openldap2-contrib-2.4.46-lp152.14.21.1 4>$  Ap`t9`/=„-e$yZZS=r G^;i_\xDKjM:޵.goGzP}p(ΑՌM }qxDZqȬF3?~tNp; ǂuUQ\St_FJ{>=cbINK", O;LJiXϡw0Ƨt#js[ gp*>&UJP&Fodf9967eb4a1e2c3085480e80ddb2567b94b7cbff077818f2d134eb7e998dbccf12327ccc6719ab869dd27e8e15e1bb1b1df5d7bd+`t9`/=„R8cE6*7Kij_5AHG|7yUɿaNA׈9ٻYL'J #z8J!*Qgqm%"J#ӰCF%6W) Q!l7ZgACj$oP؉m5b4Ð=T@xr{d,ؘ54~kɐNAEA-( Ĝ:iNqkVl֘m7zsG`) TĿU_6eXkM0x4A`X>p>sx?shd ) BLPX\ox 44 4 4 T4  4  4444   (8$797:7F`G`4Ha4Ib`4XbYb\c4]c4^f|bfcgMdgegfglgug4vhwpL4xq4yqGzssss"sdCopenldap2-contrib2.4.46lp152.14.21.1OpenLDAP Contrib ModulesVarious overlays found in contrib/: addpartial Intercepts ADD requests, applies changes to existing entries allop allowed Generates attributes indicating access rights autogroup cloak denyop lastbind writes last bind timestamp to entry noopsrch handles no-op search control nops pw-sha2 generates/validates SHA-2 password hashes pw-pbkdf2 generates/validates PBKDF2 password hashes smbk5pwd generates Samba3 password hashes (heimdal krb disabled) trace traces overlay invocation`t9Agoat09HopenSUSE Leap 15.2openSUSEOLDAP-2.8http://bugs.opensuse.orgProductivity/Networking/LDAP/Servershttp://www.openldap.orglinuxi5865j%x%j&dq%&h%c %xU7lj%x큤큤큤큤큤큤큤큤큤큤큤큤`t97`t97`t97`t9:`t97`t97`t97`t9:`t97`t97`t97`t9:`t97`t97`t97`t9:`t98`t98`t98`t9:`t98`t98`t98`t9:`t97`t97`t97`t9:`t98`t98`t98`t9:`t98`t98`t98`t9:`t99`t99`t99`t9:`t98`t98`t98`t9:`t99`t99`t99`t9:`t99`t99`t99`t9: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.so.0.0.0addpartial.so.0.0.0allop.so.0.0.0allop.so.0.0.0allowed.so.0.0.0allowed.so.0.0.0autogroup.so.0.0.0autogroup.so.0.0.0cloak.so.0.0.0cloak.so.0.0.0denyop.so.0.0.0denyop.so.0.0.0lastbind.so.0.0.0lastbind.so.0.0.0noopsrch.so.0.0.0noopsrch.so.0.0.0nops.so.0.0.0nops.so.0.0.0pw-pbkdf2.so.0.0.0pw-pbkdf2.so.0.0.0pw-sha2.so.0.0.0pw-sha2.so.0.0.0smbk5pwd.so.0.0.0smbk5pwd.so.0.0.0trace.so.0.0.0trace.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenldap2-2.4.46-lp152.14.21.1.src.rpmlibtool(/usr/lib/openldap/addpartial.la)libtool(/usr/lib/openldap/allop.la)libtool(/usr/lib/openldap/allowed.la)libtool(/usr/lib/openldap/autogroup.la)libtool(/usr/lib/openldap/cloak.la)libtool(/usr/lib/openldap/denyop.la)libtool(/usr/lib/openldap/lastbind.la)libtool(/usr/lib/openldap/noopsrch.la)libtool(/usr/lib/openldap/nops.la)libtool(/usr/lib/openldap/pw-pbkdf2.la)libtool(/usr/lib/openldap/pw-sha2.la)libtool(/usr/lib/openldap/smbk5pwd.la)libtool(/usr/lib/openldap/trace.la)openldap2-contribopenldap2-contrib(x86-32)@@@@@@@    libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1.3)libcrypto.so.1.1libcrypto.so.1.1(OPENSSL_1_1_0)liblber-2.4.so.2libldap_r-2.4.so.2openldap2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.463.0.4-14.6.0-14.0-15.2-14.14.1`KW`/@`+_@_@_/@_FN_?@^^^*@]B@\ڭ\r@[H[@[vZ@Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@XWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@TuWilliam Brown William Brown William Brown William Brown William Brown William Brown William Brown William Brown William Brown William Brown William Brown William Brown William Brown Peter Varkoly varkoly@suse.comckowalczyk@suse.comckowalczyk@suse.comzsolt.kalmar@suse.comzsolt.kalmar@suse.commichael@stroeder.comfvogt@suse.commichael@stroeder.comrbrown@suse.comjengelh@inai.demrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comjengelh@inai.dekukuk@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.de- bsc#1182791 - improve proxy connection timout options to correctly prune connections. * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch * 0228-ITS-9197-fix-typo-in-prev-commit.patch * 0229-ITS-9197-Fix-test-script.patch * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service. * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch - bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service. * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch - bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service. * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch - bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service. * 0224-ITS-9428-fix-cancel-exop.patch - bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch - bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch - bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0219-ITS-9413-fix-slap_parse_user.patch - bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service. * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch * 0214-ITS-9406-fix-debug-msg.patch - bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck). * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch - bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read). * 0215-ITS-9408-fix-vrfilter-double-free.patch- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime. * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues where openldap would crash due to malformed inputs. * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch- bsc#1179503 - fix proxy retry binds to a remote server * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of service due to incorrect validation of modrdn equality rules. * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch- bsc#1175568 CVE-2020-8027 openldap_update_modules_path.sh has a number of issues in it's design that lead to security issues. This file has been removed, from the package, and the %post execution of the install. The function is replaced by /usr/sbin/slapd-ldif-update-crc and /usr/lib/openldap/fixup-modulepath, through the addition of the source files: * fixup-modulepath.sh * slapd-ldif-update-crc.sh * update-crc.sh- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509 SAN's falling back to CN validation in violation of rfc6125. * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch- bsc#1172704 - Change DB_CONFIG to root:ldap permissions. - bsc#1172698 (CVE-2020-8023) - local priv esc via start script chown -R on olcdbdirectory path. Remove chown -R on start to resolve.- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch- bsc#1158921 libldap-data should be requires, not recommends to help prevent user confusion around configuration ownership.- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect authorisation of another connection, granting excess connection rights (ssf). * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch - bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth incorrectly to another backend, violating multi-tenant isolation. * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch * patch: 0204-ITS-9038-Another-test028-typo.patch- bsc#1111388 - incorrect post script call causes tmpfiles create not to be run.- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh - fix the script- Emergency fix: move tmpfiles_create post from the library package to the main package's post script, which ships the tmpfiles.d configuration. Fixes the post script of the library (-p /sbin/ldconfig does not allow more statements in the script). - bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update) * source: openldap2.conf - Added a patch to let slapd return the uniqueness check filter used before constraint violation to the client. Fixed broken memory handling in affecting error response of slapo-unique ITS#8866 slapo-unique to return filter used in diagnostic message * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch - Don't require systemd explicit, spec file can handle both cases correct and in containers we don't have systemd.- Fix CVE-2017-17740: when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack * patch: 0017-Fix-segfault-in-nops.patch (bsc#1073313)- Fix slapd segfaults in mdb_env_reader_dest with patch 0016-Clear-shared-key-only-in-close-function.patch (bsc#1089640)- bsc#1085064 Packaging issues have been discovered around the openldap_update_modules_path.sh which has been corrected: - the spec file was wrongly configured, therefore the script has never been called - the script should create the symlinks first, as slapcat is useless on a system which is already affected.- bsc#1085064 Add script "openldap_update_modules_path.sh" which which removes the configuration item olcModulePath in cn=config which is after upgrade from SLE12 to SLE15 holds inappropriate information. If the cn=config is being used on a system, the conflicting items in slapd.conf are ignored, despite of it, the backend DB configuration section has been also commented out in the default slapd.conf. In case of correct cn=config (the olcModulePath has been already removed), the script stops without touching anything.- Upgrade to upstream 2.4.46 release - removed obsolete back-port patches: * 0013-ITS-8692-let-back-sock-generate-increment-line.patch * 0016-ITS-8782-fix-cancel-memleak.patch OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048)- Use %license (boo#1082318)- added 0016-ITS-8782-fix-cancel-memleak.patch- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add openldap-r-only.dif so that openldap2's own tools also link against libldap_r rather than libldap. - Make libldap equivalent to libldap_r (like Debian) to avoid crashes in threaded programs which unknowingly get both libraries inserted into their process image. [rh#1370065, boo#996551]- use existing groups instead of inventing new ones- added 0012-ITS8051-sockdnpat.patch- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- Added OpenLDAP new feature implementing OpenLDAP ITS#8714 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- added overlay trace to package openldap2-contrib- Upgrade to upstream 2.4.45 release - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch and 0012-use-system-wide-cert-dir-by-default.patch - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch for supporting modify increment operations with back-sock - added overlay addpartial to package openldap2-contrib- Remove legacy daemon control that was used to migrate from SLE 11 to 12. (bsc#1038405)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#976172 owned by hguo@suse.com: openldap2 - missing /usr/share/doc/packages/openldap2/guide/admin/guide.html - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546: openldap2: slapd crash in valueReturnFilter cleanup - [fate#319300](https://fate.suse.com/319300) - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545) - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple "Connection 0" in a Multi Master setup normal ? - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546) - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545: openldap2: slapd crashes on search with deref control and empty attr list- Drop binutils requirement; the code using /usr/bin/strings has been dropped in openSUSE:Factory/openldap2 revision 112.- Remove superfluous insserv PreReq.- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470).- Add more details in the comments of slapd.conf concerning file permission and StartTLS capability.- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitionsgoat09 1618229569  !"#$%&'()*+,-./012342.4.46-lp152.14.21.12.4.46-lp152.14.21.1addpartial.laaddpartial.soaddpartial.so.0addpartial.so.0.0.0allop.laallop.soallop.so.0allop.so.0.0.0allowed.laallowed.soallowed.so.0allowed.so.0.0.0autogroup.laautogroup.soautogroup.so.0autogroup.so.0.0.0cloak.lacloak.socloak.so.0cloak.so.0.0.0denyop.ladenyop.sodenyop.so.0denyop.so.0.0.0lastbind.lalastbind.solastbind.so.0lastbind.so.0.0.0noopsrch.lanoopsrch.sonoopsrch.so.0noopsrch.so.0.0.0nops.lanops.sonops.so.0nops.so.0.0.0pw-pbkdf2.lapw-pbkdf2.sopw-pbkdf2.so.0pw-pbkdf2.so.0.0.0pw-sha2.lapw-sha2.sopw-sha2.so.0pw-sha2.so.0.0.0smbk5pwd.lasmbk5pwd.sosmbk5pwd.so.0smbk5pwd.so.0.0.0trace.latrace.sotrace.so.0trace.so.0.0.0/usr/lib/openldap/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16067/openSUSE_Leap_15.2_Update/ae55ab79cd8822a71cf55e7745543397-openldap2.openSUSE_Leap_15.2_Updatecpioxz5i586-suse-linux     libtool library fileELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=18fe832d7a5f418b25e012653815b56471d82515, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=86c10b010060fe91d46bd72adb6f225e27ce4c50, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e206bbdb4b542d187d8516dba1cf55b45819cca, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8571c7f99074091eeb5a86aae3f9621562e828a0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d78e7a2c01285353b3313265f7acf54b1e49c3c5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=93b48892321d52635e473c29e6beaf3f6fd0e80e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec5c5bda5f85c5637ee058fba405ef511a4e3607, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e33a3bf9e3ff67657879f79f787c3c03c643a5f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b4331ee78ea6e0823739be8635f0de66b9102d30, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ac5c91489dc9cd0594a90659ed26dea4ee8638e3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1531c660adaaf611e35084eb544efc9d1551b507, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a979e89e6361c17b0f05655cbd8433271e6da7ac, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=303bb1bee6de5f94647e93518e3fc1fbd28ffa14, stripped  !%&*+/056:;BCPRRRRPRRRRRPRRRRPRRRRRPRRRRPRRRRPRRRRPRRRRPRRRRP RRRRRP RRRRP RRRRRRRP RRRRJ9t8(VBF"-ym$4_7uf-48nںA΀ LڇNC/L鄢v:Eʝ0({C|Cʽp~"hϰQL%YC&'dEhCXh H8U/46w= (wh*;-X6C s&Tj#x0#;GRA qƁA@ZzXB%uVՌ:;OSTSv׵0(&@R9 5n<).]apn^R  M=2VUz.R[f1PIubQRo.%t| ܶ [u`6ڡb%wri>X?^IsQjw99Kڐv>m|xr$8@* ;G 4m9w>*4S5  vGJSq0ת@,MNDE"2AFn.Ak D-҉kM1: >l10^,uMТ\2+ûhb&=ubA%syLH`ԛ Nt0=,?\iyAƏ/I2#$r{7y2%๓^R̼x79өfQ2i մlS0 &1sSaeg&MP8;FLkF8deԱ2K0LC?(d ֛o Ͱ VrF=Oz,}%1qw102<,882,'9fΦ#Z0oT@KYFŽe. , ` 5KƟžAsSk+`78 ^0qǓIceѝl>C`uU7c8 K8A#QGi̿/Nh)*|cP9 \>.C+'LMy Eeܘ ڰX{G%=vsug^NuV1TqjˢJH7KBUJWN~v7?@N M4u_\T{2F@|j[/ɗ1Zҭ:w\D!ؒXlk͍]"lﱨ^j-`,HOM,a5[A(:1?!kw~yO7k {@AնZt KCrU昌涣qy~wBBOGl9LTv%!t1A~̸ZJ'FkZ E4mtߛ Ev~dtilDX 7VOq'F^fSl"sW%}bX1bbǁr'>~-܀Fy0k86Ai#"g UR:Zxd8.n=}@ExDWSvDwu`zMG'v7CVk< fJdLm 0˼cha#>?h5V1*|(v,e߿8;$/j1@׬Nt|~1"QPsVwD8|p+H'0wU-jjޤ.vuWxzf4=_;Bp[X}ud^V_K ʩ慆7Ց~JJ]~kƂ4  *IsZu_gcU,C7ҀK`KR~/04.o61q",;HoZc@jՊ>r2[vFo@]9/)}C`Wir&3*㖲oBp8'mJWl 4*+x*WpbJEnwM.>,6 W<#tfCBW隒-cjތ4!eEWT=%_]ǓŭGe[ӹS>=SE:(A^ɔ*QeO]vWp_P,gX_ux.+!Bu@mؑXI%w'"@sT<\9ΜE^;Lu ISyѵۼNB$8 ߑݮbӌ쮁9,=:[m+l,&϶a6K&YZpܽ϶`ay|:;*pH29*Z)pE0K\#zِ݅wE+иi^{$b;;ć[ [Uk&]W+ܦ258m$Y <6HƨDq>Ƈ Ms9|9]Hr/<.n]Tv QXp; udU,߹% `b#` ;CIh̭@rq3䬽Iy{H(i1t$B3dVw*8i(/R|Te 3 wdE2f؜kZ 5@9a5ӞeTM^;rP#Hi n*G̖6C=k+6qp( S2˳<ؒϛ-1Ӆ( 2 )WM^4%}0Pc/s8;?T,߆Њ%kQ:SYn+I$- \qP⮍Nݳ\P^&ik)8H fpP4S#NKNʽ)(qGof"<@`G>fԀfقa!L4)*Q%Ӝ6C(,\w4(#bw:B+\mu9W!|-/U&m1Zi0I33yx 8?πݸ[N]`;M ;EC bj>%9Mpu#T; cy-JltC*R~yP)cSpW F}'Kjmmŧ@;TMP@?!YBiv_;^Ah!C On"d.R'D<>` 4 0P9Įgn;9vboe3H^i D$ƢS3g)NZ2]7bqTF 2d{Y^ط|yYj\[B^^^V??`%)&|փ>A\c+b=U|l)Qb\rkfNM" 'Ze_uj pCiq?Įt N6\I 29_2;B sPg>4rF.. A`dYW9:[adշx~Å~8Uf> zA5<_+1eTk1Xyypο|cU[xm{%"7f/W@F+ZM@;2"H?0Kr_$ zh&?eIgY%=A۳:𤱨֖ͥ}{c p5!=K6LDz++gTT"-Z׳DrX,uS $>F  =5 Yv9=H{MkGG^\ ڄ. -vMb =G޽\*HH}PܮoxΝrxi}{T"ew2ntfےh!F᥍[ot*Bަ RPh (m*"W*F]z2S;8&t.H$݉0:#J*d@e7^;\ ,7rd%J-.iT^j'@"_ ~݆2ztW@VRIq$.y56^Xhq /谴<4!){puW㉷⋼jjeW -. |Գ[1\DȆO[Z Vs5sAHUй1@~3%ޱ2bGsE@Yhh2mVi }O9T,oW9+G{Owh,nbfH*q|.'OjKQLa%sYphnO&Xbz d ˶}~55y6hAZs 2`pԲXMplv+hO.!~pϴ֜Pu |X :aBe.a~%Ҝ I2 E;rHx  ;4`-yUP&ō}jR1f*XfևS _-JcP]ajO*|QVbKV4۔* $~f5E]5A4+%Ky1_ZT$/QqCe${  YaJyzqEla(AoNtP@"R1x݋hX+0lk4?k}zlk;6A"4q+Wr>W@qzӼϱt\;=:K y*\㹛dRA7&*{\7,W @HTA9暾G\M<ZKC;Uu1U xCpbo oYT=X`3g-:{hϖW eт%KyP#YVSHoj蒹u -fΊΦҽ^U?[xC4܊\U?OEcd U>8= I,R,16nxeӾ^4N[] (p8(tm Ln2T40h6 zǧ0dNJP^si|dUof|].H_ڙ˕TǾ8qPG#9O-ٖV%0%OcӓEDtoH|-yG7:]q}/`+S<tb3zHVaEc?e'jD|L:K0#溍.0#|MRte? Zk&ď AjϿ7m[jt1G䋈/LZ-[ V^.CBo,`V8q/NtOrV`k`{2&Xsy<5j׆bvbrc; QAUѮ.#krLg$OJyu/`R=Y"\Xx%;g̲s|}x:UԴC䤌;{aūbDoth\o@oZj}5T#Q +>q :u4.ȝ侇ܷ }rF/L1 `"ͥԒ|*9Do?a8rxX=@WLäCZVe~NS:↼.-Nݣ]pxHW`R$}!ɂXܽ +ՌQD+)LU\+K>-}y/:XO 4c~C;}ZZ ~X판{mU#%1)w7Fl(1We)Hmw[esܓZ8ZdCkKI;̇T]$2O Ai\nhr eò x&LcRfyW<*0h[\)Fqѱ v CF[D]!{ h~O !m7N sf@TzfwAxP0 %N?$Ju"b-QNOA51*3$g! xU<(fQ%Kq&SsC۸i9OD $:%*fsB, W~ZpeDñS1IXv<1+4>-vL Gܵ=w D%A\-c$+'pw}8aqC_a9~A|q>!t] Q@pRNxR@@YStܪfMWr}[JW"%槢`rAFdžt wgod<-T/P3hAl̅4gwW f2KA= KĴk%'o%[@)\T%to79$p}afhkS}o$<U)Ewl-h@ټX|xez=(*KĘa!![%AzW;S$d2t&2{9o)ԉ]Oe#v s7/}ɬKߣj6;v+΁P义 SfEw_CXK@|\E(YIeKBMW>7>/Hأސ󦬦N(m4>G@V^7XkzϯWMTp %v래 AJF`6U;М9X틊L'0҆ j3$Vs#bY œ pJ]uG;"\+0,q̮*2:RʒUVGG{xɖAԺPa>}ka@0f,-7ܢ.YXQʽt&I-7XGqҙ4jo3oK;4Rk̲]Ǹ-/za-S\M~jP%D@&x7+D+!I,3>hd+zZ ᫗,ޭ"4 aiwn1Zf*/3˧[IL纇i㷌tDG-?q+Xx, O`ՠw>l«|%'M(* '~Arco{:zGJ:EP-F3J7&%ax£}gȟlE̋dmꩶ"..E\Z6Ys,!qs &'20ctC|v.b%*H/az|\i[fֺY t0a^Ú~#E(>s{StFP3@47qSUQ[כ&t]%% 7.3Z$|"9,UwK?Zeg\?c>(b:.+н9ICWt. ޟ 1Q;x#e'[nb4}eWx.u ~ D# 3e@?(TMtMOD)3%hM"eefC[>g#V֑ptmS46Sw ߛ+ cl$52z*ilRu m5Wv]Lg9}LSUg3RlKdP.$ @>Mqi_5wDXf OI<ؚ 0bVTaQz7N{:J &:zo\IHD!F=tBY[,C7s ui)V^cE$P*'tWdP1]?8%,1XșNe5J&:挵:S偫 A#'b' L;(6'bC^& pX9s0k'm>#-ۅ^ I ( ~4Hĭy*ΫC%uFca!iV>p`(RKH@@s+˅ZikN?.%rK5J&Av]F\ܰMhm5Pk(N_Yǧ[ w-a \F #;m~Zi$U<΄TVt"f}?FǀwYuN6R\<]f&;+L^O!dH:pGٚh#q7%bB.'FjFv yKD|+ Hɖ8̬zH+m50F~y毰S_sAwLAd1)ʴ0Z[ĭծr"r|*:*ev/aƂ} &K19 ՍW2Pm1u-’mG[H-{ S57C%L>3WF3cO' .c3KsoC% D>[kS]V>ݕi+i|'՟X`ƚyf*W_7i4^.(F)7wrZb\tDhX Wr1Y)mኍ!Qśm=fA~;E`My?g] _՞yJxq@\*6}L?K,iA2^ f0Zy,jѨD6 w`uh|5rdi& l߳swbpędWasBකOEe@gP4ik/V|ƻV3BDfHd0 KSX >0AWŪ QLƃj~վu;_5^**? UXHFngp\/vMF' PGo!5f~f:(/2z1k#E9l]ߤ HGI{}BN;-SQwJ̪-?93nXEA-$r$'f'0 fßIj`TAڍD!<ǯB<_%*;b5snKc6ؙ&g FL$O"M*aEq?AO%qGF+9Z12ѿ4Hg8Ɂʟw@c.xK#1޶3p]>؜0j?FM\ Wڭ@))՗:B*; q|;.f-FӇG-*B´dh|VI`ץS6kmIm+)aJR#`tzhG!F`荥"W):t E#Ҟ%Fb)Q&I7[qi%p@zDwC,d&8WFDdI6Iq &I,{JoiR =ҌN{bevieIOG6rN7N?xxDtpKa <HE|akTWYU9{(isHF% -/ 2={t{ڔ,N]wS2d9=9bʭU:_!>bC[H~dNpFң7&McO;S>/Pj,桁7vIkȟըӍ&팀 ̜r`P9ZwGg)vVƅ<ڭ"AI!G^;N蒰E4QNʭ?Ƞy 8$|r@Hp`k؏}N'.3~t\!YZhi@=}*$Q)7bB-q\0Q/}`M"`m2RyXx)74b_[7͕N3]?OR2`Ddcdr!5(_}6ug |NUU?l6 ƥnb _!HZϿO'lW#\B2'h1dzxԓ0 & $5Tߊ N_5 2sPriHa棋*W)m/xDXL 0)02.@Ňlٶs? 6s( RV)8:PtG2g'5Z'cj-ΦU:IꋢZ`-Q N/{("U#QlSOhSRIjkM# lh_m@wv ]w#ctϧ"fZ@^hS?/ov|zl`].bALCnM p?rMV60sf#uI*;>k Q&L˙PM7 H\_⒗?5Z6J349Tehޅ6ᬂitm٬%Sg6GQCzwJ7"FtLCD-KݝQZ/,=9)R%*{IA7)lR~*]A'Xp2ug.dŚ9|◍=Q o;;w\?<ž!& ;ΖQWZ]1S I\"9@-crn8y5;r}#H3P$CoCTJFrHR~!88GΫ]'2; GlXsnT LLngy?1( nbbDmA pj{1HȮF L4&B}E~ʿُnY7=MT}`8*۴?@w'ΌY"䷬-ߞ{#_u`rA;H~˖miNp* 1?[{hn=6zﶰ4 H ev `A|:y!9JRK"3Iv `1a^DNAx8ͧp4~pLJhӀBK]7ruӬbtj2(v+{ȬZ":?5D Ȳ+y A7q#Oȷ JcSYm)"Kl@"/W_x* K#`al4\XXvFQJ$h|\-6Kdx`My فk1U7!h Z<QlYqP8ɳ_^K)k, m+b2$!!j0{ JASAhpNP{ͣ튱y @kb }p?|{Q;*%;aR7Z-kҬpP5x\/=HN*u1Wd?pb".<`wu<QN`l?AԈDAb]*+xs{{%'u [kSzV:VF6.-=MZ}J):AC϶dxDDCtY{GsM˕Ot410ڗz>#^EN+Dm0dBq&XwAyP<ñ<l4HC(qC t!1]Lw{2Yd  :!=$peAMG?Qqڴ/Ł#|o &plrQBR.(>Ety(R<VxPV3;Ӆrk?½nKV1arim 悺Go%UxƃYAe8E52ku^/p %|l߫5&#d}X#A;HJ~ fzѲe S%(ެ)\7hց#jbzwSｋtߚifJZR5j CeHt B8ZDOcm- :[Hd}Wƙ:KAη3 uB=/>!Dӝ>3eJP-\z s)/u)_*0K @T"ɳr4տChl;6&΍6⌖6J;Xѣj?q9EysD'urUp$ֽK@c1M%ʚ:A68_}TCL9-|a}蛢)pp+p'0W1fiR)Q{ZtVtb},H:XquNM-3謌z:.`,c={tSF_ʷmW럔FRûh{ u8Oq_zTܨZ?#5z'?HV;|6H;wGMG549(<#y VKt ?91q!}jU7MBVlH꠾ZhD(FvOmThR[]Q DsRS#ܦR2⚾ίACg_ba? ƾ7)FzoԧRr4b58DTwwx+Xe׭y޴ Ѹdha7D#-uK>=jMn#%aV:e$)mjaPHٽq礓ד*յE?IC\h2/$&N' >2b JocўЋ`%fITL R7ѕe&u궔]I=[N'Pƌ-v❡QFϠGIzhK}6s_ެ+tn_bˮ9 iф6=XԷI@9J>bw/u%"y[qo,Z1`par'eOdTJbT"'u^ʁ V##=iZG#{UZg~(} ~z.KO(8/Й*wo]ImiZxI6 c ؎^ X, 8`,LJBϸ(Q /d".̄s%_)Aj0Vӌ^ޯˀ=u41,u^/hsF9N gq+`Ė6;73&Rge")o(%5un4DBdZ 1J~lȊCXUj_f7qb|iQA/i ˰cg$ %"RG^j<{Nh=@ o-5ZCvbHl8Bx~Tk0lQp.̋`Alj&y]F{ՄuHd.Ɔk3;eXI'>XDq`/pjJ &èXSVPpP<Y2.P07QQӀsmҝEFf-)*]<79d&H7} ;^#Bg7|M&Kd>{KwՎ+!J쌊Eg|o|&v8Hl}nIri' kZqM,{`yeYjDAzz4EQ_A4(_~rZ~ߨ2K?җ&7W{Ƴ"ͧpUYD2QZSOdf,ҲdDz)il/"ViS6W(4T%\l*+6x3޽SF(8L":o<˜eno:U1Znz6ڧhwQc}hI@i}`S_ 'L1brO?:"TO&j4|ݣP?Z}2 dg3-y]2@-g?kog yrMD"iTaEagKb΍!XosUzG21 y&I 50}[N"Q.uaAdw:/ ԝ~B}4i4I`ͫSL˷vP9l=@rbֵjwrw~PXE4XDu%ESm;:En}M|m5o8Xe=cM$RVF‾ڞVfB*ƢOhoK4xO30 @r;%;X$q9Xnp?*[Eb1+IrQԄm:rۂ%ޘdhdC䰏ʍ\d"UmQO?U^B[K$oQv95MjW)8Adc /iWޟ Ȝb@xgu֐8[ntJˊudü%z\A$'oI WT&7 W+a)_2ϧ*e}M-,4ƻV`z xqG}2dsId1bO+0y!+@Wkx:6g[\F[ó[H{E{V3`15#K "FsO̺iGozxWu[t.t8J(wWR)&hGK~X@it`*^M;`pS̒Y0[UB#̃~[,뉂r-ϳ N[Ɯedn;WL?uw"hb[i[I]As6?7/T=͋w =>qRؖMvUy=QW|Ki#!T/_Lv߸IVَ>Tf„B}@rElՌ͗9K=rK+bue2x4M+n-5d7> W%Q&W&,H-H\zT\jUS9!1@<eL8WbuLz,օ\z*/UQ)T3ͅpJ @o'EXi-NC X0%}OX2G,`B]Jg:(%* ҕZ&p[MJkW%Wio ̗&ّیطP n5 3% t=J+[̠]<_q+Oܢ=nA]Kv.EuU.>SAK 1Y׌<\C^KJ 'F]5'f?GƧ0W5K`8T64aR|a( fZ8F_(3p5^at`#Qx=H7Rl')*#1+-C5s0\8l'BB{)4qGpn)f ,qq^U耒d_-wC UZp4 X7ܰ Tf}{krX;3 Ev7ሻ_~C{ qo"dtj`*^H5M։QpiNHKi5c1OJ &^uz%Q_k#ꢀh\+]SL38+݉9404X hV"dpx'E:VbB 1z:<Z3܆jӌFf?h!{k&KM }R... >ߙlqh`BNe3`3' H% SŃptBl,bq*puϴiI8W7#mm}7]N :}ݟ%xre=C6 Lo lF [xS&1M `N$C'ow!v<ҥp/Ƀ+.1"̸+dZ-d=s_=K7va`]D|vsSfU8tut'hmo њA$t ns^ )D((7ǽmj)'|.aTx.y-=ޟCf^V#G^ vA Ъe<(.ZB[@}n4 JǮcRmf2& dݏ+O0տl.܃0tz'Cslqe ȣ[ݦA} j^_ ;8tt ́ǣ=չi +@iӂ( k gֈ4PzQs-?U`/F7,E‹>xmX(OX'齓nϵv8s<)UiBIq>t ,nT54W3弍[[bH3ŊC"Q#xP?_DxHkU9\ ̆g0Ⅾ|b`Rl5f2B z2I6w62H.Q* R Ɯ>B'GnqMչ5׽7gpyh\x Y͹G5YJLC #w~36ɢTy&WxVCj9NwuA._QAJ"@z[~pcD}\"_)m7 Q{>\d2Td[p@0˜խ%!' ϓ(2z0=\&40 AƋ+ llPMAw$ zٮQǕI~P}ڷΒS͕_iE+qlyDžQxq\ B!~t(-DJ)glTx-MPV,yx߆P-?/0XK0͡k6 _=4>[іXZ^u!@"7WL=Y)MF% Kc(T3 2L=CոYAaD v\4DyI!*x#v?*"xV axrW0ubw m@UGS=Wdh$1m7ؠ?q,_~SL5jxS'ҭ0Y 5Zj7©).FT&U+}!U[R8!N u)IQ^xgҙT l Ak"!OSDY kz=׆hKO Ų f[1ᎍqbVtUr“mp}Ӧ1^veRKײ-98)T8#q)̈o(Asuqd=.@*ZS@(#\ 6GN$U}X#`p0R>Sa1d-RJKq:%oOl̫>6~E}Ssӱ1WPG+Ѝl#RQ =(QrlZl˘S͡$n%Uǭ\dw_o:%-X-#O+}?,Ő00܂8H3o rkMv8MFq꿏cbpO#E@( !M8d-?*Y8p+_\|+ *^e+}jJ3 D{8ivuI6 E Ң?+p-'ActsWGÄE.t{ysDF7Ա-[p99$ػY^ ithԗC"wf'#O%q%QB֭ 瞱{6R鑸&U}y> ,/_N/Z똰҇OYy˘/xAp !$i^ )imrCJMa;sFDa) St SDbďƵ$yϊbfhMU!XQimM Ӄr0e8O5904Y1qb9T'Lvr]M1E:mwwWq(óۙ]ˬDAV͵`:ayʋ/?بezG喣{H;8 Noã|%nONQҸٞuv@U*#kh`]%aymzaGj)s I{|Ba(rˬܠZߎ Uyu:$ M ZΎR@(ruH^mI/dn,:j'e ܂3)Pj@9vyFzXŖrt~5v[5!(LY;E~}eG`n MGnRtMhN>]ѦǬҳI>\K*Y]Khiһul"iѳ# 35]S2"Sr_<0$J(grPuWHS+Kϱ#+p>#+_ȦF4Hi<sܯOG](IW!29P4PDy)gެI$F5~ɚ͍j2F)Q/O$ob+&bM*G8}M b*B[\yEBVTrHw  ًp<$ᬩh&ʹ/M_ww9e+m,^(+dMƂ n`imSsF;mD7_E%_>-eE(t rp_GdG3sC~F[8__4eOPh~xn]8z S+o+ H<"1#pbrJ6tQC,ײ߳ny~0!R쾺УkOS|Didqx 6P/%{ihk=\j]~!i SFB g2n0b@> ¯h_qݍ챨GN!VxEs Za9m bWB&΂d hB.A ($ K:YyR\P/ټBQJ Z{XM-@/شL,yi~tp VmK\K(v}8=?3 ֠''I] p*vf0Q{)DTyV c~^?. ޻ͱ6H,o;Z g]I*jLi4݄Hd"TunYlJ[R uU.oC6,^F&A0rNs%FA u"z x䉵^$%=h絆@{v3̨?k1 炒q#'PY;\{k~. k&툭ӯ$Kk٫F͗_P4%FcR> ^PgG˧߶˲2Ŷ*]Φ! qAwcCIWѪޢ._3nEe_GMխ,%秌TrMaLHNxOStCnr4$YT0`KjNf,713ƫzGzs26-ioNϓI[\LĜm 8=D1_D8nKjRLa@ XYJJ?pr; Yk]/)X8G!vIFHދ1$Ty@{;9rO@G5ZH y|5 "g٣Ѫ˛W잶 ]EZ0k&5$,#i=¾Bmh:1@<^s)^ajJ<t??TD4G˅96"v#Phi%b1)1+{tY5QRkZl) údg-]{Wjdw{J"bervΧl;] ; ,pf r)>8ho7鉚mnCQ/V bϪ2*Fim'z3KاpŋƓ\m|l^L_>h ]+_5'1n=ؑB]DHm],>7z&B}u 37; OdFM}-Uh}ǣ4<!) G9oMh*_OXZ*c"PZĩly?50.mMcVK=qeҽ]I/{'k쿀K .ۣL4hlL%MhY U:xS\_SrQ mjּqѱE%-8GiP$.u*BzJR')T f>̣T!1G[\4DD$ gBc4f56gkBQw\u*yBl+Mdz|G|V<, b9 5G 0ZY~>ޙŦylƤR4Krf;_Qi,AS$%'(O05=2"a8-Og0xA[?њ[ǽmM;fNc K3ÄVh>Gu k޼ڱ'2T-^Ⱦ~#XD|Sx tm0L$"Bvف3qt4r,=fBfJ4DzRh1`W&+q?(z'F1pScF*2r k{Ɇ0, /.R_3#ʸ2z7F!q؆ơey2IkK}-\^-8C{pEG+\~[9HR$);")vNԟw}_uNyqʵ}f[&5kz$B,JG$;8!$kmT(%˄qr?'-[Q[4)QxyĹĹȬ2 rWYzQܢL0얊Zm6TMw36DT L!?kPՑ0[MK/nPfC.S!>᾿/:ݾji]Y|L~O]tWurmzN򕳢Cѳ^g4cZ&N't%X j]Fϯuc `i4%^?<㆏u\(Rt6R0҇M{B|;IV9>!>FAΑYaBf0Sj8_5^;X~w{M>obo023caOp5}g fag@R1cxyI>H:w+<*?TI4ZrAj!`߈pGxhjH?ϻ?E|9 tW'[d,؀?c͚7\cq, ijSʌo^^㱍Ʒ-9yO.QVs6`χywҙBh`:d̲b˂dEwk8k &42tBeęF Tq: @v]XܲP5N_R^!C/ CUnD6sa!VS\_Qv mLX 3)#MVd|gE?#IL- c*g(n6^{% i<)B "FbApJZDBT6bل(|-ȗ؁@$@|y4Ӣ GGH'~пs;s2i ^st!)Ǩ/dS48%/D>Bѧ 7:g#TIV,=${⡩wdP&{+u^r-O;g@( X'3I-I_tc6IvY"K2w9ř[>YzN۟rS.;1mk 0vS4PRPĘ ;ǐ M37'gɟOUsZ>z L 7;A)o!A7h ;(?s'k:P04a< ;yP"  9`\@Jrl%9K.|$e pOzsQ͟|QN)Mmnӈ pv!`&$YbيSP3Y S#"SH O4pjbF$i|d==1WSVSUॻYgl^m"aZZ!U|4- ET>`=A&#Qx ds3kƕQH5GY @[2j `<و YDvpzsΩ$̃{2hW:/^oT8tCi2k7"x> i!vX͜伖2Ae(f0/,' Wx*2h\b* qUXFn5}C/(Sʠ8D娞b,gMi$Bn*1"F5}VfRgΞ%֯6JEU~E>SEgNcFw?"14I*6T5\B;r,.&{zV}!Yn *0mxqtH6rۀ[Kn.ͪQ0QE;ϵ^g6ԕƲ~a؆t@,+]kA<6i:]esa 7=.ERk&F K8Y iYy-HaZ:G^yuNN!6J-u(3ki1 ˖ ؊EuhPB{I5҃Z_~y~ƒ*blWa $7&vY}L93; U 7գd\9ˌцxQK0k.MSw@6g'Bwh@x/N# di~<~={9@ysk(p-%{9hMy>!!pѺ8G;+ %>tElTQC ڋ*DGf~5u*si*9ʠ,vى o>{wʹ6k0t#90#I=D.ub~0*"= kBnJR;rr:#GmhbBh5?0RXX1|i$-0OTK4;n/4G7>@6=o}YgL=%eEԻꄊ6IRݕpU-M{jcVVL-q*i`|N,iP\NM?2~jVUYL<qUJ;n{1۪o\/v]q[IG{ycTs>j2fHQ/0,e+XL}s O, BZiX+Eu`h<h6~ ! 3E?&hlS&{|Cu G܌Ī4q`cXKa e"]SHh/nuG=):/ŸV V{:ޣLruKijl~~;P1OAR<1ȏڮAp GC=dޅ?Ԍ̠]jA*Jp7{yYVvE:+.S} TaW;4z,]7Q.|={p֥D%39&@M!ۍ$|u?XIumfgfnt_#P<*Z*~oB\z$.;!_2eMjl?}ƈ&55}fekmL;+O0d ?ˣL~y*1S-u'v>N`|<АSp7L:0-~=$ cPmL{Szˠ _ H!xz}M5s֛sY!k̦E7q^hP \B$TN6o5,Gل`otjr}"Q,4P:Ni]dr'~mzR3AK5,~OHU#=z\ƿܫ쪢%nʎLvBHk$t-YZet&x1oGhJcGl'v¹}j:sA.`Z)5BћRfŽ{ҵmrŢEqSL;Qhr@ju_,uLTuruAMM]Sʚ>xzސfc&H7PMjVO\%RLm퍚"i}҅#NzNj,<4$2[_r/H<]'UvFu@tQR p ?:zuTc.rؾRɺMCҏV$ 4֛a G$n.2c|cʖ6Y,4EKyIF880зN 2n RfVMrB; &e3=mھ^TcۼeR ,FG ,B >XVPg cKV{0x&oߪq +ITUɥ5(DK쫏C'2C;wj:VAfvXD?m"F4W+Ya,iFŝ /X{ ?lpɠX.mӡ)E"P݌+|uM;d'H 3(球MKxBdmށt4 /y/8n+?eDIGB6_G;d >u%knlX#E; x;M  DxŇ=>JiV8˒,=d --Y!dpFL>K-5He?nѷP{eMui8Fk1r|3NlP``ݜ p1ox-}?T")נ3IK w(5 Y5 kw⹞!GW_'+%4Zq$ $ȧYRcj+fhr tqG8eehT:#>D-^ha\yiq [9@(hOdDty ]r~JmA˽];լÕ@Pr<0nD{BۑCjQ:cA\k ez<1:$a",r,B_IDEӲ)&Hsl=sWS;$g9>#:Ơ`yLj XrzFWLMh5 CQӹޫ0xA2  E'Jܨ\ j} $s%j?\&?!-HzRPѩ2^_qbE?%U *KeDfN)c WHu^hS,TBkA᯴pp"ȼpokR/ȱN1iYazzf ? E m(1)ϲ\uĞv58JN`e& =MA-˝-6XDRcdשƽl[HJ"Z'd`3Lr2q\PjJz}Hʂ>쎦fAy&}Ā-#HIs50=ԤKv{%9㻩T%gh&'2y$Nί(0웠6]^NcyI/X=R;I#po`SF`XI%Vb~KQ~ b~VYrkj4ϙe]I3u.a~NEO-2^L2ym )'7H7< D 2}Ie\\ȸXw;r=ZYƀx%&մ\\dPb ='"7l, Bإ;`ˆ4VM ZpQ 8 /\3G^*adhP{#C(H^G^Ƀ0` EITk*]0F*2Cy(-6TImBop.;ͱZm&9#4Gs<_"rJЂf?vՏy@C6e^&<=$*!k?xA_>p% 6E9H%*FcatS݅C׽8Ku V̑>foB+\N }n8G><">#bTzmK@_q3QS hzdrtNk^/𚭳kSXαUU$Aͱ}孧*bqXXoeĖ;!GƩ >{ԈHw.n76tkɃ58}3Ci Vp# .7Lhp0/+d͆$pvV 1!C%͆韝Z CE.ihBE_h'){RjeW*T/G0㜑בwgWeg8=["]B œbdGIȭY׼/tC}&dI _-uD GC#Smt s]VٜqWdtd@~4[P@ Q݁H bm,3{(M b`#?"0'PA$ B( ỉWtx˕av/$= Fa[\]^ 0xО%klJ>9_ LLd< -#U ^HveJ5.+ZR [f5;#/Io8NM ARKWɴeأ%eNQV D \;PI×B/:xǰ|ԞLeS |) @PsC 쾽rVcCF;XGQm\u` jukj% Pf&mp}1 l֢0z4a+$󿃰ZW~o)`B*?,_a951q \J>rxL B_nZE{ a c<'~\NYd'R >yon rqw9l@{c$⿆.F~x\Kg@3K\%@K<SZbPp^9ٻ |l+ǂH-ܗUZ.V2ؚ#eNC~j|>C#qN #\M\Cqjڄ>VVC;ѿf-{x'ˮ6RDz8񩔀u|j9j:# 5D5=Jq3gy3JՍFh#o7b`Yz+KVs h+nl柗 ~oR0Bu/7nQRY?yv^`.{ڗX MW%kkZT rteN#>!񔞱 AzVQ~Ӏc/׎)M'\fFEcG2f hVX{1 vL %rN $6k*&$$$m4m$dCsb6|}Esƌn1"3LMdRP+~/L!J D .s>K߱jjwaڐh:ֿR~m3}X*fOd }<^ liJ1K#$ 'x w:-*uYc{>:GC]/5a|v 0_V7l۬>+{ -ܑj \xIU_uYs-űiy#Kvxk y=t8 FZVYi!n`\u> pߠZ&-R`cxX-!rK,ӨAіasKbQ2VY鉟] `nLXnśo,b{9уR]읎]: Xsc; u&eB44լ#cjw=Kwѐvv`{9 Ds/ajaZ<0ѭ"h {'`NČ$䬎t(`6GK}H*aD'WBʳmSoޛڹD$.|p̩vpQ 2l7 hm:"߂<'aKVoвY%oy/?0Na{J(<\J8T͹ZŽurF벻i Gwj;B!u+ *gԽІ^@[n;K/vx7w׮1q#HfX]TtVBcFfZ1'_u5 mJ%?i `-KwR,VkMn\nTPӑHR€r*D(@ E]*ko\RXx}be0&OSPXDWr=/ _ϷrZ/djmwP4'g:ѝdJUm̌&]\\Y,c#tH= }HϲlP( 5\[/؀ಅ|g!kKms өpboh9m&Wق@$" Vszpv syIi<"4ۄ& /-@uT2S wOfxj|9yPA de aQC,,n`ӐG AMϚ#;Od7W# V[7 eЋգD~RzF/c^Hoe.ZmIhjrܓ">e ."K3ڙ9K* vқETPQ% ߏs4'~+2 ݮ쓈d94.հYTæ u6mC:~VI26}JzkÇG{c&sa,'a?&,ZU,k$(U*34t$^`pT%|c=&Y玩*چR·G|_KC#H^ѻѦxR'M6!t: d4 .I>jToyF}4Lݢt Yƨi+BI_AUN1e+#>8{q`t+˽a D`^0ie-ڭwK󶝾IFN3=.v}[pbh_D BYJ>{~_-שVW0ׄ.u]Y\O1dOWROLɕm=tpI~@eXpDG3nɀ*Dd^A:|Zsψ*i񁀇m4޺)T;˲ldDOOE@^Nrb\w5 lIˢ@Td`Pt;$^33; `QW2VﭥŒU 6[CA?v[Wy lj5N_Fi@c /U,L&2w,wE;arsl<]8P蚕EEF  Ns85FCUa7<$EUimAւrT+pĹv9efd)$45 (?1[c"ֿ3 SSvtb =)lZ,bkb L߱.}`z,Lz)9M4!QgL"̺u4k;?29Lrf?hIk┽gxWVj@PoA+3=H1Vo?یԹc_@s,2a<^s%Aϋ> Sl+ 4/T#[gS^fda_^jWDA&M]\S9,)/&CrRve798ðk.5QVB5lL]Ssh+I/GRt5;آ ڵh.:ʗI9]&b i׀nn)sP^h=f߫5R(',,K 7Œ lmqE{l[{߫% @U]\g<$+?j=nԙ/^TZtc8/uDa٭Myx #٣W,rL8}Xjm웧@$EM. e"7T׻Xٌ\tSI^,vi濳Pp'ҳa$7 { 0J@sOhJ5;wQ'p;I;ӽa/J=⟆\cj;w@*4?v{f/F#_&AK9:!])>]<"n!`x$sikQLˊ3J ϴ$~)߁fgA߉<.u*XUg`ý*b.fu1#4&DH(~w:WRGodsf.5mDb;b!>AVCrZ/S%#h;xُsÚ/8oE;y/5rj?.1?X&ah_7Ѹ[:PORo-!kzhuğrpSRO-Z'S0R5}#Ф@;=/ xn꜑yG2f_bAzC^EHlinu$w#q45<#jMgf-./d)q`g9*3}U@XU+Ww⃾l`XP׃+a2C*-zЁ4"Uj _bYdh%C$y67lcX%WڡKlZybZ>F6ukʑ<71 \# R(ۃžc"_x`~Fc^5.9'7a,4@ˏJzjuۅ:mXwTqM8ڜ:ɹ#-tuN`XM%w?H/0I%Va 5͡HI?PvUe!\A`׮ ƁZh13Te 4ު#YEPM=B@c:`oSUw$ IUIQ8!~-4.9AU{|D  FQhx`[]/* 0Bt!< i^#N.9|.Su@1dz=c ,?EvM{M0ɋQ|J Mh<{ofZoϘF[o oذA.Rݞ SV$G7%ږ\쓕FX.e2)yWFit'?m8(.EжN) 9 EJڛiU3p‹c`$)gHLphmcWDYG V B@zPWlHX64[v&920Ó[p/N(h j\X"8IpLW۝AtV7| *|HHus 솚0dI;]-mvmhgNIs'V("XMa7wJošO5R#H8,A6MObРL@A]V4&b|XzpΘErvU(9t;΃%$ӷTJDC i)ݷeHe+SrvqSW[RxP4Α@Д.r-oe-tBz I uoM7s4vrQ%W=yV5[A+X ݳZ e>]$ҽ)^dyk &xWaW ol +fAJ5C띁CV eC͊ovsD2TBfk O}լtX^+j0MYqͲ=m@ cdVTd!P#n&4&#N~ '׭ :YqyG{ sWW*OYܡ^+`gf]¸ƒv{m&z5A.E4G!۶@YeOp'Q%/|UrM 'öקr@G͉_rڒilxIt34gIpʘ,Kt}qppTT9~՜?"Q}`Eevd[ 6[rDϿ{q @c[?޸R{_@[^uP܉],(;\7KJ1z1&x$ciŌMQ$촷)Tb[vdBwUm-qFv Jz6}䐱yS-=icp%Y{ԔƉ8EtFC>A߼>Du?f&ƌMs.B `QSU̍O!"ȕ WL1af5VEsbN}Yp|N 4ZLЧw*ғa 9i6CSQ=o++˕2GU/vw:Vtn[=?3BۧɁ/ ǝ.2ٓuVYƒK7\(#@um"jMU_*:\ _ kG 3? kqFKr*֭.7(GRMB'g_ 4$dFr 򗻡Kϳ|? LvܯK{7Q*{WQS^8(q- ̹QBΨ g~O Ec5X-ϒ%j{ d 86WT/^ +`LD# ;/%.{Foy`%6PE9fq?^v8A#~ەs~:/ȰEVΟmU^]>fŜԖ o8IM+ӄ塊  YZ