFTbz}ߗ1*GsHp T.9g(mαsANn t=C v Bw|ce+D;Namp~\2V#獎AMӜXtg/~í},' V)_ "KyD875SXqWB*WrQdͅ#g]}9YAi.[h_RrBvdLΣ1=a+b}bg4UQJR 6^:9xaj[6n_RxG͝ɎZW Drvw'&5F XlAA'SFǝ;K@!Y A[;1\ǜ dzig$A !#-&r=.l6WK<6VWL߿/5mh*=RΠ&ySMHm*OxH~ wsӗ!EM+mz`cV $X.ɠq0F+I,:zolu^3ofg~ ]\g;]_l)^,1VD)AU„^^ V"75E<^jOcG81LZ2L2kjʆ[u7:e64? hj ޗd։1…apڈGZ?3ZPwLC{T8S>: _VV~niwkuLex!C4: CgC@|)c2"KȍOcFsfL?;L1Ä2ʲ-2h/fʚ_f[D℩P>-EΏ 1A Cmns hGGDͭPH]Y$;AFV`HWIu:e"bM; va}PH0sQɚJ+'TO@ ushنc pcU'fefn#3fChΞ{*WrkEno=NiqIɯ?$#qK῟]\CQfG pgQ;PbtH@6jy:'ZLI xL{Hu_ߧ$_Qv'DҞkgazz3'@cAm9WRKr5(LDdX v]!`@wPlm-8@XAz.=?$M%B82ͽsj˓vtHX <Ԡ΅ŏ&Yyfgy@5÷uTQ'1cIOV`$'r |lExD5i(N+^׏$~s/0 _vf&XT Ka+͔YTDN@몑L㐿L C-}kT+AELRP2)W O,#O9نETlOkBa( ŕze ;nD{bYGuö:v{hLi#[c!ZSI,k[xQԼHoɡ|DlvҤqHkځ:#+Rbz̙+.p+TȬb}ie-FyNwj6bY-Ok }J_6:"l\lK~ՓDZSԛUYּp""1Ax0Y6ZΌO_sqB4tt!;Lp ꗿV87~s}U,97NDs҄0ϣZԖMcI{5caoo4̧B d /b9ME]s{Þ|G2SD~^!bTGXofw@] *dPאk?խȸFm)R62kz^8#C9{i| H".)aEkdIUDR&rZyLvۼ@Hk,1(9%Zz7n,6<'*SQl5Wޒ/g;-=_eÀn?]Nndl-<{/*4rsdЎw35uWd"1+=!n6f;BM!y*;3_VZiv| )!IN$P3s9SH#8G T(N8_Rk= =B *RVJD@skG&/ǛIa ݌֬ DpVx[B8"΍x6RbUZq\’'m5<~'/j|Ȉv)/RUH R~B2nغl#jij(S| nXPW𑽇2qȹ"wa;xhک8X cَIrռ֟{*ʥfXGn)6DqQ&[d4]2"eT)6S6<:J7jF~=3} 6=taa5(?+ƀ"UkIp ݷNq5Y7ٹ;UݹL9@:0u@z>txuunQ7O/ޞPRI!a:d(?9f?*wr;6/w| n Y>Bm8keZ DC/~<3SOø+X@BYr3ےb*mK!ia.xWҚ 9&/Ci?1yQz10 z?fNgV p[#@R#oͪNW(S SBȦ =X>JjfH9iV+b !9']/1IЦf0{jp#Lm9zmUܠ(~xW~+/`?p\JUyKħ J7FVPA|"NLR69U4mlViqWƹV)",'N].PlFB؛/ۙK4u~"Xil*p5-cK&-{=4 7X%),7paHcw;t*"2Z\p j{+d(`^ɪ:L`u{8M|fQ#T%B,ٍS!-)QgG9 p؃.e)6-jۦl1oؿvzHl0lu]Z ~7bK}?G{I;/"0o3 2V.Wz)l>`W"v)>0rukHۦe\P܋&"jG6b`#trMF4:XKܕ}6NhtGOqL5uv+besf,W%{$=0&.x{q$IX|ke asGA#Y9y\]VU/,aL&pÊQruP#Yl-_A۰Z?ִ+MH-Z9㎊hPiab' ,2`5 hm!7֩~ JQůq8),BuS}yۑ7q0 Idؑ)kTwGlЈմ,]!RgY}XӾ9ꔥP 0Mvd-܄Q}fNb8[ MQX&1}I8w=Î]Ư8WpcX0ZmHGPFs8NYOyhQ*YIفov $$L =t\N@`5Eo.[B;h ;OrefTmb?`ԌvbgpC"uSdnF0ޫrMS=,`٘.^uVV-&t|f)T.25>BLS75CUވ54eƧbď9ÏBIGFlHm>e* ڨ ]\?)] 0.[~Lga#igfƁiX9  !:5pS4˝ջ$(,vF1x"r (4͓~, s=$y1k 6w: x0O\a 2/ >$yuL76K#0}wR.sSUsUmh.fL&RJs(s̹tC{YAe/5g%{C ~/ǎ<1+2253CY3}x M_hG]ĎݙK 9|FmDĝd.}U~ϝ${r/OIӡB_3$O sE'Qά?G GWǻ}ұʫh$oae"= p:3t0@Jvv L'H潲E >aLR= 姖aC}A}O-)M x\Kxw;%%zGt&&UgkZ3r H]qg'5n^q}r8D6x+I8ZK 02pDz'\̓eiUkC66Zݭ;E7YN6(<32 rpQU\>TԘ y;fcb0\Si ^0Ⱥ$.[*) 6M ìTo0~&oCJ),T|%808::nHc#غb5/ڥ#(@6vK襲51j(gD2 . *ݥ3 B^d?G^0R )(zˤR ں ?B8L= %(!\(}D&峭0N G6ǝVa)nmx~V/m[NOpK᱉݀ fg_Z. 1龻@T(-VN™ɴR'˕Id."Y~_ Y^ X y LjBM'wU7G8k2Vj: ޛSC-Tw3[yFd͕b&F*U֗g hh(|DKIQNI{Cmt C Z|}V S-k}̴u\vT1xp?r%J;lo^>wu[)r[0ViYlVoe&buD ʏ@(~ @=Ay[\ !kT7쫖ysl(\8x {6{oKQҐ,:À0Hnp[G,ѧΑ A߭ &=XjLa\<¯T>fqoG/_5#M‹І'(˹{E/}%Nc_ٿlK/-X(;r?@jӗ2dzC"$YK!6ADž8k0O'ux  iáz7hD83IM_6'(0 V̿ʸe*Ef *2сnb/PۿaF!Ey[f7jyG.E\|\Q5^ϼ!}+9@ܒ ;eBIOP<-BD$ NGPz76B 7 m\A)eRUb 4yNtq g)* BE4sѡi쟘_V ?uX,qXwԬYUhG VcBGPf4Zjdӑ|5n-q. jCM.Z#^%N zᆊϜmZjlar4&dXΧ]oOU_}خpYLhq;B:.Oc$3.c΁Uhkn2ӯ4g.#d_/.v&o{=YŭZё ݦeNIX 6zi PC(_(oѻ @cq_HHhѸѱoADͣNfeefߑ{#&;{Û߿}(6 ':i=B­2uδjě g\ǯX{t\Uua5ҰYd; B7D◿qRLcW}^,P.hAn(!*f`g`U,Syه5"NMHub<q}5 땜PXƇ,=$b<_c@ ]Vl:b~tSH" o;\!`4xlZ?vӀRD [ :ltם dj[c0}7ڕ5#GF c/H !MҊkU};H?' G$S,YxV$A@GZ='#$k4X:*er:^//}z(_8>Ns DjX$d7l\ѵűvCt 2BEbrꋻ@ <X<_j7J4"0˕Æ`h|Sꙅ-\r'-q(L?(-3WX=f7u{jDR}1H9rF 1m_Hf/ɔ5D f?0Gg.BW^9n736,r0[ N)sVf/3c #Ji"IhVy~\ j}5c/ ۬ל"z^4!r/e]Vfh_&r-C^k?u${(u]&`&G2n Iω ls] &e&_ƺ2+bqSpxjKz{㼑-+-)Kp/S%̾+*@~E9;|ʼ3rOzЂ^zGyvް|v l^D/q=04~W#0>w*K}j*m>Gj(['T?G^ _:KxV7~>|7Ό-ur|a]SMB30rxWl> @Y^ruo 8bwiWk<+*JO2:ܷ1.$xe,64 'c\K0TA,H5m"ՎY /)5"ċR**q8 :}$@@?XdFqg% ^Lj\6%UOСQ'ΡFo⑗zͅTpErlE32/oFٌ5WwHo!'QXD]Bv?| $_xYJܩ[B̛ iMwVHg+°rr+9O֑Ynߧ~ "Zd-NEyIRĪdѨO3]*te_uR:N1 &xjY-Ǻ> GNxG AI 6H2vkarV{wg*0Ci,dR/☡[c0B0 n&Qgeٞ2*!EA1Ѿ38ΣwhPxc3jZrtQvyv}  c|MYSw,L Ҫ# Åds:9ϨsUnawJhKu];C;3*H~eMbw3 yKb Du6lӐCDv>4SM[L *\{/jzE:Bj۝l$EBXfx-x nI) =bsj9wNGfBl-IK/-yd; v`y6kjq $mqqhϦts@pPg2wֺ# ?HMQŐ4_ k=qv] g? +=JVG̀JdzԒ 5C k`vfBmmn`"ү5##M i"F{|guJm''$ c w"L@UNz.%[>6mt!0 xzs#4 ִtH5ϥ1J 5DWI6kusvmEU/d\YBW!5Cى;|)vLk6wvF%㟽КqtD7l@ǩt#΄_R1zD uu}^oke&͂2v9? 4R՝RDS&_EuůlĢj[6b/NkC)W3yl+!Mq{INE*ހ /%Lkq/cRsM$j XÚzk立sBשPw#:Rb5'8R Zd ŃZf n"KU vm(铳q0M%|D"٢zYKdH}zIWF]\72,cUר{^*xf.հIsՍ2;cx^}EeT1MMkw u6U`CSj;.йy>‘8򤩸0% QcEEnh>Z(='*nIz к'srwpHE, i9pwϑb1!qхQsV' v瞌L9}f-z8\⁒طXC@- "Xt KJQ,a)]O} 7 4Z/FY5Ēav9$˰pvz$ >VngЙ!\g^<?+bBS` ަuK#>_p:=?= }ŨSyv;S9?AYۦK=l'p@_UF;%sKP(Gb$(ؑ$TϞ7,F 8d D,d"~qΨ/cd*>{ %aM2=KB.x%CSE%R;- +.b;:2HΡ.Z+DN IW9D &3  9q@'Kg$7nIeuҖ:~UQh=^>b)vnZd'hH*vF]Ȩ.ל)r(:4jhm!StOfpLeq#=@ŀ'>h"@veWpw&_~QA*F?\'.,$?+QO,2=sY2_eҞ.wХ^!6z&ֶn>mowsM: (2{:?3]¥vP4}ݜhМ>֓|E7.5lSv;3.%74剖!e%q?D0gΝJ.tC$2rD Uo\U2KOn^H_6BP ≭*ݗr9vô1r џOVOkla=;Im8;F֬.L/t^qјע&, JzՏ t!.8TC!@?ܛ8CZSctN@,] Jv w^$S'yݽD  'eZ`g f> Sw䞿!ǰ=QV`2Uqeͺ&SeI}-:|9Uk)%&!˗_q5C mC"D0X9#Os8Qg\ďi'3D D,K3۷1[q}C"7ib$A {^X ΔuEB7+1ăBƣYWRRo"KH~V`|!Vo4YHJѱ48G6:7=簯0wg.}H:'W|G9B h#*0mCs3I˲:ȏjSbɘUn]m5A&[X.!ʺ&L\ b4Q~#.ΨhvJ܊sxH`;Xјrq40p^J; QtL432GB7GML73D=#xH3Y±rA}]gېβnܤ홳ʋKhk"~E$?!wz 2]g><&(fH|+C=_xZW {O[&+l3^LB ti|=`T0-=\Q;}\٣au3IU-1Q\t<|CyOh^7xyJ'Nnu:R~yAn`S5 ]%S W&G<ߥ[N5r0NvD?HC&\H?ΠEЏI eH?1q#ll[nsuRѬ;v!V"c*Ka܅&n۝;5*AH|3sJc$`T6-DGW˞^hTryR/`UGX5N a _.6i!(( y#_hXZ=[V]}^UuJ1n}3uR~>WJt<' J`؀($Ӏ*AJ&7(!2 ^*ͯsJ~nV ۮ//8xk"ؘ{J`ኧ8]x3e۩-D<4&7@Y-|;CWUv-J!5xS4A҉=NHGj_cg:;S"JQ0:ZƯ`&%*lsT}D}NRƮnWc,`m9{'azn݈e8o7HFս}jf2iJP0oY5SY8jCHMB~F-[yQ>Жΰ /+[A<Q8lFRd*¹){JVpZC˚阠?ԣ-|zM_&If-Ӂ<&1 JpYFapDk:Q`X:S26":DW5(@bQcvA٬86:+E4M(vѿsGebw;ouW{:UX?Mes&DܜÌo@]!56sj䛟"EkiseK@s)BXtoS/h[uUQUP@4{t =·ȑZ]&G؟gP`[&B#m|U9:da `]!z(1hj 2ZA1ىA 8BѠ|M:+4R Q&ZuK +Rφ%gӏ_Vbso voP;Az881Gk!m SC\-흱hA4ݬZk옄!>-#y`~w O Љ^{fDly/?UK+֓՜]7Ohguꑈg) S)bI~}h,Anw΅>DI (Q!#0$aUġD6zjLo=N!EU#uK4䖪,T} v3_L+%R$R5 eoR9yd:p;*0DXxAE{Bo"gZֵ}}W r&!/~ bZWx0H=gpk0_8VIL嘪NWRHG>#w4.{p=?Z%ST.3⟩ANMf)MkІHSiajͻ ba ˤREx`KADtfC,3CUܹ_HO݉`zuJ?8*~ͨ$i|wU< WwL#&U0"$a@NULYs3@1%HGm#hlboLg=]No%8!ǘص!N7rdM-HnkCoz5Yiؐc 3cx:A[dpvB!< zJɛɶ9<L Mp,GKk;/AOd8b>4J0\E%/|{/P#ÔU?Z0ǎ ~!x9WE)UA¤zgK@["b(pWPOzPachD}19g?EdI%xWgkd&@ڛ6&3tK(7U1 fAL}v_i:q~( sh.$X!vgdw4Θi)%,(ffЦ 5`]HOYj\R*$DփX]EcsY j0v]WJ)ժOր|WaAl)TӘJl5WöZx7I5MWP }L6nxRue]FH~o["RK)6-zz~aY*(l=&ND ANԆgKBٺ?S\U]ig0[2 pz^I: g% #y&zΑ"<4!#ՙxGbj@O1Mp\) &iˇ\&&´VT\hHWؙ#: ®m_SYv I&2QOҞmH|Ϟl3n*Y`j˝ÈZk_t(E5TnǪPA"e$KDTB̊eW'JEߚ{ Q*S9"䃴^͟H~238O#lzcY!PY\52@0Q5lh8? ֆNa)oU䯏(wI([_BboHE@H+0^ZZ Tzds'\£p~ Č$[0?!rv+3 s tѴ'3I}Lf R r(tj-/ĝt%le`:yuDWk_-imcf 0{Mdy.T͟x,36DL!v+^[We|+j*N8*BorH avHF;E8Y WYRL9s(x5xtD:`H-ES^Y '`.P91ɮiEnp<>-.&YɌӚGۻLch+Iৱ+Y$O64|!/ыigqv2niɟO|ɟo3#$g!:*] Uc\|<,&&)%%j5CZɓ{;,8dXE/+39呶_Y)hF: au "OhgQB$M0\d+qpx*K5$^ gA}l[4föFP!D2%ŒGȩi90~PTK7(ܚfh5V$ l³@ ¬8qF jse׫LGi^&?"BŔrka>> a0Ewf7-M{kn^;qIi`>uOc$ₗyQ;;6P=an|8-Ӟ;8,-{CQUoy=glPXZx)sb F܋:>V5zFrDC, ,nzC8M<^uAȷ}1؃v(`zSa*]<glK>zJ>l ȽqOML A}K6ƶyniZ9R*[ ^6x2( !ȵϰZNEbUE:mA(evStt$Rn^ F=[V%,}/ahXN !ٮl=MRe 90?d1zfExF/)YD@DP 5˹MY s;9Arpp+: eזk؆S"O_ *4@%cnGlzLD+QNt5/fJ5g0H($StAor _!Q9Z¨`3eBDÃJiI3/}ݝxfY/ErӤ1_nʩSϴ h|w*"v{pbMk9ҜO1{܍ σ,CLvygK;s<#PR?/TRx. `6cu;*(SMoSgg34Pۮ="P%Bl<@ |ܖaE T$/6p,5|| {ܴ[7Xf,/w`̜U  @+Eui ӚNtfD.ray?UqBR<4&~:r 4_)r_$[y_∦y=wЦȉ$f="(S)8e) їHwس "HmI9d]~ubKvݑ!1jQ0ד.} ~1] CZ?H8NZڡYiX4ɍ44fܟ}bmy+ݡ?Y!y]լH6iWp\o垭vG%}}D%1o#@*:,֣DL^ՆN3$ ?(Zp#-0zA;,1?p맫hOjs0F-[oBSbb2:r_~?9M1,zWubTb1EijaUO\ ӬwE; Z5 I Gs>n~ S>(JX\`пM1S>zףﯩ9YwRMtIjx{]P*qUk"i>>-[]!{V5j`Mݘ$s?,YԎ''pyR%Ke$ M0aW*6+ m 7yoK\H;KY3A׍f<d~KTge.dnY/[@֌(g݉Bh/. uOBE f&If1jnayZa4R}1 jo1hsA4]yC@ETg΀drG"8Ef*KXW+m =EΡ,tKZ)sޚ:{۷`hehk[jjdeb#mߧiM|lEeO ?a{K*W=kB's~Fe)-a'K~VԽzޕ P XxE MkS 5]6h$9Ф7Fr#ojF7QNM3dCTd f#x z'Q[ XbwfM}-!)_ܐ&1$``_DZo~ 桊p]ɧ9㓵k|='{}mfjրUT:ЯN#=Rնe ȫ 執vo|b s di nT QfW-sd Po/,z5$/W;uc<l[D 9fM7)>_K_يo+B)l@OL}^PU6!c:rgj8I#pFqQV'Q4.0 V[b>)h^BR-Vݚ&Q6x! _Ox{k |RxoNiu<=j6`-Â#Q j^R"th{%p zZahR!V/,vC&<GOH|"`J4s dyMrDoj쌅J=QGhy/P>^^| W˪:{>Bم1c.[l_,DBH選R50ƾk4%Cc{EX"aP3?,rޙ3&l b) c'Mg}e|BZ_EJ1+\q/ZTK Q";%AFʦv׫z}#B/nE]/)S0,ֻOUg}[O,4S‹TWsՕ/tha*^XMYsY:O;C̄RN ; }NV٤ [‘3+4-G]x{om؄g =xq/Y %@똻^bBkeejkS "YɚcwQ ~aWYv WD%ĉTK܎/=A?`!ႿweX0W+ׅ5n:8khQ9ڨyL.zRTrXzw{zdy>C~cDG%9hvՐl%B8g/S27;`W# Y@K&2S/e&C׳H@l1ub#w>`ǘmi7P(Y tx^Ɨ{KhFPLD`\"dg[D1LP.L4%ţBWa`795%ESH4BۺYd6Sh^9aZ 6CsٷvIv'+U `՛& XĬVмZ E&[w~(k{J >%dgK/,hĤK߉jc]$T$͍` (X{lv~rbja3^7%`JōlSF{q=3_7긿Qo}hТQNH:-lDF!=NPF7nGM~SM{ϿRz*gnIBEOGoOqY~XU]آx h}tӡjؗ@A?„_c|gW_Gnr<X=N\͡qo&myDxMKE K_;jFG}dswK%BhL\:q9.{Qd)y/C"oeNy?ʺ>2!;7goNRL !B/Zj ]?o[{?k{?-_Ayˮ$WCy [́`3;PԲZK-pݚǟ:$4~< $ӽoEO[A>h#Nv[}}`,Ȅ}Gs0.xr0/IEÌRޕ@;qv4N(tF"ٖ0= !(FߦKFebVxLcx&0lQ]&H,i,oQ9a5ө}g?ȹ^'pWkEa)&* c?ɛ~ Ny8!0/Ňg-v d] ?͟2m޴ⶾS>Y R$]+M v˯˦jGR&e H2d=ּaմ]v/(zj(v.ՖkV{4I@1L XU8|e\b+߷*UٻN?=>azm/p5[P|R*vQ&n<%Hm3`X9^aLnoy\_2ڙ37|R6\1rRq 4eS԰.~U3ot4}AD؅AZ -=m+ZH^Rgܟ描$Po3 p#ЂxN/1S-Kƌͨc+Ns+=sop!` AUq2)Ji?)R}/}oZ!m1uj%qmp)~?OJlp'S [sKloo1}e%ޭ/OyaUGc]hV#JUP76HV7[clpվ6%رQ pXeUVCUOEgNQq62np2wMf v$U\{tFpd'Sj8v'6M|&A;?Ԝ| ވ I)\1~ e"MByeYZĝ~f?}#M#ĨոVq|l{KWO,Uv@StYBXҊȖ~^" H32WhI|=T3wMMr`4ցʑtH gI?eM&mÄ닽సyx<ʛ*L_%<~^d"'<7IΡ~|p jON> }SEe=Dv9@邩/KCWO} Ѕ8zb8h +xctFFZrme_wRhN}64{Aw`9ypL;@͢ȑ:0c{о~ѻ~~Vog~q^!,e{v}k&)9>5[";]k~c=velG'Kp7[0^^w[xVZ˦󓖻]r}c޷Uyw^m)ز<\x+U`/;tv2Vrk-v7պݻ%kXH g/| Vsaem7Ea&wҿEb-Rϲf(>!]m˦Qv%JUX5妶*KT$xOpպ\5M9i`yl {o> ZPF.X}k~Ţ?h^_AbGfC=PtD3|| ^D77!`?0O+O%%PiIu߿Ov(yƯ);YNъ{Ϳ;}yϪ#]JSoaM?vܓo_C竘_^:KX0``\_mrhˢ|XtZ- CK62x8j+Ecm~FP&-&t-#~sHor9e"ܲCw2^ϛ~^%WySu`cgXǾ6} '>(X>cfgXACO`oi)JtJ FF@U5t>? hG+4 dpsr̾k8DDSjBG|sNY/ ]]?xDeiDXwHc~wY Io{Pd vNQaJgt5۞{"E%!.n jˌ+?wh{K&R:$^ 7^?$>6jZT°X({[>OάcuҎ&f~͙+;*GTm*;[/77̹c ֭xr ZjJyLCY*|Qp)7|^$"=4h3Wu©sDsUVQUSKpމ>3-նUȂ7j( k(Ϭ[ mk/J~{:kRFh1Ctsd_,7deu~ ?캏p= EFnagƾւ2Ih?xq?'0;zQ! }-;C[}|MK^oQ:}`7X/؜&/[F\B囿_1ƊPK7epn[Aȫs~,f^Pu:֌,τ$q9y<50lYZ;_w|/׏CDyr\pv}*$jKMєC9컆1ű1ou2@8m~FF>j#.cDy-4?AVRǯX]^qb^.E3 XA ʘ`@vEf89>~jc-#΅HF'+,޷]9lDzwTm3iQ'(NV:QDtV+~èTL)xQ:mu}:_C G,AoA3nTW{we0RqqA0,j"~~L6(/z6aծ@\˳n-# jLr@x3N'S{g߉JN*u06" edH2"Ui⯕=斣U6{~T |fhg#e7G/7 x&n&:Qf qOB6ZAfkf07?^3]4Q.E6 'tc9bcp佺|o L:θ3R[Jz =N3*y1іU};eE?|-.vP6xn_y=SSʵRa' }3ln;.&y*OE~}mβ2 X򱔶OU@T|><+S@`=~z̕dKP.5 ?܋y9--{2 8zj"7rG?栂wQI{?_K-^cm{e3'> t4KXa?$ü^WY}_|wo5،>ӫ;X=kxuX^ֻao$aN1lB!ffgaI>m۲@mnFX6`BY,OSkdcD9I1Z>5;yFv_' $>TG7| -xq4[E/[UO.i0GmȧH>UMޮNXptbhzbJFb*>:[%ԥ| .K*}r5w^ݭJ`~e,]7L 36a)f H uU"7?Gt^IB,AA QXE]@ށQC>'??v*  T??/ᬠ("4&GOWpj)b\ KǍ8esYx%5amr}9) o+q/{[^=v7N7Ռ9%~c>Ӟ7-s/߃&`׭uRa}O8s_]=hs8-y}f^i汩?8j~ҏiJ{C3o;}̲1ͤo8>$Vai+o4Z?c#>}{*`kGxy?TY[O!_4r|:_-PdZNB[Qb!y0D @ EG/`A:tbƀ ?*f-A3 avҀ igݠ :4Ms-qy-̗4^,K;._e3+oj9I 3Uޯ}ǫ02;1?CGkpݺ͘V~ߞ;mSg<{/[zS1 sAH4Ae`VYX,r muq4iut"ŘAjL$(wT&bCHT1 Jff-b(cbo̅6e"ÆTxĕ`.JjʆHM0r XB5 ܴ {Xs-ſd;'rSQo♖m{8,uSz切/Q29۱]RM[t{}gw_+=:<̷L^)~d="iN4A1ZI4D2>Dj0/~O_WD""*( l"#8H@C݀#ġAҨ*P[7 0D+Ѩ!2>D^cs^{vE]P4ܼ?W۟Z5}}N%z{K1s;Z|$?zU !пvYY%U3k4'~z: B@ퟙnV7KJ&Ƿ~.^rr0(:]uP7.Jy׍cKû!|hQJ#ɄDCk"3 R#Fej)ej_Uݽ9o c](kxUu+0W}#_je5R9oZ^NVZk S>+ģ4)EJoOadE%GZUXzoWs-Q[WnuObB4z#ŕ{10!_ʿ5]'aYvQ]x|衫 PD2@ '6 QC@P (;yrēH!oHv`S,/Pȷ]IPq?PP7A`2)JDCҷX_?{KϾV-={z7)jDx(>541*Q%¸@z(W ,AsKȡƾnAd61BÀ] X?|}WM(# :IRHT- ,Q T:!QEO Dx X}!48!l%au&L/Z#jAn'|3 DeCJcK}8"?ȟс>MjBOxD[]m?xnp8az~:Wuh@QFP6? !RC]\nswV<3mQd aD ٥hOx]q +Kcn.ܞm^]>WW.B ܡ%& 7 FKw׉$~!0eݹM1cgo^'E)"Z7-T v*E`8fk$TAE}z?DeJI>e?e+foѵNo;Kl.RYAs6czЈD׿r@y0Qgd3z' pk_i$Cs 0&ENBET H/$iHf!t<յsɒ\ը@U5(HwS[65i) pʙf'woS~:ؿW<;|M=`7žkW8˺5wE_Կ|̖$#yRB5PݢF*5,ZYǭg>H ^eB\PŽxԋ*"0q+!UZj3-畤4@FHũ+iY+m!2BK)L2BSqDu=g 6MWo g; D[z>E"er8뿳;UXw52cRjã0|]q'b4ΥBAa(y.FZڨDcjE"E<$GArg -'Zت %F#%6l^: _Y,oz#,4;h֚4Gdx[Ļ(ix(ozkqwBUeVGN11~D.GaW5'ۭ/p.=5krдʔG=^*Na6 :|ƫw=ŲvԌ,G }w.,Apm*!BEOZ^_ɧm?zj\,?hs\."5]f]ɗ+_T~srex8.U ʇF۞4skVu[dh&Icd7 {kڶqHkDj5X`1lwӜD}~F`uJ0|+~NDW57Zr%;;nd[LF_3uqf+ sܢKxM5O&F=E+->Zc'zn1Bh PU*PHE}%#TA+>fR (d3Vr*'.KHE6`V݄3v7T+@%*CPyd w[0B ,} [(uT`|H }~QG:e[kx pc]ﱨ"(zôȻP2܌d^)T8=LPr}nPF}ܕ&n@=kiDEeNMb2zO$+#qP@ iπâu٫F 1$%yLV* ݻzר{XK{xԬtHcX̎ %XH@Dzl(ԩ_Zhw*m A|YoƁ%վ}k5Gj';ʎӝ}ZbɄĝɩ\C3=dIO_gcnn:9F6+Gŵt{Hr}zZ-&[p :~פ5EJQ@s" b(-Y8ϡ%Ȁ>mNםV~o򇘉]Fo>񎧻=(DA"e:bQ pz(Px qS'Er` ." < W =Enzshv;6l:\a?/_|4ZaBD5J>Rcݏ6l!4GjFvWY~77 .3eJ)vdvuo|lmr3cx/pϗD9W|NOb n}y 4Ǝh4~-dm}nwΫ4ko\> ӺN ͻgS;_;/1l|޴=_3k0v$lwE)~D@=D;GJf$% QT J<3ø|G.WBCt"/q21-q2L96l jL4~vQTJQP.Z#Nhm~Ȳ;aO6ʿsL-~DU|ȭTT6g3)@0ECq AE ~q PC0M0kw: .Cfd^l!|Z#p O^" M*ۿDDQTL ȀR".b:1 EB V&o~qӃz]~m:p< M`%s{>0xWb1t ($YQr%5 H M&_T1[9W,9<^`|5\Cq̬)*\d={O_/sb"uQjfK-< z܍VNCã66 Ƚ-3aUT+*fW'4 5%Gu=AjoLB #%)X`E"z8( x4bi[;7m{, poAR^'I.U[r7WF[Sej灥{mJ.1\hPQ*" h{ Q<6YaiH nh ֬:*9MnS;mhnT"@ZvpAt&SҊq> BPT9}8!*wʠD} wyN£?8'wx°( S?mvDپ{=oFD]N"q<{Fٸ]z$Y-s+z-H"ho($sQЎgCdyAki s7c;7 w2r> @}(Y B4>UDd8~b!-kH"}m㙤8,A&%ځ`y*$E95* jq:XJURX:-&y>C#fNH1rSOw?"xQt7S*K 4 6b}˩RAJPmu +ߩw8ٯVzS )Ѝ""R?.r" B(.^@G;R?ܥC$v:&a'#O1cB1ӤGL[}aGoRt*kb??=O8g̮JQGPpq=G,sAeKAWkQkE g]e-4!=m!ܷj= @mF[&Z j 3r{[|9ƏD@ s+J։9i+JC{osMZ6q֬}eon+]A7yY}&rϒ ḄP=f )"hdkE_ӹ3QIھq.Mo|:fsh>~&x^OWpsmaٗxTӢ7;0O"^q,AT@|y]>oN@@QVZEZ:|sĩ2e` yqtW/w=Xno~- !#6[q>sI4oϷj?[6NF=G\8u4J/I$DÁ30:)%V؅&%kձ~SX$~aQҕc.1aZ[]6 4o]iCY_Pns⻼]^:+6?GNX W̒c/g kיGW+w3GӹV1gZ2=L~_T4h+G;_k5|J\q{Q<2ç>3~뼸:](.٦޳Cu7ޫSWns#w(k+ދkfQ{ZjT'eI&\mb@MY[MJ+fLv01rd53Vn4q)꒻1L^_RM 9Cs=NҒySTVVUw_NIޗpq: /i`/~`~ 14x&S5\f"ݻh8]܌v2O&o[_o|uVp4v=H9nJN]=}+ n¾nT{:z׵9t#Ky.wJBJz_jރޑ;t՜I[a6餥yklڨdqs;Gs?˂>K-߅ud>ȣKRBsaX06a#a@-ZPC!w^*ح{:'W0'(.`v{^'#u`%B:<_J-{ Yo.<ߚ鹻=]7iDt{o5"nݦJM!? =%ƚ1.İ˵Ὄ[NFu,pAc&lz Z9,^!/vmnx0V^[4q2 70MݤlmDtm%^+\ I1f2l)Igiըڱw2}w?8{ 1vW&IMMJ|bpūu9L8kmH0^ƨ Et:dSsQQVtj\%a9ù{Go֯P|I[k ~UѲooE.7" K^kqsGR}S/ja_P)$c$ ZY \lVĥ^?9W2π/6Ny7-LE&+晳 oXcl8jnTVIy^ܝ,`{Oڭ&bkA?zi o֙'+,lE*6+!1CSPq}uScxKv0-u43t#a\Ƨr`BM2Z뢧Ӡkǚ髀YcrJCqo=N_8r/NeO2RnK(ڈ]xj=}Y[))|fL7oI[ w||86u9w_o-uok=Y8E^%|bA&Y=]EIAuv2Srd㡦+qAǍ]< N6mV,P~uiKDoC]ٴTHT,=)#]6VF{nu, sb}vשQ*/ /.!Yݐ}N &2^\|sI{/=fXce@n{AAn3?]a}7!6T*M {>.Rz)Xh#?oC+]3hqKQKR^o*L*)As os  =J8!oB o֟WЪ!&#ExI}F0+[񕿻MO{Oeݯ_}j~|OqD45<]Ռdžh]_ȲgoY|&41ym#ܶ9gةZWԺrz냾\Wd:)9h1wxmEPfLnPr PيfT:0lX"mi8* @:0hުA4e+1~bC۪e5r'˲Vr)dܲHoFB$aiMy^ԙMu!st// lmt| &kΧy]Zs~:|wkyIОeqvSZS"?GMvmLG4n)>or`8|;2۬~ϩ%w>&Q9]<1bXl6qfZW,tU?U].v ]90֛CF 8wV9 |6y`VͶ }D<=lLihLƇI @ztj"%T(к,'U@ WuM4-X H[A>_31kK~g#;/iO$"0`ȥITF #<78H6 klkL1$c}d^fB ~:A=k4ᡧa-rteyUYagu)q0؎RPlڳlm̢e&J&sWƾi7 d8h H w\I}לX,d^LkējWҙf=OK1 LF" '&Cb?B%V ?s!fQy} Y?xq#!ZWwnoI@Mps[D݃&* 8*c n@WɃ9iP #e9,L}MçmzťcjLBXE,F41s&eA6&swrOgEdL (^s-XKMk~\nș4L4;IW7ȐL%@ɪbD}(@#! CD?NM5?oJ4Vҵg-PE~.~*x_=rbӯ2+T9!łN?V#m e]B"Ã@!d#/NmAT4N*/PZTɏP֩aLk)1@cݰXXM:LB+K-; _ W*No4=6I̊v~h,t}ÖS7DɹṔ"E`~Q(R?ik4RuW,%=u @,2bi4RCF6$X*)(YT  ( ,"2 HA`X ",c"("T@F VPEX"A@*ԋ ,D1@QA)P++kdoцuwG!*U) !A>ʨ 6GͨqiehP nގUln*}-[Uڠ +qr=t^u\_Aw'޹3w7)_u$jc ]^Ǯ9T{p%  S+i_4 m}WBV<wmłQD]",_݀ẹO2Tp4W~gնu{?=k%#yM{u|$W,I!=3\{ZY F]E[VA+~w;m"G %(G:X;nvHid 5lمMqȣ=ZdRY_eM,E;fF`A-=Sґo*^kO$KlRGDYMKcӧc|Q@$֘'&롉"xm `ĸ}uI8`@ol3cM;Dտ+,k-J`4NB,Xd6'GsڝDm/K*>YWׁ>3ՓWs e3_ɂb*Oc9 :!ⲉ"-d,r&A;u71h =I @ ȨVj"!3=RzkgSH:?W(^rFG^ @,Q| :ւ9jK;vN":dl @ g MUk|;< .#$$lf6P |7`(P5 =qilK1}~MW8ϢC|-P~~/֎-EW\kvCǹ_jWo׿Ѷb+)y둙(®J|%vRͶ-wvraAy6gD`Pԏc8xKG>fGVxp|?2r"<\}'5&J,">҅-=^#relt[)ר'h^t&ڼOo`#6xޓ6ÖXqe"=y2p{z~d7pw{1.=L%d01E!fq4und-I/j* Yj$,,1z \-dĨut4?CHySupONF]w,V6\n_obK{BE"&k J +x惧{uzڝFG +!kwyX[=y{wY{L'/wҪ_ `yNGs)u;${.;UHDdC@]:icW!?-w@y#Q)[D1ϺCC^Id-\=F ߕq=]ieD{]VS wl.hkܥ&rɲrZ>BB~.,4*Z'U;i+VMS?Ԃe(j`?*D|c {Ԍ715NECw -/Ȣ s0:^Mp<]J)gdil;;8-nU׸#ɂ WͲj/娚  tQM@yT} sm6N5;>u\cbG $ U]#ɋ[gPZD-y]3}ԒYTut6~dЉkUD˕Gp[*$ L $gN# tYJۥU\=>0榿p-=C@^jN c299rg ~sc ̚ q$OTXiOptgâBruz_)$AO#x5ENvzT t@( Q2>ң? _.W٩N& ~O {n`*'[g|k4?umF6]P@mT) S"}8 ui`t0_=A;9s~:&7>eYNfM?&³>$9KpB` u6A8d6$Dd*4ڷY^d&{54SW0a6y8Pܐ(d]]LF"Zp~䚑U!W{S/P;)ܳ"U[)Obײv~mwwZRo, cQYbWX2E:N`<Ͱ'p]U8 A_t\]\;:ÄPr$_ ƨ ɚ ԶTF& k=ܰ@f/߷ῷ;Oܴ0niD8kb(s_DA=^L <hfy#&p vu\|!JΖ.vT7 u +:)<)k 0z "48Hj`[iW]h} AS M4CƁ` FaH59O[߫`]̲D S0[/)r7RӽӔnZE7&^➄~%/ۗ{굪2yu|ID,Rv|L;9*vK55N.] Õk[Ã7o) ?%}8[3j_Rww *ҥ'KLKt2K;\ e~pD7K6!4AzaMI !i'Rg[HK_!0`bAV EbX `EUX5dUXaPQTbw,Q_u D`oju]ڽL#du2vCzlI(nݳ1̟^P-#h&uur~C!q>KۅZtoE U?d /te(.!8p>ҦEV?'楏Z4a74%<[]*>K_"›?(38x/Kcrz{{n6D>\UI]5OM6rs~^1Z9N[ 7gu7vN.*j̯H"r8#`薿9Y(|vV '?Uy>EAEȑmt $ 7smd+f.t[Fb訑016m{C͝_A=׺j7KUcngP42!Bun_NM@}>< @X"ȿWh I =(H1iOpڮkO 0n@ċAh/UD2 gsʤy d3tӥt56Docqes?zP,Kڹ̟]S' ط##UX1+wygJsy2yydӷRJHȟzWnܹUژC'Fpo^ {)=,E$3hR.֡`ARʝd\O}٠f"ka'#j%D5ʅFU f'|W_8ʀ#̓@7sO!K}#┽L/ĆU=Zz*?Q /, jk[h>zc De5Wgm*3|M o. 2$Q %EI NBP10U-)Ԃ"[ =h}oϩ%O2Q?` 2= Q (6'1U(= -}Q[06xn'_ǣSJH ߗC ]e4 m&&*]^97p xTq-BK:~H*84QQ R:zO|Tfe(Їn>S4'脇'$0 dDFdAbP1zkeL*j/*N,vYWx0$qw8\K å6V=|=W@v>o^rT7L:ðHYb,SDz0`1_{A/kO4\7>g"d~:N ixQBS-0A$ Du_l=NFur<#a ]s/u%FD^]n[rE,^܋XvilR<5ex!~mV co5(]Q2 um̕Ӧz=JMa$_x,s5Ʀ> w0HMz LٸX(0Fe1go$`ZJJuz4]kFg:?!+ưhnBER3'O]q;4Xf&ji3z_Apzv 4|\H!Qe)8C@Z s`}owI->3KZda?_ƢdXܭ Ñ Tr3_`"QH}k8"rz]u@~'~8 h}|}{̀ ׃,=R)LI8:Y#hDum{+^u`bCnsQ:B%u͓"*wr喾-;+.rNn"K}6z0DxZ&o9,g/g*_) 6C>FE9ib8QL]R[@„3./#!:\ .#T-GΉr"ju_h܁r N 0uTU?v?2}ԝHT&~eo> 1r_s{kx˴D@-c= SW>L kYML)$a-$`Y;C57_ [¢қ~M{=CƉC!$% b"7:(STd>4>5- Wl8MWFpE2(%#.2O 8kb+t<`**!D]Gk9T=X|T>Qanb́_]u|DZ0[ Y1vmC][AcQ; {QBA7MTH0?Pn,H|BΎBP{olY~6ϢqUr朲.O,Ӆ:[z!42!ki^ʣv/ v~hWO#Y"o2xk,/s_PB ӾRZjjk9~0煴J''3KUo+#o>LM"e#L;FWIoy X,$"3_C#d$Akk-\S#4p9AqLFx3n)A02׬~C@Vl6 8YZsz'29YĂV4`:GϹ"kj+AouGNfk*'_ߗxs@TP*`@8jmgf :8!巹ڜMk/4mdmCAk[~QrIs1T:h_zŦ[/#&YkF'¸huCK(KJ|x6c}rN)ȩԨֿ}<׹埙u1֟dF'p/ГcK[?`(T1-$̠0UD65Bڴ_"(?dnB_=bm#o8S⏸_;ݞR: w"gFSL 0U;ܫW)*QpB$W`w-w2!Gs_?骜]~?q\D9#%!j$s<ԀMϿ;*2evޭ;A^2#Aa! Xpү7[DMY T<+cMc{v/ Pdn~+ =*IK<L)y̶֚HOsngL?_><9T}ܼ-8ku;h=t;kҴ~6gll{~+|wsjͮ}KǮ.{7υ1l6e~s 8vZ7@nT7h52v/*X1gz2,OHa 'J߇N?oCsnud4$\<VDuDj$ CtG ) 9S<I8/hƶlH ќMiTg3㏯orVd\ZO}`N˗ݙVj|H:{YʈmF)tC`4[KN'[8nw"WՕ|ZNR饹`D xMiTSPTv7է43ך^Rok}QŢ.w""" #q/K϶Xl1`bL!U`54 &z~/ѐܗŪ ;( _1IN5 2o<| 3lBE.O (y_.0wkT.eJ;nk0$%R2i+?>* 3*ڽu+Eٸ,n]_U"VH r,l Ԝd0!bG}Rx: 5_zng,Yn?'0K>{ ,P"ٖn6H/bh*r9R LBC\7B5)|cC%{5CgyӠ)#aٮ%0)=F@ JFF;cs-MfC{}mЁS*(r?}յX &zJN4TKY@VTԢLΟٲO c-i]^Cgx=u? ot~9hè:agX-э"HpKsA> -9h@)ghQw{UfZ?$zF;}EH_6^ 2mUIs(;eY`Y=jXo&QH$s3 J:>K=g*,@:@ OVC`h9J33J'<Aҭ@z+}C3q𣼺k÷ n EvSx y0i`FZÀj-J:5\f[.tS~YsjS2zi6 $tb!"K @Xep|;|`lt !՗ʁ O/T0(wu/s^ӓL3*yٞ9Y bΰ WixQPo<tuiޫo(4(cwүe)%es#;QUw~||o^ HsO9VpUJO5$D Sz9 egWjUQOB]a@6&?C#wL[.۶Z>Ԉ_D~i7.( }6z-k.3? rn.A-2""|6i+͌&_mO ,R@UbOAp ~7=d"fnT:c,m Q8  c0E$dOxFD/!|T;Tyb2,q(UbT3u c̃9cn ?]?c KSAAܞB9pOw{JƝ./ Q(ylD;)]mjRdaP07Ex'[ol~+&;lͦb+Q@RJ#2tcxd6g49fNKм&Ĩw߻p">2wyWA1 U{Tk~] ɋX*.u)`!58*7m0WuoM(2AmyimUj4Mx^|~2@7)G~% XxگK;$Sh Rd8WF"B; S|yAAtkD"H}P.o{-rzw7u0WvR4F ĚÚ]`mj{O{\n;aUI 2*M7]jڥDhkC{5g-CQ&u(?yGkr⿂?!;zUlr&Eo /gqKQYtѪ24r0 0xQO<4۔pez?&ǫN'>V>(q|oNVyR38H@I%B( I$m=blr4I Ht"mJHa%#зJĎ#p EC) mDmif\g1z9i]zn 2jl]qOLIquyM/-}"iMπm#oU~b3jWZvn=iThCoᵲu4Cl7˜ U&Y= ?a6Hk^3QS6 Ѿz/pSwf_uKOgoxR->?ĀM:׽?%xv|@jty?_n=5O5fX^穩7-z3@NԶd[:~¦lcġg~U3bBj$ :xۺddRz~XYΔy0+(xFP0qd[ \ӽ_MУD;D(Ռd!})3 RyK^ȝ]5 qۓM3Ť-W_"h#~ܝP%~lȦD%u> ( J^ݓ_+t 7cGWo>Et_cd/4SN%[ⷻ,nߚSuQW "Y1)Ȑ>{ET7t.o寍hvٟ|>=_ee>xyyIpIΣCt Hr+lvm3vԖb\;ܛ2kFجz͜&;3gW4HT%CE@-hXVd=@m JPn T.žRg̗Ci#|Jɩ#3w Nqs7 ]܀~ (>]<7v!㍫=sM|8?ĸVSv.kU'iJ< BHo%FOU0̊B[gzmKF5ikKf\~OF#ۡHOvFD2t8ZG{8csy]wT%3N=q^ƌêj "Wr韤m3OpKqnϻE"iqiǕ…}*^h'*VٵT;#2.㸖q}Lyȧygaj 7S@=}T.CA׺[\J$Yk׀/ӸRpEG㯼}R{ m8k>ƏNj'2iw {> Z@ f`+U3efZhѴ BpKUHUݐI_W64]RX9x'ϴn-?27tډeW=TyU7s}Q{G:U: G/*^MCwuΝD{ʺgׇr< W?w^0: 4c4U]ǴaCO|-˳列@3e5%BFB|Z~6_3t7my&, u;h/q T<·2"/6){ jkRkNmw(>Di/]ҝyM{hx ekY=K}#xL^CCkoq9K2`DOqt;/M1-# Y}KJĉ1Ksr:g XH0/z^ShM)'&-h&c}Jz>ֺ}3Rljh}/.k˹Q4ɹfmJϪBp¼J!|}N֖R%!\[MdΒVE[<_qQp*[mPs [ѲRgXN?+L>j-̤/Z?]-n,ȠϤ1nj#<ZG("54'Jͯ%^َL$#bDE6_pcIxe%~սfQs*.oc,~;}T] Eߙ ~ؒVdHȘ}]@ < q {樹xw?0xtlW; @6?22b]BOWjƜ5'.-O[Fk ݽzޔt=  9REf d/Ff}2pa(TJP.52Q-j7`mAtȫÝ]+㣅ETzo I?3}Cl8h:;*G|D?01I z0i2iIj1wSScs%DeiѴ7_r /(@R\Jy2 ȎY='M5 )!i*3GҀ}tMbH pd؞'?jLYSU!N,]Fh*@~2`)Cp>ܱ ~Zt.vpAG=Ca%,m#3 $R_X6^j1lȜR{ f1>kʏ^aTpTuR(<X\r* Q )JH u$>Ֆ:m3-)ا_^QKA2OP`bR S6czU~&?mAXKZ$O|>壮}V׃͹9_[ҰgG1BdPMEQ7TʦNqDV1P%:[& cs ymE  ONBPHT? 34d1Y\pL ewP~+ Wꔚ3iuU\b`J\wʁeaIo^@r.fp87%lLRwv&0  U0XsJ$]"ΠGrd#Efn9FV7+f"1*h~ ʹuW2my:?he{g@11V6/q a|y..[aȢ!Ci P%HTO _CE4Pϻ_E Ӈ,wX}-S mQn.k>kfO1~>9L/~ƣ[߼lu_kJ<1]}_bx`y.,Y<|Wٱs}K93~^)Gތ2 DSY=@  1kl5syzdr/9΄0CL;U>ӵ. mHoW4D ,r-='cYC(Dȹ9*uCM VBt):rO@~qgA6>-U=<߻I}u&6`>VM!#2LR}Ә=_?]=WC-쫱QϾ&'c<9]E+#ݖɝ7 k[Z;˲G~R I,Dv]i-E؈-KC@r9~b'a] /ufG#J[?>{Ov_&:&ߑrpԥ7Z{~AmZq_bߎ?JնS4?ZL[XU]N.7ץR':S/&7׽P#Q_uv'Ex8 iS3=эd44n!3@.O% xi@d&j`7|GD5,lgq~|CjP%!g̛3+Bє*,_1ڠOT , % > }owJ{=B bhu^Vx%~?{274G 񈻚,RQfz)9. e:-r# ~L\{vS9Pch_As^v>:< Ö{iA_e]:9ݝv_;;(t'%ݴ3xˎK[{DPcOEP'CR 'nQG{]f[RU yQDi511̄f~)-em &?#9~Uzbi0Mh_i澪%LŴbP/:OS2|g^}Z(swW#I8*NXT73] bh9&Gw.;}qb18"2@՚A:6WoŁvמ|4R&)4-Y Z] $~|5CKlcnJ#&ĈH{۩qşZsB##BPmX-|0vcz! n "*2 @h !caO4ikq-__-&Ǜ}eQD$IEIL0gA"JgbTzm\KYL|b].XրsR@~Pf N+-!'T8yA`2'>gP28# 5rX)ؚzX÷^2)Bь֪| 0훬Iጂ}٨EFW'ZNyVCS \)9'TB[&\R{.mώͲh흫.A佢eXȆ| c"P@M+2iaD Tk=t{֚k?uda05h?D^?t-ew?Nw\ :0\v 9R\3t"C5 !_zEjo\KXMޥ= ioI/!qK˶ךۜ<;s/;{\8T`OV}/  ݢmuD#-47 @zuEhqqф cVb \I23< b SȶE]os1ԕ YFRF/5ք84M4 sM[O5]r}x hH _մWv1CtL&0"1r?_#(=&DI5u}C 9l(SND&usg}y7n>r ȁKW{|GGVIvi}#K5YhUܝj:e!,xɥE_CU;.~ \U[h7{yXCd>r*Xrh?륦CC#QR++!ͮS%i)[[K A`:TzX a$R8)dR@T΃[jP"b.;xat J ) 1=OmT0spܼ  2~dtJOꡡ0L=;,EQăvs$ {箱`X"*"H2bfF&/5ū9R(1h8NDw=2Y5g. j=șШ:j!R6⹿ZCg@s_^z?Wű}OaN\L^ O1ŏpG4yt `pK@=uVC^D]^+3,BH/OSMcF٢\LR ?o$8 BEY%7Q˦L0ܑ(-fN`eC[,S!m?@J桷DZt.wnl/7TKn:k?7L0I'ԣ GpjZ0Qp0{ȸhuw/ %wĄQZ"5dg!4+C^FFX#Ehb2$Lib 7O)䳎'NC1n*n')"RdaTr}:D3sM&QOaLwhx^?D!J( R0F {(a7YˬK)Arw *` nJa C5i^'r N:-kST/}W[xUcg$plv{W eГoNAm I:HT[bQx)xx'GDr@u]^,E80Bc?3FJLZ WabBϥӮ[~VpI#28Ͱ;kGyv *uۛwxu mqG x=A:&W] ^˸*/u~K]4q\ J#hJ w=02ϕt}քɎa)OlI*4$BLxkW5S-o o?FBFA?14'JJ+;J9ӒӣTT3 sL*)]Rh5a; apUT:ޒk2(F dڙnn!Mj hwH>n8BycPvp3- :2PIƛ8Uh+?OcsCllb`3[[UDh|Ut1d;^O67Snѧ{~۩1mCuG:wzz:i>;ǯЖz hn'wVʛ:u]_+QH+g2ݠwrR2,Z%%y ^ 긱<~y&?pk/7#w#hԶ JFABSBCZӊ_K)<$Bθ| 0z6շ owo 6nPCbQȯ|,h!dP-nGY4ƩU:ZWu9&~c J$pֆǷ+D)h=d_6ҾF+փ=M6r3NJ#-k8Ŧ*P[F1"iy<^5no줯F1?gls@:jS^pυxb0*tE}郕48Ӟ7'&smNUlDxZi_4Ć*9ޏ"0y* N|{Ѿ7Cxi+4Բ=֎DT8f9UWPzCpjtŶҾOMdqػ}?<(ry=Px0^ ]  nץ|lsmE$ Eze\ fvƙpaSJ# X c..cMBBuP,8[eZnN_aǓ|#5!wQٸB r(_5y]}Va m\ I"IZ<_zqVK>OZouG #j*km&%y6a$HdX|&3$֝.n^FvXdC@Cb s㣫g'X"/cc/}$·H+vś L/f6& Yޕ KΫGw j5B\-D;30fDi?Pun^]E)!P~h?G۸a(ʡ72 6fimh_vd ݅؋Q̖*vlrp{wt3g[ԟ΁PY "d WbCpsY;\idwB,u"nsX y¾-R0`b */!1xQ"r|D Km*L62QCFXJF:>fDʤ i&!q20+tEף;aY=x\zj+MZ.Z09eex_Eץ/AѨGhʅXlh|=|723$1}9>ܡ52& `2#BHq]yxbg:$R"TCO7?aFF LypRSo= {:GGq[6sۆKMPh<;_pPPsuasDZJ"AhcjUŒS5O\2#1{g.$XڊݚuHqO1?ab3]"zNS;~9B:.7.6"WF9#DI=g>)Cp ̄ZIAo'Q '{ֶG(5׭I|X*\emQ2iv>'GF[dln.IbPA>B8Т`ӁfF fffNsObbfEmir&qZ} W2-t3̄1hhMVosfY_H‰Qُq;!98u_]oB/اnZwnw>!| 2[G0,wn^ .& 7QhCAX66#ֱ{)a#|Z?E9+{zbR1ƈ+qƘ/DD,iW9MK\!9T ]d̀iA\)X92Ma9軸'y_9 w7r\rYڹhE$`KKH pf^@GW!3ڈ-bhI-oIU|xַz 3n8ˍwEUQ*_a?~/!I?OyzDw :f#'ǹ3}(f!ߜ| hk CT_LyP)LZ\Wigr<`hi),Cܝ#|2n`mWz!jj|0M4fˁbŔiXfd%$#A`uңr0.q!qԛD%Jܩ/f (C1gT]MMZk'qs6slʶcp_8v8 gUF^-Dop/m\(џ]ci'-1‘ݾ0*WnWGmZ]e2;v-VJ.򰿧]%1 aM^ Y-}vTd/|uWV9aVHI;6BǁBYQ=f 5Z $gY[kr*nr:Uoȋ@b8x !G r5J7Y&$(Ev nx:^ֳģiǀ LJ`ٱ=ˊqLNvʄܴ2k z/}'i\Myn8]Ѐx ]Lhbdy|ñQ$xliͿPrc'k2qoVP1N+vYT8 Ti.WcK9[m~A:ޱ"I-alZ=W}UM̹ 'cM B#C\|n~LtwQ%hi)B>&k& @(I t&>:Љksa"=ʢ/}iCXd۾q,&䏉8kY230*('-R*l>kT,,o8 ٫erk)2gnU zmv[ͯt9N"$q$ fF"tW;UvWXMf рGd`mK<HVyě P6CkhشP @|bKoa᮰7(kڲ 5չf( "O&y0>jMu{`4vI JŞ4zLM~W D'2$,Dt`E7]d _BH 6l8^3o1{Ӈn"G ?xP'xodz%]# *fg;ى(h8sHp?c9*  b>]7Df_@1`;ǠoMF: =_<"p.nR*鈌0 i1#{%{:/4<26ȅȄ33fd rZ > 7㇟~T8>Kcot6}5⳱ߙ1zQ=+$$s@%QtEjJ-KMCvRFŅuUC.A W,23)b +=?M+%boDp%Ρn =2>}y<d̠SM?'Ϟi.`G=ZFI*(Z򷣙xHH?vs@<-(4J(.Ʈ{KG(*.Noy{]f?DMq+))S.nL;BDÉTtb2}PƵ%gln\,/Nb aӝ5>Ņ ^AhD &?쌧 Z)n@_~DL< AGE*M~g)0`>y'Fv&oaglnn?1.OI;#"nb>p# | _]B siܨU6Aۏ[G=05E~d<~[RVGe'%<- rw )<7+Қ车u}պdDwX4 ո@aJ$'Njz#q@}V7>-|6Aw16L@QLMEPn+eUfΧMBi^/5W?be}lGunMZ[7(Gb53cQs<7Ӽ:GԫF` FLӒ 7w3)ȼs <;܏q{W̆;f"lC| #qGRUqA[8<!%c>e|hy:R>#51'^I 1I:,Bln{q '6t&D]~X9->I31B x>dD6Z,:LBA @̸A fZV]P* cKYVQ5WnE;S)~{>6iid)Kv]D_]?dâ0axB $'@Iy}UC0[,O$Lt>R"ieq27cߩ/MbPəbrJQ!Tѹ\@?q]%f^0no[|jiATۥ8^ RjDNmbn BWȵƂy'̮1&8:HxA6:Y#[_mxydXR ɎW"[u[m2'BqkjQm -9aŲ|@H>gQ-tr5o_=>K1w! n< IOR>/q))3MQz5N`wzy>DChldRi%8U #@ 3i_Ï+ ď_(^r*M^mPY@BhURff$` qc"OF!X=v<@? <;Oey~;v^U=eS Uߕ=-C(I16M"iaPY[ /hӥ7xIHi4d 7 1ABLf HPbBcUd{n1vw0ш_s5|x'==zhy2ۼzs|bF;R~SSf j xp>xwik3²sevv\\o[OeeB߸3hep6I/o-[Y^CHwWf1鎡Ӈ!وXj=sW[72s^nff#b"818`/ͶhlaJꈒ"QK1{s1!b47)?հ3V(((1dO{K]$!HI0cuj݊E3 F  7:;&w?Q(oѮ]%ܝCM XnxT*6Z𱁽ns:6F \ 淗_,8j-?9u/p^LLWr ]mt3!XcU&bQdJHrH(;]Hg/|^;0N%ZMi)؆7[iglϱ c iuQS]EfuHG.M9<ШT.SI۝p/dۚJ)OL lӟ~Vi1NWԭwN 5۷7U'_|ZK;OX}_?˔z=TKm߅˸.6OAMf̀Ù M{{n.;nH5!#tjXv||sflwώ7m'z(!rg #qs~|p`['w.ݯT*j^ͨZ'n@CS,%$eAʴ84i2_>o+5U>|Se'hm7Z@S!T h ަ{$:ΡUJ,0C:ǜqHݣiT\@$#i48]MF ʽ;*ïzN;j,?\/7#g=u0?>OΏBSVi:fV19j"OSğv^Ė^]Kn_V--l L /:kƫC f4-շ6FYvJ,~*'5`F8w)ר\=%l\,%d(o#FO#h!#T]{sZ췯nx.m򕋥8d1<̂#,sY,GJlTFqCZՋrG_^:wе|Cwm,ނ;9em7ayeȃ!+~CGzӮ`_pRN]6u;Feleve|Gխ5ݘL*8b6il5_Qњl۳{5s[`/ uj^(U6TXjѤ:W0#ZF jWO0Gt'n8 |XY1B$( _,-XXXsVH7ٔ”U+,c6x3dds| x3~mNh9{*#;enPbٓbXsc޶*c&ckt[6nG\ūf`]p Q i:R0y\ϝwKY=p$z}(+^HQޣ5 nY*,$|2Qc!q`--T1ed VUV'/PC){۾Ⲡx=j6+[@{sy _̉^B[<4[{wG\<9~>~-ag 15D>"xpC !ȉ }'C= k] gA(J?\v(fBL0E's(0] ߥ>[ct0jc2D .0I0IRlxn[g㶣FFDf`ز&DAӉE-ȷr![mbX>RX1i3}.;/rd0OO'r逧Y.z/|G J=j B@W3X7_ ̄gzSo_x29\$r?Ǡ> VHL Hf{Py]UYqadd`ƌaS5y~Ȩd̹pU #p 4 ¤X&iZ$ۭn_7CA!'}O%^mIn.Ɉ*ddU6}ԛ={w*c3T`>ѡe A֩J{o|2t>CV$BFF'>iPDbZ'~?EӧX>O"`. 1E&HZPl lGâDz>HPW0cm^/[wE:y{~!H|o#Or@DNƤy+Yj$MqO;.NEEv1&عJ ׎muNWj7ߺ1@\ە~'|;ӭ|L?ڲ?˧nnDݸ2QzJ:4|FcωuF{4^6,hLݘ!Xw pYWtqfD.a].2 O>Kػ;S-=>gzf~5Q~x~mє1I~~Rc'(B ob$z*8b9KF9O=[sQvv9yɮ3fQR,_n& (H;Iux eW#$?eg&EUz_y!m#X+Aاt8Ŋ_'±-*;]r R(sГ##W>= *Uz<0YDW ]ŃdUAH4)WNS]}T8B`ǀ|i=?Bj :Ŵ~{gpayUOYKB:Za/a-jGϜ1cskҘKin)hު'A89qQΕjUyPA=zm \*.fYtpQtB ȁjyP}TwJY~~3 /uz]lvGN,5dQ7*3Hߟ~0f ^+z;M0C G[D.`<>vI,r7;zσEd@s9UH@0l ί|zd 0_#qj18c1@:H!u(u(R@fd FQ/d 3!ffzeU`3L; vJ|aɗٷ;$ | udoWEѳ@j!#d5)upX__]ܵ#33n5{4H? J;?rU%$❆if9w2sj5P!i(wkzHP@~]AhHY.n(öUX_Fƽ69 ^g{7! >Oy?fNYÔM$:nպG唝x ^{[cDz%GI?_ DD <t1~c&_|X~wim0VFןg;as1ۦ Uq +c(1zoލ/r4ksnRk}3lFYY} ү3ϚJxRa' HO{q >_D'.Ӿ{ȃ3u?Z5KSF?x\YFi`i$XG3jޭJ>X5}7vԑ tyL#wg~:ܙj:RPvg' w~xmb8ty}1Dz xZb4L͘t}{gҍ[ߧsp%HrUC 4ր!r2gPeX0M{발4_So?l@h7zTaRy(̆g +^w6yg9| ~_y3|g߯o9x_[8օ1th0 Y0c:˹esHѐ;r!cz8X ǭLvD]ȼpa_B4ÞF%\Ǝ%^cW{HQ\X6~}iIqo7.]4R@,Kq1F`ՈZ~UJ6oQw{W *J0NL ȤLT,FH}  Ad?PIY&2)$8eI$taHO{= WgeנBn{΁8dF1r]Ź-ϊx]̌ d m~Ag4O-RO޻}CnW>b욊5tVNﭣt[OYIlv "L޿OoH9I@AEIHP AdCKED 6@ 8 xzIԀ"o\Y:N6@1j}f8X70tRs>#ks{"m֭AP$UIGPO 'sw>mȆ6C>[+P쀑EHK{tNٍF6+,-Y_rx +uy ͤ[ [\f&$[MWS;vH_!K)_gがVD@tȅ8<}(Wkzl ܊ˤ.|pW2_JRvz+ >1I+*րG{/oۏsWul^ޠZqy&4!f~8ylCFwCgg>̪[7g"[0IuN$s3w@8_QQľyTgo_w[>dz7[ r|LdN?Jxzki {EhׇDQ3X -J7hʙ|l]eɓ[K>BlTLgxgӉz㪜 '|kZDqaeJs59qi?= lmlCp_+?~Xa۰FYvp!zvd>=cKgй D8?R[ @Nn]@-Q"x qdGE 'C?v*d1g\zh@tKj kIBh_ckrcmyTs/ #ibӆ=Oտ }2=~Mha& c-݉6=\^c$C^7.!iOK:V-^GDaղV9 w%l!kw"Os ay][7_L5!M_Kcx??SSh330`[0@@ˤff"!ٝu팍;ig]~//_n1m@xs~ m:5[}mbܢ*EQ4**|[,׻ǵIO3hU )ےmt!SحG!"#" NI_uR׾:WŸ}QUw_lOxiv" n˾5=f{=7aI3GNy Z 4!{_yRsY)z̝? M_.grNcR1&G~Emh} i-Us$,/]}RFCs0)8v4Nk];Zf d&LQ_,d/ v c;oV#'s@㟅cua9y=Gi܊C|M(X"T@A?AO~vx%Wq3ۦn\'X5x-|wE˶ $!>.T,PAF! * !Y F*J1`EA,I XTUGܲb2E"PH(EI+%dE8j ,AV)",@,fdƳ 07}z_e^;{}YLLV,%V)v[ |}mf ~byک%)h 5J?z/6.fa}q5xߺPyzfi^sL9l?u] . VZnL&@^/K~K`L80<DqL(0xG u`WhCyc}tܽ_K>7[="4-v|N+o;Ũ6%{ߖW-qТdl@TЄAwvkI54,-iv(E*Js΃ϾoC"0h w"U('$a+#9߿67߷o~J_1qź<ލ˛_=N=U:VܧrQ8 `oe-%QQ?IxžS|?u]lk넃20`dpJ) =\s,ڪPM;Ah8zWg0ه;T^;Yɏ8~L<mX\CJF8o36*jQ#Y!jae#͘,#p+H/DL`˪9?Im0IK}ɏwhcWVGPܞÇh?ٞdN5^jk͐i 3Ɇ‵JˋNB ;^gs_)g#rb0 O2ߙYC>798̹j#  ?uh/f}p9%U@Zܗ_頹CObk^ڗ[_\/?7ݒ[d;ZFb3:s62HFC֣9uO暨Q+J.jxo->ḳ;]GׇC_w w{ff_~YkǸbxT_nG\)/U6ۣm|qo?}dr^ Op,=1zhE6a穗Sp~4pqwtKkH4݁.PL $n:8B{wQ<͌-;G 7we&w9/Va4X gs/C@a$=4 I9Y+V0J@_m3a9a73 #Y^Xn7 F{ DH>u".=mv@.Ы^wkЇU)H$†f,rK}?˼|gE% 0%YƜN24V<2|&+O[osJa<4"ze2(fiD=g@B*w3F̤jD~ KnAz0T_On[&uOս={oqkcͪvù5uOP*R*JaO'oS߼0&˖3]ꍁ[0G0 z$HI%R-9/>qݻt-rʀӄJR1~RT3hPR=c aআšrգCBPAc HRd|O]ÃobxvFxS5fQ3oV%!a %9=F?oΝ AOzsJ(HG + [oT?2j:sCx 7Ua@+Đv`Mj3Nj@X͠3v'8rrv8lRg"?wնqxwIY3E6ձ6l6kΪqmzJ 3|;G'?uyO+KbwXFfijDښBV]*(^/3j֦ӌy. *g6 /enB%FCY +I6nl/}-|p&la_SUVxñS_R=#m䪙&3W6Be}Wta?pE%_%aAdڵ4V Rҏt}=xZimӏ?:'rɤ7XVȕw8 e |:ؖ~zkKӻwbOG2 nmNڼ;Q4[K)]sm_G2 ZQ-]A?X*ѼC땸 yP}95?Ċgxʡ7ӎ%u2l}iTeܴ3}+lAl^-›P ~G%y蟢jϐ2N*%k©.4N1fr; DHHۆ_?S@\X\mtN,#ýs ׬'b ur{jI%e8Y)8jTz5R;^oR_4Hx> ȻDSj:9.@07e^ R^WsZH-os!"Q\FWJ&%4XldΉgOSRG<@n%,Ǻe jN~L|9n 'A9ЂQ;cT>FxzkF!Wy(kC/Ofݠ";Ẋ![}Blu0M/\.Ҿzl/ lNa|O>Γ1Qo XzOR?%pGY"d9yTj:l[-QhWKxs y2bbSJ S9_ʾ+r02:/%Rd` mcB 1iȣGtFv *Aut{cTr7;TȊ_K.z@ȅ@GUzKfl txT}v[{/;QN$K#!Z-3y^R&i7 /ɗ2Yb@#s㳩ppo\]`w,p7\Rao#Lnto.㑟j+oY5xzzNYAVgwL- ְr"D<#n}^F➥toL"yճZax~iG+ j x9DTǶdž=Tޒ), 3Okޮ32R*]''cdkP~+͋cG5Yqsݪa?c1ܫ^3\Yfi+C.`Dxǐ17ܡzM4 <}ZE`E T3&pՖa]*3v\Iu:mY%ƜM GC7"FT96AfHt?3v[ 'nRu|fY[uC@a̗ߴTT7ѨnHE2i$1!B_Ô(6"8 cH|T*,D{.]W ;"-QL^#Xܙ=ml~B]O1.rM))/W]AFǤ+H^q_Yi`\r]VP . 3ni!/Յ(P18 $ 6Vݵkh;g9*s^LEb7% 2c#5ĵ[ck4{ R^R[ _Q[H"/O$2ֳCF=0ػ z) ~e%=yVJYܘ봧ƞlF2<@J0ª We%K=IksMˤqJe`kp&o)U6bg9>'!#Y" Q1,Oiw ՕcEW{%'QΦ|GȹQL^ 6F\LIvRnTޑpP&@V8`3Ml& g'h#cְAHy.\kaVq@_x:ET^P\2 x<51pIl'({l.4d⸎a ?p\#p4}YU5;#e$[:ϡ㺕-mtU!B)^(Z [_IV[BCoh&墍]@Nگ;D9H)~>mp~=tz:_x<$=ojMN4T>ZB/2['f848$aP؈Ru۩}xZ /IFȊgKD?w=1 󗼻ު"CK>Hb|U{]unM0~7H"_zt,ߊX[G[7C/—h%Ӯ=o}[?[Su?Tb~.”}sE M]pR!;f7bɗ↽W@D}[Lj*$ìdD%`*=Yr\W(6.ʲJz,F훀a YqsOer+}K~ eA[l{zmg|:C c*ļ]\톶2\ȐyJ njr\U$ې:E bT(M65Bw,I ^d0Fࣁ0Lz6 f%^Ko#|!1`^|ޟ -e7͡zyBs`X\Y(A!(k}ɛK O֚\OR:fڈ񽨲%-KmX{,yӏOZmŚ=RF,k%e- /_@ksݔ\P>)!1o72]̹%;3 ݣk{oHd䗛mvT":'U#~X=4,oj`հ҉0L6*M ^5D in qv1 #Z ݟV`\r+LoFjʬpF?C=;2 |o򛏚z[ !R#\NU^PJ]{N<‘$ϽdR54 yNMu[b"2ޙYeaMSG6封˂:UOC PO/]4/ j=蘏BarN1 Z@80f@ 2Szkj3vnQ/@0Qz7m*4˶=*C`ոq+y6皕l~MtK 0tpduyxWI5p> \*OQ{&2/g&cd+fT]cB 94I|lw^xAnZ?|xiZhqj}Ljn֗ܓ&e*o6r-}b]gS8D[%jMWM髕o#ģ/R1J2Xu GM=_{~ ڏqr^~RJ:̀=fGZC1/T ؕsٿ kN7>ve5սf _7Jg)"Vm']8lmdukT0:hY[V?@({|u.d3:/o2\mFkq?Sk#L(@$WEeS{>y.ny̆IJ7MnI晽Ձ :SV2T+՞*Teevwqb)N?ԗG6uyl oО7_x7ڣfX;&UG b%<*^zn1MAo 2(@w:n 2zo}Kn(ޏm;"?]D;kX $|lE]#"!(?L-XBV.K[4>T*K26cYdrt}Aʊ`AZBx;())3#S P<۪4vl.벑zuHMS,'UZbl|>5zـd̶Vt!'˰-DcQ6}Ϥ(t3J1K+X <.97p=UN -2F _U9koݓ䞘Q̡v%y+hdéHz@Y_1}%>Ц?b%oAa,įN]:Ma':̈{.Yv nw.=Zש Ǒf%B!&̰n&a[:5EWUPߡ3 %':Qla3DÄA0*ʋ7` ЧBL_?D+;[9@wD]AnT"a2zy4!W uEQEgN]W ;egb/@4XV#el>OSxziFTrkJoxۃj6.drilS52+y o3(vւ(-^cq S%{2_n rFC=Tc|2k*.M|-M'Ρ|C˶H ob[[q=R.'Xf&`>꽲)r4?DbWvL-g°}t,œÊ4uy 2RxeڹhRϔ!j˳6ٙ6i=8V@)@1y;+n ~£V(呁=x! Q 8ڡsahSt|jvZ~ͺ1e *v8$S50cDo\g>I>}\4˵%$ff˹ґAE$-۠y \'dYb)cN;,1" LJ ^ל`=h a#OaHx~ C4|>ph4϶O_IGJ"^Z Z5r-r+-ttb ^^vcSD0==X , ō?[Ut?ALiSPRH{D :$:ƿ?G9ׇЍ6d0\o`JC_Cg̼f/,?t"bfĒnD?WK$.`ԼQT5v=X'迹>TG.DW#6"HNJbsh<5z\E9]TWmi>G{$y'G{D`Ah# .auʹoo%p\ۨ a>mbDH,{\Fd @_=d&zw\J)b)w;ۗ*#P"4&g:qR6֞z(l)m`Biƌһ(|:ʼσaQʯ | 1#˜[ O,UC$qA&떫4{}>$UtЅ%̲L Jv)l-t]ym^D %^e-nr#k=|"tn^n=^dȧp:*%{  Qa .?jSTQ2 (8၊R tPeirȊ}eyԈsrKE4vj'ma0h$'^~AZ3u1b *Omc4`[.Ihxvd_>V Q @̲\!+j ˫ʄ랭*$E6 H-2dk9,;ϑqDԫP*[Ӆ&zug3Rj3wD%'_e+ZpNK vzTWcHB+HW>p󡮝ZAҎpak;}Wݒ2A}Ka.m&gr ^k Q %_'S oPgk/T]%0E 54W it::2MN>t3]nJ"oUV?D;O:@ДO~ .EfլgK(nJ) GL'm3ĺCwc 6>?5!tQ:#?pIVYL0{6g_535ZƽtF]ݹ .'&!.W\z6҇|؊O%\՚\i)l&b{&y|>`쎇Ai~*j-?֯'g0:ZwtX wЋ.i"w&LTؑX\S}PKҙ?LBw8J>>]# kd`D_D 0 xJB0 f.u+9i~cb qڜ2$r9X̱PøY ŶNgƞP/,'Qh a6S tl:y;倏Q@VbU[=6S<=ݹ̼Os pχ+M]*,HV+uUSFN_ˏDž٨c`QhW3=J5_g({eHC1QCL7!$OϾXo9.(1է`"vU6oEn"::aR e5Q)rUxgfJ9&1FX:M SeK1um%6$9ThϠBب a *VH Q0/{XdQ-y.•㱟svG|Q:,v!?~;J9: I6v@J:4"VUTa^|UvB8|tdG;`E-tԍ3ԇ-\:z/Tgo1©)j5sԼ2J$O)O>2`{pNMaι 쟝s#j{D4=`1noξߵqc +Vs H u_ڑmGzZes4n\48{3ⴙ ,(N2^9xX/lT&PVb}\ AՐrܷŖV84O]xxA7E EJ]d$ݚ`G8˔T Ń`֦b萚JncU =XֲبDE,pI lZM܌nǖ9]J0Y 2`=tӋHrPRJ 7;yW6SҧiMNxp3E *]TAAD j{|^}~,e伸oLČ捅u| y;zTOvȫ\ǕIȴ@ }9Η(07D,y ;V"q3'H")̜E1 ZТ GNF6`C'D2R^g'20usr5'-g] -o~*QoUڞD1 PúQGvxԭ[s[sMT @&Kq6S'- (>MGG3บ9)6-4s>' 6o"*Yy4m[_!8+g+#=|˪b $.w L:69|W+a㑯٢c"!NPShCB H퓽$Np" )qP'C& q(%[/ n_-D9Y>k%xìv)6lVyNzf+2U"iG^TYxٽb`l ߸8"5#$,I1'+dFch8J5ArFAӸ!ÂMۥ{ؔ`~u)'eN;~ ҳBnEb&Tm;qZR],$㮈5fKuKXrket6f+Yɫ"҃a~$+sDVV`/eE SrX4_h孅@CKvB3E8fUޘk"NDI~(\"M=z⧥fÚF4MSTtA!"cFt=݁fE Ah' 9\FN5z":qz6ViU %! fpJK 4i;A-!<ݕX.>$[/?:Ţf[͉cI2y#k3D^&U \zmc)MHc9u#͜v п5rqn  ZP/X#pGm7K$DŶع^MW.͠F=/cP{^.*࡫;@Pύ_4l9X+]MCʪD2LcN_+R]ŝ'dKNRnLz9b[Bb#ޒ`ܰ%kMj!ndU;Ij &y2&{₲4SLMl!-(0;B±k= ˰?_dK?^>7bv#5(.WiW`_j?w-D6V,r< ő@ n? !y/MY)Rd<ј)|JD@ּ!k8wH3fAųތy/vKuQїj[00v#qK]2e7 q7 ^?ͬD%S_ $Z[α\]ژg~Ɓ XNF5e$ױv\ N%pB2Νa oZ8j~?T]Ss~8U],Ôp %Uo2ba=Eĩπ$r Ҫퟍ@N1P͹w-FVXH+RD$K쪡*8 6uC-[6\;-dfPC@DoEՇ/T]*(dK ?n~aE2xjVy{}xz`mQy^T/)DIquCFyASLv;#o!.Yk9TgKGBב!M?N3RggG:YC_#w=8BPL?uIiV<9+$:U Ay6"ў~+/9/Ues1iAFo]V;\("pn.8:%QVnss\ ),jw9jCr5'±F9/4]=0JIZ'XMq@=C+c+E.*v(mO1NF_8xSP ݧYIhXx6DW1wup b豅| ^V/^`n ju!n)[b}CZ ׼{$s\e7u$HvH!A[|Uq)Gv^N x!?ZK9'OnK\P3#E0:!$]*Y&ǎH. >m̿r…I7ӗ$sz5}+H~e*4}R $ a Ayu' 6 Dh[GM6|-%Okkn.9XB4O%[X=.g& |+TTJ 6tnfK9,IguZx|aXs򓛯:Wׯ.ܮRC.jA#:7Fs ,vԈ8ȰڠmjSm.R MTwKv 5/c}6`C {1!֪NyߓKe~C]hD ZTre8t i]ňC m3S!A{=$Gv~򢔬}v r91mkB{{׵Ș8̅3RLV,CbZj-~Ćw^za$ `$1;؞^i !LĿJA/ho k'[H};s> hT_ l[z9>xƎ?J!~ovxt\O$Rލ ^"U)8) Pwp[&[W`|yL>D%v^˜W'5 EMh7G{qڏT]%e_sW/IwQIe'Ate2Q\%K{Bq![(Aګ,f~l?Qֺ_v4ڨbD*|P Yvu(yޠ>]xq{%՟ؗ0ߍkx과OfLE:诗Q4P[1 m ٕ@zs|qi#1AqKVs0/^R6A:S3Srv_`e* ߥ+ar: pv;l؃8$=hKNf"BrFօDFn1aYY dBGiQ;q*jgf>&GK5?9dIh%= W+I/۩ꃞ(qt)ُw[$l&:l_D-wI! WSC>Vrm`Tna|˯ QpDe\6v"g7U@[p s+:lJp|;T~ hd0 ?F(_hz 22ޜ;*INLx.haeD68K֚&NzBnhMuÀ Ӡcڼ06e=Ӆs]$gWb]sr' Ixۂ卓me:Eq`/C@Ɣ:E;(J2$9[)WQDg~+f[9"&dmBIy9T|c(ۨ%{c+<&8fDJZwxS`S_^E5޾Jmpń{d҄*G"k }ҩ 1\_[q'e9l~2놱gW\6|*$K׭+0Wu20^< ok|NL#V6Sy%yJ:<ө6NU5լna/ &^VZ W=|C©܃OI46b\'TQ=WYt!cYܰ˙HgS,v%hJ^Xk!EJƕ!-=[V{NkW3$7nI%vLcp%C{9kCfDPm-:F|{D9Ndz G)жˑv'a`Lzn$5e6]&Y^R%|ThYq7.lc?IIz\y䣅:$1gA\=LG~>&soM :>~}pIsFIQb԰)򈽵WoN笚}}/ZTsqX9 3@6_`NY&ZSmlCNⰢ/ LjB0 QJNocr`EqYyuFä=wg)9~Vx cM:sA bx@Qc*E Ci`fL0]U;&O6#hS<{ԉ>-nlJ"Z$)G0ɷ{/|8NsI f{QT\t64R."!P BGu^U6|P \k]U▫ ΪAnbR^*RE?F?yI)3܎g9N1Vl3|q r=juJ%<)7f5 <y8-TY+NdX "f{ƶGQ8J78md < uqܢ0r4C")YaUǜ7Q8CiH✎bB>Uy-zfkߌ8.8˺r^y?$5x .}\N@MQtp.,r5$@P rPݻeWw;>TSJJg`[ ⪧)60Bf!)O|xK oo/:>]'LIjEb_ i߻v<\xI;L`eLLFq8),>A#@A!V%Fe:L9> u*OϾH{paЫ#@Lzc#Es_;Y23A"/,SkAbZ \gjUQcl/fs]7g4Xe\IW2cO(*xB|SwLEDITyU|rEDp RB%>b7ԭ*r+*'R w} &cuIFvڢ)>l}mUbzU IťvZMmI۲vڌضåUIj3ݧΙX=n"sڰ:ENlO " qpOc˕-2UAd͙JZxp3)*ZUuT;XtV77|e3&󕼊"HъOf^Icp$~o%OF #aԙqi<򊞲PPgJtRn4<=`4xǕR :z·7ʐ V @bth۵p9Rc7H=3Sz].u'%I^Z U)؊qѩeӖ9K<$CLFcQQLXoϢŜso@T>pօݟwB4'v!;q8JmkIH+U޽/?=oωg0n0-?Q9`}&b) J{-%$7?Y9cE@ވ7+Xw LMf$2D.BqMm򮻐20_%,>n}Ȳ(yAQ[!CVp&I_}ȟͬEW]߬Usgj_-`:Ur0iKgMSp ;9;VD/?}ݫ>2qiD^Őn pbW!&"84ZDtG2KW-,_ ~FA:o4e+Tes+dxϷXcZrg$^~a˹r͜{LmD?g5Eջ~z=ӓё'z[e9^uujժxL^0dCҏQvOD}mmb-[deD&PJ+OA׈1+k0zu06.o/ܟӹB["+'fM&`"\30فt%S'REm_KJW[4I0aL ˲VEMÛVUѢ*2ĊuKЍTVwַ._NV~ۏI5GT!⥠n 'g2G톻VR#*;Q@`Bs凤-*g*;{$<"ISae&"m+R'}ZCId$y=8 JX>.ǵZ()ȽBv/!6=oB&05z~kZyc?ݘ&n 3>pHb# O%&̎ zzɞo̭[?7”`Bu$QR藮+ޡi:ZKtw ;- .SI`El] ppIǹu2:|;_RDh {0#̶ Pp#mpҟ(l+l|ܭpew g1c%tt%rƅ(UrWxԭ:Oo0оt0\$#~B6Xg8k8gx5 Кm3ׯrMi޿0C7zrzr[>Pe)5}(u}._ m"9'\W>Qk$f_A<ͮi͉qzAe\ C g XzFH7}O2.ăJl)?z<-UKJMY;n]C?r f5(pzDl7+[shoʶ, OI)NS&쪑Fz>_OcN0_p7tdNaF ;VJRnܡ ɀ<5oD Zٟ(%XKhj o tI|a)|Zmcȑ6[+ 'C˨z,)V(Et0cv+b ]XXai8JwoHGq.&9Ӕ>j|" ^\~tDm: [\YAUGӵ ῖ2$+Oc ´a#ZU-(.-|5,ՂqIxςʕWEࢧ1 oԊ4O0m.qG}*߃ާ&ﹴkF)i|t<}+:Yiqv!oe/U(uؑVI59y3ͳ,ᱱ5obp4.Nt w٨iJ`Iq@3~BTl}l!͹pؔ3)h>e.f{2ҾIYJӭr'ED:io1=k%f]˅H؈c PhR%"Z''5GAۥҹݜ 9vhu3uI|ܱ[ۘ~~%F&ÅwЬ*LbhkvӼQ|}tf'>~n^sE\^ó3UZH S(jm>~ɯ>@Oiْ^~)&UgL(/!8;/ W,j{NR6"!_K_U;Or  sX\|P09?{MyZ|#7spI,*p;C !8boq{p#A *06=Wzu"|zv4.\,m֒|,:,`Δ¦ycgzeYOuQA{xnuⰦ JQhؓ%Wi۳xeɇ2gjurLa|4Y >K3w35=ޮ%/4Mi?ӍV{8 Ud$TxGdOvj.HhnLd_zS=қ%fǒ= 6#q5%r+{xp]=?> 2sS9L !ūÈ4>b:;҅s˕#-O`Z,pT*,OE+MQR?:iq"?̘w1jĖo$a?u4O)WcDMl:tb^coXo]aXD@Y=~KeV.n/05S Y#`ͤ6DmJIoPgWү | -Ⓐ3v&c**5?DC0h:*z"ol:$9d#j&R=b/'mMIqGawΟR II_ #ˠ釷ok= ߾f ^a%Am, A肝֛(]$X z}*҂~{v+Ë%AT2aYBIkn#'+xpd]`cP7we$og;č"V(8iҔfB=g=`D(!zW"D5QmD=r:"Ql>.7lhx`KwP=q {cP_!Sqv`C(⿺#oQ<٣‘D ]k/{zC^d-&^8rF>Q 3l>]faMDݯo؊r/E$;r Qw:J$bZމ!SkM#+OOm,XknZv? ЩH> 1Zu2 xd#Qƹaۅ:=NO~hmтoݸ6s(ثWQw 7qhTBMq\0:_9Ɗ *!חZ*]-jå;a,SNzd8a,7+e^ʮ-.{ о/hrWs[#EM&r  ֢d^2q=' & :0&Wwm59P'F5Qyݘb`RKY)A_hzfFRX/Lݚ$B#{^(CA2f:ɴW 9@XR>w&+!_, w I$k= /P6@htَR(Ru,OaJQ؆P52፳m,xӋ'8Tc_5Sg}$ҾWuΑe%eS~bo绵eMA?~,:tB $ neنx8 /`=s} ]ZFlc;M)*&5 ;&) ,]j%9Yj LgRXjHa͞P^g(_JOl$Wzf $}67ƈ f_ LGf7ݕ7_r='Ke췷o9EOqIdJ.fP% Cj:RGְ8U9LZɤkkVMkY'`.2Dj-v,F /(EV ڄmDG\:iL B箰JglenT|*#-Qn; Z .V$bEsLQg+CO!~i\7݅6}NtGCjRr^[tIh\b)M)t|VL,>owEuhX[ 85\'wC<}ypJ1^Ue*. u؜0؟\b4^ @hPr=h'?vzzYvR``Y*uwG`Q؀EReV{b@`FcXXP׊vF1nYr㗩^K&f@DqQC|g^2iTz 1LRNW%t =}LI諊&h.p^z(MnUd^wG d hn*">?׹o!X $ G<1XL;Lh+'G&}P2O^rLB?&ީbx 9bר S $wD`PoC̕9J~i5PέY+K?Wfh՚"Bʽ'P~-|WԮ5IJ04A! pIF2D_5؏b~Ik)kg'^C=z{J#e.'!/{'7$I a hkfIF0n'ws]LIb5k50,VHmŠcwVñȅ|?֍ƣFIٳ /ʿIh@00~NPyNhO="mK:w8R`7*1hD͖p._3c7pC?#~&cx'~lYYaxɲ z+CT, ,uw$a Y2R˃חer3sRf%r? ƈ43_r3ݥ$s:E ur6.]S6 iu9V8{CoߴOK{ RjdYIJҤe X);dw=Pom6;곜)`zmƝ&@ܮ8ްTiLGGUA|ţR)lrgl0 ۝&hIQw\+>BCwqG00U%j~JtRETk#dONG2R,=%T9 B9.Ƌр/e)#0\J2Z!C~-gR=~7ǧ Ī ˃`&RBan$ 4{=9^v'(X$ه$A^ N$iˌbWQn~8g51Up(}Eكi@`B页1}5kPh?B/|'+Qj]@mZ3;,2ˡ.iJB T!+; jk:5P!:ֳ>aakqf$7x8yM+kz߄3{ 8 WA^] eUh[3_~(GļEF@My?#R=3+u9Զq|^zg$k}qQLINH*0N |AؤFVzLUB*>Ciۗʼnr T~5 eT>0w"9}6ֱO?#*d{oL~BQJqm)Pg5f6}şq-B VkZ&ۆ*ͨ>8SG3;(qO̅f)F4sVZtqrm/q z92F`t]dER啀 P$|BbhHcv{ O3'"qޞ=u5qB(:&ۗ1ݡe>ӡs򽔳.MCQc _!KJg h7B^X_ J1f+B5 ˷ o7qt$GȆ1T(pPjwcUbjG}s\zW-OϱwD*DLħ܀^䑎W`jrAK pW ;H=2&(/5 Gz3g.QG~!#yR"&0dy~J-hš2wB'c\\%@Ib#,%Tņ^ؼ:> m9dPCJVu n\֖8»"e? F4Kf^ . p\%1BQHVL>t FW'Pf)'rk3tY gN4qҍEBӚIpm9{0v0C'UXJdӄh,=^nf&2ק,JHigtQMd;rh{P=L 0&ވ ]_ߦ0P=怕Pxe3MҴ g&ץy]C-=6(rrC?-ؤo=`"{4;~;qd u,FQ O_U*x~(gkj ASԠzUbl/[$H-t{W5%IhlګsCoy"eΤە þZoE\/ bu?$gyQ+U=z}#<3~*VU)?3֩?VN;57\L_sjSIREA$m,h?DoM*U^5w ")م<7=gh祥KߎLWYy/Zp>| Ӹma?翱NircxpR,3Jƭ͹MHeۙx+6AX;ni'nz\Mf^,`R~*3I ?}o}ZRI%o=bTYטv!!vXys)vfV//џd"HOwoZKKCFъoß|s7_6mL XFW0X=[gXJ(D.9c{ɸvz;]3P*(Ti&c]~'Y3D`6_pbc f;x)4K(ί Դ|i:Jp,_~7r?jFӤRHj;^Ǹ19 ɏJy͠w!Wjܥh}?16 G0HN>J|zHyӖ=!,rϫ0`H'lCwqg@*Xt5Tq(KӚ`P5裑|F28V\1)G72M # z9.sƦ>[T+*Ɗ2Fҿs,?Bh%OIpqXl`IRLzmkv0,KR绥֠2ΦMn叄- < &oFAa.Okx`o# rrl@bpJ6u շsg(b}mB@hyq@\/ˉ=/7Ey?@0Q/3?(7an#'e)zell"iZ2)57,am>;a:L˼bPIgG5g aOtuEw_7ZaR8[ꠒ'Ғ{0SkO0 B.&Y8#9g[(il&&L ԱQ=vkg{#y l&캗neNƱ `nlTd[H :3ne5 ;<7s.??W{pb.g \VMU(X~ `{*{EU$hx9ezP IO\㇅:(ߔ u YZ