openldap2-contrib-2.4.46-9.58.1 >  A a5p9|HHtɺ&їT+cN,=X0.CTLHbϏHmHI1ETRSa?ɴW+Iԃ܍HJ{gt} YQ.5ë}J`ˏ+D*KRtbT4j9mH3` 7=fLƼՅ 6^RG6>1ՙ(y  iv5o7*ۅx: `a1361b56e6ce79cb074a24327a55f2e5e1afa725c1a5055b1cb809c93a2f27f679612e2a5c9d8192b6080ecc68b821185743beee!a5p9|(!s~Lwt< tU;DI 2$Ũq$6~&R.Veiy U50)\=G yO/R (7Ͻт Qj#R9ޙb"Vѩǀ@2ʼlB5ɁW8o{T]ʋTpE(F,wϫW~2p>u?ud " ;DHTXq 44 84 4 p4  $4  4444  4 (]8d89D8:Q8FbyGb4Hc`4Id04XddYd\d4]e4^h@bhUchdizeifiliui4vjhwr4xs4yth:zuPu`udujuCopenldap2-contrib2.4.469.58.1OpenLDAP Contrib ModulesVarious overlays found in contrib/: addpartial Intercepts ADD requests, applies changes to existing entries allop allowed Generates attributes indicating access rights autogroup cloak denyop lastbind writes last bind timestamp to entry noopsrch handles no-op search control nops pw-sha2 generates/validates SHA-2 password hashes pw-pbkdf2 generates/validates PBKDF2 password hashes smbk5pwd generates Samba3 password hashes (heimdal krb disabled) trace traces overlay invocationa4nebbiolo SUSE Linux Enterprise 15SUSE LLC OLDAP-2.8https://www.suse.com/Productivity/Networking/LDAP/Servershttp://www.openldap.orglinuxppc64lep~ pwxi h~( 8pP큤큤큤큤큤큤큤큤큤큤큤큤a4na4na4na4ta4oa4oa4oa4ta4oa4oa4oa4ta4oa4oa4oa4ta4qa4qa4qa4ta4pa4pa4pa4ta4pa4pa4pa4ua4qa4qa4qa4ua4pa4pa4pa4ua4ra4ra4ra4ua4qa4qa4qa4ua4sa4sa4sa4ua4ra4ra4ra4ua29e90de58f7fc18fbe7962fcfbe5add2fdd3c85fe715a1d6639551f37d3936ecf317269a8b169c870b4a1cf2cc29b189f280edec17556c8c3147751396ca41e3fc29e4e717f3fa44236e6b004246cbfb579d2bb816398755e4a071ede5d40acb04516ab62ebb32fb7848a98697aebf7e00eb00c7c7612fb0aace0ff1c3b974d2f61a1ff922f16618fe8becd68d62b51badb81a6f266f384e566bed25b3c920a34b980c0326b0380cb7f69573a85c4738ddc95f2ec72c022508d51caa02c88ab3592f976ca689d85c457aaec0f6af293783d07c3304f5421f3a8428416b1dbd6a7e53a7b24ae2096192e2517dfade139c9ebb2ae34acd9647a5a99e5031d10cbe084b9ff54510aea552ca6661b6d9f36a00ae11a6d01401bb0ebaa0572f1606a66269900e409c788bf91604f241d34d42879ae42b759424dd9bbc7dd4b557243b13a9dcc49ef2f54f573378a09b32679cfd6b5a6ffd009998a6dea39888d4f615f4e9850fcdac5101a276a813701cf23aa54499bff467a42a667edfa3807a4ffff5303bcc6b5d36b7f6e7fa20481975e2b7fff375bab602290db5c7f796534e6255e35002c9cef31061926037f339ab36a2fde03d6e5f9cc472305540b1222056c7788713fdec6736ebadd99e17c817dc807dea3fceabdbf0cd7b17865ed827ebdc57a9ee59fbc0525392ffbc2fcce6c1638f0f8c3132e1977bae29a15d79c5dd1d040e86ccb662118e9ddc449b0dde6f55fe1052a313730ff351787156706aefbea06048db5dca94080b81c75530afe4be005a4097ced06d9e62dbb96ffdeba9cf9cb1bab260523d73902e3d57aac9129137d2e6f6ebe792ad2b2b62b0b3725cc820a9597e793276e0e54795304510097b391e399286f99a73f05e66c40e19a1b0b9927dd05e1b0fa4d17885adf92d2de83287ca6445027f08531867c265cc949adca3597f1f4416a2a8c370fe130d38ef0066b09c36dd44002bed83968940f8fa7c296b29698018f89f2bab899d100df95c2080ca2c3fd5b7d738926382e78f48d5ba2a0cc2ad03e205161d4c3edc243e004c353e251f614a904ff50fb4b7356bd132fa0c0a1323f07e24fc2916523838aab85e43703a44abfda0eb2afd081c70246bcdb66af66ce3f52d43348938b53082397662843b3e1a1a2f462c94123addpartial.so.0.0.0addpartial.so.0.0.0allop.so.0.0.0allop.so.0.0.0allowed.so.0.0.0allowed.so.0.0.0autogroup.so.0.0.0autogroup.so.0.0.0cloak.so.0.0.0cloak.so.0.0.0denyop.so.0.0.0denyop.so.0.0.0lastbind.so.0.0.0lastbind.so.0.0.0noopsrch.so.0.0.0noopsrch.so.0.0.0nops.so.0.0.0nops.so.0.0.0pw-pbkdf2.so.0.0.0pw-pbkdf2.so.0.0.0pw-sha2.so.0.0.0pw-sha2.so.0.0.0smbk5pwd.so.0.0.0smbk5pwd.so.0.0.0trace.so.0.0.0trace.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenldap2-2.4.46-9.58.1.src.rpmlibtool(/usr/lib64/openldap/addpartial.la)libtool(/usr/lib64/openldap/allop.la)libtool(/usr/lib64/openldap/allowed.la)libtool(/usr/lib64/openldap/autogroup.la)libtool(/usr/lib64/openldap/cloak.la)libtool(/usr/lib64/openldap/denyop.la)libtool(/usr/lib64/openldap/lastbind.la)libtool(/usr/lib64/openldap/noopsrch.la)libtool(/usr/lib64/openldap/nops.la)libtool(/usr/lib64/openldap/pw-pbkdf2.la)libtool(/usr/lib64/openldap/pw-sha2.la)libtool(/usr/lib64/openldap/smbk5pwd.la)libtool(/usr/lib64/openldap/trace.la)openldap2-contribopenldap2-contrib(ppc-64)@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)openldap2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.463.0.4-14.6.0-14.0-15.2-14.14.1``KW`/@`+_@_@_/@_FN_?@^^^*@]B@\ڭ\r@[H[@[vZ@Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@XWk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V @U4@T@Tuwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comwilliam.brown@suse.comvarkoly@suse.comvarkoly@suse.comckowalczyk@suse.comckowalczyk@suse.comzsolt.kalmar@suse.comzsolt.kalmar@suse.commichael@stroeder.comfvogt@suse.commichael@stroeder.comrbrown@suse.comjengelh@inai.demrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comhguo@suse.comhguo@suse.comjengelh@inai.dekukuk@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comhguo@suse.comhguo@suse.comjengelh@inai.dehguo@suse.comlmuelle@suse.comhguo@suse.commpluskal@suse.commichael@stroeder.comhguo@suse.commichael@stroeder.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comhguo@suse.comrguenther@suse.comjengelh@inai.de- bsc#1187210 - Resolve bug in the idle / connection TTL timeout implementation in OpenLDAP. * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch * 0233-ITS-9468-removed-accidental-unicode-characters.patch * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch * 0236-ITS-9468-fixed-typos.patch * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch- bsc#1182791 - improve proxy connection timout options to correctly prune connections. * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch * 0228-ITS-9197-fix-typo-in-prev-commit.patch * 0229-ITS-9197-Fix-test-script.patch * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service. * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch - bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service. * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch - bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service. * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch - bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service. * 0224-ITS-9428-fix-cancel-exop.patch - bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch - bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch - bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service. * 0219-ITS-9413-fix-slap_parse_user.patch - bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service. * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch * 0214-ITS-9406-fix-debug-msg.patch - bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck). * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch - bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read). * 0215-ITS-9408-fix-vrfilter-double-free.patch- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime. * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues where openldap would crash due to malformed inputs. * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch- bsc#1179503 - fix proxy retry binds to a remote server * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of service due to incorrect validation of modrdn equality rules. * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch- bsc#1175568 CVE-2020-8027 openldap_update_modules_path.sh has a number of issues in it's design that lead to security issues. This file has been removed, from the package, and the %post execution of the install. The function is replaced by /usr/sbin/slapd-ldif-update-crc and /usr/lib/openldap/fixup-modulepath, through the addition of the source files: * fixup-modulepath.sh * slapd-ldif-update-crc.sh * update-crc.sh- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509 SAN's falling back to CN validation in violation of rfc6125. * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch- bsc#1172704 - Change DB_CONFIG to root:ldap permissions. - bsc#1172698 (CVE-2020-8023) - local priv esc via start script chown -R on olcdbdirectory path. Remove chown -R on start to resolve.- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch- bsc#1158921 libldap-data should be requires, not recommends to help prevent user confusion around configuration ownership.- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect authorisation of another connection, granting excess connection rights (ssf). * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch - bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth incorrectly to another backend, violating multi-tenant isolation. * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch * patch: 0204-ITS-9038-Another-test028-typo.patch- bsc#1111388 - incorrect post script call causes tmpfiles create not to be run.- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh - fix the script- Emergency fix: move tmpfiles_create post from the library package to the main package's post script, which ships the tmpfiles.d configuration. Fixes the post script of the library (-p /sbin/ldconfig does not allow more statements in the script). - bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update) * source: openldap2.conf - Added a patch to let slapd return the uniqueness check filter used before constraint violation to the client. Fixed broken memory handling in affecting error response of slapo-unique ITS#8866 slapo-unique to return filter used in diagnostic message * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch - Don't require systemd explicit, spec file can handle both cases correct and in containers we don't have systemd.- Fix CVE-2017-17740: when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack * patch: 0017-Fix-segfault-in-nops.patch (bsc#1073313)- Fix slapd segfaults in mdb_env_reader_dest with patch 0016-Clear-shared-key-only-in-close-function.patch (bsc#1089640)- bsc#1085064 Packaging issues have been discovered around the openldap_update_modules_path.sh which has been corrected: - the spec file was wrongly configured, therefore the script has never been called - the script should create the symlinks first, as slapcat is useless on a system which is already affected.- bsc#1085064 Add script "openldap_update_modules_path.sh" which which removes the configuration item olcModulePath in cn=config which is after upgrade from SLE12 to SLE15 holds inappropriate information. If the cn=config is being used on a system, the conflicting items in slapd.conf are ignored, despite of it, the backend DB configuration section has been also commented out in the default slapd.conf. In case of correct cn=config (the olcModulePath has been already removed), the script stops without touching anything.- Upgrade to upstream 2.4.46 release - removed obsolete back-port patches: * 0013-ITS-8692-let-back-sock-generate-increment-line.patch * 0016-ITS-8782-fix-cancel-memleak.patch OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048)- Use %license (boo#1082318)- added 0016-ITS-8782-fix-cancel-memleak.patch- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Add openldap-r-only.dif so that openldap2's own tools also link against libldap_r rather than libldap. - Make libldap equivalent to libldap_r (like Debian) to avoid crashes in threaded programs which unknowingly get both libraries inserted into their process image. [rh#1370065, boo#996551]- use existing groups instead of inventing new ones- added 0012-ITS8051-sockdnpat.patch- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- Added OpenLDAP new feature implementing OpenLDAP ITS#8714 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch- added overlay trace to package openldap2-contrib- Upgrade to upstream 2.4.45 release - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch and 0012-use-system-wide-cert-dir-by-default.patch - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch for supporting modify increment operations with back-sock - added overlay addpartial to package openldap2-contrib- Remove legacy daemon control that was used to migrate from SLE 11 to 12. (bsc#1038405)- There is no change made about the package itself, this is only copying over some changelog texts from SLE package: - bug#976172 owned by hguo@suse.com: openldap2 - missing /usr/share/doc/packages/openldap2/guide/admin/guide.html - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546: openldap2: slapd crash in valueReturnFilter cleanup - [fate#319300](https://fate.suse.com/319300) - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545) - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple "Connection 0" in a Multi Master setup normal ? - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546) - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545: openldap2: slapd crashes on search with deref control and empty attr list- Drop binutils requirement; the code using /usr/bin/strings has been dropped in openSUSE:Factory/openldap2 revision 112.- Remove superfluous insserv PreReq.- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch to let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read (bsc#1009470).- Add more details in the comments of slapd.conf concerning file permission and StartTLS capability.- Test for user/group existence before trying to add them. Summary spello update.- Move schema files into tarball addonschema.tar.gz: ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema yast.ldif yast.schema - Package previously missing schema files in LDIF format: amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif sudo.ldif suse-mailserver.ldif (bsc#984691) - Fix a minor issue in schema2ldif script that led to missing attribute in the generated LDIF.- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.- Move ldap.conf into libldap-data package, per convention.- Move ldap.conf out of shlib package again, they are not allowed there for obvious reasons (conflict with future package).- Build password strength enforcer as an implementation of ppolicy password checker, introducing: ppolicy-check-password-1.2.tar.gz ppolicy-check-password.Makefile ppolicy-check-password.conf ppolicy-check-password.5 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch (Implements fate#319461)- Remove redundant -n openldap2- package name prefix.- Remove openldap2-client.spec and openldap2-client.changes openldap2.spec now builds client utilities and libraries. Thus pre_checkin.sh is removed. - Move ldap.conf and its manual page from openldap2-client package to libldap-2_4-2 package, which is more appropriate. - Use RPM_OPT_FLAGS in build flags. - Macros dealing with old/unsupported distributions are removed. - Remove 0002-slapd.conf.dif and install improved slapd.conf from new source file slapd.conf. - Install slapd.conf.olctemplate to assist in preparing slapd.d for OLC. - Be explicit in sysconfig that by default openldap will use static file configuration. - Add the following schemas in LDIF format: * rfc2307bis.ldif * ldapns.ldif * yast.ldif - Other minor clean-ups in the spec file.- Use optflags when building- Upgrade to upstream 2.4.44 release with accumulated bug fixes. - Specify source with FTP URL - Removed obsolete 0012-openldap-re24-its8336.patch- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch into 0010-Enforce-minimum-DH-size-of-1024.patch- Upgrade to upstream 2.4.43 release with accumulated bug fixes. - Still build on SLES12 - Loadable backend and overlay modules are now installed into arch-specific path %{_libdir}/openldap - All backends and overlays as modules for smaller memory footprint on memory constrained systems - Added extra package for back-sock - Consequent use of %{_rundir} everywhere - Rely on upstream ./configure script instead of any other macro foo - Dropped linking with libwrap - Dropped 0004-libldap-use-gethostbyname_r.dif because this work-around for nss_ldap is obsolete - New sub-package openldap2-contrib with selected contrib/ overlays - Replaced addonschema.tar.gz with separate schema sources - Updated ldapns.schema from recent slapo-nssov source tree - Added symbolic link to slapd executable in /usr/sbin/ - Added more complex example configuration file /etc/openldap/slapd.conf.example - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap - Added patch for OpenLDAP ITS#7796 to avoid excessive "not index" logging: 0011-openldap-re24-its7796.patch - Replaced openldap-rc.tgz with single source files - Added soft dependency (Recommends) to cyrus-sasl - Added soft dependency (Recommends) to cyrus-sasl-devel to openldap2-devel - Added patch for OpenLDAP ITS#8336 (assert in liblmdb): 0012-openldap-re24-its8336.patch - Remove obsolete patch 0001-build-adjustments.dif- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch to fix CVE-2015-6908. (bsc#945582) - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch to address weak DH size vulnerability (bsc#937766)- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch to fix an issue with unresponsive LDAP host lookups in IPv6 environment. (bsc#955210)- Remove OpenLDAP 2.3 code and patches from build source. Compatibility libraries for OpenLDAP 2.3 are built in package: compat-libldap-2_3-0 Removed source files: openldap-2.3.37-liblber-length-decoding.dif openldap-2.3.37-libldap-ntlm.diff openldap-2.3.37-libldap-ssl.dif openldap-2.3.37-libldap-sasl-max-buff-size.dif openldap-2.3.37-libldap-tls_chkhost-its6239.dif openldap-2.3.37-libldap-gethostbyname_r.dif openldap-2.3.37-libldap-suid.diff openldap-2.3.37.dif openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif openldap-2.3.37-libldap-ldapi_url.dif openldap-2.3.37.tgz openldap-2.3.37-libldap-utf8-ADcanonical.dif README.update check-build.sh- Upgrade to upstream 2.4.42 release with accumulated bug fixes.- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements. * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch * Remove already applied patch 0009-gcc5.patch (Implements fate#319301)- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks for Berkeley DB version- binutils is required for "strings" utility invocation in %pre [bnc#904028] - Remove SLE10 definitionsnebbiolo 1628845185  !"#$%&'()*+,-./012342.4.46-9.58.12.4.46-9.58.1addpartial.laaddpartial.soaddpartial.so.0addpartial.so.0.0.0allop.laallop.soallop.so.0allop.so.0.0.0allowed.laallowed.soallowed.so.0allowed.so.0.0.0autogroup.laautogroup.soautogroup.so.0autogroup.so.0.0.0cloak.lacloak.socloak.so.0cloak.so.0.0.0denyop.ladenyop.sodenyop.so.0denyop.so.0.0.0lastbind.lalastbind.solastbind.so.0lastbind.so.0.0.0noopsrch.lanoopsrch.sonoopsrch.so.0noopsrch.so.0.0.0nops.lanops.sonops.so.0nops.so.0.0.0pw-pbkdf2.lapw-pbkdf2.sopw-pbkdf2.so.0pw-pbkdf2.so.0.0.0pw-sha2.lapw-sha2.sopw-sha2.so.0pw-sha2.so.0.0.0smbk5pwd.lasmbk5pwd.sosmbk5pwd.so.0smbk5pwd.so.0.0.0trace.latrace.sotrace.so.0trace.so.0.0.0/usr/lib64/openldap/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:20856/SUSE_SLE-15_Update/0373a0ca7d9880eb33e66dbd6a3d8ef4-openldap2.SUSE_SLE-15_Updatecpioxz5ppc64le-suse-linux     libtool library fileELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b2dd9ba9e79a1b7992bf9b385cfb028f48d546d2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0bc4c7ccf1a5b2c275f275b41aa549e9227f8e39, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4e96ff44ce3f3ee296f58c72e0f7a6786c43d4e4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6422b447b22e2ba661d9dce3e60ab33b3e7d7c7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2c5bd7b0c25b49e809f81707f7eb4a3ba06b78e3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5fb2bcc9db3dd61c4681dc28f22428de944560e4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ab95be760dee482c926deb53c69a9fd9b7eab12d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0d2cf16e1734e6a87107daffaf3b3ee420a15a3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b73dac49ae247c0d79690f312729fa86a693bb44, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f9b9ad33d0c89f6b292308700f4f5375d84253fb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8e4f7ade933fd344532c7d8921b48d7c69bee207, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6eb9e39a5b3e440fbd26637f9c5677a6464affc0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=06759675d2b59905575d93ec2380c994cbe568c4, stripped "#&'+,/067PRRRPRRRRPRRRPRRRRPRRRPRRRPRRRPRRRPRRRP RRRRP RRRP RRRRRRP RRR?'s4|R7h3utf-8438be8cf2e472f6547504c2bfb0b8325387d5bb36219dbbc86f2c73b4089c974? 7zXZ !t/] crv(vX0õ.ҽ0JdL=F}ulfjs{v]*n;۳BC q&3fXBlʋJĔ=&KUf(عF9X WHcj5R%N?:z"%"xO Gss%Z3Nl)MEjؐzbvptҴlA2/sV wYHc1p^ԅjm~X[HʊT4VEҋM)7?) GCV*.jgi;M֔rwAW3\r?}_Ehoӄlc!ѕS\5pqО; #v'\.krIxZ> Et ֛yD1C틆؞b8 hRǛ3G2?v.u0CTieSu C3VAѿbј]=o$438D}\!g4^phG|];Fz !?lmti8,=3Y|H?CP?Mk سN*j>k8CK@K,Y bKXQHl,܊:#D\L=/YOGi&7\zo}~Դ!%t o 5Iqxh/#/ewYN)R./Y{3{3qEjK<<ۡ>94sJy,>I& Ynr矻44zO:_=)!|p*)kMZ.jriXS1 c~=%(i0Xee5aĆ3k]U`3s mPĐ <ۜUۘvM@e8"Slb+#n`\6d_\ Mmtz᣼۬MUA-g}OZf;$ɝ4C8IeQJY\H*>-je.=~.]?TNi .^}b ! ;U<3gXj(6+"R`'Zdi5n-4'uf }nLT~Br]^[ZHqj31;LғL)Fˑpp .K/o@}RE@9+MUӶ-'Qkzr-j8v9{ b]RϜsʹ`C# }FTwPfF@?o%i7EDx0-Q[ ĸpŒNyE$ {S% zK)b'M01M`̟/,3敵%(~|C!Xr7m&PG%Lz\2!祍_p'T п'-9@{:~:8<VaZ8L00@w$- ((\bP,\;pAp*rEPUCߵCck[ꪟC< (DΫń}&ϓA]FǠ\bv]L$޳е . 3<ٲB&_xR@KGgT>~#OLUb,,D>YΉPWblf}`5nT e󤖙o_F얯J2.(pD}(g F 4Mޑ`sq<=[f*ULӡ!5C&Pn t`@T2l#[v'1E*<4 7-_W+^o9!T͏B^uP8(֚%,~CQLӑ8 WMfP 70?r ?͐(\X 24+ ]Da=Sl!:H (k`?_M5U rA])-ͣ~<\cN'nyCEnO8|:PuUX٪J,5wgByZ|j[8]unx@ vviGnي+p{v.Pa8 ppP[o~rq#Ungݲ?&6E_5Fm*gAy#OK::'()hDj蚷N䘩 %  ʎscMͼ])!q^_5͵nzp hUs@ #?8KϒH/qĒsy8}^qN%UQ'cfB X.k7lo6`$'mޛSgY_& <P?|sjQص1-+hi^lD Hi`A$Bf,Lv65zU]w=S i6^ye#(]n%<얎"cWV\z5*%r yBD!U&u4/Łn<֒:V mR̜jp![<M[:Et:u8Jom?_Ѭ IOw}0ΪYWᛖ&Ha gHШŁz6ՍD`78KK nEM幃R}:< 0Ni?oSr%Q̌b89F!ew/Pjqۍ`JJ%;AԐF& QX'6כ[cEB~jn>oS5#mHZ”pbk(gq|5gR߮R﹧kJm:PKsvX)d#g3{ZF6oƅ ->`m@V:-r}lbfO㉱/.ܮ5W!s9+yAi祧p1 MC,epKp\|~sdez =݄lD }31PAa#N꺊(DZ;l.¦FY_">U -ڕt2ђy{05'2[ZWFJȪ2%`'v 6!ò]>hrx EO>H}E1e j{qMV׮`F qZ|ٕwowGn${ Xvt{"[4Iuwv*mœw1"0vK<'d*Xôpuݒa=x}jS~/vuEWGŗ~{HxN|mg_i1):.O`~ӋʷU*V V6F>>^1cQBd}WZ&WHDp{rmK7h#N,jۅs(sr<&pM c.&<Eױ4N[yWZ1:| ES# _1* LֻBoڕ?$[+j`aO۳wn9Iq,9{ Q N qe@sյ.h~f/ PTIkڄX)=ŅPSXu,uZô}jLU[6]E5ZdCWP,!'hiDkJ]+ wC˯vP?xg P?*V[Cځ|BRΘnh|4(n<.pQsq 8^`"T% [ y)0rUkt@}Ͽ6G=M ֌9P8q%,T"):1!ldcap٥{!n53gAF*),J{={Dm~Ijg[r12(f3301vny}h{'| 0gVufVxăJ=]ˣ]ЛX[Cօg dBt)>,;16ΎGPqN=髬q"McBb.Wܓ~NH9 Zc8yʳ#8I\hᔡ'VNۄgć7[1gV*Hs(5ڎ=2.:(p9soUJ($70xt'M.0%HO?xuD>65ΝЗ5Jմw9ݨ1;'R F+n莹,5+r+etܝa?_r$84K2/4 I!ֺf ~X'&B@RO-Q\`TqZ~ʍ"5$gNڡ  &fUil{ t[C>1i㐔v֑LFͲ0 4=73^aIr֐A1]-w~8ˉ*3"s8"[&['E ̾g-@U4TC9KləO$pPscCw.VPd!dnKc5~qkP(~ G4]Rvg?JUX٩ǗTKG;s0P gVhep-TSnp,U/1% JmmQg݆Ž?hK~SfN=x,l'5;gyp 9&E" ^!鰈 ZD(Oʸ+EGunHϾCe X'PI[q=w>5<$"T >z;`2 iDWlNTh7 {H2R;\|uA.x7d]SW3F"B#HҺU[rLȻ"={`|zi:ј68f0?"  |tz/(uDjfleZy!KbP]dC[i &v3^B ZNIL3-ӧXn#ֱˏUu_,_Б9̏ 0x>0J<oڋCg}w-}gbq0Ha(8ud}2 ~4;Taj 5y~}PD+x>ꓗi-5ޏ܇WDJ\I3Hz^¬݀0XG*d5V-Ci_WX=q}7`2d_%uۯ^CC2}TΠ.e>uso7Jh"}.nzMdF` r;JpjCϠ˳}gȔ{j*p盳+،fiGYd%RjU:Ua ϒ]/BgJd: H㝉{\\}yWTԺEiA`]lw;;J.#CגhrpOn]k. Z׍yc`8rM(9 xLۮ<E9Md Uidr[Ue~)Ry=޾4qQlbxeQ2 ˸4{*@y1Eִb\^rlҮlVT'D9j%@NÙ :rX4 ]+PmDױ2teGV.mbp+=vQtdڤ$zf:%(;CoلLJKq*?|. hD_0s M6|s#̀H7EVZO,(~ESESQ+u# FDL 6) T4/!Dr lE.`q01u\U"|E-4PG/o« >]Wf\ L zCeݡ:o*8^X;-0`iȪy#QQ]ڗQ%}8QO.Xh>8KvXm4k1Z (vAKIbOTPcM#e![ΦGJ#W*eFTmWCU&9P adZ*BO6}\Ƨ4i1`+Ć81Ov"م~q 9'0˂`$[{=P} ݫ_1~<9(@ikTdTf"q >4@b:!:6gwB_Xf?Ei:.lxNp*1;-Tz3r<٨H?2P>MT.,Nng N˶=Orqm8duS%sbѸ<_*נP G|k1'vqL E7KFcKtNJy~V6)m/G&-bMk; MX#,H# b1(l+1hoDN~GJDNJkkQ |wֱQeD1Z|>[nO*@Z[3zA{Ά!"V1  ̢|x=#P3 c^ JR[-yf 8jj/z:k\=,*fڏMCQ(WRഺ}˛͈{A<%,EY j >0rĹ:wu͸TZ sQy".V>9J3ih]qB|ޖ4ϗd9qA[iy͚i(rŏ_W<']6 @ip/(x^~h&P0 47:9~0Eq5AguZ7Lc"4.Q#K*B?]#@M7+&( {eYnd I HnxVK$٧" YHd A)C0ځ%ݧ_GH>])~YJX%pko4D[@I|wn :Qi4Ҿ|/xk`J3nKv_mf= I{=Iv~}ڄWSZfT tAxh*]7̐JԹ9u6yv"8Gi t#ޚ*!w"*^*y0> oEp\XTTX2ǃ`: J%jm3@Z*am[ AUc@xfv^A J X"a|rkLS~<;;xpU [TSrQL,jeTPNނEn3Qfg'Q&@$mRʣf:M*>}rF؀LڃI4+8n\ )LM}'On8;}DP &\XaX9XܢV=0|on X (ԖoǾ3qcQp`6*y~;i 1.˻)21{#P=or-~4c٫G7k/a|wE'κB&!a.modxl*b=RPExra5fK]9450ۊ9f9)X^5/V KDRCڅI<Dw1yƯlbyTb?3VSߣ[V pƜpnҚ)GhNK'Ԡ7NXzC#%Z2iا}L{f͌H IO @(  ĢL I2L,wZU={*mhބ!] !}\'a׌MyoHBkq;I5qW+@Y}ߧV"cي\Pv:.NO1(ΑHԃ80rA٤ombO=&٠.(b'y+]G Z$U2IrECkN = q19N0f(EfڱRQ9v@d?rJTwKHL cepEUV#e&PKX@!Tuc C{E8 $3~)Z$rA铚ŨɹgA9|ϐi5-7wa3b(Bg$R $S|y:m G.VB?$PCtqKmjO~DظV΅ 01D.-mk0L ZՍ6 TEzG˔0@x-Jy}c >ދZ_**=sg3JD6<[EdNo QtȼiT\5{n[ gk0<ttYd=桸QDZFj40t]>Jѣ<%y&T=!OP5's|&\lR rˡm2&CYh)GaMjd[cZ`-z|Xʛi"FRVT{_PQDwN0楗wp#)н=`$g?b!v@:yOujz t#WLv 9u swaum2=[jRh׷TԘ07Ȯ }+< I['Iȉ"y@S0aNyl/]O*Q5G[Zar>&I7  ߰5C skw.õfbދZvȱ\AvZhM1]sQè%!Lwp0B?S9w,(A)A=[;ƜIgav91$" #0 x|`a%%d\~7'}k,"(S5㢻=`!™v7_ڠcFokAVH/Pwa] ]o d4q2 %+XPR6әb9L0fuFye"b7z*J]LG,&GZt}=2AL"wt/QkZqOS`~sby id"8E|XٕEFo<ɶ*7pYv|q̺=Yt6߸&IǍڑN?DhFo(@+m١Jv_Ae1= 9ٱfS`J?Cw!wFCJng1r%@^JtPM%]BqM^htuNOÞ6aP,?+DK Q^:bteWygj e?v;m0-`gur%]?: J%@dOM#s!03 (rZpu\UGa~h+7g80%='oݐ-FzVW~1f*YYsjŶ r J#H2>:t )kXHD! RQ0Nt.^W5ԿJ瘲ft$E&صeF.:y-\ VZN͌=t}4-v+AtIܖ F{G~>ƘRx>Cܨ,4&7jKd/\MM+~%$AcFuPbm_IֳC)T|l7'XWS :bS^GVnS4r\aLC$C_$ٗ51>5V!9X/b< QDS L?ph^z"tOVD/ƳH9[\x"\G3|eՉs&, Z&/WvxL3iGxdMaM߉?-o6=iĕ%Plf6wlrK:/jM`M9вHk(ޟoR򩎛FlZc=*>>VL(y*;4,%~3G.Wp}z i]$Mh|@TJ30U,0@9ɞP`FkpZn\,Mm[YTTK"POwEJ- ԭe6 ǚq|4uh/]TF`cD[ Ke:5ԧ&CFϊ{JRe'kI`n^"JZK@zF{2-"y9W`Y #eJ@ ]ȸ%9ՔB(rsNby MVP<6{y t]3$iO+C*Zs;_ p|C͖z lUJA";ӃƧyq2供3JD ޏ57'ap!:yzSMm,#tJ]h{PyL'Q%M>T֛֙(w=9\ :~UԄ&PaT\4/lDb  ok) si^tQ}q:}bX4Ѐ {p[2ÔdG&_s69<c,aQT$׫>3ͭ,+)oj}s:oZdbvRC8 `D-G_<>sTGLadrʆ|Mk_wBd?7,Qe%G"uIXT6/GW%YzNOAcvn"%},3/oh\N{E`mœ?WPɯ-O/Ez'9@z^B!p}Rde}q!g5 Dz$DL)3UO1) c-tw9]ЀDq}p1 "_@hhjk QԃAh)Fe<* |xe2\`;2;:JT+|!;~!(fSKy۟৉W@PлFU~3*K!f+l+]fNx Gi)A ̺CDt;NZvɋg.rqi`^E@72灨Fܘemw*Giv2\య%*+xъZw[jT]6 ӺQ6~SvdJYwK'ZxbIU{}sOwz?D<ݨ;|t Vr(`ĝ }N콕c.[֮Q_N¸ |:I}MSZ.^#adA\݁9VB_Yѻ](yxyV eG->7*t?%")n\jyB:JxRXC͈#Dǜ%F/ V|~'%5MOEdӹw Xo*K=(ђ,x~-YsRͲ]_ݽa aʋ!Goًϒ`C?,V (#K<R%GW&#g w1LL$`kZvU6i8o1b-3_Z칌+ۻ+YCO8Kny_ի3X3hG6єS+x|Q(P>[Zb)\1ɯ!8!̓~HPc18փ#bk'hgZ䨂tBZD pri2DIaY@VmJ.i"%yxVɠ(ZS(2IދX듣4Ay۰ ,DLqd!K NRc.s 4 OXuL!Ó}jaߝHs79e" zǗ^b}4{ +(q0LKmH .(!w .3?TyY'f&:lԅ,'l.o>Ñ7]O%.sULfZ7Àպ> ںB"thYH,s5Z}؍9YNemww ݐ|VzֺۚvB{կmY*ْFy(q.=ۮBMkAo4ckB_ݥim% |[}ZI= ^M )Pfռ̒O7! v"OQ4io:#=`ԟ[dǩDIO +7姉Li:cw&OGX}Z^e"`bd Ů[]פvid&"JXOiQL7b8q崃{Әd9B+W "PE!G.b1!_E /B@:QځgTə1Qʿ_ͧk'SODa$nt7 nK@Zڝ+(Pw`€mg0& ׬DS-;M D qWMVIؓyĊQ`mwwOxC,NQ{HM`k^qP `$ ]~SBWV6{ \B{3q G/Q̨p9$ճhBj;n)^Il}taxYT OҰI(sbe{Q=nxL&( `eIi] 7yY{K yYbw{),_KHhSovlÝ#u+TvUM]r%sС@Zb&swQX:јi0m*ǘVVNT(ٟq]J4RWv]~4؜ElBPavuSEvcylHU5lJ7ĖUvTޜlތqs``8mܐA4WӆqCBMT"o[ˤ*ѸSo+CX`CʫhX[݅i~ TxC'|љa$㬝P88hϢ~ -|cP>~ OӎZuP-[ڭ]Sj%u`iMxLꢞ7X,G@HepWuR!)쬼bAǨMcVr&@~фŒ& Ma 9&St[]ĦO2*|<gLpWDLsO+,G!b'dx.TYFz|F*et4!v3,M^ͯw[ b5Oc%| 3 $6qZrf,3DTԻ4Fk L-+>+%/ AlG"Yl-:Y?r`т}lh &Vbo3sqj*E]~*H"p~t7GRU~֧@} Y$StVa//tKA^Oe._6ReY4h1 &.&\pu;j~ۉ359_GǏ{\k$NAC[Ρ: *G{hO.z?ioGX D9/ABPqvΡe7yJeJQE%R@g-iJm MTlzeyPvȮ/h`w#&*=7Xd_ _.vsF5ӆ OLW`#Î=2VoC(i44Oͪ;_pDf[)z8Y+eaq8ec+vR4rϐ?/S9EbJPfI<ͩ6v]ptHE % |'\lVĕ%^GFz]T uBmAdk!9n0[D$dg(;@˟ryJ@M?ʜR7&9HB7P`I.C׬4c-]X&: V~>].×4RKn#N;LqXH4 O#v6 1cZ a̲TؑmUQԃ}&,Hc_i82"3fF\Km:LF3TM(cy]PƓs6BRC;ChZzn3LZ|r ͑Ct8tI^sK2G̏_vnP~K~ pKf">ݹ*|D%%o'P?[m5V sؼFA'QEO`st#\A@ȴs0iEllۅO/J7fĂPƓ* L9;_kŽ^M6CE[z;aKBh,BjYCՁެm(JM-M7XI7DH-u.F|va'YS hv`K?' h_Ty ;5oOzameҪ׽/f| u2c(Q޼z^вiV^/@fVAjJni&Ο뷺YYGaQS 8:UhqiN»p(VfrCQ{}_X{d>Z4zYԜAdJ tw '=dQ};)o 8xHpx V[a&)1]UXWH<*!p++ (j56 )QMJr_@{ԩGv#-։qFgZr?qtlSfj*P=̔-\c#̀Fq:F@H;Ey8Vqp6c w&+$)ضˀ'KNw #(O/hQ@g'T|/RfWrCLz" ꦉ"Lo (N4X!"ch\,'B Qu憊Gχ{%ےNv8-oJ{u·MPyZYr }Sr&̀I+?ڞ27f~-'e|>zcՋXRt;T *5߻Nt|e=Jv{ڋWvkq %Z̉朓քgH^%
    ֩2.tX! E' Ew$#niy&3b[K濨}ni1kJ,>#'I:+mu1vc9esQƨf #`y0:L]wS'.q+ܤ[ISU ,[#I ,N5/:e7fg㻟+])':Ǎ Ic ɹDu<~(FKM~uĴ4kYjI`)ߗj+6cMl;:LkXɞFHIg<Pݖ; @#}8'qf4fq7i?w2@c_$QЂv_4tEO3^ & ZR@K엪t>쎃ʴA®-j ev-t+4E#H4{ُXx\ukgFzmEq{r<&ّz K.$AM t\>tr2oڼ&@tu y$5$Gqo%azN6VHvrMֱD8g˽!>ٵKd_W:Ny6O":s*`3K6Mkl~!epz%7alӡhrs@OA>ܾpiuD#Ba>](1 YaSlHޟs)Uo&Ss^*AI8뮅Ă[=n4C,²kK/xFZ?Uo)W6) qO<=/UZJ!ڍ@CD.ӌxh78Y]Z4|{5 F!mV#\2f}q? G"y=h K̶S) Kv7 D f{i\MrԦT9: \д9!Co4ї`b*>+-M^A+3fC:b'TSo9bE(/3V04*S6짺 W !>Ӌj'UVN>k|%7zce =%\PVxէRWtwԲ[\mU94' hDV#EԸ1⭿My'I[dVU2Ȉ_/2V-/9J$>}SDS2 A`R- @䐇( d娆:,%ڸQ9t`:J:&mX&f-+ftݠԟ,ŕ#CV0Hm«@Mۉr[[{+ˌ~yѪeȓES@qwp`*PD.ÍiY:d!L .?C=L%ynC@M[(YrrNJ^JIɩm€eo/YARWj, a;^}֠k`mw-mG=<Il ~dsy#yw!#4#h=ujtjKq ZfS4ȷi7bB%kC%qӘ,s*&0s 5l}l'ȵ޶t;8NX6.+W<L! MR~;*\G \h{d5rad#ŧ[$Qx/X>Vs JcmBڭf,R5dD>ta)\ɛ'F:4^I /peIgLQ|k_zA~LZt'>L: t&Y>(DhVyUCSY05Y)ُ&P0!YV0)4)U$UyŸt*bVN2u|;{5ŝLwRjQd%BW{ Y%&~2n'9%?n0IaZJ(O8pv^%! ybPAM$qs?/ϡFULZZw̆nXwU5| sq ;ⲙ EK?t ~_}x.p^9>h-*sЛr&"oo}}ڳ/mzzNNfЭr]4^mP`:iJOw^٤̛lOIJT2-ldM#kO_9dMw`4Ԋlr͍J͢׳ I%1Lk[/]^*z+0s}[:TY"]M@X7PF>CgX@>C6GF?D{=:-8~M#b &2JdU~QB!ny4,LRascaaZ"z"GJ|^3SFg,z5bnA3fJ?he@diO8:š _"K]V0@9Xdlw5al$={D{MhNTV:(nV[LG~%}_gٗ78 _sӓ;rT,yS~aӆx 갱]Dab; vbqv#MjV? ۃskx  Hn +;-kj<}"j2:*s[0vP!F8iR2;hVX|X1 w}9F~hOjc `#qlIIk_E!Bnj4Ǿ g],CϭHO{˃tb.`ɶtΉhr= ?hQ(Qe^zCDKnlPmde%]hskig_mC)D{]tΡǨL[艝`?W7,Pܲž{oԊ)qNq  ]rMV V2hH;D{zZS܈`PG+9vLTLz`\x Տ\аL;'7ߘ3N͉in$c}$1 8fPBQA4 @Gd۽W,`,rf!͡65;uRl'~U~S. zL+oIs)ޘ&+ qqxGZ,%FRTN٦]^tIKrܤJJ'hdʃG_9Jރh^Wvƴ#@CIrMtLJB5@-*çi 4λ@Gn.+B44 |&&OP?C*:Z+¸7psAȰq/y 9otUvZn(}Q`ȿrVVa"2O DӭTR(Տ_w?N&DUI3Z?ED_cxLFCօMmVWk6莕W]Hv'^"Tˆ m Aԓ(Z콆ms(PRwn/ :bƨ]7 2_OKCb2>:Y3m,=%(W╡@d3~ܓ%1[vDxՆ;:N*":j0=1Ok l$cTLLCoorrZҔ{16zʀlkVL]j2CXx[+XΰMy?D< ]` .M{I%h-{6!EhBBMF׷"=<.d -خȄ4o7x^w%/ZW. *Xn)9-՝^tw“";A Y,{[i,LպZN7 QIY?SAp*S- RVĹAd4ɲ;򢠺P]u3SX?'RĈZgۺ /HL)3у>/nc Ñe9 ln?]n `wx^QYG"p \J,J̣T5}XL,Duxh|FdZ+W01W($) mH ЀNo֑𫪴Y;ar*1 թ}ƴ.DW@Q7_˨G?rx ,!.HUUeW˭Ӽwtr,N%'2_nك|uF[Nc/bxL 3G9WSKMH;T.o 45zJ5REHZT' |Kk?J57}(lY=nXBu`2:zz.0֌ffpp-f!Żkǃ6Sg{Յ:RB1ὓ#J47HCx0cIXzm]ڭ"nᾸC/*({el9F:J g s !m>OOSNkǿ@\!'"o|福} NF 6̸?2Me BѠ6Yilڦjnxa3iOF AK{L-e:kʐӆaXAOK[$^c \ڄojQ{l'Q|¤M7HYt|E>\TW,KƂ`F;7FU!)+BPLalTLə m 4)wrv245kXwv9[-~prv)i{RAeLVrUs2Ӽx;& B_Vj.v7\a/]K]T Jk"md| M|ihKZX.㐰c71QbJ4 R~JwBooC>\SLF#Q%m6,  !p闡4F2Lӂ}W, N;f3Ccʏ#䠆iR:2ù~;a!RwnwI>b =I">(<̻;a Fm9+~њkNboL.OOTP*.##EfV_#|:hN>iPpS񅣹^?œOuζu @ h.gA(&.8N$yk^TL OI58֔ku9fuqbT0anܘNW:ǠZ A~Xꌵ3̞h@)msȊmoE^P\ s ˔ r1Z{;c!=4N]h^`9Sn Hmu>q1 C(Juo5X^J我D# s)>}C,sim$X^A{$J$EN{{5A֥9ɻ)KnKƞeg ƽzX|UmȞڬTuR0jI|r3% E̱ +d$MaP(t6#=o1dֱ2+ _˧;fU8S*:+bB؅$?Mx4h0Wegڟa!qM@y<{AL6PrqTR7 HvaQ= ⍆C<[s6z PvR+wcK]X&E}vyJ/юJX'pX^FZ)- \z7$*uA\߁];))`El\ ^g4ξ!) G']Zf,>$#C3pgF~f*¼"*&ɞ;fIf׌h2" ; }cH\KpB.g{Abee.3W~x_rcbji͹O =u Kqji8^2M̧}[H8ZX-(Kh> jo)`B?ZBt?*̑ jӘy<6 $!R9]a+xi`tl;I'2tf&N_=A4x@&1Ay19Z%N7wp2MV\vI&p5YYpF\sB1'pXVz{gVMP , q^"%U̯۔,cZ!eRӶWUE\Ϻõ`"?O AzeDk )θaKȹXٓ#r3ba,(4I:}aٿõi~ SsJ9=ux6x^-|pa&ZR8ߡoe+xT;EJ^eծC<1:u;DlZ7r莖QڴMh`7__ /PºD=燹*!=IªHnIVALEM<c]K}Vb1A}15B\N>}''ym-`]$af4:CZ*Զ'3e8ǯ] jJD>_ʷ[]x]D_Q Y[DAo,3~Sex"ijzf{ -؇|QLIl@VCM-[Ғ&sQ9P}Ƥؕr1+ n;$+e]iWbn'nό "nf < 4;ҘڝxmWS&Y%L-@fE0x40~A:tGPN;+H4~%1-!mefjdv^a2Ge E0 `=Ύ7D"\@2<ԙ{ @,vRcqwx3$a.){4j{u6Ҽj&~#Mp32maߗk0W~좓čB֒yS>n0`%4W*T)ڕ@6E|s ?9Ep#cjZ{kdC?R NQ|b )fņ(;nToQ$b=;({ѳ jQ}H#aYg|X@<ٸN% \)-/ 0b;,&%6WPc >]|g?QәKH;VZ)I.͠ U3gΰ=1 cWA0-6DH#'ȳJ&, PI-'a>RMr7s T|#K7$R `U5_!Aۇ_B#^2a31!V7D#!5nv[Q7C,S^[c7K6-*\y.D1wko31D1%wz\\Zcu!"0q_ o(d10r#ɵlZhq+{!_Z ÉҼx1>e{ ߾  F5:5ocfsNPQd2ʩM_o4lQˠDa4fOY^1Uu7u fgrIwM wq !wT׵Olg>nD#05d?#MŚxEw\dWL5Q %>+3·K>(ʟl MYb51WLӀyRq>^^m $Fӳ6'x)E,XfHcp:~!},Zg&a!ْX{yHZ>db$- >Ɇdm,=~zT RX}i(aȑ3|q uS0ډ]]gU;VUfC ەnfwKz].U6ʔX `VlŃ_rӕ祊{?R7gI^s/kJ;F'LzpЪb+yE_g8;`7 ͲU]b #Oz*'S>/A H"Uaht:49.]O)\#I*CPjVRWFq?їn& K Zv$Ȯ}.[Jt_::_3bEoNK*{GaXj=2_+-J.PPVF>pPWe} q+) ~:ǎm0 էR9_ R6~g4.%4~t7#яY~|F!C)ɃCȢF!`N(\k3p23]p1C#ChMy?S(X%6p ɸv*ex{;4*lG#{j,@F&HKPwY)ÒI!n_3JF>N;|)OsS Ӌϴl`+pQ6!Hأ@OQg,U);MnOCR+owna:6F)ۈwde LI6;3;Z 8HqZP}9]б_?a< o/gSs1C,9=Y Nn5z;:ńW[f8x/'U֚r.wX.X mlrC$J|H#bg4B25t0-hK}~aTw?.L ^Cs2#R(u<!OOcǛ"գ„XvrBoCGO6 9)3=q|l #D0Y ,%*/D]I[`t)}B/`"wHkl`+cׯfP*9 .`oAa@B~LXZ՝W:suU Tf-\9Uc!P|qrD0 =+%;dm/*Έ ]91ovTqj0.v5F 4wlxXW%mE}o0z8 czc>/!rI4 $Y]ʡLX_@n`Ixawf3 \~)'(^eM|=;2n\):Ry>ԭ{_"T u)Cc>C}数MVY5`Yk/;qVz />:v jW;JHƀ|FDbeN- A/gٞ?kOC%Z}*JW5Dj%*LiRؤevCzGys;ڍm{1.&̾: H#Q| g&G L)bUu`NݥҰfj+>訞j+dP„t֌ݔVv mb#f=F@ݖn_PX ZZ'̸pzKY_YW"v(ϣ«šWgQIC[ do$!_˺y yZqヽ>l@%9'TnXsW7G1}[ G/9:xRupb=R.[T蔞V"ۚSG|-aeH {<^pUWPG3"ϰt*kjxm܉gJ!0Fᡅ#UbG#GP 3쾸v7m sv@QCP`I/NT5e3\''T?Ü~zi>*Yҳ@~*_9ħGbOMֈ3n>thggc θ"Y}ԗ"E:2XJ-^Ry3S_n!כU65F'@Da$kI$(erFU]$pm q=#Bl\R-Y=vr7ahq$ ~*E0)Dwd, _@Nj!*8 jG& s&ȁlͥLNt popy&S`ܖ_ ؟m_3˵lIDSeiLgU%5q A4pHfݡ^Pz#KŲX6:ʟʜ7,' ke >bZEB(ONTC~Bt+]U vrDufjFh\^GL җ"u+Dd:͘7osk@[|g)4o㹹OeR qUڥ>}` Z_wS⟍6|YY'rvGG0cͻ:|'ܻ令)9܈(X%hYcH# p%OU ` !]V.N <>~&'fFyGجB/U9B,[6;ݡ;s֙-Wr88"ٓ@i%Ȝ+EN6a=s$]o|X*ςQ&Õv"^Xe?ϴb[>i)[ "&K4~C-N#VzRZ9ls B"6FL7H"t@ӬG༬sܭ_df@ V;Eo16wVft_4rR:0r¿ Y┽#f׬@Fd7@>s2u`;.$[%Nv@ +H1̬sXeM0WEme7a ҎHչUcQ?qE&[NX݆5wAZ GC7EECihXVy|ȩ/]fhcҘ dLuDպ q n9ST*=hަ%{Zl$qK#JV}vJa&`:˨Pke4d]H\"h#bRB1鼻R ~Wg)' ;pAi=~!LW깇 T?sN10jEd_Tuo+#UQE)Na[t~*xx<ʣUU .O"̓'헞ڶ"><\rؕ/;v (ەmּu@ /=seMḆ䁐YX~4A &d9BW>fQZ8ש+UcJ hX;Tz;K'6s: :/;Rw T2*qYô Дei?xƲ,$qf1c'vYo鼀:s㓷hR=X+}?Gn8vPNqԉ\ 27Ȃl~iRd e.fX9I J*NJhRH hEl1RDՍ#ūWLH:ߜG1u$JxhP|IH%Մgsf@Z~TpUqC>2(>&`CBWRn*>t˦RL|7m^GLVw|s V8 @\࠯twef{\Jl [+^f%WQCXegt^(}z//]H:MФF]cdWϩ#svrBzYW&G|Y&jL[߫ %ՏxMؿ%ւ bA7Q@Znlf(Ξ/40w}䲝W8CGKX?`Y JtҍLs%~]yq8b{d&8 움|z$"ۦ8€+7"Uahi8G #˺!v:dC[:"ilPE쏚yQk%JQāf̄ 8fMǴ[i+{ ?!*"-t+F},0j B,1.Q_׾nПZjKD}&&cZOsvʏ hWDzT\StTW\#l͑VcuqXvvl?V黒.qIko Ln3:O@QRP ,3wz`354;F<ŜfQ'%!G/B ;aaGʼѵ*)<ϖ1t1&\eE9Ӄd30|VhTӶ~=yW:U˳4S^Nd9b/@Eg}WQ [[*1Opa(cl$b+n9q3J #EEuۼA6a$*,gcɒkk6~ۈ|;n{]ixEkAY>O&=2sN7mD;[q~2Vnb?(J*,j1<f-,Oy8}>[.6Z{vB(rS5AQm8w1rpO-AKa Gl$<'(j:ċS[Lӛ0(7" | 3>9\Cz$bPTu 瑕ϒ-覬iyPcN|>ٿyp&"G[ { {rTsʌAZbdiPcu}j= %p}unCz5t@|3|曬]z#ˋ&m  HL])Gd0\.da》CO},7@@ܼߠo\IP14CXrPG6?GQ ѕoIUom37/j4~!ăx"џ%TҗqɨGp{#yU zL}2=4zeCh\w!v>a_lsDgjؕgC fR9*f\$H Y֜[<_ !jWqizWURo2ao xv4mtZ=ܪxCڈ #}x`il+,:9]U`<$nP#!VSh܎H]~!̓F8 CBrO} l2m*i'KKL1 zpF|=wngUL\VsH)Ok X様Њ1 \ŴU^|*׹Xv%)+PLۙۃVO:ID(v&L?Q81|S)N*y{984ʧGa1K7Mw{3?֪B-0GGHsvS lF9nӂY!wmZ3w4#O !ҢBnj~醠BJZc?RqΛ_eHAoIsWVG4[x TM8Phɫ4k F ʦGu6"zm([E'ǃU[$8}((Ńq֓UNſ(Y,5n m`Ѩ6F˄5/춇[8X{g3,O fRG@۵Yw+oESS1B'E+6öi>߾4h-Y C{>̑R7CsEJ7H$MއeLM zp]_?\/W<8Òp 4YbkHl'K&Iǧu.ڭ)x@% d{; :RCݯ%2trGe*\Jn G嗬|F|6%gwbbGt]}b{%9"!vlKIZ8f7E `? c|ʰf\H4M)j-׍YPfn,V"VMB󽑡[K (H=gNkAEx xʼ!'=a/UOti̖xwc_?TNf6iC$~Fq삯g`#Oq<6^6o=1Yg|5E y d5=n#GW6u5m=D> Hj?fB3+55J".9^&ObRPA-"Nt'|e9ݱT*sNx%g^#z޷*Z(E6_I YZ