openldap2-client-2.4.46-150200.14.17.1 < > , 0 dp9| &*)=:Z^&uVny.AࢱbSpiMN
fOZH\8ՒE6ezzcں6%6"㿵
ht/W
ĭ]ZU wx;0UĊAH 1Y:G٨; ]˜\4fOjٗSABE?&1EY=LZu> 3$wlK2Y?FAnY?U gv$9huO[=px > > mX ? mH d ) C 7 = H
\ s
s l
( : 8 D B 9 L B : ? B F ^ G ^ H ^ I _X X _p Y _x \ _ ] ` ^ a b ad c b
d b e b f b l b u b v c
w k4 x k y k ? z l l l m mD C openldap2-client 2.4.46 150200.14.17.1 OpenLDAP client utilities OpenLDAP client utilities such as ldapadd, ldapsearch, ldapmodify. dibs-power9-13 SUSE Linux Enterprise 15 SUSE LLC OLDAP-2.8 https://www.suse.com/ Productivity/Networking/LDAP/Clients http://www.openldap.org linux ppc64le
h X 0
@ 0 < )
h L 1 2 i A ddZddddddddddddddddddddd 6bd14ffc10a4a1c98bcc7e00421e46ae6439a4f022677a3a4d1133f33ade4261 21494c94a175d4a1b67adea299ea030bbc282663b2d93a95757312b9ccd1ba96 23cee875d2c5df4a793eafdfb92893a509b51d59d3ce099a361d2bd7f75b0817 870f0bf6316f280d19084a177b129780082e81e9bd36cc778bcb20d4f40f18e9 e2c14bbc53705562eae67ab564eb73473cb0ecd55564204bab38e12ea92b4290 4ff0ef110cbf62323983358ea7ca1db4debf3ca835589e65f7d3650af77f7bf6 93417a7acba0253711b479ee43789b038fbb3d6319972dde3791d3b6f9f3d287 969186466aa6d0c3e74681140f0dca4a830ae73e368969aa1e2097810ca4c64a eb70bc18c9532925bc6edb86cc5effbdb8e3482fcbfdd79d9afaa385ab69513a ddcdaa37e6ed8a836bdbc5258d5ed4a95a6bf1f8dd7dbcdd2669c45ddb59f45a f38bafc107c400f9886af2957bf4c7d690daeed6b77139caa24fddb842857e9b 762c6847249029f3ae42eefe18fc65c75fc841f90cff3ce98caa94944e6627cd 58411a368bc382d88ae2c334a6dcea56dce06c40f18ed8fa328f90a634765d8d 0ef35b1949ce0e67437f290a02f7c8db43ffa00bcb503b78e0ec993fa9a56105 da024a86c148bf3751bf7eea2abad461b3c4f6d4526d0520a6b9d6a4b3a7d5b4 5992410b517e0bf7f23fca91b4b0921ce7d699a4b52a0b99a2c49e7574f9932d e0c418ef53c3b2b91411cd502ab6669092ab64b8865401c3ded8615299411270 426dadaeefe5b37cfdcd98b1a7303357d5f6bba2207472d664577cd57e451ae0 708403ac6b11d8cc345411b1e7542ee8f7cf273d6214c6f2d74aad13bd3eb989 1ec841dadff78ddb8a0eeb1c2ca5094b366ba4445dcf83144fed18f168da769e ldapmodify ldapmodify.1.gz root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root openldap2-2.4.46-150200.14.17.1.src.rpm openldap2-client openldap2-client(ppc-64) @ @ @ @ @ @ @ @
/bin/bash libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) liblber-2.4.so.2()(64bit) libldap-2_4-2 libldap_r-2.4.so.2()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libsasl2.so.3()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.4.46-150200.14.17.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 dZ@du@bx@bu
bX b; b; b4t@b/.@b[@``KW`/@`+_@_@_/@_FN_?@^ ^^*@]B@\ڭ\r@[H[@[vZ @Za@Z@ZZ.s@Z@Y*@Y*@Y@Y@YYp@Yf@Y7Y6@X@X7@X$a@X Wk@WbW;VVɦVŲ@VŲ@V@V@V@V@Vf@V^@V\:@V@V
@U4@T@Tuwilliam.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com william.brown@suse.com varkoly@suse.com varkoly@suse.com ckowalczyk@suse.com ckowalczyk@suse.com zsolt.kalmar@suse.com zsolt.kalmar@suse.com michael@stroeder.com fvogt@suse.com michael@stroeder.com rbrown@suse.com jengelh@inai.de mrueckert@suse.de michael@stroeder.com michael@stroeder.com michael@stroeder.com michael@stroeder.com michael@stroeder.com hguo@suse.com hguo@suse.com jengelh@inai.de kukuk@suse.com hguo@suse.com hguo@suse.com jengelh@inai.de hguo@suse.com hguo@suse.com hguo@suse.com jengelh@inai.de hguo@suse.com lmuelle@suse.com hguo@suse.com mpluskal@suse.com michael@stroeder.com hguo@suse.com michael@stroeder.com hguo@suse.com hguo@suse.com hguo@suse.com hguo@suse.com hguo@suse.com rguenther@suse.com jengelh@inai.de - bsc#1212260 - crash in libldap when non-ldap data responds
* 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch - bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
* 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch - bsc#1198341 - Prevent memory reuse which may lead to instability
* 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch - bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
* 0242-ITS-9815-slapd-sql-escape-filter-values.patch - bsc#1191157 - Correct version specification in ppolicy to allow
submission to SP3 for TLS1.3 - bsc#1191157 - allow specification of max/min TLS version with TLS1.3
* 0239-ITS-9422-Update-for-TLS-v1.3.patch
* 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
* 0241-TLS-set-protocol-version.patch - bsc#1197004 - libldap was able to be out of step with openldap in
some cases which could cause incorrect installations and symbol
resolution failures. openldap2 and libldap now are locked to their
related release versions. - jsc#PM-3288 - restore CLDAP functionality in CLI tools - Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
reporting is bsc#1197004 causing SSSD to have faults. - jsc#PM-3288 - restore CLDAP functionality in CLI tools - bsc#1187210 - Resolve bug in the idle / connection TTL timeout
implementation in OpenLDAP.
* 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
* 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
* 0233-ITS-9468-removed-accidental-unicode-characters.patch
* 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
* 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
* 0236-ITS-9468-fixed-typos.patch
* 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
* 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch - bsc#1182791 - improve proxy connection timout options to correctly
prune connections.
* 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
* 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
* 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
* 0228-ITS-9197-fix-typo-in-prev-commit.patch
* 0229-ITS-9197-Fix-test-script.patch
* 0230-ITS-9197-fix-info-msg-for-slapd-check.patch - bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
X.509 DN parsing in decode.c ber_next_element, resulting in denial
of service.
* 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
parsing in ad_keystring, resulting in denial of service.
* 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
in the Certificate List Exact Assertion processing, resulting in
denial of service.
* 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
cancel_extop Cancel operation, resulting in denial of service.
* 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
saslAuthzTo processing, resulting in denial of service.
* 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
in the saslAuthzTo processing, resulting in denial of service.
* 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
* 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd
crash in the saslAuthzTo processing, resulting in denial of service.
* 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
saslAuthzTo validation, resulting in denial of service.
* 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
* 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
Assertion processing, resulting in denial of service (schema_init.c
serialNumberAndIssuerCheck).
* 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
* 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
control handling, resulting in denial of service (double free and
out-of-bounds read).
* 0215-ITS-9408-fix-vrfilter-double-free.patch - bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
in the issuerAndThisUpdateCheck function via a crafted packet,
resulting in a denial of service (daemon exit) via a short timestamp.
This is related to schema_init.c and checkTime.
* patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch - bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
where openldap would crash due to malformed inputs.
* patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
* patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch - bsc#1179503 - fix proxy retry binds to a remote server
* patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch - bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
service due to incorrect validation of modrdn equality rules.
* patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch - bsc#1175568 CVE-2020-8027
openldap_update_modules_path.sh has a number of issues in it's
design that lead to security issues. This file has been removed,
from the package, and the %post execution of the install. The
function is replaced by /usr/sbin/slapd-ldif-update-crc and
/usr/lib/openldap/fixup-modulepath, through the addition of the
source files:
* fixup-modulepath.sh
* slapd-ldif-update-crc.sh
* update-crc.sh - bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
SAN's falling back to CN validation in violation of rfc6125.
* 0206-openldap-tlso-use-openssl-api-to-verify-host.patch - bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
chown -R on olcdbdirectory path. Remove chown -R on start to
resolve. - bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
* patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch - bsc#1158921 libldap-data should be requires, not recommends to help
prevent user confusion around configuration ownership. - bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
authorisation of another connection, granting excess connection rights (ssf).
* patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
incorrectly to another backend, violating multi-tenant isolation.
* patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
* patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
* patch: 0204-ITS-9038-Another-test028-typo.patch - bsc#1111388 - incorrect post script call causes tmpfiles create not to
be run. - bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
- fix the script - Emergency fix: move tmpfiles_create post from the library package
to the main package's post script, which ships the tmpfiles.d
configuration. Fixes the post script of the library (-p
/sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
* source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
used before constraint violation to the client.
Fixed broken memory handling in affecting error response of slapo-unique
ITS#8866 slapo-unique to return filter used in diagnostic message
* patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
correct and in containers we don't have systemd. - Fix CVE-2017-17740: when both the nops module and the memberof
overlay are enabled, attempts to free a buffer that was allocated
on the stack
* patch: 0017-Fix-segfault-in-nops.patch
(bsc#1073313) - Fix slapd segfaults in mdb_env_reader_dest
with patch 0016-Clear-shared-key-only-in-close-function.patch
(bsc#1089640) - bsc#1085064 Packaging issues have been discovered around the
openldap_update_modules_path.sh which has been corrected:
- the spec file was wrongly configured, therefore the script has
never been called
- the script should create the symlinks first, as slapcat is
useless on a system which is already affected. - bsc#1085064 Add script "openldap_update_modules_path.sh" which
which removes the configuration item olcModulePath in cn=config
which is after upgrade from SLE12 to SLE15 holds inappropriate
information. If the cn=config is being used on a system, the
conflicting items in slapd.conf are ignored, despite of it, the
backend DB configuration section has been also commented out in
the default slapd.conf.
In case of correct cn=config (the olcModulePath has been already
removed), the script stops without touching anything. - Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
* 0013-ITS-8692-let-back-sock-generate-increment-line.patch
* 0016-ITS-8782-fix-cancel-memleak.patch
OpenLDAP 2.4.46 Release (2018/03/22)
Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
Fixed libldap MozNSS initialization (ITS#8484)
Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
Fixed libldap memory leak with cancel operations (ITS#8782)
Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
Fixed slapd to maintain SSF across SASL binds (ITS#8796)
Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
Fixed slapd CSN queue processing (ITS#8801)
Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
Build Environment
Fixed Windows build with newer MINGW version (ITS#8697)
Fixed compiler warnings and removed unused variables (ITS#8578)
Contrib
Fixed ldapc++ Control structure (ITS#8583)
Documentation
Delete stub manpage for back-ldbm (ITS#8713)
Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
Fixed slapo-syncprov(5) indexing requirements (ITS#5048) - Use %license (boo#1082318) - added 0016-ITS-8782-fix-cancel-memleak.patch - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Add openldap-r-only.dif so that openldap2's own tools also
link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
crashes in threaded programs which unknowingly get both
libraries inserted into their process image.
[rh#1370065, boo#996551] - use existing groups instead of inventing new ones - added 0012-ITS8051-sockdnpat.patch - updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch - Added OpenLDAP new feature implementing OpenLDAP ITS#8714
0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch - added overlay trace to package openldap2-contrib - Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
and 0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib - Remove legacy daemon control that was used to migrate from SLE 11
to 12. (bsc#1038405) - There is no change made about the package itself, this is only
copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
/usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
"Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
openldap2: slapd crashes on search with deref control and empty attr list - Drop binutils requirement; the code using /usr/bin/strings has
been dropped in openSUSE:Factory/openldap2 revision 112. - Remove superfluous insserv PreReq. - Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
to let OpenLDAP read system wide certificate directory by
default and avoid hiding the error if user specified CA location
cannot be read (bsc#1009470). - Add more details in the comments of slapd.conf concerning
file permission and StartTLS capability. - Test for user/group existence before trying to add them.
Summary spello update. - Move schema files into tarball addonschema.tar.gz:
ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
attribute in the generated LDIF. - Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408. - Move ldap.conf into libldap-data package, per convention. - Move ldap.conf out of shlib package again, they are not allowed
there for obvious reasons (conflict with future package). - Build password strength enforcer as an implementation of ppolicy
password checker, introducing:
ppolicy-check-password-1.2.tar.gz
ppolicy-check-password.Makefile
ppolicy-check-password.conf
ppolicy-check-password.5
0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
(Implements fate#319461) - Remove redundant -n openldap2- package name prefix. - Remove openldap2-client.spec and openldap2-client.changes
openldap2.spec now builds client utilities and libraries.
Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
for OLC.
- Be explicit in sysconfig that by default openldap will use
static file configuration.
- Add the following schemas in LDIF format:
* rfc2307bis.ldif
* ldapns.ldif
* yast.ldif
- Other minor clean-ups in the spec file. - Use optflags when building - Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch - Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
into 0010-Enforce-minimum-DH-size-of-1024.patch - Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
/etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
"not index" logging:
0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif - Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
to address weak DH size vulnerability (bsc#937766) - Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
(bsc#955210) - Remove OpenLDAP 2.3 code and patches from build source.
Compatibility libraries for OpenLDAP 2.3 are built in package:
compat-libldap-2_3-0
Removed source files:
openldap-2.3.37-liblber-length-decoding.dif
openldap-2.3.37-libldap-ntlm.diff
openldap-2.3.37-libldap-ssl.dif
openldap-2.3.37-libldap-sasl-max-buff-size.dif
openldap-2.3.37-libldap-tls_chkhost-its6239.dif
openldap-2.3.37-libldap-gethostbyname_r.dif
openldap-2.3.37-libldap-suid.diff
openldap-2.3.37.dif
openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
openldap-2.3.37-libldap-ldapi_url.dif
openldap-2.3.37.tgz
openldap-2.3.37-libldap-utf8-ADcanonical.dif
README.update
check-build.sh - Upgrade to upstream 2.4.42 release with accumulated bug fixes. - Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
* Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
* Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
* Remove already applied patch 0009-gcc5.patch
(Implements fate#319301) - Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
for Berkeley DB version - binutils is required for "strings" utility invocation in %pre
[bnc#904028]
- Remove SLE10 definitions ibs-power9-13 1686836159
2.4.46-150200.14.17.1 2.4.46-150200.14.17.1 openldap ldapadd ldapcompare ldapdelete ldapexop ldapmodify ldapmodrdn ldappasswd ldapsearch ldapurl ldapwhoami schema2ldif ldapadd.1.gz ldapcompare.1.gz ldapdelete.1.gz ldapexop.1.gz ldapmodify.1.gz ldapmodrdn.1.gz ldappasswd.1.gz ldapsearch.1.gz ldapurl.1.gz ldapwhoami.1.gz ldif.5.gz /etc/ /usr/bin/ /usr/sbin/ /usr/share/man/man1/ /usr/share/man/man5/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:29423/SUSE_SLE-15-SP2_Update/4412059677ec11eab7dab6a8ca4deb1f-openldap2.SUSE_SLE-15-SP2_Update drpm xz 5 ppc64le-suse-linux
directory ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=424a451d7dc110f36c4f8d14b42be71a4dfb0d9e, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=f5989de81a6c759451436bff8baa5730fb0c23bd, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=b83eea188cd28397f5b8855f93385166d742c4e0, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=17e1f03b12aa82fca361a98ead5a18538bb2e5fd, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=a7463db372c165e2dd10dd685722cefaa23ea194, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=6065f31406f67cc5a20cc1e26c1499fda98c9cf1, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=11b451f649568d133f25315e5c2ee13661864460, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=a7fd39dc78f7d1b293673e08310b087d3a98a20b, for GNU/Linux 3.10.0, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=726f14d8a7b8c0285d495f38c56a9f48aa18f689, for GNU/Linux 3.10.0, stripped Bourne-Again shell script, ASCII text executable troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) # * 1 7 > R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R bj>B< utf-8 4d87b04800a23f42794ab09713646438390c14947b5ee87bf131aed311107f6b ? 7zXZ
! t/}] "k%.:!wf)W\[{r$S]*W.03VOӈĄ jXd~H9M9& ~3$*;&|
a E>7"\ 'kMO'\'C /]lH?
?n|P$-zO%^6 \He
~K)n-SモTGE5dInnU ]$pCVR$iض){я7G{wmq.x ;ؖawDo4\MTte]D 4È!N;O]O+kOCIۗe߯p @xqY
Cʸ9z71NvbPzNUa8QȈ;}KF70yqNK\ib(^cX FfIq/4p6UѹhD
:"f[){op_R ·9KĜ|9 V=p,h1 E=} mPn)N;2ќ
* *^fw, ?|X2Fy]0GWӕvEY߄礈:(/m|yP:D;DYSYkT,W4V%̒3 yv;S'|[K04osu䴷B}Xb ږx J)oxTm*0UX_:R3=IGnw*+.TuK6ڞVv2'* }ߩ&PP1|QѧQf]~ZջEu3a Z ̞3z"R}kHD⊈M*Y)Pµ;I˰% ~սt< |X$tmhG>HT a=2RT?5UaQ=? @HC+z3,Xҡ)4ËkȂLP_:pݒ}\CR6 os;GH[ ϿLʫN潱V)3>Rđ:?:u*TrщM|BĚ;Z֟fJ'vV& y}\?q]i \EP8N]_|
-ຂ$LQmI^"io:3z۠l{H<\ ?q+"-xWKtML93^nqeGvbW<;½ m#[F狢{F
Br1bB0CBnbn4FP,3mZolHڏ$G
%w7lf<Ǟ
>lPS;41ERA hi4$a;CU)үUIhe<̖rwE(S!SR9ʹVK4H _\Pk(M#&]& .q㷶a & &7pP!Wؕy]mfTz2njL)]r^
9hܓv(V7IzUHQ_AS33m_z{f
H cp1& OƩhN J e(u #@!W:g*Xy#mKm:?Q\&v胿$OU)8Ӎ[!OW/)_.f.V4`!zw2Aq̊и+(ݓ / q zJ k@qs~\fz_?H7 Ƌs1Ha;eaODny K D-m 7? (.; v*WR6+Y* k X=hP՛{?يʑ 9VGR3flk)J -5%@R^nB÷p_uRO;d)sga~^ҌO=6c6t3|e\<nF[pp!b_ӌ^ er)+^)o6=<
O.
$
c]CLyq#t #"RN_D 7}&PXpt0"m$_ÿW6x:o3S( {F〥
ܓNm>tv/JcteCX?N"Ͳv"e%x٤+4)KdǟUO%yJy{t*Z% +_ A5{nkY藒zϊeOit_xB b^0v=]Dˊ$KըI0LXW?Mt DSx,W[D{m6F)ŝ(+;[O5Sa_FQp p]J>ˡWL蜞
ڍM/
ȉ)*ESw dVHr ; :p`}X-+g j
HiI' ܨNq zsw+ *v .&*1pFޱkֵim:_0g̰P^Ľn3,
G5`ҭ_>qiuoS% Pʀo,i4Î$5JZ
^k|e- u6x+F2nw@Dy=7 ; 9Fx,.`C`BWYEwqrU@]Ŧ-(IG]0rU߯_/h~/<$
Hꔬ-ekY
Q;M#Qͫ_)Q:N?T0TM`6LgA$ w"b8-;qfqSHv})(;R5q;wi+Q=m>|9]S
]s${Gv8 Zp<^T'k$wҮB 3V-t畴c~H]k[,3ǨY.& 6ٮ zIԺ hSlc{
@"k,z 7N(/u_1 q$s!Sj v)W"+3z_
JYǩY,Q}F'ub@ݠBrNwJ'QӠɿi,nj {8pO)E31Zi 66eLϽT =
FPSPǏVG2*|ъ-b@`A10%b^L+%
[ds)ʞ{f~HDi;: ΧfǦ./j9XcuP P} ©j 4ŭ4rF6e?3 HBb-M('Y7 ׳#fn%Tg>⟁|+}W[(/e 9,}} Vah)M8yv%aFhoLun:]J hv1l iC 'Y@{ g3&tڅ*Ȫгȗ'L%'I` x z&럙_njt]02Ye!lvИ4] hs|[رjɍz<`֟Ă1Z%gt
WFhc9j!x[#v<{I-ez|y?J[*ڛħ\xgxܸ1f@بi(lյ^ N@D
B
[%j!Zwv\atVaB)y:/fQpI3JYGm*Ziz3~ϒ uuw yEآ[n\T apDv(WM;g_+<@(2 xK@čSr'g~CL%bG?xD!Nj< ^2O!}S/SOs٦ygw<2Rmq?;ԋaRC4 0Z K
s YAaz2u45/z"]w "D
qWzfv]HU{ȟ&\ Ku40|e:Bg:I_O"\2zkL@w7d2*9a I)tunh_V'f}3H̯`2^la+q@BxF "̨}ۀX֡WQ))3U/[?)ahMڄ@dn0bsE}hCձ7ڥnؔul=B?
ɺ4"WV8lX58SbG?' 6 %@ %'T" ZEQyɴHar7rTrW̃7w;*% RR-ᾬzv+_\ᇯʨ* SK$nJ9Boė8;X%|Tq@
In{5c"'EK3p%-F8D&j,VNgDϸ "D}!,mC2 xYst96C
j,~f ;^p6X0/laYTK5?h<ďVϘ
$bk5OOMZAt$$H)qwyS_d !z|իǩ+?KLko j$ܗ^#+K1V5y-sc) f=L».T7`'ٖ6 tSwZ+4@Zi%>`20ΧOtɑ0 \ھL'.jB
A8k@ҁpHqBOy[Cjvmt ᪲I5~"bDj bAj#{ YnG|_qB@JԴi5:"/jVm렞.
z+] |_r_, d )yPV~>3 &`@?x1 ՋI"iR~2مtjUz{ GNؕzm/y1$4JKΐ ŠG>4p(VX1= ,yZgoWJ٩ SX"}@'<* EI:05Z QX1 &ju+6* ۟.{*O M x:gΥ)潥[xO#.$6~ YU B._,s}6]Fgrb^0[+zpehV~Q?MR=>le:Jl>w7hQ~NûIsܨ\Ʒ Z3fXB ˪
3vm rtp\/e%BɾUmIϯ^=շ@0oIнKZq7G^>C}TVWB'
~ x?E&Q䚮 ji7}Ze&C2:>5XԜJ怳fe-D''}Uo@" xJZl\~v3,P%?3P~t5MUkLd\I;IH]s2KwRns<՚ >F ]Lyp3F"pL ]TPe10W#VOʾySjA 6" Yc"b\aDv4J`eYc|Ѝ t
=jlcmfpj e/urWSͱWP
5n SVtz3H[dZEzII ;U[ ]]>P=-
y)4_53=@"]c(kΥgrgk]\@GmWˈIHX ٘Úf
E0 ӒN?%úRa64Ђg`B^}*]'V# RG&i:母H$#FO[(X~4SrJ-eƹ%$t)T6k_ɭh6¯<%_7ㅿk
@۬vKXR{F@mZuעbzs qmf-eSzU'*wA\{ob6(H>'WƎ˦nRGIjS:'4l@-Tk<5SZ5\FO ~up3'J~uNR/ IX[8V:mPEˤ7
dIW/ssZuxyWRpyL2XMˢc҉aAsŞwMںO|fx@:0kgGV != 2*By%dH'=h6:;.4͚u&vM2ZrFW-J$J;oҤmh#7Xer#cApT
@O6誑{=E.kd qEm?ț: iBd/pYn,w,3g* +ċc(T-(VR d̚ؿ7&+ /'4Jt!6э k[\A]~s(
?䚋/YY`0lzlFUQu?Jcɳ|g]
M'(IҜxyD+oQ=GмVb7srGG_%i
Wm>;(e*3{soB=*{2jn)K. # "wxq
LCI5K;fՒ$C뽔W]e6~$G`Gb ՈgH<)X=X4fPaD -,8B玖Q k@ԹS]zuB |+0 Tmq/. P H Lw,ETt''NAKb]JF&-d|OXK+\F 3|OBVs:]"p8y18e9
JI (fzn{eƔ#$E>G.SYf댗v9zlδ+p1p@D\ 8,yٯؾz2x:|c&bmnc&7%vΪ, jϭ{)MzSNOIi_NaE5A :B@^^;SI
AH" A5 r{ bޜ ؔIDe7.in!01! x8-[8 6!љPU1o
MĨe\ɗ6.nƝ*wօ1Ք eܳN Ye 1hDZ^ܡ&hup @kVhh$~O?VC
.Zg~GLy?͖_4:=RօIw(!DJj (ΖQK>ű[E.K }E[qg)g&ͩ3~
}(:0L$F7?Rl-zwXWav1't- î %^P*[:r۶ ͗s:Υ9ou{W.XRXsi(g'2\gZ^>H>5lzCYtq1LYk:a/_ki$j#̓ͶH\_^#J&V
V'lڻ-ip.5 C l mdkP-b
=lU81ӦbZxRsMST0/w եxShejRS(YOsaI!B#8팥 f4}o
m&7v`ɤd14\hD8h Mȉ=* Xx) s ` uD [ql!Y \'xhHmJֻ
2CYV? ,%F+I,[9i)蟁Eju
r#;,dioHGTg E] rWl[Uk-!FؒRJXH_.,m;" ;9686؎`5TA:SvԽeYLOzR oƩMg4[WzUe; |r/6m.wI2'?GO^s^ vd\fQ筶V
)A )A߁e^ ;x8i,>;=BT54_DJ!]*DDž@Bc UaTAj+B$54zPlY "\*Y&#'Qt!Hc {͔G?VIq'`ꃑN,QaXJ!(B-7 >IZ'J*E ܗp=; %+ @WA}LuP,gvEiC-9еJY?cm=azx~
RqHptWD7s8}ՀvO\[ ĂyVG.ꭳR'|[ oX²7VX\=p?rNCxՀ'!N[9qv W\p?ghH }v }tc_b2|X)@j=( n-q!
%*-H*1"5Nꕾ`?OrDCkX BP.rzpԱl̛1EUj|mhrwln⸺G,nUk-},9Lnuo[UL`bg rF7X1j^_hw^HEuߤ=NLI .{o#G-aNď:ގ*KN H?)!.$g?iv9k
V{1L*_\`!+P:",Rbq ƴ3gjmU9-|C}_ؕ 6C Mtf8hՍAo쩄0 ~tdR f mwj_߭X%9GH`a IH9Wk :v!Z R(>ӖJ. :Op)~pVzw~+]6
z#0 (OƅYAww=up~q;! 0kыv* ]AhvUx9WaWL$Һ>A)bK_ r 4Ԋ
VE^+%.Ou BC $KאD T'
kfN#K:>IF(d,Nb ϱ?=eX u1;wм 2^MѼI6^ᏭD0R+1asny}s wFXe# ;ܕ Vg+2+d]@izȱ4o1:pkQh-aqc&۽Q&ߩSx7D4x^ )Ӱ ,B '|S?t˙A W0(d+02?kߑCbŊR[m" Ӏ.~6-ˁ݇ ܑG$%,~r7MR[*_]O1F߫' ` ɢ91E
"}ܕЏ(|8AqR(X/Me#OƎ20 9`w r@'ݷ}$i#g oCm D#Eѱjf|i|٣(<;
_[q XL 9ߦ/|. sή 8x`nllDHOq
4
#N(_,Z|֒vPPVb[^De}ne]>6x1Cza@up 91!8,zIKLPpհ_ҩ\rSmKCDZU !>&m]Xdž!Q KR)RV:H;??uЂ%װ:5g!',_vr20Z,g2j
JaO]o
WivR˾МR+R 7 >C6 GI,_qtZ8
!Rr-u~ 94 ^f% 3 Q m9]3t6HV ,W(p)>![ *i/?m7 k7dG@g`)J|hJԀH
E?J{ _η6ƥv8ŧV"xGto=Vw0TmE x`iE0{MjU>mCY
u,F|xr㎖,5%,/L&VW +{Mpv]> beZNf"q~o IuV}?*qkCٌ<׳iMb37*rtV1] h(YV}A7
víP'N- &`TLmY,F0 hs*9|XeX \+Q7 LZ?>2~MS⹏H(PoB0}=CslW;ubads&5 `RH,g̘Nyӥ O6Ƃ@r XĔq?y
ak`h2wr]{*^|dm,ع=NIbVNt>[TXĕv~
#
r.0䪲bm .y?+Xy JV 7m&tYK5G3 o"Q> '
<}Duq7=Fḁt+
Ind}mlJ=wu4M*͉[ݣk\[᪤STo洲Ń 'W?
y/ !Hw^̽LY@ bmvu]ajoba l'\^OJdivLs~Lxq$L-@ DerwQ!W 2b.H6jXj sTK, Fjd ʽ4&7%s~v+徹J]ǯߑlD q(IՈ#xdΤj {> .~"mWfUs*NX"&{4E !Έb`OƦB^4 \3jWvѕ[u(~zމ 1
X9H rcrý ŨL 11S}Zn&:b_Ȁ
֥-*85jLW:uk|`;k:
v n_Fpm#L0emVg-At<]\wlmVԛhݫo$
oj0 _(+WT u:v9rJ1.)#o>@_wB_$]1|xe鲔^eYq0хڪﰹ'^Yh䩹{h `/<(UD_pY4n` O @nq;D+.7a
&ֱ`"t=\b2Q\ӱZ:ob|b) #@VÙn ?% -&B/CKp ] L6 铼$H|gP\UDC>ӰqY.Ӭ{c4 A{GSSƬT bz:Ixt"\Čų%N`mD4=!ײ'9|ٸRY-k;dIUC5uiAuougXNt 3;煶}Z,A} ,@
,(JlpC\
Lmhܭ"Ӥ`ߏ-o\!j ]Pʥ{Le@ < =)ZH-ǵy'88Cp3{)UXj݇r sjRUϾ>h#bSGq+lw0\Z] v75?&9QLC:1;-(IʡLʷX*[O$7?ڟS2i(7a" d 0h:g bن l!Zba
VFFblϾ{k0J^r8Xdh ٱ2Hx`j<7qűc' Tvm 4
cՙ7\1 aMp-C 쵫'~8=V+հwݥ:9gMWy X(YP(g>d-A۪a%4{*PF!K2K=?Cq(E/MpE
]ΰ=h\ܑgY0RR{ z^@;9K7F vf9bb0`k JW2/|
I{8,oQ:_̶zfJ-lDdPy9x) q4iUPj !ClYb%v=cлNL&* hmQtLu+:b
MGaeu6i$z_ \i ab7u85/l 3k:9h.^o#Ah-3F"NN<
d=&Y4 &1O 6GW
0?zKX-%ovන®)y?&#
M_.uR ba {촔~Zͧq]ۍBJdQVReW>-}ybjK 4][q<:YR/%-.5BPGMK >$&Ma$55 B%4|]91)dG` M{`+
C1 ArjEwbbutc1lIErg #Xysʼ|
E lwݰݔKhpS !ILB<:^ lk*&GLxun J7kUȓR+#7{E+f5&§zgc=6j8". [jEY7H ᨨ .iz eJYE0h,⩌UtdZn.X]?U<#)TdDx"Ha KA;槙 $I" v_ d2UhjSc #+r#!m7CDV>bo{lgz.2lR{>@k;nU)opJ 8OOkH홰"/!dL3uSnɽ[Ƨgy'rAݡ!ShI%*fo#hNmN Dʩyٟk6NsbȚ`S}8zGTdc]Hد_® 8) :f6<=&鯩A ;~\uqDMak9h.y[B c5S0V<[p!]A]= k
"@NSPw@7M4] hhq4r# +}џY6^6 |lRVL}Z./ U!긮 8آc
N WuѰ4ah !{X6R7h'qp
#-D lju9[̅a.uV! t㼮]W܅lx o*O$p=bmpFyK +ufJsdY1HA" Pj,:j"Th
(#:sM4q֙oDhX0
ݜ z#wx *X!N Q=_
G[= }wǼ8ys!זB?_W r;9^xpbGlQoyrc?.DdZu.6Pe.}`> %'`F' iwscWZH&*37CDgtc~d <)~\Zbvu"U쵲nCL}!v,93qLLbenru~$&b'VBwc K\1ICHzx 'Lf
{@Ə6nYO\E^lE~5XgE{k6&lw{6y_VqxDg> = 'hBPo 5XLB$eO*Q.A'i$i[N'x.+|Yv<_k}חnb2X߇-՟m4.R'pWƴzi"3q}<2_UuI|WpjҺFEֶZ!A=+%_k _/g;ғ4 q_HUYrVHRlBn1\ZE&Cx咵"`)_a}R
p[ 7 ^dgΤ^5Fh5ꭸ\ ]C0̂Rғ{v>)ܾ2ܫtyU<"L kqPs䭘/ϡ|s E% w4<-kvΠjb"gqQvs|I`D xĂw+~ %tnpPƼ;J3
0vC@SđX2TjWNxD*ZG% RbW}_^,A}G*KJpt?/i =W,ELȔ2+$.y3ro;@gs!sSj@X=n: M֦&3
PϹq?w&Ur )o$/Qܵ +/-A8z z+l=fyRKa:x[B:byi"{g#Yđv^{{%ԬLk4VuH'Scs<JlBnn; @e~(
2X%
^:I4 OTԻetq} Eve9ɱh h^*d0RJ=:@:+tƏy }|Ne2EU,,gkҊ!](tQ!dސ<2}{#ŀdxdqֽ>lںg}JkZ L.P3 J$똆ƑNap& *r[W 筏5ݛo
k I'/Yؘ
Qx/{&(S['~m ~=_%tAC\iKxӅ٧w
.w mWA ηniÆc{;O̧ jw`Y
fyD4 J68e aDe?"c.O+/vHӤ -ͳ 8=y@fc,ߟ oz2,=U\ia˱v VQ.F撌 `jyJsGMKZ+4SS/%c`/-k#bq1hOK&..˕
=j&q#N:q٧ص Vr=׆cem}W~]K\6[L-3fOeљ"̚Ks
4k~ MuꐽlA~8j-
DP AՄE!쑛,8˸ /6|(Kz8>ugܶTqVZɒ*WI RtJ m#+E+w5?c,4b 1kFbg rAo&Rw;ԞF
S[݉F/u$5+K"ئ\w 2 H˓zM( l12 aYJe|PWj 0ԔFxb5eyvmT0J;"#'Y@HrCb&R釴Ѱ-gzwyUA~LȒjBx5lf.]$J'q[-w03z2υQWlTgBI"Vi=cu!R@·Ct_D, oi5tt˔d͛"m5ZJ!d;c4_
|,/0vWaփ(U O jVnm6OpD'NNqq07ѿ>liߠiN ^s;2 +"Gɮk) Pl jf _} υcS,b
} qnT1s
SIM.П:$ir
.m[i:ƒ#.DOY[::_ 7K M"O<1iDObVq{_o5 >RZi:;}6 {^VstT :8Tֱ$Xkh٧;ґu9]jeZ}͑8l"]XjG; 4i `*6($Гud3QL8B@[ʇ .loԗ^MUYoW,E7tiTf>d<} W(m
G $Ǘv6f '
]a|h_["5Ev$&
Kl+ gXlN 'ЅMח >G/E3%P oʯw}UZr/"OLFY 3x)
Lax+ani1yhr [rcxE3}n:w Z* 沶oղ0 S:4gtP^."3}P8szQ.,Ա@H/Xeׯ6:uK$D䐤sm:0 4rܧDE8UCMJ qlCޫ 8Ћ.'ܛ e89x8) pшd?ڨ>"ſO
{aIѩ[ r:Haѭ m/f!^a]_1
%,=(Va*GaYW<.P% lw!idF]I 8\4K ='LB<8spu˪o
*6va ԮQH; J E&d[ZԒ n~77 bqٓk\qezd}(BUYڗMv#ÕXqű8jJc c{fVJc|ãsW=F GSsQَGA/a:C =\Y-ʦpsu9L ~ h`)\0ޫE48gneX h.&zԘ%GB'9Q/İLM= h ШICØ$\qbA m$f%Pg9yiKHYH> pE+%i/&ݒ9tP鋽ۥ!36E:1 x|||gg! 4ŗ{X`G@'~ q夹b<4sZMq.b
Fqwx[:WZNQ]! /t QjR43Cxd C#B`0bTC̐N9
yzAP&If5{/fRV+o`AW
k/6xӍ*uڛ%na-
Ҥ;^B;r늏poVl/kx%$X7QDt7 t C2B"j{k2yJQ*S :!\7"wtrot@ `X 'DުV:-ϬA rbQrHa f dZN,^8C6G|NܞR:34,*(? %ъv]z欦kxK7 ^Ѯ$կAP] E,6q $0!n͜kǽ= laFSt uR=:!HPlM3?UPF9
W t4=[6ۈWdQ3=u@ k;UQ;7=~ݪ'iQA [B! ,߁nѝ܈>r!( 3wb */JFtlk ȳ. o=mOgb(L*S,4(n;i1 6ɸ0G@eKwPm_Bh T~Vv kf(UgFd1+yB%yް#C 0--ToIGbB=7un{TIpC6WtX + )r$l[+G0$`QPĄIJ 1o:@ 3A)XG1q+dTSו_Otx8%β.ӯJЈ@)E"y A`K<i,o&!zo1U
)-㦪둻Ri oE3b@Z05 tR hlT~7e@u~"w[ Bc֭YU箣Jx>20lÁMCT|6 B} K ^?Y=
(PP(wR\vY!;@nևLt Re;UsX2lK]5eҜ:5=y)dZVn]Z0 ?)&koX Ȇl~Wm+ۗ[-foWoUf6NU!izZug:ևSBx1=9 X ?kwzj-}h`Uox(`L /Џhtf^2 <Ǧɻvȥp Ҹ$f
5D`3y a~ȃhƞ %XX~ܭxӂZYRը:hGݰx +{:c
]$tn 9GKQ8 mm|l ?!i -^?+oq5"lv[:` w?ܱr'\z\ tiґ z_ f|+
Вز}( с@-O{l9T,9sm/XAVrLqٓ
#|?B/c\RʥP%ZF8,rOt074pi)i@תg.
b: ʕqM/(4ʌ7)|H|vvWWs _ kBoDZ , _Fs9DG]p´27070"y@l_C XQWfם5.]% yF>'TT 6CpRퟄ3k*'$TXlneH5B5-Yb3;͈.!&ȷԴfw6X,.i,bT_ [/3$wM; 3
ܓTeA7jдǧx ܉ ?Eb^[CS.
@b">s4xf ],Ztq(!QfEҝ]1$kF*|G$b xiePZ&35 ػgxIl%MRᜅ
*"]%^gv} sJK4kgS@Ա1po/} vdנ`%[ 7R,\&(TIXz~ l>Ĝ7֫_ˏ Uzd>m~E i"SwEET^^i@0i%+FCWc5XR6 Уaڼ(U vA؊jn_j6< ;6 R{ǒ^$k:Fl %#G-N:S*o༬5 çXa25>5wK#;x&#\ s{ߨzreۓ/ӡ|pw}g~H&}xAIMFGjݑߖWwtl'͘*ѱ?N.6D梴YYܑ K*xgNIm_hj(u N27( ᇿ_ áx 5DR1'8DΈZ pSXOkd\ ˽#}zT.^{f0'K!D?d ͱ]_ygVՔQumD%AȖ[U`9'k-z
OuY 3Zm҉rfE< k6iCx?vr*5C5}6
!3JhY|x vuVW&,
|aGc,uي
D^חmr2Y|TT:STrNZB̉>|I 2i%θb9?Y Fdxg !-'#T\q=m6aυhw쮷9
v.BƠݘRe~I`S e{_ں;BkBs]5Ǻ D2 H.^1)]Z{2C-J[u1１oPYkW¿3djZ()ɀwoC;>yQ쪑z0n;g
my0b5'jL1Zq5R" <\l^pLyט9>tqޠSueB]Q&hZ%qދ ٦-,.gԶ ̓\%8G{HG
\
iS}]K$ ~1tʚ& *؞w9kNY( [7؞\:k/ǣ ބ+1ԕ}>'̩7t k d8 }@M?2wm+#>B?L>eJ<z&+22Jhr>E+R%iȚ,; IWcbaoCZ4R{C WJ@f@{OP|oOVu :ckTϾM(,9%2Ӊ=U~b>b"KނVa@YE=C LFxq̼ /GAcm\^{2ypJY0
Սl߫@}qܳ y E0(γɔYJ)M)8߹|v zF=f3n{V@Ht
KCnDc #ѵ1'L
vDl (+ W.Uen4=#"N\G͆WМ#rO(sF;/ ^iP'֠b0فɲi (2G$~J*dC *I `#1i%ۛ5p1aNFoHP O3I)Uln& Mc曩 _%!Nd -$ kB!$' ;.{ghSSCg 52FhP fAȢ<4 ܁?r$0o4زZgYwК 5 h{9IڠEWd ,W
Jx[H2!$qh.%.ͼSC&su@v,]ɢ vPS#yFWJa-)([*;soxU#kX%+%bJF(PO2 TC8`c|1Hԗ/Z`T& Ç F 1wT /G,".w}Jv5*@p)*uf$wR1<
HU)()zFN*S)'kwJ mK<ĭ RAnmOϘ'厹L\&'{&! Cu w=k$8=Ļ!q{!8SGWyL',`=h
blD~SY#YclrZ:ňgQ
\˄?;ħb)S@l7J˂م6di/
o/K' vkۥ Jq|VeWhWxKP2WgJ Bhi:A9,=yV=[UC, ?QWPRX_.ǎc3ݍn´ u+J^"{W>*/&:1W.2G6uPO_rx\͊?
hwn{f~cKX ،㔶V \9yFhL}F iNῇ>@fߙm5ؖ0)V+iuclg啦P̧uDsȣ+O
{;M< $*.(N672!Α֝xLA!,tRM OU` GΡΌi9k+PqX[H24qlgn uFL@erwʦfmS~R84 " 1E`;UқJz U"Cr7cROW2.&vusQ /q<+F$Q;] C5\F{=Dx6 ~Murhtd9
5/1}G,2 `@BF1m 7w\0_]D/ }3^4Fx2H*cyP :m;KKE
$OįDK-Rj]Ćȹ~@:8m"mb ,)as||}h Z" ϔ rݫh8L3l AJe`"]Mqj Sf9\x2ħ,+~@̅lv$ 4^^PU [ r r a яMpx!"5lP?u\Ռt.BF?|j ?} >!6Zo4xmw(&LRF:!~$ư A0If/#AU Eʾ.Mi?BS
gWQOl3&YXa*Y m_Nc֍#CYSKN!䒣Lc6D_}#XCհ#.F JܱG4Ѓ0=fgFXCVR=y_ ]4ZZ'D ?c&T#v_7v'7؊n 6,ͶfK
W]c4;=pzR 'ebr$zõp'% u7$}!Z Ivڨn'KљLA yѪBF
J0Xx˟K3 .~bޤ9>f IңhGpV=\4sCGEm 측9S?3mr$p dV4`tᶡSK l7ӷz'0U%GT=36hn>ۓ%DO0[Eڂn-hTY5ĬqG&8),S 1ټ&J'ÔL;yE E,2ns J]IeT] e
|V
Pywplm^i u m I78: 5Sbo,ri8Y# Z XB6d3P_@bLkI<:jDyU5xiJ|C!4YqyrB!SN:O@@0 I N*0+WmL хZF2 1w
YZ