dhcp-server-4.3.6.P1-lp152.8.6.1<>,1`/=„EL uCcY"`|A_vt]bz{RCEKr/3asV5RgLDZ=21eb/fQU Q|zg@8B ,pc,¡_Yc&fqo '==;40M?&F؂icbqݕ>1G˖fy!,Vу, +p5ea`Y$E| &&>F?d # 3$(;DQ jv"0#D0 #0 $0 $0 )t0 *0*0+0,,0--.40E(08091 :2=u:>uB?uJ@uRFuZGup0Hv00Iv0Xw Yw,\wl0]x,0^yb{c|d} e}f}l}u},0v}w0xX0yzP`djCdhcp-server4.3.6.P1lp152.8.6.1ISC DHCP ServerThis package contains the ISC DHCP server. Please read the documentation in /usr/share/doc/packages/dhcp-server regarding configuration of the DHCP server. Authors: -------- Internet Systems Consortium, Inc. `build79$openSUSE Leap 15.2openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Networking/Boot/Servershttp://www.isc.org/software/dhcplinuxx86_64/usr/sbin/useradd -r -g nogroup -s /bin/false -c "DHCP server daemon" -d /var/lib/dhcp dhcpd 2> /dev/null ||: if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in dhcpd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in dhcpd6.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi PNAME=dhcpd SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi PNAME=syslog SUBPNAME=-dhcpd SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in dhcpd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in dhcpd6.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi # FIXME: update? if [ ${FIRST_ARG:-0} -gt 1 ]; then if grep -q '^DHCPD_RUN_AS=.*nobody' etc/sysconfig/dhcpd; then tmpfile=$(mktemp -q etc/sysconfig/dhcpd.XXXXXX) sed 's|^DHCPD_RUN_AS=.*|DHCPD_RUN_AS="dhcpd"|' etc/sysconfig/dhcpd \ > $tmpfile && mv $tmpfile etc/sysconfig/dhcpd rm -f $tmpfile fi if grep -q '^DHCPD_BINARY=.*dhcpd\..*' etc/sysconfig/dhcpd; then tmpfile=$(mktemp -q etc/sysconfig/dhcpd.XXXXXX) sed 's|^DHCPD_BINARY=.*|DHCPD_BINARY=""|' etc/sysconfig/dhcpd \ > $tmpfile && mv $tmpfile etc/sysconfig/dhcpd rm -f $tmpfile fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable dhcpd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop dhcpd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable dhcpd6.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop dhcpd6.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in dhcpd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart dhcpd.service ) || : fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in dhcpd6.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart dhcpd6.service ) || : fi fiYU.": 1 1ff"j& A큤AAA큤A큤AAA큤AAAAAAAAAAAAAA````````````````````````````````````````````````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../scripts/dhcpd-restart-hooksyntax-checksyntax-checksyntax-checksyntax-checkdhcpdserviceservicePProotrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootdhcpdrootrootrootrootrootrootdhcpdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootdhcp-4.3.6.P1-lp152.8.6.1.src.rpmconfig(dhcp-server)dhcp-serverdhcp-server(x86-64)@     @@@@@@@@@@    /bin/bash/bin/cat/bin/cp/bin/mkdir/bin/sh/bin/sh/bin/sh/bin/sh/usr/sbin/useraddconfig(dhcp-server)coreutilsdhcpdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)net-toolsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.3.6.P1-lp152.8.6.14.3.6.P13.0.4-14.6.0-14.0-15.2-14.14.1``8@`e@]B@]#0@Z%ZaZ]@ZOhZ1@Z@Yh@Yg`Y^&@YZ1XƉX@W.@W=V_V@UTи@T5T@TmTeReinhard Max Reinhard Max Reinhard Max Reinhard Max Reinhard Max max@suse.comndas@suse.dendas@suse.deobs@botter.ccmchandras@suse.derbrown@suse.comdimstar@opensuse.orgbwiedemann@suse.comndas@suse.dezaitor@opensuse.orgndas@suse.dekukuk@suse.deralf.habacker@freenet.demchandras@suse.dendas@suse.demt@suse.demt@suse.decoolo@suse.commt@suse.deLed mt@suse.dedimstar@opensuse.org- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was bumped, but not the RPM package version.- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient.- bsc#1185157: Use /run instead of /var/run for PIDFile in dhcrelay.service.- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch: DHCPv6 server crashes regularly. - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings [bsc#1089524].- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).- Update to dhcp-4.3.6-P1: * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd. * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient. * Plugged a socket descriptor leak in OMAPI * The server now allows the client identifier (option 61) to own leases in more than one subnet concurrently [ISC-Bugs #41358]. * When replying to a DHCPINFORM, the server will now include options specified at the pool scope, provided the ciaddr field of the DHCPINFORM is populated. [ISC-Bugs #43219] [ISC-Bugs #45051]. * When memory allocation fails in a repeated way the process writes "Run out of memory." on the standard error and exists with status 1 [ISC-Bugs #32744]. * The new lmdb (Lightning Memory DataBase) bind9 configure option is now disabled by default to avoid the presence of this library to be detected which can lead to a link failure. [ISC-Bugs #45069] * The linux interface discovery code has been modified to use getifaddrs() as is done for BSD and OS-X. [ISC-Bugs #28761] and others. * Fixed a bug in OMAPI that causes omshell to crash when a name-value pair with a zero length value is shipped in an object [ISC-Bugs #29108]. * On 64-bit platforms, dhclient now generates the correct value for the script environment variable, "expiry", the lease expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326]. * Common timer logic was modified to cap the maximum timeout values at 0x7FFFFFFF - 1 [ISC-Bugs #28038]. * DHCP6 FQDN option unpacking code now correctly handles values that contain spaces, special, or non-printable characters. [ISC-Bugs #43592] * When running in -6 mode, dhclient can enforce the require option statement and will discard offered leases that do not contain all the required options specified in the client configuration [ISC-Bugs #41473]. * Altered DHCPv4 lease time calculation to avoid roll over errors on 64-bit OS systems when using -1 or large values for default-lease-time [ISC-Bugs #41976], * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169]. * The server nows checks both the address and length of a prefix delegation when attempting to match it to a prefix pool [ISC-Bugs #35378]. * Modified DDNS support initialization such that DNS related ports will only be opened by the server (dhcpd) at startup if ddns-update-style is not "none"; by dhclient only if and when the it first attempts an update; and never by dhcrelay. [ISC-Bugs #45290] [ISC-Bugs #33377] * Added error logging to two memory allocation failure checks. [ISC-Bugs #41185] * Corrected a dhclient -6 issue that caused the client to crash with an "Impossible condition" error after de-preferencing its only IA binding [ISC-Bugs #44373]. * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h, dhclient will now call the script with reason set to FAIL when run with -1 (one try) and there are no server responses. [ISC-bugs #18183] * The server now detects failover peers that are not referenced in at least one pool when run with the command line option for test mode, -T [ISC-Bugs #29892]. * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111]. * Changed severity of the log message indicating UDP checksum errors in the received packets from 'info' to 'debug'. [ISC-bugs #41757] * Corrected a bug which could cause the server to sporadically crash while loading lease files with the lease-id-format is set to "hex" [ISC-Bugs #43185]. - Obsoleted patches: * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch * 0019-dhcp-4.2.4-P1-interval.patch * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch- Optimized if and when DNS client context and ports are initted (bsc#1073935) [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144) [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]- add PIDFile= setting to dhcrelay.service, without this systemd stops the service immediately after starting- Drop old sysvinit support from the spec file. All the supported openSUSE distributions are systemd based so there isn't much point in keeping sysvinit support and files around.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Replace net-tools Requires in dhcp-client with hostname on suse_version >= 1330 (CODE15): net-tools does no longer provide any tool referenced by dhclient-script, but we require hostname (which is also a dependency to net-tools, thus hiding the issue).- use .gz year instead of current one to make build reproducible- fixed a typo in nis-servers option name breaking the config file introduced in previous change to workaround issues in NetworkManager parser. - Update to dhcp-4.3.5 - Corrected a bug which could cause the server to sporadically crash while loading lease files with the lease-id-format is set to "hex". Our thanks to Jay Ford, University of Iowa for reporting the issue. [ISC-Bugs #43185] - Eliminated a noisy, but otherwise harmless debug log statment that may appear during server startup when building with --enable-binary-leases and configuring multiple pools in a shared network. Thanks to Fernando Soto from BlueCat Networks for reporting the issue and supplying a patch. [ISC-Bugs #43262] - Fixed util/bindvar.sh error handling. [ISC-Bugs #41973] - Correct error message in relay to use remote id length instead of circuit id length. [ISC-Bugs #42556] - Add logic to test directory Makefiles to avoid copying Attfile(s) when building within the source tree. This eliminates a noisy but otherwise harmless error message when running "make check". [ISC-Bugs #41883] - Leases are now scrubbed of certain prior use information when pool re-balancing reassigns them from one FO peer to the other. This corrects an issue where leases that were offered but not used by the client retained the client hostname from the original client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University for reporting the issue. [ISC-Bugs #42008] - In the LDAP code and schema add some missing '6' characters to use the v6 instead of the v4 versions. Thanks to Denis Taranushin for reporting this issue and supplying its patch. [ISC-Bugs #42666] - Correct how the pick-first-value expression is written to a lease file. Previously it was written as a concat expression due to a cut and paste error. [ISC-Bugs #42253] - Modify the DDNS code to clean up the PTR record even if there are issues while cleaning up the A or AAAA records. [ISC-Bugs #23954] - Added global configuration parameter, abandon-lease-time, which determines the amount of time a lease remains abandoned. The default is 84600 seconds. Additionaly, the server now conducts a ping check (if ping checks are enabled) prior to offering an abandoned lease to client. Our thanks to David Zych at University of Illinois for reporting the issue and working with us to produce a viable solution. [ISC-Bugs #41815] - Correct handling of interface names during interface discovery. This addresses an issue where interface names of 15 characters in length could lead to crashes or interface recognition errors during startup of dhcpd, dhclient, and dhcrelay. [ISC-Bugs #42226] - Updates to contrib/dhcp-lease-list.pl to make it more friendly. The updates are: looking for the lease file in more places and skipping the "processing complete" output when creating machine readable output. Thanks to Cameron Paine (cbp at null dot net) for the patch. [ISC-Bugs #42113] - When reusing a lease for dhcp-cache-threshold return the hostname to the original lease. Also if the host pointer, UID or hardware address change don't allow reuse of the lease. Thanks to Michael Vincent for reporting this and helping us verify the problem and fix. [ISC-Bugs #42849] - Change dmalloc to use a size_t as the length argument to bring it in line with the call it will make to malloc(). [ISC-Bugs #40843] - If the failover socket can't be bound, close it. Otherwise if the user configures an incorrect address in the failover stanza the server will continue to open new sockets every 90 seconds until it runs out. [ISC-Bugs #42452] - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that allow interfaces to be upstream or downstream respectively. Upstream interfaces will accept and forward only BOOTP replies, while downstream interfaces will accept and forward only BOOTP requests. [ISC-Bugs #41547] - Clean up some memory references in the vendor-class construct. [ISC-Bugs #42984] [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch, * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch, * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch, * 0016-infiniband-support.patch, * 0017-server-no-success-report-before-send.919959.patch]- Set all requested dhcp options on a single line, so they are actually requested (boo#1046969, boo#1047004).- Relax permission of dhclient-script for libguestfs(bsc#987170)- Require insserv only if needed - Fix requires of client subpackage- Add config file for registering dhcp server in slp (bsc#992072)- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts. /sbin/arping is a symlink to /usr/sbin/arping in order to ease the transition for the /usr merge. Newest releases of iputils may only install utilities in /usr/* so this dependency will no longer be valid. Moreover, we replace the '/sbin/arping' dependency with 'iputils'.- Update to dhcp-4.3.3-P1 correcting bounds checking when receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267). - adjusted interval check. [*0019-dhcp-4.2.4-P1-interval.patch] - Fixed improper lease duration checking. Also added fixes for integer overflows in the date and time handling code(bsc#936923, bsc#880984). [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch] - fixed service files to start dhcpd after slapd (bsc#956159) - dhclient-script: complain in the log about conflicts, added a see log messages to the dhclient log message (bsc#960506) [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]- Applied a patch by Jiri Popelka catching dhcp server aborts with "Unable to set up timer: out of range" on very long or infinite timer intervals / lease lifetimes (bsc#947780) [+ 0019-dhcp-4.2.4-P1-interval.patch] - Corrected patch references in and a missed (bsc#919959) patch description in previous changelog entry.- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes, features and obsoletes several patches we were using before. For complete changelog, please read the RELNOTES file shipped along with this package or online at: https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html - Replaced hostname patch with a dhcpv6 and fqdn aware variant: [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch, + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch] - Removed obsolete patches included upstream now: [- 0007-dhcp-4.2.6-ldap-mt01.patch, - 0009-dhcp-4.2.6-xen-checksum.patch, - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch, - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch, - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch, - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch, - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch, - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch, - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch, - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch, - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch] - Adjusted patch numbers in the spec file: [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch, - 0010-dhcp-4.2.2-dhclient-option-checks.patch, - 0011-dhcp-4.2.6-close-on-exec.patch, - 0012-dhcp-4.2.2-quiet-dhclient.patch, - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch, - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch, - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch, + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch, + 0008-dhcp-4.2.2-dhclient-option-checks.patch, + 0009-dhcp-4.2.6-close-on-exec.patch, + 0010-dhcp-4.2.2-quiet-dhclient.patch, + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch, + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch, + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch] - Fixed to not pass DHCPv6 address lifetimes a positive (unsigned 32bit) integers to scripts and properly format timestamps as long to not break them on 64bit architectures (bsc#926159). [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch] - dhclient: expose next-server DHCPv4 option to script (bsc#928390) [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch] - Replaced infiniband support patch with fixed variant (bsc#910984): [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch, - 0018-dhcp-4.2.6-improved-xid.patch, - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch, + 0016-infiniband-support.patch] - Moved dhcp-devel package include files and static libraries to /usr/include/dhcp and /usr/lib/dhcp subdirectories. DHCP requires a specific bind library version and conflicts with the files shipped by bind-devel package, which is not source and binary compatible (bsc#910686). - Corrected changes to provide complete patch file references. - Fixed server to not report success before send (bsc#919959) [+ 0017-server-no-success-report-before-send.919959.patch] - Fixed dhclient to check pre-init results reported by dhclient-script and fail if pre-init fails for a requested interface (bsc#912098). [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]- do not check scripts not in the src.rpm- Applied fix by Jiri Slaby to not crash in interface discovery when the interface address is NULL, which has been introduced by the infiniband support patch (bsc#909189,bsc#870535). [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]- fix bashisms in dhcprelay script- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to reorder config to add all global options or option declarations to the dhcpService object instead to create new service object (bsc#886094,ISC-Bugs#37876). [+ 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch] - Applied an upstream patch by Thomas Markwalder adding missed mapping of SHA TSIG algorithm names to their constants to enable hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512 authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947). [+ 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch] - Decline IPv6 addresses on Duplicate Address Detection failure and stop client message exchanges on reached MRD rather than at some point after it. Applied fedora patches by Jiri Popelka and added DAD reporting via exit 3 to the dhclient-script and a fix to use correct address variables in the DEPREF6 action (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238). [+ 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch, + 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch] - Applied backport patch by William Preston avoiding to bind ddns socket in the server when ddns-update-style is none (bsc#891655). [+ 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch] - Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409]) [+ 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch] - Updated licence statement and FSF address in our scripts. - Added missed service_add_pre macro calls for dhcrelay services- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify./bin/sh/bin/sh/bin/sh/bin/shbuild79 1622650353  !"#$%&'()*+,-./04.3.6.P1-lp152.8.6.14.3.6.P1-lp152.8.6.14.3.6.P1-lp152.8.6.1  dhcpd.confdhcpd.ddhcpd6.confdhcpd6.dopenldapschemadhcp.schemaslp.reg.ddhcp.reg60-dhcpd-restart-hookdhcpd-restart-hookdhcpdhcpddhcpdcheck-leasecheck-syntaxsyntax-checkdhcpd6check-leasecheck-syntaxsyntax-checkdhcpd.servicedhcpd6.servicedhcpddhcpd6rcdhcpdrcdhcpd6sysconfig.dhcpdsysconfig.syslog-dhcpddhcpd.conf.5.gzdhcpd.leases.5.gzdhcpd.8.gzdhcpd.xmldhcpd6.xmldhcpdbdevetclib64varrundhcp6dbdevetclib64varrun/etc//etc/openldap//etc/openldap/schema//etc/slp.reg.d//etc/sysconfig/network/if-up.d//etc/sysconfig/network/scripts//usr/lib//usr/lib/dhcp//usr/lib/initscripts/legacy-actions//usr/lib/initscripts/legacy-actions/dhcpd//usr/lib/initscripts/legacy-actions/dhcpd6//usr/lib/systemd/system//usr/sbin//usr/share/fillup-templates//usr/share/man/man5//usr/share/man/man8//usr/share/omc/svcinfo.d//var/lib//var/lib/dhcp//var/lib/dhcp/var//var/lib/dhcp6//var/lib/dhcp6/var/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16425/openSUSE_Leap_15.2_Update/7be4c8eff40c4b507b91ccb36610e0ce-dhcp.openSUSE_Leap_15.2_Updatedrpmxz5x86_64-suse-linuxASCII textdirectoryASCII text, with very long linesBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=1d9f3af0cdbc62b0c5fe381b7f0eefe474f17db9, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)XML 1.0 document, ASCII text RRRRRRRRRRRRRR&7H Tz}]utf-8964e4955de51e48fb5f8ffa0d24fd8dac18f409447b915315c34236a886307ac?7zXZ !t/Pq]"k%NbRQ`Nfs"$&xn.eIF^;i$4O?)"i@w-h9Cg5kwp jc?4"d>ܞD.pwxzuOqm?9Kj:5 j@ˊx0pUQW~PJO _L-Kȳֳ۠C%߂hd}Nɾ[M13]#$مgH.1< S`¿쁂8鵾 `]J8(lS's N<- -Ꚙ f0Vn#HLjv_(#v¼7 ᶰb%ŨG. ǭMawPuLʼa4}ui0z;>l)A 7_L餥-߯P,dBcٗtKMXl{'z=lA,u@RG; Ma2' y#]_Ooih{֍!m#f#ݰܪhڴ5xC [!I7q]Ď кN0BԂ[~hiSeHjz'%6^6 EIAZgXSر >)S~h,1k+C0]~f`(͓fY_nQuKT, }piݭ1BM~6s2" y= d,~)&_YUY&8 [ݳV`ॲئL5*M<xG)jC@5_V 7Iw*4-YeѶ2YEfP,(>'h cEhY2(%f# #6+]e\*G#wU7q*VAD&Fӷ<7g D&q 6Ź _dnlP^_Cݗ1CĎy Υ>X [tLFuaP3|2YWӃSME đSU#3''S![gww6aR{#뷋W:"]zFbdHXrՐ+RhJ%~yݒg Ă|%ߑC޺w4=kfG$8W鿑HG,>o4x'BCjq?hٱ`ܐᲑD_xꎔ_jm }_oWݵCƿƼDu$3)rx. ]WOF ,6l2lr㛣ZͯMg˯i ݆DIW ջkJ?`Z[oW L49Unjiݗ, y\Q'*)qF~Uw^DZHeXckZK[! :\ <=4Z-3<S-e_\ǡ9:[.đkڍHJ"v^8 1ĎiX2Jƶg1">bR5]2?OOGF;LpZsj_pIC*M}7qAƛӳh!pUX@ ԚO;Vop_}q,X3j)&8H2x- +N__~tge!; 5vk+r`{!MuKVNo>g+ %fzɥ#Sqe/7Ĉʡv{&:f@Px/#A)^FT R>_T@ڢǚlZGdY6u*ብBm$m48X1 qW ɚMŝH 5n59sV Oi ƝX$Q*BjrE@6*{R[p )ߪiKW7'D)C!2[(u|;}hPPwm0 Zus` 1̪.ɳ" Y2jd#/[pYWmp4ƄfsvV1~J0#'HCbE$~ _H|pfx!$@] /X;TWiL1U@6 OZ\9ZGThNN3 MLL ekH!Nq %8,1 L8dK`nRUR6vop*q0@Wޜ\82X!ƃUhffĘ Uä3ѡs%"1wlz᤹oeUku#l1fyfadsD6KSpp1RZk1ut䚸+(w5r㡶/zDFq4rPC{Q uUY]eN|>k5mmR1!銟MS UDu Lj{57*BHkx ٢ Pt޴Dvޛw Zпu M3]X}9$MkQoRhGBw!fC@9J\s1Jv>övPg_|RBRm$a6?0h ELJa< #ח=JR D~A֍5%# l(Y|JCDODeJ:;*+ &7qöX-Ma!EaPDЬ\D^?RKW8#e[JpFw簞¼H ZkkpR؝dQƕ-[U1tNtRvĹ&`05iݨs&DRmCo{ 42dRc 'ņLݏܪdXlfՂT,\hGpA{2#F* GⓟoMU%zXF@st::;u4 {MWG4 ZU(b6 mQȹv)?Oa~z۟G~Ձ7EV (ngf9^:'kAV55pS*%g=[7{VP(8SZ%T[ >jA;BrvdG;|s{*n%-0].@\]1<2 ibɿdžJJTOThB;YգZp2$ Xm'4[ m,L?[, ,KE`|w@s|rfE2YtsPs U 3UO.f!U8 Ѱ'( 5; 6"+Ļwe@RJR}L\Ds.iӜaI/w vT<G[DL&RndmHDSy&5fЦ[ ) IK#z%v8 *zy?u GrJT!uIvAPyx}*ck'YmLeD7f۰yv+%71@7#^7 ̓÷C;E²vɶ8^m0/k 쀘'EE-|#Tr0fOoawiSA)%]P:Q>cK'W{c@p|)@,9nfC.dry^Eیn0Ou$aɺG+XajPd',AJOX2FS8_/o#hؙ9dJ}J, '!\ys0FD{]Ź!ν%;q]RLQt-Mx z,2O%E7g;L1;}Q,Br&H+DjqXb`ß!ˏh뼶؈:f>a_˶ } $D S_vKoǗ_ NF)!vMD$ <|~:FQe/Aǔ|VsC)D QYgB 4A65"$tQG>3C.۽/_G؟Ph~r33#Q D"p%@hܯ7졢*͢K+G@u极{ Hy0c_8 fk%6£no)6>@my14O878v\eX,˸HМ"_6,dh?SE0!eR\=m'; ֞2[aJj[qA9z r(vJ8iZ#U0_3LCP5" w?OLkov+ct hPS֋&/;IbxM|b*fHp9T$w`lpto틉SԀW/d񛐔J zP5,;LF3 WF m 6{j1[OIYܤ1Kv-jm ߨ*u5*b_¯ͥuevlVi{7$W]q nh:0Mqo}(? DU5LW\MiӃTɐg oa\`C-VYf/;IcIBk) rSYf-(1-.Rh7"xpUGLqB (p+djM.oO4J\[|$߁rg vɹ4&/oxP |Ѣg؜H垖?7Bii?gjV{xBMx>5ɹ4 W} ZPS2'iUeHA͙Jk:y'/e(dTIp`(% bB[X ;Y I]5 `$!<`mQّ񐄵@]yzE4 J֍᪳b@PGLDÙrk$}&E,6qbCP%DYܺf!m\56]In :O&!Tni<~_>IXq3 Gg# D%pM9rjG90sARP6{gD w:=hnx]݅3]S}61O^WuAN`xJJM^Vsw]Qe]ZͩԊ\fv {RƆ]<3WD'E ŻM#ď{Q89γz=!i5R,Mymp[q0TJg"gDX 0B{@ʐ̶g0'`xDX7IS,ëmRHt]}0\yp/SpNק.Z,%c= RӹrUjQ!(>) }ttIRqA C@x gͱ owV^|o*Y?;U%~4d!Y#,Ni@GV3SN3fGȔ#, (#r~H{̗N\ǔhW5(ܜ.S[ԭfn)rC,-hi'4Lxڕ:BlX/6KCn2՜Xd7?tٿ5>@A.(OM"2t7 \ ~GC&TaMan P ֹHU9?̿e_*DFFA.$x~AWFCh^3<4Ax% TVTW /I]4|V)z;uq a0fga:-u@ɻ_߰H9O+,Vq~ :86 d##DQt[IP+[L&Vg`N.˝idM{8{yY㟳 hf0ThN:">s*'u&/շ{IacA`ܧe(8y˘Lľ֐ea] tBc/I*(oȴWfj0tH*Ou[%2g7S%5"Ф- ~qT*J 0BTE{iE`Lk51 ,g;ŔT_ەIW}<_tMzlE4٪0ݯW2%ӈ _p/KF˂& QgYVƤJyBG-h޿x)_4iZ0"`7{}U@B. 擂'cxZ{Eԯ%DŽȝ FOW@GҗcCd7(%e7_1o ?dCO:5I;^UwHn!|O%ci5`0IJT1a+UСbD2ZnW/qrmLp6V23>0z hBVKOT> &CrrBVd/)^}d/{C8֭ua-( \Q#FU6 Tba 9nV,F# O#jxJ 7}P&a1`uZ*SXuF@ q7q8= ' lK?_R^ A `|s?y̦H#VɏJ} GGǀKݥѤa1g¦\*!a ]giKpJ,Lt7v,#ufb m\^δ4]f=g#b5&,NNŪ3PΓ)΢/7#?Fk͍ [h1znDoדu1ѩ?}{c>4+jSZ?Lo]k1es6?, WIR:@ĩ-1^*DKO ~Ht`)*'xqWݧ []:AQURX GVfDd˻.?v!rt4!\+'+rTOlܫ$9l"΢?R=OT]>K֒npGW,r;w\HoHs ;|@WA{exot1HDdsج9B|j= %_ү;!')t&@Viݎo>D~`sj+RbvNKeRdurJ=[]ӊךr4\ m%QqS?& Y/iꇸpbA4 7:?Lh[uSK(](l谙א|nM=-uJTıIpIb\ћ2\*Joz!x=EQoh`s˨A5#Lr Ո)p9yf+3;kx_V&ޝӖ.CҊEn@;!|7MbO{ ц5?# v#ԓت$^v݉{RO38k4g8YdzNAiBB}W[V[<eV5b˃a*,vQ 㑭qZv=15a 58g_оY2rb]0wHP roaYM!vx55mBTg`HRz}]}7`_2POf^,uhNP `m kuJE6mP>܅^㸷:jh!j⫏.CemTO;/{;?Oϋ f9}ZT3 D³IzxcxR;(>ԫ~]DA,|擋B$|kYuV=t*8;m}-z^V}`}W2c?TG/YJS}l%xOrT%RPα7A] zFZ7Wy\yd{F,@ y{Û!Bf8` r,5dzw 7+RleB`?]ujdWTaɵa,xnH }Dm^^Zn9zbF".8l^9=#t|I F 2hdSקkf< Ӈ|mVԓKQ!,O r*(Wndn\F6b=B㔙 GuT_*ulڢw{NQbܗ qwZd/ & ~FŦ4S" Φ2DsA ,ֹ?s )YD3ѯ X ?x Ҝ/I-*f'9vkܢ[܂E,!v'}b",ҴrCj\0( /$<%\l?Kȟ6Zl<ljKsqD7/~˭hZRcBcf|CR~LrU%NmBbTq-,*݇5-g>LH,U@[e썔c T,]5\1HYO{|t%x12&ęȢ(1lҝәoQi"82u(Y>낆@tq; |N6A%Ȇ LAOҎPp[ !Քn^O {Zӓr{VaY蝍Ǜ޷4>مRϭM:T/^:B=]91{s+$i?!LcVNb~)gw½t*ȗ6=! +uLB;wP`rڟQ/Eīz=i:O:o {@˾-v%& g7dBchy$lA2?%r>g@`0$@II0o f՘5=Аyobn'ѵvB%py B>J+ GT|0P OHi#r^4QMh96pTHfL.3/ nx3Cyͳˤ,rt%`%06ie-TՁf+}O1GCZa[⋍hP(mƴX܀t,b~|g|gf7b3fpᔏp֨fc65VDRȆ4bzt8u@QwbΒX?&K-mOrM[YmBs )%K@NH# Ӭɘyo>Os\ԩ?5=UrsM^a6n͸H>}FI:?Oݗᖈ*=zI"KӪ^L<<ԭ|Lnɐz*X1JHZgB?cJb^g,kY8Q0;xN"C]T_–cfXQeIhmVfx} n>8wz_S_HcMbHҧ [ä`qUdۉ>>nj?R%P.2c_7Nbи=˥PVoع=ܠ}Ȧ7>_K7T hNӯ&MkEDP5Y L=?u!خ^(- J?*O*_QP*uƟop78G/Y-r:_} #rmeޔ|1 jAJyQ4w>I vO f-*Iw[=iFH|BL2]|,hr㚝=ܮ adD2@5fY]6SւM)#b`5qU E@zĶ)|no$qUNx`DB#UtZ"7nu]hD#[H Kt'Ky)NsAZzz HD<[7-wj;Wxo1;Ds~;WC)`џe KU )ՙpRT{L6*bvaUH۾W=oAGu:rsgCwnxW}  +39}R鷱D!; mdoBOO[ɚU!l6_?BBt8OIo<|p8?m|U:+ìh.s?l bS++j2mC~w.%:MF%K|P 6ꂥW; [xGIGvwv4͇K+ &6%..?8X!{FԚ\+v[ͭ0ft@ϒO0-&:܎'4 md~d.kk~eCӃtR|ncmsU ҚD̊/VeWF.H  ä~sSOGU7u؏~Jj7E;.qOFu?Ί ূ+04?YI`tⴿz'fb8S s~JA$ƬQoliF8 /pNs誩/5fh[`!s9Q+ m784X|9D p?J/[HڦV%ef sze3}ҽAB|,&.ΰr[;[*-mS^'NՂڢxaymjKM|Ct1o%m$ݤb+c}4,d`XV76=8' SMeRhOx{nij Df߮lcHքE<. h䪵v}Zz :kS+*ZVngERZ- -RywdW ƨbg&`e[&DgI@npN@nq}tP=w:lH(;vΥb gm/R@Mm{Eu~P`XD$X䴅Cl#ҊPhFM2N76zQD qBuSKTs^[6蠑0ɬGJӺt#nq1?2ȳ:ݥ C@hPQ\7 5In4Jb1-_쩁g&)\/jWS%WJ"^UZ-XwFMBTO,e˓ι3Y2zx;dfwA# -f 6ДUՃ%A9oh̐@[)̄Y0lX]u[׽|-9S4L+W?k]q섈Ir[Se YܿgP-T Y0K˯8/6/GHTi:+;?Lik"]6y5 SsMu8$:*xk$)/ˑ#o_`/|Hf`1"'c`%8]+Os_3T7hr c-\6c7p2AeVz\a0m$ٜ)BKL<'!5Kx@-Sz}E0Z Qes8.+ʐTQzox )mN`S]H ( 2BNSi %(cfs$LGHx*q< )]dyE͙%씀[IZe{VO}f"OPRkUt:ͫE~u fO}:8g_S^S֑Rm7|ܜ47D&pZ[AJrSqAQJVo`:_tۇrvp6A1$D'|NsLWKCn5D MɅk9D ZohR7m+"b QзWw/kl9?r>U /-pq^Th6K#~xفjmIoo,Iwz_ʆՁ޴@ j|`0\zkv|D^b$ 'P1X|8yy8'9:q%R_IQ׀V* ?<e6u5#ҿh3A AHdulG-nNX) W3↫\_B-[E&7>SS% -cXu8<ީ}/⪲r&[F__ޕcY;d+ 6YC::Ήl,e+i<)yft5dđ^O WܥP%;;\"\u/ F8`λ9~ְvufo62 AR&6X{FEʇ.O^[Dn# L}k(a%`xk.!ꄦ2[X7^0_'G']s=E)]SKBقL|4͛6^sτ3N ~ǧ}S#S`exb懬CŔƹ֖,,^sSMlXOCIÝBjrRP,jAѝ"0lި* [|^ ;䲘Лh7E3-)͊D=tA#p,m5S,;`y\wܵ hA>EQJk.Ks%bCCIκ>^H4@&W7!NY~F!'-9!Eo~"v: )wbu2(k*J,.ҙްHdmHP@, *a!G3f^è)CHľ غgt~0FYce8ַjDsq\X'8[3ekd8$XE`ƕp _{y8y6xFB6)(I@5#[K+[Yþ)6ˎ vԸ܂P\0x&}lI边:ׇk4%P Σ囄VC|A_ؒUU޸"Q;N-3f>&[Px{L+S?+ Rgd1pA+3`/dٝMS ܜL]'[[rJa@MwQI6TA Uk|VzIysRZT,Hpfaj_ -CDYqKؑUңo1f:R_˨,١ɰȾ~1@ٹ"a&b.ά~-?[ vW K.rV9&;C9v]SΈ"{٬( #< GBKF8kz\U 6燑$Аd Ɨ5h<OHh{Dm4jKO,Н- X>>ݙ$;Ra43;_o[Q8IhS|L[QBG!^Q:N%S}<`՜i(s੧-tDO^~|iTg97sr"MBYaxN0IrrP}] s֟ >տQtWo,cֆM0mq~Uqem LgsS6IiB;GNk%!LtΟ~ԑ6)<0ar u6z]ŐWzV΍6wF6|ѷ tם(ol4ΈS5CKm,6R|XUt(Ѱ=@j-H )ۃ'ӎ⵫gu53.Jt<-ȳ6YS`Z\M1u{J%i 4\TU=utWECb`A)6 N8d>\0%KUWs˜ ȔZة=$倕/Mkjur -|';Y  &Z{ *]fO$>F y,T}I\"p F| #{!ܩ u"o@}X1rg,eh>UtDA)Z Dz%? ~4Tjb&哉X9b  [k$˺q{qGD3:}h/*}؈,=y{`! xcj#^4o5͗=Т#=B:1EM!F$t5f4qMg~1qpպ<[b{.e^ ~O:әCgaFEԄ oY[5 3?X5@ԍI":yBh\fԐZf l&{?&GYύ67'ap7b!Y0#9 xaRpWstQ~Ua|'n&/)KVxxZ(SM.0gtf1&d?ך9; {ܮjii(0_$+i[Itk.{[uAO >&Ɍ=2+Y]l16Y\26FW,E?Z)T5WLBEn%%0BvLnKutuK9x-YSX"3]ex8ߙϜv& &̓d;O܅9䍑aR1{zI(IiֿLߪEm~O|PȰX[NZµQk$-vY _g['Y;MAPSCDՊ{r#3QE^ps&fKgڭՎ$(-LS1(>6@[M㰔p[#`ϒzfi^ٕ?%X7[䥄jɖf|tugQ Ihxg.1q{/p-x-ww#8^EU ÒۯÇ5(4nB=޽ぜY.sY&Z|jFt)v#gZM*2lSa"\Mq?Z}S|Sz~D!:4-4/ȉG'dA8 2Yr$#_cVd~P.iNݧhlT)hCbE`(zӗ^RƤ;>Rs n;5 hS92ZI$4^5ed& /uX(=1_ۼǞ2K- BE%aBVky){d_˔ھCy/@Wo{OYd&S"!%y-seg)aX-6U<\!pC/t ~ mlR8\u`R'AT@?$/MX &i<;򐂩?J)>/N$BˉKj2m&o) Lf-]3'%&&pn ď} 5U1Oru!?쏛5śeAkFL<TAy3el]%AN#vC V[$u Ro^ˤ6#UC6=A1,Z{]cD ޖ uK]_܃@w<7؉J GƖyaN Koفr]6;'0Kj-eW)S ONƇi 3#H'I =p,'b'Racvi:7do0.D9?Gf +] ?^sYf'usN G(B)=6ZbdVl8p`?ʊ¡}nXS!Nφ,)$hymC< tӧKQY@RyBͤr7_VqW'J )4(h"3[`^3,9i 9;}[ޑ0)i,>a nIFu2?&ױrSXсozKe`oߋ2+C5yGJ&uӸXPe"X*E|d&b37V˼@ͪy j@2 [s!0*͠D$=YiVG|?yVrwQ0_9FH~^ E)` l"cW@[dHd+:xKN+J7qYFЗz(zXKDGBd2;FI i0f>sɉ坢dOD$ ^0 O{%*>@4qAȞk"Ҵ}MzhU<cVZ={ƐT#Ж@ θ!mi.s;(wl{U"nWөa׃H'nFceC\̢h97k<;p܊F)cc ΌФQޤحpC*!BM>rţLzk cz`lVd¿Jɮ-!4RhTl٦Qs6]j`[Î!l$L0(@ GK1 _EP5v#Avi=Lq ]@g YJ8Oi҇ ,c-#|ְB"N#Dq~Q3ܢ6-CHp |[pDP;Ȝ!j' pv_bhvs .KvP(csY[FvKТ2%g5dv^b?4X2+D\ O*6O}D Y#/!BܖVwO"ɰ+Q?څJ+njdxxvUtAR T5:@OSug7i7pAi)Szdpy2{*x!zMlerAPd3\3ߟ"h/bdZE-˛r[ɰqUr|[A`-GW] \n&oH-Z*xhKsE:+ldW%V8H"{߹z"$ ~Џͭ/͘rĤq5~6e<3ovsB4L]#j]mkjϪԸ FR 420MSm*ma@S}ʨmөTm2 wPñWiyZzSqNuQ ;$$ < ԅꡖ !$x]Sz( 7=7٭dW,Ycي!ߣwzjdGڋC&/X[Fgka$׊NwVCH|rd<`L;kjSo' RDM@f\IR1<6S-^>b{5@L[Ze{]@TjV£ǓR(O<߉nT3-N.]X<`*I/P}1,u9R#)h9֘-q iyRveNO|?!oJN\: X}}|dQR*R,:۫O¸r}Y+07`:ȳTn97Ox/KF]艨2!+dY,C 2tqYלBx+Pzn N$s $)D Vr?VDK܇j7qy|Y=:r𐙷/ a푁p֧LvOoݨc z ۵dr T^߼U+s X𑠖HG&!7ºgdk"St c69&y nЭv:Yj 2G:?9*ˍ^#fO\WGyKM@~\d󢓒z- A46`̄9T9NFƞ`xAo n4Ao$,NWN! ˮzD`Zu⤆l1H'B remZ N0`7isdaqs aT/FqIS! .$$ld +Uj;F}0p^gj(vMEs!P3c(nO&@#}`y֙N{2fY#VRܟtST BqF lӢ}('"F#Zf${f 62ⷌ6^~R6@MoQo,JY 2[;i0Uࢂ $}b]yJ UNh))@ S48tY_ j[IYne׼~s\0_Rp|\!tҠ7F^BS+ T [d'SCz=S1ܘq6Ku %nt+s@.'*Z^0"[&zy (8ӕ7<,[iC_8;C' Vu+Gbr8>äp'^4X>8@5`m3[%I~;LP',w_dBHA^?rxEֽC` 4%tdlʶH]րi$(ÜÛW sq0%Τ`LUV QOdtG$PPUwهrtF+$.s/[2%F>^j";ꇝW +;Y (\rfqNKFcg@+OԼc+b5L,3!nfTo\(z^}12 sܡH>%TcD)/#E#VBI{rhB3N^a$+sbWgSUK>?'ۅwz2zGs05,^2d4Tm_^B8/TzNBeL\[?,b=S  )}Yꕦ&S0]`<$Ca*_Hg&Vr݆2pWyqOk#P`)O?-Qy,Z- G]axrgH/}bw 7qj;#d4 ?%ߣ ~:|4[y(F4(^|ürcCgWnAZj:/o8 [=r\g1 lWߗXeD˸Lshh\R X1Mubr%a,)*pbG~ l4pr/,4Xa԰?K7?ù<|ռЇJH$,TPE1rSpx]ItYHaT!SM k,]j si.%g< Pp+lshXW|9.`]LUȥ\uGY@9YJ|8:0{RڤVFP1q\ 9oٶN}1W:W >?a c-myg+y ^)Ę҉b]ml  $! #޺6,4XkSR8+07n6yiϵ8k4 Φ@+fCcpG{ Z |꼯f *怳wЕ1q4RKHfsmds8M 貚zAf 4ɼ%v> T#2Þ O `BKUD2ʭG063\deʿZ#wJ:',b HAk '<5(uR@3T-=_Dm# B."Ug({6^ d7vh`?=X ?~$NբL9{{ q|B:,6Upzd4GQBCuĞ㡴%ur􏻚W ЍEV[}OnzjE%! [!G0d]¼,7,<32^PlѤߓppZغRvuRRPGx\;H{-dE\R`} @`*WL4UKeq>Ttc@^ݐ(z?U&M_oKR.y!g i]uR6Ⱥ`; 1(-.< 1{/24'~(@G48!9oDr**&#[Pf`3ĮՠTeU,y DTfDN.03pN4+d\^hjEYe7FL_~,d?( dbo^VΝ+^+ VaIb6͐wq!$S C53g wnj/=&K ZqO%_܋!qm r)<{_qI8ΣCX;F(f4R M'ÜT1ѲY[4S&@ s~^tPCߊ|05!A/0٬St?F) 6҅(^>/tz|,jw"X?(|TaJ \SfL[wˡ0ED XHd 1=V :gm\]};@IƳHt `M&?Qo@%8(T̼j=^os+ ?L\kJsAc*m{\D!#r"D(2W7nT!VNDQ)EYŶ͢yIFi>*G-(e~XX2 ]/-fxcM$& ŭT"֩5U{c{ ;tX@qtS{)ũ8ˋ_/N#sf/2s"+謦Pά3nZ 7 R]Jxv^S]~? .ܷf!E 9IwCcj BD fCN9hA&{'e݊c6<ڐDL$Pl9 p3ae \YhM[TPb!{FEpB&63s\_qV qHn\nDib@K|(!e;ZAfeaX]hA>BGm5 SI)ۻ]b^Q7zk&vUcXztE H1["P+(%0L+7B1zIv_%2 - Bbؽj3(ZE'BŤEz"< DiA0. c(4˕$(b:h Qm$gNu]]G͆(I!p+墇[o4*e !̴h h,IZ&^۫_CxTuEHm+o֥W;.$C`N{Ȣ2Fd"J_'m,l@Ó)|+%aVq+[DJaI,5VәCb Z TH ruy/u&N`XJv/ ?DRsH k|nvuaJ(P {l!\,sã.'ޡunN3g<ԓ\߰l$%;rA\+)#Aƥn!eS iRrt,8;ahQV:n[ n 7b`w5m:-YX"oPP)W"lz4dL_v/PHګd*JyQ0,6{h`+ ʮo{}N0R.yܬqJkp9SbdMN}$lJtĒC+n;D\ A;8$'a Tc뎬:=v?4<04Y" ][LbbҢt% Dy {Y$ojƝTR@O1:o0iS{(IMaD8ɴMbnFpSx]c9VS=8K >QWlSe/OF?q4pr@>HZã}Fҝ:>jQ/;1~`6D맰 d,X`F1[OA'|m7Cж_2W)f!W,*)3 : N⁲>SD렘ZQ`O2>%U!Ѿޭϒ%rkm}yE\=M2@*E~A&.0Bɷ xLNudokvCd_쁷MEIk\^+dmPy脭 y?p~k^7xNT.0LMy۝d7ELUSsz?.A_75|pln> 2Ȁ_ dU \\۟O"UL39 OVW),.'AE]6h|N/P4_

7*k!smcV$ǫakA5*5٩0&(1ΘE>NȮ5̬GIDtDHW~)ͺd9ѼoE6WL#eqkʹ: aDЩ*kl%&~tM b牙N̈́و'q"+l5Ӽ0+#f._n}u^,ݔ.tx̸n̴\.h%</Ķ^\&j”$u I5þZ;m?zi%U&Sle( Fdos LeT;#N/F;JlN>N{tR[yuOރlfy͜igJcxeC<4{E _o ϛԽ9eԪ+CgPqf?Dl?Ѝ 최 [>`g*,^ Y F|:.Di;(3UӀfj/#0/s 3GB \NH3 e^?{U|ZX^Нo\_;ŐEy;WYgqT?ke`hMHSms7ߕֶɻdXH7 ~+. Z>s7d9' H:4BS 4m/<ԇ诫8"fbn952{hwyu(echd? = ].蒝Qε+F 5ZM+~Cĭ>kS(o[M\JAҘ^sG2A.VHŻM̡, Q梺ѵ9TINk\~7&>o#a9|}f"*(Hf(a(巌!ټ7.Q@*nFlP9]Ϳk4č#tX'#@:r@eEg`p#􃟺V`{A} 2{JJOr~KE@퍺KdD0;-bR=I󅓼~%w^niQqc]ȴ e(Β6|7ASi\g2|^SZdOm!4iFx +RaıL3.z0h\jxkB?8[{E0Î7obt|G,el6bl򋒻;KEnLRY(Z(Xlwjc&|oܬIk^8HiYAtlvȺ!R?8"gFxtp%0>̧T#0dS^NMR[kzKВw]Ħ\ς?Z:@$ ǮV3P3@q%w<)H$~P ( 1 EŮFxBd7{_I7;q]E[ 5ea2?ef-DW}5  }oȵOx'̘nXgQ˲#(2=,LI\ƴr:$k̂B 1 {aTޱ#=\nL`ll؇_diK#0ųdUSOA]COѐ; gsG>}iw_E }t{[]QbJSrQMSf{'l7N]/oVDnL"/weh3ͬ&ٳPW)ؙu&QsRF;Aa4p8_q(αblTl-\j1hjjK4N/av׋kQ/@k@_a6ڏD'x!vljeص/ ,YZt'D/BZճ7涆|TEjnIpŠ]5~voTӴ pɵpoG\`-4Q[IԈnm./VJ[ՄmvI]c ͛mS` ytp WNCF361C8 ;~OI~TA1ȜOZo/ `+ɷ&3܁I5$07acZI Ml@,ZL=N Sf\cL;<%M 7lzI!:c)I'g>R +Z6y5v)dvS3õeGVǢdy%Fݔd7C[vW{nKpjs,+'KYAu3 U>EDRlJ PxPlk>%wYi7U8X$ iA^lPy7 (jk/%6u@(8nIGZT2^xW~ KwsƸ4kO"OQZCeiSC~{1pybgX^B8i]e <ꑓwXܻf *0,ndzpJ9:<[76jGYNs dO PPL0w^ZmN-$\!I*eV@*Nnʭz8 kQF@蠱0ϗ2Bu1"~&XBY0a>ېW2]Kh'2Ąnݚ^%*j\#jM*c MJv, 6m]UE2(gjYEkx2?<֟mO xS@ J.6[3푠ʲ|6S^wj?rwssgqP{wPZvb@m(6MdJ2vJg2+b L"?x2>i[!tip-!ԇ(9$~ogeNe/A^tD7a~ƼB-4!Kإa,h mb>؆##4%[+$pbR+ԛ'gAHS.*_[#K=jC۹]C0U!O~41 Wki>wT5SK $Lr]w#k=fR.MZ]wAT0#ϖKR:W6=`ºTB,O{%L@?&TI8E7o"|/ܮ^jbNC3<`G='/)徍ʾ0IDk8V\79fh8Iq\qP|浟D2o`iY8BYBuŕ2@c9)FnSdɚ|i H81m:YLr*Ϧq!*A*$1+ŝ)7sî=.QG\r[#ꎠN|]%?*3Yvab"J -?ﱭ \DL`cX?GMxb="e`Cx82U$"=:k'o˶MϹMpc{MyH2{^[=J;|=JifX5SK蝺%ʍWqJ_$,#CZ@E'{? [3VDw'$ 3-^c)XK7\N_Gߪb(>h_c;4`SN{Щy4ήW=Eodt")=&:vu3j`qhDj3rb(x HGu,!/Q$qMD| B#:&[T?|"`%+ >RFM'[)Vm35) ̖9z,ySBŗf JopR| SMYWyw(AylB@]CňR0I~u46Nƥ [n64g$[ؐG#禖dkhܸ֮u>4N7cٯfcxQ`'jMıaԜ^ILz-)㟷Eyz$,:rQkw@fmQtDUMMK+N ?q)aAݳ-(2D =t۸.,~^4ꗻ< T*A*C7JOKn&msN1ze@AU~o 2=<Ÿi=!`jF*56,wIQP 5Nsp1T: 6 _ ,~XOLv+gK'&YN( ~Ul{hEq5b6rgb-d }GS䄲 Ǵ  YFg.чQ7h] (ՄQpz<[ e-Og7~M=RmP=վUؑphd\j QfNF0x3G&j/iuh c1D3v> cJKLI}q+Xk!8qYfŽL(> }eSF,|)<8UyNU,wkWď׳"9*!WfڶQ)vCSak%sTUbma0 e8z-jHkq.y>瘟Pϧ='ŧ& $1$/Ы3@tv2)j%{p0BϏoS*Mff$#>;!*}HĹaqGvZ3ޙMai͍614' <]-V׭3~6wp9p%Qt.]]$Ö0}uBi7MeuV;g7ŋWgD{kf#@{S0To%p҂AʈE@zJ Ƈ[q2hIXb!tL3T*Bũp7ןֳ((Ou.qr;0gdR9erldy `ar̟ 91kVQ t\0<{;tN3)'~ۭed6ʍQՍ{Qd=?t!–Ah̠vG}_Id{.S;]T|Y/W?%h/)%r/OKF+X>M` 9'>)ȩ H2F7x K 9a}p'T m$'.]t~x 7` @֧˶- 9?.1H_uLNjBV\TfbYd-A*=>` IOdqJ-n3+ >D SD-~f|joEG{N^ǻ%9:#`t~׮Jᡗ$'}EDAoe6쨄j3O6:`l΋+Y1 Hi>]2k}ڊ P#N*<((v4^,@?@ӌn򹅹PZnG^@aDC"8a’Dh+ xY>H\NAVNNɺu4~u$A-յ[hK^%^ {JvH~ &x@g"ܞ 9Rk V>b1љm"=oyvVw^9Y`C-vŨ%v,Aa7u&QDž-v<[h] ETXL0Oe 'ڧ-qeQrq e0Acy̴PR~]hؚ]5 ~OdfjoARhp؛y R?z XZ9gd?{we݄l\*_Q=֚d)3HYhfH\?+Swڡ핁):MX м`e^c3"IJOT:rY~! [c~ K2S'ɀqm=ξE,i9jU. T;g.HzJy9,Ry-_Zy0z{pBيp#͐I٧Yՠ{Y& nz6A]Aȧ<7{rH2G,O㑈<ɣ Kȟ{Ϟuvɗ0N!Zg2NS%߃vp% i۔\A%UX#dy-D=رbEs^*T^'),V3厃o+,%_Su/kH2?oG"l8@w bP'fygxA[Kd`BPRI'-CҮx-;qMd@n[rQ0Rd7a|խf$#*9 =fM90EɂxKұ/Z8%_%u/4ˎR4 [ifw&A%9؈ˏJ_wx=~84' {UB|.#)aBZ K8%8o=} Â!fk_*%%.alHA%#/E/y#xUozõ7@~E;؊k:TzHۉSs(kI%K(ؽ>h[XN_YWܓ\c͚D#n)@+a?8| =L4WZv] m-9xݦ &Ѹ tB!y'D)*oM# {rhEN*=04r褷[J 경ϢNg%H;B WzW['d$;wLXgխ,'Q?C *.Ha"fy{c>Ȼq>1k[V/ =}o{Aq$t)):歁{$,v/I0|8ֳݟ.b6=8編[*nQC&DZGe`I6 :!mAiGbaҔA?ȆC }Z`Jd7d<& ^ӌ^}u(9#Ҥ[5Ygi.,;g LIw|mư/("<:ʏ2CG%bRcnijc&WZ!B"0~w4rB8$J^Qs1憆?zWI(z*+fCPqpmB H/?8#H[Ȩ e9gp2O$+̮iItݎ"CfINK|6P`4ʭqc&wǓ-=A(VQ'p2&;RM<X!([яrgvKze*)pVCפQ3 tt{zYGbˣݾ(aJ`0I q yJop1prI@#`VS?8d=ä CH?0ĉ?0B>z)g?1Su[DFY~+VE>%);jć8Jzy&̑1D!>ټEg_Z_d {%*[סz|44"5`,4o'rS$0,p,M.]U-6ǟ#l^s(zIJ^/C 7{DdXԞB퇣w6-yݺk}.v1 QT2l?'hI Zwe.Msij#&5iGM7V\A%v][pI] 6W]8 ߅;'O'tëv `,W }8o_vmaxsNzcBQ8%K>eVҋi(-}UOGS[[s=7b S{JwCM*vM";R 꿀>&<賄'W #4 ( }EA]@!ĕmr^ nWv[w=te,n;b0g5n]@Z>MZi̵4 :ZG ZC<OϞ.P>Sh՜APP>-wՒR/dpj ,j)|W1hEI~#?!ˌEyW]vXեk ,mzxZgX&, d SNȲU`aU0ƳHNՑ,OzίWq;"kE82J+:Ll mX?"Z;lA($#!uqMu.:[6}_ר-Ѫ&XkˌȢS۲+_S M3nGPq8lw>Hnp'>N)Ӊ,Y5#H!9Fo?t+-˾DX~\J弶Y! deNrR!qJb7b݆h;ɴ7{6% Fdlm OI7 zS 0Bc lGCvz+) No Lٙƽψp=A4%Q`lQSS$rUMp_V+ ){6ТƉJdoVjh{T/~A߂"(o>8fŸ ijxzNwwz0o 2VOYбc Zt32{]/|x'dRwԅ Zu}CrLfC!U;L ya F|, X`Goy\s32am @VI01<62VD8~b]ߩo"+;+HYYmQ]B6Em%DV4c,A3AD*3`ޚ~AG"%)(r_^2sJh[ ,mRr#@w\?e GM0@S2 X+57gҌ+dD7 ]0sn2U7'T1(-b`^D 1g4> j|~T=K(f1Jw| Q*:řWzDN$+1WtHg-Չ_n.eNI~bj*u&'30FmXxuԅ?b xu~Θ+1[3aG=(5J%²c\-U])4aU /8&VKo^qKqKLՑĴc4`]CV)x\:AGGI! &iz\qXQ8nl~ 2BۤO|{eN=뼌8^>r;tWydoI&N`dG,yPe'ĥ FO;-4?G]\;R D?V>[/1*3M4U7G#IMooq r&~ j\/nꧺla*?C0W2_Upk"alnlp '2/Q[=fƞmZHg.R_k85j <3OK pYvy 9+<ÀC !ax jOd"c9^hE7A}.'뺊>]k\4Hbi) [%W=e vhFnm91A>7WfU,2$Y=؜+Y0̙8?:UMKbY%^hȕb+y?#[jd»Q0QuS"s0*^RTUҔd'(ﭼǨS!Zy1| 9"=UPNH4m-A@-jMѩgs4Lm9*`:8 ,%=n!e-{<8(g]B4:v1G{2윹.C}J*r82}||U;3p)%"i OyI*F\ 5/GH=#gcJF`qfFv$WJܡݯ[NCn?cvnB!Rǟ9RR _^iIk Hj ω)!׳opK(,0jhGD9JT)Hn`kʒ|~1UUgdžF&R CmicA8xԃ'}7"ݺ`,J ~,w Ϳjl~[{ ܇☁(Vև>TYd~Ed(Ep{+8<-3Yh W&`6#8/q9LRc 47̶[NJqf > ILf͝;#[cMr| \.ulni!p#ŷ|ȲÂʅJ쑃x9>>(Mgf .1u,0&=%.R&ރQ%Iꄬ Ѿj'8 YZ