rsync-3.2.7-150600.3.8.1 ; > + ؉ gQp9|%|x )g ev?#adO4_<<%VlWv= !ս RfYbP[PTP3/x?H&X`<ݨDmS` WN=CXk>a ܁ ]al\b SdhP;\i P|-5X/鷟st
-
/0sfK:B ẅ́rETjFz# ;woe SDU "eW̹ 4H > I } ? } d M - K d j p , , ,
x , ( , T ,
, 8 , , , & & " & ( # 8 #$ 3 9 # 3 : ' 3 = q > q ? q @ q F q G r , H r , I sl , X s Y s \ s , ] t , ^ v b w c x9 d x e x f x l x u x , v y w { , x |T , y } z }t } } } } } } } C rsync 3.2.7 150600.3.8.1 Versatile tool for fast incremental file transfer Rsync is a fast and extraordinarily versatile file copying tool. It can copy
locally, to/from another host over any remote shell, or to/from a remote rsync
daemon. It offers a large number of options that control every aspect of its
behavior and permit very flexible specification of the set of files to be
copied. It is famous for its delta-transfer algorithm, which reduces the amount
of data sent over the network by sending only the differences between the
source files and the existing files in the destination. Rsync is widely used
for backups and mirroring and as an improved copy command for everyday use. gQs390zl33 8SUSE Linux Enterprise 15 SUSE LLC GPL-3.0-or-later https://www.suse.com/ Productivity/Networking/Other https://rsync.samba.org/ linux s390x
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in rsyncd.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in rsyncd.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable rsyncd.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop rsyncd.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in rsyncd.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart rsyncd.service
) || :
fi
fi R w ! 8 , P F H >
P T y q 8
9 1_ Q ! 9S u P큤A큤A큤A큤 ggggggggggggPcQrb?8;cQrA a^q^q^q^qbTO^qcQ^qao!a[^q^q^qa"_+bc|aMaM^qEB(6XgPaQ ggg2b23c79a944a91d6a759bedcd5a6caac09af49231642d7081f7f53b8a98a4ddd 9f8bc6d4c4850de792fd91c10336d4cedf930148d326b1c6166ea6b32902f779 88effba41a7fc1038f4f9698215fd0f153276ffd3ee0290b9fe72b5b89d96d70 a5fbb5d68ae1013e7b73f2b6c5972e94203ab31ef55bd13753ce54d80f1e4644 b25e002f448246d7271adb0d9e72281e33aa822b07afff4c96c476d79fe1fc80 2dee595625bc9c8adc0059a930ff337a343804301d895cf0beaeb341eb73ba18 670f510aca69036fb81feb6a97fb3d84000fd7c3b33493b100ace39ca20e4561 4007292da2af4ef8c8d7891cf667d83b8b33090955a87d10a38e6cf6f4f35d2e 1d15a0f645dcff7ce4d2c1841bea633a09ab5393e829b21f75c09a78248c99a7 59e012f5d2e611e520ab658d4b2d25caaa53d3c1bb675d393039fdb30e6669e4 b69afcd7778c58096d638dce98880587a0de398029fd740c832043ed84510529 228f82cd200891183e260a8dc72b0c12b4e1c6b7f89761cb5583606de0d9f7f5 d79e65fb53fbb8933360a9604dbe0d0bc3d5f0b3990d382e6855e4cb997c03cc e10e5958f709484242ed3e2dd090956bd1f9b6dc15c93face624722eafe357e5 b8d12ee2e30a44d15c9ad5c1025c097f7c78f62db32267884e0a434dfea701f6 4a8148d2b4f75848e7bc7bf71c64c62fd37175e0fbe4850f2eabe6c2822e9dad 53f93f4bd2cfe4a9e35814d6071c998bc97d370d7a04af5d9639bd4328759046 3d66b47a811db453464341a6150b5f75a9319a9a6bf475122a6d158bfda84992 1d9683b03c10b3639654ceaac106277fbba763bd996209f312dec847f59894c9 96264d08b18356ca98fbbab92ad05a8d32bb71436731f1e6a6374344ecb999fe 21bb9d3d2cc8b113fd8b5d25dc721cf64175f55106e0024992a262e7dda0a8d3 456fad82b56e4afa0d708d6aefa31d7db6ab4d58a97f8fa52e90e1210b4e6e00 5886d1e0c1ae4232f213c05b29dd24bea7e4cef713fde7fc1f49cb393f7ec2f2 99a448de8200a76b5af57d61518b4992097f952aca08c70fa93b0c74b5937623 cce4375b5cf48bc74c5289849eb98c12b0d8b21b179dfb4bb0eb324c8a8c448c 24427a41c751e2682934a447b4729ec48dbabc454910ba33649212fa09e8a939 9703ae9fdd20175a2875caaf87f2c6e75a1643496fde4ea4801957388a00476e 2a387e54959e9942fbdc2bc3824ff22592e73fbe494ccd8b89c5387266470af7 a90aba06776553c13a61ed4680fc25e275a5345a71c6144109e00243ed6c9eb8 cb46c1bf89c25e1193eb16e9201405bc0e39d2c2d03bff42d3cee86ef15e3050 f808492fbbbcac078252c5ca18b8093507dc11135f40bfde1ff82b5ad158c778 1dbbc370ebe15955a0c20cbd1e113ee1908f182816c8af864a712fab8cd29ae0 c81f71fe753ed7be279f76ecb006a1acaa96704e4bebbba5654345bb1aa36445 2dee595625bc9c8adc0059a930ff337a343804301d895cf0beaeb341eb73ba18 f8ca799f25dea134d6945c1438228c92e356c25d69b26182640f139f63165d08 a93be19bcd9bbff81fea958f0aba800c8d319784e2d2f16e80e5384d4fa09a9d 85c19ea50a224c2d0067a69c083584e5717b40b76610ec1218f91385775067dd 74bfa2f396741a189b243d9a6b32c2fab5a90efb47fb422b6cf2ed3df4d14bc5 d6e65287dc5b20aee7e084fbdcf382f5ede9f8523c4ca287f8f901998ebf0464 b2d814ac3fa4a2dd8741d10876968b85bf455ac1a05ce5d702db58535867b83d service root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root rsync-3.2.7-150600.3.8.1.src.rpm config(rsync) rsync rsync(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh /bin/sh /usr/bin/env config(rsync) grep libacl.so.1()(64bit) libacl.so.1(ACL_1.0)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.10)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.2.4)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.6)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcrypto.so.3()(64bit) libcrypto.so.3(OPENSSL_3.0.0)(64bit) liblz4.so.1()(64bit) libpopt.so.0()(64bit) libpopt.so.0(LIBPOPT_0)(64bit) libslp.so.1()(64bit) libz.so.1()(64bit) libzstd.so.1()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) sed 3.2.7-150600.3.8.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 g@g@gZ@e_>didid@d@d
d.@cRcQ8@c>@c!@c @c*cbb@bba@b^@a@aZ_R,@_-B@_*@_*@_c]'$\r@\@[E@ZlZo Z`@ZTZ OYw2Yu@Yu@Yg`YA%@VV @VUT@TfTeTCangel.yankov@suse.com angel.yankov@suse.com angel.yankov@suse.com david.anes@suse.com david.anes@suse.com kukuk@suse.com dmueller@suse.com fvogt@suse.com antonio.teixeira@suse.com jsegitz@suse.com michael@stroeder.com david.anes@suse.com david.anes@suse.com david.anes@suse.com dmueller@suse.com bwiedemann@suse.com schubi@suse.com david.anes@suse.com david.anes@suse.com schubi@suse.com schubi@suse.de david.anes@suse.com jsegitz@suse.com pmonreal@suse.com pmonreal@suse.com idonmez@suse.com idonmez@suse.com idonmez@suse.com idonmez@suse.com antoine.belvire@opensuse.org pmonrealgonzalez@suse.com matwey.kornilov@gmail.com kukuk@suse.de kukuk@suse.de pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com hsk@imb-jena.de vcizek@suse.com vcizek@suse.com vcizek@suse.com crrodriguez@opensuse.org vcizek@suse.com dimstar@opensuse.org p.drouand@gmail.com - Fix duplication of flag causing illegal hashkey failures.
* Added rsync-fix-duplicate.patch - Security update,CVE-2024-12747, bsc#1235475 race condition in handling symbolic links
* Added rsync-CVE-2024-12747.patch - Security update, fix multiple vulnerabilities:
* CVE-2024-12084, bsc#1234100 - Heap Buffer Overflow in Checksum Parsing
* CVE-2024-12085, bsc#1234101 - Info Leak via uninitialized Stack contents defeats ASLR
* CVE-2024-12086, bsc#1234102 - Server leaks arbitrary client files
* CVE-2024-12087, bsc#1234103 - Server can make client write files outside of destination directory using symbolic links
* CVE-2024-12088, bsc#1234104 - --safe-links Bypass
* Added rsync-CVE-2024-12084-overflow-01.patch
* Added rsync-CVE-2024-12084-overflow-02.patch
* Added rsync-CVE-2024-12085.patch
* Added rsync-CVE-2024-12086_01.patch
* Added rsync-CVE-2024-12086_02.patch
* Added rsync-CVE-2024-12086_03.patch
* Added rsync-CVE-2024-12086_04.patch
* Added rsync-CVE-2024-12087_01.patch
* Added rsync-CVE-2024-12087_02.patch
* Added rsync-CVE-2024-12088.patch - Update to latest version from Factory (3.2.7)
- Deleted the following patches, already included in that version:
- rsync-CVE-2020-14387.patch
- rsync-CVE-2022-29154-trust-sender-1.patch
- rsync-CVE-2022-29154-trust-sender-2.patch
- rsync-CVE-2022-29154.patch
- rsync-fix-delay-updates-never-updates-after-interruption.patch - Rename patch to follow naming patch policies:
fortified-strlcpy-fix.patch -> rsync-fortified-strlcpy-fix.patch - Use "slp" for bcond, not "openslp", like we use for all other
packages, too.
- Disable slp patch and configure option if bcond slp is disabled. - add fortified-strlcpy-fix.patch (bsc#1214616, bsc#1214249) - Disable openslp support on new distros (bsc#1214884) - Add support directory to %docdir.
Includes some upstream provided scripts such as rrsync. (bsc#1212198) - Switch rsyncd symlink to a wrapper script to allow setting a distinct
SELinux type (bsc#1209654) - New version fixes bug (boo#1203727): implicit containing directory
sometimes rejected as unrequested
- update to 3.2.7
* BUG FIXES:
- Fixed the client-side validating of the remote sender's filtering behavior.
- More fixes for the "unrequested file-list name" name, including a copy of
"/" with `--relative` enabled and a copy with a lot of related paths with
`--relative` enabled (often derived from a `--files-from` list).
- When rsync gets an unpack error on an ACL, mention the filename.
- Avoid over-setting sanitize_paths when a daemon is serving "/" (even if
"use chroot" is false).
* ENHANCEMENTS:
- Added negotiated daemon-auth support that allows a stronger checksum digest
to be used to validate a user's login to the daemon. Added SHA512, SHA256,
and SHA1 digests to MD5 & MD4. These new digests are at the highest priority
in the new daemon-auth negotiation list.
- Added support for the SHA1 digest in file checksums. While this tends to be
overkill, it is available if someone really needs it. This overly-long
checksum is at the lowest priority in the normal checksum negotiation list.
See [`--checksum-choice`](rsync.1#opt) (`--cc`) and the `RSYNC_CHECKSUM_LIST`
environment var for how to customize this.
- Improved the xattr hash table to use a 64-bit key without slowing down the
key's computation. This should make extra sure that a hash collision doesn't
happen.
- If the `--version` option is repeated (e.g. `-VV`) then the information is
output in a (still readable) JSON format. Client side only.
- The script `support/json-rsync-version` is available to get the JSON style
version output from any rsync. The script accepts either text on stdin
* *or** an arg that specifies an rsync executable to run with a doubled
`--version` option. If the text we get isn't already in JSON format, it is
converted. Newer rsync versions will provide more complete json info than
older rsync versions. Various tweaks are made to keep the flag names
consistent across versions.
- The [`use chroot`](rsyncd.conf.5#) daemon parameter now defaults to "unset"
so that rsync can use chroot when it works and a sanitized copy when chroot
is not supported (e.g., for a non-root daemon). Explicitly setting the
parameter to true or false (on or off) behaves the same way as before.
- The `--fuzzy` option was optimized a bit to try to cut down on the amount of
computations when considering a big pool of files. The simple heuristic from
Kenneth Finnegan resuled in about a 2x speedup.
- If rsync is forced to use protocol 29 or before (perhaps due to talking to an
rsync before 3.0.0), the modify time of a file is limited to 4-bytes. Rsync
now interprets this value as an unsigned integer so that a current year past
2038 can continue to be represented. This does mean that years prior to 1970
cannot be represented in an older protocol, but this trade-off seems like the
right choice given that (1) 2038 is very rapidly approaching, and (2) newer
protocols support a much wider range of old and new dates.
- The rsync client now treats an empty destination arg as an error, just like
it does for an empty source arg. This doesn't affect a `host:` arg (which is
treated the same as `host:.`) since the arg is not completely empty. The use
of [`--old-args`](rsync.1#opt) (including via `RSYNC_OLD_ARGS`) allows the
prior behavior of treating an empty destination arg as a ".".
* PACKAGING RELATED:
- The checksum code now uses openssl's EVP methods, which gets rid of various
deprecation warnings and makes it easy to support more digest methods. On
newer systems, the MD4 digest is marked as legacy in the openssl code, which
makes openssl refuse to support it via EVP. You can choose to ignore this
and allow rsync's MD4 code to be used for older rsync connections (when
talking to an rsync prior to 3.0.0) or you can choose to configure rsync to
tell openssl to enable legacy algorithms (see below).
- A simple openssl config file is supplied that can be installed for rsync to
use. If you install packaging/openssl-rsync.cnf to a public spot (such as
`/etc/ssl/openssl-rsync.cnf`) and then run configure with the option
`--with-openssl-conf=/path/name.cnf`, this will cause rsync to export the
configured path in the OPENSSL_CONF environment variable (when the variable
is not already set). This will enable openssl's MD4 code for rsync to use.
- The packager may wish to include an explicit "use chroot = true" in the top
section of their supplied /etc/rsyncd.conf file if the daemon is being
installed to run as the root user (though rsync should behave the same even
with the value unset, a little extra paranoia doesn't hurt).
- I've noticed that some packagers haven't installed support/nameconvert for
users to use in their chrooted rsync configs. Even if it is not installed
as an executable script (to avoid a python3 dependency) it would be good to
install it with the other rsync-related support scripts.
- It would be good to add support/json-rsync-version to the list of installed
support scripts. - Fix --delay-updates never updates after interruption [bsc#1204538]
* Added patch rsync-fix-delay-updates-never-updates-after-interruption.patch - Add support for --trust-sender parameter (patch by Jie Gong in
bsc#1202970). (related to CVE-2022-29154, bsc#1201840)
* Added patch rsync-CVE-2022-29154-trust-sender-1.patch
* Added patch rsync-CVE-2022-29154-trust-sender-2.patch - Use bundled SLP patch now that upstream fixed it:
* Remove rsync-3.2.5-slp.patch - update to 3.2.6:
* More path-cleaning improvements in the file-list validation code to avoid
rejecting of valid args.
* A file-list validation fix for a --files-from file that ends without a
line-terminating character.
* Added a safety check that prevents the sender from removing destination
files when a local copy using --remove-source-files has some files that are
shared between the sending & receiving hierarchies, including the case
where the source dir & destination dir are identical.
* Fixed a bug in the internal MD4 checksum code that could cause the digest
to be sporadically incorrect (the openssl version was/is fine).
* A minor tweak to rrsync added "copy-devices" to the list of known args, but
left it disabled by default. - Build SLE version with g++-11
to work around nondeterministic g++-7 (boo#1193895) - Migration to /usr/etc: Saving user changed configuration files
in /etc and restoring them while an RPM update. - Add upstream patch rsync-3.2.5-slp.patch, as the one included in
the released tarball doesn't fully apply.
- Drop patch rsync-CVE-2022-29154.patch, already included upstream.
- Update to 3.2.5
* SECURITY FIXES:
- Added some file-list safety checking that helps to ensure that a rogue
sending rsync can't add unrequested top-level names and/or include recursive
names that should have been excluded by the sender. These extra safety
checks only require the receiver rsync to be updated. When dealing with an
untrusted sending host, it is safest to copy into a dedicated destination
directory for the remote content (i.e. don't copy into a destination
directory that contains files that aren't from the remote host unless you
trust the remote host). Fixes CVE-2022-29154.
- A fix for CVE-2022-37434 in the bundled zlib (buffer overflow issue).
* BUG FIXES:
- Fixed the handling of filenames specified with backslash-quoted wildcards
when the default remote-arg-escaping is enabled.
- Fixed the configure check for signed char that was causing a host that
defaults to unsigned characters to generate bogus rolling checksums. This
made rsync send mostly literal data for a copy instead of finding matching
data in the receiver's basis file (for a file that contains high-bit
characters).
- Lots of manpage improvements, including an attempt to better describe how
include/exclude filters work.
- If rsync is compiled with an xxhash 0.8 library and then moved to a system
with a dynamically linked xxhash 0.7 library, we now detect this and disable
the XX3 hashes (since these routines didn't stabilize until 0.8).
* ENHANCEMENTS:
- The [`--trust-sender`](rsync.1#opt) option was added as a way to bypass the
extra file-list safety checking (should that be required).
* PACKAGING RELATED:
- A note to those wanting to patch older rsync versions: the changes in this
release requires the quoted argument change from 3.2.4. Then, you'll want
every single code change from 3.2.5 since there is no fluff in this release.
- The build date that goes into the manpages is now based on the developer's
release date, not on the build's local-timezone interpretation of the date.
* DEVELOPER RELATED:
- Configure now defaults GETGROUPS_T to gid_t when cross compiling.
- Configure now looks for the bsd/string.h include file in order to fix the
build on a host that has strlcpy() in the main libc but not defined in the
main string.h file. - Security fix: [bsc#1201840, CVE-2022-29154]
* arbitrary file write vulnerability via do_server_recv function
* Added patch rsync-CVE-2022-29154.patch - Removed %config flag for files in /usr directory. - Moved logrotate files from user specific directory /etc/logrotate.d
to vendor specific directory /usr/etc/logrotate.d. - Update to 3.2.4
* A new form of arg protection was added that works similarly to
the older `--protect-args` (`-s`) option but in a way that
avoids breaking things like rrsync.
* A long-standing bug was preventing rsync from figuring out the
current locale's decimal point character, which made rsync
always output numbers using the "C" locale.
* Too many changes to list, see included NEWS.md file.
- Drop rsync-CVE-2020-14387.patch, already included upstream. - Added hardening to systemd service(s) (bsc#1181400). Modified:
* rsyncd.service - Update to 3.2.3 in SLE-15-SP4 [jsc#SLE-21252]
* Rebase rsync-no-libattr.patch - Security fix: [bsc#1176160, CVE-2020-14387]
* rsync-ssl: Verify the hostname in the certificate when using openssl.
- Add rsync-CVE-2020-14387.patch - Updated to version 3.2.3
* Fixes a memory usage regression introduced in 3.2.2
* Too many changes to list, see included NEWS.md file.
- acls.diff, time-limit.diff and xattrs.diff are now upstream.
- Drop rsync-add_back_use_slp_directive.patch, included in upstream
slp.diff - Add BR on c++_compiler needed for SIMD support
- Add --enable-simd configure option on x86_64 - Change BR on xxhash-devel to pkgconfig(libxxhash) and depend
on xxhash >= 0.8.0 since this is needed for XXH3
- Use xxhash only on suse_version >= 1550 since xxhash 0.8.0 is not
available elsewhere. - Updated to version 3.2.2
* Too many changes to list, see included NEWS.md file.
- Add BR on pkgconfig(openssl), rsync now uses openssl for MD4/MD5
- Add BR on libzstd-devel and liblz4-devel to enable lz4 and zstd
compression support.
- Add BR on xxhash-devel to enable xxhash checksum support.
- Refresh rsync-add_back_use_slp_directive.patch
- Drop rsync-both-compressions.patch, rsync-send_error_to_sender.patch,
rsync-avoid-uploading-after-error.patch,
rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch:
Fixed upstream. - Remove SuSEfirewall2 service since SuSEfirewall2 has been
replaced by firewalld (which already provides a rsyncd service). - Fixed bug numbers in spec file - Add patch: rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch (boo#1108562) - Don't require systemd explicit, spec file can handle both cases
correct and in containers we don't have systemd [bsc#1100786]. - Use %license instead of %doc [bsc#1082318] - Update to version 3.1.3 [bsc#1076503]:
Protocol: 31 (unchanged)
- SECURITY FIXES:
* Fixed a buffer overrun in the protocol's handling of xattr names and
ensure that the received name is null terminated.
* Fix an issue with --protect-args where the user could specify the arg
in the protected-arg list and short-circuit some of the arg-sanitizing
code.
- BUG FIXES:
* Don't output about a new backup dir without appropriate info verbosity.
* Fixed some issues with the sort functions in support/rsyncstats script.
* Added a way to specify daemon config lists (e.g. users, groups, etc)
* that contain spaces (see "auth users" in the latest rsyncd.conf manpage).
* If a backup fails (e.g. full disk) rsync exits with an error.
* Fixed a problem with a doubled --fuzzy option combined with --link-dest.
* Avoid invalid output in the summary if either the start or end time had
an error.
* We don't allow a popt alias to affect the --daemon or --server options.
* Fix daemon exclude code to disallow attribute changes in addition to
disallowing transfers.
* Don't force nanoseconds to match if a non-transferred, non-checksummed
file only passed the quick-check w/o comparing nanosecods.
- ENHANCEMENTS:
* Added the ability for rsync to compare nanosecond times in its
file-check
comparisons, and added support nanosecond times on Mac OS X.
* Added a short-option (-@) for --modify-window.
* Added the --checksum-choice=NAME[,NAME] option to choose the checksum
algorithms.
* Added hashing of xattr names (with using -X) to improve the handling of
files with large numbers of xattrs.
* Added a way to filter xattr names using include/exclude/filter rules
(see the --xattrs option in the manpage for details).
* Added "daemon chroot|uid|gid" to the daemon config (in addition to the
old chroot|uid|gid settings that affect the daemon's transfer process).
* Added "syslog tag" to the daemon configuration.
* Some manpage improvements.
- DEVELOPER RELATED:
* Tweak the "make" output when yodl isn't around to create the man pages.
* Changed an obsolete autoconf compile macro.
* Support newer yodl versions when converting man pages.
- Dropped patches fixed upstream:
* rsync-CVE-2017-16548.patch
* rsync-3.1.2-CVE-2018-5764.patch
- Refreshed patches:
* rsync-send_error_to_sender.patch - Security fix: Ignore --protect-args when already sent by client
[bsc#1076503, CVE-2018-5764]
* Added patch rsync-3.1.2-CVE-2018-5764.patch - Fix: Stop file upload after errors [bsc#1062063]
- Added patches:
* rsync-send_error_to_sender.patch
* rsync-avoid-uploading-after-error.patch - Security fix [bsc#1066644, CVE-2017-16548]
* Missing trailing '\0' character check could lead to remote DoS
* Added rsync-CVE-2017-16548.patch - Try more in supporting all scenarios bsc#1046197#c24
* rsync-both-compressions.patch - Execute tests to ensure the basics are still working - Refresh patch rsync-both-compressions.patch to include
fix when using old-compress on new zlib on server too - Add patch to build with both bundled and external zlib to support
both compression methods at once bsc#1046197:
* rsync-both-compressions.patch - We no longer need to inject the pid in post as we do not use
the iniscript relying on it
- Add socket activation service instead of the xinetd service
- Verify in services the configuration to run actually exist
- Drop sle11 support as it does not autoreconf anymore
- Drop patch system-zlib.diff that was never applied
- Switch to system popt and zlib:
* This should not cause issues now because upstream states the
underlying issue why we used the bundled one was fixed by
using more safeguarded error detection - update to 3.1.2
- drop patches rsync-CVE-2014-9512.patch,
rsync-equivalent_of_CVE-2014-8242.patch (applied upstream) - better disable slp by default, it doesn't seem to be used much
and it often caused problems (eg boo#898513, bsc#922710)
* set "use slp" in rsyncd.conf to enable
* modified rsync-add_back_use_slp_directive.patch - add a compatibility flag to avoid checksum collisions (bsc#900914)
* fixes rsync equivalent of librsync's CVE-2014-8242
* added rsync-equivalent_of_CVE-2014-8242.patch
- modify rsync-add_back_use_slp_directive.patch - reintroduce "use slp" directive (bsc#922710)
* added rsync-add_back_use_slp_directive.patch - rsync-no-libattr.patch: Use AC_SEARCH_LIBS([getxattr], [attr])
instead of AC_CHECK_LIB(attr,getxattr) so libattr is
not injected as a dependency when glibc is enough since
several years to use getxattr. - fix for CVE-2014-9512 (bnc#915410)
* path spoofing attack vulnerability
* added rsync-CVE-2014-9512.patch - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. - Do not depend on insserv if the system supports systemd; it's
useless /bin/sh /bin/sh /bin/sh /bin/sh s390zl33 1736960593
! " # $ % & ' ( ) * + , 3.2.7-150600.3.8.1 3.2.7-150600.3.8.1 3.2.7-150600.3.8.1
rsync rsyncd.conf rsyncd.secrets rsync rsync-ssl rsyncstats rsyncd.service rsyncd.socket rsyncd@.service rcrsyncd rsyncd rsync NEWS.md README.md support Makefile atomic-rsync cvs2includes deny-rsync file-attr-restore files-to-excludes git-set-file-times instant-rsyncd json-rsync-version logfilter lsh lsh.sh mapfrom mapto mnt-excl munge-symlinks nameconvert rrsync rrsync.1.md rsync-no-vanished rsync-slash-strip rsyncstats savetransfer.c tech_report.tex rsync COPYING rsync-ssl.1.gz rsync.1.gz rsyncd.conf.5.gz /etc/logrotate.d/ /etc/ /usr/bin/ /usr/lib/systemd/system/ /usr/sbin/ /usr/share/doc/packages/ /usr/share/doc/packages/rsync/ /usr/share/doc/packages/rsync/support/ /usr/share/licenses/ /usr/share/licenses/rsync/ /usr/share/man/man1/ /usr/share/man/man5/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37073/SUSE_SLE-15-SP6_Update/7577571d7449b5f046908c6322f0c4e2-rsync.SUSE_SLE-15-SP6_Update drpm xz 5 s390x-suse-linux
ASCII text ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=75471ca3271f11be50ac152572957a9c4a5578e6, stripped Bourne-Again shell script, ASCII text executable Perl script text executable POSIX shell script, ASCII text executable directory makefile script, ASCII text Python script, ASCII text executable C source, ASCII text LaTeX 2e document, ASCII text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R R R R R R R R R R R R R
R R R R R R R R
R R R <{:ZbĵI logrotate utf-8 914204d20cb9573746d6ba37f01e2c3e87774bf84e1c4c54b56a16ed194d0352 ? p 7zXZ
! t/[~] "k%f=z }·Ĩ 죱yN%ƨM9A\z>29q;U> jo6}&EO儰 neC)=mW[!sѺ\Ni~ į{rBsZ.
@l02.&fo1 _GjVJs ΠXX ElQcnme5S8$,Oݬ>Ux]P6'@x}٣K ) H H:+_ p9RѾ3J,zi> DŽ |6c,3y<P㘂2t51/" 6{_SEX@֫ k$ # `^>&r;Ţ`#[`^ ^_Xhֹѱ \؊n2-H(뛵C}foqvZ`BV5W]\-yoNCMVג0 ;hS& Ģaa$ "ex_;)O/Ϥ&
֏8ja0vtUpȝk$N
8;ш*3za;w xj%< 8;euKpQQ搠5 D'i@L5q@BFF2?Co4@mք|t]|)AI,r^B*Ё6"&݇簡e
>b+= ΖaX1
=$ V| J1w/3b Wcr&P}H K4v!*X]vTe;KT'p6iNq%PTIm+`
*l4GBi (Ⱦd[9f|Q4P;Di K, 葟l eD),- ι'Db#z3_cm25 ?925
HbT)B %遺@8LF
ccq VvMIP|?{Y _o(ُ"L0_Aۤ;ϲ٨͆+ E IX=Z`10nT
C84ĢlrH:#3o7b?A rbmEL FS+8tlGjCy
}(%w\NH~z<$3 w<[:Q OO:NìV VpGP5r+l} [Jg3O0_{Z6$0K]iwkpN> U
qH64A^G &^qQ.:䬀w`kxJ0KP[и68 t;erWϗF.CF ~Ĩ@ڇ;<
p N/rQ0rL)=m)E !Y Dzsۥ9 O%,bn7"Q?Qy0{W.5htz]b.C.ށѺR16F(m,lm{F]sK )q|Oɣp-n50,/otцGBW>T%Hvڄ HjmDo\Up7R/_heT́46'mhrA۠Ɏ^ƼkU/"Xtz͵|#ou8-<%DB*ŏ(ջDܰ*ߐ]בeaj60A. Ec9G8}1 S09fJ5cWb ѕcީŹxOUio/X 0Ĥ$}=
;zɗMH2qv%F= q%OиG4B\ӔTi] \<9/D`Ȼ.̒D+&)tKsKN)s4/$)Y/!Ndvh_k3O7QwK:K^~Bvb1̠
~u6HM3̈́Wr ZytA}>
oT>q+/D ?Boev~Ev - G u35#\:2@ cΓ|(v@^O
و\
JN #1}=S9a*
x}D>4;#.hT-bxNgX'Яty@qxrRwk t
5.c5I!J^u_ 5 -h]XZ_Pncj9x1)8D5xuݓ8Ƀ#+d?! rOB ?'"xzcL",Zc h݆YҎ@*#K*Y<ĽswűڗDٵLn1Ɔ^V7nwd{qVQ g d=/)CLYTի@=l^&QUo/
; >5w 8! ysՀ
ШZ
Y;B<Ӊq S]CJf ՝\>83xB<&H~ 'ڻ)ܟ^]t(w]>NBq^U3Fr(-NɠsJ#9M^JsM3LkZ\M*N&"τG.k3ݎ "
6K@ߨ6~~i>xRKzJ 0, hqP324b~o5&;\<r?UvKR| s"H7p_T0_6>#Zq/ZG msV/WhL UhP{w0nq#qPg}; #[W<2O l ޚ'K
weW5W VOI W06督$u
n "{оT%|_Q9-ѓ^bv~c<\?QH_@Z \qyi BR CJ+~s= bY 8KGϖem?ݥeOAzG5Vm]؍ 4HZc7%& .W:bT@l h/zھ)B \}-{+ip1+,E=0121C.2{fׄ\SuVoc-7
8ś3 ?>$BP aFwMDx"bBкyİ B{KoqQxv-l!/b);9D.|G&N~pyCߘ]?LJH&h ѝ}K4@1shɭO>`г0S6[9'/M|+aIP@P"xHt*SЪ3{\y3M87Uk%mYzKUӟqy% ow~~'/ԠX &RGJϥ~j7E˕% c̸33=ܘeV2l& ,xl>U\m9UPV?Ԗڈ6 ݥA$>C-ڧa"ު 1VɲsI.h 22+HArmq}yP86]]&L,3s˛G
/gdb3}XśM[i7Ӛ
)Ȭf-APO\-٬ Za=[40 ѵNS,0!* vh@S> $ tAM
cFHT @yh(cR =Ihx:gb * ޟN߮ŵ 96gD
/EXj2\. XQVΙlgW;%[ӧOE "## 1#%RF>" jMȋ0걝&|#}p3E8ɠ1 r UE{̑d 'unTU#7I٘K:7B}|_6STȅ?e܃j&E$^ ^kBxH5 F:#&Gé I 4T58G r[ VF4F^ĝu[,/ P9\zA>Wwif(B})OJ=ힴKBe ? c37~ceizHll'*%'28#\UwnQ $u^+1MRjzbx:]T0wau5ݧ3(O ,!M 3bJcXhi?Gp .j 2ȏvVUIOQ51@PDd諆W9%G"`JU|'lí}]GxAt'ULj51Bý߉ƍ)I-em_`! |[Iu})A(YE9;Ed&`$- krğ4A> r[fAJ KԠbQ*VN&9b#ʨ nk&3>=+Lw?/Τݚ\ ifB #ޞl 7QK˭MĴ})U/A??`ΌO]{tU[S ڰ 'ݔFwݵ #h5hs,@ &`)3\Ι+X:Lb~4ݬcuzZeN*7rvF*lIɣvwR̪3_5IS %I까 ! Tt_>J),=|Z7YR}Јrj ֶ
kz iݿ 2<'Bo=L9;ib.-&guf.)_2u yq<AD/q&lpIG}M
ںJu:$Ha8zD.Fg3} bYyzP H y][VmZGe4(خ;&`$S `
~Jzhү[e[ӧi^8V!34e~$YAͱ4hr
5g O 1<ǒ'_@7пoyaL bu\N&us6L4]bu͜lT,@p.4O 96zӚ'yՕ᳂|m %KVMvcNY n"O}x5îaָ2#
OJ
t[s)s̊22 qY'd*lOL>lMM|sr9,P gS!2w--|O,FY)H0AEZ [4O9Jvt`6~qfTgˢlL\efc
&+|Ťk l'&58JVX0;C>*ewh$; BvMr~"r6
0'
CكÅ]tE I
q{HX dLFVQΉ:# (ś E~9 m-,_O',_"Vv <
c 1O6ec'J:k3YIad؉o.#V$ܘ@
)0c%RUYYB)_Yd-iu @;ڰ0a0P4o;'o1fyUc OYjSEgɅ0o%ubncqiW0(NG8BN 5Ȗ5 =ܹ榢ȢKd\$i(9umѱ95s5e3^_Iݗ(8
47d1 UA
%wIғWD)%vxýufLJ1Ϥ( ;6eU͓"zO؏LdOҪ#];種,ԮVnjq%>}/m+RK*~R
VKb2) {8g zJuR2 AvshFsG}i܊ Kl:$N ܃Ყ>,WI$H,j,Iهw{V2y)VnLޤRb I7Zi8nGDu`!wxs4+6|cArSU#rsR~-b2xG&̣ry&:yl+d dU7$g1)31 GT(3v" v+`t`i|{Cy$1xZJW,Dݔ\k ]ɛOj
>},|8iWŻ. ~4,_* ^؏ Ύ] 읱/Qw7nAy?T>GbïIڻISdvCzew2(i1dj 2@3\X q6<
l G7;gemfI_: NԬ;#4u@d-Ph
M#>^,+]=kYJ]
q;@ܒZ!Å+6.OWĽQpyEײxT*C(jN@9zZ intgw
\d>:ݾoc"Z4 O_'iK.,& &"[qc/D]ԺʃȣM6p@^"0՞\#@Q&p>.ֹA'҉T~\'^YT_E'Z!6f60 :^G%/XhPYyܲxWm:n:0.*CCd"x>G[r%TRy Zh RlFp5x >SQB[c 2Z~u~'IEvoI법2qUxqAy0$OU|sH`|P56⺤zۛ3]Tei
- XbixRZ=}uTl8 ׃nRZ V
O+Ȳ^ 89Ns'LL^+nܺ8ln t80Hg&3?ICP4R ɲng>h `2Rҷd 1!;9A%$|%&:vK
b{V&/sd="o{Wft91Ȓ"=V-&4-)OcB*v%KV{?v[u" VV -~gL6 2,G-
[( ~.ˈRR9:~6EZ*]3KkS3T.LWvpC9֘Nڞu}qvDk1_9 /nz)Fi4'^ u0c-v19?SE v V˽o )".VG
zA{ (aĄJUfMĠLķ,xaU==}[%d` a MR_7).L4 1glTU6AI/T@ wt ҽæ+A5 4^ L 1i^ _
__Kb 8skgwZscwu
HFr<Q
R*D__0qyY^߷Zs6M< ,{ؤ ΓPs~VV˟!$?
+I#t ꍔ¡"gLȵqmEŒj E0&u>GTpw6` Pw" |RBeeF&;up?t H ='65C յ|81~OHpSxC"w#0|oe1űO/2\)s^ *O lhO1 $H## ɺE¦YToX.d~ބ2 }ZZ^|fSKb =؝K*FnC+5_:W/{}7w p>|cv,R+|px0x5/a|/dFR y+Uanh ;AQGYlP= )AJk{fWkpX祱d;Mm2θˌ uZnl uvr=Lysl|OB %{kޙ[jPxwcBT@ N#3)[:x$ I-ab a
J9
!Kj
_ /Y:yis[r h~AAխ%Q }{1%lj7"3dEbt5,;~#JQj& n۴2Iѷ0pZ Nvr IR(ؾr i-Y, 53u;X]ʈ5}bP}^sCLJiNp +x?\$lt;2 n&2j]|B2M}dn!cS{ztVP m@ MOxR Amdsw3*qd
.8D6i$k7J@v;Uu;09x>WM=I jkb-
X~ +
F:"/Ta`}< ~ ޒ7i-V|lp7 _m=ڼuz8ٲV˙ aʬ@>ZQk|!
=#;iŧ}s|{R/wekK>1sv4 qvL@Oeأך[fm0~!YIh x@֎rGȞ`kYxnjPB ~gV\5nt\w3Tt^pB$t8h}KFYCG$ hj U#-x<0mEfiʱгVk.Fov7ӻ݂ U3¶>쐷rkO!-˨"4f" 2$ ɲK6LS 5.4B n}pg( ( ofQi^}̆lc,̄rM8DN|vv|i v.4r"i"SD
aC'
|,bj>
n$L\4A5S;09פIzzjg0jD(p %\}
Jr6{\./X5q Bghe(89oZ|) x4BdsʽhFCB}c{ݾ>Aᚡ`+BC D[ZNRfk&;DwЌkH}h@ksp(m<m歉D pf˰> bWشNuqG?7tM>{fhڦf<"Uj:(#b}GͶ!~ʉ\[yJFfEB -x%3ˈ
9O!v@E2KYu\Hɟ܌w UzYiBHOI1 @y?~wk"~Ўk賮R嘮 X9}# 651O"iiƹTj'mۤH$.E>YjA yfqJhJ 8#p˲*.JXƘ ,'J ʽ,wP"Xd}jp˫e"Gtw;v:&. h)C~$[HGe=Kۘd_g#Z 56 { w^*VAg[lP0"zFg[2?DC;YOkMB&ٲ$z4L C3iE̠,rw_B,~ P r)ٸ!KZ"Kun# x>, vPH1Ez 9^I MH S/ #CW.5[ +÷LބEPɮ۩U buf 3xF;>w c!T2U☤='3 fVc}
YS j\3|h_羐Nn
LO Z#?+6d
r*; 'AokX_IYM1,yti0
lX'[%_TAP7) 䟴vOi[cF253!oEe'}hrPe ѥ%F}9Zu=Z.݇z&Wi\
RK
k+s? D5ܼȐ*{mUZ
DB;QȄ:ճ$bѻ?J2R K 刎9{+ )tOMsB1|c41\X3bK2D+j W=*@(: d++SJ|I©]븡4dO?J*
8\`
˻(euG{۶V'`߅
ɐSUH3kբkKDo 3 )*y}4N`b2{5 L 82E7
7 8J4(&McL 5@J ˶.#HE<61gO[}4e (i)ڑ6Z;''HI-P/:\YՈm7;⬥ Ֆ(۬<{\Yݏ%>4ۜ8+b_|C zcx=дNJtBM' Jp(E7NlWij5&Nj1ݎ~8붐ULÝ=$_uT41Ý7NǏL}(N ^v+;.m a\GlU(Y-Z*bU<{ ?RDZNɟmip$/Pgou''[Pqj1Uj24w8oH0AU(YN#u>֑;?s l5#76-3d\7UI];y?
6f{3Մ0"\mT-ֺ_Kfn}Xs{cGBbtRUa79~ 1-qԅ
'iL,G] nNnk`|5i/\7TK&&^la"Ղ}y:1Jyuq&6,Vzj%ǸyMht]p̠V~ {$Wdy~ R!hi;21ԑBݝdWyXzLO?wq#2!di*ZMsa ^Q /BfxUnV 1M]cNv8%˹ LBs;=ډ0|ڃWw^Yȩo,:F;'#GUDMn[;}$(#}O*,{AX֙l{Ȧ(oｫCYg_Y=kÏDٲǔg~N M֟FmZzSwMӛn؍-AgYuJ+M:/D!29ufL %>uuAA!:i.$Adhoo6;g$2osP|.)Tk Y 9
+*MVœELBex+FCag\6A`+ +:0XwGWb`%-] Q匟5;&iKT |d
xD'r)jXF ̡͞λ("k- ig$8|ZX .LzZqYOLyʵl^x MB0?E_KUb&p
0E{Vx£5^µlʆTN7w;c'l"w?K2B.Np $
ͻFhEg-obzp85SeW@c.f18J:BuuS82Nq~"ˍi16fM
?YB5xt&35sE
{ AA&w VC Wgk♰u'|kj[']z2_Tݔ8#d %eθ1];bE=`Ud %놖2fT9 q}x6\st۟^ +U5Mk 1
4\"DK>
% i,K P^94v+Y⟰ DSMBy*Lm%ЗlB7)-q=XbR>^0?Szqɞ%t7/9(gMooa<4%1 dƜVyą3,7lKhøUfhe7\; d,!Q^HlST^,
$A1ڊItelǶȳ q2pV&@龋 A adkZnkeԥ+A2*`Qxni 2y\w83`[Ia\^4Ipu> o &a9VEmḙR>HJ K|Ud9]]R<ʚAR_FjZG8ah qm) \ubbΤ%O3jgy6wHZ}ȵt1r\pͥ!] "D
K죗* 5ߐZ: ' ' 6NWjr?C
L<#q"J>"^8i'?\T4LݿM_ȟp'4k֨. cS9Y8 ;h#㞴7"}8o7pZgKil} 6stz _C
fpї_ACG 4Θ0ؾiZ-I32y( /ɲ 3RJl1p٦IG(6pmр?[ob_W99#QpPIJwJ}=\#UUw։qK"̧5u ;}TlhY RшFAJG ]qtU:sbmx;+20%ȖݻbX1SR' CP qM?rOHi".1d>TsXJY:k8ўY6On4XK~3 3)Qk!,V<
Lr8)} 9iW(YRg̬4^h|Sv#3ZG iiMm(n>z@~AF
X ջHiUk''ʏW/Wz
WiMy.S#,N"3\]I
i(~$>O 2A'BvO(%>Z%=SX2Oz(2kݝVY@۳9=Tt/*-(`e3 =~LcЦYg{
]TPYY #*)h'XRx؍3q*F;yhïoAs P퉵&DR;X0b6h pﲭ٭)$C cufay 5 'opDJ-kdAsASQ= t *cw:l7awTSh-[P[[AvcS*5A«Q/%,yN,#kh糋kymx.
0
"V,ӴYmڸi ʑg*Z\m駧ؖ)LK6UY^ 7ۈoH4 :]pV7 (n[C Dţ Ҹn],N#ǂGpK.we6+H}XU
c#aoΚBz Y? I'Ϟ~ W-@h&W'e^5,CuMaȢ5u=w$?O<6^?cMm\
Em1.o> 1{s֭YIGةd<Ej*tՅB,mk]QWZ *)"y gӮ,? J^VٺQ; (4<§CyKo
zk+JVuuI ԩڀh TSwҰXjܶ?6h5;2 #lOGљ =&q%. 6ٞݬ}ߔeI-x\ OhYpL=}%) _CfɌl5! LTM? y|L ipP48oh$Gg[>yRgs8&sxkӑ(('[o/[7./ӯ)J-#gx3Wl묣~{ 0ab"(sIVG}}o:15OeXxu`#B1lWŴ'b*9ߵ|/(轅cq <'q\{F{JpvOwFyc$šh⧡ptl؈X/͐|..Ry_ g|71 y&H7EL70Q#RMs||?}&w_yqor$>c`] G4
Ae~GZ A q[C*-Ö 3hz=]ڟfYk*T.ǤT!'x%pCs`v% lSQ|| AF|6^wKoMMշ77 ZaR~}}"#kKĔ̺Ğjn>BEOǗi
:8k+px
v#:Z^7Em3}Ѻ43Rr+tMEgso2S;+Rr }ؘ`i[tX,6Ƨh w.ھDZaJC-/d|Akg{+B_>%H QkƂS4 Y2W؝ ds[ T +l!5Nv܈H/8 M8\vB6>.R" hВh3 <(2dtqb4F,(f*F ]
uJwI|b牞 C#!>
ON
q\D>
_3p+&o%` $ UE4 JY]-:8r(؇
U WMz68_]'ze)f"y ~#m[ZDq1ą% tzt< .4JT6_p.Izl'nm}Q%1YF $6|Zͱ|i'$8I PCpS*W3Veg8&T @g0!!/Kz앧"9 W[Ϭ}L^~)6Syc{3pF|Sv
33[YEe7b,^ Y(h,3 ooD$^+X2RëF'&,
fEBw+c-惟t BY>=z<@ψԇp2{,\ @Vh7
6۱Y(2opU6eT f*kg Y9qqK<<[I֗ 1z:J1$O7 z8 < T,(dC@/5Fp^a`C6^ H`aX'iw9htm0k/Zv407ɋx=)yh(EWQAv', כ;EnT6 E,I!"#{$u6"liE&wTq:$4ퟟAH:j3-%:~r.)wYB%dy{fCW('f#JXMо|}}etm>RQ) 9d.
4no[ٍ en[}\ꦻ)5M{- z[5H_SJq4~P0
@jK\ 0upNӫ q5)a!xܩ
i!)0fKHԶ͈}R!lQp4 مȨppk#VkwQWΕɻQX056s!4]x* +dȅY[.9m
NZhbAPAa@lH3-ЖN#o% qQvY!m@ ̹,2Ɔhy揠q[A} 'h&ИVt[˛#<}iC2^ LO?- ys>E@ jZ#3m跀hա__tE4Ć pt
:@o @c#u7'pniyi 苺 UAZy F_33Mb)S`<-x4#\ 7'uEcuF[;-zϏmSp{ܥw0bPo[9Wy cGeA :KD ƍNHz95㙶tƮQ0W ?
0p[}V }@Fr]}(^4ewLl&-ZŠBFXӫbٹn8V:h0\5z#)1x`|A:\iz *<آ%%"WN+t(Qp*4coҖV zTuCMfkc@۪CKeǬɮT5h>B(dxzmR7 .d!vr%;~f_|xHJlS%H"OlaozG
iҟ{bi+܈e v 7@ kik=s r;JUho&('.Ҝ)h[4
8ƤO R(G3~zGiw ~ P>şc
OȥDt ?ubA4,4;]
4 ϼzx(6:iYtGX.t%tj$ C% +OJ2NR}cumfl_l"%QB __WUx+'
jOƶ[Ĥ p :/K
giFձLg =SO7 R!HnX!>.6g(:6E|._'` )˿9d?dxNl&z3
/+6'U,zT Vw^d휚QYqi &ǖȃ9Fߓe滺*n6'2ۏ,1L3!_4=If}BFFzhD %g "py zDj C " G C*wX3[~iw 4`K(kUum{ <(D69ǥ`ЋvqI)n?0@ %s+{jtXUhx|P,"<jkV '[zm6b~.~ .1Ġ{@tZϖP
*ܨ)
bljGI:n s/`\,JUq>p <F|ڀKpLBIFwxo2k˖$w-dG4
7Ҋ,*mMx`]ܙĒeٶMFvdEq@-áP[ Q4v"Zb'x1HezZŤA;53^ Q]|cV;Ĩ,ȏkFʾ*&_@Bߞj]~mt[.A#>e,XQ5%Avj)hq,ߨ{\ Km_Tc
xYzjx (q
_XN5.Z!V˙:l }tkM)gܰl4Ee%%E? !4zL5Z-&pEkm
ڵr%+OmNkLvݎ*DK]S1sV.b;shIBD V'! #o!즄
l M=ؑ,( iPSl+.6'`(Tcyz&@CGBsY~ ߫զ2LL`)2jdo1n:mi ~z@:`wQB^uq˲\w%^^H x{ˢˤ 3Jz["f0(8?~iS 8lA>y j>e&_{e6]Kw5T^JtY
3^!hB 7Ñ0Q>緕|JJ.NvtC%> feCZiUlym`x\-q0ӽo&Mq)mc_C#^<ЦH_bx2pFF~ m D+}ޕ9ZsrM̽ "fs
c! !Wn_WXY\~@.4SH,,%p.L ǭItMe=SsgZp10>k ۹bc@{n 2vk@mc r}T8 \u1hC i~lvc#KAH"*`!v['A3 hҿr]*"Js"23Z|d{ ފmn1
G20BM'-A,;94crx Ć%Hcv6۹rs7RI9>bA!u-VH']tKW 8
<
ۑX@>xkJAd]Y4rqP3u_e4).\3#p{ w?SZ)0ΰ jp! H;hO&E5ʔu [~xub)nݕr_vU1 1rn5B<.cOw]"
iCEY*2Z'
|"50 f]lX_U79|)go6lj
Ibr 5f j'NzH}҉(Q
]D[o|qy)gt؈FګS굃Qn-_n
L%wNզUۻDS0,Pj66&}] !:"9}#D8C:v 5+<]$,kNb|6ACADF%Q;x* .~짭eJؾ\ Η5K:SY/\N{Hd꿙 2'eOscfVgc,݆7UzIj#> S _H"
c愽.D 5"w .p2qEw v<+KU6Y~QV# ٴ
ǒsꢐ-댦@Jy=VANjd,8 h.a A1Z͗, h| 4""zk l){w.Ƀ J?2?W\-1N=xDd JH(\4@ΑP1RkG?[Cô^X+mW2g01P"G! V E!f!o2jcr^fw[L hUL -PzL'({\aa#ٔ à)OmԢSz9> BZTI9هN Jjx;buhf'a9?՛42
:݊Gz$v<:y$d '~By]-ClpDl1k RTEY[Nse<$ТDHBN?q]n^NNQGO91IRU 3gH)xZ$ amVXw͇Cք6`ʛ:;p1$ g< [Suw6 촀
8s ,Q R;x_
xJcl1Cv:P(C O Ft {Wso"ؠ% 1G&5.2'rky*S ITxN~̜#kk&e㷪(V{Pyh1
nYz$r6)M%&ܐN}4}d?: ukJ 1qxXb.ZvX{ःث=RT.:`M J#`Oխut5)+1 F*ٴq
],s1EeQZmI*D
Xj@' 8y?ݙ jbLӐ TV̧Z V'WZ4 ZX Z%4yӶ4Cmk,4t
Ƚ HAn_vq|"~dV۟"Lv?Ԍ`lo{>E#v5O}*B{ NEO91z)%J uQ6܉ǎd1|0Q/38~8W,S ݬ?|Yb 7 !f6h
zzC#_y=NoMbŻ"KטR>YOͳrqfǗRw3e4ZHrp9uNk
3e &x_ ;& V]Ta*բh//mbrjZqofTG
hN0H0+S ̤C)dmFByZj1|PvϵO ӏbj0I`}3;{x1מk#PsҧwEe{%0QfegNP-O>~$TVx>[TZ /kPwˉ&'U
b0m]Ɛrb5ȁr#[k
q3 -l& / [0ҧHr!;Kk!ucY&g%Y|ms ]Y5SH
ygo7+x7
Ti5"S'1=hwcV!՞ wp\ fcqMFufj$C~ %&0#umֱԊ,g2OjNN5YY,jQgHУKe_Z]vjG
8p *$3۾&>_ * XW# bssOО N~)_ )qSD m;j@F8C^ЊuXäL&:)ױ=va~|$a ~Ϻt@FW2-(m}sD0'X~s>DU# i/WSCTհz \=q @1HK;1:Z_XB6
Ey ~l
;XtP4}hn2RoJz9{Knţ*N8TyBP¨4ãûjL|_W^%w Wf)5 d;WiO@Bs
3N}F}0M۾Ǒ[h j8gۉ{=G }F P1/9. ܼ
YZ