rsync-3.2.7-150600.3.14.1<>,iCp9|]sۈGwc)ܖ9 OҼY3-Jn(`m|jM[pMπ2MeqzuZ?t'ܦSz_XC| UTMn͋&FC]}?񰓡zSJU-ned' сUZ{u۫b%@>EA0Orlh?֛&Wݗx&TXSĺc (q(>I$?d  N -Kdjp  ,,  , x, (, T, ,8,,,&&"&(#8#$59#5:(5=s>s?s@sFs&Gs<,Hs,It,XtYt\u,]u,^w bxcyidyeyfylyuz,vz w|,x},y~4z~~~~~~~Crsync3.2.7150600.3.14.1Versatile tool for fast incremental file transferRsync is a fast and extraordinarily versatile file copying tool. It can copy locally, to/from another host over any remote shell, or to/from a remote rsync daemon. It offers a large number of options that control every aspect of its behavior and permit very flexible specification of the set of files to be copied. It is famous for its delta-transfer algorithm, which reduces the amount of data sent over the network by sending only the differences between the source files and the existing files in the destination. Rsync is widely used for backups and mirroring and as an improved copy command for everyday use.iCs390zp348SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Otherhttps://rsync.samba.org/linuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in rsyncd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in rsyncd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable rsyncd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop rsyncd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in rsyncd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart rsyncd.service ) || : fi fiRw!8,PFH> P Tyq8 91_Q!9SuP큤A큤A큤A큤iCķiCķiCķiCķiCķiCķiCķiCķiCķiCķiCķiCcQrb?8;cQrAa^q^q^q^qbTO^qcQ^qao!a[^q^q^qa"_+bc|aMaM^qEB(6XiCaQ iCķiCķiCķ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-3.2.7-150600.3.14.1.src.rpmconfig(rsync)rsyncrsync(s390-64) @@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envconfig(rsync)greplibacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.4)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)liblz4.so.1()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libslp.so.1()(64bit)libz.so.1()(64bit)libzstd.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sed3.2.7-150600.3.14.13.0.4-14.6.0-14.0-15.2-14.14.3iAIg/@g@g@gZ@e_>didid@d@d d.@cRcQ8@c>@c!@c@c*cbb@bba@b^@a@aZ_R,@_-B@_*@_*@_c]'$\r@\@[E@ZlZo Z`@ZTZOYw2Yu@Yu@Yg`YA%@VV @VUT@TfTeTCdavid.anes@suse.comangel.yankov@suse.comangel.yankov@suse.comangel.yankov@suse.comangel.yankov@suse.comdavid.anes@suse.comdavid.anes@suse.comkukuk@suse.comdmueller@suse.comfvogt@suse.comantonio.teixeira@suse.comjsegitz@suse.commichael@stroeder.comdavid.anes@suse.comdavid.anes@suse.comdavid.anes@suse.comdmueller@suse.combwiedemann@suse.comschubi@suse.comdavid.anes@suse.comdavid.anes@suse.comschubi@suse.comschubi@suse.dedavid.anes@suse.comjsegitz@suse.compmonreal@suse.compmonreal@suse.comidonmez@suse.comidonmez@suse.comidonmez@suse.comidonmez@suse.comantoine.belvire@opensuse.orgpmonrealgonzalez@suse.commatwey.kornilov@gmail.comkukuk@suse.dekukuk@suse.depmonrealgonzalez@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comhsk@imb-jena.devcizek@suse.comvcizek@suse.comvcizek@suse.comcrrodriguez@opensuse.orgvcizek@suse.comdimstar@opensuse.orgp.drouand@gmail.com- Security update (CVE-2025-10158, bsc#1254441): rsync: Out of bounds array access via negative index - Add rsync-CVE-2025-10158.patch- Bump protocol version to 32 - make it easier to show server is patched. * Add rsync-protocol-version-32.patch- Fix duplication of flag causing illegal hashkey failures. * Added rsync-fix-duplicate.patch- Security update,CVE-2024-12747, bsc#1235475 race condition in handling symbolic links * Added rsync-CVE-2024-12747.patch- Security update, fix multiple vulnerabilities: * CVE-2024-12084, bsc#1234100 - Heap Buffer Overflow in Checksum Parsing * CVE-2024-12085, bsc#1234101 - Info Leak via uninitialized Stack contents defeats ASLR * CVE-2024-12086, bsc#1234102 - Server leaks arbitrary client files * CVE-2024-12087, bsc#1234103 - Server can make client write files outside of destination directory using symbolic links * CVE-2024-12088, bsc#1234104 - --safe-links Bypass * Added rsync-CVE-2024-12084-overflow-01.patch * Added rsync-CVE-2024-12084-overflow-02.patch * Added rsync-CVE-2024-12085.patch * Added rsync-CVE-2024-12086_01.patch * Added rsync-CVE-2024-12086_02.patch * Added rsync-CVE-2024-12086_03.patch * Added rsync-CVE-2024-12086_04.patch * Added rsync-CVE-2024-12087_01.patch * Added rsync-CVE-2024-12087_02.patch * Added rsync-CVE-2024-12088.patch- Update to latest version from Factory (3.2.7) - Deleted the following patches, already included in that version: - rsync-CVE-2020-14387.patch - rsync-CVE-2022-29154-trust-sender-1.patch - rsync-CVE-2022-29154-trust-sender-2.patch - rsync-CVE-2022-29154.patch - rsync-fix-delay-updates-never-updates-after-interruption.patch- Rename patch to follow naming patch policies: fortified-strlcpy-fix.patch -> rsync-fortified-strlcpy-fix.patch- Use "slp" for bcond, not "openslp", like we use for all other packages, too. - Disable slp patch and configure option if bcond slp is disabled.- add fortified-strlcpy-fix.patch (bsc#1214616, bsc#1214249)- Disable openslp support on new distros (bsc#1214884)- Add support directory to %docdir. Includes some upstream provided scripts such as rrsync. (bsc#1212198)- Switch rsyncd symlink to a wrapper script to allow setting a distinct SELinux type (bsc#1209654)- New version fixes bug (boo#1203727): implicit containing directory sometimes rejected as unrequested - update to 3.2.7 * BUG FIXES: - Fixed the client-side validating of the remote sender's filtering behavior. - More fixes for the "unrequested file-list name" name, including a copy of "/" with `--relative` enabled and a copy with a lot of related paths with `--relative` enabled (often derived from a `--files-from` list). - When rsync gets an unpack error on an ACL, mention the filename. - Avoid over-setting sanitize_paths when a daemon is serving "/" (even if "use chroot" is false). * ENHANCEMENTS: - Added negotiated daemon-auth support that allows a stronger checksum digest to be used to validate a user's login to the daemon. Added SHA512, SHA256, and SHA1 digests to MD5 & MD4. These new digests are at the highest priority in the new daemon-auth negotiation list. - Added support for the SHA1 digest in file checksums. While this tends to be overkill, it is available if someone really needs it. This overly-long checksum is at the lowest priority in the normal checksum negotiation list. See [`--checksum-choice`](rsync.1#opt) (`--cc`) and the `RSYNC_CHECKSUM_LIST` environment var for how to customize this. - Improved the xattr hash table to use a 64-bit key without slowing down the key's computation. This should make extra sure that a hash collision doesn't happen. - If the `--version` option is repeated (e.g. `-VV`) then the information is output in a (still readable) JSON format. Client side only. - The script `support/json-rsync-version` is available to get the JSON style version output from any rsync. The script accepts either text on stdin * *or** an arg that specifies an rsync executable to run with a doubled `--version` option. If the text we get isn't already in JSON format, it is converted. Newer rsync versions will provide more complete json info than older rsync versions. Various tweaks are made to keep the flag names consistent across versions. - The [`use chroot`](rsyncd.conf.5#) daemon parameter now defaults to "unset" so that rsync can use chroot when it works and a sanitized copy when chroot is not supported (e.g., for a non-root daemon). Explicitly setting the parameter to true or false (on or off) behaves the same way as before. - The `--fuzzy` option was optimized a bit to try to cut down on the amount of computations when considering a big pool of files. The simple heuristic from Kenneth Finnegan resuled in about a 2x speedup. - If rsync is forced to use protocol 29 or before (perhaps due to talking to an rsync before 3.0.0), the modify time of a file is limited to 4-bytes. Rsync now interprets this value as an unsigned integer so that a current year past 2038 can continue to be represented. This does mean that years prior to 1970 cannot be represented in an older protocol, but this trade-off seems like the right choice given that (1) 2038 is very rapidly approaching, and (2) newer protocols support a much wider range of old and new dates. - The rsync client now treats an empty destination arg as an error, just like it does for an empty source arg. This doesn't affect a `host:` arg (which is treated the same as `host:.`) since the arg is not completely empty. The use of [`--old-args`](rsync.1#opt) (including via `RSYNC_OLD_ARGS`) allows the prior behavior of treating an empty destination arg as a ".". * PACKAGING RELATED: - The checksum code now uses openssl's EVP methods, which gets rid of various deprecation warnings and makes it easy to support more digest methods. On newer systems, the MD4 digest is marked as legacy in the openssl code, which makes openssl refuse to support it via EVP. You can choose to ignore this and allow rsync's MD4 code to be used for older rsync connections (when talking to an rsync prior to 3.0.0) or you can choose to configure rsync to tell openssl to enable legacy algorithms (see below). - A simple openssl config file is supplied that can be installed for rsync to use. If you install packaging/openssl-rsync.cnf to a public spot (such as `/etc/ssl/openssl-rsync.cnf`) and then run configure with the option `--with-openssl-conf=/path/name.cnf`, this will cause rsync to export the configured path in the OPENSSL_CONF environment variable (when the variable is not already set). This will enable openssl's MD4 code for rsync to use. - The packager may wish to include an explicit "use chroot = true" in the top section of their supplied /etc/rsyncd.conf file if the daemon is being installed to run as the root user (though rsync should behave the same even with the value unset, a little extra paranoia doesn't hurt). - I've noticed that some packagers haven't installed support/nameconvert for users to use in their chrooted rsync configs. Even if it is not installed as an executable script (to avoid a python3 dependency) it would be good to install it with the other rsync-related support scripts. - It would be good to add support/json-rsync-version to the list of installed support scripts.- Fix --delay-updates never updates after interruption [bsc#1204538] * Added patch rsync-fix-delay-updates-never-updates-after-interruption.patch- Add support for --trust-sender parameter (patch by Jie Gong in bsc#1202970). (related to CVE-2022-29154, bsc#1201840) * Added patch rsync-CVE-2022-29154-trust-sender-1.patch * Added patch rsync-CVE-2022-29154-trust-sender-2.patch- Use bundled SLP patch now that upstream fixed it: * Remove rsync-3.2.5-slp.patch- update to 3.2.6: * More path-cleaning improvements in the file-list validation code to avoid rejecting of valid args. * A file-list validation fix for a --files-from file that ends without a line-terminating character. * Added a safety check that prevents the sender from removing destination files when a local copy using --remove-source-files has some files that are shared between the sending & receiving hierarchies, including the case where the source dir & destination dir are identical. * Fixed a bug in the internal MD4 checksum code that could cause the digest to be sporadically incorrect (the openssl version was/is fine). * A minor tweak to rrsync added "copy-devices" to the list of known args, but left it disabled by default.- Build SLE version with g++-11 to work around nondeterministic g++-7 (boo#1193895)- Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update.- Add upstream patch rsync-3.2.5-slp.patch, as the one included in the released tarball doesn't fully apply. - Drop patch rsync-CVE-2022-29154.patch, already included upstream. - Update to 3.2.5 * SECURITY FIXES: - Added some file-list safety checking that helps to ensure that a rogue sending rsync can't add unrequested top-level names and/or include recursive names that should have been excluded by the sender. These extra safety checks only require the receiver rsync to be updated. When dealing with an untrusted sending host, it is safest to copy into a dedicated destination directory for the remote content (i.e. don't copy into a destination directory that contains files that aren't from the remote host unless you trust the remote host). Fixes CVE-2022-29154. - A fix for CVE-2022-37434 in the bundled zlib (buffer overflow issue). * BUG FIXES: - Fixed the handling of filenames specified with backslash-quoted wildcards when the default remote-arg-escaping is enabled. - Fixed the configure check for signed char that was causing a host that defaults to unsigned characters to generate bogus rolling checksums. This made rsync send mostly literal data for a copy instead of finding matching data in the receiver's basis file (for a file that contains high-bit characters). - Lots of manpage improvements, including an attempt to better describe how include/exclude filters work. - If rsync is compiled with an xxhash 0.8 library and then moved to a system with a dynamically linked xxhash 0.7 library, we now detect this and disable the XX3 hashes (since these routines didn't stabilize until 0.8). * ENHANCEMENTS: - The [`--trust-sender`](rsync.1#opt) option was added as a way to bypass the extra file-list safety checking (should that be required). * PACKAGING RELATED: - A note to those wanting to patch older rsync versions: the changes in this release requires the quoted argument change from 3.2.4. Then, you'll want every single code change from 3.2.5 since there is no fluff in this release. - The build date that goes into the manpages is now based on the developer's release date, not on the build's local-timezone interpretation of the date. * DEVELOPER RELATED: - Configure now defaults GETGROUPS_T to gid_t when cross compiling. - Configure now looks for the bsd/string.h include file in order to fix the build on a host that has strlcpy() in the main libc but not defined in the main string.h file.- Security fix: [bsc#1201840, CVE-2022-29154] * arbitrary file write vulnerability via do_server_recv function * Added patch rsync-CVE-2022-29154.patch- Removed %config flag for files in /usr directory.- Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d.- Update to 3.2.4 * A new form of arg protection was added that works similarly to the older `--protect-args` (`-s`) option but in a way that avoids breaking things like rrsync. * A long-standing bug was preventing rsync from figuring out the current locale's decimal point character, which made rsync always output numbers using the "C" locale. * Too many changes to list, see included NEWS.md file. - Drop rsync-CVE-2020-14387.patch, already included upstream.- Added hardening to systemd service(s) (bsc#1181400). Modified: * rsyncd.service- Update to 3.2.3 in SLE-15-SP4 [jsc#SLE-21252] * Rebase rsync-no-libattr.patch- Security fix: [bsc#1176160, CVE-2020-14387] * rsync-ssl: Verify the hostname in the certificate when using openssl. - Add rsync-CVE-2020-14387.patch- Updated to version 3.2.3 * Fixes a memory usage regression introduced in 3.2.2 * Too many changes to list, see included NEWS.md file. - acls.diff, time-limit.diff and xattrs.diff are now upstream. - Drop rsync-add_back_use_slp_directive.patch, included in upstream slp.diff- Add BR on c++_compiler needed for SIMD support - Add --enable-simd configure option on x86_64- Change BR on xxhash-devel to pkgconfig(libxxhash) and depend on xxhash >= 0.8.0 since this is needed for XXH3 - Use xxhash only on suse_version >= 1550 since xxhash 0.8.0 is not available elsewhere.- Updated to version 3.2.2 * Too many changes to list, see included NEWS.md file. - Add BR on pkgconfig(openssl), rsync now uses openssl for MD4/MD5 - Add BR on libzstd-devel and liblz4-devel to enable lz4 and zstd compression support. - Add BR on xxhash-devel to enable xxhash checksum support. - Refresh rsync-add_back_use_slp_directive.patch - Drop rsync-both-compressions.patch, rsync-send_error_to_sender.patch, rsync-avoid-uploading-after-error.patch, rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch: Fixed upstream.- Remove SuSEfirewall2 service since SuSEfirewall2 has been replaced by firewalld (which already provides a rsyncd service).- Fixed bug numbers in spec file- Add patch: rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch (boo#1108562)- Don't require systemd explicit, spec file can handle both cases correct and in containers we don't have systemd [bsc#1100786].- Use %license instead of %doc [bsc#1082318]- Update to version 3.1.3 [bsc#1076503]: Protocol: 31 (unchanged) - SECURITY FIXES: * Fixed a buffer overrun in the protocol's handling of xattr names and ensure that the received name is null terminated. * Fix an issue with --protect-args where the user could specify the arg in the protected-arg list and short-circuit some of the arg-sanitizing code. - BUG FIXES: * Don't output about a new backup dir without appropriate info verbosity. * Fixed some issues with the sort functions in support/rsyncstats script. * Added a way to specify daemon config lists (e.g. users, groups, etc) * that contain spaces (see "auth users" in the latest rsyncd.conf manpage). * If a backup fails (e.g. full disk) rsync exits with an error. * Fixed a problem with a doubled --fuzzy option combined with --link-dest. * Avoid invalid output in the summary if either the start or end time had an error. * We don't allow a popt alias to affect the --daemon or --server options. * Fix daemon exclude code to disallow attribute changes in addition to disallowing transfers. * Don't force nanoseconds to match if a non-transferred, non-checksummed file only passed the quick-check w/o comparing nanosecods. - ENHANCEMENTS: * Added the ability for rsync to compare nanosecond times in its file-check comparisons, and added support nanosecond times on Mac OS X. * Added a short-option (-@) for --modify-window. * Added the --checksum-choice=NAME[,NAME] option to choose the checksum algorithms. * Added hashing of xattr names (with using -X) to improve the handling of files with large numbers of xattrs. * Added a way to filter xattr names using include/exclude/filter rules (see the --xattrs option in the manpage for details). * Added "daemon chroot|uid|gid" to the daemon config (in addition to the old chroot|uid|gid settings that affect the daemon's transfer process). * Added "syslog tag" to the daemon configuration. * Some manpage improvements. - DEVELOPER RELATED: * Tweak the "make" output when yodl isn't around to create the man pages. * Changed an obsolete autoconf compile macro. * Support newer yodl versions when converting man pages. - Dropped patches fixed upstream: * rsync-CVE-2017-16548.patch * rsync-3.1.2-CVE-2018-5764.patch - Refreshed patches: * rsync-send_error_to_sender.patch- Security fix: Ignore --protect-args when already sent by client [bsc#1076503, CVE-2018-5764] * Added patch rsync-3.1.2-CVE-2018-5764.patch- Fix: Stop file upload after errors [bsc#1062063] - Added patches: * rsync-send_error_to_sender.patch * rsync-avoid-uploading-after-error.patch- Security fix [bsc#1066644, CVE-2017-16548] * Missing trailing '\0' character check could lead to remote DoS * Added rsync-CVE-2017-16548.patch- Try more in supporting all scenarios bsc#1046197#c24 * rsync-both-compressions.patch- Execute tests to ensure the basics are still working- Refresh patch rsync-both-compressions.patch to include fix when using old-compress on new zlib on server too- Add patch to build with both bundled and external zlib to support both compression methods at once bsc#1046197: * rsync-both-compressions.patch- We no longer need to inject the pid in post as we do not use the iniscript relying on it - Add socket activation service instead of the xinetd service - Verify in services the configuration to run actually exist - Drop sle11 support as it does not autoreconf anymore - Drop patch system-zlib.diff that was never applied - Switch to system popt and zlib: * This should not cause issues now because upstream states the underlying issue why we used the bundled one was fixed by using more safeguarded error detection- update to 3.1.2 - drop patches rsync-CVE-2014-9512.patch, rsync-equivalent_of_CVE-2014-8242.patch (applied upstream)- better disable slp by default, it doesn't seem to be used much and it often caused problems (eg boo#898513, bsc#922710) * set "use slp" in rsyncd.conf to enable * modified rsync-add_back_use_slp_directive.patch- add a compatibility flag to avoid checksum collisions (bsc#900914) * fixes rsync equivalent of librsync's CVE-2014-8242 * added rsync-equivalent_of_CVE-2014-8242.patch - modify rsync-add_back_use_slp_directive.patch- reintroduce "use slp" directive (bsc#922710) * added rsync-add_back_use_slp_directive.patch- rsync-no-libattr.patch: Use AC_SEARCH_LIBS([getxattr], [attr]) instead of AC_CHECK_LIB(attr,getxattr) so libattr is not injected as a dependency when glibc is enough since several years to use getxattr.- fix for CVE-2014-9512 (bnc#915410) * path spoofing attack vulnerability * added rsync-CVE-2014-9512.patch- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.- Do not depend on insserv if the system supports systemd; it's useless/bin/sh/bin/sh/bin/sh/bin/shs390zp34 1766049011  !"#$%&'()*+,3.2.7-150600.3.14.13.2.7-150600.3.14.13.2.7-150600.3.14.1 rsyncrsyncd.confrsyncd.secretsrsyncrsync-sslrsyncstatsrsyncd.servicersyncd.socketrsyncd@.servicercrsyncdrsyncdrsyncNEWS.mdREADME.mdsupportMakefileatomic-rsynccvs2includesdeny-rsyncfile-attr-restorefiles-to-excludesgit-set-file-timesinstant-rsyncdjson-rsync-versionlogfilterlshlsh.shmapfrommaptomnt-exclmunge-symlinksnameconvertrrsyncrrsync.1.mdrsync-no-vanishedrsync-slash-striprsyncstatssavetransfer.ctech_report.texrsyncCOPYINGrsync-ssl.1.gzrsync.1.gzrsyncd.conf.5.gz/etc/logrotate.d//etc//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/rsync//usr/share/doc/packages/rsync/support//usr/share/licenses//usr/share/licenses/rsync//usr/share/man/man1//usr/share/man/man5/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:42018/SUSE_SLE-15-SP6_Update/4783248e8d6d16ed4d1e81c731b5bac4-rsync.SUSE_SLE-15-SP6_Updatedrpmxz5s390x-suse-linux  ASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=40151f4fcf986dc057e34a29a1b3d1acc84598e5, for GNU/Linux 4.3.0, strippedBourne-Again shell script, ASCII text executablePerl script text executablePOSIX shell script, ASCII text executabledirectorymakefile script, ASCII textPython script, ASCII text executableC source, ASCII textLaTeX 2e document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRR RR RRR RRRRRRRRR RRRRR RRR RRR:4*c9h>0xlogrotateutf-8c3af780dd31899b817e36acb2a7dc766c4836ec752132be34640eeaf0f4bf7b8?p7zXZ !t/z]"k%f=z}·Ĩ죱yN%ƨM9A\1v%`=?pHY}"U?֨6},A ,\m9!U((}TaɞBn·9`8qYiٞ+  ;pr`yד!XCۨF-DzƿW'/ aw5Lǟb@ #1` ^(&E#1`4@hMT~(N]  $a>›G}]?ch!,-∈<A~1w(Cm[.ck1NԋUS>X+ 3昍Rb-W.w-ը=ICXzO^zģKa]O8p~}_ qM'/dFk:s nI@!e7Y4RC_a&D%׼6/Yf/\sIvh(ÿ (Ԫq)KԀ6ȧl# O=גGpe?8ʨeOC@d܄:DTVXD/*&vro`J- YJn9t>}14G -BlPFEnNA~JᨷBfOjvt}B/2A^;,{1?mZQ'ݗ?__Ң XEY3%[B:Bv)ƸX3Og1KJ=O}٣Q͡cK,v:޿ow^6&3p^"/h> wWFM6N}Qy>'@ZpX>ͽ L@իfQdRkEJ/gZ ktuǀʔ*b)d Ͼ$6JXq =j^r?8 ~<:;.SIq׼`5M]\y ҋ䮍k'JJ.k_ӽDdE]:çQb u'<jc\*}m[mUE>~MP9Z{Oc8%82$uCkKO.p; bVrmkKzMli4L;ETaU,qPmyL+w̸ρ!20tiY×k1QJ~ROeD}[#о*VESs2Nxr׬hφlze%aNRm_"Pm\C3WBb( jQGT1dٞDK;2܃&s#E(zr%ho@`!$7wU(Ĝaaqtru٪yrRC$en;:Q~ɔ`hNDZ&2E3f$*8x ]dO*%+_՘aҎ`ѯ|o 1_S Д7;LAaI:uC<#L׉PJ }V2!\0&ËUC0Nl^[a2~ӭy9B˟$#o O~) p~pc9 #^wB@VA\VO*}zƴ#"ւ&㺔Du@봞p^ʈ0mM ~7%=Łz૦.i5@I'%fYGmZ~ ǕM+]SqR&{55f82nj9ndzQ\BwoܷO ]L\ClcDkM0#Wq.8\6R5p@eD e M$0}4/uAxu ell RfR.I[ИB7\:0[1+wޚ|Ao+:-ˍJY-ghR;ֶ @.S.:g5Ќ(7Ԯ5<A( scC͇A0W\HpxEM|+c XuuZ2Qo=džL# ʐL.oyI[i }BY}h~Qc(Iҋb{|Poع7 P+ԍF,7/p|U , jO;2S|5$䪮Vx d&8"m[IJ 9`PGs_@~%T `|u :w?q_G`e;aĻ5d:aQ/*M^6LO@- pS\[FjY& !UC? JM'jps+e/$ݬ 2DL GX!"W YsHԑrۊ|Z)gV*.S 4tL:W.RWtW9XB:j\53 Xs/1D 4yrW1İg~QC $f6T~!KZ*o |+PpTC<4>}a}D@?`Hph3M| XH 7H?ީc#NVSRgDM?HNI}D>Ep W@ $۾2@fc4WFN+DYD!]>I8? @k1|ƫ 48rg>W )a!}g "ZТa5WW*nׯqrĎͿz+!q+x;(umx-lƅ[pU+ٱN̝>k_lʆuL pPgTFR*Z <TKSˀLVz!y˛Ւï `\9{ adN+w~zڼ1F#'`q.ZٽsY:Xg(cIg#[1H{pqk!' nו;w_>ƋC1 ${d]#TDs&瀊2ٯ/Xxi0.&c{vlk8a&Oa%4'v$  ;s:Si2-6_'A#.5K /S~u>ûKѲhaѹo?C k{ Ԫ:[wy XN9.䪊l)/ц!9=sθ NնX_Tg\xN1 M1nٽjÙճYg%>ӡT¨H[#*?@siLg IwwݵH92i|r)83 鲎bP Z|[af: /tx.*Wd)C(;"Ξ)͎-iAHPF).YWAIo5Tx9*3D/㞚T+Qʿ 23i10U\n8^!Ćk5\$Z֤Q> (ήtȭ~jgU(ŕ֮C>KX>a戀z\I+}h<3>C60L?x(l7q ǟL@^rYVS<^n%r5_l Fr2BxmDh0Cs{D)u6bTYvC5%)y>ъ8 U3+pjrJ"c7Elւ6lDgs6 b#K'˾ t54$ -j)2n|5 rɆ37$ HdM=h bIQ;Yqs#"f~Ɵܕ='m` {/jvu6!/JւqWdo#  UQ%P4m^&a#{qocHǛ7əNSZa;re?8Dy)29pVTk}>/A#?lHg[в,v*%ݤzf=:i5?x%B(ܭN*{F7z1G9(&p ~CN1$ DY43/.@An-%d^{oڌaR*KuI=$qv<5 "#Y6qTۿ P$LacnµAfSyYq劋DT̥o|ϰ\R>H)6@HUa0n3~Eb>-yRlJrzrLf᝚F `9nJřv*9;i,(פ~ ÆG'\7N\BGͻ^]PQ+P!f2~pP3:poseM@=ys;#H^ )^[3c$.s$8}qڦ@v}./)v ߪX*^Gy݈)hbrw/S\ T Æv!F#IBR!!#+wQ``.$IBv=4жp]< }|Muq3QG\: ; ?8Dj}?ߓ4 "q8>+HNIJbBa*agrO+9f4,2N\pD06;]5ltLCW#YkkHR20jrbhr [Rݳl!A1g&'P֗!-#NlVP[5ņ57=%~pW( g=K V'ui&tXڪ aTUBTlC DBQ7E=ԇڐBٍǩ7:D@-sjT0z+(Dubphmmf3[/ha$#k G*(ZW߇w1*i9UH?*.tX]@3q_׊u94!h8ce% TCh2Os'Jlf0gϗԨ9\;Kf\O3GEko)sQ 1fr,nI F}rTogj$=KM#|¯|qF(#k$T^>TOjB۰FbSyMv3RkIXΏG*|2OOݰAפGq)coy*;zo;l8wR0&L:fizPt ~~iԄMP?B$|MvD$%B/lgV!Oil- |@/CldiNJ?VZ\k44eI9*w?$JrY%6c1 dT qq+>j8BjZmm\u8`2ԸkdՔ 9 õæWY[C]J8bMŒ+˜m(n;I{S[t kHS_9AU~!EY2vIc0tcbh\Xw ?\D9C VgVߪ&Xϳ]X`\ F#>BI> w?rjK% 2Qd~wJ$^&#PZ waYE27snT*{>ێƒG)e@C>8gTkP'&tR4/qAK4ŰrcJ_؜h+ (-됺ǰ(y+l93h-eIGdce7PpΈ~L !Y[n}wneZm+PZ&//?Ev癒]4G% NzG qN^]Fꌱ]њ{PO@6D}p>EG#s-.RZ" VBwj`ӛdjU=w?qJ j c f~{prs]hXf>(m;m(r+"oE\XsF@&z*E+1Xg>['NXeJn*Ǭ3RG2Ј|@CZ:z.BV= lj*pG!c\z:GGߐ#Qݵ(u' w Uvi-U@ň/R-Fn#2I6M}]]=i`Cq?)y(0s8WU nO_ ,;h޾|&.}L(+cGB,qQ)]Stȅg}S5'asDũ:-?P;tkuVɝ:=RH}eU#LK"e}RBp5]"zyp̍H!_si͜t\'K}y5P6x :6kˊpMbuշ(,Iݥ/8Y5@ @[\3N?!" ~*o7G<-!b_$P^7!\iTDw+vXYvY P uXQ7ka~VL:G}n,MoFBPش4]+HWԕ~igB ?j\_P'40(uΨ$Z#g®؛,u1x돃 xjH-}wi.8^csZa^rs$u l %;T~*۲0Y43_ywk/ GFdk.}@D eلͦ d|E6]If ~4V!H:(`-Gkpϊ5Ǡ.bȑ̦u 7D/y)K!b>t @IfnD;`lamU/_!$y7BBKki+gΜ[ ::ܣ-(U|t.J ^IEհ9Q|`ׇcex< ˴VƫOa{ib^I({99B;~Nʈ4oo2s6LXZ3:z$|[i;uоҲ/Md}Iyρc귯=ORY[R!Gz…7jjHtRMH4&uC0CQ i-W"[Njv@-bܲqk%g[m%\0h=к#y׊|‚$XLBs 4מxղ d#aӞai(_BяyP{I-=>6'TF`a|Ԡ$Z; T.@\^ M?’};zp4J־bmU88OiS!?>^k{%; ),n@\N?²xi\ TVv1(Dh^A0Uaii䘏r? %W3QU41~YN׵ol Q )νj1 0[C!4BPب53cR[JRb׉9^HEvnCW5QpGqZjsh-+Md3BS?@^]re)UI9Uwi{xH(C?C^T@62Y9;Z׭{߷pHL6.oN吘wJo{FK"p [$fkMJmqq;d}¢3bT$ӅԊ0\mC2Qb7B, } gٮq~rYo>Ge}$-*'ZmM..֭uty'bMoD$q>zg}\ߟC%=x93M\'rgT,ζǷ'7)%FpG"!pʅ{rǛOy[]ɀ nV&Ɋ 5`X*1bVCk.n4Ka`Ғc+19MG473 )V.i e|G6jKt寙YMcj C%k%K%t52*_UM捽TGAP2XAhMD^,H2+'rRR} ()O0'lk'^d N$71˽X#[iFJHʤ:|֛v Ǩ(_T? }|ƿ6FXgr#?Qp@CT(տ c kỖUK.ք'O5Yob~I.ֽ|ybWB`gہ4*,wє,=#SQ#0eTΈLh`nSJz]|S!~0ZVE="4_X~kv$eUo`I{OAx/Ei᫢Gnqg}GdzKgz>rDP30NftT 0{$No.ng?ʿ+y%|l~I$E1C q-O_x }@ɾJTnԔ-QjxN:nrmq'iEqK V=va^?&}G|u(y~L¡?7o<',DfscO{n :;:!S` ;<60i1DXvVߡt:XJ>Kkmuv/\ڛ/fUm5^gWpFfҩPE-aݳ[D_zc5>i9젱 ,\`}5 R^ [El^o %;X̸V "cp4|K޿]O^~Dv.9R>~'%H@D&~̈́j}.0I{}P65p@+)hXboA5R YB~5>S+l8!'fvgN$ FcNB6mEeWy@A x5{S*{z*͖xR+mq5}fyw'[`W|]*dNvK gS_O"̔<q7}0wh'Aԝdwɥ9==6#k;Gu} +bM(C߸wGS0FMlB 79,xx 8C/8fQ^Vum޼rb >%q?$IΜ|:XBm 0G񄕴bYLS ib+k{ϖ XHB>~Hᚍτ{:%Mg\ZCGE?٘O@]/|º溍g`"p|ؕ*i)奏 b-D0>MwEt-Y4'ܢFp={(l2Fj ,_ ],DD!RL]kCv{INFW?}rY.- S 6DX6EApH -}ˆۅ.c!%4c GK6KP&PX DŽu OBaoeoԺf/㝑ψσ*/StIs NЩye fx~g$E|+ _nСп+'`S$˸\G2 ^"9mԶ_BO~!N]9drG."n6<+^݄Jdix Z8 \S>Gģ;J R?KR7 fόt-A 5Y5T`,J*v<$x*w^IB{m`@7ΥWMKW!qr-p bޒ}\:=.>[i֕vKj'\>Zӫk()U >Ҋm8:zZŒs{{D%,ܔ#AVsX\jx2 _װnmL?˧<řr2jdBUKQN s}9 ҔZE? *dّ&8uQU۫\3QnE\Z.ߒޝ8f9bE %M@B>f/ZgvƪbC(_nDrͨq]К_.VhGNF4"(_k&_Jgr[tHcE7|cdptRWw'=p n b49jE`~8ň0,ű狋FSC=K1; Qj>#~H剓h/N{cvOjpL%퀴~'ZثGj&eKez=_6!돗̉]CK8ӁMP-Qat>P U[U:bxV NYv2-}ϖp{8,W[%~NAo DXYa{po!VЃ/g>[CZ+֑}2)@QCIQKrִCJ0C<2=/z)g1~0fNxl U5CѸVI>P^g+Auk"#9Hh* FT2pLk.lh7,eOhZWXΊjL!.y6vNN?ɽC/߮[`0Qv{;28GMrVg0qP =Cv3D:n#|7g#kdcNoTU[1U-U$wOCeb>t8*[,<R;lpٚɃ|*sѺEg64uFٙOM[RݨbNAhB_</ b&|g ®-8 xGmy psVZH:S Ǧ&=vSCD:h֕rR@J -+֑owx*uP(KFܦ*G ǏoGb23pEe@R|LMіvFe&g^+Opm#JZ,[X6}! 4Pz&9F մ#@ 1\wwtLQ*BG)SռzE;4zՖ5C`<YH's ռ~';yS¼`Ǖ*m۷ Jf&*05{" ]{ @yj:ӻR5ۑfi~0pmb= %-?CD>/PàTKZ\wsqyЃr' E`Dugv:r] [{jMP^݈B;E1'A\ %/뎻X],1cXNgڡ ~=BV]oiEsOGxxN/̱Dn1Rԩ+W,.d]pk Fk|u|giO9уcGN e9,9xf8 څ }^R>qrMp{mA ٯɈ40r ?B3wpv@>G?Y<@K@%;՝1`KMO`& QR¶d @\&fUViɭi֌PΆhzۯ4i,sG#(8<M)J.~wDjL+L YD"AII s_yR=Gά9@ZhܭC"F/\TM8T#oMxM1b/YȰWfNHRZD0d0p 7|ad}t3O4X.җrI6w Q'*Da堇dvqu2lG01FOj (x7 .i}Ƒx3nWu^қQ:bRz1&2+ Њ@U V3|x?ܶ=F/[qY<`Oq& BTP.g>~ۧ A*oڬZ :N,Јxk5ɳ#e2 ;;ދ8H'A=?\[w"ɹb "_aڅ_aWZӛ{>;Y,ZC6a%+J /H԰B8N5d%c*Ê RF?af7"Y צ7Xd vo2L/_zO2WĦrxܛE:{UQi/Lx uF\(;]$YZ0HِqS(sэ3mY5%}9 F3!pP 052u2iSZgfE Q|2%fRCΣ]ZPLa7:3 #P:z #񳯛%Y"~*=sF.gU<k" O'idM]`Ҭ~(֞Cm56魐=TX%| tUG؉9½A?Em説NT5䐉Us3 wy6!\FR L$Ov3T8d=*w+ Q)sd(:.dOܥ%^EG.sYRyie -b?tW@y?G8.A GHHMXuc?ڟ1>T6]{i7R2h?fYs`\7tGZiw r>հ˲ٙZ&(Nab{tsD[;PTFgL PV1p8"T.c; "C[4P1&#rI5 cFi P2}?iB0}K^N*H7OK;&K>BW G:9ܨA.|3&ϣy%d_UڅH;Y)nZ 3+Vgv{j'rbCjv( _Es.ezO]q0ZO N=CKsl*+;l@0)hSQr]˷gPmPHy0X[srӭʭh褜 pKtKKf2ɫp)'4tqSygQFE c/E}(z[h9Qv֖ld?X!NV}V75}ɋQZ̰G]Qg>n7@G-:)S@˝2Y.q7(̽"/p9'0AŐ`st.|O`92ÙkF* HȪSwyz%望%lHHmI?5MXFk'}'kI5AșS. TEyTxp@~$Ilrst > rT1Dy{͡yRIen!ba kqIrQnِ #t4&`(lHiϨP)/׈W2{q[(22W${xN͒j/@AzgqOe"<4_iq:u:=,(b8 ge@HTCH6!郕P43~Iao%Ӹ'^7,ZGqoP1R6놝 dNbjp]vE.*v?D;c.3l-Fdžɵ*L$87b5)Thꪁ;y%>n1i;U02 da.AE#`L''6^z[2(Ǧ*jZbnPma~;Zȯ8?RP5qNtI {}nM:0oڌ@ˋ5g`wך)bZx▲ &$Nf\2zg\G\.Xư#wC]1O^i T h*ik0$,?@Sɪ]Qb(xP%G-/  `QU8/2OfjP@@: lsh_0k6} \|҅x\_c&kB(ɐ?tɤO5>8_\i=_#-eEKEG VNOdՑJFá "'^g)wAk}:"OAwAqhwRl$C˱Jg`~Zk`Y+~XQ-l,*|VxZt֙2Aӌ eekɤfIU`_)hkw$A$͑!oKL4QŌ.Ii2aBс/mu25|P[+@5ipf:\t,ZҴ7t~Hwzx;nb_\P#ْXr`&He)5>ݺ\tEJĪ8׺M!"~u#paBTa8 |mVD+(EOϴv:)տEX_.C.5ὟCUP#Qia'XyY`[V웥1,Lk7IBjL|n4\]IGtvlٹ>iɹcqgHm7D;n4chV"~%xye\0R#6dOجSo40EG@1+'ͥ.l 4:kO$s vB~cB2 :h/fHa:0NiZb{/f Wոi,: wMNJK:m y9ElF5YMaX SyLdY5c‰l)tTqO_q0Mg8afN? zރC>uB\wM}J8oy?4"uoP|}+W P8cNg:@0W~3]-{C[3=XQ!cCA`a_ɻa|ByC4) J:W:Lyϗ 0^!~SWd.SL[ wsУ!q_z_:+~+;XSHv<`AGj"zLQp&d mtOOsЌʻw7)w\g%j֙Yfe_ l8=4ÁD> {1EL,oDh+Ɇ'*gWp$0*4JSrcԁU0SB;L2nb&"5;ROs6+={EƗ&-3__^,'׮4!Vl6 O͇K'}y~]U'#No*h"" =Siup= E#SN}7[V9ROS&wLQe~`_Fai5\ ND[8GK,>^>N[rxT9Aa,aXeDbw]%R>5=iSqEHezkKxZa_?=F`TUV єkpƴTb sUMuT7/^%q"!^6#wԶ{f'E G,Xp(LfW<{nmR hq!2?lf3`[Xu/bh)~ޣͤ;j_#ҩAH>ބ6Ɋ_%:G DJ>GXr;lJXN [#2gVCB 샄A<&H@3]'+ ?I8)C ԺsfRzdkZd|5ho!y4e?$՟O@zyhʃ%wS@bA)d-)`WW!-Q^h!F3$=G=ﰙ ;ie۪.pL D\Ԥگ (mg{C| n+@)8t]9T=# \x_:a&`A4lu%}#a\?\K#] aљ[v`r,l0UC7w67zG9ڲYD;L,bI;k0̠z Lc 8kz8ூ7jL8ju'zudSmlƒ+엒0*QMAw{m;lsk%OяJ"1Y[kFMib gUBqYG#ּH*Hܫ4)+9Mr*6Mh}h^TSn ^z,Ñ6n'=ڔ<(g꿪^QȷpG`O+EPC #3*Id`c-n;./z-7YJRW{?T)9"ަQE=\ƙL_ڥMZ=UVy ol`['1TI&Ȧ٪="i9Cfȁsxj$QbzCTodSaIq޾4g> c&BG ؾJw*S^\q3ON_ÕXFܔډ1ђ :XdzsPTܺ'}q}OU\~TBӮ*:ހ;iXCK+Ӣa 3a%@i.[bhUG 'zd_ VoY9>03JZNYƣ̓X<)NacFP܀bsQgs;-:NQ_ LXl9fRs ߳ ^(I&:[pr=^J7gAFl{%8ri.:\l˙Dzi+/ZhE.aԭڣf_O*X׊r 5sK:U>*|Xay+|ԐR|"\arU{u=%4V! Bd-/8߬`[nC ޔie@Nu7൩mL@5RϝjHł:4p1ilt`z`QNI)4@ 3zm+ Y)<f+3vK趎΀PʱZi`*[ɕd{84bQPt,J Uy< {IK@hP&A>Z7?1|an2vzS\]8dŒSK# ,yŎ)P\5jSeM45w4KHztR[XJBjiOn7p#;ng*Ueʩx 4颧 xJG$Z# {={ . B$:n&bJb57K[ $0%%@"͑p[.ֵ\fP-/׷-zr+0'nI0ADY(A-4.d [-FSW+u}Sl/ OUy9dMf0Rգ~_i%`.h@/&{|6m\#2CF7"}n]hW#@>,F BK%zcK,GgH% O3`%p3ՏiN~zܢ㴼'^C /]qu%($c`dZaP^2[ﻃ+_ZL[U'%Fu(BzTDͼ:qOЬpxu{ ܏38eL/[&fӬJ\vͽ{nlA>jQ_D%U &c^J9EsQKa!R6!IXEۢץE*5MjۓtCGP~e՝M!jCF23rbwW32Pn4^h ` BH {ZL9-GcXF8S_sY۴g&4qٽ5Y=cݚ8e^iˎ;|d ¼hM]l&3g$́,u[^;j=[/_=ilwEUŦM~,x 8W=Oaz{&XyL4#!l Ѵr\ՍĹ8z'EK Wo/Ҳ? ː8iGF`xzԃ} ðto Rd)]TeH*]"㗅qUL@qK%evUKd)3pL/ 0j2,~C Sho(փ=k&EcA';Tt@y٢lR704=,Hc.'G5@rOV]M-YT*aCvW5۶hrP9oQt2 )ً8H}]kky+B]%TYʚ"'mY!)uZ$r\*:lR9 cE>L>X:Е~ҹ щnicʊq `LW9y=M=2T]]r`zˑ8Wt}HP!xeY{%{ GH<D2٩I8?5TEu9h* mA{Ch QZ %t!ShڸƢVa "ڗӫ]FTI%sNs>e^˙Y%+R!m\dD7ƌ"`x],dw='zHaY$|A.$:1-HuѯZ;ǵ}X yԂΦ~ 6qt6D`=x#Idt1•Y\Br8.WNx"̊3*-[,{QtedyW%(10T3ze˱&68.Wu;k ?<֑4KmN 3 Ԃ)j/i2Qk7i6O6H%'PoDv0O/4OSSk7į H$ZS-J [%bPRL_aR%'Qj3~KZNPZ!ie??X 2MA ieso+ eT`sCdgIV5z= u]e#'\V= 8:sGxWuk=+JԬ'iJEkx&l{6I f>Yn 3dmabG-`6]/%" ] kt+d fh΅WՍ4 !*֊Ғ -qfX3^_9Xќbm1/v_Oz`T2jt[;Z }8$_l FE" \5%vz%iETo9 k lxBSC"߿1$ESd4%]gXpxtŒIC$^UtR?Q+i+p 'nB6D.y|:/q"T׻7t0Ӥm3NE YI5e=(,Y`D+RǴUZ~]S$VBݭiޔ8NdxMk9Wyb:d"߅mm""kBb$Mk8QmՊ#trcHS$Tl l$UO[s^Xu.i_ΟE΄׾R0f=_NW,[_uuoXN!@^,(h[Sg۲p}ˠ2cѠ=Qw֣>yZa8ES\LS̥?F >J>RZib3럚z`+tN$!8ǟ#&yZfd HH֮! )9J kT >ڜLYΏSByBH]+Hfl.PFI Ի2h'  c!򴬳0ˑ<0G<\|P2LOd`[Oe `ƅ 9{2yoiv&X)# iSy؆ Sm\f1BԬ7/N+L㚪-WނfM%j[wy@|g!^W& Ui:+;mտ8$7+ݔntxaS뛡AQBC2y5:C Dc"8|%~1]t H\,g!v +LjLOb+ !雜(E!2~6_$7f70f$+'RD~6fv/i$:)higoH<\#󩟸I t`T@(%Ӣ{'X )=ېǥCs%\3I8q;t@yiHyiѦ-Ы ~w2;qGQWǠ}#Oi@g2s&\#XG( ܔ$iQσ8jhO!MBʤ  AD6}fu5v኉M{p7ݦS&Di# َmOHiI$#RǢ,?/33gzT45q?8ӗSbzir9%6kU[4Bmwt򊶶IuD*{"Cp'X02̾[oٕqq8GV+P¼vJw;97ä15FJ+Ԭ>ֶ%cۀt 8먫ЖHs~iYwxW4KW}K&=Oknڠp% fٜ꣫7`]xjmjgS9REܩfo0X5yO.V|9S-1\:$zAۅ#uDv#`9i:U߻<[_]Rcf)5wV^{ٷaG" CUz nJdQD@ntJ=H?7>A: @*(Z/ʧ<- @9ZeV*MK@q/m癙1{uvXKpVv2û(ǯ !X]TY>k~1"<֬s-8"9c1r s,^|tbp5'TXò@h)Zs#>v쳸`wb6\Pӆfޮlr rNڰ~&:$8'tpA.ػ"b*83AYukP#sTPyUʗR챁(M 6[3ٯWI4`_)*]R6S˜O7ҋQx\364 $6Z*:(8LY9>nчܬx!y럏;oG1ק,2o~vh.O(m[oKu\"Ul8*wPnݿ*NV̅-x%WN`YxPI+C5ZX3¶L(\X&$st>4LBHFξx8͉V74Ƌ0uȟKȨv}wrB<<.tjD4&=:nr?<r A&.~·cmϯd,h5 qghL"w/C\9-WI)om8W bEl2sD9^tfm2d=ш!*Un, 8He2do|GL5>!2U{3Ƚpl?lʆel.#T0OU"cƓ<9}>/EB~i3)^˜,b.Ԯ=#@$DqIsgu *|dBɟFf>^yK:xV a\xM%ݦoLM ;YR Εu פC3Hzntv?5Qr?^v7h_RO> &QK~ras/9;B5\G7y+! RH`{BM1W$E{ߴlY5. ȋ qW%~Ŷ׼ow$""O*lVg(08$0~% nIw"c"*UTg;G̫M,<6c̯2$Z"H>Ǝ@|yz6 +`/=jJeAPw5vW;ek@)ϏtƑHO6E˧1 !E!(LXc~1$u`VБڜ JmlHbB%_vptbc_yd:#X^"mZ@Ϳ9WI)XAx!̡)9ݒ)QRz##vBPU.A0CJgWKp@104Vzxu rtn4;Sۅ^AT?!N{Gjf#{GM8~B&LoSh)Jj ݳMz% Y=4QCb8.hp97hf̜b7'DS} í=(wU&oTX:L\.MKcEr U.H/LvhӘ{ aA^s/0)L|`I>Tt)u[p3_GW.l'^u)z{+\N'x `+7+5]Lw%8dT'ZTC9 YzaG8dfP Cg謀:_\-%4aPZ/S8I5DF̼V$?g9lXg 1Dcuf<[Yb;gyF2~eovuF )i6@=<8U3)aÓ91\Vj)Glzmfb3KI;%6$5fnъYڋ`]^F5HߗhYa9Šy̕PUkhut\K಑xg33Vpo6K#Ӯ'1a15@0{g˩bRwiU>dG&7XM.DR3`#Y@uhmGGT 7{AOlcv|<ӈMLLRM Խ!>=(V_ ==:\I**lf^| Q !&h;l$t&;7r*]$ŦdP[w$S%u:hEI&62p*rtӬF=kXm8O7L![XiI6܃Z{`_> p鉋Eޤ4f5%18KR/ܡƴm+vG xPkw@]*۷P Pۭ5=Jdݙ][ikL_hǻ[/o F$HP+BEq;()l; Vn.0ۻ^Ğq!(K2Hj~84IK7xh|18MhZf[?MxL ͙9YiܠJwhȭJt5aSs0F|ɇȵAiTS:,*xf}];=K66tvN[xzVԀQdYhS(:C 3J؉HEFHo[ .[QOsR]{N/I̵ A5{$xb3vwÇ("ɢnqDH̩[ߒ#L:]!JUAavm Cya4<8f,Ba XK"F,;$zYVtb~ˋ/"F1q%0!_|§.@{u 3CDZ`?~+ƫM 86rP}_)X [L}U)`7U4G8atyl{:]×G$#(Oa] s1$>~+kZ**g=)l d*IeCO`\:a !KY(.UT@Wʲu%DWZonzΫT4 C򕣻5>Ƴq a#jFa.3U`DNW0r{ȌN 46tEP*B#q֜M\<9RN掌Pɤ9-u\KO(ۑuvnqC-x#8"9j/QV/i\řTX:$(u/Ի;YwH'v&3ENto"<׾(fݧ4؊N@eqǒZG" CK,r@+,b1=ƕy^e@0:鐡#'~B8RHҪ8oΖ_)?鞆8y7];G{֙\?20¾ g'/5}V <\fp}oS^lM! +*[cpA4şSU+2KA :"DlEy-O<3S<ӋvfʅI Czf=X2'|~wUw be`c#9cy!B loվ'|5 FS;ӽ/K9DpnHs+JW|أxJQ8elzCI2|f#]z'A]x_ x(ipZIiq3.ya¹F2u]Ĺ { ♓ h~L"5"ϸ.US )f)*޽HmZx#W O~CH6~;Up&X>dJI*R2ϙ-j.a`$̦iWUyΦՎJ3X53L5D M D\jΣ~S͛1Gy!V:27śC]) >(0,0isYNwmLJȘ~j?{UWI|*<믜brf,O=qdȌG=ݗ` &?ʾݻs'+~&hlѶܟ4xLw{e}1ܴk?V<*۵ ,F)vz>5mq|hҬ -%(u*Zxv6r4|4XjcAG- bXMZ"b=O)h'ٙfXyjT e(!b&f6ym؈l ؊*J4Ml1?[4:Zv̤X8g_ c&ɣz)or,0w38g]+` H4w<nnI9=0pI&(&-$}(#T#&8=i6^oVG50WT{8v:xԂ-ΛP)j`L۳o@Л —-DA1,~A?zvRЮZ/%r+r&3kk8`IIzZfPoԓI g@bq~#yφV>}(q%Kj &5c(u9f!hә\mgv a8J §zN4Vi {~Je9uB3#4= .'Faa!<¦ٱF `o jd!K~(bs24nwڄ3]^+iSӰUn-,WfW0jDp:OOwaK!p ۔c(gS\DST|V6zڷ3^P 8}/-/Ksj+