dnsmasq-2.78-lp151.5.6.1<>,T`/=„+;:g|Ov6)/ cOgDNxS\D[OJp+H4c YWw bXuo>#8HW?ݰꋆ}%iy|d)oto$8֨83%\V*H{I3@qvDsŸ n#)uǠw,ԅy!Ͱb(Rٞ ">[h\239-hp_̎®F?td   X\`pt  H`` ` H` ` +` ,P`-`/`11`343h35(6386<96:8y=l>l?l@lFlGl`Hn@`Io`Xp8YpH\p|`]q`^v,b|c}d~1e~6f~9l~;u~P`vw`x``y z$(.pCdnsmasq2.78lp151.5.6.1Lightweight, Easy-to-Configure DNS Forwarder and DHCP ServerDnsmasq is a lightweight, easy-to-configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines that are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with DHCP-allocated addresses to appear in DNS with names configured either in each host or in a central configuration file. Dnsmasq supports static and dynamic DHCP leases and BOOTP for network booting of diskless machines.`obs-power8-02f openSUSE Leap 15.1openSUSEGPL-2.0-only OR GPL-3.0-onlyhttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttp://www.thekelleys.org.uk/dnsmasq/linuxppc64leif ! /usr/bin/getent group tftp >/dev/null; then /usr/sbin/groupadd -r tftp 2>/dev/null || : fi if ! /usr/bin/getent passwd tftp >/dev/null; then /usr/sbin/useradd -c "TFTP account" -d /srv/tftpboot -G tftp -g tftp \ -r -s /bin/false tftp 2>/dev/null || : fi if ! /usr/bin/getent passwd dnsmasq >/dev/null; then /usr/sbin/useradd -r -d /var/lib/empty -s /bin/false -c "dnsmasq" -g nogroup -G tftp dnsmasq || : fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then # disable migration if initial install under systemd for service in dnsmasq.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in dnsmasq.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service fi if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : fi done fi fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then /usr/bin/systemctl preset dnsmasq.service || : else for service in dnsmasq.service ; do if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm -f /run/systemd/rpm/needs-preset/$service fi sysv_service=${service%.*} if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi fi # reload dbus after install or upgrade to apply new policies if [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl reload dbus.service 2>/dev/null || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable dnsmasq.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop dnsmasq.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in dnsmasq.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart dnsmasq.service ) || : fi fi # reload dbus after uninstall, our policies are gone again if [ ${FIRST_ARG:-$1} -eq 0 -a -z "${TRANSACTIONAL_UPDATE}" \ -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl reload dbus.service 2>/dev/null || : fihSEf`PVks <-fEwlAlS& W3Xd Z=l ?^ P# hS'.FWKÕd921"3aA큤A큤A큤A큤AA큤A큤A큤A큤A큤큤AA큤A큤AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤`````````````Y;Y;`Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;`Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;`Y;`Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;Y;`Y;Y;`Y;Y;`````````````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-2.78-lp151.5.6.1.src.rpmconfig(dnsmasq)dns_daemondnsmasqdnsmasq(ppc-64)   @@@@@@@@@@@@@    /bin/mkdir/bin/sh/bin/sh/bin/sh/bin/sh/usr/sbin/useraddconfig(dnsmasq)group(nogroup)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libgmp.so.10()(64bit)libhogweed.so.4()(64bit)libhogweed.so.4(HOGWEED_4)(64bit)libidn.so.11()(64bit)libidn.so.11(LIBIDN_1.0)(64bit)liblua5.3.so.5()(64bit)libnetfilter_conntrack.so.3()(64bit)libnettle.so.6()(64bit)libnettle.so.6(NETTLE_6)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.78-lp151.5.6.13.0.4-14.6.0-14.0-15.2-14.14.1`2@_ܙ]@[@[[LZ%8Z!D@Y*@Y@YXlWWbV@U@UUa@U4@T@TB@T@TT_W@Reinhard Max Reinhard Max Reinhard Max cgoll@suse.comdmueller@suse.comkukuk@suse.deidonmez@suse.comcbosdonnat@suse.commax@suse.comtchvatal@suse.comdmueller@suse.commartin.wilck@suse.commax@suse.commax@suse.commpluskal@suse.comstefan.bruens@rwth-aachen.destefan.bruens@rwth-aachen.decrrodriguez@opensuse.orgabergmann@suse.comjslaby@suse.comdimstar@opensuse.orgnemysis@gmx.chnemysis@gmx.chseife+obs@b1-systems.com- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch) - CVE-2020-25684, CVE-2020-25685, CVE-2020-25686: Fixed multiple Cache Poisoning attacks. - CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687: Fixed multiple potential Heap-based overflows when DNSSEC is enabled.- Retry query to other servers on receipt of SERVFAIL rcode (bsc#1176076, dnsmasq-servfail.patch)- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch: memory leak in the create_helper() function in /src/helper.c - bsc#1156543: include linux/sockios.h to get SIOCGSTAMP (dnsmasq-siocgstamp.patch). - bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch). - bsc#1152539: include config files from /etc/dnsmasq.d/*.conf . - bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch: A vulnerability in DNSSEC implementation of Dnsmasq was found. Processing of wildcard synthesized NSEC records may result in improper validation for non-existance in some implementations of DNSSEC. While synthesis of NSEC records is allowed by RFC4592, the synthesized owner names should not be used in the NSEC processing. - Package contrib/lease-tools/dhcp_release6.- enabled lua scripting interface (FATE#327143).- add missing prereq on the group to be created (bsc#1106446)- Don't require systemd explicit, fix spec file to handle both cases correct. In containers we don't have systemd. - Adjust pre/post install for transactional updates. - Use %license instead of %doc [bsc#1082318]- Update keyring- Get rid of python dependency due to examples. (fate#323526)- Security update to version 2.78: * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow. * bsc#1060355, CVE-2017-14492: heap based overflow. * bsc#1060360, CVE-2017-14493: stack based overflow. * bsc#1060361, CVE-2017-14494: DHCP - info leak. * bsc#1060362, CVE-2017-14495: DNS - OOM DoS. * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow. * Fix DHCP relaying, broken in 2.76 and 2.77. * For other changes, see http://www.thekelleys.org.uk/dnsmasq/CHANGELOG - Obsoleted patches: * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch * Handle-binding-upstream-servers-to-an-interface.patch- Fix /srv/tftpboot permissions wrt bsc#940608- reload system dbus to pick up policy change on install (bsc#1054429)- Handle binding upstream servers to an interface if interface is destroyed and recreated (boo#1018160) Added two patches from upstream: * added Handle-binding-upstream-servers-to-an-interface.patch * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch- Update to 2.76: * Include 0.0.0.0/8 in DNS rebind checks. * Enhance --add-subnet to allow arbitrary subnet addresses. * Respect the --no-resolv flag in inotify code. Fixes bug which caused dnsmasq to fail to start if a resolv-file was a dangling symbolic link, even of --no-resolv set. * Fix crash when an A or AAAA record is defined locally, in a hosts file, and an upstream server sends a reply that the same name is empty (CVE-2015-8899, bsc#983273). * Fix failure to correctly calculate cache-size when reading a hosts-file fails. * Fix wrong answer to simple name query when --domain-needed set, but no upstream servers configured. * Return REFUSED when running out of forwarding table slots, not SERVFAIL. * Add --max-port configuration. * Add --script-arp and two new functions for the dhcp-script. * Extend --add-mac to allow a new encoding of the MAC address as base64, by configurting --add-mac=base64 * Add --add-cpe-id option. * Don't crash with divide-by-zero if an IPv6 dhcp-range is declared as a whole /64. (ie xx::0 to xx::ffff:ffff:ffff:ffff) * Add support for a TTL parameter in --host-record and --cname. * Add --dhcp-ttl option. * Add --tftp-mtu option. * Check return-code of inet_pton() when parsing dhcp-option. * Fix wrong value for EDNS UDP packet size when using - -servers-file to define upstream DNS servers. * Add dhcp_release6 to contrib/lease-tools.- dnsmasq-groups.patch: Initialize the supplementary groups of the dnsmasq user (bsc#859298).- Add gpg signature- spec file cleanup, get rid of redifinition warnings- Update to 2.75, announce message: Fix reversion on 2.74 which caused 100% CPU use when a dhcp-script is configured. Thanks to Adrian Davey for reporting the bug and testing the fix. - Update to 2.74, announce message: Fix reversion in 2.73 where --conf-file would attempt to read the default file, rather than no file. Fix inotify code to handle dangling symlinks better and not SEGV in some circumstances. DNSSEC fix. In the case of a signed CNAME generated by a wildcard which pointed to an unsigned domain, the wrong status would be logged, and some necessary checks omitted. - Update to 2.73, announce message: Fix crash at startup when an empty suffix is supplied to - -conf-dir, also trivial memory leak. Thanks to Tomas Hozza for spotting this. Remove floor of 4096 on advertised EDNS0 packet size when DNSSEC in use, the original rationale for this has long gone. Thanks to Anders Kaseorg for spotting this. Use inotify for checking on updates to /etc/resolv.conf and friends under Linux. This fixes race conditions when the files are updated rapidly and saves CPU by noy polling. To build a binary that runs on old Linux kernels without inotify, use make COPTS=-DNO_INOTIFY Fix breakage of --domain=,,local - only reverse queries were intercepted. THis appears to have been broken since 2.69. Thanks to Josh Stone for finding the bug. Eliminate IPv6 privacy addresses and deprecated addresses from the answers given by --interface-name. Note that reverse queries (ie looking for names, given addresses) are not affected. Thanks to Michael Gorbach for the suggestion. Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids for the bug report. Add --ignore-address option. Ignore replies to A-record queries which include the specified address. No error is generated, dnsmasq simply continues to listen for another reply. This is useful to defeat blocking strategies which rely on quickly supplying a forged answer to a DNS request for certain domains, before the correct answer can arrive. Thanks to Glen Huang for the patch. Revisit the part of DNSSEC validation which determines if an unsigned answer is legit, or is in some part of the DNS tree which should be signed. Dnsmasq now works from the DNS root downward looking for the limit of signed delegations, rather than working bottom up. This is both more correct, and less likely to trip over broken nameservers in the unsigned parts of the DNS tree which don't respond well to DNSSEC queries. Add --log-queries=extra option, which makes logs easier to search automatically. Add --min-cache-ttl option. I've resisted this for a long time, on the grounds that disbelieving TTLs is never a good idea, but I've been persuaded that there are sometimes reasons to do it. (Step forward, GFW). To avoid misuse, there's a hard limit on the TTL floor of one hour. Thansk to RinSatsuki for the patch. Cope with multiple interfaces with the same link-local address. (IPv6 addresses are scoped, so this is allowed.) Thanks to Cory Benfield for help with this. Add --dhcp-hostsdir. This allows addition of new host configurations to a running dnsmasq instance much more cheaply than having dnsmasq re-read all its existing configuration each time. Don't reply to DHCPv6 SOLICIT messages if we're not configured to do stateful DHCPv6. Thanks to Win King Wan for the patch. Fix broken DNSSEC validation of ECDSA signatures. Add --dnssec-timestamp option, which provides an automatic way to detect when the system time becomes valid after boot on systems without an RTC, whilst allowing DNS queries before the clock is valid so that NTP can run. Thanks to Kevin Darbyshire-Bryant for developing this idea. Add --tftp-no-fail option. Thanks to Stefan Tomanek for the patch. Fix crash caused by looking up servers.bind, CHAOS text record, when more than about five --servers= lines are in the dnsmasq config. This causes memory corruption which causes a crash later. Thanks to Matt Coddington for sterling work chasing this down. Fix crash on receipt of certain malformed DNS requests. Thanks to Nick Sampanis for spotting the problem. Note that this is could allow the dnsmasq process's memory to be read by an attacker under certain circumstances, so it has a CVE, CVE-2015-3294 Fix crash in authoritative DNS code, if a .arpa zone is declared as authoritative, and then a PTR query which is not to be treated as authoritative arrived. Normally, directly declaring .arpa zone as authoritative is not done, so this crash wouldn't be seen. Instead the relevant .arpa zone should be specified as a subnet in the auth-zone declaration. Thanks to Johnny S. Lee for the bugreport and initial patch. Fix authoritative DNS code to correctly reply to NS and SOA queries for .arpa zones for which we are declared authoritative by means of a subnet in auth-zone. Previously we provided correct answers to PTR queries in such zones (including NS and SOA) but not direct NS and SOA queries. Thanks to Johnny S. Lee for pointing out the problem. Fix logging of DHCPREPLY which should be suppressed by quiet-dhcp6. Thanks to J. Pablo Abonia for spotting the problem. Try and handle net connections with broken fragmentation that lose large UDP packets. If a server times out, reduce the maximum UDP packet size field in the EDNS0 header to 1280 bytes. If it then answers, make that change permanent. Check IPv4-mapped IPv6 addresses when --stop-rebind is active. Thanks to Jordan Milne for spotting this. Allow DHCPv4 options T1 and T2 to be set using --dhcp-option. Thanks to Kevin Benton for patches and work on this. Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses in the correct subnet, even of not in dynamic address allocation range. Thanks to Steve Hirsch for spotting the problem. Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks to Nicolas Cavallari for the patch. Allow configuration of router advertisements without the "on-link" bit set. Thanks to Neil Jerram for the patch. Extend --bridge-interface to DHCPv6 and router advertisements. Thanks to Neil Jerram for the patch.- dnsmasq.service: Order Before=nss-lookup.target and Wants=nss-lookup.target as this service may provide name resolution even for the localhost.- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform. (bnc#908137)- The change from Wed Dec 24 messed group w/ user IDs. Switch them back and be more careful w/ what is changed.- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling symlink lint warning (and remove the same from rpmlintrc).- Remove from spec group_and_isc.patch, forgotten in previous commit- Update to 2.72, announce message: Add ra-advrouter mode, for RFC-3775 mobile IPv6 support. Add support for "ipsets" in *BSD, using pf. Thanks to Sven Falempim for the patch. Fix race condition which could lock up dnsmasq when an interface goes down and up rapidly. Thanks to Conrad Kostecki for helping to chase this down. Add DBus methods SetFilterWin2KOption and SetBogusPrivOption Thanks to the Smoothwall project for the patch. Fix failure to build against Nettle-3.0. Thanks to Steven Barth for spotting this and finding the fix. When assigning existing DHCP leases to intefaces by comparing networks, handle the case that two or more interfaces have the same network part, but different prefix lengths (favour the longer prefix length.) Thanks to Lung-Pin Chang for the patch. Add a mode which detects and removes DNS forwarding loops, ie a query sent to an upstream server returns as a new query to dnsmasq, and would therefore be forwarded again, resulting in a query which loops many times before being dropped. Upstream servers which loop back are disabled and this event is logged. Thanks to Smoothwall for their sponsorship of this feature. Extend --conf-dir to allow filtering of files. So - -conf-dir=/etc/dnsmasq.d,\*.conf will load all the files in /etc/dnsmasq.d which end in .conf Fix bug when resulted in NXDOMAIN answers instead of NODATA in some circumstances. Fix bug which caused dnsmasq to become unresponsive if it failed to send packets due to a network interface disappearing. Thanks to Niels Peen for spotting this. Fix problem with --local-service option on big-endian platforms Thanks to Richard Genoud for the patch. - Add dnsmasq-rpmlintrc, for false positive scripts and symlink - Add BuildRequires for dos2unix - Use sed instead of simple patch group_and_isc.patch- fix logging, PrivateDevices=yes kills it (bnc#902511, bnc#904537)/bin/sh/bin/sh/bin/sh/bin/shobs-power8-02 1611061491  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`deesfifriditnbplptroesfr2.78-lp151.5.6.12.78-lp151.5.6.12.78-lp151.5.6.1                 !"#$%&'()*+dnsmasq.confdnsmasq.confdnsmasq.dtrust-anchors.confslp.reg.ddnsmasq.regdnsmasq-dhcpdnsmasq-dnstftpbootdnsmasq.servicednsmasqrcdnsmasqdnsmasqCHANGELOGFAQcontribCPE-WANREADMEconntrackREADMEdbus-testdbus-test.pydns-locREADMEdnsmasq2-loc-rfc1876.patchdnslistdhcp.cssdnslist.pldnslist.tt2dynamic-dnsmasqdynamic-dnsmasq.pllease-accessREADMElease.access.patchlease-toolsMakefiledhcp_lease_time.1dhcp_lease_time.cdhcp_release.1dhcp_release.cdhcp_release6.1dhcp_release6.cmactablemacscriptopenvpnREADMEdhclient-enter-hooksdnsmasq.patchport-forwarddnsmasq-portforwardportforwardreverse-dnsREADMEreverse_replace.shstatic-arpstatic-arpsystemdREADMEdbus_activationdnsmasq.servicetry-all-nsREADMEREADME-2.47README-2.78dnsmasq-2.35-try-all-ns.patchdnsmasq-2.47_no_nxdomain_until_end.patchdnsmasq-2.68-try-all-nsdnsmasq-2.78xx-try-all-ns.patchwebminREADMEdnsmasq.wbmwrtREADMElease_update.shdbusDBus-interfacednsmasq.confdnsmasq.conf.exampledoc.htmlsetup.htmldnsmasqCOPYINGCOPYING-v3dnsmasq.modnsmasq.modnsmasq.modnsmasq.modnsmasq.modnsmasq.modnsmasq.modnsmasq.modnsmasq.modnsmasq.modnsmasq.8.gzdnsmasq.8.gzdnsmasq.8.gz/etc/dbus-1/system.d//etc//etc/dnsmasq.d//etc/slp.reg.d//etc/sysconfig/SuSEfirewall2.d/services//srv//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/dnsmasq//usr/share/doc/packages/dnsmasq/contrib//usr/share/doc/packages/dnsmasq/contrib/CPE-WAN//usr/share/doc/packages/dnsmasq/contrib/conntrack//usr/share/doc/packages/dnsmasq/contrib/dbus-test//usr/share/doc/packages/dnsmasq/contrib/dns-loc//usr/share/doc/packages/dnsmasq/contrib/dnslist//usr/share/doc/packages/dnsmasq/contrib/dynamic-dnsmasq//usr/share/doc/packages/dnsmasq/contrib/lease-access//usr/share/doc/packages/dnsmasq/contrib/lease-tools//usr/share/doc/packages/dnsmasq/contrib/mactable//usr/share/doc/packages/dnsmasq/contrib/openvpn//usr/share/doc/packages/dnsmasq/contrib/port-forward//usr/share/doc/packages/dnsmasq/contrib/reverse-dns//usr/share/doc/packages/dnsmasq/contrib/static-arp//usr/share/doc/packages/dnsmasq/contrib/systemd//usr/share/doc/packages/dnsmasq/contrib/try-all-ns//usr/share/doc/packages/dnsmasq/contrib/webmin//usr/share/doc/packages/dnsmasq/contrib/wrt//usr/share/doc/packages/dnsmasq/dbus//usr/share/licenses//usr/share/licenses/dnsmasq//usr/share/locale/de/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/fi/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/nb/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ro/LC_MESSAGES//usr/share/man/es/man8//usr/share/man/fr/man8//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:15574/openSUSE_Leap_15.1_Update_ports/cec53c85961b4600e49ef0a0837d2a94-dnsmasq.openSUSE_Leap_15.1_Updatedrpmxz5ppc64le-suse-linux      exported SGML document, ASCII textASCII textdirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=f8918a1f3b318ad10d1dac23b0fd65828a3c313e, for GNU/Linux 3.10.0, strippedUTF-8 Unicode textPython script, ASCII text executableunified diff output, ASCII textPerl script text executableHTML document, ASCII textmakefile script, ASCII texttroff or preprocessor input, ASCII textC source, ASCII textBourne-Again shell script, ASCII text executableASCII text, with CRLF line terminatorsa /bin/ash script, ASCII text executablePOSIX shell script, ASCII text executablePOSIX tar archive (GNU)HTML document, UTF-8 Unicode texttroff or preprocessor input, ISO-8859 text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) RRRR R R RRRRR R RvA蜧! utf-8bbf3f0f5396d969be96c81e66a35b68e7c8c50168bc46b9aa7009b542ad66105?7zXZ !t/V]"k%n5ӿ8`Qgr~?Ƞ2W@rSc]X5`i9X^Ks"2L*LxaH-Gↂ鈹AƁu43S6r[Oі-N͏҉I̶ +{E( GzPw';l> =?o΄30,:T㝌Ҳ ϿKV6'!xJ |1?}C8&prw4c0^-`garh.;І56ruL~RH#!!*FaQ 9jN W梉,*shJ:{-Q&HNN$یE6vkcqa5h 7ITA!r0TG8szTb8G=:9$nH-P(P$ej-mhtJ}$ {sJ=wI#Rpje"o&ȩu"V^ʧn0PM|8ՊOmY6ka)D&EJz dym@ܺNnvf-֖p@&{tV)[jpu! 4X%T2vm=aO45İVq՞&Qiuj(4kFZJ~$:% MZi  'AHrX?MC8\>j{Mo2 1.(Y|T'^qyݡ[&ܚ@JeB1X>x7[ 'RUi9!b%!B8kC*BE@0O}ƚ3Ds9RBA`QF&;:XnǴǛ$Z.Lc.N+bϑY;&QTMޭG; Ȕ$""_ݿ<@X 9PR:-+ *HOKP#s=zwUH7xA>4P⯒!1ʲI;kI}16h ۝5NJgt'5ıeնBB 3Be|АUn'N甸wcgp.<ɏ%"Q,L ! BO ӺbM.cdJeOsrZUFP5][R~e~j|F":Th6 xIn3r8n@?3S8_]jvft&n5^|ؿCtԹ&&vD9D|k;-FkEVaU9zi<G(#b *QH3Yv( 62Vl7&tS6JԚ5hhl):>|Q*>Lι-x}=ho .yI>n9AXPS(jְEIfdعv=砆;a]j[{Tr pş I"* 3yѡHz6˱,6| E]" mz60;D"67l,ᬔ5 ҹZ]f,w'6޼|?ba-I4ގJIwbnƁ u)!Z22-3/m'HjNM) 2̨'[Gpa}Ļ$!yOOV&`rb.pdݭ8d7H%i{Sp!}_OC<~QaQ(OVITSWc emJs2=fqQin3ftNz{PS7Maq͠'8!fl]f/ B f>~OW u?+ׁ3Dj4'1x߽41+0PlMɪyXrPIKc x(&tKGi-յxaפaV) o|s;)h׀U * qJȪ~%'afpK XrZ[/0,"`$Jj_Q*Dg`e8A/3OSzr`8dB%%d" #寕c‚vb npiTqLIF,gKw!6~:RGt%tO(3!p*``'nI} kղ'$Df9ŠdM%%erePޢ>}d[*a=2JԗXx:h^Z/nḃ?=g"$ʝpA6<*McQ* ~tG4oԀT!Qp^*&S~ZUⷉ (DI0^<?c7\㠏՚Y^ڋzQJ f 3REg@Ȁk㖴'|ضl:>Dz} #j^t48W c&xy}Z+AMAx<>;%Y#su'јcuXIaVY>y u=E"Q;T7 lǖ>aӆ,$A:/IfVIMeS? 5/]R6"~8gOtj_O!*X6Z6ywjVzN=Xh~b|p ӨЁ%2< Vd],Oic|ҡ{Gd[{P#8y{%1uV:52\×,`0HN(Wj"_d+۷yVΟHO&yE\*3J8tħcHǁ"H'wX赅AIMTJVvwpSP^/{!\ZΎ2aRĹ/o O!w{ pҜt5rZBK gre{X?o'8(Y&vtbSΎڍx^4?Oo/4N=uK<M'Wkk11qժ7uOg6lbT$}L|gE9#Hs"HLpe"Pp9 A$Zy*8;PJ9TG-Ú9d8-7wXb>:a81|h;<>H/90 ?}-! hFԄeN)OR46)aA- bcu'q5xNPEű<1$rDcȅ$7U>`1#tL tO%*x`$0aKܺmetIj9aG2v3צ:JTʬFmƧ85GTȥ?|+l~|:TYALkA2B9&w{Gq2 0bF =]ym= s8v0dhgWb#)d> }9FwIn;J S﬈NUgbiAb,cc?-& ^]m*:bQ>O)J@2"JاM=9nb_[}]@W:8-$vk'WwğeGbB[3?4{i[:DqȄ#Y~|CuJ @0aޡs\&i(\a8]W Yy]Zañ M}'h JV/W7q8q+6&ɕu _-ǭl)ɯ;-&$MZj#$VH3glmbe<^]ilEj$ BhHYsӧlIgv^'Zo y@ĜS鍅xU75kP2bD0kg+ʼr|+vdL)uMnJ`*$G٭5~(%>4> b@S$+xVlja&{|&u6<' w~;uթy Y&n@. ¢HFbʀ?L|96+]+ 2FP(GND+==e#v# 9ǨvM#}̼]7C5tsI5]c|:Lݥj{UOh{9Ђ!+9Ӧ]YY$ >GcׁOaHܬ:Ϟe}l~8@b>snuдn7J|{I h{Phv(Ku2DtȮd P\LZp^D  -j˲h6-qm " "'Pv^G./-fɑ XomT0-fr 1 -H,J﵎ر7%ǰ۰D;BTg!\>6F]rx /4>04hq.ng:Cb&KTqm %{sYz~iM.uX}vt|āvے"hQV0bqD=䠟Gcy};UGȯ-:`Q7lgW;]~ŇU~,?R  69-ncIv1Q܀_e1[,syaML,Je6WT,v;;};03_A)}&+:!Q) 3eO=y\'/ /H.CݨBly@~ڻ4G,bDoc`=&3#A-Al^_+ $YQ!2ud^R#JMVD]hGKb}>t@)JLUM,pnμ~H7%NF%2C/yе ﰅ= nxr mxXMxMV0 7%Zy!.`ںƊB5ŋyw :&l_ r"k+_`0MXβZn(JBQ'7+?C: O2B~΁1Nt0<s=\;|ՆB# "ԯzw&Ch0]5NN"e>b;#gCEt&C{&ᣒVAmCoW ˫(=:{9K.r:r:tci^!:4t'y)lVVZ1ӓ)Ce1<H[!m C8'ኔP=w!*Iko5Οǜs8=22 HXߓ9(4r /dfΞel_{>g e'Rnt^d7;m'uD;th$\ۄYmmVZ\acǮxn6GAgv pRxW<R?dz>K.7bw뛄f{;:cʙԊJG*o`ls33aچ]츰rubL)C1ABq>Yv~^;E c CeP)D֑rC!x(iX, /W2Ȩ7jwĄmag\G\GDFÂ},#I Ԅ[-@ό԰am+Xbxnۘq3VT\~@Y  % tle7ЈagU< W;!}a" 3]B@.SZFŶ$~3)e|,,-AyTS8dBHK'a.I}攠 xDttl߮| B}韞x(w,BU Ut.h{jTJ2 lϨqN-V+km7WLt?'-h@G-AvAQay!IiZwfqoSߕr>estrz&Fyvl=1Ո>ƦB_sEqO ]Ȟ_MB?BuՋ)% uP4P΢x&ݝyr1bkgi-Ȕo*rN '.t'6t:%]s@@nL0JyjLD'[/KfʱۇBo`^DͲ*Ǥ#愯#~Q~;Ko[ 16R8sHdF&{ =C>}Pi7v`4eX8SHjbR;OFD7rIu.3 IzSOiU1:>l)UnB\V?F>(jzI1|7ݿ458-N;RۼU^D[{}5!ؐeY^m4{< JA;L2LL #H<}ó;e Q/7<:QZ/T+M9^f}ŝJzjr9G7+NDlYV! UDj) م"r ?pr_E١KztI'>o\$ Q!FИ`ǩ@qi_">Zɢr ]hQGo4sݧ=M \to6x$";Gڅ'Nֱ9 3Wo՟x]+t{M=YDX!o'V"iQ>[X1^4#7E0չAͲՃw{ܽ 3M,&IO.ViL7jWNZ_я$;RXj46X8IBCBC [-G2S0<[Q@hKYۉL%Lĥy%D?inRP6л#jSlnܻs!xKwL#?F8HBbD'ùu\ݛ?)z|eVw2$A%$4 Vxqn'%;JpAw|P=eg}˲Z;Cy_Ti+ u1 TptK?bUPb}Hԏ֍-E3hP8./e) D05x"{nCVy+BP_li)T4Ϗb;49n e GM>IX20Aו Ymn/^RucVpd]wj&Ѱ8 3q!m\:aP8>|_[hd7"B4 bjχI"FַtnZS)ЦyqqE6ɋ&^ #/Y);qN(tx btYKLCw!UC+vxcrO ץyļwPY7-,֡Aw) Xֈ) E13E+fLwEH3 !cmLa0sBҷ`kQ%I\/J!v"M.Eڅ`r\ ^4u\͏}KF'.R&e35b]R`- s [jRzh/ gzY$^e9HQ G?H2!R:֙nS*G~uTq]9V>_F9'ɮNj`?ttp˗I,ӄlcS ĕ B8.p{d|m,h3,5MۂPv #Rs $kuȏwvӅA):Pkܡm)N+Jx_rffo[r(3eVd2¿"ݬqd=T{4ޘڎ'Z ֞ "(8$۲ql,Qԑ9|X_ە<|_!BމDEWl/I:Mջ7yuL\&skm}O=V*%&^u l)EIFgI~fKIe B{gί;9D5 X5OT6U<&cefn5&ӠEou~+ށTcuoo55>7AUwf m U< ;jԗ!ɤqk-<[$]C:غ\%תϦ+D=;EnkϿ"*LnE^L&?8PWTuW@BBU79aWq&#O*,0%p,~Gi(ިm--URY[Lw\z1*$=G\{@aKG *k5۷tFFUBl0ڽr-UF.r68Xns7W6?Q~{huSS+^f3(aDGY,!}?o&ئd.ɴEWQW Ug:J0F7T:$?7#UD `o=ʬ3VWX'y8DI}a4nR9J1xFT_=ذf1o<q|d&g`^ƥI*mG5L :$Y*@tx2"epśN͌!x- b9 @V E] kS[5Ch0sd:'v`^c 41J,((t~n dR.n@L܅@)0NY|t^piH«)FĨҏ0,׬ndJ"8١/ax3S9m/zկ|'LMK3ޤhr^VaҮ#!]qW |5wEI&SGyNʨroM2'1Nva ɭXKkW!9/m^R _qֹ[dI Ν3/ƞ~FK^G˴z$' 3>W!~_Q\sM,Ԙ`B} ˮKK,!=%\T\o.} ޡ&Z'V"IyA)UUHf~Uє !ۋX )YNyz]]')34p`N nfN,w1y1|&݄Jc`0Bڢ@vrť3R$x&v 7j޹k\H1! m8zn~1F)0z}eDT{`T0aܮF58oo% ĺ_z5iZ2*v86PU(#c,~un`, eI@ @9r"}_fƋYfL}˟ nNN} {tWJ ~9.}l>C.Tm6P1 B@% +Ko*n* SxN*8)#TP }x8,b-Ie!N.CxIeosP~Gs0O4M߿M_GF۷!#-!_͖/әxOCDF #u9H f5:֏ jʦݡw Z@b EY~#N~5 2E`P/#+?(eytA9/,r]+>J >(v"*K˝Y`JG]Z6ʎ3 o±džQ77O^[$p]%=L?zMBe,? =1e m`.u{"J@:kׂwb p@u3Qc;up{a"ERxq[}x,L"[/! ` X: oّO2!@7An<'q盍gfP9$D @y&v`)o"cDLDCi.HiO g8%_mk>-;VѼM!LvkTYLI.VT\mϙs\$wym0b#=e+0F={)+a~? {KE]b7P qn42RpΜ<a鱲"=9l"ႈxA)`WKQ n}+&"ȩv%ONI- 13:3ou NZPyu1\19eE6x4Sl"7 Hb dQIcJqtvvwQXi#bJxcǩR\pmEA };n&;t!V%uF+ 462觽 q$[iG37x~7+[TПC2k429Nm7LNThoV`e6~WY;[GrZs*͛\@!'XnX$bL* o0i{Gq8msC-B 9%AAEMjgy?~Mvluߩh,^.w #*bhڛgpbˉ;og?L)Z\3Aj+& iĂ(L1BJ"aˏt@$?pNh)TFm2|UĬ% V#]ƻ~IF6"wu:QĀ}ke tP5h/v ӞQ_}%7~^ ifW439PP@-{q q٣08x;r}O6Cǜ1oN02̜}J%R\ -fZL|;z #C1hLɠP$\ZZ[QyMrADa"-LrAYq#P{6~9sJIiRd KLzxTdŵÏ;+ϫ*glbI.y~ SҖ(bNߌCHH86w@P'o}UAԸ??{[ ^EQ~ "zs̑;ziXNFoWKj})_`xN?K}+ ~#C;oZ/@eƌ fFpD4UK.6@p.;+vtM"&JI\v\ͨv?ZUDT&AH  v~!NQ٦m:/x:@ V3#O=,IJ7P6bxv9 8|gBk7՟~ڀuԚޯw| IF4?Tz4z,!qV=ƕ#mmX gW4֑3`I}#E2=FQPh?hK[ٰh y )@Ѝ@z9ӥ8S'_hc%yj0,I&s9#)]} :qig2NR&sT_;gX0PpW|W%,8L w-T^?b8陾Ck1qzaqtD_z}v[X*yU,BXEo|}!>߀ ((B^DT6uE4>+iݪr89C-rb%Et& qpeICRdNIQe| UtN֢wۀYzd..MA!;'zc5˴P:/%R"E9aa;P_JZ4x~4V6|j;]Z_U- ji"5OO*,ɦ B$+[6_ hƗo~Bc巪Pʴ_?m\rXcQna#C1H@I--g_F&4>uՌF3}^%HoJ;Dx@N3o0)4Ԝ`YG`@ʱ*d&mz`m-ZtNU%4¸\[tv%2[N"9w.GVּb;e{U10zJ4)v/" ;`x֥S^Ќ*͵~{Zf7!D,FG=~U`:vAV6[#ol(<"y4 9Os఻/B&k <+ӂTTvktݘs&iּF .XU[S'0Yci#w#{,\ذ>*qP>Z&|&&25wȘSw>:wIFC_>D`3%.D#ۀHD?3i4"t+Ǻ%Ұtdo)87yfnp*SSMFQPJ8PBA8~wղ~EVFsypVVK;f1>fTFS22B95*r9]Owм "ln{Ȣz3l#N/ K~>i')h?oGR8bKi E}6$anx[LŸB6othu߻GTx7K+FE4eeD6{@ؽ?Jգ 7*/<Ͱ(,hG8*2 eB(Ϋ7Aoy~,y> sNEjlzolgvj1*_x(IºTZοE2mڪ=vJꌋ4a+ DlTwts(OmJgd S.qtݮC|qw/I`Ub7O/v;rdظ_r*SMmoBPs{EكŞK;(xm&t_gRV /-YKτOL9)]>dUE+l}/fI,f][ZYᴱ-` (҈~@4?>LA=Ok2k&]<-/Q%@hj.?^ĆϠq\x48>[aݦi1*'LKՆCxUGs˖|pݵRv*B.O)l[P"arܾ<k%km%91PF_'$k;(Z+8ސArj2,!ofk-؍شt!QNc1jkERDG3H$ 0k@b917ٷ:gdEV 3{WM{Lڗ0M# ;֔Wìj\Pn4YpRA3r8F_ҩ{yϼXӂFʪ!S Ȫ(F; Gߏv27zrsv?.GX~E zHcG,#B;ޞ0!@H4{Y]IW,G8ͷn=/n\qfA/)P5qVhpW!AT2wή Db?%sLb%r!s1Mz{h]$)V+(VPKh7O}+A2c!M5?y ǩx{+ӗH:OQAw@f-vRĖ, %ݩYPOұ&-'y^@܂l (ʛhL߸](F^BϬ'ռ-"=T7gdٓ1H9-RS)̇zV:yE% )#&`B*2 1wD zضn'UU(s%AEG￫{zw_b 2'{ NHP~?Y$'LUU_/.uXk?z8z([:6M f䃲ӰV-)79U{5Ei$\lܽj05tfmS#żpݤAN?CVKmܨ3%1VHlI+M8ҔtөKsU#_n bpr#*E-iI<?? *7F 3}\=6E _'hglŧ>eGC[ M.)aw5ϱIzHF`sDcvb"\`8M W/f?1e^  ~ N:;% lK7?3\[L'Ƌe}_T8"=r1W)i QV}OQ{D9?Ā/1G)2Y~ 0sAv=hy6b(aT*;~U`}m5=Ju vr d}rgN)y.OEҜcWtF @ b {ٽ,2=Qsp_l?Q*BZ;NR 2OWGA5y/nMy1(!,8[i' *2VFs[2uT /aQ\8` ӪV גnlXT_6+`y jQ#``NvnQ\C=ގ!0Aܲ_u]@ [)k :۩zF+U3e,y T͟(1U>*W_Q.ZH}{MԴp;[tfoǼeOV{\ruDisĈY֮(lk'G@Ҫ&B!uāU}JsX ߲IQuGTI8H*+Xc_@W ._V# 3P1hA`khC.R9!!ucP-s6ѵ<\VqDrt7H/Q lK 3;p? J:86J0]f'oEz壡4,*{<̓w*/|n"eZQTS5@1M53@رi=A]rQgzKx/KћFSNb joRQ>Ht .ԶV>H*N`)Ag,E6r&L]%͈kb(p*^ZAnC|H}oN͚y=v'\+͖<\FA[E0Ӯ5 ':DuyoW(?ߎN>kZRp[ݾbnJAo;Wl\1a(y\9?S> ,Ҝj(0F6gBZ`߇U^Nw~!kG_Z#$lihhw]oD -MYᨮ)@+ |ўnmjYU8 j#a" bw,aP-?宙d-tYyTk`?T܏飶 YZ