From 25ff67b017208b030a1778d28ec81c4711aaf5de Mon Sep 17 00:00:00 2001
From: David Michael <dm0@redhat.com>
Date: Mon, 30 Jul 2018 16:26:02 +0000
Subject: [PATCH 1/2] bump(net-misc/curl): sync with upstream

---
 .../md5-cache/net-misc/curl-7.60.0-r1         |  15 ++
 .../metadata/md5-cache/net-misc/curl-7.61.0   |  15 ++
 .../portage-stable/net-misc/curl/Manifest     |   1 +
 .../net-misc/curl/curl-7.60.0-r1.ebuild       | 247 ++++++++++++++++++
 .../net-misc/curl/curl-7.61.0.ebuild          | 247 ++++++++++++++++++
 .../curl-7.59.0-libressl-compatibility.patch  |  70 -----
 6 files changed, 525 insertions(+), 70 deletions(-)
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-misc/curl-7.60.0-r1
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-misc/curl-7.61.0
 create mode 100644 sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.60.0-r1.ebuild
 create mode 100644 sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.61.0.ebuild
 delete mode 100644 sdk_container/src/third_party/portage-stable/net-misc/curl/files/curl-7.59.0-libressl-compatibility.patch

diff --git a/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-misc/curl-7.60.0-r1 b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-misc/curl-7.60.0-r1
new file mode 100644
index 0000000000..195a78c4a5
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-misc/curl-7.60.0-r1
@@ -0,0 +1,15 @@
+DEFINED_PHASES=compile configure install prepare test
+DEPEND=ldap? ( net-nds/openldap[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) brotli? ( app-arch/brotli:= ) ssl? ( curl_ssl_axtls? ( net-libs/axtls:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_gnutls? ( net-libs/gnutls:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] dev-libs/nettle:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_libressl? ( dev-libs/libressl:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) curl_ssl_mbedtls? ( net-libs/mbedtls:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_openssl? ( dev-libs/openssl:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) curl_ssl_nss? ( dev-libs/nss:0[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) ) http2? ( net-libs/nghttp2[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) idn? ( net-dns/libidn2:0[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) adns? ( net-dns/c-ares:0[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) kerberos? ( >=virtual/krb5-0-r1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) metalink? ( >=media-libs/libmetalink-0.1.1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) rtmp? ( media-video/rtmpdump[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) ssh? ( net-libs/libssh2[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) sys-libs/zlib[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] >=virtual/pkgconfig-0-r1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] test? ( sys-apps/diffutils dev-lang/perl ) >=app-portage/elt-patches-20170422 !<sys-devel/gettext-0.18.1.1-r3 || ( >=sys-devel/automake-1.16.1:1.16 >=sys-devel/automake-1.15.1:1.15 ) >=sys-devel/autoconf-2.69 >=sys-devel/libtool-2.4
+DESCRIPTION=A Client that groks URLs
+EAPI=6
+HOMEPAGE=https://curl.haxx.se/
+IUSE=adns brotli http2 idn ipv6 kerberos ldap metalink rtmp samba ssh ssl static-libs test threads curl_ssl_axtls curl_ssl_gnutls curl_ssl_libressl curl_ssl_mbedtls curl_ssl_nss +curl_ssl_openssl curl_ssl_winssl elibc_Winnt abi_x86_32 abi_x86_64 abi_x86_x32 abi_mips_n32 abi_mips_n64 abi_mips_o32 abi_ppc_32 abi_ppc_64 abi_s390_32 abi_s390_64
+KEYWORDS=~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~ppc-aix ~x64-cygwin ~amd64-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris
+LICENSE=MIT
+RDEPEND=ldap? ( net-nds/openldap[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) brotli? ( app-arch/brotli:= ) ssl? ( curl_ssl_axtls? ( net-libs/axtls:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_gnutls? ( net-libs/gnutls:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] dev-libs/nettle:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_libressl? ( dev-libs/libressl:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) curl_ssl_mbedtls? ( net-libs/mbedtls:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_openssl? ( dev-libs/openssl:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) curl_ssl_nss? ( dev-libs/nss:0[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) ) http2? ( net-libs/nghttp2[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) idn? ( net-dns/libidn2:0[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) adns? ( net-dns/c-ares:0[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) kerberos? ( >=virtual/krb5-0-r1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) metalink? ( >=media-libs/libmetalink-0.1.1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) rtmp? ( media-video/rtmpdump[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) ssh? ( net-libs/libssh2[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) sys-libs/zlib[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?]
+REQUIRED_USE=curl_ssl_winssl? ( elibc_Winnt ) threads? ( !adns ) ssl? ( ^^ ( curl_ssl_axtls curl_ssl_gnutls curl_ssl_libressl curl_ssl_mbedtls curl_ssl_nss curl_ssl_openssl curl_ssl_winssl ) )
+RESTRICT=test
+SLOT=0
+SRC_URI=https://curl.haxx.se/download/curl-7.60.0.tar.bz2
+_eclasses_=autotools	d0e5375d47f4c809f406eb892e531513	desktop	1b286a7e7143d8c4ec89cd0d2743a097	epatch	9a5f039771f143195164a15a4faa41a1	estack	43ddf5aaffa7a8d0482df54d25a66a1f	eutils	5b8ce72259e08104b337fe28c6de5dbc	libtool	0081a71a261724730ec4c248494f044d	ltprune	607e058da37aa6dabfa408b7d61da72e	multibuild	35719a9cd25ec71ee49c966f6868454c	multilib	97f470f374f2e94ccab04a2fb21d811e	multilib-build	45f0e78dba7de5c77988265229b4402a	multilib-minimal	bfa1226d0f1fa0093d10b84acd029633	prefix	e51c7882b7b721e54e684f7eb143cbfe	preserve-libs	ef207dc62baddfddfd39a164d9797648	toolchain-funcs	1e35303c63cd707f6c3422b4493d5607	vcs-clean	2a0f74a496fa2b1552c4f3398258b7bf
+_md5_=4c11dffbef830d68d1024fa57d0c0e56
diff --git a/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-misc/curl-7.61.0 b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-misc/curl-7.61.0
new file mode 100644
index 0000000000..8a3536d28b
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-misc/curl-7.61.0
@@ -0,0 +1,15 @@
+DEFINED_PHASES=compile configure install prepare test
+DEPEND=ldap? ( net-nds/openldap[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) brotli? ( app-arch/brotli:= ) ssl? ( curl_ssl_axtls? ( net-libs/axtls:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_gnutls? ( net-libs/gnutls:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] dev-libs/nettle:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_libressl? ( dev-libs/libressl:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) curl_ssl_mbedtls? ( net-libs/mbedtls:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_openssl? ( dev-libs/openssl:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) curl_ssl_nss? ( dev-libs/nss:0[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) ) http2? ( net-libs/nghttp2[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) idn? ( net-dns/libidn2:0[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) adns? ( net-dns/c-ares:0[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) kerberos? ( >=virtual/krb5-0-r1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) metalink? ( >=media-libs/libmetalink-0.1.1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) rtmp? ( media-video/rtmpdump[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) ssh? ( net-libs/libssh2[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) sys-libs/zlib[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] >=virtual/pkgconfig-0-r1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] test? ( sys-apps/diffutils dev-lang/perl ) >=app-portage/elt-patches-20170422 !<sys-devel/gettext-0.18.1.1-r3 || ( >=sys-devel/automake-1.16.1:1.16 >=sys-devel/automake-1.15.1:1.15 ) >=sys-devel/autoconf-2.69 >=sys-devel/libtool-2.4
+DESCRIPTION=A Client that groks URLs
+EAPI=6
+HOMEPAGE=https://curl.haxx.se/
+IUSE=adns brotli http2 idn ipv6 kerberos ldap metalink rtmp samba ssh ssl static-libs test threads curl_ssl_axtls curl_ssl_gnutls curl_ssl_libressl curl_ssl_mbedtls curl_ssl_nss +curl_ssl_openssl curl_ssl_winssl elibc_Winnt abi_x86_32 abi_x86_64 abi_x86_x32 abi_mips_n32 abi_mips_n64 abi_mips_o32 abi_ppc_32 abi_ppc_64 abi_s390_32 abi_s390_64
+KEYWORDS=alpha amd64 arm arm64 hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 ~ppc-aix ~x64-cygwin ~amd64-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris
+LICENSE=MIT
+RDEPEND=ldap? ( net-nds/openldap[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) brotli? ( app-arch/brotli:= ) ssl? ( curl_ssl_axtls? ( net-libs/axtls:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_gnutls? ( net-libs/gnutls:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] dev-libs/nettle:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_libressl? ( dev-libs/libressl:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) curl_ssl_mbedtls? ( net-libs/mbedtls:0=[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) curl_ssl_openssl? ( dev-libs/openssl:0=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) curl_ssl_nss? ( dev-libs/nss:0[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] app-misc/ca-certificates ) ) http2? ( net-libs/nghttp2[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) idn? ( net-dns/libidn2:0[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) adns? ( net-dns/c-ares:0[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) kerberos? ( >=virtual/krb5-0-r1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) metalink? ( >=media-libs/libmetalink-0.1.1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) rtmp? ( media-video/rtmpdump[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) ssh? ( net-libs/libssh2[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?] ) sys-libs/zlib[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?]
+REQUIRED_USE=curl_ssl_winssl? ( elibc_Winnt ) threads? ( !adns ) ssl? ( ^^ ( curl_ssl_axtls curl_ssl_gnutls curl_ssl_libressl curl_ssl_mbedtls curl_ssl_nss curl_ssl_openssl curl_ssl_winssl ) )
+RESTRICT=test
+SLOT=0
+SRC_URI=https://curl.haxx.se/download/curl-7.61.0.tar.bz2
+_eclasses_=autotools	d0e5375d47f4c809f406eb892e531513	desktop	1b286a7e7143d8c4ec89cd0d2743a097	epatch	9a5f039771f143195164a15a4faa41a1	estack	43ddf5aaffa7a8d0482df54d25a66a1f	eutils	5b8ce72259e08104b337fe28c6de5dbc	libtool	0081a71a261724730ec4c248494f044d	ltprune	607e058da37aa6dabfa408b7d61da72e	multibuild	35719a9cd25ec71ee49c966f6868454c	multilib	97f470f374f2e94ccab04a2fb21d811e	multilib-build	45f0e78dba7de5c77988265229b4402a	multilib-minimal	bfa1226d0f1fa0093d10b84acd029633	prefix	e51c7882b7b721e54e684f7eb143cbfe	preserve-libs	ef207dc62baddfddfd39a164d9797648	toolchain-funcs	1e35303c63cd707f6c3422b4493d5607	vcs-clean	2a0f74a496fa2b1552c4f3398258b7bf
+_md5_=73fcf4523ef2c21b4ba2a33d7f992ccb
diff --git a/sdk_container/src/third_party/portage-stable/net-misc/curl/Manifest b/sdk_container/src/third_party/portage-stable/net-misc/curl/Manifest
index cffc11ad33..4520e5eba8 100644
--- a/sdk_container/src/third_party/portage-stable/net-misc/curl/Manifest
+++ b/sdk_container/src/third_party/portage-stable/net-misc/curl/Manifest
@@ -1 +1,2 @@
 DIST curl-7.60.0.tar.bz2 2938400 BLAKE2B 1c80e63094b6c0e8c63265ed7a62f75aac2ba13cf86ba201d69837f32c6b0011599a33507e65234cf3dccc5aa08ee558ff9c52998c50f0288738ba3992b6bc65 SHA512 c7566bbe7289cd75d34a65b457905d54b5d07543b9fed5a762c889eb09114ad66de62c3edafd1973e87bc8e303a434e77b4e40eea1718801e79ae9256531abe9
+DIST curl-7.61.0.tar.bz2 2949354 BLAKE2B bb9fb6155aa6031d000081fa17410e772a58ec111401e7854ad0148c33169f1a7067bb04029965f117be7df20c51a6157bf93fb6439bc4a2d25849a4784baadc SHA512 4907234c75a9e52a5b81cf895bcc811d7a69f1db84a9ae1adc3af360e8cc4371f58c00925ce6bc5170f2a8072848da47a52c41f4bfedcf14274ec75802afcddd
diff --git a/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.60.0-r1.ebuild b/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.60.0-r1.ebuild
new file mode 100644
index 0000000000..4fc7647693
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.60.0-r1.ebuild
@@ -0,0 +1,247 @@
+# Copyright 1999-2018 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="6"
+
+inherit autotools eutils prefix multilib-minimal
+
+DESCRIPTION="A Client that groks URLs"
+HOMEPAGE="https://curl.haxx.se/"
+SRC_URI="https://curl.haxx.se/download/${P}.tar.bz2"
+
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~ppc-aix ~x64-cygwin ~amd64-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris"
+IUSE="adns brotli http2 idn ipv6 kerberos ldap metalink rtmp samba ssh ssl static-libs test threads"
+IUSE+=" curl_ssl_axtls curl_ssl_gnutls curl_ssl_libressl curl_ssl_mbedtls curl_ssl_nss +curl_ssl_openssl curl_ssl_winssl"
+IUSE+=" elibc_Winnt"
+
+#lead to lots of false negatives, bug #285669
+RESTRICT="test"
+
+RDEPEND="ldap? ( net-nds/openldap[${MULTILIB_USEDEP}] )
+	brotli? ( app-arch/brotli:= )
+	ssl? (
+		curl_ssl_axtls? (
+			net-libs/axtls:0=[${MULTILIB_USEDEP}]
+			app-misc/ca-certificates
+		)
+		curl_ssl_gnutls? (
+			net-libs/gnutls:0=[static-libs?,${MULTILIB_USEDEP}]
+			dev-libs/nettle:0=[${MULTILIB_USEDEP}]
+			app-misc/ca-certificates
+		)
+		curl_ssl_libressl? (
+			dev-libs/libressl:0=[static-libs?,${MULTILIB_USEDEP}]
+		)
+		curl_ssl_mbedtls? (
+			net-libs/mbedtls:0=[${MULTILIB_USEDEP}]
+			app-misc/ca-certificates
+		)
+		curl_ssl_openssl? (
+			dev-libs/openssl:0=[static-libs?,${MULTILIB_USEDEP}]
+		)
+		curl_ssl_nss? (
+			dev-libs/nss:0[${MULTILIB_USEDEP}]
+			app-misc/ca-certificates
+		)
+	)
+	http2? ( net-libs/nghttp2[${MULTILIB_USEDEP}] )
+	idn? ( net-dns/libidn2:0[static-libs?,${MULTILIB_USEDEP}] )
+	adns? ( net-dns/c-ares:0[${MULTILIB_USEDEP}] )
+	kerberos? ( >=virtual/krb5-0-r1[${MULTILIB_USEDEP}] )
+	metalink? ( >=media-libs/libmetalink-0.1.1[${MULTILIB_USEDEP}] )
+	rtmp? ( media-video/rtmpdump[${MULTILIB_USEDEP}] )
+	ssh? ( net-libs/libssh2[static-libs?,${MULTILIB_USEDEP}] )
+	sys-libs/zlib[${MULTILIB_USEDEP}]"
+
+# Do we need to enforce the same ssl backend for curl and rtmpdump? Bug #423303
+#	rtmp? (
+#		media-video/rtmpdump
+#		curl_ssl_gnutls? ( media-video/rtmpdump[gnutls] )
+#		curl_ssl_openssl? ( media-video/rtmpdump[-gnutls,ssl] )
+#	)
+
+# ssl providers to be added:
+# fbopenssl  $(use_with spnego)
+
+DEPEND="${RDEPEND}
+	>=virtual/pkgconfig-0-r1[${MULTILIB_USEDEP}]
+	test? (
+		sys-apps/diffutils
+		dev-lang/perl
+	)"
+
+# c-ares must be disabled for threads
+# only one ssl provider can be enabled
+REQUIRED_USE="
+	curl_ssl_winssl? ( elibc_Winnt )
+	threads? ( !adns )
+	ssl? (
+		^^ (
+			curl_ssl_axtls
+			curl_ssl_gnutls
+			curl_ssl_libressl
+			curl_ssl_mbedtls
+			curl_ssl_nss
+			curl_ssl_openssl
+			curl_ssl_winssl
+		)
+	)"
+
+DOCS=( CHANGES README docs/FEATURES docs/INTERNALS.md \
+	docs/MANUAL docs/FAQ docs/BUGS docs/CONTRIBUTE.md )
+
+MULTILIB_WRAPPED_HEADERS=(
+	/usr/include/curl/curlbuild.h
+)
+
+MULTILIB_CHOST_TOOLS=(
+	/usr/bin/curl-config
+)
+
+src_prepare() {
+	eapply "${FILESDIR}"/${PN}-7.30.0-prefix.patch
+	eapply "${FILESDIR}"/${PN}-respect-cflags-3.patch
+	eapply "${FILESDIR}"/${PN}-fix-gnutls-nettle.patch
+
+	sed -i '/LD_LIBRARY_PATH=/d' configure.ac || die #382241
+
+	eapply_user
+	eprefixify curl-config.in
+	eautoreconf
+
+	if [[ ${CHOST} == *-darwin17 ]] ; then
+		# https://bugs.gentoo.org/show_bug.cgi?id=637252
+		sed -i -e '/-Werror=partial-availability/s/Werror/Wno-error/g' \
+			configure || die
+	fi
+}
+
+multilib_src_configure() {
+	# We make use of the fact that later flags override earlier ones
+	# So start with all ssl providers off until proven otherwise
+	# TODO: in the future, we may want to add wolfssl (https://www.wolfssl.com/)
+	local myconf=()
+	myconf+=( --without-axtls --without-gnutls --without-mbedtls --without-nss --without-polarssl --without-ssl --without-winssl )
+	myconf+=( --without-ca-fallback --with-ca-bundle="${EPREFIX}"/etc/ssl/certs/ca-certificates.crt  )
+	if use ssl ; then
+		if use curl_ssl_axtls; then
+			einfo "SSL provided by axtls"
+			myconf+=( --with-axtls )
+		elif use curl_ssl_gnutls; then
+			einfo "SSL provided by gnutls"
+			myconf+=( --with-gnutls --with-nettle )
+		elif use curl_ssl_libressl; then
+			einfo "SSL provided by LibreSSL"
+			myconf+=( --with-ssl --with-ca-path="${EPREFIX}"/etc/ssl/certs )
+		elif use curl_ssl_mbedtls; then
+			einfo "SSL provided by mbedtls"
+			myconf+=( --with-mbedtls )
+		elif use curl_ssl_nss; then
+			einfo "SSL provided by nss"
+			myconf+=( --with-nss )
+		elif use curl_ssl_openssl; then
+			einfo "SSL provided by openssl"
+			myconf+=( --with-ssl --with-ca-path="${EPREFIX}"/etc/ssl/certs )
+		elif use curl_ssl_winssl; then
+			einfo "SSL provided by Windows"
+			myconf+=( --with-winssl )
+		else
+			eerror "We can't be here because of REQUIRED_USE."
+		fi
+	else
+		einfo "SSL disabled"
+	fi
+
+	# These configuration options are organized alphabetically
+	# within each category.  This should make it easier if we
+	# ever decide to make any of them contingent on USE flags:
+	# 1) protocols first.  To see them all do
+	# 'grep SUPPORT_PROTOCOLS configure.ac'
+	# 2) --enable/disable options second.
+	# 'grep -- --enable configure | grep Check | awk '{ print $4 }' | sort
+	# 3) --with/without options third.
+	# grep -- --with configure | grep Check | awk '{ print $4 }' | sort
+	ECONF_SOURCE="${S}" \
+	econf \
+		--enable-crypto-auth \
+		--enable-dict \
+		--enable-file \
+		--enable-ftp \
+		--enable-gopher \
+		--enable-http \
+		--enable-imap \
+		$(use_enable ldap) \
+		$(use_enable ldap ldaps) \
+		--disable-ntlm-wb \
+		--enable-pop3 \
+		--enable-rt  \
+		--enable-rtsp \
+		$(use_enable samba smb) \
+		$(use_with ssh libssh2) \
+		--enable-smtp \
+		--enable-telnet \
+		--enable-tftp \
+		--enable-tls-srp \
+		$(use_enable adns ares) \
+		--enable-cookies \
+		--enable-hidden-symbols \
+		$(use_enable ipv6) \
+		--enable-largefile \
+		--without-libpsl \
+		--enable-manual \
+		--enable-proxy \
+		--disable-sspi \
+		$(use_enable static-libs static) \
+		$(use_enable threads threaded-resolver) \
+		$(use_enable threads pthreads) \
+		--disable-versioned-symbols \
+		--without-cyassl \
+		--without-darwinssl \
+		$(use_with idn libidn2) \
+		$(use_with kerberos gssapi "${EPREFIX}"/usr) \
+		$(use_with metalink libmetalink) \
+		$(use_with http2 nghttp2) \
+		$(use_with rtmp librtmp) \
+		$(use_with brotli) \
+		--without-spnego \
+		--without-winidn \
+		--without-wolfssl \
+		--with-zlib \
+		"${myconf[@]}"
+
+	if ! multilib_is_native_abi; then
+		# avoid building the client
+		sed -i -e '/SUBDIRS/s:src::' Makefile || die
+		sed -i -e '/SUBDIRS/s:scripts::' Makefile || die
+	fi
+
+	# Fix up the pkg-config file to be more robust.
+	# https://github.com/curl/curl/issues/864
+	local priv=() libs=()
+	# We always enable zlib.
+	libs+=( "-lz" )
+	priv+=( "zlib" )
+	if use http2; then
+		libs+=( "-lnghttp2" )
+		priv+=( "libnghttp2" )
+	fi
+	if use ssl && use curl_ssl_openssl; then
+		libs+=( "-lssl" "-lcrypto" )
+		priv+=( "openssl" )
+	fi
+	grep -q Requires.private libcurl.pc && die "need to update ebuild"
+	libs=$(printf '|%s' "${libs[@]}")
+	sed -i -r \
+		-e "/^Libs.private/s:(${libs#|})( |$)::g" \
+		libcurl.pc || die
+	echo "Requires.private: ${priv[*]}" >> libcurl.pc
+}
+
+multilib_src_install_all() {
+	einstalldocs
+	prune_libtool_files --all
+
+	rm -rf "${ED}"/etc/
+}
diff --git a/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.61.0.ebuild b/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.61.0.ebuild
new file mode 100644
index 0000000000..e09b22460a
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.61.0.ebuild
@@ -0,0 +1,247 @@
+# Copyright 1999-2018 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="6"
+
+inherit autotools eutils prefix multilib-minimal
+
+DESCRIPTION="A Client that groks URLs"
+HOMEPAGE="https://curl.haxx.se/"
+SRC_URI="https://curl.haxx.se/download/${P}.tar.bz2"
+
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="alpha amd64 arm arm64 hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 ~ppc-aix ~x64-cygwin ~amd64-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris"
+IUSE="adns brotli http2 idn ipv6 kerberos ldap metalink rtmp samba ssh ssl static-libs test threads"
+IUSE+=" curl_ssl_axtls curl_ssl_gnutls curl_ssl_libressl curl_ssl_mbedtls curl_ssl_nss +curl_ssl_openssl curl_ssl_winssl"
+IUSE+=" elibc_Winnt"
+
+#lead to lots of false negatives, bug #285669
+RESTRICT="test"
+
+RDEPEND="ldap? ( net-nds/openldap[${MULTILIB_USEDEP}] )
+	brotli? ( app-arch/brotli:= )
+	ssl? (
+		curl_ssl_axtls? (
+			net-libs/axtls:0=[${MULTILIB_USEDEP}]
+			app-misc/ca-certificates
+		)
+		curl_ssl_gnutls? (
+			net-libs/gnutls:0=[static-libs?,${MULTILIB_USEDEP}]
+			dev-libs/nettle:0=[${MULTILIB_USEDEP}]
+			app-misc/ca-certificates
+		)
+		curl_ssl_libressl? (
+			dev-libs/libressl:0=[static-libs?,${MULTILIB_USEDEP}]
+		)
+		curl_ssl_mbedtls? (
+			net-libs/mbedtls:0=[${MULTILIB_USEDEP}]
+			app-misc/ca-certificates
+		)
+		curl_ssl_openssl? (
+			dev-libs/openssl:0=[static-libs?,${MULTILIB_USEDEP}]
+		)
+		curl_ssl_nss? (
+			dev-libs/nss:0[${MULTILIB_USEDEP}]
+			app-misc/ca-certificates
+		)
+	)
+	http2? ( net-libs/nghttp2[${MULTILIB_USEDEP}] )
+	idn? ( net-dns/libidn2:0[static-libs?,${MULTILIB_USEDEP}] )
+	adns? ( net-dns/c-ares:0[${MULTILIB_USEDEP}] )
+	kerberos? ( >=virtual/krb5-0-r1[${MULTILIB_USEDEP}] )
+	metalink? ( >=media-libs/libmetalink-0.1.1[${MULTILIB_USEDEP}] )
+	rtmp? ( media-video/rtmpdump[${MULTILIB_USEDEP}] )
+	ssh? ( net-libs/libssh2[static-libs?,${MULTILIB_USEDEP}] )
+	sys-libs/zlib[${MULTILIB_USEDEP}]"
+
+# Do we need to enforce the same ssl backend for curl and rtmpdump? Bug #423303
+#	rtmp? (
+#		media-video/rtmpdump
+#		curl_ssl_gnutls? ( media-video/rtmpdump[gnutls] )
+#		curl_ssl_openssl? ( media-video/rtmpdump[-gnutls,ssl] )
+#	)
+
+# ssl providers to be added:
+# fbopenssl  $(use_with spnego)
+
+DEPEND="${RDEPEND}
+	>=virtual/pkgconfig-0-r1[${MULTILIB_USEDEP}]
+	test? (
+		sys-apps/diffutils
+		dev-lang/perl
+	)"
+
+# c-ares must be disabled for threads
+# only one ssl provider can be enabled
+REQUIRED_USE="
+	curl_ssl_winssl? ( elibc_Winnt )
+	threads? ( !adns )
+	ssl? (
+		^^ (
+			curl_ssl_axtls
+			curl_ssl_gnutls
+			curl_ssl_libressl
+			curl_ssl_mbedtls
+			curl_ssl_nss
+			curl_ssl_openssl
+			curl_ssl_winssl
+		)
+	)"
+
+DOCS=( CHANGES README docs/FEATURES docs/INTERNALS.md \
+	docs/MANUAL docs/FAQ docs/BUGS docs/CONTRIBUTE.md )
+
+MULTILIB_WRAPPED_HEADERS=(
+	/usr/include/curl/curlbuild.h
+)
+
+MULTILIB_CHOST_TOOLS=(
+	/usr/bin/curl-config
+)
+
+src_prepare() {
+	eapply "${FILESDIR}"/${PN}-7.30.0-prefix.patch
+	eapply "${FILESDIR}"/${PN}-respect-cflags-3.patch
+	eapply "${FILESDIR}"/${PN}-fix-gnutls-nettle.patch
+
+	sed -i '/LD_LIBRARY_PATH=/d' configure.ac || die #382241
+
+	eapply_user
+	eprefixify curl-config.in
+	eautoreconf
+
+	if [[ ${CHOST} == *-darwin17 ]] ; then
+		# https://bugs.gentoo.org/show_bug.cgi?id=637252
+		sed -i -e '/-Werror=partial-availability/s/Werror/Wno-error/g' \
+			configure || die
+	fi
+}
+
+multilib_src_configure() {
+	# We make use of the fact that later flags override earlier ones
+	# So start with all ssl providers off until proven otherwise
+	# TODO: in the future, we may want to add wolfssl (https://www.wolfssl.com/)
+	local myconf=()
+	myconf+=( --without-axtls --without-gnutls --without-mbedtls --without-nss --without-polarssl --without-ssl --without-winssl )
+	myconf+=( --without-ca-fallback --with-ca-bundle="${EPREFIX}"/etc/ssl/certs/ca-certificates.crt  )
+	if use ssl ; then
+		if use curl_ssl_axtls; then
+			einfo "SSL provided by axtls"
+			myconf+=( --with-axtls )
+		elif use curl_ssl_gnutls; then
+			einfo "SSL provided by gnutls"
+			myconf+=( --with-gnutls --with-nettle )
+		elif use curl_ssl_libressl; then
+			einfo "SSL provided by LibreSSL"
+			myconf+=( --with-ssl --with-ca-path="${EPREFIX}"/etc/ssl/certs )
+		elif use curl_ssl_mbedtls; then
+			einfo "SSL provided by mbedtls"
+			myconf+=( --with-mbedtls )
+		elif use curl_ssl_nss; then
+			einfo "SSL provided by nss"
+			myconf+=( --with-nss )
+		elif use curl_ssl_openssl; then
+			einfo "SSL provided by openssl"
+			myconf+=( --with-ssl --with-ca-path="${EPREFIX}"/etc/ssl/certs )
+		elif use curl_ssl_winssl; then
+			einfo "SSL provided by Windows"
+			myconf+=( --with-winssl )
+		else
+			eerror "We can't be here because of REQUIRED_USE."
+		fi
+	else
+		einfo "SSL disabled"
+	fi
+
+	# These configuration options are organized alphabetically
+	# within each category.  This should make it easier if we
+	# ever decide to make any of them contingent on USE flags:
+	# 1) protocols first.  To see them all do
+	# 'grep SUPPORT_PROTOCOLS configure.ac'
+	# 2) --enable/disable options second.
+	# 'grep -- --enable configure | grep Check | awk '{ print $4 }' | sort
+	# 3) --with/without options third.
+	# grep -- --with configure | grep Check | awk '{ print $4 }' | sort
+	ECONF_SOURCE="${S}" \
+	econf \
+		--enable-crypto-auth \
+		--enable-dict \
+		--enable-file \
+		--enable-ftp \
+		--enable-gopher \
+		--enable-http \
+		--enable-imap \
+		$(use_enable ldap) \
+		$(use_enable ldap ldaps) \
+		--disable-ntlm-wb \
+		--enable-pop3 \
+		--enable-rt  \
+		--enable-rtsp \
+		$(use_enable samba smb) \
+		$(use_with ssh libssh2) \
+		--enable-smtp \
+		--enable-telnet \
+		--enable-tftp \
+		--enable-tls-srp \
+		$(use_enable adns ares) \
+		--enable-cookies \
+		--enable-hidden-symbols \
+		$(use_enable ipv6) \
+		--enable-largefile \
+		--without-libpsl \
+		--enable-manual \
+		--enable-proxy \
+		--disable-sspi \
+		$(use_enable static-libs static) \
+		$(use_enable threads threaded-resolver) \
+		$(use_enable threads pthreads) \
+		--disable-versioned-symbols \
+		--without-cyassl \
+		--without-darwinssl \
+		$(use_with idn libidn2) \
+		$(use_with kerberos gssapi "${EPREFIX}"/usr) \
+		$(use_with metalink libmetalink) \
+		$(use_with http2 nghttp2) \
+		$(use_with rtmp librtmp) \
+		$(use_with brotli) \
+		--without-spnego \
+		--without-winidn \
+		--without-wolfssl \
+		--with-zlib \
+		"${myconf[@]}"
+
+	if ! multilib_is_native_abi; then
+		# avoid building the client
+		sed -i -e '/SUBDIRS/s:src::' Makefile || die
+		sed -i -e '/SUBDIRS/s:scripts::' Makefile || die
+	fi
+
+	# Fix up the pkg-config file to be more robust.
+	# https://github.com/curl/curl/issues/864
+	local priv=() libs=()
+	# We always enable zlib.
+	libs+=( "-lz" )
+	priv+=( "zlib" )
+	if use http2; then
+		libs+=( "-lnghttp2" )
+		priv+=( "libnghttp2" )
+	fi
+	if use ssl && use curl_ssl_openssl; then
+		libs+=( "-lssl" "-lcrypto" )
+		priv+=( "openssl" )
+	fi
+	grep -q Requires.private libcurl.pc && die "need to update ebuild"
+	libs=$(printf '|%s' "${libs[@]}")
+	sed -i -r \
+		-e "/^Libs.private/s:(${libs#|})( |$)::g" \
+		libcurl.pc || die
+	echo "Requires.private: ${priv[*]}" >> libcurl.pc
+}
+
+multilib_src_install_all() {
+	einstalldocs
+	prune_libtool_files --all
+
+	rm -rf "${ED}"/etc/
+}
diff --git a/sdk_container/src/third_party/portage-stable/net-misc/curl/files/curl-7.59.0-libressl-compatibility.patch b/sdk_container/src/third_party/portage-stable/net-misc/curl/files/curl-7.59.0-libressl-compatibility.patch
deleted file mode 100644
index e7ee6c3ab1..0000000000
--- a/sdk_container/src/third_party/portage-stable/net-misc/curl/files/curl-7.59.0-libressl-compatibility.patch
+++ /dev/null
@@ -1,70 +0,0 @@
-From da51ddee81e10398172f0baf3327b5db82846175 Mon Sep 17 00:00:00 2001
-From: Bernard Spil <brnrd@FreeBSD.org>
-Date: Mon, 2 Apr 2018 19:04:06 +0200
-Subject: [PATCH] openssl: fix build with LibreSSL 2.7
-
- - LibreSSL 2.7 implements (most of) OpenSSL 1.1 API
-
-Fixes #2319
-Closes #2447
-Closes #2448
-
-Signed-off-by: Bernard Spil <brnrd@FreeBSD.org>
----
- lib/vtls/openssl.c | 15 +++++++++------
- 1 file changed, 9 insertions(+), 6 deletions(-)
-
-diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
-index 2a6b3cfac..bbb8ec766 100644
---- a/lib/vtls/openssl.c
-+++ b/lib/vtls/openssl.c
-@@ -104,7 +104,8 @@
- #endif
- 
- #if (OPENSSL_VERSION_NUMBER >= 0x10100000L) && /* OpenSSL 1.1.0+ */ \
--  !defined(LIBRESSL_VERSION_NUMBER)
-+    !(defined(LIBRESSL_VERSION_NUMBER) && \
-+      LIBRESSL_VERSION_NUMBER < 0x20700000L)
- #define SSLEAY_VERSION_NUMBER OPENSSL_VERSION_NUMBER
- #define HAVE_X509_GET0_EXTENSIONS 1 /* added in 1.1.0 -pre1 */
- #define HAVE_OPAQUE_EVP_PKEY 1 /* since 1.1.0 -pre3 */
-@@ -128,7 +129,8 @@ static unsigned long OpenSSL_version_num(void)
- #endif
- 
- #if (OPENSSL_VERSION_NUMBER >= 0x1000200fL) && /* 1.0.2 or later */ \
--  !defined(LIBRESSL_VERSION_NUMBER)
-+    !(defined(LIBRESSL_VERSION_NUMBER) && \
-+      LIBRESSL_VERSION_NUMBER < 0x20700000L)
- #define HAVE_X509_GET0_SIGNATURE 1
- #endif
- 
-@@ -147,7 +149,7 @@ static unsigned long OpenSSL_version_num(void)
-  * Whether SSL_CTX_set_keylog_callback is available.
-  * OpenSSL: supported since 1.1.1 https://github.com/openssl/openssl/pull/2287
-  * BoringSSL: supported since d28f59c27bac (committed 2015-11-19)
-- * LibreSSL: unsupported in at least 2.5.1 (explicitly check for it since it
-+ * LibreSSL: unsupported in at least 2.7.2 (explicitly check for it since it
-  *           lies and pretends to be OpenSSL 2.0.0).
-  */
- #if (OPENSSL_VERSION_NUMBER >= 0x10101000L && \
-@@ -259,7 +261,9 @@ static void tap_ssl_key(const SSL *ssl, ssl_tap_state_t *state)
-   if(!session || !keylog_file_fp)
-     return;
- 
--#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
-+#if OPENSSL_VERSION_NUMBER >= 0x10100000L && \
-+    !(defined(LIBRESSL_VERSION_NUMBER) && \
-+      LIBRESSL_VERSION_NUMBER < 0x20700000L)
-   /* ssl->s3 is not checked in openssl 1.1.0-pre6, but let's assume that
-    * we have a valid SSL context if we have a non-NULL session. */
-   SSL_get_client_random(ssl, client_random, SSL3_RANDOM_SIZE);
-@@ -2082,8 +2086,7 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex)
-   case CURL_SSLVERSION_TLSv1_2:
-   case CURL_SSLVERSION_TLSv1_3:
-     /* it will be handled later with the context options */
--#if (OPENSSL_VERSION_NUMBER >= 0x10100000L) && \
--    !defined(LIBRESSL_VERSION_NUMBER)
-+#if (OPENSSL_VERSION_NUMBER >= 0x10100000L)
-     req_method = TLS_client_method();
- #else
-     req_method = SSLv23_client_method();

From 1a764e4b9ce8deba6706749b0d6a8964215f0566 Mon Sep 17 00:00:00 2001
From: David Michael <dm0@redhat.com>
Date: Mon, 30 Jul 2018 16:26:44 +0000
Subject: [PATCH 2/2] bump(metadata/glsa): sync with upstream

---
 .../portage-stable/metadata/glsa/Manifest     |  30 +++++------
 .../metadata/glsa/Manifest.files.gz           | Bin 426775 -> 427414 bytes
 .../metadata/glsa/glsa-201807-01.xml          |  49 +++++++++++++++++
 .../metadata/glsa/glsa-201807-02.xml          |  51 ++++++++++++++++++
 .../metadata/glsa/glsa-201807-03.xml          |  48 +++++++++++++++++
 .../metadata/glsa/glsa-201807-04.xml          |  50 +++++++++++++++++
 .../metadata/glsa/timestamp.chk               |   2 +-
 .../metadata/glsa/timestamp.commit            |   2 +-
 8 files changed, 215 insertions(+), 17 deletions(-)
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-01.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-02.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-03.xml
 create mode 100644 sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-04.xml

diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest
index 799a8a09f2..7b4574dde4 100644
--- a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest
@@ -1,23 +1,23 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA512
 
-MANIFEST Manifest.files.gz 426775 BLAKE2B 0a924e893bc7d02fb872d05ff4b63ad4d237b75711b0c6a09d632bbc7eeb1a14506448cef5b376ba25b504b6e4c16d40d6662762ee100207b8ee92abf972340d SHA512 811f8949726f5f714f93c3522b7ae6b1eb5aad37a0229ee9d5f5ee0ddb8c5273a4f3b0d4055d44a1dbeed5fc458aeb2e5620e47889961d9b7a4e961c24e5877b
-TIMESTAMP 2018-06-26T03:08:38Z
+MANIFEST Manifest.files.gz 427414 BLAKE2B 03f31e82901c67c54c9e2a393ac3d0d1d25bb342aa53f12ef4cda3b8ecae5db556d030b733bc4f3fdba54171e0a9a96a6e0e3c4ab9239061ea537618ba745ce1 SHA512 01f241123b41771420b69c122806bf7c9c1b4f6f77886ed4e9a9737364198dc0d9cc296f967c056f28a2af511a8d2680a7991527b5ca7723fbd12dcffe525a32
+TIMESTAMP 2018-07-30T15:38:34Z
 -----BEGIN PGP SIGNATURE-----
 
-iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAlsxrjZfFIAAAAAALgAo
+iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAltfMPpfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEUx
 RDZBQkI2M0JGQ0ZCNEJBMDJGREYxQ0VDNTkwRUVBQzkxODkyNTAACgkQ7FkO6skY
-klCMpBAAnXInYoDgylCxujtbrePIEkh+9fLMXgdIZCCN0UoEddA8me1T4Dz/ZwWu
-x+qJuVSyq0vokydf7pMS5iKrTxac6MuVxyHL/CuqFEYSilNlGfnzbtITmTckxOKH
-dzk1s3tyjL07dpAB/idAh9l6cgM3inKpOc4u1+/ryijJKpz8xWYrwillBSW/IqWb
-9xMdxuPzYHC/HI1A0qrFNPIP7dBKRgOTzlacedvmxB0n0UcBSznw6ahR4vTsVJiV
-ISjPNwkDRsd4Izypppfj0rOdZ7kN8xO1YFP061pssVgKbEoNVU36FX9zK+O6binl
-9NkuJ5NBW320vdbUO3EwLl+qKUylTa71xYyK2lf8HrySSrmGf9ECq6up8ep7NwHv
-anhkjpsBWTSOnaN0ty8cSif7WO6zEmLUofoUpYP8NdUh86TaEXxirSZbUSl5LoLU
-iEw29QQiaemrI3+nV7/FoDt61Bs3gl7FOkBiT8iC3W6FDQcaqBT7odjq4WonDsdQ
-jCadsZdzOJhybRgUOsOA7UCa2Vmk9zRu4MNdqn8euuZwh2/KC1vcJ+QnFKzQEK82
-N/+NqPr/PTuylsOVeohYi/QYZYN34B6BvVclVWnV3mZvmla+I4euSpGep7/JL5Sx
-nXw5zOsCSDBLXyEJYDTt8T3EXLs8+JtrAhEugXjMCTe8rmnWmiA=
-=Ut/r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+=OVLH
 -----END PGP SIGNATURE-----
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest.files.gz b/sdk_container/src/third_party/portage-stable/metadata/glsa/Manifest.files.gz
index f740db1e7b5d2c21196813ad783e5b6b4d09a2ec..2c573718af44839e6adab1c4d1e9b4eeb8e0501c 100644
GIT binary patch
delta 15409
zcmV-1JkG<Hh8mWO8i0fWgaU*Egam{Iv<5gve{6Fk$&u~)|E)qR5a|4J_XP-o{z!m!
zzz-+%APgixvw!FuW@SXYsX+JibXR3%deBL;Yc#v}cA$=q$*T2m!hAVzVm0Y3^Aj9d
zRR;6)ZnIsLJw(z_mQtp7K5hD58b8atU{`CDd1%b0!6Z;vDf7N8c8Ro{#tt-9W$M&6
zf9E;N<-B&{iO+mA{VR?=x_N!ciGSv|^ig`tXJ|HfY|rNTJeT4}L_H9Z9%+C=jb1@q
zK!#gw#Ro{qKT-o<JY9|mMT(N>_9h5AY%NJrn$lEh<>2-#ege=RwjinCBGn%d*Gh}8
ze9z01tq6kp%}{w6GKra)tjnKJ-iT9Xe^aC=FfzP`d!~b|b=pj0qnyXNvMu2;4t~YP
z<+f_kR@_~XDYLYBXX8@h*X{pH1gRj)6R`YcwSHw5k9ST?Qr{mn>$V2iMM|-C2}EM!
zuuG_~Si?m040bq*HtB`ee-c*5L9lAc-#$o#VG9M@VLz#U(;;k=HxW-xP?B%Vm$gR*
z8h_*UV>U)shrAV?m8cjfwkd7dG)fQ(V%Ri_4)At?c9s0wXFCo}&^;+ik~l#sYqVZ!
zoNsUWrEdvE;rfyjf9JOVejk>A)xESY6;GhI1G$6ZqXLr^zSRCJuevc#({P=wO~?WF
z1?xju@2nanoP&5yA;|1HoWCLJkg=0|j(-g<Z_9o1M5Q#*`eExry`nrgY)yhvSA~3#
zX#nDxU`)2@xA&Zcd@?4R!uyS;`oY?kD;g3Jua&Z2%eK0%Ng!eV?)sZ@IEjK9xe#zH
zYFU0s>bg@kYE{10E1oZ_^=sSq(N7#2u><5!FRtYndqV_Fsm(cXYFIX+QfTAaI)58s
zC>^Q5t%P(%Aonz$;wbXNcs>v<IdXfUD$M_6F%}Qsr>+HOyuy}POKH{{0Q<^`s`uze
z60}c0w)Ls{!bcv;f#s~Jvdx-6vR#r6^x~>3*wg@HxWhG@zxhDR#W~cfr2rCDX{$??
z*?cNzlH%qKx4GxLf)jpUa^mm&7Ju;ceG+@wgSZYtdLswu>_c%iG8bSuPp|nNGk4It
zLwRMwo3EK@za*=&O$ZuA_Sa3|1aXkr4seZ=Q>CAd%{m9J*A2ifJGEXm(}m#oUai$b
zIG1uks|X=-=R4jc1}j-2IeQ_e$O30hGic+?+fwoLl2BcMK%F(c>{s#qi3W$-m(Id^
zm(WQD93i+n?e^#ZZs*NUaP+N7tg-1#=-M(hC#6`*<o{JDeWI6_4N3+X0dtopN(NUm
zmKou!-T7PG`kmkUkk9aLZ`Tozfv|axcxo(39P~sC<xL5{&T<>HS0z+)FjbRL@H_LD
zu}TId8tx#-P+)~SsI|#vRcuijPgkUE673y1Ws&Wd@Ja?B8EKd7o{`uk^)(%jyn=SJ
z8NEY#{_4KQ-}{#+O9ml-X$n$LC=8jTzUrKMH=<_gt?|a429vC)%Dm<vTmD*b-xM3q
zf-yan0g4al|JB8y3hg(jwrhV-?H~<mUTy10KR`4IGq;G7Fh$$|#@du0XSNC@zAoKV
zbZG$rJEFw?>yFNiK%Diqw3z+bfn<%ufne7wZ7bs=QNVmztv}L#!^cNw-?mJd&c5EV
zqklYU#}L9?l)YPe#4hDCz?ebN!=!SwO%}yoDY)5ZuAScSaT4pjF6YmyJ4lHkr+7v!
zNR(}sC^k8_Sxa(z%r69?19esiNUo~abV;*WMJb{>G0Bc|0QBl-NqiDWg!M?31cVaD
zy&8$~5(ee{rmd%cwQY8&kmB>41QQnZ0m=|ksA!3P>d8b|K$>NLS*>5`;Sb4lrMomP
zp_uDlW`L8rG;Vg(3Uhl*dXZdt+fKX6Hand<JBXDmX`gKQuz6k78Qsp6?Z1o9B2m)8
zN@1X|Fm}aVoX;=L%&5tD=NG#Ggi8tGy=hf{aW`H!!&N1JkFDQ1SQZYAc6pO0IivVk
zZGL_yJSVv_g7-oLFH1pHd}M6O#|d;KD=4eWViUF6(A+I(N0zkDo1ow?tCjzr-%@{%
zS|M+h!%Pt|s^cQZX>DhmQFd-__uxart;?^`iA>%Sh@W#ZRM@VGLMThj1Is8-mj)kM
zanq$uTeW;rqugOzO)_Dzd7rhVd|~;Z4OZZc1Q2<4Oi*llFZn;49^ds#b6z!>8bhIi
zmC4{(;wq2RS^%)?kSQ#gjmWi{^5j{v_U(*U$lJQ51WhQVcG{PiO$H_bN|(P)1~Y%|
z<=5(L0B;)|6W2ri-~hS)kK2uZ2ctZseWfNGWL|Q_PCZK`C$B@P)}aM8XBkj-v6Coj
z3*l3<1P3KXyfp&$th4!aD2`Hv4gkTw3ZCxO`g1QIJ`@hXmx@O7`m*!g?NMP^Cu|jj
z*;J3J?SzHqlnti~2vP4IenJe#-$Z{Ow9{lUoyY7-P=;WM5Vcv(tUd_)S=%=h5Fe*q
zhv~=b>#a3HIHSb9Z=x6JrQ2nm0OnTiQ-A56?70Se`++wqRX=(`Bc+*r1xVx<2Ia-j
zLdt2CQx{oMu%kg5e{x9k7G;rAVE=K*X#+Fw0nu-(^%J-Fm>)OICZ5|d5Xyf9PCaEG
zp+cwCs}Gw5hod(t5s4nAN;S4G$>9pCIJ3z=y-6a*f^@RBpeksQ!U%?PFs8D&0yb3?
zuFMCyy^^JTXr!jM5m~HcVt$=GKV%OoUau&Iu4C?fO~YCPIiGUlRdCcYZg}b8FzV{g
zD}hWdRj-dkk`2L^(zT(viavit7Qrz{S2uS%*5rOBiazVhYURH<`z7vSBAqo)wn{ec
z$Qx>e4t)oTH1o)ROBxf@tf(IoYeeSVevrEQR3{90QB)I=)lN$RACNhb9z1Z`PSkwU
zF$=zfOlSp@)`zV1<8*X-_$Yx**`%gLcG{sRThmD+R2k(b>$S;FL*sw*c(Mn{+?nvL
zO;z1ekf(T=l_*&OUiVm6D%P?P^cBy_UQ;xMRG78krW}6em(_als^3u_Kz{GpFi#P6
zo|XjhvVWEK<hF(0NU7dU21vG4<Fu41JwESMUL&a0MG8<g$fHTVEE<b?ndjvQIFO|w
z7e$5iwl}LYx0YP*xOIOe4lN%@L!5Pa^c6znqlTcSuCsm$T4$B4S?S?SX?rN@iMUmr
zk2sa02YMt;W!b~d%uBjds8bOEo$pAB_WhL}TBgSI+*&HH^kubvvHXX5f!vyr+{=8#
z>#?)XDsh&!vey*+X{lAbHK#ZVAs;!UrNgbm$&(bx!7g4f6CZz~{a1DKr^B$Sa!}v0
zZF34+tW>3Lb;P@4E<AfW-`&@9T2_<cqn>d5WZBo#j(l=BjtmT9wNdAgld2)0R&SS_
z-eI9t6nr%B;>UvmPgxT4*ciJ3lZsajx-@78M|x$&E3YH3#<wMfd|9nO^IKHo@5)Er
zheF!5xg|knTk3yAvPPB1b3FuTmg<qMuH~x1l&pKyY*bd=qI-w#fW6f0Ec@RZo73qe
zRSx-ba+N{O6Um<kn1Io&u2ge=-PlO1)`}f8bUB>Da!A6aj7xoKbVrHlwYoe3itVBw
ziJG`tly-+RgVwuI#RhTbIDV=`XBd5P{7NwBIaWgY8B2c?p!;$lMeUF0%WD1FAARa?
zu~q=Z-6d7?-ti{Rj@l{Y!%evzUYwAiwur2bR#Tdp92Dsq>_0#SImRi{rN|$Uv`8p8
z3|`cHL!cRiN?u~C?@z^|t49GxzIxTCR+QJY*#vxcuI-uo(K--J^Sz=4xpzvWQc8<E
zrpYQ$OeTNFfPwny)Q4PL;E)8LqqGTZJ<~Q(ZTdThLz6r&$T*Dg(&vD<;m!J&)w=%{
z(_K5gvyHrj*GlK?4(}hE)~RXzQP~khboJ|5Rj`<@I_l*OjvzlvA3%j;h+K{(nx2bZ
z$ANcl6~-4drAwUm_hf>}{SA%_nCFEc<|F0=czAyoAA2e)^j005pQFaKv`ScdMiS~5
z2hRI_0t1npthjaw&Q_NFK(0~V19%mKWJ#H+Aj7b=B)at+NEc`cTyERXOku|G_iDW@
zn6D2mhFmlyF&y<&_Vi-Il6vE_MGw6dQE&8gsACd<9m#89_NDQeV$}-o+Tf=SVK=bZ
zTlIgoFN)CCLq=G-OBb6x<Rk5fWy%$8Q;zo>1c6}0BX6n5p>(pm$lxeo8Hd<S(~R-}
z33dKc{?}<m^=T6e$(!R;b2Ms^d+p#Hwf8Nf0mQ<ZazyoVBwcKeTdK^i6q5?Xm!#Ei
ztMx0H{$XB_)XM~nKUyOf2QGpRPsCslj#q!z=R*c#>)fPrvU^f<!rNJ%b!kt;X`;CH
zwhuS~=q9cz5=SV#oCoCy&F%Ok|3`O_*(-mSi@JsF@fOo1eI>r(rIJ>NgIE`c>`kYn
zZk7u&U~;kLc@iM(b1RC!o<s5qr`*iVA5Nb7;S6C_MPz30ca#>N5{FH=I#on_F>-$h
z`Hq!S`vsl;N~Rwlc9UWkRn(@IDR~b*9c-!^$+^7H)2rVJrn?mK)UobVI`BFM`<j#x
zh^ncnOS89MHE8xCAyJy?JRK*`%JWJ~UF;W~tVotQ^hr87Ublf&T{PVS9k(Ylhf&nv
zqI4$jo2<1U?iX8Dtueh8*vv&y^um8Ptz?XSGf4IYrIAI$=H}|at_cY_>1htvQDNUs
z<<22oaUfakmvnqV5Wn~G)M@Xywa(6?vFVd|(OcN#0mxiK=%<D=QRC^sPMr1`RnM6D
z9J;1;Cp7pJ61Bs$>z4t6`VkA&i~dkWwK(}FBn};a)x|EHS-aI)bL2OhlXQR15eI@R
zQwpB<+ntWB4D|!d{{%ovbx94`PBvhmsJ<>GyHOjR-p>Fx!T3}ln=!eqFe%1)b*H`Z
zDlwQC3^38kYdGpu*$M4Sl>c)tpTmd!(WTE?+_I5gK1HhPHiVOuXueL0BJZa7nY`6*
zB&Y84zTEoPA?k3czIe&2R1$xr5Q}-+#II9atq(C(3c!D~MC@7FL`UsH)_iJxUib33
z<wBexf#oqaEOm>5S^#&KW>{2#iq_ftkq@s?8Syk*V`+eyrBv!BS}zNUM~^OEv`F7}
zFK~vqzV5TzKhZK-F*@g>x~7g_qx>(gI(<$gQ2{iK59fB+_!+q&e1d;GkFA-kT&pgC
z)cwkorIStd=oqO7L6@rpHs|BmXVLA>F1zmBEvbkYym_W*t4TxHE=h(BVCjE5nH4{<
zJe!lCsN7z$zmeCe{jg&5#FpN-QF?w9^R^L`fvVe~nV>c(Z}jHmnL1BJk#+Bx<C{br
zY-msAL#^eKvpu_at1@29O`dJKJ(Vx$^!Hx={@}iPp`x+PS-f&#;Vw3I9chnq7l%cF
zKa@0tTJUpmRLM5+!*08^2v#biD^tjhm3~Ta4o=Pw^%&SFDmGn<DtDbxGagcDbALt6
zw|J`89hW^<1|EMawP+nfPkM~**;fvncThnIibs!XvVn~EdO9-VaMOsHbKw|&*kAJe
ztIFbDtzRtvA*Rb~CsyZMgGO~N`R2nGyho?#a;bf=cA$GJh2%sXfKLG{Hn(9siJp(4
zeF+)z-U2H1P+C&0CwA5pVisOFWs4N`pzucY(x;aB76E^MIJ7FbDBF8GlRPLeGTBzQ
z5Nk^H#d~rVYq6r^bi&4K21)8ucgp!Fh7r|hQ1wZz<JpX`c02n`)()IQc9yngO*MQw
zeWZbvzEst}lId*j_l%8y5)jeK*mK>7)eFVqsl)IkLrJ-~pK+n=6<9QIUdmMKD}3vH
zscsB;e};eQ7#q7_*aE%A){?!A8<Vy5oU2N#4@A{6{h$_qRn_VaET`&KmI>fwWeT^q
z_py8Yj*cpIs&TVw;)G7`4Lub3bg{0j^{KxEaLC?*<Ei6NM9iLrXzf<l6$nWJi5ey~
zQv3ojc@O$!wSKYuhcb)sMtJ~Lyodk?&`$}UIJ|#4H-?W#J<c0!bV)I9>iM{{l-qrx
zQcV<gQ9HE^b{k}Fz5pQawYokd(Jty(SK}<l%b2ox8u4eI=y_Mw>Mnx(W(Xcp?KTy2
zzno}G5@xrCl6k<ZgX3^sHbf_(iu0{g*TEqNhoelvIF7Bl;czeS$a8Ub()AU>z2)Ym
zt~h_u?!=xlFMqGrOEUdqrupuI@CCMOHd%q+Qfkg^m$$j3-rzlDO0>;)AcSd7);S^?
zt;m_UWnA8eGQaIn4oXuu2@1n2-9qMKTM{v*4L2{C<hvEU@lty8e3o^U_JRN;BFzN)
zk~4{iK~=_b+}lE)O)E>i>8rXxxIn9N*~x!b-(RoAOz;A&R^7(+WdY?p;Rs}0Dl#x}
zw_UzsyXKbHOgb4C&+fmj*1Mkw`1nx5I~`ZJjmy0IgBRgFbyURl+$vxtXl^>G1t}A}
znK{&hZ5q5ZO^l<HFCeiY_qQs6<(mGCHF*7<E=^JMwv(;fuqmorr|?Itub$6RdVGI(
zwz7#wRhLEeQq+4`Hp?6yR2_6FMxyVY#?!{Nm=lNc@u)RbXn7#D?xT7T;Jny0Imix9
z$>$im3e^<J=>yvu3iHPFWwqk(P4h=Tk%W?_RFPBTt8h{eE0A4P^K!()1T9pL-Y_4B
z*8!BY))Ednp7o{<7T0J5L<LgH++u$qZ239TZTBzUQ;MJi#`4&2A`3@a(0abjIXBtA
zT20jjOgVOV)F6doEIL|yM5S4IO@=||awSwacvDVEYTNnmITweI_oe4aQ{{~JRToE1
zTi@V4v)WIfR-mKOo_dOkonrp7T0dAGsQ9j`Z{3#pa2iCaRR6>wPzd+qM3{eQ+*_%n
zOx^CDS)Zx)r6d^@II*;HjBj>4r9=s`5rP=?Sl*&gv3NOkI^G~YZ|n=_+79XCnOgg8
z7G=<*h@3i{$yg?OseY<APP6$#bS4Q9aGWquV_0jFgJW8hOG?sp78Q5U_fZpv!@CCR
z6P*HMnWbCL4JEpCwrrYB9?pNgtFX=ke_5>`EH8iH9p#me<O2ln#q~>BigphTVpQ-1
z`i!lu!z&OVDAOeS{`L|-s03_(=nRh}FG*ZB)d=r5IJd~Uxg1QRDAb=zJ3()>R|7~$
z-brr*#S!f;-a`Q~J$Rh;SdMgsiwfVn`At2T!CV@u1G*2VO4oRUkF<X_#pa?jnEc4O
z?F78oc6v5;uQ!7-PP~M3Da~rxLWQXENd0R9e6Q9omj6&$B-S_;9i0z)bmW~@bX}=#
zISZV;b4U<p&m0_+aA>~S_XynFu8!n=@7}ubnn>o|Q}Ug~$NLvP0A-}f>S*j!j(jtR
zUOsN&EWFL4_AOsMhN6F_#Pp^s3V5=|Tb)&65w(O4dQEMY(X9Yg<x>4vuJF3Y+Ids*
zpc6~r2I`Nic$uV7))sr~&NW3tACPP*qoCcpobNBIRe$X!KYBjbeMw8?7+>VY;+3*g
z;%s#nB))6ydZkPzCu>iqT$~ZhWo;gl#+F-z!sdA<f(@RQfA4?5??I_T(YZRQ)w1ch
zbnu`UVaYk&&-HN|c%KAii<WTQaxfIt^=d<IU8vg$*FNC6HFx+LYM9%8)j?^sj_OT9
zQQ_0^0YYnbxbSiKUl-}7y8>zR*`MfcRJn>UN`LWCOT78l)k-f8S@^I&YDcH$zn^VE
z!dWx^Qllty*w|kgTDNxvMIR|`2Hfp_1b&%zj3vXKfiDz79Go5HqU>SFpL1wfA#86n
zs^X$DsQ7$YcTxX~KlEnY+3DdupH7FXNM?(tPiMKjUjvgA*|oecg#qfRId`RuCI-|V
z_+ytWUIrThd6!6D1}jDE=ujeGI(X`j%i6KqDzL*hv{=C9+mgEFfQ_Xw<;bNJR<dh!
zR(*a$BQ<FMX|wEwAiAzHUbC3@yuJs5Mk*oDAL!I?m$+UA9%2@ScH_L45zEs^*1#Zw
zbkN{?IXu8yRuS*ZYNcOO;SXgNYT?^s#2Mgi07{%~oB27Y%^#WP8lRV<@ER#o6AVYR
z<5~*x%t1xZ57XJn0i|)O-9deRX)WcWfS$YxZuX+RmpESrHv!I<a9;*oe<xLbK>nsP
zsM0XKa(GryG;kz#O*!|#(d#zQS){2G_(>inm<FX4Id(=kIRwh5ole8CZVoW6b`!(c
zV<d&-V5)a%t?`svn+H7>9Qo9OPnV7SW0umv^ZHhbBfFdz9?({G{<gRNSOQ)jT#Q<E
zu27=<0u<)+)<m;9`%TTJe?w22TNw5P<+RGH<b9M?HD)u&v75-7ME$n))F{t6b8HTI
zrK*6<=G_Fi=TK%}6P(6o@nFl5I6ipQ)Td2FgI?>3T95%@jR^d*dL5L73S34PlhTH8
zyV&qD&y&|&T@{L}fFxw%U*u_uftEEKiv&czS)qsy)x=DkIONE6f2ESDCNJd8FRS%O
zYvevYdez0rsb{M^v(E{cP8Mo!wFc?e87fYFw1KbEa#pvU)Cs&`Nr7e*&q_2a=|Sc!
z9F6OY$u<iCdN>@k)!3G<9W79PfNeVUQ`IQpC~tMx8_as7TjM3^E{0OjD2Iwo=Xa(Y
z6>z#RN0s?PuBH}Te;`6f6_;Ly>ctItqsy|Qr!A=LXvU+ex*j+D9vd|~-XzCeHs-C=
z)bnMveziu@=NyFdvzoL~PAm#eqW5v?9O{fWI8^lptpI^?(r~U`IhsXJQxN|JxIZ=O
ziJW0}J1~l@d`*?-slt^RSdJ@!%<E7~fW+xI>A9pq%Hw{Ue+qA}vFgYVp?nq<w&J6q
z9L2cGo_sSo#*Y`QhkHzUvxnm9w5vm+OOkKY&n6$U>y_<~py<bP4h%>dv?rXeZA52x
zA-kkS7x6oOS*>3V*$2D8-h?yn8YL5Orj2E5*GsEy;)qUcMc*xDg3rS4D2_gjrH+PL
z>$c45`J75|e|2v%6sH9(Qy3YT!=*5zZ7~X8&}p&hs<Nw}ALR4uzTVmE4UM&`>IUuf
zN=$)Gux^xQ?TzX-dZPZ<^fI)qzYHROGy!W>3u(4hU`>X?PeGoA&aa&sjRQ`!vvtjO
z)YHPAIUi2TCIEf;vRc1dBOg<`&$zwks4G`~W}^gce|DX06EA{*RE(~g0w{5v)a^-^
zMiYY;eiS-90jHnC;#qKNoXv1f&$c5siDGQ(Lh0mU<#Sf$^FhjT;w%h~cR%rI<>cgF
zWPn9RbDDR^MCMqr*p?}T0(qqrJCu0fipoN8ww1kVhYq_6n}NN-+ShsM8ud)~JJ^5C
zq4g1fe@<$~9W5HDVz*6HwyyhowO;n#<-NC>N-Jz{4M|UB>zW<>Q=igP|9~DZ8H%~_
zNe5{U*h9P!DY$=BbLTtz97Q1_wueo?bpb&~*@~k<(u*VPhoac&;zgT39o>~&@{012
zqPTc379ERJ@}fV|JE)*EoY(A6%c@y6w3m{vf2j?jO%u?zwQo|RE^>yS5}wM5+TyV~
zeN<f3>@aR#?o{No<w4D@{j_?&go`h$^#{wBk0@WXIy>V!L!Lv)X=O?u9!x5de#vSA
za@eHA0;}$!fRZJ~wi$j@Nu$>2YUwQyWl$H90An9sGmL24bJH{l@711X(wtVoe<w$e
zmqcU+8h>xx<{<hk#Xg<MB&2IfI@q<hq@Lisci*EziZIMA0V|>;5nj}6TfGIyp?@vk
zg?CoQm(}{6JN=0Ak(fwKme1zh>C;UhSGCzjGDz2w($4aR>}*Dxvu_<2XG(9%W;LW)
z1IJhV%h6mfB<<t^bo;XFP1u*gGVDw7xPY{!ihtjT(o<jeTMmaG(yt}^ows*bUdN{0
zVl@z_Wsw!sR&uV5N*@>{*J^8p^R{|Zq>}f$_N=QU$YW;}zP03(A4&pm<LIPZN6)0<
z@PR=1U!wf4z4!HT8@QAW0MdBp!Cq=?(Wdfr(TL$}n?P<UP0C^op6gV}ZY|{rZ+_L<
zG=F4yGZbuH|D*eG5UzOAdS~HvXh_@DC+QI(|N06i=Pp~zzv@Kq7KzRwP}QZanou{}
zu&8jfDO>fhbtiFq6-B8Iy<28s$4pH`iJ0}$fQvXO_0dS2NubI0Mv!ambfW?>jhy-H
zq_Ukk+P1R)vRXe_9<cL{TU35Y3Mc{40Dnp~!D&t<IMqfqx||8D`l7R)?-A_vOqEHT
z3oNIOSq{_K!Ea8sWF0d>X3ps)Z*MmLAWE}-yhQ|t7sa1}{Yg2@*J>&1Lz!7Ds~*_}
z%3|`Pi00i&g5Y&q$c~;YpdHfEC`|&Rm%P%W53Ngv7btg6HkE^SWhYp~XXHn2=YLDK
z$62aQ$b+&>TQdU0-zPEu-a+WD`JwHW_x-YFZ~6|B!!ARX)}S2yg8=$SQvv7ka1u`X
z0>>)0oK@Z6`NP@jxb>;l^asGG@@6{O?*PQ{Y)z0U1Nn5E0)(GjuGTF?UMG<Rt6yqu
zda9Of@63x>chHD-Uu5l&By~n>41cXApCDmq5o+~WEgHj4=_)%fRwd|Ve3ZZvDd;(=
zN^eQMj>b&YA*f8$!Phr^eOawPaVvi?S8nOfd}iW%Ad^s8+47+V+j^VIF{SD#5${wt
zZyx<tEG+C`p`$eAECv3fxvFkAmX!GlyIl&rZ_*J?^)uxU66_-7%UNwSQGZGSgx^jN
zcTyVa&{)3NdM0?S@N``wwdrY`0Hs+7&V*FmbDl@t?9BG=WxJe=%?50MK<&S`*s!w5
z1OSqc8vks*PWds31;hKEn`2q~%+!=$R_oV??Bia(DUYzW(F1{klX$DcOSz(QiGGq%
z3W36%B#^AFL`qie8lG+4M1O6-<9$R~sL45KfFo7EMXQ*o)LXHmq=4>yZ2zC;1fRD;
znv=i13sg{2b^ghtQ)*_7)D3r}F%BKae+JP65sj*>$uFpf&XZ~-Cx0vOjt9_x<*j0o
z1~qJQI9-9Nd8^=|5n)f64d>`QmA_2+Zrc5_TE9G>kJ&&AtG?s4Wq&Y;QRge~Wq_un
z%ONR+6yUTPXOq<VXj^CS-NH<h19f;$uVmLP^?}u~N1!TV-D1HpaF~}vUm8Kl&TuG9
zNl9|lYqg@niwUSkvEC^yy=>vk>2+Py!C|i_-q2PL4MnxR>SJ8jDJ!UunE38lYpSFW
zyTdO|wCAl@?EMYrynkuptE%eC+X}Kch_-lbR9IhD>zDib$rR?5rmC+OaiNqc)ir3s
zyi_5tmjYU9!T`z0nfg;Z)64!LqISQqc#Gw%%QI^uQ$>Xbu0xVB#Y@z$T)rENt;e;>
zZB7)a`K3P8dvCF8I6q#I0hm%H{pzpTqP*Ko#UWL;L=xbXVSksR3O~>3RJf{<gY3&2
zRI4{SmB?W|f~Jm_UY;5vsgidoJV+78tE9m8QqdU6IqBugYQ3CHKh(-ppP+O~Mg;<t
zN;1V@=5Vl5e`C8x4Pw7{L8L*wC!MbHYK7&h#S_UJQ};@~|7up;-Lhm4%5$*U6I4jj
zQh30F$0QJ`eScQhcu#;=9wf=+6SvN*x0`p;^R^<PVmj^nu0|kY!JGPtvZEHkz&0Lr
z%_%oL9-}HYO&Hzoz77*;Vb~wwUfVaGNlG-^ve`Nl7)CNj{<2!XK4kH|w{-PVZ;Y*}
zPkr$SXbVlQxE%vlD$#DG6Rw=erm8))|DiooldH9yQh%@s^*Ayd?I5`h+BvNIl)L)a
z^wez4vhN@>ED3u47H|HwTKdl%vU&h-hYI?g0PP5Y1J;C}x_h}t>>3!^F;i-Bkna@N
zy_(j!GC}y=HaI1->S&uKQFYcnbv{r}djyyyX3K9jr5cV$mUF6KR_prWz|05sS+ahH
zS5wCN@PB@gv_ChSX-1n-POep((?^xGO~I^L20wM{%?&Rw)J|0AO3xgy&1l^_FU^$_
z2WMz=dXQd$-Tkm%D7&P+XPTvQ-o!Xg4WC){h*h=2jR#rJjd7oxQ{^1a1pIP*-}%&M
zs3xEiJ-?JejU?m+I&h*&61-k`DO-|jDnp#7@?MuDRn_VzaDZP=DY9Qy>;BtCWQp4b
zxNszgf7&)yW2*@vM=<^n8`4Gir52L|1hC4&$VmKLPPVAwP8Gz9JiYzlyDXg?PX(-j
zVS77FlK2xytMZ<-b5M~X875yhm#u3CNq>)^4({Kp_0qBV(9%_Ruo13PkbL7^&{9f{
z7*E)dW=E(UX+6LlUc%g(Q^NQtGel`T4nS5jX;MXc&Cr&!2q%bpX(8fmlEf+{`l+WT
z5tkh)Nrqgb(Eaafoi%F*)E-5w%kWlo`y&$|)i);b1|hII71d@gc(dLlP%vUp?|<~t
z;e|qLgyE2(y=l;O1y}(W)SDl~1U`xuGTT){8{bRGf31$&m(}`n2SLnv>p=`vUk=q^
zHTu=k{wf+<s<6+iA<+yymxJ%+_>n|bB%rFO*5o}0dEoJR?%gq)s>;jRc%1Ez&bSjQ
zB))q}z1g|FD-eWMU&jkU*p3*A$A8~|n*317P5$Z<R}?#T9FfDSh>BAlEQ!QG=M91v
zL~IeKB_9pGj=XOJrA7&vZw*ve_P$qT@k#o2_}sUb@2D2;&7*u-tv~(5`Z1AoJ+_yU
zv+dx^Ihs{*Eb^8fOUQU7H32#yatX56NdokglE6gmAXt7d-_cPPFUiN)Q-7(vG_S>i
zUgK;L$B6E+bqQ@oCO)}!)%}X{o8%AB&RcmpZMrRAz%qm#IM-@Hzv_#FHSFkRmdMKg
zvGt|Gu1+1iR)Pg3^r^jG^mo0iAfSR<pC;e-DTgz(NzOONku1W4p5OM?A1r@<sAtH*
zHpyz-GnM(!>EzPQJKwvW(|>wW>P~fp7p#%Ve!$i!W{UPPrNsjU1yv_CZd5Gn$&1%F
zLJ7(*)!`>&k5o`bS;SkwDGNi|dvP)3VmFJ!(}!T25*39+>S9Y;1T&01Wg#Pd54JT8
z@NAgh8@?y%kw`kYeJ*mPb&*6!-T%6qFMIjq1)KDrZ8x<viMSQ>`+pj@ez~t7%ELo>
z0tw`o>KBo{!d_(sw4I$2wVWIV8&c6zu#v4s-rD%~LLH!8+tR)+0>3OJb*R>%6q^`;
z-S=q9w{IjW8^O-fu0^t(C&jB@>;kY_-e|Tf`maiC)jjjPnl3Qjdo~ut`@Ti|)1J(E
zF|RD6SM2I^IQXZ_FdwBgMc1}-b3ULrOq>-oQz49RwX`mZo8UE%-K)F4+?Nh-20?$f
z2^SpJI>>Qwi1VZCaCa8rt<!vG%ERXZK(h2fnkcZ~xpaW>euKA|c#9eZ?OXj24o7&r
zm^;t4Z9|B1Z64AW_{q-nO!cl0{X0*JVO@7OZQbEw-tnx}wUkDjuP>|hJ7e=7I%Ly?
zuHkCm*FH<Rc;!=~v|0|gTtQyjGmd}sc(LZ-C|{{kQPF05T;LU=N>uYUHx0<96X6Gt
zKxM9e1Wg5!7C^cPg2byf2&Zz)@3~U|fdg+3<-DE(OL1$d1TsM%USj}4^Ix_u$id5;
z<Smw6Mj7gsgsQ{x-Z#^eJq#kD)Z*khp+tGlGxkMdbf$jU8P@T06AbI$w}F58H7_5+
zf0*BDhtt<OrkzxpO+qHA@bR*aZ%DYf9yL!KF47c&ss*U7z<VRtJyH>lnOM>1R+i<a
z6l<q7(i{%JP!KE5V#MYwu*y+!qaL;>TzuUIPAU6j^=cEJy4=Yc8%TQE@q+knL1k;j
zwv`97%|nvO>_#H%c1`4r3|oIJ)D%v3@f5K-XU9RA>@w<p=UPbwd)B8FWeLxvgE)}>
z3zq+#mp{wL)Cd^r$$86WIku@c%mu`Bz9(!YJ1=g4OaRq87ri++?p10zL5yd$cVZo@
zrn@87C#6Ratn)Y>5CDqMn7NU(_;+tr?tCvb3FQaA=S~ghG7g^%!t;L;_U^d>z5`iW
z;YCtO*DijWPqHpV9S3HVP9kt!Mx&`3KZx|9_9)8HX~4XSMa9xJ$8vh^dmC+?ns!fw
zl_7SHUsmhoUGRY*uIRMKP4%XKnEn&$?#)(4RASqkPW9A-{^XbQZYQfr4O98~Wc{et
zXx(<X^T*AXlF06s<9mNf!xCMGT-_j7x8ItzR7WnZKz2xP<_hr>9PVg{Q@w1!r1g(B
zm}ehalRW^5Di?~qf7vZ24>`hFl!_Y9<Jyn_cz#7_IUm{D%?8zzlYLnwZ{oG$o<^v=
zc#eq!B~+dFm%G!~y!`#ni6n`%9d7RcY}unjUEAHI(6I7upn`wNiLXxt(G4Zh2+=3F
zuITpo99yFejC|gj%y32yNB+r8LpRP7oXhqdt1tP|3O@ntqAa4v@A{rQRa{x}wn|kk
z>*mgi0tCEVNJ_CiK(u?aXPfnzOu9!9O@O@nwS6d4Eo5oHO6^-8NXsk`A8CNdk^u~0
z*rNd+7639h@uq)1g__=9(CM!aS^b>fT2is@Tb1LbF(}7B>(Sx#scNh;L;=K{Czgj2
z3v5S-Wi@m>PY%F2s2X)x*-|4#T?*no(RTSNLU7F9)oojYTAx))kW+cH9A5}R(u}QF
z>R&Y)fdi)n&8?8a&;q{Md@$Bj5VXxZHn&%`r{nNOtxkU?BncL|EJ>x@Q%vvmwcHjS
zN2Adcc~UK5hC&gcTJ%LZykA!92g{fA(ZvXs(B451IOII7FdbBm>OeFiP*lCD-5PlE
zkqKy3cU3=XshXENRh*wK)&TUmk^^#UDL3Zj)Kx4$2);qfPFV`ZcBh->)Vl1gvPiaC
z?5V@FNl<^goIX~5q5&%A+)}2I6YNC@rN+>0P{m&ge=0|!10aaaWN)7$Xpyasb6<UF
zX5-!h?oh0PF2N5hqXx_%eXoOpvZsITt@7&moF53nmKzX(QkTLS<VcjzCz;Q!(rhqR
zpW8u5G?mXtoQ^|CMo^WoNgi`B*h_ILlQ{Jc0CIm{kC$G-8h{f`u#p-&w_z~(O+WgQ
zZ%Vrtf&ddK-2oVxVlnVbBBBCfyDK3(28_Vtb?@3#H+(dh57~J_G7kZ7s)ix)VRQi1
z(Y(v2J|S(($+meOS-DBo$<MkS0)3P>tRR+hmM^RI>v4A+AJcA;uyro?2vLt}S8HtE
z-s6AVkyC)0u}}h+b4Peb@=x!P6kl+1ZyQvo%AoNpF{*cU=jV1~lmL4ZO1jNGM`y0B
z?xEhh!V|oN{+>I{G7v1;OS!~DfG3-l>r^&LF`!<Z!Rpo;%`QEek0RRvB`=yetg4XO
znpSEu@_){JJ_=+-E9lHg;8QGv$l;IT&B}kr;6zf~ep#(Qbz=R{r1S?pOM3vhC#pan
z{P9I3vfszKR|1a%B+@7Nr$>>SF!hnkRdL@!em|sekQD6?jIHmqy!*QeYvFRdKB;$@
zt0rX!Sio#{YgazsZj+smr^jG*;EQvYx`eu}reT`wF(rtD(q$H2q>W2CjbcMxfL(u*
zGa0}%&?7l$1i)`nb}wjWXn!vA22XFmrNGGaxZ}PM-#4_^`m$Po>O_L>8=WSO#gd85
zfuH517UiP_%|eP|Uz<$FnYr~q(P!+i4P>=U3<U{IRn_{GqnX1Q0<cGC)wbt~HFv-C
zdurN(R1Joc%-bfr?gjz9`H9VGEt!9oL}Mo@%ha?_{zc*IoCJBUTMGpn5w_D+lC5e2
zSQtx0CEoJ}MPNz`P!QcgrFlSuQ(vXIk=PVXRZ#E$l)ZLzm3J7%x0Co=Cw}-<YY%kV
zvpd*FqukC^b!F!c;;_&&Pc1lrGlvjc$0z;$*o^icwR2wzLC#gQr3H18$Af=O<#BWc
zGIS`kYhBcTx^8=^4umS91OkiixaH4I><vq9(u=kPu^-w{mF<<i$&1NyB3d+4L+p7$
z@;`MJ(74OyJ{~*S<ajDBcGS7W5x|lMxqHYL>6<0rbKTP=8enqX`TF!_wd$|u%Ew8J
zdHX2c&MttIuZtf;CE@v@P(FW@?G9yE7TzN`^Vx48<E^_c`7-h`FAeKS0WAi7ymjzZ
z>Jp4vSW@rgS>192x>-;M=ADA*cP}5RKhD^)Gb7+uTgj%Kiu~joz@TF9REkd~n|=*p
z3nF{5*Yq<yt^Fu5luZj89$spu94(#N3xnZ7BVK8(Ks+Jo7i|O{(V&0Y?zh*hUsmfi
zclthwuCfzfdRIDleUX6Kr%BIftr|+6j>Mc^A!hbQbgDnA3NouxJ~t6cg%~yzkWl67
zsK6DQtB0)Xc3RaNM+qYyTnC;H-e;ip=R3VPWKr*_Lss0)3mAG4a#}Naz|XXIGv~^<
z=G8cu)XRz(>^EKxF5Q1D7?pfJHo=p8(ryx#?frcfsp7@9Ti*&v7wOu;&NJCb^6I*M
zS*@QsF@+D+AK*&0-s_}Oiam=fmEx368glAI_s69YR=&NcVj;Wz3rF*Mk#xthWi?6(
zzT0akD3d|l3M)SX?dHsjnZJ^Jr0ZWxi-e}NNchmwRmIHaz^s4LfOHe7c~t6VZ801N
z+<K2<1f?Nv*=V^}AO@$9l)-Nn#a13QDRcEU9suvy{&mz{>9%UkdrAtofg78KVBknf
zxcDt@{dyPVH@iSH?wiC0MCx7*UAzs|V1Rixj-PWY^9vGNa~zL%=MYIc6lA%bPB?2y
zl*gJ+g8vqaI(1{cNnVXFDv)l2?8+Av2e|a)m0PdHtQ75gruhOj+O53@QAro)V}JK@
zN*vb$ovhQea!ik-b8WZN6qG#G%d@M`%Zf$9m9)M?Px9TmxNRfOefLHQpj}Mey=Lnp
z4!Ieu@{^aIc?KPSeVn0BM!P`vNu@g1AZk^wepOW&k1Y0cJ*E$f_7j{0>Gzx)(%-FA
zEC=S&mNjW-UCq38+1UJ@c2l=s2e}sIWO;RbYk6}^y3N6R0}_kEc$?{XMUDeok+Oh8
zACEPEV7r54&LVVOmMht(kV>c{4Er}wjIDVWP>?VAoINRjgCRZO__A8Z-%bzwsNMid
zSLM|?fvWyFC8FaR6efXVGdboOdB=PD9=%+$H*m{I&<1zfU+5H{Z0e;eDzF;>ujfi>
z$u`JV>bafrC55u>7O1sfyrH*ufhUC^*R6*fN_OD&G;%A2=w1KgWTAXa$IlL>6}n^J
zju<4_3RLQUUPbATpsu?Yrk>ue;7`0c*P)a1*|1gR$W87D-r_aac7BOl$BRRDf7}Kt
z2}_+raiMpjqzQT2wk3(gj~Z^a-p19>XH)0^O*e@}i2s;<3a?wsg{71ZAs{#`5uEEt
zZ25Uy)0ej-jV#TtmcD5Zq2sJ<<rjizts2>$=ZUs1l+HYDnN<7TB;3N<1OV<_UY&}I
zISv5TTO)0)vra8~9aQy<vnrr7jzsh7+18h4dj={I&*R*3Jr9tRgimRzD^nvWdzYbm
z1{F!~sdQAZ0ii1}kt}Xs^^}!sq)vFPRtNNoGi_F99iKFn03Vn%#`YqU3#IZ|c3+TO
z;*Zrd$6bf!6NspZ4i#dJAXb&mI3$;sm;ZYP9Dm$2bMOy4C%3mGY?C;{<UL4_DuLr8
zJ?EJ0_sv?(Tgvcq0vDvJ`QE8yLzd@TC@EWVy!%quRX23%z3j!63S*9ikPInCI4z2N
zcIxl&*56Y7m171Lh=I)3WIcetsk6z_>{tLjuT9Yv4&ddT%CISUJQ5$bwc}+=DeDUl
z^nWGg6t&wm23sUWkZq0!afL%;(|hevy2t)zmn!>Zwf<oF{DI}Q1}dkmS3a&fSFL(&
zsW=ozKg|)hjPI?cyuAy1a~UkCD(ij9M4xfk!s0D8-2>EeQF^E?G3Kr6owSF`2AO?m
zC(LZskTvf9=Dwa<g8}@>Rx7e?DV7w<8Gq8y10b?BOE69{rKfbycqwz*bmL*W+0;{g
zK=0MzU6LD^nmlcLLbjgM08h{cVoOIv$9nJM9$h`)asRDJSzk9c^+TB@ivxm#Xwt~K
zVv$pMG&zR6O{YJ|U}cL69gXGk`aI7rvh$}k<sqhK=p*dbg|6gm5+|6v#8Rk;Re$b-
z<8wRQpvpkd<CSE=D}SL=z&am57Cj{d7=b^UoQsJ7dhY>-yI2Z2CBnMqjuGynlT5N^
zk#CXJ3{zfLFE*t;PkH?IUkLneBccb9-f-s3dX^bvyN)lvzN}XKoeg}W)1a-`W&4A8
z3VbAp6JGfl*UB3%SA_&vuc;_%5EEeoQKr+yWGEA~(nB27x{+m=c9$!D21I{G>N5=N
z%33}Oi3BYqLXlm0Z2Dbx;CfG}l&u6LJ?QVwetj{8dGjAGB5E*n@^b*L)y^qov*aR4
zpPD$y_m=FTMop2;khjd{<wQK7=T<v|S|EVII0d}nV-b_;Lvkcrc%Ql@Zf%BazPS7Z
z;-maBcG>glVsOA7lkj-RqE$5kkE=W)g-hSxC#h^jWo>Uq6q;>NKXxYNye17eYg|qm
zA6pD_&%I8&CY0txsgWJ>Dr`J^mn44%I)ATHIhXw!N_RfTR0h!wr<cowiMv!MDXKF6
z%lT&lA*cExb6r90&{yR{O3_zG27*FXQPe2;h1jW&ywp~<Tp>G<Gp$<zaZbn`gjJ2l
zt`#*)xV^z<gGy8(!?;%GRs=cxRD=dIEns=ikUia*mVI0HWwpL2;eix4tchDI+J6_R
zM%H7S_lJ$tIbq6_1LQ0j$<t9<cqbz{z3F`@NGlK3$xn8BB#BGVt`5UdD^4BW6K6PX
zx1Q^Wk2KMfI#T_^*ZtO$ouRdQqz;kznRWiC-V$nD!&{17@nN?<kyl5;9;*T1V22m^
zMX?>!*xFRf<{+mlk~_l_oj%VFDt}T1>1ioBp|U|#<5+xP_WGCA`t9tO`=hGX@%qyK
z^x-VZbR}l#fTCNwKFZ$5$w>-NSNX7&aZIs()3i~MQ;9Yz4Qz=NUeu`*J7L&qoIN02
z)T^)5Tk}d)4&;(D!B?gC)X3C>@KFOtUACkl3g=n<p{Nu`_eN2}_~X)ylz(E2jlnBb
zi$$e7-7-lY#E_;;>ol{+s=ml{-0bnjnFn{sZShHR0a)@t0CRRm=tudoTIX+0{FrtF
z9udWr`C-AOeY1~4JdV6^;Aq6##($9Kn!=fWc*)GlFDe~zOakS+ZRP8kFm2+QB0xf=
z1YL;xz7vdF1}@Eu`i*3MNPkiQpSAb=7R4q&>~g`Z5CWAtuv|INr4ohi)|6ATXj=pt
zbJuolGRT!)D|Nm8sC$}BH>X_H<IvM1t*mgID%`hI0jKavS<tNIh2MxW<J)Te>Fn1J
zziMT%Og(l-)x3AcYF*mq9y+IR98_PqBTEI~2}ONc2ae<@7CQ~MH&*BJT@EFd30L!a
zp6U#;PNjX%V(K+g!%fLd+0*;6y;U5zx?Xpu;_74FPUx?+?-)*<!L?LW)XbpNFN$&{
zgRDBTqan_A2PZ$5h)kKCp;F5x^Mlm9mo9<^90YD`-u;(Of(9IaZ?_X@NCS37x~Y>W
za;XS4mF!y^R$20Co>j!-YQ!A@Hh-QPCc0&)o*c#|ZRQ?dQGT5)kv!qf|1Tv)oOEI-
z_Ed!H)x1SyKLp!$%C_r9C6RWKi?{A1X?Z%Vm1RdN6$tKcw*h5XxLqzS2UAJyMtJ~8
zaq6U;e|tr-Yu@O8^gpmU>pVynz%CFtX&X>z@S@`A`j^_*X^y~pHR#R%B_Yb``U!|}
zKA-BS7%;9LRr?^b@i3W<;XF9G2rLMI>^gZ|XQK2y6=Rqz8`bQap9nnC$EO9bhTa3Z
z^xV$-IMfnOE!8QXycXIGXTCT&;M!_`9z_WqLa6=B>?T=%Lb3r*ow>59_dFdu<#mHG
zz}Z%+4g{t+`a@{}cKNbeFYfDmZzXv%Y%pTe1UC?W4#oZsZ@LaOX=c^f5{ym-!)svQ
z-f{b$no7ufYShSc0dK0S*l*cU$4zPv>jp1&O-^l3H&sAtJ;0Mx!?ODeFZGSLlyWYV
zqtg5dHASI+EAeK0bSeODD{q(715-(o!VqY<w&AL?4Mpw!PI)#pQ>h{v(T|eta&xrU
zzNNMhw#K2=ids!P0YKjNQT(!6>F+47i@>mt!%K~)I%7%-bJWN=Q+;K%B}|GsF#+ix
z&(Z)em)6EZr59ry68(bu^i2~@;@hE#o%*@*<5cc{iw?*2i<Lc#LeN9y8}{8>f2-JT
z1j#1VA|7Ww#^s$<l`m;$1@x(m_;accv{l`vs?3T)axlR>bvyLhH7Ay+6UDo=2-F93
zyQK5nQF$WrOU}2DLvg}1oRs>qTEG3o55MYQ%|c=BNHAHjQB)jBNsiMB@(KrqksgEW
zYcLakg~aHZLMcZyq!a7gtE-khw8tjbbq_BGDK07)(<UQ-FkGx-oN|Lnu|XfYJ&AC=
zy$h6+QJtwOrqBP>8_9wS34af0C6Rp}_R%>`L4Q2SLecx&n%5=O>T>%Yk_99i0gX8q
zQ>)kt{L&{$?|La`qXgX^uRXV^&JdvE-~QV$fBo<O<A45_|Mbs)|Ht$H{@MQVfB*CN
bU;q2dFaDo@{NvyM`EUOpqa<ijzh4Xh6>T-<

delta 14783
zcmV;wIY7piiyD`P8i0fWgaU*Egam{Iv<5gve_V4U>5=97U#rjx1O{Ibu>e8P9|_P7
z_y|H5!axG<>>oOZ)s>ldIx&NJd|jOt$spa$oo;3wsH0=DYCW7VU(TCYO*+f`21izv
z!94A4wyUy-NE*sg%Jj~sm%f+A&oVFA)f#0U8nbCI2^3b!yf2GgA}yz}15H(#I<?Jt
zf6j6_ubp_}GapU=iery%USD$JpZP6)l-}|gnhhS?vw1$xrT7t14@9I#8lX_4R}dGF
z;Z|Gm0aEfGsevz^E=PnSMM-q;CI~ugElE<E(o|{X;Pxzj0?;2`K~lj*sy`sEl@>qw
zo|h+E5d`&{q4F|h5;HSdm%pLB5vR;cf03fV$gmCfOb1!(^fHZ&avtZ(UI~wJ@K3zB
z+*U2xin|LkWtKMYY+OqGy8VBNAQfbJ0+zq5*00Rs@y>}!>ieT+-PQoRNGV=j0+HA_
z>=NoL)-Vx0gEt&SoAko#KMAYjAXv5JA0MQ_u!VxXVLz#U(;;k=HxW-xP?B%Vm$gR*
z8h>N^F&iVRL*9zcN>mIK+myC!8YKt?F>D$|2Y9<cyGs7;vmJ*f=$;fMNt_^+HCit<
z&bPPx(zk@7aDB;%zw=uFzYj~m>R#GS#S`f5K<=RUsK8`}FSY;5t8R?bG+bwE6LP?P
z!TM0vJF7+s=OCU_2r|14=WmEQWb7oLV}FCo+j5^gQ7KKde%QKDuP6@=Ta%#FRUsc_
z8i05v7?W-KZJ(2nPsU_Z*xzWXAFOS;q9GCSS}FUryjIsW2_($FyZ)vePNJYjE(9El
zT9#juy6#ksT9u!*#q(vger?-6?h}Vb>;U=G#<d({J4C>g+MENYhGiovg*L9OvwsnW
z(vb?>N=R1(a!=zajv_yd=L6A_Bexf-!u(GbWAX5P>RNEdD{P6ilxDpFu&<n`dXIi2
zLHqP$Tc4^geB_}VSk9U%ds!1mwoB51UR-qrFEzjz?r_cKZ@$oSaSpX=DS$*(+Uk;J
zHlNCwq_}y*ZSMK5;Dq0oocKGx1%Et!pTu7FAg+UucH{t^eJHL*<^n9|X`Amca|gXU
zlvgIa`I?FLOR_54grHGmf87L55C@s<0M|G<Rr=}JtaIRc-2m*eQ|o0jT?l^f)mlA-
zb14_JiVz}qKJg|oSjiH}*$X*E7C3X7K^te@mWroMLUjQGb=I`muj2a?4+XU^orSfR
z(MbjzA?TfU@8|$-=gn_$^sPy(@zR;lwPk8fO0ks5|Eo~?M4OimN(LDLdzUCm23IpH
zGs0QB^S8M5JHPcIpJ8ur*Ab6_u-QjEHI^g}dLoAMri5Q-xeeN@5~?|vs>vw$o%xrt
zN(LnwdJtqNu)-bG+GMjTwkVCKE7CTJ_Kuvg$ljOnN(LVp=`GnkBe6^BYdRiz1?^-r
z+CzH&x_ynm{g)|A1|fgB6r`R|7&1wH)j9QUM9tD$<BdBFCRtIHdCft#{I%e|DK?%3
zV|pqB6d%(6>lTA5wBMlGuKhvv25C_9YFkJ80isEmxka3WDdGk&)=T+uW~)%*>(Wg{
zmlhDPBTDSQ?&#bI#96zg#q7@xBx@uN1iM~oTNxjT0_MwV{gHnjK0a>ty_PA{+1Fck
z^p7X)7($qfvUf|5cuV;VFlJEnFsU5vC5vLO6x{4H*G_NvIEnSP%lZ524pL&sDV|Xa
z5@nkuicQXK){@*i<`;s{fjTP$Bv;ioUD9k;QHrQeO!CG#0DASaBt8iw!g{1i0z!%7
zwnn17gh6?~Y3qM!ZJQk`r1(51!GuM9fHH&>Dq5nSdNNTKkY?FmR_j-K_(L*X=`M{+
zDCWA&3~*AH#?6jeVQ!B}8_AWo?X;_Gv(u@wgILLu_Q{qHo7Y91(Y?9y`tRbqNR)K2
zQWz*Kj9qaT=ktp*Gioy4`Nb{(;Zj1_H?8U~?u*yWa8-ZFW9xSgmW4y3UEbtL&L}=s
zo1Z@k&q=O~;Jwhm%TiDk9~qnSaRMF53d-uT*hH;1G<OTyktOZ(CMfvJYURJ@x76RG
zR>)iBFjGW~>bS^pTH6_Cl%1Q~J^0XY>+)xGB9pfS;^&+U6}D@l5Xutsz%mNdrNLKL
z+;nNvRxMNCD0kRalT28=ywBQFzOa1I1}ktz0*E|2CMdSOm;9eikMH`WIj@>bjiFG%
z%4BdXah1nuEdbbc$P|{$M&w#edGah-`*y}F<Zazjf+mzwJH3~fO$H_bOP9Y*1~Y&9
z@@sWAfZayN#Pv`=I6$ud<96eJgHayRzETqoGA}t|r=BH}lh>hC>(GLlvkWM^*hv(%
zh486af`bwx-WmaW*4cbI6i2B-2Y}#T1yA>C{prhx4}}BprJ~WizU+K=dsG<K30nnW
zHr1nQJ7J+YWy9$LLe#s5pAf_GH_?9w?KD|T=P|nylp$CmL~WKcs}I6{*7gkr#K-Ba
z!}RO*_0}38oKfQ5H_?mq(!FJ#0OnTiQ-A56ymJlS?FZhdRQ+g!MoKgL3XsS@7?c-7
z3n`~nPF-Y4!Hx!L{K+BBTa-mgf%lI?P8*nc4~TwSt)IBX*Zk--n|N-=Kq!9`IQ5i$
zgbJNjuRgpaI2^rEiAeM?RjTp&k{qtEiZh%1r=28XEJ!D73#x(^DU4t!2V*LWD_~Pa
z;mUlG+m<ZlLnAf4jmTmp6Z6l>^F#Ka;`NGR=sM=!*EFm(kn<@wUIj-j<AzNShf!B|
zUI}D!sd{}Rl57aRl&%fURrG%$vIvery1KdBu_pI3QS@0~RxAI_*)MSq6X~pZvQ@Hi
zN8V5)bm%)!q?t$lzoaoi&5HUlu|{Ox?FXr=Pj$k87ezG@S?#nG@Bx_<>A?f1*NK{M
zI%dHq$b?ofX?@6AKTb!dhp!UYluc?{WTzd9vNfGFLX}Z|vR<3)G&Fxck0*PO%$*6}
z+Empo1$l~>S&5Pr;B}96rD81$L0|E#>@`JGNQGGoZpz_jep#&-ulgP30p$0d4f7OH
z=V?h0FYm9?p4_(38!6Sh$pFcgYMhobrN`&J%4-C*x<~=426;5emqlYyn|U@zz=13c
zxhN{6x4l`NxwYha$E|-WacKEM8se<WqpuJmUo`|Zb)EH7&^oJR%}NhvO4~zGPsFY2
ze8i~~J<ua*D$5>rW?s^zLY;~T=zK>~^xj|Tp=D}J&#k5MN?%s%7t4Q`7s#y{$-T^1
zydH1%StZWWR`!~LKP|P2U2}?~5b}{jS~}c1oIFX99PDC)nfQMYy?<3Ve>x1SDhKr~
z+cu}L#Y$D`R!6)$=EAe5^L_hzPRnXCeAE+;-z@ujdLy44jw1tuSiPuo$Vt@@P^;Y~
zr*~Lr6$Kv+y!iE?z*CmQJT}H|z@%cUL6-*2;7G5mc;$8E)%aLa$d}dnGrvVO{;qt~
zeJG?|FSjJfY)gNgNY<$Gc&>*4%~CzG)wNtTn38pmnvKe;TXcKq4%kc0&a(gQ*qlx$
zsdC7VldBAJo=E;azyyqDb)}l~t79XvS}S(Y(B*In%OMGyGA{L{(H$kGZFPA96x&5V
z5;bwPDD4hs2Ca9aiVfn<ar{(?&M^Ao_$R@j=U55pXDokBfbPqI6tzE|FRS%yfAp!p
z#aaOr_bsWK_l`GlcGONGA8yL+uyI0y+9I+#T1{zYa!{meu>SxR<QS(&mm+^a(juYY
zFnCe(4S{A5D%r$V-=B&_SC0aYeBD)_T2Wrp%O>Enb8XMukJf=;n(q}Y$n7bSN+~Vw
zm?o=0F`0iH0|x4+Qy+41fkP5}kJ2Wv^-SADwdwC14o&iGkZ~B}rOyFz!_NAb)w=%{
z(_K5gvyE)RYo&8`hxd<7>(sRVsO$(Ly8893Dp*Wc9rf}CN08s851_&^L@vh?P0vNI
z<G?$&3gZWw(k0IOdosb~{sG4Y%=1DJ^AU3bJnVnP$DWD`y;TS2=cq9)trC`=k%aoi
zfwR9)U?7r{71u7o*~+pX$TiA)0Iy<@EGaV;WEi%VM7N#;=>jc*%WeCaDa;uDUahwU
z^Yy{Skc*}yhNGU!o?dKNQg3{==%HN^^+r#JIwk?wk-QdWUmBk&R;}=^7yQ&A>;^V_
zt9F0;q6lq0WQ3)=bn&u>e54(*Ou3?M%JH6qAP|gr<Si9Blunix85{*H;}E-Pno%Ag
zq0WEG|2nOxK5b$ld2^g<jz%qVuN|DD_P%8_fLK^lj;LOaq>JrwOO@G`Vp4(llC=75
zwSFbjKg<h~dYORnM{DHbz(vsEi5LvRv2}laK4dVq&P^&OyC*d#?9TG6OM4<t6UDXN
zKHvnPo4Be-9HI1b9+V?Ax8sxiAKgJ_ul&1Q)Gcg}x0o*JEAfGsN?IWfVqGAzH=UBY
zSuV(c$;B(rlK|m8x1#v#IV7)e%FW#T<>aX!&Jb2rL}s?XqqO*xIBdezsUmt8BZq&G
zPpq8UFX;4FGX40ln-sgKqBgZm$$RkWU{lpd&gF%kwtgp=?o!B8$GTJL!0Q<7Yf?fW
zs-~tc&E9_1pxKLrL}{k;beudZ&nqo;v0rquB3b6pC+XyPbpxxqXu1VDZck<oqo~0}
z=}g`?S!+SuFSe{&V|p#HnTw+6g%5wNWQ^SzB>RHW$f99$b9G?XgoK>*G>7Y`uy3bw
z=Mb(qkgWDgI=&!?-@ZI`+B<Hov-4<d`XpYo3wt~OnQI9B)Nm$hJUw_5r+r4%GiE-A
zu4&x~4Zej$?J&Ld%YZ=rh=uA!f2g8boct3KhmODMVi(S=x7As5<Tsm>bk2Vf2ZAe8
z3ZD1lPRCY;`T^#D0wATjq=xKGHejHrzAh!ZQ5&81XMmevd@7L5nA}#F6yv<Q)4TF2
zF_;((Fwx3uIO<f{3GGXi|I?Sx;luvu(q}Dh*+`pDk*c~4;Up!Rualz4-W0!+x7v;5
z)P45Lt$!V&4wveSm%K_PK?;Adn72**I>puc5L2Z9{6|Z~o|R2>)GlPrr`G4ym(ML1
z;tUBakFjB?TNKm+xVtpNq6$>B&buG^@EVm7PqQ_a2AEk&rEa42vXFT6=;B3-^u6u{
z&JfqveRl6pv`kiv&bg?rspHou|I4dRpA$(`08Qh=xg9osMs5h7AkTkeYbGn#stX`>
zzcOX%WK%slM(RP(<tl;A`8wXS=yvBVyYAdAsfZZtJX5sQq#<mVB*O-<^uL|ViXT{>
z%}G#HZm)R1k=LpHuwwJXmfp8fdVUo1_97?)RkuSkL2Xdp=*`J9b)JeM>)tcRH;FiS
zp*@ukwU$fH_UyY`m0?|O@@&)XseD1FzkT`pgZpYjMPr+@*m7avE;e=@X^(Rkhed!t
zlr)4|@N;og$!p?=-F9mctW-u<rjQ*g{gmJwoSYx(F|bioY`PXz?mDApJfza*{)(D!
z@l>xKmp)ep9)FZtw2q-CJx2HJD+kUVR8WHA(W9DdAmhEBj*K|mG-BplIL06Lk39dX
zvbb047t4Q$>GIl%)%n(-QC&+ue0T-#(J8uIY9Fi}=-x^pIZ+4TQ^1PNZ5U6Y=VNGJ
zLWaDzfJ!}-mQ?GBoi&A+g%?iQB1JtYyb*2s)H2^9;C~N?Rs|Pjdv9lw2L(nZ+v*l#
zO{u<kPtIa3R&<<B*w|)}q&{`0oR4A{QH=&wpVT^@%?RslXTQnXfpf^t($=i0hVM-u
zX<(%<RrRlAI-C1FW8>chM6@#YT=!x1La})2Fnq~SQZDXiTqxTDiw4e1nQDE7Z@n+o
zjUn&PFn=9mV;2msK(Dd2WN+ifWNkg?suJr1QMF7zsKsAZwYme#sd|-V0ytTj!tL#S
z>^pu(N0mC&xLGxELZ^L04@Ev*tZQq1>MsEt@@~QL)Nv>x=ADIT?N-+n2uT8o8YVST
z`~orA2mP{IzgYf5nMHV`Jb)@*M1TY6r-V-&wtvoz;p0({^9CDTQp}rrKJF~#cAuzJ
z6NO#WPA!Ao2AP{50La@`*JmVpi#pcTILq-erfi-@{Fx_u-c_}_iy*%lf=5)lO~u?V
zC)$#P*{z{u9<X(A9L~#z=p<BezIEz4IOO1Plqnd;u~j!5?&TeMF78gczCyUS+`QBk
zCx6<V*i+`^@6~!qrhm*d-(3*Cz;?|`R^YdknseLbZ7!)Dyr)cww)qZ(FwMz2M?|9)
zITN>x%llB~w>`>1Y3e3HVc60wWG=QP5o3DcW`jw-ThSXYr8m!KSyyQ<2tXpzOrS40
zlXw_ZWh}?NE#%p>vecWtstbe*v?`Z3`G4yB>$R8(UZB;g+qk|gpqwWhfs9K<1}5%a
zm#^5ax#cyJPR7Nv`>(6@zE1>vd??|ajw{^8W#0Y4i?B}}6>&Yc3Rnr6n@(y$$^<(z
zhkCG0gO{d>adh$pBsS#!Rwb}p)1R>h+u!NZ6g6)<*}4szqPleof5iH_^I1xd?|+-E
zY~oSXWl_Bp^&Xa&WeyLj4!RU0(RWYdY2#YVi9`8#)S4=^Jdj%VQ9TH7UTm5iWCy3@
zbBtYuYKr9af!7)e^TzaLwc>B5`Qtv3gp#IIkyGQVa8eH|kX=>ta>T;~EmV(on2*DD
z041%pgoBP}y{Uu6H5vg?fs``07=H*`evWi|`xoyiMbH6bdF(flg(EF!J>TY>o9th$
zrs@Kw96LN}kU}vQ9j!g0(yY8D!=Q7y5-J?LDW@d0?fmzgi^IqJ((|OLa>o0ri=(Ek
zZ?Mm-_7kWT=%}=(o}yx>n7^#n50(cizN_k6w`IPZ29YY&KXC{Y!u>cACVv{YE0vU~
z+qY-dXR3WENk#=uEUg^ln;lOnQG#rQAVxiwT@)%7n^ULb4dV00zHqMXkUpNNwcln@
z20e<%sl%C!Wulkrr+VWwFMo*6Bmn}B69#GwYfW-+Op9_!NxIIW;tu*gYT|I%YoI>S
zDKM5<y7k;pqDyDXrrG4-+<&_Y>pbw6)%wBm@(12gUinDAK(H^aU&>OnduR}&f+x^t
zY;7H0fdE07CfWD5P5ht|u=hh}cqDmA;__0B@P31Hi>#Z=!8D3O{kgOgw4=QmKtl3P
zdK)N?=<VV?6cE#c$61f%NLRS1@a@fS>cI@=(oh}HeK=LR#v6R3wSOr#7oEZ6SI%uG
zU}M|q+1PDw24$Rh3FlIp)v|>OQRR{P*97=ptzRtvp|VJ<aVk1GAN1(RJFV!tQr&VE
zIC<xgAkLmSI40rHe6#NnxVc>&$@})+y6~DvX74Ha&f;VLg)cxEX|g&R`;;T!%%PW$
zTR01Ev#8zWtH)5(lz*7sbVUJA_IRtaN-Uz5&_S=M?J~L*psHM|AIlY9_gFh`N*;7#
z3EV*aaTS|M3T17vx9(h1H1q+<mNE+3z03LjvRd`mZt~;K=ejRxi5%mLyjW~0OC`=$
zcR}L2)~;8|WOB0hbjrmUv0T>XF==eMMJT*H&qT1n)AGMN@PB(ys!(*UPHMGmIxZbN
zC`MRvPWN+tbOY~`pls0+j$00fqPn&=<kp3{op8MeJh$c!KSK?3dtY@>TCJnnNhm6O
zIzB*X%?=kn4*%;S-E>zVZ9e-O-Hj?&5k~1R9%_j<|GHY~#UTqH_DAjL)cp6eEl4<P
z#$Rd_WeyuVLtg9luAt~6rOkl5-H*U8(;H*SuxH>0g%Ag4N4Y5PFyzlUG^`M|9gV8E
zs0=E;U)EjJ|Hof?Gw!_U;XR*DhpR~D6;Geea@k)4lN8ytyf1|T>Zv(*rHm#9)E@Y2
zmo8og8v%WnN?rylMZD3WM80(J)E}3%W4Bdchi_=HfXlZfb;|)8OJmBBODU}6t<hQa
z`3;TKp#7(pWiJHLb(OKrV&1cT4+M==LZCm;sUMfRUIrdwD+=w#c`qZDr;)6IK?Lcb
z!S`}_fVZq7-j~%%zox<;$}H5vx5tPxz}o<nINLV!b5NT<GS4+WFGb-sQl=&tj%dfV
z6y%wMik@Glvy%f#<5atY`ux&b%0~e`*$QsnMcbD;Uj{b;&zEvv23&tPRenJJrZcG0
zFl{+JD<~Q`61%3Hd*JBR4RjW1>I8n0hY6-ZX+@5m5l#+)@@c2jaIBjHjH}(mF!mTp
zAvu_8FReA6Qfu>|$ATlDTJY(zk$=omI(S~+N^xYD^TGpqRh_@>tv{B4*9RA)R-G%9
zD8B%O`MfpJtj>N@v*~}(ljatNJwZ9G@+x^BWmS#Y407xy@+MKgZ9O&0bIu%_Ltd#W
zV6)kq0QVfq>}!J4*eo7wITFVQubTR_sc6t^T~P}%AgmFAf2>{yWuXF>(Z!^+A>1xD
zyv*}to2#oraTSn+O#F*HO)=22hGUU{$cGh*=ul0}#EC<WTvvZ8scP~<-u$v!f3!yK
z<KwQnI63ufm1p)jA=Al1?XA`z{W?R%sgGXZtF)ZeZ6|dCFIZBb8O5^_%}RQZISWVQ
zI%D#hg#bMq4%%vLOV^GTC_lh9o%*S2lyH={I_wQ*J<_f5l5`hCDQJ{K#isL<DMtmI
zF3eG7zL2Y_1s8va&{4&um!W!bL*D4JtmtVADm$9-sH(2V4S&W)&5k$8ahHvGD>e0e
zS*>5Kk@PtS;ry&7ZIly>f|KZdoH~a(;|&f~y+JELpqw<Et5=R@(bE*fe*x}Kjd~(y
znB5MHA}e20<$0=bWd@exN+9z()Dj?ZI!<~nX^`@`-==@U+iR>k@<S+}MTM>SXedW9
zuCgZ|Cdc@(!FssIls9`Qu1;@tNOVc^jr!T-V|Kl={Sg%XSk8d~NrT=A=W83$dApEZ
z(xQv_9lxyBFNf@dUEtk>Gw&KD6L6*%%hs-!R@=l8o!E-LTgn8Vh22pceHu$04Yk(2
zGOOovD#d@*?PMrU3tFZyGBAfrVMedTD11Su#Y<O}UH$$bpV#f{oo#PutW{MvXs0bP
z1vbIDQJS?K)ot`d{jcd|Xj^|7ME+<3)~XiLY^%VU427S9JPVy)J2e^yoM`9OHQP~7
z3-8SNa#}V4=*ySY`qdiwn9_a5ZJ(pAT=|`i610DL>*O`@A_z#u=&C7z64y!Ho^)w6
zF=*jOp~Dk!`Z+9~1*gW@4CnN0J93jK#-=WmPA*oyXH`BQq%0@S!r*w{CqAv5ocxOn
zu*hgm^A4HF94i*vGKEkeuashk5)WKaSqRRyvRCcUVOL=@us2xyIxk(Lp6PxE`>#2)
zJ_3KxNzJ&UMFUmrwu#Etb$_qc%ig=Z_f}JBh3%~&>8Wg8^9KLar}Wf6pvOywVs3oX
zLD~cM5HCau?jP0M`DCA?C`82e@DgxcK+sXP;%Jcc;t2bpD0aGd(dJJ_cO{p+qI{$%
zF80NuW06W;^hbIJ6_kean*C{6HOq$fQu2Q_wIQ@=0@}9rO={Fd&hS&hQ#nyvJXWWV
zii?^Z#?8x}ik!AQsJXSDR_~W^@nyCCVEOV9<%?ElXIy8<b0|5jOzFdeNk!5xSxrC=
zo0M2!)jbqYvc%Xn!;dOy)EZqay#=BS>LL<gyoc8eBYN$*X_|!h>YZoOoL0eqCr6h=
zWCk05J8p9jeU@UM&SVnOH6<PF+FMdjaNfJ`Q6WVb=9YjJQIZHRYPPN30_4!YmQUfG
zmGNb@e&<d<qI@JK5|ib#**kr@3FN9?wvi0dwWPGOydgWA(dO)1$Hke_o3dFAY1Y8;
z760XEt_?|Vasj%1dFxHsm%%c;m*Q~&X-gG<zY(RUzWQ4Zhab|fCHtMXJuKU?X<xA#
zh|{vj3Ti7k*G8oejFM}$wZeH@y(v=3`(1n1RTAW}vkD(AIpv3vz}q-FDc8|6sW^Ng
z5dN1a|7-7keRKntvH?IEdmiki#ujZVPZy0C&bA5UmeQmw*5J8LmF(71p77?MTAPM{
zEN_N_t?Peu9}dD5Pg?IRybcX%yZR(OBII9R;pE(9Yx!55Xm63|90FBc+Nue4vki+1
zN1L)$53lYdZm*&!)uDIGEbN%6i6{}XUK(%_C#60bi8Bc_dA$+jT07mSKujZNK0B#w
zXO6b5?7ytm50(e)yyF&?Uy=e!05pJqQcZB0QwdJBQH?HV0;|60Z0CCf?|P=nB+dnv
zQ^zcaX}rO2PPSwnGeKs~=_R{2n|~0cSwD6Wf#F5*XJCI)4)e8IiuzDy7R#zfc7d{(
z{3@b(w~`=u-4?Q=CktqYv@}YSz-W_Kdi0@n$*_TP_vEE=uvd11MSMnn<#xV*WP6;Y
z>V!Nf%d|BkK>U3Y^KTDAcg+uNx4iqyn!V{eNDjLUSz3c~^bZ2)BTWUI$HPfD=?fgI
z*m72NgXa%ttK-(ETGJl@qsp7<WWNIt$Fns-rVQlMaS9NAa=BW!5P6+M60Clywdtu^
zw!JeiV%<R_+TF<7AxY|t))-oUO+G=w&?408vsyHUozhiyUaU&c%lIgPB~s9HQkCA4
zdL50KszXqjsDrO>`ueh3f8tjDV6NQKo%znh_dq70vhvD@8f@!rD#w(nqeQ$@-Mo49
zTd}aPgN2ULl(Q80kLIen-B?oQE9~o1;C+*haH^jve~@4oDPPX&MH8ie6hQdx^l&Go
zp$?7Zn^(^SuN9uIOQbeEjT4|W3&EL?s(a4!sGFVH-o0#>ld;)=4G^gP_ZAyg7MTD*
z@=@cT&DSYECb3}H@3}dawa-jV`DL|!eaJrg@=bY!wT&JK6r99c9bU>6l}q%Kj8X^`
z?j(U^Z6#8&YS-{=>n3V{10L@q%0f-fK?5AA`Yl?;M5W$}9VG>H?_>M_G$;7%3TaOM
z_AXFCN!9r$k4~wXHBvX+k;XW59RC?a6GSwsvL?Tv9y(8|m7M&ez&jp5|CP6jMH<ww
z$>DSbs^+bNhem`wWj36n^Hlya<-2M3%WD1dd_HCaEv)*E*OtM5AV!_9?8^X6NtZ)X
z3Ms&8HO?lf^U=1>;JbyHCI{-UPp@RxE%kxb@s2=M#Ja_TW8g3^hrTp|lAYmDn39s@
zsMl&mg%=Z0jbgo1TH0*k%;|Mq)WKn|C*IIj4-G}Nz3O9J*C{KgkeK-NtTk0qh~42A
zC))E?EVh5cId7VO_^PV9^0tC34x%ky8x_`<)%xYWelmr5rK#%cMO-LlN_7pIFfUce
z>!pB}nlL~za;E;&&h)Z>h^XBkEOxP+b$MoOWU8p}z;#G6rg(|^mCJWyvGurCxy^|p
zHNVt{dhacE4d=%e8GtEO(y#uSEy}yiR2))eOC$kK8Fndus_^riPKB!)Imo`eLA83L
zQ;8hbBWUV)>E)>*k}7$Z!h;lXyh;jen~KIr&Pgv{R_o<t`k_{)`UIs@GAa<DRFWwM
zGlzqf`WxFlY7qPF1(62zo^-m()(Xp2izkvdrtXz||JAIxyJg89l;>cxC#aC5rSO0U
zk4Yd>`>d{i@ty#$JV=tsCvKfrZ#VCx=WRto#dLb_yBdLr1#jvn%8ptD1F!L@Yfic0
z@fcOHX~O7s_jQ;+3&Z{Z_uB4wCMnTu%jVUYz%Y_I@|V^6^&yMzy``&{dSh%&ed>!x
zKwD^X#qAidQi<MHI^oKhY^vH*`ybjfHMv^LDFrWop&mzuqc=#dgLV$<KIN`HUV3V_
zX4!X;8I}Y+|A;sLS}px&4p}{bw?hT}PJniVzyWK*Pu+L9N9-CHd1I#3;vnBCu6s4D
zb7g|?r)_XbX4TO)OQPzmed>Inp7sbZNz5z1*_3KH9$C(*ep#*Sivu%X*k{T58D32p
z>%;zkAZdSYHq(q=Mmf1wy_`O(q-_dj%`*6{TW@aIz)(9;ohv<az&4|GdtRC=B@WKe
z=JX)F0=xU+eWC1<_MT~$%6SvxI5m7{)gxBb4mTcTJvYXEa!!?VI1}*8@qOo0pP`z7
zO7#4r3~D4HFVKM#Rg&QK!b{nbTvHk1Je9v)B&n)aKY;`MdP<S~vRe1wE+R|ZHo%1=
zIsDVMu^L-V2swiBhuDxV!Y{R$93X&I7Dh(m=W?<|4R@*_UgT-_hfi5LIi3nw1H<-q
zm?ZHhkXGeAY3HCKLo!UhI+w3&21$RfpbqZetM$^c`Owl;cd!wzQ;>XPFK8(xM~o-z
zNV6l<j<g=&4liMD%_(7glo_Hl9tR++nKY>)Z8NmxEW!!mURsFQO_ErpL_hV^B;v9o
zCCQL$6uSRit+QtBfZC&obs2U=w?8rgQhj3*Zx8~jQ&GLl1#i}y1PVqB>YaaHI=oP5
zjW8TC^lln-T>)0W1@-0!F@dk5h0J!<(8l*t@?Wdt_GPvH^dN{iZ#{^i>dT=TtVX|D
z+FwOuOBMEcH6)s$=W_7996yrCiUd>@)tbELAP+n~&%JNVrmFICHXdjDqciS=3W@KY
zQad}hy#hgK^>w@ugx3*6@%VomP?H}jxyiq}#1+Mk9Y^G_Dx%_)2TLL`(0PMkgNQBS
zwB)0~*O7NOP->Kr`PM*nW&6D<i%-(G!{@%ed`Go#Zyx2#YW=xStRE9e*W>k4a<(0O
zIY+Z9jz!+mV+k3rq$WToL@q)0I!S<@QWBV`9R$lS<`W%du}MD0o=Sh^rP&q>dX2M1
z93#5N)+O{ZGV#r=tL|5n-z0y4cHYX<Y13`_0hS@`z`0fn`c+>Xtl^DbW{Ir)AFsYt
z*wv|n*GjOUgg&*`i~gz23IZy)^=a~LpK>@uo8)|R9LXX)==p7L{lW6*hkAw_Y?G|U
zJyV$volY*@yz{;5Ijw&urS4Qmc)=Q(><4U(Vy5UlrnGpVprGoc#*K=FJ$do^Mkqn~
zr8@j(?2!t}D2sRtIAvi-doM1AT<m6Xc=`}*Q=+1fNL_46i(rParz~Wo@4>dF0iGA;
z_lEC@dL)t#Zl8->X<Z}{Qun{^=F2vpY_LiH*>+P)lZaa}zpsCB>zDibp*%d4Cy+pX
zseTdJE9_NPK-<|VQOn6;upt#a1smCF<gJbGU8n=JYg^jaMc|jEqz=_OlwuPDu=^fO
z`F2O5vJt#l+O<fQ^Q3t7i(LR#%NxyhMgLWat-5EPSJMT?zGq`W?Ds9=pY~+Vi`lY_
zw%FC_aPUu;VM-orimq+v=6pbLm^dqFra~AWwX`mZo8UE%eOGsV>6a0220?#s6D~Nc
zb&%uW5a&nN;qENLTc`QXl!wm+fMn@|G*Mu|bLjwMe}lJ}c#9eZ?XG?Zha)^T=FW3%
z+Yq8$n}_rTezP+@Q@!g$|IU+QSl8W6TX(pacRXu#Eu|6X>&t5W&e;5i8?tFa*KoD(
zw$D;7Uip+Lt(L<rSCH5Cj3a+NHr5;*<tJ4tD%xz13%o*9iE7^FrUBV>BK!ansLa)m
zps7I80!SA@ka*Pw;Z%<KJ$DKqaNzBsoYzxeDQ+#5KqlzJYYaeW{-0MD<ltpavWw*{
zqYQORLe*h;@0;n#9tM$6YH{+MP@=r&8T%qJI#a*A8P@T06AbI$-N1kRnwJmZKg@5n
z!|7`s(@rYQCLxnl_}HxD0|^(`qvnajMVdlTwE)!>cyHvoM=HWG6D#`M%Cg*)V(qj>
zn!^DY3Sz}sjM$t7Ryite)Wa5qi?43rl(J7&uU_I)mpfVG1(Ke2ydXX;sBEp+w(?+J
z^N?gRyOGGcT@yJY!z+IlY6>U2c#2q^v*Vylb{TcQbFCzTJ?qnovV`Z-K^#c`1<U`=
z%b(?AY6J}R<h*6G9NW|z<^p0m-xIcyosAnH6F~LOMQ;v{dzD&F5aU_BJF$*c)7=s4
zlhPvy)_I%`2mnQB%-l#?{BOG|cfOaJgz^L5bEk%L8HY~>;n{zLy?bte??9GTc#%}n
zwTs{8ldKC-$AKB8lL%aw(P*m14<dc2J&JO48ZfV7QL%K*v7DZ}Z=<bK)9#6|GQ`gD
z%WA#63qBCU6`l6DsowMt(|<zUz1hl$N^INdR8KwVPkuS?cCwn(FqPj=){kn9)@_$N
zf82a2iM-u%d{2LASfcBYs~hC%_FJ=->d3_v$PVevTp@mf!yOHAs+SFzwEocs^Xx-w
zvIihh<wCLdFK>&<LymA3rJ~03xHcpJo?j7K&PTR(^MdNh$$MEPZ{oG$o<^v=c#eq!
zB~+dFm)_}XUjBaPM3O|>4!3szw(QZNuI=tpXjpkSP{DuX#MdW+=!TMLgy<7oS9E)P
zj;+xKMm}#%W;i2<Bmd;4p&RE3&Sm?K)t7u}g`WU+Q5MnTr@rS-6<3zLtx{FXy1BEW
z00El|Nh!7mh<0!GY_mR-N%sh%36OWcwhv{hg)9wNseS7MX_*D$BMlH)GJpXLdo;kq
z0zd{Q-qe4mP}BPhI{oz_tDo~*ODfiVt8%<F2Icr?Jvy8|RgG1KD1eyr#PU#Lf$a#f
ztcH%~$pJVARih3oTWX}JOF_IR+Ad#32#(pix@~Jv>$6G;aw>0@;|oDZn(^wD`d5uc
z;J|4?b1S4Uw1973J{W5%2-?d#Hn*+X({XsCRwsWGk_3xfmZVbdDW<o5Ew_co(P%V9
zo>WVip-@Dq7JX3;@0Zp3!SW@2++qYvXnPO@4mnRNOb3;tIuMNr6jiTkw+5bkWdd5&
zUDdBzs^;ZR73XJ*H2{6C<bd2-%8l8ax{Boo!8d5xDNDiF?sU_fT9>_57RgqNJ$0Bi
z32J|r)5pqBG(g3iTgo(Yf^CFQY7E^5Rs5y!r*b4Z0D{;|-tAKaEwa^d?$(!PHtsFp
z4#g_y68yk2YQPNAw;dFeJ^gEMmDiom`GFw3aswhz>QY#P9ElS8B=fyhnhnP4b2|u$
zrt%qy({TvN2&xh`$zu)%+Z3lViBtaoAoqXu*z^k40Gw!ojnvq=4TH&V`q7tsQ`)@{
z1ei$a4#3D1i-BJf5fu>IT?yGSU<4ko+iO$Z@X=sCWakOVJOsR{8ivG&(E(IPvzJeO
zLfV#-?d5r7<t9}pzw34g^ikfhf>_E~zO2@-$K7#!OuI$G*16mxL_Mlqt+9D~k8^)V
zP62AhLJ3^X9pN3xKkXwazTo8EHmFdQLE~3qRPXA}&+W!20rn=8bT9WDow>HUhkEY{
zPw*1@d+s#LK(J&l<q{78p1ibNr?N?k0rlz(R=3t@-qMr#D6$<;veC?8RfW{6X{9D3
z|K-f*qd-=)g3g=-zQr<#9R4catbBhAP9(+cm(}`HC)N*5N`KL_v<HxTq6+lEUtdHb
z@B29SO5kyTMEV5(^eA!@rap4HD(+jz?}ro)lA`wmW9vIDdw(}!EnJS*C-n|<)uikI
z3z*Gr?aJrdZL$;c^cbuTd~xnlmr&Q$G)$8{rUY?Ny3E3hv~ek?QM^zWV3&X7Oa?Fw
z^hgdG0q~oY-3!_odOw$WgQp#EDKIiU?zkJ`yF+`eFRS&ZP9*5Q(P`pXEScCG_*qVB
zQNCKxETky*waIjxnOhGOeZ~&2fvlE^p&+5Ds#>3NG;=sZ0QTst+V)(r=I)n%Pfc5p
zs=;uQdD~>y-5{VhKe0KjCDVVBXzV0qnVR;=zbO2ilOWG^YoXvpgxBdR$yPN1EQ}?h
z67P9~A~2-|D2VQ$(mbHSsjt%9NNkFxDyaQGWv?Aw<sF9c?Iixzi64H|+5?^5*&Xbo
zQEq3dy0UWzaaib?rxqN*nL~)J<CFe=Y)0=NwR2wzLC#gQr3H18$Af>D%H!w?Wav=n
zt#wiV>AJm3bs$s;B@kGA$1Q(%VsBV-lU}qXi2cxps%)?9O<qiv6ValX8e-22lK-i*
zfW}=m_wjg>O^&DHVn>}@904qOkh_O`k-k~-J=Z;5q5&r7ou5x%R;&Jcu6&%tn75D8
z?d$?b`MUTuR1%&a3gv%8+3rwwWnmw|na_R$8E@Tn$(NC@d1+Wr3TQFt<E?|QQkP)V
z!jjsPXLZXB=w?A3n0E@I-@SaO{y1aH&WwOtZ6%v_D)N(W0E3FXQz<@~Z2C2XEr@Jm
zujyxaTKiFAD4P~GJiOFQIa)fk7Y4(FMr>)VKs+Jo7i|O{(V&0Y?ze5$FRS&MJAI!-
zSJ{a#y(=BOzDU6A)1+s#Rt+UjM`BJ}h?%_+o$Al3g3Ria&rO6<A%+bFBviRNDsaW-
z>LKg8omREuC}G5d>%jBD`wZ0neA0_U7WJMwWX0XQfT0&5r!|uY{7!o}bFPeQw#LDv
zHY;NAzVUK!>1KbysO0mp37+JWc9XEY-rucA6)(2k`c_D~NY@T_p2?deTi5N&YW>uS
zDSW8@09UH@UMHPW>{(o?6sL63kW(+ZKQ5K9@@=Dvh3wv6IGWdsq&t=^t5Hhu-CjdM
znGE7qSoslXH)meV{FUS*UH@8IBs8r>!iScwDrQ~|%qo8kNH>w1N2PAo7Q=DCt@kKK
zP#WTvjh1@_VsHvc8T?^UY~@jtGFQ9t0C>mtucPitw^eK2Q&PAWxUp#n29BhJi{Ikb
zuXjOyvkNrizDaCAq;6~I;%%q~1I+W{_&K*SzaX(S$MJY~4w0loL6+O;gtMkZd93*)
z_;0bOQ`cjgWNUm;fpjm(u6$8(fJ;wax%FDiO3}V&nlDhJx3%{mD(T{U>`yPJ#BnXq
z$vRCd$MiTl*Y<Uqf|93tdEV;tvSN{NC9Ut!lYC!Y++HKj-Fu@1&@QI#yJqVn4!Ieu
z@|%~Tc?KPS_c%kJjCO(SlS*~2LDZ^V{i>=m9$D<CJ*E$f_7j{0>Gzx)(%-FAEC=S&
zmNjW-UCq38d9nFB?WS(O4stEZ$+C5PYk6}^y3N790f|Lnyv=mHBFBNPNLj$4kH?xn
zu-!p2XA!zC%a!a?NF~$}hW#5T#@4(GD9D$5&YqNi!H^zsd|9pIZ>I--Rc`>LtMclc
zKvn;o647xD3X{OGnH+PCyyHE6k2aUQ8@S~pXoEYwU+5H{Z0e;eDzF;>ujfi>$!n0U
z)N?!KOA2M%El_K}ctdaR0#6D-u3HZ|l<dIkY2;Q4(O&=KWTAXa$IlL>6}n^Jju<4_
z3RLQUwxaY$P}kjtsi(Iq_!Do=b?D@LHf&Wna+5oPUA*Sn&M$H6cyY+?k8Yrnu+%ve
z7kVd3nvkdMwIq@FQNzuvw{i9J*%UfJ(@kO#;y-4e!t2&@VJW3U2nY^K1m`*uTYetb
z^yMu{BTMtErEl6p=r}7|`Gp`_t46lxd7@VlN@t#4nN;t)Nw|fz2>{%=Y?n-X1{nmi
z_3YJ`X?q4Lf1k&><$4|<Ckda@R9B`(Qnv3YZyx-#xk$Rg8hP}LS~}E_$FGymR5~hn
z0ii1}kt}Xs^^}!sq)vFPRtNNoGrg?NIzDMC0X{HkjO|4x7fR)`?7kqm#2>3^j=K)c
zClFB+9V)~cL98mBaY!zk`b#fG7Pn=kw)H;_3W1m+f0V)`?6>>NYW>b{eRP^R_=h(q
zw_OspNt|Kw9;8Q=!10lub4>R8X07HeWq3J(3sTj5?^LoO%kwRilr1^leW~lJ8#?t~
zwsEDxm}4O%Ly8ejiz1($`a8V!w^V=Sn1KaiAhR`D58!X=Y_c>v7C_HyQ*?y`c-d1K
zUP>O1f5gXa?Ra^ml=X!N`jT>r+U**HEs`S0Hphdw!lCifd+kxW$NSALRrbqj{lW72
z1Iud-R8Fs6`MT;{wQAc^aVU;{nj>x*-&;+2?=HNX%V0rOS?^OO`i#RXEZ$PnJwPoN
zrH9%QW8SLXNqe}wAoCvD2{W&1$QpNlb6-!bf58C$WUCd~wiHVW<qT=)0T9`mB^W1}
z(o?!;yp%a@y792xywp>DK=0LIFUbu|O`f(rAzROBfG21Jv85xTW4-rrkFFl@xc}Cq
ztgntu{ZMAf;(*{Fnl!SmSmab5O^zXN)9DW~SlOaNM`O8cpXb>{cK)`eJjB!teT02=
zf1xWmo5Tqwn^+1JvC4gLd~SyuR2c|*ypk+<<u7y!Smz7KqNjuaBk)&~b1@M>Zy#W|
zi=~iLBCKof7~w8D$s}tQ`4(BtFy(diVpH1ll*jM=3xVHlMD!ri8_t|r&oYC&uH(nA
zFRK-QX9M5pG-xY!dHq2=1wInQ39tN)AZz6fm#abotk+Z&HHff*DAVa;GL#8g=^+kk
z-N-UbZ<j5821I|0)Mpsjm9=~n5(!#Jgd)50*z~*X!1bO`DO(9hdeGlD`}M^X=FNY&
zh^WEP$<G0}Ry(JV&60~GeQM$)-&?YW8Z|{WL*6o*mlN@To?Gn<YJmU-;}r0Qk3~$X
z56O{iVLx?C+<F<Z`Qq{uh>!Bi*k#Y_7J~!!n1she7Ogf4cwFTXDO~#gK1pRODr@g{
zM4{OW>c^W&Ij>0r&Kj4K#>W=J+;gwfTN6riqSVL^c@;LEcb6r920DLRshrDx4W&Du
zV=9B_4X4dz!o*#wlN42%|K<EMfsj*uk-4s*cId0}A*JZ6BLhJpt0-!e{6g&1M_y_x
zTdt5D$eGryfH)`Q4#KL&W7mqBCERwf*`N|t$S|(exfMYUzZIduObb}vGh|P9re$}_
zzO2?4B|MPghBa|(Mf-mu)yR6h=KWzKbxxQv<p4QLM)Gu&7T(E7PH)-|1!?7>I{C?N
zk0fyk+SOq=YQ?F;d*Teo?bdT0@sTEaQb($P`08&x*%?}^N9quXpIPURYL`&s8s1Xu
ziVwT>iM%=z_E-%72RppTFN*D;#@41<HU~Lfk=z-c==6DZP?3KsNKZ@236%|^8pq-b
zv)8|@*6+=Jxj(9E9j`C#Pan>rOjlx-4k)^{>!WNxPEJyIy2^*GjAM%Ro2HG5oJzD&
zX<$pF@S;wg*a^c<<Lm+HqF#Na-kMjcav+zK34SWQr$(k8gpV3H>arybQ8>@)4@IRo
zx*bIg<Bv--Qi^{qHU_U$Ef$sTbju`p5JQ?Wt<%gNtNJ3-akIycGY{^N+v1z#0<h$P
z0OstB(2w$Ewa(w1_%ZDUJR*uK^TUEm`(_`9cpQ1-z|n}ejsHWQYYJ!j<s~yKzo>M?
zF$t9O_9|b`gy|)oDFP%^O3;P4@19`XGH_{L)Nds7Ly~_2_^iF>w<tCNVwVeMg%GIJ
zf#u49E|n;Bx2Bw$McX3Kn7g)XlR>Vut<?4UqwZ-k-JEh&k3&z7w6el+s&L;<1)Rbw
zWkIu+7k&_B#<$h_bF*JR{Hm43GWB>ns^+~jR_oF>_s}_o<DmM=9a$;>PblisI&dUM
zv3S#P+c{O2?{X-yOt_lY^HgV$bt>(97E`a08g5Ev%AVej?XBX#)%EI~imQ)xJE6bQ
z?lGJ?gKMd%sF^{jUlip^23d7vM?;+L4o-e95t%YOL#38Y<_D?SmoS0`90WQx@B5cf
zf(9IayW0sgqyf7k-PB1Gxm1LjO7^V{t1S66&nn_^HR6r{o4-#D6WuaYPYz>~Hgk`!
zD8EjYNS<)#zn79CPCBs^dn&^9YIYIX55a3YW!rV5l1RJA#anlhv^*Ww%CaMs3IzAJ
z+ki4G+%A`vgQ=u;qdWklICWCa?G^Rk|J(mA_@Dplzy9Zc{@XvEfB$Fu$N&2;<A493
ZFaPlW{^KA2_Rs(H{{i180>uYg3;-LiE2RJc

diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-01.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-01.xml
new file mode 100644
index 0000000000..5a945f7929
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-01.xml
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201807-01">
+  <title>tqdm: Arbitrary code execution</title>
+  <synopsis>A vulnerability in tqdm could allow remote attackers to execute
+    arbitrary code.
+  </synopsis>
+  <product type="ebuild">tqdm</product>
+  <announced>2018-07-18</announced>
+  <revised count="1">2018-07-18</revised>
+  <bug>636384</bug>
+  <access>remote</access>
+  <affected>
+    <package name="dev-python/tqdm" auto="yes" arch="*">
+      <unaffected range="ge">4.23.3</unaffected>
+      <vulnerable range="lt">4.23.3</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>tqdm is a smart progress meter.</p>
+  </background>
+  <description>
+    <p>A vulnerablility was discovered in tqdm._version that could allow a
+      malicious git log within the current working directory.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>A remote attacker could execute arbitrary commands by enticing a user to
+      clone a crafted repo.
+    </p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All tqdm users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=dev-python/tqdm-4.23.3"
+    </code>
+    
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2016-10075">CVE-2016-10075</uri>
+  </references>
+  <metadata tag="requester" timestamp="2018-07-02T03:06:02Z">b-man</metadata>
+  <metadata tag="submitter" timestamp="2018-07-18T03:57:26Z">irishluck83</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-02.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-02.xml
new file mode 100644
index 0000000000..ec691f42d0
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-02.xml
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201807-02">
+  <title>Passenger: Multiple Vulnerabilities</title>
+  <synopsis>Multiple vulnerabilities have been found in Passenger, the worst of
+    which could result in the execution of arbitrary code.
+  </synopsis>
+  <product type="ebuild">passenger</product>
+  <announced>2018-07-22</announced>
+  <revised count="1">2018-07-22</revised>
+  <bug>658346</bug>
+  <access>remote</access>
+  <affected>
+    <package name="www-apache/passenger" auto="yes" arch="*">
+      <unaffected range="ge">5.3.2</unaffected>
+      <vulnerable range="lt">5.3.2</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>Passenger runs and manages your Ruby, Node.js, and Python apps.</p>
+  </background>
+  <description>
+    <p>Multiple vulnerabilities have been discovered in Passenger. Please
+      review the CVE identifiers referenced below for details.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>A remote attacker could escalate privileges, execute arbitrary code,
+      cause a Denial of Service condition, or obtain sensitive information.
+    </p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All Passenger users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=www-apache/passenger-5.3.2"
+    </code>
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-12026">CVE-2018-12026</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-12027">CVE-2018-12027</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-12028">CVE-2018-12028</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-12029">CVE-2018-12029</uri>
+  </references>
+  <metadata tag="requester" timestamp="2018-07-03T02:38:28Z">irishluck83</metadata>
+  <metadata tag="submitter" timestamp="2018-07-22T20:50:15Z">irishluck83</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-03.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-03.xml
new file mode 100644
index 0000000000..f6a41e2fa6
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-03.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201807-03">
+  <title>ZNC:Multiple Vulnerabilities</title>
+  <synopsis>Multiple vulnerabilities have been found in ZNC, the worst of which
+    could result in privilege escalation.
+  </synopsis>
+  <product type="ebuild">ZNC</product>
+  <announced>2018-07-29</announced>
+  <revised count="2">2018-07-29</revised>
+  <bug>661228</bug>
+  <access>remote</access>
+  <affected>
+    <package name="net-irc/znc" auto="yes" arch="*">
+      <unaffected range="ge">1.7.1</unaffected>
+      <vulnerable range="lt">1.7.1</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>ZNC is an advanced IRC bouncer.</p>
+  </background>
+  <description>
+    <p>Multiple vulnerabilities have been discovered in ZNC. Please review the
+      CVE identifiers referenced below for details.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>A remote attacker could read arbitary files and esclate privileges.</p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All ZNC users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=net-irc/znc-1.7.1"
+    </code>
+    
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-14055">CVE-2018-14055</uri>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-14056">CVE-2018-14056</uri>
+  </references>
+  <metadata tag="requester" timestamp="2018-07-16T11:02:53Z">Zlogene</metadata>
+  <metadata tag="submitter" timestamp="2018-07-29T21:57:06Z">irishluck83</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-04.xml b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-04.xml
new file mode 100644
index 0000000000..38cedbc06c
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/glsa-201807-04.xml
@@ -0,0 +1,50 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
+<glsa id="201807-04">
+  <title>cURL:Heap-based Buffer Overflow </title>
+  <synopsis>A heap-based buffer overflow in cURL might allow remote attackers
+    to execute arbitrary code.
+  </synopsis>
+  <product type="ebuild">curl</product>
+  <announced>2018-07-29</announced>
+  <revised count="1">2018-07-29</revised>
+  <bug>660894</bug>
+  <access>remote</access>
+  <affected>
+    <package name="net-misc/curl" auto="yes" arch="*">
+      <unaffected range="ge">7.61.0</unaffected>
+      <vulnerable range="lt">7.61.0</vulnerable>
+    </package>
+  </affected>
+  <background>
+    <p>A command line tool and library for transferring data with URLs.</p>
+    
+  </background>
+  <description>
+    <p>A heap-based buffer overflow was discovered in cURL’s
+      Curl_smtp_escape_eob() function.
+    </p>
+  </description>
+  <impact type="normal">
+    <p>An attacker could cause a Denial of Service condition or execute
+      arbitrary code via SMTP connections.
+    </p>
+  </impact>
+  <workaround>
+    <p>There is no known workaround at this time.</p>
+  </workaround>
+  <resolution>
+    <p>All cURL users should upgrade to the latest version:</p>
+    
+    <code>
+      # emerge --sync
+      # emerge --ask --oneshot --verbose "&gt;=net-misc/curl-7.61.0"
+    </code>
+    
+  </resolution>
+  <references>
+    <uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-0500">CVE-2018-0500</uri>
+  </references>
+  <metadata tag="requester" timestamp="2018-07-21T22:56:00Z">irishluck83</metadata>
+  <metadata tag="submitter" timestamp="2018-07-29T22:11:16Z">irishluck83</metadata>
+</glsa>
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk
index 426c2e64bb..ff19ea6845 100644
--- a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.chk
@@ -1 +1 @@
-Tue, 26 Jun 2018 03:08:35 +0000
+Mon, 30 Jul 2018 15:38:31 +0000
diff --git a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit
index 371b226d68..39d5ceab63 100644
--- a/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit
+++ b/sdk_container/src/third_party/portage-stable/metadata/glsa/timestamp.commit
@@ -1 +1 @@
-676a0a13a2c9c89e7a04d5a85550b5b48c25f9b4 1529809898 2018-06-24T03:11:38+00:00
+bc003b9516bfd3c1d933c8cd919b86b13f8c5548 1532902339 2018-07-29T22:12:19+00:00